[Mon Nov 10 19:16:25.450437 2025] [autoindex:error] [pid 31523:tid 31583] [client 196.251.66.148:53787] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 11 00:50:47.878166 2025] [:error] [pid 41825:tid 41896] [client 91.92.242.56:53483] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/debug.log"] [unique_id "aRIX54r5hkwmQG_pQgACCgAAAEk"]
[Tue Nov 11 01:05:38.795808 2025] [:error] [pid 17139:tid 17158] [client 91.92.242.56:61764] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRIbYgBMXuz26L49J3gh_gAAAZE"]
[Tue Nov 11 01:12:31.093576 2025] [:error] [pid 17139:tid 17149] [client 91.92.242.56:57627] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRIc_wBMXuz26L49J3gjGAAAAYg"]
[Tue Nov 11 01:12:34.756335 2025] [:error] [pid 41825:tid 41909] [client 91.92.242.56:55909] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRIdAor5hkwmQG_pQgAJUgAAAFY"]
[Tue Nov 11 01:12:35.849087 2025] [:error] [pid 24103:tid 24117] [client 91.92.242.56:62621] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRIdA7mrGVWhZHx4njI-WwAAAgs"]
[Tue Nov 11 01:12:36.957006 2025] [:error] [pid 20886:tid 20948] [client 91.92.242.56:64779] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIdBB5bk0pxdL2ZEXEQZAAAAdc"]
[Tue Nov 11 01:12:38.112920 2025] [:error] [pid 24103:tid 24109] [client 91.92.242.56:65502] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRIdBrmrGVWhZHx4njI-XAAAAgM"]
[Tue Nov 11 01:12:39.182209 2025] [:error] [pid 14120:tid 14129] [client 91.92.242.56:63140] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIdByT8OKKuPaCGMt0c3AAAAUc"]
[Tue Nov 11 01:12:41.619777 2025] [:error] [pid 24817:tid 24827] [client 91.92.242.56:58326] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIdCeBo1Juuc7yq76DJCwAAAwg"]
[Tue Nov 11 01:12:42.723523 2025] [:error] [pid 41825:tid 41894] [client 91.92.242.56:51870] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRIdCor5hkwmQG_pQgAJWAAAAEc"]
[Tue Nov 11 01:12:43.840525 2025] [:error] [pid 20886:tid 20944] [client 91.92.242.56:58448] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRIdCx5bk0pxdL2ZEXEQbAAAAdM"]
[Tue Nov 11 06:17:02.553216 2025] [:error] [pid 33932:tid 33985] [client 114.96.103.33:37584] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRJkXpdn2hP2rg5PoHJLaQAAAVI"]
[Tue Nov 11 06:37:57.004774 2025] [:error] [pid 34002:tid 34024] [client 194.5.82.58:58361] [client 194.5.82.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRJpRdNx46Ag0u620orGXQAAABI"]
[Tue Nov 11 06:40:33.978472 2025] [proxy_fcgi:error] [pid 33932:tid 33973] [client 194.5.82.78:50767] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 06:42:41.548440 2025] [proxy_fcgi:error] [pid 57437:tid 57460] [client 194.5.82.84:24475] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 06:43:13.954401 2025] [proxy_fcgi:error] [pid 57437:tid 57463] [client 194.5.82.84:24475] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 06:43:48.387888 2025] [proxy_fcgi:error] [pid 33931:tid 33941] [client 194.5.82.80:39663] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 06:44:06.867172 2025] [autoindex:error] [pid 33931:tid 33942] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:07.081683 2025] [autoindex:error] [pid 33931:tid 33944] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/shortcode/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:07.309945 2025] [autoindex:error] [pid 33931:tid 33959] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:07.527624 2025] [autoindex:error] [pid 33931:tid 33946] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:07.737435 2025] [autoindex:error] [pid 33931:tid 33947] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/list-reusable-blocks/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:08.003102 2025] [autoindex:error] [pid 33931:tid 33961] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:08.224707 2025] [autoindex:error] [pid 33931:tid 33955] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:08.458619 2025] [autoindex:error] [pid 33931:tid 33940] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:08.686094 2025] [autoindex:error] [pid 33931:tid 33963] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-logo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:10.349132 2025] [autoindex:error] [pid 33931:tid 33960] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:13.472170 2025] [autoindex:error] [pid 33931:tid 33950] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/loginout/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:13.701484 2025] [autoindex:error] [pid 33931:tid 33952] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:15.693526 2025] [autoindex:error] [pid 33931:tid 33959] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:17.373158 2025] [autoindex:error] [pid 33931:tid 33940] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:22.837742 2025] [autoindex:error] [pid 33931:tid 33947] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:23.072555 2025] [autoindex:error] [pid 33931:tid 33953] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:23.297995 2025] [autoindex:error] [pid 33931:tid 33961] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:23.525916 2025] [autoindex:error] [pid 33931:tid 33955] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:23.771857 2025] [autoindex:error] [pid 33931:tid 33940] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:24.026384 2025] [autoindex:error] [pid 33931:tid 33962] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:24.310148 2025] [autoindex:error] [pid 33931:tid 33958] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:24.571384 2025] [autoindex:error] [pid 33931:tid 33943] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:25.024542 2025] [autoindex:error] [pid 33931:tid 33960] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/latest-comments/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:26.485635 2025] [autoindex:error] [pid 33931:tid 33946] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:28.026411 2025] [autoindex:error] [pid 33931:tid 33951] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:28.240955 2025] [autoindex:error] [pid 33931:tid 33960] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:28.426739 2025] [autoindex:error] [pid 33931:tid 33948] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/Core32/Poly1305/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:28.751694 2025] [autoindex:error] [pid 33931:tid 33945] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-author/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:28.998528 2025] [autoindex:error] [pid 33931:tid 33941] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:29.187258 2025] [autoindex:error] [pid 33931:tid 33942] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:29.395725 2025] [autoindex:error] [pid 33931:tid 33959] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/customize-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:29.884466 2025] [autoindex:error] [pid 33931:tid 33946] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:30.061878 2025] [autoindex:error] [pid 33931:tid 33956] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/block/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:31.599935 2025] [autoindex:error] [pid 33931:tid 33958] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:34.393239 2025] [autoindex:error] [pid 33931:tid 33961] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:35.916228 2025] [autoindex:error] [pid 33931:tid 33941] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:36.085920 2025] [autoindex:error] [pid 33931:tid 33959] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:36.308298 2025] [autoindex:error] [pid 33931:tid 33944] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:36.480516 2025] [autoindex:error] [pid 33931:tid 33946] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:38.131027 2025] [autoindex:error] [pid 33931:tid 33942] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:38.341479 2025] [autoindex:error] [pid 33931:tid 33954] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:38.581489 2025] [autoindex:error] [pid 33931:tid 33959] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:40.253027 2025] [autoindex:error] [pid 33931:tid 33961] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:40.489159 2025] [autoindex:error] [pid 33931:tid 33940] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:42.087076 2025] [autoindex:error] [pid 33931:tid 33955] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:42.465673 2025] [autoindex:error] [pid 33931:tid 33951] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:42.719924 2025] [autoindex:error] [pid 33931:tid 33948] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:43.161810 2025] [autoindex:error] [pid 33931:tid 33943] [client 194.5.82.80:39663] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/more/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:47.206452 2025] [autoindex:error] [pid 33931:tid 33954] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:48.674234 2025] [autoindex:error] [pid 33931:tid 33952] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:48.911744 2025] [autoindex:error] [pid 33931:tid 33955] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/swfupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:49.062134 2025] [autoindex:error] [pid 33931:tid 33963] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:50.537479 2025] [autoindex:error] [pid 33931:tid 33941] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:52.068648 2025] [autoindex:error] [pid 33931:tid 33946] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:52.382145 2025] [autoindex:error] [pid 33931:tid 33949] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:54.077585 2025] [autoindex:error] [pid 33931:tid 33948] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:56.971931 2025] [autoindex:error] [pid 33931:tid 33945] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:57.158917 2025] [autoindex:error] [pid 33931:tid 33949] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:44:59.952241 2025] [autoindex:error] [pid 33931:tid 33959] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:02.658294 2025] [autoindex:error] [pid 33931:tid 33957] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:02.863027 2025] [autoindex:error] [pid 33931:tid 33964] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:04.292495 2025] [autoindex:error] [pid 33931:tid 33961] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:04.415988 2025] [autoindex:error] [pid 33931:tid 33943] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:05.923814 2025] [autoindex:error] [pid 33931:tid 33951] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:08.537774 2025] [autoindex:error] [pid 33931:tid 33945] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:08.771577 2025] [autoindex:error] [pid 33931:tid 33947] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:11.289458 2025] [autoindex:error] [pid 33931:tid 33964] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:17.527488 2025] [autoindex:error] [pid 33931:tid 33963] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/embed/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:18.891044 2025] [autoindex:error] [pid 33931:tid 33958] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:19.029834 2025] [autoindex:error] [pid 33931:tid 33945] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:19.242761 2025] [autoindex:error] [pid 33931:tid 33947] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:21.622656 2025] [autoindex:error] [pid 33931:tid 33940] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:21.821891 2025] [autoindex:error] [pid 33931:tid 33949] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:23.434042 2025] [autoindex:error] [pid 33931:tid 33943] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:23.650994 2025] [autoindex:error] [pid 33931:tid 33954] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:25.138364 2025] [autoindex:error] [pid 33931:tid 33941] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 06:45:28.014706 2025] [autoindex:error] [pid 33931:tid 33959] [client 194.5.82.98:22345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 11 08:06:22.862631 2025] [:error] [pid 18828:tid 18853] [client 91.92.242.56:62732] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/debug.log"] [unique_id "aRJ9_hPP-hmbFD1dOrqUCQAAANY"]
[Tue Nov 11 08:24:45.776037 2025] [:error] [pid 19909:tid 19913] [client 91.92.242.56:58990] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRKCTZj4ijhm0fzOSagVTQAAAoA"]
[Tue Nov 11 08:31:26.601680 2025] [:error] [pid 18828:tid 18833] [client 91.92.242.56:64358] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRKD3hPP-hmbFD1dOrqaFwAAAMI"]
[Tue Nov 11 08:31:29.112587 2025] [:error] [pid 19436:tid 19462] [client 91.92.242.56:57198] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRKD4YDAvO-suY2r0aRtGAAAAdU"]
[Tue Nov 11 08:31:31.148576 2025] [:error] [pid 19909:tid 19929] [client 91.92.242.56:51670] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRKD45j4ijhm0fzOSagW0AAAApA"]
[Tue Nov 11 08:31:32.238380 2025] [:error] [pid 19183:tid 19195] [client 91.92.242.56:51197] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRKD5Hi-7kNSNuGGwh0x4gAAAYo"]
[Tue Nov 11 08:31:33.332546 2025] [:error] [pid 19183:tid 19204] [client 91.92.242.56:57346] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRKD5Xi-7kNSNuGGwh0x5AAAAZM"]
[Tue Nov 11 08:31:34.441904 2025] [:error] [pid 19756:tid 19776] [client 91.92.242.56:57817] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRKD5ukAxCY2xqQFnfoAjwAAAlI"]
[Tue Nov 11 08:31:35.553284 2025] [:error] [pid 19559:tid 19565] [client 91.92.242.56:53229] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRKD502A7XQJ15MEH8Ck9QAAAgI"]
[Tue Nov 11 08:31:38.790554 2025] [:error] [pid 33888:tid 33907] [client 91.92.242.56:65190] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRKD6ohA0uVBNwBRvPootgAAAJA"]
[Tue Nov 11 08:31:39.916997 2025] [:error] [pid 19436:tid 19448] [client 91.92.242.56:63674] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRKD64DAvO-suY2r0aRtHwAAAcc"]
[Tue Nov 11 09:19:26.764505 2025] [:error] [pid 53414:tid 53436] [client 159.203.117.241:38190] [client 159.203.117.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRKPHgs6pHd_Z5oc1ef46AAAARQ"]
[Tue Nov 11 09:20:28.261900 2025] [:error] [pid 59670:tid 59674] [client 167.99.53.80:33070] [client 167.99.53.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRKPXKk2Cnts0y-hpfpb9AAAAIE"]
[Tue Nov 11 10:51:34.763414 2025] [:error] [pid 59670:tid 59674] [client 205.185.120.218:63442] [client 205.185.120.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.120.218, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRKktqk2Cnts0y-hpfqJgAAAAIE"]
[Tue Nov 11 10:51:39.132282 2025] [:error] [pid 59670:tid 59692] [client 205.185.120.218:63442] [client 205.185.120.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.120.218, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRKku6k2Cnts0y-hpfqJjwAAAJM"]
[Tue Nov 11 12:07:34.291379 2025] [:error] [pid 53449:tid 53472] [client 213.209.143.137:63941] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2htpz08j5NoUSzp_r8wAAAVI"]
[Tue Nov 11 12:07:34.810644 2025] [:error] [pid 53355:tid 53378] [client 213.209.143.137:50039] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2hoB5X5A3rMc4_nD5ZQAAABQ"]
[Tue Nov 11 12:07:35.331093 2025] [:error] [pid 53355:tid 53374] [client 213.209.143.137:53446] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK2h4B5X5A3rMc4_nD5ZwAAABA"]
[Tue Nov 11 12:20:23.994011 2025] [:error] [pid 59670:tid 59685] [client 49.51.141.76:33842] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRK5h6k2Cnts0y-hpfq35wAAAIw"]
[Tue Nov 11 12:28:29.956829 2025] [:error] [pid 53449:tid 53465] [client 175.6.217.4:38810] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRK7bdpz08j5NoUSzp_0TwAAAUs"]
[Tue Nov 11 16:20:48.208934 2025] [:error] [pid 36580:tid 36655] [client 209.141.47.135:31437] [client 209.141.47.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.47.135, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRLx4JaaFQZGE3H9yOGclgAAAFE"], referer: https://www.google.com/
[Tue Nov 11 16:24:12.987730 2025] [:error] [pid 36673:tid 36682] [client 209.141.47.135:43593] [client 209.141.47.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.47.135, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRLyrCvASiSDHs9bkffUiQAAAIc"], referer: https://www.google.com/
[Tue Nov 11 18:12:15.109169 2025] [:error] [pid 36673:tid 36687] [client 139.59.72.212:55322] [client 139.59.72.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRML_yvASiSDHs9bkffxvwAAAIw"]
[Tue Nov 11 18:12:20.395161 2025] [:error] [pid 36578:tid 36605] [client 139.59.72.212:56366] [client 139.59.72.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRMMBEMi03XeylcOo5W7AwAAANY"]
[Tue Nov 11 18:15:47.293289 2025] [:error] [pid 36673:tid 36697] [client 198.98.55.213:48877] [client 198.98.55.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.55.213, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRMM0yvASiSDHs9bkffyswAAAJY"], referer: https://www.bing.com/
[Tue Nov 11 18:17:43.476448 2025] [:error] [pid 36580:tid 36652] [client 198.98.55.213:57795] [client 198.98.55.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.55.213, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRMNR5aaFQZGE3H9yOG5iwAAAE4"], referer: https://www.bing.com/
[Tue Nov 11 18:42:44.317628 2025] [:error] [pid 36673:tid 36697] [client 43.153.58.28:50196] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRMTJCvASiSDHs9bkff8pgAAAJY"]
[Tue Nov 11 18:45:40.605815 2025] [:error] [pid 36579:tid 36620] [client 157.245.54.57:31088] [client 157.245.54.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aRMT1OmuedRSntjwLw51WgAAAAk"]
[Tue Nov 11 19:19:19.526678 2025] [:error] [pid 43205:tid 43219] [client 3.255.113.129:47974] [client 3.255.113.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRMbt748SbhIkX6TjwODxQAAAQs"]
[Tue Nov 11 22:01:56.190138 2025] [:error] [pid 36580:tid 36646] [client 104.131.47.222:46738] [client 104.131.47.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRNB1JaaFQZGE3H9yOH2SwAAAEg"]
[Tue Nov 11 22:02:00.491788 2025] [:error] [pid 36578:tid 36596] [client 104.131.47.222:48280] [client 104.131.47.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRNB2EMi03XeylcOo5X2FwAAAM0"]
[Tue Nov 11 22:09:53.323877 2025] [:error] [pid 47860:tid 47893] [client 213.209.143.137:60937] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNDsaPe6bkmJWx80CzR2AAAAEI"]
[Tue Nov 11 22:09:53.848088 2025] [:error] [pid 47859:tid 47879] [client 213.209.143.137:52490] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNDsaRzLR7egYHK_4d5iAAAAA8"]
[Tue Nov 11 22:09:54.368821 2025] [:error] [pid 47859:tid 47885] [client 213.209.143.137:59968] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNDsqRzLR7egYHK_4d5jAAAABU"]
[Wed Nov 12 01:18:07.029448 2025] [:error] [pid 54701:tid 54986] [client 45.153.34.41:59020] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRNvzxf-2zu56UfbUVK6tQAAAUE"]
[Wed Nov 12 01:28:23.217354 2025] [:error] [pid 54702:tid 55032] [client 45.153.34.41:56120] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRNyN4Cgou0IW-jKFfmbbQAAAZI"]
[Wed Nov 12 04:20:39.464434 2025] [:error] [pid 57224:tid 57303] [client 213.209.143.137:51278] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aROalxs7oZ7imwCSdAnnUwAAAJM"]
[Wed Nov 12 04:20:39.965538 2025] [:error] [pid 57223:tid 57276] [client 213.209.143.137:53254] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aROalxUU8_2aS__aG8YtkQAAAFM"]
[Wed Nov 12 04:20:40.465935 2025] [:error] [pid 57312:tid 57324] [client 213.209.143.137:54990] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aROamI0cuHgB17JK5qWeWgAAAMc"]
[Wed Nov 12 04:20:40.969762 2025] [:error] [pid 57312:tid 57339] [client 213.209.143.137:56689] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aROamI0cuHgB17JK5qWeYQAAANY"]
[Wed Nov 12 05:17:42.437069 2025] [:error] [pid 32959:tid 32977] [client 104.131.47.222:53010] [client 104.131.47.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aROn9noyrq7OJfcFnDi1jgAAAQ4"]
[Wed Nov 12 05:17:45.141100 2025] [:error] [pid 32959:tid 32982] [client 104.131.47.222:36500] [client 104.131.47.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aROn-Xoyrq7OJfcFnDi1lgAAARM"]
[Wed Nov 12 07:46:38.484022 2025] [:error] [pid 57312:tid 57321] [client 223.15.245.170:54818] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRPK3o0cuHgB17JK5qX5HAAAAMQ"]
2025/11/12 09:04:45 [error] 24805#24805: *9370 connect() failed (111: Connection refused) while connecting to upstream, client: 94.23.188.220, server: hotbooksbookeeping2.com, request: "GET /store/apps/collection/cluster?gsr=SnBqGDQ4ekRnM0ZmOWxOTVVxVXJrUUExQmc9PcICUwoZChVjb20udGVlbnBhdHRpLmhkLmdvbGQQBxgIMAE4AEoqCAIQABoeVGVlbiBQYXR0aSBHb2xkLCBSdW1teSAmIFBva2VyIAAoADAAUABYAWAA:S:ANO1ljKxc6w HTTP/1.1", upstream: "http://103.4.122.14:8181/store/apps/collection/cluster?gsr=SnBqGDQ4ekRnM0ZmOWxOTVVxVXJrUUExQmc9PcICUwoZChVjb20udGVlbnBhdHRpLmhkLmdvbGQQBxgIMAE4AEoqCAIQABoeVGVlbiBQYXR0aSBHb2xkLCBSdW1teSAmIFBva2VyIAAoADAAUABYAWAA:S:ANO1ljKxc6w", host: "hotbooksbookeeping2.com"
[Wed Nov 12 12:16:46.367767 2025] [:error] [pid 60180:tid 60198] [client 107.189.30.207:33747] [client 107.189.30.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.30.207, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRQKLlhgd7ccS8EZg1rHMAAAAVA"], referer: https://duckduckgo.com/
[Wed Nov 12 12:18:09.421330 2025] [:error] [pid 60405:tid 60431] [client 107.189.30.207:16801] [client 107.189.30.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.30.207, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRQKgXMGv_mlVi6mf5p-lAAAABc"], referer: https://duckduckgo.com/
[Wed Nov 12 12:24:55.204384 2025] [:error] [pid 60097:tid 60174] [client 95.217.109.26:62950] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aRQMF8dT5oio_TbWpi8KwAAAANU"]
[Wed Nov 12 12:24:57.784393 2025] [:error] [pid 60097:tid 60170] [client 95.217.109.26:62952] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aRQMGcdT5oio_TbWpi8KwQAAANE"]
[Wed Nov 12 12:25:00.073681 2025] [:error] [pid 60095:tid 60116] [client 95.217.109.26:59142] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aRQMHHlw2elroagFF1rMVQAAAFE"]
[Wed Nov 12 12:25:02.650127 2025] [:error] [pid 60097:tid 60144] [client 95.217.109.26:59148] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aRQMHsdT5oio_TbWpi8K4gAAAME"]
[Wed Nov 12 12:25:05.070687 2025] [:error] [pid 12744:tid 12748] [client 95.217.109.26:59152] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aRQMIZ1cp_ouUvkFj0W1zAAAAQA"]
[Wed Nov 12 12:25:07.650742 2025] [:error] [pid 60097:tid 60152] [client 95.217.109.26:59158] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aRQMI8dT5oio_TbWpi8LEAAAAMU"]
[Wed Nov 12 12:25:10.077536 2025] [:error] [pid 60405:tid 60427] [client 95.217.109.26:45468] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aRQMJnMGv_mlVi6mf5qBIwAAABM"]
[Wed Nov 12 12:25:12.502157 2025] [:error] [pid 60405:tid 60432] [client 95.217.109.26:45482] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRQMKHMGv_mlVi6mf5qBJwAAABg"]
[Wed Nov 12 12:25:14.784432 2025] [:error] [pid 12744:tid 12769] [client 95.217.109.26:45492] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aRQMKp1cp_ouUvkFj0W16gAAARU"]
[Wed Nov 12 12:25:17.350727 2025] [:error] [pid 60095:tid 60100] [client 95.217.109.26:45504] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aRQMLXlw2elroagFF1rMagAAAEE"]
[Wed Nov 12 12:25:19.785203 2025] [:error] [pid 60096:tid 60143] [client 95.217.109.26:21954] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aRQMLzmzkhCvvk8DXOw1bQAAAI8"]
[Wed Nov 12 12:25:22.221861 2025] [:error] [pid 60097:tid 60168] [client 95.217.109.26:21956] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aRQMMsdT5oio_TbWpi8LNgAAAM8"]
[Wed Nov 12 12:25:24.810987 2025] [:error] [pid 12744:tid 12754] [client 95.217.109.26:21960] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aRQMNJ1cp_ouUvkFj0W2BgAAAQY"]
[Wed Nov 12 12:25:27.391165 2025] [:error] [pid 60095:tid 60115] [client 95.217.109.26:21962] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aRQMN3lw2elroagFF1rMegAAAFA"]
[Wed Nov 12 12:25:29.831455 2025] [:error] [pid 60096:tid 60131] [client 95.217.109.26:62526] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aRQMOTmzkhCvvk8DXOw1dgAAAIU"]
[Wed Nov 12 12:25:32.257423 2025] [:error] [pid 60405:tid 60416] [client 95.217.109.26:62542] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aRQMPHMGv_mlVi6mf5qBZwAAAAg"]
[Wed Nov 12 12:25:34.846776 2025] [:error] [pid 60097:tid 60176] [client 95.217.109.26:62546] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aRQMPsdT5oio_TbWpi8LRQAAANc"]
[Wed Nov 12 12:25:37.135062 2025] [:error] [pid 60097:tid 60175] [client 95.217.109.26:62562] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aRQMQcdT5oio_TbWpi8LSAAAANY"]
[Wed Nov 12 12:25:39.735422 2025] [:error] [pid 60097:tid 60168] [client 95.217.109.26:62578] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aRQMQ8dT5oio_TbWpi8LTAAAAM8"]
[Wed Nov 12 12:25:42.317479 2025] [:error] [pid 60405:tid 60432] [client 95.217.109.26:5374] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aRQMRnMGv_mlVi6mf5qBiwAAABg"]
[Wed Nov 12 14:54:55.341582 2025] [:error] [pid 60096:tid 60158] [client 107.189.30.207:35482] [client 107.189.30.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.30.207, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRQvPzmzkhCvvk8DXOxmdwAAAJg"], referer: https://www.bing.com/
[Wed Nov 12 14:55:52.491158 2025] [:error] [pid 60405:tid 60418] [client 107.189.30.207:5477] [client 107.189.30.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.30.207, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRQveHMGv_mlVi6mf5q5tQAAAAo"], referer: https://www.bing.com/
[Wed Nov 12 15:30:08.219151 2025] [:error] [pid 60405:tid 60412] [client 209.141.54.165:47125] [client 209.141.54.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.54.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRQ3gHMGv_mlVi6mf5rCkQAAAAQ"], referer: https://duckduckgo.com/
[Wed Nov 12 15:32:15.608229 2025] [:error] [pid 60097:tid 60163] [client 209.141.54.165:58925] [client 209.141.54.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.54.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRQ3_8dT5oio_TbWpi9E9QAAAMo"], referer: https://duckduckgo.com/
[Wed Nov 12 16:05:23.059361 2025] [:error] [pid 12744:tid 12751] [client 107.189.6.47:13996] [client 107.189.6.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.6.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRQ_w51cp_ouUvkFj0Ub_QAAAQM"], referer: https://www.bing.com/
[Wed Nov 12 16:05:26.176228 2025] [:error] [pid 12744:tid 12748] [client 107.189.6.47:13996] [client 107.189.6.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.6.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRQ_xp1cp_ouUvkFj0UcBAAAAQA"], referer: https://www.bing.com/
[Wed Nov 12 18:42:00.799166 2025] [:error] [pid 60096:tid 60151] [client 185.30.32.201:41662] [client 185.30.32.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRRkeDmzkhCvvk8DXOygJgAAAJM"]
[Wed Nov 12 18:42:02.725435 2025] [:error] [pid 60180:tid 60194] [client 185.30.32.201:39616] [client 185.30.32.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRRkelhgd7ccS8EZg1pB2QAAAUw"]
[Wed Nov 12 19:35:41.241194 2025] [:error] [pid 60405:tid 60426] [client 207.154.197.113:36246] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/@vite/env"] [unique_id "aRRxDXMGv_mlVi6mf5oJjQAAABI"]
[Wed Nov 12 19:35:41.981883 2025] [:error] [pid 60180:tid 60195] [client 207.154.197.113:36262] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/actuator/env"] [unique_id "aRRxDVhgd7ccS8EZg1pOQAAAAU0"]
[Wed Nov 12 19:35:42.707336 2025] [:error] [pid 23737:tid 23758] [client 207.154.197.113:36276] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRRxDhQUsVVfOZWgW_W0YwAAAYk"]
[Wed Nov 12 19:35:43.462756 2025] [:error] [pid 60405:tid 60417] [client 207.154.197.113:36288] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/server"] [unique_id "aRRxD3MGv_mlVi6mf5oJjwAAAAk"]
[Wed Nov 12 19:35:44.188803 2025] [:error] [pid 60405:tid 60411] [client 207.154.197.113:36296] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aRRxEHMGv_mlVi6mf5oJkQAAAAM"]
[Wed Nov 12 19:35:45.000529 2025] [:error] [pid 60096:tid 60134] [client 207.154.197.113:36302] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about"] [unique_id "aRRxEDmzkhCvvk8DXOyqXAAAAIg"]
[Wed Nov 12 19:35:45.798365 2025] [:error] [pid 12744:tid 12770] [client 207.154.197.113:36308] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/debug/default/view"] [unique_id "aRRxEZ1cp_ouUvkFj0VmywAAARY"]
[Wed Nov 12 19:35:46.534845 2025] [:error] [pid 60096:tid 60146] [client 207.154.197.113:36310] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/v2/_catalog"] [unique_id "aRRxEjmzkhCvvk8DXOyqYQAAAJE"]
[Wed Nov 12 19:35:47.271011 2025] [:error] [pid 60180:tid 60196] [client 207.154.197.113:36326] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRRxE1hgd7ccS8EZg1pOSwAAAU4"]
[Wed Nov 12 19:35:48.003984 2025] [:error] [pid 12744:tid 12771] [client 207.154.197.113:37702] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/server-status"] [unique_id "aRRxFJ1cp_ouUvkFj0VmzwAAARc"]
[Wed Nov 12 19:35:48.733880 2025] [:error] [pid 23737:tid 23768] [client 207.154.197.113:37708] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/login.action"] [unique_id "aRRxFBQUsVVfOZWgW_W0bQAAAZM"]
[Wed Nov 12 19:35:51.066374 2025] [:error] [pid 23737:tid 23765] [client 207.154.197.113:37728] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aRRxFxQUsVVfOZWgW_W0ewAAAZA"]
[Wed Nov 12 19:35:51.801372 2025] [:error] [pid 60097:tid 60144] [client 207.154.197.113:37738] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aRRxF8dT5oio_TbWpi-FqAAAAME"]
[Wed Nov 12 19:35:52.536722 2025] [:error] [pid 60095:tid 60106] [client 207.154.197.113:37752] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRRxGHlw2elroagFF1o8yQAAAEc"]
[Wed Nov 12 19:35:53.274214 2025] [:error] [pid 60095:tid 60117] [client 207.154.197.113:37754] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRRxGXlw2elroagFF1o8ygAAAFI"]
[Wed Nov 12 19:35:54.009346 2025] [:error] [pid 60097:tid 60177] [client 207.154.197.113:37770] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/config.json"] [unique_id "aRRxGsdT5oio_TbWpi-FrAAAANg"]
[Wed Nov 12 19:35:54.911545 2025] [:error] [pid 60180:tid 60189] [client 207.154.197.113:37786] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/telescope/requests"] [unique_id "aRRxGlhgd7ccS8EZg1pOXwAAAUc"]
[Wed Nov 12 19:35:55.914684 2025] [:error] [pid 12744:tid 12753] [client 207.154.197.113:37798] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aRRxG51cp_ouUvkFj0Vm5AAAAQU"]
[Wed Nov 12 19:35:56.870275 2025] [:error] [pid 23737:tid 23757] [client 207.154.197.113:37802] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRRxHBQUsVVfOZWgW_W0iAAAAYg"]
[Wed Nov 12 22:44:29.615121 2025] [:error] [pid 60405:tid 60419] [client 162.240.147.230:58694] [client 162.240.147.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.147.230, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRSdTXMGv_mlVi6mf5ovNgAAAAs"]
[Wed Nov 12 22:44:31.745261 2025] [:error] [pid 60096:tid 60132] [client 162.240.147.230:44964] [client 162.240.147.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.147.230, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRSdTzmzkhCvvk8DXOzOTAAAAIY"]
[Wed Nov 12 23:54:30.187737 2025] [:error] [pid 12744:tid 12749] [client 209.38.248.17:52366] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/actuator/env"] [unique_id "aRSttp1cp_ouUvkFj0WmVgAAAQE"]
[Wed Nov 12 23:54:31.739344 2025] [:error] [pid 60097:tid 60177] [client 209.38.248.17:58820] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRStt8dT5oio_TbWpi-2_QAAANg"]
[Wed Nov 12 23:54:33.179735 2025] [:error] [pid 23737:tid 23770] [client 209.38.248.17:58834] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server"] [unique_id "aRStuRQUsVVfOZWgW_UETgAAAZU"]
[Wed Nov 12 23:54:34.357952 2025] [:error] [pid 23737:tid 23756] [client 209.38.248.17:58836] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aRStuhQUsVVfOZWgW_UEUwAAAYc"]
[Wed Nov 12 23:54:35.852083 2025] [:error] [pid 60097:tid 60173] [client 209.38.248.17:58846] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/about"] [unique_id "aRStu8dT5oio_TbWpi-3AgAAANQ"]
[Wed Nov 12 23:54:37.541727 2025] [:error] [pid 60405:tid 60412] [client 209.38.248.17:58852] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/debug/default/view"] [unique_id "aRStvXMGv_mlVi6mf5o9zgAAAAQ"]
[Wed Nov 12 23:54:39.080397 2025] [:error] [pid 60096:tid 60128] [client 209.38.248.17:58866] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v2/_catalog"] [unique_id "aRStvzmzkhCvvk8DXOza_QAAAII"]
[Wed Nov 12 23:54:40.277613 2025] [:error] [pid 12744:tid 12759] [client 209.38.248.17:58870] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRStwJ1cp_ouUvkFj0WmXwAAAQs"]
[Wed Nov 12 23:54:42.121465 2025] [:error] [pid 23737:tid 23751] [client 209.38.248.17:51108] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server-status"] [unique_id "aRStwhQUsVVfOZWgW_UEWgAAAYI"]
[Wed Nov 12 23:54:43.953206 2025] [:error] [pid 12744:tid 12768] [client 209.38.248.17:51110] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/login.action"] [unique_id "aRStw51cp_ouUvkFj0WmZwAAARQ"]
[Wed Nov 12 23:54:45.615486 2025] [:error] [pid 60097:tid 60168] [client 209.38.248.17:51114] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/_all_dbs"] [unique_id "aRStxcdT5oio_TbWpi-3BwAAAM8"]
[Wed Nov 12 23:54:46.888032 2025] [:error] [pid 23737:tid 23757] [client 209.38.248.17:51128] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aRStxhQUsVVfOZWgW_UEYgAAAYg"]
[Wed Nov 12 23:54:48.575949 2025] [:error] [pid 12744:tid 12766] [client 209.38.248.17:51134] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aRStyJ1cp_ouUvkFj0WmbQAAARI"]
[Wed Nov 12 23:54:50.021884 2025] [:error] [pid 60095:tid 60108] [client 209.38.248.17:51148] [client 209.38.248.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRStynlw2elroagFF1ppLAAAAEk"]
[Wed Nov 12 23:54:51.253384 2025] [:error] [pid 23737:tid 23765] [client 209.38.248.17:39446] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRStyxQUsVVfOZWgW_UEaAAAAZA"]
[Wed Nov 12 23:54:53.068656 2025] [:error] [pid 60096:tid 60129] [client 209.38.248.17:39520] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config.json"] [unique_id "aRStzTmzkhCvvk8DXOzbBwAAAIM"]
[Wed Nov 12 23:54:54.796460 2025] [:error] [pid 60097:tid 60174] [client 209.38.248.17:39570] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/telescope/requests"] [unique_id "aRStzsdT5oio_TbWpi-3DgAAANU"]
[Wed Nov 12 23:54:56.323595 2025] [:error] [pid 23737:tid 23762] [client 209.38.248.17:39632] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aRSt0BQUsVVfOZWgW_UEcAAAAY0"]
[Wed Nov 12 23:54:57.575240 2025] [:error] [pid 12744:tid 12762] [client 209.38.248.17:39708] [client 209.38.248.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRSt0Z1cp_ouUvkFj0WmcAAAAQ4"]
[Thu Nov 13 01:59:08.303007 2025] [:error] [pid 60095:tid 60109] [client 51.77.95.18:52892] [client 51.77.95.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/one_images_usder/oned_images_user.php"] [unique_id "aRTK7Hlw2elroagFF1p-CQAAAEo"]
[Thu Nov 13 01:59:08.465156 2025] [:error] [pid 60180:tid 60199] [client 51.77.95.18:51368] [client 51.77.95.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/real-logica/ones-user.php"] [unique_id "aRTK7Fhgd7ccS8EZg1qYqwAAAVE"]
[Thu Nov 13 01:59:09.267188 2025] [:error] [pid 60180:tid 60206] [client 51.77.95.18:62516] [client 51.77.95.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/one_images_user/one_images_user.php"] [unique_id "aRTK7Vhgd7ccS8EZg1qYrgAAAVg"]
[Thu Nov 13 01:59:09.476377 2025] [:error] [pid 12744:tid 12767] [client 51.77.95.18:63020] [client 51.77.95.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/real-logic/one-user.php"] [unique_id "aRTK7Z1cp_ouUvkFj0XEvQAAARM"]
[Thu Nov 13 04:03:56.078667 2025] [:error] [pid 34091:tid 34117] [client 124.123.166.208:14300] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRToLOWbD0cVZIYD9mZDjwAAANU"]
[Thu Nov 13 04:13:02.747501 2025] [:error] [pid 51405:tid 51423] [client 124.123.166.208:13803] [client 124.123.166.208] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRTqTsgQcOoeDKJ17JeIiwAAAAw"]
[Thu Nov 13 04:14:39.351865 2025] [:error] [pid 51407:tid 51481] [client 124.123.166.208:13975] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTqr6KnD465ID-ycMJ_AwAAAJA"]
[Thu Nov 13 04:15:50.178213 2025] [:error] [pid 51406:tid 51439] [client 124.123.166.208:13869] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTq9nJ88_IXhWnPqG9VaAAAAEE"]
[Thu Nov 13 04:16:59.967851 2025] [:error] [pid 51407:tid 51488] [client 124.123.166.208:14761] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTrO6KnD465ID-ycMJ_wQAAAJc"]
[Thu Nov 13 04:18:08.869231 2025] [:error] [pid 51491:tid 51502] [client 124.123.166.208:14073] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTrgNQaME15TQuGVKTjRAAAAMY"]
[Thu Nov 13 04:19:21.965712 2025] [:error] [pid 51406:tid 51443] [client 124.123.166.208:15267] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTryXJ88_IXhWnPqG9WmgAAAEU"]
[Thu Nov 13 04:20:33.918671 2025] [:error] [pid 51491:tid 51511] [client 124.123.166.208:14811] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTsEdQaME15TQuGVKTkHQAAAM8"]
[Thu Nov 13 04:21:55.239183 2025] [:error] [pid 51407:tid 51480] [client 124.123.166.208:13795] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTsY6KnD465ID-ycMKBjgAAAI8"]
[Thu Nov 13 04:23:14.425085 2025] [:error] [pid 51407:tid 51487] [client 124.123.166.208:13608] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTssqKnD465ID-ycMKCAgAAAJY"]
[Thu Nov 13 04:24:50.192279 2025] [:error] [pid 51405:tid 51412] [client 124.123.166.208:15249] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTtEsgQcOoeDKJ17JeMewAAAAE"]
[Thu Nov 13 04:26:22.875551 2025] [:error] [pid 18960:tid 18963] [client 124.123.166.208:14533] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTtbovOP-uT_KFAcQNdFQAAAQE"]
[Thu Nov 13 04:27:42.954103 2025] [:error] [pid 51491:tid 51496] [client 124.123.166.208:14491] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTtvtQaME15TQuGVKToLwAAAMA"]
[Thu Nov 13 04:28:56.769698 2025] [:error] [pid 51405:tid 51422] [client 124.123.166.208:14590] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTuCMgQcOoeDKJ17JeOkgAAAAs"]
[Thu Nov 13 04:30:15.691155 2025] [:error] [pid 51407:tid 51478] [client 124.123.166.208:14173] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTuV6KnD465ID-ycMKFZQAAAI0"]
[Thu Nov 13 04:31:33.061260 2025] [:error] [pid 51406:tid 51448] [client 124.123.166.208:13904] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTupXJ88_IXhWnPqG9bkwAAAEo"]
[Thu Nov 13 04:32:58.508553 2025] [:error] [pid 51405:tid 51428] [client 124.123.166.208:15239] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTu-sgQcOoeDKJ17JeQUwAAABE"]
[Thu Nov 13 04:34:26.031755 2025] [:error] [pid 51406:tid 51462] [client 124.123.166.208:14474] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTvUnJ88_IXhWnPqG9cowAAAFg"]
[Thu Nov 13 04:35:39.383263 2025] [:error] [pid 51405:tid 51432] [client 124.123.166.208:14798] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTvm8gQcOoeDKJ17JeRdgAAABU"]
[Thu Nov 13 04:36:50.820443 2025] [:error] [pid 51407:tid 51469] [client 124.123.166.208:14221] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTv4qKnD465ID-ycMKIRAAAAIQ"]
[Thu Nov 13 04:38:04.593495 2025] [:error] [pid 51491:tid 51497] [client 124.123.166.208:13405] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTwLNQaME15TQuGVKTudgAAAME"]
[Thu Nov 13 04:39:09.680681 2025] [:error] [pid 51406:tid 51457] [client 124.123.166.208:14763] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTwbXJ88_IXhWnPqG9exgAAAFM"]
[Thu Nov 13 04:40:25.323270 2025] [:error] [pid 51491:tid 51520] [client 124.123.166.208:13486] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTwudQaME15TQuGVKTvdgAAANg"]
[Thu Nov 13 04:41:31.198719 2025] [:error] [pid 51406:tid 51446] [client 124.123.166.208:14562] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTw-3J88_IXhWnPqG9fuAAAAEg"]
[Thu Nov 13 04:42:48.153768 2025] [:error] [pid 51405:tid 51419] [client 124.123.166.208:13847] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxSMgQcOoeDKJ17JeUwwAAAAg"]
[Thu Nov 13 04:43:19.489196 2025] [:error] [pid 51406:tid 51439] [client 158.220.122.154:52580] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxZ3J88_IXhWnPqG9gjAAAAEE"], referer: binance.com
[Thu Nov 13 04:43:25.389676 2025] [:error] [pid 18960:tid 18967] [client 158.220.122.154:49302] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxbYvOP-uT_KFAcQNlngAAAQU"]
[Thu Nov 13 04:43:27.312848 2025] [:error] [pid 51406:tid 51439] [client 158.220.122.154:54022] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxb3J88_IXhWnPqG9gnwAAAEE"]
[Thu Nov 13 04:43:29.195230 2025] [:error] [pid 51407:tid 51479] [client 158.220.122.154:53049] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxcaKnD465ID-ycMKK3wAAAI4"]
[Thu Nov 13 04:43:31.130795 2025] [:error] [pid 51406:tid 51445] [client 158.220.122.154:64397] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxc3J88_IXhWnPqG9gqQAAAEc"]
[Thu Nov 13 04:43:33.080028 2025] [:error] [pid 51405:tid 51412] [client 158.220.122.154:62817] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxdcgQcOoeDKJ17JeVJwAAAAE"]
[Thu Nov 13 04:43:34.985959 2025] [:error] [pid 51407:tid 51480] [client 158.220.122.154:62695] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxdqKnD465ID-ycMKK7AAAAI8"]
[Thu Nov 13 04:43:36.832605 2025] [:error] [pid 51491:tid 51498] [client 158.220.122.154:54241] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxeNQaME15TQuGVKTx8QAAAMI"]
[Thu Nov 13 04:43:38.684484 2025] [:error] [pid 51407:tid 51465] [client 158.220.122.154:59345] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxeqKnD465ID-ycMKK8gAAAIA"]
[Thu Nov 13 04:43:40.592183 2025] [:error] [pid 51405:tid 51423] [client 158.220.122.154:60584] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxfMgQcOoeDKJ17JeVMwAAAAw"]
[Thu Nov 13 04:43:42.588154 2025] [:error] [pid 51405:tid 51412] [client 158.220.122.154:56265] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxfsgQcOoeDKJ17JeVNAAAAAE"]
[Thu Nov 13 04:43:44.455138 2025] [:error] [pid 18960:tid 18962] [client 158.220.122.154:61746] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxgIvOP-uT_KFAcQNlwQAAAQA"]
[Thu Nov 13 04:43:46.328224 2025] [:error] [pid 51491:tid 51504] [client 158.220.122.154:61254] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxgtQaME15TQuGVKTyGgAAAMg"]
[Thu Nov 13 04:43:48.193146 2025] [:error] [pid 51407:tid 51470] [client 158.220.122.154:63629] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxhKKnD465ID-ycMKLAgAAAIU"]
[Thu Nov 13 04:43:50.178191 2025] [:error] [pid 18960:tid 18962] [client 158.220.122.154:59920] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxhovOP-uT_KFAcQNl2QAAAQA"]
[Thu Nov 13 04:43:52.051140 2025] [:error] [pid 51491:tid 51512] [client 158.220.122.154:51304] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxiNQaME15TQuGVKTyJgAAANA"]
[Thu Nov 13 04:43:53.918252 2025] [:error] [pid 51491:tid 51509] [client 158.220.122.154:63635] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxidQaME15TQuGVKTyLAAAAM0"]
[Thu Nov 13 04:43:55.787153 2025] [:error] [pid 51405:tid 51430] [client 158.220.122.154:58808] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxi8gQcOoeDKJ17JeVRAAAABM"]
[Thu Nov 13 04:43:57.777158 2025] [:error] [pid 51405:tid 51429] [client 158.220.122.154:59412] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxjcgQcOoeDKJ17JeVTAAAABI"]
[Thu Nov 13 04:43:59.674203 2025] [:error] [pid 51407:tid 51471] [client 158.220.122.154:58862] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxj6KnD465ID-ycMKLHAAAAIY"]
[Thu Nov 13 04:44:01.743147 2025] [:error] [pid 51406:tid 51447] [client 158.220.122.154:61170] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxkXJ88_IXhWnPqG9g2QAAAEk"]
[Thu Nov 13 04:44:03.732086 2025] [:error] [pid 51405:tid 51429] [client 158.220.122.154:62393] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxk8gQcOoeDKJ17JeVXgAAABI"]
[Thu Nov 13 04:44:03.732210 2025] [:error] [pid 51405:tid 51429] [client 158.220.122.154:62393] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 6"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxk8gQcOoeDKJ17JeVXgAAABI"]
[Thu Nov 13 04:44:04.776151 2025] [:error] [pid 51405:tid 51418] [client 158.220.122.154:50265] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxlMgQcOoeDKJ17JeVZAAAAAc"]
[Thu Nov 13 04:44:06.754630 2025] [:error] [pid 51491:tid 51512] [client 158.220.122.154:58045] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxltQaME15TQuGVKTyZgAAANA"]
[Thu Nov 13 04:44:08.771859 2025] [:error] [pid 51406:tid 51458] [client 158.220.122.154:50073] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxmHJ88_IXhWnPqG9g7QAAAFQ"]
[Thu Nov 13 04:44:08.772007 2025] [:error] [pid 51406:tid 51458] [client 158.220.122.154:50073] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 7"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxmHJ88_IXhWnPqG9g7QAAAFQ"]
[Thu Nov 13 04:44:09.765112 2025] [:error] [pid 51406:tid 51457] [client 158.220.122.154:50079] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxmXJ88_IXhWnPqG9g8gAAAFM"]
[Thu Nov 13 04:44:09.765233 2025] [:error] [pid 51406:tid 51457] [client 158.220.122.154:50079] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 10"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxmXJ88_IXhWnPqG9g8gAAAFM"]
[Thu Nov 13 04:44:10.794881 2025] [:error] [pid 51491:tid 51501] [client 158.220.122.154:58361] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxmtQaME15TQuGVKTyhAAAAMU"]
[Thu Nov 13 04:44:10.795105 2025] [:error] [pid 51491:tid 51501] [client 158.220.122.154:58361] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 8"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxmtQaME15TQuGVKTyhAAAAMU"]
[Thu Nov 13 04:44:11.843203 2025] [:error] [pid 51407:tid 51485] [client 158.220.122.154:54469] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxm6KnD465ID-ycMKLQwAAAJQ"]
[Thu Nov 13 04:44:13.766018 2025] [:error] [pid 51406:tid 51442] [client 158.220.122.154:52394] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxnXJ88_IXhWnPqG9g_QAAAEQ"]
[Thu Nov 13 04:44:15.627259 2025] [:error] [pid 18960:tid 18984] [client 158.220.122.154:57891] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxn4vOP-uT_KFAcQNmIAAAARY"]
[Thu Nov 13 04:44:15.627461 2025] [:error] [pid 18960:tid 18984] [client 158.220.122.154:57891] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 8"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxn4vOP-uT_KFAcQNmIAAAARY"]
[Thu Nov 13 04:44:16.673170 2025] [:error] [pid 51491:tid 51503] [client 158.220.122.154:56954] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxoNQaME15TQuGVKTylQAAAMc"]
[Thu Nov 13 04:44:18.567905 2025] [:error] [pid 18960:tid 18965] [client 158.220.122.154:59357] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxoovOP-uT_KFAcQNmIQAAAQM"]
[Thu Nov 13 04:44:18.568020 2025] [:error] [pid 18960:tid 18965] [client 158.220.122.154:59357] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 7"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxoovOP-uT_KFAcQNmIQAAAQM"]
[Thu Nov 13 04:44:19.564432 2025] [:error] [pid 51405:tid 51431] [client 158.220.122.154:51762] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxo8gQcOoeDKJ17JeViwAAABQ"]
[Thu Nov 13 04:44:19.564593 2025] [:error] [pid 51405:tid 51431] [client 158.220.122.154:51762] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 7"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxo8gQcOoeDKJ17JeViwAAABQ"]
[Thu Nov 13 04:44:20.538907 2025] [:error] [pid 51405:tid 51411] [client 158.220.122.154:52162] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxpMgQcOoeDKJ17JeVjgAAAAA"]
[Thu Nov 13 04:44:20.539108 2025] [:error] [pid 51405:tid 51411] [client 158.220.122.154:52162] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 8"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxpMgQcOoeDKJ17JeVjgAAAAA"]
[Thu Nov 13 04:44:21.572806 2025] [:error] [pid 18960:tid 18965] [client 158.220.122.154:65205] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxpYvOP-uT_KFAcQNmLQAAAQM"]
[Thu Nov 13 04:44:21.572933 2025] [:error] [pid 18960:tid 18965] [client 158.220.122.154:65205] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 7"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxpYvOP-uT_KFAcQNmLQAAAQM"]
[Thu Nov 13 04:44:22.595889 2025] [:error] [pid 51407:tid 51483] [client 158.220.122.154:51838] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxpqKnD465ID-ycMKLWQAAAJI"]
[Thu Nov 13 04:44:22.596151 2025] [:error] [pid 51407:tid 51483] [client 158.220.122.154:51838] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 6"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxpqKnD465ID-ycMKLWQAAAJI"]
[Thu Nov 13 04:44:23.661871 2025] [:error] [pid 51407:tid 51474] [client 158.220.122.154:59891] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxp6KnD465ID-ycMKLWgAAAIk"]
[Thu Nov 13 04:44:23.662055 2025] [:error] [pid 51407:tid 51474] [client 158.220.122.154:59891] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 7"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxp6KnD465ID-ycMKLWgAAAIk"]
[Thu Nov 13 04:44:24.766434 2025] [:error] [pid 51491:tid 51520] [client 158.220.122.154:50146] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxqNQaME15TQuGVKTyrwAAANg"]
[Thu Nov 13 04:44:24.766562 2025] [:error] [pid 51491:tid 51520] [client 158.220.122.154:50146] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 8"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxqNQaME15TQuGVKTyrwAAANg"]
[Thu Nov 13 04:44:25.800594 2025] [:error] [pid 51491:tid 51496] [client 158.220.122.154:53642] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxqdQaME15TQuGVKTytQAAAMA"]
[Thu Nov 13 04:44:25.800775 2025] [:error] [pid 51491:tid 51496] [client 158.220.122.154:53642] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 9"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxqdQaME15TQuGVKTytQAAAMA"]
[Thu Nov 13 04:44:26.794931 2025] [:error] [pid 18960:tid 18971] [client 158.220.122.154:58165] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxqovOP-uT_KFAcQNmOgAAAQk"]
[Thu Nov 13 04:44:26.795127 2025] [:error] [pid 18960:tid 18971] [client 158.220.122.154:58165] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 6"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxqovOP-uT_KFAcQNmOgAAAQk"]
[Thu Nov 13 04:44:27.808427 2025] [:error] [pid 18960:tid 18976] [client 158.220.122.154:50217] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxq4vOP-uT_KFAcQNmPAAAAQ4"]
[Thu Nov 13 04:44:27.808536 2025] [:error] [pid 18960:tid 18976] [client 158.220.122.154:50217] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 8"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxq4vOP-uT_KFAcQNmPAAAAQ4"]
[Thu Nov 13 04:44:28.802614 2025] [:error] [pid 51405:tid 51422] [client 158.220.122.154:52770] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxrMgQcOoeDKJ17JeVnwAAAAs"]
[Thu Nov 13 04:44:28.802734 2025] [:error] [pid 51405:tid 51422] [client 158.220.122.154:52770] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 6"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxrMgQcOoeDKJ17JeVnwAAAAs"]
[Thu Nov 13 04:44:29.857436 2025] [:error] [pid 51491:tid 51520] [client 158.220.122.154:55279] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxrdQaME15TQuGVKTywgAAANg"]
[Thu Nov 13 04:44:31.688780 2025] [:error] [pid 51405:tid 51434] [client 158.220.122.154:57405] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxr8gQcOoeDKJ17JeVqQAAABc"]
[Thu Nov 13 04:44:31.688896 2025] [:error] [pid 51405:tid 51434] [client 158.220.122.154:57405] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 10"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxr8gQcOoeDKJ17JeVqQAAABc"]
[Thu Nov 13 04:44:32.799579 2025] [:error] [pid 51407:tid 51487] [client 158.220.122.154:55237] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxsKKnD465ID-ycMKLbwAAAJY"]
[Thu Nov 13 04:44:32.799718 2025] [:error] [pid 51407:tid 51487] [client 158.220.122.154:55237] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 8"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxsKKnD465ID-ycMKLbwAAAJY"]
[Thu Nov 13 04:44:33.818512 2025] [:error] [pid 51407:tid 51471] [client 124.123.166.208:13811] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxsaKnD465ID-ycMKLcgAAAIY"]
[Thu Nov 13 04:44:33.872225 2025] [:error] [pid 51491:tid 51508] [client 158.220.122.154:61958] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxsdQaME15TQuGVKTyywAAAMw"]
[Thu Nov 13 04:44:33.872357 2025] [:error] [pid 51491:tid 51508] [client 158.220.122.154:61958] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 11"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxsdQaME15TQuGVKTyywAAAMw"]
[Thu Nov 13 04:44:34.894850 2025] [:error] [pid 51491:tid 51496] [client 158.220.122.154:62161] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxstQaME15TQuGVKTyzwAAAMA"]
[Thu Nov 13 04:44:34.895009 2025] [:error] [pid 51491:tid 51496] [client 158.220.122.154:62161] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 9"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxstQaME15TQuGVKTyzwAAAMA"]
[Thu Nov 13 04:44:35.914509 2025] [:error] [pid 18960:tid 18968] [client 158.220.122.154:49427] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxs4vOP-uT_KFAcQNmUgAAAQY"]
[Thu Nov 13 04:44:35.914649 2025] [:error] [pid 18960:tid 18968] [client 158.220.122.154:49427] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 12"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxs4vOP-uT_KFAcQNmUgAAAQY"]
[Thu Nov 13 04:44:36.911358 2025] [:error] [pid 51406:tid 51459] [client 158.220.122.154:51342] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxtHJ88_IXhWnPqG9hLQAAAFU"]
[Thu Nov 13 04:44:36.911474 2025] [:error] [pid 51406:tid 51459] [client 158.220.122.154:51342] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 11"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxtHJ88_IXhWnPqG9hLQAAAFU"]
[Thu Nov 13 04:44:37.910393 2025] [:error] [pid 51405:tid 51421] [client 158.220.122.154:65172] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxtcgQcOoeDKJ17JeVwAAAAAo"]
[Thu Nov 13 04:44:37.910603 2025] [:error] [pid 51405:tid 51421] [client 158.220.122.154:65172] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 13"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxtcgQcOoeDKJ17JeVwAAAAAo"]
[Thu Nov 13 04:44:38.978372 2025] [:error] [pid 51406:tid 51443] [client 158.220.122.154:53167] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxtnJ88_IXhWnPqG9hMwAAAEU"]
[Thu Nov 13 04:44:38.978531 2025] [:error] [pid 51406:tid 51443] [client 158.220.122.154:53167] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 11"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxtnJ88_IXhWnPqG9hMwAAAEU"]
[Thu Nov 13 04:44:40.014625 2025] [:error] [pid 51405:tid 51425] [client 158.220.122.154:55491] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxuMgQcOoeDKJ17JeVwwAAAA4"]
[Thu Nov 13 04:44:40.014733 2025] [:error] [pid 51405:tid 51425] [client 158.220.122.154:55491] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 10"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxuMgQcOoeDKJ17JeVwwAAAA4"]
[Thu Nov 13 04:44:41.045843 2025] [:error] [pid 51406:tid 51441] [client 158.220.122.154:49883] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxuXJ88_IXhWnPqG9hNwAAAEM"]
[Thu Nov 13 04:44:41.046102 2025] [:error] [pid 51406:tid 51441] [client 158.220.122.154:49883] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 13"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxuXJ88_IXhWnPqG9hNwAAAEM"]
[Thu Nov 13 04:44:42.122370 2025] [:error] [pid 51491:tid 51497] [client 158.220.122.154:59990] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxutQaME15TQuGVKTy7QAAAME"]
[Thu Nov 13 04:44:42.122519 2025] [:error] [pid 51491:tid 51497] [client 158.220.122.154:59990] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 11"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxutQaME15TQuGVKTy7QAAAME"]
[Thu Nov 13 04:44:43.156314 2025] [:error] [pid 18960:tid 18980] [client 158.220.122.154:64092] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxu4vOP-uT_KFAcQNmYwAAARI"]
[Thu Nov 13 04:44:43.156455 2025] [:error] [pid 18960:tid 18980] [client 158.220.122.154:64092] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 10"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxu4vOP-uT_KFAcQNmYwAAARI"]
[Thu Nov 13 04:44:44.228879 2025] [:error] [pid 51405:tid 51434] [client 158.220.122.154:62500] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxvMgQcOoeDKJ17JeVzgAAABc"]
[Thu Nov 13 04:44:44.229048 2025] [:error] [pid 51405:tid 51434] [client 158.220.122.154:62500] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 11"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxvMgQcOoeDKJ17JeVzgAAABc"]
[Thu Nov 13 04:44:45.227723 2025] [:error] [pid 51405:tid 51413] [client 158.220.122.154:64671] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxvcgQcOoeDKJ17JeV1AAAAAI"]
[Thu Nov 13 04:44:45.227848 2025] [:error] [pid 51405:tid 51413] [client 158.220.122.154:64671] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 10"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxvcgQcOoeDKJ17JeV1AAAAAI"]
[Thu Nov 13 04:44:46.299453 2025] [:error] [pid 18960:tid 18968] [client 158.220.122.154:64618] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxvovOP-uT_KFAcQNmbgAAAQY"]
[Thu Nov 13 04:44:46.299568 2025] [:error] [pid 18960:tid 18968] [client 158.220.122.154:64618] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 11"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxvovOP-uT_KFAcQNmbgAAAQY"]
[Thu Nov 13 04:44:47.353722 2025] [:error] [pid 51406:tid 51460] [client 158.220.122.154:57202] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxv3J88_IXhWnPqG9hSwAAAFY"]
[Thu Nov 13 04:44:47.353887 2025] [:error] [pid 51406:tid 51460] [client 158.220.122.154:57202] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 11"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxv3J88_IXhWnPqG9hSwAAAFY"]
[Thu Nov 13 04:44:48.412671 2025] [:error] [pid 51407:tid 51474] [client 158.220.122.154:64670] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxwKKnD465ID-ycMKLiQAAAIk"]
[Thu Nov 13 04:44:48.412881 2025] [:error] [pid 51407:tid 51474] [client 158.220.122.154:64670] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 13"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxwKKnD465ID-ycMKLiQAAAIk"]
[Thu Nov 13 04:44:49.471317 2025] [:error] [pid 51406:tid 51455] [client 158.220.122.154:51852] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxwXJ88_IXhWnPqG9hUQAAAFE"]
[Thu Nov 13 04:44:49.471466 2025] [:error] [pid 51406:tid 51455] [client 158.220.122.154:51852] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 11"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxwXJ88_IXhWnPqG9hUQAAAFE"]
[Thu Nov 13 04:44:50.568002 2025] [:error] [pid 51407:tid 51468] [client 158.220.122.154:59568] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxwqKnD465ID-ycMKLjAAAAIM"]
[Thu Nov 13 04:44:50.568178 2025] [:error] [pid 51407:tid 51468] [client 158.220.122.154:59568] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 9"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxwqKnD465ID-ycMKLjAAAAIM"]
[Thu Nov 13 04:44:51.612784 2025] [:error] [pid 51407:tid 51467] [client 158.220.122.154:65039] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxw6KnD465ID-ycMKLkQAAAII"]
[Thu Nov 13 04:44:51.612924 2025] [:error] [pid 51407:tid 51467] [client 158.220.122.154:65039] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 13"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxw6KnD465ID-ycMKLkQAAAII"]
[Thu Nov 13 04:44:52.593131 2025] [:error] [pid 51407:tid 51477] [client 158.220.122.154:62048] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxxKKnD465ID-ycMKLlwAAAIw"]
[Thu Nov 13 04:44:52.593249 2025] [:error] [pid 51407:tid 51477] [client 158.220.122.154:62048] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 13"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxxKKnD465ID-ycMKLlwAAAIw"]
[Thu Nov 13 04:44:53.585609 2025] [:error] [pid 51407:tid 51479] [client 158.220.122.154:53997] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxxaKnD465ID-ycMKLngAAAI4"]
[Thu Nov 13 04:44:53.585741 2025] [:error] [pid 51407:tid 51479] [client 158.220.122.154:53997] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 14"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxxaKnD465ID-ycMKLngAAAI4"]
[Thu Nov 13 04:44:54.793504 2025] [:error] [pid 51491:tid 51516] [client 158.220.122.154:65079] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxxtQaME15TQuGVKTzCQAAANQ"]
[Thu Nov 13 04:44:54.793615 2025] [:error] [pid 51491:tid 51516] [client 158.220.122.154:65079] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 14"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxxtQaME15TQuGVKTzCQAAANQ"]
[Thu Nov 13 04:44:55.843933 2025] [:error] [pid 51406:tid 51445] [client 158.220.122.154:53981] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxx3J88_IXhWnPqG9haAAAAEc"]
[Thu Nov 13 04:44:55.844087 2025] [:error] [pid 51406:tid 51445] [client 158.220.122.154:53981] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 7"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxx3J88_IXhWnPqG9haAAAAEc"]
[Thu Nov 13 04:44:56.843120 2025] [:error] [pid 51491:tid 51512] [client 158.220.122.154:57318] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxyNQaME15TQuGVKTzFQAAANA"]
[Thu Nov 13 04:44:56.843289 2025] [:error] [pid 51491:tid 51512] [client 158.220.122.154:57318] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 16"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxyNQaME15TQuGVKTzFQAAANA"]
[Thu Nov 13 04:44:57.872916 2025] [:error] [pid 51405:tid 51432] [client 158.220.122.154:53776] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxycgQcOoeDKJ17JeV7AAAABU"]
[Thu Nov 13 04:44:57.873084 2025] [:error] [pid 51405:tid 51432] [client 158.220.122.154:53776] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 12"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxycgQcOoeDKJ17JeV7AAAABU"]
[Thu Nov 13 04:44:58.925838 2025] [:error] [pid 51405:tid 51420] [client 158.220.122.154:49762] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxysgQcOoeDKJ17JeV7wAAAAk"]
[Thu Nov 13 04:44:58.925994 2025] [:error] [pid 51405:tid 51420] [client 158.220.122.154:49762] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 8"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxysgQcOoeDKJ17JeV7wAAAAk"]
[Thu Nov 13 04:44:59.975858 2025] [:error] [pid 51406:tid 51442] [client 158.220.122.154:50365] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxy3J88_IXhWnPqG9hcAAAAEQ"]
[Thu Nov 13 04:44:59.975964 2025] [:error] [pid 51406:tid 51442] [client 158.220.122.154:50365] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 9"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxy3J88_IXhWnPqG9hcAAAAEQ"]
[Thu Nov 13 04:45:00.988939 2025] [:error] [pid 51405:tid 51412] [client 158.220.122.154:55697] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxzMgQcOoeDKJ17JeV-AAAAAE"]
[Thu Nov 13 04:45:00.989089 2025] [:error] [pid 51405:tid 51412] [client 158.220.122.154:55697] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 9"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxzMgQcOoeDKJ17JeV-AAAAAE"]
[Thu Nov 13 04:45:02.167746 2025] [:error] [pid 18960:tid 18963] [client 158.220.122.154:50661] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxzovOP-uT_KFAcQNmkwAAAQE"]
[Thu Nov 13 04:45:02.167883 2025] [:error] [pid 18960:tid 18963] [client 158.220.122.154:50661] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 14"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxzovOP-uT_KFAcQNmkwAAAQE"]
[Thu Nov 13 04:45:03.302984 2025] [:error] [pid 51491:tid 51496] [client 158.220.122.154:63096] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxz9QaME15TQuGVKTzIAAAAMA"]
[Thu Nov 13 04:45:03.303217 2025] [:error] [pid 51491:tid 51496] [client 158.220.122.154:63096] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 14"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTxz9QaME15TQuGVKTzIAAAAMA"]
[Thu Nov 13 04:45:04.659610 2025] [:error] [pid 51405:tid 51431] [client 158.220.122.154:57335] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx0MgQcOoeDKJ17JeWDgAAABQ"]
[Thu Nov 13 04:45:04.659674 2025] [:error] [pid 51405:tid 51431] [client 158.220.122.154:57335] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 13"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx0MgQcOoeDKJ17JeWDgAAABQ"]
[Thu Nov 13 04:45:05.986448 2025] [:error] [pid 51407:tid 51486] [client 158.220.122.154:57336] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx0aKnD465ID-ycMKLvAAAAJU"]
[Thu Nov 13 04:45:05.986566 2025] [:error] [pid 51407:tid 51486] [client 158.220.122.154:57336] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 16"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx0aKnD465ID-ycMKLvAAAAJU"]
[Thu Nov 13 04:45:07.050904 2025] [:error] [pid 51405:tid 51412] [client 158.220.122.154:57496] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx08gQcOoeDKJ17JeWEgAAAAE"]
[Thu Nov 13 04:45:07.051074 2025] [:error] [pid 51405:tid 51412] [client 158.220.122.154:57496] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 13"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx08gQcOoeDKJ17JeWEgAAAAE"]
[Thu Nov 13 04:45:08.181135 2025] [:error] [pid 51407:tid 51469] [client 158.220.122.154:54826] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx1KKnD465ID-ycMKLvwAAAIQ"]
[Thu Nov 13 04:45:08.181289 2025] [:error] [pid 51407:tid 51469] [client 158.220.122.154:54826] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 17"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx1KKnD465ID-ycMKLvwAAAIQ"]
[Thu Nov 13 04:45:09.304042 2025] [:error] [pid 51491:tid 51508] [client 158.220.122.154:62231] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx1dQaME15TQuGVKTzMwAAAMw"]
[Thu Nov 13 04:45:09.304205 2025] [:error] [pid 51491:tid 51508] [client 158.220.122.154:62231] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 13"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx1dQaME15TQuGVKTzMwAAAMw"]
[Thu Nov 13 04:45:10.364952 2025] [:error] [pid 51405:tid 51428] [client 158.220.122.154:51563] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx1sgQcOoeDKJ17JeWGgAAABE"]
[Thu Nov 13 04:45:10.365118 2025] [:error] [pid 51405:tid 51428] [client 158.220.122.154:51563] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 15"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx1sgQcOoeDKJ17JeWGgAAABE"]
[Thu Nov 13 04:45:11.426158 2025] [:error] [pid 51491:tid 51520] [client 158.220.122.154:60293] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx19QaME15TQuGVKTzOQAAANg"]
[Thu Nov 13 04:45:11.426288 2025] [:error] [pid 51491:tid 51520] [client 158.220.122.154:60293] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 17"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx19QaME15TQuGVKTzOQAAANg"]
[Thu Nov 13 04:45:12.471424 2025] [:error] [pid 51407:tid 51481] [client 158.220.122.154:63498] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx2KKnD465ID-ycMKLzAAAAJA"]
[Thu Nov 13 04:45:12.471555 2025] [:error] [pid 51407:tid 51481] [client 158.220.122.154:63498] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 17"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx2KKnD465ID-ycMKLzAAAAJA"]
[Thu Nov 13 04:45:13.521344 2025] [:error] [pid 51405:tid 51432] [client 158.220.122.154:55821] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx2cgQcOoeDKJ17JeWIwAAABU"]
[Thu Nov 13 04:45:13.521478 2025] [:error] [pid 51405:tid 51432] [client 158.220.122.154:55821] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 22"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx2cgQcOoeDKJ17JeWIwAAABU"]
[Thu Nov 13 04:45:14.547357 2025] [:error] [pid 51406:tid 51446] [client 158.220.122.154:59787] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx2nJ88_IXhWnPqG9hkQAAAEg"]
[Thu Nov 13 04:45:14.547495 2025] [:error] [pid 51406:tid 51446] [client 158.220.122.154:59787] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 16"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx2nJ88_IXhWnPqG9hkQAAAEg"]
[Thu Nov 13 04:45:15.610110 2025] [:error] [pid 51406:tid 51460] [client 158.220.122.154:62176] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx23J88_IXhWnPqG9hkgAAAFY"]
[Thu Nov 13 04:45:15.610257 2025] [:error] [pid 51406:tid 51460] [client 158.220.122.154:62176] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 11"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx23J88_IXhWnPqG9hkgAAAFY"]
[Thu Nov 13 04:45:16.676282 2025] [:error] [pid 51491:tid 51512] [client 158.220.122.154:53537] [client 158.220.122.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.122.154, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx3NQaME15TQuGVKTzSQAAANA"]
[Thu Nov 13 04:45:16.676414 2025] [:error] [pid 51491:tid 51512] [client 158.220.122.154:53537] [client 158.220.122.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 158.220.122.154, counter = 20"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx3NQaME15TQuGVKTzSQAAANA"]
[Thu Nov 13 04:45:37.119605 2025] [:error] [pid 51406:tid 51441] [client 124.123.166.208:15318] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTx8XJ88_IXhWnPqG9hxwAAAEM"]
[Thu Nov 13 04:46:34.706523 2025] [:error] [pid 18960:tid 18978] [client 124.123.166.208:13344] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTyKovOP-uT_KFAcQNoBQAAARA"]
[Thu Nov 13 04:47:37.018300 2025] [:error] [pid 18960:tid 18977] [client 124.123.166.208:13962] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTyaYvOP-uT_KFAcQNonwAAAQ8"]
[Thu Nov 13 04:48:41.585455 2025] [:error] [pid 51407:tid 51470] [client 124.123.166.208:14620] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTyqaKnD465ID-ycMKNYQAAAIU"]
[Thu Nov 13 04:49:46.449569 2025] [:error] [pid 51491:tid 51501] [client 124.123.166.208:15119] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTy6tQaME15TQuGVKT2VAAAAMU"]
[Thu Nov 13 04:50:50.092131 2025] [:error] [pid 51407:tid 51466] [client 124.123.166.208:13686] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTzKqKnD465ID-ycMKONQAAAIE"]
[Thu Nov 13 04:51:47.323748 2025] [:error] [pid 51407:tid 51484] [client 124.123.166.208:15020] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTzY6KnD465ID-ycMKOaAAAAJM"]
[Thu Nov 13 04:52:46.076913 2025] [:error] [pid 51406:tid 51440] [client 124.123.166.208:15157] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTznnJ88_IXhWnPqG9kZgAAAEI"]
[Thu Nov 13 04:53:45.611626 2025] [:error] [pid 51405:tid 51431] [client 124.123.166.208:13950] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRTz2cgQcOoeDKJ17JeZWwAAABQ"]
[Thu Nov 13 04:55:17.271376 2025] [:error] [pid 51491:tid 51516] [client 124.123.166.208:14726] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRT0NdQaME15TQuGVKT4rQAAANQ"]
[Thu Nov 13 04:56:28.612022 2025] [:error] [pid 51405:tid 51427] [client 124.123.166.208:13497] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRT0fMgQcOoeDKJ17JeaFwAAABA"]
[Thu Nov 13 04:57:29.668130 2025] [:error] [pid 51491:tid 51510] [client 124.123.166.208:13659] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRT0udQaME15TQuGVKT5sAAAAM4"]
[Thu Nov 13 04:58:29.213529 2025] [:error] [pid 18960:tid 18979] [client 124.123.166.208:14534] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRT09YvOP-uT_KFAcQNs7wAAARE"]
[Thu Nov 13 04:59:32.117421 2025] [:error] [pid 51405:tid 51424] [client 124.123.166.208:15124] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRT1NMgQcOoeDKJ17JebrQAAAA0"]
[Thu Nov 13 05:00:34.251089 2025] [:error] [pid 51491:tid 51496] [client 124.123.166.208:13868] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRT1ctQaME15TQuGVKT8RAAAAMA"]
[Thu Nov 13 05:01:40.547359 2025] [:error] [pid 51407:tid 51486] [client 124.123.166.208:14515] [client 124.123.166.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.166.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRT1tKKnD465ID-ycMKTNAAAAJU"]
[Thu Nov 13 07:36:37.495341 2025] [:error] [pid 34451:tid 34470] [client 85.203.36.144:52853] [client 85.203.36.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aRUaBTRcD8KetQb4RaqpTgAAAVE"]
[Thu Nov 13 10:42:23.009182 2025] [:error] [pid 62303:tid 62315] [client 43.135.135.57:33276] [client 43.135.135.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRVFj7-hlFTtVrZw8jA-WQAAAIg"]
[Thu Nov 13 15:38:54.712007 2025] [:error] [pid 6086:tid 6095] [client 49.7.227.204:58526] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRWLDn9_6CRZzjZnAe0H7wAAAQY"]
[Thu Nov 13 16:24:09.584849 2025] [:error] [pid 44245:tid 44269] [client 82.165.89.16:38606] [client 82.165.89.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.16, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRWVqYk7r-HKZdqw-dW2eAAAAVI"]
[Thu Nov 13 16:24:11.555767 2025] [:error] [pid 62216:tid 62254] [client 82.165.89.16:38620] [client 82.165.89.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.16, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRWVq-pyFB9M2aVQhwMhwAAAAAc"]
[Thu Nov 13 17:55:44.128817 2025] [:error] [pid 62216:tid 62251] [client 150.241.107.255:56561] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRWrIOpyFB9M2aVQhwM0kwAAAAQ"]
[Thu Nov 13 17:55:44.675153 2025] [:error] [pid 44354:tid 44373] [client 150.241.107.255:56758] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRWrIHqKopQhy3G4s3l0fAAAAY4"]
[Thu Nov 13 17:55:45.223523 2025] [:error] [pid 62303:tid 62325] [client 150.241.107.255:56984] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIb-hlFTtVrZw8jDoJgAAAJI"]
[Thu Nov 13 22:15:07.846990 2025] [:error] [pid 4992:tid 5019] [client 182.44.12.37:59481] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRXn6ymsutP7nusdj-CLmQAAANc"]
[Thu Nov 13 22:47:35.513391 2025] [:error] [pid 4994:tid 5066] [client 65.108.125.120:33378] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aRXvhwVaYoYtjfBbabUeywAAAI0"]
[Thu Nov 13 22:47:38.089755 2025] [:error] [pid 5086:tid 5110] [client 65.108.125.120:33380] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aRXvih_dsYLFCHw574jAsAAAARU"]
[Thu Nov 13 22:47:40.665398 2025] [:error] [pid 28868:tid 28883] [client 65.108.125.120:33386] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aRXvjIq9fgBJ6LAEEDzcEwAAAU0"]
[Thu Nov 13 22:47:43.101338 2025] [:error] [pid 19872:tid 19900] [client 65.108.125.120:33394] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aRXvj8usrN1b6ZJ_vbsnPQAAAFc"]
[Thu Nov 13 22:47:45.683948 2025] [:error] [pid 28868:tid 28894] [client 65.108.125.120:55762] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aRXvkYq9fgBJ6LAEEDzcGAAAAVg"]
[Thu Nov 13 22:47:48.275648 2025] [:error] [pid 4992:tid 5020] [client 65.108.125.120:55766] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aRXvlCmsutP7nusdj-CVCQAAANg"]
[Thu Nov 13 22:47:50.855481 2025] [:error] [pid 19872:tid 19892] [client 65.108.125.120:55782] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aRXvlsusrN1b6ZJ_vbsnTQAAAE8"]
[Thu Nov 13 22:47:53.425802 2025] [:error] [pid 4992:tid 5013] [client 65.108.125.120:55786] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRXvmSmsutP7nusdj-CVEQAAANE"]
[Thu Nov 13 22:47:55.877888 2025] [:error] [pid 4994:tid 5060] [client 65.108.125.120:42176] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aRXvmwVaYoYtjfBbabUe3AAAAIc"]
[Thu Nov 13 22:47:58.447688 2025] [:error] [pid 4992:tid 5005] [client 65.108.125.120:42182] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aRXvnimsutP7nusdj-CVFAAAAMk"]
[Thu Nov 13 22:48:00.888300 2025] [:error] [pid 28868:tid 28874] [client 65.108.125.120:42198] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aRXvoIq9fgBJ6LAEEDzcJgAAAUQ"]
[Thu Nov 13 22:48:03.458736 2025] [:error] [pid 19872:tid 19879] [client 65.108.125.120:42200] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aRXvo8usrN1b6ZJ_vbsnWwAAAEI"]
[Thu Nov 13 22:48:06.040113 2025] [:error] [pid 28868:tid 28886] [client 65.108.125.120:46670] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aRXvpoq9fgBJ6LAEEDzcLAAAAVA"]
[Thu Nov 13 22:48:08.627674 2025] [:error] [pid 28868:tid 28892] [client 65.108.125.120:46676] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aRXvqIq9fgBJ6LAEEDzcMgAAAVY"]
[Thu Nov 13 22:48:11.283891 2025] [:error] [pid 4992:tid 4997] [client 65.108.125.120:46680] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aRXvqymsutP7nusdj-CVHAAAAME"]
[Thu Nov 13 22:48:13.628713 2025] [:error] [pid 5086:tid 5090] [client 65.108.125.120:46692] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aRXvrR_dsYLFCHw574jAywAAAQE"]
[Thu Nov 13 22:48:16.202200 2025] [:error] [pid 4993:tid 5028] [client 65.108.125.120:10222] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aRXvsMl_cC0Js5xNCU1WyQAAAAI"]
[Thu Nov 13 22:48:18.774592 2025] [:error] [pid 19872:tid 19895] [client 65.108.125.120:10224] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aRXvssusrN1b6ZJ_vbsneQAAAFI"]
[Thu Nov 13 22:48:21.346265 2025] [:error] [pid 4992:tid 5004] [client 65.108.125.120:10234] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aRXvtSmsutP7nusdj-CVIwAAAMg"]
[Thu Nov 13 22:48:23.922303 2025] [:error] [pid 4993:tid 5036] [client 65.108.125.120:10242] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aRXvt8l_cC0Js5xNCU1W1wAAAAo"]
[Thu Nov 13 22:51:44.977064 2025] [:error] [pid 28868:tid 28876] [client 45.138.16.29:60846] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "aRXwgIq9fgBJ6LAEEDzdFwAAAUY"]
[Thu Nov 13 22:51:45.501672 2025] [:error] [pid 28868:tid 28875] [client 45.138.16.29:60926] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/postnews.php"] [unique_id "aRXwgYq9fgBJ6LAEEDzdKwAAAUU"]
[Thu Nov 13 22:51:46.025942 2025] [:error] [pid 28868:tid 28882] [client 45.138.16.29:61103] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/postnews.php"] [unique_id "aRXwgoq9fgBJ6LAEEDzdMgAAAUw"]
[Thu Nov 13 23:23:17.064373 2025] [:error] [pid 4992:tid 5017] [client 43.159.143.187:56878] [client 43.159.143.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRX35SmsutP7nusdj-CeJwAAANU"]
[Thu Nov 13 23:42:31.671224 2025] [:error] [pid 28868:tid 28876] [client 212.30.36.150:38443] [client 212.30.36.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRX8Z4q9fgBJ6LAEEDzp-gAAAUY"]
[Thu Nov 13 23:42:34.238973 2025] [:error] [pid 4993:tid 5044] [client 212.30.36.142:62295] [client 212.30.36.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aRX8asl_cC0Js5xNCU1ofQAAABI"]
[Thu Nov 13 23:42:44.197766 2025] [:error] [pid 4992:tid 5015] [client 212.30.36.124:36415] [client 212.30.36.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aRX8dCmsutP7nusdj-CkEwAAANM"]
[Thu Nov 13 23:42:48.648603 2025] [:error] [pid 4993:tid 5041] [client 212.30.36.160:58829] [client 212.30.36.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aRX8eMl_cC0Js5xNCU1olwAAAA8"]
[Thu Nov 13 23:42:49.513361 2025] [:error] [pid 4992:tid 5005] [client 212.30.36.152:59907] [client 212.30.36.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aRX8eSmsutP7nusdj-CkFQAAAMk"]
[Thu Nov 13 23:42:50.446811 2025] [:error] [pid 4994:tid 5063] [client 212.30.36.169:30823] [client 212.30.36.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aRX8egVaYoYtjfBbabUurAAAAIo"]
[Thu Nov 13 23:42:53.080787 2025] [:error] [pid 28868:tid 28892] [client 212.30.36.104:42757] [client 212.30.36.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aRX8fYq9fgBJ6LAEEDzqEwAAAVY"]
[Thu Nov 13 23:42:57.792676 2025] [:error] [pid 4993:tid 5028] [client 212.30.36.160:47139] [client 212.30.36.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aRX8gcl_cC0Js5xNCU1oqAAAAAI"]
[Thu Nov 13 23:43:09.653284 2025] [:error] [pid 4994:tid 5059] [client 212.30.36.114:63623] [client 212.30.36.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aRX8jQVaYoYtjfBbabUuyAAAAIY"]
[Thu Nov 13 23:43:10.513946 2025] [:error] [pid 4993:tid 5033] [client 212.30.36.112:54843] [client 212.30.36.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aRX8jsl_cC0Js5xNCU1ovgAAAAc"]
[Thu Nov 13 23:44:04.628349 2025] [:error] [pid 19872:tid 19879] [client 212.30.36.111:61975] [client 212.30.36.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRX8xMusrN1b6ZJ_vbs-aQAAAEI"]
[Thu Nov 13 23:44:11.392501 2025] [:error] [pid 19872:tid 19890] [client 212.30.36.111:61975] [client 212.30.36.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aRX8y8usrN1b6ZJ_vbs-gwAAAE0"]
[Thu Nov 13 23:44:31.108982 2025] [:error] [pid 4993:tid 5041] [client 212.30.36.133:44227] [client 212.30.36.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aRX838l_cC0Js5xNCU1pXgAAAA8"]
[Thu Nov 13 23:45:24.695477 2025] [:error] [pid 4994:tid 5066] [client 212.30.36.132:51599] [client 212.30.36.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/lx.php"] [unique_id "aRX9FAVaYoYtjfBbabUv1gAAAI0"]
[Thu Nov 13 23:47:01.154511 2025] [:error] [pid 28868:tid 28884] [client 212.30.36.118:50447] [client 212.30.36.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aRX9dYq9fgBJ6LAEEDzrqAAAAU4"]
[Thu Nov 13 23:47:45.532193 2025] [:error] [pid 5086:tid 5108] [client 212.30.36.142:21041] [client 212.30.36.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aRX9oR_dsYLFCHw574jQvAAAARM"]
[Thu Nov 13 23:47:46.361984 2025] [:error] [pid 19872:tid 19883] [client 212.30.36.116:58375] [client 212.30.36.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.30.36.116, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRX9osusrN1b6ZJ_vbtARQAAAEY"]
[Thu Nov 13 23:47:50.877408 2025] [:error] [pid 19872:tid 19884] [client 212.30.36.116:58375] [client 212.30.36.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRX9psusrN1b6ZJ_vbtAVAAAAEc"]
[Thu Nov 13 23:48:05.339665 2025] [:error] [pid 19872:tid 19894] [client 212.30.36.146:46283] [client 212.30.36.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aRX9tcusrN1b6ZJ_vbtAdgAAAFE"]
[Thu Nov 13 23:48:30.877451 2025] [:error] [pid 28868:tid 28877] [client 212.30.36.121:24051] [client 212.30.36.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aRX9zoq9fgBJ6LAEEDzsCwAAAUc"]
[Thu Nov 13 23:48:31.719669 2025] [:error] [pid 4994:tid 5073] [client 212.30.36.152:25015] [client 212.30.36.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRX9zwVaYoYtjfBbabUwuwAAAJQ"]
[Thu Nov 13 23:48:32.664692 2025] [:error] [pid 5086:tid 5102] [client 212.30.36.106:28655] [client 212.30.36.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aRX90B_dsYLFCHw574jQ4gAAAQ0"]
[Thu Nov 13 23:48:33.494374 2025] [:error] [pid 4992:tid 5020] [client 212.30.36.150:30313] [client 212.30.36.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aRX90SmsutP7nusdj-Cl4QAAANg"]
[Thu Nov 13 23:48:40.045795 2025] [:error] [pid 4993:tid 5045] [client 212.30.36.119:43205] [client 212.30.36.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.119, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aRX92Ml_cC0Js5xNCU1rBQAAABM"]
[Thu Nov 13 23:49:03.052442 2025] [:error] [pid 4993:tid 5044] [client 212.30.36.119:43205] [client 212.30.36.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aRX978l_cC0Js5xNCU1rMAAAABI"]
[Thu Nov 13 23:49:10.132379 2025] [:error] [pid 4994:tid 5064] [client 212.30.36.139:64687] [client 212.30.36.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.139, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aRX99gVaYoYtjfBbabUw5AAAAIs"]
[Thu Nov 13 23:49:21.641146 2025] [:error] [pid 4994:tid 5069] [client 212.30.36.139:64687] [client 212.30.36.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aRX-AQVaYoYtjfBbabUw9QAAAJA"]
[Thu Nov 13 23:49:22.791613 2025] [:error] [pid 4994:tid 5059] [client 212.30.36.147:63323] [client 212.30.36.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "aRX-AgVaYoYtjfBbabUw9wAAAIY"]
[Thu Nov 13 23:49:30.419069 2025] [proxy_fcgi:error] [pid 19872:tid 19898] [client 212.30.36.148:64827] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 23:49:39.926292 2025] [proxy_fcgi:error] [pid 19872:tid 19892] [client 212.30.36.148:64827] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 23:49:54.004718 2025] [:error] [pid 19872:tid 19884] [client 188.129.83.160:2078] [client 188.129.83.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.129.83.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRX-IsusrN1b6ZJ_vbtBPAAAAEc"]
[Thu Nov 13 23:50:08.492358 2025] [:error] [pid 19872:tid 19899] [client 212.30.36.148:64827] [client 212.30.36.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aRX-MMusrN1b6ZJ_vbtBWgAAAFY"]
[Thu Nov 13 23:50:17.762656 2025] [:error] [pid 4993:tid 5031] [client 212.30.36.125:33007] [client 212.30.36.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bak.php"] [unique_id "aRX-Ocl_cC0Js5xNCU1rhQAAAAU"]
[Thu Nov 13 23:50:20.311296 2025] [:error] [pid 4992:tid 5004] [client 212.30.36.139:44539] [client 212.30.36.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aRX-PCmsutP7nusdj-CmPQAAAMg"]
[Thu Nov 13 23:50:31.749599 2025] [:error] [pid 4994:tid 5058] [client 212.30.36.108:47351] [client 212.30.36.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aRX-RwVaYoYtjfBbabUxRAAAAIU"]
[Thu Nov 13 23:50:32.647194 2025] [:error] [pid 5086:tid 5101] [client 212.30.36.156:42415] [client 212.30.36.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aRX-SB_dsYLFCHw574jRWwAAAQw"]
[Thu Nov 13 23:50:33.498642 2025] [:error] [pid 28868:tid 28885] [client 212.30.36.106:55335] [client 212.30.36.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.106, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aRX-SYq9fgBJ6LAEEDzsbwAAAU8"]
[Thu Nov 13 23:50:38.492630 2025] [:error] [pid 28868:tid 28880] [client 212.30.36.106:55335] [client 212.30.36.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/themes.php"] [unique_id "aRX-Toq9fgBJ6LAEEDzsegAAAUo"]
[Thu Nov 13 23:50:47.483617 2025] [autoindex:error] [pid 28868:tid 28894] [client 212.30.36.169:22883] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:50:49.210450 2025] [:error] [pid 28868:tid 28876] [client 212.30.36.169:22883] [client 212.30.36.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aRX-WYq9fgBJ6LAEEDzsiQAAAUY"]
[Thu Nov 13 23:50:53.070136 2025] [:error] [pid 4992:tid 5013] [client 212.30.36.115:29709] [client 212.30.36.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/about.php"] [unique_id "aRX-XSmsutP7nusdj-CmWgAAANE"]
[Thu Nov 13 23:50:57.874263 2025] [:error] [pid 4992:tid 5004] [client 212.30.36.155:39839] [client 212.30.36.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aRX-YSmsutP7nusdj-CmYQAAAMg"]
[Thu Nov 13 23:51:05.768359 2025] [:error] [pid 4994:tid 5066] [client 212.30.36.156:31211] [client 212.30.36.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.156, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aRX-aQVaYoYtjfBbabUxYwAAAI0"]
[Thu Nov 13 23:51:09.904010 2025] [:error] [pid 4994:tid 5077] [client 212.30.36.156:31211] [client 212.30.36.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aRX-bQVaYoYtjfBbabUxZgAAAJg"]
[Thu Nov 13 23:51:11.696224 2025] [:error] [pid 19872:tid 19879] [client 212.30.36.104:23017] [client 212.30.36.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aRX-b8usrN1b6ZJ_vbtBpAAAAEI"]
[Thu Nov 13 23:51:29.831491 2025] [:error] [pid 19872:tid 19894] [client 212.30.36.141:60167] [client 212.30.36.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aRX-gcusrN1b6ZJ_vbtBuwAAAFE"]
[Thu Nov 13 23:51:33.539890 2025] [:error] [pid 4993:tid 5042] [client 212.30.36.105:35063] [client 212.30.36.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aRX-hcl_cC0Js5xNCU1r2gAAABA"]
[Thu Nov 13 23:51:34.412787 2025] [:error] [pid 28868:tid 28872] [client 212.30.36.159:60011] [client 212.30.36.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aRX-hoq9fgBJ6LAEEDzsoQAAAUI"]
[Thu Nov 13 23:51:35.516794 2025] [:error] [pid 19872:tid 19884] [client 212.30.36.112:23541] [client 212.30.36.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aRX-h8usrN1b6ZJ_vbtBwAAAAEc"]
[Thu Nov 13 23:51:36.353306 2025] [:error] [pid 4992:tid 5003] [client 212.30.36.161:29087] [client 212.30.36.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aRX-iCmsutP7nusdj-CmhwAAAMc"]
[Thu Nov 13 23:51:39.005255 2025] [autoindex:error] [pid 4994:tid 5071] [client 212.30.36.142:44681] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:51:43.128458 2025] [:error] [pid 4994:tid 5053] [client 212.30.36.142:44681] [client 212.30.36.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aRX-jwVaYoYtjfBbabUxkgAAAIA"]
[Thu Nov 13 23:51:49.264796 2025] [:error] [pid 5086:tid 5113] [client 212.30.36.162:47787] [client 212.30.36.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aRX-lR_dsYLFCHw574jRqAAAARg"]
[Thu Nov 13 23:51:53.451371 2025] [:error] [pid 28868:tid 28876] [client 212.30.36.156:27421] [client 212.30.36.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aRX-mYq9fgBJ6LAEEDzssgAAAUY"]
[Thu Nov 13 23:51:56.159857 2025] [:error] [pid 4993:tid 5048] [client 212.30.36.113:64655] [client 212.30.36.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aRX-nMl_cC0Js5xNCU1r9wAAABY"]
[Thu Nov 13 23:52:04.461217 2025] [:error] [pid 4993:tid 5037] [client 212.30.36.105:22887] [client 212.30.36.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aRX-pMl_cC0Js5xNCU1sAAAAAAs"]
[Thu Nov 13 23:52:05.363750 2025] [:error] [pid 28868:tid 28872] [client 212.30.36.115:42763] [client 212.30.36.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aRX-pYq9fgBJ6LAEEDzsvQAAAUI"]
[Thu Nov 13 23:52:07.562982 2025] [:error] [pid 5086:tid 5108] [client 212.30.36.110:25253] [client 212.30.36.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aRX-px_dsYLFCHw574jRuQAAARM"]
[Thu Nov 13 23:52:14.215412 2025] [:error] [pid 4994:tid 5053] [client 212.30.36.104:44439] [client 212.30.36.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aRX-rgVaYoYtjfBbabUxpwAAAIA"]
[Thu Nov 13 23:52:17.027051 2025] [:error] [pid 4994:tid 5059] [client 212.30.36.104:44439] [client 212.30.36.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aRX-sQVaYoYtjfBbabUxqgAAAIY"]
[Thu Nov 13 23:52:17.939370 2025] [:error] [pid 19872:tid 19897] [client 212.30.36.108:51195] [client 212.30.36.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aRX-scusrN1b6ZJ_vbtCCgAAAFQ"]
[Thu Nov 13 23:52:31.443266 2025] [:error] [pid 4993:tid 5036] [client 212.30.36.128:58061] [client 212.30.36.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.128, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aRX-v8l_cC0Js5xNCU1sKQAAAAo"]
[Thu Nov 13 23:52:33.114128 2025] [:error] [pid 4993:tid 5048] [client 212.30.36.128:58061] [client 212.30.36.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aRX-wcl_cC0Js5xNCU1sKwAAABY"]
[Thu Nov 13 23:52:33.939973 2025] [:error] [pid 28868:tid 28874] [client 212.30.36.155:57045] [client 212.30.36.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aRX-wYq9fgBJ6LAEEDzs0wAAAUQ"]
[Thu Nov 13 23:52:34.842475 2025] [:error] [pid 5086:tid 5096] [client 212.30.36.150:61587] [client 212.30.36.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aRX-wh_dsYLFCHw574jRzgAAAQc"]
[Thu Nov 13 23:52:41.788836 2025] [:error] [pid 28868:tid 28884] [client 212.30.36.152:60215] [client 212.30.36.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aRX-yYq9fgBJ6LAEEDzs4AAAAU4"]
[Thu Nov 13 23:52:56.055610 2025] [:error] [pid 4992:tid 5019] [client 212.30.36.162:56853] [client 212.30.36.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aRX-2CmsutP7nusdj-CmzAAAANc"]
[Thu Nov 13 23:53:04.047870 2025] [:error] [pid 5086:tid 5097] [client 212.30.36.123:51843] [client 212.30.36.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aRX-4B_dsYLFCHw574jR9wAAAQg"]
[Thu Nov 13 23:53:12.885962 2025] [:error] [pid 28868:tid 28876] [client 212.30.36.147:48563] [client 212.30.36.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aRX-6Iq9fgBJ6LAEEDztAwAAAUY"]
[Thu Nov 13 23:53:16.449311 2025] [:error] [pid 4993:tid 5026] [client 212.30.36.106:49927] [client 212.30.36.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aRX-7Ml_cC0Js5xNCU1sXwAAAAA"]
[Thu Nov 13 23:53:18.532234 2025] [:error] [pid 5086:tid 5094] [client 212.30.36.148:28851] [client 212.30.36.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aRX-7h_dsYLFCHw574jSBQAAAQU"]
[Thu Nov 13 23:53:21.169053 2025] [:error] [pid 19872:tid 19900] [client 212.30.36.126:48079] [client 212.30.36.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aRX-8cusrN1b6ZJ_vbtCbgAAAFc"]
[Thu Nov 13 23:53:23.785993 2025] [:error] [pid 28868:tid 28874] [client 212.30.36.132:44261] [client 212.30.36.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aRX-84q9fgBJ6LAEEDztCgAAAUQ"]
[Thu Nov 13 23:53:27.873042 2025] [:error] [pid 4992:tid 5018] [client 212.30.36.159:61209] [client 212.30.36.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aRX-9ymsutP7nusdj-Cm8QAAANY"]
[Thu Nov 13 23:53:33.656504 2025] [:error] [pid 4994:tid 5062] [client 212.30.36.114:29159] [client 212.30.36.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aRX-_QVaYoYtjfBbabUx_QAAAIk"]
[Thu Nov 13 23:53:39.536347 2025] [:error] [pid 19872:tid 19880] [client 212.30.36.146:63303] [client 212.30.36.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aRX_A8usrN1b6ZJ_vbtClAAAAEM"]
[Thu Nov 13 23:53:43.460940 2025] [:error] [pid 5086:tid 5105] [client 212.30.36.108:26711] [client 212.30.36.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aRX_Bx_dsYLFCHw574jSGgAAARA"]
[Thu Nov 13 23:53:47.616531 2025] [proxy_fcgi:error] [pid 4994:tid 5072] [client 212.30.36.133:63753] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 23:53:53.226247 2025] [:error] [pid 4994:tid 5073] [client 212.30.36.133:63753] [client 212.30.36.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aRX_EQVaYoYtjfBbabUyFQAAAJQ"]
[Thu Nov 13 23:54:20.441679 2025] [:error] [pid 19872:tid 19882] [client 212.30.36.104:41411] [client 212.30.36.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aRX_LMusrN1b6ZJ_vbtCywAAAEU"]
[Thu Nov 13 23:54:22.272042 2025] [:error] [pid 4994:tid 5053] [client 212.30.36.107:59661] [client 212.30.36.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aRX_LgVaYoYtjfBbabUyMgAAAIA"]
[Thu Nov 13 23:54:27.483457 2025] [:error] [pid 19872:tid 19877] [client 212.30.36.110:25127] [client 212.30.36.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aRX_M8usrN1b6ZJ_vbtC3wAAAEA"]
[Thu Nov 13 23:54:28.360473 2025] [:error] [pid 19872:tid 19887] [client 212.30.36.128:41485] [client 212.30.36.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aRX_NMusrN1b6ZJ_vbtC5AAAAEo"]
[Thu Nov 13 23:54:31.634747 2025] [:error] [pid 28868:tid 28882] [client 212.30.36.128:63183] [client 212.30.36.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aRX_N4q9fgBJ6LAEEDztNgAAAUw"]
[Thu Nov 13 23:54:42.499996 2025] [:error] [pid 5086:tid 5091] [client 212.30.36.153:48355] [client 212.30.36.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aRX_Qh_dsYLFCHw574jSawAAAQI"]
[Thu Nov 13 23:54:45.058008 2025] [:error] [pid 5086:tid 5103] [client 212.30.36.147:40003] [client 212.30.36.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.147, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aRX_RR_dsYLFCHw574jScAAAAQ4"]
[Thu Nov 13 23:54:48.068655 2025] [:error] [pid 5086:tid 5104] [client 212.30.36.147:40003] [client 212.30.36.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aRX_SB_dsYLFCHw574jSegAAAQ8"]
[Thu Nov 13 23:54:49.191770 2025] [:error] [pid 5086:tid 5099] [client 212.30.36.140:41005] [client 212.30.36.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aRX_SR_dsYLFCHw574jSfwAAAQo"]
[Thu Nov 13 23:54:55.786264 2025] [:error] [pid 4992:tid 5013] [client 212.30.36.159:59259] [client 212.30.36.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aRX_TymsutP7nusdj-CnQgAAANE"]
[Thu Nov 13 23:54:58.378267 2025] [:error] [pid 4993:tid 5034] [client 212.30.36.121:25221] [client 212.30.36.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "aRX_Usl_cC0Js5xNCU1s1AAAAAg"]
[Thu Nov 13 23:55:04.278674 2025] [proxy_fcgi:error] [pid 19872:tid 19886] [client 212.30.36.141:56931] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 23:55:13.086234 2025] [proxy_fcgi:error] [pid 19872:tid 19888] [client 212.30.36.141:56931] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 23:55:15.336587 2025] [:error] [pid 19872:tid 19899] [client 212.30.36.141:56931] [client 212.30.36.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "aRX_Y8usrN1b6ZJ_vbtDJwAAAFY"]
[Thu Nov 13 23:55:21.774530 2025] [:error] [pid 4994:tid 5068] [client 212.30.36.161:45951] [client 212.30.36.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aRX_aQVaYoYtjfBbabUyZAAAAI8"]
[Thu Nov 13 23:55:27.581829 2025] [:error] [pid 4992:tid 4998] [client 212.30.36.117:31737] [client 212.30.36.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.117, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aRX_bymsutP7nusdj-CnZgAAAMI"]
[Thu Nov 13 23:55:27.586406 2025] [proxy_fcgi:error] [pid 4992:tid 4998] [client 212.30.36.117:31737] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 23:55:35.969031 2025] [:error] [pid 4992:tid 5005] [client 212.30.36.117:31737] [client 212.30.36.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mah.php"] [unique_id "aRX_dymsutP7nusdj-CnbwAAAMk"]
[Thu Nov 13 23:55:37.833040 2025] [:error] [pid 28868:tid 28891] [client 212.30.36.158:32607] [client 212.30.36.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.158, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aRX_eYq9fgBJ6LAEEDztXwAAAVU"]
[Thu Nov 13 23:55:39.970580 2025] [:error] [pid 28868:tid 28890] [client 212.30.36.158:32607] [client 212.30.36.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aRX_e4q9fgBJ6LAEEDztYwAAAVQ"]
[Thu Nov 13 23:55:55.384487 2025] [proxy_fcgi:error] [pid 4994:tid 5069] [client 212.30.36.119:32995] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 23:56:00.184106 2025] [:error] [pid 4994:tid 5053] [client 212.30.36.119:32995] [client 212.30.36.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aRX_kAVaYoYtjfBbabUytwAAAIA"]
[Thu Nov 13 23:56:04.767387 2025] [:error] [pid 5086:tid 5102] [client 212.30.36.134:25861] [client 212.30.36.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aRX_lB_dsYLFCHw574jS0wAAAQ0"]
[Thu Nov 13 23:56:09.069567 2025] [:error] [pid 19872:tid 19880] [client 212.30.36.108:64091] [client 212.30.36.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.108, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aRX_mcusrN1b6ZJ_vbtDdgAAAEM"]
[Thu Nov 13 23:56:22.167677 2025] [:error] [pid 19872:tid 19899] [client 212.30.36.108:64091] [client 212.30.36.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aRX_psusrN1b6ZJ_vbtDowAAAFY"]
[Thu Nov 13 23:56:24.664651 2025] [:error] [pid 5086:tid 5093] [client 212.30.36.121:36649] [client 212.30.36.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/packed.php"] [unique_id "aRX_qB_dsYLFCHw574jS6wAAAQQ"]
[Thu Nov 13 23:56:37.900750 2025] [:error] [pid 28868:tid 28892] [client 212.30.36.148:47681] [client 212.30.36.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "aRX_tYq9fgBJ6LAEEDztwQAAAVY"]
[Thu Nov 13 23:56:40.488161 2025] [:error] [pid 19872:tid 19894] [client 212.30.36.147:37573] [client 212.30.36.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aRX_uMusrN1b6ZJ_vbtDuwAAAFE"]
[Thu Nov 13 23:56:42.566106 2025] [:error] [pid 5086:tid 5111] [client 212.30.36.113:48761] [client 212.30.36.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aRX_uh_dsYLFCHw574jS-AAAARY"]
[Thu Nov 13 23:56:49.542940 2025] [:error] [pid 5086:tid 5102] [client 212.30.36.143:34183] [client 212.30.36.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.36.143, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aRX_wR_dsYLFCHw574jTBwAAAQ0"]
[Thu Nov 13 23:56:51.027980 2025] [:error] [pid 5086:tid 5094] [client 212.30.36.143:34183] [client 212.30.36.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aRX_wx_dsYLFCHw574jTCAAAAQU"]
[Thu Nov 13 23:57:07.177327 2025] [:error] [pid 4992:tid 5015] [client 212.30.36.138:61575] [client 212.30.36.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aRX_0ymsutP7nusdj-CoEgAAANM"]
[Thu Nov 13 23:57:24.184715 2025] [autoindex:error] [pid 4993:tid 5035] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:24.643081 2025] [autoindex:error] [pid 4993:tid 5044] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:25.103566 2025] [autoindex:error] [pid 4993:tid 5041] [client 212.30.36.151:29421] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:32.722957 2025] [autoindex:error] [pid 4993:tid 5028] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:34.558582 2025] [autoindex:error] [pid 4993:tid 5032] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:34.964262 2025] [autoindex:error] [pid 4993:tid 5026] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:35.418308 2025] [autoindex:error] [pid 4993:tid 5033] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:35.860692 2025] [autoindex:error] [pid 4993:tid 5046] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:36.278614 2025] [autoindex:error] [pid 4993:tid 5027] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:37.156695 2025] [autoindex:error] [pid 4993:tid 5043] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:37.596474 2025] [autoindex:error] [pid 4993:tid 5030] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:38.020780 2025] [autoindex:error] [pid 4993:tid 5038] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:38.450819 2025] [autoindex:error] [pid 4993:tid 5041] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:45.791854 2025] [autoindex:error] [pid 4993:tid 5027] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:57:48.069743 2025] [autoindex:error] [pid 4993:tid 5048] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:33.026681 2025] [autoindex:error] [pid 4993:tid 5043] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:33.567298 2025] [autoindex:error] [pid 4993:tid 5042] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:33.992148 2025] [autoindex:error] [pid 4993:tid 5028] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:34.450237 2025] [autoindex:error] [pid 4993:tid 5037] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:34.917772 2025] [autoindex:error] [pid 4993:tid 5041] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:35.758979 2025] [autoindex:error] [pid 4993:tid 5027] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:36.239466 2025] [autoindex:error] [pid 4993:tid 5045] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:36.724464 2025] [autoindex:error] [pid 4993:tid 5048] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:37.208308 2025] [autoindex:error] [pid 4993:tid 5039] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:37.659308 2025] [autoindex:error] [pid 4993:tid 5046] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:38.076107 2025] [autoindex:error] [pid 4993:tid 5047] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:40.467399 2025] [autoindex:error] [pid 4993:tid 5038] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:42.827537 2025] [autoindex:error] [pid 4993:tid 5048] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:43.242748 2025] [autoindex:error] [pid 4993:tid 5029] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:43.716415 2025] [autoindex:error] [pid 4993:tid 5046] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:46.072263 2025] [autoindex:error] [pid 4993:tid 5041] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:47.404345 2025] [autoindex:error] [pid 4993:tid 5027] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:47.824332 2025] [autoindex:error] [pid 4993:tid 5032] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:48.292436 2025] [autoindex:error] [pid 4993:tid 5050] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:58:49.113555 2025] [autoindex:error] [pid 4993:tid 5029] [client 212.30.36.151:29421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:59:38.841487 2025] [autoindex:error] [pid 19872:tid 19891] [client 212.30.36.134:42777] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 13 23:59:56.433656 2025] [autoindex:error] [pid 19872:tid 19881] [client 212.30.36.134:42777] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:12.498736 2025] [autoindex:error] [pid 4993:tid 5048] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:13.151911 2025] [autoindex:error] [pid 4993:tid 5040] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:21.252254 2025] [autoindex:error] [pid 4993:tid 5033] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:21.741889 2025] [autoindex:error] [pid 4993:tid 5028] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:22.213680 2025] [autoindex:error] [pid 4993:tid 5044] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:22.674637 2025] [autoindex:error] [pid 4993:tid 5040] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:23.120033 2025] [autoindex:error] [pid 4993:tid 5034] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:23.542564 2025] [autoindex:error] [pid 4993:tid 5038] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:23.995932 2025] [autoindex:error] [pid 4993:tid 5047] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:24.465969 2025] [autoindex:error] [pid 4993:tid 5037] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:24.871878 2025] [autoindex:error] [pid 4993:tid 5042] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:25.315612 2025] [autoindex:error] [pid 4993:tid 5039] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:00:40.630946 2025] [autoindex:error] [pid 4993:tid 5035] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:01.891468 2025] [autoindex:error] [pid 4993:tid 5032] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:03.050404 2025] [autoindex:error] [pid 4993:tid 5037] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:29.741510 2025] [autoindex:error] [pid 4993:tid 5049] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/paste/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:33.540753 2025] [autoindex:error] [pid 4993:tid 5037] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:41.228257 2025] [autoindex:error] [pid 4993:tid 5047] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:43.226362 2025] [autoindex:error] [pid 4993:tid 5031] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:47.177285 2025] [autoindex:error] [pid 4993:tid 5034] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/directionality/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:49.239620 2025] [autoindex:error] [pid 4993:tid 5028] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:50.115124 2025] [autoindex:error] [pid 4993:tid 5048] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:52.388418 2025] [autoindex:error] [pid 4993:tid 5049] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:54.383787 2025] [autoindex:error] [pid 4993:tid 5028] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:57.051268 2025] [autoindex:error] [pid 4993:tid 5037] [client 212.30.36.104:31483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:01:59.094608 2025] [proxy_fcgi:error] [pid 4993:tid 5042] [client 212.30.36.104:31483] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyone/index.php:17\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyone/index.php on line 17'
[Fri Nov 14 00:02:06.219472 2025] [autoindex:error] [pid 4993:tid 5042] [client 212.30.36.142:59897] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:02:17.261260 2025] [autoindex:error] [pid 4993:tid 5026] [client 212.30.36.142:59897] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:02:26.814797 2025] [autoindex:error] [pid 4993:tid 5036] [client 212.30.36.142:59897] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/nux/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:02:29.724035 2025] [autoindex:error] [pid 4993:tid 5030] [client 212.30.36.142:59897] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/lists/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:02:30.138796 2025] [autoindex:error] [pid 4993:tid 5047] [client 212.30.36.142:59897] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:03:23.823489 2025] [autoindex:error] [pid 4993:tid 5040] [client 212.30.36.142:59897] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:03:27.714355 2025] [autoindex:error] [pid 4993:tid 5037] [client 212.30.36.142:59897] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 00:03:59.438446 2025] [autoindex:error] [pid 4993:tid 5033] [client 212.30.36.142:59897] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/Core/Curve25519/Ge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 01:40:53.108913 2025] [:error] [pid 56495:tid 56499] [client 188.129.83.160:2418] [client 188.129.83.160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRYYJVwO8wZZL5WJceXFUAAAAMA"]
[Fri Nov 14 01:42:05.229821 2025] [:error] [pid 56586:tid 56601] [client 188.129.83.160:2453] [client 188.129.83.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.129.83.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRYYba7eYD3G9deYMP5DzQAAAYo"]
[Fri Nov 14 04:22:45.622201 2025] [:error] [pid 2578:tid 2604] [client 4.233.19.103:28681] [client 4.233.19.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRY-FTj6uK3gsUks55ZzCAAAAMw"]
[Fri Nov 14 04:22:48.002979 2025] [:error] [pid 2479:tid 2538] [client 4.233.19.103:25891] [client 4.233.19.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRY-GE90HPPsimtVg8PdowAAAFA"]
[Fri Nov 14 11:08:49.093375 2025] [:error] [pid 59105:tid 59111] [client 216.24.219.174:20309] [client 216.24.219.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "aRadQbd-anP1JpNfuSLvkwAAAUQ"]
[Fri Nov 14 11:08:49.577881 2025] [:error] [pid 59105:tid 59109] [client 136.144.19.185:53901] [client 136.144.19.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "aRadQbd-anP1JpNfuSLvlgAAAUI"]
[Fri Nov 14 11:08:50.056626 2025] [:error] [pid 59105:tid 59117] [client 136.144.19.171:27239] [client 136.144.19.171] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "aRadQrd-anP1JpNfuSLvmAAAAUo"]
[Fri Nov 14 16:13:54.267779 2025] [:error] [pid 16671:tid 16677] [client 147.135.128.94:47896] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aRbkwjsoHwEAmeIzZXAtNwAAAQA"]
[Fri Nov 14 16:13:58.898887 2025] [:error] [pid 16573:tid 16589] [client 147.135.128.94:37678] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aRbkxiPGexfUk9FDoEJ3awAAAEs"]
[Fri Nov 14 16:14:04.630243 2025] [:error] [pid 16709:tid 16729] [client 147.135.128.94:37688] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aRbkzKNdzfVNC4oipLUwjgAAAVI"]
[Fri Nov 14 16:14:07.908323 2025] [:error] [pid 16671:tid 16680] [client 147.135.128.94:60482] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aRbkzzsoHwEAmeIzZXAtTwAAAQM"]
[Fri Nov 14 16:14:10.984722 2025] [:error] [pid 16574:tid 16626] [client 147.135.128.94:60496] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aRbk0v6XQqe4NqaoE9IUyAAAAJM"]
[Fri Nov 14 16:14:14.622281 2025] [:error] [pid 16709:tid 16716] [client 147.135.128.94:60498] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aRbk1qNdzfVNC4oipLUwnwAAAUU"]
[Fri Nov 14 16:14:18.557352 2025] [:error] [pid 16575:tid 16657] [client 147.135.128.94:34204] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aRbk2u6qT670YxigvbBjygAAANc"]
[Fri Nov 14 16:14:21.442691 2025] [:error] [pid 16574:tid 16612] [client 147.135.128.94:34206] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRbk3f6XQqe4NqaoE9IU4AAAAIU"]
[Fri Nov 14 16:14:25.900228 2025] [:error] [pid 16709:tid 16728] [client 147.135.128.94:34216] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aRbk4aNdzfVNC4oipLUwvAAAAVE"]
[Fri Nov 14 16:14:30.106942 2025] [:error] [pid 16709:tid 16714] [client 147.135.128.94:58908] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aRbk5qNdzfVNC4oipLUwxAAAAUM"]
[Fri Nov 14 16:14:32.861620 2025] [:error] [pid 16574:tid 16615] [client 147.135.128.94:58918] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aRbk6P6XQqe4NqaoE9IU7wAAAIg"]
[Fri Nov 14 16:14:36.021865 2025] [:error] [pid 16671:tid 16680] [client 147.135.128.94:58930] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aRbk7DsoHwEAmeIzZXAteAAAAQM"]
[Fri Nov 14 16:14:41.000181 2025] [:error] [pid 16573:tid 16593] [client 147.135.128.94:51668] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aRbk8CPGexfUk9FDoEJ3vQAAAE8"]
[Fri Nov 14 16:14:44.429567 2025] [:error] [pid 16709:tid 16733] [client 147.135.128.94:51674] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aRbk9KNdzfVNC4oipLUw2QAAAVY"]
[Fri Nov 14 16:14:48.020142 2025] [:error] [pid 16671:tid 16685] [client 147.135.128.94:50860] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aRbk-DsoHwEAmeIzZXAtiAAAAQg"]
[Fri Nov 14 20:31:47.344151 2025] [:error] [pid 1170:tid 1189] [client 103.236.176.151:59302] [client 103.236.176.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.236.176.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRchMw5pkvzCDzzjItR4hQAAABE"]
[Fri Nov 14 21:06:15.423709 2025] [:error] [pid 16573:tid 16581] [client 193.36.224.211:60493] [client 193.36.224.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aRcpRyPGexfUk9FDoELJHQAAAEM"]
[Fri Nov 14 21:06:16.004390 2025] [:error] [pid 16709:tid 16711] [client 193.36.224.245:46739] [client 193.36.224.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/style.php"] [unique_id "aRcpSKNdzfVNC4oipLWdegAAAUA"]
[Fri Nov 14 21:06:16.518591 2025] [:error] [pid 16573:tid 16600] [client 193.36.224.245:38597] [client 193.36.224.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/style.php"] [unique_id "aRcpSCPGexfUk9FDoELJHgAAAFY"]
[Fri Nov 14 21:06:17.038321 2025] [:error] [pid 16575:tid 16634] [client 216.24.219.176:38567] [client 216.24.219.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/style.php"] [unique_id "aRcpSe6qT670YxigvbCz_gAAAMA"]
[Fri Nov 14 21:06:17.612050 2025] [:error] [pid 1170:tid 1189] [client 104.234.19.32:31041] [client 104.234.19.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style.php"] [unique_id "aRcpSQ5pkvzCDzzjItSFowAAABE"]
[Fri Nov 14 21:06:18.121374 2025] [:error] [pid 16575:tid 16642] [client 193.36.224.233:29065] [client 193.36.224.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aRcpSu6qT670YxigvbC0AAAAAMg"]
[Fri Nov 14 21:06:18.879684 2025] [:error] [pid 16709:tid 16729] [client 193.36.224.227:61711] [client 193.36.224.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aRcpSqNdzfVNC4oipLWdgAAAAVI"]
[Fri Nov 14 21:06:22.165873 2025] [:error] [pid 16671:tid 16690] [client 104.234.19.28:50741] [client 104.234.19.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aRcpTjsoHwEAmeIzZXCK3QAAAQ0"]
[Fri Nov 14 21:06:23.833248 2025] [:error] [pid 16671:tid 16685] [client 104.234.19.32:32027] [client 104.234.19.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aRcpTzsoHwEAmeIzZXCK3wAAAQg"]
[Fri Nov 14 21:06:24.639662 2025] [:error] [pid 16574:tid 16612] [client 193.36.224.238:49021] [client 193.36.224.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aRcpUP6XQqe4NqaoE9JjhAAAAIU"]
[Fri Nov 14 21:06:25.412613 2025] [:error] [pid 16709:tid 16721] [client 193.36.224.223:58555] [client 193.36.224.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aRcpUaNdzfVNC4oipLWdiAAAAUo"]
[Fri Nov 14 21:06:27.517119 2025] [:error] [pid 16573:tid 16594] [client 193.36.224.223:35385] [client 193.36.224.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs.php"] [unique_id "aRcpUyPGexfUk9FDoELJKQAAAFA"]
[Fri Nov 14 21:06:28.235768 2025] [:error] [pid 16573:tid 16593] [client 193.36.224.236:21787] [client 193.36.224.236] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "aRcpVCPGexfUk9FDoELJKwAAAE8"]
[Fri Nov 14 21:06:29.050506 2025] [:error] [pid 16574:tid 16613] [client 193.36.224.230:44991] [client 193.36.224.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aRcpVf6XQqe4NqaoE9JjhgAAAIY"]
[Fri Nov 14 21:06:30.113337 2025] [:error] [pid 16671:tid 16696] [client 193.36.224.147:23995] [client 193.36.224.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/aku.php"] [unique_id "aRcpVjsoHwEAmeIzZXCK5gAAARM"]
[Fri Nov 14 21:06:31.187999 2025] [:error] [pid 16573:tid 16581] [client 193.36.224.216:59329] [client 193.36.224.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "aRcpVyPGexfUk9FDoELJLgAAAEM"]
[Fri Nov 14 21:06:32.702961 2025] [:error] [pid 16709:tid 16711] [client 193.36.224.105:23699] [client 193.36.224.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dex.php"] [unique_id "aRcpWKNdzfVNC4oipLWdkQAAAUA"]
[Fri Nov 14 21:06:33.552111 2025] [:error] [pid 16575:tid 16650] [client 193.36.224.209:60615] [client 193.36.224.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRcpWe6qT670YxigvbC0BAAAANA"]
[Fri Nov 14 21:06:34.453735 2025] [:error] [pid 1170:tid 1194] [client 216.24.219.175:31549] [client 216.24.219.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/zoo.php"] [unique_id "aRcpWg5pkvzCDzzjItSFuQAAABY"]
[Fri Nov 14 21:06:35.029244 2025] [:error] [pid 1170:tid 1185] [client 104.234.19.32:42503] [client 104.234.19.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aRcpWw5pkvzCDzzjItSFuwAAAA0"]
[Fri Nov 14 21:06:36.852235 2025] [:error] [pid 16575:tid 16641] [client 104.234.19.33:43743] [client 104.234.19.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/zwso.php"] [unique_id "aRcpXO6qT670YxigvbC0DAAAAMc"]
[Fri Nov 14 21:06:37.391459 2025] [:error] [pid 16575:tid 16640] [client 193.36.224.250:20441] [client 193.36.224.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aRcpXe6qT670YxigvbC0DwAAAMY"]
[Fri Nov 14 21:06:38.428619 2025] [:error] [pid 16671:tid 16696] [client 104.234.19.33:28199] [client 104.234.19.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aRcpXjsoHwEAmeIzZXCK8AAAARM"]
[Fri Nov 14 21:06:40.463689 2025] [:error] [pid 16709:tid 16714] [client 193.36.224.247:65413] [client 193.36.224.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "aRcpYKNdzfVNC4oipLWdlwAAAUM"]
[Fri Nov 14 21:06:41.084671 2025] [:error] [pid 1170:tid 1182] [client 193.36.224.216:20885] [client 193.36.224.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/133.php"] [unique_id "aRcpYQ5pkvzCDzzjItSFwQAAAAo"]
[Fri Nov 14 21:06:41.921585 2025] [:error] [pid 16573:tid 16579] [client 193.36.224.208:39337] [client 193.36.224.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aRcpYSPGexfUk9FDoELJOAAAAEE"]
[Fri Nov 14 21:06:42.664019 2025] [:error] [pid 1170:tid 1176] [client 193.36.224.249:23437] [client 193.36.224.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wpssl.php"] [unique_id "aRcpYg5pkvzCDzzjItSFwwAAAAQ"]
[Fri Nov 14 21:06:43.252103 2025] [:error] [pid 1170:tid 1183] [client 193.36.224.238:43461] [client 193.36.224.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/witmm.php"] [unique_id "aRcpYw5pkvzCDzzjItSFxAAAAAs"]
[Fri Nov 14 21:06:44.281467 2025] [:error] [pid 16574:tid 16623] [client 193.36.224.247:40397] [client 193.36.224.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/index.php"] [unique_id "aRcpZP6XQqe4NqaoE9JjkgAAAJA"]
[Fri Nov 14 21:06:45.197054 2025] [:error] [pid 16575:tid 16647] [client 193.36.224.211:62427] [client 193.36.224.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aRcpZe6qT670YxigvbC0EAAAAM0"]
[Fri Nov 14 21:06:46.744476 2025] [:error] [pid 16574:tid 16615] [client 193.36.224.147:25197] [client 193.36.224.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aRcpZv6XQqe4NqaoE9JjlQAAAIg"]
[Fri Nov 14 21:06:48.280376 2025] [:error] [pid 16575:tid 16645] [client 193.36.224.234:50065] [client 193.36.224.234] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aRcpaO6qT670YxigvbC0FAAAAMs"]
[Fri Nov 14 21:06:48.878527 2025] [:error] [pid 16671:tid 16696] [client 193.36.224.209:47231] [client 193.36.224.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-editor.php"] [unique_id "aRcpaDsoHwEAmeIzZXCK9wAAARM"]
[Fri Nov 14 22:57:02.766769 2025] [:error] [pid 16575:tid 16656] [client 103.236.176.151:61190] [client 103.236.176.151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRdDPu6qT670YxigvbDQNQAAANY"]
[Fri Nov 14 22:58:50.018378 2025] [:error] [pid 16671:tid 16699] [client 103.236.176.151:62925] [client 103.236.176.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.236.176.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRdDqjsoHwEAmeIzZXCqyAAAARY"]
[Sat Nov 15 00:48:11.855331 2025] [:error] [pid 45907:tid 45933] [client 222.253.48.28:41482] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRddS1AqmYxCpnT9gJF2ZQAAAVY"]
[Sat Nov 15 00:48:14.960665 2025] [:error] [pid 45909:tid 45987] [client 222.253.48.28:41484] [client 222.253.48.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 222.253.48.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRddTsZqItrYybG86kiLQQAAAdY"]
[Sat Nov 15 01:17:19.328774 2025] [:error] [pid 45907:tid 45926] [client 4.205.179.237:51740] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aRdkH1AqmYxCpnT9gJGArwAAAU8"]
[Sat Nov 15 01:17:19.760932 2025] [:error] [pid 45995:tid 46004] [client 4.205.179.237:51865] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aRdkH8fhZrb6EV4SvFu-EwAAAgQ"]
[Sat Nov 15 01:17:20.172099 2025] [:error] [pid 45995:tid 46005] [client 4.205.179.237:51755] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aRdkIMfhZrb6EV4SvFu-FQAAAgU"]
[Sat Nov 15 01:17:20.583682 2025] [:error] [pid 45907:tid 45931] [client 4.205.179.237:51881] [client 4.205.179.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aRdkIFAqmYxCpnT9gJGAvwAAAVQ"]
[Sat Nov 15 01:45:55.164279 2025] [:error] [pid 45909:tid 45980] [client 43.157.168.43:58578] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRdq08ZqItrYybG86kidwwAAAc8"]
[Sat Nov 15 06:02:47.314268 2025] [:error] [pid 27997:tid 28000] [client 101.91.148.219:44248] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRenB9pja_6cDxKbxFkh4wAAAME"]
[Sat Nov 15 09:36:36.997274 2025] [:error] [pid 20346:tid 20371] [client 147.135.128.94:55744] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aRfZJJ7hsydZdIoVTlukLgAAAxY"]
[Sat Nov 15 09:36:40.133667 2025] [:error] [pid 19959:tid 19978] [client 147.135.128.94:40704] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aRfZKMjejiTUP1-IawNc5wAAAYw"]
[Sat Nov 15 09:36:42.931692 2025] [:error] [pid 27911:tid 27985] [client 147.135.128.94:40718] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aRfZKsGzUdrhGBIfiKQLjgAAAJE"]
[Sat Nov 15 09:36:45.665123 2025] [:error] [pid 22765:tid 22791] [client 147.135.128.94:40726] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aRfZLabrQzjuZmPIWDZ-4wAAApU"]
[Sat Nov 15 09:36:48.767691 2025] [:error] [pid 19959:tid 19979] [client 147.135.128.94:55184] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aRfZMMjejiTUP1-IawNc-wAAAY0"]
[Sat Nov 15 09:36:51.657689 2025] [:error] [pid 27909:tid 27919] [client 147.135.128.94:55190] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aRfZMyTfZ6B57n8HepXR-wAAAAY"]
[Sat Nov 15 09:36:55.057933 2025] [:error] [pid 27911:tid 27969] [client 147.135.128.94:55206] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aRfZN8GzUdrhGBIfiKQLpwAAAIE"]
[Sat Nov 15 09:36:57.743069 2025] [:error] [pid 22765:tid 22785] [client 147.135.128.94:54368] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRfZOabrQzjuZmPIWDZ-6gAAAo8"]
[Sat Nov 15 09:37:00.425910 2025] [:error] [pid 19961:tid 20006] [client 147.135.128.94:54370] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aRfZPDar7Si-84EApVQcMAAAAc0"]
[Sat Nov 15 09:37:03.352874 2025] [:error] [pid 27997:tid 28007] [client 147.135.128.94:54382] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aRfZP9pja_6cDxKbxFlv9gAAAMg"]
[Sat Nov 15 09:37:06.634765 2025] [:error] [pid 19959:tid 19975] [client 147.135.128.94:54384] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aRfZQsjejiTUP1-IawNdIQAAAYk"]
[Sat Nov 15 09:37:09.255731 2025] [:error] [pid 20346:tid 20372] [client 147.135.128.94:37016] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aRfZRZ7hsydZdIoVTlukWwAAAxc"]
[Sat Nov 15 09:37:12.005592 2025] [:error] [pid 22765:tid 22787] [client 147.135.128.94:37026] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aRfZSKbrQzjuZmPIWDZ_AgAAApE"]
[Sat Nov 15 09:37:14.973127 2025] [:error] [pid 22613:tid 22616] [client 147.135.128.94:37038] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aRfZSioyR3cDsIRGPRlfAQAAAgE"]
[Sat Nov 15 09:37:17.589081 2025] [:error] [pid 19959:tid 19968] [client 147.135.128.94:37042] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aRfZTcjejiTUP1-IawNdKQAAAYI"]
[Sat Nov 15 09:37:20.245018 2025] [:error] [pid 20346:tid 20362] [client 147.135.128.94:51072] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aRfZUJ7hsydZdIoVTlukdgAAAw0"]
[Sat Nov 15 09:37:22.958285 2025] [:error] [pid 20313:tid 20330] [client 147.135.128.94:51088] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aRfZUhI9DXIgPadBLUY4twAAAs4"]
[Sat Nov 15 09:37:25.810052 2025] [:error] [pid 27997:tid 28015] [client 147.135.128.94:51094] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aRfZVdpja_6cDxKbxFlwCAAAANA"]
[Sat Nov 15 09:37:28.301233 2025] [:error] [pid 27909:tid 27936] [client 147.135.128.94:52590] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aRfZWCTfZ6B57n8HepXSIwAAABc"]
[Sat Nov 15 09:37:31.021789 2025] [:error] [pid 22765:tid 22768] [client 147.135.128.94:52592] [client 147.135.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aRfZW6brQzjuZmPIWDZ_GQAAAoA"]
[Sat Nov 15 12:09:26.043610 2025] [:error] [pid 19959:tid 19966] [client 138.197.23.42:64513] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRf89sjejiTUP1-IawOABgAAAYA"]
[Sat Nov 15 12:09:26.466367 2025] [:error] [pid 19959:tid 19973] [client 138.197.23.42:64670] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRf89sjejiTUP1-IawOAJwAAAYc"]
[Sat Nov 15 12:09:26.890566 2025] [:error] [pid 27909:tid 27913] [client 138.197.23.42:64827] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRf89iTfZ6B57n8HepXtOgAAAAA"]
[Sat Nov 15 12:09:27.307413 2025] [:error] [pid 22613:tid 22636] [client 138.197.23.42:64979] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRf89yoyR3cDsIRGPRl8ZgAAAhU"]
[Sat Nov 15 12:09:27.729749 2025] [:error] [pid 19961:tid 19994] [client 138.197.23.42:65142] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRf89zar7Si-84EApVQ2ZAAAAcE"]
[Sat Nov 15 17:46:54.069755 2025] [:error] [pid 20654:tid 20669] [client 187.188.79.71:6135] [client 187.188.79.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.188.79.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRhMDncS7eC8vO76_yfb1gAAA4w"]
[Sat Nov 15 18:57:36.667316 2025] [:error] [pid 27909:tid 27936] [client 182.44.9.147:34207] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRhcoCTfZ6B57n8HepUzWwAAABc"]
[Sat Nov 15 20:16:33.866324 2025] [:error] [pid 20654:tid 20663] [client 45.138.16.215:58441] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "aRhvIXcS7eC8vO76_ycGnAAAA4Y"]
[Sat Nov 15 20:16:34.424617 2025] [:error] [pid 20654:tid 20658] [client 45.138.16.215:58543] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/postnews.php"] [unique_id "aRhvIncS7eC8vO76_ycGogAAA4E"]
[Sat Nov 15 20:16:35.008194 2025] [:error] [pid 27911:tid 27980] [client 45.138.16.215:58640] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/postnews.php"] [unique_id "aRhvI8GzUdrhGBIfiKR0pQAAAIw"]
[Sat Nov 15 20:26:26.927683 2025] [:error] [pid 20654:tid 20677] [client 45.134.79.103:63643] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRhxcncS7eC8vO76_ycI4gAAA5Q"]
[Sat Nov 15 20:26:27.555607 2025] [:error] [pid 27909:tid 27926] [client 45.134.79.103:63913] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRhxcyTfZ6B57n8HepU9kgAAAA0"]
[Sat Nov 15 20:26:28.200157 2025] [:error] [pid 20346:tid 20369] [client 45.134.79.103:64136] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdJ7hsydZdIoVTltM1QAAAxQ"]
[Sun Nov 16 01:50:12.252681 2025] [:error] [pid 20346:tid 20361] [client 203.33.203.148:39304] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRi9VJ7hsydZdIoVTluHPQAAAww"]
[Sun Nov 16 02:50:06.299860 2025] [autoindex:error] [pid 20654:tid 20669] [client 20.2.83.141:62534] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 03:52:28.783608 2025] [:error] [pid 52563:tid 52585] [client 147.135.214.239:41176] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aRjZ_M-l3ey-hVJ5AuvZZgAAANM"]
[Sun Nov 16 03:52:31.253122 2025] [:error] [pid 52563:tid 52589] [client 147.135.214.239:49822] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aRjZ_8-l3ey-hVJ5AuvZaQAAANc"]
[Sun Nov 16 03:52:33.637667 2025] [:error] [pid 52471:tid 52535] [client 147.135.214.239:49826] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aRjaAdmWsFzjR5CEgDWMWwAAAIM"]
[Sun Nov 16 03:52:35.854479 2025] [:error] [pid 52471:tid 52538] [client 147.135.214.239:49832] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aRjaA9mWsFzjR5CEgDWMXgAAAIY"]
[Sun Nov 16 03:52:38.347964 2025] [:error] [pid 52563:tid 52583] [client 147.135.214.239:49848] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aRjaBs-l3ey-hVJ5AuvZcQAAANE"]
[Sun Nov 16 03:52:40.681414 2025] [:error] [pid 52470:tid 52516] [client 147.135.214.239:33298] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aRjaCEg9mXF2ZFFtj1W4IwAAAEs"]
[Sun Nov 16 03:52:43.057496 2025] [:error] [pid 52469:tid 52499] [client 147.135.214.239:33312] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aRjaC06HaXpHeEZ98Z3z6gAAABY"]
[Sun Nov 16 03:52:45.559864 2025] [:error] [pid 52471:tid 52532] [client 147.135.214.239:33318] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRjaDdmWsFzjR5CEgDWMaQAAAIA"]
[Sun Nov 16 03:52:47.884454 2025] [:error] [pid 52471:tid 52540] [client 147.135.214.239:33332] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aRjaD9mWsFzjR5CEgDWMbQAAAIg"]
[Sun Nov 16 03:52:50.375922 2025] [:error] [pid 52470:tid 52514] [client 147.135.214.239:59818] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aRjaEkg9mXF2ZFFtj1W4LwAAAEk"]
[Sun Nov 16 03:52:52.885286 2025] [:error] [pid 52563:tid 52567] [client 147.135.214.239:59834] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aRjaFM-l3ey-hVJ5AuvZiAAAAME"]
[Sun Nov 16 03:52:55.376803 2025] [:error] [pid 52563:tid 52575] [client 147.135.214.239:59850] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aRjaF8-l3ey-hVJ5AuvZkgAAAMk"]
[Sun Nov 16 03:52:57.709455 2025] [:error] [pid 52563:tid 52587] [client 147.135.214.239:59856] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aRjaGc-l3ey-hVJ5AuvZmAAAANU"]
[Sun Nov 16 03:53:00.201766 2025] [:error] [pid 52470:tid 52518] [client 147.135.214.239:45694] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aRjaHEg9mXF2ZFFtj1W4PAAAAE0"]
[Sun Nov 16 03:53:02.542514 2025] [:error] [pid 52470:tid 52509] [client 147.135.214.239:45700] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aRjaHkg9mXF2ZFFtj1W4QQAAAEQ"]
[Sun Nov 16 03:53:05.051800 2025] [:error] [pid 52469:tid 52492] [client 147.135.214.239:45712] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aRjaIU6HaXpHeEZ98Z30BAAAAA8"]
[Sun Nov 16 03:53:07.551688 2025] [:error] [pid 52563:tid 52584] [client 147.135.214.239:45714] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aRjaI8-l3ey-hVJ5AuvZrAAAANI"]
[Sun Nov 16 03:53:10.009115 2025] [:error] [pid 52563:tid 52580] [client 147.135.214.239:57672] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aRjaJs-l3ey-hVJ5AuvZuAAAAM4"]
[Sun Nov 16 03:53:12.485042 2025] [:error] [pid 52471:tid 52542] [client 147.135.214.239:57688] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aRjaKNmWsFzjR5CEgDWMmwAAAIo"]
[Sun Nov 16 03:53:14.985161 2025] [:error] [pid 52563:tid 52578] [client 147.135.214.239:57702] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aRjaKs-l3ey-hVJ5AuvZwQAAAMw"]
[Sun Nov 16 18:46:37.990840 2025] [autoindex:error] [pid 20556:tid 20566] [client 155.94.163.116:49844] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 21:03:54.583550 2025] [:error] [pid 34301:tid 34303] [client 217.182.195.181:58876] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aRnLurGPoZwUGuFNREvo5AAAAoA"]
[Sun Nov 16 21:03:57.719886 2025] [:error] [pid 34133:tid 34144] [client 217.182.195.181:48820] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aRnLvfSAB3iwXVRY0gGrtwAAAUk"]
[Sun Nov 16 21:04:01.673811 2025] [:error] [pid 52471:tid 52532] [client 217.182.195.181:54926] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aRnLwdmWsFzjR5CEgDV4uwAAAIA"]
[Sun Nov 16 21:04:04.502242 2025] [:error] [pid 34271:tid 34277] [client 217.182.195.181:54940] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aRnLxENmlZhoZZV1BUDYpgAAAkQ"]
[Sun Nov 16 21:04:07.151062 2025] [:error] [pid 34165:tid 34217] [client 217.182.195.181:54954] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aRnLx3hG2YTKEjXchwlDzAAAAdY"]
[Sun Nov 16 21:04:11.115641 2025] [:error] [pid 52563:tid 52579] [client 217.182.195.181:36832] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aRnLy8-l3ey-hVJ5AuvKgwAAAM0"]
[Sun Nov 16 21:04:14.145803 2025] [:error] [pid 34164:tid 34186] [client 217.182.195.181:36844] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aRnLzu93ccBCLD8-Q4Z3PwAAAZI"]
[Sun Nov 16 21:04:16.816170 2025] [:error] [pid 34164:tid 34192] [client 217.182.195.181:36860] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRnL0O93ccBCLD8-Q4Z3QQAAAZg"]
[Sun Nov 16 21:04:19.333470 2025] [:error] [pid 34164:tid 34170] [client 217.182.195.181:57166] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aRnL0-93ccBCLD8-Q4Z3QgAAAYI"]
[Sun Nov 16 21:04:21.912336 2025] [:error] [pid 34165:tid 34209] [client 217.182.195.181:57176] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aRnL1XhG2YTKEjXchwlD1wAAAc4"]
[Sun Nov 16 21:04:24.745410 2025] [:error] [pid 34164:tid 34179] [client 217.182.195.181:57184] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aRnL2O93ccBCLD8-Q4Z3SAAAAYs"]
[Sun Nov 16 21:04:27.363366 2025] [:error] [pid 34133:tid 34145] [client 217.182.195.181:57186] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aRnL2_SAB3iwXVRY0gGrxwAAAUo"]
[Sun Nov 16 21:04:30.087966 2025] [:error] [pid 20556:tid 20576] [client 217.182.195.181:37026] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aRnL3kkbyEckbWtBcCKx6QAAARI"]
[Sun Nov 16 21:04:32.551877 2025] [:error] [pid 52469:tid 52483] [client 217.182.195.181:37042] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aRnL4E6HaXpHeEZ98Z0N9gAAAAY"]
[Sun Nov 16 21:04:34.932914 2025] [:error] [pid 34165:tid 34202] [client 217.182.195.181:37054] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aRnL4nhG2YTKEjXchwlD4wAAAcc"]
[Sun Nov 16 21:04:37.363837 2025] [:error] [pid 34165:tid 34210] [client 217.182.195.181:37056] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aRnL5XhG2YTKEjXchwlD5QAAAc8"]
[Sun Nov 16 21:04:40.297855 2025] [:error] [pid 52469:tid 52501] [client 217.182.195.181:55928] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aRnL6E6HaXpHeEZ98Z0N_gAAABg"]
[Sun Nov 16 21:04:42.652648 2025] [:error] [pid 34164:tid 34186] [client 217.182.195.181:55938] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aRnL6u93ccBCLD8-Q4Z3VgAAAZI"]
[Sun Nov 16 21:04:45.267854 2025] [:error] [pid 52469:tid 52484] [client 217.182.195.181:55940] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aRnL7U6HaXpHeEZ98Z0OAgAAAAc"]
[Sun Nov 16 21:04:47.917938 2025] [:error] [pid 34227:tid 34231] [client 217.182.195.181:55950] [client 217.182.195.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aRnL73108zGLYs9eMuhUKgAAAgI"]
[Mon Nov 17 02:49:27.668076 2025] [:error] [pid 55655:tid 55682] [client 80.77.123.93:41318] [client 80.77.123.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.77.123.93, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRoctyGT_hu1vaVuRSSPSgAAABc"]
[Mon Nov 17 02:49:30.810050 2025] [:error] [pid 55655:tid 55662] [client 80.77.123.93:41334] [client 80.77.123.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.77.123.93, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRocuiGT_hu1vaVuRSSPUAAAAAM"]
[Mon Nov 17 06:29:24.361293 2025] [:error] [pid 39537:tid 39548] [client 187.188.79.71:50904] [client 187.188.79.71] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRpQRIZRrh1pcrdcLB_4VgAAAMg"]
[Mon Nov 17 06:30:08.683800 2025] [:error] [pid 39450:tid 39489] [client 187.188.79.71:64410] [client 187.188.79.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.188.79.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRpQcOoZqPB4_7vNEDSlOQAAAEg"]
[Mon Nov 17 13:44:54.428033 2025] [:error] [pid 15150:tid 15174] [client 103.180.170.253:56575] [client 103.180.170.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.180.170.253, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRq2Vn2DEo_rcsFuxj1PfwAAAZY"]
[Mon Nov 17 14:22:17.035311 2025] [:error] [pid 21538:tid 21563] [client 147.135.213.172:54126] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aRq_GadTlflWtZ7KEyhNmAAAA5c"]
[Mon Nov 17 14:22:20.053614 2025] [:error] [pid 21538:tid 21546] [client 147.135.213.172:54138] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aRq_HKdTlflWtZ7KEyhNmgAAA4Y"]
[Mon Nov 17 14:22:22.713718 2025] [:error] [pid 40548:tid 40553] [client 147.135.213.172:41058] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aRq_HgM_PykfYnxh-j89UgAAAQM"]
[Mon Nov 17 14:22:25.253162 2025] [:error] [pid 40548:tid 40555] [client 147.135.213.172:41062] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRq_IQM_PykfYnxh-j89VQAAAQU"]
[Mon Nov 17 14:22:29.430638 2025] [:error] [pid 30801:tid 30816] [client 147.135.213.172:41074] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aRq_JTbGAU49DhMTBD694QAAAk0"]
[Mon Nov 17 14:22:35.606719 2025] [:error] [pid 40548:tid 40553] [client 147.135.213.172:45162] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aRq_KwM_PykfYnxh-j89YAAAAQM"]
[Mon Nov 17 14:22:42.496103 2025] [:error] [pid 40548:tid 40555] [client 147.135.213.172:45166] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aRq_MgM_PykfYnxh-j89dAAAAQU"]
[Mon Nov 17 14:22:46.732859 2025] [:error] [pid 40548:tid 40568] [client 147.135.213.172:37068] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aRq_NgM_PykfYnxh-j89fgAAARI"]
[Mon Nov 17 14:22:51.965013 2025] [:error] [pid 21538:tid 21563] [client 147.135.213.172:37076] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aRq_O6dTlflWtZ7KEyhNqgAAA5c"]
[Mon Nov 17 14:22:58.914600 2025] [:error] [pid 39449:tid 39458] [client 147.135.213.172:39264] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aRq_QqUCymTA3MDfzLMTvAAAAAQ"]
[Mon Nov 17 14:23:04.794071 2025] [:error] [pid 39449:tid 39460] [client 147.135.213.172:39266] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aRq_SKUCymTA3MDfzLMTvgAAAAY"]
[Mon Nov 17 14:23:09.822291 2025] [:error] [pid 19303:tid 19319] [client 147.135.213.172:50646] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aRq_TYG5BTwyMI8KItr7KAAAAw0"]
[Mon Nov 17 14:26:26.340284 2025] [:error] [pid 30801:tid 30826] [client 20.73.39.99:1226] [client 20.73.39.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.73.39.99, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRrAEjbGAU49DhMTBD69-gAAAlc"]
[Mon Nov 17 14:26:46.713040 2025] [:error] [pid 19120:tid 19135] [client 20.73.39.99:1218] [client 20.73.39.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.73.39.99, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRrAJoO1H08wfYmhCh-9BgAAAs0"]
[Mon Nov 17 17:31:40.325398 2025] [:error] [pid 20913:tid 20937] [client 125.75.66.97:47614] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRrrfOkafGNeN3nY1bc9wwAAA1Y"]
[Mon Nov 17 19:36:32.550637 2025] [:error] [pid 31419:tid 31429] [client 103.135.39.173:63847] [client 103.135.39.173] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRsIwAHQ5Sbp7elmDZiUVgAAAog"]
[Mon Nov 17 19:38:13.822707 2025] [:error] [pid 32753:tid 32758] [client 103.135.39.173:54115] [client 103.135.39.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.135.39.173, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRsJJU6YNqI5vkht92181wAAA8I"]
[Mon Nov 17 19:39:39.396168 2025] [:error] [pid 30801:tid 30822] [client 103.135.39.173:53990] [client 103.135.39.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.135.39.173, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRsJezbGAU49DhMTBD7suwAAAlM"]
[Mon Nov 17 22:30:23.216545 2025] [:error] [pid 32753:tid 32778] [client 20.84.233.39:6340] [client 20.84.233.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.84.233.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRsxf06YNqI5vkht922nQwAAA9Y"]
[Mon Nov 17 22:30:39.610789 2025] [:error] [pid 39449:tid 39473] [client 20.84.233.39:6338] [client 20.84.233.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.84.233.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRsxj6UCymTA3MDfzLN25gAAABM"]
[Mon Nov 17 23:38:01.660102 2025] [:error] [pid 39451:tid 39511] [client 34.172.109.36:39598] [client 34.172.109.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aRtBWefgkqXTS0SO3fA7fAAAAIM"]
[Tue Nov 18 00:27:05.953261 2025] [:error] [pid 40553:tid 40576] [client 101.91.148.219:43726] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRtM2duLE1BqoX0RcsLV3gAAAAc"]
[Tue Nov 18 01:14:40.237877 2025] [:error] [pid 40562:tid 40632] [client 34.21.44.67:51730] [client 34.21.44.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aRtYAB18kaCmPuHE4a8KWAAAAUk"]
[Tue Nov 18 05:20:07.824803 2025] [:error] [pid 42804:tid 42829] [client 216.24.219.58:42905] [client 216.24.219.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "aRuRh_pXARlE6tIuBnk_lQAAAVc"]
[Tue Nov 18 05:20:08.303819 2025] [:error] [pid 42804:tid 42821] [client 216.24.219.54:32833] [client 216.24.219.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "aRuRiPpXARlE6tIuBnk_lgAAAU8"]
[Tue Nov 18 05:20:08.785493 2025] [:error] [pid 42804:tid 42826] [client 104.234.19.78:35303] [client 104.234.19.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "aRuRiPpXARlE6tIuBnk_mQAAAVQ"]
[Tue Nov 18 06:33:04.402658 2025] [:error] [pid 61393:tid 61465] [client 20.73.39.99:14216] [client 20.73.39.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.73.39.99, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRuioGH9XjlbVPv9gQUkGwAAAIk"]
[Tue Nov 18 06:33:08.539051 2025] [:error] [pid 61391:tid 61403] [client 20.73.39.99:14221] [client 20.73.39.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.73.39.99, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRuipIwXIKmhlnkP3-dkggAAAAM"]
[Tue Nov 18 06:41:31.742953 2025] [:error] [pid 29195:tid 29202] [client 120.71.59.24:58373] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRukmxMeonxy_4yeOTVDTAAAAQU"]
[Tue Nov 18 07:47:50.723090 2025] [:error] [pid 29195:tid 29218] [client 51.91.242.106:38892] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp%20slot.aspx"] [unique_id "aRu0JhMeonxy_4yeOTVRwQAAARU"]
[Tue Nov 18 07:47:52.063301 2025] [:error] [pid 61392:tid 61432] [client 51.91.242.106:38876] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp%20slot.aspx"] [unique_id "aRu0KHSmvb496zZxueLpkgAAAEM"]
[Tue Nov 18 07:47:53.489466 2025] [:error] [pid 61482:tid 61508] [client 51.91.242.106:41378] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches666%20pg.aspx"] [unique_id "aRu0KftNHsWZClVWav5nAwAAANU"]
[Tue Nov 18 07:47:55.130500 2025] [:error] [pid 29195:tid 29210] [client 51.91.242.106:41394] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches666%20pg.aspx"] [unique_id "aRu0KxMeonxy_4yeOTVRxAAAAQ0"]
[Tue Nov 18 07:47:56.107445 2025] [:error] [pid 61393:tid 61476] [client 51.91.242.106:41396] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aRu0LGH9XjlbVPv9gQU0kwAAAJQ"]
[Tue Nov 18 07:47:57.822340 2025] [:error] [pid 61392:tid 61442] [client 51.91.242.106:34048] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aRu0LXSmvb496zZxueLplwAAAE0"]
[Tue Nov 18 07:47:58.943653 2025] [:error] [pid 42804:tid 42817] [client 51.91.242.106:34056] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aRu0LvpXARlE6tIuBnlu9wAAAUs"]
[Tue Nov 18 07:48:01.394969 2025] [:error] [pid 61391:tid 61420] [client 51.91.242.106:34070] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aRu0MYwXIKmhlnkP3-d0_QAAABQ"]
[Tue Nov 18 07:48:02.399675 2025] [:error] [pid 61392:tid 61453] [client 51.91.242.106:34074] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aRu0MnSmvb496zZxueLpmQAAAFg"]
[Tue Nov 18 07:48:04.659753 2025] [:error] [pid 61391:tid 61414] [client 51.91.242.106:34088] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aRu0NIwXIKmhlnkP3-d1AAAAAA4"]
[Tue Nov 18 07:48:05.397976 2025] [:error] [pid 61392:tid 61441] [client 51.91.242.106:34104] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aRu0NXSmvb496zZxueLpnAAAAEw"]
[Tue Nov 18 07:48:07.686652 2025] [:error] [pid 29195:tid 29212] [client 51.91.242.106:34110] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aRu0NxMeonxy_4yeOTVRyAAAAQ8"]
[Tue Nov 18 07:48:08.131190 2025] [:error] [pid 61391:tid 61411] [client 51.91.242.106:39068] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aRu0OIwXIKmhlnkP3-d1BAAAAAs"]
[Tue Nov 18 07:48:11.261983 2025] [:error] [pid 42804:tid 42813] [client 51.91.242.106:39078] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aRu0O_pXARlE6tIuBnlvAgAAAUc"]
[Tue Nov 18 07:48:11.456425 2025] [:error] [pid 29195:tid 29221] [client 51.91.242.106:39086] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aRu0OxMeonxy_4yeOTVRyQAAARg"]
[Tue Nov 18 07:48:14.597432 2025] [:error] [pid 28635:tid 28657] [client 51.91.242.106:39092] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aRu0PmB61AnWhG54Xz3BvgAAAdM"]
[Tue Nov 18 07:48:14.852974 2025] [:error] [pid 61392:tid 61452] [client 51.91.242.106:39104] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aRu0PnSmvb496zZxueLpqwAAAFc"]
[Tue Nov 18 07:48:17.831373 2025] [:error] [pid 9935:tid 9943] [client 51.91.242.106:39106] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRu0QQWOMXsrZFRF6sjqGwAAAYY"]
[Tue Nov 18 07:48:18.195168 2025] [:error] [pid 61393:tid 61474] [client 51.91.242.106:60362] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aRu0QmH9XjlbVPv9gQU0qwAAAJI"]
[Tue Nov 18 07:48:20.909819 2025] [:error] [pid 61482:tid 61508] [client 51.91.242.106:60376] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRu0RPtNHsWZClVWav5nIgAAANU"]
[Tue Nov 18 07:48:20.935334 2025] [:error] [pid 61482:tid 61501] [client 51.91.242.106:60378] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aRu0RPtNHsWZClVWav5nIwAAAM4"]
[Tue Nov 18 07:48:23.949077 2025] [:error] [pid 42804:tid 42823] [client 51.91.242.106:60396] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aRu0R_pXARlE6tIuBnlvDAAAAVE"]
[Tue Nov 18 07:48:24.018294 2025] [:error] [pid 42804:tid 42828] [client 51.91.242.106:60388] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aRu0SPpXARlE6tIuBnlvDQAAAVY"]
[Tue Nov 18 07:48:27.009926 2025] [:error] [pid 9935:tid 9943] [client 51.91.242.106:60398] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aRu0SwWOMXsrZFRF6sjqIwAAAYY"]
[Tue Nov 18 07:48:28.347230 2025] [:error] [pid 28635:tid 28656] [client 51.91.242.106:55220] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aRu0TGB61AnWhG54Xz3ByAAAAdI"]
[Tue Nov 18 07:48:31.182960 2025] [:error] [pid 9935:tid 9954] [client 51.91.242.106:55222] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aRu0TwWOMXsrZFRF6sjqKQAAAZE"]
[Tue Nov 18 07:48:32.352635 2025] [:error] [pid 29195:tid 29206] [client 51.91.242.106:55230] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aRu0UBMeonxy_4yeOTVR2QAAAQk"]
[Tue Nov 18 07:48:34.331444 2025] [:error] [pid 61391:tid 61402] [client 51.91.242.106:55232] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aRu0UowXIKmhlnkP3-d1EQAAAAI"]
[Tue Nov 18 07:48:35.528967 2025] [:error] [pid 61482:tid 61508] [client 51.91.242.106:55244] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aRu0U_tNHsWZClVWav5nLwAAANU"]
[Tue Nov 18 07:48:37.073044 2025] [:error] [pid 9935:tid 9949] [client 51.91.242.106:55250] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aRu0VQWOMXsrZFRF6sjqMgAAAYw"]
[Tue Nov 18 07:48:38.182874 2025] [:error] [pid 61392:tid 61443] [client 51.91.242.106:60672] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aRu0VnSmvb496zZxueLprgAAAE4"]
[Tue Nov 18 07:48:40.256981 2025] [:error] [pid 61393:tid 61459] [client 51.91.242.106:60680] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aRu0WGH9XjlbVPv9gQU0ugAAAIM"]
[Tue Nov 18 07:48:41.096329 2025] [:error] [pid 28635:tid 28651] [client 51.91.242.106:60692] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aRu0WWB61AnWhG54Xz3B0gAAAc0"]
[Tue Nov 18 07:48:42.986007 2025] [:error] [pid 61482:tid 61507] [client 51.91.242.106:60698] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aRu0WvtNHsWZClVWav5nNQAAANQ"]
[Tue Nov 18 07:48:43.941274 2025] [:error] [pid 28635:tid 28658] [client 51.91.242.106:60710] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aRu0W2B61AnWhG54Xz3B1wAAAdQ"]
[Tue Nov 18 07:48:45.824670 2025] [:error] [pid 9935:tid 9949] [client 51.91.242.106:60726] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aRu0XQWOMXsrZFRF6sjqPQAAAYw"]
[Tue Nov 18 07:48:46.994298 2025] [:error] [pid 42804:tid 42824] [client 51.91.242.106:60736] [client 51.91.242.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aRu0XvpXARlE6tIuBnlvHQAAAVI"]
[Tue Nov 18 08:24:30.156636 2025] [:error] [pid 42804:tid 42815] [client 89.169.13.60:44738] [client 89.169.13.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.169.13.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRu8vvpXARlE6tIuBnl3jQAAAUk"]
[Tue Nov 18 08:24:38.087659 2025] [:error] [pid 61392:tid 61448] [client 57.129.24.130:36112] [client 57.129.24.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.129.24.130, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aRu8xnSmvb496zZxueLzqAAAAFM"]
[Tue Nov 18 13:03:41.495137 2025] [:error] [pid 44560:tid 44590] [client 203.2.64.59:59778] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRv-LQnbP7etF3q5-5sgNQAAANM"]
[Tue Nov 18 19:15:19.196059 2025] [:error] [pid 44471:tid 44517] [client 84.247.191.22:55648] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aRxVR-_6m0bQO14XwtNfawAAAQ0"], referer: binance.com
[Tue Nov 18 19:32:04.061972 2025] [:error] [pid 1387:tid 1395] [client 120.71.59.24:55594] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRxZNEzBvalKyx3hMvV_9wAAAAU"]
[Tue Nov 18 21:37:30.881702 2025] [:error] [pid 44471:tid 44514] [client 45.134.79.103:64993] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRx2mu_6m0bQO14XwtOCzAAAAQo"]
[Tue Nov 18 21:37:31.548983 2025] [:error] [pid 3500:tid 3517] [client 45.134.79.103:54768] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRx2m_CbRC7k2D7mjbSTxQAAAc8"]
[Tue Nov 18 21:37:32.222840 2025] [:error] [pid 1387:tid 1399] [client 45.134.79.103:50707] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nEzBvalKyx3hMvWevAAAAAY"]
[Wed Nov 19 00:45:58.405242 2025] [:error] [pid 43881:tid 43929] [client 49.51.245.241:44652] [client 49.51.245.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRyixn_TrIND5buvEyfD6QAAAVA"]
[Wed Nov 19 01:31:16.087236 2025] [:error] [pid 44063:tid 44124] [client 195.201.199.99:53992] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aRytZEVOSC7H33BBqQ3xMQAAAIc"]
[Wed Nov 19 01:31:19.616376 2025] [:error] [pid 3052:tid 3150] [client 195.201.199.99:49948] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aRytZ1NM6bOMTTuJnz1-DwAAANU"]
[Wed Nov 19 01:31:23.080888 2025] [:error] [pid 43880:tid 43897] [client 195.201.199.99:51250] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aRyta-1q1HNbKyNr9SZjSAAAAEw"]
[Wed Nov 19 01:31:26.319789 2025] [:error] [pid 43881:tid 43920] [client 195.201.199.99:52586] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aRytbn_TrIND5buvEyfXrwAAAUc"]
[Wed Nov 19 01:31:30.085674 2025] [:error] [pid 43880:tid 43899] [client 195.201.199.99:53810] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aRytcu1q1HNbKyNr9SZjZwAAAE4"]
[Wed Nov 19 01:31:33.325581 2025] [:error] [pid 43880:tid 43887] [client 195.201.199.99:55024] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aRytde1q1HNbKyNr9SZjbAAAAEI"]
[Wed Nov 19 01:31:37.073658 2025] [:error] [pid 44063:tid 44118] [client 195.201.199.99:56380] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aRyteUVOSC7H33BBqQ3xVQAAAIE"]
[Wed Nov 19 01:31:41.051911 2025] [:error] [pid 3052:tid 3135] [client 195.201.199.99:57774] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aRytfVNM6bOMTTuJnz1-TgAAAMY"]
[Wed Nov 19 01:31:44.850610 2025] [:error] [pid 3052:tid 3131] [client 195.201.199.99:59246] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aRytgFNM6bOMTTuJnz1-WQAAAMI"]
[Wed Nov 19 01:31:48.478333 2025] [:error] [pid 43880:tid 43905] [client 195.201.199.99:60588] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aRythO1q1HNbKyNr9SZjgQAAAFQ"]
[Wed Nov 19 01:31:52.156230 2025] [:error] [pid 43880:tid 43904] [client 195.201.199.99:33514] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aRytiO1q1HNbKyNr9SZjjgAAAFM"]
[Wed Nov 19 01:31:56.201108 2025] [:error] [pid 43880:tid 43903] [client 195.201.199.99:34962] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aRytjO1q1HNbKyNr9SZjnwAAAFI"]
[Wed Nov 19 01:31:59.418323 2025] [:error] [pid 43882:tid 43948] [client 195.201.199.99:36088] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aRytj95CQQLff3maRMLmKAAAAAg"]
[Wed Nov 19 01:32:03.785702 2025] [:error] [pid 43881:tid 43926] [client 195.201.199.99:37602] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aRytk3_TrIND5buvEyfX5gAAAU0"]
[Wed Nov 19 01:32:08.714284 2025] [:error] [pid 43882:tid 43940] [client 195.201.199.99:39286] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aRytmN5CQQLff3maRMLmNQAAAAA"]
[Wed Nov 19 02:00:54.514185 2025] [:error] [pid 43882:tid 43962] [client 106.222.200.238:32524] [client 106.222.200.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.200.238, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRy0Vt5CQQLff3maRMLzBwAAABY"]
[Wed Nov 19 02:03:57.085379 2025] [:error] [pid 43881:tid 43918] [client 112.206.98.94:51741] [client 112.206.98.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.206.98.94, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aRy1DX_TrIND5buvEyfj9wAAAUU"]
[Wed Nov 19 02:06:16.664906 2025] [:error] [pid 43880:tid 43903] [client 182.43.70.143:42179] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aRy1mO1q1HNbKyNr9SZzPQAAAFI"]
[Wed Nov 19 05:31:01.160122 2025] [:error] [pid 6644:tid 6654] [client 74.176.67.163:61909] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/raw.php"] [unique_id "aRzllU0i6Rf788MB6samQAAAAMg"]
[Wed Nov 19 05:31:01.390221 2025] [:error] [pid 6556:tid 6632] [client 74.176.67.163:26563] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/raw.php"] [unique_id "aRzllZuL7hhgrmdM1mtL8gAAAI4"]
[Wed Nov 19 05:31:01.617632 2025] [:error] [pid 6556:tid 6634] [client 74.176.67.163:26115] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/raw.php"] [unique_id "aRzllZuL7hhgrmdM1mtL8wAAAJA"]
[Wed Nov 19 05:31:01.846013 2025] [:error] [pid 6555:tid 6613] [client 74.176.67.163:26118] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/raw.php"] [unique_id "aRzllUbVJm8eMsGMTCNh-AAAAFY"]
[Wed Nov 19 05:31:02.077904 2025] [:error] [pid 6556:tid 6629] [client 74.176.67.163:26414] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hans.php"] [unique_id "aRzllpuL7hhgrmdM1mtL9QAAAIs"]
[Wed Nov 19 05:31:02.316504 2025] [:error] [pid 6919:tid 6945] [client 74.176.67.163:26396] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hans.php"] [unique_id "aRzllkYFdN1s_9xJVUloawAAARc"]
[Wed Nov 19 05:31:02.553882 2025] [:error] [pid 6919:tid 6925] [client 74.176.67.163:26577] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hans.php"] [unique_id "aRzllkYFdN1s_9xJVUlobAAAAQM"]
[Wed Nov 19 05:31:02.787053 2025] [:error] [pid 6919:tid 6943] [client 74.176.67.163:26574] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hans.php"] [unique_id "aRzllkYFdN1s_9xJVUlocAAAARU"]
[Wed Nov 19 05:31:03.021329 2025] [:error] [pid 6554:tid 6574] [client 74.176.67.163:26371] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aRzll98rvPWLafJFqmUssgAAAA4"]
[Wed Nov 19 05:31:03.250369 2025] [:error] [pid 6554:tid 6566] [client 74.176.67.163:26596] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aRzll98rvPWLafJFqmUsswAAAAc"]
[Wed Nov 19 05:31:03.479381 2025] [:error] [pid 6644:tid 6648] [client 74.176.67.163:26564] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aRzll00i6Rf788MB6samQQAAAMI"]
[Wed Nov 19 05:31:03.706676 2025] [:error] [pid 6919:tid 6938] [client 74.176.67.163:25752] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aRzll0YFdN1s_9xJVUlocgAAARA"]
[Wed Nov 19 05:31:03.933637 2025] [:error] [pid 6556:tid 6619] [client 74.176.67.163:26592] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aRzll5uL7hhgrmdM1mtL9wAAAIE"]
[Wed Nov 19 05:31:04.161474 2025] [:error] [pid 6555:tid 6614] [client 74.176.67.163:26622] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aRzlmEbVJm8eMsGMTCNh_gAAAFc"]
[Wed Nov 19 05:31:04.388924 2025] [:error] [pid 6919:tid 6929] [client 74.176.67.163:25746] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aRzlmEYFdN1s_9xJVUlodAAAAQc"]
[Wed Nov 19 05:31:04.623023 2025] [:error] [pid 6556:tid 6621] [client 74.176.67.163:26599] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aRzlmJuL7hhgrmdM1mtL-AAAAIM"]
[Wed Nov 19 05:31:04.850744 2025] [:error] [pid 6919:tid 6923] [client 74.176.67.163:26404] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aRzlmEYFdN1s_9xJVUlodgAAAQE"]
[Wed Nov 19 05:31:05.078494 2025] [:error] [pid 6919:tid 6933] [client 74.176.67.163:26607] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aRzlmUYFdN1s_9xJVUlodwAAAQs"]
[Wed Nov 19 05:31:05.305534 2025] [:error] [pid 6919:tid 6928] [client 74.176.67.163:26392] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aRzlmUYFdN1s_9xJVUloeAAAAQY"]
[Wed Nov 19 05:31:05.540692 2025] [:error] [pid 6919:tid 6943] [client 74.176.67.163:26570] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aRzlmUYFdN1s_9xJVUloegAAARU"]
[Wed Nov 19 05:31:05.774899 2025] [:error] [pid 6556:tid 6634] [client 74.176.67.163:25757] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aRzlmZuL7hhgrmdM1mtL-wAAAJA"]
[Wed Nov 19 05:31:06.080423 2025] [:error] [pid 6919:tid 6940] [client 74.176.67.163:26572] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aRzlmkYFdN1s_9xJVUlofAAAARI"]
[Wed Nov 19 05:31:06.447766 2025] [:error] [pid 6644:tid 6669] [client 74.176.67.163:26402] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aRzlmk0i6Rf788MB6samQwAAANc"]
[Wed Nov 19 05:31:06.953087 2025] [:error] [pid 6554:tid 6571] [client 74.176.67.163:61332] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aRzlmt8rvPWLafJFqmUsuQAAAAs"]
[Wed Nov 19 05:31:07.203941 2025] [:error] [pid 6556:tid 6631] [client 74.176.67.163:26588] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aRzlm5uL7hhgrmdM1mtMAQAAAI0"]
[Wed Nov 19 05:31:07.528685 2025] [:error] [pid 6554:tid 6582] [client 74.176.67.163:61338] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aRzlm98rvPWLafJFqmUsvAAAABY"]
[Wed Nov 19 05:31:07.757878 2025] [:error] [pid 6556:tid 6619] [client 74.176.67.163:26573] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aRzlm5uL7hhgrmdM1mtMBAAAAIE"]
[Wed Nov 19 05:31:07.985829 2025] [:error] [pid 6554:tid 6566] [client 74.176.67.163:26386] [client 74.176.67.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aRzlm98rvPWLafJFqmUsvQAAAAc"]
[Wed Nov 19 07:30:38.322492 2025] [:error] [pid 6919:tid 6922] [client 18.191.165.250:56418] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR0BnkYFdN1s_9xJVUmq9AAAAQA"]
[Wed Nov 19 07:30:38.715269 2025] [:error] [pid 6644:tid 6661] [client 18.191.165.250:56506] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR0Bnk0i6Rf788MB6sbZsgAAAM8"]
[Wed Nov 19 07:30:39.114903 2025] [:error] [pid 6644:tid 6657] [client 18.191.165.250:56659] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR0Bn00i6Rf788MB6sbZyAAAAMs"]
[Wed Nov 19 07:30:39.506740 2025] [:error] [pid 6919:tid 6932] [client 18.191.165.250:56753] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR0Bn0YFdN1s_9xJVUmrMQAAAQo"]
[Wed Nov 19 07:30:39.899483 2025] [:error] [pid 6556:tid 6623] [client 18.191.165.250:56837] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR0Bn5uL7hhgrmdM1mt7QgAAAIU"]
[Wed Nov 19 12:32:33.201330 2025] [:error] [pid 26664:tid 26678] [client 150.109.230.210:48946] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR1IYYpWc1yoj2P7MeCgdQAAAUs"]
[Wed Nov 19 16:20:37.962960 2025] [:error] [pid 12673:tid 12714] [client 85.8.130.95:59807] [client 85.8.130.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.95, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR191cab1F0fb062dH02iAAAAgo"]
[Wed Nov 19 17:28:04.127789 2025] [:error] [pid 12673:tid 12712] [client 85.8.130.54:31411] [client 85.8.130.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.54, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR2NpMab1F0fb062dH1D5wAAAgg"]
[Wed Nov 19 17:51:31.753865 2025] [:error] [pid 6644:tid 6662] [client 85.8.130.50:29625] [client 85.8.130.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR2TI00i6Rf788MB6saZ5QAAANA"]
[Wed Nov 19 18:29:41.458336 2025] [:error] [pid 12643:tid 12650] [client 85.8.130.45:56995] [client 85.8.130.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.45, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR2cFcaLCNSdLHNAGt7fvgAAAYQ"]
[Wed Nov 19 18:51:23.371089 2025] [:error] [pid 12672:tid 12701] [client 85.8.130.65:51681] [client 85.8.130.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR2hK_9vojl6X1cc5mUWpwAAAdg"]
[Wed Nov 19 19:11:03.806269 2025] [:error] [pid 26664:tid 26691] [client 85.8.130.46:55373] [client 85.8.130.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR2lx4pWc1yoj2P7MeD2TwAAAVc"]
[Wed Nov 19 19:29:28.017956 2025] [:error] [pid 12643:tid 12664] [client 85.8.130.72:24153] [client 85.8.130.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR2qGMaLCNSdLHNAGt7rkQAAAZI"]
[Wed Nov 19 19:47:46.264894 2025] [:error] [pid 6554:tid 6581] [client 85.8.130.51:23691] [client 85.8.130.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.51, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR2uYt8rvPWLafJFqmX0AgAAABU"]
[Wed Nov 19 20:08:43.145020 2025] [:error] [pid 6919:tid 6932] [client 85.8.130.53:59705] [client 85.8.130.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR2zS0YFdN1s_9xJVUl9DwAAAQo"]
[Wed Nov 19 20:22:47.312817 2025] [:error] [pid 12643:tid 12670] [client 173.239.254.64:58189] [client 173.239.254.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.64, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR22l8aLCNSdLHNAGt71cQAAAZg"]
[Wed Nov 19 20:32:44.552510 2025] [:error] [pid 12673:tid 12711] [client 85.8.130.56:29825] [client 85.8.130.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.56, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR247Mab1F0fb062dH1w8QAAAgc"]
[Wed Nov 19 20:35:57.842660 2025] [:error] [pid 6644:tid 6664] [client 104.196.176.201:58188] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/media/system/js/core.js"] [unique_id "aR25rU0i6Rf788MB6sbRDgAAANI"]
[Wed Nov 19 20:51:05.476793 2025] [:error] [pid 6919:tid 6929] [client 85.8.130.75:30757] [client 85.8.130.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.75, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR29OUYFdN1s_9xJVUmEOAAAAQc"]
[Wed Nov 19 21:07:50.801271 2025] [:error] [pid 6919:tid 6929] [client 58.49.233.126:48779] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR3BJkYFdN1s_9xJVUmHCwAAAQc"]
[Wed Nov 19 21:10:53.081738 2025] [:error] [pid 6556:tid 6619] [client 85.8.130.87:35381] [client 85.8.130.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.87, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3B3ZuL7hhgrmdM1mstPwAAAIE"]
[Wed Nov 19 21:29:04.142447 2025] [:error] [pid 6555:tid 6605] [client 85.8.130.83:47785] [client 85.8.130.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.83, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3GIEbVJm8eMsGMTCM8SgAAAE4"]
[Wed Nov 19 21:47:07.693278 2025] [:error] [pid 26664:tid 26688] [client 85.8.130.88:31371] [client 85.8.130.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.88, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3KW4pWc1yoj2P7MeAOgwAAAVQ"]
[Wed Nov 19 22:06:38.266363 2025] [:error] [pid 26664:tid 26671] [client 85.8.130.74:20089] [client 85.8.130.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.74, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3O7opWc1yoj2P7MeAQ8QAAAUQ"]
[Wed Nov 19 22:24:53.876632 2025] [:error] [pid 26664:tid 26686] [client 85.8.130.72:59431] [client 85.8.130.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3TNYpWc1yoj2P7MeATiQAAAVI"]
[Wed Nov 19 22:43:25.588195 2025] [:error] [pid 12673:tid 12724] [client 85.8.130.46:64779] [client 85.8.130.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3Xjcab1F0fb062dH2LewAAAhQ"]
[Wed Nov 19 23:01:37.554676 2025] [:error] [pid 12643:tid 12666] [client 85.8.130.55:60807] [client 85.8.130.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.55, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3b0caLCNSdLHNAGt4MFQAAAZQ"]
[Wed Nov 19 23:19:59.808494 2025] [:error] [pid 12643:tid 12666] [client 193.37.33.247:45447] [client 193.37.33.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.247, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3gH8aLCNSdLHNAGt4PewAAAZQ"]
[Wed Nov 19 23:31:51.950585 2025] [:error] [pid 12673:tid 12725] [client 85.8.130.48:28437] [client 85.8.130.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3i58ab1F0fb062dH2VQAAAAhU"]
[Wed Nov 19 23:57:23.612923 2025] [:error] [pid 26664:tid 26691] [client 193.37.33.247:34461] [client 193.37.33.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.247, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3o44pWc1yoj2P7MeAhiQAAAVc"]
[Thu Nov 20 00:01:00.371251 2025] [:error] [pid 12672:tid 12700] [client 91.137.27.140:26165] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aR3pvP9vojl6X1cc5mVVpQAAAdc"]
[Thu Nov 20 00:01:02.819972 2025] [:error] [pid 6644:tid 6665] [client 91.137.27.140:1473] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aR3pvk0i6Rf788MB6sYKAgAAANM"]
[Thu Nov 20 00:01:05.148798 2025] [:error] [pid 6556:tid 6624] [client 91.137.27.140:30383] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aR3pwZuL7hhgrmdM1mtDLQAAAIY"]
[Thu Nov 20 00:01:07.610778 2025] [:error] [pid 6644:tid 6659] [client 91.137.27.140:38904] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aR3pw00i6Rf788MB6sYKKwAAAM0"]
[Thu Nov 20 00:01:09.922286 2025] [:error] [pid 6644:tid 6646] [client 91.137.27.140:38330] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aR3pxU0i6Rf788MB6sYKLQAAAMA"]
[Thu Nov 20 00:01:12.230425 2025] [:error] [pid 6919:tid 6946] [client 91.137.27.140:31309] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aR3pyEYFdN1s_9xJVUmifgAAARg"]
[Thu Nov 20 00:01:14.544758 2025] [:error] [pid 6644:tid 6651] [client 91.137.27.140:58684] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aR3pyk0i6Rf788MB6sYKOwAAAMU"]
[Thu Nov 20 00:01:17.000241 2025] [:error] [pid 26664:tid 26669] [client 91.137.27.140:6469] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aR3pzIpWc1yoj2P7MeAiBwAAAUI"]
[Thu Nov 20 00:01:19.444140 2025] [:error] [pid 12673:tid 12707] [client 91.137.27.140:40003] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aR3pz8ab1F0fb062dH2cBAAAAgM"]
[Thu Nov 20 00:01:21.889869 2025] [:error] [pid 6644:tid 6653] [client 91.137.27.140:19506] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aR3p0U0i6Rf788MB6sYKQgAAAMc"]
[Thu Nov 20 00:01:24.352429 2025] [:error] [pid 12673:tid 12708] [client 91.137.27.140:56101] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aR3p1Mab1F0fb062dH2cDwAAAgQ"]
[Thu Nov 20 00:01:26.804707 2025] [:error] [pid 6554:tid 6573] [client 91.137.27.140:13498] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aR3p1t8rvPWLafJFqmUXIQAAAA0"]
[Thu Nov 20 00:01:29.262324 2025] [:error] [pid 6919:tid 6934] [client 91.137.27.140:34800] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aR3p2UYFdN1s_9xJVUmioAAAAQw"]
[Thu Nov 20 00:01:31.713998 2025] [:error] [pid 12672:tid 12682] [client 91.137.27.140:1125] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aR3p2_9vojl6X1cc5mVV3wAAAcU"]
[Thu Nov 20 00:01:34.172629 2025] [:error] [pid 6919:tid 6937] [client 91.137.27.140:12679] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aR3p3kYFdN1s_9xJVUmiowAAAQ8"]
[Thu Nov 20 00:01:36.614856 2025] [:error] [pid 26664:tid 26683] [client 91.137.27.140:56704] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aR3p4IpWc1yoj2P7MeAiFAAAAU8"]
[Thu Nov 20 00:01:39.076385 2025] [:error] [pid 12643:tid 12670] [client 91.137.27.140:2674] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aR3p48aLCNSdLHNAGt4XQQAAAZg"]
[Thu Nov 20 00:01:41.517988 2025] [:error] [pid 26664:tid 26687] [client 91.137.27.140:54107] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aR3p5YpWc1yoj2P7MeAiFgAAAVM"]
[Thu Nov 20 00:01:43.980615 2025] [:error] [pid 6554:tid 6578] [client 91.137.27.140:25723] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aR3p598rvPWLafJFqmUXJwAAABI"]
[Thu Nov 20 00:01:46.433325 2025] [:error] [pid 26664:tid 26668] [client 91.137.27.140:29368] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aR3p6opWc1yoj2P7MeAiFwAAAUE"]
[Thu Nov 20 00:08:15.314151 2025] [:error] [pid 6555:tid 6596] [client 85.8.130.58:45413] [client 85.8.130.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.58, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3rb0bVJm8eMsGMTCNR4wAAAEU"]
[Thu Nov 20 00:26:23.434363 2025] [:error] [pid 50236:tid 50382] [client 85.8.130.64:41297] [client 85.8.130.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.64, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3vr2T-l-atWVKihhsLugAAAJQ"]
[Thu Nov 20 00:35:10.128159 2025] [:error] [pid 50475:tid 50522] [client 193.37.33.251:26857] [client 193.37.33.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.251, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3xvlzRy2BTBjqrUmkURwAAAQA"]
[Thu Nov 20 00:44:28.968939 2025] [:error] [pid 50223:tid 50351] [client 85.8.130.55:44791] [client 85.8.130.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.55, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR3z7D4iSUKl66cdvvbKtQAAAFA"]
[Thu Nov 20 01:02:55.381947 2025] [:error] [pid 45115:tid 45125] [client 85.8.130.86:58037] [client 85.8.130.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.86, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR34PwGi_fIGlZjI1V4vtAAAAMg"]
[Thu Nov 20 01:14:48.719739 2025] [:error] [pid 50475:tid 50522] [client 173.239.254.58:20183] [client 173.239.254.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.58, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR37CFzRy2BTBjqrUmkkUwAAAQA"]
[Thu Nov 20 01:20:50.160240 2025] [:error] [pid 50223:tid 50336] [client 85.8.130.53:34621] [client 85.8.130.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR38cj4iSUKl66cdvvbUdQAAAEE"]
[Thu Nov 20 01:38:55.418844 2025] [:error] [pid 45115:tid 45132] [client 85.8.130.85:23405] [client 85.8.130.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4ArwGi_fIGlZjI1V5AMwAAAM8"]
[Thu Nov 20 01:54:33.602822 2025] [:error] [pid 50236:tid 50368] [client 173.239.254.76:29983] [client 173.239.254.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.76, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4EWWT-l-atWVKihhsnAgAAAIY"]
[Thu Nov 20 01:57:05.811691 2025] [:error] [pid 45115:tid 45121] [client 85.8.130.89:61245] [client 85.8.130.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.89, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4E8QGi_fIGlZjI1V5GUQAAAMQ"]
[Thu Nov 20 02:15:37.121169 2025] [:error] [pid 50475:tid 50544] [client 85.8.130.65:53651] [client 85.8.130.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4JSVzRy2BTBjqrUmk0tQAAARY"]
[Thu Nov 20 02:21:57.446731 2025] [:error] [pid 45115:tid 45119] [client 91.92.242.56:61603] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4KxQGi_fIGlZjI1V5OTAAAAMI"]
[Thu Nov 20 02:21:58.008082 2025] [:error] [pid 8030:tid 8055] [client 91.92.242.56:61937] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4KxoaRI7v0Hh2prI879gAAAZY"]
[Thu Nov 20 02:21:58.618790 2025] [:error] [pid 50236:tid 50368] [client 91.92.242.56:62345] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4KxmT-l-atWVKihhstTAAAAIY"]
[Thu Nov 20 02:35:52.716269 2025] [:error] [pid 50236:tid 50376] [client 173.239.254.44:24133] [client 173.239.254.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4OCGT-l-atWVKihhswMgAAAI4"]
[Thu Nov 20 02:36:52.222647 2025] [:error] [pid 11265:tid 11288] [client 85.8.130.54:29635] [client 85.8.130.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.54, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4ORC7bjlU5JLV744xWEQAAABU"]
[Thu Nov 20 02:55:31.607665 2025] [:error] [pid 50223:tid 50353] [client 85.8.130.94:58997] [client 85.8.130.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4Soz4iSUKl66cdvvbqvgAAAFI"]
[Thu Nov 20 03:15:21.538230 2025] [:error] [pid 8396:tid 8409] [client 85.8.130.47:31071] [client 85.8.130.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4XSYolA09HZQNzyMD-cAAAAss"]
[Thu Nov 20 03:15:36.586076 2025] [:error] [pid 8293:tid 8304] [client 85.8.130.41:58377] [client 85.8.130.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4XWCGLhDa8A92KWiISfwAAAkk"]
[Thu Nov 20 03:33:34.059085 2025] [:error] [pid 8909:tid 8954] [client 85.8.130.65:25821] [client 85.8.130.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4bjmnKNOWZ-UbT97CCDQAAA88"]
[Thu Nov 20 03:51:38.776858 2025] [:error] [pid 35050:tid 35123] [client 85.8.130.75:43601] [client 85.8.130.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.75, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4fypQztlZGE1-LGfmAbAAAAII"]
[Thu Nov 20 03:54:20.432172 2025] [:error] [pid 35049:tid 35091] [client 193.37.33.250:47275] [client 193.37.33.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.250, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4gbMtQlMEnibYlZqha3wAAAEA"]
[Thu Nov 20 04:10:03.973114 2025] [:error] [pid 38199:tid 38217] [client 85.8.130.48:57227] [client 85.8.130.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4kG1OFCkBR5s3j1b2j5QAAAM4"]
[Thu Nov 20 04:13:01.523696 2025] [autoindex:error] [pid 38199:tid 38217] [client 52.165.30.240:2478] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 20 04:13:03.618773 2025] [autoindex:error] [pid 38199:tid 38224] [client 52.165.30.240:2478] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 20 04:13:06.347929 2025] [autoindex:error] [pid 38199:tid 38212] [client 52.165.30.240:2478] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 20 04:13:14.887620 2025] [:error] [pid 38199:tid 38214] [client 52.165.30.240:2478] [client 52.165.30.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.165.30.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aR4k2lOFCkBR5s3j1b2lRwAAAMs"], referer: https://www.bing.com/
[Thu Nov 20 04:28:12.154258 2025] [:error] [pid 55340:tid 55353] [client 85.8.130.49:57573] [client 85.8.130.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.49, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4oXPOxD-NeMydTybCvpAAAAAg"]
[Thu Nov 20 04:33:42.882123 2025] [:error] [pid 55430:tid 55451] [client 173.239.254.54:20581] [client 173.239.254.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.54, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4ppvPZXaIMEU4pE7slvAAAANI"]
[Thu Nov 20 04:46:18.563220 2025] [:error] [pid 55343:tid 55405] [client 85.8.130.76:35969] [client 85.8.130.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.76, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4smlWlO3EnyVMV7w7onQAAAIY"]
[Thu Nov 20 05:04:30.225820 2025] [:error] [pid 55342:tid 55376] [client 85.8.130.81:54625] [client 85.8.130.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4w3rg6x32Tvk7fIG8qhgAAAEQ"]
[Thu Nov 20 05:12:43.537205 2025] [:error] [pid 55340:tid 55350] [client 193.37.33.243:26055] [client 193.37.33.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.243, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR4yy_OxD-NeMydTybC6lAAAAAU"]
[Thu Nov 20 05:22:52.140527 2025] [:error] [pid 55343:tid 55406] [client 85.8.130.58:23827] [client 85.8.130.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.58, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR41LFWlO3EnyVMV7w7z_wAAAIc"]
[Thu Nov 20 05:40:54.408801 2025] [:error] [pid 55343:tid 55422] [client 85.8.130.71:33175] [client 85.8.130.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.71, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR45ZlWlO3EnyVMV7w734gAAAJc"]
[Thu Nov 20 05:52:59.780427 2025] [:error] [pid 55343:tid 55408] [client 173.239.254.68:32137] [client 173.239.254.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.68, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR48O1WlO3EnyVMV7w78UAAAAIk"]
[Thu Nov 20 05:59:00.965958 2025] [:error] [pid 34405:tid 34407] [client 85.8.130.87:61015] [client 85.8.130.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.87, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR49pDFpvu8oRK7ATft4ywAAAQA"]
[Thu Nov 20 06:17:18.197029 2025] [:error] [pid 55430:tid 55449] [client 85.8.130.89:25733] [client 85.8.130.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.89, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5B7vPZXaIMEU4pE7tG8AAAANA"]
[Thu Nov 20 06:31:54.463128 2025] [:error] [pid 34405:tid 34420] [client 173.239.254.60:25501] [client 173.239.254.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5FWjFpvu8oRK7ATft-BgAAAQ0"]
[Thu Nov 20 06:35:20.756638 2025] [:error] [pid 55430:tid 55457] [client 85.8.130.45:54697] [client 85.8.130.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.45, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5GKPPZXaIMEU4pE7tLfwAAANg"]
[Thu Nov 20 06:53:29.587273 2025] [:error] [pid 34444:tid 34451] [client 85.8.130.90:27713] [client 85.8.130.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.90, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5KaVNEol4jlmmA_GOjOgAAAUU"]
[Thu Nov 20 07:11:17.349075 2025] [:error] [pid 55340:tid 55352] [client 173.239.254.46:28845] [client 173.239.254.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5OlfOxD-NeMydTybDT5QAAAAc"]
[Thu Nov 20 07:11:25.909521 2025] [:error] [pid 55340:tid 55353] [client 85.8.130.54:38267] [client 85.8.130.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.54, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5OnfOxD-NeMydTybDT6QAAAAg"]
[Thu Nov 20 07:30:17.565884 2025] [:error] [pid 34405:tid 34407] [client 85.8.130.72:65175] [client 85.8.130.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5TCTFpvu8oRK7ATfuKUQAAAQA"]
[Thu Nov 20 07:48:23.491311 2025] [:error] [pid 34444:tid 34470] [client 85.8.130.91:41573] [client 85.8.130.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.91, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5XR1NEol4jlmmA_GOxOAAAAVg"]
[Thu Nov 20 07:50:52.058128 2025] [:error] [pid 55340:tid 55349] [client 173.239.254.80:65463] [client 173.239.254.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5X3POxD-NeMydTybDiJgAAAAQ"]
[Thu Nov 20 08:06:46.091102 2025] [:error] [pid 34444:tid 34464] [client 85.8.130.63:42213] [client 85.8.130.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.63, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5bllNEol4jlmmA_GO1HAAAAVI"]
[Thu Nov 20 08:25:01.254044 2025] [:error] [pid 804:tid 834] [client 85.8.130.62:23967] [client 85.8.130.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.62, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5f3faRHpUlPL9O0LkIBwAAAYo"]
[Thu Nov 20 08:31:39.187513 2025] [:error] [pid 55340:tid 55363] [client 193.37.33.248:62133] [client 193.37.33.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.248, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5ha_OxD-NeMydTybD0mQAAABI"]
[Thu Nov 20 08:43:30.073755 2025] [:error] [pid 804:tid 837] [client 85.8.130.72:63707] [client 85.8.130.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5kMvaRHpUlPL9O0LkNuwAAAY0"]
[Thu Nov 20 09:01:55.781166 2025] [:error] [pid 55340:tid 55351] [client 85.8.130.60:37341] [client 85.8.130.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5og_OxD-NeMydTybACMwAAAAY"]
[Thu Nov 20 09:12:05.426699 2025] [:error] [pid 34405:tid 34416] [client 173.239.254.46:50119] [client 173.239.254.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5q5TFpvu8oRK7ATfujlAAAAQk"]
[Thu Nov 20 09:20:13.036137 2025] [:error] [pid 55430:tid 55436] [client 85.8.130.61:32303] [client 85.8.130.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5szfPZXaIMEU4pE7t1eQAAAMM"]
[Thu Nov 20 09:38:27.801397 2025] [:error] [pid 55343:tid 55406] [client 85.8.130.65:65301] [client 85.8.130.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5xE1WlO3EnyVMV7w45kQAAAIc"]
[Thu Nov 20 09:45:23.141554 2025] [:error] [pid 34405:tid 34415] [client 182.44.12.37:46310] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR5yszFpvu8oRK7ATfuqVAAAAQg"]
[Thu Nov 20 09:51:49.970504 2025] [:error] [pid 55340:tid 55355] [client 173.239.254.48:59471] [client 173.239.254.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR50NfOxD-NeMydTybAVpgAAAAo"]
[Thu Nov 20 09:58:14.157793 2025] [:error] [pid 34444:tid 34447] [client 85.8.130.77:38979] [client 85.8.130.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR51tlNEol4jlmmA_GPSYgAAAUE"]
[Thu Nov 20 10:18:38.270050 2025] [:error] [pid 55340:tid 55358] [client 85.8.130.80:54063] [client 85.8.130.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR56fvOxD-NeMydTybAgTAAAAA0"]
[Thu Nov 20 10:32:41.589729 2025] [:error] [pid 804:tid 846] [client 173.239.254.57:63259] [client 173.239.254.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR59yfaRHpUlPL9O0LkkIwAAAZY"]
[Thu Nov 20 10:37:31.794297 2025] [:error] [pid 55343:tid 55401] [client 85.8.130.77:49397] [client 85.8.130.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR5-61WlO3EnyVMV7w5MbAAAAII"]
[Thu Nov 20 10:55:54.362083 2025] [:error] [pid 55430:tid 55454] [client 85.8.130.51:29339] [client 85.8.130.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.51, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR6DOvPZXaIMEU4pE7uPDgAAANU"]
[Thu Nov 20 11:12:07.605836 2025] [:error] [pid 34405:tid 34429] [client 173.239.254.44:26209] [client 173.239.254.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR6HBzFpvu8oRK7ATfu9JwAAARY"]
[Thu Nov 20 11:14:25.611536 2025] [:error] [pid 34444:tid 34455] [client 85.8.130.70:42849] [client 85.8.130.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.70, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR6HkVNEol4jlmmA_GPkWwAAAUk"]
[Thu Nov 20 11:32:56.105844 2025] [:error] [pid 55340:tid 55348] [client 85.8.130.70:47319] [client 85.8.130.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.70, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR6L6POxD-NeMydTybA6TQAAAAM"]
[Thu Nov 20 11:50:54.965805 2025] [:error] [pid 34405:tid 34423] [client 173.239.254.56:34515] [client 173.239.254.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.56, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR6QHjFpvu8oRK7ATfvDlAAAARA"]
[Thu Nov 20 11:58:11.857692 2025] [:error] [pid 55343:tid 55412] [client 85.8.130.53:51353] [client 85.8.130.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR6R01WlO3EnyVMV7w5gNgAAAI0"]
[Thu Nov 20 12:10:21.707242 2025] [:error] [pid 55343:tid 55409] [client 98.81.111.26:62323] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR6UrVWlO3EnyVMV7w5k_QAAAIo"]
[Thu Nov 20 12:10:22.113377 2025] [:error] [pid 55343:tid 55408] [client 98.81.111.26:50535] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR6UrlWlO3EnyVMV7w5lFwAAAIk"]
[Thu Nov 20 12:10:22.521105 2025] [:error] [pid 55430:tid 55438] [client 98.81.111.26:50113] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR6UrvPZXaIMEU4pE7ugywAAAMU"]
[Thu Nov 20 12:10:22.931136 2025] [:error] [pid 55343:tid 55400] [client 98.81.111.26:51719] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR6UrlWlO3EnyVMV7w5lOgAAAIE"]
[Thu Nov 20 12:10:23.340384 2025] [:error] [pid 55340:tid 55345] [client 98.81.111.26:53299] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR6Ur_OxD-NeMydTybBKCgAAAAA"]
[Thu Nov 20 12:15:51.162044 2025] [:error] [pid 34405:tid 34428] [client 98.81.111.26:52589] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR6V9zFpvu8oRK7ATfvM6gAAARU"]
[Thu Nov 20 12:15:51.572037 2025] [:error] [pid 34405:tid 34410] [client 98.81.111.26:55670] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR6V9zFpvu8oRK7ATfvNAgAAAQM"]
[Thu Nov 20 12:15:51.982601 2025] [:error] [pid 55343:tid 55423] [client 98.81.111.26:59412] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR6V91WlO3EnyVMV7w5opQAAAJg"]
[Thu Nov 20 12:15:52.407827 2025] [:error] [pid 55340:tid 55354] [client 98.81.111.26:61800] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR6V-POxD-NeMydTybBNZwAAAAk"]
[Thu Nov 20 12:15:52.822923 2025] [:error] [pid 55343:tid 55406] [client 98.81.111.26:64314] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR6V-FWlO3EnyVMV7w5ovAAAAIc"]
[Thu Nov 20 12:29:59.584621 2025] [:error] [pid 804:tid 834] [client 173.239.254.71:30487] [client 173.239.254.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.71, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR6ZR_aRHpUlPL9O0Lk8mQAAAYo"]
[Thu Nov 20 13:09:50.362677 2025] [:error] [pid 55342:tid 55381] [client 85.8.130.42:41175] [client 85.8.130.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR6inrg6x32Tvk7fIG-ZXAAAAEk"]
[Thu Nov 20 13:48:30.182919 2025] [:error] [pid 40537:tid 40555] [client 193.37.33.251:47723] [client 193.37.33.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.251, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR6rrqKlsL5kxTa3c1y2UwAAAs4"]
[Thu Nov 20 14:21:09.093914 2025] [autoindex:error] [pid 34405:tid 34416] [client 13.68.22.111:3081] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 14:21:11.773163 2025] [autoindex:error] [pid 34405:tid 34417] [client 13.68.22.111:3081] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 20 14:21:15.052842 2025] [autoindex:error] [pid 34405:tid 34421] [client 13.68.22.111:3081] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 20 14:21:20.667946 2025] [:error] [pid 34405:tid 34428] [client 13.68.22.111:3081] [client 13.68.22.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.68.22.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aR6zYDFpvu8oRK7ATfvp6QAAARU"], referer: https://www.google.co.uk/
[Thu Nov 20 14:21:28.629141 2025] [:error] [pid 34405:tid 34413] [client 13.68.22.111:3081] [client 13.68.22.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aR6zaDFpvu8oRK7ATfvp8gAAAQY"], referer: https://www.google.co.uk/
[Thu Nov 20 14:21:46.979941 2025] [:error] [pid 34405:tid 34425] [client 13.68.22.111:7303] [client 13.68.22.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR6zejFpvu8oRK7ATfvqBgAAARI"], referer: https://www.google.co.uk/
[Thu Nov 20 14:21:50.519066 2025] [autoindex:error] [pid 40415:tid 40429] [client 13.68.22.111:4425] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 14:21:51.785360 2025] [autoindex:error] [pid 40415:tid 40442] [client 13.68.22.111:4425] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 20 14:21:51.994813 2025] [autoindex:error] [pid 40415:tid 40423] [client 13.68.22.111:4425] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 14:21:57.954768 2025] [autoindex:error] [pid 40415:tid 40434] [client 13.68.22.111:4425] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 20 14:21:58.786613 2025] [autoindex:error] [pid 40415:tid 40440] [client 13.68.22.111:4425] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 14:21:58.991812 2025] [autoindex:error] [pid 40415:tid 40420] [client 13.68.22.111:4425] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 14:21:59.289096 2025] [:error] [pid 40415:tid 40437] [client 13.68.22.111:4425] [client 13.68.22.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR6zh6hjIyLSv09svwNtZQAAAdM"], referer: https://www.google.co.uk/
[Thu Nov 20 14:22:01.599279 2025] [autoindex:error] [pid 40415:tid 40418] [client 13.68.22.111:4440] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 14:22:01.813733 2025] [autoindex:error] [pid 40415:tid 40429] [client 13.68.22.111:4440] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 20 14:22:02.027334 2025] [autoindex:error] [pid 40415:tid 40439] [client 13.68.22.111:4440] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 20 14:22:17.470683 2025] [:error] [pid 40415:tid 40439] [client 13.68.22.111:4440] [client 13.68.22.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.68.22.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR6zmahjIyLSv09svwNtfQAAAdU"], referer: https://duckduckgo.com/
[Thu Nov 20 14:27:49.670376 2025] [:error] [pid 40415:tid 40419] [client 173.239.254.68:39387] [client 173.239.254.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.68, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR605ahjIyLSv09svwNuvwAAAcE"]
[Thu Nov 20 15:06:45.378649 2025] [:error] [pid 34405:tid 34408] [client 173.239.254.63:32825] [client 173.239.254.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.63, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR6-BTFpvu8oRK7ATfvxwQAAAQE"]
[Thu Nov 20 15:45:24.233914 2025] [:error] [pid 55340:tid 55345] [client 173.239.254.44:42917] [client 173.239.254.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR7HFPOxD-NeMydTybB95AAAAAA"]
[Thu Nov 20 16:24:26.056172 2025] [:error] [pid 40415:tid 40419] [client 173.239.254.53:43071] [client 173.239.254.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR7QOqhjIyLSv09svwOHMwAAAcE"]
[Thu Nov 20 17:03:02.807734 2025] [:error] [pid 40508:tid 40517] [client 193.37.33.248:46735] [client 193.37.33.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.248, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR7ZRqxXNVCMW_ksxPuCUQAAAoc"]
[Thu Nov 20 17:41:51.581961 2025] [:error] [pid 55342:tid 55377] [client 173.239.254.45:48939] [client 173.239.254.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.45, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR7iX7g6x32Tvk7fIG_NwAAAAEU"]
[Thu Nov 20 18:20:58.714291 2025] [:error] [pid 40445:tid 40491] [client 173.239.254.46:60563] [client 173.239.254.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR7rilH-MuFcoWRjXpZOKgAAAlA"]
[Thu Nov 20 18:49:49.221029 2025] [:error] [pid 40415:tid 40432] [client 42.105.172.93:18858] [client 42.105.172.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.105.172.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aR7yTahjIyLSv09svwOoCQAAAc4"]
[Thu Nov 20 18:53:05.132806 2025] [:error] [pid 40415:tid 40425] [client 103.30.64.252:64170] [client 103.30.64.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.30.64.252, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aR7zEahjIyLSv09svwOoqwAAAcc"]
[Thu Nov 20 18:54:05.179909 2025] [:error] [pid 55342:tid 55375] [client 42.105.172.93:10513] [client 42.105.172.93] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aR7zTbg6x32Tvk7fIG_eRgAAAEM"]
[Thu Nov 20 19:00:20.475746 2025] [:error] [pid 55343:tid 55403] [client 173.239.254.80:47093] [client 173.239.254.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR70xFWlO3EnyVMV7w60TAAAAIQ"]
[Thu Nov 20 19:01:54.811213 2025] [:error] [pid 40537:tid 40562] [client 103.30.64.252:35881] [client 103.30.64.252] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aR71IqKlsL5kxTa3c1zkvgAAAtU"]
[Thu Nov 20 19:04:19.160074 2025] [:error] [pid 55342:tid 55377] [client 103.30.64.252:55389] [client 103.30.64.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.30.64.252, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aR71s7g6x32Tvk7fIG_guQAAAEU"]
[Thu Nov 20 19:38:50.058633 2025] [:error] [pid 40415:tid 40442] [client 193.37.33.243:63319] [client 193.37.33.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.243, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR79yqhjIyLSv09svwOzxgAAAdg"]
[Thu Nov 20 20:17:38.593313 2025] [:error] [pid 40415:tid 40439] [client 193.37.33.251:42675] [client 193.37.33.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.251, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR8G4qhjIyLSv09svwO80QAAAdU"]
[Thu Nov 20 20:57:32.527617 2025] [:error] [pid 34405:tid 34424] [client 173.239.254.46:35919] [client 173.239.254.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR8QPDFpvu8oRK7ATfs1gwAAARE"]
[Thu Nov 20 21:37:05.642323 2025] [:error] [pid 40445:tid 40487] [client 173.239.254.66:41987] [client 173.239.254.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.66, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR8ZgVH-MuFcoWRjXpaWkAAAAkw"]
[Thu Nov 20 22:03:11.333523 2025] [autoindex:error] [pid 55343:tid 55407] [client 40.79.74.96:4761] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 20 22:03:13.409656 2025] [autoindex:error] [pid 55343:tid 55410] [client 40.79.74.96:4761] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 20 22:03:17.379707 2025] [autoindex:error] [pid 55343:tid 55408] [client 40.79.74.96:4761] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 22:03:22.203395 2025] [:error] [pid 55343:tid 55416] [client 40.79.74.96:4761] [client 40.79.74.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 40.79.74.96, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aR8fqlWlO3EnyVMV7w7VzQAAAJE"], referer: https://www.google.co.uk/
[Thu Nov 20 22:03:29.874452 2025] [:error] [pid 55343:tid 55423] [client 40.79.74.96:4761] [client 40.79.74.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aR8fsVWlO3EnyVMV7w7V2wAAAJg"], referer: https://duckduckgo.com/
[Thu Nov 20 22:03:44.516354 2025] [:error] [pid 40445:tid 40492] [client 40.79.74.96:1334] [client 40.79.74.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR8fwFH-MuFcoWRjXpafvwAAAlE"], referer: https://www.google.com/
[Thu Nov 20 22:03:46.648785 2025] [autoindex:error] [pid 55340:tid 55363] [client 40.79.74.96:7450] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 20 22:03:48.008501 2025] [autoindex:error] [pid 55340:tid 55364] [client 40.79.74.96:7450] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 20 22:03:48.217888 2025] [autoindex:error] [pid 55340:tid 55367] [client 40.79.74.96:7450] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 22:03:53.196292 2025] [autoindex:error] [pid 55340:tid 55358] [client 40.79.74.96:7450] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 22:03:53.409893 2025] [autoindex:error] [pid 55340:tid 55352] [client 40.79.74.96:7450] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 20 22:03:53.618514 2025] [autoindex:error] [pid 55340:tid 55359] [client 40.79.74.96:7450] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 20 22:03:53.823123 2025] [:error] [pid 55340:tid 55364] [client 40.79.74.96:7450] [client 40.79.74.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR8fyfOxD-NeMydTybDDTgAAABM"], referer: https://www.yahoo.com/
[Thu Nov 20 22:03:54.423278 2025] [autoindex:error] [pid 55430:tid 55449] [client 40.79.74.96:12927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 22:03:54.627945 2025] [autoindex:error] [pid 55430:tid 55457] [client 40.79.74.96:12927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 22:03:54.833854 2025] [autoindex:error] [pid 55430:tid 55440] [client 40.79.74.96:12927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 22:04:08.960924 2025] [:error] [pid 55430:tid 55435] [client 40.79.74.96:12927] [client 40.79.74.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.79.74.96, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR8f2PPZXaIMEU4pE7slBgAAAMI"], referer: https://www.yahoo.com/
[Thu Nov 20 22:16:16.721703 2025] [:error] [pid 34405:tid 34414] [client 173.239.254.57:28545] [client 173.239.254.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR8isDFpvu8oRK7ATftHswAAAQc"]
[Thu Nov 20 22:55:36.659196 2025] [:error] [pid 55340:tid 55348] [client 193.37.33.245:23083] [client 193.37.33.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.245, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR8r6POxD-NeMydTybDLLAAAAAM"]
[Thu Nov 20 22:56:38.836072 2025] [:error] [pid 40636:tid 40658] [client 123.187.240.242:37737] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR8sJgK8BWUoW3xq0HA3hQAAA5I"]
[Thu Nov 20 23:34:25.378780 2025] [:error] [pid 55340:tid 55356] [client 173.239.254.74:31283] [client 173.239.254.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.74, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR81AfOxD-NeMydTybDR4wAAAAs"]
[Fri Nov 21 00:18:42.017164 2025] [:error] [pid 40537:tid 40558] [client 173.239.254.58:31955] [client 173.239.254.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.58, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR8_YqKlsL5kxTa3c1wcmAAAAtE"]
[Fri Nov 21 00:59:13.012418 2025] [:error] [pid 13522:tid 13701] [client 173.239.254.45:54943] [client 173.239.254.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.45, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR9I4aOM9BReD2C3mbLRjQAAAEE"]
[Fri Nov 21 01:44:03.733509 2025] [:error] [pid 13506:tid 13681] [client 173.239.254.63:44567] [client 173.239.254.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.63, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR9TY6TbGYpGB-467xZVWQAAAAs"]
[Fri Nov 21 02:28:26.024510 2025] [:error] [pid 13805:tid 13815] [client 193.37.33.250:45243] [client 193.37.33.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.250, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR9dylurU5-GZdwKvr7ctQAAAUc"]
[Fri Nov 21 03:14:01.522289 2025] [:error] [pid 13522:tid 13702] [client 173.239.254.61:22055] [client 173.239.254.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR9oeaOM9BReD2C3mbIDhQAAAEI"]
[Fri Nov 21 03:56:39.231948 2025] [:error] [pid 13327:tid 13395] [client 193.37.33.251:52725] [client 193.37.33.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.251, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR9yd_BXf-8B6mFkLeNzMAAAAIo"]
[Fri Nov 21 04:37:41.039337 2025] [:error] [pid 13327:tid 13397] [client 193.37.33.250:27351] [client 193.37.33.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.250, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR98FfBXf-8B6mFkLeOE5QAAAIw"]
[Fri Nov 21 04:46:43.120942 2025] [:error] [pid 51434:tid 51456] [client 185.251.19.195:33833] [client 185.251.19.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aR9-M_U96liplEDkw_TV_QAAARQ"]
[Fri Nov 21 04:46:48.705052 2025] [:error] [pid 13412:tid 13426] [client 172.98.32.178:41175] [client 172.98.32.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aR9-OH3-knz3ZB6HogGnzwAAAMk"]
[Fri Nov 21 04:46:58.412876 2025] [:error] [pid 13412:tid 13425] [client 185.251.19.180:33011] [client 185.251.19.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aR9-Qn3-knz3ZB6HogGn6wAAAMg"]
[Fri Nov 21 04:47:04.010995 2025] [:error] [pid 13326:tid 13374] [client 185.251.19.177:25039] [client 185.251.19.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aR9-SNh942-HkDIkOWrVqAAAAFA"]
[Fri Nov 21 04:47:13.955498 2025] [:error] [pid 13325:tid 13337] [client 185.251.19.202:36847] [client 185.251.19.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aR9-USBUXj9tD75On3CUTwAAAAc"]
[Fri Nov 21 04:47:16.466037 2025] [:error] [pid 13327:tid 13392] [client 185.251.19.166:59887] [client 185.251.19.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aR9-VPBXf-8B6mFkLeOIjQAAAIc"]
[Fri Nov 21 04:47:17.342316 2025] [:error] [pid 13412:tid 13425] [client 136.144.42.250:25713] [client 136.144.42.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aR9-VX3-knz3ZB6HogGoCgAAAMg"]
[Fri Nov 21 04:47:18.218962 2025] [:error] [pid 51434:tid 51444] [client 185.251.19.183:42389] [client 185.251.19.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aR9-VvU96liplEDkw_TWegAAAQg"]
[Fri Nov 21 04:47:19.092718 2025] [:error] [pid 51434:tid 51454] [client 185.251.19.187:30995] [client 185.251.19.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aR9-V_U96liplEDkw_TWfwAAARI"]
[Fri Nov 21 04:47:20.014011 2025] [:error] [pid 13326:tid 13362] [client 185.251.19.183:24327] [client 185.251.19.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aR9-WNh942-HkDIkOWrV6gAAAEQ"]
[Fri Nov 21 04:47:22.168904 2025] [:error] [pid 13325:tid 13339] [client 136.144.42.249:57099] [client 136.144.42.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aR9-WiBUXj9tD75On3CUYwAAAAk"]
[Fri Nov 21 04:47:25.194871 2025] [:error] [pid 13326:tid 13370] [client 185.251.19.188:60369] [client 185.251.19.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aR9-Xdh942-HkDIkOWrV9QAAAEw"]
[Fri Nov 21 04:47:29.192393 2025] [:error] [pid 13327:tid 13396] [client 185.251.19.165:51349] [client 185.251.19.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aR9-YfBXf-8B6mFkLeOIvgAAAIs"]
[Fri Nov 21 04:47:31.426013 2025] [:error] [pid 13325:tid 13336] [client 185.251.19.169:38211] [client 185.251.19.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aR9-YyBUXj9tD75On3CUdgAAAAY"]
[Fri Nov 21 04:47:34.061302 2025] [:error] [pid 13326:tid 13365] [client 136.144.42.250:33525] [client 136.144.42.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aR9-Zth942-HkDIkOWrV_wAAAEc"]
[Fri Nov 21 04:47:43.426452 2025] [:error] [pid 13325:tid 13335] [client 185.251.19.187:57603] [client 185.251.19.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aR9-byBUXj9tD75On3CUlAAAAAU"]
[Fri Nov 21 04:47:46.089674 2025] [:error] [pid 13327:tid 13403] [client 185.251.19.196:23567] [client 185.251.19.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aR9-cvBXf-8B6mFkLeOI7wAAAJI"]
[Fri Nov 21 04:47:50.085364 2025] [:error] [pid 13412:tid 13440] [client 185.251.19.173:63709] [client 185.251.19.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aR9-dn3-knz3ZB6HogGoLQAAANc"]
[Fri Nov 21 04:47:52.726619 2025] [:error] [pid 51434:tid 51459] [client 136.144.42.249:64719] [client 136.144.42.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aR9-ePU96liplEDkw_TWtgAAARc"]
[Fri Nov 21 04:47:59.985807 2025] [:error] [pid 13412:tid 13430] [client 185.251.19.195:24273] [client 185.251.19.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aR9-f33-knz3ZB6HogGoUwAAAM0"]
[Fri Nov 21 04:48:02.751273 2025] [:error] [pid 13326:tid 13373] [client 185.251.19.199:51603] [client 185.251.19.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aR9-gth942-HkDIkOWrWXQAAAE8"]
[Fri Nov 21 04:48:05.317061 2025] [:error] [pid 13326:tid 13368] [client 185.251.19.198:22333] [client 185.251.19.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aR9-hdh942-HkDIkOWrWYgAAAEo"]
[Fri Nov 21 04:48:06.196972 2025] [:error] [pid 13327:tid 13397] [client 185.251.19.199:58363] [client 185.251.19.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aR9-hvBXf-8B6mFkLeOJHwAAAIw"]
[Fri Nov 21 04:48:07.070798 2025] [:error] [pid 13326:tid 13378] [client 185.251.19.176:60377] [client 185.251.19.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aR9-h9h942-HkDIkOWrWZwAAAFQ"]
[Fri Nov 21 04:48:12.650511 2025] [:error] [pid 13327:tid 13399] [client 185.251.19.190:29543] [client 185.251.19.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aR9-jPBXf-8B6mFkLeOJMgAAAI4"]
[Fri Nov 21 04:48:13.540249 2025] [:error] [pid 13327:tid 13390] [client 185.251.19.194:23987] [client 185.251.19.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aR9-jfBXf-8B6mFkLeOJNQAAAIU"]
[Fri Nov 21 04:48:14.441293 2025] [:error] [pid 13412:tid 13440] [client 185.251.19.195:58867] [client 185.251.19.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR9-jn3-knz3ZB6HogGoZAAAANc"]
[Fri Nov 21 04:48:26.932340 2025] [:error] [pid 13325:tid 13350] [client 185.251.19.181:57865] [client 185.251.19.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aR9-miBUXj9tD75On3CU2QAAABQ"]
[Fri Nov 21 04:48:32.274058 2025] [:error] [pid 13326:tid 13369] [client 172.98.32.177:26437] [client 172.98.32.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.177, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aR9-oNh942-HkDIkOWrWkQAAAEs"]
[Fri Nov 21 04:48:48.678916 2025] [:error] [pid 13326:tid 13372] [client 172.98.32.177:26437] [client 172.98.32.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aR9-sNh942-HkDIkOWrWtAAAAE4"]
[Fri Nov 21 04:48:52.626647 2025] [:error] [pid 51434:tid 51452] [client 185.251.19.177:40371] [client 185.251.19.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.251.19.177, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aR9-tPU96liplEDkw_TXOgAAARA"]
[Fri Nov 21 04:48:55.384685 2025] [:error] [pid 51434:tid 51457] [client 185.251.19.177:40371] [client 185.251.19.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aR9-t_U96liplEDkw_TXPwAAARU"]
[Fri Nov 21 04:49:07.687647 2025] [:error] [pid 13325:tid 13344] [client 185.251.19.191:41645] [client 185.251.19.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aR9-wyBUXj9tD75On3CVGQAAAA4"]
[Fri Nov 21 04:49:20.223860 2025] [:error] [pid 13326:tid 13362] [client 185.251.19.203:24745] [client 185.251.19.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aR9-0Nh942-HkDIkOWrW-wAAAEQ"]
[Fri Nov 21 04:49:24.295239 2025] [:error] [pid 51434:tid 51438] [client 185.251.19.167:41505] [client 185.251.19.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aR9-1PU96liplEDkw_TXiwAAAQI"]
[Fri Nov 21 04:49:29.755228 2025] [:error] [pid 13326:tid 13373] [client 136.144.42.246:62329] [client 136.144.42.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.246, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aR9-2dh942-HkDIkOWrXCgAAAE8"]
[Fri Nov 21 04:49:31.194342 2025] [:error] [pid 13326:tid 13378] [client 136.144.42.246:62329] [client 136.144.42.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aR9-29h942-HkDIkOWrXDAAAAFQ"]
[Fri Nov 21 04:49:55.714462 2025] [:error] [pid 13412:tid 13422] [client 185.251.19.202:60257] [client 185.251.19.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aR9-833-knz3ZB6HogGpWAAAAMU"]
[Fri Nov 21 04:50:01.261498 2025] [:error] [pid 51434:tid 51446] [client 185.251.19.171:44779] [client 185.251.19.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.251.19.171, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aR9--fU96liplEDkw_TX3AAAAQo"]
[Fri Nov 21 04:50:06.832668 2025] [:error] [pid 51434:tid 51454] [client 185.251.19.171:44779] [client 185.251.19.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aR9-_vU96liplEDkw_TX6gAAARI"]
[Fri Nov 21 04:50:09.643485 2025] [:error] [pid 13326:tid 13366] [client 185.251.19.191:29945] [client 185.251.19.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aR9_Adh942-HkDIkOWrXNwAAAEg"]
[Fri Nov 21 04:50:13.500711 2025] [:error] [pid 13412:tid 13427] [client 172.98.32.178:31697] [client 172.98.32.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aR9_BX3-knz3ZB6HogGphwAAAMo"]
[Fri Nov 21 04:50:18.783940 2025] [:error] [pid 13326:tid 13363] [client 185.251.19.174:27509] [client 185.251.19.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aR9_Cth942-HkDIkOWrXRAAAAEU"]
[Fri Nov 21 04:50:19.657953 2025] [:error] [pid 13412:tid 13430] [client 185.251.19.171:32401] [client 185.251.19.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aR9_C33-knz3ZB6HogGpkwAAAM0"]
[Fri Nov 21 04:50:27.814666 2025] [:error] [pid 51434:tid 51441] [client 136.144.42.246:54257] [client 136.144.42.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aR9_E_U96liplEDkw_TYLQAAAQU"]
[Fri Nov 21 04:50:30.441672 2025] [:error] [pid 51434:tid 51457] [client 185.251.19.197:20777] [client 185.251.19.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aR9_FvU96liplEDkw_TYNAAAARU"]
[Fri Nov 21 04:50:35.778638 2025] [:error] [pid 13326:tid 13367] [client 172.98.32.179:31281] [client 172.98.32.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aR9_G9h942-HkDIkOWrXWQAAAEk"]
[Fri Nov 21 04:50:41.206075 2025] [:error] [pid 13327:tid 13386] [client 172.98.32.176:54157] [client 172.98.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aR9_IfBXf-8B6mFkLeOK4gAAAIE"]
[Fri Nov 21 04:50:45.187699 2025] [:error] [pid 13325:tid 13334] [client 185.251.19.164:37453] [client 185.251.19.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aR9_JSBUXj9tD75On3CVowAAAAQ"]
[Fri Nov 21 04:50:50.838818 2025] [:error] [pid 13325:tid 13339] [client 185.251.19.202:62785] [client 185.251.19.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aR9_KiBUXj9tD75On3CVqwAAAAk"]
[Fri Nov 21 04:51:01.428484 2025] [:error] [pid 13327:tid 13395] [client 185.251.19.192:48573] [client 185.251.19.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aR9_NfBXf-8B6mFkLeOLAAAAAIo"]
[Fri Nov 21 04:51:02.314405 2025] [:error] [pid 13412:tid 13425] [client 185.251.19.175:53543] [client 185.251.19.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aR9_Nn3-knz3ZB6HogGpywAAAMg"]
[Fri Nov 21 04:51:03.210008 2025] [:error] [pid 13412:tid 13432] [client 185.251.19.200:63161] [client 185.251.19.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aR9_N33-knz3ZB6HogGpzQAAAM8"]
[Fri Nov 21 04:51:05.536859 2025] [:error] [pid 13326:tid 13381] [client 136.144.42.248:48921] [client 136.144.42.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aR9_Odh942-HkDIkOWrXYQAAAFc"]
[Fri Nov 21 04:51:08.062641 2025] [:error] [pid 51434:tid 51451] [client 185.251.19.202:29535] [client 185.251.19.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aR9_PPU96liplEDkw_TYbAAAAQ8"]
[Fri Nov 21 04:51:08.954082 2025] [:error] [pid 13325:tid 13349] [client 136.144.42.248:32801] [client 136.144.42.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aR9_PCBUXj9tD75On3CVwgAAABM"]
[Fri Nov 21 04:51:12.983237 2025] [:error] [pid 13412:tid 13417] [client 185.251.19.187:34803] [client 185.251.19.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aR9_QH3-knz3ZB6HogGp4AAAAMA"]
[Fri Nov 21 04:51:13.860366 2025] [:error] [pid 51434:tid 51439] [client 185.251.19.182:40915] [client 185.251.19.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aR9_QfU96liplEDkw_TYcwAAAQM"]
[Fri Nov 21 04:51:14.742652 2025] [:error] [pid 13326:tid 13379] [client 185.251.19.195:55319] [client 185.251.19.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aR9_Qth942-HkDIkOWrXeQAAAFU"]
[Fri Nov 21 04:51:15.639354 2025] [:error] [pid 51434:tid 51449] [client 185.251.19.185:26083] [client 185.251.19.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aR9_Q_U96liplEDkw_TYeQAAAQ0"]
[Fri Nov 21 04:51:18.312104 2025] [:error] [pid 13325:tid 13334] [client 185.251.19.185:58651] [client 185.251.19.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aR9_RiBUXj9tD75On3CV0QAAAAQ"]
[Fri Nov 21 04:51:22.345835 2025] [:error] [pid 51434:tid 51445] [client 172.98.32.176:62343] [client 172.98.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aR9_SvU96liplEDkw_TYgQAAAQk"]
[Fri Nov 21 04:51:29.114686 2025] [:error] [pid 13326:tid 13371] [client 185.251.19.169:31373] [client 185.251.19.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aR9_Udh942-HkDIkOWrXjAAAAE0"]
[Fri Nov 21 04:51:40.056637 2025] [:error] [pid 13325:tid 13331] [client 185.251.19.165:38013] [client 185.251.19.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aR9_XCBUXj9tD75On3CV8QAAAAE"]
[Fri Nov 21 04:51:45.312810 2025] [:error] [pid 13325:tid 13334] [client 185.251.19.201:24829] [client 185.251.19.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aR9_YSBUXj9tD75On3CWAgAAAAQ"]
[Fri Nov 21 04:51:46.186257 2025] [:error] [pid 13326:tid 13366] [client 185.251.19.181:42455] [client 185.251.19.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aR9_Yth942-HkDIkOWrXogAAAEg"]
[Fri Nov 21 04:51:52.865728 2025] [:error] [pid 51434:tid 51450] [client 185.251.19.184:25321] [client 185.251.19.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aR9_aPU96liplEDkw_TYlwAAAQ4"]
[Fri Nov 21 04:51:58.237743 2025] [proxy_fcgi:error] [pid 13326:tid 13374] [client 185.251.19.183:48745] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:51:58.684093 2025] [proxy_fcgi:error] [pid 13326:tid 13375] [client 185.251.19.183:48745] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:51:59.129524 2025] [proxy_fcgi:error] [pid 13326:tid 13371] [client 185.251.19.183:48745] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:52:04.287058 2025] [:error] [pid 13326:tid 13358] [client 185.251.19.183:48745] [client 185.251.19.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aR9_dNh942-HkDIkOWrXzQAAAEA"]
[Fri Nov 21 04:52:05.155922 2025] [:error] [pid 13327:tid 13407] [client 185.251.19.202:23303] [client 185.251.19.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aR9_dfBXf-8B6mFkLeOLTwAAAJY"]
[Fri Nov 21 04:52:06.105796 2025] [:error] [pid 13326:tid 13381] [client 185.251.19.173:30001] [client 185.251.19.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aR9_dth942-HkDIkOWrXzgAAAFc"]
[Fri Nov 21 04:52:06.983605 2025] [:error] [pid 51434:tid 51460] [client 136.144.42.244:52207] [client 136.144.42.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aR9_dvU96liplEDkw_TYoQAAARg"]
[Fri Nov 21 04:52:07.876533 2025] [:error] [pid 13327:tid 13398] [client 185.251.19.190:47957] [client 185.251.19.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aR9_d_BXf-8B6mFkLeOLVgAAAI0"]
[Fri Nov 21 04:52:08.749618 2025] [:error] [pid 13327:tid 13401] [client 185.251.19.170:59851] [client 185.251.19.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aR9_ePBXf-8B6mFkLeOLXAAAAJA"]
[Fri Nov 21 04:52:10.962062 2025] [:error] [pid 13412:tid 13419] [client 185.251.19.182:51405] [client 185.251.19.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aR9_en3-knz3ZB6HogGqXgAAAMI"]
[Fri Nov 21 04:52:11.871602 2025] [:error] [pid 13412:tid 13428] [client 185.251.19.168:41211] [client 185.251.19.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aR9_e33-knz3ZB6HogGqYwAAAMs"]
[Fri Nov 21 04:52:12.796392 2025] [:error] [pid 51434:tid 51450] [client 185.251.19.166:49521] [client 185.251.19.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aR9_fPU96liplEDkw_TYuQAAAQ4"]
[Fri Nov 21 04:52:13.653925 2025] [:error] [pid 13326:tid 13362] [client 136.144.42.248:40533] [client 136.144.42.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aR9_fdh942-HkDIkOWrX0wAAAEQ"]
[Fri Nov 21 04:52:17.357711 2025] [:error] [pid 51434:tid 51454] [client 185.251.19.189:32211] [client 185.251.19.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aR9_gfU96liplEDkw_TYvAAAARI"]
[Fri Nov 21 04:52:19.427725 2025] [:error] [pid 13326:tid 13361] [client 185.251.19.175:52499] [client 185.251.19.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aR9_g9h942-HkDIkOWrX3gAAAEM"]
[Fri Nov 21 04:52:23.498001 2025] [:error] [pid 13327:tid 13396] [client 136.144.42.245:53571] [client 136.144.42.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aR9_h_BXf-8B6mFkLeOLbAAAAIs"]
[Fri Nov 21 04:52:27.460337 2025] [:error] [pid 51434:tid 51446] [client 185.251.19.185:64269] [client 185.251.19.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aR9_i_U96liplEDkw_TYzgAAAQo"]
[Fri Nov 21 04:52:32.849305 2025] [:error] [pid 13327:tid 13407] [client 172.98.32.176:23755] [client 172.98.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aR9_kPBXf-8B6mFkLeOLeQAAAJY"]
[Fri Nov 21 04:52:40.437070 2025] [:error] [pid 13412:tid 13432] [client 185.251.19.182:40019] [client 185.251.19.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aR9_mH3-knz3ZB6HogGqoQAAAM8"]
[Fri Nov 21 04:52:43.054348 2025] [:error] [pid 13325:tid 13345] [client 185.251.19.188:55205] [client 185.251.19.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aR9_myBUXj9tD75On3CWVwAAAA8"]
[Fri Nov 21 04:53:05.269075 2025] [:error] [pid 13327:tid 13394] [client 136.144.42.247:63133] [client 136.144.42.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aR9_sfBXf-8B6mFkLeOLmwAAAIk"]
[Fri Nov 21 04:53:06.123300 2025] [:error] [pid 13327:tid 13390] [client 185.251.19.203:40467] [client 185.251.19.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aR9_svBXf-8B6mFkLeOLnQAAAIU"]
[Fri Nov 21 04:53:06.977404 2025] [:error] [pid 51434:tid 51457] [client 172.98.32.178:58089] [client 172.98.32.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.178, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR9_svU96liplEDkw_TZRQAAARU"]
[Fri Nov 21 04:53:09.929176 2025] [:error] [pid 51434:tid 51449] [client 172.98.32.178:58089] [client 172.98.32.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aR9_tfU96liplEDkw_TZVAAAAQ0"]
[Fri Nov 21 04:53:13.878730 2025] [:error] [pid 13412:tid 13418] [client 136.144.42.246:37053] [client 136.144.42.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aR9_uX3-knz3ZB6HogGqwgAAAME"]
[Fri Nov 21 04:53:14.739440 2025] [:error] [pid 51434:tid 51440] [client 185.251.19.179:21961] [client 185.251.19.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR9_uvU96liplEDkw_TZZAAAAQQ"]
[Fri Nov 21 04:53:21.301792 2025] [:error] [pid 51434:tid 51457] [client 185.251.19.189:22035] [client 185.251.19.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aR9_wfU96liplEDkw_TZfwAAARU"]
[Fri Nov 21 04:53:22.156426 2025] [:error] [pid 51434:tid 51453] [client 185.251.19.188:35473] [client 185.251.19.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aR9_wvU96liplEDkw_TZgwAAARE"]
[Fri Nov 21 04:53:30.557593 2025] [:error] [pid 51434:tid 51460] [client 185.251.19.182:27053] [client 185.251.19.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aR9_yvU96liplEDkw_TZqwAAARg"]
[Fri Nov 21 04:53:34.430798 2025] [proxy_fcgi:error] [pid 13412:tid 13426] [client 185.251.19.186:60729] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:53:36.287080 2025] [:error] [pid 13412:tid 13428] [client 185.251.19.186:60729] [client 185.251.19.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "aR9_0H3-knz3ZB6HogGq7AAAAMs"]
[Fri Nov 21 04:53:37.141168 2025] [:error] [pid 51434:tid 51454] [client 185.251.19.169:29687] [client 185.251.19.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "aR9_0fU96liplEDkw_TZswAAARI"]
[Fri Nov 21 04:53:41.146585 2025] [:error] [pid 13327:tid 13390] [client 185.251.19.188:25763] [client 185.251.19.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aR9_1fBXf-8B6mFkLeOL0gAAAIU"]
[Fri Nov 21 04:53:42.001089 2025] [:error] [pid 13325:tid 13345] [client 185.251.19.178:30729] [client 185.251.19.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aR9_1iBUXj9tD75On3CWrwAAAA8"]
[Fri Nov 21 04:53:52.864154 2025] [:error] [pid 13325:tid 13330] [client 185.251.19.186:39059] [client 185.251.19.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aR9_4CBUXj9tD75On3CWxgAAAAA"]
[Fri Nov 21 04:53:53.721189 2025] [:error] [pid 13327:tid 13397] [client 185.251.19.196:49011] [client 185.251.19.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aR9_4fBXf-8B6mFkLeOL5wAAAIw"]
[Fri Nov 21 04:54:00.722169 2025] [:error] [pid 13325:tid 13354] [client 185.251.19.197:45561] [client 185.251.19.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aR9_6CBUXj9tD75On3CWzQAAABg"]
[Fri Nov 21 04:54:01.588890 2025] [:error] [pid 51434:tid 51445] [client 172.98.32.176:65397] [client 172.98.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aR9_6fU96liplEDkw_TZ6AAAAQk"]
[Fri Nov 21 04:54:02.460803 2025] [:error] [pid 51434:tid 51447] [client 185.251.19.192:50145] [client 185.251.19.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aR9_6vU96liplEDkw_TZ7AAAAQs"]
[Fri Nov 21 04:54:10.666670 2025] [:error] [pid 13327:tid 13395] [client 185.251.19.188:40345] [client 185.251.19.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aR9_8vBXf-8B6mFkLeOMAgAAAIo"]
[Fri Nov 21 04:54:14.173116 2025] [:error] [pid 13326:tid 13382] [client 172.98.32.177:27763] [client 172.98.32.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aR9_9th942-HkDIkOWrYOwAAAFg"]
[Fri Nov 21 04:54:23.968515 2025] [:error] [pid 13327:tid 13385] [client 185.251.19.174:42069] [client 185.251.19.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.251.19.174, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "aR9___BXf-8B6mFkLeOMEgAAAIA"]
[Fri Nov 21 04:54:32.253001 2025] [:error] [pid 13327:tid 13387] [client 185.251.19.174:42069] [client 185.251.19.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aR-ACPBXf-8B6mFkLeOMGwAAAII"]
[Fri Nov 21 04:54:33.108478 2025] [:error] [pid 51434:tid 51452] [client 185.251.19.170:22745] [client 185.251.19.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.251.19.170, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aR-ACfU96liplEDkw_TaLAAAARA"]
[Fri Nov 21 04:54:48.732196 2025] [proxy_fcgi:error] [pid 51434:tid 51456] [client 185.251.19.170:22745] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:55:08.602953 2025] [:error] [pid 51434:tid 51456] [client 185.251.19.170:22745] [client 185.251.19.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aR-ALPU96liplEDkw_TaZAAAARQ"]
[Fri Nov 21 04:55:13.997229 2025] [:error] [pid 13412:tid 13419] [client 185.251.19.166:29493] [client 185.251.19.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aR-AMX3-knz3ZB6HogGrdgAAAMI"]
[Fri Nov 21 04:55:18.051114 2025] [:error] [pid 13325:tid 13354] [client 185.251.19.189:60113] [client 185.251.19.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aR-ANiBUXj9tD75On3CXBAAAABg"]
[Fri Nov 21 04:55:36.934776 2025] [:error] [pid 51434:tid 51454] [client 185.251.19.191:48505] [client 185.251.19.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aR-ASPU96liplEDkw_TahgAAARI"]
[Fri Nov 21 04:55:41.134171 2025] [:error] [pid 13326:tid 13367] [client 185.251.19.169:61805] [client 185.251.19.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aR-ATdh942-HkDIkOWrYdQAAAEk"]
[Fri Nov 21 04:55:43.689097 2025] [:error] [pid 13412:tid 13418] [client 185.251.19.185:51011] [client 185.251.19.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aR-AT33-knz3ZB6HogGrlwAAAME"]
[Fri Nov 21 04:55:50.643114 2025] [proxy_fcgi:error] [pid 51434:tid 51450] [client 185.251.19.180:36995] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:55:51.074327 2025] [proxy_fcgi:error] [pid 51434:tid 51458] [client 185.251.19.180:36995] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:55:51.503699 2025] [:error] [pid 51434:tid 51436] [client 185.251.19.180:36995] [client 185.251.19.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aR-AV_U96liplEDkw_TanAAAAQA"]
[Fri Nov 21 04:55:52.384437 2025] [:error] [pid 13326:tid 13360] [client 185.251.19.191:31305] [client 185.251.19.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aR-AWNh942-HkDIkOWrYfAAAAEI"]
[Fri Nov 21 04:56:03.593846 2025] [:error] [pid 13325:tid 13337] [client 136.144.42.250:23611] [client 136.144.42.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aR-AYyBUXj9tD75On3CXLAAAAAc"]
[Fri Nov 21 04:56:06.198711 2025] [:error] [pid 13326:tid 13366] [client 185.251.19.199:46903] [client 185.251.19.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aR-AZth942-HkDIkOWrYhwAAAEg"]
[Fri Nov 21 04:56:11.824615 2025] [:error] [pid 51434:tid 51454] [client 136.144.42.250:59505] [client 136.144.42.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aR-Aa_U96liplEDkw_TatAAAARI"]
[Fri Nov 21 04:56:22.860781 2025] [:error] [pid 13412:tid 13428] [client 185.251.19.198:55761] [client 185.251.19.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aR-Adn3-knz3ZB6HogGrtwAAAMs"]
[Fri Nov 21 04:56:23.737254 2025] [proxy_fcgi:error] [pid 13412:tid 13421] [client 185.251.19.170:27575] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:56:27.321720 2025] [:error] [pid 13412:tid 13426] [client 185.251.19.170:27575] [client 185.251.19.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aR-Ae33-knz3ZB6HogGrvwAAAMk"]
[Fri Nov 21 04:56:35.401235 2025] [proxy_fcgi:error] [pid 51434:tid 51444] [client 185.251.19.177:43105] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:56:37.232475 2025] [:error] [pid 51434:tid 51455] [client 185.251.19.177:43105] [client 185.251.19.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.251.19.177, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aR-AhfU96liplEDkw_TazgAAARM"]
[Fri Nov 21 04:56:44.111681 2025] [:error] [pid 51434:tid 51454] [client 185.251.19.177:43105] [client 185.251.19.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aR-AjPU96liplEDkw_Ta2QAAARI"]
[Fri Nov 21 04:56:46.635600 2025] [:error] [pid 13327:tid 13398] [client 136.144.42.250:26185] [client 136.144.42.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aR-AjvBXf-8B6mFkLeOMxgAAAI0"]
[Fri Nov 21 04:56:52.657424 2025] [:error] [pid 13325:tid 13341] [client 185.251.19.189:21545] [client 185.251.19.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aR-AlCBUXj9tD75On3CXTQAAAAs"]
[Fri Nov 21 04:56:59.344594 2025] [:error] [pid 51434:tid 51458] [client 136.144.42.245:29407] [client 136.144.42.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aR-Am_U96liplEDkw_Ta7wAAARY"]
[Fri Nov 21 04:57:03.446774 2025] [:error] [pid 13327:tid 13407] [client 185.251.19.175:65293] [client 185.251.19.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aR-An_BXf-8B6mFkLeOM2gAAAJY"]
[Fri Nov 21 04:57:09.108815 2025] [:error] [pid 51434:tid 51436] [client 185.251.19.182:58263] [client 185.251.19.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aR-ApfU96liplEDkw_TbBAAAAQA"]
[Fri Nov 21 04:57:13.269609 2025] [proxy_fcgi:error] [pid 13325:tid 13332] [client 185.251.19.181:23635] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:57:13.721637 2025] [:error] [pid 13325:tid 13331] [client 185.251.19.181:23635] [client 185.251.19.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aR-AqSBUXj9tD75On3CXaQAAAAE"]
[Fri Nov 21 04:57:14.603753 2025] [proxy_fcgi:error] [pid 13327:tid 13390] [client 185.251.19.173:63097] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Fri Nov 21 04:57:15.487904 2025] [:error] [pid 13412:tid 13418] [client 185.251.19.194:30633] [client 185.251.19.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "aR-Aq33-knz3ZB6HogGr4AAAAME"]
[Fri Nov 21 04:57:16.357621 2025] [:error] [pid 51434:tid 51449] [client 185.251.19.195:30847] [client 185.251.19.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aR-ArPU96liplEDkw_TbDAAAAQ0"]
[Fri Nov 21 04:57:17.289525 2025] [:error] [pid 51434:tid 51446] [client 185.251.19.186:45697] [client 185.251.19.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aR-ArfU96liplEDkw_TbDwAAAQo"]
[Fri Nov 21 04:57:18.164458 2025] [:error] [pid 13325:tid 13335] [client 185.251.19.201:38337] [client 185.251.19.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aR-AriBUXj9tD75On3CXagAAAAU"]
[Fri Nov 21 04:57:19.055504 2025] [:error] [pid 13326:tid 13369] [client 136.144.42.249:42919] [client 136.144.42.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aR-Ar9h942-HkDIkOWrYsAAAAEs"]
[Fri Nov 21 04:57:19.923557 2025] [:error] [pid 13327:tid 13387] [client 185.251.19.166:41977] [client 185.251.19.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aR-Ar_BXf-8B6mFkLeOM5wAAAII"]
[Fri Nov 21 04:57:23.958142 2025] [:error] [pid 13327:tid 13402] [client 185.251.19.178:25831] [client 185.251.19.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aR-As_BXf-8B6mFkLeOM8AAAAJE"]
[Fri Nov 21 04:57:24.884296 2025] [:error] [pid 13326:tid 13368] [client 185.251.19.176:35423] [client 185.251.19.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aR-AtNh942-HkDIkOWrYtwAAAEo"]
[Fri Nov 21 04:57:25.832387 2025] [:error] [pid 51434:tid 51446] [client 136.144.42.251:47441] [client 136.144.42.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aR-AtfU96liplEDkw_TbFwAAAQo"]
[Fri Nov 21 04:57:27.981526 2025] [:error] [pid 13326:tid 13363] [client 185.251.19.186:30125] [client 185.251.19.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aR-At9h942-HkDIkOWrYvAAAAEU"]
[Fri Nov 21 04:57:32.077907 2025] [:error] [pid 13327:tid 13400] [client 172.98.32.179:61023] [client 172.98.32.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aR-AvPBXf-8B6mFkLeONAwAAAI8"]
[Fri Nov 21 04:57:32.947027 2025] [proxy_fcgi:error] [pid 13326:tid 13377] [client 185.251.19.178:42069] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 04:57:37.993843 2025] [:error] [pid 13326:tid 13358] [client 185.251.19.178:42069] [client 185.251.19.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.251.19.178, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aR-Awdh942-HkDIkOWrYxQAAAEA"]
[Fri Nov 21 04:57:46.220397 2025] [:error] [pid 13326:tid 13372] [client 185.251.19.178:42069] [client 185.251.19.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aR-Ayth942-HkDIkOWrYzAAAAE4"]
[Fri Nov 21 04:57:47.178633 2025] [:error] [pid 13412:tid 13421] [client 185.251.19.170:20765] [client 185.251.19.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aR-Ay33-knz3ZB6HogGsCwAAAMQ"]
[Fri Nov 21 04:58:12.761216 2025] [:error] [pid 13325:tid 13352] [client 185.251.19.195:61673] [client 185.251.19.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aR-A5CBUXj9tD75On3CXtAAAABY"]
[Fri Nov 21 04:58:13.644491 2025] [:error] [pid 51434:tid 51458] [client 185.251.19.181:20675] [client 185.251.19.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aR-A5fU96liplEDkw_TbZQAAARY"]
[Fri Nov 21 04:58:14.508421 2025] [:error] [pid 13326:tid 13382] [client 185.251.19.181:61967] [client 185.251.19.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aR-A5th942-HkDIkOWrY9AAAAFg"]
[Fri Nov 21 04:58:25.228914 2025] [:error] [pid 13326:tid 13366] [client 136.144.42.246:49721] [client 136.144.42.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aR-A8dh942-HkDIkOWrZAQAAAEg"]
[Fri Nov 21 04:58:26.123278 2025] [:error] [pid 13412:tid 13426] [client 185.251.19.199:49351] [client 185.251.19.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aR-A8n3-knz3ZB6HogGsQwAAAMk"]
[Fri Nov 21 04:58:27.030275 2025] [:error] [pid 13412:tid 13438] [client 185.251.19.178:64331] [client 185.251.19.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aR-A833-knz3ZB6HogGsRQAAANU"]
[Fri Nov 21 04:58:34.073031 2025] [:error] [pid 51434:tid 51439] [client 172.98.32.177:22513] [client 172.98.32.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aR-A-vU96liplEDkw_TbdwAAAQM"]
[Fri Nov 21 04:58:36.936123 2025] [:error] [pid 13325:tid 13345] [client 172.98.32.176:63651] [client 172.98.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aR-A_CBUXj9tD75On3CXxgAAAA8"]
[Fri Nov 21 04:58:41.016499 2025] [:error] [pid 13325:tid 13353] [client 185.251.19.192:28477] [client 185.251.19.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aR-BASBUXj9tD75On3CXzwAAABc"]
[Fri Nov 21 04:58:57.972693 2025] [:error] [pid 51434:tid 51450] [client 185.251.19.174:21295] [client 185.251.19.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aR-BEfU96liplEDkw_TbnAAAAQ4"]
[Fri Nov 21 04:59:02.161262 2025] [:error] [pid 13327:tid 13390] [client 185.251.19.198:25131] [client 185.251.19.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "aR-BFvBXf-8B6mFkLeONPwAAAIU"]
[Fri Nov 21 04:59:12.220803 2025] [:error] [pid 51434:tid 51450] [client 185.251.19.186:24533] [client 185.251.19.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aR-BIPU96liplEDkw_TbqgAAAQ4"]
[Fri Nov 21 04:59:16.201222 2025] [:error] [pid 13325:tid 13346] [client 185.251.19.165:24341] [client 185.251.19.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aR-BJCBUXj9tD75On3CX5QAAABA"]
[Fri Nov 21 04:59:23.080740 2025] [:error] [pid 13325:tid 13330] [client 185.251.19.175:51371] [client 185.251.19.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aR-BKyBUXj9tD75On3CX7AAAAAA"]
[Fri Nov 21 04:59:31.436977 2025] [:error] [pid 51434:tid 51439] [client 185.251.19.185:26089] [client 185.251.19.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aR-BM_U96liplEDkw_TbwwAAAQM"]
[Fri Nov 21 04:59:35.766772 2025] [:error] [pid 51434:tid 51443] [client 185.251.19.185:46261] [client 185.251.19.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aR-BN_U96liplEDkw_TbzQAAAQc"]
[Fri Nov 21 04:59:36.637805 2025] [:error] [pid 13325:tid 13340] [client 185.251.19.197:44501] [client 185.251.19.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aR-BOCBUXj9tD75On3CX7gAAAAo"]
[Fri Nov 21 04:59:45.272607 2025] [:error] [pid 13327:tid 13395] [client 185.251.19.190:40787] [client 185.251.19.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aR-BQfBXf-8B6mFkLeONYgAAAIo"]
[Fri Nov 21 04:59:53.697075 2025] [:error] [pid 51434:tid 51438] [client 185.251.19.164:20001] [client 185.251.19.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aR-BSfU96liplEDkw_Tb-QAAAQI"]
[Fri Nov 21 05:00:00.598077 2025] [:error] [pid 13325:tid 13345] [client 136.144.42.244:33757] [client 136.144.42.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aR-BUCBUXj9tD75On3CYBwAAAA8"]
[Fri Nov 21 05:00:01.512319 2025] [:error] [pid 13327:tid 13401] [client 185.251.19.176:30471] [client 185.251.19.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aR-BUfBXf-8B6mFkLeONaAAAAJA"]
[Fri Nov 21 05:00:05.604564 2025] [:error] [pid 51434:tid 51448] [client 136.144.42.247:52103] [client 136.144.42.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aR-BVfU96liplEDkw_TcBAAAAQw"]
[Fri Nov 21 05:00:11.239898 2025] [:error] [pid 51434:tid 51445] [client 136.144.42.248:24489] [client 136.144.42.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "aR-BW_U96liplEDkw_TcHgAAAQk"]
[Fri Nov 21 05:00:12.120238 2025] [:error] [pid 13412:tid 13430] [client 185.251.19.190:48109] [client 185.251.19.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aR-BXH3-knz3ZB6HogGskQAAAM0"]
[Fri Nov 21 05:00:22.328238 2025] [:error] [pid 13327:tid 13387] [client 185.251.19.185:51971] [client 185.251.19.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "aR-BZvBXf-8B6mFkLeONigAAAII"]
[Fri Nov 21 05:00:26.470931 2025] [:error] [pid 13327:tid 13407] [client 185.251.19.169:34753] [client 185.251.19.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aR-BavBXf-8B6mFkLeONkAAAAJY"]
[Fri Nov 21 05:00:27.335162 2025] [:error] [pid 51434:tid 51443] [client 172.98.32.177:21503] [client 172.98.32.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aR-Ba_U96liplEDkw_TcQwAAAQc"]
[Fri Nov 21 05:00:31.348081 2025] [:error] [pid 13412:tid 13425] [client 185.251.19.179:35321] [client 185.251.19.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aR-Bb33-knz3ZB6HogGsrQAAAMg"]
[Fri Nov 21 05:00:34.018815 2025] [:error] [pid 51434:tid 51446] [client 185.251.19.165:47963] [client 185.251.19.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aR-BcvU96liplEDkw_TcVgAAAQo"]
[Fri Nov 21 05:00:42.211872 2025] [:error] [pid 13326:tid 13369] [client 185.251.19.195:29283] [client 185.251.19.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aR-Beth942-HkDIkOWrZhgAAAEs"]
[Fri Nov 21 05:00:46.477484 2025] [:error] [pid 51434:tid 51453] [client 185.251.19.202:51873] [client 185.251.19.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aR-BfvU96liplEDkw_TcagAAARE"]
[Fri Nov 21 05:00:50.468631 2025] [:error] [pid 13326:tid 13369] [client 185.251.19.169:24155] [client 185.251.19.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aR-Bgth942-HkDIkOWrZlgAAAEs"]
[Fri Nov 21 05:00:53.091291 2025] [:error] [pid 13325:tid 13332] [client 185.251.19.199:51997] [client 185.251.19.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "aR-BhSBUXj9tD75On3CYOQAAAAI"]
[Fri Nov 21 05:00:55.690276 2025] [:error] [pid 13326:tid 13365] [client 136.144.42.249:22447] [client 136.144.42.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aR-Bh9h942-HkDIkOWrZmgAAAEc"]
[Fri Nov 21 05:00:56.587070 2025] [:error] [pid 51434:tid 51442] [client 185.251.19.201:26533] [client 185.251.19.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "aR-BiPU96liplEDkw_TcfwAAAQY"]
[Fri Nov 21 05:00:57.453010 2025] [:error] [pid 51434:tid 51439] [client 185.251.19.189:46151] [client 185.251.19.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aR-BifU96liplEDkw_TcgwAAAQM"]
[Fri Nov 21 05:01:07.333888 2025] [:error] [pid 13412:tid 13435] [client 185.251.19.167:24693] [client 185.251.19.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aR-Bk33-knz3ZB6HogGs8AAAANI"]
[Fri Nov 21 05:01:12.872915 2025] [:error] [pid 13327:tid 13407] [client 185.251.19.165:29823] [client 185.251.19.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "aR-BmPBXf-8B6mFkLeONzAAAAJY"]
[Fri Nov 21 05:01:18.185338 2025] [:error] [pid 13326:tid 13363] [client 185.251.19.187:39187] [client 185.251.19.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aR-Bnth942-HkDIkOWrZugAAAEU"]
[Fri Nov 21 05:01:23.562434 2025] [:error] [pid 13325:tid 13349] [client 136.144.42.251:38639] [client 136.144.42.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aR-BoyBUXj9tD75On3CYVQAAABM"]
[Fri Nov 21 05:01:33.369899 2025] [:error] [pid 13412:tid 13427] [client 185.251.19.196:46365] [client 185.251.19.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aR-BrX3-knz3ZB6HogGtFgAAAMo"]
[Fri Nov 21 05:01:35.987056 2025] [:error] [pid 13326:tid 13368] [client 185.251.19.173:41905] [client 185.251.19.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aR-Br9h942-HkDIkOWrZyAAAAEo"]
[Fri Nov 21 05:01:38.602963 2025] [:error] [pid 51434:tid 51460] [client 185.251.19.182:51843] [client 185.251.19.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aR-BsvU96liplEDkw_TcuQAAARg"]
[Fri Nov 21 05:01:42.629890 2025] [:error] [pid 13326:tid 13362] [client 185.251.19.201:47181] [client 185.251.19.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aR-Btth942-HkDIkOWrZzwAAAEQ"]
[Fri Nov 21 05:01:55.250213 2025] [:error] [pid 51434:tid 51442] [client 185.251.19.184:57479] [client 185.251.19.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aR-Bw_U96liplEDkw_Tc0gAAAQY"]
[Fri Nov 21 05:01:56.143271 2025] [:error] [pid 13326:tid 13377] [client 172.98.32.177:27147] [client 172.98.32.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aR-BxNh942-HkDIkOWrZ1AAAAFM"]
[Fri Nov 21 05:02:01.383658 2025] [:error] [pid 13412:tid 13423] [client 136.144.42.246:50281] [client 136.144.42.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aR-ByX3-knz3ZB6HogGtLAAAAMY"]
[Fri Nov 21 05:02:02.264714 2025] [:error] [pid 13325:tid 13342] [client 185.251.19.188:26743] [client 185.251.19.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aR-ByiBUXj9tD75On3CYbAAAAAw"]
[Fri Nov 21 05:02:06.272194 2025] [:error] [pid 13325:tid 13340] [client 185.251.19.192:42185] [client 185.251.19.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aR-BziBUXj9tD75On3CYcgAAAAo"]
[Fri Nov 21 05:02:07.208017 2025] [:error] [pid 13326:tid 13382] [client 185.251.19.176:36223] [client 185.251.19.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aR-Bz9h942-HkDIkOWrZ1wAAAFg"]
[Fri Nov 21 05:02:08.092702 2025] [:error] [pid 51434:tid 51436] [client 185.251.19.175:25369] [client 185.251.19.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.251.19.175, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aR-B0PU96liplEDkw_Tc3wAAAQA"]
[Fri Nov 21 05:02:08.098017 2025] [proxy_fcgi:error] [pid 51434:tid 51436] [client 185.251.19.175:25369] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 05:02:08.529429 2025] [:error] [pid 51434:tid 51458] [client 185.251.19.175:25369] [client 185.251.19.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aR-B0PU96liplEDkw_Tc4AAAARY"]
[Fri Nov 21 05:02:13.911852 2025] [:error] [pid 13326:tid 13365] [client 185.251.19.174:54169] [client 185.251.19.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aR-B1dh942-HkDIkOWrZ3QAAAEc"]
[Fri Nov 21 05:02:14.786137 2025] [:error] [pid 13325:tid 13333] [client 136.144.42.246:51845] [client 136.144.42.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "aR-B1iBUXj9tD75On3CYdQAAAAM"]
[Fri Nov 21 05:02:25.893062 2025] [:error] [pid 13412:tid 13430] [client 136.144.42.246:56157] [client 136.144.42.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aR-B4X3-knz3ZB6HogGtVAAAAM0"]
[Fri Nov 21 05:02:26.752253 2025] [:error] [pid 13412:tid 13418] [client 185.251.19.169:44315] [client 185.251.19.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aR-B4n3-knz3ZB6HogGtVQAAAME"]
[Fri Nov 21 05:02:30.168768 2025] [:error] [pid 13412:tid 13426] [client 136.144.42.251:38441] [client 136.144.42.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aR-B5n3-knz3ZB6HogGtWQAAAMk"]
[Fri Nov 21 05:02:31.056877 2025] [:error] [pid 13326:tid 13372] [client 185.251.19.188:21535] [client 185.251.19.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aR-B59h942-HkDIkOWrZ9QAAAE4"]
[Fri Nov 21 05:02:31.919180 2025] [proxy_fcgi:error] [pid 13325:tid 13348] [client 185.251.19.198:35891] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 05:02:32.407712 2025] [:error] [pid 13325:tid 13350] [client 185.251.19.198:35891] [client 185.251.19.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.251.19.198, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aR-B6CBUXj9tD75On3CYhQAAABQ"]
[Fri Nov 21 05:02:35.568638 2025] [:error] [pid 13325:tid 13347] [client 185.251.19.198:35891] [client 185.251.19.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aR-B6yBUXj9tD75On3CYigAAABE"]
[Fri Nov 21 05:02:41.787275 2025] [:error] [pid 13327:tid 13391] [client 185.251.19.176:22803] [client 185.251.19.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aR-B8fBXf-8B6mFkLeOOLwAAAIY"]
[Fri Nov 21 05:02:44.386735 2025] [:error] [pid 13327:tid 13390] [client 185.251.19.202:59677] [client 185.251.19.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aR-B9PBXf-8B6mFkLeOOMwAAAIU"]
[Fri Nov 21 05:02:45.260565 2025] [:error] [pid 13326:tid 13359] [client 185.251.19.169:49997] [client 185.251.19.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aR-B9dh942-HkDIkOWraAwAAAEE"]
[Fri Nov 21 05:02:50.900066 2025] [:error] [pid 13412:tid 13433] [client 185.251.19.167:54497] [client 185.251.19.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aR-B-n3-knz3ZB6HogGtgAAAANA"]
[Fri Nov 21 05:02:55.045196 2025] [:error] [pid 13412:tid 13418] [client 185.251.19.187:33299] [client 185.251.19.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aR-B_33-knz3ZB6HogGthgAAAME"]
[Fri Nov 21 05:03:01.904104 2025] [:error] [pid 51434:tid 51436] [client 185.251.19.181:52687] [client 185.251.19.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aR-CBfU96liplEDkw_TdNwAAAQA"]
[Fri Nov 21 05:03:02.770442 2025] [:error] [pid 51434:tid 51447] [client 172.98.32.178:20833] [client 172.98.32.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "aR-CBvU96liplEDkw_TdOgAAAQs"]
[Fri Nov 21 05:03:05.496445 2025] [:error] [pid 13326:tid 13380] [client 185.251.19.181:46981] [client 185.251.19.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "aR-CCdh942-HkDIkOWraGQAAAFY"]
[Fri Nov 21 05:03:15.118069 2025] [:error] [pid 13326:tid 13366] [client 185.251.19.199:22367] [client 185.251.19.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aR-CE9h942-HkDIkOWraJAAAAEg"]
[Fri Nov 21 05:03:26.195518 2025] [:error] [pid 13326:tid 13374] [client 185.251.19.178:60321] [client 185.251.19.178] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "aR-CHth942-HkDIkOWraNQAAAFA"]
[Fri Nov 21 05:03:26.635221 2025] [:error] [pid 13326:tid 13376] [client 185.251.19.178:60321] [client 185.251.19.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aR-CHth942-HkDIkOWraNwAAAFI"]
[Fri Nov 21 05:03:31.305093 2025] [:error] [pid 13327:tid 13388] [client 185.251.19.181:54019] [client 185.251.19.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aR-CI_BXf-8B6mFkLeOOWwAAAIM"]
[Fri Nov 21 05:03:32.167803 2025] [:error] [pid 13325:tid 13342] [client 185.251.19.168:64159] [client 185.251.19.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aR-CJCBUXj9tD75On3CYoAAAAAw"]
[Fri Nov 21 05:03:41.583394 2025] [:error] [pid 13325:tid 13342] [client 185.251.19.172:27651] [client 185.251.19.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aR-CLSBUXj9tD75On3CYsQAAAAw"]
[Fri Nov 21 05:03:45.719323 2025] [:error] [pid 51434:tid 51452] [client 185.251.19.177:65131] [client 185.251.19.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aR-CMfU96liplEDkw_TdbQAAARA"]
[Fri Nov 21 05:03:48.248169 2025] [:error] [pid 13412:tid 13438] [client 172.98.32.178:29477] [client 172.98.32.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aR-CNH3-knz3ZB6HogGtlwAAANU"]
[Fri Nov 21 05:03:57.632692 2025] [:error] [pid 13325:tid 13346] [client 185.251.19.184:21655] [client 185.251.19.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aR-CPSBUXj9tD75On3CYxwAAABA"]
[Fri Nov 21 05:04:00.163125 2025] [:error] [pid 13327:tid 13395] [client 185.251.19.166:47739] [client 185.251.19.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "aR-CQPBXf-8B6mFkLeOOfgAAAIo"]
[Fri Nov 21 05:04:02.855770 2025] [:error] [pid 13412:tid 13420] [client 136.144.42.249:47057] [client 136.144.42.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aR-CQn3-knz3ZB6HogGtpAAAAMM"]
[Fri Nov 21 05:04:03.785248 2025] [:error] [pid 13326:tid 13377] [client 185.251.19.164:63427] [client 185.251.19.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "aR-CQ9h942-HkDIkOWraWAAAAFM"]
[Fri Nov 21 05:04:07.853073 2025] [:error] [pid 13326:tid 13374] [client 185.251.19.193:53021] [client 185.251.19.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aR-CR9h942-HkDIkOWraXwAAAFA"]
[Fri Nov 21 05:04:14.755315 2025] [:error] [pid 13412:tid 13438] [client 185.251.19.179:52971] [client 185.251.19.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aR-CTn3-knz3ZB6HogGtrwAAANU"]
[Fri Nov 21 05:04:15.678198 2025] [:error] [pid 51434:tid 51443] [client 185.251.19.181:24765] [client 185.251.19.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aR-CT_U96liplEDkw_TdlAAAAQc"]
[Fri Nov 21 05:04:23.962243 2025] [:error] [pid 13327:tid 13392] [client 185.251.19.183:20697] [client 185.251.19.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aR-CV_BXf-8B6mFkLeOOjQAAAIc"]
[Fri Nov 21 05:04:28.101796 2025] [:error] [pid 51434:tid 51441] [client 185.251.19.169:53539] [client 185.251.19.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aR-CXPU96liplEDkw_TdqQAAAQU"]
[Fri Nov 21 05:04:33.484202 2025] [:error] [pid 13325:tid 13354] [client 185.251.19.191:57257] [client 185.251.19.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aR-CYSBUXj9tD75On3CY4wAAABg"]
[Fri Nov 21 05:04:34.359175 2025] [:error] [pid 13412:tid 13436] [client 185.251.19.188:37887] [client 185.251.19.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aR-CYn3-knz3ZB6HogGtugAAANM"]
[Fri Nov 21 05:04:36.970086 2025] [:error] [pid 13326:tid 13375] [client 172.98.32.177:31987] [client 172.98.32.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aR-CZNh942-HkDIkOWrabwAAAFE"]
[Fri Nov 21 05:04:40.984752 2025] [:error] [pid 13326:tid 13367] [client 185.251.19.187:63127] [client 185.251.19.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aR-CaNh942-HkDIkOWraeQAAAEk"]
[Fri Nov 21 05:04:45.928542 2025] [:error] [pid 13412:tid 13426] [client 185.251.19.198:53963] [client 185.251.19.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aR-CbX3-knz3ZB6HogGt5QAAAMk"]
[Fri Nov 21 05:04:46.794286 2025] [:error] [pid 13325:tid 13341] [client 172.98.32.176:64613] [client 172.98.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aR-CbiBUXj9tD75On3CY8wAAAAs"]
[Fri Nov 21 05:04:49.946074 2025] [:error] [pid 13326:tid 13361] [client 185.251.19.197:39511] [client 185.251.19.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aR-Ccdh942-HkDIkOWraggAAAEM"]
[Fri Nov 21 05:04:50.836974 2025] [:error] [pid 13326:tid 13381] [client 185.251.19.168:46193] [client 185.251.19.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aR-Ccth942-HkDIkOWragwAAAFc"]
[Fri Nov 21 05:04:54.923423 2025] [:error] [pid 13325:tid 13348] [client 185.251.19.185:42491] [client 185.251.19.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aR-CdiBUXj9tD75On3CY-wAAABI"]
[Fri Nov 21 05:04:57.035603 2025] [:error] [pid 51434:tid 51440] [client 185.251.19.185:57509] [client 185.251.19.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aR-CefU96liplEDkw_Td0AAAAQQ"]
[Fri Nov 21 05:04:57.925704 2025] [:error] [pid 13326:tid 13358] [client 185.251.19.183:62707] [client 185.251.19.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aR-Cedh942-HkDIkOWrahgAAAEA"]
[Fri Nov 21 05:04:58.788147 2025] [:error] [pid 13327:tid 13407] [client 185.251.19.187:31247] [client 185.251.19.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aR-CevBXf-8B6mFkLeOOqgAAAJY"]
[Fri Nov 21 05:05:04.347479 2025] [:error] [pid 13412:tid 13424] [client 185.251.19.176:51203] [client 185.251.19.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aR-CgH3-knz3ZB6HogGt8gAAAMc"]
[Fri Nov 21 05:05:08.407089 2025] [:error] [pid 51434:tid 51436] [client 185.251.19.164:33377] [client 185.251.19.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aR-ChPU96liplEDkw_Td3AAAAQA"]
[Fri Nov 21 05:05:10.908243 2025] [:error] [pid 13327:tid 13388] [client 136.144.42.247:48817] [client 136.144.42.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aR-ChvBXf-8B6mFkLeOOsAAAAIM"]
[Fri Nov 21 05:05:11.772586 2025] [proxy_fcgi:error] [pid 13325:tid 13348] [client 185.251.19.203:23505] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Fri Nov 21 05:05:12.630064 2025] [:error] [pid 51434:tid 51453] [client 185.251.19.171:51517] [client 185.251.19.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aR-CiPU96liplEDkw_Td3wAAARE"]
[Fri Nov 21 05:05:22.521925 2025] [:error] [pid 51434:tid 51449] [client 185.251.19.171:53839] [client 185.251.19.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "aR-CkvU96liplEDkw_Td6wAAAQ0"]
[Fri Nov 21 05:05:23.388723 2025] [:error] [pid 51434:tid 51448] [client 136.144.42.245:22097] [client 136.144.42.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aR-Ck_U96liplEDkw_Td7AAAAQw"]
[Fri Nov 21 05:05:28.442741 2025] [:error] [pid 51434:tid 51443] [client 172.98.32.176:38381] [client 172.98.32.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aR-CmPU96liplEDkw_TeBAAAAQc"]
[Fri Nov 21 05:05:35.451609 2025] [:error] [pid 13412:tid 13417] [client 172.98.32.179:51029] [client 172.98.32.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aR-Cn33-knz3ZB6HogGuCQAAAMA"]
[Fri Nov 21 05:05:39.410487 2025] [:error] [pid 13326:tid 13364] [client 136.144.42.244:55549] [client 136.144.42.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aR-Co9h942-HkDIkOWranAAAAEY"]
[Fri Nov 21 05:05:42.863463 2025] [:error] [pid 51434:tid 51442] [client 136.144.42.250:37087] [client 136.144.42.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aR-CpvU96liplEDkw_TeDgAAAQY"]
[Fri Nov 21 05:05:45.525781 2025] [:error] [pid 13326:tid 13364] [client 185.251.19.193:61267] [client 185.251.19.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aR-Cqdh942-HkDIkOWrargAAAEY"]
[Fri Nov 21 05:05:48.505339 2025] [:error] [pid 13326:tid 13372] [client 136.144.42.249:32289] [client 136.144.42.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aR-CrNh942-HkDIkOWravAAAAE4"]
[Fri Nov 21 05:05:55.297917 2025] [:error] [pid 13327:tid 13396] [client 136.144.42.245:57177] [client 136.144.42.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aR-Cs_BXf-8B6mFkLeOO6QAAAIs"]
[Fri Nov 21 05:06:00.878743 2025] [:error] [pid 13326:tid 13361] [client 185.251.19.193:20687] [client 185.251.19.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aR-CuNh942-HkDIkOWra6AAAAEM"]
[Fri Nov 21 05:06:01.756366 2025] [proxy_fcgi:error] [pid 13325:tid 13332] [client 185.251.19.187:25577] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 05:06:02.287503 2025] [:error] [pid 13325:tid 13348] [client 185.251.19.187:25577] [client 185.251.19.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aR-CuiBUXj9tD75On3CZXQAAABI"]
[Fri Nov 21 05:06:03.205023 2025] [:error] [pid 13412:tid 13425] [client 185.251.19.168:64949] [client 185.251.19.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aR-Cu33-knz3ZB6HogGuKgAAAMg"]
[Fri Nov 21 05:06:07.357736 2025] [:error] [pid 13326:tid 13377] [client 185.251.19.179:21723] [client 185.251.19.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aR-Cv9h942-HkDIkOWrbBAAAAFM"]
[Fri Nov 21 05:06:08.266236 2025] [:error] [pid 13327:tid 13388] [client 185.251.19.171:25813] [client 185.251.19.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aR-CwPBXf-8B6mFkLeOPEgAAAIM"]
[Fri Nov 21 05:06:17.882499 2025] [:error] [pid 13327:tid 13404] [client 185.251.19.196:56355] [client 185.251.19.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aR-CyfBXf-8B6mFkLeOPHQAAAJM"]
[Fri Nov 21 05:06:18.772209 2025] [:error] [pid 51434:tid 51453] [client 136.144.42.250:60475] [client 136.144.42.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aR-CyvU96liplEDkw_TeVwAAARE"]
[Fri Nov 21 05:06:21.415271 2025] [:error] [pid 13327:tid 13391] [client 172.98.32.178:42135] [client 172.98.32.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/log.php"] [unique_id "aR-CzfBXf-8B6mFkLeOPIAAAAIY"]
[Fri Nov 21 05:06:22.288446 2025] [:error] [pid 13412:tid 13422] [client 185.251.19.168:38167] [client 185.251.19.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aR-Czn3-knz3ZB6HogGuTAAAAMU"]
[Fri Nov 21 05:06:23.164183 2025] [:error] [pid 13325:tid 13350] [client 185.251.19.191:49361] [client 185.251.19.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aR-CzyBUXj9tD75On3CZewAAABQ"]
[Fri Nov 21 05:06:24.035047 2025] [:error] [pid 13327:tid 13400] [client 185.251.19.178:29293] [client 185.251.19.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/aw.php"] [unique_id "aR-C0PBXf-8B6mFkLeOPJQAAAI8"]
[Fri Nov 21 05:06:31.151386 2025] [:error] [pid 13412:tid 13438] [client 185.251.19.167:42611] [client 185.251.19.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aR-C133-knz3ZB6HogGuWwAAANU"]
[Fri Nov 21 05:06:32.023051 2025] [:error] [pid 13412:tid 13421] [client 185.251.19.189:50091] [client 185.251.19.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/install.php"] [unique_id "aR-C2H3-knz3ZB6HogGuXgAAAMQ"]
[Fri Nov 21 05:06:35.807344 2025] [:error] [pid 13325:tid 13340] [client 185.251.19.190:31645] [client 185.251.19.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aR-C2yBUXj9tD75On3CZiQAAAAo"]
[Fri Nov 21 05:06:36.683254 2025] [:error] [pid 13412:tid 13424] [client 185.251.19.175:37303] [client 185.251.19.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aR-C3H3-knz3ZB6HogGuZAAAAMc"]
[Fri Nov 21 05:06:40.692016 2025] [:error] [pid 51434:tid 51440] [client 185.251.19.199:40953] [client 185.251.19.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/template-less.php"] [unique_id "aR-C4PU96liplEDkw_TefAAAAQQ"]
[Fri Nov 21 05:06:41.658202 2025] [:error] [pid 13412:tid 13419] [client 185.251.19.175:30855] [client 185.251.19.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aR-C4X3-knz3ZB6HogGubAAAAMI"]
[Fri Nov 21 05:06:53.841268 2025] [:error] [pid 13325:tid 13343] [client 136.144.42.244:37531] [client 136.144.42.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aR-C7SBUXj9tD75On3CZnQAAAA0"]
[Fri Nov 21 05:06:54.783338 2025] [:error] [pid 51434:tid 51451] [client 185.251.19.167:42647] [client 185.251.19.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aR-C7vU96liplEDkw_TeiAAAAQ8"]
[Fri Nov 21 05:06:59.058637 2025] [:error] [pid 51434:tid 51446] [client 185.251.19.185:26509] [client 185.251.19.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "aR-C8_U96liplEDkw_TejgAAAQo"]
[Fri Nov 21 05:07:02.830785 2025] [:error] [pid 13412:tid 13436] [client 172.98.32.178:27993] [client 172.98.32.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aR-C9n3-knz3ZB6HogGuhAAAANM"]
[Fri Nov 21 05:07:05.339172 2025] [:error] [pid 51434:tid 51447] [client 185.251.19.174:25059] [client 185.251.19.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/load.php"] [unique_id "aR-C-fU96liplEDkw_TemwAAAQs"]
[Fri Nov 21 05:07:06.282074 2025] [:error] [pid 13326:tid 13367] [client 185.251.19.200:24555] [client 185.251.19.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aR-C-th942-HkDIkOWrbOQAAAEk"]
[Fri Nov 21 05:07:07.167156 2025] [:error] [pid 13412:tid 13431] [client 185.251.19.191:53875] [client 185.251.19.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aR-C-33-knz3ZB6HogGuiAAAAM4"]
[Fri Nov 21 05:07:12.609046 2025] [:error] [pid 13325:tid 13354] [client 185.251.19.195:57751] [client 185.251.19.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aR-DACBUXj9tD75On3CZtwAAABg"]
[Fri Nov 21 05:07:15.244948 2025] [:error] [pid 13412:tid 13441] [client 136.144.42.246:32525] [client 136.144.42.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aR-DA33-knz3ZB6HogGukAAAANg"]
[Fri Nov 21 05:07:20.895874 2025] [:error] [pid 13412:tid 13429] [client 185.251.19.167:38421] [client 185.251.19.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aR-DCH3-knz3ZB6HogGuqAAAAMw"]
[Fri Nov 21 05:07:21.816355 2025] [:error] [pid 13326:tid 13377] [client 185.251.19.203:36873] [client 185.251.19.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aR-DCdh942-HkDIkOWrbagAAAFM"]
[Fri Nov 21 05:07:24.304510 2025] [:error] [pid 51434:tid 51447] [client 136.144.42.248:50477] [client 136.144.42.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aR-DDPU96liplEDkw_TeogAAAQs"]
[Fri Nov 21 05:07:38.398936 2025] [:error] [pid 13326:tid 13382] [client 185.251.19.190:47243] [client 185.251.19.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aR-DGth942-HkDIkOWrbiAAAAFg"]
[Fri Nov 21 05:07:41.599213 2025] [:error] [pid 13325:tid 13331] [client 172.98.32.178:21679] [client 172.98.32.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aR-DHSBUXj9tD75On3CZ-QAAAAE"]
[Fri Nov 21 05:07:45.629010 2025] [:error] [pid 13327:tid 13389] [client 185.251.19.194:32763] [client 185.251.19.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aR-DIfBXf-8B6mFkLeOPswAAAIQ"]
[Fri Nov 21 05:07:46.546928 2025] [:error] [pid 51434:tid 51453] [client 136.144.42.249:34181] [client 136.144.42.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aR-DIvU96liplEDkw_TeywAAARE"]
[Fri Nov 21 05:07:47.420939 2025] [:error] [pid 51434:tid 51449] [client 185.251.19.174:20865] [client 185.251.19.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aR-DI_U96liplEDkw_TezAAAAQ0"]
[Fri Nov 21 05:07:50.050498 2025] [autoindex:error] [pid 51434:tid 51456] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:50.498494 2025] [autoindex:error] [pid 51434:tid 51458] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:51.000441 2025] [autoindex:error] [pid 51434:tid 51450] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:51.442509 2025] [autoindex:error] [pid 51434:tid 51449] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:53.390431 2025] [autoindex:error] [pid 51434:tid 51460] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:53.820726 2025] [autoindex:error] [pid 51434:tid 51457] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:54.285176 2025] [autoindex:error] [pid 51434:tid 51452] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:54.755069 2025] [autoindex:error] [pid 51434:tid 51455] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:55.236952 2025] [autoindex:error] [pid 51434:tid 51456] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:55.679564 2025] [autoindex:error] [pid 51434:tid 51446] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:56.566049 2025] [autoindex:error] [pid 51434:tid 51438] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:58.422796 2025] [autoindex:error] [pid 51434:tid 51451] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:07:58.853114 2025] [autoindex:error] [pid 51434:tid 51440] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:02.376097 2025] [autoindex:error] [pid 51434:tid 51460] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:02.812949 2025] [autoindex:error] [pid 51434:tid 51455] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:03.280274 2025] [autoindex:error] [pid 51434:tid 51458] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:03.740653 2025] [autoindex:error] [pid 51434:tid 51444] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:05.698345 2025] [autoindex:error] [pid 51434:tid 51445] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:06.172481 2025] [autoindex:error] [pid 51434:tid 51460] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:08.029869 2025] [autoindex:error] [pid 51434:tid 51456] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:11.238826 2025] [autoindex:error] [pid 51434:tid 51447] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:11.671297 2025] [autoindex:error] [pid 51434:tid 51438] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:12.106292 2025] [autoindex:error] [pid 51434:tid 51444] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:21.846165 2025] [autoindex:error] [pid 51434:tid 51455] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:23.792129 2025] [autoindex:error] [pid 51434:tid 51441] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:24.227265 2025] [autoindex:error] [pid 51434:tid 51446] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:25.623181 2025] [autoindex:error] [pid 51434:tid 51453] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:26.056224 2025] [autoindex:error] [pid 51434:tid 51459] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:26.505707 2025] [autoindex:error] [pid 51434:tid 51439] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:31.210247 2025] [autoindex:error] [pid 51434:tid 51457] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:08:33.514851 2025] [autoindex:error] [pid 51434:tid 51444] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:10.677067 2025] [autoindex:error] [pid 51434:tid 51451] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:11.117750 2025] [autoindex:error] [pid 51434:tid 51459] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:11.551953 2025] [autoindex:error] [pid 51434:tid 51442] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:11.999682 2025] [autoindex:error] [pid 51434:tid 51443] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:12.441027 2025] [autoindex:error] [pid 51434:tid 51449] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:12.871944 2025] [autoindex:error] [pid 51434:tid 51444] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:13.307610 2025] [autoindex:error] [pid 51434:tid 51455] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:13.747057 2025] [autoindex:error] [pid 51434:tid 51456] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:16.628609 2025] [autoindex:error] [pid 51434:tid 51459] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:18.616369 2025] [autoindex:error] [pid 51434:tid 51452] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:19.176615 2025] [autoindex:error] [pid 51434:tid 51448] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:19.608769 2025] [autoindex:error] [pid 51434:tid 51456] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:21.539167 2025] [autoindex:error] [pid 51434:tid 51437] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:21.977060 2025] [autoindex:error] [pid 51434:tid 51460] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:22.410828 2025] [autoindex:error] [pid 51434:tid 51458] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:22.849249 2025] [autoindex:error] [pid 51434:tid 51447] [client 172.98.32.176:54229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:09:57.183727 2025] [autoindex:error] [pid 51434:tid 51451] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:14.060069 2025] [autoindex:error] [pid 51434:tid 51439] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:20.237620 2025] [autoindex:error] [pid 51434:tid 51455] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:20.671401 2025] [autoindex:error] [pid 51434:tid 51442] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:26.829333 2025] [autoindex:error] [pid 51434:tid 51442] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:27.270828 2025] [autoindex:error] [pid 51434:tid 51446] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:27.728135 2025] [autoindex:error] [pid 51434:tid 51443] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:28.179534 2025] [autoindex:error] [pid 51434:tid 51456] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:28.638795 2025] [autoindex:error] [pid 51434:tid 51460] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:29.073679 2025] [autoindex:error] [pid 51434:tid 51439] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:29.535615 2025] [autoindex:error] [pid 51434:tid 51448] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:29.969159 2025] [autoindex:error] [pid 51434:tid 51447] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:30.403474 2025] [autoindex:error] [pid 51434:tid 51445] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:10:58.035132 2025] [autoindex:error] [pid 51434:tid 51455] [client 185.251.19.188:27203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:17:40.813337 2025] [:error] [pid 13412:tid 13422] [client 173.239.254.63:63031] [client 173.239.254.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.63, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR-FdH3-knz3ZB6HogGwwAAAAMU"]
[Fri Nov 21 05:21:23.033710 2025] [:error] [pid 51434:tid 51449] [client 111.172.249.49:54663] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aR-GU_U96liplEDkw_TjGgAAAQ0"]
[Fri Nov 21 05:55:33.201823 2025] [:error] [pid 51434:tid 51437] [client 173.239.254.68:59461] [client 173.239.254.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.68, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR-OVfU96liplEDkw_T2sgAAAQE"]
[Fri Nov 21 06:34:31.287326 2025] [:error] [pid 17882:tid 17893] [client 193.37.33.248:33119] [client 193.37.33.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.248, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR-Xd4wFFssEn348h94McwAAAUk"]
[Fri Nov 21 07:14:05.193286 2025] [:error] [pid 51434:tid 51457] [client 173.239.254.58:59615] [client 173.239.254.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.58, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR-gvfU96liplEDkw_QSHwAAARU"]
[Fri Nov 21 07:53:20.149727 2025] [:error] [pid 51434:tid 51452] [client 173.239.254.59:60437] [client 173.239.254.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.59, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR-p8PU96liplEDkw_QcEQAAARA"]
[Fri Nov 21 08:33:07.240992 2025] [:error] [pid 51434:tid 51459] [client 193.37.33.249:23069] [client 193.37.33.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.249, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR-zQ_U96liplEDkw_QidQAAARc"]
[Fri Nov 21 09:11:43.638306 2025] [:error] [pid 51434:tid 51444] [client 173.239.254.45:32231] [client 173.239.254.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.45, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR-8T_U96liplEDkw_QnrAAAAQg"]
[Fri Nov 21 09:50:35.145147 2025] [:error] [pid 17882:tid 17900] [client 173.239.254.47:31439] [client 173.239.254.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR_Fa4wFFssEn348h95SYgAAAVA"]
[Fri Nov 21 10:29:44.373774 2025] [:error] [pid 13326:tid 13366] [client 173.239.254.72:53389] [client 173.239.254.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR_OmNh942-HkDIkOWoqfwAAAEg"]
[Fri Nov 21 11:08:21.837288 2025] [:error] [pid 17882:tid 17886] [client 173.239.254.80:47151] [client 173.239.254.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR_XpYwFFssEn348h95pwAAAAUI"]
[Fri Nov 21 11:46:47.607925 2025] [:error] [pid 17882:tid 17894] [client 173.239.254.70:62109] [client 173.239.254.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.70, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR_gp4wFFssEn348h954LgAAAUo"]
[Fri Nov 21 12:24:55.698154 2025] [:error] [pid 17882:tid 17906] [client 193.37.33.246:41651] [client 193.37.33.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.246, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR_pl4wFFssEn348h96EAAAAAVY"]
[Fri Nov 21 13:03:17.628772 2025] [:error] [pid 46237:tid 46261] [client 173.239.254.62:35041] [client 173.239.254.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.62, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR_ylSo2qlis7MUDbMI5lQAAAdY"]
[Fri Nov 21 13:41:17.923225 2025] [:error] [pid 13325:tid 13353] [client 173.239.254.71:29747] [client 173.239.254.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.71, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aR_7fSBUXj9tD75On3AiYgAAABc"]
[Fri Nov 21 14:19:01.112315 2025] [:error] [pid 13412:tid 13432] [client 173.239.254.65:60437] [client 173.239.254.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSAEVX3-knz3ZB6HogEp_wAAAM8"]
[Fri Nov 21 14:58:05.298756 2025] [:error] [pid 25430:tid 25482] [client 173.239.254.56:49469] [client 173.239.254.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.56, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSANfapnWJcWt_4foXkc1AAAAFY"]
[Fri Nov 21 15:33:27.410733 2025] [:error] [pid 25554:tid 25580] [client 88.207.96.18:13712] [client 88.207.96.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.207.96.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSAVxx-NtB-9AzFZrk41ggAAARY"]
[Fri Nov 21 15:33:54.408996 2025] [:error] [pid 25554:tid 25576] [client 143.44.144.128:16352] [client 143.44.144.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.44.144.128, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSAV4h-NtB-9AzFZrk41uQAAARI"]
[Fri Nov 21 15:35:55.853598 2025] [:error] [pid 25430:tid 25463] [client 173.239.254.64:51209] [client 173.239.254.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.64, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSAWW6pnWJcWt_4foXkt-gAAAEM"]
[Fri Nov 21 16:15:59.473674 2025] [:error] [pid 25429:tid 25433] [client 173.239.254.46:55435] [client 173.239.254.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSAfvz4rZbRSr7vu-NOzIQAAAAA"]
[Fri Nov 21 16:55:29.676835 2025] [:error] [pid 25430:tid 25474] [client 173.239.254.73:62465] [client 173.239.254.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.73, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSApAapnWJcWt_4foXlYNgAAAE4"]
[Fri Nov 21 17:11:57.960960 2025] [:error] [pid 46939:tid 46963] [client 34.18.91.77:36752] [client 34.18.91.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.18.91.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSAs3e0OmVoxD4VZ_ZmYPgAAAVU"]
[Fri Nov 21 17:11:59.926286 2025] [:error] [pid 25431:tid 25490] [client 34.18.91.77:38792] [client 34.18.91.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.18.91.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSAs38klhXxmoIExII1SCwAAAIM"]
[Fri Nov 21 17:33:22.799647 2025] [:error] [pid 25554:tid 25569] [client 173.239.254.45:61517] [client 173.239.254.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.45, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSAx4h-NtB-9AzFZrk52MgAAAQs"]
[Fri Nov 21 17:57:51.516511 2025] [:error] [pid 25430:tid 25462] [client 49.7.227.204:60994] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSA3n6pnWJcWt_4foXlokAAAAEI"]
[Fri Nov 21 18:12:03.138080 2025] [:error] [pid 25554:tid 25564] [client 173.239.254.50:46009] [client 173.239.254.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSA68x-NtB-9AzFZrk6DOwAAAQY"]
[Fri Nov 21 18:21:29.053469 2025] [:error] [pid 25430:tid 25463] [client 143.44.144.128:7653] [client 143.44.144.128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSA9KapnWJcWt_4foXlujgAAAEM"]
[Fri Nov 21 18:22:55.789813 2025] [:error] [pid 25431:tid 25509] [client 143.44.144.128:16251] [client 143.44.144.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.44.144.128, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSA9f8klhXxmoIExII1sBAAAAJY"]
[Fri Nov 21 18:24:12.412020 2025] [:error] [pid 25430:tid 25469] [client 143.44.144.128:15145] [client 143.44.144.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.44.144.128, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSA9zKpnWJcWt_4foXlvKAAAAEk"]
[Fri Nov 21 18:45:34.218636 2025] [:error] [pid 25430:tid 25468] [client 104.28.240.81:28663] [client 104.28.240.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSBCzqpnWJcWt_4foXl0DgAAAEg"]
[Fri Nov 21 18:53:20.122231 2025] [:error] [pid 25554:tid 25559] [client 173.239.254.44:23525] [client 173.239.254.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSBEoB-NtB-9AzFZrk6N_AAAAQE"]
[Fri Nov 21 19:19:00.073171 2025] [:error] [pid 25521:tid 25530] [client 117.52.74.20:37480] [client 117.52.74.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.52.74.20, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSBKpPhXnBMilDddn3UqdgAAAMc"]
[Fri Nov 21 19:19:01.932927 2025] [:error] [pid 25429:tid 25433] [client 117.52.74.20:37754] [client 117.52.74.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.52.74.20, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSBKpT4rZbRSr7vu-NPibQAAAAA"]
[Fri Nov 21 20:02:59.461368 2025] [:error] [pid 25431:tid 25493] [client 134.149.18.28:25422] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSBU88klhXxmoIExII2HoAAAAIY"]
[Fri Nov 21 20:03:00.192740 2025] [:error] [pid 25431:tid 25496] [client 134.149.18.28:24884] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSBU9MklhXxmoIExII2HogAAAIk"]
[Fri Nov 21 20:03:01.410637 2025] [:error] [pid 25431:tid 25487] [client 134.149.18.28:24880] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSBU9cklhXxmoIExII2HpAAAAIA"]
[Fri Nov 21 20:03:09.238222 2025] [:error] [pid 25521:tid 25524] [client 134.149.18.28:60939] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSBU_fhXnBMilDddn3U-PwAAAME"]
[Fri Nov 21 20:03:14.053848 2025] [:error] [pid 25431:tid 25508] [client 134.149.18.28:60952] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aSBVAsklhXxmoIExII2H2AAAAJU"]
[Fri Nov 21 20:03:18.511501 2025] [:error] [pid 25521:tid 25523] [client 134.149.18.28:25431] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aSBVBvhXnBMilDddn3U-SAAAAMA"]
[Fri Nov 21 20:03:28.807582 2025] [:error] [pid 25554:tid 25572] [client 134.149.18.28:60975] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSBVEB-NtB-9AzFZrk6etAAAAQ4"]
[Fri Nov 21 20:03:32.456245 2025] [:error] [pid 25521:tid 25543] [client 134.149.18.28:60929] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSBVFPhXnBMilDddn3U-XgAAANQ"]
[Fri Nov 21 20:03:37.949426 2025] [:error] [pid 25430:tid 25479] [client 134.149.18.28:25444] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSBVGapnWJcWt_4foXmGzQAAAFM"]
[Fri Nov 21 20:03:39.700708 2025] [:error] [pid 25431:tid 25492] [client 134.149.18.28:24878] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSBVG8klhXxmoIExII2H8gAAAIU"]
[Fri Nov 21 20:03:41.030070 2025] [:error] [pid 25521:tid 25531] [client 134.149.18.28:60944] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aSBVHfhXnBMilDddn3U-ZAAAAMg"]
[Fri Nov 21 20:03:44.952301 2025] [:error] [pid 25521:tid 25544] [client 134.149.18.28:25466] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aSBVIPhXnBMilDddn3U-bQAAANU"]
[Fri Nov 21 20:03:47.593537 2025] [:error] [pid 25554:tid 25574] [client 134.149.18.28:60959] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aSBVIx-NtB-9AzFZrk6e1QAAARA"]
[Fri Nov 21 20:03:49.276893 2025] [:error] [pid 46939:tid 46948] [client 134.149.18.28:60987] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aSBVJe0OmVoxD4VZ_ZneKQAAAUY"]
[Fri Nov 21 20:03:50.367025 2025] [:error] [pid 25429:tid 25456] [client 134.149.18.28:60932] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aSBVJj4rZbRSr7vu-NPuDQAAABc"]
[Fri Nov 21 20:03:57.441446 2025] [:error] [pid 25554:tid 25567] [client 134.149.18.28:56853] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aSBVLR-NtB-9AzFZrk6e6gAAAQk"]
[Fri Nov 21 20:04:02.892230 2025] [:error] [pid 25554:tid 25562] [client 134.149.18.28:56849] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSBVMh-NtB-9AzFZrk6e9wAAAQQ"]
[Fri Nov 21 20:04:08.792642 2025] [:error] [pid 25521:tid 25547] [client 134.149.18.28:24867] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aSBVOPhXnBMilDddn3U-rgAAANg"]
[Fri Nov 21 20:04:12.148925 2025] [:error] [pid 25521:tid 25539] [client 134.149.18.28:65255] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aSBVPPhXnBMilDddn3U-twAAANA"]
[Fri Nov 21 20:04:15.797708 2025] [:error] [pid 25429:tid 25448] [client 134.149.18.28:65253] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aSBVPz4rZbRSr7vu-NPuLgAAAA8"]
[Fri Nov 21 20:04:20.187285 2025] [:error] [pid 25554:tid 25560] [client 134.149.18.28:65254] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aSBVRB-NtB-9AzFZrk6fDgAAAQI"]
[Fri Nov 21 20:04:21.191124 2025] [:error] [pid 46939:tid 46944] [client 134.149.18.28:65267] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aSBVRe0OmVoxD4VZ_ZneUQAAAUI"]
[Fri Nov 21 20:04:26.234087 2025] [:error] [pid 25521:tid 25545] [client 134.149.18.28:56839] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aSBVSvhXnBMilDddn3U-xAAAANY"]
[Fri Nov 21 20:04:28.799801 2025] [:error] [pid 25521:tid 25544] [client 134.149.18.28:56852] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aSBVTPhXnBMilDddn3U-yAAAANU"]
[Fri Nov 21 20:04:31.597641 2025] [:error] [pid 25521:tid 25528] [client 134.149.18.28:65241] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aSBVT_hXnBMilDddn3U-zQAAAMU"]
[Fri Nov 21 20:04:36.064618 2025] [:error] [pid 25431:tid 25490] [client 134.149.18.28:25449] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSBVVMklhXxmoIExII2IdwAAAIM"]
[Fri Nov 21 20:04:44.082287 2025] [:error] [pid 25554:tid 25573] [client 134.149.18.28:60933] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSBVXB-NtB-9AzFZrk6fKgAAAQ8"]
[Fri Nov 21 20:04:55.621173 2025] [:error] [pid 25430:tid 25461] [client 134.149.18.28:65265] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aSBVZ6pnWJcWt_4foXmHEAAAAEE"]
[Fri Nov 21 20:04:58.280761 2025] [:error] [pid 25431:tid 25510] [client 134.149.18.28:56882] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aSBVasklhXxmoIExII2IrgAAAJc"]
[Fri Nov 21 20:05:03.183521 2025] [:error] [pid 46939:tid 46952] [client 134.149.18.28:24862] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aSBVb-0OmVoxD4VZ_ZnehwAAAUo"]
[Fri Nov 21 20:05:05.411460 2025] [:error] [pid 46939:tid 46943] [client 134.149.18.28:65221] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aSBVce0OmVoxD4VZ_ZneiAAAAUE"]
[Fri Nov 21 20:05:09.809524 2025] [:error] [pid 25554:tid 25572] [client 134.149.18.28:60950] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSBVdR-NtB-9AzFZrk6fQAAAAQ4"]
[Fri Nov 21 20:05:12.169782 2025] [proxy_fcgi:error] [pid 25554:tid 25559] [client 134.149.18.28:24859] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 20:05:12.430358 2025] [:error] [pid 25554:tid 25580] [client 134.149.18.28:24859] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/0.php"] [unique_id "aSBVeB-NtB-9AzFZrk6fRAAAARY"]
[Fri Nov 21 20:05:16.012278 2025] [:error] [pid 25429:tid 25455] [client 134.149.18.28:60964] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSBVfD4rZbRSr7vu-NPuiwAAABY"]
[Fri Nov 21 20:05:20.635656 2025] [:error] [pid 25521:tid 25534] [client 134.149.18.28:56851] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i1.php"] [unique_id "aSBVgPhXnBMilDddn3U-8gAAAMs"]
[Fri Nov 21 20:05:23.456101 2025] [:error] [pid 25429:tid 25439] [client 134.149.18.28:25469] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i1.php"] [unique_id "aSBVgz4rZbRSr7vu-NPukgAAAAY"]
[Fri Nov 21 20:05:26.153657 2025] [:error] [pid 25431:tid 25492] [client 134.149.18.28:56834] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i1.php"] [unique_id "aSBVhsklhXxmoIExII2IzAAAAIU"]
[Fri Nov 21 20:05:35.554747 2025] [:error] [pid 25554:tid 25559] [client 134.149.18.28:25414] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i1.php"] [unique_id "aSBVjx-NtB-9AzFZrk6fYQAAAQE"]
[Fri Nov 21 20:05:37.295310 2025] [:error] [pid 25430:tid 25481] [client 134.149.18.28:65224] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aSBVkapnWJcWt_4foXmHZAAAAFU"]
[Fri Nov 21 20:05:45.231527 2025] [:error] [pid 25430:tid 25483] [client 134.149.18.28:65229] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aSBVmapnWJcWt_4foXmHcQAAAFc"]
[Fri Nov 21 20:05:48.048528 2025] [:error] [pid 25521:tid 25530] [client 134.149.18.28:65235] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aSBVnPhXnBMilDddn3U_JQAAAMc"]
[Fri Nov 21 20:05:53.206427 2025] [:error] [pid 25430:tid 25462] [client 134.149.18.28:24882] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/m.php"] [unique_id "aSBVoapnWJcWt_4foXmHfQAAAEI"]
[Fri Nov 21 20:05:54.224458 2025] [:error] [pid 25554:tid 25574] [client 134.149.18.28:24891] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/m.php"] [unique_id "aSBVoh-NtB-9AzFZrk6fcwAAARA"]
[Fri Nov 21 20:06:03.213376 2025] [:error] [pid 25554:tid 25579] [client 134.149.18.28:25409] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/m.php"] [unique_id "aSBVqx-NtB-9AzFZrk6fdQAAARU"]
[Fri Nov 21 20:06:08.365347 2025] [:error] [pid 25554:tid 25558] [client 134.149.18.28:24863] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSBVsB-NtB-9AzFZrk6ffwAAAQA"]
[Fri Nov 21 20:06:10.758707 2025] [:error] [pid 25521:tid 25530] [client 134.149.18.28:60948] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSBVsvhXnBMilDddn3U_SQAAAMc"]
[Fri Nov 21 20:06:12.162514 2025] [:error] [pid 25430:tid 25463] [client 134.149.18.28:65276] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSBVtKpnWJcWt_4foXmHkgAAAEM"]
[Fri Nov 21 20:06:15.423791 2025] [:error] [pid 25521:tid 25527] [client 134.149.18.28:64388] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSBVt_hXnBMilDddn3U_UgAAAMQ"]
[Fri Nov 21 20:06:16.298838 2025] [:error] [pid 25430:tid 25484] [client 134.149.18.28:65279] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aSBVuKpnWJcWt_4foXmHlgAAAFg"]
[Fri Nov 21 20:06:26.330425 2025] [:error] [pid 25431:tid 25491] [client 134.149.18.28:64436] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aSBVwsklhXxmoIExII2JFAAAAIQ"]
[Fri Nov 21 20:06:38.139069 2025] [:error] [pid 25521:tid 25535] [client 134.149.18.28:24876] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aSBVzvhXnBMilDddn3U_mQAAAMw"]
[Fri Nov 21 20:06:40.668293 2025] [:error] [pid 46939:tid 46958] [client 134.149.18.28:60934] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aSBV0O0OmVoxD4VZ_ZnfLQAAAVA"]
[Fri Nov 21 20:06:46.082754 2025] [:error] [pid 46939:tid 46962] [client 134.149.18.28:25450] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSBV1u0OmVoxD4VZ_ZnfOAAAAVQ"]
[Fri Nov 21 20:06:52.926249 2025] [:error] [pid 25554:tid 25581] [client 134.149.18.28:65217] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSBV3B-NtB-9AzFZrk6fxwAAARc"]
[Fri Nov 21 20:07:07.704210 2025] [:error] [pid 25430:tid 25466] [client 134.149.18.28:60961] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-configs.php"] [unique_id "aSBV66pnWJcWt_4foXmHxAAAAEY"]
[Fri Nov 21 20:07:12.363993 2025] [:error] [pid 46939:tid 46946] [client 134.149.18.28:56845] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-configs.php"] [unique_id "aSBV8O0OmVoxD4VZ_ZnfUQAAAUQ"]
[Fri Nov 21 20:07:35.840903 2025] [:error] [pid 25429:tid 25439] [client 134.149.18.28:65257] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aSBWBz4rZbRSr7vu-NPvPQAAAAY"]
[Fri Nov 21 20:07:38.289092 2025] [:error] [pid 25521:tid 25536] [client 134.149.18.28:25426] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aSBWCvhXnBMilDddn3VAMgAAAM0"]
[Fri Nov 21 20:08:14.626238 2025] [:error] [pid 25430:tid 25471] [client 134.149.18.28:24872] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aSBWLqpnWJcWt_4foXmIHQAAAEs"]
[Fri Nov 21 20:08:16.313613 2025] [:error] [pid 25431:tid 25491] [client 134.149.18.28:25452] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aSBWMMklhXxmoIExII2JsAAAAIQ"]
[Fri Nov 21 20:08:44.444836 2025] [:error] [pid 25431:tid 25506] [client 134.149.18.28:24877] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/Marvins.php"] [unique_id "aSBWTMklhXxmoIExII2KDQAAAJM"]
[Fri Nov 21 20:08:47.636468 2025] [:error] [pid 25430:tid 25484] [client 134.149.18.28:25423] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/Marvins.php"] [unique_id "aSBWT6pnWJcWt_4foXmIYAAAAFg"]
[Fri Nov 21 20:08:57.176127 2025] [:error] [pid 25431:tid 25497] [client 134.149.18.28:24992] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/Marvins.php"] [unique_id "aSBWWcklhXxmoIExII2KLwAAAIo"]
[Fri Nov 21 20:08:59.475349 2025] [:error] [pid 46939:tid 46956] [client 134.149.18.28:24878] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/Marvins.php"] [unique_id "aSBWW-0OmVoxD4VZ_ZngFAAAAU4"]
[Fri Nov 21 20:09:03.532154 2025] [:error] [pid 25431:tid 25501] [client 134.149.18.28:65254] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aSBWX8klhXxmoIExII2KPQAAAI4"]
[Fri Nov 21 20:09:05.160256 2025] [:error] [pid 25430:tid 25475] [client 134.149.18.28:65268] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aSBWYapnWJcWt_4foXmIgwAAAE8"]
[Fri Nov 21 20:09:08.893719 2025] [:error] [pid 46939:tid 46946] [client 134.149.18.28:25460] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aSBWZO0OmVoxD4VZ_ZngIwAAAUQ"]
[Fri Nov 21 20:09:11.569374 2025] [:error] [pid 46939:tid 46942] [client 134.149.18.28:60946] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aSBWZ-0OmVoxD4VZ_ZngKwAAAUA"]
[Fri Nov 21 20:09:14.107624 2025] [:error] [pid 25431:tid 25496] [client 134.149.18.28:65239] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/124.php"] [unique_id "aSBWasklhXxmoIExII2KSAAAAIk"]
[Fri Nov 21 20:09:16.107424 2025] [:error] [pid 25430:tid 25468] [client 134.149.18.28:25012] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/124.php"] [unique_id "aSBWbKpnWJcWt_4foXmIkAAAAEg"]
[Fri Nov 21 20:09:19.846007 2025] [:error] [pid 25521:tid 25544] [client 134.149.18.28:60931] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/124.php"] [unique_id "aSBWb_hXnBMilDddn3VBEQAAANU"]
[Fri Nov 21 20:09:22.546518 2025] [:error] [pid 25521:tid 25541] [client 134.149.18.28:65221] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/124.php"] [unique_id "aSBWcvhXnBMilDddn3VBGAAAANI"]
[Fri Nov 21 20:09:30.023523 2025] [:error] [pid 25521:tid 25538] [client 134.149.18.28:65231] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSBWevhXnBMilDddn3VBIQAAAM8"]
[Fri Nov 21 20:09:32.102612 2025] [:error] [pid 25521:tid 25534] [client 134.149.18.28:65273] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSBWfPhXnBMilDddn3VBLQAAAMs"]
[Fri Nov 21 20:09:34.120610 2025] [:error] [pid 25431:tid 25490] [client 134.149.18.28:25395] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSBWfsklhXxmoIExII2KXQAAAIM"]
[Fri Nov 21 20:09:36.275528 2025] [:error] [pid 25521:tid 25539] [client 134.149.18.28:24839] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSBWgPhXnBMilDddn3VBRgAAANA"]
[Fri Nov 21 22:05:42.959462 2025] [:error] [pid 46939:tid 46949] [client 118.70.187.120:39836] [client 118.70.187.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.70.187.120, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSBxtu0OmVoxD4VZ_ZkBuwAAAUc"]
[Fri Nov 21 22:05:45.307017 2025] [:error] [pid 46939:tid 46961] [client 118.70.187.120:39844] [client 118.70.187.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.70.187.120, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSBxue0OmVoxD4VZ_ZkBvgAAAVM"]
[Fri Nov 21 23:18:30.264762 2025] [:error] [pid 25521:tid 25529] [client 192.30.134.109:41544] [client 192.30.134.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.30.134.109, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSCCxvhXnBMilDddn3WKMgAAAMY"]
[Fri Nov 21 23:18:31.937215 2025] [:error] [pid 46939:tid 46944] [client 192.30.134.109:41560] [client 192.30.134.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.30.134.109, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSCCx-0OmVoxD4VZ_ZkYPwAAAUI"]
[Sat Nov 22 01:21:16.182322 2025] [:error] [pid 49642:tid 49899] [client 64.31.25.146:48156] [client 64.31.25.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.25.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSCfjIOXTPSuQfgUUtWORAAAAIg"]
[Sat Nov 22 01:21:17.920702 2025] [:error] [pid 49642:tid 49895] [client 64.31.25.146:48566] [client 64.31.25.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.31.25.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSCfjYOXTPSuQfgUUtWOSQAAAIQ"]
[Sat Nov 22 03:53:08.045232 2025] [:error] [pid 53478:tid 53522] [client 103.167.150.158:54464] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/media/system/js/core.js"] [unique_id "aSDDJAhUYdXBbQswAdTVEgAAAE0"]
[Sat Nov 22 04:12:54.269167 2025] [:error] [pid 53478:tid 53531] [client 147.135.213.38:49982] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aSDHxghUYdXBbQswAdTbLgAAAFY"]
[Sat Nov 22 04:12:56.635520 2025] [:error] [pid 53566:tid 53574] [client 147.135.213.38:51324] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aSDHyMbSHDBkRbwMbd766QAAAMY"]
[Sat Nov 22 04:12:58.954516 2025] [:error] [pid 53477:tid 53489] [client 147.135.213.38:40562] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aSDHyn7Lu30Ku9O40aKpEAAAAAg"]
[Sat Nov 22 04:13:01.217469 2025] [:error] [pid 53566:tid 53569] [client 147.135.213.38:40564] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aSDHzcbSHDBkRbwMbd769wAAAME"]
[Sat Nov 22 04:13:03.658403 2025] [:error] [pid 53477:tid 53485] [client 147.135.213.38:40572] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aSDHz37Lu30Ku9O40aKpFQAAAAQ"]
[Sat Nov 22 04:13:06.085271 2025] [:error] [pid 53566:tid 53576] [client 147.135.213.38:40576] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aSDH0sbSHDBkRbwMbd76_AAAAMg"]
[Sat Nov 22 04:13:08.597828 2025] [:error] [pid 53566:tid 53570] [client 147.135.213.38:42442] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aSDH1MbSHDBkRbwMbd76_gAAAMI"]
[Sat Nov 22 04:13:10.914128 2025] [:error] [pid 53566:tid 53590] [client 147.135.213.38:42448] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aSDH1sbSHDBkRbwMbd77BAAAANY"]
[Sat Nov 22 04:13:13.387864 2025] [:error] [pid 53477:tid 53483] [client 147.135.213.38:42460] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aSDH2X7Lu30Ku9O40aKpKQAAAAI"]
[Sat Nov 22 04:13:15.703374 2025] [:error] [pid 53479:tid 53544] [client 147.135.213.38:42468] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aSDH226cicFF3Aas-oRDjwAAAIg"]
[Sat Nov 22 04:13:19.683849 2025] [:error] [pid 53478:tid 53522] [client 147.135.213.38:55976] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aSDH3whUYdXBbQswAdTbQgAAAE0"]
[Sat Nov 22 04:13:22.222149 2025] [:error] [pid 53478:tid 53529] [client 147.135.213.38:55978] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aSDH4ghUYdXBbQswAdTbRwAAAFQ"]
[Sat Nov 22 04:13:24.571433 2025] [:error] [pid 53566:tid 53581] [client 147.135.213.38:55990] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aSDH5MbSHDBkRbwMbd77IQAAAM0"]
[Sat Nov 22 04:13:27.007492 2025] [:error] [pid 53566:tid 53589] [client 147.135.213.38:56006] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aSDH58bSHDBkRbwMbd77JAAAANU"]
[Sat Nov 22 04:13:29.306286 2025] [:error] [pid 53477:tid 53497] [client 147.135.213.38:54128] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aSDH6X7Lu30Ku9O40aKpRgAAABA"]
[Sat Nov 22 04:13:31.748460 2025] [:error] [pid 53477:tid 53498] [client 147.135.213.38:54134] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aSDH637Lu30Ku9O40aKpSgAAABE"]
[Sat Nov 22 04:13:34.060277 2025] [:error] [pid 53477:tid 53489] [client 147.135.213.38:54144] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aSDH7n7Lu30Ku9O40aKpUwAAAAg"]
[Sat Nov 22 04:13:36.474723 2025] [:error] [pid 53566:tid 53587] [client 147.135.213.38:54160] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aSDH8MbSHDBkRbwMbd77KgAAANM"]
[Sat Nov 22 04:13:38.873955 2025] [:error] [pid 53477:tid 53488] [client 147.135.213.38:58154] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aSDH8n7Lu30Ku9O40aKpXQAAAAc"]
[Sat Nov 22 04:13:41.405602 2025] [:error] [pid 53479:tid 53548] [client 147.135.213.38:58162] [client 147.135.213.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aSDH9W6cicFF3Aas-oRDuwAAAIw"]
[Sat Nov 22 06:49:00.788606 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.140:59577] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSDsXAhUYdXBbQswAdQ7WQAAAEE"]
[Sat Nov 22 06:49:04.064534 2025] [:error] [pid 53566:tid 53575] [client 194.5.82.161:35839] [client 194.5.82.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSDsYMbSHDBkRbwMbd5j-QAAAMc"]
[Sat Nov 22 06:56:40.848694 2025] [:error] [pid 53479:tid 53537] [client 212.116.231.26:39356] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSDuKG6cicFF3Aas-oShVgAAAIE"]
[Sat Nov 22 06:56:41.678454 2025] [:error] [pid 9547:tid 9569] [client 212.116.231.26:48536] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSDuKdClOR5qk7DoMeGlXQAAAVA"]
[Sat Nov 22 06:56:42.513800 2025] [:error] [pid 53477:tid 53494] [client 212.116.231.26:48980] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSDuKn7Lu30Ku9O40aIGzwAAAA0"]
[Sat Nov 22 06:56:43.328510 2025] [:error] [pid 53479:tid 53550] [client 212.116.231.26:49464] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSDuK26cicFF3Aas-oShdAAAAI4"]
[Sat Nov 22 06:56:44.178798 2025] [:error] [pid 53478:tid 53509] [client 212.116.231.26:49902] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSDuLAhUYdXBbQswAdRAEgAAAEA"]
[Sat Nov 22 06:56:44.990607 2025] [:error] [pid 53478:tid 53511] [client 212.116.231.26:50344] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuLAhUYdXBbQswAdRAHQAAAEI"]
[Sat Nov 22 06:56:45.803074 2025] [:error] [pid 53478:tid 53512] [client 212.116.231.26:50734] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuLQhUYdXBbQswAdRAMQAAAEM"]
[Sat Nov 22 06:56:46.617263 2025] [:error] [pid 25856:tid 25859] [client 212.116.231.26:51170] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuLhsTP0wy94zKUvHnfgAAAQE"]
[Sat Nov 22 06:56:47.453140 2025] [:error] [pid 25856:tid 25864] [client 212.116.231.26:51546] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuLxsTP0wy94zKUvHnmAAAAQY"]
[Sat Nov 22 06:56:48.264514 2025] [:error] [pid 25856:tid 25862] [client 212.116.231.26:51998] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuMBsTP0wy94zKUvHnqQAAAQQ"]
[Sat Nov 22 10:26:19.209618 2025] [autoindex:error] [pid 9547:tid 9576] [client 139.59.37.180:52483] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 22 11:49:21.644011 2025] [:error] [pid 53479:tid 53548] [client 64.176.45.38:38454] [client 64.176.45.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.176.45.38, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSEywW6cicFF3Aas-oT1wgAAAIw"]
[Sat Nov 22 11:49:24.543109 2025] [:error] [pid 25856:tid 25858] [client 64.176.45.38:38460] [client 64.176.45.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.176.45.38, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSEyxBsTP0wy94zKUvFNXgAAAQA"]
[Sat Nov 22 14:06:54.991893 2025] [:error] [pid 53477:tid 53486] [client 137.184.56.145:59112] [client 137.184.56.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.56.145, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSFS_n7Lu30Ku9O40aJ2SQAAAAU"]
[Sat Nov 22 14:06:57.945733 2025] [:error] [pid 25856:tid 25866] [client 137.184.56.145:41184] [client 137.184.56.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.56.145, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSFTARsTP0wy94zKUvFtnAAAAQg"]
[Sat Nov 22 17:38:27.913250 2025] [:error] [pid 53477:tid 53492] [client 117.52.74.20:60239] [client 117.52.74.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.52.74.20, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSGEk37Lu30Ku9O40aKn6AAAAAs"]
[Sat Nov 22 17:38:29.744401 2025] [:error] [pid 53478:tid 53527] [client 117.52.74.20:60433] [client 117.52.74.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.52.74.20, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSGElQhUYdXBbQswAdTlhAAAAFI"]
[Sat Nov 22 17:49:43.719244 2025] [:error] [pid 53479:tid 53548] [client 43.157.38.131:39892] [client 43.157.38.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSGHN26cicFF3Aas-oR7mQAAAIw"]
[Sat Nov 22 21:00:36.999767 2025] [:error] [pid 53566:tid 53590] [client 212.30.36.187:64673] [client 212.30.36.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSGz9MbSHDBkRbwMbd5YMAAAANY"]
[Sat Nov 22 21:00:41.109279 2025] [:error] [pid 53566:tid 53587] [client 212.30.36.226:22961] [client 212.30.36.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSGz-cbSHDBkRbwMbd5YNgAAANM"]
[Sat Nov 22 21:00:54.253522 2025] [:error] [pid 25856:tid 25862] [client 212.30.36.218:50547] [client 212.30.36.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSG0BhsTP0wy94zKUvHoOgAAAQQ"]
[Sat Nov 22 21:01:02.145355 2025] [:error] [pid 44259:tid 44281] [client 212.30.36.171:58855] [client 212.30.36.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSG0DnXe1xL-_YOdRmS74gAAAZM"]
[Sat Nov 22 21:01:03.267678 2025] [:error] [pid 44259:tid 44274] [client 212.30.36.225:38911] [client 212.30.36.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSG0D3Xe1xL-_YOdRmS75AAAAYw"]
[Sat Nov 22 21:01:07.034954 2025] [:error] [pid 53479:tid 53543] [client 212.30.36.191:34779] [client 212.30.36.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSG0E26cicFF3Aas-oTB-AAAAIc"]
[Sat Nov 22 21:01:12.576915 2025] [:error] [pid 53566:tid 53575] [client 212.30.36.206:46021] [client 212.30.36.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSG0GMbSHDBkRbwMbd5YSQAAAMc"]
[Sat Nov 22 21:01:15.445667 2025] [:error] [pid 9547:tid 9564] [client 212.30.36.172:46713] [client 212.30.36.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSG0G9ClOR5qk7DoMeHuRAAAAUs"]
[Sat Nov 22 21:01:56.095594 2025] [:error] [pid 53566:tid 53587] [client 212.30.36.190:49347] [client 212.30.36.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSG0RMbSHDBkRbwMbd5YYQAAANM"]
[Sat Nov 22 21:01:57.115791 2025] [:error] [pid 53478:tid 53518] [client 212.30.36.170:25845] [client 212.30.36.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSG0RQhUYdXBbQswAdQhagAAAEk"]
[Sat Nov 22 21:02:13.087819 2025] [autoindex:error] [pid 53479:tid 53545] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:13.559236 2025] [autoindex:error] [pid 53479:tid 53549] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:15.062158 2025] [autoindex:error] [pid 53479:tid 53557] [client 212.30.36.226:32805] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:23.325020 2025] [autoindex:error] [pid 53479:tid 53548] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:27.171146 2025] [autoindex:error] [pid 53479:tid 53537] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:27.581673 2025] [autoindex:error] [pid 53479:tid 53557] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:28.040439 2025] [autoindex:error] [pid 53479:tid 53544] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:28.499187 2025] [autoindex:error] [pid 53479:tid 53541] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:28.955704 2025] [autoindex:error] [pid 53479:tid 53542] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:29.955737 2025] [autoindex:error] [pid 53479:tid 53546] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:30.568904 2025] [autoindex:error] [pid 53479:tid 53539] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:31.170211 2025] [autoindex:error] [pid 53479:tid 53540] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:33.059732 2025] [autoindex:error] [pid 53479:tid 53552] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:40.644657 2025] [autoindex:error] [pid 53479:tid 53549] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:02:42.748300 2025] [autoindex:error] [pid 53479:tid 53540] [client 212.30.36.226:32805] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:39.368323 2025] [autoindex:error] [pid 53479:tid 53551] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:39.850280 2025] [autoindex:error] [pid 53479:tid 53538] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:40.381459 2025] [autoindex:error] [pid 53479:tid 53559] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:40.828356 2025] [autoindex:error] [pid 53479:tid 53546] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:41.290207 2025] [autoindex:error] [pid 53479:tid 53553] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:41.761110 2025] [autoindex:error] [pid 53479:tid 53539] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:42.408050 2025] [autoindex:error] [pid 53479:tid 53552] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:42.873053 2025] [autoindex:error] [pid 53479:tid 53557] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:43.319209 2025] [autoindex:error] [pid 53479:tid 53544] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:43.837472 2025] [autoindex:error] [pid 53479:tid 53558] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:44.232356 2025] [autoindex:error] [pid 53479:tid 53536] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:46.862846 2025] [autoindex:error] [pid 53479:tid 53556] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:50.711179 2025] [autoindex:error] [pid 53479:tid 53549] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:51.180162 2025] [autoindex:error] [pid 53479:tid 53555] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:51.636140 2025] [autoindex:error] [pid 53479:tid 53554] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:54.592195 2025] [autoindex:error] [pid 53479:tid 53551] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:55.875352 2025] [autoindex:error] [pid 53479:tid 53560] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:56.482119 2025] [autoindex:error] [pid 53479:tid 53559] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:57.013851 2025] [autoindex:error] [pid 53479:tid 53553] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:03:57.521776 2025] [autoindex:error] [pid 53479:tid 53543] [client 212.30.36.172:44119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 02:37:28.009405 2025] [:error] [pid 39718:tid 39766] [client 114.96.103.33:36430] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSIC6AQ3B_uDoeItNmOCkgAAAFE"]
[Sun Nov 23 03:34:11.876220 2025] [:error] [pid 8816:tid 8905] [client 216.126.225.91:33752] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSIQM5b4RIAN-_BXnHmgdgAAAJQ"]
[Sun Nov 23 08:45:44.708934 2025] [:error] [pid 38739:tid 38790] [client 180.102.134.69:52904] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSJZOAdvEgJm2n2cDmpe8gAAAFU"]
[Sun Nov 23 10:20:13.680337 2025] [:error] [pid 38824:tid 38848] [client 138.204.79.240:64774] [client 138.204.79.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSJvXU8WZjXLvbHTHPcmAwAAANU"]
[Sun Nov 23 14:58:23.179411 2025] [:error] [pid 38740:tid 38820] [client 217.182.194.25:60392] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aSKwjw13QPZSi6O8umVI6gAAAJg"]
[Sun Nov 23 14:58:26.860492 2025] [:error] [pid 38738:tid 38761] [client 217.182.194.25:41544] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aSKwkgytc6TL9XavPmOhsgAAABM"]
[Sun Nov 23 14:58:30.572133 2025] [:error] [pid 44652:tid 44712] [client 217.182.194.25:55556] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aSKwltiQFwsyXQDhwyBr6AAAAQY"]
[Sun Nov 23 14:58:34.266798 2025] [:error] [pid 38739:tid 38784] [client 217.182.194.25:55564] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aSKwmgdvEgJm2n2cDmriRgAAAE8"]
[Sun Nov 23 14:58:38.622393 2025] [:error] [pid 44652:tid 44730] [client 217.182.194.25:38454] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aSKwntiQFwsyXQDhwyBr7wAAARg"]
[Sun Nov 23 14:58:41.525010 2025] [:error] [pid 38740:tid 38811] [client 217.182.194.25:38460] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aSKwoQ13QPZSi6O8umVI8gAAAI8"]
[Sun Nov 23 14:58:45.371815 2025] [:error] [pid 38738:tid 38762] [client 217.182.194.25:38470] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aSKwpQytc6TL9XavPmOh_QAAABQ"]
[Sun Nov 23 14:58:49.008823 2025] [:error] [pid 38738:tid 38751] [client 217.182.194.25:45950] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aSKwqQytc6TL9XavPmOiBAAAAAk"]
[Sun Nov 23 14:58:52.380019 2025] [:error] [pid 38824:tid 38846] [client 217.182.194.25:45954] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aSKwrE8WZjXLvbHTHPdwxgAAANM"]
[Sun Nov 23 14:58:56.167772 2025] [:error] [pid 38738:tid 38745] [client 217.182.194.25:45956] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aSKwsAytc6TL9XavPmOiDQAAAAM"]
[Sun Nov 23 14:59:00.438968 2025] [:error] [pid 38739:tid 38782] [client 217.182.194.25:37290] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aSKwtAdvEgJm2n2cDmriWwAAAE0"]
[Sun Nov 23 14:59:03.389049 2025] [:error] [pid 38824:tid 38845] [client 217.182.194.25:37300] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aSKwt08WZjXLvbHTHPdwzwAAANI"]
[Sun Nov 23 14:59:07.773828 2025] [:error] [pid 38739:tid 38788] [client 217.182.194.25:37314] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aSKwuwdvEgJm2n2cDmriaAAAAFM"]
[Sun Nov 23 14:59:11.278216 2025] [:error] [pid 44652:tid 44715] [client 217.182.194.25:55002] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aSKwv9iQFwsyXQDhwyBsOgAAAQk"]
[Sun Nov 23 14:59:14.845164 2025] [:error] [pid 44652:tid 44716] [client 217.182.194.25:55012] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aSKwwtiQFwsyXQDhwyBsPAAAAQo"]
[Sun Nov 23 14:59:17.763912 2025] [:error] [pid 38824:tid 38844] [client 217.182.194.25:36988] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aSKwxU8WZjXLvbHTHPdw2QAAANE"]
[Sun Nov 23 15:06:23.517608 2025] [:error] [pid 38738:tid 38763] [client 182.43.70.143:47686] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSKybwytc6TL9XavPmOlugAAABU"]
[Sun Nov 23 16:09:49.212649 2025] [:error] [pid 38738:tid 38752] [client 176.65.132.18:35072] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSLBTQytc6TL9XavPmO9JwAAAAo"]
[Sun Nov 23 16:33:58.505902 2025] [:error] [pid 38740:tid 38802] [client 152.53.37.81:54478] [client 152.53.37.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.37.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSLG9g13QPZSi6O8umVk-QAAAIY"]
[Sun Nov 23 16:34:00.993773 2025] [:error] [pid 38740:tid 38796] [client 152.53.37.81:54480] [client 152.53.37.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.37.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSLG-A13QPZSi6O8umVk-wAAAIA"]
[Sun Nov 23 16:36:11.375320 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.65:22183] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLHe08WZjXLvbHTHPeU9AAAAM0"]
[Sun Nov 23 16:36:18.620908 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.70:25273] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLHggdvEgJm2n2cDmoHegAAAEg"]
[Sun Nov 23 16:36:32.544886 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.10:39853] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aSLHkAytc6TL9XavPmPZBQAAAAs"]
[Sun Nov 23 16:36:42.161857 2025] [:error] [pid 38824:tid 38835] [client 140.99.1.10:55519] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSLHmk8WZjXLvbHTHPeYbQAAAMg"]
[Sun Nov 23 16:37:00.926585 2025] [:error] [pid 38739:tid 38792] [client 140.99.1.53:56453] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLHrAdvEgJm2n2cDmoMfAAAAFc"]
[Sun Nov 23 16:37:04.601698 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.39:51645] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLHsAdvEgJm2n2cDmoM7gAAAFQ"]
[Sun Nov 23 16:37:04.934697 2025] [:error] [pid 38739:tid 38773] [client 140.99.1.43:24235] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLHsAdvEgJm2n2cDmoM9wAAAEQ"]
[Sun Nov 23 16:37:05.167936 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.76:60603] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLHsQ13QPZSi6O8umV3HwAAAIE"]
[Sun Nov 23 16:37:05.376113 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.14:57313] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLHsU8WZjXLvbHTHPeaWQAAAMI"]
[Sun Nov 23 16:37:05.650562 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.76:35723] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLHsQytc6TL9XavPmPc7AAAAAw"]
[Sun Nov 23 16:37:09.193043 2025] [:error] [pid 38824:tid 38827] [client 140.99.1.18:45855] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLHtU8WZjXLvbHTHPearQAAAMA"]
[Sun Nov 23 16:37:12.367414 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.44:40639] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aSLHuAdvEgJm2n2cDmoN8QAAAEY"]
[Sun Nov 23 16:37:17.596493 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.11:34219] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLHvQ13QPZSi6O8umV4PwAAAIU"]
[Sun Nov 23 16:37:19.491372 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.50:39875] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLHv08WZjXLvbHTHPebyQAAAMs"]
[Sun Nov 23 16:37:20.996103 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.73:53865] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLHwAytc6TL9XavPmPenQAAABU"]
[Sun Nov 23 16:37:44.016463 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.73:50675] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLH2E8WZjXLvbHTHPedpAAAAMY"]
[Sun Nov 23 16:37:46.270659 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.53:41203] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLH2g13QPZSi6O8umV8FgAAAIc"]
[Sun Nov 23 16:37:53.083956 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.77:62949] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSLH4diQFwsyXQDhwyCX-wAAAQ0"]
[Sun Nov 23 16:37:55.563257 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.5:51027] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLH4wdvEgJm2n2cDmoRawAAAEI"]
[Sun Nov 23 16:38:18.026338 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.32:49045] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLH-gytc6TL9XavPmPjpAAAAAk"]
[Sun Nov 23 16:38:20.861448 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.32:25539] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLH_E8WZjXLvbHTHPegSgAAAMU"]
[Sun Nov 23 16:38:23.847819 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.52:23159] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLH_wdvEgJm2n2cDmoTRAAAAE0"]
[Sun Nov 23 16:38:24.168796 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.48:52645] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLIANiQFwsyXQDhwyCZ2gAAAQA"]
[Sun Nov 23 16:38:24.486397 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.33:23257] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLIAAytc6TL9XavPmPkCgAAAA8"]
[Sun Nov 23 16:38:36.672905 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.39:52519] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLIDA13QPZSi6O8umWAGQAAAJg"]
[Sun Nov 23 16:38:36.884442 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.2:36301] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aSLIDE8WZjXLvbHTHPehogAAAMw"]
[Sun Nov 23 16:38:37.067866 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.33:23623] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLIDQdvEgJm2n2cDmoUXQAAAFY"]
[Sun Nov 23 16:39:03.560302 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.53:28467] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aSLIJ9iQFwsyXQDhwyCcuAAAAQE"]
[Sun Nov 23 16:39:18.791499 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.5:43861] [client 140.99.1.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.5, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLINgdvEgJm2n2cDmoYAQAAAEw"]
[Sun Nov 23 16:39:22.134576 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.5:43861] [client 140.99.1.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aSLIOgdvEgJm2n2cDmoYIAAAAFQ"]
[Sun Nov 23 16:40:09.080845 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.24:48221] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLIaQdvEgJm2n2cDmobgwAAAEY"]
[Sun Nov 23 16:40:23.286830 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.7:30851] [client 140.99.1.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.7, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLIdwytc6TL9XavPmPsVwAAABY"]
[Sun Nov 23 16:40:35.057692 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.7:30851] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aSLIgwytc6TL9XavPmPtfgAAABg"]
[Sun Nov 23 16:41:13.571097 2025] [:error] [pid 14602:tid 14623] [client 140.99.1.48:54625] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLIqR-I77jdD81pU-mPVgAAAUI"]
[Sun Nov 23 16:42:02.270442 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.18:46153] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLI2h-I77jdD81pU-mTKAAAAUQ"]
[Sun Nov 23 16:42:14.533799 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.43:50929] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLI5k8WZjXLvbHTHPewpgAAANU"]
[Sun Nov 23 16:42:33.760389 2025] [:error] [pid 14602:tid 14636] [client 140.99.1.37:29399] [client 140.99.1.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.37, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLI-R-I77jdD81pU-mWSgAAAU8"]
[Sun Nov 23 16:42:40.215313 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.37:29399] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLJAB-I77jdD81pU-mWwQAAAVY"]
[Sun Nov 23 16:43:16.877452 2025] [autoindex:error] [pid 38739:tid 38776] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:17.044647 2025] [autoindex:error] [pid 38739:tid 38785] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:17.190223 2025] [autoindex:error] [pid 38739:tid 38782] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:17.348459 2025] [autoindex:error] [pid 38739:tid 38792] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:24.288879 2025] [autoindex:error] [pid 38739:tid 38779] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:24.414705 2025] [autoindex:error] [pid 38739:tid 38782] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:24.556033 2025] [autoindex:error] [pid 38739:tid 38770] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:24.773656 2025] [autoindex:error] [pid 38739:tid 38782] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:24.920385 2025] [autoindex:error] [pid 38739:tid 38770] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:25.073053 2025] [autoindex:error] [pid 38739:tid 38770] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:25.425194 2025] [autoindex:error] [pid 38739:tid 38792] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:32.536048 2025] [autoindex:error] [pid 38739:tid 38781] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:32.695606 2025] [autoindex:error] [pid 38739:tid 38788] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:47.233802 2025] [autoindex:error] [pid 38739:tid 38775] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:47.337198 2025] [autoindex:error] [pid 38739:tid 38786] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:47.465661 2025] [autoindex:error] [pid 38739:tid 38787] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:47.604209 2025] [autoindex:error] [pid 38739:tid 38786] [client 140.99.1.16:64865] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:47.819069 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.16:64865] [client 140.99.1.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/blog/"] [unique_id "aSLJQwdvEgJm2n2cDmotbAAAAEE"]
[Sun Nov 23 16:43:55.736834 2025] [autoindex:error] [pid 38824:tid 38834] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:43:55.879559 2025] [autoindex:error] [pid 38824:tid 38832] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:44:03.243364 2025] [autoindex:error] [pid 38824:tid 38843] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:44:11.646396 2025] [autoindex:error] [pid 38824:tid 38830] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:44:11.764494 2025] [autoindex:error] [pid 38824:tid 38837] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:44:11.910295 2025] [autoindex:error] [pid 38824:tid 38843] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:45:01.563790 2025] [autoindex:error] [pid 38824:tid 38833] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:45:08.512626 2025] [autoindex:error] [pid 38824:tid 38837] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:45:08.642393 2025] [autoindex:error] [pid 38824:tid 38827] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:45:09.184993 2025] [autoindex:error] [pid 38824:tid 38846] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:45:09.345981 2025] [autoindex:error] [pid 38824:tid 38847] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:45:09.460740 2025] [autoindex:error] [pid 38824:tid 38829] [client 140.99.1.17:32849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:21.110994 2025] [autoindex:error] [pid 38740:tid 38802] [client 140.99.1.14:37283] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:21.210826 2025] [autoindex:error] [pid 38740:tid 38819] [client 140.99.1.14:37283] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:21.321393 2025] [autoindex:error] [pid 38740:tid 38820] [client 140.99.1.14:37283] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:21.496245 2025] [autoindex:error] [pid 38740:tid 38813] [client 140.99.1.14:37283] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 18:23:55.167480 2025] [:error] [pid 16066:tid 16092] [client 185.30.32.93:37180] [client 185.30.32.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.93, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSLgu_q-c47Q5mW5E9Gn4QAAAZc"]
[Sun Nov 23 18:23:58.324589 2025] [:error] [pid 38824:tid 38837] [client 185.30.32.93:37196] [client 185.30.32.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.93, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSLgvk8WZjXLvbHTHPfoJAAAAMo"]
[Sun Nov 23 23:27:11.056313 2025] [autoindex:error] [pid 17534:tid 17555] [client 128.24.86.41:51159] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Nov 23 23:27:11.272071 2025] [proxy_fcgi:error] [pid 17534:tid 17542] [client 128.24.86.41:51159] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Nov 23 23:27:11.483490 2025] [:error] [pid 17534:tid 17554] [client 128.24.86.41:51159] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSMnz3PX9nXBrhgM8syq7wAAAdI"], referer: https://www.google.co.uk/
[Sun Nov 23 23:27:12.326312 2025] [:error] [pid 38824:tid 38850] [client 128.24.86.41:51157] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSMn0E8WZjXLvbHTHPcS_AAAANc"], referer: https://www.google.com/
[Sun Nov 23 23:27:16.757982 2025] [proxy_fcgi:error] [pid 8036:tid 8057] [client 128.24.86.41:51191] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Sun Nov 23 23:27:23.802532 2025] [:error] [pid 8036:tid 8068] [client 128.24.86.41:51191] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wso112233.php"] [unique_id "aSMn29BT69EcgFwgTmqNgwAAAhU"], referer: https://www.google.com/
[Sun Nov 23 23:27:30.658344 2025] [proxy_fcgi:error] [pid 17534:tid 17538] [client 128.24.86.41:51080] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 23:27:36.766612 2025] [:error] [pid 17534:tid 17549] [client 128.24.86.41:51080] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSMn6HPX9nXBrhgM8syrDQAAAc0"], referer: https://www.bing.com/
[Sun Nov 23 23:27:43.112539 2025] [proxy_fcgi:error] [pid 38824:tid 38831] [client 128.24.86.41:51087] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 23:27:47.910307 2025] [:error] [pid 38824:tid 38843] [client 128.24.86.41:51087] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bala.php"] [unique_id "aSMn808WZjXLvbHTHPcTTQAAANA"], referer: https://www.bing.com/
[Sun Nov 23 23:27:53.136356 2025] [:error] [pid 38739:tid 38770] [client 128.24.86.41:51072] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/dropdown.php"] [unique_id "aSMn-QdvEgJm2n2cDmqKCQAAAEE"], referer: https://www.google.de/
[Sun Nov 23 23:28:01.854840 2025] [:error] [pid 16066:tid 16083] [client 128.24.86.41:51193] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/repeater.php"] [unique_id "aSMoAfq-c47Q5mW5E9HgSQAAAY4"], referer: https://duckduckgo.com/
[Sun Nov 23 23:28:19.159838 2025] [autoindex:error] [pid 8036:tid 8057] [client 128.24.86.41:51085] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Nov 23 23:28:31.715587 2025] [:error] [pid 8036:tid 8056] [client 128.24.86.41:51085] [client 128.24.86.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.24.86.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSMoH9BT69EcgFwgTmqN2QAAAgk"], referer: https://www.google.com/
[Mon Nov 24 00:22:43.445328 2025] [:error] [pid 1454:tid 1513] [client 176.65.132.18:56338] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSM007eh4NH3skJ5n4RexwAAAME"]
[Mon Nov 24 03:48:37.449040 2025] [:error] [pid 56842:tid 56884] [client 185.254.75.33:49230] [client 185.254.75.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSNlFfQ-3ytCdJAS2i7ovgAAAA8"]
[Mon Nov 24 03:48:38.044877 2025] [:error] [pid 56842:tid 56869] [client 185.254.75.33:49344] [client 185.254.75.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSNlFvQ-3ytCdJAS2i7oxAAAAAA"]
[Mon Nov 24 04:42:25.809274 2025] [:error] [pid 12912:tid 12992] [client 51.103.255.157:19889] [client 51.103.255.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backup"] [unique_id "aSNxsZMj_Lgt36UonYKtUgAAAJc"]
[Mon Nov 24 08:18:52.295569 2025] [:error] [pid 49900:tid 49903] [client 103.65.237.124:54868] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aSOkbDCyPLrvg06aorlj9AAAAAE"]
[Mon Nov 24 08:23:37.669642 2025] [:error] [pid 48688:tid 48700] [client 51.75.119.151:50280] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aSOliRm2q1FkzLam7A0XYQAAAkg"]
[Mon Nov 24 08:23:40.109919 2025] [:error] [pid 49900:tid 49918] [client 51.75.119.151:37066] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aSOljDCyPLrvg06aorloZgAAABA"]
[Mon Nov 24 08:23:42.476068 2025] [:error] [pid 49900:tid 49906] [client 51.75.119.151:37072] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aSOljjCyPLrvg06aorlobwAAAAQ"]
[Mon Nov 24 08:23:44.981547 2025] [:error] [pid 49900:tid 49921] [client 51.75.119.151:37084] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aSOlkDCyPLrvg06aorloewAAABM"]
[Mon Nov 24 08:23:47.517836 2025] [:error] [pid 48688:tid 48701] [client 51.75.119.151:37094] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aSOlkxm2q1FkzLam7A0XbQAAAkk"]
[Mon Nov 24 08:23:50.032547 2025] [:error] [pid 49900:tid 49906] [client 51.75.119.151:54466] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aSOlljCyPLrvg06aorlokAAAAAQ"]
[Mon Nov 24 08:23:52.403685 2025] [:error] [pid 48599:tid 48616] [client 51.75.119.151:54478] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aSOlmJzvu6PDJiRKE3KsvAAAAY0"]
[Mon Nov 24 08:23:54.898434 2025] [:error] [pid 49900:tid 49921] [client 51.75.119.151:54480] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aSOlmjCyPLrvg06aorlotQAAABM"]
[Mon Nov 24 08:23:57.257255 2025] [:error] [pid 49900:tid 49924] [client 51.75.119.151:54494] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aSOlnTCyPLrvg06aorlo3QAAABY"]
[Mon Nov 24 08:23:59.775683 2025] [:error] [pid 49900:tid 49924] [client 51.75.119.151:52722] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aSOlnzCyPLrvg06aorlpDgAAABY"]
[Mon Nov 24 08:24:02.291875 2025] [:error] [pid 48600:tid 48647] [client 51.75.119.151:52728] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aSOlovtOzSUAQvWVjBcMbgAAAdE"]
[Mon Nov 24 08:24:04.663950 2025] [:error] [pid 49900:tid 49913] [client 51.75.119.151:52730] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aSOlpDCyPLrvg06aorlpKAAAAAs"]
[Mon Nov 24 08:24:07.210079 2025] [:error] [pid 48599:tid 48605] [client 51.75.119.151:52736] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aSOlp5zvu6PDJiRKE3KtMgAAAYI"]
[Mon Nov 24 08:24:09.685657 2025] [:error] [pid 49900:tid 49904] [client 51.75.119.151:50268] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aSOlqTCyPLrvg06aorlpQwAAAAI"]
[Mon Nov 24 08:24:12.186908 2025] [:error] [pid 48599:tid 48613] [client 51.75.119.151:50270] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aSOlrJzvu6PDJiRKE3KtPwAAAYo"]
[Mon Nov 24 08:24:14.675588 2025] [:error] [pid 49900:tid 49917] [client 51.75.119.151:50286] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aSOlrjCyPLrvg06aorlpTQAAAA8"]
[Mon Nov 24 08:24:17.151484 2025] [:error] [pid 49900:tid 49911] [client 51.75.119.151:50288] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aSOlsTCyPLrvg06aorlpUgAAAAk"]
[Mon Nov 24 08:24:19.500530 2025] [:error] [pid 48601:tid 48670] [client 51.75.119.151:34144] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aSOls4MM4MaVTk74-AYrGQAAAg0"]
[Mon Nov 24 08:24:21.882663 2025] [:error] [pid 48600:tid 48632] [client 51.75.119.151:34146] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aSOltftOzSUAQvWVjBcMjwAAAcI"]
[Mon Nov 24 08:24:24.390704 2025] [:error] [pid 48688:tid 48714] [client 51.75.119.151:34160] [client 51.75.119.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aSOluBm2q1FkzLam7A0YGwAAAlY"]
[Mon Nov 24 10:30:34.532960 2025] [:error] [pid 48599:tid 48614] [client 113.219.218.197:55197] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSPDSpzvu6PDJiRKE3LhngAAAYs"]
[Mon Nov 24 10:46:12.784387 2025] [:error] [pid 9630:tid 9648] [client 138.204.79.240:65298] [client 138.204.79.240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSPG9CrSgUgPGkizt2qIRgAAAFA"]
[Mon Nov 24 10:47:36.905216 2025] [:error] [pid 9630:tid 9648] [client 138.204.79.240:64930] [client 138.204.79.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSPHSCrSgUgPGkizt2qIsAAAAFA"]
[Mon Nov 24 11:29:06.993907 2025] [:error] [pid 16441:tid 16445] [client 81.199.26.38:31193] [client 81.199.26.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSPRAoq_bc5MOa9Hflm63wAAAIE"]
[Mon Nov 24 11:29:09.957804 2025] [:error] [pid 48599:tid 48623] [client 81.199.26.45:48715] [client 81.199.26.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSPRBZzvu6PDJiRKE3LryQAAAZQ"]
[Mon Nov 24 11:29:25.419680 2025] [:error] [pid 16549:tid 16562] [client 85.203.15.128:50195] [client 85.203.15.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSPRFaeWW19A99PUw_cHogAAAUo"]
[Mon Nov 24 11:29:34.155796 2025] [:error] [pid 48601:tid 48669] [client 81.199.26.45:45155] [client 81.199.26.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSPRHoMM4MaVTk74-AZvlAAAAgw"]
[Mon Nov 24 11:29:36.149248 2025] [:error] [pid 48688:tid 48707] [client 81.199.26.49:22365] [client 81.199.26.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSPRIBm2q1FkzLam7A1hkAAAAk8"]
[Mon Nov 24 11:29:37.340939 2025] [:error] [pid 48688:tid 48715] [client 81.199.26.36:60797] [client 81.199.26.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSPRIRm2q1FkzLam7A1hkQAAAlc"]
[Mon Nov 24 11:29:40.254475 2025] [:error] [pid 16441:tid 16454] [client 85.203.15.134:40659] [client 85.203.15.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSPRJIq_bc5MOa9Hflm7QQAAAIo"]
[Mon Nov 24 11:29:43.070063 2025] [:error] [pid 48600:tid 48642] [client 85.203.15.140:59189] [client 85.203.15.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSPRJ_tOzSUAQvWVjBdLVwAAAcw"]
[Mon Nov 24 11:30:01.392980 2025] [:error] [pid 16549:tid 16558] [client 85.203.15.119:44569] [client 85.203.15.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSPROaeWW19A99PUw_cHwAAAAUY"]
[Mon Nov 24 11:30:18.622173 2025] [autoindex:error] [pid 48601:tid 48669] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:21.069823 2025] [autoindex:error] [pid 48601:tid 48659] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:22.102929 2025] [autoindex:error] [pid 48601:tid 48680] [client 85.203.15.140:51271] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:33.490278 2025] [autoindex:error] [pid 48601:tid 48679] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:40.116226 2025] [autoindex:error] [pid 48601:tid 48672] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:40.982958 2025] [autoindex:error] [pid 48601:tid 48670] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:41.459257 2025] [autoindex:error] [pid 48601:tid 48665] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:42.151358 2025] [autoindex:error] [pid 48601:tid 48658] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:43.588159 2025] [autoindex:error] [pid 48601:tid 48679] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:44.612241 2025] [autoindex:error] [pid 48601:tid 48681] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:45.884206 2025] [autoindex:error] [pid 48601:tid 48663] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:46.531388 2025] [autoindex:error] [pid 48601:tid 48657] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:47.858941 2025] [autoindex:error] [pid 48601:tid 48673] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:55.476652 2025] [autoindex:error] [pid 48601:tid 48662] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:30:57.857110 2025] [autoindex:error] [pid 48601:tid 48657] [client 85.203.15.140:51271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:31.498975 2025] [autoindex:error] [pid 9630:tid 9648] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:33.285056 2025] [autoindex:error] [pid 9630:tid 9637] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:33.766450 2025] [autoindex:error] [pid 9630:tid 9636] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:34.576174 2025] [autoindex:error] [pid 9630:tid 9652] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:35.082690 2025] [autoindex:error] [pid 9630:tid 9645] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:35.552001 2025] [autoindex:error] [pid 9630:tid 9644] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:36.082279 2025] [autoindex:error] [pid 9630:tid 9634] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:36.776835 2025] [autoindex:error] [pid 9630:tid 9643] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:37.350757 2025] [autoindex:error] [pid 9630:tid 9653] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:37.882306 2025] [autoindex:error] [pid 9630:tid 9641] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:39.082432 2025] [autoindex:error] [pid 9630:tid 9638] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:41.163236 2025] [autoindex:error] [pid 9630:tid 9642] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:43.145696 2025] [autoindex:error] [pid 9630:tid 9645] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:43.627226 2025] [autoindex:error] [pid 9630:tid 9644] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:44.167759 2025] [autoindex:error] [pid 9630:tid 9634] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:46.499055 2025] [autoindex:error] [pid 9630:tid 9633] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:47.067366 2025] [autoindex:error] [pid 9630:tid 9638] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:47.496811 2025] [autoindex:error] [pid 9630:tid 9649] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:48.056940 2025] [autoindex:error] [pid 9630:tid 9651] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:32:48.602748 2025] [autoindex:error] [pid 9630:tid 9636] [client 85.203.15.145:35795] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:33:45.048435 2025] [autoindex:error] [pid 48688:tid 48695] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:17.129517 2025] [autoindex:error] [pid 48688:tid 48702] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:27.676679 2025] [autoindex:error] [pid 48688:tid 48702] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:28.374892 2025] [autoindex:error] [pid 48688:tid 48711] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:38.360509 2025] [autoindex:error] [pid 48688:tid 48709] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:40.164954 2025] [autoindex:error] [pid 48688:tid 48697] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:41.646323 2025] [autoindex:error] [pid 48688:tid 48710] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:42.203842 2025] [autoindex:error] [pid 48688:tid 48716] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:43.018407 2025] [autoindex:error] [pid 48688:tid 48695] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:43.715369 2025] [autoindex:error] [pid 48688:tid 48702] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:44.382567 2025] [autoindex:error] [pid 48688:tid 48700] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:44.967242 2025] [autoindex:error] [pid 48688:tid 48701] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:47.064425 2025] [autoindex:error] [pid 48688:tid 48706] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 11:34:48.777109 2025] [autoindex:error] [pid 48688:tid 48709] [client 85.203.15.206:58007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 14:09:10.175835 2025] [autoindex:error] [pid 16441:tid 16465] [client 104.209.221.9:2696] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 14:09:10.423566 2025] [autoindex:error] [pid 16441:tid 16467] [client 104.209.221.9:2696] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:09:10.638666 2025] [autoindex:error] [pid 16441:tid 16460] [client 104.209.221.9:2696] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 14:09:10.854233 2025] [autoindex:error] [pid 16441:tid 16461] [client 104.209.221.9:2696] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 14:09:11.087041 2025] [autoindex:error] [pid 16441:tid 16445] [client 104.209.221.9:2696] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 14:09:11.299998 2025] [autoindex:error] [pid 16441:tid 16458] [client 104.209.221.9:2696] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 14:09:11.527678 2025] [autoindex:error] [pid 16441:tid 16444] [client 104.209.221.9:2696] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 14:09:33.921963 2025] [autoindex:error] [pid 49900:tid 49903] [client 104.209.221.9:2048] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 14:09:44.502107 2025] [autoindex:error] [pid 48601:tid 48659] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 14:09:45.026756 2025] [autoindex:error] [pid 48601:tid 48678] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 14:09:45.262185 2025] [autoindex:error] [pid 48601:tid 48658] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:09:45.948824 2025] [autoindex:error] [pid 48601:tid 48674] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:09:46.158879 2025] [autoindex:error] [pid 48601:tid 48670] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 14:09:46.423918 2025] [autoindex:error] [pid 48601:tid 48679] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 14:09:46.636639 2025] [autoindex:error] [pid 48601:tid 48667] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 14:09:46.861692 2025] [autoindex:error] [pid 48601:tid 48681] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 14:09:51.366915 2025] [autoindex:error] [pid 48601:tid 48675] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 14:09:51.578740 2025] [autoindex:error] [pid 48601:tid 48671] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 14:09:52.011949 2025] [autoindex:error] [pid 48601:tid 48669] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 14:09:52.249818 2025] [autoindex:error] [pid 48601:tid 48665] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 14:09:52.459202 2025] [autoindex:error] [pid 48601:tid 48660] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:09:52.751610 2025] [autoindex:error] [pid 48601:tid 48659] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 14:09:52.961382 2025] [autoindex:error] [pid 48601:tid 48658] [client 104.209.221.9:6332] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 14:09:55.607851 2025] [autoindex:error] [pid 48601:tid 48680] [client 104.209.221.9:6332] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:10:44.218053 2025] [autoindex:error] [pid 48599:tid 48623] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 14:10:44.435032 2025] [autoindex:error] [pid 48599:tid 48604] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:10:44.676736 2025] [autoindex:error] [pid 48599:tid 48606] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 14:10:44.893380 2025] [autoindex:error] [pid 48599:tid 48615] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 14:10:45.111195 2025] [autoindex:error] [pid 48599:tid 48622] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 14:10:49.846010 2025] [autoindex:error] [pid 48599:tid 48608] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 14:10:50.300236 2025] [autoindex:error] [pid 48599:tid 48607] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 14:10:58.159815 2025] [autoindex:error] [pid 48599:tid 48614] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:10:59.579281 2025] [autoindex:error] [pid 48599:tid 48623] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 14:10:59.793264 2025] [autoindex:error] [pid 48599:tid 48604] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 14:11:00.303819 2025] [autoindex:error] [pid 48599:tid 48615] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 14:11:00.519133 2025] [autoindex:error] [pid 48599:tid 48622] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:11:02.266343 2025] [autoindex:error] [pid 48599:tid 48613] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 14:11:05.118784 2025] [autoindex:error] [pid 48599:tid 48624] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 14:11:05.349620 2025] [autoindex:error] [pid 48599:tid 48609] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:11:06.650501 2025] [autoindex:error] [pid 48599:tid 48611] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 14:11:06.863938 2025] [autoindex:error] [pid 48599:tid 48621] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:11:07.800150 2025] [autoindex:error] [pid 48599:tid 48627] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:11:09.243105 2025] [autoindex:error] [pid 48599:tid 48605] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 14:11:09.458443 2025] [autoindex:error] [pid 48599:tid 48603] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:11:09.688240 2025] [autoindex:error] [pid 48599:tid 48614] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:11:10.107615 2025] [autoindex:error] [pid 48599:tid 48618] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 14:11:10.323693 2025] [autoindex:error] [pid 48599:tid 48623] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 14:11:10.549238 2025] [autoindex:error] [pid 48599:tid 48619] [client 104.209.221.9:5968] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 17:07:09.411242 2025] [:error] [pid 48600:tid 48649] [client 182.44.10.67:45673] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSQgPftOzSUAQvWVjBd4DgAAAdM"]
[Mon Nov 24 21:45:47.017641 2025] [:error] [pid 16593:tid 16595] [client 164.92.244.132:59278] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||hotbooksbookeeping2.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "hotbooksbookeeping2.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSRhixVGznHBJI2LKpRsHwAAAoA"]
[Mon Nov 24 21:45:53.760758 2025] [:error] [pid 9630:tid 9647] [client 164.92.244.132:54448] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about"] [unique_id "aSRhkSrSgUgPGkizt2o4egAAAE8"]
[Mon Nov 24 21:45:55.575128 2025] [:error] [pid 16441:tid 16466] [client 164.92.244.132:54454] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/debug/default/view"] [unique_id "aSRhk4q_bc5MOa9HflmTkwAAAJY"]
[Mon Nov 24 21:45:56.978228 2025] [:error] [pid 16549:tid 16567] [client 164.92.244.132:54462] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2/_catalog"] [unique_id "aSRhlKeWW19A99PUw_doGAAAAU8"]
[Mon Nov 24 21:45:58.795644 2025] [:error] [pid 16516:tid 16535] [client 164.92.244.132:54478] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSRhlvqZbniwaNwL8XkMqgAAARA"]
[Mon Nov 24 21:46:00.395518 2025] [:error] [pid 9630:tid 9649] [client 164.92.244.132:54494] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server-status"] [unique_id "aSRhmCrSgUgPGkizt2o4gwAAAFE"]
[Mon Nov 24 21:46:02.620694 2025] [:error] [pid 9630:tid 9640] [client 164.92.244.132:39198] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login.action"] [unique_id "aSRhmirSgUgPGkizt2o4kwAAAEg"]
[Mon Nov 24 21:46:04.194368 2025] [:error] [pid 48600:tid 48631] [client 164.92.244.132:39214] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/_all_dbs"] [unique_id "aSRhnPtOzSUAQvWVjBeiQAAAAcE"]
[Mon Nov 24 21:46:06.498756 2025] [:error] [pid 49900:tid 49903] [client 164.92.244.132:39218] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aSRhnjCyPLrvg06aorlJ7gAAAAE"]
[Mon Nov 24 21:46:08.560178 2025] [:error] [pid 9630:tid 9636] [client 164.92.244.132:39220] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aSRhoCrSgUgPGkizt2o4mgAAAEQ"]
[Mon Nov 24 21:46:10.494384 2025] [:error] [pid 16593:tid 16598] [client 164.92.244.132:39226] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSRhohVGznHBJI2LKpRsOQAAAoM"]
[Mon Nov 24 21:46:13.646321 2025] [:error] [pid 48688:tid 48712] [client 164.92.244.132:38568] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSRhpRm2q1FkzLam7A3QBAAAAlQ"]
[Mon Nov 24 21:46:15.914830 2025] [:error] [pid 48600:tid 48635] [client 164.92.244.132:38570] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.json"] [unique_id "aSRhp_tOzSUAQvWVjBeiQgAAAcU"]
[Mon Nov 24 21:46:18.299193 2025] [:error] [pid 16593:tid 16612] [client 164.92.244.132:38582] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/telescope/requests"] [unique_id "aSRhqhVGznHBJI2LKpRsPgAAApE"]
[Mon Nov 24 21:46:19.707847 2025] [:error] [pid 48600:tid 48639] [client 164.92.244.132:38588] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aSRhq_tOzSUAQvWVjBeiQwAAAck"]
[Mon Nov 24 21:46:21.725109 2025] [:error] [pid 9630:tid 9648] [client 164.92.244.132:34932] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSRhrSrSgUgPGkizt2o4rAAAAFA"]
[Tue Nov 25 00:30:15.963083 2025] [:error] [pid 49900:tid 49926] [client 43.164.197.209:54212] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSSIFzCyPLrvg06aorlt9wAAABg"]
[Tue Nov 25 01:33:19.956326 2025] [:error] [pid 16549:tid 16556] [client 147.135.252.138:60866] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aSSW36eWW19A99PUw_eIIQAAAUQ"]
[Tue Nov 25 01:33:22.689140 2025] [:error] [pid 9630:tid 9635] [client 147.135.252.138:48820] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aSSW4irSgUgPGkizt2pwUAAAAEM"]
[Tue Nov 25 01:33:25.778922 2025] [:error] [pid 48599:tid 48621] [client 147.135.252.138:48828] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aSSW5Zzvu6PDJiRKE3J2mwAAAZI"]
[Tue Nov 25 01:33:28.504725 2025] [:error] [pid 48599:tid 48619] [client 147.135.252.138:48836] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aSSW6Jzvu6PDJiRKE3J2nAAAAZA"]
[Tue Nov 25 01:33:30.937329 2025] [:error] [pid 16441:tid 16468] [client 147.135.252.138:60534] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aSSW6oq_bc5MOa9HflnhBwAAAJg"]
[Tue Nov 25 01:33:33.362264 2025] [:error] [pid 16516:tid 16523] [client 147.135.252.138:60542] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aSSW7fqZbniwaNwL8Xkt3QAAAQQ"]
[Tue Nov 25 01:33:35.882944 2025] [:error] [pid 16516:tid 16529] [client 147.135.252.138:60548] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aSSW7_qZbniwaNwL8Xkt3gAAAQo"]
[Tue Nov 25 01:33:38.356230 2025] [:error] [pid 48600:tid 48631] [client 147.135.252.138:60552] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aSSW8vtOzSUAQvWVjBfAPAAAAcE"]
[Tue Nov 25 01:33:40.753939 2025] [:error] [pid 16441:tid 16458] [client 147.135.252.138:46564] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aSSW9Iq_bc5MOa9HflnhDAAAAI4"]
[Tue Nov 25 01:33:43.212853 2025] [:error] [pid 9630:tid 9633] [client 147.135.252.138:46574] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aSSW9yrSgUgPGkizt2pwXwAAAEE"]
[Tue Nov 25 01:33:45.603822 2025] [:error] [pid 48688:tid 48701] [client 147.135.252.138:46590] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aSSW-Rm2q1FkzLam7A32-QAAAkk"]
[Tue Nov 25 01:33:48.124872 2025] [:error] [pid 48688:tid 48707] [client 147.135.252.138:46600] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aSSW_Bm2q1FkzLam7A32-wAAAk8"]
[Tue Nov 25 01:33:50.636101 2025] [:error] [pid 49900:tid 49924] [client 147.135.252.138:46610] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aSSW_jCyPLrvg06aorl6owAAABY"]
[Tue Nov 25 01:33:53.048658 2025] [:error] [pid 49900:tid 49911] [client 147.135.252.138:38936] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aSSXATCyPLrvg06aorl6qgAAAAk"]
[Tue Nov 25 01:33:55.566500 2025] [:error] [pid 48688:tid 48713] [client 147.135.252.138:38946] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aSSXAxm2q1FkzLam7A33AgAAAlU"]
[Tue Nov 25 01:33:58.105765 2025] [:error] [pid 16516:tid 16536] [client 147.135.252.138:38960] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aSSXBvqZbniwaNwL8Xkt6gAAARE"]
[Tue Nov 25 01:34:00.481187 2025] [:error] [pid 16441:tid 16452] [client 147.135.252.138:38964] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aSSXCIq_bc5MOa9HflnhGAAAAIg"]
[Tue Nov 25 01:34:02.851932 2025] [:error] [pid 16441:tid 16456] [client 147.135.252.138:37878] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aSSXCoq_bc5MOa9HflnhGwAAAIw"]
[Tue Nov 25 01:34:05.296284 2025] [:error] [pid 48599:tid 48613] [client 147.135.252.138:37888] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aSSXDZzvu6PDJiRKE3J2pwAAAYo"]
[Tue Nov 25 01:34:07.680646 2025] [:error] [pid 49900:tid 49905] [client 147.135.252.138:37894] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aSSXDzCyPLrvg06aorl6uwAAAAM"]
[Tue Nov 25 02:55:08.374845 2025] [:error] [pid 9630:tid 9638] [client 104.210.7.125:24550] [client 104.210.7.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/network.php"] [unique_id "aSSqDCrSgUgPGkizt2qDWgAAAEY"]
[Tue Nov 25 02:55:09.445008 2025] [:error] [pid 16441:tid 16458] [client 104.210.7.125:24540] [client 104.210.7.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSSqDYq_bc5MOa9Hfln5lgAAAI4"]
[Tue Nov 25 02:55:13.595620 2025] [:error] [pid 16516:tid 16520] [client 104.210.7.125:24462] [client 104.210.7.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSSqEfqZbniwaNwL8Xk4hQAAAQE"]
[Tue Nov 25 02:55:26.059394 2025] [:error] [pid 9630:tid 9641] [client 104.210.7.125:24539] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aSSqHirSgUgPGkizt2qDZwAAAEk"]
[Tue Nov 25 02:55:27.462064 2025] [:error] [pid 49900:tid 49916] [client 104.210.7.125:24528] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aSSqHzCyPLrvg06aormKzwAAAA4"]
[Tue Nov 25 02:55:28.243829 2025] [:error] [pid 48601:tid 48674] [client 104.210.7.125:24455] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aSSqIIMM4MaVTk74-AYinAAAAhE"]
[Tue Nov 25 02:55:29.722895 2025] [:error] [pid 16549:tid 16566] [client 104.210.7.125:24534] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aSSqIaeWW19A99PUw_eUPAAAAU4"]
[Tue Nov 25 02:55:31.103179 2025] [:error] [pid 9630:tid 9642] [client 104.210.7.125:24463] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aSSqIyrSgUgPGkizt2qDaQAAAEo"]
[Tue Nov 25 02:55:31.975797 2025] [:error] [pid 16516:tid 16534] [client 104.210.7.125:24530] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aSSqI_qZbniwaNwL8Xk4iwAAAQ8"]
[Tue Nov 25 02:55:32.758716 2025] [:error] [pid 48601:tid 48671] [client 104.210.7.125:24522] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aSSqJIMM4MaVTk74-AYipwAAAg4"]
[Tue Nov 25 02:55:33.617479 2025] [:error] [pid 49900:tid 49903] [client 104.210.7.125:24532] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aSSqJTCyPLrvg06aormK1wAAAAE"]
[Tue Nov 25 02:55:34.386462 2025] [:error] [pid 9630:tid 9646] [client 104.210.7.125:24561] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aSSqJirSgUgPGkizt2qDcQAAAE4"]
[Tue Nov 25 02:55:35.537297 2025] [:error] [pid 48600:tid 48630] [client 104.210.7.125:24453] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aSSqJ_tOzSUAQvWVjBfKyQAAAcA"]
[Tue Nov 25 02:55:36.749731 2025] [:error] [pid 16441:tid 16460] [client 104.210.7.125:24533] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aSSqKIq_bc5MOa9Hfln5tgAAAJA"]
[Tue Nov 25 02:55:37.777373 2025] [:error] [pid 9630:tid 9651] [client 104.210.7.125:24562] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aSSqKSrSgUgPGkizt2qDcwAAAFM"]
[Tue Nov 25 02:55:39.863233 2025] [:error] [pid 9630:tid 9637] [client 104.210.7.125:24449] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aSSqKyrSgUgPGkizt2qDdQAAAEU"]
[Tue Nov 25 02:55:41.224471 2025] [:error] [pid 49900:tid 49918] [client 104.210.7.125:24553] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aSSqLTCyPLrvg06aormK3gAAABA"]
[Tue Nov 25 02:55:41.862170 2025] [:error] [pid 48688:tid 48710] [client 104.210.7.125:24538] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aSSqLRm2q1FkzLam7A0FEAAAAlI"]
[Tue Nov 25 02:55:42.748233 2025] [:error] [pid 16593:tid 16608] [client 104.210.7.125:24548] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aSSqLhVGznHBJI2LKpSZOwAAAo0"]
[Tue Nov 25 02:55:43.696799 2025] [:error] [pid 16593:tid 16611] [client 104.210.7.125:24458] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content.php"] [unique_id "aSSqLxVGznHBJI2LKpSZPAAAApA"]
[Tue Nov 25 02:55:44.249215 2025] [:error] [pid 16549:tid 16556] [client 104.210.7.125:24460] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content.php"] [unique_id "aSSqMKeWW19A99PUw_eUPwAAAUQ"]
[Tue Nov 25 02:55:47.865734 2025] [:error] [pid 9630:tid 9653] [client 104.210.7.125:24474] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content.php"] [unique_id "aSSqMyrSgUgPGkizt2qDfgAAAFU"]
[Tue Nov 25 02:55:49.845224 2025] [:error] [pid 16441:tid 16464] [client 104.210.7.125:24535] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content.php"] [unique_id "aSSqNYq_bc5MOa9Hfln5wgAAAJQ"]
[Tue Nov 25 02:55:52.871796 2025] [:error] [pid 16441:tid 16452] [client 104.210.7.125:24485] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "aSSqOIq_bc5MOa9Hfln5xQAAAIg"]
[Tue Nov 25 02:55:54.198077 2025] [:error] [pid 16441:tid 16449] [client 104.210.7.125:24572] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "aSSqOoq_bc5MOa9Hfln5zQAAAIU"]
[Tue Nov 25 02:55:55.107901 2025] [:error] [pid 16516:tid 16532] [client 104.210.7.125:24551] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "aSSqO_qZbniwaNwL8Xk4lgAAAQ0"]
[Tue Nov 25 02:55:56.432050 2025] [:error] [pid 48688:tid 48706] [client 104.210.7.125:24555] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "aSSqPBm2q1FkzLam7A0FFwAAAk4"]
[Tue Nov 25 02:55:57.637464 2025] [:error] [pid 48600:tid 48632] [client 104.210.7.125:24514] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aSSqPftOzSUAQvWVjBfKzwAAAcI"]
[Tue Nov 25 02:56:00.514316 2025] [:error] [pid 16441:tid 16462] [client 104.210.7.125:24451] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aSSqQIq_bc5MOa9Hfln53wAAAJI"]
[Tue Nov 25 02:56:02.954322 2025] [:error] [pid 16516:tid 16521] [client 104.210.7.125:24569] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aSSqQvqZbniwaNwL8Xk4nAAAAQI"]
[Tue Nov 25 02:56:03.869761 2025] [:error] [pid 48600:tid 48647] [client 104.210.7.125:24475] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aSSqQ_tOzSUAQvWVjBfK1QAAAdE"]
[Tue Nov 25 02:56:05.328115 2025] [:error] [pid 9630:tid 9643] [client 104.210.7.125:24482] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aSSqRSrSgUgPGkizt2qDjgAAAEs"]
[Tue Nov 25 02:56:05.944773 2025] [:error] [pid 16593:tid 16610] [client 104.210.7.125:24525] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aSSqRRVGznHBJI2LKpSZRQAAAo8"]
[Tue Nov 25 02:56:06.849483 2025] [:error] [pid 9630:tid 9637] [client 104.210.7.125:24404] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aSSqRirSgUgPGkizt2qDkQAAAEU"]
[Tue Nov 25 02:56:07.718089 2025] [:error] [pid 16593:tid 16597] [client 104.210.7.125:24560] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aSSqRxVGznHBJI2LKpSZRwAAAoI"]
[Tue Nov 25 02:56:08.891450 2025] [:error] [pid 16549:tid 16567] [client 104.210.7.125:24459] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aSSqSKeWW19A99PUw_eURQAAAU8"]
[Tue Nov 25 02:56:09.602742 2025] [:error] [pid 16516:tid 16535] [client 104.210.7.125:24556] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aSSqSfqZbniwaNwL8Xk4pAAAARA"]
[Tue Nov 25 02:56:10.361623 2025] [:error] [pid 16549:tid 16569] [client 104.210.7.125:24476] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aSSqSqeWW19A99PUw_eUSAAAAVE"]
[Tue Nov 25 02:56:11.620659 2025] [:error] [pid 9630:tid 9648] [client 104.210.7.125:24450] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aSSqSyrSgUgPGkizt2qDlAAAAFA"]
[Tue Nov 25 02:56:12.309115 2025] [:error] [pid 16549:tid 16571] [client 104.210.7.125:24452] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aSSqTKeWW19A99PUw_eUSwAAAVI"]
[Tue Nov 25 02:56:13.347711 2025] [:error] [pid 48688:tid 48710] [client 104.210.7.125:24567] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aSSqTRm2q1FkzLam7A0FHgAAAlI"]
[Tue Nov 25 02:56:13.900379 2025] [:error] [pid 9630:tid 9644] [client 104.210.7.125:24566] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aSSqTSrSgUgPGkizt2qDlQAAAEw"]
[Tue Nov 25 02:56:14.956769 2025] [:error] [pid 16441:tid 16458] [client 104.210.7.125:24554] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aSSqToq_bc5MOa9Hfln57gAAAI4"]
[Tue Nov 25 02:56:16.009093 2025] [:error] [pid 16549:tid 16575] [client 104.210.7.125:24546] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aSSqUKeWW19A99PUw_eUUAAAAVY"]
[Tue Nov 25 02:56:16.859130 2025] [:error] [pid 9630:tid 9646] [client 104.210.7.125:24547] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aSSqUCrSgUgPGkizt2qDmQAAAE4"]
[Tue Nov 25 02:56:17.643563 2025] [:error] [pid 9630:tid 9650] [client 104.210.7.125:24454] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aSSqUSrSgUgPGkizt2qDmgAAAFI"]
[Tue Nov 25 02:56:19.864433 2025] [:error] [pid 16516:tid 16522] [client 104.210.7.125:24565] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aSSqU_qZbniwaNwL8Xk4tAAAAQM"]
[Tue Nov 25 02:56:21.370034 2025] [:error] [pid 48688:tid 48693] [client 104.210.7.125:24518] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aSSqVRm2q1FkzLam7A0FIgAAAkE"]
[Tue Nov 25 02:56:22.865717 2025] [:error] [pid 9630:tid 9652] [client 104.210.7.125:24570] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aSSqVirSgUgPGkizt2qDngAAAFQ"]
[Tue Nov 25 02:56:23.998117 2025] [:error] [pid 16549:tid 16574] [client 104.210.7.125:24575] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aSSqV6eWW19A99PUw_eUVgAAAVU"]
[Tue Nov 25 02:56:48.335896 2025] [:error] [pid 16593:tid 16614] [client 104.210.7.125:24464] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/css_compare.php"] [unique_id "aSSqcBVGznHBJI2LKpSZiQAAApM"]
[Tue Nov 25 02:56:48.973397 2025] [:error] [pid 16549:tid 16560] [client 104.210.7.125:24512] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/css_compare.php"] [unique_id "aSSqcKeWW19A99PUw_eUYgAAAUg"]
[Tue Nov 25 02:56:49.843884 2025] [:error] [pid 16441:tid 16468] [client 104.210.7.125:24505] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/css_compare.php"] [unique_id "aSSqcYq_bc5MOa9Hfln6MgAAAJg"]
[Tue Nov 25 02:56:50.692584 2025] [:error] [pid 16441:tid 16460] [client 104.210.7.125:24467] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/css_compare.php"] [unique_id "aSSqcoq_bc5MOa9Hfln6OgAAAJA"]
[Tue Nov 25 02:56:51.603705 2025] [:error] [pid 16441:tid 16450] [client 104.210.7.125:24472] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aSSqc4q_bc5MOa9Hfln6QgAAAIY"]
[Tue Nov 25 02:56:53.202525 2025] [:error] [pid 16593:tid 16615] [client 104.210.7.125:24457] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aSSqdRVGznHBJI2LKpSZmgAAApQ"]
[Tue Nov 25 02:56:54.650091 2025] [:error] [pid 48688:tid 48705] [client 104.210.7.125:24573] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aSSqdhm2q1FkzLam7A0FRQAAAk0"]
[Tue Nov 25 02:56:55.543644 2025] [:error] [pid 48688:tid 48706] [client 104.210.7.125:24493] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aSSqdxm2q1FkzLam7A0FRgAAAk4"]
[Tue Nov 25 02:56:56.431544 2025] [:error] [pid 48688:tid 48700] [client 104.210.7.125:24519] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uana.php"] [unique_id "aSSqeBm2q1FkzLam7A0FRwAAAkg"]
[Tue Nov 25 02:56:57.684664 2025] [:error] [pid 16593:tid 16614] [client 104.210.7.125:24558] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uana.php"] [unique_id "aSSqeRVGznHBJI2LKpSZnAAAApM"]
[Tue Nov 25 02:56:58.991816 2025] [:error] [pid 48601:tid 48672] [client 104.210.7.125:24428] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uana.php"] [unique_id "aSSqeoMM4MaVTk74-AYi7wAAAg8"]
[Tue Nov 25 02:57:00.666267 2025] [:error] [pid 16593:tid 16616] [client 104.210.7.125:24521] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uana.php"] [unique_id "aSSqfBVGznHBJI2LKpSZngAAApU"]
[Tue Nov 25 02:57:01.654330 2025] [:error] [pid 9630:tid 9641] [client 104.210.7.125:24403] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duck.php"] [unique_id "aSSqfSrSgUgPGkizt2qD1gAAAEk"]
[Tue Nov 25 02:57:02.966218 2025] [:error] [pid 48601:tid 48658] [client 104.210.7.125:24557] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duck.php"] [unique_id "aSSqfoMM4MaVTk74-AYi-wAAAgE"]
[Tue Nov 25 02:57:03.851372 2025] [:error] [pid 9630:tid 9655] [client 104.210.7.125:24549] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duck.php"] [unique_id "aSSqfyrSgUgPGkizt2qD8QAAAFc"]
[Tue Nov 25 02:57:04.757599 2025] [:error] [pid 16516:tid 16542] [client 104.210.7.125:24466] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duck.php"] [unique_id "aSSqgPqZbniwaNwL8Xk5IAAAARc"]
[Tue Nov 25 02:57:05.414640 2025] [:error] [pid 48688:tid 48704] [client 104.210.7.125:24531] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aSSqgRm2q1FkzLam7A0FSwAAAkw"]
[Tue Nov 25 02:57:06.281576 2025] [:error] [pid 9630:tid 9633] [client 104.210.7.125:24544] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aSSqgirSgUgPGkizt2qD9gAAAEE"]
[Tue Nov 25 02:57:06.839409 2025] [:error] [pid 16516:tid 16541] [client 104.210.7.125:24389] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aSSqgvqZbniwaNwL8Xk5JQAAARY"]
[Tue Nov 25 02:57:07.859117 2025] [:error] [pid 49900:tid 49907] [client 104.210.7.125:24456] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aSSqgzCyPLrvg06aormLGgAAAAU"]
[Tue Nov 25 02:57:08.505720 2025] [:error] [pid 49900:tid 49917] [client 104.210.7.125:24418] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aSSqhDCyPLrvg06aormLHAAAAA8"]
[Tue Nov 25 02:57:09.534371 2025] [:error] [pid 49900:tid 49906] [client 104.210.7.125:24563] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aSSqhTCyPLrvg06aormLHQAAAAQ"]
[Tue Nov 25 02:57:11.019865 2025] [:error] [pid 48601:tid 48659] [client 104.210.7.125:24541] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aSSqh4MM4MaVTk74-AYjBQAAAgI"]
[Tue Nov 25 02:57:11.854702 2025] [:error] [pid 16441:tid 16466] [client 104.210.7.125:24400] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aSSqh4q_bc5MOa9Hfln6WwAAAJY"]
[Tue Nov 25 02:57:12.889016 2025] [:error] [pid 16516:tid 16534] [client 104.210.7.125:24491] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aSSqiPqZbniwaNwL8Xk5JwAAAQ8"]
[Tue Nov 25 02:57:13.671637 2025] [:error] [pid 48599:tid 48620] [client 104.210.7.125:24542] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aSSqiZzvu6PDJiRKE3KEawAAAZE"]
[Tue Nov 25 02:57:14.667523 2025] [:error] [pid 48688:tid 48712] [client 104.210.7.125:24386] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aSSqihm2q1FkzLam7A0FZAAAAlQ"]
[Tue Nov 25 02:57:15.562331 2025] [:error] [pid 48688:tid 48713] [client 104.210.7.125:24478] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aSSqixm2q1FkzLam7A0FZQAAAlU"]
[Tue Nov 25 02:57:16.297747 2025] [:error] [pid 16516:tid 16537] [client 104.210.7.125:24478] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aSSqjPqZbniwaNwL8Xk5KAAAARI"]
[Tue Nov 25 02:57:17.565795 2025] [:error] [pid 48601:tid 48664] [client 104.210.7.125:24385] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aSSqjYMM4MaVTk74-AYjDAAAAgc"]
[Tue Nov 25 02:57:18.999896 2025] [:error] [pid 16516:tid 16525] [client 104.210.7.125:24473] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aSSqjvqZbniwaNwL8Xk5KwAAAQY"]
[Tue Nov 25 02:57:19.715560 2025] [:error] [pid 16441:tid 16453] [client 104.210.7.125:24487] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aSSqj4q_bc5MOa9Hfln6ZwAAAIk"]
[Tue Nov 25 02:57:21.221044 2025] [:error] [pid 16516:tid 16538] [client 104.210.7.125:24511] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/siteheads.php"] [unique_id "aSSqkfqZbniwaNwL8Xk5LgAAARM"]
[Tue Nov 25 02:57:22.008983 2025] [:error] [pid 48601:tid 48664] [client 104.210.7.125:24543] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/siteheads.php"] [unique_id "aSSqkoMM4MaVTk74-AYjJgAAAgc"]
[Tue Nov 25 02:57:22.850958 2025] [:error] [pid 16441:tid 16455] [client 104.210.7.125:24399] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/siteheads.php"] [unique_id "aSSqkoq_bc5MOa9Hfln6cAAAAIs"]
[Tue Nov 25 02:57:23.753164 2025] [:error] [pid 48601:tid 48672] [client 104.210.7.125:24517] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/siteheads.php"] [unique_id "aSSqk4MM4MaVTk74-AYjJwAAAg8"]
[Tue Nov 25 02:57:24.509081 2025] [:error] [pid 16441:tid 16461] [client 104.210.7.125:24384] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aSSqlIq_bc5MOa9Hfln6cgAAAJE"]
[Tue Nov 25 02:57:25.913716 2025] [:error] [pid 48601:tid 48662] [client 104.210.7.125:24524] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aSSqlYMM4MaVTk74-AYjKgAAAgU"]
[Tue Nov 25 02:57:26.679073 2025] [:error] [pid 48600:tid 48639] [client 104.210.7.125:24571] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aSSqlvtOzSUAQvWVjBfLAQAAAck"]
[Tue Nov 25 02:57:27.857257 2025] [:error] [pid 9630:tid 9647] [client 104.210.7.125:24487] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aSSqlyrSgUgPGkizt2qEDgAAAE8"]
[Tue Nov 25 02:57:28.684051 2025] [:error] [pid 49900:tid 49918] [client 104.210.7.125:24498] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aSSqmDCyPLrvg06aormLLwAAABA"]
[Tue Nov 25 02:57:30.046310 2025] [:error] [pid 48599:tid 48603] [client 104.210.7.125:24527] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aSSqmpzvu6PDJiRKE3KEcgAAAYA"]
[Tue Nov 25 02:57:31.017666 2025] [:error] [pid 49900:tid 49919] [client 104.210.7.125:24552] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aSSqmzCyPLrvg06aormLMwAAABE"]
[Tue Nov 25 02:57:32.262168 2025] [:error] [pid 16516:tid 16532] [client 104.210.7.125:24520] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aSSqnPqZbniwaNwL8Xk5NwAAAQ0"]
[Tue Nov 25 02:57:33.116237 2025] [:error] [pid 48599:tid 48616] [client 104.210.7.125:24391] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-rex4.php7"] [unique_id "aSSqnZzvu6PDJiRKE3KEdAAAAY0"]
[Tue Nov 25 02:57:34.037231 2025] [:error] [pid 48600:tid 48641] [client 104.210.7.125:24506] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-rex4.php7"] [unique_id "aSSqnvtOzSUAQvWVjBfLBgAAAcs"]
[Tue Nov 25 02:57:35.504785 2025] [:error] [pid 48600:tid 48646] [client 104.210.7.125:24496] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-rex4.php7"] [unique_id "aSSqn_tOzSUAQvWVjBfLBwAAAdA"]
[Tue Nov 25 02:57:36.564824 2025] [:error] [pid 16441:tid 16465] [client 104.210.7.125:24545] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-rex4.php7"] [unique_id "aSSqoIq_bc5MOa9Hfln6fwAAAJU"]
[Tue Nov 25 02:57:37.500322 2025] [:error] [pid 16593:tid 16615] [client 104.210.7.125:24413] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aSSqoRVGznHBJI2LKpSZ7gAAApQ"]
[Tue Nov 25 02:57:38.187212 2025] [:error] [pid 48601:tid 48664] [client 104.210.7.125:24509] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aSSqooMM4MaVTk74-AYjMgAAAgc"]
[Tue Nov 25 02:57:40.311954 2025] [:error] [pid 16516:tid 16528] [client 104.210.7.125:24445] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aSSqpPqZbniwaNwL8Xk5PgAAAQk"]
[Tue Nov 25 02:57:41.486265 2025] [:error] [pid 16441:tid 16459] [client 104.210.7.125:24500] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aSSqpYq_bc5MOa9Hfln6gwAAAI8"]
[Tue Nov 25 02:57:42.905023 2025] [:error] [pid 49900:tid 49923] [client 104.210.7.125:24465] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aSSqpjCyPLrvg06aormLNAAAABU"]
[Tue Nov 25 02:57:46.930152 2025] [:error] [pid 49900:tid 49906] [client 104.210.7.125:24537] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aSSqqjCyPLrvg06aormLSAAAAAQ"]
[Tue Nov 25 02:58:00.313113 2025] [:error] [pid 16441:tid 16447] [client 104.210.7.125:24513] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aSSquIq_bc5MOa9Hfln6xgAAAIM"]
[Tue Nov 25 02:58:01.053303 2025] [:error] [pid 9630:tid 9644] [client 104.210.7.125:24321] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aSSquSrSgUgPGkizt2qEQgAAAEw"]
[Tue Nov 25 02:58:02.920211 2025] [:error] [pid 16549:tid 16567] [client 104.210.7.125:24536] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aSSquqeWW19A99PUw_eUlQAAAU8"]
[Tue Nov 25 02:58:04.391563 2025] [:error] [pid 16549:tid 16558] [client 104.210.7.125:24568] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aSSqvKeWW19A99PUw_eUmQAAAUY"]
[Tue Nov 25 02:58:05.473041 2025] [:error] [pid 16593:tid 16602] [client 104.210.7.125:24468] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wishlist.php"] [unique_id "aSSqvRVGznHBJI2LKpSaDwAAAoc"]
[Tue Nov 25 02:58:06.870781 2025] [:error] [pid 48600:tid 48639] [client 104.210.7.125:24407] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wishlist.php"] [unique_id "aSSqvvtOzSUAQvWVjBfLHQAAAck"]
[Tue Nov 25 02:58:07.832653 2025] [:error] [pid 48601:tid 48665] [client 104.210.7.125:24427] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wishlist.php"] [unique_id "aSSqv4MM4MaVTk74-AYjVQAAAgg"]
[Tue Nov 25 02:58:08.895399 2025] [:error] [pid 49900:tid 49905] [client 104.210.7.125:24412] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wishlist.php"] [unique_id "aSSqwDCyPLrvg06aormLYQAAAAM"]
[Tue Nov 25 02:58:09.872194 2025] [:error] [pid 16516:tid 16539] [client 104.210.7.125:24410] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/results.php"] [unique_id "aSSqwfqZbniwaNwL8Xk5TAAAARQ"]
[Tue Nov 25 02:58:11.581296 2025] [:error] [pid 49900:tid 49915] [client 104.210.7.125:24327] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/results.php"] [unique_id "aSSqwzCyPLrvg06aormLZwAAAA0"]
[Tue Nov 25 02:58:13.113618 2025] [:error] [pid 48600:tid 48648] [client 104.210.7.125:24516] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/results.php"] [unique_id "aSSqxftOzSUAQvWVjBfLJAAAAdI"]
[Tue Nov 25 02:58:14.896812 2025] [:error] [pid 16593:tid 16614] [client 104.210.7.125:24481] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/results.php"] [unique_id "aSSqxhVGznHBJI2LKpSaEgAAApM"]
[Tue Nov 25 02:58:15.958892 2025] [:error] [pid 16593:tid 16605] [client 104.210.7.125:24471] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aSSqxxVGznHBJI2LKpSaFAAAAoo"]
[Tue Nov 25 02:58:17.153828 2025] [:error] [pid 48688:tid 48703] [client 104.210.7.125:24483] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aSSqyRm2q1FkzLam7A0FjgAAAks"]
[Tue Nov 25 02:58:18.789091 2025] [:error] [pid 16516:tid 16527] [client 104.210.7.125:24492] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aSSqyvqZbniwaNwL8Xk5TwAAAQg"]
[Tue Nov 25 02:58:19.742921 2025] [:error] [pid 16441:tid 16458] [client 104.210.7.125:24422] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aSSqy4q_bc5MOa9Hfln62QAAAI4"]
[Tue Nov 25 02:58:20.665678 2025] [:error] [pid 48600:tid 48634] [client 104.210.7.125:24529] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aSSqzPtOzSUAQvWVjBfLLAAAAcQ"]
[Tue Nov 25 02:58:22.201978 2025] [:error] [pid 48601:tid 48669] [client 104.210.7.125:24332] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aSSqzoMM4MaVTk74-AYjXAAAAgw"]
[Tue Nov 25 02:58:22.926642 2025] [:error] [pid 16441:tid 16456] [client 104.210.7.125:24569] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aSSqzoq_bc5MOa9Hfln68AAAAIw"]
[Tue Nov 25 02:58:23.805436 2025] [:error] [pid 48599:tid 48607] [client 104.210.7.125:24397] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aSSqz5zvu6PDJiRKE3KEkAAAAYQ"]
[Tue Nov 25 02:58:25.123290 2025] [:error] [pid 48600:tid 48638] [client 104.210.7.125:24495] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atom.php"] [unique_id "aSSq0ftOzSUAQvWVjBfLYgAAAcg"]
[Tue Nov 25 02:58:25.961412 2025] [:error] [pid 16593:tid 16616] [client 104.210.7.125:24326] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atom.php"] [unique_id "aSSq0RVGznHBJI2LKpSaGQAAApU"]
[Tue Nov 25 02:58:27.087833 2025] [:error] [pid 16593:tid 16618] [client 104.210.7.125:24488] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atom.php"] [unique_id "aSSq0xVGznHBJI2LKpSaGwAAApc"]
[Tue Nov 25 02:58:27.871879 2025] [:error] [pid 16593:tid 16601] [client 104.210.7.125:24425] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atom.php"] [unique_id "aSSq0xVGznHBJI2LKpSaHAAAAoY"]
[Tue Nov 25 02:58:28.562125 2025] [:error] [pid 16516:tid 16526] [client 104.210.7.125:24396] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/case.php"] [unique_id "aSSq1PqZbniwaNwL8Xk5WgAAAQc"]
[Tue Nov 25 02:58:29.216119 2025] [:error] [pid 48599:tid 48608] [client 104.210.7.125:24417] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/case.php"] [unique_id "aSSq1Zzvu6PDJiRKE3KEnAAAAYU"]
[Tue Nov 25 02:58:29.884607 2025] [:error] [pid 48601:tid 48680] [client 104.210.7.125:24343] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/case.php"] [unique_id "aSSq1YMM4MaVTk74-AYjYAAAAhc"]
[Tue Nov 25 02:58:30.807215 2025] [:error] [pid 49900:tid 49915] [client 104.210.7.125:24350] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/case.php"] [unique_id "aSSq1jCyPLrvg06aormLkgAAAA0"]
[Tue Nov 25 02:58:31.793043 2025] [:error] [pid 48601:tid 48668] [client 104.210.7.125:24377] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/docs.php"] [unique_id "aSSq14MM4MaVTk74-AYjZQAAAgs"]
[Tue Nov 25 02:58:32.504126 2025] [:error] [pid 16549:tid 16562] [client 104.210.7.125:24438] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/docs.php"] [unique_id "aSSq2KeWW19A99PUw_eUqwAAAUo"]
[Tue Nov 25 02:58:33.308968 2025] [:error] [pid 16441:tid 16448] [client 104.210.7.125:24441] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/docs.php"] [unique_id "aSSq2Yq_bc5MOa9Hfln7AwAAAIQ"]
[Tue Nov 25 02:58:34.921780 2025] [:error] [pid 48600:tid 48648] [client 104.210.7.125:24447] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/docs.php"] [unique_id "aSSq2vtOzSUAQvWVjBfLZgAAAdI"]
[Tue Nov 25 02:58:36.463891 2025] [:error] [pid 48600:tid 48642] [client 104.210.7.125:24352] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ios.php"] [unique_id "aSSq3PtOzSUAQvWVjBfLaAAAAcw"]
[Tue Nov 25 02:58:37.257406 2025] [:error] [pid 16549:tid 16564] [client 104.210.7.125:24501] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ios.php"] [unique_id "aSSq3aeWW19A99PUw_eUrgAAAUw"]
[Tue Nov 25 02:58:38.670055 2025] [:error] [pid 16549:tid 16561] [client 104.210.7.125:24431] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ios.php"] [unique_id "aSSq3qeWW19A99PUw_eUswAAAUk"]
[Tue Nov 25 02:58:39.864376 2025] [:error] [pid 16441:tid 16468] [client 104.210.7.125:24416] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ios.php"] [unique_id "aSSq34q_bc5MOa9Hfln7CAAAAJg"]
[Tue Nov 25 02:58:40.842898 2025] [:error] [pid 16441:tid 16460] [client 104.210.7.125:24421] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aSSq4Iq_bc5MOa9Hfln7CQAAAJA"]
[Tue Nov 25 02:58:42.278225 2025] [:error] [pid 16441:tid 16459] [client 104.210.7.125:24388] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aSSq4oq_bc5MOa9Hfln7CgAAAI8"]
[Tue Nov 25 02:58:43.173116 2025] [:error] [pid 16516:tid 16540] [client 104.210.7.125:24480] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aSSq4_qZbniwaNwL8Xk5YgAAARU"]
[Tue Nov 25 02:58:44.031475 2025] [:error] [pid 16441:tid 16452] [client 104.210.7.125:24358] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aSSq5Iq_bc5MOa9Hfln7DgAAAIg"]
[Tue Nov 25 02:58:44.839732 2025] [:error] [pid 16441:tid 16451] [client 104.210.7.125:24469] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aSSq5Iq_bc5MOa9Hfln7DwAAAIc"]
[Tue Nov 25 02:58:45.852167 2025] [:error] [pid 48688:tid 48709] [client 104.210.7.125:24436] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aSSq5Rm2q1FkzLam7A0FnQAAAlE"]
[Tue Nov 25 02:58:47.149950 2025] [:error] [pid 49900:tid 49925] [client 104.210.7.125:24394] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aSSq5zCyPLrvg06aormLqAAAABc"]
[Tue Nov 25 02:58:49.083918 2025] [:error] [pid 16549:tid 16566] [client 104.210.7.125:24470] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aSSq6aeWW19A99PUw_eUuQAAAU4"]
[Tue Nov 25 02:58:50.848381 2025] [:error] [pid 9630:tid 9636] [client 104.210.7.125:24510] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aSSq6irSgUgPGkizt2qEXgAAAEQ"]
[Tue Nov 25 02:58:52.221939 2025] [:error] [pid 48601:tid 48669] [client 104.210.7.125:24442] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aSSq7IMM4MaVTk74-AYjagAAAgw"]
[Tue Nov 25 02:58:53.197972 2025] [:error] [pid 16593:tid 16618] [client 104.210.7.125:24367] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aSSq7RVGznHBJI2LKpSaKgAAApc"]
[Tue Nov 25 02:58:53.899334 2025] [:error] [pid 9630:tid 9650] [client 104.210.7.125:24508] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aSSq7SrSgUgPGkizt2qEXwAAAFI"]
[Tue Nov 25 02:58:55.100824 2025] [:error] [pid 48688:tid 48702] [client 104.210.7.125:24489] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aSSq7xm2q1FkzLam7A0FpAAAAko"]
[Tue Nov 25 02:58:55.872616 2025] [:error] [pid 16441:tid 16453] [client 104.210.7.125:24365] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aSSq74q_bc5MOa9Hfln7EgAAAIk"]
[Tue Nov 25 02:58:56.888791 2025] [:error] [pid 49900:tid 49923] [client 104.210.7.125:24523] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aSSq8DCyPLrvg06aormLrgAAABU"]
[Tue Nov 25 02:58:58.817066 2025] [:error] [pid 9630:tid 9637] [client 104.210.7.125:24444] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aSSq8irSgUgPGkizt2qEbwAAAEU"]
[Tue Nov 25 02:59:12.604297 2025] [:error] [pid 16441:tid 16448] [client 104.210.7.125:24499] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aSSrAIq_bc5MOa9Hfln7PgAAAIQ"]
[Tue Nov 25 02:59:14.839207 2025] [:error] [pid 48600:tid 48649] [client 104.210.7.125:24426] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aSSrAvtOzSUAQvWVjBfLfgAAAdM"]
[Tue Nov 25 02:59:16.934100 2025] [:error] [pid 49900:tid 49922] [client 104.210.7.125:24494] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aSSrBDCyPLrvg06aormLtQAAABQ"]
[Tue Nov 25 02:59:18.608652 2025] [:error] [pid 16593:tid 16613] [client 104.210.7.125:24486] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aSSrBhVGznHBJI2LKpSaSAAAApI"]
[Tue Nov 25 02:59:19.911719 2025] [:error] [pid 49900:tid 49925] [client 104.210.7.125:24435] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aSSrBzCyPLrvg06aormLuQAAABc"]
[Tue Nov 25 02:59:20.767327 2025] [:error] [pid 16593:tid 16616] [client 104.210.7.125:24415] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aSSrCBVGznHBJI2LKpSaSQAAApU"]
[Tue Nov 25 02:59:22.921272 2025] [:error] [pid 48599:tid 48622] [client 104.210.7.125:24338] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aSSrCpzvu6PDJiRKE3KEwgAAAZM"]
[Tue Nov 25 02:59:24.883725 2025] [:error] [pid 48601:tid 48667] [client 104.210.7.125:24526] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aSSrDIMM4MaVTk74-AYjgAAAAgo"]
[Tue Nov 25 02:59:26.972973 2025] [:error] [pid 9630:tid 9648] [client 104.210.7.125:24392] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSSrDirSgUgPGkizt2qEkAAAAFA"]
[Tue Nov 25 02:59:28.665353 2025] [:error] [pid 16549:tid 16568] [client 104.210.7.125:24477] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSSrEKeWW19A99PUw_eU3QAAAVA"]
[Tue Nov 25 02:59:30.845663 2025] [:error] [pid 16516:tid 16532] [client 104.210.7.125:24322] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSSrEvqZbniwaNwL8Xk5gQAAAQ0"]
[Tue Nov 25 02:59:31.654817 2025] [:error] [pid 49900:tid 49904] [client 104.210.7.125:24507] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSSrEzCyPLrvg06aormLwgAAAAI"]
[Tue Nov 25 02:59:33.914110 2025] [:error] [pid 48599:tid 48605] [client 104.210.7.125:24353] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aSSrFZzvu6PDJiRKE3KExwAAAYI"]
[Tue Nov 25 02:59:35.614429 2025] [:error] [pid 49900:tid 49908] [client 104.210.7.125:24550] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aSSrFzCyPLrvg06aormLxgAAAAY"]
[Tue Nov 25 02:59:36.873956 2025] [:error] [pid 16593:tid 16614] [client 104.210.7.125:24437] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aSSrGBVGznHBJI2LKpSaTwAAApM"]
[Tue Nov 25 02:59:38.525459 2025] [:error] [pid 48599:tid 48619] [client 104.210.7.125:24504] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aSSrGpzvu6PDJiRKE3KEyAAAAZA"]
[Tue Nov 25 02:59:40.292226 2025] [:error] [pid 48688:tid 48712] [client 104.210.7.125:24325] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aSSrHBm2q1FkzLam7A0FzgAAAlQ"]
[Tue Nov 25 02:59:40.849346 2025] [:error] [pid 48599:tid 48610] [client 104.210.7.125:24402] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aSSrHJzvu6PDJiRKE3KEywAAAYc"]
[Tue Nov 25 02:59:41.884258 2025] [:error] [pid 16549:tid 16572] [client 104.210.7.125:24432] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aSSrHaeWW19A99PUw_eU5wAAAVM"]
[Tue Nov 25 02:59:43.434006 2025] [:error] [pid 16516:tid 16523] [client 104.210.7.125:24420] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aSSrH_qZbniwaNwL8Xk5iQAAAQQ"]
[Tue Nov 25 02:59:44.510446 2025] [:error] [pid 48599:tid 48623] [client 104.210.7.125:24532] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aSSrIJzvu6PDJiRKE3KEzgAAAZQ"]
[Tue Nov 25 02:59:45.542980 2025] [:error] [pid 49900:tid 49920] [client 104.210.7.125:24380] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aSSrITCyPLrvg06aormLyQAAABI"]
[Tue Nov 25 02:59:46.845172 2025] [:error] [pid 16593:tid 16600] [client 104.210.7.125:24484] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aSSrIhVGznHBJI2LKpSaUgAAAoU"]
[Tue Nov 25 02:59:47.978974 2025] [:error] [pid 16593:tid 16613] [client 104.210.7.125:24257] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aSSrIxVGznHBJI2LKpSaUwAAApI"]
[Tue Nov 25 02:59:49.870230 2025] [:error] [pid 48601:tid 48678] [client 104.210.7.125:24268] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aSSrJYMM4MaVTk74-AYjkgAAAhU"]
[Tue Nov 25 02:59:53.630198 2025] [:error] [pid 48600:tid 48640] [client 104.210.7.125:24434] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aSSrKftOzSUAQvWVjBfLnQAAAco"]
[Tue Nov 25 02:59:55.029917 2025] [:error] [pid 16441:tid 16445] [client 104.210.7.125:24448] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aSSrK4q_bc5MOa9Hfln7bwAAAIE"]
[Tue Nov 25 02:59:56.378002 2025] [:error] [pid 49900:tid 49915] [client 104.210.7.125:24414] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aSSrLDCyPLrvg06aormL5AAAAA0"]
[Tue Nov 25 02:59:58.017787 2025] [:error] [pid 48599:tid 48617] [client 104.210.7.125:24440] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/el.php"] [unique_id "aSSrLpzvu6PDJiRKE3KE2QAAAY4"]
[Tue Nov 25 02:59:59.349265 2025] [:error] [pid 49900:tid 49918] [client 104.210.7.125:24329] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/el.php"] [unique_id "aSSrLzCyPLrvg06aormL6wAAABA"]
[Tue Nov 25 03:00:00.572006 2025] [:error] [pid 16516:tid 16528] [client 104.210.7.125:24342] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/el.php"] [unique_id "aSSrMPqZbniwaNwL8Xk5mQAAAQk"]
[Tue Nov 25 03:00:01.854271 2025] [:error] [pid 16441:tid 16457] [client 104.210.7.125:24354] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/el.php"] [unique_id "aSSrMYq_bc5MOa9Hfln7ggAAAI0"]
[Tue Nov 25 03:00:02.849108 2025] [:error] [pid 16549:tid 16566] [client 104.210.7.125:24455] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aSSrMqeWW19A99PUw_eVGAAAAU4"]
[Tue Nov 25 03:00:03.622618 2025] [:error] [pid 48688:tid 48692] [client 104.210.7.125:24439] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aSSrMxm2q1FkzLam7A0F8gAAAkA"]
[Tue Nov 25 03:00:04.861956 2025] [:error] [pid 48600:tid 48653] [client 104.210.7.125:24401] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aSSrNPtOzSUAQvWVjBfLqwAAAdc"]
[Tue Nov 25 03:00:05.849090 2025] [:error] [pid 48599:tid 48627] [client 104.210.7.125:24539] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aSSrNZzvu6PDJiRKE3KE5QAAAZg"]
[Tue Nov 25 03:00:06.700708 2025] [:error] [pid 16441:tid 16452] [client 104.210.7.125:24312] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aSSrNoq_bc5MOa9Hfln7hwAAAIg"]
[Tue Nov 25 03:00:07.590538 2025] [:error] [pid 48599:tid 48617] [client 104.210.7.125:24485] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aSSrN5zvu6PDJiRKE3KE6gAAAY4"]
[Tue Nov 25 03:00:08.361005 2025] [:error] [pid 9630:tid 9645] [client 104.210.7.125:24528] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aSSrOCrSgUgPGkizt2qEswAAAE0"]
[Tue Nov 25 03:00:09.059852 2025] [:error] [pid 48688:tid 48704] [client 104.210.7.125:24449] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aSSrORm2q1FkzLam7A0F8wAAAkw"]
[Tue Nov 25 03:00:10.478389 2025] [:error] [pid 16516:tid 16534] [client 104.210.7.125:24463] [client 104.210.7.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conflg.php"] [unique_id "aSSrOvqZbniwaNwL8Xk5owAAAQ8"]
[Tue Nov 25 03:05:56.618593 2025] [:error] [pid 48601:tid 48672] [client 4.233.92.206:4360] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSSslIMM4MaVTk74-AYk0gAAAg8"]
[Tue Nov 25 03:05:58.506265 2025] [:error] [pid 48601:tid 48679] [client 4.233.92.206:4869] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSSsloMM4MaVTk74-AYk1QAAAhY"]
[Tue Nov 25 03:06:00.586798 2025] [:error] [pid 48600:tid 48648] [client 4.233.92.206:4358] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSSsmPtOzSUAQvWVjBfMogAAAdI"]
[Tue Nov 25 03:06:02.400821 2025] [:error] [pid 48600:tid 48653] [client 4.233.92.206:4877] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSSsmvtOzSUAQvWVjBfMqAAAAdc"]
[Tue Nov 25 06:09:09.454386 2025] [:error] [pid 1103:tid 1127] [client 113.141.91.58:35971] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSTXhY0LETdqOlq63sQGQwAAAVI"]
[Tue Nov 25 08:56:58.093398 2025] [:error] [pid 14077:tid 14125] [client 43.166.129.247:48654] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aST-2hG9n7UHEkwDTyiRqgAAAE8"]
[Tue Nov 25 12:21:49.432817 2025] [:error] [pid 14077:tid 14129] [client 117.33.163.216:38814] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSUu3RG9n7UHEkwDTyjWdwAAAFM"]
[Tue Nov 25 15:27:36.331816 2025] [:error] [pid 14688:tid 14692] [client 54.173.250.15:48828] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSVaaG9vYrBoEsiDniyBCgAAAQI"]
[Tue Nov 25 18:53:16.639877 2025] [autoindex:error] [pid 2987:tid 2989] [client 138.199.60.187:56174] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 18:53:16.762669 2025] [:error] [pid 2987:tid 3001] [client 138.199.60.187:56174] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKnM-djEt-pTzPxnyUSAAAAUw"]
[Tue Nov 25 18:53:17.048113 2025] [:error] [pid 28739:tid 28784] [client 138.199.60.187:56612] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKnRxGpKmlkG4FexRwhwAAAhY"]
[Tue Nov 25 18:53:17.312899 2025] [:error] [pid 2987:tid 2995] [client 138.199.60.187:56888] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKnc-djEt-pTzPxnyUTQAAAUY"]
[Tue Nov 25 18:53:17.573742 2025] [:error] [pid 28836:tid 29012] [client 138.199.60.187:57050] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKnZwNRsoxcLQGkTe33QAAAtY"]
[Tue Nov 25 18:53:17.818614 2025] [:error] [pid 14078:tid 14154] [client 138.199.60.187:57178] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKndVXYbb0ii_rVoI4HgAAAJE"]
[Tue Nov 25 19:09:50.855644 2025] [:error] [pid 14076:tid 14096] [client 217.182.195.233:60286] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aSWOfnsB4Gz6Qw-pvBsOjQAAAA8"]
[Tue Nov 25 19:09:53.540243 2025] [:error] [pid 28740:tid 28813] [client 217.182.195.233:44498] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aSWOgVppQCoYxWW6V0V4ZAAAAlY"]
[Tue Nov 25 19:09:56.170228 2025] [:error] [pid 28836:tid 28955] [client 217.182.195.233:44506] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aSWOhJwNRsoxcLQGkTe8ZQAAAsA"]
[Tue Nov 25 19:09:58.631037 2025] [:error] [pid 28836:tid 28961] [client 217.182.195.233:44520] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aSWOhpwNRsoxcLQGkTe8ZgAAAsY"]
[Tue Nov 25 19:10:01.159048 2025] [:error] [pid 28836:tid 29011] [client 217.182.195.233:56500] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aSWOiZwNRsoxcLQGkTe8aAAAAtU"]
[Tue Nov 25 19:10:03.742761 2025] [:error] [pid 28842:tid 29003] [client 217.182.195.233:56516] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aSWOi9NmoaPf6T4-6C2J4AAAA00"]
[Tue Nov 25 19:10:06.385322 2025] [:error] [pid 2987:tid 2997] [client 217.182.195.233:56518] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aSWOjs-djEt-pTzPxnyZYgAAAUg"]
[Tue Nov 25 19:10:09.000646 2025] [:error] [pid 28609:tid 28631] [client 217.182.195.233:56530] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aSWOkCGGdT-nZJVs3x29JwAAAY0"]
[Tue Nov 25 19:10:11.487416 2025] [:error] [pid 14076:tid 14101] [client 217.182.195.233:33828] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aSWOk3sB4Gz6Qw-pvBsOpgAAABQ"]
[Tue Nov 25 19:10:14.015295 2025] [:error] [pid 28609:tid 28620] [client 217.182.195.233:33832] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aSWOliGGdT-nZJVs3x29KQAAAYI"]
[Tue Nov 25 19:10:16.480031 2025] [:error] [pid 28836:tid 28969] [client 217.182.195.233:33840] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aSWOmJwNRsoxcLQGkTe8dwAAAs4"]
[Tue Nov 25 19:10:18.999520 2025] [:error] [pid 14078:tid 14151] [client 217.182.195.233:33842] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aSWOmtVXYbb0ii_rVoI9EgAAAI4"]
[Tue Nov 25 19:10:21.542017 2025] [:error] [pid 14078:tid 14148] [client 217.182.195.233:46968] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aSWOndVXYbb0ii_rVoI9FgAAAIs"]
[Tue Nov 25 19:10:23.984281 2025] [:error] [pid 14077:tid 14113] [client 217.182.195.233:46978] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aSWOnxG9n7UHEkwDTyiGagAAAEM"]
[Tue Nov 25 19:10:26.440802 2025] [:error] [pid 14168:tid 14179] [client 217.182.195.233:46990] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aSWOovR-ZDU0QEgAIItgmAAAAMg"]
[Tue Nov 25 19:10:28.784888 2025] [:error] [pid 28842:tid 29023] [client 217.182.195.233:47004] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aSWOpNNmoaPf6T4-6C2KAQAAA1U"]
[Tue Nov 25 19:10:31.339812 2025] [:error] [pid 28740:tid 28798] [client 217.182.195.233:53176] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aSWOp1ppQCoYxWW6V0V4kgAAAkc"]
[Tue Nov 25 19:10:33.855296 2025] [:error] [pid 14077:tid 14111] [client 217.182.195.233:53192] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aSWOqRG9n7UHEkwDTyiGdwAAAEE"]
[Tue Nov 25 19:10:36.270110 2025] [:error] [pid 14077:tid 14124] [client 217.182.195.233:53208] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aSWOrBG9n7UHEkwDTyiGegAAAE4"]
[Tue Nov 25 19:10:38.771648 2025] [:error] [pid 14076:tid 14085] [client 217.182.195.233:53214] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aSWOrnsB4Gz6Qw-pvBsOwgAAAAQ"]
[Tue Nov 25 20:21:55.738341 2025] [:error] [pid 28836:tid 28964] [client 65.111.12.221:19545] [client 65.111.12.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aSWfY5wNRsoxcLQGkTfQHgAAAsk"]
[Tue Nov 25 20:21:58.501030 2025] [:error] [pid 14168:tid 14178] [client 104.207.51.155:16167] [client 104.207.51.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.svn/wc.db"] [unique_id "aSWfZvR-ZDU0QEgAIItzzAAAAMc"]
[Tue Nov 25 20:51:18.390614 2025] [:error] [pid 14078:tid 14147] [client 48.210.250.238:57100] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cyanamids.php"] [unique_id "aSWmRtVXYbb0ii_rVoJhSwAAAIo"]
[Tue Nov 25 20:51:20.021714 2025] [:error] [pid 14168:tid 14193] [client 48.210.250.238:57130] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cyanamids.php"] [unique_id "aSWmSPR-ZDU0QEgAIIt9swAAANY"]
[Tue Nov 25 20:51:23.032809 2025] [:error] [pid 14076:tid 14081] [client 48.210.250.238:40349] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cyanamids.php"] [unique_id "aSWmS3sB4Gz6Qw-pvBst8gAAAAA"]
[Tue Nov 25 20:51:24.044499 2025] [:error] [pid 28836:tid 29009] [client 48.210.250.238:60376] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cyanamids.php"] [unique_id "aSWmTJwNRsoxcLQGkTfZdQAAAtM"]
[Tue Nov 25 20:51:28.917250 2025] [:error] [pid 14168:tid 14183] [client 48.210.250.238:40380] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disengaging.php"] [unique_id "aSWmUPR-ZDU0QEgAIIt9vQAAAMw"]
[Tue Nov 25 20:51:31.488120 2025] [:error] [pid 28836:tid 28969] [client 48.210.250.238:60390] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disengaging.php"] [unique_id "aSWmU5wNRsoxcLQGkTfZfQAAAs4"]
[Tue Nov 25 20:51:33.091419 2025] [:error] [pid 14076:tid 14095] [client 48.210.250.238:55534] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disengaging.php"] [unique_id "aSWmVXsB4Gz6Qw-pvBst9wAAAA4"]
[Tue Nov 25 20:51:37.926765 2025] [:error] [pid 43843:tid 43857] [client 48.210.250.238:55538] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disengaging.php"] [unique_id "aSWmWRhx4v3NUNdMKDPnZAAAAcw"]
[Tue Nov 25 20:51:41.099917 2025] [:error] [pid 43981:tid 43996] [client 48.210.250.238:60354] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disquiet.php"] [unique_id "aSWmXQgZn97m_qh_RaFXeAAAAw0"]
[Tue Nov 25 20:51:42.142611 2025] [:error] [pid 28739:tid 28784] [client 48.210.250.238:57102] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disquiet.php"] [unique_id "aSWmXhxGpKmlkG4FexSS4gAAAhY"]
[Tue Nov 25 20:51:45.144698 2025] [:error] [pid 28739:tid 28780] [client 48.210.250.238:60384] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disquiet.php"] [unique_id "aSWmYRxGpKmlkG4FexSS6AAAAhI"]
[Tue Nov 25 20:51:47.394219 2025] [:error] [pid 28609:tid 28618] [client 48.210.250.238:55543] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disquiet.php"] [unique_id "aSWmYyGGdT-nZJVs3x3aiwAAAYA"]
[Tue Nov 25 20:51:48.681758 2025] [:error] [pid 2987:tid 3013] [client 48.210.250.238:57138] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duplicand.php"] [unique_id "aSWmZM-djEt-pTzPxny7IAAAAVg"]
[Tue Nov 25 20:51:50.665608 2025] [:error] [pid 28609:tid 28635] [client 48.210.250.238:40332] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duplicand.php"] [unique_id "aSWmZiGGdT-nZJVs3x3akAAAAZE"]
[Tue Nov 25 20:51:52.478652 2025] [:error] [pid 28609:tid 28642] [client 48.210.250.238:57134] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duplicand.php"] [unique_id "aSWmaCGGdT-nZJVs3x3akwAAAZg"]
[Tue Nov 25 20:51:55.393775 2025] [:error] [pid 28609:tid 28622] [client 48.210.250.238:60359] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duplicand.php"] [unique_id "aSWmayGGdT-nZJVs3x3amAAAAYQ"]
[Tue Nov 25 20:51:57.341404 2025] [:error] [pid 14078:tid 14158] [client 48.210.250.238:57092] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/parturiency.php"] [unique_id "aSWmbdVXYbb0ii_rVoJhkgAAAJU"]
[Tue Nov 25 20:52:01.846156 2025] [:error] [pid 2987:tid 2993] [client 48.210.250.238:57145] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/parturiency.php"] [unique_id "aSWmcc-djEt-pTzPxny7JgAAAUQ"]
[Tue Nov 25 20:52:09.390199 2025] [:error] [pid 14168:tid 14189] [client 48.210.250.238:57111] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/parturiency.php"] [unique_id "aSWmefR-ZDU0QEgAIIt96AAAANI"]
[Tue Nov 25 20:52:10.486567 2025] [:error] [pid 43981:tid 44005] [client 48.210.250.238:40344] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/parturiency.php"] [unique_id "aSWmeggZn97m_qh_RaFXjgAAAxY"]
[Tue Nov 25 20:52:11.425844 2025] [:error] [pid 14168:tid 14188] [client 48.210.250.238:55528] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tithings.php"] [unique_id "aSWme_R-ZDU0QEgAIIt97gAAANE"]
[Tue Nov 25 20:52:11.995437 2025] [:error] [pid 14076:tid 14089] [client 48.210.250.238:60383] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tithings.php"] [unique_id "aSWme3sB4Gz6Qw-pvBsuGwAAAAg"]
[Tue Nov 25 20:52:13.124261 2025] [:error] [pid 2987:tid 3009] [client 48.210.250.238:60387] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tithings.php"] [unique_id "aSWmfc-djEt-pTzPxny7MAAAAVQ"]
[Tue Nov 25 20:52:15.083956 2025] [:error] [pid 43843:tid 43854] [client 48.210.250.238:57088] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tithings.php"] [unique_id "aSWmfxhx4v3NUNdMKDPngwAAAck"]
[Tue Nov 25 20:52:29.752610 2025] [:error] [pid 28609:tid 28636] [client 48.210.250.238:40140] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unprecipitously.php"] [unique_id "aSWmjSGGdT-nZJVs3x3awAAAAZI"]
[Tue Nov 25 20:52:31.385022 2025] [:error] [pid 14078:tid 14156] [client 48.210.250.238:60368] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unprecipitously.php"] [unique_id "aSWmj9VXYbb0ii_rVoJhxQAAAJM"]
[Tue Nov 25 20:52:33.991956 2025] [:error] [pid 28836:tid 28968] [client 48.210.250.238:55551] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unprecipitously.php"] [unique_id "aSWmkZwNRsoxcLQGkTfZtQAAAs0"]
[Tue Nov 25 20:52:37.205491 2025] [:error] [pid 28836:tid 29011] [client 48.210.250.238:55489] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unprecipitously.php"] [unique_id "aSWmlZwNRsoxcLQGkTfZtwAAAtU"]
[Tue Nov 25 20:52:41.113251 2025] [:error] [pid 14078:tid 14161] [client 48.210.250.238:57146] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbefittingly.php"] [unique_id "aSWmmdVXYbb0ii_rVoJh1wAAAJg"]
[Tue Nov 25 20:52:45.407815 2025] [:error] [pid 14077:tid 14120] [client 48.210.250.238:57131] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbefittingly.php"] [unique_id "aSWmnRG9n7UHEkwDTyi7GwAAAEo"]
[Tue Nov 25 20:52:48.742123 2025] [:error] [pid 28739:tid 28774] [client 48.210.250.238:40360] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbefittingly.php"] [unique_id "aSWmoBxGpKmlkG4FexSTOAAAAgw"]
[Tue Nov 25 20:52:52.230139 2025] [:error] [pid 14168:tid 14182] [client 48.210.250.238:55537] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbefittingly.php"] [unique_id "aSWmpPR-ZDU0QEgAIIt-GQAAAMs"]
[Tue Nov 25 20:52:53.894799 2025] [:error] [pid 14078:tid 14140] [client 48.210.250.238:60401] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-home.php"] [unique_id "aSWmpdVXYbb0ii_rVoJh6QAAAIM"]
[Tue Nov 25 20:52:56.776625 2025] [:error] [pid 14077:tid 14125] [client 48.210.250.238:60392] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-home.php"] [unique_id "aSWmqBG9n7UHEkwDTyi7IgAAAE8"]
[Tue Nov 25 20:52:58.853343 2025] [:error] [pid 14078:tid 14147] [client 48.210.250.238:55488] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-home.php"] [unique_id "aSWmqtVXYbb0ii_rVoJiBgAAAIo"]
[Tue Nov 25 20:53:03.897432 2025] [:error] [pid 28836:tid 29007] [client 48.210.250.238:55505] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-home.php"] [unique_id "aSWmr5wNRsoxcLQGkTfZzQAAAtE"]
[Tue Nov 25 20:53:08.782921 2025] [:error] [pid 14077:tid 14126] [client 48.210.250.238:60403] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-securitiy.php"] [unique_id "aSWmtBG9n7UHEkwDTyi7OgAAAFA"]
[Tue Nov 25 20:53:14.117417 2025] [:error] [pid 14078:tid 14145] [client 48.210.250.238:55545] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-securitiy.php"] [unique_id "aSWmutVXYbb0ii_rVoJiXQAAAIg"]
[Tue Nov 25 20:53:17.365678 2025] [:error] [pid 14077:tid 14130] [client 48.210.250.238:40353] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-securitiy.php"] [unique_id "aSWmvRG9n7UHEkwDTyi7SAAAAFQ"]
[Tue Nov 25 20:53:21.019627 2025] [:error] [pid 2987:tid 2990] [client 48.210.250.238:60380] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ac.php"] [unique_id "aSWmwc-djEt-pTzPxny7lAAAAUE"]
[Tue Nov 25 20:53:24.086695 2025] [:error] [pid 14077:tid 14119] [client 48.210.250.238:60366] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ac.php"] [unique_id "aSWmxBG9n7UHEkwDTyi7SwAAAEk"]
[Tue Nov 25 23:15:21.158446 2025] [autoindex:error] [pid 43843:tid 43851] [client 139.59.30.253:57523] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 25 23:28:23.194855 2025] [:error] [pid 14168:tid 14188] [client 4.241.179.168:6096] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cyanamids.php"] [unique_id "aSXLF_R-ZDU0QEgAIIuqDQAAANE"]
[Tue Nov 25 23:28:23.437242 2025] [:error] [pid 28609:tid 28625] [client 4.241.179.168:5304] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cyanamids.php"] [unique_id "aSXLFyGGdT-nZJVs3x0PXQAAAYc"]
[Tue Nov 25 23:28:23.680764 2025] [:error] [pid 14076:tid 14094] [client 4.241.179.168:5307] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cyanamids.php"] [unique_id "aSXLF3sB4Gz6Qw-pvBtmFAAAAA0"]
[Tue Nov 25 23:28:23.919079 2025] [:error] [pid 14168:tid 14175] [client 4.241.179.168:5259] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cyanamids.php"] [unique_id "aSXLF_R-ZDU0QEgAIIuqDgAAAMQ"]
[Tue Nov 25 23:28:24.148561 2025] [:error] [pid 14077:tid 14120] [client 4.241.179.168:6083] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disengaging.php"] [unique_id "aSXLGBG9n7UHEkwDTyjs5wAAAEo"]
[Tue Nov 25 23:28:24.377782 2025] [:error] [pid 28836:tid 29010] [client 4.241.179.168:5264] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disengaging.php"] [unique_id "aSXLGJwNRsoxcLQGkTcG7wAAAtQ"]
[Tue Nov 25 23:28:24.614653 2025] [:error] [pid 14077:tid 14125] [client 4.241.179.168:5250] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disengaging.php"] [unique_id "aSXLGBG9n7UHEkwDTyjs6gAAAE8"]
[Tue Nov 25 23:28:24.920800 2025] [:error] [pid 43843:tid 43857] [client 4.241.179.168:5305] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disengaging.php"] [unique_id "aSXLGBhx4v3NUNdMKDMPuAAAAcw"]
[Tue Nov 25 23:28:25.151696 2025] [:error] [pid 28609:tid 28641] [client 4.241.179.168:5265] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disquiet.php"] [unique_id "aSXLGSGGdT-nZJVs3x0PXwAAAZc"]
[Tue Nov 25 23:28:25.429633 2025] [:error] [pid 28739:tid 28770] [client 4.241.179.168:5269] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disquiet.php"] [unique_id "aSXLGRxGpKmlkG4FexTVBQAAAgg"]
[Tue Nov 25 23:28:25.661691 2025] [:error] [pid 28609:tid 28627] [client 4.241.179.168:6084] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disquiet.php"] [unique_id "aSXLGSGGdT-nZJVs3x0PYQAAAYk"]
[Tue Nov 25 23:28:25.962519 2025] [:error] [pid 28836:tid 28986] [client 4.241.179.168:6127] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disquiet.php"] [unique_id "aSXLGZwNRsoxcLQGkTcG8AAAAs8"]
[Tue Nov 25 23:28:26.197182 2025] [:error] [pid 14077:tid 14124] [client 4.241.179.168:6087] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duplicand.php"] [unique_id "aSXLGhG9n7UHEkwDTyjs7AAAAE4"]
[Tue Nov 25 23:28:26.423909 2025] [:error] [pid 28609:tid 28628] [client 4.241.179.168:5292] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duplicand.php"] [unique_id "aSXLGiGGdT-nZJVs3x0PZAAAAYo"]
[Tue Nov 25 23:28:26.651576 2025] [:error] [pid 28739:tid 28774] [client 4.241.179.168:5272] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duplicand.php"] [unique_id "aSXLGhxGpKmlkG4FexTVCQAAAgw"]
[Tue Nov 25 23:28:26.953239 2025] [:error] [pid 28836:tid 28964] [client 4.241.179.168:5300] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/duplicand.php"] [unique_id "aSXLGpwNRsoxcLQGkTcG8QAAAsk"]
[Tue Nov 25 23:28:27.185257 2025] [:error] [pid 14078:tid 14157] [client 4.241.179.168:6089] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/parturiency.php"] [unique_id "aSXLG9VXYbb0ii_rVoKy3QAAAJQ"]
[Tue Nov 25 23:28:27.486828 2025] [:error] [pid 28739:tid 28780] [client 4.241.179.168:5288] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/parturiency.php"] [unique_id "aSXLGxxGpKmlkG4FexTVJwAAAhI"]
[Tue Nov 25 23:28:27.721059 2025] [:error] [pid 28836:tid 29009] [client 4.241.179.168:6094] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/parturiency.php"] [unique_id "aSXLG5wNRsoxcLQGkTcG8wAAAtM"]
[Tue Nov 25 23:28:27.947145 2025] [:error] [pid 14078:tid 14137] [client 4.241.179.168:5263] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/parturiency.php"] [unique_id "aSXLG9VXYbb0ii_rVoKy-AAAAIA"]
[Tue Nov 25 23:28:28.249264 2025] [:error] [pid 14078:tid 14144] [client 4.241.179.168:5271] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tithings.php"] [unique_id "aSXLHNVXYbb0ii_rVoKzAQAAAIc"]
[Tue Nov 25 23:28:28.476660 2025] [:error] [pid 28739:tid 28763] [client 4.241.179.168:6097] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tithings.php"] [unique_id "aSXLHBxGpKmlkG4FexTVKwAAAgE"]
[Tue Nov 25 23:28:28.731209 2025] [:error] [pid 28836:tid 28956] [client 4.241.179.168:6098] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tithings.php"] [unique_id "aSXLHJwNRsoxcLQGkTcG9AAAAsE"]
[Tue Nov 25 23:28:29.001740 2025] [:error] [pid 28609:tid 28636] [client 4.241.179.168:5297] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tithings.php"] [unique_id "aSXLHSGGdT-nZJVs3x0PaQAAAZI"]
[Tue Nov 25 23:28:29.286793 2025] [:error] [pid 43843:tid 43861] [client 4.241.179.168:6090] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww5.php"] [unique_id "aSXLHRhx4v3NUNdMKDMPvAAAAdA"]
[Tue Nov 25 23:28:29.589177 2025] [:error] [pid 43981:tid 43993] [client 4.241.179.168:5295] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww5.php"] [unique_id "aSXLHQgZn97m_qh_RaGFYQAAAwo"]
[Tue Nov 25 23:28:29.894224 2025] [:error] [pid 43843:tid 43847] [client 4.241.179.168:6021] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww5.php"] [unique_id "aSXLHRhx4v3NUNdMKDMPvQAAAcI"]
[Tue Nov 25 23:28:30.121577 2025] [:error] [pid 43843:tid 43845] [client 4.241.179.168:5286] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww5.php"] [unique_id "aSXLHhhx4v3NUNdMKDMPvgAAAcA"]
[Tue Nov 25 23:28:30.349245 2025] [:error] [pid 14078:tid 14147] [client 4.241.179.168:6082] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aSXLHtVXYbb0ii_rVoKzCQAAAIo"]
[Tue Nov 25 23:28:30.576743 2025] [:error] [pid 14168:tid 14192] [client 4.241.179.168:6131] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aSXLHvR-ZDU0QEgAIIuqFgAAANU"]
[Tue Nov 25 23:28:30.872681 2025] [:error] [pid 28739:tid 28773] [client 4.241.179.168:5279] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aSXLHhxGpKmlkG4FexTVMQAAAgs"]
[Tue Nov 25 23:28:31.103921 2025] [:error] [pid 14077:tid 14120] [client 4.241.179.168:5285] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aSXLHxG9n7UHEkwDTyjs8gAAAEo"]
[Tue Nov 25 23:28:31.379152 2025] [:error] [pid 14076:tid 14097] [client 4.241.179.168:6079] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-themes.php"] [unique_id "aSXLH3sB4Gz6Qw-pvBtmGwAAABA"]
[Tue Nov 25 23:28:31.607257 2025] [:error] [pid 43843:tid 43867] [client 4.241.179.168:5284] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-themes.php"] [unique_id "aSXLHxhx4v3NUNdMKDMPwAAAAdY"]
[Tue Nov 25 23:28:31.835673 2025] [:error] [pid 14076:tid 14103] [client 4.241.179.168:5291] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-themes.php"] [unique_id "aSXLH3sB4Gz6Qw-pvBtmHAAAABY"]
[Tue Nov 25 23:28:32.079376 2025] [:error] [pid 14078:tid 14160] [client 4.241.179.168:5303] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-themes.php"] [unique_id "aSXLINVXYbb0ii_rVoKzCwAAAJc"]
[Tue Nov 25 23:28:32.403408 2025] [:error] [pid 28609:tid 28620] [client 4.241.179.168:5299] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edd.php"] [unique_id "aSXLICGGdT-nZJVs3x0PbQAAAYI"]
[Tue Nov 25 23:28:32.633730 2025] [:error] [pid 14076:tid 14089] [client 4.241.179.168:6118] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edd.php"] [unique_id "aSXLIHsB4Gz6Qw-pvBtmHgAAAAg"]
[Tue Nov 25 23:28:32.928949 2025] [:error] [pid 14076:tid 14098] [client 4.241.179.168:5252] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edd.php"] [unique_id "aSXLIHsB4Gz6Qw-pvBtmHwAAABE"]
[Tue Nov 25 23:28:33.155466 2025] [:error] [pid 43843:tid 43858] [client 4.241.179.168:6025] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edd.php"] [unique_id "aSXLIRhx4v3NUNdMKDMPwQAAAc0"]
[Tue Nov 25 23:28:33.391646 2025] [:error] [pid 43843:tid 43865] [client 4.241.179.168:5283] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bo.php"] [unique_id "aSXLIRhx4v3NUNdMKDMPwgAAAdQ"]
[Tue Nov 25 23:28:33.632421 2025] [:error] [pid 14077:tid 14125] [client 4.241.179.168:5287] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bo.php"] [unique_id "aSXLIRG9n7UHEkwDTyjs9wAAAE8"]
[Tue Nov 25 23:28:33.864739 2025] [:error] [pid 14168:tid 14184] [client 4.241.179.168:5301] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bo.php"] [unique_id "aSXLIfR-ZDU0QEgAIIuqGgAAAM0"]
[Tue Nov 25 23:28:34.095424 2025] [:error] [pid 14078:tid 14159] [client 4.241.179.168:6016] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bo.php"] [unique_id "aSXLItVXYbb0ii_rVoKzDwAAAJY"]
[Tue Nov 25 23:28:34.419989 2025] [:error] [pid 14077:tid 14126] [client 4.241.179.168:5266] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bn.php"] [unique_id "aSXLIhG9n7UHEkwDTyjs-QAAAFA"]
[Tue Nov 25 23:28:34.681642 2025] [:error] [pid 28836:tid 29013] [client 4.241.179.168:5277] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bn.php"] [unique_id "aSXLIpwNRsoxcLQGkTcG_AAAAtc"]
[Tue Nov 25 23:28:34.909751 2025] [:error] [pid 43981:tid 44005] [client 4.241.179.168:6113] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bn.php"] [unique_id "aSXLIggZn97m_qh_RaGFZgAAAxY"]
[Tue Nov 25 23:28:35.384084 2025] [:error] [pid 14168:tid 14183] [client 4.241.179.168:5280] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bn.php"] [unique_id "aSXLI_R-ZDU0QEgAIIuqHwAAAMw"]
[Tue Nov 25 23:28:35.620656 2025] [:error] [pid 14076:tid 14085] [client 4.241.179.168:6095] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fishmen.php"] [unique_id "aSXLI3sB4Gz6Qw-pvBtmIwAAAAQ"]
[Tue Nov 25 23:28:36.103246 2025] [:error] [pid 28836:tid 29011] [client 4.241.179.168:5270] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fishmen.php"] [unique_id "aSXLJJwNRsoxcLQGkTcG_QAAAtU"]
[Tue Nov 25 23:28:36.578709 2025] [:error] [pid 28836:tid 28957] [client 4.241.179.168:5309] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fishmen.php"] [unique_id "aSXLJJwNRsoxcLQGkTcG_gAAAsI"]
[Tue Nov 25 23:28:37.071488 2025] [:error] [pid 2987:tid 2989] [client 4.241.179.168:6116] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fishmen.php"] [unique_id "aSXLJc-djEt-pTzPxnzp1wAAAUA"]
[Tue Nov 25 23:28:37.467892 2025] [:error] [pid 28609:tid 28631] [client 4.241.179.168:6091] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/obfuscous.php"] [unique_id "aSXLJSGGdT-nZJVs3x0PdQAAAY0"]
[Tue Nov 25 23:28:37.930419 2025] [:error] [pid 14077:tid 14114] [client 4.241.179.168:6132] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/obfuscous.php"] [unique_id "aSXLJRG9n7UHEkwDTyjtAAAAAEQ"]
[Tue Nov 25 23:28:38.401713 2025] [:error] [pid 2987:tid 3003] [client 4.241.179.168:6114] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/obfuscous.php"] [unique_id "aSXLJs-djEt-pTzPxnzp2AAAAU4"]
[Tue Nov 25 23:28:38.848068 2025] [:error] [pid 14077:tid 14121] [client 4.241.179.168:5310] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/obfuscous.php"] [unique_id "aSXLJhG9n7UHEkwDTyjtAQAAAEs"]
[Tue Nov 25 23:28:39.177661 2025] [:error] [pid 14077:tid 14112] [client 4.241.179.168:6036] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oitava.php"] [unique_id "aSXLJxG9n7UHEkwDTyjtAgAAAEI"]
[Tue Nov 25 23:28:39.545381 2025] [:error] [pid 28739:tid 28782] [client 4.241.179.168:5298] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oitava.php"] [unique_id "aSXLJxxGpKmlkG4FexTVOwAAAhQ"]
[Tue Nov 25 23:28:39.810913 2025] [:error] [pid 28609:tid 28637] [client 4.241.179.168:6070] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oitava.php"] [unique_id "aSXLJyGGdT-nZJVs3x0PegAAAZM"]
[Tue Nov 25 23:28:40.037291 2025] [:error] [pid 14077:tid 14125] [client 4.241.179.168:5282] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oitava.php"] [unique_id "aSXLKBG9n7UHEkwDTyjtAwAAAE8"]
[Tue Nov 25 23:28:40.311969 2025] [:error] [pid 14168:tid 14193] [client 4.241.179.168:5255] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phrensying.php"] [unique_id "aSXLKPR-ZDU0QEgAIIuqJQAAANY"]
[Tue Nov 25 23:28:40.607807 2025] [:error] [pid 14078:tid 14154] [client 4.241.179.168:6100] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phrensying.php"] [unique_id "aSXLKNVXYbb0ii_rVoKzFAAAAJE"]
[Tue Nov 25 23:28:40.886057 2025] [:error] [pid 43843:tid 43855] [client 4.241.179.168:6108] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phrensying.php"] [unique_id "aSXLKBhx4v3NUNdMKDMPywAAAco"]
[Tue Nov 25 23:28:41.112873 2025] [:error] [pid 14078:tid 14141] [client 4.241.179.168:5275] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phrensying.php"] [unique_id "aSXLKdVXYbb0ii_rVoKzFQAAAIQ"]
[Tue Nov 25 23:28:41.397216 2025] [:error] [pid 14076:tid 14101] [client 4.241.179.168:5276] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pyrometry.php"] [unique_id "aSXLKXsB4Gz6Qw-pvBtmKAAAABQ"]
[Tue Nov 25 23:28:41.671824 2025] [:error] [pid 14078:tid 14159] [client 4.241.179.168:6019] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pyrometry.php"] [unique_id "aSXLKdVXYbb0ii_rVoKzGAAAAJY"]
[Tue Nov 25 23:28:41.902056 2025] [:error] [pid 28836:tid 29008] [client 4.241.179.168:5293] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pyrometry.php"] [unique_id "aSXLKZwNRsoxcLQGkTcHBAAAAtI"]
[Tue Nov 25 23:28:42.129365 2025] [:error] [pid 14077:tid 14124] [client 4.241.179.168:6093] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pyrometry.php"] [unique_id "aSXLKhG9n7UHEkwDTyjtBQAAAE4"]
[Tue Nov 25 23:28:42.404799 2025] [:error] [pid 28739:tid 28764] [client 4.241.179.168:6103] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unprecipitously.php"] [unique_id "aSXLKhxGpKmlkG4FexTVPgAAAgI"]
[Tue Nov 25 23:28:42.699534 2025] [:error] [pid 28609:tid 28631] [client 4.241.179.168:6111] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unprecipitously.php"] [unique_id "aSXLKiGGdT-nZJVs3x0PggAAAY0"]
[Tue Nov 25 23:28:42.926384 2025] [:error] [pid 14077:tid 14133] [client 4.241.179.168:6115] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unprecipitously.php"] [unique_id "aSXLKhG9n7UHEkwDTyjtCAAAAFc"]
[Tue Nov 25 23:28:43.154311 2025] [:error] [pid 43843:tid 43858] [client 4.241.179.168:6107] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unprecipitously.php"] [unique_id "aSXLKxhx4v3NUNdMKDMPzAAAAc0"]
[Tue Nov 25 23:28:43.452118 2025] [:error] [pid 14168:tid 14186] [client 4.241.179.168:5257] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbefittingly.php"] [unique_id "aSXLK_R-ZDU0QEgAIIuqKgAAAM8"]
[Tue Nov 25 23:28:43.728646 2025] [:error] [pid 28609:tid 28638] [client 4.241.179.168:6122] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbefittingly.php"] [unique_id "aSXLKyGGdT-nZJVs3x0PgwAAAZQ"]
[Tue Nov 25 23:28:43.961224 2025] [:error] [pid 43981:tid 43992] [client 4.241.179.168:6121] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbefittingly.php"] [unique_id "aSXLKwgZn97m_qh_RaGFbgAAAwk"]
[Tue Nov 25 23:28:44.239613 2025] [:error] [pid 14077:tid 14127] [client 4.241.179.168:6027] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbefittingly.php"] [unique_id "aSXLLBG9n7UHEkwDTyjtDgAAAFE"]
[Tue Nov 25 23:28:44.468063 2025] [:error] [pid 14076:tid 14094] [client 4.241.179.168:6112] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-home.php"] [unique_id "aSXLLHsB4Gz6Qw-pvBtmLAAAAA0"]
[Tue Nov 25 23:28:44.816981 2025] [:error] [pid 28836:tid 28958] [client 4.241.179.168:6102] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-home.php"] [unique_id "aSXLLJwNRsoxcLQGkTcHBwAAAsM"]
[Tue Nov 25 23:28:45.043852 2025] [:error] [pid 28609:tid 28633] [client 4.241.179.168:5281] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-home.php"] [unique_id "aSXLLSGGdT-nZJVs3x0PhgAAAY8"]
[Tue Nov 25 23:28:45.272389 2025] [:error] [pid 28739:tid 28768] [client 4.241.179.168:6042] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-home.php"] [unique_id "aSXLLRxGpKmlkG4FexTVQAAAAgY"]
[Tue Nov 25 23:28:45.502645 2025] [:error] [pid 43843:tid 43862] [client 4.241.179.168:6143] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-securitiy.php"] [unique_id "aSXLLRhx4v3NUNdMKDMPzwAAAdE"]
[Tue Nov 25 23:28:45.788178 2025] [:error] [pid 14078:tid 14146] [client 4.241.179.168:6117] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-securitiy.php"] [unique_id "aSXLLdVXYbb0ii_rVoKzIAAAAIk"]
[Tue Nov 25 23:28:46.018244 2025] [:error] [pid 14077:tid 14131] [client 4.241.179.168:6022] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-securitiy.php"] [unique_id "aSXLLhG9n7UHEkwDTyjtEgAAAFU"]
[Tue Nov 25 23:28:46.249899 2025] [:error] [pid 28609:tid 28624] [client 4.241.179.168:6126] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-securitiy.php"] [unique_id "aSXLLiGGdT-nZJVs3x0PiAAAAYY"]
[Tue Nov 25 23:28:46.487790 2025] [:error] [pid 28609:tid 28642] [client 4.241.179.168:5268] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ac.php"] [unique_id "aSXLLiGGdT-nZJVs3x0PiQAAAZg"]
[Tue Nov 25 23:28:46.721049 2025] [:error] [pid 28609:tid 28641] [client 4.241.179.168:6130] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ac.php"] [unique_id "aSXLLiGGdT-nZJVs3x0PjAAAAZc"]
[Tue Nov 25 23:28:46.948643 2025] [:error] [pid 43843:tid 43864] [client 4.241.179.168:6037] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ac.php"] [unique_id "aSXLLhhx4v3NUNdMKDMP0gAAAdM"]
[Tue Nov 25 23:28:47.177127 2025] [:error] [pid 28739:tid 28773] [client 4.241.179.168:5289] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ac.php"] [unique_id "aSXLLxxGpKmlkG4FexTVQgAAAgs"]
[Tue Nov 25 23:28:47.404050 2025] [:error] [pid 14076:tid 14082] [client 4.241.179.168:6101] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nof.php"] [unique_id "aSXLL3sB4Gz6Qw-pvBtmNAAAAAE"]
[Tue Nov 25 23:28:47.653921 2025] [:error] [pid 14076:tid 14103] [client 4.241.179.168:5294] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nof.php"] [unique_id "aSXLL3sB4Gz6Qw-pvBtmNwAAABY"]
[Tue Nov 25 23:28:47.933130 2025] [:error] [pid 14076:tid 14086] [client 4.241.179.168:6140] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nof.php"] [unique_id "aSXLL3sB4Gz6Qw-pvBtmOwAAAAU"]
[Tue Nov 25 23:28:48.160478 2025] [:error] [pid 14076:tid 14088] [client 4.241.179.168:5251] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nof.php"] [unique_id "aSXLMHsB4Gz6Qw-pvBtmPQAAAAc"]
[Tue Nov 25 23:28:48.456081 2025] [:error] [pid 28739:tid 28779] [client 4.241.179.168:6099] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aSXLMBxGpKmlkG4FexTVSQAAAhE"]
[Tue Nov 25 23:28:48.697519 2025] [:error] [pid 28739:tid 28763] [client 4.241.179.168:6032] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aSXLMBxGpKmlkG4FexTVSgAAAgE"]
[Tue Nov 25 23:28:48.945442 2025] [:error] [pid 14078:tid 14140] [client 4.241.179.168:6134] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aSXLMNVXYbb0ii_rVoKzKgAAAIM"]
[Tue Nov 25 23:28:49.224612 2025] [:error] [pid 2987:tid 2989] [client 4.241.179.168:6139] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aSXLMc-djEt-pTzPxnzp5AAAAUA"]
[Tue Nov 25 23:28:49.502623 2025] [:error] [pid 14076:tid 14104] [client 4.241.179.168:6123] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbalanceable.php"] [unique_id "aSXLMXsB4Gz6Qw-pvBtmQAAAABc"]
[Tue Nov 25 23:28:49.729672 2025] [:error] [pid 28836:tid 28956] [client 4.241.179.168:6092] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbalanceable.php"] [unique_id "aSXLMZwNRsoxcLQGkTcHDAAAAsE"]
[Tue Nov 25 23:28:50.025639 2025] [:error] [pid 43981:tid 44000] [client 4.241.179.168:6080] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbalanceable.php"] [unique_id "aSXLMggZn97m_qh_RaGFdgAAAxE"]
[Tue Nov 25 23:28:50.254684 2025] [:error] [pid 28739:tid 28781] [client 4.241.179.168:5306] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unbalanceable.php"] [unique_id "aSXLMhxGpKmlkG4FexTVUQAAAhM"]
[Tue Nov 25 23:28:50.540397 2025] [:error] [pid 14078:tid 14138] [client 4.241.179.168:6026] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-front.php"] [unique_id "aSXLMtVXYbb0ii_rVoKzLgAAAIE"]
[Tue Nov 25 23:28:50.772833 2025] [:error] [pid 14078:tid 14160] [client 4.241.179.168:6110] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-front.php"] [unique_id "aSXLMtVXYbb0ii_rVoKzLwAAAJc"]
[Tue Nov 25 23:28:51.000444 2025] [:error] [pid 14078:tid 14141] [client 4.241.179.168:5308] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-front.php"] [unique_id "aSXLMtVXYbb0ii_rVoKzMwAAAIQ"]
[Tue Nov 25 23:28:51.296595 2025] [:error] [pid 28739:tid 28773] [client 4.241.179.168:6141] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-front.php"] [unique_id "aSXLMxxGpKmlkG4FexTVVQAAAgs"]
[Tue Nov 25 23:28:51.580181 2025] [:error] [pid 43843:tid 43860] [client 4.241.179.168:6046] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-advaced.php"] [unique_id "aSXLMxhx4v3NUNdMKDMP4AAAAc8"]
[Tue Nov 25 23:28:51.812790 2025] [:error] [pid 28609:tid 28638] [client 4.241.179.168:6020] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-advaced.php"] [unique_id "aSXLMyGGdT-nZJVs3x0PkgAAAZQ"]
[Tue Nov 25 23:28:52.108902 2025] [:error] [pid 2987:tid 3000] [client 4.241.179.168:6060] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-advaced.php"] [unique_id "aSXLNM-djEt-pTzPxnzp5QAAAUs"]
[Tue Nov 25 23:28:52.335684 2025] [:error] [pid 2987:tid 2990] [client 4.241.179.168:6106] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-advaced.php"] [unique_id "aSXLNM-djEt-pTzPxnzp5gAAAUE"]
[Tue Nov 25 23:28:52.609632 2025] [:error] [pid 14077:tid 14128] [client 4.241.179.168:5311] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/poliomyelopathy.php"] [unique_id "aSXLNBG9n7UHEkwDTyjtHQAAAFI"]
[Tue Nov 25 23:28:52.884445 2025] [:error] [pid 14077:tid 14121] [client 4.241.179.168:6104] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/poliomyelopathy.php"] [unique_id "aSXLNBG9n7UHEkwDTyjtHwAAAEs"]
[Tue Nov 25 23:28:53.111842 2025] [:error] [pid 14078:tid 14140] [client 4.241.179.168:5254] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/poliomyelopathy.php"] [unique_id "aSXLNdVXYbb0ii_rVoKzNgAAAIM"]
[Tue Nov 25 23:28:53.340399 2025] [:error] [pid 14078:tid 14143] [client 4.241.179.168:6035] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/poliomyelopathy.php"] [unique_id "aSXLNdVXYbb0ii_rVoKzNwAAAIY"]
[Tue Nov 25 23:28:53.569907 2025] [:error] [pid 14078:tid 14157] [client 4.241.179.168:6030] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "aSXLNdVXYbb0ii_rVoKzOAAAAJQ"]
[Tue Nov 25 23:28:53.840614 2025] [:error] [pid 14078:tid 14148] [client 4.241.179.168:6073] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "aSXLNdVXYbb0ii_rVoKzPAAAAIs"]
[Tue Nov 25 23:28:54.072182 2025] [:error] [pid 28836:tid 28969] [client 4.241.179.168:5249] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "aSXLNpwNRsoxcLQGkTcHEQAAAs4"]
[Tue Nov 25 23:28:54.345453 2025] [:error] [pid 14078:tid 14160] [client 4.241.179.168:6125] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "aSXLNtVXYbb0ii_rVoKzPgAAAJc"]
[Tue Nov 25 23:55:50.431132 2025] [:error] [pid 28739:tid 28775] [client 13.74.149.244:2673] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aSXRhhxGpKmlkG4FexTfpQAAAg0"]
[Tue Nov 25 23:55:50.945716 2025] [:error] [pid 14168:tid 14174] [client 13.74.149.244:11052] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aSXRhvR-ZDU0QEgAIIuvlwAAAMM"]
[Tue Nov 25 23:55:51.455038 2025] [:error] [pid 14077:tid 14117] [client 13.74.149.244:1728] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aSXRhxG9n7UHEkwDTyjzygAAAEc"]
[Tue Nov 25 23:55:51.956177 2025] [:error] [pid 14076:tid 14093] [client 13.74.149.244:5889] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aSXRh3sB4Gz6Qw-pvBtuCwAAAAw"]
[Tue Nov 25 23:55:52.462166 2025] [:error] [pid 14077:tid 14124] [client 13.74.149.244:4267] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d2.php"] [unique_id "aSXRiBG9n7UHEkwDTyjzzAAAAE4"]
[Tue Nov 25 23:55:52.967646 2025] [:error] [pid 14077:tid 14111] [client 13.74.149.244:7552] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d2.php"] [unique_id "aSXRiBG9n7UHEkwDTyjzzgAAAEE"]
[Tue Nov 25 23:55:53.471017 2025] [:error] [pid 28739:tid 28771] [client 13.74.149.244:7594] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d2.php"] [unique_id "aSXRiRxGpKmlkG4FexTfqQAAAgk"]
[Tue Nov 25 23:55:53.977051 2025] [:error] [pid 2987:tid 3010] [client 13.74.149.244:4785] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d2.php"] [unique_id "aSXRic-djEt-pTzPxnzwgQAAAVU"]
[Tue Nov 25 23:55:54.479919 2025] [:error] [pid 43843:tid 43867] [client 13.74.149.244:5922] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/snus.php"] [unique_id "aSXRihhx4v3NUNdMKDMV3AAAAdY"]
[Tue Nov 25 23:55:54.982371 2025] [:error] [pid 14078:tid 14138] [client 13.74.149.244:10285] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/snus.php"] [unique_id "aSXRitVXYbb0ii_rVoK-7gAAAIE"]
[Tue Nov 25 23:55:55.486737 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:1131] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/snus.php"] [unique_id "aSXRixG9n7UHEkwDTyjz1AAAAE8"]
[Tue Nov 25 23:55:55.988965 2025] [:error] [pid 28739:tid 28769] [client 13.74.149.244:1512] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/snus.php"] [unique_id "aSXRixxGpKmlkG4FexTfrQAAAgc"]
[Tue Nov 25 23:55:56.496870 2025] [:error] [pid 14078:tid 14161] [client 13.74.149.244:5949] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aSXRjNVXYbb0ii_rVoK--AAAAJg"]
[Tue Nov 25 23:55:57.005335 2025] [:error] [pid 14076:tid 14097] [client 13.74.149.244:1105] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aSXRjXsB4Gz6Qw-pvBtuIQAAABA"]
[Tue Nov 25 23:55:57.506684 2025] [:error] [pid 28739:tid 28779] [client 13.74.149.244:9861] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aSXRjRxGpKmlkG4FexTfrgAAAhE"]
[Tue Nov 25 23:55:58.011120 2025] [:error] [pid 43843:tid 43845] [client 13.74.149.244:4764] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aSXRjhhx4v3NUNdMKDMV3QAAAcA"]
[Tue Nov 25 23:55:58.514536 2025] [:error] [pid 28609:tid 28632] [client 13.74.149.244:4760] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disaos.php"] [unique_id "aSXRjiGGdT-nZJVs3x0XPwAAAY4"]
[Tue Nov 25 23:55:59.016965 2025] [:error] [pid 28609:tid 28642] [client 13.74.149.244:1505] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disaos.php"] [unique_id "aSXRjyGGdT-nZJVs3x0XQgAAAZg"]
[Tue Nov 25 23:55:59.519545 2025] [:error] [pid 28739:tid 28780] [client 13.74.149.244:5211] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disaos.php"] [unique_id "aSXRjxxGpKmlkG4FexTfswAAAhI"]
[Tue Nov 25 23:56:00.019003 2025] [:error] [pid 14076:tid 14092] [client 13.74.149.244:1370] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/disaos.php"] [unique_id "aSXRkHsB4Gz6Qw-pvBtuKQAAAAs"]
[Tue Nov 25 23:56:00.519691 2025] [:error] [pid 28739:tid 28770] [client 13.74.149.244:4248] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "aSXRkBxGpKmlkG4FexTftwAAAgg"]
[Tue Nov 25 23:56:01.020945 2025] [:error] [pid 28739:tid 28784] [client 13.74.149.244:10063] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "aSXRkRxGpKmlkG4FexTfuAAAAhY"]
[Tue Nov 25 23:56:01.521493 2025] [:error] [pid 28836:tid 29012] [client 13.74.149.244:7558] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "aSXRkZwNRsoxcLQGkTcNdwAAAtY"]
[Tue Nov 25 23:56:02.024257 2025] [:error] [pid 28609:tid 28629] [client 13.74.149.244:8272] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "aSXRkiGGdT-nZJVs3x0XRgAAAYs"]
[Tue Nov 25 23:56:02.524644 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:4224] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww4.php"] [unique_id "aSXRktVXYbb0ii_rVoK_DwAAAJQ"]
[Tue Nov 25 23:56:03.023871 2025] [:error] [pid 28836:tid 28963] [client 13.74.149.244:8305] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww4.php"] [unique_id "aSXRk5wNRsoxcLQGkTcNeQAAAsg"]
[Tue Nov 25 23:56:03.525443 2025] [:error] [pid 28739:tid 28763] [client 13.74.149.244:2679] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww4.php"] [unique_id "aSXRkxxGpKmlkG4FexTfvQAAAgE"]
[Tue Nov 25 23:56:04.026701 2025] [:error] [pid 28609:tid 28636] [client 13.74.149.244:7566] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww4.php"] [unique_id "aSXRlCGGdT-nZJVs3x0XSwAAAZI"]
[Tue Nov 25 23:56:04.526292 2025] [:error] [pid 28609:tid 28627] [client 13.74.149.244:8261] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "aSXRlCGGdT-nZJVs3x0XUAAAAYk"]
[Tue Nov 25 23:56:05.026013 2025] [:error] [pid 14076:tid 14098] [client 13.74.149.244:2683] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "aSXRlXsB4Gz6Qw-pvBtuKwAAABE"]
[Tue Nov 25 23:56:05.527666 2025] [:error] [pid 14076:tid 14087] [client 13.74.149.244:12093] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "aSXRlXsB4Gz6Qw-pvBtuLAAAAAY"]
[Tue Nov 25 23:56:06.028292 2025] [:error] [pid 2987:tid 2995] [client 13.74.149.244:12065] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "aSXRls-djEt-pTzPxnzwjgAAAUY"]
[Tue Nov 25 23:56:06.527246 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:12072] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aSXRltVXYbb0ii_rVoK_HgAAAJQ"]
[Tue Nov 25 23:56:07.025601 2025] [:error] [pid 14076:tid 14082] [client 13.74.149.244:13946] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aSXRl3sB4Gz6Qw-pvBtuLQAAAAE"]
[Tue Nov 25 23:56:07.525603 2025] [:error] [pid 14076:tid 14081] [client 13.74.149.244:9877] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aSXRl3sB4Gz6Qw-pvBtuMAAAAAA"]
[Tue Nov 25 23:56:08.026632 2025] [:error] [pid 28739:tid 28776] [client 13.74.149.244:1501] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aSXRmBxGpKmlkG4FexTfxwAAAg4"]
[Tue Nov 25 23:56:08.529086 2025] [:error] [pid 14078:tid 14153] [client 13.74.149.244:1518] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx1.php"] [unique_id "aSXRmNVXYbb0ii_rVoK_JgAAAJA"]
[Tue Nov 25 23:56:09.029473 2025] [:error] [pid 28609:tid 28626] [client 13.74.149.244:10098] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx1.php"] [unique_id "aSXRmSGGdT-nZJVs3x0XWgAAAYg"]
[Tue Nov 25 23:56:09.534960 2025] [:error] [pid 28739:tid 28767] [client 13.74.149.244:1402] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx1.php"] [unique_id "aSXRmRxGpKmlkG4FexTfyAAAAgU"]
[Tue Nov 25 23:56:10.037502 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:1345] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx1.php"] [unique_id "aSXRmtVXYbb0ii_rVoK_LwAAAJQ"]
[Tue Nov 25 23:56:10.541780 2025] [:error] [pid 14078:tid 14156] [client 13.74.149.244:10039] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ii.php"] [unique_id "aSXRmtVXYbb0ii_rVoK_NAAAAJM"]
[Tue Nov 25 23:56:11.044459 2025] [:error] [pid 14078:tid 14148] [client 13.74.149.244:7615] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ii.php"] [unique_id "aSXRm9VXYbb0ii_rVoK_NwAAAIs"]
[Tue Nov 25 23:56:11.546030 2025] [:error] [pid 28836:tid 28955] [client 13.74.149.244:1367] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ii.php"] [unique_id "aSXRm5wNRsoxcLQGkTcNgAAAAsA"]
[Tue Nov 25 23:56:12.048746 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:8294] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ii.php"] [unique_id "aSXRnNVXYbb0ii_rVoK_QgAAAJE"]
[Tue Nov 25 23:56:12.552684 2025] [:error] [pid 28836:tid 28986] [client 13.74.149.244:13940] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kr.php"] [unique_id "aSXRnJwNRsoxcLQGkTcNgwAAAs8"]
[Tue Nov 25 23:56:13.055216 2025] [:error] [pid 28836:tid 28965] [client 13.74.149.244:12067] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kr.php"] [unique_id "aSXRnZwNRsoxcLQGkTcNhgAAAso"]
[Tue Nov 25 23:56:13.561564 2025] [:error] [pid 43843:tid 43855] [client 13.74.149.244:12084] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kr.php"] [unique_id "aSXRnRhx4v3NUNdMKDMV5wAAAco"]
[Tue Nov 25 23:56:14.064309 2025] [:error] [pid 28739:tid 28775] [client 13.74.149.244:1446] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kr.php"] [unique_id "aSXRnhxGpKmlkG4FexTf0AAAAg0"]
[Tue Nov 25 23:56:14.567506 2025] [:error] [pid 14168:tid 14178] [client 13.74.149.244:7590] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/18299.php"] [unique_id "aSXRnvR-ZDU0QEgAIIuvqQAAAMc"]
[Tue Nov 25 23:56:15.068392 2025] [:error] [pid 14168:tid 14183] [client 13.74.149.244:9826] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/18299.php"] [unique_id "aSXRn_R-ZDU0QEgAIIuvqgAAAMw"]
[Tue Nov 25 23:56:15.569859 2025] [:error] [pid 28739:tid 28764] [client 13.74.149.244:10087] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/18299.php"] [unique_id "aSXRnxxGpKmlkG4FexTf0gAAAgI"]
[Tue Nov 25 23:56:16.074683 2025] [:error] [pid 28739:tid 28767] [client 13.74.149.244:1441] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/18299.php"] [unique_id "aSXRoBxGpKmlkG4FexTf1gAAAgU"]
[Tue Nov 25 23:56:16.575828 2025] [:error] [pid 14076:tid 14098] [client 13.74.149.244:1440] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aSXRoHsB4Gz6Qw-pvBtuNwAAABE"]
[Tue Nov 25 23:56:17.078299 2025] [:error] [pid 14168:tid 14188] [client 13.74.149.244:1813] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aSXRofR-ZDU0QEgAIIuvqwAAANE"]
[Tue Nov 25 23:56:17.577469 2025] [:error] [pid 14078:tid 14150] [client 13.74.149.244:1805] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aSXRodVXYbb0ii_rVoK_VwAAAI0"]
[Tue Nov 25 23:56:18.078884 2025] [:error] [pid 43981:tid 43984] [client 13.74.149.244:2465] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aSXRoggZn97m_qh_RaGL2gAAAwE"]
[Tue Nov 25 23:56:18.579607 2025] [:error] [pid 14168:tid 14184] [client 13.74.149.244:4154] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chati.php"] [unique_id "aSXRovR-ZDU0QEgAIIuvrQAAAM0"]
[Tue Nov 25 23:56:19.092668 2025] [:error] [pid 43981:tid 43985] [client 13.74.149.244:13240] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chati.php"] [unique_id "aSXRowgZn97m_qh_RaGL3QAAAwI"]
[Tue Nov 25 23:56:19.603124 2025] [:error] [pid 14077:tid 14121] [client 13.74.149.244:13199] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chati.php"] [unique_id "aSXRoxG9n7UHEkwDTyj0BQAAAEs"]
[Tue Nov 25 23:56:20.108804 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:9822] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chati.php"] [unique_id "aSXRpNVXYbb0ii_rVoK_XwAAAJE"]
[Tue Nov 25 23:56:20.617595 2025] [:error] [pid 28609:tid 28618] [client 13.74.149.244:2485] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content-over.php"] [unique_id "aSXRpCGGdT-nZJVs3x0XaQAAAYA"]
[Tue Nov 25 23:56:21.119833 2025] [:error] [pid 14076:tid 14083] [client 13.74.149.244:8848] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content-over.php"] [unique_id "aSXRpXsB4Gz6Qw-pvBtuQgAAAAI"]
[Tue Nov 25 23:56:21.629068 2025] [:error] [pid 28739:tid 28775] [client 13.74.149.244:8449] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content-over.php"] [unique_id "aSXRpRxGpKmlkG4FexTf4QAAAg0"]
[Tue Nov 25 23:56:22.131099 2025] [:error] [pid 14077:tid 14129] [client 13.74.149.244:8161] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content-over.php"] [unique_id "aSXRphG9n7UHEkwDTyj0CQAAAFM"]
[Tue Nov 25 23:56:22.633645 2025] [:error] [pid 43981:tid 44002] [client 13.74.149.244:8858] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "aSXRpggZn97m_qh_RaGL3gAAAxM"]
[Tue Nov 25 23:56:23.135360 2025] [:error] [pid 14078:tid 14161] [client 13.74.149.244:11801] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "aSXRp9VXYbb0ii_rVoK_aAAAAJg"]
[Tue Nov 25 23:56:23.637812 2025] [:error] [pid 14076:tid 14092] [client 13.74.149.244:8499] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "aSXRp3sB4Gz6Qw-pvBtuRgAAAAs"]
[Tue Nov 25 23:56:24.142443 2025] [:error] [pid 14077:tid 14111] [client 13.74.149.244:11827] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "aSXRqBG9n7UHEkwDTyj0DAAAAEE"]
[Tue Nov 25 23:56:24.645000 2025] [:error] [pid 14077:tid 14116] [client 13.74.149.244:12270] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/naxc.php"] [unique_id "aSXRqBG9n7UHEkwDTyj0DgAAAEY"]
[Tue Nov 25 23:56:25.148693 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:8849] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/naxc.php"] [unique_id "aSXRqRG9n7UHEkwDTyj0DwAAAE8"]
[Tue Nov 25 23:56:25.649567 2025] [:error] [pid 2987:tid 3012] [client 13.74.149.244:8163] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/naxc.php"] [unique_id "aSXRqc-djEt-pTzPxnzwoAAAAVc"]
[Tue Nov 25 23:56:26.153636 2025] [:error] [pid 2987:tid 3001] [client 13.74.149.244:11545] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/naxc.php"] [unique_id "aSXRqs-djEt-pTzPxnzwoQAAAUw"]
[Tue Nov 25 23:56:26.654358 2025] [:error] [pid 28609:tid 28630] [client 13.74.149.244:2397] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aSXRqiGGdT-nZJVs3x0XcAAAAYw"]
[Tue Nov 25 23:56:27.159654 2025] [:error] [pid 28836:tid 28965] [client 13.74.149.244:12281] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aSXRq5wNRsoxcLQGkTcNjgAAAso"]
[Tue Nov 25 23:56:27.659328 2025] [:error] [pid 14076:tid 14094] [client 13.74.149.244:2194] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aSXRq3sB4Gz6Qw-pvBtuSQAAAA0"]
[Tue Nov 25 23:56:28.160653 2025] [:error] [pid 14078:tid 14149] [client 13.74.149.244:6127] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aSXRrNVXYbb0ii_rVoK_eAAAAIw"]
[Tue Nov 25 23:56:28.662648 2025] [:error] [pid 14078:tid 14144] [client 13.74.149.244:6606] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "aSXRrNVXYbb0ii_rVoK_egAAAIc"]
[Tue Nov 25 23:56:29.166465 2025] [:error] [pid 28836:tid 28964] [client 13.74.149.244:2185] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "aSXRrZwNRsoxcLQGkTcNkQAAAsk"]
[Tue Nov 25 23:56:29.667656 2025] [:error] [pid 28609:tid 28635] [client 13.74.149.244:6091] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "aSXRrSGGdT-nZJVs3x0XdAAAAZE"]
[Tue Nov 25 23:56:30.170617 2025] [:error] [pid 14078:tid 14148] [client 13.74.149.244:2841] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "aSXRrtVXYbb0ii_rVoK_fwAAAIs"]
[Tue Nov 25 23:56:30.671793 2025] [:error] [pid 28836:tid 28957] [client 13.74.149.244:8962] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rsjlrria.php"] [unique_id "aSXRrpwNRsoxcLQGkTcNlAAAAsI"]
[Tue Nov 25 23:56:31.183389 2025] [:error] [pid 14077:tid 14123] [client 13.74.149.244:7769] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rsjlrria.php"] [unique_id "aSXRrxG9n7UHEkwDTyj0EwAAAE0"]
[Tue Nov 25 23:56:31.685650 2025] [:error] [pid 2987:tid 3008] [client 13.74.149.244:7393] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rsjlrria.php"] [unique_id "aSXRr8-djEt-pTzPxnzwqAAAAVM"]
[Tue Nov 25 23:56:32.188645 2025] [:error] [pid 28836:tid 29009] [client 13.74.149.244:8599] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rsjlrria.php"] [unique_id "aSXRsJwNRsoxcLQGkTcNlgAAAtM"]
[Tue Nov 25 23:56:32.689115 2025] [:error] [pid 14168:tid 14191] [client 13.74.149.244:1679] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSXRsPR-ZDU0QEgAIIuvsgAAANQ"]
[Tue Nov 25 23:56:33.205045 2025] [:error] [pid 28609:tid 28625] [client 13.74.149.244:13337] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "aSXRsSGGdT-nZJVs3x0XeAAAAYc"]
[Tue Nov 25 23:56:33.704522 2025] [:error] [pid 43843:tid 43849] [client 13.74.149.244:8999] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "aSXRsRhx4v3NUNdMKDMV-gAAAcQ"]
[Tue Nov 25 23:56:34.208724 2025] [:error] [pid 28836:tid 28956] [client 13.74.149.244:9249] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "aSXRspwNRsoxcLQGkTcNmgAAAsE"]
[Tue Nov 25 23:56:34.709996 2025] [:error] [pid 14168:tid 14177] [client 13.74.149.244:13541] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/gec.php"] [unique_id "aSXRsvR-ZDU0QEgAIIuvswAAAMY"]
[Tue Nov 25 23:56:35.211215 2025] [:error] [pid 28739:tid 28765] [client 13.74.149.244:9009] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/gec.php"] [unique_id "aSXRsxxGpKmlkG4FexTf7gAAAgM"]
[Tue Nov 25 23:56:35.711128 2025] [:error] [pid 28609:tid 28624] [client 13.74.149.244:13528] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/gec.php"] [unique_id "aSXRsyGGdT-nZJVs3x0XgAAAAYY"]
[Tue Nov 25 23:56:36.212789 2025] [:error] [pid 28739:tid 28767] [client 13.74.149.244:4322] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/gec.php"] [unique_id "aSXRtBxGpKmlkG4FexTf8wAAAgU"]
[Tue Nov 25 23:56:36.712559 2025] [:error] [pid 14078:tid 14151] [client 13.74.149.244:7689] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nfu.php"] [unique_id "aSXRtNVXYbb0ii_rVoK_igAAAI4"]
[Tue Nov 25 23:56:37.221618 2025] [:error] [pid 28609:tid 28640] [client 13.74.149.244:4296] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nfu.php"] [unique_id "aSXRtSGGdT-nZJVs3x0XiAAAAZY"]
[Tue Nov 25 23:56:37.724134 2025] [:error] [pid 28836:tid 28968] [client 13.74.149.244:13295] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nfu.php"] [unique_id "aSXRtZwNRsoxcLQGkTcNoQAAAs0"]
[Tue Nov 25 23:56:38.233096 2025] [:error] [pid 14168:tid 14173] [client 13.74.149.244:13340] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nfu.php"] [unique_id "aSXRtvR-ZDU0QEgAIIuvtQAAAMI"]
[Tue Nov 25 23:56:38.733865 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:6852] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/nfu.php"] [unique_id "aSXRthG9n7UHEkwDTyj0GwAAAE8"]
[Tue Nov 25 23:56:39.243633 2025] [:error] [pid 14077:tid 14126] [client 13.74.149.244:13365] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/nfu.php"] [unique_id "aSXRtxG9n7UHEkwDTyj0HAAAAFA"]
[Tue Nov 25 23:56:39.745515 2025] [:error] [pid 14077:tid 14127] [client 13.74.149.244:10906] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/nfu.php"] [unique_id "aSXRtxG9n7UHEkwDTyj0HgAAAFE"]
[Tue Nov 25 23:56:40.246924 2025] [:error] [pid 43981:tid 43988] [client 13.74.149.244:10936] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/nfu.php"] [unique_id "aSXRuAgZn97m_qh_RaGL8AAAAwU"]
[Tue Nov 25 23:56:40.748865 2025] [:error] [pid 14078:tid 14152] [client 13.74.149.244:4354] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl8.php"] [unique_id "aSXRuNVXYbb0ii_rVoK_mAAAAI8"]
[Tue Nov 25 23:56:41.251558 2025] [:error] [pid 43843:tid 43858] [client 13.74.149.244:9048] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl8.php"] [unique_id "aSXRuRhx4v3NUNdMKDMWEgAAAc0"]
[Tue Nov 25 23:56:41.751975 2025] [:error] [pid 14077:tid 14133] [client 13.74.149.244:9062] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl8.php"] [unique_id "aSXRuRG9n7UHEkwDTyj0IQAAAFc"]
[Tue Nov 25 23:56:42.255060 2025] [:error] [pid 28739:tid 28780] [client 13.74.149.244:2339] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl8.php"] [unique_id "aSXRuhxGpKmlkG4FexTf_QAAAhI"]
[Tue Nov 25 23:56:42.758836 2025] [:error] [pid 28836:tid 28960] [client 13.74.149.244:10934] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl6.php"] [unique_id "aSXRupwNRsoxcLQGkTcNqAAAAsU"]
[Tue Nov 25 23:56:43.260982 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:5525] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl6.php"] [unique_id "aSXRu9VXYbb0ii_rVoK_mgAAAJQ"]
[Tue Nov 25 23:56:43.762262 2025] [:error] [pid 28836:tid 29014] [client 13.74.149.244:7720] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl6.php"] [unique_id "aSXRu5wNRsoxcLQGkTcNqgAAAtg"]
[Tue Nov 25 23:56:44.265822 2025] [:error] [pid 14076:tid 14099] [client 13.74.149.244:12369] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl6.php"] [unique_id "aSXRvHsB4Gz6Qw-pvBtuWwAAABI"]
[Tue Nov 25 23:56:44.766813 2025] [:error] [pid 2987:tid 3000] [client 13.74.149.244:12375] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aSXRvM-djEt-pTzPxnzwwAAAAUs"]
[Tue Nov 25 23:56:45.269288 2025] [:error] [pid 14076:tid 14081] [client 13.74.149.244:10904] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aSXRvXsB4Gz6Qw-pvBtuXwAAAAA"]
[Tue Nov 25 23:56:45.773532 2025] [:error] [pid 28739:tid 28772] [client 13.74.149.244:5618] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aSXRvRxGpKmlkG4FexTgCAAAAgo"]
[Tue Nov 25 23:56:46.288216 2025] [:error] [pid 28739:tid 28766] [client 13.74.149.244:7007] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aSXRvhxGpKmlkG4FexTgCwAAAgQ"]
[Tue Nov 25 23:56:46.795101 2025] [:error] [pid 28609:tid 28636] [client 13.74.149.244:7899] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-706.php"] [unique_id "aSXRviGGdT-nZJVs3x0XjQAAAZI"]
[Tue Nov 25 23:56:47.301043 2025] [:error] [pid 28739:tid 28762] [client 13.74.149.244:7811] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-706.php"] [unique_id "aSXRvxxGpKmlkG4FexTgDQAAAgA"]
[Tue Nov 25 23:56:47.801608 2025] [:error] [pid 14078:tid 14160] [client 13.74.149.244:10893] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-706.php"] [unique_id "aSXRv9VXYbb0ii_rVoK_oQAAAJc"]
[Tue Nov 25 23:56:48.304837 2025] [:error] [pid 14078:tid 14138] [client 13.74.149.244:8565] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-706.php"] [unique_id "aSXRwNVXYbb0ii_rVoK_owAAAIE"]
[Tue Nov 25 23:56:48.805795 2025] [:error] [pid 14077:tid 14119] [client 13.74.149.244:7035] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aSXRwBG9n7UHEkwDTyj0KwAAAEk"]
[Tue Nov 25 23:57:02.459861 2025] [:error] [pid 28836:tid 28969] [client 13.74.149.244:3065] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aSXRzpwNRsoxcLQGkTcNyAAAAs4"]
[Tue Nov 25 23:57:02.967373 2025] [:error] [pid 14168:tid 14174] [client 13.74.149.244:6512] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aSXRzvR-ZDU0QEgAIIuv0AAAAMM"]
[Tue Nov 25 23:57:03.470182 2025] [:error] [pid 14168:tid 14194] [client 13.74.149.244:12453] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aSXRz_R-ZDU0QEgAIIuv0QAAANc"]
[Tue Nov 25 23:57:03.975499 2025] [:error] [pid 28836:tid 28958] [client 13.74.149.244:5387] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aSXRz5wNRsoxcLQGkTcNygAAAsM"]
[Tue Nov 25 23:57:04.481313 2025] [:error] [pid 28609:tid 28630] [client 13.74.149.244:12441] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/upload/css.php"] [unique_id "aSXR0CGGdT-nZJVs3x0XpQAAAYw"]
[Tue Nov 25 23:57:04.991056 2025] [:error] [pid 14076:tid 14094] [client 13.74.149.244:3773] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/upload/css.php"] [unique_id "aSXR0HsB4Gz6Qw-pvBtugwAAAA0"]
[Tue Nov 25 23:57:05.494917 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:1867] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/upload/css.php"] [unique_id "aSXR0dVXYbb0ii_rVoK_wAAAAJQ"]
[Tue Nov 25 23:57:05.997836 2025] [:error] [pid 14078:tid 14158] [client 13.74.149.244:3750] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/upload/css.php"] [unique_id "aSXR0dVXYbb0ii_rVoK_wQAAAJU"]
[Tue Nov 25 23:57:06.498272 2025] [:error] [pid 14076:tid 14104] [client 13.74.149.244:5400] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aSXR0nsB4Gz6Qw-pvBtuhQAAABc"]
[Tue Nov 25 23:57:07.004896 2025] [:error] [pid 14078:tid 14159] [client 13.74.149.244:6956] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aSXR09VXYbb0ii_rVoK_xgAAAJY"]
[Tue Nov 25 23:57:07.507394 2025] [:error] [pid 14076:tid 14085] [client 13.74.149.244:1863] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aSXR03sB4Gz6Qw-pvBtuhgAAAAQ"]
[Tue Nov 25 23:57:08.012610 2025] [:error] [pid 28609:tid 28629] [client 13.74.149.244:6940] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aSXR1CGGdT-nZJVs3x0XrQAAAYs"]
[Tue Nov 25 23:57:08.520541 2025] [:error] [pid 14078:tid 14137] [client 13.74.149.244:1909] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aSXR1NVXYbb0ii_rVoK_ygAAAIA"]
[Tue Nov 25 23:57:09.038775 2025] [:error] [pid 28836:tid 29009] [client 13.74.149.244:6422] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aSXR1ZwNRsoxcLQGkTcN1wAAAtM"]
[Tue Nov 25 23:57:09.541707 2025] [:error] [pid 14076:tid 14091] [client 13.74.149.244:12449] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aSXR1XsB4Gz6Qw-pvBtuiQAAAAo"]
[Tue Nov 25 23:57:10.045995 2025] [:error] [pid 14076:tid 14099] [client 13.74.149.244:5882] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aSXR1nsB4Gz6Qw-pvBtujAAAABI"]
[Tue Nov 25 23:57:10.548736 2025] [:error] [pid 14078:tid 14152] [client 13.74.149.244:3735] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aSXR1tVXYbb0ii_rVoK_zQAAAI8"]
[Tue Nov 25 23:57:11.053590 2025] [:error] [pid 43981:tid 44000] [client 13.74.149.244:5850] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aSXR1wgZn97m_qh_RaGMEAAAAxE"]
[Tue Nov 25 23:57:11.570958 2025] [:error] [pid 28836:tid 29010] [client 13.74.149.244:5829] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aSXR15wNRsoxcLQGkTcN3wAAAtQ"]
[Tue Nov 25 23:57:12.073647 2025] [:error] [pid 28836:tid 28963] [client 13.74.149.244:3311] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aSXR2JwNRsoxcLQGkTcN4AAAAsg"]
[Tue Nov 25 23:57:12.576467 2025] [:error] [pid 14076:tid 14082] [client 13.74.149.244:9397] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aSXR2HsB4Gz6Qw-pvBtukQAAAAE"]
[Tue Nov 25 23:57:13.086538 2025] [:error] [pid 14076:tid 14083] [client 13.74.149.244:8746] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aSXR2XsB4Gz6Qw-pvBtukwAAAAI"]
[Tue Nov 25 23:57:13.594165 2025] [:error] [pid 28739:tid 28771] [client 13.74.149.244:3904] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aSXR2RxGpKmlkG4FexTgZAAAAgk"]
[Tue Nov 25 23:57:14.100923 2025] [:error] [pid 14168:tid 14194] [client 13.74.149.244:7463] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aSXR2vR-ZDU0QEgAIIuv3wAAANc"]
[Tue Nov 25 23:57:14.621943 2025] [:error] [pid 14078:tid 14158] [client 13.74.149.244:5501] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r.php"] [unique_id "aSXR2tVXYbb0ii_rVoK_1gAAAJU"]
[Tue Nov 25 23:57:15.128003 2025] [:error] [pid 43843:tid 43854] [client 13.74.149.244:6945] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r.php"] [unique_id "aSXR2xhx4v3NUNdMKDMWNAAAAck"]
[Tue Nov 25 23:57:15.636231 2025] [:error] [pid 43843:tid 43862] [client 13.74.149.244:6412] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r.php"] [unique_id "aSXR2xhx4v3NUNdMKDMWNgAAAdE"]
[Tue Nov 25 23:57:16.138116 2025] [:error] [pid 43843:tid 43847] [client 13.74.149.244:1308] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r.php"] [unique_id "aSXR3Bhx4v3NUNdMKDMWNwAAAcI"]
[Tue Nov 25 23:57:16.645542 2025] [:error] [pid 28739:tid 28780] [client 13.74.149.244:3770] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "aSXR3BxGpKmlkG4FexTgZwAAAhI"]
[Tue Nov 25 23:57:17.164155 2025] [:error] [pid 14077:tid 14130] [client 13.74.149.244:6932] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "aSXR3RG9n7UHEkwDTyj0SwAAAFQ"]
[Tue Nov 25 23:57:17.674258 2025] [:error] [pid 14078:tid 14139] [client 13.74.149.244:1328] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "aSXR3dVXYbb0ii_rVoK_2QAAAII"]
[Tue Nov 25 23:57:18.174646 2025] [:error] [pid 28739:tid 28768] [client 13.74.149.244:5429] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "aSXR3hxGpKmlkG4FexTgbQAAAgY"]
[Tue Nov 25 23:57:18.688039 2025] [:error] [pid 43981:tid 44003] [client 13.74.149.244:12433] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-22.php"] [unique_id "aSXR3ggZn97m_qh_RaGMFwAAAxQ"]
[Tue Nov 25 23:57:19.193169 2025] [:error] [pid 14076:tid 14096] [client 13.74.149.244:3909] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-22.php"] [unique_id "aSXR33sB4Gz6Qw-pvBtulwAAAA8"]
[Tue Nov 25 23:57:19.692867 2025] [:error] [pid 28739:tid 28781] [client 13.74.149.244:5428] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-22.php"] [unique_id "aSXR3xxGpKmlkG4FexTgbgAAAhM"]
[Tue Nov 25 23:57:20.195445 2025] [:error] [pid 43981:tid 43987] [client 13.74.149.244:6160] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-22.php"] [unique_id "aSXR4AgZn97m_qh_RaGMGgAAAwQ"]
[Tue Nov 25 23:57:20.706348 2025] [:error] [pid 14077:tid 14124] [client 13.74.149.244:5412] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aSXR4BG9n7UHEkwDTyj0TwAAAE4"]
[Tue Nov 25 23:57:21.213497 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:1298] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aSXR4RG9n7UHEkwDTyj0UAAAAE8"]
[Tue Nov 25 23:57:21.715920 2025] [:error] [pid 28739:tid 28771] [client 13.74.149.244:4080] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aSXR4RxGpKmlkG4FexTgdAAAAgk"]
[Tue Nov 25 23:57:22.232722 2025] [:error] [pid 28609:tid 28625] [client 13.74.149.244:7476] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aSXR4iGGdT-nZJVs3x0XuAAAAYc"]
[Tue Nov 25 23:57:22.738781 2025] [:error] [pid 43843:tid 43869] [client 13.74.149.244:8755] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aSXR4hhx4v3NUNdMKDMWPAAAAdg"]
[Tue Nov 25 23:57:23.244039 2025] [:error] [pid 28739:tid 28782] [client 13.74.149.244:5433] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aSXR4xxGpKmlkG4FexTgdwAAAhQ"]
[Tue Nov 25 23:57:23.746081 2025] [:error] [pid 14077:tid 14132] [client 13.74.149.244:1329] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aSXR4xG9n7UHEkwDTyj0VAAAAFY"]
[Tue Nov 25 23:57:24.254664 2025] [:error] [pid 43843:tid 43851] [client 13.74.149.244:2720] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aSXR5Bhx4v3NUNdMKDMWPQAAAcY"]
[Tue Nov 25 23:57:24.762785 2025] [:error] [pid 28739:tid 28769] [client 13.74.149.244:3951] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "aSXR5BxGpKmlkG4FexTgeAAAAgc"]
[Tue Nov 25 23:57:25.278712 2025] [:error] [pid 28609:tid 28622] [client 13.74.149.244:7428] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "aSXR5SGGdT-nZJVs3x0XugAAAYQ"]
[Tue Nov 25 23:57:25.791023 2025] [:error] [pid 28739:tid 28784] [client 13.74.149.244:12474] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "aSXR5RxGpKmlkG4FexTgegAAAhY"]
[Tue Nov 25 23:57:26.303901 2025] [:error] [pid 14077:tid 14111] [client 13.74.149.244:8715] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "aSXR5hG9n7UHEkwDTyj0WAAAAEE"]
[Tue Nov 25 23:57:26.811564 2025] [:error] [pid 43843:tid 43859] [client 13.74.149.244:5132] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aSXR5hhx4v3NUNdMKDMWQQAAAc4"]
[Tue Nov 25 23:57:27.330200 2025] [:error] [pid 14078:tid 14139] [client 13.74.149.244:3944] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aSXR59VXYbb0ii_rVoK_6AAAAII"]
[Tue Nov 25 23:57:27.833988 2025] [:error] [pid 43843:tid 43860] [client 13.74.149.244:7436] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aSXR5xhx4v3NUNdMKDMWRgAAAc8"]
[Tue Nov 25 23:57:28.338756 2025] [:error] [pid 14077:tid 14128] [client 13.74.149.244:6374] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aSXR6BG9n7UHEkwDTyj0WwAAAFI"]
[Tue Nov 25 23:57:28.860468 2025] [:error] [pid 14168:tid 14189] [client 13.74.149.244:2751] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ee.php"] [unique_id "aSXR6PR-ZDU0QEgAIIuv7AAAANI"]
[Tue Nov 25 23:57:29.365693 2025] [:error] [pid 43981:tid 43983] [client 13.74.149.244:1285] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ee.php"] [unique_id "aSXR6QgZn97m_qh_RaGMHQAAAwA"]
[Tue Nov 25 23:57:29.872745 2025] [:error] [pid 28836:tid 28956] [client 13.74.149.244:5158] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ee.php"] [unique_id "aSXR6ZwNRsoxcLQGkTcN6wAAAsE"]
[Tue Nov 25 23:57:30.385396 2025] [:error] [pid 2987:tid 2994] [client 13.74.149.244:1283] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ee.php"] [unique_id "aSXR6s-djEt-pTzPxnzw_AAAAUU"]
[Tue Nov 25 23:57:30.893299 2025] [:error] [pid 14076:tid 14088] [client 13.74.149.244:3956] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aSXR6nsB4Gz6Qw-pvBtumwAAAAc"]
[Tue Nov 25 23:57:31.396473 2025] [:error] [pid 14168:tid 14181] [client 13.74.149.244:7472] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aSXR6_R-ZDU0QEgAIIuv7QAAAMo"]
[Tue Nov 25 23:57:31.903260 2025] [:error] [pid 28609:tid 28637] [client 13.74.149.244:5170] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aSXR6yGGdT-nZJVs3x0XvAAAAZM"]
[Tue Nov 25 23:57:32.403956 2025] [:error] [pid 28836:tid 28959] [client 13.74.149.244:9308] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aSXR7JwNRsoxcLQGkTcN7gAAAsQ"]
[Tue Nov 25 23:57:32.923225 2025] [:error] [pid 14168:tid 14178] [client 13.74.149.244:8750] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aSXR7PR-ZDU0QEgAIIuv7wAAAMc"]
[Tue Nov 25 23:57:33.425584 2025] [:error] [pid 14078:tid 14137] [client 13.74.149.244:5453] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aSXR7dVXYbb0ii_rVoK_8AAAAIA"]
[Tue Nov 25 23:57:33.926227 2025] [:error] [pid 28836:tid 28957] [client 13.74.149.244:7440] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aSXR7ZwNRsoxcLQGkTcN8QAAAsI"]
[Tue Nov 25 23:57:34.428472 2025] [:error] [pid 28739:tid 28775] [client 13.74.149.244:5102] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aSXR7hxGpKmlkG4FexTggAAAAg0"]
[Tue Nov 25 23:57:34.939159 2025] [:error] [pid 28836:tid 29008] [client 13.74.149.244:6386] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "aSXR7pwNRsoxcLQGkTcN9gAAAtI"]
[Tue Nov 25 23:57:35.452268 2025] [:error] [pid 14168:tid 14188] [client 13.74.149.244:8752] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "aSXR7_R-ZDU0QEgAIIuv8gAAANE"]
[Tue Nov 25 23:57:35.954746 2025] [:error] [pid 28609:tid 28635] [client 13.74.149.244:9340] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "aSXR7yGGdT-nZJVs3x0XvwAAAZE"]
[Tue Nov 25 23:57:36.457541 2025] [:error] [pid 14168:tid 14184] [client 13.74.149.244:4056] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "aSXR8PR-ZDU0QEgAIIuv8wAAAM0"]
[Tue Nov 25 23:57:36.962432 2025] [:error] [pid 14168:tid 14179] [client 13.74.149.244:1301] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aSXR8PR-ZDU0QEgAIIuv9AAAAMg"]
[Tue Nov 25 23:57:37.466298 2025] [:error] [pid 14168:tid 14193] [client 13.74.149.244:6371] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aSXR8fR-ZDU0QEgAIIuv9QAAANY"]
[Tue Nov 25 23:57:37.970635 2025] [:error] [pid 14078:tid 14158] [client 13.74.149.244:3953] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aSXR8dVXYbb0ii_rVoK_9gAAAJU"]
[Tue Nov 25 23:57:38.483500 2025] [:error] [pid 28739:tid 28762] [client 13.74.149.244:5069] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aSXR8hxGpKmlkG4FexTgiwAAAgA"]
[Tue Nov 25 23:57:38.993982 2025] [:error] [pid 14077:tid 14111] [client 13.74.149.244:4087] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXR8hG9n7UHEkwDTyj0YgAAAEE"]
[Tue Nov 25 23:57:39.509147 2025] [:error] [pid 28609:tid 28640] [client 13.74.149.244:5070] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXR8yGGdT-nZJVs3x0XxgAAAZY"]
[Tue Nov 25 23:57:40.026982 2025] [:error] [pid 28609:tid 28628] [client 13.74.149.244:7448] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXR9CGGdT-nZJVs3x0XyAAAAYo"]
[Tue Nov 25 23:57:40.534564 2025] [:error] [pid 14168:tid 14191] [client 13.74.149.244:5470] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXR9PR-ZDU0QEgAIIuv9wAAANQ"]
[Tue Nov 25 23:57:41.037927 2025] [:error] [pid 43981:tid 43999] [client 13.74.149.244:9323] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/02.php"] [unique_id "aSXR9QgZn97m_qh_RaGMIgAAAxA"]
[Tue Nov 25 23:57:41.544779 2025] [:error] [pid 43981:tid 43991] [client 13.74.149.244:2741] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/02.php"] [unique_id "aSXR9QgZn97m_qh_RaGMJAAAAwg"]
[Tue Nov 25 23:57:42.047963 2025] [:error] [pid 43981:tid 44000] [client 13.74.149.244:14228] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/02.php"] [unique_id "aSXR9ggZn97m_qh_RaGMJgAAAxE"]
[Tue Nov 25 23:57:42.551144 2025] [:error] [pid 43981:tid 44004] [client 13.74.149.244:2693] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/02.php"] [unique_id "aSXR9ggZn97m_qh_RaGMJwAAAxU"]
[Tue Nov 25 23:57:43.052249 2025] [:error] [pid 43843:tid 43864] [client 13.74.149.244:6285] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aSXR9xhx4v3NUNdMKDMWSgAAAdM"]
[Tue Nov 25 23:57:43.558761 2025] [:error] [pid 43981:tid 44002] [client 13.74.149.244:6185] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aSXR9wgZn97m_qh_RaGMKQAAAxM"]
[Tue Nov 25 23:57:44.064933 2025] [:error] [pid 14168:tid 14171] [client 13.74.149.244:2716] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aSXR-PR-ZDU0QEgAIIuv-wAAAMA"]
[Tue Nov 25 23:57:44.566919 2025] [:error] [pid 14078:tid 14155] [client 13.74.149.244:9296] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aSXR-NVXYbb0ii_rVoK__AAAAJI"]
[Tue Nov 25 23:57:45.068605 2025] [:error] [pid 14078:tid 14144] [client 13.74.149.244:3597] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aSXR-dVXYbb0ii_rVoLAAAAAAIc"]
[Tue Nov 25 23:57:45.571401 2025] [:error] [pid 14168:tid 14179] [client 13.74.149.244:1306] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aSXR-fR-ZDU0QEgAIIuwAgAAAMg"]
[Tue Nov 25 23:57:46.074973 2025] [:error] [pid 14077:tid 14134] [client 13.74.149.244:2745] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aSXR-hG9n7UHEkwDTyj0aAAAAFg"]
[Tue Nov 25 23:57:46.577330 2025] [:error] [pid 28836:tid 28969] [client 13.74.149.244:9335] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aSXR-pwNRsoxcLQGkTcOBAAAAs4"]
[Tue Nov 25 23:57:47.083010 2025] [:error] [pid 14077:tid 14129] [client 13.74.149.244:2711] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "aSXR-xG9n7UHEkwDTyj0aQAAAFM"]
[Tue Nov 25 23:57:47.594890 2025] [:error] [pid 43843:tid 43862] [client 13.74.149.244:4079] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "aSXR-xhx4v3NUNdMKDMWUgAAAdE"]
[Tue Nov 25 23:57:48.096996 2025] [:error] [pid 14168:tid 14186] [client 13.74.149.244:3914] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "aSXR_PR-ZDU0QEgAIIuwBgAAAM8"]
[Tue Nov 25 23:57:48.605697 2025] [:error] [pid 43843:tid 43868] [client 13.74.149.244:5152] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "aSXR_Bhx4v3NUNdMKDMWVAAAAdc"]
[Tue Nov 25 23:57:49.113462 2025] [:error] [pid 43843:tid 43861] [client 13.74.149.244:8999] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aSXR_Rhx4v3NUNdMKDMWVQAAAdA"]
[Tue Nov 25 23:57:49.619421 2025] [:error] [pid 14078:tid 14140] [client 13.74.149.244:3906] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aSXR_dVXYbb0ii_rVoLAAwAAAIM"]
[Tue Nov 25 23:57:50.125297 2025] [:error] [pid 2987:tid 3008] [client 13.74.149.244:5091] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aSXR_s-djEt-pTzPxnzxCAAAAVM"]
[Tue Nov 25 23:57:50.639390 2025] [:error] [pid 14168:tid 14189] [client 13.74.149.244:3622] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aSXR_vR-ZDU0QEgAIIuwCgAAANI"]
[Tue Nov 25 23:57:51.149307 2025] [:error] [pid 14168:tid 14181] [client 13.74.149.244:5056] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSXR__R-ZDU0QEgAIIuwDAAAAMo"]
[Tue Nov 25 23:57:51.650293 2025] [:error] [pid 28739:tid 28764] [client 13.74.149.244:8730] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSXR_xxGpKmlkG4FexTgkAAAAgI"]
[Tue Nov 25 23:57:52.151931 2025] [:error] [pid 43981:tid 43989] [client 13.74.149.244:6153] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSXSAAgZn97m_qh_RaGMLQAAAwY"]
[Tue Nov 25 23:57:52.659971 2025] [:error] [pid 43981:tid 44003] [client 13.74.149.244:6149] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSXSAAgZn97m_qh_RaGMLwAAAxQ"]
[Tue Nov 25 23:57:53.162795 2025] [:error] [pid 14076:tid 14095] [client 13.74.149.244:5179] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSXSAXsB4Gz6Qw-pvBtuowAAAA4"]
[Tue Nov 25 23:57:53.675606 2025] [:error] [pid 14168:tid 14177] [client 13.74.149.244:5072] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSXSAfR-ZDU0QEgAIIuwEQAAAMY"]
[Tue Nov 25 23:57:54.186206 2025] [:error] [pid 14078:tid 14155] [client 13.74.149.244:14260] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSXSAtVXYbb0ii_rVoLACgAAAJI"]
[Tue Nov 25 23:57:54.690456 2025] [:error] [pid 28836:tid 28964] [client 13.74.149.244:14254] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSXSApwNRsoxcLQGkTcODwAAAsk"]
[Tue Nov 25 23:57:55.203374 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:3947] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSXSA9VXYbb0ii_rVoLADAAAAJE"]
[Tue Nov 25 23:57:55.707309 2025] [:error] [pid 14076:tid 14100] [client 13.74.149.244:2546] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aSXSA3sB4Gz6Qw-pvBtupwAAABM"]
[Tue Nov 25 23:57:56.216715 2025] [:error] [pid 28836:tid 28956] [client 13.74.149.244:14250] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aSXSBJwNRsoxcLQGkTcOEQAAAsE"]
[Tue Nov 25 23:57:56.729182 2025] [:error] [pid 14078:tid 14146] [client 13.74.149.244:3601] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aSXSBNVXYbb0ii_rVoLADgAAAIk"]
[Tue Nov 25 23:57:57.233726 2025] [:error] [pid 28609:tid 28631] [client 13.74.149.244:6304] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSXSBSGGdT-nZJVs3x0X2AAAAY0"]
[Tue Nov 25 23:57:57.748088 2025] [:error] [pid 28836:tid 29012] [client 13.74.149.244:2528] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/license.php"] [unique_id "aSXSBZwNRsoxcLQGkTcOFAAAAtY"]
[Tue Nov 25 23:57:58.265057 2025] [:error] [pid 28836:tid 28986] [client 13.74.149.244:3917] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/license.php"] [unique_id "aSXSBpwNRsoxcLQGkTcOFQAAAs8"]
[Tue Nov 25 23:57:58.777009 2025] [:error] [pid 2987:tid 3005] [client 13.74.149.244:6331] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/license.php"] [unique_id "aSXSBs-djEt-pTzPxnzxCwAAAVA"]
[Tue Nov 25 23:57:59.281430 2025] [:error] [pid 28739:tid 28775] [client 13.74.149.244:6181] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aSXSBxxGpKmlkG4FexTgmQAAAg0"]
[Tue Nov 25 23:57:59.794219 2025] [:error] [pid 2987:tid 2992] [client 13.74.149.244:3643] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aSXSB8-djEt-pTzPxnzxDQAAAUM"]
[Tue Nov 25 23:58:00.302851 2025] [:error] [pid 2987:tid 3011] [client 13.74.149.244:3940] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aSXSCM-djEt-pTzPxnzxDwAAAVY"]
[Tue Nov 25 23:58:00.808865 2025] [:error] [pid 2987:tid 2998] [client 13.74.149.244:6395] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aSXSCM-djEt-pTzPxnzxEAAAAUk"]
[Tue Nov 25 23:58:09.674092 2025] [:error] [pid 28836:tid 28955] [client 13.74.149.244:6330] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSXSEZwNRsoxcLQGkTcOJgAAAsA"]
[Tue Nov 25 23:58:11.232832 2025] [autoindex:error] [pid 43981:tid 44003] [client 13.74.149.244:3612] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 23:58:16.307165 2025] [:error] [pid 43981:tid 43985] [client 13.74.149.244:3612] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSXSGAgZn97m_qh_RaGMSAAAAwI"]
[Tue Nov 25 23:58:26.292124 2025] [:error] [pid 14168:tid 14184] [client 13.74.149.244:14783] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aSXSIvR-ZDU0QEgAIIuwIgAAAM0"]
[Tue Nov 25 23:58:26.798895 2025] [:error] [pid 14076:tid 14091] [client 13.74.149.244:9329] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aSXSInsB4Gz6Qw-pvBtuuAAAAAo"]
[Tue Nov 25 23:58:27.313347 2025] [:error] [pid 43843:tid 43848] [client 13.74.149.244:9319] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aSXSIxhx4v3NUNdMKDMWbgAAAcM"]
[Tue Nov 25 23:58:27.815870 2025] [:error] [pid 14077:tid 14118] [client 13.74.149.244:6275] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aSXSIxG9n7UHEkwDTyj0jAAAAEg"]
[Tue Nov 25 23:58:28.332874 2025] [:error] [pid 14078:tid 14151] [client 13.74.149.244:4577] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aSXSJNVXYbb0ii_rVoLAMAAAAI4"]
[Tue Nov 25 23:58:28.838514 2025] [:error] [pid 14077:tid 14122] [client 13.74.149.244:7105] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aSXSJBG9n7UHEkwDTyj0kAAAAEw"]
[Tue Nov 25 23:58:29.347178 2025] [:error] [pid 14077:tid 14120] [client 13.74.149.244:9683] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aSXSJRG9n7UHEkwDTyj0kwAAAEo"]
[Tue Nov 25 23:58:29.867547 2025] [:error] [pid 14078:tid 14148] [client 13.74.149.244:12093] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aSXSJdVXYbb0ii_rVoLANgAAAIs"]
[Tue Nov 25 23:58:30.382880 2025] [:error] [pid 14168:tid 14175] [client 13.74.149.244:14752] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aSXSJvR-ZDU0QEgAIIuwJgAAAMQ"]
[Tue Nov 25 23:58:30.899443 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:8661] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aSXSJtVXYbb0ii_rVoLAOAAAAJQ"]
[Tue Nov 25 23:58:31.414022 2025] [:error] [pid 14078:tid 14151] [client 13.74.149.244:5073] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aSXSJ9VXYbb0ii_rVoLAPgAAAI4"]
[Tue Nov 25 23:58:31.921165 2025] [:error] [pid 28836:tid 28968] [client 13.74.149.244:7142] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aSXSJ5wNRsoxcLQGkTcONgAAAs0"]
[Tue Nov 25 23:58:32.425181 2025] [:error] [pid 28609:tid 28619] [client 13.74.149.244:14733] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aSXSKCGGdT-nZJVs3x0X5gAAAYE"]
[Tue Nov 25 23:58:32.935727 2025] [:error] [pid 14076:tid 14098] [client 13.74.149.244:9695] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aSXSKHsB4Gz6Qw-pvBtuugAAABE"]
[Tue Nov 25 23:58:33.442564 2025] [:error] [pid 14078:tid 14148] [client 13.74.149.244:4600] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aSXSKdVXYbb0ii_rVoLAQQAAAIs"]
[Tue Nov 25 23:58:33.944748 2025] [:error] [pid 14078:tid 14139] [client 13.74.149.244:3812] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aSXSKdVXYbb0ii_rVoLAQwAAAII"]
[Tue Nov 25 23:58:34.450790 2025] [:error] [pid 43981:tid 43992] [client 13.74.149.244:9295] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aSXSKggZn97m_qh_RaGMUwAAAwk"]
[Tue Nov 25 23:58:34.956311 2025] [:error] [pid 28609:tid 28636] [client 13.74.149.244:8668] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aSXSKiGGdT-nZJVs3x0X6QAAAZI"]
[Tue Nov 25 23:58:35.474379 2025] [:error] [pid 14078:tid 14156] [client 13.74.149.244:4880] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aSXSK9VXYbb0ii_rVoLASAAAAJM"]
[Tue Nov 25 23:58:35.975430 2025] [:error] [pid 14076:tid 14089] [client 13.74.149.244:5300] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aSXSK3sB4Gz6Qw-pvBtuvgAAAAg"]
[Tue Nov 25 23:58:36.478422 2025] [:error] [pid 14076:tid 14083] [client 13.74.149.244:11595] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aSXSLHsB4Gz6Qw-pvBtuvwAAAAI"]
[Tue Nov 25 23:58:36.978932 2025] [:error] [pid 2987:tid 3012] [client 13.74.149.244:11633] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aSXSLM-djEt-pTzPxnzxMgAAAVc"]
[Tue Nov 25 23:58:37.480505 2025] [:error] [pid 28739:tid 28781] [client 13.74.149.244:8685] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aSXSLRxGpKmlkG4FexTgvQAAAhM"]
[Tue Nov 25 23:58:37.986764 2025] [:error] [pid 2987:tid 3004] [client 13.74.149.244:3676] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aSXSLc-djEt-pTzPxnzxMwAAAU8"]
[Tue Nov 25 23:58:38.489258 2025] [:error] [pid 28609:tid 28638] [client 13.74.149.244:3101] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "aSXSLiGGdT-nZJVs3x0X7AAAAZQ"]
[Tue Nov 25 23:58:38.990397 2025] [:error] [pid 28739:tid 28770] [client 13.74.149.244:8666] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "aSXSLhxGpKmlkG4FexTgwAAAAgg"]
[Tue Nov 25 23:58:39.493923 2025] [:error] [pid 28609:tid 28622] [client 13.74.149.244:2509] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "aSXSLyGGdT-nZJVs3x0X7QAAAYQ"]
[Tue Nov 25 23:58:39.996025 2025] [:error] [pid 43981:tid 43986] [client 13.74.149.244:4924] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "aSXSLwgZn97m_qh_RaGMVwAAAwM"]
[Tue Nov 25 23:58:40.511021 2025] [:error] [pid 2987:tid 2990] [client 13.74.149.244:4906] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "aSXSMM-djEt-pTzPxnzxNQAAAUE"]
[Tue Nov 25 23:58:41.020976 2025] [:error] [pid 2987:tid 3010] [client 13.74.149.244:3481] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "aSXSMc-djEt-pTzPxnzxNwAAAVU"]
[Tue Nov 25 23:58:41.536648 2025] [:error] [pid 14076:tid 14091] [client 13.74.149.244:2516] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "aSXSMXsB4Gz6Qw-pvBtuxQAAAAo"]
[Tue Nov 25 23:58:42.043784 2025] [:error] [pid 43981:tid 44001] [client 13.74.149.244:9698] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "aSXSMggZn97m_qh_RaGMWAAAAxI"]
[Tue Nov 25 23:58:42.552027 2025] [:error] [pid 28836:tid 29014] [client 13.74.149.244:9696] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/network.php"] [unique_id "aSXSMpwNRsoxcLQGkTcOOgAAAtg"]
[Tue Nov 25 23:58:43.069618 2025] [:error] [pid 43981:tid 44000] [client 13.74.149.244:8007] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/network.php"] [unique_id "aSXSMwgZn97m_qh_RaGMXQAAAxE"]
[Tue Nov 25 23:58:43.590752 2025] [:error] [pid 14076:tid 14094] [client 13.74.149.244:6270] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/network.php"] [unique_id "aSXSM3sB4Gz6Qw-pvBtuxgAAAA0"]
[Tue Nov 25 23:58:44.100204 2025] [:error] [pid 14078:tid 14145] [client 13.74.149.244:11609] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/network.php"] [unique_id "aSXSNNVXYbb0ii_rVoLAUwAAAIg"]
[Tue Nov 25 23:58:44.606318 2025] [:error] [pid 14078:tid 14147] [client 13.74.149.244:4589] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aSXSNNVXYbb0ii_rVoLAWAAAAIo"]
[Tue Nov 25 23:58:45.108495 2025] [:error] [pid 14078:tid 14143] [client 13.74.149.244:5256] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aSXSNdVXYbb0ii_rVoLAXAAAAIY"]
[Tue Nov 25 23:58:45.619229 2025] [:error] [pid 28739:tid 28779] [client 13.74.149.244:7501] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aSXSNRxGpKmlkG4FexTgygAAAhE"]
[Tue Nov 25 23:58:46.122886 2025] [:error] [pid 14168:tid 14182] [client 13.74.149.244:7153] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aSXSNvR-ZDU0QEgAIIuwLwAAAMs"]
[Tue Nov 25 23:58:46.624447 2025] [:error] [pid 28739:tid 28767] [client 13.74.149.244:11627] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aSXSNhxGpKmlkG4FexTgzAAAAgU"]
[Tue Nov 25 23:58:47.127163 2025] [:error] [pid 28836:tid 28968] [client 13.74.149.244:7125] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aSXSN5wNRsoxcLQGkTcOPwAAAs0"]
[Tue Nov 25 23:58:47.627827 2025] [:error] [pid 14077:tid 14129] [client 13.74.149.244:3134] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aSXSNxG9n7UHEkwDTyj0mgAAAFM"]
[Tue Nov 25 23:58:48.131040 2025] [:error] [pid 14077:tid 14122] [client 13.74.149.244:9721] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aSXSOBG9n7UHEkwDTyj0mwAAAEw"]
[Tue Nov 25 23:58:48.632012 2025] [:error] [pid 28739:tid 28766] [client 13.74.149.244:14778] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSXSOBxGpKmlkG4FexTg0AAAAgQ"]
[Tue Nov 25 23:58:49.135772 2025] [:error] [pid 28739:tid 28780] [client 13.74.149.244:6240] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSXSORxGpKmlkG4FexTg0QAAAhI"]
[Tue Nov 25 23:58:51.172506 2025] [:error] [pid 14078:tid 14139] [client 13.74.149.244:5305] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aSXSO9VXYbb0ii_rVoLAZAAAAII"]
[Tue Nov 25 23:58:51.675173 2025] [:error] [pid 43843:tid 43860] [client 13.74.149.244:3216] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aSXSOxhx4v3NUNdMKDMWdQAAAc8"]
[Tue Nov 25 23:58:52.179647 2025] [:error] [pid 28739:tid 28774] [client 13.74.149.244:3246] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aSXSPBxGpKmlkG4FexTg3wAAAgw"]
[Tue Nov 25 23:58:52.680932 2025] [:error] [pid 28609:tid 28634] [client 13.74.149.244:14745] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aSXSPCGGdT-nZJVs3x0X8gAAAZA"]
[Tue Nov 25 23:58:53.189374 2025] [:error] [pid 28739:tid 28779] [client 13.74.149.244:3207] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aSXSPRxGpKmlkG4FexTg4gAAAhE"]
[Tue Nov 25 23:58:53.689669 2025] [:error] [pid 28609:tid 28641] [client 13.74.149.244:4581] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aSXSPSGGdT-nZJVs3x0X8wAAAZc"]
[Tue Nov 25 23:58:54.193023 2025] [:error] [pid 14077:tid 14115] [client 13.74.149.244:7490] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aSXSPhG9n7UHEkwDTyj0nwAAAEU"]
[Tue Nov 25 23:58:54.694683 2025] [:error] [pid 43843:tid 43859] [client 13.74.149.244:7131] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aSXSPhhx4v3NUNdMKDMWegAAAc4"]
[Tue Nov 25 23:58:55.202772 2025] [:error] [pid 2987:tid 3002] [client 13.74.149.244:13120] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSXSP8-djEt-pTzPxnzxRwAAAU0"]
[Tue Nov 25 23:58:55.709504 2025] [:error] [pid 28739:tid 28769] [client 13.74.149.244:14758] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSXSPxxGpKmlkG4FexTg7wAAAgc"]
[Tue Nov 25 23:58:56.212230 2025] [:error] [pid 43981:tid 43988] [client 13.74.149.244:5036] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSXSQAgZn97m_qh_RaGMYgAAAwU"]
[Tue Nov 25 23:58:56.714316 2025] [:error] [pid 28609:tid 28628] [client 13.74.149.244:4995] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSXSQCGGdT-nZJVs3x0YBgAAAYo"]
[Tue Nov 25 23:58:57.216110 2025] [:error] [pid 14076:tid 14090] [client 13.74.149.244:7490] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aSXSQXsB4Gz6Qw-pvBtu0QAAAAk"]
[Tue Nov 25 23:58:57.718183 2025] [:error] [pid 2987:tid 3004] [client 13.74.149.244:13171] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aSXSQc-djEt-pTzPxnzxUgAAAU8"]
[Tue Nov 25 23:58:58.219892 2025] [:error] [pid 28609:tid 28620] [client 13.74.149.244:3811] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aSXSQiGGdT-nZJVs3x0YBwAAAYI"]
[Tue Nov 25 23:58:58.721274 2025] [:error] [pid 14168:tid 14176] [client 13.74.149.244:3830] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aSXSQvR-ZDU0QEgAIIuwOgAAAMU"]
[Tue Nov 25 23:58:59.223439 2025] [:error] [pid 28609:tid 28641] [client 13.74.149.244:5776] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aSXSQyGGdT-nZJVs3x0YCAAAAZc"]
[Tue Nov 25 23:58:59.726131 2025] [:error] [pid 28739:tid 28779] [client 13.74.149.244:8055] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aSXSQxxGpKmlkG4FexTg_AAAAhE"]
[Tue Nov 25 23:59:00.229520 2025] [:error] [pid 14077:tid 14114] [client 13.74.149.244:3974] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aSXSRBG9n7UHEkwDTyj0sAAAAEQ"]
[Tue Nov 25 23:59:00.732986 2025] [:error] [pid 28739:tid 28763] [client 13.74.149.244:3245] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aSXSRBxGpKmlkG4FexThAAAAAgE"]
[Tue Nov 25 23:59:01.239716 2025] [:error] [pid 28836:tid 28963] [client 13.74.149.244:3500] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXSRZwNRsoxcLQGkTcOXQAAAsg"]
[Tue Nov 25 23:59:01.748613 2025] [:error] [pid 14078:tid 14151] [client 13.74.149.244:8049] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXSRdVXYbb0ii_rVoLAbQAAAI4"]
[Tue Nov 25 23:59:02.249896 2025] [:error] [pid 14076:tid 14081] [client 13.74.149.244:3494] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXSRnsB4Gz6Qw-pvBtu3wAAAAA"]
[Tue Nov 25 23:59:02.754991 2025] [:error] [pid 14076:tid 14103] [client 13.74.149.244:3711] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSXSRnsB4Gz6Qw-pvBtu4gAAABY"]
[Tue Nov 25 23:59:03.258405 2025] [:error] [pid 2987:tid 2995] [client 13.74.149.244:7528] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSXSR8-djEt-pTzPxnzxYwAAAUY"]
[Tue Nov 25 23:59:03.759708 2025] [:error] [pid 14076:tid 14105] [client 13.74.149.244:5004] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSXSR3sB4Gz6Qw-pvBtu4wAAABg"]
[Tue Nov 25 23:59:04.263620 2025] [:error] [pid 28609:tid 28620] [client 13.74.149.244:6217] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSXSSCGGdT-nZJVs3x0YFwAAAYI"]
[Tue Nov 25 23:59:04.766170 2025] [:error] [pid 43981:tid 43991] [client 13.74.149.244:3648] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSXSSAgZn97m_qh_RaGMbQAAAwg"]
[Tue Nov 25 23:59:05.267724 2025] [:error] [pid 43981:tid 43987] [client 13.74.149.244:4587] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aSXSSQgZn97m_qh_RaGMbgAAAwQ"]
[Tue Nov 25 23:59:05.770626 2025] [:error] [pid 28836:tid 29006] [client 13.74.149.244:4921] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aSXSSZwNRsoxcLQGkTcOYwAAAtA"]
[Tue Nov 25 23:59:06.273277 2025] [:error] [pid 28836:tid 28955] [client 13.74.149.244:7985] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aSXSSpwNRsoxcLQGkTcOZQAAAsA"]
[Tue Nov 25 23:59:06.779137 2025] [:error] [pid 43981:tid 44002] [client 13.74.149.244:3072] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aSXSSggZn97m_qh_RaGMcgAAAxM"]
[Tue Nov 25 23:59:07.280950 2025] [:error] [pid 28739:tid 28768] [client 13.74.149.244:8016] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-configs.php"] [unique_id "aSXSSxxGpKmlkG4FexThBgAAAgY"]
[Tue Nov 25 23:59:07.780974 2025] [:error] [pid 14168:tid 14187] [client 13.74.149.244:13155] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-configs.php"] [unique_id "aSXSS_R-ZDU0QEgAIIuwPgAAANA"]
[Tue Nov 25 23:59:08.284477 2025] [:error] [pid 14168:tid 14191] [client 13.74.149.244:3706] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-configs.php"] [unique_id "aSXSTPR-ZDU0QEgAIIuwPwAAANQ"]
[Tue Nov 25 23:59:08.786096 2025] [:error] [pid 14076:tid 14096] [client 13.74.149.244:12793] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-configs.php"] [unique_id "aSXSTHsB4Gz6Qw-pvBtu5gAAAA8"]
[Tue Nov 25 23:59:09.287297 2025] [:error] [pid 2987:tid 3009] [client 13.74.149.244:6230] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSXSTc-djEt-pTzPxnzxaAAAAVQ"]
[Tue Nov 25 23:59:09.787721 2025] [:error] [pid 2987:tid 2997] [client 13.74.149.244:5809] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSXSTc-djEt-pTzPxnzxaQAAAUg"]
[Tue Nov 25 23:59:10.288442 2025] [:error] [pid 28836:tid 28986] [client 13.74.149.244:13122] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSXSTpwNRsoxcLQGkTcOagAAAs8"]
[Tue Nov 25 23:59:10.789341 2025] [:error] [pid 43843:tid 43867] [client 13.74.149.244:5032] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSXSThhx4v3NUNdMKDMWhgAAAdY"]
[Tue Nov 25 23:59:11.295171 2025] [:error] [pid 43843:tid 43851] [client 13.74.149.244:3797] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSXSTxhx4v3NUNdMKDMWhwAAAcY"]
[Tue Nov 25 23:59:11.797386 2025] [:error] [pid 28836:tid 28961] [client 13.74.149.244:3973] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSXST5wNRsoxcLQGkTcObAAAAsY"]
[Tue Nov 25 23:59:12.300829 2025] [:error] [pid 14076:tid 14095] [client 13.74.149.244:14756] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSXSUHsB4Gz6Qw-pvBtu6QAAAA4"]
[Tue Nov 25 23:59:12.806619 2025] [:error] [pid 43843:tid 43845] [client 13.74.149.244:3482] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSXSUBhx4v3NUNdMKDMWiQAAAcA"]
[Tue Nov 25 23:59:13.310591 2025] [:error] [pid 14078:tid 14161] [client 13.74.149.244:4030] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/fucku.php"] [unique_id "aSXSUdVXYbb0ii_rVoLAeQAAAJg"]
[Tue Nov 25 23:59:13.818477 2025] [:error] [pid 14078:tid 14149] [client 13.74.149.244:3382] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/fucku.php"] [unique_id "aSXSUdVXYbb0ii_rVoLAfAAAAIw"]
[Tue Nov 25 23:59:14.324217 2025] [:error] [pid 28739:tid 28780] [client 13.74.149.244:4903] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/fucku.php"] [unique_id "aSXSUhxGpKmlkG4FexThEAAAAhI"]
[Tue Nov 25 23:59:14.826200 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:11638] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/fucku.php"] [unique_id "aSXSUtVXYbb0ii_rVoLAgQAAAJE"]
[Tue Nov 25 23:59:15.332839 2025] [:error] [pid 14078:tid 14145] [client 13.74.149.244:6550] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/wp-info.php"] [unique_id "aSXSU9VXYbb0ii_rVoLAhQAAAIg"]
[Tue Nov 25 23:59:15.835639 2025] [:error] [pid 14078:tid 14151] [client 13.74.149.244:6555] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/wp-info.php"] [unique_id "aSXSU9VXYbb0ii_rVoLAhgAAAI4"]
[Tue Nov 25 23:59:16.338914 2025] [:error] [pid 43981:tid 43989] [client 13.74.149.244:7138] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/wp-info.php"] [unique_id "aSXSVAgZn97m_qh_RaGMggAAAwY"]
[Tue Nov 25 23:59:16.844243 2025] [:error] [pid 43981:tid 43983] [client 13.74.149.244:3707] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/wp-info.php"] [unique_id "aSXSVAgZn97m_qh_RaGMgwAAAwA"]
[Tue Nov 25 23:59:17.348483 2025] [:error] [pid 28739:tid 28783] [client 13.74.149.244:8025] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/post.php"] [unique_id "aSXSVRxGpKmlkG4FexThIAAAAhU"]
[Tue Nov 25 23:59:17.850016 2025] [:error] [pid 14077:tid 14132] [client 13.74.149.244:3671] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/post.php"] [unique_id "aSXSVRG9n7UHEkwDTyj0vAAAAFY"]
[Tue Nov 25 23:59:18.359856 2025] [:error] [pid 43981:tid 43998] [client 13.74.149.244:5743] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/post.php"] [unique_id "aSXSVggZn97m_qh_RaGMhQAAAw8"]
[Tue Nov 25 23:59:18.866142 2025] [:error] [pid 14077:tid 14128] [client 13.74.149.244:6553] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/post.php"] [unique_id "aSXSVhG9n7UHEkwDTyj0vwAAAFI"]
[Tue Nov 25 23:59:19.369517 2025] [:error] [pid 2987:tid 2996] [client 13.74.149.244:4865] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSXSV8-djEt-pTzPxnzxbQAAAUc"]
[Tue Nov 25 23:59:19.874291 2025] [:error] [pid 43843:tid 43856] [client 13.74.149.244:12796] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSXSVxhx4v3NUNdMKDMWjQAAAcs"]
[Tue Nov 25 23:59:20.383099 2025] [:error] [pid 14077:tid 14133] [client 13.74.149.244:3785] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSXSWBG9n7UHEkwDTyj0wAAAAFc"]
[Tue Nov 25 23:59:20.886313 2025] [:error] [pid 14077:tid 14130] [client 13.74.149.244:2123] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSXSWBG9n7UHEkwDTyj0wQAAAFQ"]
[Wed Nov 26 01:24:05.349221 2025] [autoindex:error] [pid 14078:tid 14137] [client 172.177.141.1:52855] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:24:05.609974 2025] [autoindex:error] [pid 14078:tid 14156] [client 172.177.141.1:52855] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 01:24:05.827139 2025] [autoindex:error] [pid 14078:tid 14143] [client 172.177.141.1:52855] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 01:24:06.069467 2025] [autoindex:error] [pid 14078:tid 14155] [client 172.177.141.1:52855] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 01:24:06.275675 2025] [autoindex:error] [pid 14078:tid 14142] [client 172.177.141.1:52855] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:24:06.484363 2025] [autoindex:error] [pid 14078:tid 14154] [client 172.177.141.1:52855] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 01:24:06.955622 2025] [autoindex:error] [pid 14078:tid 14158] [client 172.177.141.1:52855] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 01:24:25.480944 2025] [autoindex:error] [pid 14077:tid 14111] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 26 01:24:29.541941 2025] [autoindex:error] [pid 14077:tid 14134] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 01:24:30.041806 2025] [autoindex:error] [pid 14077:tid 14124] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 01:24:31.493316 2025] [autoindex:error] [pid 14077:tid 14126] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 01:24:31.759685 2025] [autoindex:error] [pid 14077:tid 14113] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 01:24:31.986053 2025] [autoindex:error] [pid 14077:tid 14130] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 01:24:32.191339 2025] [autoindex:error] [pid 14077:tid 14111] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 01:24:32.463880 2025] [autoindex:error] [pid 14077:tid 14133] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:24:32.983718 2025] [autoindex:error] [pid 14077:tid 14132] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 01:24:36.770627 2025] [autoindex:error] [pid 14077:tid 14124] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 01:24:36.976115 2025] [autoindex:error] [pid 14077:tid 14122] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 26 01:24:38.302398 2025] [autoindex:error] [pid 14077:tid 14126] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:24:38.510178 2025] [autoindex:error] [pid 14077:tid 14110] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:24:38.769190 2025] [autoindex:error] [pid 14077:tid 14111] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 01:24:38.993299 2025] [autoindex:error] [pid 14077:tid 14121] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 26 01:24:39.200390 2025] [autoindex:error] [pid 14077:tid 14133] [client 172.177.141.1:52821] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:24:42.493994 2025] [autoindex:error] [pid 14077:tid 14118] [client 172.177.141.1:52821] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 01:25:26.006370 2025] [autoindex:error] [pid 14077:tid 14127] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:25:26.214723 2025] [autoindex:error] [pid 14077:tid 14117] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:25:26.419003 2025] [autoindex:error] [pid 14077:tid 14118] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 01:25:26.626726 2025] [autoindex:error] [pid 14077:tid 14131] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 01:25:26.872793 2025] [autoindex:error] [pid 14077:tid 14119] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 01:25:32.110308 2025] [autoindex:error] [pid 14077:tid 14120] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 01:25:32.318615 2025] [autoindex:error] [pid 14077:tid 14124] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 01:25:39.608996 2025] [autoindex:error] [pid 14077:tid 14118] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 01:25:40.860276 2025] [autoindex:error] [pid 14077:tid 14131] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 01:25:41.121707 2025] [autoindex:error] [pid 14077:tid 14114] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:25:41.341588 2025] [autoindex:error] [pid 14077:tid 14119] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:25:41.575275 2025] [autoindex:error] [pid 14077:tid 14113] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 26 01:25:42.875784 2025] [autoindex:error] [pid 14077:tid 14111] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 26 01:25:48.744309 2025] [autoindex:error] [pid 14077:tid 14126] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:25:49.011821 2025] [autoindex:error] [pid 14077:tid 14130] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 01:25:51.519415 2025] [autoindex:error] [pid 14077:tid 14120] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 01:25:51.726433 2025] [autoindex:error] [pid 14077:tid 14124] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:25:51.930995 2025] [autoindex:error] [pid 14077:tid 14110] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:25:53.222375 2025] [autoindex:error] [pid 14077:tid 14127] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 01:25:53.508218 2025] [autoindex:error] [pid 14077:tid 14134] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 01:25:53.719337 2025] [autoindex:error] [pid 14077:tid 14117] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 01:25:53.967601 2025] [autoindex:error] [pid 14077:tid 14112] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 01:25:54.229600 2025] [autoindex:error] [pid 14077:tid 14131] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 01:25:54.458033 2025] [autoindex:error] [pid 14077:tid 14114] [client 172.177.141.1:3779] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 01:28:35.101061 2025] [:error] [pid 28836:tid 28961] [client 223.233.85.65:2855] [client 223.233.85.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.85.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSXnQ5wNRsoxcLQGkTcjZwAAAsY"]
[Wed Nov 26 01:29:05.785970 2025] [:error] [pid 28739:tid 28786] [client 115.98.127.230:64966] [client 115.98.127.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.98.127.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSXnYRxGpKmlkG4FexT-5gAAAhg"]
[Wed Nov 26 01:29:06.807821 2025] [:error] [pid 14076:tid 14097] [client 103.144.192.189:60724] [client 103.144.192.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.144.192.189, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSXnYnsB4Gz6Qw-pvBuHYQAAABA"]
[Wed Nov 26 01:31:00.708460 2025] [:error] [pid 43981:tid 43987] [client 44.246.26.87:50988] [client 44.246.26.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSXn1AgZn97m_qh_RaGeCQAAAwQ"]
[Wed Nov 26 01:45:10.057494 2025] [:error] [pid 43981:tid 43993] [client 34.219.111.155:48896] [client 34.219.111.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSXrJggZn97m_qh_RaGgHQAAAwo"]
[Wed Nov 26 01:47:02.667685 2025] [:error] [pid 14076:tid 14100] [client 54.173.250.15:48190] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSXrlnsB4Gz6Qw-pvBuLJgAAABM"]
[Wed Nov 26 02:33:16.528764 2025] [:error] [pid 28836:tid 29013] [client 103.144.192.189:56962] [client 103.144.192.189] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSX2bJwNRsoxcLQGkTctdwAAAtc"]
[Wed Nov 26 02:35:05.726058 2025] [:error] [pid 14168:tid 14174] [client 103.144.192.189:57574] [client 103.144.192.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.144.192.189, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSX22fR-ZDU0QEgAIIvNkAAAAMM"]
[Wed Nov 26 11:33:29.641109 2025] [autoindex:error] [pid 10383:tid 10400] [client 68.183.90.36:53147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 12:10:06.132409 2025] [:error] [pid 34742:tid 34752] [client 223.233.85.65:29043] [client 223.233.85.65] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSZ9npSuLNwpQF_jzAcwiAAAAEQ"]
[Wed Nov 26 12:11:08.533732 2025] [:error] [pid 34830:tid 34853] [client 223.233.85.65:6752] [client 223.233.85.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.85.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSZ93EukvkWgWN6jCR2W8QAAABU"]
[Wed Nov 26 12:12:03.054023 2025] [:error] [pid 45836:tid 45848] [client 223.233.85.65:11533] [client 223.233.85.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.85.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSZ-E5frnOGqL-seZAwsDAAAAMI"]
[Wed Nov 26 13:48:54.394914 2025] [autoindex:error] [pid 34742:tid 34767] [client 139.59.30.253:58600] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 14:16:47.100787 2025] [:error] [pid 34743:tid 34788] [client 49.7.227.204:45266] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSabTwvyX7Q5oU7_mBygvwAAAUw"]
[Wed Nov 26 14:49:31.411962 2025] [:error] [pid 10383:tid 10406] [client 213.209.157.170:51138] [client 213.209.157.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSai-60RJ-zjhOVjD8_kvgAAAdQ"]
[Wed Nov 26 15:14:58.187047 2025] [:error] [pid 45769:tid 45783] [client 170.106.161.78:46648] [client 170.106.161.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSao8ldG5Eht9c3yy4PaPgAAAcs"]
[Wed Nov 26 19:26:00.589267 2025] [:error] [pid 46443:tid 46454] [client 216.126.239.203:57880] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSbjyMLmDsnHrj-QFB_iTwAAAEk"]
[Thu Nov 27 00:00:32.510220 2025] [:error] [pid 6471:tid 6484] [client 100.18.32.160:40872] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aSckIOh3Z9TZLlRuTiPSkQAAAIo"]
[Thu Nov 27 00:00:34.935834 2025] [:error] [pid 6471:tid 6483] [client 100.18.32.160:57704] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aSckIuh3Z9TZLlRuTiPSkwAAAIk"]
[Thu Nov 27 00:00:37.266866 2025] [:error] [pid 6471:tid 6476] [client 100.18.32.160:59584] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aSckJeh3Z9TZLlRuTiPSlQAAAII"]
[Thu Nov 27 00:00:39.537840 2025] [:error] [pid 6471:tid 6496] [client 100.18.32.160:59586] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aSckJ-h3Z9TZLlRuTiPSmAAAAJY"]
[Thu Nov 27 00:00:41.915288 2025] [:error] [pid 45685:tid 45750] [client 100.18.32.160:59588] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aSckKVj3f_NRdgU0DQ4RIgAAAQg"]
[Thu Nov 27 00:00:44.183103 2025] [:error] [pid 6471:tid 6487] [client 100.18.32.160:59596] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aSckLOh3Z9TZLlRuTiPSmwAAAI0"]
[Thu Nov 27 00:00:46.885611 2025] [:error] [pid 45684:tid 45735] [client 100.18.32.160:42734] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aSckLvg5LMxwI4-PD1e6-wAAABQ"]
[Thu Nov 27 00:00:49.242051 2025] [:error] [pid 46443:tid 46468] [client 100.18.32.160:42748] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aSckMcLmDsnHrj-QFB82KQAAAFc"]
[Thu Nov 27 00:00:51.610386 2025] [:error] [pid 45769:tid 45772] [client 100.18.32.160:42762] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aSckM1dG5Eht9c3yy4NaWQAAAcA"]
[Thu Nov 27 00:00:54.027764 2025] [:error] [pid 45685:tid 45763] [client 100.18.32.160:42778] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aSckNlj3f_NRdgU0DQ4RKQAAARU"]
[Thu Nov 27 00:00:56.400674 2025] [:error] [pid 45685:tid 45757] [client 100.18.32.160:42792] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aSckOFj3f_NRdgU0DQ4RKwAAAQ8"]
[Thu Nov 27 00:00:58.618694 2025] [:error] [pid 45683:tid 45711] [client 100.18.32.160:36942] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aSckOhX1gQgNFW_222roVQAAAVc"]
[Thu Nov 27 00:01:00.950790 2025] [:error] [pid 20733:tid 20746] [client 100.18.32.160:36952] [client 100.18.32.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aSckPAV9EP2HuRvnH8eOBQAAAMs"]
[Thu Nov 27 00:51:34.833186 2025] [:error] [pid 8184:tid 8254] [client 103.77.107.57:62634] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aScwFr-M2IHkRYVrcbN6SgAAAFA"]
[Thu Nov 27 03:37:19.733322 2025] [:error] [pid 53739:tid 53748] [client 182.44.8.254:47866] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSdW780J_NoeqMM0rg2rWwAAAMU"]
[Thu Nov 27 05:00:53.266817 2025] [autoindex:error] [pid 6201:tid 6209] [client 20.251.218.217:28166] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 05:00:53.899275 2025] [autoindex:error] [pid 6201:tid 6207] [client 20.251.218.217:28166] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 05:00:54.184952 2025] [proxy_fcgi:error] [pid 6201:tid 6224] [client 20.251.218.217:28166] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 05:00:56.092266 2025] [autoindex:error] [pid 6201:tid 6226] [client 20.251.218.217:28166] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 05:02:15.307786 2025] [:error] [pid 6201:tid 6226] [client 20.251.218.217:28166] [client 20.251.218.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aSdq1zkSJeRkIQGTjzwk0QAAABU"], referer: https://www.google.com/
[Thu Nov 27 05:02:35.203597 2025] [autoindex:error] [pid 21017:tid 21079] [client 20.251.218.217:28213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 05:02:35.911530 2025] [autoindex:error] [pid 21017:tid 21080] [client 20.251.218.217:28213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 05:02:36.415029 2025] [autoindex:error] [pid 21017:tid 21077] [client 20.251.218.217:28213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 05:02:37.881579 2025] [autoindex:error] [pid 21017:tid 21060] [client 20.251.218.217:28213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 05:02:38.151428 2025] [autoindex:error] [pid 21017:tid 21061] [client 20.251.218.217:28213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 05:02:38.513986 2025] [autoindex:error] [pid 21017:tid 21070] [client 20.251.218.217:28213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 05:02:43.545646 2025] [autoindex:error] [pid 21017:tid 21060] [client 20.251.218.217:28213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 05:02:43.813378 2025] [autoindex:error] [pid 21017:tid 21059] [client 20.251.218.217:28213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 05:02:44.132219 2025] [autoindex:error] [pid 21017:tid 21070] [client 20.251.218.217:28213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 05:02:45.621362 2025] [autoindex:error] [pid 21017:tid 21081] [client 20.251.218.217:28213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 05:02:47.184788 2025] [autoindex:error] [pid 21017:tid 21073] [client 20.251.218.217:28213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 08:44:02.710290 2025] [:error] [pid 19013:tid 19027] [client 64.227.32.66:44738] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/actuator/env"] [unique_id "aSee0oaBrX8b6-N6_86VaQAAAAo"]
[Thu Nov 27 08:44:03.448322 2025] [:error] [pid 39563:tid 39569] [client 64.227.32.66:44750] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSee0zNSKUd-PJ2wU0QgIwAAAQQ"]
[Thu Nov 27 08:44:04.195968 2025] [:error] [pid 19119:tid 19187] [client 64.227.32.66:44752] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server"] [unique_id "aSee1BsL_RTusriYkwd6igAAAM0"]
[Thu Nov 27 08:44:04.985005 2025] [:error] [pid 19014:tid 19053] [client 64.227.32.66:44754] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aSee1I2utvwZ4eADRmr50QAAAEk"]
[Thu Nov 27 08:44:05.714973 2025] [:error] [pid 19013:tid 19037] [client 64.227.32.66:42472] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/about"] [unique_id "aSee1YaBrX8b6-N6_86VawAAABQ"]
[Thu Nov 27 08:44:06.484643 2025] [:error] [pid 40009:tid 40072] [client 64.227.32.66:42476] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/debug/default/view"] [unique_id "aSee1kJuxjShta_KR6X49QAAAUk"]
[Thu Nov 27 08:44:07.221207 2025] [:error] [pid 19013:tid 19023] [client 64.227.32.66:42486] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v2/_catalog"] [unique_id "aSee14aBrX8b6-N6_86VbAAAAAY"]
[Thu Nov 27 08:44:07.959491 2025] [:error] [pid 39563:tid 39584] [client 64.227.32.66:42490] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSee1zNSKUd-PJ2wU0QgJgAAARM"]
[Thu Nov 27 08:44:08.697997 2025] [:error] [pid 19015:tid 19080] [client 64.227.32.66:42498] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server-status"] [unique_id "aSee2A4MxyJWPPh2qEi_iAAAAIk"]
[Thu Nov 27 08:44:09.434830 2025] [:error] [pid 19119:tid 19196] [client 64.227.32.66:42504] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/login.action"] [unique_id "aSee2RsL_RTusriYkwd6jQAAANY"]
[Thu Nov 27 08:44:10.179958 2025] [:error] [pid 19119:tid 19176] [client 64.227.32.66:42520] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/_all_dbs"] [unique_id "aSee2hsL_RTusriYkwd6kAAAAMI"]
[Thu Nov 27 08:44:10.909476 2025] [:error] [pid 40009:tid 40086] [client 64.227.32.66:42522] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aSee2kJuxjShta_KR6X5NAAAAVY"]
[Thu Nov 27 08:44:11.643470 2025] [:error] [pid 19014:tid 19060] [client 64.227.32.66:42536] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aSee242utvwZ4eADRmr57gAAAFA"]
[Thu Nov 27 08:44:12.383183 2025] [:error] [pid 39563:tid 39581] [client 64.227.32.66:42546] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSee3DNSKUd-PJ2wU0QgMAAAARA"]
[Thu Nov 27 08:44:13.114926 2025] [:error] [pid 40009:tid 40080] [client 64.227.32.66:42548] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSee3UJuxjShta_KR6X5NgAAAVA"]
[Thu Nov 27 08:44:13.863419 2025] [:error] [pid 19015:tid 19083] [client 64.227.32.66:42552] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config.json"] [unique_id "aSee3Q4MxyJWPPh2qEi_iQAAAIw"]
[Thu Nov 27 08:44:14.638037 2025] [:error] [pid 39563:tid 39589] [client 64.227.32.66:42564] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/telescope/requests"] [unique_id "aSee3jNSKUd-PJ2wU0QgMgAAARg"]
[Thu Nov 27 08:44:15.385258 2025] [:error] [pid 19119:tid 19178] [client 64.227.32.66:33926] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aSee3xsL_RTusriYkwd6lAAAAMQ"]
[Thu Nov 27 08:44:16.222108 2025] [:error] [pid 19119:tid 19184] [client 64.227.32.66:33940] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSee4BsL_RTusriYkwd6mgAAAMo"]
[Fri Nov 28 10:56:08.984150 2025] [:error] [pid 54985:tid 54992] [client 94.154.239.69:44652] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aSkPSCBBgIIc3KO1HAUHSAAAAAU"]
[Fri Nov 28 10:56:11.595525 2025] [:error] [pid 54900:tid 54980] [client 94.154.239.69:33396] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aSkPSwFQiryv2n0dZ2JaUAAAAdc"]
[Fri Nov 28 10:56:14.321864 2025] [:error] [pid 54898:tid 54920] [client 94.154.239.69:33406] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aSkPTimSGSvN-RicxNTOGAAAAVI"]
[Fri Nov 28 10:56:16.977989 2025] [:error] [pid 54898:tid 54920] [client 94.154.239.69:33408] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aSkPUCmSGSvN-RicxNTOIgAAAVI"]
[Fri Nov 28 10:56:19.490735 2025] [:error] [pid 54899:tid 54951] [client 94.154.239.69:33412] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aSkPU6EEAM1j6R_IFVuRggAAAZU"]
[Fri Nov 28 10:56:22.005521 2025] [:error] [pid 54985:tid 54995] [client 94.154.239.69:44654] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aSkPViBBgIIc3KO1HAUHpAAAAAg"]
[Fri Nov 28 10:56:24.464925 2025] [:error] [pid 54985:tid 55001] [client 94.154.239.69:44668] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aSkPWCBBgIIc3KO1HAUHrgAAAA4"]
[Fri Nov 28 10:56:27.112319 2025] [:error] [pid 54898:tid 54917] [client 94.154.239.69:44680] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aSkPWymSGSvN-RicxNTOOAAAAU8"]
[Fri Nov 28 10:56:29.751643 2025] [:error] [pid 54900:tid 54960] [client 94.154.239.69:44692] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aSkPXQFQiryv2n0dZ2JaiAAAAcM"]
[Fri Nov 28 10:56:32.370894 2025] [:error] [pid 54900:tid 54977] [client 94.154.239.69:49728] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aSkPYAFQiryv2n0dZ2JalgAAAdQ"]
[Fri Nov 28 10:56:35.007751 2025] [:error] [pid 54900:tid 54981] [client 94.154.239.69:49742] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aSkPYwFQiryv2n0dZ2JapwAAAdg"]
[Fri Nov 28 10:56:37.653015 2025] [:error] [pid 54898:tid 54925] [client 94.154.239.69:49744] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aSkPZSmSGSvN-RicxNTOPAAAAVc"]
[Fri Nov 28 10:56:40.158288 2025] [:error] [pid 54898:tid 54904] [client 94.154.239.69:49748] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aSkPaCmSGSvN-RicxNTOPgAAAUI"]
[Fri Nov 28 14:55:45.595585 2025] [:error] [pid 59559:tid 59609] [client 64.227.175.44:52714] [client 64.227.175.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.175.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSlHcRqw_7c4pIN46wkTMAAAANQ"]
[Fri Nov 28 14:55:47.375793 2025] [:error] [pid 59559:tid 59603] [client 64.227.175.44:57640] [client 64.227.175.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.175.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSlHcxqw_7c4pIN46wkTMgAAAM4"]
[Fri Nov 28 17:23:45.754036 2025] [:error] [pid 55588:tid 55610] [client 216.24.219.78:41241] [client 216.24.219.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "aSlqIVkh_zgPkFPwj1fJ8AAAAdQ"]
[Fri Nov 28 17:23:46.233099 2025] [:error] [pid 59560:tid 59637] [client 104.234.19.96:33425] [client 104.234.19.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "aSlqIvtAG2btIDWyf4Ly_AAAARU"]
[Fri Nov 28 17:23:46.713125 2025] [:error] [pid 59560:tid 59626] [client 104.234.19.96:36157] [client 104.234.19.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "aSlqIvtAG2btIDWyf4Ly_QAAAQo"]
[Fri Nov 28 22:55:05.407708 2025] [:error] [pid 38347:tid 38397] [client 43.156.202.34:39456] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSm3yV4FzQmoUx27MAmiBwAAAFQ"]
[Sat Nov 29 02:37:50.000033 2025] [:error] [pid 9656:tid 9736] [client 103.77.106.81:58521] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aSnr_Y_4AfnhtHpInuniVQAAAJg"]
[Sat Nov 29 03:24:25.945011 2025] [autoindex:error] [pid 22917:tid 22941] [client 4.219.6.242:53493] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sat Nov 29 03:24:26.981077 2025] [autoindex:error] [pid 22917:tid 22928] [client 4.219.6.242:53493] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Nov 29 03:24:27.303622 2025] [proxy_fcgi:error] [pid 22917:tid 22943] [client 4.219.6.242:53493] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sat Nov 29 03:24:28.824962 2025] [autoindex:error] [pid 22917:tid 22929] [client 4.219.6.242:53493] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sat Nov 29 03:25:41.267382 2025] [:error] [pid 22917:tid 22928] [client 4.219.6.242:53493] [client 4.219.6.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aSn3NfXA03aodZJHKLXa0AAAAkk"], referer: https://www.google.de/
[Sat Nov 29 03:26:03.310846 2025] [autoindex:error] [pid 22917:tid 22921] [client 4.219.6.242:16402] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sat Nov 29 03:26:03.604744 2025] [autoindex:error] [pid 22917:tid 22938] [client 4.219.6.242:16402] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sat Nov 29 03:26:03.880024 2025] [autoindex:error] [pid 22917:tid 22936] [client 4.219.6.242:16402] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sat Nov 29 03:26:05.329065 2025] [autoindex:error] [pid 22917:tid 22941] [client 4.219.6.242:16402] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sat Nov 29 03:26:05.860668 2025] [autoindex:error] [pid 22917:tid 22930] [client 4.219.6.242:16402] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Nov 29 03:26:06.703500 2025] [autoindex:error] [pid 22917:tid 22928] [client 4.219.6.242:16402] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sat Nov 29 03:26:10.518813 2025] [autoindex:error] [pid 22917:tid 22921] [client 4.219.6.242:16402] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Nov 29 03:26:10.912674 2025] [autoindex:error] [pid 22917:tid 22940] [client 4.219.6.242:16402] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Nov 29 03:26:11.228673 2025] [autoindex:error] [pid 22917:tid 22938] [client 4.219.6.242:16402] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Nov 29 03:26:12.589430 2025] [autoindex:error] [pid 22917:tid 22932] [client 4.219.6.242:16402] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sat Nov 29 03:26:14.385661 2025] [autoindex:error] [pid 22917:tid 22928] [client 4.219.6.242:16402] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sat Nov 29 03:46:15.766991 2025] [:error] [pid 35974:tid 36028] [client 159.203.136.234:37500] [client 159.203.136.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSn8B9zuqxAslXxF9-jeggAAAFY"]
[Sat Nov 29 03:46:16.847023 2025] [:error] [pid 35973:tid 35986] [client 159.203.136.234:48610] [client 159.203.136.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSn8CIxBlrIWX04_g8Sd6wAAAAg"]
[Sat Nov 29 04:10:45.570706 2025] [:error] [pid 53818:tid 53866] [client 116.240.149.7:62263] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aSoBxZY2lVKaQoKCJUKyZwAAAFE"]
[Sat Nov 29 04:10:48.010887 2025] [:error] [pid 53818:tid 53852] [client 116.240.149.7:61405] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aSoByJY2lVKaQoKCJUKyaQAAAEM"]
[Sat Nov 29 04:10:50.417526 2025] [:error] [pid 19562:tid 19566] [client 116.240.149.7:59515] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aSoByl4oDK0S9prYl7lDdgAAAQI"]
[Sat Nov 29 04:10:52.366332 2025] [:error] [pid 19562:tid 19565] [client 116.240.149.7:59289] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aSoBzF4oDK0S9prYl7lDeAAAAQE"]
[Sat Nov 29 04:10:54.660260 2025] [:error] [pid 19562:tid 19574] [client 116.240.149.7:64987] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aSoBzl4oDK0S9prYl7lDfAAAAQo"]
[Sat Nov 29 04:10:56.691271 2025] [:error] [pid 53818:tid 53867] [client 116.240.149.7:62251] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aSoB0JY2lVKaQoKCJUKybgAAAFI"]
[Sat Nov 29 04:10:58.738093 2025] [:error] [pid 53817:tid 53843] [client 116.240.149.7:59505] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aSoB0hUtaHwNb4_nTTSbOAAAABY"]
[Sat Nov 29 04:11:00.886794 2025] [:error] [pid 53818:tid 53868] [client 116.240.149.7:59115] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aSoB1JY2lVKaQoKCJUKycQAAAFM"]
[Sat Nov 29 04:11:02.900191 2025] [:error] [pid 53906:tid 53930] [client 116.240.149.7:62983] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aSoB1paQHRVpydtRoVfrOAAAANY"]
[Sat Nov 29 04:11:04.975016 2025] [:error] [pid 53818:tid 53872] [client 116.240.149.7:62706] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aSoB2JY2lVKaQoKCJUKydgAAAFc"]
[Sat Nov 29 04:11:07.228718 2025] [:error] [pid 53819:tid 53887] [client 116.240.149.7:63602] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aSoB27rEG0migocqTWen6wAAAIs"]
[Sat Nov 29 04:11:09.429279 2025] [:error] [pid 19562:tid 19571] [client 116.240.149.7:61919] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aSoB3V4oDK0S9prYl7lDiwAAAQc"]
[Sat Nov 29 04:11:11.565413 2025] [:error] [pid 19562:tid 19587] [client 116.240.149.7:60797] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aSoB314oDK0S9prYl7lDjgAAARc"]
[Sat Nov 29 06:03:32.170918 2025] [:error] [pid 53818:tid 53871] [client 217.146.83.115:44110] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSocNJY2lVKaQoKCJULJlgAAAFY"]
[Sat Nov 29 06:03:32.684779 2025] [:error] [pid 53906:tid 53924] [client 217.146.83.115:44436] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSocNJaQHRVpydtRoVcKmAAAANA"]
[Sat Nov 29 06:03:33.204003 2025] [:error] [pid 22280:tid 22289] [client 217.146.83.115:44838] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSocNZFKJ7cA_ndzTYs0DAAAAUc"]
[Sat Nov 29 06:03:33.720107 2025] [:error] [pid 22939:tid 22963] [client 217.146.83.115:45242] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSocNdRbdh0p_UmbHuCIEAAAAZY"]
[Sat Nov 29 06:03:34.244102 2025] [:error] [pid 22939:tid 22958] [client 217.146.83.115:45638] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aSocNtRbdh0p_UmbHuCIHgAAAZE"]
[Sat Nov 29 06:03:34.765253 2025] [:error] [pid 19562:tid 19588] [client 217.146.83.115:46002] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSocNl4oDK0S9prYl7lonAAAARg"]
[Sat Nov 29 06:03:35.279533 2025] [:error] [pid 53906:tid 53928] [client 217.146.83.115:46370] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSocN5aQHRVpydtRoVcKzQAAANQ"]
[Sat Nov 29 06:03:35.794610 2025] [:error] [pid 53817:tid 53840] [client 217.146.83.115:38905] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSocNxUtaHwNb4_nTTSw-wAAABM"]
[Sat Nov 29 06:03:36.317490 2025] [:error] [pid 19562:tid 19588] [client 217.146.83.115:47132] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSocOF4oDK0S9prYl7loswAAARg"]
[Sat Nov 29 06:03:36.833123 2025] [:error] [pid 53819:tid 53880] [client 217.146.83.115:47472] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSocOLrEG0migocqTWfAQwAAAIQ"]
[Sat Nov 29 13:16:50.158482 2025] [:error] [pid 16610:tid 16629] [client 104.28.246.112:61730] [client 104.28.246.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aSqBwgTu2dLzNk_QISrR4gAAAZE"]
[Sat Nov 29 13:35:26.538288 2025] [:error] [pid 20915:tid 20929] [client 14.215.163.132:56310] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSqGHlOOtKw1QZ3TPESntwAAAMw"]
[Sat Nov 29 13:47:16.830620 2025] [:error] [pid 32136:tid 32157] [client 45.130.203.157:36791] [client 45.130.203.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aSqI5MSj_WSVQM1psKpOnAAAARM"]
[Sat Nov 29 13:55:19.261193 2025] [:error] [pid 25341:tid 25354] [client 159.203.136.234:34236] [client 159.203.136.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSqKx_WK8JdN03Mg7dzvvAAAAck"]
[Sat Nov 29 13:55:22.638160 2025] [:error] [pid 20826:tid 20838] [client 159.203.136.234:46428] [client 159.203.136.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSqKyvABfBqk70vKX9R7SQAAAAg"]
[Sat Nov 29 15:00:50.443637 2025] [:error] [pid 25341:tid 25360] [client 207.154.216.0:55246] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSqaIvWK8JdN03Mg7dz7EwAAAc8"]
[Sat Nov 29 15:00:50.937154 2025] [:error] [pid 20826:tid 20853] [client 207.154.216.0:61224] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSqaIvABfBqk70vKX9SDewAAABc"]
[Sat Nov 29 15:00:51.606136 2025] [:error] [pid 62619:tid 62627] [client 207.154.216.0:57809] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSqaI9k7ZYKT63FfVSUzAQAAAUY"]
[Sat Nov 29 15:00:52.649409 2025] [:error] [pid 20915:tid 20941] [client 207.154.216.0:57176] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSqaJFOOtKw1QZ3TPESzYAAAANg"]
[Sat Nov 29 15:00:53.741850 2025] [:error] [pid 25341:tid 25363] [client 207.154.216.0:61110] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSqaJfWK8JdN03Mg7dz7VgAAAdI"]
[Sat Nov 29 15:14:23.607284 2025] [:error] [pid 20828:tid 20909] [client 207.154.216.0:61064] [client 207.154.216.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/"] [unique_id "aSqdT-qW2f0jLRABAORg1QAAAJc"]
[Sat Nov 29 15:32:50.330700 2025] [:error] [pid 16610:tid 16613] [client 36.50.162.234:59736] [client 36.50.162.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.162.234, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aSqhogTu2dLzNk_QISriLAAAAYE"]
[Sat Nov 29 15:42:18.251843 2025] [:error] [pid 20827:tid 20861] [client 36.50.162.234:50262] [client 36.50.162.234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSqj2oR9B7FcLfh1rSFwCAAAAEM"]
[Sat Nov 29 20:16:42.753242 2025] [:error] [pid 62619:tid 62634] [client 182.43.70.143:39899] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSrkKtk7ZYKT63FfVSVymwAAAU0"]
[Sat Nov 29 21:08:37.352660 2025] [:error] [pid 25341:tid 25350] [client 64.226.118.28:63395] [client 64.226.118.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.118.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSrwVfWK8JdN03Mg7dxdMQAAAcU"]
[Sat Nov 29 21:52:06.152811 2025] [:error] [pid 37490:tid 37515] [client 159.203.136.234:33798] [client 159.203.136.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSr6hpjG6OUSCUo6XZ1ZaAAAAhc"]
[Sat Nov 29 21:52:10.863497 2025] [:error] [pid 20915:tid 20935] [client 159.203.136.234:36878] [client 159.203.136.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSr6ilOOtKw1QZ3TPEQNtgAAANI"]
[Sat Nov 29 22:15:54.236444 2025] [:error] [pid 62619:tid 62633] [client 13.40.30.209:56252] [client 13.40.30.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSsAGtk7ZYKT63FfVSWRSgAAAUw"]
[Sat Nov 29 22:15:55.272988 2025] [:error] [pid 20826:tid 20843] [client 13.40.30.209:57488] [client 13.40.30.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aSsAG_ABfBqk70vKX9Tk1AAAAA0"]
[Sat Nov 29 22:15:56.291278 2025] [:error] [pid 20826:tid 20832] [client 13.40.30.209:57492] [client 13.40.30.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aSsAHPABfBqk70vKX9Tk1wAAAAI"]
[Sat Nov 29 22:15:57.313348 2025] [:error] [pid 20915:tid 20924] [client 13.40.30.209:57496] [client 13.40.30.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aSsAHVOOtKw1QZ3TPEQUCgAAAMc"]
[Sat Nov 29 22:15:58.341270 2025] [:error] [pid 62619:tid 62645] [client 13.40.30.209:57502] [client 13.40.30.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "aSsAHtk7ZYKT63FfVSWRTwAAAVg"]
[Sat Nov 29 22:15:59.404497 2025] [:error] [pid 20828:tid 20910] [client 13.40.30.209:57518] [client 13.40.30.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "aSsAH-qW2f0jLRABAOSs3wAAAJg"]
[Sat Nov 29 22:16:00.455760 2025] [:error] [pid 20827:tid 20880] [client 13.40.30.209:57530] [client 13.40.30.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "aSsAIIR9B7FcLfh1rSGyWAAAAFY"]
[Sat Nov 29 22:16:20.833174 2025] [:error] [pid 32136:tid 32155] [client 13.40.30.209:54886] [client 13.40.30.209] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config.ini"] [unique_id "aSsANMSj_WSVQM1psKrChwAAARE"]
[Sat Nov 29 22:16:26.210603 2025] [:error] [pid 62619:tid 62636] [client 13.40.30.209:46900] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/settings"] [unique_id "aSsAOtk7ZYKT63FfVSWRZAAAAU8"]
[Sat Nov 29 22:16:27.236949 2025] [:error] [pid 25341:tid 25353] [client 13.40.30.209:46902] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/settings.json"] [unique_id "aSsAO_WK8JdN03Mg7dxq4wAAAcg"]
[Sat Nov 29 22:16:28.267481 2025] [:error] [pid 62619:tid 62628] [client 13.40.30.209:46918] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app.config.js"] [unique_id "aSsAPNk7ZYKT63FfVSWRZwAAAUc"]
[Sat Nov 29 22:16:29.293160 2025] [:error] [pid 25341:tid 25345] [client 13.40.30.209:46932] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aSsAPfWK8JdN03Mg7dxq5QAAAcA"]
[Sat Nov 29 22:16:30.319632 2025] [:error] [pid 25341:tid 25364] [client 13.40.30.209:46938] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aSsAPvWK8JdN03Mg7dxq5gAAAdM"]
[Sat Nov 29 22:16:31.345039 2025] [:error] [pid 20827:tid 20860] [client 13.40.30.209:46948] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpversion.php"] [unique_id "aSsAP4R9B7FcLfh1rSGyZQAAAEI"]
[Sat Nov 29 22:16:32.368625 2025] [:error] [pid 62619:tid 62626] [client 13.40.30.209:46964] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aSsAQNk7ZYKT63FfVSWRagAAAUU"]
[Sat Nov 29 22:16:33.392238 2025] [:error] [pid 16610:tid 16624] [client 13.40.30.209:46978] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/admin"] [unique_id "aSsAQQTu2dLzNk_QISoqTAAAAYw"]
[Sat Nov 29 22:16:34.414298 2025] [:error] [pid 16610:tid 16628] [client 13.40.30.209:46984] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSsAQgTu2dLzNk_QISoqTQAAAZA"]
[Sat Nov 29 22:16:35.441342 2025] [:error] [pid 20826:tid 20853] [client 13.40.30.209:42538] [client 13.40.30.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-config.php"] [unique_id "aSsAQ_ABfBqk70vKX9Tk9AAAABc"]
[Sat Nov 29 22:16:36.460896 2025] [:error] [pid 32136:tid 32146] [client 13.40.30.209:42542] [client 13.40.30.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/composer.json"] [unique_id "aSsARMSj_WSVQM1psKrCkAAAAQg"]
[Sat Nov 29 22:16:37.490169 2025] [:error] [pid 20915:tid 20918] [client 13.40.30.209:42552] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.aws/config"] [unique_id "aSsARVOOtKw1QZ3TPEQUMgAAAME"]
[Sat Nov 29 22:16:38.516719 2025] [:error] [pid 20828:tid 20908] [client 13.40.30.209:42558] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.aws/credentials"] [unique_id "aSsARuqW2f0jLRABAOSs-AAAAJY"]
[Sat Nov 29 22:16:39.542130 2025] [:error] [pid 20915:tid 20922] [client 13.40.30.209:42562] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws/config"] [unique_id "aSsAR1OOtKw1QZ3TPEQUNgAAAMU"]
[Sat Nov 29 22:16:40.569290 2025] [:error] [pid 16610:tid 16636] [client 13.40.30.209:42568] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws/credentials"] [unique_id "aSsASATu2dLzNk_QISoqUQAAAZg"]
[Sat Nov 29 22:16:41.607606 2025] [:error] [pid 20828:tid 20904] [client 13.40.30.209:42570] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws.json"] [unique_id "aSsASeqW2f0jLRABAOSs_AAAAJM"]
[Sat Nov 29 22:16:42.646091 2025] [:error] [pid 20828:tid 20903] [client 13.40.30.209:42576] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/credentials"] [unique_id "aSsASuqW2f0jLRABAOStAAAAAJI"]
[Sat Nov 29 22:16:43.664806 2025] [:error] [pid 20828:tid 20886] [client 13.40.30.209:42580] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/secrets.json"] [unique_id "aSsAS-qW2f0jLRABAOStAgAAAIE"]
[Sat Nov 29 22:16:44.733056 2025] [:error] [pid 62619:tid 62641] [client 13.40.30.209:51008] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/keys.js"] [unique_id "aSsATNk7ZYKT63FfVSWRbgAAAVQ"]
[Sat Nov 29 22:16:45.760175 2025] [:error] [pid 20828:tid 20906] [client 13.40.30.209:51018] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws-keys.js"] [unique_id "aSsATeqW2f0jLRABAOStCAAAAJQ"]
[Sat Nov 29 22:16:46.791995 2025] [:error] [pid 20827:tid 20879] [client 13.40.30.209:51026] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun"] [unique_id "aSsAToR9B7FcLfh1rSGycgAAAFU"]
[Sat Nov 29 22:16:47.816807 2025] [:error] [pid 20826:tid 20840] [client 13.40.30.209:51036] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun.json"] [unique_id "aSsAT_ABfBqk70vKX9TlAAAAAAo"]
[Sat Nov 29 22:16:48.850018 2025] [:error] [pid 25341:tid 25363] [client 13.40.30.209:51042] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun/config"] [unique_id "aSsAUPWK8JdN03Mg7dxq7gAAAdI"]
[Sat Nov 29 22:16:49.867305 2025] [:error] [pid 62619:tid 62632] [client 13.40.30.209:51056] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun.php"] [unique_id "aSsAUdk7ZYKT63FfVSWRcgAAAUs"]
[Sat Nov 29 22:16:50.912708 2025] [:error] [pid 62619:tid 62631] [client 13.40.30.209:51060] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid"] [unique_id "aSsAUtk7ZYKT63FfVSWRfAAAAUo"]
[Sat Nov 29 22:16:51.929016 2025] [:error] [pid 25341:tid 25356] [client 13.40.30.209:51070] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid.json"] [unique_id "aSsAU_WK8JdN03Mg7dxq8QAAAcs"]
[Sat Nov 29 22:16:52.956696 2025] [:error] [pid 20826:tid 20850] [client 13.40.30.209:51082] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid/config"] [unique_id "aSsAVPABfBqk70vKX9TlBAAAABQ"]
[Sat Nov 29 22:16:53.986483 2025] [:error] [pid 20826:tid 20853] [client 13.40.30.209:51088] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid.php"] [unique_id "aSsAVfABfBqk70vKX9TlBQAAABc"]
[Sat Nov 29 22:16:55.015778 2025] [:error] [pid 20915:tid 20917] [client 13.40.30.209:48630] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid.env"] [unique_id "aSsAV1OOtKw1QZ3TPEQUPgAAAMA"]
[Sat Nov 29 22:16:56.038393 2025] [:error] [pid 20826:tid 20835] [client 13.40.30.209:48636] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo"] [unique_id "aSsAWPABfBqk70vKX9TlCAAAAAU"]
[Sat Nov 29 22:16:57.061448 2025] [:error] [pid 20827:tid 20869] [client 13.40.30.209:48646] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo.json"] [unique_id "aSsAWYR9B7FcLfh1rSGyfQAAAEs"]
[Sat Nov 29 22:16:58.079776 2025] [:error] [pid 20828:tid 20896] [client 13.40.30.209:48654] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo/config"] [unique_id "aSsAWuqW2f0jLRABAOStDgAAAIs"]
[Sat Nov 29 22:16:59.110722 2025] [:error] [pid 62619:tid 62644] [client 13.40.30.209:48662] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo.php"] [unique_id "aSsAW9k7ZYKT63FfVSWRggAAAVc"]
[Sat Nov 29 22:17:00.129391 2025] [:error] [pid 32136:tid 32152] [client 13.40.30.209:48668] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/php"] [unique_id "aSsAXMSj_WSVQM1psKrClgAAAQ4"]
[Sat Nov 29 22:17:01.164856 2025] [:error] [pid 62619:tid 62634] [client 13.40.30.209:48678] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info"] [unique_id "aSsAXdk7ZYKT63FfVSWRhQAAAU0"]
[Sat Nov 29 22:17:02.204592 2025] [:error] [pid 20827:tid 20863] [client 13.40.30.209:48682] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpinfo"] [unique_id "aSsAXoR9B7FcLfh1rSGyggAAAEU"]
[Sat Nov 29 22:17:03.224117 2025] [:error] [pid 20828:tid 20904] [client 13.40.30.209:48684] [client 13.40.30.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSsAX-qW2f0jLRABAOStFAAAAJM"]
[Sat Nov 29 23:40:35.251555 2025] [:error] [pid 20915:tid 20941] [client 62.84.185.60:33306] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aSsT81OOtKw1QZ3TPEQn4gAAANg"]
[Sat Nov 29 23:40:37.827507 2025] [:error] [pid 37490:tid 37512] [client 62.84.185.60:33310] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aSsT9ZjG6OUSCUo6XZ13GAAAAhQ"]
[Sat Nov 29 23:40:40.310182 2025] [:error] [pid 20827:tid 20862] [client 62.84.185.60:33324] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aSsT-IR9B7FcLfh1rSHBcAAAAEQ"]
[Sat Nov 29 23:40:42.773338 2025] [:error] [pid 16610:tid 16632] [client 62.84.185.60:33338] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aSsT-gTu2dLzNk_QISo6ywAAAZQ"]
[Sat Nov 29 23:40:45.161596 2025] [:error] [pid 20827:tid 20879] [client 62.84.185.60:21778] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aSsT_YR9B7FcLfh1rSHBdAAAAFU"]
[Sat Nov 29 23:40:47.666633 2025] [:error] [pid 20828:tid 20895] [client 62.84.185.60:21784] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aSsT_-qW2f0jLRABAOS92gAAAIo"]
[Sat Nov 29 23:40:50.324091 2025] [:error] [pid 20915:tid 20938] [client 62.84.185.60:21798] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aSsUAlOOtKw1QZ3TPEQn7AAAANU"]
[Sat Nov 29 23:40:52.977021 2025] [:error] [pid 20828:tid 20901] [client 62.84.185.60:21800] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aSsUBOqW2f0jLRABAOS95AAAAJA"]
[Sat Nov 29 23:40:55.532003 2025] [:error] [pid 37490:tid 37505] [client 62.84.185.60:7078] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aSsUB5jG6OUSCUo6XZ13NwAAAg0"]
[Sat Nov 29 23:40:58.015940 2025] [:error] [pid 25341:tid 25348] [client 62.84.185.60:7090] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aSsUCvWK8JdN03Mg7dx_lwAAAcM"]
[Sat Nov 29 23:41:00.546666 2025] [:error] [pid 20915:tid 20930] [client 62.84.185.60:7094] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aSsUDFOOtKw1QZ3TPEQn_AAAAM0"]
[Sat Nov 29 23:41:03.151016 2025] [:error] [pid 25341:tid 25361] [client 62.84.185.60:7108] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aSsUD_WK8JdN03Mg7dx_owAAAdA"]
[Sun Nov 30 01:30:25.903734 2025] [:error] [pid 33303:tid 33310] [client 3.20.226.81:45490] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aSstsfvL3Xz3V8uL8l5qQgAAAYU"]
[Sun Nov 30 01:30:25.904142 2025] [:error] [pid 33303:tid 33320] [client 3.20.226.81:45494] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aSstsfvL3Xz3V8uL8l5qQwAAAY8"]
[Sun Nov 30 01:30:25.904214 2025] [:error] [pid 29714:tid 29721] [client 3.20.226.81:45496] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.remote"] [unique_id "aSstsb76_KNwefuiUY9z9gAAAEU"]
[Sun Nov 30 01:30:25.903699 2025] [:error] [pid 33303:tid 33323] [client 3.20.226.81:45492] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "aSstsfvL3Xz3V8uL8l5qQQAAAZI"]
[Sun Nov 30 01:30:26.023093 2025] [:error] [pid 42162:tid 42184] [client 3.20.226.81:45498] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging"] [unique_id "aSststePpz4Ije-_EjrwDwAAAJE"]
[Sun Nov 30 01:30:26.023916 2025] [:error] [pid 42164:tid 42233] [client 3.20.226.81:45500] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aSststip8Nhatsq7KxzcXwAAAQs"]
[Sun Nov 30 01:30:26.426377 2025] [:error] [pid 42164:tid 42236] [client 3.20.226.81:45598] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test"] [unique_id "aSststip8Nhatsq7KxzcYAAAAQ4"]
[Sun Nov 30 01:30:26.590373 2025] [:error] [pid 42164:tid 42242] [client 3.20.226.81:45600] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "aSststip8Nhatsq7KxzcYQAAARQ"]
[Sun Nov 30 01:30:26.590693 2025] [:error] [pid 42163:tid 42216] [client 3.20.226.81:45602] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "aSstspnaEs-eGc51wg2SDwAAANU"]
[Sun Nov 30 01:30:27.351426 2025] [:error] [pid 42164:tid 42241] [client 3.20.226.81:45670] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample"] [unique_id "aSsts9ip8Nhatsq7KxzcYgAAARM"]
[Sun Nov 30 01:30:27.658126 2025] [:error] [pid 42164:tid 42243] [client 3.20.226.81:45874] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "aSsts9ip8Nhatsq7KxzcYwAAARU"]
[Sun Nov 30 01:30:27.658370 2025] [:error] [pid 33337:tid 33349] [client 3.20.226.81:45876] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old"] [unique_id "aSstsz7HzFQftKzaJgJwHgAAAcg"]
[Sun Nov 30 01:30:28.163127 2025] [:error] [pid 42162:tid 42174] [client 3.20.226.81:45938] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/vendor/.env"] [unique_id "aSsttNePpz4Ije-_EjrwEwAAAIc"]
[Sun Nov 30 01:30:28.761284 2025] [:error] [pid 42162:tid 42169] [client 3.20.226.81:46066] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/lib/.env"] [unique_id "aSsttNePpz4Ije-_EjrwFAAAAII"]
[Sun Nov 30 01:30:29.358499 2025] [:error] [pid 42252:tid 42272] [client 3.20.226.81:46478] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/lab/.env"] [unique_id "aSsttbweMxCk051n8_-2vwAAAVI"]
[Sun Nov 30 01:30:29.358927 2025] [:error] [pid 33337:tid 33353] [client 3.20.226.81:46540] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/cronlab/.env"] [unique_id "aSsttT7HzFQftKzaJgJwIgAAAcw"]
[Sun Nov 30 01:30:29.725747 2025] [:error] [pid 42164:tid 42223] [client 3.20.226.81:46842] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/cron/.env"] [unique_id "aSsttdip8Nhatsq7KxzcaQAAAQE"]
[Sun Nov 30 01:30:29.938647 2025] [:error] [pid 33303:tid 33306] [client 3.20.226.81:47198] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/core/.env"] [unique_id "aSsttfvL3Xz3V8uL8l5qSgAAAYE"]
[Sun Nov 30 01:30:30.472230 2025] [:error] [pid 42162:tid 42172] [client 3.20.226.81:47516] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/core/app/.env"] [unique_id "aSstttePpz4Ije-_EjrwGgAAAIU"]
[Sun Nov 30 01:30:30.674441 2025] [:error] [pid 42162:tid 42170] [client 3.20.226.81:47964] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/core/Datavase/.env"] [unique_id "aSstttePpz4Ije-_EjrwGwAAAIM"]
[Sun Nov 30 01:30:30.675374 2025] [:error] [pid 58730:tid 58789] [client 3.20.226.81:48252] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/database/.env"] [unique_id "aSsttqDQq6rwusUXQKje-AAAABc"]
[Sun Nov 30 01:30:30.866122 2025] [:error] [pid 33337:tid 33358] [client 3.20.226.81:48448] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/config/.env"] [unique_id "aSsttj7HzFQftKzaJgJwJgAAAdE"]
[Sun Nov 30 01:30:32.927990 2025] [:error] [pid 33376:tid 33393] [client 3.20.226.81:49718] [client 3.20.226.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/.env"] [unique_id "aSstuHpx_7viPEhKF36GeQAAAg4"]
[Sun Nov 30 02:02:56.966774 2025] [:error] [pid 42252:tid 42259] [client 54.253.95.47:45116] [client 54.253.95.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSs1ULweMxCk051n8_--5QAAAUU"]
[Sun Nov 30 02:02:57.028107 2025] [:error] [pid 58730:tid 58775] [client 54.253.95.47:45130] [client 54.253.95.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aSs1UaDQq6rwusUXQKjl1wAAAAo"]
[Sun Nov 30 02:02:57.082509 2025] [:error] [pid 42162:tid 42190] [client 54.253.95.47:45146] [client 54.253.95.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aSs1UdePpz4Ije-_Ejr4QwAAAJc"]
[Sun Nov 30 02:02:57.142002 2025] [:error] [pid 58730:tid 58777] [client 54.253.95.47:45160] [client 54.253.95.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aSs1UaDQq6rwusUXQKjl2QAAAAw"]
[Sun Nov 30 02:02:57.195218 2025] [:error] [pid 58730:tid 58783] [client 54.253.95.47:45170] [client 54.253.95.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "aSs1UaDQq6rwusUXQKjl2gAAABI"]
[Sun Nov 30 02:02:57.252051 2025] [:error] [pid 42252:tid 42276] [client 54.253.95.47:45184] [client 54.253.95.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "aSs1UbweMxCk051n8_--5gAAAVY"]
[Sun Nov 30 02:02:57.308101 2025] [:error] [pid 33303:tid 33315] [client 54.253.95.47:45188] [client 54.253.95.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "aSs1UfvL3Xz3V8uL8l5yJwAAAYo"]
[Sun Nov 30 02:03:05.496409 2025] [:error] [pid 29714:tid 29731] [client 54.253.95.47:41808] [client 54.253.95.47] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config.ini"] [unique_id "aSs1Wb76_KNwefuiUY97TwAAAE8"]
[Sun Nov 30 02:03:07.449175 2025] [:error] [pid 29714:tid 29725] [client 54.253.95.47:41834] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/settings"] [unique_id "aSs1W776_KNwefuiUY97UwAAAEk"]
[Sun Nov 30 02:03:07.506969 2025] [:error] [pid 33303:tid 33315] [client 54.253.95.47:41842] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/settings.json"] [unique_id "aSs1W_vL3Xz3V8uL8l5yNAAAAYo"]
[Sun Nov 30 02:03:07.567035 2025] [:error] [pid 42162:tid 42183] [client 54.253.95.47:41852] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app.config.js"] [unique_id "aSs1W9ePpz4Ije-_Ejr4UwAAAJA"]
[Sun Nov 30 02:03:07.625182 2025] [:error] [pid 42163:tid 42199] [client 54.253.95.47:41856] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aSs1W5naEs-eGc51wg2Y1gAAAMQ"]
[Sun Nov 30 02:03:07.682083 2025] [:error] [pid 42252:tid 42277] [client 54.253.95.47:41868] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aSs1W7weMxCk051n8_--8wAAAVc"]
[Sun Nov 30 02:03:07.737957 2025] [:error] [pid 58730:tid 58766] [client 54.253.95.47:41882] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpversion.php"] [unique_id "aSs1W6DQq6rwusUXQKjl4wAAAAE"]
[Sun Nov 30 02:03:07.798063 2025] [:error] [pid 42164:tid 42230] [client 54.253.95.47:41894] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aSs1W9ip8Nhatsq7KxzmZgAAAQg"]
[Sun Nov 30 02:03:07.854093 2025] [:error] [pid 33376:tid 33399] [client 54.253.95.47:41904] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/admin"] [unique_id "aSs1W3px_7viPEhKF36QzwAAAhQ"]
[Sun Nov 30 02:03:07.909038 2025] [:error] [pid 42164:tid 42234] [client 54.253.95.47:41914] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSs1W9ip8Nhatsq7KxzmZwAAAQw"]
[Sun Nov 30 02:03:07.966531 2025] [:error] [pid 29714:tid 29716] [client 54.253.95.47:41922] [client 54.253.95.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-config.php"] [unique_id "aSs1W776_KNwefuiUY97VAAAAEA"]
[Sun Nov 30 02:03:08.025106 2025] [:error] [pid 42252:tid 42274] [client 54.253.95.47:51032] [client 54.253.95.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/composer.json"] [unique_id "aSs1XLweMxCk051n8_--9AAAAVQ"]
[Sun Nov 30 02:03:08.081857 2025] [:error] [pid 33337:tid 33351] [client 54.253.95.47:51048] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.aws/config"] [unique_id "aSs1XD7HzFQftKzaJgJ4KgAAAco"]
[Sun Nov 30 02:03:08.139205 2025] [:error] [pid 42164:tid 42227] [client 54.253.95.47:51050] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.aws/credentials"] [unique_id "aSs1XNip8Nhatsq7KxzmaAAAAQU"]
[Sun Nov 30 02:03:08.196301 2025] [:error] [pid 42252:tid 42273] [client 54.253.95.47:51066] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws/config"] [unique_id "aSs1XLweMxCk051n8_--9QAAAVM"]
[Sun Nov 30 02:03:08.259468 2025] [:error] [pid 29714:tid 29732] [client 54.253.95.47:51080] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws/credentials"] [unique_id "aSs1XL76_KNwefuiUY97VQAAAFA"]
[Sun Nov 30 02:03:08.316870 2025] [:error] [pid 33337:tid 33346] [client 54.253.95.47:51082] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws.json"] [unique_id "aSs1XD7HzFQftKzaJgJ4KwAAAcU"]
[Sun Nov 30 02:03:08.374676 2025] [:error] [pid 58730:tid 58780] [client 54.253.95.47:51090] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/credentials"] [unique_id "aSs1XKDQq6rwusUXQKjl5AAAAA8"]
[Sun Nov 30 02:03:08.431816 2025] [:error] [pid 33337:tid 33358] [client 54.253.95.47:51098] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/secrets.json"] [unique_id "aSs1XD7HzFQftKzaJgJ4LAAAAdE"]
[Sun Nov 30 02:03:08.487425 2025] [:error] [pid 33303:tid 33323] [client 54.253.95.47:51110] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/keys.js"] [unique_id "aSs1XPvL3Xz3V8uL8l5yNgAAAZI"]
[Sun Nov 30 02:03:08.551887 2025] [:error] [pid 42252:tid 42266] [client 54.253.95.47:51120] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws-keys.js"] [unique_id "aSs1XLweMxCk051n8_--9gAAAUw"]
[Sun Nov 30 02:03:08.618105 2025] [:error] [pid 58730:tid 58768] [client 54.253.95.47:51134] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun"] [unique_id "aSs1XKDQq6rwusUXQKjl5gAAAAM"]
[Sun Nov 30 02:03:08.675897 2025] [:error] [pid 58730:tid 58773] [client 54.253.95.47:51150] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun.json"] [unique_id "aSs1XKDQq6rwusUXQKjl5wAAAAg"]
[Sun Nov 30 02:03:08.734778 2025] [:error] [pid 42164:tid 42228] [client 54.253.95.47:51164] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun/config"] [unique_id "aSs1XNip8Nhatsq7KxzmaQAAAQY"]
[Sun Nov 30 02:03:08.790718 2025] [:error] [pid 33376:tid 33390] [client 54.253.95.47:51170] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun.php"] [unique_id "aSs1XHpx_7viPEhKF36Q0QAAAgs"]
[Sun Nov 30 02:03:08.849671 2025] [:error] [pid 33376:tid 33389] [client 54.253.95.47:51182] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid"] [unique_id "aSs1XHpx_7viPEhKF36Q0gAAAgo"]
[Sun Nov 30 02:03:08.907342 2025] [:error] [pid 58730:tid 58787] [client 54.253.95.47:51194] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid.json"] [unique_id "aSs1XKDQq6rwusUXQKjl6AAAABU"]
[Sun Nov 30 02:03:08.962486 2025] [:error] [pid 33376:tid 33391] [client 54.253.95.47:51202] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid/config"] [unique_id "aSs1XHpx_7viPEhKF36Q1AAAAgw"]
[Sun Nov 30 02:03:09.020811 2025] [:error] [pid 33376:tid 33392] [client 54.253.95.47:51206] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid.php"] [unique_id "aSs1XXpx_7viPEhKF36Q1QAAAg0"]
[Sun Nov 30 02:03:09.077546 2025] [:error] [pid 33376:tid 33379] [client 54.253.95.47:51208] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid.env"] [unique_id "aSs1XXpx_7viPEhKF36Q1gAAAgA"]
[Sun Nov 30 02:03:09.136887 2025] [:error] [pid 58730:tid 58769] [client 54.253.95.47:51216] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo"] [unique_id "aSs1XaDQq6rwusUXQKjl6QAAAAQ"]
[Sun Nov 30 02:03:09.190538 2025] [:error] [pid 42164:tid 42244] [client 54.253.95.47:51224] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo.json"] [unique_id "aSs1Xdip8Nhatsq7KxzmagAAARY"]
[Sun Nov 30 02:03:09.249170 2025] [:error] [pid 58730:tid 58774] [client 54.253.95.47:51236] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo/config"] [unique_id "aSs1XaDQq6rwusUXQKjl6gAAAAk"]
[Sun Nov 30 02:03:09.306710 2025] [:error] [pid 33376:tid 33395] [client 54.253.95.47:51246] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo.php"] [unique_id "aSs1XXpx_7viPEhKF36Q1wAAAhA"]
[Sun Nov 30 02:03:09.361622 2025] [:error] [pid 42162:tid 42174] [client 54.253.95.47:51260] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/php"] [unique_id "aSs1XdePpz4Ije-_Ejr4VQAAAIc"]
[Sun Nov 30 02:03:09.419956 2025] [:error] [pid 33376:tid 33397] [client 54.253.95.47:51268] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info"] [unique_id "aSs1XXpx_7viPEhKF36Q2AAAAhI"]
[Sun Nov 30 02:03:09.476439 2025] [:error] [pid 33303:tid 33306] [client 54.253.95.47:51282] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpinfo"] [unique_id "aSs1XfvL3Xz3V8uL8l5yNwAAAYE"]
[Sun Nov 30 02:03:09.531320 2025] [:error] [pid 33337:tid 33356] [client 54.253.95.47:51288] [client 54.253.95.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSs1XT7HzFQftKzaJgJ4LQAAAc8"]
[Sun Nov 30 03:08:38.713364 2025] [:error] [pid 42162:tid 42189] [client 113.219.218.197:45775] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aStEttePpz4Ije-_EjoDJgAAAJY"]
[Sun Nov 30 03:19:07.716671 2025] [:error] [pid 33303:tid 33311] [client 52.56.117.120:41114] [client 52.56.117.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aStHK_vL3Xz3V8uL8l6JcgAAAYY"]
[Sun Nov 30 03:19:08.733565 2025] [:error] [pid 53977:tid 53983] [client 52.56.117.120:41130] [client 52.56.117.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aStHLKCMKg3RMo8GfKIjdQAAAkQ"]
[Sun Nov 30 03:19:09.756649 2025] [:error] [pid 33376:tid 33401] [client 52.56.117.120:41138] [client 52.56.117.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aStHLXpx_7viPEhKF36i0QAAAhY"]
[Sun Nov 30 03:19:10.773227 2025] [:error] [pid 29714:tid 29721] [client 52.56.117.120:41140] [client 52.56.117.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aStHLr76_KNwefuiUY-IsQAAAEU"]
[Sun Nov 30 03:19:11.789791 2025] [:error] [pid 42162:tid 42176] [client 52.56.117.120:41142] [client 52.56.117.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "aStHL9ePpz4Ije-_EjoEtQAAAIk"]
[Sun Nov 30 03:19:12.808299 2025] [:error] [pid 42252:tid 42255] [client 52.56.117.120:41144] [client 52.56.117.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "aStHMLweMxCk051n8__NgAAAAUE"]
[Sun Nov 30 03:19:13.829456 2025] [:error] [pid 58730:tid 58777] [client 52.56.117.120:41152] [client 52.56.117.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "aStHMaDQq6rwusUXQKjxqAAAAAw"]
[Sun Nov 30 03:19:33.967312 2025] [:error] [pid 33337:tid 33353] [client 52.56.117.120:52322] [client 52.56.117.120] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config.ini"] [unique_id "aStHRT7HzFQftKzaJgKEkwAAAcw"]
[Sun Nov 30 03:19:39.229593 2025] [:error] [pid 42162:tid 42184] [client 52.56.117.120:45618] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/settings"] [unique_id "aStHS9ePpz4Ije-_EjoEyAAAAJE"]
[Sun Nov 30 03:19:40.247159 2025] [:error] [pid 53977:tid 54003] [client 52.56.117.120:45632] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/settings.json"] [unique_id "aStHTKCMKg3RMo8GfKIjkwAAAlg"]
[Sun Nov 30 03:19:41.262638 2025] [:error] [pid 29714:tid 29727] [client 52.56.117.120:45644] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app.config.js"] [unique_id "aStHTb76_KNwefuiUY-IygAAAEs"]
[Sun Nov 30 03:19:42.280844 2025] [:error] [pid 33337:tid 33365] [client 52.56.117.120:45658] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aStHTj7HzFQftKzaJgKEpAAAAdg"]
[Sun Nov 30 03:19:43.294951 2025] [:error] [pid 53977:tid 53998] [client 52.56.117.120:45672] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aStHT6CMKg3RMo8GfKIjrQAAAlM"]
[Sun Nov 30 03:19:44.309225 2025] [:error] [pid 33337:tid 33348] [client 52.56.117.120:45680] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpversion.php"] [unique_id "aStHUD7HzFQftKzaJgKEtgAAAcc"]
[Sun Nov 30 03:19:45.326540 2025] [:error] [pid 33303:tid 33323] [client 52.56.117.120:45692] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aStHUfvL3Xz3V8uL8l6JmQAAAZI"]
[Sun Nov 30 03:19:46.351610 2025] [:error] [pid 29714:tid 29734] [client 52.56.117.120:45696] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/admin"] [unique_id "aStHUr76_KNwefuiUY-IzAAAAFI"]
[Sun Nov 30 03:19:47.366929 2025] [:error] [pid 29714:tid 29718] [client 52.56.117.120:55856] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aStHU776_KNwefuiUY-IzwAAAEI"]
[Sun Nov 30 03:19:48.381425 2025] [:error] [pid 33376:tid 33387] [client 52.56.117.120:55858] [client 52.56.117.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-config.php"] [unique_id "aStHVHpx_7viPEhKF36i7AAAAgg"]
[Sun Nov 30 03:19:49.398284 2025] [:error] [pid 42252:tid 42268] [client 52.56.117.120:55872] [client 52.56.117.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/composer.json"] [unique_id "aStHVbweMxCk051n8__NmAAAAU4"]
[Sun Nov 30 03:19:50.421935 2025] [:error] [pid 42162:tid 42191] [client 52.56.117.120:55882] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.aws/config"] [unique_id "aStHVtePpz4Ije-_EjoE0gAAAJg"]
[Sun Nov 30 03:19:51.438104 2025] [:error] [pid 42163:tid 42202] [client 52.56.117.120:55892] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.aws/credentials"] [unique_id "aStHV5naEs-eGc51wg2k8QAAAMc"]
[Sun Nov 30 03:19:52.452333 2025] [:error] [pid 42163:tid 42198] [client 52.56.117.120:55902] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws/config"] [unique_id "aStHWJnaEs-eGc51wg2k8wAAAMM"]
[Sun Nov 30 03:19:53.471454 2025] [:error] [pid 33376:tid 33394] [client 52.56.117.120:55904] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws/credentials"] [unique_id "aStHWXpx_7viPEhKF36i8QAAAg8"]
[Sun Nov 30 03:19:54.492215 2025] [:error] [pid 29714:tid 29726] [client 52.56.117.120:55920] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws.json"] [unique_id "aStHWr76_KNwefuiUY-I1QAAAEo"]
[Sun Nov 30 03:19:55.508453 2025] [:error] [pid 58730:tid 58768] [client 52.56.117.120:55922] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/credentials"] [unique_id "aStHW6DQq6rwusUXQKjxwQAAAAM"]
[Sun Nov 30 03:19:56.526605 2025] [:error] [pid 33376:tid 33389] [client 52.56.117.120:55932] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/secrets.json"] [unique_id "aStHXHpx_7viPEhKF36i9AAAAgo"]
[Sun Nov 30 03:19:57.548439 2025] [:error] [pid 42164:tid 42223] [client 52.56.117.120:59426] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/keys.js"] [unique_id "aStHXdip8Nhatsq7Kxz0IAAAAQE"]
[Sun Nov 30 03:19:58.564172 2025] [:error] [pid 29714:tid 29719] [client 52.56.117.120:59430] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/aws-keys.js"] [unique_id "aStHXr76_KNwefuiUY-I2AAAAEM"]
[Sun Nov 30 03:19:59.580121 2025] [:error] [pid 53977:tid 53980] [client 52.56.117.120:59440] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun"] [unique_id "aStHX6CMKg3RMo8GfKIjvwAAAkE"]
[Sun Nov 30 03:20:00.596866 2025] [:error] [pid 42164:tid 42244] [client 52.56.117.120:59454] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun.json"] [unique_id "aStHYNip8Nhatsq7Kxz0JAAAARY"]
[Sun Nov 30 03:20:01.620629 2025] [:error] [pid 42252:tid 42270] [client 52.56.117.120:59466] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun/config"] [unique_id "aStHYbweMxCk051n8__NnAAAAVA"]
[Sun Nov 30 03:20:02.635529 2025] [:error] [pid 53977:tid 53992] [client 52.56.117.120:59474] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mailgun.php"] [unique_id "aStHYqCMKg3RMo8GfKIjwgAAAk0"]
[Sun Nov 30 03:20:03.649940 2025] [:error] [pid 42252:tid 42264] [client 52.56.117.120:59478] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid"] [unique_id "aStHY7weMxCk051n8__NngAAAUo"]
[Sun Nov 30 03:20:04.664805 2025] [:error] [pid 33303:tid 33327] [client 52.56.117.120:59482] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid.json"] [unique_id "aStHZPvL3Xz3V8uL8l6JqAAAAZY"]
[Sun Nov 30 03:20:05.687630 2025] [:error] [pid 42163:tid 42208] [client 52.56.117.120:59496] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid/config"] [unique_id "aStHZZnaEs-eGc51wg2k-gAAAM0"]
[Sun Nov 30 03:20:06.704381 2025] [:error] [pid 42162:tid 42176] [client 52.56.117.120:59498] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid.php"] [unique_id "aStHZtePpz4Ije-_EjoE3wAAAIk"]
[Sun Nov 30 03:20:07.720901 2025] [:error] [pid 33376:tid 33390] [client 52.56.117.120:37684] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sendgrid.env"] [unique_id "aStHZ3px_7viPEhKF36jAQAAAgs"]
[Sun Nov 30 03:20:08.735724 2025] [:error] [pid 53977:tid 53997] [client 52.56.117.120:37700] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo"] [unique_id "aStHaKCMKg3RMo8GfKIjywAAAlI"]
[Sun Nov 30 03:20:09.755033 2025] [:error] [pid 42164:tid 42236] [client 52.56.117.120:37710] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo.json"] [unique_id "aStHadip8Nhatsq7Kxz0LAAAAQ4"]
[Sun Nov 30 03:20:10.769203 2025] [:error] [pid 42164:tid 42222] [client 52.56.117.120:37722] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo/config"] [unique_id "aStHatip8Nhatsq7Kxz0LgAAAQA"]
[Sun Nov 30 03:20:11.784647 2025] [:error] [pid 33376:tid 33381] [client 52.56.117.120:37738] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/brevo.php"] [unique_id "aStHa3px_7viPEhKF36jCgAAAgI"]
[Sun Nov 30 03:20:12.800135 2025] [:error] [pid 58730:tid 58766] [client 52.56.117.120:37754] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/php"] [unique_id "aStHbKDQq6rwusUXQKjxzQAAAAE"]
[Sun Nov 30 03:20:13.820800 2025] [:error] [pid 42163:tid 42208] [client 52.56.117.120:37756] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info"] [unique_id "aStHbZnaEs-eGc51wg2lCQAAAM0"]
[Sun Nov 30 03:20:14.836346 2025] [:error] [pid 42162:tid 42191] [client 52.56.117.120:37770] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpinfo"] [unique_id "aStHbtePpz4Ije-_EjoE5AAAAJg"]
[Sun Nov 30 03:20:15.851052 2025] [:error] [pid 58730:tid 58790] [client 52.56.117.120:37772] [client 52.56.117.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aStHb6DQq6rwusUXQKjx0wAAABg"]
[Sun Nov 30 03:55:02.166750 2025] [:error] [pid 41483:tid 41548] [client 172.98.33.32:64405] [client 172.98.33.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.33.32, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aStPlij87qRaKF3EkqPkagAAAII"]
[Sun Nov 30 04:10:52.712266 2025] [:error] [pid 44951:tid 44963] [client 13.233.100.130:51236] [client 13.233.100.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aStTTP9n-K61ohCFHy7BNwAAAMo"]
[Sun Nov 30 04:10:53.339405 2025] [:error] [pid 44844:tid 44915] [client 13.233.100.130:51252] [client 13.233.100.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aStTTRkTTwUoGl70YUDbsQAAAIA"]
[Sun Nov 30 04:10:53.968745 2025] [:error] [pid 44999:tid 45043] [client 13.233.100.130:51262] [client 13.233.100.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aStTTS9uSNEe69uZ9WRlywAAAUo"]
[Sun Nov 30 04:10:54.634574 2025] [:error] [pid 44951:tid 44976] [client 13.233.100.130:51268] [client 13.233.100.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aStTTv9n-K61ohCFHy7BOAAAANc"]
[Sun Nov 30 04:10:55.350525 2025] [:error] [pid 44842:tid 44869] [client 13.233.100.130:51270] [client 13.233.100.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "aStTT6FM4fJabGrvKRWMQQAAABI"]
[Sun Nov 30 04:10:55.983725 2025] [:error] [pid 44842:tid 44852] [client 13.233.100.130:51272] [client 13.233.100.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "aStTT6FM4fJabGrvKRWMQgAAAAE"]
[Sun Nov 30 04:10:56.630148 2025] [:error] [pid 44997:tid 45023] [client 13.233.100.130:53376] [client 13.233.100.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "aStTUEEh8Lr-TH1KlcnM7wAAARE"]
[Sun Nov 30 04:11:12.593217 2025] [:error] [pid 44844:tid 44933] [client 13.233.100.130:41448] [client 13.233.100.130] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/config.ini"] [unique_id "aStTYBkTTwUoGl70YUDbxgAAAJI"]
[Sun Nov 30 04:11:16.561942 2025] [:error] [pid 44951:tid 44957] [client 13.233.100.130:33368] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings"] [unique_id "aStTZP9n-K61ohCFHy7BUwAAAMQ"]
[Sun Nov 30 04:11:17.196010 2025] [:error] [pid 44844:tid 44917] [client 13.233.100.130:33372] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.json"] [unique_id "aStTZRkTTwUoGl70YUDbzQAAAII"]
[Sun Nov 30 04:11:17.830693 2025] [:error] [pid 44844:tid 44928] [client 13.233.100.130:33386] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.config.js"] [unique_id "aStTZRkTTwUoGl70YUDb0AAAAI0"]
[Sun Nov 30 04:11:18.467923 2025] [:error] [pid 44999:tid 45052] [client 13.233.100.130:33400] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aStTZi9uSNEe69uZ9WRl6AAAAVM"]
[Sun Nov 30 04:11:19.108959 2025] [:error] [pid 44997:tid 45015] [client 13.233.100.130:33414] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aStTZ0Eh8Lr-TH1KlcnNBwAAAQk"]
[Sun Nov 30 04:11:19.738791 2025] [:error] [pid 44951:tid 44970] [client 13.233.100.130:33416] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpversion.php"] [unique_id "aStTZ_9n-K61ohCFHy7BVwAAANE"]
[Sun Nov 30 04:11:20.367226 2025] [:error] [pid 44997:tid 45029] [client 13.233.100.130:33424] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aStTaEEh8Lr-TH1KlcnNCwAAARc"]
[Sun Nov 30 04:11:21.003455 2025] [:error] [pid 44999:tid 45045] [client 13.233.100.130:33436] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin"] [unique_id "aStTaS9uSNEe69uZ9WRl7gAAAUw"]
[Sun Nov 30 04:11:21.631979 2025] [:error] [pid 44844:tid 44931] [client 13.233.100.130:33440] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aStTaRkTTwUoGl70YUDb1wAAAJA"]
[Sun Nov 30 04:11:22.266993 2025] [:error] [pid 44997:tid 45018] [client 13.233.100.130:33442] [client 13.233.100.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php"] [unique_id "aStTakEh8Lr-TH1KlcnNEwAAAQw"]
[Sun Nov 30 04:11:22.891572 2025] [:error] [pid 44951:tid 44964] [client 13.233.100.130:33448] [client 13.233.100.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/composer.json"] [unique_id "aStTav9n-K61ohCFHy7BWwAAAMs"]
[Sun Nov 30 04:11:23.532094 2025] [:error] [pid 44951:tid 44958] [client 13.233.100.130:33456] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.aws/config"] [unique_id "aStTa_9n-K61ohCFHy7BXQAAAMU"]
[Sun Nov 30 04:11:24.179824 2025] [:error] [pid 44844:tid 44918] [client 13.233.100.130:33466] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.aws/credentials"] [unique_id "aStTbBkTTwUoGl70YUDb3AAAAIM"]
[Sun Nov 30 04:11:24.813266 2025] [:error] [pid 44842:tid 44865] [client 13.233.100.130:33474] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws/config"] [unique_id "aStTbKFM4fJabGrvKRWMYAAAAA4"]
[Sun Nov 30 04:11:25.447316 2025] [:error] [pid 44999:tid 45051] [client 13.233.100.130:33478] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws/credentials"] [unique_id "aStTbS9uSNEe69uZ9WRl-wAAAVI"]
[Sun Nov 30 04:11:26.080395 2025] [:error] [pid 44843:tid 44893] [client 13.233.100.130:33484] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws.json"] [unique_id "aStTbrRULm2MqOv1SfmfoAAAAEU"]
[Sun Nov 30 04:11:26.717008 2025] [:error] [pid 44951:tid 44977] [client 13.233.100.130:48928] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/credentials"] [unique_id "aStTbv9n-K61ohCFHy7BYgAAANg"]
[Sun Nov 30 04:11:27.347618 2025] [:error] [pid 44999:tid 45040] [client 13.233.100.130:48938] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/secrets.json"] [unique_id "aStTby9uSNEe69uZ9WRl_gAAAUc"]
[Sun Nov 30 04:11:27.984742 2025] [:error] [pid 44842:tid 44873] [client 13.233.100.130:48948] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/keys.js"] [unique_id "aStTb6FM4fJabGrvKRWMZQAAABY"]
[Sun Nov 30 04:11:28.615566 2025] [:error] [pid 44844:tid 44925] [client 13.233.100.130:48954] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws-keys.js"] [unique_id "aStTcBkTTwUoGl70YUDb5wAAAIo"]
[Sun Nov 30 04:11:29.248725 2025] [:error] [pid 44842:tid 44853] [client 13.233.100.130:48964] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun"] [unique_id "aStTcaFM4fJabGrvKRWMaAAAAAI"]
[Sun Nov 30 04:11:29.877395 2025] [:error] [pid 44997:tid 45007] [client 13.233.100.130:48978] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun.json"] [unique_id "aStTcUEh8Lr-TH1KlcnNGwAAAQE"]
[Sun Nov 30 04:11:30.507214 2025] [:error] [pid 44843:tid 44908] [client 13.233.100.130:48988] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun/config"] [unique_id "aStTcrRULm2MqOv1SfmfowAAAFQ"]
[Sun Nov 30 04:11:31.133742 2025] [:error] [pid 44999:tid 45042] [client 13.233.100.130:49002] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun.php"] [unique_id "aStTcy9uSNEe69uZ9WRmAgAAAUk"]
[Sun Nov 30 04:11:31.772932 2025] [:error] [pid 44999:tid 45033] [client 13.233.100.130:49006] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid"] [unique_id "aStTcy9uSNEe69uZ9WRmBgAAAUA"]
[Sun Nov 30 04:11:32.406741 2025] [:error] [pid 44999:tid 45050] [client 13.233.100.130:49020] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid.json"] [unique_id "aStTdC9uSNEe69uZ9WRmDAAAAVE"]
[Sun Nov 30 04:11:33.040029 2025] [:error] [pid 44842:tid 44873] [client 13.233.100.130:49022] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid/config"] [unique_id "aStTdaFM4fJabGrvKRWMbQAAABY"]
[Sun Nov 30 04:11:33.667150 2025] [:error] [pid 44844:tid 44920] [client 13.233.100.130:49038] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid.php"] [unique_id "aStTdRkTTwUoGl70YUDb6gAAAIU"]
[Sun Nov 30 04:11:34.305653 2025] [:error] [pid 44951:tid 44965] [client 13.233.100.130:49044] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid.env"] [unique_id "aStTdv9n-K61ohCFHy7BdQAAAMw"]
[Sun Nov 30 04:11:34.947830 2025] [:error] [pid 44999:tid 45056] [client 13.233.100.130:49056] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo"] [unique_id "aStTdi9uSNEe69uZ9WRmFAAAAVc"]
[Sun Nov 30 04:11:35.581183 2025] [:error] [pid 44997:tid 45023] [client 13.233.100.130:49064] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo.json"] [unique_id "aStTd0Eh8Lr-TH1KlcnNIgAAARE"]
[Sun Nov 30 04:11:36.225165 2025] [:error] [pid 44951:tid 44975] [client 13.233.100.130:49080] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo/config"] [unique_id "aStTeP9n-K61ohCFHy7BeAAAANY"]
[Sun Nov 30 04:11:36.854895 2025] [:error] [pid 44999:tid 45041] [client 13.233.100.130:46956] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo.php"] [unique_id "aStTeC9uSNEe69uZ9WRmFwAAAUg"]
[Sun Nov 30 04:11:37.485638 2025] [:error] [pid 44842:tid 44863] [client 13.233.100.130:46964] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php"] [unique_id "aStTeaFM4fJabGrvKRWMdQAAAAw"]
[Sun Nov 30 04:11:38.116551 2025] [:error] [pid 44844:tid 44929] [client 13.233.100.130:46976] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info"] [unique_id "aStTehkTTwUoGl70YUDb9wAAAI4"]
[Sun Nov 30 04:11:38.742804 2025] [:error] [pid 44997:tid 45015] [client 13.233.100.130:46978] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo"] [unique_id "aStTekEh8Lr-TH1KlcnNKgAAAQk"]
[Sun Nov 30 04:11:39.372993 2025] [:error] [pid 44843:tid 44909] [client 13.233.100.130:46984] [client 13.233.100.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aStTe7RULm2MqOv1SfmfrAAAAFU"]
[Sun Nov 30 05:41:17.004142 2025] [:error] [pid 60369:tid 60394] [client 57.181.28.41:38620] [client 57.181.28.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aStofdR1zCWWHJK7KyEX7gAAAZc"]
[Sun Nov 30 05:41:17.545042 2025] [:error] [pid 60913:tid 60936] [client 57.181.28.41:38630] [client 57.181.28.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aStofV4SUvyDn5e4S0JysgAAAtU"]
[Sun Nov 30 05:41:18.084178 2025] [:error] [pid 60913:tid 60923] [client 57.181.28.41:38632] [client 57.181.28.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aStofl4SUvyDn5e4S0JytAAAAsg"]
[Sun Nov 30 05:41:18.626280 2025] [:error] [pid 60913:tid 60926] [client 57.181.28.41:38648] [client 57.181.28.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aStofl4SUvyDn5e4S0JytwAAAss"]
[Sun Nov 30 05:41:19.168884 2025] [:error] [pid 24971:tid 24982] [client 57.181.28.41:38664] [client 57.181.28.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "aStofzUZcbcCmcDjhQ_VMgAAAMk"]
[Sun Nov 30 05:41:19.709113 2025] [:error] [pid 51537:tid 51559] [client 57.181.28.41:38680] [client 57.181.28.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "aStof7cSSdjzCoyn8VtHWQAAAFQ"]
[Sun Nov 30 05:41:20.248777 2025] [:error] [pid 28588:tid 28592] [client 57.181.28.41:38684] [client 57.181.28.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "aStogCYl5J2n_isyWOlm4AAAAkI"]
[Sun Nov 30 05:41:34.503210 2025] [:error] [pid 26121:tid 26143] [client 57.181.28.41:57244] [client 57.181.28.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/config.ini"] [unique_id "aStoju3yAGZUIB-ACmBFCQAAAdQ"]
[Sun Nov 30 05:41:38.042448 2025] [:error] [pid 60572:tid 60575] [client 57.181.28.41:57274] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings"] [unique_id "aStokoVcy1tAF6kmNWnvUwAAAgE"]
[Sun Nov 30 05:41:38.581399 2025] [:error] [pid 60913:tid 60924] [client 57.181.28.41:57282] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.json"] [unique_id "aStokl4SUvyDn5e4S0Jy4AAAAsk"]
[Sun Nov 30 05:41:39.121195 2025] [:error] [pid 54236:tid 54267] [client 57.181.28.41:57298] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.config.js"] [unique_id "aStok5LzwJzIgo8dntCKQwAAAQw"]
[Sun Nov 30 05:41:39.659475 2025] [:error] [pid 24971:tid 24981] [client 57.181.28.41:57300] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aStokzUZcbcCmcDjhQ_VOgAAAMg"]
[Sun Nov 30 05:41:40.194271 2025] [:error] [pid 60369:tid 60388] [client 57.181.28.41:57306] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aStolNR1zCWWHJK7KyEYBgAAAZE"]
[Sun Nov 30 05:41:40.731964 2025] [:error] [pid 60913:tid 60922] [client 57.181.28.41:57322] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpversion.php"] [unique_id "aStolF4SUvyDn5e4S0Jy4gAAAsc"]
[Sun Nov 30 05:41:41.268055 2025] [:error] [pid 60913:tid 60920] [client 57.181.28.41:57328] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aStolV4SUvyDn5e4S0Jy4wAAAsU"]
[Sun Nov 30 05:41:41.802615 2025] [:error] [pid 51537:tid 51542] [client 57.181.28.41:57342] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin"] [unique_id "aStolbcSSdjzCoyn8VtHbwAAAEM"]
[Sun Nov 30 05:41:42.340244 2025] [:error] [pid 63468:tid 63479] [client 57.181.28.41:57344] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aStolqGdTyPw0PxgJet1-AAAAAk"]
[Sun Nov 30 05:41:42.875353 2025] [:error] [pid 60913:tid 60938] [client 57.181.28.41:57352] [client 57.181.28.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php"] [unique_id "aStoll4SUvyDn5e4S0Jy5QAAAtc"]
[Sun Nov 30 05:41:43.413424 2025] [:error] [pid 51537:tid 51561] [client 57.181.28.41:57366] [client 57.181.28.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/composer.json"] [unique_id "aStol7cSSdjzCoyn8VtHcQAAAFY"]
[Sun Nov 30 05:41:43.949945 2025] [:error] [pid 51537:tid 51558] [client 57.181.28.41:57368] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.aws/config"] [unique_id "aStol7cSSdjzCoyn8VtHcwAAAFM"]
[Sun Nov 30 05:41:44.487930 2025] [:error] [pid 51537:tid 51543] [client 57.181.28.41:44542] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.aws/credentials"] [unique_id "aStomLcSSdjzCoyn8VtHdQAAAEQ"]
[Sun Nov 30 05:41:45.039224 2025] [:error] [pid 24971:tid 24973] [client 57.181.28.41:44554] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws/config"] [unique_id "aStomTUZcbcCmcDjhQ_VQQAAAMA"]
[Sun Nov 30 05:41:45.578629 2025] [:error] [pid 60369:tid 60371] [client 57.181.28.41:44566] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws/credentials"] [unique_id "aStomdR1zCWWHJK7KyEYBwAAAYA"]
[Sun Nov 30 05:41:46.115605 2025] [:error] [pid 25002:tid 25033] [client 57.181.28.41:44568] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws.json"] [unique_id "aStomm2Hykst8BxxTdJeOAAAAUE"]
[Sun Nov 30 05:41:46.653464 2025] [:error] [pid 51537:tid 51539] [client 57.181.28.41:44574] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/credentials"] [unique_id "aStomrcSSdjzCoyn8VtHegAAAEA"]
[Sun Nov 30 05:41:47.192288 2025] [:error] [pid 60369:tid 60384] [client 57.181.28.41:44584] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/secrets.json"] [unique_id "aStom9R1zCWWHJK7KyEYCAAAAY0"]
[Sun Nov 30 05:41:47.731624 2025] [:error] [pid 60369:tid 60378] [client 57.181.28.41:44598] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/keys.js"] [unique_id "aStom9R1zCWWHJK7KyEYCQAAAYc"]
[Sun Nov 30 05:41:48.270913 2025] [:error] [pid 54236:tid 54260] [client 57.181.28.41:44614] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws-keys.js"] [unique_id "aStonJLzwJzIgo8dntCKUAAAAQU"]
[Sun Nov 30 05:41:48.805889 2025] [:error] [pid 54236:tid 54266] [client 57.181.28.41:44626] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun"] [unique_id "aStonJLzwJzIgo8dntCKUgAAAQs"]
[Sun Nov 30 05:41:49.343998 2025] [:error] [pid 60913:tid 60922] [client 57.181.28.41:44640] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun.json"] [unique_id "aStonV4SUvyDn5e4S0Jy8QAAAsc"]
[Sun Nov 30 05:41:49.881818 2025] [:error] [pid 60913:tid 60932] [client 57.181.28.41:44648] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun/config"] [unique_id "aStonV4SUvyDn5e4S0Jy_AAAAtE"]
[Sun Nov 30 05:41:50.417321 2025] [:error] [pid 60913:tid 60924] [client 57.181.28.41:44656] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun.php"] [unique_id "aStonl4SUvyDn5e4S0JzBwAAAsk"]
[Sun Nov 30 05:41:50.954770 2025] [:error] [pid 26121:tid 26125] [client 57.181.28.41:44668] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid"] [unique_id "aStonu3yAGZUIB-ACmBFEAAAAcI"]
[Sun Nov 30 05:41:51.492594 2025] [:error] [pid 26121:tid 26131] [client 57.181.28.41:44684] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid.json"] [unique_id "aSton-3yAGZUIB-ACmBFEQAAAcg"]
[Sun Nov 30 05:41:52.031405 2025] [:error] [pid 54236:tid 54265] [client 57.181.28.41:44700] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid/config"] [unique_id "aStooJLzwJzIgo8dntCKVQAAAQo"]
[Sun Nov 30 05:41:52.571143 2025] [:error] [pid 25002:tid 25052] [client 57.181.28.41:44706] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid.php"] [unique_id "aStooG2Hykst8BxxTdJeQwAAAVQ"]
[Sun Nov 30 05:41:53.110210 2025] [:error] [pid 60369:tid 60386] [client 57.181.28.41:44708] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid.env"] [unique_id "aStoodR1zCWWHJK7KyEYCwAAAY8"]
[Sun Nov 30 05:41:53.650511 2025] [:error] [pid 54236:tid 54273] [client 57.181.28.41:44724] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo"] [unique_id "aStooZLzwJzIgo8dntCKVgAAARI"]
[Sun Nov 30 05:41:54.189077 2025] [:error] [pid 60572:tid 60579] [client 57.181.28.41:44732] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo.json"] [unique_id "aStoooVcy1tAF6kmNWnvXAAAAgU"]
[Sun Nov 30 05:41:54.726330 2025] [:error] [pid 24971:tid 24983] [client 57.181.28.41:47162] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo/config"] [unique_id "aStoojUZcbcCmcDjhQ_VRwAAAMo"]
[Sun Nov 30 05:41:55.262900 2025] [:error] [pid 24971:tid 24986] [client 57.181.28.41:47170] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo.php"] [unique_id "aStoozUZcbcCmcDjhQ_VSgAAAM0"]
[Sun Nov 30 05:41:55.803507 2025] [:error] [pid 24971:tid 24996] [client 57.181.28.41:47180] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php"] [unique_id "aStoozUZcbcCmcDjhQ_VTwAAANc"]
[Sun Nov 30 05:41:56.342634 2025] [:error] [pid 25002:tid 25039] [client 57.181.28.41:47188] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info"] [unique_id "aStopG2Hykst8BxxTdJeUgAAAUc"]
[Sun Nov 30 05:41:56.879428 2025] [:error] [pid 25002:tid 25054] [client 57.181.28.41:47194] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo"] [unique_id "aStopG2Hykst8BxxTdJeVgAAAVY"]
[Sun Nov 30 05:41:57.415150 2025] [:error] [pid 60913:tid 60936] [client 57.181.28.41:47206] [client 57.181.28.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aStopV4SUvyDn5e4S0JzIwAAAtU"]
[Sun Nov 30 05:49:43.089450 2025] [:error] [pid 28588:tid 28598] [client 43.207.88.55:49810] [client 43.207.88.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aStqdyYl5J2n_isyWOloVgAAAkg"]
[Sun Nov 30 05:49:43.626050 2025] [:error] [pid 25002:tid 25040] [client 43.207.88.55:49826] [client 43.207.88.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aStqd22Hykst8BxxTdJf9AAAAUg"]
[Sun Nov 30 05:49:44.163073 2025] [:error] [pid 25002:tid 25042] [client 43.207.88.55:49842] [client 43.207.88.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aStqeG2Hykst8BxxTdJf9gAAAUo"]
[Sun Nov 30 05:49:44.700783 2025] [:error] [pid 25002:tid 25049] [client 43.207.88.55:49858] [client 43.207.88.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aStqeG2Hykst8BxxTdJf9wAAAVE"]
[Sun Nov 30 05:49:45.240950 2025] [:error] [pid 25002:tid 25054] [client 43.207.88.55:49866] [client 43.207.88.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "aStqeW2Hykst8BxxTdJf-gAAAVY"]
[Sun Nov 30 05:49:45.778222 2025] [:error] [pid 63468:tid 63478] [client 43.207.88.55:35344] [client 43.207.88.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "aStqeaGdTyPw0PxgJet3YQAAAAg"]
[Sun Nov 30 05:49:46.319268 2025] [:error] [pid 24971:tid 24983] [client 43.207.88.55:35352] [client 43.207.88.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "aStqejUZcbcCmcDjhQ_WWAAAAMo"]
[Sun Nov 30 05:50:00.587699 2025] [:error] [pid 54236:tid 54258] [client 43.207.88.55:46922] [client 43.207.88.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/config.ini"] [unique_id "aStqiJLzwJzIgo8dntCMBAAAAQM"]
[Sun Nov 30 05:50:04.348788 2025] [:error] [pid 54236:tid 54255] [client 43.207.88.55:46956] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings"] [unique_id "aStqjJLzwJzIgo8dntCMDAAAAQA"]
[Sun Nov 30 05:50:04.896178 2025] [:error] [pid 25002:tid 25055] [client 43.207.88.55:46966] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.json"] [unique_id "aStqjG2Hykst8BxxTdJgCgAAAVc"]
[Sun Nov 30 05:50:05.440240 2025] [:error] [pid 25002:tid 25042] [client 43.207.88.55:57016] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.config.js"] [unique_id "aStqjW2Hykst8BxxTdJgCwAAAUo"]
[Sun Nov 30 05:50:05.981638 2025] [:error] [pid 63468:tid 63491] [client 43.207.88.55:57020] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aStqjaGdTyPw0PxgJet3awAAABU"]
[Sun Nov 30 05:50:06.522211 2025] [:error] [pid 28588:tid 28605] [client 43.207.88.55:57028] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aStqjiYl5J2n_isyWOloXAAAAk8"]
[Sun Nov 30 05:50:07.059981 2025] [:error] [pid 25002:tid 25050] [client 43.207.88.55:57034] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpversion.php"] [unique_id "aStqj22Hykst8BxxTdJgDQAAAVI"]
[Sun Nov 30 05:50:07.599622 2025] [:error] [pid 60369:tid 60378] [client 43.207.88.55:57048] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aStqj9R1zCWWHJK7KyEZDgAAAYc"]
[Sun Nov 30 05:50:08.141233 2025] [:error] [pid 25002:tid 25041] [client 43.207.88.55:57062] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin"] [unique_id "aStqkG2Hykst8BxxTdJgDwAAAUk"]
[Sun Nov 30 05:50:08.678672 2025] [:error] [pid 25002:tid 25044] [client 43.207.88.55:57072] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aStqkG2Hykst8BxxTdJgEgAAAUw"]
[Sun Nov 30 05:50:09.215246 2025] [:error] [pid 60913:tid 60938] [client 43.207.88.55:57084] [client 43.207.88.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php"] [unique_id "aStqkV4SUvyDn5e4S0J1jwAAAtc"]
[Sun Nov 30 05:50:09.752184 2025] [:error] [pid 60913:tid 60933] [client 43.207.88.55:57090] [client 43.207.88.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/composer.json"] [unique_id "aStqkV4SUvyDn5e4S0J1kgAAAtI"]
[Sun Nov 30 05:50:10.292379 2025] [:error] [pid 25002:tid 25047] [client 43.207.88.55:57100] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.aws/config"] [unique_id "aStqkm2Hykst8BxxTdJgFQAAAU8"]
[Sun Nov 30 05:50:10.832711 2025] [:error] [pid 26121:tid 26128] [client 43.207.88.55:57112] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.aws/credentials"] [unique_id "aStqku3yAGZUIB-ACmBGmAAAAcU"]
[Sun Nov 30 05:50:11.375020 2025] [:error] [pid 60913:tid 60920] [client 43.207.88.55:57126] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws/config"] [unique_id "aStqk14SUvyDn5e4S0J1lwAAAsU"]
[Sun Nov 30 05:50:11.917619 2025] [:error] [pid 24971:tid 24982] [client 43.207.88.55:57132] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws/credentials"] [unique_id "aStqkzUZcbcCmcDjhQ_WdAAAAMk"]
[Sun Nov 30 05:50:12.453730 2025] [:error] [pid 60369:tid 60376] [client 43.207.88.55:57144] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws.json"] [unique_id "aStqlNR1zCWWHJK7KyEZEQAAAYU"]
[Sun Nov 30 05:50:12.991132 2025] [:error] [pid 54236:tid 54276] [client 43.207.88.55:57158] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/credentials"] [unique_id "aStqlJLzwJzIgo8dntCMIQAAARU"]
[Sun Nov 30 05:50:13.532663 2025] [:error] [pid 60913:tid 60933] [client 43.207.88.55:57160] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/secrets.json"] [unique_id "aStqlV4SUvyDn5e4S0J1mgAAAtI"]
[Sun Nov 30 05:50:14.069644 2025] [:error] [pid 25002:tid 25042] [client 43.207.88.55:57170] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/keys.js"] [unique_id "aStqlm2Hykst8BxxTdJgFwAAAUo"]
[Sun Nov 30 05:50:14.613325 2025] [:error] [pid 60913:tid 60939] [client 43.207.88.55:57174] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws-keys.js"] [unique_id "aStqll4SUvyDn5e4S0J1nAAAAtg"]
[Sun Nov 30 05:50:15.153537 2025] [:error] [pid 25002:tid 25033] [client 43.207.88.55:57188] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun"] [unique_id "aStql22Hykst8BxxTdJgHAAAAUE"]
[Sun Nov 30 05:50:15.692329 2025] [:error] [pid 24971:tid 24986] [client 43.207.88.55:42128] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun.json"] [unique_id "aStqlzUZcbcCmcDjhQ_WdQAAAM0"]
[Sun Nov 30 05:50:16.235953 2025] [:error] [pid 60369:tid 60382] [client 43.207.88.55:42136] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun/config"] [unique_id "aStqmNR1zCWWHJK7KyEZFAAAAYs"]
[Sun Nov 30 05:50:16.773205 2025] [:error] [pid 51537:tid 51543] [client 43.207.88.55:42140] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mailgun.php"] [unique_id "aStqmLcSSdjzCoyn8VtJDgAAAEQ"]
[Sun Nov 30 05:50:17.309011 2025] [:error] [pid 60913:tid 60919] [client 43.207.88.55:42154] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid"] [unique_id "aStqmV4SUvyDn5e4S0J1oQAAAsQ"]
[Sun Nov 30 05:50:17.845450 2025] [:error] [pid 54236:tid 54262] [client 43.207.88.55:42156] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid.json"] [unique_id "aStqmZLzwJzIgo8dntCMIgAAAQc"]
[Sun Nov 30 05:50:18.382926 2025] [:error] [pid 60913:tid 60937] [client 43.207.88.55:42158] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid/config"] [unique_id "aStqml4SUvyDn5e4S0J1owAAAtY"]
[Sun Nov 30 05:50:18.920167 2025] [:error] [pid 25002:tid 25035] [client 43.207.88.55:42168] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid.php"] [unique_id "aStqmm2Hykst8BxxTdJgIAAAAUM"]
[Sun Nov 30 05:50:19.457329 2025] [:error] [pid 24971:tid 24977] [client 43.207.88.55:42184] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sendgrid.env"] [unique_id "aStqmzUZcbcCmcDjhQ_WeAAAAMQ"]
[Sun Nov 30 05:50:19.994977 2025] [:error] [pid 25002:tid 25047] [client 43.207.88.55:42186] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo"] [unique_id "aStqm22Hykst8BxxTdJgKQAAAU8"]
[Sun Nov 30 05:50:20.537852 2025] [:error] [pid 25002:tid 25052] [client 43.207.88.55:42202] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo.json"] [unique_id "aStqnG2Hykst8BxxTdJgOgAAAVQ"]
[Sun Nov 30 05:50:21.075338 2025] [:error] [pid 60913:tid 60930] [client 43.207.88.55:42204] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo/config"] [unique_id "aStqnV4SUvyDn5e4S0J1qQAAAs8"]
[Sun Nov 30 05:50:21.613412 2025] [:error] [pid 51537:tid 51555] [client 43.207.88.55:42206] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/brevo.php"] [unique_id "aStqnbcSSdjzCoyn8VtJEQAAAFA"]
[Sun Nov 30 05:50:22.163168 2025] [:error] [pid 54236:tid 54264] [client 43.207.88.55:42212] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php"] [unique_id "aStqnpLzwJzIgo8dntCMJgAAAQk"]
[Sun Nov 30 05:50:22.704527 2025] [:error] [pid 25002:tid 25048] [client 43.207.88.55:42222] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info"] [unique_id "aStqnm2Hykst8BxxTdJgbQAAAVA"]
[Sun Nov 30 05:50:23.244940 2025] [:error] [pid 60572:tid 60587] [client 43.207.88.55:42230] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo"] [unique_id "aStqn4Vcy1tAF6kmNWnwsgAAAg0"]
[Sun Nov 30 05:50:23.783770 2025] [:error] [pid 26121:tid 26131] [client 43.207.88.55:42238] [client 43.207.88.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aStqn-3yAGZUIB-ACmBGtQAAAcg"]
[Sun Nov 30 07:00:26.552215 2025] [:error] [pid 60913:tid 60925] [client 85.203.23.74:32163] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugin/pngoptimazie.php"] [unique_id "aSt7Cl4SUvyDn5e4S0KP-AAAAso"]
[Sun Nov 30 12:33:48.622572 2025] [:error] [pid 9375:tid 9409] [client 167.99.187.185:59156] [client 167.99.187.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.187.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSvJLN-EkWIUe87KIjO5vQAAA0U"]
[Sun Nov 30 12:33:50.764038 2025] [:error] [pid 12554:tid 12561] [client 167.99.187.185:50258] [client 167.99.187.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.187.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSvJLj7q_kXd01TaAD8xnAAAAAU"]
[Sun Nov 30 12:51:36.181841 2025] [:error] [pid 9375:tid 9420] [client 167.99.187.185:49504] [client 167.99.187.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.187.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aSvNWN-EkWIUe87KIjO8tQAAA1A"]
[Sun Nov 30 16:46:31.729966 2025] [:error] [pid 58704:tid 58711] [client 147.135.212.200:52592] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aSwEZ1gCdnbXMzbONnMTcAAAA4Q"]
[Sun Nov 30 16:46:35.954666 2025] [:error] [pid 10607:tid 10614] [client 147.135.212.200:42888] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aSwEa3MxNFmf1l9xA_GINAAAAsQ"]
[Sun Nov 30 16:46:41.512068 2025] [:error] [pid 10550:tid 10595] [client 147.135.212.200:41092] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aSwEcel_8Vq2nipf7mE1kwAAApA"]
[Sun Nov 30 16:46:44.926475 2025] [:error] [pid 10607:tid 10623] [client 147.135.212.200:41106] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aSwEdHMxNFmf1l9xA_GIOgAAAs0"]
[Sun Nov 30 16:46:49.052616 2025] [:error] [pid 10608:tid 10652] [client 147.135.212.200:55902] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aSwEeeG4qpknNxmxP5dhJAAAA88"]
[Sun Nov 30 16:46:52.986464 2025] [:error] [pid 9375:tid 9415] [client 147.135.212.200:55918] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aSwEfN-EkWIUe87KIjPuWgAAA0s"]
[Sun Nov 30 16:46:56.379372 2025] [:error] [pid 9374:tid 9400] [client 147.135.212.200:55920] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aSwEgIEwr5jt_cokVdxPcwAAAxc"]
[Sun Nov 30 16:47:00.874954 2025] [:error] [pid 10608:tid 10646] [client 147.135.212.200:35662] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aSwEhOG4qpknNxmxP5dhMwAAA8k"]
[Sun Nov 30 16:47:04.970124 2025] [:error] [pid 9374:tid 9392] [client 147.135.212.200:35676] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aSwEiIEwr5jt_cokVdxPeQAAAw8"]
[Sun Nov 30 16:47:10.057795 2025] [:error] [pid 10518:tid 10523] [client 147.135.212.200:36216] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aSwEjg8XjrhaEDJ0Rd-mSgAAAUI"]
[Sun Nov 30 16:47:14.316034 2025] [:error] [pid 58704:tid 58713] [client 147.135.212.200:36220] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aSwEklgCdnbXMzbONnMTrgAAA4Y"]
[Sun Nov 30 16:47:17.386597 2025] [:error] [pid 12793:tid 12800] [client 147.135.212.200:55436] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aSwElcsEgQeCVydJZ0gYSAAAAEU"]
[Sun Nov 30 16:47:21.095325 2025] [:error] [pid 9375:tid 9406] [client 147.135.212.200:55446] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aSwEmd-EkWIUe87KIjPugwAAA0I"]
[Sun Nov 30 17:34:54.277634 2025] [:error] [pid 58704:tid 58719] [client 37.19.197.133:59592] [client 37.19.197.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aSwPvlgCdnbXMzbONnMmAAAAA4w"]
[Sun Nov 30 17:34:56.733447 2025] [:error] [pid 9694:tid 9699] [client 37.19.197.133:42017] [client 37.19.197.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSwPwMNOaRChkzIC_nWNxQAAAMM"]
[Sun Nov 30 17:34:57.376274 2025] [:error] [pid 12793:tid 12795] [client 37.19.197.133:6018] [client 37.19.197.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aSwPwcsEgQeCVydJZ0gg5AAAAEA"]
[Sun Nov 30 17:34:57.633586 2025] [:error] [pid 12793:tid 12801] [client 37.19.197.133:6018] [client 37.19.197.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSwPwcsEgQeCVydJZ0gg5QAAAEY"]
[Sun Nov 30 17:35:00.141627 2025] [:error] [pid 10518:tid 10544] [client 37.19.197.133:62225] [client 37.19.197.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSwPxA8XjrhaEDJ0Rd-wqAAAAVc"]
[Sun Nov 30 17:35:01.840118 2025] [:error] [pid 12793:tid 12810] [client 37.19.197.133:6018] [client 37.19.197.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSwPxcsEgQeCVydJZ0gg5gAAAE8"]
[Sun Nov 30 17:35:02.768688 2025] [:error] [pid 12793:tid 12816] [client 37.19.197.133:6018] [client 37.19.197.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSwPxssEgQeCVydJZ0gg5wAAAFU"]
[Sun Nov 30 17:35:04.926190 2025] [:error] [pid 9374:tid 9400] [client 37.19.197.133:30041] [client 37.19.197.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSwPyIEwr5jt_cokVdxZ2QAAAxc"]
[Sun Nov 30 17:35:05.501233 2025] [:error] [pid 12793:tid 12812] [client 37.19.197.133:6018] [client 37.19.197.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSwPycsEgQeCVydJZ0gg6QAAAFE"]
[Sun Nov 30 21:37:48.754592 2025] [:error] [pid 58704:tid 58722] [client 43.157.53.115:57380] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSxIrFgCdnbXMzbONnN3DQAAA48"]
[Sun Nov 30 22:39:59.583654 2025] [:error] [pid 12793:tid 12817] [client 60.188.57.0:36929] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSxXP8sEgQeCVydJZ0hK7gAAAFY"]
[Sun Nov 30 23:44:09.616291 2025] [:error] [pid 58704:tid 58712] [client 35.182.173.147:33906] [client 35.182.173.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.remote"] [unique_id "aSxmSVgCdnbXMzbONnObwAAAA4U"]
[Sun Nov 30 23:44:10.520028 2025] [:error] [pid 9374:tid 9391] [client 35.182.173.147:34040] [client 35.182.173.147] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/php_error.log"] [unique_id "aSxmSoEwr5jt_cokVdyScwAAAw4"]
[Sun Nov 30 23:44:12.403446 2025] [:error] [pid 9375:tid 9416] [client 35.182.173.147:34304] [client 35.182.173.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aSxmTN-EkWIUe87KIjNHlwAAA0w"]
[Sun Nov 30 23:44:14.948352 2025] [:error] [pid 10518:tid 10543] [client 35.182.173.147:34662] [client 35.182.173.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/includes/.env.save"] [unique_id "aSxmTg8XjrhaEDJ0Rd_q2QAAAVY"]
[Sun Nov 30 23:44:15.836479 2025] [:error] [pid 10607:tid 10611] [client 35.182.173.147:34794] [client 35.182.173.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aSxmT3MxNFmf1l9xA_HDKwAAAsE"]
[Sun Nov 30 23:44:18.374598 2025] [:error] [pid 10518:tid 10522] [client 35.182.173.147:35224] [client 35.182.173.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/lib/.env"] [unique_id "aSxmUg8XjrhaEDJ0Rd_q3AAAAUE"]
[Sun Nov 30 23:44:19.253763 2025] [:error] [pid 10607:tid 10621] [client 35.182.173.147:35356] [client 35.182.173.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/psnlink/.env"] [unique_id "aSxmU3MxNFmf1l9xA_HDMgAAAss"]
[Sun Nov 30 23:44:20.133951 2025] [:error] [pid 12793:tid 12808] [client 35.182.173.147:35506] [client 35.182.173.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/src/.env"] [unique_id "aSxmVMsEgQeCVydJZ0hSlQAAAE0"]
[Sun Nov 30 23:44:21.016746 2025] [:error] [pid 10608:tid 10638] [client 35.182.173.147:35664] [client 35.182.173.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/cronlab/.env"] [unique_id "aSxmVeG4qpknNxmxP5egyQAAA8E"]
[Mon Dec 01 01:37:28.465304 2025] [:error] [pid 32522:tid 32601] [client 20.37.126.21:42892] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aSyA2CY5g6U7AgYu2cKz9gAAANY"]
[Mon Dec 01 01:37:28.695722 2025] [:error] [pid 22995:tid 22999] [client 20.37.126.21:42896] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aSyA2KhgK6YGad0ApM9N2AAAAQE"]
[Mon Dec 01 01:37:28.978019 2025] [:error] [pid 32522:tid 32582] [client 20.37.126.21:43000] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aSyA2CY5g6U7AgYu2cKz-gAAAMM"]
[Mon Dec 01 01:37:29.208080 2025] [:error] [pid 25124:tid 25156] [client 20.37.126.21:42992] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aSyA2Vl826mNLYSD9-3ClwAAAEM"]
[Mon Dec 01 01:37:29.441451 2025] [:error] [pid 22963:tid 22989] [client 20.37.126.21:42902] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/1.php"] [unique_id "aSyA2SgjrTC0kxo5Q-zuwwAAAJg"]
[Mon Dec 01 01:37:29.673873 2025] [:error] [pid 22995:tid 23019] [client 20.37.126.21:42988] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/1.php"] [unique_id "aSyA2ahgK6YGad0ApM9N2wAAARU"]
[Mon Dec 01 01:37:29.903756 2025] [:error] [pid 22963:tid 22974] [client 20.37.126.21:42901] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/1.php"] [unique_id "aSyA2SgjrTC0kxo5Q-zuxgAAAIk"]
[Mon Dec 01 01:37:30.131402 2025] [:error] [pid 25124:tid 25155] [client 20.37.126.21:42887] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/1.php"] [unique_id "aSyA2ll826mNLYSD9-3CmgAAAEI"]
[Mon Dec 01 01:37:30.365482 2025] [:error] [pid 22963:tid 22977] [client 20.37.126.21:42903] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aSyA2igjrTC0kxo5Q-zuyAAAAIw"]
[Mon Dec 01 01:37:30.603194 2025] [:error] [pid 22995:tid 23015] [client 20.37.126.21:42975] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aSyA2qhgK6YGad0ApM9N3AAAARE"]
[Mon Dec 01 01:37:30.860842 2025] [:error] [pid 22995:tid 23005] [client 20.37.126.21:42899] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aSyA2qhgK6YGad0ApM9N3gAAAQc"]
[Mon Dec 01 01:37:31.097611 2025] [:error] [pid 25124:tid 25166] [client 20.37.126.21:42907] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aSyA21l826mNLYSD9-3CnAAAAE0"]
[Mon Dec 01 01:37:31.336214 2025] [:error] [pid 32520:tid 32528] [client 20.37.126.21:42977] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aSyA2_vbCMB_T-u6uxlIOAAAA4M"]
[Mon Dec 01 01:37:31.573225 2025] [:error] [pid 32521:tid 32555] [client 20.37.126.21:42883] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aSyA2z-OXioBrWvHoPrB-QAAAwM"]
[Mon Dec 01 01:37:31.852599 2025] [:error] [pid 32611:tid 32627] [client 20.37.126.21:43001] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aSyA26_aT7PlMcEPLmkcTQAAAA4"]
[Mon Dec 01 01:37:32.109721 2025] [:error] [pid 25124:tid 25177] [client 20.37.126.21:42985] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aSyA3Fl826mNLYSD9-3CngAAAFg"]
[Mon Dec 01 01:37:32.337344 2025] [:error] [pid 32522:tid 32583] [client 20.37.126.21:42956] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aSyA3CY5g6U7AgYu2cK0BAAAAMQ"]
[Mon Dec 01 01:37:32.564730 2025] [:error] [pid 32520:tid 32543] [client 20.37.126.21:42955] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aSyA3PvbCMB_T-u6uxlIOwAAA5I"]
[Mon Dec 01 01:37:32.804265 2025] [:error] [pid 32521:tid 32565] [client 20.37.126.21:42894] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aSyA3D-OXioBrWvHoPrB_AAAAw0"]
[Mon Dec 01 01:37:33.055940 2025] [:error] [pid 22995:tid 23018] [client 20.37.126.21:35783] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aSyA3ahgK6YGad0ApM9N5AAAARQ"]
[Mon Dec 01 01:37:33.286106 2025] [:error] [pid 25124:tid 25164] [client 20.37.126.21:42986] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSyA3Vl826mNLYSD9-3CnwAAAEs"]
[Mon Dec 01 01:37:33.523669 2025] [:error] [pid 32611:tid 32629] [client 20.37.126.21:42983] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSyA3a_aT7PlMcEPLmkcUAAAABA"]
[Mon Dec 01 01:37:33.750849 2025] [:error] [pid 32522:tid 32590] [client 20.37.126.21:35802] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSyA3SY5g6U7AgYu2cK0CwAAAMs"]
[Mon Dec 01 01:37:33.985563 2025] [:error] [pid 32522:tid 32595] [client 20.37.126.21:42882] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aSyA3SY5g6U7AgYu2cK0DQAAANA"]
[Mon Dec 01 01:37:34.229855 2025] [:error] [pid 22963:tid 22989] [client 20.37.126.21:42999] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aSyA3igjrTC0kxo5Q-zuzwAAAJg"]
[Mon Dec 01 01:37:34.457790 2025] [:error] [pid 22963:tid 22974] [client 20.37.126.21:43004] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aSyA3igjrTC0kxo5Q-zu0QAAAIk"]
[Mon Dec 01 01:37:34.685181 2025] [:error] [pid 32522:tid 32600] [client 20.37.126.21:42996] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aSyA3iY5g6U7AgYu2cK0EgAAANU"]
[Mon Dec 01 01:37:34.914725 2025] [:error] [pid 32521:tid 32568] [client 20.37.126.21:42998] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aSyA3j-OXioBrWvHoPrCAQAAAxA"]
[Mon Dec 01 01:37:35.206121 2025] [:error] [pid 25124:tid 25165] [client 20.37.126.21:42908] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aSyA31l826mNLYSD9-3CoQAAAEw"]
[Mon Dec 01 01:37:35.461742 2025] [:error] [pid 32611:tid 32624] [client 20.37.126.21:42947] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aSyA36_aT7PlMcEPLmkcVAAAAAs"]
[Mon Dec 01 01:37:35.737858 2025] [:error] [pid 25124:tid 25174] [client 20.37.126.21:42982] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aSyA31l826mNLYSD9-3CogAAAFU"]
[Mon Dec 01 01:37:35.966812 2025] [:error] [pid 32611:tid 32632] [client 20.37.126.21:43002] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aSyA36_aT7PlMcEPLmkcVQAAABM"]
[Mon Dec 01 01:37:36.215403 2025] [:error] [pid 25124:tid 25172] [client 20.37.126.21:42980] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSyA4Fl826mNLYSD9-3CpAAAAFM"]
[Mon Dec 01 01:37:36.443995 2025] [:error] [pid 32611:tid 32625] [client 20.37.126.21:42965] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aSyA4K_aT7PlMcEPLmkcVgAAAAw"]
[Mon Dec 01 01:37:36.671703 2025] [:error] [pid 25124:tid 25159] [client 20.37.126.21:42974] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aSyA4Fl826mNLYSD9-3CpgAAAEY"]
[Mon Dec 01 01:37:36.948795 2025] [:error] [pid 22995:tid 23020] [client 20.37.126.21:42995] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aSyA4KhgK6YGad0ApM9N5gAAARY"]
[Mon Dec 01 01:37:37.240521 2025] [:error] [pid 32611:tid 32633] [client 20.37.126.21:42916] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aSyA4a_aT7PlMcEPLmkcWQAAABQ"]
[Mon Dec 01 01:37:37.542094 2025] [:error] [pid 32611:tid 32623] [client 20.37.126.21:42973] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aSyA4a_aT7PlMcEPLmkcWwAAAAo"]
[Mon Dec 01 01:37:37.820540 2025] [:error] [pid 32520:tid 32533] [client 20.37.126.21:42959] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aSyA4fvbCMB_T-u6uxlIQwAAA4g"]
[Mon Dec 01 01:37:38.076844 2025] [:error] [pid 25124:tid 25175] [client 20.37.126.21:42885] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aSyA4ll826mNLYSD9-3CqAAAAFY"]
[Mon Dec 01 01:37:38.316921 2025] [:error] [pid 22995:tid 23004] [client 20.37.126.21:42994] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSyA4qhgK6YGad0ApM9N6gAAAQY"]
[Mon Dec 01 01:37:38.553983 2025] [:error] [pid 32521:tid 32555] [client 20.37.126.21:42976] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aSyA4j-OXioBrWvHoPrCBgAAAwM"]
[Mon Dec 01 01:37:38.782614 2025] [:error] [pid 32521:tid 32565] [client 20.37.126.21:35782] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aSyA4j-OXioBrWvHoPrCBwAAAw0"]
[Mon Dec 01 01:37:39.059586 2025] [:error] [pid 32522:tid 32595] [client 20.37.126.21:42960] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aSyA4yY5g6U7AgYu2cK0FwAAANA"]
[Mon Dec 01 01:37:39.299802 2025] [:error] [pid 32522:tid 32603] [client 20.37.126.21:42970] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aSyA4yY5g6U7AgYu2cK0GAAAANg"]
[Mon Dec 01 01:37:39.529600 2025] [:error] [pid 32522:tid 32581] [client 20.37.126.21:42920] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSyA4yY5g6U7AgYu2cK0GgAAAMI"]
[Mon Dec 01 01:37:39.766302 2025] [:error] [pid 22995:tid 23010] [client 20.37.126.21:35801] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSyA46hgK6YGad0ApM9N6wAAAQw"]
[Mon Dec 01 01:37:39.997318 2025] [:error] [pid 32521:tid 32558] [client 20.37.126.21:42972] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSyA4z-OXioBrWvHoPrCCAAAAwY"]
[Mon Dec 01 01:37:40.233393 2025] [:error] [pid 32611:tid 32613] [client 20.37.126.21:42889] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSyA5K_aT7PlMcEPLmkcYgAAAAA"]
[Mon Dec 01 01:37:40.479670 2025] [:error] [pid 32611:tid 32620] [client 20.37.126.21:42930] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSyA5K_aT7PlMcEPLmkcYwAAAAc"]
[Mon Dec 01 01:37:40.720764 2025] [:error] [pid 32611:tid 32625] [client 20.37.126.21:42891] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSyA5K_aT7PlMcEPLmkcZgAAAAw"]
[Mon Dec 01 01:37:40.954404 2025] [:error] [pid 32522:tid 32599] [client 20.37.126.21:43007] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSyA5CY5g6U7AgYu2cK0HQAAANQ"]
[Mon Dec 01 01:37:41.241166 2025] [:error] [pid 22995:tid 23006] [client 20.37.126.21:42971] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSyA5ahgK6YGad0ApM9N7QAAAQg"]
[Mon Dec 01 01:37:41.468375 2025] [:error] [pid 22995:tid 22999] [client 20.37.126.21:35792] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aSyA5ahgK6YGad0ApM9N7gAAAQE"]
[Mon Dec 01 01:37:41.696682 2025] [:error] [pid 32521:tid 32568] [client 20.37.126.21:42989] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aSyA5T-OXioBrWvHoPrCCwAAAxA"]
[Mon Dec 01 01:37:41.924640 2025] [:error] [pid 22995:tid 23016] [client 20.37.126.21:35815] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aSyA5ahgK6YGad0ApM9N7wAAARI"]
[Mon Dec 01 01:37:42.163212 2025] [:error] [pid 22995:tid 23021] [client 20.37.126.21:35812] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aSyA5qhgK6YGad0ApM9N8QAAARc"]
[Mon Dec 01 01:37:42.389616 2025] [:error] [pid 32611:tid 32615] [client 20.37.126.21:35800] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/uploads/"] [unique_id "aSyA5q_aT7PlMcEPLmkcbAAAAAI"]
[Mon Dec 01 01:37:42.621829 2025] [:error] [pid 32521:tid 32562] [client 20.37.126.21:42893] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/uploads/"] [unique_id "aSyA5j-OXioBrWvHoPrCDAAAAwo"]
[Mon Dec 01 01:37:42.848078 2025] [:error] [pid 25124:tid 25164] [client 20.37.126.21:42932] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/uploads/"] [unique_id "aSyA5ll826mNLYSD9-3CrQAAAEs"]
[Mon Dec 01 01:37:43.082471 2025] [:error] [pid 25124:tid 25158] [client 20.37.126.21:35790] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/uploads/"] [unique_id "aSyA51l826mNLYSD9-3CrwAAAEU"]
[Mon Dec 01 01:37:43.367565 2025] [:error] [pid 25124:tid 25165] [client 20.37.126.21:35778] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aSyA51l826mNLYSD9-3CsQAAAEw"]
[Mon Dec 01 01:37:43.603443 2025] [:error] [pid 32521:tid 32571] [client 20.37.126.21:42906] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aSyA5z-OXioBrWvHoPrCEAAAAxM"]
[Mon Dec 01 01:37:43.838546 2025] [:error] [pid 25124:tid 25174] [client 20.37.126.21:35759] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aSyA51l826mNLYSD9-3CsgAAAFU"]
[Mon Dec 01 01:37:44.142368 2025] [:error] [pid 25124:tid 25173] [client 20.37.126.21:42934] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aSyA6Fl826mNLYSD9-3CswAAAFQ"]
[Mon Dec 01 01:37:44.456109 2025] [:error] [pid 32521:tid 32555] [client 20.37.126.21:42967] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-error.php"] [unique_id "aSyA6D-OXioBrWvHoPrCEgAAAwM"]
[Mon Dec 01 01:37:44.683048 2025] [:error] [pid 22995:tid 23002] [client 20.37.126.21:35793] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-error.php"] [unique_id "aSyA6KhgK6YGad0ApM9N9gAAAQQ"]
[Mon Dec 01 01:37:44.910216 2025] [:error] [pid 32521:tid 32565] [client 20.37.126.21:35807] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-error.php"] [unique_id "aSyA6D-OXioBrWvHoPrCFAAAAw0"]
[Mon Dec 01 01:37:45.158978 2025] [:error] [pid 22995:tid 23013] [client 20.37.126.21:42898] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-error.php"] [unique_id "aSyA6ahgK6YGad0ApM9N-AAAAQ8"]
[Mon Dec 01 01:37:45.391393 2025] [:error] [pid 32611:tid 32619] [client 20.37.126.21:42946] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/"] [unique_id "aSyA6a_aT7PlMcEPLmkccgAAAAY"]
[Mon Dec 01 01:37:45.639134 2025] [:error] [pid 32522:tid 32590] [client 20.37.126.21:42904] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/"] [unique_id "aSyA6SY5g6U7AgYu2cK0IAAAAMs"]
[Mon Dec 01 01:37:45.865958 2025] [:error] [pid 22995:tid 23004] [client 20.37.126.21:42890] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/"] [unique_id "aSyA6ahgK6YGad0ApM9N-gAAAQY"]
[Mon Dec 01 01:37:46.098079 2025] [:error] [pid 32611:tid 32629] [client 20.37.126.21:42912] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/"] [unique_id "aSyA6q_aT7PlMcEPLmkcdAAAABA"]
[Mon Dec 01 01:37:46.324760 2025] [:error] [pid 32522:tid 32597] [client 20.37.126.21:42940] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/"] [unique_id "aSyA6iY5g6U7AgYu2cK0JAAAANI"]
[Mon Dec 01 01:37:46.622347 2025] [:error] [pid 32521:tid 32558] [client 20.37.126.21:42915] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/"] [unique_id "aSyA6j-OXioBrWvHoPrCFgAAAwY"]
[Mon Dec 01 01:37:46.895222 2025] [:error] [pid 32521:tid 32570] [client 20.37.126.21:42909] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/"] [unique_id "aSyA6j-OXioBrWvHoPrCFwAAAxI"]
[Mon Dec 01 01:37:47.122799 2025] [:error] [pid 32520:tid 32529] [client 20.37.126.21:35795] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/"] [unique_id "aSyA6_vbCMB_T-u6uxlISQAAA4Q"]
[Mon Dec 01 01:37:47.353472 2025] [:error] [pid 32520:tid 32539] [client 20.37.126.21:35784] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aSyA6_vbCMB_T-u6uxlISwAAA44"]
[Mon Dec 01 01:37:47.632845 2025] [:error] [pid 32521:tid 32575] [client 20.37.126.21:35806] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aSyA6z-OXioBrWvHoPrCGQAAAxc"]
[Mon Dec 01 01:37:47.873149 2025] [:error] [pid 32521:tid 32572] [client 20.37.126.21:35823] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aSyA6z-OXioBrWvHoPrCGwAAAxQ"]
[Mon Dec 01 01:37:48.119502 2025] [:error] [pid 32522:tid 32596] [client 20.37.126.21:42914] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aSyA7CY5g6U7AgYu2cK0JwAAANE"]
[Mon Dec 01 01:37:48.356630 2025] [:error] [pid 32522:tid 32599] [client 20.37.126.21:35830] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/"] [unique_id "aSyA7CY5g6U7AgYu2cK0KAAAANQ"]
[Mon Dec 01 01:37:48.584470 2025] [:error] [pid 32611:tid 32617] [client 20.37.126.21:42900] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/"] [unique_id "aSyA7K_aT7PlMcEPLmkcdwAAAAQ"]
[Mon Dec 01 01:37:48.821178 2025] [:error] [pid 32521:tid 32564] [client 20.37.126.21:43006] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/"] [unique_id "aSyA7D-OXioBrWvHoPrCHwAAAww"]
[Mon Dec 01 01:37:49.079564 2025] [:error] [pid 32521:tid 32554] [client 20.37.126.21:42881] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/"] [unique_id "aSyA7T-OXioBrWvHoPrCIAAAAwI"]
[Mon Dec 01 01:37:49.310405 2025] [:error] [pid 32611:tid 32622] [client 20.37.126.21:42936] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-admin/includes/"] [unique_id "aSyA7a_aT7PlMcEPLmkceQAAAAk"]
[Mon Dec 01 01:37:49.592801 2025] [:error] [pid 25124:tid 25161] [client 20.37.126.21:35827] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-admin/includes/"] [unique_id "aSyA7Vl826mNLYSD9-3CuQAAAEg"]
[Mon Dec 01 01:37:49.873021 2025] [:error] [pid 22995:tid 22998] [client 20.37.126.21:42921] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-admin/includes/"] [unique_id "aSyA7ahgK6YGad0ApM9N_wAAAQA"]
[Mon Dec 01 01:37:50.099435 2025] [:error] [pid 32521:tid 32574] [client 20.37.126.21:42933] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-admin/includes/"] [unique_id "aSyA7j-OXioBrWvHoPrCIQAAAxY"]
[Mon Dec 01 01:37:50.338348 2025] [:error] [pid 22995:tid 23022] [client 20.37.126.21:42979] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/"] [unique_id "aSyA7qhgK6YGad0ApM9OAAAAARg"]
[Mon Dec 01 01:37:50.565897 2025] [:error] [pid 25124:tid 25170] [client 20.37.126.21:42937] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/"] [unique_id "aSyA7ll826mNLYSD9-3CvgAAAFE"]
[Mon Dec 01 01:37:50.804299 2025] [:error] [pid 32521:tid 32558] [client 20.37.126.21:42925] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/"] [unique_id "aSyA7j-OXioBrWvHoPrCIwAAAwY"]
[Mon Dec 01 01:37:51.033676 2025] [:error] [pid 22995:tid 23014] [client 20.37.126.21:42911] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/"] [unique_id "aSyA76hgK6YGad0ApM9OAQAAARA"]
[Mon Dec 01 01:37:51.261307 2025] [:error] [pid 32611:tid 32623] [client 20.37.126.21:35794] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSyA76_aT7PlMcEPLmkcfQAAAAo"]
[Mon Dec 01 01:37:51.490171 2025] [:error] [pid 32521:tid 32572] [client 20.37.126.21:42958] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSyA7z-OXioBrWvHoPrCJQAAAxQ"]
[Mon Dec 01 01:37:51.728721 2025] [:error] [pid 32521:tid 32563] [client 20.37.126.21:35721] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSyA7z-OXioBrWvHoPrCJgAAAws"]
[Mon Dec 01 01:37:51.955609 2025] [:error] [pid 32521:tid 32559] [client 20.37.126.21:35780] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSyA7z-OXioBrWvHoPrCJwAAAwc"]
[Mon Dec 01 01:37:52.238409 2025] [:error] [pid 22995:tid 23018] [client 20.37.126.21:42938] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSyA8KhgK6YGad0ApM9OBAAAARQ"]
[Mon Dec 01 01:37:52.467204 2025] [:error] [pid 22995:tid 23003] [client 20.37.126.21:42984] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSyA8KhgK6YGad0ApM9OBgAAAQU"]
[Mon Dec 01 01:37:52.723958 2025] [:error] [pid 22995:tid 23010] [client 20.37.126.21:35713] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSyA8KhgK6YGad0ApM9OCAAAAQw"]
[Mon Dec 01 01:37:52.963978 2025] [:error] [pid 32522:tid 32590] [client 20.37.126.21:42978] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSyA8CY5g6U7AgYu2cK0KwAAAMs"]
[Mon Dec 01 01:37:53.192393 2025] [:error] [pid 22995:tid 23016] [client 20.37.126.21:42952] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/"] [unique_id "aSyA8ahgK6YGad0ApM9OCQAAARI"]
[Mon Dec 01 01:37:53.427007 2025] [:error] [pid 32522:tid 32592] [client 20.37.126.21:42981] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/"] [unique_id "aSyA8SY5g6U7AgYu2cK0LAAAAM0"]
[Mon Dec 01 01:37:53.666982 2025] [:error] [pid 25124:tid 25165] [client 20.37.126.21:42931] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/"] [unique_id "aSyA8Vl826mNLYSD9-3CwQAAAEw"]
[Mon Dec 01 01:37:53.958466 2025] [:error] [pid 22963:tid 22969] [client 20.37.126.21:42990] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/"] [unique_id "aSyA8SgjrTC0kxo5Q-zu6QAAAIQ"]
[Mon Dec 01 01:37:54.194412 2025] [:error] [pid 22963:tid 22982] [client 20.37.126.21:42888] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSyA8igjrTC0kxo5Q-zu6gAAAJE"]
[Mon Dec 01 01:37:54.468470 2025] [:error] [pid 32520:tid 32544] [client 20.37.126.21:42957] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSyA8vvbCMB_T-u6uxlITwAAA5M"]
[Mon Dec 01 01:37:54.703716 2025] [:error] [pid 22995:tid 23019] [client 20.37.126.21:42884] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSyA8qhgK6YGad0ApM9ODwAAARU"]
[Mon Dec 01 01:37:54.998440 2025] [:error] [pid 22995:tid 23017] [client 20.37.126.21:35824] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSyA8qhgK6YGad0ApM9OEQAAARM"]
[Mon Dec 01 01:37:55.224963 2025] [:error] [pid 32611:tid 32633] [client 20.37.126.21:42942] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSyA86_aT7PlMcEPLmkchwAAABQ"]
[Mon Dec 01 01:37:55.481879 2025] [:error] [pid 32522:tid 32581] [client 20.37.126.21:42895] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSyA8yY5g6U7AgYu2cK0MQAAAMI"]
[Mon Dec 01 01:37:55.717839 2025] [:error] [pid 32522:tid 32596] [client 20.37.126.21:35791] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSyA8yY5g6U7AgYu2cK0MgAAANE"]
[Mon Dec 01 01:37:55.943418 2025] [:error] [pid 22995:tid 23013] [client 20.37.126.21:42905] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSyA86hgK6YGad0ApM9OEwAAAQ8"]
[Mon Dec 01 01:37:56.178475 2025] [:error] [pid 32521:tid 32557] [client 20.37.126.21:42917] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSyA9D-OXioBrWvHoPrCKgAAAwU"]
[Mon Dec 01 01:37:56.455524 2025] [:error] [pid 32521:tid 32574] [client 20.37.126.21:42927] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/about.php"] [unique_id "aSyA9D-OXioBrWvHoPrCKwAAAxY"]
[Mon Dec 01 01:37:56.686187 2025] [:error] [pid 32521:tid 32565] [client 20.37.126.21:35835] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/about.php"] [unique_id "aSyA9D-OXioBrWvHoPrCLAAAAw0"]
[Mon Dec 01 01:37:56.946338 2025] [:error] [pid 32521:tid 32558] [client 20.37.126.21:42939] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/about.php"] [unique_id "aSyA9D-OXioBrWvHoPrCLQAAAwY"]
[Mon Dec 01 01:37:57.173529 2025] [:error] [pid 32521:tid 32572] [client 20.37.126.21:42949] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aSyA9T-OXioBrWvHoPrCLgAAAxQ"]
[Mon Dec 01 01:37:57.411157 2025] [:error] [pid 22995:tid 23003] [client 20.37.126.21:42880] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aSyA9ahgK6YGad0ApM9OFQAAAQU"]
[Mon Dec 01 01:37:57.644201 2025] [:error] [pid 32521:tid 32573] [client 20.37.126.21:35781] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aSyA9T-OXioBrWvHoPrCMwAAAxU"]
[Mon Dec 01 01:37:57.872432 2025] [:error] [pid 32521:tid 32561] [client 20.37.126.21:35735] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aSyA9T-OXioBrWvHoPrCNAAAAwk"]
[Mon Dec 01 01:37:58.119681 2025] [:error] [pid 22995:tid 23006] [client 20.37.126.21:42928] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSyA9qhgK6YGad0ApM9OGQAAAQg"]
[Mon Dec 01 01:37:58.346027 2025] [:error] [pid 32521:tid 32576] [client 20.37.126.21:35777] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSyA9j-OXioBrWvHoPrCNgAAAxg"]
[Mon Dec 01 01:37:58.586738 2025] [:error] [pid 32522:tid 32585] [client 20.37.126.21:35810] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSyA9iY5g6U7AgYu2cK0NgAAAMY"]
[Mon Dec 01 01:37:58.828697 2025] [:error] [pid 32520:tid 32527] [client 20.37.126.21:42925] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSyA9vvbCMB_T-u6uxlIUAAAA4I"]
[Mon Dec 01 01:37:59.069607 2025] [:error] [pid 32521:tid 32558] [client 20.37.126.21:35817] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/beez3/error.php"] [unique_id "aSyA9z-OXioBrWvHoPrCOwAAAwY"]
[Mon Dec 01 01:37:59.353610 2025] [:error] [pid 32521:tid 32560] [client 20.37.126.21:42944] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/beez3/error.php"] [unique_id "aSyA9z-OXioBrWvHoPrCPAAAAwg"]
[Mon Dec 01 01:37:59.590782 2025] [:error] [pid 25124:tid 25157] [client 20.37.126.21:35738] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/beez3/error.php"] [unique_id "aSyA91l826mNLYSD9-3CxQAAAEQ"]
[Mon Dec 01 01:37:59.835467 2025] [:error] [pid 25124:tid 25159] [client 20.37.126.21:42886] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/beez3/error.php"] [unique_id "aSyA91l826mNLYSD9-3CxgAAAEY"]
[Mon Dec 01 01:38:00.062512 2025] [:error] [pid 32521:tid 32559] [client 20.37.126.21:35803] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aSyA-D-OXioBrWvHoPrCPwAAAwc"]
[Mon Dec 01 01:38:00.289630 2025] [:error] [pid 32521:tid 32566] [client 20.37.126.21:35811] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aSyA-D-OXioBrWvHoPrCQAAAAw4"]
[Mon Dec 01 01:38:00.516785 2025] [:error] [pid 32521:tid 32554] [client 20.37.126.21:35747] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aSyA-D-OXioBrWvHoPrCQQAAAwI"]
[Mon Dec 01 01:38:00.756839 2025] [:error] [pid 32521:tid 32555] [client 20.37.126.21:35813] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aSyA-D-OXioBrWvHoPrCQwAAAwM"]
[Mon Dec 01 01:38:01.002912 2025] [:error] [pid 32521:tid 32576] [client 20.37.126.21:42997] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSyA-T-OXioBrWvHoPrCRwAAAxg"]
[Mon Dec 01 01:38:01.277440 2025] [:error] [pid 32522:tid 32597] [client 20.37.126.21:42943] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSyA-SY5g6U7AgYu2cK0OgAAANI"]
[Mon Dec 01 01:38:01.511134 2025] [:error] [pid 32521:tid 32572] [client 20.37.126.21:43003] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSyA-T-OXioBrWvHoPrCSAAAAxQ"]
[Mon Dec 01 01:38:01.738743 2025] [:error] [pid 32522:tid 32599] [client 20.37.126.21:35745] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSyA-SY5g6U7AgYu2cK0PAAAANQ"]
[Mon Dec 01 01:38:01.988987 2025] [:error] [pid 22995:tid 23003] [client 20.37.126.21:42922] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aSyA-ahgK6YGad0ApM9OHQAAAQU"]
[Mon Dec 01 01:38:02.234900 2025] [:error] [pid 32520:tid 32535] [client 20.37.126.21:42962] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aSyA-vvbCMB_T-u6uxlIUQAAA4o"]
[Mon Dec 01 01:38:02.467987 2025] [:error] [pid 32522:tid 32590] [client 20.37.126.21:35741] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aSyA-iY5g6U7AgYu2cK0QwAAAMs"]
[Mon Dec 01 01:38:02.695883 2025] [:error] [pid 32521:tid 32563] [client 20.37.126.21:35820] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aSyA-j-OXioBrWvHoPrCSwAAAws"]
[Mon Dec 01 01:38:02.922553 2025] [:error] [pid 32611:tid 32630] [client 20.37.126.21:35825] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aSyA-q_aT7PlMcEPLmkclAAAABE"]
[Mon Dec 01 01:38:03.156448 2025] [:error] [pid 32521:tid 32565] [client 20.37.126.21:42941] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aSyA-z-OXioBrWvHoPrCTAAAAw0"]
[Mon Dec 01 01:38:03.383918 2025] [:error] [pid 25124:tid 25167] [client 20.37.126.21:35787] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aSyA-1l826mNLYSD9-3CywAAAE4"]
[Mon Dec 01 01:38:03.624023 2025] [:error] [pid 32522:tid 32597] [client 20.37.126.21:42948] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aSyA-yY5g6U7AgYu2cK0RgAAANI"]
[Mon Dec 01 01:38:03.857728 2025] [:error] [pid 32522:tid 32582] [client 20.37.126.21:42945] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aSyA-yY5g6U7AgYu2cK0SAAAAMM"]
[Mon Dec 01 01:38:04.087918 2025] [:error] [pid 32522:tid 32601] [client 20.37.126.21:42919] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aSyA_CY5g6U7AgYu2cK0SQAAANY"]
[Mon Dec 01 01:38:04.366335 2025] [:error] [pid 25124:tid 25160] [client 20.37.126.21:35828] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aSyA_Fl826mNLYSD9-3CzQAAAEc"]
[Mon Dec 01 01:38:04.592935 2025] [:error] [pid 22963:tid 22966] [client 20.37.126.21:35724] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aSyA_CgjrTC0kxo5Q-zu8QAAAIE"]
[Mon Dec 01 01:38:04.822208 2025] [:error] [pid 25124:tid 25177] [client 20.37.126.21:35808] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aSyA_Fl826mNLYSD9-3CzgAAAFg"]
[Mon Dec 01 01:38:05.095764 2025] [:error] [pid 22995:tid 23019] [client 20.37.126.21:42918] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aSyA_ahgK6YGad0ApM9OIQAAARU"]
[Mon Dec 01 01:38:05.346719 2025] [:error] [pid 22995:tid 23013] [client 20.37.126.21:42983] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aSyA_ahgK6YGad0ApM9OIwAAAQ8"]
[Mon Dec 01 01:38:05.582191 2025] [:error] [pid 22963:tid 22985] [client 20.37.126.21:42913] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aSyA_SgjrTC0kxo5Q-zu8wAAAJQ"]
[Mon Dec 01 01:38:05.820922 2025] [:error] [pid 22995:tid 23004] [client 20.37.126.21:35739] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aSyA_ahgK6YGad0ApM9OJQAAAQY"]
[Mon Dec 01 01:38:06.047427 2025] [:error] [pid 32611:tid 32635] [client 20.37.126.21:35717] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aSyA_q_aT7PlMcEPLmkcmAAAABY"]
[Mon Dec 01 01:38:06.279041 2025] [:error] [pid 22995:tid 23008] [client 20.37.126.21:35833] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aSyA_qhgK6YGad0ApM9OJwAAAQo"]
[Mon Dec 01 01:38:06.505330 2025] [:error] [pid 22963:tid 22986] [client 20.37.126.21:35805] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aSyA_igjrTC0kxo5Q-zu9QAAAJU"]
[Mon Dec 01 01:38:06.731879 2025] [:error] [pid 25124:tid 25176] [client 20.37.126.21:35826] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aSyA_ll826mNLYSD9-3C0QAAAFc"]
[Mon Dec 01 01:38:06.964063 2025] [:error] [pid 25124:tid 25173] [client 20.37.126.21:35788] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aSyA_ll826mNLYSD9-3C1AAAAFQ"]
[Mon Dec 01 01:38:07.191928 2025] [:error] [pid 25124:tid 25166] [client 20.37.126.21:35786] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aSyA_1l826mNLYSD9-3C1QAAAE0"]
[Mon Dec 01 01:38:07.423895 2025] [:error] [pid 22963:tid 22977] [client 20.37.126.21:35836] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aSyA_ygjrTC0kxo5Q-zu9gAAAIw"]
[Mon Dec 01 01:38:07.650342 2025] [:error] [pid 32611:tid 32620] [client 20.37.126.21:35740] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSyA_6_aT7PlMcEPLmkcngAAAAc"]
[Mon Dec 01 01:38:07.892017 2025] [:error] [pid 32521:tid 32563] [client 20.37.126.21:42993] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSyA_z-OXioBrWvHoPrCUAAAAws"]
[Mon Dec 01 01:38:08.117962 2025] [:error] [pid 32520:tid 32532] [client 20.37.126.21:35798] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSyBAPvbCMB_T-u6uxlIUwAAA4c"]
[Mon Dec 01 01:38:08.344878 2025] [:error] [pid 22963:tid 22979] [client 20.37.126.21:42922] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aSyBACgjrTC0kxo5Q-zu-AAAAI4"]
[Mon Dec 01 01:38:08.588230 2025] [:error] [pid 22963:tid 22983] [client 20.37.126.21:42961] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/about.php"] [unique_id "aSyBACgjrTC0kxo5Q-zu-gAAAJI"]
[Mon Dec 01 01:38:08.814510 2025] [:error] [pid 22963:tid 22982] [client 20.37.126.21:35773] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/about.php"] [unique_id "aSyBACgjrTC0kxo5Q-zu-wAAAJE"]
[Mon Dec 01 01:38:09.043409 2025] [:error] [pid 32521:tid 32552] [client 20.37.126.21:35838] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/about.php"] [unique_id "aSyBAT-OXioBrWvHoPrCUwAAAwA"]
[Mon Dec 01 01:38:09.303274 2025] [:error] [pid 32611:tid 32633] [client 20.37.126.21:43005] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/about.php"] [unique_id "aSyBAa_aT7PlMcEPLmkcoQAAABQ"]
[Mon Dec 01 01:38:09.529643 2025] [:error] [pid 32520:tid 32525] [client 20.37.126.21:35752] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aSyBAfvbCMB_T-u6uxlIVAAAA4A"]
[Mon Dec 01 01:38:09.761056 2025] [:error] [pid 25124:tid 25167] [client 20.37.126.21:42966] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aSyBAVl826mNLYSD9-3C2gAAAE4"]
[Mon Dec 01 01:38:09.988555 2025] [:error] [pid 22963:tid 22967] [client 20.37.126.21:35831] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aSyBASgjrTC0kxo5Q-zu_wAAAII"]
[Mon Dec 01 01:38:10.215224 2025] [:error] [pid 22963:tid 22974] [client 20.37.126.21:35839] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aSyBAigjrTC0kxo5Q-zvAQAAAIk"]
[Mon Dec 01 01:38:10.451493 2025] [:error] [pid 32521:tid 32571] [client 20.37.126.21:35733] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSyBAj-OXioBrWvHoPrCVQAAAxM"]
[Mon Dec 01 01:38:10.679556 2025] [:error] [pid 32520:tid 32526] [client 20.37.126.21:35804] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSyBAvvbCMB_T-u6uxlIVwAAA4E"]
[Mon Dec 01 01:38:10.908547 2025] [:error] [pid 32611:tid 32626] [client 20.37.126.21:42910] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSyBAq_aT7PlMcEPLmkcpgAAAA0"]
[Mon Dec 01 01:38:11.136805 2025] [:error] [pid 32611:tid 32630] [client 20.37.126.21:35712] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSyBA6_aT7PlMcEPLmkcqAAAABE"]
[Mon Dec 01 01:38:11.375126 2025] [:error] [pid 32521:tid 32573] [client 20.37.126.21:42935] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aSyBAz-OXioBrWvHoPrCVgAAAxU"]
[Mon Dec 01 01:38:11.655682 2025] [:error] [pid 32611:tid 32634] [client 20.37.126.21:35785] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aSyBA6_aT7PlMcEPLmkcqwAAABU"]
[Mon Dec 01 01:38:11.894069 2025] [:error] [pid 32521:tid 32556] [client 20.37.126.21:35796] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aSyBAz-OXioBrWvHoPrCWAAAAwQ"]
[Mon Dec 01 01:38:12.168600 2025] [:error] [pid 32522:tid 32583] [client 20.37.126.21:42991] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aSyBBCY5g6U7AgYu2cK0TgAAAMQ"]
[Mon Dec 01 01:38:12.461501 2025] [:error] [pid 22963:tid 22985] [client 20.37.126.21:35732] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/"] [unique_id "aSyBBCgjrTC0kxo5Q-zvBgAAAJQ"]
[Mon Dec 01 01:38:12.738813 2025] [:error] [pid 32522:tid 32595] [client 20.37.126.21:35779] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/"] [unique_id "aSyBBCY5g6U7AgYu2cK0TwAAANA"]
[Mon Dec 01 01:38:12.965093 2025] [:error] [pid 22963:tid 22981] [client 20.37.126.21:42987] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/"] [unique_id "aSyBBCgjrTC0kxo5Q-zvBwAAAJA"]
[Mon Dec 01 01:38:13.193129 2025] [:error] [pid 25124:tid 25156] [client 20.37.126.21:35811] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/"] [unique_id "aSyBBVl826mNLYSD9-3C3QAAAEM"]
[Mon Dec 01 01:38:13.495023 2025] [:error] [pid 22963:tid 22986] [client 20.37.126.21:35814] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSyBBSgjrTC0kxo5Q-zvCAAAAJU"]
[Mon Dec 01 01:38:13.726222 2025] [:error] [pid 32520:tid 32534] [client 20.37.126.21:35769] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSyBBfvbCMB_T-u6uxlIXgAAA4k"]
[Mon Dec 01 01:38:14.000204 2025] [:error] [pid 22995:tid 23010] [client 20.37.126.21:35649] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSyBBahgK6YGad0ApM9OLwAAAQw"]
[Mon Dec 01 01:38:14.227552 2025] [:error] [pid 32611:tid 32627] [client 20.37.126.21:35834] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSyBBq_aT7PlMcEPLmkcrAAAAA4"]
[Mon Dec 01 01:38:14.468998 2025] [:error] [pid 22995:tid 23016] [client 20.37.126.21:35818] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aSyBBqhgK6YGad0ApM9OMAAAARI"]
[Mon Dec 01 01:38:14.698396 2025] [:error] [pid 32611:tid 32620] [client 20.37.126.21:35755] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aSyBBq_aT7PlMcEPLmkcrgAAAAc"]
[Mon Dec 01 01:38:14.926857 2025] [:error] [pid 32522:tid 32586] [client 20.37.126.21:35679] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aSyBBiY5g6U7AgYu2cK0UwAAAMc"]
[Mon Dec 01 01:38:15.153281 2025] [:error] [pid 32611:tid 32613] [client 20.37.126.21:42951] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aSyBB6_aT7PlMcEPLmkcrwAAAAA"]
[Mon Dec 01 01:38:15.380662 2025] [:error] [pid 32520:tid 32530] [client 20.37.126.21:35655] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aSyBB_vbCMB_T-u6uxlIYgAAA4U"]
[Mon Dec 01 01:38:15.609432 2025] [:error] [pid 25124:tid 25168] [client 20.37.126.21:35743] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aSyBB1l826mNLYSD9-3C4QAAAE8"]
[Mon Dec 01 01:38:15.893748 2025] [:error] [pid 32520:tid 32532] [client 20.37.126.21:35737] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aSyBB_vbCMB_T-u6uxlIYwAAA4c"]
[Mon Dec 01 01:38:16.124858 2025] [:error] [pid 32520:tid 32536] [client 20.37.126.21:35746] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aSyBCPvbCMB_T-u6uxlIZAAAA4s"]
[Mon Dec 01 01:38:16.351676 2025] [:error] [pid 22963:tid 22967] [client 20.37.126.21:42969] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aSyBCCgjrTC0kxo5Q-zvDQAAAII"]
[Mon Dec 01 01:38:16.599821 2025] [:error] [pid 32520:tid 32526] [client 20.37.126.21:35772] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aSyBCPvbCMB_T-u6uxlIZgAAA4E"]
[Mon Dec 01 01:38:16.848057 2025] [:error] [pid 32522:tid 32588] [client 20.37.126.21:35666] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aSyBCCY5g6U7AgYu2cK0VQAAAMk"]
[Mon Dec 01 01:38:17.122599 2025] [:error] [pid 32522:tid 32580] [client 20.37.126.21:42963] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aSyBCSY5g6U7AgYu2cK0VwAAAME"]
[Mon Dec 01 01:38:17.374330 2025] [:error] [pid 22995:tid 23021] [client 20.37.126.21:35819] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aSyBCahgK6YGad0ApM9OMwAAARc"]
[Mon Dec 01 01:38:17.648410 2025] [:error] [pid 22995:tid 23002] [client 20.37.126.21:35708] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aSyBCahgK6YGad0ApM9ONAAAAQQ"]
[Mon Dec 01 01:38:17.885594 2025] [:error] [pid 25124:tid 25171] [client 20.37.126.21:42954] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aSyBCVl826mNLYSD9-3C5AAAAFI"]
[Mon Dec 01 01:38:18.117792 2025] [:error] [pid 32521:tid 32555] [client 20.37.126.21:35716] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aSyBCj-OXioBrWvHoPrCYwAAAwM"]
[Mon Dec 01 01:38:18.344101 2025] [:error] [pid 32520:tid 32548] [client 20.37.126.21:35662] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSyBCvvbCMB_T-u6uxlIaQAAA5c"]
[Mon Dec 01 01:38:18.588206 2025] [:error] [pid 25124:tid 25167] [client 20.37.126.21:35677] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSyBCll826mNLYSD9-3C5QAAAE4"]
[Mon Dec 01 01:38:18.815652 2025] [:error] [pid 22963:tid 22972] [client 20.37.126.21:35722] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSyBCigjrTC0kxo5Q-zvDwAAAIc"]
[Mon Dec 01 01:38:19.043992 2025] [:error] [pid 32611:tid 32626] [client 20.37.126.21:35760] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSyBC6_aT7PlMcEPLmkcsQAAAA0"]
[Mon Dec 01 01:38:19.273945 2025] [:error] [pid 22963:tid 22984] [client 20.37.126.21:42968] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aSyBCygjrTC0kxo5Q-zvEAAAAJM"]
[Mon Dec 01 01:38:19.501465 2025] [:error] [pid 25124:tid 25161] [client 20.37.126.21:35661] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aSyBC1l826mNLYSD9-3C5gAAAEg"]
[Mon Dec 01 01:38:19.765267 2025] [:error] [pid 32611:tid 32632] [client 20.37.126.21:35682] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aSyBC6_aT7PlMcEPLmkcswAAABM"]
[Mon Dec 01 01:38:19.999698 2025] [:error] [pid 32521:tid 32553] [client 20.37.126.21:35765] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aSyBCz-OXioBrWvHoPrCZgAAAwE"]
[Mon Dec 01 01:38:20.228689 2025] [:error] [pid 32611:tid 32630] [client 20.37.126.21:42926] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/"] [unique_id "aSyBDK_aT7PlMcEPLmkctAAAABE"]
[Mon Dec 01 01:38:20.456072 2025] [:error] [pid 32522:tid 32602] [client 20.37.126.21:35728] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/"] [unique_id "aSyBDCY5g6U7AgYu2cK0XgAAANc"]
[Mon Dec 01 01:38:20.695782 2025] [:error] [pid 25124:tid 25162] [client 20.37.126.21:42964] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/"] [unique_id "aSyBDFl826mNLYSD9-3C6gAAAEk"]
[Mon Dec 01 01:38:20.925396 2025] [:error] [pid 25124:tid 25165] [client 20.37.126.21:35776] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/"] [unique_id "aSyBDFl826mNLYSD9-3C7AAAAEw"]
[Mon Dec 01 01:38:21.153261 2025] [:error] [pid 25124:tid 25174] [client 20.37.126.21:35726] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSyBDVl826mNLYSD9-3C7QAAAFU"]
[Mon Dec 01 01:38:21.379621 2025] [:error] [pid 32611:tid 32614] [client 20.37.126.21:35757] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSyBDa_aT7PlMcEPLmkctQAAAAE"]
[Mon Dec 01 01:38:21.606040 2025] [:error] [pid 25124:tid 25163] [client 20.37.126.21:35715] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSyBDVl826mNLYSD9-3C7wAAAEo"]
[Mon Dec 01 01:38:21.876158 2025] [:error] [pid 25124:tid 25168] [client 20.37.126.21:35761] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSyBDVl826mNLYSD9-3C8QAAAE8"]
[Mon Dec 01 01:38:22.124148 2025] [:error] [pid 32521:tid 32552] [client 20.37.126.21:35766] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSyBDj-OXioBrWvHoPrCaQAAAwA"]
[Mon Dec 01 01:38:22.351328 2025] [:error] [pid 22995:tid 22999] [client 20.37.126.21:35686] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSyBDqhgK6YGad0ApM9ONwAAAQE"]
[Mon Dec 01 01:38:22.626093 2025] [:error] [pid 25124:tid 25175] [client 20.37.126.21:42897] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSyBDll826mNLYSD9-3C8wAAAFY"]
[Mon Dec 01 01:38:22.854930 2025] [:error] [pid 32521:tid 32556] [client 20.37.126.21:35718] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSyBDj-OXioBrWvHoPrCbAAAAwQ"]
[Mon Dec 01 01:38:23.083506 2025] [:error] [pid 32611:tid 32634] [client 20.37.126.21:35736] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSyBD6_aT7PlMcEPLmkctgAAABU"]
[Mon Dec 01 01:38:23.309661 2025] [:error] [pid 32521:tid 32571] [client 20.37.126.21:35727] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSyBDz-OXioBrWvHoPrCbQAAAxM"]
[Mon Dec 01 01:38:23.552134 2025] [:error] [pid 32611:tid 32628] [client 20.37.126.21:35700] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSyBD6_aT7PlMcEPLmkctwAAAA8"]
[Mon Dec 01 01:38:23.814032 2025] [:error] [pid 25124:tid 25164] [client 20.37.126.21:35591] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSyBD1l826mNLYSD9-3C9gAAAEs"]
[Mon Dec 01 01:38:24.045625 2025] [:error] [pid 32521:tid 32554] [client 20.37.126.21:35734] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSyBED-OXioBrWvHoPrCbwAAAwI"]
[Mon Dec 01 01:38:24.321920 2025] [:error] [pid 22995:tid 23016] [client 20.37.126.21:35723] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/install.php"] [unique_id "aSyBEKhgK6YGad0ApM9OOQAAARI"]
[Mon Dec 01 01:38:24.557003 2025] [:error] [pid 22995:tid 23015] [client 20.37.126.21:35730] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/install.php"] [unique_id "aSyBEKhgK6YGad0ApM9OOwAAARE"]
[Mon Dec 01 01:38:24.801299 2025] [:error] [pid 32521:tid 32572] [client 20.37.126.21:35742] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/install.php"] [unique_id "aSyBED-OXioBrWvHoPrCcQAAAxQ"]
[Mon Dec 01 01:38:25.033476 2025] [:error] [pid 32521:tid 32553] [client 20.37.126.21:35588] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/install.php"] [unique_id "aSyBET-OXioBrWvHoPrCcwAAAwE"]
[Mon Dec 01 01:38:25.260629 2025] [:error] [pid 32521:tid 32563] [client 20.37.126.21:35712] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "aSyBET-OXioBrWvHoPrCdAAAAws"]
[Mon Dec 01 01:38:25.487675 2025] [:error] [pid 32521:tid 32557] [client 20.37.126.21:35816] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "aSyBET-OXioBrWvHoPrCdQAAAwU"]
[Mon Dec 01 01:38:25.781901 2025] [:error] [pid 22995:tid 23019] [client 20.37.126.21:35656] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "aSyBEahgK6YGad0ApM9OPQAAARU"]
[Mon Dec 01 01:38:26.011566 2025] [:error] [pid 32521:tid 32566] [client 20.37.126.21:35797] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "aSyBEj-OXioBrWvHoPrCdwAAAw4"]
[Mon Dec 01 01:38:26.285713 2025] [:error] [pid 25124:tid 25155] [client 20.37.126.21:35664] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSyBEll826mNLYSD9-3C-wAAAEI"]
[Mon Dec 01 01:38:26.513037 2025] [:error] [pid 22995:tid 23021] [client 20.37.126.21:35657] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSyBEqhgK6YGad0ApM9OQAAAARc"]
[Mon Dec 01 01:38:26.745340 2025] [:error] [pid 25124:tid 25166] [client 20.37.126.21:35809] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSyBEll826mNLYSD9-3C_AAAAE0"]
[Mon Dec 01 01:38:26.977778 2025] [:error] [pid 25124:tid 25159] [client 20.37.126.21:35696] [client 20.37.126.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSyBEll826mNLYSD9-3C_gAAAEY"]
[Mon Dec 01 01:38:29.339926 2025] [autoindex:error] [pid 32520:tid 32542] [client 20.37.126.21:42929] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 01:38:30.715694 2025] [autoindex:error] [pid 32520:tid 32547] [client 20.37.126.21:42929] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 01:38:30.833325 2025] [autoindex:error] [pid 32520:tid 32527] [client 20.37.126.21:42929] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 01:38:34.292933 2025] [autoindex:error] [pid 32520:tid 32534] [client 20.37.126.21:42929] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 01:38:37.377564 2025] [:error] [pid 32520:tid 32540] [client 20.37.126.21:42929] [client 20.37.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSyBHfvbCMB_T-u6uxlIiwAAA48"]
[Mon Dec 01 01:38:42.028010 2025] [autoindex:error] [pid 32522:tid 32600] [client 20.37.126.21:35698] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 01:38:43.188918 2025] [autoindex:error] [pid 32522:tid 32587] [client 20.37.126.21:35698] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 01:38:43.306680 2025] [autoindex:error] [pid 32522:tid 32580] [client 20.37.126.21:35698] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 01:38:43.423877 2025] [autoindex:error] [pid 32522:tid 32596] [client 20.37.126.21:35698] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 01 02:03:42.557863 2025] [autoindex:error] [pid 22963:tid 22979] [client 4.241.178.76:47065] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 02:03:42.674478 2025] [autoindex:error] [pid 22963:tid 22985] [client 4.241.178.76:47065] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:03:42.800848 2025] [proxy_fcgi:error] [pid 22963:tid 22989] [client 4.241.178.76:47065] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Mon Dec 01 02:03:44.600047 2025] [autoindex:error] [pid 22963:tid 22983] [client 4.241.178.76:47065] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 02:04:49.788705 2025] [:error] [pid 22963:tid 22977] [client 4.241.178.76:47065] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aSyHQSgjrTC0kxo5Q-z1mwAAAIw"], referer: https://www.google.fr/
[Mon Dec 01 02:05:01.957870 2025] [autoindex:error] [pid 22963:tid 22977] [client 4.241.178.76:46976] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 02:05:02.131276 2025] [autoindex:error] [pid 22963:tid 22981] [client 4.241.178.76:46976] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 02:05:02.298027 2025] [autoindex:error] [pid 22963:tid 22973] [client 4.241.178.76:46976] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 02:05:03.551386 2025] [autoindex:error] [pid 22963:tid 22978] [client 4.241.178.76:46976] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:05:03.669751 2025] [autoindex:error] [pid 22963:tid 22987] [client 4.241.178.76:46976] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 02:05:03.825456 2025] [autoindex:error] [pid 22963:tid 22968] [client 4.241.178.76:46976] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:05:07.538623 2025] [autoindex:error] [pid 22963:tid 22966] [client 4.241.178.76:46976] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 02:05:07.657164 2025] [autoindex:error] [pid 22963:tid 22989] [client 4.241.178.76:46976] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 02:05:07.776025 2025] [autoindex:error] [pid 22963:tid 22974] [client 4.241.178.76:46976] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 02:05:09.588781 2025] [autoindex:error] [pid 22963:tid 22967] [client 4.241.178.76:46976] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 02:05:10.677770 2025] [autoindex:error] [pid 22963:tid 22970] [client 4.241.178.76:46976] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 02:05:44.319457 2025] [autoindex:error] [pid 32611:tid 32637] [client 4.241.178.76:46978] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:05:45.389938 2025] [autoindex:error] [pid 32611:tid 32618] [client 4.241.178.76:46978] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:05:49.660347 2025] [autoindex:error] [pid 32611:tid 32629] [client 4.241.178.76:46978] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 02:05:49.993253 2025] [autoindex:error] [pid 32611:tid 32624] [client 4.241.178.76:46978] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 02:05:50.129369 2025] [:error] [pid 32611:tid 32614] [client 4.241.178.76:46978] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSyHfq_aT7PlMcEPLmkjbgAAAAE"], referer: https://www.bing.com/
[Mon Dec 01 02:05:51.416119 2025] [autoindex:error] [pid 22963:tid 22969] [client 4.241.178.76:47097] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 02:05:51.529673 2025] [:error] [pid 22963:tid 22979] [client 4.241.178.76:47097] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aSyHfygjrTC0kxo5Q-z15AAAAI4"], referer: https://www.bing.com/
[Mon Dec 01 02:05:52.617041 2025] [autoindex:error] [pid 22995:tid 23011] [client 4.241.178.76:47064] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:05:52.736463 2025] [autoindex:error] [pid 22995:tid 23003] [client 4.241.178.76:47064] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 02:05:54.341369 2025] [:error] [pid 22995:tid 23008] [client 4.241.178.76:47064] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSyHgqhgK6YGad0ApM9XiAAAAQo"], referer: https://www.yahoo.com/
[Mon Dec 01 02:05:55.183783 2025] [autoindex:error] [pid 32520:tid 32546] [client 4.241.178.76:47060] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 02:05:56.440125 2025] [:error] [pid 32520:tid 32545] [client 4.241.178.76:47060] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSyHhPvbCMB_T-u6uxlPUQAAA5Q"], referer: https://www.google.com/
[Mon Dec 01 02:05:58.570867 2025] [:error] [pid 25124:tid 25175] [client 4.241.178.76:47067] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aSyHhll826mNLYSD9-3KGQAAAFY"], referer: https://www.google.fr/
[Mon Dec 01 02:05:59.982620 2025] [:error] [pid 32521:tid 32576] [client 4.241.178.76:47053] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSyHhz-OXioBrWvHoPrPWgAAAxg"], referer: https://www.google.co.uk/
[Mon Dec 01 02:06:00.860738 2025] [autoindex:error] [pid 32521:tid 32552] [client 4.241.178.76:46991] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 02:06:01.000282 2025] [autoindex:error] [pid 32521:tid 32575] [client 4.241.178.76:46991] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 02:06:01.755935 2025] [autoindex:error] [pid 32521:tid 32562] [client 4.241.178.76:46991] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:06:02.075941 2025] [autoindex:error] [pid 32521:tid 32568] [client 4.241.178.76:46991] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 02:06:02.194700 2025] [:error] [pid 32521:tid 32553] [client 4.241.178.76:46991] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSyHij-OXioBrWvHoPrPaAAAAwE"], referer: https://www.google.co.uk/
[Mon Dec 01 02:06:03.139762 2025] [:error] [pid 32520:tid 32525] [client 4.241.178.76:47103] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSyHi_vbCMB_T-u6uxlPXQAAA4A"], referer: https://www.yahoo.com/
[Mon Dec 01 02:06:04.665082 2025] [autoindex:error] [pid 41526:tid 41542] [client 4.241.178.76:46989] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 02:06:04.812943 2025] [:error] [pid 41526:tid 41537] [client 4.241.178.76:46989] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSyHjF0bjN1zt83-HJ0ccAAAAUY"], referer: https://www.bing.com/
[Mon Dec 01 02:06:07.200667 2025] [:error] [pid 25124:tid 25163] [client 4.241.178.76:46994] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSyHj1l826mNLYSD9-3KJgAAAEo"], referer: https://www.yahoo.com/
[Mon Dec 01 02:06:09.613052 2025] [autoindex:error] [pid 25124:tid 25158] [client 4.241.178.76:46982] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:06:10.811439 2025] [autoindex:error] [pid 25124:tid 25157] [client 4.241.178.76:46982] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 02:06:10.965479 2025] [autoindex:error] [pid 25124:tid 25164] [client 4.241.178.76:46982] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 02:06:11.085090 2025] [:error] [pid 25124:tid 25159] [client 4.241.178.76:46982] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSyHk1l826mNLYSD9-3KMAAAAEY"], referer: https://www.google.co.uk/
[Mon Dec 01 02:06:12.434978 2025] [autoindex:error] [pid 32520:tid 32547] [client 4.241.178.76:47028] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 02:06:12.554491 2025] [autoindex:error] [pid 32520:tid 32549] [client 4.241.178.76:47028] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:06:12.668340 2025] [:error] [pid 32520:tid 32532] [client 4.241.178.76:47028] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSyHlPvbCMB_T-u6uxlPZAAAA4c"], referer: https://www.google.com/
[Mon Dec 01 02:06:15.087876 2025] [autoindex:error] [pid 22995:tid 23008] [client 4.241.178.76:47047] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:06:15.201373 2025] [:error] [pid 22995:tid 22998] [client 4.241.178.76:47047] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSyHl6hgK6YGad0ApM9XnAAAAQA"], referer: https://www.google.com/
[Mon Dec 01 02:06:22.980918 2025] [access_compat:error] [pid 41526:tid 41537] [client 4.241.178.76:47049] AH01797: client denied by server configuration: /home/hbtwocom/public_html/wp-content/updraft/, referer: https://www.google.co.uk/
[Mon Dec 01 02:06:30.597323 2025] [autoindex:error] [pid 41526:tid 41541] [client 4.241.178.76:47049] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:06:30.786462 2025] [autoindex:error] [pid 41526:tid 41548] [client 4.241.178.76:47049] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 02:06:30.905821 2025] [autoindex:error] [pid 41526:tid 41534] [client 4.241.178.76:47049] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 02:06:31.026824 2025] [:error] [pid 41526:tid 41549] [client 4.241.178.76:47049] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSyHp10bjN1zt83-HJ0coQAAAVI"], referer: https://www.google.co.uk/
[Mon Dec 01 02:06:33.898778 2025] [:error] [pid 32520:tid 32537] [client 4.241.178.76:47062] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSyHqfvbCMB_T-u6uxlPfAAAA4w"], referer: https://www.google.de/
[Mon Dec 01 02:06:35.680559 2025] [autoindex:error] [pid 32521:tid 32568] [client 4.241.178.76:46990] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 02:06:35.852338 2025] [autoindex:error] [pid 32521:tid 32563] [client 4.241.178.76:46990] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:06:35.965492 2025] [:error] [pid 32521:tid 32557] [client 4.241.178.76:46990] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/index.php"] [unique_id "aSyHqz-OXioBrWvHoPrPggAAAwU"], referer: https://www.google.co.uk/
[Mon Dec 01 02:06:37.937959 2025] [autoindex:error] [pid 41526:tid 41542] [client 4.241.178.76:47045] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 02:06:38.910460 2025] [:error] [pid 41526:tid 41546] [client 4.241.178.76:47045] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSyHrl0bjN1zt83-HJ0crQAAAU8"], referer: https://www.yahoo.com/
[Mon Dec 01 02:06:39.647537 2025] [autoindex:error] [pid 22963:tid 22971] [client 4.241.178.76:47063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 02:06:40.893477 2025] [:error] [pid 22963:tid 22981] [client 4.241.178.76:47063] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aSyHsCgjrTC0kxo5Q-z2KwAAAJA"], referer: https://www.google.co.uk/
[Mon Dec 01 02:06:41.803301 2025] [autoindex:error] [pid 32522:tid 32579] [client 4.241.178.76:47029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 02:06:41.923184 2025] [autoindex:error] [pid 32522:tid 32591] [client 4.241.178.76:47029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 02:06:42.039058 2025] [:error] [pid 32522:tid 32595] [client 4.241.178.76:47029] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSyHsiY5g6U7AgYu2cK7kwAAANA"], referer: https://www.bing.com/
[Mon Dec 01 02:06:42.744132 2025] [autoindex:error] [pid 22963:tid 22977] [client 4.241.178.76:46933] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 02:06:42.874468 2025] [autoindex:error] [pid 22963:tid 22965] [client 4.241.178.76:46933] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 02:06:44.411140 2025] [autoindex:error] [pid 22963:tid 22976] [client 4.241.178.76:46933] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 02:06:44.672825 2025] [autoindex:error] [pid 22963:tid 22970] [client 4.241.178.76:46933] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 02:06:44.877126 2025] [autoindex:error] [pid 22963:tid 22971] [client 4.241.178.76:46933] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 02:06:45.360923 2025] [autoindex:error] [pid 22963:tid 22982] [client 4.241.178.76:46933] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 02:06:45.675611 2025] [autoindex:error] [pid 22963:tid 22987] [client 4.241.178.76:46933] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 02:06:45.789365 2025] [:error] [pid 22963:tid 22979] [client 4.241.178.76:46933] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSyHtSgjrTC0kxo5Q-z2OwAAAI4"], referer: https://www.google.fr/
[Mon Dec 01 02:06:47.665862 2025] [autoindex:error] [pid 32522:tid 32583] [client 4.241.178.76:46993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 02:06:47.870322 2025] [autoindex:error] [pid 32522:tid 32601] [client 4.241.178.76:46993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 02:06:48.016962 2025] [:error] [pid 32522:tid 32588] [client 4.241.178.76:46993] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSyHuCY5g6U7AgYu2cK7nAAAAMk"], referer: https://www.google.co.uk/
[Mon Dec 01 02:06:49.281525 2025] [autoindex:error] [pid 32521:tid 32561] [client 4.241.178.76:46980] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 02:06:49.398187 2025] [:error] [pid 32521:tid 32565] [client 4.241.178.76:46980] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSyHuT-OXioBrWvHoPrPjwAAAw0"], referer: https://www.google.fr/
[Mon Dec 01 02:06:50.386703 2025] [:error] [pid 32521:tid 32572] [client 4.241.178.76:47086] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSyHuj-OXioBrWvHoPrPkAAAAxQ"], referer: https://www.google.com/
[Mon Dec 01 02:06:51.605627 2025] [autoindex:error] [pid 32522:tid 32591] [client 4.241.178.76:47099] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 02:06:52.460181 2025] [:error] [pid 32522:tid 32581] [client 4.241.178.76:47099] [client 4.241.178.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSyHvCY5g6U7AgYu2cK7owAAAMI"], referer: https://www.yahoo.com/
[Mon Dec 01 02:40:08.317965 2025] [:error] [pid 32521:tid 32556] [client 103.65.237.153:49154] [client 103.65.237.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aSyPiD-OXioBrWvHoPrfewAAAwQ"]
[Mon Dec 01 05:05:02.542778 2025] [:error] [pid 38833:tid 38838] [client 222.79.103.59:59328] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aSyxfmQclTT5c5spu4YNPwAAAMM"]
[Mon Dec 01 10:21:15.014693 2025] [:error] [pid 50173:tid 50206] [client 217.182.194.16:41166] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aSz7m4v3zN9A0dVx6aR1KAAAAQI"]
[Mon Dec 01 10:21:20.920485 2025] [:error] [pid 50173:tid 50228] [client 217.182.194.16:46290] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aSz7oIv3zN9A0dVx6aR1NQAAARg"]
[Mon Dec 01 10:21:26.152213 2025] [:error] [pid 50173:tid 50216] [client 217.182.194.16:46298] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aSz7pov3zN9A0dVx6aR1OQAAAQw"]
[Mon Dec 01 10:21:35.460617 2025] [:error] [pid 7182:tid 7193] [client 217.182.194.16:41328] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aSz7r39TcBzcTIZoEPg6OgAAAMg"]
[Mon Dec 01 10:21:41.357636 2025] [:error] [pid 7182:tid 7206] [client 217.182.194.16:47238] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aSz7tX9TcBzcTIZoEPg6PwAAANU"]
[Mon Dec 01 10:21:47.614829 2025] [:error] [pid 50172:tid 50178] [client 217.182.194.16:47254] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aSz7u2A_oUkA7PwzMCfG_QAAAEE"]
[Mon Dec 01 10:21:55.359635 2025] [:error] [pid 50236:tid 50243] [client 217.182.194.16:35224] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aSz7w9Fh6opCMA7G1YT2ZgAAAUU"]
[Mon Dec 01 10:22:01.018378 2025] [:error] [pid 50236:tid 50251] [client 217.182.194.16:49706] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aSz7ydFh6opCMA7G1YT2cQAAAU0"]
[Mon Dec 01 10:22:06.855518 2025] [:error] [pid 50143:tid 50162] [client 217.182.194.16:49714] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aSz7zg4ii19UTfa9gmYMOgAAABE"]
[Mon Dec 01 10:24:12.621978 2025] [:error] [pid 50143:tid 50157] [client 35.177.7.219:58422] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpversion.php"] [unique_id "aSz8TA4ii19UTfa9gmYM2wAAAAw"]
[Mon Dec 01 10:24:13.638462 2025] [:error] [pid 50143:tid 50161] [client 35.177.7.219:58720] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_version.php"] [unique_id "aSz8TQ4ii19UTfa9gmYM3wAAABA"]
[Mon Dec 01 10:24:14.662685 2025] [:error] [pid 7182:tid 7196] [client 35.177.7.219:59002] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/serverinfo.php"] [unique_id "aSz8Tn9TcBzcTIZoEPg7rgAAAMs"]
[Mon Dec 01 10:24:15.682053 2025] [:error] [pid 50236:tid 50260] [client 35.177.7.219:59318] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server.php"] [unique_id "aSz8T9Fh6opCMA7G1YT3PwAAAVY"]
[Mon Dec 01 10:24:16.700017 2025] [:error] [pid 50236:tid 50261] [client 35.177.7.219:59584] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/debug.php"] [unique_id "aSz8UNFh6opCMA7G1YT3QQAAAVc"]
[Mon Dec 01 10:24:17.722105 2025] [:error] [pid 60651:tid 60659] [client 35.177.7.219:59872] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/diagnostic.php"] [unique_id "aSz8UWFx-k5xX1VD6QLRawAAAIU"]
[Mon Dec 01 10:24:18.744340 2025] [:error] [pid 50236:tid 50239] [client 35.177.7.219:60150] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phptest.php"] [unique_id "aSz8UtFh6opCMA7G1YT3SQAAAUE"]
[Mon Dec 01 10:24:19.763462 2025] [:error] [pid 60651:tid 60672] [client 35.177.7.219:60430] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/check.php"] [unique_id "aSz8U2Fx-k5xX1VD6QLRbgAAAJI"]
[Mon Dec 01 10:24:20.792535 2025] [:error] [pid 50173:tid 50227] [client 35.177.7.219:60696] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/probe.php"] [unique_id "aSz8VIv3zN9A0dVx6aR2dgAAARc"]
[Mon Dec 01 10:24:21.884040 2025] [:error] [pid 7182:tid 7186] [client 35.177.7.219:60994] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/_profiler/phpinfo"] [unique_id "aSz8VX9TcBzcTIZoEPg7xAAAAME"]
[Mon Dec 01 10:24:22.937597 2025] [:error] [pid 7182:tid 7198] [client 35.177.7.219:33036] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php.save"] [unique_id "aSz8Vn9TcBzcTIZoEPg7yQAAAM0"]
[Mon Dec 01 10:24:23.955041 2025] [:error] [pid 7182:tid 7204] [client 35.177.7.219:33310] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php.save"] [unique_id "aSz8V39TcBzcTIZoEPg75AAAANM"]
[Mon Dec 01 10:24:24.998971 2025] [:error] [pid 50143:tid 50169] [client 35.177.7.219:33590] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_info.php.save"] [unique_id "aSz8WA4ii19UTfa9gmYM5gAAABg"]
[Mon Dec 01 10:24:26.019420 2025] [:error] [pid 50172:tid 50180] [client 35.177.7.219:33884] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php.save"] [unique_id "aSz8WmA_oUkA7PwzMCfICgAAAEM"]
[Mon Dec 01 10:24:27.039882 2025] [:error] [pid 50236:tid 50248] [client 35.177.7.219:34176] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php.bak"] [unique_id "aSz8W9Fh6opCMA7G1YT3WgAAAUo"]
[Mon Dec 01 10:24:28.059664 2025] [:error] [pid 50143:tid 50159] [client 35.177.7.219:34466] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php.bak"] [unique_id "aSz8XA4ii19UTfa9gmYM7AAAAA4"]
[Mon Dec 01 10:24:29.140862 2025] [:error] [pid 7182:tid 7200] [client 35.177.7.219:34762] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_info.php.bak"] [unique_id "aSz8XX9TcBzcTIZoEPg7-wAAAM8"]
[Mon Dec 01 10:24:30.292477 2025] [:error] [pid 50236:tid 50257] [client 35.177.7.219:35108] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php.bak"] [unique_id "aSz8XtFh6opCMA7G1YT3YQAAAVM"]
[Mon Dec 01 10:24:31.412093 2025] [:error] [pid 50172:tid 50177] [client 35.177.7.219:35456] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php.old"] [unique_id "aSz8X2A_oUkA7PwzMCfIFAAAAEA"]
[Mon Dec 01 10:24:32.547905 2025] [:error] [pid 50173:tid 50204] [client 35.177.7.219:35790] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php.old"] [unique_id "aSz8YIv3zN9A0dVx6aR2hgAAAQA"]
[Mon Dec 01 10:24:33.666338 2025] [:error] [pid 50172:tid 50189] [client 35.177.7.219:36128] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_info.php.old"] [unique_id "aSz8YWA_oUkA7PwzMCfIFwAAAEw"]
[Mon Dec 01 10:24:34.692101 2025] [:error] [pid 50143:tid 50145] [client 35.177.7.219:36440] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php.old"] [unique_id "aSz8Yg4ii19UTfa9gmYM-wAAAAA"]
[Mon Dec 01 10:24:35.708148 2025] [:error] [pid 50143:tid 50156] [client 35.177.7.219:36794] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php.tmp"] [unique_id "aSz8Yw4ii19UTfa9gmYNAAAAAAs"]
[Mon Dec 01 10:24:36.726357 2025] [:error] [pid 60651:tid 60664] [client 35.177.7.219:37146] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php.tmp"] [unique_id "aSz8ZGFx-k5xX1VD6QLRhgAAAIo"]
[Mon Dec 01 10:24:37.743729 2025] [:error] [pid 50173:tid 50204] [client 35.177.7.219:37514] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_info.php.tmp"] [unique_id "aSz8ZYv3zN9A0dVx6aR2kgAAAQA"]
[Mon Dec 01 10:24:38.760659 2025] [:error] [pid 50236:tid 50259] [client 35.177.7.219:37872] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php.tmp"] [unique_id "aSz8ZtFh6opCMA7G1YT3bQAAAVU"]
[Mon Dec 01 10:24:39.918159 2025] [:error] [pid 7182:tid 7203] [client 35.177.7.219:38220] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php.txt"] [unique_id "aSz8Z39TcBzcTIZoEPg8FQAAANI"]
[Mon Dec 01 10:24:41.014411 2025] [:error] [pid 50236:tid 50252] [client 35.177.7.219:38564] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php.txt"] [unique_id "aSz8adFh6opCMA7G1YT3cAAAAU4"]
[Mon Dec 01 10:24:42.072545 2025] [:error] [pid 50143:tid 50157] [client 35.177.7.219:38884] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/phpinfo.php"] [unique_id "aSz8ag4ii19UTfa9gmYNBwAAAAw"]
[Mon Dec 01 10:24:43.192695 2025] [:error] [pid 60651:tid 60673] [client 35.177.7.219:39180] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/info.php"] [unique_id "aSz8a2Fx-k5xX1VD6QLRpAAAAJM"]
[Mon Dec 01 10:24:44.358948 2025] [:error] [pid 7182:tid 7202] [client 35.177.7.219:39502] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/test.php"] [unique_id "aSz8bH9TcBzcTIZoEPg8OQAAANE"]
[Mon Dec 01 10:24:45.450440 2025] [:error] [pid 7182:tid 7191] [client 35.177.7.219:39816] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/php.php"] [unique_id "aSz8bX9TcBzcTIZoEPg8QgAAAMY"]
[Mon Dec 01 10:24:46.533514 2025] [:error] [pid 50173:tid 50206] [client 35.177.7.219:40138] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test/phpinfo.php"] [unique_id "aSz8bov3zN9A0dVx6aR2tgAAAQI"]
[Mon Dec 01 10:24:47.553757 2025] [:error] [pid 50236:tid 50261] [client 35.177.7.219:40460] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test/info.php"] [unique_id "aSz8b9Fh6opCMA7G1YT3jwAAAVc"]
[Mon Dec 01 10:24:48.573976 2025] [:error] [pid 7182:tid 7203] [client 35.177.7.219:40790] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test/test.php"] [unique_id "aSz8cH9TcBzcTIZoEPg8UQAAANI"]
[Mon Dec 01 10:24:49.591520 2025] [:error] [pid 7182:tid 7186] [client 35.177.7.219:41096] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev/phpinfo.php"] [unique_id "aSz8cX9TcBzcTIZoEPg8YAAAAME"]
[Mon Dec 01 10:24:50.609823 2025] [:error] [pid 50172:tid 50192] [client 35.177.7.219:41438] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev/info.php"] [unique_id "aSz8cmA_oUkA7PwzMCfIpAAAAE8"]
[Mon Dec 01 10:24:51.628920 2025] [:error] [pid 7182:tid 7192] [client 35.177.7.219:41798] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev/test.php"] [unique_id "aSz8c39TcBzcTIZoEPg8gwAAAMc"]
[Mon Dec 01 10:24:52.688483 2025] [:error] [pid 50173:tid 50217] [client 35.177.7.219:42156] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tmp/phpinfo.php"] [unique_id "aSz8dIv3zN9A0dVx6aR2xgAAAQ0"]
[Mon Dec 01 10:24:53.711471 2025] [:error] [pid 7182:tid 7204] [client 35.177.7.219:42542] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tmp/info.php"] [unique_id "aSz8dX9TcBzcTIZoEPg8lQAAANM"]
[Mon Dec 01 10:24:54.730817 2025] [:error] [pid 60651:tid 60678] [client 35.177.7.219:42948] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tmp/test.php"] [unique_id "aSz8dmFx-k5xX1VD6QLSAwAAAJg"]
[Mon Dec 01 10:24:55.753124 2025] [:error] [pid 50143:tid 50164] [client 35.177.7.219:43342] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/phpinfo.php"] [unique_id "aSz8dw4ii19UTfa9gmYNJgAAABM"]
[Mon Dec 01 10:24:56.772059 2025] [:error] [pid 50236:tid 50248] [client 35.177.7.219:43732] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/info.php"] [unique_id "aSz8eNFh6opCMA7G1YT3nwAAAUo"]
[Mon Dec 01 10:24:57.793877 2025] [:error] [pid 50172:tid 50200] [client 35.177.7.219:44126] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/test.php"] [unique_id "aSz8eWA_oUkA7PwzMCfJDwAAAFc"]
[Mon Dec 01 10:24:58.855731 2025] [:error] [pid 50236:tid 50243] [client 35.177.7.219:44512] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web/phpinfo.php"] [unique_id "aSz8etFh6opCMA7G1YT3pgAAAUU"]
[Mon Dec 01 10:24:59.992113 2025] [:error] [pid 7182:tid 7206] [client 35.177.7.219:44860] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web/info.php"] [unique_id "aSz8e39TcBzcTIZoEPg8yQAAANU"]
[Mon Dec 01 10:25:01.098005 2025] [:error] [pid 50143:tid 50169] [client 35.177.7.219:45230] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web/test.php"] [unique_id "aSz8fQ4ii19UTfa9gmYNLAAAABg"]
[Mon Dec 01 10:25:02.156867 2025] [:error] [pid 7182:tid 7204] [client 35.177.7.219:45564] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www/phpinfo.php"] [unique_id "aSz8fn9TcBzcTIZoEPg80QAAANM"]
[Mon Dec 01 10:25:03.182037 2025] [:error] [pid 50236:tid 50242] [client 35.177.7.219:45892] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www/info.php"] [unique_id "aSz8f9Fh6opCMA7G1YT3sQAAAUQ"]
[Mon Dec 01 10:25:04.204046 2025] [:error] [pid 60651:tid 60670] [client 35.177.7.219:46252] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www/test.php"] [unique_id "aSz8gGFx-k5xX1VD6QLSWwAAAJA"]
[Mon Dec 01 10:25:05.224026 2025] [:error] [pid 50172:tid 50182] [client 35.177.7.219:46608] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/site/phpinfo.php"] [unique_id "aSz8gWA_oUkA7PwzMCfJSwAAAEU"]
[Mon Dec 01 10:25:06.243507 2025] [:error] [pid 50173:tid 50204] [client 35.177.7.219:46976] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/site/info.php"] [unique_id "aSz8gov3zN9A0dVx6aR22QAAAQA"]
[Mon Dec 01 10:25:07.261234 2025] [:error] [pid 50172:tid 50200] [client 35.177.7.219:47336] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/html/phpinfo.php"] [unique_id "aSz8g2A_oUkA7PwzMCfJUQAAAFc"]
[Mon Dec 01 10:25:08.285820 2025] [:error] [pid 50172:tid 50197] [client 35.177.7.219:47660] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/html/info.php"] [unique_id "aSz8hGA_oUkA7PwzMCfJVAAAAFQ"]
[Mon Dec 01 10:25:09.315662 2025] [:error] [pid 60651:tid 60677] [client 35.177.7.219:47988] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htdocs/phpinfo.php"] [unique_id "aSz8hWFx-k5xX1VD6QLSYgAAAJc"]
[Mon Dec 01 10:25:29.866131 2025] [:error] [pid 60651:tid 60678] [client 35.177.7.219:55026] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/phpinfo.php"] [unique_id "aSz8mWFx-k5xX1VD6QLSigAAAJg"]
[Mon Dec 01 10:25:30.886007 2025] [:error] [pid 50173:tid 50206] [client 35.177.7.219:55460] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/info.php"] [unique_id "aSz8mov3zN9A0dVx6aR3BwAAAQI"]
[Mon Dec 01 10:25:31.910948 2025] [:error] [pid 7182:tid 7186] [client 35.177.7.219:55936] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/static/phpinfo.php"] [unique_id "aSz8m39TcBzcTIZoEPg9MwAAAME"]
[Mon Dec 01 10:25:32.931080 2025] [:error] [pid 50236:tid 50244] [client 35.177.7.219:56510] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/static/info.php"] [unique_id "aSz8nNFh6opCMA7G1YT4GAAAAUY"]
[Mon Dec 01 10:25:33.969933 2025] [:error] [pid 50173:tid 50221] [client 35.177.7.219:57052] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/phpinfo.php"] [unique_id "aSz8nYv3zN9A0dVx6aR3EQAAARE"]
[Mon Dec 01 10:25:34.994829 2025] [:error] [pid 50172:tid 50199] [client 35.177.7.219:57586] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/info.php"] [unique_id "aSz8nmA_oUkA7PwzMCfJoQAAAFY"]
[Mon Dec 01 10:25:36.018005 2025] [:error] [pid 60651:tid 60673] [client 35.177.7.219:58144] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backup/phpinfo.php"] [unique_id "aSz8oGFx-k5xX1VD6QLSlgAAAJM"]
[Mon Dec 01 10:25:37.060958 2025] [:error] [pid 50172:tid 50184] [client 35.177.7.219:58694] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backup/info.php"] [unique_id "aSz8oWA_oUkA7PwzMCfJpwAAAEc"]
[Mon Dec 01 10:25:38.085256 2025] [:error] [pid 50172:tid 50193] [client 35.177.7.219:59218] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/old/phpinfo.php"] [unique_id "aSz8omA_oUkA7PwzMCfJqwAAAFA"]
[Mon Dec 01 10:25:39.106097 2025] [:error] [pid 60651:tid 60664] [client 35.177.7.219:59708] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/old/info.php"] [unique_id "aSz8o2Fx-k5xX1VD6QLSnAAAAIo"]
[Mon Dec 01 10:25:40.131251 2025] [:error] [pid 60651:tid 60676] [client 35.177.7.219:60162] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aSz8pGFx-k5xX1VD6QLSnwAAAJY"]
[Mon Dec 01 10:25:41.153765 2025] [:error] [pid 50173:tid 50215] [client 35.177.7.219:60552] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aSz8pYv3zN9A0dVx6aR3GQAAAQs"]
[Mon Dec 01 10:25:42.173863 2025] [:error] [pid 50236:tid 50259] [client 35.177.7.219:60910] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aSz8ptFh6opCMA7G1YT4JgAAAVU"]
[Mon Dec 01 10:25:43.193819 2025] [:error] [pid 60651:tid 60671] [client 35.177.7.219:33000] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aSz8p2Fx-k5xX1VD6QLSqAAAAJE"]
[Mon Dec 01 10:25:44.217415 2025] [:error] [pid 60651:tid 60661] [client 35.177.7.219:33372] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aSz8qGFx-k5xX1VD6QLSrAAAAIc"]
[Mon Dec 01 10:25:45.235422 2025] [:error] [pid 50172:tid 50181] [client 35.177.7.219:33850] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info_php.php"] [unique_id "aSz8qWA_oUkA7PwzMCfJtgAAAEQ"]
[Mon Dec 01 10:25:46.254396 2025] [:error] [pid 7182:tid 7188] [client 35.177.7.219:34358] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php-info.php"] [unique_id "aSz8qn9TcBzcTIZoEPg9WQAAAMM"]
[Mon Dec 01 10:25:47.276791 2025] [:error] [pid 7182:tid 7209] [client 35.177.7.219:34982] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/infophp.php"] [unique_id "aSz8q39TcBzcTIZoEPg9YgAAANg"]
[Mon Dec 01 10:25:48.301003 2025] [:error] [pid 50172:tid 50196] [client 35.177.7.219:35674] [client 35.177.7.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/testphp.php"] [unique_id "aSz8rGA_oUkA7PwzMCfJvQAAAFM"]
[Mon Dec 01 10:25:49.320901 2025] [:error] [pid 60651:tid 60654] [client 35.177.7.219:36352] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aSz8rWFx-k5xX1VD6QLSvgAAAIA"]
[Mon Dec 01 10:25:50.351221 2025] [:error] [pid 50172:tid 50201] [client 35.177.7.219:37246] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aSz8rmA_oUkA7PwzMCfJwwAAAFg"]
[Mon Dec 01 10:25:51.377826 2025] [:error] [pid 50236:tid 50246] [client 35.177.7.219:37722] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aSz8r9Fh6opCMA7G1YT4QgAAAUg"]
[Mon Dec 01 10:25:52.401295 2025] [:error] [pid 50173:tid 50226] [client 35.177.7.219:38110] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.remote"] [unique_id "aSz8sIv3zN9A0dVx6aR3KQAAARY"]
[Mon Dec 01 10:25:53.418475 2025] [:error] [pid 7182:tid 7187] [client 35.177.7.219:38486] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aSz8sX9TcBzcTIZoEPg9fgAAAMI"]
[Mon Dec 01 10:25:54.443866 2025] [:error] [pid 50172:tid 50187] [client 35.177.7.219:38786] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "aSz8smA_oUkA7PwzMCfJywAAAEo"]
[Mon Dec 01 10:25:55.462766 2025] [:error] [pid 50172:tid 50186] [client 35.177.7.219:39102] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging"] [unique_id "aSz8s2A_oUkA7PwzMCfJzQAAAEk"]
[Mon Dec 01 10:25:56.487658 2025] [:error] [pid 50143:tid 50153] [client 35.177.7.219:39414] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test"] [unique_id "aSz8tA4ii19UTfa9gmYNjAAAAAg"]
[Mon Dec 01 10:25:57.510390 2025] [:error] [pid 50173:tid 50206] [client 35.177.7.219:39748] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "aSz8tYv3zN9A0dVx6aR3OQAAAQI"]
[Mon Dec 01 10:25:58.536415 2025] [:error] [pid 60651:tid 60666] [client 35.177.7.219:40066] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample"] [unique_id "aSz8tmFx-k5xX1VD6QLSyAAAAIw"]
[Mon Dec 01 10:25:59.601398 2025] [:error] [pid 50173:tid 50213] [client 35.177.7.219:40456] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old"] [unique_id "aSz8t4v3zN9A0dVx6aR3PAAAAQk"]
[Mon Dec 01 10:26:00.623703 2025] [:error] [pid 50143:tid 50163] [client 35.177.7.219:40850] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "aSz8uA4ii19UTfa9gmYNnAAAABI"]
[Mon Dec 01 10:26:01.650516 2025] [:error] [pid 50236:tid 50259] [client 35.177.7.219:41218] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "aSz8udFh6opCMA7G1YT4WgAAAVU"]
[Mon Dec 01 10:26:02.670492 2025] [:error] [pid 50143:tid 50161] [client 35.177.7.219:41614] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.1"] [unique_id "aSz8ug4ii19UTfa9gmYNpQAAABA"]
[Mon Dec 01 10:26:03.696191 2025] [:error] [pid 50172:tid 50194] [client 35.177.7.219:41990] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.2"] [unique_id "aSz8u2A_oUkA7PwzMCfJ3wAAAFE"]
[Mon Dec 01 10:26:04.730460 2025] [:error] [pid 50172:tid 50182] [client 35.177.7.219:42408] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.prod.local"] [unique_id "aSz8vGA_oUkA7PwzMCfJ4AAAAEU"]
[Mon Dec 01 10:26:05.750297 2025] [:error] [pid 50172:tid 50185] [client 35.177.7.219:42822] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev.local"] [unique_id "aSz8vWA_oUkA7PwzMCfJ4wAAAEg"]
[Mon Dec 01 10:26:06.770532 2025] [:error] [pid 7182:tid 7187] [client 35.177.7.219:43270] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/vendor/.env"] [unique_id "aSz8vn9TcBzcTIZoEPg9mAAAAMI"]
[Mon Dec 01 10:26:07.791324 2025] [:error] [pid 50172:tid 50198] [client 35.177.7.219:43796] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/lib/.env"] [unique_id "aSz8v2A_oUkA7PwzMCfJ5gAAAFU"]
[Mon Dec 01 10:26:08.810437 2025] [:error] [pid 50173:tid 50222] [client 35.177.7.219:44474] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/lab/.env"] [unique_id "aSz8wIv3zN9A0dVx6aR3SwAAARI"]
[Mon Dec 01 10:26:09.832328 2025] [:error] [pid 50173:tid 50205] [client 35.177.7.219:45118] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/cronlab/.env"] [unique_id "aSz8wYv3zN9A0dVx6aR3TgAAAQE"]
[Mon Dec 01 10:26:10.916231 2025] [:error] [pid 50173:tid 50223] [client 35.177.7.219:45580] [client 35.177.7.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/cron/.env"] [unique_id "aSz8wov3zN9A0dVx6aR3UQAAARM"]
[Mon Dec 01 14:23:38.342821 2025] [:error] [pid 7182:tid 7197] [client 106.202.135.67:61090] [client 106.202.135.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.202.135.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aS00an9TcBzcTIZoEPh9uAAAAMw"]
[Mon Dec 01 14:52:48.250748 2025] [:error] [pid 36082:tid 36088] [client 138.197.118.149:49824] [client 138.197.118.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aS07QMRKeK3X6sGVWJlfjwAAAgQ"]
[Mon Dec 01 14:52:53.363326 2025] [:error] [pid 36176:tid 36183] [client 138.197.118.149:44000] [client 138.197.118.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aS07RS3_lRpszIBsP9J_ywAAAkU"]
[Mon Dec 01 17:50:15.904338 2025] [:error] [pid 5254:tid 5272] [client 138.197.118.149:38996] [client 138.197.118.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aS1k181HJky8HPf_OD9bUQAAAVA"]
[Mon Dec 01 17:50:19.837788 2025] [:error] [pid 5254:tid 5263] [client 138.197.118.149:41260] [client 138.197.118.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aS1k281HJky8HPf_OD9bVgAAAUc"]
[Mon Dec 01 19:45:10.952615 2025] [autoindex:error] [pid 3247:tid 3288] [client 139.59.37.180:50072] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 01 21:29:04.605347 2025] [autoindex:error] [pid 51644:tid 51655] [client 4.217.180.63:11213] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 21:29:04.754373 2025] [autoindex:error] [pid 51644:tid 51663] [client 4.217.180.63:11213] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 21:29:04.904251 2025] [proxy_fcgi:error] [pid 51644:tid 51653] [client 4.217.180.63:11213] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Mon Dec 01 21:29:06.114324 2025] [autoindex:error] [pid 51644:tid 51666] [client 4.217.180.63:11213] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 21:30:25.611045 2025] [:error] [pid 51614:tid 51629] [client 4.217.180.63:11250] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aS2YcaEd44yERYvpOsOjqQAAAQ0"], referer: https://duckduckgo.com/
[Mon Dec 01 21:30:39.748110 2025] [autoindex:error] [pid 51644:tid 51654] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 21:30:39.937583 2025] [autoindex:error] [pid 51644:tid 51657] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 21:30:40.083385 2025] [autoindex:error] [pid 51644:tid 51660] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 21:30:41.765986 2025] [autoindex:error] [pid 51644:tid 51663] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 21:30:41.915920 2025] [autoindex:error] [pid 51644:tid 51653] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 21:30:42.063314 2025] [autoindex:error] [pid 51644:tid 51651] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 21:30:46.323454 2025] [autoindex:error] [pid 51644:tid 51670] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 21:30:46.516764 2025] [autoindex:error] [pid 51644:tid 51650] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 21:30:46.682427 2025] [autoindex:error] [pid 51644:tid 51652] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 21:30:47.798148 2025] [autoindex:error] [pid 51644:tid 51653] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 21:30:49.567227 2025] [autoindex:error] [pid 51644:tid 51659] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 21:31:15.335360 2025] [autoindex:error] [pid 51644:tid 51660] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 21:31:16.460377 2025] [autoindex:error] [pid 51644:tid 51647] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 21:31:19.065444 2025] [autoindex:error] [pid 51644:tid 51660] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 21:31:19.268517 2025] [autoindex:error] [pid 51644:tid 51655] [client 4.217.180.63:11136] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 21:31:19.426300 2025] [:error] [pid 51644:tid 51662] [client 4.217.180.63:11136] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aS2Ypx6HKw4vZaUsODBa4wAAAY8"], referer: https://www.yahoo.com/
[Mon Dec 01 21:31:20.414463 2025] [autoindex:error] [pid 37487:tid 37537] [client 4.217.180.63:11140] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 21:31:20.590627 2025] [:error] [pid 37487:tid 37536] [client 4.217.180.63:11140] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aS2YqBkh5IowGSjYDDK9OQAAANI"], referer: https://www.yahoo.com/
[Mon Dec 01 21:31:22.192429 2025] [autoindex:error] [pid 51644:tid 51651] [client 4.217.180.63:11254] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 21:31:22.338116 2025] [autoindex:error] [pid 51644:tid 51650] [client 4.217.180.63:11254] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 21:31:23.714677 2025] [:error] [pid 51644:tid 51647] [client 4.217.180.63:11254] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aS2Yqx6HKw4vZaUsODBa7gAAAYA"], referer: https://www.bing.com/
[Mon Dec 01 21:31:25.823457 2025] [autoindex:error] [pid 37488:tid 37548] [client 4.217.180.63:11249] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 21:31:27.515236 2025] [:error] [pid 37488:tid 37549] [client 4.217.180.63:11249] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aS2YrwYuXqVQB9eas3PPxgAAAAQ"], referer: https://www.google.com/
[Mon Dec 01 21:31:29.726386 2025] [:error] [pid 37487:tid 37538] [client 4.217.180.63:11217] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aS2YsRkh5IowGSjYDDK9PQAAANQ"], referer: https://www.google.de/
[Mon Dec 01 21:31:32.135023 2025] [:error] [pid 51644:tid 51649] [client 4.217.180.63:11223] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aS2YtB6HKw4vZaUsODBa-wAAAYI"], referer: https://www.google.com/
[Mon Dec 01 21:31:33.795144 2025] [autoindex:error] [pid 37486:tid 37493] [client 4.217.180.63:11257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 21:31:33.944769 2025] [autoindex:error] [pid 37486:tid 37492] [client 4.217.180.63:11257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 21:31:34.091890 2025] [autoindex:error] [pid 37486:tid 37510] [client 4.217.180.63:11257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 21:31:34.248806 2025] [autoindex:error] [pid 37486:tid 37495] [client 4.217.180.63:11257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 21:31:34.401268 2025] [:error] [pid 37486:tid 37507] [client 4.217.180.63:11257] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aS2YtsFyhayybvna6fnc6wAAAFE"], referer: https://www.google.co.uk/
[Mon Dec 01 21:31:36.230987 2025] [:error] [pid 37488:tid 37563] [client 4.217.180.63:11152] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aS2YuAYuXqVQB9eas3PPzQAAABI"], referer: https://www.google.de/
[Mon Dec 01 21:31:36.958334 2025] [autoindex:error] [pid 42358:tid 42384] [client 4.217.180.63:11263] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 21:31:37.099250 2025] [:error] [pid 42358:tid 42364] [client 4.217.180.63:11263] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aS2YuSp1UoALeoaVXbe5agAAAIM"], referer: https://www.google.fr/
[Mon Dec 01 21:31:38.979544 2025] [:error] [pid 37488:tid 37569] [client 4.217.180.63:11231] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aS2YugYuXqVQB9eas3PP0QAAABg"], referer: https://www.yahoo.com/
[Mon Dec 01 21:31:40.076373 2025] [autoindex:error] [pid 37488:tid 37546] [client 4.217.180.63:11262] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 21:31:40.387750 2025] [autoindex:error] [pid 37488:tid 37550] [client 4.217.180.63:11262] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 21:31:40.539396 2025] [autoindex:error] [pid 37488:tid 37558] [client 4.217.180.63:11262] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 21:31:40.780845 2025] [:error] [pid 37488:tid 37551] [client 4.217.180.63:11262] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aS2YvAYuXqVQB9eas3PP1wAAAAY"], referer: https://www.bing.com/
[Mon Dec 01 21:31:41.524980 2025] [autoindex:error] [pid 51644:tid 51669] [client 4.217.180.63:11230] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 21:31:41.696214 2025] [autoindex:error] [pid 51644:tid 51664] [client 4.217.180.63:11230] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 21:31:41.837369 2025] [:error] [pid 51644:tid 51657] [client 4.217.180.63:11230] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aS2YvR6HKw4vZaUsODBbBQAAAYo"], referer: https://www.google.com/
[Mon Dec 01 21:31:42.848507 2025] [autoindex:error] [pid 37581:tid 37586] [client 4.217.180.63:11203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 21:31:43.390765 2025] [:error] [pid 37581:tid 37595] [client 4.217.180.63:11203] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aS2Yv4pLkLAzaHoItgazpAAAAUw"], referer: https://www.google.fr/
[Mon Dec 01 21:31:49.319389 2025] [access_compat:error] [pid 37487:tid 37534] [client 4.217.180.63:11222] AH01797: client denied by server configuration: /home/hbtwocom/public_html/wp-content/updraft/, referer: https://www.google.com/
[Mon Dec 01 21:31:56.460934 2025] [autoindex:error] [pid 37487:tid 37535] [client 4.217.180.63:11222] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 21:31:56.870167 2025] [autoindex:error] [pid 37487:tid 37522] [client 4.217.180.63:11222] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 21:31:57.295596 2025] [autoindex:error] [pid 37487:tid 37526] [client 4.217.180.63:11222] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 21:31:57.442112 2025] [:error] [pid 37487:tid 37541] [client 4.217.180.63:11222] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aS2YzRkh5IowGSjYDDK9YgAAANc"], referer: https://www.google.fr/
[Mon Dec 01 21:31:58.143296 2025] [:error] [pid 37488:tid 37554] [client 4.217.180.63:11144] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aS2YzgYuXqVQB9eas3PP5AAAAAk"], referer: https://www.google.com/
[Mon Dec 01 21:31:58.583546 2025] [autoindex:error] [pid 42358:tid 42364] [client 4.217.180.63:11142] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 21:31:58.737338 2025] [autoindex:error] [pid 42358:tid 42384] [client 4.217.180.63:11142] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 21:31:58.886662 2025] [:error] [pid 42358:tid 42377] [client 4.217.180.63:11142] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/index.php"] [unique_id "aS2Yzip1UoALeoaVXbe5kwAAAJA"], referer: https://www.google.fr/
[Mon Dec 01 21:31:59.752658 2025] [autoindex:error] [pid 37581:tid 37589] [client 4.217.180.63:11255] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 21:31:59.895005 2025] [:error] [pid 37581:tid 37606] [client 4.217.180.63:11255] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aS2Yz4pLkLAzaHoItgazyQAAAVc"], referer: https://www.google.fr/
[Mon Dec 01 21:32:00.525448 2025] [autoindex:error] [pid 37487:tid 37537] [client 4.217.180.63:11148] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 21:32:01.801821 2025] [:error] [pid 37487:tid 37529] [client 4.217.180.63:11148] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aS2Y0Rkh5IowGSjYDDK9ZwAAAMs"], referer: https://www.google.de/
[Mon Dec 01 21:32:02.208437 2025] [autoindex:error] [pid 37486:tid 37499] [client 4.217.180.63:11180] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 21:32:02.357486 2025] [autoindex:error] [pid 37486:tid 37505] [client 4.217.180.63:11180] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 21:32:02.499109 2025] [:error] [pid 37486:tid 37509] [client 4.217.180.63:11180] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aS2Y0sFyhayybvna6fndIwAAAFM"], referer: https://www.google.fr/
[Mon Dec 01 21:32:03.148260 2025] [autoindex:error] [pid 37488:tid 37545] [client 4.217.180.63:11141] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 21:32:03.297115 2025] [autoindex:error] [pid 37488:tid 37547] [client 4.217.180.63:11141] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 01 21:32:04.591930 2025] [autoindex:error] [pid 37488:tid 37555] [client 4.217.180.63:11141] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 01 21:32:06.067882 2025] [autoindex:error] [pid 37488:tid 37563] [client 4.217.180.63:11141] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 21:32:06.217077 2025] [autoindex:error] [pid 37488:tid 37560] [client 4.217.180.63:11141] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 21:32:06.367545 2025] [autoindex:error] [pid 37488:tid 37552] [client 4.217.180.63:11141] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 01 21:32:06.585854 2025] [autoindex:error] [pid 37488:tid 37545] [client 4.217.180.63:11141] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 21:32:06.942035 2025] [:error] [pid 37488:tid 37566] [client 4.217.180.63:11141] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aS2Y1gYuXqVQB9eas3PP9gAAABU"], referer: https://www.google.co.uk/
[Mon Dec 01 21:32:07.816108 2025] [autoindex:error] [pid 51644:tid 51647] [client 4.217.180.63:11229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 01 21:32:07.965456 2025] [autoindex:error] [pid 51644:tid 51651] [client 4.217.180.63:11229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 01 21:32:08.106903 2025] [:error] [pid 51644:tid 51668] [client 4.217.180.63:11229] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aS2Y2B6HKw4vZaUsODBbIQAAAZU"], referer: https://www.bing.com/
[Mon Dec 01 21:32:08.660661 2025] [autoindex:error] [pid 51644:tid 51669] [client 4.217.180.63:11208] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 01 21:32:08.991864 2025] [:error] [pid 51644:tid 51652] [client 4.217.180.63:11208] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aS2Y2B6HKw4vZaUsODBbJgAAAYU"], referer: https://www.yahoo.com/
[Mon Dec 01 21:32:09.989640 2025] [:error] [pid 37488:tid 37564] [client 4.217.180.63:11149] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aS2Y2QYuXqVQB9eas3PP9wAAABM"], referer: https://duckduckgo.com/
[Mon Dec 01 21:32:10.818194 2025] [autoindex:error] [pid 51614:tid 51629] [client 4.217.180.63:11200] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 01 21:32:11.052086 2025] [:error] [pid 51614:tid 51639] [client 4.217.180.63:11200] [client 4.217.180.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aS2Y26Ed44yERYvpOsOkRAAAARc"], referer: https://www.google.co.uk/
[Tue Dec 02 00:44:37.240124 2025] [:error] [pid 46739:tid 46759] [client 106.227.49.113:43552] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aS3F9e25pk0qWmq5PmBkdAAAABE"]
[Tue Dec 02 02:17:58.088726 2025] [:error] [pid 18797:tid 18804] [client 103.65.236.149:64080] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aS3b1nwDQfILaZGBrIxouAAAAYU"]
[Tue Dec 02 02:17:59.486869 2025] [:error] [pid 18826:tid 18833] [client 103.65.236.149:54864] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aS3b1844B8ytyS-T2Ii8zwAAAIU"]
[Tue Dec 02 03:30:03.092713 2025] [:error] [pid 49922:tid 49939] [client 178.25.244.124:49742] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aS3suzpEulMsX0QqunNFkwAAAMc"]
[Tue Dec 02 03:30:05.496194 2025] [:error] [pid 49922:tid 49951] [client 178.25.244.124:3015] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aS3svTpEulMsX0QqunNFlwAAANM"]
[Tue Dec 02 03:30:07.988599 2025] [:error] [pid 49829:tid 49880] [client 178.25.244.124:32697] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aS3sv5Yu255_5a8lXn6MKQAAAFM"]
[Tue Dec 02 03:30:10.624191 2025] [:error] [pid 49828:tid 49845] [client 178.25.244.124:43712] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aS3swjBJ1JkWujIaN-gmYAAAAAw"]
[Tue Dec 02 03:30:13.164766 2025] [:error] [pid 49830:tid 49904] [client 178.25.244.124:21737] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aS3sxeYGEAwl9-UJFGNWiQAAAJA"]
[Tue Dec 02 03:30:15.642826 2025] [:error] [pid 49828:tid 49834] [client 178.25.244.124:51333] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aS3sxzBJ1JkWujIaN-gmgAAAAAE"]
[Tue Dec 02 03:30:21.472806 2025] [:error] [pid 49922:tid 49948] [client 178.25.244.124:40531] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aS3szTpEulMsX0QqunNFzAAAANA"]
[Tue Dec 02 03:30:23.947220 2025] [:error] [pid 49828:tid 49855] [client 178.25.244.124:18474] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aS3szzBJ1JkWujIaN-gmuQAAABY"]
[Tue Dec 02 03:30:26.510654 2025] [:error] [pid 49828:tid 49850] [client 178.25.244.124:16239] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aS3s0jBJ1JkWujIaN-gmvQAAABE"]
[Tue Dec 02 03:30:28.998728 2025] [:error] [pid 49829:tid 49885] [client 178.25.244.124:27993] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aS3s1JYu255_5a8lXn6MVAAAAFg"]
[Tue Dec 02 03:30:31.671089 2025] [:error] [pid 49830:tid 49902] [client 178.25.244.124:53484] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aS3s1-YGEAwl9-UJFGNWwgAAAI4"]
[Tue Dec 02 03:30:34.198722 2025] [:error] [pid 49829:tid 49883] [client 178.25.244.124:19304] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aS3s2pYu255_5a8lXn6MXAAAAFY"]
[Tue Dec 02 03:30:36.619750 2025] [:error] [pid 49828:tid 49852] [client 178.25.244.124:29973] [client 178.25.244.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aS3s3DBJ1JkWujIaN-gmwwAAABM"]
[Tue Dec 02 05:53:45.075976 2025] [autoindex:error] [pid 3649:tid 3718] [client 4.217.180.63:54381] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Dec 02 05:53:45.324177 2025] [autoindex:error] [pid 3649:tid 3716] [client 4.217.180.63:54381] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Dec 02 05:53:45.482903 2025] [proxy_fcgi:error] [pid 3649:tid 3720] [client 4.217.180.63:54381] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Dec 02 05:53:46.758597 2025] [autoindex:error] [pid 3649:tid 3729] [client 4.217.180.63:54381] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Dec 02 06:53:54.552255 2025] [:error] [pid 3648:tid 3704] [client 114.96.103.33:41677] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aS4cguQEp5icp6XOJr0CKAAAAFQ"]
[Tue Dec 02 10:11:06.467348 2025] [:error] [pid 3648:tid 3688] [client 138.199.54.40:55187] [client 138.199.54.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.54.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aS5KuuQEp5icp6XOJr1FXwAAAEQ"]
[Tue Dec 02 11:12:05.662382 2025] [:error] [pid 3648:tid 3684] [client 170.106.161.78:48594] [client 170.106.161.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aS5ZBeQEp5icp6XOJr1UPAAAAEA"]
[Tue Dec 02 13:13:29.063019 2025] [:error] [pid 3760:tid 3765] [client 36.111.67.189:42234] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aS51eVjLYEjdWVcKgVUPYAAAAMM"]
[Tue Dec 02 18:07:26.438463 2025] [:error] [pid 3760:tid 3782] [client 138.199.54.40:32200] [client 138.199.54.40] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aS66XljLYEjdWVcKgVVPAQAAANQ"]
[Tue Dec 02 18:08:46.316523 2025] [:error] [pid 48650:tid 48667] [client 138.199.54.40:1977] [client 138.199.54.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.54.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aS66roQuWSn3xrJsXblmCgAAAcw"]
[Tue Dec 02 19:58:59.866271 2025] [:error] [pid 3647:tid 3657] [client 175.6.217.4:57566] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aS7Ug1JaqGDFgh_0XI-aogAAAAQ"]
[Tue Dec 02 20:44:04.822790 2025] [:error] [pid 3649:tid 3728] [client 51.75.116.202:54578] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aS7fFLwjL4uqC6YFjxGbUQAAAJE"]
[Tue Dec 02 20:44:07.492130 2025] [:error] [pid 5273:tid 5309] [client 51.75.116.202:37600] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aS7fFyMmXO5H1kNwHHVQ1AAAAYc"]
[Tue Dec 02 20:44:10.377601 2025] [:error] [pid 5272:tid 5278] [client 51.75.116.202:37616] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aS7fGuwbFoRzPGfZYVRm6gAAAUM"]
[Tue Dec 02 20:44:13.140693 2025] [:error] [pid 5273:tid 5308] [client 51.75.116.202:60068] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aS7fHSMmXO5H1kNwHHVQ2wAAAYY"]
[Tue Dec 02 20:44:15.964986 2025] [:error] [pid 48650:tid 48657] [client 51.75.116.202:60084] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aS7fH4QuWSn3xrJsXbmoQQAAAcI"]
[Tue Dec 02 20:44:18.614312 2025] [:error] [pid 3647:tid 3653] [client 51.75.116.202:60098] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aS7fIlJaqGDFgh_0XI-o3gAAAAA"]
[Tue Dec 02 20:44:21.896167 2025] [:error] [pid 3648:tid 3686] [client 51.75.116.202:60102] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aS7fJeQEp5icp6XOJr30LAAAAEI"]
[Tue Dec 02 20:44:24.691985 2025] [:error] [pid 48650:tid 48674] [client 51.75.116.202:36254] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aS7fKIQuWSn3xrJsXbmoZwAAAdM"]
[Tue Dec 02 20:44:27.635570 2025] [:error] [pid 5273:tid 5309] [client 51.75.116.202:36260] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aS7fKyMmXO5H1kNwHHVQ4wAAAYc"]
[Tue Dec 02 20:44:30.352040 2025] [:error] [pid 48650:tid 48661] [client 51.75.116.202:36272] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aS7fLoQuWSn3xrJsXbmoiQAAAcY"]
[Tue Dec 02 20:44:32.987922 2025] [:error] [pid 5273:tid 5324] [client 51.75.116.202:45022] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aS7fMCMmXO5H1kNwHHVQ8gAAAZY"]
[Tue Dec 02 20:44:35.838116 2025] [:error] [pid 5232:tid 5256] [client 51.75.116.202:45038] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aS7fMwApmO-auDy1ob787gAAARY"]
[Tue Dec 02 20:44:38.582502 2025] [:error] [pid 5273:tid 5313] [client 51.75.116.202:45050] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aS7fNiMmXO5H1kNwHHVQ9gAAAYs"]
[Tue Dec 02 21:05:36.526614 2025] [:error] [pid 5272:tid 5295] [client 136.113.244.29:39294] [client 136.113.244.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aS7kIOwbFoRzPGfZYVRtRQAAAVQ"]
[Tue Dec 02 21:05:37.334187 2025] [:error] [pid 3760:tid 3786] [client 136.113.244.29:39298] [client 136.113.244.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.hotbooksbookeeping2.com"] [uri "/favicon.ico"] [unique_id "aS7kIVjLYEjdWVcKgVV1ZAAAANg"]
[Tue Dec 02 21:05:37.572595 2025] [:error] [pid 3760:tid 3762] [client 136.119.63.146:41968] [client 136.119.63.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aS7kIVjLYEjdWVcKgVV1ZQAAAMA"]
[Tue Dec 02 21:05:38.402328 2025] [:error] [pid 3760:tid 3765] [client 136.119.63.146:41970] [client 136.119.63.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/favicon.ico"] [unique_id "aS7kIljLYEjdWVcKgVV1ZwAAAMM"]
[Tue Dec 02 21:19:51.617922 2025] [:error] [pid 3760:tid 3766] [client 45.86.86.145:52453] [client 45.86.86.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aS7nd1jLYEjdWVcKgVV4rQAAAMQ"]
[Wed Dec 03 00:06:10.063656 2025] [:error] [pid 48650:tid 48661] [client 4.218.18.48:63557] [client 4.218.18.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.218.18.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aS8OcoQuWSn3xrJsXbkO4AAAAcY"], referer: https://www.bing.com/
[Wed Dec 03 00:06:35.261759 2025] [autoindex:error] [pid 48650:tid 48668] [client 4.218.18.48:63557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 03 00:06:35.413856 2025] [autoindex:error] [pid 48650:tid 48658] [client 4.218.18.48:63557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Dec 03 00:06:36.524952 2025] [autoindex:error] [pid 48650:tid 48667] [client 4.218.18.48:63557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Dec 03 00:06:36.672491 2025] [:error] [pid 48650:tid 48675] [client 4.218.18.48:63557] [client 4.218.18.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.218.18.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aS8OjIQuWSn3xrJsXbkP0gAAAdQ"], referer: https://www.google.de/
[Wed Dec 03 00:06:45.196447 2025] [autoindex:error] [pid 48650:tid 48673] [client 4.218.18.48:63557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 03 00:06:46.577067 2025] [autoindex:error] [pid 48650:tid 48669] [client 4.218.18.48:63557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Dec 03 00:06:46.725280 2025] [:error] [pid 48650:tid 48675] [client 4.218.18.48:63557] [client 4.218.18.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aS8OloQuWSn3xrJsXbkQNQAAAdQ"], referer: https://duckduckgo.com/
[Wed Dec 03 00:06:47.022016 2025] [:error] [pid 48650:tid 48673] [client 4.218.18.48:62692] [client 4.218.18.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aS8Ol4QuWSn3xrJsXbkQNgAAAdI"], referer: https://www.yahoo.com/
[Wed Dec 03 00:06:47.317777 2025] [:error] [pid 5272:tid 5275] [client 4.218.18.48:62626] [client 4.218.18.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aS8Ol-wbFoRzPGfZYVSZsgAAAUA"], referer: https://www.google.com/
[Wed Dec 03 00:06:47.615396 2025] [:error] [pid 3649:tid 3729] [client 4.218.18.48:62718] [client 4.218.18.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aS8Ol7wjL4uqC6YFjxHWxwAAAJI"], referer: https://www.google.co.uk/
[Wed Dec 03 00:06:47.911392 2025] [:error] [pid 3648:tid 3697] [client 4.218.18.48:63586] [client 4.218.18.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aS8Ol-QEp5icp6XOJr0_GgAAAE0"], referer: https://www.google.fr/
[Wed Dec 03 00:06:48.212951 2025] [autoindex:error] [pid 5272:tid 5299] [client 4.218.18.48:62605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 03 00:06:48.370597 2025] [autoindex:error] [pid 5272:tid 5284] [client 4.218.18.48:62605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Dec 03 00:06:48.517916 2025] [:error] [pid 5272:tid 5292] [client 4.218.18.48:62605] [client 4.218.18.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aS8OmOwbFoRzPGfZYVSZtgAAAVE"], referer: https://www.google.de/
[Wed Dec 03 00:06:48.813651 2025] [:error] [pid 3649:tid 3722] [client 4.218.18.48:62643] [client 4.218.18.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aS8OmLwjL4uqC6YFjxHW0wAAAIs"], referer: https://www.bing.com/
[Wed Dec 03 00:06:49.109535 2025] [:error] [pid 5272:tid 5298] [client 4.218.18.48:63535] [client 4.218.18.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aS8OmewbFoRzPGfZYVSZtwAAAVc"], referer: https://www.bing.com/
[Wed Dec 03 00:06:49.410768 2025] [:error] [pid 3648:tid 3693] [client 4.218.18.48:62600] [client 4.218.18.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aS8OmeQEp5icp6XOJr0_JwAAAEk"], referer: https://www.yahoo.com/
[Wed Dec 03 00:06:49.714523 2025] [autoindex:error] [pid 5232:tid 5244] [client 4.218.18.48:62691] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 03 00:06:49.862127 2025] [:error] [pid 5232:tid 5245] [client 4.218.18.48:62691] [client 4.218.18.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aS8OmQApmO-auDy1ob40GgAAAQs"], referer: https://www.google.fr/
[Wed Dec 03 02:02:14.374107 2025] [:error] [pid 25475:tid 25515] [client 135.181.4.161:36846] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aS8pph7VdEeEe8GnPSVDowAAAQM"]
[Wed Dec 03 02:02:15.681472 2025] [:error] [pid 25475:tid 25531] [client 135.181.4.161:54544] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aS8ppx7VdEeEe8GnPSVDpgAAARM"]
[Wed Dec 03 05:56:36.378675 2025] [:error] [pid 36048:tid 36067] [client 41.33.62.123:64430] [client 41.33.62.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.33.62.123, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aS9glBATOC5ACZsH0EJyDAAAARA"]
[Wed Dec 03 08:49:39.646743 2025] [:error] [pid 22014:tid 22060] [client 119.96.24.54:45810] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aS-JIwgpXEQej7y9Y6YPJgAAAQ4"]
[Wed Dec 03 14:10:37.280089 2025] [:error] [pid 20707:tid 20730] [client 217.182.194.25:43030] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aS_UXTObjEHgU5ngsxdkOwAAARU"]
[Wed Dec 03 14:10:39.722649 2025] [:error] [pid 20608:tid 20656] [client 217.182.194.25:55482] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aS_UX05WGptz5j0ZvYc-CwAAAJM"]
[Wed Dec 03 14:10:42.511754 2025] [:error] [pid 20607:tid 20616] [client 217.182.194.25:55484] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aS_UYvpiIcI2BRWBwqwlPQAAAEY"]
[Wed Dec 03 14:10:45.029102 2025] [:error] [pid 20707:tid 20720] [client 217.182.194.25:55488] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aS_UZTObjEHgU5ngsxdkRAAAAQs"]
[Wed Dec 03 14:10:47.561288 2025] [:error] [pid 20607:tid 20628] [client 217.182.194.25:55500] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aS_UZ_piIcI2BRWBwqwlQAAAAFI"]
[Wed Dec 03 14:10:50.458419 2025] [:error] [pid 20607:tid 20613] [client 217.182.194.25:34322] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aS_UavpiIcI2BRWBwqwlQgAAAEM"]
[Wed Dec 03 14:10:52.969864 2025] [:error] [pid 20707:tid 20729] [client 217.182.194.25:34326] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aS_UbDObjEHgU5ngsxdkWwAAARQ"]
[Wed Dec 03 14:10:55.561284 2025] [:error] [pid 20707:tid 20720] [client 217.182.194.25:34328] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aS_UbzObjEHgU5ngsxdkYwAAAQs"]
[Wed Dec 03 14:10:58.210047 2025] [:error] [pid 20669:tid 20688] [client 217.182.194.25:58436] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aS_UcpLWoJXGOhmabmsiRQAAAUw"]
[Wed Dec 03 14:11:00.809144 2025] [:error] [pid 20669:tid 20700] [client 217.182.194.25:58444] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aS_UdJLWoJXGOhmabmsiTAAAAVg"]
[Wed Dec 03 14:11:03.348747 2025] [:error] [pid 20707:tid 20728] [client 217.182.194.25:58446] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aS_UdzObjEHgU5ngsxdkbAAAARM"]
[Wed Dec 03 14:11:05.841985 2025] [:error] [pid 20607:tid 20616] [client 217.182.194.25:58452] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aS_UefpiIcI2BRWBwqwlRwAAAEY"]
[Wed Dec 03 14:11:08.603810 2025] [:error] [pid 20607:tid 20625] [client 217.182.194.25:33114] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aS_UfPpiIcI2BRWBwqwlSAAAAE8"]
[Wed Dec 03 21:12:46.964654 2025] [:error] [pid 47926:tid 47943] [client 41.33.62.123:61588] [client 41.33.62.123] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTA3Tmmj6HWCHJ9euRKcIAAAAY8"]
[Wed Dec 03 21:14:26.375319 2025] [:error] [pid 20608:tid 20661] [client 41.33.62.123:50865] [client 41.33.62.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.33.62.123, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTA3sk5WGptz5j0ZvYefxwAAAJg"]
[Thu Dec 04 02:30:00.970454 2025] [:error] [pid 3842:tid 3922] [client 2.154.67.220:53106] [client 2.154.67.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.154.67.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTCBqCaILLkuuVMSmjseigAAAZM"]
[Thu Dec 04 02:39:12.392750 2025] [:error] [pid 3938:tid 3940] [client 2.154.67.220:59524] [client 2.154.67.220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTCD0CAHKAmSjlzEts4kpAAAAgA"]
[Thu Dec 04 02:40:17.946043 2025] [:error] [pid 63344:tid 63372] [client 2.154.67.220:60844] [client 2.154.67.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.154.67.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTCEEbFn6Z8FbZz0Ijl7LgAAABc"]
[Thu Dec 04 03:04:42.363149 2025] [autoindex:error] [pid 63344:tid 63370] [client 143.110.180.207:64575] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Dec 04 04:31:41.994111 2025] [:error] [pid 2160:tid 2207] [client 175.6.217.4:39459] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTCeLUNDGjl4u2feUD-tawAAAFE"]
[Thu Dec 04 08:56:49.890285 2025] [:error] [pid 63321:tid 63324] [client 47.91.29.151:38348] [client 47.91.29.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTDcUbNTbeTF3WLMl8xG8wAAAYA"]
[Thu Dec 04 09:04:31.175485 2025] [:error] [pid 63382:tid 63490] [client 54.37.252.152:54492] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTDeH0vJv09BlzBS6SRnWQAAApU"]
[Thu Dec 04 09:04:33.772843 2025] [:error] [pid 38403:tid 38413] [client 54.37.252.152:44502] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTDeIQBCL4g8TXcskwlFtwAAAQU"]
[Thu Dec 04 09:04:36.490731 2025] [:error] [pid 63321:tid 63336] [client 54.37.252.152:44510] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTDeJLNTbeTF3WLMl8xJVgAAAYw"]
[Thu Dec 04 09:04:39.317717 2025] [:error] [pid 63321:tid 63344] [client 54.37.252.152:44518] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTDeJ7NTbeTF3WLMl8xJWAAAAZQ"]
[Thu Dec 04 09:04:42.081800 2025] [:error] [pid 63383:tid 63439] [client 54.37.252.152:46460] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTDeKlJYyG_QEWdAPIXO3gAAAtY"]
[Thu Dec 04 09:04:44.906461 2025] [:error] [pid 63321:tid 63340] [client 54.37.252.152:46464] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTDeLLNTbeTF3WLMl8xJWwAAAZA"]
[Thu Dec 04 09:04:47.723449 2025] [:error] [pid 38403:tid 38427] [client 54.37.252.152:46478] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTDeLwBCL4g8TXcskwlF0AAAARM"]
[Thu Dec 04 09:04:50.448177 2025] [:error] [pid 63382:tid 63482] [client 54.37.252.152:46486] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTDeMkvJv09BlzBS6SRnYQAAAo0"]
[Thu Dec 04 09:04:53.074658 2025] [:error] [pid 63383:tid 63421] [client 54.37.252.152:35548] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTDeNVJYyG_QEWdAPIXO7gAAAsQ"]
[Thu Dec 04 09:04:55.842633 2025] [:error] [pid 63382:tid 63475] [client 54.37.252.152:35558] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTDeN0vJv09BlzBS6SRnaQAAAoY"]
[Thu Dec 04 09:04:58.503460 2025] [:error] [pid 63383:tid 63425] [client 54.37.252.152:35562] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTDeOlJYyG_QEWdAPIXO8QAAAsg"]
[Thu Dec 04 09:05:01.160009 2025] [:error] [pid 63381:tid 63466] [client 54.37.252.152:35568] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aTDePeidz_S5muoRMEx7AQAAAlc"]
[Thu Dec 04 09:52:03.851870 2025] [:error] [pid 38403:tid 38432] [client 51.68.186.52:60942] [client 51.68.186.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aTDpQwBCL4g8TXcskwlgRQAAARg"]
[Thu Dec 04 17:43:07.329212 2025] [:error] [pid 2161:tid 2239] [client 106.119.167.146:43678] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTFXqyjiGdnP9Am2woUU_AAAAJY"]
[Thu Dec 04 17:48:41.016460 2025] [:error] [pid 38403:tid 38431] [client 43.130.154.56:39964] [client 43.130.154.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTFY-QBCL4g8TXcskwn8kAAAARc"]
[Thu Dec 04 21:57:41.226712 2025] [:error] [pid 63379:tid 63396] [client 101.32.52.164:41606] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTGTVcvuHYNZ2IuzoJfxlAAAAgk"]
[Fri Dec 05 00:09:58.897101 2025] [proxy_fcgi:error] [pid 38403:tid 38430] [client 4.189.97.125:61604] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Fri Dec 05 00:09:59.011431 2025] [:error] [pid 38403:tid 38419] [client 4.189.97.125:61604] [client 4.189.97.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.97.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTGyVwBCL4g8TXcskwlZTQAAAQs"], referer: https://www.google.co.uk/
[Fri Dec 05 00:09:59.016676 2025] [proxy_fcgi:error] [pid 38403:tid 38419] [client 4.189.97.125:61604] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Fri Dec 05 00:10:00.121326 2025] [autoindex:error] [pid 38403:tid 38421] [client 4.189.97.125:61604] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 05 00:10:35.502467 2025] [autoindex:error] [pid 38403:tid 38415] [client 4.189.97.125:61604] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Fri Dec 05 00:10:36.576053 2025] [autoindex:error] [pid 38403:tid 38425] [client 4.189.97.125:61604] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 05 00:10:48.264271 2025] [autoindex:error] [pid 38403:tid 38422] [client 4.189.97.125:61604] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Fri Dec 05 00:10:53.593004 2025] [autoindex:error] [pid 38403:tid 38420] [client 4.189.97.125:61604] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Fri Dec 05 00:10:55.780088 2025] [:error] [pid 38403:tid 38421] [client 4.189.97.125:61604] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTGyjwBCL4g8TXcskwlZrAAAAQ0"], referer: https://duckduckgo.com/
[Fri Dec 05 00:10:56.007710 2025] [:error] [pid 2161:tid 2224] [client 4.189.97.125:44575] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTGykCjiGdnP9Am2woVjogAAAIc"], referer: https://www.bing.com/
[Fri Dec 05 00:10:56.289698 2025] [:error] [pid 2244:tid 2256] [client 4.189.97.125:32097] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTGykJm00CCLpKa0F72pbgAAAMo"], referer: https://www.google.co.uk/
[Fri Dec 05 00:10:56.521193 2025] [:error] [pid 63321:tid 63341] [client 4.189.97.125:30004] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTGykLNTbeTF3WLMl8wCYwAAAZE"], referer: https://www.google.co.uk/
[Fri Dec 05 00:10:56.760000 2025] [:error] [pid 2244:tid 2267] [client 4.189.97.125:16141] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTGykJm00CCLpKa0F72pcAAAANQ"], referer: https://www.bing.com/
[Fri Dec 05 00:10:56.987822 2025] [:error] [pid 63321:tid 63335] [client 4.189.97.125:44545] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTGykLNTbeTF3WLMl8wCZAAAAYs"], referer: https://www.bing.com/
[Fri Dec 05 00:10:57.235196 2025] [:error] [pid 38403:tid 38430] [client 4.189.97.125:28280] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTGykQBCL4g8TXcskwlZrgAAARY"], referer: https://www.bing.com/
[Fri Dec 05 00:10:57.472824 2025] [:error] [pid 63379:tid 63403] [client 4.189.97.125:38442] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTGykcvuHYNZ2IuzoJcHcgAAAhA"], referer: https://www.google.co.uk/
[Fri Dec 05 00:10:57.705692 2025] [:error] [pid 2244:tid 2262] [client 4.189.97.125:38428] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aTGykZm00CCLpKa0F72pcwAAANA"], referer: https://www.google.de/
[Fri Dec 05 00:10:57.937633 2025] [:error] [pid 38403:tid 38408] [client 4.189.97.125:28260] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTGykQBCL4g8TXcskwlZrwAAAQE"], referer: https://www.yahoo.com/
[Fri Dec 05 00:10:58.170667 2025] [:error] [pid 63379:tid 63411] [client 4.189.97.125:30008] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aTGyksvuHYNZ2IuzoJcHcwAAAhg"], referer: https://www.bing.com/
[Fri Dec 05 00:10:58.402436 2025] [:error] [pid 2244:tid 2263] [client 4.189.97.125:33814] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aTGykpm00CCLpKa0F72pdAAAANE"], referer: https://duckduckgo.com/
[Fri Dec 05 00:10:58.638390 2025] [:error] [pid 63383:tid 63431] [client 4.189.97.125:28269] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aTGyklJYyG_QEWdAPIXikgAAAs4"], referer: https://www.google.co.uk/
[Fri Dec 05 00:10:58.867226 2025] [:error] [pid 2161:tid 2231] [client 4.189.97.125:56084] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aTGykijiGdnP9Am2woVjpgAAAI4"], referer: https://www.yahoo.com/
[Fri Dec 05 00:10:59.099504 2025] [:error] [pid 63322:tid 63354] [client 4.189.97.125:16140] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTGyk4vm-cfAnelmlGcn-AAAAcM"], referer: https://duckduckgo.com/
[Fri Dec 05 00:10:59.335217 2025] [:error] [pid 2161:tid 2240] [client 4.189.97.125:49622] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-locale-switcher-less.php"] [unique_id "aTGykyjiGdnP9Am2woVjpwAAAJc"], referer: https://www.google.com/
[Fri Dec 05 00:10:59.574244 2025] [:error] [pid 63321:tid 63346] [client 4.189.97.125:16175] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aTGyk7NTbeTF3WLMl8wCaAAAAZY"], referer: https://www.google.com/
[Fri Dec 05 00:10:59.804383 2025] [:error] [pid 63321:tid 63326] [client 4.189.97.125:24431] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTGyk7NTbeTF3WLMl8wCaQAAAYI"], referer: https://www.yahoo.com/
[Fri Dec 05 00:11:00.036461 2025] [:error] [pid 2161:tid 2222] [client 4.189.97.125:33853] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-media-icon-control.php"] [unique_id "aTGylCjiGdnP9Am2woVjqAAAAIU"], referer: https://www.google.com/
[Fri Dec 05 00:11:00.265468 2025] [:error] [pid 38403:tid 38417] [client 4.189.97.125:44605] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aTGylABCL4g8TXcskwlZtAAAAQk"], referer: https://www.bing.com/
[Fri Dec 05 00:11:00.496781 2025] [:error] [pid 63381:tid 63456] [client 4.189.97.125:38434] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTGylOidz_S5muoRMExovgAAAk0"], referer: https://www.google.de/
[Fri Dec 05 00:11:00.727495 2025] [:error] [pid 63322:tid 63369] [client 4.189.97.125:44548] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTGylIvm-cfAnelmlGcn-QAAAdI"], referer: https://www.google.co.uk/
[Fri Dec 05 00:11:00.958841 2025] [:error] [pid 63321:tid 63344] [client 4.189.97.125:28231] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTGylLNTbeTF3WLMl8wCbQAAAZQ"], referer: https://www.bing.com/
[Fri Dec 05 00:11:01.194891 2025] [:error] [pid 63383:tid 63437] [client 4.189.97.125:44583] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTGylVJYyG_QEWdAPIXilAAAAtQ"], referer: https://www.bing.com/
[Fri Dec 05 00:11:01.425440 2025] [:error] [pid 63322:tid 63359] [client 4.189.97.125:38446] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTGylYvm-cfAnelmlGcn-wAAAcg"], referer: https://www.yahoo.com/
[Fri Dec 05 00:11:01.655655 2025] [:error] [pid 2244:tid 2254] [client 4.189.97.125:38447] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aTGylZm00CCLpKa0F72pegAAAMg"], referer: https://www.google.co.uk/
[Fri Dec 05 00:11:01.884241 2025] [:error] [pid 63321:tid 63332] [client 4.189.97.125:16160] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aTGylbNTbeTF3WLMl8wCbwAAAYg"], referer: https://www.google.co.uk/
[Fri Dec 05 00:11:02.161059 2025] [:error] [pid 63321:tid 63334] [client 4.189.97.125:24408] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTGylrNTbeTF3WLMl8wCcAAAAYo"], referer: https://www.google.de/
[Fri Dec 05 00:11:02.438920 2025] [:error] [pid 63321:tid 63340] [client 4.189.97.125:56107] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTGylrNTbeTF3WLMl8wCcQAAAZA"], referer: https://www.google.com/
[Fri Dec 05 00:11:02.674530 2025] [:error] [pid 63383:tid 63421] [client 4.189.97.125:61569] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTGyllJYyG_QEWdAPIXilQAAAsQ"], referer: https://www.google.com/
[Fri Dec 05 00:11:02.902864 2025] [:error] [pid 63290:tid 63296] [client 4.189.97.125:56108] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTGylioM7G4ZFQQHTRxdOQAAAUQ"], referer: https://www.google.co.uk/
[Fri Dec 05 00:11:03.131841 2025] [:error] [pid 63290:tid 63311] [client 4.189.97.125:29993] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-db-array.php"] [unique_id "aTGylyoM7G4ZFQQHTRxdOgAAAVM"], referer: https://duckduckgo.com/
[Fri Dec 05 00:11:13.649807 2025] [:error] [pid 63379:tid 63399] [client 4.189.97.125:28239] [client 4.189.97.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.189.97.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTGyocvuHYNZ2IuzoJcHigAAAgw"], referer: https://www.yahoo.com/
[Fri Dec 05 00:11:37.936410 2025] [autoindex:error] [pid 63379:tid 63393] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Fri Dec 05 00:11:38.056797 2025] [autoindex:error] [pid 63379:tid 63400] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Fri Dec 05 00:11:39.103899 2025] [autoindex:error] [pid 63379:tid 63388] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Fri Dec 05 00:11:39.217424 2025] [:error] [pid 63379:tid 63411] [client 4.189.97.125:28239] [client 4.189.97.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.97.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTGyu8vuHYNZ2IuzoJcHqwAAAhg"], referer: https://duckduckgo.com/
[Fri Dec 05 00:11:41.279761 2025] [autoindex:error] [pid 63379:tid 63406] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Fri Dec 05 00:11:41.397957 2025] [autoindex:error] [pid 63379:tid 63408] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Fri Dec 05 00:11:41.525945 2025] [autoindex:error] [pid 63379:tid 63391] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 05 00:11:46.653353 2025] [autoindex:error] [pid 63379:tid 63402] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Fri Dec 05 00:11:46.767379 2025] [access_compat:error] [pid 63379:tid 63394] [client 4.189.97.125:28239] AH01797: client denied by server configuration: /home/hbtwocom/public_html/wp-content/updraft/, referer: https://www.google.de/
[Fri Dec 05 00:11:54.808073 2025] [autoindex:error] [pid 63379:tid 63391] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Fri Dec 05 00:11:55.047221 2025] [autoindex:error] [pid 63379:tid 63405] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Fri Dec 05 00:11:55.165590 2025] [autoindex:error] [pid 63379:tid 63395] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Fri Dec 05 00:11:55.283200 2025] [autoindex:error] [pid 63379:tid 63410] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Fri Dec 05 00:11:55.400534 2025] [autoindex:error] [pid 63379:tid 63404] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 05 00:11:55.518658 2025] [autoindex:error] [pid 63379:tid 63397] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Fri Dec 05 00:11:55.637072 2025] [autoindex:error] [pid 63379:tid 63387] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Fri Dec 05 00:11:55.757605 2025] [autoindex:error] [pid 63379:tid 63399] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Fri Dec 05 00:11:55.878393 2025] [autoindex:error] [pid 63379:tid 63392] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Fri Dec 05 00:11:55.998975 2025] [autoindex:error] [pid 63379:tid 63402] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Fri Dec 05 00:11:56.117328 2025] [autoindex:error] [pid 63379:tid 63398] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Fri Dec 05 00:11:56.235727 2025] [autoindex:error] [pid 63379:tid 63394] [client 4.189.97.125:28239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 05 00:11:56.349103 2025] [:error] [pid 63379:tid 63393] [client 4.189.97.125:28239] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTGyzMvuHYNZ2IuzoJcH0QAAAgY"], referer: https://duckduckgo.com/
[Fri Dec 05 00:11:56.747240 2025] [:error] [pid 63383:tid 63435] [client 4.189.97.125:33818] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aTGyzFJYyG_QEWdAPIXiugAAAtI"], referer: https://www.bing.com/
[Fri Dec 05 00:11:56.980329 2025] [:error] [pid 63382:tid 63485] [client 4.189.97.125:61591] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTGyzEvJv09BlzBS6SQIrgAAApA"], referer: https://duckduckgo.com/
[Fri Dec 05 00:11:57.257761 2025] [:error] [pid 63382:tid 63478] [client 4.189.97.125:56100] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aTGyzUvJv09BlzBS6SQIrwAAAok"], referer: https://www.google.com/
[Fri Dec 05 00:11:57.497201 2025] [:error] [pid 63382:tid 63470] [client 4.189.97.125:38412] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTGyzUvJv09BlzBS6SQIsAAAAoE"], referer: https://duckduckgo.com/
[Fri Dec 05 00:11:57.740055 2025] [autoindex:error] [pid 63383:tid 63422] [client 4.189.97.125:64133] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Fri Dec 05 00:11:57.863051 2025] [autoindex:error] [pid 63383:tid 63423] [client 4.189.97.125:64133] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Fri Dec 05 00:11:57.976521 2025] [:error] [pid 63383:tid 63420] [client 4.189.97.125:64133] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTGyzVJYyG_QEWdAPIXivgAAAsM"], referer: https://www.yahoo.com/
[Fri Dec 05 00:11:58.222206 2025] [:error] [pid 38403:tid 38415] [client 4.189.97.125:56066] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTGyzgBCL4g8TXcskwlZyAAAAQc"], referer: https://www.yahoo.com/
[Fri Dec 05 00:11:58.457042 2025] [:error] [pid 2244:tid 2261] [client 4.189.97.125:64178] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTGyzpm00CCLpKa0F72pvwAAAM8"], referer: https://www.google.com/
[Fri Dec 05 00:11:58.688874 2025] [:error] [pid 63381:tid 63464] [client 4.189.97.125:44552] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTGyzuidz_S5muoRMExo-QAAAlU"], referer: https://duckduckgo.com/
[Fri Dec 05 00:11:58.938368 2025] [autoindex:error] [pid 63322:tid 63372] [client 4.189.97.125:32123] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 05 00:11:59.052448 2025] [:error] [pid 63322:tid 63352] [client 4.189.97.125:32123] [client 4.189.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTGyz4vm-cfAnelmlGcoWAAAAcE"], referer: https://www.bing.com/
[Fri Dec 05 00:12:00.480368 2025] [autoindex:error] [pid 2244:tid 2256] [client 4.189.97.125:33806] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 05 00:12:00.599896 2025] [autoindex:error] [pid 2244:tid 2266] [client 4.189.97.125:33806] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Fri Dec 05 00:12:00.719420 2025] [autoindex:error] [pid 2244:tid 2251] [client 4.189.97.125:33806] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Fri Dec 05 00:12:00.837502 2025] [autoindex:error] [pid 2244:tid 2255] [client 4.189.97.125:33806] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Fri Dec 05 00:12:00.957629 2025] [autoindex:error] [pid 2244:tid 2250] [client 4.189.97.125:33806] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 05 00:12:09.705659 2025] [autoindex:error] [pid 2244:tid 2250] [client 4.189.97.125:33806] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Fri Dec 05 00:12:11.099406 2025] [autoindex:error] [pid 2244:tid 2269] [client 4.189.97.125:33806] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Fri Dec 05 00:56:08.526631 2025] [:error] [pid 4491:tid 4534] [client 122.175.244.10:60237] [client 122.175.244.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.175.244.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTG9KCUq6tbvu6y_H_G-SQAAAM0"]
[Fri Dec 05 02:31:21.725890 2025] [proxy_fcgi:error] [pid 4490:tid 4499] [client 4.241.250.56:14376] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Fri Dec 05 02:31:21.945755 2025] [:error] [pid 4490:tid 4511] [client 4.241.250.56:14376] [client 4.241.250.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.250.56, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTHTeWRzE1f_JiXqDpzswgAAAJE"], referer: https://www.bing.com/
[Fri Dec 05 02:31:21.950598 2025] [proxy_fcgi:error] [pid 4490:tid 4511] [client 4.241.250.56:14376] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Fri Dec 05 02:31:23.357511 2025] [autoindex:error] [pid 4490:tid 4514] [client 4.241.250.56:14376] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 05 02:32:27.354986 2025] [autoindex:error] [pid 4492:tid 4552] [client 4.241.250.56:14761] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Fri Dec 05 02:32:28.571900 2025] [autoindex:error] [pid 4492:tid 4567] [client 4.241.250.56:14761] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Fri Dec 05 02:36:43.073047 2025] [:error] [pid 4492:tid 4563] [client 198.46.154.59:49213] [client 198.46.154.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTHUu6ktiJtKB3zqv33-hAAAAQ8"]
[Fri Dec 05 02:37:02.314453 2025] [:error] [pid 4577:tid 4585] [client 198.46.154.59:49471] [client 198.46.154.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTHUzq9fB6WQjuhMq_9BVAAAAAY"]
[Fri Dec 05 02:39:50.385634 2025] [:error] [pid 4492:tid 4555] [client 193.70.44.235:39538] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTHVdqktiJtKB3zqv33_-QAAAQc"]
[Fri Dec 05 02:39:53.178821 2025] [:error] [pid 4490:tid 4510] [client 193.70.44.235:46938] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTHVeWRzE1f_JiXqDpzwXgAAAJA"]
[Fri Dec 05 02:39:55.917043 2025] [:error] [pid 4577:tid 4590] [client 193.70.44.235:56310] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTHVe69fB6WQjuhMq_9DBwAAAAs"]
[Fri Dec 05 02:39:58.725376 2025] [:error] [pid 4577:tid 4579] [client 193.70.44.235:56324] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTHVfq9fB6WQjuhMq_9DEQAAAAA"]
[Fri Dec 05 02:40:01.483730 2025] [:error] [pid 4491:tid 4535] [client 193.70.44.235:56332] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTHVgSUq6tbvu6y_H_HofAAAAM4"]
[Fri Dec 05 02:40:04.272110 2025] [:error] [pid 4491:tid 4534] [client 193.70.44.235:56348] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTHVhCUq6tbvu6y_H_HoggAAAM0"]
[Fri Dec 05 02:40:06.976571 2025] [:error] [pid 33349:tid 33353] [client 193.70.44.235:49618] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTHVhlmzLHxEoifSuEwn_QAAAEA"]
[Fri Dec 05 02:40:09.715190 2025] [:error] [pid 4492:tid 4567] [client 193.70.44.235:49620] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTHViaktiJtKB3zqv30ALQAAARM"]
[Fri Dec 05 02:40:12.380624 2025] [:error] [pid 33349:tid 33365] [client 193.70.44.235:49622] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTHVjFmzLHxEoifSuEwoBwAAAEw"]
[Fri Dec 05 02:40:15.235032 2025] [:error] [pid 33349:tid 33372] [client 193.70.44.235:49626] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTHVj1mzLHxEoifSuEwoDAAAAFM"]
[Fri Dec 05 02:40:17.906640 2025] [:error] [pid 4490:tid 4495] [client 193.70.44.235:56600] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTHVkWRzE1f_JiXqDpzwmgAAAIE"]
[Fri Dec 05 02:40:20.731705 2025] [:error] [pid 4491:tid 4542] [client 193.70.44.235:56608] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aTHVlCUq6tbvu6y_H_HopgAAANU"]
[Fri Dec 05 05:57:40.961260 2025] [proxy_fcgi:error] [pid 24010:tid 24021] [client 4.241.244.227:22518] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Fri Dec 05 05:57:41.190090 2025] [:error] [pid 24010:tid 24014] [client 4.241.244.227:22518] [client 4.241.244.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.244.227, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTID1atjRoDpxa46mwcZxAAAAQI"], referer: https://www.google.co.uk/
[Fri Dec 05 05:57:41.196501 2025] [proxy_fcgi:error] [pid 24010:tid 24014] [client 4.241.244.227:22518] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Fri Dec 05 05:57:42.515350 2025] [autoindex:error] [pid 24010:tid 24031] [client 4.241.244.227:22518] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Fri Dec 05 05:58:24.554942 2025] [autoindex:error] [pid 24010:tid 24023] [client 4.241.244.227:22518] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Fri Dec 05 05:58:25.657645 2025] [autoindex:error] [pid 24010:tid 24014] [client 4.241.244.227:22518] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Fri Dec 05 05:59:03.815107 2025] [autoindex:error] [pid 53923:tid 53933] [client 4.241.244.227:57620] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Fri Dec 05 05:59:09.618731 2025] [autoindex:error] [pid 53923:tid 53940] [client 4.241.244.227:57620] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Fri Dec 05 05:59:13.030783 2025] [:error] [pid 53923:tid 53933] [client 4.241.244.227:57620] [client 4.241.244.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTIEMbl8ebZN0VCAVXDz3AAAAMg"], referer: https://www.google.com/
[Fri Dec 05 05:59:17.619145 2025] [:error] [pid 24010:tid 24015] [client 4.241.244.227:21728] [client 4.241.244.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTIENatjRoDpxa46mwcakAAAAQM"], referer: https://www.google.co.uk/
[Fri Dec 05 05:59:26.044188 2025] [:error] [pid 24010:tid 24026] [client 4.241.244.227:64853] [client 4.241.244.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTIEPqtjRoDpxa46mwcanQAAAQ4"], referer: https://www.bing.com/
[Fri Dec 05 05:59:35.272051 2025] [:error] [pid 24010:tid 24030] [client 4.241.244.227:21697] [client 4.241.244.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTIER6tjRoDpxa46mwcatQAAARI"], referer: https://www.yahoo.com/
[Fri Dec 05 05:59:39.077761 2025] [:error] [pid 53837:tid 53855] [client 4.241.244.227:64835] [client 4.241.244.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTIESzbsUyTxys8OiMIbUQAAAA0"], referer: https://www.google.de/
[Fri Dec 05 10:56:09.854393 2025] [:error] [pid 62720:tid 62731] [client 34.208.19.227:49260] [client 34.208.19.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/"] [unique_id "aTJJyWDTJuF6xQ5UsIOFJQAAAYk"]
[Fri Dec 05 10:56:10.809151 2025] [:error] [pid 24010:tid 24028] [client 34.208.19.227:49264] [client 34.208.19.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aTJJyqtjRoDpxa46mwfSCgAAARA"]
[Fri Dec 05 14:10:46.096341 2025] [:error] [pid 53923:tid 53947] [client 176.65.132.18:39338] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aTJ3Zrl8ebZN0VCAVXD_4QAAANY"]
[Fri Dec 05 19:41:54.655662 2025] [:error] [pid 35962:tid 35977] [client 149.22.95.170:55365] [client 149.22.95.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTLFAp-hnYjbYINfh7GcIAAAAE0"]
[Fri Dec 05 20:42:29.615808 2025] [:error] [pid 18520:tid 18529] [client 5.135.131.226:56896] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTLTNYOC8XSo46ZrIePjywAAAIU"]
[Fri Dec 05 20:42:32.247130 2025] [:error] [pid 35962:tid 35973] [client 5.135.131.226:51638] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTLTOJ-hnYjbYINfh7G45wAAAEk"]
[Fri Dec 05 20:42:34.834763 2025] [:error] [pid 35962:tid 35976] [client 5.135.131.226:51642] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTLTOp-hnYjbYINfh7G46wAAAEw"]
[Fri Dec 05 20:42:37.435615 2025] [:error] [pid 35962:tid 35988] [client 5.135.131.226:35618] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTLTPZ-hnYjbYINfh7G48wAAAFg"]
[Fri Dec 05 20:42:40.031692 2025] [:error] [pid 35962:tid 35977] [client 5.135.131.226:35622] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTLTQJ-hnYjbYINfh7G4-gAAAE0"]
[Fri Dec 05 20:42:42.632465 2025] [:error] [pid 18614:tid 18638] [client 5.135.131.226:35626] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTLTQnHum9jj9plt7MVfYAAAAVY"]
[Fri Dec 05 20:42:45.291638 2025] [:error] [pid 35962:tid 35978] [client 5.135.131.226:35632] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTLTRZ-hnYjbYINfh7G5AgAAAE4"]
[Fri Dec 05 20:42:47.971102 2025] [:error] [pid 18579:tid 18595] [client 5.135.131.226:50412] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTLTR8AUSulJty2JiBqgoAAAAAo"]
[Fri Dec 05 20:42:50.569697 2025] [:error] [pid 35962:tid 35981] [client 5.135.131.226:50428] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTLTSp-hnYjbYINfh7G5CwAAAFE"]
[Fri Dec 05 20:42:53.174852 2025] [:error] [pid 35962:tid 35976] [client 5.135.131.226:50430] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTLTTZ-hnYjbYINfh7G5EQAAAEw"]
[Fri Dec 05 20:42:55.923178 2025] [:error] [pid 18614:tid 18617] [client 5.135.131.226:50436] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTLTT3Hum9jj9plt7MVfagAAAUE"]
[Fri Dec 05 20:42:58.523627 2025] [:error] [pid 18520:tid 18536] [client 5.135.131.226:44082] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aTLTUoOC8XSo46ZrIePj3QAAAIw"]
[Fri Dec 05 21:04:27.208592 2025] [:error] [pid 18614:tid 18636] [client 36.111.67.189:54456] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTLYW3Hum9jj9plt7MVmswAAAVQ"]
[Fri Dec 05 22:39:09.299504 2025] [:error] [pid 18521:tid 18554] [client 49.207.130.201:3851] [client 49.207.130.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.207.130.201, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTLujU_hJ6r18UnAijyiwwAAAMM"]
[Fri Dec 05 23:34:07.494237 2025] [:error] [pid 18579:tid 18590] [client 49.207.130.201:3850] [client 49.207.130.201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTL7b8AUSulJty2JiBrTfgAAAAU"]
[Sat Dec 06 03:26:33.847650 2025] [:error] [pid 14294:tid 14296] [client 182.44.12.37:49882] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTMx6ZZf8ISAq1_f2DQA-gAAAMA"]
[Sat Dec 06 03:55:19.550295 2025] [:error] [pid 61303:tid 61306] [client 43.153.71.12:36356] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTM4p9wK_fe00OH7zy7VNQAAAMA"]
[Sat Dec 06 07:44:36.802822 2025] [:error] [pid 61217:tid 61285] [client 79.137.67.84:45902] [client 79.137.67.84] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "173.244.55.152_82aa6a482bd276cff149740478a603a5fe834840"): Internal error (specific information not available) [hostname "hotbooksbookeeping2.com"] [uri "/index.php"] [unique_id "aTNuYVdSKQYfLI3fYo4jBgAAAIw"]
[Sat Dec 06 10:36:16.651942 2025] [:error] [pid 61216:tid 61253] [client 35.91.169.107:55720] [client 35.91.169.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/"] [unique_id "aTOWoDHlXXVdP5ewviWv9AAAAEc"]
[Sat Dec 06 10:36:17.620170 2025] [:error] [pid 52809:tid 52818] [client 35.91.169.107:55730] [client 35.91.169.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aTOWoerRwgsmpIJQ2qYkqwAAAgc"]
[Sat Dec 06 14:03:54.484353 2025] [:error] [pid 52809:tid 52835] [client 51.75.129.164:39828] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTPHSurRwgsmpIJQ2qZBAQAAAhg"]
[Sat Dec 06 14:03:57.179672 2025] [:error] [pid 52809:tid 52831] [client 51.75.129.164:40174] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTPHTerRwgsmpIJQ2qZBBAAAAhQ"]
[Sat Dec 06 14:03:59.911375 2025] [:error] [pid 61216:tid 61256] [client 51.75.129.164:40186] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTPHTzHlXXVdP5ewviXVzQAAAEo"]
[Sat Dec 06 14:04:02.504293 2025] [:error] [pid 35591:tid 35612] [client 51.75.129.164:40196] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTPHUobmw-7bFvTxc9PjbgAAARM"]
[Sat Dec 06 14:04:05.217879 2025] [:error] [pid 48399:tid 48417] [client 51.75.129.164:40210] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTPHVejNPOrIshd8EweL9QAAAdA"]
[Sat Dec 06 14:04:08.188638 2025] [:error] [pid 48399:tid 48405] [client 51.75.129.164:34296] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTPHWOjNPOrIshd8EweL-QAAAcQ"]
[Sat Dec 06 14:04:10.777308 2025] [:error] [pid 61215:tid 61231] [client 51.75.129.164:34308] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTPHWuOOZ8nTCBYuI-wYHQAAAAw"]
[Sat Dec 06 14:04:13.545309 2025] [:error] [pid 1727:tid 1750] [client 51.75.129.164:34324] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTPHXcD83luYT37-ZaXXPwAAAlU"]
[Sat Dec 06 14:04:16.780185 2025] [:error] [pid 61303:tid 61317] [client 51.75.129.164:42256] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTPHYNwK_fe00OH7zy5UjAAAAMs"]
[Sat Dec 06 14:04:19.603353 2025] [:error] [pid 61216:tid 61268] [client 51.75.129.164:42266] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTPHYzHlXXVdP5ewviXV7QAAAFY"]
[Sat Dec 06 14:04:22.337202 2025] [:error] [pid 1838:tid 1870] [client 51.75.129.164:42276] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTPHZi5zgnu67Yo7vrasKgAAApg"]
[Sat Dec 06 14:04:25.079104 2025] [:error] [pid 61303:tid 61306] [client 51.75.129.164:42278] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aTPHadwK_fe00OH7zy5UkwAAAMA"]
[Sat Dec 06 14:09:04.329486 2025] [:error] [pid 1838:tid 1861] [client 16.146.9.51:59902] [client 16.146.9.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/"] [unique_id "aTPIgC5zgnu67Yo7vraumwAAAo8"]
[Sat Dec 06 14:09:05.099590 2025] [:error] [pid 61303:tid 61326] [client 16.146.9.51:59908] [client 16.146.9.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aTPIgdwK_fe00OH7zy5VuwAAANM"]
[Sat Dec 06 16:52:52.942410 2025] [:error] [pid 52809:tid 52820] [client 52.164.216.133:15307] [client 52.164.216.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTPu5OrRwgsmpIJQ2qZaJwAAAgk"]
[Sat Dec 06 16:52:53.621102 2025] [:error] [pid 35622:tid 35660] [client 52.164.216.133:15072] [client 52.164.216.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTPu5SOSP_9DVLgFwI6l0gAAAYk"]
[Sat Dec 06 16:52:54.979450 2025] [:error] [pid 1838:tid 1855] [client 52.164.216.133:11541] [client 52.164.216.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTPu5i5zgnu67Yo7vrbZLgAAAok"]
[Sat Dec 06 16:52:56.047960 2025] [:error] [pid 61303:tid 61317] [client 52.164.216.133:2251] [client 52.164.216.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTPu6NwK_fe00OH7zy5zTwAAAMs"]
[Sat Dec 06 19:33:25.629785 2025] [:error] [pid 35591:tid 35612] [client 147.185.41.173:35548] [client 147.185.41.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aTQUhYbmw-7bFvTxc9MSCgAAARM"]
[Sat Dec 06 20:17:58.479483 2025] [:error] [pid 61216:tid 61247] [client 45.86.202.197:64313] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTQe9jHlXXVdP5ewviUkvQAAAEE"]
[Sat Dec 06 20:18:29.091871 2025] [:error] [pid 61217:tid 61282] [client 45.86.202.183:48789] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/config/.env"] [unique_id "aTQfFVdSKQYfLI3fYo6HKwAAAIk"]
[Sat Dec 06 21:29:17.056171 2025] [:error] [pid 61215:tid 61242] [client 182.40.104.255:38248] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTQvreOOZ8nTCBYuI-xYUgAAABc"]
[Sat Dec 06 21:56:31.318473 2025] [:error] [pid 35591:tid 35613] [client 49.150.104.5:45694] [client 49.150.104.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.104.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTQ2D4bmw-7bFvTxc9MqXAAAARQ"]
[Sun Dec 07 05:10:31.041662 2025] [autoindex:error] [pid 34108:tid 34113] [client 45.146.55.15:30903] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:10:31.467768 2025] [autoindex:error] [pid 34108:tid 34134] [client 45.146.55.15:30903] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:10:31.915434 2025] [autoindex:error] [pid 34108:tid 34113] [client 45.146.55.15:30903] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:10:32.350732 2025] [autoindex:error] [pid 34108:tid 34134] [client 45.146.55.15:30903] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:10:34.255315 2025] [autoindex:error] [pid 34108:tid 34118] [client 45.146.55.31:56611] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:10:34.688302 2025] [autoindex:error] [pid 34108:tid 34113] [client 45.146.55.31:56611] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:10:35.121762 2025] [autoindex:error] [pid 34108:tid 34121] [client 45.146.55.31:56611] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:10:35.551116 2025] [autoindex:error] [pid 34108:tid 34120] [client 45.146.55.31:56611] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:51:11.550953 2025] [:error] [pid 34108:tid 34127] [client 136.144.43.227:27157] [client 136.144.43.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.227, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTSlT6LvdvAppF-gXotF5QAAAA4"]
[Sun Dec 07 05:51:19.390841 2025] [:error] [pid 7273:tid 7298] [client 136.144.43.228:54679] [client 136.144.43.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.228, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTSlV_pR7YTD7JcHjhG7awAAAVc"]
[Sun Dec 07 05:51:19.390920 2025] [:error] [pid 7273:tid 7298] [client 136.144.43.228:54679] [client 136.144.43.228] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 136.144.43.228 on wp-login.php, counter = 15"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTSlV_pR7YTD7JcHjhG7awAAAVc"]
[Sun Dec 07 07:33:38.254958 2025] [:error] [pid 34195:tid 34212] [client 217.182.194.2:44126] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTS9UhrSxOOdwv3vX3yHdAAAAM4"]
[Sun Dec 07 07:33:41.847436 2025] [:error] [pid 34110:tid 34170] [client 217.182.194.2:50188] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTS9VQndtmtsHiXHBO3FiwAAAIM"]
[Sun Dec 07 07:33:45.412935 2025] [:error] [pid 7089:tid 7091] [client 217.182.194.2:50190] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTS9WYJPZ-pZM-y51NEciwAAAQA"]
[Sun Dec 07 07:33:49.818350 2025] [:error] [pid 7089:tid 7102] [client 217.182.194.2:42900] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTS9XYJPZ-pZM-y51NEcjQAAAQs"]
[Sun Dec 07 07:33:53.510595 2025] [:error] [pid 13234:tid 13249] [client 217.182.194.2:42912] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTS9Ye6_dquQqQ60IZ_ZSgAAAYg"]
[Sun Dec 07 07:33:57.179169 2025] [:error] [pid 7089:tid 7100] [client 217.182.194.2:42920] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTS9ZYJPZ-pZM-y51NEckAAAAQk"]
[Sun Dec 07 07:34:00.582237 2025] [:error] [pid 13234:tid 13251] [client 217.182.194.2:42004] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTS9aO6_dquQqQ60IZ_ZUAAAAYo"]
[Sun Dec 07 07:34:04.082667 2025] [:error] [pid 7273:tid 7287] [client 217.182.194.2:42008] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTS9bPpR7YTD7JcHjhHibQAAAUw"]
[Sun Dec 07 07:34:07.072690 2025] [:error] [pid 13234:tid 13245] [client 217.182.194.2:42012] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTS9b-6_dquQqQ60IZ_ZVgAAAYQ"]
[Sun Dec 07 07:34:10.028268 2025] [:error] [pid 34195:tid 34212] [client 217.182.194.2:55984] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTS9chrSxOOdwv3vX3yHfQAAAM4"]
[Sun Dec 07 07:34:12.840164 2025] [:error] [pid 34110:tid 34172] [client 217.182.194.2:55992] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTS9dAndtmtsHiXHBO3FmgAAAIU"]
[Sun Dec 07 07:34:17.213306 2025] [:error] [pid 7273:tid 7298] [client 217.182.194.2:55994] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aTS9efpR7YTD7JcHjhHidgAAAVc"]
[Sun Dec 07 07:37:04.720629 2025] [:error] [pid 13234:tid 13251] [client 217.182.194.2:50270] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTS-IO6_dquQqQ60IZ_ZxAAAAYo"]
[Sun Dec 07 07:37:07.866142 2025] [:error] [pid 34109:tid 34162] [client 217.182.194.2:47364] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTS-I4jE_vucgM_xD4QldwAAAFY"]
[Sun Dec 07 07:37:10.717176 2025] [:error] [pid 34108:tid 34115] [client 217.182.194.2:51742] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTS-JqLvdvAppF-gXote0gAAAAI"]
[Sun Dec 07 07:37:13.658301 2025] [:error] [pid 34195:tid 34221] [client 217.182.194.2:51744] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTS-KRrSxOOdwv3vX3yH6wAAANc"]
[Sun Dec 07 07:37:16.833707 2025] [:error] [pid 7273:tid 7284] [client 217.182.194.2:51758] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTS-LPpR7YTD7JcHjhHjVgAAAUk"]
[Sun Dec 07 07:37:19.675475 2025] [:error] [pid 34110:tid 34176] [client 217.182.194.2:53834] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTS-LwndtmtsHiXHBO3GVgAAAIk"]
[Sun Dec 07 07:37:22.672642 2025] [:error] [pid 7089:tid 7102] [client 217.182.194.2:53838] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTS-MoJPZ-pZM-y51NEc9wAAAQs"]
[Sun Dec 07 07:37:25.992386 2025] [:error] [pid 7089:tid 7115] [client 217.182.194.2:53850] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTS-NYJPZ-pZM-y51NEc-QAAARg"]
[Sun Dec 07 07:37:29.217932 2025] [:error] [pid 7273:tid 7287] [client 217.182.194.2:51228] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTS-OfpR7YTD7JcHjhHjWwAAAUw"]
[Sun Dec 07 07:37:32.241467 2025] [:error] [pid 7273:tid 7282] [client 217.182.194.2:51238] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTS-PPpR7YTD7JcHjhHjXQAAAUc"]
[Sun Dec 07 07:37:35.711564 2025] [:error] [pid 7273:tid 7297] [client 217.182.194.2:51240] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTS-P_pR7YTD7JcHjhHjYAAAAVY"]
[Sun Dec 07 07:37:39.699699 2025] [:error] [pid 7273:tid 7296] [client 217.182.194.2:39422] [client 217.182.194.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aTS-Q_pR7YTD7JcHjhHjZgAAAVU"]
[Sun Dec 07 09:31:13.693575 2025] [:error] [pid 25602:tid 25676] [client 114.96.103.33:51986] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTTY4RMayYLriq9gRdeI6gAAAM4"]
[Sun Dec 07 09:38:03.454416 2025] [:error] [pid 25600:tid 25618] [client 185.177.72.8:39054] [client 185.177.72.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aTTae4X3SVrXRURpt5L6MQAAAEs"]
[Sun Dec 07 11:04:48.859458 2025] [:error] [pid 25600:tid 25610] [client 4.233.91.203:55940] [client 4.233.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/userfuns.php"] [unique_id "aTTu0IX3SVrXRURpt5IOZwAAAEM"], referer: www.google.com
[Sun Dec 07 13:27:39.003899 2025] [:error] [pid 25694:tid 25709] [client 85.209.135.111:43866] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aTUQS0f7996cewJ5N2_9hgAAAQ0"]
[Sun Dec 07 13:47:47.452194 2025] [:error] [pid 25600:tid 25608] [client 85.209.135.111:33328] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aTUVA4X3SVrXRURpt5Iv3AAAAEE"]
[Sun Dec 07 13:54:15.511534 2025] [:error] [pid 36068:tid 36083] [client 185.177.72.8:53358] [client 185.177.72.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aTUWh1GuxqM4ZYob8lPJuAAAAA0"]
[Sun Dec 07 21:56:54.009326 2025] [:error] [pid 5222:tid 5238] [client 136.144.35.228:24265] [client 136.144.35.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTWHpt8FU0HgkYWmt7tHpwAAAEw"]
[Sun Dec 07 23:32:08.904908 2025] [:error] [pid 9610:tid 9625] [client 43.131.243.61:44060] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTWd-MZ4Zl9G0UhQ7w1dMQAAAQ0"]
[Sun Dec 07 23:37:36.684533 2025] [:error] [pid 5224:tid 5300] [client 212.30.33.41:50741] [client 212.30.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTWfQPAAkbWt7RJBoF8HWAAAANM"]
[Mon Dec 08 00:57:51.458249 2025] [:error] [pid 55840:tid 55850] [client 65.108.2.171:58082] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTWyD9XZ-ijN21c_Pr5hnQAAAAc"]
[Mon Dec 08 00:57:54.076068 2025] [:error] [pid 55840:tid 55865] [client 65.108.2.171:48946] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTWyEtXZ-ijN21c_Pr5hogAAABY"]
[Mon Dec 08 00:57:56.670874 2025] [:error] [pid 55699:tid 55750] [client 65.108.2.171:48960] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTWyFHp2c7AdOPMmDENjbgAAAJQ"]
[Mon Dec 08 00:57:59.275231 2025] [:error] [pid 55840:tid 55866] [client 65.108.2.171:48974] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTWyF9XZ-ijN21c_Pr5hsgAAABc"]
[Mon Dec 08 00:58:01.872319 2025] [:error] [pid 55700:tid 55779] [client 65.108.2.171:48982] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTWyGU8bwbrSb89n9TcMvAAAANY"]
[Mon Dec 08 00:58:04.536352 2025] [:error] [pid 55700:tid 55771] [client 65.108.2.171:3802] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTWyHE8bwbrSb89n9TcMvQAAAM4"]
[Mon Dec 08 00:58:07.168516 2025] [:error] [pid 55840:tid 55852] [client 65.108.2.171:3816] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTWyH9XZ-ijN21c_Pr5hugAAAAk"]
[Mon Dec 08 00:58:09.788313 2025] [:error] [pid 55700:tid 55775] [client 65.108.2.171:3830] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTWyIU8bwbrSb89n9TcMwQAAANI"]
[Mon Dec 08 00:58:12.360332 2025] [:error] [pid 55840:tid 55849] [client 65.108.2.171:61848] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTWyJNXZ-ijN21c_Pr5hvwAAAAY"]
[Mon Dec 08 00:58:15.101223 2025] [:error] [pid 55840:tid 55857] [client 65.108.2.171:61850] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTWyJ9XZ-ijN21c_Pr5hwwAAAA4"]
[Mon Dec 08 00:58:17.734347 2025] [:error] [pid 55700:tid 55773] [client 65.108.2.171:61862] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTWyKU8bwbrSb89n9TcMxQAAANA"]
[Mon Dec 08 00:58:20.374782 2025] [:error] [pid 55840:tid 55843] [client 65.108.2.171:61878] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aTWyLNXZ-ijN21c_Pr5hygAAAAA"]
[Mon Dec 08 02:11:43.290408 2025] [:error] [pid 55840:tid 55858] [client 212.30.33.35:28323] [client 212.30.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXDX9XZ-ijN21c_Pr6BdwAAAA8"]
[Mon Dec 08 02:27:50.563823 2025] [:error] [pid 55840:tid 55867] [client 212.30.33.47:34795] [client 212.30.33.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXHJtXZ-ijN21c_Pr6IowAAABg"]
[Mon Dec 08 02:27:50.566451 2025] [:error] [pid 55840:tid 55867] [client 212.30.33.47:34795] [client 212.30.33.47] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||hotbooksbookeeping2.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXHJtXZ-ijN21c_Pr6IowAAABg"]
[Mon Dec 08 02:38:08.132465 2025] [:error] [pid 55700:tid 55778] [client 212.30.33.197:42427] [client 212.30.33.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.197, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXJkE8bwbrSb89n9Tcq9QAAANU"]
[Mon Dec 08 02:51:57.822890 2025] [:error] [pid 55840:tid 55844] [client 212.30.33.50:55027] [client 212.30.33.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXMzdXZ-ijN21c_Pr6U1QAAAAE"]
[Mon Dec 08 03:07:00.842948 2025] [:error] [pid 55840:tid 55845] [client 45.86.202.200:31163] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTXQVNXZ-ijN21c_Pr6ghgAAAAI"]
[Mon Dec 08 03:07:01.477821 2025] [:error] [pid 55700:tid 55777] [client 45.86.202.181:42743] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "aTXQVU8bwbrSb89n9Tc4eAAAANQ"]
[Mon Dec 08 03:07:22.086034 2025] [:error] [pid 55700:tid 55780] [client 45.86.202.160:48487] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/config/.env"] [unique_id "aTXQak8bwbrSb89n9Tc4qgAAANc"]
[Mon Dec 08 03:08:36.362376 2025] [:error] [pid 55700:tid 55779] [client 212.30.33.24:53917] [client 212.30.33.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.24, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXQtE8bwbrSb89n9Tc5qQAAANY"]
[Mon Dec 08 03:08:36.364091 2025] [:error] [pid 55700:tid 55779] [client 212.30.33.24:53917] [client 212.30.33.24] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||hotbooksbookeeping2.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXQtE8bwbrSb89n9Tc5qQAAANY"]
[Mon Dec 08 03:16:51.951349 2025] [:error] [pid 55840:tid 55845] [client 212.30.33.44:37031] [client 212.30.33.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXSo9XZ-ijN21c_Pr6o_gAAAAI"]
[Mon Dec 08 03:28:41.440749 2025] [:error] [pid 36236:tid 36271] [client 212.30.33.46:34579] [client 212.30.33.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXVaZf5D9W_CKUfYDDydgAAAEM"]
[Mon Dec 08 03:43:19.859342 2025] [:error] [pid 1876:tid 1954] [client 212.30.33.12:31475] [client 212.30.33.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.12, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXY16dW9Bakw2p6_1ppEAAAAJM"]
[Mon Dec 08 03:58:03.752950 2025] [:error] [pid 18636:tid 18708] [client 212.30.33.42:32511] [client 212.30.33.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXcS-gdXnohVr6jm70obgAAAJA"]
[Mon Dec 08 04:07:35.119451 2025] [:error] [pid 18726:tid 18735] [client 212.30.33.5:43397] [client 212.30.33.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.5, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXeh1wVbxmJGL5LHAcahAAAAMc"]
[Mon Dec 08 04:26:15.834338 2025] [:error] [pid 18636:tid 18707] [client 212.30.33.22:51821] [client 212.30.33.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.22, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXi5-gdXnohVr6jm70y5gAAAI8"]
[Mon Dec 08 04:35:24.845160 2025] [:error] [pid 18634:tid 18639] [client 212.30.33.36:58725] [client 212.30.33.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXlDJ-H1wCBKPf4vhNr8AAAAAE"]
[Mon Dec 08 04:45:41.956541 2025] [:error] [pid 54705:tid 54744] [client 212.30.33.29:41497] [client 212.30.33.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXndadUeDkxwo12SG8ItwAAAYo"]
[Mon Dec 08 04:53:27.440321 2025] [:error] [pid 18635:tid 18683] [client 212.30.33.8:36389] [client 212.30.33.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.8, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXpR24kCC_HamQRuE1mYwAAAFI"]
[Mon Dec 08 05:01:16.388956 2025] [:error] [pid 54705:tid 54753] [client 212.30.33.26:61241] [client 212.30.33.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXrHKdUeDkxwo12SG8NSgAAAZM"]
[Mon Dec 08 05:17:22.472923 2025] [:error] [pid 54705:tid 54739] [client 212.30.33.37:41911] [client 212.30.33.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.37, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXu4qdUeDkxwo12SG8TmwAAAYU"]
[Mon Dec 08 05:33:15.270782 2025] [:error] [pid 54705:tid 54748] [client 212.30.33.152:64931] [client 212.30.33.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.152, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTXym6dUeDkxwo12SG8a5AAAAY4"]
[Mon Dec 08 05:46:22.013595 2025] [:error] [pid 54705:tid 54751] [client 212.30.33.14:41117] [client 212.30.33.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTX1rqdUeDkxwo12SG8hGwAAAZE"]
[Mon Dec 08 05:56:36.030097 2025] [:error] [pid 18634:tid 18641] [client 212.30.33.22:33351] [client 212.30.33.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.22, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTX4FJ-H1wCBKPf4vhN8twAAAAM"]
[Mon Dec 08 05:57:48.755249 2025] [proxy_fcgi:error] [pid 18634:tid 18657] [client 4.230.26.9:6428] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 08 05:58:15.904954 2025] [:error] [pid 18634:tid 18648] [client 4.230.26.9:6429] [client 4.230.26.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.230.26.9, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTX4d5-H1wCBKPf4vhN9cgAAAAo"], referer: https://www.google.fr/
[Mon Dec 08 05:58:15.919112 2025] [proxy_fcgi:error] [pid 18634:tid 18648] [client 4.230.26.9:6429] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Mon Dec 08 05:58:17.323329 2025] [autoindex:error] [pid 18634:tid 18662] [client 4.230.26.9:6429] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 08 05:58:23.460739 2025] [autoindex:error] [pid 18634:tid 18642] [client 4.230.26.9:6429] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 08 06:13:33.711113 2025] [:error] [pid 54705:tid 54745] [client 212.30.33.28:49665] [client 212.30.33.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTX8DadUeDkxwo12SG8tIAAAAYs"]
[Mon Dec 08 06:14:24.707300 2025] [:error] [pid 18726:tid 18742] [client 35.176.28.122:50592] [client 35.176.28.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aTX8QFwVbxmJGL5LHAc9dwAAAM4"]
[Mon Dec 08 06:29:02.405677 2025] [:error] [pid 18726:tid 18748] [client 212.30.33.41:33259] [client 212.30.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTX_rlwVbxmJGL5LHAdBFAAAANQ"]
[Mon Dec 08 06:44:20.160366 2025] [:error] [pid 18635:tid 18674] [client 212.30.33.41:43447] [client 212.30.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYDRG4kCC_HamQRuE1-tQAAAEk"]
[Mon Dec 08 07:02:23.558118 2025] [:error] [pid 54704:tid 54731] [client 212.30.33.3:53569] [client 212.30.33.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.3, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYHf3L1WYsMMmlqjh4nsgAAAVg"]
[Mon Dec 08 07:19:48.834710 2025] [:error] [pid 63149:tid 63156] [client 212.30.33.29:20955] [client 212.30.33.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYLlC6lCfxj0bibuYmgMgAAAMU"]
[Mon Dec 08 07:32:20.665476 2025] [:error] [pid 63057:tid 63106] [client 212.30.33.36:60983] [client 212.30.33.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYOhPmfJ_ZM9jb0vY6gOgAAAFA"]
[Mon Dec 08 07:40:10.900911 2025] [:error] [pid 63056:tid 63067] [client 212.30.33.29:21459] [client 212.30.33.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYQWt3Graql2SDqDl9dbwAAAAQ"]
[Mon Dec 08 07:48:05.588971 2025] [:error] [pid 39261:tid 39285] [client 212.30.33.48:34847] [client 212.30.33.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYSNXijlEqKrwMitDGnGAAAANQ"]
[Mon Dec 08 07:56:24.542636 2025] [:error] [pid 39261:tid 39265] [client 212.30.33.16:34519] [client 212.30.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.16, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYUKHijlEqKrwMitDGsSgAAAMA"]
[Mon Dec 08 08:04:20.888709 2025] [:error] [pid 39161:tid 39237] [client 212.30.33.26:65187] [client 212.30.33.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYWBOQBy-JdpUuZzWerNwAAAJE"]
[Mon Dec 08 08:11:58.008148 2025] [:error] [pid 39160:tid 39217] [client 212.30.33.50:48083] [client 212.30.33.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYXzim5Ndns0p3OT9A3qAAAAFg"]
[Mon Dec 08 08:19:40.397720 2025] [:error] [pid 39160:tid 39195] [client 212.30.33.39:33421] [client 212.30.33.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYZnCm5Ndns0p3OT9A6IgAAAEM"]
[Mon Dec 08 08:27:18.763605 2025] [:error] [pid 53927:tid 53934] [client 212.30.33.15:61881] [client 212.30.33.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYbZrTtIvPZ1Cm2r04kMQAAAQU"]
[Mon Dec 08 08:35:13.394959 2025] [:error] [pid 53927:tid 53945] [client 212.30.33.34:30081] [client 212.30.33.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYdQbTtIvPZ1Cm2r04pewAAARA"]
[Mon Dec 08 08:42:52.257290 2025] [:error] [pid 53927:tid 53935] [client 212.30.33.46:35875] [client 212.30.33.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYfDLTtIvPZ1Cm2r04r7AAAAQY"]
[Mon Dec 08 08:50:39.116722 2025] [:error] [pid 39261:tid 39269] [client 212.30.33.201:60709] [client 212.30.33.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYg33ijlEqKrwMitDHCuAAAAMQ"]
[Mon Dec 08 08:58:16.473782 2025] [:error] [pid 53927:tid 53945] [client 212.30.33.18:56851] [client 212.30.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYiqLTtIvPZ1Cm2r040FgAAARA"]
[Mon Dec 08 09:06:01.868651 2025] [:error] [pid 39159:tid 39176] [client 212.30.33.18:54831] [client 212.30.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYkeU48HaQt8jqjSbpBvwAAAAs"]
[Mon Dec 08 09:13:36.878811 2025] [:error] [pid 39160:tid 39213] [client 212.30.33.46:35601] [client 212.30.33.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYmQCm5Ndns0p3OT9BL1gAAAFQ"]
[Mon Dec 08 09:21:13.931720 2025] [:error] [pid 39261:tid 39284] [client 212.30.33.133:60553] [client 212.30.33.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.133, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYoCXijlEqKrwMitDHQ2wAAANM"]
[Mon Dec 08 09:28:56.356531 2025] [:error] [pid 39261:tid 39270] [client 212.30.33.43:51695] [client 212.30.33.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYp2HijlEqKrwMitDHXMgAAAMU"]
[Mon Dec 08 09:36:41.452677 2025] [:error] [pid 39159:tid 39165] [client 212.30.33.10:25407] [client 212.30.33.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.10, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYrqU48HaQt8jqjSbpQlQAAAAA"]
[Mon Dec 08 09:44:18.786645 2025] [:error] [pid 39261:tid 39277] [client 212.30.33.209:40867] [client 212.30.33.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.209, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYtcnijlEqKrwMitDHdlAAAAMw"]
[Mon Dec 08 09:51:59.029564 2025] [:error] [pid 39261:tid 39284] [client 212.30.33.201:43573] [client 212.30.33.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYvP3ijlEqKrwMitDHgMgAAANM"]
[Mon Dec 08 09:59:37.184650 2025] [:error] [pid 39160:tid 39197] [client 212.30.33.38:30327] [client 212.30.33.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.38, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYxCSm5Ndns0p3OT9Bb1wAAAEU"]
[Mon Dec 08 10:07:21.733253 2025] [:error] [pid 53927:tid 53943] [client 212.30.33.175:62905] [client 212.30.33.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.175, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTYy2bTtIvPZ1Cm2r05awAAAAQ4"]
[Mon Dec 08 10:15:06.810142 2025] [:error] [pid 39160:tid 39204] [client 212.30.33.201:58283] [client 212.30.33.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTY0qim5Ndns0p3OT9BhJgAAAEw"]
[Mon Dec 08 10:26:09.913090 2025] [:error] [pid 39159:tid 39184] [client 212.30.33.44:26289] [client 212.30.33.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTY3QU48HaQt8jqjSbpj_gAAABM"]
[Mon Dec 08 10:41:17.182825 2025] [:error] [pid 39160:tid 39192] [client 212.30.33.35:59147] [client 212.30.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTY6zSm5Ndns0p3OT9Bt0QAAAEA"]
[Mon Dec 08 10:56:02.580782 2025] [:error] [pid 39261:tid 39273] [client 212.30.33.35:59083] [client 212.30.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTY-QnijlEqKrwMitDEDEQAAAMg"]
[Mon Dec 08 11:10:36.660991 2025] [:error] [pid 39160:tid 39212] [client 212.30.33.3:55205] [client 212.30.33.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.3, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZBrCm5Ndns0p3OT9B8LAAAAFM"]
[Mon Dec 08 11:19:39.233757 2025] [:error] [pid 43361:tid 43375] [client 103.108.174.57:10113] [client 103.108.174.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.108.174.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZDy8rZJ_dsPpuIXPnIUQAAAYs"], referer: https://www.google.com
[Mon Dec 08 11:34:23.591997 2025] [:error] [pid 43361:tid 43366] [client 212.30.33.30:44113] [client 212.30.33.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.30, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZHP8rZJ_dsPpuIXPnNAwAAAYI"]
[Mon Dec 08 11:46:38.883646 2025] [:error] [pid 39160:tid 39201] [client 45.88.186.148:52447] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTZKHim5Ndns0p3OT9CKQAAAAEk"]
[Mon Dec 08 11:46:39.290483 2025] [:error] [pid 43361:tid 43385] [client 45.88.186.148:52536] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTZKH8rZJ_dsPpuIXPnQTgAAAZU"]
[Mon Dec 08 11:46:39.707381 2025] [:error] [pid 39159:tid 39183] [client 45.88.186.148:52675] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTZKH048HaQt8jqjSbqCvAAAABI"]
[Mon Dec 08 11:46:40.117174 2025] [:error] [pid 43362:tid 43399] [client 45.88.186.148:52845] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTZKIDoamfxHn2vcwqy4QQAAAcg"]
[Mon Dec 08 11:46:40.525755 2025] [:error] [pid 43362:tid 43413] [client 45.88.186.148:53000] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTZKIDoamfxHn2vcwqy4XQAAAdY"]
[Mon Dec 08 11:49:00.407039 2025] [:error] [pid 39261:tid 39286] [client 212.30.33.48:31395] [client 212.30.33.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZKrHijlEqKrwMitDEUHgAAANU"]
[Mon Dec 08 12:00:33.893645 2025] [:error] [pid 39160:tid 39214] [client 212.30.33.48:21465] [client 212.30.33.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZNYSm5Ndns0p3OT9CPbQAAAFU"]
[Mon Dec 08 12:14:35.765652 2025] [:error] [pid 53927:tid 53943] [client 212.30.33.236:21953] [client 212.30.33.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.236, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZQq7TtIvPZ1Cm2r06okAAAAQ4"]
[Mon Dec 08 12:29:10.901828 2025] [:error] [pid 43324:tid 43349] [client 212.30.33.45:56975] [client 212.30.33.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.45, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZUFmPgmTVXZPILisbqLwAAAVc"]
[Mon Dec 08 12:46:34.001853 2025] [:error] [pid 13533:tid 13553] [client 212.30.33.35:57517] [client 212.30.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZYKkwxYk7zHgjCNdZSywAAAVI"]
[Mon Dec 08 12:57:16.567810 2025] [:error] [pid 13446:tid 13481] [client 16.146.9.51:56902] [client 16.146.9.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTZarFPLjuV-KbK89q3tRAAAAII"]
[Mon Dec 08 12:58:15.464626 2025] [:error] [pid 13445:tid 13461] [client 212.30.33.20:21525] [client 212.30.33.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.20, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZa58ek7sIjbF2WoVbNFAAAAEs"]
[Mon Dec 08 13:06:53.434711 2025] [:error] [pid 13447:tid 13506] [client 212.30.33.26:20081] [client 212.30.33.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZc7XsXz7UXj3rHK1ufgAAAAMA"]
[Mon Dec 08 13:16:19.242652 2025] [:error] [pid 16888:tid 16896] [client 212.30.33.28:20681] [client 212.30.33.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZfIxSZHPLCPHyOpBVJQgAAAAU"]
[Mon Dec 08 13:50:26.818997 2025] [:error] [pid 30632:tid 30642] [client 212.30.33.2:59423] [client 212.30.33.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.2, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZnIhW3Slp5Vnr6sRdq0QAAAYY"]
[Mon Dec 08 14:04:56.528902 2025] [:error] [pid 30632:tid 30651] [client 212.30.33.32:42431] [client 212.30.33.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.32, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZqiBW3Slp5Vnr6sRdw0gAAAY8"]
[Mon Dec 08 14:18:39.238979 2025] [:error] [pid 30580:tid 30596] [client 34.217.39.208:55792] [client 34.217.39.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTZtv8EhRKiLBTnel9PuAQAAAQ4"]
[Mon Dec 08 14:23:50.271735 2025] [:error] [pid 13446:tid 13503] [client 212.30.33.6:56549] [client 212.30.33.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.6, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZu9lPLjuV-KbK89q0LtAAAAJg"]
[Mon Dec 08 14:36:04.546878 2025] [:error] [pid 13533:tid 13552] [client 212.30.33.30:25775] [client 212.30.33.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.30, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZx1EwxYk7zHgjCNdZ2UwAAAVE"]
[Mon Dec 08 14:45:22.535005 2025] [:error] [pid 30580:tid 30582] [client 212.30.33.29:26987] [client 212.30.33.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZ0AsEhRKiLBTnel9P1dQAAAQA"]
[Mon Dec 08 14:56:04.073198 2025] [:error] [pid 13445:tid 13457] [client 212.30.33.197:56597] [client 212.30.33.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.197, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZ2hMek7sIjbF2WoVbswwAAAEc"]
[Mon Dec 08 15:06:13.102737 2025] [:error] [pid 58759:tid 58811] [client 212.30.33.2:52427] [client 212.30.33.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.2, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZ45f6HZGkO2H0XX-g9tAAAANU"]
[Mon Dec 08 15:19:25.656402 2025] [:error] [pid 63353:tid 63358] [client 212.30.33.47:23485] [client 212.30.33.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZ7_Rtg8HdYG392GAjMJQAAAII"]
[Mon Dec 08 15:34:14.594644 2025] [:error] [pid 2754:tid 2767] [client 212.30.33.46:50835] [client 212.30.33.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTZ_drSzS4AFjS-DhTXPUAAAAUo"]
[Mon Dec 08 15:51:29.524674 2025] [:error] [pid 58760:tid 58826] [client 212.30.33.10:58431] [client 212.30.33.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.10, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaDgWqmF_jKbCz9E6kheQAAAAk"]
[Mon Dec 08 16:07:53.220200 2025] [:error] [pid 58759:tid 58807] [client 212.30.33.15:39629] [client 212.30.33.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaHWf6HZGkO2H0XX-hV9gAAANE"]
[Mon Dec 08 16:25:01.725236 2025] [:error] [pid 63353:tid 63365] [client 212.30.33.29:41739] [client 212.30.33.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaLXRtg8HdYG392GAjmwwAAAIk"]
[Mon Dec 08 16:38:02.291397 2025] [:error] [pid 2754:tid 2758] [client 212.30.33.197:62973] [client 212.30.33.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.197, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaOarSzS4AFjS-DhTX0lAAAAUE"]
[Mon Dec 08 16:56:19.762104 2025] [:error] [pid 58759:tid 58812] [client 212.30.33.6:39385] [client 212.30.33.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.6, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaSs_6HZGkO2H0XX-hvnAAAANY"]
[Mon Dec 08 17:07:13.181276 2025] [:error] [pid 58760:tid 58831] [client 212.30.33.5:22183] [client 212.30.33.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.5, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaVQWqmF_jKbCz9E6lI1QAAAA4"]
[Mon Dec 08 17:15:11.725336 2025] [:error] [pid 2754:tid 2769] [client 212.30.33.19:44247] [client 212.30.33.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.19, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaXH7SzS4AFjS-DhTUKMQAAAUw"]
[Mon Dec 08 17:23:00.762057 2025] [:error] [pid 2754:tid 2772] [client 212.30.33.43:39335] [client 212.30.33.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaY9LSzS4AFjS-DhTUNuQAAAU8"]
[Mon Dec 08 17:30:51.420940 2025] [:error] [pid 37840:tid 37852] [client 212.30.33.189:30959] [client 212.30.33.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.189, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaay1nJIKqlie_aHNbHMAAAAYk"]
[Mon Dec 08 17:38:41.479925 2025] [:error] [pid 63353:tid 63356] [client 212.30.33.28:44815] [client 212.30.33.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTacoRtg8HdYG392GAgAjQAAAIA"]
[Mon Dec 08 17:46:35.234301 2025] [:error] [pid 37840:tid 37858] [client 212.30.33.36:30147] [client 212.30.33.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaee1nJIKqlie_aHNbN9AAAAY8"]
[Mon Dec 08 17:54:29.686922 2025] [:error] [pid 2754:tid 2781] [client 212.30.33.28:28197] [client 212.30.33.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTagVbSzS4AFjS-DhTUd8AAAAVc"]
[Mon Dec 08 17:57:01.609022 2025] [:error] [pid 58758:tid 58778] [client 104.28.246.122:27211] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aTag7QBS5U6_vVkyhEeLVwAAAFA"]
[Mon Dec 08 18:02:22.636849 2025] [:error] [pid 58758:tid 58786] [client 212.30.33.43:64091] [client 212.30.33.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaiLgBS5U6_vVkyhEeNBQAAAFg"]
[Mon Dec 08 18:10:16.807069 2025] [:error] [pid 2754:tid 2762] [client 212.30.33.18:59535] [client 212.30.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTakCLSzS4AFjS-DhTUl9AAAAUU"]
[Mon Dec 08 18:18:18.831032 2025] [:error] [pid 63353:tid 63363] [client 212.30.33.14:22177] [client 212.30.33.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTal6htg8HdYG392GAgLkwAAAIc"]
[Mon Dec 08 18:23:44.443157 2025] [:error] [pid 58759:tid 58807] [client 62.84.185.69:7262] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTanMP6HZGkO2H0XX-iGwAAAANE"]
[Mon Dec 08 18:23:47.300395 2025] [:error] [pid 58759:tid 58804] [client 62.84.185.69:7266] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTanM_6HZGkO2H0XX-iG1wAAAM4"]
[Mon Dec 08 18:23:49.986931 2025] [:error] [pid 58759:tid 58794] [client 62.84.185.69:30026] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTanNf6HZGkO2H0XX-iG3QAAAMQ"]
[Mon Dec 08 18:23:53.298292 2025] [:error] [pid 58759:tid 58802] [client 62.84.185.69:30042] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTanOf6HZGkO2H0XX-iG3wAAAMw"]
[Mon Dec 08 18:23:55.866003 2025] [:error] [pid 58847:tid 58876] [client 62.84.185.69:30044] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTanO3y4UHQXWKMwpHno6AAAARc"]
[Mon Dec 08 18:23:58.582458 2025] [:error] [pid 58759:tid 58808] [client 62.84.185.69:30060] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTanPv6HZGkO2H0XX-iG4wAAANI"]
[Mon Dec 08 18:24:01.396054 2025] [:error] [pid 37840:tid 37867] [client 62.84.185.69:5044] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTanQVnJIKqlie_aHNbbAwAAAZg"]
[Mon Dec 08 18:24:04.955440 2025] [:error] [pid 58847:tid 58875] [client 62.84.185.69:5054] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTanRHy4UHQXWKMwpHno8QAAARY"]
[Mon Dec 08 18:24:07.802922 2025] [:error] [pid 2754:tid 2772] [client 62.84.185.69:5060] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTanR7SzS4AFjS-DhTUsBQAAAU8"]
[Mon Dec 08 18:24:10.595625 2025] [:error] [pid 2754:tid 2757] [client 62.84.185.69:5944] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTanSrSzS4AFjS-DhTUsCAAAAUA"]
[Mon Dec 08 18:24:13.527333 2025] [:error] [pid 63353:tid 63362] [client 62.84.185.69:5958] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTanTRtg8HdYG392GAgNQQAAAIY"]
[Mon Dec 08 18:24:16.441874 2025] [:error] [pid 37840:tid 37860] [client 62.84.185.69:5962] [client 62.84.185.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aTanUFnJIKqlie_aHNbbDAAAAZE"]
[Mon Dec 08 18:26:11.975628 2025] [:error] [pid 37840:tid 37867] [client 212.30.33.23:50311] [client 212.30.33.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTanw1nJIKqlie_aHNbb7QAAAZg"]
[Mon Dec 08 18:34:06.288622 2025] [:error] [pid 58759:tid 58796] [client 212.30.33.19:28019] [client 212.30.33.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.19, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTapnv6HZGkO2H0XX-iKGwAAAMY"]
[Mon Dec 08 18:37:19.465724 2025] [autoindex:error] [pid 58758:tid 58776] [client 209.97.156.74:50810] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 08 18:42:03.860570 2025] [:error] [pid 63353:tid 63378] [client 212.30.33.28:62327] [client 212.30.33.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTarextg8HdYG392GAgTWwAAAJY"]
[Mon Dec 08 18:50:07.007972 2025] [:error] [pid 58759:tid 58813] [client 212.30.33.5:44139] [client 212.30.33.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.5, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTatX_6HZGkO2H0XX-iPQAAAANc"]
[Mon Dec 08 18:58:14.305954 2025] [:error] [pid 58760:tid 58826] [client 212.30.33.27:34055] [client 212.30.33.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.27, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTavRmqmF_jKbCz9E6lnMgAAAAk"]
[Mon Dec 08 19:06:18.095363 2025] [:error] [pid 63353:tid 63380] [client 212.30.33.43:30435] [client 212.30.33.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTaxKhtg8HdYG392GAgcKwAAAJg"]
[Mon Dec 08 19:14:25.366490 2025] [:error] [pid 58847:tid 58869] [client 212.30.33.209:47113] [client 212.30.33.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.209, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTazEXy4UHQXWKMwpHn43wAAARA"]
[Mon Dec 08 19:22:27.351610 2025] [:error] [pid 63353:tid 63358] [client 212.30.33.27:23731] [client 212.30.33.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.27, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTa08xtg8HdYG392GAgk4gAAAII"]
[Mon Dec 08 19:30:23.359542 2025] [:error] [pid 58760:tid 58826] [client 212.30.33.12:29923] [client 212.30.33.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.12, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTa2z2qmF_jKbCz9E6l0oAAAAAk"]
[Mon Dec 08 19:38:25.076693 2025] [:error] [pid 58760:tid 58831] [client 212.30.33.21:25499] [client 212.30.33.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTa4sWqmF_jKbCz9E6l4WQAAAA4"]
[Mon Dec 08 22:10:55.584768 2025] [:error] [pid 48541:tid 48564] [client 106.54.62.156:46710] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTbcbwSNhJPArxLCdWEQMQAAARU"]
[Tue Dec 09 02:04:51.966507 2025] [:error] [pid 17588:tid 17635] [client 104.167.25.34:51997] [client 104.167.25.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aTcTQzfolJgrovDIxbRtXwAAAI8"]
[Tue Dec 09 02:05:02.180757 2025] [:error] [pid 17588:tid 17642] [client 45.3.35.114:52445] [client 45.3.35.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTcTTjfolJgrovDIxbRtdAAAAJY"]
[Tue Dec 09 02:05:03.268140 2025] [:error] [pid 57134:tid 57186] [client 216.26.241.74:54869] [client 216.26.241.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.svn/wc.db"] [unique_id "aTcTT1n7_Hlbg-DXKIsaTwAAAEw"]
[Tue Dec 09 05:04:58.214342 2025] [autoindex:error] [pid 26689:tid 26756] [client 4.194.144.102:57970] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Dec 09 05:04:58.304341 2025] [access_compat:error] [pid 26689:tid 26747] [client 4.194.144.102:57970] AH01797: client denied by server configuration: /home/hbtwocom/public_html/wp-content/updraft/, referer: https://duckduckgo.com/
[Tue Dec 09 05:05:04.727644 2025] [autoindex:error] [pid 26689:tid 26743] [client 4.194.144.102:57970] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Dec 09 05:05:04.819825 2025] [autoindex:error] [pid 26689:tid 26737] [client 4.194.144.102:57970] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Dec 09 05:05:04.914875 2025] [autoindex:error] [pid 26689:tid 26758] [client 4.194.144.102:57970] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Dec 09 05:05:05.007241 2025] [autoindex:error] [pid 26689:tid 26757] [client 4.194.144.102:57970] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Dec 09 05:05:05.102839 2025] [autoindex:error] [pid 26689:tid 26748] [client 4.194.144.102:57970] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Dec 09 05:05:05.195400 2025] [autoindex:error] [pid 26689:tid 26739] [client 4.194.144.102:57970] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Dec 09 05:05:05.289352 2025] [autoindex:error] [pid 26689:tid 26749] [client 4.194.144.102:57970] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Dec 09 05:05:05.383734 2025] [autoindex:error] [pid 26689:tid 26754] [client 4.194.144.102:57970] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Dec 09 05:05:05.471748 2025] [:error] [pid 26689:tid 26741] [client 4.194.144.102:57970] [client 4.194.144.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTc9gdkbfj8nyBvIyRAiNwAAAQY"], referer: https://www.bing.com/
[Tue Dec 09 06:21:46.545296 2025] [autoindex:error] [pid 62124:tid 62130] [client 165.22.223.41:64676] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Dec 09 09:24:34.155175 2025] [:error] [pid 26689:tid 26739] [client 45.86.202.155:35885] [client 45.86.202.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTd6Utkbfj8nyBvIyRBxUQAAAQQ"]
[Tue Dec 09 09:24:44.828632 2025] [:error] [pid 6097:tid 6122] [client 45.86.202.135:28827] [client 45.86.202.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aTd6XOY9nDD1R9gHO2TUpQAAAdc"]
[Tue Dec 09 09:24:45.499691 2025] [:error] [pid 62041:tid 62117] [client 45.86.202.142:46785] [client 45.86.202.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "aTd6XfOmnJGvfaNPxPOBMQAAAJQ"]
[Tue Dec 09 11:22:07.690363 2025] [:error] [pid 62124:tid 62146] [client 45.138.16.233:53924] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "aTeV31raBX51GaCVVuWL7gAAANM"]
[Tue Dec 09 11:22:10.019623 2025] [:error] [pid 26689:tid 26757] [client 45.138.16.233:54207] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/postnews.php"] [unique_id "aTeV4tkbfj8nyBvIyRCNBwAAARU"]
[Tue Dec 09 11:22:10.621974 2025] [:error] [pid 62039:tid 62061] [client 45.138.16.233:54287] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/postnews.php"] [unique_id "aTeV4q-WdjFepfLrlW71EwAAABI"]
[Tue Dec 09 11:54:25.778957 2025] [:error] [pid 6053:tid 6072] [client 51.77.43.178:45002] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTedcSHz_Tnml8kdMwwGdQAAAZE"]
[Tue Dec 09 11:54:29.570447 2025] [:error] [pid 6097:tid 6112] [client 51.77.43.178:42552] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTeddeY9nDD1R9gHO2QDGQAAAc0"]
[Tue Dec 09 11:54:35.234784 2025] [:error] [pid 6053:tid 6059] [client 51.77.43.178:42560] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTedeyHz_Tnml8kdMwwGewAAAYQ"]
[Tue Dec 09 11:54:40.312659 2025] [:error] [pid 62040:tid 62076] [client 51.77.43.178:44850] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTedgPkSVjwLGqZL-9Kt5AAAAEY"]
[Tue Dec 09 11:54:45.750536 2025] [:error] [pid 62041:tid 62111] [client 51.77.43.178:44862] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTedhfOmnJGvfaNPxPOgqQAAAI4"]
[Tue Dec 09 11:54:52.025716 2025] [:error] [pid 6053:tid 6064] [client 51.77.43.178:46850] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTedjCHz_Tnml8kdMwwGhgAAAYk"]
[Tue Dec 09 11:54:55.981631 2025] [:error] [pid 62124:tid 62142] [client 51.77.43.178:46862] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTedj1raBX51GaCVVuWTYgAAAM8"]
[Tue Dec 09 11:55:00.841000 2025] [:error] [pid 6097:tid 6116] [client 51.77.43.178:46498] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTedlOY9nDD1R9gHO2QDLwAAAdE"]
[Tue Dec 09 11:55:09.070765 2025] [:error] [pid 62041:tid 62103] [client 51.77.43.178:46506] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTednfOmnJGvfaNPxPOg1AAAAIY"]
[Tue Dec 09 11:55:14.495119 2025] [:error] [pid 62040:tid 62088] [client 51.77.43.178:34742] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTedovkSVjwLGqZL-9KuEAAAAFI"]
[Tue Dec 09 11:55:18.015237 2025] [:error] [pid 6097:tid 6110] [client 51.77.43.178:34758] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTedpuY9nDD1R9gHO2QDPgAAAcs"]
[Tue Dec 09 11:57:16.527256 2025] [:error] [pid 7287:tid 7289] [client 51.77.43.178:57432] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTeeHP3UQf3HGDaVS5PJcQAAAAA"]
[Tue Dec 09 11:57:22.986203 2025] [:error] [pid 7382:tid 7403] [client 51.77.43.178:33802] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTeeIidEXhamGkzwq-j0eQAAAck"]
[Tue Dec 09 11:57:30.073475 2025] [:error] [pid 7324:tid 7339] [client 51.77.43.178:33804] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTeeKuf70zXc9zH4rTKiDgAAAUo"]
[Tue Dec 09 11:57:34.483911 2025] [:error] [pid 7287:tid 7306] [client 51.77.43.178:40418] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTeeLv3UQf3HGDaVS5PJhAAAABE"]
[Tue Dec 09 11:57:39.885628 2025] [:error] [pid 7382:tid 7397] [client 51.77.43.178:49910] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTeeMydEXhamGkzwq-j0ngAAAcM"]
[Tue Dec 09 11:57:43.686739 2025] [:error] [pid 7382:tid 7408] [client 51.77.43.178:49924] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTeeNydEXhamGkzwq-j0pAAAAc4"]
[Tue Dec 09 11:57:47.237840 2025] [:error] [pid 7382:tid 7416] [client 51.77.43.178:49932] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTeeOydEXhamGkzwq-j0qwAAAdY"]
[Tue Dec 09 11:57:51.060506 2025] [:error] [pid 7325:tid 7362] [client 51.77.43.178:54882] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTeePwqEQlZnpyQAsW0ivgAAAYY"]
[Tue Dec 09 11:57:54.852044 2025] [:error] [pid 7325:tid 7370] [client 51.77.43.178:54898] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTeeQgqEQlZnpyQAsW0ixAAAAY4"]
[Tue Dec 09 11:57:58.708055 2025] [:error] [pid 7382:tid 7404] [client 51.77.43.178:54914] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTeeRidEXhamGkzwq-j0zwAAAco"]
[Tue Dec 09 11:58:03.773981 2025] [:error] [pid 7382:tid 7410] [client 51.77.43.178:41282] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTeeSydEXhamGkzwq-j05AAAAdA"]
[Tue Dec 09 11:58:09.160607 2025] [:error] [pid 7382:tid 7413] [client 51.77.43.178:41298] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aTeeUSdEXhamGkzwq-j08QAAAdM"]
[Tue Dec 09 12:00:13.179180 2025] [:error] [pid 7325:tid 7360] [client 51.77.43.178:55292] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aTeezQqEQlZnpyQAsW0j3wAAAYQ"]
[Tue Dec 09 12:00:15.953215 2025] [:error] [pid 7287:tid 7310] [client 51.77.43.178:34828] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aTeez_3UQf3HGDaVS5PK1wAAABU"]
[Tue Dec 09 12:00:18.146107 2025] [:error] [pid 7325:tid 7380] [client 51.77.43.178:34838] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aTee0gqEQlZnpyQAsW0j5QAAAZg"]
[Tue Dec 09 12:00:18.878849 2025] [:error] [pid 7325:tid 7374] [client 51.77.43.178:34854] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aTee0gqEQlZnpyQAsW0j5gAAAZI"]
[Tue Dec 09 12:00:21.847516 2025] [:error] [pid 7325:tid 7364] [client 51.77.43.178:34256] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aTee1QqEQlZnpyQAsW0j6wAAAYg"]
[Tue Dec 09 12:00:24.938877 2025] [:error] [pid 7324:tid 7343] [client 51.77.43.178:34258] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aTee2Of70zXc9zH4rTKjJwAAAU4"]
[Tue Dec 09 12:00:26.277645 2025] [:error] [pid 7382:tid 7407] [client 51.77.43.178:34268] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aTee2idEXhamGkzwq-j1-AAAAc0"]
[Tue Dec 09 12:00:29.225531 2025] [:error] [pid 7382:tid 7400] [client 51.77.43.178:34282] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aTee3SdEXhamGkzwq-j1_gAAAcY"]
[Tue Dec 09 12:00:31.369953 2025] [:error] [pid 7287:tid 7305] [client 51.77.43.178:51326] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aTee3_3UQf3HGDaVS5PLCAAAABA"]
[Tue Dec 09 12:00:31.779337 2025] [:error] [pid 7287:tid 7301] [client 51.77.43.178:51334] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTee3_3UQf3HGDaVS5PLCQAAAAw"]
[Tue Dec 09 12:00:35.625080 2025] [:error] [pid 7325:tid 7374] [client 51.77.43.178:51340] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTee4wqEQlZnpyQAsW0kEAAAAZI"]
[Tue Dec 09 12:00:36.110058 2025] [:error] [pid 7287:tid 7311] [client 51.77.43.178:51352] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aTee5P3UQf3HGDaVS5PLJgAAABY"]
[Tue Dec 09 12:00:38.642967 2025] [:error] [pid 7287:tid 7300] [client 51.77.43.178:51366] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTee5v3UQf3HGDaVS5PLLgAAAAs"]
[Tue Dec 09 12:00:41.314075 2025] [:error] [pid 7324:tid 7340] [client 51.77.43.178:50878] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTee6ef70zXc9zH4rTKjXAAAAUs"]
[Tue Dec 09 12:00:43.912929 2025] [:error] [pid 7287:tid 7297] [client 51.77.43.178:50888] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTee6_3UQf3HGDaVS5PLOgAAAAg"]
[Tue Dec 09 12:00:44.951649 2025] [:error] [pid 7287:tid 7298] [client 51.77.43.178:50904] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aTee7P3UQf3HGDaVS5PLOwAAAAk"]
[Tue Dec 09 12:00:47.617022 2025] [:error] [pid 7287:tid 7310] [client 51.77.43.178:50920] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTee7_3UQf3HGDaVS5PLPAAAABU"]
[Tue Dec 09 12:00:50.580694 2025] [:error] [pid 7382:tid 7402] [client 51.77.43.178:60850] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTee8idEXhamGkzwq-j2PgAAAcg"]
[Tue Dec 09 12:00:53.202228 2025] [:error] [pid 7324:tid 7353] [client 51.77.43.178:60858] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTee9ef70zXc9zH4rTKjjgAAAVg"]
[Tue Dec 09 12:00:53.442669 2025] [:error] [pid 7324:tid 7334] [client 51.77.43.178:60874] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTee9ef70zXc9zH4rTKjjwAAAUU"]
[Tue Dec 09 12:00:56.709281 2025] [:error] [pid 7325:tid 7361] [client 51.77.43.178:60888] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTee-AqEQlZnpyQAsW0kNQAAAYU"]
[Tue Dec 09 12:01:00.405019 2025] [:error] [pid 7324:tid 7330] [client 51.77.43.178:42428] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTee_Of70zXc9zH4rTKjkgAAAUE"]
[Tue Dec 09 12:01:00.791770 2025] [:error] [pid 7325:tid 7370] [client 51.77.43.178:42422] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTee_AqEQlZnpyQAsW0kOgAAAY4"]
[Tue Dec 09 12:01:03.496758 2025] [:error] [pid 7382:tid 7401] [client 51.77.43.178:42432] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTee_ydEXhamGkzwq-j2QwAAAcc"]
[Tue Dec 09 12:01:05.643236 2025] [:error] [pid 7287:tid 7302] [client 51.77.43.178:42436] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTefAf3UQf3HGDaVS5PLQgAAAA0"]
[Tue Dec 09 12:01:06.392076 2025] [:error] [pid 7324:tid 7349] [client 51.77.43.178:42450] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aTefAuf70zXc9zH4rTKjlQAAAVQ"]
[Tue Dec 09 12:08:19.105279 2025] [:error] [pid 7287:tid 7305] [client 51.77.43.178:47186] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aTegs_3UQf3HGDaVS5PNtAAAABA"]
[Tue Dec 09 12:08:21.654507 2025] [:error] [pid 7325:tid 7365] [client 51.77.43.178:47302] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches777%20pg.aspx"] [unique_id "aTegtQqEQlZnpyQAsW0m8QAAAYk"]
[Tue Dec 09 12:08:22.914647 2025] [:error] [pid 7382:tid 7405] [client 51.77.43.178:44124] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aTegtidEXhamGkzwq-j4yQAAAcs"]
[Tue Dec 09 12:08:25.835795 2025] [:error] [pid 12069:tid 12087] [client 51.77.43.178:44134] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aTeguWwNDNgPF6LHYDSR0AAAAFA"]
[Tue Dec 09 12:08:26.300290 2025] [:error] [pid 7287:tid 7297] [client 51.77.43.178:44128] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20ca.aspx"] [unique_id "aTeguv3UQf3HGDaVS5PNuAAAAAg"]
[Tue Dec 09 12:08:29.791331 2025] [:error] [pid 7324:tid 7349] [client 51.77.43.178:47682] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTegvef70zXc9zH4rTKmQAAAAVQ"]
[Tue Dec 09 12:08:31.318234 2025] [:error] [pid 7382:tid 7406] [client 51.77.43.178:47690] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20777.aspx"] [unique_id "aTegvydEXhamGkzwq-j41QAAAcw"]
[Tue Dec 09 12:08:32.782394 2025] [:error] [pid 12069:tid 12092] [client 51.77.43.178:47694] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTegwGwNDNgPF6LHYDSR2gAAAFU"]
[Tue Dec 09 12:08:34.995417 2025] [:error] [pid 7382:tid 7408] [client 51.77.43.178:47698] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%2099.aspx"] [unique_id "aTegwidEXhamGkzwq-j43AAAAc4"]
[Tue Dec 09 12:08:35.736366 2025] [:error] [pid 7382:tid 7418] [client 51.77.43.178:47702] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTegwydEXhamGkzwq-j44AAAAdg"]
[Tue Dec 09 12:08:39.318958 2025] [:error] [pid 7382:tid 7408] [client 51.77.43.178:47714] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20auto.aspx"] [unique_id "aTegxydEXhamGkzwq-j47wAAAc4"]
[Tue Dec 09 12:08:40.409618 2025] [:error] [pid 7287:tid 7299] [client 51.77.43.178:50456] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTegyP3UQf3HGDaVS5PNzwAAAAo"]
[Tue Dec 09 12:08:43.169687 2025] [:error] [pid 7382:tid 7405] [client 51.77.43.178:50470] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20demo.aspx"] [unique_id "aTegyydEXhamGkzwq-j4_QAAAcs"]
[Tue Dec 09 12:08:44.060397 2025] [:error] [pid 12069:tid 12088] [client 51.77.43.178:50482] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTegzGwNDNgPF6LHYDSR-wAAAFE"]
[Tue Dec 09 12:08:46.064630 2025] [:error] [pid 7324:tid 7350] [client 51.77.43.178:50496] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet.aspx"] [unique_id "aTegzuf70zXc9zH4rTKmZwAAAVU"]
[Tue Dec 09 12:08:47.203667 2025] [:error] [pid 7324:tid 7353] [client 51.77.43.178:50508] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTegz-f70zXc9zH4rTKmagAAAVg"]
[Tue Dec 09 12:08:49.816418 2025] [:error] [pid 7287:tid 7290] [client 51.77.43.178:50098] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20168.aspx"] [unique_id "aTeg0f3UQf3HGDaVS5PN8gAAAAE"]
[Tue Dec 09 12:08:49.845644 2025] [:error] [pid 7382:tid 7409] [client 51.77.43.178:50514] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slotxo%20wallet.aspx"] [unique_id "aTeg0SdEXhamGkzwq-j5BgAAAc8"]
[Tue Dec 09 12:08:53.902240 2025] [:error] [pid 7325:tid 7377] [client 51.77.43.178:50108] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20c4.aspx"] [unique_id "aTeg1QqEQlZnpyQAsW0nLwAAAZU"]
[Tue Dec 09 12:08:54.230150 2025] [:error] [pid 7382:tid 7402] [client 51.77.43.178:50104] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spg%20slot.aspx"] [unique_id "aTeg1idEXhamGkzwq-j5FAAAAcg"]
[Tue Dec 09 12:08:56.573987 2025] [:error] [pid 7382:tid 7404] [client 51.77.43.178:50114] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20sa.aspx"] [unique_id "aTeg2CdEXhamGkzwq-j5HgAAAco"]
[Tue Dec 09 12:08:58.899630 2025] [:error] [pid 7382:tid 7397] [client 51.77.43.178:50122] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/spx%20slot.aspx"] [unique_id "aTeg2idEXhamGkzwq-j5IgAAAcM"]
[Tue Dec 09 12:08:59.502494 2025] [:error] [pid 7325:tid 7360] [client 51.77.43.178:50136] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20slot.aspx"] [unique_id "aTeg2wqEQlZnpyQAsW0nOwAAAYQ"]
[Tue Dec 09 12:09:01.899266 2025] [:error] [pid 12069:tid 12080] [client 51.77.43.178:51090] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20pg%201688.aspx"] [unique_id "aTeg3WwNDNgPF6LHYDSSQgAAAEk"]
[Tue Dec 09 12:09:02.622317 2025] [:error] [pid 12069:tid 12087] [client 51.77.43.178:51094] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20vip.aspx"] [unique_id "aTeg3mwNDNgPF6LHYDSSRQAAAFA"]
[Tue Dec 09 12:09:05.307203 2025] [:error] [pid 12069:tid 12074] [client 51.77.43.178:51096] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/super%20slot.aspx"] [unique_id "aTeg4WwNDNgPF6LHYDSSTwAAAEM"]
[Tue Dec 09 12:09:05.337092 2025] [:error] [pid 12069:tid 12075] [client 51.77.43.178:51112] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet.aspx"] [unique_id "aTeg4WwNDNgPF6LHYDSSUQAAAEQ"]
[Tue Dec 09 12:09:10.696085 2025] [:error] [pid 12069:tid 12077] [client 51.77.43.178:48468] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet%20net.aspx"] [unique_id "aTeg5mwNDNgPF6LHYDSSZQAAAEY"]
[Tue Dec 09 12:09:14.892060 2025] [:error] [pid 7382:tid 7400] [client 51.77.43.178:48476] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20wallet.aspx"] [unique_id "aTeg6idEXhamGkzwq-j5MQAAAcY"]
[Tue Dec 09 12:20:24.428768 2025] [:error] [pid 7324:tid 7330] [client 43.157.191.20:37358] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTejiOf70zXc9zH4rTKodQAAAUE"]
[Tue Dec 09 14:53:56.806944 2025] [:error] [pid 7324:tid 7342] [client 45.138.16.233:64179] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "aTfHhOf70zXc9zH4rTLUCAAAAU0"], referer: www.google.com
[Tue Dec 09 14:53:56.808008 2025] [:error] [pid 7324:tid 7344] [client 45.138.16.233:51362] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTfHhOf70zXc9zH4rTLUCQAAAU8"]
[Tue Dec 09 14:53:56.808245 2025] [:error] [pid 7382:tid 7402] [client 45.138.16.233:56952] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHhCdEXhamGkzwq-gxsgAAAcg"]
[Tue Dec 09 14:53:56.812186 2025] [:error] [pid 7324:tid 7341] [client 45.138.16.233:63862] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHhOf70zXc9zH4rTLUCgAAAUw"], referer: www.google.com
[Tue Dec 09 14:53:56.813247 2025] [:error] [pid 7382:tid 7398] [client 45.138.16.233:57312] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHhCdEXhamGkzwq-gxswAAAcQ"], referer: www.google.com
[Tue Dec 09 14:53:57.407281 2025] [:error] [pid 7324:tid 7349] [client 45.138.16.233:62264] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHhef70zXc9zH4rTLUDgAAAVQ"]
[Tue Dec 09 14:53:57.410120 2025] [:error] [pid 7382:tid 7418] [client 45.138.16.233:62262] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "aTfHhSdEXhamGkzwq-gxuAAAAdg"], referer: www.google.com
[Tue Dec 09 14:53:57.413279 2025] [:error] [pid 7287:tid 7296] [client 45.138.16.233:62265] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTfHhf3UQf3HGDaVS5P9lgAAAAc"]
[Tue Dec 09 14:53:57.413946 2025] [:error] [pid 7382:tid 7414] [client 45.138.16.233:57452] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHhSdEXhamGkzwq-gxuQAAAdQ"], referer: www.google.com
[Tue Dec 09 14:53:57.417467 2025] [:error] [pid 7324:tid 7335] [client 45.138.16.233:62272] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHhef70zXc9zH4rTLUDwAAAUY"], referer: www.google.com
[Tue Dec 09 14:53:58.015802 2025] [:error] [pid 59388:tid 59399] [client 45.138.16.233:59734] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHht7acjYK4IXwCBWi1QAAAIk"]
[Tue Dec 09 14:53:58.031268 2025] [:error] [pid 7324:tid 7340] [client 45.138.16.233:59812] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHhuf70zXc9zH4rTLUFQAAAUs"], referer: www.google.com
[Tue Dec 09 14:53:58.034004 2025] [:error] [pid 7325:tid 7379] [client 45.138.16.233:59786] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "aTfHhgqEQlZnpyQAsW1aGQAAAZc"], referer: www.google.com
[Tue Dec 09 14:53:58.034445 2025] [:error] [pid 7325:tid 7372] [client 45.138.16.233:59828] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHhgqEQlZnpyQAsW1aGgAAAZA"], referer: www.google.com
[Tue Dec 09 14:53:58.039359 2025] [:error] [pid 59388:tid 59401] [client 45.138.16.233:59829] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTfHht7acjYK4IXwCBWi1gAAAIs"]
[Tue Dec 09 14:53:58.613492 2025] [:error] [pid 59388:tid 59390] [client 45.138.16.233:51023] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHht7acjYK4IXwCBWi4AAAAIA"]
[Tue Dec 09 14:53:58.625367 2025] [:error] [pid 7324:tid 7343] [client 45.138.16.233:58337] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHhuf70zXc9zH4rTLUGAAAAU4"], referer: www.google.com
[Tue Dec 09 14:53:58.628525 2025] [:error] [pid 12069:tid 12095] [client 45.138.16.233:58340] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHhmwNDNgPF6LHYDTcaAAAAFg"], referer: www.google.com
[Tue Dec 09 14:53:58.639379 2025] [:error] [pid 7382:tid 7399] [client 45.138.16.233:58342] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTfHhidEXhamGkzwq-gxxAAAAcU"]
[Tue Dec 09 14:53:58.639587 2025] [:error] [pid 59388:tid 59404] [client 45.138.16.233:58341] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "aTfHht7acjYK4IXwCBWi4QAAAI4"], referer: www.google.com
[Tue Dec 09 14:53:59.213278 2025] [:error] [pid 12069:tid 12085] [client 45.138.16.233:60570] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHh2wNDNgPF6LHYDTcaQAAAE4"]
[Tue Dec 09 14:53:59.222333 2025] [:error] [pid 59388:tid 59402] [client 45.138.16.233:60635] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHh97acjYK4IXwCBWi6gAAAIw"], referer: www.google.com
[Tue Dec 09 14:53:59.224170 2025] [:error] [pid 59388:tid 59409] [client 45.138.16.233:60627] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHh97acjYK4IXwCBWi6wAAAJM"], referer: www.google.com
[Tue Dec 09 14:53:59.233235 2025] [:error] [pid 59388:tid 59412] [client 45.138.16.233:60676] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTfHh97acjYK4IXwCBWi7AAAAJY"]
[Tue Dec 09 14:53:59.234461 2025] [:error] [pid 12069:tid 12084] [client 45.138.16.233:60679] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "aTfHh2wNDNgPF6LHYDTcagAAAE0"], referer: www.google.com
[Tue Dec 09 14:54:00.416886 2025] [:error] [pid 7382:tid 7409] [client 45.138.16.233:57625] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHiCdEXhamGkzwq-gx2QAAAc8"], referer: www.google.com
[Tue Dec 09 14:54:00.431300 2025] [:error] [pid 7382:tid 7416] [client 45.138.16.233:57791] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHiCdEXhamGkzwq-gx2gAAAdY"], referer: www.google.com
[Tue Dec 09 14:54:01.608839 2025] [:error] [pid 59388:tid 59407] [client 45.138.16.233:60704] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHid7acjYK4IXwCBWi_AAAAJE"], referer: www.google.com
[Tue Dec 09 14:54:01.636367 2025] [:error] [pid 7324:tid 7341] [client 45.138.16.233:60718] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHief70zXc9zH4rTLUHwAAAUw"], referer: www.google.com
[Tue Dec 09 14:54:02.820901 2025] [:error] [pid 59388:tid 59396] [client 45.138.16.233:57105] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHit7acjYK4IXwCBWjCQAAAIY"], referer: www.google.com
[Tue Dec 09 14:54:02.836027 2025] [:error] [pid 12069:tid 12093] [client 45.138.16.233:57101] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHimwNDNgPF6LHYDTcdAAAAFY"], referer: www.google.com
[Tue Dec 09 14:54:04.020433 2025] [:error] [pid 7325:tid 7361] [client 45.138.16.233:56902] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHjAqEQlZnpyQAsW1aKAAAAYU"], referer: www.google.com
[Tue Dec 09 14:54:04.044787 2025] [:error] [pid 7325:tid 7369] [client 45.138.16.233:58960] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHjAqEQlZnpyQAsW1aKQAAAY0"], referer: www.google.com
[Tue Dec 09 14:54:05.228492 2025] [:error] [pid 7382:tid 7409] [client 45.138.16.233:59428] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHjSdEXhamGkzwq-gx8gAAAc8"], referer: www.google.com
[Tue Dec 09 14:54:05.232596 2025] [:error] [pid 59388:tid 59412] [client 45.138.16.233:57741] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHjd7acjYK4IXwCBWjIQAAAJY"], referer: www.google.com
[Tue Dec 09 14:56:12.612916 2025] [:error] [pid 7287:tid 7302] [client 103.77.106.81:55506] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aTfIDP3UQf3HGDaVS5P_TQAAAA0"]
[Tue Dec 09 14:56:43.184949 2025] [:error] [pid 59388:tid 59401] [client 103.77.106.81:63984] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aTfIK97acjYK4IXwCBWmMwAAAIs"]
[Tue Dec 09 16:29:35.282347 2025] [:error] [pid 36456:tid 36459] [client 203.2.64.59:60307] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTfd7x0pAnOyfXl_v43IHwAAAIE"]
[Tue Dec 09 17:36:18.848289 2025] [:error] [pid 36456:tid 36475] [client 160.30.179.245:42368] [client 160.30.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "aTftkh0pAnOyfXl_v43o2gAAAJE"]
[Tue Dec 09 17:36:18.871761 2025] [:error] [pid 30500:tid 30568] [client 160.30.179.245:42370] [client 160.30.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTftkq2eIIK3JPWHCXWO7AAAAYs"]
[Tue Dec 09 17:36:18.925925 2025] [:error] [pid 30500:tid 30565] [client 160.30.179.245:42378] [client 160.30.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/core/.env"] [unique_id "aTftkq2eIIK3JPWHCXWO7QAAAYg"]
[Tue Dec 09 17:36:18.926068 2025] [:error] [pid 36456:tid 36477] [client 160.30.179.245:42356] [client 160.30.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "aTftkh0pAnOyfXl_v43o2wAAAJM"]
[Tue Dec 09 17:36:19.330096 2025] [:error] [pid 36456:tid 36463] [client 160.30.179.245:42426] [client 160.30.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTftkx0pAnOyfXl_v43o3AAAAIU"]
[Tue Dec 09 17:36:19.331390 2025] [:error] [pid 30500:tid 30575] [client 160.30.179.245:42400] [client 160.30.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "aTftk62eIIK3JPWHCXWO7gAAAZI"]
[Tue Dec 09 17:36:19.413513 2025] [:error] [pid 36456:tid 36470] [client 160.30.179.245:42402] [client 160.30.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/core/.env"] [unique_id "aTftkx0pAnOyfXl_v43o3QAAAIw"]
[Tue Dec 09 17:36:19.413798 2025] [:error] [pid 30498:tid 30508] [client 160.30.179.245:42414] [client 160.30.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "aTftkx2mcZJQ5qP_RC0CFwAAAAY"]
[Tue Dec 09 19:53:49.618827 2025] [:error] [pid 30591:tid 30607] [client 35.192.77.233:61744] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTgNzRG-g76drVdWQUVtKgAAAE0"]
[Tue Dec 09 19:53:50.071052 2025] [:error] [pid 30500:tid 30576] [client 35.192.77.233:64072] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTgNzq2eIIK3JPWHCXXMTAAAAZM"]
[Tue Dec 09 19:53:50.508977 2025] [:error] [pid 30498:tid 30522] [client 35.192.77.233:61001] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aTgNzh2mcZJQ5qP_RC0m_AAAABQ"]
[Wed Dec 10 04:44:46.057713 2025] [:error] [pid 11354:tid 11378] [client 182.42.111.213:41838] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTiKPu2TFO6mVSqWP8TtUQAAANU"]
[Wed Dec 10 05:34:05.033099 2025] [:error] [pid 11267:tid 11311] [client 45.148.10.154:53100] [client 45.148.10.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aTiVzYY2npWNIVl2IDyOfgAAAE4"]
[Wed Dec 10 06:08:59.117114 2025] [:error] [pid 11266:tid 11281] [client 101.32.15.141:59046] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTid-yXL_Qb0Ip3FW3mViwAAAAs"]
[Wed Dec 10 07:02:54.692071 2025] [:error] [pid 11268:tid 11345] [client 136.158.60.207:6809] [client 136.158.60.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.60.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTiqnrbpLcj9WqyQndwhGQAAAJU"]
[Wed Dec 10 08:40:52.311531 2025] [:error] [pid 16597:tid 16631] [client 136.158.60.207:21508] [client 136.158.60.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTjBlG4Hlu0QtpUGkRRb6QAAAcQ"]
[Wed Dec 10 08:42:33.667143 2025] [:error] [pid 11266:tid 11275] [client 136.158.60.207:25322] [client 136.158.60.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.60.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTjB-SXL_Qb0Ip3FW3m7oQAAAAU"]
[Wed Dec 10 08:44:02.235380 2025] [:error] [pid 21327:tid 21351] [client 136.158.60.207:28607] [client 136.158.60.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.60.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTjCUtuj_E2YnwjFG09omwAAApY"]
[Wed Dec 10 10:17:20.683921 2025] [:error] [pid 21327:tid 21345] [client 34.208.19.227:40220] [client 34.208.19.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTjYMNuj_E2YnwjFG093UgAAApA"]
[Wed Dec 10 10:53:40.993564 2025] [:error] [pid 21356:tid 21381] [client 3.219.218.205:50388] [client 3.219.218.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aTjgtKfG7wIA5S25SleEegAAAtY"]
[Wed Dec 10 16:39:54.904237 2025] [:error] [pid 36975:tid 37003] [client 182.42.105.85:34449] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTkx2t_ZNQ3zMmb38BEvGAAAAJc"]
[Wed Dec 10 21:50:39.160928 2025] [:error] [pid 36976:tid 37029] [client 134.209.122.127:50721] [client 134.209.122.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.122.127, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTl6rySpHW5KVaY9tJm_IAAAANY"]
[Thu Dec 11 00:45:05.709644 2025] [:error] [pid 10434:tid 10468] [client 45.128.199.174:44495] [client 45.128.199.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.174, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTmjkWbAnZFInxx5bO-i1AAAAEE"]
[Thu Dec 11 02:03:36.526026 2025] [:error] [pid 10520:tid 10527] [client 45.128.199.185:39085] [client 45.128.199.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTm1-ENrVZZksrD9M7ElbgAAAQU"]
[Thu Dec 11 02:10:04.893441 2025] [:error] [pid 42065:tid 42070] [client 45.128.199.163:62571] [client 45.128.199.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTm3fPkj8kMSvqJobVUTngAAAUM"]
[Thu Dec 11 02:10:04.896621 2025] [:error] [pid 42065:tid 42070] [client 45.128.199.163:62571] [client 45.128.199.163] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||hotbooksbookeeping2.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTm3fPkj8kMSvqJobVUTngAAAUM"]
[Thu Dec 11 02:16:24.405116 2025] [:error] [pid 10520:tid 10526] [client 45.128.199.175:45769] [client 45.128.199.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.175, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTm4-ENrVZZksrD9M7EoUwAAAQQ"]
[Thu Dec 11 02:23:04.314384 2025] [:error] [pid 42065:tid 42068] [client 45.128.199.171:59057] [client 45.128.199.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTm6iPkj8kMSvqJobVUWggAAAUE"]
[Thu Dec 11 02:29:47.374422 2025] [:error] [pid 10433:tid 10449] [client 45.128.199.163:28711] [client 45.128.199.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTm8G2fQ1q-Ic7huYoUJVgAAAMw"]
[Thu Dec 11 02:29:47.376103 2025] [:error] [pid 10433:tid 10449] [client 45.128.199.163:28711] [client 45.128.199.163] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||hotbooksbookeeping2.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTm8G2fQ1q-Ic7huYoUJVgAAAMw"]
[Thu Dec 11 02:36:07.961710 2025] [:error] [pid 10520:tid 10541] [client 45.128.199.209:26067] [client 45.128.199.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.209, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTm9l0NrVZZksrD9M7Et_AAAARM"]
[Thu Dec 11 02:42:40.417337 2025] [:error] [pid 42065:tid 42081] [client 45.128.199.239:52275] [client 45.128.199.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.239, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTm_IPkj8kMSvqJobVUY5AAAAU4"]
[Thu Dec 11 02:49:23.387203 2025] [:error] [pid 10434:tid 10486] [client 45.128.199.148:33849] [client 45.128.199.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnAs2bAnZFInxx5bO_JkgAAAFM"]
[Thu Dec 11 03:02:23.670990 2025] [:error] [pid 10434:tid 10475] [client 45.8.17.192:53443] [client 45.8.17.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.192, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnDv2bAnZFInxx5bO_MEAAAAEg"]
[Thu Dec 11 03:09:05.512704 2025] [:error] [pid 27893:tid 27900] [client 45.8.17.175:35887] [client 45.8.17.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.175, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnFUVAm_ScxuQGtQnSAYAAAAIU"]
[Thu Dec 11 03:15:53.554610 2025] [:error] [pid 10434:tid 10475] [client 45.128.199.153:20539] [client 45.128.199.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.153, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnG6WbAnZFInxx5bO_PiQAAAEg"]
[Thu Dec 11 03:22:30.945286 2025] [:error] [pid 10520:tid 10545] [client 45.128.199.148:58745] [client 45.128.199.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnIdkNrVZZksrD9M7E-jgAAARc"]
[Thu Dec 11 03:29:08.350017 2025] [:error] [pid 10520:tid 10526] [client 45.128.199.227:20597] [client 45.128.199.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.227, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnKBENrVZZksrD9M7FAvwAAAQQ"]
[Thu Dec 11 03:35:35.791985 2025] [:error] [pid 37528:tid 37616] [client 45.128.199.169:52323] [client 45.128.199.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.169, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnLhxqXQCTisrpxySXnkQAAAEI"]
[Thu Dec 11 03:42:10.602044 2025] [:error] [pid 58228:tid 58284] [client 45.128.199.165:57191] [client 45.128.199.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnNEh3vfpCrnHjvR-5LAQAAAkY"]
[Thu Dec 11 03:48:49.124720 2025] [:error] [pid 10460:tid 10485] [client 45.128.199.162:48463] [client 45.128.199.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.162, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnOoc35nVUAkUR0E2MT5gAAAA4"]
[Thu Dec 11 03:55:20.392797 2025] [:error] [pid 41205:tid 41237] [client 45.128.199.157:54339] [client 45.128.199.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.157, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnQKFezGYcsM3x1mMdClQAAAEE"]
[Thu Dec 11 04:01:50.747096 2025] [:error] [pid 14092:tid 14115] [client 45.128.199.150:35485] [client 45.128.199.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnRrm1yJs96znfXT9P4AQAAANQ"]
[Thu Dec 11 04:08:36.372009 2025] [:error] [pid 14092:tid 14115] [client 45.128.199.174:53823] [client 45.128.199.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.174, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnTRG1yJs96znfXT9P-VAAAANQ"]
[Thu Dec 11 04:15:12.734512 2025] [:error] [pid 57991:tid 58045] [client 45.128.199.236:38197] [client 45.128.199.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.236, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnU0KPyGmNXA2ZsETbPQQAAAFc"]
[Thu Dec 11 04:21:41.357590 2025] [:error] [pid 57991:tid 58042] [client 45.128.199.204:64207] [client 45.128.199.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.204, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnWVaPyGmNXA2ZsETbQ3QAAAFQ"]
[Thu Dec 11 04:28:23.880617 2025] [:error] [pid 57992:tid 58070] [client 45.128.199.171:49087] [client 45.128.199.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnX5-Ueau0BMFF2vHnPUAAAAJU"]
[Thu Dec 11 04:35:07.405980 2025] [:error] [pid 27459:tid 27464] [client 45.128.199.158:33891] [client 45.128.199.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.158, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnZe1hPEXihPBKMpRNaRAAAAQM"]
[Thu Dec 11 04:41:45.873977 2025] [:error] [pid 27459:tid 27468] [client 45.128.199.172:56623] [client 45.128.199.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnbCVhPEXihPBKMpRNcmwAAAQc"]
[Thu Dec 11 04:48:36.590655 2025] [:error] [pid 27459:tid 27469] [client 45.128.199.154:57597] [client 45.128.199.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.154, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTncpFhPEXihPBKMpRNe4AAAAQg"]
[Thu Dec 11 04:55:10.538842 2025] [:error] [pid 57992:tid 58057] [client 45.128.199.204:40335] [client 45.128.199.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.204, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTneLuUeau0BMFF2vHnYWQAAAIg"]
[Thu Dec 11 05:01:38.613513 2025] [:error] [pid 35112:tid 35118] [client 45.128.199.174:54733] [client 45.128.199.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.174, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnfsp9ZpQ0WIeJhsJdhqwAAAUQ"]
[Thu Dec 11 05:08:16.895448 2025] [:error] [pid 27459:tid 27484] [client 45.128.199.219:49953] [client 45.128.199.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.219, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnhQFhPEXihPBKMpRNoxgAAARc"]
[Thu Dec 11 05:11:34.294309 2025] [:error] [pid 57991:tid 58037] [client 123.187.240.242:42609] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTniBqPyGmNXA2ZsETbgAgAAAE8"]
[Thu Dec 11 05:15:01.439913 2025] [:error] [pid 27459:tid 27474] [client 45.128.199.163:42881] [client 45.128.199.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTni1VhPEXihPBKMpRNq1wAAAQ0"]
[Thu Dec 11 05:28:08.516299 2025] [:error] [pid 57991:tid 58039] [client 45.128.199.238:54645] [client 45.128.199.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.238, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnl6KPyGmNXA2ZsETbjbgAAAFE"]
[Thu Dec 11 05:32:15.254645 2025] [proxy_fcgi:error] [pid 57992:tid 58070] [client 4.197.172.4:35355] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 05:32:16.342003 2025] [:error] [pid 57992:tid 58057] [client 4.197.172.4:35355] [client 4.197.172.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.172.4, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTnm4OUeau0BMFF2vHnjPAAAAIg"], referer: https://www.google.fr/
[Thu Dec 11 05:32:16.346844 2025] [proxy_fcgi:error] [pid 57992:tid 58057] [client 4.197.172.4:35355] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 05:32:17.589847 2025] [autoindex:error] [pid 57992:tid 58056] [client 4.197.172.4:35355] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Dec 11 05:34:43.691542 2025] [:error] [pid 27459:tid 27471] [client 45.128.199.153:59397] [client 45.128.199.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.153, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnnc1hPEXihPBKMpRNwCQAAAQo"]
[Thu Dec 11 05:41:28.487787 2025] [:error] [pid 27459:tid 27485] [client 45.128.199.198:59883] [client 45.128.199.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.198, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnpCFhPEXihPBKMpRNxlAAAARg"]
[Thu Dec 11 05:48:04.606015 2025] [:error] [pid 57991:tid 58038] [client 45.128.199.147:41077] [client 45.128.199.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.147, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnqlKPyGmNXA2ZsETbnJgAAAFA"]
[Thu Dec 11 05:53:40.350039 2025] [:error] [pid 57992:tid 58057] [client 104.234.19.111:44235] [client 104.234.19.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnr5OUeau0BMFF2vHnnhgAAAIg"]
[Thu Dec 11 05:55:00.685314 2025] [:error] [pid 27459:tid 27473] [client 45.128.199.169:20331] [client 45.128.199.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.169, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnsNFhPEXihPBKMpRN1WgAAAQw"]
[Thu Dec 11 06:01:39.652187 2025] [:error] [pid 58099:tid 58110] [client 45.128.199.176:61485] [client 45.128.199.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.176, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTntw8KZVSF_bdPFqRg8ngAAAMk"]
[Thu Dec 11 06:15:03.031188 2025] [:error] [pid 48261:tid 48285] [client 45.128.199.148:58643] [client 45.128.199.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnw5-yPI4WU-4JmiQOJ_AAAAZU"]
[Thu Dec 11 06:21:48.958722 2025] [:error] [pid 57992:tid 58050] [client 45.128.199.205:48327] [client 45.128.199.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.205, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTnyfOUeau0BMFF2vHntlAAAAIE"]
[Thu Dec 11 06:28:27.305637 2025] [:error] [pid 27459:tid 27465] [client 45.128.199.164:60823] [client 45.128.199.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.164, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTn0C1hPEXihPBKMpRN8wgAAAQQ"]
[Thu Dec 11 06:35:14.424103 2025] [:error] [pid 58099:tid 58101] [client 45.128.199.198:57823] [client 45.128.199.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.198, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTn1osKZVSF_bdPFqRhDXAAAAMA"]
[Thu Dec 11 06:48:37.883897 2025] [:error] [pid 57992:tid 58057] [client 45.128.199.152:27909] [client 45.128.199.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.152, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTn4xeUeau0BMFF2vHnybwAAAIg"]
[Thu Dec 11 06:55:17.231872 2025] [:error] [pid 58099:tid 58119] [client 45.128.199.160:62333] [client 45.128.199.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTn6VcKZVSF_bdPFqRhHswAAANI"]
[Thu Dec 11 07:01:59.037735 2025] [:error] [pid 35112:tid 35129] [client 45.128.199.237:38979] [client 45.128.199.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.237, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTn7559ZpQ0WIeJhsJeFiwAAAU8"]
[Thu Dec 11 07:08:38.914063 2025] [:error] [pid 57991:tid 58041] [client 45.128.199.195:20905] [client 45.128.199.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.195, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTn9dqPyGmNXA2ZsETb4BAAAAFM"]
[Thu Dec 11 07:21:54.261953 2025] [:error] [pid 58099:tid 58125] [client 45.128.199.167:32821] [client 45.128.199.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.167, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToAksKZVSF_bdPFqRhQFwAAANg"]
[Thu Dec 11 07:28:35.594616 2025] [:error] [pid 58099:tid 58119] [client 45.128.199.156:21765] [client 45.128.199.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.156, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToCI8KZVSF_bdPFqRhRRgAAANI"]
[Thu Dec 11 07:35:31.217465 2025] [:error] [pid 57991:tid 58041] [client 45.128.199.172:63931] [client 45.128.199.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToDw6PyGmNXA2ZsETb_bQAAAFM"]
[Thu Dec 11 07:42:09.138783 2025] [:error] [pid 57992:tid 58064] [client 45.128.199.155:33545] [client 45.128.199.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.155, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToFUeUeau0BMFF2vHkApgAAAI8"]
[Thu Dec 11 08:02:16.285475 2025] [:error] [pid 48261:tid 48279] [client 45.128.199.172:26617] [client 45.128.199.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToKCOyPI4WU-4JmiQOvOwAAAY8"]
[Thu Dec 11 08:22:12.096044 2025] [autoindex:error] [pid 57991:tid 58043] [client 45.144.115.204:56860] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 08:22:12.363371 2025] [autoindex:error] [pid 57991:tid 58026] [client 45.144.115.204:56860] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 08:22:12.621890 2025] [autoindex:error] [pid 57991:tid 58032] [client 45.144.115.204:56860] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 08:22:12.879032 2025] [autoindex:error] [pid 57991:tid 58039] [client 45.144.115.204:56860] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 08:22:23.871025 2025] [:error] [pid 35112:tid 35137] [client 45.128.199.153:58229] [client 45.128.199.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.153, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToOv59ZpQ0WIeJhsJeccgAAAVc"]
[Thu Dec 11 08:29:00.481967 2025] [:error] [pid 35112:tid 35129] [client 45.128.199.153:45547] [client 45.128.199.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.153, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToQTJ9ZpQ0WIeJhsJeefgAAAU8"]
[Thu Dec 11 08:42:17.110691 2025] [:error] [pid 57991:tid 58028] [client 45.128.199.185:59891] [client 45.128.199.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToTaaPyGmNXA2ZsETYNEQAAAEY"]
[Thu Dec 11 08:48:51.975820 2025] [:error] [pid 57991:tid 58043] [client 45.128.199.219:38825] [client 45.128.199.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.219, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToU86PyGmNXA2ZsETYOHgAAAFU"]
[Thu Dec 11 08:55:31.750237 2025] [:error] [pid 48261:tid 48285] [client 45.128.199.172:64469] [client 45.128.199.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToWg-yPI4WU-4JmiQPB4AAAAZU"]
[Thu Dec 11 09:08:48.592964 2025] [:error] [pid 57992:tid 58062] [client 45.128.199.160:51761] [client 45.128.199.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToZoOUeau0BMFF2vHkTCwAAAI0"]
[Thu Dec 11 09:32:05.421596 2025] [:error] [pid 57990:tid 57998] [client 177.37.234.209:14188] [client 177.37.234.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.37.234.209, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTofFQqZT_dc36fQdXHq4wAAAAM"]
[Thu Dec 11 09:35:23.994812 2025] [:error] [pid 57991:tid 58024] [client 45.128.199.143:42337] [client 45.128.199.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.143, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTof26PyGmNXA2ZsETYXaAAAAEI"]
[Thu Dec 11 09:41:31.764866 2025] [:error] [pid 58099:tid 58105] [client 177.37.234.209:41462] [client 177.37.234.209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTohS8KZVSF_bdPFqRhxbAAAAMQ"]
[Thu Dec 11 09:46:43.577773 2025] [:error] [pid 48261:tid 48264] [client 45.128.199.172:45905] [client 45.128.199.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToig-yPI4WU-4JmiQPU7AAAAYA"]
[Thu Dec 11 10:13:25.028393 2025] [:error] [pid 48261:tid 48265] [client 45.128.199.151:38693] [client 45.128.199.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.151, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTooxeyPI4WU-4JmiQPfYAAAAYE"]
[Thu Dec 11 10:33:43.693494 2025] [:error] [pid 57992:tid 58065] [client 45.128.199.227:44203] [client 45.128.199.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.227, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToth-Ueau0BMFF2vHklvwAAAJA"]
[Thu Dec 11 10:53:47.625830 2025] [:error] [pid 27459:tid 27480] [client 45.128.199.187:28385] [client 45.128.199.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.187, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aToyO1hPEXihPBKMpRO_ugAAARM"]
[Thu Dec 11 11:06:50.705187 2025] [:error] [pid 48261:tid 48285] [client 182.43.70.143:54804] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTo1SuyPI4WU-4JmiQP0FAAAAZU"]
[Thu Dec 11 11:14:05.122105 2025] [:error] [pid 48261:tid 48266] [client 45.128.199.162:54865] [client 45.128.199.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.162, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTo2_eyPI4WU-4JmiQP2vgAAAYI"]
[Thu Dec 11 11:44:16.626685 2025] [:error] [pid 35112:tid 35135] [client 45.128.199.195:23895] [client 45.128.199.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.195, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTo-EJ9ZpQ0WIeJhsJfVvwAAAVU"]
[Thu Dec 11 11:51:58.305943 2025] [:error] [pid 35112:tid 35137] [client 45.128.199.157:28009] [client 45.128.199.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.157, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTo_3p9ZpQ0WIeJhsJfYUQAAAVc"]
[Thu Dec 11 12:06:00.963511 2025] [:error] [pid 35112:tid 35114] [client 45.128.199.150:53997] [client 45.128.199.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpDKJ9ZpQ0WIeJhsJfdSgAAAUA"]
[Thu Dec 11 12:27:54.026785 2025] [:error] [pid 57990:tid 58002] [client 45.128.199.143:32143] [client 45.128.199.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.143, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpISgqZT_dc36fQdXETzAAAAAc"]
[Thu Dec 11 12:50:16.107838 2025] [:error] [pid 48261:tid 48275] [client 45.128.199.150:43129] [client 45.128.199.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpNiOyPI4WU-4JmiQMeiAAAAYs"]
[Thu Dec 11 12:57:39.441076 2025] [:error] [pid 57990:tid 58016] [client 45.128.199.160:61893] [client 45.128.199.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpPQwqZT_dc36fQdXEbawAAABU"]
[Thu Dec 11 13:19:16.506531 2025] [:error] [pid 57991:tid 58044] [client 45.128.199.157:39471] [client 45.128.199.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.157, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpUVKPyGmNXA2ZsETZNHAAAAFY"]
[Thu Dec 11 13:26:19.054825 2025] [:error] [pid 57992:tid 58058] [client 45.128.199.175:58687] [client 45.128.199.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.175, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpV--Ueau0BMFF2vHlQIQAAAIk"]
[Thu Dec 11 13:33:21.511780 2025] [:error] [pid 48261:tid 48276] [client 45.128.199.242:39721] [client 45.128.199.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.242, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpXoeyPI4WU-4JmiQMsJgAAAYw"]
[Thu Dec 11 14:01:46.132240 2025] [:error] [pid 48261:tid 48269] [client 45.128.199.205:43907] [client 45.128.199.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.205, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpeSuyPI4WU-4JmiQM3gwAAAYU"]
[Thu Dec 11 14:22:55.641948 2025] [:error] [pid 58099:tid 58103] [client 45.128.199.169:37893] [client 45.128.199.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.169, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpjP8KZVSF_bdPFqRi2cAAAAMI"]
[Thu Dec 11 14:36:59.589523 2025] [:error] [pid 58099:tid 58125] [client 45.128.199.185:35847] [client 45.128.199.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpmi8KZVSF_bdPFqRi46AAAANg"]
[Thu Dec 11 14:51:21.803828 2025] [:error] [pid 58099:tid 58102] [client 45.128.199.160:40019] [client 45.128.199.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpp6cKZVSF_bdPFqRi8YwAAAME"]
[Thu Dec 11 15:05:41.344326 2025] [:error] [pid 57992:tid 58052] [client 45.128.199.248:33539] [client 45.128.199.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.248, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTptReUeau0BMFF2vHllawAAAIM"]
[Thu Dec 11 15:12:56.080658 2025] [:error] [pid 35112:tid 35119] [client 45.128.199.171:32331] [client 45.128.199.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpu-J9ZpQ0WIeJhsJcUxAAAAUU"]
[Thu Dec 11 15:20:02.359663 2025] [:error] [pid 57991:tid 58029] [client 45.128.199.219:52857] [client 45.128.199.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.219, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTpwoqPyGmNXA2ZsETZl7AAAAEc"]
[Thu Dec 11 15:26:33.592478 2025] [autoindex:error] [pid 57990:tid 57995] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:33.808306 2025] [autoindex:error] [pid 57990:tid 58018] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:34.003957 2025] [autoindex:error] [pid 57990:tid 57998] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:34.204038 2025] [autoindex:error] [pid 57990:tid 57999] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:35.890283 2025] [autoindex:error] [pid 57990:tid 58015] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:36.108601 2025] [autoindex:error] [pid 57990:tid 58009] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:36.300490 2025] [autoindex:error] [pid 57990:tid 58000] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:36.514905 2025] [autoindex:error] [pid 57990:tid 58019] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:36.709308 2025] [autoindex:error] [pid 57990:tid 58005] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:36.903337 2025] [autoindex:error] [pid 57990:tid 58014] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:37.315930 2025] [autoindex:error] [pid 57990:tid 58011] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:39.411143 2025] [autoindex:error] [pid 57990:tid 57999] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:39.602527 2025] [autoindex:error] [pid 57990:tid 58008] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:42.232947 2025] [autoindex:error] [pid 57990:tid 57999] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:42.424186 2025] [autoindex:error] [pid 57990:tid 57995] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:42.619353 2025] [autoindex:error] [pid 57990:tid 57996] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:42.815819 2025] [autoindex:error] [pid 57990:tid 58007] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:44.337260 2025] [autoindex:error] [pid 57990:tid 58009] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:44.526768 2025] [autoindex:error] [pid 57990:tid 58000] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:46.032942 2025] [autoindex:error] [pid 57990:tid 58004] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:48.638875 2025] [autoindex:error] [pid 57990:tid 58008] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:48.841723 2025] [autoindex:error] [pid 57990:tid 58018] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:49.046239 2025] [autoindex:error] [pid 57990:tid 58004] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:56.548122 2025] [autoindex:error] [pid 57990:tid 58000] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:57.958933 2025] [autoindex:error] [pid 57990:tid 58014] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:58.149329 2025] [autoindex:error] [pid 57990:tid 58006] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:58.728402 2025] [autoindex:error] [pid 57990:tid 58004] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:58.973681 2025] [autoindex:error] [pid 57990:tid 58019] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:26:59.183476 2025] [autoindex:error] [pid 57990:tid 58017] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:03.138505 2025] [autoindex:error] [pid 57990:tid 58008] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:04.864660 2025] [autoindex:error] [pid 57990:tid 57997] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:35.018117 2025] [autoindex:error] [pid 57990:tid 58015] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:36.627742 2025] [autoindex:error] [pid 57990:tid 58013] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:36.947004 2025] [autoindex:error] [pid 57990:tid 58005] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:37.140417 2025] [autoindex:error] [pid 57990:tid 58018] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:37.337170 2025] [autoindex:error] [pid 57990:tid 57997] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:37.531422 2025] [autoindex:error] [pid 57990:tid 58014] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:37.737568 2025] [autoindex:error] [pid 57990:tid 58006] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:37.931147 2025] [autoindex:error] [pid 57990:tid 58000] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:39.267436 2025] [autoindex:error] [pid 57990:tid 58004] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:40.627207 2025] [autoindex:error] [pid 57990:tid 57996] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:40.852102 2025] [autoindex:error] [pid 57990:tid 58019] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:41.051408 2025] [autoindex:error] [pid 57990:tid 58011] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:42.352875 2025] [autoindex:error] [pid 57990:tid 57998] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:42.557494 2025] [autoindex:error] [pid 57990:tid 58017] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:42.755132 2025] [autoindex:error] [pid 57990:tid 58016] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:27:42.944854 2025] [autoindex:error] [pid 57990:tid 58008] [client 194.5.82.25:21331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:12.315997 2025] [autoindex:error] [pid 57990:tid 58012] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:25.878065 2025] [autoindex:error] [pid 57990:tid 58013] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:30.861685 2025] [autoindex:error] [pid 57990:tid 58009] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:31.062714 2025] [autoindex:error] [pid 57990:tid 58016] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:36.179917 2025] [autoindex:error] [pid 57990:tid 57996] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:36.388741 2025] [autoindex:error] [pid 57990:tid 58000] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:36.765889 2025] [autoindex:error] [pid 57990:tid 58004] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:36.961130 2025] [autoindex:error] [pid 57990:tid 58002] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:37.177696 2025] [autoindex:error] [pid 57990:tid 58006] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:37.382432 2025] [autoindex:error] [pid 57990:tid 58012] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:37.597369 2025] [autoindex:error] [pid 57990:tid 58005] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:37.790978 2025] [autoindex:error] [pid 57990:tid 58009] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:28:37.983392 2025] [autoindex:error] [pid 57990:tid 58017] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 15:29:01.268719 2025] [autoindex:error] [pid 57990:tid 58005] [client 194.5.82.14:56763] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 11 16:33:02.967832 2025] [:error] [pid 35112:tid 35130] [client 45.128.199.157:49767] [client 45.128.199.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.157, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTqBvp9ZpQ0WIeJhsJctjAAAAVA"]
[Thu Dec 11 17:25:12.427183 2025] [:error] [pid 57992:tid 58065] [client 45.128.199.157:59137] [client 45.128.199.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.157, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTqN-OUeau0BMFF2vHmG6QAAAJA"]
[Thu Dec 11 18:48:08.263285 2025] [:error] [pid 35112:tid 35119] [client 45.128.199.171:40379] [client 45.128.199.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTqhaJ9ZpQ0WIeJhsJdSlAAAAUU"]
[Thu Dec 11 22:58:25.316708 2025] [:error] [pid 4864:tid 4881] [client 45.128.199.147:52987] [client 45.128.199.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.147, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTrcEWVhcrADVU33AP4rSwAAAQ8"]
[Thu Dec 11 23:53:50.134985 2025] [:error] [pid 4864:tid 4867] [client 192.144.148.122:48310] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTrpDmVhcrADVU33AP46wQAAAQE"]
[Fri Dec 12 03:05:04.138254 2025] [:error] [pid 53522:tid 53528] [client 43.157.148.38:57072] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTsV4A73fYFRtoUtdzEq5wAAAYQ"]
[Fri Dec 12 04:58:08.639723 2025] [:error] [pid 26521:tid 26587] [client 45.8.17.48:35059] [client 45.8.17.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTswYJdhcAPU617AKTBQmQAAAIg"]
[Fri Dec 12 05:23:48.004989 2025] [:error] [pid 26519:tid 26546] [client 45.8.17.112:20381] [client 45.8.17.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTs2ZM8TRgSGOeWqEhdSWAAAABc"]
[Fri Dec 12 05:32:17.330932 2025] [:error] [pid 60649:tid 60675] [client 45.8.17.58:48315] [client 45.8.17.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.58, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTs4YVOcUGKU3sgfHP9KIgAAARc"]
[Fri Dec 12 05:32:17.333606 2025] [:error] [pid 60649:tid 60675] [client 45.8.17.58:48315] [client 45.8.17.58] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||hotbooksbookeeping2.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTs4YVOcUGKU3sgfHP9KIgAAARc"]
[Fri Dec 12 05:40:47.118654 2025] [:error] [pid 60649:tid 60662] [client 45.8.17.148:29127] [client 45.8.17.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTs6X1OcUGKU3sgfHP9MHwAAAQo"]
[Fri Dec 12 05:49:23.763563 2025] [:error] [pid 60649:tid 60670] [client 45.8.17.131:31213] [client 45.8.17.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.131, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTs8Y1OcUGKU3sgfHP9OFQAAARI"]
[Fri Dec 12 05:57:54.504116 2025] [:error] [pid 26607:tid 26621] [client 45.8.17.63:51855] [client 45.8.17.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.63, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTs-Ysb_b0tOEWTL2Knm2gAAAMw"]
[Fri Dec 12 05:57:54.507227 2025] [:error] [pid 26607:tid 26621] [client 45.8.17.63:51855] [client 45.8.17.63] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||hotbooksbookeeping2.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTs-Ysb_b0tOEWTL2Knm2gAAAMw"]
[Fri Dec 12 06:06:34.607952 2025] [:error] [pid 26519:tid 26533] [client 45.8.17.137:29503] [client 45.8.17.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.137, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTtAas8TRgSGOeWqEhdbswAAAAo"]
[Fri Dec 12 06:24:07.094894 2025] [:error] [pid 26607:tid 26619] [client 45.8.17.142:26855] [client 45.8.17.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTtEh8b_b0tOEWTL2KntNAAAAMo"]
[Fri Dec 12 06:32:54.715208 2025] [:error] [pid 26521:tid 26595] [client 45.8.17.138:35453] [client 45.8.17.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTtGlpdhcAPU617AKTBxRQAAAJA"]
[Fri Dec 12 06:41:43.574727 2025] [:error] [pid 27950:tid 27964] [client 45.8.17.64:21055] [client 45.8.17.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.64, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTtIp4VLRvkrdsSc1F3SBQAAAUw"]
[Fri Dec 12 06:59:11.837137 2025] [:error] [pid 27950:tid 27971] [client 45.8.17.148:45365] [client 45.8.17.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTtMv4VLRvkrdsSc1F3WHQAAAVM"]
[Fri Dec 12 07:16:39.532393 2025] [:error] [pid 27950:tid 27961] [client 45.8.17.126:42357] [client 45.8.17.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.126, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTtQ14VLRvkrdsSc1F3aPgAAAUk"]
[Fri Dec 12 07:34:17.285493 2025] [:error] [pid 26607:tid 26621] [client 45.8.17.62:25915] [client 45.8.17.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.62, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTtU-cb_b0tOEWTL2Kn71AAAAMw"]
[Fri Dec 12 07:52:24.785257 2025] [:error] [pid 27950:tid 27957] [client 168.196.89.104:35993] [client 168.196.89.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.196.89.104, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTtZOIVLRvkrdsSc1F3h-wAAAUU"]
[Fri Dec 12 07:53:23.593381 2025] [:error] [pid 26607:tid 26618] [client 45.8.17.144:57885] [client 45.8.17.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.144, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTtZc8b_b0tOEWTL2Kn_hAAAAMk"]
[Fri Dec 12 08:01:31.959613 2025] [:error] [pid 26520:tid 26567] [client 168.196.89.104:35835] [client 168.196.89.104] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTtbW0G_frlY5vNXu_B2tQAAAE8"]
[Fri Dec 12 08:02:05.451341 2025] [:error] [pid 26519:tid 26536] [client 45.8.17.106:48487] [client 45.8.17.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.106, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTtbfc8TRgSGOeWqEhdwUwAAAA0"]
[Fri Dec 12 08:03:45.245664 2025] [:error] [pid 26521:tid 26584] [client 168.196.89.104:35147] [client 168.196.89.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.196.89.104, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aTtb4ZdhcAPU617AKTCLyAAAAIU"]
[Fri Dec 12 08:10:48.632174 2025] [:error] [pid 26607:tid 26627] [client 45.8.17.110:34437] [client 45.8.17.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.110, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTtdiMb_b0tOEWTL2KkDLwAAANI"]
[Fri Dec 12 09:13:01.750437 2025] [:error] [pid 26521:tid 26603] [client 45.8.17.117:20891] [client 45.8.17.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.117, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTtsHZdhcAPU617AKTCgKQAAAJg"]
[Fri Dec 12 09:48:34.173815 2025] [:error] [pid 26521:tid 26595] [client 45.8.17.112:65107] [client 45.8.17.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTt0cpdhcAPU617AKTCoHAAAAJA"]
[Fri Dec 12 10:06:20.543923 2025] [:error] [pid 27950:tid 27969] [client 45.8.17.122:58877] [client 45.8.17.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.122, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTt4nIVLRvkrdsSc1F0ABwAAAVE"]
[Fri Dec 12 10:15:02.634632 2025] [:error] [pid 26521:tid 26592] [client 45.8.17.61:36241] [client 45.8.17.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTt6ppdhcAPU617AKTCvlQAAAI0"]
[Fri Dec 12 10:41:44.770109 2025] [:error] [pid 26521:tid 26597] [client 45.8.17.121:22237] [client 45.8.17.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.121, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTuA6JdhcAPU617AKTC4HgAAAJI"]
[Fri Dec 12 10:59:28.763296 2025] [:error] [pid 60649:tid 60663] [client 45.8.17.140:60105] [client 45.8.17.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.140, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTuFEFOcUGKU3sgfHP-HpQAAAQs"]
[Fri Dec 12 11:08:23.717399 2025] [:error] [pid 26519:tid 26527] [client 45.8.17.106:35709] [client 45.8.17.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.106, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTuHJ88TRgSGOeWqEheOLAAAAAQ"]
[Fri Dec 12 11:35:07.271076 2025] [:error] [pid 27950:tid 27966] [client 45.8.17.125:40053] [client 45.8.17.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aTuNa4VLRvkrdsSc1F0ZZQAAAU4"]
[Fri Dec 12 12:23:40.184515 2025] [:error] [pid 26521:tid 26579] [client 182.42.105.144:41927] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTuYzJdhcAPU617AKTDj-gAAAIA"]
[Fri Dec 12 17:54:16.655036 2025] [:error] [pid 26521:tid 26597] [client 194.5.82.136:61865] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTvmSJdhcAPU617AKTBCvgAAAJI"]
[Fri Dec 12 17:54:27.163268 2025] [autoindex:error] [pid 26521:tid 26602] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:27.391110 2025] [autoindex:error] [pid 26521:tid 26580] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:27.661817 2025] [autoindex:error] [pid 26521:tid 26590] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:27.868579 2025] [autoindex:error] [pid 26521:tid 26585] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:29.515643 2025] [autoindex:error] [pid 26521:tid 26592] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:29.733216 2025] [autoindex:error] [pid 26521:tid 26597] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:30.039086 2025] [autoindex:error] [pid 26521:tid 26601] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:30.261283 2025] [autoindex:error] [pid 26521:tid 26600] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:30.483668 2025] [autoindex:error] [pid 26521:tid 26594] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:30.703434 2025] [autoindex:error] [pid 26521:tid 26602] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:31.331909 2025] [autoindex:error] [pid 26521:tid 26589] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:32.829245 2025] [autoindex:error] [pid 26521:tid 26585] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:33.024153 2025] [autoindex:error] [pid 26521:tid 26591] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:35.690355 2025] [autoindex:error] [pid 26521:tid 26588] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:35.919513 2025] [autoindex:error] [pid 26521:tid 26580] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:36.161653 2025] [autoindex:error] [pid 26521:tid 26590] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:36.466014 2025] [autoindex:error] [pid 26521:tid 26598] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:37.897153 2025] [autoindex:error] [pid 26521:tid 26587] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:38.188880 2025] [autoindex:error] [pid 26521:tid 26579] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:39.688271 2025] [autoindex:error] [pid 26521:tid 26603] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:42.264654 2025] [autoindex:error] [pid 26521:tid 26594] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:42.468546 2025] [autoindex:error] [pid 26521:tid 26595] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:42.677962 2025] [autoindex:error] [pid 26521:tid 26587] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:50.213855 2025] [autoindex:error] [pid 26521:tid 26587] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:51.614048 2025] [autoindex:error] [pid 26521:tid 26591] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:51.839546 2025] [autoindex:error] [pid 26521:tid 26592] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:52.559905 2025] [autoindex:error] [pid 26521:tid 26588] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:52.782596 2025] [autoindex:error] [pid 26521:tid 26603] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:53.069668 2025] [autoindex:error] [pid 26521:tid 26598] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:57.034034 2025] [autoindex:error] [pid 26521:tid 26584] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:54:58.410620 2025] [autoindex:error] [pid 26521:tid 26596] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:27.919134 2025] [autoindex:error] [pid 26521:tid 26588] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:28.138921 2025] [autoindex:error] [pid 26521:tid 26592] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:28.422931 2025] [autoindex:error] [pid 26521:tid 26594] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:28.633673 2025] [autoindex:error] [pid 26521:tid 26586] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:30.087713 2025] [autoindex:error] [pid 26521:tid 26602] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:30.289356 2025] [autoindex:error] [pid 26521:tid 26599] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:30.481832 2025] [autoindex:error] [pid 26521:tid 26595] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:30.741017 2025] [autoindex:error] [pid 26521:tid 26591] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:32.440291 2025] [autoindex:error] [pid 26521:tid 26593] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:33.831148 2025] [autoindex:error] [pid 26521:tid 26601] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:34.094132 2025] [autoindex:error] [pid 26521:tid 26594] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:34.287567 2025] [autoindex:error] [pid 26521:tid 26587] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:35.726466 2025] [autoindex:error] [pid 26521:tid 26603] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:36.008565 2025] [autoindex:error] [pid 26521:tid 26590] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:36.209004 2025] [autoindex:error] [pid 26521:tid 26586] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 17:55:36.500169 2025] [autoindex:error] [pid 26521:tid 26602] [client 194.5.82.117:61877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 12 18:56:11.997616 2025] [:error] [pid 55760:tid 55783] [client 101.42.46.71:44762] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTv0y1ObDQlftFDyGazr9QAAAZU"]
[Sat Dec 13 01:42:08.398486 2025] [:error] [pid 27950:tid 27954] [client 182.42.111.213:49606] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTxT8IVLRvkrdsSc1F3hLwAAAUI"]
[Sat Dec 13 03:42:13.216224 2025] [:error] [pid 55760:tid 55782] [client 38.97.60.82:56689] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aTxwFVObDQlftFDyGaxt4QAAAZQ"], referer: binance.com
[Sat Dec 13 03:42:22.986364 2025] [autoindex:error] [pid 26607:tid 26625] [client 38.97.60.82:49778] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 13 04:16:54.902587 2025] [:error] [pid 64484:tid 64500] [client 38.97.60.82:65494] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aTx4NjlzElirZW-3d8SS1wAAAM0"], referer: binance.com
[Sat Dec 13 04:17:03.252614 2025] [:error] [pid 64484:tid 64503] [client 38.97.60.82:63678] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aTx4PzlzElirZW-3d8SS4AAAANA"], referer: binance.com
[Sat Dec 13 07:55:51.499412 2025] [:error] [pid 43836:tid 43841] [client 182.44.12.37:38211] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTyrh2AEOBirsxb11nakqgAAAMM"]
[Sat Dec 13 09:24:58.621079 2025] [:error] [pid 39287:tid 39290] [client 49.51.252.146:49336] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTzAajBwBW1JRRoCYqZF3AAAAQE"]
[Sat Dec 13 13:00:34.547828 2025] [:error] [pid 43748:tid 43785] [client 45.154.98.18:50552] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTzy8qrTT0VzE3gYjcCH1gAAAEY"]
[Sat Dec 13 13:00:34.568875 2025] [:error] [pid 43836:tid 43844] [client 45.154.98.18:50566] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTzy8mAEOBirsxb11nbT2gAAAMY"]
[Sat Dec 13 13:00:35.123006 2025] [:error] [pid 8181:tid 8193] [client 45.154.98.18:50871] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTzy84csztoZQ9y1QdUPmwAAAgM"]
[Sat Dec 13 13:00:35.124191 2025] [:error] [pid 43747:tid 43767] [client 45.154.98.18:50901] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTzy85Yw3twBd_JQEHj07AAAABA"]
[Sat Dec 13 13:00:35.699354 2025] [:error] [pid 55037:tid 55052] [client 45.154.98.18:51344] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTzy8xyx7iFaaIMvMOFSvAAAAU0"]
[Sat Dec 13 13:00:35.706645 2025] [:error] [pid 43748:tid 43785] [client 45.154.98.18:51333] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTzy86rTT0VzE3gYjcCH9gAAAEY"]
[Sat Dec 13 13:00:36.295315 2025] [:error] [pid 55037:tid 55061] [client 45.154.98.18:52087] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTzy9Byx7iFaaIMvMOFS0QAAAVY"]
[Sat Dec 13 13:00:36.323852 2025] [:error] [pid 8181:tid 8207] [client 45.154.98.18:52103] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTzy9IcsztoZQ9y1QdUPzwAAAhE"]
[Sat Dec 13 13:00:36.867620 2025] [:error] [pid 8181:tid 8194] [client 45.154.98.18:52999] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTzy9IcsztoZQ9y1QdUP4wAAAgQ"]
[Sat Dec 13 13:00:36.930445 2025] [:error] [pid 55071:tid 55091] [client 45.154.98.18:53029] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTzy9MHSpNduhEZ_mjelbgAAAZI"]
[Sat Dec 13 13:41:38.497104 2025] [:error] [pid 8181:tid 8211] [client 43.157.50.58:33176] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aTz8kocsztoZQ9y1QdUU6AAAAhU"]
[Sat Dec 13 21:50:23.207119 2025] [:error] [pid 43747:tid 43762] [client 43.130.3.120:56134] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aT1vH5Yw3twBd_JQEHhENwAAAAs"]
[Sat Dec 13 22:30:40.154633 2025] [:error] [pid 39287:tid 39299] [client 45.8.17.115:39825] [client 45.8.17.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.115, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT14kDBwBW1JRRoCYqaW3AAAAQo"]
[Sat Dec 13 23:26:30.851449 2025] [:error] [pid 22505:tid 22527] [client 45.8.17.65:51187] [client 45.8.17.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2FpjvNI-35hW16TnUxawAAA5Q"]
[Sat Dec 13 23:45:42.137817 2025] [:error] [pid 23013:tid 23023] [client 45.8.17.141:34193] [client 45.8.17.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.141, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2KJqs9bDNWPQXUW1a71wAAA8g"]
[Sat Dec 13 23:55:06.772565 2025] [:error] [pid 22505:tid 22516] [client 45.8.17.73:59431] [client 45.8.17.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.73, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2MWjvNI-35hW16TnU1MwAAA4k"]
[Sun Dec 14 00:13:39.091289 2025] [:error] [pid 3635:tid 3670] [client 45.8.17.115:54643] [client 45.8.17.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.115, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2QszqfhzW7OpfKxKzRUQAAAMU"]
[Sun Dec 14 00:42:21.930607 2025] [:error] [pid 3636:tid 3696] [client 45.8.17.128:63857] [client 45.8.17.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.128, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2Xbd4pNg3LXPqKgeYq9QAAAQQ"]
[Sun Dec 14 01:01:17.507985 2025] [:error] [pid 3636:tid 3693] [client 45.8.17.148:60105] [client 45.8.17.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2b3d4pNg3LXPqKgeYxGAAAAQE"]
[Sun Dec 14 01:10:34.452569 2025] [:error] [pid 3635:tid 3677] [client 45.8.17.132:37539] [client 45.8.17.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.132, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2eCjqfhzW7OpfKxKzjwgAAAMw"]
[Sun Dec 14 01:19:53.207208 2025] [:error] [pid 3720:tid 3740] [client 45.8.17.141:33007] [client 45.8.17.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.141, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2gOe7_sgsCEY5RMYre9AAAAJI"]
[Sun Dec 14 01:29:06.500498 2025] [:error] [pid 3634:tid 3662] [client 45.8.17.124:53103] [client 45.8.17.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.124, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2iYobt-wTl4d7Q7qp8OAAAAFg"]
[Sun Dec 14 01:38:29.145538 2025] [:error] [pid 14689:tid 14698] [client 45.8.17.73:63763] [client 45.8.17.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.73, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2klUEcifvaa9I7SnmBNAAAAUU"]
[Sun Dec 14 01:57:16.981595 2025] [:error] [pid 3635:tid 3665] [client 45.8.17.137:62887] [client 45.8.17.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.137, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2o_DqfhzW7OpfKxKztogAAAMA"]
[Sun Dec 14 02:04:44.909364 2025] [:error] [pid 14689:tid 14709] [client 20.196.109.137:35815] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT2qvEEcifvaa9I7SnmHGwAAAVA"], referer: https://www.yahoo.com/
[Sun Dec 14 02:04:45.203652 2025] [:error] [pid 14654:tid 14663] [client 20.196.109.137:28217] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aT2qvTqZP_N7tgSGeZc3IQAAAAY"], referer: https://www.yahoo.com/
[Sun Dec 14 02:04:45.498270 2025] [:error] [pid 14654:tid 14678] [client 20.196.109.137:28617] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aT2qvTqZP_N7tgSGeZc3IwAAABU"], referer: https://www.google.co.uk/
[Sun Dec 14 02:04:49.397413 2025] [autoindex:error] [pid 14654:tid 14662] [client 20.196.109.137:28665] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 14 02:04:50.606696 2025] [autoindex:error] [pid 14654:tid 14667] [client 20.196.109.137:28665] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 14 02:04:52.937288 2025] [:error] [pid 14654:tid 14660] [client 20.196.109.137:28665] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aT2qxDqZP_N7tgSGeZc3OQAAAAM"], referer: https://www.google.fr/
[Sun Dec 14 02:04:55.629276 2025] [autoindex:error] [pid 3720:tid 3733] [client 20.196.109.137:27474] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 14 02:04:57.013747 2025] [autoindex:error] [pid 3720:tid 3740] [client 20.196.109.137:27474] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 14 02:04:58.441643 2025] [autoindex:error] [pid 3720:tid 3740] [client 20.196.109.137:27474] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 14 02:04:58.588485 2025] [:error] [pid 3720:tid 3730] [client 20.196.109.137:27474] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aT2qyu7_sgsCEY5RMYrnYgAAAIg"], referer: https://www.google.fr/
[Sun Dec 14 02:04:58.887161 2025] [autoindex:error] [pid 3636:tid 3699] [client 20.196.109.137:34458] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 14 02:04:59.034059 2025] [:error] [pid 3636:tid 3696] [client 20.196.109.137:34458] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aT2qy94pNg3LXPqKgeY_OQAAAQQ"], referer: https://www.google.com/
[Sun Dec 14 02:04:59.327786 2025] [:error] [pid 3635:tid 3675] [client 20.196.109.137:44753] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aT2qyzqfhzW7OpfKxKzuWgAAAMo"], referer: https://www.bing.com/
[Sun Dec 14 02:04:59.623069 2025] [:error] [pid 14654:tid 14673] [client 20.196.109.137:27818] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT2qyzqZP_N7tgSGeZc3PwAAABA"], referer: https://www.google.co.uk/
[Sun Dec 14 02:04:59.921679 2025] [autoindex:error] [pid 14689:tid 14705] [client 20.196.109.137:34460] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 14 02:05:00.075954 2025] [autoindex:error] [pid 14689:tid 14712] [client 20.196.109.137:34460] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 14 02:05:00.223415 2025] [:error] [pid 14689:tid 14714] [client 20.196.109.137:34460] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aT2qzEEcifvaa9I7SnmHUwAAAVU"], referer: https://www.google.co.uk/
[Sun Dec 14 02:05:00.517143 2025] [:error] [pid 3720:tid 3742] [client 20.196.109.137:11285] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aT2qzO7_sgsCEY5RMYrnYwAAAJQ"], referer: https://www.yahoo.com/
[Sun Dec 14 02:05:00.810873 2025] [:error] [pid 3634:tid 3660] [client 20.196.109.137:28662] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aT2qzIbt-wTl4d7Q7qqBSwAAAFY"], referer: https://www.google.com/
[Sun Dec 14 02:05:01.109123 2025] [autoindex:error] [pid 14689:tid 14713] [client 20.196.109.137:37081] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 14 02:05:01.266893 2025] [autoindex:error] [pid 14689:tid 14702] [client 20.196.109.137:37081] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 14 02:05:01.418178 2025] [autoindex:error] [pid 14689:tid 14697] [client 20.196.109.137:37081] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 14 02:05:01.570789 2025] [autoindex:error] [pid 14689:tid 14700] [client 20.196.109.137:37081] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 02:05:01.718014 2025] [:error] [pid 14689:tid 14708] [client 20.196.109.137:37081] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aT2qzUEcifvaa9I7SnmHXAAAAU8"], referer: https://www.bing.com/
[Sun Dec 14 02:05:02.012459 2025] [:error] [pid 3636:tid 3694] [client 20.196.109.137:28200] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aT2qzt4pNg3LXPqKgeY_PAAAAQI"], referer: https://www.google.com/
[Sun Dec 14 02:05:02.307002 2025] [:error] [pid 14689:tid 14711] [client 20.196.109.137:34434] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT2qzkEcifvaa9I7SnmHYAAAAVI"], referer: https://www.google.com/
[Sun Dec 14 02:05:02.605996 2025] [autoindex:error] [pid 14689:tid 14699] [client 20.196.109.137:27819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 14 02:05:02.752936 2025] [:error] [pid 14689:tid 14705] [client 20.196.109.137:27819] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aT2qzkEcifvaa9I7SnmHZAAAAUw"], referer: https://duckduckgo.com/
[Sun Dec 14 02:05:03.047656 2025] [:error] [pid 14654:tid 14679] [client 20.196.109.137:11277] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aT2qzzqZP_N7tgSGeZc3QQAAABY"], referer: https://www.bing.com/
[Sun Dec 14 02:05:03.346779 2025] [autoindex:error] [pid 14689:tid 14698] [client 20.196.109.137:26245] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 14 02:05:03.500751 2025] [autoindex:error] [pid 14689:tid 14710] [client 20.196.109.137:26245] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 02:05:03.652879 2025] [autoindex:error] [pid 14689:tid 14702] [client 20.196.109.137:26245] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 14 02:05:03.799938 2025] [:error] [pid 14689:tid 14697] [client 20.196.109.137:26245] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aT2qz0Ecifvaa9I7SnmHbAAAAUQ"], referer: https://duckduckgo.com/
[Sun Dec 14 02:05:04.094274 2025] [:error] [pid 14689:tid 14716] [client 20.196.109.137:34486] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT2q0EEcifvaa9I7SnmHbgAAAVc"], referer: https://www.google.co.uk/
[Sun Dec 14 02:05:04.388745 2025] [:error] [pid 14689:tid 14707] [client 20.196.109.137:34453] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aT2q0EEcifvaa9I7SnmHbwAAAU4"], referer: https://www.google.com/
[Sun Dec 14 02:05:04.690289 2025] [autoindex:error] [pid 14689:tid 14699] [client 20.196.109.137:34467] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 14 02:05:04.837378 2025] [:error] [pid 14689:tid 14703] [client 20.196.109.137:34467] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aT2q0EEcifvaa9I7SnmHcwAAAUo"], referer: https://www.google.co.uk/
[Sun Dec 14 02:05:05.132959 2025] [:error] [pid 3636:tid 3693] [client 20.196.109.137:37108] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aT2q0d4pNg3LXPqKgeY_PgAAAQE"], referer: https://www.yahoo.com/
[Sun Dec 14 02:05:05.427103 2025] [:error] [pid 14689:tid 14695] [client 20.196.109.137:27798] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aT2q0UEcifvaa9I7SnmHdQAAAUI"], referer: https://www.google.co.uk/
[Sun Dec 14 02:05:05.721001 2025] [:error] [pid 3636:tid 3715] [client 20.196.109.137:26250] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aT2q0d4pNg3LXPqKgeY_QAAAARc"], referer: https://www.google.de/
[Sun Dec 14 02:05:06.020357 2025] [autoindex:error] [pid 3720:tid 3746] [client 20.196.109.137:11685] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 14 02:05:06.167396 2025] [:error] [pid 3720:tid 3745] [client 20.196.109.137:11685] [client 20.196.109.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.196.109.137, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2q0u7_sgsCEY5RMYrnZQAAAJc"], referer: https://duckduckgo.com/
[Sun Dec 14 02:05:13.531865 2025] [:error] [pid 3720:tid 3737] [client 20.196.109.137:11685] [client 20.196.109.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.196.109.137, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aT2q2e7_sgsCEY5RMYrnawAAAI8"], referer: https://www.google.de/
[Sun Dec 14 02:16:09.334810 2025] [:error] [pid 3720:tid 3731] [client 45.8.17.119:39963] [client 45.8.17.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.119, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2tae7_sgsCEY5RMYrozQAAAIk"]
[Sun Dec 14 02:25:31.804053 2025] [:error] [pid 3636:tid 3701] [client 45.8.17.73:23599] [client 45.8.17.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.73, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2vm94pNg3LXPqKgeZDrAAAAQk"]
[Sun Dec 14 02:34:51.742669 2025] [:error] [pid 3720:tid 3733] [client 45.8.17.62:59389] [client 45.8.17.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.62, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2xy-7_sgsCEY5RMYrtxQAAAIs"]
[Sun Dec 14 02:53:54.184351 2025] [:error] [pid 3634:tid 3638] [client 45.8.17.138:29781] [client 45.8.17.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT22Qobt-wTl4d7Q7qqMEQAAAEA"]
[Sun Dec 14 03:03:24.731770 2025] [:error] [pid 3635:tid 3665] [client 45.8.17.119:42509] [client 45.8.17.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.119, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT24fDqfhzW7OpfKxKz6nAAAAMA"]
[Sun Dec 14 03:14:35.453069 2025] [:error] [pid 14654:tid 14660] [client 45.8.17.62:53565] [client 45.8.17.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.62, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT27GzqZP_N7tgSGeZdJNgAAAAM"]
[Sun Dec 14 03:24:02.028739 2025] [:error] [pid 3636:tid 3708] [client 45.8.17.115:33519] [client 45.8.17.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.115, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT29Ut4pNg3LXPqKgeZOMQAAARA"]
[Sun Dec 14 03:33:19.533272 2025] [:error] [pid 3634:tid 3658] [client 45.8.17.128:44271] [client 45.8.17.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.128, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT2_f4bt-wTl4d7Q7qqTUgAAAFQ"]
[Sun Dec 14 03:42:40.390205 2025] [:error] [pid 15606:tid 15679] [client 45.8.17.49:40577] [client 45.8.17.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.49, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3BsEtaH3jNphiPTmYUHQAAAAQ"]
[Sun Dec 14 03:45:10.987531 2025] [:error] [pid 15612:tid 15726] [client 191.0.125.166:13315] [client 191.0.125.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.0.125.166, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aT3CRmTeutHatLDFLtWj1AAAAFY"]
[Sun Dec 14 03:52:00.595367 2025] [:error] [pid 16936:tid 16942] [client 45.8.17.139:63735] [client 45.8.17.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.139, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3D4BbYvelmniBbXGKZnAAAAQM"]
[Sun Dec 14 04:01:22.380270 2025] [:error] [pid 57937:tid 57942] [client 45.8.17.60:34115] [client 45.8.17.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3GEpWA2I8yUJshhvpSDAAAAMI"]
[Sun Dec 14 04:10:47.524607 2025] [:error] [pid 23071:tid 23087] [client 45.8.17.134:53033] [client 45.8.17.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.134, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3IR9P4rfOGzsUZK1lcQQAAAMU"]
[Sun Dec 14 04:27:59.461518 2025] [:error] [pid 39523:tid 39545] [client 104.234.19.113:23095] [client 104.234.19.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.113, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3MTzQTQH1raAj2lkgUTgAAABE"]
[Sun Dec 14 04:28:01.477186 2025] [:error] [pid 39523:tid 39530] [client 216.24.219.235:61149] [client 216.24.219.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.235, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3MUTQTQH1raAj2lkgUXAAAAAI"]
[Sun Dec 14 04:29:52.117654 2025] [:error] [pid 39524:tid 39560] [client 45.8.17.49:26741] [client 45.8.17.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.49, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3MwGrVGpbDzFtDE9P5qAAAAEQ"]
[Sun Dec 14 04:39:20.656857 2025] [:error] [pid 41600:tid 41618] [client 45.8.17.115:42817] [client 45.8.17.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.115, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3O-NFLTBZjcwNd_VvLLQAAAQ8"]
[Sun Dec 14 04:41:28.366126 2025] [:error] [pid 39524:tid 39578] [client 191.0.125.166:17089] [client 191.0.125.166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aT3PeGrVGpbDzFtDE9P8BQAAAFY"]
[Sun Dec 14 04:42:46.552461 2025] [:error] [pid 39523:tid 39530] [client 191.0.125.166:14488] [client 191.0.125.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.0.125.166, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aT3PxjQTQH1raAj2lkgXpgAAAAI"]
[Sun Dec 14 05:07:52.174634 2025] [:error] [pid 41600:tid 41627] [client 45.8.17.112:39297] [client 45.8.17.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3VqNFLTBZjcwNd_VvWXwAAARg"]
[Sun Dec 14 05:36:16.836390 2025] [:error] [pid 39524:tid 39578] [client 45.8.17.134:58111] [client 45.8.17.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.134, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3cUGrVGpbDzFtDE9MJUgAAAFY"]
[Sun Dec 14 05:55:07.424799 2025] [:error] [pid 39614:tid 39627] [client 45.8.17.107:47981] [client 45.8.17.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.107, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3gu_xybG8-9MflbDeLaAAAAMs"]
[Sun Dec 14 05:57:16.772780 2025] [:error] [pid 39524:tid 39574] [client 13.71.30.28:8182] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT3hPGrVGpbDzFtDE9MQCwAAAFI"], referer: https://www.google.com/
[Sun Dec 14 05:57:17.050918 2025] [:error] [pid 39524:tid 39576] [client 13.71.30.28:8169] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aT3hPWrVGpbDzFtDE9MQDAAAAFQ"], referer: https://www.yahoo.com/
[Sun Dec 14 05:57:17.326059 2025] [:error] [pid 39524:tid 39558] [client 13.71.30.28:8143] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aT3hPWrVGpbDzFtDE9MQDQAAAEI"], referer: https://www.google.de/
[Sun Dec 14 05:57:21.285000 2025] [autoindex:error] [pid 39524:tid 39577] [client 13.71.30.28:8075] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 05:57:22.472510 2025] [autoindex:error] [pid 39524:tid 39575] [client 13.71.30.28:8075] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 14 05:57:24.835651 2025] [:error] [pid 39524:tid 39571] [client 13.71.30.28:8075] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aT3hRGrVGpbDzFtDE9MQGgAAAE8"], referer: https://www.yahoo.com/
[Sun Dec 14 05:57:27.477744 2025] [autoindex:error] [pid 39525:tid 39596] [client 13.71.30.28:8076] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 05:57:28.913952 2025] [autoindex:error] [pid 39525:tid 39602] [client 13.71.30.28:8076] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 05:57:30.364460 2025] [autoindex:error] [pid 39525:tid 39601] [client 13.71.30.28:8076] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 14 05:57:30.502618 2025] [:error] [pid 39525:tid 39597] [client 13.71.30.28:8076] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aT3hSk1fX_pB_BrvE_58_wAAAI4"], referer: https://www.google.fr/
[Sun Dec 14 05:57:30.820497 2025] [autoindex:error] [pid 39524:tid 39576] [client 13.71.30.28:8142] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 14 05:57:30.958098 2025] [:error] [pid 39524:tid 39580] [client 13.71.30.28:8142] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aT3hSmrVGpbDzFtDE9MQHQAAAFg"], referer: https://www.bing.com/
[Sun Dec 14 05:57:31.232680 2025] [:error] [pid 39523:tid 39546] [client 13.71.30.28:8188] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aT3hSzQTQH1raAj2lkgrUgAAABI"], referer: https://www.bing.com/
[Sun Dec 14 05:57:31.508139 2025] [:error] [pid 39525:tid 39590] [client 13.71.30.28:8093] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT3hS01fX_pB_BrvE_59AAAAAIc"], referer: https://duckduckgo.com/
[Sun Dec 14 05:57:31.790484 2025] [autoindex:error] [pid 39523:tid 39540] [client 13.71.30.28:8082] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 14 05:57:31.935803 2025] [autoindex:error] [pid 39523:tid 39530] [client 13.71.30.28:8082] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 14 05:57:32.073753 2025] [:error] [pid 39523:tid 39538] [client 13.71.30.28:8082] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aT3hTDQTQH1raAj2lkgrVgAAAAo"], referer: https://www.bing.com/
[Sun Dec 14 05:57:32.349020 2025] [:error] [pid 39523:tid 39545] [client 13.71.30.28:8077] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aT3hTDQTQH1raAj2lkgrVwAAABE"], referer: https://duckduckgo.com/
[Sun Dec 14 05:57:32.625688 2025] [:error] [pid 39614:tid 39628] [client 13.71.30.28:8081] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aT3hTPxybG8-9MflbDeMXQAAAMw"], referer: https://duckduckgo.com/
[Sun Dec 14 05:57:32.906060 2025] [autoindex:error] [pid 41600:tid 41607] [client 13.71.30.28:8177] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 14 05:57:33.049253 2025] [autoindex:error] [pid 41600:tid 41620] [client 13.71.30.28:8177] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 14 05:57:33.191760 2025] [autoindex:error] [pid 41600:tid 41619] [client 13.71.30.28:8177] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 14 05:57:33.334651 2025] [autoindex:error] [pid 41600:tid 41614] [client 13.71.30.28:8177] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 14 05:57:33.472756 2025] [:error] [pid 41600:tid 41611] [client 13.71.30.28:8177] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aT3hTdFLTBZjcwNd_VvsewAAAQg"], referer: https://www.bing.com/
[Sun Dec 14 05:57:33.746727 2025] [:error] [pid 39614:tid 39618] [client 13.71.30.28:8070] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aT3hTfxybG8-9MflbDeMZQAAAMI"], referer: https://www.yahoo.com/
[Sun Dec 14 05:57:34.021287 2025] [:error] [pid 39614:tid 39626] [client 13.71.30.28:8190] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT3hTvxybG8-9MflbDeMZgAAAMo"], referer: https://www.google.co.uk/
[Sun Dec 14 05:57:34.302795 2025] [autoindex:error] [pid 39614:tid 39619] [client 13.71.30.28:8148] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 05:57:34.439523 2025] [:error] [pid 39614:tid 39630] [client 13.71.30.28:8148] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aT3hTvxybG8-9MflbDeMaQAAAM4"], referer: https://www.bing.com/
[Sun Dec 14 05:57:34.714099 2025] [:error] [pid 41600:tid 41605] [client 13.71.30.28:8083] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aT3hTtFLTBZjcwNd_VvsfAAAAQI"], referer: https://www.google.fr/
[Sun Dec 14 05:57:34.993063 2025] [autoindex:error] [pid 39523:tid 39550] [client 13.71.30.28:8068] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 14 05:57:35.138399 2025] [autoindex:error] [pid 39523:tid 39542] [client 13.71.30.28:8068] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 05:57:35.281088 2025] [autoindex:error] [pid 39523:tid 39549] [client 13.71.30.28:8068] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 14 05:57:35.419134 2025] [:error] [pid 39523:tid 39547] [client 13.71.30.28:8068] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aT3hTzQTQH1raAj2lkgrWwAAABM"], referer: https://www.google.fr/
[Sun Dec 14 05:57:35.694193 2025] [:error] [pid 39614:tid 39639] [client 13.71.30.28:8166] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT3hT_xybG8-9MflbDeMagAAANc"], referer: https://www.yahoo.com/
[Sun Dec 14 05:57:35.969865 2025] [:error] [pid 39524:tid 39572] [client 13.71.30.28:8066] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aT3hT2rVGpbDzFtDE9MQIQAAAFA"], referer: https://www.bing.com/
[Sun Dec 14 05:57:36.250679 2025] [autoindex:error] [pid 39614:tid 39628] [client 13.71.30.28:8170] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 14 05:57:36.387996 2025] [:error] [pid 39614:tid 39640] [client 13.71.30.28:8170] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aT3hUPxybG8-9MflbDeMbAAAANg"], referer: https://duckduckgo.com/
[Sun Dec 14 05:57:36.671733 2025] [:error] [pid 39614:tid 39635] [client 13.71.30.28:8152] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aT3hUPxybG8-9MflbDeMbgAAANM"], referer: https://www.google.de/
[Sun Dec 14 05:57:36.959099 2025] [:error] [pid 39614:tid 39631] [client 13.71.30.28:8128] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aT3hUPxybG8-9MflbDeMfgAAAM8"], referer: https://www.google.co.uk/
[Sun Dec 14 05:57:37.234132 2025] [:error] [pid 39524:tid 39563] [client 13.71.30.28:8172] [client 13.71.30.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aT3hUWrVGpbDzFtDE9MQIgAAAEc"], referer: https://www.google.com/
[Sun Dec 14 05:57:37.514167 2025] [autoindex:error] [pid 39525:tid 39588] [client 13.71.30.28:8181] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sun Dec 14 05:57:37.651249 2025] [:error] [pid 39525:tid 39586] [client 13.71.30.28:8181] [client 13.71.30.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.71.30.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3hUU1fX_pB_BrvE_59BQAAAIM"], referer: https://www.bing.com/
[Sun Dec 14 05:57:45.355739 2025] [:error] [pid 39525:tid 39603] [client 13.71.30.28:8181] [client 13.71.30.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.71.30.28, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aT3hWU1fX_pB_BrvE_59DAAAAJQ"], referer: https://www.google.com/
[Sun Dec 14 06:13:51.387167 2025] [:error] [pid 39523:tid 39552] [client 45.8.17.146:22423] [client 45.8.17.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3lHzQTQH1raAj2lkguvwAAABg"]
[Sun Dec 14 07:10:04.494247 2025] [:error] [pid 41600:tid 41617] [client 45.8.17.146:31491] [client 45.8.17.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3yTNFLTBZjcwNd_VsJUAAAAQ4"]
[Sun Dec 14 07:57:07.149347 2025] [:error] [pid 41600:tid 41614] [client 45.8.17.49:59083] [client 45.8.17.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.49, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT39U9FLTBZjcwNd_VsXZwAAAQs"]
[Sun Dec 14 08:06:30.630724 2025] [:error] [pid 39614:tid 39623] [client 45.8.17.61:20593] [client 45.8.17.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT3_hvxybG8-9MflbDeugAAAAMc"]
[Sun Dec 14 09:03:47.744951 2025] [:error] [pid 39523:tid 39550] [client 45.8.17.112:57447] [client 45.8.17.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT4M8zQTQH1raAj2lkhO4wAAABY"]
[Sun Dec 14 09:27:08.515432 2025] [:error] [pid 39524:tid 39565] [client 170.106.15.3:41548] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aT4SbGrVGpbDzFtDE9M62QAAAEk"]
[Sun Dec 14 09:42:01.385767 2025] [:error] [pid 39523:tid 39534] [client 203.2.64.59:38625] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aT4V6TQTQH1raAj2lkhVBQAAAAY"]
[Sun Dec 14 09:50:52.225042 2025] [:error] [pid 39523:tid 39538] [client 45.8.17.126:30707] [client 45.8.17.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.126, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT4X_DQTQH1raAj2lkhWNQAAAAo"]
[Sun Dec 14 10:09:49.814815 2025] [:error] [pid 39614:tid 39624] [client 45.8.17.131:50193] [client 45.8.17.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.131, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT4cbfxybG8-9MflbDfIaAAAAMg"]
[Sun Dec 14 11:25:26.818784 2025] [:error] [pid 40595:tid 40621] [client 45.8.17.112:39751] [client 45.8.17.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT4uJvjrht6y4RN-xKR1EAAAAZY"]
[Sun Dec 14 12:31:46.063681 2025] [:error] [pid 39523:tid 39530] [client 45.8.17.125:42511] [client 45.8.17.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT49sjQTQH1raAj2lkhxuwAAAAI"]
[Sun Dec 14 12:50:51.201110 2025] [:error] [pid 39523:tid 39538] [client 45.8.17.146:27019] [client 45.8.17.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT5CKzQTQH1raAj2lkh0EgAAAAo"]
[Sun Dec 14 13:38:30.542106 2025] [:error] [pid 39614:tid 39631] [client 43.157.191.20:53468] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aT5NVvxybG8-9MflbDftowAAAM8"]
[Sun Dec 14 13:38:33.997876 2025] [:error] [pid 40561:tid 40583] [client 45.8.17.112:39143] [client 45.8.17.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT5NWYY6r869zoqRQkRKVAAAAVI"]
[Sun Dec 14 18:03:22.084466 2025] [:error] [pid 13799:tid 13823] [client 2.38.140.87:21197] [client 2.38.140.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "![!+ ]\\\\[\\\\]" at ARGS:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "173"] [id "213070"] [rev "1"] [msg "COMODO WAF: JSFuck / Hieroglyphy obfuscation detected||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aT6LanjPEin01ElFTNYFbwAAAhU"]
[Sun Dec 14 18:04:42.133497 2025] [:error] [pid 40561:tid 40571] [client 37.140.254.63:61785] [client 37.140.254.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aT6LuoY6r869zoqRQkSdBAAAAUY"]
[Sun Dec 14 18:04:48.461211 2025] [:error] [pid 39614:tid 39637] [client 37.140.254.88:43909] [client 37.140.254.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aT6LwPxybG8-9MflbDcwbQAAANU"]
[Sun Dec 14 18:04:58.948421 2025] [:error] [pid 40595:tid 40612] [client 37.140.254.60:61541] [client 37.140.254.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aT6Lyvjrht6y4RN-xKTqLAAAAY0"]
[Sun Dec 14 18:05:05.223637 2025] [:error] [pid 41600:tid 41623] [client 37.140.254.73:48625] [client 37.140.254.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aT6L0dFLTBZjcwNd_Vu30wAAARQ"]
[Sun Dec 14 18:05:16.056506 2025] [:error] [pid 41600:tid 41604] [client 37.140.254.99:23823] [client 37.140.254.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aT6L3NFLTBZjcwNd_Vu38QAAAQE"]
[Sun Dec 14 18:05:18.757912 2025] [:error] [pid 40596:tid 40631] [client 37.140.254.79:65177] [client 37.140.254.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aT6L3mvZZo4N2X7WoLxdQAAAAcU"]
[Sun Dec 14 18:05:19.725141 2025] [:error] [pid 13799:tid 13809] [client 37.140.254.89:48459] [client 37.140.254.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aT6L33jPEin01ElFTNYGlwAAAgc"]
[Sun Dec 14 18:05:20.708469 2025] [:error] [pid 39524:tid 39563] [client 37.140.254.68:28663] [client 37.140.254.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aT6L4GrVGpbDzFtDE9Ol7gAAAEc"]
[Sun Dec 14 18:05:21.687831 2025] [:error] [pid 13799:tid 13818] [client 37.140.254.58:42851] [client 37.140.254.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aT6L4XjPEin01ElFTNYGmQAAAhA"]
[Sun Dec 14 18:05:22.622365 2025] [:error] [pid 13799:tid 13819] [client 37.140.254.62:50045] [client 37.140.254.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aT6L4njPEin01ElFTNYGmwAAAhE"]
[Sun Dec 14 18:05:24.858494 2025] [:error] [pid 13799:tid 13807] [client 37.140.254.145:43163] [client 37.140.254.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aT6L5HjPEin01ElFTNYGnwAAAgU"]
[Sun Dec 14 18:05:28.114750 2025] [:error] [pid 40561:tid 40589] [client 37.140.254.62:57235] [client 37.140.254.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aT6L6IY6r869zoqRQkSeOQAAAVg"]
[Sun Dec 14 18:05:32.521202 2025] [:error] [pid 40561:tid 40571] [client 37.140.254.107:32531] [client 37.140.254.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aT6L7IY6r869zoqRQkSeVAAAAUY"]
[Sun Dec 14 18:05:34.782688 2025] [:error] [pid 39523:tid 39545] [client 37.140.254.103:49125] [client 37.140.254.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aT6L7jQTQH1raAj2lki18AAAABE"]
[Sun Dec 14 18:05:37.714594 2025] [:error] [pid 40595:tid 40610] [client 37.140.254.91:25975] [client 37.140.254.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aT6L8fjrht6y4RN-xKTqoQAAAYs"]
[Sun Dec 14 18:05:48.949479 2025] [:error] [pid 40595:tid 40623] [client 37.140.254.69:34985] [client 37.140.254.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aT6L_Pjrht6y4RN-xKTqtgAAAZg"]
[Sun Dec 14 18:05:51.652244 2025] [:error] [pid 39524:tid 39561] [client 37.140.254.68:48209] [client 37.140.254.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aT6L_2rVGpbDzFtDE9OmZwAAAEU"]
[Sun Dec 14 18:05:56.011367 2025] [:error] [pid 39524:tid 39579] [client 37.140.254.145:37365] [client 37.140.254.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aT6MBGrVGpbDzFtDE9OmegAAAFc"]
[Sun Dec 14 18:05:59.144735 2025] [:error] [pid 40595:tid 40617] [client 37.140.254.76:22683] [client 37.140.254.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aT6MB_jrht6y4RN-xKTqvgAAAZI"]
[Sun Dec 14 18:06:06.655041 2025] [:error] [pid 39614:tid 39625] [client 37.140.254.107:33317] [client 37.140.254.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT6MDvxybG8-9MflbDcxsAAAAMk"]
[Sun Dec 14 18:06:09.787822 2025] [:error] [pid 41600:tid 41625] [client 37.140.254.81:34237] [client 37.140.254.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aT6MEdFLTBZjcwNd_Vu5HwAAARY"]
[Sun Dec 14 18:06:12.566731 2025] [:error] [pid 41600:tid 41604] [client 37.140.254.79:62881] [client 37.140.254.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aT6MFNFLTBZjcwNd_Vu5LAAAAQE"]
[Sun Dec 14 18:06:13.503500 2025] [:error] [pid 13799:tid 13824] [client 37.140.254.106:34727] [client 37.140.254.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aT6MFXjPEin01ElFTNYG8gAAAhY"]
[Sun Dec 14 18:06:17.557495 2025] [:error] [pid 39614:tid 39640] [client 37.140.254.59:63521] [client 37.140.254.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aT6MGfxybG8-9MflbDcxzwAAANg"]
[Sun Dec 14 18:06:23.397141 2025] [:error] [pid 13799:tid 13822] [client 37.140.254.66:53859] [client 37.140.254.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aT6MH3jPEin01ElFTNYG_QAAAhQ"]
[Sun Dec 14 18:06:24.377848 2025] [:error] [pid 39524:tid 39575] [client 37.140.254.73:36901] [client 37.140.254.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aT6MIGrVGpbDzFtDE9Om4QAAAFM"]
[Sun Dec 14 18:06:25.309401 2025] [:error] [pid 39614:tid 39631] [client 37.140.254.87:56023] [client 37.140.254.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aT6MIfxybG8-9MflbDcx6gAAAM8"]
[Sun Dec 14 18:06:38.727904 2025] [:error] [pid 39614:tid 39627] [client 37.140.254.60:61075] [client 37.140.254.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aT6MLvxybG8-9MflbDcyHQAAAMs"]
[Sun Dec 14 18:06:44.218504 2025] [:error] [pid 39614:tid 39638] [client 37.140.254.68:55699] [client 37.140.254.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.68, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aT6MNPxybG8-9MflbDcyKQAAANY"]
[Sun Dec 14 18:07:02.482210 2025] [:error] [pid 39614:tid 39616] [client 37.140.254.68:55699] [client 37.140.254.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aT6MRvxybG8-9MflbDcyQgAAAMA"]
[Sun Dec 14 18:07:06.905025 2025] [:error] [pid 39525:tid 39602] [client 37.140.254.111:60791] [client 37.140.254.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aT6MSk1fX_pB_BrvE_4clwAAAJM"]
[Sun Dec 14 18:07:10.255976 2025] [:error] [pid 39525:tid 39586] [client 37.140.254.111:60791] [client 37.140.254.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aT6MTk1fX_pB_BrvE_4cmQAAAIM"]
[Sun Dec 14 18:07:23.260632 2025] [:error] [pid 40561:tid 40573] [client 37.140.254.81:26397] [client 37.140.254.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aT6MW4Y6r869zoqRQkSfJAAAAUg"]
[Sun Dec 14 18:07:36.648881 2025] [:error] [pid 41600:tid 41607] [client 37.140.254.63:24707] [client 37.140.254.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aT6MaNFLTBZjcwNd_Vu53gAAAQQ"]
[Sun Dec 14 18:07:40.892547 2025] [:error] [pid 39523:tid 39543] [client 37.140.254.69:54491] [client 37.140.254.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aT6MbDQTQH1raAj2lki2pwAAAA8"]
[Sun Dec 14 18:07:47.197790 2025] [:error] [pid 39525:tid 39597] [client 37.140.254.77:31729] [client 37.140.254.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aT6Mc01fX_pB_BrvE_4c9gAAAI4"]
[Sun Dec 14 18:07:48.681774 2025] [:error] [pid 39525:tid 39595] [client 37.140.254.77:31729] [client 37.140.254.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aT6MdE1fX_pB_BrvE_4c-AAAAIw"]
[Sun Dec 14 18:08:15.890729 2025] [:error] [pid 41600:tid 41611] [client 37.140.254.81:40539] [client 37.140.254.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aT6Mj9FLTBZjcwNd_Vu6UwAAAQg"]
[Sun Dec 14 18:08:21.930781 2025] [:error] [pid 40595:tid 40622] [client 37.140.254.63:47599] [client 37.140.254.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.63, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aT6Mlfjrht6y4RN-xKTrqwAAAZc"]
[Sun Dec 14 18:08:29.003378 2025] [:error] [pid 40595:tid 40608] [client 37.140.254.63:47599] [client 37.140.254.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aT6Mnfjrht6y4RN-xKTrygAAAYk"]
[Sun Dec 14 18:08:32.495358 2025] [:error] [pid 40596:tid 40637] [client 37.140.254.78:43199] [client 37.140.254.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aT6MoGvZZo4N2X7WoLxesQAAAcs"]
[Sun Dec 14 18:08:36.616630 2025] [:error] [pid 41600:tid 41616] [client 37.140.254.72:45633] [client 37.140.254.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aT6MpNFLTBZjcwNd_Vu7AAAAAQ0"]
[Sun Dec 14 18:08:42.595735 2025] [:error] [pid 39525:tid 39600] [client 37.140.254.82:25761] [client 37.140.254.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aT6Mqk1fX_pB_BrvE_4dUQAAAJE"]
[Sun Dec 14 18:08:43.531234 2025] [:error] [pid 40595:tid 40621] [client 37.140.254.104:28767] [client 37.140.254.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT6Mq_jrht6y4RN-xKTr3gAAAZY"]
[Sun Dec 14 18:08:52.656682 2025] [:error] [pid 41600:tid 41605] [client 37.140.254.84:20037] [client 37.140.254.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aT6MtNFLTBZjcwNd_Vu7IgAAAQI"]
[Sun Dec 14 18:08:55.783596 2025] [:error] [pid 41600:tid 41617] [client 37.140.254.68:20561] [client 37.140.254.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aT6Mt9FLTBZjcwNd_Vu7JQAAAQ4"]
[Sun Dec 14 18:09:01.913815 2025] [:error] [pid 40596:tid 40632] [client 37.140.254.136:50939] [client 37.140.254.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aT6MvWvZZo4N2X7WoLxe2QAAAcY"]
[Sun Dec 14 18:09:09.618479 2025] [:error] [pid 39614:tid 39624] [client 37.140.254.97:21501] [client 37.140.254.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aT6MxfxybG8-9MflbDczvwAAAMg"]
[Sun Dec 14 18:09:14.705526 2025] [:error] [pid 39524:tid 39557] [client 37.140.254.74:38031] [client 37.140.254.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aT6MymrVGpbDzFtDE9OoNQAAAEE"]
[Sun Dec 14 18:09:20.654814 2025] [:error] [pid 39524:tid 39565] [client 37.140.254.60:65075] [client 37.140.254.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aT6M0GrVGpbDzFtDE9OoSAAAAEk"]
[Sun Dec 14 18:09:32.830104 2025] [:error] [pid 41600:tid 41617] [client 37.140.254.79:37761] [client 37.140.254.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aT6M3NFLTBZjcwNd_Vu7uQAAAQ4"]
[Sun Dec 14 18:09:33.771377 2025] [:error] [pid 41600:tid 41607] [client 37.140.254.58:55471] [client 37.140.254.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aT6M3dFLTBZjcwNd_Vu7vgAAAQQ"]
[Sun Dec 14 18:09:34.769629 2025] [:error] [pid 40595:tid 40606] [client 37.140.254.136:55633] [client 37.140.254.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aT6M3vjrht6y4RN-xKTsngAAAYc"]
[Sun Dec 14 18:09:35.713674 2025] [:error] [pid 39525:tid 39602] [client 37.140.254.69:25221] [client 37.140.254.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aT6M301fX_pB_BrvE_4dlgAAAJM"]
[Sun Dec 14 18:09:38.577752 2025] [:error] [pid 40595:tid 40616] [client 37.140.254.84:62755] [client 37.140.254.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aT6M4vjrht6y4RN-xKTsyQAAAZE"]
[Sun Dec 14 18:09:39.617648 2025] [:error] [pid 40561:tid 40570] [client 37.140.254.58:57949] [client 37.140.254.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aT6M44Y6r869zoqRQkSgMwAAAUU"]
[Sun Dec 14 18:09:43.777216 2025] [:error] [pid 39523:tid 39534] [client 37.140.254.101:37701] [client 37.140.254.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aT6M5zQTQH1raAj2lki3KwAAAAY"]
[Sun Dec 14 18:09:44.775275 2025] [:error] [pid 40595:tid 40605] [client 37.140.254.88:39623] [client 37.140.254.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aT6M6Pjrht6y4RN-xKTs2gAAAYY"]
[Sun Dec 14 18:09:45.767119 2025] [:error] [pid 41600:tid 41618] [client 37.140.254.80:25093] [client 37.140.254.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aT6M6dFLTBZjcwNd_Vu8MgAAAQ8"]
[Sun Dec 14 18:09:46.815400 2025] [:error] [pid 39614:tid 39625] [client 37.140.254.58:46527] [client 37.140.254.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aT6M6vxybG8-9MflbDc0iQAAAMk"]
[Sun Dec 14 18:09:49.575338 2025] [:error] [pid 39523:tid 39530] [client 37.140.254.63:20235] [client 37.140.254.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aT6M7TQTQH1raAj2lki3PwAAAAI"]
[Sun Dec 14 18:09:54.671100 2025] [:error] [pid 39614:tid 39633] [client 37.140.254.61:35445] [client 37.140.254.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aT6M8vxybG8-9MflbDc0owAAANE"]
[Sun Dec 14 18:10:01.702965 2025] [:error] [pid 39614:tid 39617] [client 37.140.254.110:23349] [client 37.140.254.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aT6M-fxybG8-9MflbDc0rQAAAME"]
[Sun Dec 14 18:10:13.704948 2025] [:error] [pid 41600:tid 41620] [client 37.140.254.61:62827] [client 37.140.254.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aT6NBdFLTBZjcwNd_Vu87AAAARE"]
[Sun Dec 14 18:10:19.415892 2025] [:error] [pid 40561:tid 40569] [client 37.140.254.107:38161] [client 37.140.254.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aT6NC4Y6r869zoqRQkSgUQAAAUQ"]
[Sun Dec 14 18:10:20.431293 2025] [:error] [pid 41600:tid 41625] [client 37.140.254.102:61997] [client 37.140.254.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aT6NDNFLTBZjcwNd_Vu87wAAARY"]
[Sun Dec 14 18:10:27.521558 2025] [:error] [pid 39523:tid 39529] [client 37.140.254.103:56963] [client 37.140.254.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aT6NEzQTQH1raAj2lki3YAAAAAE"]
[Sun Dec 14 18:10:33.199248 2025] [proxy_fcgi:error] [pid 39523:tid 39531] [client 37.140.254.95:38603] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:10:33.704264 2025] [proxy_fcgi:error] [pid 39523:tid 39548] [client 37.140.254.95:38603] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:10:34.230424 2025] [proxy_fcgi:error] [pid 39523:tid 39550] [client 37.140.254.95:38603] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:10:39.532949 2025] [:error] [pid 39523:tid 39540] [client 37.140.254.95:38603] [client 37.140.254.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aT6NHzQTQH1raAj2lki3cwAAAAw"]
[Sun Dec 14 18:10:40.496816 2025] [:error] [pid 39523:tid 39552] [client 37.140.254.93:56807] [client 37.140.254.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aT6NIDQTQH1raAj2lki3dAAAABg"]
[Sun Dec 14 18:10:41.457915 2025] [:error] [pid 40595:tid 40606] [client 37.140.254.106:43283] [client 37.140.254.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aT6NIfjrht6y4RN-xKTtUQAAAYc"]
[Sun Dec 14 18:10:42.425878 2025] [:error] [pid 41600:tid 41626] [client 37.140.254.89:48031] [client 37.140.254.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aT6NItFLTBZjcwNd_Vu9GAAAARc"]
[Sun Dec 14 18:10:43.341434 2025] [:error] [pid 40596:tid 40632] [client 37.140.254.91:32593] [client 37.140.254.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aT6NI2vZZo4N2X7WoLxftgAAAcY"]
[Sun Dec 14 18:10:44.304748 2025] [:error] [pid 39524:tid 39577] [client 37.140.254.103:44139] [client 37.140.254.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aT6NJGrVGpbDzFtDE9OopAAAAFU"]
[Sun Dec 14 18:10:46.752726 2025] [:error] [pid 39523:tid 39531] [client 37.140.254.67:31823] [client 37.140.254.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aT6NJjQTQH1raAj2lki3vwAAAAM"]
[Sun Dec 14 18:10:47.687726 2025] [:error] [pid 41600:tid 41613] [client 37.140.254.61:39283] [client 37.140.254.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aT6NJ9FLTBZjcwNd_Vu9IAAAAQo"]
[Sun Dec 14 18:10:48.633757 2025] [:error] [pid 39523:tid 39543] [client 37.140.254.71:36981] [client 37.140.254.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aT6NKDQTQH1raAj2lki3xgAAAA8"]
[Sun Dec 14 18:10:49.566351 2025] [:error] [pid 39523:tid 39534] [client 37.140.254.68:32091] [client 37.140.254.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aT6NKTQTQH1raAj2lki3xwAAAAY"]
[Sun Dec 14 18:10:53.714506 2025] [:error] [pid 40596:tid 40626] [client 37.140.254.106:59525] [client 37.140.254.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aT6NLWvZZo4N2X7WoLxfwgAAAcA"]
[Sun Dec 14 18:10:56.194916 2025] [:error] [pid 40596:tid 40628] [client 37.140.254.82:20999] [client 37.140.254.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aT6NMGvZZo4N2X7WoLxfxwAAAcI"]
[Sun Dec 14 18:11:00.442649 2025] [:error] [pid 41600:tid 41613] [client 37.140.254.88:65241] [client 37.140.254.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aT6NNNFLTBZjcwNd_Vu9LAAAAQo"]
[Sun Dec 14 18:11:04.875444 2025] [:error] [pid 39524:tid 39577] [client 37.140.254.70:52443] [client 37.140.254.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aT6NOGrVGpbDzFtDE9OotQAAAFU"]
[Sun Dec 14 18:11:11.358729 2025] [:error] [pid 41600:tid 41622] [client 37.140.254.72:42837] [client 37.140.254.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aT6NP9FLTBZjcwNd_Vu9MwAAARM"]
[Sun Dec 14 18:11:20.175665 2025] [:error] [pid 39524:tid 39574] [client 37.140.254.70:26619] [client 37.140.254.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aT6NSGrVGpbDzFtDE9Oo0AAAAFI"]
[Sun Dec 14 18:11:22.826271 2025] [:error] [pid 39614:tid 39629] [client 37.140.254.79:20871] [client 37.140.254.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aT6NSvxybG8-9MflbDc00wAAAM0"]
[Sun Dec 14 18:11:51.316578 2025] [:error] [pid 41600:tid 41604] [client 37.140.254.109:44177] [client 37.140.254.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aT6NZ9FLTBZjcwNd_Vu9pQAAAQE"]
[Sun Dec 14 18:11:52.267532 2025] [:error] [pid 41600:tid 41617] [client 37.140.254.80:24871] [client 37.140.254.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aT6NaNFLTBZjcwNd_Vu9rwAAAQ4"]
[Sun Dec 14 18:11:53.247925 2025] [:error] [pid 39524:tid 39567] [client 37.140.254.111:57559] [client 37.140.254.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT6NaWrVGpbDzFtDE9OpMwAAAEs"]
[Sun Dec 14 18:11:56.605933 2025] [:error] [pid 39524:tid 39568] [client 37.140.254.111:57559] [client 37.140.254.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aT6NbGrVGpbDzFtDE9OpRgAAAEw"]
[Sun Dec 14 18:12:01.048452 2025] [:error] [pid 41600:tid 41626] [client 37.140.254.87:29447] [client 37.140.254.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aT6NcdFLTBZjcwNd_Vu9-gAAARc"]
[Sun Dec 14 18:12:01.967023 2025] [:error] [pid 41600:tid 41621] [client 37.140.254.68:21301] [client 37.140.254.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aT6NcdFLTBZjcwNd_Vu9_wAAARI"]
[Sun Dec 14 18:12:09.113069 2025] [:error] [pid 40596:tid 40648] [client 37.140.254.64:29937] [client 37.140.254.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aT6NeWvZZo4N2X7WoLxgMQAAAdY"]
[Sun Dec 14 18:12:10.029476 2025] [:error] [pid 39524:tid 39563] [client 37.140.254.103:57229] [client 37.140.254.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aT6NemrVGpbDzFtDE9OpewAAAEc"]
[Sun Dec 14 18:12:18.782577 2025] [:error] [pid 40561:tid 40566] [client 37.140.254.106:54755] [client 37.140.254.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aT6NgoY6r869zoqRQkSgxAAAAUE"]
[Sun Dec 14 18:12:22.736511 2025] [proxy_fcgi:error] [pid 41600:tid 41624] [client 37.140.254.99:35873] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:12:24.689886 2025] [:error] [pid 41600:tid 41619] [client 37.140.254.99:35873] [client 37.140.254.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "aT6NiNFLTBZjcwNd_Vu-EAAAARA"]
[Sun Dec 14 18:12:25.604826 2025] [:error] [pid 39614:tid 39628] [client 37.140.254.101:23025] [client 37.140.254.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "aT6NifxybG8-9MflbDc1cwAAAMw"]
[Sun Dec 14 18:12:30.319765 2025] [:error] [pid 39524:tid 39576] [client 37.140.254.89:44223] [client 37.140.254.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aT6NjmrVGpbDzFtDE9OpiwAAAFQ"]
[Sun Dec 14 18:12:32.282734 2025] [:error] [pid 39523:tid 39530] [client 37.140.254.58:45033] [client 37.140.254.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aT6NkDQTQH1raAj2lki4OQAAAAI"]
[Sun Dec 14 18:12:44.045696 2025] [:error] [pid 39614:tid 39637] [client 37.140.254.79:41571] [client 37.140.254.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aT6NnPxybG8-9MflbDc1fgAAANU"]
[Sun Dec 14 18:12:44.967591 2025] [:error] [pid 39524:tid 39578] [client 37.140.254.73:46661] [client 37.140.254.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aT6NnGrVGpbDzFtDE9OpqQAAAFY"]
[Sun Dec 14 18:12:52.243865 2025] [:error] [pid 41600:tid 41625] [client 37.140.254.99:64085] [client 37.140.254.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aT6NpNFLTBZjcwNd_Vu-RwAAARY"]
[Sun Dec 14 18:12:53.203142 2025] [:error] [pid 39614:tid 39619] [client 37.140.254.105:29357] [client 37.140.254.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aT6NpfxybG8-9MflbDc1ggAAAMM"]
[Sun Dec 14 18:12:54.134658 2025] [:error] [pid 39524:tid 39576] [client 37.140.254.78:27131] [client 37.140.254.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aT6NpmrVGpbDzFtDE9OprgAAAFQ"]
[Sun Dec 14 18:13:02.856992 2025] [:error] [pid 41600:tid 41605] [client 37.140.254.69:24237] [client 37.140.254.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aT6NrtFLTBZjcwNd_Vu-TgAAAQI"]
[Sun Dec 14 18:13:06.726522 2025] [:error] [pid 39523:tid 39542] [client 37.140.254.91:40943] [client 37.140.254.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aT6NsjQTQH1raAj2lki4agAAAA4"]
[Sun Dec 14 18:13:17.883675 2025] [:error] [pid 13799:tid 13818] [client 37.140.254.93:40001] [client 37.140.254.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.93, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "aT6NvXjPEin01ElFTNYJRAAAAhA"]
[Sun Dec 14 18:13:27.024338 2025] [:error] [pid 13799:tid 13803] [client 37.140.254.93:40001] [client 37.140.254.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aT6Nx3jPEin01ElFTNYJTAAAAgE"]
[Sun Dec 14 18:13:27.976886 2025] [:error] [pid 40596:tid 40641] [client 37.140.254.78:54809] [client 37.140.254.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.78, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aT6Nx2vZZo4N2X7WoLxgggAAAc8"]
[Sun Dec 14 18:13:46.130203 2025] [proxy_fcgi:error] [pid 40596:tid 40643] [client 37.140.254.78:54809] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:14:08.310786 2025] [:error] [pid 40596:tid 40632] [client 37.140.254.78:54809] [client 37.140.254.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aT6N8GvZZo4N2X7WoLxgugAAAcY"]
[Sun Dec 14 18:14:15.144662 2025] [:error] [pid 41600:tid 41612] [client 37.140.254.84:56557] [client 37.140.254.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aT6N99FLTBZjcwNd_Vu_AgAAAQk"]
[Sun Dec 14 18:14:19.604922 2025] [:error] [pid 41600:tid 41603] [client 37.140.254.60:49757] [client 37.140.254.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aT6N-9FLTBZjcwNd_Vu_FAAAAQA"]
[Sun Dec 14 18:14:35.157313 2025] [:error] [pid 39524:tid 39565] [client 37.140.254.99:20337] [client 37.140.254.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT6OC2rVGpbDzFtDE9OqSgAAAEk"]
[Sun Dec 14 18:14:39.599172 2025] [:error] [pid 40595:tid 40615] [client 37.140.254.69:62911] [client 37.140.254.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aT6OD_jrht6y4RN-xKTvAwAAAZA"]
[Sun Dec 14 18:14:42.356695 2025] [:error] [pid 41600:tid 41616] [client 37.140.254.86:42861] [client 37.140.254.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aT6OEtFLTBZjcwNd_Vu_lwAAAQ0"]
[Sun Dec 14 18:14:49.758353 2025] [proxy_fcgi:error] [pid 40596:tid 40641] [client 37.140.254.104:42059] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:14:50.265300 2025] [proxy_fcgi:error] [pid 40596:tid 40638] [client 37.140.254.104:42059] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:14:50.745170 2025] [:error] [pid 40596:tid 40631] [client 37.140.254.104:42059] [client 37.140.254.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aT6OGmvZZo4N2X7WoLxhUgAAAcU"]
[Sun Dec 14 18:14:51.661405 2025] [:error] [pid 13799:tid 13823] [client 37.140.254.61:24473] [client 37.140.254.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aT6OG3jPEin01ElFTNYJ2AAAAhU"]
[Sun Dec 14 18:15:04.359358 2025] [:error] [pid 39614:tid 39625] [client 37.140.254.92:25477] [client 37.140.254.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aT6OKPxybG8-9MflbDc2bwAAAMk"]
[Sun Dec 14 18:15:07.091188 2025] [:error] [pid 41600:tid 41603] [client 37.140.254.73:55297] [client 37.140.254.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aT6OK9FLTBZjcwNd_Vu_7AAAAQA"]
[Sun Dec 14 18:15:13.015607 2025] [:error] [pid 40595:tid 40613] [client 37.140.254.58:47909] [client 37.140.254.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aT6OMfjrht6y4RN-xKTvGwAAAY4"]
[Sun Dec 14 18:15:26.142785 2025] [:error] [pid 41600:tid 41606] [client 37.140.254.111:47793] [client 37.140.254.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aT6OPtFLTBZjcwNd_VvAIwAAAQM"]
[Sun Dec 14 18:15:27.136385 2025] [proxy_fcgi:error] [pid 39524:tid 39578] [client 37.140.254.84:24783] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:15:31.659745 2025] [:error] [pid 39524:tid 39576] [client 37.140.254.84:24783] [client 37.140.254.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aT6OQ2rVGpbDzFtDE9OqxQAAAFQ"]
[Sun Dec 14 18:15:40.543202 2025] [proxy_fcgi:error] [pid 39525:tid 39599] [client 37.140.254.78:37517] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:15:42.475137 2025] [:error] [pid 39525:tid 39593] [client 37.140.254.78:37517] [client 37.140.254.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.78, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aT6OTk1fX_pB_BrvE_4gBQAAAIo"]
[Sun Dec 14 18:15:50.292142 2025] [:error] [pid 39525:tid 39584] [client 37.140.254.78:37517] [client 37.140.254.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aT6OVk1fX_pB_BrvE_4gPAAAAIE"]
[Sun Dec 14 18:15:53.042794 2025] [:error] [pid 40596:tid 40641] [client 37.140.254.89:50193] [client 37.140.254.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aT6OWWvZZo4N2X7WoLxhxwAAAc8"]
[Sun Dec 14 18:15:59.359811 2025] [:error] [pid 40561:tid 40568] [client 37.140.254.70:23643] [client 37.140.254.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aT6OX4Y6r869zoqRQkSilgAAAUM"]
[Sun Dec 14 18:16:06.928462 2025] [:error] [pid 40561:tid 40586] [client 37.140.254.88:40567] [client 37.140.254.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aT6OZoY6r869zoqRQkSirwAAAVU"]
[Sun Dec 14 18:16:09.791489 2025] [:error] [pid 40561:tid 40575] [client 37.140.254.89:56167] [client 37.140.254.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aT6OaYY6r869zoqRQkSitgAAAUo"]
[Sun Dec 14 18:16:16.534309 2025] [:error] [pid 13799:tid 13809] [client 37.140.254.71:44003] [client 37.140.254.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aT6OcHjPEin01ElFTNYKrAAAAgc"]
[Sun Dec 14 18:16:20.856832 2025] [proxy_fcgi:error] [pid 41600:tid 41621] [client 37.140.254.62:48287] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:16:21.335521 2025] [:error] [pid 41600:tid 41616] [client 37.140.254.62:48287] [client 37.140.254.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aT6OddFLTBZjcwNd_VvA8QAAAQ0"]
[Sun Dec 14 18:16:22.345310 2025] [proxy_fcgi:error] [pid 39523:tid 39532] [client 37.140.254.91:38029] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Sun Dec 14 18:16:23.266508 2025] [:error] [pid 41600:tid 41624] [client 37.140.254.103:28451] [client 37.140.254.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "aT6Od9FLTBZjcwNd_VvA9QAAARU"]
[Sun Dec 14 18:16:24.275499 2025] [:error] [pid 39523:tid 39541] [client 37.140.254.76:63419] [client 37.140.254.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aT6OeDQTQH1raAj2lki5oAAAAA0"]
[Sun Dec 14 18:16:25.195916 2025] [:error] [pid 40595:tid 40612] [client 37.140.254.86:56579] [client 37.140.254.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aT6Oefjrht6y4RN-xKTvwAAAAY0"]
[Sun Dec 14 18:16:26.251437 2025] [:error] [pid 39524:tid 39580] [client 37.140.254.84:55867] [client 37.140.254.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aT6OemrVGpbDzFtDE9OrkgAAAFg"]
[Sun Dec 14 18:16:27.265595 2025] [:error] [pid 39525:tid 39588] [client 37.140.254.107:56393] [client 37.140.254.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aT6Oe01fX_pB_BrvE_4gkgAAAIU"]
[Sun Dec 14 18:16:28.278902 2025] [:error] [pid 39524:tid 39571] [client 37.140.254.61:29425] [client 37.140.254.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aT6OfGrVGpbDzFtDE9OrlgAAAE8"]
[Sun Dec 14 18:16:32.540156 2025] [:error] [pid 39523:tid 39552] [client 37.140.254.77:30893] [client 37.140.254.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aT6OgDQTQH1raAj2lki5pgAAABg"]
[Sun Dec 14 18:16:33.492796 2025] [:error] [pid 40595:tid 40607] [client 37.140.254.111:61273] [client 37.140.254.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aT6Ogfjrht6y4RN-xKTvxgAAAYg"]
[Sun Dec 14 18:16:34.424127 2025] [:error] [pid 39614:tid 39624] [client 37.140.254.83:54285] [client 37.140.254.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aT6OgvxybG8-9MflbDc3JwAAAMg"]
[Sun Dec 14 18:16:36.815000 2025] [:error] [pid 39525:tid 39605] [client 37.140.254.75:27559] [client 37.140.254.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aT6OhE1fX_pB_BrvE_4gmAAAAJY"]
[Sun Dec 14 18:16:41.051272 2025] [:error] [pid 39524:tid 39567] [client 37.140.254.111:31309] [client 37.140.254.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aT6OiWrVGpbDzFtDE9OrswAAAEs"]
[Sun Dec 14 18:16:41.973212 2025] [proxy_fcgi:error] [pid 40561:tid 40582] [client 37.140.254.69:62441] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:16:47.188786 2025] [:error] [pid 40561:tid 40584] [client 37.140.254.69:62441] [client 37.140.254.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.69, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aT6Oj4Y6r869zoqRQkSjFwAAAVM"]
[Sun Dec 14 18:16:56.758086 2025] [:error] [pid 40561:tid 40585] [client 37.140.254.69:62441] [client 37.140.254.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aT6OmIY6r869zoqRQkSjUQAAAVQ"]
[Sun Dec 14 18:16:57.676435 2025] [:error] [pid 40595:tid 40621] [client 37.140.254.64:36311] [client 37.140.254.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aT6Omfjrht6y4RN-xKTv4gAAAZY"]
[Sun Dec 14 18:17:25.503064 2025] [:error] [pid 40595:tid 40617] [client 37.140.254.101:41735] [client 37.140.254.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aT6Otfjrht6y4RN-xKTwBQAAAZI"]
[Sun Dec 14 18:17:26.453414 2025] [:error] [pid 39525:tid 39586] [client 37.140.254.101:22495] [client 37.140.254.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aT6Otk1fX_pB_BrvE_4g2gAAAIM"]
[Sun Dec 14 18:17:27.384684 2025] [:error] [pid 41600:tid 41617] [client 37.140.254.61:22229] [client 37.140.254.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aT6Ot9FLTBZjcwNd_VvBbAAAAQ4"]
[Sun Dec 14 18:17:37.652628 2025] [:error] [pid 39524:tid 39559] [client 37.140.254.71:62487] [client 37.140.254.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aT6OwWrVGpbDzFtDE9OsagAAAEM"]
[Sun Dec 14 18:17:38.631901 2025] [:error] [pid 39524:tid 39558] [client 37.140.254.59:47879] [client 37.140.254.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aT6OwmrVGpbDzFtDE9OsbgAAAEI"]
[Sun Dec 14 18:17:39.544455 2025] [:error] [pid 40561:tid 40567] [client 37.140.254.110:40491] [client 37.140.254.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aT6Ow4Y6r869zoqRQkSj_gAAAUI"]
[Sun Dec 14 18:17:47.852266 2025] [:error] [pid 41600:tid 41625] [client 37.140.254.87:60403] [client 37.140.254.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aT6Oy9FLTBZjcwNd_VvBtwAAARY"]
[Sun Dec 14 18:17:50.723250 2025] [:error] [pid 41600:tid 41619] [client 37.140.254.79:60571] [client 37.140.254.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aT6OztFLTBZjcwNd_VvBugAAARA"]
[Sun Dec 14 18:17:55.010234 2025] [:error] [pid 39524:tid 39567] [client 37.140.254.63:49691] [client 37.140.254.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aT6O02rVGpbDzFtDE9OsoAAAAEs"]
[Sun Dec 14 18:18:16.303473 2025] [:error] [pid 40561:tid 40573] [client 37.140.254.106:49209] [client 37.140.254.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aT6O6IY6r869zoqRQkSkYwAAAUg"]
[Sun Dec 14 18:18:20.636676 2025] [:error] [pid 40561:tid 40570] [client 37.140.254.66:33293] [client 37.140.254.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "aT6O7IY6r869zoqRQkSkdQAAAUU"]
[Sun Dec 14 18:18:30.676820 2025] [:error] [pid 39525:tid 39588] [client 37.140.254.59:63295] [client 37.140.254.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aT6O9k1fX_pB_BrvE_4hKQAAAIU"]
[Sun Dec 14 18:18:34.737940 2025] [:error] [pid 39524:tid 39569] [client 37.140.254.58:54347] [client 37.140.254.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aT6O-mrVGpbDzFtDE9Os5gAAAE0"]
[Sun Dec 14 18:18:42.067736 2025] [:error] [pid 41600:tid 41609] [client 37.140.254.86:24993] [client 37.140.254.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aT6PAtFLTBZjcwNd_VvCAAAAAQY"]
[Sun Dec 14 18:18:50.657717 2025] [:error] [pid 40596:tid 40648] [client 37.140.254.99:28707] [client 37.140.254.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aT6PCmvZZo4N2X7WoLxjVwAAAdY"]
[Sun Dec 14 18:18:54.727969 2025] [:error] [pid 39614:tid 39639] [client 37.140.254.97:40943] [client 37.140.254.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aT6PDvxybG8-9MflbDc4ZAAAANc"]
[Sun Dec 14 18:18:55.640604 2025] [:error] [pid 13799:tid 13809] [client 37.140.254.72:21237] [client 37.140.254.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aT6PD3jPEin01ElFTNYNCwAAAgc"]
[Sun Dec 14 18:19:05.405740 2025] [:error] [pid 40595:tid 40602] [client 37.140.254.98:29619] [client 37.140.254.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aT6PGfjrht6y4RN-xKTw2QAAAYM"]
[Sun Dec 14 18:19:14.219231 2025] [:error] [pid 41600:tid 41627] [client 37.140.254.73:22139] [client 37.140.254.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aT6PItFLTBZjcwNd_VvCQQAAARg"]
[Sun Dec 14 18:19:21.364408 2025] [:error] [pid 41600:tid 41612] [client 37.140.254.88:56419] [client 37.140.254.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aT6PKdFLTBZjcwNd_VvCcQAAAQk"]
[Sun Dec 14 18:19:22.285643 2025] [:error] [pid 39524:tid 39579] [client 37.140.254.63:40179] [client 37.140.254.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aT6PKmrVGpbDzFtDE9OtswAAAFc"]
[Sun Dec 14 18:19:26.386999 2025] [:error] [pid 39523:tid 39549] [client 37.140.254.92:33259] [client 37.140.254.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aT6PLjQTQH1raAj2lki6vwAAABU"]
[Sun Dec 14 18:19:31.983956 2025] [:error] [pid 13799:tid 13807] [client 37.140.254.82:51397] [client 37.140.254.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "aT6PM3jPEin01ElFTNYNjAAAAgU"]
[Sun Dec 14 18:19:32.888726 2025] [:error] [pid 40595:tid 40622] [client 37.140.254.87:42429] [client 37.140.254.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aT6PNPjrht6y4RN-xKTxCwAAAZc"]
[Sun Dec 14 18:19:42.773640 2025] [:error] [pid 39614:tid 39618] [client 37.140.254.105:60121] [client 37.140.254.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "aT6PPvxybG8-9MflbDc5fQAAAMI"]
[Sun Dec 14 18:19:46.892423 2025] [:error] [pid 13799:tid 13804] [client 37.140.254.145:25175] [client 37.140.254.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aT6PQnjPEin01ElFTNYNmwAAAgI"]
[Sun Dec 14 18:19:47.803697 2025] [:error] [pid 40595:tid 40614] [client 37.140.254.67:41787] [client 37.140.254.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aT6PQ_jrht6y4RN-xKTxkQAAAY8"]
[Sun Dec 14 18:19:51.958037 2025] [:error] [pid 40595:tid 40606] [client 37.140.254.76:59007] [client 37.140.254.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aT6PR_jrht6y4RN-xKTxmQAAAYc"]
[Sun Dec 14 18:19:54.608619 2025] [:error] [pid 39525:tid 39603] [client 37.140.254.58:39401] [client 37.140.254.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aT6PSk1fX_pB_BrvE_4iiwAAAJQ"]
[Sun Dec 14 18:20:03.045593 2025] [:error] [pid 41600:tid 41604] [client 37.140.254.84:25581] [client 37.140.254.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aT6PU9FLTBZjcwNd_VvCxgAAAQE"]
[Sun Dec 14 18:20:08.063325 2025] [:error] [pid 41600:tid 41625] [client 37.140.254.63:33859] [client 37.140.254.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aT6PWNFLTBZjcwNd_VvCzgAAARY"]
[Sun Dec 14 18:20:12.282615 2025] [:error] [pid 13799:tid 13806] [client 37.140.254.84:52543] [client 37.140.254.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aT6PXHjPEin01ElFTNYNtAAAAgQ"]
[Sun Dec 14 18:20:14.922721 2025] [:error] [pid 40561:tid 40586] [client 37.140.254.88:59605] [client 37.140.254.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "aT6PXoY6r869zoqRQkSlYAAAAVU"]
[Sun Dec 14 18:20:17.743566 2025] [:error] [pid 39525:tid 39583] [client 37.140.254.88:31475] [client 37.140.254.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aT6PYU1fX_pB_BrvE_4inAAAAIA"]
[Sun Dec 14 18:20:18.660587 2025] [:error] [pid 13799:tid 13803] [client 37.140.254.111:44931] [client 37.140.254.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "aT6PYnjPEin01ElFTNYNvgAAAgE"]
[Sun Dec 14 18:20:19.569604 2025] [:error] [pid 13799:tid 13802] [client 37.140.254.65:20265] [client 37.140.254.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aT6PY3jPEin01ElFTNYNwQAAAgA"]
[Sun Dec 14 18:20:31.750635 2025] [:error] [pid 41600:tid 41604] [client 37.140.254.110:50955] [client 37.140.254.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aT6Pb9FLTBZjcwNd_VvDGgAAAQE"]
[Sun Dec 14 18:20:37.491419 2025] [:error] [pid 40595:tid 40606] [client 37.140.254.72:45589] [client 37.140.254.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "aT6Pdfjrht6y4RN-xKTx-gAAAYc"]
[Sun Dec 14 18:20:43.186521 2025] [:error] [pid 39524:tid 39573] [client 37.140.254.93:33433] [client 37.140.254.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aT6Pe2rVGpbDzFtDE9OvRwAAAFE"]
[Sun Dec 14 18:20:48.812179 2025] [:error] [pid 40561:tid 40578] [client 37.140.254.78:26413] [client 37.140.254.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aT6PgIY6r869zoqRQkSl1gAAAU0"]
[Sun Dec 14 18:20:58.711671 2025] [:error] [pid 39525:tid 39598] [client 37.140.254.95:56603] [client 37.140.254.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aT6Pik1fX_pB_BrvE_4irQAAAI8"]
[Sun Dec 14 18:21:01.556670 2025] [:error] [pid 41600:tid 41612] [client 37.140.254.92:30805] [client 37.140.254.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aT6PjdFLTBZjcwNd_VvDOwAAAQk"]
[Sun Dec 14 18:21:04.328787 2025] [:error] [pid 41600:tid 41620] [client 37.140.254.72:29053] [client 37.140.254.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aT6PkNFLTBZjcwNd_VvDdgAAARE"]
[Sun Dec 14 18:21:09.026761 2025] [:error] [pid 39525:tid 39605] [client 37.140.254.62:57507] [client 37.140.254.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aT6PlU1fX_pB_BrvE_4ivQAAAJY"]
[Sun Dec 14 18:21:22.793886 2025] [:error] [pid 13799:tid 13809] [client 37.140.254.110:29079] [client 37.140.254.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aT6PonjPEin01ElFTNYObQAAAgc"]
[Sun Dec 14 18:21:23.751536 2025] [:error] [pid 40596:tid 40628] [client 37.140.254.77:25739] [client 37.140.254.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aT6Po2vZZo4N2X7WoLxkmAAAAcI"]
[Sun Dec 14 18:21:29.301405 2025] [:error] [pid 39525:tid 39588] [client 37.140.254.65:57307] [client 37.140.254.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aT6PqU1fX_pB_BrvE_4iygAAAIU"]
[Sun Dec 14 18:21:30.293145 2025] [:error] [pid 41600:tid 41623] [client 37.140.254.136:42055] [client 37.140.254.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aT6PqtFLTBZjcwNd_VvDigAAARQ"]
[Sun Dec 14 18:21:34.591941 2025] [:error] [pid 13799:tid 13811] [client 37.140.254.98:40893] [client 37.140.254.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aT6PrnjPEin01ElFTNYOegAAAgk"]
[Sun Dec 14 18:21:35.523298 2025] [:error] [pid 39524:tid 39577] [client 37.140.254.71:39915] [client 37.140.254.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aT6Pr2rVGpbDzFtDE9OvqAAAAFU"]
[Sun Dec 14 18:21:36.482887 2025] [:error] [pid 40596:tid 40628] [client 37.140.254.67:37079] [client 37.140.254.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.67, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aT6PsGvZZo4N2X7WoLxkxAAAAcI"]
[Sun Dec 14 18:21:36.489159 2025] [proxy_fcgi:error] [pid 40596:tid 40628] [client 37.140.254.67:37079] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:21:36.953094 2025] [:error] [pid 40596:tid 40641] [client 37.140.254.67:37079] [client 37.140.254.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aT6PsGvZZo4N2X7WoLxkxwAAAc8"]
[Sun Dec 14 18:21:43.288858 2025] [:error] [pid 40561:tid 40568] [client 37.140.254.59:23543] [client 37.140.254.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aT6Pt4Y6r869zoqRQkSmVwAAAUM"]
[Sun Dec 14 18:21:44.204566 2025] [:error] [pid 40561:tid 40587] [client 37.140.254.110:31315] [client 37.140.254.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "aT6PuIY6r869zoqRQkSmWAAAAVY"]
[Sun Dec 14 18:21:55.729752 2025] [:error] [pid 39525:tid 39598] [client 37.140.254.101:46011] [client 37.140.254.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aT6Pw01fX_pB_BrvE_4i9AAAAI8"]
[Sun Dec 14 18:21:56.647237 2025] [:error] [pid 40595:tid 40611] [client 37.140.254.65:53259] [client 37.140.254.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aT6PxPjrht6y4RN-xKTyUAAAAYw"]
[Sun Dec 14 18:22:00.270412 2025] [:error] [pid 40595:tid 40616] [client 37.140.254.75:56267] [client 37.140.254.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aT6PyPjrht6y4RN-xKTyVQAAAZE"]
[Sun Dec 14 18:22:01.229279 2025] [:error] [pid 39525:tid 39602] [client 37.140.254.70:41241] [client 37.140.254.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aT6PyU1fX_pB_BrvE_4i9QAAAJM"]
[Sun Dec 14 18:22:02.176790 2025] [proxy_fcgi:error] [pid 13799:tid 13820] [client 37.140.254.88:40929] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:22:02.651030 2025] [:error] [pid 13799:tid 13826] [client 37.140.254.88:40929] [client 37.140.254.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.254.88, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aT6PynjPEin01ElFTNYOowAAAhg"]
[Sun Dec 14 18:22:05.870898 2025] [:error] [pid 13799:tid 13823] [client 37.140.254.88:40929] [client 37.140.254.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aT6PzXjPEin01ElFTNYOpwAAAhU"]
[Sun Dec 14 18:22:12.879704 2025] [:error] [pid 41600:tid 41612] [client 37.140.254.136:37919] [client 37.140.254.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aT6P1NFLTBZjcwNd_VvEGAAAAQk"]
[Sun Dec 14 18:22:15.726787 2025] [:error] [pid 39525:tid 39595] [client 37.140.254.88:26325] [client 37.140.254.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aT6P101fX_pB_BrvE_4jDQAAAIw"]
[Sun Dec 14 18:22:16.645311 2025] [:error] [pid 41600:tid 41616] [client 37.140.254.110:46513] [client 37.140.254.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aT6P2NFLTBZjcwNd_VvEUwAAAQ0"]
[Sun Dec 14 18:22:22.235490 2025] [:error] [pid 41600:tid 41607] [client 37.140.254.145:21345] [client 37.140.254.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aT6P3tFLTBZjcwNd_VvEhgAAAQQ"]
[Sun Dec 14 18:22:26.472667 2025] [:error] [pid 39524:tid 39571] [client 37.140.254.84:28103] [client 37.140.254.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aT6P4mrVGpbDzFtDE9OwcQAAAE8"]
[Sun Dec 14 18:22:33.383144 2025] [:error] [pid 41600:tid 41610] [client 37.140.254.60:58131] [client 37.140.254.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aT6P6dFLTBZjcwNd_VvEjQAAAQc"]
[Sun Dec 14 18:22:34.367445 2025] [:error] [pid 41600:tid 41623] [client 37.140.254.92:27599] [client 37.140.254.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "aT6P6tFLTBZjcwNd_VvEjgAAARQ"]
[Sun Dec 14 18:22:37.091420 2025] [:error] [pid 41600:tid 41618] [client 37.140.254.77:32415] [client 37.140.254.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "aT6P7dFLTBZjcwNd_VvElQAAAQ8"]
[Sun Dec 14 18:22:47.979879 2025] [:error] [pid 40561:tid 40579] [client 37.140.254.82:24893] [client 37.140.254.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aT6P94Y6r869zoqRQkSmfgAAAU4"]
[Sun Dec 14 18:22:52.311651 2025] [:error] [pid 39614:tid 39640] [client 37.140.254.64:28461] [client 37.140.254.64] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "aT6P_PxybG8-9MflbDc7nwAAANg"]
[Sun Dec 14 18:22:52.770241 2025] [:error] [pid 39614:tid 39619] [client 37.140.254.64:28461] [client 37.140.254.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aT6P_PxybG8-9MflbDc7owAAAMM"]
[Sun Dec 14 18:22:58.164067 2025] [:error] [pid 41600:tid 41614] [client 37.140.254.98:25387] [client 37.140.254.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aT6QAtFLTBZjcwNd_VvFBgAAAQs"]
[Sun Dec 14 18:22:59.172074 2025] [:error] [pid 39614:tid 39623] [client 37.140.254.83:54285] [client 37.140.254.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aT6QA_xybG8-9MflbDc7pQAAAMc"]
[Sun Dec 14 18:23:10.373380 2025] [:error] [pid 39523:tid 39542] [client 37.140.254.92:47401] [client 37.140.254.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aT6QDjQTQH1raAj2lki8EwAAAA4"]
[Sun Dec 14 18:23:14.782477 2025] [:error] [pid 39614:tid 39634] [client 37.140.254.106:61859] [client 37.140.254.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aT6QEvxybG8-9MflbDc7tgAAANI"]
[Sun Dec 14 18:23:17.482316 2025] [:error] [pid 13799:tid 13820] [client 37.140.254.104:35115] [client 37.140.254.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aT6QFXjPEin01ElFTNYPVAAAAhI"]
[Sun Dec 14 18:23:26.421587 2025] [:error] [pid 39524:tid 39559] [client 37.140.254.72:27051] [client 37.140.254.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aT6QHmrVGpbDzFtDE9Ow7wAAAEM"]
[Sun Dec 14 18:23:29.173985 2025] [:error] [pid 40596:tid 40644] [client 37.140.254.111:35469] [client 37.140.254.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "aT6QIWvZZo4N2X7WoLxlZQAAAdI"]
[Sun Dec 14 18:23:31.997763 2025] [:error] [pid 39524:tid 39578] [client 37.140.254.136:36155] [client 37.140.254.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aT6QI2rVGpbDzFtDE9OxMAAAAFY"]
[Sun Dec 14 18:23:32.923255 2025] [:error] [pid 40561:tid 40577] [client 37.140.254.74:52801] [client 37.140.254.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "aT6QJIY6r869zoqRQkSnKAAAAUw"]
[Sun Dec 14 18:23:37.184507 2025] [:error] [pid 40596:tid 40647] [client 37.140.254.86:60059] [client 37.140.254.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aT6QKWvZZo4N2X7WoLxljAAAAdU"]
[Sun Dec 14 18:23:45.637542 2025] [:error] [pid 13799:tid 13811] [client 37.140.254.66:37581] [client 37.140.254.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aT6QMXjPEin01ElFTNYQEwAAAgk"]
[Sun Dec 14 18:23:46.554255 2025] [:error] [pid 39614:tid 39639] [client 37.140.254.59:60377] [client 37.140.254.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aT6QMvxybG8-9MflbDc8DgAAANc"]
[Sun Dec 14 18:23:55.099569 2025] [:error] [pid 40561:tid 40581] [client 37.140.254.68:26223] [client 37.140.254.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aT6QO4Y6r869zoqRQkSnNwAAAVA"]
[Sun Dec 14 18:23:59.338380 2025] [:error] [pid 41600:tid 41606] [client 37.140.254.145:40801] [client 37.140.254.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aT6QP9FLTBZjcwNd_VvGVwAAAQM"]
[Sun Dec 14 18:24:05.113312 2025] [:error] [pid 40561:tid 40579] [client 37.140.254.75:51503] [client 37.140.254.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aT6QRYY6r869zoqRQkSnPAAAAU4"]
[Sun Dec 14 18:24:06.035828 2025] [:error] [pid 41600:tid 41604] [client 37.140.254.60:28819] [client 37.140.254.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aT6QRtFLTBZjcwNd_VvGpgAAAQE"]
[Sun Dec 14 18:24:08.856813 2025] [:error] [pid 13799:tid 13816] [client 37.140.254.76:49379] [client 37.140.254.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aT6QSHjPEin01ElFTNYQNAAAAg4"]
[Sun Dec 14 18:24:13.009794 2025] [:error] [pid 39524:tid 39565] [client 37.140.254.60:28217] [client 37.140.254.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aT6QTWrVGpbDzFtDE9OxywAAAEk"]
[Sun Dec 14 18:24:18.051238 2025] [:error] [pid 40595:tid 40622] [client 37.140.254.73:34649] [client 37.140.254.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aT6QUvjrht6y4RN-xKTzlgAAAZc"]
[Sun Dec 14 18:24:18.963709 2025] [:error] [pid 39523:tid 39547] [client 37.140.254.82:34561] [client 37.140.254.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aT6QUjQTQH1raAj2lki8hwAAABM"]
[Sun Dec 14 18:24:22.001489 2025] [:error] [pid 39525:tid 39590] [client 37.140.254.73:32581] [client 37.140.254.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aT6QVk1fX_pB_BrvE_4kBgAAAIc"]
[Sun Dec 14 18:24:23.043686 2025] [:error] [pid 39524:tid 39567] [client 37.140.254.79:53973] [client 37.140.254.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aT6QV2rVGpbDzFtDE9Ox0QAAAEs"]
[Sun Dec 14 18:24:27.239603 2025] [:error] [pid 39524:tid 39580] [client 37.140.254.93:57167] [client 37.140.254.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aT6QW2rVGpbDzFtDE9Ox1gAAAFg"]
[Sun Dec 14 18:24:29.556594 2025] [:error] [pid 39524:tid 39577] [client 37.140.254.82:39931] [client 37.140.254.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aT6QXWrVGpbDzFtDE9Ox2QAAAFU"]
[Sun Dec 14 18:24:30.534202 2025] [:error] [pid 40561:tid 40571] [client 37.140.254.91:42773] [client 37.140.254.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aT6QXoY6r869zoqRQkSnkAAAAUY"]
[Sun Dec 14 18:24:31.476651 2025] [:error] [pid 39523:tid 39536] [client 37.140.254.62:37801] [client 37.140.254.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aT6QXzQTQH1raAj2lki8jwAAAAg"]
[Sun Dec 14 18:24:37.932248 2025] [:error] [pid 41600:tid 41604] [client 37.140.254.87:36061] [client 37.140.254.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aT6QZdFLTBZjcwNd_VvG0gAAAQE"]
[Sun Dec 14 18:24:42.333684 2025] [:error] [pid 39524:tid 39579] [client 37.140.254.81:21933] [client 37.140.254.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aT6QamrVGpbDzFtDE9Ox6wAAAFc"]
[Sun Dec 14 18:24:45.594876 2025] [:error] [pid 39614:tid 39624] [client 37.140.254.82:48777] [client 37.140.254.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aT6QbfxybG8-9MflbDc8VAAAAMg"]
[Sun Dec 14 18:24:46.515670 2025] [proxy_fcgi:error] [pid 40596:tid 40633] [client 37.140.254.72:26635] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Sun Dec 14 18:24:47.561532 2025] [:error] [pid 39524:tid 39576] [client 37.140.254.71:26197] [client 37.140.254.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aT6Qb2rVGpbDzFtDE9Ox-wAAAFQ"]
[Sun Dec 14 18:24:58.079454 2025] [:error] [pid 39614:tid 39625] [client 37.140.254.83:36145] [client 37.140.254.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "aT6QevxybG8-9MflbDc8uQAAAMk"]
[Sun Dec 14 18:24:59.049487 2025] [:error] [pid 39523:tid 39552] [client 37.140.254.75:42439] [client 37.140.254.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aT6QezQTQH1raAj2lki9CgAAABg"]
[Sun Dec 14 18:25:03.494943 2025] [:error] [pid 41600:tid 41613] [client 37.140.254.136:54699] [client 37.140.254.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aT6Qf9FLTBZjcwNd_VvHFwAAAQo"]
[Sun Dec 14 18:25:11.092932 2025] [:error] [pid 41600:tid 41623] [client 37.140.254.109:41709] [client 37.140.254.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aT6Qh9FLTBZjcwNd_VvHVAAAARQ"]
[Sun Dec 14 18:25:15.263272 2025] [:error] [pid 39524:tid 39572] [client 37.140.254.101:46261] [client 37.140.254.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aT6Qi2rVGpbDzFtDE9OyXgAAAFA"]
[Sun Dec 14 18:25:18.763141 2025] [:error] [pid 13799:tid 13819] [client 37.140.254.106:56089] [client 37.140.254.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aT6QjnjPEin01ElFTNYQ2wAAAhE"]
[Sun Dec 14 18:25:21.590191 2025] [:error] [pid 40596:tid 40648] [client 37.140.254.68:38985] [client 37.140.254.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aT6QkWvZZo4N2X7WoLxmmAAAAdY"]
[Sun Dec 14 18:25:24.281711 2025] [:error] [pid 40595:tid 40614] [client 37.140.254.136:58663] [client 37.140.254.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aT6QlPjrht6y4RN-xKTzzAAAAY8"]
[Sun Dec 14 18:25:32.259613 2025] [:error] [pid 39524:tid 39574] [client 37.140.254.145:39595] [client 37.140.254.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aT6QnGrVGpbDzFtDE9OyiAAAAFI"]
[Sun Dec 14 18:25:38.178454 2025] [:error] [pid 13799:tid 13822] [client 37.140.254.58:43519] [client 37.140.254.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aT6QonjPEin01ElFTNYRCQAAAhQ"]
[Sun Dec 14 18:25:39.112620 2025] [proxy_fcgi:error] [pid 39524:tid 39565] [client 37.140.254.93:27769] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 18:25:39.575646 2025] [:error] [pid 39524:tid 39557] [client 37.140.254.93:27769] [client 37.140.254.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aT6Qo2rVGpbDzFtDE9Oy9gAAAEE"]
[Sun Dec 14 18:25:40.528986 2025] [:error] [pid 39524:tid 39570] [client 37.140.254.102:62963] [client 37.140.254.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aT6QpGrVGpbDzFtDE9Oy-AAAAE4"]
[Sun Dec 14 18:25:45.796494 2025] [:error] [pid 13799:tid 13810] [client 37.140.254.73:25607] [client 37.140.254.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aT6QqXjPEin01ElFTNYRGQAAAgg"]
[Sun Dec 14 18:25:46.764819 2025] [:error] [pid 41600:tid 41614] [client 37.140.254.59:59385] [client 37.140.254.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aT6QqtFLTBZjcwNd_VvIOAAAAQs"]
[Sun Dec 14 18:25:58.076947 2025] [:error] [pid 39614:tid 39632] [client 37.140.254.106:32881] [client 37.140.254.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aT6QtvxybG8-9MflbDc9agAAANA"]
[Sun Dec 14 18:25:59.049569 2025] [:error] [pid 13799:tid 13807] [client 37.140.254.104:38783] [client 37.140.254.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aT6Qt3jPEin01ElFTNYRRwAAAgU"]
[Sun Dec 14 18:26:01.829562 2025] [:error] [pid 39524:tid 39561] [client 37.140.254.145:59693] [client 37.140.254.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/log.php"] [unique_id "aT6QuWrVGpbDzFtDE9OzgAAAAEU"]
[Sun Dec 14 18:26:02.765920 2025] [:error] [pid 41600:tid 41623] [client 37.140.254.92:26815] [client 37.140.254.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aT6QutFLTBZjcwNd_VvIXQAAARQ"]
[Sun Dec 14 18:26:03.782683 2025] [:error] [pid 40595:tid 40616] [client 37.140.254.89:20823] [client 37.140.254.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aT6Qu_jrht6y4RN-xKT0EQAAAZE"]
[Sun Dec 14 18:26:04.719407 2025] [:error] [pid 41600:tid 41614] [client 37.140.254.64:31881] [client 37.140.254.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/aw.php"] [unique_id "aT6QvNFLTBZjcwNd_VvIbAAAAQs"]
[Sun Dec 14 18:26:12.024716 2025] [:error] [pid 39614:tid 39639] [client 37.140.254.104:49865] [client 37.140.254.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aT6QxPxybG8-9MflbDc9eAAAANc"]
[Sun Dec 14 18:26:12.984499 2025] [:error] [pid 39524:tid 39575] [client 37.140.254.110:40187] [client 37.140.254.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/install.php"] [unique_id "aT6QxGrVGpbDzFtDE9OzqwAAAFM"]
[Sun Dec 14 18:26:17.127914 2025] [:error] [pid 39614:tid 39628] [client 37.140.254.86:49505] [client 37.140.254.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aT6QyfxybG8-9MflbDc9fAAAAMw"]
[Sun Dec 14 18:26:18.073924 2025] [:error] [pid 39524:tid 39578] [client 37.140.254.59:34207] [client 37.140.254.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aT6QymrVGpbDzFtDE9OzvAAAAFY"]
[Sun Dec 14 18:26:22.608355 2025] [:error] [pid 39614:tid 39627] [client 37.140.254.106:22773] [client 37.140.254.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/template-less.php"] [unique_id "aT6QzvxybG8-9MflbDc9ggAAAMs"]
[Sun Dec 14 18:26:23.569663 2025] [:error] [pid 41600:tid 41626] [client 37.140.254.109:27869] [client 37.140.254.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aT6Qz9FLTBZjcwNd_VvIlgAAARc"]
[Sun Dec 14 18:26:34.930634 2025] [:error] [pid 39524:tid 39564] [client 37.140.254.103:31809] [client 37.140.254.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aT6Q2mrVGpbDzFtDE9Oz4AAAAEg"]
[Sun Dec 14 18:26:35.851358 2025] [:error] [pid 41600:tid 41610] [client 37.140.254.61:63183] [client 37.140.254.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aT6Q29FLTBZjcwNd_VvItQAAAQc"]
[Sun Dec 14 18:26:40.070590 2025] [:error] [pid 41600:tid 41626] [client 37.140.254.66:60789] [client 37.140.254.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "aT6Q4NFLTBZjcwNd_VvIxgAAARc"]
[Sun Dec 14 18:26:42.874850 2025] [:error] [pid 41600:tid 41617] [client 37.140.254.78:22863] [client 37.140.254.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aT6Q4tFLTBZjcwNd_VvIyQAAAQ4"]
[Sun Dec 14 18:26:45.642196 2025] [:error] [pid 39523:tid 39546] [client 37.140.254.88:20373] [client 37.140.254.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/load.php"] [unique_id "aT6Q5TQTQH1raAj2lki9-AAAABI"]
[Sun Dec 14 18:26:46.605577 2025] [:error] [pid 39525:tid 39593] [client 37.140.254.106:38715] [client 37.140.254.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aT6Q5k1fX_pB_BrvE_4lCwAAAIo"]
[Sun Dec 14 18:26:47.548447 2025] [:error] [pid 40561:tid 40566] [client 37.140.254.98:36279] [client 37.140.254.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aT6Q54Y6r869zoqRQkSpVAAAAUE"]
[Sun Dec 14 18:26:55.378174 2025] [:error] [pid 13799:tid 13809] [client 37.140.254.67:45911] [client 37.140.254.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aT6Q73jPEin01ElFTNYRqwAAAgc"]
[Sun Dec 14 18:26:58.319795 2025] [:error] [pid 40596:tid 40635] [client 37.140.254.61:47257] [client 37.140.254.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aT6Q8mvZZo4N2X7WoLxnWQAAAck"]
[Sun Dec 14 18:27:04.376457 2025] [:error] [pid 39525:tid 39598] [client 37.140.254.69:47369] [client 37.140.254.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aT6Q-E1fX_pB_BrvE_4lQwAAAI8"]
[Sun Dec 14 18:27:05.311916 2025] [:error] [pid 40596:tid 40633] [client 37.140.254.80:54357] [client 37.140.254.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aT6Q-WvZZo4N2X7WoLxniwAAAcc"]
[Sun Dec 14 18:27:09.156045 2025] [:error] [pid 41600:tid 41627] [client 37.140.254.69:57501] [client 37.140.254.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aT6Q_dFLTBZjcwNd_VvJlwAAARg"]
[Sun Dec 14 18:27:24.034474 2025] [:error] [pid 13799:tid 13819] [client 37.140.254.145:36073] [client 37.140.254.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aT6RDHjPEin01ElFTNYR7AAAAhE"]
[Sun Dec 14 18:27:26.376018 2025] [:error] [pid 40561:tid 40578] [client 37.140.254.107:39335] [client 37.140.254.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aT6RDoY6r869zoqRQkSpcQAAAU0"]
[Sun Dec 14 18:27:30.496525 2025] [:error] [pid 39523:tid 39543] [client 37.140.254.69:54325] [client 37.140.254.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aT6REjQTQH1raAj2lki-ZwAAAA8"]
[Sun Dec 14 18:27:31.562910 2025] [:error] [pid 13799:tid 13803] [client 37.140.254.93:52363] [client 37.140.254.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aT6RE3jPEin01ElFTNYR9wAAAgE"]
[Sun Dec 14 18:27:32.525859 2025] [:error] [pid 40596:tid 40639] [client 37.140.254.62:21095] [client 37.140.254.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aT6RFGvZZo4N2X7WoLxnrwAAAc0"]
[Sun Dec 14 18:27:35.199474 2025] [autoindex:error] [pid 39523:tid 39534] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:35.661434 2025] [autoindex:error] [pid 39523:tid 39541] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:36.128588 2025] [autoindex:error] [pid 39523:tid 39530] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:36.595130 2025] [autoindex:error] [pid 39523:tid 39549] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:38.750144 2025] [autoindex:error] [pid 39523:tid 39529] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:39.212082 2025] [autoindex:error] [pid 39523:tid 39548] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:39.684792 2025] [autoindex:error] [pid 39523:tid 39531] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:40.155100 2025] [autoindex:error] [pid 39523:tid 39532] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:40.631177 2025] [autoindex:error] [pid 39523:tid 39550] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:41.477921 2025] [autoindex:error] [pid 39523:tid 39546] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:42.791476 2025] [autoindex:error] [pid 39523:tid 39543] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:44.828329 2025] [autoindex:error] [pid 39523:tid 39542] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:45.294204 2025] [autoindex:error] [pid 39523:tid 39540] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:49.329086 2025] [autoindex:error] [pid 39523:tid 39534] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:49.881668 2025] [autoindex:error] [pid 39523:tid 39541] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:50.344728 2025] [autoindex:error] [pid 39523:tid 39530] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:50.878580 2025] [autoindex:error] [pid 39523:tid 39549] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:53.236956 2025] [autoindex:error] [pid 39523:tid 39548] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:53.700226 2025] [autoindex:error] [pid 39523:tid 39531] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:27:56.017732 2025] [autoindex:error] [pid 39523:tid 39550] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:28:00.640860 2025] [autoindex:error] [pid 39523:tid 39540] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:28:01.116465 2025] [autoindex:error] [pid 39523:tid 39545] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:28:01.596658 2025] [autoindex:error] [pid 39523:tid 39551] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:28:12.073428 2025] [autoindex:error] [pid 39523:tid 39539] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:28:14.524159 2025] [autoindex:error] [pid 39523:tid 39528] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:28:15.015081 2025] [autoindex:error] [pid 39523:tid 39551] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:28:16.500924 2025] [autoindex:error] [pid 39523:tid 39548] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:28:16.973001 2025] [autoindex:error] [pid 39523:tid 39531] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:28:17.861112 2025] [autoindex:error] [pid 39523:tid 39529] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:28:22.828758 2025] [autoindex:error] [pid 39523:tid 39546] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:28:24.798462 2025] [autoindex:error] [pid 39523:tid 39537] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:03.419396 2025] [autoindex:error] [pid 39523:tid 39537] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:03.927679 2025] [autoindex:error] [pid 39523:tid 39534] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:04.846098 2025] [autoindex:error] [pid 39523:tid 39535] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:05.338185 2025] [autoindex:error] [pid 39523:tid 39531] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:05.806093 2025] [autoindex:error] [pid 39523:tid 39528] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:06.280283 2025] [autoindex:error] [pid 39523:tid 39533] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:06.829958 2025] [autoindex:error] [pid 39523:tid 39548] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:07.295008 2025] [autoindex:error] [pid 39523:tid 39529] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:10.250447 2025] [autoindex:error] [pid 39523:tid 39549] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:12.400387 2025] [autoindex:error] [pid 39523:tid 39546] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:12.865763 2025] [autoindex:error] [pid 39523:tid 39536] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:13.416056 2025] [autoindex:error] [pid 39523:tid 39550] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:15.603903 2025] [autoindex:error] [pid 39523:tid 39533] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:16.083759 2025] [autoindex:error] [pid 39523:tid 39530] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:16.545884 2025] [autoindex:error] [pid 39523:tid 39549] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:17.009615 2025] [autoindex:error] [pid 39523:tid 39551] [client 37.140.254.106:24237] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:29:56.598850 2025] [autoindex:error] [pid 39525:tid 39604] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:14.640285 2025] [autoindex:error] [pid 39525:tid 39590] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:21.561539 2025] [autoindex:error] [pid 39525:tid 39606] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:22.045281 2025] [autoindex:error] [pid 39525:tid 39584] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:29.359243 2025] [autoindex:error] [pid 39525:tid 39603] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:29.829657 2025] [autoindex:error] [pid 39525:tid 39595] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:30.292850 2025] [autoindex:error] [pid 39525:tid 39599] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:30.890350 2025] [autoindex:error] [pid 39525:tid 39589] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:31.371764 2025] [autoindex:error] [pid 39525:tid 39586] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:31.955343 2025] [autoindex:error] [pid 39525:tid 39590] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:32.433835 2025] [autoindex:error] [pid 39525:tid 39604] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:32.894768 2025] [autoindex:error] [pid 39525:tid 39596] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:30:33.376310 2025] [autoindex:error] [pid 39525:tid 39600] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 18:31:03.122751 2025] [autoindex:error] [pid 39525:tid 39601] [client 37.140.254.111:47997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 20:22:54.395071 2025] [:error] [pid 39525:tid 39607] [client 4.241.176.161:14282] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aT6sHk1fX_pB_BrvE_5MJAAAAJg"]
[Sun Dec 14 20:22:56.934359 2025] [:error] [pid 41600:tid 41603] [client 4.241.176.161:14280] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aT6sINFLTBZjcwNd_VsS5wAAAQA"]
[Sun Dec 14 20:22:59.418849 2025] [:error] [pid 39614:tid 39621] [client 4.241.176.161:14303] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aT6sI_xybG8-9MflbDdveAAAAMU"]
[Sun Dec 14 20:23:01.430781 2025] [:error] [pid 39524:tid 39556] [client 4.241.176.161:14317] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aT6sJWrVGpbDzFtDE9Pr-gAAAEA"]
[Sun Dec 14 20:23:03.290912 2025] [:error] [pid 39525:tid 39594] [client 4.241.176.161:14278] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "aT6sJ01fX_pB_BrvE_5MJgAAAIs"]
[Sun Dec 14 20:23:04.016138 2025] [:error] [pid 39525:tid 39606] [client 4.241.176.161:14288] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "aT6sKE1fX_pB_BrvE_5MJwAAAJc"]
[Sun Dec 14 20:23:05.483752 2025] [:error] [pid 39614:tid 39630] [client 4.241.176.161:14212] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "aT6sKfxybG8-9MflbDdvfAAAAM4"]
[Sun Dec 14 20:23:05.990029 2025] [:error] [pid 13799:tid 13826] [client 4.241.176.161:14295] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "aT6sKXjPEin01ElFTNY-8wAAAhg"]
[Sun Dec 14 20:23:06.394103 2025] [:error] [pid 39525:tid 39595] [client 4.241.176.161:14274] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/fucku.php"] [unique_id "aT6sKk1fX_pB_BrvE_5MKwAAAIw"]
[Sun Dec 14 20:23:06.852241 2025] [:error] [pid 13799:tid 13820] [client 4.241.176.161:14327] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/fucku.php"] [unique_id "aT6sKnjPEin01ElFTNY-9AAAAhI"]
[Sun Dec 14 20:23:07.289116 2025] [:error] [pid 39524:tid 39562] [client 4.241.176.161:14299] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/fucku.php"] [unique_id "aT6sK2rVGpbDzFtDE9PsOAAAAEY"]
[Sun Dec 14 20:23:07.695668 2025] [:error] [pid 39523:tid 39528] [client 4.241.176.161:14285] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/fucku.php"] [unique_id "aT6sKzQTQH1raAj2lkjm-gAAAAA"]
[Sun Dec 14 20:23:08.123951 2025] [:error] [pid 41600:tid 41603] [client 4.241.176.161:14218] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aT6sLNFLTBZjcwNd_VsTHgAAAQA"]
[Sun Dec 14 20:23:08.938539 2025] [:error] [pid 39614:tid 39636] [client 4.241.176.161:14228] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aT6sLPxybG8-9MflbDdvgQAAANQ"]
[Sun Dec 14 20:23:10.227746 2025] [:error] [pid 40561:tid 40583] [client 4.241.176.161:14224] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aT6sLoY6r869zoqRQkTV1gAAAVI"]
[Sun Dec 14 20:23:11.308358 2025] [:error] [pid 41600:tid 41620] [client 4.241.176.161:14223] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aT6sL9FLTBZjcwNd_VsTNgAAARE"]
[Sun Dec 14 20:23:11.921181 2025] [:error] [pid 13799:tid 13823] [client 4.241.176.161:14272] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aT6sL3jPEin01ElFTNY--QAAAhU"]
[Sun Dec 14 20:23:12.527319 2025] [:error] [pid 13799:tid 13822] [client 4.241.176.161:14306] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aT6sMHjPEin01ElFTNY--wAAAhQ"]
[Sun Dec 14 20:23:13.876171 2025] [:error] [pid 13799:tid 13818] [client 4.241.176.161:14296] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aT6sMXjPEin01ElFTNY-_gAAAhA"]
[Sun Dec 14 20:23:15.247117 2025] [:error] [pid 41600:tid 41611] [client 4.241.176.161:14253] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aT6sM9FLTBZjcwNd_VsTVgAAAQg"]
[Sun Dec 14 20:23:17.221306 2025] [:error] [pid 39523:tid 39552] [client 4.241.176.161:14256] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aT6sNTQTQH1raAj2lkjnBwAAABg"]
[Sun Dec 14 20:23:19.002417 2025] [:error] [pid 40561:tid 40574] [client 4.241.176.161:14322] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aT6sN4Y6r869zoqRQkTV6AAAAUk"]
[Sun Dec 14 20:23:20.729357 2025] [:error] [pid 41600:tid 41623] [client 4.241.176.161:14148] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aT6sONFLTBZjcwNd_VsTZAAAARQ"]
[Sun Dec 14 20:23:21.595947 2025] [:error] [pid 41600:tid 41611] [client 4.241.176.161:14325] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aT6sOdFLTBZjcwNd_VsTZgAAAQg"]
[Sun Dec 14 20:23:22.284669 2025] [:error] [pid 39614:tid 39628] [client 4.241.176.161:14209] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aT6sOvxybG8-9MflbDdvpwAAAMw"]
[Sun Dec 14 20:23:22.714012 2025] [:error] [pid 41600:tid 41616] [client 4.241.176.161:14215] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aT6sOtFLTBZjcwNd_VsTZwAAAQ0"]
[Sun Dec 14 20:23:24.149374 2025] [:error] [pid 40596:tid 40628] [client 4.241.176.161:14217] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aT6sPGvZZo4N2X7WoLyT8gAAAcI"]
[Sun Dec 14 20:23:25.557711 2025] [:error] [pid 40596:tid 40650] [client 4.241.176.161:14255] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aT6sPWvZZo4N2X7WoLyT9AAAAdg"]
[Sun Dec 14 20:23:26.267953 2025] [:error] [pid 39523:tid 39532] [client 4.241.176.161:14309] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aT6sPjQTQH1raAj2lkjnDgAAAAQ"]
[Sun Dec 14 20:23:27.280112 2025] [:error] [pid 39523:tid 39546] [client 4.241.176.161:14335] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aT6sPzQTQH1raAj2lkjnEQAAABI"]
[Sun Dec 14 20:23:27.771508 2025] [:error] [pid 40596:tid 40636] [client 4.241.176.161:14324] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aT6sP2vZZo4N2X7WoLyT9gAAAco"]
[Sun Dec 14 20:23:28.761678 2025] [:error] [pid 40595:tid 40611] [client 4.241.176.161:14275] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aT6sQPjrht6y4RN-xKQhBAAAAYw"]
[Sun Dec 14 20:23:30.027288 2025] [:error] [pid 40595:tid 40622] [client 4.241.176.161:14220] [client 4.241.176.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aT6sQvjrht6y4RN-xKQhBQAAAZc"]
[Sun Dec 14 20:23:30.910992 2025] [:error] [pid 41600:tid 41611] [client 4.241.176.161:14302] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aT6sQtFLTBZjcwNd_VsTbgAAAQg"]
[Sun Dec 14 20:23:31.497041 2025] [:error] [pid 39525:tid 39601] [client 4.241.176.161:14234] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aT6sQ01fX_pB_BrvE_5MNwAAAJI"]
[Sun Dec 14 20:23:31.839126 2025] [:error] [pid 40561:tid 40580] [client 4.241.176.161:14257] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aT6sQ4Y6r869zoqRQkTV8wAAAU8"]
[Sun Dec 14 20:23:32.726812 2025] [:error] [pid 39525:tid 39586] [client 4.241.176.161:14219] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aT6sRE1fX_pB_BrvE_5MOgAAAIM"]
[Sun Dec 14 20:23:33.842827 2025] [:error] [pid 40561:tid 40574] [client 4.241.176.161:14319] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aT6sRYY6r869zoqRQkTV9QAAAUk"]
[Sun Dec 14 20:23:35.093209 2025] [:error] [pid 41600:tid 41617] [client 4.241.176.161:14310] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aT6sR9FLTBZjcwNd_VsTdQAAAQ4"]
[Sun Dec 14 20:23:35.430093 2025] [:error] [pid 39614:tid 39632] [client 4.241.176.161:14155] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aT6sR_xybG8-9MflbDdvrAAAANA"]
[Sun Dec 14 20:23:36.587367 2025] [:error] [pid 39524:tid 39578] [client 4.241.176.161:14166] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aT6sSGrVGpbDzFtDE9PsfAAAAFY"]
[Sun Dec 14 20:23:37.636478 2025] [:error] [pid 40595:tid 40613] [client 4.241.176.161:14208] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aT6sSfjrht6y4RN-xKQhDAAAAY4"]
[Sun Dec 14 20:23:38.307424 2025] [:error] [pid 39614:tid 39628] [client 4.241.176.161:14305] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aT6sSvxybG8-9MflbDdvsgAAAMw"]
[Sun Dec 14 20:23:38.883942 2025] [:error] [pid 39525:tid 39598] [client 4.241.176.161:14254] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aT6sSk1fX_pB_BrvE_5MRQAAAI8"]
[Sun Dec 14 20:23:39.799133 2025] [:error] [pid 39614:tid 39636] [client 4.241.176.161:14281] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/marijuana.php"] [unique_id "aT6sS_xybG8-9MflbDdvswAAANQ"]
[Sun Dec 14 20:23:40.506361 2025] [:error] [pid 41600:tid 41612] [client 4.241.176.161:14225] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aT6sTNFLTBZjcwNd_VsTfQAAAQk"]
[Sun Dec 14 20:23:41.404595 2025] [:error] [pid 41600:tid 41626] [client 4.241.176.161:14330] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aT6sTdFLTBZjcwNd_VsTggAAARc"]
[Sun Dec 14 20:23:42.245122 2025] [:error] [pid 39523:tid 39528] [client 4.241.176.161:14314] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aT6sTjQTQH1raAj2lkjnFwAAAAA"]
[Sun Dec 14 20:23:42.991622 2025] [:error] [pid 39525:tid 39596] [client 4.241.176.161:14264] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aT6sTk1fX_pB_BrvE_5MSAAAAI0"]
[Sun Dec 14 20:23:43.470523 2025] [:error] [pid 13799:tid 13821] [client 4.241.176.161:14273] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "aT6sT3jPEin01ElFTNY_OQAAAhM"]
[Sun Dec 14 20:23:44.062605 2025] [:error] [pid 39523:tid 39532] [client 4.241.176.161:14308] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "aT6sUDQTQH1raAj2lkjnGQAAAAQ"]
[Sun Dec 14 20:23:45.045244 2025] [:error] [pid 39523:tid 39543] [client 4.241.176.161:14326] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "aT6sUTQTQH1raAj2lkjnGwAAAA8"]
[Sun Dec 14 20:23:45.720707 2025] [:error] [pid 39524:tid 39573] [client 4.241.176.161:14320] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "aT6sUWrVGpbDzFtDE9PshQAAAFE"]
[Sun Dec 14 20:23:46.923503 2025] [:error] [pid 41600:tid 41603] [client 4.241.176.161:14259] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aT6sUtFLTBZjcwNd_VsTjAAAAQA"]
[Sun Dec 14 20:23:47.714940 2025] [:error] [pid 13799:tid 13818] [client 4.241.176.161:14321] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aT6sU3jPEin01ElFTNY_PgAAAhA"]
[Sun Dec 14 20:23:49.644352 2025] [:error] [pid 39523:tid 39535] [client 4.241.176.161:14307] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aT6sVTQTQH1raAj2lkjnHAAAAAc"]
[Sun Dec 14 20:23:50.451166 2025] [:error] [pid 41600:tid 41608] [client 4.241.176.161:14156] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aT6sVtFLTBZjcwNd_VsTkAAAAQU"]
[Sun Dec 14 20:23:51.919566 2025] [:error] [pid 39524:tid 39561] [client 4.241.176.161:14210] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aT6sV2rVGpbDzFtDE9PsjwAAAEU"]
[Sun Dec 14 20:23:57.797467 2025] [:error] [pid 39525:tid 39585] [client 4.241.176.161:14284] [client 4.241.176.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aT6sXU1fX_pB_BrvE_5MVQAAAII"]
[Sun Dec 14 20:24:12.149680 2025] [:error] [pid 13799:tid 13802] [client 4.241.176.161:14239] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aT6sbHjPEin01ElFTNY_bAAAAgA"]
[Sun Dec 14 20:24:13.283209 2025] [:error] [pid 40596:tid 40633] [client 4.241.176.161:14283] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aT6sbWvZZo4N2X7WoLyUfgAAAcc"]
[Sun Dec 14 20:24:14.623450 2025] [:error] [pid 39523:tid 39531] [client 4.241.176.161:14329] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aT6sbjQTQH1raAj2lkjnUgAAAAM"]
[Sun Dec 14 20:24:15.919002 2025] [:error] [pid 39614:tid 39624] [client 4.241.176.161:14334] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aT6sb_xybG8-9MflbDdv9gAAAMg"]
[Sun Dec 14 20:24:16.804315 2025] [:error] [pid 40596:tid 40646] [client 4.241.176.161:14289] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aT6scGvZZo4N2X7WoLyUkAAAAdQ"]
[Sun Dec 14 20:24:17.902287 2025] [:error] [pid 41600:tid 41603] [client 4.241.176.161:14271] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aT6scdFLTBZjcwNd_VsTsgAAAQA"]
[Sun Dec 14 20:24:18.877599 2025] [:error] [pid 39523:tid 39536] [client 4.241.176.161:14240] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aT6scjQTQH1raAj2lkjnVAAAAAg"]
[Sun Dec 14 20:24:20.115027 2025] [:error] [pid 13799:tid 13809] [client 4.241.176.161:14332] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aT6sdHjPEin01ElFTNY_cQAAAgc"]
[Sun Dec 14 20:24:21.761908 2025] [:error] [pid 41600:tid 41621] [client 4.241.176.161:14185] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aT6sddFLTBZjcwNd_VsTtAAAARI"]
[Sun Dec 14 20:24:22.878885 2025] [:error] [pid 41600:tid 41617] [client 4.241.176.161:14298] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aT6sdtFLTBZjcwNd_VsTtwAAAQ4"]
[Sun Dec 14 20:24:23.679621 2025] [:error] [pid 41600:tid 41614] [client 4.241.176.161:13892] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aT6sd9FLTBZjcwNd_VsTuQAAAQs"]
[Sun Dec 14 20:24:24.736557 2025] [:error] [pid 13799:tid 13806] [client 4.241.176.161:13894] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aT6seHjPEin01ElFTNY_cwAAAgQ"]
[Sun Dec 14 20:24:25.757728 2025] [:error] [pid 40595:tid 40617] [client 4.241.176.161:14226] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aT6sefjrht6y4RN-xKQhhQAAAZI"]
[Sun Dec 14 20:24:26.742385 2025] [:error] [pid 41600:tid 41603] [client 4.241.176.161:14231] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aT6setFLTBZjcwNd_VsTvwAAAQA"]
[Sun Dec 14 20:24:28.129633 2025] [:error] [pid 39524:tid 39574] [client 4.241.176.161:14233] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aT6sfGrVGpbDzFtDE9PsxgAAAFI"]
[Sun Dec 14 20:24:30.243644 2025] [:error] [pid 40596:tid 40644] [client 4.241.176.161:14313] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aT6sfmvZZo4N2X7WoLyUrQAAAdI"]
[Sun Dec 14 20:24:31.391026 2025] [:error] [pid 39525:tid 39589] [client 4.241.176.161:14167] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aT6sf01fX_pB_BrvE_5MkQAAAIY"]
[Sun Dec 14 20:24:32.310584 2025] [:error] [pid 40596:tid 40642] [client 4.241.176.161:14292] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aT6sgGvZZo4N2X7WoLyUtgAAAdA"]
[Sun Dec 14 20:24:33.251045 2025] [:error] [pid 13799:tid 13805] [client 4.241.176.161:14214] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aT6sgXjPEin01ElFTNY_eQAAAgM"]
[Sun Dec 14 20:24:34.711614 2025] [:error] [pid 13799:tid 13808] [client 4.241.176.161:14243] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aT6sgnjPEin01ElFTNY_ewAAAgY"]
[Sun Dec 14 20:24:35.472509 2025] [:error] [pid 13799:tid 13821] [client 4.241.176.161:14286] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aT6sg3jPEin01ElFTNY_fAAAAhM"]
[Sun Dec 14 20:24:36.391878 2025] [:error] [pid 39614:tid 39626] [client 4.241.176.161:14293] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aT6shPxybG8-9MflbDdv_AAAAMo"]
[Sun Dec 14 20:24:37.393638 2025] [:error] [pid 13799:tid 13814] [client 4.241.176.161:14242] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aT6shXjPEin01ElFTNY_gAAAAgw"]
[Sun Dec 14 20:24:39.133893 2025] [:error] [pid 39523:tid 39550] [client 4.241.176.161:14180] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aT6shzQTQH1raAj2lkjn0gAAABY"]
[Sun Dec 14 20:24:41.838062 2025] [:error] [pid 40596:tid 40632] [client 4.241.176.161:14333] [client 4.241.176.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aT6siWvZZo4N2X7WoLyUwAAAAcY"]
[Sun Dec 14 20:24:42.111617 2025] [:error] [pid 39614:tid 39632] [client 4.241.176.161:14312] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aT6sivxybG8-9MflbDdwAAAAANA"]
[Sun Dec 14 20:24:42.517687 2025] [:error] [pid 39614:tid 39621] [client 4.241.176.161:14266] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aT6sivxybG8-9MflbDdwAgAAAMU"]
[Sun Dec 14 20:24:43.167179 2025] [:error] [pid 40596:tid 40643] [client 4.241.176.161:14331] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aT6si2vZZo4N2X7WoLyUwgAAAdE"]
[Sun Dec 14 20:24:43.795058 2025] [:error] [pid 40561:tid 40571] [client 4.241.176.161:14301] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aT6si4Y6r869zoqRQkTWcgAAAUY"]
[Sun Dec 14 20:24:44.715445 2025] [:error] [pid 41600:tid 41603] [client 4.241.176.161:14279] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aT6sjNFLTBZjcwNd_VsT1AAAAQA"]
[Sun Dec 14 20:24:45.900792 2025] [:error] [pid 39614:tid 39634] [client 4.241.176.161:14248] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aT6sjfxybG8-9MflbDdwAwAAANI"]
[Sun Dec 14 20:24:46.578519 2025] [:error] [pid 39614:tid 39619] [client 4.241.176.161:14170] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aT6sjvxybG8-9MflbDdwBAAAAMM"]
[Sun Dec 14 20:24:46.937811 2025] [:error] [pid 39525:tid 39599] [client 4.241.176.161:14216] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kk.php"] [unique_id "aT6sjk1fX_pB_BrvE_5MyAAAAJA"]
[Sun Dec 14 20:24:47.752706 2025] [:error] [pid 39524:tid 39559] [client 4.241.176.161:14241] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kk.php"] [unique_id "aT6sj2rVGpbDzFtDE9Ps0wAAAEM"]
[Sun Dec 14 20:24:48.620791 2025] [:error] [pid 39524:tid 39564] [client 4.241.176.161:14318] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kk.php"] [unique_id "aT6skGrVGpbDzFtDE9Ps1QAAAEg"]
[Sun Dec 14 20:24:49.406627 2025] [:error] [pid 40595:tid 40614] [client 4.241.176.161:14144] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kk.php"] [unique_id "aT6skfjrht6y4RN-xKQhqwAAAY8"]
[Sun Dec 14 20:24:50.623097 2025] [:error] [pid 41600:tid 41608] [client 4.241.176.161:14262] [client 4.241.176.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aT6sktFLTBZjcwNd_VsT3AAAAQU"]
[Sun Dec 14 20:24:51.926918 2025] [:error] [pid 39614:tid 39631] [client 4.241.176.161:14247] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aT6sk_xybG8-9MflbDdwCQAAAM8"]
[Sun Dec 14 20:24:52.391085 2025] [:error] [pid 41600:tid 41619] [client 4.241.176.161:14179] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aT6slNFLTBZjcwNd_VsT5wAAARA"]
[Sun Dec 14 20:24:53.539897 2025] [:error] [pid 41600:tid 41617] [client 4.241.176.161:14245] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aT6sldFLTBZjcwNd_VsT8AAAAQ4"]
[Sun Dec 14 20:24:54.488489 2025] [:error] [pid 41600:tid 41624] [client 4.241.176.161:14221] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aT6sltFLTBZjcwNd_VsT9gAAARU"]
[Sun Dec 14 20:24:54.863068 2025] [:error] [pid 41600:tid 41604] [client 4.241.176.161:14316] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/403.php"] [unique_id "aT6sltFLTBZjcwNd_VsT9wAAAQE"]
[Sun Dec 14 20:24:55.628632 2025] [:error] [pid 40596:tid 40639] [client 4.241.176.161:14277] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/403.php"] [unique_id "aT6sl2vZZo4N2X7WoLyU3gAAAc0"]
[Sun Dec 14 20:24:56.489903 2025] [:error] [pid 41600:tid 41620] [client 4.241.176.161:14323] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/403.php"] [unique_id "aT6smNFLTBZjcwNd_VsUAgAAARE"]
[Sun Dec 14 20:24:57.003315 2025] [:error] [pid 40596:tid 40640] [client 4.241.176.161:14263] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/403.php"] [unique_id "aT6smWvZZo4N2X7WoLyU5AAAAc4"]
[Sun Dec 14 20:24:57.437188 2025] [:error] [pid 39523:tid 39536] [client 4.241.176.161:14311] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aT6smTQTQH1raAj2lkjn-gAAAAg"]
[Sun Dec 14 20:24:59.035840 2025] [:error] [pid 13799:tid 13825] [client 4.241.176.161:14315] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aT6sm3jPEin01ElFTNY_kQAAAhc"]
[Sun Dec 14 20:25:00.117324 2025] [:error] [pid 39614:tid 39634] [client 4.241.176.161:14165] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aT6snPxybG8-9MflbDdwXwAAANI"]
[Sun Dec 14 20:25:00.579360 2025] [:error] [pid 39614:tid 39627] [client 4.241.176.161:13897] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aT6snPxybG8-9MflbDdwYwAAAMs"]
[Sun Dec 14 20:25:00.955101 2025] [:error] [pid 41600:tid 41606] [client 4.241.176.161:14172] [client 4.241.176.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aT6snNFLTBZjcwNd_VsUDAAAAQM"]
[Sun Dec 14 20:25:01.347939 2025] [:error] [pid 39524:tid 39560] [client 4.241.176.161:14230] [client 4.241.176.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aT6snWrVGpbDzFtDE9PtFAAAAEQ"]
[Sun Dec 14 20:25:01.959891 2025] [:error] [pid 41600:tid 41604] [client 4.241.176.161:14287] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d2.php"] [unique_id "aT6sndFLTBZjcwNd_VsUDwAAAQE"]
[Sun Dec 14 20:25:02.450675 2025] [:error] [pid 40595:tid 40618] [client 4.241.176.161:14181] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d2.php"] [unique_id "aT6snvjrht6y4RN-xKQhvwAAAZM"]
[Sun Dec 14 20:25:02.830076 2025] [:error] [pid 40595:tid 40607] [client 4.241.176.161:14250] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d2.php"] [unique_id "aT6snvjrht6y4RN-xKQhwAAAAYg"]
[Sun Dec 14 20:25:03.215365 2025] [:error] [pid 39614:tid 39628] [client 4.241.176.161:13922] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d2.php"] [unique_id "aT6sn_xybG8-9MflbDdwbgAAAMw"]
[Sun Dec 14 20:25:04.005655 2025] [:error] [pid 41600:tid 41620] [client 4.241.176.161:14235] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/coffee/index.php"] [unique_id "aT6soNFLTBZjcwNd_VsUEAAAARE"]
[Sun Dec 14 20:25:04.653453 2025] [:error] [pid 39524:tid 39576] [client 4.241.176.161:14154] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/coffee/index.php"] [unique_id "aT6soGrVGpbDzFtDE9PtGAAAAFQ"]
[Sun Dec 14 20:25:04.988679 2025] [:error] [pid 40596:tid 40629] [client 4.241.176.161:14204] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/coffee/index.php"] [unique_id "aT6soGvZZo4N2X7WoLyU6wAAAcM"]
[Sun Dec 14 20:25:05.581169 2025] [:error] [pid 39525:tid 39590] [client 4.241.176.161:14146] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/coffee/index.php"] [unique_id "aT6soU1fX_pB_BrvE_5M0AAAAIc"]
[Sun Dec 14 20:25:06.068972 2025] [:error] [pid 41600:tid 41611] [client 4.241.176.161:14190] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aT6sotFLTBZjcwNd_VsUEwAAAQg"]
[Sun Dec 14 20:25:06.550054 2025] [:error] [pid 40595:tid 40610] [client 4.241.176.161:14294] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aT6sovjrht6y4RN-xKQhxQAAAYs"]
[Sun Dec 14 20:25:07.764844 2025] [:error] [pid 40596:tid 40641] [client 4.241.176.161:14300] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aT6so2vZZo4N2X7WoLyU7QAAAc8"]
[Sun Dec 14 20:25:08.354887 2025] [:error] [pid 39614:tid 39624] [client 4.241.176.161:14236] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aT6spPxybG8-9MflbDdwcQAAAMg"]
[Sun Dec 14 20:25:09.083228 2025] [:error] [pid 39524:tid 39558] [client 4.241.176.161:14177] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aT6spWrVGpbDzFtDE9PtGwAAAEI"]
[Sun Dec 14 20:25:15.565823 2025] [autoindex:error] [pid 40561:tid 40579] [client 4.241.176.161:14211] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 20:25:23.758171 2025] [proxy_fcgi:error] [pid 40561:tid 40582] [client 4.241.176.161:14211] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 20:25:25.287757 2025] [:error] [pid 40561:tid 40584] [client 4.241.176.161:14211] [client 4.241.176.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aT6stYY6r869zoqRQkTW2gAAAVM"]
[Sun Dec 14 20:25:27.064645 2025] [autoindex:error] [pid 41600:tid 41624] [client 4.241.176.161:13889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 20:25:28.490369 2025] [:error] [pid 41600:tid 41605] [client 4.241.176.161:13889] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/system_log.php"] [unique_id "aT6suNFLTBZjcwNd_VsULQAAAQI"]
[Sun Dec 14 20:25:29.156614 2025] [:error] [pid 39523:tid 39544] [client 4.241.176.161:14246] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/system_log.php"] [unique_id "aT6suTQTQH1raAj2lkjoDwAAABA"]
[Sun Dec 14 20:25:29.691478 2025] [:error] [pid 13799:tid 13817] [client 4.241.176.161:13917] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/system_log.php"] [unique_id "aT6suXjPEin01ElFTNY_5gAAAg8"]
[Sun Dec 14 20:25:31.674768 2025] [:error] [pid 13799:tid 13815] [client 4.241.176.161:14144] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/system_log.php"] [unique_id "aT6su3jPEin01ElFTNY_-AAAAg0"]
[Sun Dec 14 20:25:34.489706 2025] [:error] [pid 40595:tid 40604] [client 4.241.176.161:13944] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aT6svvjrht6y4RN-xKQiKgAAAYU"]
[Sun Dec 14 20:25:37.208946 2025] [:error] [pid 39614:tid 39624] [client 4.241.176.161:14252] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aT6swfxybG8-9MflbDdwhQAAAMg"]
[Sun Dec 14 20:25:39.586174 2025] [:error] [pid 39614:tid 39635] [client 4.241.176.161:14164] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aT6sw_xybG8-9MflbDdwiAAAANM"]
[Sun Dec 14 20:25:40.731008 2025] [:error] [pid 40596:tid 40650] [client 4.241.176.161:14178] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aT6sxGvZZo4N2X7WoLyVOgAAAdg"]
[Sun Dec 14 20:25:42.298992 2025] [:error] [pid 41600:tid 41606] [client 4.241.176.161:14237] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aT6sxtFLTBZjcwNd_VsUeQAAAQM"]
[Sun Dec 14 20:25:44.056650 2025] [:error] [pid 40596:tid 40648] [client 4.241.176.161:14268] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aT6syGvZZo4N2X7WoLyVPAAAAdY"]
[Sun Dec 14 20:25:45.761951 2025] [:error] [pid 39524:tid 39565] [client 4.241.176.161:14168] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aT6syWrVGpbDzFtDE9PtTgAAAEk"]
[Sun Dec 14 20:25:47.732703 2025] [:error] [pid 13799:tid 13825] [client 4.241.176.161:13906] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aT6sy3jPEin01ElFTNZAMgAAAhc"]
[Sun Dec 14 20:25:49.607648 2025] [:error] [pid 39525:tid 39592] [client 4.241.176.161:14159] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "aT6szU1fX_pB_BrvE_5NGAAAAIk"]
[Sun Dec 14 20:25:51.595947 2025] [:error] [pid 40595:tid 40618] [client 4.241.176.161:14200] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "aT6sz_jrht6y4RN-xKQiTgAAAZM"]
[Sun Dec 14 20:25:52.169448 2025] [:error] [pid 40596:tid 40626] [client 4.241.176.161:14202] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "aT6s0GvZZo4N2X7WoLyVPgAAAcA"]
[Sun Dec 14 20:25:52.699823 2025] [:error] [pid 40595:tid 40619] [client 4.241.176.161:14261] [client 4.241.176.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "aT6s0Pjrht6y4RN-xKQiTwAAAZQ"]
[Sun Dec 14 23:55:56.493137 2025] [:error] [pid 40561:tid 40576] [client 45.8.17.146:62657] [client 45.8.17.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT7eDIY6r869zoqRQkQI_wAAAUs"]
[Mon Dec 15 00:03:41.475850 2025] [:error] [pid 41600:tid 41615] [client 205.185.121.77:20304] [client 205.185.121.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.121.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT7f3dFLTBZjcwNd_VtyWQAAAQw"]
[Mon Dec 15 00:07:02.803692 2025] [:error] [pid 39614:tid 39618] [client 205.185.121.77:49945] [client 205.185.121.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.121.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT7gpvxybG8-9MflbDevPwAAAMI"]
[Mon Dec 15 02:46:31.142326 2025] [autoindex:error] [pid 8430:tid 8433] [client 4.197.150.63:65053] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 15 02:46:32.969143 2025] [autoindex:error] [pid 8430:tid 8448] [client 4.197.150.63:65053] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 15 02:46:40.277403 2025] [autoindex:error] [pid 8430:tid 8448] [client 4.197.150.63:65053] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 15 02:46:40.321510 2025] [autoindex:error] [pid 8430:tid 8441] [client 4.197.150.63:65053] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 15 02:46:51.414661 2025] [autoindex:error] [pid 8430:tid 8446] [client 4.197.150.63:65053] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 15 02:46:51.430331 2025] [:error] [pid 8430:tid 8450] [client 4.197.150.63:65053] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aT8GG1k7yXaRc6dQclhBoAAAANE"], referer: https://www.bing.com/
[Mon Dec 15 02:46:51.501631 2025] [autoindex:error] [pid 8430:tid 8436] [client 4.197.150.63:65036] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 15 02:46:51.517801 2025] [:error] [pid 8430:tid 8451] [client 4.197.150.63:65036] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/index.php"] [unique_id "aT8GG1k7yXaRc6dQclhBowAAANI"], referer: https://www.google.co.uk/
[Mon Dec 15 02:46:51.577091 2025] [autoindex:error] [pid 8430:tid 8444] [client 4.197.150.63:65029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 15 02:47:04.893522 2025] [autoindex:error] [pid 8430:tid 8445] [client 4.197.150.63:65029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 15 02:47:06.734087 2025] [autoindex:error] [pid 8430:tid 8449] [client 4.197.150.63:65029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 15 02:47:07.706819 2025] [autoindex:error] [pid 8430:tid 8444] [client 4.197.150.63:65029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 15 02:47:09.566361 2025] [autoindex:error] [pid 8430:tid 8447] [client 4.197.150.63:65029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 15 02:47:11.506766 2025] [autoindex:error] [pid 8430:tid 8433] [client 4.197.150.63:65029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 15 02:47:11.546846 2025] [autoindex:error] [pid 8430:tid 8446] [client 4.197.150.63:65029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 15 02:47:11.562294 2025] [:error] [pid 8430:tid 8450] [client 4.197.150.63:65029] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aT8GL1k7yXaRc6dQclhByAAAANE"], referer: https://duckduckgo.com/
[Mon Dec 15 02:47:11.593689 2025] [:error] [pid 8430:tid 8445] [client 4.197.150.63:65102] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT8GL1k7yXaRc6dQclhByQAAAMw"], referer: https://duckduckgo.com/
[Mon Dec 15 02:47:11.654089 2025] [autoindex:error] [pid 8339:tid 8363] [client 4.197.150.63:64487] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 15 02:47:11.702125 2025] [autoindex:error] [pid 8339:tid 8361] [client 4.197.150.63:64487] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 15 02:47:11.719807 2025] [:error] [pid 8339:tid 8345] [client 4.197.150.63:64487] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aT8GL7lqE6mJc-Y6giNQJgAAAAI"], referer: https://www.bing.com/
[Mon Dec 15 02:47:11.783195 2025] [autoindex:error] [pid 8339:tid 8360] [client 4.197.150.63:65121] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 15 02:47:11.825435 2025] [autoindex:error] [pid 8339:tid 8350] [client 4.197.150.63:65121] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 15 02:47:11.842682 2025] [:error] [pid 8339:tid 8356] [client 4.197.150.63:65121] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aT8GL7lqE6mJc-Y6giNQKwAAAA0"], referer: https://www.bing.com/
[Mon Dec 15 02:47:11.876017 2025] [:error] [pid 8430:tid 8451] [client 4.197.150.63:65097] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT8GL1k7yXaRc6dQclhBygAAANI"], referer: https://www.bing.com/
[Mon Dec 15 02:47:11.911616 2025] [:error] [pid 8339:tid 8347] [client 4.197.150.63:64481] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aT8GL7lqE6mJc-Y6giNQLAAAAAQ"], referer: https://www.bing.com/
[Mon Dec 15 02:47:11.944909 2025] [:error] [pid 56645:tid 56668] [client 4.197.150.63:64496] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aT8GL6__GSueqKs4nBnWiAAAAVQ"], referer: https://duckduckgo.com/
[Mon Dec 15 02:47:11.978078 2025] [:error] [pid 56645:tid 56660] [client 4.197.150.63:65054] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT8GL6__GSueqKs4nBnWiQAAAUw"], referer: https://www.yahoo.com/
[Mon Dec 15 02:47:12.039862 2025] [autoindex:error] [pid 56645:tid 56655] [client 4.197.150.63:65090] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 15 02:47:12.057707 2025] [:error] [pid 56645:tid 56671] [client 4.197.150.63:65090] [client 4.197.150.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT8GMK__GSueqKs4nBnWjAAAAVc"], referer: https://www.bing.com/
[Mon Dec 15 02:47:12.120133 2025] [autoindex:error] [pid 8341:tid 8413] [client 4.197.150.63:65086] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 15 05:14:53.353752 2025] [:error] [pid 35019:tid 35028] [client 182.42.110.255:51998] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aT8oza2LAdKSfjdLIKKDFAAAAAU"]
[Mon Dec 15 05:20:01.425932 2025] [:error] [pid 35104:tid 35119] [client 102.215.255.229:20466] [client 102.215.255.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.215.255.229, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aT8qAaWpPfWnBdEuPp46jQAAAMw"]
[Mon Dec 15 05:48:37.415984 2025] [:error] [pid 35104:tid 35108] [client 102.215.255.229:31817] [client 102.215.255.229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aT8wtaWpPfWnBdEuPp5C8AAAAME"]
[Mon Dec 15 05:50:44.081895 2025] [:error] [pid 35019:tid 35043] [client 102.215.255.229:31677] [client 102.215.255.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.215.255.229, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aT8xNK2LAdKSfjdLIKKUvgAAABQ"]
[Mon Dec 15 09:59:22.234298 2025] [:error] [pid 63653:tid 63659] [client 185.223.152.26:52601] [client 185.223.152.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT9resvHkJ_6ffg4W-_2pQAAAUQ"]
[Mon Dec 15 10:14:14.324684 2025] [:error] [pid 35104:tid 35109] [client 185.223.152.244:54231] [client 185.223.152.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.244, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT9u9qWpPfWnBdEuPp6YZwAAAMI"]
[Mon Dec 15 10:28:59.974303 2025] [:error] [pid 35021:tid 35082] [client 185.223.152.29:44817] [client 185.223.152.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT9yay9sSwxVqtYnS1vxFAAAAIU"]
[Mon Dec 15 10:43:47.399733 2025] [:error] [pid 39826:tid 39851] [client 185.223.152.13:46247] [client 185.223.152.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT9144dXWIOU_2oL0XYf5AAAAJQ"]
[Mon Dec 15 10:58:38.004563 2025] [:error] [pid 39914:tid 39925] [client 185.223.152.15:22249] [client 185.223.152.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT95Xl247O4ulGRu1dMTLwAAAAg"]
[Mon Dec 15 11:13:23.247654 2025] [:error] [pid 39829:tid 39889] [client 185.223.152.22:36629] [client 185.223.152.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.22, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT9802egGfxg5ldkNehKigAAAYQ"]
[Mon Dec 15 11:21:45.744242 2025] [:error] [pid 39914:tid 39938] [client 49.234.192.248:48366] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aT9-yV247O4ulGRu1dMcZwAAABU"]
[Mon Dec 15 11:28:17.486061 2025] [:error] [pid 44555:tid 44567] [client 185.223.152.24:39707] [client 185.223.152.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.24, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-AUWDHW0g-e9AKPr6u5AAAAEo"]
[Mon Dec 15 11:43:06.248528 2025] [:error] [pid 39828:tid 39878] [client 185.223.152.36:56553] [client 185.223.152.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-Dyu0Kj9XWFkRmVbTadAAAANQ"]
[Mon Dec 15 11:57:56.680596 2025] [:error] [pid 44555:tid 44566] [client 185.223.152.23:22137] [client 185.223.152.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-HRGDHW0g-e9AKPr69_wAAAEk"]
[Mon Dec 15 12:12:50.358291 2025] [:error] [pid 44555:tid 44576] [client 185.223.152.16:25959] [client 185.223.152.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.16, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-KwmDHW0g-e9AKPr7HKgAAAFM"]
[Mon Dec 15 12:27:41.336605 2025] [:error] [pid 44555:tid 44578] [client 185.223.152.27:21233] [client 185.223.152.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.27, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-OPWDHW0g-e9AKPr7N8AAAAFU"]
[Mon Dec 15 12:42:34.384171 2025] [:error] [pid 39828:tid 39869] [client 185.223.152.29:20211] [client 185.223.152.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-Ruu0Kj9XWFkRmVbTtpwAAAMs"]
[Mon Dec 15 12:48:31.552477 2025] [:error] [pid 39828:tid 39860] [client 206.189.152.126:57299] [client 206.189.152.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.152.126, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-TH-0Kj9XWFkRmVbTvXQAAAMI"]
[Mon Dec 15 12:48:33.247097 2025] [:error] [pid 39828:tid 39858] [client 206.189.152.126:57642] [client 206.189.152.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.152.126, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-TIe0Kj9XWFkRmVbTvXgAAAMA"]
[Mon Dec 15 12:57:24.997323 2025] [:error] [pid 44555:tid 44563] [client 185.223.152.18:32409] [client 185.223.152.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-VNGDHW0g-e9AKPr7dzwAAAEY"]
[Mon Dec 15 13:12:22.060971 2025] [:error] [pid 39829:tid 39898] [client 185.223.152.25:56723] [client 185.223.152.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.25, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-YtmegGfxg5ldkNeh08AAAAY0"]
[Mon Dec 15 13:27:15.947049 2025] [:error] [pid 44555:tid 44572] [client 185.223.152.14:35165] [client 185.223.152.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-cM2DHW0g-e9AKPr7srwAAAE8"]
[Mon Dec 15 13:42:15.958463 2025] [:error] [pid 39829:tid 39901] [client 185.223.152.24:56097] [client 185.223.152.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.24, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-ft2egGfxg5ldkNeh--wAAAZA"]
[Mon Dec 15 13:57:12.148112 2025] [:error] [pid 39826:tid 39842] [client 185.223.152.15:41593] [client 185.223.152.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-jOIdXWIOU_2oL0XZcOgAAAIs"]
[Mon Dec 15 14:12:11.642906 2025] [:error] [pid 39828:tid 39873] [client 185.223.152.22:45627] [client 185.223.152.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.22, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-mu-0Kj9XWFkRmVbQEOwAAAM8"]
[Mon Dec 15 14:27:14.325642 2025] [:error] [pid 39829:tid 39886] [client 185.223.152.18:48393] [client 185.223.152.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-qQmegGfxg5ldkNeiLSQAAAYE"]
[Mon Dec 15 14:42:21.889030 2025] [:error] [pid 39828:tid 39871] [client 185.223.152.28:24533] [client 185.223.152.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-tze0Kj9XWFkRmVbQMGAAAAM0"]
[Mon Dec 15 14:57:46.091775 2025] [:error] [pid 39826:tid 39850] [client 185.223.152.35:40595] [client 185.223.152.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-xaodXWIOU_2oL0XZuGgAAAJM"]
[Mon Dec 15 15:13:06.617629 2025] [:error] [pid 44555:tid 44565] [client 185.223.152.10:36957] [client 185.223.152.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.10, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-1AmDHW0g-e9AKPr4VqwAAAEg"]
[Mon Dec 15 15:28:12.394100 2025] [:error] [pid 39826:tid 39835] [client 185.223.152.229:24901] [client 185.223.152.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.229, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-4jIdXWIOU_2oL0XZ6sAAAAIQ"]
[Mon Dec 15 15:58:20.432723 2025] [:error] [pid 39828:tid 39863] [client 185.223.152.29:36435] [client 185.223.152.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT-_nO0Kj9XWFkRmVbQl-QAAAMU"]
[Mon Dec 15 16:13:29.927647 2025] [:error] [pid 39828:tid 39877] [client 185.223.152.22:64561] [client 185.223.152.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.22, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_DKe0Kj9XWFkRmVbQrXgAAANM"]
[Mon Dec 15 16:28:40.298902 2025] [:error] [pid 39828:tid 39871] [client 185.223.152.29:21981] [client 185.223.152.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_GuO0Kj9XWFkRmVbQvNgAAAM0"]
[Mon Dec 15 16:43:39.914952 2025] [:error] [pid 39914:tid 39928] [client 185.223.152.29:36575] [client 185.223.152.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_KO1247O4ulGRu1dObWwAAAAs"]
[Mon Dec 15 16:58:43.079868 2025] [:error] [pid 39914:tid 39933] [client 185.223.152.244:45325] [client 185.223.152.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.244, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_Nw1247O4ulGRu1dOlHgAAABA"]
[Mon Dec 15 17:43:41.266335 2025] [:error] [pid 31374:tid 31453] [client 185.223.152.30:39565] [client 185.223.152.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.30, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_YTZzSh8b7uk6RWiEOQgAAAFU"]
[Mon Dec 15 17:44:02.895884 2025] [:error] [pid 31372:tid 31376] [client 182.42.110.255:47005] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aT_YYgN06qRtpJxyxHhYnQAAAIA"]
[Mon Dec 15 17:58:48.639564 2025] [:error] [pid 31372:tid 31383] [client 185.223.152.27:26879] [client 185.223.152.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.27, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_b2AN06qRtpJxyxHhgjQAAAIc"]
[Mon Dec 15 18:13:59.119519 2025] [:error] [pid 31374:tid 31434] [client 185.223.152.229:29951] [client 185.223.152.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.229, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_fZ5zSh8b7uk6RWiEg8AAAAEI"]
[Mon Dec 15 18:28:57.069635 2025] [:error] [pid 31372:tid 31399] [client 185.223.152.28:61335] [client 185.223.152.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_i6QN06qRtpJxyxHhuUgAAAJc"]
[Mon Dec 15 18:44:06.563835 2025] [:error] [pid 31372:tid 31376] [client 185.223.152.23:29385] [client 185.223.152.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_mdgN06qRtpJxyxHh18QAAAIA"]
[Mon Dec 15 18:59:17.681420 2025] [:error] [pid 31374:tid 31455] [client 185.223.152.35:41887] [client 185.223.152.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_qBZzSh8b7uk6RWiE4fwAAAFc"]
[Mon Dec 15 19:14:24.555830 2025] [:error] [pid 52155:tid 52178] [client 185.223.152.34:23225] [client 185.223.152.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_tkBaJK6javjid3xx_ywAAARQ"]
[Mon Dec 15 19:29:28.848038 2025] [:error] [pid 52155:tid 52181] [client 185.223.152.21:60131] [client 185.223.152.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_xGBaJK6javjid3xyI2AAAARc"]
[Mon Dec 15 19:44:34.454418 2025] [:error] [pid 31373:tid 31426] [client 185.223.152.10:23007] [client 185.223.152.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.10, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_0onFdnrU7ASwItVLM3QAAANU"]
[Mon Dec 15 19:59:49.776972 2025] [:error] [pid 31373:tid 31421] [client 185.223.152.244:30533] [client 185.223.152.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.244, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_4NXFdnrU7ASwItVLTGQAAANA"]
[Mon Dec 15 20:16:23.461691 2025] [:error] [pid 31374:tid 31432] [client 185.223.152.26:56543] [client 185.223.152.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aT_8F5zSh8b7uk6RWiFZkwAAAEA"]
[Mon Dec 15 20:47:50.385728 2025] [:error] [pid 31373:tid 31424] [client 185.223.152.23:27609] [client 185.223.152.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUADdnFdnrU7ASwItVLkFQAAANM"]
[Mon Dec 15 21:04:40.626566 2025] [:error] [pid 31372:tid 31395] [client 185.223.152.23:58087] [client 185.223.152.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUAHaAN06qRtpJxyxHisjwAAAJM"]
[Mon Dec 15 21:38:40.245615 2025] [:error] [pid 31373:tid 31413] [client 185.223.152.20:58671] [client 185.223.152.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.20, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUAPYHFdnrU7ASwItVL8_AAAAMg"]
[Mon Dec 15 21:55:38.944424 2025] [:error] [pid 31459:tid 31472] [client 185.223.152.31:60225] [client 185.223.152.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.31, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUATWjqerS0TDpViRzuOrAAAAAs"]
[Mon Dec 15 22:12:35.816784 2025] [:error] [pid 31459:tid 31483] [client 185.223.152.22:54231] [client 185.223.152.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.22, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUAXUzqerS0TDpViRzuXmQAAABY"]
[Mon Dec 15 22:28:54.928585 2025] [:error] [pid 31372:tid 31383] [client 185.223.152.13:28783] [client 185.223.152.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUAbJgN06qRtpJxyxHjOhAAAAIc"]
[Mon Dec 15 22:44:32.412407 2025] [:error] [pid 31459:tid 31471] [client 185.223.152.27:59749] [client 185.223.152.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.27, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUAe0DqerS0TDpViRzultgAAAAo"]
[Mon Dec 15 22:59:56.965775 2025] [:error] [pid 31372:tid 31378] [client 185.223.152.26:20489] [client 185.223.152.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUAibAN06qRtpJxyxHjblwAAAII"]
[Mon Dec 15 23:15:33.875087 2025] [:error] [pid 31372:tid 31391] [client 185.223.152.16:51691] [client 185.223.152.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.16, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUAmFQN06qRtpJxyxHjkLgAAAI8"]
[Mon Dec 15 23:30:59.983730 2025] [:error] [pid 52155:tid 52173] [client 185.223.152.244:36979] [client 185.223.152.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.244, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUApsxaJK6javjid3xwlowAAAQ8"]
[Tue Dec 16 00:01:29.202562 2025] [:error] [pid 31374:tid 31453] [client 185.223.152.26:32611] [client 185.223.152.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUAw2ZzSh8b7uk6RWiHA0AAAAFU"]
[Tue Dec 16 00:16:30.626688 2025] [:error] [pid 34409:tid 34426] [client 185.223.152.33:48641] [client 185.223.152.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.33, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUA0Xowgv-_jDvPU81Fm_QAAAMw"]
[Tue Dec 16 00:31:38.945710 2025] [:error] [pid 34410:tid 34452] [client 185.223.152.23:61159] [client 185.223.152.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUA36sWDXTJsXAHPFUmUMwAAAEs"]
[Tue Dec 16 00:46:36.808637 2025] [:error] [pid 31566:tid 31576] [client 185.223.152.34:26869] [client 185.223.152.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUA7bPp1NDLK4uehYB9RKAAAAIY"]
[Tue Dec 16 01:01:40.232138 2025] [:error] [pid 34495:tid 34517] [client 185.223.152.16:55983] [client 185.223.152.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.16, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUA-9GZCUf_mSR4srxt1QgAAAVQ"]
[Tue Dec 16 01:16:51.519188 2025] [:error] [pid 34411:tid 34484] [client 185.223.152.244:27823] [client 185.223.152.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.244, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUBCgx05Egz6aV0buEy3gQAAABA"]
[Tue Dec 16 01:32:08.129070 2025] [:error] [pid 34411:tid 34485] [client 185.223.152.25:48619] [client 185.223.152.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.25, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUBGGB05Egz6aV0buEy9-AAAABE"]
[Tue Dec 16 04:08:54.210513 2025] [autoindex:error] [pid 58731:tid 58741] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:54.637084 2025] [autoindex:error] [pid 58731:tid 58740] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:55.092123 2025] [autoindex:error] [pid 58731:tid 58736] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:08:55.532869 2025] [autoindex:error] [pid 58731:tid 58738] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:01.328561 2025] [autoindex:error] [pid 58731:tid 58736] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:01.770491 2025] [autoindex:error] [pid 58731:tid 58757] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:02.219437 2025] [autoindex:error] [pid 58731:tid 58744] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:02.646124 2025] [autoindex:error] [pid 58731:tid 58733] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:03.092617 2025] [autoindex:error] [pid 58731:tid 58739] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:03.475646 2025] [autoindex:error] [pid 58731:tid 58738] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:04.616692 2025] [autoindex:error] [pid 58731:tid 58747] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:09.829231 2025] [autoindex:error] [pid 58731:tid 58738] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:10.234776 2025] [autoindex:error] [pid 58731:tid 58749] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:21.836367 2025] [autoindex:error] [pid 58731:tid 58737] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:22.292351 2025] [autoindex:error] [pid 58731:tid 58741] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:22.800073 2025] [autoindex:error] [pid 58731:tid 58737] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:23.270885 2025] [autoindex:error] [pid 58731:tid 58750] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:29.230073 2025] [autoindex:error] [pid 58731:tid 58753] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:29.588925 2025] [autoindex:error] [pid 58731:tid 58744] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:35.525165 2025] [autoindex:error] [pid 58731:tid 58752] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:46.721722 2025] [autoindex:error] [pid 58731:tid 58757] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:47.119229 2025] [autoindex:error] [pid 58731:tid 58736] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 04:09:47.585679 2025] [autoindex:error] [pid 58731:tid 58742] [client 45.154.138.43:56873] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Dec 16 06:32:27.525408 2025] [:error] [pid 51991:tid 52014] [client 182.42.105.144:42888] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUCMe67zKCVJSuwV1xZTcwAAARU"]
[Tue Dec 16 08:15:33.151752 2025] [:error] [pid 51991:tid 52014] [client 43.159.140.236:41968] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUCkpa7zKCVJSuwV1xaOmQAAARU"]
[Tue Dec 16 12:31:30.104716 2025] [:error] [pid 18408:tid 18430] [client 170.106.180.139:48282] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUDgoji2Gr8pDzjrVBCLYQAAANQ"]
[Tue Dec 16 14:29:20.299351 2025] [:error] [pid 51991:tid 51997] [client 207.154.197.113:44436] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v2/api-docs"] [unique_id "aUD8QK7zKCVJSuwV1xYq2gAAAQQ"]
[Tue Dec 16 14:29:21.288798 2025] [:error] [pid 35998:tid 36025] [client 207.154.197.113:44452] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v3/api-docs"] [unique_id "aUD8QRKnhGuuhGxBSLNvDAAAAVg"]
[Tue Dec 16 14:29:22.288635 2025] [:error] [pid 51991:tid 52010] [client 207.154.197.113:44456] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/api-docs/swagger.json"] [unique_id "aUD8Qq7zKCVJSuwV1xYq4wAAARE"]
[Tue Dec 16 14:29:23.279793 2025] [:error] [pid 51991:tid 52004] [client 207.154.197.113:44470] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/api/swagger.json"] [unique_id "aUD8Q67zKCVJSuwV1xYq6AAAAQs"]
[Tue Dec 16 14:29:24.296358 2025] [:error] [pid 18324:tid 18404] [client 207.154.197.113:44480] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/@vite/env"] [unique_id "aUD8RKG4um2mD1VpJHJHBQAAAJg"]
[Tue Dec 16 14:29:25.296008 2025] [:error] [pid 51991:tid 52004] [client 207.154.197.113:44494] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/actuator/env"] [unique_id "aUD8Ra7zKCVJSuwV1xYq8QAAAQs"]
[Tue Dec 16 14:29:26.297272 2025] [:error] [pid 18323:tid 18354] [client 207.154.197.113:44500] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUD8RjJB6UFxIutsA8blDQAAAEE"]
[Tue Dec 16 14:29:27.296205 2025] [:error] [pid 12330:tid 12349] [client 207.154.197.113:44510] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server"] [unique_id "aUD8R16iIQEVCIh8V1ko2wAAAY8"]
[Tue Dec 16 14:29:28.297764 2025] [:error] [pid 12330:tid 12344] [client 207.154.197.113:39912] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aUD8SF6iIQEVCIh8V1ko3gAAAYo"]
[Tue Dec 16 14:29:30.303038 2025] [:error] [pid 53940:tid 53961] [client 207.154.197.113:39914] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/about"] [unique_id "aUD8Sl91PNbcXLVkpR6kzgAAAdI"]
[Tue Dec 16 14:29:31.290595 2025] [:error] [pid 18322:tid 18334] [client 207.154.197.113:39916] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/debug/default/view"] [unique_id "aUD8S5sCeWBjrw28Xty-1gAAAAg"]
[Tue Dec 16 14:29:32.299750 2025] [:error] [pid 18324:tid 18396] [client 207.154.197.113:39928] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v2/_catalog"] [unique_id "aUD8TKG4um2mD1VpJHJHDwAAAJA"]
[Tue Dec 16 14:29:33.292302 2025] [:error] [pid 12330:tid 12357] [client 207.154.197.113:39930] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aUD8TV6iIQEVCIh8V1ko4gAAAZc"]
[Tue Dec 16 14:29:34.301359 2025] [:error] [pid 18322:tid 18326] [client 207.154.197.113:39944] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server-status"] [unique_id "aUD8TpsCeWBjrw28Xty-3AAAAAA"]
[Tue Dec 16 14:29:35.292226 2025] [:error] [pid 53940:tid 53964] [client 207.154.197.113:39946] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/login.action"] [unique_id "aUD8T191PNbcXLVkpR6k0gAAAdU"]
[Tue Dec 16 14:29:36.302334 2025] [:error] [pid 18323:tid 18370] [client 207.154.197.113:39950] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/_all_dbs"] [unique_id "aUD8UDJB6UFxIutsA8blGQAAAFE"]
[Tue Dec 16 14:29:37.292709 2025] [:error] [pid 18322:tid 18333] [client 207.154.197.113:39952] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aUD8UZsCeWBjrw28Xty-3QAAAAc"]
[Tue Dec 16 14:29:38.301828 2025] [:error] [pid 53940:tid 53957] [client 207.154.197.113:57182] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aUD8Ul91PNbcXLVkpR6k1QAAAc4"]
[Tue Dec 16 14:29:40.304739 2025] [:error] [pid 18322:tid 18328] [client 207.154.197.113:57196] [client 207.154.197.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aUD8VJsCeWBjrw28Xty-7QAAAAI"]
[Tue Dec 16 14:29:41.295111 2025] [:error] [pid 35998:tid 36018] [client 207.154.197.113:57200] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aUD8VRKnhGuuhGxBSLNvFgAAAVE"]
[Tue Dec 16 14:29:42.302802 2025] [:error] [pid 51991:tid 52017] [client 207.154.197.113:57208] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config.json"] [unique_id "aUD8Vq7zKCVJSuwV1xYrVQAAARg"]
[Tue Dec 16 14:29:43.294643 2025] [:error] [pid 18408:tid 18421] [client 207.154.197.113:57210] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/telescope/requests"] [unique_id "aUD8Vzi2Gr8pDzjrVBC2HAAAAMs"]
[Tue Dec 16 14:29:44.297491 2025] [:error] [pid 51991:tid 51994] [client 207.154.197.113:57220] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUD8WK7zKCVJSuwV1xYrfQAAAQE"]
[Tue Dec 16 14:29:45.294320 2025] [:error] [pid 53940:tid 53945] [client 207.154.197.113:57230] [client 207.154.197.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUD8WV91PNbcXLVkpR6k3AAAAcI"]
[Tue Dec 16 16:59:40.199673 2025] [:error] [pid 12330:tid 12337] [client 4.189.124.35:60033] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUEffF6iIQEVCIh8V1lWbQAAAYM"]
[Tue Dec 16 16:59:41.780354 2025] [:error] [pid 18324:tid 18395] [client 4.189.124.35:60043] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUEffaG4um2mD1VpJHJ1GgAAAI8"]
[Tue Dec 16 16:59:43.534893 2025] [:error] [pid 12330:tid 12348] [client 4.189.124.35:40766] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUEff16iIQEVCIh8V1lWdgAAAY4"]
[Tue Dec 16 16:59:45.562643 2025] [:error] [pid 12330:tid 12357] [client 4.189.124.35:3076] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUEfgV6iIQEVCIh8V1lWeAAAAZc"]
[Tue Dec 16 16:59:48.403591 2025] [:error] [pid 12330:tid 12343] [client 4.189.124.35:49094] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aUEfhF6iIQEVCIh8V1lWgQAAAYk"]
[Tue Dec 16 16:59:51.411868 2025] [:error] [pid 18408:tid 18433] [client 4.189.124.35:37910] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aUEfhzi2Gr8pDzjrVBDsrAAAANc"]
[Tue Dec 16 16:59:53.969603 2025] [:error] [pid 18324:tid 18397] [client 4.189.124.35:38602] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aUEfiaG4um2mD1VpJHJ1JQAAAJE"]
[Tue Dec 16 16:59:55.461913 2025] [:error] [pid 18323:tid 18366] [client 4.189.124.35:41512] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aUEfizJB6UFxIutsA8YLKQAAAE0"]
[Tue Dec 16 16:59:58.355150 2025] [:error] [pid 51991:tid 51997] [client 4.189.124.35:3079] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww3.php"] [unique_id "aUEfjq7zKCVJSuwV1xZxcwAAAQQ"]
[Tue Dec 16 16:59:59.939135 2025] [:error] [pid 51991:tid 52006] [client 4.189.124.35:40145] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww3.php"] [unique_id "aUEfj67zKCVJSuwV1xZxeQAAAQ0"]
[Tue Dec 16 17:00:00.877897 2025] [:error] [pid 51991:tid 51996] [client 4.189.124.35:40174] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww3.php"] [unique_id "aUEfkK7zKCVJSuwV1xZxfwAAAQM"]
[Tue Dec 16 17:00:02.083809 2025] [:error] [pid 51991:tid 52005] [client 4.189.124.35:45089] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww3.php"] [unique_id "aUEfkq7zKCVJSuwV1xZxhQAAAQw"]
[Tue Dec 16 17:00:03.416879 2025] [:error] [pid 18408:tid 18429] [client 4.189.124.35:35877] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clss.php"] [unique_id "aUEfkzi2Gr8pDzjrVBDsuwAAANM"]
[Tue Dec 16 17:00:05.913085 2025] [:error] [pid 18324:tid 18392] [client 4.189.124.35:34239] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clss.php"] [unique_id "aUEflaG4um2mD1VpJHJ1KgAAAIw"]
[Tue Dec 16 17:00:09.671725 2025] [:error] [pid 12330:tid 12335] [client 4.189.124.35:41212] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clss.php"] [unique_id "aUEfmV6iIQEVCIh8V1lWjQAAAYE"]
[Tue Dec 16 17:00:11.931366 2025] [:error] [pid 53940:tid 53950] [client 4.189.124.35:35871] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clss.php"] [unique_id "aUEfm191PNbcXLVkpR7LvwAAAcc"]
[Tue Dec 16 17:00:13.668971 2025] [:error] [pid 51991:tid 52003] [client 4.189.124.35:3277] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/budmachine/web/s.php"] [unique_id "aUEfna7zKCVJSuwV1xZxkwAAAQo"]
[Tue Dec 16 17:00:15.380324 2025] [:error] [pid 51991:tid 52010] [client 4.189.124.35:3318] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/budmachine/web/s.php"] [unique_id "aUEfn67zKCVJSuwV1xZxlQAAARE"]
[Tue Dec 16 17:00:17.463885 2025] [:error] [pid 18408:tid 18413] [client 4.189.124.35:44496] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/budmachine/web/s.php"] [unique_id "aUEfoTi2Gr8pDzjrVBDsxwAAAMM"]
[Tue Dec 16 17:00:20.871337 2025] [:error] [pid 18323:tid 18363] [client 4.189.124.35:3304] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/budmachine/web/s.php"] [unique_id "aUEfpDJB6UFxIutsA8YLOwAAAEo"]
[Tue Dec 16 17:00:23.612300 2025] [:error] [pid 53940:tid 53957] [client 4.189.124.35:3275] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-64wscx6shd.php"] [unique_id "aUEfp191PNbcXLVkpR7LxQAAAc4"]
[Tue Dec 16 17:00:25.294436 2025] [:error] [pid 35998:tid 36015] [client 4.189.124.35:41970] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-64wscx6shd.php"] [unique_id "aUEfqRKnhGuuhGxBSLOSKQAAAU4"]
[Tue Dec 16 17:00:27.510922 2025] [:error] [pid 12330:tid 12335] [client 4.189.124.35:43279] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-64wscx6shd.php"] [unique_id "aUEfq16iIQEVCIh8V1lWnAAAAYE"]
[Tue Dec 16 17:00:29.296093 2025] [:error] [pid 12330:tid 12353] [client 4.189.124.35:41940] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-64wscx6shd.php"] [unique_id "aUEfrV6iIQEVCIh8V1lWnwAAAZM"]
[Tue Dec 16 17:00:32.736353 2025] [:error] [pid 35998:tid 36004] [client 4.189.124.35:43302] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/okxh.php"] [unique_id "aUEfsBKnhGuuhGxBSLOSMQAAAUM"]
[Tue Dec 16 17:00:35.576014 2025] [:error] [pid 53940:tid 53958] [client 4.189.124.35:37429] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/okxh.php"] [unique_id "aUEfs191PNbcXLVkpR7L6QAAAc8"]
[Tue Dec 16 17:00:37.257383 2025] [:error] [pid 35998:tid 36012] [client 4.189.124.35:42780] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/okxh.php"] [unique_id "aUEftRKnhGuuhGxBSLOSNwAAAUs"]
[Tue Dec 16 17:01:00.394136 2025] [:error] [pid 18408:tid 18416] [client 4.189.124.35:43985] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atex1.php"] [unique_id "aUEfzDi2Gr8pDzjrVBDs_gAAAMY"]
[Tue Dec 16 17:01:03.186364 2025] [:error] [pid 35998:tid 36002] [client 4.189.124.35:37601] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atex1.php"] [unique_id "aUEfzxKnhGuuhGxBSLOScQAAAUE"]
[Tue Dec 16 17:01:06.256496 2025] [:error] [pid 53940:tid 53955] [client 4.189.124.35:3695] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atex1.php"] [unique_id "aUEf0l91PNbcXLVkpR7L_AAAAcw"]
[Tue Dec 16 17:01:09.871811 2025] [:error] [pid 18323:tid 18362] [client 4.189.124.35:36226] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atex1.php"] [unique_id "aUEf1TJB6UFxIutsA8YLowAAAEk"]
[Tue Dec 16 17:01:13.413238 2025] [:error] [pid 51991:tid 51995] [client 4.189.124.35:3981] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kdgok.php"] [unique_id "aUEf2a7zKCVJSuwV1xZx7QAAAQI"]
[Tue Dec 16 17:01:16.074420 2025] [:error] [pid 51991:tid 52011] [client 4.189.124.35:41711] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kdgok.php"] [unique_id "aUEf3K7zKCVJSuwV1xZx8QAAARI"]
[Tue Dec 16 17:01:20.427855 2025] [:error] [pid 18323:tid 18359] [client 4.189.124.35:39721] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kdgok.php"] [unique_id "aUEf4DJB6UFxIutsA8YLtgAAAEY"]
[Tue Dec 16 17:01:23.190048 2025] [:error] [pid 18324:tid 18397] [client 4.189.124.35:48073] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kdgok.php"] [unique_id "aUEf46G4um2mD1VpJHJ13gAAAJE"]
[Tue Dec 16 17:01:25.157564 2025] [:error] [pid 35998:tid 36022] [client 4.189.124.35:39671] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vanda.php"] [unique_id "aUEf5RKnhGuuhGxBSLOSogAAAVU"]
[Tue Dec 16 17:01:30.064043 2025] [:error] [pid 12330:tid 12351] [client 4.189.124.35:44576] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vanda.php"] [unique_id "aUEf6l6iIQEVCIh8V1lXKwAAAZE"]
[Tue Dec 16 17:01:32.015663 2025] [:error] [pid 18323:tid 18355] [client 4.189.124.35:48033] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vanda.php"] [unique_id "aUEf7DJB6UFxIutsA8YMBQAAAEI"]
[Tue Dec 16 17:01:35.666211 2025] [:error] [pid 18322:tid 18337] [client 4.189.124.35:39221] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vanda.php"] [unique_id "aUEf75sCeWBjrw28XtzlxgAAAAs"]
[Tue Dec 16 17:01:37.090806 2025] [:error] [pid 53940:tid 53966] [client 4.189.124.35:35214] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aUEf8V91PNbcXLVkpR7MQgAAAdc"]
[Tue Dec 16 17:01:39.034769 2025] [:error] [pid 53940:tid 53958] [client 4.189.124.35:35248] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aUEf8191PNbcXLVkpR7MSQAAAc8"]
[Tue Dec 16 17:01:41.694062 2025] [:error] [pid 51991:tid 52002] [client 4.189.124.35:48008] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aUEf9a7zKCVJSuwV1xZySgAAAQk"]
[Tue Dec 16 17:01:43.814500 2025] [:error] [pid 18408:tid 18416] [client 4.189.124.35:33924] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aUEf9zi2Gr8pDzjrVBDteAAAAMY"]
[Tue Dec 16 17:01:44.861228 2025] [:error] [pid 51991:tid 52015] [client 4.189.124.35:48028] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid-file.php"] [unique_id "aUEf-K7zKCVJSuwV1xZyXQAAARY"]
[Tue Dec 16 17:01:46.454221 2025] [:error] [pid 53940:tid 53950] [client 4.189.124.35:33960] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid-file.php"] [unique_id "aUEf-l91PNbcXLVkpR7McwAAAcc"]
[Tue Dec 16 17:01:48.220110 2025] [:error] [pid 12330:tid 12357] [client 4.189.124.35:38393] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid-file.php"] [unique_id "aUEf_F6iIQEVCIh8V1lXVgAAAZc"]
[Tue Dec 16 17:01:49.849229 2025] [:error] [pid 18324:tid 18386] [client 4.189.124.35:40996] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid-file.php"] [unique_id "aUEf_aG4um2mD1VpJHJ2GAAAAIY"]
[Tue Dec 16 17:01:51.679025 2025] [:error] [pid 51991:tid 52011] [client 4.189.124.35:33963] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/l3gi0n.php"] [unique_id "aUEf_67zKCVJSuwV1xZyegAAARI"]
[Tue Dec 16 17:01:55.363799 2025] [:error] [pid 18323:tid 18376] [client 4.189.124.35:38344] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/l3gi0n.php"] [unique_id "aUEgAzJB6UFxIutsA8YMUQAAAFc"]
[Tue Dec 16 17:01:58.020154 2025] [:error] [pid 51991:tid 51995] [client 4.189.124.35:41752] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/l3gi0n.php"] [unique_id "aUEgBq7zKCVJSuwV1xZygwAAAQI"]
[Tue Dec 16 17:02:11.858134 2025] [:error] [pid 35998:tid 36001] [client 4.189.124.35:38361] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/krypton.php"] [unique_id "aUEgExKnhGuuhGxBSLOTFAAAAUA"]
[Tue Dec 16 17:02:13.051180 2025] [:error] [pid 18323:tid 18375] [client 4.189.124.35:41740] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/krypton.php"] [unique_id "aUEgFTJB6UFxIutsA8YMYgAAAFY"]
[Tue Dec 16 17:02:16.848057 2025] [:error] [pid 51991:tid 52001] [client 4.189.124.35:40252] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/krypton.php"] [unique_id "aUEgGK7zKCVJSuwV1xZyqwAAAQg"]
[Tue Dec 16 17:02:18.567699 2025] [:error] [pid 18408:tid 18423] [client 4.189.124.35:33983] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/krypton.php"] [unique_id "aUEgGji2Gr8pDzjrVBDtpgAAAM0"]
[Tue Dec 16 17:02:19.903433 2025] [:error] [pid 51991:tid 52003] [client 4.189.124.35:4034] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karma_57c3d4.php"] [unique_id "aUEgG67zKCVJSuwV1xZyuQAAAQo"]
[Tue Dec 16 17:02:22.949123 2025] [:error] [pid 12330:tid 12353] [client 4.189.124.35:40249] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karma_57c3d4.php"] [unique_id "aUEgHl6iIQEVCIh8V1lXbgAAAZM"]
[Tue Dec 16 17:02:24.251841 2025] [:error] [pid 18324:tid 18400] [client 4.189.124.35:3769] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karma_57c3d4.php"] [unique_id "aUEgIKG4um2mD1VpJHJ2PwAAAJQ"]
[Tue Dec 16 17:02:28.405695 2025] [:error] [pid 53940:tid 53964] [client 4.189.124.35:40255] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karma_57c3d4.php"] [unique_id "aUEgJF91PNbcXLVkpR7MnAAAAdU"]
[Tue Dec 16 17:02:33.775718 2025] [:error] [pid 18408:tid 18417] [client 4.189.124.35:35813] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fc72f.php"] [unique_id "aUEgKTi2Gr8pDzjrVBDtrQAAAMc"]
[Tue Dec 16 17:02:40.455864 2025] [:error] [pid 18322:tid 18346] [client 4.189.124.35:34806] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fc72f.php"] [unique_id "aUEgMJsCeWBjrw28XtzmbgAAABQ"]
[Tue Dec 16 17:02:43.415885 2025] [:error] [pid 18408:tid 18430] [client 4.189.124.35:36647] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fc72f.php"] [unique_id "aUEgMzi2Gr8pDzjrVBDtugAAANQ"]
[Tue Dec 16 17:02:44.424820 2025] [:error] [pid 53940:tid 53953] [client 4.189.124.35:3155] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aUEgNF91PNbcXLVkpR7MswAAAco"]
[Tue Dec 16 17:02:45.308622 2025] [:error] [pid 51991:tid 52015] [client 4.189.124.35:3176] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aUEgNa7zKCVJSuwV1xZy1AAAARY"]
[Tue Dec 16 17:02:46.354308 2025] [:error] [pid 18323:tid 18374] [client 4.189.124.35:40680] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aUEgNjJB6UFxIutsA8YMfAAAAFU"]
[Tue Dec 16 17:02:48.798026 2025] [:error] [pid 12330:tid 12341] [client 4.189.124.35:35812] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aUEgOF6iIQEVCIh8V1lXjAAAAYc"]
[Tue Dec 16 17:02:50.283214 2025] [:error] [pid 12330:tid 12350] [client 4.189.124.35:34785] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jjrpo.php"] [unique_id "aUEgOl6iIQEVCIh8V1lXjQAAAZA"]
[Tue Dec 16 17:02:51.420508 2025] [:error] [pid 12330:tid 12336] [client 4.189.124.35:40642] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jjrpo.php"] [unique_id "aUEgO16iIQEVCIh8V1lXjwAAAYI"]
[Tue Dec 16 17:02:53.680928 2025] [:error] [pid 51991:tid 52005] [client 4.189.124.35:42009] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jjrpo.php"] [unique_id "aUEgPa7zKCVJSuwV1xZy4QAAAQw"]
[Tue Dec 16 17:02:56.416246 2025] [:error] [pid 51991:tid 52017] [client 4.189.124.35:3848] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jjrpo.php"] [unique_id "aUEgQK7zKCVJSuwV1xZy5AAAARg"]
[Tue Dec 16 17:02:58.325322 2025] [:error] [pid 51991:tid 51999] [client 4.189.124.35:3847] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUEgQq7zKCVJSuwV1xZy6AAAAQY"]
[Tue Dec 16 17:03:02.208398 2025] [:error] [pid 18408:tid 18416] [client 4.189.124.35:3895] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUEgRji2Gr8pDzjrVBDtvwAAAMY"]
[Tue Dec 16 17:03:05.133073 2025] [:error] [pid 51991:tid 52011] [client 4.189.124.35:36651] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUEgSa7zKCVJSuwV1xZy7QAAARI"]
[Tue Dec 16 17:03:07.476557 2025] [:error] [pid 51991:tid 52002] [client 4.189.124.35:42534] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUEgS67zKCVJSuwV1xZy8gAAAQk"]
[Tue Dec 16 17:03:23.589851 2025] [:error] [pid 12330:tid 12354] [client 4.189.124.35:36648] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hehe.php"] [unique_id "aUEgW16iIQEVCIh8V1lXyAAAAZQ"]
[Tue Dec 16 17:03:25.630010 2025] [:error] [pid 18324:tid 18381] [client 4.189.124.35:38897] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hehe.php"] [unique_id "aUEgXaG4um2mD1VpJHJ2fAAAAIE"]
[Tue Dec 16 17:03:31.227448 2025] [:error] [pid 18322:tid 18342] [client 4.189.124.35:3435] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hehe.php"] [unique_id "aUEgY5sCeWBjrw28XtzmnQAAABA"]
[Tue Dec 16 17:03:36.414364 2025] [:error] [pid 35998:tid 36025] [client 4.189.124.35:42490] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hehe.php"] [unique_id "aUEgaBKnhGuuhGxBSLOTNwAAAVg"]
[Tue Dec 16 17:03:39.700523 2025] [:error] [pid 51991:tid 51993] [client 4.189.124.35:40645] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ghreshttryu.php"] [unique_id "aUEga67zKCVJSuwV1xZzCAAAAQA"]
[Tue Dec 16 17:03:42.431647 2025] [:error] [pid 35998:tid 36020] [client 4.189.124.35:35431] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ghreshttryu.php"] [unique_id "aUEgbhKnhGuuhGxBSLOTPQAAAVM"]
[Tue Dec 16 17:03:46.973867 2025] [:error] [pid 18324:tid 18401] [client 4.189.124.35:35414] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ghreshttryu.php"] [unique_id "aUEgcqG4um2mD1VpJHJ2jgAAAJU"]
[Tue Dec 16 17:03:49.553227 2025] [:error] [pid 18324:tid 18399] [client 4.189.124.35:48008] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ghreshttryu.php"] [unique_id "aUEgdaG4um2mD1VpJHJ2kwAAAJM"]
[Tue Dec 16 17:03:52.414796 2025] [:error] [pid 18323:tid 18356] [client 4.189.124.35:3430] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xopvne.php"] [unique_id "aUEgeDJB6UFxIutsA8YMzQAAAEM"]
[Tue Dec 16 17:03:56.368518 2025] [:error] [pid 18408:tid 18410] [client 4.189.124.35:40650] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xopvne.php"] [unique_id "aUEgfDi2Gr8pDzjrVBDuCAAAAMA"]
[Tue Dec 16 17:03:59.783234 2025] [:error] [pid 18323:tid 18358] [client 4.189.124.35:38868] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xopvne.php"] [unique_id "aUEgfzJB6UFxIutsA8YM1gAAAEU"]
[Tue Dec 16 17:04:02.768686 2025] [:error] [pid 18324:tid 18398] [client 4.189.124.35:36208] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xopvne.php"] [unique_id "aUEggqG4um2mD1VpJHJ2qQAAAJI"]
[Tue Dec 16 17:04:04.534304 2025] [:error] [pid 51991:tid 52013] [client 4.189.124.35:38850] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lm18.php"] [unique_id "aUEghK7zKCVJSuwV1xZzHQAAARQ"]
[Tue Dec 16 17:04:07.180012 2025] [:error] [pid 18408:tid 18426] [client 4.189.124.35:42559] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lm18.php"] [unique_id "aUEghzi2Gr8pDzjrVBDuGAAAANA"]
[Tue Dec 16 17:04:11.970612 2025] [:error] [pid 18408:tid 18412] [client 4.189.124.35:42735] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lm18.php"] [unique_id "aUEgizi2Gr8pDzjrVBDuIQAAAMI"]
[Tue Dec 16 17:04:13.638422 2025] [:error] [pid 18323:tid 18374] [client 4.189.124.35:36200] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lm18.php"] [unique_id "aUEgjTJB6UFxIutsA8YM3gAAAFU"]
[Tue Dec 16 17:04:16.310952 2025] [:error] [pid 12330:tid 12337] [client 4.189.124.35:38881] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5b9ac.php"] [unique_id "aUEgkF6iIQEVCIh8V1lX9wAAAYM"]
[Tue Dec 16 17:04:19.484371 2025] [:error] [pid 18323:tid 18366] [client 4.189.124.35:38849] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5b9ac.php"] [unique_id "aUEgkzJB6UFxIutsA8YM5QAAAE0"]
[Tue Dec 16 17:04:33.183475 2025] [:error] [pid 53940:tid 53956] [client 4.189.124.35:36168] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccea.php"] [unique_id "aUEgoV91PNbcXLVkpR7NCQAAAc0"]
[Tue Dec 16 17:04:34.284188 2025] [:error] [pid 51991:tid 52002] [client 4.189.124.35:47691] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccea.php"] [unique_id "aUEgoq7zKCVJSuwV1xZzSgAAAQk"]
[Tue Dec 16 17:04:36.879828 2025] [:error] [pid 18322:tid 18331] [client 4.189.124.35:37913] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccea.php"] [unique_id "aUEgpJsCeWBjrw28Xtzm4QAAAAU"]
[Tue Dec 16 17:04:38.678649 2025] [:error] [pid 12330:tid 12358] [client 4.189.124.35:42746] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccea.php"] [unique_id "aUEgpl6iIQEVCIh8V1lYBwAAAZg"]
[Tue Dec 16 17:04:43.348372 2025] [:error] [pid 18323:tid 18359] [client 4.189.124.35:38627] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5e0a.php"] [unique_id "aUEgqzJB6UFxIutsA8YNAAAAAEY"]
[Tue Dec 16 17:04:44.882930 2025] [:error] [pid 18323:tid 18374] [client 4.189.124.35:3593] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5e0a.php"] [unique_id "aUEgrDJB6UFxIutsA8YNAwAAAFU"]
[Tue Dec 16 17:04:50.247913 2025] [:error] [pid 35998:tid 36022] [client 4.189.124.35:42263] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5e0a.php"] [unique_id "aUEgshKnhGuuhGxBSLOTiAAAAVU"]
[Tue Dec 16 17:04:52.683382 2025] [:error] [pid 51991:tid 51999] [client 4.189.124.35:39456] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5e0a.php"] [unique_id "aUEgtK7zKCVJSuwV1xZzWgAAAQY"]
[Tue Dec 16 17:04:55.969696 2025] [:error] [pid 12330:tid 12342] [client 4.189.124.35:35470] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qaez.php56"] [unique_id "aUEgt16iIQEVCIh8V1lYGAAAAYg"]
[Tue Dec 16 17:04:59.319824 2025] [:error] [pid 51991:tid 52003] [client 4.189.124.35:42275] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qaez.php56"] [unique_id "aUEgu67zKCVJSuwV1xZzawAAAQo"]
[Tue Dec 16 17:05:01.964301 2025] [:error] [pid 53940:tid 53963] [client 4.189.124.35:39427] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qaez.php56"] [unique_id "aUEgvV91PNbcXLVkpR7NGwAAAdQ"]
[Tue Dec 16 17:05:03.883081 2025] [:error] [pid 18408:tid 18432] [client 4.189.124.35:34186] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qaez.php56"] [unique_id "aUEgvzi2Gr8pDzjrVBDuRgAAANY"]
[Tue Dec 16 17:05:07.808714 2025] [:error] [pid 18322:tid 18333] [client 4.189.124.35:34189] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aUEgw5sCeWBjrw28Xtzm9QAAAAc"]
[Tue Dec 16 17:05:09.923802 2025] [:error] [pid 53940:tid 53950] [client 4.189.124.35:33709] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aUEgxV91PNbcXLVkpR7NJQAAAcc"]
[Tue Dec 16 17:05:11.702792 2025] [:error] [pid 51991:tid 51998] [client 4.189.124.35:40952] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aUEgx67zKCVJSuwV1xZzcQAAAQU"]
[Tue Dec 16 17:05:14.419916 2025] [:error] [pid 53940:tid 53960] [client 4.189.124.35:47623] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aUEgyl91PNbcXLVkpR7NKQAAAdE"]
[Tue Dec 16 17:05:17.359922 2025] [:error] [pid 18324:tid 18385] [client 4.189.124.35:41428] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUEgzaG4um2mD1VpJHJ25wAAAIU"]
[Tue Dec 16 17:05:21.362401 2025] [:error] [pid 53940:tid 53952] [client 4.189.124.35:37579] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUEg0V91PNbcXLVkpR7NLQAAAck"]
[Tue Dec 16 17:05:24.602021 2025] [:error] [pid 18324:tid 18399] [client 4.189.124.35:3933] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUEg1KG4um2mD1VpJHJ27AAAAJM"]
[Tue Dec 16 17:05:28.200425 2025] [:error] [pid 18408:tid 18419] [client 4.189.124.35:45031] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUEg2Di2Gr8pDzjrVBDuZgAAAMk"]
[Tue Dec 16 17:05:46.303630 2025] [:error] [pid 51991:tid 52005] [client 4.189.124.35:3989] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUEg6q7zKCVJSuwV1xZz3QAAAQw"]
[Tue Dec 16 17:05:48.492424 2025] [:error] [pid 18322:tid 18344] [client 4.189.124.35:36279] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUEg7JsCeWBjrw28XtzncwAAABI"]
[Tue Dec 16 17:05:51.710792 2025] [:error] [pid 18323:tid 18353] [client 4.189.124.35:37046] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUEg7zJB6UFxIutsA8YNPgAAAEA"]
[Tue Dec 16 17:05:55.962654 2025] [:error] [pid 18322:tid 18331] [client 4.189.124.35:36229] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUEg85sCeWBjrw28XtzneAAAAAU"]
[Tue Dec 16 17:05:57.926736 2025] [:error] [pid 18323:tid 18354] [client 4.189.124.35:3779] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUEg9TJB6UFxIutsA8YNRwAAAEE"]
[Tue Dec 16 17:06:01.629866 2025] [:error] [pid 18408:tid 18417] [client 4.189.124.35:39921] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUEg-Ti2Gr8pDzjrVBDulAAAAMc"]
[Tue Dec 16 17:06:03.359907 2025] [:error] [pid 12330:tid 12353] [client 4.189.124.35:35147] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUEg-16iIQEVCIh8V1lYXAAAAZM"]
[Tue Dec 16 17:06:06.123708 2025] [:error] [pid 35998:tid 36010] [client 4.189.124.35:36561] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUEg_hKnhGuuhGxBSLOT2AAAAUk"]
[Tue Dec 16 17:06:08.553245 2025] [:error] [pid 18324:tid 18402] [client 4.189.124.35:3658] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUEhAKG4um2mD1VpJHJ3QAAAAJY"]
[Tue Dec 16 17:06:11.061608 2025] [:error] [pid 53940:tid 53955] [client 4.189.124.35:34874] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUEhA191PNbcXLVkpR7NcQAAAcw"]
[Tue Dec 16 17:06:13.240053 2025] [:error] [pid 35998:tid 36001] [client 4.189.124.35:36565] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUEhBRKnhGuuhGxBSLOT6AAAAUA"]
[Tue Dec 16 17:06:15.274284 2025] [:error] [pid 18322:tid 18342] [client 4.189.124.35:45058] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kUgr4yGzxN.php"] [unique_id "aUEhB5sCeWBjrw28XtzniwAAABA"]
[Tue Dec 16 17:06:17.239538 2025] [:error] [pid 12330:tid 12350] [client 4.189.124.35:34835] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "aUEhCV6iIQEVCIh8V1lYcgAAAZA"]
[Tue Dec 16 17:06:19.408633 2025] [:error] [pid 53940:tid 53959] [client 4.189.124.35:34864] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "aUEhC191PNbcXLVkpR7NdAAAAdA"]
[Tue Dec 16 17:06:21.562619 2025] [:error] [pid 51991:tid 52013] [client 4.189.124.35:34845] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "aUEhDa7zKCVJSuwV1xZ0CAAAARQ"]
[Tue Dec 16 17:06:22.997143 2025] [:error] [pid 51991:tid 51996] [client 4.189.124.35:40993] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "aUEhDq7zKCVJSuwV1xZ0DQAAAQM"]
[Tue Dec 16 17:06:24.737061 2025] [:error] [pid 18324:tid 18383] [client 4.189.124.35:38340] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rp8zi.php"] [unique_id "aUEhEKG4um2mD1VpJHJ3WgAAAIM"]
[Tue Dec 16 17:06:27.915836 2025] [:error] [pid 12330:tid 12345] [client 4.189.124.35:38159] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rp8zi.php"] [unique_id "aUEhE16iIQEVCIh8V1lYfAAAAYs"]
[Tue Dec 16 17:06:29.518959 2025] [:error] [pid 12330:tid 12348] [client 4.189.124.35:40997] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rp8zi.php"] [unique_id "aUEhFV6iIQEVCIh8V1lYfgAAAY4"]
[Tue Dec 16 17:06:31.013660 2025] [:error] [pid 18323:tid 18377] [client 4.189.124.35:34509] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rp8zi.php"] [unique_id "aUEhFzJB6UFxIutsA8YNXAAAAFg"]
[Tue Dec 16 17:06:33.279899 2025] [:error] [pid 35998:tid 36017] [client 4.189.124.35:41665] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc3.php"] [unique_id "aUEhGRKnhGuuhGxBSLOT9wAAAVA"]
[Tue Dec 16 17:06:34.502656 2025] [:error] [pid 35998:tid 36024] [client 4.189.124.35:39147] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc3.php"] [unique_id "aUEhGhKnhGuuhGxBSLOT_QAAAVc"]
[Tue Dec 16 17:06:35.589131 2025] [:error] [pid 53940:tid 53963] [client 4.189.124.35:40416] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc3.php"] [unique_id "aUEhG191PNbcXLVkpR7NggAAAdQ"]
[Tue Dec 16 17:06:36.887517 2025] [:error] [pid 18322:tid 18342] [client 4.189.124.35:41678] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc3.php"] [unique_id "aUEhHJsCeWBjrw28XtznlQAAABA"]
[Tue Dec 16 17:06:39.926307 2025] [:error] [pid 53940:tid 53958] [client 4.189.124.35:34295] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-user.php"] [unique_id "aUEhH191PNbcXLVkpR7NhAAAAc8"]
[Tue Dec 16 17:06:41.036813 2025] [:error] [pid 12330:tid 12336] [client 4.189.124.35:43536] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-user.php"] [unique_id "aUEhIV6iIQEVCIh8V1lYkQAAAYI"]
[Tue Dec 16 17:06:42.803600 2025] [:error] [pid 12330:tid 12357] [client 4.189.124.35:40430] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-user.php"] [unique_id "aUEhIl6iIQEVCIh8V1lYlAAAAZc"]
[Tue Dec 16 17:06:57.322111 2025] [:error] [pid 12330:tid 12346] [client 4.189.124.35:38352] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NWqz649FIe7.php"] [unique_id "aUEhMV6iIQEVCIh8V1lYrAAAAYw"]
[Tue Dec 16 17:07:00.558952 2025] [:error] [pid 35998:tid 36024] [client 4.189.124.35:48050] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NWqz649FIe7.php"] [unique_id "aUEhNBKnhGuuhGxBSLOUFAAAAVc"]
[Tue Dec 16 17:07:03.691242 2025] [:error] [pid 53940:tid 53961] [client 4.189.124.35:42987] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NWqz649FIe7.php"] [unique_id "aUEhN191PNbcXLVkpR7NlwAAAdI"]
[Tue Dec 16 17:07:05.201699 2025] [:error] [pid 51991:tid 51999] [client 4.189.124.35:34290] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NWqz649FIe7.php"] [unique_id "aUEhOa7zKCVJSuwV1xZ0OwAAAQY"]
[Tue Dec 16 17:07:07.695491 2025] [:error] [pid 51991:tid 51995] [client 4.189.124.35:43522] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nucqsqeg.php"] [unique_id "aUEhO67zKCVJSuwV1xZ0RAAAAQI"]
[Tue Dec 16 17:07:09.124726 2025] [:error] [pid 18322:tid 18339] [client 4.189.124.35:4068] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nucqsqeg.php"] [unique_id "aUEhPZsCeWBjrw28XtznqQAAAA0"]
[Tue Dec 16 17:07:10.492355 2025] [:error] [pid 18324:tid 18388] [client 4.189.124.35:4092] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nucqsqeg.php"] [unique_id "aUEhPqG4um2mD1VpJHJ3owAAAIg"]
[Tue Dec 16 17:07:12.809642 2025] [:error] [pid 18408:tid 18418] [client 4.189.124.35:43543] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nucqsqeg.php"] [unique_id "aUEhQDi2Gr8pDzjrVBDu5wAAAMg"]
[Tue Dec 16 17:07:15.148180 2025] [:error] [pid 51991:tid 52008] [client 4.189.124.35:35207] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mhpglaje.php"] [unique_id "aUEhQ67zKCVJSuwV1xZ0TQAAAQ8"]
[Tue Dec 16 17:07:16.476156 2025] [:error] [pid 53940:tid 53961] [client 4.189.124.35:35254] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mhpglaje.php"] [unique_id "aUEhRF91PNbcXLVkpR7NygAAAdI"]
[Tue Dec 16 17:07:18.831640 2025] [:error] [pid 18324:tid 18395] [client 4.189.124.35:34609] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mhpglaje.php"] [unique_id "aUEhRqG4um2mD1VpJHJ3pQAAAI8"]
[Tue Dec 16 17:07:20.700908 2025] [:error] [pid 18408:tid 18421] [client 4.189.124.35:35250] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mhpglaje.php"] [unique_id "aUEhSDi2Gr8pDzjrVBDu7wAAAMs"]
[Tue Dec 16 17:07:27.750352 2025] [:error] [pid 53940:tid 53960] [client 4.189.124.35:43008] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUEhT191PNbcXLVkpR7N2gAAAdE"]
[Tue Dec 16 17:07:29.630854 2025] [:error] [pid 18322:tid 18336] [client 4.189.124.35:34589] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUEhUZsCeWBjrw28XtznzwAAAAo"]
[Tue Dec 16 17:07:32.491131 2025] [:error] [pid 51991:tid 52001] [client 4.189.124.35:41768] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUEhVK7zKCVJSuwV1xZ0lAAAAQg"]
[Tue Dec 16 17:07:35.325248 2025] [:error] [pid 12330:tid 12337] [client 4.189.124.35:48024] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUEhV16iIQEVCIh8V1lY0gAAAYM"]
[Tue Dec 16 17:07:36.804758 2025] [:error] [pid 18408:tid 18424] [client 4.189.124.35:37292] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUEhWDi2Gr8pDzjrVBDvBgAAAM4"]
[Tue Dec 16 17:07:39.090792 2025] [:error] [pid 53940:tid 53946] [client 4.189.124.35:41733] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUEhW191PNbcXLVkpR7N5QAAAcM"]
[Tue Dec 16 17:07:40.370984 2025] [:error] [pid 18408:tid 18423] [client 4.189.124.35:44567] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUEhXDi2Gr8pDzjrVBDvCAAAAM0"]
[Tue Dec 16 17:07:42.232446 2025] [:error] [pid 51991:tid 51996] [client 4.189.124.35:34607] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUEhXq7zKCVJSuwV1xZ0rQAAAQM"]
[Tue Dec 16 17:07:46.251576 2025] [:error] [pid 53940:tid 53960] [client 4.189.124.35:43492] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ijNdPI1Orya.php"] [unique_id "aUEhYl91PNbcXLVkpR7N7gAAAdE"]
[Tue Dec 16 17:07:48.113432 2025] [:error] [pid 18322:tid 18350] [client 4.189.124.35:42956] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ijNdPI1Orya.php"] [unique_id "aUEhZJsCeWBjrw28XtzoQAAAABg"]
[Tue Dec 16 17:07:51.072918 2025] [:error] [pid 18324:tid 18390] [client 4.189.124.35:33928] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ijNdPI1Orya.php"] [unique_id "aUEhZ6G4um2mD1VpJHJ3twAAAIo"]
[Tue Dec 16 17:07:51.796311 2025] [:error] [pid 18324:tid 18382] [client 4.189.124.35:34596] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ijNdPI1Orya.php"] [unique_id "aUEhZ6G4um2mD1VpJHJ3uQAAAII"]
[Tue Dec 16 17:07:53.126079 2025] [:error] [pid 53940:tid 53955] [client 4.189.124.35:43020] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUEhaV91PNbcXLVkpR7N-AAAAcw"]
[Tue Dec 16 17:07:54.884622 2025] [:error] [pid 51991:tid 52001] [client 4.189.124.35:43061] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUEhaq7zKCVJSuwV1xZ0tgAAAQg"]
[Tue Dec 16 17:08:11.439141 2025] [:error] [pid 18324:tid 18385] [client 4.189.124.35:43058] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUEhe6G4um2mD1VpJHJ38gAAAIU"]
[Tue Dec 16 17:08:14.708214 2025] [:error] [pid 12330:tid 12337] [client 4.189.124.35:4061] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUEhfl6iIQEVCIh8V1lY8AAAAYM"]
[Tue Dec 16 17:08:16.381415 2025] [:error] [pid 51991:tid 52014] [client 4.189.124.35:43457] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUEhgK7zKCVJSuwV1xZ05AAAARU"]
[Tue Dec 16 17:08:18.992419 2025] [:error] [pid 18324:tid 18384] [client 4.189.124.35:41753] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUEhgqG4um2mD1VpJHJ39wAAAIQ"]
[Tue Dec 16 17:08:21.089264 2025] [:error] [pid 53940:tid 53957] [client 4.189.124.35:43513] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hello.php"] [unique_id "aUEhhV91PNbcXLVkpR7OCwAAAc4"]
[Tue Dec 16 17:08:23.753086 2025] [:error] [pid 18324:tid 18398] [client 4.189.124.35:3729] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hello.php"] [unique_id "aUEhh6G4um2mD1VpJHJ3_gAAAJI"]
[Tue Dec 16 17:08:26.784836 2025] [:error] [pid 18323:tid 18363] [client 4.189.124.35:33950] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hello.php"] [unique_id "aUEhijJB6UFxIutsA8YN3AAAAEo"]
[Tue Dec 16 17:08:28.379046 2025] [:error] [pid 18408:tid 18431] [client 4.189.124.35:4075] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hello.php"] [unique_id "aUEhjDi2Gr8pDzjrVBDvPAAAANU"]
[Tue Dec 16 17:08:30.100598 2025] [:error] [pid 18322:tid 18349] [client 4.189.124.35:34795] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aUEhjpsCeWBjrw28XtzoYgAAABc"]
[Tue Dec 16 17:08:32.271036 2025] [:error] [pid 18322:tid 18326] [client 4.189.124.35:41747] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aUEhkJsCeWBjrw28XtzoZQAAAAA"]
[Tue Dec 16 17:08:33.328416 2025] [:error] [pid 18408:tid 18419] [client 4.189.124.35:41740] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aUEhkTi2Gr8pDzjrVBDvQAAAAMk"]
[Tue Dec 16 17:08:34.525882 2025] [:error] [pid 12330:tid 12347] [client 4.189.124.35:43510] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aUEhkl6iIQEVCIh8V1lZAQAAAY0"]
[Tue Dec 16 17:08:36.507605 2025] [:error] [pid 18323:tid 18360] [client 4.189.124.35:43057] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aUEhlDJB6UFxIutsA8YN7wAAAEc"]
[Tue Dec 16 17:08:38.597521 2025] [:error] [pid 53940:tid 53943] [client 4.189.124.35:3734] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aUEhll91PNbcXLVkpR7OGwAAAcA"]
[Tue Dec 16 17:08:40.880374 2025] [:error] [pid 51991:tid 51997] [client 4.189.124.35:33982] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aUEhmK7zKCVJSuwV1xZ0_gAAAQQ"]
[Tue Dec 16 17:08:44.239041 2025] [:error] [pid 18408:tid 18428] [client 4.189.124.35:4078] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aUEhnDi2Gr8pDzjrVBDvTgAAANI"]
[Tue Dec 16 17:08:47.073892 2025] [:error] [pid 18324:tid 18402] [client 4.189.124.35:43034] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUEhn6G4um2mD1VpJHJ4bgAAAJY"]
[Tue Dec 16 17:08:49.174534 2025] [:error] [pid 51991:tid 52004] [client 4.189.124.35:34615] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUEhoa7zKCVJSuwV1xZ1BwAAAQs"]
[Tue Dec 16 17:08:53.419775 2025] [:error] [pid 51991:tid 51995] [client 4.189.124.35:44576] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUEhpa7zKCVJSuwV1xZ1DgAAAQI"]
[Tue Dec 16 17:08:56.984615 2025] [:error] [pid 35998:tid 36014] [client 4.189.124.35:44578] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUEhqBKnhGuuhGxBSLOU2wAAAU0"]
[Tue Dec 16 17:09:00.137123 2025] [:error] [pid 18323:tid 18375] [client 4.189.124.35:33980] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aUEhrDJB6UFxIutsA8YOEwAAAFY"]
[Tue Dec 16 17:09:01.411172 2025] [:error] [pid 12330:tid 12339] [client 4.189.124.35:4080] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aUEhrV6iIQEVCIh8V1lZJAAAAYU"]
[Tue Dec 16 17:09:04.352842 2025] [:error] [pid 12330:tid 12334] [client 4.189.124.35:43464] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aUEhsF6iIQEVCIh8V1lZJQAAAYA"]
[Tue Dec 16 17:09:05.702320 2025] [:error] [pid 18323:tid 18360] [client 4.189.124.35:34765] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aUEhsTJB6UFxIutsA8YOFwAAAEc"]
[Tue Dec 16 17:09:07.681481 2025] [:error] [pid 18322:tid 18327] [client 4.189.124.35:4066] [client 4.189.124.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aUEhs5sCeWBjrw28XtzolwAAAAE"]
[Tue Dec 16 19:11:38.669253 2025] [:error] [pid 12330:tid 12356] [client 121.33.16.65:51054] [client 121.33.16.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.33.16.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUE-al6iIQEVCIh8V1l4EgAAAZY"]
[Tue Dec 16 19:11:50.851017 2025] [:error] [pid 53940:tid 53961] [client 161.248.188.190:45008] [client 161.248.188.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.248.188.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUE-dl91PNbcXLVkpR7pJwAAAdI"]
[Tue Dec 16 20:14:03.436753 2025] [:error] [pid 51991:tid 52016] [client 43.166.247.155:50654] [client 43.166.247.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUFNC67zKCVJSuwV1xa3kgAAARc"]
[Wed Dec 17 01:30:27.131955 2025] [:error] [pid 64922:tid 64928] [client 197.31.20.194:65374] [client 197.31.20.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.31.20.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUGXMw70DhirJ6vYR3EZIQAAAMQ"]
[Wed Dec 17 01:51:28.744253 2025] [:error] [pid 64837:tid 64900] [client 120.71.59.24:34221] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUGcILoJEzr5Ydl6WcREWAAAAIY"]
[Wed Dec 17 03:47:09.018799 2025] [:error] [pid 50191:tid 50201] [client 4.196.84.136:38546] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aUG3PY2kH_QR7N4cGFe-HgAAAYg"]
[Wed Dec 17 03:47:09.957161 2025] [:error] [pid 50520:tid 50527] [client 4.196.84.136:37372] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aUG3PfArjiCapubpNFUiJAAAAkU"]
[Wed Dec 17 03:47:10.242811 2025] [:error] [pid 50191:tid 50206] [client 4.196.84.136:32899] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aUG3Po2kH_QR7N4cGFe-JAAAAY0"]
[Wed Dec 17 03:47:10.665785 2025] [:error] [pid 64835:tid 64842] [client 4.196.84.136:36505] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aUG3Pu0_iNx32Sz58ML_HAAAAAM"]
[Wed Dec 17 03:47:10.771499 2025] [:error] [pid 7514:tid 7516] [client 4.196.84.136:31449] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aUG3PkJ2oigi4i7K2nDfDAAAAQA"]
[Wed Dec 17 03:47:10.920332 2025] [:error] [pid 50520:tid 50535] [client 4.196.84.136:10003] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aUG3PvArjiCapubpNFUiJQAAAk0"]
[Wed Dec 17 03:47:11.333948 2025] [:error] [pid 50154:tid 50173] [client 4.196.84.136:32958] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aUG3P9CGC5U2hJbUrB-IogAAAVA"]
[Wed Dec 17 03:47:11.496318 2025] [:error] [pid 50154:tid 50166] [client 4.196.84.136:10005] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aUG3P9CGC5U2hJbUrB-IowAAAUk"]
[Wed Dec 17 03:47:11.906050 2025] [:error] [pid 50154:tid 50181] [client 4.196.84.136:38054] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OK.php"] [unique_id "aUG3P9CGC5U2hJbUrB-IpAAAAVg"]
[Wed Dec 17 03:47:12.824045 2025] [:error] [pid 50191:tid 50212] [client 4.196.84.136:32152] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OK.php"] [unique_id "aUG3QI2kH_QR7N4cGFe-JgAAAZM"]
[Wed Dec 17 03:47:14.351950 2025] [:error] [pid 64837:tid 64912] [client 4.196.84.136:63592] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OK.php"] [unique_id "aUG3QroJEzr5Ydl6WcRrVAAAAJI"]
[Wed Dec 17 03:47:15.871470 2025] [:error] [pid 7514:tid 7537] [client 4.196.84.136:36804] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OK.php"] [unique_id "aUG3Q0J2oigi4i7K2nDfEQAAARU"]
[Wed Dec 17 03:47:16.583798 2025] [:error] [pid 50330:tid 50352] [client 4.196.84.136:40554] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aUG3RKwD1ENQX3ZCdIAL-AAAAdQ"]
[Wed Dec 17 03:47:17.639696 2025] [:error] [pid 50520:tid 50531] [client 4.196.84.136:31350] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aUG3RfArjiCapubpNFUiKQAAAkk"]
[Wed Dec 17 03:47:18.537151 2025] [:error] [pid 64836:tid 64880] [client 4.196.84.136:31331] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aUG3RpiNb_9YvA0mnRBtVQAAAE0"]
[Wed Dec 17 03:47:19.271477 2025] [:error] [pid 7514:tid 7522] [client 4.196.84.136:37349] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aUG3R0J2oigi4i7K2nDfFgAAAQY"]
[Wed Dec 17 03:47:20.174314 2025] [:error] [pid 64836:tid 64868] [client 4.196.84.136:37355] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zsec.php"] [unique_id "aUG3SJiNb_9YvA0mnRBtVwAAAEE"]
[Wed Dec 17 03:47:21.176074 2025] [:error] [pid 50520:tid 50536] [client 4.196.84.136:38055] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zsec.php"] [unique_id "aUG3SfArjiCapubpNFUiKwAAAk4"]
[Wed Dec 17 03:47:21.873458 2025] [:error] [pid 64837:tid 64904] [client 4.196.84.136:9953] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zsec.php"] [unique_id "aUG3SboJEzr5Ydl6WcRrZgAAAIo"]
[Wed Dec 17 03:47:22.065473 2025] [:error] [pid 7514:tid 7535] [client 4.196.84.136:9923] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zsec.php"] [unique_id "aUG3SkJ2oigi4i7K2nDfGAAAARM"]
[Wed Dec 17 03:47:22.771176 2025] [:error] [pid 50520:tid 50525] [client 4.196.84.136:36501] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aUG3SvArjiCapubpNFUiMQAAAkM"]
[Wed Dec 17 03:47:23.375735 2025] [:error] [pid 7514:tid 7534] [client 4.196.84.136:9940] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aUG3S0J2oigi4i7K2nDfGgAAARI"]
[Wed Dec 17 03:47:24.054595 2025] [:error] [pid 50520:tid 50523] [client 4.196.84.136:63568] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aUG3TPArjiCapubpNFUiMgAAAkE"]
[Wed Dec 17 03:47:24.764848 2025] [:error] [pid 50191:tid 50195] [client 4.196.84.136:63557] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aUG3TI2kH_QR7N4cGFe-OQAAAYI"]
[Wed Dec 17 03:47:25.107627 2025] [:error] [pid 64835:tid 64846] [client 4.196.84.136:40553] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aUG3Te0_iNx32Sz58ML_JgAAAAc"]
[Wed Dec 17 03:47:25.465650 2025] [:error] [pid 50191:tid 50199] [client 4.196.84.136:9935] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aUG3TY2kH_QR7N4cGFe-OgAAAYY"]
[Wed Dec 17 03:47:25.999589 2025] [:error] [pid 64837:tid 64917] [client 4.196.84.136:38044] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aUG3TboJEzr5Ydl6WcRraAAAAJc"]
[Wed Dec 17 03:47:26.436146 2025] [:error] [pid 50520:tid 50537] [client 4.196.84.136:10047] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aUG3TvArjiCapubpNFUiNwAAAk8"]
[Wed Dec 17 03:47:26.698257 2025] [:error] [pid 50520:tid 50539] [client 4.196.84.136:36482] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aUG3TvArjiCapubpNFUiOQAAAlE"]
[Wed Dec 17 03:47:26.936835 2025] [:error] [pid 50330:tid 50332] [client 4.196.84.136:63575] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aUG3TqwD1ENQX3ZCdIAL-wAAAcA"]
[Wed Dec 17 03:47:27.377311 2025] [:error] [pid 50191:tid 50205] [client 4.196.84.136:10028] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aUG3T42kH_QR7N4cGFe-PgAAAYw"]
[Wed Dec 17 03:47:27.990837 2025] [:error] [pid 50520:tid 50524] [client 4.196.84.136:9952] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aUG3T_ArjiCapubpNFUiOwAAAkI"]
[Wed Dec 17 03:47:28.441794 2025] [:error] [pid 50154:tid 50180] [client 4.196.84.136:38067] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/af32.php"] [unique_id "aUG3UNCGC5U2hJbUrB-IqQAAAVc"]
[Wed Dec 17 03:47:29.514289 2025] [:error] [pid 50191:tid 50196] [client 4.196.84.136:31436] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/af32.php"] [unique_id "aUG3UY2kH_QR7N4cGFe-QAAAAYM"]
[Wed Dec 17 03:47:29.796208 2025] [:error] [pid 50154:tid 50177] [client 4.196.84.136:10010] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/af32.php"] [unique_id "aUG3UdCGC5U2hJbUrB-IqwAAAVQ"]
[Wed Dec 17 03:47:30.559224 2025] [:error] [pid 50191:tid 50216] [client 4.196.84.136:38074] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/af32.php"] [unique_id "aUG3Uo2kH_QR7N4cGFe-QgAAAZc"]
[Wed Dec 17 03:47:30.699666 2025] [:error] [pid 7514:tid 7523] [client 4.196.84.136:40559] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rz.php"] [unique_id "aUG3UkJ2oigi4i7K2nDfJQAAAQc"]
[Wed Dec 17 03:47:30.969662 2025] [:error] [pid 7514:tid 7526] [client 4.196.84.136:10044] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rz.php"] [unique_id "aUG3UkJ2oigi4i7K2nDfKAAAAQo"]
[Wed Dec 17 03:47:31.118857 2025] [:error] [pid 64922:tid 64945] [client 4.196.84.136:31333] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rz.php"] [unique_id "aUG3Uw70DhirJ6vYR3FPNAAAANU"]
[Wed Dec 17 03:47:31.589868 2025] [:error] [pid 50554:tid 50559] [client 4.196.84.136:37325] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rz.php"] [unique_id "aUG3UxOYdPI_HUXvpLQEEwAAAoI"]
[Wed Dec 17 03:47:31.775156 2025] [:error] [pid 64836:tid 64875] [client 4.196.84.136:9962] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/let.php"] [unique_id "aUG3U5iNb_9YvA0mnRBtZwAAAEg"]
[Wed Dec 17 03:47:32.202721 2025] [:error] [pid 50154:tid 50166] [client 4.196.84.136:36489] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/let.php"] [unique_id "aUG3VNCGC5U2hJbUrB-IrgAAAUk"]
[Wed Dec 17 03:47:33.002784 2025] [:error] [pid 50154:tid 50181] [client 4.196.84.136:10012] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/let.php"] [unique_id "aUG3VdCGC5U2hJbUrB-IrwAAAVg"]
[Wed Dec 17 03:47:33.746836 2025] [:error] [pid 7514:tid 7517] [client 4.196.84.136:37333] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/let.php"] [unique_id "aUG3VUJ2oigi4i7K2nDfLQAAAQE"]
[Wed Dec 17 03:47:33.964179 2025] [:error] [pid 50330:tid 50337] [client 4.196.84.136:38039] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUG3VawD1ENQX3ZCdIAL_AAAAcU"]
[Wed Dec 17 03:47:34.255797 2025] [:error] [pid 7514:tid 7535] [client 4.196.84.136:39153] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUG3VkJ2oigi4i7K2nDfMAAAARM"]
[Wed Dec 17 03:47:34.825254 2025] [:error] [pid 7514:tid 7523] [client 4.196.84.136:31298] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUG3VkJ2oigi4i7K2nDfMwAAAQc"]
[Wed Dec 17 03:47:35.766073 2025] [:error] [pid 50191:tid 50206] [client 4.196.84.136:9986] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUG3V42kH_QR7N4cGFe-SwAAAY0"]
[Wed Dec 17 03:47:36.321392 2025] [:error] [pid 50191:tid 50197] [client 4.196.84.136:36508] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aUG3WI2kH_QR7N4cGFe-TQAAAYQ"]
[Wed Dec 17 03:47:37.084938 2025] [:error] [pid 50154:tid 50179] [client 4.196.84.136:38052] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aUG3WdCGC5U2hJbUrB-IswAAAVY"]
[Wed Dec 17 03:47:37.267347 2025] [:error] [pid 64837:tid 64902] [client 4.196.84.136:38034] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aUG3WboJEzr5Ydl6WcRragAAAIg"]
[Wed Dec 17 03:47:37.527734 2025] [:error] [pid 50191:tid 50195] [client 4.196.84.136:33686] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aUG3WY2kH_QR7N4cGFe-UgAAAYI"]
[Wed Dec 17 03:47:37.745479 2025] [:error] [pid 50191:tid 50199] [client 4.196.84.136:36539] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aUG3WY2kH_QR7N4cGFe-UwAAAYY"]
[Wed Dec 17 03:47:37.808238 2025] [:error] [pid 50191:tid 50201] [client 4.196.84.136:36803] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aUG3WY2kH_QR7N4cGFe-VQAAAYg"]
[Wed Dec 17 03:47:38.007482 2025] [:error] [pid 50191:tid 50211] [client 4.196.84.136:9926] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aUG3Wo2kH_QR7N4cGFe-VwAAAZI"]
[Wed Dec 17 03:47:38.050052 2025] [:error] [pid 50154:tid 50178] [client 4.196.84.136:29851] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aUG3WtCGC5U2hJbUrB-ItQAAAVU"]
[Wed Dec 17 03:47:38.166421 2025] [:error] [pid 64922:tid 64939] [client 4.196.84.136:63556] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aUG3Wg70DhirJ6vYR3FPNQAAAM8"]
[Wed Dec 17 03:47:38.293083 2025] [:error] [pid 7514:tid 7519] [client 4.196.84.136:32134] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aUG3WkJ2oigi4i7K2nDfOAAAAQM"]
[Wed Dec 17 03:47:38.584344 2025] [:error] [pid 50191:tid 50208] [client 4.196.84.136:9997] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aUG3Wo2kH_QR7N4cGFe-XAAAAY8"]
[Wed Dec 17 03:47:38.902041 2025] [:error] [pid 7514:tid 7524] [client 4.196.84.136:31310] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aUG3WkJ2oigi4i7K2nDfOQAAAQg"]
[Wed Dec 17 03:47:39.732175 2025] [:error] [pid 64922:tid 64947] [client 4.196.84.136:40528] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aUG3Ww70DhirJ6vYR3FPNgAAANc"]
[Wed Dec 17 03:47:40.058679 2025] [:error] [pid 50154:tid 50165] [client 4.196.84.136:31359] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aUG3XNCGC5U2hJbUrB-ItwAAAUg"]
[Wed Dec 17 03:47:40.276107 2025] [:error] [pid 50520:tid 50540] [client 4.196.84.136:32931] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aUG3XPArjiCapubpNFUiQgAAAlI"]
[Wed Dec 17 03:47:40.441964 2025] [:error] [pid 50330:tid 50350] [client 4.196.84.136:32148] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aUG3XKwD1ENQX3ZCdIAMBAAAAdI"]
[Wed Dec 17 03:47:40.565331 2025] [:error] [pid 64922:tid 64924] [client 4.196.84.136:40572] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aUG3XA70DhirJ6vYR3FPNwAAAMA"]
[Wed Dec 17 03:47:40.666064 2025] [:error] [pid 64922:tid 64942] [client 4.196.84.136:29869] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aUG3XA70DhirJ6vYR3FPOAAAANI"]
[Wed Dec 17 03:47:40.706002 2025] [:error] [pid 64836:tid 64871] [client 4.196.84.136:36485] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aUG3XJiNb_9YvA0mnRBtaQAAAEQ"]
[Wed Dec 17 03:47:40.777584 2025] [:error] [pid 64836:tid 64878] [client 4.196.84.136:31329] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aUG3XJiNb_9YvA0mnRBtagAAAEs"]
[Wed Dec 17 03:47:41.241629 2025] [:error] [pid 64837:tid 64913] [client 4.196.84.136:40561] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "aUG3XboJEzr5Ydl6WcRrcAAAAJM"]
[Wed Dec 17 03:47:42.047128 2025] [:error] [pid 50330:tid 50352] [client 4.196.84.136:63566] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "aUG3XqwD1ENQX3ZCdIAMBwAAAdQ"]
[Wed Dec 17 03:47:42.585866 2025] [:error] [pid 64837:tid 64898] [client 4.196.84.136:37324] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "aUG3XroJEzr5Ydl6WcRrdAAAAIQ"]
[Wed Dec 17 03:47:42.719279 2025] [:error] [pid 64922:tid 64938] [client 4.196.84.136:9922] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "aUG3Xg70DhirJ6vYR3FPPQAAAM4"]
[Wed Dec 17 03:47:43.112813 2025] [:error] [pid 64922:tid 64944] [client 4.196.84.136:37345] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUG3Xw70DhirJ6vYR3FPPgAAANQ"]
[Wed Dec 17 03:47:43.374020 2025] [:error] [pid 64835:tid 64848] [client 4.196.84.136:32922] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUG3X-0_iNx32Sz58ML_NgAAAAk"]
[Wed Dec 17 03:47:43.547928 2025] [:error] [pid 64837:tid 64908] [client 4.196.84.136:40567] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUG3X7oJEzr5Ydl6WcRrdgAAAI4"]
[Wed Dec 17 03:47:43.705851 2025] [:error] [pid 50554:tid 50575] [client 4.196.84.136:33699] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUG3XxOYdPI_HUXvpLQEFQAAApI"]
[Wed Dec 17 03:47:43.771790 2025] [:error] [pid 64922:tid 64940] [client 4.196.84.136:9991] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aUG3Xw70DhirJ6vYR3FPQAAAANA"]
[Wed Dec 17 03:47:43.891448 2025] [:error] [pid 64837:tid 64917] [client 4.196.84.136:9967] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aUG3X7oJEzr5Ydl6WcRrdwAAAJc"]
[Wed Dec 17 03:47:44.191646 2025] [:error] [pid 64922:tid 64934] [client 4.196.84.136:37361] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aUG3YA70DhirJ6vYR3FPQQAAAMo"]
[Wed Dec 17 03:47:44.621398 2025] [:error] [pid 64922:tid 64937] [client 4.196.84.136:10030] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aUG3YA70DhirJ6vYR3FPQgAAAM0"]
[Wed Dec 17 03:47:45.010996 2025] [:error] [pid 64836:tid 64884] [client 4.196.84.136:38047] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUG3YZiNb_9YvA0mnRBtcAAAAFE"]
[Wed Dec 17 03:47:45.333128 2025] [:error] [pid 64836:tid 64873] [client 4.196.84.136:63612] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUG3YZiNb_9YvA0mnRBtcgAAAEY"]
[Wed Dec 17 03:47:45.814207 2025] [:error] [pid 64922:tid 64933] [client 4.196.84.136:32910] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUG3YQ70DhirJ6vYR3FPRAAAAMk"]
[Wed Dec 17 03:47:46.355603 2025] [:error] [pid 64836:tid 64879] [client 4.196.84.136:32926] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUG3YpiNb_9YvA0mnRBtcwAAAEw"]
[Wed Dec 17 03:47:46.764530 2025] [:error] [pid 64836:tid 64886] [client 4.196.84.136:10023] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUG3YpiNb_9YvA0mnRBtdQAAAFM"]
[Wed Dec 17 03:47:47.562656 2025] [:error] [pid 50520:tid 50525] [client 4.196.84.136:32174] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUG3Y_ArjiCapubpNFUiRQAAAkM"]
[Wed Dec 17 03:47:47.699147 2025] [:error] [pid 64835:tid 64859] [client 4.196.84.136:31465] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUG3Y-0_iNx32Sz58ML_OQAAABQ"]
[Wed Dec 17 03:47:47.835017 2025] [:error] [pid 64922:tid 64947] [client 4.196.84.136:63571] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUG3Yw70DhirJ6vYR3FPRwAAANc"]
[Wed Dec 17 03:47:48.051236 2025] [:error] [pid 50520:tid 50535] [client 4.196.84.136:63615] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUG3ZPArjiCapubpNFUiRgAAAk0"]
[Wed Dec 17 03:47:48.372664 2025] [:error] [pid 50520:tid 50522] [client 4.196.84.136:29814] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUG3ZPArjiCapubpNFUiRwAAAkA"]
[Wed Dec 17 03:47:48.442986 2025] [:error] [pid 50554:tid 50571] [client 4.196.84.136:31311] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUG3ZBOYdPI_HUXvpLQEGQAAAo4"]
[Wed Dec 17 03:47:48.660054 2025] [:error] [pid 50520:tid 50528] [client 4.196.84.136:31297] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUG3ZPArjiCapubpNFUiSAAAAkY"]
[Wed Dec 17 03:47:49.134113 2025] [:error] [pid 50154:tid 50166] [client 4.196.84.136:31321] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aUG3ZdCGC5U2hJbUrB-IuAAAAUk"]
[Wed Dec 17 03:47:49.964127 2025] [:error] [pid 50154:tid 50181] [client 4.196.84.136:32924] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aUG3ZdCGC5U2hJbUrB-IuQAAAVg"]
[Wed Dec 17 03:47:50.759513 2025] [:error] [pid 64922:tid 64928] [client 4.196.84.136:37330] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aUG3Zg70DhirJ6vYR3FPSQAAAMQ"]
[Wed Dec 17 03:47:51.689632 2025] [:error] [pid 64837:tid 64904] [client 4.196.84.136:63606] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aUG3Z7oJEzr5Ydl6WcRrfQAAAIo"]
[Wed Dec 17 03:47:52.101921 2025] [:error] [pid 50191:tid 50205] [client 4.196.84.136:38096] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUG3aI2kH_QR7N4cGFe-aQAAAYw"]
[Wed Dec 17 03:47:52.175857 2025] [:error] [pid 7514:tid 7516] [client 4.196.84.136:29768] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUG3aEJ2oigi4i7K2nDfPgAAAQA"]
[Wed Dec 17 03:47:52.241879 2025] [:error] [pid 50191:tid 50194] [client 4.196.84.136:29784] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUG3aI2kH_QR7N4cGFe-agAAAYE"]
[Wed Dec 17 03:47:52.538810 2025] [:error] [pid 50154:tid 50164] [client 4.196.84.136:31425] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUG3aNCGC5U2hJbUrB-IvAAAAUc"]
[Wed Dec 17 03:47:53.116281 2025] [:error] [pid 50520:tid 50539] [client 4.196.84.136:9842] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUG3afArjiCapubpNFUiTQAAAlE"]
[Wed Dec 17 03:47:53.475992 2025] [:error] [pid 64837:tid 64911] [client 4.196.84.136:29799] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUG3aboJEzr5Ydl6WcRrfwAAAJE"]
[Wed Dec 17 03:47:53.647876 2025] [:error] [pid 64836:tid 64882] [client 4.196.84.136:9799] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUG3aZiNb_9YvA0mnRBtegAAAE8"]
[Wed Dec 17 03:47:54.142168 2025] [:error] [pid 64837:tid 64907] [client 4.196.84.136:33682] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUG3aroJEzr5Ydl6WcRrgAAAAI0"]
[Wed Dec 17 03:47:54.667324 2025] [:error] [pid 50154:tid 50175] [client 4.196.84.136:63584] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aUG3atCGC5U2hJbUrB-IvwAAAVI"]
[Wed Dec 17 03:47:55.578320 2025] [:error] [pid 7514:tid 7539] [client 4.196.84.136:63588] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aUG3a0J2oigi4i7K2nDfPwAAARc"]
[Wed Dec 17 03:47:55.766313 2025] [:error] [pid 64922:tid 64939] [client 4.196.84.136:32184] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aUG3aw70DhirJ6vYR3FPTwAAAM8"]
[Wed Dec 17 03:47:56.021104 2025] [:error] [pid 64922:tid 64947] [client 4.196.84.136:33708] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aUG3bA70DhirJ6vYR3FPUAAAANc"]
[Wed Dec 17 03:47:56.470463 2025] [:error] [pid 50554:tid 50575] [client 4.196.84.136:37360] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aUG3bBOYdPI_HUXvpLQEIAAAApI"]
[Wed Dec 17 03:47:56.699698 2025] [:error] [pid 50154:tid 50180] [client 4.196.84.136:37350] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aUG3bNCGC5U2hJbUrB-IwwAAAVc"]
[Wed Dec 17 03:47:57.046134 2025] [:error] [pid 50191:tid 50198] [client 4.196.84.136:32934] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aUG3bY2kH_QR7N4cGFe-cAAAAYU"]
[Wed Dec 17 03:47:58.335424 2025] [:error] [pid 64922:tid 64929] [client 4.196.84.136:62059] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aUG3bg70DhirJ6vYR3FPVAAAAMU"]
[Wed Dec 17 03:47:58.491444 2025] [:error] [pid 64922:tid 64938] [client 4.196.84.136:9794] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUG3bg70DhirJ6vYR3FPVQAAAM4"]
[Wed Dec 17 03:47:58.604335 2025] [:error] [pid 64837:tid 64912] [client 4.196.84.136:40557] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUG3broJEzr5Ydl6WcRrhAAAAJI"]
[Wed Dec 17 03:47:59.112836 2025] [:error] [pid 64922:tid 64940] [client 4.196.84.136:32180] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUG3bw70DhirJ6vYR3FPVgAAANA"]
[Wed Dec 17 03:48:00.256851 2025] [:error] [pid 7514:tid 7525] [client 4.196.84.136:38119] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUG3cEJ2oigi4i7K2nDfQAAAAQk"]
[Wed Dec 17 03:48:00.876131 2025] [:error] [pid 50191:tid 50213] [client 4.196.84.136:9796] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUG3cI2kH_QR7N4cGFe-cwAAAZQ"]
[Wed Dec 17 03:48:01.663610 2025] [:error] [pid 64836:tid 64890] [client 4.196.84.136:40524] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUG3cZiNb_9YvA0mnRBtfAAAAFc"]
[Wed Dec 17 03:48:02.118186 2025] [:error] [pid 50191:tid 50214] [client 4.196.84.136:62052] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUG3co2kH_QR7N4cGFe-dAAAAZU"]
[Wed Dec 17 03:48:02.670961 2025] [:error] [pid 64835:tid 64846] [client 4.196.84.136:31314] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUG3cu0_iNx32Sz58ML_RQAAAAc"]
[Wed Dec 17 03:48:03.199457 2025] [:error] [pid 64922:tid 64927] [client 4.196.84.136:9370] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aUG3cw70DhirJ6vYR3FPXgAAAMM"]
[Wed Dec 17 03:48:04.412953 2025] [:error] [pid 50191:tid 50194] [client 4.196.84.136:9397] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aUG3dI2kH_QR7N4cGFe-dQAAAYE"]
[Wed Dec 17 03:48:05.603924 2025] [:error] [pid 64922:tid 64946] [client 4.196.84.136:62073] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aUG3dQ70DhirJ6vYR3FPewAAANY"]
[Wed Dec 17 03:48:05.863605 2025] [:error] [pid 50191:tid 50200] [client 4.196.84.136:38095] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aUG3dY2kH_QR7N4cGFe-dgAAAYc"]
[Wed Dec 17 03:48:06.256364 2025] [:error] [pid 50191:tid 50206] [client 4.196.84.136:9845] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uana.php"] [unique_id "aUG3do2kH_QR7N4cGFe-dwAAAY0"]
[Wed Dec 17 03:48:06.937951 2025] [:error] [pid 50191:tid 50211] [client 4.196.84.136:32145] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uana.php"] [unique_id "aUG3do2kH_QR7N4cGFe-eQAAAZI"]
[Wed Dec 17 03:48:07.788404 2025] [:error] [pid 50191:tid 50193] [client 4.196.84.136:29524] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uana.php"] [unique_id "aUG3d42kH_QR7N4cGFe-egAAAYA"]
[Wed Dec 17 03:48:21.648883 2025] [:error] [pid 64922:tid 64944] [client 4.196.84.136:38396] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rss.php"] [unique_id "aUG3hQ70DhirJ6vYR3FP6QAAANQ"]
[Wed Dec 17 03:48:21.845003 2025] [:error] [pid 50154:tid 50157] [client 4.196.84.136:37337] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rss.php"] [unique_id "aUG3hdCGC5U2hJbUrB-I4wAAAUA"]
[Wed Dec 17 03:48:22.064714 2025] [:error] [pid 64837:tid 64918] [client 4.196.84.136:29533] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rss.php"] [unique_id "aUG3hroJEzr5Ydl6WcRrmAAAAJg"]
[Wed Dec 17 03:48:22.215608 2025] [:error] [pid 50154:tid 50181] [client 4.196.84.136:29686] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rss.php"] [unique_id "aUG3htCGC5U2hJbUrB-I5gAAAVg"]
[Wed Dec 17 03:48:22.390196 2025] [:error] [pid 7514:tid 7537] [client 4.196.84.136:9504] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pekok.php"] [unique_id "aUG3hkJ2oigi4i7K2nDfWQAAARU"]
[Wed Dec 17 03:48:22.600712 2025] [:error] [pid 50330:tid 50356] [client 4.196.84.136:29684] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pekok.php"] [unique_id "aUG3hqwD1ENQX3ZCdIAMHAAAAdg"]
[Wed Dec 17 03:48:22.768790 2025] [:error] [pid 64922:tid 64947] [client 4.196.84.136:29661] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pekok.php"] [unique_id "aUG3hg70DhirJ6vYR3FP6wAAANc"]
[Wed Dec 17 03:48:22.896592 2025] [:error] [pid 50154:tid 50160] [client 4.196.84.136:29545] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pekok.php"] [unique_id "aUG3htCGC5U2hJbUrB-I6AAAAUM"]
[Wed Dec 17 03:48:23.104605 2025] [:error] [pid 64835:tid 64847] [client 4.196.84.136:40518] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aUG3h-0_iNx32Sz58ML_XgAAAAg"]
[Wed Dec 17 03:48:23.398982 2025] [:error] [pid 50554:tid 50561] [client 4.196.84.136:32130] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aUG3hxOYdPI_HUXvpLQEggAAAoQ"]
[Wed Dec 17 03:48:23.806606 2025] [:error] [pid 50154:tid 50175] [client 4.196.84.136:33674] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aUG3h9CGC5U2hJbUrB-I6wAAAVI"]
[Wed Dec 17 03:48:24.195051 2025] [:error] [pid 50554:tid 50571] [client 4.196.84.136:38388] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aUG3iBOYdPI_HUXvpLQEgwAAAo4"]
[Wed Dec 17 03:48:24.667278 2025] [:error] [pid 64922:tid 64937] [client 4.196.84.136:9529] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aa.php"] [unique_id "aUG3iA70DhirJ6vYR3FP7QAAAM0"]
[Wed Dec 17 03:48:25.283111 2025] [:error] [pid 50191:tid 50206] [client 4.196.84.136:32188] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aa.php"] [unique_id "aUG3iY2kH_QR7N4cGFe-jQAAAY0"]
[Wed Dec 17 03:48:25.436341 2025] [:error] [pid 50330:tid 50344] [client 4.196.84.136:32916] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aa.php"] [unique_id "aUG3iawD1ENQX3ZCdIAMIAAAAcw"]
[Wed Dec 17 03:48:25.639630 2025] [:error] [pid 50191:tid 50211] [client 4.196.84.136:32433] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aa.php"] [unique_id "aUG3iY2kH_QR7N4cGFe-jgAAAZI"]
[Wed Dec 17 03:48:26.159266 2025] [:error] [pid 50330:tid 50352] [client 4.196.84.136:62044] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cart.php"] [unique_id "aUG3iqwD1ENQX3ZCdIAMIQAAAdQ"]
[Wed Dec 17 03:48:26.659904 2025] [:error] [pid 50330:tid 50350] [client 4.196.84.136:31318] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cart.php"] [unique_id "aUG3iqwD1ENQX3ZCdIAMIgAAAdI"]
[Wed Dec 17 03:48:27.117734 2025] [:error] [pid 50330:tid 50349] [client 4.196.84.136:9486] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cart.php"] [unique_id "aUG3i6wD1ENQX3ZCdIAMIwAAAdE"]
[Wed Dec 17 03:48:27.237227 2025] [:error] [pid 50330:tid 50338] [client 4.196.84.136:38390] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cart.php"] [unique_id "aUG3i6wD1ENQX3ZCdIAMJAAAAcY"]
[Wed Dec 17 03:48:27.415487 2025] [:error] [pid 64835:tid 64840] [client 4.196.84.136:62054] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/compare.php"] [unique_id "aUG3i-0_iNx32Sz58ML_YQAAAAE"]
[Wed Dec 17 03:48:27.705862 2025] [:error] [pid 50330:tid 50348] [client 4.196.84.136:32404] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/compare.php"] [unique_id "aUG3i6wD1ENQX3ZCdIAMKQAAAdA"]
[Wed Dec 17 03:48:28.278133 2025] [:error] [pid 64835:tid 64845] [client 4.196.84.136:9479] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/compare.php"] [unique_id "aUG3jO0_iNx32Sz58ML_YwAAAAY"]
[Wed Dec 17 03:48:28.808407 2025] [:error] [pid 64836:tid 64891] [client 4.196.84.136:31320] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/compare.php"] [unique_id "aUG3jJiNb_9YvA0mnRBtnAAAAFg"]
[Wed Dec 17 03:48:29.189757 2025] [:error] [pid 64835:tid 64849] [client 4.196.84.136:29667] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aUG3je0_iNx32Sz58ML_ZAAAAAo"]
[Wed Dec 17 03:48:29.729116 2025] [:error] [pid 50520:tid 50535] [client 4.196.84.136:9506] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aUG3jfArjiCapubpNFUibwAAAk0"]
[Wed Dec 17 03:48:30.276271 2025] [:error] [pid 64922:tid 64945] [client 4.196.84.136:29643] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aUG3jg70DhirJ6vYR3FP8AAAANU"]
[Wed Dec 17 03:48:30.469203 2025] [:error] [pid 50191:tid 50213] [client 4.196.84.136:36269] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aUG3jo2kH_QR7N4cGFe-lQAAAZQ"]
[Wed Dec 17 03:48:34.086530 2025] [:error] [pid 50330:tid 50338] [client 4.196.84.136:9514] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aUG3kqwD1ENQX3ZCdIAMMAAAAcY"]
[Wed Dec 17 03:48:34.187540 2025] [:error] [pid 64836:tid 64886] [client 4.196.84.136:62748] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aUG3kpiNb_9YvA0mnRBtngAAAFM"]
[Wed Dec 17 03:48:34.335022 2025] [:error] [pid 50191:tid 50193] [client 4.196.84.136:32401] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aUG3ko2kH_QR7N4cGFe-lwAAAYA"]
[Wed Dec 17 03:48:34.481725 2025] [:error] [pid 50554:tid 50567] [client 4.196.84.136:40571] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aUG3khOYdPI_HUXvpLQEjQAAAoo"]
[Wed Dec 17 03:48:34.713346 2025] [:error] [pid 50554:tid 50569] [client 4.196.84.136:32438] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUG3khOYdPI_HUXvpLQEjgAAAow"]
[Wed Dec 17 03:48:35.305114 2025] [:error] [pid 64922:tid 64925] [client 4.196.84.136:36266] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUG3kw70DhirJ6vYR3FP8QAAAME"]
[Wed Dec 17 03:48:37.056039 2025] [:error] [pid 50520:tid 50530] [client 4.196.84.136:9559] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUG3lfArjiCapubpNFUicgAAAkg"]
[Wed Dec 17 03:48:38.485491 2025] [:error] [pid 64922:tid 64939] [client 4.196.84.136:36250] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUG3lg70DhirJ6vYR3FP8wAAAM8"]
[Wed Dec 17 03:48:39.483644 2025] [:error] [pid 64835:tid 64851] [client 4.196.84.136:36241] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atom.php"] [unique_id "aUG3l-0_iNx32Sz58ML_agAAAAw"]
[Wed Dec 17 03:48:39.727687 2025] [:error] [pid 64922:tid 64937] [client 4.196.84.136:36314] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atom.php"] [unique_id "aUG3lw70DhirJ6vYR3FP9AAAAM0"]
[Wed Dec 17 03:48:39.964680 2025] [:error] [pid 50520:tid 50529] [client 4.196.84.136:31474] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atom.php"] [unique_id "aUG3l_ArjiCapubpNFUidAAAAkc"]
[Wed Dec 17 03:48:40.290411 2025] [:error] [pid 50191:tid 50214] [client 4.196.84.136:9494] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atom.php"] [unique_id "aUG3mI2kH_QR7N4cGFe-ngAAAZU"]
[Wed Dec 17 03:48:40.696137 2025] [:error] [pid 64835:tid 64860] [client 4.196.84.136:64455] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/case.php"] [unique_id "aUG3mO0_iNx32Sz58ML_bgAAABU"]
[Wed Dec 17 03:48:41.160640 2025] [:error] [pid 64922:tid 64933] [client 4.196.84.136:62780] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/case.php"] [unique_id "aUG3mQ70DhirJ6vYR3FP-AAAAMk"]
[Wed Dec 17 03:48:42.354816 2025] [:error] [pid 50554:tid 50559] [client 4.196.84.136:9593] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/case.php"] [unique_id "aUG3mhOYdPI_HUXvpLQEsAAAAoI"]
[Wed Dec 17 03:48:43.394673 2025] [:error] [pid 50191:tid 50216] [client 4.196.84.136:62760] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/case.php"] [unique_id "aUG3m42kH_QR7N4cGFe-ugAAAZc"]
[Wed Dec 17 03:48:43.644360 2025] [:error] [pid 50330:tid 50346] [client 4.196.84.136:9577] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/docs.php"] [unique_id "aUG3m6wD1ENQX3ZCdIAMMgAAAc4"]
[Wed Dec 17 03:48:44.100806 2025] [:error] [pid 50154:tid 50168] [client 4.196.84.136:38055] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/docs.php"] [unique_id "aUG3nNCGC5U2hJbUrB-I7wAAAUs"]
[Wed Dec 17 03:48:44.994725 2025] [:error] [pid 50554:tid 50558] [client 4.196.84.136:31456] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/docs.php"] [unique_id "aUG3nBOYdPI_HUXvpLQEvwAAAoE"]
[Wed Dec 17 03:48:45.800627 2025] [:error] [pid 64922:tid 64941] [client 4.196.84.136:64461] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/docs.php"] [unique_id "aUG3nQ70DhirJ6vYR3FP_AAAANE"]
[Wed Dec 17 03:48:46.345121 2025] [:error] [pid 64922:tid 64932] [client 4.196.84.136:31428] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ios.php"] [unique_id "aUG3ng70DhirJ6vYR3FP_QAAAMg"]
[Wed Dec 17 03:48:46.582538 2025] [:error] [pid 64922:tid 64928] [client 4.196.84.136:36251] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ios.php"] [unique_id "aUG3ng70DhirJ6vYR3FP_gAAAMQ"]
[Wed Dec 17 03:48:47.056021 2025] [:error] [pid 64922:tid 64936] [client 4.196.84.136:32147] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ios.php"] [unique_id "aUG3nw70DhirJ6vYR3FP_wAAAMw"]
[Wed Dec 17 03:48:47.492283 2025] [:error] [pid 64837:tid 64917] [client 4.196.84.136:62733] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ios.php"] [unique_id "aUG3n7oJEzr5Ydl6WcRrqAAAAJc"]
[Wed Dec 17 03:48:48.156459 2025] [:error] [pid 64922:tid 64947] [client 4.196.84.136:9570] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUG3oA70DhirJ6vYR3FQAQAAANc"]
[Wed Dec 17 03:48:48.478477 2025] [:error] [pid 50520:tid 50526] [client 4.196.84.136:40527] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUG3oPArjiCapubpNFUidwAAAkQ"]
[Wed Dec 17 03:48:48.783036 2025] [:error] [pid 64837:tid 64906] [client 4.196.84.136:64896] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUG3oLoJEzr5Ydl6WcRrqwAAAIw"]
[Wed Dec 17 03:48:49.051132 2025] [:error] [pid 64922:tid 64939] [client 4.196.84.136:33223] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUG3oQ70DhirJ6vYR3FQAgAAAM8"]
[Wed Dec 17 03:48:49.980175 2025] [:error] [pid 64835:tid 64858] [client 4.196.84.136:31426] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aUG3oe0_iNx32Sz58ML_pAAAABM"]
[Wed Dec 17 03:48:50.675079 2025] [:error] [pid 64922:tid 64940] [client 4.196.84.136:31903] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aUG3og70DhirJ6vYR3FQBgAAANA"]
[Wed Dec 17 03:48:51.613802 2025] [:error] [pid 64837:tid 64910] [client 4.196.84.136:31929] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aUG3o7oJEzr5Ydl6WcRrsAAAAJA"]
[Wed Dec 17 03:48:52.712500 2025] [:error] [pid 50520:tid 50545] [client 4.196.84.136:39417] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aUG3pPArjiCapubpNFUiegAAAlc"]
[Wed Dec 17 03:48:53.518064 2025] [:error] [pid 50520:tid 50535] [client 4.196.84.136:36602] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aUG3pfArjiCapubpNFUiewAAAk0"]
[Wed Dec 17 03:48:54.280498 2025] [:error] [pid 64836:tid 64886] [client 4.196.84.136:30836] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aUG3ppiNb_9YvA0mnRBt8wAAAFM"]
[Wed Dec 17 03:48:55.041710 2025] [:error] [pid 64835:tid 64851] [client 4.196.84.136:30787] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aUG3p-0_iNx32Sz58ML_pgAAAAw"]
[Wed Dec 17 03:48:56.201564 2025] [:error] [pid 50330:tid 50344] [client 4.196.84.136:63914] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aUG3qKwD1ENQX3ZCdIAMNgAAAcw"]
[Wed Dec 17 03:48:57.430607 2025] [:error] [pid 50330:tid 50355] [client 4.196.84.136:61961] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUG3qawD1ENQX3ZCdIAMOAAAAdc"]
[Wed Dec 17 03:48:58.610569 2025] [:error] [pid 50154:tid 50165] [client 4.196.84.136:32862] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUG3qtCGC5U2hJbUrB-JAwAAAUg"]
[Wed Dec 17 03:48:58.812431 2025] [:error] [pid 64922:tid 64935] [client 4.196.84.136:39351] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUG3qg70DhirJ6vYR3FQDwAAAMs"]
[Wed Dec 17 03:48:59.164872 2025] [:error] [pid 64837:tid 64894] [client 4.196.84.136:34016] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUG3q7oJEzr5Ydl6WcRruQAAAIA"]
[Wed Dec 17 03:48:59.559389 2025] [:error] [pid 64835:tid 64845] [client 4.196.84.136:36566] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aUG3q-0_iNx32Sz58ML_qwAAAAY"]
[Wed Dec 17 03:48:59.975400 2025] [:error] [pid 50154:tid 50172] [client 4.196.84.136:36772] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aUG3q9CGC5U2hJbUrB-JCAAAAU8"]
[Wed Dec 17 03:49:00.265216 2025] [:error] [pid 64837:tid 64908] [client 4.196.84.136:31021] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aUG3rLoJEzr5Ydl6WcRruwAAAI4"]
[Wed Dec 17 03:49:00.443284 2025] [:error] [pid 64922:tid 64941] [client 4.196.84.136:9770] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aUG3rA70DhirJ6vYR3FQEQAAANE"]
[Wed Dec 17 03:49:00.866007 2025] [:error] [pid 50154:tid 50157] [client 4.196.84.136:34041] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aUG3rNCGC5U2hJbUrB-JCwAAAUA"]
[Wed Dec 17 03:49:01.098951 2025] [:error] [pid 64837:tid 64898] [client 4.196.84.136:30988] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aUG3rboJEzr5Ydl6WcRrvAAAAIQ"]
[Wed Dec 17 03:49:01.576927 2025] [:error] [pid 64922:tid 64939] [client 4.196.84.136:39331] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aUG3rQ70DhirJ6vYR3FQFQAAAM8"]
[Wed Dec 17 03:49:01.901449 2025] [:error] [pid 64922:tid 64931] [client 4.196.84.136:63909] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aUG3rQ70DhirJ6vYR3FQFgAAAMc"]
[Wed Dec 17 03:49:02.261295 2025] [:error] [pid 64922:tid 64940] [client 4.196.84.136:36767] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aUG3rg70DhirJ6vYR3FQFwAAANA"]
[Wed Dec 17 03:49:02.742831 2025] [:error] [pid 7514:tid 7523] [client 4.196.84.136:63922] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aUG3rkJ2oigi4i7K2nDfegAAAQc"]
[Wed Dec 17 03:49:03.059840 2025] [:error] [pid 7514:tid 7528] [client 4.196.84.136:36761] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aUG3r0J2oigi4i7K2nDffQAAAQw"]
[Wed Dec 17 03:49:03.321690 2025] [:error] [pid 7514:tid 7521] [client 4.196.84.136:39350] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aUG3r0J2oigi4i7K2nDffwAAAQU"]
[Wed Dec 17 03:49:03.524985 2025] [:error] [pid 50154:tid 50167] [client 4.196.84.136:31036] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aUG3r9CGC5U2hJbUrB-JDQAAAUo"]
[Wed Dec 17 03:49:03.917471 2025] [:error] [pid 64837:tid 64903] [client 4.196.84.136:34024] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aUG3r7oJEzr5Ydl6WcRrvQAAAIk"]
[Wed Dec 17 03:49:04.292310 2025] [:error] [pid 50154:tid 50158] [client 4.196.84.136:63900] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aUG3sNCGC5U2hJbUrB-JDgAAAUE"]
[Wed Dec 17 03:49:04.633344 2025] [:error] [pid 64837:tid 64916] [client 4.196.84.136:38272] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aUG3sLoJEzr5Ydl6WcRrwAAAAJY"]
[Wed Dec 17 03:49:04.809603 2025] [:error] [pid 50154:tid 50175] [client 4.196.84.136:32834] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUG3sNCGC5U2hJbUrB-JDwAAAVI"]
[Wed Dec 17 03:49:05.108095 2025] [:error] [pid 64836:tid 64881] [client 4.196.84.136:36771] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUG3sZiNb_9YvA0mnRBt_AAAAE4"]
[Wed Dec 17 03:49:05.247373 2025] [:error] [pid 50191:tid 50208] [client 4.196.84.136:63883] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUG3sY2kH_QR7N4cGFe-yAAAAY8"]
[Wed Dec 17 03:49:05.924518 2025] [:error] [pid 7514:tid 7517] [client 4.196.84.136:29754] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUG3sUJ2oigi4i7K2nDfhgAAAQE"]
[Wed Dec 17 03:49:06.461146 2025] [:error] [pid 64837:tid 64902] [client 4.196.84.136:38319] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUG3sroJEzr5Ydl6WcRrwwAAAIg"]
[Wed Dec 17 03:49:06.995406 2025] [:error] [pid 64837:tid 64897] [client 4.196.84.136:31009] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUG3sroJEzr5Ydl6WcRrxQAAAIM"]
[Wed Dec 17 03:49:07.334231 2025] [:error] [pid 64922:tid 64927] [client 4.196.84.136:29949] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUG3sw70DhirJ6vYR3FQGwAAAMM"]
[Wed Dec 17 03:49:07.565067 2025] [:error] [pid 64837:tid 64915] [client 4.196.84.136:29757] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUG3s7oJEzr5Ydl6WcRrxwAAAJU"]
[Wed Dec 17 03:49:07.748786 2025] [:error] [pid 50554:tid 50561] [client 4.196.84.136:32869] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aUG3sxOYdPI_HUXvpLQEzAAAAoQ"]
[Wed Dec 17 03:49:08.422869 2025] [:error] [pid 50191:tid 50212] [client 4.196.84.136:31099] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aUG3tI2kH_QR7N4cGFe-zwAAAZM"]
[Wed Dec 17 03:49:08.906138 2025] [:error] [pid 50154:tid 50178] [client 4.196.84.136:31043] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aUG3tNCGC5U2hJbUrB-JEQAAAVU"]
[Wed Dec 17 03:49:09.475928 2025] [:error] [pid 64835:tid 64844] [client 4.196.84.136:30739] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aUG3te0_iNx32Sz58ML_rAAAAAU"]
[Wed Dec 17 03:49:09.846129 2025] [:error] [pid 64922:tid 64924] [client 4.196.84.136:29933] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUG3tQ70DhirJ6vYR3FQIQAAAMA"]
[Wed Dec 17 03:49:10.636871 2025] [:error] [pid 64835:tid 64861] [client 4.196.84.136:38297] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUG3tu0_iNx32Sz58ML_rwAAABY"]
[Wed Dec 17 03:49:11.085477 2025] [:error] [pid 50520:tid 50524] [client 4.196.84.136:31024] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUG3t_ArjiCapubpNFUigQAAAkI"]
[Wed Dec 17 03:49:11.389505 2025] [:error] [pid 50554:tid 50574] [client 4.196.84.136:30756] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUG3txOYdPI_HUXvpLQE1wAAApE"]
[Wed Dec 17 03:49:11.518755 2025] [:error] [pid 50191:tid 50199] [client 4.196.84.136:34994] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "aUG3t42kH_QR7N4cGFe-1QAAAYY"]
[Wed Dec 17 03:49:11.799981 2025] [:error] [pid 50554:tid 50567] [client 4.196.84.136:30770] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "aUG3txOYdPI_HUXvpLQE2QAAAoo"]
[Wed Dec 17 03:49:12.167713 2025] [:error] [pid 50191:tid 50205] [client 4.196.84.136:32924] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "aUG3uI2kH_QR7N4cGFe-1wAAAYw"]
[Wed Dec 17 03:49:13.189729 2025] [:error] [pid 64922:tid 64946] [client 4.196.84.136:29902] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "aUG3uQ70DhirJ6vYR3FQQQAAANY"]
[Wed Dec 17 03:49:13.836004 2025] [:error] [pid 64837:tid 64905] [client 4.196.84.136:29945] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aUG3uboJEzr5Ydl6WcRrywAAAIs"]
[Wed Dec 17 03:49:14.355282 2025] [:error] [pid 50191:tid 50197] [client 4.196.84.136:10135] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aUG3uo2kH_QR7N4cGFe-2gAAAYQ"]
[Wed Dec 17 03:49:14.784296 2025] [:error] [pid 64922:tid 64948] [client 4.196.84.136:31050] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aUG3ug70DhirJ6vYR3FQSgAAANg"]
[Wed Dec 17 03:49:16.045618 2025] [:error] [pid 50191:tid 50202] [client 4.196.84.136:37878] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aUG3vI2kH_QR7N4cGFe-3QAAAYk"]
[Wed Dec 17 03:49:17.140927 2025] [:error] [pid 50191:tid 50216] [client 4.196.84.136:34988] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aUG3vY2kH_QR7N4cGFe-4wAAAZc"]
[Wed Dec 17 03:49:17.553504 2025] [:error] [pid 50554:tid 50574] [client 4.196.84.136:37828] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aUG3vROYdPI_HUXvpLQE6gAAApE"]
[Wed Dec 17 03:49:18.661630 2025] [:error] [pid 50191:tid 50210] [client 4.196.84.136:30744] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aUG3vo2kH_QR7N4cGFe-6AAAAZE"]
[Wed Dec 17 03:49:19.218093 2025] [:error] [pid 64837:tid 64907] [client 4.196.84.136:62364] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aUG3v7oJEzr5Ydl6WcRrzgAAAI0"]
[Wed Dec 17 03:49:19.423975 2025] [:error] [pid 50520:tid 50545] [client 4.196.84.136:34973] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aUG3v_ArjiCapubpNFUihQAAAlc"]
[Wed Dec 17 03:49:19.672230 2025] [:error] [pid 50520:tid 50528] [client 4.196.84.136:34977] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aUG3v_ArjiCapubpNFUihwAAAkY"]
[Wed Dec 17 03:49:19.832424 2025] [:error] [pid 64837:tid 64902] [client 4.196.84.136:10168] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aUG3v7oJEzr5Ydl6WcRr0AAAAIg"]
[Wed Dec 17 03:49:35.993489 2025] [:error] [pid 50520:tid 50525] [client 4.196.84.136:32611] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aUG3z_ArjiCapubpNFUiogAAAkM"]
[Wed Dec 17 03:49:36.178425 2025] [:error] [pid 64922:tid 64936] [client 4.196.84.136:31252] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aUG30A70DhirJ6vYR3FQVAAAAMw"]
[Wed Dec 17 03:49:36.859485 2025] [:error] [pid 7514:tid 7534] [client 4.196.84.136:35000] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aUG30EJ2oigi4i7K2nDflAAAARI"]
[Wed Dec 17 03:49:37.030886 2025] [:error] [pid 50330:tid 50340] [client 4.196.84.136:38798] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aUG30awD1ENQX3ZCdIAMRAAAAcg"]
[Wed Dec 17 03:49:37.429025 2025] [:error] [pid 50520:tid 50544] [client 4.196.84.136:33526] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUG30fArjiCapubpNFUipAAAAlY"]
[Wed Dec 17 03:49:37.582347 2025] [:error] [pid 50191:tid 50211] [client 4.196.84.136:34966] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUG30Y2kH_QR7N4cGFe_AgAAAZI"]
[Wed Dec 17 03:49:37.768286 2025] [:error] [pid 50191:tid 50197] [client 4.196.84.136:10141] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUG30Y2kH_QR7N4cGFe_AwAAAYQ"]
[Wed Dec 17 03:49:38.524374 2025] [:error] [pid 50154:tid 50169] [client 4.196.84.136:30762] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUG30tCGC5U2hJbUrB-JHQAAAUw"]
[Wed Dec 17 03:49:38.839714 2025] [:error] [pid 50154:tid 50179] [client 4.196.84.136:39308] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aUG30tCGC5U2hJbUrB-JHgAAAVY"]
[Wed Dec 17 03:49:39.214969 2025] [:error] [pid 64836:tid 64886] [client 4.196.84.136:30344] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aUG305iNb_9YvA0mnRBuFQAAAFM"]
[Wed Dec 17 03:49:39.698306 2025] [:error] [pid 64836:tid 64884] [client 4.196.84.136:41624] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aUG305iNb_9YvA0mnRBuFwAAAFE"]
[Wed Dec 17 03:49:40.055120 2025] [:error] [pid 50520:tid 50534] [client 4.196.84.136:38800] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aUG31PArjiCapubpNFUipQAAAkw"]
[Wed Dec 17 03:49:40.368790 2025] [:error] [pid 50554:tid 50559] [client 4.196.84.136:33530] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "aUG31BOYdPI_HUXvpLQE8gAAAoI"]
[Wed Dec 17 03:49:40.775109 2025] [:error] [pid 50554:tid 50574] [client 4.196.84.136:38799] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "aUG31BOYdPI_HUXvpLQE9AAAApE"]
[Wed Dec 17 03:49:41.448776 2025] [:error] [pid 50520:tid 50539] [client 4.196.84.136:10137] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "aUG31fArjiCapubpNFUipwAAAlE"]
[Wed Dec 17 03:49:41.657899 2025] [:error] [pid 50520:tid 50530] [client 4.196.84.136:32343] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "aUG31fArjiCapubpNFUiqAAAAkg"]
[Wed Dec 17 03:49:42.190594 2025] [:error] [pid 50154:tid 50159] [client 4.196.84.136:30381] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxl.php"] [unique_id "aUG31tCGC5U2hJbUrB-JIQAAAUI"]
[Wed Dec 17 03:49:42.843421 2025] [:error] [pid 50520:tid 50523] [client 4.196.84.136:38847] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxl.php"] [unique_id "aUG31vArjiCapubpNFUiqgAAAkE"]
[Wed Dec 17 03:49:58.327099 2025] [:error] [pid 57528:tid 57533] [client 4.196.84.136:37631] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aUG35i2XpGeU530GCe3rAwAAAAE"]
[Wed Dec 17 03:49:58.802665 2025] [:error] [pid 57528:tid 57548] [client 4.196.84.136:31251] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aUG35i2XpGeU530GCe3rDQAAABA"]
[Wed Dec 17 03:49:59.964624 2025] [:error] [pid 57530:tid 57589] [client 4.196.84.136:10118] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aUG357kSxQjXmlg_it8N6wAAAIM"]
[Wed Dec 17 03:50:00.849021 2025] [:error] [pid 57529:tid 57564] [client 4.196.84.136:32380] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aUG36L4BzBJiM0azbYraoQAAAEU"]
[Wed Dec 17 03:50:01.606082 2025] [:error] [pid 57530:tid 57593] [client 4.196.84.136:30356] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/123.php"] [unique_id "aUG36bkSxQjXmlg_it8N7wAAAIc"]
[Wed Dec 17 03:50:02.514234 2025] [:error] [pid 57528:tid 57550] [client 4.196.84.136:62351] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/123.php"] [unique_id "aUG36i2XpGeU530GCe3rIQAAABI"]
[Wed Dec 17 03:50:02.778045 2025] [:error] [pid 57529:tid 57570] [client 4.196.84.136:33496] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/123.php"] [unique_id "aUG36r4BzBJiM0azbYrapAAAAEs"]
[Wed Dec 17 03:50:02.961260 2025] [:error] [pid 57530:tid 57599] [client 4.196.84.136:31291] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/123.php"] [unique_id "aUG36rkSxQjXmlg_it8N8QAAAI0"]
[Wed Dec 17 03:50:03.363322 2025] [:error] [pid 57530:tid 57601] [client 4.196.84.136:35737] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/321.php"] [unique_id "aUG367kSxQjXmlg_it8N8wAAAI8"]
[Wed Dec 17 03:50:03.539426 2025] [:error] [pid 57528:tid 57534] [client 4.196.84.136:32348] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/321.php"] [unique_id "aUG36y2XpGeU530GCe3rJAAAAAI"]
[Wed Dec 17 03:50:03.902290 2025] [:error] [pid 57530:tid 57604] [client 4.196.84.136:38813] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/321.php"] [unique_id "aUG367kSxQjXmlg_it8N9gAAAJI"]
[Wed Dec 17 03:50:04.471243 2025] [:error] [pid 57616:tid 57624] [client 4.196.84.136:31279] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/321.php"] [unique_id "aUG37Ar3hfzZr6s6MtQMegAAAMQ"]
[Wed Dec 17 03:50:04.677866 2025] [:error] [pid 57616:tid 57625] [client 4.196.84.136:62349] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUG37Ar3hfzZr6s6MtQMewAAAMU"]
[Wed Dec 17 03:50:04.926941 2025] [:error] [pid 57529:tid 57576] [client 4.196.84.136:10132] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUG37L4BzBJiM0azbYraqgAAAFE"]
[Wed Dec 17 03:50:05.055874 2025] [:error] [pid 57530:tid 57607] [client 4.196.84.136:32373] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUG37bkSxQjXmlg_it8N-QAAAJU"]
[Wed Dec 17 03:50:05.156812 2025] [:error] [pid 57616:tid 57626] [client 4.196.84.136:32326] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUG37Qr3hfzZr6s6MtQMfQAAAMY"]
[Wed Dec 17 03:50:05.278266 2025] [:error] [pid 57616:tid 57627] [client 4.196.84.136:35738] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUG37Qr3hfzZr6s6MtQMfgAAAMc"]
[Wed Dec 17 03:50:05.670183 2025] [:error] [pid 57530:tid 57591] [client 4.196.84.136:32027] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUG37bkSxQjXmlg_it8N-wAAAIU"]
[Wed Dec 17 03:50:06.041364 2025] [:error] [pid 57530:tid 57586] [client 4.196.84.136:33495] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUG37rkSxQjXmlg_it8N_QAAAIA"]
[Wed Dec 17 03:50:06.623200 2025] [:error] [pid 57529:tid 57583] [client 4.196.84.136:31249] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUG37r4BzBJiM0azbYrarAAAAFg"]
[Wed Dec 17 03:50:07.234348 2025] [:error] [pid 57530:tid 57596] [client 4.196.84.136:63494] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aUG377kSxQjXmlg_it8OAQAAAIo"]
[Wed Dec 17 03:50:07.535011 2025] [:error] [pid 57530:tid 57588] [client 4.196.84.136:62362] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aUG377kSxQjXmlg_it8OAwAAAII"]
[Wed Dec 17 03:50:07.632142 2025] [:error] [pid 57530:tid 57590] [client 4.196.84.136:9626] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aUG377kSxQjXmlg_it8OBAAAAIQ"]
[Wed Dec 17 03:50:07.750065 2025] [:error] [pid 57528:tid 57532] [client 4.196.84.136:34962] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aUG37y2XpGeU530GCe3rKgAAAAA"]
[Wed Dec 17 03:50:07.812387 2025] [:error] [pid 57528:tid 57540] [client 4.196.84.136:30342] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUG37y2XpGeU530GCe3rKwAAAAg"]
[Wed Dec 17 03:50:07.989585 2025] [:error] [pid 57530:tid 57599] [client 4.196.84.136:9654] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUG377kSxQjXmlg_it8OBQAAAI0"]
[Wed Dec 17 03:50:08.568133 2025] [:error] [pid 57528:tid 57541] [client 4.196.84.136:38806] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUG38C2XpGeU530GCe3rLgAAAAk"]
[Wed Dec 17 03:50:08.931263 2025] [:error] [pid 57530:tid 57604] [client 4.196.84.136:9621] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUG38LkSxQjXmlg_it8OCAAAAJI"]
[Wed Dec 17 03:50:09.095041 2025] [:error] [pid 57528:tid 57549] [client 4.196.84.136:30346] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aUG38S2XpGeU530GCe3rMQAAABE"]
[Wed Dec 17 03:50:09.529708 2025] [:error] [pid 57529:tid 57572] [client 4.196.84.136:62399] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aUG38b4BzBJiM0azbYrarwAAAE0"]
[Wed Dec 17 03:50:10.131068 2025] [:error] [pid 57528:tid 57543] [client 4.196.84.136:32338] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aUG38i2XpGeU530GCe3rMwAAAAs"]
[Wed Dec 17 03:50:12.892190 2025] [:error] [pid 57830:tid 57835] [client 4.196.84.136:35750] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aUG39K5l8QtperpFhOgI9AAAAMM"]
[Wed Dec 17 03:50:13.195524 2025] [:error] [pid 57830:tid 57845] [client 4.196.84.136:34954] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aUG39a5l8QtperpFhOgI9gAAAM0"]
[Wed Dec 17 03:50:13.756056 2025] [:error] [pid 57830:tid 57846] [client 4.196.84.136:31293] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aUG39a5l8QtperpFhOgI_wAAAM4"]
[Wed Dec 17 03:50:14.436277 2025] [:error] [pid 57861:tid 57867] [client 4.196.84.136:61684] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aUG39hC0FYiNaGT6lgb1_AAAAQI"]
[Wed Dec 17 03:50:15.135810 2025] [:error] [pid 57861:tid 57868] [client 4.196.84.136:36010] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aUG39xC0FYiNaGT6lgb1_gAAAQM"]
[Wed Dec 17 03:50:15.588000 2025] [:error] [pid 57830:tid 57856] [client 4.196.84.136:35975] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "aUG3965l8QtperpFhOgJCAAAANg"]
[Wed Dec 17 03:50:16.022986 2025] [:error] [pid 57861:tid 57866] [client 4.196.84.136:32004] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "aUG3-BC0FYiNaGT6lgb2AAAAAQE"]
[Wed Dec 17 03:50:16.254741 2025] [:error] [pid 57926:tid 57931] [client 4.196.84.136:62348] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "aUG3-AGbx8kdq5bWBaoQRwAAAYI"]
[Wed Dec 17 03:50:16.664463 2025] [:error] [pid 57926:tid 57934] [client 4.196.84.136:63547] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "aUG3-AGbx8kdq5bWBaoQSAAAAYU"]
[Wed Dec 17 03:50:17.428593 2025] [:error] [pid 57830:tid 57835] [client 4.196.84.136:33509] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aUG3-a5l8QtperpFhOgJCgAAAMM"]
[Wed Dec 17 03:50:18.076776 2025] [:error] [pid 57926:tid 57936] [client 4.196.84.136:63550] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aUG3-gGbx8kdq5bWBaoQSwAAAYc"]
[Wed Dec 17 03:50:18.451610 2025] [:error] [pid 57830:tid 57836] [client 4.196.84.136:33682] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aUG3-q5l8QtperpFhOgJDQAAAMQ"]
[Wed Dec 17 03:50:18.600074 2025] [:error] [pid 57861:tid 57870] [client 4.196.84.136:35722] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aUG3-hC0FYiNaGT6lgb2AQAAAQU"]
[Wed Dec 17 03:50:18.799999 2025] [:error] [pid 57926:tid 57939] [client 4.196.84.136:33474] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aUG3-gGbx8kdq5bWBaoQTgAAAYo"]
[Wed Dec 17 03:50:18.973107 2025] [:error] [pid 57861:tid 57872] [client 4.196.84.136:32008] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aUG3-hC0FYiNaGT6lgb2AgAAAQc"]
[Wed Dec 17 03:50:19.488244 2025] [:error] [pid 57926:tid 57944] [client 4.196.84.136:34728] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aUG3-wGbx8kdq5bWBaoQUQAAAY8"]
[Wed Dec 17 03:50:19.996933 2025] [:error] [pid 57862:tid 57904] [client 4.196.84.136:9686] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aUG3-9O5hQuJdyzJ2ZwwXAAAAUk"]
[Wed Dec 17 03:50:20.385129 2025] [:error] [pid 57926:tid 57949] [client 4.196.84.136:9698] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aUG3_AGbx8kdq5bWBaoQWAAAAZQ"]
[Wed Dec 17 03:50:22.966783 2025] [:error] [pid 58032:tid 58034] [client 4.196.84.136:38790] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aUG3_rFaDD-QaSOov_KhfwAAAMA"]
[Wed Dec 17 03:50:23.510979 2025] [:error] [pid 58032:tid 58051] [client 4.196.84.136:62338] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aUG3_7FaDD-QaSOov_KhhgAAANE"]
[Wed Dec 17 03:50:24.105090 2025] [:error] [pid 58032:tid 58053] [client 4.196.84.136:30717] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aUG4ALFaDD-QaSOov_KhjQAAANM"]
[Wed Dec 17 03:50:24.317056 2025] [:error] [pid 58124:tid 58127] [client 4.196.84.136:35742] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo.php"] [unique_id "aUG4ACfIpCNkLuFyCn-a7QAAAQE"]
[Wed Dec 17 03:50:33.908921 2025] [:error] [pid 58306:tid 58373] [client 4.196.84.136:40449] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rk2.php"] [unique_id "aUG4CZZEyMqJgj-9HGf39gAAAAI"]
[Wed Dec 17 03:50:48.064516 2025] [:error] [pid 58306:tid 58386] [client 4.196.84.136:9246] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aUG4GJZEyMqJgj-9HGf4LAAAAA8"]
[Wed Dec 17 03:50:48.972513 2025] [:error] [pid 58470:tid 58487] [client 4.196.84.136:39044] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aUG4GGYv1aUfG4g4SqJA3gAAAM8"]
[Wed Dec 17 03:50:49.446444 2025] [:error] [pid 58470:tid 58494] [client 4.196.84.136:35044] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aUG4GWYv1aUfG4g4SqJA4AAAANY"]
[Wed Dec 17 03:50:50.785583 2025] [:error] [pid 58315:tid 58404] [client 4.196.84.136:30004] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aUG4GlP4xSE7_8Axyn0OngAAAEY"]
[Wed Dec 17 03:50:51.364168 2025] [:error] [pid 58316:tid 58430] [client 4.196.84.136:31623] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aUG4G6CLvZcOdxvy5Q1fngAAAIU"]
[Wed Dec 17 03:50:51.717315 2025] [:error] [pid 58315:tid 58409] [client 4.196.84.136:41586] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aUG4G1P4xSE7_8Axyn0OnwAAAEs"]
[Wed Dec 17 03:50:51.997350 2025] [:error] [pid 58316:tid 58433] [client 4.196.84.136:9627] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aUG4G6CLvZcOdxvy5Q1foAAAAIg"]
[Wed Dec 17 03:50:52.199746 2025] [:error] [pid 58315:tid 58422] [client 4.196.84.136:10052] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aUG4HFP4xSE7_8Axyn0OowAAAFg"]
[Wed Dec 17 03:50:52.376517 2025] [:error] [pid 58306:tid 58375] [client 4.196.84.136:32229] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aUG4HJZEyMqJgj-9HGf4LwAAAAQ"]
[Wed Dec 17 03:50:52.515022 2025] [:error] [pid 58315:tid 58401] [client 4.196.84.136:34724] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aUG4HFP4xSE7_8Axyn0OpgAAAEM"]
[Wed Dec 17 03:50:53.260794 2025] [:error] [pid 58316:tid 58441] [client 4.196.84.136:31211] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aUG4HaCLvZcOdxvy5Q1fpQAAAJA"]
[Wed Dec 17 03:50:54.144301 2025] [:error] [pid 58315:tid 58400] [client 4.196.84.136:31624] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aUG4HlP4xSE7_8Axyn0OqQAAAEI"]
[Wed Dec 17 03:50:54.775589 2025] [:error] [pid 58470:tid 58490] [client 4.196.84.136:34748] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aUG4HmYv1aUfG4g4SqJA5gAAANI"]
[Wed Dec 17 03:50:55.318047 2025] [:error] [pid 58470:tid 58495] [client 4.196.84.136:34774] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aUG4H2Yv1aUfG4g4SqJA5wAAANc"]
[Wed Dec 17 03:50:55.452351 2025] [:error] [pid 58315:tid 58403] [client 4.196.84.136:38866] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aUG4H1P4xSE7_8Axyn0OqwAAAEU"]
[Wed Dec 17 03:50:55.554769 2025] [:error] [pid 58470:tid 58492] [client 4.196.84.136:37000] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aUG4H2Yv1aUfG4g4SqJA6AAAANQ"]
[Wed Dec 17 03:50:55.761692 2025] [:error] [pid 58470:tid 58493] [client 4.196.84.136:31720] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aUG4H2Yv1aUfG4g4SqJA6QAAANU"]
[Wed Dec 17 03:50:56.061841 2025] [:error] [pid 58470:tid 58474] [client 4.196.84.136:37047] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aUG4IGYv1aUfG4g4SqJA6gAAAMI"]
[Wed Dec 17 03:50:56.244800 2025] [:error] [pid 58470:tid 58483] [client 4.196.84.136:31645] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aUG4IGYv1aUfG4g4SqJA6wAAAMs"]
[Wed Dec 17 03:50:56.508180 2025] [:error] [pid 58470:tid 58481] [client 4.196.84.136:31180] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aUG4IGYv1aUfG4g4SqJA7AAAAMk"]
[Wed Dec 17 03:50:57.930444 2025] [:error] [pid 58470:tid 58491] [client 4.196.84.136:37016] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aUG4IWYv1aUfG4g4SqJA8QAAANM"]
[Wed Dec 17 03:50:58.815558 2025] [:error] [pid 58306:tid 58374] [client 4.196.84.136:32231] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aUG4IpZEyMqJgj-9HGf4MwAAAAM"]
[Wed Dec 17 03:50:58.946748 2025] [:error] [pid 58306:tid 58373] [client 4.196.84.136:33922] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aUG4IpZEyMqJgj-9HGf4NQAAAAI"]
[Wed Dec 17 03:50:59.062096 2025] [:error] [pid 58315:tid 58421] [client 4.196.84.136:37015] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aUG4I1P4xSE7_8Axyn0OrwAAAFc"]
[Wed Dec 17 03:50:59.422466 2025] [:error] [pid 58316:tid 58436] [client 4.196.84.136:31723] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpc.php"] [unique_id "aUG4I6CLvZcOdxvy5Q1fvQAAAIs"]
[Wed Dec 17 03:51:00.273496 2025] [:error] [pid 58306:tid 58378] [client 4.196.84.136:31740] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpc.php"] [unique_id "aUG4JJZEyMqJgj-9HGf4OAAAAAc"]
[Wed Dec 17 03:51:00.815352 2025] [:error] [pid 58315:tid 58411] [client 4.196.84.136:31792] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpc.php"] [unique_id "aUG4JFP4xSE7_8Axyn0OtAAAAE0"]
[Wed Dec 17 03:51:01.240035 2025] [:error] [pid 58315:tid 58402] [client 4.196.84.136:37372] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpc.php"] [unique_id "aUG4JVP4xSE7_8Axyn0OtQAAAEQ"]
[Wed Dec 17 03:51:01.474280 2025] [:error] [pid 58306:tid 58394] [client 4.196.84.136:32242] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aUG4JZZEyMqJgj-9HGf4PQAAABc"]
[Wed Dec 17 03:51:01.796158 2025] [:error] [pid 58306:tid 58375] [client 4.196.84.136:31774] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aUG4JZZEyMqJgj-9HGf4PwAAAAQ"]
[Wed Dec 17 03:51:02.172177 2025] [:error] [pid 58306:tid 58377] [client 4.196.84.136:30122] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aUG4JpZEyMqJgj-9HGf4QAAAAAY"]
[Wed Dec 17 03:51:02.938295 2025] [:error] [pid 58470:tid 58483] [client 4.196.84.136:32220] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aUG4JmYv1aUfG4g4SqJA-gAAAMs"]
[Wed Dec 17 03:51:03.254356 2025] [:error] [pid 58315:tid 58419] [client 4.196.84.136:32236] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mlex.php"] [unique_id "aUG4J1P4xSE7_8Axyn0OuAAAAFU"]
[Wed Dec 17 03:51:03.807753 2025] [:error] [pid 58316:tid 58431] [client 4.196.84.136:37046] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mlex.php"] [unique_id "aUG4J6CLvZcOdxvy5Q1fyQAAAIY"]
[Wed Dec 17 03:51:04.431104 2025] [:error] [pid 58470:tid 58479] [client 4.196.84.136:34253] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mlex.php"] [unique_id "aUG4KGYv1aUfG4g4SqJBAQAAAMc"]
[Wed Dec 17 03:51:05.308390 2025] [:error] [pid 58470:tid 58475] [client 4.196.84.136:37039] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mlex.php"] [unique_id "aUG4KWYv1aUfG4g4SqJBBgAAAMM"]
[Wed Dec 17 03:51:05.589402 2025] [:error] [pid 58470:tid 58474] [client 4.196.84.136:31739] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aUG4KWYv1aUfG4g4SqJBCAAAAMI"]
[Wed Dec 17 03:51:06.162236 2025] [:error] [pid 58315:tid 58422] [client 4.196.84.136:30108] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aUG4KlP4xSE7_8Axyn0OuwAAAFg"]
[Wed Dec 17 03:51:07.014188 2025] [:error] [pid 58306:tid 58381] [client 4.196.84.136:10078] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aUG4K5ZEyMqJgj-9HGf4SQAAAAo"]
[Wed Dec 17 03:51:07.398775 2025] [:error] [pid 58470:tid 58485] [client 4.196.84.136:31671] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aUG4K2Yv1aUfG4g4SqJBDAAAAM0"]
[Wed Dec 17 03:51:07.880245 2025] [:error] [pid 58316:tid 58436] [client 4.196.84.136:10095] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aUG4K6CLvZcOdxvy5Q1f0QAAAIs"]
[Wed Dec 17 03:51:08.755706 2025] [:error] [pid 58306:tid 58394] [client 4.196.84.136:31183] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aUG4LJZEyMqJgj-9HGf4TgAAABc"]
[Wed Dec 17 03:51:09.639213 2025] [:error] [pid 58316:tid 58437] [client 4.196.84.136:31616] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aUG4LaCLvZcOdxvy5Q1f1QAAAIw"]
[Wed Dec 17 03:51:10.086442 2025] [:error] [pid 58470:tid 58495] [client 4.196.84.136:38858] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aUG4LmYv1aUfG4g4SqJBEQAAANc"]
[Wed Dec 17 03:51:10.169691 2025] [:error] [pid 58316:tid 58448] [client 4.196.84.136:31744] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mpvloi.php"] [unique_id "aUG4LqCLvZcOdxvy5Q1f2AAAAJc"]
[Wed Dec 17 03:51:10.276276 2025] [:error] [pid 58316:tid 58432] [client 4.196.84.136:36071] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mpvloi.php"] [unique_id "aUG4LqCLvZcOdxvy5Q1f2QAAAIc"]
[Wed Dec 17 03:51:10.465987 2025] [:error] [pid 58470:tid 58480] [client 4.196.84.136:30081] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mpvloi.php"] [unique_id "aUG4LmYv1aUfG4g4SqJBEgAAAMg"]
[Wed Dec 17 03:51:10.575428 2025] [:error] [pid 58316:tid 58439] [client 4.196.84.136:31199] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mpvloi.php"] [unique_id "aUG4LqCLvZcOdxvy5Q1f2wAAAI4"]
[Wed Dec 17 03:51:10.688886 2025] [:error] [pid 58316:tid 58429] [client 4.196.84.136:37025] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v1.php"] [unique_id "aUG4LqCLvZcOdxvy5Q1f3AAAAIQ"]
[Wed Dec 17 03:51:10.836035 2025] [:error] [pid 58316:tid 58444] [client 4.196.84.136:31194] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v1.php"] [unique_id "aUG4LqCLvZcOdxvy5Q1f3QAAAJM"]
[Wed Dec 17 03:51:11.203710 2025] [:error] [pid 58470:tid 58473] [client 4.196.84.136:30095] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v1.php"] [unique_id "aUG4L2Yv1aUfG4g4SqJBFAAAAME"]
[Wed Dec 17 03:51:11.686028 2025] [:error] [pid 58306:tid 58384] [client 4.196.84.136:37055] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v1.php"] [unique_id "aUG4L5ZEyMqJgj-9HGf4UAAAAA0"]
[Wed Dec 17 03:51:12.439682 2025] [:error] [pid 58315:tid 58417] [client 4.196.84.136:31942] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "aUG4MFP4xSE7_8Axyn0OxgAAAFM"]
[Wed Dec 17 03:51:12.971120 2025] [:error] [pid 58316:tid 58435] [client 4.196.84.136:32119] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "aUG4MKCLvZcOdxvy5Q1f5QAAAIo"]
[Wed Dec 17 03:51:13.255569 2025] [:error] [pid 58315:tid 58422] [client 4.196.84.136:35973] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "aUG4MVP4xSE7_8Axyn0OxwAAAFg"]
[Wed Dec 17 03:51:13.381271 2025] [:error] [pid 58315:tid 58399] [client 4.196.84.136:37042] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "aUG4MVP4xSE7_8Axyn0OyAAAAEE"]
[Wed Dec 17 03:51:13.558021 2025] [:error] [pid 58470:tid 58472] [client 4.196.84.136:38575] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dex.php"] [unique_id "aUG4MWYv1aUfG4g4SqJBHQAAAMA"]
[Wed Dec 17 03:51:14.207505 2025] [:error] [pid 58316:tid 58433] [client 4.196.84.136:38528] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dex.php"] [unique_id "aUG4MqCLvZcOdxvy5Q1f6AAAAIg"]
[Wed Dec 17 03:51:15.179004 2025] [:error] [pid 58470:tid 58476] [client 4.196.84.136:38551] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dex.php"] [unique_id "aUG4M2Yv1aUfG4g4SqJBIQAAAMQ"]
[Wed Dec 17 03:51:16.124557 2025] [:error] [pid 58315:tid 58408] [client 4.196.84.136:38545] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dex.php"] [unique_id "aUG4NFP4xSE7_8Axyn0O1QAAAEo"]
[Wed Dec 17 03:51:16.579299 2025] [:error] [pid 58470:tid 58479] [client 4.196.84.136:32065] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/angelV2.php"] [unique_id "aUG4NGYv1aUfG4g4SqJBJAAAAMc"]
[Wed Dec 17 03:51:17.373433 2025] [:error] [pid 58306:tid 58376] [client 4.196.84.136:30134] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/angelV2.php"] [unique_id "aUG4NZZEyMqJgj-9HGf4UwAAAAU"]
[Wed Dec 17 03:51:17.713429 2025] [:error] [pid 58316:tid 58432] [client 4.196.84.136:36066] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/angelV2.php"] [unique_id "aUG4NaCLvZcOdxvy5Q1f9gAAAIc"]
[Wed Dec 17 03:51:18.174930 2025] [:error] [pid 58315:tid 58404] [client 4.196.84.136:36060] [client 4.196.84.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/angelV2.php"] [unique_id "aUG4NlP4xSE7_8Axyn0O2gAAAEY"]
[Wed Dec 17 07:49:07.979178 2025] [:error] [pid 13216:tid 13256] [client 197.31.20.194:50720] [client 197.31.20.194] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUHv89kjYVDtADMjze5NfwAAAEk"]
[Wed Dec 17 07:49:55.498080 2025] [:error] [pid 13216:tid 13262] [client 197.31.20.194:53611] [client 197.31.20.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.31.20.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUHwI9kjYVDtADMjze5NsgAAAE8"]
[Wed Dec 17 07:50:47.649545 2025] [:error] [pid 7715:tid 7730] [client 197.31.20.194:53760] [client 197.31.20.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.31.20.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUHwV5AcSlSgZepNKb_c4wAAAQ0"]
[Wed Dec 17 08:02:48.620632 2025] [:error] [pid 13215:tid 13227] [client 121.229.185.160:52313] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUHzKHpS_Sk4Oyp_UPF6ZgAAAAc"]
[Wed Dec 17 08:20:48.401126 2025] [:error] [pid 13215:tid 13224] [client 170.106.167.214:33168] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUH3YHpS_Sk4Oyp_UPGAFgAAAAQ"]
[Wed Dec 17 23:19:15.454495 2025] [:error] [pid 45530:tid 45540] [client 104.234.19.45:27637] [client 104.234.19.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "aULJ824IsXcKlf7LWf9LVwAAAAU"]
[Wed Dec 17 23:19:15.931074 2025] [:error] [pid 16788:tid 16791] [client 193.36.224.72:25725] [client 193.36.224.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "aULJ8yEJyT-03u9UZWPY_gAAAkE"]
[Wed Dec 17 23:19:16.405520 2025] [:error] [pid 45531:tid 45566] [client 193.36.224.58:40089] [client 193.36.224.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "aULJ9IjuE-Fd-sBWjvWnhwAAAEM"]
[Thu Dec 18 00:30:55.008887 2025] [:error] [pid 63337:tid 63352] [client 43.130.14.245:34354] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aULav9Sc2ofHSwVzjx-PtgAAAQ0"]
[Thu Dec 18 00:49:14.756466 2025] [:error] [pid 43495:tid 43564] [client 52.169.163.135:9546] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaestebuch.php"] [unique_id "aULfCpPwJsDLQYFUP-Y-bgAAAMo"]
[Thu Dec 18 00:49:15.270827 2025] [:error] [pid 43494:tid 43532] [client 52.169.163.135:6843] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaestebuch.php"] [unique_id "aULfC-pvK2pzfvdDETpvhQAAAEU"]
[Thu Dec 18 00:49:15.893283 2025] [:error] [pid 43493:tid 43510] [client 52.169.163.135:6699] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aULfC6JPcefhPyLljLxxFgAAAAo"]
[Thu Dec 18 00:49:16.451299 2025] [:error] [pid 43493:tid 43515] [client 52.169.163.135:8028] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/olux.php"] [unique_id "aULfDKJPcefhPyLljLxxGAAAAA8"]
[Thu Dec 18 00:49:16.951762 2025] [:error] [pid 43494:tid 43536] [client 52.169.163.135:6941] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/olux.php"] [unique_id "aULfDOpvK2pzfvdDETpvhwAAAEk"]
[Thu Dec 18 00:49:17.454728 2025] [:error] [pid 26117:tid 26164] [client 52.169.163.135:6924] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/olux.php"] [unique_id "aULfDTGiVc9lQS6PcL3NBgAAAU4"]
[Thu Dec 18 00:49:17.952492 2025] [:error] [pid 26117:tid 26159] [client 52.169.163.135:7393] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/olux.php"] [unique_id "aULfDTGiVc9lQS6PcL3NCAAAAUk"]
[Thu Dec 18 00:49:18.503112 2025] [:error] [pid 43495:tid 43576] [client 52.169.163.135:14547] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indoxploit.php"] [unique_id "aULfDpPwJsDLQYFUP-Y-cAAAANY"]
[Thu Dec 18 00:49:19.003207 2025] [:error] [pid 43493:tid 43506] [client 52.169.163.135:14582] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aULfD6JPcefhPyLljLxxGwAAAAY"]
[Thu Dec 18 00:49:19.512088 2025] [:error] [pid 43580:tid 43598] [client 52.169.163.135:16142] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aULfD9w5Ex8-DN38kP3jkgAAAJA"]
[Thu Dec 18 00:49:20.034030 2025] [:error] [pid 43495:tid 43572] [client 52.169.163.135:1276] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aULfEJPwJsDLQYFUP-Y-cQAAANI"]
[Thu Dec 18 00:49:20.536776 2025] [:error] [pid 43493:tid 43524] [client 52.169.163.135:6818] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aULfEKJPcefhPyLljLxxHAAAABg"]
[Thu Dec 18 00:49:21.039648 2025] [:error] [pid 43495:tid 43575] [client 52.169.163.135:8001] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aULfEZPwJsDLQYFUP-Y-cwAAANU"]
[Thu Dec 18 00:49:21.543243 2025] [:error] [pid 63337:tid 63358] [client 52.169.163.135:10542] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aULfEdSc2ofHSwVzjx-TnAAAARM"]
[Thu Dec 18 00:49:22.040856 2025] [:error] [pid 43495:tid 43559] [client 52.169.163.135:6939] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aULfEpPwJsDLQYFUP-Y-dQAAAMU"]
[Thu Dec 18 00:49:22.540814 2025] [:error] [pid 43494:tid 43539] [client 52.169.163.135:10557] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aULfEupvK2pzfvdDETpvjQAAAEw"]
[Thu Dec 18 00:49:23.039659 2025] [:error] [pid 43495:tid 43577] [client 52.169.163.135:11164] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload.php"] [unique_id "aULfE5PwJsDLQYFUP-Y-dwAAANc"]
[Thu Dec 18 00:49:23.551225 2025] [:error] [pid 63337:tid 63347] [client 52.169.163.135:9543] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload.php"] [unique_id "aULfE9Sc2ofHSwVzjx-TnQAAAQg"]
[Thu Dec 18 00:49:24.436306 2025] [:error] [pid 43495:tid 43555] [client 52.169.163.135:9670] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.2.3.php"] [unique_id "aULfFJPwJsDLQYFUP-Y-eQAAAME"]
[Thu Dec 18 00:49:24.940464 2025] [:error] [pid 63337:tid 63359] [client 52.169.163.135:8296] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.2.3.php"] [unique_id "aULfFNSc2ofHSwVzjx-TngAAARQ"]
[Thu Dec 18 00:49:25.439192 2025] [:error] [pid 63337:tid 63361] [client 52.169.163.135:9045] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.2.3.php"] [unique_id "aULfFdSc2ofHSwVzjx-TnwAAARY"]
[Thu Dec 18 00:49:25.938357 2025] [:error] [pid 43495:tid 43574] [client 52.169.163.135:6817] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.2.3.php"] [unique_id "aULfFZPwJsDLQYFUP-Y-fAAAANQ"]
[Thu Dec 18 00:49:26.442832 2025] [:error] [pid 43495:tid 43571] [client 52.169.163.135:6827] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.2.2.php"] [unique_id "aULfFpPwJsDLQYFUP-Y-fgAAANE"]
[Thu Dec 18 00:49:26.945841 2025] [:error] [pid 26117:tid 26154] [client 52.169.163.135:2266] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.2.2.php"] [unique_id "aULfFjGiVc9lQS6PcL3NEAAAAUU"]
[Thu Dec 18 00:49:27.463208 2025] [:error] [pid 63337:tid 63363] [client 52.169.163.135:1268] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.1.0.php"] [unique_id "aULfF9Sc2ofHSwVzjx-ToQAAARg"]
[Thu Dec 18 00:49:28.112203 2025] [:error] [pid 26117:tid 26164] [client 52.169.163.135:16191] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.7.1.php"] [unique_id "aULfGDGiVc9lQS6PcL3NEQAAAU4"]
[Thu Dec 18 00:49:28.611396 2025] [:error] [pid 43494:tid 43537] [client 52.169.163.135:1267] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.7.1.php"] [unique_id "aULfGOpvK2pzfvdDETpvkwAAAEo"]
[Thu Dec 18 00:49:29.110855 2025] [:error] [pid 43494:tid 43533] [client 52.169.163.135:4658] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.7.1.php"] [unique_id "aULfGepvK2pzfvdDETpvlQAAAEY"]
[Thu Dec 18 00:49:29.609969 2025] [:error] [pid 43495:tid 43561] [client 52.169.163.135:5822] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.7.1.php"] [unique_id "aULfGZPwJsDLQYFUP-Y-gAAAAMc"]
[Thu Dec 18 00:49:30.120456 2025] [:error] [pid 43493:tid 43506] [client 52.169.163.135:14109] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.7.0.php"] [unique_id "aULfGqJPcefhPyLljLxxIAAAAAY"]
[Thu Dec 18 00:49:30.618063 2025] [:error] [pid 43493:tid 43512] [client 52.169.163.135:7248] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.7.0.php"] [unique_id "aULfGqJPcefhPyLljLxxIgAAAAw"]
[Thu Dec 18 00:49:31.211096 2025] [:error] [pid 43580:tid 43582] [client 52.169.163.135:11890] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.6.4.php"] [unique_id "aULfG9w5Ex8-DN38kP3jnQAAAIA"]
[Thu Dec 18 00:49:31.731904 2025] [:error] [pid 43493:tid 43508] [client 52.169.163.135:1222] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.6.4.php"] [unique_id "aULfG6JPcefhPyLljLxxJgAAAAg"]
[Thu Dec 18 00:49:32.231677 2025] [:error] [pid 63337:tid 63362] [client 52.169.163.135:11892] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.6.4.php"] [unique_id "aULfHNSc2ofHSwVzjx-TpAAAARc"]
[Thu Dec 18 00:49:32.734353 2025] [:error] [pid 63337:tid 63353] [client 52.169.163.135:14137] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.6.4.php"] [unique_id "aULfHNSc2ofHSwVzjx-TpQAAAQ4"]
[Thu Dec 18 00:49:33.286105 2025] [:error] [pid 43580:tid 43601] [client 52.169.163.135:11871] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.6.3.php"] [unique_id "aULfHdw5Ex8-DN38kP3jngAAAJM"]
[Thu Dec 18 00:49:33.992528 2025] [:error] [pid 26117:tid 26153] [client 52.169.163.135:11092] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.6.0.php"] [unique_id "aULfHTGiVc9lQS6PcL3NEwAAAUQ"]
[Thu Dec 18 00:49:34.498208 2025] [:error] [pid 43495:tid 43556] [client 52.169.163.135:7234] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.6.0.php"] [unique_id "aULfHpPwJsDLQYFUP-Y-ggAAAMI"]
[Thu Dec 18 00:49:35.002536 2025] [:error] [pid 43493:tid 43510] [client 52.169.163.135:8263] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.6.0.php"] [unique_id "aULfH6JPcefhPyLljLxxKAAAAAo"]
[Thu Dec 18 01:35:41.653521 2025] [:error] [pid 43494:tid 43533] [client 201.42.217.212:55585] [client 201.42.217.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.42.217.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aULp7epvK2pzfvdDETp4owAAAEY"]
[Thu Dec 18 01:37:55.684279 2025] [:error] [pid 43580:tid 43596] [client 197.248.148.181:19929] [client 197.248.148.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.248.148.181, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aULqc9w5Ex8-DN38kP3uWAAAAI4"]
[Thu Dec 18 01:48:17.873705 2025] [:error] [pid 26117:tid 26166] [client 197.248.148.181:30009] [client 197.248.148.181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aULs4TGiVc9lQS6PcL3f0wAAAVA"]
[Thu Dec 18 01:50:16.681846 2025] [:error] [pid 43494:tid 43547] [client 197.248.148.181:31597] [client 197.248.148.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.248.148.181, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aULtWOpvK2pzfvdDETp7VQAAAFQ"]
[Thu Dec 18 06:50:24.277998 2025] [autoindex:error] [pid 23556:tid 23572] [client 193.19.109.195:32357] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:24.681095 2025] [autoindex:error] [pid 23556:tid 23581] [client 193.19.109.195:32357] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:25.093290 2025] [autoindex:error] [pid 23556:tid 23579] [client 193.19.109.195:32357] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:25.581272 2025] [autoindex:error] [pid 23556:tid 23567] [client 193.19.109.195:32357] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:25.923391 2025] [:error] [pid 23556:tid 23570] [client 193.19.109.195:32357] [client 193.19.109.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aUMzsRnmLlk3u5yt9kEGzAAAAAo"]
[Thu Dec 18 06:50:35.486455 2025] [autoindex:error] [pid 23645:tid 23664] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:36.060737 2025] [autoindex:error] [pid 23645:tid 23666] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:36.478001 2025] [autoindex:error] [pid 23645:tid 23652] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:36.887669 2025] [autoindex:error] [pid 23645:tid 23669] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:37.272843 2025] [autoindex:error] [pid 23645:tid 23653] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:37.630106 2025] [autoindex:error] [pid 23645:tid 23656] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:38.511709 2025] [autoindex:error] [pid 23645:tid 23647] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:46.970236 2025] [autoindex:error] [pid 23645:tid 23651] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:47.402849 2025] [autoindex:error] [pid 23645:tid 23654] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:06.658013 2025] [autoindex:error] [pid 23645:tid 23662] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:07.018831 2025] [autoindex:error] [pid 23645:tid 23663] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:07.408462 2025] [autoindex:error] [pid 23645:tid 23650] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:07.839959 2025] [autoindex:error] [pid 23645:tid 23659] [client 193.19.109.179:22687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:08.199665 2025] [:error] [pid 23645:tid 23649] [client 193.19.109.179:22687] [client 193.19.109.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blog/"] [unique_id "aUMz3Df_Rx0Y0ao_QJiLpAAAAII"]
[Thu Dec 18 06:51:14.802718 2025] [autoindex:error] [pid 23645:tid 23653] [client 193.19.109.193:25801] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:15.240307 2025] [autoindex:error] [pid 23645:tid 23657] [client 193.19.109.193:25801] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:25.111546 2025] [autoindex:error] [pid 23645:tid 23666] [client 193.19.109.193:25801] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:40.921559 2025] [autoindex:error] [pid 23645:tid 23650] [client 193.19.109.193:25801] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:41.298379 2025] [autoindex:error] [pid 23645:tid 23671] [client 193.19.109.193:25801] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:41.720658 2025] [autoindex:error] [pid 23645:tid 23668] [client 193.19.109.193:25801] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 09:17:43.071146 2025] [:error] [pid 25357:tid 25361] [client 182.42.111.156:32823] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUNWN4aT7bsEXnJVfJeRywAAAcI"]
[Thu Dec 18 09:42:22.355885 2025] [:error] [pid 24433:tid 24440] [client 85.203.23.2:51951] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUNb_p4pN9ycmipm8ThWKwAAAQQ"]
[Thu Dec 18 09:42:22.744875 2025] [:error] [pid 24542:tid 24548] [client 85.203.23.50:24157] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aUNb_ktQz4H2oS3NrDZNqQAAAUQ"]
[Thu Dec 18 09:42:23.146350 2025] [:error] [pid 24958:tid 24985] [client 85.203.23.23:37263] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUNb_8kDOrUkd0wNm2FKagAAAZg"]
[Thu Dec 18 09:42:23.790152 2025] [:error] [pid 23556:tid 23576] [client 85.203.23.44:55723] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aUNb_xnmLlk3u5yt9kE3lQAAABA"]
[Thu Dec 18 09:42:24.155737 2025] [:error] [pid 24542:tid 24552] [client 85.203.23.40:51077] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUNcAEtQz4H2oS3NrDZNrAAAAUg"]
[Thu Dec 18 09:42:24.583667 2025] [:error] [pid 25357:tid 25370] [client 85.203.23.35:32167] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aUNcAIaT7bsEXnJVfJeavwAAAcs"]
[Thu Dec 18 09:42:24.950718 2025] [:error] [pid 23556:tid 23574] [client 85.203.23.35:60125] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aUNcABnmLlk3u5yt9kE3lgAAAA4"]
[Thu Dec 18 09:42:30.331461 2025] [:error] [pid 23556:tid 23575] [client 85.203.23.49:51775] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/images/selam.php"] [unique_id "aUNcBhnmLlk3u5yt9kE3nAAAAA8"]
[Thu Dec 18 09:42:30.730565 2025] [:error] [pid 24433:tid 24450] [client 85.203.23.48:38749] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUNcBp4pN9ycmipm8ThWOQAAAQ4"]
[Thu Dec 18 09:42:31.112107 2025] [:error] [pid 24542:tid 24566] [client 85.203.23.37:38205] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aUNcB0tQz4H2oS3NrDZNvQAAAVY"]
[Thu Dec 18 09:42:31.479455 2025] [:error] [pid 24542:tid 24560] [client 85.203.23.31:30215] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aUNcB0tQz4H2oS3NrDZNvgAAAVA"]
[Thu Dec 18 09:42:31.942798 2025] [:error] [pid 25357:tid 25367] [client 85.203.23.7:47091] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aUNcB4aT7bsEXnJVfJeaxAAAAcg"]
[Thu Dec 18 09:42:32.348426 2025] [:error] [pid 24542:tid 24562] [client 85.203.23.25:24321] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aUNcCEtQz4H2oS3NrDZNwQAAAVI"]
[Thu Dec 18 09:42:32.723470 2025] [:error] [pid 23556:tid 23574] [client 85.203.23.2:44969] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aUNcCBnmLlk3u5yt9kE3ogAAAA4"]
[Thu Dec 18 09:42:33.094944 2025] [:error] [pid 23645:tid 23659] [client 85.203.23.15:42463] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aUNcCTf_Rx0Y0ao_QJi9pQAAAIw"]
[Thu Dec 18 09:42:33.482630 2025] [:error] [pid 23645:tid 23666] [client 85.203.23.44:22499] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/"] [unique_id "aUNcCTf_Rx0Y0ao_QJi9qAAAAJM"]
[Thu Dec 18 09:42:33.873954 2025] [:error] [pid 23558:tid 23621] [client 85.203.23.7:49847] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aUNcCeHam9NbgPQa9uZj8wAAAMY"]
[Thu Dec 18 09:42:34.243737 2025] [:error] [pid 24542:tid 24561] [client 85.203.23.48:52311] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/updates.php"] [unique_id "aUNcCktQz4H2oS3NrDZNyQAAAVE"]
[Thu Dec 18 09:42:34.708937 2025] [:error] [pid 23556:tid 23584] [client 85.203.23.9:64477] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aUNcChnmLlk3u5yt9kE3pwAAABg"]
[Thu Dec 18 09:42:40.113963 2025] [:error] [pid 23558:tid 23634] [client 85.203.23.41:34353] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aUNcEOHam9NbgPQa9uZj-wAAANM"]
[Thu Dec 18 09:42:40.630988 2025] [:error] [pid 23558:tid 23632] [client 85.203.23.2:64069] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "aUNcEOHam9NbgPQa9uZj_QAAANE"]
[Thu Dec 18 09:42:41.150815 2025] [:error] [pid 24542:tid 24546] [client 85.203.23.51:64401] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aUNcEUtQz4H2oS3NrDZN2wAAAUI"]
[Thu Dec 18 09:42:41.518691 2025] [:error] [pid 25357:tid 25381] [client 85.203.23.27:52805] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap/function.php"] [unique_id "aUNcEYaT7bsEXnJVfJea3AAAAdY"]
[Thu Dec 18 09:42:41.938266 2025] [:error] [pid 25357:tid 25373] [client 85.203.23.36:62799] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "aUNcEYaT7bsEXnJVfJea3QAAAc4"]
[Thu Dec 18 09:42:42.299112 2025] [:error] [pid 23558:tid 23631] [client 85.203.23.36:30455] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/"] [unique_id "aUNcEuHam9NbgPQa9uZkAwAAANA"]
[Thu Dec 18 09:42:42.665468 2025] [:error] [pid 23558:tid 23619] [client 85.203.23.42:63713] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aUNcEuHam9NbgPQa9uZkBAAAAMQ"]
[Thu Dec 18 09:42:43.031819 2025] [:error] [pid 23556:tid 23561] [client 85.203.23.12:51625] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/shell/"] [unique_id "aUNcExnmLlk3u5yt9kE3rQAAAAE"]
[Thu Dec 18 09:42:43.397656 2025] [:error] [pid 24433:tid 24452] [client 85.203.23.25:29557] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aUNcE54pN9ycmipm8ThWQwAAARA"]
[Thu Dec 18 09:42:43.768168 2025] [:error] [pid 23556:tid 23582] [client 85.203.23.7:42585] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aUNcExnmLlk3u5yt9kE3rgAAABY"]
[Thu Dec 18 09:42:44.178258 2025] [:error] [pid 23558:tid 23638] [client 85.203.23.41:64371] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "aUNcFOHam9NbgPQa9uZkCAAAANc"]
[Thu Dec 18 09:42:44.685132 2025] [:error] [pid 24433:tid 24448] [client 85.203.23.50:60821] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aUNcFJ4pN9ycmipm8ThWRQAAAQw"]
[Thu Dec 18 09:42:45.090061 2025] [:error] [pid 25357:tid 25360] [client 85.203.23.52:38879] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/"] [unique_id "aUNcFYaT7bsEXnJVfJea6QAAAcE"]
[Thu Dec 18 09:42:45.559024 2025] [:error] [pid 25357:tid 25359] [client 85.203.23.3:35299] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/class.api.php"] [unique_id "aUNcFYaT7bsEXnJVfJea7AAAAcA"]
[Thu Dec 18 09:42:45.950271 2025] [:error] [pid 24542:tid 24559] [client 85.203.23.17:23285] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/"] [unique_id "aUNcFUtQz4H2oS3NrDZN6QAAAU8"]
[Thu Dec 18 09:42:46.324405 2025] [:error] [pid 23557:tid 23596] [client 85.203.23.22:20101] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "aUNcFhYcs6rFVxbdP_litwAAAEg"]
[Thu Dec 18 09:42:51.701282 2025] [:error] [pid 23556:tid 23582] [client 85.203.23.41:23703] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aUNcGxnmLlk3u5yt9kE3twAAABY"]
[Thu Dec 18 09:42:52.065456 2025] [:error] [pid 23645:tid 23652] [client 85.203.23.42:54763] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUNcHDf_Rx0Y0ao_QJi9ygAAAIU"]
[Thu Dec 18 09:42:52.436828 2025] [:error] [pid 23645:tid 23665] [client 85.203.23.23:36785] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aUNcHDf_Rx0Y0ao_QJi9zQAAAJI"]
[Thu Dec 18 09:42:52.830715 2025] [:error] [pid 25357:tid 25382] [client 85.203.23.2:28089] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aUNcHIaT7bsEXnJVfJebBgAAAdc"]
[Thu Dec 18 09:42:58.257298 2025] [:error] [pid 24958:tid 24965] [client 85.203.23.39:29589] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "aUNcIskDOrUkd0wNm2FKhAAAAYQ"]
[Thu Dec 18 09:42:58.639701 2025] [:error] [pid 23556:tid 23572] [client 85.203.23.37:37319] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/"] [unique_id "aUNcIhnmLlk3u5yt9kE3xgAAAAw"]
[Thu Dec 18 09:42:59.009091 2025] [:error] [pid 23558:tid 23625] [client 85.203.23.23:33775] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aUNcI-Ham9NbgPQa9uZkIAAAAMo"]
[Thu Dec 18 09:42:59.389785 2025] [:error] [pid 23558:tid 23628] [client 85.203.23.25:56701] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUNcI-Ham9NbgPQa9uZkJQAAAM0"]
[Thu Dec 18 09:42:59.756303 2025] [:error] [pid 23557:tid 23588] [client 85.203.23.10:57835] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aUNcIxYcs6rFVxbdP_lizAAAAEA"]
[Thu Dec 18 09:43:00.182157 2025] [:error] [pid 24542:tid 24562] [client 85.203.23.12:52873] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin-header.php"] [unique_id "aUNcJEtQz4H2oS3NrDZOEwAAAVI"]
[Thu Dec 18 09:43:00.550898 2025] [:error] [pid 24542:tid 24544] [client 85.203.23.30:41343] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUNcJEtQz4H2oS3NrDZOFQAAAUA"]
[Thu Dec 18 09:43:00.946014 2025] [:error] [pid 23645:tid 23666] [client 85.203.23.51:56919] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aUNcJDf_Rx0Y0ao_QJi95gAAAJM"]
[Thu Dec 18 09:43:01.319841 2025] [:error] [pid 23645:tid 23654] [client 85.203.23.40:20091] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config-sample.php"] [unique_id "aUNcJTf_Rx0Y0ao_QJi96QAAAIc"]
[Thu Dec 18 09:43:01.686608 2025] [:error] [pid 23558:tid 23619] [client 85.203.23.19:49167] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aUNcJeHam9NbgPQa9uZkKAAAAMQ"]
[Thu Dec 18 09:43:02.111655 2025] [:error] [pid 23558:tid 23630] [client 85.203.23.15:60855] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "aUNcJuHam9NbgPQa9uZkKwAAAM8"]
[Thu Dec 18 09:43:02.541488 2025] [:error] [pid 23558:tid 23639] [client 85.203.23.7:33681] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/"] [unique_id "aUNcJuHam9NbgPQa9uZkLgAAANg"]
[Thu Dec 18 09:43:03.006140 2025] [:error] [pid 24433:tid 24449] [client 85.203.23.38:46769] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aUNcJ54pN9ycmipm8ThWZwAAAQ0"]
[Thu Dec 18 09:43:04.870595 2025] [:error] [pid 23557:tid 23612] [client 85.203.23.39:30315] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aUNcKBYcs6rFVxbdP_li0gAAAFg"]
[Thu Dec 18 09:43:05.240985 2025] [:error] [pid 23645:tid 23658] [client 85.203.23.31:55365] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aUNcKTf_Rx0Y0ao_QJi99wAAAIs"]
[Thu Dec 18 09:43:07.124785 2025] [:error] [pid 24542:tid 24563] [client 85.203.23.8:64833] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aUNcK0tQz4H2oS3NrDZOHgAAAVM"]
[Thu Dec 18 09:43:07.511901 2025] [:error] [pid 24958:tid 24978] [client 85.203.23.13:40283] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/"] [unique_id "aUNcK8kDOrUkd0wNm2FKkgAAAZE"]
[Thu Dec 18 09:43:07.883595 2025] [:error] [pid 24542:tid 24560] [client 85.203.23.41:44101] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/function/function.php"] [unique_id "aUNcK0tQz4H2oS3NrDZOIAAAAVA"]
[Thu Dec 18 09:43:08.250140 2025] [:error] [pid 23556:tid 23572] [client 85.203.23.7:41559] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aUNcLBnmLlk3u5yt9kE30wAAAAw"]
[Thu Dec 18 09:43:08.613844 2025] [:error] [pid 24542:tid 24564] [client 85.203.23.51:29681] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aUNcLEtQz4H2oS3NrDZOIgAAAVQ"]
[Thu Dec 18 09:43:14.093154 2025] [:error] [pid 24433:tid 24445] [client 85.203.23.40:57861] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aUNcMp4pN9ycmipm8ThWdgAAAQk"]
[Thu Dec 18 09:43:14.467482 2025] [:error] [pid 24433:tid 24446] [client 85.203.23.17:42867] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/222.php"] [unique_id "aUNcMp4pN9ycmipm8ThWeAAAAQo"]
[Thu Dec 18 09:43:14.836401 2025] [:error] [pid 23645:tid 23666] [client 85.203.23.31:61589] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aUNcMjf_Rx0Y0ao_QJi-AgAAAJM"]
[Thu Dec 18 09:43:15.211794 2025] [:error] [pid 23645:tid 23651] [client 85.203.23.25:37535] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aUNcMzf_Rx0Y0ao_QJi-BgAAAIQ"]
[Thu Dec 18 09:43:15.581721 2025] [:error] [pid 23556:tid 23565] [client 85.203.23.26:25797] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/chosen.php"] [unique_id "aUNcMxnmLlk3u5yt9kE37gAAAAU"]
[Thu Dec 18 09:43:15.948740 2025] [:error] [pid 25357:tid 25369] [client 85.203.23.15:61251] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aUNcM4aT7bsEXnJVfJebMgAAAco"]
[Thu Dec 18 09:43:16.316025 2025] [:error] [pid 24433:tid 24452] [client 85.203.23.4:43221] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aUNcNJ4pN9ycmipm8ThWfAAAARA"]
[Thu Dec 18 09:43:16.749416 2025] [:error] [pid 24433:tid 24447] [client 85.203.23.26:45417] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUNcNJ4pN9ycmipm8ThWgAAAAQs"]
[Thu Dec 18 09:43:17.154056 2025] [:error] [pid 23557:tid 23593] [client 85.203.23.49:23341] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "aUNcNRYcs6rFVxbdP_li3gAAAEU"]
[Thu Dec 18 09:43:17.532042 2025] [:error] [pid 23645:tid 23655] [client 85.203.23.43:35759] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aUNcNTf_Rx0Y0ao_QJi-BwAAAIg"]
[Thu Dec 18 09:43:17.903872 2025] [:error] [pid 23556:tid 23570] [client 85.203.23.14:20789] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aUNcNRnmLlk3u5yt9kE38QAAAAo"]
[Thu Dec 18 09:43:18.267759 2025] [:error] [pid 23557:tid 23611] [client 85.203.23.20:45729] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aUNcNhYcs6rFVxbdP_li4gAAAFc"]
[Thu Dec 18 09:43:18.631306 2025] [:error] [pid 24433:tid 24446] [client 85.203.23.3:46363] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/"] [unique_id "aUNcNp4pN9ycmipm8ThWhgAAAQo"]
[Thu Dec 18 09:43:18.997371 2025] [:error] [pid 24433:tid 24454] [client 85.203.23.32:53707] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aUNcNp4pN9ycmipm8ThWiQAAARI"]
[Thu Dec 18 09:43:19.362284 2025] [:error] [pid 24433:tid 24449] [client 85.203.23.9:29121] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/"] [unique_id "aUNcN54pN9ycmipm8ThWiwAAAQ0"]
[Thu Dec 18 09:43:19.892368 2025] [:error] [pid 24433:tid 24456] [client 85.203.23.19:46051] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/"] [unique_id "aUNcN54pN9ycmipm8ThWjgAAARQ"]
[Thu Dec 18 09:43:20.295233 2025] [:error] [pid 23558:tid 23625] [client 85.203.23.34:61735] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/"] [unique_id "aUNcOOHam9NbgPQa9uZkOwAAAMo"]
[Thu Dec 18 09:43:20.710300 2025] [:error] [pid 23645:tid 23658] [client 85.203.23.8:20445] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aUNcODf_Rx0Y0ao_QJi-CwAAAIs"]
[Thu Dec 18 09:43:21.246154 2025] [:error] [pid 23558:tid 23616] [client 85.203.23.28:40283] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aUNcOeHam9NbgPQa9uZkPQAAAME"]
[Thu Dec 18 09:43:21.651718 2025] [:error] [pid 24958:tid 24971] [client 85.203.23.39:60707] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aUNcOckDOrUkd0wNm2FKogAAAYo"]
[Thu Dec 18 09:43:22.029309 2025] [:error] [pid 25357:tid 25383] [client 85.203.23.50:41329] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/"] [unique_id "aUNcOoaT7bsEXnJVfJebOAAAAdg"]
[Thu Dec 18 09:43:22.401215 2025] [:error] [pid 23558:tid 23634] [client 85.203.23.29:46281] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aUNcOuHam9NbgPQa9uZkQQAAANM"]
[Thu Dec 18 09:43:22.785633 2025] [:error] [pid 24958:tid 24975] [client 85.203.23.9:25237] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-file.php"] [unique_id "aUNcOskDOrUkd0wNm2FKpAAAAY4"]
[Thu Dec 18 09:43:23.152367 2025] [:error] [pid 23645:tid 23666] [client 85.203.23.33:63719] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aUNcOzf_Rx0Y0ao_QJi-DQAAAJM"]
[Thu Dec 18 09:43:23.524467 2025] [:error] [pid 24433:tid 24449] [client 85.203.23.41:27729] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUNcO54pN9ycmipm8ThWpAAAAQ0"]
[Thu Dec 18 09:43:24.074564 2025] [:error] [pid 23645:tid 23647] [client 85.203.23.12:58189] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "aUNcPDf_Rx0Y0ao_QJi-DwAAAIA"]
[Thu Dec 18 09:43:24.632094 2025] [:error] [pid 23556:tid 23569] [client 85.203.23.42:61313] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/"] [unique_id "aUNcPBnmLlk3u5yt9kE3-gAAAAk"]
[Thu Dec 18 09:43:25.022030 2025] [:error] [pid 23556:tid 23576] [client 85.203.23.14:60303] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aUNcPRnmLlk3u5yt9kE3_AAAABA"]
[Thu Dec 18 09:43:25.393967 2025] [:error] [pid 23556:tid 23583] [client 85.203.23.6:40745] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aUNcPRnmLlk3u5yt9kE3_QAAABc"]
[Thu Dec 18 09:43:25.760621 2025] [:error] [pid 24542:tid 24547] [client 85.203.23.27:29491] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg/function.php"] [unique_id "aUNcPUtQz4H2oS3NrDZOQwAAAUM"]
[Thu Dec 18 09:43:26.150309 2025] [:error] [pid 24542:tid 24565] [client 85.203.23.4:46955] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aUNcPktQz4H2oS3NrDZORwAAAVU"]
[Thu Dec 18 09:43:26.590408 2025] [:error] [pid 23645:tid 23655] [client 85.203.23.24:50477] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aUNcPjf_Rx0Y0ao_QJi-EgAAAIg"]
[Thu Dec 18 09:43:26.956820 2025] [:error] [pid 24542:tid 24545] [client 85.203.23.49:52629] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aUNcPktQz4H2oS3NrDZOSwAAAUE"]
[Thu Dec 18 09:43:27.325860 2025] [:error] [pid 23557:tid 23593] [client 85.203.23.40:45843] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aUNcPxYcs6rFVxbdP_li9AAAAEU"]
[Thu Dec 18 09:43:27.686960 2025] [:error] [pid 23558:tid 23618] [client 85.203.23.49:48031] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aUNcP-Ham9NbgPQa9uZkRAAAAMM"]
[Thu Dec 18 09:43:33.132735 2025] [:error] [pid 24958:tid 24965] [client 85.203.23.14:50305] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aUNcRckDOrUkd0wNm2FKsgAAAYQ"]
[Thu Dec 18 09:43:33.507630 2025] [:error] [pid 23556:tid 23561] [client 85.203.23.32:33083] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aUNcRRnmLlk3u5yt9kE4CAAAAAE"]
[Thu Dec 18 09:43:34.190851 2025] [:error] [pid 25357:tid 25378] [client 85.203.23.22:35857] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUNcRoaT7bsEXnJVfJebOgAAAdM"]
[Thu Dec 18 09:43:34.554774 2025] [:error] [pid 23558:tid 23629] [client 85.203.23.51:24523] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aUNcRuHam9NbgPQa9uZkTgAAAM4"]
[Thu Dec 18 09:43:34.917775 2025] [:error] [pid 24433:tid 24457] [client 85.203.23.14:64071] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aUNcRp4pN9ycmipm8ThWqAAAARU"]
[Thu Dec 18 09:43:35.284656 2025] [:error] [pid 24433:tid 24442] [client 85.203.23.28:44065] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/about.php"] [unique_id "aUNcR54pN9ycmipm8ThWqwAAAQY"]
[Thu Dec 18 09:43:35.708370 2025] [:error] [pid 25357:tid 25363] [client 85.203.23.42:43815] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUNcR4aT7bsEXnJVfJebPAAAAcQ"]
[Thu Dec 18 09:43:36.072861 2025] [:error] [pid 24433:tid 24439] [client 85.203.23.6:24403] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUNcSJ4pN9ycmipm8ThWrgAAAQM"]
[Thu Dec 18 09:43:36.444883 2025] [:error] [pid 23645:tid 23650] [client 85.203.23.2:38465] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/"] [unique_id "aUNcSDf_Rx0Y0ao_QJi-FgAAAIM"]
[Thu Dec 18 09:43:36.808539 2025] [:error] [pid 24958:tid 24979] [client 85.203.23.33:60471] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aUNcSMkDOrUkd0wNm2FKwwAAAZI"]
[Thu Dec 18 09:43:37.172319 2025] [:error] [pid 24958:tid 24984] [client 85.203.23.49:20393] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/"] [unique_id "aUNcSckDOrUkd0wNm2FKxgAAAZc"]
[Thu Dec 18 09:43:37.544121 2025] [:error] [pid 23557:tid 23600] [client 85.203.23.19:42751] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aUNcSRYcs6rFVxbdP_ljAQAAAEw"]
[Thu Dec 18 09:43:37.914284 2025] [:error] [pid 24433:tid 24436] [client 85.203.23.30:21501] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron-backup.php"] [unique_id "aUNcSZ4pN9ycmipm8ThWtQAAAQA"]
[Thu Dec 18 09:43:38.303964 2025] [:error] [pid 23645:tid 23647] [client 85.203.23.2:22503] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/"] [unique_id "aUNcSjf_Rx0Y0ao_QJi-GgAAAIA"]
[Thu Dec 18 09:43:38.688492 2025] [:error] [pid 23645:tid 23662] [client 85.203.23.40:61861] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/z.php"] [unique_id "aUNcSjf_Rx0Y0ao_QJi-HAAAAI8"]
[Thu Dec 18 09:43:39.076820 2025] [:error] [pid 23645:tid 23669] [client 85.203.23.18:27211] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/admin.php"] [unique_id "aUNcSzf_Rx0Y0ao_QJi-HwAAAJY"]
[Thu Dec 18 09:43:39.526640 2025] [:error] [pid 23558:tid 23617] [client 85.203.23.25:55507] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/"] [unique_id "aUNcS-Ham9NbgPQa9uZkVQAAAMI"]
[Thu Dec 18 09:43:40.062871 2025] [:error] [pid 23645:tid 23668] [client 85.203.23.34:29881] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/"] [unique_id "aUNcTDf_Rx0Y0ao_QJi-IgAAAJU"]
[Thu Dec 18 09:43:40.453230 2025] [:error] [pid 23645:tid 23650] [client 85.203.23.47:52923] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/files/"] [unique_id "aUNcTDf_Rx0Y0ao_QJi-IwAAAIM"]
[Thu Dec 18 09:43:40.821950 2025] [:error] [pid 25357:tid 25371] [client 85.203.23.13:62337] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/themes/"] [unique_id "aUNcTIaT7bsEXnJVfJebQgAAAcw"]
[Thu Dec 18 09:43:41.208599 2025] [:error] [pid 24433:tid 24443] [client 85.203.23.18:42595] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/archives/"] [unique_id "aUNcTZ4pN9ycmipm8ThWuwAAAQc"]
[Thu Dec 18 09:43:41.573161 2025] [:error] [pid 24433:tid 24454] [client 85.203.23.10:21927] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aUNcTZ4pN9ycmipm8ThWvAAAARI"]
[Thu Dec 18 09:43:41.937730 2025] [:error] [pid 23557:tid 23602] [client 85.203.23.13:30409] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/404.php"] [unique_id "aUNcTRYcs6rFVxbdP_ljCQAAAE4"]
[Thu Dec 18 09:43:42.300722 2025] [:error] [pid 23558:tid 23635] [client 85.203.23.36:60053] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/packed.php"] [unique_id "aUNcTuHam9NbgPQa9uZkWQAAANQ"]
[Thu Dec 18 09:43:42.671604 2025] [:error] [pid 23558:tid 23622] [client 85.203.23.17:25409] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aUNcTuHam9NbgPQa9uZkWgAAAMc"]
[Thu Dec 18 09:43:43.034992 2025] [:error] [pid 25357:tid 25360] [client 85.203.23.3:24633] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/components/"] [unique_id "aUNcT4aT7bsEXnJVfJebSwAAAcE"]
[Thu Dec 18 09:43:43.411919 2025] [:error] [pid 23645:tid 23647] [client 85.203.23.23:33421] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aUNcTzf_Rx0Y0ao_QJi-JQAAAIA"]
[Thu Dec 18 09:43:43.778793 2025] [:error] [pid 24542:tid 24556] [client 85.203.23.14:60213] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aUNcT0tQz4H2oS3NrDZOcgAAAUw"]
[Thu Dec 18 09:43:44.156151 2025] [:error] [pid 25357:tid 25368] [client 85.203.23.8:63979] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/"] [unique_id "aUNcUIaT7bsEXnJVfJebUwAAAck"]
[Thu Dec 18 09:43:44.521792 2025] [:error] [pid 24433:tid 24448] [client 85.203.23.12:30267] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aUNcUJ4pN9ycmipm8ThWxwAAAQw"]
[Thu Dec 18 09:43:44.888362 2025] [:error] [pid 23645:tid 23659] [client 85.203.23.6:20037] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/options.php"] [unique_id "aUNcUDf_Rx0Y0ao_QJi-LQAAAIw"]
[Thu Dec 18 09:43:45.269887 2025] [:error] [pid 24958:tid 24979] [client 85.203.23.42:47311] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aUNcUckDOrUkd0wNm2FK0AAAAZI"]
[Thu Dec 18 09:43:45.645466 2025] [:error] [pid 24542:tid 24567] [client 85.203.23.28:30871] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aUNcUUtQz4H2oS3NrDZOeAAAAVc"]
[Thu Dec 18 09:43:46.056693 2025] [:error] [pid 25357:tid 25374] [client 85.203.23.44:30241] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "aUNcUoaT7bsEXnJVfJebWwAAAc8"]
[Thu Dec 18 09:43:46.424960 2025] [:error] [pid 25357:tid 25363] [client 85.203.23.24:34321] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUNcUoaT7bsEXnJVfJebXwAAAcQ"]
[Thu Dec 18 09:43:46.817566 2025] [:error] [pid 24958:tid 24982] [client 85.203.23.50:34393] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aUNcUskDOrUkd0wNm2FK1gAAAZU"]
[Thu Dec 18 09:43:47.241023 2025] [:error] [pid 25357:tid 25378] [client 85.203.23.41:49889] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aUNcU4aT7bsEXnJVfJebYgAAAdM"]
[Thu Dec 18 09:43:47.607203 2025] [:error] [pid 25357:tid 25368] [client 85.203.23.47:39699] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aUNcU4aT7bsEXnJVfJebZQAAAck"]
[Thu Dec 18 09:43:48.044157 2025] [:error] [pid 24958:tid 24976] [client 85.203.23.37:24123] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/admin.php"] [unique_id "aUNcVMkDOrUkd0wNm2FK3AAAAY8"]
[Thu Dec 18 09:43:48.414692 2025] [:error] [pid 23556:tid 23562] [client 85.203.23.37:61449] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/options.php"] [unique_id "aUNcVBnmLlk3u5yt9kE4EwAAAAI"]
[Thu Dec 18 09:43:48.778658 2025] [:error] [pid 23557:tid 23593] [client 85.203.23.11:50863] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUNcVBYcs6rFVxbdP_ljFwAAAEU"]
[Thu Dec 18 09:43:49.273136 2025] [:error] [pid 25357:tid 25380] [client 85.203.23.44:50221] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aUNcVYaT7bsEXnJVfJebaQAAAdU"]
[Thu Dec 18 09:43:49.654606 2025] [:error] [pid 24958:tid 24969] [client 85.203.23.31:20653] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shell3.php"] [unique_id "aUNcVckDOrUkd0wNm2FK5QAAAYg"]
[Thu Dec 18 09:43:50.161522 2025] [:error] [pid 24542:tid 24568] [client 85.203.23.43:42205] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aUNcVktQz4H2oS3NrDZOhQAAAVg"]
[Thu Dec 18 09:43:50.538152 2025] [:error] [pid 25357:tid 25368] [client 85.203.23.37:44027] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aUNcVoaT7bsEXnJVfJebcQAAAck"]
[Thu Dec 18 09:43:50.910207 2025] [:error] [pid 25357:tid 25383] [client 85.203.23.53:40849] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aUNcVoaT7bsEXnJVfJebdQAAAdg"]
[Thu Dec 18 09:43:51.278997 2025] [:error] [pid 24542:tid 24563] [client 85.203.23.51:45789] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmrlpc.php"] [unique_id "aUNcV0tQz4H2oS3NrDZOiQAAAVM"]
[Thu Dec 18 09:43:51.696709 2025] [:error] [pid 23558:tid 23628] [client 85.203.23.48:33083] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aUNcV-Ham9NbgPQa9uZkXwAAAM0"]
[Thu Dec 18 09:43:52.064990 2025] [:error] [pid 24958:tid 24984] [client 85.203.23.33:43311] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/"] [unique_id "aUNcWMkDOrUkd0wNm2FK7wAAAZc"]
[Thu Dec 18 09:43:52.483079 2025] [:error] [pid 24542:tid 24552] [client 85.203.23.16:56827] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aUNcWEtQz4H2oS3NrDZOkgAAAUg"]
[Thu Dec 18 09:43:52.844225 2025] [:error] [pid 24958:tid 24976] [client 85.203.23.44:52107] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aUNcWMkDOrUkd0wNm2FK9gAAAY8"]
[Thu Dec 18 09:43:53.224713 2025] [:error] [pid 24958:tid 24963] [client 85.203.23.51:32985] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/"] [unique_id "aUNcWckDOrUkd0wNm2FK_QAAAYI"]
[Thu Dec 18 09:43:53.597043 2025] [:error] [pid 25357:tid 25363] [client 85.203.23.53:37527] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links.php"] [unique_id "aUNcWYaT7bsEXnJVfJebgQAAAcQ"]
[Thu Dec 18 09:43:53.960073 2025] [:error] [pid 25357:tid 25370] [client 85.203.23.15:49673] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/"] [unique_id "aUNcWYaT7bsEXnJVfJebhAAAAcs"]
[Thu Dec 18 09:43:54.326810 2025] [:error] [pid 23558:tid 23624] [client 85.203.23.9:64673] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aUNcWuHam9NbgPQa9uZkZwAAAMk"]
[Thu Dec 18 09:43:54.703024 2025] [:error] [pid 23558:tid 23616] [client 85.203.23.17:31893] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aUNcWuHam9NbgPQa9uZkaQAAAME"]
[Thu Dec 18 09:43:55.079493 2025] [:error] [pid 24958:tid 24969] [client 85.203.23.3:51501] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/about.php"] [unique_id "aUNcW8kDOrUkd0wNm2FLCQAAAYg"]
[Thu Dec 18 09:43:55.444809 2025] [:error] [pid 24542:tid 24555] [client 85.203.23.20:57647] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/"] [unique_id "aUNcW0tQz4H2oS3NrDZOrwAAAUs"]
[Thu Dec 18 09:43:55.829521 2025] [:error] [pid 24542:tid 24553] [client 85.203.23.45:46133] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUNcW0tQz4H2oS3NrDZOsgAAAUk"]
[Thu Dec 18 09:43:56.213042 2025] [:error] [pid 24958:tid 24966] [client 85.203.23.40:59221] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUNcXMkDOrUkd0wNm2FLDQAAAYU"]
[Thu Dec 18 09:43:56.575478 2025] [:error] [pid 24958:tid 24982] [client 85.203.23.37:21595] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUNcXMkDOrUkd0wNm2FLDwAAAZU"]
[Thu Dec 18 09:43:56.970280 2025] [:error] [pid 23558:tid 23618] [client 85.203.23.51:47325] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "aUNcXOHam9NbgPQa9uZkbwAAAMM"]
[Thu Dec 18 09:43:57.358371 2025] [:error] [pid 23558:tid 23620] [client 85.203.23.26:25469] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/development/"] [unique_id "aUNcXeHam9NbgPQa9uZkdQAAAMU"]
[Thu Dec 18 09:43:57.734600 2025] [:error] [pid 24542:tid 24549] [client 85.203.23.32:46539] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aUNcXUtQz4H2oS3NrDZOswAAAUU"]
[Thu Dec 18 09:43:58.180013 2025] [:error] [pid 23645:tid 23658] [client 85.203.23.13:26925] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aUNcXjf_Rx0Y0ao_QJi-SQAAAIs"]
[Thu Dec 18 09:43:58.566478 2025] [:error] [pid 24433:tid 24446] [client 85.203.23.20:26101] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2024/"] [unique_id "aUNcXp4pN9ycmipm8ThW0AAAAQo"]
[Thu Dec 18 09:43:58.953885 2025] [:error] [pid 23645:tid 23656] [client 85.203.23.19:36521] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aUNcXjf_Rx0Y0ao_QJi-SwAAAIk"]
[Thu Dec 18 09:43:59.321590 2025] [:error] [pid 23558:tid 23615] [client 85.203.23.13:26163] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content.php"] [unique_id "aUNcX-Ham9NbgPQa9uZkfwAAAMA"]
[Thu Dec 18 09:43:59.805068 2025] [:error] [pid 24958:tid 24967] [client 85.203.23.29:26205] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aUNcX8kDOrUkd0wNm2FLEwAAAYY"]
[Thu Dec 18 09:44:00.177808 2025] [:error] [pid 24958:tid 24979] [client 85.203.23.6:53949] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/"] [unique_id "aUNcYMkDOrUkd0wNm2FLFAAAAZI"]
[Thu Dec 18 09:44:00.598625 2025] [:error] [pid 25357:tid 25363] [client 85.203.23.14:55111] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/"] [unique_id "aUNcYIaT7bsEXnJVfJebmQAAAcQ"]
[Thu Dec 18 09:44:00.972766 2025] [:error] [pid 23645:tid 23662] [client 85.203.23.53:51803] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/themes.php"] [unique_id "aUNcYDf_Rx0Y0ao_QJi-TgAAAI8"]
[Thu Dec 18 09:44:01.343617 2025] [:error] [pid 24542:tid 24552] [client 85.203.23.26:44193] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aUNcYUtQz4H2oS3NrDZOugAAAUg"]
[Thu Dec 18 09:44:01.709198 2025] [:error] [pid 23558:tid 23628] [client 85.203.23.53:30627] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aUNcYeHam9NbgPQa9uZkgwAAAM0"]
[Thu Dec 18 09:44:02.073241 2025] [:error] [pid 25357:tid 25380] [client 85.203.23.17:24093] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aUNcYoaT7bsEXnJVfJeboAAAAdU"]
[Thu Dec 18 09:44:02.443753 2025] [:error] [pid 24958:tid 24976] [client 85.203.23.11:53245] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aUNcYskDOrUkd0wNm2FLGgAAAY8"]
[Thu Dec 18 09:44:02.856394 2025] [:error] [pid 24958:tid 24981] [client 85.203.23.28:48285] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aUNcYskDOrUkd0wNm2FLHgAAAZQ"]
[Thu Dec 18 09:44:03.238615 2025] [:error] [pid 24958:tid 24964] [client 85.203.23.43:59305] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/m.php"] [unique_id "aUNcY8kDOrUkd0wNm2FLIgAAAYM"]
[Thu Dec 18 09:44:03.633910 2025] [:error] [pid 25357:tid 25362] [client 85.203.23.41:42193] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUNcY4aT7bsEXnJVfJebowAAAcM"]
[Thu Dec 18 09:44:04.005349 2025] [:error] [pid 23557:tid 23609] [client 85.203.23.44:56783] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aUNcZBYcs6rFVxbdP_ljGwAAAFU"]
[Thu Dec 18 09:44:04.372249 2025] [:error] [pid 23645:tid 23670] [client 85.203.23.15:31725] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/et-cache/taxonomy/project_category/21/about.php"] [unique_id "aUNcZDf_Rx0Y0ao_QJi-TwAAAJc"]
[Thu Dec 18 09:44:04.736882 2025] [:error] [pid 24433:tid 24446] [client 85.203.23.15:64677] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/semplice4/assets/js/admin.php"] [unique_id "aUNcZJ4pN9ycmipm8ThW3QAAAQo"]
[Thu Dec 18 09:44:05.284285 2025] [:error] [pid 24433:tid 24451] [client 85.203.23.53:36965] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/Divi/common/admin.php"] [unique_id "aUNcZZ4pN9ycmipm8ThW4AAAAQ8"]
[Thu Dec 18 09:44:05.649606 2025] [:error] [pid 24433:tid 24460] [client 85.203.23.15:63969] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/classes/admin.php"] [unique_id "aUNcZZ4pN9ycmipm8ThW4wAAARg"]
[Thu Dec 18 09:44:06.089627 2025] [:error] [pid 24542:tid 24544] [client 85.203.23.42:64679] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/lib/sounds/admin.php"] [unique_id "aUNcZktQz4H2oS3NrDZOwwAAAUA"]
[Thu Dec 18 09:44:06.459128 2025] [:error] [pid 24542:tid 24558] [client 85.203.23.10:64395] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/portfolio/seton/about.php"] [unique_id "aUNcZktQz4H2oS3NrDZOxQAAAU4"]
[Thu Dec 18 09:44:06.846443 2025] [:error] [pid 25357:tid 25380] [client 85.203.23.32:40357] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/portfolio/about.php"] [unique_id "aUNcZoaT7bsEXnJVfJebpwAAAdU"]
[Thu Dec 18 09:44:07.221720 2025] [:error] [pid 25357:tid 25375] [client 85.203.23.25:41567] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/single/about.php"] [unique_id "aUNcZ4aT7bsEXnJVfJebrAAAAdA"]
[Thu Dec 18 09:44:07.584887 2025] [:error] [pid 24542:tid 24545] [client 85.203.23.53:49833] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/full/admin.php"] [unique_id "aUNcZ0tQz4H2oS3NrDZOzAAAAUE"]
[Thu Dec 18 09:44:07.958360 2025] [:error] [pid 24958:tid 24968] [client 85.203.23.9:21779] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/about.php"] [unique_id "aUNcZ8kDOrUkd0wNm2FLMAAAAYc"]
[Thu Dec 18 09:44:08.343563 2025] [:error] [pid 23558:tid 23627] [client 85.203.23.5:25273] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/fm.php"] [unique_id "aUNcaOHam9NbgPQa9uZkiAAAAMw"]
[Thu Dec 18 09:44:08.728087 2025] [:error] [pid 24542:tid 24546] [client 85.203.23.4:64161] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wolf.php"] [unique_id "aUNcaEtQz4H2oS3NrDZO0AAAAUI"]
[Thu Dec 18 09:44:09.139711 2025] [:error] [pid 23645:tid 23649] [client 85.203.23.7:40493] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/files/admin.php"] [unique_id "aUNcaTf_Rx0Y0ao_QJi-VQAAAII"]
[Thu Dec 18 09:44:09.527089 2025] [:error] [pid 24433:tid 24443] [client 85.203.23.52:32081] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/1.php"] [unique_id "aUNcaZ4pN9ycmipm8ThW7gAAAQc"]
[Thu Dec 18 09:44:09.911804 2025] [:error] [pid 25357:tid 25372] [client 85.203.23.39:57869] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/cei-Biz/1.php"] [unique_id "aUNcaYaT7bsEXnJVfJebtgAAAc0"]
[Thu Dec 18 09:44:15.286820 2025] [:error] [pid 24433:tid 24444] [client 85.203.23.10:63367] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bbn.php"] [unique_id "aUNcb54pN9ycmipm8ThW_QAAAQg"]
[Thu Dec 18 09:44:15.651695 2025] [:error] [pid 23558:tid 23625] [client 85.203.23.29:34321] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/w3-total-cache/inc/1.php"] [unique_id "aUNcb-Ham9NbgPQa9uZkkAAAAMo"]
[Thu Dec 18 09:44:16.016866 2025] [:error] [pid 24433:tid 24440] [client 85.203.23.53:61471] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/LayerSlider/wp/1.php"] [unique_id "aUNccJ4pN9ycmipm8ThXAAAAAQQ"]
[Thu Dec 18 09:44:16.384774 2025] [:error] [pid 24433:tid 24449] [client 85.203.23.40:41841] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/all-in-one-wp-security-and-firewall/1.php"] [unique_id "aUNccJ4pN9ycmipm8ThXAQAAAQ0"]
[Thu Dec 18 09:44:16.765459 2025] [:error] [pid 24958:tid 24983] [client 85.203.23.21:22145] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-sweep/1.php"] [unique_id "aUNccMkDOrUkd0wNm2FLQQAAAZY"]
[Thu Dec 18 09:44:17.154166 2025] [:error] [pid 24542:tid 24550] [client 85.203.23.16:28455] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/tablepress/1.php"] [unique_id "aUNccUtQz4H2oS3NrDZO3QAAAUY"]
[Thu Dec 18 09:44:17.540091 2025] [:error] [pid 23558:tid 23615] [client 85.203.23.32:46943] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/autoptimize/1.php"] [unique_id "aUNcceHam9NbgPQa9uZklQAAAMA"]
[Thu Dec 18 09:44:17.909036 2025] [:error] [pid 23556:tid 23564] [client 85.203.23.52:55139] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/ubermenu-icons/thom-hardy.php"] [unique_id "aUNccRnmLlk3u5yt9kE4RQAAAAQ"]
[Thu Dec 18 09:44:18.287494 2025] [:error] [pid 23558:tid 23627] [client 85.203.23.6:27991] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/newsletter/main/1.php"] [unique_id "aUNccuHam9NbgPQa9uZklwAAAMw"]
[Thu Dec 18 09:44:18.666485 2025] [:error] [pid 25357:tid 25383] [client 85.203.23.34:21329] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wordpress-seo-premium/deprecated/1.php"] [unique_id "aUNccoaT7bsEXnJVfJeb1gAAAdg"]
[Thu Dec 18 09:44:19.033505 2025] [:error] [pid 23558:tid 23630] [client 85.203.23.24:64957] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/backups/1.php"] [unique_id "aUNcc-Ham9NbgPQa9uZknQAAAM8"]
[Thu Dec 18 09:44:19.433953 2025] [:error] [pid 23645:tid 23652] [client 85.203.23.39:34297] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugin.php"] [unique_id "aUNcczf_Rx0Y0ao_QJi-WgAAAIU"]
[Thu Dec 18 09:44:19.828671 2025] [:error] [pid 24958:tid 24985] [client 85.203.23.26:44529] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/htdocs/shell.php"] [unique_id "aUNcc8kDOrUkd0wNm2FLVAAAAZg"]
[Thu Dec 18 09:44:20.198527 2025] [:error] [pid 24958:tid 24977] [client 85.203.23.12:44603] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/web/admin.php"] [unique_id "aUNcdMkDOrUkd0wNm2FLWAAAAZA"]
[Thu Dec 18 09:44:20.570372 2025] [:error] [pid 24958:tid 24981] [client 85.203.23.37:40803] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/public_html/shell.php"] [unique_id "aUNcdMkDOrUkd0wNm2FLXAAAAZQ"]
[Thu Dec 18 09:44:20.951586 2025] [:error] [pid 23556:tid 23568] [client 85.203.23.13:53177] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/site/admin.php"] [unique_id "aUNcdBnmLlk3u5yt9kE4TQAAAAg"]
[Thu Dec 18 09:44:21.329272 2025] [:error] [pid 24542:tid 24567] [client 85.203.23.33:55915] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/webroot/admin.php"] [unique_id "aUNcdUtQz4H2oS3NrDZO5gAAAVc"]
[Thu Dec 18 09:44:21.700300 2025] [:error] [pid 23557:tid 23593] [client 85.203.23.43:31971] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/www/shell.php"] [unique_id "aUNcdRYcs6rFVxbdP_ljLQAAAEU"]
[Thu Dec 18 09:44:22.070515 2025] [:error] [pid 23556:tid 23580] [client 85.203.23.28:33345] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/html/admin.php"] [unique_id "aUNcdhnmLlk3u5yt9kE4UwAAABQ"]
[Thu Dec 18 09:44:22.438860 2025] [:error] [pid 24542:tid 24558] [client 85.203.23.40:48289] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes2/blocks/column/"] [unique_id "aUNcdktQz4H2oS3NrDZO7AAAAU4"]
[Thu Dec 18 09:44:22.938528 2025] [:error] [pid 24958:tid 24965] [client 85.203.23.50:37903] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/dynamic_avia/"] [unique_id "aUNcdskDOrUkd0wNm2FLYgAAAYQ"]
[Thu Dec 18 09:44:23.303770 2025] [:error] [pid 24958:tid 24977] [client 85.203.23.45:36731] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aUNcd8kDOrUkd0wNm2FLYwAAAZA"]
[Thu Dec 18 09:44:23.672217 2025] [:error] [pid 23645:tid 23648] [client 85.203.23.39:55865] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/let.php"] [unique_id "aUNcdzf_Rx0Y0ao_QJi-ZgAAAIE"]
[Thu Dec 18 09:44:24.034698 2025] [:error] [pid 25357:tid 25366] [client 85.203.23.28:28041] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/edit.php"] [unique_id "aUNceIaT7bsEXnJVfJeb5wAAAcc"]
[Thu Dec 18 09:44:24.404114 2025] [:error] [pid 25357:tid 25364] [client 85.203.23.9:22493] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/areak/areak1.php"] [unique_id "aUNceIaT7bsEXnJVfJeb6wAAAcU"]
[Thu Dec 18 09:44:24.813795 2025] [:error] [pid 25357:tid 25376] [client 85.203.23.24:24753] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/11.php"] [unique_id "aUNceIaT7bsEXnJVfJeb7wAAAdE"]
[Thu Dec 18 09:44:25.241134 2025] [:error] [pid 23556:tid 23580] [client 85.203.23.22:29155] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dpsnv/classes/font/"] [unique_id "aUNceRnmLlk3u5yt9kE4YAAAABQ"]
[Thu Dec 18 09:44:25.626755 2025] [:error] [pid 24542:tid 24557] [client 85.203.23.34:59795] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUNceUtQz4H2oS3NrDZO7wAAAU0"]
[Thu Dec 18 09:44:26.004354 2025] [:error] [pid 25357:tid 25359] [client 85.203.23.40:29857] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/chosen.php"] [unique_id "aUNceoaT7bsEXnJVfJeb9AAAAcA"]
[Thu Dec 18 09:44:26.409233 2025] [:error] [pid 23556:tid 23576] [client 85.203.23.43:53545] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aUNcehnmLlk3u5yt9kE4ZQAAABA"]
[Thu Dec 18 09:44:26.775410 2025] [:error] [pid 24542:tid 24565] [client 85.203.23.26:44633] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/"] [unique_id "aUNcektQz4H2oS3NrDZO9AAAAVU"]
[Thu Dec 18 09:44:27.151313 2025] [:error] [pid 23556:tid 23583] [client 85.203.23.16:56161] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aUNcexnmLlk3u5yt9kE4ZwAAABc"]
[Thu Dec 18 09:44:27.522373 2025] [:error] [pid 23557:tid 23602] [client 85.203.23.24:36333] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/new.php"] [unique_id "aUNcexYcs6rFVxbdP_ljOQAAAE4"]
[Thu Dec 18 09:44:32.907106 2025] [:error] [pid 23645:tid 23647] [client 85.203.23.48:55707] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aUNcgDf_Rx0Y0ao_QJi-dwAAAIA"]
[Thu Dec 18 09:44:33.464744 2025] [:error] [pid 23557:tid 23592] [client 85.203.23.30:63697] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/themes/wp-cron.php"] [unique_id "aUNcgRYcs6rFVxbdP_ljSwAAAEQ"]
[Thu Dec 18 09:44:33.895265 2025] [:error] [pid 23645:tid 23653] [client 85.203.23.3:58907] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/cover/cover/theme-footer.php"] [unique_id "aUNcgTf_Rx0Y0ao_QJi-fQAAAIY"]
[Thu Dec 18 09:44:34.265691 2025] [:error] [pid 23556:tid 23569] [client 85.203.23.15:54591] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-posts/latest-posts/faq-builder.php"] [unique_id "aUNcghnmLlk3u5yt9kE4bAAAAAk"]
[Thu Dec 18 09:44:34.634670 2025] [:error] [pid 23645:tid 23655] [client 85.203.23.22:64935] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aUNcgjf_Rx0Y0ao_QJi-fwAAAIg"]
[Thu Dec 18 09:44:35.022993 2025] [:error] [pid 24542:tid 24560] [client 85.203.23.45:23317] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/algovge.php"] [unique_id "aUNcg0tQz4H2oS3NrDZPBAAAAVA"]
[Thu Dec 18 09:44:35.392899 2025] [:error] [pid 25357:tid 25363] [client 85.203.23.22:48021] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/klex.php"] [unique_id "aUNcg4aT7bsEXnJVfJecCQAAAcQ"]
[Thu Dec 18 09:44:35.773032 2025] [:error] [pid 25357:tid 25361] [client 85.203.23.48:45257] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/datate.php"] [unique_id "aUNcg4aT7bsEXnJVfJecDAAAAcI"]
[Thu Dec 18 09:44:36.143066 2025] [:error] [pid 24542:tid 24555] [client 85.203.23.48:30699] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/alfa.php"] [unique_id "aUNchEtQz4H2oS3NrDZPCAAAAUs"]
[Thu Dec 18 09:44:36.517612 2025] [:error] [pid 24958:tid 24974] [client 85.203.23.15:58955] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/zczv.php"] [unique_id "aUNchMkDOrUkd0wNm2FLewAAAY0"]
[Thu Dec 18 09:44:37.029567 2025] [:error] [pid 23558:tid 23629] [client 85.203.23.11:48949] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-speed.php"] [unique_id "aUNcheHam9NbgPQa9uZkrgAAAM4"]
[Thu Dec 18 09:44:37.399404 2025] [:error] [pid 25357:tid 25375] [client 85.203.23.11:46643] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/tx1.php"] [unique_id "aUNchYaT7bsEXnJVfJecFAAAAdA"]
[Thu Dec 18 09:44:37.789002 2025] [:error] [pid 23645:tid 23660] [client 85.203.23.16:61225] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-classic-editor.php"] [unique_id "aUNchTf_Rx0Y0ao_QJi-iwAAAI0"]
[Thu Dec 18 09:44:38.170714 2025] [:error] [pid 24542:tid 24550] [client 85.203.23.20:29263] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ox.php"] [unique_id "aUNchktQz4H2oS3NrDZPCgAAAUY"]
[Thu Dec 18 09:44:38.542385 2025] [:error] [pid 23645:tid 23659] [client 85.203.23.31:23503] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-error.php"] [unique_id "aUNchjf_Rx0Y0ao_QJi-lgAAAIw"]
[Thu Dec 18 09:44:39.123998 2025] [:error] [pid 23558:tid 23623] [client 85.203.23.14:57085] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/tx1.php"] [unique_id "aUNch-Ham9NbgPQa9uZkrwAAAMg"]
[Thu Dec 18 09:44:39.491679 2025] [:error] [pid 23558:tid 23638] [client 85.203.23.33:25869] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/templates/xex.php"] [unique_id "aUNch-Ham9NbgPQa9uZksgAAANc"]
[Thu Dec 18 09:44:39.873345 2025] [:error] [pid 24542:tid 24544] [client 85.203.23.35:35713] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUNch0tQz4H2oS3NrDZPEAAAAUA"]
[Thu Dec 18 09:44:40.238326 2025] [:error] [pid 23558:tid 23627] [client 85.203.23.10:39785] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/themes.php"] [unique_id "aUNciOHam9NbgPQa9uZktgAAAMw"]
[Thu Dec 18 09:44:40.628103 2025] [:error] [pid 24958:tid 24972] [client 85.203.23.4:42869] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUNciMkDOrUkd0wNm2FLgwAAAYs"]
[Thu Dec 18 09:44:40.998004 2025] [:error] [pid 24433:tid 24456] [client 85.203.23.14:34453] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aUNciJ4pN9ycmipm8ThXHAAAARQ"]
[Thu Dec 18 09:44:41.376852 2025] [:error] [pid 23558:tid 23630] [client 85.203.23.2:42065] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aUNcieHam9NbgPQa9uZkuwAAAM8"]
[Thu Dec 18 09:44:41.992461 2025] [:error] [pid 23556:tid 23564] [client 85.203.23.12:28693] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/vFWbf/wp-conflg.php"] [unique_id "aUNciRnmLlk3u5yt9kE4cQAAAAQ"]
[Thu Dec 18 09:44:42.358924 2025] [:error] [pid 23558:tid 23632] [client 85.203.23.27:61049] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentythree/locks.php"] [unique_id "aUNciuHam9NbgPQa9uZkwAAAANE"]
[Thu Dec 18 09:44:42.768402 2025] [:error] [pid 24542:tid 24546] [client 85.203.23.45:42537] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/locks.php"] [unique_id "aUNciktQz4H2oS3NrDZPEgAAAUI"]
[Thu Dec 18 09:44:43.137526 2025] [:error] [pid 23558:tid 23615] [client 85.203.23.5:35317] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aUNci-Ham9NbgPQa9uZkwgAAAMA"]
[Thu Dec 18 09:44:43.510116 2025] [:error] [pid 24958:tid 24974] [client 85.203.23.19:28229] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/onXRoy.php"] [unique_id "aUNci8kDOrUkd0wNm2FLjwAAAY0"]
[Thu Dec 18 09:44:43.899512 2025] [:error] [pid 23557:tid 23597] [client 85.203.23.9:48711] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/checker/wsa.php"] [unique_id "aUNcixYcs6rFVxbdP_ljWwAAAEk"]
[Thu Dec 18 09:44:44.286626 2025] [:error] [pid 24433:tid 24451] [client 85.203.23.17:36113] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/Contrller.php"] [unique_id "aUNcjJ4pN9ycmipm8ThXJwAAAQ8"]
[Thu Dec 18 09:44:44.659192 2025] [:error] [pid 24958:tid 24966] [client 85.203.23.11:45531] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/goup.php"] [unique_id "aUNcjMkDOrUkd0wNm2FLlgAAAYU"]
[Thu Dec 18 09:44:45.030229 2025] [:error] [pid 23558:tid 23628] [client 85.203.23.9:54831] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-super-cache/partials/about.php"] [unique_id "aUNcjeHam9NbgPQa9uZkxwAAAM0"]
[Thu Dec 18 09:44:45.394722 2025] [:error] [pid 23558:tid 23630] [client 85.203.23.51:36133] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aUNcjeHam9NbgPQa9uZkygAAAM8"]
[Thu Dec 18 09:44:45.783081 2025] [:error] [pid 23558:tid 23635] [client 85.203.23.25:41507] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aUNcjeHam9NbgPQa9uZkywAAANQ"]
[Thu Dec 18 09:44:46.149963 2025] [:error] [pid 23645:tid 23664] [client 85.203.23.25:52457] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/hex.php"] [unique_id "aUNcjjf_Rx0Y0ao_QJi-qQAAAJE"]
[Thu Dec 18 09:44:46.511603 2025] [:error] [pid 25357:tid 25364] [client 85.203.23.53:31745] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/about.php"] [unique_id "aUNcjoaT7bsEXnJVfJecJgAAAcU"]
[Thu Dec 18 09:44:46.943260 2025] [:error] [pid 24542:tid 24566] [client 85.203.23.34:52493] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/xddqann/"] [unique_id "aUNcjktQz4H2oS3NrDZPGAAAAVY"]
[Thu Dec 18 09:44:47.308688 2025] [:error] [pid 24958:tid 24972] [client 85.203.23.6:29971] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/locks.php"] [unique_id "aUNcj8kDOrUkd0wNm2FLmQAAAYs"]
[Thu Dec 18 09:44:47.746342 2025] [:error] [pid 24958:tid 24977] [client 85.203.23.28:50725] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/tetracl/"] [unique_id "aUNcj8kDOrUkd0wNm2FLmgAAAZA"]
[Thu Dec 18 09:44:48.119993 2025] [:error] [pid 24958:tid 24979] [client 85.203.23.7:38471] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Iitespeed-cache/drive.php"] [unique_id "aUNckMkDOrUkd0wNm2FLmwAAAZI"]
[Thu Dec 18 09:44:48.496993 2025] [:error] [pid 24958:tid 24971] [client 85.203.23.50:34929] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/function/test.php"] [unique_id "aUNckMkDOrUkd0wNm2FLngAAAYo"]
[Thu Dec 18 09:44:48.865669 2025] [:error] [pid 23558:tid 23623] [client 85.203.23.25:29245] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/connect-polylang-elementor/includes/locks.php"] [unique_id "aUNckOHam9NbgPQa9uZk1QAAAMg"]
[Thu Dec 18 09:44:49.229740 2025] [:error] [pid 25357:tid 25378] [client 85.203.23.30:23119] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/twentytwentyfive/locks.php"] [unique_id "aUNckYaT7bsEXnJVfJecOAAAAdM"]
[Thu Dec 18 09:44:49.673299 2025] [:error] [pid 23556:tid 23571] [client 85.203.23.30:32643] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/column/"] [unique_id "aUNckRnmLlk3u5yt9kE4eQAAAAs"]
[Thu Dec 18 09:44:50.037847 2025] [:error] [pid 25357:tid 25365] [client 85.203.23.4:53759] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/george-lois-wpcom/t.php"] [unique_id "aUNckoaT7bsEXnJVfJecPgAAAcY"]
[Thu Dec 18 09:44:50.405211 2025] [:error] [pid 25357:tid 25371] [client 85.203.23.52:61807] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp_helper_hzkys/shell.php"] [unique_id "aUNckoaT7bsEXnJVfJecQAAAAcw"]
[Thu Dec 18 09:44:50.788247 2025] [:error] [pid 24958:tid 24972] [client 85.203.23.34:54457] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/nux.php"] [unique_id "aUNckskDOrUkd0wNm2FLpAAAAYs"]
[Thu Dec 18 09:44:51.180806 2025] [:error] [pid 23558:tid 23627] [client 85.203.23.35:20085] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/foter.php"] [unique_id "aUNck-Ham9NbgPQa9uZk3wAAAMw"]
[Thu Dec 18 09:44:51.560212 2025] [:error] [pid 24958:tid 24974] [client 85.203.23.34:55063] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/cache/et/"] [unique_id "aUNck8kDOrUkd0wNm2FLpgAAAY0"]
[Thu Dec 18 09:44:51.944143 2025] [:error] [pid 23556:tid 23568] [client 85.203.23.3:35583] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/amp/assets/images/about.php"] [unique_id "aUNckxnmLlk3u5yt9kE4hAAAAAg"]
[Thu Dec 18 09:44:52.319887 2025] [:error] [pid 24542:tid 24561] [client 85.203.23.41:44513] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/rstsgd.php"] [unique_id "aUNclEtQz4H2oS3NrDZPGQAAAVE"]
[Thu Dec 18 09:44:52.866802 2025] [:error] [pid 23645:tid 23658] [client 85.203.23.33:60369] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/alf.php"] [unique_id "aUNclDf_Rx0Y0ao_QJi-sgAAAIs"]
[Thu Dec 18 09:44:53.231367 2025] [:error] [pid 23557:tid 23609] [client 85.203.23.52:20715] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUNclRYcs6rFVxbdP_ljXgAAAFU"]
[Thu Dec 18 09:44:53.781288 2025] [:error] [pid 24958:tid 24985] [client 85.203.23.47:32553] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/prayer_intentions.php"] [unique_id "aUNclckDOrUkd0wNm2FLqgAAAZg"]
[Thu Dec 18 09:44:54.203658 2025] [:error] [pid 24433:tid 24458] [client 85.203.23.29:23409] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Cookie/"] [unique_id "aUNclp4pN9ycmipm8ThXNQAAARY"]
[Thu Dec 18 09:44:54.564913 2025] [:error] [pid 23645:tid 23657] [client 85.203.23.49:63331] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ufbngowues/main.php"] [unique_id "aUNcljf_Rx0Y0ao_QJi-tAAAAIo"]
[Thu Dec 18 09:44:54.941975 2025] [:error] [pid 25357:tid 25375] [client 85.203.23.2:43175] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/tmp/src/"] [unique_id "aUNcloaT7bsEXnJVfJecSAAAAdA"]
[Thu Dec 18 09:44:55.478416 2025] [:error] [pid 23557:tid 23594] [client 85.203.23.40:25611] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/templates/import-base/pages-parts/step4/"] [unique_id "aUNclxYcs6rFVxbdP_ljYQAAAEY"]
[Thu Dec 18 09:44:55.843901 2025] [:error] [pid 23556:tid 23579] [client 85.203.23.30:20507] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/wp-includes/js/tinymce/skins/lightgray/fonts/cm8odl/aunvr.php"] [unique_id "aUNclxnmLlk3u5yt9kE4jgAAABM"]
[Thu Dec 18 09:44:56.235187 2025] [:error] [pid 23558:tid 23624] [client 85.203.23.51:35289] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/wp-includes/css/dist/patterns/"] [unique_id "aUNcmOHam9NbgPQa9uZk7gAAAMk"]
[Thu Dec 18 09:44:56.670353 2025] [:error] [pid 25357:tid 25364] [client 85.203.23.13:38051] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/wp-includes/blocks/post-author-biography/"] [unique_id "aUNcmIaT7bsEXnJVfJecSgAAAcU"]
[Thu Dec 18 09:44:57.108707 2025] [:error] [pid 23645:tid 23670] [client 85.203.23.11:56381] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/wp-content/et-cache/fr_FR/"] [unique_id "aUNcmTf_Rx0Y0ao_QJi-twAAAJc"]
[Thu Dec 18 09:44:57.485808 2025] [:error] [pid 23556:tid 23575] [client 85.203.23.38:52343] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/wp-content/themes/Divi/includes/widgets/"] [unique_id "aUNcmRnmLlk3u5yt9kE4kQAAAA8"]
[Thu Dec 18 09:44:57.855979 2025] [:error] [pid 24958:tid 24980] [client 85.203.23.43:22761] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/new.php"] [unique_id "aUNcmckDOrUkd0wNm2FLswAAAZM"]
[Thu Dec 18 09:44:58.419239 2025] [:error] [pid 23645:tid 23662] [client 85.203.23.22:24341] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/magazineposts/"] [unique_id "aUNcmjf_Rx0Y0ao_QJi-uwAAAI8"]
[Thu Dec 18 09:44:58.811512 2025] [:error] [pid 23558:tid 23628] [client 85.203.23.53:43183] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/flatco/assets/"] [unique_id "aUNcmuHam9NbgPQa9uZk-wAAAM0"]
[Thu Dec 18 09:44:59.314500 2025] [:error] [pid 23645:tid 23656] [client 85.203.23.3:20653] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aUNcmzf_Rx0Y0ao_QJi-vAAAAIk"]
[Thu Dec 18 09:44:59.690702 2025] [:error] [pid 23557:tid 23591] [client 85.203.23.21:31877] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/Avada/woocommerce/checkout/"] [unique_id "aUNcmxYcs6rFVxbdP_ljaAAAAEM"]
[Thu Dec 18 09:45:00.065005 2025] [:error] [pid 24542:tid 24560] [client 85.203.23.9:57641] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/target/admin/"] [unique_id "aUNcnEtQz4H2oS3NrDZPNQAAAVA"]
[Thu Dec 18 09:45:00.429404 2025] [:error] [pid 24542:tid 24567] [client 85.203.23.26:30241] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/dt-the7/inc/mods/mod-woocommerce/assets/"] [unique_id "aUNcnEtQz4H2oS3NrDZPOQAAAVc"]
[Thu Dec 18 09:45:00.896455 2025] [:error] [pid 23558:tid 23621] [client 85.203.23.44:57803] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aUNcnOHam9NbgPQa9uZlAQAAAMY"]
[Thu Dec 18 09:45:01.331627 2025] [:error] [pid 24433:tid 24440] [client 85.203.23.9:56523] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/junkfood/mainhack.php"] [unique_id "aUNcnZ4pN9ycmipm8ThXUwAAAQQ"]
[Thu Dec 18 09:45:01.718647 2025] [:error] [pid 23558:tid 23638] [client 85.203.23.36:48507] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/maks.php"] [unique_id "aUNcneHam9NbgPQa9uZlAgAAANc"]
[Thu Dec 18 09:45:02.270845 2025] [:error] [pid 24958:tid 24963] [client 85.203.23.45:65497] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bbpress/mainhack.php"] [unique_id "aUNcnskDOrUkd0wNm2FLvAAAAYI"]
[Thu Dec 18 09:45:02.639138 2025] [:error] [pid 23556:tid 23580] [client 85.203.23.36:47919] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/cache/"] [unique_id "aUNcnhnmLlk3u5yt9kE4lgAAABQ"]
[Thu Dec 18 09:45:03.058527 2025] [:error] [pid 24542:tid 24559] [client 85.203.23.22:48579] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/maintenance.php"] [unique_id "aUNcn0tQz4H2oS3NrDZPOwAAAU8"]
[Thu Dec 18 09:45:03.424932 2025] [:error] [pid 24958:tid 24962] [client 85.203.23.16:46251] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/file_folder_manager.php"] [unique_id "aUNcn8kDOrUkd0wNm2FLwgAAAYE"]
[Thu Dec 18 09:45:03.841795 2025] [:error] [pid 23558:tid 23637] [client 85.203.23.38:23377] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp.php"] [unique_id "aUNcn-Ham9NbgPQa9uZlBQAAANY"]
[Thu Dec 18 09:45:04.205599 2025] [:error] [pid 24542:tid 24552] [client 85.203.23.37:29877] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/cheka.php"] [unique_id "aUNcoEtQz4H2oS3NrDZPPQAAAUg"]
[Thu Dec 18 09:45:04.574917 2025] [:error] [pid 24958:tid 24969] [client 85.203.23.32:51453] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dgzax.php"] [unique_id "aUNcoMkDOrUkd0wNm2FLwwAAAYg"]
[Thu Dec 18 09:45:04.992313 2025] [:error] [pid 24958:tid 24976] [client 85.203.23.22:55649] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/Contrller.php"] [unique_id "aUNcoMkDOrUkd0wNm2FLxAAAAY8"]
[Thu Dec 18 09:45:05.363525 2025] [:error] [pid 23645:tid 23648] [client 85.203.23.51:38299] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aUNcoTf_Rx0Y0ao_QJi-ygAAAIE"]
[Thu Dec 18 09:45:05.731093 2025] [:error] [pid 24433:tid 24443] [client 85.203.23.9:32437] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/search/just2.php"] [unique_id "aUNcoZ4pN9ycmipm8ThXWAAAAQc"]
[Thu Dec 18 09:45:06.097392 2025] [:error] [pid 25357:tid 25359] [client 85.203.23.4:42359] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/tag-cloud/admin.php"] [unique_id "aUNcooaT7bsEXnJVfJecbQAAAcA"]
[Thu Dec 18 09:45:06.474632 2025] [:error] [pid 24433:tid 24451] [client 85.203.23.2:54791] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/m.php"] [unique_id "aUNcop4pN9ycmipm8ThXWgAAAQ8"]
[Thu Dec 18 09:45:06.839447 2025] [:error] [pid 25357:tid 25363] [client 85.203.23.20:52651] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/prv8.php"] [unique_id "aUNcooaT7bsEXnJVfJecbwAAAcQ"]
[Thu Dec 18 09:45:07.247085 2025] [:error] [pid 24433:tid 24448] [client 85.203.23.5:22651] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/class-json.php"] [unique_id "aUNco54pN9ycmipm8ThXWwAAAQw"]
[Thu Dec 18 09:45:07.627213 2025] [:error] [pid 23557:tid 23604] [client 85.203.23.53:59541] [client 85.203.23.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/vpihdxu/wp-loader.php"] [unique_id "aUNcoxYcs6rFVxbdP_ljgwAAAFA"]
[Thu Dec 18 09:45:08.049673 2025] [:error] [pid 24958:tid 24982] [client 85.203.23.36:53623] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/dxkmb/"] [unique_id "aUNcpMkDOrUkd0wNm2FLyQAAAZU"]
[Thu Dec 18 09:45:08.479868 2025] [:error] [pid 23645:tid 23659] [client 85.203.23.15:64253] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php"] [unique_id "aUNcpDf_Rx0Y0ao_QJi-zQAAAIw"]
[Thu Dec 18 09:45:08.861386 2025] [:error] [pid 24958:tid 24973] [client 85.203.23.35:63123] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aUNcpMkDOrUkd0wNm2FLzAAAAYw"]
[Thu Dec 18 09:45:09.449429 2025] [:error] [pid 24433:tid 24436] [client 85.203.23.38:26037] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aUNcpZ4pN9ycmipm8ThXZAAAAQA"]
[Thu Dec 18 09:45:09.814016 2025] [:error] [pid 24433:tid 24442] [client 85.203.23.51:58837] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/lock.php"] [unique_id "aUNcpZ4pN9ycmipm8ThXaAAAAQY"]
[Thu Dec 18 09:45:10.177732 2025] [:error] [pid 25357:tid 25367] [client 85.203.23.52:60479] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/tag-cloud.php"] [unique_id "aUNcpoaT7bsEXnJVfJecdwAAAcg"]
[Thu Dec 18 09:45:10.542629 2025] [:error] [pid 24542:tid 24564] [client 85.203.23.39:29833] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/mabar88/inc/compatibility/learndash/customizer/sections/layout/lock.php"] [unique_id "aUNcpktQz4H2oS3NrDZPQAAAAVQ"]
[Thu Dec 18 09:45:10.941270 2025] [:error] [pid 23557:tid 23608] [client 85.203.23.23:36597] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aUNcphYcs6rFVxbdP_ljjAAAAFQ"]
[Thu Dec 18 09:45:11.464295 2025] [:error] [pid 24433:tid 24458] [client 85.203.23.39:23749] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/mcyru/alfa_asli.php"] [unique_id "aUNcp54pN9ycmipm8ThXbQAAARY"]
[Thu Dec 18 09:45:11.846164 2025] [:error] [pid 24433:tid 24445] [client 85.203.23.26:32347] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-terms/vx.php"] [unique_id "aUNcp54pN9ycmipm8ThXcQAAAQk"]
[Thu Dec 18 09:45:12.244242 2025] [:error] [pid 25357:tid 25383] [client 85.203.23.22:43077] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-content/"] [unique_id "aUNcqIaT7bsEXnJVfJecfwAAAdg"]
[Thu Dec 18 09:45:17.872020 2025] [:error] [pid 24958:tid 24969] [client 85.203.23.9:43591] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includesdgfsa/Text/Diff/"] [unique_id "aUNcrckDOrUkd0wNm2FL6QAAAYg"]
[Thu Dec 18 09:45:18.586191 2025] [:error] [pid 23558:tid 23616] [client 85.203.23.32:53859] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/eflhedn/"] [unique_id "aUNcruHam9NbgPQa9uZlGAAAAME"]
[Thu Dec 18 09:45:18.977378 2025] [:error] [pid 24958:tid 24980] [client 85.203.23.43:42151] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aUNcrskDOrUkd0wNm2FL7wAAAZM"]
[Thu Dec 18 09:45:19.370216 2025] [:error] [pid 24542:tid 24554] [client 85.203.23.43:56929] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/ryan/admin/main/inc/callbacks/sanitize_callback/select_faicons/lock.php"] [unique_id "aUNcr0tQz4H2oS3NrDZPQwAAAUo"]
[Thu Dec 18 09:45:19.739375 2025] [:error] [pid 25357:tid 25362] [client 85.203.23.23:29653] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/prv8.php"] [unique_id "aUNcr4aT7bsEXnJVfJecmAAAAcM"]
[Thu Dec 18 09:45:20.105306 2025] [:error] [pid 23558:tid 23619] [client 85.203.23.31:65375] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/mapiezRi.php"] [unique_id "aUNcsOHam9NbgPQa9uZlHAAAAMQ"]
[Thu Dec 18 09:45:20.475631 2025] [:error] [pid 23557:tid 23612] [client 85.203.23.16:20391] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/royal-elementor-addons/modules/theme-builder/post-navigation/widgets/lock.php"] [unique_id "aUNcsBYcs6rFVxbdP_ljnwAAAFg"]
[Thu Dec 18 09:45:20.840247 2025] [:error] [pid 25357:tid 25373] [client 85.203.23.9:31793] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aUNcsIaT7bsEXnJVfJecnQAAAc4"]
[Thu Dec 18 09:45:21.209783 2025] [:error] [pid 25357:tid 25381] [client 85.203.23.20:29531] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aUNcsYaT7bsEXnJVfJecoAAAAdY"]
[Thu Dec 18 09:45:21.579933 2025] [:error] [pid 25357:tid 25380] [client 85.203.23.37:50671] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aUNcsYaT7bsEXnJVfJecoQAAAdU"]
[Thu Dec 18 09:45:21.943710 2025] [:error] [pid 23557:tid 23605] [client 85.203.23.7:40871] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/uuj_gagal.php"] [unique_id "aUNcsRYcs6rFVxbdP_ljoQAAAFE"]
[Thu Dec 18 09:45:22.367451 2025] [:error] [pid 23556:tid 23561] [client 85.203.23.7:36091] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aUNcshnmLlk3u5yt9kE4nwAAAAE"]
[Thu Dec 18 09:45:22.764949 2025] [:error] [pid 23558:tid 23629] [client 85.203.23.36:36037] [client 85.203.23.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wtu_gagal.php"] [unique_id "aUNcsuHam9NbgPQa9uZlIAAAAM4"]
[Thu Dec 18 09:45:23.149369 2025] [:error] [pid 25357:tid 25363] [client 85.203.23.42:25423] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pgaas/"] [unique_id "aUNcs4aT7bsEXnJVfJecogAAAcQ"]
[Thu Dec 18 09:45:23.566713 2025] [:error] [pid 25357:tid 25379] [client 85.203.23.48:21683] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/mtodm/"] [unique_id "aUNcs4aT7bsEXnJVfJecowAAAdQ"]
[Thu Dec 18 09:45:25.536332 2025] [:error] [pid 24433:tid 24452] [client 85.203.23.32:64699] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aUNctZ4pN9ycmipm8ThXfwAAARA"]
[Thu Dec 18 09:45:26.096694 2025] [:error] [pid 24433:tid 24445] [client 85.203.23.6:49611] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-pridmag/load.php"] [unique_id "aUNctp4pN9ycmipm8ThXgAAAAQk"]
[Thu Dec 18 09:45:26.487250 2025] [:error] [pid 25357:tid 25361] [client 85.203.23.11:23415] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/codex.php"] [unique_id "aUNctoaT7bsEXnJVfJecpwAAAcI"]
[Thu Dec 18 09:45:26.849194 2025] [:error] [pid 23557:tid 23592] [client 85.203.23.52:59383] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/codex.php"] [unique_id "aUNcthYcs6rFVxbdP_ljqQAAAEQ"]
[Thu Dec 18 09:45:27.240914 2025] [:error] [pid 24433:tid 24436] [client 85.203.23.22:37131] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/areak1.php"] [unique_id "aUNct54pN9ycmipm8ThXggAAAQA"]
[Thu Dec 18 09:45:27.694785 2025] [:error] [pid 23645:tid 23666] [client 85.203.23.26:41871] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/moon.php"] [unique_id "aUNctzf_Rx0Y0ao_QJi-3gAAAJM"]
[Thu Dec 18 09:45:28.267945 2025] [:error] [pid 23557:tid 23593] [client 85.203.23.6:37747] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/futurio/lib/customizer/"] [unique_id "aUNcuBYcs6rFVxbdP_ljsgAAAEU"]
[Thu Dec 18 09:45:28.632417 2025] [:error] [pid 25357:tid 25367] [client 85.203.23.39:56187] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/class-wp-site-health-xml.php"] [unique_id "aUNcuIaT7bsEXnJVfJecrAAAAcg"]
[Thu Dec 18 09:45:29.056237 2025] [:error] [pid 23557:tid 23599] [client 85.203.23.20:36553] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/ms-admin-filters-alpha.php"] [unique_id "aUNcuRYcs6rFVxbdP_ljswAAAEs"]
[Thu Dec 18 09:45:29.424123 2025] [:error] [pid 23645:tid 23661] [client 85.203.23.14:24385] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/upload-event.php"] [unique_id "aUNcuTf_Rx0Y0ao_QJi-4gAAAI4"]
[Thu Dec 18 09:45:29.796624 2025] [:error] [pid 23645:tid 23667] [client 85.203.23.30:29357] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-client-sql.php"] [unique_id "aUNcuTf_Rx0Y0ao_QJi-4wAAAJQ"]
[Thu Dec 18 09:45:30.166128 2025] [:error] [pid 23645:tid 23649] [client 85.203.23.18:34865] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/222.php"] [unique_id "aUNcujf_Rx0Y0ao_QJi-5gAAAII"]
[Thu Dec 18 09:45:30.767817 2025] [:error] [pid 25357:tid 25382] [client 85.203.23.27:33235] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/search/"] [unique_id "aUNcuoaT7bsEXnJVfJecsAAAAdc"]
[Thu Dec 18 09:45:31.181688 2025] [:error] [pid 23645:tid 23663] [client 85.203.23.45:48841] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/require-static-blocks-add.php"] [unique_id "aUNcuzf_Rx0Y0ao_QJi-6gAAAJA"]
[Thu Dec 18 09:45:31.549375 2025] [:error] [pid 23557:tid 23591] [client 85.203.23.3:35663] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aUNcuxYcs6rFVxbdP_ljtgAAAEM"]
[Thu Dec 18 09:45:31.923674 2025] [:error] [pid 23556:tid 23564] [client 85.203.23.11:62901] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/post-thumbnail-template-call.php"] [unique_id "aUNcuxnmLlk3u5yt9kE4pwAAAAQ"]
[Thu Dec 18 09:45:32.303287 2025] [:error] [pid 25357:tid 25371] [client 85.203.23.50:51011] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/site-logo/admin.php"] [unique_id "aUNcvIaT7bsEXnJVfJecuAAAAcw"]
[Thu Dec 18 09:45:32.668158 2025] [:error] [pid 25357:tid 25370] [client 85.203.23.7:43917] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor-pro/admin.php"] [unique_id "aUNcvIaT7bsEXnJVfJecuwAAAcs"]
[Thu Dec 18 09:45:33.263047 2025] [:error] [pid 23557:tid 23593] [client 85.203.23.30:41129] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wc-logs/"] [unique_id "aUNcvRYcs6rFVxbdP_ljvwAAAEU"]
[Thu Dec 18 09:45:33.658665 2025] [:error] [pid 24433:tid 24457] [client 85.203.23.48:37311] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/amp.php"] [unique_id "aUNcvZ4pN9ycmipm8ThXjwAAARU"]
[Thu Dec 18 09:45:34.040618 2025] [:error] [pid 25357:tid 25359] [client 85.203.23.2:61375] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/lock.php"] [unique_id "aUNcvoaT7bsEXnJVfJecvwAAAcA"]
[Thu Dec 18 09:45:34.421057 2025] [:error] [pid 24542:tid 24553] [client 85.203.23.28:26209] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/classwithtostring.php"] [unique_id "aUNcvktQz4H2oS3NrDZPXQAAAUk"]
[Thu Dec 18 09:45:34.783430 2025] [:error] [pid 23557:tid 23600] [client 85.203.23.50:49845] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/locks.php"] [unique_id "aUNcvhYcs6rFVxbdP_ljwQAAAEw"]
[Thu Dec 18 09:45:35.164906 2025] [:error] [pid 24433:tid 24442] [client 85.203.23.9:20689] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-content/post-content/lock.php"] [unique_id "aUNcv54pN9ycmipm8ThXkgAAAQY"]
[Thu Dec 18 09:45:35.587729 2025] [:error] [pid 23557:tid 23601] [client 85.203.23.18:29203] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/mabar88/inc/addons/transparent-header/assets/lock.php"] [unique_id "aUNcvxYcs6rFVxbdP_ljxAAAAE0"]
[Thu Dec 18 09:45:36.233102 2025] [:error] [pid 24433:tid 24441] [client 85.203.23.14:28883] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/about.php"] [unique_id "aUNcwJ4pN9ycmipm8ThXlwAAAQU"]
[Thu Dec 18 09:45:37.043811 2025] [:error] [pid 25357:tid 25359] [client 85.203.23.51:64193] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aUNcwYaT7bsEXnJVfJecxwAAAcA"]
[Thu Dec 18 09:45:42.465493 2025] [:error] [pid 23556:tid 23560] [client 85.203.23.7:40403] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/zwz.php"] [unique_id "aUNcxhnmLlk3u5yt9kE4vwAAAAA"]
[Thu Dec 18 09:45:42.834838 2025] [:error] [pid 23556:tid 23580] [client 85.203.23.5:24623] [client 85.203.23.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-domain.php"] [unique_id "aUNcxhnmLlk3u5yt9kE4wAAAABQ"]
[Thu Dec 18 09:45:43.215966 2025] [:error] [pid 25357:tid 25362] [client 85.203.23.28:46483] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-edit-link/admin.php"] [unique_id "aUNcx4aT7bsEXnJVfJec2QAAAcM"]
[Thu Dec 18 09:45:48.586999 2025] [:error] [pid 24958:tid 24965] [client 85.203.23.20:31845] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wso.php"] [unique_id "aUNczMkDOrUkd0wNm2FMOAAAAYQ"]
[Thu Dec 18 09:45:48.950779 2025] [:error] [pid 23645:tid 23653] [client 85.203.23.8:34449] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css.php"] [unique_id "aUNczDf_Rx0Y0ao_QJi-_AAAAIY"]
[Thu Dec 18 09:45:49.359168 2025] [:error] [pid 23645:tid 23659] [client 85.203.23.9:59045] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/ru.php"] [unique_id "aUNczTf_Rx0Y0ao_QJi-_wAAAIw"]
[Thu Dec 18 09:45:49.722811 2025] [:error] [pid 25357:tid 25379] [client 85.203.23.12:27195] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp_helper_t46pm/shell.php"] [unique_id "aUNczYaT7bsEXnJVfJec3wAAAdQ"]
[Thu Dec 18 09:45:50.087451 2025] [:error] [pid 24433:tid 24446] [client 85.203.23.4:34217] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp_helper_fpne3/shell.php"] [unique_id "aUNczp4pN9ycmipm8ThXsAAAAQo"]
[Thu Dec 18 09:45:50.461204 2025] [:error] [pid 23645:tid 23656] [client 85.203.23.17:20303] [client 85.203.23.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/post-duplicator/assets/js/about.php"] [unique_id "aUNczjf_Rx0Y0ao_QJi_BAAAAIk"]
[Thu Dec 18 09:45:50.828300 2025] [:error] [pid 24542:tid 24568] [client 85.203.23.19:24579] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/all-in-one-wp-migration/about.php"] [unique_id "aUNczktQz4H2oS3NrDZPbQAAAVg"]
[Thu Dec 18 09:45:51.240350 2025] [:error] [pid 24542:tid 24555] [client 85.203.23.34:63287] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/duplicator/src/Lite/about.php"] [unique_id "aUNcz0tQz4H2oS3NrDZPbgAAAUs"]
[Thu Dec 18 09:45:51.617910 2025] [:error] [pid 24958:tid 24984] [client 85.203.23.32:20417] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/dplay/global-templates/about.php"] [unique_id "aUNcz8kDOrUkd0wNm2FMOwAAAZc"]
[Thu Dec 18 09:45:51.987040 2025] [:error] [pid 23557:tid 23593] [client 85.203.23.15:42083] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aUNczxYcs6rFVxbdP_lj3wAAAEU"]
[Thu Dec 18 09:45:52.483314 2025] [:error] [pid 24542:tid 24559] [client 85.203.23.23:27197] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/nux/about.php"] [unique_id "aUNc0EtQz4H2oS3NrDZPcAAAAU8"]
[Thu Dec 18 09:45:52.858869 2025] [:error] [pid 23557:tid 23611] [client 85.203.23.35:29355] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/page-list/about.php"] [unique_id "aUNc0BYcs6rFVxbdP_lj4gAAAFc"]
[Thu Dec 18 09:45:53.294726 2025] [:error] [pid 23557:tid 23612] [client 85.203.23.19:33823] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/ahax.php"] [unique_id "aUNc0RYcs6rFVxbdP_lj6QAAAFg"]
[Thu Dec 18 09:45:53.671994 2025] [:error] [pid 23557:tid 23593] [client 85.203.23.28:43047] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/ahax.php"] [unique_id "aUNc0RYcs6rFVxbdP_lj6wAAAEU"]
[Thu Dec 18 09:45:54.036270 2025] [:error] [pid 24542:tid 24545] [client 85.203.23.34:24095] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aUNc0ktQz4H2oS3NrDZPeAAAAUE"]
[Thu Dec 18 09:45:54.404465 2025] [:error] [pid 25357:tid 25380] [client 85.203.23.41:57593] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/unlimited-elements-for-elementor-premium/vendor/spucon/"] [unique_id "aUNc0oaT7bsEXnJVfJec6QAAAdU"]
[Thu Dec 18 09:45:54.775688 2025] [:error] [pid 23645:tid 23663] [client 85.203.23.3:53953] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aUNc0jf_Rx0Y0ao_QJi_CQAAAJA"]
[Thu Dec 18 09:45:55.155541 2025] [:error] [pid 25357:tid 25375] [client 85.203.23.49:60087] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aUNc04aT7bsEXnJVfJec6gAAAdA"]
[Thu Dec 18 09:45:55.577393 2025] [:error] [pid 23557:tid 23605] [client 85.203.23.10:32297] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/chosen.php"] [unique_id "aUNc0xYcs6rFVxbdP_lj8wAAAFE"]
[Thu Dec 18 09:45:55.942680 2025] [:error] [pid 23558:tid 23615] [client 85.203.23.41:24009] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aUNc0-Ham9NbgPQa9uZlPQAAAMA"]
[Thu Dec 18 09:45:56.340882 2025] [:error] [pid 23557:tid 23590] [client 85.203.23.23:53969] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aUNc1BYcs6rFVxbdP_lj9wAAAEI"]
[Thu Dec 18 09:45:56.718276 2025] [:error] [pid 24958:tid 24971] [client 85.203.23.37:54479] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/autoload_classmap.php"] [unique_id "aUNc1MkDOrUkd0wNm2FMRQAAAYo"]
[Thu Dec 18 09:45:57.138748 2025] [:error] [pid 23558:tid 23635] [client 85.203.23.40:64569] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aUNc1eHam9NbgPQa9uZlQwAAANQ"]
[Thu Dec 18 09:45:57.620301 2025] [:error] [pid 24542:tid 24563] [client 85.203.23.23:55873] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUNc1UtQz4H2oS3NrDZPfgAAAVM"]
[Thu Dec 18 09:45:58.004148 2025] [:error] [pid 23557:tid 23588] [client 85.203.23.35:32887] [client 85.203.23.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aUNc1hYcs6rFVxbdP_lj_AAAAEA"]
[Thu Dec 18 09:45:58.397243 2025] [:error] [pid 24542:tid 24554] [client 85.203.23.37:62273] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUNc1ktQz4H2oS3NrDZPgAAAAUo"]
[Thu Dec 18 09:45:58.764408 2025] [:error] [pid 25357:tid 25378] [client 85.203.23.41:46887] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aUNc1oaT7bsEXnJVfJec8gAAAdM"]
[Thu Dec 18 09:45:59.128888 2025] [:error] [pid 24958:tid 24969] [client 85.203.23.12:40141] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/php-compat/wp-conflg.php"] [unique_id "aUNc18kDOrUkd0wNm2FMRwAAAYg"]
[Thu Dec 18 09:45:59.501734 2025] [:error] [pid 24958:tid 24968] [client 85.203.23.14:42267] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aUNc18kDOrUkd0wNm2FMSQAAAYc"]
[Thu Dec 18 09:45:59.925760 2025] [:error] [pid 23645:tid 23660] [client 85.203.23.27:53435] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aUNc1zf_Rx0Y0ao_QJi_EQAAAI0"]
[Thu Dec 18 09:46:00.526804 2025] [:error] [pid 24542:tid 24565] [client 85.203.23.3:61381] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUNc2EtQz4H2oS3NrDZPhQAAAVU"]
[Thu Dec 18 09:46:00.996606 2025] [:error] [pid 23558:tid 23629] [client 85.203.23.33:34565] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUNc2OHam9NbgPQa9uZlSgAAAM4"]
[Thu Dec 18 09:46:01.369841 2025] [:error] [pid 23558:tid 23627] [client 85.203.23.41:25609] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUNc2eHam9NbgPQa9uZlTAAAAMw"]
[Thu Dec 18 09:46:01.744365 2025] [:error] [pid 23645:tid 23656] [client 85.203.23.43:41807] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aUNc2Tf_Rx0Y0ao_QJi_FgAAAIk"]
[Thu Dec 18 09:46:02.114928 2025] [:error] [pid 24958:tid 24985] [client 85.203.23.51:60625] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aUNc2skDOrUkd0wNm2FMTQAAAZg"]
[Thu Dec 18 09:46:02.886677 2025] [:error] [pid 25357:tid 25376] [client 85.203.23.41:50389] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/litespeed/autoload_classmap.php"] [unique_id "aUNc2oaT7bsEXnJVfJedAgAAAdE"]
[Thu Dec 18 09:46:03.259805 2025] [:error] [pid 24542:tid 24553] [client 85.203.23.25:41905] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aUNc20tQz4H2oS3NrDZPigAAAUk"]
[Thu Dec 18 09:46:03.624270 2025] [:error] [pid 23645:tid 23663] [client 85.203.23.30:47533] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/images/chosen.php"] [unique_id "aUNc2zf_Rx0Y0ao_QJi_HwAAAJA"]
[Thu Dec 18 09:46:04.005567 2025] [:error] [pid 24542:tid 24544] [client 85.203.23.40:52003] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aUNc3EtQz4H2oS3NrDZPjAAAAUA"]
[Thu Dec 18 09:46:04.371331 2025] [:error] [pid 23558:tid 23636] [client 85.203.23.47:48795] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/page-list/"] [unique_id "aUNc3OHam9NbgPQa9uZlUgAAANU"]
[Thu Dec 18 09:46:04.781836 2025] [:error] [pid 24542:tid 24550] [client 85.203.23.48:38653] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/Bypass-System.php"] [unique_id "aUNc3EtQz4H2oS3NrDZPkgAAAUY"]
[Thu Dec 18 09:46:05.196152 2025] [:error] [pid 24542:tid 24553] [client 85.203.23.47:22463] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpadmin/autoload_classmap.php"] [unique_id "aUNc3UtQz4H2oS3NrDZPlQAAAUk"]
[Thu Dec 18 09:46:05.565208 2025] [:error] [pid 25357:tid 25374] [client 85.203.23.11:27391] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/modules/home/about.php"] [unique_id "aUNc3YaT7bsEXnJVfJedBwAAAc8"]
[Thu Dec 18 09:46:05.937469 2025] [:error] [pid 25357:tid 25362] [client 85.203.23.25:34091] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/settings/chosen.php"] [unique_id "aUNc3YaT7bsEXnJVfJedDAAAAcM"]
[Thu Dec 18 09:46:06.328404 2025] [:error] [pid 23645:tid 23647] [client 85.203.23.14:44827] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/akses.php"] [unique_id "aUNc3jf_Rx0Y0ao_QJi_KgAAAIA"]
[Thu Dec 18 09:46:06.697799 2025] [:error] [pid 25357:tid 25367] [client 85.203.23.38:55931] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/updated/wp-includes/rest-api/file.php"] [unique_id "aUNc3oaT7bsEXnJVfJedFAAAAcg"]
[Thu Dec 18 09:46:07.062462 2025] [:error] [pid 25357:tid 25377] [client 85.203.23.8:52567] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/abc.php"] [unique_id "aUNc34aT7bsEXnJVfJedGQAAAdI"]
[Thu Dec 18 09:46:07.442734 2025] [:error] [pid 24958:tid 24964] [client 85.203.23.9:48379] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/edit-tags.php"] [unique_id "aUNc38kDOrUkd0wNm2FMVQAAAYM"]
[Thu Dec 18 09:46:07.815139 2025] [:error] [pid 25357:tid 25375] [client 85.203.23.44:35735] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/wp-conflg.php"] [unique_id "aUNc34aT7bsEXnJVfJedHwAAAdA"]
[Thu Dec 18 09:46:08.181076 2025] [:error] [pid 25357:tid 25362] [client 85.203.23.6:23713] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aUNc4IaT7bsEXnJVfJedIwAAAcM"]
[Thu Dec 18 09:46:08.548506 2025] [:error] [pid 25357:tid 25381] [client 85.203.23.3:41553] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/chosen.php"] [unique_id "aUNc4IaT7bsEXnJVfJedJgAAAdY"]
[Thu Dec 18 09:46:08.939949 2025] [:error] [pid 23558:tid 23637] [client 85.203.23.14:49175] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/comment-editor/about.php"] [unique_id "aUNc4OHam9NbgPQa9uZlWgAAANY"]
[Thu Dec 18 09:46:09.327130 2025] [:error] [pid 23558:tid 23615] [client 85.203.23.3:34883] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/about.php"] [unique_id "aUNc4eHam9NbgPQa9uZlXQAAAMA"]
[Thu Dec 18 09:46:09.859252 2025] [:error] [pid 24433:tid 24441] [client 85.203.23.39:32439] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aUNc4Z4pN9ycmipm8ThXugAAAQU"]
[Thu Dec 18 09:46:10.225495 2025] [:error] [pid 24958:tid 24978] [client 85.203.23.22:26133] [client 85.203.23.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/dokan-child/content-"] [unique_id "aUNc4skDOrUkd0wNm2FMXQAAAZE"]
[Thu Dec 18 09:46:10.603152 2025] [:error] [pid 24542:tid 24551] [client 85.203.23.14:24363] [client 85.203.23.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/dokan/content-"] [unique_id "aUNc4ktQz4H2oS3NrDZPoAAAAUc"]
[Thu Dec 18 09:46:10.969110 2025] [:error] [pid 23558:tid 23616] [client 85.203.23.50:62043] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/pridmag/ot.php"] [unique_id "aUNc4uHam9NbgPQa9uZlZAAAAME"]
[Thu Dec 18 09:46:11.352478 2025] [:error] [pid 23558:tid 23620] [client 85.203.23.12:62087] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/consultstreet/content-"] [unique_id "aUNc4-Ham9NbgPQa9uZlaQAAAMU"]
[Thu Dec 18 09:46:11.716371 2025] [:error] [pid 23558:tid 23625] [client 85.203.23.2:61823] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpadmin/acp.php"] [unique_id "aUNc4-Ham9NbgPQa9uZlcQAAAMo"]
[Thu Dec 18 09:46:12.097172 2025] [:error] [pid 25357:tid 25367] [client 85.203.23.38:58097] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/mu-plugins/"] [unique_id "aUNc5IaT7bsEXnJVfJedNQAAAcg"]
[Thu Dec 18 09:46:12.465831 2025] [:error] [pid 23558:tid 23619] [client 85.203.23.45:58753] [client 85.203.23.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/ioxi-o.php"] [unique_id "aUNc5OHam9NbgPQa9uZldgAAAMQ"]
[Thu Dec 18 09:46:12.843467 2025] [:error] [pid 24958:tid 24978] [client 85.203.23.11:30137] [client 85.203.23.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/Shell.php"] [unique_id "aUNc5MkDOrUkd0wNm2FMcwAAAZE"]
[Thu Dec 18 09:46:13.206515 2025] [:error] [pid 23558:tid 23615] [client 85.203.23.31:41133] [client 85.203.23.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/namespaced/admin.php"] [unique_id "aUNc5eHam9NbgPQa9uZlewAAAMA"]
[Thu Dec 18 09:46:13.571885 2025] [:error] [pid 25357:tid 25383] [client 85.203.23.26:32385] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/button/adc.php"] [unique_id "aUNc5YaT7bsEXnJVfJedPgAAAdg"]
[Thu Dec 18 09:46:13.941248 2025] [:error] [pid 25357:tid 25375] [client 85.203.23.50:64341] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aUNc5YaT7bsEXnJVfJedPwAAAdA"]
[Thu Dec 18 09:46:14.335764 2025] [:error] [pid 25357:tid 25359] [client 85.203.23.7:26819] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/taxonomy-exception.php"] [unique_id "aUNc5oaT7bsEXnJVfJedQQAAAcA"]
[Thu Dec 18 09:46:14.708677 2025] [:error] [pid 23558:tid 23622] [client 85.203.23.42:24581] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio.dts-list.php"] [unique_id "aUNc5uHam9NbgPQa9uZlhgAAAMc"]
[Thu Dec 18 09:46:15.078351 2025] [:error] [pid 25357:tid 25374] [client 85.203.23.27:49489] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/options-core.php"] [unique_id "aUNc54aT7bsEXnJVfJedRgAAAc8"]
[Thu Dec 18 09:46:15.460167 2025] [:error] [pid 24958:tid 24985] [client 85.203.23.34:43519] [client 85.203.23.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/media-module.php"] [unique_id "aUNc58kDOrUkd0wNm2FMfAAAAZg"]
[Thu Dec 18 09:46:15.827154 2025] [:error] [pid 24958:tid 24975] [client 85.203.23.4:42353] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/css/filesss.php"] [unique_id "aUNc58kDOrUkd0wNm2FMfwAAAY4"]
[Thu Dec 18 09:46:16.252920 2025] [:error] [pid 24542:tid 24562] [client 85.203.23.51:26753] [client 85.203.23.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ectoplasm/moon.php"] [unique_id "aUNc6EtQz4H2oS3NrDZPqAAAAVI"]
[Thu Dec 18 09:46:16.638887 2025] [:error] [pid 24433:tid 24449] [client 85.203.23.38:25857] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aUNc6J4pN9ycmipm8ThXzAAAAQ0"]
[Thu Dec 18 09:46:17.014480 2025] [:error] [pid 25357:tid 25360] [client 85.203.23.10:22097] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/file-manager.phpn.com/wp-content/plugins/phpad/acp.php"] [unique_id "aUNc6YaT7bsEXnJVfJedSgAAAcE"]
[Thu Dec 18 09:46:17.378852 2025] [:error] [pid 25357:tid 25359] [client 85.203.23.42:61593] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/drive.php"] [unique_id "aUNc6YaT7bsEXnJVfJedSwAAAcA"]
[Thu Dec 18 09:46:17.776589 2025] [:error] [pid 24542:tid 24561] [client 85.203.23.13:60323] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/gssdd.php"] [unique_id "aUNc6UtQz4H2oS3NrDZPqgAAAVE"]
[Thu Dec 18 09:46:18.148314 2025] [:error] [pid 24958:tid 24979] [client 85.203.23.49:27641] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/image/wp-conflg.php"] [unique_id "aUNc6skDOrUkd0wNm2FMhQAAAZI"]
[Thu Dec 18 09:46:18.516645 2025] [:error] [pid 24958:tid 24961] [client 85.203.23.43:40957] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/chosen.php"] [unique_id "aUNc6skDOrUkd0wNm2FMiAAAAYA"]
[Thu Dec 18 09:46:18.906000 2025] [:error] [pid 24433:tid 24437] [client 85.203.23.6:45363] [client 85.203.23.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "aUNc6p4pN9ycmipm8ThXzgAAAQE"]
[Thu Dec 18 09:46:19.270673 2025] [:error] [pid 23558:tid 23618] [client 85.203.23.4:25463] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/adout.php"] [unique_id "aUNc6-Ham9NbgPQa9uZllwAAAMM"]
[Thu Dec 18 09:46:19.657324 2025] [:error] [pid 24958:tid 24973] [client 85.203.23.23:27091] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/xxfile.php"] [unique_id "aUNc68kDOrUkd0wNm2FMjwAAAYw"]
[Thu Dec 18 09:46:20.217510 2025] [:error] [pid 23557:tid 23589] [client 85.203.23.39:45783] [client 85.203.23.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/xxfile.php"] [unique_id "aUNc7BYcs6rFVxbdP_lkDwAAAEE"]
[Thu Dec 18 09:46:20.697751 2025] [:error] [pid 24433:tid 24454] [client 85.203.23.48:43373] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/"] [unique_id "aUNc7J4pN9ycmipm8ThX1gAAARI"]
[Thu Dec 18 09:46:21.167918 2025] [:error] [pid 24542:tid 24550] [client 85.203.23.44:33343] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/site-logo/"] [unique_id "aUNc7UtQz4H2oS3NrDZPsAAAAUY"]
[Thu Dec 18 09:46:21.548863 2025] [:error] [pid 25357:tid 25362] [client 85.203.23.15:46873] [client 85.203.23.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/reusable-blocks/"] [unique_id "aUNc7YaT7bsEXnJVfJedUQAAAcM"]
[Thu Dec 18 09:46:21.955080 2025] [:error] [pid 25357:tid 25361] [client 85.203.23.21:30375] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/flatsome/inc/admin/options/helpers/"] [unique_id "aUNc7YaT7bsEXnJVfJedUwAAAcI"]
[Thu Dec 18 09:46:22.348311 2025] [:error] [pid 23645:tid 23650] [client 85.203.23.38:47937] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/screenshots/"] [unique_id "aUNc7jf_Rx0Y0ao_QJi_OwAAAIM"]
[Thu Dec 18 09:46:22.740892 2025] [:error] [pid 24433:tid 24446] [client 85.203.23.30:52145] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/zero.php"] [unique_id "aUNc7p4pN9ycmipm8ThX2gAAAQo"]
[Thu Dec 18 09:46:23.145041 2025] [:error] [pid 24958:tid 24975] [client 85.203.23.41:31757] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/readme.php"] [unique_id "aUNc78kDOrUkd0wNm2FMlQAAAY4"]
[Thu Dec 18 09:46:23.511414 2025] [:error] [pid 23556:tid 23575] [client 85.203.23.18:46571] [client 85.203.23.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aUNc7xnmLlk3u5yt9kE5FAAAAA8"]
[Thu Dec 18 09:46:23.878896 2025] [:error] [pid 25357:tid 25370] [client 85.203.23.19:21511] [client 85.203.23.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/lock360.php"] [unique_id "aUNc74aT7bsEXnJVfJedWgAAAcs"]
[Thu Dec 18 09:46:24.242400 2025] [:error] [pid 23556:tid 23564] [client 85.203.23.13:61161] [client 85.203.23.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUNc8BnmLlk3u5yt9kE5GQAAAAQ"]
[Thu Dec 18 09:46:24.609730 2025] [:error] [pid 23557:tid 23588] [client 85.203.23.52:35951] [client 85.203.23.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/php-compat/wp/rohmuI.php"] [unique_id "aUNc8BYcs6rFVxbdP_lkHAAAAEA"]
[Thu Dec 18 09:46:24.973459 2025] [:error] [pid 25357:tid 25377] [client 85.203.23.30:62899] [client 85.203.23.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/vx.php"] [unique_id "aUNc8IaT7bsEXnJVfJedXAAAAdI"]
[Thu Dec 18 09:46:25.346979 2025] [:error] [pid 23557:tid 23608] [client 85.203.23.27:62279] [client 85.203.23.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/2k.php"] [unique_id "aUNc8RYcs6rFVxbdP_lkHgAAAFQ"]
[Thu Dec 18 09:46:25.800113 2025] [:error] [pid 23556:tid 23572] [client 85.203.23.10:52627] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-hidden2.php"] [unique_id "aUNc8RnmLlk3u5yt9kE5HAAAAAw"]
[Thu Dec 18 09:46:26.248184 2025] [:error] [pid 23645:tid 23661] [client 85.203.23.37:34451] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/"] [unique_id "aUNc8jf_Rx0Y0ao_QJi_QgAAAI4"]
[Thu Dec 18 09:46:26.616900 2025] [:error] [pid 24958:tid 24978] [client 85.203.23.20:21289] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aUNc8skDOrUkd0wNm2FMngAAAZE"]
[Thu Dec 18 09:46:26.987251 2025] [:error] [pid 25357:tid 25359] [client 85.203.23.29:59729] [client 85.203.23.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/about.php"] [unique_id "aUNc8oaT7bsEXnJVfJedXwAAAcA"]
[Thu Dec 18 09:46:27.354760 2025] [:error] [pid 23558:tid 23627] [client 85.203.23.41:48433] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/"] [unique_id "aUNc8-Ham9NbgPQa9uZlpAAAAMw"]
[Thu Dec 18 09:46:27.722193 2025] [:error] [pid 23558:tid 23639] [client 85.203.23.48:60315] [client 85.203.23.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/styles/typography/"] [unique_id "aUNc8-Ham9NbgPQa9uZlpgAAANg"]
[Thu Dec 18 09:46:28.142161 2025] [:error] [pid 25357:tid 25371] [client 85.203.23.42:49981] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/berlin.php"] [unique_id "aUNc9IaT7bsEXnJVfJedYQAAAcw"]
[Thu Dec 18 09:46:28.510293 2025] [:error] [pid 23558:tid 23634] [client 85.203.23.9:47177] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "aUNc9OHam9NbgPQa9uZlqQAAANM"]
[Thu Dec 18 09:46:28.914757 2025] [:error] [pid 24958:tid 24966] [client 85.203.23.33:60263] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "aUNc9MkDOrUkd0wNm2FMogAAAYU"]
[Thu Dec 18 09:46:29.288444 2025] [:error] [pid 23557:tid 23602] [client 85.203.23.7:27557] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-directory/about.php"] [unique_id "aUNc9RYcs6rFVxbdP_lkIwAAAE4"]
[Thu Dec 18 09:46:29.655388 2025] [:error] [pid 24958:tid 24967] [client 85.203.23.23:62105] [client 85.203.23.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aUNc9ckDOrUkd0wNm2FMpQAAAYY"]
[Thu Dec 18 09:46:30.065207 2025] [:error] [pid 25357:tid 25377] [client 85.203.23.43:26583] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-author/about.php"] [unique_id "aUNc9oaT7bsEXnJVfJedagAAAdI"]
[Thu Dec 18 09:46:30.667117 2025] [:error] [pid 23645:tid 23655] [client 85.203.23.32:37123] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aUNc9jf_Rx0Y0ao_QJi_SQAAAIg"]
[Thu Dec 18 09:46:31.293388 2025] [:error] [pid 24958:tid 24984] [client 85.203.23.24:54073] [client 85.203.23.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Cookie/about.php"] [unique_id "aUNc98kDOrUkd0wNm2FMpwAAAZc"]
[Thu Dec 18 09:46:31.750959 2025] [:error] [pid 23558:tid 23635] [client 85.203.23.50:42599] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wordpress-seo/js/about.php"] [unique_id "aUNc9-Ham9NbgPQa9uZlugAAANQ"]
[Thu Dec 18 09:46:32.113329 2025] [:error] [pid 23556:tid 23566] [client 85.203.23.4:24257] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/FR/wetrasesnnotarial/img/about.php"] [unique_id "aUNc-BnmLlk3u5yt9kE5IwAAAAY"]
[Thu Dec 18 09:46:32.479053 2025] [:error] [pid 24542:tid 24556] [client 85.203.23.28:63901] [client 85.203.23.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/vx.php"] [unique_id "aUNc-EtQz4H2oS3NrDZPwQAAAUw"]
[Thu Dec 18 09:46:32.857619 2025] [:error] [pid 24433:tid 24450] [client 85.203.23.47:30701] [client 85.203.23.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/root.php"] [unique_id "aUNc-J4pN9ycmipm8ThX6AAAAQ4"]
[Thu Dec 18 09:46:33.268396 2025] [:error] [pid 23645:tid 23668] [client 85.203.23.37:51017] [client 85.203.23.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/sss.php"] [unique_id "aUNc-Tf_Rx0Y0ao_QJi_UAAAAJU"]
[Thu Dec 18 09:46:33.668395 2025] [:error] [pid 25357:tid 25375] [client 85.203.23.20:57605] [client 85.203.23.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/amryr/"] [unique_id "aUNc-YaT7bsEXnJVfJedbgAAAdA"]
[Thu Dec 18 09:46:34.044140 2025] [:error] [pid 24542:tid 24567] [client 85.203.23.50:53143] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugin/3d-flipbook-dflip-lite/3d-flipbook-dflip-lite.php"] [unique_id "aUNc-ktQz4H2oS3NrDZPxQAAAVc"]
[Thu Dec 18 09:46:34.525416 2025] [:error] [pid 24542:tid 24555] [client 85.203.23.7:55151] [client 85.203.23.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugin/advanced-custom-fields/acf.php"] [unique_id "aUNc-ktQz4H2oS3NrDZPyAAAAUs"]
[Thu Dec 18 09:46:34.903329 2025] [:error] [pid 24958:tid 24965] [client 85.203.23.26:26925] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugin/pngoptimazie.php"] [unique_id "aUNc-skDOrUkd0wNm2FMrQAAAYQ"]
[Thu Dec 18 09:46:35.270459 2025] [:error] [pid 24433:tid 24454] [client 85.203.23.44:40181] [client 85.203.23.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-fmfile.php"] [unique_id "aUNc-54pN9ycmipm8ThX7wAAARI"]
[Thu Dec 18 09:46:35.675038 2025] [:error] [pid 23645:tid 23655] [client 85.203.23.8:47137] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/aaka.php"] [unique_id "aUNc-zf_Rx0Y0ao_QJi_VgAAAIg"]
[Thu Dec 18 09:46:36.284352 2025] [:error] [pid 24958:tid 24964] [client 85.203.23.3:59283] [client 85.203.23.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aUNc_MkDOrUkd0wNm2FMtAAAAYM"]
[Thu Dec 18 09:46:36.674183 2025] [:error] [pid 23645:tid 23650] [client 85.203.23.9:49863] [client 85.203.23.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aUNc_Df_Rx0Y0ao_QJi_WAAAAIM"]
[Thu Dec 18 09:46:37.041399 2025] [:error] [pid 24433:tid 24442] [client 85.203.23.38:48833] [client 85.203.23.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/library/"] [unique_id "aUNc_Z4pN9ycmipm8ThX9AAAAQY"]
[Thu Dec 18 09:46:37.407401 2025] [:error] [pid 24542:tid 24560] [client 85.203.23.25:29125] [client 85.203.23.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-all.php"] [unique_id "aUNc_UtQz4H2oS3NrDZPzwAAAVA"]
[Thu Dec 18 09:46:37.771806 2025] [:error] [pid 24958:tid 24965] [client 85.203.23.8:62167] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/connects.php"] [unique_id "aUNc_ckDOrUkd0wNm2FMtgAAAYQ"]
[Thu Dec 18 09:46:38.169204 2025] [:error] [pid 25357:tid 25379] [client 85.203.23.12:58659] [client 85.203.23.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/m.php"] [unique_id "aUNc_oaT7bsEXnJVfJeddwAAAdQ"]
[Thu Dec 18 09:46:38.730677 2025] [:error] [pid 23556:tid 23570] [client 85.203.23.42:28797] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-admin/user/aws.php"] [unique_id "aUNc_hnmLlk3u5yt9kE5JQAAAAo"]
[Thu Dec 18 09:46:39.116226 2025] [:error] [pid 25357:tid 25370] [client 85.203.23.16:33483] [client 85.203.23.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/admin.php"] [unique_id "aUNc_4aT7bsEXnJVfJedeQAAAcs"]
[Thu Dec 18 09:46:39.482547 2025] [:error] [pid 23556:tid 23569] [client 85.203.23.8:31575] [client 85.203.23.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-content/plugins/peptide/peptide2.php"] [unique_id "aUNc_xnmLlk3u5yt9kE5JgAAAAk"]
[Thu Dec 18 09:46:39.893156 2025] [:error] [pid 23645:tid 23667] [client 85.203.23.40:59703] [client 85.203.23.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-includes/"] [unique_id "aUNc_zf_Rx0Y0ao_QJi_YQAAAJQ"]
[Thu Dec 18 09:46:40.265673 2025] [:error] [pid 24958:tid 24962] [client 85.203.23.2:58673] [client 85.203.23.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-includes/css/dist/commands/"] [unique_id "aUNdAMkDOrUkd0wNm2FMvQAAAYE"]
[Thu Dec 18 09:46:40.631842 2025] [:error] [pid 25357:tid 25376] [client 85.203.23.50:47383] [client 85.203.23.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/assets/fonts/jost/"] [unique_id "aUNdAIaT7bsEXnJVfJedegAAAdE"]
[Thu Dec 18 09:46:46.311233 2025] [:error] [pid 23558:tid 23632] [client 85.203.23.26:61587] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/cache/all/neve_custom_layouts/blog-title/embed/"] [unique_id "aUNdBuHam9NbgPQa9uZl5AAAANE"]
[Thu Dec 18 09:46:46.675601 2025] [:error] [pid 24433:tid 24450] [client 85.203.23.32:58369] [client 85.203.23.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/cache/all/get-a-quote-for-your-trucking-business/"] [unique_id "aUNdBp4pN9ycmipm8ThYAgAAAQ4"]
[Thu Dec 18 09:46:47.038958 2025] [:error] [pid 24958:tid 24964] [client 85.203.23.10:29025] [client 85.203.23.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin00/css/colors/midnight/"] [unique_id "aUNdB8kDOrUkd0wNm2FMwgAAAYM"]
[Thu Dec 18 09:46:47.407837 2025] [:error] [pid 25357:tid 25376] [client 85.203.23.21:28495] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/v2/itw/"] [unique_id "aUNdB4aT7bsEXnJVfJedhwAAAdE"]
[Thu Dec 18 09:46:47.773780 2025] [:error] [pid 24433:tid 24452] [client 85.203.23.4:28663] [client 85.203.23.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aUNdB54pN9ycmipm8ThYBAAAARA"]
[Thu Dec 18 09:46:48.151153 2025] [:error] [pid 24542:tid 24549] [client 85.203.23.33:46089] [client 85.203.23.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comments-title/"] [unique_id "aUNdCEtQz4H2oS3NrDZP4AAAAUU"]
[Thu Dec 18 09:46:48.591241 2025] [:error] [pid 24433:tid 24454] [client 85.203.23.42:25317] [client 85.203.23.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/"] [unique_id "aUNdCJ4pN9ycmipm8ThYCAAAARI"]
[Thu Dec 18 09:46:48.955306 2025] [:error] [pid 24542:tid 24566] [client 85.203.23.21:26425] [client 85.203.23.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-author/"] [unique_id "aUNdCEtQz4H2oS3NrDZP5AAAAVY"]
[Thu Dec 18 09:46:49.322468 2025] [:error] [pid 23645:tid 23660] [client 85.203.23.49:43667] [client 85.203.23.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/script-modules/block-library/form/"] [unique_id "aUNdCTf_Rx0Y0ao_QJi_aAAAAI0"]
[Thu Dec 18 09:46:49.699089 2025] [:error] [pid 24958:tid 24978] [client 85.203.23.41:21147] [client 85.203.23.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "aUNdCckDOrUkd0wNm2FMxQAAAZE"]
[Thu Dec 18 12:38:16.376769 2025] [:error] [pid 12035:tid 12043] [client 43.159.135.203:59568] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUOFOLcVHrNSHjCo-0o9twAAAgE"]
[Thu Dec 18 15:35:28.098824 2025] [:error] [pid 23645:tid 23651] [client 125.75.66.97:45621] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUOuwDf_Rx0Y0ao_QJgXAwAAAIQ"]
[Thu Dec 18 18:01:51.483317 2025] [:error] [pid 24542:tid 24558] [client 49.51.243.95:37448] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUPRD0tQz4H2oS3NrDbSBwAAAU4"]
[Thu Dec 18 20:52:16.133825 2025] [:error] [pid 12383:tid 12408] [client 49.13.24.219:42616] [client 49.13.24.219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUP5APdgllo9h1cyxGbBGQAAAtY"]
[Thu Dec 18 20:53:37.342741 2025] [:error] [pid 23558:tid 23627] [client 130.193.77.35:50898] [client 130.193.77.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aUP5UeHam9NbgPQa9uYdagAAAMw"]
[Thu Dec 18 20:53:39.873637 2025] [:error] [pid 24433:tid 24452] [client 193.176.230.34:44910] [client 193.176.230.34] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aUP5U54pN9ycmipm8TjVSAAAARA"]
[Thu Dec 18 20:54:04.539121 2025] [:error] [pid 12239:tid 12262] [client 92.205.49.84:50620] [client 92.205.49.84] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aUP5bNNnXxfGIuWO6akOcwAAApI"]
[Thu Dec 18 20:54:09.265127 2025] [:error] [pid 23556:tid 23575] [client 34.179.177.28:48364] [client 34.179.177.28] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aUP5cRnmLlk3u5yt9kHkdAAAAA8"]
[Thu Dec 18 20:55:11.839789 2025] [:error] [pid 23558:tid 23617] [client 217.160.244.17:35986] [client 217.160.244.17] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/V2/users"] [unique_id "aUP5r-Ham9NbgPQa9uYeFwAAAMI"]
[Thu Dec 18 20:55:32.453931 2025] [:error] [pid 23556:tid 23572] [client 220.158.233.50:42272] [client 220.158.233.50] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aUP5xBnmLlk3u5yt9kHkwgAAAAw"]
[Thu Dec 18 20:55:59.876222 2025] [:error] [pid 24542:tid 24550] [client 132.226.228.67:40750] [client 132.226.228.67] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aUP530tQz4H2oS3NrDYWjgAAAUY"]
[Thu Dec 18 20:56:03.867356 2025] [:error] [pid 23556:tid 23580] [client 138.122.71.215:33276] [client 138.122.71.215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUP54xnmLlk3u5yt9kHk1gAAABQ"]
[Thu Dec 18 22:10:57.091185 2025] [:error] [pid 23558:tid 23632] [client 182.42.111.156:52490] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUQLceHam9NbgPQa9uY03QAAANE"]
[Thu Dec 18 22:34:31.891803 2025] [:error] [pid 24542:tid 24556] [client 43.153.26.165:54032] [client 43.153.26.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUQQ90tQz4H2oS3NrDY0aQAAAUw"]
[Thu Dec 18 22:35:16.680940 2025] [:error] [pid 23556:tid 23579] [client 217.156.8.94:60778] [client 217.156.8.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.156.8.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUQRJBnmLlk3u5yt9kH6tQAAABM"], referer: https://www.facebook.com/
[Thu Dec 18 22:36:54.477389 2025] [:error] [pid 12239:tid 12251] [client 217.156.8.94:60157] [client 217.156.8.94] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUQRhtNnXxfGIuWO6akxeAAAAoc"]
[Thu Dec 18 22:37:56.750188 2025] [:error] [pid 24542:tid 24553] [client 217.156.8.94:55339] [client 217.156.8.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.156.8.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUQRxEtQz4H2oS3NrDY16QAAAUk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Dec 18 22:38:08.927013 2025] [:error] [pid 23556:tid 23575] [client 217.156.8.94:57645] [client 217.156.8.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.156.8.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUQR0BnmLlk3u5yt9kH7QAAAAA8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Dec 18 22:38:22.418014 2025] [:error] [pid 24958:tid 24983] [client 217.156.8.94:59975] [client 217.156.8.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.156.8.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUQR3skDOrUkd0wNm2HbVQAAAZY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Dec 18 23:52:20.141367 2025] [:error] [pid 12239:tid 12267] [client 106.222.200.32:8841] [client 106.222.200.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.200.32, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUQjNNNnXxfGIuWO6alDwAAAApc"]
[Fri Dec 19 00:24:17.065231 2025] [:error] [pid 45825:tid 45847] [client 213.35.96.205:58126] [client 213.35.96.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUQqsdES1ifyzuzFwz8EVwAAAFQ"]
[Fri Dec 19 00:24:17.521143 2025] [:error] [pid 45737:tid 45747] [client 213.35.96.205:63246] [client 213.35.96.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.35.96.205, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUQqsVAGdb8SXm6CLHiBiwAAAAY"]
[Fri Dec 19 18:26:16.995406 2025] [:error] [pid 41451:tid 41475] [client 192.42.116.181:65442] [client 192.42.116.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aUUoSAYXFn-DbZghZBGpGAAAABU"]
[Fri Dec 19 18:26:34.097398 2025] [:error] [pid 20581:tid 20628] [client 37.114.50.142:59304] [client 37.114.50.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aUUoWvxEv7WXNhnFD1lboAAAAI0"]
[Fri Dec 19 18:26:50.146075 2025] [:error] [pid 20580:tid 20610] [client 179.43.159.201:38492] [client 179.43.159.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aUUoakmd1op_YdAdgR1wTQAAAFg"]
[Fri Dec 19 19:42:55.663695 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:20892] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouta.php"] [unique_id "aUU6P7MyJ3XqeDRsbQmLYQAAAQI"]
[Fri Dec 19 19:42:55.758393 2025] [:error] [pid 20582:tid 20659] [client 68.218.8.118:20956] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouta.php"] [unique_id "aUU6P8pAnrkQKZ4b5gYhcAAAANE"]
[Fri Dec 19 19:42:55.876179 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:20933] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouta.php"] [unique_id "aUU6P7MyJ3XqeDRsbQmLZgAAAQw"]
[Fri Dec 19 19:42:56.004625 2025] [:error] [pid 20582:tid 20655] [client 68.218.8.118:20978] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouta.php"] [unique_id "aUU6QMpAnrkQKZ4b5gYhcQAAAM0"]
[Fri Dec 19 19:42:56.111014 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:20948] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fclas.php"] [unique_id "aUU6QPxEv7WXNhnFD1l1eAAAAIc"]
[Fri Dec 19 19:42:56.234480 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:20963] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fclas.php"] [unique_id "aUU6QPxEv7WXNhnFD1l1egAAAIY"]
[Fri Dec 19 19:42:56.359737 2025] [:error] [pid 20582:tid 20662] [client 68.218.8.118:20939] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fclas.php"] [unique_id "aUU6QMpAnrkQKZ4b5gYhdAAAANQ"]
[Fri Dec 19 19:42:56.496758 2025] [:error] [pid 41451:tid 41475] [client 68.218.8.118:20868] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fclas.php"] [unique_id "aUU6QAYXFn-DbZghZBHLLAAAABU"]
[Fri Dec 19 19:42:56.605611 2025] [:error] [pid 20675:tid 20701] [client 68.218.8.118:20886] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/File.php"] [unique_id "aUU6QLMyJ3XqeDRsbQmLbAAAAQ0"]
[Fri Dec 19 19:42:56.701152 2025] [:error] [pid 20675:tid 20699] [client 68.218.8.118:20949] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/File.php"] [unique_id "aUU6QLMyJ3XqeDRsbQmLbQAAAQs"]
[Fri Dec 19 19:42:56.781001 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:20970] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/File.php"] [unique_id "aUU6QMpAnrkQKZ4b5gYhdQAAANg"]
[Fri Dec 19 19:42:56.857826 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:20936] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/File.php"] [unique_id "aUU6QLMyJ3XqeDRsbQmLbgAAARI"]
[Fri Dec 19 19:42:56.938399 2025] [:error] [pid 41451:tid 41454] [client 68.218.8.118:20942] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all.php"] [unique_id "aUU6QAYXFn-DbZghZBHLLgAAAAA"]
[Fri Dec 19 19:42:57.022124 2025] [:error] [pid 41451:tid 41469] [client 68.218.8.118:20986] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all.php"] [unique_id "aUU6QQYXFn-DbZghZBHLMAAAAA8"]
[Fri Dec 19 19:42:57.157279 2025] [:error] [pid 41451:tid 41474] [client 68.218.8.118:20894] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all.php"] [unique_id "aUU6QQYXFn-DbZghZBHLMQAAABQ"]
[Fri Dec 19 19:42:57.254126 2025] [:error] [pid 20675:tid 20695] [client 68.218.8.118:20950] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all.php"] [unique_id "aUU6QbMyJ3XqeDRsbQmLcQAAAQc"]
[Fri Dec 19 19:42:57.352737 2025] [:error] [pid 20582:tid 20645] [client 68.218.8.118:20966] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bbn.php"] [unique_id "aUU6QcpAnrkQKZ4b5gYheAAAAMM"]
[Fri Dec 19 19:42:57.460289 2025] [:error] [pid 20580:tid 20608] [client 68.218.8.118:20871] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bbn.php"] [unique_id "aUU6QUmd1op_YdAdgR2OaAAAAFY"]
[Fri Dec 19 19:42:57.548096 2025] [:error] [pid 20675:tid 20710] [client 68.218.8.118:20930] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bbn.php"] [unique_id "aUU6QbMyJ3XqeDRsbQmLcwAAARY"]
[Fri Dec 19 19:42:57.657712 2025] [:error] [pid 20675:tid 20704] [client 68.218.8.118:20879] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bbn.php"] [unique_id "aUU6QbMyJ3XqeDRsbQmLdAAAARA"]
[Fri Dec 19 19:42:57.790738 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:20866] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/berlin.php"] [unique_id "aUU6QQYXFn-DbZghZBHLNAAAABM"]
[Fri Dec 19 19:42:57.912735 2025] [:error] [pid 20582:tid 20652] [client 68.218.8.118:20973] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/berlin.php"] [unique_id "aUU6QcpAnrkQKZ4b5gYhegAAAMo"]
[Fri Dec 19 19:42:58.031842 2025] [:error] [pid 20582:tid 20661] [client 68.218.8.118:20882] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/berlin.php"] [unique_id "aUU6QspAnrkQKZ4b5gYhewAAANM"]
[Fri Dec 19 19:42:58.126485 2025] [:error] [pid 20580:tid 20589] [client 68.218.8.118:20869] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/berlin.php"] [unique_id "aUU6Qkmd1op_YdAdgR2OaQAAAEM"]
[Fri Dec 19 19:42:58.219255 2025] [:error] [pid 41451:tid 41476] [client 68.218.8.118:20975] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aUU6QgYXFn-DbZghZBHLOAAAABY"]
[Fri Dec 19 19:42:58.306502 2025] [:error] [pid 20581:tid 20623] [client 68.218.8.118:20972] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aUU6QvxEv7WXNhnFD1l1jQAAAIg"]
[Fri Dec 19 19:42:58.394771 2025] [:error] [pid 41451:tid 41470] [client 68.218.8.118:20981] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aUU6QgYXFn-DbZghZBHLOgAAABA"]
[Fri Dec 19 19:42:58.502480 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:20934] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aUU6QrMyJ3XqeDRsbQmLdgAAAQI"]
[Fri Dec 19 19:42:58.606685 2025] [:error] [pid 41451:tid 41467] [client 68.218.8.118:20974] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api2.php"] [unique_id "aUU6QgYXFn-DbZghZBHLPAAAAA0"]
[Fri Dec 19 19:42:58.717465 2025] [:error] [pid 41451:tid 41465] [client 68.218.8.118:20987] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api2.php"] [unique_id "aUU6QgYXFn-DbZghZBHLPgAAAAs"]
[Fri Dec 19 19:42:58.825357 2025] [:error] [pid 41451:tid 41475] [client 68.218.8.118:20935] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api2.php"] [unique_id "aUU6QgYXFn-DbZghZBHLQQAAABU"]
[Fri Dec 19 19:42:58.946494 2025] [:error] [pid 41451:tid 41454] [client 68.218.8.118:20951] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api2.php"] [unique_id "aUU6QgYXFn-DbZghZBHLQgAAAAA"]
[Fri Dec 19 19:42:59.053531 2025] [:error] [pid 20675:tid 20688] [client 68.218.8.118:20923] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xz89.php"] [unique_id "aUU6Q7MyJ3XqeDRsbQmLeAAAAQA"]
[Fri Dec 19 19:42:59.169450 2025] [:error] [pid 20582:tid 20654] [client 68.218.8.118:20928] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xz89.php"] [unique_id "aUU6Q8pAnrkQKZ4b5gYhfAAAAMw"]
[Fri Dec 19 19:42:59.288535 2025] [:error] [pid 20580:tid 20588] [client 68.218.8.118:20938] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xz89.php"] [unique_id "aUU6Q0md1op_YdAdgR2ObAAAAEI"]
[Fri Dec 19 19:42:59.416641 2025] [:error] [pid 20582:tid 20649] [client 68.218.8.118:8180] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xz89.php"] [unique_id "aUU6Q8pAnrkQKZ4b5gYhfwAAAMc"]
[Fri Dec 19 19:42:59.516582 2025] [:error] [pid 20675:tid 20697] [client 68.218.8.118:20979] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thai.php"] [unique_id "aUU6Q7MyJ3XqeDRsbQmLewAAAQk"]
[Fri Dec 19 19:42:59.614194 2025] [:error] [pid 20581:tid 20631] [client 68.218.8.118:20982] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thai.php"] [unique_id "aUU6Q_xEv7WXNhnFD1l1kAAAAJA"]
[Fri Dec 19 19:42:59.722886 2025] [:error] [pid 20581:tid 20629] [client 68.218.8.118:8129] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thai.php"] [unique_id "aUU6Q_xEv7WXNhnFD1l1kQAAAI4"]
[Fri Dec 19 19:42:59.831366 2025] [:error] [pid 20582:tid 20647] [client 68.218.8.118:20968] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thai.php"] [unique_id "aUU6Q8pAnrkQKZ4b5gYhgAAAAMU"]
[Fri Dec 19 19:42:59.944482 2025] [:error] [pid 20675:tid 20708] [client 68.218.8.118:20891] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lopst.php"] [unique_id "aUU6Q7MyJ3XqeDRsbQmLfAAAARQ"]
[Fri Dec 19 19:43:00.084757 2025] [:error] [pid 20675:tid 20703] [client 68.218.8.118:20895] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lopst.php"] [unique_id "aUU6RLMyJ3XqeDRsbQmLfQAAAQ8"]
[Fri Dec 19 19:43:00.194566 2025] [:error] [pid 20675:tid 20701] [client 68.218.8.118:20864] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lopst.php"] [unique_id "aUU6RLMyJ3XqeDRsbQmLfgAAAQ0"]
[Fri Dec 19 19:43:00.296882 2025] [:error] [pid 41451:tid 41478] [client 68.218.8.118:20885] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lopst.php"] [unique_id "aUU6RAYXFn-DbZghZBHLRgAAABg"]
[Fri Dec 19 19:43:00.386558 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:20884] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wft.php"] [unique_id "aUU6RAYXFn-DbZghZBHLRwAAABM"]
[Fri Dec 19 19:43:00.492384 2025] [:error] [pid 20581:tid 20630] [client 68.218.8.118:20988] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wft.php"] [unique_id "aUU6RPxEv7WXNhnFD1l1lAAAAI8"]
[Fri Dec 19 19:43:00.565643 2025] [:error] [pid 41451:tid 41472] [client 68.218.8.118:20985] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wft.php"] [unique_id "aUU6RAYXFn-DbZghZBHLSAAAABI"]
[Fri Dec 19 19:43:00.649623 2025] [:error] [pid 20580:tid 20600] [client 68.218.8.118:20937] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wft.php"] [unique_id "aUU6REmd1op_YdAdgR2ObQAAAE4"]
[Fri Dec 19 19:43:00.771487 2025] [:error] [pid 20580:tid 20597] [client 68.218.8.118:20943] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws28.php"] [unique_id "aUU6REmd1op_YdAdgR2ObgAAAEs"]
[Fri Dec 19 19:43:00.864112 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:20908] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws28.php"] [unique_id "aUU6RMpAnrkQKZ4b5gYhgQAAAM8"]
[Fri Dec 19 19:43:00.928074 2025] [:error] [pid 20582:tid 20644] [client 68.218.8.118:20911] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws28.php"] [unique_id "aUU6RMpAnrkQKZ4b5gYhggAAAMI"]
[Fri Dec 19 19:43:00.997626 2025] [:error] [pid 41451:tid 41466] [client 68.218.8.118:8174] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws28.php"] [unique_id "aUU6RAYXFn-DbZghZBHLSgAAAAw"]
[Fri Dec 19 19:43:01.078054 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:8131] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsheet1.php"] [unique_id "aUU6RbMyJ3XqeDRsbQmLgAAAARI"]
[Fri Dec 19 19:43:01.147708 2025] [:error] [pid 41451:tid 41476] [client 68.218.8.118:20898] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsheet1.php"] [unique_id "aUU6RQYXFn-DbZghZBHLSwAAABY"]
[Fri Dec 19 19:43:01.220713 2025] [:error] [pid 41451:tid 41460] [client 68.218.8.118:8166] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsheet1.php"] [unique_id "aUU6RQYXFn-DbZghZBHLTAAAAAY"]
[Fri Dec 19 19:43:01.296635 2025] [:error] [pid 41451:tid 41470] [client 68.218.8.118:20976] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsheet1.php"] [unique_id "aUU6RQYXFn-DbZghZBHLTQAAABA"]
[Fri Dec 19 19:43:01.362287 2025] [:error] [pid 41451:tid 41456] [client 68.218.8.118:20917] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aUU6RQYXFn-DbZghZBHLTgAAAAI"]
[Fri Dec 19 19:43:01.442725 2025] [:error] [pid 20675:tid 20691] [client 68.218.8.118:20883] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aUU6RbMyJ3XqeDRsbQmLgQAAAQM"]
[Fri Dec 19 19:43:01.523287 2025] [:error] [pid 20581:tid 20634] [client 68.218.8.118:20954] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aUU6RfxEv7WXNhnFD1l1mwAAAJM"]
[Fri Dec 19 19:43:01.609330 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:20890] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aUU6RbMyJ3XqeDRsbQmLggAAAQE"]
[Fri Dec 19 19:43:01.668676 2025] [:error] [pid 20580:tid 20593] [client 68.218.8.118:20887] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vbbn.php"] [unique_id "aUU6RUmd1op_YdAdgR2ObwAAAEc"]
[Fri Dec 19 19:43:01.755935 2025] [:error] [pid 20582:tid 20643] [client 68.218.8.118:20941] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vbbn.php"] [unique_id "aUU6RcpAnrkQKZ4b5gYhhgAAAME"]
[Fri Dec 19 19:43:01.823004 2025] [:error] [pid 20580:tid 20606] [client 68.218.8.118:20980] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vbbn.php"] [unique_id "aUU6RUmd1op_YdAdgR2OcAAAAFQ"]
[Fri Dec 19 19:43:01.887178 2025] [:error] [pid 20580:tid 20601] [client 68.218.8.118:20872] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vbbn.php"] [unique_id "aUU6RUmd1op_YdAdgR2OcQAAAE8"]
[Fri Dec 19 19:43:01.966052 2025] [:error] [pid 20580:tid 20598] [client 68.218.8.118:20989] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aUU6RUmd1op_YdAdgR2OcgAAAEw"]
[Fri Dec 19 19:43:02.066304 2025] [:error] [pid 20580:tid 20590] [client 68.218.8.118:20918] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aUU6Rkmd1op_YdAdgR2OcwAAAEQ"]
[Fri Dec 19 19:43:02.144464 2025] [:error] [pid 20675:tid 20710] [client 68.218.8.118:8145] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aUU6RrMyJ3XqeDRsbQmLgwAAARY"]
[Fri Dec 19 19:43:02.230003 2025] [:error] [pid 20580:tid 20591] [client 68.218.8.118:8152] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aUU6Rkmd1op_YdAdgR2OdQAAAEU"]
[Fri Dec 19 19:43:02.349062 2025] [:error] [pid 20580:tid 20594] [client 68.218.8.118:20899] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fz.php"] [unique_id "aUU6Rkmd1op_YdAdgR2OdgAAAEg"]
[Fri Dec 19 19:43:02.450323 2025] [:error] [pid 20582:tid 20655] [client 68.218.8.118:20960] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fz.php"] [unique_id "aUU6RspAnrkQKZ4b5gYhhwAAAM0"]
[Fri Dec 19 19:43:02.549676 2025] [:error] [pid 20581:tid 20618] [client 68.218.8.118:20906] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fz.php"] [unique_id "aUU6RvxEv7WXNhnFD1l1ngAAAIM"]
[Fri Dec 19 19:43:02.642497 2025] [:error] [pid 20675:tid 20693] [client 68.218.8.118:20875] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fz.php"] [unique_id "aUU6RrMyJ3XqeDRsbQmLhAAAAQU"]
[Fri Dec 19 19:43:02.733385 2025] [:error] [pid 20675:tid 20702] [client 68.218.8.118:20991] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sang.php"] [unique_id "aUU6RrMyJ3XqeDRsbQmLhgAAAQ4"]
[Fri Dec 19 19:43:02.815509 2025] [:error] [pid 20675:tid 20711] [client 68.218.8.118:8136] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sang.php"] [unique_id "aUU6RrMyJ3XqeDRsbQmLhwAAARc"]
[Fri Dec 19 19:43:02.898889 2025] [:error] [pid 41451:tid 41471] [client 68.218.8.118:20865] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sang.php"] [unique_id "aUU6RgYXFn-DbZghZBHLUQAAABE"]
[Fri Dec 19 19:43:02.985381 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:20953] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sang.php"] [unique_id "aUU6RrMyJ3XqeDRsbQmLiAAAAQI"]
[Fri Dec 19 19:43:03.091683 2025] [:error] [pid 41451:tid 41465] [client 68.218.8.118:20867] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0o0.php"] [unique_id "aUU6RwYXFn-DbZghZBHLUgAAAAs"]
[Fri Dec 19 19:43:03.172001 2025] [:error] [pid 41451:tid 41468] [client 68.218.8.118:20905] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0o0.php"] [unique_id "aUU6RwYXFn-DbZghZBHLUwAAAA4"]
[Fri Dec 19 19:43:03.256849 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:8186] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0o0.php"] [unique_id "aUU6R_xEv7WXNhnFD1l1nwAAAIY"]
[Fri Dec 19 19:43:03.374482 2025] [:error] [pid 20582:tid 20665] [client 68.218.8.118:8168] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0o0.php"] [unique_id "aUU6R8pAnrkQKZ4b5gYhigAAANc"]
[Fri Dec 19 19:43:03.509325 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:20910] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxl.php"] [unique_id "aUU6R8pAnrkQKZ4b5gYhiwAAANg"]
[Fri Dec 19 19:43:03.640140 2025] [:error] [pid 20581:tid 20637] [client 68.218.8.118:8182] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxl.php"] [unique_id "aUU6R_xEv7WXNhnFD1l1ogAAAJY"]
[Fri Dec 19 19:43:03.756031 2025] [:error] [pid 20581:tid 20630] [client 68.218.8.118:20927] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxl.php"] [unique_id "aUU6R_xEv7WXNhnFD1l1owAAAI8"]
[Fri Dec 19 19:43:03.826636 2025] [:error] [pid 20581:tid 20632] [client 68.218.8.118:20931] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxl.php"] [unique_id "aUU6R_xEv7WXNhnFD1l1pAAAAJE"]
[Fri Dec 19 19:43:03.906707 2025] [:error] [pid 20581:tid 20628] [client 68.218.8.118:20962] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aUU6R_xEv7WXNhnFD1l1pQAAAI0"]
[Fri Dec 19 19:43:04.012059 2025] [:error] [pid 41451:tid 41475] [client 68.218.8.118:20877] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aUU6SAYXFn-DbZghZBHLVAAAABU"]
[Fri Dec 19 19:43:04.120299 2025] [:error] [pid 41451:tid 41462] [client 68.218.8.118:20945] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aUU6SAYXFn-DbZghZBHLVQAAAAg"]
[Fri Dec 19 19:43:04.202704 2025] [:error] [pid 20580:tid 20604] [client 68.218.8.118:20965] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aUU6SEmd1op_YdAdgR2OeAAAAFI"]
[Fri Dec 19 19:43:04.306903 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:8153] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUU6SPxEv7WXNhnFD1l1rAAAAIA"]
[Fri Dec 19 19:43:04.393247 2025] [:error] [pid 20580:tid 20589] [client 68.218.8.118:20900] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUU6SEmd1op_YdAdgR2OeQAAAEM"]
[Fri Dec 19 19:43:04.478587 2025] [:error] [pid 20675:tid 20688] [client 68.218.8.118:20888] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUU6SLMyJ3XqeDRsbQmLiQAAAQA"]
[Fri Dec 19 19:43:04.566291 2025] [:error] [pid 41451:tid 41454] [client 68.218.8.118:20881] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUU6SAYXFn-DbZghZBHLVgAAAAA"]
[Fri Dec 19 19:43:04.671922 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:20878] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aUU6SEmd1op_YdAdgR2OewAAAEE"]
[Fri Dec 19 19:43:04.792951 2025] [:error] [pid 20675:tid 20692] [client 68.218.8.118:8148] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aUU6SLMyJ3XqeDRsbQmLigAAAQQ"]
[Fri Dec 19 19:43:04.905803 2025] [:error] [pid 20580:tid 20607] [client 68.218.8.118:8150] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aUU6SEmd1op_YdAdgR2OfAAAAFU"]
[Fri Dec 19 19:43:05.021721 2025] [:error] [pid 41451:tid 41474] [client 68.218.8.118:20977] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aUU6SQYXFn-DbZghZBHLWAAAABQ"]
[Fri Dec 19 19:43:05.175945 2025] [:error] [pid 41451:tid 41463] [client 68.218.8.118:20889] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aUU6SQYXFn-DbZghZBHLWQAAAAk"]
[Fri Dec 19 19:43:05.292992 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:8163] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aUU6SbMyJ3XqeDRsbQmLiwAAAQw"]
[Fri Dec 19 19:43:05.407872 2025] [:error] [pid 20675:tid 20707] [client 68.218.8.118:8092] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aUU6SbMyJ3XqeDRsbQmLjQAAARM"]
[Fri Dec 19 19:43:05.510712 2025] [:error] [pid 20675:tid 20694] [client 68.218.8.118:8190] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aUU6SbMyJ3XqeDRsbQmLjgAAAQY"]
[Fri Dec 19 19:43:05.596747 2025] [:error] [pid 20582:tid 20651] [client 68.218.8.118:8171] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUU6ScpAnrkQKZ4b5gYhkAAAAMk"]
[Fri Dec 19 19:43:05.710150 2025] [:error] [pid 20580:tid 20603] [client 68.218.8.118:20929] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUU6SUmd1op_YdAdgR2OfwAAAFE"]
[Fri Dec 19 19:43:05.821921 2025] [:error] [pid 20580:tid 20596] [client 68.218.8.118:8144] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUU6SUmd1op_YdAdgR2OgAAAAEo"]
[Fri Dec 19 19:43:05.935264 2025] [:error] [pid 41451:tid 41464] [client 68.218.8.118:20964] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUU6SQYXFn-DbZghZBHLWgAAAAo"]
[Fri Dec 19 19:43:06.059096 2025] [:error] [pid 20580:tid 20597] [client 68.218.8.118:8155] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aUU6Skmd1op_YdAdgR2OggAAAEs"]
[Fri Dec 19 19:43:06.183118 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:8134] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aUU6SvxEv7WXNhnFD1l1rQAAAIc"]
[Fri Dec 19 19:43:06.316698 2025] [:error] [pid 20581:tid 20627] [client 68.218.8.118:20940] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aUU6SvxEv7WXNhnFD1l1rwAAAIw"]
[Fri Dec 19 19:43:06.443962 2025] [:error] [pid 20581:tid 20620] [client 68.218.8.118:8139] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aUU6SvxEv7WXNhnFD1l1sQAAAIU"]
[Fri Dec 19 19:43:06.583484 2025] [:error] [pid 20580:tid 20593] [client 68.218.8.118:20944] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fwe.php"] [unique_id "aUU6Skmd1op_YdAdgR2OgwAAAEc"]
[Fri Dec 19 19:43:06.687184 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:8154] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fwe.php"] [unique_id "aUU6SgYXFn-DbZghZBHLXAAAABM"]
[Fri Dec 19 19:43:06.805605 2025] [:error] [pid 20581:tid 20629] [client 68.218.8.118:8132] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fwe.php"] [unique_id "aUU6SvxEv7WXNhnFD1l1tAAAAI4"]
[Fri Dec 19 19:43:06.895296 2025] [:error] [pid 41451:tid 41472] [client 68.218.8.118:8172] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fwe.php"] [unique_id "aUU6SgYXFn-DbZghZBHLXgAAABI"]
[Fri Dec 19 19:43:06.983719 2025] [:error] [pid 41451:tid 41477] [client 68.218.8.118:8177] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aUU6SgYXFn-DbZghZBHLXwAAABc"]
[Fri Dec 19 19:43:07.074787 2025] [:error] [pid 41451:tid 41466] [client 68.218.8.118:8085] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aUU6SwYXFn-DbZghZBHLYAAAAAw"]
[Fri Dec 19 19:43:07.186913 2025] [:error] [pid 20580:tid 20606] [client 68.218.8.118:20958] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aUU6S0md1op_YdAdgR2OhAAAAFQ"]
[Fri Dec 19 19:43:07.286050 2025] [:error] [pid 20675:tid 20708] [client 68.218.8.118:8147] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aUU6S7MyJ3XqeDRsbQmLkAAAARQ"]
[Fri Dec 19 19:43:07.366352 2025] [:error] [pid 20580:tid 20601] [client 68.218.8.118:20926] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx1.php"] [unique_id "aUU6S0md1op_YdAdgR2OhQAAAE8"]
[Fri Dec 19 19:43:07.452703 2025] [:error] [pid 20580:tid 20598] [client 68.218.8.118:20921] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx1.php"] [unique_id "aUU6S0md1op_YdAdgR2OhgAAAEw"]
[Fri Dec 19 19:43:07.555707 2025] [:error] [pid 20675:tid 20701] [client 68.218.8.118:8083] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx1.php"] [unique_id "aUU6S7MyJ3XqeDRsbQmLkQAAAQ0"]
[Fri Dec 19 19:43:07.680851 2025] [:error] [pid 20675:tid 20699] [client 68.218.8.118:8167] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx1.php"] [unique_id "aUU6S7MyJ3XqeDRsbQmLkgAAAQs"]
[Fri Dec 19 19:43:07.807014 2025] [:error] [pid 20675:tid 20705] [client 68.218.8.118:8188] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aUU6S7MyJ3XqeDRsbQmLkwAAARE"]
[Fri Dec 19 19:43:07.901234 2025] [:error] [pid 20581:tid 20638] [client 68.218.8.118:20946] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aUU6S_xEv7WXNhnFD1l1tgAAAJc"]
[Fri Dec 19 19:43:08.000497 2025] [:error] [pid 20581:tid 20631] [client 68.218.8.118:20920] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aUU6S_xEv7WXNhnFD1l1uAAAAJA"]
[Fri Dec 19 19:43:08.119385 2025] [:error] [pid 41451:tid 41460] [client 68.218.8.118:20925] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aUU6TAYXFn-DbZghZBHLYgAAAAY"]
[Fri Dec 19 19:43:08.230762 2025] [:error] [pid 41451:tid 41467] [client 68.218.8.118:20983] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aUU6TAYXFn-DbZghZBHLYwAAAA0"]
[Fri Dec 19 19:43:08.330073 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:8135] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aUU6TLMyJ3XqeDRsbQmLlAAAARI"]
[Fri Dec 19 19:43:08.438624 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:20924] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aUU6TMpAnrkQKZ4b5gYhkwAAAM8"]
[Fri Dec 19 19:43:08.558774 2025] [:error] [pid 20675:tid 20698] [client 68.218.8.118:8158] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aUU6TLMyJ3XqeDRsbQmLlQAAAQo"]
[Fri Dec 19 19:43:08.677400 2025] [:error] [pid 41451:tid 41470] [client 68.218.8.118:8141] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aUU6TAYXFn-DbZghZBHLZQAAABA"]
[Fri Dec 19 19:43:08.819130 2025] [:error] [pid 20675:tid 20691] [client 68.218.8.118:8137] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aUU6TLMyJ3XqeDRsbQmLlgAAAQM"]
[Fri Dec 19 19:43:08.917817 2025] [:error] [pid 41451:tid 41471] [client 68.218.8.118:20914] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aUU6TAYXFn-DbZghZBHLZgAAABE"]
[Fri Dec 19 19:43:09.032771 2025] [:error] [pid 41451:tid 41468] [client 68.218.8.118:8084] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aUU6TQYXFn-DbZghZBHLZwAAAA4"]
[Fri Dec 19 19:43:09.159837 2025] [:error] [pid 41451:tid 41475] [client 68.218.8.118:20971] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUU6TQYXFn-DbZghZBHLaAAAABU"]
[Fri Dec 19 19:43:09.260681 2025] [:error] [pid 41451:tid 41462] [client 68.218.8.118:20990] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUU6TQYXFn-DbZghZBHLagAAAAg"]
[Fri Dec 19 19:43:09.366019 2025] [:error] [pid 20581:tid 20617] [client 68.218.8.118:20880] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUU6TfxEv7WXNhnFD1l1ugAAAII"]
[Fri Dec 19 19:43:09.479089 2025] [:error] [pid 20582:tid 20648] [client 68.218.8.118:20873] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUU6TcpAnrkQKZ4b5gYhlgAAAMY"]
[Fri Dec 19 19:43:09.604413 2025] [:error] [pid 20580:tid 20594] [client 68.218.8.118:8096] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aUU6TUmd1op_YdAdgR2OiAAAAEg"]
[Fri Dec 19 19:43:09.711875 2025] [:error] [pid 20580:tid 20602] [client 68.218.8.118:8183] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aUU6TUmd1op_YdAdgR2OiQAAAFA"]
[Fri Dec 19 19:43:09.803684 2025] [:error] [pid 20582:tid 20659] [client 68.218.8.118:8122] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aUU6TcpAnrkQKZ4b5gYhlwAAANE"]
[Fri Dec 19 19:43:09.925863 2025] [:error] [pid 20580:tid 20610] [client 68.218.8.118:8072] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aUU6TUmd1op_YdAdgR2OiwAAAFg"]
[Fri Dec 19 19:43:10.038176 2025] [:error] [pid 20581:tid 20625] [client 68.218.8.118:8161] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUU6TvxEv7WXNhnFD1l1uwAAAIo"]
[Fri Dec 19 19:43:10.132082 2025] [:error] [pid 20581:tid 20616] [client 68.218.8.118:20957] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUU6TvxEv7WXNhnFD1l1vAAAAIE"]
[Fri Dec 19 19:43:10.245259 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:8007] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUU6Tkmd1op_YdAdgR2OjgAAAEE"]
[Fri Dec 19 19:43:10.337219 2025] [:error] [pid 20580:tid 20607] [client 68.218.8.118:8159] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUU6Tkmd1op_YdAdgR2OjwAAAFU"]
[Fri Dec 19 19:43:10.441974 2025] [:error] [pid 20580:tid 20605] [client 68.218.8.118:8079] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUU6Tkmd1op_YdAdgR2OkAAAAFM"]
[Fri Dec 19 19:43:10.548249 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:20913] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUU6TvxEv7WXNhnFD1l1vQAAAIc"]
[Fri Dec 19 19:43:10.664863 2025] [:error] [pid 20675:tid 20710] [client 68.218.8.118:8080] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUU6TrMyJ3XqeDRsbQmLmAAAARY"]
[Fri Dec 19 19:43:10.793438 2025] [:error] [pid 20582:tid 20665] [client 68.218.8.118:8069] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUU6TspAnrkQKZ4b5gYhnAAAANc"]
[Fri Dec 19 19:43:10.917559 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:20902] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aUU6TspAnrkQKZ4b5gYhnQAAANg"]
[Fri Dec 19 19:43:11.010844 2025] [:error] [pid 20582:tid 20656] [client 68.218.8.118:8001] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aUU6T8pAnrkQKZ4b5gYhngAAAM4"]
[Fri Dec 19 19:43:11.095573 2025] [:error] [pid 20582:tid 20645] [client 68.218.8.118:8175] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aUU6T8pAnrkQKZ4b5gYhnwAAAMM"]
[Fri Dec 19 19:43:11.166010 2025] [:error] [pid 20582:tid 20642] [client 68.218.8.118:8143] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aUU6T8pAnrkQKZ4b5gYhoAAAAMA"]
[Fri Dec 19 19:43:11.251812 2025] [:error] [pid 20582:tid 20661] [client 68.218.8.118:8140] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aUU6T8pAnrkQKZ4b5gYhoQAAANM"]
[Fri Dec 19 19:43:11.325862 2025] [:error] [pid 20582:tid 20663] [client 68.218.8.118:8075] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aUU6T8pAnrkQKZ4b5gYhogAAANU"]
[Fri Dec 19 19:43:11.396874 2025] [:error] [pid 20581:tid 20618] [client 68.218.8.118:8128] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aUU6T_xEv7WXNhnFD1l1vwAAAIM"]
[Fri Dec 19 19:43:11.471271 2025] [:error] [pid 20675:tid 20702] [client 68.218.8.118:8089] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aUU6T7MyJ3XqeDRsbQmLmQAAAQ4"]
[Fri Dec 19 19:43:11.558628 2025] [:error] [pid 20580:tid 20603] [client 68.218.8.118:20893] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUU6T0md1op_YdAdgR2OkQAAAFE"]
[Fri Dec 19 19:43:11.641696 2025] [:error] [pid 20581:tid 20620] [client 68.218.8.118:20901] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUU6T_xEv7WXNhnFD1l1wAAAAIU"]
[Fri Dec 19 19:43:11.728074 2025] [:error] [pid 20675:tid 20711] [client 68.218.8.118:8107] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUU6T7MyJ3XqeDRsbQmLnAAAARc"]
[Fri Dec 19 19:43:11.817115 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:8185] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUU6T_xEv7WXNhnFD1l1wQAAAIY"]
[Fri Dec 19 19:43:11.941722 2025] [:error] [pid 20580:tid 20596] [client 68.218.8.118:8019] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUU6T0md1op_YdAdgR2OkwAAAEo"]
[Fri Dec 19 19:43:12.032941 2025] [:error] [pid 20675:tid 20712] [client 68.218.8.118:8142] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUU6ULMyJ3XqeDRsbQmLnQAAARg"]
[Fri Dec 19 19:43:12.113612 2025] [:error] [pid 41451:tid 41463] [client 68.218.8.118:20907] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUU6UAYXFn-DbZghZBHLbAAAAAk"]
[Fri Dec 19 19:43:12.207730 2025] [:error] [pid 20580:tid 20599] [client 68.218.8.118:8034] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUU6UEmd1op_YdAdgR2OlAAAAE0"]
[Fri Dec 19 19:43:12.276837 2025] [:error] [pid 41451:tid 41461] [client 68.218.8.118:8076] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aUU6UAYXFn-DbZghZBHLbQAAAAc"]
[Fri Dec 19 19:43:12.345421 2025] [:error] [pid 20581:tid 20629] [client 68.218.8.118:8115] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aUU6UPxEv7WXNhnFD1l1wwAAAI4"]
[Fri Dec 19 19:43:12.413336 2025] [:error] [pid 41451:tid 41464] [client 68.218.8.118:8077] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aUU6UAYXFn-DbZghZBHLbgAAAAo"]
[Fri Dec 19 19:43:12.479030 2025] [:error] [pid 20675:tid 20688] [client 68.218.8.118:8130] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aUU6ULMyJ3XqeDRsbQmLnwAAAQA"]
[Fri Dec 19 19:43:12.560295 2025] [:error] [pid 20582:tid 20659] [client 68.218.8.118:20984] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUU6UMpAnrkQKZ4b5gYhqQAAANE"]
[Fri Dec 19 19:43:12.660370 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:20904] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUU6UAYXFn-DbZghZBHLbwAAABM"]
[Fri Dec 19 19:43:12.744753 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:8093] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUU6UMpAnrkQKZ4b5gYhqgAAAMs"]
[Fri Dec 19 19:43:12.835409 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:8124] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUU6ULMyJ3XqeDRsbQmLoAAAAQw"]
[Fri Dec 19 19:43:12.921197 2025] [:error] [pid 20675:tid 20697] [client 68.218.8.118:8087] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUU6ULMyJ3XqeDRsbQmLoQAAAQk"]
[Fri Dec 19 19:43:13.002698 2025] [:error] [pid 20675:tid 20707] [client 68.218.8.118:20896] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUU6UbMyJ3XqeDRsbQmLogAAARM"]
[Fri Dec 19 19:43:13.076770 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:20916] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUU6UcpAnrkQKZ4b5gYhqwAAAMg"]
[Fri Dec 19 19:43:13.182336 2025] [:error] [pid 20581:tid 20633] [client 68.218.8.118:8173] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUU6UfxEv7WXNhnFD1l1xQAAAJI"]
[Fri Dec 19 19:43:13.277010 2025] [:error] [pid 41451:tid 41458] [client 68.218.8.118:20909] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUU6UQYXFn-DbZghZBHLcAAAAAQ"]
[Fri Dec 19 19:43:13.361133 2025] [:error] [pid 20581:tid 20638] [client 68.218.8.118:20961] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUU6UfxEv7WXNhnFD1l1xwAAAJc"]
[Fri Dec 19 19:43:13.436647 2025] [:error] [pid 41451:tid 41472] [client 68.218.8.118:20903] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUU6UQYXFn-DbZghZBHLcQAAABI"]
[Fri Dec 19 19:43:13.500992 2025] [:error] [pid 20582:tid 20649] [client 68.218.8.118:8074] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUU6UcpAnrkQKZ4b5gYhrAAAAMc"]
[Fri Dec 19 19:43:13.579529 2025] [:error] [pid 20675:tid 20709] [client 68.218.8.118:8156] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aUU6UbMyJ3XqeDRsbQmLowAAARU"]
[Fri Dec 19 19:43:13.655931 2025] [:error] [pid 20675:tid 20708] [client 68.218.8.118:8102] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aUU6UbMyJ3XqeDRsbQmLpQAAARQ"]
[Fri Dec 19 19:43:13.724372 2025] [:error] [pid 41451:tid 41477] [client 68.218.8.118:8091] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aUU6UQYXFn-DbZghZBHLcgAAABc"]
[Fri Dec 19 19:43:13.788522 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:8010] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aUU6UbMyJ3XqeDRsbQmLqAAAARI"]
[Fri Dec 19 19:43:13.851797 2025] [:error] [pid 20580:tid 20606] [client 68.218.8.118:8009] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUU6UUmd1op_YdAdgR2OlwAAAFQ"]
[Fri Dec 19 19:43:13.926562 2025] [:error] [pid 41451:tid 41476] [client 68.218.8.118:20897] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUU6UQYXFn-DbZghZBHLcwAAABY"]
[Fri Dec 19 19:43:14.011811 2025] [:error] [pid 41451:tid 41460] [client 68.218.8.118:8170] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUU6UgYXFn-DbZghZBHLdAAAAAY"]
[Fri Dec 19 19:43:14.070468 2025] [:error] [pid 41451:tid 41467] [client 68.218.8.118:8097] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUU6UgYXFn-DbZghZBHLdQAAAA0"]
[Fri Dec 19 19:43:14.134111 2025] [:error] [pid 20582:tid 20645] [client 68.218.8.118:20876] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUU6UspAnrkQKZ4b5gYhrwAAAMM"]
[Fri Dec 19 19:43:14.210058 2025] [:error] [pid 41451:tid 41470] [client 68.218.8.118:8160] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUU6UgYXFn-DbZghZBHLdgAAABA"]
[Fri Dec 19 19:43:14.293923 2025] [:error] [pid 20582:tid 20642] [client 68.218.8.118:20874] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUU6UspAnrkQKZ4b5gYhsQAAAMA"]
[Fri Dec 19 19:43:14.387653 2025] [:error] [pid 41451:tid 41456] [client 68.218.8.118:8008] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUU6UgYXFn-DbZghZBHLdwAAAAI"]
[Fri Dec 19 19:43:14.480765 2025] [:error] [pid 41451:tid 41457] [client 68.218.8.118:8162] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUU6UgYXFn-DbZghZBHLeAAAAAM"]
[Fri Dec 19 19:43:14.553519 2025] [:error] [pid 41451:tid 41471] [client 68.218.8.118:8184] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUU6UgYXFn-DbZghZBHLeQAAABE"]
[Fri Dec 19 19:43:14.632837 2025] [:error] [pid 41451:tid 41465] [client 68.218.8.118:8138] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUU6UgYXFn-DbZghZBHLegAAAAs"]
[Fri Dec 19 19:43:14.724358 2025] [:error] [pid 20582:tid 20652] [client 68.218.8.118:8068] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUU6UspAnrkQKZ4b5gYhswAAAMo"]
[Fri Dec 19 19:43:14.819697 2025] [:error] [pid 20675:tid 20710] [client 68.218.8.118:8169] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUU6UrMyJ3XqeDRsbQmLqQAAARY"]
[Fri Dec 19 19:43:14.894899 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:8003] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUU6UrMyJ3XqeDRsbQmLqgAAAQI"]
[Fri Dec 19 19:43:14.965223 2025] [:error] [pid 20581:tid 20631] [client 68.218.8.118:8078] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUU6UvxEv7WXNhnFD1l1yAAAAJA"]
[Fri Dec 19 19:43:15.042938 2025] [:error] [pid 41451:tid 41475] [client 68.218.8.118:8125] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUU6UwYXFn-DbZghZBHLfAAAABU"]
[Fri Dec 19 19:43:15.136364 2025] [:error] [pid 20581:tid 20635] [client 68.218.8.118:8011] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUU6U_xEv7WXNhnFD1l1yQAAAJQ"]
[Fri Dec 19 19:43:15.232737 2025] [:error] [pid 20580:tid 20598] [client 68.218.8.118:8039] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUU6U0md1op_YdAdgR2OmAAAAEw"]
[Fri Dec 19 19:43:15.302716 2025] [:error] [pid 20580:tid 20590] [client 68.218.8.118:8105] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUU6U0md1op_YdAdgR2OmQAAAEQ"]
[Fri Dec 19 19:43:15.385136 2025] [:error] [pid 20580:tid 20595] [client 68.218.8.118:7958] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUU6U0md1op_YdAdgR2OmgAAAEk"]
[Fri Dec 19 19:43:15.487753 2025] [:error] [pid 20580:tid 20591] [client 68.218.8.118:8023] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUU6U0md1op_YdAdgR2OmwAAAEU"]
[Fri Dec 19 19:43:15.596492 2025] [:error] [pid 20580:tid 20594] [client 68.218.8.118:8082] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUU6U0md1op_YdAdgR2OnAAAAEg"]
[Fri Dec 19 19:43:15.680345 2025] [:error] [pid 20580:tid 20602] [client 68.218.8.118:8099] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUU6U0md1op_YdAdgR2OnQAAAFA"]
[Fri Dec 19 19:43:15.755026 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:8133] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUU6U8pAnrkQKZ4b5gYhtAAAAM8"]
[Fri Dec 19 19:43:15.822963 2025] [:error] [pid 20580:tid 20608] [client 68.218.8.118:8189] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUU6U0md1op_YdAdgR2OngAAAFY"]
[Fri Dec 19 19:43:15.885635 2025] [:error] [pid 20580:tid 20592] [client 68.218.8.118:8065] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUU6U0md1op_YdAdgR2OoAAAAEY"]
[Fri Dec 19 19:43:15.961089 2025] [:error] [pid 20580:tid 20609] [client 68.218.8.118:8187] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUU6U0md1op_YdAdgR2OoQAAAFc"]
[Fri Dec 19 19:43:16.067122 2025] [:error] [pid 20580:tid 20589] [client 68.218.8.118:8036] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUU6VEmd1op_YdAdgR2OogAAAEM"]
[Fri Dec 19 19:43:16.137716 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:8112] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUU6VEmd1op_YdAdgR2OowAAAEE"]
[Fri Dec 19 19:43:16.204914 2025] [:error] [pid 20580:tid 20607] [client 68.218.8.118:8191] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUU6VEmd1op_YdAdgR2OpAAAAFU"]
[Fri Dec 19 19:43:16.299181 2025] [:error] [pid 20580:tid 20605] [client 68.218.8.118:8165] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUU6VEmd1op_YdAdgR2OpQAAAFM"]
[Fri Dec 19 19:43:16.412355 2025] [:error] [pid 20580:tid 20588] [client 68.218.8.118:20919] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUU6VEmd1op_YdAdgR2OpwAAAEI"]
[Fri Dec 19 19:43:16.536940 2025] [:error] [pid 20675:tid 20692] [client 68.218.8.118:7996] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUU6VLMyJ3XqeDRsbQmLrgAAAQQ"]
[Fri Dec 19 19:43:16.645515 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:8106] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUU6VLMyJ3XqeDRsbQmLrwAAAQw"]
[Fri Dec 19 19:43:16.738530 2025] [:error] [pid 20675:tid 20697] [client 68.218.8.118:8002] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUU6VLMyJ3XqeDRsbQmLsAAAAQk"]
[Fri Dec 19 19:43:16.843183 2025] [:error] [pid 41451:tid 41459] [client 68.218.8.118:7937] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUU6VAYXFn-DbZghZBHLfQAAAAU"]
[Fri Dec 19 19:43:16.915415 2025] [:error] [pid 41451:tid 41454] [client 68.218.8.118:8070] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUU6VAYXFn-DbZghZBHLfgAAAAA"]
[Fri Dec 19 19:43:16.986733 2025] [:error] [pid 20582:tid 20664] [client 68.218.8.118:8121] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUU6VMpAnrkQKZ4b5gYhtgAAANY"]
[Fri Dec 19 19:43:17.072751 2025] [:error] [pid 20582:tid 20654] [client 68.218.8.118:8044] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUU6VcpAnrkQKZ4b5gYhtwAAAMw"]
[Fri Dec 19 19:43:17.154269 2025] [:error] [pid 20675:tid 20707] [client 68.218.8.118:8108] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUU6VbMyJ3XqeDRsbQmLsQAAARM"]
[Fri Dec 19 19:43:17.221462 2025] [:error] [pid 20582:tid 20644] [client 68.218.8.118:20922] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aUU6VcpAnrkQKZ4b5gYhuAAAAMI"]
[Fri Dec 19 19:43:17.314061 2025] [:error] [pid 20581:tid 20639] [client 68.218.8.118:8006] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aUU6VfxEv7WXNhnFD1l1zAAAAJg"]
[Fri Dec 19 19:43:17.426891 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:20959] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aUU6VfxEv7WXNhnFD1l1zQAAAIc"]
[Fri Dec 19 19:43:17.501018 2025] [:error] [pid 20581:tid 20618] [client 68.218.8.118:8063] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aUU6VfxEv7WXNhnFD1l1zgAAAIM"]
[Fri Dec 19 19:43:17.585180 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:20915] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUU6VcpAnrkQKZ4b5gYhuQAAAMs"]
[Fri Dec 19 19:43:17.699071 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:8179] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUU6VcpAnrkQKZ4b5gYhugAAAMg"]
[Fri Dec 19 19:43:17.827560 2025] [:error] [pid 20581:tid 20627] [client 68.218.8.118:7948] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUU6VfxEv7WXNhnFD1l10AAAAIw"]
[Fri Dec 19 19:43:17.944407 2025] [:error] [pid 20675:tid 20701] [client 68.218.8.118:7940] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUU6VbMyJ3XqeDRsbQmLswAAAQ0"]
[Fri Dec 19 19:43:18.059816 2025] [:error] [pid 20581:tid 20623] [client 68.218.8.118:8026] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUU6VvxEv7WXNhnFD1l10QAAAIg"]
[Fri Dec 19 19:43:18.168075 2025] [:error] [pid 20580:tid 20596] [client 68.218.8.118:8088] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUU6Vkmd1op_YdAdgR2OqQAAAEo"]
[Fri Dec 19 19:43:18.309087 2025] [:error] [pid 20581:tid 20632] [client 68.218.8.118:8048] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUU6VvxEv7WXNhnFD1l10wAAAJE"]
[Fri Dec 19 19:43:18.415086 2025] [:error] [pid 20581:tid 20624] [client 68.218.8.118:8095] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUU6VvxEv7WXNhnFD1l11AAAAIk"]
[Fri Dec 19 19:43:18.524106 2025] [:error] [pid 20581:tid 20619] [client 68.218.8.118:8101] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUU6VvxEv7WXNhnFD1l11gAAAIQ"]
[Fri Dec 19 19:43:18.627163 2025] [:error] [pid 20581:tid 20635] [client 68.218.8.118:8116] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUU6VvxEv7WXNhnFD1l11wAAAJQ"]
[Fri Dec 19 19:43:18.720946 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:20912] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUU6VvxEv7WXNhnFD1l12QAAAIA"]
[Fri Dec 19 19:43:18.857864 2025] [:error] [pid 20581:tid 20628] [client 68.218.8.118:8157] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUU6VvxEv7WXNhnFD1l12gAAAI0"]
[Fri Dec 19 19:43:18.967699 2025] [:error] [pid 20581:tid 20617] [client 68.218.8.118:20870] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aUU6VvxEv7WXNhnFD1l12wAAAII"]
[Fri Dec 19 19:43:19.087670 2025] [:error] [pid 20581:tid 20616] [client 68.218.8.118:8024] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aUU6V_xEv7WXNhnFD1l13AAAAIE"]
[Fri Dec 19 19:43:19.229667 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:8181] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aUU6V_xEv7WXNhnFD1l13QAAAIc"]
[Fri Dec 19 19:43:19.358127 2025] [:error] [pid 20581:tid 20618] [client 68.218.8.118:8021] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aUU6V_xEv7WXNhnFD1l13gAAAIM"]
[Fri Dec 19 19:43:19.483635 2025] [:error] [pid 20581:tid 20627] [client 68.218.8.118:7944] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aUU6V_xEv7WXNhnFD1l13wAAAIw"]
[Fri Dec 19 19:43:19.586949 2025] [:error] [pid 20582:tid 20662] [client 68.218.8.118:8123] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aUU6V8pAnrkQKZ4b5gYhvQAAANQ"]
[Fri Dec 19 19:43:19.688883 2025] [:error] [pid 20581:tid 20626] [client 68.218.8.118:8047] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aUU6V_xEv7WXNhnFD1l14QAAAIs"]
[Fri Dec 19 19:43:19.781904 2025] [:error] [pid 20581:tid 20629] [client 68.218.8.118:8114] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aUU6V_xEv7WXNhnFD1l14gAAAI4"]
[Fri Dec 19 19:43:19.911562 2025] [:error] [pid 20580:tid 20593] [client 68.218.8.118:8176] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aUU6V0md1op_YdAdgR2OrAAAAEc"]
[Fri Dec 19 19:43:20.013352 2025] [:error] [pid 20580:tid 20606] [client 68.218.8.118:8022] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aUU6WEmd1op_YdAdgR2OrgAAAFQ"]
[Fri Dec 19 19:43:20.095761 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:20947] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aUU6WLMyJ3XqeDRsbQmLtAAAARI"]
[Fri Dec 19 19:43:20.165173 2025] [:error] [pid 20675:tid 20698] [client 68.218.8.118:8042] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aUU6WLMyJ3XqeDRsbQmLtQAAAQo"]
[Fri Dec 19 19:43:20.250802 2025] [:error] [pid 41451:tid 41455] [client 68.218.8.118:8090] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about3.php"] [unique_id "aUU6WAYXFn-DbZghZBHLfwAAAAE"]
[Fri Dec 19 19:43:20.362102 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:8012] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about3.php"] [unique_id "aUU6WMpAnrkQKZ4b5gYhvwAAANg"]
[Fri Dec 19 19:43:20.490975 2025] [:error] [pid 20582:tid 20647] [client 68.218.8.118:8113] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about3.php"] [unique_id "aUU6WMpAnrkQKZ4b5gYhwQAAAMU"]
[Fri Dec 19 19:43:20.622352 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:20969] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about3.php"] [unique_id "aUU6WLMyJ3XqeDRsbQmLuAAAAQE"]
[Fri Dec 19 19:43:20.751266 2025] [:error] [pid 20675:tid 20695] [client 68.218.8.118:8040] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUU6WLMyJ3XqeDRsbQmLuQAAAQc"]
[Fri Dec 19 19:43:20.883477 2025] [:error] [pid 20675:tid 20710] [client 68.218.8.118:8013] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUU6WLMyJ3XqeDRsbQmLugAAARY"]
[Fri Dec 19 19:43:20.986167 2025] [:error] [pid 41451:tid 41463] [client 68.218.8.118:8146] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUU6WAYXFn-DbZghZBHLgQAAAAk"]
[Fri Dec 19 19:43:21.066923 2025] [:error] [pid 20580:tid 20602] [client 68.218.8.118:8038] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUU6WUmd1op_YdAdgR2OswAAAFA"]
[Fri Dec 19 19:43:21.160479 2025] [:error] [pid 41451:tid 41461] [client 68.218.8.118:7962] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUU6WQYXFn-DbZghZBHLggAAAAc"]
[Fri Dec 19 19:43:21.257261 2025] [:error] [pid 20580:tid 20592] [client 68.218.8.118:8178] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUU6WUmd1op_YdAdgR2OtQAAAEY"]
[Fri Dec 19 19:43:21.374566 2025] [:error] [pid 20675:tid 20704] [client 68.218.8.118:8025] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUU6WbMyJ3XqeDRsbQmLuwAAARA"]
[Fri Dec 19 19:43:21.446682 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:7976] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUU6WbMyJ3XqeDRsbQmLvAAAAQI"]
[Fri Dec 19 19:43:21.535456 2025] [:error] [pid 41451:tid 41464] [client 68.218.8.118:20952] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUU6WQYXFn-DbZghZBHLgwAAAAo"]
[Fri Dec 19 19:43:21.616476 2025] [:error] [pid 20675:tid 20712] [client 68.218.8.118:8054] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUU6WbMyJ3XqeDRsbQmLvQAAARg"]
[Fri Dec 19 19:43:21.709543 2025] [:error] [pid 20675:tid 20702] [client 68.218.8.118:7946] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUU6WbMyJ3XqeDRsbQmLvgAAAQ4"]
[Fri Dec 19 19:43:21.807445 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:8149] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUU6WQYXFn-DbZghZBHLhAAAABM"]
[Fri Dec 19 19:43:21.935706 2025] [:error] [pid 20580:tid 20589] [client 68.218.8.118:8041] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUU6WUmd1op_YdAdgR2OuAAAAEM"]
[Fri Dec 19 19:43:22.014306 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:8051] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUU6WspAnrkQKZ4b5gYhxQAAAM8"]
[Fri Dec 19 19:43:22.100886 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:8104] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUU6Wkmd1op_YdAdgR2OuQAAAEE"]
[Fri Dec 19 19:43:22.173428 2025] [:error] [pid 20582:tid 20663] [client 68.218.8.118:7984] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUU6WspAnrkQKZ4b5gYhxgAAANU"]
[Fri Dec 19 19:43:22.239948 2025] [:error] [pid 41451:tid 41472] [client 68.218.8.118:8081] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aUU6WgYXFn-DbZghZBHLhgAAABI"]
[Fri Dec 19 19:43:22.298478 2025] [:error] [pid 20582:tid 20664] [client 68.218.8.118:20963] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aUU6WspAnrkQKZ4b5gYhxwAAANY"]
[Fri Dec 19 19:43:22.383955 2025] [:error] [pid 20581:tid 20632] [client 68.218.8.118:8016] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aUU6WvxEv7WXNhnFD1l15gAAAJE"]
[Fri Dec 19 19:43:22.464034 2025] [:error] [pid 20675:tid 20696] [client 68.218.8.118:8066] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aUU6WrMyJ3XqeDRsbQmLwAAAAQg"]
[Fri Dec 19 19:43:22.526937 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:20967] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aUU6WvxEv7WXNhnFD1l15wAAAIY"]
[Fri Dec 19 19:43:22.603524 2025] [:error] [pid 20581:tid 20624] [client 68.218.8.118:8028] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aUU6WvxEv7WXNhnFD1l16AAAAIk"]
[Fri Dec 19 19:43:22.674683 2025] [:error] [pid 20675:tid 20692] [client 68.218.8.118:8118] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aUU6WrMyJ3XqeDRsbQmLwQAAAQQ"]
[Fri Dec 19 19:43:22.756772 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:8033] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aUU6WrMyJ3XqeDRsbQmLwgAAAQw"]
[Fri Dec 19 19:43:22.845195 2025] [:error] [pid 20675:tid 20697] [client 68.218.8.118:7966] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUU6WrMyJ3XqeDRsbQmLwwAAAQk"]
[Fri Dec 19 19:43:22.930930 2025] [:error] [pid 20675:tid 20699] [client 68.218.8.118:8071] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUU6WrMyJ3XqeDRsbQmLxAAAAQs"]
[Fri Dec 19 19:43:23.043459 2025] [:error] [pid 20675:tid 20709] [client 68.218.8.118:8073] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUU6W7MyJ3XqeDRsbQmLxQAAARU"]
[Fri Dec 19 19:43:23.135996 2025] [:error] [pid 20581:tid 20619] [client 68.218.8.118:20932] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUU6W_xEv7WXNhnFD1l16QAAAIQ"]
[Fri Dec 19 19:43:23.214897 2025] [:error] [pid 20581:tid 20635] [client 68.218.8.118:7956] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUU6W_xEv7WXNhnFD1l16gAAAJQ"]
[Fri Dec 19 19:43:23.307812 2025] [:error] [pid 20581:tid 20630] [client 68.218.8.118:7993] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUU6W_xEv7WXNhnFD1l16wAAAI8"]
[Fri Dec 19 19:43:23.411401 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:8056] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUU6W_xEv7WXNhnFD1l17AAAAIA"]
[Fri Dec 19 19:43:23.512198 2025] [:error] [pid 20580:tid 20593] [client 68.218.8.118:8109] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUU6W0md1op_YdAdgR2OvgAAAEc"]
[Fri Dec 19 19:43:23.597347 2025] [:error] [pid 20675:tid 20708] [client 68.218.8.118:7961] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUU6W7MyJ3XqeDRsbQmLxwAAARQ"]
[Fri Dec 19 19:43:23.670017 2025] [:error] [pid 20582:tid 20651] [client 68.218.8.118:8000] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUU6W8pAnrkQKZ4b5gYhzQAAAMk"]
[Fri Dec 19 19:43:23.779153 2025] [:error] [pid 20582:tid 20655] [client 68.218.8.118:8031] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUU6W8pAnrkQKZ4b5gYhzgAAAM0"]
[Fri Dec 19 19:43:23.857713 2025] [:error] [pid 20581:tid 20628] [client 68.218.8.118:8117] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUU6W_xEv7WXNhnFD1l17QAAAI0"]
[Fri Dec 19 19:43:23.952208 2025] [:error] [pid 20582:tid 20665] [client 68.218.8.118:7986] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUU6W8pAnrkQKZ4b5gYhzwAAANc"]
[Fri Dec 19 19:43:24.048409 2025] [:error] [pid 20581:tid 20638] [client 68.218.8.118:8111] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUU6XPxEv7WXNhnFD1l17gAAAJc"]
[Fri Dec 19 19:43:24.139093 2025] [:error] [pid 20580:tid 20599] [client 68.218.8.118:8067] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUU6XEmd1op_YdAdgR2OvwAAAE0"]
[Fri Dec 19 19:43:24.206602 2025] [:error] [pid 20580:tid 20597] [client 68.218.8.118:7950] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUU6XEmd1op_YdAdgR2OwAAAAEs"]
[Fri Dec 19 19:43:24.277474 2025] [:error] [pid 20581:tid 20625] [client 68.218.8.118:7973] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUU6XPxEv7WXNhnFD1l17wAAAIo"]
[Fri Dec 19 19:43:24.358179 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:7987] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUU6XLMyJ3XqeDRsbQmLyQAAARI"]
[Fri Dec 19 19:43:24.467026 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:7923] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUU6XLMyJ3XqeDRsbQmLygAAAQE"]
[Fri Dec 19 19:43:24.542939 2025] [:error] [pid 20581:tid 20616] [client 68.218.8.118:8062] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUU6XPxEv7WXNhnFD1l18AAAAIE"]
[Fri Dec 19 19:43:24.627525 2025] [:error] [pid 20582:tid 20645] [client 68.218.8.118:8050] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aUU6XMpAnrkQKZ4b5gYh0AAAAMM"]
[Fri Dec 19 19:43:24.714921 2025] [:error] [pid 20580:tid 20598] [client 68.218.8.118:8032] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aUU6XEmd1op_YdAdgR2OwwAAAEw"]
[Fri Dec 19 19:43:24.831816 2025] [:error] [pid 20581:tid 20636] [client 68.218.8.118:8004] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aUU6XPxEv7WXNhnFD1l18QAAAJU"]
[Fri Dec 19 19:43:24.927270 2025] [:error] [pid 20580:tid 20591] [client 68.218.8.118:7979] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aUU6XEmd1op_YdAdgR2OxAAAAEU"]
[Fri Dec 19 19:43:25.015638 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:7902] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aUU6XfxEv7WXNhnFD1l18wAAAIc"]
[Fri Dec 19 19:43:25.094859 2025] [:error] [pid 20675:tid 20710] [client 68.218.8.118:7936] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aUU6XbMyJ3XqeDRsbQmL0AAAARY"]
[Fri Dec 19 19:43:25.167329 2025] [:error] [pid 20675:tid 20712] [client 68.218.8.118:8103] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aUU6XbMyJ3XqeDRsbQmL0QAAARg"]
[Fri Dec 19 19:43:25.264179 2025] [:error] [pid 20582:tid 20642] [client 68.218.8.118:8164] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aUU6XcpAnrkQKZ4b5gYh0gAAAMA"]
[Fri Dec 19 19:43:25.370013 2025] [:error] [pid 20675:tid 20711] [client 68.218.8.118:8014] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUU6XbMyJ3XqeDRsbQmL0wAAARc"]
[Fri Dec 19 19:43:25.491760 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:7951] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUU6XbMyJ3XqeDRsbQmL1QAAAQw"]
[Fri Dec 19 19:43:25.583987 2025] [:error] [pid 20580:tid 20592] [client 68.218.8.118:7967] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUU6XUmd1op_YdAdgR2OxgAAAEY"]
[Fri Dec 19 19:43:25.655559 2025] [:error] [pid 20581:tid 20629] [client 68.218.8.118:8064] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUU6XfxEv7WXNhnFD1l19AAAAI4"]
[Fri Dec 19 19:43:25.726773 2025] [:error] [pid 20580:tid 20609] [client 68.218.8.118:8045] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aUU6XUmd1op_YdAdgR2OxwAAAFc"]
[Fri Dec 19 19:43:25.802707 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:8086] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aUU6XUmd1op_YdAdgR2OyQAAAEE"]
[Fri Dec 19 19:43:25.870156 2025] [:error] [pid 20582:tid 20664] [client 68.218.8.118:7953] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aUU6XcpAnrkQKZ4b5gYh1AAAANY"]
[Fri Dec 19 19:43:25.914783 2025] [:error] [pid 20580:tid 20607] [client 68.218.8.118:7975] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aUU6XUmd1op_YdAdgR2OygAAAFU"]
[Fri Dec 19 19:43:25.951388 2025] [:error] [pid 20580:tid 20588] [client 68.218.8.118:8015] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUU6XUmd1op_YdAdgR2OywAAAEI"]
[Fri Dec 19 19:43:25.992482 2025] [:error] [pid 20580:tid 20603] [client 68.218.8.118:7982] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aUU6XUmd1op_YdAdgR2OzAAAAFE"]
[Fri Dec 19 19:43:26.028332 2025] [:error] [pid 20582:tid 20654] [client 68.218.8.118:7938] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aUU6XspAnrkQKZ4b5gYh1wAAAMw"]
[Fri Dec 19 19:43:26.103707 2025] [:error] [pid 20581:tid 20634] [client 68.218.8.118:7964] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aUU6XvxEv7WXNhnFD1l19gAAAJM"]
[Fri Dec 19 19:43:26.180433 2025] [:error] [pid 20581:tid 20639] [client 68.218.8.118:7939] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUU6XvxEv7WXNhnFD1l19wAAAJg"]
[Fri Dec 19 19:43:26.256843 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:8043] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aUU6XspAnrkQKZ4b5gYh2gAAAMs"]
[Fri Dec 19 19:43:26.334285 2025] [:error] [pid 20582:tid 20660] [client 68.218.8.118:7970] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aUU6XspAnrkQKZ4b5gYh2wAAANI"]
[Fri Dec 19 19:43:26.448243 2025] [:error] [pid 20582:tid 20659] [client 68.218.8.118:7882] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aUU6XspAnrkQKZ4b5gYh3AAAANE"]
[Fri Dec 19 19:43:26.533519 2025] [:error] [pid 20582:tid 20651] [client 68.218.8.118:7907] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUU6XspAnrkQKZ4b5gYh3QAAAMk"]
[Fri Dec 19 19:43:26.612060 2025] [:error] [pid 20675:tid 20710] [client 68.218.8.118:8166] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUU6XrMyJ3XqeDRsbQmL2wAAARY"]
[Fri Dec 19 19:43:26.687965 2025] [:error] [pid 41451:tid 41456] [client 68.218.8.118:8110] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUU6XgYXFn-DbZghZBHLiAAAAAI"]
[Fri Dec 19 19:43:26.767884 2025] [:error] [pid 20582:tid 20665] [client 68.218.8.118:8126] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUU6XspAnrkQKZ4b5gYh3gAAANc"]
[Fri Dec 19 19:43:26.846326 2025] [:error] [pid 20675:tid 20704] [client 68.218.8.118:7926] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aUU6XrMyJ3XqeDRsbQmL3AAAARA"]
[Fri Dec 19 19:43:26.924995 2025] [:error] [pid 20582:tid 20645] [client 68.218.8.118:7954] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aUU6XspAnrkQKZ4b5gYh3wAAAMM"]
[Fri Dec 19 19:43:27.017830 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:8029] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aUU6X8pAnrkQKZ4b5gYh4AAAAMg"]
[Fri Dec 19 19:43:27.102761 2025] [:error] [pid 20581:tid 20633] [client 68.218.8.118:8120] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aUU6X_xEv7WXNhnFD1l1-AAAAJI"]
[Fri Dec 19 19:43:27.194899 2025] [:error] [pid 20582:tid 20642] [client 68.218.8.118:7884] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUU6X8pAnrkQKZ4b5gYh4gAAAMA"]
[Fri Dec 19 19:43:27.296714 2025] [:error] [pid 20582:tid 20662] [client 68.218.8.118:7883] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUU6X8pAnrkQKZ4b5gYh4wAAANQ"]
[Fri Dec 19 19:43:27.406299 2025] [:error] [pid 20582:tid 20648] [client 68.218.8.118:7927] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUU6X8pAnrkQKZ4b5gYh5AAAAMY"]
[Fri Dec 19 19:43:27.537777 2025] [:error] [pid 20582:tid 20649] [client 68.218.8.118:8030] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUU6X8pAnrkQKZ4b5gYh5QAAAMc"]
[Fri Dec 19 19:43:27.656246 2025] [:error] [pid 20675:tid 20711] [client 68.218.8.118:7906] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUU6X7MyJ3XqeDRsbQmL3QAAARc"]
[Fri Dec 19 19:43:27.768413 2025] [:error] [pid 20582:tid 20643] [client 68.218.8.118:7899] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aUU6X8pAnrkQKZ4b5gYh5gAAAME"]
[Fri Dec 19 19:43:27.858175 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:8005] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aUU6X8pAnrkQKZ4b5gYh5wAAAM8"]
[Fri Dec 19 19:43:27.934002 2025] [:error] [pid 20580:tid 20601] [client 68.218.8.118:7898] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aUU6X0md1op_YdAdgR2OzQAAAE8"]
[Fri Dec 19 19:43:28.022788 2025] [:error] [pid 20582:tid 20663] [client 68.218.8.118:7943] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aUU6YMpAnrkQKZ4b5gYh6AAAANU"]
[Fri Dec 19 19:43:28.103388 2025] [:error] [pid 20581:tid 20619] [client 68.218.8.118:8057] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aUU6YPxEv7WXNhnFD1l1-gAAAIQ"]
[Fri Dec 19 19:43:28.183133 2025] [:error] [pid 20582:tid 20654] [client 68.218.8.118:7812] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aUU6YMpAnrkQKZ4b5gYh6gAAAMw"]
[Fri Dec 19 19:43:28.293718 2025] [:error] [pid 20582:tid 20646] [client 68.218.8.118:7985] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aUU6YMpAnrkQKZ4b5gYh6wAAAMQ"]
[Fri Dec 19 19:43:28.374693 2025] [:error] [pid 20582:tid 20644] [client 68.218.8.118:7947] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aUU6YMpAnrkQKZ4b5gYh7AAAAMI"]
[Fri Dec 19 19:43:28.455732 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:7886] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aUU6YMpAnrkQKZ4b5gYh7QAAAMs"]
[Fri Dec 19 19:43:28.540212 2025] [:error] [pid 20582:tid 20660] [client 68.218.8.118:8151] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aUU6YMpAnrkQKZ4b5gYh7wAAANI"]
[Fri Dec 19 19:43:28.626954 2025] [:error] [pid 20580:tid 20602] [client 68.218.8.118:7941] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aUU6YEmd1op_YdAdgR2OzwAAAFA"]
[Fri Dec 19 19:43:28.703905 2025] [:error] [pid 20580:tid 20592] [client 68.218.8.118:8046] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUU6YEmd1op_YdAdgR2O0QAAAEY"]
[Fri Dec 19 19:43:28.775971 2025] [:error] [pid 20581:tid 20635] [client 68.218.8.118:8027] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUU6YPxEv7WXNhnFD1l1-wAAAJQ"]
[Fri Dec 19 19:43:28.856942 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:7988] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUU6YPxEv7WXNhnFD1l1_QAAAIA"]
[Fri Dec 19 19:43:28.955056 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:8037] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUU6YMpAnrkQKZ4b5gYh8AAAAMg"]
[Fri Dec 19 19:43:29.028592 2025] [:error] [pid 20581:tid 20638] [client 68.218.8.118:8017] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aUU6YfxEv7WXNhnFD1l1_gAAAJc"]
[Fri Dec 19 19:43:29.104001 2025] [:error] [pid 20582:tid 20655] [client 68.218.8.118:7949] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aUU6YcpAnrkQKZ4b5gYh8QAAAM0"]
[Fri Dec 19 19:43:29.215240 2025] [:error] [pid 20581:tid 20628] [client 68.218.8.118:8153] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aUU6YfxEv7WXNhnFD1l2AQAAAI0"]
[Fri Dec 19 19:43:29.290465 2025] [:error] [pid 20582:tid 20662] [client 68.218.8.118:7990] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aUU6YcpAnrkQKZ4b5gYh9AAAANQ"]
[Fri Dec 19 19:43:29.363260 2025] [:error] [pid 20580:tid 20600] [client 68.218.8.118:7945] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aUU6YUmd1op_YdAdgR2O0gAAAE4"]
[Fri Dec 19 19:43:29.450965 2025] [:error] [pid 20580:tid 20609] [client 68.218.8.118:7942] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aUU6YUmd1op_YdAdgR2O0wAAAFc"]
[Fri Dec 19 19:43:29.555705 2025] [:error] [pid 20580:tid 20586] [client 68.218.8.118:8100] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aUU6YUmd1op_YdAdgR2O1AAAAEA"]
[Fri Dec 19 19:43:29.642589 2025] [:error] [pid 20581:tid 20627] [client 68.218.8.118:8059] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aUU6YfxEv7WXNhnFD1l2AgAAAIw"]
[Fri Dec 19 19:43:29.725946 2025] [:error] [pid 20582:tid 20658] [client 68.218.8.118:7934] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aUU6YcpAnrkQKZ4b5gYh9QAAANA"]
[Fri Dec 19 19:43:29.814178 2025] [:error] [pid 20582:tid 20661] [client 68.218.8.118:7888] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aUU6YcpAnrkQKZ4b5gYh9gAAANM"]
[Fri Dec 19 19:43:29.898478 2025] [:error] [pid 20581:tid 20629] [client 68.218.8.118:7915] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aUU6YfxEv7WXNhnFD1l2AwAAAI4"]
[Fri Dec 19 19:43:30.003490 2025] [:error] [pid 20582:tid 20643] [client 68.218.8.118:7965] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aUU6YspAnrkQKZ4b5gYh9wAAAME"]
[Fri Dec 19 19:43:30.137116 2025] [:error] [pid 20675:tid 20705] [client 68.218.8.118:7952] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aUU6YrMyJ3XqeDRsbQmL3gAAARE"]
[Fri Dec 19 19:43:30.229248 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:7960] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aUU6YspAnrkQKZ4b5gYh-AAAAM8"]
[Fri Dec 19 19:43:30.316863 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:8119] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aUU6YrMyJ3XqeDRsbQmL4AAAARI"]
[Fri Dec 19 19:43:30.401321 2025] [:error] [pid 20675:tid 20699] [client 68.218.8.118:7880] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aUU6YrMyJ3XqeDRsbQmL4QAAAQs"]
[Fri Dec 19 19:43:30.473109 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:20955] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUU6YrMyJ3XqeDRsbQmL4gAAAQE"]
[Fri Dec 19 19:43:30.544257 2025] [:error] [pid 20675:tid 20694] [client 68.218.8.118:8061] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUU6YrMyJ3XqeDRsbQmL5AAAAQY"]
[Fri Dec 19 19:43:30.643845 2025] [:error] [pid 20675:tid 20698] [client 68.218.8.118:7889] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUU6YrMyJ3XqeDRsbQmL5QAAAQo"]
[Fri Dec 19 19:43:30.736724 2025] [:error] [pid 20580:tid 20589] [client 68.218.8.118:8049] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUU6Ykmd1op_YdAdgR2O1QAAAEM"]
[Fri Dec 19 19:43:30.837226 2025] [:error] [pid 20581:tid 20620] [client 68.218.8.118:7959] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aUU6YvxEv7WXNhnFD1l2BQAAAIU"]
[Fri Dec 19 19:43:30.957085 2025] [:error] [pid 20581:tid 20639] [client 68.218.8.118:7892] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aUU6YvxEv7WXNhnFD1l2BgAAAJg"]
[Fri Dec 19 19:43:31.069772 2025] [:error] [pid 20581:tid 20623] [client 68.218.8.118:7995] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aUU6Y_xEv7WXNhnFD1l2BwAAAIg"]
[Fri Dec 19 19:43:31.173704 2025] [:error] [pid 20582:tid 20654] [client 68.218.8.118:7931] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aUU6Y8pAnrkQKZ4b5gYh-gAAAMw"]
[Fri Dec 19 19:43:31.288477 2025] [:error] [pid 20581:tid 20618] [client 68.218.8.118:7974] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aUU6Y_xEv7WXNhnFD1l2CAAAAIM"]
[Fri Dec 19 19:43:31.411635 2025] [:error] [pid 20582:tid 20646] [client 68.218.8.118:7957] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUU6Y8pAnrkQKZ4b5gYh-wAAAMQ"]
[Fri Dec 19 19:43:31.559235 2025] [:error] [pid 20581:tid 20637] [client 68.218.8.118:7887] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUU6Y_xEv7WXNhnFD1l2CQAAAJY"]
[Fri Dec 19 19:43:31.695674 2025] [:error] [pid 20582:tid 20644] [client 68.218.8.118:7811] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUU6Y8pAnrkQKZ4b5gYh_AAAAMI"]
[Fri Dec 19 19:43:31.809932 2025] [:error] [pid 20581:tid 20633] [client 68.218.8.118:7991] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUU6Y_xEv7WXNhnFD1l2CgAAAJI"]
[Fri Dec 19 19:43:31.909637 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:7890] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aUU6Y8pAnrkQKZ4b5gYh_QAAAMs"]
[Fri Dec 19 19:43:32.008660 2025] [:error] [pid 41451:tid 41469] [client 68.218.8.118:8052] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aUU6ZAYXFn-DbZghZBHLjgAAAA8"]
[Fri Dec 19 19:43:32.117736 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:7900] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aUU6ZPxEv7WXNhnFD1l2DAAAAIY"]
[Fri Dec 19 19:43:32.195828 2025] [:error] [pid 20582:tid 20660] [client 68.218.8.118:7877] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aUU6ZMpAnrkQKZ4b5gYh_gAAANI"]
[Fri Dec 19 19:43:32.273918 2025] [:error] [pid 20582:tid 20659] [client 68.218.8.118:8035] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aUU6ZMpAnrkQKZ4b5gYh_wAAANE"]
[Fri Dec 19 19:43:32.379835 2025] [:error] [pid 20581:tid 20624] [client 68.218.8.118:7997] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aUU6ZPxEv7WXNhnFD1l2DQAAAIk"]
[Fri Dec 19 19:43:32.462831 2025] [:error] [pid 20581:tid 20631] [client 68.218.8.118:7818] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aUU6ZPxEv7WXNhnFD1l2DgAAAJA"]
[Fri Dec 19 19:43:32.578411 2025] [:error] [pid 20582:tid 20664] [client 68.218.8.118:7878] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aUU6ZMpAnrkQKZ4b5gYiAAAAANY"]
[Fri Dec 19 19:43:32.671970 2025] [:error] [pid 20581:tid 20619] [client 68.218.8.118:7978] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUU6ZPxEv7WXNhnFD1l2DwAAAIQ"]
[Fri Dec 19 19:43:32.754334 2025] [:error] [pid 20582:tid 20665] [client 68.218.8.118:7981] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUU6ZMpAnrkQKZ4b5gYiAQAAANc"]
[Fri Dec 19 19:43:32.850895 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:7980] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUU6ZPxEv7WXNhnFD1l2EQAAAIA"]
[Fri Dec 19 19:43:32.950631 2025] [:error] [pid 20581:tid 20625] [client 68.218.8.118:7925] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aUU6ZPxEv7WXNhnFD1l2EgAAAIo"]
[Fri Dec 19 19:43:33.058750 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:8020] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUU6ZcpAnrkQKZ4b5gYiAwAAAMg"]
[Fri Dec 19 19:43:33.171862 2025] [:error] [pid 20580:tid 20610] [client 68.218.8.118:8098] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUU6ZUmd1op_YdAdgR2O2QAAAFg"]
[Fri Dec 19 19:43:33.293149 2025] [:error] [pid 20580:tid 20603] [client 68.218.8.118:7872] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUU6ZUmd1op_YdAdgR2O2gAAAFE"]
[Fri Dec 19 19:43:33.416001 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:7908] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aUU6ZfxEv7WXNhnFD1l2EwAAAIc"]
[Fri Dec 19 19:43:33.512388 2025] [:error] [pid 20582:tid 20655] [client 68.218.8.118:7905] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aUU6ZcpAnrkQKZ4b5gYiBAAAAM0"]
[Fri Dec 19 19:43:33.618164 2025] [:error] [pid 20580:tid 20597] [client 68.218.8.118:7879] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aUU6ZUmd1op_YdAdgR2O3AAAAEs"]
[Fri Dec 19 19:43:33.693879 2025] [:error] [pid 20580:tid 20596] [client 68.218.8.118:7816] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aUU6ZUmd1op_YdAdgR2O3QAAAEo"]
[Fri Dec 19 19:43:33.759220 2025] [:error] [pid 20581:tid 20627] [client 68.218.8.118:8058] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aUU6ZfxEv7WXNhnFD1l2FQAAAIw"]
[Fri Dec 19 19:43:33.839627 2025] [:error] [pid 20580:tid 20590] [client 68.218.8.118:7911] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aUU6ZUmd1op_YdAdgR2O3gAAAEQ"]
[Fri Dec 19 19:43:33.935483 2025] [:error] [pid 20580:tid 20591] [client 68.218.8.118:7858] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aUU6ZUmd1op_YdAdgR2O3wAAAEU"]
[Fri Dec 19 19:43:34.015384 2025] [:error] [pid 20675:tid 20712] [client 68.218.8.118:7893] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aUU6ZrMyJ3XqeDRsbQmL5wAAARg"]
[Fri Dec 19 19:43:34.102619 2025] [:error] [pid 20675:tid 20703] [client 68.218.8.118:7770] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aUU6ZrMyJ3XqeDRsbQmL6AAAAQ8"]
[Fri Dec 19 19:43:34.175528 2025] [:error] [pid 20582:tid 20642] [client 68.218.8.118:8127] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aUU6ZspAnrkQKZ4b5gYiBQAAAMA"]
[Fri Dec 19 19:43:34.252119 2025] [:error] [pid 20582:tid 20662] [client 68.218.8.118:7920] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aUU6ZspAnrkQKZ4b5gYiBgAAANQ"]
[Fri Dec 19 19:43:34.324623 2025] [:error] [pid 20582:tid 20648] [client 68.218.8.118:7759] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aUU6ZspAnrkQKZ4b5gYiBwAAAMY"]
[Fri Dec 19 19:43:34.416508 2025] [:error] [pid 41451:tid 41463] [client 68.218.8.118:7968] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aUU6ZgYXFn-DbZghZBHLkQAAAAk"]
[Fri Dec 19 19:43:34.510950 2025] [:error] [pid 20581:tid 20626] [client 68.218.8.118:7821] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aUU6ZvxEv7WXNhnFD1l2GAAAAIs"]
[Fri Dec 19 19:43:34.612868 2025] [:error] [pid 20581:tid 20623] [client 68.218.8.118:7874] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aUU6ZvxEv7WXNhnFD1l2GQAAAIg"]
[Fri Dec 19 19:43:34.670496 2025] [:error] [pid 20581:tid 20617] [client 68.218.8.118:7758] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aUU6ZvxEv7WXNhnFD1l2GwAAAII"]
[Fri Dec 19 19:43:34.733013 2025] [:error] [pid 20581:tid 20618] [client 68.218.8.118:20902] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aUU6ZvxEv7WXNhnFD1l2HAAAAIM"]
[Fri Dec 19 19:43:34.800063 2025] [:error] [pid 20675:tid 20702] [client 68.218.8.118:7895] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aUU6ZrMyJ3XqeDRsbQmL6QAAAQ4"]
[Fri Dec 19 19:43:34.905447 2025] [:error] [pid 20582:tid 20661] [client 68.218.8.118:7971] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aUU6ZspAnrkQKZ4b5gYiCAAAANM"]
[Fri Dec 19 19:43:34.986380 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:7827] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aUU6ZrMyJ3XqeDRsbQmL7AAAAQw"]
[Fri Dec 19 19:43:35.084826 2025] [:error] [pid 20675:tid 20697] [client 68.218.8.118:7909] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aUU6Z7MyJ3XqeDRsbQmL7QAAAQk"]
[Fri Dec 19 19:43:35.196117 2025] [:error] [pid 20675:tid 20696] [client 68.218.8.118:7881] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aUU6Z7MyJ3XqeDRsbQmL7gAAAQg"]
[Fri Dec 19 19:43:35.266937 2025] [:error] [pid 20675:tid 20709] [client 68.218.8.118:7819] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aUU6Z7MyJ3XqeDRsbQmL7wAAARU"]
[Fri Dec 19 19:43:35.344190 2025] [:error] [pid 20581:tid 20633] [client 68.218.8.118:7834] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aUU6Z_xEv7WXNhnFD1l2HQAAAJI"]
[Fri Dec 19 19:43:35.417803 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:7862] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aUU6Z8pAnrkQKZ4b5gYiCwAAAM8"]
[Fri Dec 19 19:43:35.510591 2025] [:error] [pid 20580:tid 20589] [client 68.218.8.118:20892] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUU6Z0md1op_YdAdgR2O5AAAAEM"]
[Fri Dec 19 19:43:35.627746 2025] [:error] [pid 41451:tid 41461] [client 68.218.8.118:7835] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUU6ZwYXFn-DbZghZBHLkgAAAAc"]
[Fri Dec 19 19:43:35.707917 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:7989] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUU6Z7MyJ3XqeDRsbQmL8gAAARI"]
[Fri Dec 19 19:43:35.791122 2025] [:error] [pid 20582:tid 20647] [client 68.218.8.118:7808] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUU6Z8pAnrkQKZ4b5gYiDAAAAMU"]
[Fri Dec 19 19:43:35.869674 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:7751] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aUU6Z7MyJ3XqeDRsbQmL9AAAAQE"]
[Fri Dec 19 19:43:35.963511 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:7891] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aUU6Z_xEv7WXNhnFD1l2HgAAAIY"]
[Fri Dec 19 19:43:36.075940 2025] [:error] [pid 20580:tid 20607] [client 68.218.8.118:7913] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aUU6aEmd1op_YdAdgR2O5QAAAFU"]
[Fri Dec 19 19:43:36.210112 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:7852] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aUU6aEmd1op_YdAdgR2O5wAAAEE"]
[Fri Dec 19 19:43:36.328210 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:7998] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aUU6aPxEv7WXNhnFD1l2HwAAAIA"]
[Fri Dec 19 19:43:36.422648 2025] [:error] [pid 20581:tid 20635] [client 68.218.8.118:7916] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aUU6aPxEv7WXNhnFD1l2IAAAAJQ"]
[Fri Dec 19 19:43:36.524407 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:7828] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aUU6aAYXFn-DbZghZBHLkwAAABM"]
[Fri Dec 19 19:43:36.627511 2025] [:error] [pid 41451:tid 41458] [client 68.218.8.118:7896] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aUU6aAYXFn-DbZghZBHLlAAAAAQ"]
[Fri Dec 19 19:43:36.697487 2025] [:error] [pid 20581:tid 20630] [client 68.218.8.118:7856] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUU6aPxEv7WXNhnFD1l2IwAAAI8"]
[Fri Dec 19 19:43:36.772685 2025] [:error] [pid 20581:tid 20636] [client 68.218.8.118:7994] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUU6aPxEv7WXNhnFD1l2JAAAAJU"]
[Fri Dec 19 19:43:36.868379 2025] [:error] [pid 41451:tid 41472] [client 68.218.8.118:7745] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUU6aAYXFn-DbZghZBHLlQAAABI"]
[Fri Dec 19 19:43:36.947932 2025] [:error] [pid 20582:tid 20644] [client 68.218.8.118:7894] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUU6aMpAnrkQKZ4b5gYiDwAAAMI"]
[Fri Dec 19 19:43:37.055331 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:8060] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aUU6acpAnrkQKZ4b5gYiEAAAAMs"]
[Fri Dec 19 19:43:37.182339 2025] [:error] [pid 20582:tid 20659] [client 68.218.8.118:7897] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aUU6acpAnrkQKZ4b5gYiEgAAANE"]
[Fri Dec 19 19:43:37.275703 2025] [:error] [pid 20582:tid 20664] [client 68.218.8.118:7756] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aUU6acpAnrkQKZ4b5gYiEwAAANY"]
[Fri Dec 19 19:43:37.375429 2025] [:error] [pid 20582:tid 20663] [client 68.218.8.118:7919] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aUU6acpAnrkQKZ4b5gYiFAAAANU"]
[Fri Dec 19 19:43:37.495023 2025] [:error] [pid 20580:tid 20590] [client 68.218.8.118:7836] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUU6aUmd1op_YdAdgR2O7AAAAEQ"]
[Fri Dec 19 19:43:37.585645 2025] [:error] [pid 20581:tid 20616] [client 68.218.8.118:7837] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUU6afxEv7WXNhnFD1l2JwAAAIE"]
[Fri Dec 19 19:43:37.691412 2025] [:error] [pid 41451:tid 41466] [client 68.218.8.118:7977] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUU6aQYXFn-DbZghZBHLmAAAAAw"]
[Fri Dec 19 19:43:37.774867 2025] [:error] [pid 20581:tid 20620] [client 68.218.8.118:8162] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUU6afxEv7WXNhnFD1l2KAAAAIU"]
[Fri Dec 19 19:43:37.862724 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:7875] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aUU6acpAnrkQKZ4b5gYiFgAAAMg"]
[Fri Dec 19 19:43:37.954830 2025] [:error] [pid 20675:tid 20698] [client 68.218.8.118:7746] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aUU6abMyJ3XqeDRsbQmL9QAAAQo"]
[Fri Dec 19 19:43:38.145533 2025] [:error] [pid 20675:tid 20707] [client 68.218.8.118:7817] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aUU6arMyJ3XqeDRsbQmL9gAAARM"]
[Fri Dec 19 19:43:38.272017 2025] [:error] [pid 20581:tid 20623] [client 68.218.8.118:7917] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aUU6avxEv7WXNhnFD1l2KQAAAIg"]
[Fri Dec 19 19:43:38.387156 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:7933] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aUU6arMyJ3XqeDRsbQmL-AAAAQI"]
[Fri Dec 19 19:43:38.505808 2025] [:error] [pid 20675:tid 20703] [client 68.218.8.118:7847] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aUU6arMyJ3XqeDRsbQmL-QAAAQ8"]
[Fri Dec 19 19:43:38.618596 2025] [:error] [pid 20581:tid 20617] [client 68.218.8.118:7861] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aUU6avxEv7WXNhnFD1l2LAAAAII"]
[Fri Dec 19 19:43:38.769280 2025] [:error] [pid 20675:tid 20695] [client 68.218.8.118:7778] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aUU6arMyJ3XqeDRsbQmL-gAAAQc"]
[Fri Dec 19 19:43:38.869080 2025] [:error] [pid 20580:tid 20601] [client 68.218.8.118:7824] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUU6akmd1op_YdAdgR2O7wAAAE8"]
[Fri Dec 19 19:43:38.964681 2025] [:error] [pid 20581:tid 20637] [client 68.218.8.118:7885] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUU6avxEv7WXNhnFD1l2LgAAAJY"]
[Fri Dec 19 19:43:39.044059 2025] [:error] [pid 20581:tid 20633] [client 68.218.8.118:7840] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUU6a_xEv7WXNhnFD1l2LwAAAJI"]
[Fri Dec 19 19:43:39.143542 2025] [:error] [pid 20582:tid 20655] [client 68.218.8.118:7929] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUU6a8pAnrkQKZ4b5gYiFwAAAM0"]
[Fri Dec 19 19:43:39.224319 2025] [:error] [pid 41451:tid 41471] [client 68.218.8.118:7922] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aUU6awYXFn-DbZghZBHLmgAAABE"]
[Fri Dec 19 19:43:39.306944 2025] [:error] [pid 41451:tid 41465] [client 68.218.8.118:7853] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aUU6awYXFn-DbZghZBHLmwAAAAs"]
[Fri Dec 19 19:43:39.426840 2025] [:error] [pid 41451:tid 41475] [client 68.218.8.118:7750] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aUU6awYXFn-DbZghZBHLnAAAABU"]
[Fri Dec 19 19:43:39.509197 2025] [:error] [pid 20582:tid 20666] [client 68.218.8.118:7999] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aUU6a8pAnrkQKZ4b5gYiGAAAANg"]
[Fri Dec 19 19:43:39.615345 2025] [:error] [pid 20675:tid 20696] [client 68.218.8.118:7924] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aUU6a7MyJ3XqeDRsbQmL_gAAAQg"]
[Fri Dec 19 19:43:39.723189 2025] [:error] [pid 20582:tid 20651] [client 68.218.8.118:7822] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aUU6a8pAnrkQKZ4b5gYiGgAAAMk"]
[Fri Dec 19 19:43:39.794622 2025] [:error] [pid 20580:tid 20598] [client 68.218.8.118:7829] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aUU6a0md1op_YdAdgR2O8AAAAEw"]
[Fri Dec 19 19:43:39.859783 2025] [:error] [pid 20582:tid 20649] [client 68.218.8.118:7744] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aUU6a8pAnrkQKZ4b5gYiHAAAAMc"]
[Fri Dec 19 19:43:39.950175 2025] [:error] [pid 20582:tid 20661] [client 68.218.8.118:7868] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUU6a8pAnrkQKZ4b5gYiHQAAANM"]
[Fri Dec 19 19:43:40.044797 2025] [:error] [pid 20580:tid 20602] [client 68.218.8.118:7857] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUU6bEmd1op_YdAdgR2O8QAAAFA"]
[Fri Dec 19 19:43:40.147019 2025] [:error] [pid 20580:tid 20592] [client 68.218.8.118:7813] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUU6bEmd1op_YdAdgR2O8gAAAEY"]
[Fri Dec 19 19:43:40.221616 2025] [:error] [pid 20580:tid 20600] [client 68.218.8.118:7825] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUU6bEmd1op_YdAdgR2O8wAAAE4"]
[Fri Dec 19 19:43:40.298703 2025] [:error] [pid 20582:tid 20645] [client 68.218.8.118:7618] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aUU6bMpAnrkQKZ4b5gYiHwAAAMM"]
[Fri Dec 19 19:43:40.414000 2025] [:error] [pid 20675:tid 20692] [client 68.218.8.118:7918] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aUU6bLMyJ3XqeDRsbQmMAQAAAQQ"]
[Fri Dec 19 19:43:40.513672 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:7901] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aUU6bPxEv7WXNhnFD1l2MAAAAIA"]
[Fri Dec 19 19:43:40.607963 2025] [:error] [pid 41451:tid 41462] [client 68.218.8.118:7771] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aUU6bAYXFn-DbZghZBHLnwAAAAg"]
[Fri Dec 19 19:43:40.723398 2025] [:error] [pid 20582:tid 20657] [client 68.218.8.118:7748] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aUU6bMpAnrkQKZ4b5gYiIAAAAM8"]
[Fri Dec 19 19:43:40.837610 2025] [:error] [pid 20675:tid 20705] [client 68.218.8.118:7928] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aUU6bLMyJ3XqeDRsbQmMAgAAARE"]
[Fri Dec 19 19:43:40.949564 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:7833] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aUU6bLMyJ3XqeDRsbQmMAwAAARI"]
[Fri Dec 19 19:43:41.044153 2025] [:error] [pid 20675:tid 20699] [client 68.218.8.118:7870] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aUU6bbMyJ3XqeDRsbQmMBAAAAQs"]
[Fri Dec 19 19:43:41.142430 2025] [:error] [pid 20675:tid 20694] [client 68.218.8.118:7972] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aUU6bbMyJ3XqeDRsbQmMBQAAAQY"]
[Fri Dec 19 19:43:41.244430 2025] [:error] [pid 20582:tid 20647] [client 68.218.8.118:7866] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aUU6bcpAnrkQKZ4b5gYiIQAAAMU"]
[Fri Dec 19 19:43:41.326242 2025] [:error] [pid 20675:tid 20698] [client 68.218.8.118:8053] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aUU6bbMyJ3XqeDRsbQmMBgAAAQo"]
[Fri Dec 19 19:43:41.458424 2025] [:error] [pid 41451:tid 41468] [client 68.218.8.118:7795] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aUU6bQYXFn-DbZghZBHLogAAAA4"]
[Fri Dec 19 19:43:41.552898 2025] [:error] [pid 20581:tid 20625] [client 68.218.8.118:7842] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUU6bfxEv7WXNhnFD1l2MQAAAIo"]
[Fri Dec 19 19:43:41.638046 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:7809] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUU6bbMyJ3XqeDRsbQmMCgAAAQI"]
[Fri Dec 19 19:43:41.765796 2025] [:error] [pid 20675:tid 20703] [client 68.218.8.118:7848] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUU6bbMyJ3XqeDRsbQmMCwAAAQ8"]
[Fri Dec 19 19:43:41.864980 2025] [:error] [pid 20675:tid 20695] [client 68.218.8.118:7764] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUU6bbMyJ3XqeDRsbQmMDQAAAQc"]
[Fri Dec 19 19:43:41.977786 2025] [:error] [pid 20581:tid 20636] [client 68.218.8.118:7969] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUU6bfxEv7WXNhnFD1l2MwAAAJU"]
[Fri Dec 19 19:43:42.102617 2025] [:error] [pid 20581:tid 20638] [client 68.218.8.118:7935] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUU6bvxEv7WXNhnFD1l2NQAAAJc"]
[Fri Dec 19 19:43:42.188008 2025] [:error] [pid 41451:tid 41454] [client 68.218.8.118:7846] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUU6bgYXFn-DbZghZBHLowAAAAA"]
[Fri Dec 19 19:43:42.275530 2025] [:error] [pid 20675:tid 20708] [client 68.218.8.118:7831] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUU6brMyJ3XqeDRsbQmMDwAAARQ"]
[Fri Dec 19 19:43:42.343657 2025] [:error] [pid 20675:tid 20702] [client 68.218.8.118:7930] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aUU6brMyJ3XqeDRsbQmMEAAAAQ4"]
[Fri Dec 19 19:43:42.417680 2025] [:error] [pid 20675:tid 20696] [client 68.218.8.118:7865] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aUU6brMyJ3XqeDRsbQmMEQAAAQg"]
[Fri Dec 19 19:43:42.495579 2025] [:error] [pid 41451:tid 41461] [client 68.218.8.118:7832] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aUU6bgYXFn-DbZghZBHLpAAAAAc"]
[Fri Dec 19 19:43:42.570873 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:7815] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aUU6bgYXFn-DbZghZBHLpQAAABM"]
[Fri Dec 19 19:43:42.651690 2025] [:error] [pid 20675:tid 20692] [client 68.218.8.118:8018] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aUU6brMyJ3XqeDRsbQmMEwAAAQQ"]
[Fri Dec 19 19:43:42.740659 2025] [:error] [pid 20580:tid 20587] [client 68.218.8.118:7850] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aUU6bkmd1op_YdAdgR2O9AAAAEE"]
[Fri Dec 19 19:43:42.832941 2025] [:error] [pid 20582:tid 20644] [client 68.218.8.118:7723] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aUU6bspAnrkQKZ4b5gYiIwAAAMI"]
[Fri Dec 19 19:43:42.927836 2025] [:error] [pid 20581:tid 20620] [client 68.218.8.118:7992] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aUU6bvxEv7WXNhnFD1l2NgAAAIU"]
[Fri Dec 19 19:43:43.043368 2025] [:error] [pid 20675:tid 20705] [client 68.218.8.118:7921] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aUU6b7MyJ3XqeDRsbQmMFAAAARE"]
[Fri Dec 19 19:43:43.158419 2025] [:error] [pid 20580:tid 20608] [client 68.218.8.118:7844] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aUU6b0md1op_YdAdgR2O9QAAAFY"]
[Fri Dec 19 19:43:43.241042 2025] [:error] [pid 20675:tid 20701] [client 68.218.8.118:7903] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aUU6b7MyJ3XqeDRsbQmMFQAAAQ0"]
[Fri Dec 19 19:43:43.331205 2025] [:error] [pid 20675:tid 20699] [client 68.218.8.118:7873] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aUU6b7MyJ3XqeDRsbQmMFgAAAQs"]
[Fri Dec 19 19:43:43.425317 2025] [:error] [pid 20580:tid 20605] [client 68.218.8.118:7789] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aUU6b0md1op_YdAdgR2O9gAAAFM"]
[Fri Dec 19 19:43:43.523302 2025] [:error] [pid 41451:tid 41458] [client 68.218.8.118:7757] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aUU6bwYXFn-DbZghZBHLpwAAAAQ"]
[Fri Dec 19 19:43:43.609177 2025] [:error] [pid 41451:tid 41464] [client 68.218.8.118:7912] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aUU6bwYXFn-DbZghZBHLqAAAAAo"]
[Fri Dec 19 19:43:43.717568 2025] [:error] [pid 20582:tid 20660] [client 68.218.8.118:7767] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aUU6b8pAnrkQKZ4b5gYiJQAAANI"]
[Fri Dec 19 19:43:43.845040 2025] [:error] [pid 41451:tid 41466] [client 68.218.8.118:7871] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aUU6bwYXFn-DbZghZBHLqQAAAAw"]
[Fri Dec 19 19:43:44.268750 2025] [:error] [pid 41451:tid 41476] [client 68.218.8.118:7769] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aUU6cAYXFn-DbZghZBHLrAAAABY"]
[Fri Dec 19 19:43:44.359514 2025] [:error] [pid 20582:tid 20643] [client 68.218.8.118:7839] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aUU6cMpAnrkQKZ4b5gYiJwAAAME"]
[Fri Dec 19 19:43:44.454943 2025] [:error] [pid 20582:tid 20663] [client 68.218.8.118:7715] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aUU6cMpAnrkQKZ4b5gYiKAAAANU"]
[Fri Dec 19 19:43:44.544529 2025] [:error] [pid 20581:tid 20618] [client 68.218.8.118:7796] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aUU6cPxEv7WXNhnFD1l2OgAAAIM"]
[Fri Dec 19 19:43:44.636565 2025] [:error] [pid 41451:tid 41470] [client 68.218.8.118:7810] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aUU6cAYXFn-DbZghZBHLrwAAABA"]
[Fri Dec 19 19:43:44.732755 2025] [:error] [pid 20581:tid 20639] [client 68.218.8.118:7683] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aUU6cPxEv7WXNhnFD1l2OwAAAJg"]
[Fri Dec 19 19:43:44.839134 2025] [:error] [pid 20580:tid 20597] [client 68.218.8.118:7766] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aUU6cEmd1op_YdAdgR2O-AAAAEs"]
[Fri Dec 19 19:43:44.938659 2025] [:error] [pid 20675:tid 20708] [client 68.218.8.118:7785] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUU6cLMyJ3XqeDRsbQmMHAAAARQ"]
[Fri Dec 19 19:43:45.047785 2025] [:error] [pid 20675:tid 20702] [client 68.218.8.118:7860] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUU6cbMyJ3XqeDRsbQmMHQAAAQ4"]
[Fri Dec 19 19:43:45.143355 2025] [:error] [pid 20675:tid 20704] [client 68.218.8.118:7975] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUU6cbMyJ3XqeDRsbQmMHwAAARA"]
[Fri Dec 19 19:43:45.277837 2025] [:error] [pid 20580:tid 20604] [client 68.218.8.118:7864] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUU6cUmd1op_YdAdgR2O-gAAAFI"]
[Fri Dec 19 19:43:45.349883 2025] [:error] [pid 41451:tid 41478] [client 68.218.8.118:7849] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUU6cQYXFn-DbZghZBHLsQAAABg"]
[Fri Dec 19 19:43:45.415803 2025] [:error] [pid 20675:tid 20692] [client 68.218.8.118:7788] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUU6cbMyJ3XqeDRsbQmMIAAAAQQ"]
[Fri Dec 19 19:43:45.500424 2025] [:error] [pid 20675:tid 20705] [client 68.218.8.118:8094] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUU6cbMyJ3XqeDRsbQmMIQAAARE"]
[Fri Dec 19 19:43:45.584233 2025] [:error] [pid 41451:tid 41462] [client 68.218.8.118:7754] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUU6cQYXFn-DbZghZBHLsgAAAAg"]
[Fri Dec 19 19:43:45.696149 2025] [:error] [pid 41451:tid 41459] [client 68.218.8.118:7765] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aUU6cQYXFn-DbZghZBHLswAAAAU"]
[Fri Dec 19 19:43:45.811453 2025] [:error] [pid 41451:tid 41468] [client 68.218.8.118:7823] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aUU6cQYXFn-DbZghZBHLtAAAAA4"]
[Fri Dec 19 19:43:45.924259 2025] [:error] [pid 41451:tid 41454] [client 68.218.8.118:7838] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aUU6cQYXFn-DbZghZBHLtQAAAAA"]
[Fri Dec 19 19:43:46.011153 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:7801] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aUU6cspAnrkQKZ4b5gYiKgAAAMg"]
[Fri Dec 19 19:43:46.094369 2025] [:error] [pid 20580:tid 20606] [client 68.218.8.118:7867] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xse25.php"] [unique_id "aUU6ckmd1op_YdAdgR2O_AAAAFQ"]
[Fri Dec 19 19:43:46.157141 2025] [:error] [pid 20582:tid 20655] [client 68.218.8.118:7690] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xse25.php"] [unique_id "aUU6cspAnrkQKZ4b5gYiKwAAAM0"]
[Fri Dec 19 19:43:46.223123 2025] [:error] [pid 20675:tid 20701] [client 68.218.8.118:7802] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xse25.php"] [unique_id "aUU6crMyJ3XqeDRsbQmMIgAAAQ0"]
[Fri Dec 19 19:43:46.344404 2025] [:error] [pid 20675:tid 20688] [client 68.218.8.118:7755] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xse25.php"] [unique_id "aUU6crMyJ3XqeDRsbQmMIwAAAQA"]
[Fri Dec 19 19:43:46.433059 2025] [:error] [pid 20675:tid 20706] [client 68.218.8.118:7684] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aUU6crMyJ3XqeDRsbQmMJAAAARI"]
[Fri Dec 19 19:43:46.514294 2025] [:error] [pid 20675:tid 20693] [client 68.218.8.118:7820] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aUU6crMyJ3XqeDRsbQmMJQAAAQU"]
[Fri Dec 19 19:43:46.589140 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:7660] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aUU6cgYXFn-DbZghZBHLtgAAABM"]
[Fri Dec 19 19:43:46.668980 2025] [:error] [pid 41451:tid 41463] [client 68.218.8.118:20918] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aUU6cgYXFn-DbZghZBHLuAAAAAk"]
[Fri Dec 19 19:43:46.776930 2025] [:error] [pid 20675:tid 20690] [client 68.218.8.118:7760] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aUU6crMyJ3XqeDRsbQmMJgAAAQI"]
[Fri Dec 19 19:43:46.872038 2025] [:error] [pid 20580:tid 20600] [client 68.218.8.118:7854] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "aUU6ckmd1op_YdAdgR2O_gAAAE4"]
[Fri Dec 19 19:43:46.965019 2025] [:error] [pid 20580:tid 20593] [client 68.218.8.118:7752] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "aUU6ckmd1op_YdAdgR2O_wAAAEc"]
[Fri Dec 19 19:43:47.043252 2025] [:error] [pid 20582:tid 20649] [client 68.218.8.118:7955] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "aUU6c8pAnrkQKZ4b5gYiLQAAAMc"]
[Fri Dec 19 19:43:47.147483 2025] [:error] [pid 20675:tid 20689] [client 68.218.8.118:7776] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shoyo.php"] [unique_id "aUU6c7MyJ3XqeDRsbQmMKAAAAQE"]
[Fri Dec 19 19:43:47.241905 2025] [:error] [pid 41451:tid 41472] [client 68.218.8.118:7681] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shoyo.php"] [unique_id "aUU6cwYXFn-DbZghZBHLuwAAABI"]
[Fri Dec 19 19:43:47.321179 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:8055] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shoyo.php"] [unique_id "aUU6c7MyJ3XqeDRsbQmMKQAAAQw"]
[Fri Dec 19 19:43:47.397563 2025] [:error] [pid 20580:tid 20607] [client 68.218.8.118:7762] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shoyo.php"] [unique_id "aUU6c0md1op_YdAdgR2PAQAAAFU"]
[Fri Dec 19 19:43:47.509091 2025] [:error] [pid 20675:tid 20702] [client 68.218.8.118:7562] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aUU6c7MyJ3XqeDRsbQmMKgAAAQ4"]
[Fri Dec 19 19:43:47.596320 2025] [:error] [pid 20580:tid 20608] [client 68.218.8.118:7841] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aUU6c0md1op_YdAdgR2PAgAAAFY"]
[Fri Dec 19 19:43:47.668160 2025] [:error] [pid 20581:tid 20621] [client 68.218.8.118:7775] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aUU6c_xEv7WXNhnFD1l2PAAAAIY"]
[Fri Dec 19 19:43:47.752086 2025] [:error] [pid 20580:tid 20605] [client 68.218.8.118:7932] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aUU6c0md1op_YdAdgR2PAwAAAFM"]
[Fri Dec 19 19:43:47.878237 2025] [:error] [pid 20582:tid 20661] [client 68.218.8.118:7749] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/waq.php"] [unique_id "aUU6c8pAnrkQKZ4b5gYiMQAAANM"]
[Fri Dec 19 19:43:47.982601 2025] [:error] [pid 20582:tid 20645] [client 68.218.8.118:7910] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/waq.php"] [unique_id "aUU6c8pAnrkQKZ4b5gYiMgAAAMM"]
[Fri Dec 19 19:43:48.052706 2025] [:error] [pid 20582:tid 20648] [client 68.218.8.118:7645] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/waq.php"] [unique_id "aUU6dMpAnrkQKZ4b5gYiMwAAAMY"]
[Fri Dec 19 19:43:48.123570 2025] [:error] [pid 41451:tid 41456] [client 68.218.8.118:8027] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/waq.php"] [unique_id "aUU6dAYXFn-DbZghZBHLvAAAAAI"]
[Fri Dec 19 19:43:48.218657 2025] [:error] [pid 41451:tid 41460] [client 68.218.8.118:7729] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wakak.php"] [unique_id "aUU6dAYXFn-DbZghZBHLvQAAAAY"]
[Fri Dec 19 19:43:48.317088 2025] [:error] [pid 41451:tid 41470] [client 68.218.8.118:7711] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wakak.php"] [unique_id "aUU6dAYXFn-DbZghZBHLvgAAABA"]
[Fri Dec 19 19:43:48.397864 2025] [:error] [pid 20582:tid 20658] [client 68.218.8.118:7791] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wakak.php"] [unique_id "aUU6dMpAnrkQKZ4b5gYiNAAAANA"]
[Fri Dec 19 19:43:48.467483 2025] [:error] [pid 20582:tid 20652] [client 68.218.8.118:8153] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wakak.php"] [unique_id "aUU6dMpAnrkQKZ4b5gYiNQAAAMo"]
[Fri Dec 19 19:43:48.544517 2025] [:error] [pid 20580:tid 20603] [client 68.218.8.118:7714] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aUU6dEmd1op_YdAdgR2PBQAAAFE"]
[Fri Dec 19 19:43:48.623171 2025] [:error] [pid 20582:tid 20662] [client 68.218.8.118:7803] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aUU6dMpAnrkQKZ4b5gYiNwAAANQ"]
[Fri Dec 19 19:43:48.709891 2025] [:error] [pid 20582:tid 20656] [client 68.218.8.118:7773] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aUU6dMpAnrkQKZ4b5gYiOAAAAM4"]
[Fri Dec 19 19:43:48.808685 2025] [:error] [pid 20582:tid 20646] [client 68.218.8.118:7774] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aUU6dMpAnrkQKZ4b5gYiOQAAAMQ"]
[Fri Dec 19 19:43:48.928008 2025] [:error] [pid 20582:tid 20653] [client 68.218.8.118:7724] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aUU6dMpAnrkQKZ4b5gYiOgAAAMs"]
[Fri Dec 19 19:43:49.030956 2025] [:error] [pid 41451:tid 41478] [client 68.218.8.118:7800] [client 68.218.8.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "aUU6dQYXFn-DbZghZBHLwQAAABg"]
[Fri Dec 19 19:43:49.129876 2025] [:error] [pid 41451:tid 41457] [client 68.218.8.118:7876] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "aUU6dQYXFn-DbZghZBHLwgAAAAM"]
[Fri Dec 19 19:43:49.234661 2025] [:error] [pid 41451:tid 41462] [client 68.218.8.118:7719] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "aUU6dQYXFn-DbZghZBHLwwAAAAg"]
[Fri Dec 19 19:43:49.337238 2025] [:error] [pid 41451:tid 41469] [client 68.218.8.118:7763] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "aUU6dQYXFn-DbZghZBHLxAAAAA8"]
[Fri Dec 19 19:43:49.430451 2025] [:error] [pid 20582:tid 20664] [client 68.218.8.118:7804] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cwclass.php"] [unique_id "aUU6dcpAnrkQKZ4b5gYiOwAAANY"]
[Fri Dec 19 19:43:49.516190 2025] [:error] [pid 41451:tid 41468] [client 68.218.8.118:7702] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cwclass.php"] [unique_id "aUU6dQYXFn-DbZghZBHLxgAAAA4"]
[Fri Dec 19 19:43:49.610514 2025] [:error] [pid 20581:tid 20615] [client 68.218.8.118:7859] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cwclass.php"] [unique_id "aUU6dfxEv7WXNhnFD1l2PQAAAIA"]
[Fri Dec 19 19:43:49.693634 2025] [:error] [pid 20581:tid 20625] [client 68.218.8.118:7730] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cwclass.php"] [unique_id "aUU6dfxEv7WXNhnFD1l2PgAAAIo"]
[Fri Dec 19 19:43:49.803764 2025] [:error] [pid 20580:tid 20597] [client 68.218.8.118:7692] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah24.php"] [unique_id "aUU6dUmd1op_YdAdgR2PBgAAAEs"]
[Fri Dec 19 19:43:49.954448 2025] [:error] [pid 20582:tid 20650] [client 68.218.8.118:8190] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah24.php"] [unique_id "aUU6dcpAnrkQKZ4b5gYiPAAAAMg"]
[Fri Dec 19 19:43:50.061278 2025] [:error] [pid 41451:tid 41461] [client 68.218.8.118:7960] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah24.php"] [unique_id "aUU6dgYXFn-DbZghZBHLyQAAAAc"]
[Fri Dec 19 19:43:50.159291 2025] [:error] [pid 41451:tid 41473] [client 68.218.8.118:7685] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah24.php"] [unique_id "aUU6dgYXFn-DbZghZBHLygAAABM"]
[Fri Dec 19 19:43:50.249745 2025] [:error] [pid 20582:tid 20649] [client 68.218.8.118:7693] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rtx.php"] [unique_id "aUU6dspAnrkQKZ4b5gYiPgAAAMc"]
[Fri Dec 19 19:43:50.343521 2025] [:error] [pid 41451:tid 41474] [client 68.218.8.118:7843] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rtx.php"] [unique_id "aUU6dgYXFn-DbZghZBHLywAAABQ"]
[Fri Dec 19 19:43:50.445109 2025] [:error] [pid 20675:tid 20697] [client 68.218.8.118:7768] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rtx.php"] [unique_id "aUU6drMyJ3XqeDRsbQmMLwAAAQk"]
[Fri Dec 19 19:43:50.530114 2025] [:error] [pid 20580:tid 20590] [client 68.218.8.118:7707] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rtx.php"] [unique_id "aUU6dkmd1op_YdAdgR2PCQAAAEQ"]
[Fri Dec 19 19:43:50.622295 2025] [:error] [pid 20675:tid 20695] [client 68.218.8.118:7805] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "aUU6drMyJ3XqeDRsbQmMMAAAAQc"]
[Fri Dec 19 19:43:50.709256 2025] [:error] [pid 20580:tid 20595] [client 68.218.8.118:8049] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "aUU6dkmd1op_YdAdgR2PCgAAAEk"]
[Fri Dec 19 19:43:50.814397 2025] [:error] [pid 20581:tid 20635] [client 68.218.8.118:7781] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "aUU6dvxEv7WXNhnFD1l2PwAAAJQ"]
[Fri Dec 19 19:43:50.914419 2025] [:error] [pid 20582:tid 20648] [client 68.218.8.118:7797] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "aUU6dspAnrkQKZ4b5gYiQQAAAMY"]
[Fri Dec 19 19:43:51.007417 2025] [:error] [pid 20581:tid 20632] [client 68.218.8.118:7736] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conte.php"] [unique_id "aUU6d_xEv7WXNhnFD1l2QAAAAJE"]
[Fri Dec 19 19:43:51.086468 2025] [:error] [pid 20581:tid 20622] [client 68.218.8.118:7799] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conte.php"] [unique_id "aUU6d_xEv7WXNhnFD1l2QQAAAIc"]
[Fri Dec 19 19:43:51.181867 2025] [:error] [pid 20581:tid 20627] [client 68.218.8.118:7689] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conte.php"] [unique_id "aUU6d_xEv7WXNhnFD1l2QgAAAIw"]
[Fri Dec 19 19:43:51.310376 2025] [:error] [pid 20581:tid 20620] [client 68.218.8.118:7740] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conte.php"] [unique_id "aUU6d_xEv7WXNhnFD1l2QwAAAIU"]
[Fri Dec 19 19:43:51.425320 2025] [:error] [pid 20581:tid 20634] [client 68.218.8.118:7772] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class3.php"] [unique_id "aUU6d_xEv7WXNhnFD1l2RQAAAJM"]
[Fri Dec 19 19:43:51.543377 2025] [:error] [pid 20581:tid 20623] [client 68.218.8.118:7696] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class3.php"] [unique_id "aUU6d_xEv7WXNhnFD1l2RwAAAIg"]
[Fri Dec 19 19:43:51.679322 2025] [:error] [pid 20581:tid 20629] [client 68.218.8.118:7784] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class3.php"] [unique_id "aUU6d_xEv7WXNhnFD1l2SAAAAI4"]
[Fri Dec 19 19:43:51.780422 2025] [:error] [pid 20582:tid 20647] [client 68.218.8.118:7830] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class3.php"] [unique_id "aUU6d8pAnrkQKZ4b5gYiQgAAAMU"]
[Fri Dec 19 19:43:51.905301 2025] [:error] [pid 20582:tid 20662] [client 68.218.8.118:7863] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aUU6d8pAnrkQKZ4b5gYiQwAAANQ"]
[Fri Dec 19 19:43:52.042010 2025] [:error] [pid 41451:tid 41464] [client 68.218.8.118:7855] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aUU6eAYXFn-DbZghZBHLzAAAAAo"]
[Fri Dec 19 19:43:52.182174 2025] [:error] [pid 20675:tid 20698] [client 68.218.8.118:7686] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aUU6eLMyJ3XqeDRsbQmMMgAAAQo"]
[Fri Dec 19 19:43:52.312843 2025] [:error] [pid 20675:tid 20712] [client 68.218.8.118:7712] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aUU6eLMyJ3XqeDRsbQmMMwAAARg"]
[Fri Dec 19 19:43:52.438932 2025] [:error] [pid 20581:tid 20626] [client 68.218.8.118:7727] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/claa.php"] [unique_id "aUU6ePxEv7WXNhnFD1l2SgAAAIs"]
[Fri Dec 19 19:43:52.546636 2025] [:error] [pid 20675:tid 20700] [client 68.218.8.118:7787] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/claa.php"] [unique_id "aUU6eLMyJ3XqeDRsbQmMNAAAAQw"]
[Fri Dec 19 19:43:52.661183 2025] [:error] [pid 20581:tid 20619] [client 68.218.8.118:7963] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/claa.php"] [unique_id "aUU6ePxEv7WXNhnFD1l2SwAAAIQ"]
[Fri Dec 19 19:43:52.779829 2025] [:error] [pid 20580:tid 20606] [client 68.218.8.118:7705] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/claa.php"] [unique_id "aUU6eEmd1op_YdAdgR2PDAAAAFQ"]
[Fri Dec 19 19:43:52.870209 2025] [:error] [pid 20675:tid 20702] [client 68.218.8.118:7624] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/AL.php"] [unique_id "aUU6eLMyJ3XqeDRsbQmMNgAAAQ4"]
[Fri Dec 19 19:43:53.007219 2025] [:error] [pid 20675:tid 20711] [client 68.218.8.118:7642] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/AL.php"] [unique_id "aUU6ebMyJ3XqeDRsbQmMNwAAARc"]
[Fri Dec 19 19:43:53.121282 2025] [:error] [pid 20580:tid 20598] [client 68.218.8.118:7851] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/AL.php"] [unique_id "aUU6eUmd1op_YdAdgR2PDQAAAEw"]
[Fri Dec 19 19:43:53.220859 2025] [:error] [pid 41451:tid 41476] [client 68.218.8.118:7626] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/AL.php"] [unique_id "aUU6eQYXFn-DbZghZBHLzQAAABY"]
[Fri Dec 19 19:43:53.353479 2025] [:error] [pid 41451:tid 41475] [client 68.218.8.118:7710] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/little.php"] [unique_id "aUU6eQYXFn-DbZghZBHLzwAAABU"]
[Fri Dec 19 19:43:53.439269 2025] [:error] [pid 41451:tid 41478] [client 68.218.8.118:7662] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/little.php"] [unique_id "aUU6eQYXFn-DbZghZBHL0AAAABg"]
[Fri Dec 19 19:43:53.532055 2025] [:error] [pid 41451:tid 41465] [client 68.218.8.118:7790] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/little.php"] [unique_id "aUU6eQYXFn-DbZghZBHL0QAAAAs"]
[Fri Dec 19 19:43:53.650421 2025] [:error] [pid 20675:tid 20692] [client 68.218.8.118:7747] [client 68.218.8.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/little.php"] [unique_id "aUU6ebMyJ3XqeDRsbQmMOAAAAQQ"]
[Fri Dec 19 22:24:17.949583 2025] [autoindex:error] [pid 18438:tid 18458] [client 144.91.111.74:56198] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Dec 19 23:48:23.862097 2025] [:error] [pid 16026:tid 16050] [client 49.233.45.47:33958] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUVzx0LVfhf4Jb3enmN2cwAAAVU"]
[Fri Dec 19 23:53:05.539046 2025] [:error] [pid 18438:tid 18448] [client 177.134.178.67:51100] [client 177.134.178.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.134.178.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUV04ZRArClWV1iij_TmRwAAAYc"]
[Sat Dec 20 00:16:05.258475 2025] [:error] [pid 35625:tid 35659] [client 170.106.180.139:54382] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUV6RY12VmSu4NX34PTJNQAAAIQ"]
[Sat Dec 20 00:18:34.364391 2025] [:error] [pid 35625:tid 35662] [client 177.134.178.67:52472] [client 177.134.178.67] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUV62o12VmSu4NX34PTJvQAAAIc"]
[Sat Dec 20 00:22:21.062643 2025] [:error] [pid 39268:tid 39328] [client 177.134.178.67:55261] [client 177.134.178.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.134.178.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUV7veTCMRSRXPuXZF_uFgAAARI"]
[Sat Dec 20 01:24:02.661349 2025] [:error] [pid 35624:tid 35650] [client 188.64.139.53:1101] [client 188.64.139.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.64.139.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUWKMkJMTU3r4hb8qAlZLgAAAFY"]
[Sat Dec 20 01:24:08.933912 2025] [:error] [pid 35711:tid 35737] [client 188.64.139.53:1082] [client 188.64.139.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.64.139.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUWKOCxTWUmlILwAM_e3KAAAABg"]
[Sat Dec 20 04:03:30.362601 2025] [:error] [pid 60078:tid 60158] [client 216.24.210.186:31769] [client 216.24.210.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.186, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUWvkjZPwKHi_tn7pBpHkQAAAIY"]
[Sat Dec 20 06:30:27.237881 2025] [:error] [pid 18807:tid 18818] [client 216.24.210.55:21421] [client 216.24.210.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.55, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXSA2RP9n5OCTllYeXqcAAAAYk"]
[Sat Dec 20 06:43:51.040374 2025] [:error] [pid 39492:tid 39533] [client 98.159.37.102:41479] [client 98.159.37.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.102, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXVJ4s_ZYP1UQNM9haNRwAAAEs"]
[Sat Dec 20 06:43:51.043039 2025] [:error] [pid 39492:tid 39533] [client 98.159.37.102:41479] [client 98.159.37.102] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||hotbooksbookeeping2.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXVJ4s_ZYP1UQNM9haNRwAAAEs"]
[Sat Dec 20 06:56:39.255846 2025] [:error] [pid 18807:tid 18819] [client 98.159.37.102:56053] [client 98.159.37.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.102, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXYJ2RP9n5OCTllYeXy7QAAAYo"]
[Sat Dec 20 07:10:01.014105 2025] [:error] [pid 39492:tid 39536] [client 216.24.210.187:33151] [client 216.24.210.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.187, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXbSYs_ZYP1UQNM9habngAAAE4"]
[Sat Dec 20 07:23:38.759157 2025] [:error] [pid 39577:tid 39590] [client 173.239.218.43:45471] [client 173.239.218.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXeerviRnt1rJiSOfyRgwAAAMs"]
[Sat Dec 20 07:23:38.760889 2025] [:error] [pid 39577:tid 39590] [client 173.239.218.43:45471] [client 173.239.218.43] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||hotbooksbookeeping2.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXeerviRnt1rJiSOfyRgwAAAMs"]
[Sat Dec 20 07:36:59.754090 2025] [:error] [pid 39492:tid 39545] [client 216.24.210.180:34913] [client 216.24.210.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.180, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXhm4s_ZYP1UQNM9hapIgAAAFc"]
[Sat Dec 20 07:39:09.005482 2025] [autoindex:error] [pid 39492:tid 39523] [client 45.86.202.93:54703] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:10.748023 2025] [autoindex:error] [pid 39493:tid 39572] [client 45.86.202.56:35121] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:11.033238 2025] [autoindex:error] [pid 39493:tid 39566] [client 45.86.202.56:35121] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:11.394197 2025] [autoindex:error] [pid 39493:tid 39570] [client 45.86.202.56:35121] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:11.678341 2025] [autoindex:error] [pid 39493:tid 39571] [client 45.86.202.56:35121] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:14.890405 2025] [autoindex:error] [pid 39492:tid 39529] [client 45.86.202.93:54703] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:15.218784 2025] [autoindex:error] [pid 39492:tid 39528] [client 45.86.202.93:54703] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:39:15.501761 2025] [autoindex:error] [pid 39492:tid 39527] [client 45.86.202.93:54703] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:50:34.714286 2025] [:error] [pid 14247:tid 14270] [client 216.24.210.189:25513] [client 216.24.210.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.189, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXkyiDv9TtKKdJQn9mGFAAAARU"]
[Sat Dec 20 08:03:59.889867 2025] [:error] [pid 39492:tid 39536] [client 173.239.218.43:22519] [client 173.239.218.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXn74s_ZYP1UQNM9hbVPQAAAE4"]
[Sat Dec 20 08:17:39.631653 2025] [:error] [pid 14286:tid 14294] [client 173.239.218.42:34827] [client 173.239.218.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXrI57rbXIrw6rGSdbqgAAAAUQ"]
[Sat Dec 20 08:31:13.052659 2025] [:error] [pid 14286:tid 14305] [client 98.159.37.114:44265] [client 98.159.37.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.114, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXuUZ7rbXIrw6rGSdbsngAAAU8"]
[Sat Dec 20 08:41:28.117079 2025] [:error] [pid 39577:tid 39583] [client 43.159.136.201:43442] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUXwuLviRnt1rJiSOfzIKQAAAMQ"]
[Sat Dec 20 08:44:40.854202 2025] [:error] [pid 39492:tid 39523] [client 98.159.37.110:56603] [client 98.159.37.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.110, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUXxeIs_ZYP1UQNM9hbbjgAAAEE"]
[Sat Dec 20 08:58:11.564183 2025] [:error] [pid 14247:tid 14257] [client 98.159.37.94:26955] [client 98.159.37.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUX0oyDv9TtKKdJQn9mSQgAAAQg"]
[Sat Dec 20 09:11:31.940795 2025] [:error] [pid 18807:tid 18824] [client 98.159.37.95:62553] [client 98.159.37.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.95, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUX3w2RP9n5OCTllYeVH4wAAAY8"]
[Sat Dec 20 09:25:02.884072 2025] [:error] [pid 39492:tid 39541] [client 98.159.37.111:37187] [client 98.159.37.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUX67os_ZYP1UQNM9hbiHwAAAFM"]
[Sat Dec 20 09:38:22.927158 2025] [:error] [pid 18807:tid 18809] [client 173.239.218.149:43823] [client 173.239.218.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUX-DmRP9n5OCTllYeVPhQAAAYA"]
[Sat Dec 20 09:51:50.814366 2025] [:error] [pid 14247:tid 14261] [client 216.24.210.179:55959] [client 216.24.210.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.179, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYBNiDv9TtKKdJQn9ma2gAAAQw"]
[Sat Dec 20 10:05:18.195060 2025] [:error] [pid 18807:tid 18810] [client 216.24.210.184:23295] [client 216.24.210.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.184, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYEXmRP9n5OCTllYeVXJgAAAYE"]
[Sat Dec 20 10:18:34.898033 2025] [:error] [pid 14247:tid 14251] [client 98.159.37.106:55759] [client 98.159.37.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.106, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYHeiDv9TtKKdJQn9mfawAAAQI"]
[Sat Dec 20 10:32:01.492256 2025] [:error] [pid 39577:tid 39579] [client 173.239.218.151:46671] [client 173.239.218.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.151, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYKobviRnt1rJiSOfzd0wAAAMA"]
[Sat Dec 20 10:35:35.029500 2025] [:error] [pid 14286:tid 14291] [client 124.198.132.154:60533] [client 124.198.132.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aUYLd57rbXIrw6rGSdYAyAAAAUE"]
[Sat Dec 20 10:45:32.329863 2025] [:error] [pid 18807:tid 18818] [client 98.159.37.102:28141] [client 98.159.37.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.102, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYNzGRP9n5OCTllYeVkkQAAAYk"]
[Sat Dec 20 10:59:11.478862 2025] [:error] [pid 18807:tid 18813] [client 173.239.218.155:43743] [client 173.239.218.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.155, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYQ_2RP9n5OCTllYeVpmgAAAYQ"]
[Sat Dec 20 11:13:02.132156 2025] [:error] [pid 18807:tid 18821] [client 98.159.37.94:36837] [client 98.159.37.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYUPmRP9n5OCTllYeVtxgAAAYw"]
[Sat Dec 20 11:26:39.852346 2025] [:error] [pid 39493:tid 39564] [client 98.159.37.102:56291] [client 98.159.37.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.102, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYXb2hjL2VG_FmIHqB26gAAAI8"]
[Sat Dec 20 11:54:47.953642 2025] [:error] [pid 39493:tid 39569] [client 98.159.37.113:23427] [client 98.159.37.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.113, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYeB2hjL2VG_FmIHqB8cgAAAJQ"]
[Sat Dec 20 12:08:26.853753 2025] [:error] [pid 18807:tid 18812] [client 98.159.37.114:30155] [client 98.159.37.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.114, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYhOmRP9n5OCTllYeV_RAAAAYM"]
[Sat Dec 20 12:22:00.166189 2025] [:error] [pid 14247:tid 14250] [client 173.239.218.149:52795] [client 173.239.218.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYkaCDv9TtKKdJQn9m1UAAAAQE"]
[Sat Dec 20 12:35:32.052479 2025] [:error] [pid 39491:tid 39517] [client 173.239.218.149:60663] [client 173.239.218.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYnlFtw2ggYvDxu2EAongAAABY"]
[Sat Dec 20 12:49:12.622322 2025] [:error] [pid 39577:tid 39595] [client 216.24.210.180:42245] [client 216.24.210.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.180, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYqyLviRnt1rJiSOfz7mgAAANA"]
[Sat Dec 20 13:02:42.382693 2025] [:error] [pid 14286:tid 14308] [client 98.159.37.112:33633] [client 98.159.37.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYt8p7rbXIrw6rGSdYa4AAAAVI"]
[Sat Dec 20 13:16:22.620949 2025] [:error] [pid 18807:tid 18817] [client 173.239.218.148:34101] [client 173.239.218.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUYxJmRP9n5OCTllYeWTsQAAAYg"]
[Sat Dec 20 13:30:02.834986 2025] [:error] [pid 39577:tid 39597] [client 98.159.37.103:47033] [client 98.159.37.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUY0WrviRnt1rJiSOfwC4gAAANI"]
[Sat Dec 20 13:43:42.807764 2025] [:error] [pid 39577:tid 39593] [client 173.239.218.43:47517] [client 173.239.218.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUY3jrviRnt1rJiSOfwFzgAAAM4"]
[Sat Dec 20 13:57:28.353602 2025] [:error] [pid 14247:tid 14266] [client 216.24.210.183:23959] [client 216.24.210.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.183, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUY6yCDv9TtKKdJQn9nGwAAAARE"]
[Sat Dec 20 14:11:23.052647 2025] [:error] [pid 39492:tid 39543] [client 98.159.37.104:64919] [client 98.159.37.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUY-C4s_ZYP1UQNM9hYQbAAAAFU"]
[Sat Dec 20 14:25:11.029888 2025] [:error] [pid 14286:tid 14300] [client 173.239.218.152:52915] [client 173.239.218.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.152, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZBR57rbXIrw6rGSdYowQAAAUo"]
[Sat Dec 20 14:40:41.994107 2025] [:error] [pid 39491:tid 39514] [client 216.24.210.184:21267] [client 216.24.210.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.184, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZE6Vtw2ggYvDxu2EA7VQAAABM"]
[Sat Dec 20 14:54:32.670633 2025] [:error] [pid 18807:tid 18833] [client 98.159.37.94:47499] [client 98.159.37.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZIKGRP9n5OCTllYeWyCQAAAZg"]
[Sat Dec 20 15:08:27.121012 2025] [:error] [pid 39577:tid 39592] [client 173.239.218.156:63487] [client 173.239.218.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.156, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZLa7viRnt1rJiSOfwVDwAAAM0"]
[Sat Dec 20 15:14:55.250968 2025] [:error] [pid 39491:tid 39516] [client 43.166.242.189:43792] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUZM71tw2ggYvDxu2EA_SAAAABU"]
[Sat Dec 20 15:23:37.458607 2025] [:error] [pid 39577:tid 39589] [client 173.239.218.149:26433] [client 173.239.218.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZO-bviRnt1rJiSOfwYLwAAAMo"]
[Sat Dec 20 15:37:31.689680 2025] [:error] [pid 39492:tid 39546] [client 98.159.37.104:44329] [client 98.159.37.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZSO4s_ZYP1UQNM9hYdBwAAAFg"]
[Sat Dec 20 15:51:18.129331 2025] [:error] [pid 14286:tid 14293] [client 173.239.218.156:59277] [client 173.239.218.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.156, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZVdp7rbXIrw6rGSdY2rQAAAUM"]
[Sat Dec 20 16:05:13.038401 2025] [:error] [pid 39492:tid 39536] [client 173.239.218.42:21717] [client 173.239.218.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZYuYs_ZYP1UQNM9hYgvgAAAE4"]
[Sat Dec 20 16:19:17.846448 2025] [:error] [pid 39493:tid 39557] [client 216.24.210.183:59823] [client 216.24.210.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.183, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZcBWhjL2VG_FmIHqC4FAAAAIg"]
[Sat Dec 20 16:47:20.632258 2025] [:error] [pid 39491:tid 39513] [client 216.24.210.187:38671] [client 216.24.210.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.187, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZimFtw2ggYvDxu2EBMdAAAABI"]
[Sat Dec 20 17:01:22.270036 2025] [:error] [pid 39493:tid 39555] [client 216.24.210.188:55873] [client 216.24.210.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.188, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZl4mhjL2VG_FmIHqDA6AAAAIY"]
[Sat Dec 20 17:15:23.871226 2025] [:error] [pid 39577:tid 39600] [client 216.24.210.185:48891] [client 216.24.210.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZpK7viRnt1rJiSOfwtFwAAANU"]
[Sat Dec 20 17:43:00.477610 2025] [:error] [pid 18807:tid 18814] [client 98.159.37.113:59911] [client 98.159.37.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.113, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZvpGRP9n5OCTllYeXfjAAAAYU"]
[Sat Dec 20 17:56:45.871485 2025] [:error] [pid 18807:tid 18819] [client 216.24.210.191:64731] [client 216.24.210.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.191, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZy3WRP9n5OCTllYeXj0QAAAYo"]
[Sat Dec 20 18:10:42.550308 2025] [:error] [pid 39492:tid 39524] [client 216.24.210.180:41539] [client 216.24.210.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.180, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZ2Ios_ZYP1UQNM9hYzFwAAAEI"]
[Sat Dec 20 18:24:20.963726 2025] [:error] [pid 39577:tid 39603] [client 216.24.210.54:35331] [client 216.24.210.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.54, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZ5VLviRnt1rJiSOfw6DwAAANg"]
[Sat Dec 20 18:34:22.366913 2025] [:error] [pid 39577:tid 39582] [client 142.93.129.190:42818] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2/api-docs"] [unique_id "aUZ7rrviRnt1rJiSOfw8MQAAAMM"]
[Sat Dec 20 18:34:23.370113 2025] [:error] [pid 18807:tid 18831] [client 142.93.129.190:42820] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3/api-docs"] [unique_id "aUZ7r2RP9n5OCTllYeXxlQAAAZY"]
[Sat Dec 20 18:34:24.368961 2025] [:error] [pid 39493:tid 39564] [client 142.93.129.190:38274] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api-docs/swagger.json"] [unique_id "aUZ7sGhjL2VG_FmIHqDU7gAAAI8"]
[Sat Dec 20 18:34:25.367811 2025] [:error] [pid 14286:tid 14291] [client 142.93.129.190:38282] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api/swagger.json"] [unique_id "aUZ7sZ7rbXIrw6rGSdZQ8AAAAUE"]
[Sat Dec 20 18:34:26.370998 2025] [:error] [pid 39492:tid 39530] [client 142.93.129.190:38286] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/@vite/env"] [unique_id "aUZ7sos_ZYP1UQNM9hY3cgAAAEg"]
[Sat Dec 20 18:34:27.361324 2025] [:error] [pid 14247:tid 14255] [client 142.93.129.190:38300] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/actuator/env"] [unique_id "aUZ7syDv9TtKKdJQn9n1YwAAAQY"]
[Sat Dec 20 18:34:28.360753 2025] [:error] [pid 14247:tid 14253] [client 142.93.129.190:38304] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUZ7tCDv9TtKKdJQn9n1ZAAAAQQ"]
[Sat Dec 20 18:34:29.361043 2025] [:error] [pid 39493:tid 39554] [client 142.93.129.190:38310] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server"] [unique_id "aUZ7tWhjL2VG_FmIHqDU8wAAAIU"]
[Sat Dec 20 18:34:30.388489 2025] [:error] [pid 39577:tid 39579] [client 142.93.129.190:38318] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aUZ7trviRnt1rJiSOfw8PgAAAMA"]
[Sat Dec 20 18:34:32.371069 2025] [:error] [pid 39577:tid 39596] [client 142.93.129.190:38328] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about"] [unique_id "aUZ7uLviRnt1rJiSOfw8ZgAAANE"]
[Sat Dec 20 18:34:33.365979 2025] [:error] [pid 18807:tid 18831] [client 142.93.129.190:38336] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/debug/default/view"] [unique_id "aUZ7uWRP9n5OCTllYeXx5gAAAZY"]
[Sat Dec 20 18:34:34.369995 2025] [:error] [pid 14286:tid 14310] [client 142.93.129.190:35334] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2/_catalog"] [unique_id "aUZ7up7rbXIrw6rGSdZQ-QAAAVQ"]
[Sat Dec 20 18:34:35.364015 2025] [:error] [pid 39493:tid 39564] [client 142.93.129.190:35350] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aUZ7u2hjL2VG_FmIHqDU_AAAAI8"]
[Sat Dec 20 18:34:36.363448 2025] [:error] [pid 14247:tid 14272] [client 142.93.129.190:35360] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server-status"] [unique_id "aUZ7vCDv9TtKKdJQn9n1fwAAARc"]
[Sat Dec 20 18:34:37.375178 2025] [:error] [pid 14286:tid 14303] [client 142.93.129.190:35366] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login.action"] [unique_id "aUZ7vZ7rbXIrw6rGSdZQ_QAAAU0"]
[Sat Dec 20 18:34:38.368405 2025] [:error] [pid 39493:tid 39561] [client 142.93.129.190:35376] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/_all_dbs"] [unique_id "aUZ7vmhjL2VG_FmIHqDVBQAAAIw"]
[Sat Dec 20 18:34:39.379505 2025] [:error] [pid 18807:tid 18822] [client 142.93.129.190:35378] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aUZ7v2RP9n5OCTllYeXx7wAAAY0"]
[Sat Dec 20 18:34:40.377180 2025] [:error] [pid 39492:tid 39546] [client 142.93.129.190:35388] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aUZ7wIs_ZYP1UQNM9hY3ewAAAFg"]
[Sat Dec 20 18:34:42.454049 2025] [:error] [pid 39577:tid 39586] [client 142.93.129.190:35404] [client 142.93.129.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aUZ7wrviRnt1rJiSOfw8gAAAAMc"]
[Sat Dec 20 18:34:43.391145 2025] [:error] [pid 39577:tid 39597] [client 142.93.129.190:35406] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aUZ7w7viRnt1rJiSOfw8hgAAANI"]
[Sat Dec 20 18:34:44.392303 2025] [:error] [pid 14247:tid 14257] [client 142.93.129.190:47662] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.json"] [unique_id "aUZ7xCDv9TtKKdJQn9n1hAAAAQg"]
[Sat Dec 20 18:34:45.389040 2025] [:error] [pid 39491:tid 39513] [client 142.93.129.190:47668] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/telescope/requests"] [unique_id "aUZ7xVtw2ggYvDxu2EBcKwAAABI"]
[Sat Dec 20 18:34:46.389765 2025] [:error] [pid 39493:tid 39565] [client 142.93.129.190:47682] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUZ7xmhjL2VG_FmIHqDVEAAAAJA"]
[Sat Dec 20 18:34:47.386971 2025] [:error] [pid 39491:tid 39503] [client 142.93.129.190:47686] [client 142.93.129.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUZ7x1tw2ggYvDxu2EBcLgAAAAg"]
[Sat Dec 20 18:52:25.826077 2025] [:error] [pid 39492:tid 39543] [client 98.159.37.109:40437] [client 98.159.37.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.109, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUZ_6Ys_ZYP1UQNM9hY61QAAAFU"]
[Sat Dec 20 19:06:33.362707 2025] [:error] [pid 33793:tid 33797] [client 216.24.210.185:42913] [client 216.24.210.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUaDOVSicyB0BFmbRMy5twAAAsI"]
[Sat Dec 20 19:20:19.595731 2025] [:error] [pid 18807:tid 18809] [client 98.159.37.98:39603] [client 98.159.37.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.98, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUaGc2RP9n5OCTllYeX8GQAAAYA"]
[Sat Dec 20 19:34:15.028305 2025] [:error] [pid 14247:tid 14269] [client 98.159.37.104:38841] [client 98.159.37.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUaJtyDv9TtKKdJQn9n_GwAAARQ"]
[Sat Dec 20 19:48:35.712108 2025] [:error] [pid 33687:tid 33695] [client 216.24.210.54:60037] [client 216.24.210.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.54, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUaNEzYMR4qK1N4g7vi6VQAAAkU"]
[Sat Dec 20 19:54:26.877622 2025] [:error] [pid 33570:tid 33582] [client 43.166.244.192:52672] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUaOcoTNveA-c6YcSrL7jQAAAcY"]
[Sat Dec 20 20:02:21.355330 2025] [:error] [pid 39577:tid 39594] [client 216.24.210.188:60277] [client 216.24.210.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.188, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUaQTbviRnt1rJiSOfxM5gAAAM8"]
[Sat Dec 20 20:16:51.884037 2025] [:error] [pid 39577:tid 39603] [client 98.159.37.111:53297] [client 98.159.37.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUaTs7viRnt1rJiSOfxPegAAANg"]
[Sat Dec 20 20:33:33.341975 2025] [:error] [pid 33570:tid 33593] [client 216.24.210.191:51259] [client 216.24.210.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.191, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUaXnYTNveA-c6YcSrIAxAAAAdE"]
[Sat Dec 20 21:22:04.751108 2025] [:error] [pid 33844:tid 33867] [client 82.165.90.14:55400] [client 82.165.90.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUai_CaNtwGsyqqVmQHwXwAAAxU"]
[Sat Dec 20 21:22:10.418601 2025] [:error] [pid 39493:tid 39553] [client 82.165.90.14:55410] [client 82.165.90.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUajAmhjL2VG_FmIHqD12wAAAIQ"]
[Sat Dec 20 21:49:17.315144 2025] [:error] [pid 33749:tid 33765] [client 85.203.34.18:57563] [client 85.203.34.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/index.php"] [unique_id "aUapXdoInXJnb96wei92bQAAAo4"]
[Sat Dec 20 21:49:26.407632 2025] [:error] [pid 14286:tid 14294] [client 85.203.34.44:42207] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUapZp7rbXIrw6rGSdaUvAAAAUQ"]
[Sat Dec 20 21:49:27.631286 2025] [:error] [pid 33793:tid 33819] [client 85.203.34.18:42547] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aUapZ1SicyB0BFmbRMzhiAAAAtg"]
[Sat Dec 20 21:49:28.215371 2025] [:error] [pid 39577:tid 39598] [client 85.203.34.50:58567] [client 85.203.34.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aUapaLviRnt1rJiSOfx4CQAAANM"]
[Sat Dec 20 21:49:42.251955 2025] [:error] [pid 14286:tid 14305] [client 185.92.25.139:23079] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aUapdp7rbXIrw6rGSdaVxwAAAU8"]
[Sat Dec 20 21:49:42.861116 2025] [:error] [pid 33844:tid 33849] [client 185.92.25.138:46795] [client 185.92.25.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aUapdiaNtwGsyqqVmQEF3gAAAwM"]
[Sat Dec 20 21:49:50.011773 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.28:51347] [client 85.203.34.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aUapftoInXJnb96wei96KAAAAoc"]
[Sat Dec 20 21:49:50.584685 2025] [:error] [pid 33749:tid 33754] [client 85.203.34.28:38161] [client 85.203.34.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aUapftoInXJnb96wei96OgAAAoM"]
[Sat Dec 20 21:49:51.151209 2025] [:error] [pid 33570:tid 33590] [client 85.203.34.27:57695] [client 85.203.34.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aUapf4TNveA-c6YcSrIepQAAAc4"]
[Sat Dec 20 21:49:51.879102 2025] [:error] [pid 39493:tid 39559] [client 85.203.34.27:24533] [client 85.203.34.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aUapf2hjL2VG_FmIHqAMHwAAAIo"]
[Sat Dec 20 21:49:57.434698 2025] [:error] [pid 33749:tid 33771] [client 85.203.34.26:58809] [client 85.203.34.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUaphdoInXJnb96wei969wAAApQ"]
[Sat Dec 20 21:50:02.866599 2025] [:error] [pid 33749:tid 33771] [client 85.203.34.20:22635] [client 85.203.34.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aUapitoInXJnb96wei97cwAAApQ"]
[Sat Dec 20 21:50:36.875748 2025] [:error] [pid 33749:tid 33772] [client 85.203.34.45:38459] [client 85.203.34.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUaprNoInXJnb96wei99xwAAApU"]
[Sat Dec 20 21:50:37.595995 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.23:51261] [client 85.203.34.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUaprdoInXJnb96wei990AAAAoc"]
[Sat Dec 20 21:53:46.615886 2025] [autoindex:error] [pid 14286:tid 14296] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:53:46.904768 2025] [autoindex:error] [pid 14286:tid 14313] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:53:47.208182 2025] [autoindex:error] [pid 14286:tid 14304] [client 85.203.34.29:54195] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:19.922423 2025] [autoindex:error] [pid 14286:tid 14302] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:28.471742 2025] [autoindex:error] [pid 14286:tid 14298] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:28.830151 2025] [autoindex:error] [pid 14286:tid 14290] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:29.146884 2025] [autoindex:error] [pid 14286:tid 14299] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:29.503156 2025] [autoindex:error] [pid 14286:tid 14301] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:29.856034 2025] [autoindex:error] [pid 14286:tid 14309] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:35.633052 2025] [autoindex:error] [pid 14286:tid 14306] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:35.940142 2025] [autoindex:error] [pid 14286:tid 14295] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:36.241677 2025] [autoindex:error] [pid 14286:tid 14300] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:54:36.552159 2025] [autoindex:error] [pid 14286:tid 14313] [client 85.203.34.29:54195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 00:01:08.063203 2025] [:error] [pid 14286:tid 14290] [client 43.130.3.120:54040] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUbIRJ7rbXIrw6rGSdbEdAAAAUA"]
[Sun Dec 21 00:27:40.078709 2025] [:error] [pid 22338:tid 22408] [client 45.131.194.226:53609] [client 45.131.194.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.226, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUbOfHGYQSUt-opKpSL4MgAAAFc"]
[Sun Dec 21 00:41:59.900714 2025] [:error] [pid 8641:tid 8705] [client 69.163.239.146:53994] [client 69.163.239.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.239.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUbR13E703usYSvQGLRO6AAAANY"]
[Sun Dec 21 00:42:04.327941 2025] [:error] [pid 8641:tid 8698] [client 69.163.239.146:53994] [client 69.163.239.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.163.239.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUbR3HE703usYSvQGLRO8AAAANI"]
[Sun Dec 21 01:13:56.943457 2025] [:error] [pid 8751:tid 8772] [client 45.88.186.197:58140] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUbZVGvrnuGjNP7vtDQXPwAAABM"]
[Sun Dec 21 01:13:57.427017 2025] [:error] [pid 8640:tid 8664] [client 45.88.186.197:58287] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUbZVfVclzlEWWhvYtlgKQAAAI4"]
[Sun Dec 21 01:13:57.845793 2025] [:error] [pid 8751:tid 8776] [client 45.88.186.197:58460] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUbZVWvrnuGjNP7vtDQXbwAAABc"]
[Sun Dec 21 01:13:58.270756 2025] [:error] [pid 8751:tid 8763] [client 45.88.186.197:58633] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUbZVmvrnuGjNP7vtDQXtAAAAAo"]
[Sun Dec 21 01:13:58.685427 2025] [:error] [pid 8641:tid 8696] [client 45.88.186.197:58789] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUbZVnE703usYSvQGLRYGgAAANE"]
[Sun Dec 21 01:22:53.996042 2025] [:error] [pid 8751:tid 8758] [client 31.171.130.109:39929] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUbbbWvrnuGjNP7vtDQfigAAAAU"]
[Sun Dec 21 01:22:58.676018 2025] [:error] [pid 8642:tid 8716] [client 31.171.130.114:46261] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUbbciJkiik8k41igp0LhgAAAQs"]
[Sun Dec 21 01:23:07.072858 2025] [:error] [pid 22338:tid 22393] [client 31.171.130.116:50479] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aUbbe3GYQSUt-opKpSIQ7wAAAEk"]
[Sun Dec 21 01:23:11.741772 2025] [:error] [pid 8642:tid 8720] [client 31.171.130.165:27535] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aUbbfyJkiik8k41igp0LtAAAAQ8"]
[Sun Dec 21 01:23:20.378153 2025] [:error] [pid 8751:tid 8762] [client 31.171.130.107:56255] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUbbiGvrnuGjNP7vtDQgRQAAAAk"]
[Sun Dec 21 01:23:22.512182 2025] [:error] [pid 8751:tid 8775] [client 31.171.130.148:22655] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUbbimvrnuGjNP7vtDQgVQAAABY"]
[Sun Dec 21 01:23:23.119096 2025] [:error] [pid 8751:tid 8767] [client 31.171.130.120:24209] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUbbi2vrnuGjNP7vtDQgWQAAAA4"]
[Sun Dec 21 01:23:23.708996 2025] [:error] [pid 8641:tid 8681] [client 31.171.130.136:35299] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUbbi3E703usYSvQGLRcHAAAAMM"]
[Sun Dec 21 01:23:24.341612 2025] [:error] [pid 8751:tid 8761] [client 31.171.130.110:20881] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUbbjGvrnuGjNP7vtDQgYQAAAAg"]
[Sun Dec 21 01:23:25.007136 2025] [:error] [pid 8751:tid 8762] [client 31.171.130.152:43215] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUbbjWvrnuGjNP7vtDQgaAAAAAk"]
[Sun Dec 21 01:23:26.808763 2025] [:error] [pid 8751:tid 8767] [client 31.171.130.160:56079] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUbbjmvrnuGjNP7vtDQgfgAAAA4"]
[Sun Dec 21 01:23:29.365454 2025] [:error] [pid 8751:tid 8758] [client 31.171.130.109:32673] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aUbbkWvrnuGjNP7vtDQgnQAAAAU"]
[Sun Dec 21 01:23:32.745486 2025] [:error] [pid 8642:tid 8711] [client 31.171.130.122:43119] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUbblCJkiik8k41igp0MBAAAAQc"]
[Sun Dec 21 01:23:34.498195 2025] [:error] [pid 8642:tid 8715] [client 31.171.130.145:64999] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUbbliJkiik8k41igp0MDwAAAQo"]
[Sun Dec 21 01:23:36.759179 2025] [:error] [pid 8751:tid 8763] [client 31.171.130.149:63385] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUbbmGvrnuGjNP7vtDQg6QAAAAo"]
[Sun Dec 21 01:23:45.376632 2025] [:error] [pid 22338:tid 22393] [client 31.171.130.163:45843] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUbboXGYQSUt-opKpSIRlAAAAEk"]
[Sun Dec 21 01:23:47.443134 2025] [:error] [pid 8640:tid 8673] [client 31.171.130.138:47951] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUbbo_VclzlEWWhvYtlkUwAAAJc"]
[Sun Dec 21 01:23:50.805789 2025] [:error] [pid 22338:tid 22387] [client 31.171.130.121:52371] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aUbbpnGYQSUt-opKpSIRxQAAAEM"]
[Sun Dec 21 01:23:54.018969 2025] [:error] [pid 8641:tid 8696] [client 31.171.130.143:24211] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aUbbqnE703usYSvQGLRcZAAAANE"]
[Sun Dec 21 01:24:00.108891 2025] [:error] [pid 22338:tid 22390] [client 31.171.130.136:38607] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUbbsHGYQSUt-opKpSIR6AAAAEY"]
[Sun Dec 21 01:24:02.202840 2025] [:error] [pid 22338:tid 22387] [client 31.171.130.129:61905] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUbbsnGYQSUt-opKpSIR-wAAAEM"]
[Sun Dec 21 01:24:04.365000 2025] [:error] [pid 8751:tid 8769] [client 31.171.130.155:39949] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUbbtGvrnuGjNP7vtDQhtQAAABA"]
[Sun Dec 21 01:24:04.968078 2025] [:error] [pid 8640:tid 8659] [client 31.171.130.122:26669] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUbbtPVclzlEWWhvYtlkwgAAAIk"]
[Sun Dec 21 01:24:05.520205 2025] [:error] [pid 8641:tid 8698] [client 31.171.130.162:62761] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUbbtXE703usYSvQGLRcfQAAANI"]
[Sun Dec 21 01:24:10.073649 2025] [:error] [pid 8751:tid 8767] [client 31.171.130.155:25731] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aUbbumvrnuGjNP7vtDQh-wAAAA4"]
[Sun Dec 21 01:24:10.659762 2025] [:error] [pid 8641:tid 8678] [client 31.171.130.154:43677] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aUbbunE703usYSvQGLRcmgAAAMA"]
[Sun Dec 21 01:24:11.291640 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.163:31389] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUbbu3E703usYSvQGLRcnwAAANM"]
[Sun Dec 21 01:24:23.238616 2025] [:error] [pid 22338:tid 22397] [client 31.171.130.121:34107] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aUbbx3GYQSUt-opKpSISZwAAAEw"]
[Sun Dec 21 01:24:28.375465 2025] [:error] [pid 22338:tid 22399] [client 31.171.130.151:48241] [client 31.171.130.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.151, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUbbzHGYQSUt-opKpSISfgAAAE4"]
[Sun Dec 21 01:24:44.426805 2025] [:error] [pid 22338:tid 22401] [client 31.171.130.151:48241] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUbb3HGYQSUt-opKpSIS7AAAAFA"]
[Sun Dec 21 01:24:47.968488 2025] [:error] [pid 8640:tid 8666] [client 31.171.130.134:29189] [client 31.171.130.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.134, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUbb3_VclzlEWWhvYtllowAAAJA"]
[Sun Dec 21 01:24:50.868492 2025] [:error] [pid 8640:tid 8657] [client 31.171.130.134:29189] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aUbb4vVclzlEWWhvYtllrgAAAIc"]
[Sun Dec 21 01:25:01.994671 2025] [:error] [pid 22338:tid 22393] [client 31.171.130.150:41717] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUbb7XGYQSUt-opKpSITiQAAAEk"]
[Sun Dec 21 01:25:13.346095 2025] [:error] [pid 8640:tid 8672] [client 31.171.130.122:28503] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUbb-fVclzlEWWhvYtlmHQAAAJY"]
[Sun Dec 21 01:25:18.212142 2025] [:error] [pid 8751:tid 8764] [client 31.171.130.138:26459] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUbb_mvrnuGjNP7vtDQjygAAAAs"]
[Sun Dec 21 01:25:23.002151 2025] [:error] [pid 22338:tid 22393] [client 31.171.130.135:24041] [client 31.171.130.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.135, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aUbcA3GYQSUt-opKpSIUcAAAAEk"]
[Sun Dec 21 01:25:24.240817 2025] [:error] [pid 22338:tid 22404] [client 31.171.130.135:24041] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUbcBHGYQSUt-opKpSIUeQAAAFM"]
[Sun Dec 21 01:25:46.543291 2025] [:error] [pid 8641:tid 8687] [client 31.171.130.114:23083] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUbcGnE703usYSvQGLRfCAAAAMk"]
[Sun Dec 21 01:25:51.290706 2025] [:error] [pid 8751:tid 8760] [client 31.171.130.139:60333] [client 31.171.130.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.139, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUbcH2vrnuGjNP7vtDQkagAAAAc"]
[Sun Dec 21 01:25:56.599663 2025] [:error] [pid 8751:tid 8753] [client 31.171.130.139:60333] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aUbcJGvrnuGjNP7vtDQklAAAAAA"]
[Sun Dec 21 01:25:59.299708 2025] [:error] [pid 8641:tid 8680] [client 31.171.130.147:31389] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aUbcJ3E703usYSvQGLRfLgAAAMI"]
[Sun Dec 21 01:26:02.629824 2025] [:error] [pid 8751:tid 8771] [client 31.171.130.133:61991] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUbcKmvrnuGjNP7vtDQkwQAAABI"]
[Sun Dec 21 01:26:07.107341 2025] [:error] [pid 8642:tid 8716] [client 31.171.130.113:59197] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUbcLyJkiik8k41igp0PMwAAAQs"]
[Sun Dec 21 01:26:08.715475 2025] [:error] [pid 8641:tid 8690] [client 31.171.130.131:34327] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUbcMHE703usYSvQGLRfawAAAMw"]
[Sun Dec 21 01:26:16.090597 2025] [:error] [pid 8642:tid 8720] [client 31.171.130.152:40831] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUbcOCJkiik8k41igp0PbAAAAQ8"]
[Sun Dec 21 01:26:19.547646 2025] [:error] [pid 8641:tid 8682] [client 31.171.130.142:33075] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUbcO3E703usYSvQGLRfpgAAAMQ"]
[Sun Dec 21 01:26:24.832564 2025] [:error] [pid 8641:tid 8679] [client 31.171.130.145:50395] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aUbcQHE703usYSvQGLRfxgAAAME"]
[Sun Dec 21 01:26:29.372850 2025] [:error] [pid 8642:tid 8717] [client 31.171.130.113:48541] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUbcRSJkiik8k41igp0PngAAAQw"]
[Sun Dec 21 01:26:33.043504 2025] [:error] [pid 8751:tid 8771] [client 31.171.130.114:34519] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aUbcSWvrnuGjNP7vtDQlawAAABI"]
[Sun Dec 21 01:26:39.002286 2025] [:error] [pid 22338:tid 22401] [client 31.171.130.134:48125] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUbcT3GYQSUt-opKpSIWJQAAAFA"]
[Sun Dec 21 01:26:49.155112 2025] [:error] [pid 8642:tid 8701] [client 31.171.130.130:44085] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUbcWSJkiik8k41igp0P4wAAAQI"]
[Sun Dec 21 01:26:49.799881 2025] [:error] [pid 8641:tid 8689] [client 31.171.130.163:50799] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aUbcWXE703usYSvQGLRgCwAAAMs"]
[Sun Dec 21 01:26:50.376847 2025] [:error] [pid 8642:tid 8729] [client 31.171.130.115:23905] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUbcWiJkiik8k41igp0P5wAAARg"]
[Sun Dec 21 01:26:50.995663 2025] [:error] [pid 22338:tid 22398] [client 31.171.130.157:29953] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUbcWnGYQSUt-opKpSIWVQAAAE0"]
[Sun Dec 21 01:26:53.037672 2025] [:error] [pid 8751:tid 8756] [client 31.171.130.141:58129] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUbcXWvrnuGjNP7vtDQl3QAAAAM"]
[Sun Dec 21 01:26:53.647403 2025] [:error] [pid 8640:tid 8657] [client 31.171.130.135:36165] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aUbcXfVclzlEWWhvYtln0QAAAIc"]
[Sun Dec 21 01:26:57.053423 2025] [:error] [pid 8641:tid 8683] [client 31.171.130.138:51337] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aUbcYXE703usYSvQGLRgGgAAAMU"]
[Sun Dec 21 01:26:57.623691 2025] [:error] [pid 8641:tid 8687] [client 31.171.130.133:50917] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUbcYXE703usYSvQGLRgHAAAAMk"]
[Sun Dec 21 01:26:58.215481 2025] [:error] [pid 8642:tid 8728] [client 31.171.130.137:27621] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUbcYiJkiik8k41igp0P9gAAARc"]
[Sun Dec 21 01:26:59.120454 2025] [:error] [pid 8641:tid 8694] [client 31.171.130.155:40533] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUbcY3E703usYSvQGLRgHgAAAM8"]
[Sun Dec 21 01:27:01.257317 2025] [:error] [pid 8640:tid 8670] [client 31.171.130.148:49033] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUbcZfVclzlEWWhvYtloAgAAAJQ"]
[Sun Dec 21 01:27:04.638111 2025] [:error] [pid 8640:tid 8668] [client 31.171.130.114:36787] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUbcaPVclzlEWWhvYtloGQAAAJI"]
[Sun Dec 21 01:27:10.549934 2025] [:error] [pid 8751:tid 8775] [client 31.171.130.159:52843] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUbcbmvrnuGjNP7vtDQmmgAAABY"]
[Sun Dec 21 01:27:21.130257 2025] [:error] [pid 8751:tid 8770] [client 31.171.130.130:53127] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aUbceWvrnuGjNP7vtDQm5gAAABE"]
[Sun Dec 21 01:27:26.016867 2025] [:error] [pid 22338:tid 22409] [client 31.171.130.151:25205] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUbcfnGYQSUt-opKpSIWwQAAAFg"]
[Sun Dec 21 01:27:26.624396 2025] [:error] [pid 8641:tid 8689] [client 31.171.130.158:30523] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUbcfnE703usYSvQGLRgewAAAMs"]
[Sun Dec 21 01:27:32.608656 2025] [:error] [pid 22338:tid 22387] [client 31.171.130.110:59951] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUbchHGYQSUt-opKpSIW1gAAAEM"]
[Sun Dec 21 01:27:37.142984 2025] [proxy_fcgi:error] [pid 8751:tid 8777] [client 31.171.130.141:57833] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:27:37.451737 2025] [proxy_fcgi:error] [pid 8751:tid 8765] [client 31.171.130.141:57833] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:27:37.984809 2025] [proxy_fcgi:error] [pid 8751:tid 8774] [client 31.171.130.141:57833] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 01:27:43.050752 2025] [:error] [pid 8751:tid 8762] [client 31.171.130.141:57833] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUbcj2vrnuGjNP7vtDQnUQAAAAk"]
[Sun Dec 21 01:27:43.648075 2025] [:error] [pid 22338:tid 22396] [client 31.171.130.161:32971] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aUbcj3GYQSUt-opKpSIW8QAAAEs"]
[Sun Dec 21 01:27:54.556241 2025] [autoindex:error] [pid 22338:tid 22393] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:27:54.842977 2025] [autoindex:error] [pid 22338:tid 22401] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:27:55.143801 2025] [autoindex:error] [pid 22338:tid 22405] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:27:55.462000 2025] [autoindex:error] [pid 22338:tid 22387] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:27:57.390159 2025] [autoindex:error] [pid 22338:tid 22401] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:27:57.700976 2025] [autoindex:error] [pid 22338:tid 22405] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:27:57.992114 2025] [autoindex:error] [pid 22338:tid 22386] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:27:58.274737 2025] [autoindex:error] [pid 22338:tid 22392] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:27:58.568269 2025] [autoindex:error] [pid 22338:tid 22388] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:27:58.849538 2025] [autoindex:error] [pid 22338:tid 22398] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:27:59.441385 2025] [autoindex:error] [pid 22338:tid 22393] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:01.384633 2025] [autoindex:error] [pid 22338:tid 22400] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:01.679448 2025] [autoindex:error] [pid 22338:tid 22407] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:04.496819 2025] [autoindex:error] [pid 22338:tid 22396] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:04.794677 2025] [autoindex:error] [pid 22338:tid 22403] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:05.088430 2025] [autoindex:error] [pid 22338:tid 22389] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:05.394875 2025] [autoindex:error] [pid 22338:tid 22399] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:07.000974 2025] [autoindex:error] [pid 22338:tid 22408] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:07.296141 2025] [autoindex:error] [pid 22338:tid 22406] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:08.803201 2025] [autoindex:error] [pid 22338:tid 22389] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:11.637417 2025] [autoindex:error] [pid 22338:tid 22402] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:11.922245 2025] [autoindex:error] [pid 22338:tid 22405] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:12.455050 2025] [autoindex:error] [pid 22338:tid 22406] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:21.016305 2025] [autoindex:error] [pid 22338:tid 22401] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:22.645982 2025] [autoindex:error] [pid 22338:tid 22396] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:22.940201 2025] [autoindex:error] [pid 22338:tid 22388] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:24.096527 2025] [autoindex:error] [pid 22338:tid 22400] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:24.389226 2025] [autoindex:error] [pid 22338:tid 22399] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:24.672906 2025] [autoindex:error] [pid 22338:tid 22384] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:28.886914 2025] [autoindex:error] [pid 22338:tid 22403] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:28:30.553107 2025] [autoindex:error] [pid 22338:tid 22399] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:02.786230 2025] [autoindex:error] [pid 22338:tid 22409] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:03.077058 2025] [autoindex:error] [pid 22338:tid 22395] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:03.355067 2025] [autoindex:error] [pid 22338:tid 22402] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:03.687075 2025] [autoindex:error] [pid 22338:tid 22403] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:04.001914 2025] [autoindex:error] [pid 22338:tid 22396] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:04.312510 2025] [autoindex:error] [pid 22338:tid 22384] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:04.621238 2025] [autoindex:error] [pid 22338:tid 22401] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:04.908984 2025] [autoindex:error] [pid 22338:tid 22386] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:06.496665 2025] [autoindex:error] [pid 22338:tid 22409] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:08.048806 2025] [autoindex:error] [pid 22338:tid 22395] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:08.796694 2025] [autoindex:error] [pid 22338:tid 22399] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:09.094777 2025] [autoindex:error] [pid 22338:tid 22390] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:11.031518 2025] [autoindex:error] [pid 22338:tid 22398] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:11.362860 2025] [autoindex:error] [pid 22338:tid 22397] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:11.666218 2025] [autoindex:error] [pid 22338:tid 22385] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:11.964045 2025] [autoindex:error] [pid 22338:tid 22388] [client 31.171.130.129:62375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:42.236090 2025] [autoindex:error] [pid 22338:tid 22399] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:29:56.616962 2025] [autoindex:error] [pid 22338:tid 22399] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:01.959938 2025] [autoindex:error] [pid 22338:tid 22392] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:02.284454 2025] [autoindex:error] [pid 22338:tid 22385] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:08.262630 2025] [autoindex:error] [pid 22338:tid 22399] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:08.606591 2025] [autoindex:error] [pid 22338:tid 22387] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:08.945153 2025] [autoindex:error] [pid 22338:tid 22404] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:09.279331 2025] [autoindex:error] [pid 22338:tid 22389] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:09.577218 2025] [autoindex:error] [pid 22338:tid 22403] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:09.895729 2025] [autoindex:error] [pid 22338:tid 22400] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:10.199839 2025] [autoindex:error] [pid 22338:tid 22409] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:10.513466 2025] [autoindex:error] [pid 22338:tid 22408] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:10.816508 2025] [autoindex:error] [pid 22338:tid 22402] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:30:36.355938 2025] [autoindex:error] [pid 22338:tid 22398] [client 31.171.130.149:52833] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 01:44:04.886540 2025] [:error] [pid 8641:tid 8682] [client 201.49.225.155:50093] [client 201.49.225.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.49.225.155, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUbgZHE703usYSvQGLRlYAAAAMQ"]
[Sun Dec 21 01:44:07.421444 2025] [:error] [pid 8640:tid 8656] [client 201.49.225.155:50147] [client 201.49.225.155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUbgZ_VclzlEWWhvYtluRgAAAIY"]
[Sun Dec 21 01:44:09.225491 2025] [:error] [pid 8642:tid 8717] [client 122.177.246.123:4596] [client 122.177.246.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.177.246.123, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUbgaSJkiik8k41igp0VxgAAAQw"]
[Sun Dec 21 01:44:19.752526 2025] [:error] [pid 8751:tid 8764] [client 201.49.225.155:55696] [client 201.49.225.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.49.225.155, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUbgc2vrnuGjNP7vtDQv3wAAAAs"]
[Sun Dec 21 02:35:50.837639 2025] [:error] [pid 8642:tid 8711] [client 4.241.202.184:16600] [client 4.241.202.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.202.184, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUbshiJkiik8k41igp0vpwAAAQc"]
[Sun Dec 21 02:36:58.874944 2025] [:error] [pid 8751:tid 8760] [client 4.241.202.184:16636] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/weblinks.php"] [unique_id "aUbsymvrnuGjNP7vtDRa-AAAAAc"]
[Sun Dec 21 02:37:00.184922 2025] [:error] [pid 43680:tid 43698] [client 4.241.202.184:16594] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/weblinks.php"] [unique_id "aUbszEDkAAJVjNqC6UW8gwAAAU4"]
[Sun Dec 21 02:37:00.945733 2025] [:error] [pid 8641:tid 8688] [client 4.241.202.184:16619] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/weblinks.php"] [unique_id "aUbszHE703usYSvQGLSB9AAAAMo"]
[Sun Dec 21 02:37:02.333339 2025] [:error] [pid 8641:tid 8692] [client 4.241.202.184:16632] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/weblinks.php"] [unique_id "aUbsznE703usYSvQGLSB_QAAAM0"]
[Sun Dec 21 02:37:03.395657 2025] [:error] [pid 8642:tid 8708] [client 4.241.202.184:16538] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index.php"] [unique_id "aUbszyJkiik8k41igp0x_QAAAQU"]
[Sun Dec 21 02:37:04.141460 2025] [:error] [pid 44515:tid 44537] [client 4.241.202.184:16617] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index.php"] [unique_id "aUbs0JZAdBRP9gwGvJ5L6wAAAZM"]
[Sun Dec 21 02:37:05.086304 2025] [:error] [pid 8640:tid 8666] [client 4.241.202.184:16601] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index.php"] [unique_id "aUbs0fVclzlEWWhvYtmIuQAAAJA"]
[Sun Dec 21 02:37:08.052380 2025] [:error] [pid 8640:tid 8665] [client 4.241.202.184:16625] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index.php"] [unique_id "aUbs1PVclzlEWWhvYtmIywAAAI8"]
[Sun Dec 21 02:37:09.361267 2025] [:error] [pid 22338:tid 22409] [client 4.241.202.184:16566] [client 4.241.202.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php"] [unique_id "aUbs1XGYQSUt-opKpSJBiwAAAFg"]
[Sun Dec 21 02:37:12.159563 2025] [:error] [pid 8640:tid 8671] [client 4.241.202.184:16531] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "aUbs2PVclzlEWWhvYtmI6QAAAJU"]
[Sun Dec 21 02:37:13.353504 2025] [:error] [pid 43680:tid 43706] [client 4.241.202.184:16621] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "aUbs2UDkAAJVjNqC6UW9GQAAAVY"]
[Sun Dec 21 02:37:13.890363 2025] [:error] [pid 8640:tid 8662] [client 4.241.202.184:5061] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "aUbs2fVclzlEWWhvYtmI8wAAAIw"]
[Sun Dec 21 02:37:15.778363 2025] [:error] [pid 43680:tid 43707] [client 4.241.202.184:16526] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "aUbs20DkAAJVjNqC6UW9MgAAAVc"]
[Sun Dec 21 02:37:17.024337 2025] [:error] [pid 8640:tid 8650] [client 4.241.202.184:16580] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index4.php"] [unique_id "aUbs3fVclzlEWWhvYtmJAwAAAIA"]
[Sun Dec 21 02:37:20.608685 2025] [:error] [pid 8641:tid 8680] [client 4.241.202.184:16607] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index4.php"] [unique_id "aUbs4HE703usYSvQGLSCagAAAMI"]
[Sun Dec 21 02:37:22.169296 2025] [:error] [pid 22338:tid 22385] [client 4.241.202.184:16534] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index4.php"] [unique_id "aUbs4nGYQSUt-opKpSJB-QAAAEE"]
[Sun Dec 21 02:37:23.545692 2025] [:error] [pid 43680:tid 43696] [client 4.241.202.184:16539] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index4.php"] [unique_id "aUbs40DkAAJVjNqC6UW9iwAAAUw"]
[Sun Dec 21 02:37:24.524096 2025] [:error] [pid 8640:tid 8650] [client 4.241.202.184:16634] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conf.php"] [unique_id "aUbs5PVclzlEWWhvYtmJPQAAAIA"]
[Sun Dec 21 02:37:25.122016 2025] [:error] [pid 8640:tid 8674] [client 4.241.202.184:16599] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conf.php"] [unique_id "aUbs5fVclzlEWWhvYtmJRQAAAJg"]
[Sun Dec 21 02:37:26.230949 2025] [:error] [pid 44515:tid 44529] [client 4.241.202.184:16589] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conf.php"] [unique_id "aUbs5pZAdBRP9gwGvJ5MtwAAAYs"]
[Sun Dec 21 02:37:26.783309 2025] [:error] [pid 44515:tid 44528] [client 4.241.202.184:16618] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conf.php"] [unique_id "aUbs5pZAdBRP9gwGvJ5MvgAAAYo"]
[Sun Dec 21 02:37:28.081422 2025] [:error] [pid 8751:tid 8777] [client 4.241.202.184:16603] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logins.php"] [unique_id "aUbs6GvrnuGjNP7vtDRcIgAAABg"]
[Sun Dec 21 02:37:29.744523 2025] [:error] [pid 8751:tid 8775] [client 4.241.202.184:16516] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logins.php"] [unique_id "aUbs6WvrnuGjNP7vtDRcNgAAABY"]
[Sun Dec 21 02:37:30.306803 2025] [:error] [pid 8641:tid 8686] [client 4.241.202.184:16524] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logins.php"] [unique_id "aUbs6nE703usYSvQGLSCngAAAMg"]
[Sun Dec 21 02:37:30.985494 2025] [:error] [pid 8751:tid 8772] [client 4.241.202.184:5086] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logins.php"] [unique_id "aUbs6mvrnuGjNP7vtDRcOwAAABM"]
[Sun Dec 21 02:37:31.914602 2025] [:error] [pid 8751:tid 8762] [client 4.241.202.184:16540] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indexs.php"] [unique_id "aUbs62vrnuGjNP7vtDRcRwAAAAk"]
[Sun Dec 21 02:37:33.542637 2025] [:error] [pid 8751:tid 8766] [client 4.241.202.184:16586] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indexs.php"] [unique_id "aUbs7WvrnuGjNP7vtDRcXQAAAA0"]
[Sun Dec 21 02:37:34.427566 2025] [:error] [pid 8751:tid 8770] [client 4.241.202.184:16606] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indexs.php"] [unique_id "aUbs7mvrnuGjNP7vtDRcawAAABE"]
[Sun Dec 21 02:37:36.797211 2025] [:error] [pid 8641:tid 8683] [client 4.241.202.184:16583] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indexs.php"] [unique_id "aUbs8HE703usYSvQGLSC1gAAAMU"]
[Sun Dec 21 02:37:37.886396 2025] [:error] [pid 8642:tid 8721] [client 4.241.202.184:5063] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "aUbs8SJkiik8k41igp0zDwAAARA"]
[Sun Dec 21 02:37:43.080974 2025] [:error] [pid 8641:tid 8686] [client 4.241.202.184:16558] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "aUbs93E703usYSvQGLSDEgAAAMg"]
[Sun Dec 21 02:37:43.583427 2025] [:error] [pid 43680:tid 43705] [client 4.241.202.184:16587] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "aUbs90DkAAJVjNqC6UW-XgAAAVU"]
[Sun Dec 21 02:37:44.078401 2025] [:error] [pid 43680:tid 43691] [client 4.241.202.184:16612] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "aUbs-EDkAAJVjNqC6UW-ZgAAAUc"]
[Sun Dec 21 02:37:46.345219 2025] [:error] [pid 22338:tid 22405] [client 4.241.202.184:16569] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUbs-nGYQSUt-opKpSJC1AAAAFQ"]
[Sun Dec 21 02:37:47.532751 2025] [:error] [pid 8751:tid 8756] [client 4.241.202.184:16541] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUbs-2vrnuGjNP7vtDRcxwAAAAM"]
[Sun Dec 21 02:37:49.392518 2025] [:error] [pid 8751:tid 8775] [client 4.241.202.184:16593] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUbs_WvrnuGjNP7vtDRczgAAABY"]
[Sun Dec 21 02:37:50.229708 2025] [:error] [pid 43680:tid 43686] [client 4.241.202.184:5110] [client 4.241.202.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUbs_kDkAAJVjNqC6UW-4wAAAUI"]
[Sun Dec 21 02:41:10.286785 2025] [autoindex:error] [pid 8751:tid 8760] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:11.030123 2025] [autoindex:error] [pid 8751:tid 8769] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:11.374625 2025] [autoindex:error] [pid 8751:tid 8774] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:11.898710 2025] [autoindex:error] [pid 8751:tid 8770] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:14.736920 2025] [autoindex:error] [pid 8751:tid 8774] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:15.047655 2025] [autoindex:error] [pid 8751:tid 8764] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:15.350699 2025] [autoindex:error] [pid 8751:tid 8770] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:15.645103 2025] [autoindex:error] [pid 8751:tid 8768] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:15.945917 2025] [autoindex:error] [pid 8751:tid 8773] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:16.251971 2025] [autoindex:error] [pid 8751:tid 8766] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:16.856390 2025] [autoindex:error] [pid 8751:tid 8769] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:21.703296 2025] [autoindex:error] [pid 8751:tid 8771] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:22.054357 2025] [autoindex:error] [pid 8751:tid 8775] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:31.847780 2025] [autoindex:error] [pid 8751:tid 8760] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:32.443306 2025] [autoindex:error] [pid 8751:tid 8759] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:33.041954 2025] [autoindex:error] [pid 8751:tid 8761] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:33.357116 2025] [autoindex:error] [pid 8751:tid 8769] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:40.303814 2025] [autoindex:error] [pid 8751:tid 8766] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:40.645054 2025] [autoindex:error] [pid 8751:tid 8765] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:45.224674 2025] [autoindex:error] [pid 8751:tid 8754] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:54.383155 2025] [autoindex:error] [pid 8751:tid 8762] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:54.720970 2025] [autoindex:error] [pid 8751:tid 8758] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:41:55.052360 2025] [autoindex:error] [pid 8751:tid 8760] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:42:17.540919 2025] [autoindex:error] [pid 8751:tid 8761] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:42:26.917066 2025] [autoindex:error] [pid 8751:tid 8770] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:42:27.244202 2025] [autoindex:error] [pid 8751:tid 8775] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:42:30.000366 2025] [autoindex:error] [pid 8751:tid 8769] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:42:30.310092 2025] [autoindex:error] [pid 8751:tid 8767] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:42:30.624274 2025] [autoindex:error] [pid 8751:tid 8753] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:42:47.856275 2025] [autoindex:error] [pid 8751:tid 8767] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:42:52.775125 2025] [autoindex:error] [pid 8751:tid 8758] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:09.976310 2025] [autoindex:error] [pid 8751:tid 8756] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:10.297394 2025] [autoindex:error] [pid 8751:tid 8761] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:10.819082 2025] [autoindex:error] [pid 8751:tid 8775] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:11.148278 2025] [autoindex:error] [pid 8751:tid 8757] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:11.540618 2025] [autoindex:error] [pid 8751:tid 8771] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:11.849192 2025] [autoindex:error] [pid 8751:tid 8774] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:12.160863 2025] [autoindex:error] [pid 8751:tid 8761] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:12.477248 2025] [autoindex:error] [pid 8751:tid 8763] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:20.472075 2025] [autoindex:error] [pid 8751:tid 8774] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:26.195151 2025] [autoindex:error] [pid 8751:tid 8762] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:26.487368 2025] [autoindex:error] [pid 8751:tid 8761] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:26.818433 2025] [autoindex:error] [pid 8751:tid 8754] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:31.242280 2025] [autoindex:error] [pid 8751:tid 8776] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:31.546584 2025] [autoindex:error] [pid 8751:tid 8777] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:31.841861 2025] [autoindex:error] [pid 8751:tid 8772] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:32.140487 2025] [autoindex:error] [pid 8751:tid 8773] [client 31.171.130.130:57035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:46:56.617441 2025] [autoindex:error] [pid 8642:tid 8723] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:32.332075 2025] [autoindex:error] [pid 8642:tid 8701] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:44.106071 2025] [autoindex:error] [pid 8642:tid 8717] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:44.414641 2025] [autoindex:error] [pid 8642:tid 8724] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:54.824858 2025] [autoindex:error] [pid 8642:tid 8718] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:55.135773 2025] [autoindex:error] [pid 8642:tid 8724] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:55.448858 2025] [autoindex:error] [pid 8642:tid 8713] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:55.760415 2025] [autoindex:error] [pid 8642:tid 8708] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:56.063826 2025] [autoindex:error] [pid 8642:tid 8710] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:56.369523 2025] [autoindex:error] [pid 8642:tid 8718] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:56.673697 2025] [autoindex:error] [pid 8642:tid 8724] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:56.979848 2025] [autoindex:error] [pid 8642:tid 8699] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:57.269379 2025] [autoindex:error] [pid 8642:tid 8727] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:45.798680 2025] [autoindex:error] [pid 8642:tid 8710] [client 31.171.130.147:48015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 03:33:22.613816 2025] [:error] [pid 61829:tid 61974] [client 45.131.194.240:64463] [client 45.131.194.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.240, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUb6AsGgqWeHQ8uao-ASuAAAAJA"]
[Sun Dec 21 03:41:02.666418 2025] [:error] [pid 61828:tid 61940] [client 45.131.194.202:60717] [client 45.131.194.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.202, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUb7zpA6zvbI_P9k8jF_-wAAAEk"]
[Sun Dec 21 03:48:19.722658 2025] [:error] [pid 38939:tid 39016] [client 45.131.194.221:33035] [client 45.131.194.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.221, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUb9g0fRTac4My5o8LqZiwAAAJQ"]
[Sun Dec 21 03:55:41.627443 2025] [:error] [pid 4235:tid 4299] [client 45.131.194.207:57737] [client 45.131.194.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.207, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUb_PdLhWAOVeq6dz8jFPAAAAIU"]
[Sun Dec 21 04:03:02.127091 2025] [:error] [pid 41642:tid 41655] [client 45.131.194.198:34391] [client 45.131.194.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.198, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcA9pXl0rINTbo6QReVmwAAAMs"]
[Sun Dec 21 04:10:15.721859 2025] [:error] [pid 20760:tid 20774] [client 45.131.194.222:29055] [client 45.131.194.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.222, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcCp-XEVvRTAtWo3gmDDgAAAMs"]
[Sun Dec 21 04:19:13.990749 2025] [:error] [pid 20676:tid 20756] [client 45.131.194.230:62449] [client 45.131.194.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.230, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcEwapSa967F4pOO5yndAAAAJc"]
[Sun Dec 21 04:29:17.633625 2025] [:error] [pid 20674:tid 20690] [client 45.131.194.205:58145] [client 45.131.194.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.205, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcHHdhSbhHOCK6TAw8DrgAAAAw"]
[Sun Dec 21 04:40:02.535634 2025] [:error] [pid 20675:tid 20730] [client 45.131.194.240:60277] [client 45.131.194.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.240, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcJoryUvZnd3bHSR3b4igAAAFg"]
[Sun Dec 21 04:50:49.896069 2025] [:error] [pid 20675:tid 20724] [client 45.131.194.233:26093] [client 45.131.194.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.233, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcMKbyUvZnd3bHSR3b7XAAAAFI"]
[Sun Dec 21 04:59:31.550870 2025] [autoindex:error] [pid 20676:tid 20733] [client 38.242.205.127:64336] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 21 05:01:32.713623 2025] [:error] [pid 20760:tid 20778] [client 45.131.194.236:51349] [client 45.131.194.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.236, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcOrOXEVvRTAtWo3gmVBwAAAM8"]
[Sun Dec 21 05:12:21.855683 2025] [:error] [pid 20674:tid 20696] [client 45.131.194.229:39131] [client 45.131.194.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.229, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcRNdhSbhHOCK6TAw8OcwAAABI"]
[Sun Dec 21 05:23:04.834684 2025] [:error] [pid 20760:tid 20763] [client 45.131.194.232:32717] [client 45.131.194.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.232, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcTuOXEVvRTAtWo3gmeGAAAAMA"]
[Sun Dec 21 05:36:41.852919 2025] [:error] [pid 20760:tid 20765] [client 45.131.194.194:42201] [client 45.131.194.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.194, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcW6eXEVvRTAtWo3gmkeQAAAMI"]
[Sun Dec 21 05:37:29.737893 2025] [:error] [pid 20674:tid 20681] [client 43.157.168.43:37602] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUcXGdhSbhHOCK6TAw8ULQAAAAM"]
[Sun Dec 21 05:47:29.014192 2025] [:error] [pid 20676:tid 20748] [client 45.131.194.205:27797] [client 45.131.194.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.205, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcZcapSa967F4pOO5zAOgAAAI8"]
[Sun Dec 21 05:58:12.004561 2025] [:error] [pid 20760:tid 20777] [client 45.131.194.216:62035] [client 45.131.194.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.216, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcb9OXEVvRTAtWo3gmubAAAAM4"]
[Sun Dec 21 06:13:03.335103 2025] [:error] [pid 20760:tid 20784] [client 45.131.194.192:62245] [client 45.131.194.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.192, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcfb-XEVvRTAtWo3gm3CQAAANU"]
[Sun Dec 21 06:23:46.663657 2025] [:error] [pid 16016:tid 16040] [client 45.131.194.205:29063] [client 45.131.194.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.205, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUch8sHQ_KQh3iINaCOZbwAAAVY"]
[Sun Dec 21 06:34:23.339037 2025] [:error] [pid 12191:tid 12214] [client 45.131.194.226:28523] [client 45.131.194.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.226, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUckbwM0m463UZmqdiD9WAAAARU"]
[Sun Dec 21 06:41:51.104090 2025] [:error] [pid 12191:tid 12214] [client 103.65.236.149:59482] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aUcmLwM0m463UZmqdiD_7QAAARU"]
[Sun Dec 21 06:41:51.640504 2025] [:error] [pid 12191:tid 12202] [client 103.65.236.149:54439] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aUcmLwM0m463UZmqdiD_7gAAAQk"]
[Sun Dec 21 06:43:47.620692 2025] [:error] [pid 16016:tid 16021] [client 37.27.69.196:58644] [client 37.27.69.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.27.69.196, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcmo8HQ_KQh3iINaCOgdQAAAUM"]
[Sun Dec 21 06:43:52.613973 2025] [:error] [pid 16016:tid 16032] [client 37.27.69.196:58644] [client 37.27.69.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.27.69.196, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcmqMHQ_KQh3iINaCOgiAAAAU4"]
[Sun Dec 21 06:44:59.478302 2025] [:error] [pid 20760:tid 20769] [client 45.131.194.234:64585] [client 45.131.194.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.234, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcm6-XEVvRTAtWo3gnAGQAAAMY"]
[Sun Dec 21 06:55:37.538914 2025] [:error] [pid 16016:tid 16018] [client 45.131.194.230:41265] [client 45.131.194.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.230, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcpacHQ_KQh3iINaCOkawAAAUA"]
[Sun Dec 21 07:06:13.669603 2025] [:error] [pid 12191:tid 12216] [client 45.131.194.198:53429] [client 45.131.194.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.198, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcr5QM0m463UZmqdiAGAAAAARc"]
[Sun Dec 21 07:16:45.068437 2025] [:error] [pid 12191:tid 12200] [client 45.131.194.205:23631] [client 45.131.194.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.205, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcuXQM0m463UZmqdiAH-QAAAQc"]
[Sun Dec 21 07:27:17.731619 2025] [:error] [pid 16016:tid 16024] [client 45.131.194.237:40131] [client 45.131.194.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.237, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUcw1cHQ_KQh3iINaCOtrQAAAUY"]
[Sun Dec 21 07:38:00.612161 2025] [:error] [pid 20675:tid 20724] [client 45.131.194.110:27257] [client 45.131.194.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.110, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUczWLyUvZnd3bHSR3YmDgAAAFI"]
[Sun Dec 21 07:48:38.410922 2025] [:error] [pid 20676:tid 20740] [client 45.131.194.210:32583] [client 45.131.194.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.210, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUc11qpSa967F4pOO5zf8QAAAIc"]
[Sun Dec 21 07:55:36.239361 2025] [:error] [pid 20674:tid 20694] [client 223.244.35.77:60063] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUc3eNhSbhHOCK6TAw8xSQAAABA"]
[Sun Dec 21 07:59:13.628658 2025] [:error] [pid 20674:tid 20684] [client 45.131.194.219:59325] [client 45.131.194.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.219, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUc4UdhSbhHOCK6TAw8x8AAAAAY"]
[Sun Dec 21 08:01:35.288100 2025] [:error] [pid 20675:tid 20727] [client 195.178.110.161:40754] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aUc437yUvZnd3bHSR3YpmQAAAFU"]
[Sun Dec 21 08:09:55.666846 2025] [:error] [pid 16016:tid 16034] [client 45.131.194.233:25417] [client 45.131.194.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.233, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUc608HQ_KQh3iINaCO6iwAAAVA"]
[Sun Dec 21 08:20:40.244280 2025] [:error] [pid 16016:tid 16028] [client 45.131.194.207:38215] [client 45.131.194.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.207, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUc9WMHQ_KQh3iINaCO-BQAAAUo"]
[Sun Dec 21 08:31:17.141640 2025] [:error] [pid 20674:tid 20698] [client 45.131.194.210:39543] [client 45.131.194.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.210, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUc_1dhSbhHOCK6TAw818wAAABQ"]
[Sun Dec 21 08:41:58.399462 2025] [:error] [pid 16016:tid 16033] [client 45.131.194.209:56949] [client 45.131.194.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.209, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdCVsHQ_KQh3iINaCPEMAAAAU8"]
[Sun Dec 21 08:52:34.165566 2025] [:error] [pid 20674:tid 20680] [client 45.131.194.195:31377] [client 45.131.194.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.195, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdE0thSbhHOCK6TAw85NwAAAAI"]
[Sun Dec 21 09:03:15.488776 2025] [:error] [pid 20760:tid 20766] [client 45.131.194.193:55569] [client 45.131.194.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.193, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdHU-XEVvRTAtWo3gncdwAAAMM"]
[Sun Dec 21 09:13:54.632472 2025] [:error] [pid 20760:tid 20768] [client 45.131.194.221:20173] [client 45.131.194.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.221, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdJ0uXEVvRTAtWo3gne-wAAAMU"]
[Sun Dec 21 09:24:33.128786 2025] [:error] [pid 20675:tid 20718] [client 45.131.194.231:35973] [client 45.131.194.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.231, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdMUbyUvZnd3bHSR3Y2hAAAAEw"]
[Sun Dec 21 09:35:11.935062 2025] [:error] [pid 16016:tid 16021] [client 45.131.194.236:58677] [client 45.131.194.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.236, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdOz8HQ_KQh3iINaCPXgwAAAUM"]
[Sun Dec 21 09:45:59.185438 2025] [:error] [pid 20675:tid 20714] [client 45.131.194.227:29561] [client 45.131.194.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.227, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdRV7yUvZnd3bHSR3Y7HAAAAEg"]
[Sun Dec 21 09:56:46.483723 2025] [:error] [pid 16016:tid 16040] [client 45.131.194.201:54205] [client 45.131.194.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.201, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdT3sHQ_KQh3iINaCPdTQAAAVY"]
[Sun Dec 21 10:07:36.075056 2025] [:error] [pid 20674:tid 20691] [client 45.131.194.111:60555] [client 45.131.194.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.111, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdWaNhSbhHOCK6TAw9F5wAAAA0"]
[Sun Dec 21 10:18:28.897272 2025] [:error] [pid 20675:tid 20717] [client 45.131.194.224:55691] [client 45.131.194.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.224, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdY9LyUvZnd3bHSR3Y_ZgAAAEs"]
[Sun Dec 21 10:29:17.940927 2025] [:error] [pid 16016:tid 16030] [client 45.131.194.212:62889] [client 45.131.194.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.212, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdbfcHQ_KQh3iINaCPlrQAAAUw"]
[Sun Dec 21 10:40:07.640912 2025] [:error] [pid 20675:tid 20721] [client 45.131.194.202:32607] [client 45.131.194.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.202, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdeB7yUvZnd3bHSR3ZD1AAAAE8"]
[Sun Dec 21 10:50:55.440825 2025] [:error] [pid 20675:tid 20711] [client 45.131.194.193:49091] [client 45.131.194.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.193, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdgj7yUvZnd3bHSR3ZGVAAAAEU"]
[Sun Dec 21 11:01:46.506606 2025] [:error] [pid 20760:tid 20763] [client 45.131.194.221:43415] [client 45.131.194.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.221, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdjGuXEVvRTAtWo3gn0CQAAAMA"]
[Sun Dec 21 11:12:33.510087 2025] [:error] [pid 16016:tid 16019] [client 45.131.194.232:26053] [client 45.131.194.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.232, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdlocHQ_KQh3iINaCPzsgAAAUE"]
[Sun Dec 21 11:23:35.939391 2025] [:error] [pid 12191:tid 12212] [client 45.131.194.201:25195] [client 45.131.194.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.201, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdoNwM0m463UZmqdiBGAwAAARM"]
[Sun Dec 21 11:34:31.457673 2025] [:error] [pid 20675:tid 20728] [client 45.131.194.233:54023] [client 45.131.194.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.233, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdqx7yUvZnd3bHSR3ZPjwAAAFY"]
[Sun Dec 21 11:45:29.295979 2025] [:error] [pid 12191:tid 12196] [client 45.131.194.238:30897] [client 45.131.194.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.238, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdtWQM0m463UZmqdiBNzAAAAQM"]
[Sun Dec 21 11:56:24.365232 2025] [:error] [pid 12191:tid 12199] [client 45.131.194.110:49775] [client 45.131.194.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.110, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdv6AM0m463UZmqdiBQ7AAAAQY"]
[Sun Dec 21 12:07:16.744818 2025] [:error] [pid 20760:tid 20763] [client 45.131.194.204:25683] [client 45.131.194.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.204, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUdydOXEVvRTAtWo3gkEIgAAAMA"]
[Sun Dec 21 12:18:21.628195 2025] [:error] [pid 16016:tid 16025] [client 45.131.194.217:59407] [client 45.131.194.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.217, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUd1DcHQ_KQh3iINaCMOIwAAAUc"]
[Sun Dec 21 12:29:30.612673 2025] [:error] [pid 20675:tid 20719] [client 45.131.194.227:59523] [client 45.131.194.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.227, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUd3qryUvZnd3bHSR3Za0AAAAE0"]
[Sun Dec 21 12:40:26.180088 2025] [:error] [pid 20760:tid 20783] [client 45.131.194.199:20981] [client 45.131.194.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.199, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUd6OuXEVvRTAtWo3gkMBgAAANQ"]
[Sun Dec 21 12:51:38.190419 2025] [:error] [pid 12191:tid 12211] [client 45.131.194.215:29565] [client 45.131.194.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.215, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUd82gM0m463UZmqdiBjrgAAARI"]
[Sun Dec 21 13:02:39.811129 2025] [:error] [pid 12191:tid 12212] [client 45.131.194.204:43505] [client 45.131.194.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.204, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUd_bwM0m463UZmqdiBmNwAAARM"]
[Sun Dec 21 13:13:36.546229 2025] [:error] [pid 12191:tid 12209] [client 45.131.194.199:37495] [client 45.131.194.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.199, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeCAAM0m463UZmqdiBpGAAAARA"]
[Sun Dec 21 13:24:45.675300 2025] [:error] [pid 20760:tid 20787] [client 45.131.194.215:53521] [client 45.131.194.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.215, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeEneXEVvRTAtWo3gkX1gAAANg"]
[Sun Dec 21 13:35:44.497526 2025] [:error] [pid 20760:tid 20778] [client 45.131.194.226:57225] [client 45.131.194.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.226, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeHMOXEVvRTAtWo3gka9AAAAM8"]
[Sun Dec 21 13:46:20.489250 2025] [:error] [pid 20675:tid 20718] [client 45.131.194.221:25969] [client 45.131.194.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.221, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeJrLyUvZnd3bHSR3ZqWQAAAEw"]
[Sun Dec 21 13:56:58.435719 2025] [:error] [pid 20760:tid 20783] [client 45.131.194.236:27453] [client 45.131.194.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.236, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeMKuXEVvRTAtWo3gkeqQAAANQ"]
[Sun Dec 21 14:07:40.810221 2025] [:error] [pid 20674:tid 20686] [client 45.131.194.214:33953] [client 45.131.194.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.214, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeOrNhSbhHOCK6TAw96FQAAAAg"]
[Sun Dec 21 14:18:19.885230 2025] [:error] [pid 60191:tid 60206] [client 45.131.194.197:20821] [client 45.131.194.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.197, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeRK6klhK29C3vVvLVDSwAAAY0"]
[Sun Dec 21 14:29:06.552946 2025] [:error] [pid 20676:tid 20733] [client 45.131.194.210:23069] [client 45.131.194.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.210, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeTsqpSa967F4pOO5w3WwAAAIA"]
[Sun Dec 21 14:39:54.454759 2025] [:error] [pid 20760:tid 20769] [client 45.131.194.231:20187] [client 45.131.194.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.231, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeWOuXEVvRTAtWo3gkpQwAAAMY"]
[Sun Dec 21 14:50:35.297237 2025] [:error] [pid 20674:tid 20685] [client 45.131.194.207:57193] [client 45.131.194.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.207, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeYu9hSbhHOCK6TAw-IUgAAAAc"]
[Sun Dec 21 15:01:15.772962 2025] [:error] [pid 16016:tid 16032] [client 45.131.194.199:49275] [client 45.131.194.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.199, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUebO8HQ_KQh3iINaCM9bQAAAU4"]
[Sun Dec 21 15:11:57.679134 2025] [:error] [pid 20675:tid 20709] [client 45.131.194.226:31721] [client 45.131.194.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.226, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUedvbyUvZnd3bHSR3Z_nwAAAEM"]
[Sun Dec 21 15:22:40.562628 2025] [:error] [pid 20674:tid 20702] [client 45.131.194.193:54365] [client 45.131.194.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.193, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUegQNhSbhHOCK6TAw-V_gAAABg"]
[Sun Dec 21 15:33:24.311349 2025] [:error] [pid 16016:tid 16042] [client 45.131.194.221:49747] [client 45.131.194.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.221, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeixMHQ_KQh3iINaCNGlQAAAVg"]
[Sun Dec 21 15:44:08.898119 2025] [:error] [pid 20760:tid 20778] [client 45.131.194.203:31993] [client 45.131.194.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.203, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUelSOXEVvRTAtWo3gk6kAAAAM8"]
[Sun Dec 21 15:54:48.737302 2025] [:error] [pid 20676:tid 20756] [client 45.131.194.234:30127] [client 45.131.194.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.234, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUenyKpSa967F4pOO5xXZAAAAJc"]
[Sun Dec 21 16:05:33.832533 2025] [:error] [pid 20675:tid 20730] [client 45.131.194.227:49163] [client 45.131.194.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.227, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeqTbyUvZnd3bHSR3aOHAAAAFg"]
[Sun Dec 21 16:15:47.058793 2025] [:error] [pid 60191:tid 60206] [client 45.131.194.215:21863] [client 45.131.194.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.215, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUess6klhK29C3vVvLVnFAAAAY0"]
[Sun Dec 21 16:24:04.448865 2025] [:error] [pid 60191:tid 60201] [client 45.131.194.229:38173] [client 45.131.194.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.229, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeupKklhK29C3vVvLVqdQAAAYg"]
[Sun Dec 21 16:31:56.747924 2025] [:error] [pid 20674:tid 20692] [client 45.131.194.204:25007] [client 45.131.194.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.204, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUewfNhSbhHOCK6TAw-0OAAAAA4"]
[Sun Dec 21 16:39:24.029855 2025] [:error] [pid 12191:tid 12201] [client 45.131.194.222:24811] [client 45.131.194.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.222, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUeyPAM0m463UZmqdiCnKAAAAQg"]
[Sun Dec 21 16:48:02.150513 2025] [:error] [pid 20676:tid 20743] [client 45.131.194.200:28563] [client 45.131.194.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.200, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUe0QqpSa967F4pOO5xmxAAAAIo"]
[Sun Dec 21 16:58:03.446624 2025] [:error] [pid 12191:tid 12202] [client 45.131.194.226:25651] [client 45.131.194.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.226, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUe2mwM0m463UZmqdiCwzwAAAQk"]
[Sun Dec 21 17:09:15.255908 2025] [:error] [pid 20675:tid 20716] [client 45.131.194.230:34539] [client 45.131.194.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.230, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUe5O7yUvZnd3bHSR3aggwAAAEo"]
[Sun Dec 21 17:20:30.743819 2025] [:error] [pid 60191:tid 60197] [client 45.131.194.221:41377] [client 45.131.194.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.221, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUe73qklhK29C3vVvLV8FwAAAYQ"]
[Sun Dec 21 17:31:43.100179 2025] [:error] [pid 60191:tid 60202] [client 45.131.194.232:31705] [client 45.131.194.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.232, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUe-f6klhK29C3vVvLWA5gAAAYk"]
[Sun Dec 21 17:42:56.318411 2025] [:error] [pid 20760:tid 20782] [client 45.131.194.232:41415] [client 45.131.194.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.232, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfBIOXEVvRTAtWo3glhFwAAANM"]
[Sun Dec 21 17:54:06.997302 2025] [:error] [pid 59158:tid 59164] [client 45.131.194.111:34617] [client 45.131.194.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.111, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfDvo7NvyNF8ab5VgXR7AAAAMQ"]
[Sun Dec 21 18:05:12.552897 2025] [:error] [pid 59067:tid 59098] [client 45.131.194.218:38127] [client 45.131.194.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.218, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfGWMtpsOP1NfIK_qIDxQAAABg"]
[Sun Dec 21 18:16:20.725992 2025] [:error] [pid 59070:tid 59136] [client 45.131.194.228:26521] [client 45.131.194.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.228, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfI9H3dhXne9KX1kgLP-gAAAIg"]
[Sun Dec 21 18:27:27.047797 2025] [:error] [pid 59067:tid 59088] [client 45.131.194.227:49879] [client 45.131.194.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.227, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfLj8tpsOP1NfIK_qIQjAAAAA4"]
[Sun Dec 21 18:38:36.732212 2025] [:error] [pid 59067:tid 59087] [client 45.131.194.197:39717] [client 45.131.194.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.197, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfOLMtpsOP1NfIK_qIWjgAAAA0"]
[Sun Dec 21 18:49:47.086449 2025] [:error] [pid 59068:tid 59111] [client 45.131.194.215:39605] [client 45.131.194.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.215, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfQyxmLyLqWUlrjwydF8AAAAEo"]
[Sun Dec 21 19:01:00.427679 2025] [:error] [pid 59070:tid 59134] [client 45.131.194.224:60459] [client 45.131.194.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.224, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfTbH3dhXne9KX1kgLytQAAAIY"]
[Sun Dec 21 19:06:48.037013 2025] [:error] [pid 59070:tid 59152] [client 38.246.32.84:65424] [client 38.246.32.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.84, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfUyH3dhXne9KX1kgL22gAAAJg"]
[Sun Dec 21 19:12:15.566516 2025] [:error] [pid 59067:tid 59077] [client 45.131.194.208:61717] [client 45.131.194.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.208, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfWD8tpsOP1NfIK_qIl-gAAAAM"]
[Sun Dec 21 19:23:34.198069 2025] [:error] [pid 59158:tid 59179] [client 45.131.194.194:40501] [client 45.131.194.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.194, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfYto7NvyNF8ab5VgUGZQAAANM"]
[Sun Dec 21 19:34:44.475566 2025] [:error] [pid 59070:tid 59146] [client 45.131.194.228:46017] [client 45.131.194.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.228, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfbVH3dhXne9KX1kgIMgwAAAJI"]
[Sun Dec 21 19:46:04.675837 2025] [:error] [pid 59158:tid 59164] [client 45.131.194.233:23197] [client 45.131.194.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.233, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfd_I7NvyNF8ab5VgUSnwAAAMQ"]
[Sun Dec 21 19:57:16.968191 2025] [:error] [pid 59070:tid 59148] [client 45.131.194.220:32909] [client 45.131.194.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.220, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfgnH3dhXne9KX1kgIfEAAAAJQ"]
[Sun Dec 21 20:08:30.293484 2025] [:error] [pid 59158:tid 59181] [client 45.131.194.208:59911] [client 45.131.194.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.208, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfjPo7NvyNF8ab5VgUiiQAAANU"]
[Sun Dec 21 20:19:48.113747 2025] [:error] [pid 30183:tid 30201] [client 45.131.194.235:34479] [client 45.131.194.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.235, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfl5OCmP2zCzk_WZcXnnAAAARA"]
[Sun Dec 21 20:31:02.275990 2025] [:error] [pid 59158:tid 59166] [client 45.131.194.205:29515] [client 45.131.194.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.205, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfoho7NvyNF8ab5VgUs_wAAAMY"]
[Sun Dec 21 20:31:49.584774 2025] [:error] [pid 59158:tid 59173] [client 223.244.35.77:37496] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUfotY7NvyNF8ab5VgUtSgAAAM0"]
[Sun Dec 21 20:42:17.388242 2025] [:error] [pid 30183:tid 30185] [client 45.131.194.233:28753] [client 45.131.194.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.233, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfrKeCmP2zCzk_WZcX1lwAAAQA"]
[Sun Dec 21 20:53:28.123058 2025] [:error] [pid 59158:tid 59170] [client 45.131.194.218:57621] [client 45.131.194.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.218, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUftyI7NvyNF8ab5VgU3VgAAAMo"]
[Sun Dec 21 21:04:39.486987 2025] [:error] [pid 59070:tid 59142] [client 45.131.194.111:44819] [client 45.131.194.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.111, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfwZ33dhXne9KX1kgJGYAAAAI4"]
[Sun Dec 21 21:15:55.642604 2025] [:error] [pid 59070:tid 59131] [client 45.131.194.239:53843] [client 45.131.194.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.239, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUfzC33dhXne9KX1kgJLiAAAAIM"]
[Sun Dec 21 21:27:08.180612 2025] [:error] [pid 30183:tid 30195] [client 45.131.194.214:21455] [client 45.131.194.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.214, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUf1rOCmP2zCzk_WZcUOXwAAAQo"]
[Sun Dec 21 21:38:15.249338 2025] [:error] [pid 59068:tid 59119] [client 45.131.194.210:46875] [client 45.131.194.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.210, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUf4RxmLyLqWUlrjwyealQAAAFI"]
[Sun Dec 21 21:49:27.498718 2025] [:error] [pid 42755:tid 42765] [client 45.131.194.229:38149] [client 45.131.194.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.229, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUf65-W0XvxgXMTJJbvergAAAUg"]
[Sun Dec 21 22:00:34.831978 2025] [:error] [pid 42755:tid 42759] [client 45.131.194.195:20395] [client 45.131.194.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.195, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUf9guW0XvxgXMTJJbvnBwAAAUI"]
[Sun Dec 21 22:10:52.403448 2025] [:error] [pid 59067:tid 59091] [client 104.208.78.224:8176] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.3.0-en.php"] [unique_id "aUf_7MtpsOP1NfIK_qJ84QAAABE"]
[Sun Dec 21 22:10:54.381205 2025] [:error] [pid 42755:tid 42758] [client 104.208.78.224:8177] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.3.0-en.php"] [unique_id "aUf_7uW0XvxgXMTJJbvsdAAAAUE"]
[Sun Dec 21 22:10:57.090376 2025] [:error] [pid 42755:tid 42776] [client 104.208.78.224:8066] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.3.0-en.php"] [unique_id "aUf_8eW0XvxgXMTJJbvseQAAAVM"]
[Sun Dec 21 22:10:58.659301 2025] [:error] [pid 59067:tid 59097] [client 104.208.78.224:8168] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.3.0-en.php"] [unique_id "aUf_8stpsOP1NfIK_qJ85AAAABc"]
[Sun Dec 21 22:10:59.248274 2025] [:error] [pid 59158:tid 59162] [client 104.208.78.224:8137] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.2.2.php"] [unique_id "aUf_847NvyNF8ab5VgVa6AAAAMI"]
[Sun Dec 21 22:11:06.030024 2025] [:error] [pid 42755:tid 42761] [client 104.208.78.224:8169] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.2.2.php"] [unique_id "aUf_-uW0XvxgXMTJJbvskQAAAUQ"]
[Sun Dec 21 22:11:11.019237 2025] [:error] [pid 59067:tid 59085] [client 104.208.78.224:8178] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.2.2.php"] [unique_id "aUf__8tpsOP1NfIK_qJ88wAAAAs"]
[Sun Dec 21 22:11:13.746758 2025] [:error] [pid 30183:tid 30209] [client 104.208.78.224:8180] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.2.2.php"] [unique_id "aUgAAeCmP2zCzk_WZcUmTAAAARg"]
[Sun Dec 21 22:11:15.746504 2025] [:error] [pid 42755:tid 42772] [client 104.208.78.224:8130] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.2.1.php"] [unique_id "aUgAA-W0XvxgXMTJJbvsmwAAAU8"]
[Sun Dec 21 22:11:23.312602 2025] [:error] [pid 59070:tid 59149] [client 104.208.78.224:8148] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.2.1.php"] [unique_id "aUgAC33dhXne9KX1kgJmjwAAAJU"]
[Sun Dec 21 22:11:26.370804 2025] [:error] [pid 59070:tid 59143] [client 104.208.78.224:8076] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.2.1.php"] [unique_id "aUgADn3dhXne9KX1kgJmlQAAAI8"]
[Sun Dec 21 22:11:32.920619 2025] [:error] [pid 59070:tid 59138] [client 104.208.78.224:8064] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-3.2.0.php"] [unique_id "aUgAFH3dhXne9KX1kgJmnAAAAIo"]
[Sun Dec 21 22:11:43.641622 2025] [:error] [pid 59158:tid 59163] [client 45.131.194.209:23417] [client 45.131.194.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.209, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUgAH47NvyNF8ab5VgVbEwAAAMM"]
[Sun Dec 21 22:11:47.559990 2025] [:error] [pid 59070:tid 59131] [client 104.208.78.224:8100] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.3.1-en.php"] [unique_id "aUgAI33dhXne9KX1kgJmuAAAAIM"]
[Sun Dec 21 22:11:48.468754 2025] [:error] [pid 59158:tid 59170] [client 104.208.78.224:8182] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.3.1-en.php"] [unique_id "aUgAJI7NvyNF8ab5VgVbGwAAAMo"]
[Sun Dec 21 22:12:03.516067 2025] [:error] [pid 59158:tid 59178] [client 104.208.78.224:8154] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/book.php"] [unique_id "aUgAM47NvyNF8ab5VgVbMQAAANI"]
[Sun Dec 21 22:12:05.987832 2025] [:error] [pid 30183:tid 30205] [client 104.208.78.224:8139] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/book.php"] [unique_id "aUgANeCmP2zCzk_WZcUmhgAAARQ"]
[Sun Dec 21 22:12:11.980486 2025] [:error] [pid 59068:tid 59124] [client 104.208.78.224:8070] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/book.php"] [unique_id "aUgAOxmLyLqWUlrjwyepXQAAAFc"]
[Sun Dec 21 22:12:16.298903 2025] [:error] [pid 42755:tid 42766] [client 104.208.78.224:8171] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/book.php"] [unique_id "aUgAQOW0XvxgXMTJJbvs-QAAAUk"]
[Sun Dec 21 22:12:18.608896 2025] [:error] [pid 59070:tid 59140] [client 104.208.78.224:8157] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.7.0-en.php"] [unique_id "aUgAQn3dhXne9KX1kgJm8wAAAIw"]
[Sun Dec 21 22:12:22.269169 2025] [:error] [pid 42755:tid 42760] [client 104.208.78.224:8068] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.7.0-en.php"] [unique_id "aUgARuW0XvxgXMTJJbvtCgAAAUM"]
[Sun Dec 21 22:12:33.287905 2025] [:error] [pid 59067:tid 59083] [client 104.208.78.224:8151] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.7.1-en.php"] [unique_id "aUgAUctpsOP1NfIK_qJ9XQAAAAk"]
[Sun Dec 21 22:12:34.076603 2025] [:error] [pid 30183:tid 30185] [client 104.208.78.224:8074] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.7.1-en.php"] [unique_id "aUgAUuCmP2zCzk_WZcUmsQAAAQA"]
[Sun Dec 21 22:12:40.345303 2025] [:error] [pid 30183:tid 30202] [client 104.208.78.224:8149] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.7.1-en.php"] [unique_id "aUgAWOCmP2zCzk_WZcUmvAAAARE"]
[Sun Dec 21 22:12:42.279769 2025] [:error] [pid 42755:tid 42780] [client 104.208.78.224:8189] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.7.1-en.php"] [unique_id "aUgAWuW0XvxgXMTJJbvtPQAAAVc"]
[Sun Dec 21 22:12:54.529193 2025] [:error] [pid 59068:tid 59105] [client 104.208.78.224:8073] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.7.2-en.php"] [unique_id "aUgAZhmLyLqWUlrjwyepmAAAAEQ"]
[Sun Dec 21 22:13:39.835441 2025] [:error] [pid 59068:tid 59119] [client 104.208.78.224:8170] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-1ogin_bak.php"] [unique_id "aUgAkxmLyLqWUlrjwyepyQAAAFI"]
[Sun Dec 21 22:13:42.647211 2025] [:error] [pid 59070:tid 59135] [client 104.208.78.224:8190] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-1ogin_bak.php"] [unique_id "aUgAln3dhXne9KX1kgJnSAAAAIc"]
[Sun Dec 21 22:13:48.702463 2025] [:error] [pid 59158:tid 59166] [client 104.208.78.224:8001] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-1ogin_bak.php"] [unique_id "aUgAnI7NvyNF8ab5VgVbyAAAAMY"]
[Sun Dec 21 22:13:56.877703 2025] [:error] [pid 42755:tid 42775] [client 104.208.78.224:8108] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.2.3-mysql.php"] [unique_id "aUgApOW0XvxgXMTJJbvuGQAAAVI"]
[Sun Dec 21 22:13:58.396339 2025] [:error] [pid 59158:tid 59163] [client 104.208.78.224:8067] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.2.3-mysql.php"] [unique_id "aUgApo7NvyNF8ab5VgVbzgAAAMM"]
[Sun Dec 21 22:13:59.559213 2025] [:error] [pid 59067:tid 59087] [client 104.208.78.224:8024] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.2.3-mysql.php"] [unique_id "aUgAp8tpsOP1NfIK_qJ9wQAAAA0"]
[Sun Dec 21 22:14:18.607692 2025] [:error] [pid 59158:tid 59182] [client 104.208.78.224:8069] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.2.4-mysql.php"] [unique_id "aUgAuo7NvyNF8ab5VgVb2wAAANY"]
[Sun Dec 21 22:14:22.874123 2025] [:error] [pid 30183:tid 30202] [client 104.208.78.224:8002] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer-4.2.4-mysql.php"] [unique_id "aUgAvuCmP2zCzk_WZcUnMwAAARE"]
[Sun Dec 21 22:15:00.651656 2025] [:error] [pid 59070:tid 59138] [client 104.208.78.224:8161] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upel.php"] [unique_id "aUgA5H3dhXne9KX1kgJnjgAAAIo"]
[Sun Dec 21 22:15:01.920356 2025] [:error] [pid 59070:tid 59130] [client 104.208.78.224:8084] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upel.php"] [unique_id "aUgA5X3dhXne9KX1kgJnkQAAAII"]
[Sun Dec 21 22:15:05.575995 2025] [:error] [pid 59070:tid 59143] [client 104.208.78.224:8079] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upel.php"] [unique_id "aUgA6X3dhXne9KX1kgJnmQAAAI8"]
[Sun Dec 21 22:15:06.733061 2025] [:error] [pid 59068:tid 59108] [client 104.208.78.224:8188] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upel.php"] [unique_id "aUgA6hmLyLqWUlrjwyeqGAAAAEc"]
[Sun Dec 21 22:15:08.665801 2025] [:error] [pid 30183:tid 30191] [client 104.208.78.224:8094] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/098.php"] [unique_id "aUgA7OCmP2zCzk_WZcUnfAAAAQY"]
[Sun Dec 21 22:15:10.333653 2025] [:error] [pid 59067:tid 59081] [client 104.208.78.224:8185] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/098.php"] [unique_id "aUgA7stpsOP1NfIK_qJ-EwAAAAc"]
[Sun Dec 21 22:15:13.306037 2025] [:error] [pid 59067:tid 59088] [client 104.208.78.224:8175] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/098.php"] [unique_id "aUgA8ctpsOP1NfIK_qJ-GQAAAA4"]
[Sun Dec 21 22:15:15.631513 2025] [:error] [pid 59070:tid 59145] [client 104.208.78.224:8167] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/098.php"] [unique_id "aUgA833dhXne9KX1kgJnoAAAAJE"]
[Sun Dec 21 22:15:17.093352 2025] [:error] [pid 59070:tid 59150] [client 104.208.78.224:8156] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/V5.php"] [unique_id "aUgA9X3dhXne9KX1kgJnogAAAJY"]
[Sun Dec 21 22:15:19.104224 2025] [:error] [pid 30183:tid 30202] [client 104.208.78.224:8138] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/V5.php"] [unique_id "aUgA9-CmP2zCzk_WZcUniwAAARE"]
[Sun Dec 21 22:15:22.188386 2025] [:error] [pid 59068:tid 59125] [client 104.208.78.224:8009] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/V5.php"] [unique_id "aUgA-hmLyLqWUlrjwyeqLQAAAFg"]
[Sun Dec 21 22:15:24.356796 2025] [:error] [pid 42755:tid 42764] [client 104.208.78.224:8065] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/V5.php"] [unique_id "aUgA_OW0XvxgXMTJJbvuwAAAAUc"]
[Sun Dec 21 22:15:27.394119 2025] [:error] [pid 42755:tid 42762] [client 104.208.78.224:8103] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new_license.php"] [unique_id "aUgA_-W0XvxgXMTJJbvuxgAAAUU"]
[Sun Dec 21 22:15:31.474654 2025] [:error] [pid 59158:tid 59170] [client 104.208.78.224:8088] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new_license.php"] [unique_id "aUgBA47NvyNF8ab5VgVcTQAAAMo"]
[Sun Dec 21 22:15:32.230473 2025] [:error] [pid 59068:tid 59103] [client 104.208.78.224:8174] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new_license.php"] [unique_id "aUgBBBmLyLqWUlrjwyeqMwAAAEI"]
[Sun Dec 21 22:15:42.244500 2025] [:error] [pid 42755:tid 42776] [client 104.208.78.224:8180] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/XxX.php"] [unique_id "aUgBDuW0XvxgXMTJJbvu4QAAAVM"]
[Sun Dec 21 22:15:53.939245 2025] [:error] [pid 59067:tid 59090] [client 104.208.78.224:8164] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/XxX.php"] [unique_id "aUgBGctpsOP1NfIK_qJ-RgAAABA"]
[Sun Dec 21 22:15:55.216500 2025] [:error] [pid 59068:tid 59109] [client 104.208.78.224:8003] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/XxX.php"] [unique_id "aUgBGxmLyLqWUlrjwyeqVwAAAEg"]
[Sun Dec 21 22:22:56.112443 2025] [:error] [pid 59070:tid 59132] [client 45.131.194.215:47253] [client 45.131.194.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.194.215, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUgCwH3dhXne9KX1kgJqewAAAIQ"]
[Sun Dec 21 22:32:17.430174 2025] [:error] [pid 65237:tid 65249] [client 45.80.158.52:62982] [client 45.80.158.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "aUgE8VVJYjxIpnUJfgJf4QAAAYo"]
[Sun Dec 21 22:32:18.674726 2025] [:error] [pid 42755:tid 42761] [client 45.80.158.52:63127] [client 45.80.158.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dex.php"] [unique_id "aUgE8uW0XvxgXMTJJbv25wAAAUQ"]
[Sun Dec 21 22:32:19.327258 2025] [:error] [pid 30183:tid 30197] [client 45.80.158.52:63224] [client 45.80.158.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aUgE8-CmP2zCzk_WZcUuvAAAAQw"]
[Sun Dec 21 22:32:19.950998 2025] [:error] [pid 59070:tid 59133] [client 45.80.158.52:63326] [client 45.80.158.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aUgE833dhXne9KX1kgJuoAAAAIU"]
[Sun Dec 21 22:32:20.570399 2025] [:error] [pid 65237:tid 65242] [client 45.80.158.52:63415] [client 45.80.158.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/133.php"] [unique_id "aUgE9FVJYjxIpnUJfgJf5QAAAYM"]
[Sun Dec 21 22:32:21.177036 2025] [:error] [pid 59070:tid 59140] [client 45.80.158.52:63519] [client 45.80.158.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aUgE9X3dhXne9KX1kgJuoQAAAIw"]
[Sun Dec 21 22:32:21.789723 2025] [:error] [pid 59068:tid 59101] [client 45.80.158.52:63619] [client 45.80.158.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUgE9RmLyLqWUlrjwyevXQAAAEA"]
[Sun Dec 21 22:32:23.666551 2025] [:error] [pid 59158:tid 59184] [client 45.80.158.52:63720] [client 45.80.158.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aUgE947NvyNF8ab5VgVkKgAAANg"]
[Sun Dec 21 22:32:25.018484 2025] [:error] [pid 59068:tid 59120] [client 45.80.158.52:63832] [client 45.80.158.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUgE-RmLyLqWUlrjwyevYAAAAFM"]
[Sun Dec 21 23:02:48.106185 2025] [:error] [pid 59158:tid 59162] [client 84.54.33.138:58870] [client 84.54.33.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aUgMGI7NvyNF8ab5VgVzsQAAAMI"]
[Mon Dec 22 00:21:28.635701 2025] [:error] [pid 45399:tid 45421] [client 162.62.132.25:52214] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUgeiDHbaarUHjCTA4t2_gAAARQ"]
[Mon Dec 22 03:20:02.406452 2025] [:error] [pid 46403:tid 46412] [client 87.225.104.160:38970] [client 87.225.104.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.225.104.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUhIYluzQIlydmAwinp2-gAAAYc"]
[Mon Dec 22 03:20:07.960496 2025] [:error] [pid 46403:tid 46414] [client 87.225.104.160:38970] [client 87.225.104.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.225.104.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUhIZ1uzQIlydmAwinp3BgAAAYk"]
[Mon Dec 22 04:39:37.366358 2025] [:error] [pid 58172:tid 58193] [client 216.247.87.134:1919] [client 216.247.87.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.247.87.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUhbCeSVKDT5jWOcnSXmrgAAANM"]
[Mon Dec 22 04:39:37.643249 2025] [:error] [pid 58172:tid 58197] [client 182.181.146.52:60001] [client 182.181.146.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.181.146.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUhbCeSVKDT5jWOcnSXmsQAAANc"]
[Mon Dec 22 07:33:19.628105 2025] [:error] [pid 33472:tid 33502] [client 216.247.87.134:28401] [client 216.247.87.134] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUiDv55p2WQpPIK8HAkvggAAAYE"]
[Mon Dec 22 07:35:23.420107 2025] [:error] [pid 33565:tid 33599] [client 216.247.87.134:1247] [client 216.247.87.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.247.87.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUiEO9OWX69q8T0m_yKF4QAAAkU"]
[Mon Dec 22 07:37:29.457182 2025] [:error] [pid 33564:tid 33586] [client 52.13.171.147:56896] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUiEuQSHeG6oLmMnKY7GDgAAAhM"]
[Mon Dec 22 07:37:29.460175 2025] [:error] [pid 33472:tid 33518] [client 52.13.171.147:56895] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUiEuZ5p2WQpPIK8HAkwSwAAAZE"]
[Mon Dec 22 07:37:29.851228 2025] [:error] [pid 58172:tid 58185] [client 52.13.171.147:60756] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUiEueSVKDT5jWOcnSUIswAAAMs"]
[Mon Dec 22 07:37:29.898753 2025] [:error] [pid 33472:tid 33524] [client 52.13.171.147:61682] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUiEuZ5p2WQpPIK8HAkwXgAAAZc"]
[Mon Dec 22 07:37:30.289011 2025] [:error] [pid 33565:tid 33611] [client 52.13.171.147:62140] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEutOWX69q8T0m_yKGMQAAAlE"]
[Mon Dec 22 09:14:58.590238 2025] [:error] [pid 33471:tid 33476] [client 120.71.59.24:53756] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUibkr5BeNE7regJ7iy1hQAAAUI"]
[Mon Dec 22 10:20:18.492370 2025] [:error] [pid 58172:tid 58186] [client 2.58.56.27:52436] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq4uSVKDT5jWOcnSUlrAAAAMw"]
[Mon Dec 22 10:20:18.495055 2025] [:error] [pid 58172:tid 58194] [client 2.58.56.27:52433] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4uSVKDT5jWOcnSUlrgAAANQ"], referer: www.google.com
[Mon Dec 22 10:20:18.504786 2025] [:error] [pid 58172:tid 58189] [client 2.58.56.27:52435] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "aUiq4uSVKDT5jWOcnSUlrwAAAM8"], referer: www.google.com
[Mon Dec 22 10:20:18.510258 2025] [:error] [pid 33643:tid 33659] [client 2.58.56.27:52440] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUiq4koNwyN4xVhAvNOnXAAAAo0"]
[Mon Dec 22 10:20:18.575329 2025] [:error] [pid 58078:tid 58090] [client 2.58.56.27:52437] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4pWKg9Bf8njHlB6mMAAAAAc"], referer: www.google.com
[Mon Dec 22 10:20:19.952020 2025] [:error] [pid 58172:tid 58187] [client 2.58.56.27:53654] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq4-SVKDT5jWOcnSUlzgAAAM0"]
[Mon Dec 22 10:20:19.955393 2025] [:error] [pid 33564:tid 33584] [client 2.58.56.27:65125] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4wSHeG6oLmMnKY4G9AAAAhE"], referer: www.google.com
[Mon Dec 22 10:20:19.955938 2025] [:error] [pid 33643:tid 33660] [client 2.58.56.27:51788] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "aUiq40oNwyN4xVhAvNOngQAAAo4"], referer: www.google.com
[Mon Dec 22 10:20:19.960956 2025] [:error] [pid 33440:tid 33466] [client 2.58.56.27:52455] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUiq45OsUWKqgxu6QTSWBwAAARg"]
[Mon Dec 22 10:20:20.086648 2025] [:error] [pid 33643:tid 33669] [client 2.58.56.27:55525] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5EoNwyN4xVhAvNOnhgAAApc"], referer: www.google.com
[Mon Dec 22 10:20:21.047352 2025] [:error] [pid 33440:tid 33450] [client 2.58.56.27:56415] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5ZOsUWKqgxu6QTSWLAAAAQg"]
[Mon Dec 22 10:20:21.053946 2025] [:error] [pid 58078:tid 58086] [client 2.58.56.27:57946] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUiq5ZWKg9Bf8njHlB6mewAAAAM"]
[Mon Dec 22 10:20:21.059957 2025] [:error] [pid 56044:tid 56068] [client 2.58.56.27:57778] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "aUiq5e60uUaieriJqP3t6QAAAJQ"], referer: www.google.com
[Mon Dec 22 10:20:21.063063 2025] [:error] [pid 58079:tid 58133] [client 2.58.56.27:57275] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5XxLB7WYaNS5A7j4ZgAAAFQ"], referer: www.google.com
[Mon Dec 22 10:20:21.347806 2025] [:error] [pid 56080:tid 56147] [client 2.58.56.27:55078] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5ZIHT3YJq9hjDc5elgAAAxc"], referer: www.google.com
[Mon Dec 22 10:20:21.710396 2025] [:error] [pid 33472:tid 33521] [client 2.58.56.27:50558] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5Z5p2WQpPIK8HAlSuAAAAZQ"], referer: www.google.com
[Mon Dec 22 10:20:21.710712 2025] [:error] [pid 56078:tid 56095] [client 2.58.56.27:50312] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5ZB-mi1iY1_On76vAwAAAsI"]
[Mon Dec 22 10:20:21.710733 2025] [:error] [pid 33643:tid 33663] [client 2.58.56.27:50718] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "aUiq5UoNwyN4xVhAvNOnwQAAApE"], referer: www.google.com
[Mon Dec 22 10:20:21.727887 2025] [:error] [pid 33535:tid 33559] [client 2.58.56.27:50968] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUiq5WOCI8D9Xtn-n7QdEAAAAdY"]
[Mon Dec 22 10:20:21.987588 2025] [:error] [pid 33565:tid 33600] [client 2.58.56.27:56130] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5dOWX69q8T0m_yKfzwAAAkY"], referer: www.google.com
[Mon Dec 22 10:20:22.503369 2025] [:error] [pid 58079:tid 58115] [client 2.58.56.27:54342] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUiq5nxLB7WYaNS5A7j4kQAAAEI"]
[Mon Dec 22 10:20:22.531119 2025] [:error] [pid 56078:tid 56100] [client 2.58.56.27:50270] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "aUiq5pB-mi1iY1_On76vFQAAAsc"], referer: www.google.com
[Mon Dec 22 10:20:22.591095 2025] [:error] [pid 56080:tid 56128] [client 2.58.56.27:57254] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5pIHT3YJq9hjDc5eygAAAwQ"], referer: www.google.com
[Mon Dec 22 10:20:22.606975 2025] [:error] [pid 33471:tid 33476] [client 2.58.56.27:52661] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5r5BeNE7regJ7izGgwAAAUI"]
[Mon Dec 22 10:20:22.798121 2025] [:error] [pid 58079:tid 58130] [client 2.58.56.27:59355] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5nxLB7WYaNS5A7j4lwAAAFE"], referer: www.google.com
[Mon Dec 22 10:20:24.019035 2025] [:error] [pid 33643:tid 33656] [client 2.58.56.27:51572] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6EoNwyN4xVhAvNOn6gAAAoo"], referer: www.google.com
[Mon Dec 22 10:20:24.208925 2025] [:error] [pid 56156:tid 56202] [client 2.58.56.27:52060] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6Ft4V0DS5rs9y54e2wAAA8Y"], referer: www.google.com
[Mon Dec 22 10:20:25.195662 2025] [:error] [pid 33472:tid 33512] [client 2.58.56.27:56085] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6Z5p2WQpPIK8HAlS8wAAAYs"], referer: www.google.com
[Mon Dec 22 10:20:25.382994 2025] [:error] [pid 56078:tid 56104] [client 2.58.56.27:65156] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6ZB-mi1iY1_On76vMwAAAss"], referer: www.google.com
[Mon Dec 22 10:20:26.371155 2025] [:error] [pid 33643:tid 33661] [client 2.58.56.27:64136] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6koNwyN4xVhAvNOn_wAAAo8"], referer: www.google.com
[Mon Dec 22 10:20:26.532610 2025] [:error] [pid 33535:tid 33552] [client 2.58.56.27:50105] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6mOCI8D9Xtn-n7QdWwAAAc8"], referer: www.google.com
[Mon Dec 22 10:20:27.516265 2025] [:error] [pid 33471:tid 33483] [client 2.58.56.27:53286] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq675BeNE7regJ7izGqQAAAUk"], referer: www.google.com
[Mon Dec 22 10:20:27.656469 2025] [:error] [pid 58078:tid 58084] [client 2.58.56.27:55293] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq65WKg9Bf8njHlB6m2AAAAAE"], referer: www.google.com
[Mon Dec 22 10:20:28.658607 2025] [:error] [pid 56080:tid 56135] [client 2.58.56.27:53794] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq7JIHT3YJq9hjDc5e7AAAAws"], referer: www.google.com
[Mon Dec 22 10:20:28.759245 2025] [:error] [pid 56080:tid 56132] [client 2.58.56.27:55530] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq7JIHT3YJq9hjDc5e7gAAAwg"], referer: www.google.com
[Mon Dec 22 16:29:14.042848 2025] [:error] [pid 33564:tid 33572] [client 74.208.59.86:45540] [client 74.208.59.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.59.86, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUkBWgSHeG6oLmMnKY5qMAAAAgU"]
[Mon Dec 22 16:29:18.797875 2025] [:error] [pid 33440:tid 33442] [client 74.208.59.86:45542] [client 74.208.59.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.59.86, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUkBXpOsUWKqgxu6QTTylAAAAQA"]
[Mon Dec 22 20:45:12.842791 2025] [:error] [pid 33440:tid 33461] [client 185.30.32.201:47458] [client 185.30.32.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUk9WJOsUWKqgxu6QTQzMwAAARM"]
[Mon Dec 22 20:45:18.386704 2025] [:error] [pid 33440:tid 33446] [client 185.30.32.201:47458] [client 185.30.32.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUk9XpOsUWKqgxu6QTQzPAAAAQQ"]
[Mon Dec 22 20:50:46.830845 2025] [:error] [pid 33564:tid 33584] [client 103.65.236.153:51958] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aUk-pgSHeG6oLmMnKY7HLQAAAhE"]
[Mon Dec 22 23:01:55.854720 2025] [:error] [pid 58172:tid 58198] [client 43.131.253.14:56594] [client 43.131.253.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUldY-SVKDT5jWOcnSUX1wAAANg"]
[Tue Dec 23 02:36:32.033651 2025] [:error] [pid 12110:tid 12132] [client 43.130.9.111:42654] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUmPsAYatzD_WebWpOrjrAAAAJQ"]
[Tue Dec 23 04:09:23.498193 2025] [:error] [pid 49061:tid 49106] [client 68.218.96.24:7144] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "aUmlc2RtvGWfzuDz6nQPqwAAAE4"]
[Tue Dec 23 04:09:24.227126 2025] [:error] [pid 49061:tid 49116] [client 68.218.96.24:7108] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "aUmldGRtvGWfzuDz6nQPrQAAAFg"]
[Tue Dec 23 04:09:26.277866 2025] [:error] [pid 49061:tid 49098] [client 68.218.96.24:7048] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "aUmldmRtvGWfzuDz6nQPtAAAAEY"]
[Tue Dec 23 04:09:26.748745 2025] [:error] [pid 49061:tid 49097] [client 68.218.96.24:7141] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "aUmldmRtvGWfzuDz6nQPtgAAAEU"]
[Tue Dec 23 04:09:27.428518 2025] [:error] [pid 49150:tid 49173] [client 68.218.96.24:7143] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUmld0uL91O4jNPzb4FCMAAAANU"]
[Tue Dec 23 04:09:28.422167 2025] [:error] [pid 49150:tid 49164] [client 68.218.96.24:7118] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUmleEuL91O4jNPzb4FCMgAAAMw"]
[Tue Dec 23 04:09:29.055324 2025] [:error] [pid 49150:tid 49168] [client 68.218.96.24:7055] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUmleUuL91O4jNPzb4FCNQAAANA"]
[Tue Dec 23 04:09:30.238123 2025] [:error] [pid 49150:tid 49169] [client 68.218.96.24:7158] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aUmlekuL91O4jNPzb4FCOQAAANE"]
[Tue Dec 23 04:09:30.680034 2025] [:error] [pid 49150:tid 49157] [client 68.218.96.24:7124] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aUmlekuL91O4jNPzb4FCOgAAAMU"]
[Tue Dec 23 04:09:31.069262 2025] [:error] [pid 49150:tid 49156] [client 68.218.96.24:7112] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aUmle0uL91O4jNPzb4FCPAAAAMQ"]
[Tue Dec 23 04:09:31.651380 2025] [:error] [pid 49060:tid 49068] [client 68.218.96.24:7150] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aUmle_vdpPyXg0aYbMU5awAAAAQ"]
[Tue Dec 23 04:09:32.028343 2025] [:error] [pid 49060:tid 49088] [client 68.218.96.24:7050] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aUmlfPvdpPyXg0aYbMU5bQAAABg"]
[Tue Dec 23 04:09:32.534697 2025] [:error] [pid 49060:tid 49064] [client 68.218.96.24:7111] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aUmlfPvdpPyXg0aYbMU5bwAAAAA"]
[Tue Dec 23 04:09:33.971962 2025] [:error] [pid 49150:tid 49172] [client 68.218.96.24:7146] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aUmlfUuL91O4jNPzb4FCQAAAANQ"]
[Tue Dec 23 04:09:35.943535 2025] [:error] [pid 49150:tid 49170] [client 68.218.96.24:7157] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aUmlf0uL91O4jNPzb4FCQgAAANI"]
[Tue Dec 23 04:09:37.942408 2025] [:error] [pid 49150:tid 49160] [client 68.218.96.24:7119] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aUmlgUuL91O4jNPzb4FCRwAAAMg"]
[Tue Dec 23 04:09:38.940482 2025] [:error] [pid 49062:tid 49132] [client 68.218.96.24:7135] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUmlgv_oMXBKdV37va2D3wAAAI0"]
[Tue Dec 23 04:09:39.510985 2025] [:error] [pid 49060:tid 49076] [client 68.218.96.24:7159] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUmlg_vdpPyXg0aYbMU5dQAAAAw"]
[Tue Dec 23 04:09:40.853189 2025] [:error] [pid 49062:tid 49138] [client 68.218.96.24:7105] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUmlhP_oMXBKdV37va2D4gAAAJM"]
[Tue Dec 23 04:09:42.340290 2025] [:error] [pid 49061:tid 49116] [client 68.218.96.24:7046] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aUmlhmRtvGWfzuDz6nQQNAAAAFg"]
[Tue Dec 23 04:09:43.262810 2025] [:error] [pid 49150:tid 49157] [client 68.218.96.24:7086] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conflg.php"] [unique_id "aUmlh0uL91O4jNPzb4FCVgAAAMU"]
[Tue Dec 23 04:09:43.719625 2025] [:error] [pid 49061:tid 49093] [client 68.218.96.24:7138] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conflg.php"] [unique_id "aUmlh2RtvGWfzuDz6nQQNgAAAEE"]
[Tue Dec 23 04:09:44.283388 2025] [:error] [pid 49062:tid 49130] [client 68.218.96.24:7114] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conflg.php"] [unique_id "aUmliP_oMXBKdV37va2D5AAAAIs"]
[Tue Dec 23 04:09:44.625882 2025] [:error] [pid 49150:tid 49152] [client 68.218.96.24:7128] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conflg.php"] [unique_id "aUmliEuL91O4jNPzb4FCWQAAAMA"]
[Tue Dec 23 04:09:45.126831 2025] [:error] [pid 49062:tid 49134] [client 68.218.96.24:7106] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aUmlif_oMXBKdV37va2D6AAAAI8"]
[Tue Dec 23 04:09:47.032941 2025] [:error] [pid 49060:tid 49074] [client 68.218.96.24:7052] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aUmli_vdpPyXg0aYbMU5ewAAAAo"]
[Tue Dec 23 04:09:47.810179 2025] [:error] [pid 49062:tid 49131] [client 68.218.96.24:7054] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aUmli__oMXBKdV37va2D7AAAAIw"]
[Tue Dec 23 04:09:49.058011 2025] [:error] [pid 49060:tid 49087] [client 68.218.96.24:7059] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aUmljfvdpPyXg0aYbMU5gwAAABc"]
[Tue Dec 23 04:09:49.712836 2025] [:error] [pid 49060:tid 49069] [client 68.218.96.24:7067] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aUmljfvdpPyXg0aYbMU5iAAAAAU"]
[Tue Dec 23 04:09:50.938427 2025] [:error] [pid 49150:tid 49153] [client 68.218.96.24:7107] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aUmljkuL91O4jNPzb4FCYAAAAME"]
[Tue Dec 23 04:09:54.494458 2025] [:error] [pid 49062:tid 49135] [client 68.218.96.24:7043] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aUmlkv_oMXBKdV37va2D9QAAAJA"]
[Tue Dec 23 04:09:55.616815 2025] [:error] [pid 49150:tid 49165] [client 68.218.96.24:7060] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aUmlk0uL91O4jNPzb4FCawAAAM0"]
[Tue Dec 23 04:09:56.634350 2025] [:error] [pid 49062:tid 49143] [client 68.218.96.24:7132] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aUmllP_oMXBKdV37va2D9wAAAJg"]
[Tue Dec 23 04:09:59.595264 2025] [:error] [pid 49150:tid 49163] [client 68.218.96.24:7082] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aUmll0uL91O4jNPzb4FCbQAAAMs"]
[Tue Dec 23 04:10:01.664083 2025] [:error] [pid 49061:tid 49094] [client 68.218.96.24:7164] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aUmlmWRtvGWfzuDz6nQQTAAAAEI"]
[Tue Dec 23 04:10:05.616620 2025] [:error] [pid 49150:tid 49165] [client 68.218.96.24:7136] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aUmlnUuL91O4jNPzb4FCdQAAAM0"]
[Tue Dec 23 04:10:06.103712 2025] [:error] [pid 49150:tid 49162] [client 68.218.96.24:7137] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUmlnkuL91O4jNPzb4FCdgAAAMo"]
[Tue Dec 23 04:10:06.885906 2025] [:error] [pid 49150:tid 49167] [client 68.218.96.24:7122] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUmlnkuL91O4jNPzb4FCegAAAM8"]
[Tue Dec 23 04:10:08.117720 2025] [:error] [pid 49150:tid 49155] [client 68.218.96.24:7095] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUmloEuL91O4jNPzb4FCfQAAAMM"]
[Tue Dec 23 04:10:08.732838 2025] [:error] [pid 49150:tid 49176] [client 68.218.96.24:7134] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUmloEuL91O4jNPzb4FCfgAAANg"]
[Tue Dec 23 04:10:09.235446 2025] [:error] [pid 49062:tid 49119] [client 68.218.96.24:7017] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUmlof_oMXBKdV37va2ECAAAAIA"]
[Tue Dec 23 04:10:09.401867 2025] [:error] [pid 49061:tid 49097] [client 68.218.96.24:6994] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUmloWRtvGWfzuDz6nQQTwAAAEU"]
[Tue Dec 23 04:10:09.814995 2025] [:error] [pid 49060:tid 49076] [client 68.218.96.24:7160] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUmlofvdpPyXg0aYbMU5nAAAAAw"]
[Tue Dec 23 04:10:10.373052 2025] [:error] [pid 49060:tid 49081] [client 68.218.96.24:7140] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUmlovvdpPyXg0aYbMU5nQAAABE"]
[Tue Dec 23 04:10:10.811432 2025] [:error] [pid 49062:tid 49126] [client 68.218.96.24:7154] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "aUmlov_oMXBKdV37va2EDAAAAIc"]
[Tue Dec 23 04:10:11.156157 2025] [:error] [pid 49150:tid 49153] [client 68.218.96.24:7061] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "aUmlo0uL91O4jNPzb4FChQAAAME"]
[Tue Dec 23 04:10:11.733929 2025] [:error] [pid 49150:tid 49156] [client 68.218.96.24:7117] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "aUmlo0uL91O4jNPzb4FCiAAAAMQ"]
[Tue Dec 23 04:10:12.086324 2025] [:error] [pid 49150:tid 49152] [client 68.218.96.24:7051] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "aUmlpEuL91O4jNPzb4FCiQAAAMA"]
[Tue Dec 23 04:10:12.513788 2025] [:error] [pid 49060:tid 49088] [client 68.218.96.24:7006] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUmlpPvdpPyXg0aYbMU5ngAAABg"]
[Tue Dec 23 04:10:13.125430 2025] [:error] [pid 49062:tid 49134] [client 68.218.96.24:7123] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUmlpf_oMXBKdV37va2EDwAAAI8"]
[Tue Dec 23 04:10:13.857468 2025] [:error] [pid 49062:tid 49124] [client 68.218.96.24:7155] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUmlpf_oMXBKdV37va2EEAAAAIU"]
[Tue Dec 23 04:10:14.459074 2025] [:error] [pid 49060:tid 49085] [client 68.218.96.24:7147] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUmlpvvdpPyXg0aYbMU5nwAAABU"]
[Tue Dec 23 04:10:15.213199 2025] [:error] [pid 49150:tid 49166] [client 68.218.96.24:7057] [client 68.218.96.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aUmlp0uL91O4jNPzb4FCiwAAAM4"]
[Tue Dec 23 04:10:15.984192 2025] [:error] [pid 49061:tid 49095] [client 68.218.96.24:7161] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aUmlp2RtvGWfzuDz6nQQUAAAAEM"]
[Tue Dec 23 04:10:16.454849 2025] [:error] [pid 49061:tid 49114] [client 68.218.96.24:7113] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aUmlqGRtvGWfzuDz6nQQUQAAAFY"]
[Tue Dec 23 04:10:17.005116 2025] [:error] [pid 49060:tid 49080] [client 68.218.96.24:7040] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aUmlqfvdpPyXg0aYbMU5ogAAABA"]
[Tue Dec 23 04:10:17.641903 2025] [:error] [pid 49060:tid 49073] [client 68.218.96.24:7073] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aUmlqfvdpPyXg0aYbMU5owAAAAk"]
[Tue Dec 23 04:10:19.986984 2025] [:error] [pid 49150:tid 49153] [client 68.218.96.24:7047] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aUmlq0uL91O4jNPzb4FCjgAAAME"]
[Tue Dec 23 04:10:21.098104 2025] [:error] [pid 49060:tid 49074] [client 68.218.96.24:7163] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aUmlrfvdpPyXg0aYbMU5pQAAAAo"]
[Tue Dec 23 04:28:43.145845 2025] [:error] [pid 49061:tid 49115] [client 138.197.166.108:37400] [client 138.197.166.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.166.108, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUmp-2RtvGWfzuDz6nQWnQAAAFc"]
[Tue Dec 23 04:28:49.175913 2025] [:error] [pid 49150:tid 49160] [client 138.197.166.108:52102] [client 138.197.166.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.166.108, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUmqAUuL91O4jNPzb4FMJAAAAMg"]
[Tue Dec 23 04:41:15.901747 2025] [:error] [pid 49150:tid 49166] [client 46.245.0.193:6532] [client 46.245.0.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.245.0.193, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUms60uL91O4jNPzb4FSDQAAAM4"]
[Tue Dec 23 04:50:03.858236 2025] [:error] [pid 49061:tid 49095] [client 46.245.0.193:12539] [client 46.245.0.193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUmu-2RtvGWfzuDz6nQe9wAAAEM"]
[Tue Dec 23 04:51:35.565134 2025] [:error] [pid 49150:tid 49175] [client 46.245.0.193:13396] [client 46.245.0.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.245.0.193, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUmvV0uL91O4jNPzb4FXTAAAANc"]
[Tue Dec 23 06:13:35.095935 2025] [:error] [pid 49060:tid 49079] [client 43.130.102.7:35936] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUnCj_vdpPyXg0aYbMVppQAAAA8"]
[Tue Dec 23 12:26:53.725607 2025] [:error] [pid 3497:tid 3522] [client 91.206.201.61:47816] [client 91.206.201.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.206.201.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUoaDezUE6hZ8LJecSubhQAAANY"]
[Tue Dec 23 12:26:58.616695 2025] [:error] [pid 3497:tid 3506] [client 91.206.201.61:47816] [client 91.206.201.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.206.201.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUoaEuzUE6hZ8LJecSublQAAAMY"]
[Tue Dec 23 17:11:21.805276 2025] [:error] [pid 49993:tid 49996] [client 182.42.105.85:56828] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUpcuajLOkLOc-I9e9t77gAAAUA"]
[Tue Dec 23 17:30:58.743673 2025] [:error] [pid 3497:tid 3518] [client 185.30.35.11:39392] [client 185.30.35.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.35.11, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUphUuzUE6hZ8LJecSvmEQAAANI"]
[Tue Dec 23 17:31:03.641180 2025] [:error] [pid 3497:tid 3524] [client 185.30.35.11:39392] [client 185.30.35.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.35.11, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUphV-zUE6hZ8LJecSvmEgAAANg"]
[Tue Dec 23 20:17:09.473371 2025] [:error] [pid 25976:tid 25989] [client 202.92.7.54:36704] [client 202.92.7.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.92.7.54, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUqIRbF6LaWzQScE-xN6jgAAAQs"]
[Tue Dec 23 20:17:15.836469 2025] [:error] [pid 54340:tid 54357] [client 202.92.7.54:39154] [client 202.92.7.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.92.7.54, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUqIS5ye8-oij4iGhogk5AAAAg8"]
[Tue Dec 23 23:05:18.760947 2025] [:error] [pid 25976:tid 25999] [client 97.70.206.32:31933] [client 97.70.206.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 97.70.206.32, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUqvrrF6LaWzQScE-xObXAAAARU"]
[Tue Dec 23 23:05:24.516883 2025] [:error] [pid 54297:tid 54306] [client 97.70.206.32:16582] [client 97.70.206.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 97.70.206.32, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUqvtEZMNime0caoKPK4rwAAAYU"]
[Tue Dec 23 23:06:26.171047 2025] [:error] [pid 3404:tid 3426] [client 98.98.171.57:60659] [client 98.98.171.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.98.171.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUqv8sJGbPWZNlrhVJduWQAAAdE"]
[Wed Dec 24 03:50:47.373513 2025] [:error] [pid 16468:tid 16527] [client 152.58.62.146:40815] [client 152.58.62.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.62.146, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUryl4dyfuSTFLkCbP-jIwAAAIM"]
[Wed Dec 24 03:58:16.865656 2025] [:error] [pid 16550:tid 16574] [client 152.58.35.129:61318] [client 152.58.35.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUr0WKYYcdD-LuO7vrDbngAAANY"]
[Wed Dec 24 04:00:06.926343 2025] [:error] [pid 16468:tid 16547] [client 152.58.35.129:62759] [client 152.58.35.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.35.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUr0xodyfuSTFLkCbP-kyQAAAJc"]
[Wed Dec 24 04:01:48.324034 2025] [:error] [pid 16467:tid 16505] [client 152.58.35.129:63715] [client 152.58.35.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.35.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUr1LI0TJMcBxX5slgpoTQAAAEg"]
[Wed Dec 24 04:03:45.894991 2025] [:error] [pid 16468:tid 16525] [client 152.58.35.129:64874] [client 152.58.35.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.35.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUr1oYdyfuSTFLkCbP-mCgAAAIE"]
[Wed Dec 24 04:05:21.626330 2025] [:error] [pid 16550:tid 16560] [client 152.58.35.129:49482] [client 152.58.35.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.35.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aUr2AaYYcdD-LuO7vrDeDgAAAMg"]
[Wed Dec 24 05:36:09.590212 2025] [:error] [pid 16468:tid 16536] [client 185.112.59.5:52222] [client 185.112.59.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUsLSYdyfuSTFLkCbP-_ogAAAIw"]
[Wed Dec 24 05:54:44.430767 2025] [:error] [pid 16466:tid 16471] [client 192.144.148.122:50088] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUsPpLu0JcuKJMjJn6xtgAAAAAE"]
[Wed Dec 24 06:35:31.523310 2025] [autoindex:error] [pid 16550:tid 16575] [client 4.217.236.28:59095] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 24 06:35:32.636813 2025] [autoindex:error] [pid 16550:tid 16564] [client 4.217.236.28:59095] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Dec 24 06:35:34.905726 2025] [autoindex:error] [pid 16550:tid 16572] [client 4.217.236.28:59095] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Dec 24 06:35:35.045753 2025] [autoindex:error] [pid 16550:tid 16568] [client 4.217.236.28:59095] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 24 06:35:46.610179 2025] [autoindex:error] [pid 16550:tid 16559] [client 4.217.236.28:59095] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 24 06:35:49.333389 2025] [autoindex:error] [pid 16550:tid 16570] [client 4.217.236.28:59095] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 24 06:35:49.474730 2025] [autoindex:error] [pid 16550:tid 16562] [client 4.217.236.28:59095] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 24 06:35:49.614208 2025] [autoindex:error] [pid 16550:tid 16556] [client 4.217.236.28:59095] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 24 06:35:49.749202 2025] [:error] [pid 16550:tid 16576] [client 4.217.236.28:59095] [client 4.217.236.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUsZRaYYcdD-LuO7vrAKZAAAANg"], referer: https://www.yahoo.com/
[Wed Dec 24 06:35:50.030398 2025] [autoindex:error] [pid 54139:tid 54161] [client 4.217.236.28:60912] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 24 06:35:50.175716 2025] [autoindex:error] [pid 54139:tid 54154] [client 4.217.236.28:60912] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 24 06:35:50.322447 2025] [autoindex:error] [pid 54139:tid 54160] [client 4.217.236.28:60912] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Dec 24 08:25:11.080241 2025] [:error] [pid 16466:tid 16492] [client 65.21.108.120:41356] [client 65.21.108.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.108.120, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUsy57u0JcuKJMjJn6yNqgAAABY"]
[Wed Dec 24 08:25:18.277734 2025] [:error] [pid 16468:tid 16526] [client 65.21.108.120:33800] [client 65.21.108.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.108.120, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUsy7odyfuSTFLkCbP_rhQAAAII"]
[Wed Dec 24 10:49:12.923461 2025] [autoindex:error] [pid 16550:tid 16558] [client 104.234.53.219:27891] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:49:13.180680 2025] [autoindex:error] [pid 16550:tid 16556] [client 104.234.53.219:27891] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:49:13.404691 2025] [autoindex:error] [pid 16550:tid 16556] [client 104.234.53.219:27891] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:49:13.579336 2025] [autoindex:error] [pid 54139:tid 54143] [client 63.135.161.48:46017] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:49:13.637388 2025] [autoindex:error] [pid 16550:tid 16563] [client 104.234.53.219:27891] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:49:13.934083 2025] [autoindex:error] [pid 54139:tid 54149] [client 63.135.161.48:46017] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:49:14.178387 2025] [autoindex:error] [pid 54139:tid 54164] [client 63.135.161.48:46017] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 10:49:14.494441 2025] [autoindex:error] [pid 54139:tid 54148] [client 63.135.161.48:46017] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Dec 24 12:33:50.636220 2025] [:error] [pid 54139:tid 54158] [client 162.240.0.20:54030] [client 162.240.0.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.0.20, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUttLsrYCZenIDzgXuIr1AAAARE"]
[Wed Dec 24 12:33:54.845358 2025] [:error] [pid 54139:tid 54141] [client 162.240.0.20:54030] [client 162.240.0.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.0.20, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUttMsrYCZenIDzgXuIr2gAAAQA"]
[Wed Dec 24 14:44:11.463654 2025] [:error] [pid 16467:tid 16516] [client 82.165.90.56:52132] [client 82.165.90.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.56, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUuLu40TJMcBxX5slgoW7gAAAFM"]
[Wed Dec 24 14:44:16.481666 2025] [:error] [pid 54139:tid 54152] [client 82.165.90.56:52140] [client 82.165.90.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.56, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUuLwMrYCZenIDzgXuJQwAAAAQs"]
[Wed Dec 24 16:12:30.675566 2025] [:error] [pid 16466:tid 16490] [client 206.81.24.227:39582] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v2/api-docs"] [unique_id "aUugbru0JcuKJMjJn6wHbQAAABQ"]
[Wed Dec 24 16:12:31.610830 2025] [:error] [pid 16468:tid 16544] [client 206.81.24.227:57402] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v3/api-docs"] [unique_id "aUugb4dyfuSTFLkCbP9s0gAAAJQ"]
[Wed Dec 24 16:12:32.607590 2025] [:error] [pid 28777:tid 28797] [client 206.81.24.227:57412] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/api-docs/swagger.json"] [unique_id "aUugcJBVBcZ34cSqz8oT1AAAAZI"]
[Wed Dec 24 16:12:34.781067 2025] [:error] [pid 28777:tid 28783] [client 206.81.24.227:57416] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/api/swagger.json"] [unique_id "aUugcpBVBcZ34cSqz8oT2wAAAYQ"]
[Wed Dec 24 16:12:35.704685 2025] [:error] [pid 54139:tid 54144] [client 206.81.24.227:57418] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/@vite/env"] [unique_id "aUugc8rYCZenIDzgXuJvzQAAAQM"]
[Wed Dec 24 16:12:36.654142 2025] [:error] [pid 28405:tid 28411] [client 206.81.24.227:57434] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/actuator/env"] [unique_id "aUugdMKkTWlhmfdXFqY1mQAAAUI"]
[Wed Dec 24 16:12:37.685266 2025] [:error] [pid 16550:tid 16574] [client 206.81.24.227:57444] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aUugdaYYcdD-LuO7vrDVbwAAANY"]
[Wed Dec 24 16:12:38.714048 2025] [:error] [pid 16467:tid 16510] [client 206.81.24.227:57450] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server"] [unique_id "aUugdo0TJMcBxX5slgonxQAAAE0"]
[Wed Dec 24 16:12:39.742727 2025] [:error] [pid 16467:tid 16521] [client 206.81.24.227:57458] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aUugd40TJMcBxX5slgonxgAAAFg"]
[Wed Dec 24 16:12:41.786279 2025] [:error] [pid 29371:tid 29380] [client 206.81.24.227:52620] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/about"] [unique_id "aUugeXs-DlKLysSq5L9xeAAAAcc"]
[Wed Dec 24 16:12:42.760313 2025] [:error] [pid 16550:tid 16568] [client 206.81.24.227:52634] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/debug/default/view"] [unique_id "aUugeqYYcdD-LuO7vrDVdQAAANA"]
[Wed Dec 24 16:12:43.802678 2025] [:error] [pid 54139:tid 54142] [client 206.81.24.227:52648] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v2/_catalog"] [unique_id "aUuge8rYCZenIDzgXuJv1AAAAQE"]
[Wed Dec 24 16:12:44.743337 2025] [:error] [pid 16467:tid 16501] [client 206.81.24.227:52664] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aUugfI0TJMcBxX5slgonyAAAAEQ"]
[Wed Dec 24 16:12:45.742192 2025] [:error] [pid 16550:tid 16562] [client 206.81.24.227:52670] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server-status"] [unique_id "aUugfaYYcdD-LuO7vrDVegAAAMo"]
[Wed Dec 24 16:12:46.745799 2025] [:error] [pid 16466:tid 16488] [client 206.81.24.227:52684] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/login.action"] [unique_id "aUugfru0JcuKJMjJn6wHggAAABI"]
[Wed Dec 24 16:12:47.763932 2025] [:error] [pid 54139:tid 54141] [client 206.81.24.227:52692] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/_all_dbs"] [unique_id "aUugf8rYCZenIDzgXuJv2wAAAQA"]
[Wed Dec 24 16:12:48.744792 2025] [:error] [pid 54139:tid 54153] [client 206.81.24.227:52696] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aUuggMrYCZenIDzgXuJv3gAAAQw"]
[Wed Dec 24 16:12:49.723213 2025] [:error] [pid 16468:tid 16547] [client 206.81.24.227:52700] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aUuggYdyfuSTFLkCbP9s1QAAAJc"]
[Wed Dec 24 16:12:51.769165 2025] [:error] [pid 16468:tid 16546] [client 206.81.24.227:56062] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aUugg4dyfuSTFLkCbP9s1wAAAJY"]
[Wed Dec 24 16:12:52.752319 2025] [:error] [pid 16468:tid 16532] [client 206.81.24.227:56076] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aUughIdyfuSTFLkCbP9s2gAAAIg"]
[Wed Dec 24 16:12:53.748056 2025] [:error] [pid 54139:tid 54142] [client 206.81.24.227:56090] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config.json"] [unique_id "aUughcrYCZenIDzgXuJv4QAAAQE"]
[Wed Dec 24 16:12:54.755083 2025] [:error] [pid 16468:tid 16543] [client 206.81.24.227:56092] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/telescope/requests"] [unique_id "aUughodyfuSTFLkCbP9s3QAAAJM"]
[Wed Dec 24 16:12:55.743323 2025] [:error] [pid 28777:tid 28786] [client 206.81.24.227:56108] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUugh5BVBcZ34cSqz8oT6gAAAYc"]
[Wed Dec 24 16:12:56.745453 2025] [:error] [pid 16467:tid 16502] [client 206.81.24.227:56110] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUugiI0TJMcBxX5slgonzwAAAEU"]
[Wed Dec 24 18:41:48.976768 2025] [:error] [pid 16467:tid 16513] [client 101.42.46.71:37160] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUvDbI0TJMcBxX5slgpC2AAAAFA"]
[Wed Dec 24 21:17:50.119620 2025] [:error] [pid 16550:tid 16554] [client 82.165.89.242:50428] [client 82.165.89.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.242, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUvn_qYYcdD-LuO7vrAWigAAAMI"]
[Wed Dec 24 21:17:55.236844 2025] [:error] [pid 16550:tid 16568] [client 82.165.89.242:50430] [client 82.165.89.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.242, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUvoA6YYcdD-LuO7vrAWkAAAANA"]
[Thu Dec 25 00:31:17.551504 2025] [:error] [pid 16341:tid 16345] [client 73.238.71.207:56958] [client 73.238.71.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUwVVWOMHgxtc4kIvgUFiAAAAQA"]
[Thu Dec 25 00:31:46.088651 2025] [:error] [pid 38611:tid 38632] [client 172.105.85.200:35352] [client 172.105.85.200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aUwVcuLzy4v8uFDvXNiSOgAAABA"]
[Thu Dec 25 00:33:00.169203 2025] [:error] [pid 38703:tid 38717] [client 172.105.85.200:57232] [client 172.105.85.200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aUwVvPmvKu9DsbfjDPgZ2wAAAMs"]
[Thu Dec 25 00:34:51.956645 2025] [:error] [pid 38611:tid 38630] [client 173.252.167.60:39704] [client 173.252.167.60] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aUwWK-Lzy4v8uFDvXNiSuwAAAA4"]
[Thu Dec 25 00:35:36.274707 2025] [:error] [pid 38612:tid 38646] [client 73.238.71.207:34526] [client 73.238.71.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUwWWCvIpByfcqBkBFEY_wAAAEE"]
[Thu Dec 25 00:35:54.751426 2025] [:error] [pid 16341:tid 16365] [client 166.62.85.160:32966] [client 166.62.85.160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aUwWamOMHgxtc4kIvgUGxAAAARQ"]
[Thu Dec 25 00:35:58.135992 2025] [:error] [pid 38703:tid 38724] [client 5.78.42.10:60230] [client 5.78.42.10] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aUwWbvmvKu9DsbfjDPgapwAAANI"]
[Thu Dec 25 06:58:02.691245 2025] [:error] [pid 31570:tid 31612] [client 82.165.90.14:55428] [client 82.165.90.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUxv-mPy2DpAzW_4a2iySAAAAEw"]
[Thu Dec 25 06:58:08.103623 2025] [:error] [pid 31569:tid 31579] [client 82.165.90.14:55444] [client 82.165.90.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUxwAGiSFBH7Ee_uldX5OQAAAAY"]
[Thu Dec 25 07:23:18.192103 2025] [autoindex:error] [pid 31570:tid 31623] [client 20.205.32.186:3485] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 07:23:27.503818 2025] [:error] [pid 31570:tid 31618] [client 20.205.32.186:3485] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aUx172Py2DpAzW_4a2i3wAAAAFI"]
[Thu Dec 25 07:23:27.880628 2025] [:error] [pid 2996:tid 3012] [client 20.205.32.186:3466] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aUx176rrTp0EWNyhaIR39AAAAQ4"]
[Thu Dec 25 07:23:28.285682 2025] [:error] [pid 31571:tid 31630] [client 20.205.32.186:3600] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aUx18O7e_lLK2X5wU8kYbAAAAIM"]
[Thu Dec 25 07:23:28.766246 2025] [:error] [pid 31570:tid 31611] [client 20.205.32.186:3631] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aUx18GPy2DpAzW_4a2i3wgAAAEs"]
[Thu Dec 25 07:23:29.457446 2025] [:error] [pid 31571:tid 31640] [client 20.205.32.186:3463] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aUx18e7e_lLK2X5wU8kYcAAAAI0"]
[Thu Dec 25 07:23:29.984640 2025] [:error] [pid 31571:tid 31645] [client 20.205.32.186:3605] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aUx18e7e_lLK2X5wU8kYcQAAAJI"]
[Thu Dec 25 07:23:30.450906 2025] [:error] [pid 2996:tid 3014] [client 20.205.32.186:3637] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aUx18qrrTp0EWNyhaIR3_QAAARA"]
[Thu Dec 25 07:23:30.814669 2025] [:error] [pid 2996:tid 3007] [client 20.205.32.186:3467] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aUx18qrrTp0EWNyhaIR4AAAAAQk"]
[Thu Dec 25 07:23:31.228430 2025] [:error] [pid 31655:tid 31672] [client 20.205.32.186:3606] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aUx185ozPMk9HPtIJPMIEwAAAM8"]
[Thu Dec 25 07:23:31.553797 2025] [:error] [pid 31655:tid 31663] [client 20.205.32.186:3473] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aUx185ozPMk9HPtIJPMIFgAAAMY"]
[Thu Dec 25 07:23:32.169418 2025] [:error] [pid 31570:tid 31601] [client 20.205.32.186:3082] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aUx19GPy2DpAzW_4a2i3xAAAAEE"]
[Thu Dec 25 07:23:32.655304 2025] [:error] [pid 31655:tid 31664] [client 20.205.32.186:3597] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aUx19JozPMk9HPtIJPMIGAAAAMc"]
[Thu Dec 25 07:23:33.193411 2025] [:error] [pid 31569:tid 31586] [client 20.205.32.186:3591] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aUx19WiSFBH7Ee_uldUAqQAAAA0"]
[Thu Dec 25 07:23:33.486956 2025] [:error] [pid 2996:tid 3004] [client 20.205.32.186:3587] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aUx19arrTp0EWNyhaIR4AgAAAQY"]
[Thu Dec 25 07:23:33.926828 2025] [:error] [pid 31655:tid 31681] [client 20.205.32.186:3613] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aUx19ZozPMk9HPtIJPMIIAAAANg"]
[Thu Dec 25 07:23:34.309872 2025] [:error] [pid 2996:tid 3022] [client 20.205.32.186:3625] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aUx19qrrTp0EWNyhaIR4BwAAARg"]
[Thu Dec 25 07:23:34.806795 2025] [:error] [pid 31569:tid 31597] [client 20.205.32.186:3639] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aUx19miSFBH7Ee_uldUArgAAABg"]
[Thu Dec 25 07:23:35.104946 2025] [:error] [pid 31570:tid 31612] [client 20.205.32.186:3472] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aUx192Py2DpAzW_4a2i3xgAAAEw"]
[Thu Dec 25 07:23:35.947326 2025] [:error] [pid 31571:tid 31630] [client 20.205.32.186:3641] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aUx19-7e_lLK2X5wU8kYfgAAAIM"]
[Thu Dec 25 07:23:36.315561 2025] [:error] [pid 31569:tid 31587] [client 20.205.32.186:3478] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aUx1-GiSFBH7Ee_uldUAtgAAAA4"]
[Thu Dec 25 07:23:37.017714 2025] [:error] [pid 31569:tid 31593] [client 20.205.32.186:3643] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aUx1-WiSFBH7Ee_uldUAuAAAABQ"]
[Thu Dec 25 07:23:37.507891 2025] [:error] [pid 31571:tid 31650] [client 20.205.32.186:3612] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aUx1-e7e_lLK2X5wU8kYhQAAAJc"]
[Thu Dec 25 07:23:37.837434 2025] [:error] [pid 31571:tid 31647] [client 20.205.32.186:3588] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aUx1-e7e_lLK2X5wU8kYhgAAAJQ"]
[Thu Dec 25 07:23:38.419776 2025] [:error] [pid 31655:tid 31678] [client 20.205.32.186:3636] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aUx1-pozPMk9HPtIJPMILgAAANU"]
[Thu Dec 25 07:23:38.742440 2025] [:error] [pid 31655:tid 31675] [client 20.205.32.186:3121] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUx1-pozPMk9HPtIJPMIMQAAANI"]
[Thu Dec 25 07:23:39.196001 2025] [:error] [pid 31570:tid 31617] [client 20.205.32.186:3647] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUx1-2Py2DpAzW_4a2i3yAAAAFE"]
[Thu Dec 25 07:23:39.590364 2025] [:error] [pid 31655:tid 31658] [client 20.205.32.186:3645] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUx1-5ozPMk9HPtIJPMIOAAAAME"]
[Thu Dec 25 07:23:39.955873 2025] [:error] [pid 31655:tid 31679] [client 20.205.32.186:3457] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aUx1-5ozPMk9HPtIJPMIOQAAANY"]
[Thu Dec 25 07:23:40.368268 2025] [:error] [pid 31571:tid 31644] [client 20.205.32.186:3486] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aUx1_O7e_lLK2X5wU8kYiAAAAJE"]
[Thu Dec 25 07:23:40.693293 2025] [:error] [pid 31655:tid 31673] [client 20.205.32.186:3459] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aUx1_JozPMk9HPtIJPMIOwAAANA"]
[Thu Dec 25 07:23:40.990696 2025] [:error] [pid 2996:tid 3018] [client 20.205.32.186:3492] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aUx1_KrrTp0EWNyhaIR4EAAAARQ"]
[Thu Dec 25 07:23:41.312894 2025] [:error] [pid 31569:tid 31576] [client 20.205.32.186:3470] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aUx1_WiSFBH7Ee_uldUAwgAAAAM"]
[Thu Dec 25 07:23:41.790502 2025] [:error] [pid 31569:tid 31595] [client 20.205.32.186:3620] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUx1_WiSFBH7Ee_uldUAxQAAABY"]
[Thu Dec 25 07:23:42.057365 2025] [:error] [pid 31655:tid 31665] [client 20.205.32.186:3592] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUx1_pozPMk9HPtIJPMIQQAAAMg"]
[Thu Dec 25 07:23:42.404970 2025] [:error] [pid 31570:tid 31616] [client 20.205.32.186:3474] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUx1_mPy2DpAzW_4a2i3zQAAAFA"]
[Thu Dec 25 07:23:42.801819 2025] [:error] [pid 31570:tid 31618] [client 20.205.32.186:3480] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aUx1_mPy2DpAzW_4a2i30gAAAFI"]
[Thu Dec 25 07:23:43.160488 2025] [:error] [pid 31570:tid 31611] [client 20.205.32.186:3076] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUx1_2Py2DpAzW_4a2i31AAAAEs"]
[Thu Dec 25 07:23:43.563773 2025] [:error] [pid 31569:tid 31597] [client 20.205.32.186:3074] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUx1_2iSFBH7Ee_uldUA1wAAABg"]
[Thu Dec 25 07:23:43.962843 2025] [:error] [pid 2996:tid 3012] [client 20.205.32.186:3638] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUx1_6rrTp0EWNyhaIR4HAAAAQ4"]
[Thu Dec 25 07:23:44.409632 2025] [:error] [pid 31571:tid 31629] [client 20.205.32.186:3602] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aUx2AO7e_lLK2X5wU8kYkgAAAII"]
[Thu Dec 25 07:23:44.726650 2025] [:error] [pid 2996:tid 3015] [client 20.205.32.186:3640] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aUx2AKrrTp0EWNyhaIR4IgAAARE"]
[Thu Dec 25 07:23:45.014485 2025] [:error] [pid 2996:tid 3004] [client 20.205.32.186:3461] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aUx2AarrTp0EWNyhaIR4JAAAAQY"]
[Thu Dec 25 07:23:45.260977 2025] [:error] [pid 31655:tid 31663] [client 20.205.32.186:3646] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aUx2AZozPMk9HPtIJPMIRQAAAMY"]
[Thu Dec 25 07:23:45.592410 2025] [:error] [pid 31655:tid 31668] [client 20.205.32.186:3609] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aUx2AZozPMk9HPtIJPMIRgAAAMs"]
[Thu Dec 25 07:23:45.848036 2025] [:error] [pid 31571:tid 31640] [client 20.205.32.186:3516] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aUx2Ae7e_lLK2X5wU8kYlQAAAI0"]
[Thu Dec 25 07:23:46.136525 2025] [:error] [pid 31569:tid 31593] [client 20.205.32.186:3618] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aUx2AmiSFBH7Ee_uldUA6gAAABQ"]
[Thu Dec 25 07:23:46.528244 2025] [:error] [pid 31569:tid 31576] [client 20.205.32.186:3508] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aUx2AmiSFBH7Ee_uldUA7QAAAAM"]
[Thu Dec 25 07:23:46.866064 2025] [:error] [pid 31569:tid 31577] [client 20.205.32.186:3616] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aUx2AmiSFBH7Ee_uldUA7wAAAAQ"]
[Thu Dec 25 07:23:47.306639 2025] [:error] [pid 31569:tid 31595] [client 20.205.32.186:3585] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUx2A2iSFBH7Ee_uldUA8QAAABY"]
[Thu Dec 25 07:23:47.724344 2025] [:error] [pid 31570:tid 31604] [client 20.205.32.186:3607] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUx2A2Py2DpAzW_4a2i34AAAAEQ"]
[Thu Dec 25 07:23:47.991008 2025] [:error] [pid 31569:tid 31580] [client 20.205.32.186:3624] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUx2A2iSFBH7Ee_uldUA8wAAAAc"]
[Thu Dec 25 07:23:48.270460 2025] [:error] [pid 31570:tid 31616] [client 20.205.32.186:3495] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aUx2BGPy2DpAzW_4a2i34gAAAFA"]
[Thu Dec 25 07:23:48.584979 2025] [:error] [pid 31655:tid 31660] [client 20.205.32.186:3460] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUx2BJozPMk9HPtIJPMISQAAAMM"]
[Thu Dec 25 07:23:48.872257 2025] [:error] [pid 31569:tid 31582] [client 20.205.32.186:3593] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUx2BGiSFBH7Ee_uldUA-AAAAAk"]
[Thu Dec 25 07:23:49.123631 2025] [:error] [pid 31655:tid 31678] [client 20.205.32.186:3638] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUx2BZozPMk9HPtIJPMISgAAANU"]
[Thu Dec 25 07:23:49.413319 2025] [:error] [pid 31571:tid 31650] [client 20.205.32.186:3633] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUx2Be7e_lLK2X5wU8kYlwAAAJc"]
[Thu Dec 25 07:23:49.694996 2025] [:error] [pid 31571:tid 31628] [client 20.205.32.186:3504] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUx2Be7e_lLK2X5wU8kYnQAAAIE"]
[Thu Dec 25 07:23:49.974966 2025] [:error] [pid 31655:tid 31657] [client 20.205.32.186:3630] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUx2BZozPMk9HPtIJPMITAAAAMA"]
[Thu Dec 25 07:23:50.234466 2025] [:error] [pid 31570:tid 31618] [client 20.205.32.186:3102] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUx2BmPy2DpAzW_4a2i35AAAAFI"]
[Thu Dec 25 07:23:50.574934 2025] [:error] [pid 31570:tid 31611] [client 20.205.32.186:3482] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aUx2BmPy2DpAzW_4a2i35QAAAEs"]
[Thu Dec 25 07:23:50.812428 2025] [:error] [pid 31655:tid 31674] [client 20.205.32.186:3621] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aUx2BpozPMk9HPtIJPMITQAAANE"]
[Thu Dec 25 07:23:51.280922 2025] [:error] [pid 31569:tid 31581] [client 20.205.32.186:3456] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aUx2B2iSFBH7Ee_uldUBGAAAAAg"]
[Thu Dec 25 07:23:51.653484 2025] [:error] [pid 31655:tid 31665] [client 20.205.32.186:3101] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aUx2B5ozPMk9HPtIJPMIUQAAAMg"]
[Thu Dec 25 07:23:51.889148 2025] [:error] [pid 31569:tid 31590] [client 20.205.32.186:3462] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aUx2B2iSFBH7Ee_uldUBHAAAABE"]
[Thu Dec 25 07:23:52.133910 2025] [:error] [pid 2996:tid 3022] [client 20.205.32.186:3586] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUx2CKrrTp0EWNyhaIR4VwAAARg"]
[Thu Dec 25 07:23:52.418418 2025] [:error] [pid 2996:tid 3021] [client 20.205.32.186:3487] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUx2CKrrTp0EWNyhaIR4WAAAARc"]
[Thu Dec 25 07:23:52.898004 2025] [:error] [pid 31570:tid 31605] [client 20.205.32.186:3483] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUx2CGPy2DpAzW_4a2i36AAAAEU"]
[Thu Dec 25 07:23:53.253994 2025] [:error] [pid 31655:tid 31671] [client 20.205.32.186:3598] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aUx2CZozPMk9HPtIJPMIVgAAAM4"]
[Thu Dec 25 07:23:53.578922 2025] [:error] [pid 31571:tid 31650] [client 20.205.32.186:3590] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUx2Ce7e_lLK2X5wU8kZNgAAAJc"]
[Thu Dec 25 07:23:53.833615 2025] [:error] [pid 2996:tid 3009] [client 20.205.32.186:3500] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUx2CarrTp0EWNyhaIR4WgAAAQs"]
[Thu Dec 25 07:23:54.094424 2025] [:error] [pid 2996:tid 3017] [client 20.205.32.186:3075] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUx2CqrrTp0EWNyhaIR4XAAAARM"]
[Thu Dec 25 07:23:54.447717 2025] [:error] [pid 2996:tid 3014] [client 20.205.32.186:3092] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUx2CqrrTp0EWNyhaIR4XQAAARA"]
[Thu Dec 25 07:23:54.792274 2025] [:error] [pid 31569:tid 31596] [client 20.205.32.186:3626] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUx2CmiSFBH7Ee_uldUBHgAAABc"]
[Thu Dec 25 07:23:55.432534 2025] [:error] [pid 31569:tid 31593] [client 20.205.32.186:3617] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUx2C2iSFBH7Ee_uldUBIAAAABQ"]
[Thu Dec 25 07:23:55.782701 2025] [:error] [pid 31569:tid 31597] [client 20.205.32.186:3079] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUx2C2iSFBH7Ee_uldUBIQAAABg"]
[Thu Dec 25 07:23:56.064515 2025] [:error] [pid 31570:tid 31624] [client 20.205.32.186:3125] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aUx2DGPy2DpAzW_4a2i37wAAAFg"]
[Thu Dec 25 07:23:56.434008 2025] [:error] [pid 31571:tid 31636] [client 20.205.32.186:3116] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aUx2DO7e_lLK2X5wU8kZOwAAAIk"]
[Thu Dec 25 07:23:56.913227 2025] [:error] [pid 31570:tid 31603] [client 20.205.32.186:3465] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aUx2DGPy2DpAzW_4a2i38QAAAEM"]
[Thu Dec 25 07:23:57.325496 2025] [:error] [pid 2996:tid 3019] [client 20.205.32.186:3584] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aUx2DarrTp0EWNyhaIR4XwAAARU"]
[Thu Dec 25 07:23:57.661963 2025] [:error] [pid 31571:tid 31635] [client 20.205.32.186:3469] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aUx2De7e_lLK2X5wU8kZQQAAAIg"]
[Thu Dec 25 07:23:58.129771 2025] [:error] [pid 31570:tid 31614] [client 20.205.32.186:3085] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aUx2DmPy2DpAzW_4a2i3-AAAAE4"]
[Thu Dec 25 07:23:58.451323 2025] [:error] [pid 31655:tid 31665] [client 20.205.32.186:3476] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aUx2DpozPMk9HPtIJPMIYAAAAMg"]
[Thu Dec 25 07:23:58.983904 2025] [:error] [pid 31570:tid 31605] [client 20.205.32.186:3623] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aUx2DmPy2DpAzW_4a2i3-gAAAEU"]
[Thu Dec 25 07:23:59.380472 2025] [:error] [pid 31569:tid 31592] [client 20.205.32.186:3160] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aUx2D2iSFBH7Ee_uldUBJAAAABM"]
[Thu Dec 25 07:23:59.796649 2025] [:error] [pid 31570:tid 31621] [client 20.205.32.186:3632] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUx2D2Py2DpAzW_4a2i3_AAAAFU"]
[Thu Dec 25 07:24:00.162509 2025] [:error] [pid 31571:tid 31627] [client 20.205.32.186:3611] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUx2EO7e_lLK2X5wU8kZRwAAAIA"]
[Thu Dec 25 07:24:00.564844 2025] [:error] [pid 31655:tid 31681] [client 20.205.32.186:3489] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUx2EJozPMk9HPtIJPMIYwAAANg"]
[Thu Dec 25 07:24:00.910524 2025] [:error] [pid 31655:tid 31672] [client 20.205.32.186:3595] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aUx2EJozPMk9HPtIJPMIZAAAAM8"]
[Thu Dec 25 07:24:01.226835 2025] [:error] [pid 31571:tid 31645] [client 20.205.32.186:3464] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUx2Ee7e_lLK2X5wU8kZSQAAAJI"]
[Thu Dec 25 07:24:01.936889 2025] [:error] [pid 31655:tid 31664] [client 20.205.32.186:3496] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUx2EZozPMk9HPtIJPMIagAAAMc"]
[Thu Dec 25 07:24:02.207871 2025] [:error] [pid 31569:tid 31587] [client 20.205.32.186:3118] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUx2EmiSFBH7Ee_uldUBKQAAAA4"]
[Thu Dec 25 07:24:02.596147 2025] [:error] [pid 31569:tid 31590] [client 20.205.32.186:3471] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUx2EmiSFBH7Ee_uldUBKgAAABE"]
[Thu Dec 25 07:24:02.856240 2025] [:error] [pid 2996:tid 3006] [client 20.205.32.186:3506] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUx2EqrrTp0EWNyhaIR4ZAAAAQg"]
[Thu Dec 25 07:24:03.177306 2025] [:error] [pid 31569:tid 31585] [client 20.205.32.186:3081] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUx2E2iSFBH7Ee_uldUBLQAAAAw"]
[Thu Dec 25 07:24:03.475845 2025] [:error] [pid 2996:tid 3005] [client 20.205.32.186:3619] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUx2E6rrTp0EWNyhaIR4aAAAAQc"]
[Thu Dec 25 07:24:03.886697 2025] [:error] [pid 31571:tid 31641] [client 20.205.32.186:3188] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUx2E-7e_lLK2X5wU8kZSgAAAI4"]
[Thu Dec 25 07:24:04.173267 2025] [:error] [pid 31570:tid 31602] [client 20.205.32.186:3599] [client 20.205.32.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUx2FGPy2DpAzW_4a2i3_wAAAEI"]
[Thu Dec 25 07:24:04.490772 2025] [:error] [pid 31655:tid 31660] [client 20.205.32.186:3180] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUx2FJozPMk9HPtIJPMIbQAAAMM"]
[Thu Dec 25 07:24:04.951091 2025] [:error] [pid 31570:tid 31609] [client 20.205.32.186:3089] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUx2FGPy2DpAzW_4a2i4AgAAAEk"]
[Thu Dec 25 07:24:05.263294 2025] [:error] [pid 2996:tid 3018] [client 20.205.32.186:3610] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aUx2FarrTp0EWNyhaIR4awAAARQ"]
[Thu Dec 25 07:24:05.767865 2025] [:error] [pid 2996:tid 3000] [client 20.205.32.186:3083] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUx2FarrTp0EWNyhaIR4cQAAAQI"]
[Thu Dec 25 07:24:06.031089 2025] [:error] [pid 2996:tid 3007] [client 20.205.32.186:3096] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUx2FqrrTp0EWNyhaIR4dAAAAQk"]
[Thu Dec 25 07:24:06.375933 2025] [:error] [pid 2996:tid 3017] [client 20.205.32.186:3142] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUx2FqrrTp0EWNyhaIR4eQAAARM"]
[Thu Dec 25 07:24:07.086180 2025] [:error] [pid 31570:tid 31613] [client 20.205.32.186:3512] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aUx2F2Py2DpAzW_4a2i4BAAAAE0"]
[Thu Dec 25 07:24:07.565397 2025] [:error] [pid 31570:tid 31615] [client 20.205.32.186:3628] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUx2F2Py2DpAzW_4a2i4BQAAAE8"]
[Thu Dec 25 07:24:07.837128 2025] [:error] [pid 31570:tid 31618] [client 20.205.32.186:3499] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUx2F2Py2DpAzW_4a2i4BgAAAFI"]
[Thu Dec 25 07:24:08.084771 2025] [:error] [pid 2996:tid 3012] [client 20.205.32.186:3134] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUx2GKrrTp0EWNyhaIR4iwAAAQ4"]
[Thu Dec 25 07:24:08.474638 2025] [:error] [pid 31570:tid 31614] [client 20.205.32.186:3098] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUx2GGPy2DpAzW_4a2i4CQAAAE4"]
[Thu Dec 25 07:24:09.399797 2025] [:error] [pid 31571:tid 31636] [client 20.205.32.186:3501] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUx2Ge7e_lLK2X5wU8kZdQAAAIk"]
[Thu Dec 25 07:24:10.148876 2025] [:error] [pid 31569:tid 31594] [client 20.205.32.186:3634] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUx2GmiSFBH7Ee_uldUBQgAAABU"]
[Thu Dec 25 07:24:10.518385 2025] [:error] [pid 31569:tid 31577] [client 20.205.32.186:3179] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUx2GmiSFBH7Ee_uldUBQwAAAAQ"]
[Thu Dec 25 07:24:10.978306 2025] [:error] [pid 31569:tid 31576] [client 20.205.32.186:3150] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aUx2GmiSFBH7Ee_uldUBRQAAAAM"]
[Thu Dec 25 07:24:11.524299 2025] [:error] [pid 31655:tid 31662] [client 20.205.32.186:3093] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUx2G5ozPMk9HPtIJPMIdgAAAMU"]
[Thu Dec 25 07:24:11.974057 2025] [:error] [pid 2996:tid 3019] [client 20.205.32.186:3103] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUx2G6rrTp0EWNyhaIR4pwAAARU"]
[Thu Dec 25 07:24:12.299411 2025] [:error] [pid 31655:tid 31671] [client 20.205.32.186:3095] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUx2HJozPMk9HPtIJPMIeQAAAM4"]
[Thu Dec 25 07:24:13.078496 2025] [:error] [pid 31569:tid 31590] [client 20.205.32.186:3458] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aUx2HWiSFBH7Ee_uldUBTgAAABE"]
[Thu Dec 25 07:24:14.229178 2025] [:error] [pid 2996:tid 3011] [client 20.205.32.186:3099] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUx2HqrrTp0EWNyhaIR4sAAAAQ0"]
[Thu Dec 25 07:24:14.720601 2025] [:error] [pid 31655:tid 31678] [client 20.205.32.186:3143] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUx2HpozPMk9HPtIJPMIfQAAANU"]
[Thu Dec 25 07:24:15.186529 2025] [:error] [pid 31655:tid 31657] [client 20.205.32.186:3133] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUx2H5ozPMk9HPtIJPMIfgAAAMA"]
[Thu Dec 25 07:24:15.522202 2025] [:error] [pid 2996:tid 3006] [client 20.205.32.186:3642] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aUx2H6rrTp0EWNyhaIR4swAAAQg"]
[Thu Dec 25 07:24:15.936687 2025] [:error] [pid 31655:tid 31669] [client 20.205.32.186:3112] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUx2H5ozPMk9HPtIJPMIgQAAAMw"]
[Thu Dec 25 07:24:16.247484 2025] [:error] [pid 31570:tid 31603] [client 20.205.32.186:3080] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUx2IGPy2DpAzW_4a2i4EgAAAEM"]
[Thu Dec 25 07:24:17.031488 2025] [:error] [pid 31571:tid 31649] [client 20.205.32.186:3088] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUx2Ie7e_lLK2X5wU8kZmQAAAJY"]
[Thu Dec 25 07:24:17.614476 2025] [:error] [pid 2996:tid 3002] [client 20.205.32.186:3635] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aUx2IarrTp0EWNyhaIR4uAAAAQQ"]
[Thu Dec 25 07:24:18.103985 2025] [:error] [pid 31571:tid 31645] [client 20.205.32.186:3073] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aUx2Iu7e_lLK2X5wU8kZnAAAAJI"]
[Thu Dec 25 07:24:18.640210 2025] [:error] [pid 31655:tid 31681] [client 20.205.32.186:3517] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aUx2IpozPMk9HPtIJPMIhQAAANg"]
[Thu Dec 25 07:24:19.050647 2025] [:error] [pid 31571:tid 31648] [client 20.205.32.186:3153] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aUx2I-7e_lLK2X5wU8kZnQAAAJU"]
[Thu Dec 25 07:24:19.947380 2025] [:error] [pid 31655:tid 31667] [client 20.205.32.186:3601] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aUx2I5ozPMk9HPtIJPMIhwAAAMo"]
[Thu Dec 25 07:24:20.317541 2025] [:error] [pid 31569:tid 31579] [client 20.205.32.186:3627] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUx2JGiSFBH7Ee_uldUBVgAAAAY"]
[Thu Dec 25 07:24:20.885504 2025] [:error] [pid 31569:tid 31591] [client 20.205.32.186:3475] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUx2JGiSFBH7Ee_uldUBWAAAABI"]
[Thu Dec 25 07:24:21.356680 2025] [:error] [pid 31569:tid 31593] [client 20.205.32.186:3122] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUx2JWiSFBH7Ee_uldUBWgAAABQ"]
[Thu Dec 25 07:24:21.720010 2025] [:error] [pid 31569:tid 31590] [client 20.205.32.186:3502] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aUx2JWiSFBH7Ee_uldUBWwAAABE"]
[Thu Dec 25 07:24:22.401652 2025] [:error] [pid 31571:tid 31639] [client 20.205.32.186:3509] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUx2Ju7e_lLK2X5wU8kZnwAAAIw"]
[Thu Dec 25 07:24:23.220760 2025] [:error] [pid 31571:tid 31633] [client 20.205.32.186:3644] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUx2J-7e_lLK2X5wU8kZoAAAAIY"]
[Thu Dec 25 07:24:23.537292 2025] [:error] [pid 31655:tid 31659] [client 20.205.32.186:3119] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUx2J5ozPMk9HPtIJPMIiwAAAMI"]
[Thu Dec 25 07:24:24.207812 2025] [:error] [pid 31655:tid 31679] [client 20.205.32.186:3087] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUx2KJozPMk9HPtIJPMIjAAAANY"]
[Thu Dec 25 07:24:24.685851 2025] [:error] [pid 31570:tid 31620] [client 20.205.32.186:3468] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUx2KGPy2DpAzW_4a2i4GgAAAFQ"]
[Thu Dec 25 07:24:25.328397 2025] [:error] [pid 31570:tid 31617] [client 20.205.32.186:3084] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUx2KWPy2DpAzW_4a2i4GwAAAFE"]
[Thu Dec 25 07:24:25.770489 2025] [:error] [pid 31570:tid 31610] [client 20.205.32.186:3097] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aUx2KWPy2DpAzW_4a2i4HAAAAEo"]
[Thu Dec 25 07:24:43.177091 2025] [:error] [pid 31569:tid 31578] [client 20.205.32.186:3169] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aUx2O2iSFBH7Ee_uldUByQAAAAU"]
[Thu Dec 25 07:24:43.741583 2025] [:error] [pid 31570:tid 31607] [client 20.205.32.186:3503] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aUx2O2Py2DpAzW_4a2i4OQAAAEc"]
[Thu Dec 25 07:24:44.343623 2025] [:error] [pid 31569:tid 31587] [client 20.205.32.186:3183] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aUx2PGiSFBH7Ee_uldUB0gAAAA4"]
[Thu Dec 25 07:24:45.112531 2025] [:error] [pid 2996:tid 3010] [client 20.205.32.186:3091] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aUx2ParrTp0EWNyhaIR4zQAAAQw"]
[Thu Dec 25 07:24:45.766651 2025] [:error] [pid 31570:tid 31620] [client 20.205.32.186:3140] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aUx2PWPy2DpAzW_4a2i4PgAAAFQ"]
[Thu Dec 25 07:24:46.920566 2025] [:error] [pid 31655:tid 31660] [client 20.205.32.186:3109] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aUx2PpozPMk9HPtIJPMIqQAAAMM"]
[Thu Dec 25 07:24:47.511196 2025] [:error] [pid 2996:tid 3012] [client 20.205.32.186:3156] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aUx2P6rrTp0EWNyhaIR40gAAAQ4"]
[Thu Dec 25 07:24:48.463599 2025] [:error] [pid 31655:tid 31666] [client 20.205.32.186:3117] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aUx2QJozPMk9HPtIJPMIqgAAAMk"]
[Thu Dec 25 07:24:48.766781 2025] [:error] [pid 2996:tid 3010] [client 20.205.32.186:3490] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUx2QKrrTp0EWNyhaIR43AAAAQw"]
[Thu Dec 25 07:24:49.533273 2025] [:error] [pid 31569:tid 31577] [client 20.205.32.186:3615] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUx2QWiSFBH7Ee_uldUB6gAAAAQ"]
[Thu Dec 25 07:24:50.281438 2025] [:error] [pid 31570:tid 31618] [client 20.205.32.186:3128] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUx2QmPy2DpAzW_4a2i4QgAAAFI"]
[Thu Dec 25 07:24:51.079078 2025] [:error] [pid 31569:tid 31595] [client 20.205.32.186:3078] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aUx2Q2iSFBH7Ee_uldUB6wAAABY"]
[Thu Dec 25 07:24:51.676014 2025] [:error] [pid 31569:tid 31597] [client 20.205.32.186:3139] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aUx2Q2iSFBH7Ee_uldUB7gAAABg"]
[Thu Dec 25 07:24:52.053783 2025] [:error] [pid 31655:tid 31671] [client 20.205.32.186:3155] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aUx2RJozPMk9HPtIJPMIsQAAAM4"]
[Thu Dec 25 07:24:52.619534 2025] [:error] [pid 31569:tid 31575] [client 20.205.32.186:3505] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aUx2RGiSFBH7Ee_uldUB9AAAAAI"]
[Thu Dec 25 07:24:53.110022 2025] [:error] [pid 31570:tid 31622] [client 20.205.32.186:3120] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aUx2RWPy2DpAzW_4a2i4RAAAAFY"]
[Thu Dec 25 07:24:53.500883 2025] [:error] [pid 31655:tid 31658] [client 20.205.32.186:3126] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUx2RZozPMk9HPtIJPMIsgAAAME"]
[Thu Dec 25 07:24:53.921352 2025] [:error] [pid 2996:tid 3007] [client 20.205.32.186:3174] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUx2RarrTp0EWNyhaIR4_QAAAQk"]
[Thu Dec 25 07:24:54.250685 2025] [:error] [pid 31570:tid 31611] [client 20.205.32.186:3608] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUx2RmPy2DpAzW_4a2i4RgAAAEs"]
[Thu Dec 25 07:24:54.740636 2025] [:error] [pid 31571:tid 31646] [client 20.205.32.186:3510] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aUx2Ru7e_lLK2X5wU8kZwwAAAJM"]
[Thu Dec 25 07:24:55.161129 2025] [:error] [pid 31569:tid 31587] [client 20.205.32.186:3206] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUx2R2iSFBH7Ee_uldUB9QAAAA4"]
[Thu Dec 25 07:24:55.796554 2025] [:error] [pid 31571:tid 31650] [client 20.205.32.186:3491] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUx2R-7e_lLK2X5wU8kZxQAAAJc"]
[Thu Dec 25 07:24:56.896496 2025] [:error] [pid 31655:tid 31657] [client 20.205.32.186:3136] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUx2SJozPMk9HPtIJPMIuAAAAMA"]
[Thu Dec 25 07:24:57.497249 2025] [:error] [pid 31655:tid 31678] [client 20.205.32.186:3250] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aUx2SZozPMk9HPtIJPMIuQAAANU"]
[Thu Dec 25 07:24:58.106857 2025] [:error] [pid 31569:tid 31573] [client 20.205.32.186:3248] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUx2SmiSFBH7Ee_uldUB-gAAAAA"]
[Thu Dec 25 07:24:59.077733 2025] [:error] [pid 31571:tid 31628] [client 20.205.32.186:3195] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUx2S-7e_lLK2X5wU8kZywAAAIE"]
[Thu Dec 25 07:25:00.180605 2025] [:error] [pid 2996:tid 3000] [client 20.205.32.186:3151] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUx2TKrrTp0EWNyhaIR5HgAAAQI"]
[Thu Dec 25 07:25:00.580749 2025] [:error] [pid 2996:tid 3001] [client 20.205.32.186:3494] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUx2TKrrTp0EWNyhaIR5HwAAAQM"]
[Thu Dec 25 07:25:01.028008 2025] [:error] [pid 2996:tid 3020] [client 20.205.32.186:3145] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUx2TarrTp0EWNyhaIR5IQAAARY"]
[Thu Dec 25 07:25:01.341951 2025] [:error] [pid 2996:tid 3012] [client 20.205.32.186:3138] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUx2TarrTp0EWNyhaIR5IgAAAQ4"]
[Thu Dec 25 07:25:02.179002 2025] [:error] [pid 2996:tid 3022] [client 20.205.32.186:3507] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUx2TqrrTp0EWNyhaIR5JAAAARg"]
[Thu Dec 25 07:25:02.832979 2025] [:error] [pid 31655:tid 31671] [client 20.205.32.186:3596] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aUx2TpozPMk9HPtIJPMIwwAAAM4"]
[Thu Dec 25 07:25:03.648869 2025] [:error] [pid 31570:tid 31609] [client 20.205.32.186:3166] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aUx2T2Py2DpAzW_4a2i4TwAAAEk"]
[Thu Dec 25 07:25:04.031926 2025] [:error] [pid 2996:tid 3018] [client 20.205.32.186:3129] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aUx2UKrrTp0EWNyhaIR5JwAAARQ"]
[Thu Dec 25 07:25:04.568791 2025] [:error] [pid 31571:tid 31639] [client 20.205.32.186:3514] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aUx2UO7e_lLK2X5wU8kZ2AAAAIw"]
[Thu Dec 25 07:25:05.339065 2025] [:error] [pid 2996:tid 3000] [client 20.205.32.186:3262] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aUx2UarrTp0EWNyhaIR5KgAAAQI"]
[Thu Dec 25 07:25:05.949733 2025] [:error] [pid 31570:tid 31622] [client 20.205.32.186:3162] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aUx2UWPy2DpAzW_4a2i4UQAAAFY"]
[Thu Dec 25 07:25:06.357345 2025] [:error] [pid 2996:tid 3017] [client 20.205.32.186:3072] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aUx2UqrrTp0EWNyhaIR5LQAAARM"]
[Thu Dec 25 07:25:06.691033 2025] [:error] [pid 2996:tid 2998] [client 20.205.32.186:3481] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aUx2UqrrTp0EWNyhaIR5MAAAAQA"]
[Thu Dec 25 07:25:06.978213 2025] [:error] [pid 31655:tid 31677] [client 20.205.32.186:3158] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aUx2UpozPMk9HPtIJPMIyAAAANQ"]
[Thu Dec 25 07:25:07.357708 2025] [:error] [pid 2996:tid 3007] [client 20.205.32.186:3187] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aUx2U6rrTp0EWNyhaIR5MQAAAQk"]
[Thu Dec 25 07:25:07.899801 2025] [:error] [pid 2996:tid 3016] [client 20.205.32.186:3498] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aUx2U6rrTp0EWNyhaIR5MgAAARI"]
[Thu Dec 25 07:25:08.527846 2025] [:error] [pid 31571:tid 31649] [client 20.205.32.186:3511] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aUx2VO7e_lLK2X5wU8kZ2wAAAJY"]
[Thu Dec 25 07:25:08.935930 2025] [:error] [pid 31571:tid 31645] [client 20.205.32.186:3513] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aUx2VO7e_lLK2X5wU8kZ3AAAAJI"]
[Thu Dec 25 07:25:09.340118 2025] [:error] [pid 31571:tid 31632] [client 20.205.32.186:3163] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aUx2Ve7e_lLK2X5wU8kZ3QAAAIU"]
[Thu Dec 25 07:25:10.188010 2025] [:error] [pid 31569:tid 31597] [client 20.205.32.186:3159] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aUx2VmiSFBH7Ee_uldUCCAAAABg"]
[Thu Dec 25 07:25:10.693400 2025] [:error] [pid 31569:tid 31589] [client 20.205.32.186:3589] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aUx2VmiSFBH7Ee_uldUCCwAAABA"]
[Thu Dec 25 07:25:11.222509 2025] [:error] [pid 31571:tid 31648] [client 20.205.32.186:3604] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aUx2V-7e_lLK2X5wU8kZ4QAAAJU"]
[Thu Dec 25 07:25:11.620314 2025] [:error] [pid 31571:tid 31628] [client 20.205.32.186:3154] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUx2V-7e_lLK2X5wU8kZ4gAAAIE"]
[Thu Dec 25 07:25:12.091448 2025] [:error] [pid 31571:tid 31634] [client 20.205.32.186:3123] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUx2WO7e_lLK2X5wU8kZ5AAAAIc"]
[Thu Dec 25 07:25:13.170801 2025] [:error] [pid 2996:tid 3010] [client 20.205.32.186:3518] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUx2WarrTp0EWNyhaIR5OAAAAQw"]
[Thu Dec 25 07:25:13.556969 2025] [:error] [pid 31571:tid 31646] [client 20.205.32.186:3497] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUx2We7e_lLK2X5wU8kZ5wAAAJM"]
[Thu Dec 25 07:25:13.896943 2025] [:error] [pid 31570:tid 31615] [client 20.205.32.186:3233] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aUx2WWPy2DpAzW_4a2i4VAAAAE8"]
[Thu Dec 25 07:25:14.570620 2025] [:error] [pid 31571:tid 31647] [client 20.205.32.186:3107] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aUx2Wu7e_lLK2X5wU8kZ6QAAAJQ"]
[Thu Dec 25 07:25:15.148541 2025] [:error] [pid 2996:tid 3020] [client 20.205.32.186:3106] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aUx2W6rrTp0EWNyhaIR5OwAAARY"]
[Thu Dec 25 07:25:15.673956 2025] [:error] [pid 2996:tid 3017] [client 20.205.32.186:3148] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aUx2W6rrTp0EWNyhaIR5PgAAARM"]
[Thu Dec 25 07:25:16.813265 2025] [:error] [pid 31655:tid 31665] [client 20.205.32.186:3104] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aUx2XJozPMk9HPtIJPMIygAAAMg"]
[Thu Dec 25 07:25:17.886981 2025] [:error] [pid 31655:tid 31669] [client 20.205.32.186:3200] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aUx2XZozPMk9HPtIJPMIzAAAAMw"]
[Thu Dec 25 07:25:18.443978 2025] [:error] [pid 31571:tid 31645] [client 20.205.32.186:3127] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aUx2Xu7e_lLK2X5wU8kZ6wAAAJI"]
[Thu Dec 25 07:25:18.798158 2025] [:error] [pid 31569:tid 31586] [client 20.205.32.186:3211] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aUx2XmiSFBH7Ee_uldUCDAAAAA0"]
[Thu Dec 25 07:25:19.236957 2025] [:error] [pid 31571:tid 31632] [client 20.205.32.186:3164] [client 20.205.32.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUx2X-7e_lLK2X5wU8kZ7AAAAIU"]
[Thu Dec 25 07:25:19.526689 2025] [:error] [pid 31571:tid 31641] [client 20.205.32.186:3484] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aUx2X-7e_lLK2X5wU8kZ7QAAAI4"]
[Thu Dec 25 07:25:19.852067 2025] [:error] [pid 31569:tid 31581] [client 20.205.32.186:3113] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aUx2X2iSFBH7Ee_uldUCDgAAAAg"]
[Thu Dec 25 07:25:20.292647 2025] [:error] [pid 31569:tid 31588] [client 20.205.32.186:3479] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aUx2YGiSFBH7Ee_uldUCEAAAAA8"]
[Thu Dec 25 07:25:20.780295 2025] [:error] [pid 2996:tid 3009] [client 20.205.32.186:3147] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aUx2YKrrTp0EWNyhaIR5RQAAAQs"]
[Thu Dec 25 07:25:21.107864 2025] [:error] [pid 31569:tid 31597] [client 20.205.32.186:3105] [client 20.205.32.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUx2YWiSFBH7Ee_uldUCEwAAABg"]
[Thu Dec 25 07:25:21.438679 2025] [:error] [pid 31569:tid 31574] [client 20.205.32.186:3488] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aUx2YWiSFBH7Ee_uldUCFAAAAAE"]
[Thu Dec 25 07:25:21.885524 2025] [:error] [pid 31571:tid 31639] [client 20.205.32.186:3137] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aUx2Ye7e_lLK2X5wU8kZ7wAAAIw"]
[Thu Dec 25 07:25:22.446720 2025] [:error] [pid 31571:tid 31634] [client 20.205.32.186:3230] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aUx2Yu7e_lLK2X5wU8kZ8QAAAIc"]
[Thu Dec 25 07:25:22.704445 2025] [:error] [pid 31569:tid 31585] [client 20.205.32.186:3141] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aUx2YmiSFBH7Ee_uldUCFwAAAAw"]
[Thu Dec 25 07:25:23.191224 2025] [:error] [pid 2996:tid 3004] [client 20.205.32.186:3237] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aUx2Y6rrTp0EWNyhaIR5SQAAAQY"]
[Thu Dec 25 07:25:23.672686 2025] [:error] [pid 31571:tid 31638] [client 20.205.32.186:3110] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aUx2Y-7e_lLK2X5wU8kZ8wAAAIs"]
[Thu Dec 25 07:25:24.161720 2025] [:error] [pid 31570:tid 31602] [client 20.205.32.186:3168] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aUx2ZGPy2DpAzW_4a2i4XAAAAEI"]
[Thu Dec 25 07:25:24.760673 2025] [:error] [pid 2996:tid 3020] [client 20.205.32.186:3201] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUx2ZKrrTp0EWNyhaIR5SwAAARY"]
[Thu Dec 25 07:25:25.264257 2025] [:error] [pid 31570:tid 31601] [client 20.205.32.186:3232] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUx2ZWPy2DpAzW_4a2i4XQAAAEE"]
[Thu Dec 25 07:25:25.984019 2025] [:error] [pid 2996:tid 3001] [client 20.205.32.186:3190] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUx2ZarrTp0EWNyhaIR5TQAAAQM"]
[Thu Dec 25 07:25:26.479071 2025] [:error] [pid 2996:tid 3022] [client 20.205.32.186:3114] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aUx2ZqrrTp0EWNyhaIR5TwAAARg"]
[Thu Dec 25 07:25:26.869779 2025] [:error] [pid 2996:tid 3007] [client 20.205.32.186:3077] [client 20.205.32.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aUx2ZqrrTp0EWNyhaIR5UgAAAQk"]
[Thu Dec 25 07:25:27.339510 2025] [:error] [pid 31571:tid 31632] [client 20.205.32.186:3167] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aUx2Z-7e_lLK2X5wU8kZ-AAAAIU"]
[Thu Dec 25 07:25:27.901600 2025] [:error] [pid 31569:tid 31594] [client 20.205.32.186:3210] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aUx2Z2iSFBH7Ee_uldUCHAAAABU"]
[Thu Dec 25 07:25:28.414428 2025] [:error] [pid 31570:tid 31613] [client 20.205.32.186:3199] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aUx2aGPy2DpAzW_4a2i4YQAAAE0"]
[Thu Dec 25 07:25:29.204004 2025] [:error] [pid 31570:tid 31611] [client 20.205.32.186:3185] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aUx2aWPy2DpAzW_4a2i4YgAAAEs"]
[Thu Dec 25 07:25:29.697073 2025] [:error] [pid 31570:tid 31615] [client 20.205.32.186:3108] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUx2aWPy2DpAzW_4a2i4YwAAAE8"]
[Thu Dec 25 07:25:30.185986 2025] [:error] [pid 31571:tid 31633] [client 20.205.32.186:3191] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUx2au7e_lLK2X5wU8kZ_gAAAIY"]
[Thu Dec 25 07:25:31.151469 2025] [:error] [pid 31655:tid 31680] [client 20.205.32.186:3182] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUx2a5ozPMk9HPtIJPMI2gAAANc"]
[Thu Dec 25 07:25:31.720296 2025] [:error] [pid 31570:tid 31621] [client 20.205.32.186:3289] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUx2a2Py2DpAzW_4a2i4ZAAAAFU"]
[Thu Dec 25 07:25:32.690258 2025] [:error] [pid 31569:tid 31573] [client 20.205.32.186:3115] [client 20.205.32.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUx2bGiSFBH7Ee_uldUCHgAAAAA"]
[Thu Dec 25 07:25:33.341797 2025] [:error] [pid 31570:tid 31604] [client 20.205.32.186:3238] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aUx2bWPy2DpAzW_4a2i4ZwAAAEQ"]
[Thu Dec 25 07:25:33.873464 2025] [:error] [pid 31570:tid 31624] [client 20.205.32.186:3263] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aUx2bWPy2DpAzW_4a2i4aAAAAFg"]
[Thu Dec 25 07:25:34.758976 2025] [:error] [pid 31570:tid 31605] [client 20.205.32.186:3222] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aUx2bmPy2DpAzW_4a2i4bAAAAEU"]
[Thu Dec 25 07:25:35.197347 2025] [:error] [pid 31569:tid 31589] [client 20.205.32.186:3215] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aUx2b2iSFBH7Ee_uldUCIwAAABA"]
[Thu Dec 25 07:25:35.732336 2025] [:error] [pid 2996:tid 3002] [client 20.205.32.186:3227] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aUx2b6rrTp0EWNyhaIR5ZgAAAQQ"]
[Thu Dec 25 07:25:36.697134 2025] [:error] [pid 2996:tid 3016] [client 20.205.32.186:3246] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aUx2cKrrTp0EWNyhaIR5aAAAARI"]
[Thu Dec 25 07:25:37.490384 2025] [:error] [pid 31570:tid 31608] [client 20.205.32.186:3100] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aUx2cWPy2DpAzW_4a2i4bwAAAEg"]
[Thu Dec 25 07:25:38.123941 2025] [:error] [pid 31655:tid 31670] [client 20.205.32.186:3221] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aUx2cpozPMk9HPtIJPMJPAAAAM0"]
[Thu Dec 25 07:25:38.508389 2025] [:error] [pid 31570:tid 31607] [client 20.205.32.186:3175] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aUx2cmPy2DpAzW_4a2i4cAAAAEc"]
[Thu Dec 25 07:25:39.183759 2025] [:error] [pid 2996:tid 3002] [client 20.205.32.186:3614] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aUx2c6rrTp0EWNyhaIR5cAAAAQQ"]
[Thu Dec 25 07:25:39.653014 2025] [:error] [pid 31570:tid 31619] [client 20.205.32.186:3203] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aUx2c2Py2DpAzW_4a2i4cQAAAFM"]
[Thu Dec 25 07:25:40.324410 2025] [:error] [pid 2996:tid 3012] [client 20.205.32.186:3515] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aUx2dKrrTp0EWNyhaIR5cgAAAQ4"]
[Thu Dec 25 07:25:41.154386 2025] [:error] [pid 31571:tid 31639] [client 20.205.32.186:3242] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUx2de7e_lLK2X5wU8kaIgAAAIw"]
[Thu Dec 25 07:25:42.063839 2025] [proxy_fcgi:error] [pid 2996:tid 2998] [client 20.205.32.186:3217] AH01071: Got error 'Primary script unknown'
[Thu Dec 25 07:25:53.414567 2025] [autoindex:error] [pid 31571:tid 31641] [client 20.205.32.186:3218] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 07:25:54.641285 2025] [:error] [pid 31571:tid 31628] [client 20.205.32.186:3218] [client 20.205.32.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aUx2gu7e_lLK2X5wU8kaLwAAAIE"]
[Thu Dec 25 07:25:57.660931 2025] [autoindex:error] [pid 31655:tid 31676] [client 20.205.32.186:3144] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 25 07:26:04.462728 2025] [:error] [pid 31655:tid 31664] [client 20.205.32.186:3144] [client 20.205.32.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUx2jJozPMk9HPtIJPMJaQAAAMc"]
[Thu Dec 25 07:26:05.024565 2025] [:error] [pid 2996:tid 3013] [client 20.205.32.186:3161] [client 20.205.32.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aUx2jarrTp0EWNyhaIR5lAAAAQ8"]
[Thu Dec 25 07:26:05.508089 2025] [:error] [pid 31570:tid 31610] [client 20.205.32.186:3184] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aUx2jWPy2DpAzW_4a2i4fwAAAEo"]
[Thu Dec 25 07:26:06.107748 2025] [:error] [pid 31570:tid 31620] [client 20.205.32.186:3090] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aUx2jmPy2DpAzW_4a2i4gAAAAFQ"]
[Thu Dec 25 07:26:06.418974 2025] [:error] [pid 31570:tid 31618] [client 20.205.32.186:3178] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aUx2jmPy2DpAzW_4a2i4ggAAAFI"]
[Thu Dec 25 07:26:06.783703 2025] [:error] [pid 31655:tid 31665] [client 20.205.32.186:3501] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aUx2jpozPMk9HPtIJPMJawAAAMg"]
[Thu Dec 25 07:26:07.669259 2025] [:error] [pid 31569:tid 31594] [client 20.205.32.186:3276] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aUx2j2iSFBH7Ee_uldUCXQAAABU"]
[Thu Dec 25 07:26:08.395205 2025] [:error] [pid 31655:tid 31657] [client 20.205.32.186:3224] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aUx2kJozPMk9HPtIJPMJbAAAAMA"]
[Thu Dec 25 07:26:08.751188 2025] [:error] [pid 31655:tid 31672] [client 20.205.32.186:3255] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aUx2kJozPMk9HPtIJPMJbQAAAM8"]
[Thu Dec 25 07:26:09.218394 2025] [:error] [pid 31569:tid 31578] [client 20.205.32.186:3189] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aUx2kWiSFBH7Ee_uldUCYQAAAAU"]
[Thu Dec 25 07:26:09.744615 2025] [:error] [pid 2996:tid 3017] [client 20.205.32.186:3254] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aUx2karrTp0EWNyhaIR5nAAAARM"]
[Thu Dec 25 07:26:10.101957 2025] [:error] [pid 31655:tid 31668] [client 20.205.32.186:3165] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aUx2kpozPMk9HPtIJPMJcQAAAMs"]
[Thu Dec 25 07:26:10.454929 2025] [:error] [pid 2996:tid 3018] [client 20.205.32.186:3225] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aUx2kqrrTp0EWNyhaIR5nQAAARQ"]
[Thu Dec 25 07:26:10.999271 2025] [:error] [pid 2996:tid 2999] [client 20.205.32.186:3094] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aUx2kqrrTp0EWNyhaIR5oAAAAQE"]
[Thu Dec 25 07:26:11.411660 2025] [:error] [pid 2996:tid 3016] [client 20.205.32.186:3235] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aUx2k6rrTp0EWNyhaIR5pAAAARI"]
[Thu Dec 25 07:26:11.843871 2025] [:error] [pid 31570:tid 31607] [client 20.205.32.186:3171] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aUx2k2Py2DpAzW_4a2i4hwAAAEc"]
[Thu Dec 25 07:26:12.538878 2025] [:error] [pid 31655:tid 31681] [client 20.205.32.186:3257] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aUx2lJozPMk9HPtIJPMJcwAAANg"]
[Thu Dec 25 07:26:12.981654 2025] [:error] [pid 31569:tid 31595] [client 20.205.32.186:3229] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aUx2lGiSFBH7Ee_uldUCYwAAABY"]
[Thu Dec 25 07:26:13.453790 2025] [:error] [pid 2996:tid 3008] [client 20.205.32.186:3204] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aUx2larrTp0EWNyhaIR5qwAAAQo"]
[Thu Dec 25 07:26:14.032020 2025] [:error] [pid 31569:tid 31574] [client 20.205.32.186:3269] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aUx2lmiSFBH7Ee_uldUCZQAAAAE"]
[Thu Dec 25 07:26:14.328643 2025] [:error] [pid 31571:tid 31627] [client 20.205.32.186:3208] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aUx2lu7e_lLK2X5wU8kaQAAAAIA"]
[Thu Dec 25 07:26:14.698315 2025] [:error] [pid 31570:tid 31611] [client 20.205.32.186:3192] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUx2lmPy2DpAzW_4a2i4igAAAEs"]
[Thu Dec 25 07:26:15.317408 2025] [:error] [pid 31569:tid 31588] [client 20.205.32.186:12366] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUx2l2iSFBH7Ee_uldUCZgAAAA8"]
[Thu Dec 25 07:26:15.754074 2025] [:error] [pid 2996:tid 3006] [client 20.205.32.186:3312] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUx2l6rrTp0EWNyhaIR5rQAAAQg"]
[Thu Dec 25 07:26:16.388042 2025] [:error] [pid 31569:tid 31580] [client 20.205.32.186:3265] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aUx2mGiSFBH7Ee_uldUCZwAAAAc"]
[Thu Dec 25 07:26:16.768617 2025] [:error] [pid 31569:tid 31576] [client 20.205.32.186:3275] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aUx2mGiSFBH7Ee_uldUCaAAAAAM"]
[Thu Dec 25 07:26:17.124003 2025] [:error] [pid 31655:tid 31670] [client 20.205.32.186:3220] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aUx2mZozPMk9HPtIJPMJeAAAAM0"]
[Thu Dec 25 07:26:17.512588 2025] [:error] [pid 31570:tid 31621] [client 20.205.32.186:3228] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aUx2mWPy2DpAzW_4a2i4jAAAAFU"]
[Thu Dec 25 07:26:17.909077 2025] [:error] [pid 31570:tid 31610] [client 20.205.32.186:3477] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aUx2mWPy2DpAzW_4a2i4jQAAAEo"]
[Thu Dec 25 07:26:18.304176 2025] [:error] [pid 31569:tid 31579] [client 20.205.32.186:3236] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aUx2mmiSFBH7Ee_uldUCaQAAAAY"]
[Thu Dec 25 07:26:18.744785 2025] [:error] [pid 31571:tid 31635] [client 20.205.32.186:3622] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aUx2mu7e_lLK2X5wU8kaRgAAAIg"]
[Thu Dec 25 07:26:19.280614 2025] [:error] [pid 2996:tid 3014] [client 20.205.32.186:3209] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aUx2m6rrTp0EWNyhaIR5tgAAARA"]
[Thu Dec 25 07:26:19.738132 2025] [:error] [pid 2996:tid 3020] [client 20.205.32.186:3304] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aUx2m6rrTp0EWNyhaIR5vwAAARY"]
[Thu Dec 25 07:26:20.286942 2025] [:error] [pid 31569:tid 31591] [client 20.205.32.186:3132] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aUx2nGiSFBH7Ee_uldUCeAAAABI"]
[Thu Dec 25 07:26:20.789415 2025] [:error] [pid 31571:tid 31648] [client 20.205.32.186:3244] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aUx2nO7e_lLK2X5wU8kaSQAAAJU"]
[Thu Dec 25 07:26:21.201406 2025] [:error] [pid 31571:tid 31628] [client 20.205.32.186:3216] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aUx2ne7e_lLK2X5wU8kaSwAAAIE"]
[Thu Dec 25 07:26:21.514817 2025] [:error] [pid 31571:tid 31650] [client 20.205.32.186:3493] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aUx2ne7e_lLK2X5wU8kaTgAAAJc"]
[Thu Dec 25 07:26:21.857449 2025] [:error] [pid 2996:tid 3014] [client 20.205.32.186:3306] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aUx2narrTp0EWNyhaIR5xwAAARA"]
[Thu Dec 25 07:26:22.210003 2025] [:error] [pid 31569:tid 31578] [client 20.205.32.186:3519] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aUx2nmiSFBH7Ee_uldUCfgAAAAU"]
[Thu Dec 25 07:26:22.643154 2025] [:error] [pid 2996:tid 3000] [client 20.205.32.186:3239] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aUx2nqrrTp0EWNyhaIR5yQAAAQI"]
[Thu Dec 25 07:26:23.043837 2025] [:error] [pid 31569:tid 31585] [client 20.205.32.186:3131] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aUx2n2iSFBH7Ee_uldUCgQAAAAw"]
[Thu Dec 25 07:26:23.396759 2025] [:error] [pid 31571:tid 31637] [client 20.205.32.186:3157] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aUx2n-7e_lLK2X5wU8kaUgAAAIo"]
[Thu Dec 25 07:26:23.712298 2025] [:error] [pid 31571:tid 31629] [client 20.205.32.186:3309] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aUx2n-7e_lLK2X5wU8kaUwAAAII"]
[Thu Dec 25 07:26:24.031589 2025] [:error] [pid 31571:tid 31631] [client 20.205.32.186:3286] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aUx2oO7e_lLK2X5wU8kaVAAAAIQ"]
[Thu Dec 25 07:26:24.410046 2025] [:error] [pid 31569:tid 31574] [client 20.205.32.186:3223] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aUx2oGiSFBH7Ee_uldUCggAAAAE"]
[Thu Dec 25 07:26:24.795731 2025] [:error] [pid 31655:tid 31665] [client 20.205.32.186:3172] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aUx2oJozPMk9HPtIJPMJiQAAAMg"]
[Thu Dec 25 07:26:25.465658 2025] [:error] [pid 31571:tid 31651] [client 20.205.32.186:3214] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aUx2oe7e_lLK2X5wU8kaVwAAAJg"]
[Thu Dec 25 07:26:25.814982 2025] [:error] [pid 2996:tid 3002] [client 20.205.32.186:3173] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aUx2oarrTp0EWNyhaIR5zAAAAQQ"]
[Thu Dec 25 07:26:26.437207 2025] [:error] [pid 2996:tid 3011] [client 20.205.32.186:12372] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aUx2oqrrTp0EWNyhaIR5zgAAAQ0"]
[Thu Dec 25 07:26:26.940274 2025] [:error] [pid 31655:tid 31666] [client 20.205.32.186:3277] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUx2opozPMk9HPtIJPMJjAAAAMk"]
[Thu Dec 25 07:26:27.250172 2025] [:error] [pid 31655:tid 31681] [client 20.205.32.186:12370] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUx2o5ozPMk9HPtIJPMJjQAAANg"]
[Thu Dec 25 07:26:27.778752 2025] [:error] [pid 31569:tid 31584] [client 20.205.32.186:3603] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUx2o2iSFBH7Ee_uldUChQAAAAs"]
[Thu Dec 25 07:26:28.177608 2025] [:error] [pid 31569:tid 31596] [client 20.205.32.186:3259] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aUx2pGiSFBH7Ee_uldUChgAAABc"]
[Thu Dec 25 07:26:28.591490 2025] [:error] [pid 2996:tid 3018] [client 20.205.32.186:3194] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aUx2pKrrTp0EWNyhaIR53wAAARQ"]
[Thu Dec 25 07:26:28.913447 2025] [:error] [pid 31569:tid 31589] [client 20.205.32.186:3310] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aUx2pGiSFBH7Ee_uldUCiQAAABA"]
[Thu Dec 25 07:26:29.343493 2025] [:error] [pid 31569:tid 31593] [client 20.205.32.186:3293] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aUx2pWiSFBH7Ee_uldUCiwAAABQ"]
[Thu Dec 25 07:26:29.664876 2025] [:error] [pid 31569:tid 31575] [client 20.205.32.186:3193] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aUx2pWiSFBH7Ee_uldUCjQAAAAI"]
[Thu Dec 25 07:26:30.056186 2025] [:error] [pid 31569:tid 31580] [client 20.205.32.186:3176] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aUx2pmiSFBH7Ee_uldUCjwAAAAc"]
[Thu Dec 25 07:26:30.456819 2025] [:error] [pid 31569:tid 31577] [client 20.205.32.186:3291] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aUx2pmiSFBH7Ee_uldUClQAAAAQ"]
[Thu Dec 25 07:26:30.932619 2025] [:error] [pid 31569:tid 31594] [client 20.205.32.186:3315] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aUx2pmiSFBH7Ee_uldUCmwAAABU"]
[Thu Dec 25 07:26:31.267425 2025] [:error] [pid 31570:tid 31609] [client 20.205.32.186:3313] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aUx2p2Py2DpAzW_4a2i4kgAAAEk"]
[Thu Dec 25 07:26:31.763331 2025] [:error] [pid 31571:tid 31643] [client 20.205.32.186:3594] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aUx2p-7e_lLK2X5wU8kaXQAAAJA"]
[Thu Dec 25 07:26:32.376467 2025] [:error] [pid 2996:tid 3014] [client 20.205.32.186:3170] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aUx2qKrrTp0EWNyhaIR54QAAARA"]
[Thu Dec 25 07:26:32.677413 2025] [:error] [pid 31569:tid 31591] [client 20.205.32.186:3234] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aUx2qGiSFBH7Ee_uldUCoQAAABI"]
[Thu Dec 25 07:26:33.266356 2025] [:error] [pid 31571:tid 31633] [client 20.205.32.186:3261] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aUx2qe7e_lLK2X5wU8kaYgAAAIY"]
[Thu Dec 25 07:26:33.809648 2025] [:error] [pid 31569:tid 31579] [client 20.205.32.186:3130] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aUx2qWiSFBH7Ee_uldUCowAAAAY"]
[Thu Dec 25 07:26:34.203034 2025] [:error] [pid 31655:tid 31669] [client 20.205.32.186:3152] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aUx2qpozPMk9HPtIJPMJlQAAAMw"]
[Thu Dec 25 07:26:34.523408 2025] [:error] [pid 31570:tid 31602] [client 20.205.32.186:3280] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aUx2qmPy2DpAzW_4a2i4lgAAAEI"]
[Thu Dec 25 07:26:34.844040 2025] [:error] [pid 31655:tid 31680] [client 20.205.32.186:12311] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aUx2qpozPMk9HPtIJPMJmQAAANc"]
[Thu Dec 25 07:26:35.295254 2025] [:error] [pid 31655:tid 31666] [client 20.205.32.186:3252] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aUx2q5ozPMk9HPtIJPMJnQAAAMk"]
[Thu Dec 25 07:26:35.628942 2025] [:error] [pid 31570:tid 31607] [client 20.205.32.186:3135] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aUx2q2Py2DpAzW_4a2i4mAAAAEc"]
[Thu Dec 25 07:26:36.304732 2025] [:error] [pid 31655:tid 31679] [client 20.205.32.186:3202] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aUx2rJozPMk9HPtIJPMJnwAAANY"]
[Thu Dec 25 07:26:36.712748 2025] [:error] [pid 31571:tid 31647] [client 20.205.32.186:3118] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aUx2rO7e_lLK2X5wU8kaZgAAAJQ"]
[Thu Dec 25 07:26:37.054707 2025] [:error] [pid 31571:tid 31627] [client 20.205.32.186:3207] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUx2re7e_lLK2X5wU8kaZwAAAIA"]
[Thu Dec 25 07:26:37.587596 2025] [:error] [pid 31569:tid 31578] [client 20.205.32.186:3086] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUx2rWiSFBH7Ee_uldUCqAAAAAU"]
[Thu Dec 25 07:26:37.973547 2025] [:error] [pid 31655:tid 31670] [client 20.205.32.186:3308] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUx2rZozPMk9HPtIJPMJpAAAAM0"]
[Thu Dec 25 07:26:38.608791 2025] [:error] [pid 31655:tid 31680] [client 20.205.32.186:3299] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aUx2rpozPMk9HPtIJPMJqwAAANc"]
[Thu Dec 25 07:26:38.953766 2025] [:error] [pid 31655:tid 31668] [client 20.205.32.186:3251] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aUx2rpozPMk9HPtIJPMJrQAAAMs"]
[Thu Dec 25 07:26:39.264720 2025] [:error] [pid 31570:tid 31620] [client 20.205.32.186:3256] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aUx2r2Py2DpAzW_4a2i4owAAAFQ"]
[Thu Dec 25 07:26:39.608979 2025] [:error] [pid 31655:tid 31671] [client 20.205.32.186:3294] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aUx2r5ozPMk9HPtIJPMJrwAAAM4"]
[Thu Dec 25 07:26:40.163378 2025] [:error] [pid 31569:tid 31580] [client 20.205.32.186:12397] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aUx2sGiSFBH7Ee_uldUCqwAAAAc"]
[Thu Dec 25 07:26:40.421230 2025] [:error] [pid 31655:tid 31661] [client 20.205.32.186:3292] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aUx2sJozPMk9HPtIJPMJsQAAAMQ"]
[Thu Dec 25 07:26:40.960653 2025] [:error] [pid 31655:tid 31678] [client 20.205.32.186:3186] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aUx2sJozPMk9HPtIJPMJtAAAANU"]
[Thu Dec 25 07:26:41.405153 2025] [:error] [pid 31655:tid 31664] [client 20.205.32.186:3205] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aUx2sZozPMk9HPtIJPMJtQAAAMc"]
[Thu Dec 25 07:26:41.930717 2025] [:error] [pid 31569:tid 31595] [client 20.205.32.186:3314] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aUx2sWiSFBH7Ee_uldUCsgAAABY"]
[Thu Dec 25 07:26:42.612454 2025] [:error] [pid 31569:tid 31590] [client 20.205.32.186:3324] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aUx2smiSFBH7Ee_uldUCtAAAABE"]
[Thu Dec 25 07:26:43.128423 2025] [:error] [pid 31570:tid 31619] [client 20.205.32.186:12347] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aUx2s2Py2DpAzW_4a2i4qwAAAFM"]
[Thu Dec 25 07:26:43.409154 2025] [:error] [pid 31569:tid 31579] [client 20.205.32.186:3258] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aUx2s2iSFBH7Ee_uldUCtwAAAAY"]
[Thu Dec 25 07:26:43.847187 2025] [:error] [pid 31569:tid 31578] [client 20.205.32.186:3320] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aUx2s2iSFBH7Ee_uldUCuQAAAAU"]
[Thu Dec 25 07:26:44.589434 2025] [:error] [pid 31569:tid 31575] [client 20.205.32.186:3249] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUx2tGiSFBH7Ee_uldUCvAAAAAI"]
[Thu Dec 25 07:26:45.165972 2025] [:error] [pid 31571:tid 31646] [client 20.205.32.186:12405] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUx2te7e_lLK2X5wU8kaawAAAJM"]
[Thu Dec 25 07:26:45.631512 2025] [:error] [pid 31570:tid 31610] [client 20.205.32.186:3198] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUx2tWPy2DpAzW_4a2i4rwAAAEo"]
[Thu Dec 25 07:26:46.009096 2025] [:error] [pid 31570:tid 31613] [client 20.205.32.186:3124] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUx2tmPy2DpAzW_4a2i4sQAAAE0"]
[Thu Dec 25 07:26:46.453215 2025] [:error] [pid 31569:tid 31588] [client 20.205.32.186:3219] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aUx2tmiSFBH7Ee_uldUCwAAAAA8"]
[Thu Dec 25 07:26:46.811203 2025] [:error] [pid 31569:tid 31584] [client 20.205.32.186:3298] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aUx2tmiSFBH7Ee_uldUCwQAAAAs"]
[Thu Dec 25 07:26:47.209860 2025] [:error] [pid 31569:tid 31590] [client 20.205.32.186:3213] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aUx2t2iSFBH7Ee_uldUCxAAAABE"]
[Thu Dec 25 07:26:47.719689 2025] [:error] [pid 31569:tid 31594] [client 20.205.32.186:3196] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aUx2t2iSFBH7Ee_uldUCxwAAABU"]
[Thu Dec 25 07:26:48.023819 2025] [:error] [pid 2996:tid 3001] [client 20.205.32.186:3316] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aUx2uKrrTp0EWNyhaIR58AAAAQM"]
[Thu Dec 25 07:26:48.318835 2025] [:error] [pid 31569:tid 31576] [client 20.205.32.186:3149] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aUx2uGiSFBH7Ee_uldUCzQAAAAM"]
[Thu Dec 25 07:26:48.810760 2025] [:error] [pid 31569:tid 31586] [client 20.205.32.186:3212] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aUx2uGiSFBH7Ee_uldUC0AAAAA0"]
[Thu Dec 25 07:26:49.189748 2025] [:error] [pid 2996:tid 3007] [client 20.205.32.186:12291] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aUx2uarrTp0EWNyhaIR58wAAAQk"]
[Thu Dec 25 07:26:49.896606 2025] [:error] [pid 31571:tid 31642] [client 20.205.32.186:3272] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUx2ue7e_lLK2X5wU8kabgAAAI8"]
[Thu Dec 25 07:26:50.154105 2025] [:error] [pid 31571:tid 31643] [client 20.205.32.186:3295] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUx2uu7e_lLK2X5wU8kacQAAAJA"]
[Thu Dec 25 07:26:50.489424 2025] [:error] [pid 2996:tid 3009] [client 20.205.32.186:12290] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUx2uqrrTp0EWNyhaIR59wAAAQs"]
[Thu Dec 25 07:26:50.813353 2025] [:error] [pid 31569:tid 31595] [client 20.205.32.186:3274] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aUx2umiSFBH7Ee_uldUC2QAAABY"]
[Thu Dec 25 07:26:51.386879 2025] [:error] [pid 31569:tid 31583] [client 20.205.32.186:12365] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aUx2u2iSFBH7Ee_uldUC3AAAAAo"]
[Thu Dec 25 07:26:51.905647 2025] [:error] [pid 31570:tid 31624] [client 20.205.32.186:3245] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aUx2u2Py2DpAzW_4a2i4sgAAAFg"]
[Thu Dec 25 07:26:52.262161 2025] [:error] [pid 31570:tid 31620] [client 20.205.32.186:12385] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aUx2vGPy2DpAzW_4a2i4swAAAFQ"]
[Thu Dec 25 07:26:52.665394 2025] [:error] [pid 2996:tid 3004] [client 20.205.32.186:3326] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aUx2vKrrTp0EWNyhaIR5_AAAAQY"]
[Thu Dec 25 07:26:53.124239 2025] [:error] [pid 31569:tid 31581] [client 20.205.32.186:3270] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aUx2vWiSFBH7Ee_uldUC3gAAAAg"]
[Thu Dec 25 07:26:53.570934 2025] [:error] [pid 2996:tid 3007] [client 20.205.32.186:3284] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aUx2varrTp0EWNyhaIR6AAAAAQk"]
[Thu Dec 25 07:26:53.929016 2025] [:error] [pid 31571:tid 31633] [client 20.205.32.186:3301] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aUx2ve7e_lLK2X5wU8kadgAAAIY"]
[Thu Dec 25 07:26:54.268974 2025] [:error] [pid 31571:tid 31635] [client 20.205.32.186:3197] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aUx2vu7e_lLK2X5wU8kaeAAAAIg"]
[Thu Dec 25 07:26:54.767292 2025] [:error] [pid 2996:tid 3002] [client 20.205.32.186:3288] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aUx2vqrrTp0EWNyhaIR6CAAAAQQ"]
[Thu Dec 25 07:26:55.048708 2025] [:error] [pid 31655:tid 31661] [client 20.205.32.186:12380] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aUx2v5ozPMk9HPtIJPMJwgAAAMQ"]
[Thu Dec 25 07:26:55.623628 2025] [:error] [pid 2996:tid 3007] [client 20.205.32.186:12352] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aUx2v6rrTp0EWNyhaIR6DgAAAQk"]
[Thu Dec 25 07:26:56.204885 2025] [:error] [pid 31569:tid 31597] [client 20.205.32.186:12333] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aUx2wGiSFBH7Ee_uldUC5QAAABg"]
[Thu Dec 25 07:26:56.897285 2025] [:error] [pid 2996:tid 3011] [client 20.205.32.186:12375] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aUx2wKrrTp0EWNyhaIR6FAAAAQ0"]
[Thu Dec 25 07:26:57.314008 2025] [:error] [pid 2996:tid 3010] [client 20.205.32.186:3321] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aUx2warrTp0EWNyhaIR6FQAAAQw"]
[Thu Dec 25 07:26:57.713185 2025] [:error] [pid 31569:tid 31589] [client 20.205.32.186:3307] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aUx2wWiSFBH7Ee_uldUC6wAAABA"]
[Thu Dec 25 07:26:57.975517 2025] [:error] [pid 31569:tid 31576] [client 20.205.32.186:3231] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aUx2wWiSFBH7Ee_uldUC7QAAAAM"]
[Thu Dec 25 07:26:58.341011 2025] [:error] [pid 31655:tid 31660] [client 20.205.32.186:3177] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aUx2wpozPMk9HPtIJPMJxAAAAMM"]
[Thu Dec 25 07:26:58.759413 2025] [:error] [pid 31655:tid 31677] [client 20.205.32.186:3287] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aUx2wpozPMk9HPtIJPMJxQAAANQ"]
[Thu Dec 25 07:26:59.100734 2025] [:error] [pid 31569:tid 31574] [client 20.205.32.186:3271] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aUx2w2iSFBH7Ee_uldUC8wAAAAE"]
[Thu Dec 25 07:26:59.604270 2025] [:error] [pid 2996:tid 3005] [client 20.205.32.186:12369] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aUx2w6rrTp0EWNyhaIR6GAAAAQc"]
[Thu Dec 25 07:27:00.046005 2025] [:error] [pid 31655:tid 31669] [client 20.205.32.186:3282] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUx2xJozPMk9HPtIJPMJywAAAMw"]
[Thu Dec 25 07:27:00.462287 2025] [:error] [pid 2996:tid 3004] [client 20.205.32.186:12406] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUx2xKrrTp0EWNyhaIR6GgAAAQY"]
[Thu Dec 25 07:27:00.995508 2025] [:error] [pid 2996:tid 2999] [client 20.205.32.186:12403] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUx2xKrrTp0EWNyhaIR6HQAAAQE"]
[Thu Dec 25 07:27:01.365735 2025] [:error] [pid 31570:tid 31603] [client 20.205.32.186:3322] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aUx2xWPy2DpAzW_4a2i4ugAAAEM"]
[Thu Dec 25 07:27:01.783604 2025] [:error] [pid 31571:tid 31651] [client 20.205.32.186:3325] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUx2xe7e_lLK2X5wU8kaigAAAJg"]
[Thu Dec 25 07:27:02.143697 2025] [:error] [pid 31571:tid 31636] [client 20.205.32.186:3253] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUx2xu7e_lLK2X5wU8kajQAAAIk"]
[Thu Dec 25 07:27:02.621048 2025] [:error] [pid 31571:tid 31642] [client 20.205.32.186:12374] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUx2xu7e_lLK2X5wU8kajwAAAI8"]
[Thu Dec 25 07:27:02.930505 2025] [:error] [pid 31571:tid 31638] [client 20.205.32.186:3111] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aUx2xu7e_lLK2X5wU8kakQAAAIs"]
[Thu Dec 25 07:27:15.073318 2025] [:error] [pid 31571:tid 31646] [client 20.205.32.186:4049] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aUx20-7e_lLK2X5wU8kargAAAJM"]
[Thu Dec 25 07:27:15.850191 2025] [:error] [pid 31655:tid 31660] [client 20.205.32.186:3302] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aUx205ozPMk9HPtIJPMJ3gAAAMM"]
[Thu Dec 25 07:27:16.211008 2025] [:error] [pid 31570:tid 31620] [client 20.205.32.186:12297] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aUx21GPy2DpAzW_4a2i4xAAAAFQ"]
[Thu Dec 25 07:27:16.725603 2025] [:error] [pid 31571:tid 31644] [client 20.205.32.186:3267] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aUx21O7e_lLK2X5wU8kasgAAAJE"]
[Thu Dec 25 07:27:17.267498 2025] [:error] [pid 31569:tid 31587] [client 20.205.32.186:3305] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aUx21WiSFBH7Ee_uldUDGQAAAA4"]
[Thu Dec 25 07:27:17.785053 2025] [:error] [pid 31571:tid 31629] [client 20.205.32.186:12394] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aUx21e7e_lLK2X5wU8katAAAAII"]
[Thu Dec 25 07:27:18.207721 2025] [:error] [pid 31655:tid 31663] [client 20.205.32.186:12321] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aUx21pozPMk9HPtIJPMJ4gAAAMY"]
[Thu Dec 25 07:27:18.557774 2025] [:error] [pid 31569:tid 31595] [client 20.205.32.186:3181] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aUx21miSFBH7Ee_uldUDGwAAABY"]
[Thu Dec 25 07:27:18.967294 2025] [:error] [pid 2996:tid 3008] [client 20.205.32.186:12413] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aUx21qrrTp0EWNyhaIR6QAAAAQo"]
[Thu Dec 25 07:27:19.537590 2025] [:error] [pid 31655:tid 31669] [client 20.205.32.186:3264] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aUx215ozPMk9HPtIJPMJ5QAAAMw"]
[Thu Dec 25 07:27:19.860939 2025] [:error] [pid 31655:tid 31678] [client 20.205.32.186:12323] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aUx215ozPMk9HPtIJPMJ5gAAANU"]
[Thu Dec 25 07:27:20.172103 2025] [:error] [pid 31570:tid 31618] [client 20.205.32.186:3283] [client 20.205.32.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aUx22GPy2DpAzW_4a2i4xwAAAFI"]
[Thu Dec 25 07:31:44.482000 2025] [:error] [pid 31569:tid 31579] [client 182.44.2.148:56502] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUx34GiSFBH7Ee_uldUEfgAAAAY"]
[Thu Dec 25 10:08:50.984991 2025] [:error] [pid 31571:tid 31642] [client 74.208.59.165:46374] [client 74.208.59.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.59.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUycsu7e_lLK2X5wU8k8-QAAAI8"]
[Thu Dec 25 10:08:57.386080 2025] [:error] [pid 31569:tid 31573] [client 74.208.59.165:46386] [client 74.208.59.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.59.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aUycuWiSFBH7Ee_uldUznQAAAAA"]
[Thu Dec 25 13:45:43.376946 2025] [:error] [pid 2996:tid 2998] [client 36.41.75.167:34218] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUzPh6rrTp0EWNyhaITcXQAAAQA"]
[Thu Dec 25 15:24:25.903289 2025] [:error] [pid 31655:tid 31661] [client 43.155.26.193:46970] [client 43.155.26.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aUzmqZozPMk9HPtIJPNliAAAAMQ"]
[Thu Dec 25 18:02:59.401938 2025] [:error] [pid 31571:tid 31648] [client 103.173.66.99:65094] [client 103.173.66.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aU0L0-7e_lLK2X5wU8mpgwAAAJU"]
[Thu Dec 25 18:03:24.844662 2025] [:error] [pid 2996:tid 3000] [client 89.46.106.139:37646] [client 89.46.106.139] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aU0L7KrrTp0EWNyhaIQ5wAAAAQI"]
[Thu Dec 25 18:04:45.575287 2025] [:error] [pid 31569:tid 31587] [client 172.232.190.238:41626] [client 172.232.190.238] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aU0MPWiSFBH7Ee_uldXFWQAAAA4"]
[Thu Dec 25 18:05:57.690603 2025] [:error] [pid 31569:tid 31577] [client 18.190.166.106:35314] [client 18.190.166.106] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aU0MhWiSFBH7Ee_uldXGVAAAAAQ"]
[Thu Dec 25 18:06:34.458698 2025] [:error] [pid 31655:tid 31663] [client 35.236.126.130:60276] [client 35.236.126.130] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aU0MqpozPMk9HPtIJPONKgAAAMY"]
[Thu Dec 25 18:06:57.726850 2025] [:error] [pid 31569:tid 31583] [client 65.181.116.151:48064] [client 65.181.116.151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aU0MwWiSFBH7Ee_uldXGhgAAAAo"]
[Thu Dec 25 18:08:11.992028 2025] [:error] [pid 31570:tid 31605] [client 69.48.205.45:48178] [client 69.48.205.45] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aU0NC2Py2DpAzW_4a2g1EQAAAEU"]
[Thu Dec 25 19:16:10.920981 2025] [:error] [pid 64820:tid 64837] [client 43.157.181.189:39934] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aU0c-sSuTdTvkipi5408PAAAAU0"]
[Thu Dec 25 20:35:02.957611 2025] [:error] [pid 64820:tid 64838] [client 174.138.85.139:55019] [client 174.138.85.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aU0vdsSuTdTvkipi541WIwAAAU4"], referer: binance.com
[Thu Dec 25 22:49:24.132172 2025] [:error] [pid 22044:tid 22075] [client 20.205.126.183:36219] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aU1O9HPTC5rQKTB0FQ-t4AAAAMA"]
[Thu Dec 25 22:49:28.914043 2025] [:error] [pid 22044:tid 22092] [client 20.205.126.183:32709] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aU1O-HPTC5rQKTB0FQ-t4gAAANE"]
[Thu Dec 25 22:49:32.795021 2025] [:error] [pid 27869:tid 27873] [client 20.205.126.183:32751] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aU1O_BNK7_n86kBD7qfsowAAAII"]
[Thu Dec 25 22:49:38.515087 2025] [:error] [pid 27869:tid 27889] [client 20.205.126.183:41026] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aU1PAhNK7_n86kBD7qfspgAAAJI"]
[Thu Dec 25 22:49:39.668579 2025] [:error] [pid 22131:tid 22148] [client 20.205.126.183:32727] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aU1PA5vVMtSTB4lX2fZB0AAAAE0"]
[Thu Dec 25 22:49:44.882967 2025] [:error] [pid 22131:tid 22158] [client 20.205.126.183:32956] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aU1PCJvVMtSTB4lX2fZB0wAAAFY"]
[Thu Dec 25 22:49:46.311841 2025] [:error] [pid 22131:tid 22135] [client 20.205.126.183:41072] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aU1PCpvVMtSTB4lX2fZB1QAAAEI"]
[Thu Dec 25 22:49:48.662191 2025] [:error] [pid 22043:tid 22064] [client 20.205.126.183:32737] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aU1PDD4YVtlb2Iz_QE5dNQAAABA"]
[Thu Dec 25 22:49:50.285402 2025] [:error] [pid 22045:tid 22108] [client 20.205.126.183:28924] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aU1PDqsGGmXjDnvlmHt5lAAAAUY"]
[Thu Dec 25 22:49:52.101716 2025] [:error] [pid 27869:tid 27882] [client 20.205.126.183:32757] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aU1PEBNK7_n86kBD7qfsuAAAAIs"]
[Thu Dec 25 22:49:56.494621 2025] [:error] [pid 22043:tid 22055] [client 20.205.126.183:40971] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aU1PFD4YVtlb2Iz_QE5dPQAAAAc"]
[Thu Dec 25 22:50:00.473648 2025] [:error] [pid 22043:tid 22061] [client 20.205.126.183:28491] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aU1PGD4YVtlb2Iz_QE5dQwAAAA0"]
[Thu Dec 25 22:50:01.423068 2025] [:error] [pid 27869:tid 27871] [client 20.205.126.183:41411] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin.php"] [unique_id "aU1PGRNK7_n86kBD7qfswQAAAIA"]
[Thu Dec 25 22:50:02.804415 2025] [:error] [pid 22045:tid 22116] [client 20.205.126.183:28536] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin.php"] [unique_id "aU1PGqsGGmXjDnvlmHt5mwAAAU4"]
[Thu Dec 25 22:50:06.748609 2025] [:error] [pid 22131:tid 22155] [client 20.205.126.183:40973] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin.php"] [unique_id "aU1PHpvVMtSTB4lX2fZB4QAAAFM"]
[Thu Dec 25 22:50:08.347692 2025] [:error] [pid 27869:tid 27874] [client 20.205.126.183:35363] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin.php"] [unique_id "aU1PIBNK7_n86kBD7qfszgAAAIM"]
[Thu Dec 25 22:50:09.846520 2025] [:error] [pid 22045:tid 22111] [client 20.205.126.183:28519] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aU1PIasGGmXjDnvlmHt5nwAAAUk"]
[Thu Dec 25 22:50:10.805416 2025] [:error] [pid 22044:tid 22092] [client 20.205.126.183:41412] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aU1PInPTC5rQKTB0FQ-t-QAAANE"]
[Thu Dec 25 22:50:21.984770 2025] [:error] [pid 27869:tid 27874] [client 20.205.126.183:28497] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aU1PLRNK7_n86kBD7qfs4AAAAIM"]
[Thu Dec 25 22:50:22.809246 2025] [:error] [pid 22044:tid 22084] [client 20.205.126.183:40024] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aU1PLnPTC5rQKTB0FQ-uBAAAAMk"]
[Thu Dec 25 22:50:38.893410 2025] [:error] [pid 22043:tid 22065] [client 20.205.126.183:40982] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aU1PPj4YVtlb2Iz_QE5daAAAABE"]
[Thu Dec 25 22:50:40.569962 2025] [:error] [pid 27869:tid 27875] [client 20.205.126.183:32925] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aU1PQBNK7_n86kBD7qfs-wAAAIQ"]
[Thu Dec 25 22:50:44.784896 2025] [:error] [pid 22043:tid 22055] [client 20.205.126.183:36196] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aU1PRD4YVtlb2Iz_QE5dcQAAAAc"]
[Thu Dec 25 22:50:46.167966 2025] [:error] [pid 22131:tid 22136] [client 20.205.126.183:35358] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aU1PRpvVMtSTB4lX2fZB-QAAAEM"]
[Thu Dec 25 22:50:48.967622 2025] [:error] [pid 22131:tid 22139] [client 20.205.126.183:28917] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aU1PSJvVMtSTB4lX2fZB_AAAAEU"]
[Thu Dec 25 22:50:52.108072 2025] [:error] [pid 22044:tid 22096] [client 20.205.126.183:41007] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aU1PTHPTC5rQKTB0FQ-uGQAAANU"]
[Thu Dec 25 22:51:01.035040 2025] [:error] [pid 22044:tid 22098] [client 20.205.126.183:35378] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aU1PVXPTC5rQKTB0FQ-uIQAAANc"]
[Thu Dec 25 22:51:04.461607 2025] [:error] [pid 22044:tid 22092] [client 20.205.126.183:13130] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aU1PWHPTC5rQKTB0FQ-uJgAAANE"]
[Thu Dec 25 22:51:11.593120 2025] [:error] [pid 27869:tid 27895] [client 20.205.126.183:34792] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aU1PXxNK7_n86kBD7qftNgAAAJg"]
[Thu Dec 25 22:51:26.888156 2025] [:error] [pid 22131:tid 22134] [client 20.205.126.183:12966] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aU1PbpvVMtSTB4lX2fZCHgAAAEE"]
[Thu Dec 25 22:51:33.731225 2025] [:error] [pid 22131:tid 22158] [client 20.205.126.183:42110] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aU1PdZvVMtSTB4lX2fZCKgAAAFY"]
[Thu Dec 25 22:51:50.433099 2025] [:error] [pid 22131:tid 22140] [client 20.205.126.183:28465] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aU1PhpvVMtSTB4lX2fZCWwAAAEY"]
[Thu Dec 25 22:51:57.483470 2025] [:error] [pid 22131:tid 22159] [client 20.205.126.183:30317] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aU1PjZvVMtSTB4lX2fZCaAAAAFc"]
[Thu Dec 25 22:51:59.687615 2025] [:error] [pid 22043:tid 22057] [client 20.205.126.183:31838] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aU1Pjz4YVtlb2Iz_QE5d1QAAAAk"]
[Thu Dec 25 22:52:01.705710 2025] [:error] [pid 22044:tid 22075] [client 20.205.126.183:12946] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aU1PkXPTC5rQKTB0FQ-unwAAAMA"]
[Thu Dec 25 22:52:02.958639 2025] [:error] [pid 27869:tid 27877] [client 20.205.126.183:31853] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU1PkhNK7_n86kBD7qftiAAAAIY"]
[Thu Dec 25 22:52:04.906425 2025] [:error] [pid 22131:tid 22135] [client 20.205.126.183:28452] [client 20.205.126.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU1PlJvVMtSTB4lX2fZCeAAAAEI"]
[Fri Dec 26 01:04:02.152838 2025] [:error] [pid 24864:tid 24924] [client 20.187.91.205:39514] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aU1ugsu59XOK5DpQQdCQ4gAAAUQ"]
[Fri Dec 26 01:04:05.880354 2025] [:error] [pid 24863:tid 24903] [client 20.187.91.205:64449] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aU1uhR8SaH2KMpp43vflfAAAAMo"]
[Fri Dec 26 01:04:06.667250 2025] [:error] [pid 24863:tid 24897] [client 20.187.91.205:52784] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aU1uhh8SaH2KMpp43vflhwAAAMQ"]
[Fri Dec 26 01:04:08.703469 2025] [:error] [pid 24946:tid 24948] [client 20.187.91.205:64101] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aU1uiFfyLYxv3Jn9S708CAAAAEA"]
[Fri Dec 26 01:04:12.884838 2025] [:error] [pid 24946:tid 24959] [client 20.187.91.205:20402] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/npi.php"] [unique_id "aU1ujFfyLYxv3Jn9S708EwAAAEs"]
[Fri Dec 26 01:04:13.689662 2025] [:error] [pid 24864:tid 24941] [client 20.187.91.205:56553] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/npi.php"] [unique_id "aU1ujcu59XOK5DpQQdCQ8AAAAVU"]
[Fri Dec 26 01:04:16.249722 2025] [:error] [pid 24946:tid 24957] [client 20.187.91.205:20498] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/npi.php"] [unique_id "aU1ukFfyLYxv3Jn9S708GAAAAEk"]
[Fri Dec 26 01:04:17.641647 2025] [:error] [pid 24864:tid 24939] [client 20.187.91.205:64494] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/npi.php"] [unique_id "aU1ukcu59XOK5DpQQdCQ8wAAAVM"]
[Fri Dec 26 01:04:18.803015 2025] [:error] [pid 24864:tid 24943] [client 20.187.91.205:52761] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aU1uksu59XOK5DpQQdCQ9gAAAVc"]
[Fri Dec 26 01:04:26.488729 2025] [:error] [pid 24946:tid 24958] [client 20.187.91.205:64065] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aU1umlfyLYxv3Jn9S708JAAAAEo"]
[Fri Dec 26 01:04:27.923304 2025] [:error] [pid 24864:tid 24937] [client 20.187.91.205:55120] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aU1um8u59XOK5DpQQdCRBQAAAVE"]
[Fri Dec 26 01:04:30.009117 2025] [:error] [pid 24864:tid 24942] [client 20.187.91.205:64487] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aU1unsu59XOK5DpQQdCRCAAAAVY"]
[Fri Dec 26 01:04:30.940949 2025] [:error] [pid 24946:tid 24959] [client 20.187.91.205:64503] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aU1unlfyLYxv3Jn9S708LQAAAEs"]
[Fri Dec 26 01:04:32.723946 2025] [:error] [pid 24946:tid 24958] [client 20.187.91.205:64480] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aU1uoFfyLYxv3Jn9S708MgAAAEo"]
[Fri Dec 26 01:04:33.213010 2025] [:error] [pid 24862:tid 24884] [client 20.187.91.205:64123] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aU1uobt-eeEEuo-2JKgqUwAAABI"]
[Fri Dec 26 01:04:34.540963 2025] [:error] [pid 24862:tid 24880] [client 20.187.91.205:6999] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aU1uort-eeEEuo-2JKgqWAAAAA4"]
[Fri Dec 26 01:04:43.018943 2025] [:error] [pid 24862:tid 24869] [client 20.187.91.205:64080] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aU1uq7t-eeEEuo-2JKgqZAAAAAM"]
[Fri Dec 26 01:04:44.161043 2025] [:error] [pid 24863:tid 24900] [client 20.187.91.205:55164] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aU1urB8SaH2KMpp43vfl7QAAAMc"]
[Fri Dec 26 01:04:45.879414 2025] [:error] [pid 24864:tid 24924] [client 20.187.91.205:64505] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aU1urcu59XOK5DpQQdCRRgAAAUQ"]
[Fri Dec 26 01:04:47.335230 2025] [:error] [pid 24946:tid 24962] [client 20.187.91.205:57944] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aU1ur1fyLYxv3Jn9S708TAAAAE4"]
[Fri Dec 26 01:04:49.028162 2025] [:error] [pid 24946:tid 24956] [client 20.187.91.205:56272] [client 20.187.91.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aU1usVfyLYxv3Jn9S708VAAAAEg"]
[Fri Dec 26 01:04:49.941658 2025] [:error] [pid 24946:tid 24955] [client 20.187.91.205:57975] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aU1usVfyLYxv3Jn9S708WwAAAEc"]
[Fri Dec 26 01:04:50.453000 2025] [:error] [pid 24864:tid 24932] [client 20.187.91.205:55151] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aU1ussu59XOK5DpQQdCRUQAAAUw"]
[Fri Dec 26 01:04:59.512607 2025] [:error] [pid 24862:tid 24887] [client 20.187.91.205:64063] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aU1uu7t-eeEEuo-2JKgqiwAAABU"]
[Fri Dec 26 01:05:00.430757 2025] [:error] [pid 24864:tid 24926] [client 20.187.91.205:55132] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/litanies.php"] [unique_id "aU1uvMu59XOK5DpQQdCRZAAAAUY"]
[Fri Dec 26 01:05:23.672462 2025] [:error] [pid 24863:tid 24913] [client 20.187.91.205:20630] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/index.php"] [unique_id "aU1u0x8SaH2KMpp43vfmQAAAANQ"]
[Fri Dec 26 01:05:24.856473 2025] [:error] [pid 24864:tid 24939] [client 20.187.91.205:53124] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/index.php"] [unique_id "aU1u1Mu59XOK5DpQQdCRpgAAAVM"]
[Fri Dec 26 01:05:25.857909 2025] [:error] [pid 24864:tid 24937] [client 20.187.91.205:20571] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/index.php"] [unique_id "aU1u1cu59XOK5DpQQdCRqwAAAVE"]
[Fri Dec 26 01:05:29.031485 2025] [:error] [pid 24863:tid 24915] [client 20.187.91.205:52441] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/index.php"] [unique_id "aU1u2R8SaH2KMpp43vfmSAAAANY"]
[Fri Dec 26 01:05:29.843054 2025] [:error] [pid 24863:tid 24893] [client 20.187.91.205:64417] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mek.php"] [unique_id "aU1u2R8SaH2KMpp43vfmSwAAAMA"]
[Fri Dec 26 01:05:33.445767 2025] [:error] [pid 24863:tid 24911] [client 20.187.91.205:60616] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mek.php"] [unique_id "aU1u3R8SaH2KMpp43vfmUQAAANI"]
[Fri Dec 26 01:05:35.659607 2025] [:error] [pid 24863:tid 24897] [client 20.187.91.205:64436] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mek.php"] [unique_id "aU1u3x8SaH2KMpp43vfmVQAAAMQ"]
[Fri Dec 26 01:05:36.860087 2025] [:error] [pid 24862:tid 24886] [client 20.187.91.205:20570] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mek.php"] [unique_id "aU1u4Lt-eeEEuo-2JKgquAAAABQ"]
[Fri Dec 26 01:05:38.275192 2025] [:error] [pid 24862:tid 24889] [client 20.187.91.205:64386] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fjpeb.php"] [unique_id "aU1u4rt-eeEEuo-2JKgqvgAAABc"]
[Fri Dec 26 01:05:43.266124 2025] [:error] [pid 24864:tid 24937] [client 20.187.91.205:6828] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fjpeb.php"] [unique_id "aU1u58u59XOK5DpQQdCRygAAAVE"]
[Fri Dec 26 01:05:44.739895 2025] [:error] [pid 24863:tid 24916] [client 20.187.91.205:63327] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fjpeb.php"] [unique_id "aU1u6B8SaH2KMpp43vfmXAAAANc"]
[Fri Dec 26 01:05:47.299090 2025] [:error] [pid 24862:tid 24880] [client 20.187.91.205:65237] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fjpeb.php"] [unique_id "aU1u67t-eeEEuo-2JKgqywAAAA4"]
[Fri Dec 26 01:05:54.497867 2025] [:error] [pid 24946:tid 24949] [client 20.187.91.205:65222] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ex.php"] [unique_id "aU1u8lfyLYxv3Jn9S709SgAAAEE"]
[Fri Dec 26 01:05:55.575283 2025] [:error] [pid 24946:tid 24955] [client 20.187.91.205:64400] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ex.php"] [unique_id "aU1u81fyLYxv3Jn9S709SwAAAEc"]
[Fri Dec 26 01:05:56.524293 2025] [:error] [pid 24862:tid 24887] [client 20.187.91.205:65228] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ex.php"] [unique_id "aU1u9Lt-eeEEuo-2JKgq0AAAABU"]
[Fri Dec 26 01:05:59.417281 2025] [:error] [pid 24863:tid 24909] [client 20.187.91.205:52453] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ex.php"] [unique_id "aU1u9x8SaH2KMpp43vfmaAAAANA"]
[Fri Dec 26 01:06:01.977955 2025] [:error] [pid 24863:tid 24908] [client 20.187.91.205:20586] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "aU1u-R8SaH2KMpp43vfmagAAAM8"]
[Fri Dec 26 01:06:02.910651 2025] [:error] [pid 24862:tid 24880] [client 20.187.91.205:52445] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "aU1u-rt-eeEEuo-2JKgq1gAAAA4"]
[Fri Dec 26 01:06:07.258792 2025] [:error] [pid 24864:tid 24940] [client 20.187.91.205:65243] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "aU1u_8u59XOK5DpQQdCR5gAAAVQ"]
[Fri Dec 26 01:06:09.039071 2025] [:error] [pid 24863:tid 24914] [client 20.187.91.205:20680] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "aU1vAR8SaH2KMpp43vfmdwAAANU"]
[Fri Dec 26 01:06:10.363452 2025] [:error] [pid 24862:tid 24881] [client 20.187.91.205:6578] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aU1vArt-eeEEuo-2JKgq3gAAAA8"]
[Fri Dec 26 01:06:13.259583 2025] [:error] [pid 24863:tid 24913] [client 20.187.91.205:56897] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aU1vBR8SaH2KMpp43vfmegAAANQ"]
[Fri Dec 26 01:06:13.805169 2025] [:error] [pid 24864:tid 24924] [client 20.187.91.205:20710] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aU1vBcu59XOK5DpQQdCR7wAAAUQ"]
[Fri Dec 26 01:06:15.082858 2025] [:error] [pid 24864:tid 24923] [client 20.187.91.205:39917] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aU1vB8u59XOK5DpQQdCR8QAAAUM"]
[Fri Dec 26 01:06:15.587298 2025] [:error] [pid 24864:tid 24925] [client 20.187.91.205:65183] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aU1vB8u59XOK5DpQQdCR8wAAAUU"]
[Fri Dec 26 01:06:16.623127 2025] [:error] [pid 24946:tid 24955] [client 20.187.91.205:39886] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aU1vCFfyLYxv3Jn9S709WAAAAEc"]
[Fri Dec 26 01:06:17.090178 2025] [:error] [pid 24864:tid 24940] [client 20.187.91.205:56247] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aU1vCcu59XOK5DpQQdCR9wAAAVQ"]
[Fri Dec 26 01:06:20.532244 2025] [:error] [pid 24862:tid 24880] [client 20.187.91.205:53929] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aU1vDLt-eeEEuo-2JKgq4gAAAA4"]
[Fri Dec 26 01:06:35.627612 2025] [:error] [pid 24864:tid 24921] [client 20.187.91.205:63633] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aU1vG8u59XOK5DpQQdCSKwAAAUE"]
[Fri Dec 26 01:06:38.478991 2025] [:error] [pid 24946:tid 24958] [client 20.187.91.205:59661] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aU1vHlfyLYxv3Jn9S709kQAAAEo"]
[Fri Dec 26 01:06:42.448032 2025] [:error] [pid 24863:tid 24897] [client 20.187.91.205:7112] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aU1vIh8SaH2KMpp43vfmkgAAAMQ"]
[Fri Dec 26 01:06:43.035855 2025] [:error] [pid 24946:tid 24954] [client 20.187.91.205:50597] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aU1vI1fyLYxv3Jn9S709nwAAAEY"]
[Fri Dec 26 01:06:51.284764 2025] [:error] [pid 24946:tid 24970] [client 20.187.91.205:7156] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aU1vK1fyLYxv3Jn9S709tAAAAFY"]
[Fri Dec 26 01:06:53.388923 2025] [:error] [pid 24946:tid 24958] [client 20.187.91.205:58418] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aU1vLVfyLYxv3Jn9S709ugAAAEo"]
[Fri Dec 26 01:06:54.377861 2025] [:error] [pid 24946:tid 24959] [client 20.187.91.205:65489] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aU1vLlfyLYxv3Jn9S709vgAAAEs"]
[Fri Dec 26 01:06:55.472659 2025] [:error] [pid 24946:tid 24965] [client 20.187.91.205:65522] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aU1vL1fyLYxv3Jn9S709xAAAAFE"]
[Fri Dec 26 01:06:59.016000 2025] [:error] [pid 24864:tid 24928] [client 20.187.91.205:39227] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sfvul.php"] [unique_id "aU1vM8u59XOK5DpQQdCSaQAAAUg"]
[Fri Dec 26 01:07:01.782773 2025] [:error] [pid 24946:tid 24952] [client 20.187.91.205:50600] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sfvul.php"] [unique_id "aU1vNVfyLYxv3Jn9S7094wAAAEQ"]
[Fri Dec 26 01:07:03.396821 2025] [:error] [pid 24946:tid 24965] [client 20.187.91.205:52813] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sfvul.php"] [unique_id "aU1vN1fyLYxv3Jn9S7097AAAAFE"]
[Fri Dec 26 01:07:06.366849 2025] [:error] [pid 24862:tid 24883] [client 20.187.91.205:38483] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sfvul.php"] [unique_id "aU1vOrt-eeEEuo-2JKgrLgAAABE"]
[Fri Dec 26 01:07:06.967842 2025] [:error] [pid 24864:tid 24943] [client 20.187.91.205:39845] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/icdwb.php"] [unique_id "aU1vOsu59XOK5DpQQdCSdwAAAVc"]
[Fri Dec 26 01:07:10.060048 2025] [:error] [pid 24946:tid 24962] [client 20.187.91.205:6609] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/icdwb.php"] [unique_id "aU1vPlfyLYxv3Jn9S7099QAAAE4"]
[Fri Dec 26 01:07:13.417761 2025] [:error] [pid 24863:tid 24902] [client 20.187.91.205:53195] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/icdwb.php"] [unique_id "aU1vQR8SaH2KMpp43vfmuwAAAMk"]
[Fri Dec 26 01:07:14.049804 2025] [:error] [pid 24946:tid 24948] [client 20.187.91.205:6608] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/icdwb.php"] [unique_id "aU1vQlfyLYxv3Jn9S70-BAAAAEA"]
[Fri Dec 26 01:07:17.099872 2025] [:error] [pid 24946:tid 24959] [client 20.187.91.205:65517] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "aU1vRVfyLYxv3Jn9S70-EgAAAEs"]
[Fri Dec 26 01:07:19.726460 2025] [:error] [pid 24862:tid 24872] [client 20.187.91.205:39848] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "aU1vR7t-eeEEuo-2JKgrQQAAAAY"]
[Fri Dec 26 01:07:22.978288 2025] [:error] [pid 24863:tid 24914] [client 20.187.91.205:59717] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "aU1vSh8SaH2KMpp43vfmwwAAANU"]
[Fri Dec 26 01:07:25.535932 2025] [:error] [pid 24864:tid 24927] [client 20.187.91.205:53522] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "aU1vTcu59XOK5DpQQdCSfwAAAUc"]
[Fri Dec 26 01:07:26.777468 2025] [:error] [pid 24863:tid 24893] [client 20.187.91.205:56452] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aU1vTh8SaH2KMpp43vfmywAAAMA"]
[Fri Dec 26 01:07:27.411294 2025] [:error] [pid 24863:tid 24904] [client 20.187.91.205:51904] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aU1vTx8SaH2KMpp43vfmzQAAAMs"]
[Fri Dec 26 01:07:28.472727 2025] [:error] [pid 24863:tid 24916] [client 20.187.91.205:6646] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aU1vUB8SaH2KMpp43vfm1wAAANc"]
[Fri Dec 26 01:07:49.030360 2025] [:error] [pid 24862:tid 24870] [client 20.187.91.205:62819] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx.php"] [unique_id "aU1vZbt-eeEEuo-2JKgreAAAAAQ"]
[Fri Dec 26 01:07:51.717036 2025] [:error] [pid 24863:tid 24900] [client 20.187.91.205:51002] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx.php"] [unique_id "aU1vZx8SaH2KMpp43vfnDgAAAMc"]
[Fri Dec 26 01:07:55.225873 2025] [:error] [pid 24864:tid 24930] [client 20.187.91.205:60975] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx.php"] [unique_id "aU1va8u59XOK5DpQQdCSsgAAAUo"]
[Fri Dec 26 01:07:58.739603 2025] [:error] [pid 24946:tid 24966] [client 20.187.91.205:58309] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx.php"] [unique_id "aU1vblfyLYxv3Jn9S70-WQAAAFI"]
[Fri Dec 26 01:08:02.894072 2025] [:error] [pid 24946:tid 24952] [client 20.187.91.205:6911] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aU1vclfyLYxv3Jn9S70-bgAAAEQ"]
[Fri Dec 26 01:08:05.823331 2025] [:error] [pid 24862:tid 24883] [client 20.187.91.205:6894] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aU1vdbt-eeEEuo-2JKgrjQAAABE"]
[Fri Dec 26 01:08:06.594083 2025] [:error] [pid 24946:tid 24971] [client 20.187.91.205:58361] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aU1vdlfyLYxv3Jn9S70-dQAAAFc"]
[Fri Dec 26 01:08:11.546593 2025] [:error] [pid 24864:tid 24930] [client 20.187.91.205:60948] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aU1ve8u59XOK5DpQQdCSwQAAAUo"]
[Fri Dec 26 01:08:12.021538 2025] [:error] [pid 24946:tid 24972] [client 20.187.91.205:58321] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aU1vfFfyLYxv3Jn9S70-fQAAAFg"]
[Fri Dec 26 01:08:12.923821 2025] [:error] [pid 24863:tid 24916] [client 20.187.91.205:60957] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aU1vfB8SaH2KMpp43vfnKgAAANc"]
[Fri Dec 26 01:08:13.705064 2025] [:error] [pid 24863:tid 24901] [client 20.187.91.205:56293] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aU1vfR8SaH2KMpp43vfnLAAAAMg"]
[Fri Dec 26 01:08:15.397886 2025] [:error] [pid 24863:tid 24915] [client 20.187.91.205:55103] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aU1vfx8SaH2KMpp43vfnLwAAANY"]
[Fri Dec 26 01:08:17.766405 2025] [:error] [pid 24862:tid 24890] [client 20.187.91.205:64386] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpw.php"] [unique_id "aU1vgbt-eeEEuo-2JKgrnwAAABg"]
[Fri Dec 26 01:08:21.974680 2025] [:error] [pid 24863:tid 24905] [client 20.187.91.205:58337] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpw.php"] [unique_id "aU1vhR8SaH2KMpp43vfnOgAAAMw"]
[Fri Dec 26 01:08:33.980707 2025] [:error] [pid 24864:tid 24923] [client 20.187.91.205:7063] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lufix.php"] [unique_id "aU1vkcu59XOK5DpQQdCS2QAAAUM"]
[Fri Dec 26 01:08:35.151854 2025] [:error] [pid 24946:tid 24950] [client 20.187.91.205:7041] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lufix.php"] [unique_id "aU1vk1fyLYxv3Jn9S70-uAAAAEI"]
[Fri Dec 26 01:09:07.329207 2025] [:error] [pid 24864:tid 24935] [client 20.187.91.205:52760] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/j.php"] [unique_id "aU1vs8u59XOK5DpQQdCTNgAAAU8"]
[Fri Dec 26 01:09:14.484157 2025] [:error] [pid 24862:tid 24890] [client 20.187.91.205:55141] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/j.php"] [unique_id "aU1vurt-eeEEuo-2JKgr0AAAABg"]
[Fri Dec 26 01:09:19.190524 2025] [:error] [pid 24946:tid 24961] [client 20.187.91.205:52767] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/j.php"] [unique_id "aU1vv1fyLYxv3Jn9S70-_wAAAE0"]
[Fri Dec 26 01:09:23.561622 2025] [:error] [pid 24946:tid 24952] [client 20.187.91.205:64116] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aU1vw1fyLYxv3Jn9S70_AwAAAEQ"]
[Fri Dec 26 01:09:28.816738 2025] [:error] [pid 24862:tid 24873] [client 20.187.91.205:6978] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aU1vyLt-eeEEuo-2JKgr1wAAAAc"]
[Fri Dec 26 01:09:29.897252 2025] [:error] [pid 24946:tid 24959] [client 20.187.91.205:57955] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aU1vyVfyLYxv3Jn9S70_EQAAAEs"]
[Fri Dec 26 01:09:30.745729 2025] [:error] [pid 24863:tid 24912] [client 20.187.91.205:51429] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aU1vyh8SaH2KMpp43vfnfwAAANM"]
[Fri Dec 26 01:09:32.088538 2025] [:error] [pid 24946:tid 24954] [client 20.187.91.205:55156] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ucp.php"] [unique_id "aU1vzFfyLYxv3Jn9S70_FQAAAEY"]
[Fri Dec 26 01:09:34.461351 2025] [:error] [pid 24863:tid 24893] [client 20.187.91.205:64454] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ucp.php"] [unique_id "aU1vzh8SaH2KMpp43vfniAAAAMA"]
[Fri Dec 26 01:09:35.411121 2025] [:error] [pid 24946:tid 24966] [client 20.187.91.205:39845] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ucp.php"] [unique_id "aU1vz1fyLYxv3Jn9S70_IgAAAFI"]
[Fri Dec 26 01:09:39.417688 2025] [:error] [pid 24946:tid 24964] [client 20.187.91.205:58035] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ucp.php"] [unique_id "aU1v01fyLYxv3Jn9S70_JgAAAFA"]
[Fri Dec 26 01:09:42.779117 2025] [:error] [pid 24863:tid 24904] [client 20.187.91.205:61003] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zse.php"] [unique_id "aU1v1h8SaH2KMpp43vfnkAAAAMs"]
[Fri Dec 26 01:09:52.787688 2025] [:error] [pid 24864:tid 24935] [client 20.187.91.205:58017] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zse.php"] [unique_id "aU1v4Mu59XOK5DpQQdCTYwAAAU8"]
[Fri Dec 26 01:09:53.701962 2025] [:error] [pid 24946:tid 24949] [client 20.187.91.205:20630] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zse.php"] [unique_id "aU1v4VfyLYxv3Jn9S70_OAAAAEE"]
[Fri Dec 26 01:09:56.031713 2025] [:error] [pid 24862:tid 24873] [client 20.187.91.205:64804] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aU1v5Lt-eeEEuo-2JKgr9AAAAAc"]
[Fri Dec 26 01:09:56.584251 2025] [:error] [pid 24864:tid 24944] [client 20.187.91.205:20636] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aU1v5Mu59XOK5DpQQdCTaAAAAVg"]
[Fri Dec 26 01:09:57.591360 2025] [:error] [pid 24946:tid 24957] [client 20.187.91.205:63740] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aU1v5VfyLYxv3Jn9S70_OwAAAEk"]
[Fri Dec 26 01:09:58.771819 2025] [:error] [pid 24862:tid 24877] [client 20.187.91.205:64472] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aU1v5rt-eeEEuo-2JKgr9gAAAAs"]
[Fri Dec 26 01:10:00.690375 2025] [:error] [pid 24864:tid 24929] [client 20.187.91.205:64784] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aU1v6Mu59XOK5DpQQdCTbgAAAUk"]
[Fri Dec 26 01:10:02.045208 2025] [:error] [pid 24946:tid 24955] [client 20.187.91.205:57679] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aU1v6lfyLYxv3Jn9S70_QgAAAEc"]
[Fri Dec 26 01:10:03.299102 2025] [:error] [pid 24863:tid 24913] [client 20.187.91.205:57685] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aU1v6x8SaH2KMpp43vfnmQAAANQ"]
[Fri Dec 26 01:10:04.252532 2025] [:error] [pid 24862:tid 24870] [client 20.187.91.205:6824] [client 20.187.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aU1v7Lt-eeEEuo-2JKgr_AAAAAQ"]
[Fri Dec 26 07:20:24.701559 2025] [:error] [pid 15063:tid 15089] [client 43.130.57.76:52542] [client 43.130.57.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aU3GuODsf_aL46Jy7z_7yQAAARg"]
[Fri Dec 26 12:12:24.333374 2025] [:error] [pid 28270:tid 28339] [client 106.219.180.148:10705] [client 106.219.180.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.180.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU4LKF9Ac79_ckdPN5LK7wAAAIo"]
[Fri Dec 26 12:18:21.066118 2025] [:error] [pid 15063:tid 15072] [client 106.219.180.148:15565] [client 106.219.180.148] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aU4MjeDsf_aL46Jy7z9mqQAAAQc"]
[Fri Dec 26 12:19:27.202875 2025] [:error] [pid 15063:tid 15069] [client 106.219.180.148:8978] [client 106.219.180.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.180.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU4Mz-Dsf_aL46Jy7z9nEAAAAQQ"]
[Fri Dec 26 14:37:56.912100 2025] [:error] [pid 28269:tid 28312] [client 203.159.81.20:33887] [client 203.159.81.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aU4tRJ3ZK8bJ-c9-kjPrigAAAEo"]
[Fri Dec 26 14:39:28.225586 2025] [:error] [pid 28355:tid 28378] [client 203.159.81.21:21937] [client 203.159.81.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aU4toLsFqKXf7ADZcTbAVgAAANU"]
[Fri Dec 26 14:39:46.304129 2025] [:error] [pid 28268:tid 28289] [client 203.159.81.46:26245] [client 203.159.81.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aU4tsnc_KuO_55-uPTRbKgAAAA4"]
[Fri Dec 26 14:40:06.619255 2025] [:error] [pid 28355:tid 28363] [client 203.159.81.4:36899] [client 203.159.81.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aU4txrsFqKXf7ADZcTbCSQAAAMY"]
[Fri Dec 26 14:40:11.881373 2025] [:error] [pid 7160:tid 7163] [client 203.159.81.25:49551] [client 203.159.81.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aU4ty-w_ihNZR5L8vEUT6gAAAYA"]
[Fri Dec 26 14:40:21.988158 2025] [:error] [pid 28355:tid 28367] [client 203.159.81.28:22107] [client 203.159.81.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aU4t1bsFqKXf7ADZcTbC_wAAAMo"]
[Fri Dec 26 14:40:50.371514 2025] [:error] [pid 28355:tid 28378] [client 203.159.81.28:55745] [client 203.159.81.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aU4t8rsFqKXf7ADZcTbEHgAAANU"]
[Fri Dec 26 14:41:01.423754 2025] [autoindex:error] [pid 28355:tid 28367] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:01.923035 2025] [autoindex:error] [pid 28355:tid 28361] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:02.362268 2025] [autoindex:error] [pid 28355:tid 28375] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:03.215766 2025] [autoindex:error] [pid 28355:tid 28377] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:07.543276 2025] [autoindex:error] [pid 28355:tid 28361] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:08.018094 2025] [autoindex:error] [pid 28355:tid 28364] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:08.457639 2025] [autoindex:error] [pid 28355:tid 28366] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:08.940213 2025] [autoindex:error] [pid 28355:tid 28372] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:09.405730 2025] [autoindex:error] [pid 28355:tid 28364] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:09.888199 2025] [autoindex:error] [pid 28355:tid 28370] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:10.785565 2025] [autoindex:error] [pid 28355:tid 28380] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:17.708592 2025] [autoindex:error] [pid 28355:tid 28359] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:18.149864 2025] [autoindex:error] [pid 28355:tid 28381] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:29.173826 2025] [autoindex:error] [pid 28355:tid 28359] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:29.639788 2025] [autoindex:error] [pid 28355:tid 28369] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:30.101756 2025] [autoindex:error] [pid 28355:tid 28378] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:30.546323 2025] [autoindex:error] [pid 28355:tid 28359] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:36.056383 2025] [autoindex:error] [pid 28355:tid 28378] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:36.556218 2025] [autoindex:error] [pid 28355:tid 28358] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:43.348055 2025] [autoindex:error] [pid 28355:tid 28366] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:54.649567 2025] [autoindex:error] [pid 28355:tid 28361] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:55.099468 2025] [autoindex:error] [pid 28355:tid 28381] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:41:55.549508 2025] [autoindex:error] [pid 28355:tid 28364] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:42:15.484337 2025] [autoindex:error] [pid 28355:tid 28366] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:42:20.645232 2025] [autoindex:error] [pid 28355:tid 28358] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:42:21.095736 2025] [autoindex:error] [pid 28355:tid 28373] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:42:22.496502 2025] [autoindex:error] [pid 28355:tid 28380] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:42:22.950136 2025] [autoindex:error] [pid 28355:tid 28371] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:42:23.463490 2025] [autoindex:error] [pid 28355:tid 28379] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:42:35.952794 2025] [autoindex:error] [pid 28355:tid 28364] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:42:40.517011 2025] [autoindex:error] [pid 28355:tid 28364] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:05.214461 2025] [autoindex:error] [pid 28355:tid 28358] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:05.677481 2025] [autoindex:error] [pid 28355:tid 28363] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:06.126218 2025] [autoindex:error] [pid 28355:tid 28359] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:06.593869 2025] [autoindex:error] [pid 28355:tid 28368] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:07.376345 2025] [autoindex:error] [pid 28355:tid 28381] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:07.832824 2025] [autoindex:error] [pid 28355:tid 28372] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:08.271292 2025] [autoindex:error] [pid 28355:tid 28369] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:08.740324 2025] [autoindex:error] [pid 28355:tid 28359] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:13.221414 2025] [autoindex:error] [pid 28355:tid 28357] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:17.012889 2025] [autoindex:error] [pid 28355:tid 28361] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:17.464661 2025] [autoindex:error] [pid 28355:tid 28373] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:17.915451 2025] [autoindex:error] [pid 28355:tid 28380] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:20.423805 2025] [autoindex:error] [pid 28355:tid 28360] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:21.268953 2025] [autoindex:error] [pid 28355:tid 28366] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:22.081312 2025] [autoindex:error] [pid 28355:tid 28357] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:44:22.711193 2025] [autoindex:error] [pid 28355:tid 28375] [client 203.159.81.41:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:45:27.020309 2025] [autoindex:error] [pid 28355:tid 28358] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:45:53.787844 2025] [autoindex:error] [pid 28355:tid 28359] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:05.194159 2025] [autoindex:error] [pid 28355:tid 28370] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:06.035724 2025] [autoindex:error] [pid 28355:tid 28366] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:17.987159 2025] [autoindex:error] [pid 28355:tid 28357] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:18.474837 2025] [autoindex:error] [pid 28355:tid 28374] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:18.972320 2025] [autoindex:error] [pid 28355:tid 28381] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:19.431663 2025] [autoindex:error] [pid 28355:tid 28377] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:19.917954 2025] [autoindex:error] [pid 28355:tid 28372] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:20.395266 2025] [autoindex:error] [pid 28355:tid 28360] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:20.884024 2025] [autoindex:error] [pid 28355:tid 28369] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:21.368151 2025] [autoindex:error] [pid 28355:tid 28378] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:21.971999 2025] [autoindex:error] [pid 28355:tid 28358] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 14:46:59.457976 2025] [autoindex:error] [pid 28355:tid 28365] [client 203.159.81.48:32605] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Dec 26 15:28:05.930248 2025] [:error] [pid 15063:tid 15072] [client 101.42.46.71:53534] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aU45BeDsf_aL46Jy7z--lwAAAQc"]
[Fri Dec 26 15:45:59.708986 2025] [:error] [pid 28355:tid 28360] [client 64.226.65.160:56666] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v2/api-docs"] [unique_id "aU49N7sFqKXf7ADZcTbaNgAAAMM"]
[Fri Dec 26 15:46:00.748744 2025] [:error] [pid 34865:tid 34879] [client 64.226.65.160:56676] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v3/api-docs"] [unique_id "aU49OKi4zjVVKBdvuTSmkgAAAUw"]
[Fri Dec 26 15:46:01.726398 2025] [:error] [pid 28268:tid 28286] [client 64.226.65.160:38410] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/api-docs/swagger.json"] [unique_id "aU49OXc_KuO_55-uPTRx7wAAAAs"]
[Fri Dec 26 15:46:02.834046 2025] [:error] [pid 34865:tid 34888] [client 64.226.65.160:38418] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/api/swagger.json"] [unique_id "aU49Oqi4zjVVKBdvuTSmlgAAAVU"]
[Fri Dec 26 15:46:03.762896 2025] [:error] [pid 28268:tid 28289] [client 64.226.65.160:38434] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/@vite/env"] [unique_id "aU49O3c_KuO_55-uPTRx8gAAAA4"]
[Fri Dec 26 15:46:04.782522 2025] [:error] [pid 7160:tid 7169] [client 64.226.65.160:38450] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/actuator/env"] [unique_id "aU49POw_ihNZR5L8vEUtrwAAAYY"]
[Fri Dec 26 15:46:05.764531 2025] [:error] [pid 28270:tid 28331] [client 64.226.65.160:38464] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aU49PV9Ac79_ckdPN5IYbAAAAII"]
[Fri Dec 26 15:46:06.776091 2025] [:error] [pid 28355:tid 28370] [client 64.226.65.160:38466] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server"] [unique_id "aU49PrsFqKXf7ADZcTbaQwAAAM0"]
[Fri Dec 26 15:46:07.771173 2025] [:error] [pid 28270:tid 28348] [client 64.226.65.160:38480] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aU49P19Ac79_ckdPN5IYcAAAAJM"]
[Fri Dec 26 15:46:09.782850 2025] [:error] [pid 28355:tid 28381] [client 64.226.65.160:38484] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/about"] [unique_id "aU49QbsFqKXf7ADZcTbaTQAAANg"]
[Fri Dec 26 15:46:10.790069 2025] [:error] [pid 7160:tid 7167] [client 64.226.65.160:38498] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/debug/default/view"] [unique_id "aU49Quw_ihNZR5L8vEUtugAAAYQ"]
[Fri Dec 26 15:46:11.772403 2025] [:error] [pid 7160:tid 7184] [client 64.226.65.160:34904] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v2/_catalog"] [unique_id "aU49Q-w_ihNZR5L8vEUtvAAAAZU"]
[Fri Dec 26 15:46:12.777014 2025] [:error] [pid 7160:tid 7170] [client 64.226.65.160:34920] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aU49ROw_ihNZR5L8vEUtwQAAAYc"]
[Fri Dec 26 15:46:13.807728 2025] [:error] [pid 28355:tid 28368] [client 64.226.65.160:34930] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server-status"] [unique_id "aU49RbsFqKXf7ADZcTbaVAAAAMs"]
[Fri Dec 26 15:46:14.773031 2025] [:error] [pid 28355:tid 28358] [client 64.226.65.160:34940] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/login.action"] [unique_id "aU49RrsFqKXf7ADZcTbaVwAAAME"]
[Fri Dec 26 15:46:15.763057 2025] [:error] [pid 7160:tid 7177] [client 64.226.65.160:34950] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/_all_dbs"] [unique_id "aU49R-w_ihNZR5L8vEUtzwAAAY4"]
[Fri Dec 26 15:46:16.855612 2025] [:error] [pid 28355:tid 28357] [client 64.226.65.160:34952] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aU49SLsFqKXf7ADZcTbaWQAAAMA"]
[Fri Dec 26 15:46:17.896132 2025] [:error] [pid 28355:tid 28374] [client 64.226.65.160:34962] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aU49SbsFqKXf7ADZcTbaXQAAANE"]
[Fri Dec 26 15:46:19.850477 2025] [:error] [pid 28268:tid 28285] [client 64.226.65.160:34968] [client 64.226.65.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aU49S3c_KuO_55-uPTRyBgAAAAo"]
[Fri Dec 26 15:46:20.843991 2025] [:error] [pid 28269:tid 28318] [client 64.226.65.160:34984] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aU49TJ3ZK8bJ-c9-kjMN8wAAAFA"]
[Fri Dec 26 15:46:21.855725 2025] [:error] [pid 34865:tid 34873] [client 64.226.65.160:52784] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config.json"] [unique_id "aU49Tai4zjVVKBdvuTSmqAAAAUY"]
[Fri Dec 26 15:46:22.881688 2025] [:error] [pid 28355:tid 28380] [client 64.226.65.160:52796] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/telescope/requests"] [unique_id "aU49TrsFqKXf7ADZcTbaZQAAANc"]
[Fri Dec 26 15:46:23.862715 2025] [:error] [pid 7160:tid 7182] [client 64.226.65.160:52800] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aU49T-w_ihNZR5L8vEUt4AAAAZM"]
[Fri Dec 26 15:46:24.871230 2025] [:error] [pid 15063:tid 15084] [client 64.226.65.160:52810] [client 64.226.65.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aU49UODsf_aL46Jy7z_C_gAAARM"]
[Fri Dec 26 20:24:06.172007 2025] [:error] [pid 7160:tid 7184] [client 43.155.73.192:33876] [client 43.155.73.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.155.73.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-Zuw_ihNZR5L8vEV_yQAAAZU"]
[Fri Dec 26 20:24:07.996633 2025] [:error] [pid 28270:tid 28332] [client 43.155.73.192:34298] [client 43.155.73.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.155.73.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-Z19Ac79_ckdPN5JU7wAAAIM"]
[Fri Dec 26 20:24:09.810822 2025] [:error] [pid 15063:tid 15085] [client 43.155.73.192:34636] [client 43.155.73.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.155.73.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-aeDsf_aL46Jy7z8NkgAAARQ"]
[Fri Dec 26 20:24:11.841466 2025] [:error] [pid 28355:tid 28361] [client 43.155.73.192:35062] [client 43.155.73.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.155.73.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-a7sFqKXf7ADZcTYX_QAAAMQ"]
[Fri Dec 26 20:24:14.052678 2025] [:error] [pid 28269:tid 28304] [client 43.155.73.192:35352] [client 43.155.73.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.155.73.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-bp3ZK8bJ-c9-kjN1pAAAAEI"]
[Fri Dec 26 20:24:15.852579 2025] [:error] [pid 15063:tid 15069] [client 43.155.73.192:35604] [client 43.155.73.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.155.73.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-b-Dsf_aL46Jy7z8NmgAAAQQ"]
[Fri Dec 26 20:24:15.852733 2025] [:error] [pid 15063:tid 15069] [client 43.155.73.192:35604] [client 43.155.73.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 43.155.73.192, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-b-Dsf_aL46Jy7z8NmgAAAQQ"]
[Fri Dec 26 20:24:16.698534 2025] [:error] [pid 7160:tid 7179] [client 43.155.73.192:35772] [client 43.155.73.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.155.73.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-cOw_ihNZR5L8vEV_9wAAAZA"]
[Fri Dec 26 20:24:16.698740 2025] [:error] [pid 7160:tid 7179] [client 43.155.73.192:35772] [client 43.155.73.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 43.155.73.192, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-cOw_ihNZR5L8vEV_9wAAAZA"]
[Fri Dec 26 20:24:16.802246 2025] [:error] [pid 15063:tid 15075] [client 82.64.124.218:43320] [client 82.64.124.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.64.124.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-cODsf_aL46Jy7z8NnQAAAQo"]
[Fri Dec 26 20:24:17.546183 2025] [:error] [pid 7160:tid 7180] [client 43.155.73.192:35966] [client 43.155.73.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.155.73.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-cew_ihNZR5L8vEV_-gAAAZE"]
[Fri Dec 26 20:24:17.546346 2025] [:error] [pid 7160:tid 7180] [client 43.155.73.192:35966] [client 43.155.73.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 43.155.73.192, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-cew_ihNZR5L8vEV_-gAAAZE"]
[Fri Dec 26 20:24:19.245948 2025] [:error] [pid 28270:tid 28334] [client 82.64.124.218:40096] [client 82.64.124.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.64.124.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-c19Ac79_ckdPN5JU9AAAAIU"]
[Fri Dec 26 20:24:26.310501 2025] [:error] [pid 28270:tid 28337] [client 82.64.124.218:40104] [client 82.64.124.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.64.124.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-el9Ac79_ckdPN5JU9wAAAIg"]
[Fri Dec 26 20:24:35.234904 2025] [:error] [pid 15063:tid 15083] [client 82.64.124.218:47132] [client 82.64.124.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.64.124.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-g-Dsf_aL46Jy7z8NvAAAARI"]
[Fri Dec 26 20:24:37.867199 2025] [:error] [pid 34865:tid 34869] [client 82.64.124.218:36850] [client 82.64.124.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.64.124.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-hai4zjVVKBdvuTTpugAAAUI"]
[Fri Dec 26 20:24:40.526764 2025] [:error] [pid 28270:tid 28344] [client 82.64.124.218:36856] [client 82.64.124.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.64.124.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-iF9Ac79_ckdPN5JVCQAAAI8"]
[Fri Dec 26 20:24:40.526977 2025] [:error] [pid 28270:tid 28344] [client 82.64.124.218:36856] [client 82.64.124.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 82.64.124.218, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-iF9Ac79_ckdPN5JVCQAAAI8"]
[Fri Dec 26 20:25:22.178861 2025] [:error] [pid 28269:tid 28306] [client 103.131.74.10:55640] [client 103.131.74.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.131.74.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-sp3ZK8bJ-c9-kjN2NQAAAEQ"]
[Fri Dec 26 20:25:23.979019 2025] [:error] [pid 28269:tid 28314] [client 103.131.74.10:55685] [client 103.131.74.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.131.74.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-s53ZK8bJ-c9-kjN2OQAAAEw"]
[Fri Dec 26 20:25:25.698639 2025] [:error] [pid 28269:tid 28317] [client 103.131.74.10:55708] [client 103.131.74.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.131.74.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-tZ3ZK8bJ-c9-kjN2OwAAAE8"]
[Fri Dec 26 20:25:28.209751 2025] [:error] [pid 15063:tid 15089] [client 103.131.74.10:55747] [client 103.131.74.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.131.74.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-uODsf_aL46Jy7z8OAAAAARg"]
[Fri Dec 26 20:25:29.908832 2025] [:error] [pid 15063:tid 15079] [client 103.131.74.10:55792] [client 103.131.74.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.131.74.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-ueDsf_aL46Jy7z8OAgAAAQ4"]
[Fri Dec 26 20:25:31.632985 2025] [:error] [pid 28270:tid 28336] [client 103.131.74.10:55839] [client 103.131.74.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.131.74.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-u19Ac79_ckdPN5JVWAAAAIc"]
[Fri Dec 26 20:25:31.633126 2025] [:error] [pid 28270:tid 28336] [client 103.131.74.10:55839] [client 103.131.74.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 103.131.74.10, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-u19Ac79_ckdPN5JVWAAAAIc"]
[Fri Dec 26 20:25:32.572997 2025] [:error] [pid 28270:tid 28332] [client 103.131.74.10:55863] [client 103.131.74.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.131.74.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-vF9Ac79_ckdPN5JVWgAAAIM"]
[Fri Dec 26 20:25:32.573163 2025] [:error] [pid 28270:tid 28332] [client 103.131.74.10:55863] [client 103.131.74.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 103.131.74.10, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-vF9Ac79_ckdPN5JVWgAAAIM"]
[Fri Dec 26 20:25:51.824670 2025] [:error] [pid 15063:tid 15086] [client 47.99.138.203:52908] [client 47.99.138.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.99.138.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-z-Dsf_aL46Jy7z8ODQAAARU"]
[Fri Dec 26 20:25:55.108111 2025] [:error] [pid 7160:tid 7185] [client 47.99.138.203:53478] [client 47.99.138.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.99.138.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-0-w_ihNZR5L8vEWAeAAAAZY"]
[Fri Dec 26 20:26:07.907940 2025] [:error] [pid 7160:tid 7185] [client 123.30.107.59:53589] [client 123.30.107.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.30.107.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-3-w_ihNZR5L8vEWAgwAAAZY"]
[Fri Dec 26 20:26:09.990160 2025] [:error] [pid 28355:tid 28373] [client 123.30.107.59:56534] [client 123.30.107.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.30.107.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-4bsFqKXf7ADZcTYYmgAAANA"]
[Fri Dec 26 20:26:11.979573 2025] [:error] [pid 28270:tid 28350] [client 123.30.107.59:58730] [client 123.30.107.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.30.107.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-419Ac79_ckdPN5JVbwAAAJU"]
[Fri Dec 26 20:26:13.973540 2025] [:error] [pid 28268:tid 28297] [client 123.30.107.59:60923] [client 123.30.107.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.30.107.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-5Xc_KuO_55-uPTSxCwAAABY"]
[Fri Dec 26 20:26:15.845928 2025] [:error] [pid 28268:tid 28295] [client 123.30.107.59:62826] [client 123.30.107.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.30.107.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-53c_KuO_55-uPTSxEAAAABQ"]
[Fri Dec 26 20:26:17.752232 2025] [:error] [pid 34865:tid 34890] [client 123.30.107.59:64617] [client 123.30.107.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.30.107.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-6ai4zjVVKBdvuTTqDAAAAVc"]
[Fri Dec 26 20:26:17.752392 2025] [:error] [pid 34865:tid 34890] [client 123.30.107.59:64617] [client 123.30.107.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 123.30.107.59, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5-6ai4zjVVKBdvuTTqDAAAAVc"]
[Fri Dec 26 20:26:57.589683 2025] [:error] [pid 28269:tid 28307] [client 206.82.3.126:43768] [client 206.82.3.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.82.3.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5_EZ3ZK8bJ-c9-kjN2rAAAAEU"]
[Fri Dec 26 20:27:01.284224 2025] [:error] [pid 7160:tid 7173] [client 206.82.3.126:43770] [client 206.82.3.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.82.3.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5_Few_ihNZR5L8vEWAswAAAYo"]
[Fri Dec 26 20:27:03.900717 2025] [:error] [pid 28270:tid 28345] [client 206.82.3.126:43782] [client 206.82.3.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.82.3.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5_F19Ac79_ckdPN5JVmAAAAJA"]
[Fri Dec 26 20:27:06.964341 2025] [:error] [pid 34865:tid 34885] [client 206.82.3.126:39290] [client 206.82.3.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.82.3.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5_Gqi4zjVVKBdvuTTqQQAAAVI"]
[Fri Dec 26 20:27:09.544699 2025] [:error] [pid 28268:tid 28287] [client 206.82.3.126:39296] [client 206.82.3.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.82.3.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5_HXc_KuO_55-uPTSxOgAAAAw"]
[Fri Dec 26 20:27:12.505940 2025] [:error] [pid 34865:tid 34871] [client 206.82.3.126:39304] [client 206.82.3.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.82.3.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5_IKi4zjVVKBdvuTTqSQAAAUQ"]
[Fri Dec 26 20:27:12.506022 2025] [:error] [pid 34865:tid 34871] [client 206.82.3.126:39304] [client 206.82.3.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 206.82.3.126, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5_IKi4zjVVKBdvuTTqSQAAAUQ"]
[Fri Dec 26 20:27:13.284115 2025] [:error] [pid 34865:tid 34873] [client 206.82.3.126:39310] [client 206.82.3.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.82.3.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5_Iai4zjVVKBdvuTTqSwAAAUY"]
[Fri Dec 26 20:27:13.284350 2025] [:error] [pid 34865:tid 34873] [client 206.82.3.126:39310] [client 206.82.3.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 206.82.3.126, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU5_Iai4zjVVKBdvuTTqSwAAAUY"]
[Fri Dec 26 22:52:26.654933 2025] [:error] [pid 28270:tid 28334] [client 193.19.109.183:23521] [client 193.19.109.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.183, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU6hKl9Ac79_ckdPN5JyZwAAAIU"]
[Fri Dec 26 23:37:11.304370 2025] [:error] [pid 28355:tid 28367] [client 68.218.114.244:54106] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aU6rp7sFqKXf7ADZcTY_BwAAAMo"]
[Fri Dec 26 23:37:11.812287 2025] [:error] [pid 28270:tid 28344] [client 68.218.114.244:54081] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aU6rp19Ac79_ckdPN5J-dwAAAI8"]
[Fri Dec 26 23:37:12.362188 2025] [:error] [pid 15063:tid 15071] [client 68.218.114.244:54129] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aU6rqODsf_aL46Jy7z87XgAAAQY"]
[Fri Dec 26 23:37:12.561063 2025] [:error] [pid 34865:tid 34881] [client 68.218.114.244:63441] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aU6rqKi4zjVVKBdvuTQV6AAAAU4"]
[Fri Dec 26 23:37:13.780701 2025] [:error] [pid 7160:tid 7181] [client 68.218.114.244:63476] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aU6rqew_ihNZR5L8vEW3fAAAAZI"]
[Fri Dec 26 23:37:14.784847 2025] [:error] [pid 28270:tid 28348] [client 68.218.114.244:53678] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aU6rql9Ac79_ckdPN5J-fAAAAJM"]
[Fri Dec 26 23:37:15.095655 2025] [:error] [pid 28270:tid 28333] [client 68.218.114.244:53658] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aU6rq19Ac79_ckdPN5J-fgAAAIQ"]
[Fri Dec 26 23:37:16.063746 2025] [:error] [pid 15063:tid 15089] [client 68.218.114.244:53683] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aU6rrODsf_aL46Jy7z87YAAAARg"]
[Fri Dec 26 23:37:16.552668 2025] [:error] [pid 7160:tid 7183] [client 68.218.114.244:54088] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aU6rrOw_ihNZR5L8vEW3oQAAAZQ"]
[Fri Dec 26 23:37:16.791845 2025] [:error] [pid 34865:tid 34887] [client 68.218.114.244:63424] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aU6rrKi4zjVVKBdvuTQV8wAAAVQ"]
[Fri Dec 26 23:37:17.154578 2025] [:error] [pid 7160:tid 7163] [client 68.218.114.244:54133] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aU6rrew_ihNZR5L8vEW3qAAAAYA"]
[Fri Dec 26 23:37:17.925158 2025] [:error] [pid 7160:tid 7176] [client 68.218.114.244:54761] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aU6rrew_ihNZR5L8vEW3swAAAY0"]
[Fri Dec 26 23:37:19.340813 2025] [:error] [pid 28268:tid 28290] [client 68.218.114.244:54781] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aU6rr3c_KuO_55-uPTTYAAAAAA8"]
[Fri Dec 26 23:37:20.884299 2025] [:error] [pid 28355:tid 28366] [client 68.218.114.244:60547] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aU6rsLsFqKXf7ADZcTY_EQAAAMk"]
[Fri Dec 26 23:37:21.878625 2025] [:error] [pid 15063:tid 15082] [client 68.218.114.244:63478] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aU6rseDsf_aL46Jy7z87ZAAAARE"]
[Fri Dec 26 23:37:23.416786 2025] [:error] [pid 15063:tid 15087] [client 68.218.114.244:63458] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aU6rs-Dsf_aL46Jy7z87ZgAAARY"]
[Fri Dec 26 23:37:24.555784 2025] [:error] [pid 34865:tid 34886] [client 68.218.114.244:54119] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin2.php"] [unique_id "aU6rtKi4zjVVKBdvuTQWBgAAAVM"]
[Fri Dec 26 23:37:25.809255 2025] [:error] [pid 34865:tid 34881] [client 68.218.114.244:60574] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin2.php"] [unique_id "aU6rtai4zjVVKBdvuTQWCAAAAU4"]
[Fri Dec 26 23:37:26.702443 2025] [:error] [pid 28355:tid 28358] [client 68.218.114.244:60560] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin2.php"] [unique_id "aU6rtrsFqKXf7ADZcTY_FgAAAME"]
[Fri Dec 26 23:37:27.319471 2025] [:error] [pid 28269:tid 28317] [client 68.218.114.244:53690] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin2.php"] [unique_id "aU6rt53ZK8bJ-c9-kjOxbwAAAE8"]
[Fri Dec 26 23:37:27.907968 2025] [:error] [pid 28355:tid 28364] [client 68.218.114.244:2883] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aU6rt7sFqKXf7ADZcTY_FwAAAMc"]
[Fri Dec 26 23:37:29.203617 2025] [:error] [pid 15063:tid 15071] [client 68.218.114.244:54747] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aU6rueDsf_aL46Jy7z87agAAAQY"]
[Fri Dec 26 23:37:30.008526 2025] [:error] [pid 34865:tid 34867] [client 68.218.114.244:60607] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aU6ruqi4zjVVKBdvuTQWHQAAAUA"]
[Fri Dec 26 23:37:30.809272 2025] [:error] [pid 28355:tid 28361] [client 68.218.114.244:53640] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aU6rursFqKXf7ADZcTY_GAAAAMQ"]
[Fri Dec 26 23:37:31.013124 2025] [:error] [pid 28270:tid 28348] [client 68.218.114.244:2882] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aU6ru19Ac79_ckdPN5J-iAAAAJM"]
[Fri Dec 26 23:37:32.211596 2025] [:error] [pid 28270:tid 28353] [client 68.218.114.244:60601] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aU6rvF9Ac79_ckdPN5J-jwAAAJg"]
[Fri Dec 26 23:37:33.492087 2025] [:error] [pid 34865:tid 34874] [client 68.218.114.244:60559] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aU6rvai4zjVVKBdvuTQWIAAAAUc"]
[Fri Dec 26 23:37:34.440005 2025] [:error] [pid 28269:tid 28303] [client 68.218.114.244:63432] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aU6rvp3ZK8bJ-c9-kjOxcQAAAEE"]
[Fri Dec 26 23:37:36.126134 2025] [:error] [pid 15063:tid 15079] [client 68.218.114.244:63487] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aU6rwODsf_aL46Jy7z87bQAAAQ4"]
[Fri Dec 26 23:37:36.921144 2025] [:error] [pid 34865:tid 34883] [client 68.218.114.244:2933] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aU6rwKi4zjVVKBdvuTQWKgAAAVA"]
[Fri Dec 26 23:37:39.084563 2025] [:error] [pid 28270:tid 28339] [client 68.218.114.244:63550] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aU6rw19Ac79_ckdPN5J-pAAAAIo"]
[Fri Dec 26 23:37:41.068564 2025] [:error] [pid 28270:tid 28332] [client 68.218.114.244:63446] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aU6rxV9Ac79_ckdPN5J-qQAAAIM"]
[Fri Dec 26 23:37:42.605086 2025] [:error] [pid 28355:tid 28363] [client 68.218.114.244:2899] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aU6rxrsFqKXf7ADZcTY_IgAAAMY"]
[Fri Dec 26 23:37:44.363095 2025] [:error] [pid 28269:tid 28324] [client 68.218.114.244:63434] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aU6ryJ3ZK8bJ-c9-kjOxdgAAAFY"]
[Fri Dec 26 23:37:45.883616 2025] [:error] [pid 28268:tid 28297] [client 68.218.114.244:54087] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aU6ryXc_KuO_55-uPTTYJAAAABY"]
[Fri Dec 26 23:37:46.812758 2025] [:error] [pid 34865:tid 34890] [client 68.218.114.244:54777] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aU6ryqi4zjVVKBdvuTQWPgAAAVc"]
[Fri Dec 26 23:37:47.309161 2025] [:error] [pid 34865:tid 34883] [client 68.218.114.244:2880] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aU6ry6i4zjVVKBdvuTQWQwAAAVA"]
[Fri Dec 26 23:37:47.721458 2025] [:error] [pid 28269:tid 28319] [client 68.218.114.244:53668] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aU6ry53ZK8bJ-c9-kjOxewAAAFE"]
[Fri Dec 26 23:37:48.119914 2025] [:error] [pid 7160:tid 7179] [client 68.218.114.244:63436] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aU6rzOw_ihNZR5L8vEW35QAAAZA"]
[Fri Dec 26 23:37:48.381800 2025] [:error] [pid 28268:tid 28285] [client 68.218.114.244:53687] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aU6rzHc_KuO_55-uPTTYJwAAAAo"]
[Fri Dec 26 23:37:49.004807 2025] [:error] [pid 34865:tid 34877] [client 68.218.114.244:63481] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aU6rzai4zjVVKBdvuTQWSgAAAUo"]
[Fri Dec 26 23:37:49.423761 2025] [:error] [pid 28269:tid 28316] [client 68.218.114.244:63502] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aU6rzZ3ZK8bJ-c9-kjOxfQAAAE4"]
[Fri Dec 26 23:37:50.463016 2025] [:error] [pid 7160:tid 7173] [client 68.218.114.244:63459] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aU6rzuw_ihNZR5L8vEW38QAAAYo"]
[Fri Dec 26 23:37:51.909640 2025] [:error] [pid 7160:tid 7171] [client 68.218.114.244:60571] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aU6rz-w_ihNZR5L8vEW38gAAAYg"]
[Fri Dec 26 23:37:53.369188 2025] [:error] [pid 28355:tid 28359] [client 68.218.114.244:63473] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ki1k.php"] [unique_id "aU6r0bsFqKXf7ADZcTY_JwAAAMI"]
[Fri Dec 26 23:37:54.749790 2025] [:error] [pid 7160:tid 7176] [client 68.218.114.244:60557] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ki1k.php"] [unique_id "aU6r0uw_ihNZR5L8vEW3_AAAAY0"]
[Fri Dec 26 23:37:56.410512 2025] [:error] [pid 34865:tid 34887] [client 68.218.114.244:60558] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ki1k.php"] [unique_id "aU6r1Ki4zjVVKBdvuTQWTwAAAVQ"]
[Fri Dec 26 23:37:58.026780 2025] [:error] [pid 34865:tid 34886] [client 68.218.114.244:53664] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ki1k.php"] [unique_id "aU6r1qi4zjVVKBdvuTQWUwAAAVM"]
[Fri Dec 26 23:37:59.998812 2025] [:error] [pid 34865:tid 34869] [client 68.218.114.244:63485] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/setup-config.php"] [unique_id "aU6r16i4zjVVKBdvuTQWVAAAAUI"]
[Fri Dec 26 23:38:01.667911 2025] [:error] [pid 28355:tid 28371] [client 68.218.114.244:54764] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/setup-config.php"] [unique_id "aU6r2bsFqKXf7ADZcTY_KQAAAM4"]
[Fri Dec 26 23:38:03.434372 2025] [:error] [pid 28270:tid 28353] [client 68.218.114.244:54753] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/setup-config.php"] [unique_id "aU6r219Ac79_ckdPN5J-swAAAJg"]
[Fri Dec 26 23:38:04.431019 2025] [:error] [pid 28269:tid 28309] [client 68.218.114.244:54111] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/setup-config.php"] [unique_id "aU6r3J3ZK8bJ-c9-kjOxkQAAAEc"]
[Fri Dec 26 23:38:05.434711 2025] [:error] [pid 7160:tid 7163] [client 68.218.114.244:60600] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aU6r3ew_ihNZR5L8vEW4EAAAAYA"]
[Fri Dec 26 23:38:06.606132 2025] [:error] [pid 28269:tid 28308] [client 68.218.114.244:63483] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aU6r3p3ZK8bJ-c9-kjOxlAAAAEY"]
[Fri Dec 26 23:38:07.457067 2025] [:error] [pid 7160:tid 7175] [client 68.218.114.244:63458] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aU6r3-w_ihNZR5L8vEW4FQAAAYw"]
[Fri Dec 26 23:38:29.142141 2025] [:error] [pid 28270:tid 28339] [client 68.218.114.244:53673] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aU6r9V9Ac79_ckdPN5J-3QAAAIo"]
[Fri Dec 26 23:38:31.075204 2025] [:error] [pid 15063:tid 15067] [client 68.218.114.244:53653] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aU6r9-Dsf_aL46Jy7z87pAAAAQI"]
[Fri Dec 26 23:38:32.572753 2025] [:error] [pid 28268:tid 28280] [client 68.218.114.244:54086] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aU6r-Hc_KuO_55-uPTTYPgAAAAU"]
[Fri Dec 26 23:38:33.020345 2025] [:error] [pid 7160:tid 7171] [client 68.218.114.244:54138] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aU6r-ew_ihNZR5L8vEW4MgAAAYg"]
[Fri Dec 26 23:38:34.120109 2025] [:error] [pid 7160:tid 7165] [client 68.218.114.244:2881] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin_250714170928.php"] [unique_id "aU6r-uw_ihNZR5L8vEW4NAAAAYI"]
[Fri Dec 26 23:38:35.482926 2025] [:error] [pid 7160:tid 7163] [client 68.218.114.244:53666] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin_250714170928.php"] [unique_id "aU6r--w_ihNZR5L8vEW4OAAAAYA"]
[Fri Dec 26 23:38:36.658166 2025] [:error] [pid 28269:tid 28307] [client 68.218.114.244:53638] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin_250714170928.php"] [unique_id "aU6r_J3ZK8bJ-c9-kjOxtwAAAEU"]
[Fri Dec 26 23:38:37.486593 2025] [:error] [pid 7160:tid 7166] [client 68.218.114.244:54780] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin_250714170928.php"] [unique_id "aU6r_ew_ihNZR5L8vEW4PAAAAYM"]
[Fri Dec 26 23:38:38.251019 2025] [:error] [pid 7160:tid 7174] [client 68.218.114.244:60578] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin_250714203832.php"] [unique_id "aU6r_uw_ihNZR5L8vEW4PgAAAYs"]
[Fri Dec 26 23:38:39.179979 2025] [:error] [pid 28269:tid 28320] [client 68.218.114.244:60592] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin_250714203832.php"] [unique_id "aU6r_53ZK8bJ-c9-kjOxvAAAAFI"]
[Fri Dec 26 23:38:39.926802 2025] [:error] [pid 28269:tid 28319] [client 68.218.114.244:54763] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin_250714203832.php"] [unique_id "aU6r_53ZK8bJ-c9-kjOxvQAAAFE"]
[Fri Dec 26 23:38:40.230182 2025] [:error] [pid 7160:tid 7179] [client 68.218.114.244:54091] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin_250714203832.php"] [unique_id "aU6sAOw_ihNZR5L8vEW4RAAAAZA"]
[Fri Dec 26 23:38:40.681075 2025] [:error] [pid 28269:tid 28317] [client 68.218.114.244:54739] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links.php"] [unique_id "aU6sAJ3ZK8bJ-c9-kjOxvgAAAE8"]
[Fri Dec 26 23:38:41.077465 2025] [:error] [pid 7160:tid 7168] [client 68.218.114.244:54115] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links.php"] [unique_id "aU6sAew_ihNZR5L8vEW4RQAAAYU"]
[Fri Dec 26 23:38:42.318695 2025] [:error] [pid 7160:tid 7186] [client 68.218.114.244:54096] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links.php"] [unique_id "aU6sAuw_ihNZR5L8vEW4RgAAAZc"]
[Fri Dec 26 23:38:43.943312 2025] [:error] [pid 28355:tid 28358] [client 68.218.114.244:53694] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links.php"] [unique_id "aU6sA7sFqKXf7ADZcTY_PgAAAME"]
[Fri Dec 26 23:38:46.347906 2025] [:error] [pid 34865:tid 34875] [client 68.218.114.244:53633] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin-post.php"] [unique_id "aU6sBqi4zjVVKBdvuTQWowAAAUg"]
[Fri Dec 26 23:38:47.293580 2025] [:error] [pid 15063:tid 15078] [client 68.218.114.244:63445] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin-post.php"] [unique_id "aU6sB-Dsf_aL46Jy7z87rQAAAQ0"]
[Fri Dec 26 23:38:49.826615 2025] [:error] [pid 7160:tid 7182] [client 68.218.114.244:53671] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin-post.php"] [unique_id "aU6sCew_ihNZR5L8vEW4TwAAAZM"]
[Fri Dec 26 23:38:51.188509 2025] [:error] [pid 34865:tid 34875] [client 68.218.114.244:54756] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin-post.php"] [unique_id "aU6sC6i4zjVVKBdvuTQWswAAAUg"]
[Fri Dec 26 23:38:52.730265 2025] [:error] [pid 7160:tid 7171] [client 68.218.114.244:60586] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/widgets.php"] [unique_id "aU6sDOw_ihNZR5L8vEW4VAAAAYg"]
[Fri Dec 26 23:38:55.013952 2025] [:error] [pid 28355:tid 28373] [client 68.218.114.244:54728] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/widgets.php"] [unique_id "aU6sD7sFqKXf7ADZcTY_RwAAANA"]
[Fri Dec 26 23:38:56.202540 2025] [:error] [pid 7160:tid 7178] [client 68.218.114.244:53648] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/widgets.php"] [unique_id "aU6sEOw_ihNZR5L8vEW4XgAAAY8"]
[Fri Dec 26 23:38:56.398147 2025] [:error] [pid 28270:tid 28333] [client 68.218.114.244:54103] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/widgets.php"] [unique_id "aU6sEF9Ac79_ckdPN5J-4gAAAIQ"]
[Fri Dec 26 23:38:56.481733 2025] [:error] [pid 28355:tid 28369] [client 68.218.114.244:63468] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "aU6sELsFqKXf7ADZcTY_SwAAAMw"]
[Fri Dec 26 23:38:56.590855 2025] [:error] [pid 28355:tid 28363] [client 68.218.114.244:53635] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "aU6sELsFqKXf7ADZcTY_TAAAAMY"]
[Fri Dec 26 23:38:56.733849 2025] [:error] [pid 28355:tid 28375] [client 68.218.114.244:63437] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "aU6sELsFqKXf7ADZcTY_TQAAANI"]
[Fri Dec 26 23:38:57.222208 2025] [:error] [pid 7160:tid 7179] [client 68.218.114.244:54748] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "aU6sEew_ihNZR5L8vEW4YgAAAZA"]
[Fri Dec 26 23:38:58.005914 2025] [:error] [pid 34865:tid 34882] [client 68.218.114.244:53685] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "aU6sEqi4zjVVKBdvuTQWuQAAAU8"]
[Fri Dec 26 23:39:00.036600 2025] [:error] [pid 34865:tid 34871] [client 68.218.114.244:53636] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "aU6sFKi4zjVVKBdvuTQWwQAAAUQ"]
[Fri Dec 26 23:39:00.564973 2025] [:error] [pid 7160:tid 7186] [client 68.218.114.244:2903] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "aU6sFOw_ihNZR5L8vEW4ZgAAAZc"]
[Fri Dec 26 23:39:01.011509 2025] [:error] [pid 28355:tid 28360] [client 68.218.114.244:60555] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "aU6sFbsFqKXf7ADZcTY_VAAAAMM"]
[Fri Dec 26 23:39:02.167468 2025] [:error] [pid 7160:tid 7174] [client 68.218.114.244:60563] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/priv.php"] [unique_id "aU6sFuw_ihNZR5L8vEW4awAAAYs"]
[Fri Dec 26 23:39:03.283292 2025] [:error] [pid 15063:tid 15068] [client 68.218.114.244:54769] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/priv.php"] [unique_id "aU6sF-Dsf_aL46Jy7z87vAAAAQM"]
[Fri Dec 26 23:39:04.273632 2025] [:error] [pid 28270:tid 28341] [client 68.218.114.244:60568] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/priv.php"] [unique_id "aU6sGF9Ac79_ckdPN5J-5AAAAIw"]
[Fri Dec 26 23:39:04.820801 2025] [:error] [pid 7160:tid 7167] [client 68.218.114.244:53650] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/priv.php"] [unique_id "aU6sGOw_ihNZR5L8vEW4dgAAAYQ"]
[Fri Dec 26 23:39:05.334113 2025] [:error] [pid 28268:tid 28294] [client 68.218.114.244:2377] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allez.php"] [unique_id "aU6sGXc_KuO_55-uPTTYVgAAABM"]
[Fri Dec 26 23:39:06.068464 2025] [:error] [pid 15063:tid 15077] [client 68.218.114.244:54126] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allez.php"] [unique_id "aU6sGuDsf_aL46Jy7z87wQAAAQw"]
[Fri Dec 26 23:39:06.589081 2025] [:error] [pid 28355:tid 28363] [client 68.218.114.244:63442] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allez.php"] [unique_id "aU6sGrsFqKXf7ADZcTY_VwAAAMY"]
[Fri Dec 26 23:39:06.951785 2025] [:error] [pid 28355:tid 28358] [client 68.218.114.244:54725] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allez.php"] [unique_id "aU6sGrsFqKXf7ADZcTY_WQAAAME"]
[Fri Dec 26 23:39:07.489470 2025] [:error] [pid 15063:tid 15081] [client 68.218.114.244:63474] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "aU6sG-Dsf_aL46Jy7z87wgAAARA"]
[Fri Dec 26 23:39:08.724714 2025] [:error] [pid 28269:tid 28310] [client 68.218.114.244:60596] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "aU6sHJ3ZK8bJ-c9-kjOx4wAAAEg"]
[Fri Dec 26 23:39:09.091545 2025] [:error] [pid 28269:tid 28308] [client 68.218.114.244:53691] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "aU6sHZ3ZK8bJ-c9-kjOx5QAAAEY"]
[Fri Dec 26 23:39:10.024417 2025] [:error] [pid 28268:tid 28288] [client 68.218.114.244:53646] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "aU6sHnc_KuO_55-uPTTYWgAAAA0"]
[Fri Dec 26 23:39:11.291543 2025] [:error] [pid 28269:tid 28321] [client 68.218.114.244:53676] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aU6sH53ZK8bJ-c9-kjOx7AAAAFM"]
[Fri Dec 26 23:39:12.302263 2025] [:error] [pid 28268:tid 28293] [client 68.218.114.244:54782] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aU6sIHc_KuO_55-uPTTYXQAAABI"]
[Fri Dec 26 23:39:13.367218 2025] [:error] [pid 28270:tid 28343] [client 68.218.114.244:3052] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aU6sIV9Ac79_ckdPN5J-6QAAAI4"]
[Fri Dec 26 23:39:13.937680 2025] [:error] [pid 28269:tid 28326] [client 68.218.114.244:54141] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aU6sIZ3ZK8bJ-c9-kjOx7gAAAFg"]
[Fri Dec 26 23:39:15.851937 2025] [:error] [pid 7160:tid 7186] [client 68.218.114.244:63460] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aU6sI-w_ihNZR5L8vEW4hAAAAZc"]
[Fri Dec 26 23:39:16.652217 2025] [:error] [pid 28355:tid 28369] [client 68.218.114.244:54749] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aU6sJLsFqKXf7ADZcTY_YwAAAMw"]
[Fri Dec 26 23:39:18.352553 2025] [:error] [pid 7160:tid 7168] [client 68.218.114.244:63428] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aU6sJuw_ihNZR5L8vEW4jAAAAYU"]
[Fri Dec 26 23:39:19.066547 2025] [:error] [pid 7160:tid 7181] [client 68.218.114.244:63528] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "aU6sJ-w_ihNZR5L8vEW4jQAAAZI"]
[Fri Dec 26 23:39:19.631440 2025] [:error] [pid 28270:tid 28335] [client 68.218.114.244:63454] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-envato-market-github.php"] [unique_id "aU6sJ19Ac79_ckdPN5J-7QAAAIY"]
[Fri Dec 26 23:39:20.274828 2025] [:error] [pid 7160:tid 7163] [client 68.218.114.244:53660] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-envato-market-github.php"] [unique_id "aU6sKOw_ihNZR5L8vEW4kQAAAYA"]
[Fri Dec 26 23:39:21.898373 2025] [:error] [pid 28270:tid 28339] [client 68.218.114.244:54090] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-envato-market-github.php"] [unique_id "aU6sKV9Ac79_ckdPN5J-7wAAAIo"]
[Fri Dec 26 23:39:23.080645 2025] [:error] [pid 34865:tid 34882] [client 68.218.114.244:2940] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-envato-market-github.php"] [unique_id "aU6sK6i4zjVVKBdvuTQW0gAAAU8"]
[Fri Dec 26 23:39:24.768499 2025] [:error] [pid 34865:tid 34879] [client 68.218.114.244:63484] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsoyanz.php"] [unique_id "aU6sLKi4zjVVKBdvuTQW1gAAAUw"]
[Fri Dec 26 23:39:26.853600 2025] [:error] [pid 28269:tid 28320] [client 68.218.114.244:54099] [client 68.218.114.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsoyanz.php"] [unique_id "aU6sLp3ZK8bJ-c9-kjOx_AAAAFI"]
[Sat Dec 27 01:21:17.139927 2025] [:error] [pid 34189:tid 34261] [client 185.223.152.98:42165] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aU7EDQnn007DnMwSsfceVgAAAI4"]
[Sat Dec 27 01:21:18.979830 2025] [:error] [pid 34187:tid 34195] [client 185.223.152.115:59765] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aU7EDqv8srZGEpsIm8Dv6QAAAAM"]
[Sat Dec 27 01:21:20.459566 2025] [:error] [pid 34189:tid 34254] [client 185.223.152.106:21187] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aU7EEAnn007DnMwSsfceYQAAAIc"]
[Sat Dec 27 01:21:21.950675 2025] [:error] [pid 34187:tid 34192] [client 185.223.152.118:42657] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aU7EEav8srZGEpsIm8Dv7QAAAAA"]
[Sat Dec 27 01:21:23.441423 2025] [:error] [pid 34189:tid 34253] [client 185.223.152.118:26377] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aU7EEwnn007DnMwSsfceZQAAAIY"]
[Sat Dec 27 01:21:25.170307 2025] [:error] [pid 34274:tid 34278] [client 185.223.152.100:50193] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aU7EFc6fabpS0mfhiCEBvwAAAMI"]
[Sat Dec 27 01:21:26.767386 2025] [:error] [pid 34189:tid 34270] [client 185.223.152.116:22099] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aU7EFgnn007DnMwSsfceagAAAJc"]
[Sat Dec 27 01:21:28.279356 2025] [:error] [pid 34274:tid 34299] [client 185.223.152.99:61109] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aU7EGM6fabpS0mfhiCEBwwAAANc"]
[Sat Dec 27 01:21:29.966379 2025] [:error] [pid 34274:tid 34289] [client 185.223.152.105:52517] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/images/selam.php"] [unique_id "aU7EGc6fabpS0mfhiCEByQAAAM0"]
[Sat Dec 27 01:21:31.550146 2025] [:error] [pid 34189:tid 34252] [client 185.223.152.101:34925] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aU7EGwnn007DnMwSsfcecwAAAIU"]
[Sat Dec 27 01:21:33.045807 2025] [:error] [pid 34188:tid 34227] [client 185.223.152.98:46817] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aU7EHQ54j0mXgip5BAGh4gAAAEc"]
[Sat Dec 27 01:21:34.640382 2025] [:error] [pid 34188:tid 34242] [client 185.223.152.93:63283] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aU7EHg54j0mXgip5BAGh6AAAAFY"]
[Sat Dec 27 01:21:36.192244 2025] [:error] [pid 34188:tid 34231] [client 185.223.152.100:42153] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aU7EIA54j0mXgip5BAGh7QAAAEs"]
[Sat Dec 27 01:21:37.781117 2025] [:error] [pid 34187:tid 34210] [client 185.223.152.111:35587] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aU7EIav8srZGEpsIm8Dv-wAAABI"]
[Sat Dec 27 01:21:39.365384 2025] [:error] [pid 34189:tid 34258] [client 185.223.152.93:27025] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aU7EIwnn007DnMwSsfceewAAAIs"]
[Sat Dec 27 01:21:41.055920 2025] [:error] [pid 34187:tid 34201] [client 185.223.152.96:52313] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aU7EJav8srZGEpsIm8DwAAAAAAk"]
[Sat Dec 27 01:21:42.782782 2025] [:error] [pid 34188:tid 34227] [client 185.223.152.105:32277] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/"] [unique_id "aU7EJg54j0mXgip5BAGh-gAAAEc"]
[Sat Dec 27 01:21:44.370830 2025] [:error] [pid 34187:tid 34206] [client 185.223.152.93:64033] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aU7EKKv8srZGEpsIm8DwBQAAAA4"]
[Sat Dec 27 01:21:45.974332 2025] [:error] [pid 34187:tid 34211] [client 185.223.152.99:62557] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/updates.php"] [unique_id "aU7EKav8srZGEpsIm8DwBwAAABM"]
[Sat Dec 27 01:21:47.759891 2025] [:error] [pid 34274:tid 34286] [client 185.223.152.117:53221] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aU7EK86fabpS0mfhiCEB9wAAAMo"]
[Sat Dec 27 01:21:49.341682 2025] [:error] [pid 34189:tid 34256] [client 185.223.152.114:59623] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aU7ELQnn007DnMwSsfcehAAAAIk"]
[Sat Dec 27 01:21:50.970415 2025] [:error] [pid 34188:tid 34228] [client 185.223.152.102:53943] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aU7ELg54j0mXgip5BAGiEQAAAEg"]
[Sat Dec 27 01:21:52.470377 2025] [:error] [pid 34187:tid 34206] [client 185.223.152.109:23479] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "aU7EMKv8srZGEpsIm8DwFAAAAA4"]
[Sat Dec 27 01:21:54.642972 2025] [:error] [pid 34189:tid 34253] [client 185.223.152.104:45903] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aU7EMgnn007DnMwSsfceiAAAAIY"]
[Sat Dec 27 01:21:56.256796 2025] [:error] [pid 34187:tid 34194] [client 185.223.152.101:26561] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap/function.php"] [unique_id "aU7ENKv8srZGEpsIm8DwHQAAAAI"]
[Sat Dec 27 01:21:57.885174 2025] [:error] [pid 34274:tid 34290] [client 185.223.152.119:21341] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "aU7ENc6fabpS0mfhiCECDwAAAM4"]
[Sat Dec 27 01:21:59.341394 2025] [:error] [pid 34187:tid 34211] [client 185.223.152.113:43677] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/"] [unique_id "aU7EN6v8srZGEpsIm8DwIwAAABM"]
[Sat Dec 27 01:22:00.761770 2025] [:error] [pid 34188:tid 34220] [client 185.223.152.111:55591] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aU7EOA54j0mXgip5BAGiIgAAAEA"]
[Sat Dec 27 01:22:02.259300 2025] [:error] [pid 34274:tid 34277] [client 185.223.152.107:54803] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/shell/"] [unique_id "aU7EOs6fabpS0mfhiCECJwAAAME"]
[Sat Dec 27 01:22:03.781673 2025] [:error] [pid 34189:tid 34268] [client 185.223.152.112:55913] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aU7EOwnn007DnMwSsfcekgAAAJU"]
[Sat Dec 27 01:22:05.254656 2025] [:error] [pid 34189:tid 34270] [client 185.223.152.97:38771] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aU7EPQnn007DnMwSsfcelgAAAJc"]
[Sat Dec 27 01:22:06.848981 2025] [:error] [pid 34189:tid 34267] [client 185.223.152.107:32607] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "aU7EPgnn007DnMwSsfcenAAAAJQ"]
[Sat Dec 27 01:22:08.369457 2025] [:error] [pid 34274:tid 34280] [client 185.223.152.106:56933] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aU7EQM6fabpS0mfhiCECOQAAAMQ"]
[Sat Dec 27 01:22:09.948233 2025] [:error] [pid 34188:tid 34240] [client 185.223.152.100:53603] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/"] [unique_id "aU7EQQ54j0mXgip5BAGiNQAAAFQ"]
[Sat Dec 27 01:22:11.877353 2025] [:error] [pid 34189:tid 34253] [client 185.223.152.94:42315] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/class.api.php"] [unique_id "aU7EQwnn007DnMwSsfcerQAAAIY"]
[Sat Dec 27 01:22:13.685647 2025] [:error] [pid 34274:tid 34278] [client 185.223.152.110:50989] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/"] [unique_id "aU7ERc6fabpS0mfhiCECPAAAAMI"]
[Sat Dec 27 01:22:15.269205 2025] [:error] [pid 34188:tid 34229] [client 185.223.152.110:23955] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "aU7ERw54j0mXgip5BAGiPQAAAEk"]
[Sat Dec 27 01:22:16.752300 2025] [:error] [pid 34274:tid 34284] [client 185.223.152.102:48161] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/"] [unique_id "aU7ESM6fabpS0mfhiCECRQAAAMg"]
[Sat Dec 27 01:22:18.265715 2025] [:error] [pid 34187:tid 34213] [client 185.223.152.99:29109] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aU7ESqv8srZGEpsIm8DwOwAAABU"]
[Sat Dec 27 01:22:19.872963 2025] [:error] [pid 34187:tid 34201] [client 185.223.152.96:42133] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aU7ES6v8srZGEpsIm8DwPAAAAAk"]
[Sat Dec 27 01:22:21.452741 2025] [:error] [pid 34187:tid 34207] [client 185.223.152.99:20697] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aU7ETav8srZGEpsIm8DwQAAAAA8"]
[Sat Dec 27 01:22:23.068826 2025] [:error] [pid 34187:tid 34208] [client 185.223.152.103:36403] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aU7ET6v8srZGEpsIm8DwRAAAABA"]
[Sat Dec 27 01:22:24.844371 2025] [:error] [pid 34188:tid 34229] [client 185.223.152.114:20951] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/"] [unique_id "aU7EUA54j0mXgip5BAGiSQAAAEk"]
[Sat Dec 27 01:22:26.452184 2025] [:error] [pid 47566:tid 47575] [client 185.223.152.113:42959] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "aU7EUqyYgLfR4YwO7bxutgAAAQY"]
[Sat Dec 27 01:22:28.066935 2025] [:error] [pid 34187:tid 34195] [client 185.223.152.108:36959] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/"] [unique_id "aU7EVKv8srZGEpsIm8DwTgAAAAM"]
[Sat Dec 27 01:22:29.648698 2025] [:error] [pid 47566:tid 47569] [client 185.223.152.110:44101] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aU7EVayYgLfR4YwO7bxuxgAAAQA"]
[Sat Dec 27 01:22:31.739411 2025] [:error] [pid 47566:tid 47579] [client 185.223.152.105:31397] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aU7EV6yYgLfR4YwO7bxu0QAAAQo"]
[Sat Dec 27 01:22:33.259137 2025] [:error] [pid 47566:tid 47577] [client 185.223.152.116:60255] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aU7EWayYgLfR4YwO7bxu1QAAAQg"]
[Sat Dec 27 01:22:34.782263 2025] [:error] [pid 34188:tid 34242] [client 185.223.152.119:40943] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin-header.php"] [unique_id "aU7EWg54j0mXgip5BAGiTgAAAFY"]
[Sat Dec 27 01:22:36.377645 2025] [:error] [pid 34187:tid 34214] [client 185.223.152.107:27207] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aU7EXKv8srZGEpsIm8DwVwAAABY"]
[Sat Dec 27 01:22:37.858200 2025] [:error] [pid 34274:tid 34298] [client 185.223.152.93:37333] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aU7EXc6fabpS0mfhiCECXgAAANY"]
[Sat Dec 27 01:22:39.462270 2025] [:error] [pid 34187:tid 34194] [client 185.223.152.96:26633] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config-sample.php"] [unique_id "aU7EX6v8srZGEpsIm8DwXQAAAAI"]
[Sat Dec 27 01:22:40.996195 2025] [:error] [pid 34188:tid 34220] [client 185.223.152.115:37151] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aU7EYA54j0mXgip5BAGiWAAAAEA"]
[Sat Dec 27 01:22:42.574888 2025] [:error] [pid 34189:tid 34247] [client 185.223.152.92:35501] [client 185.223.152.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "aU7EYgnn007DnMwSsfceywAAAIA"]
[Sat Dec 27 01:22:44.039829 2025] [:error] [pid 34189:tid 34265] [client 185.223.152.97:60017] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/"] [unique_id "aU7EZAnn007DnMwSsfcezAAAAJI"]
[Sat Dec 27 01:22:45.446514 2025] [:error] [pid 34274:tid 34278] [client 185.223.152.104:55397] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aU7EZc6fabpS0mfhiCECYgAAAMI"]
[Sat Dec 27 01:22:46.974941 2025] [:error] [pid 34274:tid 34285] [client 185.223.152.112:54877] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aU7EZs6fabpS0mfhiCECagAAAMk"]
[Sat Dec 27 01:22:48.461793 2025] [:error] [pid 47566:tid 47586] [client 185.223.152.104:42957] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aU7EaKyYgLfR4YwO7bxu8gAAARE"]
[Sat Dec 27 01:22:50.047198 2025] [:error] [pid 34188:tid 34234] [client 185.223.152.118:57167] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aU7Eag54j0mXgip5BAGiYgAAAE4"]
[Sat Dec 27 01:22:51.516399 2025] [:error] [pid 34188:tid 34220] [client 185.223.152.94:41465] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/"] [unique_id "aU7Eaw54j0mXgip5BAGiZAAAAEA"]
[Sat Dec 27 01:22:52.966460 2025] [:error] [pid 34274:tid 34299] [client 185.223.152.116:48721] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/function/function.php"] [unique_id "aU7EbM6fabpS0mfhiCECbwAAANc"]
[Sat Dec 27 01:22:54.946872 2025] [:error] [pid 34274:tid 34293] [client 185.223.152.107:24835] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aU7Ebs6fabpS0mfhiCECdQAAANE"]
[Sat Dec 27 01:22:56.465387 2025] [:error] [pid 34189:tid 34252] [client 185.223.152.107:54621] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aU7EcAnn007DnMwSsfce5QAAAIU"]
[Sat Dec 27 01:22:58.078592 2025] [:error] [pid 34187:tid 34206] [client 185.223.152.118:64175] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/network_xo.php"] [unique_id "aU7Ecqv8srZGEpsIm8DwawAAAA4"]
[Sat Dec 27 01:22:59.962234 2025] [:error] [pid 47566:tid 47575] [client 185.223.152.108:55191] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aU7Ec6yYgLfR4YwO7bxvBAAAAQY"]
[Sat Dec 27 01:23:01.577824 2025] [:error] [pid 34188:tid 34238] [client 185.223.152.110:51689] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/222.php"] [unique_id "aU7EdQ54j0mXgip5BAGiagAAAFI"]
[Sat Dec 27 01:23:03.055560 2025] [:error] [pid 34188:tid 34240] [client 185.223.152.95:48317] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aU7Edw54j0mXgip5BAGibAAAAFQ"]
[Sat Dec 27 01:23:04.677617 2025] [:error] [pid 34274:tid 34292] [client 185.223.152.92:62251] [client 185.223.152.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aU7EeM6fabpS0mfhiCECkQAAANA"]
[Sat Dec 27 01:23:06.272828 2025] [:error] [pid 34187:tid 34193] [client 185.223.152.104:24075] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/chosen.php"] [unique_id "aU7Eeqv8srZGEpsIm8DweQAAAAE"]
[Sat Dec 27 01:23:07.856413 2025] [:error] [pid 34188:tid 34227] [client 185.223.152.96:35007] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aU7Eew54j0mXgip5BAGicgAAAEc"]
[Sat Dec 27 01:23:09.418698 2025] [:error] [pid 34189:tid 34247] [client 185.223.152.111:55469] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aU7EfQnn007DnMwSsfce9AAAAIA"]
[Sat Dec 27 01:23:10.854734 2025] [:error] [pid 47566:tid 47573] [client 185.223.152.111:21769] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aU7EfqyYgLfR4YwO7bxvDgAAAQQ"]
[Sat Dec 27 01:23:12.350516 2025] [:error] [pid 47566:tid 47577] [client 185.223.152.102:21585] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "aU7EgKyYgLfR4YwO7bxvEAAAAQg"]
[Sat Dec 27 01:23:13.861363 2025] [:error] [pid 34187:tid 34214] [client 185.223.152.105:51009] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aU7Egav8srZGEpsIm8DwhQAAABY"]
[Sat Dec 27 01:23:15.570076 2025] [:error] [pid 34189:tid 34248] [client 185.223.152.98:40541] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aU7Egwnn007DnMwSsfce_AAAAIE"]
[Sat Dec 27 01:23:17.165709 2025] [:error] [pid 34189:tid 34259] [client 185.223.152.108:21173] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aU7EhQnn007DnMwSsfce_wAAAIw"]
[Sat Dec 27 01:23:18.768459 2025] [:error] [pid 34187:tid 34204] [client 185.223.152.115:40253] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/"] [unique_id "aU7Ehqv8srZGEpsIm8DwjAAAAAw"]
[Sat Dec 27 01:23:20.359752 2025] [:error] [pid 34189:tid 34271] [client 185.223.152.105:36835] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aU7EiAnn007DnMwSsfcfBgAAAJg"]
[Sat Dec 27 01:23:22.065101 2025] [:error] [pid 47566:tid 47579] [client 185.223.152.103:43853] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/"] [unique_id "aU7EiqyYgLfR4YwO7bxvHQAAAQo"]
[Sat Dec 27 01:23:23.674337 2025] [:error] [pid 34187:tid 34215] [client 185.223.152.105:48175] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/"] [unique_id "aU7Ei6v8srZGEpsIm8DwkAAAABc"]
[Sat Dec 27 01:23:25.082754 2025] [:error] [pid 47566:tid 47586] [client 185.223.152.111:63847] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/"] [unique_id "aU7EjayYgLfR4YwO7bxvJQAAARE"]
[Sat Dec 27 01:23:26.754766 2025] [:error] [pid 34274:tid 34285] [client 185.223.152.100:35417] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aU7Ejs6fabpS0mfhiCECsQAAAMk"]
[Sat Dec 27 01:23:28.404863 2025] [:error] [pid 34274:tid 34287] [client 185.223.152.93:26703] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aU7EkM6fabpS0mfhiCECtAAAAMs"]
[Sat Dec 27 01:23:30.563262 2025] [:error] [pid 34188:tid 34227] [client 185.223.152.115:50243] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aU7Ekg54j0mXgip5BAGijwAAAEc"]
[Sat Dec 27 01:23:32.170465 2025] [:error] [pid 34274:tid 34285] [client 185.223.152.116:47217] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/"] [unique_id "aU7ElM6fabpS0mfhiCECvgAAAMk"]
[Sat Dec 27 01:23:33.872067 2025] [:error] [pid 34274:tid 34283] [client 185.223.152.119:58775] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aU7Elc6fabpS0mfhiCECxAAAAMc"]
[Sat Dec 27 01:23:35.465094 2025] [:error] [pid 34189:tid 34253] [client 185.223.152.92:40601] [client 185.223.152.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-file.php"] [unique_id "aU7Elwnn007DnMwSsfcfLgAAAIY"]
[Sat Dec 27 01:23:37.069230 2025] [:error] [pid 34188:tid 34221] [client 185.223.152.114:53943] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aU7EmQ54j0mXgip5BAGikwAAAEE"]
[Sat Dec 27 01:23:38.577704 2025] [:error] [pid 34189:tid 34268] [client 185.223.152.107:22411] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aU7Emgnn007DnMwSsfcfMgAAAJU"]
[Sat Dec 27 01:23:40.045724 2025] [:error] [pid 34189:tid 34247] [client 185.223.152.96:52655] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "aU7EnAnn007DnMwSsfcfNAAAAIA"]
[Sat Dec 27 01:23:41.561866 2025] [:error] [pid 34274:tid 34293] [client 185.223.152.105:61087] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/"] [unique_id "aU7Enc6fabpS0mfhiCEC1wAAANE"]
[Sat Dec 27 01:23:43.249681 2025] [:error] [pid 34274:tid 34289] [client 185.223.152.117:37155] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aU7En86fabpS0mfhiCEC3QAAAM0"]
[Sat Dec 27 01:23:44.847494 2025] [:error] [pid 34189:tid 34267] [client 185.223.152.119:54961] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aU7EoAnn007DnMwSsfcfPAAAAJQ"]
[Sat Dec 27 01:23:46.365115 2025] [:error] [pid 34189:tid 34248] [client 185.223.152.94:20411] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg/function.php"] [unique_id "aU7Eognn007DnMwSsfcfPwAAAIE"]
[Sat Dec 27 01:23:47.844947 2025] [:error] [pid 34187:tid 34201] [client 185.223.152.117:49323] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aU7Eo6v8srZGEpsIm8DwnQAAAAk"]
[Sat Dec 27 01:23:49.360597 2025] [:error] [pid 34188:tid 34223] [client 185.223.152.116:64701] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aU7EpQ54j0mXgip5BAGiogAAAEM"]
[Sat Dec 27 01:23:50.884788 2025] [:error] [pid 47566:tid 47591] [client 185.223.152.113:49691] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aU7EpqyYgLfR4YwO7bxvWgAAARY"]
[Sat Dec 27 01:23:52.462763 2025] [:error] [pid 34187:tid 34202] [client 185.223.152.105:56527] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aU7EqKv8srZGEpsIm8DwoQAAAAo"]
[Sat Dec 27 01:23:53.944508 2025] [:error] [pid 34188:tid 34227] [client 185.223.152.109:63079] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aU7EqQ54j0mXgip5BAGiqgAAAEc"]
[Sat Dec 27 01:23:55.445017 2025] [:error] [pid 34189:tid 34256] [client 185.223.152.93:38313] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aU7Eqwnn007DnMwSsfcfUAAAAIk"]
[Sat Dec 27 01:23:56.952667 2025] [:error] [pid 34274:tid 34276] [client 185.223.152.112:49453] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aU7ErM6fabpS0mfhiCEC-wAAAMA"]
[Sat Dec 27 01:23:58.572304 2025] [:error] [pid 34189:tid 34260] [client 185.223.152.118:46209] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aU7Ergnn007DnMwSsfcfVwAAAI0"]
[Sat Dec 27 01:24:00.163821 2025] [:error] [pid 34189:tid 34257] [client 185.223.152.105:39841] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aU7EsAnn007DnMwSsfcfWwAAAIo"]
[Sat Dec 27 01:24:01.758245 2025] [:error] [pid 34188:tid 34220] [client 185.223.152.101:36211] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aU7EsQ54j0mXgip5BAGitAAAAEA"]
[Sat Dec 27 01:24:03.270616 2025] [:error] [pid 34188:tid 34222] [client 185.223.152.101:31489] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aU7Esw54j0mXgip5BAGivAAAAEI"]
[Sat Dec 27 01:24:04.765886 2025] [:error] [pid 47566:tid 47585] [client 185.223.152.95:22463] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/about.php"] [unique_id "aU7EtKyYgLfR4YwO7bxvagAAARA"]
[Sat Dec 27 01:24:06.240271 2025] [:error] [pid 34274:tid 34291] [client 185.223.152.93:28465] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aU7Ets6fabpS0mfhiCEDEQAAAM8"]
[Sat Dec 27 01:24:07.746613 2025] [:error] [pid 34188:tid 34230] [client 185.223.152.96:22519] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aU7Etw54j0mXgip5BAGixAAAAEo"]
[Sat Dec 27 01:24:09.265621 2025] [:error] [pid 47566:tid 47591] [client 185.223.152.110:25715] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/"] [unique_id "aU7EuayYgLfR4YwO7bxvdgAAARY"]
[Sat Dec 27 01:24:10.858127 2025] [:error] [pid 47566:tid 47578] [client 185.223.152.112:40767] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aU7EuqyYgLfR4YwO7bxvegAAAQk"]
[Sat Dec 27 01:24:12.468186 2025] [:error] [pid 34189:tid 34269] [client 185.223.152.99:50871] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/"] [unique_id "aU7EvAnn007DnMwSsfcfagAAAJY"]
[Sat Dec 27 01:24:13.968751 2025] [:error] [pid 47566:tid 47573] [client 185.223.152.95:28385] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aU7EvayYgLfR4YwO7bxvfQAAAQQ"]
[Sat Dec 27 01:24:15.440857 2025] [:error] [pid 34187:tid 34195] [client 185.223.152.98:24965] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron-backup.php"] [unique_id "aU7Ev6v8srZGEpsIm8DwugAAAAM"]
[Sat Dec 27 01:24:16.962171 2025] [:error] [pid 34189:tid 34267] [client 185.223.152.105:26209] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/"] [unique_id "aU7EwAnn007DnMwSsfcfcQAAAJQ"]
[Sat Dec 27 01:24:18.455168 2025] [:error] [pid 34274:tid 34282] [client 185.223.152.115:59225] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/z.php"] [unique_id "aU7Ews6fabpS0mfhiCEDLAAAAMY"]
[Sat Dec 27 01:24:19.972519 2025] [:error] [pid 47566:tid 47578] [client 185.223.152.109:21129] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/admin.php"] [unique_id "aU7Ew6yYgLfR4YwO7bxviAAAAQk"]
[Sat Dec 27 01:24:21.563103 2025] [:error] [pid 47566:tid 47573] [client 185.223.152.106:37995] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/"] [unique_id "aU7ExayYgLfR4YwO7bxvjAAAAQQ"]
[Sat Dec 27 01:24:23.066625 2025] [:error] [pid 34274:tid 34281] [client 185.223.152.113:37819] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/"] [unique_id "aU7Ex86fabpS0mfhiCEDNgAAAMU"]
[Sat Dec 27 01:24:24.871529 2025] [:error] [pid 47566:tid 47587] [client 185.223.152.101:28595] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/files/"] [unique_id "aU7EyKyYgLfR4YwO7bxvlgAAARI"]
[Sat Dec 27 01:24:26.444934 2025] [:error] [pid 34189:tid 34263] [client 185.223.152.116:50551] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/themes/"] [unique_id "aU7Eygnn007DnMwSsfcfhAAAAJA"]
[Sat Dec 27 01:24:27.955466 2025] [:error] [pid 34188:tid 34233] [client 185.223.152.111:34209] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/archives/"] [unique_id "aU7Eyw54j0mXgip5BAGi2QAAAE0"]
[Sat Dec 27 01:24:29.557774 2025] [:error] [pid 34188:tid 34235] [client 185.223.152.114:25147] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aU7EzQ54j0mXgip5BAGi2wAAAE8"]
[Sat Dec 27 01:24:31.060529 2025] [:error] [pid 34187:tid 34196] [client 185.223.152.102:33685] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/404.php"] [unique_id "aU7Ez6v8srZGEpsIm8DwyAAAAAQ"]
[Sat Dec 27 01:24:32.871168 2025] [:error] [pid 34188:tid 34230] [client 185.223.152.93:48251] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/packed.php"] [unique_id "aU7E0A54j0mXgip5BAGi4QAAAEo"]
[Sat Dec 27 01:24:34.381860 2025] [:error] [pid 34187:tid 34210] [client 185.223.152.116:56619] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aU7E0qv8srZGEpsIm8DwywAAABI"]
[Sat Dec 27 01:24:36.064276 2025] [:error] [pid 34274:tid 34281] [client 185.223.152.103:33579] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/components/"] [unique_id "aU7E1M6fabpS0mfhiCEDQgAAAMU"]
[Sat Dec 27 01:24:37.672581 2025] [:error] [pid 34187:tid 34214] [client 185.223.152.103:29203] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aU7E1av8srZGEpsIm8Dw0AAAABY"]
[Sat Dec 27 01:24:39.145723 2025] [:error] [pid 34187:tid 34205] [client 185.223.152.107:58603] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aU7E16v8srZGEpsIm8Dw1QAAAA0"]
[Sat Dec 27 01:24:40.766048 2025] [:error] [pid 34274:tid 34295] [client 185.223.152.108:56649] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/"] [unique_id "aU7E2M6fabpS0mfhiCEDSgAAANM"]
[Sat Dec 27 01:24:42.269036 2025] [:error] [pid 34274:tid 34289] [client 185.223.152.101:59397] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aU7E2s6fabpS0mfhiCEDTQAAAM0"]
[Sat Dec 27 01:24:43.745462 2025] [:error] [pid 47566:tid 47577] [client 185.223.152.111:59581] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/options.php"] [unique_id "aU7E26yYgLfR4YwO7bxvswAAAQg"]
[Sat Dec 27 01:24:45.272617 2025] [:error] [pid 34188:tid 34230] [client 185.223.152.101:39873] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aU7E3Q54j0mXgip5BAGi_gAAAEo"]
[Sat Dec 27 01:24:47.870138 2025] [:error] [pid 34189:tid 34270] [client 185.223.152.117:53481] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aU7E3wnn007DnMwSsfcfvQAAAJc"]
[Sat Dec 27 01:24:49.366443 2025] [:error] [pid 47566:tid 47591] [client 185.223.152.112:50895] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "aU7E4ayYgLfR4YwO7bxvtwAAARY"]
[Sat Dec 27 01:24:50.884120 2025] [:error] [pid 34189:tid 34260] [client 185.223.152.95:26019] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aU7E4gnn007DnMwSsfcfyAAAAI0"]
[Sat Dec 27 01:24:52.339166 2025] [:error] [pid 47566:tid 47570] [client 185.223.152.97:35401] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aU7E5KyYgLfR4YwO7bxvxgAAAQE"]
[Sat Dec 27 01:24:53.825388 2025] [:error] [pid 47566:tid 47584] [client 185.223.152.104:45621] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aU7E5ayYgLfR4YwO7bxvzwAAAQ8"]
[Sat Dec 27 01:24:55.267232 2025] [:error] [pid 47566:tid 47580] [client 185.223.152.110:64807] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aU7E56yYgLfR4YwO7bxv1gAAAQs"]
[Sat Dec 27 01:24:56.765244 2025] [:error] [pid 47566:tid 47571] [client 185.223.152.119:63305] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/admin.php"] [unique_id "aU7E6KyYgLfR4YwO7bxv3gAAAQI"]
[Sat Dec 27 01:24:58.376322 2025] [:error] [pid 34274:tid 34296] [client 185.223.152.114:46057] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/options.php"] [unique_id "aU7E6s6fabpS0mfhiCEDXQAAANQ"]
[Sat Dec 27 01:24:59.982981 2025] [:error] [pid 47566:tid 47579] [client 185.223.152.101:32589] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aU7E66yYgLfR4YwO7bxv8gAAAQo"]
[Sat Dec 27 01:25:01.562017 2025] [:error] [pid 47566:tid 47593] [client 185.223.152.98:63415] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aU7E7ayYgLfR4YwO7bxv9QAAARg"]
[Sat Dec 27 01:25:03.051299 2025] [:error] [pid 34187:tid 34193] [client 185.223.152.110:21335] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shell3.php"] [unique_id "aU7E76v8srZGEpsIm8Dw8AAAAAE"]
[Sat Dec 27 01:25:04.656481 2025] [:error] [pid 34274:tid 34283] [client 185.223.152.109:31249] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aU7E8M6fabpS0mfhiCEDbgAAAMc"]
[Sat Dec 27 01:25:06.163800 2025] [:error] [pid 34274:tid 34293] [client 185.223.152.115:24361] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aU7E8s6fabpS0mfhiCEDcgAAANE"]
[Sat Dec 27 01:25:08.245009 2025] [:error] [pid 34274:tid 34284] [client 185.223.152.109:28289] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aU7E9M6fabpS0mfhiCEDdgAAAMg"]
[Sat Dec 27 01:25:09.757954 2025] [:error] [pid 47566:tid 47582] [client 185.223.152.107:29655] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmrlpc.php"] [unique_id "aU7E9ayYgLfR4YwO7bxv-wAAAQ0"]
[Sat Dec 27 01:25:11.258096 2025] [:error] [pid 34189:tid 34253] [client 185.223.152.95:41977] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aU7E9wnn007DnMwSsfcf2gAAAIY"]
[Sat Dec 27 01:25:12.759176 2025] [:error] [pid 34274:tid 34289] [client 185.223.152.93:26769] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/"] [unique_id "aU7E-M6fabpS0mfhiCEDjQAAAM0"]
[Sat Dec 27 01:25:14.354839 2025] [:error] [pid 34188:tid 34244] [client 185.223.152.99:49287] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aU7E-g54j0mXgip5BAGjMgAAAFg"]
[Sat Dec 27 01:25:15.854162 2025] [:error] [pid 47566:tid 47576] [client 185.223.152.103:40859] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aU7E-6yYgLfR4YwO7bxwCgAAAQc"]
[Sat Dec 27 01:25:17.579724 2025] [:error] [pid 34274:tid 34282] [client 185.223.152.118:41571] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/"] [unique_id "aU7E_c6fabpS0mfhiCEDlgAAAMY"]
[Sat Dec 27 01:25:19.042831 2025] [:error] [pid 34187:tid 34198] [client 185.223.152.97:57787] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links.php"] [unique_id "aU7E_6v8srZGEpsIm8DxHgAAAAY"]
[Sat Dec 27 01:25:20.440287 2025] [:error] [pid 34274:tid 34297] [client 185.223.152.114:33823] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/"] [unique_id "aU7FAM6fabpS0mfhiCEDowAAANU"]
[Sat Dec 27 01:25:22.136775 2025] [:error] [pid 34274:tid 34277] [client 185.223.152.105:34913] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aU7FAs6fabpS0mfhiCEDqQAAAME"]
[Sat Dec 27 01:25:23.743492 2025] [:error] [pid 47566:tid 47579] [client 185.223.152.99:21517] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aU7FA6yYgLfR4YwO7bxwFgAAAQo"]
[Sat Dec 27 01:25:25.149797 2025] [:error] [pid 47566:tid 47580] [client 185.223.152.99:51393] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/about.php"] [unique_id "aU7FBayYgLfR4YwO7bxwHAAAAQs"]
[Sat Dec 27 01:25:26.642680 2025] [:error] [pid 34188:tid 34238] [client 185.223.152.104:47967] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/"] [unique_id "aU7FBg54j0mXgip5BAGjRgAAAFI"]
[Sat Dec 27 01:25:28.079281 2025] [:error] [pid 47566:tid 47576] [client 185.223.152.106:46063] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aU7FCKyYgLfR4YwO7bxwIwAAAQc"]
[Sat Dec 27 01:25:29.549217 2025] [:error] [pid 34274:tid 34286] [client 185.223.152.112:24141] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aU7FCc6fabpS0mfhiCEDswAAAMo"]
[Sat Dec 27 01:25:31.038392 2025] [:error] [pid 34274:tid 34293] [client 185.223.152.116:33923] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aU7FC86fabpS0mfhiCEDtgAAANE"]
[Sat Dec 27 01:25:32.441845 2025] [:error] [pid 34187:tid 34212] [client 185.223.152.94:49537] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "aU7FDKv8srZGEpsIm8DxKQAAABQ"]
[Sat Dec 27 01:25:34.345217 2025] [:error] [pid 34188:tid 34234] [client 185.223.152.98:53173] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/development/"] [unique_id "aU7FDg54j0mXgip5BAGjSwAAAE4"]
[Sat Dec 27 01:25:35.843209 2025] [:error] [pid 34188:tid 34236] [client 185.223.152.104:20151] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aU7FDw54j0mXgip5BAGjUAAAAFA"]
[Sat Dec 27 01:25:37.253249 2025] [:error] [pid 34187:tid 34209] [client 185.223.152.112:54981] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aU7FEav8srZGEpsIm8DxLwAAABE"]
[Sat Dec 27 01:25:38.757895 2025] [:error] [pid 34274:tid 34294] [client 185.223.152.96:20847] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2024/"] [unique_id "aU7FEs6fabpS0mfhiCEDyQAAANI"]
[Sat Dec 27 01:25:40.258312 2025] [:error] [pid 47566:tid 47578] [client 185.223.152.111:35831] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aU7FFKyYgLfR4YwO7bxwNAAAAQk"]
[Sat Dec 27 01:25:41.752680 2025] [:error] [pid 34189:tid 34251] [client 185.223.152.107:52475] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content.php"] [unique_id "aU7FFQnn007DnMwSsfcf8QAAAIQ"]
[Sat Dec 27 01:25:43.266684 2025] [:error] [pid 34189:tid 34255] [client 185.223.152.94:34237] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aU7FFwnn007DnMwSsfcf9AAAAIg"]
[Sat Dec 27 01:25:45.747208 2025] [:error] [pid 34189:tid 34268] [client 185.223.152.96:40377] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/"] [unique_id "aU7FGQnn007DnMwSsfcf-AAAAJU"]
[Sat Dec 27 01:25:47.252043 2025] [:error] [pid 47566:tid 47587] [client 185.223.152.102:59485] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/"] [unique_id "aU7FG6yYgLfR4YwO7bxwSQAAARI"]
[Sat Dec 27 01:25:48.848747 2025] [:error] [pid 47566:tid 47582] [client 185.223.152.105:49345] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/themes.php"] [unique_id "aU7FHKyYgLfR4YwO7bxwTQAAAQ0"]
[Sat Dec 27 01:25:50.343754 2025] [:error] [pid 47566:tid 47590] [client 185.223.152.92:61941] [client 185.223.152.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aU7FHqyYgLfR4YwO7bxwVAAAARU"]
[Sat Dec 27 01:25:51.885087 2025] [:error] [pid 47566:tid 47585] [client 185.223.152.103:44909] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aU7FH6yYgLfR4YwO7bxwWQAAARA"]
[Sat Dec 27 01:25:53.454279 2025] [:error] [pid 47566:tid 47592] [client 185.223.152.95:60139] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aU7FIayYgLfR4YwO7bxwYgAAARc"]
[Sat Dec 27 01:25:55.044691 2025] [:error] [pid 47566:tid 47585] [client 185.223.152.119:54377] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aU7FI6yYgLfR4YwO7bxwZgAAARA"]
[Sat Dec 27 01:25:56.553367 2025] [:error] [pid 47566:tid 47587] [client 185.223.152.101:20065] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aU7FJKyYgLfR4YwO7bxwbgAAARI"]
[Sat Dec 27 01:25:58.136958 2025] [:error] [pid 47566:tid 47581] [client 185.223.152.103:27897] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/m.php"] [unique_id "aU7FJqyYgLfR4YwO7bxwewAAAQw"]
[Sat Dec 27 01:25:59.644179 2025] [:error] [pid 47566:tid 47574] [client 185.223.152.101:63379] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aU7FJ6yYgLfR4YwO7bxwfQAAAQU"]
[Sat Dec 27 01:26:01.144755 2025] [:error] [pid 34189:tid 34250] [client 185.223.152.96:50583] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aU7FKQnn007DnMwSsfcgCgAAAIM"]
[Sat Dec 27 01:26:02.543350 2025] [:error] [pid 34274:tid 34299] [client 185.223.152.113:34485] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/et-cache/taxonomy/project_category/21/about.php"] [unique_id "aU7FKs6fabpS0mfhiCED_AAAANc"]
[Sat Dec 27 01:26:03.943376 2025] [:error] [pid 34274:tid 34298] [client 185.223.152.106:24837] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/semplice4/assets/js/admin.php"] [unique_id "aU7FK86fabpS0mfhiCEEAgAAANY"]
[Sat Dec 27 01:26:05.489019 2025] [:error] [pid 34187:tid 34192] [client 185.223.152.109:27045] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/Divi/common/admin.php"] [unique_id "aU7FLav8srZGEpsIm8DxTwAAAAA"]
[Sat Dec 27 01:26:06.897280 2025] [:error] [pid 47566:tid 47587] [client 185.223.152.109:39933] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/classes/admin.php"] [unique_id "aU7FLqyYgLfR4YwO7bxwqwAAARI"]
[Sat Dec 27 01:26:08.450483 2025] [:error] [pid 47566:tid 47591] [client 185.223.152.115:45417] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/lib/sounds/admin.php"] [unique_id "aU7FMKyYgLfR4YwO7bxwswAAARY"]
[Sat Dec 27 01:26:09.973183 2025] [:error] [pid 34189:tid 34271] [client 185.223.152.95:62015] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/portfolio/seton/about.php"] [unique_id "aU7FMQnn007DnMwSsfcgHAAAAJg"]
[Sat Dec 27 01:26:11.562892 2025] [:error] [pid 34274:tid 34288] [client 185.223.152.93:46835] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/portfolio/about.php"] [unique_id "aU7FM86fabpS0mfhiCEEEwAAAMw"]
[Sat Dec 27 01:26:13.049121 2025] [:error] [pid 34189:tid 34262] [client 185.223.152.103:23499] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/single/about.php"] [unique_id "aU7FNQnn007DnMwSsfcgIgAAAI8"]
[Sat Dec 27 01:26:14.552635 2025] [:error] [pid 47566:tid 47583] [client 185.223.152.119:57699] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/full/admin.php"] [unique_id "aU7FNqyYgLfR4YwO7bxwuQAAAQ4"]
[Sat Dec 27 01:26:16.037860 2025] [:error] [pid 34187:tid 34207] [client 185.223.152.100:36263] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/about.php"] [unique_id "aU7FOKv8srZGEpsIm8DxXwAAAA8"]
[Sat Dec 27 01:26:17.526307 2025] [:error] [pid 34188:tid 34229] [client 185.223.152.108:25487] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/fm.php"] [unique_id "aU7FOQ54j0mXgip5BAGjdAAAAEk"]
[Sat Dec 27 01:26:18.940405 2025] [:error] [pid 34187:tid 34212] [client 185.223.152.109:25647] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wolf.php"] [unique_id "aU7FOqv8srZGEpsIm8DxYgAAABQ"]
[Sat Dec 27 01:26:20.512712 2025] [:error] [pid 34187:tid 34204] [client 185.223.152.113:63997] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/files/admin.php"] [unique_id "aU7FPKv8srZGEpsIm8DxZAAAAAw"]
[Sat Dec 27 01:26:22.143659 2025] [:error] [pid 34188:tid 34241] [client 185.223.152.110:57027] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/1.php"] [unique_id "aU7FPg54j0mXgip5BAGjdgAAAFU"]
[Sat Dec 27 01:26:23.645439 2025] [:error] [pid 34187:tid 34210] [client 185.223.152.108:40263] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/cei-Biz/1.php"] [unique_id "aU7FP6v8srZGEpsIm8DxcAAAABI"]
[Sat Dec 27 01:26:25.079067 2025] [:error] [pid 34274:tid 34295] [client 185.223.152.108:62673] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/stamp/1.php"] [unique_id "aU7FQc6fabpS0mfhiCEEKAAAANM"]
[Sat Dec 27 01:26:26.538896 2025] [:error] [pid 34188:tid 34222] [client 185.223.152.117:32377] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bbn.php"] [unique_id "aU7FQg54j0mXgip5BAGjfQAAAEI"]
[Sat Dec 27 01:26:28.043793 2025] [:error] [pid 34188:tid 34225] [client 185.223.152.106:52291] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/w3-total-cache/inc/1.php"] [unique_id "aU7FRA54j0mXgip5BAGjfwAAAEU"]
[Sat Dec 27 01:26:29.541049 2025] [:error] [pid 34187:tid 34214] [client 185.223.152.114:30257] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/LayerSlider/wp/1.php"] [unique_id "aU7FRav8srZGEpsIm8DxfQAAABY"]
[Sat Dec 27 01:26:31.048415 2025] [:error] [pid 47566:tid 47592] [client 185.223.152.112:24961] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/all-in-one-wp-security-and-firewall/1.php"] [unique_id "aU7FR6yYgLfR4YwO7bxw3gAAARc"]
[Sat Dec 27 01:26:32.545303 2025] [:error] [pid 47566:tid 47581] [client 185.223.152.116:45839] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-sweep/1.php"] [unique_id "aU7FSKyYgLfR4YwO7bxw5gAAAQw"]
[Sat Dec 27 01:26:33.983102 2025] [:error] [pid 47566:tid 47593] [client 185.223.152.100:29979] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/tablepress/1.php"] [unique_id "aU7FSayYgLfR4YwO7bxw7QAAARg"]
[Sat Dec 27 01:26:35.468416 2025] [:error] [pid 34189:tid 34250] [client 185.223.152.112:63377] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/autoptimize/1.php"] [unique_id "aU7FSwnn007DnMwSsfcgNgAAAIM"]
[Sat Dec 27 01:26:36.950376 2025] [:error] [pid 34189:tid 34259] [client 185.223.152.105:52261] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/ubermenu-icons/thom-hardy.php"] [unique_id "aU7FTAnn007DnMwSsfcgNwAAAIw"]
[Sat Dec 27 01:26:38.438639 2025] [:error] [pid 34189:tid 34258] [client 185.223.152.97:37001] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/newsletter/main/1.php"] [unique_id "aU7FTgnn007DnMwSsfcgPwAAAIs"]
[Sat Dec 27 01:26:39.841399 2025] [:error] [pid 34189:tid 34266] [client 185.223.152.101:51773] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wordpress-seo-premium/deprecated/1.php"] [unique_id "aU7FTwnn007DnMwSsfcgQwAAAJM"]
[Sat Dec 27 01:26:41.281777 2025] [:error] [pid 34274:tid 34292] [client 185.223.152.93:30197] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/backups/1.php"] [unique_id "aU7FUc6fabpS0mfhiCEEMgAAANA"]
[Sat Dec 27 01:26:42.746787 2025] [:error] [pid 47566:tid 47579] [client 185.223.152.109:53637] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugin.php"] [unique_id "aU7FUqyYgLfR4YwO7bxxFwAAAQo"]
[Sat Dec 27 01:26:44.337601 2025] [:error] [pid 47566:tid 47591] [client 185.223.152.116:31411] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/htdocs/shell.php"] [unique_id "aU7FVKyYgLfR4YwO7bxxHgAAARY"]
[Sat Dec 27 01:26:46.076099 2025] [:error] [pid 47566:tid 47587] [client 185.223.152.95:60109] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/web/admin.php"] [unique_id "aU7FVqyYgLfR4YwO7bxxKgAAARI"]
[Sat Dec 27 01:26:47.540378 2025] [:error] [pid 34274:tid 34296] [client 185.223.152.100:57375] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/public_html/shell.php"] [unique_id "aU7FV86fabpS0mfhiCEEOAAAANQ"]
[Sat Dec 27 01:26:48.942125 2025] [:error] [pid 47566:tid 47586] [client 185.223.152.110:54009] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/site/admin.php"] [unique_id "aU7FWKyYgLfR4YwO7bxxLwAAARE"]
[Sat Dec 27 01:26:50.338694 2025] [:error] [pid 34188:tid 34224] [client 185.223.152.119:56209] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/webroot/admin.php"] [unique_id "aU7FWg54j0mXgip5BAGjjwAAAEQ"]
[Sat Dec 27 01:26:51.838847 2025] [:error] [pid 47566:tid 47591] [client 185.223.152.101:20235] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/www/shell.php"] [unique_id "aU7FW6yYgLfR4YwO7bxxNgAAARY"]
[Sat Dec 27 01:26:53.348835 2025] [:error] [pid 34188:tid 34240] [client 185.223.152.107:21793] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/html/admin.php"] [unique_id "aU7FXQ54j0mXgip5BAGjkwAAAFQ"]
[Sat Dec 27 01:26:54.840759 2025] [:error] [pid 34189:tid 34267] [client 185.223.152.94:51029] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes2/blocks/column/"] [unique_id "aU7FXgnn007DnMwSsfcgSwAAAJQ"]
[Sat Dec 27 01:26:56.348242 2025] [:error] [pid 34188:tid 34227] [client 185.223.152.96:48533] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/dynamic_avia/"] [unique_id "aU7FYA54j0mXgip5BAGjlwAAAEc"]
[Sat Dec 27 01:26:57.948322 2025] [:error] [pid 34187:tid 34209] [client 185.223.152.106:38909] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aU7FYav8srZGEpsIm8DxoAAAABE"]
[Sat Dec 27 01:26:59.442709 2025] [:error] [pid 34274:tid 34299] [client 185.223.152.107:20009] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/let.php"] [unique_id "aU7FY86fabpS0mfhiCEETgAAANc"]
[Sat Dec 27 01:27:01.004989 2025] [:error] [pid 34274:tid 34300] [client 185.223.152.108:42299] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/edit.php"] [unique_id "aU7FZc6fabpS0mfhiCEEUAAAANg"]
[Sat Dec 27 01:27:02.567463 2025] [:error] [pid 34189:tid 34259] [client 185.223.152.108:61573] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/areak/areak1.php"] [unique_id "aU7FZgnn007DnMwSsfcgVwAAAIw"]
[Sat Dec 27 01:27:04.154522 2025] [:error] [pid 47566:tid 47580] [client 185.223.152.99:51705] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/11.php"] [unique_id "aU7FaKyYgLfR4YwO7bxxVgAAAQs"]
[Sat Dec 27 01:27:05.644749 2025] [:error] [pid 34187:tid 34194] [client 185.223.152.100:21845] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dpsnv/classes/font/"] [unique_id "aU7Faav8srZGEpsIm8DxpAAAAAI"]
[Sat Dec 27 01:27:07.140763 2025] [:error] [pid 47566:tid 47570] [client 185.223.152.114:39061] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aU7Fa6yYgLfR4YwO7bxxYgAAAQE"]
[Sat Dec 27 01:27:08.943066 2025] [:error] [pid 34274:tid 34297] [client 185.223.152.107:36943] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/chosen.php"] [unique_id "aU7FbM6fabpS0mfhiCEEZwAAANU"]
[Sat Dec 27 01:27:11.039746 2025] [:error] [pid 34188:tid 34228] [client 185.223.152.93:63247] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aU7Fbw54j0mXgip5BAGjnwAAAEg"]
[Sat Dec 27 01:27:13.941445 2025] [:error] [pid 34189:tid 34262] [client 185.223.152.103:59793] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/"] [unique_id "aU7FcQnn007DnMwSsfcgZAAAAI8"]
[Sat Dec 27 01:27:15.439144 2025] [:error] [pid 34274:tid 34291] [client 185.223.152.115:46533] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aU7Fc86fabpS0mfhiCEEewAAAM8"]
[Sat Dec 27 01:27:16.952428 2025] [:error] [pid 34274:tid 34280] [client 185.223.152.102:39077] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/new.php"] [unique_id "aU7FdM6fabpS0mfhiCEEgAAAAMQ"]
[Sat Dec 27 01:27:18.446759 2025] [:error] [pid 34187:tid 34212] [client 185.223.152.117:27595] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/wp-admins.php"] [unique_id "aU7Fdqv8srZGEpsIm8DxwQAAABQ"]
[Sat Dec 27 01:27:19.869558 2025] [:error] [pid 34187:tid 34209] [client 185.223.152.111:23163] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aU7Fd6v8srZGEpsIm8DxygAAABE"]
[Sat Dec 27 01:27:21.353696 2025] [:error] [pid 34187:tid 34204] [client 185.223.152.116:54229] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/themes/wp-cron.php"] [unique_id "aU7Feav8srZGEpsIm8DxzwAAAAw"]
[Sat Dec 27 01:27:22.842896 2025] [:error] [pid 34189:tid 34247] [client 185.223.152.119:35593] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/cover/cover/theme-footer.php"] [unique_id "aU7Fegnn007DnMwSsfcgbgAAAIA"]
[Sat Dec 27 01:27:24.482757 2025] [:error] [pid 34189:tid 34256] [client 185.223.152.111:49703] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-posts/latest-posts/faq-builder.php"] [unique_id "aU7FfAnn007DnMwSsfcgcwAAAIk"]
[Sat Dec 27 01:27:25.934662 2025] [:error] [pid 34188:tid 34238] [client 185.223.152.112:51755] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aU7FfQ54j0mXgip5BAGjuAAAAFI"]
[Sat Dec 27 01:27:27.341266 2025] [:error] [pid 47566:tid 47573] [client 185.223.152.95:38469] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/algovge.php"] [unique_id "aU7Ff6yYgLfR4YwO7bxxlgAAAQQ"]
[Sat Dec 27 01:27:28.782128 2025] [:error] [pid 34189:tid 34248] [client 185.223.152.94:27577] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/klex.php"] [unique_id "aU7FgAnn007DnMwSsfcgeAAAAIE"]
[Sat Dec 27 01:27:30.240962 2025] [:error] [pid 34188:tid 34226] [client 185.223.152.118:28695] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/datate.php"] [unique_id "aU7Fgg54j0mXgip5BAGjxAAAAEY"]
[Sat Dec 27 01:27:31.736656 2025] [:error] [pid 34274:tid 34294] [client 185.223.152.117:49097] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/alfa.php"] [unique_id "aU7Fg86fabpS0mfhiCEEqgAAANI"]
[Sat Dec 27 01:27:33.248486 2025] [:error] [pid 34189:tid 34255] [client 185.223.152.110:47351] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/zczv.php"] [unique_id "aU7FhQnn007DnMwSsfcgfgAAAIg"]
[Sat Dec 27 01:27:34.743412 2025] [:error] [pid 34189:tid 34261] [client 185.223.152.102:61743] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-speed.php"] [unique_id "aU7Fhgnn007DnMwSsfcgfwAAAI4"]
[Sat Dec 27 01:27:36.258846 2025] [:error] [pid 34188:tid 34235] [client 185.223.152.119:36073] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/tx1.php"] [unique_id "aU7FiA54j0mXgip5BAGjywAAAE8"]
[Sat Dec 27 01:27:37.759678 2025] [:error] [pid 47566:tid 47589] [client 185.223.152.117:31055] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-classic-editor.php"] [unique_id "aU7FiayYgLfR4YwO7bxxqAAAARQ"]
[Sat Dec 27 01:27:40.673957 2025] [:error] [pid 34274:tid 34279] [client 185.223.152.97:35313] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ox.php"] [unique_id "aU7FjM6fabpS0mfhiCEEuAAAAMM"]
[Sat Dec 27 01:27:42.076846 2025] [:error] [pid 34188:tid 34230] [client 185.223.152.104:57859] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-error.php"] [unique_id "aU7Fjg54j0mXgip5BAGjzgAAAEo"]
[Sat Dec 27 01:27:43.536853 2025] [:error] [pid 34189:tid 34256] [client 185.223.152.106:37943] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/tx1.php"] [unique_id "aU7Fjwnn007DnMwSsfcgmAAAAIk"]
[Sat Dec 27 01:27:44.942590 2025] [:error] [pid 47566:tid 47570] [client 185.223.152.100:36995] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/templates/xex.php"] [unique_id "aU7FkKyYgLfR4YwO7bxxtAAAAQE"]
[Sat Dec 27 01:27:46.436807 2025] [:error] [pid 34187:tid 34204] [client 185.223.152.97:39149] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU7Fkqv8srZGEpsIm8Dx5AAAAAw"]
[Sat Dec 27 01:27:47.880144 2025] [:error] [pid 34274:tid 34277] [client 185.223.152.100:43679] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/themes.php"] [unique_id "aU7Fk86fabpS0mfhiCEE0AAAAME"]
[Sat Dec 27 01:27:49.339467 2025] [:error] [pid 34187:tid 34213] [client 185.223.152.114:21911] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aU7Flav8srZGEpsIm8Dx6gAAABU"]
[Sat Dec 27 01:27:50.839358 2025] [:error] [pid 47566:tid 47580] [client 185.223.152.92:44937] [client 185.223.152.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aU7FlqyYgLfR4YwO7bxxvgAAAQs"]
[Sat Dec 27 01:27:52.339425 2025] [:error] [pid 34187:tid 34209] [client 185.223.152.102:35847] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aU7FmKv8srZGEpsIm8Dx7QAAABE"]
[Sat Dec 27 01:27:53.736310 2025] [:error] [pid 34188:tid 34224] [client 185.223.152.92:34833] [client 185.223.152.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/vFWbf/wp-conflg.php"] [unique_id "aU7FmQ54j0mXgip5BAGj4AAAAEQ"]
[Sat Dec 27 01:27:55.174663 2025] [:error] [pid 34189:tid 34247] [client 185.223.152.94:31785] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentythree/locks.php"] [unique_id "aU7Fmwnn007DnMwSsfcgqgAAAIA"]
[Sat Dec 27 01:27:56.642516 2025] [:error] [pid 47566:tid 47593] [client 185.223.152.105:51303] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/locks.php"] [unique_id "aU7FnKyYgLfR4YwO7bxxyQAAARg"]
[Sat Dec 27 01:27:58.547451 2025] [:error] [pid 34189:tid 34260] [client 185.223.152.93:57551] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aU7Fngnn007DnMwSsfcgtAAAAI0"]
[Sat Dec 27 01:28:00.058040 2025] [:error] [pid 34188:tid 34226] [client 185.223.152.107:26383] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/onXRoy.php"] [unique_id "aU7FoA54j0mXgip5BAGj4gAAAEY"]
[Sat Dec 27 01:28:01.939632 2025] [:error] [pid 34189:tid 34251] [client 185.223.152.103:45593] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/checker/wsa.php"] [unique_id "aU7FoQnn007DnMwSsfcgvAAAAIQ"]
[Sat Dec 27 01:28:03.280693 2025] [:error] [pid 34189:tid 34256] [client 185.223.152.108:59115] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/Contrller.php"] [unique_id "aU7Fownn007DnMwSsfcgwQAAAIk"]
[Sat Dec 27 01:28:04.835897 2025] [:error] [pid 34187:tid 34210] [client 185.223.152.118:28205] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/goup.php"] [unique_id "aU7FpKv8srZGEpsIm8Dx_QAAABI"]
[Sat Dec 27 01:28:06.342873 2025] [:error] [pid 34274:tid 34298] [client 185.223.152.96:39733] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-super-cache/partials/about.php"] [unique_id "aU7Fps6fabpS0mfhiCEE8QAAANY"]
[Sat Dec 27 01:28:07.841946 2025] [:error] [pid 34274:tid 34283] [client 185.223.152.109:64353] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aU7Fp86fabpS0mfhiCEE9AAAAMc"]
[Sat Dec 27 01:28:09.337696 2025] [:error] [pid 34189:tid 34251] [client 185.223.152.118:27501] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aU7FqQnn007DnMwSsfcgygAAAIQ"]
[Sat Dec 27 01:28:10.838384 2025] [:error] [pid 34189:tid 34248] [client 185.223.152.94:20889] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/hex.php"] [unique_id "aU7Fqgnn007DnMwSsfcgzQAAAIE"]
[Sat Dec 27 01:28:12.346706 2025] [:error] [pid 34187:tid 34208] [client 185.223.152.116:32935] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/about.php"] [unique_id "aU7FrKv8srZGEpsIm8DyDgAAABA"]
[Sat Dec 27 01:28:13.836253 2025] [:error] [pid 34189:tid 34267] [client 185.223.152.102:20231] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/xddqann/"] [unique_id "aU7FrQnn007DnMwSsfcg0wAAAJQ"]
[Sat Dec 27 01:28:15.336485 2025] [:error] [pid 34274:tid 34293] [client 185.223.152.115:64735] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/locks.php"] [unique_id "aU7Fr86fabpS0mfhiCEFAAAAANE"]
[Sat Dec 27 01:28:16.740458 2025] [:error] [pid 34187:tid 34214] [client 185.223.152.114:44569] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/tetracl/"] [unique_id "aU7FsKv8srZGEpsIm8DyHgAAABY"]
[Sat Dec 27 01:28:18.234973 2025] [:error] [pid 34188:tid 34231] [client 185.223.152.106:39715] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Iitespeed-cache/drive.php"] [unique_id "aU7Fsg54j0mXgip5BAGj_gAAAEs"]
[Sat Dec 27 01:28:19.747483 2025] [:error] [pid 34189:tid 34263] [client 185.223.152.97:54945] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/function/test.php"] [unique_id "aU7Fswnn007DnMwSsfcg4wAAAJA"]
[Sat Dec 27 01:28:21.247048 2025] [:error] [pid 47566:tid 47587] [client 185.223.152.115:59689] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/connect-polylang-elementor/includes/locks.php"] [unique_id "aU7FtayYgLfR4YwO7bxx_QAAARI"]
[Sat Dec 27 01:28:22.740777 2025] [:error] [pid 47566:tid 47572] [client 185.223.152.104:47691] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/twentytwentyfive/locks.php"] [unique_id "aU7FtqyYgLfR4YwO7bxyAAAAAQM"]
[Sat Dec 27 01:28:24.248322 2025] [:error] [pid 34188:tid 34232] [client 185.223.152.111:60671] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/column/"] [unique_id "aU7FuA54j0mXgip5BAGkBwAAAEw"]
[Sat Dec 27 01:28:25.743769 2025] [:error] [pid 34189:tid 34255] [client 185.223.152.113:38489] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/george-lois-wpcom/t.php"] [unique_id "aU7FuQnn007DnMwSsfcg7QAAAIg"]
[Sat Dec 27 01:28:27.080875 2025] [:error] [pid 34189:tid 34252] [client 185.223.152.101:61617] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp_helper_hzkys/shell.php"] [unique_id "aU7Fuwnn007DnMwSsfcg7wAAAIU"]
[Sat Dec 27 01:28:28.539252 2025] [:error] [pid 47566:tid 47589] [client 185.223.152.110:61989] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/nux.php"] [unique_id "aU7FvKyYgLfR4YwO7bxyDgAAARQ"]
[Sat Dec 27 01:28:30.076591 2025] [:error] [pid 34187:tid 34208] [client 185.223.152.94:40331] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/foter.php"] [unique_id "aU7Fvqv8srZGEpsIm8DyLgAAABA"]
[Sat Dec 27 01:28:31.542014 2025] [:error] [pid 47566:tid 47574] [client 185.223.152.117:20563] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/cache/et/"] [unique_id "aU7Fv6yYgLfR4YwO7bxyEQAAAQU"]
[Sat Dec 27 01:28:33.058620 2025] [:error] [pid 34188:tid 34220] [client 185.223.152.96:59579] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/amp/assets/images/about.php"] [unique_id "aU7FwQ54j0mXgip5BAGkDwAAAEA"]
[Sat Dec 27 01:28:34.536774 2025] [:error] [pid 34189:tid 34249] [client 185.223.152.94:53561] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/rstsgd.php"] [unique_id "aU7Fwgnn007DnMwSsfchAwAAAII"]
[Sat Dec 27 01:28:36.043017 2025] [:error] [pid 34189:tid 34254] [client 185.223.152.92:53657] [client 185.223.152.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/alf.php"] [unique_id "aU7FxAnn007DnMwSsfchCAAAAIc"]
[Sat Dec 27 01:28:37.462823 2025] [:error] [pid 34188:tid 34244] [client 185.223.152.94:38009] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aU7FxQ54j0mXgip5BAGkFwAAAFg"]
[Sat Dec 27 01:28:38.894521 2025] [:error] [pid 34188:tid 34242] [client 185.223.152.117:61905] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/prayer_intentions.php"] [unique_id "aU7Fxg54j0mXgip5BAGkGwAAAFY"]
[Sat Dec 27 01:28:40.342316 2025] [:error] [pid 34187:tid 34192] [client 185.223.152.104:37479] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Cookie/"] [unique_id "aU7FyKv8srZGEpsIm8DyQQAAAAA"]
[Sat Dec 27 01:28:41.673771 2025] [:error] [pid 34274:tid 34298] [client 185.223.152.119:49415] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ufbngowues/main.php"] [unique_id "aU7Fyc6fabpS0mfhiCEFJAAAANY"]
[Sat Dec 27 01:28:43.157907 2025] [:error] [pid 47566:tid 47571] [client 185.223.152.103:38953] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/tmp/src/"] [unique_id "aU7Fy6yYgLfR4YwO7bxyKgAAAQI"]
[Sat Dec 27 01:28:44.841459 2025] [:error] [pid 47566:tid 47572] [client 185.223.152.117:39663] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/templates/import-base/pages-parts/step4/"] [unique_id "aU7FzKyYgLfR4YwO7bxyMAAAAQM"]
[Sat Dec 27 01:28:46.540854 2025] [:error] [pid 34189:tid 34266] [client 185.223.152.111:46927] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/wp-includes/js/tinymce/skins/lightgray/fonts/cm8odl/aunvr.php"] [unique_id "aU7Fzgnn007DnMwSsfchFgAAAJM"]
[Sat Dec 27 01:28:47.937712 2025] [:error] [pid 34187:tid 34198] [client 185.223.152.111:46449] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/wp-includes/css/dist/patterns/"] [unique_id "aU7Fz6v8srZGEpsIm8DyTAAAAAY"]
[Sat Dec 27 01:28:49.474195 2025] [:error] [pid 34188:tid 34220] [client 185.223.152.103:40485] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/wp-includes/blocks/post-author-biography/"] [unique_id "aU7F0Q54j0mXgip5BAGkLgAAAEA"]
[Sat Dec 27 01:28:50.897045 2025] [:error] [pid 34187:tid 34204] [client 185.223.152.101:44389] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/wp-content/et-cache/fr_FR/"] [unique_id "aU7F0qv8srZGEpsIm8DyUQAAAAw"]
[Sat Dec 27 01:28:52.368370 2025] [:error] [pid 34187:tid 34206] [client 185.223.152.117:64891] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dup-installer/wp-content/themes/Divi/includes/widgets/"] [unique_id "aU7F1Kv8srZGEpsIm8DyVAAAAA4"]
[Sat Dec 27 01:28:53.854792 2025] [:error] [pid 34274:tid 34289] [client 185.223.152.112:55253] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/new.php"] [unique_id "aU7F1c6fabpS0mfhiCEFOAAAAM0"]
[Sat Dec 27 01:28:55.349624 2025] [:error] [pid 34188:tid 34238] [client 185.223.152.112:39413] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/magazineposts/"] [unique_id "aU7F1w54j0mXgip5BAGkMwAAAFI"]
[Sat Dec 27 01:28:56.849918 2025] [:error] [pid 34189:tid 34262] [client 185.223.152.107:53041] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/flatco/assets/"] [unique_id "aU7F2Ann007DnMwSsfchLgAAAI8"]
[Sat Dec 27 01:28:58.257860 2025] [:error] [pid 34189:tid 34247] [client 185.223.152.113:32947] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aU7F2gnn007DnMwSsfchMQAAAIA"]
[Sat Dec 27 01:28:59.742188 2025] [:error] [pid 47566:tid 47584] [client 185.223.152.99:37211] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/Avada/woocommerce/checkout/"] [unique_id "aU7F26yYgLfR4YwO7bxySAAAAQ8"]
[Sat Dec 27 01:29:01.343030 2025] [:error] [pid 47566:tid 47592] [client 185.223.152.95:40747] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/target/admin/"] [unique_id "aU7F3ayYgLfR4YwO7bxyTAAAARc"]
[Sat Dec 27 01:29:02.736730 2025] [:error] [pid 34187:tid 34205] [client 185.223.152.117:39835] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/dt-the7/inc/mods/mod-woocommerce/assets/"] [unique_id "aU7F3qv8srZGEpsIm8DyYQAAAA0"]
[Sat Dec 27 01:29:04.238669 2025] [:error] [pid 34274:tid 34288] [client 185.223.152.111:20623] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aU7F4M6fabpS0mfhiCEFTwAAAMw"]
[Sat Dec 27 01:29:05.652854 2025] [:error] [pid 47566:tid 47587] [client 185.223.152.92:26797] [client 185.223.152.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/junkfood/mainhack.php"] [unique_id "aU7F4ayYgLfR4YwO7bxyVQAAARI"]
[Sat Dec 27 01:29:07.144874 2025] [:error] [pid 34188:tid 34230] [client 185.223.152.101:48941] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/maks.php"] [unique_id "aU7F4w54j0mXgip5BAGkQgAAAEo"]
[Sat Dec 27 01:29:08.660367 2025] [:error] [pid 34274:tid 34292] [client 185.223.152.105:49903] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bbpress/mainhack.php"] [unique_id "aU7F5M6fabpS0mfhiCEFWQAAANA"]
[Sat Dec 27 01:29:10.242800 2025] [:error] [pid 47566:tid 47584] [client 185.223.152.114:55001] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/cache/"] [unique_id "aU7F5qyYgLfR4YwO7bxyZQAAAQ8"]
[Sat Dec 27 01:29:11.656593 2025] [:error] [pid 34188:tid 34224] [client 185.223.152.102:49523] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/maintenance.php"] [unique_id "aU7F5w54j0mXgip5BAGkSwAAAEQ"]
[Sat Dec 27 01:29:13.151452 2025] [:error] [pid 34274:tid 34288] [client 185.223.152.98:63889] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/file_folder_manager.php"] [unique_id "aU7F6c6fabpS0mfhiCEFYgAAAMw"]
[Sat Dec 27 01:29:14.642245 2025] [:error] [pid 47566:tid 47577] [client 185.223.152.99:28769] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp.php"] [unique_id "aU7F6qyYgLfR4YwO7bxygAAAAQg"]
[Sat Dec 27 01:29:16.172107 2025] [:error] [pid 34274:tid 34280] [client 185.223.152.104:62715] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/cheka.php"] [unique_id "aU7F7M6fabpS0mfhiCEFZgAAAMQ"]
[Sat Dec 27 01:29:17.736942 2025] [:error] [pid 34189:tid 34255] [client 185.223.152.102:20123] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dgzax.php"] [unique_id "aU7F7Qnn007DnMwSsfchUQAAAIg"]
[Sat Dec 27 01:29:19.140438 2025] [:error] [pid 34188:tid 34243] [client 185.223.152.108:47345] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/Contrller.php"] [unique_id "aU7F7w54j0mXgip5BAGkUwAAAFc"]
[Sat Dec 27 01:29:20.638885 2025] [:error] [pid 34274:tid 34300] [client 185.223.152.99:45219] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aU7F8M6fabpS0mfhiCEFcQAAANg"]
[Sat Dec 27 01:29:22.137666 2025] [:error] [pid 34274:tid 34286] [client 185.223.152.109:46243] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/search/just2.php"] [unique_id "aU7F8s6fabpS0mfhiCEFeAAAAMo"]
[Sat Dec 27 01:29:23.583195 2025] [:error] [pid 47566:tid 47583] [client 185.223.152.111:58917] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/tag-cloud/admin.php"] [unique_id "aU7F86yYgLfR4YwO7bxymgAAAQ4"]
[Sat Dec 27 01:29:25.038848 2025] [:error] [pid 34189:tid 34261] [client 185.223.152.96:45615] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/m.php"] [unique_id "aU7F9Qnn007DnMwSsfchWwAAAI4"]
[Sat Dec 27 01:29:26.537601 2025] [:error] [pid 34189:tid 34258] [client 185.223.152.117:40709] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/prv8.php"] [unique_id "aU7F9gnn007DnMwSsfchXQAAAIs"]
[Sat Dec 27 01:29:27.939430 2025] [:error] [pid 34188:tid 34242] [client 185.223.152.118:62661] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/class-json.php"] [unique_id "aU7F9w54j0mXgip5BAGkcwAAAFY"]
[Sat Dec 27 01:29:29.559162 2025] [:error] [pid 34189:tid 34248] [client 185.223.152.109:44143] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/vpihdxu/wp-loader.php"] [unique_id "aU7F-Qnn007DnMwSsfchYQAAAIE"]
[Sat Dec 27 01:29:32.342879 2025] [:error] [pid 34274:tid 34293] [client 185.223.152.92:21697] [client 185.223.152.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/dxkmb/"] [unique_id "aU7F_M6fabpS0mfhiCEFgAAAANE"]
[Sat Dec 27 01:29:33.852483 2025] [:error] [pid 34187:tid 34207] [client 185.223.152.103:52701] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php"] [unique_id "aU7F_av8srZGEpsIm8DygAAAAA8"]
[Sat Dec 27 01:29:35.347978 2025] [:error] [pid 47566:tid 47586] [client 185.223.152.117:44137] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aU7F_6yYgLfR4YwO7bxyqgAAARE"]
[Sat Dec 27 01:29:36.853995 2025] [:error] [pid 34274:tid 34281] [client 185.223.152.102:52005] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aU7GAM6fabpS0mfhiCEFiQAAAMU"]
[Sat Dec 27 01:29:38.364865 2025] [:error] [pid 47566:tid 47584] [client 185.223.152.109:43979] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/lock.php"] [unique_id "aU7GAqyYgLfR4YwO7bxysQAAAQ8"]
[Sat Dec 27 01:29:39.940609 2025] [:error] [pid 47566:tid 47589] [client 185.223.152.105:59537] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/tag-cloud.php"] [unique_id "aU7GA6yYgLfR4YwO7bxytwAAARQ"]
[Sat Dec 27 01:29:41.441448 2025] [:error] [pid 34188:tid 34230] [client 185.223.152.103:49777] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/mabar88/inc/compatibility/learndash/customizer/sections/layout/lock.php"] [unique_id "aU7GBQ54j0mXgip5BAGkhQAAAEo"]
[Sat Dec 27 01:29:42.943127 2025] [:error] [pid 34274:tid 34282] [client 185.223.152.118:48163] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aU7GBs6fabpS0mfhiCEFkAAAAMY"]
[Sat Dec 27 01:29:44.438358 2025] [:error] [pid 34188:tid 34236] [client 185.223.152.93:23603] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/mcyru/alfa_asli.php"] [unique_id "aU7GCA54j0mXgip5BAGkigAAAFA"]
[Sat Dec 27 01:29:45.774091 2025] [:error] [pid 34187:tid 34205] [client 185.223.152.93:47709] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-terms/vx.php"] [unique_id "aU7GCav8srZGEpsIm8DyjgAAAA0"]
[Sat Dec 27 01:29:47.239359 2025] [:error] [pid 34188:tid 34237] [client 185.223.152.118:36155] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-content/"] [unique_id "aU7GCw54j0mXgip5BAGkjwAAAFE"]
[Sat Dec 27 01:29:48.684983 2025] [:error] [pid 34189:tid 34248] [client 185.223.152.112:55649] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/webdb.php"] [unique_id "aU7GDAnn007DnMwSsfchbQAAAIE"]
[Sat Dec 27 01:29:50.139676 2025] [:error] [pid 34189:tid 34253] [client 185.223.152.100:21167] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includesdgfsa/Text/Diff/"] [unique_id "aU7GDgnn007DnMwSsfchcAAAAIY"]
[Sat Dec 27 01:29:51.660747 2025] [:error] [pid 34189:tid 34264] [client 185.223.152.101:41909] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/eflhedn/"] [unique_id "aU7GDwnn007DnMwSsfchcgAAAJE"]
[Sat Dec 27 01:29:53.154200 2025] [:error] [pid 34187:tid 34194] [client 185.223.152.102:28147] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aU7GEav8srZGEpsIm8DykgAAAAI"]
[Sat Dec 27 01:29:54.639591 2025] [:error] [pid 34187:tid 34216] [client 185.223.152.106:62671] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/ryan/admin/main/inc/callbacks/sanitize_callback/select_faicons/lock.php"] [unique_id "aU7GEqv8srZGEpsIm8DylQAAABg"]
[Sat Dec 27 01:29:56.146838 2025] [:error] [pid 34187:tid 34203] [client 185.223.152.111:52281] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/prv8.php"] [unique_id "aU7GFKv8srZGEpsIm8DymAAAAAs"]
[Sat Dec 27 01:29:57.582014 2025] [:error] [pid 34188:tid 34228] [client 185.223.152.111:62343] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/mapiezRi.php"] [unique_id "aU7GFQ54j0mXgip5BAGknwAAAEg"]
[Sat Dec 27 01:29:59.061982 2025] [:error] [pid 34187:tid 34200] [client 185.223.152.106:45005] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/royal-elementor-addons/modules/theme-builder/post-navigation/widgets/lock.php"] [unique_id "aU7GF6v8srZGEpsIm8DynAAAAAg"]
[Sat Dec 27 01:30:00.539615 2025] [:error] [pid 34188:tid 34224] [client 185.223.152.97:61827] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aU7GGA54j0mXgip5BAGkpQAAAEQ"]
[Sat Dec 27 01:30:02.079705 2025] [:error] [pid 34189:tid 34269] [client 185.223.152.97:21085] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aU7GGgnn007DnMwSsfchjwAAAJY"]
[Sat Dec 27 01:30:03.539906 2025] [:error] [pid 34188:tid 34221] [client 185.223.152.97:58419] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aU7GGw54j0mXgip5BAGkrQAAAEE"]
[Sat Dec 27 01:30:04.963092 2025] [:error] [pid 34274:tid 34277] [client 185.223.152.93:39463] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/uuj_gagal.php"] [unique_id "aU7GHM6fabpS0mfhiCEFvgAAAME"]
[Sat Dec 27 01:30:06.444918 2025] [:error] [pid 34188:tid 34223] [client 185.223.152.117:37221] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aU7GHg54j0mXgip5BAGksgAAAEM"]
[Sat Dec 27 01:30:07.940813 2025] [:error] [pid 34188:tid 34230] [client 185.223.152.119:22513] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wtu_gagal.php"] [unique_id "aU7GHw54j0mXgip5BAGktgAAAEo"]
[Sat Dec 27 01:30:09.387959 2025] [:error] [pid 34274:tid 34290] [client 185.223.152.103:60187] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pgaas/"] [unique_id "aU7GIc6fabpS0mfhiCEF0gAAAM4"]
[Sat Dec 27 01:30:10.941154 2025] [:error] [pid 47566:tid 47591] [client 185.223.152.119:20885] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/mtodm/"] [unique_id "aU7GIqyYgLfR4YwO7bxy5AAAARY"]
[Sat Dec 27 01:30:12.460813 2025] [:error] [pid 34187:tid 34202] [client 185.223.152.97:41939] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aU7GJKv8srZGEpsIm8DyqwAAAAo"]
[Sat Dec 27 01:30:14.050559 2025] [:error] [pid 34187:tid 34211] [client 185.223.152.116:33497] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-pridmag/load.php"] [unique_id "aU7GJqv8srZGEpsIm8DytAAAABM"]
[Sat Dec 27 01:30:16.634870 2025] [:error] [pid 34274:tid 34289] [client 185.223.152.98:41973] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/codex.php"] [unique_id "aU7GKM6fabpS0mfhiCEF3gAAAM0"]
[Sat Dec 27 01:30:18.042469 2025] [:error] [pid 34189:tid 34268] [client 185.223.152.108:57149] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/codex.php"] [unique_id "aU7GKgnn007DnMwSsfchngAAAJU"]
[Sat Dec 27 01:30:19.546218 2025] [:error] [pid 34187:tid 34210] [client 185.223.152.116:22213] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/areak1.php"] [unique_id "aU7GK6v8srZGEpsIm8DyugAAABI"]
[Sat Dec 27 01:30:21.044064 2025] [:error] [pid 34189:tid 34259] [client 185.223.152.111:41027] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/moon.php"] [unique_id "aU7GLQnn007DnMwSsfchqAAAAIw"]
[Sat Dec 27 01:30:22.442285 2025] [:error] [pid 47566:tid 47588] [client 185.223.152.93:51557] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/futurio/lib/customizer/"] [unique_id "aU7GLqyYgLfR4YwO7bxzAwAAARM"]
[Sat Dec 27 01:30:23.839125 2025] [:error] [pid 34189:tid 34260] [client 185.223.152.119:28551] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/class-wp-site-health-xml.php"] [unique_id "aU7GLwnn007DnMwSsfchsAAAAI0"]
[Sat Dec 27 01:30:25.343469 2025] [:error] [pid 34189:tid 34255] [client 185.223.152.115:40127] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/ms-admin-filters-alpha.php"] [unique_id "aU7GMQnn007DnMwSsfchuAAAAIg"]
[Sat Dec 27 01:30:26.841281 2025] [:error] [pid 47566:tid 47590] [client 185.223.152.110:37889] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/upload-event.php"] [unique_id "aU7GMqyYgLfR4YwO7bxzEAAAARU"]
[Sat Dec 27 01:30:28.338886 2025] [:error] [pid 34274:tid 34279] [client 185.223.152.113:55589] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-client-sql.php"] [unique_id "aU7GNM6fabpS0mfhiCEF6AAAAMM"]
[Sat Dec 27 01:30:29.940164 2025] [:error] [pid 34188:tid 34227] [client 185.223.152.98:23545] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/222.php"] [unique_id "aU7GNQ54j0mXgip5BAGk0AAAAEc"]
[Sat Dec 27 01:30:31.460402 2025] [:error] [pid 34274:tid 34291] [client 185.223.152.95:35677] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/search/"] [unique_id "aU7GN86fabpS0mfhiCEF8gAAAM8"]
[Sat Dec 27 01:30:32.949767 2025] [:error] [pid 34189:tid 34268] [client 185.223.152.119:56481] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/require-static-blocks-add.php"] [unique_id "aU7GOAnn007DnMwSsfchvAAAAJU"]
[Sat Dec 27 01:30:34.741769 2025] [:error] [pid 34187:tid 34212] [client 185.223.152.104:58197] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aU7GOqv8srZGEpsIm8DyyQAAABQ"]
[Sat Dec 27 01:30:36.341615 2025] [:error] [pid 34189:tid 34270] [client 185.223.152.106:44391] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/post-thumbnail-template-call.php"] [unique_id "aU7GPAnn007DnMwSsfchvgAAAJc"]
[Sat Dec 27 01:30:37.937695 2025] [:error] [pid 34187:tid 34197] [client 185.223.152.119:61485] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/site-logo/admin.php"] [unique_id "aU7GPav8srZGEpsIm8DyzQAAAAU"]
[Sat Dec 27 01:30:39.446610 2025] [:error] [pid 47566:tid 47586] [client 185.223.152.114:28779] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor-pro/admin.php"] [unique_id "aU7GP6yYgLfR4YwO7bxzJQAAARE"]
[Sat Dec 27 01:30:41.045664 2025] [:error] [pid 34274:tid 34286] [client 185.223.152.94:21391] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wc-logs/"] [unique_id "aU7GQc6fabpS0mfhiCEF-AAAAMo"]
[Sat Dec 27 01:30:42.552217 2025] [:error] [pid 34274:tid 34290] [client 185.223.152.98:48359] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/amp.php"] [unique_id "aU7GQs6fabpS0mfhiCEF-wAAAM4"]
[Sat Dec 27 01:30:44.044779 2025] [:error] [pid 47566:tid 47592] [client 185.223.152.105:30289] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/lock.php"] [unique_id "aU7GRKyYgLfR4YwO7bxzMwAAARc"]
[Sat Dec 27 01:30:45.645258 2025] [:error] [pid 34189:tid 34261] [client 185.223.152.112:28461] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/classwithtostring.php"] [unique_id "aU7GRQnn007DnMwSsfchwAAAAI4"]
[Sat Dec 27 01:30:47.245863 2025] [:error] [pid 34274:tid 34289] [client 185.223.152.100:60501] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/locks.php"] [unique_id "aU7GR86fabpS0mfhiCEGBQAAAM0"]
[Sat Dec 27 01:30:48.640847 2025] [:error] [pid 47566:tid 47573] [client 185.223.152.100:65329] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-content/post-content/lock.php"] [unique_id "aU7GSKyYgLfR4YwO7bxzTgAAAQQ"]
[Sat Dec 27 01:30:50.148450 2025] [:error] [pid 47566:tid 47591] [client 185.223.152.117:36467] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/mabar88/inc/addons/transparent-header/assets/lock.php"] [unique_id "aU7GSqyYgLfR4YwO7bxzVgAAARY"]
[Sat Dec 27 01:30:51.648908 2025] [:error] [pid 34188:tid 34241] [client 185.223.152.104:35077] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/about.php"] [unique_id "aU7GSw54j0mXgip5BAGk9wAAAFU"]
[Sat Dec 27 01:30:53.141454 2025] [:error] [pid 47566:tid 47585] [client 185.223.152.98:39421] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aU7GTayYgLfR4YwO7bxzZAAAARA"]
[Sat Dec 27 01:30:54.655976 2025] [:error] [pid 47566:tid 47593] [client 185.223.152.102:28273] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/images/about.php"] [unique_id "aU7GTqyYgLfR4YwO7bxzbgAAARg"]
[Sat Dec 27 01:30:56.237065 2025] [:error] [pid 34274:tid 34276] [client 185.223.152.116:34493] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/zwz.php"] [unique_id "aU7GUM6fabpS0mfhiCEGEQAAAMA"]
[Sat Dec 27 01:30:57.672469 2025] [:error] [pid 34188:tid 34226] [client 185.223.152.119:25577] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-domain.php"] [unique_id "aU7GUQ54j0mXgip5BAGk-wAAAEY"]
[Sat Dec 27 01:30:59.143774 2025] [:error] [pid 34189:tid 34267] [client 185.223.152.102:54401] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-edit-link/admin.php"] [unique_id "aU7GUwnn007DnMwSsfch0AAAAJQ"]
[Sat Dec 27 01:31:00.646734 2025] [:error] [pid 47566:tid 47587] [client 185.223.152.110:61081] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/image/admin.php"] [unique_id "aU7GVKyYgLfR4YwO7bxziwAAARI"]
[Sat Dec 27 01:31:02.037357 2025] [:error] [pid 47566:tid 47578] [client 185.223.152.105:60565] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wso.php"] [unique_id "aU7GVqyYgLfR4YwO7bxzkAAAAQk"]
[Sat Dec 27 01:31:03.549629 2025] [:error] [pid 47566:tid 47587] [client 185.223.152.98:40035] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css.php"] [unique_id "aU7GV6yYgLfR4YwO7bxzmwAAARI"]
[Sat Dec 27 01:31:05.284789 2025] [:error] [pid 34274:tid 34290] [client 185.223.152.108:40921] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/ru.php"] [unique_id "aU7GWc6fabpS0mfhiCEGKQAAAM4"]
[Sat Dec 27 01:31:06.742261 2025] [:error] [pid 47566:tid 47591] [client 185.223.152.96:60459] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp_helper_t46pm/shell.php"] [unique_id "aU7GWqyYgLfR4YwO7bxzrQAAARY"]
[Sat Dec 27 01:31:08.246181 2025] [:error] [pid 47566:tid 47576] [client 185.223.152.118:32151] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp_helper_fpne3/shell.php"] [unique_id "aU7GXKyYgLfR4YwO7bxztQAAAQc"]
[Sat Dec 27 01:31:09.756320 2025] [:error] [pid 34274:tid 34281] [client 185.223.152.104:64107] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/post-duplicator/assets/js/about.php"] [unique_id "aU7GXc6fabpS0mfhiCEGOgAAAMU"]
[Sat Dec 27 01:31:11.176158 2025] [:error] [pid 34188:tid 34235] [client 185.223.152.115:56699] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/all-in-one-wp-migration/about.php"] [unique_id "aU7GXw54j0mXgip5BAGlBAAAAE8"]
[Sat Dec 27 01:31:12.751683 2025] [:error] [pid 34189:tid 34252] [client 185.223.152.100:29239] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/duplicator/src/Lite/about.php"] [unique_id "aU7GYAnn007DnMwSsfch7AAAAIU"]
[Sat Dec 27 01:31:14.240008 2025] [:error] [pid 34189:tid 34266] [client 185.223.152.117:56759] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/dplay/global-templates/about.php"] [unique_id "aU7GYgnn007DnMwSsfch9gAAAJM"]
[Sat Dec 27 01:31:15.842991 2025] [:error] [pid 34189:tid 34252] [client 185.223.152.116:57281] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aU7GYwnn007DnMwSsfch_gAAAIU"]
[Sat Dec 27 01:31:17.559940 2025] [:error] [pid 34274:tid 34281] [client 185.223.152.96:63581] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/nux/about.php"] [unique_id "aU7GZc6fabpS0mfhiCEGTQAAAMU"]
[Sat Dec 27 01:31:19.452755 2025] [:error] [pid 34189:tid 34255] [client 185.223.152.93:32501] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/page-list/about.php"] [unique_id "aU7GZwnn007DnMwSsfciBQAAAIg"]
[Sat Dec 27 01:31:20.965111 2025] [:error] [pid 47566:tid 47588] [client 185.223.152.95:27543] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/ahax.php"] [unique_id "aU7GaKyYgLfR4YwO7bxz5AAAARM"]
[Sat Dec 27 01:31:22.639211 2025] [:error] [pid 47566:tid 47573] [client 185.223.152.110:41033] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/ahax.php"] [unique_id "aU7GaqyYgLfR4YwO7bxz7gAAAQQ"]
[Sat Dec 27 01:31:24.141886 2025] [:error] [pid 34189:tid 34271] [client 185.223.152.98:24895] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aU7GbAnn007DnMwSsfciDwAAAJg"]
[Sat Dec 27 01:31:25.480820 2025] [:error] [pid 47566:tid 47583] [client 185.223.152.93:49831] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/unlimited-elements-for-elementor-premium/vendor/spucon/"] [unique_id "aU7GbayYgLfR4YwO7bxz9QAAAQ4"]
[Sat Dec 27 01:31:26.875519 2025] [:error] [pid 34274:tid 34300] [client 185.223.152.114:44119] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aU7Gbs6fabpS0mfhiCEGVgAAANg"]
[Sat Dec 27 01:31:28.340992 2025] [:error] [pid 47566:tid 47590] [client 185.223.152.99:20125] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aU7GcKyYgLfR4YwO7bx0BAAAARU"]
[Sat Dec 27 01:31:29.842984 2025] [:error] [pid 34187:tid 34208] [client 185.223.152.119:55893] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/chosen.php"] [unique_id "aU7Gcav8srZGEpsIm8DzEAAAABA"]
[Sat Dec 27 01:31:31.340194 2025] [:error] [pid 34187:tid 34203] [client 185.223.152.94:59897] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aU7Gc6v8srZGEpsIm8DzHgAAAAs"]
[Sat Dec 27 01:31:32.946860 2025] [:error] [pid 34274:tid 34291] [client 185.223.152.95:28985] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aU7GdM6fabpS0mfhiCEGYAAAAM8"]
[Sat Dec 27 01:31:34.547809 2025] [:error] [pid 34187:tid 34204] [client 185.223.152.115:38205] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/autoload_classmap.php"] [unique_id "aU7Gdqv8srZGEpsIm8DzLgAAAAw"]
[Sat Dec 27 01:31:35.980876 2025] [:error] [pid 47566:tid 47574] [client 185.223.152.105:55135] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aU7Gd6yYgLfR4YwO7bx0EgAAAQU"]
[Sat Dec 27 01:31:37.448415 2025] [:error] [pid 47566:tid 47570] [client 185.223.152.118:43699] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aU7GeayYgLfR4YwO7bx0HQAAAQE"]
[Sat Dec 27 01:31:39.546726 2025] [:error] [pid 34188:tid 34232] [client 185.223.152.102:29985] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aU7Gew54j0mXgip5BAGlJgAAAEw"]
[Sat Dec 27 01:31:41.075331 2025] [:error] [pid 34274:tid 34297] [client 185.223.152.113:65419] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aU7Gfc6fabpS0mfhiCEGbQAAANU"]
[Sat Dec 27 01:31:42.741330 2025] [:error] [pid 34189:tid 34266] [client 185.223.152.95:43029] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aU7Gfgnn007DnMwSsfciIwAAAJM"]
[Sat Dec 27 01:31:44.241675 2025] [:error] [pid 47566:tid 47576] [client 185.223.152.113:42203] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/php-compat/wp-conflg.php"] [unique_id "aU7GgKyYgLfR4YwO7bx0LAAAAQc"]
[Sat Dec 27 01:31:45.747722 2025] [:error] [pid 34187:tid 34206] [client 185.223.152.94:64783] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aU7Ggav8srZGEpsIm8DzOgAAAA4"]
[Sat Dec 27 01:31:47.236852 2025] [:error] [pid 34274:tid 34276] [client 185.223.152.110:21319] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aU7Gg86fabpS0mfhiCEGgQAAAMA"]
[Sat Dec 27 01:31:48.739842 2025] [:error] [pid 34189:tid 34259] [client 185.223.152.116:65233] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aU7GhAnn007DnMwSsfciJQAAAIw"]
[Sat Dec 27 01:31:50.241923 2025] [:error] [pid 34274:tid 34285] [client 185.223.152.95:31721] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aU7Ghs6fabpS0mfhiCEGkQAAAMk"]
[Sat Dec 27 01:31:51.845140 2025] [:error] [pid 34189:tid 34271] [client 185.223.152.108:53625] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aU7Ghwnn007DnMwSsfciKQAAAJg"]
[Sat Dec 27 01:31:53.558218 2025] [:error] [pid 47566:tid 47592] [client 185.223.152.110:57405] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aU7GiayYgLfR4YwO7bx0RQAAARc"]
[Sat Dec 27 01:31:55.042561 2025] [:error] [pid 47566:tid 47574] [client 185.223.152.119:59607] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aU7Gi6yYgLfR4YwO7bx0TgAAAQU"]
[Sat Dec 27 01:31:56.549306 2025] [:error] [pid 34274:tid 34276] [client 185.223.152.119:34381] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/litespeed/autoload_classmap.php"] [unique_id "aU7GjM6fabpS0mfhiCEGogAAAMA"]
[Sat Dec 27 01:31:58.037170 2025] [:error] [pid 47566:tid 47591] [client 185.223.152.113:44337] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aU7GjqyYgLfR4YwO7bx0aQAAARY"]
[Sat Dec 27 01:31:59.539797 2025] [:error] [pid 34188:tid 34231] [client 185.223.152.111:58521] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/images/chosen.php"] [unique_id "aU7Gjw54j0mXgip5BAGlSgAAAEs"]
[Sat Dec 27 01:32:01.037153 2025] [:error] [pid 34188:tid 34242] [client 185.223.152.111:62399] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aU7GkQ54j0mXgip5BAGlVwAAAFY"]
[Sat Dec 27 01:32:02.740523 2025] [:error] [pid 34189:tid 34267] [client 185.223.152.119:20539] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/page-list/"] [unique_id "aU7Gkgnn007DnMwSsfciRAAAAJQ"]
[Sat Dec 27 01:32:04.253830 2025] [:error] [pid 47566:tid 47591] [client 185.223.152.117:24649] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/Bypass-System.php"] [unique_id "aU7GlKyYgLfR4YwO7bx0zwAAARY"]
[Sat Dec 27 01:32:05.840463 2025] [:error] [pid 34189:tid 34259] [client 185.223.152.106:26241] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpadmin/autoload_classmap.php"] [unique_id "aU7GlQnn007DnMwSsfciTAAAAIw"]
[Sat Dec 27 01:32:07.339743 2025] [:error] [pid 34274:tid 34285] [client 185.223.152.99:36169] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/modules/home/about.php"] [unique_id "aU7Gl86fabpS0mfhiCEG9AAAAMk"]
[Sat Dec 27 01:32:08.880762 2025] [:error] [pid 34187:tid 34192] [client 185.223.152.119:32209] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/settings/chosen.php"] [unique_id "aU7GmKv8srZGEpsIm8DzYQAAAAA"]
[Sat Dec 27 01:32:10.545517 2025] [:error] [pid 34187:tid 34199] [client 185.223.152.100:22759] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/akses.php"] [unique_id "aU7Gmqv8srZGEpsIm8DzcQAAAAc"]
[Sat Dec 27 01:32:12.140903 2025] [:error] [pid 47566:tid 47582] [client 185.223.152.92:28085] [client 185.223.152.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/updated/wp-includes/rest-api/file.php"] [unique_id "aU7GnKyYgLfR4YwO7bx1PgAAAQ0"]
[Sat Dec 27 01:32:13.669850 2025] [:error] [pid 34187:tid 34211] [client 185.223.152.104:30165] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/abc.php"] [unique_id "aU7Gnav8srZGEpsIm8DziQAAABM"]
[Sat Dec 27 01:32:15.136970 2025] [:error] [pid 47566:tid 47573] [client 185.223.152.104:30425] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/edit-tags.php"] [unique_id "aU7Gn6yYgLfR4YwO7bx1SgAAAQQ"]
[Sat Dec 27 01:32:16.636378 2025] [:error] [pid 47566:tid 47584] [client 185.223.152.107:54359] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/wp-conflg.php"] [unique_id "aU7GoKyYgLfR4YwO7bx1UgAAAQ8"]
[Sat Dec 27 01:32:18.146014 2025] [:error] [pid 47566:tid 47581] [client 185.223.152.104:52647] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aU7GoqyYgLfR4YwO7bx1XgAAAQw"]
[Sat Dec 27 01:32:19.953350 2025] [:error] [pid 34274:tid 34286] [client 185.223.152.113:57595] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/chosen.php"] [unique_id "aU7Go86fabpS0mfhiCEHKAAAAMo"]
[Sat Dec 27 01:32:21.878900 2025] [:error] [pid 34187:tid 34202] [client 185.223.152.103:28579] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/comment-editor/about.php"] [unique_id "aU7Gpav8srZGEpsIm8DzowAAAAo"]
[Sat Dec 27 01:32:23.358542 2025] [:error] [pid 47566:tid 47582] [client 185.223.152.95:54453] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/about.php"] [unique_id "aU7Gp6yYgLfR4YwO7bx1bwAAAQ0"]
[Sat Dec 27 01:32:24.843675 2025] [:error] [pid 34187:tid 34209] [client 185.223.152.111:39903] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aU7GqKv8srZGEpsIm8DzsAAAABE"]
[Sat Dec 27 01:32:26.670341 2025] [:error] [pid 47566:tid 47584] [client 185.223.152.110:39197] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/dokan-child/content-"] [unique_id "aU7GqqyYgLfR4YwO7bx1gAAAAQ8"]
[Sat Dec 27 01:32:28.745802 2025] [:error] [pid 34189:tid 34251] [client 185.223.152.105:56841] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/dokan/content-"] [unique_id "aU7GrAnn007DnMwSsfciZwAAAIQ"]
[Sat Dec 27 01:32:30.341807 2025] [:error] [pid 34188:tid 34223] [client 185.223.152.97:39761] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/pridmag/ot.php"] [unique_id "aU7Grg54j0mXgip5BAGlsQAAAEM"]
[Sat Dec 27 01:32:31.853492 2025] [:error] [pid 34188:tid 34227] [client 185.223.152.108:49953] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/consultstreet/content-"] [unique_id "aU7Grw54j0mXgip5BAGltQAAAEc"]
[Sat Dec 27 01:32:33.438620 2025] [:error] [pid 34274:tid 34282] [client 185.223.152.113:22825] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpadmin/acp.php"] [unique_id "aU7Gsc6fabpS0mfhiCEHNQAAAMY"]
[Sat Dec 27 01:32:34.944493 2025] [:error] [pid 34188:tid 34233] [client 185.223.152.113:58859] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/mu-plugins/"] [unique_id "aU7Gsg54j0mXgip5BAGlvAAAAE0"]
[Sat Dec 27 01:32:36.440351 2025] [:error] [pid 47566:tid 47569] [client 185.223.152.99:50007] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/ioxi-o.php"] [unique_id "aU7GtKyYgLfR4YwO7bx1nQAAAQA"]
[Sat Dec 27 01:32:37.841392 2025] [:error] [pid 34274:tid 34289] [client 185.223.152.115:27885] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/Shell.php"] [unique_id "aU7Gtc6fabpS0mfhiCEHPwAAAM0"]
[Sat Dec 27 01:32:39.341746 2025] [:error] [pid 47566:tid 47577] [client 185.223.152.99:64079] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/namespaced/admin.php"] [unique_id "aU7Gt6yYgLfR4YwO7bx1pwAAAQg"]
[Sat Dec 27 01:32:40.943829 2025] [:error] [pid 47566:tid 47569] [client 185.223.152.116:22963] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/button/adc.php"] [unique_id "aU7GuKyYgLfR4YwO7bx1rAAAAQA"]
[Sat Dec 27 01:32:43.344748 2025] [:error] [pid 34274:tid 34277] [client 185.223.152.117:31403] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aU7Gu86fabpS0mfhiCEHRgAAAME"]
[Sat Dec 27 01:32:44.800387 2025] [:error] [pid 34189:tid 34264] [client 185.223.152.109:55895] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/taxonomy-exception.php"] [unique_id "aU7GvAnn007DnMwSsfcidgAAAJE"]
[Sat Dec 27 01:32:46.244673 2025] [:error] [pid 34187:tid 34201] [client 185.223.152.109:38095] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio.dts-list.php"] [unique_id "aU7Gvqv8srZGEpsIm8DzyAAAAAk"]
[Sat Dec 27 01:32:47.740107 2025] [:error] [pid 47566:tid 47581] [client 185.223.152.93:23375] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/options-core.php"] [unique_id "aU7Gv6yYgLfR4YwO7bx1xgAAAQw"]
[Sat Dec 27 01:32:49.237333 2025] [:error] [pid 34187:tid 34207] [client 185.223.152.102:42721] [client 185.223.152.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/media-module.php"] [unique_id "aU7Gwav8srZGEpsIm8DzyQAAAA8"]
[Sat Dec 27 01:32:51.142496 2025] [:error] [pid 34274:tid 34297] [client 185.223.152.112:51201] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/css/filesss.php"] [unique_id "aU7Gw86fabpS0mfhiCEHYQAAANU"]
[Sat Dec 27 01:32:52.576251 2025] [:error] [pid 34189:tid 34253] [client 185.223.152.112:20605] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ectoplasm/moon.php"] [unique_id "aU7GxAnn007DnMwSsfcihAAAAIY"]
[Sat Dec 27 01:32:54.085168 2025] [:error] [pid 34189:tid 34248] [client 185.223.152.111:28361] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aU7Gxgnn007DnMwSsfcihgAAAIE"]
[Sat Dec 27 01:32:55.737583 2025] [:error] [pid 34189:tid 34262] [client 185.223.152.99:39767] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/file-manager.phpn.com/wp-content/plugins/phpad/acp.php"] [unique_id "aU7Gxwnn007DnMwSsfciiQAAAI8"]
[Sat Dec 27 01:32:57.445371 2025] [:error] [pid 34189:tid 34261] [client 185.223.152.109:44293] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/drive.php"] [unique_id "aU7GyQnn007DnMwSsfciigAAAI4"]
[Sat Dec 27 01:32:59.056506 2025] [:error] [pid 34189:tid 34255] [client 185.223.152.108:30061] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/gssdd.php"] [unique_id "aU7Gywnn007DnMwSsfcikAAAAIg"]
[Sat Dec 27 01:33:00.650395 2025] [:error] [pid 34274:tid 34299] [client 185.223.152.99:42859] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/image/wp-conflg.php"] [unique_id "aU7GzM6fabpS0mfhiCEHcgAAANc"]
[Sat Dec 27 01:33:02.341857 2025] [:error] [pid 47566:tid 47569] [client 185.223.152.115:39667] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/chosen.php"] [unique_id "aU7GzqyYgLfR4YwO7bx15QAAAQA"]
[Sat Dec 27 01:33:03.953799 2025] [:error] [pid 34189:tid 34265] [client 185.223.152.119:42393] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "aU7Gzwnn007DnMwSsfcimQAAAJI"]
[Sat Dec 27 01:33:05.768429 2025] [:error] [pid 47566:tid 47578] [client 185.223.152.94:38253] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/adout.php"] [unique_id "aU7G0ayYgLfR4YwO7bx17AAAAQk"]
[Sat Dec 27 01:33:07.437344 2025] [:error] [pid 47566:tid 47580] [client 185.223.152.117:26833] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/xxfile.php"] [unique_id "aU7G06yYgLfR4YwO7bx18gAAAQs"]
[Sat Dec 27 01:33:09.080239 2025] [:error] [pid 34188:tid 34237] [client 185.223.152.97:37689] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/xxfile.php"] [unique_id "aU7G1Q54j0mXgip5BAGl4gAAAFE"]
[Sat Dec 27 01:33:10.842439 2025] [:error] [pid 47566:tid 47572] [client 185.223.152.95:20307] [client 185.223.152.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/"] [unique_id "aU7G1qyYgLfR4YwO7bx1-wAAAQM"]
[Sat Dec 27 01:33:12.661109 2025] [:error] [pid 34187:tid 34216] [client 185.223.152.107:25781] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/site-logo/"] [unique_id "aU7G2Kv8srZGEpsIm8Dz3wAAABg"]
[Sat Dec 27 01:33:14.350112 2025] [:error] [pid 47566:tid 47588] [client 185.223.152.104:52335] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/reusable-blocks/"] [unique_id "aU7G2qyYgLfR4YwO7bx2CgAAARM"]
[Sat Dec 27 01:33:16.548508 2025] [:error] [pid 34187:tid 34203] [client 185.223.152.103:25863] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/flatsome/inc/admin/options/helpers/"] [unique_id "aU7G3Kv8srZGEpsIm8Dz4gAAAAs"]
[Sat Dec 27 01:33:18.310096 2025] [:error] [pid 47566:tid 47576] [client 185.223.152.106:46619] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/screenshots/"] [unique_id "aU7G3qyYgLfR4YwO7bx2EQAAAQc"]
[Sat Dec 27 01:33:19.944699 2025] [:error] [pid 34187:tid 34215] [client 185.223.152.107:51627] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/zero.php"] [unique_id "aU7G36v8srZGEpsIm8Dz5gAAABc"]
[Sat Dec 27 01:33:21.449685 2025] [:error] [pid 34274:tid 34281] [client 185.223.152.101:33737] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/readme.php"] [unique_id "aU7G4c6fabpS0mfhiCEHkQAAAMU"]
[Sat Dec 27 01:33:23.143248 2025] [:error] [pid 34189:tid 34261] [client 185.223.152.109:29403] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aU7G4wnn007DnMwSsfcisAAAAI4"]
[Sat Dec 27 01:33:24.940054 2025] [:error] [pid 47566:tid 47570] [client 185.223.152.92:58539] [client 185.223.152.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/lock360.php"] [unique_id "aU7G5KyYgLfR4YwO7bx2KAAAAQE"]
[Sat Dec 27 01:33:26.440247 2025] [:error] [pid 34274:tid 34283] [client 185.223.152.104:28237] [client 185.223.152.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aU7G5s6fabpS0mfhiCEHoQAAAMc"]
[Sat Dec 27 01:33:27.970443 2025] [:error] [pid 34188:tid 34220] [client 185.223.152.110:52015] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/php-compat/wp/rohmuI.php"] [unique_id "aU7G5w54j0mXgip5BAGl8gAAAEA"]
[Sat Dec 27 01:33:29.669082 2025] [:error] [pid 47566:tid 47570] [client 185.223.152.118:23299] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/vx.php"] [unique_id "aU7G6ayYgLfR4YwO7bx2OQAAAQE"]
[Sat Dec 27 01:33:31.537622 2025] [:error] [pid 34187:tid 34212] [client 185.223.152.116:28275] [client 185.223.152.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/2k.php"] [unique_id "aU7G66v8srZGEpsIm8Dz8wAAABQ"]
[Sat Dec 27 01:33:33.171373 2025] [:error] [pid 34187:tid 34206] [client 185.223.152.96:43757] [client 185.223.152.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-hidden2.php"] [unique_id "aU7G7av8srZGEpsIm8Dz-AAAAA4"]
[Sat Dec 27 01:33:34.656346 2025] [:error] [pid 47566:tid 47574] [client 185.223.152.93:41417] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/"] [unique_id "aU7G7qyYgLfR4YwO7bx2QAAAAQU"]
[Sat Dec 27 01:33:36.342803 2025] [:error] [pid 34189:tid 34269] [client 185.223.152.94:32905] [client 185.223.152.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aU7G8Ann007DnMwSsfcivgAAAJY"]
[Sat Dec 27 01:33:37.840806 2025] [:error] [pid 34187:tid 34197] [client 185.223.152.112:23987] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/about.php"] [unique_id "aU7G8av8srZGEpsIm8D0AQAAAAU"]
[Sat Dec 27 01:33:39.539329 2025] [:error] [pid 34189:tid 34271] [client 185.223.152.118:29615] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/"] [unique_id "aU7G8wnn007DnMwSsfcixwAAAJg"]
[Sat Dec 27 01:33:41.055559 2025] [:error] [pid 34187:tid 34209] [client 185.223.152.111:27243] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/styles/typography/"] [unique_id "aU7G9av8srZGEpsIm8D0BgAAABE"]
[Sat Dec 27 01:33:42.745694 2025] [:error] [pid 34188:tid 34238] [client 185.223.152.118:34737] [client 185.223.152.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/berlin.php"] [unique_id "aU7G9g54j0mXgip5BAGmCAAAAFI"]
[Sat Dec 27 01:33:44.541684 2025] [:error] [pid 34187:tid 34205] [client 185.223.152.105:53773] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "aU7G-Kv8srZGEpsIm8D0DAAAAA0"]
[Sat Dec 27 01:33:46.036540 2025] [:error] [pid 34188:tid 34227] [client 185.223.152.101:58263] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "aU7G-g54j0mXgip5BAGmEQAAAEc"]
[Sat Dec 27 01:33:47.450610 2025] [:error] [pid 47566:tid 47576] [client 185.223.152.109:23001] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-directory/about.php"] [unique_id "aU7G-6yYgLfR4YwO7bx2XAAAAQc"]
[Sat Dec 27 01:33:48.947362 2025] [:error] [pid 34188:tid 34228] [client 185.223.152.103:61795] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aU7G_A54j0mXgip5BAGmGQAAAEg"]
[Sat Dec 27 01:33:50.544121 2025] [:error] [pid 34189:tid 34258] [client 185.223.152.97:57985] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-author/about.php"] [unique_id "aU7G_gnn007DnMwSsfcizgAAAIs"]
[Sat Dec 27 01:33:52.044898 2025] [:error] [pid 47566:tid 47586] [client 185.223.152.93:29541] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aU7HAKyYgLfR4YwO7bx2cwAAARE"]
[Sat Dec 27 01:33:53.656289 2025] [:error] [pid 34189:tid 34255] [client 185.223.152.119:61095] [client 185.223.152.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Cookie/about.php"] [unique_id "aU7HAQnn007DnMwSsfci0gAAAIg"]
[Sat Dec 27 01:33:55.137370 2025] [:error] [pid 34187:tid 34211] [client 185.223.152.103:55169] [client 185.223.152.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wordpress-seo/js/about.php"] [unique_id "aU7HA6v8srZGEpsIm8D0FQAAABM"]
[Sat Dec 27 01:33:57.138370 2025] [:error] [pid 34274:tid 34283] [client 185.223.152.98:53243] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/FR/wetrasesnnotarial/img/about.php"] [unique_id "aU7HBc6fabpS0mfhiCEHwgAAAMc"]
[Sat Dec 27 01:33:58.642508 2025] [:error] [pid 34274:tid 34276] [client 185.223.152.93:56575] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/vx.php"] [unique_id "aU7HBs6fabpS0mfhiCEHxwAAAMA"]
[Sat Dec 27 01:34:00.143694 2025] [:error] [pid 34187:tid 34206] [client 185.223.152.107:48813] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/root.php"] [unique_id "aU7HCKv8srZGEpsIm8D0IQAAAA4"]
[Sat Dec 27 01:34:01.566100 2025] [:error] [pid 34188:tid 34227] [client 185.223.152.93:24435] [client 185.223.152.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/sss.php"] [unique_id "aU7HCQ54j0mXgip5BAGmHQAAAEc"]
[Sat Dec 27 01:34:03.043988 2025] [:error] [pid 47566:tid 47588] [client 185.223.152.112:52453] [client 185.223.152.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/amryr/"] [unique_id "aU7HC6yYgLfR4YwO7bx2gAAAARM"]
[Sat Dec 27 01:34:04.465417 2025] [:error] [pid 34274:tid 34289] [client 185.223.152.110:20745] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugin/3d-flipbook-dflip-lite/3d-flipbook-dflip-lite.php"] [unique_id "aU7HDM6fabpS0mfhiCEH0wAAAM0"]
[Sat Dec 27 01:34:06.149177 2025] [:error] [pid 47566:tid 47589] [client 185.223.152.98:64817] [client 185.223.152.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugin/advanced-custom-fields/acf.php"] [unique_id "aU7HDqyYgLfR4YwO7bx2hAAAARQ"]
[Sat Dec 27 01:34:07.738505 2025] [:error] [pid 34274:tid 34285] [client 185.223.152.110:62117] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugin/pngoptimazie.php"] [unique_id "aU7HD86fabpS0mfhiCEH2QAAAMk"]
[Sat Dec 27 01:34:09.149912 2025] [:error] [pid 47566:tid 47593] [client 185.223.152.113:32411] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-fmfile.php"] [unique_id "aU7HEayYgLfR4YwO7bx2igAAARg"]
[Sat Dec 27 01:34:10.661150 2025] [:error] [pid 34187:tid 34211] [client 185.223.152.110:47921] [client 185.223.152.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/aaka.php"] [unique_id "aU7HEqv8srZGEpsIm8D0LAAAABM"]
[Sat Dec 27 01:34:12.465065 2025] [:error] [pid 47566:tid 47574] [client 185.223.152.105:38199] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aU7HFKyYgLfR4YwO7bx2kAAAAQU"]
[Sat Dec 27 01:34:14.250667 2025] [:error] [pid 34274:tid 34290] [client 185.223.152.108:60657] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aU7HFs6fabpS0mfhiCEH9gAAAM4"]
[Sat Dec 27 01:34:16.139630 2025] [:error] [pid 34274:tid 34278] [client 185.223.152.114:63265] [client 185.223.152.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/library/"] [unique_id "aU7HGM6fabpS0mfhiCEH_QAAAMI"]
[Sat Dec 27 01:34:17.755252 2025] [:error] [pid 34187:tid 34205] [client 185.223.152.117:31561] [client 185.223.152.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-all.php"] [unique_id "aU7HGav8srZGEpsIm8D0PgAAAA0"]
[Sat Dec 27 01:34:19.344380 2025] [:error] [pid 34188:tid 34231] [client 185.223.152.107:37365] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/connects.php"] [unique_id "aU7HGw54j0mXgip5BAGmKQAAAEs"]
[Sat Dec 27 01:34:21.173382 2025] [:error] [pid 47566:tid 47589] [client 185.223.152.105:26739] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/m.php"] [unique_id "aU7HHayYgLfR4YwO7bx2ngAAARQ"]
[Sat Dec 27 01:34:22.751811 2025] [:error] [pid 34188:tid 34224] [client 185.223.152.101:63127] [client 185.223.152.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-admin/user/aws.php"] [unique_id "aU7HHg54j0mXgip5BAGmLwAAAEQ"]
[Sat Dec 27 01:34:24.345307 2025] [:error] [pid 34274:tid 34283] [client 185.223.152.106:23989] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/admin.php"] [unique_id "aU7HIM6fabpS0mfhiCEIBwAAAMc"]
[Sat Dec 27 01:34:25.955626 2025] [:error] [pid 34189:tid 34262] [client 185.223.152.115:43503] [client 185.223.152.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-content/plugins/peptide/peptide2.php"] [unique_id "aU7HIQnn007DnMwSsfcjAAAAAI8"]
[Sat Dec 27 01:34:27.645858 2025] [:error] [pid 34274:tid 34293] [client 185.223.152.111:55327] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-includes/"] [unique_id "aU7HI86fabpS0mfhiCEIDQAAANE"]
[Sat Dec 27 01:34:29.272401 2025] [:error] [pid 34188:tid 34236] [client 185.223.152.97:56329] [client 185.223.152.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-includes/css/dist/commands/"] [unique_id "aU7HJQ54j0mXgip5BAGmOAAAAFA"]
[Sat Dec 27 01:34:30.855675 2025] [:error] [pid 34187:tid 34193] [client 185.223.152.100:38753] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/assets/fonts/jost/"] [unique_id "aU7HJqv8srZGEpsIm8D0WwAAAAE"]
[Sat Dec 27 01:34:32.438926 2025] [:error] [pid 47566:tid 47569] [client 185.223.152.105:32467] [client 185.223.152.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/parts/"] [unique_id "aU7HKKyYgLfR4YwO7bx2sAAAAQA"]
[Sat Dec 27 01:34:34.664271 2025] [:error] [pid 34189:tid 34268] [client 185.223.152.108:48917] [client 185.223.152.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/cache/all/neve_custom_layouts/blog-title/embed/"] [unique_id "aU7HKgnn007DnMwSsfcjCAAAAJU"]
[Sat Dec 27 01:34:36.147491 2025] [:error] [pid 47566:tid 47575] [client 185.223.152.99:60541] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/cache/all/get-a-quote-for-your-trucking-business/"] [unique_id "aU7HLKyYgLfR4YwO7bx2vQAAAQY"]
[Sat Dec 27 01:34:37.662632 2025] [:error] [pid 34187:tid 34194] [client 185.223.152.111:30901] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin00/css/colors/midnight/"] [unique_id "aU7HLav8srZGEpsIm8D0ZgAAAAI"]
[Sat Dec 27 01:34:39.169872 2025] [:error] [pid 34187:tid 34211] [client 185.223.152.113:30309] [client 185.223.152.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/v2/itw/"] [unique_id "aU7HL6v8srZGEpsIm8D0awAAABM"]
[Sat Dec 27 01:34:40.667191 2025] [:error] [pid 47566:tid 47577] [client 185.223.152.109:30139] [client 185.223.152.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aU7HMKyYgLfR4YwO7bx2ywAAAQg"]
[Sat Dec 27 01:34:42.145000 2025] [:error] [pid 47566:tid 47579] [client 185.223.152.107:31963] [client 185.223.152.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comments-title/"] [unique_id "aU7HMqyYgLfR4YwO7bx2zgAAAQo"]
[Sat Dec 27 01:34:43.656945 2025] [:error] [pid 47566:tid 47575] [client 185.223.152.106:61143] [client 185.223.152.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/"] [unique_id "aU7HM6yYgLfR4YwO7bx21wAAAQY"]
[Sat Dec 27 01:34:45.237766 2025] [:error] [pid 34188:tid 34236] [client 185.223.152.100:55803] [client 185.223.152.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-author/"] [unique_id "aU7HNQ54j0mXgip5BAGmVgAAAFA"]
[Sat Dec 27 01:34:48.053866 2025] [:error] [pid 34189:tid 34247] [client 185.223.152.99:40123] [client 185.223.152.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/script-modules/block-library/form/"] [unique_id "aU7HOAnn007DnMwSsfcjEwAAAIA"]
[Sat Dec 27 01:34:49.740208 2025] [:error] [pid 47566:tid 47570] [client 185.223.152.111:23005] [client 185.223.152.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "aU7HOayYgLfR4YwO7bx24gAAAQE"]
[Sat Dec 27 02:00:17.828166 2025] [:error] [pid 34187:tid 34202] [client 121.43.52.124:48204] [client 121.43.52.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.43.52.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU7NMav8srZGEpsIm8D9jAAAAAo"]
[Sat Dec 27 02:00:20.325607 2025] [:error] [pid 34189:tid 34248] [client 121.43.52.124:48362] [client 121.43.52.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.43.52.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU7NNAnn007DnMwSsfctzQAAAIE"]
[Sat Dec 27 02:00:43.775944 2025] [:error] [pid 34188:tid 34242] [client 121.43.52.124:49740] [client 121.43.52.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.43.52.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU7NSw54j0mXgip5BAGwCAAAAFY"]
[Sat Dec 27 02:00:48.175096 2025] [:error] [pid 34187:tid 34195] [client 121.43.52.124:49948] [client 121.43.52.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.43.52.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU7NUKv8srZGEpsIm8D93gAAAAM"]
[Sat Dec 27 02:01:31.028071 2025] [:error] [pid 34188:tid 34230] [client 121.43.52.124:52252] [client 121.43.52.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.43.52.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU7New54j0mXgip5BAGwswAAAEo"]
[Sat Dec 27 02:36:58.930165 2025] [:error] [pid 34189:tid 34253] [client 4.189.107.91:18049] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qual.php"] [unique_id "aU7Vygnn007DnMwSsfc8qQAAAIY"]
[Sat Dec 27 02:37:01.000541 2025] [:error] [pid 47566:tid 47592] [client 4.189.107.91:18139] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qual.php"] [unique_id "aU7VzKyYgLfR4YwO7bybIwAAARc"]
[Sat Dec 27 02:37:03.333478 2025] [:error] [pid 34189:tid 34249] [client 4.189.107.91:18159] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qual.php"] [unique_id "aU7Vzwnn007DnMwSsfc8sgAAAII"]
[Sat Dec 27 02:37:04.403163 2025] [:error] [pid 34189:tid 34271] [client 4.189.107.91:18131] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qual.php"] [unique_id "aU7V0Ann007DnMwSsfc8tgAAAJg"]
[Sat Dec 27 02:37:05.002960 2025] [:error] [pid 47566:tid 47573] [client 4.189.107.91:18113] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/udnkq.php"] [unique_id "aU7V0ayYgLfR4YwO7bybLgAAAQQ"]
[Sat Dec 27 02:37:05.768940 2025] [:error] [pid 34274:tid 34287] [client 4.189.107.91:18063] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/udnkq.php"] [unique_id "aU7V0c6fabpS0mfhiCEjKgAAAMs"]
[Sat Dec 27 02:37:06.612535 2025] [:error] [pid 34274:tid 34282] [client 4.189.107.91:18075] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/udnkq.php"] [unique_id "aU7V0s6fabpS0mfhiCEjLAAAAMY"]
[Sat Dec 27 02:37:08.225590 2025] [:error] [pid 34187:tid 34210] [client 4.189.107.91:18163] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/udnkq.php"] [unique_id "aU7V1Kv8srZGEpsIm8AKuwAAABI"]
[Sat Dec 27 02:37:10.887375 2025] [:error] [pid 47566:tid 47586] [client 4.189.107.91:18165] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "aU7V1qyYgLfR4YwO7bybQgAAARE"]
[Sat Dec 27 02:37:12.652910 2025] [:error] [pid 34187:tid 34201] [client 4.189.107.91:18157] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "aU7V2Kv8srZGEpsIm8AKxgAAAAk"]
[Sat Dec 27 02:37:13.868678 2025] [:error] [pid 47566:tid 47574] [client 4.189.107.91:18161] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "aU7V2ayYgLfR4YwO7bybTQAAAQU"]
[Sat Dec 27 02:37:14.442998 2025] [:error] [pid 47566:tid 47592] [client 4.189.107.91:18169] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "aU7V2qyYgLfR4YwO7bybUAAAARc"]
[Sat Dec 27 02:37:15.334315 2025] [:error] [pid 34189:tid 34258] [client 4.189.107.91:18125] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z4qmm5.php"] [unique_id "aU7V2wnn007DnMwSsfc8zgAAAIs"]
[Sat Dec 27 02:37:16.753986 2025] [:error] [pid 34188:tid 34226] [client 4.189.107.91:18124] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z4qmm5.php"] [unique_id "aU7V3A54j0mXgip5BAG91QAAAEY"]
[Sat Dec 27 02:37:18.285037 2025] [:error] [pid 34188:tid 34242] [client 4.189.107.91:18126] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z4qmm5.php"] [unique_id "aU7V3g54j0mXgip5BAG93gAAAFY"]
[Sat Dec 27 02:37:19.350974 2025] [:error] [pid 34188:tid 34240] [client 4.189.107.91:18149] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z4qmm5.php"] [unique_id "aU7V3w54j0mXgip5BAG96AAAAFQ"]
[Sat Dec 27 02:37:20.816069 2025] [:error] [pid 34274:tid 34297] [client 4.189.107.91:18174] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no3.php"] [unique_id "aU7V4M6fabpS0mfhiCEjNwAAANU"]
[Sat Dec 27 02:37:21.701135 2025] [:error] [pid 34189:tid 34267] [client 4.189.107.91:18120] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no3.php"] [unique_id "aU7V4Qnn007DnMwSsfc82wAAAJQ"]
[Sat Dec 27 02:37:22.852427 2025] [:error] [pid 34189:tid 34260] [client 4.189.107.91:18148] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no3.php"] [unique_id "aU7V4gnn007DnMwSsfc83wAAAI0"]
[Sat Dec 27 02:37:26.335006 2025] [:error] [pid 34187:tid 34208] [client 4.189.107.91:18062] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no3.php"] [unique_id "aU7V5qv8srZGEpsIm8AK2AAAABA"]
[Sat Dec 27 02:37:26.670076 2025] [:error] [pid 34274:tid 34288] [client 4.189.107.91:18118] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/om.php"] [unique_id "aU7V5s6fabpS0mfhiCEjPQAAAMw"]
[Sat Dec 27 02:37:27.080800 2025] [:error] [pid 34274:tid 34276] [client 4.189.107.91:18167] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/om.php"] [unique_id "aU7V586fabpS0mfhiCEjPgAAAMA"]
[Sat Dec 27 02:37:28.372909 2025] [:error] [pid 47566:tid 47584] [client 4.189.107.91:18127] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/om.php"] [unique_id "aU7V6KyYgLfR4YwO7bybZAAAAQ8"]
[Sat Dec 27 02:37:29.303883 2025] [:error] [pid 34187:tid 34213] [client 4.189.107.91:18171] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/om.php"] [unique_id "aU7V6av8srZGEpsIm8AK2gAAABU"]
[Sat Dec 27 02:37:30.646473 2025] [:error] [pid 47566:tid 47569] [client 4.189.107.91:10193] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/webix.php"] [unique_id "aU7V6qyYgLfR4YwO7bybaQAAAQA"]
[Sat Dec 27 02:37:31.676515 2025] [:error] [pid 34189:tid 34260] [client 4.189.107.91:18112] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/webix.php"] [unique_id "aU7V6wnn007DnMwSsfc9AwAAAI0"]
[Sat Dec 27 02:37:32.145123 2025] [:error] [pid 34274:tid 34277] [client 4.189.107.91:18069] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/webix.php"] [unique_id "aU7V7M6fabpS0mfhiCEjSQAAAME"]
[Sat Dec 27 02:37:33.666556 2025] [:error] [pid 34189:tid 34247] [client 4.189.107.91:18074] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/webix.php"] [unique_id "aU7V7Qnn007DnMwSsfc9CwAAAIA"]
[Sat Dec 27 02:37:35.127494 2025] [:error] [pid 34188:tid 34237] [client 4.189.107.91:18164] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aU7V7w54j0mXgip5BAG9-gAAAFE"]
[Sat Dec 27 02:37:36.357652 2025] [:error] [pid 34187:tid 34198] [client 4.189.107.91:18096] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aU7V8Kv8srZGEpsIm8AK8AAAAAY"]
[Sat Dec 27 02:37:37.580748 2025] [:error] [pid 34188:tid 34236] [client 4.189.107.91:18145] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aU7V8Q54j0mXgip5BAG9_wAAAFA"]
[Sat Dec 27 02:37:39.382786 2025] [:error] [pid 34187:tid 34207] [client 4.189.107.91:18170] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aU7V86v8srZGEpsIm8AK-gAAAA8"]
[Sat Dec 27 02:37:39.895957 2025] [:error] [pid 34187:tid 34205] [client 4.189.107.91:18054] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cka.php"] [unique_id "aU7V86v8srZGEpsIm8AK_AAAAA0"]
[Sat Dec 27 02:37:40.817798 2025] [:error] [pid 34187:tid 34194] [client 4.189.107.91:18052] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cka.php"] [unique_id "aU7V9Kv8srZGEpsIm8ALAAAAAAI"]
[Sat Dec 27 02:37:41.560157 2025] [:error] [pid 34187:tid 34214] [client 4.189.107.91:18136] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cka.php"] [unique_id "aU7V9av8srZGEpsIm8ALCQAAABY"]
[Sat Dec 27 02:37:42.619629 2025] [:error] [pid 47566:tid 47582] [client 4.189.107.91:18141] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cka.php"] [unique_id "aU7V9qyYgLfR4YwO7bybdAAAAQ0"]
[Sat Dec 27 02:37:43.781372 2025] [:error] [pid 47566:tid 47591] [client 4.189.107.91:18172] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aU7V96yYgLfR4YwO7bybfQAAARY"]
[Sat Dec 27 02:37:45.189598 2025] [:error] [pid 34187:tid 34201] [client 4.189.107.91:18143] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aU7V-av8srZGEpsIm8ALEAAAAAk"]
[Sat Dec 27 02:37:46.225580 2025] [:error] [pid 47566:tid 47580] [client 4.189.107.91:18122] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aU7V-qyYgLfR4YwO7bybhQAAAQs"]
[Sat Dec 27 02:37:47.062451 2025] [:error] [pid 47566:tid 47593] [client 4.189.107.91:10188] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aU7V-6yYgLfR4YwO7bybiQAAARg"]
[Sat Dec 27 02:37:49.085457 2025] [:error] [pid 34274:tid 34276] [client 4.189.107.91:18051] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aU7V_c6fabpS0mfhiCEjXQAAAMA"]
[Sat Dec 27 02:37:51.231786 2025] [:error] [pid 34274:tid 34294] [client 4.189.107.91:18146] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aU7V_86fabpS0mfhiCEjYAAAANI"]
[Sat Dec 27 02:37:54.165974 2025] [:error] [pid 34189:tid 34253] [client 4.189.107.91:18128] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aU7WAgnn007DnMwSsfc9JgAAAIY"]
[Sat Dec 27 02:38:10.415127 2025] [:error] [pid 34188:tid 34227] [client 4.189.107.91:18119] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aU7WEg54j0mXgip5BAG-UAAAAEc"]
[Sat Dec 27 02:38:14.274486 2025] [:error] [pid 47566:tid 47590] [client 4.189.107.91:18155] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aU7WFqyYgLfR4YwO7bybzwAAARU"]
[Sat Dec 27 02:38:17.644603 2025] [:error] [pid 34188:tid 34226] [client 4.189.107.91:18056] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aU7WGQ54j0mXgip5BAG-XQAAAEY"]
[Sat Dec 27 02:38:22.438080 2025] [:error] [pid 47566:tid 47574] [client 4.189.107.91:18072] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aU7WHqyYgLfR4YwO7byb6QAAAQU"]
[Sat Dec 27 02:38:26.534474 2025] [:error] [pid 47566:tid 47592] [client 4.189.107.91:18057] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aU7WIqyYgLfR4YwO7byb9gAAARc"]
[Sat Dec 27 02:38:33.174273 2025] [:error] [pid 34187:tid 34194] [client 4.189.107.91:18067] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aU7WKav8srZGEpsIm8ALLwAAAAI"]
[Sat Dec 27 02:38:35.580857 2025] [:error] [pid 34187:tid 34212] [client 4.189.107.91:18147] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aU7WK6v8srZGEpsIm8ALMgAAABQ"]
[Sat Dec 27 02:38:36.942606 2025] [:error] [pid 34187:tid 34209] [client 4.189.107.91:10227] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aU7WLKv8srZGEpsIm8ALNAAAABE"]
[Sat Dec 27 02:38:38.736034 2025] [:error] [pid 47566:tid 47588] [client 4.189.107.91:18133] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aU7WLqyYgLfR4YwO7bycBQAAARM"]
[Sat Dec 27 02:38:41.096830 2025] [:error] [pid 34187:tid 34193] [client 4.189.107.91:18175] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aU7WMav8srZGEpsIm8ALPQAAAAE"]
[Sat Dec 27 02:38:43.207897 2025] [:error] [pid 47566:tid 47582] [client 4.189.107.91:18115] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aU7WM6yYgLfR4YwO7bycCwAAAQ0"]
[Sat Dec 27 02:38:45.432919 2025] [:error] [pid 34274:tid 34278] [client 4.189.107.91:18050] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aU7WNc6fabpS0mfhiCEjygAAAMI"]
[Sat Dec 27 02:38:48.624501 2025] [:error] [pid 47566:tid 47588] [client 4.189.107.91:18123] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aU7WOKyYgLfR4YwO7bycHgAAARM"]
[Sat Dec 27 02:38:50.884892 2025] [:error] [pid 47566:tid 47569] [client 4.189.107.91:18162] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aU7WOqyYgLfR4YwO7bycJQAAAQA"]
[Sat Dec 27 02:38:52.172682 2025] [:error] [pid 47566:tid 47592] [client 4.189.107.91:18077] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aU7WPKyYgLfR4YwO7bycLAAAARc"]
[Sat Dec 27 02:38:53.294173 2025] [:error] [pid 34187:tid 34197] [client 4.189.107.91:10206] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aU7WPav8srZGEpsIm8ALRAAAAAU"]
[Sat Dec 27 02:38:54.983116 2025] [:error] [pid 34189:tid 34251] [client 4.189.107.91:18053] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aU7WPgnn007DnMwSsfc9ZAAAAIQ"]
[Sat Dec 27 02:38:55.758189 2025] [:error] [pid 34274:tid 34283] [client 4.189.107.91:18076] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aU7WP86fabpS0mfhiCEj0AAAAMc"]
[Sat Dec 27 02:38:56.350182 2025] [:error] [pid 34187:tid 34213] [client 4.189.107.91:18079] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aU7WQKv8srZGEpsIm8ALRwAAABU"]
[Sat Dec 27 02:38:56.870449 2025] [:error] [pid 34189:tid 34257] [client 4.189.107.91:18070] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aU7WQAnn007DnMwSsfc9ZwAAAIo"]
[Sat Dec 27 02:38:57.649285 2025] [:error] [pid 34189:tid 34249] [client 4.189.107.91:18138] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7WQQnn007DnMwSsfc9aQAAAII"]
[Sat Dec 27 02:38:58.142252 2025] [:error] [pid 34189:tid 34253] [client 4.189.107.91:18135] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7WQgnn007DnMwSsfc9awAAAIY"]
[Sat Dec 27 02:38:58.855998 2025] [:error] [pid 47566:tid 47579] [client 4.189.107.91:10223] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7WQqyYgLfR4YwO7bycPAAAAQo"]
[Sat Dec 27 02:39:00.603828 2025] [:error] [pid 34188:tid 34244] [client 4.189.107.91:18093] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU7WRA54j0mXgip5BAG-iQAAAFg"]
[Sat Dec 27 02:39:01.167952 2025] [:error] [pid 34188:tid 34228] [client 4.189.107.91:18151] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aU7WRQ54j0mXgip5BAG-igAAAEg"]
[Sat Dec 27 02:39:01.619126 2025] [:error] [pid 34188:tid 34226] [client 4.189.107.91:18085] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aU7WRQ54j0mXgip5BAG-iwAAAEY"]
[Sat Dec 27 02:39:02.107111 2025] [:error] [pid 34274:tid 34278] [client 4.189.107.91:18152] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aU7WRs6fabpS0mfhiCEj1AAAAMI"]
[Sat Dec 27 02:39:02.828588 2025] [:error] [pid 34189:tid 34262] [client 4.189.107.91:18098] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aU7WRgnn007DnMwSsfc9bAAAAI8"]
[Sat Dec 27 02:39:03.369463 2025] [:error] [pid 34189:tid 34247] [client 4.189.107.91:18064] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aU7WRwnn007DnMwSsfc9bgAAAIA"]
[Sat Dec 27 02:39:04.454924 2025] [:error] [pid 34274:tid 34295] [client 4.189.107.91:18055] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aU7WSM6fabpS0mfhiCEj2QAAANM"]
[Sat Dec 27 02:39:05.757248 2025] [:error] [pid 47566:tid 47591] [client 4.189.107.91:18092] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aU7WSayYgLfR4YwO7bycSwAAARY"]
[Sat Dec 27 02:39:06.286809 2025] [:error] [pid 34188:tid 34230] [client 4.189.107.91:10180] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aU7WSg54j0mXgip5BAG-mAAAAEo"]
[Sat Dec 27 02:39:06.721106 2025] [:error] [pid 47566:tid 47570] [client 4.189.107.91:18129] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aU7WSqyYgLfR4YwO7bycTQAAAQE"]
[Sat Dec 27 02:39:08.089691 2025] [:error] [pid 47566:tid 47581] [client 4.189.107.91:18088] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aU7WTKyYgLfR4YwO7bycUAAAAQw"]
[Sat Dec 27 02:39:12.361389 2025] [autoindex:error] [pid 34188:tid 34221] [client 4.189.107.91:18153] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 02:39:13.447788 2025] [:error] [pid 34188:tid 34231] [client 4.189.107.91:18153] [client 4.189.107.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aU7WUQ54j0mXgip5BAG-oAAAAEs"]
[Sat Dec 27 02:39:20.403785 2025] [autoindex:error] [pid 34188:tid 34221] [client 4.189.107.91:18137] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 27 02:39:34.819993 2025] [:error] [pid 34187:tid 34204] [client 4.189.107.91:10207] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aU7WZqv8srZGEpsIm8ALbgAAAAw"]
[Sat Dec 27 02:39:35.721797 2025] [:error] [pid 47566:tid 47581] [client 4.189.107.91:10178] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aU7WZ6yYgLfR4YwO7bycXQAAAQw"]
[Sat Dec 27 02:39:36.687913 2025] [:error] [pid 34274:tid 34300] [client 4.189.107.91:18166] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aU7WaM6fabpS0mfhiCEj7QAAANg"]
[Sat Dec 27 02:39:39.361389 2025] [:error] [pid 34189:tid 34255] [client 4.189.107.91:10190] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aU7Wawnn007DnMwSsfc9mQAAAIg"]
[Sat Dec 27 02:39:40.805955 2025] [:error] [pid 34274:tid 34289] [client 4.189.107.91:18116] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fwe.php"] [unique_id "aU7WbM6fabpS0mfhiCEj9QAAAM0"]
[Sat Dec 27 02:39:41.805025 2025] [:error] [pid 34187:tid 34211] [client 4.189.107.91:18117] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fwe.php"] [unique_id "aU7Wbav8srZGEpsIm8ALegAAABM"]
[Sat Dec 27 02:39:42.838109 2025] [:error] [pid 34274:tid 34300] [client 4.189.107.91:18078] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fwe.php"] [unique_id "aU7Wbs6fabpS0mfhiCEj_AAAANg"]
[Sat Dec 27 02:39:45.604046 2025] [:error] [pid 34189:tid 34268] [client 4.189.107.91:18101] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fwe.php"] [unique_id "aU7WcQnn007DnMwSsfc9oAAAAJU"]
[Sat Dec 27 02:39:47.086858 2025] [:error] [pid 34189:tid 34247] [client 4.189.107.91:18091] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aU7Wcwnn007DnMwSsfc9pAAAAIA"]
[Sat Dec 27 02:39:48.158023 2025] [:error] [pid 34187:tid 34204] [client 4.189.107.91:18090] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aU7WdKv8srZGEpsIm8ALiAAAAAw"]
[Sat Dec 27 02:39:49.430950 2025] [:error] [pid 34188:tid 34238] [client 4.189.107.91:18068] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aU7WdQ54j0mXgip5BAG-0QAAAFI"]
[Sat Dec 27 02:39:50.444923 2025] [:error] [pid 34187:tid 34198] [client 4.189.107.91:10192] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aU7Wdqv8srZGEpsIm8ALjQAAAAY"]
[Sat Dec 27 02:39:51.303531 2025] [:error] [pid 34187:tid 34195] [client 4.189.107.91:10185] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aU7Wd6v8srZGEpsIm8ALjwAAAAM"]
[Sat Dec 27 02:39:52.101105 2025] [:error] [pid 47566:tid 47569] [client 4.189.107.91:18083] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aU7WeKyYgLfR4YwO7bycZgAAAQA"]
[Sat Dec 27 02:39:52.844413 2025] [:error] [pid 34187:tid 34207] [client 4.189.107.91:18060] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aU7WeKv8srZGEpsIm8ALlgAAAA8"]
[Sat Dec 27 02:39:53.904864 2025] [:error] [pid 34274:tid 34295] [client 4.189.107.91:18071] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aU7Wec6fabpS0mfhiCEkDQAAANM"]
[Sat Dec 27 02:39:55.012667 2025] [:error] [pid 34188:tid 34237] [client 4.189.107.91:18107] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aU7Wew54j0mXgip5BAG-1AAAAFE"]
[Sat Dec 27 02:39:56.314758 2025] [:error] [pid 34188:tid 34224] [client 4.189.107.91:10213] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aU7WfA54j0mXgip5BAG-1gAAAEQ"]
[Sat Dec 27 02:39:57.426100 2025] [:error] [pid 34187:tid 34197] [client 4.189.107.91:10189] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aU7Wfav8srZGEpsIm8ALpQAAAAU"]
[Sat Dec 27 02:39:58.238527 2025] [:error] [pid 47566:tid 47589] [client 4.189.107.91:18105] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aU7WfqyYgLfR4YwO7bycagAAARQ"]
[Sat Dec 27 02:39:59.321916 2025] [:error] [pid 34187:tid 34211] [client 4.189.107.91:18059] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aU7Wf6v8srZGEpsIm8ALqAAAABM"]
[Sat Dec 27 02:40:00.350115 2025] [:error] [pid 34274:tid 34292] [client 4.189.107.91:10224] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aU7WgM6fabpS0mfhiCEkGAAAANA"]
[Sat Dec 27 02:40:01.888435 2025] [:error] [pid 34274:tid 34294] [client 4.189.107.91:10191] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aU7Wgc6fabpS0mfhiCEkGQAAANI"]
[Sat Dec 27 02:40:02.420661 2025] [:error] [pid 34187:tid 34202] [client 4.189.107.91:18130] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aU7Wgqv8srZGEpsIm8ALrgAAAAo"]
[Sat Dec 27 02:40:03.408659 2025] [:error] [pid 34187:tid 34207] [client 4.189.107.91:10118] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aU7Wg6v8srZGEpsIm8ALsQAAAA8"]
[Sat Dec 27 02:40:04.250846 2025] [:error] [pid 47566:tid 47590] [client 4.189.107.91:18066] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aU7WhKyYgLfR4YwO7bycdQAAARU"]
[Sat Dec 27 02:40:04.886652 2025] [:error] [pid 34188:tid 34235] [client 4.189.107.91:18065] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aU7WhA54j0mXgip5BAG-3wAAAE8"]
[Sat Dec 27 02:40:05.644206 2025] [:error] [pid 47566:tid 47587] [client 4.189.107.91:10184] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aU7WhayYgLfR4YwO7bycjwAAARI"]
[Sat Dec 27 02:40:06.364100 2025] [:error] [pid 47566:tid 47582] [client 4.189.107.91:18080] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aU7WhqyYgLfR4YwO7bycpgAAAQ0"]
[Sat Dec 27 02:40:07.022629 2025] [:error] [pid 34187:tid 34194] [client 4.189.107.91:18106] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aU7Wh6v8srZGEpsIm8ALswAAAAI"]
[Sat Dec 27 02:40:07.632583 2025] [:error] [pid 34187:tid 34198] [client 4.189.107.91:18100] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aU7Wh6v8srZGEpsIm8ALtAAAAAY"]
[Sat Dec 27 02:40:08.424622 2025] [:error] [pid 34189:tid 34263] [client 4.189.107.91:18114] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aU7WiAnn007DnMwSsfc9rwAAAJA"]
[Sat Dec 27 02:40:08.932086 2025] [:error] [pid 34274:tid 34297] [client 4.189.107.91:10221] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aU7WiM6fabpS0mfhiCEkHAAAANU"]
[Sat Dec 27 02:40:09.425632 2025] [:error] [pid 34188:tid 34229] [client 4.189.107.91:18154] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aU7WiQ54j0mXgip5BAG-4QAAAEk"]
[Sat Dec 27 02:40:10.265038 2025] [:error] [pid 34188:tid 34223] [client 4.189.107.91:10237] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aU7Wig54j0mXgip5BAG-4gAAAEM"]
[Sat Dec 27 02:40:11.037516 2025] [:error] [pid 34188:tid 34237] [client 4.189.107.91:18048] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aU7Wiw54j0mXgip5BAG-5AAAAFE"]
[Sat Dec 27 02:40:11.549500 2025] [:error] [pid 47566:tid 47571] [client 4.189.107.91:10115] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aU7Wi6yYgLfR4YwO7bycuAAAAQI"]
[Sat Dec 27 02:40:12.238411 2025] [:error] [pid 34274:tid 34276] [client 4.189.107.91:10202] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aU7WjM6fabpS0mfhiCEkIAAAAMA"]
[Sat Dec 27 02:40:12.902438 2025] [:error] [pid 47566:tid 47587] [client 4.189.107.91:18109] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aU7WjKyYgLfR4YwO7bycwgAAARI"]
[Sat Dec 27 02:40:14.042909 2025] [:error] [pid 34189:tid 34250] [client 4.189.107.91:18173] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aU7Wjgnn007DnMwSsfc9vAAAAIM"]
[Sat Dec 27 02:40:15.140764 2025] [:error] [pid 47566:tid 47586] [client 4.189.107.91:10186] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aU7Wj6yYgLfR4YwO7bycywAAARE"]
[Sat Dec 27 02:40:16.087874 2025] [:error] [pid 34189:tid 34253] [client 4.189.107.91:10158] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aU7WkAnn007DnMwSsfc9vgAAAIY"]
[Sat Dec 27 02:40:17.037944 2025] [:error] [pid 34274:tid 34294] [client 4.189.107.91:18158] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aU7Wkc6fabpS0mfhiCEkJgAAANI"]
[Sat Dec 27 02:40:17.594471 2025] [:error] [pid 34187:tid 34215] [client 4.189.107.91:18111] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aU7Wkav8srZGEpsIm8ALugAAABc"]
[Sat Dec 27 02:40:18.027154 2025] [:error] [pid 34274:tid 34282] [client 4.189.107.91:10215] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aU7Wks6fabpS0mfhiCEkKgAAAMY"]
[Sat Dec 27 02:40:18.972396 2025] [:error] [pid 34274:tid 34287] [client 4.189.107.91:10211] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aU7Wks6fabpS0mfhiCEkLQAAAMs"]
[Sat Dec 27 02:40:19.880276 2025] [:error] [pid 34274:tid 34290] [client 4.189.107.91:10124] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aU7Wk86fabpS0mfhiCEkMAAAAM4"]
[Sat Dec 27 02:40:20.976345 2025] [:error] [pid 34188:tid 34243] [client 4.189.107.91:18084] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aU7WlA54j0mXgip5BAG_CgAAAFc"]
[Sat Dec 27 02:40:21.677511 2025] [:error] [pid 34188:tid 34225] [client 4.189.107.91:10210] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU7WlQ54j0mXgip5BAG_CwAAAEU"]
[Sat Dec 27 02:40:22.370176 2025] [:error] [pid 34187:tid 34208] [client 4.189.107.91:18121] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU7Wlqv8srZGEpsIm8ALxwAAABA"]
[Sat Dec 27 02:40:23.178441 2025] [:error] [pid 34187:tid 34210] [client 4.189.107.91:10222] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU7Wl6v8srZGEpsIm8ALywAAABI"]
[Sat Dec 27 02:40:23.600074 2025] [:error] [pid 34187:tid 34201] [client 4.189.107.91:10183] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU7Wl6v8srZGEpsIm8ALzAAAAAk"]
[Sat Dec 27 02:40:24.282963 2025] [:error] [pid 34274:tid 34286] [client 4.189.107.91:18168] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aU7WmM6fabpS0mfhiCEkOgAAAMo"]
[Sat Dec 27 02:40:25.044017 2025] [:error] [pid 47566:tid 47574] [client 4.189.107.91:18134] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aU7WmayYgLfR4YwO7byc-gAAAQU"]
[Sat Dec 27 02:40:25.807569 2025] [:error] [pid 34274:tid 34299] [client 4.189.107.91:10231] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aU7Wmc6fabpS0mfhiCEkQAAAANc"]
[Sat Dec 27 02:40:27.186230 2025] [:error] [pid 47566:tid 47586] [client 4.189.107.91:10195] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aU7Wm6yYgLfR4YwO7bydAAAAARE"]
[Sat Dec 27 02:40:27.966682 2025] [:error] [pid 34274:tid 34280] [client 4.189.107.91:18142] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aU7Wm86fabpS0mfhiCEkSAAAAMQ"]
[Sat Dec 27 02:40:28.528663 2025] [:error] [pid 34274:tid 34277] [client 4.189.107.91:10177] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aU7WnM6fabpS0mfhiCEkTQAAAME"]
[Sat Dec 27 02:40:28.901886 2025] [:error] [pid 34188:tid 34231] [client 4.189.107.91:18082] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aU7WnA54j0mXgip5BAG_GAAAAEs"]
[Sat Dec 27 02:40:29.330748 2025] [:error] [pid 34189:tid 34271] [client 4.189.107.91:18097] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aU7WnQnn007DnMwSsfc9xgAAAJg"]
[Sat Dec 27 02:40:30.517792 2025] [:error] [pid 34187:tid 34195] [client 4.189.107.91:18160] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU7Wnqv8srZGEpsIm8AL1QAAAAM"]
[Sat Dec 27 02:40:31.488966 2025] [:error] [pid 34188:tid 34223] [client 4.189.107.91:18087] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU7Wnw54j0mXgip5BAG_HgAAAEM"]
[Sat Dec 27 02:40:32.246220 2025] [:error] [pid 34188:tid 34237] [client 4.189.107.91:18058] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU7WoA54j0mXgip5BAG_HwAAAFE"]
[Sat Dec 27 02:40:32.765116 2025] [:error] [pid 34187:tid 34207] [client 4.189.107.91:10070] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU7WoKv8srZGEpsIm8AL4QAAAA8"]
[Sat Dec 27 02:40:53.658695 2025] [:error] [pid 34274:tid 34294] [client 4.189.107.91:18108] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aU7Wtc6fabpS0mfhiCEkhgAAANI"]
[Sat Dec 27 02:40:54.087752 2025] [:error] [pid 34274:tid 34295] [client 4.189.107.91:10201] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aU7Wts6fabpS0mfhiCEkiAAAANM"]
[Sat Dec 27 02:40:54.396420 2025] [:error] [pid 47566:tid 47579] [client 4.189.107.91:10199] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aU7WtqyYgLfR4YwO7bydKwAAAQo"]
[Sat Dec 27 02:40:54.943936 2025] [:error] [pid 47566:tid 47578] [client 4.189.107.91:10236] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aU7WtqyYgLfR4YwO7bydLgAAAQk"]
[Sat Dec 27 02:40:55.529915 2025] [:error] [pid 47566:tid 47575] [client 4.189.107.91:10182] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aU7Wt6yYgLfR4YwO7bydLwAAAQY"]
[Sat Dec 27 02:40:56.576348 2025] [:error] [pid 34187:tid 34201] [client 4.189.107.91:18095] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aU7WuKv8srZGEpsIm8AMJwAAAAk"]
[Sat Dec 27 02:40:57.485647 2025] [:error] [pid 47566:tid 47577] [client 4.189.107.91:18061] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aU7WuayYgLfR4YwO7bydMwAAAQg"]
[Sat Dec 27 02:40:58.464978 2025] [:error] [pid 47566:tid 47573] [client 4.189.107.91:10143] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aU7WuqyYgLfR4YwO7bydNgAAAQQ"]
[Sat Dec 27 02:40:59.047826 2025] [:error] [pid 34188:tid 34235] [client 4.189.107.91:10233] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7Wuw54j0mXgip5BAG_NQAAAE8"]
[Sat Dec 27 02:40:59.939453 2025] [:error] [pid 34187:tid 34211] [client 4.189.107.91:18144] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7Wu6v8srZGEpsIm8AMKwAAABM"]
[Sat Dec 27 02:41:01.026389 2025] [:error] [pid 47566:tid 47582] [client 4.189.107.91:10132] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7WvayYgLfR4YwO7bydOgAAAQ0"]
[Sat Dec 27 02:41:02.014008 2025] [:error] [pid 34274:tid 34291] [client 4.189.107.91:10219] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU7Wvs6fabpS0mfhiCEkkAAAAM8"]
[Sat Dec 27 02:41:03.087742 2025] [:error] [pid 34189:tid 34250] [client 4.189.107.91:18099] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aU7Wvwnn007DnMwSsfc95AAAAIM"]
[Sat Dec 27 02:41:03.672616 2025] [:error] [pid 34188:tid 34231] [client 4.189.107.91:10137] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aU7Wvw54j0mXgip5BAG_PQAAAEs"]
[Sat Dec 27 02:41:04.038403 2025] [:error] [pid 34274:tid 34300] [client 4.189.107.91:10232] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aU7WwM6fabpS0mfhiCEkkQAAANg"]
[Sat Dec 27 02:41:04.360618 2025] [:error] [pid 47566:tid 47570] [client 4.189.107.91:10116] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aU7WwKyYgLfR4YwO7bydQgAAAQE"]
[Sat Dec 27 02:41:05.395424 2025] [:error] [pid 34188:tid 34225] [client 4.189.107.91:10053] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7WwQ54j0mXgip5BAG_QAAAAEU"]
[Sat Dec 27 02:41:05.854945 2025] [:error] [pid 34187:tid 34208] [client 4.189.107.91:10179] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7Wwav8srZGEpsIm8AMMgAAABA"]
[Sat Dec 27 02:41:06.275004 2025] [:error] [pid 34187:tid 34212] [client 4.189.107.91:18104] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7Wwqv8srZGEpsIm8AMNAAAABQ"]
[Sat Dec 27 02:41:06.779785 2025] [:error] [pid 34188:tid 34228] [client 4.189.107.91:10187] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU7Wwg54j0mXgip5BAG_QwAAAEg"]
[Sat Dec 27 02:41:07.985417 2025] [:error] [pid 34189:tid 34247] [client 4.189.107.91:10214] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aU7Wwwnn007DnMwSsfc95gAAAIA"]
[Sat Dec 27 02:41:08.278257 2025] [:error] [pid 34189:tid 34268] [client 4.189.107.91:18132] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aU7WxAnn007DnMwSsfc95wAAAJU"]
[Sat Dec 27 02:41:08.662373 2025] [:error] [pid 47566:tid 47592] [client 4.189.107.91:10113] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aU7WxKyYgLfR4YwO7bydTgAAARc"]
[Sat Dec 27 02:41:09.210737 2025] [:error] [pid 34187:tid 34193] [client 4.189.107.91:10200] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aU7Wxav8srZGEpsIm8AMPAAAAAE"]
[Sat Dec 27 02:41:09.797496 2025] [:error] [pid 34188:tid 34231] [client 4.189.107.91:18103] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aU7WxQ54j0mXgip5BAG_SwAAAEs"]
[Sat Dec 27 02:41:10.462622 2025] [:error] [pid 34274:tid 34293] [client 4.189.107.91:10048] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aU7Wxs6fabpS0mfhiCEkmAAAANE"]
[Sat Dec 27 02:41:10.861221 2025] [:error] [pid 34274:tid 34292] [client 4.189.107.91:10150] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aU7Wxs6fabpS0mfhiCEkmQAAANA"]
[Sat Dec 27 02:41:11.323256 2025] [:error] [pid 34274:tid 34296] [client 4.189.107.91:10208] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aU7Wx86fabpS0mfhiCEkmgAAANQ"]
[Sat Dec 27 02:41:12.058626 2025] [:error] [pid 34187:tid 34215] [client 4.189.107.91:10160] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aU7WyKv8srZGEpsIm8AMPwAAABc"]
[Sat Dec 27 02:41:12.899998 2025] [:error] [pid 34188:tid 34239] [client 4.189.107.91:10159] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aU7WyA54j0mXgip5BAG_TQAAAFM"]
[Sat Dec 27 02:41:13.728075 2025] [:error] [pid 34187:tid 34205] [client 4.189.107.91:10225] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aU7Wyav8srZGEpsIm8AMQwAAAA0"]
[Sat Dec 27 02:41:14.291970 2025] [:error] [pid 47566:tid 47577] [client 4.189.107.91:10198] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aU7WyqyYgLfR4YwO7bydVwAAAQg"]
[Sat Dec 27 02:41:15.044381 2025] [:error] [pid 47566:tid 47592] [client 4.189.107.91:10112] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aU7Wy6yYgLfR4YwO7bydXAAAARc"]
[Sat Dec 27 02:41:15.566969 2025] [:error] [pid 47566:tid 47591] [client 4.189.107.91:10151] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aU7Wy6yYgLfR4YwO7bydXgAAARY"]
[Sat Dec 27 02:41:16.273750 2025] [:error] [pid 34187:tid 34209] [client 4.189.107.91:10235] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aU7WzKv8srZGEpsIm8AMSAAAABE"]
[Sat Dec 27 02:41:16.787345 2025] [:error] [pid 34188:tid 34220] [client 4.189.107.91:10149] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aU7WzA54j0mXgip5BAG_TwAAAEA"]
[Sat Dec 27 02:41:17.142151 2025] [:error] [pid 34187:tid 34206] [client 4.189.107.91:10138] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aU7Wzav8srZGEpsIm8AMSwAAAA4"]
[Sat Dec 27 02:41:17.726917 2025] [:error] [pid 34187:tid 34192] [client 4.189.107.91:10054] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aU7Wzav8srZGEpsIm8AMTAAAAAA"]
[Sat Dec 27 02:41:18.214497 2025] [:error] [pid 47566:tid 47578] [client 4.189.107.91:10066] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aU7WzqyYgLfR4YwO7bydYgAAAQk"]
[Sat Dec 27 02:41:18.650220 2025] [:error] [pid 47566:tid 47575] [client 4.189.107.91:10148] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aU7WzqyYgLfR4YwO7bydZAAAAQY"]
[Sat Dec 27 02:41:19.016846 2025] [:error] [pid 34188:tid 34236] [client 4.189.107.91:18102] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aU7Wzw54j0mXgip5BAG_UQAAAFA"]
[Sat Dec 27 02:41:19.475877 2025] [:error] [pid 47566:tid 47580] [client 4.189.107.91:10220] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aU7Wz6yYgLfR4YwO7bydZgAAAQs"]
[Sat Dec 27 02:41:20.040272 2025] [:error] [pid 34189:tid 34254] [client 4.189.107.91:10157] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aU7W0Ann007DnMwSsfc9-AAAAIc"]
[Sat Dec 27 02:41:20.331813 2025] [:error] [pid 34189:tid 34262] [client 4.189.107.91:10140] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aU7W0Ann007DnMwSsfc9-QAAAI8"]
[Sat Dec 27 02:41:20.733301 2025] [:error] [pid 34274:tid 34284] [client 4.189.107.91:10130] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aU7W0M6fabpS0mfhiCEkqAAAAMg"]
[Sat Dec 27 02:41:21.083909 2025] [:error] [pid 34188:tid 34240] [client 4.189.107.91:10129] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aU7W0Q54j0mXgip5BAG_VQAAAFQ"]
[Sat Dec 27 02:41:21.753576 2025] [:error] [pid 34189:tid 34269] [client 4.189.107.91:18086] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aU7W0Qnn007DnMwSsfc9-gAAAJY"]
[Sat Dec 27 02:41:22.975346 2025] [:error] [pid 34189:tid 34268] [client 4.189.107.91:10114] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aU7W0gnn007DnMwSsfc9_AAAAJU"]
[Sat Dec 27 02:41:23.859579 2025] [:error] [pid 34188:tid 34244] [client 4.189.107.91:10068] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aU7W0w54j0mXgip5BAG_WQAAAFg"]
[Sat Dec 27 02:41:25.052754 2025] [:error] [pid 47566:tid 47569] [client 4.189.107.91:10216] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aU7W1ayYgLfR4YwO7bydcwAAAQA"]
[Sat Dec 27 02:41:25.653333 2025] [:error] [pid 34274:tid 34297] [client 4.189.107.91:10131] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aU7W1c6fabpS0mfhiCEkrwAAANU"]
[Sat Dec 27 02:41:26.265616 2025] [:error] [pid 34189:tid 34253] [client 4.189.107.91:10226] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aU7W1gnn007DnMwSsfc-AAAAAIY"]
[Sat Dec 27 02:41:26.610487 2025] [:error] [pid 34188:tid 34238] [client 4.189.107.91:10136] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aU7W1g54j0mXgip5BAG_XQAAAFI"]
[Sat Dec 27 02:41:27.292655 2025] [:error] [pid 34189:tid 34267] [client 4.189.107.91:10139] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aU7W1wnn007DnMwSsfc-AQAAAJQ"]
[Sat Dec 27 02:41:27.913782 2025] [:error] [pid 34274:tid 34293] [client 4.189.107.91:10204] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aU7W186fabpS0mfhiCEkswAAANE"]
[Sat Dec 27 02:41:28.797139 2025] [:error] [pid 47566:tid 47578] [client 4.189.107.91:10060] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aU7W2KyYgLfR4YwO7bydeAAAAQk"]
[Sat Dec 27 02:41:29.365380 2025] [:error] [pid 34274:tid 34285] [client 4.189.107.91:10228] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU7W2c6fabpS0mfhiCEktQAAAMk"]
[Sat Dec 27 02:41:29.644382 2025] [:error] [pid 34274:tid 34294] [client 4.189.107.91:10197] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU7W2c6fabpS0mfhiCEktgAAANI"]
[Sat Dec 27 02:41:30.207925 2025] [:error] [pid 34274:tid 34277] [client 4.189.107.91:10147] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU7W2s6fabpS0mfhiCEkuQAAAME"]
[Sat Dec 27 02:41:30.838349 2025] [:error] [pid 47566:tid 47569] [client 4.189.107.91:10152] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU7W2qyYgLfR4YwO7bydgQAAAQA"]
[Sat Dec 27 02:41:31.754124 2025] [:error] [pid 47566:tid 47591] [client 4.189.107.91:10134] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aU7W26yYgLfR4YwO7bydggAAARY"]
[Sat Dec 27 02:41:32.495039 2025] [:error] [pid 34274:tid 34288] [client 4.189.107.91:18081] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aU7W3M6fabpS0mfhiCEkvQAAAMw"]
[Sat Dec 27 02:41:33.295589 2025] [:error] [pid 34189:tid 34268] [client 4.189.107.91:18049] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aU7W3Qnn007DnMwSsfc-BwAAAJU"]
[Sat Dec 27 02:41:34.199907 2025] [:error] [pid 34189:tid 34270] [client 4.189.107.91:18150] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aU7W3gnn007DnMwSsfc-CgAAAJc"]
[Sat Dec 27 02:41:35.171480 2025] [:error] [pid 34189:tid 34251] [client 4.189.107.91:10133] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx1.php"] [unique_id "aU7W3wnn007DnMwSsfc-DQAAAIQ"]
[Sat Dec 27 02:41:35.853945 2025] [:error] [pid 47566:tid 47580] [client 4.189.107.91:18131] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx1.php"] [unique_id "aU7W36yYgLfR4YwO7bydiwAAAQs"]
[Sat Dec 27 02:41:36.415532 2025] [:error] [pid 34274:tid 34279] [client 4.189.107.91:10125] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx1.php"] [unique_id "aU7W4M6fabpS0mfhiCEkwwAAAMM"]
[Sat Dec 27 02:41:37.052624 2025] [:error] [pid 34274:tid 34294] [client 4.189.107.91:10126] [client 4.189.107.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx1.php"] [unique_id "aU7W4c6fabpS0mfhiCEkxAAAANI"]
[Sat Dec 27 04:36:25.724041 2025] [:error] [pid 32191:tid 32195] [client 182.42.105.85:59275] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aU7xybPNtMgrjVCHIdFrjAAAAAA"]
[Sat Dec 27 05:41:50.354824 2025] [:error] [pid 32278:tid 32300] [client 193.37.33.7:52005] [client 193.37.33.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.7, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8BHn-IfCN2Cy9GcciHEgAAANQ"]
[Sat Dec 27 05:48:22.339669 2025] [:error] [pid 15939:tid 15960] [client 193.37.33.40:27487] [client 193.37.33.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8CpuZ7qdnFxikanMJU3QAAARM"]
[Sat Dec 27 05:55:08.112961 2025] [:error] [pid 32193:tid 32256] [client 193.37.33.55:46689] [client 193.37.33.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.55, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8EPBgw0eCOc2qYqaId2QAAAIY"]
[Sat Dec 27 06:01:36.080656 2025] [:error] [pid 32278:tid 32303] [client 193.37.33.24:52707] [client 193.37.33.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.24, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8FwH-IfCN2Cy9GcciM7AAAANc"]
[Sat Dec 27 06:07:55.186824 2025] [:error] [pid 32278:tid 32289] [client 193.37.33.47:45009] [client 193.37.33.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8HO3-IfCN2Cy9GcciPOwAAAMk"]
[Sat Dec 27 06:14:18.952949 2025] [:error] [pid 32193:tid 32274] [client 193.37.33.35:35423] [client 193.37.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8Iuhgw0eCOc2qYqaIiKwAAAJg"]
[Sat Dec 27 06:20:33.969758 2025] [:error] [pid 32278:tid 32290] [client 193.37.33.40:50037] [client 193.37.33.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8KMX-IfCN2Cy9GcciS2QAAAMo"]
[Sat Dec 27 06:27:01.306132 2025] [:error] [pid 32278:tid 32284] [client 193.37.33.23:37213] [client 193.37.33.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8LtX-IfCN2Cy9GcciUlAAAAMQ"]
[Sat Dec 27 06:32:37.009920 2025] [:error] [pid 32191:tid 32216] [client 193.37.33.42:24979] [client 193.37.33.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8NBbPNtMgrjVCHIdGMpQAAABU"]
[Sat Dec 27 06:38:14.551029 2025] [:error] [pid 32278:tid 32287] [client 193.37.33.8:37913] [client 193.37.33.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.8, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8OVn-IfCN2Cy9GcciY3AAAAMc"]
[Sat Dec 27 06:43:39.660997 2025] [:error] [pid 32278:tid 32286] [client 193.37.33.18:20419] [client 193.37.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8Pm3-IfCN2Cy9GcciaEwAAAMY"]
[Sat Dec 27 06:49:16.360491 2025] [:error] [pid 32278:tid 32292] [client 193.37.33.233:35589] [client 193.37.33.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.233, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8Q7H-IfCN2Cy9GccicdAAAAMw"]
[Sat Dec 27 06:54:40.292594 2025] [:error] [pid 32193:tid 32254] [client 193.37.33.45:24843] [client 193.37.33.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.45, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8SMBgw0eCOc2qYqaIp_QAAAIQ"]
[Sat Dec 27 07:00:41.501203 2025] [:error] [pid 15939:tid 15947] [client 193.37.33.41:59231] [client 193.37.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8TmeZ7qdnFxikanMJkYwAAAQY"]
[Sat Dec 27 07:06:57.427978 2025] [:error] [pid 15939:tid 15962] [client 193.37.33.9:28685] [client 193.37.33.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.9, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8VEeZ7qdnFxikanMJlzQAAARU"]
[Sat Dec 27 07:19:43.900649 2025] [:error] [pid 32193:tid 32252] [client 193.37.33.10:38965] [client 193.37.33.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.10, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8YDxgw0eCOc2qYqaIwDAAAAII"]
[Sat Dec 27 07:26:07.586657 2025] [:error] [pid 45373:tid 45399] [client 193.37.33.52:21909] [client 193.37.33.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.52, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8Zjy7p_wFcbpu46HXiCgAAAVg"]
[Sat Dec 27 07:32:22.385957 2025] [:error] [pid 32193:tid 32272] [client 193.37.33.51:47435] [client 193.37.33.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.51, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8bBhgw0eCOc2qYqaIxvQAAAJY"]
[Sat Dec 27 07:34:37.369865 2025] [:error] [pid 32192:tid 32233] [client 193.202.110.30:58124] [client 193.202.110.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bjS_q0VFe066lbk_ZrAAAAEo"]
[Sat Dec 27 07:34:39.752933 2025] [:error] [pid 32191:tid 32200] [client 193.202.110.30:58138] [client 193.202.110.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bj7PNtMgrjVCHIdGX4wAAAAU"]
[Sat Dec 27 07:34:42.046873 2025] [:error] [pid 15939:tid 15943] [client 193.202.110.30:58150] [client 193.202.110.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bkuZ7qdnFxikanMJtSQAAAQI"]
[Sat Dec 27 07:34:44.333292 2025] [:error] [pid 32192:tid 32238] [client 193.202.110.30:58166] [client 193.202.110.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8blC_q0VFe066lbk_ZrgAAAE8"]
[Sat Dec 27 07:34:46.619840 2025] [:error] [pid 32278:tid 32291] [client 193.202.110.30:58180] [client 193.202.110.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bln-IfCN2Cy9GcciprgAAAMs"]
[Sat Dec 27 07:34:47.705502 2025] [:error] [pid 32191:tid 32215] [client 119.27.166.31:62300] [client 119.27.166.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.27.166.31, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bl7PNtMgrjVCHIdGX6AAAABQ"]
[Sat Dec 27 07:34:48.880516 2025] [:error] [pid 45373:tid 45387] [client 193.202.110.30:58326] [client 193.202.110.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bmC7p_wFcbpu46HXjaQAAAUw"]
[Sat Dec 27 07:34:48.880698 2025] [:error] [pid 45373:tid 45387] [client 193.202.110.30:58326] [client 193.202.110.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 193.202.110.30, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bmC7p_wFcbpu46HXjaQAAAUw"]
[Sat Dec 27 07:34:50.338308 2025] [:error] [pid 45373:tid 45384] [client 193.202.110.30:58332] [client 193.202.110.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bmi7p_wFcbpu46HXjagAAAUk"]
[Sat Dec 27 07:34:50.338490 2025] [:error] [pid 45373:tid 45384] [client 193.202.110.30:58332] [client 193.202.110.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 193.202.110.30, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bmi7p_wFcbpu46HXjagAAAUk"]
[Sat Dec 27 07:34:51.178725 2025] [:error] [pid 32192:tid 32224] [client 119.27.166.31:62546] [client 119.27.166.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.27.166.31, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bmy_q0VFe066lbk_ZrwAAAEE"]
[Sat Dec 27 07:34:51.807873 2025] [:error] [pid 32193:tid 32250] [client 193.202.110.30:58334] [client 193.202.110.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bmxgw0eCOc2qYqaIx5AAAAIA"]
[Sat Dec 27 07:34:51.808029 2025] [:error] [pid 32193:tid 32250] [client 193.202.110.30:58334] [client 193.202.110.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 193.202.110.30, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bmxgw0eCOc2qYqaIx5AAAAIA"]
[Sat Dec 27 07:34:53.256940 2025] [:error] [pid 32192:tid 32230] [client 119.27.166.31:62673] [client 119.27.166.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.27.166.31, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bnS_q0VFe066lbk_ZtwAAAEc"]
[Sat Dec 27 07:34:53.295073 2025] [:error] [pid 32192:tid 32246] [client 193.202.110.30:58336] [client 193.202.110.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.110.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bnS_q0VFe066lbk_ZuAAAAFc"]
[Sat Dec 27 07:34:53.295315 2025] [:error] [pid 32192:tid 32246] [client 193.202.110.30:58336] [client 193.202.110.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 193.202.110.30, counter = 9"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bnS_q0VFe066lbk_ZuAAAAFc"]
[Sat Dec 27 07:34:55.886143 2025] [:error] [pid 32192:tid 32229] [client 119.27.166.31:62799] [client 119.27.166.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.27.166.31, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bny_q0VFe066lbk_ZvwAAAEY"]
[Sat Dec 27 07:35:01.672481 2025] [:error] [pid 15939:tid 15960] [client 119.27.166.31:63147] [client 119.27.166.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.27.166.31, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bpeZ7qdnFxikanMJtUAAAARM"]
[Sat Dec 27 07:35:04.509393 2025] [:error] [pid 32193:tid 32263] [client 119.27.166.31:63308] [client 119.27.166.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.27.166.31, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bqBgw0eCOc2qYqaIx6gAAAI0"]
[Sat Dec 27 07:35:04.509590 2025] [:error] [pid 32193:tid 32263] [client 119.27.166.31:63308] [client 119.27.166.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 119.27.166.31, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bqBgw0eCOc2qYqaIx6gAAAI0"]
[Sat Dec 27 07:35:05.733092 2025] [:error] [pid 32192:tid 32224] [client 119.27.166.31:63427] [client 119.27.166.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.27.166.31, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bqS_q0VFe066lbk_ZygAAAEE"]
[Sat Dec 27 07:35:05.733320 2025] [:error] [pid 32192:tid 32224] [client 119.27.166.31:63427] [client 119.27.166.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 119.27.166.31, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU8bqS_q0VFe066lbk_ZygAAAEE"]
[Sat Dec 27 07:39:08.623747 2025] [:error] [pid 32193:tid 32253] [client 193.37.33.30:38011] [client 193.37.33.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.30, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8cnBgw0eCOc2qYqaIyVAAAAIM"]
[Sat Dec 27 07:45:30.611216 2025] [:error] [pid 32192:tid 32224] [client 193.37.33.50:42169] [client 193.37.33.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8eGi_q0VFe066lbk_ciAAAAEE"]
[Sat Dec 27 07:51:44.868405 2025] [:error] [pid 32193:tid 32261] [client 193.37.33.19:46793] [client 193.37.33.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.19, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8fkBgw0eCOc2qYqaI0eAAAAIs"]
[Sat Dec 27 07:58:08.386795 2025] [:error] [pid 15939:tid 15965] [client 193.37.33.25:55629] [client 193.37.33.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.25, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8hEOZ7qdnFxikanMJxEQAAARg"]
[Sat Dec 27 08:04:57.455403 2025] [:error] [pid 32192:tid 32233] [client 193.37.33.20:32441] [client 193.37.33.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.20, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8iqS_q0VFe066lbk_jWwAAAEo"]
[Sat Dec 27 08:11:34.502119 2025] [:error] [pid 15939:tid 15958] [client 193.37.33.234:34597] [client 193.37.33.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.234, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8kNuZ7qdnFxikanMJzDgAAARE"]
[Sat Dec 27 08:17:50.146530 2025] [:error] [pid 15939:tid 15961] [client 193.37.33.35:35283] [client 193.37.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8lruZ7qdnFxikanMJz8gAAARQ"]
[Sat Dec 27 08:24:28.147362 2025] [:error] [pid 32278:tid 32302] [client 193.37.33.25:44803] [client 193.37.33.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.25, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8nPH-IfCN2Cy9Gccix3gAAANY"]
[Sat Dec 27 08:30:46.732951 2025] [:error] [pid 32278:tid 32280] [client 193.37.33.9:23485] [client 193.37.33.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.9, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8otn-IfCN2Cy9GcciysQAAAMA"]
[Sat Dec 27 08:37:15.122346 2025] [:error] [pid 32193:tid 32260] [client 193.37.33.18:39495] [client 193.37.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8qOxgw0eCOc2qYqaI7kwAAAIo"]
[Sat Dec 27 08:43:34.225270 2025] [:error] [pid 45373:tid 45391] [client 193.37.33.15:51575] [client 193.37.33.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8rti7p_wFcbpu46HXyGgAAAVA"]
[Sat Dec 27 08:49:56.759165 2025] [:error] [pid 32193:tid 32263] [client 193.37.33.11:55873] [client 193.37.33.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.11, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8tNBgw0eCOc2qYqaI9ogAAAI0"]
[Sat Dec 27 08:56:09.693446 2025] [:error] [pid 32193:tid 32257] [client 193.37.33.41:42799] [client 193.37.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8uqRgw0eCOc2qYqaI-ggAAAIc"]
[Sat Dec 27 09:02:37.293683 2025] [:error] [pid 32278:tid 32284] [client 193.37.33.37:25001] [client 193.37.33.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.37, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8wLX-IfCN2Cy9Gcci45wAAAMQ"]
[Sat Dec 27 09:09:08.554381 2025] [:error] [pid 32278:tid 32287] [client 193.37.33.16:48267] [client 193.37.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.16, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8xtH-IfCN2Cy9Gcci6UQAAAMc"]
[Sat Dec 27 09:15:30.375469 2025] [:error] [pid 32192:tid 32247] [client 193.37.33.19:48179] [client 193.37.33.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.19, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8zMi_q0VFe066lbk_21QAAAFg"]
[Sat Dec 27 09:21:50.298365 2025] [:error] [pid 45373:tid 45388] [client 193.37.33.23:35041] [client 193.37.33.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU80ri7p_wFcbpu46HX6FwAAAU0"]
[Sat Dec 27 09:28:21.654519 2025] [:error] [pid 32191:tid 32213] [client 193.37.33.29:58211] [client 193.37.33.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU82NbPNtMgrjVCHIdGtkAAAABI"]
[Sat Dec 27 09:34:29.215447 2025] [:error] [pid 15939:tid 15949] [client 193.37.33.28:40485] [client 193.37.33.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU83peZ7qdnFxikanMKCRAAAAQg"]
[Sat Dec 27 09:40:46.703836 2025] [:error] [pid 32278:tid 32282] [client 193.37.33.56:32091] [client 193.37.33.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.56, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU85Hn-IfCN2Cy9Gcci_fQAAAMI"]
[Sat Dec 27 09:46:58.969203 2025] [:error] [pid 32192:tid 32238] [client 193.37.33.47:23135] [client 193.37.33.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU86ki_q0VFe066lbk_8MQAAAE8"]
[Sat Dec 27 09:53:29.220385 2025] [:error] [pid 32192:tid 32240] [client 193.37.33.7:52623] [client 193.37.33.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.7, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU88GS_q0VFe066lbk_9RgAAAFE"]
[Sat Dec 27 09:59:48.752122 2025] [:error] [pid 32278:tid 32296] [client 193.37.33.18:44193] [client 193.37.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU89lH-IfCN2Cy9GccjC4gAAANA"]
[Sat Dec 27 10:06:37.199308 2025] [:error] [pid 32191:tid 32197] [client 193.37.33.24:39535] [client 193.37.33.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.24, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU8_LbPNtMgrjVCHIdG47QAAAAI"]
[Sat Dec 27 10:13:01.504041 2025] [:error] [pid 32278:tid 32295] [client 193.37.33.12:59295] [client 193.37.33.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.12, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9ArX-IfCN2Cy9GccjEnwAAAM8"]
[Sat Dec 27 10:19:06.832026 2025] [:error] [pid 45373:tid 45398] [client 193.37.33.8:44951] [client 193.37.33.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.8, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9CGi7p_wFcbpu46HUHMgAAAVc"]
[Sat Dec 27 10:25:36.296853 2025] [:error] [pid 45373:tid 45394] [client 193.37.33.15:40665] [client 193.37.33.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9DoC7p_wFcbpu46HUJBQAAAVM"]
[Sat Dec 27 10:31:48.623016 2025] [:error] [pid 45373:tid 45390] [client 193.37.33.53:62421] [client 193.37.33.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9FFC7p_wFcbpu46HUKSAAAAU8"]
[Sat Dec 27 10:37:53.312453 2025] [:error] [pid 32192:tid 32224] [client 193.37.33.55:26641] [client 193.37.33.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.55, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9GgS_q0VFe066lbk8EpAAAAEE"]
[Sat Dec 27 10:44:15.676844 2025] [:error] [pid 32192:tid 32241] [client 193.37.33.18:32275] [client 193.37.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9H_y_q0VFe066lbk8FcQAAAFI"]
[Sat Dec 27 10:50:29.224262 2025] [:error] [pid 32191:tid 32204] [client 193.37.33.51:36175] [client 193.37.33.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.51, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9JdbPNtMgrjVCHIdHHLAAAAAk"]
[Sat Dec 27 10:56:50.647466 2025] [:error] [pid 45373:tid 45399] [client 193.37.33.40:27291] [client 193.37.33.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9K8i7p_wFcbpu46HUQJQAAAVg"]
[Sat Dec 27 11:03:12.886760 2025] [:error] [pid 32191:tid 32208] [client 193.37.33.39:34495] [client 193.37.33.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9McLPNtMgrjVCHIdHK1AAAAA0"]
[Sat Dec 27 11:15:42.375238 2025] [:error] [pid 15939:tid 15952] [client 193.37.33.34:27031] [client 193.37.33.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9PXuZ7qdnFxikanMKUXQAAAQs"]
[Sat Dec 27 11:21:59.395082 2025] [:error] [pid 32191:tid 32213] [client 193.37.33.39:31495] [client 193.37.33.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9Q17PNtMgrjVCHIdHROQAAABI"]
[Sat Dec 27 11:28:12.612016 2025] [:error] [pid 15939:tid 15960] [client 193.37.33.14:26459] [client 193.37.33.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9STOZ7qdnFxikanMKV9gAAARM"]
[Sat Dec 27 11:34:26.943201 2025] [:error] [pid 32191:tid 32209] [client 193.37.33.23:50275] [client 193.37.33.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9TwrPNtMgrjVCHIdHUwQAAAA4"]
[Sat Dec 27 11:40:46.069282 2025] [:error] [pid 32278:tid 32286] [client 193.37.33.31:56811] [client 193.37.33.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.31, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9VPn-IfCN2Cy9GccjR_AAAAMY"]
[Sat Dec 27 11:47:09.245542 2025] [:error] [pid 32191:tid 32212] [client 193.37.33.20:22467] [client 193.37.33.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.20, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9WvbPNtMgrjVCHIdHXKAAAABE"]
[Sat Dec 27 11:53:20.177151 2025] [:error] [pid 32191:tid 32203] [client 193.37.33.35:38261] [client 193.37.33.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9YMLPNtMgrjVCHIdHYogAAAAg"]
[Sat Dec 27 11:59:38.122416 2025] [:error] [pid 32193:tid 32266] [client 193.37.33.29:62611] [client 193.37.33.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9Zqhgw0eCOc2qYqaJiGwAAAJA"]
[Sat Dec 27 12:18:59.664226 2025] [:error] [pid 32278:tid 32281] [client 193.37.33.49:60575] [client 193.37.33.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.49, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9eM3-IfCN2Cy9GccjXoAAAAME"]
[Sat Dec 27 12:25:28.053180 2025] [:error] [pid 15939:tid 15963] [client 193.37.33.38:38547] [client 193.37.33.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.38, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9fuOZ7qdnFxikanMKc1QAAARY"]
[Sat Dec 27 12:31:51.183102 2025] [:error] [pid 32193:tid 32255] [client 193.37.33.47:52849] [client 193.37.33.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9hNxgw0eCOc2qYqaJoJAAAAIU"]
[Sat Dec 27 12:38:19.396725 2025] [:error] [pid 45373:tid 45389] [client 193.37.33.16:45071] [client 193.37.33.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.16, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9iuy7p_wFcbpu46HUkMAAAAU4"]
[Sat Dec 27 12:44:48.305274 2025] [:error] [pid 32191:tid 32204] [client 193.37.33.18:33851] [client 193.37.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9kQLPNtMgrjVCHIdHmGQAAAAk"]
[Sat Dec 27 12:51:15.353785 2025] [:error] [pid 15939:tid 15955] [client 193.37.33.37:22999] [client 193.37.33.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.37, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9lw-Z7qdnFxikanMKhWAAAAQ4"]
[Sat Dec 27 12:57:44.737625 2025] [:error] [pid 32278:tid 32280] [client 193.37.33.47:48173] [client 193.37.33.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9nSH-IfCN2Cy9GccjdigAAAMA"]
[Sat Dec 27 13:04:11.732473 2025] [:error] [pid 32192:tid 32232] [client 193.37.33.42:43327] [client 193.37.33.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9oyy_q0VFe066lbk8b-wAAAEk"]
[Sat Dec 27 13:10:54.361543 2025] [:error] [pid 32278:tid 32280] [client 193.37.33.51:49773] [client 193.37.33.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.51, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9qXn-IfCN2Cy9Gccjf5gAAAMA"]
[Sat Dec 27 13:17:15.893454 2025] [:error] [pid 45373:tid 45377] [client 193.37.33.34:22635] [client 193.37.33.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9r2y7p_wFcbpu46HUriAAAAUI"]
[Sat Dec 27 13:24:06.302794 2025] [:error] [pid 3114:tid 3125] [client 193.37.33.44:42097] [client 193.37.33.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9tdmJGrIkLOdbPpJhakwAAAYc"]
[Sat Dec 27 13:37:10.322111 2025] [:error] [pid 32191:tid 32207] [client 193.37.33.56:31859] [client 193.37.33.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.56, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9whrPNtMgrjVCHIdHz3gAAAAw"]
[Sat Dec 27 13:44:40.927038 2025] [:error] [pid 32191:tid 32198] [client 205.185.127.174:41589] [client 205.185.127.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.127.174, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9ySLPNtMgrjVCHIdH0_wAAAAM"]
[Sat Dec 27 13:44:42.373924 2025] [:error] [pid 32191:tid 32211] [client 205.185.127.174:41589] [client 205.185.127.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.127.174, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9ySrPNtMgrjVCHIdH1AgAAABA"]
[Sat Dec 27 13:50:55.036610 2025] [:error] [pid 3114:tid 3130] [client 193.37.33.41:31909] [client 193.37.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9zv2JGrIkLOdbPpJhjaAAAAYw"]
[Sat Dec 27 13:57:29.962059 2025] [:error] [pid 3114:tid 3126] [client 193.37.33.23:41057] [client 193.37.33.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU91SWJGrIkLOdbPpJhk_AAAAYg"]
[Sat Dec 27 14:04:07.296290 2025] [:error] [pid 32193:tid 32273] [client 193.37.33.234:39017] [client 193.37.33.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.234, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU921xgw0eCOc2qYqaJ4bwAAAJc"]
[Sat Dec 27 14:12:09.817610 2025] [:error] [pid 15939:tid 15962] [client 193.37.33.31:53915] [client 193.37.33.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.31, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU94ueZ7qdnFxikanMKu0gAAARU"]
[Sat Dec 27 14:20:37.584057 2025] [:error] [pid 32191:tid 32198] [client 193.37.33.37:54929] [client 193.37.33.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.37, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU96tbPNtMgrjVCHIdH6rwAAAAM"]
[Sat Dec 27 14:27:36.112564 2025] [:error] [pid 3114:tid 3124] [client 193.37.33.26:29947] [client 193.37.33.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU98WGJGrIkLOdbPpJhrjAAAAYY"]
[Sat Dec 27 14:34:06.520259 2025] [:error] [pid 32278:tid 32284] [client 193.37.33.28:39033] [client 193.37.33.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU993n-IfCN2Cy9GccjsRgAAAMQ"]
[Sat Dec 27 14:40:42.142781 2025] [:error] [pid 32191:tid 32219] [client 193.37.33.32:63173] [client 193.37.33.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.32, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU9_arPNtMgrjVCHIdH-5QAAABg"]
[Sat Dec 27 14:47:40.190671 2025] [:error] [pid 32192:tid 32223] [client 193.37.33.53:56071] [client 193.37.33.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-BDC_q0VFe066lbk8t4QAAAEA"]
[Sat Dec 27 14:54:30.267818 2025] [:error] [pid 45373:tid 45387] [client 193.37.33.41:25417] [client 193.37.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-Cpi7p_wFcbpu46HU9ZQAAAUw"]
[Sat Dec 27 15:00:56.106590 2025] [:error] [pid 15939:tid 15955] [client 193.37.33.15:20775] [client 193.37.33.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-EKOZ7qdnFxikanMK10QAAAQ4"]
[Sat Dec 27 15:07:33.772956 2025] [:error] [pid 32278:tid 32286] [client 193.37.33.43:40117] [client 193.37.33.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-FtX-IfCN2Cy9GccjxbAAAAMY"]
[Sat Dec 27 15:14:05.869893 2025] [:error] [pid 45373:tid 45397] [client 193.37.33.43:43897] [client 193.37.33.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-HPS7p_wFcbpu46HVA8wAAAVY"]
[Sat Dec 27 15:21:02.112918 2025] [:error] [pid 32192:tid 32241] [client 193.37.33.52:63185] [client 193.37.33.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.52, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-I3i_q0VFe066lbk8zKwAAAFI"]
[Sat Dec 27 15:27:26.805164 2025] [:error] [pid 3114:tid 3137] [client 193.37.33.23:47333] [client 193.37.33.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-KXmJGrIkLOdbPpJh6OQAAAZM"]
[Sat Dec 27 15:34:30.287983 2025] [:error] [pid 45373:tid 45377] [client 193.37.33.52:60817] [client 193.37.33.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.52, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-MBi7p_wFcbpu46HVFBwAAAUI"]
[Sat Dec 27 15:41:11.204680 2025] [:error] [pid 31933:tid 31946] [client 193.37.33.55:35807] [client 193.37.33.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.55, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-Nl8Gr1WIJr39uqaqeYAAAAcs"]
[Sat Dec 27 15:55:10.768003 2025] [:error] [pid 32191:tid 32205] [client 193.37.33.33:23623] [client 193.37.33.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.33, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-Q3rPNtMgrjVCHIdEKnQAAAAo"]
[Sat Dec 27 16:02:09.597579 2025] [:error] [pid 32191:tid 32198] [client 193.37.33.18:45953] [client 193.37.33.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-SgbPNtMgrjVCHIdELaQAAAAM"]
[Sat Dec 27 16:08:40.513388 2025] [:error] [pid 15939:tid 15960] [client 193.37.33.32:28637] [client 193.37.33.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.32, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-UCOZ7qdnFxikanMK9vgAAARM"]
[Sat Dec 27 16:15:31.381313 2025] [:error] [pid 32278:tid 32281] [client 193.37.33.50:31225] [client 193.37.33.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-Vo3-IfCN2Cy9Gccj7mAAAAME"]
[Sat Dec 27 16:22:07.437844 2025] [:error] [pid 32191:tid 32218] [client 193.37.33.37:49657] [client 193.37.33.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.37, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-XL7PNtMgrjVCHIdENgQAAABc"]
[Sat Dec 27 16:28:54.992289 2025] [:error] [pid 32193:tid 32251] [client 193.37.33.47:39621] [client 193.37.33.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-Yxhgw0eCOc2qYqaKL1gAAAIE"]
[Sat Dec 27 16:35:54.510339 2025] [:error] [pid 32191:tid 32195] [client 193.37.33.14:47615] [client 193.37.33.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-aarPNtMgrjVCHIdEPDAAAAAA"]
[Sat Dec 27 16:42:38.253862 2025] [:error] [pid 32192:tid 32243] [client 193.37.33.44:52277] [client 193.37.33.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-b_i_q0VFe066lbk88OwAAAFQ"]
[Sat Dec 27 16:49:15.169964 2025] [:error] [pid 32278:tid 32303] [client 193.37.33.41:45905] [client 193.37.33.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-di3-IfCN2Cy9Gccj_-gAAANc"]
[Sat Dec 27 17:02:15.978883 2025] [:error] [pid 15939:tid 15942] [client 182.42.105.144:59706] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aU-gl-Z7qdnFxikanMLEdQAAAQE"]
[Sat Dec 27 17:07:19.068665 2025] [:error] [pid 3114:tid 3126] [client 193.37.33.28:47151] [client 193.37.33.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-hx2JGrIkLOdbPpJiIPwAAAYg"]
[Sat Dec 27 17:14:34.394703 2025] [:error] [pid 32192:tid 32241] [client 193.37.33.55:63775] [client 193.37.33.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.55, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aU-jei_q0VFe066lbk8_pAAAAFI"]
[Sat Dec 27 17:51:42.557174 2025] [:error] [pid 31933:tid 31948] [client 103.200.32.18:52806] [client 103.200.32.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.200.32.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU-sLsGr1WIJr39uqaq6_QAAAc0"]
[Sat Dec 27 18:02:03.224957 2025] [:error] [pid 31933:tid 31938] [client 103.200.32.18:30280] [client 103.200.32.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aU-um8Gr1WIJr39uqarAMQAAAcM"]
[Sat Dec 27 18:03:31.617419 2025] [:error] [pid 15939:tid 15963] [client 103.200.32.18:35613] [client 103.200.32.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.200.32.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU-u8-Z7qdnFxikanMLOUAAAARY"]
[Sat Dec 27 18:04:46.477510 2025] [:error] [pid 32192:tid 32235] [client 103.225.138.114:56602] [client 103.225.138.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.225.138.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aU-vPi_q0VFe066lbk9HEgAAAEw"]
[Sun Dec 28 01:43:38.700987 2025] [:error] [pid 46742:tid 46755] [client 182.16.245.210:51678] [client 182.16.245.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.16.245.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAayuioIIea_hBqsHeQ_wAAAMk"]
[Sun Dec 28 01:43:41.445487 2025] [:error] [pid 46655:tid 46720] [client 182.16.245.210:51684] [client 182.16.245.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.16.245.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAazRJiIF9AF5FHxvCLcQAAAIc"]
[Sun Dec 28 01:46:41.513498 2025] [:error] [pid 46742:tid 46750] [client 132.148.185.10:60668] [client 132.148.185.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbgeioIIea_hBqsHeSxQAAAMQ"]
[Sun Dec 28 01:46:43.577352 2025] [:error] [pid 46742:tid 46752] [client 132.148.185.10:60672] [client 132.148.185.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbg-ioIIea_hBqsHeS1wAAAMY"]
[Sun Dec 28 01:46:45.456365 2025] [:error] [pid 46742:tid 46763] [client 132.148.185.10:44170] [client 132.148.185.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbheioIIea_hBqsHeS3gAAANE"]
[Sun Dec 28 01:46:47.344684 2025] [:error] [pid 46655:tid 46730] [client 132.148.185.10:44178] [client 132.148.185.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbhxJiIF9AF5FHxvCMwAAAAJE"]
[Sun Dec 28 01:46:49.239843 2025] [:error] [pid 46742:tid 46749] [client 132.148.185.10:44186] [client 132.148.185.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbieioIIea_hBqsHeS6gAAAMM"]
[Sun Dec 28 01:46:51.260136 2025] [:error] [pid 46653:tid 46663] [client 132.148.185.10:44200] [client 132.148.185.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbi7j2DbiG6mG0UTPimgAAAAY"]
[Sun Dec 28 01:46:51.260298 2025] [:error] [pid 46653:tid 46663] [client 132.148.185.10:44200] [client 132.148.185.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.185.10, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbi7j2DbiG6mG0UTPimgAAAAY"]
[Sun Dec 28 01:46:52.447252 2025] [:error] [pid 46742:tid 46763] [client 132.148.185.10:44202] [client 132.148.185.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbjOioIIea_hBqsHeS8QAAANE"]
[Sun Dec 28 01:46:52.447434 2025] [:error] [pid 46742:tid 46763] [client 132.148.185.10:44202] [client 132.148.185.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.185.10, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbjOioIIea_hBqsHeS8QAAANE"]
[Sun Dec 28 01:46:53.625857 2025] [:error] [pid 46655:tid 46723] [client 132.148.185.10:44208] [client 132.148.185.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbjRJiIF9AF5FHxvCM0AAAAIo"]
[Sun Dec 28 01:46:53.626082 2025] [:error] [pid 46655:tid 46723] [client 132.148.185.10:44208] [client 132.148.185.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.185.10, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbjRJiIF9AF5FHxvCM0AAAAIo"]
[Sun Dec 28 01:46:54.694785 2025] [:error] [pid 46653:tid 46659] [client 132.148.185.10:57872] [client 132.148.185.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbjrj2DbiG6mG0UTPioAAAAAI"]
[Sun Dec 28 01:46:54.694915 2025] [:error] [pid 46653:tid 46659] [client 132.148.185.10:57872] [client 132.148.185.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.185.10, counter = 9"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAbjrj2DbiG6mG0UTPioAAAAAI"]
[Sun Dec 28 01:48:09.057453 2025] [:error] [pid 46655:tid 46728] [client 39.108.100.161:39860] [client 39.108.100.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.108.100.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAb2RJiIF9AF5FHxvCNiwAAAI8"]
[Sun Dec 28 01:48:14.514787 2025] [:error] [pid 46742:tid 46746] [client 39.108.100.161:40038] [client 39.108.100.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.108.100.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAb3uioIIea_hBqsHeT9AAAAME"]
[Sun Dec 28 01:48:20.000311 2025] [:error] [pid 46654:tid 46696] [client 39.108.100.161:40226] [client 39.108.100.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.108.100.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAb46yyuBQW4Tqizy6QOgAAAEo"]
[Sun Dec 28 01:48:25.661319 2025] [:error] [pid 46654:tid 46697] [client 39.108.100.161:40346] [client 39.108.100.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.108.100.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAb6ayyuBQW4Tqizy6QPwAAAEs"]
[Sun Dec 28 01:48:34.850656 2025] [:error] [pid 46654:tid 46692] [client 39.108.100.161:40748] [client 39.108.100.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.108.100.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAb8qyyuBQW4Tqizy6QVgAAAEY"]
[Sun Dec 28 01:48:37.526276 2025] [:error] [pid 46742:tid 46767] [client 39.108.100.161:40812] [client 39.108.100.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.108.100.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAb9eioIIea_hBqsHeUTAAAANU"]
[Sun Dec 28 01:48:37.526392 2025] [:error] [pid 46742:tid 46767] [client 39.108.100.161:40812] [client 39.108.100.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 39.108.100.161, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAb9eioIIea_hBqsHeUTAAAANU"]
[Sun Dec 28 01:48:40.192068 2025] [:error] [pid 46742:tid 46752] [client 39.108.100.161:40896] [client 39.108.100.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.108.100.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAb-OioIIea_hBqsHeUVgAAAMY"]
[Sun Dec 28 01:48:40.192158 2025] [:error] [pid 46742:tid 46752] [client 39.108.100.161:40896] [client 39.108.100.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 39.108.100.161, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVAb-OioIIea_hBqsHeUVgAAAMY"]
[Sun Dec 28 04:06:35.033273 2025] [autoindex:error] [pid 42378:tid 42400] [client 4.189.136.45:54949] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 28 04:06:36.124497 2025] [autoindex:error] [pid 42378:tid 42382] [client 4.189.136.45:54949] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 28 04:06:37.153066 2025] [autoindex:error] [pid 42378:tid 42391] [client 4.189.136.45:54949] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 28 04:06:37.270484 2025] [autoindex:error] [pid 42378:tid 42384] [client 4.189.136.45:54949] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 28 04:06:44.353522 2025] [:error] [pid 42378:tid 42384] [client 4.189.136.45:54949] [client 4.189.136.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.136.45, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aVA8VDgtcN-KHAjWrX-RUwAAAMQ"], referer: https://www.yahoo.com/
[Sun Dec 28 04:06:50.418837 2025] [autoindex:error] [pid 42378:tid 42395] [client 4.189.136.45:54949] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 28 04:06:50.654686 2025] [autoindex:error] [pid 42378:tid 42399] [client 4.189.136.45:54949] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 28 04:06:52.723878 2025] [autoindex:error] [pid 42378:tid 42395] [client 4.189.136.45:54949] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sun Dec 28 04:06:52.842257 2025] [autoindex:error] [pid 42378:tid 42392] [client 4.189.136.45:54949] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 28 04:06:52.956121 2025] [:error] [pid 42378:tid 42383] [client 4.189.136.45:54949] [client 4.189.136.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVA8XDgtcN-KHAjWrX-RiAAAAMM"], referer: https://www.bing.com/
[Sun Dec 28 04:06:53.183313 2025] [:error] [pid 43789:tid 43814] [client 4.189.136.45:55820] [client 4.189.136.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/alfa-rex.php"] [unique_id "aVA8XQa-tUppni4CcCasdwAAARc"], referer: https://www.google.co.uk/
[Sun Dec 28 04:06:53.433114 2025] [autoindex:error] [pid 42293:tid 42337] [client 4.189.136.45:55920] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Cookie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sun Dec 28 04:06:53.546840 2025] [:error] [pid 42293:tid 42324] [client 4.189.136.45:55920] [client 4.189.136.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aVA8Xcvc9B-5cwN385IKKQAAAEE"], referer: https://www.google.co.uk/
[Sun Dec 28 04:06:53.779658 2025] [autoindex:error] [pid 43789:tid 43791] [client 4.189.136.45:54987] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sun Dec 28 04:06:53.892406 2025] [:error] [pid 43789:tid 43815] [client 4.189.136.45:54987] [client 4.189.136.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aVA8XQa-tUppni4CcCasegAAARg"], referer: https://www.yahoo.com/
[Sun Dec 28 04:06:54.119254 2025] [:error] [pid 43789:tid 43801] [client 4.189.136.45:55838] [client 4.189.136.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aVA8Xga-tUppni4CcCasfgAAAQo"], referer: https://www.google.co.uk/
[Sun Dec 28 04:06:54.348288 2025] [:error] [pid 42293:tid 42343] [client 4.189.136.45:55038] [client 4.189.136.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aVA8Xsvc9B-5cwN385IKLQAAAFQ"], referer: https://www.yahoo.com/
[Sun Dec 28 04:06:54.607388 2025] [autoindex:error] [pid 42293:tid 42335] [client 4.189.136.45:56365] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 28 04:06:54.838645 2025] [:error] [pid 42293:tid 42346] [client 4.189.136.45:56365] [client 4.189.136.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aVA8Xsvc9B-5cwN385IKMQAAAFc"], referer: https://www.google.de/
[Sun Dec 28 04:06:55.071910 2025] [autoindex:error] [pid 42294:tid 42364] [client 4.189.136.45:54963] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Dec 28 04:06:55.184640 2025] [:error] [pid 42294:tid 42359] [client 4.189.136.45:54963] [client 4.189.136.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVA8X9TE5kYcYCOzl9E2_wAAAIk"], referer: https://www.google.co.uk/
[Sun Dec 28 04:06:55.484421 2025] [:error] [pid 42292:tid 42303] [client 4.189.136.45:53684] [client 4.189.136.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVA8X5yOrM_vaFx1osbAOQAAAAc"], referer: https://www.google.fr/
[Sun Dec 28 04:06:55.756116 2025] [:error] [pid 42378:tid 42395] [client 4.189.136.45:55028] [client 4.189.136.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aVA8XzgtcN-KHAjWrX-RkQAAAM8"], referer: https://www.google.com/
[Sun Dec 28 04:06:55.990783 2025] [autoindex:error] [pid 43789:tid 43815] [client 4.189.136.45:56331] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Dec 28 04:06:57.239918 2025] [:error] [pid 43789:tid 43809] [client 4.189.136.45:56331] [client 4.189.136.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.189.136.45, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVA8YQa-tUppni4CcCasjQAAARI"], referer: https://www.google.com/
[Sun Dec 28 06:21:42.080789 2025] [:error] [pid 29437:tid 29487] [client 194.5.195.97:43296] [client 194.5.195.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.195.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBb9hhDotAbVk6pZLco5gAAAdU"]
[Sun Dec 28 06:21:44.388985 2025] [:error] [pid 29388:tid 29417] [client 194.5.195.97:43308] [client 194.5.195.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.195.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBb-NoLv2L2zI_SpdVikQAAAVU"]
[Sun Dec 28 06:21:46.670460 2025] [:error] [pid 42378:tid 42400] [client 194.5.195.97:43310] [client 194.5.195.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.195.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBb-jgtcN-KHAjWrX-oxgAAANQ"]
[Sun Dec 28 06:21:48.996748 2025] [:error] [pid 29388:tid 29402] [client 194.5.195.97:43312] [client 194.5.195.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.195.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBb_NoLv2L2zI_SpdVilQAAAUY"]
[Sun Dec 28 06:21:51.154453 2025] [:error] [pid 42293:tid 42334] [client 194.5.195.97:60248] [client 194.5.195.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.195.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBb_8vc9B-5cwN385IvfAAAAEs"]
[Sun Dec 28 06:21:53.348800 2025] [:error] [pid 42293:tid 42347] [client 194.5.195.97:60252] [client 194.5.195.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.195.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBcAcvc9B-5cwN385IvggAAAFg"]
[Sun Dec 28 06:21:53.348982 2025] [:error] [pid 42293:tid 42347] [client 194.5.195.97:60252] [client 194.5.195.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 194.5.195.97, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBcAcvc9B-5cwN385IvggAAAFg"]
[Sun Dec 28 06:21:54.732798 2025] [:error] [pid 42293:tid 42325] [client 194.5.195.97:60266] [client 194.5.195.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.195.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBcAsvc9B-5cwN385IvgwAAAEI"]
[Sun Dec 28 06:21:54.732943 2025] [:error] [pid 42293:tid 42325] [client 194.5.195.97:60266] [client 194.5.195.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 194.5.195.97, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBcAsvc9B-5cwN385IvgwAAAEI"]
[Sun Dec 28 06:23:58.534091 2025] [:error] [pid 29436:tid 29453] [client 148.72.18.34:45032] [client 148.72.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.18.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBcfrchzOOtNL9VPNJIWQAAAY4"]
[Sun Dec 28 06:24:00.452586 2025] [:error] [pid 42294:tid 42367] [client 148.72.18.34:45040] [client 148.72.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.18.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBcgNTE5kYcYCOzl9FQrwAAAJE"]
[Sun Dec 28 06:24:02.360486 2025] [:error] [pid 42378:tid 42400] [client 148.72.18.34:45044] [client 148.72.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.18.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBcgjgtcN-KHAjWrX-pKwAAANQ"]
[Sun Dec 28 06:24:04.222882 2025] [:error] [pid 29437:tid 29483] [client 148.72.18.34:45060] [client 148.72.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.18.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBchBhDotAbVk6pZLcpVAAAAdE"]
[Sun Dec 28 06:24:06.064601 2025] [:error] [pid 42378:tid 42396] [client 148.72.18.34:47548] [client 148.72.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.18.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBchjgtcN-KHAjWrX-pLwAAANA"]
[Sun Dec 28 06:24:07.921705 2025] [:error] [pid 42378:tid 42382] [client 148.72.18.34:47552] [client 148.72.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.18.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBchzgtcN-KHAjWrX-pMgAAAMI"]
[Sun Dec 28 06:24:07.921905 2025] [:error] [pid 42378:tid 42382] [client 148.72.18.34:47552] [client 148.72.18.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 148.72.18.34, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBchzgtcN-KHAjWrX-pMgAAAMI"]
[Sun Dec 28 06:24:08.937330 2025] [:error] [pid 42293:tid 42344] [client 148.72.18.34:47554] [client 148.72.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.18.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBciMvc9B-5cwN385IwBgAAAFU"]
[Sun Dec 28 06:24:08.937540 2025] [:error] [pid 42293:tid 42344] [client 148.72.18.34:47554] [client 148.72.18.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 148.72.18.34, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBciMvc9B-5cwN385IwBgAAAFU"]
[Sun Dec 28 06:24:09.952317 2025] [:error] [pid 42293:tid 42337] [client 148.72.18.34:47570] [client 148.72.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.18.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBcicvc9B-5cwN385IwCQAAAE4"]
[Sun Dec 28 06:24:09.952443 2025] [:error] [pid 42293:tid 42337] [client 148.72.18.34:47570] [client 148.72.18.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 148.72.18.34, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBcicvc9B-5cwN385IwCQAAAE4"]
[Sun Dec 28 06:24:10.967832 2025] [:error] [pid 29388:tid 29407] [client 148.72.18.34:47576] [client 148.72.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.18.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBcitoLv2L2zI_SpdVi3QAAAUs"]
[Sun Dec 28 06:24:10.967987 2025] [:error] [pid 29388:tid 29407] [client 148.72.18.34:47576] [client 148.72.18.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 148.72.18.34, counter = 9"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVBcitoLv2L2zI_SpdVi3QAAAUs"]
[Sun Dec 28 07:22:22.095867 2025] [:error] [pid 29436:tid 29441] [client 103.6.212.160:48866] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "aVBqLrchzOOtNL9VPNJR0QAAAYI"]
[Sun Dec 28 07:22:22.097615 2025] [:error] [pid 29437:tid 29466] [client 103.6.212.160:48886] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aVBqLhhDotAbVk6pZLcz6wAAAcA"]
[Sun Dec 28 07:22:22.099333 2025] [:error] [pid 29436:tid 29449] [client 103.6.212.160:48870] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aVBqLrchzOOtNL9VPNJR0gAAAYo"]
[Sun Dec 28 07:22:22.099778 2025] [:error] [pid 29437:tid 29483] [client 103.6.212.160:48896] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aVBqLhhDotAbVk6pZLcz7AAAAdE"]
[Sun Dec 28 07:22:22.099960 2025] [:error] [pid 29437:tid 29469] [client 103.6.212.160:48906] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "aVBqLhhDotAbVk6pZLcz7QAAAcM"]
[Sun Dec 28 07:22:22.100178 2025] [:error] [pid 29437:tid 29478] [client 103.6.212.160:48874] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "aVBqLhhDotAbVk6pZLcz7gAAAcw"]
[Sun Dec 28 07:22:22.116316 2025] [:error] [pid 43789:tid 43800] [client 103.6.212.160:48914] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "aVBqLga-tUppni4CcCbLUQAAAQk"]
[Sun Dec 28 07:22:22.119894 2025] [:error] [pid 43789:tid 43807] [client 103.6.212.160:48950] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "aVBqLga-tUppni4CcCbLUgAAARA"]
[Sun Dec 28 07:22:22.121741 2025] [:error] [pid 42292:tid 42319] [client 103.6.212.160:48942] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aVBqLpyOrM_vaFx1osbfxgAAABc"]
[Sun Dec 28 07:22:22.122546 2025] [:error] [pid 42293:tid 42338] [client 103.6.212.160:48948] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aVBqLsvc9B-5cwN385I8gAAAAE8"]
[Sun Dec 28 07:22:22.123178 2025] [:error] [pid 43789:tid 43792] [client 103.6.212.160:48926] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "aVBqLga-tUppni4CcCbLUwAAAQE"]
[Sun Dec 28 07:22:22.126450 2025] [:error] [pid 42293:tid 42336] [client 103.6.212.160:48930] [client 103.6.212.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aVBqLsvc9B-5cwN385I8gQAAAE0"]
[Sun Dec 28 08:16:22.092335 2025] [autoindex:error] [pid 29436:tid 29448] [client 157.230.165.68:53602] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 28 10:35:57.096988 2025] [:error] [pid 42294:tid 42361] [client 195.78.67.42:59658] [client 195.78.67.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.78.67.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCXjdTE5kYcYCOzl9FqiQAAAIs"]
[Sun Dec 28 10:36:01.053522 2025] [:error] [pid 43789:tid 43799] [client 195.78.67.42:59664] [client 195.78.67.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.78.67.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCXkQa-tUppni4CcCbe1AAAAQg"]
[Sun Dec 28 10:36:03.502794 2025] [:error] [pid 42294:tid 42367] [client 195.78.67.42:59674] [client 195.78.67.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.78.67.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCXk9TE5kYcYCOzl9FqjwAAAJE"]
[Sun Dec 28 10:36:05.935190 2025] [:error] [pid 29388:tid 29404] [client 195.78.67.42:59682] [client 195.78.67.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.78.67.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCXldoLv2L2zI_SpdWCzwAAAUg"]
[Sun Dec 28 10:36:08.286814 2025] [:error] [pid 42294:tid 42374] [client 195.78.67.42:57830] [client 195.78.67.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.78.67.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCXmNTE5kYcYCOzl9FqlgAAAJg"]
[Sun Dec 28 10:36:10.690141 2025] [:error] [pid 42294:tid 42358] [client 195.78.67.42:57836] [client 195.78.67.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.78.67.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCXmtTE5kYcYCOzl9FqmgAAAIg"]
[Sun Dec 28 10:36:10.690300 2025] [:error] [pid 42294:tid 42358] [client 195.78.67.42:57836] [client 195.78.67.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 195.78.67.42, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCXmtTE5kYcYCOzl9FqmgAAAIg"]
[Sun Dec 28 10:36:12.194106 2025] [:error] [pid 42293:tid 42324] [client 195.78.67.42:57840] [client 195.78.67.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.78.67.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCXnMvc9B-5cwN385Ji6gAAAEE"]
[Sun Dec 28 10:36:12.194320 2025] [:error] [pid 42293:tid 42324] [client 195.78.67.42:57840] [client 195.78.67.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 195.78.67.42, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCXnMvc9B-5cwN385Ji6gAAAEE"]
[Sun Dec 28 10:36:13.724525 2025] [:error] [pid 42293:tid 42337] [client 195.78.67.42:57854] [client 195.78.67.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.78.67.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCXncvc9B-5cwN385Ji7AAAAE4"]
[Sun Dec 28 10:36:13.724749 2025] [:error] [pid 42293:tid 42337] [client 195.78.67.42:57854] [client 195.78.67.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 195.78.67.42, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCXncvc9B-5cwN385Ji7AAAAE4"]
[Sun Dec 28 10:37:27.676847 2025] [:error] [pid 29437:tid 29468] [client 148.72.61.162:58002] [client 148.72.61.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.61.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX5xhDotAbVk6pZLdRQAAAAcI"]
[Sun Dec 28 10:37:29.592140 2025] [:error] [pid 43789:tid 43803] [client 148.72.61.162:58014] [client 148.72.61.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.61.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX6Qa-tUppni4CcCbfbAAAAQw"]
[Sun Dec 28 10:37:31.479403 2025] [:error] [pid 42293:tid 42332] [client 148.72.61.162:50584] [client 148.72.61.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.61.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX68vc9B-5cwN385JjUAAAAEk"]
[Sun Dec 28 10:37:33.162566 2025] [:error] [pid 42293:tid 42333] [client 148.72.61.162:50586] [client 148.72.61.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.61.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX7cvc9B-5cwN385JjUwAAAEo"]
[Sun Dec 28 10:37:34.800322 2025] [:error] [pid 43789:tid 43813] [client 148.72.61.162:50596] [client 148.72.61.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.61.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX7ga-tUppni4CcCbfbwAAARY"]
[Sun Dec 28 10:37:36.589978 2025] [:error] [pid 29436:tid 29454] [client 148.72.61.162:50608] [client 148.72.61.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.61.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX8LchzOOtNL9VPNJs6wAAAY8"]
[Sun Dec 28 10:37:36.590146 2025] [:error] [pid 29436:tid 29454] [client 148.72.61.162:50608] [client 148.72.61.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 148.72.61.162, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX8LchzOOtNL9VPNJs6wAAAY8"]
[Sun Dec 28 10:37:37.405640 2025] [:error] [pid 29437:tid 29470] [client 148.72.61.162:50614] [client 148.72.61.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.61.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX8RhDotAbVk6pZLdRSQAAAcQ"]
[Sun Dec 28 10:37:37.405801 2025] [:error] [pid 29437:tid 29470] [client 148.72.61.162:50614] [client 148.72.61.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 148.72.61.162, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX8RhDotAbVk6pZLdRSQAAAcQ"]
[Sun Dec 28 10:37:38.222136 2025] [:error] [pid 42378:tid 42380] [client 148.72.61.162:50630] [client 148.72.61.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.61.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX8jgtcN-KHAjWrX_E3wAAAMA"]
[Sun Dec 28 10:37:38.222261 2025] [:error] [pid 42378:tid 42380] [client 148.72.61.162:50630] [client 148.72.61.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 148.72.61.162, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX8jgtcN-KHAjWrX_E3wAAAMA"]
[Sun Dec 28 10:37:39.040369 2025] [:error] [pid 29437:tid 29477] [client 148.72.61.162:50640] [client 148.72.61.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.61.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX8xhDotAbVk6pZLdRSgAAAcs"]
[Sun Dec 28 10:37:39.040538 2025] [:error] [pid 29437:tid 29477] [client 148.72.61.162:50640] [client 148.72.61.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 148.72.61.162, counter = 9"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVCX8xhDotAbVk6pZLdRSgAAAcs"]
[Sun Dec 28 12:07:47.894446 2025] [:error] [pid 42378:tid 42400] [client 120.71.59.24:43341] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVCtEzgtcN-KHAjWrX_QzAAAANQ"]
[Sun Dec 28 15:58:52.346841 2025] [autoindex:error] [pid 29436:tid 29442] [client 159.89.181.56:56418] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 28 18:51:49.913073 2025] [:error] [pid 43789:tid 43811] [client 4.189.121.195:15577] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aVELxQa-tUppni4CcCYi2AAAARQ"]
[Sun Dec 28 18:51:50.448753 2025] [:error] [pid 29436:tid 29441] [client 4.189.121.195:15600] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aVELxrchzOOtNL9VPNLXLAAAAYI"]
[Sun Dec 28 18:51:51.066077 2025] [:error] [pid 29388:tid 29412] [client 4.189.121.195:15603] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aVELx9oLv2L2zI_SpdXPQQAAAVA"]
[Sun Dec 28 18:51:51.797349 2025] [:error] [pid 43789:tid 43805] [client 4.189.121.195:15580] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aVELxwa-tUppni4CcCYi3QAAAQ4"]
[Sun Dec 28 18:51:52.694635 2025] [:error] [pid 42294:tid 42355] [client 4.189.121.195:15502] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-activate.php"] [unique_id "aVELyNTE5kYcYCOzl9Gv1wAAAIU"]
[Sun Dec 28 18:51:53.208734 2025] [:error] [pid 42378:tid 42381] [client 4.189.121.195:15574] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-activate.php"] [unique_id "aVELyTgtcN-KHAjWrX8KigAAAME"]
[Sun Dec 28 18:51:53.933736 2025] [:error] [pid 42294:tid 42373] [client 4.189.121.195:15561] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-activate.php"] [unique_id "aVELydTE5kYcYCOzl9Gv2QAAAJc"]
[Sun Dec 28 18:51:54.282595 2025] [:error] [pid 42378:tid 42391] [client 4.189.121.195:15492] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-activate.php"] [unique_id "aVELyjgtcN-KHAjWrX8KjQAAAMs"]
[Sun Dec 28 18:51:54.649152 2025] [:error] [pid 29388:tid 29396] [client 4.189.121.195:15559] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aVELytoLv2L2zI_SpdXPQgAAAUA"]
[Sun Dec 28 18:51:54.976537 2025] [:error] [pid 29437:tid 29478] [client 4.189.121.195:15610] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aVELyhhDotAbVk6pZLexRgAAAcw"]
[Sun Dec 28 18:51:55.435638 2025] [:error] [pid 29437:tid 29490] [client 4.189.121.195:15578] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aVELyxhDotAbVk6pZLexSAAAAdg"]
[Sun Dec 28 18:51:55.921369 2025] [:error] [pid 29436:tid 29447] [client 4.189.121.195:15510] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aVELy7chzOOtNL9VPNLXLwAAAYg"]
[Sun Dec 28 18:51:56.185949 2025] [:error] [pid 29437:tid 29480] [client 4.189.121.195:15598] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aVELzBhDotAbVk6pZLexSgAAAc4"]
[Sun Dec 28 18:51:57.185183 2025] [:error] [pid 42292:tid 42304] [client 4.189.121.195:15596] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aVELzZyOrM_vaFx1osY7ZwAAAAg"]
[Sun Dec 28 18:51:57.587664 2025] [:error] [pid 42292:tid 42318] [client 4.189.121.195:15579] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aVELzZyOrM_vaFx1osY7aQAAABY"]
[Sun Dec 28 18:51:57.920065 2025] [:error] [pid 42293:tid 42332] [client 4.189.121.195:15607] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aVELzcvc9B-5cwN385LTEAAAAEk"]
[Sun Dec 28 18:51:58.272617 2025] [:error] [pid 29436:tid 29461] [client 4.189.121.195:15565] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVELzrchzOOtNL9VPNLXNgAAAZY"]
[Sun Dec 28 18:51:58.767411 2025] [:error] [pid 42378:tid 42382] [client 4.189.121.195:15522] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVELzjgtcN-KHAjWrX8KkQAAAMI"]
[Sun Dec 28 18:51:59.100452 2025] [:error] [pid 29436:tid 29462] [client 4.189.121.195:15488] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVELz7chzOOtNL9VPNLXNwAAAZc"]
[Sun Dec 28 18:51:59.387245 2025] [:error] [pid 29436:tid 29444] [client 4.189.121.195:15537] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVELz7chzOOtNL9VPNLXOAAAAYU"]
[Sun Dec 28 18:51:59.780636 2025] [:error] [pid 43789:tid 43813] [client 4.189.121.195:15611] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs.php"] [unique_id "aVELzwa-tUppni4CcCYi4gAAARY"]
[Sun Dec 28 18:52:00.058656 2025] [:error] [pid 29436:tid 29441] [client 4.189.121.195:15592] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs.php"] [unique_id "aVEL0LchzOOtNL9VPNLXOgAAAYI"]
[Sun Dec 28 18:52:00.517573 2025] [:error] [pid 29388:tid 29415] [client 4.189.121.195:15509] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs.php"] [unique_id "aVEL0NoLv2L2zI_SpdXPRwAAAVM"]
[Sun Dec 28 18:52:02.656487 2025] [:error] [pid 42378:tid 42385] [client 4.189.121.195:12263] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs.php"] [unique_id "aVEL0jgtcN-KHAjWrX8KlgAAAMU"]
[Sun Dec 28 18:52:04.203968 2025] [:error] [pid 43789:tid 43807] [client 4.189.121.195:15582] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "aVEL1Aa-tUppni4CcCYi5AAAARA"]
[Sun Dec 28 18:52:05.470932 2025] [:error] [pid 42294:tid 42368] [client 4.189.121.195:15568] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "aVEL1dTE5kYcYCOzl9Gv3gAAAJI"]
[Sun Dec 28 18:52:06.540441 2025] [:error] [pid 29437:tid 29471] [client 4.189.121.195:15570] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "aVEL1hhDotAbVk6pZLexUwAAAcU"]
[Sun Dec 28 18:52:08.280493 2025] [:error] [pid 29437:tid 29486] [client 4.189.121.195:15602] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "aVEL2BhDotAbVk6pZLexVgAAAdQ"]
[Sun Dec 28 18:52:09.144318 2025] [:error] [pid 29437:tid 29480] [client 4.189.121.195:15608] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aVEL2RhDotAbVk6pZLexWAAAAc4"]
[Sun Dec 28 18:52:11.484649 2025] [:error] [pid 42292:tid 42315] [client 4.189.121.195:15499] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aVEL25yOrM_vaFx1osY7ewAAABM"]
[Sun Dec 28 18:52:12.628251 2025] [:error] [pid 29388:tid 29418] [client 4.189.121.195:12230] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aVEL3NoLv2L2zI_SpdXPTQAAAVY"]
[Sun Dec 28 18:52:13.731394 2025] [:error] [pid 29388:tid 29402] [client 4.189.121.195:15490] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aVEL3doLv2L2zI_SpdXPUQAAAUY"]
[Sun Dec 28 18:52:14.825538 2025] [:error] [pid 29436:tid 29444] [client 4.189.121.195:15544] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aVEL3rchzOOtNL9VPNLXUgAAAYU"]
[Sun Dec 28 18:52:16.028710 2025] [:error] [pid 29436:tid 29452] [client 4.189.121.195:15489] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aVEL4LchzOOtNL9VPNLXVgAAAY0"]
[Sun Dec 28 18:52:16.515147 2025] [:error] [pid 42292:tid 42311] [client 4.189.121.195:15496] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aVEL4JyOrM_vaFx1osY7gwAAAA8"]
[Sun Dec 28 18:52:16.775877 2025] [:error] [pid 42292:tid 42302] [client 4.189.121.195:15584] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aVEL4JyOrM_vaFx1osY7hAAAAAY"]
[Sun Dec 28 18:52:17.098785 2025] [:error] [pid 42294:tid 42362] [client 4.189.121.195:15583] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aVEL4dTE5kYcYCOzl9Gv6QAAAIw"]
[Sun Dec 28 18:52:17.416591 2025] [:error] [pid 42292:tid 42296] [client 4.189.121.195:15491] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aVEL4ZyOrM_vaFx1osY7hgAAAAA"]
[Sun Dec 28 18:52:17.986156 2025] [:error] [pid 42292:tid 42319] [client 4.189.121.195:15563] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aVEL4ZyOrM_vaFx1osY7iQAAABc"]
[Sun Dec 28 18:52:18.490287 2025] [:error] [pid 29437:tid 29477] [client 4.189.121.195:15605] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aVEL4hhDotAbVk6pZLexWwAAAcs"]
[Sun Dec 28 18:52:18.775433 2025] [:error] [pid 29436:tid 29462] [client 4.189.121.195:15518] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OK.php"] [unique_id "aVEL4rchzOOtNL9VPNLXWAAAAZc"]
[Sun Dec 28 18:52:19.158234 2025] [:error] [pid 42293:tid 42329] [client 4.189.121.195:15525] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OK.php"] [unique_id "aVEL48vc9B-5cwN385LTHAAAAEY"]
[Sun Dec 28 18:52:19.562688 2025] [:error] [pid 29436:tid 29460] [client 4.189.121.195:15590] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OK.php"] [unique_id "aVEL47chzOOtNL9VPNLXWgAAAZU"]
[Sun Dec 28 18:52:19.965640 2025] [:error] [pid 42292:tid 42309] [client 4.189.121.195:15589] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OK.php"] [unique_id "aVEL45yOrM_vaFx1osY7iwAAAA0"]
[Sun Dec 28 18:52:20.277817 2025] [:error] [pid 43789:tid 43810] [client 4.189.121.195:15567] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aVEL5Aa-tUppni4CcCYi6gAAARM"]
[Sun Dec 28 18:52:20.547723 2025] [:error] [pid 43789:tid 43798] [client 4.189.121.195:12243] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aVEL5Aa-tUppni4CcCYi7AAAAQc"]
[Sun Dec 28 18:52:20.882173 2025] [:error] [pid 29388:tid 29405] [client 4.189.121.195:15552] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aVEL5NoLv2L2zI_SpdXPVAAAAUk"]
[Sun Dec 28 18:52:21.135618 2025] [:error] [pid 42378:tid 42401] [client 4.189.121.195:15591] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfanew.php"] [unique_id "aVEL5TgtcN-KHAjWrX8KnwAAANU"]
[Sun Dec 28 18:52:21.571397 2025] [:error] [pid 29388:tid 29403] [client 4.189.121.195:15581] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zsec.php"] [unique_id "aVEL5doLv2L2zI_SpdXPVQAAAUc"]
[Sun Dec 28 18:52:21.930168 2025] [:error] [pid 29436:tid 29449] [client 4.189.121.195:15566] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zsec.php"] [unique_id "aVEL5bchzOOtNL9VPNLXXQAAAYo"]
[Sun Dec 28 18:52:22.233174 2025] [:error] [pid 42293:tid 42331] [client 4.189.121.195:15538] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zsec.php"] [unique_id "aVEL5svc9B-5cwN385LTHwAAAEg"]
[Sun Dec 28 18:52:22.678625 2025] [:error] [pid 42293:tid 42335] [client 4.189.121.195:15504] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zsec.php"] [unique_id "aVEL5svc9B-5cwN385LTIAAAAEw"]
[Sun Dec 28 18:52:22.939147 2025] [:error] [pid 42293:tid 42338] [client 4.189.121.195:12165] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aVEL5svc9B-5cwN385LTIQAAAE8"]
[Sun Dec 28 18:52:23.179033 2025] [:error] [pid 29437:tid 29471] [client 4.189.121.195:15526] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aVEL5xhDotAbVk6pZLexYQAAAcU"]
[Sun Dec 28 18:52:23.642481 2025] [:error] [pid 43789:tid 43791] [client 4.189.121.195:15612] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aVEL5wa-tUppni4CcCYi7gAAAQA"]
[Sun Dec 28 18:52:24.220405 2025] [:error] [pid 42294:tid 42358] [client 4.189.121.195:15495] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aVEL6NTE5kYcYCOzl9Gv9AAAAIg"]
[Sun Dec 28 18:52:24.452881 2025] [:error] [pid 29436:tid 29440] [client 4.189.121.195:15506] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aVEL6LchzOOtNL9VPNLXXwAAAYE"]
[Sun Dec 28 18:52:24.765423 2025] [:error] [pid 42293:tid 42328] [client 4.189.121.195:15558] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aVEL6Mvc9B-5cwN385LTIwAAAEU"]
[Sun Dec 28 18:52:25.060943 2025] [:error] [pid 42293:tid 42336] [client 4.189.121.195:12232] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aVEL6cvc9B-5cwN385LTJAAAAE0"]
[Sun Dec 28 18:52:25.410212 2025] [:error] [pid 42378:tid 42395] [client 4.189.121.195:15557] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aVEL6TgtcN-KHAjWrX8KoQAAAM8"]
[Sun Dec 28 18:52:25.705498 2025] [:error] [pid 29436:tid 29456] [client 4.189.121.195:15513] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aVEL6bchzOOtNL9VPNLXYgAAAZE"]
[Sun Dec 28 18:52:25.973967 2025] [:error] [pid 43789:tid 43803] [client 4.189.121.195:12262] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aVEL6Qa-tUppni4CcCYi8QAAAQw"]
[Sun Dec 28 18:52:26.242634 2025] [:error] [pid 29437:tid 29486] [client 4.189.121.195:15575] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aVEL6hhDotAbVk6pZLexYwAAAdQ"]
[Sun Dec 28 18:52:26.590945 2025] [:error] [pid 29437:tid 29478] [client 4.189.121.195:15564] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aVEL6hhDotAbVk6pZLexZAAAAcw"]
[Sun Dec 28 18:52:26.850905 2025] [:error] [pid 29437:tid 29475] [client 4.189.121.195:15530] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/af32.php"] [unique_id "aVEL6hhDotAbVk6pZLexZQAAAck"]
[Sun Dec 28 18:52:27.099857 2025] [:error] [pid 29437:tid 29480] [client 4.189.121.195:15497] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/af32.php"] [unique_id "aVEL6xhDotAbVk6pZLexZgAAAc4"]
[Sun Dec 28 18:52:27.626679 2025] [:error] [pid 29437:tid 29476] [client 4.189.121.195:15512] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/af32.php"] [unique_id "aVEL6xhDotAbVk6pZLexaQAAAco"]
[Sun Dec 28 18:52:28.328187 2025] [:error] [pid 42378:tid 42399] [client 4.189.121.195:15597] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/af32.php"] [unique_id "aVEL7DgtcN-KHAjWrX8KowAAANM"]
[Sun Dec 28 18:52:28.783798 2025] [:error] [pid 42378:tid 42389] [client 4.189.121.195:15594] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rz.php"] [unique_id "aVEL7DgtcN-KHAjWrX8KpAAAAMk"]
[Sun Dec 28 18:52:29.428116 2025] [:error] [pid 42378:tid 42402] [client 4.189.121.195:12235] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rz.php"] [unique_id "aVEL7TgtcN-KHAjWrX8KpwAAANY"]
[Sun Dec 28 18:52:30.054644 2025] [:error] [pid 29436:tid 29454] [client 4.189.121.195:15505] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rz.php"] [unique_id "aVEL7rchzOOtNL9VPNLXZwAAAY8"]
[Sun Dec 28 18:52:30.950139 2025] [:error] [pid 29437:tid 29474] [client 4.189.121.195:15524] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rz.php"] [unique_id "aVEL7hhDotAbVk6pZLexcAAAAcg"]
[Sun Dec 28 18:52:31.193762 2025] [:error] [pid 42378:tid 42387] [client 4.189.121.195:15517] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hugo.php"] [unique_id "aVEL7zgtcN-KHAjWrX8KqQAAAMc"]
[Sun Dec 28 18:52:31.586188 2025] [:error] [pid 29437:tid 29489] [client 4.189.121.195:15601] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hugo.php"] [unique_id "aVEL7xhDotAbVk6pZLexcQAAAdc"]
[Sun Dec 28 18:52:32.004061 2025] [:error] [pid 42378:tid 42391] [client 4.189.121.195:12250] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hugo.php"] [unique_id "aVEL8DgtcN-KHAjWrX8KrAAAAMs"]
[Sun Dec 28 18:52:32.245425 2025] [:error] [pid 29437:tid 29470] [client 4.189.121.195:15576] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hugo.php"] [unique_id "aVEL8BhDotAbVk6pZLexdAAAAcQ"]
[Sun Dec 28 18:52:32.693601 2025] [:error] [pid 29437:tid 29471] [client 4.189.121.195:15516] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "aVEL8BhDotAbVk6pZLexdQAAAcU"]
[Sun Dec 28 18:52:33.436120 2025] [:error] [pid 42294:tid 42370] [client 4.189.121.195:12238] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "aVEL8dTE5kYcYCOzl9Gv-QAAAJQ"]
[Sun Dec 28 18:52:33.760520 2025] [:error] [pid 42294:tid 42368] [client 4.189.121.195:15614] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "aVEL8dTE5kYcYCOzl9Gv-gAAAJI"]
[Sun Dec 28 18:52:34.048691 2025] [:error] [pid 42294:tid 42363] [client 4.189.121.195:15587] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "aVEL8tTE5kYcYCOzl9Gv-wAAAI0"]
[Sun Dec 28 18:52:34.318618 2025] [:error] [pid 42292:tid 42298] [client 4.189.121.195:12278] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lzyrj.php"] [unique_id "aVEL8pyOrM_vaFx1osY7sAAAAAI"]
[Sun Dec 28 18:52:34.674264 2025] [:error] [pid 42292:tid 42309] [client 4.189.121.195:12247] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lzyrj.php"] [unique_id "aVEL8pyOrM_vaFx1osY7sQAAAA0"]
[Sun Dec 28 18:52:35.039583 2025] [:error] [pid 42292:tid 42306] [client 4.189.121.195:15606] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lzyrj.php"] [unique_id "aVEL85yOrM_vaFx1osY7swAAAAo"]
[Sun Dec 28 18:52:35.602302 2025] [:error] [pid 29437:tid 29475] [client 4.189.121.195:15545] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lzyrj.php"] [unique_id "aVEL8xhDotAbVk6pZLexeAAAAck"]
[Sun Dec 28 18:52:35.923659 2025] [:error] [pid 29388:tid 29398] [client 4.189.121.195:12277] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/laudq.php"] [unique_id "aVEL89oLv2L2zI_SpdXPVgAAAUI"]
[Sun Dec 28 18:52:36.203974 2025] [:error] [pid 29388:tid 29415] [client 4.189.121.195:12176] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/laudq.php"] [unique_id "aVEL9NoLv2L2zI_SpdXPVwAAAVM"]
[Sun Dec 28 18:52:36.692620 2025] [:error] [pid 42292:tid 42305] [client 4.189.121.195:15595] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/laudq.php"] [unique_id "aVEL9JyOrM_vaFx1osY7twAAAAk"]
[Sun Dec 28 18:52:37.057693 2025] [:error] [pid 42378:tid 42389] [client 4.189.121.195:12241] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/laudq.php"] [unique_id "aVEL9TgtcN-KHAjWrX8KsgAAAMk"]
[Sun Dec 28 18:52:37.502300 2025] [:error] [pid 42378:tid 42402] [client 4.189.121.195:15547] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anjay.php"] [unique_id "aVEL9TgtcN-KHAjWrX8KswAAANY"]
[Sun Dec 28 18:52:37.811594 2025] [:error] [pid 29388:tid 29406] [client 4.189.121.195:15546] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anjay.php"] [unique_id "aVEL9doLv2L2zI_SpdXPWQAAAUo"]
[Sun Dec 28 18:52:38.071929 2025] [:error] [pid 42292:tid 42316] [client 4.189.121.195:15508] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anjay.php"] [unique_id "aVEL9pyOrM_vaFx1osY7uwAAABQ"]
[Sun Dec 28 18:52:38.372582 2025] [:error] [pid 29437:tid 29472] [client 4.189.121.195:15515] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anjay.php"] [unique_id "aVEL9hhDotAbVk6pZLexegAAAcY"]
[Sun Dec 28 18:52:39.214636 2025] [:error] [pid 42293:tid 42335] [client 4.189.121.195:15519] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/let.php"] [unique_id "aVEL98vc9B-5cwN385LTLQAAAEw"]
[Sun Dec 28 18:52:39.701299 2025] [:error] [pid 29437:tid 29488] [client 4.189.121.195:15555] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/let.php"] [unique_id "aVEL9xhDotAbVk6pZLexfQAAAdY"]
[Sun Dec 28 18:52:40.165295 2025] [:error] [pid 29437:tid 29467] [client 4.189.121.195:12236] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/let.php"] [unique_id "aVEL-BhDotAbVk6pZLexfgAAAcE"]
[Sun Dec 28 18:52:40.600482 2025] [:error] [pid 29388:tid 29409] [client 4.189.121.195:12234] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/let.php"] [unique_id "aVEL-NoLv2L2zI_SpdXPXAAAAU0"]
[Sun Dec 28 18:52:40.833298 2025] [:error] [pid 43789:tid 43802] [client 4.189.121.195:15613] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aVEL-Aa-tUppni4CcCYi-gAAAQs"]
[Sun Dec 28 18:52:41.118382 2025] [:error] [pid 42294:tid 42357] [client 4.189.121.195:12275] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aVEL-dTE5kYcYCOzl9GwCAAAAIc"]
[Sun Dec 28 18:52:41.379312 2025] [:error] [pid 29437:tid 29469] [client 4.189.121.195:15528] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aVEL-RhDotAbVk6pZLexgAAAAcM"]
[Sun Dec 28 18:52:41.641582 2025] [:error] [pid 43789:tid 43791] [client 4.189.121.195:12246] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aVEL-Qa-tUppni4CcCYi_QAAAQA"]
[Sun Dec 28 18:52:41.933533 2025] [:error] [pid 42294:tid 42354] [client 4.189.121.195:12181] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aVEL-dTE5kYcYCOzl9GwCQAAAIQ"]
[Sun Dec 28 18:52:42.470102 2025] [:error] [pid 42378:tid 42387] [client 4.189.121.195:15494] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aVEL-jgtcN-KHAjWrX8KtQAAAMc"]
[Sun Dec 28 18:52:42.911864 2025] [:error] [pid 29437:tid 29489] [client 4.189.121.195:12268] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aVEL-hhDotAbVk6pZLexggAAAdc"]
[Sun Dec 28 18:52:43.319677 2025] [:error] [pid 42292:tid 42306] [client 4.189.121.195:15503] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aVEL-5yOrM_vaFx1osY7vwAAAAo"]
[Sun Dec 28 18:52:43.630978 2025] [:error] [pid 29436:tid 29462] [client 4.189.121.195:15532] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aVEL-7chzOOtNL9VPNLXaQAAAZc"]
[Sun Dec 28 18:52:44.228960 2025] [:error] [pid 42292:tid 42312] [client 4.189.121.195:12227] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aVEL_JyOrM_vaFx1osY7wAAAABA"]
[Sun Dec 28 18:52:44.582302 2025] [:error] [pid 42292:tid 42315] [client 4.189.121.195:12228] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aVEL_JyOrM_vaFx1osY7wQAAABM"]
[Sun Dec 28 18:52:45.001064 2025] [:error] [pid 29388:tid 29397] [client 4.189.121.195:15604] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pn.php"] [unique_id "aVEL_doLv2L2zI_SpdXPYQAAAUE"]
[Sun Dec 28 18:52:45.354165 2025] [:error] [pid 42292:tid 42305] [client 4.189.121.195:15536] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aVEL_ZyOrM_vaFx1osY7wwAAAAk"]
[Sun Dec 28 18:52:45.660165 2025] [:error] [pid 42292:tid 42314] [client 4.189.121.195:15541] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aVEL_ZyOrM_vaFx1osY7xQAAABI"]
[Sun Dec 28 18:52:46.073386 2025] [:error] [pid 29388:tid 29402] [client 4.189.121.195:15551] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aVEL_toLv2L2zI_SpdXPYwAAAUY"]
[Sun Dec 28 18:52:46.323705 2025] [:error] [pid 29436:tid 29446] [client 4.189.121.195:12258] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aVEL_rchzOOtNL9VPNLXbAAAAYc"]
[Sun Dec 28 18:52:46.568451 2025] [:error] [pid 29388:tid 29408] [client 4.189.121.195:12226] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aVEL_toLv2L2zI_SpdXPZAAAAUw"]
[Sun Dec 28 18:52:46.888853 2025] [:error] [pid 42293:tid 42343] [client 4.189.121.195:12195] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aVEL_svc9B-5cwN385LTMwAAAFQ"]
[Sun Dec 28 18:52:47.508527 2025] [:error] [pid 42378:tid 42401] [client 4.189.121.195:12245] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aVEL_zgtcN-KHAjWrX8KvAAAANU"]
[Sun Dec 28 18:52:47.902745 2025] [:error] [pid 43789:tid 43793] [client 4.189.121.195:12193] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aVEL_wa-tUppni4CcCYjAAAAAQI"]
[Sun Dec 28 18:53:01.045644 2025] [:error] [pid 29436:tid 29439] [client 4.189.121.195:12214] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aVEMDbchzOOtNL9VPNLXigAAAYA"]
[Sun Dec 28 18:53:01.399644 2025] [:error] [pid 42293:tid 42347] [client 4.189.121.195:15498] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aVEMDcvc9B-5cwN385LTOgAAAFg"]
[Sun Dec 28 18:53:01.796451 2025] [:error] [pid 42378:tid 42388] [client 4.189.121.195:12267] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aVEMDTgtcN-KHAjWrX8KzQAAAMg"]
[Sun Dec 28 18:53:02.141093 2025] [:error] [pid 42294:tid 42373] [client 4.189.121.195:12254] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aVEMDtTE5kYcYCOzl9GwEwAAAJc"]
[Sun Dec 28 18:53:02.458540 2025] [:error] [pid 42294:tid 42362] [client 4.189.121.195:12270] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aVEMDtTE5kYcYCOzl9GwFAAAAIw"]
[Sun Dec 28 18:53:02.858503 2025] [:error] [pid 29436:tid 29440] [client 4.189.121.195:12251] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aVEMDrchzOOtNL9VPNLXjAAAAYE"]
[Sun Dec 28 18:53:03.241842 2025] [:error] [pid 42293:tid 42332] [client 4.189.121.195:12215] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aVEMD8vc9B-5cwN385LTOwAAAEk"]
[Sun Dec 28 18:53:03.783708 2025] [:error] [pid 29437:tid 29467] [client 4.189.121.195:12280] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aVEMDxhDotAbVk6pZLexjgAAAcE"]
[Sun Dec 28 18:53:04.194749 2025] [:error] [pid 29436:tid 29444] [client 4.189.121.195:12253] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aVEMELchzOOtNL9VPNLXjgAAAYU"]
[Sun Dec 28 18:53:04.735290 2025] [:error] [pid 29437:tid 29469] [client 4.189.121.195:15556] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aVEMEBhDotAbVk6pZLexjwAAAcM"]
[Sun Dec 28 18:53:05.180993 2025] [:error] [pid 29437:tid 29481] [client 4.189.121.195:15569] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aVEMERhDotAbVk6pZLexkAAAAc8"]
[Sun Dec 28 18:53:05.735116 2025] [:error] [pid 29437:tid 29489] [client 4.189.121.195:15523] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aVEMERhDotAbVk6pZLexkQAAAdc"]
[Sun Dec 28 18:53:06.322811 2025] [:error] [pid 42378:tid 42404] [client 4.189.121.195:12204] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aVEMEjgtcN-KHAjWrX8K0wAAANg"]
[Sun Dec 28 18:53:07.243189 2025] [:error] [pid 43789:tid 43812] [client 4.189.121.195:15571] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aVEMEwa-tUppni4CcCYjMQAAARU"]
[Sun Dec 28 18:53:08.053038 2025] [:error] [pid 42294:tid 42354] [client 4.189.121.195:15562] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aVEMFNTE5kYcYCOzl9GwGAAAAIQ"]
[Sun Dec 28 18:53:08.420625 2025] [:error] [pid 29437:tid 29478] [client 4.189.121.195:12170] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aVEMFBhDotAbVk6pZLexlQAAAcw"]
[Sun Dec 28 18:53:08.946002 2025] [:error] [pid 42378:tid 42394] [client 4.189.121.195:12244] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uana.php"] [unique_id "aVEMFDgtcN-KHAjWrX8K1gAAAM4"]
[Sun Dec 28 18:53:10.330936 2025] [:error] [pid 42292:tid 42315] [client 4.189.121.195:15593] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uana.php"] [unique_id "aVEMFpyOrM_vaFx1osY7zwAAABM"]
[Sun Dec 28 18:53:11.592357 2025] [:error] [pid 29437:tid 29476] [client 4.189.121.195:15572] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uana.php"] [unique_id "aVEMFxhDotAbVk6pZLexmgAAAco"]
[Sun Dec 28 18:53:12.566838 2025] [:error] [pid 42294:tid 42360] [client 4.189.121.195:15543] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uana.php"] [unique_id "aVEMGNTE5kYcYCOzl9GwGgAAAIo"]
[Sun Dec 28 18:53:12.903241 2025] [:error] [pid 42293:tid 42344] [client 4.189.121.195:15588] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aVEMGMvc9B-5cwN385LTQgAAAFU"]
[Sun Dec 28 18:53:13.222853 2025] [:error] [pid 29388:tid 29400] [client 4.189.121.195:15500] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aVEMGdoLv2L2zI_SpdXPfgAAAUQ"]
[Sun Dec 28 18:53:13.936348 2025] [:error] [pid 29388:tid 29411] [client 4.189.121.195:15507] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aVEMGdoLv2L2zI_SpdXPfwAAAU8"]
[Sun Dec 28 18:53:14.823968 2025] [:error] [pid 43789:tid 43809] [client 4.189.121.195:15539] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aVEMGga-tUppni4CcCYjRAAAARI"]
[Sun Dec 28 18:53:15.530658 2025] [:error] [pid 43789:tid 43814] [client 4.189.121.195:12161] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aVEMGwa-tUppni4CcCYjSwAAARc"]
[Sun Dec 28 18:53:15.812198 2025] [:error] [pid 42378:tid 42388] [client 4.189.121.195:12265] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aVEMGzgtcN-KHAjWrX8K3QAAAMg"]
[Sun Dec 28 18:53:16.172815 2025] [:error] [pid 43789:tid 43797] [client 4.189.121.195:12184] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aVEMHAa-tUppni4CcCYjTgAAAQY"]
[Sun Dec 28 18:53:16.567444 2025] [:error] [pid 42293:tid 42334] [client 4.189.121.195:12122] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aVEMHMvc9B-5cwN385LTRAAAAEs"]
[Sun Dec 28 18:53:17.298507 2025] [:error] [pid 29437:tid 29488] [client 4.189.121.195:12106] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aVEMHRhDotAbVk6pZLexngAAAdY"]
[Sun Dec 28 18:53:17.711993 2025] [:error] [pid 42293:tid 42329] [client 4.189.121.195:15548] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aVEMHcvc9B-5cwN385LTRgAAAEY"]
[Sun Dec 28 18:53:18.309021 2025] [:error] [pid 42292:tid 42319] [client 4.189.121.195:12168] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aVEMHpyOrM_vaFx1osY71gAAABc"]
[Sun Dec 28 18:53:19.089267 2025] [:error] [pid 42294:tid 42358] [client 4.189.121.195:15511] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aVEMH9TE5kYcYCOzl9GwHAAAAIg"]
[Sun Dec 28 18:53:19.531920 2025] [:error] [pid 29436:tid 29448] [client 4.189.121.195:12187] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aVEMH7chzOOtNL9VPNLXlwAAAYk"]
[Sun Dec 28 18:53:20.263855 2025] [:error] [pid 29436:tid 29461] [client 4.189.121.195:15493] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aVEMILchzOOtNL9VPNLXmgAAAZY"]
[Sun Dec 28 18:53:21.128369 2025] [:error] [pid 42292:tid 42315] [client 4.189.121.195:12199] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aVEMIZyOrM_vaFx1osY72wAAABM"]
[Sun Dec 28 18:53:21.457821 2025] [:error] [pid 42378:tid 42400] [client 4.189.121.195:12196] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aVEMITgtcN-KHAjWrX8K4wAAANQ"]
[Sun Dec 28 18:53:21.828602 2025] [:error] [pid 29436:tid 29451] [client 4.189.121.195:15520] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aVEMIbchzOOtNL9VPNLXnQAAAYw"]
[Sun Dec 28 18:53:22.547998 2025] [:error] [pid 29436:tid 29443] [client 4.189.121.195:15573] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aVEMIrchzOOtNL9VPNLXoQAAAYQ"]
[Sun Dec 28 18:53:23.207936 2025] [:error] [pid 29436:tid 29460] [client 4.189.121.195:12255] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aVEMI7chzOOtNL9VPNLXowAAAZU"]
[Sun Dec 28 18:53:23.497446 2025] [:error] [pid 29436:tid 29440] [client 4.189.121.195:15533] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aVEMI7chzOOtNL9VPNLXpAAAAYE"]
[Sun Dec 28 18:53:23.955152 2025] [:error] [pid 42378:tid 42398] [client 4.189.121.195:15599] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVEMIzgtcN-KHAjWrX8K5wAAANI"]
[Sun Dec 28 18:53:24.322437 2025] [:error] [pid 29388:tid 29410] [client 4.189.121.195:12205] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVEMJNoLv2L2zI_SpdXPggAAAU4"]
[Sun Dec 28 18:53:25.002114 2025] [:error] [pid 29388:tid 29405] [client 4.189.121.195:12219] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVEMJdoLv2L2zI_SpdXPhAAAAUk"]
[Sun Dec 28 18:53:25.615429 2025] [:error] [pid 43789:tid 43799] [client 4.189.121.195:12259] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-rex4.php7"] [unique_id "aVEMJQa-tUppni4CcCYjdAAAAQg"]
[Sun Dec 28 18:53:26.594860 2025] [:error] [pid 43789:tid 43804] [client 4.189.121.195:12099] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aVEMJga-tUppni4CcCYjdwAAAQ0"]
[Sun Dec 28 18:53:26.882164 2025] [:error] [pid 43789:tid 43794] [client 4.189.121.195:12285] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aVEMJga-tUppni4CcCYjeQAAAQM"]
[Sun Dec 28 18:53:27.302988 2025] [:error] [pid 29436:tid 29453] [client 4.189.121.195:12281] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aVEMJ7chzOOtNL9VPNLXqgAAAY4"]
[Sun Dec 28 18:53:27.629291 2025] [:error] [pid 29437:tid 29478] [client 4.189.121.195:12261] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aVEMJxhDotAbVk6pZLexvgAAAcw"]
[Sun Dec 28 18:53:28.094743 2025] [:error] [pid 29436:tid 29454] [client 4.189.121.195:12282] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aVEMKLchzOOtNL9VPNLXqwAAAY8"]
[Sun Dec 28 18:53:28.475943 2025] [:error] [pid 29436:tid 29452] [client 4.189.121.195:12260] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aVEMKLchzOOtNL9VPNLXrQAAAY0"]
[Sun Dec 28 18:53:28.951439 2025] [:error] [pid 42378:tid 42403] [client 4.189.121.195:15529] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aVEMKDgtcN-KHAjWrX8K_gAAANc"]
[Sun Dec 28 18:53:29.634349 2025] [:error] [pid 29436:tid 29462] [client 4.189.121.195:15531] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aVEMKbchzOOtNL9VPNLXrgAAAZc"]
[Sun Dec 28 18:53:30.195827 2025] [:error] [pid 29436:tid 29439] [client 4.189.121.195:12224] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/warm.PhP7"] [unique_id "aVEMKrchzOOtNL9VPNLXsAAAAYA"]
[Sun Dec 28 18:53:31.292319 2025] [:error] [pid 42293:tid 42346] [client 4.189.121.195:12179] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/warm.PhP7"] [unique_id "aVEMK8vc9B-5cwN385LTSgAAAFc"]
[Sun Dec 28 18:53:31.759458 2025] [:error] [pid 42294:tid 42365] [client 4.189.121.195:12155] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/warm.PhP7"] [unique_id "aVEMK9TE5kYcYCOzl9GwIQAAAI8"]
[Sun Dec 28 18:53:32.343151 2025] [:error] [pid 42292:tid 42315] [client 4.189.121.195:15550] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/warm.PhP7"] [unique_id "aVEMLJyOrM_vaFx1osY77wAAABM"]
[Sun Dec 28 18:53:32.793623 2025] [:error] [pid 29436:tid 29442] [client 4.189.121.195:12042] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php7"] [unique_id "aVEMLLchzOOtNL9VPNLXsgAAAYM"]
[Sun Dec 28 18:53:33.135862 2025] [:error] [pid 29436:tid 29445] [client 4.189.121.195:12242] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php7"] [unique_id "aVEMLbchzOOtNL9VPNLXtAAAAYY"]
[Sun Dec 28 18:53:33.463857 2025] [:error] [pid 29388:tid 29419] [client 4.189.121.195:12098] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php7"] [unique_id "aVEMLdoLv2L2zI_SpdXPtAAAAVc"]
[Sun Dec 28 18:53:33.806972 2025] [:error] [pid 29388:tid 29413] [client 4.189.121.195:12197] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php7"] [unique_id "aVEMLdoLv2L2zI_SpdXPtQAAAVE"]
[Sun Dec 28 18:53:34.643741 2025] [:error] [pid 29436:tid 29461] [client 4.189.121.195:12131] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rss.php"] [unique_id "aVEMLrchzOOtNL9VPNLXtQAAAZY"]
[Sun Dec 28 18:53:35.402661 2025] [:error] [pid 42292:tid 42316] [client 4.189.121.195:15534] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rss.php"] [unique_id "aVEML5yOrM_vaFx1osY78wAAABQ"]
[Sun Dec 28 18:53:35.758344 2025] [:error] [pid 29436:tid 29453] [client 4.189.121.195:12240] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rss.php"] [unique_id "aVEML7chzOOtNL9VPNLXtwAAAY4"]
[Sun Dec 28 18:53:36.128482 2025] [:error] [pid 42293:tid 42325] [client 4.189.121.195:12185] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rss.php"] [unique_id "aVEMMMvc9B-5cwN385LTTQAAAEI"]
[Sun Dec 28 18:53:36.731182 2025] [:error] [pid 29436:tid 29451] [client 4.189.121.195:12182] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pekok.php"] [unique_id "aVEMMLchzOOtNL9VPNLXuAAAAYw"]
[Sun Dec 28 18:53:37.885388 2025] [:error] [pid 42292:tid 42296] [client 4.189.121.195:12273] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pekok.php"] [unique_id "aVEMMZyOrM_vaFx1osY79QAAAAA"]
[Sun Dec 28 18:53:39.947268 2025] [:error] [pid 42293:tid 42326] [client 4.189.121.195:12164] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pekok.php"] [unique_id "aVEMM8vc9B-5cwN385LTUAAAAEM"]
[Sun Dec 28 18:53:40.646037 2025] [:error] [pid 42378:tid 42386] [client 4.189.121.195:12286] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pekok.php"] [unique_id "aVEMNDgtcN-KHAjWrX8LBQAAAMY"]
[Sun Dec 28 18:53:41.129632 2025] [:error] [pid 42293:tid 42323] [client 4.189.121.195:15549] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aVEMNcvc9B-5cwN385LTUQAAAEA"]
[Sun Dec 28 18:53:41.906625 2025] [:error] [pid 29436:tid 29443] [client 4.189.121.195:12173] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aVEMNbchzOOtNL9VPNLXvwAAAYQ"]
[Sun Dec 28 18:53:42.825547 2025] [:error] [pid 42293:tid 42329] [client 4.189.121.195:12284] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aVEMNsvc9B-5cwN385LTVAAAAEY"]
[Sun Dec 28 18:53:43.734590 2025] [:error] [pid 42293:tid 42330] [client 4.189.121.195:12222] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aVEMN8vc9B-5cwN385LTVgAAAEc"]
[Sun Dec 28 18:53:44.018394 2025] [:error] [pid 29436:tid 29460] [client 4.189.121.195:12166] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aa.php"] [unique_id "aVEMOLchzOOtNL9VPNLXwQAAAZU"]
[Sun Dec 28 18:53:44.514161 2025] [:error] [pid 42292:tid 42305] [client 4.189.121.195:12233] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aa.php"] [unique_id "aVEMOJyOrM_vaFx1osY7_gAAAAk"]
[Sun Dec 28 18:53:45.547416 2025] [:error] [pid 29388:tid 29396] [client 4.189.121.195:15585] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aa.php"] [unique_id "aVEMOdoLv2L2zI_SpdXPvQAAAUA"]
[Sun Dec 28 18:53:45.945476 2025] [:error] [pid 29388:tid 29419] [client 4.189.121.195:15521] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aa.php"] [unique_id "aVEMOdoLv2L2zI_SpdXPvgAAAVc"]
[Sun Dec 28 18:53:46.427039 2025] [:error] [pid 29437:tid 29468] [client 4.189.121.195:12178] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cart.php"] [unique_id "aVEMOhhDotAbVk6pZLex0gAAAcI"]
[Sun Dec 28 18:53:46.783193 2025] [:error] [pid 42292:tid 42310] [client 4.189.121.195:12248] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cart.php"] [unique_id "aVEMOpyOrM_vaFx1osY8AgAAAA4"]
[Sun Dec 28 18:53:47.150892 2025] [:error] [pid 42292:tid 42319] [client 4.189.121.195:12117] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cart.php"] [unique_id "aVEMO5yOrM_vaFx1osY8BQAAABc"]
[Sun Dec 28 18:53:47.511983 2025] [:error] [pid 42292:tid 42311] [client 4.189.121.195:12266] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cart.php"] [unique_id "aVEMO5yOrM_vaFx1osY8BgAAAA8"]
[Sun Dec 28 18:53:48.191774 2025] [:error] [pid 42292:tid 42317] [client 4.189.121.195:12218] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/compare.php"] [unique_id "aVEMPJyOrM_vaFx1osY8BwAAABU"]
[Sun Dec 28 18:53:48.697148 2025] [:error] [pid 43789:tid 43797] [client 4.189.121.195:12111] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/compare.php"] [unique_id "aVEMPAa-tUppni4CcCYjngAAAQY"]
[Sun Dec 28 18:53:49.077533 2025] [:error] [pid 29436:tid 29454] [client 4.189.121.195:12212] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/compare.php"] [unique_id "aVEMPbchzOOtNL9VPNLXyQAAAY8"]
[Sun Dec 28 18:53:49.501163 2025] [:error] [pid 29436:tid 29462] [client 4.189.121.195:12256] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/compare.php"] [unique_id "aVEMPbchzOOtNL9VPNLXywAAAZc"]
[Sun Dec 28 18:53:49.838347 2025] [:error] [pid 29388:tid 29409] [client 4.189.121.195:12151] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aVEMPdoLv2L2zI_SpdXPwgAAAU0"]
[Sun Dec 28 18:53:50.620880 2025] [:error] [pid 29437:tid 29488] [client 4.189.121.195:12172] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aVEMPhhDotAbVk6pZLex1wAAAdY"]
[Sun Dec 28 18:53:51.456122 2025] [:error] [pid 29436:tid 29441] [client 4.189.121.195:12118] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aVEMP7chzOOtNL9VPNLX0AAAAYI"]
[Sun Dec 28 18:53:52.303540 2025] [:error] [pid 42378:tid 42393] [client 4.189.121.195:12112] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aVEMQDgtcN-KHAjWrX8LDwAAAM0"]
[Sun Dec 28 18:53:53.709609 2025] [:error] [pid 29436:tid 29457] [client 4.189.121.195:15514] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aVEMQbchzOOtNL9VPNLX1QAAAZI"]
[Sun Dec 28 18:53:55.311094 2025] [:error] [pid 42378:tid 42395] [client 4.189.121.195:12189] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aVEMQzgtcN-KHAjWrX8LEwAAAM8"]
[Sun Dec 28 18:53:55.963145 2025] [:error] [pid 29437:tid 29481] [client 4.189.121.195:12198] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aVEMQxhDotAbVk6pZLex2QAAAc8"]
[Sun Dec 28 18:53:56.927773 2025] [:error] [pid 29437:tid 29487] [client 4.189.121.195:12210] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aVEMRBhDotAbVk6pZLex2wAAAdU"]
[Sun Dec 28 18:54:11.732981 2025] [:error] [pid 29436:tid 29447] [client 4.189.121.195:12203] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aVEMU7chzOOtNL9VPNLX7wAAAYg"]
[Sun Dec 28 18:54:12.322721 2025] [:error] [pid 29437:tid 29471] [client 4.189.121.195:12163] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aVEMVBhDotAbVk6pZLex7QAAAcU"]
[Sun Dec 28 18:54:12.994774 2025] [:error] [pid 43789:tid 43791] [client 4.189.121.195:12177] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aVEMVAa-tUppni4CcCYjpwAAAQA"]
[Sun Dec 28 18:54:13.502429 2025] [:error] [pid 43789:tid 43808] [client 4.189.121.195:12191] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aVEMVQa-tUppni4CcCYjqAAAARE"]
[Sun Dec 28 18:54:13.843395 2025] [:error] [pid 43789:tid 43813] [client 4.189.121.195:12192] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aVEMVQa-tUppni4CcCYjqQAAARY"]
[Sun Dec 28 18:54:14.345031 2025] [:error] [pid 43789:tid 43803] [client 4.189.121.195:12142] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aVEMVga-tUppni4CcCYjrAAAAQw"]
[Sun Dec 28 18:54:14.842951 2025] [:error] [pid 42292:tid 42303] [client 4.189.121.195:15560] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aVEMVpyOrM_vaFx1osY8EQAAAAc"]
[Sun Dec 28 18:54:15.243188 2025] [:error] [pid 29437:tid 29477] [client 4.189.121.195:12190] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aVEMVxhDotAbVk6pZLex7wAAAcs"]
[Sun Dec 28 18:54:15.552908 2025] [:error] [pid 42292:tid 42317] [client 4.189.121.195:15540] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aVEMV5yOrM_vaFx1osY8EgAAABU"]
[Sun Dec 28 18:54:16.186804 2025] [:error] [pid 29388:tid 29406] [client 4.189.121.195:12107] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aVEMWNoLv2L2zI_SpdXPzgAAAUo"]
[Sun Dec 28 18:54:16.555206 2025] [:error] [pid 29436:tid 29439] [client 4.189.121.195:12162] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aVEMWLchzOOtNL9VPNLX8AAAAYA"]
[Sun Dec 28 18:54:16.834924 2025] [:error] [pid 42378:tid 42396] [client 4.189.121.195:12144] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aVEMWDgtcN-KHAjWrX8LJAAAANA"]
[Sun Dec 28 18:54:17.128126 2025] [:error] [pid 43789:tid 43809] [client 4.189.121.195:15542] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aVEMWQa-tUppni4CcCYjrwAAARI"]
[Sun Dec 28 18:54:17.572232 2025] [:error] [pid 42378:tid 42392] [client 4.189.121.195:12221] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aVEMWTgtcN-KHAjWrX8LJgAAAMw"]
[Sun Dec 28 18:54:18.137132 2025] [:error] [pid 42292:tid 42319] [client 4.189.121.195:15501] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aVEMWpyOrM_vaFx1osY8FAAAABc"]
[Sun Dec 28 18:54:18.995211 2025] [:error] [pid 29388:tid 29400] [client 4.189.121.195:12271] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aVEMWtoLv2L2zI_SpdXP0AAAAUQ"]
[Sun Dec 28 18:54:19.632607 2025] [:error] [pid 29436:tid 29448] [client 4.189.121.195:15609] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aVEMW7chzOOtNL9VPNLX8QAAAYk"]
[Sun Dec 28 18:54:20.364546 2025] [:error] [pid 29437:tid 29483] [client 4.189.121.195:12137] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aVEMXBhDotAbVk6pZLex8AAAAdE"]
[Sun Dec 28 18:54:20.819514 2025] [:error] [pid 43789:tid 43798] [client 4.189.121.195:12120] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aVEMXAa-tUppni4CcCYjtAAAAQc"]
[Sun Dec 28 18:54:21.237412 2025] [:error] [pid 29436:tid 29453] [client 4.189.121.195:12279] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "aVEMXbchzOOtNL9VPNLX9AAAAY4"]
[Sun Dec 28 18:54:21.599750 2025] [:error] [pid 42293:tid 42340] [client 4.189.121.195:15553] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVEMXcvc9B-5cwN385LTbQAAAFE"]
[Sun Dec 28 18:54:22.277536 2025] [:error] [pid 42292:tid 42306] [client 4.189.121.195:12208] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVEMXpyOrM_vaFx1osY8FwAAAAo"]
[Sun Dec 28 18:54:22.712220 2025] [:error] [pid 43789:tid 43808] [client 4.189.121.195:12104] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVEMXga-tUppni4CcCYjtgAAARE"]
[Sun Dec 28 18:54:23.270606 2025] [:error] [pid 42292:tid 42320] [client 4.189.121.195:12237] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVEMX5yOrM_vaFx1osY8GAAAABg"]
[Sun Dec 28 18:54:24.113534 2025] [:error] [pid 29388:tid 29414] [client 4.189.121.195:12252] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "aVEMYNoLv2L2zI_SpdXP1QAAAVI"]
[Sun Dec 28 18:54:25.141438 2025] [:error] [pid 42294:tid 42374] [client 4.189.121.195:12231] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "aVEMYdTE5kYcYCOzl9GwcgAAAJg"]
[Sun Dec 28 18:54:25.635614 2025] [:error] [pid 29436:tid 29456] [client 4.189.121.195:12213] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "aVEMYbchzOOtNL9VPNLX-AAAAZE"]
[Sun Dec 28 18:54:26.187485 2025] [:error] [pid 29437:tid 29486] [client 4.189.121.195:15586] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "aVEMYhhDotAbVk6pZLex_gAAAdQ"]
[Sun Dec 28 18:54:26.616388 2025] [:error] [pid 42378:tid 42385] [client 4.189.121.195:15569] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aVEMYjgtcN-KHAjWrX8LKQAAAMU"]
[Sun Dec 28 18:54:27.309078 2025] [:error] [pid 29437:tid 29475] [client 4.189.121.195:12109] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aVEMYxhDotAbVk6pZLeyAAAAAck"]
[Sun Dec 28 18:54:27.667002 2025] [:error] [pid 42294:tid 42357] [client 4.189.121.195:12116] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aVEMY9TE5kYcYCOzl9GwewAAAIc"]
[Sun Dec 28 18:54:28.674113 2025] [:error] [pid 29437:tid 29468] [client 4.189.121.195:12048] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aVEMZBhDotAbVk6pZLeyAgAAAcI"]
[Sun Dec 28 18:54:29.266388 2025] [:error] [pid 42293:tid 42336] [client 4.189.121.195:12202] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aVEMZcvc9B-5cwN385LTcgAAAE0"]
[Sun Dec 28 18:54:29.701318 2025] [:error] [pid 42294:tid 42354] [client 4.189.121.195:12188] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aVEMZdTE5kYcYCOzl9GwfQAAAIQ"]
[Sun Dec 28 18:54:30.074908 2025] [:error] [pid 42293:tid 42343] [client 4.189.121.195:12049] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aVEMZsvc9B-5cwN385LTdwAAAFQ"]
[Sun Dec 28 18:54:30.799088 2025] [:error] [pid 29436:tid 29445] [client 4.189.121.195:12096] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aVEMZrchzOOtNL9VPNLX-QAAAYY"]
[Sun Dec 28 18:54:31.316630 2025] [:error] [pid 29436:tid 29443] [client 4.189.121.195:12274] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aVEMZ7chzOOtNL9VPNLX-gAAAYQ"]
[Sun Dec 28 18:54:31.832958 2025] [:error] [pid 29436:tid 29446] [client 4.189.121.195:12174] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aVEMZ7chzOOtNL9VPNLX_AAAAYc"]
[Sun Dec 28 18:54:32.400585 2025] [:error] [pid 29436:tid 29460] [client 4.189.121.195:12180] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aVEMaLchzOOtNL9VPNLX_wAAAZU"]
[Sun Dec 28 18:54:33.030612 2025] [:error] [pid 42293:tid 42324] [client 4.189.121.195:12053] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aVEMacvc9B-5cwN385LTegAAAEE"]
[Sun Dec 28 18:54:33.840803 2025] [:error] [pid 42293:tid 42330] [client 4.189.121.195:12135] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aVEMacvc9B-5cwN385LTfQAAAEc"]
[Sun Dec 28 18:54:34.467749 2025] [:error] [pid 42293:tid 42332] [client 4.189.121.195:12169] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aVEMasvc9B-5cwN385LTfwAAAEk"]
[Sun Dec 28 18:54:35.053512 2025] [:error] [pid 42293:tid 42346] [client 4.189.121.195:12171] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aVEMa8vc9B-5cwN385LTggAAAFc"]
[Sun Dec 28 18:54:35.576638 2025] [:error] [pid 42293:tid 42339] [client 4.189.121.195:12217] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aVEMa8vc9B-5cwN385LThgAAAFA"]
[Sun Dec 28 18:54:36.129751 2025] [:error] [pid 29437:tid 29466] [client 4.189.121.195:12035] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aVEMbBhDotAbVk6pZLeyCwAAAcA"]
[Sun Dec 28 18:54:36.647682 2025] [:error] [pid 42293:tid 42334] [client 4.189.121.195:12220] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aVEMbMvc9B-5cwN385LTiQAAAEs"]
[Sun Dec 28 18:54:37.302783 2025] [:error] [pid 29437:tid 29480] [client 4.189.121.195:12043] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aVEMbRhDotAbVk6pZLeyDwAAAc4"]
[Sun Dec 28 18:54:37.765988 2025] [:error] [pid 29436:tid 29442] [client 4.189.121.195:12124] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aVEMbbchzOOtNL9VPNLYAgAAAYM"]
[Sun Dec 28 18:54:38.336968 2025] [:error] [pid 29436:tid 29457] [client 4.189.121.195:12063] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aVEMbrchzOOtNL9VPNLYBQAAAZI"]
[Sun Dec 28 18:54:38.963609 2025] [:error] [pid 29436:tid 29456] [client 4.189.121.195:12200] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aVEMbrchzOOtNL9VPNLYCAAAAZE"]
[Sun Dec 28 18:54:39.716958 2025] [:error] [pid 42293:tid 42331] [client 4.189.121.195:12119] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aVEMb8vc9B-5cwN385LTjwAAAEg"]
[Sun Dec 28 18:54:40.545111 2025] [:error] [pid 29436:tid 29459] [client 4.189.121.195:12110] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aVEMcLchzOOtNL9VPNLYDQAAAZQ"]
[Sun Dec 28 18:54:41.522484 2025] [:error] [pid 29436:tid 29439] [client 4.189.121.195:12272] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aVEMcbchzOOtNL9VPNLYEgAAAYA"]
[Sun Dec 28 18:54:41.995487 2025] [:error] [pid 42293:tid 42338] [client 4.189.121.195:12100] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aVEMccvc9B-5cwN385LTlAAAAE8"]
[Sun Dec 28 18:54:42.712904 2025] [:error] [pid 29437:tid 29472] [client 4.189.121.195:12249] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aVEMchhDotAbVk6pZLeyEgAAAcY"]
[Sun Dec 28 18:54:43.255010 2025] [:error] [pid 42293:tid 42324] [client 4.189.121.195:12085] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aVEMc8vc9B-5cwN385LTmAAAAEE"]
[Sun Dec 28 18:54:44.130845 2025] [:error] [pid 42293:tid 42330] [client 4.189.121.195:12130] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aVEMdMvc9B-5cwN385LTmgAAAEc"]
[Sun Dec 28 18:54:45.007139 2025] [:error] [pid 29388:tid 29403] [client 4.189.121.195:12047] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aVEMddoLv2L2zI_SpdXP2wAAAUc"]
[Sun Dec 28 18:54:45.779983 2025] [:error] [pid 42294:tid 42352] [client 4.189.121.195:12183] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aVEMddTE5kYcYCOzl9GwhAAAAII"]
[Sun Dec 28 18:54:47.291996 2025] [:error] [pid 29436:tid 29456] [client 4.189.121.195:12186] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aVEMd7chzOOtNL9VPNLYFQAAAZE"]
[Sun Dec 28 18:54:49.187524 2025] [:error] [pid 29437:tid 29489] [client 4.189.121.195:12152] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aVEMeRhDotAbVk6pZLeyFwAAAdc"]
[Sun Dec 28 18:54:50.458961 2025] [:error] [pid 42293:tid 42339] [client 4.189.121.195:12269] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aVEMesvc9B-5cwN385LToQAAAFA"]
[Sun Dec 28 18:54:51.501286 2025] [:error] [pid 29437:tid 29486] [client 4.189.121.195:12206] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aVEMexhDotAbVk6pZLeyGQAAAdQ"]
[Sun Dec 28 18:54:52.039261 2025] [:error] [pid 29437:tid 29478] [client 4.189.121.195:12158] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "aVEMfBhDotAbVk6pZLeyGgAAAcw"]
[Sun Dec 28 18:54:52.457429 2025] [:error] [pid 29437:tid 29479] [client 4.189.121.195:12129] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aVEMfBhDotAbVk6pZLeyHQAAAc0"]
[Sun Dec 28 18:54:53.066118 2025] [:error] [pid 42293:tid 42337] [client 4.189.121.195:12167] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aVEMfcvc9B-5cwN385LTpgAAAE4"]
[Sun Dec 28 18:54:53.765338 2025] [:error] [pid 29436:tid 29454] [client 4.189.121.195:12046] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aVEMfbchzOOtNL9VPNLYGQAAAY8"]
[Sun Dec 28 18:54:54.320529 2025] [:error] [pid 42293:tid 42331] [client 4.189.121.195:12207] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aVEMfsvc9B-5cwN385LTqgAAAEg"]
[Sun Dec 28 18:54:55.086591 2025] [:error] [pid 42293:tid 42347] [client 4.189.121.195:12211] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aVEMf8vc9B-5cwN385LTqwAAAFg"]
[Sun Dec 28 18:54:55.770860 2025] [:error] [pid 42293:tid 42329] [client 4.189.121.195:12067] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aVEMf8vc9B-5cwN385LTrgAAAEY"]
[Sun Dec 28 18:54:56.693339 2025] [:error] [pid 29437:tid 29485] [client 4.189.121.195:12257] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aVEMgBhDotAbVk6pZLeyIAAAAdM"]
[Sun Dec 28 18:54:57.269881 2025] [:error] [pid 42293:tid 42344] [client 4.189.121.195:12123] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aVEMgcvc9B-5cwN385LTsAAAAFU"]
[Sun Dec 28 18:54:57.902678 2025] [:error] [pid 29436:tid 29442] [client 4.189.121.195:12113] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conflg.php"] [unique_id "aVEMgbchzOOtNL9VPNLYHQAAAYM"]
[Sun Dec 28 18:54:58.433932 2025] [:error] [pid 29437:tid 29482] [client 4.189.121.195:15527] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conflg.php"] [unique_id "aVEMghhDotAbVk6pZLeyIQAAAdA"]
[Sun Dec 28 18:54:58.820468 2025] [:error] [pid 29437:tid 29474] [client 4.189.121.195:12239] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conflg.php"] [unique_id "aVEMghhDotAbVk6pZLeyIwAAAcg"]
[Sun Dec 28 18:54:59.319605 2025] [:error] [pid 42294:tid 42370] [client 4.189.121.195:12090] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conflg.php"] [unique_id "aVEMg9TE5kYcYCOzl9GwlQAAAJQ"]
[Sun Dec 28 18:54:59.836933 2025] [:error] [pid 42292:tid 42304] [client 4.189.121.195:12103] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmrlpc.php"] [unique_id "aVEMg5yOrM_vaFx1osY8JgAAAAg"]
[Sun Dec 28 18:55:00.183633 2025] [:error] [pid 42294:tid 42360] [client 4.189.121.195:12148] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmrlpc.php"] [unique_id "aVEMhNTE5kYcYCOzl9GwlwAAAIo"]
[Sun Dec 28 18:55:00.741746 2025] [:error] [pid 42294:tid 42367] [client 4.189.121.195:12079] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmrlpc.php"] [unique_id "aVEMhNTE5kYcYCOzl9GwmAAAAJE"]
[Sun Dec 28 18:55:01.146563 2025] [:error] [pid 29436:tid 29461] [client 4.189.121.195:12134] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmrlpc.php"] [unique_id "aVEMhbchzOOtNL9VPNLYIAAAAZY"]
[Sun Dec 28 18:55:01.781253 2025] [:error] [pid 29436:tid 29455] [client 4.189.121.195:12141] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aVEMhbchzOOtNL9VPNLYIQAAAZA"]
[Sun Dec 28 18:55:02.074230 2025] [:error] [pid 29436:tid 29451] [client 4.189.121.195:12121] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aVEMhrchzOOtNL9VPNLYIwAAAYw"]
[Sun Dec 28 18:55:02.507582 2025] [:error] [pid 42293:tid 42342] [client 4.189.121.195:12051] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aVEMhsvc9B-5cwN385LTswAAAFM"]
[Sun Dec 28 18:55:03.098034 2025] [:error] [pid 29436:tid 29463] [client 4.189.121.195:12159] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aVEMh7chzOOtNL9VPNLYJAAAAZg"]
[Sun Dec 28 18:55:03.541025 2025] [:error] [pid 29436:tid 29462] [client 4.189.121.195:12138] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aVEMh7chzOOtNL9VPNLYJgAAAZc"]
[Sun Dec 28 18:55:03.891648 2025] [:error] [pid 42378:tid 42397] [client 4.189.121.195:12040] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aVEMhzgtcN-KHAjWrX8LMQAAANE"]
[Sun Dec 28 18:55:04.409528 2025] [:error] [pid 29437:tid 29481] [client 4.189.121.195:12093] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aVEMiBhDotAbVk6pZLeyJwAAAc8"]
[Sun Dec 28 18:55:04.693671 2025] [:error] [pid 29436:tid 29452] [client 4.189.121.195:12115] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aVEMiLchzOOtNL9VPNLYKQAAAY0"]
[Sun Dec 28 18:55:05.003650 2025] [:error] [pid 42378:tid 42390] [client 4.189.121.195:12283] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aVEMiTgtcN-KHAjWrX8LMwAAAMo"]
[Sun Dec 28 18:55:05.399886 2025] [:error] [pid 43789:tid 43794] [client 4.189.121.195:12287] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aVEMiQa-tUppni4CcCYjwAAAAQM"]
[Sun Dec 28 18:55:05.960809 2025] [:error] [pid 42293:tid 42324] [client 4.189.121.195:12097] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aVEMicvc9B-5cwN385LTtAAAAEE"]
[Sun Dec 28 18:55:06.883127 2025] [:error] [pid 29388:tid 29400] [client 4.189.121.195:12223] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aVEMitoLv2L2zI_SpdXP6QAAAUQ"]
[Sun Dec 28 18:55:07.791725 2025] [:error] [pid 42294:tid 42358] [client 4.189.121.195:12105] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "aVEMi9TE5kYcYCOzl9GwnwAAAIg"]
[Sun Dec 28 18:55:08.712196 2025] [:error] [pid 42293:tid 42335] [client 4.189.121.195:12101] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "aVEMjMvc9B-5cwN385LTugAAAEw"]
[Sun Dec 28 18:55:09.856367 2025] [:error] [pid 29436:tid 29450] [client 4.189.121.195:12201] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "aVEMjbchzOOtNL9VPNLYLAAAAYs"]
[Sun Dec 28 18:55:22.451198 2025] [:error] [pid 42293:tid 42347] [client 4.189.121.195:12216] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aVEMmsvc9B-5cwN385LTzwAAAFg"]
[Sun Dec 28 18:55:23.036170 2025] [:error] [pid 42294:tid 42364] [client 4.189.121.195:11986] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aVEMm9TE5kYcYCOzl9GwqAAAAI4"]
[Sun Dec 28 18:55:23.546983 2025] [:error] [pid 42292:tid 42318] [client 4.189.121.195:12081] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aVEMm5yOrM_vaFx1osY8NAAAABY"]
[Sun Dec 28 18:55:23.856206 2025] [:error] [pid 42293:tid 42340] [client 4.189.121.195:11975] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aVEMm8vc9B-5cwN385LT0gAAAFE"]
[Sun Dec 28 18:55:24.275810 2025] [:error] [pid 29436:tid 29460] [client 4.189.121.195:12126] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aVEMnLchzOOtNL9VPNLYQAAAAZU"]
[Sun Dec 28 18:55:25.109577 2025] [:error] [pid 42294:tid 42358] [client 4.189.121.195:11987] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aVEMndTE5kYcYCOzl9GwqwAAAIg"]
[Sun Dec 28 18:55:25.603730 2025] [:error] [pid 42294:tid 42372] [client 4.189.121.195:15615] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aVEMndTE5kYcYCOzl9GwrAAAAJY"]
[Sun Dec 28 18:55:25.915773 2025] [:error] [pid 42292:tid 42313] [client 4.189.121.195:12147] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aVEMnZyOrM_vaFx1osY8OAAAABE"]
[Sun Dec 28 18:55:26.243455 2025] [:error] [pid 42292:tid 42296] [client 4.189.121.195:12140] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aVEMnpyOrM_vaFx1osY8OgAAAAA"]
[Sun Dec 28 18:55:26.521225 2025] [:error] [pid 43789:tid 43802] [client 4.189.121.195:12075] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aVEMnga-tUppni4CcCYj0QAAAQs"]
[Sun Dec 28 18:55:26.908192 2025] [:error] [pid 29388:tid 29414] [client 4.189.121.195:12145] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aVEMntoLv2L2zI_SpdXP7QAAAVI"]
[Sun Dec 28 18:55:27.516675 2025] [:error] [pid 29437:tid 29474] [client 4.189.121.195:12132] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aVEMnxhDotAbVk6pZLeyQQAAAcg"]
[Sun Dec 28 18:55:27.769403 2025] [:error] [pid 43789:tid 43815] [client 4.189.121.195:12056] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aVEMnwa-tUppni4CcCYj1wAAARg"]
[Sun Dec 28 18:55:28.016813 2025] [:error] [pid 42293:tid 42336] [client 4.189.121.195:12070] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aVEMoMvc9B-5cwN385LT1AAAAE0"]
[Sun Dec 28 18:55:28.312473 2025] [:error] [pid 43789:tid 43799] [client 4.189.121.195:12209] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aVEMoAa-tUppni4CcCYj2wAAAQg"]
[Sun Dec 28 18:55:28.658845 2025] [:error] [pid 42294:tid 42373] [client 4.189.121.195:12036] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aVEMoNTE5kYcYCOzl9GwrgAAAJc"]
[Sun Dec 28 18:55:29.137719 2025] [:error] [pid 42293:tid 42325] [client 4.189.121.195:11968] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "aVEMocvc9B-5cwN385LT1wAAAEI"]
[Sun Dec 28 18:55:29.439438 2025] [:error] [pid 29436:tid 29446] [client 4.189.121.195:12032] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "aVEMobchzOOtNL9VPNLYQgAAAYc"]
[Sun Dec 28 18:55:29.690132 2025] [:error] [pid 42293:tid 42343] [client 4.189.121.195:12157] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "aVEMocvc9B-5cwN385LT2gAAAFQ"]
[Sun Dec 28 18:55:29.985288 2025] [:error] [pid 42378:tid 42380] [client 4.189.121.195:12229] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "aVEMoTgtcN-KHAjWrX8LNAAAAMA"]
[Sun Dec 28 18:55:30.311495 2025] [:error] [pid 42293:tid 42335] [client 4.189.121.195:12276] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aVEMosvc9B-5cwN385LT3QAAAEw"]
[Sun Dec 28 18:55:30.902074 2025] [:error] [pid 42294:tid 42352] [client 4.189.121.195:12080] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aVEMotTE5kYcYCOzl9GwsAAAAII"]
[Sun Dec 28 18:55:31.177789 2025] [:error] [pid 42378:tid 42393] [client 4.189.121.195:15535] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aVEMozgtcN-KHAjWrX8LNQAAAM0"]
[Sun Dec 28 18:55:31.664534 2025] [:error] [pid 42378:tid 42385] [client 4.189.121.195:11998] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aVEMozgtcN-KHAjWrX8LNgAAAMU"]
[Sun Dec 28 18:55:32.202972 2025] [:error] [pid 42293:tid 42336] [client 4.189.121.195:12092] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aVEMpMvc9B-5cwN385LT4gAAAE0"]
[Sun Dec 28 18:55:32.511156 2025] [:error] [pid 42378:tid 42389] [client 4.189.121.195:11977] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aVEMpDgtcN-KHAjWrX8LOQAAAMk"]
[Sun Dec 28 18:55:33.153229 2025] [:error] [pid 43789:tid 43806] [client 4.189.121.195:12133] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aVEMpQa-tUppni4CcCYj3QAAAQ8"]
[Sun Dec 28 18:55:33.851880 2025] [:error] [pid 29437:tid 29478] [client 4.189.121.195:12156] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aVEMpRhDotAbVk6pZLeyTAAAAcw"]
[Sun Dec 28 18:55:34.267465 2025] [:error] [pid 29437:tid 29475] [client 4.189.121.195:12161] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aVEMphhDotAbVk6pZLeyTQAAAck"]
[Sun Dec 28 18:55:34.681201 2025] [:error] [pid 42378:tid 42401] [client 4.189.121.195:11970] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aVEMpjgtcN-KHAjWrX8LPQAAANU"]
[Sun Dec 28 18:55:35.155840 2025] [:error] [pid 42293:tid 42343] [client 4.189.121.195:12108] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aVEMp8vc9B-5cwN385LT5gAAAFQ"]
[Sun Dec 28 18:55:35.695200 2025] [:error] [pid 29437:tid 29479] [client 4.189.121.195:12004] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aVEMpxhDotAbVk6pZLeyTwAAAc0"]
[Sun Dec 28 18:55:36.222469 2025] [:error] [pid 29437:tid 29468] [client 4.189.121.195:15544] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo.php"] [unique_id "aVEMqBhDotAbVk6pZLeyUAAAAcI"]
[Sun Dec 28 18:55:36.699414 2025] [:error] [pid 29436:tid 29443] [client 4.189.121.195:12264] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo.php"] [unique_id "aVEMqLchzOOtNL9VPNLYRAAAAYQ"]
[Sun Dec 28 18:55:37.352159 2025] [:error] [pid 29437:tid 29474] [client 4.189.121.195:12010] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo.php"] [unique_id "aVEMqRhDotAbVk6pZLeyUwAAAcg"]
[Sun Dec 28 18:55:37.819798 2025] [:error] [pid 29436:tid 29447] [client 4.189.121.195:12072] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo.php"] [unique_id "aVEMqbchzOOtNL9VPNLYRwAAAYg"]
[Sun Dec 28 18:55:38.190135 2025] [:error] [pid 29436:tid 29459] [client 4.189.121.195:12225] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlu.php"] [unique_id "aVEMqrchzOOtNL9VPNLYSAAAAZQ"]
[Sun Dec 28 18:55:38.599620 2025] [:error] [pid 42293:tid 42335] [client 4.189.121.195:12095] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlu.php"] [unique_id "aVEMqsvc9B-5cwN385LT6gAAAEw"]
[Sun Dec 28 18:55:38.967321 2025] [:error] [pid 29436:tid 29444] [client 4.189.121.195:12139] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlu.php"] [unique_id "aVEMqrchzOOtNL9VPNLYSgAAAYU"]
[Sun Dec 28 18:55:39.445378 2025] [:error] [pid 29436:tid 29463] [client 4.189.121.195:11973] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlu.php"] [unique_id "aVEMq7chzOOtNL9VPNLYSwAAAZg"]
[Sun Dec 28 18:55:39.792611 2025] [:error] [pid 29436:tid 29441] [client 4.189.121.195:12052] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rk2.php"] [unique_id "aVEMq7chzOOtNL9VPNLYTgAAAYI"]
[Sun Dec 28 18:55:40.261547 2025] [:error] [pid 42294:tid 42360] [client 4.189.121.195:12125] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rk2.php"] [unique_id "aVEMrNTE5kYcYCOzl9GwtQAAAIo"]
[Sun Dec 28 18:55:40.634328 2025] [:error] [pid 29436:tid 29460] [client 4.189.121.195:12078] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rk2.php"] [unique_id "aVEMrLchzOOtNL9VPNLYUQAAAZU"]
[Sun Dec 28 18:55:41.008460 2025] [:error] [pid 42294:tid 42367] [client 4.189.121.195:12050] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rk2.php"] [unique_id "aVEMrdTE5kYcYCOzl9GwtgAAAJE"]
[Sun Dec 28 18:55:41.358478 2025] [:error] [pid 29437:tid 29488] [client 4.189.121.195:12102] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aVEMrRhDotAbVk6pZLeyVgAAAdY"]
[Sun Dec 28 18:55:41.824501 2025] [:error] [pid 29437:tid 29476] [client 4.189.121.195:12127] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aVEMrRhDotAbVk6pZLeyWAAAAco"]
[Sun Dec 28 18:55:42.312231 2025] [:error] [pid 42294:tid 42351] [client 4.189.121.195:15542] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aVEMrtTE5kYcYCOzl9GwtwAAAIE"]
[Sun Dec 28 18:55:43.139788 2025] [:error] [pid 29437:tid 29485] [client 4.189.121.195:12058] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aVEMrxhDotAbVk6pZLeyWQAAAdM"]
[Sun Dec 28 18:55:43.871325 2025] [:error] [pid 42294:tid 42362] [client 4.189.121.195:11999] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aVEMr9TE5kYcYCOzl9GwuQAAAIw"]
[Sun Dec 28 18:55:44.170166 2025] [:error] [pid 42294:tid 42356] [client 4.189.121.195:11972] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aVEMsNTE5kYcYCOzl9GwugAAAIY"]
[Sun Dec 28 18:55:44.620196 2025] [:error] [pid 42294:tid 42369] [client 4.189.121.195:12003] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aVEMsNTE5kYcYCOzl9GwvgAAAJM"]
[Sun Dec 28 18:55:45.149632 2025] [:error] [pid 42294:tid 42373] [client 4.189.121.195:12037] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aVEMsdTE5kYcYCOzl9GwvwAAAJc"]
[Sun Dec 28 18:55:45.479209 2025] [:error] [pid 43789:tid 43810] [client 4.189.121.195:12054] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aVEMsQa-tUppni4CcCYj5AAAARM"]
[Sun Dec 28 18:55:46.273369 2025] [:error] [pid 42293:tid 42344] [client 4.189.121.195:12091] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aVEMssvc9B-5cwN385LT9QAAAFU"]
[Sun Dec 28 18:55:46.585294 2025] [:error] [pid 29436:tid 29446] [client 4.189.121.195:12146] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aVEMsrchzOOtNL9VPNLYUwAAAYc"]
[Sun Dec 28 18:55:46.910768 2025] [:error] [pid 42378:tid 42384] [client 4.189.121.195:12076] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aVEMsjgtcN-KHAjWrX8LQAAAAMQ"]
[Sun Dec 28 18:55:47.235440 2025] [:error] [pid 42378:tid 42403] [client 4.189.121.195:11981] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content.php"] [unique_id "aVEMszgtcN-KHAjWrX8LQQAAANc"]
[Sun Dec 28 18:55:47.615615 2025] [:error] [pid 42293:tid 42345] [client 4.189.121.195:12018] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content.php"] [unique_id "aVEMs8vc9B-5cwN385LT-AAAAFY"]
[Sun Dec 28 18:55:47.946793 2025] [:error] [pid 29436:tid 29443] [client 4.189.121.195:12017] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content.php"] [unique_id "aVEMs7chzOOtNL9VPNLYVQAAAYQ"]
[Sun Dec 28 18:55:48.411161 2025] [:error] [pid 42293:tid 42332] [client 4.189.121.195:12059] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/content.php"] [unique_id "aVEMtMvc9B-5cwN385LT-QAAAEk"]
[Sun Dec 28 18:55:49.175719 2025] [:error] [pid 29436:tid 29450] [client 4.189.121.195:12128] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/406.php"] [unique_id "aVEMtbchzOOtNL9VPNLYVwAAAYs"]
[Sun Dec 28 18:55:49.731264 2025] [:error] [pid 42294:tid 42366] [client 4.189.121.195:12089] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/406.php"] [unique_id "aVEMtdTE5kYcYCOzl9GwwwAAAJA"]
[Sun Dec 28 18:55:50.462851 2025] [:error] [pid 29436:tid 29463] [client 4.189.121.195:12064] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/406.php"] [unique_id "aVEMtrchzOOtNL9VPNLYWQAAAZg"]
[Sun Dec 28 18:55:51.190225 2025] [:error] [pid 43789:tid 43799] [client 4.189.121.195:12027] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/406.php"] [unique_id "aVEMtwa-tUppni4CcCYj6AAAAQg"]
[Sun Dec 28 18:55:52.558426 2025] [:error] [pid 43789:tid 43806] [client 4.189.121.195:11989] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mariju.php"] [unique_id "aVEMuAa-tUppni4CcCYj6gAAAQ8"]
[Sun Dec 28 18:55:53.019389 2025] [:error] [pid 43789:tid 43804] [client 4.189.121.195:12154] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mariju.php"] [unique_id "aVEMuQa-tUppni4CcCYj6wAAAQ0"]
[Sun Dec 28 18:55:53.693984 2025] [:error] [pid 42293:tid 42323] [client 4.189.121.195:12143] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mariju.php"] [unique_id "aVEMucvc9B-5cwN385LT_gAAAEA"]
[Sun Dec 28 18:55:54.082433 2025] [:error] [pid 42292:tid 42309] [client 4.189.121.195:15554] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mariju.php"] [unique_id "aVEMupyOrM_vaFx1osY8QAAAAA0"]
[Sun Dec 28 18:55:54.423702 2025] [:error] [pid 42292:tid 42312] [client 4.189.121.195:12028] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aVEMupyOrM_vaFx1osY8QQAAABA"]
[Sun Dec 28 18:55:54.832028 2025] [:error] [pid 42293:tid 42329] [client 4.189.121.195:12150] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aVEMusvc9B-5cwN385LT_wAAAEY"]
[Sun Dec 28 18:55:55.322863 2025] [:error] [pid 43789:tid 43801] [client 4.189.121.195:12136] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aVEMuwa-tUppni4CcCYj7QAAAQo"]
[Sun Dec 28 18:55:56.033125 2025] [:error] [pid 43789:tid 43795] [client 4.189.121.195:12114] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aVEMvAa-tUppni4CcCYj8QAAAQQ"]
[Sun Dec 28 18:55:56.513093 2025] [:error] [pid 42293:tid 42333] [client 4.189.121.195:11873] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cache.php"] [unique_id "aVEMvMvc9B-5cwN385LUAgAAAEo"]
[Sun Dec 28 18:55:56.890799 2025] [:error] [pid 43789:tid 43810] [client 4.189.121.195:12014] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cache.php"] [unique_id "aVEMvAa-tUppni4CcCYj9AAAARM"]
[Sun Dec 28 18:55:57.276768 2025] [:error] [pid 42294:tid 42368] [client 4.189.121.195:12140] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cache.php"] [unique_id "aVEMvdTE5kYcYCOzl9GwxgAAAJI"]
[Sun Dec 28 18:55:57.873596 2025] [:error] [pid 43789:tid 43791] [client 4.189.121.195:12071] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cache.php"] [unique_id "aVEMvQa-tUppni4CcCYj9wAAAQA"]
[Sun Dec 28 18:55:58.899931 2025] [:error] [pid 42293:tid 42339] [client 4.189.121.195:12074] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zfile.php"] [unique_id "aVEMvsvc9B-5cwN385LUBAAAAFA"]
[Sun Dec 28 18:56:01.867793 2025] [:error] [pid 29436:tid 29453] [client 4.189.121.195:12044] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zfile.php"] [unique_id "aVEMwbchzOOtNL9VPNLYaQAAAY4"]
[Sun Dec 28 18:56:02.136991 2025] [:error] [pid 29436:tid 29455] [client 4.189.121.195:12055] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zfile.php"] [unique_id "aVEMwrchzOOtNL9VPNLYawAAAZA"]
[Sun Dec 28 18:56:02.965528 2025] [:error] [pid 29437:tid 29489] [client 4.189.121.195:12082] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zfile.php"] [unique_id "aVEMwhhDotAbVk6pZLeyaAAAAdc"]
[Sun Dec 28 18:56:05.041326 2025] [:error] [pid 42292:tid 42311] [client 4.189.121.195:11921] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "aVEMxZyOrM_vaFx1osY8RgAAAA8"]
[Sun Dec 28 18:56:07.202719 2025] [:error] [pid 29437:tid 29483] [client 4.189.121.195:12060] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "aVEMxxhDotAbVk6pZLeybwAAAdE"]
[Sun Dec 28 18:56:09.188343 2025] [:error] [pid 42294:tid 42365] [client 4.189.121.195:12195] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "aVEMydTE5kYcYCOzl9GwzgAAAI8"]
[Sun Dec 28 18:56:10.439071 2025] [:error] [pid 29436:tid 29459] [client 4.189.121.195:12194] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "aVEMyrchzOOtNL9VPNLYdgAAAZQ"]
[Sun Dec 28 18:56:11.721147 2025] [:error] [pid 42293:tid 42333] [client 4.189.121.195:11997] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aVEMy8vc9B-5cwN385LUDgAAAEo"]
[Sun Dec 28 18:56:13.781914 2025] [:error] [pid 29437:tid 29476] [client 4.189.121.195:12069] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aVEMzRhDotAbVk6pZLeycgAAAco"]
[Sun Dec 28 18:56:14.653461 2025] [:error] [pid 42293:tid 42324] [client 4.189.121.195:12084] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aVEMzsvc9B-5cwN385LUEwAAAEE"]
[Sun Dec 28 18:56:14.896678 2025] [:error] [pid 29437:tid 29481] [client 4.189.121.195:12149] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aVEMzhhDotAbVk6pZLeydAAAAc8"]
[Sun Dec 28 18:56:15.291093 2025] [:error] [pid 29437:tid 29485] [client 4.189.121.195:11940] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aVEMzxhDotAbVk6pZLeydQAAAdM"]
[Sun Dec 28 18:56:16.103653 2025] [:error] [pid 42378:tid 42404] [client 4.189.121.195:11985] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aVEM0DgtcN-KHAjWrX8LSAAAANg"]
[Sun Dec 28 18:56:16.361000 2025] [:error] [pid 29437:tid 29487] [client 4.189.121.195:11988] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aVEM0BhDotAbVk6pZLeydwAAAdU"]
[Sun Dec 28 18:56:16.613868 2025] [:error] [pid 42293:tid 42342] [client 4.189.121.195:12062] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aVEM0Mvc9B-5cwN385LUFQAAAFM"]
[Sun Dec 28 18:56:16.877565 2025] [:error] [pid 29437:tid 29470] [client 4.189.121.195:12038] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aVEM0BhDotAbVk6pZLeyeQAAAcQ"]
[Sun Dec 28 18:56:17.469982 2025] [:error] [pid 29436:tid 29439] [client 4.189.121.195:11933] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aVEM0bchzOOtNL9VPNLYggAAAYA"]
[Sun Dec 28 18:56:17.700628 2025] [:error] [pid 42293:tid 42331] [client 4.189.121.195:12066] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aVEM0cvc9B-5cwN385LUFwAAAEg"]
[Sun Dec 28 18:56:17.987207 2025] [:error] [pid 42378:tid 42399] [client 4.189.121.195:11924] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aVEM0TgtcN-KHAjWrX8LSwAAANM"]
[Sun Dec 28 18:56:18.886744 2025] [:error] [pid 29436:tid 29455] [client 4.189.121.195:12057] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aVEM0rchzOOtNL9VPNLYhwAAAZA"]
[Sun Dec 28 18:56:19.506545 2025] [:error] [pid 42292:tid 42318] [client 4.189.121.195:12120] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aVEM05yOrM_vaFx1osY8TwAAABY"]
[Sun Dec 28 18:56:20.444167 2025] [:error] [pid 29436:tid 29456] [client 4.189.121.195:11914] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aVEM1LchzOOtNL9VPNLYiAAAAZE"]
[Sun Dec 28 18:56:23.154335 2025] [:error] [pid 42378:tid 42384] [client 4.189.121.195:11991] [client 4.189.121.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aVEM1zgtcN-KHAjWrX8LTwAAAMQ"]
[Sun Dec 28 18:56:35.226187 2025] [:error] [pid 42292:tid 42313] [client 4.189.121.195:11969] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/angelV2.php"] [unique_id "aVEM45yOrM_vaFx1osY8egAAABE"]
[Sun Dec 28 18:56:36.218451 2025] [:error] [pid 29436:tid 29449] [client 4.189.121.195:15596] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/angelV2.php"] [unique_id "aVEM5LchzOOtNL9VPNLYpwAAAYo"]
[Sun Dec 28 18:56:36.699831 2025] [:error] [pid 29436:tid 29446] [client 4.189.121.195:11905] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/angelV2.php"] [unique_id "aVEM5LchzOOtNL9VPNLYqgAAAYc"]
[Sun Dec 28 18:56:37.826854 2025] [:error] [pid 42292:tid 42299] [client 4.189.121.195:15611] [client 4.189.121.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/angelV2.php"] [unique_id "aVEM5ZyOrM_vaFx1osY8ewAAAAM"]
[Sun Dec 28 22:57:24.915759 2025] [:error] [pid 29388:tid 29399] [client 132.148.182.30:47810] [client 132.148.182.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.182.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVFFVNoLv2L2zI_SpdUTlwAAAUM"]
[Sun Dec 28 22:57:26.543880 2025] [:error] [pid 29388:tid 29410] [client 132.148.182.30:47820] [client 132.148.182.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.182.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVFFVtoLv2L2zI_SpdUTnAAAAU4"]
[Sun Dec 28 22:57:28.180611 2025] [:error] [pid 29388:tid 29415] [client 132.148.182.30:47832] [client 132.148.182.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.182.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVFFWNoLv2L2zI_SpdUToAAAAVM"]
[Sun Dec 28 22:57:29.808182 2025] [:error] [pid 29437:tid 29474] [client 132.148.182.30:57310] [client 132.148.182.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.182.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVFFWRhDotAbVk6pZLfukgAAAcg"]
[Sun Dec 28 22:57:31.438821 2025] [:error] [pid 29436:tid 29463] [client 132.148.182.30:57320] [client 132.148.182.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.182.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVFFW7chzOOtNL9VPNIoRgAAAZg"]
[Sun Dec 28 22:57:33.115211 2025] [:error] [pid 29388:tid 29411] [client 132.148.182.30:57330] [client 132.148.182.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.182.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVFFXdoLv2L2zI_SpdUTqAAAAU8"]
[Sun Dec 28 22:57:33.115349 2025] [:error] [pid 29388:tid 29411] [client 132.148.182.30:57330] [client 132.148.182.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.182.30, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVFFXdoLv2L2zI_SpdUTqAAAAU8"]
[Sun Dec 28 22:57:33.933282 2025] [:error] [pid 29436:tid 29441] [client 132.148.182.30:57344] [client 132.148.182.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.182.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVFFXbchzOOtNL9VPNIoSAAAAYI"]
[Sun Dec 28 22:57:33.933502 2025] [:error] [pid 29436:tid 29441] [client 132.148.182.30:57344] [client 132.148.182.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.182.30, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVFFXbchzOOtNL9VPNIoSAAAAYI"]
[Sun Dec 28 22:57:34.750114 2025] [:error] [pid 29437:tid 29470] [client 132.148.182.30:57350] [client 132.148.182.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.182.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVFFXhhDotAbVk6pZLfulAAAAcQ"]
[Sun Dec 28 22:57:34.750280 2025] [:error] [pid 29437:tid 29470] [client 132.148.182.30:57350] [client 132.148.182.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.182.30, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVFFXhhDotAbVk6pZLfulAAAAcQ"]
[Sun Dec 28 23:44:06.150226 2025] [:error] [pid 29437:tid 29467] [client 198.98.50.77:22524] [client 198.98.50.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.50.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVFQRhhDotAbVk6pZLf2JwAAAcE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Dec 29 00:51:06.014192 2025] [:error] [pid 46537:tid 46578] [client 182.42.104.32:57839] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVFf-hIwkdHOre8AuwAsSgAAAIo"]
[Mon Dec 29 02:12:01.510481 2025] [autoindex:error] [pid 46536:tid 46542] [client 4.189.144.54:63015] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 02:12:49.917625 2025] [autoindex:error] [pid 46536:tid 46562] [client 4.189.144.54:63015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 02:12:50.998446 2025] [autoindex:error] [pid 46536:tid 46555] [client 4.189.144.54:63015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 29 02:12:52.033035 2025] [autoindex:error] [pid 46536:tid 46547] [client 4.189.144.54:63015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 29 02:12:53.973343 2025] [autoindex:error] [pid 46536:tid 46544] [client 4.189.144.54:63015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 29 02:12:57.804535 2025] [autoindex:error] [pid 46536:tid 46548] [client 4.189.144.54:63015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 29 02:12:58.808283 2025] [autoindex:error] [pid 46536:tid 46542] [client 4.189.144.54:63015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 02:13:00.213130 2025] [autoindex:error] [pid 46536:tid 46556] [client 4.189.144.54:63015] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 04:03:57.036969 2025] [autoindex:error] [pid 11453:tid 11510] [client 4.218.10.83:28379] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 29 04:03:58.158736 2025] [autoindex:error] [pid 11453:tid 11529] [client 4.218.10.83:28379] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 04:03:59.237340 2025] [autoindex:error] [pid 11453:tid 11523] [client 4.218.10.83:28379] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 29 04:03:59.379958 2025] [autoindex:error] [pid 11453:tid 11522] [client 4.218.10.83:28379] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 29 04:04:07.147971 2025] [:error] [pid 11453:tid 11532] [client 4.218.10.83:28379] [client 4.218.10.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.218.10.83, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aVGNN7y-FXnKT7-6pt4lLAAAAJc"], referer: https://duckduckgo.com/
[Mon Dec 29 04:04:12.294750 2025] [autoindex:error] [pid 11453:tid 11511] [client 4.218.10.83:28379] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 29 04:04:12.576808 2025] [autoindex:error] [pid 11453:tid 11516] [client 4.218.10.83:28379] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Dec 29 04:04:14.783988 2025] [autoindex:error] [pid 11453:tid 11520] [client 4.218.10.83:28379] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 04:04:14.922456 2025] [autoindex:error] [pid 11453:tid 11518] [client 4.218.10.83:28379] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Dec 29 04:04:15.057342 2025] [:error] [pid 11453:tid 11515] [client 4.218.10.83:28379] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVGNP7y-FXnKT7-6pt4lSQAAAIY"], referer: https://www.google.de/
[Mon Dec 29 04:04:16.815485 2025] [:error] [pid 37389:tid 37454] [client 4.218.10.83:49582] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/alfa-rex.php"] [unique_id "aVGNQMEYrQKI4GZ26QZtsAAAAQA"], referer: https://www.google.co.uk/
[Mon Dec 29 04:04:17.090333 2025] [autoindex:error] [pid 11452:tid 11489] [client 4.218.10.83:50210] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Cookie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 29 04:04:17.225007 2025] [:error] [pid 11452:tid 11485] [client 4.218.10.83:50210] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aVGNQahBUmuWsliUNqTWcAAAAEM"], referer: https://www.yahoo.com/
[Mon Dec 29 04:04:17.500913 2025] [autoindex:error] [pid 11453:tid 11514] [client 4.218.10.83:56756] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 29 04:04:17.636567 2025] [:error] [pid 11453:tid 11509] [client 4.218.10.83:56756] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aVGNQby-FXnKT7-6pt4lUwAAAIA"], referer: https://duckduckgo.com/
[Mon Dec 29 04:04:17.907460 2025] [:error] [pid 11540:tid 11559] [client 4.218.10.83:44975] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aVGNQQ1izvtkZ6YWaTw7wgAAANE"], referer: https://www.google.co.uk/
[Mon Dec 29 04:04:18.177565 2025] [:error] [pid 11540:tid 11561] [client 4.218.10.83:22102] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aVGNQg1izvtkZ6YWaTw7xAAAANM"], referer: https://duckduckgo.com/
[Mon Dec 29 04:04:18.452423 2025] [autoindex:error] [pid 11540:tid 11563] [client 4.218.10.83:33520] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 29 04:04:18.732282 2025] [autoindex:error] [pid 11540:tid 11565] [client 4.218.10.83:33520] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Dec 29 04:04:18.872379 2025] [autoindex:error] [pid 11540:tid 11558] [client 4.218.10.83:33520] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Dec 29 04:04:19.007526 2025] [:error] [pid 11540:tid 11549] [client 4.218.10.83:33520] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVGNQw1izvtkZ6YWaTw7zgAAAMc"], referer: https://www.yahoo.com/
[Mon Dec 29 04:04:19.278678 2025] [:error] [pid 37389:tid 37458] [client 4.218.10.83:33494] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVGNQ8EYrQKI4GZ26QZttAAAAQQ"], referer: https://www.google.fr/
[Mon Dec 29 04:04:19.555077 2025] [autoindex:error] [pid 37389:tid 37466] [client 4.218.10.83:49580] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Dec 29 04:04:19.695725 2025] [autoindex:error] [pid 37389:tid 37469] [client 4.218.10.83:49580] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Dec 29 04:04:21.106162 2025] [:error] [pid 37389:tid 37465] [client 4.218.10.83:49580] [client 4.218.10.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.218.10.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVGNRcEYrQKI4GZ26QZtuAAAAQs"], referer: https://duckduckgo.com/
[Mon Dec 29 04:27:08.154293 2025] [:error] [pid 37389:tid 37464] [client 167.99.61.218:63674] [client 167.99.61.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aVGSnMEYrQKI4GZ26QZy-gAAAQo"], referer: binance.com
[Mon Dec 29 06:52:38.174492 2025] [:error] [pid 11452:tid 11503] [client 190.92.174.109:58392] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0tqhBUmuWsliUNqT66QAAAFU"]
[Mon Dec 29 06:52:40.504608 2025] [:error] [pid 11451:tid 11455] [client 190.92.174.109:58456] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0uJDUmxySx0Vynm-ipgAAAAA"]
[Mon Dec 29 06:52:42.849498 2025] [:error] [pid 11452:tid 11495] [client 190.92.174.109:58517] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0uqhBUmuWsliUNqT67gAAAE0"]
[Mon Dec 29 06:52:45.183670 2025] [:error] [pid 11540:tid 11551] [client 190.92.174.109:58575] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0vQ1izvtkZ6YWaTxrcAAAAMk"]
[Mon Dec 29 06:52:47.457509 2025] [:error] [pid 37389:tid 37454] [client 190.92.174.109:58638] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0v8EYrQKI4GZ26QaszAAAAQA"]
[Mon Dec 29 06:52:49.738298 2025] [:error] [pid 37389:tid 37468] [client 190.92.174.109:58702] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0wcEYrQKI4GZ26Qas0gAAAQ4"]
[Mon Dec 29 06:52:49.738426 2025] [:error] [pid 37389:tid 37468] [client 190.92.174.109:58702] [client 190.92.174.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 190.92.174.109, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0wcEYrQKI4GZ26Qas0gAAAQ4"]
[Mon Dec 29 06:52:51.201021 2025] [:error] [pid 11451:tid 11455] [client 190.92.174.109:58751] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0w5DUmxySx0Vynm-itgAAAAA"]
[Mon Dec 29 06:52:51.201158 2025] [:error] [pid 11451:tid 11455] [client 190.92.174.109:58751] [client 190.92.174.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 190.92.174.109, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0w5DUmxySx0Vynm-itgAAAAA"]
[Mon Dec 29 06:52:52.592518 2025] [:error] [pid 37389:tid 37456] [client 190.92.174.109:58805] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0xMEYrQKI4GZ26Qas2gAAAQI"]
[Mon Dec 29 06:52:52.592769 2025] [:error] [pid 37389:tid 37456] [client 190.92.174.109:58805] [client 190.92.174.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 190.92.174.109, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0xMEYrQKI4GZ26Qas2gAAAQI"]
[Mon Dec 29 06:52:53.984486 2025] [:error] [pid 37389:tid 37466] [client 190.92.174.109:58853] [client 190.92.174.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.92.174.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0xcEYrQKI4GZ26Qas4gAAAQw"]
[Mon Dec 29 06:52:53.984649 2025] [:error] [pid 37389:tid 37466] [client 190.92.174.109:58853] [client 190.92.174.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 190.92.174.109, counter = 9"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0xcEYrQKI4GZ26Qas4gAAAQw"]
[Mon Dec 29 06:53:29.559606 2025] [:error] [pid 37389:tid 37460] [client 132.148.185.26:56934] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG06cEYrQKI4GZ26QatHQAAAQY"]
[Mon Dec 29 06:53:31.614041 2025] [:error] [pid 37389:tid 37470] [client 132.148.185.26:56936] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG068EYrQKI4GZ26QatIQAAARA"]
[Mon Dec 29 06:53:33.674884 2025] [:error] [pid 37389:tid 37463] [client 132.148.185.26:56948] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG07cEYrQKI4GZ26QatJAAAAQk"]
[Mon Dec 29 06:53:35.681024 2025] [:error] [pid 11540:tid 11544] [client 132.148.185.26:37282] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG07w1izvtkZ6YWaTxrywAAAMI"]
[Mon Dec 29 06:53:37.594412 2025] [:error] [pid 11452:tid 11483] [client 132.148.185.26:37284] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG08ahBUmuWsliUNqT7IQAAAEE"]
[Mon Dec 29 06:53:39.654189 2025] [:error] [pid 11453:tid 11514] [client 132.148.185.26:37288] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG087y-FXnKT7-6pt5RAwAAAIU"]
[Mon Dec 29 06:53:39.654369 2025] [:error] [pid 11453:tid 11514] [client 132.148.185.26:37288] [client 132.148.185.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.185.26, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG087y-FXnKT7-6pt5RAwAAAIU"]
[Mon Dec 29 06:53:40.786503 2025] [:error] [pid 11452:tid 11501] [client 132.148.185.26:37304] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG09KhBUmuWsliUNqT7IwAAAFM"]
[Mon Dec 29 06:53:40.786704 2025] [:error] [pid 11452:tid 11501] [client 132.148.185.26:37304] [client 132.148.185.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.185.26, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG09KhBUmuWsliUNqT7IwAAAFM"]
[Mon Dec 29 06:53:41.915398 2025] [:error] [pid 11452:tid 11484] [client 132.148.185.26:37316] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG09ahBUmuWsliUNqT7JgAAAEI"]
[Mon Dec 29 06:53:41.915637 2025] [:error] [pid 11452:tid 11484] [client 132.148.185.26:37316] [client 132.148.185.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.185.26, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG09ahBUmuWsliUNqT7JgAAAEI"]
[Mon Dec 29 06:53:43.066481 2025] [:error] [pid 11451:tid 11476] [client 132.148.185.26:37322] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG095DUmxySx0Vynm-i5gAAABU"]
[Mon Dec 29 06:53:43.066671 2025] [:error] [pid 11451:tid 11476] [client 132.148.185.26:37322] [client 132.148.185.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.185.26, counter = 9"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG095DUmxySx0Vynm-i5gAAABU"]
[Mon Dec 29 06:53:44.179560 2025] [:error] [pid 37389:tid 37473] [client 132.148.185.26:37324] [client 132.148.185.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0-MEYrQKI4GZ26QatNQAAARM"]
[Mon Dec 29 06:53:44.179763 2025] [:error] [pid 37389:tid 37473] [client 132.148.185.26:37324] [client 132.148.185.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.185.26, counter = 10"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVG0-MEYrQKI4GZ26QatNQAAARM"]
[Mon Dec 29 08:46:16.026566 2025] [:error] [pid 11453:tid 11515] [client 198.98.61.40:10683] [client 198.98.61.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.61.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVHPWLy-FXnKT7-6pt5sUAAAAIY"]
[Mon Dec 29 08:48:31.652449 2025] [:error] [pid 37389:tid 37456] [client 198.98.61.40:32676] [client 198.98.61.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.61.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVHP38EYrQKI4GZ26QbXSQAAAQI"]
[Mon Dec 29 10:15:16.729329 2025] [:error] [pid 11540:tid 11563] [client 205.185.121.77:44873] [client 205.185.121.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.121.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVHkNA1izvtkZ6YWaTyl3wAAANU"]
[Mon Dec 29 14:18:33.147712 2025] [:error] [pid 24343:tid 24362] [client 104.207.39.205:50349] [client 104.207.39.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aVIdOcvqvAa0rISAVIQ48QAAAg4"]
[Mon Dec 29 14:18:40.503434 2025] [:error] [pid 11451:tid 11475] [client 45.3.51.215:12143] [client 45.3.51.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aVIdQJDUmxySx0Vynm_23wAAABQ"]
[Mon Dec 29 14:18:41.074638 2025] [:error] [pid 11452:tid 11486] [client 45.3.38.132:36553] [client 45.3.38.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.svn/wc.db"] [unique_id "aVIdQahBUmuWsliUNqRPDQAAAEQ"]
[Mon Dec 29 14:42:49.310632 2025] [:error] [pid 11453:tid 11525] [client 185.109.217.223:55862] [client 185.109.217.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.109.217.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi6by-FXnKT7-6pt62OAAAAJA"]
[Mon Dec 29 14:42:53.968596 2025] [:error] [pid 11540:tid 11562] [client 185.109.217.223:55910] [client 185.109.217.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.109.217.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi7Q1izvtkZ6YWaTzTfgAAANQ"]
[Mon Dec 29 14:42:57.363675 2025] [:error] [pid 24307:tid 24326] [client 185.109.217.223:55958] [client 185.109.217.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.109.217.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi8S5AURuH8IsFzz5bjgAAAdA"]
[Mon Dec 29 14:42:59.546563 2025] [:error] [pid 11452:tid 11495] [client 185.109.217.223:55986] [client 185.109.217.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.109.217.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi86hBUmuWsliUNqRRfgAAAE0"]
[Mon Dec 29 14:43:01.760671 2025] [:error] [pid 24343:tid 24366] [client 185.109.217.223:56032] [client 185.109.217.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.109.217.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi9cvqvAa0rISAVIQ7eAAAAhI"]
[Mon Dec 29 14:43:03.946916 2025] [:error] [pid 37389:tid 37461] [client 185.109.217.223:56064] [client 185.109.217.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.109.217.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi98EYrQKI4GZ26QYoWgAAAQc"]
[Mon Dec 29 14:43:03.947056 2025] [:error] [pid 37389:tid 37461] [client 185.109.217.223:56064] [client 185.109.217.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 185.109.217.223, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi98EYrQKI4GZ26QYoWgAAAQc"]
[Mon Dec 29 14:43:05.314498 2025] [:error] [pid 37389:tid 37458] [client 185.109.217.223:56082] [client 185.109.217.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.109.217.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi-cEYrQKI4GZ26QYoWwAAAQQ"]
[Mon Dec 29 14:43:05.314691 2025] [:error] [pid 37389:tid 37458] [client 185.109.217.223:56082] [client 185.109.217.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 185.109.217.223, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi-cEYrQKI4GZ26QYoWwAAAQQ"]
[Mon Dec 29 14:43:06.685949 2025] [:error] [pid 24343:tid 24367] [client 185.109.217.223:56104] [client 185.109.217.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.109.217.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi-svqvAa0rISAVIQ7fAAAAhM"]
[Mon Dec 29 14:43:06.686104 2025] [:error] [pid 24343:tid 24367] [client 185.109.217.223:56104] [client 185.109.217.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 185.109.217.223, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi-svqvAa0rISAVIQ7fAAAAhM"]
[Mon Dec 29 14:43:08.057634 2025] [:error] [pid 24343:tid 24369] [client 185.109.217.223:56116] [client 185.109.217.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.109.217.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi_MvqvAa0rISAVIQ7fQAAAhU"]
[Mon Dec 29 14:43:08.057796 2025] [:error] [pid 24343:tid 24369] [client 185.109.217.223:56116] [client 185.109.217.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 185.109.217.223, counter = 9"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVIi_MvqvAa0rISAVIQ7fQAAAhU"]
[Tue Dec 30 01:06:27.838695 2025] [:error] [pid 57193:tid 57201] [client 20.255.196.214:2048] [client 20.255.196.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.255.196.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVK1E6EzOljppv-JqIqzjQAAAYY"]
[Tue Dec 30 01:06:29.555702 2025] [:error] [pid 9043:tid 9094] [client 20.255.196.214:2049] [client 20.255.196.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.255.196.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVK1FQpScn3s_Xelo-Gd2wAAAFU"]
[Tue Dec 30 01:06:32.416256 2025] [:error] [pid 9128:tid 9145] [client 20.255.196.214:2050] [client 20.255.196.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.255.196.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVK1GMASbrOSyCr7LVB0awAAAM8"]
[Tue Dec 30 01:06:33.841654 2025] [:error] [pid 9042:tid 9055] [client 20.255.196.214:2051] [client 20.255.196.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.255.196.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVK1GTotupvrX8RtYEJxAwAAAAk"]
[Tue Dec 30 01:06:35.295090 2025] [:error] [pid 42335:tid 42378] [client 20.255.196.214:2052] [client 20.255.196.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.255.196.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVK1G5Ts64_nkFDMkPyVvAAAAQI"]
[Tue Dec 30 01:06:36.718941 2025] [:error] [pid 9128:tid 9137] [client 20.255.196.214:2053] [client 20.255.196.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.255.196.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVK1HMASbrOSyCr7LVB0bgAAAMc"]
[Tue Dec 30 01:06:36.719068 2025] [:error] [pid 9128:tid 9137] [client 20.255.196.214:2053] [client 20.255.196.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 20.255.196.214, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVK1HMASbrOSyCr7LVB0bgAAAMc"]
[Tue Dec 30 01:06:37.330593 2025] [:error] [pid 9043:tid 9086] [client 20.255.196.214:2054] [client 20.255.196.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.255.196.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVK1HQpScn3s_Xelo-Gd3AAAAE0"]
[Tue Dec 30 01:06:37.330760 2025] [:error] [pid 9043:tid 9086] [client 20.255.196.214:2054] [client 20.255.196.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 20.255.196.214, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVK1HQpScn3s_Xelo-Gd3AAAAE0"]
[Tue Dec 30 05:24:15.079155 2025] [authz_core:error] [pid 55721:tid 55744] [client 4.241.185.64:45615] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/akismet.php, referer: https://www.bing.com/
[Tue Dec 30 05:24:22.323146 2025] [:error] [pid 55721:tid 55738] [client 4.241.185.64:45615] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/4.php"] [unique_id "aVLxhj7Pjf1FlL091oWhhQAAAAc"], referer: https://www.yahoo.com/
[Tue Dec 30 05:24:22.671874 2025] [autoindex:error] [pid 55722:tid 55767] [client 4.241.185.64:63734] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Dec 30 05:24:22.905225 2025] [autoindex:error] [pid 55722:tid 55780] [client 4.241.185.64:63734] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Dec 30 05:24:23.018287 2025] [:error] [pid 55722:tid 55770] [client 4.241.185.64:63734] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVLxh9APH64hQFBaDRiP0wAAAEw"], referer: https://www.google.com/
[Tue Dec 30 05:24:23.245892 2025] [:error] [pid 21424:tid 21430] [client 4.241.185.64:63741] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aVLxh_6vZjHcdZm1ozCnFgAAAQQ"], referer: https://www.google.co.uk/
[Tue Dec 30 05:24:23.472544 2025] [:error] [pid 55827:tid 55851] [client 4.241.185.64:42226] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aVLxhzGIC-EorhVIeG_VGAAAANY"], referer: https://www.google.co.uk/
[Tue Dec 30 05:24:23.701045 2025] [:error] [pid 21424:tid 21439] [client 4.241.185.64:5869] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aVLxh_6vZjHcdZm1ozCnGAAAAQ0"], referer: https://www.google.co.uk/
[Tue Dec 30 05:24:23.927672 2025] [:error] [pid 55724:tid 55790] [client 4.241.185.64:41583] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aVLxh_2xaJh1srfKTGRdxwAAAIU"], referer: https://www.yahoo.com/
[Tue Dec 30 05:24:24.154016 2025] [:error] [pid 55721:tid 55746] [client 4.241.185.64:45656] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aVLxiD7Pjf1FlL091oWhigAAAA8"], referer: https://www.google.fr/
[Tue Dec 30 05:24:24.380968 2025] [:error] [pid 55827:tid 55852] [client 4.241.185.64:61872] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aVLxiDGIC-EorhVIeG_VHgAAANc"], referer: https://www.google.fr/
[Tue Dec 30 05:24:24.609061 2025] [:error] [pid 55724:tid 55791] [client 4.241.185.64:45627] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aVLxiP2xaJh1srfKTGRdyQAAAIY"], referer: https://www.yahoo.com/
[Tue Dec 30 05:24:24.836265 2025] [:error] [pid 21424:tid 21435] [client 4.241.185.64:45695] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/gelay.php"] [unique_id "aVLxiP6vZjHcdZm1ozCnGwAAAQk"], referer: https://www.google.com/
[Tue Dec 30 05:24:25.074187 2025] [:error] [pid 55722:tid 55777] [client 4.241.185.64:45596] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/index.php"] [unique_id "aVLxidAPH64hQFBaDRiP2AAAAFM"], referer: https://duckduckgo.com/
[Tue Dec 30 05:24:25.439599 2025] [autoindex:error] [pid 21424:tid 21429] [client 4.241.185.64:42874] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Dec 30 05:24:25.675324 2025] [autoindex:error] [pid 21424:tid 21447] [client 4.241.185.64:42874] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Dec 30 05:24:25.788147 2025] [:error] [pid 21424:tid 21450] [client 4.241.185.64:42874] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVLxif6vZjHcdZm1ozCnIQAAARg"], referer: https://duckduckgo.com/
[Tue Dec 30 05:24:26.018730 2025] [:error] [pid 55722:tid 55774] [client 4.241.185.64:63686] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aVLxitAPH64hQFBaDRiP2gAAAFA"], referer: https://www.google.co.uk/
[Tue Dec 30 05:24:26.272377 2025] [:error] [pid 55722:tid 55765] [client 4.241.185.64:45585] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mini.php"] [unique_id "aVLxitAPH64hQFBaDRiP2wAAAEc"], referer: https://www.google.de/
[Tue Dec 30 05:24:26.500155 2025] [:error] [pid 55722:tid 55769] [client 4.241.185.64:63697] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aVLxitAPH64hQFBaDRiP3AAAAEs"], referer: https://www.bing.com/
[Tue Dec 30 05:24:26.727170 2025] [:error] [pid 55827:tid 55839] [client 4.241.185.64:45652] [client 4.241.185.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVLxijGIC-EorhVIeG_VKAAAAMo"], referer: https://www.google.com/
[Tue Dec 30 06:54:22.413241 2025] [:error] [pid 55724:tid 55794] [client 73.159.162.51:2463] [client 73.159.162.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 73.159.162.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVMGnv2xaJh1srfKTGRzZgAAAIk"]
[Tue Dec 30 13:11:05.471230 2025] [:error] [pid 28825:tid 28899] [client 103.77.107.57:58619] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aVNe6T6dbc1G2hX-KfQN3gAAANQ"]
[Tue Dec 30 13:11:06.035464 2025] [:error] [pid 38777:tid 38785] [client 103.77.107.57:59236] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aVNe6mLn9GPxJXPhnHau6gAAAEU"]
[Tue Dec 30 15:37:09.340850 2025] [:error] [pid 28824:tid 28855] [client 103.65.236.149:60052] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aVOBJX8FhtgLvBhuCR0cZwAAAIo"]
[Tue Dec 30 15:37:09.988310 2025] [:error] [pid 47553:tid 47564] [client 103.65.236.149:60099] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aVOBJbvhy9HerwSnwIS8_AAAAYk"]
[Tue Dec 30 17:14:34.356336 2025] [:error] [pid 28825:tid 28885] [client 146.190.63.248:47010] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2/api-docs"] [unique_id "aVOX-j6dbc1G2hX-KfQ3_gAAAMY"]
[Tue Dec 30 17:14:35.353449 2025] [:error] [pid 28825:tid 28887] [client 146.190.63.248:44458] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3/api-docs"] [unique_id "aVOX-z6dbc1G2hX-KfQ4AAAAAMg"]
[Tue Dec 30 17:14:36.354962 2025] [:error] [pid 47553:tid 47559] [client 146.190.63.248:44474] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api-docs/swagger.json"] [unique_id "aVOX_Lvhy9HerwSnwITTzAAAAYQ"]
[Tue Dec 30 17:14:37.356207 2025] [:error] [pid 28825:tid 28901] [client 146.190.63.248:44480] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api/swagger.json"] [unique_id "aVOX_T6dbc1G2hX-KfQ4AQAAANY"]
[Tue Dec 30 17:14:38.354038 2025] [:error] [pid 47553:tid 47576] [client 146.190.63.248:44488] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/@vite/env"] [unique_id "aVOX_rvhy9HerwSnwITT0QAAAZU"]
[Tue Dec 30 17:14:39.355168 2025] [:error] [pid 47553:tid 47575] [client 146.190.63.248:44496] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/actuator/env"] [unique_id "aVOX_7vhy9HerwSnwITT0wAAAZQ"]
[Tue Dec 30 17:14:40.360578 2025] [:error] [pid 28954:tid 28980] [client 146.190.63.248:44504] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aVOYAKRZgqk7uuu8M0wW6AAAABg"]
[Tue Dec 30 17:14:41.357865 2025] [:error] [pid 28825:tid 28880] [client 146.190.63.248:44508] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server"] [unique_id "aVOYAT6dbc1G2hX-KfQ4BwAAAME"]
[Tue Dec 30 17:14:42.359017 2025] [:error] [pid 38777:tid 38787] [client 146.190.63.248:44512] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aVOYAmLn9GPxJXPhnHbvnAAAAEc"]
[Tue Dec 30 17:14:44.360615 2025] [:error] [pid 28826:tid 28910] [client 146.190.63.248:44526] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about"] [unique_id "aVOYBPOyQggePm1Ed9t1sQAAAQQ"]
[Tue Dec 30 17:14:45.357958 2025] [:error] [pid 47441:tid 47446] [client 146.190.63.248:60126] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/debug/default/view"] [unique_id "aVOYBS6d2esGSN6Ne3MnPAAAAUI"]
[Tue Dec 30 17:14:46.360983 2025] [:error] [pid 28826:tid 28919] [client 146.190.63.248:60132] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2/_catalog"] [unique_id "aVOYBvOyQggePm1Ed9t1swAAAQw"]
[Tue Dec 30 17:14:47.358166 2025] [:error] [pid 38777:tid 38798] [client 146.190.63.248:60140] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aVOYB2Ln9GPxJXPhnHbvoAAAAFI"]
[Tue Dec 30 17:14:48.359033 2025] [:error] [pid 47441:tid 47445] [client 146.190.63.248:60150] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server-status"] [unique_id "aVOYCC6d2esGSN6Ne3MnPwAAAUE"]
[Tue Dec 30 17:14:49.364492 2025] [:error] [pid 38777:tid 38792] [client 146.190.63.248:60160] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login.action"] [unique_id "aVOYCWLn9GPxJXPhnHbvowAAAEw"]
[Tue Dec 30 17:14:50.358519 2025] [:error] [pid 47553:tid 47575] [client 146.190.63.248:60164] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/_all_dbs"] [unique_id "aVOYCrvhy9HerwSnwITT4AAAAZQ"]
[Tue Dec 30 17:14:51.359413 2025] [:error] [pid 28824:tid 28847] [client 146.190.63.248:60166] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aVOYC38FhtgLvBhuCR0pbwAAAII"]
[Tue Dec 30 17:14:52.360084 2025] [:error] [pid 28954:tid 28975] [client 146.190.63.248:60180] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aVOYDKRZgqk7uuu8M0wW9wAAABM"]
[Tue Dec 30 17:14:54.361630 2025] [:error] [pid 28824:tid 28846] [client 146.190.63.248:60188] [client 146.190.63.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aVOYDn8FhtgLvBhuCR0pcwAAAIE"]
[Tue Dec 30 17:14:55.423777 2025] [:error] [pid 47441:tid 47444] [client 146.190.63.248:50720] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aVOYDy6d2esGSN6Ne3MnRQAAAUA"]
[Tue Dec 30 17:14:56.409756 2025] [:error] [pid 28824:tid 28859] [client 146.190.63.248:50736] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.json"] [unique_id "aVOYEH8FhtgLvBhuCR0pdgAAAI4"]
[Tue Dec 30 17:14:57.400646 2025] [:error] [pid 47441:tid 47451] [client 146.190.63.248:50740] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/telescope/requests"] [unique_id "aVOYES6d2esGSN6Ne3MnRgAAAUc"]
[Tue Dec 30 17:14:58.384859 2025] [:error] [pid 28954:tid 28958] [client 146.190.63.248:50754] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aVOYEqRZgqk7uuu8M0wXBAAAAAI"]
[Tue Dec 30 17:14:59.394094 2025] [:error] [pid 28954:tid 28975] [client 146.190.63.248:50760] [client 146.190.63.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVOYE6RZgqk7uuu8M0wXCAAAABM"]
[Tue Dec 30 17:38:05.132483 2025] [:error] [pid 38777:tid 38783] [client 170.106.15.3:53532] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVOdfWLn9GPxJXPhnHbz2gAAAEM"]
[Tue Dec 30 19:55:51.583275 2025] [:error] [pid 38777:tid 38780] [client 131.161.66.129:19111] [client 131.161.66.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.161.66.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVO9x2Ln9GPxJXPhnHYOlAAAAEE"]
[Tue Dec 30 20:54:15.028873 2025] [:error] [pid 28824:tid 28855] [client 103.77.106.57:54089] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "aVPLd38FhtgLvBhuCR1MqgAAAIo"]
[Tue Dec 30 20:54:17.743809 2025] [:error] [pid 28826:tid 28910] [client 103.77.106.57:54542] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/postnews.php"] [unique_id "aVPLefOyQggePm1Ed9ubbQAAAQQ"]
[Tue Dec 30 20:54:19.323358 2025] [:error] [pid 28826:tid 28907] [client 103.77.106.57:54705] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/postnews.php"] [unique_id "aVPLe_OyQggePm1Ed9ubcgAAAQE"]
[Tue Dec 30 21:13:04.277968 2025] [:error] [pid 47441:tid 47454] [client 43.166.134.47:43802] [client 43.166.134.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVPP4C6d2esGSN6Ne3Ne1wAAAUo"]
[Wed Dec 31 00:03:23.051329 2025] [autoindex:error] [pid 47553:tid 47555] [client 159.89.181.56:53455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 00:19:17.502470 2025] [:error] [pid 49982:tid 50027] [client 45.130.83.74:60123] [client 45.130.83.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVP7hSFJSHqasQiscZ7SxQAAAMw"]
[Wed Dec 31 00:19:18.397266 2025] [:error] [pid 50068:tid 50070] [client 45.130.83.84:59981] [client 45.130.83.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aVP7hvJem-CRnWG3ZuxjPQAAAAA"]
[Wed Dec 31 00:19:19.278785 2025] [:error] [pid 49981:tid 50006] [client 45.130.83.74:43229] [client 45.130.83.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/media/system/js/core.js"] [unique_id "aVP7h5CCXHPw9uuzhExQygAAAJU"]
[Wed Dec 31 03:05:59.556321 2025] [:error] [pid 49983:tid 50059] [client 195.178.110.190:48938] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aVQil2iL1pay2WifcvawZwAAARE"]
[Wed Dec 31 04:15:58.468700 2025] [:error] [pid 33003:tid 33053] [client 172.213.220.99:8111] [client 172.213.220.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.213.220.99, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVQy_rOkdrCgTt0MxWLERwAAAE8"]
[Wed Dec 31 04:16:06.823463 2025] [:error] [pid 33003:tid 33059] [client 172.213.220.99:8111] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aVQzBrOkdrCgTt0MxWLEcQAAAFU"]
[Wed Dec 31 04:16:10.405807 2025] [:error] [pid 33002:tid 33027] [client 172.213.220.99:8086] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aVQzCvnsZEcORmTFnriKpwAAABA"]
[Wed Dec 31 04:16:13.739188 2025] [:error] [pid 33003:tid 33043] [client 172.213.220.99:7324] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aVQzDbOkdrCgTt0MxWLEewAAAEU"]
[Wed Dec 31 04:16:14.862917 2025] [:error] [pid 33002:tid 33032] [client 172.213.220.99:8118] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aVQzDvnsZEcORmTFnriKrAAAABU"]
[Wed Dec 31 04:16:16.105898 2025] [:error] [pid 33004:tid 33067] [client 172.213.220.99:7313] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aVQzEPogj9CrK-80KNz1xQAAAII"]
[Wed Dec 31 04:16:18.413791 2025] [:error] [pid 33002:tid 33026] [client 172.213.220.99:8115] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aVQzEvnsZEcORmTFnriKswAAAA8"]
[Wed Dec 31 04:16:20.349045 2025] [:error] [pid 33004:tid 33075] [client 172.213.220.99:8071] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aVQzFPogj9CrK-80KNz1ywAAAIo"]
[Wed Dec 31 04:16:21.831930 2025] [:error] [pid 33003:tid 33042] [client 172.213.220.99:7299] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aVQzFbOkdrCgTt0MxWLEggAAAEQ"]
[Wed Dec 31 04:16:23.716609 2025] [:error] [pid 33002:tid 33018] [client 172.213.220.99:8087] [client 172.213.220.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aVQzF_nsZEcORmTFnriKugAAAAc"]
[Wed Dec 31 04:16:26.744514 2025] [:error] [pid 33002:tid 33032] [client 172.213.220.99:7323] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aVQzGvnsZEcORmTFnriKvQAAABU"]
[Wed Dec 31 04:16:28.028424 2025] [:error] [pid 33002:tid 33013] [client 172.213.220.99:8113] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aVQzHPnsZEcORmTFnriKwQAAAAI"]
[Wed Dec 31 04:16:30.418790 2025] [:error] [pid 33002:tid 33019] [client 172.213.220.99:8094] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aVQzHvnsZEcORmTFnriKxAAAAAg"]
[Wed Dec 31 04:16:31.683383 2025] [:error] [pid 33002:tid 33025] [client 172.213.220.99:8073] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aVQzH_nsZEcORmTFnriKxwAAAA4"]
[Wed Dec 31 04:16:33.323546 2025] [:error] [pid 33002:tid 33034] [client 172.213.220.99:7300] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aVQzIfnsZEcORmTFnriKywAAABc"]
[Wed Dec 31 04:16:35.924144 2025] [:error] [pid 33004:tid 33089] [client 172.213.220.99:8093] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aVQzI_ogj9CrK-80KNz18gAAAJg"]
[Wed Dec 31 04:16:37.235197 2025] [:error] [pid 33109:tid 33113] [client 172.213.220.99:8080] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aVQzJcYN9k_fnLM-n463iAAAAMI"]
[Wed Dec 31 04:16:38.270683 2025] [:error] [pid 33109:tid 33115] [client 172.213.220.99:8066] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aVQzJsYN9k_fnLM-n463jAAAAMQ"]
[Wed Dec 31 04:16:41.725049 2025] [:error] [pid 33002:tid 33011] [client 172.213.220.99:7325] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aVQzKfnsZEcORmTFnriK0gAAAAA"]
[Wed Dec 31 04:16:43.753594 2025] [:error] [pid 33004:tid 33067] [client 172.213.220.99:8121] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aVQzK_ogj9CrK-80KNz1_QAAAII"]
[Wed Dec 31 04:16:45.195669 2025] [:error] [pid 33003:tid 33045] [client 172.213.220.99:8081] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aVQzLbOkdrCgTt0MxWLEqwAAAEc"]
[Wed Dec 31 04:16:46.689343 2025] [:error] [pid 33109:tid 33116] [client 172.213.220.99:7318] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aVQzLsYN9k_fnLM-n463mQAAAMU"]
[Wed Dec 31 04:16:49.243006 2025] [:error] [pid 33109:tid 33135] [client 172.213.220.99:8127] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aVQzMcYN9k_fnLM-n463nwAAANg"]
[Wed Dec 31 04:16:51.644709 2025] [:error] [pid 33109:tid 33111] [client 172.213.220.99:7306] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aVQzM8YN9k_fnLM-n463owAAAMA"]
[Wed Dec 31 04:16:53.364751 2025] [:error] [pid 33109:tid 33115] [client 172.213.220.99:8109] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aVQzNcYN9k_fnLM-n463qQAAAMQ"]
[Wed Dec 31 04:16:55.228916 2025] [:error] [pid 33002:tid 33025] [client 172.213.220.99:15051] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aVQzN_nsZEcORmTFnriK5wAAAA4"]
[Wed Dec 31 04:16:56.225623 2025] [:error] [pid 33002:tid 33021] [client 172.213.220.99:15078] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aVQzOPnsZEcORmTFnriK6QAAAAo"]
[Wed Dec 31 04:16:58.281526 2025] [:error] [pid 33002:tid 33027] [client 172.213.220.99:7296] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aVQzOvnsZEcORmTFnriK7AAAABA"]
[Wed Dec 31 04:16:59.834057 2025] [:error] [pid 33002:tid 33028] [client 172.213.220.99:7322] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aVQzO_nsZEcORmTFnriK7gAAABE"]
[Wed Dec 31 04:17:01.115747 2025] [:error] [pid 33002:tid 33032] [client 172.213.220.99:8078] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aVQzPfnsZEcORmTFnriK8AAAABU"]
[Wed Dec 31 04:17:02.012674 2025] [:error] [pid 33003:tid 33060] [client 172.213.220.99:7356] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/C.php"] [unique_id "aVQzPrOkdrCgTt0MxWLE3gAAAFY"]
[Wed Dec 31 04:17:02.991527 2025] [:error] [pid 33003:tid 33038] [client 172.213.220.99:8064] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/C.php"] [unique_id "aVQzPrOkdrCgTt0MxWLE4QAAAEA"]
[Wed Dec 31 04:17:04.086093 2025] [:error] [pid 33109:tid 33114] [client 172.213.220.99:7297] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/C.php"] [unique_id "aVQzQMYN9k_fnLM-n463xAAAAMM"]
[Wed Dec 31 04:17:04.865630 2025] [:error] [pid 33002:tid 33012] [client 172.213.220.99:8119] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/C.php"] [unique_id "aVQzQPnsZEcORmTFnriK8gAAAAE"]
[Wed Dec 31 04:17:16.816637 2025] [:error] [pid 33004:tid 33072] [client 172.213.220.99:7303] [client 172.213.220.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aVQzTPogj9CrK-80KNz2TQAAAIc"]
[Wed Dec 31 04:17:23.509391 2025] [:error] [pid 33002:tid 33023] [client 172.213.220.99:8102] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVQzU_nsZEcORmTFnriLVAAAAAw"]
[Wed Dec 31 04:17:24.570105 2025] [:error] [pid 33109:tid 33111] [client 172.213.220.99:8082] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVQzVMYN9k_fnLM-n464FQAAAMA"]
[Wed Dec 31 04:17:25.598375 2025] [:error] [pid 33003:tid 33039] [client 172.213.220.99:15046] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVQzVbOkdrCgTt0MxWLFDAAAAEE"]
[Wed Dec 31 04:17:26.848742 2025] [:error] [pid 33109:tid 33129] [client 172.213.220.99:7312] [client 172.213.220.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVQzVsYN9k_fnLM-n464GgAAANI"]
[Wed Dec 31 07:16:26.038114 2025] [:error] [pid 42536:tid 42539] [client 4.194.133.126:29008] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aVRdSgY1iaVE0V_WQ59O1wAAAUE"], referer: https://www.google.co.uk/
[Wed Dec 31 07:16:26.294210 2025] [:error] [pid 42410:tid 42457] [client 4.194.133.126:29001] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVRdSo88GyeTD4x6y_nZ4QAAAJI"], referer: https://www.google.co.uk/
[Wed Dec 31 07:16:37.389907 2025] [autoindex:error] [pid 42410:tid 42442] [client 4.194.133.126:29007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Dec 31 07:16:39.324648 2025] [authz_core:error] [pid 42410:tid 42453] [client 4.194.133.126:29007] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/akismet.php, referer: https://www.bing.com/
[Wed Dec 31 07:16:39.416786 2025] [authz_core:error] [pid 42410:tid 42439] [client 4.194.133.126:29007] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/, referer: https://duckduckgo.com/
[Wed Dec 31 07:16:45.376154 2025] [autoindex:error] [pid 42410:tid 42461] [client 4.194.133.126:29007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 31 07:16:45.468323 2025] [autoindex:error] [pid 42410:tid 42450] [client 4.194.133.126:29007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 31 07:16:45.568021 2025] [autoindex:error] [pid 42410:tid 42440] [client 4.194.133.126:29007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Dec 31 07:16:45.667529 2025] [:error] [pid 42410:tid 42441] [client 4.194.133.126:29007] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVRdXY88GyeTD4x6y_naBQAAAII"], referer: https://duckduckgo.com/
[Wed Dec 31 07:16:45.868164 2025] [:error] [pid 42409:tid 42429] [client 4.194.133.126:28929] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aVRdXZ1RyrsdhRzKCqGeJAAAAFE"], referer: https://www.google.de/
[Wed Dec 31 07:16:46.075937 2025] [:error] [pid 42536:tid 42558] [client 4.194.133.126:28933] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aVRdXgY1iaVE0V_WQ59O9wAAAVQ"], referer: https://www.google.com/
[Wed Dec 31 07:16:46.268917 2025] [autoindex:error] [pid 42536:tid 42541] [client 4.194.133.126:29034] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 31 07:16:46.355917 2025] [:error] [pid 42536:tid 42542] [client 4.194.133.126:29034] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aVRdXgY1iaVE0V_WQ59O-gAAAUQ"], referer: https://www.yahoo.com/
[Wed Dec 31 07:16:46.543732 2025] [autoindex:error] [pid 42536:tid 42556] [client 4.194.133.126:29024] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Dec 31 07:16:46.630948 2025] [:error] [pid 42536:tid 42546] [client 4.194.133.126:29024] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aVRdXgY1iaVE0V_WQ59O_QAAAUg"], referer: https://www.google.com/
[Wed Dec 31 07:16:46.810889 2025] [autoindex:error] [pid 42536:tid 42554] [client 4.194.133.126:29013] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Dec 31 07:16:46.898271 2025] [:error] [pid 42536:tid 42548] [client 4.194.133.126:29013] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aVRdXgY1iaVE0V_WQ59O_wAAAUo"], referer: https://www.google.co.uk/
[Wed Dec 31 07:16:47.072767 2025] [:error] [pid 42409:tid 42414] [client 4.194.133.126:28938] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aVRdX51RyrsdhRzKCqGeJwAAAEI"], referer: https://duckduckgo.com/
[Wed Dec 31 07:16:47.250158 2025] [:error] [pid 42409:tid 42413] [client 4.194.133.126:29040] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aVRdX51RyrsdhRzKCqGeKAAAAEE"], referer: https://www.yahoo.com/
[Wed Dec 31 07:16:47.435789 2025] [:error] [pid 42410:tid 42459] [client 4.194.133.126:29012] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/gelay.php"] [unique_id "aVRdX488GyeTD4x6y_naCwAAAJQ"], referer: https://www.yahoo.com/
[Wed Dec 31 07:16:47.615955 2025] [:error] [pid 46814:tid 46835] [client 4.194.133.126:29029] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/index.php"] [unique_id "aVRdXyb1xN9EDaw4QDvXegAAABM"], referer: https://www.google.co.uk/
[Wed Dec 31 07:16:47.795981 2025] [autoindex:error] [pid 42409:tid 42424] [client 4.194.133.126:29003] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 31 07:16:47.888526 2025] [autoindex:error] [pid 42409:tid 42433] [client 4.194.133.126:29003] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Dec 31 07:16:47.980062 2025] [autoindex:error] [pid 42409:tid 42432] [client 4.194.133.126:29003] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 31 07:16:48.067375 2025] [:error] [pid 42409:tid 42434] [client 4.194.133.126:29003] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aVRdYJ1RyrsdhRzKCqGeLQAAAFY"], referer: https://www.google.com/
[Wed Dec 31 07:16:48.249516 2025] [autoindex:error] [pid 42536:tid 42552] [client 4.194.133.126:29042] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 31 07:16:48.336836 2025] [:error] [pid 42536:tid 42558] [client 4.194.133.126:29042] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mini.php"] [unique_id "aVRdYAY1iaVE0V_WQ59PBwAAAVQ"], referer: https://www.yahoo.com/
[Wed Dec 31 07:16:48.518318 2025] [autoindex:error] [pid 42536:tid 42547] [client 4.194.133.126:28999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Dec 31 07:16:48.605158 2025] [:error] [pid 42536:tid 42540] [client 4.194.133.126:28999] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aVRdYAY1iaVE0V_WQ59PCQAAAUI"], referer: https://www.bing.com/
[Wed Dec 31 07:16:48.778053 2025] [:error] [pid 42504:tid 42511] [client 4.194.133.126:29014] [client 4.194.133.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVRdYFg0lj8Dy7rLxBD0hwAAAQQ"], referer: https://duckduckgo.com/
[Wed Dec 31 07:16:48.972720 2025] [autoindex:error] [pid 42409:tid 42423] [client 4.194.133.126:29031] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Dec 31 15:55:57.588593 2025] [:error] [pid 48715:tid 48788] [client 101.33.81.73:44050] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVTXDWamQpQY7KfuoW05HwAAAJA"]
[Wed Dec 31 16:34:54.077755 2025] [autoindex:error] [pid 48833:tid 48850] [client 138.197.17.1:61285] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 18:06:43.795136 2025] [:error] [pid 8068:tid 8077] [client 209.141.34.83:7504] [client 209.141.34.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.34.83, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVT1sySVtzoWnijCxFZEVwAAAcc"]
[Wed Dec 31 18:06:48.701881 2025] [:error] [pid 8068:tid 8093] [client 209.141.34.83:7504] [client 209.141.34.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.34.83, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVT1uCSVtzoWnijCxFZEaQAAAdc"]
[Wed Dec 31 18:10:57.694241 2025] [:error] [pid 8068:tid 8079] [client 142.93.189.195:43160] [client 142.93.189.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aVT2sSSVtzoWnijCxFZGIwAAAck"]
[Wed Dec 31 20:23:46.602415 2025] [:error] [pid 7576:tid 7588] [client 165.227.108.154:56748] [client 165.227.108.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aVUV0qFUpQkpGJNxC__ChgAAAUo"]
[Wed Dec 31 21:37:31.443608 2025] [:error] [pid 7800:tid 7816] [client 187.19.156.67:45719] [client 187.19.156.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.19.156.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVUnGyN6RFoECeReAPVzCwAAAY0"]
[Wed Dec 31 21:47:45.517918 2025] [:error] [pid 48715:tid 48784] [client 121.229.185.160:56532] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVUpgWamQpQY7KfuoW1xXAAAAIw"]
[Thu Jan 01 03:16:52.167209 2026] [:error] [pid 28473:tid 28564] [client 43.131.243.61:36694] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVV2pJad3fuMUW4M_5i2OgAAAEA"]
[Thu Jan 01 04:16:17.781519 2026] [:error] [pid 58818:tid 58870] [client 120.71.59.24:37371] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVWEkWr6b3Nsqkrqu824fwAAAFE"]
[Thu Jan 01 05:15:12.270343 2026] [:error] [pid 58924:tid 58944] [client 187.19.156.67:60486] [client 187.19.156.67] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aVWSYDYXM8NvhWQPUGuX2wAAANI"]
[Thu Jan 01 05:16:54.140101 2026] [:error] [pid 58924:tid 58944] [client 187.19.156.67:7025] [client 187.19.156.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.19.156.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVWSxjYXM8NvhWQPUGuYhwAAANI"]
[Thu Jan 01 07:11:35.261087 2026] [:error] [pid 58370:tid 58396] [client 43.130.102.7:56746] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVWtpzkIHVNixymRHHf_HAAAARg"]
[Thu Jan 01 11:15:56.134055 2026] [:error] [pid 58819:tid 58902] [client 43.157.147.3:52308] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVXm7BMbLE49waxUJzP1DwAAAJY"]
[Thu Jan 01 14:53:54.057877 2026] [:error] [pid 58924:tid 58944] [client 43.164.196.57:37958] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVYaAjYXM8NvhWQPUGs8TwAAANI"]
[Thu Jan 01 18:42:10.434965 2026] [:error] [pid 32657:tid 32699] [client 162.62.213.187:47762] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVZPgkgCX-FBZ_DWvxYfCwAAAEo"]
[Thu Jan 01 22:06:29.541094 2026] [:error] [pid 995:tid 998] [client 170.106.35.187:41076] [client 170.106.35.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVZ_ZWJVFefxwdkvFzgIsAAAAQA"]
[Fri Jan 02 05:33:29.925316 2026] [:error] [pid 63100:tid 63180] [client 117.33.163.216:35100] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVboKTuUXUKd3KTnKl-O7wAAAJM"]
[Fri Jan 02 06:00:56.399967 2026] [:error] [pid 63208:tid 63230] [client 101.33.66.34:45372] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVbumHKLI9INGPLzfneBjAAAANM"]
[Fri Jan 02 09:38:24.605719 2026] [:error] [pid 63208:tid 63235] [client 159.89.127.165:49802] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2/api-docs"] [unique_id "aVchkHKLI9INGPLzfnfZ0gAAANg"]
[Fri Jan 02 09:38:25.591867 2026] [:error] [pid 63098:tid 63115] [client 159.89.127.165:49810] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3/api-docs"] [unique_id "aVchkcez9k78gUs48krWiQAAAAg"]
[Fri Jan 02 09:38:26.598938 2026] [:error] [pid 50186:tid 50202] [client 159.89.127.165:49826] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api-docs/swagger.json"] [unique_id "aVchklXqK_iX4f-S70LJ3AAAAY4"]
[Fri Jan 02 09:38:27.591075 2026] [:error] [pid 50186:tid 50207] [client 159.89.127.165:49838] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api/swagger.json"] [unique_id "aVchk1XqK_iX4f-S70LJ3wAAAZM"]
[Fri Jan 02 09:38:28.594049 2026] [:error] [pid 63099:tid 63142] [client 159.89.127.165:49846] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/@vite/env"] [unique_id "aVchlMmCZokRPYUhzvhaOgAAAEg"]
[Fri Jan 02 09:38:29.593499 2026] [:error] [pid 63099:tid 63147] [client 159.89.127.165:49848] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/actuator/env"] [unique_id "aVchlcmCZokRPYUhzvhaPgAAAE0"]
[Fri Jan 02 09:38:30.595260 2026] [:error] [pid 50186:tid 50206] [client 159.89.127.165:49852] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aVchllXqK_iX4f-S70LJ5QAAAZI"]
[Fri Jan 02 09:38:31.600074 2026] [:error] [pid 50186:tid 50194] [client 159.89.127.165:49856] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server"] [unique_id "aVchl1XqK_iX4f-S70LJ6QAAAYY"]
[Fri Jan 02 09:38:32.598811 2026] [:error] [pid 50186:tid 50189] [client 159.89.127.165:49860] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aVchmFXqK_iX4f-S70LJ6wAAAYE"]
[Fri Jan 02 09:38:34.599203 2026] [:error] [pid 63208:tid 63232] [client 159.89.127.165:60442] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about"] [unique_id "aVchmnKLI9INGPLzfnfZ5AAAANU"]
[Fri Jan 02 09:38:35.598795 2026] [:error] [pid 63208:tid 63231] [client 159.89.127.165:60454] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/debug/default/view"] [unique_id "aVchm3KLI9INGPLzfnfZ5wAAANQ"]
[Fri Jan 02 09:38:36.600734 2026] [:error] [pid 63099:tid 63154] [client 159.89.127.165:60466] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2/_catalog"] [unique_id "aVchnMmCZokRPYUhzvhaQwAAAFQ"]
[Fri Jan 02 09:38:37.600007 2026] [:error] [pid 63208:tid 63233] [client 159.89.127.165:60480] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aVchnXKLI9INGPLzfnfZ7gAAANY"]
[Fri Jan 02 09:38:38.601022 2026] [:error] [pid 50186:tid 50189] [client 159.89.127.165:60486] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server-status"] [unique_id "aVchnlXqK_iX4f-S70LJ_wAAAYE"]
[Fri Jan 02 09:38:39.600402 2026] [:error] [pid 50186:tid 50209] [client 159.89.127.165:60502] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login.action"] [unique_id "aVchn1XqK_iX4f-S70LKAAAAAZU"]
[Fri Jan 02 09:38:40.627549 2026] [:error] [pid 63208:tid 63211] [client 159.89.127.165:60504] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/_all_dbs"] [unique_id "aVchoHKLI9INGPLzfnfZ9QAAAMA"]
[Fri Jan 02 09:38:41.601878 2026] [:error] [pid 29316:tid 29341] [client 159.89.127.165:60516] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.DS_Store"] [unique_id "aVchodfT9ty-7jZmgf8qzwAAARc"]
[Fri Jan 02 09:38:42.602293 2026] [:error] [pid 50186:tid 50210] [client 159.89.127.165:60520] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aVcholXqK_iX4f-S70LKBQAAAZY"]
[Fri Jan 02 09:38:44.602586 2026] [:error] [pid 50186:tid 50201] [client 159.89.127.165:39934] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aVchpFXqK_iX4f-S70LKBwAAAY0"]
[Fri Jan 02 09:38:45.603990 2026] [:error] [pid 29316:tid 29318] [client 159.89.127.165:39938] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aVchpdfT9ty-7jZmgf8q1QAAAQA"]
[Fri Jan 02 09:38:46.605249 2026] [:error] [pid 63098:tid 63113] [client 159.89.127.165:39952] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.json"] [unique_id "aVchpsez9k78gUs48krWngAAAAY"]
[Fri Jan 02 09:38:47.606899 2026] [:error] [pid 50046:tid 50055] [client 159.89.127.165:39958] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/telescope/requests"] [unique_id "aVchpyzv7fgIiwkQYNA1XwAAAUc"]
[Fri Jan 02 09:38:48.604675 2026] [:error] [pid 50186:tid 50203] [client 159.89.127.165:39962] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aVchqFXqK_iX4f-S70LKCwAAAY8"]
[Fri Jan 02 09:38:49.605889 2026] [:error] [pid 63208:tid 63227] [client 159.89.127.165:39976] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVchqXKLI9INGPLzfnfZ_gAAANA"]
[Fri Jan 02 12:53:26.813123 2026] [:error] [pid 63208:tid 63228] [client 64.227.140.57:63166] [client 64.227.140.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.140.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVdPRnKLI9INGPLzfnf9rwAAANE"]
[Fri Jan 02 12:53:28.553461 2026] [:error] [pid 29316:tid 29323] [client 64.227.140.57:50631] [client 64.227.140.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.140.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVdPSNfT9ty-7jZmgf9TDgAAAQU"]
[Fri Jan 02 13:35:53.025738 2026] [autoindex:error] [pid 63100:tid 63161] [client 161.35.183.115:61294] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 02 13:42:11.620118 2026] [:error] [pid 43358:tid 43364] [client 159.89.160.65:51301] [client 159.89.160.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.160.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVdaswncbHK9auzvrA8NUwAAAcQ"]
[Fri Jan 02 13:42:13.430382 2026] [:error] [pid 29316:tid 29324] [client 159.89.160.65:57661] [client 159.89.160.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.160.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVdatdfT9ty-7jZmgf9dAgAAAQY"]
[Fri Jan 02 16:58:27.279247 2026] [:error] [pid 63098:tid 63119] [client 54.236.84.252:33298] [client 54.236.84.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aVeIs8ez9k78gUs48koaTgAAAAw"]
[Fri Jan 02 18:24:36.180920 2026] [:error] [pid 43358:tid 43361] [client 54.236.84.252:52266] [client 54.236.84.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aVec5AncbHK9auzvrA85KwAAAcE"]
[Fri Jan 02 22:21:34.324242 2026] [autoindex:error] [pid 50186:tid 50188] [client 185.76.9.40:36184] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 22:21:35.718818 2026] [autoindex:error] [pid 50186:tid 50191] [client 185.76.9.40:36184] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 22:21:36.080062 2026] [autoindex:error] [pid 50186:tid 50208] [client 185.76.9.40:36184] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 02 22:21:36.445694 2026] [autoindex:error] [pid 50186:tid 50209] [client 185.76.9.40:36184] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 01:50:59.066413 2026] [autoindex:error] [pid 24659:tid 24685] [client 4.230.28.195:14677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 03 01:51:08.394333 2026] [:error] [pid 24659:tid 24672] [client 4.230.28.195:14677] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aVgFjGucj-rXdFUnVEs8CgAAAAg"]
[Sat Jan 03 01:51:09.237402 2026] [:error] [pid 24749:tid 24751] [client 4.230.28.195:14604] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aVgFjUiv6Q9UlqwBJkZp7QAAAMA"]
[Sat Jan 03 01:51:09.627316 2026] [:error] [pid 24749:tid 24753] [client 4.230.28.195:14678] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aVgFjUiv6Q9UlqwBJkZp7gAAAMI"]
[Sat Jan 03 01:51:10.348507 2026] [:error] [pid 24660:tid 24717] [client 4.230.28.195:14602] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aVgFjmZwWsLNsJ3ZH7bWlQAAAFg"]
[Sat Jan 03 01:51:10.669652 2026] [:error] [pid 24661:tid 24730] [client 4.230.28.195:14603] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aVgFjhfxsu5kmLDAcZubWgAAAIo"]
[Sat Jan 03 01:51:11.094513 2026] [:error] [pid 24661:tid 24742] [client 4.230.28.195:14658] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aVgFjxfxsu5kmLDAcZubWwAAAJY"]
[Sat Jan 03 01:51:11.868298 2026] [:error] [pid 24661:tid 24741] [client 4.230.28.195:14623] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aVgFjxfxsu5kmLDAcZubXwAAAJU"]
[Sat Jan 03 01:51:12.319206 2026] [:error] [pid 24661:tid 24732] [client 4.230.28.195:14660] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aVgFkBfxsu5kmLDAcZubYAAAAIw"]
[Sat Jan 03 01:51:12.644121 2026] [:error] [pid 24661:tid 24737] [client 4.230.28.195:14683] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aVgFkBfxsu5kmLDAcZubYgAAAJE"]
[Sat Jan 03 01:51:13.039236 2026] [:error] [pid 24659:tid 24670] [client 4.230.28.195:14702] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aVgFkWucj-rXdFUnVEs8DgAAAAY"]
[Sat Jan 03 01:51:13.571262 2026] [:error] [pid 24659:tid 24679] [client 4.230.28.195:14687] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aVgFkWucj-rXdFUnVEs8EAAAAA8"]
[Sat Jan 03 01:51:13.866633 2026] [:error] [pid 24660:tid 24707] [client 4.230.28.195:14709] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aVgFkWZwWsLNsJ3ZH7bWlwAAAE4"]
[Sat Jan 03 01:51:14.272506 2026] [:error] [pid 24660:tid 24714] [client 4.230.28.195:14605] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aVgFkmZwWsLNsJ3ZH7bWmQAAAFU"]
[Sat Jan 03 01:51:14.920009 2026] [:error] [pid 24749:tid 24756] [client 4.230.28.195:14615] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aVgFkkiv6Q9UlqwBJkZp8gAAAMU"]
[Sat Jan 03 01:51:15.384274 2026] [:error] [pid 24659:tid 24675] [client 4.230.28.195:14622] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aVgFk2ucj-rXdFUnVEs8EgAAAAs"]
[Sat Jan 03 01:51:16.738643 2026] [:error] [pid 24661:tid 24734] [client 4.230.28.195:14675] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aVgFlBfxsu5kmLDAcZubaQAAAI4"]
[Sat Jan 03 01:51:17.628100 2026] [:error] [pid 24749:tid 24767] [client 4.230.28.195:14670] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aVgFlUiv6Q9UlqwBJkZp-AAAANA"]
[Sat Jan 03 01:51:18.659331 2026] [:error] [pid 24660:tid 24695] [client 4.230.28.195:14679] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aVgFlmZwWsLNsJ3ZH7bWnwAAAEI"]
[Sat Jan 03 01:51:19.311676 2026] [:error] [pid 24660:tid 24705] [client 4.230.28.195:14618] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aVgFl2ZwWsLNsJ3ZH7bWoAAAAEw"]
[Sat Jan 03 01:51:19.867026 2026] [:error] [pid 24749:tid 24762] [client 4.230.28.195:14657] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aVgFl0iv6Q9UlqwBJkZp_AAAAMs"]
[Sat Jan 03 01:51:20.705421 2026] [:error] [pid 24749:tid 24771] [client 4.230.28.195:14697] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aVgFmEiv6Q9UlqwBJkZqAAAAANQ"]
[Sat Jan 03 01:51:21.092113 2026] [:error] [pid 24749:tid 24752] [client 4.230.28.195:14685] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aVgFmUiv6Q9UlqwBJkZqAQAAAME"]
[Sat Jan 03 01:51:21.487342 2026] [:error] [pid 24749:tid 24763] [client 4.230.28.195:14672] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aVgFmUiv6Q9UlqwBJkZqBQAAAMw"]
[Sat Jan 03 01:51:22.114532 2026] [:error] [pid 24749:tid 24760] [client 4.230.28.195:14688] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aVgFmkiv6Q9UlqwBJkZqCAAAAMk"]
[Sat Jan 03 01:51:22.611350 2026] [:error] [pid 24661:tid 24737] [client 4.230.28.195:14592] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aVgFmhfxsu5kmLDAcZubbgAAAJE"]
[Sat Jan 03 01:51:23.110595 2026] [:error] [pid 24749:tid 24766] [client 4.230.28.195:14704] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aVgFm0iv6Q9UlqwBJkZqCgAAAM8"]
[Sat Jan 03 01:51:23.560362 2026] [:error] [pid 24659:tid 24672] [client 4.230.28.195:14602] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aVgFm2ucj-rXdFUnVEs8FwAAAAg"]
[Sat Jan 03 01:51:24.010023 2026] [:error] [pid 24660:tid 24717] [client 4.230.28.195:14668] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aVgFnGZwWsLNsJ3ZH7bWpQAAAFg"]
[Sat Jan 03 01:51:24.373438 2026] [:error] [pid 24749:tid 24754] [client 4.230.28.195:14673] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aVgFnEiv6Q9UlqwBJkZqDAAAAMM"]
[Sat Jan 03 01:51:24.784418 2026] [:error] [pid 24749:tid 24757] [client 4.230.28.195:14596] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aVgFnEiv6Q9UlqwBJkZqDgAAAMY"]
[Sat Jan 03 01:51:25.101442 2026] [:error] [pid 24661:tid 24731] [client 4.230.28.195:14676] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aVgFnRfxsu5kmLDAcZubcgAAAIs"]
[Sat Jan 03 01:51:25.502494 2026] [:error] [pid 24749:tid 24759] [client 4.230.28.195:14669] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aVgFnUiv6Q9UlqwBJkZqDwAAAMg"]
[Sat Jan 03 01:51:26.011085 2026] [:error] [pid 24660:tid 24707] [client 4.230.28.195:14597] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aVgFnmZwWsLNsJ3ZH7bWpwAAAE4"]
[Sat Jan 03 01:51:26.330892 2026] [:error] [pid 24749:tid 24764] [client 4.230.28.195:14619] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aVgFnkiv6Q9UlqwBJkZqEgAAAM0"]
[Sat Jan 03 01:51:26.637676 2026] [:error] [pid 24749:tid 24774] [client 4.230.28.195:14686] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aVgFnkiv6Q9UlqwBJkZqFAAAANc"]
[Sat Jan 03 01:51:26.951198 2026] [:error] [pid 24659:tid 24665] [client 4.230.28.195:14696] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aVgFnmucj-rXdFUnVEs8GwAAAAE"]
[Sat Jan 03 01:51:27.564662 2026] [:error] [pid 24749:tid 24767] [client 4.230.28.195:14689] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aVgFn0iv6Q9UlqwBJkZqFwAAANA"]
[Sat Jan 03 01:51:27.949204 2026] [:error] [pid 24749:tid 24770] [client 4.230.28.195:14610] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aVgFn0iv6Q9UlqwBJkZqGAAAANM"]
[Sat Jan 03 01:51:28.250821 2026] [:error] [pid 24661:tid 24742] [client 4.230.28.195:14674] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aVgFoBfxsu5kmLDAcZubdwAAAJY"]
[Sat Jan 03 01:51:28.592364 2026] [:error] [pid 24749:tid 24751] [client 4.230.28.195:14621] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aVgFoEiv6Q9UlqwBJkZqGgAAAMA"]
[Sat Jan 03 01:51:28.961233 2026] [:error] [pid 24661:tid 24741] [client 4.230.28.195:6082] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aVgFoBfxsu5kmLDAcZubeQAAAJU"]
[Sat Jan 03 01:51:29.355173 2026] [:error] [pid 24661:tid 24727] [client 4.230.28.195:14694] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aVgFoRfxsu5kmLDAcZubfQAAAIc"]
[Sat Jan 03 01:51:29.688052 2026] [:error] [pid 24659:tid 24686] [client 4.230.28.195:6089] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aVgFoWucj-rXdFUnVEs8HAAAABY"]
[Sat Jan 03 01:51:30.197917 2026] [:error] [pid 24749:tid 24762] [client 4.230.28.195:14648] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aVgFokiv6Q9UlqwBJkZqHAAAAMs"]
[Sat Jan 03 01:51:30.590523 2026] [:error] [pid 24660:tid 24716] [client 4.230.28.195:14614] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aVgFomZwWsLNsJ3ZH7bWqwAAAFc"]
[Sat Jan 03 01:51:31.054629 2026] [:error] [pid 24660:tid 24697] [client 4.230.28.195:14706] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aVgFo2ZwWsLNsJ3ZH7bWrQAAAEQ"]
[Sat Jan 03 01:51:31.371066 2026] [:error] [pid 24660:tid 24693] [client 4.230.28.195:14719] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aVgFo2ZwWsLNsJ3ZH7bWrgAAAEA"]
[Sat Jan 03 01:51:31.683659 2026] [:error] [pid 24660:tid 24703] [client 4.230.28.195:6131] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aVgFo2ZwWsLNsJ3ZH7bWsAAAAEo"]
[Sat Jan 03 01:51:32.225066 2026] [:error] [pid 24661:tid 24726] [client 4.230.28.195:14650] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aVgFpBfxsu5kmLDAcZubhAAAAIY"]
[Sat Jan 03 01:51:32.917291 2026] [:error] [pid 24661:tid 24725] [client 4.230.28.195:14612] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aVgFpBfxsu5kmLDAcZubhgAAAIU"]
[Sat Jan 03 01:51:33.379144 2026] [:error] [pid 24661:tid 24727] [client 4.230.28.195:14600] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aVgFpRfxsu5kmLDAcZubhwAAAIc"]
[Sat Jan 03 01:51:33.756071 2026] [:error] [pid 24749:tid 24759] [client 4.230.28.195:14713] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aVgFpUiv6Q9UlqwBJkZqIQAAAMg"]
[Sat Jan 03 01:51:34.345359 2026] [:error] [pid 24749:tid 24771] [client 4.230.28.195:14601] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aVgFpkiv6Q9UlqwBJkZqIwAAANQ"]
[Sat Jan 03 01:51:34.709736 2026] [:error] [pid 24659:tid 24671] [client 4.230.28.195:6081] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aVgFpmucj-rXdFUnVEs8IAAAAAc"]
[Sat Jan 03 01:51:35.371320 2026] [:error] [pid 24661:tid 24737] [client 4.230.28.195:14714] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aVgFpxfxsu5kmLDAcZubigAAAJE"]
[Sat Jan 03 01:51:35.738072 2026] [:error] [pid 24749:tid 24765] [client 4.230.28.195:14641] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aVgFp0iv6Q9UlqwBJkZqJQAAAM4"]
[Sat Jan 03 01:51:36.013337 2026] [:error] [pid 24749:tid 24769] [client 4.230.28.195:6117] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aVgFqEiv6Q9UlqwBJkZqJwAAANI"]
[Sat Jan 03 01:51:36.303299 2026] [:error] [pid 24661:tid 24733] [client 4.230.28.195:14661] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aVgFqBfxsu5kmLDAcZubjQAAAI0"]
[Sat Jan 03 01:51:36.645261 2026] [:error] [pid 24661:tid 24724] [client 4.230.28.195:14711] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aVgFqBfxsu5kmLDAcZubjgAAAIQ"]
[Sat Jan 03 01:51:36.946373 2026] [:error] [pid 24660:tid 24713] [client 4.230.28.195:14708] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aVgFqGZwWsLNsJ3ZH7bWtwAAAFQ"]
[Sat Jan 03 01:51:37.291656 2026] [:error] [pid 24660:tid 24712] [client 4.230.28.195:14656] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aVgFqWZwWsLNsJ3ZH7bWuAAAAFM"]
[Sat Jan 03 01:51:37.681514 2026] [:error] [pid 24660:tid 24701] [client 4.230.28.195:14666] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aVgFqWZwWsLNsJ3ZH7bWuQAAAEg"]
[Sat Jan 03 01:51:37.992167 2026] [:error] [pid 24749:tid 24755] [client 4.230.28.195:14699] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aVgFqUiv6Q9UlqwBJkZqKQAAAMQ"]
[Sat Jan 03 01:51:38.280455 2026] [:error] [pid 24659:tid 24672] [client 4.230.28.195:14695] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aVgFqmucj-rXdFUnVEs8JQAAAAg"]
[Sat Jan 03 01:51:38.651644 2026] [:error] [pid 24661:tid 24723] [client 4.230.28.195:6109] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aVgFqhfxsu5kmLDAcZubkQAAAIM"]
[Sat Jan 03 01:51:38.947385 2026] [:error] [pid 24749:tid 24759] [client 4.230.28.195:6111] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aVgFqkiv6Q9UlqwBJkZqLAAAAMg"]
[Sat Jan 03 01:51:39.649621 2026] [:error] [pid 24749:tid 24765] [client 4.230.28.195:14705] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aVgFq0iv6Q9UlqwBJkZqLgAAAM4"]
[Sat Jan 03 01:51:39.942158 2026] [:error] [pid 24661:tid 24741] [client 4.230.28.195:6086] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aVgFqxfxsu5kmLDAcZublgAAAJU"]
[Sat Jan 03 01:51:40.272638 2026] [:error] [pid 24661:tid 24736] [client 4.230.28.195:14609] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVgFrBfxsu5kmLDAcZubmAAAAJA"]
[Sat Jan 03 01:51:40.560535 2026] [:error] [pid 24749:tid 24773] [client 4.230.28.195:14691] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVgFrEiv6Q9UlqwBJkZqLwAAANY"]
[Sat Jan 03 01:51:40.983315 2026] [:error] [pid 24749:tid 24763] [client 4.230.28.195:14690] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVgFrEiv6Q9UlqwBJkZqMgAAAMw"]
[Sat Jan 03 01:51:41.287496 2026] [:error] [pid 24749:tid 24751] [client 4.230.28.195:14633] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVgFrUiv6Q9UlqwBJkZqMwAAAMA"]
[Sat Jan 03 01:51:41.628960 2026] [:error] [pid 24661:tid 24731] [client 4.230.28.195:14638] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aVgFrRfxsu5kmLDAcZubmgAAAIs"]
[Sat Jan 03 01:51:41.986392 2026] [:error] [pid 24660:tid 24703] [client 4.230.28.195:14682] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aVgFrWZwWsLNsJ3ZH7bWyQAAAEo"]
[Sat Jan 03 01:51:42.330742 2026] [:error] [pid 24660:tid 24706] [client 4.230.28.195:14628] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aVgFrmZwWsLNsJ3ZH7bWygAAAE0"]
[Sat Jan 03 01:51:42.659065 2026] [:error] [pid 24749:tid 24758] [client 4.230.28.195:14671] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aVgFrkiv6Q9UlqwBJkZqNgAAAMc"]
[Sat Jan 03 01:51:43.108412 2026] [:error] [pid 24659:tid 24678] [client 4.230.28.195:14627] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aVgFr2ucj-rXdFUnVEs8JwAAAA4"]
[Sat Jan 03 01:51:43.524059 2026] [:error] [pid 24660:tid 24710] [client 4.230.28.195:14662] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aVgFr2ZwWsLNsJ3ZH7bWzQAAAFE"]
[Sat Jan 03 01:51:43.838817 2026] [:error] [pid 24661:tid 24730] [client 4.230.28.195:14626] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aVgFrxfxsu5kmLDAcZuboAAAAIo"]
[Sat Jan 03 01:51:44.199519 2026] [:error] [pid 24661:tid 24741] [client 4.230.28.195:14611] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aVgFsBfxsu5kmLDAcZubogAAAJU"]
[Sat Jan 03 01:51:44.604163 2026] [:error] [pid 24749:tid 24764] [client 4.230.28.195:14600] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aVgFsEiv6Q9UlqwBJkZqOQAAAM0"]
[Sat Jan 03 01:51:44.944632 2026] [:error] [pid 24749:tid 24765] [client 4.230.28.195:14707] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aVgFsEiv6Q9UlqwBJkZqOwAAAM4"]
[Sat Jan 03 01:51:45.351915 2026] [:error] [pid 24660:tid 24702] [client 4.230.28.195:14594] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aVgFsWZwWsLNsJ3ZH7bW0gAAAEk"]
[Sat Jan 03 01:51:45.686173 2026] [:error] [pid 24660:tid 24709] [client 4.230.28.195:14649] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aVgFsWZwWsLNsJ3ZH7bW1AAAAFA"]
[Sat Jan 03 01:51:45.959774 2026] [:error] [pid 24660:tid 24693] [client 4.230.28.195:14701] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aVgFsWZwWsLNsJ3ZH7bW1QAAAEA"]
[Sat Jan 03 01:51:46.357814 2026] [:error] [pid 24749:tid 24751] [client 4.230.28.195:14616] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aVgFskiv6Q9UlqwBJkZqPwAAAMA"]
[Sat Jan 03 01:51:46.707374 2026] [:error] [pid 24660:tid 24711] [client 4.230.28.195:14640] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aVgFsmZwWsLNsJ3ZH7bW1gAAAFI"]
[Sat Jan 03 01:51:47.056623 2026] [:error] [pid 24659:tid 24685] [client 4.230.28.195:14654] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aVgFs2ucj-rXdFUnVEs8KQAAABU"]
[Sat Jan 03 01:51:47.395462 2026] [:error] [pid 24661:tid 24720] [client 4.230.28.195:14684] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aVgFsxfxsu5kmLDAcZubqgAAAIA"]
[Sat Jan 03 01:51:47.771314 2026] [:error] [pid 24659:tid 24686] [client 4.230.28.195:14634] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aVgFs2ucj-rXdFUnVEs8KwAAABY"]
[Sat Jan 03 01:51:48.142377 2026] [:error] [pid 24749:tid 24762] [client 4.230.28.195:6093] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aVgFtEiv6Q9UlqwBJkZqQQAAAMs"]
[Sat Jan 03 01:51:48.491177 2026] [:error] [pid 24749:tid 24761] [client 4.230.28.195:6143] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aVgFtEiv6Q9UlqwBJkZqQgAAAMo"]
[Sat Jan 03 01:51:48.769884 2026] [:error] [pid 24661:tid 24728] [client 4.230.28.195:6100] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aVgFtBfxsu5kmLDAcZubrAAAAIg"]
[Sat Jan 03 01:51:49.108309 2026] [:error] [pid 24661:tid 24738] [client 4.230.28.195:14642] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aVgFtRfxsu5kmLDAcZubrQAAAJI"]
[Sat Jan 03 01:51:49.492267 2026] [:error] [pid 24659:tid 24664] [client 4.230.28.195:6094] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aVgFtWucj-rXdFUnVEs8LQAAAAA"]
[Sat Jan 03 01:51:49.778087 2026] [:error] [pid 24659:tid 24680] [client 4.230.28.195:14645] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aVgFtWucj-rXdFUnVEs8LgAAABA"]
[Sat Jan 03 01:51:50.107662 2026] [:error] [pid 24659:tid 24675] [client 4.230.28.195:14655] [client 4.230.28.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVgFtmucj-rXdFUnVEs8LwAAAAs"]
[Sat Jan 03 01:51:50.457034 2026] [:error] [pid 24749:tid 24769] [client 4.230.28.195:14598] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aVgFtkiv6Q9UlqwBJkZqSAAAANI"]
[Sat Jan 03 01:51:50.802600 2026] [:error] [pid 24749:tid 24774] [client 4.230.28.195:6087] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aVgFtkiv6Q9UlqwBJkZqSwAAANc"]
[Sat Jan 03 01:51:51.095510 2026] [:error] [pid 24749:tid 24760] [client 4.230.28.195:14620] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aVgFt0iv6Q9UlqwBJkZqTgAAAMk"]
[Sat Jan 03 01:51:51.414614 2026] [:error] [pid 24749:tid 24762] [client 4.230.28.195:6126] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aVgFt0iv6Q9UlqwBJkZqUAAAAMs"]
[Sat Jan 03 01:51:51.719007 2026] [:error] [pid 24659:tid 24676] [client 4.230.28.195:14703] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aVgFt2ucj-rXdFUnVEs8MQAAAAw"]
[Sat Jan 03 01:51:52.018085 2026] [:error] [pid 24660:tid 24705] [client 4.230.28.195:6095] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aVgFuGZwWsLNsJ3ZH7bW2QAAAEw"]
[Sat Jan 03 01:51:52.304764 2026] [:error] [pid 24749:tid 24753] [client 4.230.28.195:14718] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aVgFuEiv6Q9UlqwBJkZqUgAAAMI"]
[Sat Jan 03 01:51:52.609791 2026] [:error] [pid 24749:tid 24758] [client 4.230.28.195:6017] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aVgFuEiv6Q9UlqwBJkZqUwAAAMc"]
[Sat Jan 03 01:51:52.918247 2026] [:error] [pid 24661:tid 24737] [client 4.230.28.195:14632] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aVgFuBfxsu5kmLDAcZubvAAAAJE"]
[Sat Jan 03 01:51:53.296862 2026] [:error] [pid 24661:tid 24731] [client 4.230.28.195:14646] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aVgFuRfxsu5kmLDAcZubvQAAAIs"]
[Sat Jan 03 01:51:53.588150 2026] [:error] [pid 24661:tid 24742] [client 4.230.28.195:6110] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aVgFuRfxsu5kmLDAcZubvwAAAJY"]
[Sat Jan 03 01:51:53.865914 2026] [:error] [pid 24661:tid 24738] [client 4.230.28.195:14693] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aVgFuRfxsu5kmLDAcZubwQAAAJI"]
[Sat Jan 03 01:51:54.311972 2026] [:error] [pid 24659:tid 24672] [client 4.230.28.195:6084] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aVgFumucj-rXdFUnVEs8NgAAAAg"]
[Sat Jan 03 01:51:54.679672 2026] [:error] [pid 24660:tid 24717] [client 4.230.28.195:14698] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aVgFumZwWsLNsJ3ZH7bW3AAAAFg"]
[Sat Jan 03 01:51:54.989640 2026] [:error] [pid 24749:tid 24768] [client 4.230.28.195:14665] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aVgFukiv6Q9UlqwBJkZqVgAAANE"]
[Sat Jan 03 01:51:55.292138 2026] [:error] [pid 24661:tid 24726] [client 4.230.28.195:14700] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aVgFuxfxsu5kmLDAcZubxgAAAIY"]
[Sat Jan 03 01:51:55.583248 2026] [:error] [pid 24661:tid 24730] [client 4.230.28.195:14608] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aVgFuxfxsu5kmLDAcZubyAAAAIo"]
[Sat Jan 03 01:51:56.065592 2026] [:error] [pid 24661:tid 24741] [client 4.230.28.195:6080] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aVgFvBfxsu5kmLDAcZubygAAAJU"]
[Sat Jan 03 01:51:56.384254 2026] [:error] [pid 24660:tid 24704] [client 4.230.28.195:14599] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aVgFvGZwWsLNsJ3ZH7bW3QAAAEs"]
[Sat Jan 03 01:51:56.697339 2026] [:error] [pid 24661:tid 24744] [client 4.230.28.195:6108] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aVgFvBfxsu5kmLDAcZubywAAAJg"]
[Sat Jan 03 01:51:57.008783 2026] [:error] [pid 24661:tid 24743] [client 4.230.28.195:6137] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aVgFvRfxsu5kmLDAcZubzgAAAJc"]
[Sat Jan 03 01:51:57.375364 2026] [:error] [pid 24660:tid 24713] [client 4.230.28.195:6119] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aVgFvWZwWsLNsJ3ZH7bW3gAAAFQ"]
[Sat Jan 03 01:51:57.711020 2026] [:error] [pid 24660:tid 24707] [client 4.230.28.195:14692] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aVgFvWZwWsLNsJ3ZH7bW3wAAAE4"]
[Sat Jan 03 01:51:58.230047 2026] [:error] [pid 24661:tid 24731] [client 4.230.28.195:14613] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aVgFvhfxsu5kmLDAcZub0AAAAIs"]
[Sat Jan 03 01:51:58.517663 2026] [:error] [pid 24659:tid 24680] [client 4.230.28.195:6128] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aVgFvmucj-rXdFUnVEs8PwAAABA"]
[Sat Jan 03 01:51:58.892352 2026] [:error] [pid 24660:tid 24701] [client 4.230.28.195:14647] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aVgFvmZwWsLNsJ3ZH7bW4QAAAEg"]
[Sat Jan 03 01:51:59.221443 2026] [:error] [pid 24661:tid 24738] [client 4.230.28.195:6019] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aVgFvxfxsu5kmLDAcZub0wAAAJI"]
[Sat Jan 03 01:51:59.651866 2026] [:error] [pid 24661:tid 24723] [client 4.230.28.195:6088] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aVgFvxfxsu5kmLDAcZub1QAAAIM"]
[Sat Jan 03 01:51:59.975784 2026] [:error] [pid 24659:tid 24673] [client 4.230.28.195:6018] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aVgFv2ucj-rXdFUnVEs8QQAAAAk"]
[Sat Jan 03 01:52:00.471268 2026] [:error] [pid 24659:tid 24682] [client 4.230.28.195:14715] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aVgFwGucj-rXdFUnVEs8QwAAABI"]
[Sat Jan 03 01:52:00.835020 2026] [:error] [pid 24749:tid 24767] [client 4.230.28.195:6114] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aVgFwEiv6Q9UlqwBJkZqWgAAANA"]
[Sat Jan 03 01:52:01.171230 2026] [:error] [pid 24749:tid 24755] [client 4.230.28.195:14681] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aVgFwUiv6Q9UlqwBJkZqWwAAAMQ"]
[Sat Jan 03 01:52:01.540590 2026] [:error] [pid 24659:tid 24668] [client 4.230.28.195:6096] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVgFwWucj-rXdFUnVEs8RgAAAAQ"]
[Sat Jan 03 01:52:01.957166 2026] [:error] [pid 24749:tid 24753] [client 4.230.28.195:14639] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVgFwUiv6Q9UlqwBJkZqXgAAAMI"]
[Sat Jan 03 01:52:02.310761 2026] [:error] [pid 24749:tid 24775] [client 4.230.28.195:6107] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVgFwkiv6Q9UlqwBJkZqXwAAANg"]
[Sat Jan 03 01:52:02.729594 2026] [:error] [pid 24661:tid 24720] [client 4.230.28.195:6125] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVgFwhfxsu5kmLDAcZub4AAAAIA"]
[Sat Jan 03 01:52:03.047705 2026] [:error] [pid 24749:tid 24770] [client 4.230.28.195:5954] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVgFw0iv6Q9UlqwBJkZqYgAAANM"]
[Sat Jan 03 01:52:03.426495 2026] [:error] [pid 24660:tid 24715] [client 4.230.28.195:6136] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVgFw2ZwWsLNsJ3ZH7bW5wAAAFY"]
[Sat Jan 03 01:52:03.791221 2026] [:error] [pid 24660:tid 24698] [client 4.230.28.195:14630] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVgFw2ZwWsLNsJ3ZH7bW6QAAAEU"]
[Sat Jan 03 01:52:04.332511 2026] [:error] [pid 24659:tid 24669] [client 4.230.28.195:6074] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVgFxGucj-rXdFUnVEs8SgAAAAU"]
[Sat Jan 03 01:52:04.740432 2026] [:error] [pid 24749:tid 24760] [client 4.230.28.195:14717] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aVgFxEiv6Q9UlqwBJkZqZgAAAMk"]
[Sat Jan 03 01:52:05.069782 2026] [:error] [pid 24749:tid 24762] [client 4.230.28.195:6104] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aVgFxUiv6Q9UlqwBJkZqaAAAAMs"]
[Sat Jan 03 01:52:05.369096 2026] [:error] [pid 24659:tid 24664] [client 4.230.28.195:5965] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aVgFxWucj-rXdFUnVEs8TQAAAAA"]
[Sat Jan 03 01:52:05.656658 2026] [:error] [pid 24659:tid 24675] [client 4.230.28.195:6132] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aVgFxWucj-rXdFUnVEs8TgAAAAs"]
[Sat Jan 03 01:52:05.969591 2026] [:error] [pid 24661:tid 24744] [client 4.230.28.195:14664] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aVgFxRfxsu5kmLDAcZub6AAAAJg"]
[Sat Jan 03 01:52:06.283168 2026] [:error] [pid 24661:tid 24733] [client 4.230.28.195:14667] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aVgFxhfxsu5kmLDAcZub6gAAAI0"]
[Sat Jan 03 01:52:06.580168 2026] [:error] [pid 24660:tid 24701] [client 4.230.28.195:6092] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aVgFxmZwWsLNsJ3ZH7bW8QAAAEg"]
[Sat Jan 03 01:52:06.886309 2026] [:error] [pid 24660:tid 24697] [client 4.230.28.195:14607] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aVgFxmZwWsLNsJ3ZH7bW8gAAAEQ"]
[Sat Jan 03 01:52:24.153054 2026] [:error] [pid 24661:tid 24732] [client 4.230.28.195:6076] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aVgF2Bfxsu5kmLDAcZucGwAAAIw"]
[Sat Jan 03 01:52:24.509436 2026] [:error] [pid 24659:tid 24686] [client 4.230.28.195:14663] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aVgF2Gucj-rXdFUnVEs8awAAABY"]
[Sat Jan 03 01:52:24.833709 2026] [:error] [pid 24749:tid 24753] [client 4.230.28.195:6098] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aVgF2Eiv6Q9UlqwBJkZqggAAAMI"]
[Sat Jan 03 01:52:25.188239 2026] [:error] [pid 24749:tid 24755] [client 4.230.28.195:6029] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aVgF2Uiv6Q9UlqwBJkZqhgAAAMQ"]
[Sat Jan 03 01:52:25.480263 2026] [:error] [pid 24749:tid 24758] [client 4.230.28.195:6142] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aVgF2Uiv6Q9UlqwBJkZqhwAAAMc"]
[Sat Jan 03 01:52:25.799670 2026] [:error] [pid 24661:tid 24720] [client 4.230.28.195:6078] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aVgF2Rfxsu5kmLDAcZucHgAAAIA"]
[Sat Jan 03 01:52:26.085383 2026] [:error] [pid 24749:tid 24756] [client 4.230.28.195:6036] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aVgF2kiv6Q9UlqwBJkZqiAAAAMU"]
[Sat Jan 03 01:52:26.390879 2026] [:error] [pid 24661:tid 24740] [client 4.230.28.195:6073] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aVgF2hfxsu5kmLDAcZucIAAAAJQ"]
[Sat Jan 03 01:52:26.717519 2026] [:error] [pid 24661:tid 24742] [client 4.230.28.195:6106] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aVgF2hfxsu5kmLDAcZucIQAAAJY"]
[Sat Jan 03 01:52:27.030531 2026] [:error] [pid 24660:tid 24693] [client 4.230.28.195:6112] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aVgF22ZwWsLNsJ3ZH7bXEQAAAEA"]
[Sat Jan 03 01:52:27.555006 2026] [:error] [pid 24749:tid 24773] [client 4.230.28.195:5970] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aVgF20iv6Q9UlqwBJkZqigAAANY"]
[Sat Jan 03 01:52:27.930326 2026] [:error] [pid 24659:tid 24670] [client 4.230.28.195:14716] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aVgF22ucj-rXdFUnVEs8bgAAAAY"]
[Sat Jan 03 01:52:28.495485 2026] [:error] [pid 24659:tid 24677] [client 4.230.28.195:6101] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aVgF3Gucj-rXdFUnVEs8bwAAAA0"]
[Sat Jan 03 01:52:29.537348 2026] [:error] [pid 24749:tid 24760] [client 4.230.28.195:6043] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aVgF3Uiv6Q9UlqwBJkZqjwAAAMk"]
[Sat Jan 03 01:52:30.683799 2026] [:error] [pid 24660:tid 24698] [client 4.230.28.195:6121] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aVgF3mZwWsLNsJ3ZH7bXGAAAAEU"]
[Sat Jan 03 01:52:31.142073 2026] [:error] [pid 24661:tid 24733] [client 4.230.28.195:14631] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aVgF3xfxsu5kmLDAcZucJgAAAI0"]
[Sat Jan 03 01:52:31.545487 2026] [:error] [pid 24661:tid 24744] [client 4.230.28.195:14635] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVgF3xfxsu5kmLDAcZucJwAAAJg"]
[Sat Jan 03 01:52:32.509084 2026] [:error] [pid 24661:tid 24727] [client 4.230.28.195:6118] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVgF4Bfxsu5kmLDAcZucLQAAAIc"]
[Sat Jan 03 01:52:33.612122 2026] [:error] [pid 24659:tid 24667] [client 4.230.28.195:6135] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVgF4Wucj-rXdFUnVEs8cwAAAAM"]
[Sat Jan 03 01:52:34.111496 2026] [:error] [pid 24661:tid 24740] [client 4.230.28.195:14593] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVgF4hfxsu5kmLDAcZucMAAAAJQ"]
[Sat Jan 03 01:52:34.911380 2026] [:error] [pid 24661:tid 24731] [client 4.230.28.195:14636] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aVgF4hfxsu5kmLDAcZucNgAAAIs"]
[Sat Jan 03 01:52:35.395536 2026] [:error] [pid 24660:tid 24697] [client 4.230.28.195:6028] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aVgF42ZwWsLNsJ3ZH7bXHwAAAEQ"]
[Sat Jan 03 01:52:35.753330 2026] [:error] [pid 24660:tid 24711] [client 4.230.28.195:6122] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aVgF42ZwWsLNsJ3ZH7bXIAAAAFI"]
[Sat Jan 03 01:52:36.404387 2026] [:error] [pid 24749:tid 24774] [client 4.230.28.195:6040] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aVgF5Eiv6Q9UlqwBJkZqlAAAANc"]
[Sat Jan 03 01:52:36.979003 2026] [:error] [pid 24659:tid 24685] [client 4.230.28.195:6116] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aVgF5Gucj-rXdFUnVEs8dQAAABU"]
[Sat Jan 03 01:52:37.376156 2026] [:error] [pid 24661:tid 24720] [client 4.230.28.195:14595] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aVgF5Rfxsu5kmLDAcZucQQAAAIA"]
[Sat Jan 03 01:52:37.814150 2026] [:error] [pid 24660:tid 24709] [client 4.230.28.195:6141] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aVgF5WZwWsLNsJ3ZH7bXIQAAAFA"]
[Sat Jan 03 01:52:38.356205 2026] [:error] [pid 24659:tid 24682] [client 4.230.28.195:6058] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aVgF5mucj-rXdFUnVEs8eAAAABI"]
[Sat Jan 03 01:52:38.825745 2026] [:error] [pid 24661:tid 24742] [client 4.230.28.195:6139] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aVgF5hfxsu5kmLDAcZucQwAAAJY"]
[Sat Jan 03 01:52:39.182097 2026] [:error] [pid 24659:tid 24676] [client 4.230.28.195:6104] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aVgF52ucj-rXdFUnVEs8egAAAAw"]
[Sat Jan 03 01:52:39.585186 2026] [:error] [pid 24749:tid 24767] [client 4.230.28.195:6025] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aVgF50iv6Q9UlqwBJkZqlQAAANA"]
[Sat Jan 03 01:52:39.924535 2026] [:error] [pid 24661:tid 24738] [client 4.230.28.195:6127] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aVgF5xfxsu5kmLDAcZucSQAAAJI"]
[Sat Jan 03 01:52:40.304935 2026] [:error] [pid 24661:tid 24741] [client 4.230.28.195:6140] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aVgF6Bfxsu5kmLDAcZucSwAAAJU"]
[Sat Jan 03 01:52:40.631158 2026] [:error] [pid 24660:tid 24713] [client 4.230.28.195:6120] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aVgF6GZwWsLNsJ3ZH7bXJgAAAFQ"]
[Sat Jan 03 01:52:41.082789 2026] [:error] [pid 24660:tid 24705] [client 4.230.28.195:5955] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aVgF6WZwWsLNsJ3ZH7bXJwAAAEw"]
[Sat Jan 03 01:52:41.458520 2026] [:error] [pid 24660:tid 24693] [client 4.230.28.195:6091] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aVgF6WZwWsLNsJ3ZH7bXKAAAAEA"]
[Sat Jan 03 01:52:41.887223 2026] [:error] [pid 24660:tid 24708] [client 4.230.28.195:5981] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aVgF6WZwWsLNsJ3ZH7bXKgAAAE8"]
[Sat Jan 03 01:52:42.270267 2026] [:error] [pid 24659:tid 24688] [client 4.230.28.195:6032] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aVgF6mucj-rXdFUnVEs8fAAAABg"]
[Sat Jan 03 01:52:42.701813 2026] [:error] [pid 24660:tid 24709] [client 4.230.28.195:6099] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aVgF6mZwWsLNsJ3ZH7bXLQAAAFA"]
[Sat Jan 03 01:52:43.010195 2026] [:error] [pid 24749:tid 24764] [client 4.230.28.195:14606] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aVgF60iv6Q9UlqwBJkZqlwAAAM0"]
[Sat Jan 03 01:52:43.340190 2026] [:error] [pid 24660:tid 24715] [client 4.230.28.195:14651] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVgF62ZwWsLNsJ3ZH7bXLwAAAFY"]
[Sat Jan 03 01:52:43.645183 2026] [:error] [pid 24661:tid 24734] [client 4.230.28.195:14652] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVgF6xfxsu5kmLDAcZucTwAAAI4"]
[Sat Jan 03 01:52:43.979197 2026] [:error] [pid 24661:tid 24720] [client 4.230.28.195:6021] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVgF6xfxsu5kmLDAcZucUQAAAIA"]
[Sat Jan 03 01:52:44.354139 2026] [:error] [pid 24659:tid 24668] [client 4.230.28.195:6133] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVgF7Gucj-rXdFUnVEs8fQAAAAQ"]
[Sat Jan 03 01:52:44.673633 2026] [:error] [pid 24659:tid 24669] [client 4.230.28.195:14629] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aVgF7Gucj-rXdFUnVEs8fgAAAAU"]
[Sat Jan 03 01:52:44.959266 2026] [:error] [pid 24749:tid 24769] [client 4.230.28.195:14710] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aVgF7Eiv6Q9UlqwBJkZqmgAAANI"]
[Sat Jan 03 01:52:45.333492 2026] [:error] [pid 24660:tid 24705] [client 4.230.28.195:6023] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aVgF7WZwWsLNsJ3ZH7bXMwAAAEw"]
[Sat Jan 03 01:52:45.660489 2026] [:error] [pid 24660:tid 24707] [client 4.230.28.195:6051] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aVgF7WZwWsLNsJ3ZH7bXNgAAAE4"]
[Sat Jan 03 01:52:46.094619 2026] [:error] [pid 24661:tid 24728] [client 4.230.28.195:6057] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aVgF7hfxsu5kmLDAcZucVAAAAIg"]
[Sat Jan 03 01:52:46.439709 2026] [:error] [pid 24661:tid 24726] [client 4.230.28.195:6016] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aVgF7hfxsu5kmLDAcZucVgAAAIY"]
[Sat Jan 03 01:52:46.860477 2026] [:error] [pid 24749:tid 24763] [client 4.230.28.195:14644] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aVgF7kiv6Q9UlqwBJkZqngAAAMw"]
[Sat Jan 03 01:52:47.185006 2026] [:error] [pid 24661:tid 24722] [client 4.230.28.195:6115] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aVgF7xfxsu5kmLDAcZucVwAAAII"]
[Sat Jan 03 01:52:47.466305 2026] [:error] [pid 24749:tid 24761] [client 4.230.28.195:6035] [client 4.230.28.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVgF70iv6Q9UlqwBJkZqoAAAAMo"]
[Sat Jan 03 01:52:47.785802 2026] [:error] [pid 24749:tid 24775] [client 4.230.28.195:5953] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aVgF70iv6Q9UlqwBJkZqoQAAANg"]
[Sat Jan 03 01:52:48.115147 2026] [:error] [pid 24659:tid 24687] [client 4.230.28.195:5963] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aVgF8Gucj-rXdFUnVEs8gwAAABc"]
[Sat Jan 03 01:52:48.399618 2026] [:error] [pid 24749:tid 24756] [client 4.230.28.195:6069] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aVgF8Eiv6Q9UlqwBJkZqowAAAMU"]
[Sat Jan 03 01:52:48.761064 2026] [:error] [pid 24660:tid 24696] [client 4.230.28.195:5974] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aVgF8GZwWsLNsJ3ZH7bXOAAAAEM"]
[Sat Jan 03 01:52:49.179530 2026] [:error] [pid 24661:tid 24729] [client 4.230.28.195:6050] [client 4.230.28.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVgF8Rfxsu5kmLDAcZucWQAAAIk"]
[Sat Jan 03 01:52:49.523846 2026] [:error] [pid 24659:tid 24686] [client 4.230.28.195:6142] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aVgF8Wucj-rXdFUnVEs8hQAAABY"]
[Sat Jan 03 01:52:49.863540 2026] [:error] [pid 24659:tid 24664] [client 4.230.28.195:6006] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aVgF8Wucj-rXdFUnVEs8hgAAAAA"]
[Sat Jan 03 01:52:50.192317 2026] [:error] [pid 24659:tid 24681] [client 4.230.28.195:6065] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aVgF8mucj-rXdFUnVEs8hwAAABE"]
[Sat Jan 03 01:52:50.591322 2026] [:error] [pid 24661:tid 24744] [client 4.230.28.195:6003] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aVgF8hfxsu5kmLDAcZucWwAAAJg"]
[Sat Jan 03 01:52:50.898596 2026] [:error] [pid 24749:tid 24757] [client 4.230.28.195:14617] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aVgF8kiv6Q9UlqwBJkZqqAAAAMY"]
[Sat Jan 03 01:52:51.210587 2026] [:error] [pid 24749:tid 24765] [client 4.230.28.195:14680] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aVgF80iv6Q9UlqwBJkZqqgAAAM4"]
[Sat Jan 03 01:52:51.631713 2026] [:error] [pid 24660:tid 24711] [client 4.230.28.195:6042] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aVgF82ZwWsLNsJ3ZH7bXOQAAAFI"]
[Sat Jan 03 01:52:51.967187 2026] [:error] [pid 24659:tid 24676] [client 4.230.28.195:14625] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aVgF82ucj-rXdFUnVEs8igAAAAw"]
[Sat Jan 03 01:52:52.277420 2026] [:error] [pid 24749:tid 24771] [client 4.230.28.195:6129] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVgF9Eiv6Q9UlqwBJkZqrAAAANQ"]
[Sat Jan 03 01:52:52.746469 2026] [:error] [pid 24659:tid 24677] [client 4.230.28.195:6085] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVgF9Gucj-rXdFUnVEs8jAAAAA0"]
[Sat Jan 03 01:52:53.158382 2026] [:error] [pid 24660:tid 24709] [client 4.230.28.195:6045] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVgF9WZwWsLNsJ3ZH7bXOwAAAFA"]
[Sat Jan 03 01:52:53.482058 2026] [:error] [pid 24659:tid 24668] [client 4.230.28.195:6103] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aVgF9Wucj-rXdFUnVEs8jwAAAAQ"]
[Sat Jan 03 01:52:53.873829 2026] [:error] [pid 24661:tid 24743] [client 4.230.28.195:6024] [client 4.230.28.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aVgF9Rfxsu5kmLDAcZucXQAAAJc"]
[Sat Jan 03 01:52:54.175575 2026] [:error] [pid 24659:tid 24675] [client 4.230.28.195:6079] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aVgF9mucj-rXdFUnVEs8kQAAAAs"]
[Sat Jan 03 01:52:54.473444 2026] [:error] [pid 24660:tid 24715] [client 4.230.28.195:6105] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aVgF9mZwWsLNsJ3ZH7bXPQAAAFY"]
[Sat Jan 03 01:52:54.776188 2026] [:error] [pid 24660:tid 24716] [client 4.230.28.195:6121] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aVgF9mZwWsLNsJ3ZH7bXPgAAAFc"]
[Sat Jan 03 01:52:55.059676 2026] [:error] [pid 24749:tid 24775] [client 4.230.28.195:6123] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVgF90iv6Q9UlqwBJkZqrgAAANg"]
[Sat Jan 03 01:52:55.395006 2026] [:error] [pid 24749:tid 24756] [client 4.230.28.195:6066] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVgF90iv6Q9UlqwBJkZqrwAAAMU"]
[Sat Jan 03 01:52:55.718005 2026] [:error] [pid 24659:tid 24681] [client 4.230.28.195:14712] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVgF92ucj-rXdFUnVEs8lgAAABE"]
[Sat Jan 03 01:52:56.015768 2026] [:error] [pid 24659:tid 24666] [client 4.230.28.195:6030] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVgF-Gucj-rXdFUnVEs8lwAAAAI"]
[Sat Jan 03 01:52:56.301203 2026] [:error] [pid 24659:tid 24676] [client 4.230.28.195:6033] [client 4.230.28.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVgF-Gucj-rXdFUnVEs8mgAAAAw"]
[Sat Jan 03 01:52:56.685397 2026] [:error] [pid 24660:tid 24705] [client 4.230.28.195:14653] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aVgF-GZwWsLNsJ3ZH7bXQAAAAEw"]
[Sat Jan 03 01:52:56.960293 2026] [:error] [pid 24660:tid 24699] [client 4.230.28.195:5960] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aVgF-GZwWsLNsJ3ZH7bXQQAAAEY"]
[Sat Jan 03 01:52:57.255715 2026] [:error] [pid 24749:tid 24767] [client 4.230.28.195:5993] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aVgF-Uiv6Q9UlqwBJkZqsQAAANA"]
[Sat Jan 03 01:52:57.671697 2026] [:error] [pid 24661:tid 24737] [client 4.230.28.195:6083] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aVgF-Rfxsu5kmLDAcZucXgAAAJE"]
[Sat Jan 03 01:52:57.994775 2026] [:error] [pid 24659:tid 24683] [client 4.230.28.195:14687] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aVgF-Wucj-rXdFUnVEs8nAAAABM"]
[Sat Jan 03 01:52:58.271729 2026] [:error] [pid 24659:tid 24688] [client 4.230.28.195:6052] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aVgF-mucj-rXdFUnVEs8ngAAABg"]
[Sat Jan 03 01:52:58.592576 2026] [:error] [pid 24660:tid 24696] [client 4.230.28.195:6054] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aVgF-mZwWsLNsJ3ZH7bXSQAAAEM"]
[Sat Jan 03 01:52:58.912016 2026] [:error] [pid 24749:tid 24752] [client 4.230.28.195:6035] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aVgF-kiv6Q9UlqwBJkZqswAAAME"]
[Sat Jan 03 01:52:59.207438 2026] [:error] [pid 24749:tid 24764] [client 4.230.28.195:5966] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aVgF-0iv6Q9UlqwBJkZqtAAAAM0"]
[Sat Jan 03 01:52:59.500532 2026] [:error] [pid 24660:tid 24716] [client 4.230.28.195:6020] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aVgF-2ZwWsLNsJ3ZH7bXTAAAAFc"]
[Sat Jan 03 01:52:59.784511 2026] [:error] [pid 24660:tid 24714] [client 4.230.28.195:6102] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aVgF-2ZwWsLNsJ3ZH7bXTgAAAFU"]
[Sat Jan 03 01:53:00.251980 2026] [:error] [pid 24660:tid 24699] [client 4.230.28.195:5978] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aVgF_GZwWsLNsJ3ZH7bXTwAAAEY"]
[Sat Jan 03 01:53:00.547788 2026] [:error] [pid 24661:tid 24725] [client 4.230.28.195:6022] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVgF_Bfxsu5kmLDAcZucXwAAAIU"]
[Sat Jan 03 01:53:00.856037 2026] [:error] [pid 24749:tid 24775] [client 4.230.28.195:5977] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVgF_Eiv6Q9UlqwBJkZqwgAAANg"]
[Sat Jan 03 01:53:01.155394 2026] [:error] [pid 24749:tid 24774] [client 4.230.28.195:6049] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVgF_Uiv6Q9UlqwBJkZqwwAAANc"]
[Sat Jan 03 01:53:01.442901 2026] [:error] [pid 24749:tid 24773] [client 4.230.28.195:6039] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVgF_Uiv6Q9UlqwBJkZqxQAAANY"]
[Sat Jan 03 01:53:01.742979 2026] [:error] [pid 24661:tid 24721] [client 4.230.28.195:5985] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aVgF_Rfxsu5kmLDAcZucYAAAAIE"]
[Sat Jan 03 01:53:02.042628 2026] [:error] [pid 24661:tid 24728] [client 4.230.28.195:5994] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aVgF_hfxsu5kmLDAcZucYgAAAIg"]
[Sat Jan 03 01:53:02.355718 2026] [:error] [pid 24661:tid 24738] [client 4.230.28.195:6130] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aVgF_hfxsu5kmLDAcZucYwAAAJI"]
[Sat Jan 03 01:53:02.660820 2026] [:error] [pid 24661:tid 24726] [client 4.230.28.195:5923] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aVgF_hfxsu5kmLDAcZucZgAAAIY"]
[Sat Jan 03 01:53:02.999023 2026] [:error] [pid 24661:tid 24741] [client 4.230.28.195:6005] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aVgF_hfxsu5kmLDAcZucaAAAAJU"]
[Sat Jan 03 01:53:03.312402 2026] [:error] [pid 24661:tid 24744] [client 4.230.28.195:6004] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aVgF_xfxsu5kmLDAcZucawAAAJg"]
[Sat Jan 03 01:53:03.618983 2026] [:error] [pid 24661:tid 24727] [client 4.230.28.195:6059] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aVgF_xfxsu5kmLDAcZucbAAAAIc"]
[Sat Jan 03 01:53:03.902073 2026] [:error] [pid 24661:tid 24735] [client 4.230.28.195:6056] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aVgF_xfxsu5kmLDAcZucbQAAAI8"]
[Sat Jan 03 01:53:04.234144 2026] [:error] [pid 24749:tid 24769] [client 4.230.28.195:5998] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aVgGAEiv6Q9UlqwBJkZqyAAAANI"]
[Sat Jan 03 01:53:04.516581 2026] [:error] [pid 24749:tid 24757] [client 4.230.28.195:14600] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aVgGAEiv6Q9UlqwBJkZqyQAAAMY"]
[Sat Jan 03 01:53:04.839260 2026] [:error] [pid 24749:tid 24763] [client 4.230.28.195:6034] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aVgGAEiv6Q9UlqwBJkZqywAAAMw"]
[Sat Jan 03 01:53:05.194126 2026] [:error] [pid 24749:tid 24771] [client 4.230.28.195:6037] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aVgGAUiv6Q9UlqwBJkZqzAAAANQ"]
[Sat Jan 03 01:53:05.484918 2026] [:error] [pid 24749:tid 24759] [client 4.230.28.195:5898] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aVgGAUiv6Q9UlqwBJkZqzQAAAMg"]
[Sat Jan 03 01:53:05.837987 2026] [:error] [pid 24749:tid 24775] [client 4.230.28.195:6061] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aVgGAUiv6Q9UlqwBJkZqzgAAANg"]
[Sat Jan 03 01:53:06.150173 2026] [:error] [pid 24749:tid 24756] [client 4.230.28.195:6041] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aVgGAkiv6Q9UlqwBJkZq0AAAAMU"]
[Sat Jan 03 01:53:06.435206 2026] [:error] [pid 24659:tid 24665] [client 4.230.28.195:6038] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aVgGAmucj-rXdFUnVEs8oQAAAAE"]
[Sat Jan 03 01:53:06.738530 2026] [:error] [pid 24659:tid 24666] [client 4.230.28.195:6015] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVgGAmucj-rXdFUnVEs8ogAAAAI"]
[Sat Jan 03 01:53:07.031447 2026] [:error] [pid 24659:tid 24685] [client 4.230.28.195:5959] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVgGA2ucj-rXdFUnVEs8pAAAABU"]
[Sat Jan 03 01:53:07.367073 2026] [:error] [pid 24661:tid 24742] [client 4.230.28.195:5760] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVgGAxfxsu5kmLDAcZucdAAAAJY"]
[Sat Jan 03 01:53:07.665504 2026] [:error] [pid 24661:tid 24728] [client 4.230.28.195:5921] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVgGAxfxsu5kmLDAcZucdQAAAIg"]
[Sat Jan 03 01:53:07.952395 2026] [:error] [pid 24659:tid 24671] [client 4.230.28.195:5956] [client 4.230.28.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aVgGA2ucj-rXdFUnVEs8pgAAAAc"]
[Sat Jan 03 01:53:08.266063 2026] [:error] [pid 24661:tid 24730] [client 4.230.28.195:6124] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aVgGBBfxsu5kmLDAcZucdgAAAIo"]
[Sat Jan 03 01:53:08.568061 2026] [:error] [pid 24661:tid 24726] [client 4.230.28.195:6044] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aVgGBBfxsu5kmLDAcZucdwAAAIY"]
[Sat Jan 03 01:53:08.883507 2026] [:error] [pid 24661:tid 24741] [client 4.230.28.195:6053] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aVgGBBfxsu5kmLDAcZuceQAAAJU"]
[Sat Jan 03 01:53:09.210621 2026] [:error] [pid 24659:tid 24688] [client 4.230.28.195:5983] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVgGBWucj-rXdFUnVEs8qAAAABg"]
[Sat Jan 03 01:53:09.528859 2026] [:error] [pid 24659:tid 24674] [client 4.230.28.195:5997] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVgGBWucj-rXdFUnVEs8qQAAAAo"]
[Sat Jan 03 01:53:09.856690 2026] [:error] [pid 24660:tid 24709] [client 4.230.28.195:6072] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVgGBWZwWsLNsJ3ZH7bXWQAAAFA"]
[Sat Jan 03 01:53:10.264777 2026] [:error] [pid 24661:tid 24723] [client 4.230.28.195:5976] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVgGBhfxsu5kmLDAcZucewAAAIM"]
[Sat Jan 03 01:53:10.571578 2026] [:error] [pid 24660:tid 24706] [client 4.230.28.195:5931] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aVgGBmZwWsLNsJ3ZH7bXWgAAAE0"]
[Sat Jan 03 01:53:10.873303 2026] [:error] [pid 24661:tid 24743] [client 4.230.28.195:6014] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aVgGBhfxsu5kmLDAcZucfwAAAJc"]
[Sat Jan 03 01:53:11.166022 2026] [:error] [pid 24661:tid 24724] [client 4.230.28.195:5986] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aVgGBxfxsu5kmLDAcZucgAAAAIQ"]
[Sat Jan 03 01:53:11.482125 2026] [:error] [pid 24660:tid 24704] [client 4.230.28.195:5918] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aVgGB2ZwWsLNsJ3ZH7bXWwAAAEs"]
[Sat Jan 03 01:53:11.777875 2026] [:error] [pid 24659:tid 24679] [client 4.230.28.195:5946] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aVgGB2ucj-rXdFUnVEs8rAAAAA8"]
[Sat Jan 03 01:53:12.056298 2026] [:error] [pid 24660:tid 24699] [client 4.230.28.195:5979] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aVgGCGZwWsLNsJ3ZH7bXXQAAAEY"]
[Sat Jan 03 01:53:12.353287 2026] [:error] [pid 24749:tid 24758] [client 4.230.28.195:5895] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aVgGCEiv6Q9UlqwBJkZq0gAAAMc"]
[Sat Jan 03 01:53:12.650559 2026] [:error] [pid 24659:tid 24678] [client 4.230.28.195:6008] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aVgGCGucj-rXdFUnVEs8rgAAAA4"]
[Sat Jan 03 01:53:12.982051 2026] [:error] [pid 24661:tid 24720] [client 4.230.28.195:6113] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVgGCBfxsu5kmLDAcZucgQAAAIA"]
[Sat Jan 03 01:53:13.255072 2026] [:error] [pid 24661:tid 24725] [client 4.230.28.195:5934] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVgGCRfxsu5kmLDAcZucggAAAIU"]
[Sat Jan 03 01:53:13.581560 2026] [:error] [pid 24659:tid 24687] [client 4.230.28.195:6134] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVgGCWucj-rXdFUnVEs8sAAAABc"]
[Sat Jan 03 01:53:13.883388 2026] [:error] [pid 24661:tid 24740] [client 4.230.28.195:5987] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVgGCRfxsu5kmLDAcZucgwAAAJQ"]
[Sat Jan 03 01:53:14.158726 2026] [:error] [pid 24659:tid 24670] [client 4.230.28.195:14659] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVgGCmucj-rXdFUnVEs8swAAAAY"]
[Sat Jan 03 01:53:14.493599 2026] [:error] [pid 24659:tid 24668] [client 4.230.28.195:6064] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVgGCmucj-rXdFUnVEs8tAAAAAQ"]
[Sat Jan 03 01:53:14.763952 2026] [:error] [pid 24661:tid 24730] [client 4.230.28.195:5890] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVgGChfxsu5kmLDAcZuchwAAAIo"]
[Sat Jan 03 01:53:15.050637 2026] [:error] [pid 24660:tid 24717] [client 4.230.28.195:5927] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVgGC2ZwWsLNsJ3ZH7bXYwAAAFg"]
[Sat Jan 03 01:53:15.326668 2026] [:error] [pid 24661:tid 24722] [client 4.230.28.195:6068] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/log.php"] [unique_id "aVgGCxfxsu5kmLDAcZuciAAAAII"]
[Sat Jan 03 01:53:15.609743 2026] [:error] [pid 24749:tid 24769] [client 4.230.28.195:5999] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/log.php"] [unique_id "aVgGC0iv6Q9UlqwBJkZq1wAAANI"]
[Sat Jan 03 01:53:15.919569 2026] [:error] [pid 24749:tid 24754] [client 4.230.28.195:6027] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/log.php"] [unique_id "aVgGC0iv6Q9UlqwBJkZq2AAAAMM"]
[Sat Jan 03 01:53:16.280859 2026] [:error] [pid 24659:tid 24680] [client 4.230.28.195:6001] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/log.php"] [unique_id "aVgGDGucj-rXdFUnVEs8uAAAABA"]
[Sat Jan 03 01:53:16.565531 2026] [:error] [pid 24659:tid 24679] [client 4.230.28.195:6007] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aVgGDGucj-rXdFUnVEs8uQAAAA8"]
[Sat Jan 03 01:53:16.845761 2026] [:error] [pid 24660:tid 24695] [client 4.230.28.195:5846] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aVgGDGZwWsLNsJ3ZH7bXZQAAAEI"]
[Sat Jan 03 01:53:17.114135 2026] [:error] [pid 24660:tid 24709] [client 4.230.28.195:5896] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aVgGDWZwWsLNsJ3ZH7bXZwAAAFA"]
[Sat Jan 03 01:53:17.417039 2026] [:error] [pid 24660:tid 24716] [client 4.230.28.195:14643] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aVgGDWZwWsLNsJ3ZH7bXaAAAAFc"]
[Sat Jan 03 01:53:17.698620 2026] [:error] [pid 24659:tid 24686] [client 4.230.28.195:5967] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aVgGDWucj-rXdFUnVEs8vQAAABY"]
[Sat Jan 03 01:53:17.986819 2026] [:error] [pid 24660:tid 24713] [client 4.230.28.195:5972] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aVgGDWZwWsLNsJ3ZH7bXawAAAFQ"]
[Sat Jan 03 01:53:18.255807 2026] [:error] [pid 24660:tid 24705] [client 4.230.28.195:5892] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aVgGDmZwWsLNsJ3ZH7bXbQAAAEw"]
[Sat Jan 03 01:53:18.570673 2026] [:error] [pid 24749:tid 24761] [client 4.230.28.195:5990] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aVgGDkiv6Q9UlqwBJkZq2wAAAMo"]
[Sat Jan 03 01:53:18.902847 2026] [:error] [pid 24749:tid 24755] [client 4.230.28.195:6075] [client 4.230.28.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVgGDkiv6Q9UlqwBJkZq3AAAAMQ"]
[Sat Jan 03 01:53:19.181244 2026] [:error] [pid 24660:tid 24700] [client 4.230.28.195:5904] [client 4.230.28.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aVgGD2ZwWsLNsJ3ZH7bXbgAAAEc"]
[Sat Jan 03 01:53:19.497161 2026] [:error] [pid 24659:tid 24668] [client 4.230.28.195:6067] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aVgGD2ucj-rXdFUnVEs8wQAAAAQ"]
[Sat Jan 03 01:53:19.869889 2026] [:error] [pid 24660:tid 24696] [client 4.230.28.195:5914] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aVgGD2ZwWsLNsJ3ZH7bXcQAAAEM"]
[Sat Jan 03 01:53:20.139364 2026] [:error] [pid 24749:tid 24758] [client 4.230.28.195:6077] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aVgGEEiv6Q9UlqwBJkZq4AAAAMc"]
[Sat Jan 03 01:53:20.459759 2026] [:error] [pid 24749:tid 24764] [client 4.230.28.195:5991] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aVgGEEiv6Q9UlqwBJkZq4gAAAM0"]
[Sat Jan 03 01:53:20.783316 2026] [:error] [pid 24749:tid 24772] [client 4.230.28.195:6012] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aVgGEEiv6Q9UlqwBJkZq5QAAANU"]
[Sat Jan 03 01:53:21.066001 2026] [:error] [pid 24749:tid 24751] [client 4.230.28.195:5897] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aVgGEUiv6Q9UlqwBJkZq5wAAAMA"]
[Sat Jan 03 01:53:21.356888 2026] [:error] [pid 24659:tid 24669] [client 4.230.28.195:5947] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aVgGEWucj-rXdFUnVEs8wgAAAAU"]
[Sat Jan 03 01:53:21.757507 2026] [:error] [pid 24659:tid 24684] [client 4.230.28.195:5996] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aVgGEWucj-rXdFUnVEs8xAAAABQ"]
[Sat Jan 03 01:53:22.038179 2026] [:error] [pid 24749:tid 24769] [client 4.230.28.195:5828] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aVgGEkiv6Q9UlqwBJkZq6AAAANI"]
[Sat Jan 03 01:53:22.326848 2026] [:error] [pid 24749:tid 24754] [client 4.230.28.195:5899] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aVgGEkiv6Q9UlqwBJkZq6QAAAMM"]
[Sat Jan 03 01:53:22.626568 2026] [:error] [pid 24659:tid 24678] [client 4.230.28.195:6138] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aVgGEmucj-rXdFUnVEs8xwAAAA4"]
[Sat Jan 03 01:53:22.954178 2026] [:error] [pid 24659:tid 24667] [client 4.230.28.195:5915] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aVgGEmucj-rXdFUnVEs8yQAAAAM"]
[Sat Jan 03 01:53:35.545747 2026] [:error] [pid 24661:tid 24725] [client 4.230.28.195:5961] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aVgGHxfxsu5kmLDAcZucoQAAAIU"]
[Sat Jan 03 01:53:35.815008 2026] [:error] [pid 24659:tid 24665] [client 4.230.28.195:14624] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aVgGH2ucj-rXdFUnVEs81wAAAAE"]
[Sat Jan 03 01:53:36.095523 2026] [:error] [pid 24660:tid 24702] [client 4.230.28.195:6055] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aVgGIGZwWsLNsJ3ZH7bXgwAAAEk"]
[Sat Jan 03 01:53:36.368189 2026] [:error] [pid 24659:tid 24674] [client 4.230.28.195:6097] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aVgGIGucj-rXdFUnVEs82AAAAAo"]
[Sat Jan 03 01:53:36.660888 2026] [:error] [pid 24660:tid 24701] [client 4.230.28.195:5917] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aVgGIGZwWsLNsJ3ZH7bXhQAAAEg"]
[Sat Jan 03 01:53:36.976520 2026] [:error] [pid 24749:tid 24754] [client 4.230.28.195:6047] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aVgGIEiv6Q9UlqwBJkZrAAAAAMM"]
[Sat Jan 03 01:53:37.245076 2026] [:error] [pid 24749:tid 24759] [client 4.230.28.195:6071] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aVgGIUiv6Q9UlqwBJkZrAQAAAMg"]
[Sat Jan 03 01:53:37.516537 2026] [:error] [pid 24749:tid 24757] [client 4.230.28.195:5853] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aVgGIUiv6Q9UlqwBJkZrAwAAAMY"]
[Sat Jan 03 01:53:37.863104 2026] [:error] [pid 24661:tid 24737] [client 4.230.28.195:5962] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aVgGIRfxsu5kmLDAcZucogAAAJE"]
[Sat Jan 03 01:53:38.229024 2026] [:error] [pid 24661:tid 24721] [client 4.230.28.195:6063] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aVgGIhfxsu5kmLDAcZucowAAAIE"]
[Sat Jan 03 01:53:38.587079 2026] [:error] [pid 24660:tid 24710] [client 4.230.28.195:6060] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aVgGImZwWsLNsJ3ZH7bXhwAAAFE"]
[Sat Jan 03 01:53:38.949434 2026] [:error] [pid 24661:tid 24731] [client 4.230.28.195:5840] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aVgGIhfxsu5kmLDAcZucpgAAAIs"]
[Sat Jan 03 01:53:39.274440 2026] [:error] [pid 24660:tid 24714] [client 4.230.28.195:5826] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aVgGI2ZwWsLNsJ3ZH7bXiAAAAFU"]
[Sat Jan 03 01:53:39.544543 2026] [:error] [pid 24660:tid 24704] [client 4.230.28.195:6046] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aVgGI2ZwWsLNsJ3ZH7bXiQAAAEs"]
[Sat Jan 03 01:53:39.839268 2026] [:error] [pid 24659:tid 24677] [client 4.230.28.195:6026] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aVgGI2ucj-rXdFUnVEs83QAAAA0"]
[Sat Jan 03 01:53:40.140795 2026] [:error] [pid 24660:tid 24711] [client 4.230.28.195:5973] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aVgGJGZwWsLNsJ3ZH7bXiwAAAFI"]
[Sat Jan 03 01:53:40.517782 2026] [:error] [pid 24659:tid 24664] [client 4.230.28.195:5929] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aVgGJGucj-rXdFUnVEs83wAAAAA"]
[Sat Jan 03 01:53:40.864183 2026] [:error] [pid 24660:tid 24697] [client 4.230.28.195:5936] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aVgGJGZwWsLNsJ3ZH7bXjQAAAEQ"]
[Sat Jan 03 01:53:41.186619 2026] [:error] [pid 24661:tid 24734] [client 4.230.28.195:5968] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aVgGJRfxsu5kmLDAcZucrAAAAI4"]
[Sat Jan 03 01:53:41.544639 2026] [:error] [pid 24660:tid 24696] [client 4.230.28.195:5992] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aVgGJWZwWsLNsJ3ZH7bXjwAAAEM"]
[Sat Jan 03 01:53:41.876956 2026] [:error] [pid 24749:tid 24753] [client 4.230.28.195:5958] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aVgGJUiv6Q9UlqwBJkZrBQAAAMI"]
[Sat Jan 03 01:53:42.228607 2026] [:error] [pid 24749:tid 24769] [client 4.230.28.195:5905] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aVgGJkiv6Q9UlqwBJkZrBgAAANI"]
[Sat Jan 03 01:53:42.528164 2026] [:error] [pid 24749:tid 24752] [client 4.230.28.195:5862] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aVgGJkiv6Q9UlqwBJkZrBwAAAME"]
[Sat Jan 03 01:53:42.920799 2026] [:error] [pid 24749:tid 24764] [client 4.230.28.195:5922] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aVgGJkiv6Q9UlqwBJkZrCAAAAM0"]
[Sat Jan 03 01:53:43.322083 2026] [:error] [pid 24659:tid 24669] [client 4.230.28.195:5926] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aVgGJ2ucj-rXdFUnVEs84wAAAAU"]
[Sat Jan 03 01:53:43.749579 2026] [:error] [pid 24661:tid 24737] [client 4.230.28.195:5842] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aVgGJxfxsu5kmLDAcZucsQAAAJE"]
[Sat Jan 03 01:53:44.180045 2026] [:error] [pid 24749:tid 24755] [client 4.230.28.195:5975] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aVgGKEiv6Q9UlqwBJkZrCgAAAMQ"]
[Sat Jan 03 01:53:44.676675 2026] [:error] [pid 24660:tid 24701] [client 4.230.28.195:5938] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aVgGKGZwWsLNsJ3ZH7bXkwAAAEg"]
[Sat Jan 03 01:53:44.973795 2026] [:error] [pid 24660:tid 24707] [client 4.230.28.195:5908] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aVgGKGZwWsLNsJ3ZH7bXlQAAAE4"]
[Sat Jan 03 01:53:45.314441 2026] [:error] [pid 24659:tid 24665] [client 4.230.28.195:6070] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aVgGKWucj-rXdFUnVEs85gAAAAE"]
[Sat Jan 03 01:53:45.658879 2026] [:error] [pid 24661:tid 24726] [client 4.230.28.195:5800] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aVgGKRfxsu5kmLDAcZuctAAAAIY"]
[Sat Jan 03 01:53:46.028564 2026] [:error] [pid 24749:tid 24751] [client 4.230.28.195:5825] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aVgGKkiv6Q9UlqwBJkZrDQAAAMA"]
[Sat Jan 03 01:53:46.308410 2026] [:error] [pid 24659:tid 24685] [client 4.230.28.195:5889] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVgGKmucj-rXdFUnVEs86AAAABU"]
[Sat Jan 03 01:53:46.607799 2026] [:error] [pid 24749:tid 24765] [client 4.230.28.195:5995] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVgGKkiv6Q9UlqwBJkZrDgAAAM4"]
[Sat Jan 03 01:53:46.971956 2026] [:error] [pid 24661:tid 24731] [client 4.230.28.195:5932] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVgGKhfxsu5kmLDAcZuctQAAAIs"]
[Sat Jan 03 01:53:47.290381 2026] [:error] [pid 24749:tid 24759] [client 4.230.28.195:5940] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVgGK0iv6Q9UlqwBJkZrEQAAAMg"]
[Sat Jan 03 01:53:47.612760 2026] [:error] [pid 24749:tid 24757] [client 4.230.28.195:5863] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aVgGK0iv6Q9UlqwBJkZrEwAAAMY"]
[Sat Jan 03 01:53:47.938787 2026] [:error] [pid 24749:tid 24761] [client 4.230.28.195:5833] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aVgGK0iv6Q9UlqwBJkZrFAAAAMo"]
[Sat Jan 03 01:53:48.249626 2026] [:error] [pid 24659:tid 24677] [client 4.230.28.195:5984] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aVgGLGucj-rXdFUnVEs86wAAAA0"]
[Sat Jan 03 01:53:48.524225 2026] [:error] [pid 24749:tid 24758] [client 4.230.28.195:5951] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aVgGLEiv6Q9UlqwBJkZrFQAAAMc"]
[Sat Jan 03 01:53:48.815804 2026] [:error] [pid 24749:tid 24769] [client 4.230.28.195:6090] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aVgGLEiv6Q9UlqwBJkZrFwAAANI"]
[Sat Jan 03 01:53:49.108709 2026] [:error] [pid 24659:tid 24664] [client 4.230.28.195:5891] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aVgGLWucj-rXdFUnVEs87AAAAAA"]
[Sat Jan 03 01:53:49.383436 2026] [:error] [pid 24659:tid 24684] [client 4.230.28.195:5964] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aVgGLWucj-rXdFUnVEs87QAAABQ"]
[Sat Jan 03 01:53:49.655565 2026] [:error] [pid 24660:tid 24695] [client 4.230.28.195:5988] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aVgGLWZwWsLNsJ3ZH7bXmQAAAEI"]
[Sat Jan 03 01:53:49.986983 2026] [:error] [pid 24749:tid 24767] [client 4.230.28.195:5837] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aVgGLUiv6Q9UlqwBJkZrGgAAANA"]
[Sat Jan 03 01:53:50.334002 2026] [:error] [pid 24660:tid 24717] [client 4.230.28.195:6048] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aVgGLmZwWsLNsJ3ZH7bXnAAAAFg"]
[Sat Jan 03 01:53:50.628183 2026] [:error] [pid 24661:tid 24739] [client 4.230.28.195:6002] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aVgGLhfxsu5kmLDAcZucuAAAAJM"]
[Sat Jan 03 01:53:50.967407 2026] [:error] [pid 24661:tid 24729] [client 4.230.28.195:5838] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aVgGLhfxsu5kmLDAcZucugAAAIk"]
[Sat Jan 03 01:53:51.263825 2026] [:error] [pid 24660:tid 24716] [client 4.230.28.195:5726] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aVgGL2ZwWsLNsJ3ZH7bXnQAAAFc"]
[Sat Jan 03 01:53:51.579125 2026] [:error] [pid 24749:tid 24755] [client 4.230.28.195:5886] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aVgGL0iv6Q9UlqwBJkZrHAAAAMQ"]
[Sat Jan 03 01:53:51.877358 2026] [:error] [pid 24661:tid 24734] [client 4.230.28.195:5864] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aVgGLxfxsu5kmLDAcZucuwAAAI4"]
[Sat Jan 03 01:53:52.173621 2026] [:error] [pid 24661:tid 24743] [client 4.230.28.195:5870] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aVgGMBfxsu5kmLDAcZucvAAAAJc"]
[Sat Jan 03 01:53:52.470196 2026] [:error] [pid 24660:tid 24709] [client 4.230.28.195:6000] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aVgGMGZwWsLNsJ3ZH7bXngAAAFA"]
[Sat Jan 03 01:53:52.747214 2026] [:error] [pid 24660:tid 24703] [client 4.230.28.195:5992] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aVgGMGZwWsLNsJ3ZH7bXnwAAAEo"]
[Sat Jan 03 01:53:53.039082 2026] [:error] [pid 24660:tid 24694] [client 4.230.28.195:6062] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aVgGMWZwWsLNsJ3ZH7bXoAAAAEE"]
[Sat Jan 03 01:53:53.321058 2026] [:error] [pid 24749:tid 24765] [client 4.230.28.195:5860] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aVgGMUiv6Q9UlqwBJkZrHgAAAM4"]
[Sat Jan 03 01:53:53.603198 2026] [:error] [pid 24661:tid 24724] [client 4.230.28.195:5854] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aVgGMRfxsu5kmLDAcZucvgAAAIQ"]
[Sat Jan 03 01:53:53.882856 2026] [:error] [pid 24660:tid 24699] [client 4.230.28.195:5893] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aVgGMWZwWsLNsJ3ZH7bXogAAAEY"]
[Sat Jan 03 01:53:54.170407 2026] [:error] [pid 24661:tid 24727] [client 4.230.28.195:5839] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aVgGMhfxsu5kmLDAcZucwAAAAIc"]
[Sat Jan 03 01:53:54.451120 2026] [:error] [pid 24660:tid 24701] [client 4.230.28.195:5982] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aVgGMmZwWsLNsJ3ZH7bXowAAAEg"]
[Sat Jan 03 01:53:54.766020 2026] [:error] [pid 24660:tid 24712] [client 4.230.28.195:5782] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aVgGMmZwWsLNsJ3ZH7bXpAAAAFM"]
[Sat Jan 03 01:53:55.038963 2026] [:error] [pid 24749:tid 24774] [client 4.230.28.195:5971] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aVgGM0iv6Q9UlqwBJkZrIAAAANc"]
[Sat Jan 03 01:53:55.337760 2026] [:error] [pid 24749:tid 24760] [client 4.230.28.195:5919] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aVgGM0iv6Q9UlqwBJkZrIQAAAMk"]
[Sat Jan 03 01:53:55.609889 2026] [:error] [pid 24661:tid 24726] [client 4.230.28.195:5957] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aVgGMxfxsu5kmLDAcZucxAAAAIY"]
[Sat Jan 03 01:53:55.891566 2026] [:error] [pid 24661:tid 24731] [client 4.230.28.195:5802] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aVgGMxfxsu5kmLDAcZucxgAAAIs"]
[Sat Jan 03 01:53:56.170805 2026] [:error] [pid 24660:tid 24708] [client 4.230.28.195:5880] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aVgGNGZwWsLNsJ3ZH7bXpwAAAE8"]
[Sat Jan 03 01:53:56.457908 2026] [:error] [pid 24661:tid 24741] [client 4.230.28.195:5834] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aVgGNBfxsu5kmLDAcZucxwAAAJU"]
[Sat Jan 03 01:53:56.761143 2026] [:error] [pid 24661:tid 24739] [client 4.230.28.195:5907] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aVgGNBfxsu5kmLDAcZucyQAAAJM"]
[Sat Jan 03 01:53:57.045626 2026] [:error] [pid 24661:tid 24729] [client 4.230.28.195:5910] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aVgGNRfxsu5kmLDAcZucygAAAIk"]
[Sat Jan 03 01:53:57.335289 2026] [:error] [pid 24749:tid 24757] [client 4.230.28.195:5989] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aVgGNUiv6Q9UlqwBJkZrIwAAAMY"]
[Sat Jan 03 01:53:57.610903 2026] [:error] [pid 24749:tid 24758] [client 4.230.28.195:5913] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aVgGNUiv6Q9UlqwBJkZrJQAAAMc"]
[Sat Jan 03 01:53:57.887685 2026] [:error] [pid 24749:tid 24763] [client 4.230.28.195:5885] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aVgGNUiv6Q9UlqwBJkZrJwAAAMw"]
[Sat Jan 03 01:53:58.225869 2026] [:error] [pid 24660:tid 24698] [client 4.230.28.195:5881] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aVgGNmZwWsLNsJ3ZH7bXqQAAAEU"]
[Sat Jan 03 01:53:58.505113 2026] [:error] [pid 24660:tid 24704] [client 4.230.28.195:5912] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aVgGNmZwWsLNsJ3ZH7bXrAAAAEs"]
[Sat Jan 03 01:53:58.780994 2026] [:error] [pid 24659:tid 24667] [client 4.230.28.195:5867] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aVgGNmucj-rXdFUnVEs87wAAAAM"]
[Sat Jan 03 01:53:59.054440 2026] [:error] [pid 24661:tid 24740] [client 4.230.28.195:5829] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aVgGNxfxsu5kmLDAcZuczgAAAJQ"]
[Sat Jan 03 01:53:59.334588 2026] [:error] [pid 24660:tid 24693] [client 4.230.28.195:5832] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aVgGN2ZwWsLNsJ3ZH7bXrQAAAEA"]
[Sat Jan 03 01:53:59.653064 2026] [:error] [pid 24661:tid 24728] [client 4.230.28.195:5945] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aVgGNxfxsu5kmLDAcZuczwAAAIg"]
[Sat Jan 03 01:53:59.932368 2026] [:error] [pid 24659:tid 24666] [client 4.230.28.195:5949] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aVgGN2ucj-rXdFUnVEs88QAAAAI"]
[Sat Jan 03 01:54:00.207178 2026] [:error] [pid 24659:tid 24673] [client 4.230.28.195:5941] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aVgGOGucj-rXdFUnVEs88gAAAAk"]
[Sat Jan 03 01:54:00.498604 2026] [:error] [pid 24659:tid 24675] [client 4.230.28.195:6125] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aVgGOGucj-rXdFUnVEs88wAAAAs"]
[Sat Jan 03 01:54:00.768246 2026] [:error] [pid 24659:tid 24688] [client 4.230.28.195:5888] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aVgGOGucj-rXdFUnVEs89AAAABg"]
[Sat Jan 03 01:54:01.041338 2026] [:error] [pid 24659:tid 24674] [client 4.230.28.195:5950] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aVgGOWucj-rXdFUnVEs89QAAAAo"]
[Sat Jan 03 01:54:01.349828 2026] [:error] [pid 24661:tid 24737] [client 4.230.28.195:5869] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aVgGORfxsu5kmLDAcZuc0gAAAJE"]
[Sat Jan 03 01:54:01.634037 2026] [:error] [pid 24659:tid 24676] [client 4.230.28.195:6050] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aVgGOWucj-rXdFUnVEs8-AAAAAw"]
[Sat Jan 03 01:54:01.936742 2026] [:error] [pid 24659:tid 24677] [client 4.230.28.195:5909] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aVgGOWucj-rXdFUnVEs8-gAAAA0"]
[Sat Jan 03 01:54:02.214491 2026] [:error] [pid 24661:tid 24720] [client 4.230.28.195:6058] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aVgGOhfxsu5kmLDAcZuc0wAAAIA"]
[Sat Jan 03 01:54:02.534132 2026] [:error] [pid 24749:tid 24767] [client 4.230.28.195:5871] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aVgGOkiv6Q9UlqwBJkZrKAAAANA"]
[Sat Jan 03 01:54:02.855844 2026] [:error] [pid 24660:tid 24715] [client 4.230.28.195:5948] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aVgGOmZwWsLNsJ3ZH7bXrwAAAFY"]
[Sat Jan 03 01:54:03.129496 2026] [:error] [pid 24749:tid 24769] [client 4.230.28.195:5878] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aVgGO0iv6Q9UlqwBJkZrKgAAANI"]
[Sat Jan 03 01:54:03.403513 2026] [:error] [pid 24659:tid 24683] [client 4.230.28.195:5855] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aVgGO2ucj-rXdFUnVEs8_AAAABM"]
[Sat Jan 03 01:54:03.705094 2026] [:error] [pid 24659:tid 24678] [client 4.230.28.195:6011] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aVgGO2ucj-rXdFUnVEs8_gAAAA4"]
[Sat Jan 03 01:54:03.984651 2026] [:error] [pid 24749:tid 24762] [client 4.230.28.195:5808] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aVgGO0iv6Q9UlqwBJkZrLAAAAMs"]
[Sat Jan 03 01:54:04.281307 2026] [:error] [pid 24749:tid 24765] [client 4.230.28.195:6009] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aVgGPEiv6Q9UlqwBJkZrLgAAAM4"]
[Sat Jan 03 01:54:04.563437 2026] [:error] [pid 24749:tid 24774] [client 4.230.28.195:5850] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aVgGPEiv6Q9UlqwBJkZrLwAAANc"]
[Sat Jan 03 01:54:04.853600 2026] [:error] [pid 24659:tid 24667] [client 4.230.28.195:5796] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aVgGPGucj-rXdFUnVEs9AQAAAAM"]
[Sat Jan 03 01:54:05.132352 2026] [:error] [pid 24660:tid 24709] [client 4.230.28.195:5702] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up4.php"] [unique_id "aVgGPWZwWsLNsJ3ZH7bXsAAAAFA"]
[Sat Jan 03 01:54:05.405541 2026] [:error] [pid 24749:tid 24760] [client 4.230.28.195:6103] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up4.php"] [unique_id "aVgGPUiv6Q9UlqwBJkZrMQAAAMk"]
[Sat Jan 03 01:54:05.709212 2026] [:error] [pid 24749:tid 24775] [client 4.230.28.195:5903] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up4.php"] [unique_id "aVgGPUiv6Q9UlqwBJkZrMgAAANg"]
[Sat Jan 03 01:54:06.045207 2026] [:error] [pid 24661:tid 24723] [client 4.230.28.195:5791] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up4.php"] [unique_id "aVgGPhfxsu5kmLDAcZuc2QAAAIM"]
[Sat Jan 03 01:54:06.319806 2026] [:error] [pid 24661:tid 24729] [client 4.230.28.195:6031] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aVgGPhfxsu5kmLDAcZuc2gAAAIk"]
[Sat Jan 03 01:54:06.623701 2026] [:error] [pid 24660:tid 24694] [client 4.230.28.195:5841] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aVgGPmZwWsLNsJ3ZH7bXsgAAAEE"]
[Sat Jan 03 01:54:06.912475 2026] [:error] [pid 24661:tid 24736] [client 4.230.28.195:5906] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aVgGPhfxsu5kmLDAcZuc3AAAAJA"]
[Sat Jan 03 01:54:07.184229 2026] [:error] [pid 24661:tid 24744] [client 4.230.28.195:5785] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aVgGPxfxsu5kmLDAcZuc3QAAAJg"]
[Sat Jan 03 01:54:07.480796 2026] [:error] [pid 24749:tid 24759] [client 4.230.28.195:5944] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aVgGP0iv6Q9UlqwBJkZrMwAAAMg"]
[Sat Jan 03 01:54:07.780311 2026] [:error] [pid 24749:tid 24761] [client 4.230.28.195:6010] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aVgGP0iv6Q9UlqwBJkZrNQAAAMo"]
[Sat Jan 03 01:54:08.059891 2026] [:error] [pid 24749:tid 24757] [client 4.230.28.195:5836] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aVgGQEiv6Q9UlqwBJkZrNgAAAMY"]
[Sat Jan 03 01:54:08.361877 2026] [:error] [pid 24661:tid 24735] [client 4.230.28.195:5849] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aVgGQBfxsu5kmLDAcZuc3wAAAI8"]
[Sat Jan 03 01:54:08.654141 2026] [:error] [pid 24661:tid 24743] [client 4.230.28.195:5858] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aVgGQBfxsu5kmLDAcZuc4AAAAJc"]
[Sat Jan 03 01:54:08.979353 2026] [:error] [pid 24660:tid 24712] [client 4.230.28.195:5790] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aVgGQGZwWsLNsJ3ZH7bXtgAAAFM"]
[Sat Jan 03 01:54:09.247947 2026] [:error] [pid 24660:tid 24708] [client 4.230.28.195:5792] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aVgGQWZwWsLNsJ3ZH7bXuAAAAE8"]
[Sat Jan 03 01:54:09.533156 2026] [:error] [pid 24749:tid 24764] [client 4.230.28.195:5901] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aVgGQUiv6Q9UlqwBJkZrOgAAAM0"]
[Sat Jan 03 01:54:09.806692 2026] [:error] [pid 24659:tid 24681] [client 4.230.28.195:5770] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aVgGQWucj-rXdFUnVEs9DAAAABE"]
[Sat Jan 03 01:54:10.086684 2026] [:error] [pid 24659:tid 24677] [client 4.230.28.195:5848] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aVgGQmucj-rXdFUnVEs9DQAAAA0"]
[Sat Jan 03 01:54:10.365143 2026] [:error] [pid 24660:tid 24700] [client 4.230.28.195:5902] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aVgGQmZwWsLNsJ3ZH7bXuQAAAEc"]
[Sat Jan 03 01:54:10.635492 2026] [:error] [pid 24659:tid 24684] [client 4.230.28.195:5783] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aVgGQmucj-rXdFUnVEs9EAAAABQ"]
[Sat Jan 03 01:54:10.939484 2026] [:error] [pid 24749:tid 24770] [client 4.230.28.195:5769] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aVgGQkiv6Q9UlqwBJkZrOwAAANM"]
[Sat Jan 03 01:54:11.224827 2026] [:error] [pid 24749:tid 24773] [client 4.230.28.195:5779] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aVgGQ0iv6Q9UlqwBJkZrPAAAANY"]
[Sat Jan 03 01:54:11.497631 2026] [:error] [pid 24749:tid 24762] [client 4.230.28.195:5939] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aVgGQ0iv6Q9UlqwBJkZrPgAAAMs"]
[Sat Jan 03 01:54:11.776694 2026] [:error] [pid 24659:tid 24683] [client 4.230.28.195:5935] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aVgGQ2ucj-rXdFUnVEs9EQAAABM"]
[Sat Jan 03 01:54:12.064967 2026] [:error] [pid 24660:tid 24704] [client 4.230.28.195:5872] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aVgGRGZwWsLNsJ3ZH7bXuwAAAEs"]
[Sat Jan 03 01:54:12.336573 2026] [:error] [pid 24660:tid 24714] [client 4.230.28.195:5797] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aVgGRGZwWsLNsJ3ZH7bXvQAAAFU"]
[Sat Jan 03 01:54:12.615786 2026] [:error] [pid 24749:tid 24774] [client 4.230.28.195:5820] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aVgGREiv6Q9UlqwBJkZrQgAAANc"]
[Sat Jan 03 01:54:12.905899 2026] [:error] [pid 24659:tid 24672] [client 4.230.28.195:5806] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aVgGRGucj-rXdFUnVEs9EwAAAAg"]
[Sat Jan 03 01:54:13.186324 2026] [:error] [pid 24749:tid 24775] [client 4.230.28.195:5877] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aVgGRUiv6Q9UlqwBJkZrRgAAANg"]
[Sat Jan 03 01:54:13.518514 2026] [:error] [pid 24659:tid 24679] [client 4.230.28.195:5847] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aVgGRWucj-rXdFUnVEs9FQAAAA8"]
[Sat Jan 03 01:54:13.828721 2026] [:error] [pid 24749:tid 24758] [client 4.230.28.195:5852] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aVgGRUiv6Q9UlqwBJkZrSwAAAMc"]
[Sat Jan 03 01:54:14.107784 2026] [:error] [pid 24749:tid 24752] [client 4.230.28.195:5822] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aVgGRkiv6Q9UlqwBJkZrTgAAAME"]
[Sat Jan 03 01:54:14.380826 2026] [:error] [pid 24660:tid 24693] [client 4.230.28.195:5868] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aVgGRmZwWsLNsJ3ZH7bXvwAAAEA"]
[Sat Jan 03 01:54:14.738494 2026] [:error] [pid 24661:tid 24732] [client 4.230.28.195:5844] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aVgGRhfxsu5kmLDAcZuc5wAAAIw"]
[Sat Jan 03 01:54:15.038391 2026] [:error] [pid 24661:tid 24729] [client 4.230.28.195:5780] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aVgGRxfxsu5kmLDAcZuc6QAAAIk"]
[Sat Jan 03 01:54:15.329499 2026] [:error] [pid 24661:tid 24736] [client 4.230.28.195:5911] [client 4.230.28.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aVgGRxfxsu5kmLDAcZuc6wAAAJA"]
[Sat Jan 03 02:55:55.695109 2026] [:error] [pid 24749:tid 24761] [client 159.89.160.65:51060] [client 159.89.160.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.160.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVgUu0iv6Q9UlqwBJkaLRgAAAMo"]
[Sat Jan 03 03:01:38.489699 2026] [:error] [pid 24749:tid 24770] [client 159.89.160.65:61450] [client 159.89.160.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.160.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVgWEkiv6Q9UlqwBJkaM4wAAANM"]
[Sat Jan 03 03:07:37.749736 2026] [:error] [pid 24661:tid 24723] [client 159.89.160.65:59314] [client 159.89.160.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.160.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVgXeRfxsu5kmLDAcZu6SwAAAIM"]
[Sat Jan 03 03:14:32.153968 2026] [:error] [pid 65049:tid 65070] [client 159.89.160.65:54391] [client 159.89.160.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.160.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVgZGAX5eFzLzGO099tTKQAAANM"]
[Sat Jan 03 03:22:42.606444 2026] [:error] [pid 36691:tid 36754] [client 159.89.160.65:63323] [client 159.89.160.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.160.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aVgbApng3GFV32xB-PfznwAAAIc"]
[Sat Jan 03 03:59:54.265757 2026] [:error] [pid 2083:tid 2105] [client 4.194.56.148:50087] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aVgjujVlR_BmlMPnhV6o_AAAANQ"]
[Sat Jan 03 03:59:59.451402 2026] [:error] [pid 1929:tid 1958] [client 4.194.56.148:34969] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aVgjv-cFqdpu6TNsuWq66gAAABQ"]
[Sat Jan 03 04:00:02.095889 2026] [:error] [pid 34260:tid 34277] [client 4.194.56.148:7289] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aVgjwkWWhyvZ0O9KNVR37QAAAQ8"]
[Sat Jan 03 04:00:04.900260 2026] [:error] [pid 1931:tid 2043] [client 4.194.56.148:36919] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aVgjxB8Tyw7ZoIdXlcblwwAAAJM"]
[Sat Jan 03 04:00:07.812502 2026] [:error] [pid 1931:tid 2040] [client 4.194.56.148:40323] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aVgjxx8Tyw7ZoIdXlcblywAAAJA"]
[Sat Jan 03 04:00:12.896401 2026] [:error] [pid 1930:tid 1981] [client 4.194.56.148:8102] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aVgjzJP-6mqhfUDa89zD8AAAAE8"]
[Sat Jan 03 04:00:14.051601 2026] [:error] [pid 1929:tid 1941] [client 4.194.56.148:60978] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aVgjzucFqdpu6TNsuWq7OQAAAAM"]
[Sat Jan 03 04:00:15.445987 2026] [:error] [pid 1931:tid 2034] [client 4.194.56.148:8122] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aVgjzx8Tyw7ZoIdXlcbl2QAAAIo"]
[Sat Jan 03 04:00:17.836527 2026] [:error] [pid 1931:tid 2041] [client 4.194.56.148:40443] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/87.php"] [unique_id "aVgj0R8Tyw7ZoIdXlcbl3wAAAJE"]
[Sat Jan 03 04:00:20.371334 2026] [:error] [pid 34260:tid 34278] [client 4.194.56.148:37321] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/87.php"] [unique_id "aVgj1EWWhyvZ0O9KNVR4HwAAARA"]
[Sat Jan 03 04:00:21.712627 2026] [:error] [pid 1930:tid 1986] [client 4.194.56.148:40416] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/87.php"] [unique_id "aVgj1ZP-6mqhfUDa89zEAAAAAFQ"]
[Sat Jan 03 04:01:24.399804 2026] [:error] [pid 34260:tid 34272] [client 4.194.56.148:49185] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f8.php"] [unique_id "aVgkFEWWhyvZ0O9KNVR4xgAAAQo"]
[Sat Jan 03 04:01:26.973142 2026] [:error] [pid 1930:tid 1969] [client 4.194.56.148:38468] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f8.php"] [unique_id "aVgkFpP-6mqhfUDa89zEeAAAAEM"]
[Sat Jan 03 04:01:27.909983 2026] [:error] [pid 34260:tid 34280] [client 4.194.56.148:51241] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f8.php"] [unique_id "aVgkF0WWhyvZ0O9KNVR4zgAAARI"]
[Sat Jan 03 04:01:29.084128 2026] [:error] [pid 2083:tid 2098] [client 4.194.56.148:49214] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f8.php"] [unique_id "aVgkGTVlR_BmlMPnhV6pkgAAAM0"]
[Sat Jan 03 04:01:29.484401 2026] [:error] [pid 1930:tid 1974] [client 4.194.56.148:61039] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bras.php"] [unique_id "aVgkGZP-6mqhfUDa89zEhwAAAEg"]
[Sat Jan 03 04:01:32.253861 2026] [:error] [pid 1931:tid 2046] [client 4.194.56.148:38485] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bras.php"] [unique_id "aVgkHB8Tyw7ZoIdXlcbmTQAAAJY"]
[Sat Jan 03 04:01:32.613408 2026] [:error] [pid 1931:tid 2045] [client 4.194.56.148:49181] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bras.php"] [unique_id "aVgkHB8Tyw7ZoIdXlcbmUAAAAJU"]
[Sat Jan 03 04:01:33.686878 2026] [:error] [pid 1929:tid 1944] [client 4.194.56.148:47459] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bras.php"] [unique_id "aVgkHecFqdpu6TNsuWq8FAAAAAY"]
[Sat Jan 03 04:01:34.560561 2026] [:error] [pid 1931:tid 2029] [client 4.194.56.148:47453] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVgkHh8Tyw7ZoIdXlcbmWQAAAIU"]
[Sat Jan 03 04:01:34.981605 2026] [:error] [pid 2083:tid 2088] [client 4.194.56.148:60446] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVgkHjVlR_BmlMPnhV6pnQAAAMM"]
[Sat Jan 03 04:01:36.621146 2026] [:error] [pid 1929:tid 1954] [client 4.194.56.148:8036] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVgkIOcFqdpu6TNsuWq8GAAAABA"]
[Sat Jan 03 04:01:38.966312 2026] [:error] [pid 34260:tid 34266] [client 4.194.56.148:49177] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVgkIkWWhyvZ0O9KNVR48wAAAQQ"]
[Sat Jan 03 04:01:39.850910 2026] [:error] [pid 1930:tid 1982] [client 4.194.56.148:8171] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aVgkI5P-6mqhfUDa89zEqgAAAFA"]
[Sat Jan 03 04:01:40.443649 2026] [:error] [pid 1929:tid 1953] [client 4.194.56.148:47454] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aVgkJOcFqdpu6TNsuWq8HQAAAA8"]
[Sat Jan 03 04:01:41.445798 2026] [:error] [pid 34260:tid 34278] [client 4.194.56.148:8062] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aVgkJUWWhyvZ0O9KNVR4_wAAARA"]
[Sat Jan 03 04:01:42.462638 2026] [:error] [pid 1929:tid 1938] [client 4.194.56.148:38428] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aVgkJucFqdpu6TNsuWq8HwAAAAA"]
[Sat Jan 03 04:01:43.803299 2026] [:error] [pid 1929:tid 1951] [client 4.194.56.148:60470] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVgkJ-cFqdpu6TNsuWq8JQAAAA0"]
[Sat Jan 03 04:01:44.530995 2026] [:error] [pid 1930:tid 1973] [client 4.194.56.148:8189] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVgkKJP-6mqhfUDa89zEuQAAAEc"]
[Sat Jan 03 04:01:45.522380 2026] [:error] [pid 2083:tid 2095] [client 4.194.56.148:47463] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVgkKTVlR_BmlMPnhV6psQAAAMo"]
[Sat Jan 03 04:01:46.156532 2026] [:error] [pid 34260:tid 34279] [client 4.194.56.148:38442] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVgkKkWWhyvZ0O9KNVR5BQAAARE"]
[Sat Jan 03 04:01:47.688978 2026] [:error] [pid 1930:tid 1977] [client 4.194.56.148:49164] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/out.php"] [unique_id "aVgkK5P-6mqhfUDa89zEwwAAAEs"]
[Sat Jan 03 04:01:48.367039 2026] [:error] [pid 1929:tid 1940] [client 4.194.56.148:42647] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/out.php"] [unique_id "aVgkLOcFqdpu6TNsuWq8LQAAAAI"]
[Sat Jan 03 04:01:48.740198 2026] [:error] [pid 2083:tid 2099] [client 4.194.56.148:8187] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/out.php"] [unique_id "aVgkLDVlR_BmlMPnhV6pvAAAAM4"]
[Sat Jan 03 04:01:49.439532 2026] [:error] [pid 2083:tid 2098] [client 4.194.56.148:8168] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/out.php"] [unique_id "aVgkLTVlR_BmlMPnhV6pvgAAAM0"]
[Sat Jan 03 04:01:49.843757 2026] [:error] [pid 34260:tid 34279] [client 4.194.56.148:8031] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aVgkLUWWhyvZ0O9KNVR5GQAAARE"]
[Sat Jan 03 04:01:50.227204 2026] [:error] [pid 34260:tid 34274] [client 4.194.56.148:61008] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aVgkLkWWhyvZ0O9KNVR5GwAAAQw"]
[Sat Jan 03 04:01:50.600195 2026] [:error] [pid 34260:tid 34275] [client 4.194.56.148:8026] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aVgkLkWWhyvZ0O9KNVR5HQAAAQ0"]
[Sat Jan 03 04:01:50.932007 2026] [:error] [pid 1931:tid 2047] [client 4.194.56.148:8028] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aVgkLh8Tyw7ZoIdXlcbmkwAAAJc"]
[Sat Jan 03 04:01:52.063030 2026] [:error] [pid 1931:tid 2046] [client 4.194.56.148:48073] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/family.php"] [unique_id "aVgkMB8Tyw7ZoIdXlcbmmAAAAJY"]
[Sat Jan 03 04:01:52.329694 2026] [:error] [pid 34260:tid 34262] [client 4.194.56.148:49213] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/family.php"] [unique_id "aVgkMEWWhyvZ0O9KNVR5JwAAAQA"]
[Sat Jan 03 04:01:52.653945 2026] [:error] [pid 34260:tid 34265] [client 4.194.56.148:61022] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/family.php"] [unique_id "aVgkMEWWhyvZ0O9KNVR5KAAAAQM"]
[Sat Jan 03 04:01:53.009228 2026] [:error] [pid 34260:tid 34279] [client 4.194.56.148:49167] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/family.php"] [unique_id "aVgkMUWWhyvZ0O9KNVR5LQAAARE"]
[Sat Jan 03 04:01:53.358007 2026] [:error] [pid 34260:tid 34271] [client 4.194.56.148:8191] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s1.php"] [unique_id "aVgkMUWWhyvZ0O9KNVR5NAAAAQk"]
[Sat Jan 03 04:01:53.676783 2026] [:error] [pid 1931:tid 2037] [client 4.194.56.148:49172] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s1.php"] [unique_id "aVgkMR8Tyw7ZoIdXlcbmoAAAAI0"]
[Sat Jan 03 04:01:53.908102 2026] [:error] [pid 34260:tid 34270] [client 4.194.56.148:38486] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s1.php"] [unique_id "aVgkMUWWhyvZ0O9KNVR5OQAAAQg"]
[Sat Jan 03 04:01:54.144864 2026] [:error] [pid 34260:tid 34272] [client 4.194.56.148:47435] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s1.php"] [unique_id "aVgkMkWWhyvZ0O9KNVR5PAAAAQo"]
[Sat Jan 03 04:01:54.365347 2026] [:error] [pid 34260:tid 34284] [client 4.194.56.148:38449] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ma.php"] [unique_id "aVgkMkWWhyvZ0O9KNVR5QQAAARY"]
[Sat Jan 03 04:01:54.689856 2026] [:error] [pid 34260:tid 34266] [client 4.194.56.148:8132] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ma.php"] [unique_id "aVgkMkWWhyvZ0O9KNVR5RQAAAQQ"]
[Sat Jan 03 04:01:55.136095 2026] [:error] [pid 1931:tid 2047] [client 4.194.56.148:8180] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ma.php"] [unique_id "aVgkMx8Tyw7ZoIdXlcbmpgAAAJc"]
[Sat Jan 03 04:01:55.544882 2026] [:error] [pid 1931:tid 2041] [client 4.194.56.148:48086] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ma.php"] [unique_id "aVgkMx8Tyw7ZoIdXlcbmqgAAAJE"]
[Sat Jan 03 04:01:55.848130 2026] [:error] [pid 1931:tid 2031] [client 4.194.56.148:8157] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aVgkMx8Tyw7ZoIdXlcbmsAAAAIc"]
[Sat Jan 03 04:01:56.184371 2026] [:error] [pid 1929:tid 1960] [client 4.194.56.148:8136] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aVgkNOcFqdpu6TNsuWq8OwAAABY"]
[Sat Jan 03 04:01:56.430773 2026] [:error] [pid 1931:tid 2036] [client 4.194.56.148:47442] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aVgkNB8Tyw7ZoIdXlcbmvAAAAIw"]
[Sat Jan 03 04:01:56.751369 2026] [:error] [pid 1931:tid 1996] [client 4.194.56.148:49202] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aVgkNB8Tyw7ZoIdXlcbmwQAAAII"]
[Sat Jan 03 04:01:57.044091 2026] [:error] [pid 1931:tid 2031] [client 4.194.56.148:48104] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanz.php"] [unique_id "aVgkNR8Tyw7ZoIdXlcbmxQAAAIc"]
[Sat Jan 03 04:01:57.253466 2026] [:error] [pid 1930:tid 1977] [client 4.194.56.148:8040] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanz.php"] [unique_id "aVgkNZP-6mqhfUDa89zE3AAAAEs"]
[Sat Jan 03 04:01:57.538919 2026] [:error] [pid 1929:tid 1943] [client 4.194.56.148:36123] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanz.php"] [unique_id "aVgkNecFqdpu6TNsuWq8PAAAAAU"]
[Sat Jan 03 04:01:57.895281 2026] [:error] [pid 1929:tid 1956] [client 4.194.56.148:47483] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanz.php"] [unique_id "aVgkNecFqdpu6TNsuWq8PwAAABI"]
[Sat Jan 03 04:01:58.211754 2026] [:error] [pid 34260:tid 34265] [client 4.194.56.148:59990] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xeeex.php"] [unique_id "aVgkNkWWhyvZ0O9KNVR5VAAAAQM"]
[Sat Jan 03 04:01:58.570026 2026] [:error] [pid 34260:tid 34284] [client 4.194.56.148:61002] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xeeex.php"] [unique_id "aVgkNkWWhyvZ0O9KNVR5VwAAARY"]
[Sat Jan 03 04:01:58.852127 2026] [:error] [pid 1929:tid 1952] [client 4.194.56.148:8061] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xeeex.php"] [unique_id "aVgkNucFqdpu6TNsuWq8RwAAAA4"]
[Sat Jan 03 04:02:02.445513 2026] [:error] [pid 1929:tid 1944] [client 4.194.56.148:8188] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aVgkOucFqdpu6TNsuWq8YAAAAAY"]
[Sat Jan 03 04:02:02.679234 2026] [:error] [pid 34260:tid 34274] [client 4.194.56.148:38445] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aVgkOkWWhyvZ0O9KNVR5WwAAAQw"]
[Sat Jan 03 04:02:02.889995 2026] [:error] [pid 1929:tid 1960] [client 4.194.56.148:38409] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aVgkOucFqdpu6TNsuWq8YgAAABY"]
[Sat Jan 03 04:02:03.094260 2026] [:error] [pid 1930:tid 1967] [client 4.194.56.148:60992] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aVgkO5P-6mqhfUDa89zE-QAAAEE"]
[Sat Jan 03 04:02:03.314180 2026] [:error] [pid 34260:tid 34275] [client 4.194.56.148:38526] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVgkO0WWhyvZ0O9KNVR5XAAAAQ0"]
[Sat Jan 03 04:02:03.505216 2026] [:error] [pid 34260:tid 34273] [client 4.194.56.148:38440] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVgkO0WWhyvZ0O9KNVR5XwAAAQs"]
[Sat Jan 03 04:02:03.729217 2026] [:error] [pid 1930:tid 1971] [client 4.194.56.148:47430] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVgkO5P-6mqhfUDa89zE_QAAAEU"]
[Sat Jan 03 04:02:03.957349 2026] [:error] [pid 34260:tid 34262] [client 4.194.56.148:47438] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVgkO0WWhyvZ0O9KNVR5ZgAAAQA"]
[Sat Jan 03 04:02:04.132306 2026] [:error] [pid 1930:tid 1990] [client 4.194.56.148:48066] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVgkPJP-6mqhfUDa89zFAAAAAFg"]
[Sat Jan 03 04:02:04.346038 2026] [:error] [pid 34260:tid 34263] [client 4.194.56.148:49232] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVgkPEWWhyvZ0O9KNVR5agAAAQE"]
[Sat Jan 03 04:02:04.572738 2026] [:error] [pid 1931:tid 2030] [client 4.194.56.148:8007] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVgkPB8Tyw7ZoIdXlcbm2wAAAIY"]
[Sat Jan 03 04:02:04.772625 2026] [:error] [pid 2083:tid 2096] [client 4.194.56.148:51209] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVgkPDVlR_BmlMPnhV6p4QAAAMs"]
[Sat Jan 03 04:02:04.988738 2026] [:error] [pid 1930:tid 1974] [client 4.194.56.148:59977] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVgkPJP-6mqhfUDa89zFBQAAAEg"]
[Sat Jan 03 04:02:05.196027 2026] [:error] [pid 34260:tid 34274] [client 4.194.56.148:49188] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVgkPUWWhyvZ0O9KNVR5cgAAAQw"]
[Sat Jan 03 04:02:05.517541 2026] [:error] [pid 1930:tid 1976] [client 4.194.56.148:48099] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVgkPZP-6mqhfUDa89zFCgAAAEo"]
[Sat Jan 03 04:02:05.811177 2026] [:error] [pid 34260:tid 34276] [client 4.194.56.148:8002] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVgkPUWWhyvZ0O9KNVR5dgAAAQ4"]
[Sat Jan 03 04:02:06.066403 2026] [:error] [pid 34260:tid 34285] [client 4.194.56.148:36126] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/990.php"] [unique_id "aVgkPkWWhyvZ0O9KNVR5ewAAARc"]
[Sat Jan 03 04:02:06.296010 2026] [:error] [pid 1930:tid 1968] [client 4.194.56.148:36110] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/990.php"] [unique_id "aVgkPpP-6mqhfUDa89zFDgAAAEI"]
[Sat Jan 03 04:02:06.521970 2026] [:error] [pid 34260:tid 34282] [client 4.194.56.148:37268] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/990.php"] [unique_id "aVgkPkWWhyvZ0O9KNVR5gQAAARQ"]
[Sat Jan 03 04:02:06.730714 2026] [:error] [pid 34260:tid 34284] [client 4.194.56.148:48127] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/990.php"] [unique_id "aVgkPkWWhyvZ0O9KNVR5hQAAARY"]
[Sat Jan 03 04:02:06.936059 2026] [:error] [pid 34260:tid 34277] [client 4.194.56.148:48064] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d996699999.php"] [unique_id "aVgkPkWWhyvZ0O9KNVR5iAAAAQ8"]
[Sat Jan 03 04:02:07.137047 2026] [:error] [pid 34260:tid 34274] [client 4.194.56.148:49195] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d996699999.php"] [unique_id "aVgkP0WWhyvZ0O9KNVR5igAAAQw"]
[Sat Jan 03 04:02:07.402205 2026] [:error] [pid 34260:tid 34273] [client 4.194.56.148:38456] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d996699999.php"] [unique_id "aVgkP0WWhyvZ0O9KNVR5jQAAAQs"]
[Sat Jan 03 04:02:07.619455 2026] [:error] [pid 2083:tid 2099] [client 4.194.56.148:60994] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d996699999.php"] [unique_id "aVgkPzVlR_BmlMPnhV6p5gAAAM4"]
[Sat Jan 03 04:02:07.901504 2026] [:error] [pid 1929:tid 1952] [client 4.194.56.148:37272] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ierne.php"] [unique_id "aVgkP-cFqdpu6TNsuWq8bQAAAA4"]
[Sat Jan 03 04:02:08.116890 2026] [:error] [pid 2083:tid 2105] [client 4.194.56.148:48094] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ierne.php"] [unique_id "aVgkQDVlR_BmlMPnhV6p6gAAANQ"]
[Sat Jan 03 04:02:08.404485 2026] [:error] [pid 2083:tid 2107] [client 4.194.56.148:36155] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ierne.php"] [unique_id "aVgkQDVlR_BmlMPnhV6p7AAAANY"]
[Sat Jan 03 04:02:08.618203 2026] [:error] [pid 1931:tid 2044] [client 4.194.56.148:38413] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ierne.php"] [unique_id "aVgkQB8Tyw7ZoIdXlcbm4gAAAJQ"]
[Sat Jan 03 04:02:08.816404 2026] [:error] [pid 1930:tid 1978] [client 4.194.56.148:51227] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVgkQJP-6mqhfUDa89zFFgAAAEw"]
[Sat Jan 03 04:02:09.016973 2026] [:error] [pid 1929:tid 1941] [client 4.194.56.148:37276] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVgkQecFqdpu6TNsuWq8bwAAAAM"]
[Sat Jan 03 04:02:09.229182 2026] [:error] [pid 34260:tid 34277] [client 4.194.56.148:7336] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVgkQUWWhyvZ0O9KNVR5nQAAAQ8"]
[Sat Jan 03 04:02:09.434653 2026] [:error] [pid 34260:tid 34274] [client 4.194.56.148:38451] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVgkQUWWhyvZ0O9KNVR5oAAAAQw"]
[Sat Jan 03 04:02:09.595604 2026] [:error] [pid 1931:tid 2031] [client 4.241.216.136:46666] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bras.php"] [unique_id "aVgkQR8Tyw7ZoIdXlcbm5QAAAIc"]
[Sat Jan 03 04:02:09.659459 2026] [:error] [pid 1931:tid 2032] [client 4.194.56.148:38523] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aVgkQR8Tyw7ZoIdXlcbm5gAAAIg"]
[Sat Jan 03 04:02:09.923216 2026] [:error] [pid 1931:tid 2027] [client 4.194.56.148:7326] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aVgkQR8Tyw7ZoIdXlcbm5wAAAIQ"]
[Sat Jan 03 04:02:10.151712 2026] [:error] [pid 1930:tid 1984] [client 4.194.56.148:8020] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aVgkQpP-6mqhfUDa89zFGgAAAFI"]
[Sat Jan 03 04:02:10.354616 2026] [:error] [pid 1929:tid 1953] [client 4.194.56.148:48106] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aVgkQucFqdpu6TNsuWq8cAAAAA8"]
[Sat Jan 03 04:02:10.633810 2026] [:error] [pid 34260:tid 34270] [client 4.194.56.148:49229] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVgkQkWWhyvZ0O9KNVR5owAAAQg"]
[Sat Jan 03 04:02:10.829082 2026] [:error] [pid 1931:tid 1996] [client 4.241.216.136:44762] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bras.php"] [unique_id "aVgkQh8Tyw7ZoIdXlcbm6AAAAII"]
[Sat Jan 03 04:02:10.852517 2026] [:error] [pid 1931:tid 1999] [client 4.194.56.148:61023] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVgkQh8Tyw7ZoIdXlcbm6QAAAIM"]
[Sat Jan 03 04:02:11.098329 2026] [:error] [pid 1931:tid 2034] [client 4.194.56.148:37278] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVgkQx8Tyw7ZoIdXlcbm6wAAAIo"]
[Sat Jan 03 04:02:11.328396 2026] [:error] [pid 2083:tid 2106] [client 4.194.56.148:36118] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVgkQzVlR_BmlMPnhV6p8AAAANU"]
[Sat Jan 03 04:02:11.534346 2026] [:error] [pid 34260:tid 34272] [client 4.194.56.148:38454] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVgkQ0WWhyvZ0O9KNVR5pgAAAQo"]
[Sat Jan 03 04:02:11.757094 2026] [:error] [pid 34260:tid 34281] [client 4.194.56.148:7306] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVgkQ0WWhyvZ0O9KNVR5pwAAARM"]
[Sat Jan 03 04:02:11.984846 2026] [:error] [pid 34260:tid 34280] [client 4.194.56.148:8170] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVgkQ0WWhyvZ0O9KNVR5qAAAARI"]
[Sat Jan 03 04:02:12.211785 2026] [:error] [pid 34260:tid 34265] [client 4.194.56.148:48115] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVgkREWWhyvZ0O9KNVR5qgAAAQM"]
[Sat Jan 03 04:02:16.416983 2026] [:error] [pid 1931:tid 1999] [client 4.241.216.136:24144] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bras.php"] [unique_id "aVgkSB8Tyw7ZoIdXlcbm_AAAAIM"]
[Sat Jan 03 04:02:18.288798 2026] [:error] [pid 1930:tid 1975] [client 4.241.216.136:24149] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bras.php"] [unique_id "aVgkSpP-6mqhfUDa89zFKQAAAEk"]
[Sat Jan 03 04:02:19.209808 2026] [:error] [pid 1930:tid 1978] [client 4.241.216.136:44746] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVgkS5P-6mqhfUDa89zFKwAAAEw"]
[Sat Jan 03 04:02:23.014912 2026] [:error] [pid 2083:tid 2100] [client 4.241.216.136:46714] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVgkTzVlR_BmlMPnhV6qCQAAAM8"]
[Sat Jan 03 04:02:23.983134 2026] [:error] [pid 1929:tid 1961] [client 4.241.216.136:24132] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVgkT-cFqdpu6TNsuWq8fgAAABc"]
[Sat Jan 03 04:02:24.534864 2026] [:error] [pid 2083:tid 2102] [client 4.241.216.136:46696] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVgkUDVlR_BmlMPnhV6qCwAAANE"]
[Sat Jan 03 04:02:25.969573 2026] [:error] [pid 1929:tid 1938] [client 4.241.216.136:24135] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aVgkUecFqdpu6TNsuWq8gQAAAAA"]
[Sat Jan 03 04:02:28.785679 2026] [:error] [pid 1929:tid 1945] [client 4.241.216.136:44795] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aVgkVOcFqdpu6TNsuWq8iAAAAAc"]
[Sat Jan 03 04:02:35.678455 2026] [:error] [pid 1929:tid 1958] [client 4.241.216.136:24139] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aVgkW-cFqdpu6TNsuWq8jwAAABQ"]
[Sat Jan 03 04:02:37.240782 2026] [:error] [pid 1930:tid 1976] [client 4.241.216.136:44782] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aVgkXZP-6mqhfUDa89zFQQAAAEo"]
[Sat Jan 03 04:02:40.053457 2026] [:error] [pid 34260:tid 34263] [client 4.241.216.136:46702] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVgkYEWWhyvZ0O9KNVR50gAAAQE"]
[Sat Jan 03 04:02:40.999750 2026] [:error] [pid 1930:tid 1978] [client 4.241.216.136:24160] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVgkYJP-6mqhfUDa89zFRQAAAEw"]
[Sat Jan 03 04:02:48.154194 2026] [:error] [pid 1929:tid 1960] [client 4.241.216.136:24156] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVgkaOcFqdpu6TNsuWq8nwAAABY"]
[Sat Jan 03 04:02:50.844782 2026] [:error] [pid 1931:tid 2037] [client 4.241.216.136:44791] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVgkah8Tyw7ZoIdXlcbnbgAAAI0"]
[Sat Jan 03 04:02:52.182788 2026] [:error] [pid 2083:tid 2101] [client 4.241.216.136:46708] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/out.php"] [unique_id "aVgkbDVlR_BmlMPnhV6qIwAAANA"]
[Sat Jan 03 04:02:55.061146 2026] [:error] [pid 1929:tid 1951] [client 4.241.216.136:24169] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/out.php"] [unique_id "aVgkb-cFqdpu6TNsuWq8pwAAAA0"]
[Sat Jan 03 04:02:56.073152 2026] [:error] [pid 1931:tid 2027] [client 4.241.216.136:44777] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/out.php"] [unique_id "aVgkcB8Tyw7ZoIdXlcbnewAAAIQ"]
[Sat Jan 03 04:02:59.192856 2026] [:error] [pid 34260:tid 34271] [client 4.241.216.136:44792] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/out.php"] [unique_id "aVgkc0WWhyvZ0O9KNVR55gAAAQk"]
[Sat Jan 03 04:03:01.499896 2026] [:error] [pid 34260:tid 34262] [client 4.241.216.136:44784] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aVgkdUWWhyvZ0O9KNVR56QAAAQA"]
[Sat Jan 03 04:03:02.700978 2026] [:error] [pid 34260:tid 34283] [client 4.241.216.136:46674] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aVgkdkWWhyvZ0O9KNVR56wAAARU"]
[Sat Jan 03 04:03:19.854792 2026] [:error] [pid 1930:tid 1984] [client 4.241.216.136:24148] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVgkh5P-6mqhfUDa89zFfQAAAFI"]
[Sat Jan 03 04:03:21.087344 2026] [:error] [pid 34260:tid 34279] [client 4.241.216.136:46688] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVgkiUWWhyvZ0O9KNVR6EwAAARE"]
[Sat Jan 03 04:03:22.647849 2026] [:error] [pid 1931:tid 2041] [client 4.241.216.136:46681] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVgkih8Tyw7ZoIdXlcbnoQAAAJE"]
[Sat Jan 03 04:03:23.813479 2026] [:error] [pid 1931:tid 2038] [client 4.241.216.136:44749] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVgkix8Tyw7ZoIdXlcbnuQAAAI4"]
[Sat Jan 03 04:03:29.030402 2026] [:error] [pid 34260:tid 34276] [client 4.241.216.136:24168] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVgkkUWWhyvZ0O9KNVR6IwAAAQ4"]
[Sat Jan 03 04:03:29.763187 2026] [:error] [pid 1929:tid 1947] [client 4.241.216.136:44765] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVgkkecFqdpu6TNsuWq89QAAAAk"]
[Sat Jan 03 04:03:30.874748 2026] [:error] [pid 1929:tid 1948] [client 4.241.216.136:24186] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVgkkucFqdpu6TNsuWq8-AAAAAo"]
[Sat Jan 03 04:03:36.292572 2026] [:error] [pid 1930:tid 1987] [client 4.241.216.136:46669] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVgkmJP-6mqhfUDa89zFwgAAAFU"]
[Sat Jan 03 04:03:38.470978 2026] [:error] [pid 1931:tid 2029] [client 4.241.216.136:44780] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVgkmh8Tyw7ZoIdXlcbnywAAAIU"]
[Sat Jan 03 04:03:40.505546 2026] [:error] [pid 1929:tid 1941] [client 4.241.216.136:46689] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVgknOcFqdpu6TNsuWq8_wAAAAM"]
[Sat Jan 03 04:03:43.632945 2026] [:error] [pid 1931:tid 2042] [client 4.241.216.136:44779] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVgknx8Tyw7ZoIdXlcbn1gAAAJI"]
[Sat Jan 03 04:03:44.638880 2026] [:error] [pid 34260:tid 34283] [client 4.241.216.136:44785] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVgkoEWWhyvZ0O9KNVR6PAAAARU"]
[Sat Jan 03 04:03:47.962719 2026] [:error] [pid 34260:tid 34276] [client 4.241.216.136:46672] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/990.php"] [unique_id "aVgko0WWhyvZ0O9KNVR6RQAAAQ4"]
[Sat Jan 03 04:03:50.029992 2026] [:error] [pid 1931:tid 2037] [client 4.241.216.136:46671] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/990.php"] [unique_id "aVgkph8Tyw7ZoIdXlcbn2AAAAI0"]
[Sat Jan 03 04:03:54.392118 2026] [:error] [pid 34260:tid 34286] [client 4.241.216.136:24187] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/990.php"] [unique_id "aVgkqkWWhyvZ0O9KNVR6SAAAARg"]
[Sat Jan 03 04:04:06.969060 2026] [:error] [pid 1931:tid 2045] [client 4.241.216.136:46685] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d996699999.php"] [unique_id "aVgkth8Tyw7ZoIdXlcbn8wAAAJU"]
[Sat Jan 03 04:04:09.272283 2026] [:error] [pid 1931:tid 2041] [client 4.241.216.136:24109] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d996699999.php"] [unique_id "aVgkuR8Tyw7ZoIdXlcbn-gAAAJE"]
[Sat Jan 03 04:04:23.240459 2026] [:error] [pid 1929:tid 1939] [client 4.241.216.136:46679] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVgkx-cFqdpu6TNsuWq9KQAAAAE"]
[Sat Jan 03 04:04:28.372265 2026] [:error] [pid 34260:tid 34274] [client 4.241.216.136:24133] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVgkzEWWhyvZ0O9KNVR6pQAAAQw"]
[Sat Jan 03 04:04:36.063492 2026] [:error] [pid 1930:tid 1988] [client 4.241.216.136:44740] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVgk1JP-6mqhfUDa89zF8gAAAFY"]
[Sat Jan 03 04:04:37.268049 2026] [:error] [pid 1929:tid 1956] [client 4.241.216.136:24108] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVgk1ecFqdpu6TNsuWq9TgAAABI"]
[Sat Jan 03 04:04:40.925024 2026] [:error] [pid 1929:tid 1944] [client 4.241.216.136:24173] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVgk2OcFqdpu6TNsuWq9WAAAAAY"]
[Sat Jan 03 04:04:42.297362 2026] [:error] [pid 1930:tid 1985] [client 4.241.216.136:46719] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVgk2pP-6mqhfUDa89zGBAAAAFM"]
[Sat Jan 03 04:04:47.247559 2026] [:error] [pid 34260:tid 34267] [client 4.241.216.136:24151] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVgk30WWhyvZ0O9KNVR6uAAAAQU"]
[Sat Jan 03 06:44:19.429252 2026] [:error] [pid 1930:tid 1989] [client 182.44.67.97:53657] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVhKQ5P-6mqhfUDa89wCQgAAAFc"]
[Sat Jan 03 07:20:54.290623 2026] [:error] [pid 1929:tid 1952] [client 4.190.220.252:11426] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aVhS1ucFqdpu6TNsuWoF6gAAAA4"]
[Sat Jan 03 07:20:54.991773 2026] [:error] [pid 1931:tid 2036] [client 4.190.220.252:54072] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aVhS1h8Tyw7ZoIdXlcY4gAAAAIw"]
[Sat Jan 03 07:20:56.297367 2026] [:error] [pid 1929:tid 1947] [client 4.190.220.252:11638] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aVhS2OcFqdpu6TNsuWoF6wAAAAk"]
[Sat Jan 03 07:20:59.032287 2026] [:error] [pid 2083:tid 2089] [client 4.190.220.252:54049] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aVhS2zVlR_BmlMPnhV4G9wAAAMQ"]
[Sat Jan 03 07:21:00.850874 2026] [:error] [pid 1931:tid 2044] [client 4.190.220.252:11428] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aVhS3B8Tyw7ZoIdXlcY4igAAAJQ"]
[Sat Jan 03 07:21:15.171892 2026] [:error] [pid 34260:tid 34263] [client 4.190.220.252:57110] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aVhS60WWhyvZ0O9KNVTnJwAAAQE"]
[Sat Jan 03 07:21:20.442409 2026] [:error] [pid 1929:tid 1942] [client 4.190.220.252:53460] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aVhS8OcFqdpu6TNsuWoGHgAAAAQ"]
[Sat Jan 03 07:21:21.871267 2026] [:error] [pid 19639:tid 19644] [client 4.190.220.252:12156] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aVhS8SQ7fWZUytnlHEw7dQAAAUM"]
[Sat Jan 03 07:21:23.961603 2026] [:error] [pid 2083:tid 2101] [client 4.190.220.252:12111] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aVhS8zVlR_BmlMPnhV4HQwAAANA"]
[Sat Jan 03 07:21:25.860031 2026] [:error] [pid 1931:tid 2030] [client 4.190.220.252:54032] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/87.php"] [unique_id "aVhS9R8Tyw7ZoIdXlcY47QAAAIY"]
[Sat Jan 03 07:21:31.054503 2026] [:error] [pid 19639:tid 19664] [client 4.190.220.252:52761] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/87.php"] [unique_id "aVhS-yQ7fWZUytnlHEw7gQAAAVc"]
[Sat Jan 03 07:21:40.750191 2026] [:error] [pid 1930:tid 1972] [client 4.190.220.252:48607] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aVhTBJP-6mqhfUDa89wVbQAAAEY"]
[Sat Jan 03 07:21:42.344598 2026] [:error] [pid 2083:tid 2086] [client 4.190.220.252:11635] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aVhTBjVlR_BmlMPnhV4HmgAAAME"]
[Sat Jan 03 07:21:47.112794 2026] [:error] [pid 1929:tid 1954] [client 4.190.220.252:60633] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aVhTC-cFqdpu6TNsuWoGqwAAABA"]
[Sat Jan 03 07:21:48.620082 2026] [:error] [pid 34260:tid 34265] [client 4.190.220.252:48637] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aVhTDEWWhyvZ0O9KNVTneQAAAQM"]
[Sat Jan 03 07:21:49.366889 2026] [:error] [pid 19639:tid 19664] [client 4.190.220.252:48608] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aVhTDSQ7fWZUytnlHEw76gAAAVc"]
[Sat Jan 03 07:21:52.865671 2026] [:error] [pid 1931:tid 2034] [client 4.190.220.252:52757] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aVhTEB8Tyw7ZoIdXlcY5LAAAAIo"]
[Sat Jan 03 07:21:59.676400 2026] [:error] [pid 2083:tid 2088] [client 4.190.220.252:48612] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVhTFzVlR_BmlMPnhV4H1gAAAMM"]
[Sat Jan 03 07:22:04.525967 2026] [:error] [pid 19639:tid 19646] [client 4.190.220.252:62111] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVhTHCQ7fWZUytnlHEw8FgAAAUU"]
[Sat Jan 03 07:22:06.189249 2026] [:error] [pid 2083:tid 2105] [client 4.190.220.252:11987] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVhTHjVlR_BmlMPnhV4H8wAAANQ"]
[Sat Jan 03 07:22:11.512862 2026] [:error] [pid 2083:tid 2086] [client 4.190.220.252:12004] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "aVhTIzVlR_BmlMPnhV4IDgAAAME"]
[Sat Jan 03 07:22:14.500028 2026] [:error] [pid 1929:tid 1951] [client 4.190.220.252:58524] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aVhTJucFqdpu6TNsuWoHAwAAAA0"]
[Sat Jan 03 07:22:17.256816 2026] [:error] [pid 1931:tid 2037] [client 4.190.220.252:50945] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aVhTKR8Tyw7ZoIdXlcY5XAAAAI0"]
[Sat Jan 03 07:22:23.514715 2026] [:error] [pid 1930:tid 1987] [client 4.190.220.252:59531] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aVhTL5P-6mqhfUDa89wV6QAAAFU"]
[Sat Jan 03 07:22:46.877471 2026] [:error] [pid 1929:tid 1958] [client 4.190.220.252:59945] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVhTRucFqdpu6TNsuWoHWgAAABQ"]
[Sat Jan 03 07:23:15.935805 2026] [:error] [pid 34260:tid 34281] [client 4.190.220.252:61504] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aVhTY0WWhyvZ0O9KNVToJQAAARM"]
[Sat Jan 03 07:23:18.521714 2026] [:error] [pid 34260:tid 34281] [client 4.190.220.252:62231] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aVhTZkWWhyvZ0O9KNVToLwAAARM"]
[Sat Jan 03 07:23:19.639983 2026] [:error] [pid 1929:tid 1942] [client 4.190.220.252:62839] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aVhTZ-cFqdpu6TNsuWoHoAAAAAQ"]
[Sat Jan 03 07:23:23.341410 2026] [:error] [pid 1929:tid 1962] [client 4.190.220.252:60569] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aVhTa-cFqdpu6TNsuWoHogAAABg"]
[Sat Jan 03 07:23:24.567707 2026] [:error] [pid 34260:tid 34264] [client 4.190.220.252:53419] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/family.php"] [unique_id "aVhTbEWWhyvZ0O9KNVToPAAAAQI"]
[Sat Jan 03 07:23:47.221004 2026] [:error] [pid 34260:tid 34276] [client 4.190.220.252:59584] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s1.php"] [unique_id "aVhTg0WWhyvZ0O9KNVToYAAAAQ4"]
[Sat Jan 03 07:23:54.434751 2026] [:error] [pid 19639:tid 19642] [client 4.190.220.252:11540] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s1.php"] [unique_id "aVhTiiQ7fWZUytnlHEw8vgAAAUE"]
[Sat Jan 03 07:24:14.178617 2026] [:error] [pid 1931:tid 2035] [client 4.190.220.252:63025] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVhTnh8Tyw7ZoIdXlcY6WwAAAIs"]
[Sat Jan 03 07:24:19.760729 2026] [:error] [pid 1930:tid 1975] [client 4.190.220.252:56723] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVhTo5P-6mqhfUDa89wXnQAAAEk"]
[Sat Jan 03 07:24:20.471246 2026] [:error] [pid 19639:tid 19656] [client 4.190.220.252:48523] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVhTpCQ7fWZUytnlHEw83gAAAU8"]
[Sat Jan 03 07:24:27.766010 2026] [:error] [pid 1931:tid 2035] [client 4.190.220.252:49714] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2f.php"] [unique_id "aVhTqx8Tyw7ZoIdXlcY6agAAAIs"]
[Sat Jan 03 07:24:28.608020 2026] [:error] [pid 34260:tid 34279] [client 4.190.220.252:49704] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVhTrEWWhyvZ0O9KNVTorAAAARE"]
[Sat Jan 03 07:24:30.004786 2026] [:error] [pid 1931:tid 2034] [client 4.190.220.252:51542] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVhTrh8Tyw7ZoIdXlcY6bgAAAIo"]
[Sat Jan 03 07:24:40.874520 2026] [:error] [pid 1930:tid 1969] [client 4.190.220.252:57212] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVhTuJP-6mqhfUDa89wXvAAAAEM"]
[Sat Jan 03 07:24:44.207090 2026] [:error] [pid 1930:tid 1977] [client 4.190.220.252:52125] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVhTvJP-6mqhfUDa89wXwQAAAEs"]
[Sat Jan 03 07:24:44.880870 2026] [:error] [pid 2083:tid 2097] [client 4.190.220.252:52102] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVhTvDVlR_BmlMPnhV4JTAAAAMw"]
[Sat Jan 03 07:24:46.122186 2026] [:error] [pid 34260:tid 34268] [client 4.190.220.252:52110] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVhTvkWWhyvZ0O9KNVToxAAAAQY"]
[Sat Jan 03 07:24:46.766465 2026] [:error] [pid 34260:tid 34284] [client 4.190.220.252:56754] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aVhTvkWWhyvZ0O9KNVToxgAAARY"]
[Sat Jan 03 07:24:51.546733 2026] [:error] [pid 34260:tid 34276] [client 4.190.220.252:56109] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/990.php"] [unique_id "aVhTw0WWhyvZ0O9KNVTozAAAAQ4"]
[Sat Jan 03 07:25:03.809318 2026] [:error] [pid 2083:tid 2095] [client 4.190.220.252:54107] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d996699999.php"] [unique_id "aVhTzzVlR_BmlMPnhV4JZAAAAMo"]
[Sat Jan 03 07:25:08.018289 2026] [:error] [pid 2083:tid 2109] [client 4.190.220.252:45374] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d996699999.php"] [unique_id "aVhT1DVlR_BmlMPnhV4JfgAAANg"]
[Sat Jan 03 07:25:10.907775 2026] [:error] [pid 1930:tid 1975] [client 4.190.220.252:54127] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d996699999.php"] [unique_id "aVhT1pP-6mqhfUDa89wX6wAAAEk"]
[Sat Jan 03 07:25:12.428420 2026] [:error] [pid 1929:tid 1959] [client 4.190.220.252:52145] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d996699999.php"] [unique_id "aVhT2OcFqdpu6TNsuWoIuQAAABU"]
[Sat Jan 03 07:25:21.929201 2026] [:error] [pid 19639:tid 19655] [client 4.190.220.252:56099] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVhT4SQ7fWZUytnlHEw9OAAAAU4"]
[Sat Jan 03 07:25:22.863264 2026] [:error] [pid 1931:tid 2032] [client 4.190.220.252:56065] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVhT4h8Tyw7ZoIdXlcY6wQAAAIg"]
[Sat Jan 03 07:25:24.990530 2026] [:error] [pid 1929:tid 1954] [client 4.190.220.252:11899] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVhT5OcFqdpu6TNsuWoI2QAAABA"]
[Sat Jan 03 07:25:27.024713 2026] [:error] [pid 34260:tid 34264] [client 4.190.220.252:56102] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVhT50WWhyvZ0O9KNVTpAwAAAQI"]
[Sat Jan 03 07:25:28.030842 2026] [:error] [pid 2083:tid 2095] [client 4.190.220.252:11873] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aVhT6DVlR_BmlMPnhV4JngAAAMo"]
[Sat Jan 03 07:25:29.699819 2026] [:error] [pid 2083:tid 2093] [client 4.190.220.252:56072] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aVhT6TVlR_BmlMPnhV4JoQAAAMg"]
[Sat Jan 03 07:25:31.874463 2026] [:error] [pid 1930:tid 1970] [client 4.190.220.252:11332] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aVhT65P-6mqhfUDa89wYGgAAAEQ"]
[Sat Jan 03 07:25:32.517582 2026] [:error] [pid 2083:tid 2104] [client 4.190.220.252:46039] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aVhT7DVlR_BmlMPnhV4JqwAAANM"]
[Sat Jan 03 07:25:33.235635 2026] [:error] [pid 1931:tid 2046] [client 4.190.220.252:56073] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVhT7R8Tyw7ZoIdXlcY6zAAAAJY"]
[Sat Jan 03 07:25:34.253761 2026] [:error] [pid 1930:tid 1982] [client 4.190.220.252:11844] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVhT7pP-6mqhfUDa89wYJAAAAFA"]
[Sat Jan 03 07:25:39.461309 2026] [:error] [pid 1929:tid 1959] [client 4.190.220.252:45357] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVhT8-cFqdpu6TNsuWoI7QAAABU"]
[Sat Jan 03 07:25:41.390621 2026] [:error] [pid 34260:tid 34280] [client 4.190.220.252:46019] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aVhT9UWWhyvZ0O9KNVTpDwAAARI"]
[Sat Jan 03 07:25:44.244901 2026] [:error] [pid 34260:tid 34263] [client 4.190.220.252:51035] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVhT-EWWhyvZ0O9KNVTpGQAAAQE"]
[Sat Jan 03 07:25:45.755262 2026] [:error] [pid 1930:tid 1988] [client 4.190.220.252:11872] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVhT-ZP-6mqhfUDa89wYQAAAAFY"]
[Sat Jan 03 07:25:49.041381 2026] [:error] [pid 19639:tid 19643] [client 4.190.220.252:52131] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVhT_SQ7fWZUytnlHEw9XwAAAUI"]
[Sat Jan 03 07:25:49.397049 2026] [:error] [pid 1930:tid 1980] [client 4.190.220.252:51030] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVhT_ZP-6mqhfUDa89wYTQAAAE4"]
[Sat Jan 03 11:32:46.728065 2026] [:error] [pid 2083:tid 2098] [client 43.158.91.71:37772] [client 43.158.91.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aViN3jVlR_BmlMPnhV5s7wAAAM0"]
[Sat Jan 03 12:46:58.764511 2026] [:error] [pid 1929:tid 1942] [client 203.2.64.59:52223] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVifQucFqdpu6TNsuWppaAAAAAQ"]
[Sat Jan 03 17:01:23.260223 2026] [:error] [pid 31630:tid 31650] [client 170.106.192.208:59890] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVja4_UV_PU2SWgLPugZqAAAAZI"]
[Sat Jan 03 20:57:32.454789 2026] [:error] [pid 2083:tid 2104] [client 170.106.165.76:44566] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVkSPDVlR_BmlMPnhV4QUQAAANM"]
[Sun Jan 04 00:07:47.257310 2026] [:error] [pid 49229:tid 49266] [client 163.61.182.29:56228] [client 163.61.182.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.182.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk-01CM4R1akb8JNI6IKQAAAEU"]
[Sun Jan 04 00:07:49.228828 2026] [:error] [pid 49230:tid 49310] [client 163.61.182.29:56234] [client 163.61.182.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.182.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk-1X2klmw7JRfgM3iSYwAAAJY"]
[Sun Jan 04 00:07:51.144865 2026] [:error] [pid 49229:tid 49281] [client 163.61.182.29:56240] [client 163.61.182.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.182.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk-11CM4R1akb8JNI6IMwAAAFQ"]
[Sun Jan 04 00:07:53.030982 2026] [:error] [pid 49228:tid 49254] [client 163.61.182.29:43476] [client 163.61.182.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.182.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk-2XCPk2c4rRZq2JTSrwAAABU"]
[Sun Jan 04 00:07:54.874477 2026] [:error] [pid 49229:tid 49273] [client 163.61.182.29:43488] [client 163.61.182.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.182.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk-2lCM4R1akb8JNI6IPQAAAEw"]
[Sun Jan 04 00:07:56.790093 2026] [:error] [pid 49228:tid 49237] [client 163.61.182.29:43502] [client 163.61.182.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.182.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk-3HCPk2c4rRZq2JTSuAAAAAQ"]
[Sun Jan 04 00:07:56.790216 2026] [:error] [pid 49228:tid 49237] [client 163.61.182.29:43502] [client 163.61.182.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 163.61.182.29, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk-3HCPk2c4rRZq2JTSuAAAAAQ"]
[Sun Jan 04 00:07:57.894216 2026] [:error] [pid 49319:tid 49322] [client 163.61.182.29:43514] [client 163.61.182.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.182.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk-3bcNXYLFZOiX4cT84gAAAME"]
[Sun Jan 04 00:07:57.894393 2026] [:error] [pid 49319:tid 49322] [client 163.61.182.29:43514] [client 163.61.182.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 163.61.182.29, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk-3bcNXYLFZOiX4cT84gAAAME"]
[Sun Jan 04 00:08:23.349462 2026] [:error] [pid 49319:tid 49326] [client 36.50.135.109:36896] [client 36.50.135.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.135.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk-97cNXYLFZOiX4cT9LAAAAMU"]
[Sun Jan 04 00:08:25.749922 2026] [:error] [pid 49319:tid 49344] [client 36.50.135.109:36906] [client 36.50.135.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.135.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk--bcNXYLFZOiX4cT9OAAAANc"]
[Sun Jan 04 00:08:27.803396 2026] [:error] [pid 49230:tid 49299] [client 36.50.135.109:36916] [client 36.50.135.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.135.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk--32klmw7JRfgM3iSpgAAAIs"]
[Sun Jan 04 00:08:30.156385 2026] [:error] [pid 49229:tid 49272] [client 36.50.135.109:36918] [client 36.50.135.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.135.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk-_lCM4R1akb8JNI6IiQAAAEs"]
[Sun Jan 04 00:08:32.507314 2026] [:error] [pid 49230:tid 49291] [client 36.50.135.109:35106] [client 36.50.135.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.135.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_AH2klmw7JRfgM3iSsQAAAIM"]
[Sun Jan 04 00:08:34.504513 2026] [:error] [pid 49319:tid 49321] [client 36.50.135.109:35110] [client 36.50.135.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.135.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_ArcNXYLFZOiX4cT9UAAAAMA"]
[Sun Jan 04 00:08:34.504680 2026] [:error] [pid 49319:tid 49321] [client 36.50.135.109:35110] [client 36.50.135.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 36.50.135.109, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_ArcNXYLFZOiX4cT9UAAAAMA"]
[Sun Jan 04 00:08:35.668438 2026] [:error] [pid 49319:tid 49338] [client 36.50.135.109:35122] [client 36.50.135.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.135.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_A7cNXYLFZOiX4cT9WQAAANE"]
[Sun Jan 04 00:08:35.668595 2026] [:error] [pid 49319:tid 49338] [client 36.50.135.109:35122] [client 36.50.135.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 36.50.135.109, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_A7cNXYLFZOiX4cT9WQAAANE"]
[Sun Jan 04 00:08:36.686626 2026] [:error] [pid 49228:tid 49233] [client 36.50.135.109:35134] [client 36.50.135.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.135.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_BHCPk2c4rRZq2JTS_wAAAAA"]
[Sun Jan 04 00:08:36.686797 2026] [:error] [pid 49228:tid 49233] [client 36.50.135.109:35134] [client 36.50.135.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 36.50.135.109, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_BHCPk2c4rRZq2JTS_wAAAAA"]
[Sun Jan 04 00:08:37.703530 2026] [:error] [pid 49319:tid 49335] [client 36.50.135.109:35142] [client 36.50.135.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.135.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_BbcNXYLFZOiX4cT9YAAAAM4"]
[Sun Jan 04 00:08:37.703725 2026] [:error] [pid 49319:tid 49335] [client 36.50.135.109:35142] [client 36.50.135.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 36.50.135.109, counter = 9"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_BbcNXYLFZOiX4cT9YAAAAM4"]
[Sun Jan 04 00:08:49.419693 2026] [:error] [pid 49319:tid 49335] [client 47.99.119.16:50326] [client 47.99.119.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.99.119.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_EbcNXYLFZOiX4cT9jwAAAM4"]
[Sun Jan 04 00:08:53.961200 2026] [:error] [pid 49228:tid 49244] [client 47.99.119.16:39276] [client 47.99.119.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.99.119.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_FXCPk2c4rRZq2JTTMAAAAAs"]
[Sun Jan 04 00:08:57.495078 2026] [:error] [pid 49230:tid 49288] [client 47.99.119.16:39280] [client 47.99.119.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.99.119.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_GX2klmw7JRfgM3iS-wAAAIA"]
[Sun Jan 04 00:09:02.068203 2026] [:error] [pid 49319:tid 49336] [client 47.99.119.16:39288] [client 47.99.119.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.99.119.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_HrcNXYLFZOiX4cT9wAAAAM8"]
[Sun Jan 04 00:09:05.394250 2026] [:error] [pid 49319:tid 49330] [client 47.99.119.16:46580] [client 47.99.119.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.99.119.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVk_IbcNXYLFZOiX4cT9zAAAAMk"]
[Sun Jan 04 01:07:46.835481 2026] [:error] [pid 49230:tid 49311] [client 170.106.148.137:53206] [client 170.106.148.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVlM4n2klmw7JRfgM3iuUAAAAJc"]
[Sun Jan 04 02:20:01.262782 2026] [:error] [pid 11559:tid 11583] [client 103.77.106.81:56735] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aVld0aYDjvbj8bSHy5rUpQAAARU"]
[Sun Jan 04 02:20:02.002238 2026] [:error] [pid 11559:tid 11582] [client 103.77.106.81:56794] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aVld0qYDjvbj8bSHy5rUqAAAARQ"]
[Sun Jan 04 03:25:22.628451 2026] [:error] [pid 29906:tid 29998] [client 104.28.246.116:48627] [client 104.28.246.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aVltIjl5cZ6LEUQaXO86-QAAABg"]
[Sun Jan 04 03:43:36.983755 2026] [:error] [pid 37538:tid 37609] [client 194.5.82.27:54591] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVlxaIzU2j98LiSLQvQnOAAAAIk"]
[Sun Jan 04 03:43:41.525227 2026] [:error] [pid 37537:tid 37595] [client 194.5.82.49:21711] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aVlxbQjHz7EQ5p_4u2o9ZQAAAFY"]
[Sun Jan 04 03:43:50.031076 2026] [:error] [pid 37636:tid 37643] [client 194.5.82.42:61339] [client 194.5.82.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aVlxdi3kmZpEf9yy2b0P-QAAAMM"]
[Sun Jan 04 03:43:55.734888 2026] [:error] [pid 37538:tid 37609] [client 194.5.82.34:40587] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aVlxe4zU2j98LiSLQvQnRwAAAIk"]
[Sun Jan 04 03:44:03.812707 2026] [:error] [pid 37538:tid 37608] [client 194.5.82.30:36915] [client 194.5.82.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aVlxg4zU2j98LiSLQvQnVgAAAIg"]
[Sun Jan 04 03:44:05.714419 2026] [:error] [pid 37538:tid 37604] [client 194.5.82.22:24977] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVlxhYzU2j98LiSLQvQnWgAAAIQ"]
[Sun Jan 04 03:44:06.315026 2026] [:error] [pid 37537:tid 37579] [client 194.5.82.49:22879] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aVlxhgjHz7EQ5p_4u2o9cAAAAEY"]
[Sun Jan 04 03:44:06.773738 2026] [:error] [pid 37536:tid 37544] [client 194.5.82.29:40863] [client 194.5.82.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aVlxhm-iKLialy_3rkvTJQAAAAQ"]
[Sun Jan 04 03:44:07.329629 2026] [:error] [pid 37536:tid 37552] [client 194.5.82.35:46509] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aVlxh2-iKLialy_3rkvTKAAAAAw"]
[Sun Jan 04 03:44:08.816417 2026] [:error] [pid 37537:tid 37577] [client 194.5.82.41:51343] [client 194.5.82.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aVlxiAjHz7EQ5p_4u2o9dQAAAEQ"]
[Sun Jan 04 03:44:10.553116 2026] [:error] [pid 37537:tid 37589] [client 194.5.82.22:62465] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aVlxigjHz7EQ5p_4u2o9eQAAAFA"]
[Sun Jan 04 03:44:13.900024 2026] [:error] [pid 37537:tid 37580] [client 194.5.82.41:50277] [client 194.5.82.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aVlxjQjHz7EQ5p_4u2o9fgAAAEc"]
[Sun Jan 04 03:44:17.223600 2026] [:error] [pid 37537:tid 37581] [client 194.5.82.46:36139] [client 194.5.82.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aVlxkQjHz7EQ5p_4u2o9gwAAAEg"]
[Sun Jan 04 03:44:19.009424 2026] [:error] [pid 37536:tid 37556] [client 194.5.82.10:51877] [client 194.5.82.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVlxk2-iKLialy_3rkvTNgAAABA"]
[Sun Jan 04 03:44:21.632264 2026] [:error] [pid 37636:tid 37651] [client 194.5.82.9:64717] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aVlxlS3kmZpEf9yy2b0QKAAAAMs"]
[Sun Jan 04 03:44:29.735955 2026] [:error] [pid 37636:tid 37653] [client 194.5.82.166:63377] [client 194.5.82.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aVlxnS3kmZpEf9yy2b0QQgAAAM0"]
[Sun Jan 04 03:44:31.783947 2026] [:error] [pid 37537:tid 37584] [client 194.5.82.28:47211] [client 194.5.82.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aVlxnwjHz7EQ5p_4u2o9jwAAAEs"]
[Sun Jan 04 03:44:36.024620 2026] [:error] [pid 37538:tid 37609] [client 194.5.82.21:24195] [client 194.5.82.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aVlxpIzU2j98LiSLQvQnfQAAAIk"]
[Sun Jan 04 03:44:38.375288 2026] [:error] [pid 37537:tid 37586] [client 194.5.82.10:36105] [client 194.5.82.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aVlxpgjHz7EQ5p_4u2o9mwAAAE0"]
[Sun Jan 04 03:44:45.283205 2026] [:error] [pid 37537:tid 37597] [client 194.5.82.53:30629] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aVlxrQjHz7EQ5p_4u2o9owAAAFg"]
[Sun Jan 04 03:44:47.619162 2026] [:error] [pid 37636:tid 37642] [client 194.5.82.166:29841] [client 194.5.82.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aVlxry3kmZpEf9yy2b0QYAAAAMI"]
[Sun Jan 04 03:44:49.644622 2026] [:error] [pid 37636:tid 37650] [client 194.5.82.46:59047] [client 194.5.82.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aVlxsS3kmZpEf9yy2b0QaAAAAMo"]
[Sun Jan 04 03:44:50.332206 2026] [:error] [pid 37636:tid 37664] [client 194.5.82.43:61237] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aVlxsi3kmZpEf9yy2b0QawAAANg"]
[Sun Jan 04 03:44:51.974423 2026] [:error] [pid 37636:tid 37642] [client 194.5.82.30:60855] [client 194.5.82.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVlxsy3kmZpEf9yy2b0QcQAAAMI"]
[Sun Jan 04 03:44:56.347623 2026] [:error] [pid 37636:tid 37646] [client 194.5.82.35:36793] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aVlxuC3kmZpEf9yy2b0QfAAAAMY"]
[Sun Jan 04 03:44:57.002688 2026] [:error] [pid 37536:tid 37556] [client 194.5.82.33:23543] [client 194.5.82.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aVlxuW-iKLialy_3rkvTXQAAABA"]
[Sun Jan 04 03:44:58.281665 2026] [:error] [pid 37636:tid 37664] [client 194.5.82.15:58979] [client 194.5.82.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVlxui3kmZpEf9yy2b0QgAAAANg"]
[Sun Jan 04 03:45:10.489460 2026] [:error] [pid 37636:tid 37641] [client 194.5.82.4:28469] [client 194.5.82.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aVlxxi3kmZpEf9yy2b0QogAAAME"]
[Sun Jan 04 03:45:15.113016 2026] [:error] [pid 37538:tid 37602] [client 194.5.82.43:40101] [client 194.5.82.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aVlxy4zU2j98LiSLQvQnpgAAAII"]
[Sun Jan 04 03:45:32.010319 2026] [:error] [pid 37538:tid 37621] [client 194.5.82.43:40101] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aVlx3IzU2j98LiSLQvQnxQAAAJU"]
[Sun Jan 04 03:45:35.829243 2026] [:error] [pid 37537:tid 37594] [client 194.5.82.18:26807] [client 194.5.82.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aVlx3wjHz7EQ5p_4u2o9wgAAAFU"]
[Sun Jan 04 03:45:38.209282 2026] [:error] [pid 37537:tid 37592] [client 194.5.82.18:26807] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aVlx4gjHz7EQ5p_4u2o9xAAAAFM"]
[Sun Jan 04 03:45:50.548799 2026] [:error] [pid 37536:tid 37560] [client 194.5.82.51:65377] [client 194.5.82.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aVlx7m-iKLialy_3rkvTlgAAABQ"]
[Sun Jan 04 03:46:01.708564 2026] [:error] [pid 37536:tid 37541] [client 194.5.82.9:39229] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aVlx-W-iKLialy_3rkvTugAAAAE"]
[Sun Jan 04 03:46:05.207461 2026] [:error] [pid 37636:tid 37641] [client 194.5.82.45:35749] [client 194.5.82.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aVlx_S3kmZpEf9yy2b0Q5wAAAME"]
[Sun Jan 04 03:46:10.296758 2026] [:error] [pid 37537:tid 37590] [client 194.5.82.14:40553] [client 194.5.82.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aVlyAgjHz7EQ5p_4u2o96AAAAFE"]
[Sun Jan 04 03:46:11.594123 2026] [:error] [pid 37537:tid 37591] [client 194.5.82.14:40553] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aVlyAwjHz7EQ5p_4u2o96QAAAFI"]
[Sun Jan 04 03:46:35.256847 2026] [:error] [pid 37636:tid 37662] [client 194.5.82.6:58283] [client 194.5.82.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aVlyGy3kmZpEf9yy2b0RdQAAANY"]
[Sun Jan 04 03:46:45.997691 2026] [autoindex:error] [pid 37636:tid 37660] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:46.242055 2026] [autoindex:error] [pid 37636:tid 37663] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:46.600545 2026] [autoindex:error] [pid 37636:tid 37651] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:47.959159 2026] [autoindex:error] [pid 37636:tid 37642] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:49.763183 2026] [autoindex:error] [pid 37636:tid 37658] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:50.091798 2026] [autoindex:error] [pid 37636:tid 37660] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:50.409506 2026] [autoindex:error] [pid 37636:tid 37659] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:50.750146 2026] [autoindex:error] [pid 37636:tid 37640] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:50.985960 2026] [autoindex:error] [pid 37636:tid 37662] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:51.395452 2026] [autoindex:error] [pid 37636:tid 37641] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:52.300770 2026] [autoindex:error] [pid 37636:tid 37642] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:53.967468 2026] [autoindex:error] [pid 37636:tid 37656] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:54.218813 2026] [autoindex:error] [pid 37636:tid 37650] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:57.181250 2026] [autoindex:error] [pid 37636:tid 37645] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:57.561855 2026] [autoindex:error] [pid 37636:tid 37660] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:57.817655 2026] [autoindex:error] [pid 37636:tid 37664] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:58.143654 2026] [autoindex:error] [pid 37636:tid 37657] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:46:59.703977 2026] [autoindex:error] [pid 37636:tid 37646] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:00.018658 2026] [autoindex:error] [pid 37636:tid 37647] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:01.650019 2026] [autoindex:error] [pid 37636:tid 37645] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:04.555727 2026] [autoindex:error] [pid 37636:tid 37640] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:04.821917 2026] [autoindex:error] [pid 37636:tid 37641] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:05.154821 2026] [autoindex:error] [pid 37636:tid 37643] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:14.187353 2026] [autoindex:error] [pid 37636:tid 37663] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:16.011118 2026] [autoindex:error] [pid 37636:tid 37644] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:16.721667 2026] [autoindex:error] [pid 37636:tid 37645] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:17.623243 2026] [autoindex:error] [pid 37636:tid 37656] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:17.915146 2026] [autoindex:error] [pid 37636:tid 37658] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:18.211454 2026] [autoindex:error] [pid 37636:tid 37660] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:22.539208 2026] [autoindex:error] [pid 37636:tid 37648] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:24.214132 2026] [autoindex:error] [pid 37636:tid 37651] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:58.613623 2026] [autoindex:error] [pid 37636:tid 37645] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:58.912604 2026] [autoindex:error] [pid 37636:tid 37640] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:59.211302 2026] [autoindex:error] [pid 37636:tid 37642] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:59.602125 2026] [autoindex:error] [pid 37636:tid 37647] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:47:59.857428 2026] [autoindex:error] [pid 37636:tid 37655] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:00.222264 2026] [autoindex:error] [pid 37636:tid 37646] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:01.669747 2026] [autoindex:error] [pid 37636:tid 37653] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:02.427167 2026] [autoindex:error] [pid 37636:tid 37643] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:04.295837 2026] [autoindex:error] [pid 37636:tid 37644] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:06.426418 2026] [autoindex:error] [pid 37636:tid 37654] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:06.685142 2026] [autoindex:error] [pid 37636:tid 37650] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:06.979087 2026] [autoindex:error] [pid 37636:tid 37664] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:08.811914 2026] [autoindex:error] [pid 37636:tid 37661] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:09.538880 2026] [autoindex:error] [pid 37636:tid 37649] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:09.755246 2026] [autoindex:error] [pid 37636:tid 37659] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:10.106333 2026] [autoindex:error] [pid 37636:tid 37660] [client 194.5.82.40:51687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:42.283855 2026] [autoindex:error] [pid 37537:tid 37585] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:48:58.760301 2026] [autoindex:error] [pid 37537:tid 37596] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:05.644346 2026] [autoindex:error] [pid 37537:tid 37594] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:05.890045 2026] [autoindex:error] [pid 37537:tid 37585] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:11.963620 2026] [autoindex:error] [pid 37537:tid 37584] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:12.246153 2026] [autoindex:error] [pid 37537:tid 37590] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:12.668254 2026] [autoindex:error] [pid 37537:tid 37586] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:12.924373 2026] [autoindex:error] [pid 37537:tid 37594] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:13.234234 2026] [autoindex:error] [pid 37537:tid 37585] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:13.556228 2026] [autoindex:error] [pid 37537:tid 37592] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:13.792566 2026] [autoindex:error] [pid 37537:tid 37573] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:14.156816 2026] [autoindex:error] [pid 37537:tid 37587] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:14.519755 2026] [autoindex:error] [pid 37537:tid 37574] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 03:49:43.372581 2026] [autoindex:error] [pid 37537:tid 37582] [client 194.5.82.166:38823] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Jan 04 05:15:00.432695 2026] [:error] [pid 37538:tid 37624] [client 101.227.53.37:57954] [client 101.227.53.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.227.53.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVmG1IzU2j98LiSLQvRIsAAAAJg"]
[Sun Jan 04 05:15:02.666412 2026] [:error] [pid 37536:tid 37559] [client 101.227.53.37:58064] [client 101.227.53.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.227.53.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVmG1m-iKLialy_3rkvuOQAAABM"]
[Sun Jan 04 05:15:05.363167 2026] [:error] [pid 37536:tid 37545] [client 101.227.53.37:58172] [client 101.227.53.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.227.53.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVmG2W-iKLialy_3rkvuQQAAAAU"]
[Sun Jan 04 05:15:08.113769 2026] [:error] [pid 37536:tid 37561] [client 101.227.53.37:58300] [client 101.227.53.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.227.53.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVmG3G-iKLialy_3rkvuRgAAABU"]
[Sun Jan 04 05:15:10.023779 2026] [:error] [pid 37636:tid 37655] [client 101.227.53.37:58420] [client 101.227.53.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.227.53.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVmG3i3kmZpEf9yy2b05rwAAAM8"]
[Sun Jan 04 05:15:12.509752 2026] [:error] [pid 37636:tid 37643] [client 101.227.53.37:58514] [client 101.227.53.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.227.53.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVmG4C3kmZpEf9yy2b05vwAAAMM"]
[Sun Jan 04 05:15:12.509936 2026] [:error] [pid 37636:tid 37643] [client 101.227.53.37:58514] [client 101.227.53.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 101.227.53.37, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVmG4C3kmZpEf9yy2b05vwAAAMM"]
[Sun Jan 04 05:15:13.488152 2026] [:error] [pid 37636:tid 37653] [client 101.227.53.37:58598] [client 101.227.53.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.227.53.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVmG4S3kmZpEf9yy2b05xQAAAM0"]
[Sun Jan 04 05:15:13.488331 2026] [:error] [pid 37636:tid 37653] [client 101.227.53.37:58598] [client 101.227.53.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 101.227.53.37, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVmG4S3kmZpEf9yy2b05xQAAAM0"]
[Sun Jan 04 05:22:37.984962 2026] [:error] [pid 37636:tid 37640] [client 103.77.107.178:53402] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aVmInS3kmZpEf9yy2b09NQAAAMA"]
[Sun Jan 04 05:22:38.520220 2026] [:error] [pid 37537:tid 37581] [client 103.77.107.178:53488] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aVmIngjHz7EQ5p_4u2pe0gAAAEg"]
[Sun Jan 04 06:28:21.039281 2026] [:error] [pid 37537:tid 37597] [client 43.164.197.224:54696] [client 43.164.197.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVmYBQjHz7EQ5p_4u2pxNwAAAFg"]
[Sun Jan 04 07:05:34.900703 2026] [autoindex:error] [pid 37538:tid 37606] [client 165.227.182.131:60878] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Jan 04 07:44:43.703089 2026] [:error] [pid 37536:tid 37549] [client 182.42.104.32:58156] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVmp62-iKLialy_3rksYVQAAAAk"]
[Sun Jan 04 08:02:06.385178 2026] [:error] [pid 37537:tid 37574] [client 103.206.76.176:60767] [client 103.206.76.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.206.76.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVmt_gjHz7EQ5p_4u2qN5AAAAEE"]
[Sun Jan 04 08:02:53.270226 2026] [:error] [pid 33650:tid 33661] [client 216.247.87.132:14865] [client 216.247.87.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.247.87.132, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVmuLUzDhphKhMjzf1JE8AAAAQk"]
[Sun Jan 04 09:49:55.526211 2026] [:error] [pid 15480:tid 15502] [client 89.46.106.139:32622] [client 89.46.106.139] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aVnHQxBWKIu3SdvwTFhQswAAAJQ"]
[Sun Jan 04 09:50:42.640434 2026] [:error] [pid 26027:tid 26033] [client 41.193.5.58:53664] [client 41.193.5.58] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aVnHcoEKJ8aV6qy2bHuDCAAAAkE"]
[Sun Jan 04 09:56:54.072001 2026] [:error] [pid 32547:tid 32573] [client 208.109.68.254:40606] [client 208.109.68.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aVnI5rXUsRtAHcPn96OSMQAAARY"]
[Sun Jan 04 09:59:07.625701 2026] [:error] [pid 26028:tid 26073] [client 162.241.252.200:42518] [client 162.241.252.200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aVnJazJGxyvrSqP34DM3TQAAAs4"]
[Sun Jan 04 12:02:24.215631 2026] [:error] [pid 64248:tid 64268] [client 124.156.226.179:48486] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVnmUMZZ_5Iet2g0ae2u9AAAAFI"]
[Sun Jan 04 12:31:34.358168 2026] [:error] [pid 59250:tid 59265] [client 116.103.108.158:54028] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVntJvPJ-KGeNWdqpucfwwAAAMo"]
[Sun Jan 04 12:31:36.169054 2026] [:error] [pid 1020:tid 1042] [client 116.103.108.158:54264] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVntKFzz6-t0R3_Ito0GrwAAAVM"]
[Sun Jan 04 12:31:37.984969 2026] [:error] [pid 59250:tid 59278] [client 116.103.108.158:54484] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVntKfPJ-KGeNWdqpucfyAAAANc"]
[Sun Jan 04 12:31:39.644441 2026] [:error] [pid 1080:tid 1148] [client 116.103.108.158:54654] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVntKyu2Hm9AcIiqg0qGLAAAA8k"]
[Sun Jan 04 12:31:41.398036 2026] [:error] [pid 1020:tid 1029] [client 116.103.108.158:54864] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVntLVzz6-t0R3_Ito0GsQAAAUY"]
[Sun Jan 04 12:31:43.139088 2026] [:error] [pid 1020:tid 1047] [client 116.103.108.158:55154] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVntL1zz6-t0R3_Ito0GtQAAAVg"]
[Sun Jan 04 12:31:43.139229 2026] [:error] [pid 1020:tid 1047] [client 116.103.108.158:55154] [client 116.103.108.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 116.103.108.158, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVntL1zz6-t0R3_Ito0GtQAAAVg"]
[Sun Jan 04 12:31:44.160521 2026] [:error] [pid 4333:tid 4357] [client 116.103.108.158:55304] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVntMDAH-zZWAfquimCs9QAAABU"]
[Sun Jan 04 12:31:44.160694 2026] [:error] [pid 4333:tid 4357] [client 116.103.108.158:55304] [client 116.103.108.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 116.103.108.158, counter = 7"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVntMDAH-zZWAfquimCs9QAAABU"]
[Sun Jan 04 12:31:45.010130 2026] [:error] [pid 4365:tid 4413] [client 116.103.108.158:55412] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVntMcMi25XHOoMs4mcxWwAAAZI"]
[Sun Jan 04 12:31:45.010306 2026] [:error] [pid 4365:tid 4413] [client 116.103.108.158:55412] [client 116.103.108.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 116.103.108.158, counter = 8"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVntMcMi25XHOoMs4mcxWwAAAZI"]
[Sun Jan 04 13:35:14.523318 2026] [:error] [pid 59250:tid 59266] [client 216.247.87.132:42688] [client 216.247.87.132] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aVn8EvPJ-KGeNWdqpucrvwAAAMs"]
[Sun Jan 04 13:36:59.279931 2026] [:error] [pid 64248:tid 64268] [client 216.247.87.132:14740] [client 216.247.87.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.247.87.132, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVn8e8ZZ_5Iet2g0ae3CiAAAAFI"]
[Sun Jan 04 16:31:41.942541 2026] [:error] [pid 59250:tid 59259] [client 43.153.104.196:37294] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVolbfPJ-KGeNWdqpudLIwAAAMQ"]
[Sun Jan 04 17:39:40.067404 2026] [autoindex:error] [pid 4426:tid 4453] [client 138.197.13.155:62033] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Jan 04 20:38:52.536863 2026] [:error] [pid 1297:tid 1316] [client 43.159.149.216:56004] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVpfXBf98x0RBG23PjfeQAAAABE"]
[Sun Jan 04 23:59:28.500750 2026] [autoindex:error] [pid 50286:tid 50296] [client 167.172.226.47:50000] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Jan 05 00:17:30.832176 2026] [:error] [pid 22539:tid 22560] [client 43.135.145.73:48774] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVqSmhhJ_AcHbaXPfzEsiwAAAxA"]
[Mon Jan 05 02:46:21.192089 2026] [:error] [pid 1221:tid 1277] [client 180.110.203.108:50883] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVq1fZ_3f4CdEKVLTXUVvQAAAJY"]
[Mon Jan 05 04:17:26.762375 2026] [:error] [pid 5536:tid 5605] [client 43.155.195.141:60378] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVrK1gRtMZNG6xI8yDyypgAAAIg"]
[Mon Jan 05 06:41:41.627830 2026] [:error] [pid 6680:tid 6688] [client 132.148.185.33:39252] [client 132.148.185.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.33, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVrspaE58uNoazzTmx328gAAAQY"]
[Mon Jan 05 06:41:43.611940 2026] [:error] [pid 5632:tid 5664] [client 132.148.185.33:52810] [client 132.148.185.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.33, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVrsp4N3ZWvlOh-nbt_DJgAAANQ"]
[Mon Jan 05 06:41:45.563379 2026] [:error] [pid 5535:tid 5587] [client 132.148.185.33:52820] [client 132.148.185.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.33, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVrsqWnkedMjhVX0PTWdggAAAFE"]
[Mon Jan 05 06:41:47.528244 2026] [:error] [pid 6680:tid 6686] [client 132.148.185.33:52828] [client 132.148.185.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.33, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVrsq6E58uNoazzTmx32-AAAAQQ"]
[Mon Jan 05 06:41:49.481068 2026] [:error] [pid 5534:tid 5547] [client 132.148.185.33:52842] [client 132.148.185.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.33, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVrsrZNs9XmbR6unB0zJ_wAAAAQ"]
[Mon Jan 05 06:41:51.409463 2026] [:error] [pid 6680:tid 6684] [client 132.148.185.33:52858] [client 132.148.185.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.33, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVrsr6E58uNoazzTmx32-wAAAQI"]
[Mon Jan 05 06:41:51.409659 2026] [:error] [pid 6680:tid 6684] [client 132.148.185.33:52858] [client 132.148.185.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 132.148.185.33, counter = 6"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVrsr6E58uNoazzTmx32-wAAAQI"]
[Mon Jan 05 07:42:24.337414 2026] [:error] [pid 5632:tid 5647] [client 52.184.99.160:7825] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVr64IN3ZWvlOh-nbt_buQAAAMM"]
[Mon Jan 05 07:42:26.236176 2026] [:error] [pid 5632:tid 5652] [client 52.184.99.160:7819] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVr64oN3ZWvlOh-nbt_bvAAAAMg"]
[Mon Jan 05 07:42:28.335595 2026] [:error] [pid 6680:tid 6702] [client 52.184.99.160:6189] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVr65KE58uNoazzTmx0WAAAAARQ"]
[Mon Jan 05 07:42:30.034880 2026] [:error] [pid 5535:tid 5590] [client 52.184.99.160:5963] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aVr65mnkedMjhVX0PTWybAAAAFQ"]
[Mon Jan 05 07:42:30.899614 2026] [:error] [pid 5535:tid 5589] [client 52.184.99.160:3087] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xeeex.php"] [unique_id "aVr65mnkedMjhVX0PTWybgAAAFM"]
[Mon Jan 05 07:42:33.405653 2026] [:error] [pid 5535:tid 5594] [client 52.184.99.160:6166] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xeeex.php"] [unique_id "aVr66WnkedMjhVX0PTWycgAAAFg"]
[Mon Jan 05 07:42:35.146478 2026] [:error] [pid 5536:tid 5606] [client 52.184.99.160:4972] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xeeex.php"] [unique_id "aVr66wRtMZNG6xI8yDz6fgAAAIk"]
[Mon Jan 05 07:42:37.693794 2026] [:error] [pid 5534:tid 5548] [client 52.184.99.160:6220] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xeeex.php"] [unique_id "aVr67ZNs9XmbR6unB0zgIwAAAAU"]
[Mon Jan 05 07:42:39.431107 2026] [:error] [pid 5536:tid 5608] [client 52.184.99.160:7337] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVr67wRtMZNG6xI8yDz6jAAAAIs"]
[Mon Jan 05 07:42:45.902105 2026] [:error] [pid 5632:tid 5647] [client 52.184.99.160:4943] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVr69YN3ZWvlOh-nbt_b1wAAAMM"]
[Mon Jan 05 07:42:50.454002 2026] [:error] [pid 5536:tid 5601] [client 52.184.99.160:8262] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVr6-gRtMZNG6xI8yDz6owAAAIQ"]
[Mon Jan 05 07:42:52.382877 2026] [:error] [pid 5535:tid 5582] [client 52.184.99.160:2486] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aVr6_GnkedMjhVX0PTWyjAAAAEw"]
[Mon Jan 05 07:42:57.742386 2026] [:error] [pid 5536:tid 5615] [client 52.184.99.160:6010] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aVr7AQRtMZNG6xI8yDz6qQAAAJI"]
[Mon Jan 05 07:43:11.988560 2026] [:error] [pid 5632:tid 5667] [client 52.184.99.160:7305] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ma.php"] [unique_id "aVr7D4N3ZWvlOh-nbt_cbAAAANc"]
[Mon Jan 05 07:43:12.523012 2026] [:error] [pid 5535:tid 5584] [client 52.184.99.160:4581] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ma.php"] [unique_id "aVr7EGnkedMjhVX0PTWysQAAAE4"]
[Mon Jan 05 07:43:13.758152 2026] [:error] [pid 5534:tid 5563] [client 52.184.99.160:5134] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ma.php"] [unique_id "aVr7EZNs9XmbR6unB0zgXAAAABQ"]
[Mon Jan 05 07:43:16.420760 2026] [:error] [pid 5536:tid 5599] [client 52.184.99.160:3720] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ma.php"] [unique_id "aVr7FARtMZNG6xI8yDz63QAAAII"]
[Mon Jan 05 07:43:17.756347 2026] [:error] [pid 5536:tid 5598] [client 52.184.99.160:2081] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aVr7FQRtMZNG6xI8yDz65AAAAIE"]
[Mon Jan 05 07:43:38.881625 2026] [:error] [pid 5535:tid 5588] [client 52.184.99.160:4741] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aVr7KmnkedMjhVX0PTWzGgAAAFI"]
[Mon Jan 05 07:43:39.354184 2026] [:error] [pid 5536:tid 5620] [client 52.184.99.160:2108] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aVr7KwRtMZNG6xI8yDz7gQAAAJc"]
[Mon Jan 05 07:43:43.920617 2026] [:error] [pid 5535:tid 5574] [client 52.184.99.160:7939] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aVr7L2nkedMjhVX0PTWzQQAAAEQ"]
[Mon Jan 05 07:43:45.289831 2026] [:error] [pid 5632:tid 5644] [client 52.184.99.160:7792] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aVr7MYN3ZWvlOh-nbt_chgAAAMA"]
[Mon Jan 05 07:43:46.080450 2026] [:error] [pid 6680:tid 6692] [client 52.184.99.160:5781] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVr7MqE58uNoazzTmx0WhwAAAQo"]
[Mon Jan 05 07:43:50.345609 2026] [:error] [pid 5535:tid 5578] [client 52.184.99.160:2772] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVr7NmnkedMjhVX0PTWzSwAAAEg"]
[Mon Jan 05 07:43:51.566984 2026] [:error] [pid 5536:tid 5605] [client 52.184.99.160:5778] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVr7NwRtMZNG6xI8yDz7ugAAAIg"]
[Mon Jan 05 07:43:52.089612 2026] [:error] [pid 5535:tid 5584] [client 52.184.99.160:2651] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ths.php"] [unique_id "aVr7OGnkedMjhVX0PTWzUAAAAE4"]
[Mon Jan 05 07:44:06.639738 2026] [:error] [pid 5632:tid 5651] [client 52.184.99.160:5124] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanz.php"] [unique_id "aVr7RoN3ZWvlOh-nbt_cnAAAAMc"]
[Mon Jan 05 07:44:10.237706 2026] [:error] [pid 5632:tid 5654] [client 52.184.99.160:1246] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/990.php"] [unique_id "aVr7SoN3ZWvlOh-nbt_cnwAAAMo"]
[Mon Jan 05 07:44:25.387682 2026] [:error] [pid 5536:tid 5617] [client 52.184.99.160:7375] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aVr7WQRtMZNG6xI8yDz8KwAAAJQ"]
[Mon Jan 05 07:44:26.111118 2026] [:error] [pid 5536:tid 5601] [client 52.184.99.160:2554] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aVr7WgRtMZNG6xI8yDz8LgAAAIQ"]
[Mon Jan 05 07:44:31.637910 2026] [:error] [pid 5534:tid 5546] [client 52.184.99.160:7291] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aVr7X5Ns9XmbR6unB0zgsQAAAAM"]
[Mon Jan 05 07:44:34.145821 2026] [:error] [pid 6680:tid 6703] [client 52.184.99.160:2169] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aVr7YqE58uNoazzTmx0W3wAAARU"]
[Mon Jan 05 07:44:34.803204 2026] [:error] [pid 5536:tid 5597] [client 52.184.99.160:2354] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acwfihfh.php"] [unique_id "aVr7YgRtMZNG6xI8yDz8RAAAAIA"]
[Mon Jan 05 07:44:49.859787 2026] [:error] [pid 6680:tid 6698] [client 52.184.99.160:2143] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backdoor.php"] [unique_id "aVr7caE58uNoazzTmx0W9QAAARA"]
[Mon Jan 05 07:44:50.592866 2026] [:error] [pid 5534:tid 5558] [client 52.184.99.160:5081] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backdoor.php"] [unique_id "aVr7cpNs9XmbR6unB0zgxQAAAA8"]
[Mon Jan 05 07:44:56.974434 2026] [:error] [pid 5535:tid 5578] [client 52.184.99.160:5488] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backdoor.php"] [unique_id "aVr7eGnkedMjhVX0PTW0NwAAAEg"]
[Mon Jan 05 07:44:57.926626 2026] [:error] [pid 5534:tid 5551] [client 52.184.99.160:1178] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backdoor.php"] [unique_id "aVr7eZNs9XmbR6unB0zgywAAAAg"]
[Mon Jan 05 07:45:02.209933 2026] [:error] [pid 5536:tid 5618] [client 52.184.99.160:5465] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVr7fgRtMZNG6xI8yDz8pwAAAJU"]
[Mon Jan 05 07:45:04.079411 2026] [:error] [pid 6680:tid 6700] [client 52.184.99.160:2311] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVr7gKE58uNoazzTmx0XCgAAARI"]
[Mon Jan 05 07:45:06.313755 2026] [:error] [pid 5536:tid 5610] [client 52.184.99.160:4150] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVr7ggRtMZNG6xI8yDz8swAAAI0"]
[Mon Jan 05 07:45:07.868506 2026] [:error] [pid 5535:tid 5577] [client 52.184.99.160:5348] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVr7g2nkedMjhVX0PTW0RwAAAEc"]
[Mon Jan 05 07:45:08.498794 2026] [:error] [pid 5632:tid 5663] [client 52.184.99.160:2951] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/panel.php"] [unique_id "aVr7hIN3ZWvlOh-nbt_dNQAAANM"]
[Mon Jan 05 07:45:21.201678 2026] [:error] [pid 6680:tid 6695] [client 52.184.99.160:1206] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/panel.php"] [unique_id "aVr7kaE58uNoazzTmx0XLAAAAQ0"]
[Mon Jan 05 07:45:24.600003 2026] [:error] [pid 5534:tid 5556] [client 52.184.99.160:5251] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload.php"] [unique_id "aVr7lJNs9XmbR6unB0zg3gAAAA0"]
[Mon Jan 05 07:45:33.588608 2026] [:error] [pid 6680:tid 6689] [client 52.184.99.160:2944] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload.php"] [unique_id "aVr7naE58uNoazzTmx0XfAAAAQc"]
[Mon Jan 05 07:45:35.164621 2026] [:error] [pid 6680:tid 6688] [client 52.184.99.160:3515] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload.php"] [unique_id "aVr7n6E58uNoazzTmx0XgwAAAQY"]
[Mon Jan 05 07:45:35.959163 2026] [:error] [pid 5535:tid 5580] [client 52.184.99.160:5289] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload.php"] [unique_id "aVr7n2nkedMjhVX0PTW0mgAAAEo"]
[Mon Jan 05 07:45:38.367068 2026] [:error] [pid 6680:tid 6695] [client 52.184.99.160:3248] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aVr7oqE58uNoazzTmx0XigAAAQ0"]
[Mon Jan 05 07:45:43.227908 2026] [:error] [pid 5534:tid 5549] [client 52.184.99.160:7566] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aVr7p5Ns9XmbR6unB0zhDQAAAAY"]
[Mon Jan 05 07:45:44.268447 2026] [:error] [pid 5632:tid 5666] [client 52.184.99.160:5199] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aVr7qIN3ZWvlOh-nbt_dcAAAANY"]
[Mon Jan 05 07:45:45.191593 2026] [:error] [pid 5536:tid 5604] [client 52.184.99.160:5400] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aVr7qQRtMZNG6xI8yDz8_wAAAIc"]
[Mon Jan 05 07:45:45.782362 2026] [:error] [pid 5536:tid 5618] [client 52.184.99.160:1689] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/shell.php"] [unique_id "aVr7qQRtMZNG6xI8yDz9AgAAAJU"]
[Mon Jan 05 07:45:46.502823 2026] [:error] [pid 5536:tid 5598] [client 52.184.99.160:8327] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/shell.php"] [unique_id "aVr7qgRtMZNG6xI8yDz9BQAAAIE"]
[Mon Jan 05 07:46:15.994538 2026] [:error] [pid 5534:tid 5558] [client 52.184.99.160:2912] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admincp/backdoor.php"] [unique_id "aVr7x5Ns9XmbR6unB0zhcAAAAA8"]
[Mon Jan 05 07:46:16.738560 2026] [:error] [pid 5535:tid 5589] [client 52.184.99.160:7465] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admincp/backdoor.php"] [unique_id "aVr7yGnkedMjhVX0PTW0ygAAAFM"]
[Mon Jan 05 07:46:19.286995 2026] [:error] [pid 5534:tid 5564] [client 52.184.99.160:2923] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admincp/backdoor.php"] [unique_id "aVr7y5Ns9XmbR6unB0zheQAAABU"]
[Mon Jan 05 07:46:21.599508 2026] [:error] [pid 5534:tid 5549] [client 52.184.99.160:3144] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admincp/backdoor.php"] [unique_id "aVr7zZNs9XmbR6unB0zhfwAAAAY"]
[Mon Jan 05 07:46:25.609526 2026] [:error] [pid 5534:tid 5544] [client 52.184.99.160:4243] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/controlpanel/cmd.php"] [unique_id "aVr70ZNs9XmbR6unB0zhkwAAAAE"]
[Mon Jan 05 07:46:27.404707 2026] [:error] [pid 5536:tid 5612] [client 52.184.99.160:7001] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/controlpanel/cmd.php"] [unique_id "aVr70wRtMZNG6xI8yDz9dAAAAI8"]
[Mon Jan 05 07:46:28.185448 2026] [:error] [pid 5534:tid 5548] [client 52.184.99.160:7004] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/controlpanel/cmd.php"] [unique_id "aVr71JNs9XmbR6unB0zhmgAAAAU"]
[Mon Jan 05 07:46:30.562691 2026] [:error] [pid 6680:tid 6697] [client 52.184.99.160:3840] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/controlpanel/cmd.php"] [unique_id "aVr71qE58uNoazzTmx0X0QAAAQ8"]
[Mon Jan 05 07:46:47.384909 2026] [:error] [pid 5632:tid 5661] [client 52.184.99.160:5742] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logo.php"] [unique_id "aVr754N3ZWvlOh-nbt_dzwAAANE"]
[Mon Jan 05 07:46:52.695244 2026] [:error] [pid 5632:tid 5666] [client 52.184.99.160:4674] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logo.php"] [unique_id "aVr77IN3ZWvlOh-nbt_d1wAAANY"]
[Mon Jan 05 07:46:55.819840 2026] [:error] [pid 5632:tid 5644] [client 52.184.99.160:1486] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logo.php"] [unique_id "aVr774N3ZWvlOh-nbt_d3wAAAMA"]
[Mon Jan 05 07:47:00.840748 2026] [:error] [pid 5535:tid 5582] [client 52.184.99.160:3119] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logo.php"] [unique_id "aVr79GnkedMjhVX0PTW1FgAAAEw"]
[Mon Jan 05 07:47:10.654561 2026] [:error] [pid 5535:tid 5575] [client 52.184.99.160:5832] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/icon.php"] [unique_id "aVr7_mnkedMjhVX0PTW1IAAAAEU"]
[Mon Jan 05 07:47:14.401520 2026] [:error] [pid 5632:tid 5653] [client 52.184.99.160:3531] [client 52.184.99.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/icon.php"] [unique_id "aVr8AoN3ZWvlOh-nbt_eOQAAAMk"]
[Mon Jan 05 07:52:20.672045 2026] [:error] [pid 5536:tid 5615] [client 43.130.53.252:60998] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVr9NARtMZNG6xI8yDwAGQAAAJI"]
[Mon Jan 05 17:26:50.966812 2026] [:error] [pid 54081:tid 54085] [client 94.130.222.48:63282] [client 94.130.222.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/userfuns.php"] [unique_id "aVuD2lL4jLgtF-b9w4dZygAAAUE"], referer: www.google.com
[Mon Jan 05 18:56:23.185885 2026] [:error] [pid 54081:tid 54106] [client 104.208.88.45:9257] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cachex.php"] [unique_id "aVuY11L4jLgtF-b9w4dwkgAAAVY"]
[Mon Jan 05 18:56:23.966294 2026] [:error] [pid 5536:tid 5605] [client 104.208.88.45:19376] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cachex.php"] [unique_id "aVuY1wRtMZNG6xI8yDzP0gAAAIg"]
[Mon Jan 05 18:56:24.591271 2026] [:error] [pid 6680:tid 6687] [client 104.208.88.45:19352] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cachex.php"] [unique_id "aVuY2KE58uNoazzTmx3aewAAAQU"]
[Mon Jan 05 18:56:25.166783 2026] [:error] [pid 54081:tid 54089] [client 104.208.88.45:9921] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cachex.php"] [unique_id "aVuY2VL4jLgtF-b9w4dwlQAAAUU"]
[Mon Jan 05 18:56:25.706606 2026] [:error] [pid 6680:tid 6701] [client 104.208.88.45:9920] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpup.php"] [unique_id "aVuY2aE58uNoazzTmx3afgAAARM"]
[Mon Jan 05 18:56:26.840452 2026] [:error] [pid 5535:tid 5591] [client 104.208.88.45:9227] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpup.php"] [unique_id "aVuY2mnkedMjhVX0PTVeTwAAAFU"]
[Mon Jan 05 18:56:28.012522 2026] [:error] [pid 6680:tid 6696] [client 104.208.88.45:19355] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpup.php"] [unique_id "aVuY3KE58uNoazzTmx3ahAAAAQ4"]
[Mon Jan 05 18:56:29.057959 2026] [:error] [pid 5536:tid 5620] [client 104.208.88.45:19369] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpup.php"] [unique_id "aVuY3QRtMZNG6xI8yDzP1wAAAJc"]
[Mon Jan 05 18:56:30.225610 2026] [:error] [pid 28407:tid 28430] [client 104.208.88.45:19336] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "aVuY3tercd3ptydUzM0zCgAAAZM"]
[Mon Jan 05 18:56:31.705146 2026] [:error] [pid 28407:tid 28423] [client 104.208.88.45:9930] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "aVuY39ercd3ptydUzM0zCwAAAYw"]
[Mon Jan 05 18:56:34.399995 2026] [:error] [pid 5535:tid 5593] [client 104.208.88.45:19390] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "aVuY4mnkedMjhVX0PTVeUQAAAFc"]
[Mon Jan 05 18:56:34.836266 2026] [:error] [pid 6680:tid 6684] [client 104.208.88.45:19384] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "aVuY4qE58uNoazzTmx3aigAAAQI"]
[Mon Jan 05 18:56:35.130043 2026] [:error] [pid 5535:tid 5576] [client 104.208.88.45:9229] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpupex.php"] [unique_id "aVuY42nkedMjhVX0PTVeUgAAAEY"]
[Mon Jan 05 18:56:36.914337 2026] [:error] [pid 28407:tid 28424] [client 104.208.88.45:9935] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpupex.php"] [unique_id "aVuY5Nercd3ptydUzM0zEQAAAY0"]
[Mon Jan 05 18:56:38.171588 2026] [:error] [pid 5535:tid 5571] [client 104.208.88.45:19368] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpupex.php"] [unique_id "aVuY5mnkedMjhVX0PTVeVQAAAEE"]
[Mon Jan 05 18:56:39.815686 2026] [:error] [pid 5535:tid 5585] [client 104.208.88.45:9231] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpupex.php"] [unique_id "aVuY52nkedMjhVX0PTVeWwAAAE8"]
[Mon Jan 05 18:56:40.884160 2026] [:error] [pid 5536:tid 5610] [client 104.208.88.45:9251] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nck.php"] [unique_id "aVuY6ARtMZNG6xI8yDzP3gAAAI0"]
[Mon Jan 05 18:56:41.489879 2026] [:error] [pid 5534:tid 5558] [client 104.208.88.45:9249] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nck.php"] [unique_id "aVuY6ZNs9XmbR6unB0ynuwAAAA8"]
[Mon Jan 05 18:56:42.026677 2026] [:error] [pid 5534:tid 5545] [client 104.208.88.45:9277] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nck.php"] [unique_id "aVuY6pNs9XmbR6unB0ynvAAAAAI"]
[Mon Jan 05 18:56:42.704333 2026] [:error] [pid 6680:tid 6701] [client 104.208.88.45:19344] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nck.php"] [unique_id "aVuY6qE58uNoazzTmx3aiwAAARM"]
[Mon Jan 05 18:56:43.370715 2026] [:error] [pid 6680:tid 6705] [client 104.208.88.45:9230] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVuY66E58uNoazzTmx3ajAAAARc"]
[Mon Jan 05 18:56:43.792594 2026] [:error] [pid 6680:tid 6689] [client 104.208.88.45:19341] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVuY66E58uNoazzTmx3ajQAAAQc"]
[Mon Jan 05 18:56:44.389755 2026] [:error] [pid 6680:tid 6694] [client 104.208.88.45:35223] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVuY7KE58uNoazzTmx3ajgAAAQw"]
[Mon Jan 05 18:56:45.121156 2026] [:error] [pid 5536:tid 5605] [client 104.208.88.45:9267] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aVuY7QRtMZNG6xI8yDzP4QAAAIg"]
[Mon Jan 05 18:56:45.398930 2026] [:error] [pid 5535:tid 5576] [client 104.208.88.45:9939] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aVuY7WnkedMjhVX0PTVeYAAAAEY"]
[Mon Jan 05 18:56:46.439973 2026] [:error] [pid 5534:tid 5550] [client 104.208.88.45:19334] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aVuY7pNs9XmbR6unB0ynwAAAAAc"]
[Mon Jan 05 18:56:47.128394 2026] [:error] [pid 5536:tid 5616] [client 104.208.88.45:9274] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aVuY7wRtMZNG6xI8yDzP6gAAAJM"]
[Mon Jan 05 18:56:47.530552 2026] [:error] [pid 5632:tid 5658] [client 104.208.88.45:19329] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aVuY74N3ZWvlOh-nbt-yWAAAAM4"]
[Mon Jan 05 18:56:48.201004 2026] [:error] [pid 6680:tid 6683] [client 104.208.88.45:9261] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-activate.php"] [unique_id "aVuY8KE58uNoazzTmx3akAAAAQE"]
[Mon Jan 05 18:56:49.019735 2026] [:error] [pid 6680:tid 6696] [client 104.208.88.45:9273] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-activate.php"] [unique_id "aVuY8aE58uNoazzTmx3akwAAAQ4"]
[Mon Jan 05 18:56:49.380856 2026] [:error] [pid 5535:tid 5580] [client 104.208.88.45:19375] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-activate.php"] [unique_id "aVuY8WnkedMjhVX0PTVeYgAAAEo"]
[Mon Jan 05 18:56:50.013864 2026] [:error] [pid 6680:tid 6691] [client 104.208.88.45:19338] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-activate.php"] [unique_id "aVuY8qE58uNoazzTmx3alAAAAQk"]
[Mon Jan 05 18:56:51.086097 2026] [:error] [pid 5536:tid 5608] [client 104.208.88.45:9937] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aVuY8wRtMZNG6xI8yDzP8AAAAIs"]
[Mon Jan 05 18:56:51.552184 2026] [:error] [pid 5535:tid 5583] [client 104.208.88.45:19332] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aVuY82nkedMjhVX0PTVeZAAAAE0"]
[Mon Jan 05 18:56:51.823007 2026] [:error] [pid 5536:tid 5617] [client 104.208.88.45:9228] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aVuY8wRtMZNG6xI8yDzP8gAAAJQ"]
[Mon Jan 05 18:56:52.109153 2026] [:error] [pid 5536:tid 5614] [client 104.208.88.45:9936] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aVuY9ARtMZNG6xI8yDzP8wAAAJE"]
[Mon Jan 05 18:56:52.478105 2026] [:error] [pid 28407:tid 28413] [client 104.208.88.45:35230] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aVuY9Nercd3ptydUzM0zGQAAAYM"]
[Mon Jan 05 18:56:53.182444 2026] [:error] [pid 28407:tid 28422] [client 104.208.88.45:9933] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aVuY9dercd3ptydUzM0zGgAAAYs"]
[Mon Jan 05 18:56:54.096332 2026] [:error] [pid 5535:tid 5577] [client 104.208.88.45:9255] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aVuY9mnkedMjhVX0PTVeZQAAAEc"]
[Mon Jan 05 18:56:54.788412 2026] [:error] [pid 5534:tid 5546] [client 104.208.88.45:19367] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aVuY9pNs9XmbR6unB0ynxQAAAAM"]
[Mon Jan 05 18:56:55.589446 2026] [:error] [pid 5536:tid 5611] [client 104.208.88.45:19357] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVuY9wRtMZNG6xI8yDzP_gAAAI4"]
[Mon Jan 05 18:56:56.001544 2026] [:error] [pid 54081:tid 54101] [client 104.208.88.45:9263] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVuY-FL4jLgtF-b9w4dwqQAAAVE"]
[Mon Jan 05 18:56:56.861913 2026] [:error] [pid 5535:tid 5587] [client 104.208.88.45:9266] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVuY-GnkedMjhVX0PTVeawAAAFE"]
[Mon Jan 05 18:56:57.245280 2026] [:error] [pid 5534:tid 5559] [client 104.208.88.45:19378] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aVuY-ZNs9XmbR6unB0ynygAAABA"]
[Mon Jan 05 18:56:58.006508 2026] [:error] [pid 6680:tid 6698] [client 104.208.88.45:9973] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs.php"] [unique_id "aVuY-qE58uNoazzTmx3amAAAARA"]
[Mon Jan 05 18:56:58.862121 2026] [:error] [pid 5534:tid 5564] [client 104.208.88.45:9258] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs.php"] [unique_id "aVuY-pNs9XmbR6unB0ynywAAABU"]
[Mon Jan 05 18:56:59.752529 2026] [:error] [pid 54081:tid 54090] [client 104.208.88.45:9252] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs.php"] [unique_id "aVuY-1L4jLgtF-b9w4dwrwAAAUY"]
[Mon Jan 05 18:57:00.475360 2026] [:error] [pid 28407:tid 28411] [client 104.208.88.45:35205] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs.php"] [unique_id "aVuY_Nercd3ptydUzM0zIAAAAYE"]
[Mon Jan 05 18:57:00.921717 2026] [:error] [pid 28407:tid 28429] [client 104.208.88.45:35217] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "aVuY_Nercd3ptydUzM0zIgAAAZI"]
[Mon Jan 05 18:57:01.595880 2026] [:error] [pid 28407:tid 28423] [client 104.208.88.45:9217] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "aVuY_dercd3ptydUzM0zJAAAAYw"]
[Mon Jan 05 18:57:01.871566 2026] [:error] [pid 28407:tid 28421] [client 104.208.88.45:9222] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "aVuY_dercd3ptydUzM0zJQAAAYo"]
[Mon Jan 05 18:57:02.635431 2026] [:error] [pid 5534:tid 5552] [client 104.208.88.45:9966] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "aVuY_pNs9XmbR6unB0yn1QAAAAk"]
[Mon Jan 05 18:57:02.940309 2026] [:error] [pid 5536:tid 5600] [client 104.208.88.45:9236] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aVuY_gRtMZNG6xI8yDzQCQAAAIM"]
[Mon Jan 05 18:57:03.426430 2026] [:error] [pid 5534:tid 5543] [client 104.208.88.45:9243] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aVuY_5Ns9XmbR6unB0yn3QAAAAA"]
[Mon Jan 05 18:57:03.905910 2026] [:error] [pid 5534:tid 5553] [client 104.208.88.45:35237] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aVuY_5Ns9XmbR6unB0yn3gAAAAo"]
[Mon Jan 05 18:57:04.261740 2026] [:error] [pid 5534:tid 5562] [client 104.208.88.45:19380] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aVuZAJNs9XmbR6unB0yn4QAAABM"]
[Mon Jan 05 18:57:04.913268 2026] [:error] [pid 5534:tid 5549] [client 104.208.88.45:19379] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aVuZAJNs9XmbR6unB0yn4gAAAAY"]
[Mon Jan 05 18:57:05.301920 2026] [:error] [pid 5535:tid 5570] [client 104.208.88.45:9248] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aVuZAWnkedMjhVX0PTVebQAAAEA"]
[Mon Jan 05 18:57:06.841159 2026] [:error] [pid 5536:tid 5597] [client 104.208.88.45:9922] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aVuZAgRtMZNG6xI8yDzQCgAAAIA"]
[Mon Jan 05 18:57:07.225957 2026] [:error] [pid 6680:tid 6694] [client 104.208.88.45:9282] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aVuZA6E58uNoazzTmx3amwAAAQw"]
[Mon Jan 05 18:57:10.878995 2026] [:error] [pid 54081:tid 54101] [client 104.208.88.45:19340] [client 104.208.88.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aVuZBlL4jLgtF-b9w4dwtAAAAVE"]
[Mon Jan 05 21:18:51.038188 2026] [:error] [pid 54081:tid 54100] [client 43.157.188.74:47816] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVu6O1L4jLgtF-b9w4eTyAAAAVA"]
[Mon Jan 05 21:44:56.532525 2026] [:error] [pid 5535:tid 5583] [client 1.15.52.154:44386] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVvAWGnkedMjhVX0PTWI6wAAAE0"]
[Mon Jan 05 22:09:07.642923 2026] [:error] [pid 5536:tid 5615] [client 172.192.68.8:39663] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "aVvGAwRtMZNG6xI8yDwSJgAAAJI"]
[Mon Jan 05 22:09:10.132265 2026] [:error] [pid 5632:tid 5658] [client 172.192.68.8:38600] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "aVvGBoN3ZWvlOh-nbt_lWQAAAM4"]
[Mon Jan 05 22:09:13.092156 2026] [:error] [pid 6680:tid 6687] [client 172.192.68.8:7743] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "aVvGCaE58uNoazzTmx0WTwAAAQU"]
[Mon Jan 05 22:09:16.642612 2026] [:error] [pid 5534:tid 5563] [client 172.192.68.8:60687] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "aVvGDJNs9XmbR6unB0z9CgAAABQ"]
[Mon Jan 05 22:09:19.506713 2026] [:error] [pid 28407:tid 28432] [client 172.192.68.8:8810] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "aVvGD9ercd3ptydUzM1p6wAAAZU"]
[Mon Jan 05 22:09:22.618741 2026] [:error] [pid 28407:tid 28431] [client 172.192.68.8:22348] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "aVvGEtercd3ptydUzM1p8QAAAZQ"]
[Mon Jan 05 22:09:23.990968 2026] [:error] [pid 5632:tid 5647] [client 172.192.68.8:39331] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "aVvGE4N3ZWvlOh-nbt_lYwAAAMM"]
[Mon Jan 05 22:09:25.111866 2026] [:error] [pid 5632:tid 5664] [client 172.192.68.8:7709] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "aVvGFYN3ZWvlOh-nbt_laAAAANQ"]
[Mon Jan 05 22:09:28.272681 2026] [:error] [pid 5535:tid 5580] [client 172.192.68.8:39304] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aVvGGGnkedMjhVX0PTWOzAAAAEo"]
[Mon Jan 05 22:09:31.409164 2026] [:error] [pid 5534:tid 5565] [client 172.192.68.8:25151] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aVvGG5Ns9XmbR6unB0z9IQAAABY"]
[Mon Jan 05 22:09:48.841559 2026] [:error] [pid 5534:tid 5550] [client 172.192.68.8:9474] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvGLJNs9XmbR6unB0z9QAAAAAc"]
[Mon Jan 05 22:09:53.298761 2026] [:error] [pid 6680:tid 6686] [client 172.192.68.8:54586] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvGMaE58uNoazzTmx0WbgAAAQQ"]
[Mon Jan 05 22:09:55.204699 2026] [:error] [pid 5632:tid 5660] [client 172.192.68.8:7617] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvGM4N3ZWvlOh-nbt_lewAAANA"]
[Mon Jan 05 22:09:57.073036 2026] [:error] [pid 5536:tid 5601] [client 172.192.68.8:9473] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvGNQRtMZNG6xI8yDwSSgAAAIQ"]
[Mon Jan 05 22:09:59.373860 2026] [:error] [pid 5632:tid 5667] [client 172.192.68.8:54578] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "aVvGN4N3ZWvlOh-nbt_lfgAAANc"]
[Mon Jan 05 22:10:02.417364 2026] [:error] [pid 5632:tid 5644] [client 172.192.68.8:54591] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "aVvGOoN3ZWvlOh-nbt_lgQAAAMA"]
[Mon Jan 05 22:10:16.819709 2026] [:error] [pid 5535:tid 5593] [client 172.192.68.8:54539] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aVvGSGnkedMjhVX0PTWPGgAAAFc"]
[Mon Jan 05 22:10:19.733421 2026] [:error] [pid 6680:tid 6706] [client 172.192.68.8:7618] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aVvGS6E58uNoazzTmx0WgAAAARg"]
[Mon Jan 05 22:10:24.153167 2026] [:error] [pid 5536:tid 5610] [client 172.192.68.8:58190] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aVvGUARtMZNG6xI8yDwSawAAAI0"]
[Mon Jan 05 22:10:29.053260 2026] [:error] [pid 6680:tid 6690] [client 172.192.68.8:24046] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aVvGVaE58uNoazzTmx0WhwAAAQg"]
[Mon Jan 05 22:17:07.565238 2026] [:error] [pid 5536:tid 5606] [client 4.193.229.169:52992] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inwp.php"] [unique_id "aVvH4wRtMZNG6xI8yDwUFgAAAIk"]
[Mon Jan 05 22:17:09.747043 2026] [:error] [pid 5534:tid 5557] [client 4.193.229.169:57501] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inwp.php"] [unique_id "aVvH5ZNs9XmbR6unB0z_gwAAAA4"]
[Mon Jan 05 22:17:10.521897 2026] [:error] [pid 5534:tid 5559] [client 4.193.229.169:57492] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inwp.php"] [unique_id "aVvH5pNs9XmbR6unB0z_hgAAABA"]
[Mon Jan 05 22:17:13.328697 2026] [:error] [pid 28407:tid 28427] [client 4.193.229.169:56077] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inwp.php"] [unique_id "aVvH6dercd3ptydUzM1sMQAAAZA"]
[Mon Jan 05 22:17:18.626515 2026] [:error] [pid 5536:tid 5609] [client 4.193.229.169:53009] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aVvH7gRtMZNG6xI8yDwUIgAAAIw"]
[Mon Jan 05 22:17:20.560817 2026] [:error] [pid 5534:tid 5543] [client 4.193.229.169:57493] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aVvH8JNs9XmbR6unB0z_mAAAAAA"]
[Mon Jan 05 22:17:22.684007 2026] [:error] [pid 5536:tid 5616] [client 4.193.229.169:53019] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aVvH8gRtMZNG6xI8yDwUJwAAAJM"]
[Mon Jan 05 22:17:25.704372 2026] [:error] [pid 5534:tid 5557] [client 4.193.229.169:53037] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aVvH9ZNs9XmbR6unB0z_owAAAA4"]
[Mon Jan 05 22:17:26.652797 2026] [:error] [pid 6680:tid 6685] [client 4.193.229.169:57531] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "aVvH9qE58uNoazzTmx0YfAAAAQM"]
[Mon Jan 05 22:17:28.376658 2026] [:error] [pid 5632:tid 5661] [client 4.193.229.169:53014] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "aVvH-IN3ZWvlOh-nbt_n8AAAANE"]
[Mon Jan 05 22:17:30.889844 2026] [:error] [pid 5632:tid 5668] [client 4.193.229.169:53039] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "aVvH-oN3ZWvlOh-nbt_n8wAAANg"]
[Mon Jan 05 22:17:32.412432 2026] [:error] [pid 5632:tid 5653] [client 4.193.229.169:53044] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "aVvH_IN3ZWvlOh-nbt_n9wAAAMk"]
[Mon Jan 05 22:17:34.899220 2026] [:error] [pid 28407:tid 28435] [client 4.193.229.169:53002] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tanjiro.php"] [unique_id "aVvH_tercd3ptydUzM1sQgAAAZg"]
[Mon Jan 05 22:17:37.086422 2026] [:error] [pid 5632:tid 5660] [client 4.193.229.169:57487] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tanjiro.php"] [unique_id "aVvIAYN3ZWvlOh-nbt_n_AAAANA"]
[Mon Jan 05 22:17:38.924004 2026] [:error] [pid 5536:tid 5611] [client 4.193.229.169:52995] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tanjiro.php"] [unique_id "aVvIAgRtMZNG6xI8yDwUOwAAAI4"]
[Mon Jan 05 22:17:40.404893 2026] [:error] [pid 5535:tid 5573] [client 4.193.229.169:57478] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tanjiro.php"] [unique_id "aVvIBGnkedMjhVX0PTWQwAAAAEM"]
[Mon Jan 05 22:17:41.077948 2026] [:error] [pid 28407:tid 28429] [client 4.193.229.169:57506] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "aVvIBdercd3ptydUzM1sTwAAAZI"]
[Mon Jan 05 22:17:42.392345 2026] [:error] [pid 5534:tid 5550] [client 4.193.229.169:57526] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "aVvIBpNs9XmbR6unB0z_5wAAAAc"]
[Mon Jan 05 22:17:43.140512 2026] [:error] [pid 5536:tid 5615] [client 4.193.229.169:56065] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "aVvIBwRtMZNG6xI8yDwUPwAAAJI"]
[Mon Jan 05 22:17:51.430940 2026] [:error] [pid 5536:tid 5607] [client 4.193.229.169:30356] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "aVvIDwRtMZNG6xI8yDwURgAAAIo"]
[Mon Jan 05 22:17:53.238678 2026] [:error] [pid 5632:tid 5661] [client 4.193.229.169:53042] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad1.php"] [unique_id "aVvIEYN3ZWvlOh-nbt_oDQAAANE"]
[Mon Jan 05 22:17:56.318389 2026] [:error] [pid 5536:tid 5608] [client 4.193.229.169:58831] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad1.php"] [unique_id "aVvIFARtMZNG6xI8yDwUUwAAAIs"]
[Mon Jan 05 22:17:57.153952 2026] [:error] [pid 5535:tid 5573] [client 4.193.229.169:56070] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad1.php"] [unique_id "aVvIFWnkedMjhVX0PTWQzwAAAEM"]
[Mon Jan 05 22:18:00.801852 2026] [:error] [pid 5534:tid 5558] [client 4.193.229.169:56097] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad1.php"] [unique_id "aVvIGJNs9XmbR6unB0wAEQAAAA8"]
[Mon Jan 05 22:18:13.434349 2026] [:error] [pid 5536:tid 5619] [client 4.193.229.169:53043] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aVvIJQRtMZNG6xI8yDwUawAAAJY"]
[Mon Jan 05 22:18:15.413222 2026] [:error] [pid 28407:tid 28427] [client 4.193.229.169:57503] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aVvIJ9ercd3ptydUzM1siQAAAZA"]
[Mon Jan 05 22:18:16.631926 2026] [:error] [pid 28407:tid 28415] [client 4.193.229.169:30364] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aVvIKNercd3ptydUzM1skAAAAYU"]
[Mon Jan 05 22:18:17.914664 2026] [:error] [pid 5536:tid 5617] [client 4.193.229.169:56126] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aVvIKQRtMZNG6xI8yDwUdgAAAJQ"]
[Mon Jan 05 22:18:18.419374 2026] [:error] [pid 28407:tid 28427] [client 4.193.229.169:30340] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvIKtercd3ptydUzM1slgAAAZA"]
[Mon Jan 05 22:18:19.095906 2026] [:error] [pid 5536:tid 5607] [client 4.193.229.169:30344] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvIKwRtMZNG6xI8yDwUfwAAAIo"]
[Mon Jan 05 22:18:19.486692 2026] [:error] [pid 5632:tid 5646] [client 4.193.229.169:30373] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvIK4N3ZWvlOh-nbt_oLwAAAMI"]
[Mon Jan 05 22:18:20.117782 2026] [:error] [pid 6680:tid 6701] [client 4.193.229.169:53055] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvILKE58uNoazzTmx0YugAAARM"]
[Mon Jan 05 22:18:20.880859 2026] [:error] [pid 28407:tid 28423] [client 4.193.229.169:53029] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "aVvILNercd3ptydUzM1smAAAAYw"]
[Mon Jan 05 22:18:21.188485 2026] [:error] [pid 5534:tid 5550] [client 4.193.229.169:58832] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "aVvILZNs9XmbR6unB0wAdwAAAAc"]
[Mon Jan 05 22:18:21.557206 2026] [:error] [pid 54081:tid 54094] [client 4.193.229.169:57522] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "aVvILVL4jLgtF-b9w4ekCwAAAUo"]
[Mon Jan 05 22:18:21.980236 2026] [:error] [pid 5632:tid 5657] [client 4.193.229.169:56076] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "aVvILYN3ZWvlOh-nbt_oOAAAAM0"]
[Mon Jan 05 22:18:22.490458 2026] [:error] [pid 5632:tid 5645] [client 4.193.229.169:57496] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "aVvILoN3ZWvlOh-nbt_oOQAAAME"]
[Mon Jan 05 22:18:22.967682 2026] [:error] [pid 6680:tid 6695] [client 4.193.229.169:58857] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "aVvILqE58uNoazzTmx0YwQAAAQ0"]
[Mon Jan 05 22:18:23.195196 2026] [:error] [pid 28407:tid 28421] [client 4.193.229.169:30357] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "aVvIL9ercd3ptydUzM1soAAAAYo"]
[Mon Jan 05 22:18:23.456649 2026] [:error] [pid 5632:tid 5649] [client 4.193.229.169:30379] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "aVvIL4N3ZWvlOh-nbt_oPwAAAMU"]
[Mon Jan 05 22:18:23.927061 2026] [:error] [pid 54081:tid 54089] [client 4.193.229.169:53032] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aVvIL1L4jLgtF-b9w4ekDwAAAUU"]
[Mon Jan 05 22:18:24.458493 2026] [:error] [pid 54081:tid 54085] [client 4.193.229.169:56118] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aVvIMFL4jLgtF-b9w4ekEwAAAUE"]
[Mon Jan 05 22:18:24.846650 2026] [:error] [pid 54081:tid 54102] [client 4.193.229.169:30361] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aVvIMFL4jLgtF-b9w4ekFAAAAVI"]
[Mon Jan 05 22:18:25.101111 2026] [:error] [pid 54081:tid 54087] [client 4.193.229.169:53052] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aVvIMVL4jLgtF-b9w4ekFgAAAUM"]
[Mon Jan 05 22:18:25.418011 2026] [:error] [pid 5632:tid 5660] [client 4.193.229.169:58830] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "aVvIMYN3ZWvlOh-nbt_oSAAAANA"]
[Mon Jan 05 22:18:25.703671 2026] [:error] [pid 5536:tid 5612] [client 4.193.229.169:30395] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "aVvIMQRtMZNG6xI8yDwUlgAAAI8"]
[Mon Jan 05 22:18:25.990443 2026] [:error] [pid 28407:tid 28435] [client 4.193.229.169:56067] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "aVvIMdercd3ptydUzM1sqQAAAZg"]
[Mon Jan 05 22:18:26.181660 2026] [:error] [pid 28407:tid 28430] [client 4.193.229.169:22221] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "aVvIMtercd3ptydUzM1srAAAAZM"]
[Mon Jan 05 22:18:26.416045 2026] [:error] [pid 5632:tid 5661] [client 4.193.229.169:53040] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "aVvIMoN3ZWvlOh-nbt_oSwAAANE"]
[Mon Jan 05 22:18:26.600559 2026] [:error] [pid 5535:tid 5573] [client 4.193.229.169:58825] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "aVvIMmnkedMjhVX0PTWQ7gAAAEM"]
[Mon Jan 05 22:18:26.976071 2026] [:error] [pid 5632:tid 5666] [client 4.193.229.169:58833] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "aVvIMoN3ZWvlOh-nbt_oTwAAANY"]
[Mon Jan 05 22:18:27.225172 2026] [:error] [pid 5632:tid 5648] [client 4.193.229.169:58834] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "aVvIM4N3ZWvlOh-nbt_oUwAAAMQ"]
[Mon Jan 05 22:18:27.458321 2026] [:error] [pid 5536:tid 5605] [client 4.193.229.169:22295] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alog.php"] [unique_id "aVvIMwRtMZNG6xI8yDwUmwAAAIg"]
[Mon Jan 05 22:18:27.779473 2026] [:error] [pid 5534:tid 5551] [client 4.193.229.169:30346] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alog.php"] [unique_id "aVvIM5Ns9XmbR6unB0wAiQAAAAg"]
[Mon Jan 05 22:18:27.985821 2026] [:error] [pid 5534:tid 5560] [client 4.193.229.169:58836] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alog.php"] [unique_id "aVvIM5Ns9XmbR6unB0wAigAAABE"]
[Mon Jan 05 22:18:28.180020 2026] [:error] [pid 28407:tid 28428] [client 4.193.229.169:22277] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alog.php"] [unique_id "aVvINNercd3ptydUzM1stAAAAZE"]
[Mon Jan 05 22:18:28.389786 2026] [:error] [pid 5534:tid 5549] [client 4.193.229.169:22209] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7T6.php"] [unique_id "aVvINJNs9XmbR6unB0wAjQAAAAY"]
[Mon Jan 05 22:18:28.698202 2026] [:error] [pid 5535:tid 5586] [client 4.193.229.169:30365] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7T6.php"] [unique_id "aVvINGnkedMjhVX0PTWQ-wAAAFA"]
[Mon Jan 05 22:18:28.886356 2026] [:error] [pid 5534:tid 5564] [client 4.193.229.169:58876] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7T6.php"] [unique_id "aVvINJNs9XmbR6unB0wAkAAAABU"]
[Mon Jan 05 22:18:29.146756 2026] [:error] [pid 5535:tid 5590] [client 4.193.229.169:58865] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7T6.php"] [unique_id "aVvINWnkedMjhVX0PTWQ_wAAAFQ"]
[Mon Jan 05 22:18:29.468126 2026] [:error] [pid 5535:tid 5572] [client 4.193.229.169:30390] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aVvINWnkedMjhVX0PTWRAAAAAEI"]
[Mon Jan 05 22:18:29.675134 2026] [:error] [pid 28407:tid 28433] [client 4.193.229.169:22291] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aVvINdercd3ptydUzM1swgAAAZY"]
[Mon Jan 05 22:18:29.976221 2026] [:error] [pid 5535:tid 5579] [client 4.193.229.169:30391] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aVvINWnkedMjhVX0PTWRBgAAAEk"]
[Mon Jan 05 22:18:30.278471 2026] [:error] [pid 5535:tid 5576] [client 4.193.229.169:22309] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aVvINmnkedMjhVX0PTWRCQAAAEY"]
[Mon Jan 05 22:18:30.508960 2026] [:error] [pid 5534:tid 5561] [client 4.193.229.169:58863] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Rk41.php"] [unique_id "aVvINpNs9XmbR6unB0wAmgAAABI"]
[Mon Jan 05 22:18:30.727357 2026] [:error] [pid 6680:tid 6701] [client 4.193.229.169:22326] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Rk41.php"] [unique_id "aVvINqE58uNoazzTmx0YywAAARM"]
[Mon Jan 05 22:18:31.074581 2026] [:error] [pid 5632:tid 5647] [client 4.193.229.169:58829] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Rk41.php"] [unique_id "aVvIN4N3ZWvlOh-nbt_oWAAAAMM"]
[Mon Jan 05 22:18:31.344169 2026] [:error] [pid 5535:tid 5587] [client 4.193.229.169:56110] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Rk41.php"] [unique_id "aVvIN2nkedMjhVX0PTWREQAAAFE"]
[Mon Jan 05 22:18:31.594376 2026] [:error] [pid 54081:tid 54102] [client 4.193.229.169:30360] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ztv.php"] [unique_id "aVvIN1L4jLgtF-b9w4ekJgAAAVI"]
[Mon Jan 05 22:18:31.938716 2026] [:error] [pid 5534:tid 5556] [client 4.193.229.169:22210] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ztv.php"] [unique_id "aVvIN5Ns9XmbR6unB0wApgAAAA0"]
[Mon Jan 05 22:18:32.117006 2026] [:error] [pid 5534:tid 5553] [client 4.193.229.169:22335] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ztv.php"] [unique_id "aVvIOJNs9XmbR6unB0wAqgAAAAo"]
[Mon Jan 05 22:18:32.354833 2026] [:error] [pid 54081:tid 54097] [client 4.193.229.169:22214] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ztv.php"] [unique_id "aVvIOFL4jLgtF-b9w4ekKQAAAU0"]
[Mon Jan 05 22:18:32.584174 2026] [:error] [pid 5535:tid 5584] [client 4.193.229.169:22086] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sef.php"] [unique_id "aVvIOGnkedMjhVX0PTWRFwAAAE4"]
[Mon Jan 05 22:18:32.815578 2026] [:error] [pid 5632:tid 5661] [client 4.193.229.169:22241] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sef.php"] [unique_id "aVvIOIN3ZWvlOh-nbt_oYwAAANE"]
[Mon Jan 05 22:18:33.034505 2026] [:error] [pid 6680:tid 6682] [client 4.193.229.169:22320] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sef.php"] [unique_id "aVvIOaE58uNoazzTmx0Y0AAAAQA"]
[Mon Jan 05 22:18:33.223352 2026] [:error] [pid 5535:tid 5592] [client 4.193.229.169:22314] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sef.php"] [unique_id "aVvIOWnkedMjhVX0PTWRHwAAAFY"]
[Mon Jan 05 22:18:33.431382 2026] [:error] [pid 54081:tid 54086] [client 4.193.229.169:58848] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aVvIOVL4jLgtF-b9w4ekLQAAAUI"]
[Mon Jan 05 22:18:33.640659 2026] [:error] [pid 54081:tid 54108] [client 4.193.229.169:22312] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aVvIOVL4jLgtF-b9w4ekLwAAAVg"]
[Mon Jan 05 22:18:33.873439 2026] [:error] [pid 5632:tid 5668] [client 4.193.229.169:22321] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aVvIOYN3ZWvlOh-nbt_oagAAANg"]
[Mon Jan 05 22:18:34.093451 2026] [:error] [pid 5535:tid 5593] [client 4.193.229.169:53009] [client 4.193.229.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aVvIOmnkedMjhVX0PTWRIwAAAFc"]
[Mon Jan 05 22:27:20.118871 2026] [:error] [pid 6680:tid 6695] [client 20.205.40.135:59258] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "aVvKSKE58uNoazzTmx0bXwAAAQ0"]
[Mon Jan 05 22:27:20.620726 2026] [:error] [pid 5534:tid 5561] [client 20.205.40.135:25431] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "aVvKSJNs9XmbR6unB0wEGwAAABI"]
[Mon Jan 05 22:27:21.132796 2026] [:error] [pid 28407:tid 28410] [client 20.205.40.135:36822] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "aVvKSdercd3ptydUzM1v5QAAAYA"]
[Mon Jan 05 22:27:22.842647 2026] [:error] [pid 5535:tid 5591] [client 20.205.40.135:25438] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "aVvKSmnkedMjhVX0PTWTHQAAAFU"]
[Mon Jan 05 22:27:23.955721 2026] [:error] [pid 5536:tid 5615] [client 20.205.40.135:38763] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "aVvKSwRtMZNG6xI8yDwW-gAAAJI"]
[Mon Jan 05 22:27:24.636609 2026] [:error] [pid 54081:tid 54098] [client 20.205.40.135:36856] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "aVvKTFL4jLgtF-b9w4emTQAAAU4"]
[Mon Jan 05 22:27:25.522613 2026] [:error] [pid 5535:tid 5592] [client 20.205.40.135:4762] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "aVvKTWnkedMjhVX0PTWTIgAAAFY"]
[Mon Jan 05 22:27:26.524154 2026] [:error] [pid 5632:tid 5668] [client 20.205.40.135:30526] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "aVvKToN3ZWvlOh-nbt_q2QAAANg"]
[Mon Jan 05 22:27:27.424027 2026] [:error] [pid 5536:tid 5617] [client 20.205.40.135:34386] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aVvKTwRtMZNG6xI8yDwXAQAAAJQ"]
[Mon Jan 05 22:27:28.076090 2026] [:error] [pid 28407:tid 28422] [client 20.205.40.135:36804] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aVvKUNercd3ptydUzM1v8wAAAYs"]
[Mon Jan 05 22:27:28.536458 2026] [:error] [pid 6680:tid 6700] [client 20.205.40.135:4779] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aVvKUKE58uNoazzTmx0bZAAAARI"]
[Mon Jan 05 22:27:29.354848 2026] [:error] [pid 5534:tid 5553] [client 20.205.40.135:56620] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aVvKUZNs9XmbR6unB0wEMwAAAAo"]
[Mon Jan 05 22:27:34.904844 2026] [:error] [pid 28407:tid 28424] [client 20.205.40.135:35655] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvKVtercd3ptydUzM1v-gAAAY0"]
[Mon Jan 05 22:27:35.800275 2026] [:error] [pid 5535:tid 5570] [client 20.205.40.135:4312] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvKV2nkedMjhVX0PTWTJgAAAEA"]
[Mon Jan 05 22:27:36.305314 2026] [:error] [pid 5535:tid 5585] [client 20.205.40.135:45487] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvKWGnkedMjhVX0PTWTKQAAAE8"]
[Mon Jan 05 22:27:37.101498 2026] [:error] [pid 5632:tid 5656] [client 20.205.40.135:57643] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "aVvKWYN3ZWvlOh-nbt_q7QAAAMw"]
[Mon Jan 05 22:27:38.455738 2026] [:error] [pid 5536:tid 5603] [client 20.205.40.135:29266] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "aVvKWgRtMZNG6xI8yDwXGQAAAIY"]
[Mon Jan 05 22:27:39.233896 2026] [:error] [pid 5632:tid 5652] [client 20.205.40.135:29304] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "aVvKW4N3ZWvlOh-nbt_q9AAAAMg"]
[Mon Jan 05 22:27:42.257999 2026] [:error] [pid 28407:tid 28419] [client 20.205.40.135:4949] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "aVvKXtercd3ptydUzM1wCgAAAYg"]
[Mon Jan 05 22:27:42.825006 2026] [:error] [pid 5534:tid 5558] [client 20.205.40.135:59694] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "aVvKXpNs9XmbR6unB0wESgAAAA8"]
[Mon Jan 05 22:27:45.276812 2026] [:error] [pid 5536:tid 5607] [client 20.205.40.135:34005] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "aVvKYQRtMZNG6xI8yDwXJQAAAIo"]
[Mon Jan 05 22:27:46.470075 2026] [:error] [pid 5534:tid 5564] [client 20.205.40.135:28876] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "aVvKYpNs9XmbR6unB0wEUAAAABU"]
[Mon Jan 05 22:27:47.587425 2026] [:error] [pid 5534:tid 5546] [client 20.205.40.135:4981] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "aVvKY5Ns9XmbR6unB0wEVAAAAAM"]
[Mon Jan 05 22:27:48.796568 2026] [:error] [pid 6680:tid 6700] [client 20.205.40.135:39253] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "aVvKZKE58uNoazzTmx0bjAAAARI"]
[Mon Jan 05 22:27:49.399040 2026] [:error] [pid 5536:tid 5612] [client 20.205.40.135:59708] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aVvKZQRtMZNG6xI8yDwXLgAAAI8"]
[Mon Jan 05 22:27:49.760362 2026] [:error] [pid 28407:tid 28425] [client 20.205.40.135:4409] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aVvKZdercd3ptydUzM1wEgAAAY4"]
[Mon Jan 05 22:27:50.816880 2026] [:error] [pid 5534:tid 5553] [client 20.205.40.135:59655] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aVvKZpNs9XmbR6unB0wEWgAAAAo"]
[Mon Jan 05 22:27:51.325440 2026] [:error] [pid 5534:tid 5555] [client 20.205.40.135:28100] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aVvKZ5Ns9XmbR6unB0wEXAAAAAw"]
[Mon Jan 05 22:27:52.773851 2026] [:error] [pid 5534:tid 5562] [client 20.205.40.135:42410] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "aVvKaJNs9XmbR6unB0wEXwAAABM"]
[Mon Jan 05 22:27:53.734959 2026] [:error] [pid 5534:tid 5551] [client 20.205.40.135:59705] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "aVvKaZNs9XmbR6unB0wEaAAAAAg"]
[Mon Jan 05 22:27:54.485722 2026] [:error] [pid 54081:tid 54087] [client 20.205.40.135:42385] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "aVvKalL4jLgtF-b9w4emYgAAAUM"]
[Mon Jan 05 22:27:55.095218 2026] [:error] [pid 5535:tid 5589] [client 20.205.40.135:59652] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "aVvKa2nkedMjhVX0PTWTQQAAAFM"]
[Mon Jan 05 22:27:55.857219 2026] [:error] [pid 5536:tid 5613] [client 20.205.40.135:59748] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "aVvKawRtMZNG6xI8yDwXOQAAAJA"]
[Mon Jan 05 22:27:56.608487 2026] [:error] [pid 6680:tid 6688] [client 20.205.40.135:4227] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "aVvKbKE58uNoazzTmx0bkAAAAQY"]
[Mon Jan 05 22:27:57.976983 2026] [:error] [pid 5534:tid 5555] [client 20.205.40.135:28920] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "aVvKbZNs9XmbR6unB0wEcwAAAAw"]
[Mon Jan 05 22:27:58.473687 2026] [:error] [pid 28407:tid 28428] [client 20.205.40.135:4203] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "aVvKbtercd3ptydUzM1wKQAAAZE"]
[Mon Jan 05 22:27:59.204276 2026] [:error] [pid 6680:tid 6690] [client 20.205.40.135:59648] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alog.php"] [unique_id "aVvKb6E58uNoazzTmx0blQAAAQg"]
[Mon Jan 05 22:28:00.898775 2026] [:error] [pid 6680:tid 6700] [client 20.205.40.135:4279] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alog.php"] [unique_id "aVvKcKE58uNoazzTmx0bnAAAARI"]
[Mon Jan 05 22:28:01.926903 2026] [:error] [pid 28407:tid 28435] [client 20.205.40.135:28158] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alog.php"] [unique_id "aVvKcdercd3ptydUzM1wNAAAAZg"]
[Mon Jan 05 22:28:02.852348 2026] [:error] [pid 5535:tid 5585] [client 20.205.40.135:56075] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alog.php"] [unique_id "aVvKcmnkedMjhVX0PTWTTwAAAE8"]
[Mon Jan 05 22:28:03.458460 2026] [:error] [pid 6680:tid 6694] [client 20.205.40.135:4900] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7T6.php"] [unique_id "aVvKc6E58uNoazzTmx0bogAAAQw"]
[Mon Jan 05 22:28:04.026656 2026] [:error] [pid 5534:tid 5560] [client 20.205.40.135:28107] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7T6.php"] [unique_id "aVvKdJNs9XmbR6unB0wEgwAAABE"]
[Mon Jan 05 22:28:04.963351 2026] [:error] [pid 5535:tid 5592] [client 20.205.40.135:42372] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7T6.php"] [unique_id "aVvKdGnkedMjhVX0PTWTUgAAAFY"]
[Mon Jan 05 22:28:05.844760 2026] [:error] [pid 5632:tid 5655] [client 20.205.40.135:30950] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7T6.php"] [unique_id "aVvKdYN3ZWvlOh-nbt_rGQAAAMs"]
[Mon Jan 05 22:28:06.709773 2026] [:error] [pid 5535:tid 5574] [client 20.205.40.135:4876] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aVvKdmnkedMjhVX0PTWTVAAAAEQ"]
[Mon Jan 05 22:28:07.142090 2026] [:error] [pid 5534:tid 5547] [client 20.205.40.135:4216] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aVvKd5Ns9XmbR6unB0wEiQAAAAQ"]
[Mon Jan 05 22:28:07.638840 2026] [:error] [pid 5534:tid 5566] [client 20.205.40.135:60237] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aVvKd5Ns9XmbR6unB0wEjQAAABc"]
[Mon Jan 05 22:28:09.254092 2026] [:error] [pid 28407:tid 28411] [client 20.205.40.135:4955] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aVvKedercd3ptydUzM1wQwAAAYE"]
[Mon Jan 05 22:28:10.230814 2026] [:error] [pid 5535:tid 5591] [client 20.205.40.135:4894] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Rk41.php"] [unique_id "aVvKemnkedMjhVX0PTWTVQAAAFU"]
[Mon Jan 05 22:28:11.133667 2026] [:error] [pid 5536:tid 5600] [client 20.205.40.135:60254] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Rk41.php"] [unique_id "aVvKewRtMZNG6xI8yDwXXQAAAIM"]
[Mon Jan 05 22:28:12.173793 2026] [:error] [pid 5632:tid 5649] [client 20.205.40.135:28109] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Rk41.php"] [unique_id "aVvKfIN3ZWvlOh-nbt_rHgAAAMU"]
[Mon Jan 05 22:28:13.199673 2026] [:error] [pid 5632:tid 5662] [client 20.205.40.135:60280] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Rk41.php"] [unique_id "aVvKfYN3ZWvlOh-nbt_rHwAAANI"]
[Mon Jan 05 22:28:13.946588 2026] [:error] [pid 5536:tid 5613] [client 20.205.40.135:4360] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ztv.php"] [unique_id "aVvKfQRtMZNG6xI8yDwXYwAAAJA"]
[Mon Jan 05 22:28:16.405560 2026] [:error] [pid 5534:tid 5560] [client 20.205.40.135:4211] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ztv.php"] [unique_id "aVvKgJNs9XmbR6unB0wEsAAAABE"]
[Mon Jan 05 22:28:18.986720 2026] [:error] [pid 28407:tid 28412] [client 20.205.40.135:42118] [client 20.205.40.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ztv.php"] [unique_id "aVvKgtercd3ptydUzM1wYQAAAYI"]
[Tue Jan 06 04:05:12.085667 2026] [:error] [pid 44903:tid 44925] [client 60.188.57.0:54929] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVwZeNhHqjs38zbkQPAilwAAABI"]
[Tue Jan 06 06:11:37.416872 2026] [:error] [pid 44905:tid 44991] [client 201.49.225.155:13471] [client 201.49.225.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.49.225.155, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVw3Gbu7ufwWVst9EAvxkQAAAJc"]
[Tue Jan 06 06:17:47.990615 2026] [:error] [pid 44905:tid 44984] [client 201.49.225.155:52344] [client 201.49.225.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.49.225.155, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVw4i7u7ufwWVst9EAvzlAAAAJA"]
[Tue Jan 06 08:27:12.799866 2026] [:error] [pid 35140:tid 35164] [client 43.159.143.139:55660] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVxW4HoQaIDFMbT-XMws8gAAARY"]
[Tue Jan 06 10:44:27.353976 2026] [:error] [pid 35140:tid 35166] [client 124.217.58.23:50274] [client 124.217.58.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.58.23, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVx3C3oQaIDFMbT-XMxMYAAAARg"]
[Tue Jan 06 10:46:37.480455 2026] [:error] [pid 44905:tid 44987] [client 31.217.165.117:6758] [client 31.217.165.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.217.165.117, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aVx3jbu7ufwWVst9EAtDcwAAAJM"]
[Tue Jan 06 10:54:52.528018 2026] [:error] [pid 35140:tid 35164] [client 124.217.58.23:51629] [client 124.217.58.23] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aVx5fHoQaIDFMbT-XMxOeQAAARY"]
[Tue Jan 06 12:36:29.816211 2026] [:error] [pid 35140:tid 35164] [client 43.166.239.145:58380] [client 43.166.239.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVyRTXoQaIDFMbT-XMxp4QAAARY"]
[Tue Jan 06 16:27:18.151624 2026] [:error] [pid 44904:tid 44942] [client 62.210.144.129:33924] [client 62.210.144.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aVzHZjtieuI1BJEZcvf3KQAAAEE"]
[Tue Jan 06 16:31:38.178209 2026] [:error] [pid 35140:tid 35147] [client 43.140.247.223:35412] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVzIanoQaIDFMbT-XMyWmQAAAQU"]
[Tue Jan 06 16:37:49.017791 2026] [:error] [pid 45959:tid 45968] [client 43.157.38.228:42844] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aVzJ3Vajdn8P3hjgMYx2wQAAAUY"]
[Tue Jan 06 23:03:31.490911 2026] [:error] [pid 44904:tid 44955] [client 106.54.62.156:41972] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV0kQztieuI1BJEZcvdVKAAAAE4"]
[Tue Jan 06 23:19:51.511422 2026] [:error] [pid 44905:tid 44990] [client 4.247.167.136:4910] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oF7u7ufwWVst9EAsN5wAAAJY"]
[Tue Jan 06 23:51:17.826376 2026] [:error] [pid 45012:tid 45015] [client 43.133.139.6:44870] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV0vdRaMAxCuju1d0uY4lQAAAME"]
[Wed Jan 07 03:48:11.412391 2026] [:error] [pid 6571:tid 6623] [client 43.155.195.141:56014] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV1m-w_rJpa_Vt6ZE1DVZgAAAEo"]
[Wed Jan 07 11:39:55.359348 2026] [:error] [pid 30632:tid 30651] [client 43.156.202.34:46368] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV3Vi-d3_LCpBJzo02ebMQAAAA8"]
[Wed Jan 07 15:35:54.164313 2026] [:error] [pid 30634:tid 30712] [client 210.23.171.25:9027] [client 210.23.171.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 210.23.171.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aV4M2oCIPBibObtmZtvFgwAAANY"]
[Wed Jan 07 19:11:31.424048 2026] [autoindex:error] [pid 30634:tid 30706] [client 167.71.90.72:54962] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 07 19:15:01.365319 2026] [:error] [pid 30634:tid 30708] [client 49.51.166.228:58026] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV5ANYCIPBibObtmZtv4AAAAANI"]
[Wed Jan 07 19:23:47.268868 2026] [:error] [pid 51128:tid 51154] [client 210.23.171.25:5978] [client 210.23.171.25] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aV5CQ0GjtE8U88mrwueWnAAAAZg"]
[Wed Jan 07 19:25:26.613655 2026] [:error] [pid 30634:tid 30693] [client 210.23.171.25:6648] [client 210.23.171.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 210.23.171.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aV5CpoCIPBibObtmZtv5tAAAAMM"]
[Wed Jan 07 19:27:00.846184 2026] [:error] [pid 30632:tid 30642] [client 210.23.171.25:6794] [client 210.23.171.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 210.23.171.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aV5DBOd3_LCpBJzo02f2WAAAAAY"]
[Wed Jan 07 22:16:43.001194 2026] [:error] [pid 50870:tid 50887] [client 182.253.238.235:54360] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV5qyxlePfspAt1BzouAZAAAAg8"]
[Wed Jan 07 22:16:43.624519 2026] [:error] [pid 51128:tid 51138] [client 182.253.238.235:54666] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV5qy0GjtE8U88mrwuez5AAAAYg"]
[Wed Jan 07 22:16:44.236907 2026] [:error] [pid 50936:tid 50949] [client 182.253.238.235:54908] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aV5qzLDlg80QUdd5qc4amgAAAos"]
[Wed Jan 07 22:51:58.268119 2026] [:error] [pid 50838:tid 50854] [client 170.106.180.139:33370] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV5zDrSweZ27JIN4H8vajgAAAc4"]
[Thu Jan 08 00:55:54.845132 2026] [:error] [pid 50905:tid 50918] [client 180.110.203.108:43842] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV6QGmpNgk5-gt30I7bBJgAAAks"]
[Thu Jan 08 03:00:14.634056 2026] [autoindex:error] [pid 50905:tid 50929] [client 138.197.32.240:51626] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Jan 08 03:19:26.366048 2026] [autoindex:error] [pid 58294:tid 58300] [client 138.197.32.240:59081] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Jan 08 07:12:59.966468 2026] [:error] [pid 2424:tid 2446] [client 43.156.168.214:37446] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV7oe7TDJR8aofkBk9RzZgAAARQ"]
[Thu Jan 08 10:29:23.790054 2026] [:error] [pid 7586:tid 7604] [client 103.77.107.178:51526] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aV8Wg8Jyk37GdXP5TmUEWgAAAc4"]
[Thu Jan 08 10:29:24.327406 2026] [:error] [pid 17404:tid 17419] [client 103.77.107.178:51826] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aV8WhGVd_oH193N6AnVRXAAAAY0"]
[Thu Jan 08 11:23:58.494011 2026] [:error] [pid 17404:tid 17419] [client 95.85.238.19:38428] [client 95.85.238.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.85.238.19, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aV8jTmVd_oH193N6AnVgagAAAY0"]
[Thu Jan 08 11:24:00.192772 2026] [:error] [pid 17404:tid 17415] [client 95.85.238.19:38428] [client 95.85.238.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.85.238.19, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aV8jUGVd_oH193N6AnVgbAAAAYk"]
[Thu Jan 08 13:36:12.761596 2026] [:error] [pid 17404:tid 17429] [client 203.2.64.59:51872] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV9CTGVd_oH193N6AnV4HQAAAZc"]
[Thu Jan 08 16:18:32.046240 2026] [:error] [pid 7586:tid 7592] [client 223.185.42.79:3570] [client 223.185.42.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.42.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aV9oWMJyk37GdXP5TmVA2wAAAcQ"]
[Thu Jan 08 17:16:37.662501 2026] [:error] [pid 17404:tid 17414] [client 223.185.42.79:19784] [client 223.185.42.79] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aV919WVd_oH193N6AnWbjAAAAYg"]
[Thu Jan 08 17:18:05.790396 2026] [:error] [pid 15358:tid 15372] [client 223.185.42.79:4115] [client 223.185.42.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.42.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aV92TSoRk9xWJ3toSBJT4AAAAMI"]
[Thu Jan 08 22:39:35.635327 2026] [:error] [pid 15263:tid 15292] [client 172.236.153.27:61197] [client 172.236.153.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aV_Bp9v61bxum7WG_e8VGwAAABQ"]
[Fri Jan 09 02:45:51.234113 2026] [:error] [pid 15263:tid 15275] [client 49.51.132.100:57184] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV_7X9v61bxum7WG_e9GTAAAAAM"]
[Fri Jan 09 02:49:31.105223 2026] [:error] [pid 15265:tid 15346] [client 1.15.52.154:43170] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aV_8O6E6VBKhew2LTFSXogAAAJQ"]
[Fri Jan 09 07:11:14.903888 2026] [:error] [pid 35916:tid 35942] [client 43.153.15.51:37704] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWA5kvnSLfzabNjOjwzDRQAAANg"]
[Fri Jan 09 08:11:05.615379 2026] [:error] [pid 35916:tid 35925] [client 4.213.159.226:4223] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aWBHmfnSLfzabNjOjwzf9QAAAMc"]
[Fri Jan 09 08:11:06.908737 2026] [:error] [pid 35916:tid 35924] [client 4.213.159.226:4177] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aWBHmvnSLfzabNjOjwzgDAAAAMY"]
[Fri Jan 09 08:11:07.966301 2026] [:error] [pid 35811:tid 35847] [client 4.213.159.226:4206] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aWBHm27lx9V0CvYJJf30ZQAAAEA"]
[Fri Jan 09 08:11:09.083515 2026] [:error] [pid 35812:tid 35890] [client 4.213.159.226:4297] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aWBHnUAss1qSj44c-n0xVgAAAJA"]
[Fri Jan 09 08:59:42.294132 2026] [:error] [pid 35812:tid 35884] [client 85.203.21.23:41199] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-confiq.php"] [unique_id "aWBS_kAss1qSj44c-n1EtwAAAIo"]
[Fri Jan 09 08:59:42.704913 2026] [:error] [pid 35811:tid 35864] [client 85.203.21.18:48329] [client 85.203.21.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/nrhogjyecktixbal0fnt5Cakc.php"] [unique_id "aWBS_m7lx9V0CvYJJf0GxgAAAFE"]
[Fri Jan 09 08:59:43.053705 2026] [:error] [pid 35916:tid 35928] [client 85.203.21.29:22077] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aWBS__nSLfzabNjOjwz5iwAAAMo"]
[Fri Jan 09 08:59:43.402611 2026] [:error] [pid 35810:tid 35830] [client 85.203.21.64:25637] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/znv3hcxz6mwjdz1jwxrxiCakc.php"] [unique_id "aWBS_4rJrhH8tOUNM5A7nwAAAAs"]
[Fri Jan 09 08:59:43.752799 2026] [:error] [pid 35916:tid 35925] [client 85.203.21.64:64185] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aWBS__nSLfzabNjOjwz5jQAAAMc"]
[Fri Jan 09 08:59:44.107960 2026] [:error] [pid 10431:tid 10448] [client 85.203.21.14:43761] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/form.php"] [unique_id "aWBTACkUbiVdwQzsJJQ8YgAAAQ4"]
[Fri Jan 09 08:59:44.454108 2026] [:error] [pid 35916:tid 35935] [client 85.203.21.24:44385] [client 85.203.21.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aWBTAPnSLfzabNjOjwz5jgAAANE"]
[Fri Jan 09 08:59:44.802299 2026] [:error] [pid 35810:tid 35823] [client 85.203.21.29:46437] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aWBTAIrJrhH8tOUNM5A7oQAAAAQ"]
[Fri Jan 09 08:59:45.156921 2026] [:error] [pid 35812:tid 35874] [client 85.203.21.26:63997] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aWBTAUAss1qSj44c-n1EwgAAAIA"]
[Fri Jan 09 08:59:45.514026 2026] [:error] [pid 35812:tid 35884] [client 85.203.21.62:31173] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/uk5pqv0wksbuaourleCakc.php"] [unique_id "aWBTAUAss1qSj44c-n1EwwAAAIo"]
[Fri Jan 09 08:59:50.869601 2026] [:error] [pid 35810:tid 35831] [client 85.203.21.4:35797] [client 85.203.21.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "aWBTBorJrhH8tOUNM5A7twAAAAw"]
[Fri Jan 09 08:59:51.224559 2026] [:error] [pid 35810:tid 35828] [client 85.203.21.3:58431] [client 85.203.21.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/shell.php"] [unique_id "aWBTB4rJrhH8tOUNM5A7uwAAAAk"]
[Fri Jan 09 08:59:51.574838 2026] [:error] [pid 10431:tid 10458] [client 85.203.21.21:34175] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aWBTBykUbiVdwQzsJJQ8dwAAARg"]
[Fri Jan 09 08:59:51.926728 2026] [:error] [pid 10431:tid 10449] [client 85.203.21.22:43015] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aWBTBykUbiVdwQzsJJQ8eQAAAQ8"]
[Fri Jan 09 08:59:52.276318 2026] [:error] [pid 35916:tid 35924] [client 85.203.21.16:51103] [client 85.203.21.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aWBTCPnSLfzabNjOjwz5nAAAAMY"]
[Fri Jan 09 08:59:52.635887 2026] [:error] [pid 10431:tid 10438] [client 85.203.21.51:42531] [client 85.203.21.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aWBTCCkUbiVdwQzsJJQ8fAAAAQQ"]
[Fri Jan 09 08:59:53.021529 2026] [:error] [pid 35811:tid 35859] [client 85.203.21.23:31033] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aWBTCW7lx9V0CvYJJf0G1gAAAEw"]
[Fri Jan 09 08:59:53.399842 2026] [:error] [pid 35812:tid 35876] [client 85.203.21.43:57383] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aWBTCUAss1qSj44c-n1E2wAAAII"]
[Fri Jan 09 08:59:53.764195 2026] [:error] [pid 10431:tid 10452] [client 85.203.21.25:34679] [client 85.203.21.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/"] [unique_id "aWBTCSkUbiVdwQzsJJQ8jwAAARI"]
[Fri Jan 09 08:59:54.118706 2026] [:error] [pid 35916:tid 35942] [client 85.203.21.3:26347] [client 85.203.21.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aWBTCvnSLfzabNjOjwz5sQAAANg"]
[Fri Jan 09 08:59:54.474833 2026] [:error] [pid 35810:tid 35824] [client 85.203.21.14:24709] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aWBTCorJrhH8tOUNM5A75QAAAAU"]
[Fri Jan 09 08:59:54.832942 2026] [:error] [pid 35916:tid 35928] [client 85.203.21.13:57847] [client 85.203.21.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aWBTCvnSLfzabNjOjwz5twAAAMo"]
[Fri Jan 09 08:59:55.179752 2026] [:error] [pid 35916:tid 35919] [client 85.203.21.27:58533] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/cache/"] [unique_id "aWBTC_nSLfzabNjOjwz5uAAAAME"]
[Fri Jan 09 08:59:55.532678 2026] [:error] [pid 10431:tid 10444] [client 85.203.21.23:40131] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aWBTCykUbiVdwQzsJJQ8mAAAAQo"]
[Fri Jan 09 08:59:55.891706 2026] [:error] [pid 35811:tid 35870] [client 85.203.21.63:34601] [client 85.203.21.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/"] [unique_id "aWBTC27lx9V0CvYJJf0G4AAAAFc"]
[Fri Jan 09 08:59:56.246469 2026] [:error] [pid 35916:tid 35931] [client 85.203.21.50:22785] [client 85.203.21.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aWBTDPnSLfzabNjOjwz5uQAAAM0"]
[Fri Jan 09 08:59:56.603382 2026] [:error] [pid 35916:tid 35942] [client 85.203.21.50:42387] [client 85.203.21.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aWBTDPnSLfzabNjOjwz5vAAAANg"]
[Fri Jan 09 08:59:56.951047 2026] [:error] [pid 35916:tid 35941] [client 85.203.21.13:40327] [client 85.203.21.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aWBTDPnSLfzabNjOjwz5vgAAANc"]
[Fri Jan 09 08:59:57.307263 2026] [:error] [pid 35810:tid 35840] [client 85.203.21.25:59875] [client 85.203.21.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aWBTDYrJrhH8tOUNM5A76gAAABU"]
[Fri Jan 09 08:59:57.664186 2026] [:error] [pid 35811:tid 35857] [client 85.203.21.2:26589] [client 85.203.21.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aWBTDW7lx9V0CvYJJf0G5AAAAEo"]
[Fri Jan 09 08:59:58.027129 2026] [:error] [pid 35916:tid 35918] [client 85.203.21.18:39143] [client 85.203.21.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aWBTDvnSLfzabNjOjwz5wwAAAMA"]
[Fri Jan 09 08:59:58.377202 2026] [:error] [pid 35810:tid 35839] [client 85.203.21.29:46635] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "aWBTDorJrhH8tOUNM5A76wAAABQ"]
[Fri Jan 09 08:59:58.724276 2026] [:error] [pid 35811:tid 35869] [client 85.203.21.44:49367] [client 85.203.21.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aWBTDm7lx9V0CvYJJf0G5gAAAFY"]
[Fri Jan 09 08:59:59.072774 2026] [:error] [pid 35916:tid 35925] [client 85.203.21.19:27293] [client 85.203.21.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aWBTD_nSLfzabNjOjwz5xgAAAMc"]
[Fri Jan 09 08:59:59.508754 2026] [:error] [pid 35916:tid 35939] [client 85.203.21.4:38015] [client 85.203.21.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css.php"] [unique_id "aWBTD_nSLfzabNjOjwz5yQAAANU"]
[Fri Jan 09 08:59:59.855747 2026] [:error] [pid 35812:tid 35880] [client 85.203.21.15:36779] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aWBTD0Ass1qSj44c-n1E7QAAAIY"]
[Fri Jan 09 09:00:00.204151 2026] [:error] [pid 10431:tid 10453] [client 85.203.21.30:29185] [client 85.203.21.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/lock360.php"] [unique_id "aWBTECkUbiVdwQzsJJQ8pQAAARM"]
[Fri Jan 09 09:00:00.550122 2026] [:error] [pid 10431:tid 10457] [client 85.203.21.43:32021] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/themes.php"] [unique_id "aWBTECkUbiVdwQzsJJQ8qAAAARc"]
[Fri Jan 09 09:00:00.997383 2026] [:error] [pid 35812:tid 35887] [client 85.203.21.55:32189] [client 85.203.21.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/updates.php"] [unique_id "aWBTEEAss1qSj44c-n1E8gAAAI0"]
[Fri Jan 09 09:00:01.358298 2026] [:error] [pid 35916:tid 35924] [client 85.203.21.14:49159] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aWBTEfnSLfzabNjOjwz5zAAAAMY"]
[Fri Jan 09 09:00:01.718854 2026] [:error] [pid 35812:tid 35884] [client 85.203.21.48:23963] [client 85.203.21.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aWBTEUAss1qSj44c-n1E8wAAAIo"]
[Fri Jan 09 09:00:02.099299 2026] [:error] [pid 10431:tid 10455] [client 85.203.21.12:62867] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/"] [unique_id "aWBTEikUbiVdwQzsJJQ8rgAAARU"]
[Fri Jan 09 09:00:02.453515 2026] [:error] [pid 35916:tid 35938] [client 85.203.21.12:42001] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aWBTEvnSLfzabNjOjwz5zwAAANQ"]
[Fri Jan 09 09:00:02.817001 2026] [:error] [pid 35916:tid 35939] [client 85.203.21.18:23945] [client 85.203.21.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "aWBTEvnSLfzabNjOjwz50QAAANU"]
[Fri Jan 09 09:00:03.339770 2026] [:error] [pid 35812:tid 35890] [client 85.203.21.11:20707] [client 85.203.21.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/class.api.php"] [unique_id "aWBTE0Ass1qSj44c-n1E9wAAAJA"]
[Fri Jan 09 09:00:03.719807 2026] [:error] [pid 35812:tid 35877] [client 85.203.21.69:51143] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aWBTE0Ass1qSj44c-n1E-QAAAIM"]
[Fri Jan 09 09:00:04.250046 2026] [:error] [pid 35812:tid 35897] [client 85.203.21.26:45441] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aWBTFEAss1qSj44c-n1E-wAAAJc"]
[Fri Jan 09 09:00:04.787129 2026] [:error] [pid 35810:tid 35819] [client 85.203.21.25:38095] [client 85.203.21.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/"] [unique_id "aWBTFIrJrhH8tOUNM5A7_QAAAAA"]
[Fri Jan 09 09:00:05.153796 2026] [:error] [pid 35812:tid 35892] [client 85.203.21.18:52299] [client 85.203.21.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aWBTFUAss1qSj44c-n1FAwAAAJI"]
[Fri Jan 09 09:00:05.510818 2026] [:error] [pid 10431:tid 10442] [client 85.203.21.38:37261] [client 85.203.21.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config-sample.php"] [unique_id "aWBTFSkUbiVdwQzsJJQ8tQAAAQg"]
[Fri Jan 09 09:00:05.942633 2026] [:error] [pid 10431:tid 10443] [client 85.203.21.69:31995] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aWBTFSkUbiVdwQzsJJQ8uAAAAQk"]
[Fri Jan 09 09:00:06.350951 2026] [:error] [pid 10431:tid 10451] [client 85.203.21.22:51387] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aWBTFikUbiVdwQzsJJQ8vAAAARE"]
[Fri Jan 09 09:00:06.735165 2026] [:error] [pid 35812:tid 35888] [client 85.203.21.24:28479] [client 85.203.21.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aWBTFkAss1qSj44c-n1FDQAAAI4"]
[Fri Jan 09 09:00:07.087922 2026] [:error] [pid 35812:tid 35892] [client 85.203.21.49:41095] [client 85.203.21.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/"] [unique_id "aWBTF0Ass1qSj44c-n1FEAAAAJI"]
[Fri Jan 09 09:00:07.455136 2026] [:error] [pid 35812:tid 35890] [client 85.203.21.22:54691] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap/function.php"] [unique_id "aWBTF0Ass1qSj44c-n1FFgAAAJA"]
[Fri Jan 09 09:00:07.820895 2026] [:error] [pid 35810:tid 35820] [client 85.203.21.30:64343] [client 85.203.21.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/posts"] [unique_id "aWBTF4rJrhH8tOUNM5A8AQAAAAE"]
[Fri Jan 09 09:00:08.179394 2026] [:error] [pid 10431:tid 10451] [client 85.203.21.37:44171] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aWBTGCkUbiVdwQzsJJQ8xAAAARE"]
[Fri Jan 09 09:00:08.536476 2026] [:error] [pid 35812:tid 35887] [client 85.203.21.63:38841] [client 85.203.21.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aWBTGEAss1qSj44c-n1FGwAAAI0"]
[Fri Jan 09 09:00:08.926200 2026] [:error] [pid 35810:tid 35819] [client 85.203.21.55:32355] [client 85.203.21.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/"] [unique_id "aWBTGIrJrhH8tOUNM5A8BAAAAAA"]
[Fri Jan 09 09:00:09.286967 2026] [:error] [pid 35812:tid 35890] [client 85.203.21.64:25655] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aWBTGUAss1qSj44c-n1FIwAAAJA"]
[Fri Jan 09 09:00:09.645464 2026] [:error] [pid 10431:tid 10454] [client 85.203.21.21:27505] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aWBTGSkUbiVdwQzsJJQ8yQAAARQ"]
[Fri Jan 09 09:00:10.020328 2026] [:error] [pid 35812:tid 35875] [client 85.203.21.10:34023] [client 85.203.21.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aWBTGkAss1qSj44c-n1FJQAAAIE"]
[Fri Jan 09 09:00:10.401639 2026] [:error] [pid 10431:tid 10457] [client 85.203.21.14:41333] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aWBTGikUbiVdwQzsJJQ80QAAARc"]
[Fri Jan 09 09:00:10.757208 2026] [:error] [pid 35812:tid 35876] [client 85.203.21.30:21783] [client 85.203.21.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/shell/"] [unique_id "aWBTGkAss1qSj44c-n1FKQAAAII"]
[Fri Jan 09 09:00:11.132526 2026] [:error] [pid 35811:tid 35852] [client 85.203.21.29:21973] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/"] [unique_id "aWBTG27lx9V0CvYJJf0G9QAAAEU"]
[Fri Jan 09 09:00:11.495062 2026] [:error] [pid 35812:tid 35877] [client 85.203.21.7:20657] [client 85.203.21.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aWBTG0Ass1qSj44c-n1FLQAAAIM"]
[Fri Jan 09 09:00:11.854438 2026] [:error] [pid 35812:tid 35893] [client 85.203.21.9:59369] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aWBTG0Ass1qSj44c-n1FMAAAAJM"]
[Fri Jan 09 09:00:12.209142 2026] [:error] [pid 10431:tid 10444] [client 85.203.21.24:31795] [client 85.203.21.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aWBTHCkUbiVdwQzsJJQ82QAAAQo"]
[Fri Jan 09 09:00:12.566617 2026] [:error] [pid 35916:tid 35925] [client 85.203.21.29:39229] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "aWBTHPnSLfzabNjOjwz54wAAAMc"]
[Fri Jan 09 09:00:12.934812 2026] [:error] [pid 10431:tid 10447] [client 85.203.21.69:63381] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "aWBTHCkUbiVdwQzsJJQ84AAAAQ0"]
[Fri Jan 09 09:00:13.303930 2026] [:error] [pid 35812:tid 35885] [client 85.203.21.63:45763] [client 85.203.21.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/"] [unique_id "aWBTHUAss1qSj44c-n1FMwAAAIs"]
[Fri Jan 09 09:00:13.659043 2026] [:error] [pid 35916:tid 35927] [client 85.203.21.12:61573] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/network_xo.php"] [unique_id "aWBTHfnSLfzabNjOjwz55QAAAMk"]
[Fri Jan 09 09:00:14.012326 2026] [:error] [pid 10431:tid 10447] [client 85.203.21.23:53707] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aWBTHikUbiVdwQzsJJQ86QAAAQ0"]
[Fri Jan 09 09:00:14.367115 2026] [:error] [pid 35810:tid 35829] [client 85.203.21.8:59951] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aWBTHorJrhH8tOUNM5A8DAAAAAo"]
[Fri Jan 09 09:00:14.721602 2026] [:error] [pid 35811:tid 35869] [client 85.203.21.3:46709] [client 85.203.21.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aWBTHm7lx9V0CvYJJf0G-gAAAFY"]
[Fri Jan 09 09:00:15.083377 2026] [:error] [pid 35916:tid 35924] [client 85.203.21.51:47723] [client 85.203.21.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aWBTH_nSLfzabNjOjwz56wAAAMY"]
[Fri Jan 09 09:00:15.442062 2026] [:error] [pid 10431:tid 10446] [client 85.203.21.20:25933] [client 85.203.21.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/chosen.php"] [unique_id "aWBTHykUbiVdwQzsJJQ88gAAAQw"]
[Fri Jan 09 09:00:15.801043 2026] [:error] [pid 35810:tid 35841] [client 85.203.21.12:36575] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aWBTH4rJrhH8tOUNM5A8DgAAABY"]
[Fri Jan 09 09:00:16.157441 2026] [:error] [pid 35916:tid 35926] [client 85.203.21.6:48897] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/function/function.php"] [unique_id "aWBTIPnSLfzabNjOjwz57gAAAMg"]
[Fri Jan 09 09:00:16.513413 2026] [:error] [pid 10431:tid 10439] [client 85.203.21.27:22583] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aWBTICkUbiVdwQzsJJQ89QAAAQU"]
[Fri Jan 09 09:00:16.863165 2026] [:error] [pid 10431:tid 10456] [client 85.203.21.8:45817] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/"] [unique_id "aWBTICkUbiVdwQzsJJQ8-QAAARY"]
[Fri Jan 09 09:00:17.221613 2026] [:error] [pid 10431:tid 10446] [client 85.203.21.12:27813] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/areak1.php"] [unique_id "aWBTISkUbiVdwQzsJJQ8_gAAAQw"]
[Fri Jan 09 09:00:17.570703 2026] [:error] [pid 35916:tid 35929] [client 85.203.21.11:22865] [client 85.203.21.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/"] [unique_id "aWBTIfnSLfzabNjOjwz5_AAAAMs"]
[Fri Jan 09 09:00:17.936733 2026] [:error] [pid 35916:tid 35938] [client 85.203.21.6:51789] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ufbngowues/main.php"] [unique_id "aWBTIfnSLfzabNjOjwz5_gAAANQ"]
[Fri Jan 09 09:00:18.309431 2026] [:error] [pid 10431:tid 10441] [client 85.203.21.46:43153] [client 85.203.21.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shell3.php"] [unique_id "aWBTIikUbiVdwQzsJJQ9AgAAAQc"]
[Fri Jan 09 09:00:18.662998 2026] [:error] [pid 35916:tid 35936] [client 85.203.21.25:59309] [client 85.203.21.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aWBTIvnSLfzabNjOjwz6AgAAANI"]
[Fri Jan 09 09:00:19.012383 2026] [:error] [pid 10431:tid 10442] [client 85.203.21.27:52971] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aWBTIykUbiVdwQzsJJQ9BgAAAQg"]
[Fri Jan 09 09:00:19.364819 2026] [:error] [pid 35812:tid 35895] [client 85.203.21.17:43679] [client 85.203.21.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aWBTI0Ass1qSj44c-n1FPwAAAJU"]
[Fri Jan 09 09:00:19.737419 2026] [:error] [pid 35810:tid 35823] [client 85.203.21.14:50823] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aWBTI4rJrhH8tOUNM5A8EgAAAAQ"]
[Fri Jan 09 09:00:20.108300 2026] [:error] [pid 35811:tid 35860] [client 85.203.21.38:42459] [client 85.203.21.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aWBTJG7lx9V0CvYJJf0G_wAAAE0"]
[Fri Jan 09 09:00:20.466087 2026] [:error] [pid 35812:tid 35875] [client 85.203.21.64:63593] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aWBTJEAss1qSj44c-n1FRgAAAIE"]
[Fri Jan 09 09:00:20.822903 2026] [:error] [pid 35811:tid 35849] [client 85.203.21.4:54133] [client 85.203.21.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aWBTJG7lx9V0CvYJJf0HBQAAAEI"]
[Fri Jan 09 09:00:21.179119 2026] [:error] [pid 35810:tid 35836] [client 85.203.21.11:49097] [client 85.203.21.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aWBTJYrJrhH8tOUNM5A8FAAAABE"]
[Fri Jan 09 09:00:21.532201 2026] [:error] [pid 10431:tid 10441] [client 85.203.21.2:38719] [client 85.203.21.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "aWBTJSkUbiVdwQzsJJQ9DgAAAQc"]
[Fri Jan 09 09:00:21.919497 2026] [:error] [pid 10431:tid 10453] [client 85.203.21.27:35941] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/"] [unique_id "aWBTJSkUbiVdwQzsJJQ9EQAAARM"]
[Fri Jan 09 09:00:22.286958 2026] [:error] [pid 35812:tid 35879] [client 85.203.21.37:49265] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin-header.php"] [unique_id "aWBTJkAss1qSj44c-n1FTAAAAIU"]
[Fri Jan 09 09:00:22.645144 2026] [:error] [pid 35916:tid 35921] [client 85.203.21.7:32739] [client 85.203.21.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/about.php"] [unique_id "aWBTJvnSLfzabNjOjwz6BwAAAMM"]
[Fri Jan 09 09:00:22.997955 2026] [:error] [pid 35810:tid 35825] [client 85.203.21.12:22609] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/"] [unique_id "aWBTJorJrhH8tOUNM5A8GgAAAAY"]
[Fri Jan 09 09:00:23.397279 2026] [:error] [pid 10431:tid 10448] [client 85.203.21.6:59157] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/222.php"] [unique_id "aWBTJykUbiVdwQzsJJQ9LQAAAQ4"]
[Fri Jan 09 09:00:23.747625 2026] [:error] [pid 35812:tid 35883] [client 85.203.21.15:40605] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aWBTJ0Ass1qSj44c-n1FVAAAAIk"]
[Fri Jan 09 09:00:24.110245 2026] [:error] [pid 35812:tid 35877] [client 85.203.21.9:38789] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "aWBTKEAss1qSj44c-n1FVQAAAIM"]
[Fri Jan 09 09:00:24.522119 2026] [:error] [pid 35810:tid 35833] [client 85.203.21.67:43327] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aWBTKIrJrhH8tOUNM5A8IgAAAA4"]
[Fri Jan 09 09:00:24.871380 2026] [:error] [pid 35811:tid 35854] [client 85.203.21.37:27779] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aWBTKG7lx9V0CvYJJf0HCwAAAEc"]
[Fri Jan 09 09:00:25.218403 2026] [:error] [pid 35916:tid 35941] [client 85.203.21.10:44373] [client 85.203.21.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aWBTKfnSLfzabNjOjwz6CgAAANc"]
[Fri Jan 09 09:00:25.590772 2026] [:error] [pid 35916:tid 35937] [client 85.203.21.17:23327] [client 85.203.21.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/themes/"] [unique_id "aWBTKfnSLfzabNjOjwz6DQAAANM"]
[Fri Jan 09 09:00:25.971370 2026] [:error] [pid 35916:tid 35942] [client 85.203.21.49:42785] [client 85.203.21.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aWBTKfnSLfzabNjOjwz6EQAAANg"]
[Fri Jan 09 09:00:26.327796 2026] [:error] [pid 35810:tid 35819] [client 85.203.21.68:20777] [client 85.203.21.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/components/"] [unique_id "aWBTKorJrhH8tOUNM5A8JwAAAAA"]
[Fri Jan 09 09:00:26.681690 2026] [:error] [pid 35811:tid 35850] [client 85.203.21.38:28115] [client 85.203.21.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/"] [unique_id "aWBTKm7lx9V0CvYJJf0HEgAAAEM"]
[Fri Jan 09 09:00:27.032064 2026] [:error] [pid 35810:tid 35834] [client 85.203.21.43:28457] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/packed.php"] [unique_id "aWBTK4rJrhH8tOUNM5A8KQAAAA8"]
[Fri Jan 09 09:00:27.391479 2026] [:error] [pid 35811:tid 35852] [client 85.203.21.53:58117] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aWBTK27lx9V0CvYJJf0HFQAAAEU"]
[Fri Jan 09 09:00:27.750428 2026] [:error] [pid 10431:tid 10453] [client 85.203.21.55:20911] [client 85.203.21.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/404.php"] [unique_id "aWBTKykUbiVdwQzsJJQ9PQAAARM"]
[Fri Jan 09 09:00:28.111999 2026] [:error] [pid 35916:tid 35937] [client 85.203.21.69:57209] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aWBTLPnSLfzabNjOjwz6GgAAANM"]
[Fri Jan 09 09:00:28.478949 2026] [:error] [pid 35810:tid 35824] [client 85.203.21.56:46763] [client 85.203.21.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aWBTLIrJrhH8tOUNM5A8LgAAAAU"]
[Fri Jan 09 09:00:28.842284 2026] [:error] [pid 35811:tid 35858] [client 85.203.21.26:62917] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aWBTLG7lx9V0CvYJJf0HGQAAAEs"]
[Fri Jan 09 09:00:29.217410 2026] [:error] [pid 35811:tid 35862] [client 85.203.21.11:55969] [client 85.203.21.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aWBTLW7lx9V0CvYJJf0HHAAAAE8"]
[Fri Jan 09 09:00:29.615249 2026] [:error] [pid 35811:tid 35853] [client 85.203.21.64:48817] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/"] [unique_id "aWBTLW7lx9V0CvYJJf0HHgAAAEY"]
[Fri Jan 09 09:00:29.966801 2026] [:error] [pid 35811:tid 35856] [client 85.203.21.14:28885] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aWBTLW7lx9V0CvYJJf0HHwAAAEk"]
[Fri Jan 09 09:00:30.495012 2026] [:error] [pid 35812:tid 35893] [client 85.203.21.12:52445] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aWBTLkAss1qSj44c-n1FagAAAJM"]
[Fri Jan 09 09:00:30.844721 2026] [:error] [pid 35812:tid 35881] [client 85.203.21.56:33613] [client 85.203.21.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/"] [unique_id "aWBTLkAss1qSj44c-n1FbAAAAIc"]
[Fri Jan 09 09:00:31.207127 2026] [:error] [pid 10431:tid 10441] [client 85.203.21.15:20763] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aWBTLykUbiVdwQzsJJQ9QgAAAQc"]
[Fri Jan 09 09:00:36.563837 2026] [:error] [pid 35811:tid 35852] [client 85.203.21.55:52125] [client 85.203.21.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aWBTNG7lx9V0CvYJJf0HQAAAAEU"]
[Fri Jan 09 09:00:36.937850 2026] [:error] [pid 35810:tid 35823] [client 85.203.21.55:57067] [client 85.203.21.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/search/"] [unique_id "aWBTNIrJrhH8tOUNM5A8TAAAAAQ"]
[Fri Jan 09 09:00:37.294532 2026] [:error] [pid 35916:tid 35929] [client 85.203.21.36:44629] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aWBTNfnSLfzabNjOjwz6NQAAAMs"]
[Fri Jan 09 09:00:37.645640 2026] [:error] [pid 35812:tid 35890] [client 85.203.21.64:59627] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aWBTNUAss1qSj44c-n1FkQAAAJA"]
[Fri Jan 09 09:00:38.002712 2026] [:error] [pid 35916:tid 35939] [client 85.203.21.64:24893] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/"] [unique_id "aWBTNvnSLfzabNjOjwz6NgAAANU"]
[Fri Jan 09 09:00:38.350532 2026] [:error] [pid 35812:tid 35896] [client 85.203.21.17:59993] [client 85.203.21.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/"] [unique_id "aWBTNkAss1qSj44c-n1FlQAAAJY"]
[Fri Jan 09 09:00:38.700054 2026] [:error] [pid 35812:tid 35888] [client 85.203.21.36:49209] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2024/"] [unique_id "aWBTNkAss1qSj44c-n1FlwAAAI4"]
[Fri Jan 09 09:00:39.050425 2026] [:error] [pid 35811:tid 35853] [client 85.203.21.62:21073] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/"] [unique_id "aWBTN27lx9V0CvYJJf0HRgAAAEY"]
[Fri Jan 09 09:00:39.412377 2026] [:error] [pid 10431:tid 10444] [client 85.203.21.2:24511] [client 85.203.21.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/"] [unique_id "aWBTNykUbiVdwQzsJJQ9bgAAAQo"]
[Fri Jan 09 09:00:39.763472 2026] [:error] [pid 35811:tid 35851] [client 85.203.21.64:34845] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aWBTN27lx9V0CvYJJf0HRwAAAEQ"]
[Fri Jan 09 09:00:40.115912 2026] [:error] [pid 10431:tid 10438] [client 85.203.21.67:33121] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aWBTOCkUbiVdwQzsJJQ9cgAAAQQ"]
[Fri Jan 09 09:00:40.471668 2026] [:error] [pid 35810:tid 35823] [client 85.203.21.18:43367] [client 85.203.21.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aWBTOIrJrhH8tOUNM5A8WAAAAAQ"]
[Fri Jan 09 09:00:40.827610 2026] [:error] [pid 10431:tid 10449] [client 85.203.21.36:26809] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aWBTOCkUbiVdwQzsJJQ9dQAAAQ8"]
[Fri Jan 09 09:00:41.185699 2026] [:error] [pid 10431:tid 10456] [client 85.203.21.68:42169] [client 85.203.21.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/archives/"] [unique_id "aWBTOSkUbiVdwQzsJJQ9dwAAARY"]
[Fri Jan 09 09:00:41.540229 2026] [:error] [pid 35916:tid 35933] [client 85.203.21.19:53893] [client 85.203.21.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aWBTOfnSLfzabNjOjwz6PwAAAM8"]
[Fri Jan 09 09:00:41.900299 2026] [:error] [pid 35916:tid 35925] [client 85.203.21.9:47521] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/"] [unique_id "aWBTOfnSLfzabNjOjwz6QwAAAMc"]
[Fri Jan 09 09:00:42.248332 2026] [:error] [pid 10431:tid 10436] [client 85.203.21.26:36177] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/column/"] [unique_id "aWBTOikUbiVdwQzsJJQ9egAAAQI"]
[Fri Jan 09 09:00:42.609383 2026] [:error] [pid 10431:tid 10439] [client 85.203.21.6:32689] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aWBTOikUbiVdwQzsJJQ9fQAAAQU"]
[Fri Jan 09 09:00:42.968786 2026] [:error] [pid 10431:tid 10451] [client 85.203.21.69:48549] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/"] [unique_id "aWBTOikUbiVdwQzsJJQ9ggAAARE"]
[Fri Jan 09 09:00:43.316167 2026] [:error] [pid 35810:tid 35841] [client 85.203.21.13:37659] [client 85.203.21.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aWBTO4rJrhH8tOUNM5A8XQAAABY"]
[Fri Jan 09 09:00:43.675647 2026] [:error] [pid 35916:tid 35925] [client 85.203.21.12:63061] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aWBTO_nSLfzabNjOjwz6TAAAAMc"]
[Fri Jan 09 09:00:44.027074 2026] [:error] [pid 35811:tid 35865] [client 85.203.21.49:59549] [client 85.203.21.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWBTPG7lx9V0CvYJJf0HUQAAAFI"]
[Fri Jan 09 09:00:49.384833 2026] [:error] [pid 35812:tid 35898] [client 85.203.21.13:45771] [client 85.203.21.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWBTQUAss1qSj44c-n1F3wAAAJg"]
[Fri Jan 09 09:00:49.732809 2026] [:error] [pid 35916:tid 35942] [client 85.203.21.14:46559] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aWBTQfnSLfzabNjOjwz61AAAANg"]
[Fri Jan 09 09:00:50.106857 2026] [:error] [pid 35811:tid 35849] [client 85.203.21.21:30453] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/"] [unique_id "aWBTQm7lx9V0CvYJJf0HrAAAAEI"]
[Fri Jan 09 09:00:50.465508 2026] [:error] [pid 35916:tid 35931] [client 85.203.21.20:57229] [client 85.203.21.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aWBTQvnSLfzabNjOjwz62AAAAM0"]
[Fri Jan 09 09:00:50.811196 2026] [:error] [pid 35811:tid 35867] [client 85.203.21.53:28299] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aWBTQm7lx9V0CvYJJf0HsAAAAFQ"]
[Fri Jan 09 09:00:51.159341 2026] [:error] [pid 35916:tid 35923] [client 85.203.21.2:25151] [client 85.203.21.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content.php"] [unique_id "aWBTQ_nSLfzabNjOjwz63AAAAMU"]
[Fri Jan 09 09:00:51.512987 2026] [:error] [pid 35812:tid 35876] [client 85.203.21.8:60293] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/"] [unique_id "aWBTQ0Ass1qSj44c-n1F5QAAAII"]
[Fri Jan 09 09:00:51.865731 2026] [:error] [pid 35812:tid 35884] [client 85.203.21.11:39493] [client 85.203.21.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aWBTQ0Ass1qSj44c-n1F5wAAAIo"]
[Fri Jan 09 09:00:52.217149 2026] [:error] [pid 10431:tid 10449] [client 85.203.21.2:32857] [client 85.203.21.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "aWBTRCkUbiVdwQzsJJQ9oAAAAQ8"]
[Fri Jan 09 09:00:52.565571 2026] [:error] [pid 10431:tid 10435] [client 85.203.21.49:62017] [client 85.203.21.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aWBTRCkUbiVdwQzsJJQ9owAAAQE"]
[Fri Jan 09 09:00:57.920142 2026] [:error] [pid 35810:tid 35840] [client 85.203.21.67:53683] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/"] [unique_id "aWBTSYrJrhH8tOUNM5A8dgAAABU"]
[Fri Jan 09 09:00:58.279582 2026] [:error] [pid 35916:tid 35919] [client 85.203.21.46:57647] [client 85.203.21.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aWBTSvnSLfzabNjOjwz69QAAAME"]
[Fri Jan 09 09:00:58.634647 2026] [:error] [pid 35916:tid 35941] [client 85.203.21.53:38251] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aWBTSvnSLfzabNjOjwz69gAAANc"]
[Fri Jan 09 09:00:58.989188 2026] [:error] [pid 35810:tid 35831] [client 85.203.21.18:20787] [client 85.203.21.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aWBTSorJrhH8tOUNM5A8egAAAAw"]
[Fri Jan 09 09:00:59.348694 2026] [:error] [pid 10431:tid 10442] [client 85.203.21.26:20791] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aWBTSykUbiVdwQzsJJQ9uAAAAQg"]
[Fri Jan 09 09:00:59.704240 2026] [:error] [pid 10431:tid 10455] [client 85.203.21.63:49427] [client 85.203.21.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/"] [unique_id "aWBTSykUbiVdwQzsJJQ9uwAAARU"]
[Fri Jan 09 09:01:00.060381 2026] [:error] [pid 35916:tid 35938] [client 85.203.21.10:41639] [client 85.203.21.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aWBTTPnSLfzabNjOjwz6-wAAANQ"]
[Fri Jan 09 09:01:00.417277 2026] [:error] [pid 35812:tid 35885] [client 85.203.21.19:38695] [client 85.203.21.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-domain.php"] [unique_id "aWBTTEAss1qSj44c-n1F_AAAAIs"]
[Fri Jan 09 09:01:00.792974 2026] [:error] [pid 35916:tid 35941] [client 85.203.21.49:65467] [client 85.203.21.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aWBTTPnSLfzabNjOjwz7AQAAANc"]
[Fri Jan 09 09:01:01.156273 2026] [:error] [pid 35811:tid 35855] [client 85.203.21.20:49091] [client 85.203.21.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aWBTTW7lx9V0CvYJJf0HyAAAAEg"]
[Fri Jan 09 09:01:01.530995 2026] [:error] [pid 35811:tid 35854] [client 85.203.21.63:33657] [client 85.203.21.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aWBTTW7lx9V0CvYJJf0HywAAAEc"]
[Fri Jan 09 09:01:01.883533 2026] [:error] [pid 35810:tid 35831] [client 85.203.21.63:29833] [client 85.203.21.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aWBTTYrJrhH8tOUNM5A8hgAAAAw"]
[Fri Jan 09 09:01:02.229964 2026] [:error] [pid 35812:tid 35892] [client 85.203.21.55:27397] [client 85.203.21.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/styles/typography/"] [unique_id "aWBTTkAss1qSj44c-n1GAwAAAJI"]
[Fri Jan 09 09:01:02.598856 2026] [:error] [pid 35812:tid 35878] [client 85.203.21.30:58137] [client 85.203.21.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aWBTTkAss1qSj44c-n1GCAAAAIQ"]
[Fri Jan 09 09:01:02.951982 2026] [:error] [pid 35812:tid 35875] [client 85.203.21.9:34005] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aWBTTkAss1qSj44c-n1GDgAAAIE"]
[Fri Jan 09 09:01:03.308700 2026] [:error] [pid 35810:tid 35830] [client 85.203.21.48:55893] [client 85.203.21.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aWBTT4rJrhH8tOUNM5A8iAAAAAs"]
[Fri Jan 09 09:01:03.727948 2026] [:error] [pid 35811:tid 35852] [client 85.203.21.23:52837] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aWBTT27lx9V0CvYJJf0HzwAAAEU"]
[Fri Jan 09 09:01:04.159019 2026] [:error] [pid 35812:tid 35878] [client 85.203.21.20:34137] [client 85.203.21.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/cache/et/"] [unique_id "aWBTUEAss1qSj44c-n1GFwAAAIQ"]
[Fri Jan 09 09:01:04.548139 2026] [:error] [pid 35811:tid 35860] [client 85.203.21.29:45873] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aWBTUG7lx9V0CvYJJf0H1QAAAE0"]
[Fri Jan 09 09:01:04.917437 2026] [:error] [pid 35811:tid 35853] [client 85.203.21.21:62439] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aWBTUG7lx9V0CvYJJf0H2AAAAEY"]
[Fri Jan 09 09:01:05.289066 2026] [:error] [pid 10431:tid 10454] [client 85.203.21.11:62631] [client 85.203.21.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aWBTUSkUbiVdwQzsJJQ9zwAAARQ"]
[Fri Jan 09 09:01:05.639485 2026] [:error] [pid 10431:tid 10458] [client 85.203.21.25:58549] [client 85.203.21.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aWBTUSkUbiVdwQzsJJQ90QAAARg"]
[Fri Jan 09 09:01:06.054681 2026] [:error] [pid 10431:tid 10434] [client 85.203.21.26:22445] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aWBTUikUbiVdwQzsJJQ91QAAAQA"]
[Fri Jan 09 09:01:06.420413 2026] [:error] [pid 35812:tid 35898] [client 85.203.21.67:64309] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/z.php"] [unique_id "aWBTUkAss1qSj44c-n1GIAAAAJg"]
[Fri Jan 09 09:01:06.802911 2026] [:error] [pid 35810:tid 35831] [client 85.203.21.64:50123] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aWBTUorJrhH8tOUNM5A8mQAAAAw"]
[Fri Jan 09 09:01:07.153513 2026] [:error] [pid 35811:tid 35864] [client 85.203.21.67:24655] [client 85.203.21.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aWBTU27lx9V0CvYJJf0H5AAAAFE"]
[Fri Jan 09 09:01:07.634407 2026] [:error] [pid 10431:tid 10454] [client 85.203.21.4:41651] [client 85.203.21.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aWBTUykUbiVdwQzsJJQ92QAAARQ"]
[Fri Jan 09 09:01:07.993567 2026] [:error] [pid 10431:tid 10448] [client 85.203.21.48:62817] [client 85.203.21.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "aWBTUykUbiVdwQzsJJQ93AAAAQ4"]
[Fri Jan 09 09:01:08.345254 2026] [:error] [pid 35916:tid 35925] [client 85.203.21.18:23571] [client 85.203.21.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/"] [unique_id "aWBTVPnSLfzabNjOjwz7FwAAAMc"]
[Fri Jan 09 09:01:08.695492 2026] [:error] [pid 35810:tid 35834] [client 85.203.21.44:55687] [client 85.203.21.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aWBTVIrJrhH8tOUNM5A8ngAAAA8"]
[Fri Jan 09 09:01:09.042825 2026] [:error] [pid 35916:tid 35919] [client 85.203.21.34:55379] [client 85.203.21.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aWBTVfnSLfzabNjOjwz7HAAAAME"]
[Fri Jan 09 09:01:09.395415 2026] [:error] [pid 35811:tid 35852] [client 85.203.21.55:31345] [client 85.203.21.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aWBTVW7lx9V0CvYJJf0H6AAAAEU"]
[Fri Jan 09 09:01:09.774032 2026] [:error] [pid 35812:tid 35887] [client 85.203.21.56:60633] [client 85.203.21.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/m.php"] [unique_id "aWBTVUAss1qSj44c-n1GLwAAAI0"]
[Fri Jan 09 09:01:10.133564 2026] [:error] [pid 35811:tid 35861] [client 85.203.21.9:23771] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/fm.php"] [unique_id "aWBTVm7lx9V0CvYJJf0H6gAAAE4"]
[Fri Jan 09 09:01:15.497127 2026] [:error] [pid 35810:tid 35825] [client 85.203.21.43:38099] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aWBTW4rJrhH8tOUNM5A8rwAAAAY"]
[Fri Jan 09 09:01:15.857044 2026] [:error] [pid 35810:tid 35834] [client 85.203.21.43:41083] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aWBTW4rJrhH8tOUNM5A8sQAAAA8"]
[Fri Jan 09 09:01:16.215401 2026] [:error] [pid 35810:tid 35839] [client 85.203.21.47:55637] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/chosen.php"] [unique_id "aWBTXIrJrhH8tOUNM5A8tAAAABQ"]
[Fri Jan 09 09:01:16.622899 2026] [:error] [pid 10431:tid 10438] [client 85.203.21.16:36665] [client 85.203.21.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aWBTXCkUbiVdwQzsJJQ-CAAAAQQ"]
[Fri Jan 09 09:01:16.970128 2026] [:error] [pid 35916:tid 35933] [client 85.203.21.24:65457] [client 85.203.21.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/chosen.php"] [unique_id "aWBTXPnSLfzabNjOjwz7KwAAAM8"]
[Fri Jan 09 09:01:17.332592 2026] [:error] [pid 10431:tid 10444] [client 85.203.21.6:58785] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/wp-conflg.php"] [unique_id "aWBTXSkUbiVdwQzsJJQ-DgAAAQo"]
[Fri Jan 09 09:01:17.690617 2026] [:error] [pid 35811:tid 35861] [client 85.203.21.10:30513] [client 85.203.21.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aWBTXW7lx9V0CvYJJf0IAAAAAE4"]
[Fri Jan 09 09:01:18.038731 2026] [:error] [pid 35916:tid 35925] [client 85.203.21.26:29255] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aWBTXvnSLfzabNjOjwz7LwAAAMc"]
[Fri Jan 09 09:01:18.399612 2026] [:error] [pid 10431:tid 10440] [client 85.203.21.8:35727] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aWBTXikUbiVdwQzsJJQ-GAAAAQY"]
[Fri Jan 09 09:01:18.749691 2026] [:error] [pid 10431:tid 10444] [client 85.203.21.27:28937] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aWBTXikUbiVdwQzsJJQ-GQAAAQo"]
[Fri Jan 09 09:01:19.101475 2026] [:error] [pid 35811:tid 35851] [client 85.203.21.50:47641] [client 85.203.21.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "aWBTX27lx9V0CvYJJf0ICQAAAEQ"]
[Fri Jan 09 09:01:19.456055 2026] [:error] [pid 10431:tid 10448] [client 85.203.21.21:24033] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/"] [unique_id "aWBTXykUbiVdwQzsJJQ-GgAAAQ4"]
[Fri Jan 09 09:01:19.822042 2026] [:error] [pid 10431:tid 10449] [client 85.203.21.64:35387] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/database.php"] [unique_id "aWBTXykUbiVdwQzsJJQ-HAAAAQ8"]
[Fri Jan 09 09:01:20.178934 2026] [:error] [pid 35812:tid 35888] [client 85.203.21.7:63491] [client 85.203.21.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/vudel/list.php"] [unique_id "aWBTYEAss1qSj44c-n1GQQAAAI4"]
[Fri Jan 09 09:01:20.531279 2026] [:error] [pid 35811:tid 35862] [client 85.203.21.38:45737] [client 85.203.21.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "aWBTYG7lx9V0CvYJJf0IDQAAAE8"]
[Fri Jan 09 09:01:20.901422 2026] [:error] [pid 10431:tid 10456] [client 85.203.21.6:47395] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/hello-elementor/assets/css/lightbox.php"] [unique_id "aWBTYCkUbiVdwQzsJJQ-HQAAARY"]
[Fri Jan 09 09:01:21.259009 2026] [:error] [pid 10431:tid 10440] [client 85.203.21.9:24391] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-custom-fields/includes/walkers/about.php"] [unique_id "aWBTYSkUbiVdwQzsJJQ-HwAAAQY"]
[Fri Jan 09 09:01:21.627125 2026] [:error] [pid 35812:tid 35885] [client 85.203.21.21:49983] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/includes/controls/about.php"] [unique_id "aWBTYUAss1qSj44c-n1GRAAAAIs"]
[Fri Jan 09 09:01:22.011565 2026] [:error] [pid 35811:tid 35858] [client 85.203.21.14:55545] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aWBTYm7lx9V0CvYJJf0IDwAAAEs"]
[Fri Jan 09 09:01:22.361564 2026] [:error] [pid 10431:tid 10453] [client 85.203.21.38:31971] [client 85.203.21.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/well-known/acme-challenge/c/e/about.php"] [unique_id "aWBTYikUbiVdwQzsJJQ-IwAAARM"]
[Fri Jan 09 09:01:22.721998 2026] [:error] [pid 10431:tid 10438] [client 85.203.21.12:37771] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aWBTYikUbiVdwQzsJJQ-JQAAAQQ"]
[Fri Jan 09 09:01:23.077335 2026] [:error] [pid 35811:tid 35855] [client 85.203.21.27:51295] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aWBTY27lx9V0CvYJJf0IEgAAAEg"]
[Fri Jan 09 09:01:23.428923 2026] [:error] [pid 10431:tid 10446] [client 85.203.21.9:37171] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aWBTYykUbiVdwQzsJJQ-KgAAAQw"]
[Fri Jan 09 09:01:23.815519 2026] [:error] [pid 35812:tid 35886] [client 85.203.21.43:60551] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Content/Type/222.php"] [unique_id "aWBTY0Ass1qSj44c-n1GSQAAAIw"]
[Fri Jan 09 09:01:24.174930 2026] [:error] [pid 35916:tid 35927] [client 85.203.21.20:53333] [client 85.203.21.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/man.php"] [unique_id "aWBTZPnSLfzabNjOjwz7RQAAAMk"]
[Fri Jan 09 09:01:24.530062 2026] [:error] [pid 35810:tid 35822] [client 85.203.21.62:22739] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/zoom1.php"] [unique_id "aWBTZIrJrhH8tOUNM5A8wAAAAAM"]
[Fri Jan 09 09:01:24.882760 2026] [:error] [pid 35916:tid 35933] [client 85.203.21.12:43973] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/astra/inc/compatibility/lifterlms/customizer/sections/"] [unique_id "aWBTZPnSLfzabNjOjwz7SQAAAM8"]
[Fri Jan 09 09:01:25.233369 2026] [:error] [pid 35812:tid 35878] [client 85.203.21.29:49781] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/astra/inc/customizer/custom-controls/assets/js/unminified/"] [unique_id "aWBTZUAss1qSj44c-n1GUQAAAIQ"]
[Fri Jan 09 09:01:25.583243 2026] [:error] [pid 35812:tid 35891] [client 85.203.21.43:21083] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/astra/inc/customizer/custom-controls/assets/css/minified/"] [unique_id "aWBTZUAss1qSj44c-n1GUwAAAJE"]
[Fri Jan 09 09:01:25.936787 2026] [:error] [pid 35810:tid 35825] [client 85.203.21.24:45953] [client 85.203.21.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/astra/assets/js/"] [unique_id "aWBTZYrJrhH8tOUNM5A8wwAAAAY"]
[Fri Jan 09 09:01:26.295102 2026] [:error] [pid 35916:tid 35918] [client 85.203.21.10:22357] [client 85.203.21.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/astra-addon/"] [unique_id "aWBTZvnSLfzabNjOjwz7UAAAAMA"]
[Fri Jan 09 09:01:26.644126 2026] [:error] [pid 35916:tid 35937] [client 85.203.21.38:24563] [client 85.203.21.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-mails.php"] [unique_id "aWBTZvnSLfzabNjOjwz7UQAAANM"]
[Fri Jan 09 09:01:27.037433 2026] [:error] [pid 35811:tid 35871] [client 85.203.21.20:43263] [client 85.203.21.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/new.php"] [unique_id "aWBTZ27lx9V0CvYJJf0IGwAAAFg"]
[Fri Jan 09 09:01:27.396095 2026] [:error] [pid 35811:tid 35861] [client 85.203.21.47:23185] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/"] [unique_id "aWBTZ27lx9V0CvYJJf0IHAAAAE4"]
[Fri Jan 09 09:01:27.748610 2026] [:error] [pid 35810:tid 35839] [client 85.203.21.51:52875] [client 85.203.21.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/js/crd/admin.php"] [unique_id "aWBTZ4rJrhH8tOUNM5A8yQAAABQ"]
[Fri Jan 09 09:01:28.118409 2026] [:error] [pid 35916:tid 35920] [client 85.203.21.29:36047] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/uploads/isc/"] [unique_id "aWBTaPnSLfzabNjOjwz7VQAAAMI"]
[Fri Jan 09 09:01:28.475792 2026] [:error] [pid 10431:tid 10442] [client 85.203.21.43:47979] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/img/docs/includes/data/tmp/klo/aawl/"] [unique_id "aWBTaCkUbiVdwQzsJJQ-LwAAAQg"]
[Fri Jan 09 09:01:28.825894 2026] [:error] [pid 35812:tid 35890] [client 85.203.21.27:26847] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-pridmag/load.php"] [unique_id "aWBTaEAss1qSj44c-n1GWQAAAJA"]
[Fri Jan 09 09:01:29.199745 2026] [:error] [pid 35812:tid 35880] [client 85.203.21.2:36799] [client 85.203.21.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/"] [unique_id "aWBTaUAss1qSj44c-n1GWwAAAIY"]
[Fri Jan 09 09:01:29.556343 2026] [:error] [pid 35916:tid 35929] [client 85.203.21.10:63463] [client 85.203.21.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aWBTafnSLfzabNjOjwz7WQAAAMs"]
[Fri Jan 09 09:01:29.912038 2026] [:error] [pid 10431:tid 10434] [client 85.203.21.42:33907] [client 85.203.21.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aWBTaSkUbiVdwQzsJJQ-MwAAAQA"]
[Fri Jan 09 09:01:30.268736 2026] [:error] [pid 35811:tid 35863] [client 85.203.21.48:24737] [client 85.203.21.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/list/"] [unique_id "aWBTam7lx9V0CvYJJf0IIgAAAFA"]
[Fri Jan 09 09:01:30.620954 2026] [:error] [pid 35916:tid 35942] [client 85.203.21.53:47467] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "aWBTavnSLfzabNjOjwz7XgAAANg"]
[Fri Jan 09 09:01:30.996728 2026] [:error] [pid 10431:tid 10436] [client 85.203.21.34:32175] [client 85.203.21.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/go.php"] [unique_id "aWBTaikUbiVdwQzsJJQ-NQAAAQI"]
[Fri Jan 09 09:01:31.351816 2026] [:error] [pid 35810:tid 35841] [client 85.203.21.62:38259] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/imagess.php"] [unique_id "aWBTa4rJrhH8tOUNM5A8zAAAABY"]
[Fri Jan 09 09:01:31.699588 2026] [:error] [pid 35812:tid 35894] [client 85.203.21.51:28515] [client 85.203.21.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/imagess.php"] [unique_id "aWBTa0Ass1qSj44c-n1GXwAAAJQ"]
[Fri Jan 09 09:01:32.051315 2026] [:error] [pid 35916:tid 35941] [client 85.203.21.21:38783] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/let.php"] [unique_id "aWBTbPnSLfzabNjOjwz7YQAAANc"]
[Fri Jan 09 09:01:32.410752 2026] [:error] [pid 10431:tid 10452] [client 85.203.21.47:41075] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/go.php"] [unique_id "aWBTbCkUbiVdwQzsJJQ-OgAAARI"]
[Fri Jan 09 09:01:32.757372 2026] [:error] [pid 35810:tid 35839] [client 85.203.21.68:32295] [client 85.203.21.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/huan.php"] [unique_id "aWBTbIrJrhH8tOUNM5A81AAAABQ"]
[Fri Jan 09 09:01:33.110740 2026] [:error] [pid 35810:tid 35836] [client 85.203.21.17:33569] [client 85.203.21.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aWBTbYrJrhH8tOUNM5A81QAAABE"]
[Fri Jan 09 09:01:33.461341 2026] [:error] [pid 35812:tid 35897] [client 85.203.21.25:33427] [client 85.203.21.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aWBTbUAss1qSj44c-n1GYwAAAJc"]
[Fri Jan 09 09:01:38.814625 2026] [:error] [pid 35810:tid 35830] [client 85.203.21.4:47117] [client 85.203.21.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aWBTcorJrhH8tOUNM5A82AAAAAs"]
[Fri Jan 09 09:01:39.170080 2026] [:error] [pid 35916:tid 35932] [client 85.203.21.59:37321] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/loarrfh/"] [unique_id "aWBTc_nSLfzabNjOjwz7hAAAAM4"]
[Fri Jan 09 09:01:39.522852 2026] [:error] [pid 35916:tid 35918] [client 85.203.21.12:23531] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/foogallery/foogallery.php"] [unique_id "aWBTc_nSLfzabNjOjwz7hwAAAMA"]
[Fri Jan 09 09:01:39.881430 2026] [:error] [pid 35811:tid 35850] [client 85.203.21.9:48397] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/404-solution/404-solution.php"] [unique_id "aWBTc27lx9V0CvYJJf0IPgAAAEM"]
[Fri Jan 09 09:01:40.239455 2026] [:error] [pid 35812:tid 35893] [client 85.203.21.27:55999] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/duplicator/src/moon.php"] [unique_id "aWBTdEAss1qSj44c-n1GZgAAAJM"]
[Fri Jan 09 09:01:40.594659 2026] [:error] [pid 35812:tid 35883] [client 85.203.21.63:56133] [client 85.203.21.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin-menu-search/admin-menu-search.php"] [unique_id "aWBTdEAss1qSj44c-n1GZwAAAIk"]
[Fri Jan 09 09:01:40.946350 2026] [:error] [pid 35916:tid 35926] [client 85.203.21.15:20033] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin-site-enhancements/admin-site-enhancements.php"] [unique_id "aWBTdPnSLfzabNjOjwz7kAAAAMg"]
[Fri Jan 09 09:01:41.291748 2026] [:error] [pid 35916:tid 35932] [client 85.203.21.34:40455] [client 85.203.21.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/members/members.php"] [unique_id "aWBTdfnSLfzabNjOjwz7kgAAAM4"]
[Fri Jan 09 09:01:41.637484 2026] [:error] [pid 10431:tid 10434] [client 85.203.21.9:36757] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/performance-lab/load.php"] [unique_id "aWBTdSkUbiVdwQzsJJQ-SQAAAQA"]
[Fri Jan 09 09:01:42.000579 2026] [:error] [pid 35810:tid 35825] [client 85.203.21.50:60875] [client 85.203.21.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/performance-lab/includes/admin/tags.php"] [unique_id "aWBTdYrJrhH8tOUNM5A83QAAAAY"]
[Fri Jan 09 09:01:42.354078 2026] [:error] [pid 35916:tid 35931] [client 85.203.21.51:53329] [client 85.203.21.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/tinymce-advanced/tinymce-advanced.php"] [unique_id "aWBTdvnSLfzabNjOjwz7mgAAAM0"]
[Fri Jan 09 09:01:42.714567 2026] [:error] [pid 35810:tid 35830] [client 85.203.21.51:32111] [client 85.203.21.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/fitnessbase/inc/customizer/al.php"] [unique_id "aWBTdorJrhH8tOUNM5A84wAAAAs"]
[Fri Jan 09 09:01:43.064651 2026] [:error] [pid 35810:tid 35834] [client 85.203.21.15:60599] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aWBTd4rJrhH8tOUNM5A86AAAAA8"]
[Fri Jan 09 09:01:43.416907 2026] [:error] [pid 35812:tid 35882] [client 85.203.21.11:52303] [client 85.203.21.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/hello-elementor/new.php"] [unique_id "aWBTd0Ass1qSj44c-n1GbgAAAIg"]
[Fri Jan 09 09:01:43.763966 2026] [:error] [pid 35810:tid 35823] [client 85.203.21.4:26021] [client 85.203.21.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aWBTd4rJrhH8tOUNM5A86gAAAAQ"]
[Fri Jan 09 09:01:44.112799 2026] [:error] [pid 10431:tid 10458] [client 85.203.21.29:58095] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aWBTeCkUbiVdwQzsJJQ-SwAAARg"]
[Fri Jan 09 09:01:44.470143 2026] [:error] [pid 35812:tid 35895] [client 85.203.21.2:62305] [client 85.203.21.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/new.php"] [unique_id "aWBTeEAss1qSj44c-n1GcgAAAJU"]
[Fri Jan 09 09:01:44.823649 2026] [:error] [pid 10431:tid 10452] [client 85.203.21.43:30207] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Iitespeed-cache/zczv.php"] [unique_id "aWBTeCkUbiVdwQzsJJQ-TgAAARI"]
[Fri Jan 09 09:01:45.172518 2026] [:error] [pid 10431:tid 10434] [client 85.203.21.8:46255] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/woocommerce_uploads/about.php"] [unique_id "aWBTeSkUbiVdwQzsJJQ-UQAAAQA"]
[Fri Jan 09 09:01:45.531468 2026] [:error] [pid 35916:tid 35939] [client 85.203.21.59:22793] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php"] [unique_id "aWBTefnSLfzabNjOjwz7ogAAANU"]
[Fri Jan 09 09:01:45.904472 2026] [:error] [pid 35811:tid 35857] [client 85.203.21.3:38441] [client 85.203.21.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/adca.php"] [unique_id "aWBTeW7lx9V0CvYJJf0ISwAAAEo"]
[Fri Jan 09 09:01:46.253415 2026] [:error] [pid 35810:tid 35833] [client 85.203.21.69:30399] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/maintenance/bolt.php"] [unique_id "aWBTeorJrhH8tOUNM5A88gAAAA4"]
[Fri Jan 09 09:01:46.610326 2026] [:error] [pid 35811:tid 35871] [client 85.203.21.14:41731] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/html-api/about.php"] [unique_id "aWBTem7lx9V0CvYJJf0ITQAAAFg"]
[Fri Jan 09 09:01:46.958664 2026] [:error] [pid 35811:tid 35856] [client 85.203.21.55:35837] [client 85.203.21.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/interactivity-api/"] [unique_id "aWBTem7lx9V0CvYJJf0ITgAAAEk"]
[Fri Jan 09 09:01:47.306698 2026] [:error] [pid 35811:tid 35867] [client 85.203.21.22:45877] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/siteorigin-panels/"] [unique_id "aWBTe27lx9V0CvYJJf0IUAAAAFQ"]
[Fri Jan 09 09:01:47.654313 2026] [:error] [pid 35916:tid 35923] [client 85.203.21.42:36707] [client 85.203.21.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/nav-menu-trigger.php"] [unique_id "aWBTe_nSLfzabNjOjwz7qAAAAMU"]
[Fri Jan 09 09:01:48.036440 2026] [:error] [pid 35811:tid 35852] [client 85.203.21.56:52347] [client 85.203.21.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aWBTfG7lx9V0CvYJJf0IVgAAAEU"]
[Fri Jan 09 09:01:48.444105 2026] [:error] [pid 35811:tid 35862] [client 85.203.21.22:48753] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/hello-elementor/assets/"] [unique_id "aWBTfG7lx9V0CvYJJf0IWwAAAE8"]
[Fri Jan 09 09:01:48.807655 2026] [:error] [pid 35916:tid 35919] [client 85.203.21.27:57213] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-author/"] [unique_id "aWBTfPnSLfzabNjOjwz7rAAAAME"]
[Fri Jan 09 09:01:49.161688 2026] [:error] [pid 35916:tid 35936] [client 85.203.21.43:40451] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aWBTffnSLfzabNjOjwz7rgAAANI"]
[Fri Jan 09 09:01:49.526856 2026] [:error] [pid 35916:tid 35938] [client 85.203.21.14:56475] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aWBTffnSLfzabNjOjwz7swAAANQ"]
[Fri Jan 09 09:01:49.880469 2026] [:error] [pid 35812:tid 35876] [client 85.203.21.50:39513] [client 85.203.21.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/lock.php"] [unique_id "aWBTfUAss1qSj44c-n1GdwAAAII"]
[Fri Jan 09 09:01:50.235577 2026] [:error] [pid 35811:tid 35848] [client 85.203.21.38:41445] [client 85.203.21.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/components/style-rtl.min_42.php"] [unique_id "aWBTfm7lx9V0CvYJJf0IYgAAAEE"]
[Fri Jan 09 09:01:50.615365 2026] [:error] [pid 10431:tid 10444] [client 85.203.21.36:38445] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/"] [unique_id "aWBTfikUbiVdwQzsJJQ-XQAAAQo"]
[Fri Jan 09 09:01:51.009860 2026] [:error] [pid 10431:tid 10434] [client 85.203.21.59:43629] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Credit_74.php"] [unique_id "aWBTfykUbiVdwQzsJJQ-YAAAAQA"]
[Fri Jan 09 09:01:51.367789 2026] [:error] [pid 35916:tid 35926] [client 85.203.21.37:31557] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/akismet/_40.php"] [unique_id "aWBTf_nSLfzabNjOjwz7uQAAAMg"]
[Fri Jan 09 09:01:51.721661 2026] [:error] [pid 35811:tid 35854] [client 85.203.21.21:21053] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/coffee/colors_26.php"] [unique_id "aWBTf27lx9V0CvYJJf0IZwAAAEc"]
[Fri Jan 09 09:01:52.080111 2026] [:error] [pid 35810:tid 35820] [client 85.203.21.22:61597] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "aWBTgIrJrhH8tOUNM5A9AQAAAAE"]
[Fri Jan 09 09:01:52.436042 2026] [:error] [pid 35810:tid 35819] [client 85.203.21.26:54453] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aWBTgIrJrhH8tOUNM5A9AgAAAAA"]
[Fri Jan 09 09:01:52.786123 2026] [:error] [pid 35916:tid 35938] [client 85.203.21.18:36903] [client 85.203.21.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aWBTgPnSLfzabNjOjwz7vgAAANQ"]
[Fri Jan 09 09:01:53.135667 2026] [:error] [pid 35811:tid 35849] [client 85.203.21.8:28855] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/video/"] [unique_id "aWBTgW7lx9V0CvYJJf0IawAAAEI"]
[Fri Jan 09 09:01:53.485925 2026] [:error] [pid 35812:tid 35875] [client 85.203.21.9:65313] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/"] [unique_id "aWBTgUAss1qSj44c-n1GgQAAAIE"]
[Fri Jan 09 09:01:53.835534 2026] [:error] [pid 35811:tid 35858] [client 85.203.21.6:51349] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "aWBTgW7lx9V0CvYJJf0IcAAAAEs"]
[Fri Jan 09 09:01:54.195503 2026] [:error] [pid 10431:tid 10452] [client 85.203.21.26:45793] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/classwithtostring.php"] [unique_id "aWBTgikUbiVdwQzsJJQ-ZgAAARI"]
[Fri Jan 09 09:01:54.543983 2026] [:error] [pid 10431:tid 10434] [client 85.203.21.47:45667] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/theme-editor-class.php"] [unique_id "aWBTgikUbiVdwQzsJJQ-aQAAAQA"]
[Fri Jan 09 09:01:54.904965 2026] [:error] [pid 10431:tid 10451] [client 85.203.21.23:56333] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/LayerSlider/assets/static/codemirror/addon/hint/about.php"] [unique_id "aWBTgikUbiVdwQzsJJQ-awAAARE"]
[Fri Jan 09 09:01:55.254958 2026] [:error] [pid 10431:tid 10448] [client 85.203.21.12:41819] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/LayerSlider/assets/static/layerslider/skins/carousel/about.php"] [unique_id "aWBTgykUbiVdwQzsJJQ-cAAAAQ4"]
[Fri Jan 09 09:01:55.609706 2026] [:error] [pid 35916:tid 35939] [client 85.203.21.23:61581] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fusion-core/css/about.php"] [unique_id "aWBTg_nSLfzabNjOjwz7wwAAANU"]
[Fri Jan 09 09:01:55.962203 2026] [:error] [pid 35916:tid 35925] [client 85.203.21.59:33259] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/themely/img/about.php"] [unique_id "aWBTg_nSLfzabNjOjwz7xwAAAMc"]
[Fri Jan 09 09:01:56.326813 2026] [:error] [pid 35811:tid 35853] [client 85.203.21.36:60229] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/page-list-item/lock.php"] [unique_id "aWBThG7lx9V0CvYJJf0IdgAAAEY"]
[Fri Jan 09 09:01:56.685912 2026] [:error] [pid 35810:tid 35841] [client 85.203.21.19:28241] [client 85.203.21.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/amp/vendor/ampproject/amp-toolbox/src/Validator/Spec/DescendantTagList/HeaRk.php"] [unique_id "aWBThIrJrhH8tOUNM5A9BAAAABY"]
[Fri Jan 09 09:01:57.044569 2026] [:error] [pid 35811:tid 35866] [client 85.203.21.27:26029] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/sql.php"] [unique_id "aWBThW7lx9V0CvYJJf0IdwAAAFM"]
[Fri Jan 09 09:01:57.408222 2026] [:error] [pid 35812:tid 35891] [client 85.203.21.48:29067] [client 85.203.21.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/chosen.php"] [unique_id "aWBThUAss1qSj44c-n1GjAAAAJE"]
[Fri Jan 09 09:01:57.761189 2026] [:error] [pid 35811:tid 35862] [client 85.203.21.27:58039] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/prayer_intentions.php"] [unique_id "aWBThW7lx9V0CvYJJf0IewAAAE8"]
[Fri Jan 09 09:01:58.119344 2026] [:error] [pid 35811:tid 35853] [client 85.203.21.15:31621] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/images/data.php"] [unique_id "aWBThm7lx9V0CvYJJf0IfwAAAEY"]
[Fri Jan 09 09:01:58.482787 2026] [:error] [pid 35811:tid 35869] [client 85.203.21.22:22209] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aWBThm7lx9V0CvYJJf0IggAAAFY"]
[Fri Jan 09 09:01:58.836995 2026] [:error] [pid 35811:tid 35847] [client 85.203.21.2:33335] [client 85.203.21.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aWBThm7lx9V0CvYJJf0IhwAAAEA"]
[Fri Jan 09 09:01:59.190729 2026] [:error] [pid 35811:tid 35848] [client 85.203.21.13:31211] [client 85.203.21.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/v3/dist/build/build/cache.php"] [unique_id "aWBTh27lx9V0CvYJJf0IiwAAAEE"]
[Fri Jan 09 09:01:59.547759 2026] [:error] [pid 10431:tid 10456] [client 85.203.21.53:38941] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/post-views-counter/"] [unique_id "aWBThykUbiVdwQzsJJQ-ewAAARY"]
[Fri Jan 09 09:01:59.899225 2026] [:error] [pid 10431:tid 10448] [client 85.203.21.9:50737] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/media/dwv/admin.php"] [unique_id "aWBThykUbiVdwQzsJJQ-fQAAAQ4"]
[Fri Jan 09 09:02:00.252353 2026] [:error] [pid 10431:tid 10446] [client 85.203.21.69:30623] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/zoom1.php"] [unique_id "aWBTiCkUbiVdwQzsJJQ-fwAAAQw"]
[Fri Jan 09 09:02:00.622937 2026] [:error] [pid 35812:tid 35886] [client 85.203.21.53:39165] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/fonts/roboto/wp-admins.php"] [unique_id "aWBTiEAss1qSj44c-n1GkAAAAIw"]
[Fri Jan 09 09:02:01.029475 2026] [:error] [pid 10431:tid 10448] [client 85.203.21.14:51771] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/flatsome/wp-kgg.php"] [unique_id "aWBTiSkUbiVdwQzsJJQ-hQAAAQ4"]
[Fri Jan 09 09:02:01.382347 2026] [:error] [pid 10431:tid 10457] [client 85.203.21.42:49643] [client 85.203.21.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/wp-admins.php"] [unique_id "aWBTiSkUbiVdwQzsJJQ-iAAAARc"]
[Fri Jan 09 09:02:01.744102 2026] [:error] [pid 35810:tid 35822] [client 85.203.21.30:30707] [client 85.203.21.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aWBTiYrJrhH8tOUNM5A9CAAAAAM"]
[Fri Jan 09 09:02:02.111844 2026] [:error] [pid 35810:tid 35821] [client 85.203.21.68:52733] [client 85.203.21.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/commands/"] [unique_id "aWBTiorJrhH8tOUNM5A9CwAAAAI"]
[Fri Jan 09 09:02:02.511072 2026] [:error] [pid 10431:tid 10447] [client 85.203.21.68:42437] [client 85.203.21.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/buy.php"] [unique_id "aWBTiikUbiVdwQzsJJQ-iwAAAQ0"]
[Fri Jan 09 09:02:02.860523 2026] [:error] [pid 35811:tid 35868] [client 85.203.21.25:54619] [client 85.203.21.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/spacious-pro/js/theia-sticky-sidebar/"] [unique_id "aWBTim7lx9V0CvYJJf0IlAAAAFU"]
[Fri Jan 09 09:02:03.240034 2026] [:error] [pid 35812:tid 35878] [client 85.203.21.53:42725] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/zxasd.php"] [unique_id "aWBTi0Ass1qSj44c-n1GlwAAAIQ"]
[Fri Jan 09 09:02:03.593370 2026] [:error] [pid 10431:tid 10455] [client 85.203.21.14:64471] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/database.php"] [unique_id "aWBTiykUbiVdwQzsJJQ-jgAAARU"]
[Fri Jan 09 09:02:03.948096 2026] [:error] [pid 35812:tid 35888] [client 85.203.21.25:64013] [client 85.203.21.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/sql.php"] [unique_id "aWBTi0Ass1qSj44c-n1GmgAAAI4"]
[Fri Jan 09 09:02:04.325256 2026] [:error] [pid 35916:tid 35937] [client 85.203.21.34:37179] [client 85.203.21.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/ty.php"] [unique_id "aWBTjPnSLfzabNjOjwz70gAAANM"]
[Fri Jan 09 09:02:04.676039 2026] [:error] [pid 10431:tid 10444] [client 85.203.21.6:40863] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/ty.php"] [unique_id "aWBTjCkUbiVdwQzsJJQ-kQAAAQo"]
[Fri Jan 09 09:02:05.028619 2026] [:error] [pid 35916:tid 35938] [client 85.203.21.8:38257] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/ty.php"] [unique_id "aWBTjfnSLfzabNjOjwz71wAAANQ"]
[Fri Jan 09 09:02:05.418645 2026] [:error] [pid 35812:tid 35886] [client 85.203.21.48:23537] [client 85.203.21.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/a1cord.php"] [unique_id "aWBTjUAss1qSj44c-n1GmwAAAIw"]
[Fri Jan 09 09:02:05.799373 2026] [:error] [pid 35812:tid 35881] [client 85.203.21.21:29407] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-edit-link/"] [unique_id "aWBTjUAss1qSj44c-n1GnAAAAIc"]
[Fri Jan 09 09:02:06.154059 2026] [:error] [pid 35810:tid 35822] [client 85.203.21.46:48049] [client 85.203.21.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xex.php"] [unique_id "aWBTjorJrhH8tOUNM5A9FwAAAAM"]
[Fri Jan 09 09:02:06.517144 2026] [:error] [pid 35812:tid 35878] [client 85.203.21.11:47817] [client 85.203.21.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/edit-wolf.php"] [unique_id "aWBTjkAss1qSj44c-n1GoAAAAIQ"]
[Fri Jan 09 09:02:06.877235 2026] [:error] [pid 35916:tid 35935] [client 85.203.21.17:26601] [client 85.203.21.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp_helper_bimfl/shell.php"] [unique_id "aWBTjvnSLfzabNjOjwz72gAAANE"]
[Fri Jan 09 09:02:07.233942 2026] [:error] [pid 35810:tid 35821] [client 85.203.21.29:24027] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp_helper_avcdl/shell.php"] [unique_id "aWBTj4rJrhH8tOUNM5A9GQAAAAI"]
[Fri Jan 09 09:02:07.646183 2026] [:error] [pid 35810:tid 35827] [client 85.203.21.18:56163] [client 85.203.21.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp_helper_rrvvo/shell.php"] [unique_id "aWBTj4rJrhH8tOUNM5A9GgAAAAg"]
[Fri Jan 09 09:02:08.009724 2026] [:error] [pid 10431:tid 10435] [client 85.203.21.44:56257] [client 85.203.21.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/contact-form-7/wp-contact-form-7.php"] [unique_id "aWBTkCkUbiVdwQzsJJQ-ogAAAQE"]
[Fri Jan 09 09:02:08.363009 2026] [:error] [pid 35810:tid 35835] [client 85.203.21.7:65153] [client 85.203.21.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp_theme_ahewl/shell.php"] [unique_id "aWBTkIrJrhH8tOUNM5A9GwAAABA"]
[Fri Jan 09 09:02:08.736309 2026] [:error] [pid 35812:tid 35874] [client 85.203.21.19:24045] [client 85.203.21.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "aWBTkEAss1qSj44c-n1GqAAAAIA"]
[Fri Jan 09 09:02:09.104220 2026] [:error] [pid 35812:tid 35879] [client 85.203.21.30:45721] [client 85.203.21.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/"] [unique_id "aWBTkUAss1qSj44c-n1GqgAAAIU"]
[Fri Jan 09 09:02:09.452322 2026] [:error] [pid 35812:tid 35875] [client 85.203.21.3:46709] [client 85.203.21.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/tx20.php"] [unique_id "aWBTkUAss1qSj44c-n1GrQAAAIE"]
[Fri Jan 09 09:02:09.809406 2026] [:error] [pid 35812:tid 35876] [client 85.203.21.44:48975] [client 85.203.21.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ah22.php"] [unique_id "aWBTkUAss1qSj44c-n1GsgAAAII"]
[Fri Jan 09 09:02:10.165474 2026] [:error] [pid 10431:tid 10443] [client 85.203.21.53:41265] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/ooo.php"] [unique_id "aWBTkikUbiVdwQzsJJQ-swAAAQk"]
[Fri Jan 09 09:02:10.524193 2026] [:error] [pid 35812:tid 35885] [client 85.203.21.4:36227] [client 85.203.21.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/dist/content/pmdwx/xfe/admin.php"] [unique_id "aWBTkkAss1qSj44c-n1GtQAAAIs"]
[Fri Jan 09 09:02:10.905320 2026] [:error] [pid 35812:tid 35891] [client 85.203.21.49:36899] [client 85.203.21.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/resources/dist/includes/img/alw/"] [unique_id "aWBTkkAss1qSj44c-n1GtwAAAJE"]
[Fri Jan 09 09:02:11.275149 2026] [:error] [pid 35812:tid 35888] [client 85.203.21.8:42471] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/cache/assets/v3/v3/files/akami/admin.php"] [unique_id "aWBTk0Ass1qSj44c-n1GuAAAAI4"]
[Fri Jan 09 09:02:11.621474 2026] [:error] [pid 35916:tid 35930] [client 85.203.21.4:35329] [client 85.203.21.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/datate.php"] [unique_id "aWBTk_nSLfzabNjOjwz75wAAAMw"]
[Fri Jan 09 09:02:11.974337 2026] [:error] [pid 35916:tid 35920] [client 85.203.21.2:37871] [client 85.203.21.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/chosen.php"] [unique_id "aWBTk_nSLfzabNjOjwz76QAAAMI"]
[Fri Jan 09 09:02:12.331499 2026] [:error] [pid 35916:tid 35941] [client 85.203.21.18:35187] [client 85.203.21.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/autoload_classmap.php"] [unique_id "aWBTlPnSLfzabNjOjwz77QAAANc"]
[Fri Jan 09 09:02:12.727823 2026] [:error] [pid 35916:tid 35922] [client 85.203.21.13:26799] [client 85.203.21.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/call-now-button/admin.php"] [unique_id "aWBTlPnSLfzabNjOjwz77wAAAMQ"]
[Fri Jan 09 09:02:13.088823 2026] [:error] [pid 35810:tid 35838] [client 85.203.21.34:43383] [client 85.203.21.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/rank-math/mmm.php"] [unique_id "aWBTlYrJrhH8tOUNM5A9IQAAABM"]
[Fri Jan 09 09:02:13.444928 2026] [:error] [pid 35916:tid 35941] [client 85.203.21.12:50797] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/maintenance/assets/mmm.php"] [unique_id "aWBTlfnSLfzabNjOjwz7-AAAANc"]
[Fri Jan 09 09:02:13.819748 2026] [:error] [pid 35916:tid 35935] [client 85.203.21.22:25599] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/menu.php"] [unique_id "aWBTlfnSLfzabNjOjwz7_QAAANE"]
[Fri Jan 09 09:02:14.169267 2026] [:error] [pid 35916:tid 35938] [client 85.203.21.55:64859] [client 85.203.21.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/menu.php"] [unique_id "aWBTlvnSLfzabNjOjwz8AAAAANQ"]
[Fri Jan 09 09:02:14.519044 2026] [:error] [pid 35916:tid 35924] [client 85.203.21.50:36323] [client 85.203.21.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/todpIbcm.php"] [unique_id "aWBTlvnSLfzabNjOjwz8AwAAAMY"]
[Fri Jan 09 09:02:14.888400 2026] [:error] [pid 35812:tid 35893] [client 85.203.21.17:42507] [client 85.203.21.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah/function.php"] [unique_id "aWBTlkAss1qSj44c-n1GwwAAAJM"]
[Fri Jan 09 09:02:15.234856 2026] [:error] [pid 35916:tid 35930] [client 85.203.21.43:35781] [client 85.203.21.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aWBTl_nSLfzabNjOjwz8CAAAAMw"]
[Fri Jan 09 09:02:15.601306 2026] [:error] [pid 35810:tid 35832] [client 85.203.21.26:52797] [client 85.203.21.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about/autoload_classmap.php"] [unique_id "aWBTl4rJrhH8tOUNM5A9JQAAAA0"]
[Fri Jan 09 09:02:15.956841 2026] [:error] [pid 35916:tid 35922] [client 85.203.21.53:43647] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/new/update/chosen.php"] [unique_id "aWBTl_nSLfzabNjOjwz8EQAAAMQ"]
[Fri Jan 09 09:02:16.306253 2026] [:error] [pid 35916:tid 35934] [client 85.203.21.51:41385] [client 85.203.21.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/new/wp-2019.php"] [unique_id "aWBTmPnSLfzabNjOjwz8EgAAANA"]
[Fri Jan 09 09:02:16.681320 2026] [:error] [pid 35810:tid 35819] [client 85.203.21.42:26273] [client 85.203.21.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-2019.php"] [unique_id "aWBTmIrJrhH8tOUNM5A9KwAAAAA"]
[Fri Jan 09 09:02:17.037421 2026] [:error] [pid 35812:tid 35891] [client 85.203.21.20:31751] [client 85.203.21.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/zczv.php"] [unique_id "aWBTmUAss1qSj44c-n1GzAAAAJE"]
[Fri Jan 09 09:02:22.515235 2026] [:error] [pid 10431:tid 10447] [client 85.203.21.51:23695] [client 85.203.21.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-rocket-config/V.php"] [unique_id "aWBTnikUbiVdwQzsJJQ-zAAAAQ0"]
[Fri Jan 09 09:02:22.872896 2026] [:error] [pid 35812:tid 35891] [client 85.203.21.29:61527] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/wp-conflg.php"] [unique_id "aWBTnkAss1qSj44c-n1G2wAAAJE"]
[Fri Jan 09 09:02:23.219868 2026] [:error] [pid 35810:tid 35827] [client 85.203.21.44:48559] [client 85.203.21.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/freeform/"] [unique_id "aWBTn4rJrhH8tOUNM5A9RAAAAAg"]
[Fri Jan 09 09:02:23.571059 2026] [:error] [pid 35811:tid 35870] [client 85.203.21.10:22259] [client 85.203.21.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/autoload_classmap.php"] [unique_id "aWBTn27lx9V0CvYJJf0IoQAAAFc"]
[Fri Jan 09 09:02:23.936436 2026] [:error] [pid 35812:tid 35898] [client 85.203.21.47:51617] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/v.php"] [unique_id "aWBTn0Ass1qSj44c-n1G4QAAAJg"]
[Fri Jan 09 09:02:24.286190 2026] [:error] [pid 10431:tid 10435] [client 85.203.21.23:63169] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/chosen.php"] [unique_id "aWBToCkUbiVdwQzsJJQ-0gAAAQE"]
[Fri Jan 09 09:02:24.642716 2026] [:error] [pid 35812:tid 35891] [client 85.203.21.2:50455] [client 85.203.21.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentythree/templates/"] [unique_id "aWBToEAss1qSj44c-n1G5gAAAJE"]
[Fri Jan 09 09:02:25.014253 2026] [:error] [pid 35812:tid 35890] [client 85.203.21.13:29727] [client 85.203.21.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/fonts/page.php"] [unique_id "aWBToUAss1qSj44c-n1G6QAAAJA"]
[Fri Jan 09 09:02:25.370206 2026] [:error] [pid 35810:tid 35843] [client 85.203.21.47:57997] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/separator/"] [unique_id "aWBToYrJrhH8tOUNM5A9RwAAABg"]
[Fri Jan 09 09:02:25.725022 2026] [:error] [pid 35812:tid 35874] [client 85.203.21.51:64361] [client 85.203.21.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/webix.php"] [unique_id "aWBToUAss1qSj44c-n1G8QAAAIA"]
[Fri Jan 09 09:02:26.096419 2026] [:error] [pid 10431:tid 10440] [client 85.203.21.34:31275] [client 85.203.21.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aWBToikUbiVdwQzsJJQ-1gAAAQY"]
[Fri Jan 09 09:02:26.451618 2026] [:error] [pid 35812:tid 35898] [client 85.203.21.27:49283] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/wp-conflg.php"] [unique_id "aWBTokAss1qSj44c-n1G9QAAAJg"]
[Fri Jan 09 09:02:26.805446 2026] [:error] [pid 35916:tid 35931] [client 85.203.21.49:33579] [client 85.203.21.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aWBTovnSLfzabNjOjwz8NwAAAM0"]
[Fri Jan 09 09:02:27.151147 2026] [:error] [pid 35810:tid 35838] [client 85.203.21.24:52549] [client 85.203.21.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/info.php"] [unique_id "aWBTo4rJrhH8tOUNM5A9SwAAABM"]
[Fri Jan 09 09:02:27.513492 2026] [:error] [pid 35810:tid 35836] [client 85.203.21.55:54827] [client 85.203.21.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-style.php"] [unique_id "aWBTo4rJrhH8tOUNM5A9TQAAABE"]
[Fri Jan 09 09:02:27.863315 2026] [:error] [pid 35916:tid 35921] [client 85.203.21.48:37887] [client 85.203.21.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/xp.php"] [unique_id "aWBTo_nSLfzabNjOjwz8OgAAAMM"]
[Fri Jan 09 09:02:28.211794 2026] [:error] [pid 35810:tid 35831] [client 85.203.21.24:29593] [client 85.203.21.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/admin/skin/base/mixins/about.php"] [unique_id "aWBTpIrJrhH8tOUNM5A9UAAAAAw"]
[Fri Jan 09 09:02:28.558985 2026] [:error] [pid 35811:tid 35847] [client 85.203.21.4:26789] [client 85.203.21.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Content/"] [unique_id "aWBTpG7lx9V0CvYJJf0IrwAAAEA"]
[Fri Jan 09 09:02:28.910942 2026] [:error] [pid 35811:tid 35858] [client 85.203.21.46:39819] [client 85.203.21.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aWBTpG7lx9V0CvYJJf0IsAAAAEs"]
[Fri Jan 09 09:02:29.258452 2026] [:error] [pid 35810:tid 35824] [client 85.203.21.15:47077] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/min.php"] [unique_id "aWBTpYrJrhH8tOUNM5A9UgAAAAU"]
[Fri Jan 09 09:02:29.607799 2026] [:error] [pid 35916:tid 35922] [client 85.203.21.19:43397] [client 85.203.21.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-title/"] [unique_id "aWBTpfnSLfzabNjOjwz8SAAAAMQ"]
[Fri Jan 09 09:02:29.963655 2026] [:error] [pid 35811:tid 35848] [client 85.203.21.22:37025] [client 85.203.21.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "aWBTpW7lx9V0CvYJJf0IswAAAEE"]
[Fri Jan 09 09:02:30.335622 2026] [:error] [pid 35916:tid 35931] [client 85.203.21.48:28301] [client 85.203.21.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aWBTpvnSLfzabNjOjwz8TQAAAM0"]
[Fri Jan 09 09:02:30.703718 2026] [:error] [pid 10431:tid 10441] [client 85.203.21.11:26175] [client 85.203.21.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aWBTpikUbiVdwQzsJJQ-3AAAAQc"]
[Fri Jan 09 09:02:31.096119 2026] [:error] [pid 35916:tid 35921] [client 85.203.21.36:49929] [client 85.203.21.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/"] [unique_id "aWBTp_nSLfzabNjOjwz8WwAAAMM"]
[Fri Jan 09 09:02:31.443595 2026] [:error] [pid 35810:tid 35836] [client 85.203.21.23:45917] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/datate.php"] [unique_id "aWBTp4rJrhH8tOUNM5A9VQAAABE"]
[Fri Jan 09 09:02:31.844457 2026] [:error] [pid 35916:tid 35935] [client 85.203.21.21:39875] [client 85.203.21.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/lock360.php"] [unique_id "aWBTp_nSLfzabNjOjwz8XwAAANE"]
[Fri Jan 09 09:02:32.216325 2026] [:error] [pid 35916:tid 35930] [client 85.203.21.49:63585] [client 85.203.21.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-work.php"] [unique_id "aWBTqPnSLfzabNjOjwz8YQAAAMw"]
[Fri Jan 09 09:02:32.569517 2026] [:error] [pid 35812:tid 35886] [client 85.203.21.53:34517] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/search/admin.php"] [unique_id "aWBTqEAss1qSj44c-n1G_QAAAIw"]
[Fri Jan 09 09:02:32.955856 2026] [:error] [pid 35810:tid 35826] [client 85.203.21.6:29917] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/lifeempore/content-"] [unique_id "aWBTqIrJrhH8tOUNM5A9WQAAAAc"]
[Fri Jan 09 09:02:33.303059 2026] [:error] [pid 35810:tid 35832] [client 85.203.21.3:25421] [client 85.203.21.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/lifeempore-v1/content-"] [unique_id "aWBTqYrJrhH8tOUNM5A9XQAAAA0"]
[Fri Jan 09 09:02:33.658466 2026] [:error] [pid 35812:tid 35885] [client 85.203.21.6:39001] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/lifeempore-v2/content-"] [unique_id "aWBTqUAss1qSj44c-n1HAQAAAIs"]
[Fri Jan 09 09:02:34.030328 2026] [:error] [pid 35812:tid 35881] [client 85.203.21.42:46637] [client 85.203.21.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentynineteen/content-"] [unique_id "aWBTqkAss1qSj44c-n1HBAAAAIc"]
[Fri Jan 09 09:02:34.376970 2026] [:error] [pid 35810:tid 35841] [client 85.203.21.6:48287] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-excerpt-constructor.php"] [unique_id "aWBTqorJrhH8tOUNM5A9YwAAABY"]
[Fri Jan 09 09:02:34.733948 2026] [:error] [pid 35812:tid 35894] [client 85.203.21.6:29637] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/edit.php"] [unique_id "aWBTqkAss1qSj44c-n1HCAAAAJQ"]
[Fri Jan 09 09:02:35.084619 2026] [:error] [pid 35810:tid 35822] [client 85.203.21.12:45235] [client 85.203.21.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/class-ftp-sockets-more.php"] [unique_id "aWBTq4rJrhH8tOUNM5A9aAAAAAM"]
[Fri Jan 09 09:02:36.955694 2026] [:error] [pid 35916:tid 35937] [client 85.203.21.23:26499] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/options-privacy-pic.php"] [unique_id "aWBTrPnSLfzabNjOjwz8bgAAANM"]
[Fri Jan 09 09:02:37.340926 2026] [:error] [pid 35811:tid 35850] [client 85.203.21.29:29991] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/post-template-soap.php"] [unique_id "aWBTrW7lx9V0CvYJJf0IwgAAAEM"]
[Fri Jan 09 09:02:37.687986 2026] [:error] [pid 35810:tid 35824] [client 85.203.21.25:63731] [client 85.203.21.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aWBTrYrJrhH8tOUNM5A9bgAAAAU"]
[Fri Jan 09 09:02:38.044350 2026] [:error] [pid 35812:tid 35886] [client 85.203.21.14:25427] [client 85.203.21.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/privacy-beta.php"] [unique_id "aWBTrkAss1qSj44c-n1HFAAAAIw"]
[Fri Jan 09 09:02:38.400262 2026] [:error] [pid 35812:tid 35896] [client 85.203.21.11:53091] [client 85.203.21.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/particle-effect-three/"] [unique_id "aWBTrkAss1qSj44c-n1HGAAAAJY"]
[Fri Jan 09 09:02:38.751385 2026] [:error] [pid 35916:tid 35924] [client 85.203.21.37:30629] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/magazineposts/"] [unique_id "aWBTrvnSLfzabNjOjwz8dAAAAMY"]
[Fri Jan 09 09:02:39.106306 2026] [:error] [pid 35916:tid 35922] [client 85.203.21.15:35355] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/landing-page-hero/"] [unique_id "aWBTr_nSLfzabNjOjwz8dwAAAMQ"]
[Fri Jan 09 09:02:39.467514 2026] [:error] [pid 35810:tid 35843] [client 85.203.21.68:64985] [client 85.203.21.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/le-chef-la-carte/"] [unique_id "aWBTr4rJrhH8tOUNM5A9cwAAABg"]
[Fri Jan 09 09:02:39.826104 2026] [:error] [pid 35916:tid 35930] [client 85.203.21.20:58527] [client 85.203.21.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/flatco/assets/"] [unique_id "aWBTr_nSLfzabNjOjwz8gAAAAMw"]
[Fri Jan 09 09:02:40.197159 2026] [:error] [pid 35916:tid 35919] [client 85.203.21.64:31131] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/flatco/framework/"] [unique_id "aWBTsPnSLfzabNjOjwz8hQAAAME"]
[Fri Jan 09 09:02:40.546982 2026] [:error] [pid 35916:tid 35935] [client 85.203.21.48:25281] [client 85.203.21.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/Avada/woocommerce/checkout/"] [unique_id "aWBTsPnSLfzabNjOjwz8jQAAANE"]
[Fri Jan 09 09:02:40.906127 2026] [:error] [pid 35811:tid 35855] [client 85.203.21.20:35125] [client 85.203.21.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/Avada/includes/recaptcha/src/ReCaptcha/"] [unique_id "aWBTsG7lx9V0CvYJJf0IzAAAAEg"]
[Fri Jan 09 09:02:41.252179 2026] [:error] [pid 10431:tid 10451] [client 85.203.21.4:52967] [client 85.203.21.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/target/admin/"] [unique_id "aWBTsSkUbiVdwQzsJJQ-7gAAARE"]
[Fri Jan 09 09:02:41.607425 2026] [:error] [pid 35811:tid 35858] [client 85.203.21.69:45721] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/dt-the7/inc/extensions/options-framework/js/"] [unique_id "aWBTsW7lx9V0CvYJJf0IzwAAAEs"]
[Fri Jan 09 09:02:41.963511 2026] [:error] [pid 35811:tid 35863] [client 85.203.21.62:49153] [client 85.203.21.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aWBTsW7lx9V0CvYJJf0I0QAAAFA"]
[Fri Jan 09 09:02:42.329696 2026] [:error] [pid 35916:tid 35924] [client 85.203.21.7:38823] [client 85.203.21.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "aWBTsvnSLfzabNjOjwz8mwAAAMY"]
[Fri Jan 09 09:02:42.687231 2026] [:error] [pid 35810:tid 35825] [client 85.203.21.19:23371] [client 85.203.21.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "aWBTsorJrhH8tOUNM5A9dAAAAAY"]
[Fri Jan 09 09:02:43.043621 2026] [:error] [pid 35812:tid 35876] [client 85.203.21.13:52783] [client 85.203.21.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/"] [unique_id "aWBTs0Ass1qSj44c-n1HJAAAAII"]
[Fri Jan 09 09:02:43.407969 2026] [:error] [pid 10431:tid 10440] [client 85.203.21.11:53597] [client 85.203.21.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-includes.php"] [unique_id "aWBTsykUbiVdwQzsJJQ--gAAAQY"]
[Fri Jan 09 09:02:43.757850 2026] [:error] [pid 35916:tid 35934] [client 85.203.21.8:44935] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-rocket-config/wp-login.php"] [unique_id "aWBTs_nSLfzabNjOjwz8owAAANA"]
[Fri Jan 09 09:02:44.111713 2026] [:error] [pid 35916:tid 35929] [client 85.203.21.8:31547] [client 85.203.21.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/moon.php"] [unique_id "aWBTtPnSLfzabNjOjwz8pQAAAMs"]
[Fri Jan 09 09:02:44.469113 2026] [:error] [pid 35810:tid 35836] [client 85.203.21.20:61179] [client 85.203.21.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/cloud.php"] [unique_id "aWBTtIrJrhH8tOUNM5A9dgAAABE"]
[Fri Jan 09 09:02:49.827413 2026] [:error] [pid 35916:tid 35933] [client 85.203.21.29:34717] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/404.php"] [unique_id "aWBTufnSLfzabNjOjwz8xAAAAM8"]
[Fri Jan 09 09:02:50.181611 2026] [:error] [pid 35811:tid 35866] [client 85.203.21.17:22973] [client 85.203.21.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/social-links/atomlib.php"] [unique_id "aWBTum7lx9V0CvYJJf0I6gAAAFM"]
[Fri Jan 09 09:02:50.535661 2026] [:error] [pid 35811:tid 35868] [client 85.203.21.15:21583] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/man.php"] [unique_id "aWBTum7lx9V0CvYJJf0I7AAAAFU"]
[Fri Jan 09 09:02:50.899477 2026] [:error] [pid 10431:tid 10440] [client 85.203.21.3:26743] [client 85.203.21.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/images/1.php"] [unique_id "aWBTuikUbiVdwQzsJJQ_IAAAAQY"]
[Fri Jan 09 09:02:51.248040 2026] [:error] [pid 35811:tid 35855] [client 85.203.21.64:55433] [client 85.203.21.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cherry-plugin-master/includes/makeasmtp.php"] [unique_id "aWBTu27lx9V0CvYJJf0I7gAAAEg"]
[Fri Jan 09 09:02:51.600331 2026] [:error] [pid 10431:tid 10447] [client 85.203.21.63:30871] [client 85.203.21.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aWBTuykUbiVdwQzsJJQ_IwAAAQ0"]
[Fri Jan 09 09:02:51.963477 2026] [:error] [pid 35812:tid 35885] [client 85.203.21.27:64265] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aWBTu0Ass1qSj44c-n1HNQAAAIs"]
[Fri Jan 09 09:02:52.319050 2026] [:error] [pid 35916:tid 35941] [client 85.203.21.59:30177] [client 85.203.21.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aWBTvPnSLfzabNjOjwz8zwAAANc"]
[Fri Jan 09 09:02:52.676303 2026] [:error] [pid 35916:tid 35930] [client 85.203.21.19:65093] [client 85.203.21.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wtu_gagal.php"] [unique_id "aWBTvPnSLfzabNjOjwz80wAAAMw"]
[Fri Jan 09 09:02:58.023744 2026] [:error] [pid 35810:tid 35825] [client 85.203.21.16:57007] [client 85.203.21.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/mtodm/"] [unique_id "aWBTworJrhH8tOUNM5A9jgAAAAY"]
[Fri Jan 09 09:02:58.391341 2026] [:error] [pid 10431:tid 10445] [client 85.203.21.23:32589] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "aWBTwikUbiVdwQzsJJQ_NwAAAQs"]
[Fri Jan 09 09:02:58.740656 2026] [:error] [pid 10431:tid 10434] [client 85.203.21.30:39797] [client 85.203.21.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aWBTwikUbiVdwQzsJJQ_PAAAAQA"]
[Fri Jan 09 09:02:59.108121 2026] [:error] [pid 10431:tid 10445] [client 85.203.21.42:59443] [client 85.203.21.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-maiI.php"] [unique_id "aWBTwykUbiVdwQzsJJQ_QwAAAQs"]
[Fri Jan 09 09:02:59.457158 2026] [:error] [pid 10431:tid 10448] [client 85.203.21.47:52179] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aWBTwykUbiVdwQzsJJQ_RwAAAQ4"]
[Fri Jan 09 09:02:59.813510 2026] [:error] [pid 10431:tid 10452] [client 85.203.21.7:41505] [client 85.203.21.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wophq/"] [unique_id "aWBTwykUbiVdwQzsJJQ_SwAAARI"]
[Fri Jan 09 09:03:00.171257 2026] [:error] [pid 35812:tid 35896] [client 85.203.21.16:54153] [client 85.203.21.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wadd-wp-bookls.php"] [unique_id "aWBTxEAss1qSj44c-n1HSQAAAJY"]
[Fri Jan 09 09:03:00.522721 2026] [:error] [pid 10431:tid 10449] [client 85.203.21.15:24227] [client 85.203.21.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wordpress-seo-extended/admin/views/admin.php"] [unique_id "aWBTxCkUbiVdwQzsJJQ_VwAAAQ8"]
[Fri Jan 09 09:03:00.994071 2026] [:error] [pid 10431:tid 10447] [client 85.203.21.29:47905] [client 85.203.21.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-page-dropdown-first.php"] [unique_id "aWBTxCkUbiVdwQzsJJQ_XAAAAQ0"]
[Fri Jan 09 09:03:01.362766 2026] [:error] [pid 10431:tid 10436] [client 85.203.21.25:21527] [client 85.203.21.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-tag-cloud-new.php"] [unique_id "aWBTxSkUbiVdwQzsJJQ_XwAAAQI"]
[Fri Jan 09 09:03:01.731294 2026] [:error] [pid 10431:tid 10453] [client 85.203.21.24:46303] [client 85.203.21.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/zer.php"] [unique_id "aWBTxSkUbiVdwQzsJJQ_YgAAARM"]
[Fri Jan 09 09:03:02.079601 2026] [:error] [pid 35811:tid 35851] [client 85.203.21.69:27143] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/autoload_classmap.php"] [unique_id "aWBTxm7lx9V0CvYJJf0JAQAAAEQ"]
[Fri Jan 09 09:03:02.465520 2026] [:error] [pid 35916:tid 35926] [client 85.203.21.53:45607] [client 85.203.21.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/screen-event.php"] [unique_id "aWBTxvnSLfzabNjOjwz8-QAAAMg"]
[Fri Jan 09 09:03:02.829604 2026] [:error] [pid 35810:tid 35834] [client 85.203.21.17:49549] [client 85.203.21.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/site-info-client.php"] [unique_id "aWBTxorJrhH8tOUNM5A9lgAAAA8"]
[Fri Jan 09 09:03:03.197354 2026] [:error] [pid 35916:tid 35929] [client 85.203.21.47:20029] [client 85.203.21.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-mails.php"] [unique_id "aWBTx_nSLfzabNjOjwz9AAAAAMs"]
[Fri Jan 09 09:03:03.562189 2026] [:error] [pid 35810:tid 35823] [client 85.203.21.27:31465] [client 85.203.21.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aWBTx4rJrhH8tOUNM5A9mgAAAAQ"]
[Fri Jan 09 09:03:03.914330 2026] [:error] [pid 10431:tid 10451] [client 85.203.21.20:37625] [client 85.203.21.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/dofault.php"] [unique_id "aWBTxykUbiVdwQzsJJQ_cgAAARE"]
[Fri Jan 09 09:03:04.282096 2026] [:error] [pid 35916:tid 35933] [client 85.203.21.69:49641] [client 85.203.21.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/file-manager.php"] [unique_id "aWBTyPnSLfzabNjOjwz9CAAAAM8"]
[Fri Jan 09 09:03:04.640008 2026] [:error] [pid 35916:tid 35922] [client 85.203.21.37:64135] [client 85.203.21.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/radio.php"] [unique_id "aWBTyPnSLfzabNjOjwz9DAAAAMQ"]
[Fri Jan 09 09:03:05.021942 2026] [:error] [pid 35810:tid 35841] [client 85.203.21.56:48407] [client 85.203.21.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aWBTyYrJrhH8tOUNM5A9nwAAABY"]
[Fri Jan 09 09:03:10.418544 2026] [:error] [pid 35810:tid 35839] [client 85.203.21.6:44875] [client 85.203.21.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Iitespeed-cache/drive.php"] [unique_id "aWBTzorJrhH8tOUNM5A9qgAAABQ"]
[Fri Jan 09 09:03:10.777725 2026] [:error] [pid 35811:tid 35848] [client 85.203.21.9:33331] [client 85.203.21.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/images/selam.php"] [unique_id "aWBTzm7lx9V0CvYJJf0JEAAAAEE"]
[Fri Jan 09 09:03:11.127477 2026] [:error] [pid 35810:tid 35821] [client 85.203.21.23:33691] [client 85.203.21.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aWBTz4rJrhH8tOUNM5A9rgAAAAI"]
[Fri Jan 09 09:03:11.487514 2026] [:error] [pid 35810:tid 35830] [client 85.203.21.34:57383] [client 85.203.21.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aWBTz4rJrhH8tOUNM5A9sQAAAAs"]
[Fri Jan 09 09:07:49.176800 2026] [:error] [pid 10431:tid 10437] [client 203.2.64.59:49877] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWBU5SkUbiVdwQzsJJRClQAAAQM"]
[Fri Jan 09 12:02:21.335490 2026] [:error] [pid 30020:tid 30054] [client 85.159.211.250:47446] [client 85.159.211.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.159.211.250, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWB9zcrjc66qOisG6L2TvwAAAIA"]
[Fri Jan 09 12:02:23.269957 2026] [:error] [pid 1366:tid 1387] [client 85.159.211.250:47460] [client 85.159.211.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.159.211.250, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWB9zxmasveKu8_ec1XM1AAAAZI"]
[Fri Jan 09 14:11:48.197938 2026] [autoindex:error] [pid 14872:tid 14888] [client 143.244.141.160:62504] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 09 14:42:23.837441 2026] [autoindex:error] [pid 14739:tid 14747] [client 143.244.141.160:59620] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 09 15:13:46.533237 2026] [:error] [pid 30020:tid 30067] [client 165.227.179.66:45922] [client 165.227.179.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.179.66, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWCqqsrjc66qOisG6L2wWgAAAI0"]
[Fri Jan 09 15:27:27.083355 2026] [:error] [pid 14739:tid 14744] [client 117.33.163.216:48246] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWCt3163M6_PkLt_IJJCdAAAAcM"]
[Fri Jan 09 15:53:32.050487 2026] [:error] [pid 1366:tid 1392] [client 97.70.206.32:57663] [client 97.70.206.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 97.70.206.32, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWCz_BmasveKu8_ec1Ue8QAAAZc"]
[Fri Jan 09 15:53:33.891409 2026] [:error] [pid 30019:tid 30036] [client 97.70.206.32:14124] [client 97.70.206.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 97.70.206.32, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWCz_Uz3igHGwX5f7Iq4EQAAAAw"]
[Fri Jan 09 17:58:25.524523 2026] [:error] [pid 30019:tid 30032] [client 138.128.140.83:50795] [client 138.128.140.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.128.140.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWDRQUz3igHGwX5f7IrN0wAAAAg"]
[Fri Jan 09 17:58:41.017178 2026] [:error] [pid 44848:tid 44866] [client 49.43.196.96:52295] [client 49.43.196.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.196.96, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWDRUajajoTJAbEk87ynzAAAAFA"]
[Fri Jan 09 17:58:54.696831 2026] [:error] [pid 14770:tid 14781] [client 223.185.134.209:11004] [client 223.185.134.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.134.209, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWDRXh5QbaVZ-6newJYmswAAAgk"]
[Fri Jan 09 19:35:46.184130 2026] [:error] [pid 1366:tid 1368] [client 223.185.134.209:23996] [client 223.185.134.209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aWDoEhmasveKu8_ec1Vc9wAAAYA"]
[Fri Jan 09 19:37:38.828444 2026] [:error] [pid 30021:tid 30103] [client 223.185.134.209:5375] [client 223.185.134.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.134.209, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWDogg_M8aRtsTog5J-WtAAAANY"]
[Fri Jan 09 20:45:41.511730 2026] [:error] [pid 14872:tid 14888] [client 14.225.211.166:46436] [client 14.225.211.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.211.166, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWD4daIUELhgYLNp1sY7EAAAAs4"]
[Fri Jan 09 20:45:45.553480 2026] [:error] [pid 1366:tid 1384] [client 14.225.211.166:46264] [client 14.225.211.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.225.211.166, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWD4eRmasveKu8_ec1VwRAAAAY8"]
[Fri Jan 09 21:57:21.769785 2026] [:error] [pid 30019:tid 30042] [client 106.119.167.146:43365] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWEJQUz3igHGwX5f7Ir3zgAAABI"]
[Sat Jan 10 00:58:21.626674 2026] [:error] [pid 14831:tid 14856] [client 138.128.140.83:63704] [client 138.128.140.83] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aWEzrfaKOMCmJcAyBm1fkAAAApc"]
[Sat Jan 10 00:59:52.649751 2026] [:error] [pid 1366:tid 1391] [client 138.128.140.83:55058] [client 138.128.140.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.128.140.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWE0CBmasveKu8_ec1W19gAAAZY"]
[Sat Jan 10 01:17:11.432366 2026] [:error] [pid 14831:tid 14835] [client 107.150.18.47:65466] [client 107.150.18.47] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aWE4F_aKOMCmJcAyBm1iDwAAAoI"]
[Sat Jan 10 01:47:50.745377 2026] [:error] [pid 1366:tid 1389] [client 107.150.18.47:45870] [client 107.150.18.47] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aWE_RhmasveKu8_ec1XGnQAAAZQ"]
[Sat Jan 10 01:57:33.153140 2026] [:error] [pid 1366:tid 1391] [client 216.81.248.151:59594] [client 216.81.248.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aWFBjRmasveKu8_ec1XIQgAAAZY"]
[Sat Jan 10 03:26:03.579997 2026] [:error] [pid 44848:tid 44859] [client 4.218.8.9:39744] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aWFWS6jajoTJAbEk87wdPgAAAEk"]
[Sat Jan 10 03:26:04.976083 2026] [:error] [pid 14872:tid 14884] [client 4.218.8.9:2952] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aWFWTKIUELhgYLNp1sZ2RgAAAso"]
[Sat Jan 10 03:26:05.882453 2026] [:error] [pid 14872:tid 14883] [client 4.218.8.9:26277] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aWFWTaIUELhgYLNp1sZ2SAAAAsk"]
[Sat Jan 10 03:26:06.928164 2026] [:error] [pid 14872:tid 14897] [client 4.218.8.9:26248] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aWFWTqIUELhgYLNp1sZ2SgAAAtc"]
[Sat Jan 10 03:26:08.808481 2026] [:error] [pid 44848:tid 44872] [client 4.218.8.9:2399] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aWFWUKjajoTJAbEk87wdPwAAAFY"]
[Sat Jan 10 03:26:10.689843 2026] [:error] [pid 44848:tid 44873] [client 4.218.8.9:2419] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aWFWUqjajoTJAbEk87wdQwAAAFc"]
[Sat Jan 10 03:26:13.143524 2026] [:error] [pid 1366:tid 1388] [client 4.218.8.9:38977] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aWFWVRmasveKu8_ec1XdAwAAAZM"]
[Sat Jan 10 03:26:13.880191 2026] [:error] [pid 14831:tid 14846] [client 4.218.8.9:38999] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aWFWVfaKOMCmJcAyBm1yOQAAAo0"]
[Sat Jan 10 03:26:14.551126 2026] [:error] [pid 14831:tid 14840] [client 4.218.8.9:2877] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/check.php"] [unique_id "aWFWVvaKOMCmJcAyBm1yOwAAAoc"]
[Sat Jan 10 03:26:15.644178 2026] [:error] [pid 30020:tid 30059] [client 4.218.8.9:39312] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/check.php"] [unique_id "aWFWV8rjc66qOisG6L0OQwAAAIU"]
[Sat Jan 10 03:26:17.382271 2026] [:error] [pid 30019:tid 30042] [client 4.218.8.9:39007] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/check.php"] [unique_id "aWFWWUz3igHGwX5f7IowkgAAABI"]
[Sat Jan 10 03:26:18.274756 2026] [:error] [pid 14872:tid 14880] [client 4.218.8.9:39315] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/check.php"] [unique_id "aWFWWqIUELhgYLNp1sZ2TQAAAsY"]
[Sat Jan 10 03:26:19.586046 2026] [:error] [pid 30020:tid 30056] [client 4.218.8.9:39342] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aWFWW8rjc66qOisG6L0OSwAAAII"]
[Sat Jan 10 03:26:20.962067 2026] [:error] [pid 14770:tid 14774] [client 4.218.8.9:2878] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aWFWXB5QbaVZ-6newJZ1ZgAAAgI"]
[Sat Jan 10 03:26:22.902971 2026] [:error] [pid 1366:tid 1387] [client 4.218.8.9:39311] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aWFWXhmasveKu8_ec1XdCAAAAZI"]
[Sat Jan 10 03:26:25.420283 2026] [:error] [pid 30019:tid 30047] [client 4.218.8.9:2824] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aWFWYUz3igHGwX5f7IowogAAABc"]
[Sat Jan 10 03:26:26.918882 2026] [:error] [pid 30019:tid 30027] [client 4.218.8.9:39320] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inject.php"] [unique_id "aWFWYkz3igHGwX5f7IowpAAAAAM"]
[Sat Jan 10 03:26:28.930439 2026] [:error] [pid 30021:tid 30099] [client 4.218.8.9:2828] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inject.php"] [unique_id "aWFWZA_M8aRtsTog5J_jxAAAANI"]
[Sat Jan 10 03:26:32.779766 2026] [:error] [pid 44848:tid 44861] [client 4.218.8.9:39317] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inject.php"] [unique_id "aWFWaKjajoTJAbEk87wdUAAAAEs"]
[Sat Jan 10 03:26:33.842364 2026] [:error] [pid 14770:tid 14773] [client 4.218.8.9:2831] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inject.php"] [unique_id "aWFWaR5QbaVZ-6newJZ1cQAAAgE"]
[Sat Jan 10 03:26:35.977452 2026] [:error] [pid 44848:tid 44858] [client 4.218.8.9:39001] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aWFWa6jajoTJAbEk87wdUgAAAEg"]
[Sat Jan 10 03:26:38.029729 2026] [:error] [pid 30019:tid 30032] [client 4.218.8.9:2860] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aWFWbkz3igHGwX5f7IowqwAAAAg"]
[Sat Jan 10 03:26:40.390362 2026] [:error] [pid 14872:tid 14885] [client 4.218.8.9:39348] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aWFWcKIUELhgYLNp1sZ2VQAAAss"]
[Sat Jan 10 03:26:42.492998 2026] [:error] [pid 44848:tid 44854] [client 4.218.8.9:39316] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aWFWcqjajoTJAbEk87wdVgAAAEQ"]
[Sat Jan 10 03:26:44.009739 2026] [:error] [pid 30019:tid 30041] [client 4.218.8.9:39004] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pro.php"] [unique_id "aWFWdEz3igHGwX5f7IowtQAAABE"]
[Sat Jan 10 03:26:44.918875 2026] [:error] [pid 30021:tid 30101] [client 4.218.8.9:38986] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pro.php"] [unique_id "aWFWdA_M8aRtsTog5J_jzwAAANQ"]
[Sat Jan 10 03:26:46.436390 2026] [:error] [pid 30019:tid 30039] [client 4.218.8.9:39318] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pro.php"] [unique_id "aWFWdkz3igHGwX5f7IowtgAAAA8"]
[Sat Jan 10 03:26:47.431966 2026] [:error] [pid 14739:tid 14763] [client 4.218.8.9:39002] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pro.php"] [unique_id "aWFWd163M6_PkLt_IJKdowAAAdY"]
[Sat Jan 10 03:26:48.098423 2026] [:error] [pid 30021:tid 30095] [client 4.218.8.9:39302] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aWFWeA_M8aRtsTog5J_j0gAAAM4"]
[Sat Jan 10 03:26:49.619780 2026] [:error] [pid 30021:tid 30103] [client 4.218.8.9:2851] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aWFWeQ_M8aRtsTog5J_j1wAAANY"]
[Sat Jan 10 03:26:50.998840 2026] [:error] [pid 30021:tid 30093] [client 4.218.8.9:39005] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aWFWeg_M8aRtsTog5J_j2QAAAMw"]
[Sat Jan 10 03:26:52.232546 2026] [:error] [pid 14739:tid 14751] [client 4.218.8.9:2842] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aWFWfF63M6_PkLt_IJKdpQAAAco"]
[Sat Jan 10 03:26:53.702186 2026] [:error] [pid 14739:tid 14747] [client 4.218.8.9:38998] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aWFWfV63M6_PkLt_IJKdqAAAAcY"]
[Sat Jan 10 03:26:54.792521 2026] [:error] [pid 30021:tid 30083] [client 4.218.8.9:38989] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aWFWfg_M8aRtsTog5J_j4QAAAMI"]
[Sat Jan 10 03:26:55.676194 2026] [:error] [pid 1366:tid 1375] [client 4.218.8.9:2835] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aWFWfxmasveKu8_ec1XdJQAAAYY"]
[Sat Jan 10 03:26:57.173047 2026] [:error] [pid 14739:tid 14762] [client 4.218.8.9:39330] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aWFWgV63M6_PkLt_IJKdqgAAAdU"]
[Sat Jan 10 03:26:58.440093 2026] [:error] [pid 14801:tid 14804] [client 4.218.8.9:39299] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aWFWgt8UWXrz_OQYgF2duwAAAkE"]
[Sat Jan 10 03:26:59.664493 2026] [:error] [pid 30020:tid 30062] [client 4.218.8.9:2837] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aWFWg8rjc66qOisG6L0OawAAAIg"]
[Sat Jan 10 03:27:00.401302 2026] [:error] [pid 1366:tid 1389] [client 4.218.8.9:2832] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aWFWhBmasveKu8_ec1XdLAAAAZQ"]
[Sat Jan 10 03:27:01.328088 2026] [:error] [pid 14801:tid 14822] [client 4.218.8.9:39356] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aWFWhd8UWXrz_OQYgF2dvwAAAlM"]
[Sat Jan 10 03:27:01.999645 2026] [:error] [pid 44848:tid 44857] [client 4.218.8.9:38988] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aWFWhajajoTJAbEk87wdYQAAAEc"]
[Sat Jan 10 03:27:27.404025 2026] [:error] [pid 30019:tid 30029] [client 4.218.8.9:39347] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/data.php"] [unique_id "aWFWn0z3igHGwX5f7Iow0AAAAAU"]
[Sat Jan 10 03:27:29.002908 2026] [:error] [pid 30021:tid 30090] [client 4.218.8.9:2861] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/data.php"] [unique_id "aWFWoQ_M8aRtsTog5J_j8gAAAMk"]
[Sat Jan 10 03:27:29.728870 2026] [:error] [pid 14801:tid 14812] [client 4.218.8.9:2825] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/data.php"] [unique_id "aWFWod8UWXrz_OQYgF2d0wAAAkk"]
[Sat Jan 10 03:27:30.256927 2026] [:error] [pid 14801:tid 14819] [client 4.218.8.9:39305] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/data.php"] [unique_id "aWFWot8UWXrz_OQYgF2d1AAAAlA"]
[Sat Jan 10 03:27:31.018520 2026] [:error] [pid 14872:tid 14881] [client 4.218.8.9:38987] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aWFWo6IUELhgYLNp1sZ2cwAAAsc"]
[Sat Jan 10 03:27:32.596367 2026] [:error] [pid 1366:tid 1374] [client 4.218.8.9:2841] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aWFWpBmasveKu8_ec1XdQwAAAYU"]
[Sat Jan 10 03:27:34.167611 2026] [:error] [pid 14739:tid 14746] [client 4.218.8.9:2859] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aWFWpl63M6_PkLt_IJKdyAAAAcU"]
[Sat Jan 10 03:27:36.299441 2026] [:error] [pid 30019:tid 30024] [client 4.218.8.9:2871] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aWFWqEz3igHGwX5f7Iow2QAAAAA"]
[Sat Jan 10 03:27:37.353489 2026] [:error] [pid 14801:tid 14826] [client 4.218.8.9:39329] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aWFWqd8UWXrz_OQYgF2d2AAAAlc"]
[Sat Jan 10 03:27:39.043815 2026] [:error] [pid 14770:tid 14775] [client 4.218.8.9:39308] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aWFWqx5QbaVZ-6newJZ1igAAAgM"]
[Sat Jan 10 03:27:40.739891 2026] [:error] [pid 14872:tid 14898] [client 4.218.8.9:2850] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aWFWrKIUELhgYLNp1sZ2dQAAAtg"]
[Sat Jan 10 03:27:42.649355 2026] [:error] [pid 30019:tid 30033] [client 4.218.8.9:39353] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aWFWrkz3igHGwX5f7Iow3QAAAAk"]
[Sat Jan 10 03:27:44.564966 2026] [:error] [pid 44848:tid 44861] [client 4.218.8.9:39345] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aWFWsKjajoTJAbEk87wdowAAAEs"]
[Sat Jan 10 03:27:46.429527 2026] [:error] [pid 14801:tid 14809] [client 4.218.8.9:39334] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aWFWst8UWXrz_OQYgF2d2QAAAkY"]
[Sat Jan 10 03:27:48.058724 2026] [:error] [pid 30019:tid 30038] [client 4.218.8.9:38982] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aWFWtEz3igHGwX5f7Iow4wAAAA4"]
[Sat Jan 10 03:27:49.921154 2026] [:error] [pid 30020:tid 30069] [client 4.218.8.9:2846] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aWFWtcrjc66qOisG6L0OmQAAAI8"]
[Sat Jan 10 03:27:51.961393 2026] [:error] [pid 14801:tid 14806] [client 4.218.8.9:2823] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backup.php"] [unique_id "aWFWt98UWXrz_OQYgF2d2wAAAkM"]
[Sat Jan 10 03:27:53.323103 2026] [:error] [pid 14831:tid 14846] [client 4.218.8.9:38983] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backup.php"] [unique_id "aWFWufaKOMCmJcAyBm1yaAAAAo0"]
[Sat Jan 10 03:27:55.556475 2026] [:error] [pid 30021:tid 30088] [client 4.218.8.9:2392] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backup.php"] [unique_id "aWFWuw_M8aRtsTog5J_kCgAAAMc"]
[Sat Jan 10 03:27:57.312533 2026] [:error] [pid 14872:tid 14883] [client 4.218.8.9:39332] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backup.php"] [unique_id "aWFWvaIUELhgYLNp1sZ2fQAAAsk"]
[Sat Jan 10 03:27:59.689797 2026] [:error] [pid 1366:tid 1388] [client 4.218.8.9:2865] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aWFWvxmasveKu8_ec1XdWwAAAZM"]
[Sat Jan 10 03:28:01.563659 2026] [:error] [pid 1366:tid 1392] [client 4.218.8.9:39341] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aWFWwRmasveKu8_ec1XdXQAAAZc"]
[Sat Jan 10 03:28:04.458496 2026] [:error] [pid 14831:tid 14851] [client 4.218.8.9:2395] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aWFWxPaKOMCmJcAyBm1ybgAAApI"]
[Sat Jan 10 03:28:07.118080 2026] [:error] [pid 30020:tid 30073] [client 4.218.8.9:39343] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aWFWx8rjc66qOisG6L0OogAAAJM"]
[Sat Jan 10 03:28:08.666332 2026] [:error] [pid 14801:tid 14821] [client 4.218.8.9:39301] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aWFWyN8UWXrz_OQYgF2d4QAAAlI"]
[Sat Jan 10 03:28:09.600544 2026] [:error] [pid 14831:tid 14854] [client 4.218.8.9:39016] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aWFWyfaKOMCmJcAyBm1ycQAAApU"]
[Sat Jan 10 03:28:11.301232 2026] [:error] [pid 1366:tid 1375] [client 4.218.8.9:39350] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aWFWyxmasveKu8_ec1XdZAAAAYY"]
[Sat Jan 10 03:28:12.246309 2026] [:error] [pid 1366:tid 1385] [client 4.218.8.9:39319] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aWFWzBmasveKu8_ec1XdZgAAAZA"]
[Sat Jan 10 03:28:13.554736 2026] [:error] [pid 14831:tid 14833] [client 4.218.8.9:39346] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aWFWzfaKOMCmJcAyBm1ydAAAAoA"]
[Sat Jan 10 03:28:14.555872 2026] [:error] [pid 14770:tid 14777] [client 4.218.8.9:2973] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aWFWzh5QbaVZ-6newJZ1lwAAAgU"]
[Sat Jan 10 03:28:16.360973 2026] [:error] [pid 14831:tid 14850] [client 4.218.8.9:38990] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aWFW0PaKOMCmJcAyBm1ydgAAApE"]
[Sat Jan 10 03:28:19.075534 2026] [:error] [pid 30020:tid 30075] [client 4.218.8.9:39006] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aWFW08rjc66qOisG6L0OrwAAAJU"]
[Sat Jan 10 03:28:20.233926 2026] [:error] [pid 14831:tid 14840] [client 4.218.8.9:2374] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aWFW1PaKOMCmJcAyBm1yeAAAAoc"]
[Sat Jan 10 03:28:21.392568 2026] [:error] [pid 14872:tid 14879] [client 4.218.8.9:26285] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aWFW1aIUELhgYLNp1sZ2ggAAAsU"]
[Sat Jan 10 03:28:23.043816 2026] [:error] [pid 14831:tid 14843] [client 4.218.8.9:2426] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aWFW1_aKOMCmJcAyBm1yeQAAAoo"]
[Sat Jan 10 03:28:25.081541 2026] [:error] [pid 30021:tid 30098] [client 4.218.8.9:39338] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aWFW2Q_M8aRtsTog5J_kDwAAANE"]
[Sat Jan 10 03:28:36.615210 2026] [:error] [pid 14770:tid 14775] [client 4.218.8.9:2969] [client 4.218.8.9] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".phpquebecoils.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/info.phpquebecoils.com"] [unique_id "aWFW5B5QbaVZ-6newJZ1pgAAAgM"]
[Sat Jan 10 18:17:19.727394 2026] [autoindex:error] [pid 1339:tid 1359] [client 104.131.40.34:57151] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 10 20:27:15.517396 2026] [:error] [pid 31369:tid 31379] [client 223.178.83.178:18377] [client 223.178.83.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.83.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWJFo7gqeMKgT1uTxuKB9gAAAUg"]
[Sat Jan 10 21:34:55.396289 2026] [:error] [pid 1249:tid 1255] [client 143.244.141.160:63704] [client 143.244.141.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aWJVf0td4KGpcdnrDZWorAAAAMM"], referer: binance.com
[Sat Jan 10 22:12:34.994356 2026] [autoindex:error] [pid 31369:tid 31385] [client 143.244.141.160:61217] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 10 22:55:52.226148 2026] [autoindex:error] [pid 1249:tid 1270] [client 138.197.13.155:64129] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 10 23:32:33.418046 2026] [:error] [pid 1125:tid 1145] [client 103.200.22.140:49602] [client 103.200.22.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.22.140, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWJxEXqAWYc4UwRgeOd_vgAAAFI"]
[Sat Jan 10 23:32:35.111509 2026] [:error] [pid 1383:tid 1405] [client 103.200.22.140:49618] [client 103.200.22.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.22.140, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWJxEySbzyQbm27sbcJ_0AAAA9A"]
[Sun Jan 11 05:45:31.966481 2026] [:error] [pid 5152:tid 5183] [client 49.233.45.47:51220] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWLIexm0axGMFrpuXHA1twAAABU"]
[Sun Jan 11 11:56:05.568147 2026] [:error] [pid 40191:tid 40205] [client 119.96.24.54:35328] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWMfVUm2BH1CV1p0EUGL9gAAAsw"]
[Sun Jan 11 18:49:49.118338 2026] [:error] [pid 5155:tid 5228] [client 43.131.243.61:38914] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWOATVgEKFpNs0_zLGkJ8gAAAIw"]
[Sun Jan 11 18:55:49.953699 2026] [:error] [pid 5155:tid 5224] [client 163.5.241.66:46595] [client 163.5.241.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.241.66, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWOBtVgEKFpNs0_zLGkK1QAAAIg"], referer: https://www.google.com/
[Sun Jan 11 18:57:22.260595 2026] [:error] [pid 35730:tid 35746] [client 163.5.241.41:38297] [client 163.5.241.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.241.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWOCEji7U_mfHtESQHk9SQAAAc4"], referer: https://www.google.com/
[Sun Jan 11 18:57:24.637674 2026] [:error] [pid 36611:tid 36627] [client 163.5.241.54:24469] [client 163.5.241.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.241.54, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWOCFD8oZoZHsoTdjhhS7gAAAk4"], referer: https://www.google.com/
[Sun Jan 11 18:59:26.959071 2026] [:error] [pid 11747:tid 11769] [client 163.5.241.53:57283] [client 163.5.241.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.5.241.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWOCjqRFw84LNpZSk7nTPgAAAVI"], referer: https://www.google.com/
[Sun Jan 11 22:49:57.979866 2026] [:error] [pid 35977:tid 35981] [client 43.135.135.57:33468] [client 43.135.135.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWO4lbDST5RMqStLeP2QzAAAAgE"]
[Mon Jan 12 00:44:59.271329 2026] [:error] [pid 5155:tid 5222] [client 221.229.106.25:53432] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWPTi1gEKFpNs0_zLGlBFAAAAIY"]
[Mon Jan 12 00:58:48.254195 2026] [:error] [pid 36611:tid 36629] [client 189.45.190.71:61119] [client 189.45.190.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.45.190.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWPWyD8oZoZHsoTdjhiFwgAAAlA"]
[Mon Jan 12 01:09:10.828565 2026] [:error] [pid 36611:tid 36618] [client 189.45.190.71:61601] [client 189.45.190.71] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aWPZNj8oZoZHsoTdjhiHRAAAAkU"]
[Mon Jan 12 01:09:21.735753 2026] [:error] [pid 40191:tid 40212] [client 82.165.90.14:41066] [client 82.165.90.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWPZQUm2BH1CV1p0EUH05wAAAtM"]
[Mon Jan 12 02:33:10.249297 2026] [:error] [pid 5153:tid 5211] [client 185.252.223.23:60946] [client 185.252.223.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.252.223.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWPs5s1QbNSPD9bRi77_VwAAAFY"]
[Mon Jan 12 02:40:12.923368 2026] [:error] [pid 35730:tid 35756] [client 43.166.226.57:37260] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWPujDi7U_mfHtESQHmSvwAAAdg"]
[Mon Jan 12 13:03:45.681388 2026] [:error] [pid 51863:tid 51867] [client 182.42.105.85:36106] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWSAsT2-QXSEuiZdYYY6swAAAgA"]
[Mon Jan 12 14:24:07.727894 2026] [:error] [pid 51986:tid 52032] [client 43.157.153.236:60690] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWSThxiI5CoFGIbwGZY6hQAAA1E"]
[Mon Jan 12 19:25:41.244158 2026] [:error] [pid 48213:tid 48215] [client 1.15.52.154:49894] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWTaNWRmaItaLCBvAhj2ngAAAMA"]
[Mon Jan 12 20:03:42.279555 2026] [:error] [pid 9303:tid 9313] [client 167.172.235.216:60964] [client 167.172.235.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aWTjHtEoWhpeQ69gVtHqCwAAAUc"], referer: binance.com
[Mon Jan 12 21:45:09.123827 2026] [:error] [pid 48213:tid 48227] [client 43.153.74.75:47454] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWT65WRmaItaLCBvAhgK5QAAAMw"]
[Tue Jan 13 02:10:49.645866 2026] [:error] [pid 48105:tid 48158] [client 120.71.59.24:50030] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWU5KTbe4SdLfSmtJe280wAAAFI"]
[Tue Jan 13 03:21:10.834487 2026] [:error] [pid 27216:tid 27261] [client 62.171.152.107:43518] [client 62.171.152.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWVJpv5SfV7sfpS1nNutIAAAAE8"]
[Tue Jan 13 08:42:54.553930 2026] [:error] [pid 26395:tid 26406] [client 170.106.15.3:60318] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWWVDphRkuVub9GmnFg6UAAAAQk"]
[Tue Jan 13 09:56:38.769559 2026] [:error] [pid 57653:tid 57671] [client 82.165.89.242:49030] [client 82.165.89.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.242, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWWmVoVjCK8w3mABKuHFiwAAAAk"]
[Tue Jan 13 09:56:40.844484 2026] [:error] [pid 57660:tid 57732] [client 82.165.89.242:49046] [client 82.165.89.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.242, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWWmWNMDflPZjoqTTeGYywAAAI8"]
[Tue Jan 13 12:33:48.981074 2026] [:error] [pid 22485:tid 22507] [client 170.106.193.108:50028] [client 170.106.193.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWXLLBzzbghmKib9ie-DfgAAAZQ"]
[Tue Jan 13 18:36:12.028903 2026] [:error] [pid 22485:tid 22496] [client 104.28.235.60:45777] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aWYgHBzzbghmKib9ie_dXwAAAYk"]
[Tue Jan 13 18:36:15.454717 2026] [:error] [pid 33727:tid 33743] [client 104.28.235.60:45783] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/style.php"] [unique_id "aWYgH6HONsygso2w0OO-iwAAAQ4"]
[Tue Jan 13 19:54:18.521065 2026] [:error] [pid 22425:tid 22446] [client 43.157.82.252:56192] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWYyanLEE_SEuOZ0WBTpJQAAAI8"]
[Tue Jan 13 20:57:47.592646 2026] [:error] [pid 27597:tid 27604] [client 4.213.64.52:50877] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx1.php"] [unique_id "aWZBSz8Db8v8HoJ3n4ABTAAAAAU"]
[Tue Jan 13 20:57:48.014677 2026] [:error] [pid 22425:tid 22442] [client 4.213.64.52:50833] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx1.php"] [unique_id "aWZBTHLEE_SEuOZ0WBT1lwAAAIs"]
[Tue Jan 13 20:57:48.465226 2026] [:error] [pid 27597:tid 27610] [client 4.213.64.52:50755] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx1.php"] [unique_id "aWZBTD8Db8v8HoJ3n4ABTgAAAAs"]
[Tue Jan 13 20:57:49.010457 2026] [:error] [pid 22485:tid 22505] [client 4.213.64.52:50780] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nx1.php"] [unique_id "aWZBTRzzbghmKib9ie_2nwAAAZI"]
[Tue Jan 13 20:57:49.390841 2026] [:error] [pid 27597:tid 27603] [client 4.213.64.52:50832] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/avtst.php"] [unique_id "aWZBTT8Db8v8HoJ3n4ABUQAAAAQ"]
[Tue Jan 13 20:57:49.818780 2026] [:error] [pid 27597:tid 27620] [client 4.213.64.52:50825] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/avtst.php"] [unique_id "aWZBTT8Db8v8HoJ3n4ABUgAAABU"]
[Tue Jan 13 20:57:50.204683 2026] [:error] [pid 33727:tid 33750] [client 4.213.64.52:50819] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/avtst.php"] [unique_id "aWZBTqHONsygso2w0OPoKQAAARU"]
[Tue Jan 13 20:57:50.581982 2026] [:error] [pid 27597:tid 27622] [client 4.213.64.52:50862] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/avtst.php"] [unique_id "aWZBTj8Db8v8HoJ3n4ABUwAAABc"]
[Tue Jan 13 20:57:50.953067 2026] [:error] [pid 22389:tid 22397] [client 4.213.64.52:50767] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "aWZBTiLIB_8b411qalJTagAAAUY"]
[Tue Jan 13 20:57:51.323490 2026] [:error] [pid 27597:tid 27607] [client 4.213.64.52:50766] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "aWZBTz8Db8v8HoJ3n4ABVgAAAAg"]
[Tue Jan 13 20:57:51.751469 2026] [:error] [pid 27597:tid 27613] [client 4.213.64.52:50861] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "aWZBTz8Db8v8HoJ3n4ABVwAAAA4"]
[Tue Jan 13 20:57:52.077838 2026] [:error] [pid 27597:tid 27602] [client 4.213.64.52:50869] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "aWZBUD8Db8v8HoJ3n4ABWAAAAAM"]
[Tue Jan 13 20:57:52.444390 2026] [:error] [pid 49677:tid 49687] [client 4.213.64.52:50774] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classgoto24.php"] [unique_id "aWZBUPiKiDrYd_02VZoqvgAAAEY"]
[Tue Jan 13 20:57:52.768081 2026] [:error] [pid 22425:tid 22441] [client 4.213.64.52:50834] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classgoto24.php"] [unique_id "aWZBUHLEE_SEuOZ0WBT1mAAAAIo"]
[Tue Jan 13 20:57:53.169076 2026] [:error] [pid 27597:tid 27617] [client 4.213.64.52:50839] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classgoto24.php"] [unique_id "aWZBUT8Db8v8HoJ3n4ABWgAAABI"]
[Tue Jan 13 20:57:53.491603 2026] [:error] [pid 27597:tid 27616] [client 4.213.64.52:50873] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classgoto24.php"] [unique_id "aWZBUT8Db8v8HoJ3n4ABXAAAABE"]
[Tue Jan 13 20:57:53.830251 2026] [:error] [pid 27597:tid 27601] [client 4.213.64.52:50752] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lx.php"] [unique_id "aWZBUT8Db8v8HoJ3n4ABXQAAAAI"]
[Tue Jan 13 20:57:54.157430 2026] [:error] [pid 27597:tid 27603] [client 4.213.64.52:50760] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lx.php"] [unique_id "aWZBUj8Db8v8HoJ3n4ABXwAAAAQ"]
[Tue Jan 13 20:57:54.492480 2026] [:error] [pid 22425:tid 22433] [client 4.213.64.52:50852] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lx.php"] [unique_id "aWZBUnLEE_SEuOZ0WBT1mQAAAII"]
[Tue Jan 13 20:57:54.826421 2026] [:error] [pid 22425:tid 22432] [client 4.213.64.52:50757] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lx.php"] [unique_id "aWZBUnLEE_SEuOZ0WBT1mgAAAIE"]
[Tue Jan 13 20:57:55.161879 2026] [:error] [pid 22389:tid 22401] [client 4.213.64.52:50816] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/die.php"] [unique_id "aWZBUyLIB_8b411qalJTawAAAUo"]
[Tue Jan 13 20:57:55.528417 2026] [:error] [pid 22389:tid 22405] [client 4.213.64.52:50831] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/die.php"] [unique_id "aWZBUyLIB_8b411qalJTbAAAAU4"]
[Tue Jan 13 20:57:55.868962 2026] [:error] [pid 49677:tid 49689] [client 4.213.64.52:50838] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/die.php"] [unique_id "aWZBU_iKiDrYd_02VZoqwQAAAEg"]
[Tue Jan 13 20:57:56.232619 2026] [:error] [pid 33727:tid 33739] [client 4.213.64.52:50761] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/die.php"] [unique_id "aWZBVKHONsygso2w0OPoLAAAAQo"]
[Tue Jan 13 20:57:56.558416 2026] [:error] [pid 22425:tid 22447] [client 4.213.64.52:50775] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaaa.php"] [unique_id "aWZBVHLEE_SEuOZ0WBT1mwAAAJA"]
[Tue Jan 13 20:57:56.906347 2026] [:error] [pid 22485:tid 22498] [client 4.213.64.52:50846] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaaa.php"] [unique_id "aWZBVBzzbghmKib9ie_2oAAAAYs"]
[Tue Jan 13 20:57:57.245486 2026] [:error] [pid 33727:tid 33738] [client 4.213.64.52:50844] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaaa.php"] [unique_id "aWZBVaHONsygso2w0OPoLgAAAQk"]
[Tue Jan 13 20:57:57.583820 2026] [:error] [pid 33727:tid 33748] [client 4.213.64.52:50777] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaaa.php"] [unique_id "aWZBVaHONsygso2w0OPoLwAAARM"]
[Tue Jan 13 20:57:57.934934 2026] [:error] [pid 33727:tid 33742] [client 4.213.64.52:50856] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bbbb.php"] [unique_id "aWZBVaHONsygso2w0OPoMQAAAQ0"]
[Tue Jan 13 20:57:58.267609 2026] [:error] [pid 33727:tid 33741] [client 4.213.64.52:50763] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bbbb.php"] [unique_id "aWZBVqHONsygso2w0OPoMgAAAQw"]
[Tue Jan 13 20:57:58.634009 2026] [:error] [pid 33727:tid 33729] [client 4.213.64.52:50807] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bbbb.php"] [unique_id "aWZBVqHONsygso2w0OPoMwAAAQA"]
[Tue Jan 13 20:57:58.987696 2026] [:error] [pid 22485:tid 22508] [client 4.213.64.52:50859] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bbbb.php"] [unique_id "aWZBVhzzbghmKib9ie_2oQAAAZU"]
[Tue Jan 13 20:57:59.314266 2026] [:error] [pid 22425:tid 22449] [client 4.213.64.52:11201] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cccc.php"] [unique_id "aWZBV3LEE_SEuOZ0WBT1ngAAAJI"]
[Tue Jan 13 20:57:59.645642 2026] [:error] [pid 33727:tid 33731] [client 4.213.64.52:50853] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cccc.php"] [unique_id "aWZBV6HONsygso2w0OPoNAAAAQI"]
[Tue Jan 13 20:57:59.975141 2026] [:error] [pid 22485:tid 22496] [client 4.213.64.52:50863] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cccc.php"] [unique_id "aWZBVxzzbghmKib9ie_2ogAAAYk"]
[Tue Jan 13 20:58:00.304235 2026] [:error] [pid 33727:tid 33753] [client 4.213.64.52:50780] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cccc.php"] [unique_id "aWZBWKHONsygso2w0OPoNQAAARg"]
[Tue Jan 13 20:58:00.635973 2026] [:error] [pid 49677:tid 49683] [client 4.213.64.52:50788] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aWZBWPiKiDrYd_02VZoqwgAAAEI"]
[Tue Jan 13 20:58:00.959953 2026] [:error] [pid 27597:tid 27623] [client 4.213.64.52:50770] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aWZBWD8Db8v8HoJ3n4ABZAAAABg"]
[Tue Jan 13 20:58:01.281839 2026] [:error] [pid 49677:tid 49685] [client 4.213.64.52:50867] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aWZBWfiKiDrYd_02VZoqwwAAAEQ"]
[Tue Jan 13 20:58:01.615588 2026] [:error] [pid 22389:tid 22399] [client 4.213.64.52:50840] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aWZBWSLIB_8b411qalJTbgAAAUg"]
[Tue Jan 13 20:58:01.947264 2026] [:error] [pid 22389:tid 22402] [client 4.213.64.52:50795] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "aWZBWSLIB_8b411qalJTbwAAAUs"]
[Tue Jan 13 20:58:02.281938 2026] [:error] [pid 33727:tid 33732] [client 4.213.64.52:50872] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "aWZBWqHONsygso2w0OPoOAAAAQM"]
[Tue Jan 13 20:58:02.599393 2026] [:error] [pid 27597:tid 27599] [client 4.213.64.52:50778] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "aWZBWj8Db8v8HoJ3n4ABaAAAAAA"]
[Tue Jan 13 20:58:02.935252 2026] [:error] [pid 22425:tid 22450] [client 4.213.64.52:50829] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "aWZBWnLEE_SEuOZ0WBT1oAAAAJM"]
[Tue Jan 13 20:58:03.278034 2026] [:error] [pid 33727:tid 33750] [client 4.213.64.52:50849] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aWZBW6HONsygso2w0OPoOgAAARU"]
[Tue Jan 13 20:58:03.635366 2026] [:error] [pid 27597:tid 27616] [client 4.213.64.52:50809] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aWZBWz8Db8v8HoJ3n4ABaQAAABE"]
[Tue Jan 13 20:58:03.969139 2026] [:error] [pid 27597:tid 27604] [client 4.213.64.52:50855] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aWZBWz8Db8v8HoJ3n4ABagAAAAU"]
[Tue Jan 13 20:58:04.311806 2026] [:error] [pid 27597:tid 27600] [client 4.213.64.52:50835] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aWZBXD8Db8v8HoJ3n4ABbAAAAAE"]
[Tue Jan 13 20:58:04.671035 2026] [:error] [pid 22425:tid 22445] [client 4.213.64.52:50804] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aWZBXHLEE_SEuOZ0WBT1oQAAAI4"]
[Tue Jan 13 20:58:05.010207 2026] [:error] [pid 22425:tid 22443] [client 4.213.64.52:50758] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aWZBXXLEE_SEuOZ0WBT1ogAAAIw"]
[Tue Jan 13 20:58:05.353095 2026] [:error] [pid 22389:tid 22413] [client 4.213.64.52:50754] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aWZBXSLIB_8b411qalJTcAAAAVY"]
[Tue Jan 13 20:58:05.701332 2026] [:error] [pid 22389:tid 22391] [client 4.213.64.52:50818] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aWZBXSLIB_8b411qalJTcQAAAUA"]
[Tue Jan 13 20:58:06.059663 2026] [:error] [pid 27597:tid 27603] [client 4.213.64.52:50781] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aWZBXj8Db8v8HoJ3n4ABcAAAAAQ"]
[Tue Jan 13 20:58:06.406961 2026] [:error] [pid 27597:tid 27605] [client 4.213.64.52:11145] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aWZBXj8Db8v8HoJ3n4ABcQAAAAY"]
[Tue Jan 13 20:58:06.748867 2026] [:error] [pid 22425:tid 22435] [client 4.213.64.52:50779] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aWZBXnLEE_SEuOZ0WBT1pAAAAIQ"]
[Tue Jan 13 20:58:07.090925 2026] [:error] [pid 22425:tid 22451] [client 4.213.64.52:50868] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aWZBX3LEE_SEuOZ0WBT1pQAAAJQ"]
[Tue Jan 13 20:58:07.443025 2026] [:error] [pid 27597:tid 27620] [client 4.213.64.52:50753] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "aWZBXz8Db8v8HoJ3n4ABdAAAABU"]
[Tue Jan 13 20:58:07.778196 2026] [:error] [pid 27597:tid 27609] [client 4.213.64.52:11229] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "aWZBXz8Db8v8HoJ3n4ABdQAAAAo"]
[Tue Jan 13 20:58:08.133804 2026] [:error] [pid 33727:tid 33747] [client 4.213.64.52:50808] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "aWZBYKHONsygso2w0OPoPQAAARI"]
[Tue Jan 13 20:58:08.487920 2026] [:error] [pid 27597:tid 27621] [client 4.213.64.52:11226] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "aWZBYD8Db8v8HoJ3n4ABdgAAABY"]
[Tue Jan 13 20:58:08.832219 2026] [:error] [pid 22485:tid 22494] [client 4.213.64.52:50842] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "aWZBYBzzbghmKib9ie_2pQAAAYc"]
[Tue Jan 13 20:58:09.198142 2026] [:error] [pid 22389:tid 22396] [client 4.213.64.52:50784] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "aWZBYSLIB_8b411qalJTcgAAAUU"]
[Tue Jan 13 20:58:09.583030 2026] [:error] [pid 22426:tid 22464] [client 4.213.64.52:11233] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "aWZBYdy1Q5toryYTHgO2hQAAAMY"]
[Tue Jan 13 20:58:09.956773 2026] [:error] [pid 49677:tid 49686] [client 4.213.64.52:50820] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "aWZBYfiKiDrYd_02VZoqxgAAAEU"]
[Tue Jan 13 20:58:10.363247 2026] [:error] [pid 22485:tid 22503] [client 4.213.64.52:50802] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aWZBYhzzbghmKib9ie_2pwAAAZA"]
[Tue Jan 13 20:58:10.861162 2026] [:error] [pid 22389:tid 22395] [client 4.213.64.52:11217] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aWZBYiLIB_8b411qalJTdAAAAUQ"]
[Tue Jan 13 20:58:11.317405 2026] [:error] [pid 22485:tid 22500] [client 4.213.64.52:50762] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aWZBYxzzbghmKib9ie_2qAAAAY0"]
[Tue Jan 13 20:58:11.712075 2026] [:error] [pid 22485:tid 22509] [client 4.213.64.52:50858] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aWZBYxzzbghmKib9ie_2qQAAAZY"]
[Tue Jan 13 20:58:12.078486 2026] [:error] [pid 22485:tid 22491] [client 4.213.64.52:50871] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file13.php"] [unique_id "aWZBZBzzbghmKib9ie_2qgAAAYQ"]
[Tue Jan 13 20:58:12.447668 2026] [:error] [pid 22389:tid 22414] [client 4.213.64.52:50878] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file13.php"] [unique_id "aWZBZCLIB_8b411qalJTeAAAAVc"]
[Tue Jan 13 20:58:12.805280 2026] [:error] [pid 49677:tid 49697] [client 4.213.64.52:50875] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file13.php"] [unique_id "aWZBZPiKiDrYd_02VZoqyQAAAFA"]
[Tue Jan 13 20:58:13.178580 2026] [:error] [pid 22485:tid 22506] [client 4.213.64.52:11253] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file13.php"] [unique_id "aWZBZRzzbghmKib9ie_2qwAAAZM"]
[Tue Jan 13 20:58:13.551534 2026] [:error] [pid 33727:tid 33737] [client 4.213.64.52:50857] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "aWZBZaHONsygso2w0OPoRAAAAQg"]
[Tue Jan 13 20:58:13.950476 2026] [:error] [pid 22485:tid 22490] [client 4.213.64.52:50773] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "aWZBZRzzbghmKib9ie_2rgAAAYM"]
[Tue Jan 13 20:58:14.342292 2026] [:error] [pid 22485:tid 22493] [client 4.213.64.52:50854] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "aWZBZhzzbghmKib9ie_2rwAAAYY"]
[Tue Jan 13 20:58:14.791433 2026] [:error] [pid 22389:tid 22403] [client 4.213.64.52:11205] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "aWZBZiLIB_8b411qalJTeQAAAUw"]
[Tue Jan 13 20:58:15.186969 2026] [:error] [pid 22426:tid 22471] [client 4.213.64.52:11210] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3406.php"] [unique_id "aWZBZ9y1Q5toryYTHgO2igAAAM0"]
[Tue Jan 13 20:58:15.573127 2026] [:error] [pid 22425:tid 22433] [client 4.213.64.52:11243] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3406.php"] [unique_id "aWZBZ3LEE_SEuOZ0WBT1qgAAAII"]
[Tue Jan 13 20:58:15.972492 2026] [:error] [pid 33727:tid 33750] [client 4.213.64.52:50764] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3406.php"] [unique_id "aWZBZ6HONsygso2w0OPoRwAAARU"]
[Tue Jan 13 20:58:16.383001 2026] [:error] [pid 22426:tid 22466] [client 4.213.64.52:50771] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3406.php"] [unique_id "aWZBaNy1Q5toryYTHgO2jAAAAMg"]
[Tue Jan 13 20:58:16.798588 2026] [:error] [pid 49677:tid 49699] [client 4.213.64.52:50772] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/963e.php"] [unique_id "aWZBaPiKiDrYd_02VZoqywAAAFI"]
[Tue Jan 13 20:58:17.189820 2026] [:error] [pid 22425:tid 22432] [client 4.213.64.52:50768] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/963e.php"] [unique_id "aWZBaXLEE_SEuOZ0WBT1qwAAAIE"]
[Tue Jan 13 20:58:17.604973 2026] [:error] [pid 22485:tid 22501] [client 4.213.64.52:11222] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/963e.php"] [unique_id "aWZBaRzzbghmKib9ie_2sQAAAY4"]
[Tue Jan 13 20:58:17.998544 2026] [:error] [pid 27597:tid 27615] [client 4.213.64.52:11209] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/963e.php"] [unique_id "aWZBaT8Db8v8HoJ3n4ABiAAAABA"]
[Tue Jan 13 20:58:18.367831 2026] [:error] [pid 49677:tid 49692] [client 4.213.64.52:11225] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hk.php"] [unique_id "aWZBaviKiDrYd_02VZoqzAAAAEs"]
[Tue Jan 13 20:58:18.735762 2026] [:error] [pid 33727:tid 33752] [client 4.213.64.52:50812] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hk.php"] [unique_id "aWZBaqHONsygso2w0OPoSQAAARc"]
[Tue Jan 13 20:58:19.109403 2026] [:error] [pid 49677:tid 49695] [client 4.213.64.52:50865] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hk.php"] [unique_id "aWZBa_iKiDrYd_02VZoq0AAAAE4"]
[Tue Jan 13 20:58:19.486231 2026] [:error] [pid 27597:tid 27599] [client 4.213.64.52:11218] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hk.php"] [unique_id "aWZBaz8Db8v8HoJ3n4ABjQAAAAA"]
[Tue Jan 13 20:58:19.875224 2026] [:error] [pid 49677:tid 49704] [client 4.213.64.52:50765] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cjfuns.php"] [unique_id "aWZBa_iKiDrYd_02VZoq0gAAAFc"]
[Tue Jan 13 20:58:20.254368 2026] [:error] [pid 33727:tid 33742] [client 4.213.64.52:50817] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cjfuns.php"] [unique_id "aWZBbKHONsygso2w0OPoSwAAAQ0"]
[Tue Jan 13 20:58:20.692375 2026] [:error] [pid 49677:tid 49689] [client 4.213.64.52:50828] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cjfuns.php"] [unique_id "aWZBbPiKiDrYd_02VZoq1QAAAEg"]
[Tue Jan 13 20:58:21.069893 2026] [:error] [pid 22389:tid 22396] [client 4.213.64.52:11136] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cjfuns.php"] [unique_id "aWZBbSLIB_8b411qalJThAAAAUU"]
[Tue Jan 13 20:58:21.441493 2026] [:error] [pid 49677:tid 49685] [client 4.213.64.52:50866] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akk.php"] [unique_id "aWZBbfiKiDrYd_02VZoq1gAAAEQ"]
[Tue Jan 13 20:58:21.813564 2026] [:error] [pid 49677:tid 49682] [client 4.213.64.52:11232] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akk.php"] [unique_id "aWZBbfiKiDrYd_02VZoq2AAAAEE"]
[Tue Jan 13 20:58:22.178444 2026] [:error] [pid 49677:tid 49696] [client 4.213.64.52:50789] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akk.php"] [unique_id "aWZBbviKiDrYd_02VZoq2QAAAE8"]
[Tue Jan 13 20:58:22.570709 2026] [:error] [pid 33727:tid 33729] [client 4.213.64.52:50793] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akk.php"] [unique_id "aWZBbqHONsygso2w0OPoTgAAAQA"]
[Tue Jan 13 20:58:22.958970 2026] [:error] [pid 49677:tid 49700] [client 4.213.64.52:50805] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpa.php"] [unique_id "aWZBbviKiDrYd_02VZoq2wAAAFM"]
[Tue Jan 13 20:58:23.337377 2026] [:error] [pid 22426:tid 22477] [client 4.213.64.52:50811] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpa.php"] [unique_id "aWZBb9y1Q5toryYTHgO2jwAAANM"]
[Tue Jan 13 20:58:23.704866 2026] [:error] [pid 49677:tid 49686] [client 4.213.64.52:50860] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpa.php"] [unique_id "aWZBb_iKiDrYd_02VZoq3AAAAEU"]
[Tue Jan 13 20:58:24.079195 2026] [:error] [pid 22485:tid 22488] [client 4.213.64.52:50841] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpa.php"] [unique_id "aWZBcBzzbghmKib9ie_2tAAAAYE"]
[Tue Jan 13 20:58:24.431780 2026] [:error] [pid 22425:tid 22438] [client 4.213.64.52:11206] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "aWZBcHLEE_SEuOZ0WBT1tAAAAIc"]
[Tue Jan 13 20:58:24.825257 2026] [:error] [pid 22425:tid 22451] [client 4.213.64.52:50850] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "aWZBcHLEE_SEuOZ0WBT1tgAAAJQ"]
[Tue Jan 13 20:58:25.194205 2026] [:error] [pid 22485:tid 22503] [client 4.213.64.52:50806] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "aWZBcRzzbghmKib9ie_2twAAAZA"]
[Tue Jan 13 20:58:25.571944 2026] [:error] [pid 33727:tid 33748] [client 4.213.64.52:11167] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "aWZBcaHONsygso2w0OPoUQAAARM"]
[Tue Jan 13 20:58:25.945762 2026] [:error] [pid 22485:tid 22509] [client 4.213.64.52:50783] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "aWZBcRzzbghmKib9ie_2uQAAAZY"]
[Tue Jan 13 20:58:26.319400 2026] [:error] [pid 22426:tid 22472] [client 4.213.64.52:50794] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "aWZBcty1Q5toryYTHgO2kQAAAM4"]
[Tue Jan 13 20:58:26.750139 2026] [:error] [pid 22426:tid 22474] [client 4.213.64.52:11216] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "aWZBcty1Q5toryYTHgO2kwAAANA"]
[Tue Jan 13 20:58:27.135756 2026] [:error] [pid 22485:tid 22490] [client 4.213.64.52:11208] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "aWZBcxzzbghmKib9ie_2vAAAAYM"]
[Tue Jan 13 20:58:27.506388 2026] [:error] [pid 22389:tid 22410] [client 4.213.64.52:11207] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x0x.php"] [unique_id "aWZBcyLIB_8b411qalJThwAAAVM"]
[Tue Jan 13 20:58:27.892587 2026] [:error] [pid 27597:tid 27618] [client 4.213.64.52:50823] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x0x.php"] [unique_id "aWZBcz8Db8v8HoJ3n4ABlgAAABM"]
[Tue Jan 13 20:58:28.276832 2026] [:error] [pid 22485:tid 22487] [client 4.213.64.52:50879] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x0x.php"] [unique_id "aWZBdBzzbghmKib9ie_2wAAAAYA"]
[Tue Jan 13 20:58:28.651812 2026] [:error] [pid 27597:tid 27599] [client 4.213.64.52:50845] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x0x.php"] [unique_id "aWZBdD8Db8v8HoJ3n4ABmQAAAAA"]
[Tue Jan 13 20:58:29.005627 2026] [:error] [pid 49677:tid 49687] [client 4.213.64.52:11204] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aWZBdfiKiDrYd_02VZoq4QAAAEY"]
[Tue Jan 13 20:58:29.355836 2026] [:error] [pid 22389:tid 22411] [client 4.213.64.52:11170] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aWZBdSLIB_8b411qalJTiAAAAVQ"]
[Tue Jan 13 20:58:29.725121 2026] [:error] [pid 22389:tid 22412] [client 4.213.64.52:11235] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aWZBdSLIB_8b411qalJTiQAAAVU"]
[Tue Jan 13 20:58:30.057318 2026] [:error] [pid 27597:tid 27619] [client 4.213.64.52:50759] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aWZBdj8Db8v8HoJ3n4ABoAAAABQ"]
[Tue Jan 13 20:58:30.394079 2026] [:error] [pid 27597:tid 27605] [client 4.213.64.52:50864] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aWZBdj8Db8v8HoJ3n4ABogAAAAY"]
[Tue Jan 13 20:58:30.728248 2026] [:error] [pid 22485:tid 22489] [client 4.213.64.52:50803] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aWZBdhzzbghmKib9ie_2xQAAAYI"]
[Tue Jan 13 20:58:31.064162 2026] [:error] [pid 27597:tid 27620] [client 4.213.64.52:11202] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aWZBdz8Db8v8HoJ3n4ABowAAABU"]
[Tue Jan 13 20:58:31.415598 2026] [:error] [pid 22485:tid 22498] [client 4.213.64.52:50785] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aWZBdxzzbghmKib9ie_2xgAAAYs"]
[Tue Jan 13 20:58:31.766499 2026] [:error] [pid 49677:tid 49696] [client 4.213.64.52:11224] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aWZBd_iKiDrYd_02VZoq4wAAAE8"]
[Tue Jan 13 20:58:32.098625 2026] [:error] [pid 27597:tid 27622] [client 4.213.64.52:11212] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aWZBeD8Db8v8HoJ3n4ABpwAAABc"]
[Tue Jan 13 20:58:32.436778 2026] [:error] [pid 22425:tid 22440] [client 4.213.64.52:50782] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aWZBeHLEE_SEuOZ0WBT1ugAAAIk"]
[Tue Jan 13 20:58:32.766805 2026] [:error] [pid 27597:tid 27608] [client 4.213.64.52:11255] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aWZBeD8Db8v8HoJ3n4ABqgAAAAk"]
[Tue Jan 13 20:58:33.092900 2026] [:error] [pid 27597:tid 27606] [client 4.213.64.52:11237] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aWZBeT8Db8v8HoJ3n4ABqwAAAAc"]
[Tue Jan 13 20:58:33.443618 2026] [:error] [pid 27597:tid 27611] [client 4.213.64.52:11137] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aWZBeT8Db8v8HoJ3n4ABrQAAAAw"]
[Tue Jan 13 20:58:33.791300 2026] [:error] [pid 22389:tid 22391] [client 4.213.64.52:11149] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aWZBeSLIB_8b411qalJTjwAAAUA"]
[Tue Jan 13 20:58:34.127097 2026] [:error] [pid 27597:tid 27619] [client 4.213.64.52:50847] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aWZBej8Db8v8HoJ3n4ABrwAAABQ"]
[Tue Jan 13 20:58:34.530483 2026] [:error] [pid 49677:tid 49686] [client 4.213.64.52:50798] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aWZBeviKiDrYd_02VZoq5QAAAEU"]
[Tue Jan 13 20:58:34.867703 2026] [:error] [pid 49677:tid 49684] [client 4.213.64.52:50874] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aWZBeviKiDrYd_02VZoq5gAAAEM"]
[Tue Jan 13 20:58:35.193018 2026] [:error] [pid 22485:tid 22492] [client 4.213.64.52:50787] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aWZBexzzbghmKib9ie_2xwAAAYU"]
[Tue Jan 13 20:58:35.541632 2026] [:error] [pid 22485:tid 22507] [client 4.213.64.52:50810] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aWZBexzzbghmKib9ie_2yAAAAZQ"]
[Tue Jan 13 20:58:35.894063 2026] [:error] [pid 22485:tid 22509] [client 4.213.64.52:50799] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell1.php"] [unique_id "aWZBexzzbghmKib9ie_2yQAAAZY"]
[Tue Jan 13 20:58:36.230028 2026] [:error] [pid 27597:tid 27620] [client 4.213.64.52:11203] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell1.php"] [unique_id "aWZBfD8Db8v8HoJ3n4ABswAAABU"]
[Tue Jan 13 20:58:36.578587 2026] [:error] [pid 22485:tid 22491] [client 4.213.64.52:11227] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell1.php"] [unique_id "aWZBfBzzbghmKib9ie_2ywAAAYQ"]
[Tue Jan 13 20:58:36.955160 2026] [:error] [pid 22426:tid 22470] [client 4.213.64.52:50815] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell1.php"] [unique_id "aWZBfNy1Q5toryYTHgO2lwAAAMw"]
[Tue Jan 13 20:58:37.313385 2026] [:error] [pid 49677:tid 49702] [client 4.213.64.52:50848] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "aWZBffiKiDrYd_02VZoq6AAAAFU"]
[Tue Jan 13 20:58:37.681718 2026] [:error] [pid 22426:tid 22462] [client 4.213.64.52:11248] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "aWZBfdy1Q5toryYTHgO2mAAAAMQ"]
[Tue Jan 13 20:58:38.077960 2026] [:error] [pid 22426:tid 22461] [client 4.213.64.52:11165] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "aWZBfty1Q5toryYTHgO2mQAAAMM"]
[Tue Jan 13 20:58:38.522484 2026] [:error] [pid 33727:tid 33736] [client 4.213.64.52:11193] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "aWZBfqHONsygso2w0OPoVwAAAQc"]
[Tue Jan 13 20:58:38.875827 2026] [:error] [pid 27597:tid 27616] [client 4.213.64.52:50769] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aWZBfj8Db8v8HoJ3n4ABuQAAABE"]
[Tue Jan 13 20:58:39.245669 2026] [:error] [pid 33727:tid 33739] [client 4.213.64.52:11236] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aWZBf6HONsygso2w0OPoWAAAAQo"]
[Tue Jan 13 20:58:39.629601 2026] [:error] [pid 22485:tid 22506] [client 4.213.64.52:50756] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aWZBfxzzbghmKib9ie_2zgAAAZM"]
[Tue Jan 13 20:58:40.051676 2026] [:error] [pid 33727:tid 33747] [client 4.213.64.52:11234] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aWZBgKHONsygso2w0OPoWwAAARI"]
[Tue Jan 13 20:58:40.418405 2026] [:error] [pid 27597:tid 27599] [client 4.213.64.52:11156] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hexx.php"] [unique_id "aWZBgD8Db8v8HoJ3n4ABvAAAAAA"]
[Tue Jan 13 20:58:40.790231 2026] [:error] [pid 49677:tid 49694] [client 4.213.64.52:11160] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hexx.php"] [unique_id "aWZBgPiKiDrYd_02VZoq6QAAAE0"]
[Tue Jan 13 20:58:41.157091 2026] [:error] [pid 33727:tid 33741] [client 4.213.64.52:11220] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hexx.php"] [unique_id "aWZBgaHONsygso2w0OPoXgAAAQw"]
[Tue Jan 13 20:58:41.496022 2026] [:error] [pid 33727:tid 33729] [client 4.213.64.52:11259] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hexx.php"] [unique_id "aWZBgaHONsygso2w0OPoXwAAAQA"]
[Tue Jan 13 20:58:41.844822 2026] [:error] [pid 22485:tid 22487] [client 4.213.64.52:50813] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/444.php"] [unique_id "aWZBgRzzbghmKib9ie_2zwAAAYA"]
[Tue Jan 13 20:58:42.205485 2026] [:error] [pid 33727:tid 33745] [client 4.213.64.52:11171] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/444.php"] [unique_id "aWZBgqHONsygso2w0OPoYAAAARA"]
[Tue Jan 13 20:58:42.563108 2026] [:error] [pid 22389:tid 22400] [client 4.213.64.52:50814] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/444.php"] [unique_id "aWZBgiLIB_8b411qalJTlwAAAUk"]
[Tue Jan 13 20:58:42.954461 2026] [:error] [pid 27597:tid 27610] [client 4.213.64.52:11176] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/444.php"] [unique_id "aWZBgj8Db8v8HoJ3n4ABwAAAAAs"]
[Tue Jan 13 20:58:43.312676 2026] [:error] [pid 22485:tid 22489] [client 4.213.64.52:11244] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aWZBgxzzbghmKib9ie_20QAAAYI"]
[Tue Jan 13 20:58:43.659247 2026] [:error] [pid 27597:tid 27622] [client 4.213.64.52:11239] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aWZBgz8Db8v8HoJ3n4ABwQAAABc"]
[Tue Jan 13 20:58:44.012302 2026] [:error] [pid 33727:tid 33731] [client 4.213.64.52:50824] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aWZBhKHONsygso2w0OPoYgAAAQI"]
[Tue Jan 13 20:58:44.362365 2026] [:error] [pid 33727:tid 33749] [client 4.213.64.52:11194] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aWZBhKHONsygso2w0OPoZAAAARQ"]
[Tue Jan 13 20:58:44.712077 2026] [:error] [pid 33727:tid 33746] [client 4.213.64.52:11178] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aWZBhKHONsygso2w0OPoZgAAARE"]
[Tue Jan 13 20:58:45.072800 2026] [:error] [pid 22425:tid 22453] [client 4.213.64.52:50876] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aWZBhXLEE_SEuOZ0WBT1wAAAAJY"]
[Tue Jan 13 20:58:45.389951 2026] [:error] [pid 33727:tid 33732] [client 4.213.64.52:11241] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aWZBhaHONsygso2w0OPoZwAAAQM"]
[Tue Jan 13 20:58:45.722838 2026] [:error] [pid 22485:tid 22498] [client 4.213.64.52:50776] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aWZBhRzzbghmKib9ie_20gAAAYs"]
[Tue Jan 13 20:58:59.300968 2026] [:error] [pid 22389:tid 22411] [client 4.213.64.52:11221] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r.php"] [unique_id "aWZBkyLIB_8b411qalJTpwAAAVQ"]
[Tue Jan 13 20:58:59.622715 2026] [:error] [pid 27597:tid 27605] [client 4.213.64.52:50797] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r.php"] [unique_id "aWZBkz8Db8v8HoJ3n4ABzAAAAAY"]
[Tue Jan 13 20:58:59.956688 2026] [:error] [pid 27597:tid 27620] [client 4.213.64.52:50801] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r.php"] [unique_id "aWZBkz8Db8v8HoJ3n4ABzQAAABU"]
[Tue Jan 13 20:59:00.382858 2026] [:error] [pid 49677:tid 49685] [client 4.213.64.52:11240] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r.php"] [unique_id "aWZBlPiKiDrYd_02VZoq7gAAAEQ"]
[Tue Jan 13 20:59:00.747665 2026] [:error] [pid 22485:tid 22511] [client 4.213.64.52:11215] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aWZBlBzzbghmKib9ie_22QAAAZg"]
[Tue Jan 13 20:59:01.185120 2026] [:error] [pid 49677:tid 49696] [client 4.213.64.52:11093] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aWZBlfiKiDrYd_02VZoq8gAAAE8"]
[Tue Jan 13 20:59:01.536419 2026] [:error] [pid 22485:tid 22502] [client 4.213.64.52:11188] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aWZBlRzzbghmKib9ie_22wAAAY8"]
[Tue Jan 13 20:59:01.905226 2026] [:error] [pid 22485:tid 22505] [client 4.213.64.52:50800] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-info.php"] [unique_id "aWZBlRzzbghmKib9ie_23QAAAZI"]
[Tue Jan 13 20:59:02.400518 2026] [:error] [pid 49677:tid 49701] [client 4.213.64.52:50846] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aWZBlviKiDrYd_02VZoq8wAAAFQ"]
[Tue Jan 13 20:59:02.739662 2026] [:error] [pid 49677:tid 49700] [client 4.213.64.52:50826] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aWZBlviKiDrYd_02VZoq9QAAAFM"]
[Tue Jan 13 20:59:03.085870 2026] [:error] [pid 27597:tid 27623] [client 4.213.64.52:11163] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aWZBlz8Db8v8HoJ3n4AB0gAAABg"]
[Tue Jan 13 20:59:03.684425 2026] [:error] [pid 22425:tid 22433] [client 4.213.64.52:11172] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aWZBl3LEE_SEuOZ0WBT10AAAAII"]
[Tue Jan 13 20:59:04.010412 2026] [:error] [pid 22425:tid 22437] [client 4.213.64.52:50821] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aWZBmHLEE_SEuOZ0WBT10QAAAIY"]
[Tue Jan 13 20:59:04.370895 2026] [:error] [pid 22425:tid 22440] [client 4.213.64.52:11254] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aWZBmHLEE_SEuOZ0WBT10wAAAIk"]
[Tue Jan 13 20:59:04.711913 2026] [:error] [pid 27597:tid 27611] [client 4.213.64.52:50822] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aWZBmD8Db8v8HoJ3n4AB1QAAAAw"]
[Tue Jan 13 20:59:05.125655 2026] [:error] [pid 27597:tid 27599] [client 4.213.64.52:50791] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aWZBmT8Db8v8HoJ3n4AB2AAAAAA"]
[Tue Jan 13 20:59:05.505168 2026] [:error] [pid 22425:tid 22439] [client 4.213.64.52:11150] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aWZBmXLEE_SEuOZ0WBT11gAAAIg"]
[Tue Jan 13 20:59:05.866898 2026] [:error] [pid 22389:tid 22399] [client 4.213.64.52:11166] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aWZBmSLIB_8b411qalJTrAAAAUg"]
[Tue Jan 13 20:59:06.199014 2026] [:error] [pid 22485:tid 22488] [client 4.213.64.52:11120] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aWZBmhzzbghmKib9ie_24QAAAYE"]
[Tue Jan 13 20:59:06.611499 2026] [:error] [pid 33727:tid 33739] [client 4.213.64.52:50790] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aWZBmqHONsygso2w0OPoggAAAQo"]
[Tue Jan 13 20:59:07.073956 2026] [:error] [pid 27597:tid 27605] [client 4.213.64.52:11157] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aWZBmz8Db8v8HoJ3n4AB3gAAAAY"]
[Tue Jan 13 20:59:07.396336 2026] [:error] [pid 27597:tid 27610] [client 4.213.64.52:11260] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aWZBmz8Db8v8HoJ3n4AB4AAAAAs"]
[Tue Jan 13 20:59:07.765485 2026] [:error] [pid 49677:tid 49694] [client 4.213.64.52:11151] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aWZBm_iKiDrYd_02VZoq-QAAAE0"]
[Tue Jan 13 20:59:08.126785 2026] [:error] [pid 22425:tid 22446] [client 4.213.64.52:11143] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aWZBnHLEE_SEuOZ0WBT16gAAAI8"]
[Tue Jan 13 20:59:08.479796 2026] [:error] [pid 27597:tid 27607] [client 4.213.64.52:11154] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aWZBnD8Db8v8HoJ3n4AB5QAAAAg"]
[Tue Jan 13 20:59:08.820520 2026] [:error] [pid 27597:tid 27616] [client 4.213.64.52:11175] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aWZBnD8Db8v8HoJ3n4AB6AAAABE"]
[Tue Jan 13 20:59:09.196006 2026] [:error] [pid 22389:tid 22413] [client 4.213.64.52:11238] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aWZBnSLIB_8b411qalJTsgAAAVY"]
[Tue Jan 13 20:59:09.561490 2026] [:error] [pid 22425:tid 22455] [client 4.213.64.52:11139] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aWZBnXLEE_SEuOZ0WBT19QAAAJg"]
[Tue Jan 13 20:59:09.945608 2026] [:error] [pid 27597:tid 27608] [client 4.213.64.52:11182] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aWZBnT8Db8v8HoJ3n4AB6wAAAAk"]
[Tue Jan 13 20:59:10.310202 2026] [:error] [pid 22425:tid 22442] [client 4.213.64.52:11174] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aWZBnnLEE_SEuOZ0WBT1_AAAAIs"]
[Tue Jan 13 20:59:10.647726 2026] [:error] [pid 27597:tid 27605] [client 4.213.64.52:50836] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aWZBnj8Db8v8HoJ3n4AB7QAAAAY"]
[Tue Jan 13 20:59:11.046713 2026] [:error] [pid 27597:tid 27610] [client 4.213.64.52:11247] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aWZBnz8Db8v8HoJ3n4AB7gAAAAs"]
[Tue Jan 13 20:59:11.390172 2026] [:error] [pid 27597:tid 27618] [client 4.213.64.52:11106] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aWZBnz8Db8v8HoJ3n4AB8QAAABM"]
[Tue Jan 13 20:59:11.732215 2026] [:error] [pid 22389:tid 22414] [client 4.213.64.52:11116] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aWZBnyLIB_8b411qalJTtQAAAVc"]
[Tue Jan 13 20:59:12.074233 2026] [:error] [pid 22425:tid 22436] [client 4.213.64.52:11146] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aWZBoHLEE_SEuOZ0WBT2FAAAAIU"]
[Tue Jan 13 20:59:12.442396 2026] [:error] [pid 22389:tid 22409] [client 4.213.64.52:11256] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aWZBoCLIB_8b411qalJTtgAAAVI"]
[Tue Jan 13 20:59:12.785703 2026] [:error] [pid 22485:tid 22495] [client 4.213.64.52:11223] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aWZBoBzzbghmKib9ie_28gAAAYg"]
[Tue Jan 13 20:59:13.135261 2026] [:error] [pid 33727:tid 33748] [client 4.213.64.52:50851] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aWZBoaHONsygso2w0OPoiQAAARM"]
[Tue Jan 13 20:59:13.524042 2026] [:error] [pid 22425:tid 22448] [client 4.213.64.52:11127] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aWZBoXLEE_SEuOZ0WBT2JgAAAJE"]
[Tue Jan 13 20:59:13.930803 2026] [:error] [pid 49677:tid 49705] [client 4.213.64.52:11022] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asas.php"] [unique_id "aWZBofiKiDrYd_02VZoq-gAAAFg"]
[Tue Jan 13 20:59:14.288808 2026] [:error] [pid 27597:tid 27607] [client 4.213.64.52:11213] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rk2.php"] [unique_id "aWZBoj8Db8v8HoJ3n4AB8wAAAAg"]
[Tue Jan 13 20:59:14.631160 2026] [:error] [pid 22425:tid 22449] [client 4.213.64.52:50796] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rk2.php"] [unique_id "aWZBonLEE_SEuOZ0WBT2NQAAAJI"]
[Tue Jan 13 20:59:15.072907 2026] [:error] [pid 22425:tid 22434] [client 4.213.64.52:11214] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rk2.php"] [unique_id "aWZBo3LEE_SEuOZ0WBT2OAAAAIM"]
[Tue Jan 13 20:59:15.418773 2026] [:error] [pid 22425:tid 22455] [client 4.213.64.52:11185] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rk2.php"] [unique_id "aWZBo3LEE_SEuOZ0WBT2OQAAAJg"]
[Tue Jan 13 20:59:15.791773 2026] [:error] [pid 22485:tid 22492] [client 4.213.64.52:11261] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aWZBoxzzbghmKib9ie_29gAAAYU"]
[Tue Jan 13 20:59:16.158059 2026] [:error] [pid 49677:tid 49687] [client 4.213.64.52:11134] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aWZBpPiKiDrYd_02VZoq-wAAAEY"]
[Tue Jan 13 20:59:16.546226 2026] [:error] [pid 22389:tid 22401] [client 4.213.64.52:11155] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aWZBpCLIB_8b411qalJTugAAAUo"]
[Tue Jan 13 20:59:16.897426 2026] [:error] [pid 22389:tid 22404] [client 4.213.64.52:11198] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aWZBpCLIB_8b411qalJTvAAAAU0"]
[Tue Jan 13 20:59:17.264860 2026] [:error] [pid 22389:tid 22399] [client 4.213.64.52:11258] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aWZBpSLIB_8b411qalJTvQAAAUg"]
[Tue Jan 13 20:59:17.651984 2026] [:error] [pid 22426:tid 22477] [client 4.213.64.52:11101] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aWZBpdy1Q5toryYTHgO2nwAAANM"]
[Tue Jan 13 20:59:18.027389 2026] [:error] [pid 22389:tid 22413] [client 4.213.64.52:11263] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aWZBpiLIB_8b411qalJTwAAAAVY"]
[Tue Jan 13 20:59:18.429353 2026] [:error] [pid 22485:tid 22491] [client 4.213.64.52:11142] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aWZBphzzbghmKib9ie_2-AAAAYQ"]
[Tue Jan 13 20:59:18.800189 2026] [:error] [pid 33727:tid 33732] [client 4.213.64.52:11105] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aespa.php"] [unique_id "aWZBpqHONsygso2w0OPojgAAAQM"]
[Tue Jan 13 20:59:19.183451 2026] [:error] [pid 22485:tid 22490] [client 4.213.64.52:11252] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aespa.php"] [unique_id "aWZBpxzzbghmKib9ie_2-QAAAYM"]
[Tue Jan 13 20:59:19.569797 2026] [:error] [pid 22485:tid 22506] [client 4.213.64.52:11228] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aespa.php"] [unique_id "aWZBpxzzbghmKib9ie_2-wAAAZM"]
[Tue Jan 13 20:59:19.964921 2026] [:error] [pid 49677:tid 49704] [client 4.213.64.52:11098] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aespa.php"] [unique_id "aWZBp_iKiDrYd_02VZoq_AAAAFc"]
[Tue Jan 13 20:59:20.355108 2026] [:error] [pid 22389:tid 22396] [client 4.213.64.52:11144] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aWZBqCLIB_8b411qalJTxAAAAUU"]
[Tue Jan 13 20:59:20.722174 2026] [:error] [pid 27597:tid 27619] [client 4.213.64.52:11025] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aWZBqD8Db8v8HoJ3n4AB-AAAABQ"]
[Tue Jan 13 20:59:21.083089 2026] [:error] [pid 22389:tid 22398] [client 4.213.64.52:11103] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aWZBqSLIB_8b411qalJTxQAAAUc"]
[Tue Jan 13 20:59:21.509909 2026] [:error] [pid 49677:tid 49689] [client 4.213.64.52:11249] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aWZBqfiKiDrYd_02VZoq_QAAAEg"]
[Tue Jan 13 20:59:21.908403 2026] [:error] [pid 33727:tid 33736] [client 4.213.64.52:11162] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aWZBqaHONsygso2w0OPokAAAAQc"]
[Tue Jan 13 20:59:22.281373 2026] [:error] [pid 33727:tid 33735] [client 4.213.64.52:11090] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aWZBqqHONsygso2w0OPokQAAAQY"]
[Tue Jan 13 20:59:22.673341 2026] [:error] [pid 49677:tid 49681] [client 4.213.64.52:11197] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aWZBqviKiDrYd_02VZoq_wAAAEA"]
[Tue Jan 13 20:59:23.049040 2026] [:error] [pid 49677:tid 49685] [client 4.213.64.52:11138] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aWZBq_iKiDrYd_02VZorAAAAAEQ"]
[Tue Jan 13 20:59:23.428472 2026] [:error] [pid 49677:tid 49703] [client 4.213.64.52:11023] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aWZBq_iKiDrYd_02VZorAgAAAFY"]
[Tue Jan 13 20:59:23.818711 2026] [:error] [pid 33727:tid 33747] [client 4.213.64.52:11164] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aWZBq6HONsygso2w0OPokgAAARI"]
[Tue Jan 13 20:59:24.196815 2026] [:error] [pid 27597:tid 27603] [client 4.213.64.52:11257] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aWZBrD8Db8v8HoJ3n4AB-QAAAAQ"]
[Tue Jan 13 20:59:24.632411 2026] [:error] [pid 33727:tid 33743] [client 4.213.64.52:11084] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aWZBrKHONsygso2w0OPokwAAAQ4"]
[Tue Jan 13 20:59:25.014487 2026] [:error] [pid 49677:tid 49698] [client 4.213.64.52:11088] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aWZBrfiKiDrYd_02VZorAwAAAFE"]
[Tue Jan 13 20:59:25.399462 2026] [:error] [pid 49677:tid 49700] [client 4.213.64.52:11183] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aWZBrfiKiDrYd_02VZorBAAAAFM"]
[Tue Jan 13 20:59:25.767003 2026] [:error] [pid 22426:tid 22482] [client 4.213.64.52:11169] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aWZBrdy1Q5toryYTHgO2pgAAANg"]
[Tue Jan 13 20:59:26.136383 2026] [:error] [pid 22426:tid 22465] [client 4.213.64.52:11179] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aWZBrty1Q5toryYTHgO2qAAAAMc"]
[Tue Jan 13 20:59:26.495015 2026] [:error] [pid 49677:tid 49684] [client 4.213.64.52:11186] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aWZBrviKiDrYd_02VZorBgAAAEM"]
[Tue Jan 13 20:59:26.869809 2026] [:error] [pid 49677:tid 49697] [client 4.213.64.52:11125] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aWZBrviKiDrYd_02VZorBwAAAFA"]
[Tue Jan 13 20:59:27.233408 2026] [:error] [pid 49677:tid 49691] [client 4.213.64.52:11096] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aWZBr_iKiDrYd_02VZorCAAAAEo"]
[Tue Jan 13 20:59:27.594702 2026] [:error] [pid 22425:tid 22436] [client 4.213.64.52:11073] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aWZBr3LEE_SEuOZ0WBT2PAAAAIU"]
[Tue Jan 13 20:59:27.955211 2026] [:error] [pid 22425:tid 22439] [client 4.213.64.52:50870] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aWZBr3LEE_SEuOZ0WBT2PgAAAIg"]
[Tue Jan 13 20:59:28.358815 2026] [:error] [pid 22425:tid 22434] [client 4.213.64.52:11159] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aWZBsHLEE_SEuOZ0WBT2QwAAAIM"]
[Tue Jan 13 20:59:28.757733 2026] [:error] [pid 22389:tid 22408] [client 4.213.64.52:11181] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aWZBsCLIB_8b411qalJTywAAAVE"]
[Tue Jan 13 20:59:29.135364 2026] [:error] [pid 22425:tid 22432] [client 4.213.64.52:11219] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aWZBsXLEE_SEuOZ0WBT2RgAAAIE"]
[Tue Jan 13 20:59:29.516248 2026] [:error] [pid 22426:tid 22469] [client 4.213.64.52:11196] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmrlpc.php"] [unique_id "aWZBsdy1Q5toryYTHgO2qgAAAMs"]
[Tue Jan 13 20:59:29.877979 2026] [:error] [pid 33727:tid 33737] [client 4.213.64.52:11089] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmrlpc.php"] [unique_id "aWZBsaHONsygso2w0OPomwAAAQg"]
[Tue Jan 13 20:59:30.246132 2026] [:error] [pid 49677:tid 49682] [client 4.213.64.52:11230] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmrlpc.php"] [unique_id "aWZBsviKiDrYd_02VZorIAAAAEE"]
[Tue Jan 13 20:59:30.624207 2026] [:error] [pid 49677:tid 49702] [client 4.213.64.52:11028] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmrlpc.php"] [unique_id "aWZBsviKiDrYd_02VZorIQAAAFU"]
[Tue Jan 13 20:59:31.009726 2026] [:error] [pid 49677:tid 49694] [client 4.213.64.52:11026] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aWZBs_iKiDrYd_02VZorIgAAAE0"]
[Tue Jan 13 20:59:31.376829 2026] [:error] [pid 49677:tid 49692] [client 4.213.64.52:11100] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aWZBs_iKiDrYd_02VZorJQAAAEs"]
[Tue Jan 13 20:59:31.753618 2026] [:error] [pid 49677:tid 49695] [client 4.213.64.52:11124] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aWZBs_iKiDrYd_02VZorJgAAAE4"]
[Tue Jan 13 20:59:32.136683 2026] [:error] [pid 33727:tid 33745] [client 4.213.64.52:11092] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aWZBtKHONsygso2w0OPonAAAARA"]
[Tue Jan 13 20:59:32.516225 2026] [:error] [pid 27597:tid 27623] [client 4.213.64.52:11104] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js.php"] [unique_id "aWZBtD8Db8v8HoJ3n4ACBwAAABg"]
[Tue Jan 13 20:59:32.865391 2026] [:error] [pid 33727:tid 33738] [client 4.213.64.52:11211] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js.php"] [unique_id "aWZBtKHONsygso2w0OPongAAAQk"]
[Tue Jan 13 20:59:33.216193 2026] [:error] [pid 27597:tid 27608] [client 4.213.64.52:11187] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js.php"] [unique_id "aWZBtT8Db8v8HoJ3n4ACCQAAAAk"]
[Tue Jan 13 20:59:33.563795 2026] [:error] [pid 22485:tid 22502] [client 4.213.64.52:50837] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js.php"] [unique_id "aWZBtRzzbghmKib9ie_2_QAAAY8"]
[Tue Jan 13 20:59:33.924314 2026] [:error] [pid 27597:tid 27615] [client 4.213.64.52:11147] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aWZBtT8Db8v8HoJ3n4ACCgAAABA"]
[Tue Jan 13 20:59:34.335856 2026] [:error] [pid 33727:tid 33730] [client 4.213.64.52:11126] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aWZBtqHONsygso2w0OPonwAAAQE"]
[Tue Jan 13 20:59:34.691661 2026] [:error] [pid 27597:tid 27612] [client 4.213.64.52:11168] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aWZBtj8Db8v8HoJ3n4ACDAAAAA0"]
[Tue Jan 13 20:59:35.052494 2026] [:error] [pid 27597:tid 27603] [client 4.213.64.52:11030] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aWZBtz8Db8v8HoJ3n4ACDQAAAAQ"]
[Tue Jan 13 20:59:35.412034 2026] [:error] [pid 27597:tid 27601] [client 4.213.64.52:10960] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aWZBtz8Db8v8HoJ3n4ACDgAAAAI"]
[Tue Jan 13 20:59:35.772638 2026] [:error] [pid 49677:tid 49685] [client 4.213.64.52:11115] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aWZBt_iKiDrYd_02VZorKAAAAEQ"]
[Tue Jan 13 20:59:36.156817 2026] [:error] [pid 22426:tid 22463] [client 4.213.64.52:11184] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aWZBuNy1Q5toryYTHgO2qwAAAMU"]
[Tue Jan 13 20:59:36.536317 2026] [:error] [pid 22426:tid 22471] [client 4.213.64.52:11097] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aWZBuNy1Q5toryYTHgO2rAAAAM0"]
[Tue Jan 13 20:59:36.889730 2026] [:error] [pid 27597:tid 27606] [client 4.213.64.52:10947] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oivcl.php"] [unique_id "aWZBuD8Db8v8HoJ3n4ACEwAAAAc"]
[Tue Jan 13 20:59:37.295780 2026] [:error] [pid 27597:tid 27607] [client 4.213.64.52:11153] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oivcl.php"] [unique_id "aWZBuT8Db8v8HoJ3n4ACFQAAAAg"]
[Tue Jan 13 20:59:37.663109 2026] [:error] [pid 22485:tid 22505] [client 4.213.64.52:11186] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oivcl.php"] [unique_id "aWZBuRzzbghmKib9ie_2_gAAAZI"]
[Tue Jan 13 20:59:38.049336 2026] [:error] [pid 22389:tid 22414] [client 4.213.64.52:11114] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oivcl.php"] [unique_id "aWZBuiLIB_8b411qalJT0QAAAVc"]
[Tue Jan 13 20:59:38.443215 2026] [:error] [pid 22426:tid 22466] [client 4.213.64.52:11109] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwwha.php"] [unique_id "aWZButy1Q5toryYTHgO2rQAAAMg"]
[Tue Jan 13 20:59:38.846202 2026] [:error] [pid 22389:tid 22405] [client 4.213.64.52:11190] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwwha.php"] [unique_id "aWZBuiLIB_8b411qalJT0gAAAU4"]
[Tue Jan 13 20:59:39.223714 2026] [:error] [pid 22389:tid 22392] [client 4.213.64.52:50786] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwwha.php"] [unique_id "aWZBuyLIB_8b411qalJT0wAAAUE"]
[Tue Jan 13 20:59:39.645271 2026] [:error] [pid 27597:tid 27599] [client 4.213.64.52:11107] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwwha.php"] [unique_id "aWZBuz8Db8v8HoJ3n4ACFgAAAAA"]
[Tue Jan 13 20:59:40.007902 2026] [:error] [pid 33727:tid 33746] [client 4.213.64.52:11008] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jvcpa.php"] [unique_id "aWZBvKHONsygso2w0OPooQAAARE"]
[Tue Jan 13 20:59:40.424674 2026] [:error] [pid 22389:tid 22394] [client 4.213.64.52:11039] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jvcpa.php"] [unique_id "aWZBvCLIB_8b411qalJT1AAAAUM"]
[Tue Jan 13 20:59:40.756539 2026] [:error] [pid 27597:tid 27616] [client 4.213.64.52:11250] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jvcpa.php"] [unique_id "aWZBvD8Db8v8HoJ3n4ACFwAAABE"]
[Tue Jan 13 20:59:41.083928 2026] [:error] [pid 33727:tid 33752] [client 4.213.64.52:11135] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jvcpa.php"] [unique_id "aWZBvaHONsygso2w0OPopAAAARc"]
[Tue Jan 13 20:59:41.420511 2026] [:error] [pid 27597:tid 27617] [client 4.213.64.52:11246] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lddxs.php"] [unique_id "aWZBvT8Db8v8HoJ3n4ACGgAAABI"]
[Tue Jan 13 20:59:41.758461 2026] [:error] [pid 33727:tid 33748] [client 4.213.64.52:50843] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lddxs.php"] [unique_id "aWZBvaHONsygso2w0OPopwAAARM"]
[Tue Jan 13 20:59:42.085257 2026] [:error] [pid 22485:tid 22508] [client 4.213.64.52:11010] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lddxs.php"] [unique_id "aWZBvhzzbghmKib9ie_3AgAAAZU"]
[Tue Jan 13 20:59:42.427707 2026] [:error] [pid 33727:tid 33731] [client 4.213.64.52:11158] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lddxs.php"] [unique_id "aWZBvqHONsygso2w0OPoqAAAAQI"]
[Tue Jan 13 20:59:42.844461 2026] [:error] [pid 22426:tid 22473] [client 4.213.64.52:11081] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1337.php"] [unique_id "aWZBvty1Q5toryYTHgO2rgAAAM8"]
[Tue Jan 13 20:59:43.303643 2026] [:error] [pid 22426:tid 22467] [client 4.213.64.52:11262] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1337.php"] [unique_id "aWZBv9y1Q5toryYTHgO2rwAAAMk"]
[Tue Jan 13 20:59:43.687043 2026] [:error] [pid 33727:tid 33732] [client 4.213.64.52:11019] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1337.php"] [unique_id "aWZBv6HONsygso2w0OPorQAAAQM"]
[Tue Jan 13 20:59:44.060945 2026] [:error] [pid 33727:tid 33747] [client 4.213.64.52:11065] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1337.php"] [unique_id "aWZBwKHONsygso2w0OPosAAAARI"]
[Tue Jan 13 20:59:44.421304 2026] [:error] [pid 33727:tid 33742] [client 4.213.64.52:11092] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-miiss.php.php"] [unique_id "aWZBwKHONsygso2w0OPosgAAAQ0"]
[Tue Jan 13 20:59:44.835525 2026] [:error] [pid 33727:tid 33729] [client 4.213.64.52:11113] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-miiss.php.php"] [unique_id "aWZBwKHONsygso2w0OPotAAAAQA"]
[Tue Jan 13 20:59:45.193183 2026] [:error] [pid 22485:tid 22509] [client 4.213.64.52:10987] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-miiss.php.php"] [unique_id "aWZBwRzzbghmKib9ie_3BgAAAZY"]
[Tue Jan 13 20:59:45.538230 2026] [:error] [pid 27597:tid 27622] [client 4.213.64.52:11234] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-miiss.php.php"] [unique_id "aWZBwT8Db8v8HoJ3n4ACHQAAABc"]
[Tue Jan 13 20:59:45.939930 2026] [:error] [pid 27597:tid 27606] [client 4.213.64.52:11012] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "aWZBwT8Db8v8HoJ3n4ACIAAAAAc"]
[Tue Jan 13 20:59:46.261297 2026] [:error] [pid 22389:tid 22406] [client 4.213.64.52:11076] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "aWZBwiLIB_8b411qalJT2QAAAU8"]
[Tue Jan 13 20:59:46.637232 2026] [:error] [pid 22426:tid 22460] [client 4.213.64.52:11082] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "aWZBwty1Q5toryYTHgO2sAAAAMI"]
[Tue Jan 13 20:59:47.006468 2026] [:error] [pid 22426:tid 22480] [client 4.213.64.52:11074] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "aWZBw9y1Q5toryYTHgO2sQAAANY"]
[Tue Jan 13 20:59:47.383739 2026] [:error] [pid 22425:tid 22446] [client 4.213.64.52:11111] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aWZBw3LEE_SEuOZ0WBT2UQAAAI8"]
[Tue Jan 13 20:59:47.774431 2026] [:error] [pid 27597:tid 27618] [client 4.213.64.52:11199] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aWZBwz8Db8v8HoJ3n4ACIQAAABM"]
[Tue Jan 13 20:59:48.104854 2026] [:error] [pid 33727:tid 33737] [client 4.213.64.52:11130] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aWZBxKHONsygso2w0OPougAAAQg"]
[Tue Jan 13 20:59:48.516212 2026] [:error] [pid 22389:tid 22413] [client 4.213.64.52:11110] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aWZBxCLIB_8b411qalJT3gAAAVY"]
[Tue Jan 13 20:59:48.918680 2026] [:error] [pid 27597:tid 27623] [client 4.213.64.52:11121] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aWZBxD8Db8v8HoJ3n4ACJgAAABg"]
[Tue Jan 13 20:59:49.307253 2026] [:error] [pid 27597:tid 27614] [client 4.213.64.52:11037] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aWZBxT8Db8v8HoJ3n4ACKAAAAA8"]
[Tue Jan 13 20:59:49.656952 2026] [:error] [pid 22426:tid 22475] [client 4.213.64.52:10967] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aWZBxdy1Q5toryYTHgO2swAAANE"]
[Tue Jan 13 20:59:50.104975 2026] [:error] [pid 33727:tid 33743] [client 4.213.64.52:11192] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aWZBxqHONsygso2w0OPowwAAAQ4"]
[Tue Jan 13 20:59:50.447366 2026] [:error] [pid 33727:tid 33729] [client 4.213.64.52:11122] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aWZBxqHONsygso2w0OPoxAAAAQA"]
[Tue Jan 13 20:59:50.815155 2026] [:error] [pid 33727:tid 33744] [client 4.213.64.52:11132] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aWZBxqHONsygso2w0OPoyAAAAQ8"]
[Tue Jan 13 20:59:51.203690 2026] [:error] [pid 22485:tid 22490] [client 4.213.64.52:11054] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aWZBxxzzbghmKib9ie_3CAAAAYM"]
[Tue Jan 13 20:59:51.521772 2026] [:error] [pid 49677:tid 49697] [client 4.213.64.52:10952] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "aWZBx_iKiDrYd_02VZorKwAAAFA"]
[Tue Jan 13 20:59:51.878574 2026] [:error] [pid 22485:tid 22499] [client 4.213.64.52:11189] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex.php"] [unique_id "aWZBxxzzbghmKib9ie_3CQAAAYw"]
[Tue Jan 13 20:59:52.216868 2026] [:error] [pid 22426:tid 22462] [client 4.213.64.52:11070] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex.php"] [unique_id "aWZByNy1Q5toryYTHgO2ugAAAMQ"]
[Tue Jan 13 20:59:52.611097 2026] [:error] [pid 27597:tid 27620] [client 4.213.64.52:11013] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex.php"] [unique_id "aWZByD8Db8v8HoJ3n4ACKwAAABU"]
[Tue Jan 13 20:59:52.951857 2026] [:error] [pid 33727:tid 33738] [client 4.213.64.52:11173] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex.php"] [unique_id "aWZByKHONsygso2w0OPoygAAAQk"]
[Tue Jan 13 20:59:53.308986 2026] [:error] [pid 27597:tid 27622] [client 4.213.64.52:11085] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w-1.php"] [unique_id "aWZByT8Db8v8HoJ3n4ACLAAAABc"]
[Tue Jan 13 20:59:53.622371 2026] [:error] [pid 33727:tid 33730] [client 4.213.64.52:11024] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w-1.php"] [unique_id "aWZByaHONsygso2w0OPoywAAAQE"]
[Tue Jan 13 20:59:53.914014 2026] [:error] [pid 27597:tid 27606] [client 4.213.64.52:11077] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w-1.php"] [unique_id "aWZByT8Db8v8HoJ3n4ACLQAAAAc"]
[Tue Jan 13 20:59:54.230684 2026] [:error] [pid 22425:tid 22450] [client 4.213.64.52:11133] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w-1.php"] [unique_id "aWZBynLEE_SEuOZ0WBT2UgAAAJM"]
[Tue Jan 13 20:59:54.517480 2026] [:error] [pid 22389:tid 22405] [client 4.213.64.52:11118] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aWZByiLIB_8b411qalJT4AAAAU4"]
[Tue Jan 13 20:59:54.813440 2026] [:error] [pid 22426:tid 22461] [client 4.213.64.52:11161] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aWZByty1Q5toryYTHgO2uwAAAMM"]
[Tue Jan 13 20:59:55.109002 2026] [:error] [pid 27597:tid 27605] [client 4.213.64.52:11015] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aWZByz8Db8v8HoJ3n4ACMAAAAAY"]
[Tue Jan 13 20:59:55.421167 2026] [:error] [pid 22485:tid 22506] [client 4.213.64.52:11119] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aWZByxzzbghmKib9ie_3CgAAAZM"]
[Tue Jan 13 20:59:55.720612 2026] [:error] [pid 27597:tid 27611] [client 4.213.64.52:10983] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aWZByz8Db8v8HoJ3n4ACMgAAAAw"]
[Tue Jan 13 20:59:56.038359 2026] [:error] [pid 22485:tid 22500] [client 4.213.64.52:11052] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aWZBzBzzbghmKib9ie_3CwAAAY0"]
[Tue Jan 13 20:59:56.362459 2026] [:error] [pid 22389:tid 22403] [client 4.213.64.52:10956] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aWZBzCLIB_8b411qalJT4wAAAUw"]
[Tue Jan 13 20:59:56.683598 2026] [:error] [pid 22426:tid 22466] [client 4.213.64.52:11242] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aWZBzNy1Q5toryYTHgO2vgAAAMg"]
[Tue Jan 13 20:59:57.013207 2026] [:error] [pid 22389:tid 22410] [client 4.213.64.52:11131] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aWZBzSLIB_8b411qalJT5QAAAVM"]
[Tue Jan 13 20:59:57.306140 2026] [:error] [pid 22426:tid 22473] [client 4.213.64.52:11245] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aWZBzdy1Q5toryYTHgO2vwAAAM8"]
[Tue Jan 13 20:59:57.588032 2026] [:error] [pid 22426:tid 22475] [client 4.213.64.52:11086] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aWZBzdy1Q5toryYTHgO2wQAAANE"]
[Tue Jan 13 20:59:57.909444 2026] [:error] [pid 22426:tid 22474] [client 4.213.64.52:11195] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aWZBzdy1Q5toryYTHgO2wgAAANA"]
[Tue Jan 13 21:00:10.884174 2026] [autoindex:error] [pid 22426:tid 22462] [client 4.213.64.52:10971] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 13 21:00:12.037532 2026] [:error] [pid 22426:tid 22476] [client 4.213.64.52:10971] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aWZB3Ny1Q5toryYTHgO23AAAANI"]
[Tue Jan 13 21:00:12.317159 2026] [:error] [pid 22389:tid 22399] [client 4.213.64.52:11123] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aWZB3CLIB_8b411qalJT9QAAAUg"]
[Tue Jan 13 21:00:12.599506 2026] [:error] [pid 22389:tid 22408] [client 4.213.64.52:11152] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aWZB3CLIB_8b411qalJT9gAAAVE"]
[Tue Jan 13 21:00:12.896254 2026] [:error] [pid 22485:tid 22490] [client 4.213.64.52:11141] [client 4.213.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aWZB3BzzbghmKib9ie_3GAAAAYM"]
[Tue Jan 13 21:37:06.537645 2026] [:error] [pid 22425:tid 22436] [client 194.233.68.138:55118] [client 194.233.68.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWZKgnLEE_SEuOZ0WBT8xQAAAIU"]
[Wed Jan 14 01:32:02.085408 2026] [autoindex:error] [pid 25809:tid 25828] [client 4.214.17.14:26260] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Jan 14 01:32:11.290858 2026] [autoindex:error] [pid 25809:tid 25828] [client 4.214.17.14:26260] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Jan 14 01:32:12.328745 2026] [autoindex:error] [pid 25809:tid 25817] [client 4.214.17.14:26260] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Jan 14 01:32:14.487447 2026] [autoindex:error] [pid 25809:tid 25835] [client 4.214.17.14:26260] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Jan 14 01:32:14.608198 2026] [autoindex:error] [pid 25809:tid 25811] [client 4.214.17.14:26260] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 01:32:14.722089 2026] [:error] [pid 25809:tid 25825] [client 4.214.17.14:26260] [client 4.214.17.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWaBno9SDqNJ9R9VfZACqQAAAE4"], referer: https://www.google.fr/
[Wed Jan 14 01:32:14.953831 2026] [autoindex:error] [pid 63842:tid 63854] [client 4.214.17.14:45283] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 01:32:15.066989 2026] [:error] [pid 63842:tid 63855] [client 4.214.17.14:45283] [client 4.214.17.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWaBn20zPTD54ET7u1krjAAAAUk"], referer: https://www.yahoo.com/
[Wed Jan 14 01:32:15.294089 2026] [:error] [pid 63931:tid 63951] [client 4.214.17.14:45290] [client 4.214.17.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWaBn9VnG0cQj3cwmW9NCgAAABI"], referer: https://www.google.co.uk/
[Wed Jan 14 03:08:51.189308 2026] [autoindex:error] [pid 43494:tid 43507] [client 4.194.112.230:41334] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Jan 14 03:09:04.750653 2026] [autoindex:error] [pid 43494:tid 43519] [client 4.194.112.230:41334] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Jan 14 03:09:05.953304 2026] [autoindex:error] [pid 43494:tid 43527] [client 4.194.112.230:41334] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 03:09:06.045419 2026] [autoindex:error] [pid 43494:tid 43505] [client 4.194.112.230:41334] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Jan 14 03:09:06.139494 2026] [autoindex:error] [pid 43494:tid 43509] [client 4.194.112.230:41334] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 03:09:06.231700 2026] [autoindex:error] [pid 43494:tid 43533] [client 4.194.112.230:41334] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Jan 14 03:09:06.325321 2026] [autoindex:error] [pid 43494:tid 43508] [client 4.194.112.230:41334] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Jan 14 03:09:06.417953 2026] [autoindex:error] [pid 43494:tid 43506] [client 4.194.112.230:41334] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 03:09:06.513277 2026] [autoindex:error] [pid 43494:tid 43502] [client 4.194.112.230:41334] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 03:09:12.878059 2026] [autoindex:error] [pid 43494:tid 43527] [client 4.194.112.230:41334] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 03:09:12.965491 2026] [:error] [pid 43494:tid 43509] [client 4.194.112.230:41334] [client 4.194.112.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWaYWMiBIyHKw4YELOkdJgAAAYY"], referer: https://www.bing.com/
[Wed Jan 14 03:09:13.140682 2026] [:error] [pid 63931:tid 63948] [client 4.194.112.230:50904] [client 4.194.112.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aWaYWdVnG0cQj3cwmW9y4QAAAA8"], referer: https://www.google.de/
[Wed Jan 14 03:09:13.315472 2026] [:error] [pid 63931:tid 63933] [client 4.194.112.230:42531] [client 4.194.112.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWaYWdVnG0cQj3cwmW9y4gAAAAA"], referer: https://www.google.fr/
[Wed Jan 14 03:09:13.490653 2026] [:error] [pid 63842:tid 63869] [client 4.194.112.230:2649] [client 4.194.112.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aWaYWW0zPTD54ET7u1lBnwAAAVc"], referer: https://www.google.fr/
[Wed Jan 14 03:09:36.790779 2026] [:error] [pid 17205:tid 17212] [client 4.194.112.230:63148] [client 4.194.112.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aWaYcBsM87QNXBwj6xNnBwAAAoQ"], referer: https://www.google.fr/
[Wed Jan 14 03:18:45.295735 2026] [:error] [pid 21064:tid 21170] [client 43.164.195.17:59816] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWaalZDXQI94n79g4EQe8AAAAJI"]
[Wed Jan 14 04:10:21.253063 2026] [autoindex:error] [pid 58868:tid 58887] [client 4.217.232.162:20244] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Jan 14 04:10:31.012880 2026] [autoindex:error] [pid 58868:tid 58875] [client 4.217.232.162:20244] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Jan 14 04:10:32.115471 2026] [autoindex:error] [pid 58868:tid 58887] [client 4.217.232.162:20244] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 04:10:34.247942 2026] [autoindex:error] [pid 58868:tid 58885] [client 4.217.232.162:20244] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 04:10:34.388589 2026] [autoindex:error] [pid 58868:tid 58890] [client 4.217.232.162:20244] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Jan 14 04:10:34.523499 2026] [:error] [pid 58868:tid 58888] [client 4.217.232.162:20244] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWamuk67yj8PZAmdsblhSwAAAVI"], referer: https://www.google.de/
[Wed Jan 14 04:10:34.798318 2026] [autoindex:error] [pid 24603:tid 24689] [client 4.217.232.162:18304] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Jan 14 04:10:34.932424 2026] [:error] [pid 24603:tid 24684] [client 4.217.232.162:18304] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWamupPBJGFGN8VT8_SU1wAAAJM"], referer: https://www.bing.com/
[Wed Jan 14 04:10:35.200794 2026] [:error] [pid 58699:tid 58725] [client 4.217.232.162:44083] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWamu-YdPBtkMLK2SdqgOQAAARc"], referer: https://duckduckgo.com/
[Wed Jan 14 04:10:35.469841 2026] [:error] [pid 24710:tid 24727] [client 4.217.232.162:34672] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/list-item/index.php"] [unique_id "aWamu2XBo5bEhDEEhs1NRQAAAM8"], referer: https://www.google.com/
[Wed Jan 14 04:10:35.740059 2026] [:error] [pid 58901:tid 58951] [client 4.217.232.162:44076] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aWamu73kQSrcqIWtO0obiwAAAdU"], referer: https://www.google.co.uk/
[Wed Jan 14 04:10:36.010136 2026] [:error] [pid 58901:tid 58935] [client 4.217.232.162:44706] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aWamvL3kQSrcqIWtO0objAAAAcU"], referer: https://www.google.de/
[Wed Jan 14 04:10:36.279539 2026] [:error] [pid 24710:tid 24726] [client 4.217.232.162:22609] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "aWamvGXBo5bEhDEEhs1NRwAAAM4"], referer: https://www.google.de/
[Wed Jan 14 04:10:36.548814 2026] [:error] [pid 58699:tid 58703] [client 4.217.232.162:2075] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aWamvOYdPBtkMLK2SdqgOgAAAQE"], referer: https://www.google.com/
[Wed Jan 14 04:10:36.817821 2026] [:error] [pid 24603:tid 24669] [client 4.217.232.162:45956] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aWamvJPBJGFGN8VT8_SU2gAAAIQ"], referer: https://www.google.de/
[Wed Jan 14 04:10:37.088189 2026] [:error] [pid 58699:tid 58713] [client 4.217.232.162:17889] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aWamveYdPBtkMLK2SdqgOwAAAQs"], referer: https://www.google.com/
[Wed Jan 14 06:59:10.883615 2026] [:error] [pid 24603:tid 24673] [client 43.135.36.201:47208] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWbOPpPBJGFGN8VT8_S4gAAAAIg"]
[Wed Jan 14 08:53:30.539709 2026] [:error] [pid 19278:tid 19303] [client 82.165.90.14:41268] [client 82.165.90.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWbpClGofyyxZQcTd1VApwAAABc"]
[Wed Jan 14 08:53:32.574933 2026] [:error] [pid 19278:tid 19297] [client 82.165.90.14:41284] [client 82.165.90.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWbpDFGofyyxZQcTd1VArQAAABE"]
[Wed Jan 14 09:35:03.047115 2026] [:error] [pid 19188:tid 19229] [client 49.7.227.204:39432] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWbyx54gjaoWMKiTtXtd5gAAAUk"]
[Wed Jan 14 14:19:10.016489 2026] [:error] [pid 61468:tid 61492] [client 192.250.229.221:48808] [client 192.250.229.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.229.221, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWc1XtfEBBL2jp9TJvKFCgAAAJU"]
[Wed Jan 14 14:19:13.431883 2026] [:error] [pid 61468:tid 61494] [client 192.250.229.221:48818] [client 192.250.229.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.229.221, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWc1YdfEBBL2jp9TJvKFDAAAAJc"]
[Wed Jan 14 14:45:21.203378 2026] [:error] [pid 61468:tid 61478] [client 43.157.43.147:36588] [client 43.157.43.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWc7gdfEBBL2jp9TJvKLPgAAAIc"]
[Wed Jan 14 15:59:40.706141 2026] [:error] [pid 61376:tid 61387] [client 106.54.62.156:50708] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWdM7KjRUNDW2YrxZG475QAAAUY"]
[Wed Jan 14 21:26:21.776722 2026] [:error] [pid 61378:tid 61440] [client 97.70.206.32:14312] [client 97.70.206.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 97.70.206.32, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWeZfRGjJjuJmoPOtlpIGgAAAAM"]
[Wed Jan 14 21:26:23.633479 2026] [:error] [pid 21490:tid 21502] [client 97.70.206.32:36006] [client 97.70.206.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 97.70.206.32, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWeZf-26AHzy1muKyudU-wAAAQk"]
[Thu Jan 15 01:55:21.201187 2026] [:error] [pid 23355:tid 23379] [client 43.131.32.36:59676] [client 43.131.32.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWfYiYgRLUaz7Nmrre24FAAAANY"]
[Thu Jan 15 06:05:55.218194 2026] [:error] [pid 5290:tid 5309] [client 43.157.46.118:44600] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWgTQziQRfcmyoePXPe1gwAAAAo"]
[Thu Jan 15 10:21:46.627513 2026] [:error] [pid 51807:tid 51812] [client 43.166.136.153:47496] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWhPOsMrH4_ge4gLwN1qQwAAAQM"]
[Thu Jan 15 10:48:17.647996 2026] [:error] [pid 5292:tid 5369] [client 91.92.241.199:61894] [client 91.92.241.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aWhVcWWxK-ai3L9DjxZRagAAAI4"]
[Thu Jan 15 11:21:49.071739 2026] [:error] [pid 5291:tid 5349] [client 139.59.43.60:65008] [client 139.59.43.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.43.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWhdTTp5twZ54fay3Rf5tgAAAFY"]
[Thu Jan 15 11:21:50.995495 2026] [:error] [pid 5291:tid 5336] [client 139.59.43.60:65324] [client 139.59.43.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.43.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWhdTjp5twZ54fay3Rf5ugAAAEk"]
[Thu Jan 15 12:37:42.364245 2026] [:error] [pid 5389:tid 5399] [client 167.71.75.254:60201] [client 167.71.75.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.75.254, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWhvFkkzfklDSWCNrVLh1wAAAMg"]
[Thu Jan 15 12:37:44.803652 2026] [:error] [pid 5290:tid 5302] [client 167.71.75.254:60367] [client 167.71.75.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.75.254, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWhvGDiQRfcmyoePXPcwLQAAAAM"]
[Thu Jan 15 13:20:03.926562 2026] [:error] [pid 5292:tid 5365] [client 167.71.75.254:61712] [client 167.71.75.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.75.254, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWh5A2WxK-ai3L9DjxaALAAAAIo"]
[Thu Jan 15 13:22:57.143285 2026] [:error] [pid 5291:tid 5335] [client 167.71.75.254:50968] [client 167.71.75.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.75.254, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWh5sTp5twZ54fay3RclpQAAAEg"]
[Thu Jan 15 13:25:38.836920 2026] [:error] [pid 5389:tid 5405] [client 167.71.75.254:56787] [client 167.71.75.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.75.254, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWh6UkkzfklDSWCNrVL4TQAAAM4"]
[Thu Jan 15 14:02:03.477658 2026] [:error] [pid 51857:tid 51864] [client 43.130.26.3:44976] [client 43.130.26.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWiC23DlXoqhkNNyf_wUcgAAAUU"]
[Thu Jan 15 14:50:14.334489 2026] [:error] [pid 5389:tid 5413] [client 44.201.73.112:35264] [client 44.201.73.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aWiOJkkzfklDSWCNrVIfDwAAANY"]
[Thu Jan 15 16:11:36.364011 2026] [:error] [pid 5291:tid 5343] [client 44.201.73.112:52534] [client 44.201.73.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aWihODp5twZ54fay3RdzDAAAAFA"]
[Thu Jan 15 17:26:42.551134 2026] [:error] [pid 5290:tid 5302] [client 110.166.71.39:38778] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWiy0jiQRfcmyoePXPeRlAAAAAM"]
[Thu Jan 15 21:26:17.746330 2026] [:error] [pid 5292:tid 5362] [client 101.32.49.171:35620] [client 101.32.49.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWjq-WWxK-ai3L9DjxY2CwAAAIc"]
[Thu Jan 15 22:13:59.214089 2026] [:error] [pid 5389:tid 5395] [client 103.77.106.118:55357] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aWj2J0kzfklDSWCNrVKV7QAAAMQ"]
[Thu Jan 15 23:54:50.323151 2026] [:error] [pid 51857:tid 51859] [client 182.44.2.148:41661] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWkNynDlXoqhkNNyf_znLAAAAUA"]
[Fri Jan 16 01:14:01.983237 2026] [:error] [pid 21666:tid 21690] [client 43.157.188.74:42034] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWkgWaM9zD2y6IZZ4RSnlQAAAZM"]
[Fri Jan 16 02:30:09.497494 2026] [:error] [pid 5291:tid 5346] [client 216.81.248.90:37676] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/database.php.bak"] [unique_id "aWkyMTp5twZ54fay3RcbCQAAAFM"]
[Fri Jan 16 02:30:09.500564 2026] [:error] [pid 5291:tid 5350] [client 216.81.248.90:37966] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config.php.bak"] [unique_id "aWkyMTp5twZ54fay3RcbCwAAAFc"]
[Fri Jan 16 02:30:09.505046 2026] [:error] [pid 5290:tid 5310] [client 216.81.248.90:37680] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.htaccess.bak"] [unique_id "aWkyMTiQRfcmyoePXPcLpAAAAAs"]
[Fri Jan 16 02:30:09.505440 2026] [:error] [pid 51807:tid 51812] [client 216.81.248.90:37734] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/log/error.log"] [unique_id "aWkyMcMrH4_ge4gLwN1uugAAAQM"]
[Fri Jan 16 02:30:09.507046 2026] [:error] [pid 51807:tid 51830] [client 216.81.248.90:37770] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-config.php.orig"] [unique_id "aWkyMcMrH4_ge4gLwN1uvAAAARU"]
[Fri Jan 16 02:30:09.507068 2026] [:error] [pid 51807:tid 51811] [client 216.81.248.90:37606] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".inc.php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/configuration.inc.php.bak"] [unique_id "aWkyMcMrH4_ge4gLwN1uuwAAAQI"]
[Fri Jan 16 02:30:09.508900 2026] [:error] [pid 5290:tid 5305] [client 216.81.248.90:37640] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app/config/parameters.yml.bak"] [unique_id "aWkyMTiQRfcmyoePXPcLpQAAAAY"]
[Fri Jan 16 02:30:09.510029 2026] [:error] [pid 5290:tid 5319] [client 216.81.248.90:37796] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/storage/logs/laravel.log"] [unique_id "aWkyMTiQRfcmyoePXPcLpgAAABQ"]
[Fri Jan 16 02:30:09.511965 2026] [:error] [pid 5290:tid 5309] [client 216.81.248.90:37644] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-config.txt"] [unique_id "aWkyMTiQRfcmyoePXPcLpwAAAAo"]
[Fri Jan 16 02:30:09.512800 2026] [:error] [pid 51807:tid 51813] [client 216.81.248.90:37794] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-config.php.old"] [unique_id "aWkyMcMrH4_ge4gLwN1uvwAAAQQ"]
[Fri Jan 16 02:30:09.517161 2026] [:error] [pid 5290:tid 5307] [client 216.81.248.90:37886] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/var/log/prod.log"] [unique_id "aWkyMTiQRfcmyoePXPcLqQAAAAg"]
[Fri Jan 16 02:30:09.517491 2026] [:error] [pid 5290:tid 5300] [client 216.81.248.90:37704] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-config.php.save"] [unique_id "aWkyMTiQRfcmyoePXPcLqgAAAAE"]
[Fri Jan 16 02:30:09.518431 2026] [:error] [pid 5290:tid 5320] [client 216.81.248.90:38004] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-config.old"] [unique_id "aWkyMTiQRfcmyoePXPcLqwAAABU"]
[Fri Jan 16 02:30:09.519763 2026] [:error] [pid 5290:tid 5315] [client 216.81.248.90:37974] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-config.bak"] [unique_id "aWkyMTiQRfcmyoePXPcLrwAAABA"]
[Fri Jan 16 02:30:09.526390 2026] [:error] [pid 5290:tid 5303] [client 216.81.248.90:37604] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".inc.php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config.inc.php.bak"] [unique_id "aWkyMTiQRfcmyoePXPcLswAAAAQ"]
[Fri Jan 16 02:30:09.527536 2026] [:error] [pid 51807:tid 51824] [client 216.81.248.90:37746] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/var/log/app.log"] [unique_id "aWkyMcMrH4_ge4gLwN1uwwAAAQ8"]
[Fri Jan 16 02:30:09.529606 2026] [:error] [pid 5389:tid 5406] [client 216.81.248.90:37870] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app/logs/dev.log"] [unique_id "aWkyMUkzfklDSWCNrVLU0wAAAM8"]
[Fri Jan 16 02:30:09.530226 2026] [:error] [pid 5291:tid 5336] [client 216.81.248.90:37850] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/error.log"] [unique_id "aWkyMTp5twZ54fay3RcbDAAAAEk"]
[Fri Jan 16 02:30:09.531827 2026] [:error] [pid 5389:tid 5415] [client 216.81.248.90:37868] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/log/app.log"] [unique_id "aWkyMUkzfklDSWCNrVLU1AAAANg"]
[Fri Jan 16 02:30:09.532058 2026] [:error] [pid 5291:tid 5348] [client 216.81.248.90:37890] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/php_errors.log"] [unique_id "aWkyMTp5twZ54fay3RcbDgAAAFU"]
[Fri Jan 16 02:30:09.532655 2026] [:error] [pid 5389:tid 5400] [client 216.81.248.90:37990] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config.php.old"] [unique_id "aWkyMUkzfklDSWCNrVLU1QAAAMk"]
[Fri Jan 16 02:30:09.532815 2026] [:error] [pid 51807:tid 51817] [client 216.81.248.90:38020] [client 216.81.248.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-config.php.bak"] [unique_id "aWkyMcMrH4_ge4gLwN1uxQAAAQg"]
[Fri Jan 16 05:35:24.650335 2026] [:error] [pid 4656:tid 4696] [client 43.157.168.43:46010] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWldnKjsvji3BAaL5mwQpgAAAEU"]
[Fri Jan 16 05:36:07.724858 2026] [autoindex:error] [pid 4657:tid 4738] [client 52.230.120.92:7244] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 16 05:36:19.746382 2026] [:error] [pid 4657:tid 4721] [client 52.230.120.92:7244] [client 52.230.120.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aWld0yTED8rXaYv2tKbbDQAAAIM"]
[Fri Jan 16 05:36:20.107742 2026] [:error] [pid 4656:tid 4711] [client 52.230.120.92:7258] [client 52.230.120.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aWld1Kjsvji3BAaL5mwQ6wAAAFQ"]
[Fri Jan 16 05:36:20.471507 2026] [:error] [pid 4752:tid 4772] [client 52.230.120.92:3193] [client 52.230.120.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aWld1Ll8TqZp7XXXIGv6-gAAAMg"]
[Fri Jan 16 05:36:20.840971 2026] [:error] [pid 4656:tid 4697] [client 52.230.120.92:3138] [client 52.230.120.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aWld1Kjsvji3BAaL5mwQ8AAAAEY"]
[Fri Jan 16 05:46:40.812032 2026] [:error] [pid 43435:tid 43437] [client 139.59.43.60:55982] [client 139.59.43.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.43.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWlgQMTShPLPoPKNBO08kQAAAQA"]
[Fri Jan 16 05:54:55.522721 2026] [:error] [pid 4655:tid 4682] [client 139.59.43.60:60617] [client 139.59.43.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.43.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWliL4wNRVf4tI0Wv77KFAAAABI"]
[Fri Jan 16 06:03:08.526115 2026] [:error] [pid 4657:tid 4738] [client 139.59.43.60:54588] [client 139.59.43.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.43.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWlkHCTED8rXaYv2tKbhMgAAAJQ"]
[Fri Jan 16 06:12:15.348025 2026] [:error] [pid 43435:tid 43440] [client 139.59.43.60:64834] [client 139.59.43.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.43.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWlmP8TShPLPoPKNBO1FfgAAAQM"]
[Fri Jan 16 06:24:44.203645 2026] [:error] [pid 4657:tid 4726] [client 139.59.43.60:52029] [client 139.59.43.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.43.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWlpLCTED8rXaYv2tKbmxwAAAIg"]
[Fri Jan 16 10:17:16.029928 2026] [:error] [pid 9170:tid 9210] [client 43.130.74.193:45520] [client 43.130.74.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWmfrG4MLV83AzbIjkZWMQAAAQk"]
[Fri Jan 16 12:21:27.503836 2026] [:error] [pid 9170:tid 9202] [client 114.96.103.33:56359] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWm8x24MLV83AzbIjkZ-VQAAAQE"]
[Fri Jan 16 14:07:44.749315 2026] [:error] [pid 9169:tid 9192] [client 170.106.152.218:33964] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWnVsPnHNwn4jDwFUqTZrAAAANM"]
[Fri Jan 16 15:20:27.740074 2026] [:error] [pid 30866:tid 30905] [client 27.107.82.158:57750] [client 27.107.82.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.107.82.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aWnmuyfb83E1Tbd0nr9GsQAAAAo"]
[Fri Jan 16 15:33:15.715164 2026] [:error] [pid 30925:tid 30939] [client 27.107.82.158:62862] [client 27.107.82.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aWnpu7Pyx6TwF5dNaFp_hAAAAYw"]
[Fri Jan 16 17:02:23.237561 2026] [:error] [pid 30866:tid 30904] [client 84.247.169.220:60501] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWn-nyfb83E1Tbd0nr9rtQAAAAk"]
[Fri Jan 16 17:02:24.456256 2026] [:error] [pid 54008:tid 54017] [client 84.247.169.220:60580] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wc/v3/payment_gateways"] [unique_id "aWn-oMeowS6CyLOmCzOjqAAAAIc"]
[Fri Jan 16 17:02:25.747773 2026] [:error] [pid 30957:tid 30965] [client 84.247.169.220:60651] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wc/v2/payment_gateways"] [unique_id "aWn-od2pbRtnni7K9w8qvwAAAEU"]
[Fri Jan 16 17:02:27.019300 2026] [:error] [pid 30865:tid 30869] [client 84.247.169.220:60738] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wc/store/v1/cart"] [unique_id "aWn-oxCR_HCYGnC3FS-zsQAAAUE"]
[Fri Jan 16 17:02:28.427692 2026] [:error] [pid 54008:tid 54032] [client 84.247.169.220:60853] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWn-pMeowS6CyLOmCzOjugAAAJY"]
[Fri Jan 16 18:40:19.532033 2026] [:error] [pid 30957:tid 30971] [client 14.215.163.132:43242] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWoVk92pbRtnni7K9w9JAgAAAEs"]
[Fri Jan 16 21:40:20.347941 2026] [:error] [pid 30925:tid 30932] [client 43.155.140.157:37488] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWo_xLPyx6TwF5dNaFr0aAAAAYU"]
[Sat Jan 17 02:47:10.606435 2026] [:error] [pid 30925:tid 30945] [client 43.152.72.247:34812] [client 43.152.72.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWqHrrPyx6TwF5dNaFowHAAAAZI"]
[Sat Jan 17 07:33:08.389273 2026] [:error] [pid 31224:tid 31278] [client 36.111.67.189:53581] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWrKtDgpVpEMk8-OQkiHLgAAAFE"]
[Sat Jan 17 10:34:59.614882 2026] [:error] [pid 31225:tid 31299] [client 43.135.115.233:59432] [client 43.135.115.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWr1U-nu2L2yWFDbzyU_SAAAAIs"]
[Sat Jan 17 14:17:21.556973 2026] [:error] [pid 31223:tid 31241] [client 185.30.32.201:38036] [client 185.30.32.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWspcUMnpeq0T1sEOlKroQAAAAg"]
[Sat Jan 17 14:17:23.604444 2026] [:error] [pid 31322:tid 31343] [client 185.30.32.201:48572] [client 185.30.32.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.30.32.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aWspc3xOW98yk2MBlyqRNQAAAMk"]
[Sun Jan 18 08:06:41.570003 2026] [:error] [pid 12923:tid 12951] [client 40.69.66.178:7917] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "aWwkEesWURrrC-4Rx5KwNwAAABM"]
[Sun Jan 18 08:06:42.112158 2026] [:error] [pid 12925:tid 12990] [client 40.69.66.178:8287] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "aWwkEvsBL-4pnmSbzihnqQAAAII"]
[Sun Jan 18 08:06:42.672846 2026] [:error] [pid 12924:tid 12983] [client 40.69.66.178:4897] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "aWwkEiuv3PUo9LR6V6ZIvAAAAFc"]
[Sun Jan 18 08:06:43.175898 2026] [:error] [pid 12924:tid 12982] [client 40.69.66.178:7971] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "aWwkEyuv3PUo9LR6V6ZIvQAAAFY"]
[Sun Jan 18 08:06:43.692091 2026] [:error] [pid 12925:tid 13000] [client 40.69.66.178:4880] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CLA.php"] [unique_id "aWwkE_sBL-4pnmSbzihnqwAAAIw"]
[Sun Jan 18 08:06:44.208267 2026] [:error] [pid 12925:tid 12999] [client 40.69.66.178:3145] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "aWwkFPsBL-4pnmSbzihnrAAAAIs"]
[Sun Jan 18 08:06:44.853996 2026] [:error] [pid 12923:tid 12933] [client 40.69.66.178:6007] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aWwkFOsWURrrC-4Rx5KwPAAAAAE"]
[Sun Jan 18 08:06:45.355974 2026] [:error] [pid 12923:tid 12947] [client 40.69.66.178:7986] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aWwkFesWURrrC-4Rx5KwPQAAAA8"]
[Sun Jan 18 08:06:46.015756 2026] [:error] [pid 12925:tid 13008] [client 40.69.66.178:7933] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aWwkFvsBL-4pnmSbzihnsAAAAJQ"]
[Sun Jan 18 08:06:46.517285 2026] [:error] [pid 13034:tid 13046] [client 40.69.66.178:1115] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aWwkFsRGpUu1E8cmbmhOMQAAAMg"]
[Sun Jan 18 08:06:47.020026 2026] [:error] [pid 12923:tid 12948] [client 40.69.66.178:8317] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aWwkF-sWURrrC-4Rx5KwQQAAABA"]
[Sun Jan 18 08:06:47.602216 2026] [:error] [pid 12925:tid 13012] [client 40.69.66.178:11952] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws35.php"] [unique_id "aWwkF_sBL-4pnmSbzihnsQAAAJg"]
[Sun Jan 18 08:06:48.210588 2026] [:error] [pid 13034:tid 13051] [client 40.69.66.178:7889] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acwfihfh.php"] [unique_id "aWwkGMRGpUu1E8cmbmhONQAAAM0"]
[Sun Jan 18 08:06:48.741454 2026] [:error] [pid 12925:tid 12998] [client 40.69.66.178:7883] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aWwkGPsBL-4pnmSbzihnsgAAAIo"]
[Sun Jan 18 08:06:49.240206 2026] [:error] [pid 12923:tid 12942] [client 40.69.66.178:1129] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/esp.php"] [unique_id "aWwkGesWURrrC-4Rx5KwQwAAAAo"]
[Sun Jan 18 08:06:49.760149 2026] [:error] [pid 12924:tid 12968] [client 40.69.66.178:10667] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aWwkGSuv3PUo9LR6V6ZIwQAAAEg"]
[Sun Jan 18 08:06:50.316484 2026] [:error] [pid 12925:tid 12988] [client 40.69.66.178:8264] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/21x.php"] [unique_id "aWwkGvsBL-4pnmSbzihntwAAAIA"]
[Sun Jan 18 08:06:50.917198 2026] [:error] [pid 12925:tid 13003] [client 40.69.66.178:2267] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aWwkGvsBL-4pnmSbzihnuQAAAI8"]
[Sun Jan 18 08:06:51.444097 2026] [:error] [pid 12925:tid 13000] [client 40.69.66.178:8267] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aWwkG_sBL-4pnmSbzihnvAAAAIw"]
[Sun Jan 18 08:06:51.950923 2026] [:error] [pid 12924:tid 12967] [client 40.69.66.178:9796] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aWwkGyuv3PUo9LR6V6ZIwgAAAEc"]
[Sun Jan 18 08:06:52.481519 2026] [:error] [pid 12924:tid 12981] [client 40.69.66.178:5989] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aWwkHCuv3PUo9LR6V6ZIwwAAAFU"]
[Sun Jan 18 08:06:53.110799 2026] [:error] [pid 12924:tid 12972] [client 40.69.66.178:3138] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ierne.php"] [unique_id "aWwkHSuv3PUo9LR6V6ZIxAAAAEw"]
[Sun Jan 18 08:06:53.829420 2026] [:error] [pid 12925:tid 12991] [client 40.69.66.178:14953] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aWwkHfsBL-4pnmSbzihnxAAAAIM"]
[Sun Jan 18 08:06:54.335758 2026] [:error] [pid 12924:tid 12970] [client 40.69.66.178:6043] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aWwkHiuv3PUo9LR6V6ZIxQAAAEo"]
[Sun Jan 18 08:06:54.843522 2026] [:error] [pid 12924:tid 12976] [client 40.69.66.178:7989] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aWwkHiuv3PUo9LR6V6ZIxwAAAFA"]
[Sun Jan 18 08:06:55.352881 2026] [:error] [pid 12923:tid 12937] [client 40.69.66.178:15263] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xde.php"] [unique_id "aWwkH-sWURrrC-4Rx5KwTAAAAAU"]
[Sun Jan 18 08:06:55.910745 2026] [:error] [pid 12924:tid 12961] [client 40.69.66.178:7880] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aWwkHyuv3PUo9LR6V6ZIyAAAAEE"]
[Sun Jan 18 08:06:56.443475 2026] [:error] [pid 12924:tid 12971] [client 40.69.66.178:6461] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aWwkICuv3PUo9LR6V6ZIyQAAAEs"]
[Sun Jan 18 08:06:56.943614 2026] [:error] [pid 13034:tid 13053] [client 40.69.66.178:1093] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aWwkIMRGpUu1E8cmbmhOOgAAAM8"]
[Sun Jan 18 08:06:57.441749 2026] [:error] [pid 13034:tid 13060] [client 40.69.66.178:1726] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1yade.php"] [unique_id "aWwkIcRGpUu1E8cmbmhOPAAAANY"]
[Sun Jan 18 08:06:58.003385 2026] [:error] [pid 13034:tid 13056] [client 40.69.66.178:15843] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aWwkIsRGpUu1E8cmbmhOPwAAANI"]
[Sun Jan 18 08:06:58.532050 2026] [:error] [pid 13034:tid 13055] [client 40.69.66.178:7964] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aWwkIsRGpUu1E8cmbmhOQQAAANE"]
[Sun Jan 18 10:34:53.384802 2026] [:error] [pid 12923:tid 12956] [client 43.130.15.147:52392] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWxGzesWURrrC-4Rx5LcYwAAABg"]
[Sun Jan 18 15:05:08.368927 2026] [:error] [pid 12925:tid 12995] [client 43.153.122.30:55024] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWyGJPsBL-4pnmSbzij9FgAAAIc"]
[Sun Jan 18 19:25:14.382366 2026] [:error] [pid 12925:tid 13003] [client 101.32.52.164:38612] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWzDGvsBL-4pnmSbzihOugAAAI8"]
[Sun Jan 18 21:37:14.949217 2026] [:error] [pid 12923:tid 12933] [client 84.247.169.220:53250] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWziCusWURrrC-4Rx5KbkwAAAAE"]
[Sun Jan 18 21:52:27.757929 2026] [:error] [pid 11711:tid 11812] [client 182.40.104.255:45602] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aWzlm-tTMvs-MBCRKgc6TwAAA1E"]
[Mon Jan 19 01:56:42.358922 2026] [:error] [pid 37885:tid 37902] [client 118.179.106.65:57446] [client 118.179.106.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.179.106.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW0e2oIjOL7XA82H72XHYwAAAU4"]
[Mon Jan 19 02:04:12.367015 2026] [:error] [pid 13034:tid 13042] [client 118.179.106.65:63166] [client 118.179.106.65] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW0gnMRGpUu1E8cmbmjd9AAAAMQ"]
[Mon Jan 19 02:05:31.236418 2026] [:error] [pid 12925:tid 12992] [client 118.179.106.65:63950] [client 118.179.106.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.179.106.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW0g6_sBL-4pnmSbziiVcgAAAIQ"]
[Mon Jan 19 02:54:50.057543 2026] [:error] [pid 33494:tid 33505] [client 43.157.22.109:45608] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW0serxmLR_50TtKxDJhjgAAAQc"]
[Mon Jan 19 04:15:30.641576 2026] [:error] [pid 55092:tid 55117] [client 180.110.203.108:34189] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW0_Ys2DE_yLQhxnvwyvJgAAABA"]
[Mon Jan 19 06:42:52.463206 2026] [:error] [pid 47476:tid 47498] [client 170.106.147.63:50354] [client 170.106.147.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW1h7I6ielYhUA9M_-K0qQAAAdI"]
[Mon Jan 19 07:37:16.416230 2026] [:error] [pid 55093:tid 55147] [client 104.28.246.114:14383] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aW1urFvejPZGx2OquyUaOAAAAFI"]
[Mon Jan 19 07:37:18.162611 2026] [:error] [pid 43300:tid 43318] [client 104.28.246.114:58683] [client 104.28.246.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/style.php"] [unique_id "aW1urm7A1q4pIUqzBvEjmgAAAUo"]
[Mon Jan 19 08:23:46.020951 2026] [:error] [pid 55094:tid 55161] [client 141.98.11.166:52434] [client 141.98.11.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aW15kjQDy8tSKykl7U7JMgAAAIU"]
[Mon Jan 19 08:23:47.857075 2026] [:error] [pid 47439:tid 47456] [client 141.98.11.166:65364] [client 141.98.11.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aW15kzr6gGCDmQscGCqSMgAAAY8"]
[Mon Jan 19 09:09:47.436951 2026] [:error] [pid 47476:tid 47484] [client 85.203.47.124:30503] [client 85.203.47.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW2EW46ielYhUA9M_-LLdQAAAcQ"]
[Mon Jan 19 09:09:53.772673 2026] [:error] [pid 55092:tid 55112] [client 85.203.47.147:61705] [client 85.203.47.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW2EYc2DE_yLQhxnvwzwhgAAAAs"]
[Mon Jan 19 09:09:59.372362 2026] [:error] [pid 55093:tid 55146] [client 85.203.47.137:22121] [client 85.203.47.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.137, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW2EZ1vejPZGx2OquyU0BgAAAFE"]
[Mon Jan 19 09:10:05.881682 2026] [:error] [pid 55092:tid 55106] [client 85.203.47.153:26389] [client 85.203.47.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW2Ebc2DE_yLQhxnvwzwngAAAAU"]
[Mon Jan 19 09:10:12.576942 2026] [:error] [pid 55093:tid 55139] [client 85.203.47.155:42899] [client 85.203.47.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.155, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW2EdFvejPZGx2OquyU0JAAAAEo"]
[Mon Jan 19 09:10:18.141682 2026] [:error] [pid 47439:tid 47462] [client 85.203.47.119:58561] [client 85.203.47.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.119, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW2Eejr6gGCDmQscGCqZKwAAAZU"]
[Mon Jan 19 09:10:22.231705 2026] [:error] [pid 47439:tid 47458] [client 85.203.47.129:48935] [client 85.203.47.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW2Efjr6gGCDmQscGCqZNAAAAZE"]
[Mon Jan 19 09:10:24.985360 2026] [:error] [pid 43300:tid 43313] [client 85.203.47.137:57521] [client 85.203.47.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.137, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW2EgG7A1q4pIUqzBvE9pgAAAUU"]
[Mon Jan 19 09:10:27.721518 2026] [:error] [pid 43300:tid 43309] [client 85.203.47.161:48689] [client 85.203.47.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW2Eg27A1q4pIUqzBvE9qAAAAUE"]
[Mon Jan 19 09:10:30.514897 2026] [:error] [pid 47477:tid 47508] [client 85.203.47.125:30823] [client 85.203.47.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW2Ehgyk7fMQliOCELduGAAAAgE"]
[Mon Jan 19 09:10:33.178605 2026] [:error] [pid 43300:tid 43312] [client 85.203.47.130:21005] [client 85.203.47.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.47.130, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW2EiW7A1q4pIUqzBvE9qwAAAUQ"]
[Mon Jan 19 09:51:59.383035 2026] [:error] [pid 1630:tid 1645] [client 173.214.167.46:57368] [client 173.214.167.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aW2OPy8jxjHcpcfYtKnLBgAAAM0"]
[Mon Jan 19 10:46:47.881098 2026] [:error] [pid 15874:tid 15899] [client 43.135.211.148:34430] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW2bF4Y8EbbYqmj_Y0_AVQAAARc"]
[Mon Jan 19 12:48:18.946522 2026] [:error] [pid 45561:tid 45567] [client 103.77.106.118:56954] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aW23kq4ONSZn4nkTayLiFwAAAAE"]
[Mon Jan 19 12:48:19.350259 2026] [:error] [pid 45561:tid 45583] [client 103.77.106.118:52523] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aW23k64ONSZn4nkTayLiGAAAABE"]
[Mon Jan 19 14:18:53.860794 2026] [:error] [pid 45657:tid 45675] [client 43.156.202.34:49218] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW3MzQ4XFYp2OcwCx-ARPgAAANA"]
[Mon Jan 19 15:12:35.092560 2026] [:error] [pid 47089:tid 47112] [client 82.165.89.242:49406] [client 82.165.89.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.242, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aW3ZYxlIzijVNfdIsZ6CqwAAARU"]
[Mon Jan 19 15:12:38.170609 2026] [:error] [pid 47089:tid 47113] [client 82.165.89.242:49408] [client 82.165.89.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.242, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aW3ZZhlIzijVNfdIsZ6CtgAAARY"]
[Mon Jan 19 16:42:01.157822 2026] [:error] [pid 47089:tid 47094] [client 175.6.217.4:55868] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW3uWRlIzijVNfdIsZ6vcgAAAQM"]
[Mon Jan 19 18:09:34.959353 2026] [:error] [pid 45562:tid 45597] [client 170.106.163.84:44262] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW4C3joUil_kwpvtDW66egAAAEM"]
[Mon Jan 19 21:42:49.553447 2026] [:error] [pid 45561:tid 45587] [client 43.156.232.190:46046] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW402a4ONSZn4nkTayJv2wAAABU"]
[Mon Jan 19 22:42:59.421307 2026] [:error] [pid 45561:tid 45581] [client 194.26.192.118:56494] [client 194.26.192.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aW5C864ONSZn4nkTayJ9HwAAAA8"]
[Mon Jan 19 22:49:36.013614 2026] [:error] [pid 45562:tid 45607] [client 104.28.246.115:44386] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aW5EgDoUil_kwpvtDW74JAAAAE0"]
[Mon Jan 19 22:49:36.430964 2026] [:error] [pid 45563:tid 45634] [client 104.28.246.115:44388] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/style.php"] [unique_id "aW5EgJI4--OKA-PqumzM7gAAAI0"]
[Mon Jan 19 22:49:36.853544 2026] [:error] [pid 47089:tid 47109] [client 104.28.246.115:44396] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/style.php"] [unique_id "aW5EgBlIzijVNfdIsZ4XOAAAARI"]
[Mon Jan 19 22:49:40.293268 2026] [:error] [pid 36216:tid 36229] [client 104.28.246.115:44400] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/style.php"] [unique_id "aW5EhMIpfKKs9fzB-yDHkAAAAUs"]
[Mon Jan 19 22:49:47.944177 2026] [:error] [pid 47089:tid 47103] [client 104.28.246.115:44123] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style.php"] [unique_id "aW5EixlIzijVNfdIsZ4XRwAAAQw"]
[Mon Jan 19 22:49:55.387874 2026] [:error] [pid 45563:tid 45623] [client 104.28.246.115:19103] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aW5Ek5I4--OKA-PqumzM-gAAAII"]
[Mon Jan 19 22:49:55.830378 2026] [:error] [pid 36216:tid 36227] [client 104.28.246.115:19110] [client 104.28.246.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aW5Ek8IpfKKs9fzB-yDHngAAAUk"]
[Tue Jan 20 04:58:46.467860 2026] [autoindex:error] [pid 17622:tid 17707] [client 4.190.155.219:13846] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 04:58:58.327559 2026] [:error] [pid 17622:tid 17706] [client 4.190.155.219:13846] [client 4.190.155.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aW6bEi4cbbp8XKl0AhlU3wAAAJU"]
[Tue Jan 20 04:58:58.837996 2026] [:error] [pid 17621:tid 17671] [client 4.190.155.219:14377] [client 4.190.155.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aW6bEqQxAikbLpJvDI7PpAAAAE0"]
[Tue Jan 20 04:58:59.332309 2026] [:error] [pid 17620:tid 17646] [client 4.190.155.219:14393] [client 4.190.155.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aW6bE1IxOy_FGGR2biuGjgAAABE"]
[Tue Jan 20 04:58:59.816873 2026] [:error] [pid 17621:tid 17676] [client 4.190.155.219:14401] [client 4.190.155.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aW6bE6QxAikbLpJvDI7PpQAAAFI"]
[Tue Jan 20 08:02:30.629220 2026] [:error] [pid 35048:tid 35056] [client 148.227.69.63:55259] [client 148.227.69.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.227.69.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aW7GFkLtSXQ_M3-vlIb2OQAAAQU"]
[Tue Jan 20 08:31:43.647707 2026] [:error] [pid 17621:tid 17675] [client 148.227.69.63:60716] [client 148.227.69.63] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW7M76QxAikbLpJvDI4EAQAAAFE"]
[Tue Jan 20 08:52:13.600988 2026] [:error] [pid 10813:tid 10836] [client 43.130.111.40:59982] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW7Rvf8mjqc4Rc0ds2IPmAAAABM"]
[Tue Jan 20 11:30:39.933153 2026] [:error] [pid 54382:tid 54399] [client 182.44.9.147:46146] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW7230TJlZ9SJ6sBOEtOegAAAA4"]
[Tue Jan 20 12:31:28.245119 2026] [:error] [pid 56326:tid 56331] [client 170.106.192.3:54164] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW8FIBA6mi8Uwf45Uy_IYAAAAMM"]
[Tue Jan 20 13:30:48.474183 2026] [:error] [pid 8455:tid 8479] [client 103.77.107.178:51659] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aW8TCIJiHdPVtruynXBzsAAAA1Y"]
[Tue Jan 20 13:30:48.846077 2026] [:error] [pid 56326:tid 56328] [client 103.77.107.178:52634] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aW8TCBA6mi8Uwf45Uy_UDgAAAMA"]
[Tue Jan 20 16:18:33.613514 2026] [:error] [pid 56360:tid 56367] [client 49.51.204.74:55010] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW86WU1J8CD1rR-wXXsoQgAAAQU"]
[Tue Jan 20 17:57:39.608360 2026] [:error] [pid 54260:tid 54316] [client 36.41.75.167:37531] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW9Rk9g7jS3jmpUN0WACDgAAAUg"]
[Tue Jan 20 19:19:59.904348 2026] [:error] [pid 54382:tid 54390] [client 46.199.205.187:11146] [client 46.199.205.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aW9k30TJlZ9SJ6sBOEuXKwAAAAU"]
[Tue Jan 20 19:20:01.723289 2026] [:error] [pid 54260:tid 54316] [client 46.199.205.187:64316] [client 46.199.205.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aW9k4dg7jS3jmpUN0WAPOAAAAUg"]
[Tue Jan 20 19:48:12.093247 2026] [:error] [pid 54382:tid 54398] [client 170.106.163.48:44338] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW9rfETJlZ9SJ6sBOEudQwAAAA0"]
[Tue Jan 20 23:25:21.054032 2026] [:error] [pid 56360:tid 56386] [client 43.157.188.74:37140] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW-eYU1J8CD1rR-wXXtzLgAAARg"]
[Wed Jan 21 00:37:04.610187 2026] [:error] [pid 54259:tid 54293] [client 106.54.62.156:53044] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW-vMA2q1USrePnOoFQdmwAAAJA"]
[Wed Jan 21 03:03:58.275146 2026] [:error] [pid 63647:tid 63664] [client 43.132.214.228:40334] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aW_RnlUaYw1xHOoaFFJNMgAAAg8"]
[Wed Jan 21 05:26:54.868433 2026] [:error] [pid 21455:tid 21502] [client 65.52.167.153:9213] [client 65.52.167.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aW_zHopOKALCSo1URZFC4wAAAEs"]
[Wed Jan 21 05:26:55.338702 2026] [:error] [pid 21456:tid 21527] [client 65.52.167.153:29671] [client 65.52.167.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aW_zHwKyVQ9Ob2YxRAqDcAAAAIk"]
[Wed Jan 21 05:26:55.812440 2026] [:error] [pid 21456:tid 21522] [client 65.52.167.153:32677] [client 65.52.167.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aW_zHwKyVQ9Ob2YxRAqDcQAAAIQ"]
[Wed Jan 21 05:26:56.295511 2026] [:error] [pid 21563:tid 21568] [client 65.52.167.153:29433] [client 65.52.167.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aW_zIBZq__dTorabEoyXpgAAAMM"]
[Wed Jan 21 05:42:24.621900 2026] [:error] [pid 21455:tid 21511] [client 4.194.34.171:45731] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contents.php/lv.php"] [unique_id "aW_2wIpOKALCSo1URZFHCAAAAFQ"]
[Wed Jan 21 05:42:24.996980 2026] [:error] [pid 59863:tid 59876] [client 4.194.34.171:45710] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contents.php/lv.php"] [unique_id "aW_2wLHQ1zVZ4yLuI-zdbAAAAQk"]
[Wed Jan 21 05:42:25.353696 2026] [:error] [pid 59863:tid 59875] [client 4.194.34.171:45727] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contents.php/lv.php"] [unique_id "aW_2wbHQ1zVZ4yLuI-zdbQAAAQg"]
[Wed Jan 21 05:42:25.713195 2026] [:error] [pid 59863:tid 59882] [client 4.194.34.171:62848] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contents.php/lv.php"] [unique_id "aW_2wbHQ1zVZ4yLuI-zdbwAAAQ8"]
[Wed Jan 21 06:04:47.595065 2026] [:error] [pid 21563:tid 21584] [client 103.65.236.149:63052] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aW_7_xZq__dTorabEoyi9gAAANM"]
[Wed Jan 21 06:04:48.136635 2026] [:error] [pid 21456:tid 21528] [client 103.65.236.149:63258] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aW_8AAKyVQ9Ob2YxRAqNQwAAAIo"]
[Wed Jan 21 06:59:21.555878 2026] [:error] [pid 21563:tid 21584] [client 43.130.9.111:59054] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXAIyRZq__dTorabEoyzvAAAANM"]
[Wed Jan 21 07:38:54.879031 2026] [:error] [pid 59863:tid 59874] [client 4.194.34.171:40071] [client 4.194.34.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXASDrHQ1zVZ4yLuI-wVKwAAAQc"]
[Wed Jan 21 07:38:55.237304 2026] [autoindex:error] [pid 59863:tid 59875] [client 4.194.34.171:48655] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 07:38:58.272370 2026] [autoindex:error] [pid 21454:tid 21476] [client 4.194.34.171:40119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 07:39:00.568515 2026] [autoindex:error] [pid 21454:tid 21481] [client 4.194.34.171:40119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 07:39:01.646567 2026] [autoindex:error] [pid 21454:tid 21483] [client 4.194.34.171:40119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 07:39:03.677801 2026] [:error] [pid 21454:tid 21487] [client 4.194.34.171:40119] [client 4.194.34.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aXASFzwp5UZmMFzY2bp3wQAAABc"]
[Wed Jan 21 07:39:04.039221 2026] [autoindex:error] [pid 59863:tid 59889] [client 4.194.34.171:48674] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 07:39:04.133521 2026] [autoindex:error] [pid 59863:tid 59867] [client 4.194.34.171:48674] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 07:39:04.226166 2026] [autoindex:error] [pid 59863:tid 59874] [client 4.194.34.171:48674] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 07:39:05.375757 2026] [:error] [pid 59863:tid 59885] [client 4.194.34.171:48674] [client 4.194.34.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/file.php"] [unique_id "aXASGbHQ1zVZ4yLuI-wVTgAAARI"]
[Wed Jan 21 07:39:05.727706 2026] [:error] [pid 59863:tid 59884] [client 4.194.34.171:40064] [client 4.194.34.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aXASGbHQ1zVZ4yLuI-wVUQAAARE"]
[Wed Jan 21 07:39:08.156846 2026] [autoindex:error] [pid 21455:tid 21494] [client 4.194.34.171:48645] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 07:39:08.248478 2026] [autoindex:error] [pid 21455:tid 21502] [client 4.194.34.171:48645] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 21 07:39:13.362724 2026] [:error] [pid 21455:tid 21496] [client 4.194.34.171:48645] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aXASIYpOKALCSo1URZFmWQAAAEU"]
[Wed Jan 21 07:39:13.723439 2026] [:error] [pid 21563:tid 21572] [client 4.194.34.171:48654] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aXASIRZq__dTorabEozCAQAAAMc"]
[Wed Jan 21 07:39:14.091758 2026] [:error] [pid 21563:tid 21577] [client 4.194.34.171:48641] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aXASIhZq__dTorabEozCAgAAAMw"]
[Wed Jan 21 07:39:14.446123 2026] [:error] [pid 21563:tid 21576] [client 4.194.34.171:40084] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aXASIhZq__dTorabEozCBAAAAMs"]
[Wed Jan 21 09:13:50.201467 2026] [:error] [pid 59863:tid 59885] [client 4.194.34.171:30241] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aXAoTrHQ1zVZ4yLuI-w0wwAAARI"]
[Wed Jan 21 09:13:50.555198 2026] [:error] [pid 59863:tid 59870] [client 4.194.34.171:10956] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aXAoTrHQ1zVZ4yLuI-w0xAAAAQM"]
[Wed Jan 21 09:13:50.907297 2026] [:error] [pid 21455:tid 21498] [client 4.194.34.171:37808] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aXAoTopOKALCSo1URZGAwQAAAEc"]
[Wed Jan 21 09:13:51.259672 2026] [:error] [pid 21454:tid 21487] [client 4.194.34.171:10973] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aXAoTzwp5UZmMFzY2bqYZgAAABc"]
[Wed Jan 21 10:53:28.310701 2026] [:error] [pid 21563:tid 21571] [client 43.173.1.69:42024] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXA_qBZq__dTorabEoz3vAAAAMY"]
[Wed Jan 21 13:04:32.730211 2026] [:error] [pid 21563:tid 21566] [client 101.91.148.219:52525] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXBeYBZq__dTorabEowc4wAAAME"]
[Wed Jan 21 13:23:04.966089 2026] [:error] [pid 59863:tid 59884] [client 49.36.192.210:62895] [client 49.36.192.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.192.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXBiuLHQ1zVZ4yLuI-xv1AAAARE"]
[Wed Jan 21 14:28:57.456482 2026] [:error] [pid 56352:tid 56357] [client 49.36.192.210:50081] [client 49.36.192.210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXByKdWN6wYNPTU3efXM9wAAAUM"]
[Wed Jan 21 14:30:40.537286 2026] [:error] [pid 21454:tid 21464] [client 49.36.192.210:53639] [client 49.36.192.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.192.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXBykDwp5UZmMFzY2br74QAAAAA"]
[Wed Jan 21 15:05:04.423084 2026] [:error] [pid 21456:tid 21542] [client 41.142.216.144:64136] [client 41.142.216.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aXB6oAKyVQ9Ob2YxRAoq2QAAAJg"], referer: https://news.ycombinator.com/item?id=34567890
[Wed Jan 21 15:05:05.868743 2026] [:error] [pid 21456:tid 21530] [client 41.142.216.144:64983] [client 41.142.216.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "aXB6oQKyVQ9Ob2YxRAoq3QAAAIw"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Wed Jan 21 15:05:07.311296 2026] [:error] [pid 21563:tid 21566] [client 41.142.216.144:49697] [client 41.142.216.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old"] [unique_id "aXB6oxZq__dTorabEoxDlgAAAME"], referer: https://www.twitch.tv/directory/game/Just%20Chatting
[Wed Jan 21 15:05:10.110270 2026] [:error] [pid 21454:tid 21464] [client 41.142.216.144:51920] [client 41.142.216.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aXB6pjwp5UZmMFzY2boExAAAAAA"], referer: https://l.facebook.com/
[Wed Jan 21 15:05:10.860435 2026] [:error] [pid 21454:tid 21469] [client 41.142.216.144:52400] [client 41.142.216.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "aXB6pjwp5UZmMFzY2boEygAAAAU"], referer: https://www.youtube.com/
[Wed Jan 21 16:15:39.017248 2026] [:error] [pid 21456:tid 21535] [client 130.49.112.192:11355] [client 130.49.112.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.49.112.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXCLKwKyVQ9Ob2YxRApCawAAAJE"]
[Wed Jan 21 16:15:42.240507 2026] [:error] [pid 21454:tid 21468] [client 130.49.112.192:23233] [client 130.49.112.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 130.49.112.192, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXCLLjwp5UZmMFzY2boVjQAAAAQ"]
[Thu Jan 22 03:21:11.822899 2026] [:error] [pid 21454:tid 21486] [client 40.83.90.33:14417] [client 40.83.90.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aXEnJzwp5UZmMFzY2bqj4gAAABY"]
[Thu Jan 22 03:21:12.294913 2026] [:error] [pid 21455:tid 21494] [client 40.83.90.33:20425] [client 40.83.90.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aXEnKIpOKALCSo1URZGGzAAAAEM"]
[Thu Jan 22 03:21:12.765797 2026] [:error] [pid 21563:tid 21582] [client 40.83.90.33:17200] [client 40.83.90.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aXEnKBZq__dTorabEozldQAAANE"]
[Thu Jan 22 03:21:13.236050 2026] [:error] [pid 21563:tid 21567] [client 40.83.90.33:16498] [client 40.83.90.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aXEnKRZq__dTorabEozleAAAAMI"]
[Thu Jan 22 05:27:59.164749 2026] [:error] [pid 52445:tid 52460] [client 40.83.90.33:1486] [client 40.83.90.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aXFE3-vMmsFgpSSb5L2IUAAAAAY"]
[Thu Jan 22 05:27:59.692874 2026] [:error] [pid 36083:tid 36107] [client 40.83.90.33:60447] [client 40.83.90.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aXFE35Cng2nQoR5iqwqgjQAAAVU"]
[Thu Jan 22 05:28:00.193519 2026] [:error] [pid 52447:tid 52509] [client 40.83.90.33:22487] [client 40.83.90.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aXFE4HRLA2NsdGqJzosvnAAAAIA"]
[Thu Jan 22 05:28:00.708826 2026] [:error] [pid 52447:tid 52518] [client 40.83.90.33:21139] [client 40.83.90.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aXFE4HRLA2NsdGqJzosvngAAAIk"]
[Thu Jan 22 14:20:40.819716 2026] [:error] [pid 27550:tid 27558] [client 170.106.110.146:40390] [client 170.106.110.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXHBuOOQDPzfV5R2LYTi8QAAAQY"]
[Thu Jan 22 14:44:24.496787 2026] [:error] [pid 36083:tid 36091] [client 14.215.163.132:52696] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXHHSJCng2nQoR5iqwpLywAAAUU"]
[Thu Jan 22 16:57:10.768056 2026] [:error] [pid 36083:tid 36101] [client 157.22.72.60:22595] [client 157.22.72.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.22.72.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXHmZpCng2nQoR5iqwpxPQAAAU8"]
[Thu Jan 22 17:18:06.432395 2026] [:error] [pid 34321:tid 34340] [client 154.6.121.129:59357] [client 154.6.121.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXHrThLMkukwqSCtKrBJJwAAAdA"]
[Thu Jan 22 17:18:11.568101 2026] [:error] [pid 52445:tid 52469] [client 178.20.31.93:51685] [client 178.20.31.93] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXHrU-vMmsFgpSSb5L05CQAAAA8"]
[Thu Jan 22 17:18:35.723569 2026] [:error] [pid 27550:tid 27552] [client 104.232.209.63:49803] [client 104.232.209.63] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXHra-OQDPzfV5R2LYQbOAAAAQA"]
[Thu Jan 22 17:20:04.311937 2026] [:error] [pid 52447:tid 52533] [client 193.151.188.175:46699] [client 193.151.188.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXHrxHRLA2NsdGqJzosnHAAAAJg"]
[Thu Jan 22 17:20:31.242594 2026] [:error] [pid 52445:tid 52464] [client 170.168.172.128:15483] [client 170.168.172.128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXHr3-vMmsFgpSSb5L052wAAAAo"]
[Thu Jan 22 17:21:04.079047 2026] [:error] [pid 52447:tid 52523] [client 45.135.2.81:25939] [client 45.135.2.81] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXHsAHRLA2NsdGqJzosnUwAAAI4"]
[Thu Jan 22 17:23:01.763701 2026] [:error] [pid 52447:tid 52523] [client 152.234.188.113:62778] [client 152.234.188.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.234.188.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXHsdXRLA2NsdGqJzosn_gAAAI4"]
[Thu Jan 22 17:32:54.710336 2026] [:error] [pid 34321:tid 34335] [client 152.234.188.113:52878] [client 152.234.188.113] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXHuxhLMkukwqSCtKrBPtQAAAcs"]
[Thu Jan 22 17:34:19.150217 2026] [:error] [pid 52445:tid 52477] [client 152.234.188.113:53977] [client 152.234.188.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.234.188.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXHvG-vMmsFgpSSb5L0-wQAAABc"]
[Thu Jan 22 22:33:21.343315 2026] [:error] [pid 52556:tid 52574] [client 95.216.63.67:55782] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/license.php"] [unique_id "aXI1Meg4y1NKM4AgfjCCgQAAANA"], referer: www.google.com
[Thu Jan 22 23:45:53.828406 2026] [:error] [pid 52447:tid 52511] [client 95.216.63.67:60601] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aXJGMXRLA2NsdGqJzouGzgAAAII"], referer: www.google.com
[Fri Jan 23 01:15:55.864661 2026] [:error] [pid 34321:tid 34335] [client 43.157.67.70:59684] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXJbSxLMkukwqSCtKrDnFwAAAcs"]
[Fri Jan 23 03:31:59.341018 2026] [:error] [pid 8194:tid 8298] [client 182.43.70.143:39801] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXJ7L6Zj91bk5CCwhi2QNwAAAIA"]
[Fri Jan 23 03:40:12.583622 2026] [:error] [pid 45992:tid 46005] [client 4.190.200.66:28387] [client 4.190.200.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contents.php/lv.php"] [unique_id "aXJ9HHcdudxopzjYpH7QAwAAAMs"]
[Fri Jan 23 03:40:13.072091 2026] [:error] [pid 45896:tid 45941] [client 4.190.200.66:27102] [client 4.190.200.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contents.php/lv.php"] [unique_id "aXJ9HcOr4eI8EF9gQy57tAAAAE8"]
[Fri Jan 23 03:40:13.559593 2026] [:error] [pid 45897:tid 45967] [client 4.190.200.66:65188] [client 4.190.200.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contents.php/lv.php"] [unique_id "aXJ9HSx9QjWmlaBtHVVV4wAAAI4"]
[Fri Jan 23 03:40:14.057638 2026] [:error] [pid 45992:tid 46010] [client 4.190.200.66:39177] [client 4.190.200.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contents.php/lv.php"] [unique_id "aXJ9HncdudxopzjYpH7QBQAAANA"]
[Fri Jan 23 04:49:56.576313 2026] [:error] [pid 11607:tid 11669] [client 20.219.130.224:52520] [client 20.219.130.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/berlin.php"] [unique_id "aXKNdAucTAUsUUzKw5cECgAAAFg"]
[Fri Jan 23 04:49:57.157223 2026] [:error] [pid 11608:tid 11682] [client 20.219.130.224:59493] [client 20.219.130.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aXKNdb4alK6RZLlMctpWhwAAAIo"]
[Fri Jan 23 04:49:58.974822 2026] [proxy_fcgi:error] [pid 11606:tid 11628] [client 20.219.130.224:15428] AH01071: Got error 'Primary script unknown'
[Fri Jan 23 04:50:06.689113 2026] [:error] [pid 11606:tid 11621] [client 20.219.130.224:15428] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aXKNflnjAJqfHEQLcshjMwAAAAY"]
[Fri Jan 23 04:50:07.249999 2026] [:error] [pid 11608:tid 11687] [client 20.219.130.224:56387] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aXKNf74alK6RZLlMctpWlwAAAI8"]
[Fri Jan 23 04:50:07.814926 2026] [:error] [pid 11607:tid 11656] [client 20.219.130.224:59777] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aXKNfwucTAUsUUzKw5cEGQAAAEw"]
[Fri Jan 23 04:50:08.391479 2026] [:error] [pid 11608:tid 11685] [client 20.219.130.224:55284] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/functions.php"] [unique_id "aXKNgL4alK6RZLlMctpWmwAAAI0"]
[Fri Jan 23 07:58:11.043596 2026] [autoindex:error] [pid 11606:tid 11624] [client 4.190.200.66:1219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 07:58:13.310532 2026] [autoindex:error] [pid 11606:tid 11615] [client 4.190.200.66:1219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 07:58:19.967771 2026] [:error] [pid 11606:tid 11624] [client 4.190.200.66:1219] [client 4.190.200.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin-header.php"] [unique_id "aXK5m1njAJqfHEQLcsiyJAAAAAk"]
[Fri Jan 23 07:58:20.468181 2026] [:error] [pid 11607:tid 11663] [client 4.190.200.66:64925] [client 4.190.200.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin-header.php"] [unique_id "aXK5nAucTAUsUUzKw5dT5gAAAFI"]
[Fri Jan 23 07:58:20.970390 2026] [:error] [pid 11732:tid 11746] [client 4.190.200.66:64920] [client 4.190.200.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin-header.php"] [unique_id "aXK5nOfd54xxq04JKuOqTQAAAMw"]
[Fri Jan 23 07:58:21.487891 2026] [:error] [pid 11606:tid 11618] [client 4.190.200.66:64907] [client 4.190.200.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin-header.php"] [unique_id "aXK5nVnjAJqfHEQLcsiyJQAAAAM"]
[Fri Jan 23 13:04:05.413698 2026] [:error] [pid 62368:tid 62372] [client 129.212.186.67:62373] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/administrator/"] [unique_id "aXMBRSeMzKRnyYLMANMf4AAAAQE"]
[Fri Jan 23 13:04:05.803336 2026] [:error] [pid 11607:tid 11644] [client 129.212.186.67:62524] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/administrator/index.php"] [unique_id "aXMBRQucTAUsUUzKw5evRQAAAEA"]
[Fri Jan 23 13:04:06.193498 2026] [:error] [pid 11607:tid 11663] [client 129.212.186.67:62762] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/administrator/index2.php"] [unique_id "aXMBRgucTAUsUUzKw5evRgAAAFI"]
[Fri Jan 23 13:04:06.585536 2026] [:error] [pid 11606:tid 11619] [client 129.212.186.67:62958] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/administrator/index3.php"] [unique_id "aXMBRlnjAJqfHEQLcsgedwAAAAQ"]
[Fri Jan 23 13:04:06.979199 2026] [:error] [pid 11608:tid 11693] [client 129.212.186.67:63147] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joomla/administrator/"] [unique_id "aXMBRr4alK6RZLlMcto-ogAAAJU"]
[Fri Jan 23 13:04:07.371966 2026] [:error] [pid 62368:tid 62382] [client 129.212.186.67:63328] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cms/administrator/"] [unique_id "aXMBRyeMzKRnyYLMANMf6QAAAQs"]
[Fri Jan 23 13:04:07.766320 2026] [:error] [pid 11732:tid 11734] [client 129.212.186.67:63616] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/site/administrator/"] [unique_id "aXMBR-fd54xxq04JKuMMhgAAAMA"]
[Fri Jan 23 13:04:08.152104 2026] [:error] [pid 11732:tid 11743] [client 129.212.186.67:63799] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web/administrator/"] [unique_id "aXMBSOfd54xxq04JKuMMigAAAMk"]
[Fri Jan 23 13:04:08.536664 2026] [:error] [pid 11607:tid 11657] [client 129.212.186.67:64056] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/panel/administrator/"] [unique_id "aXMBSAucTAUsUUzKw5evTgAAAE0"]
[Fri Jan 23 14:01:17.659333 2026] [:error] [pid 64912:tid 64914] [client 43.157.62.101:51276] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXMOrbem6jVGKqodwtKYtgAAAYA"]
[Fri Jan 23 14:55:26.166575 2026] [:error] [pid 64230:tid 64250] [client 212.227.175.43:54760] [client 212.227.175.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "aXMbXq2JXmVjD91caKJ6YAAAAVE"], referer: www.google.com
[Fri Jan 23 15:57:35.409907 2026] [:error] [pid 64912:tid 64930] [client 117.33.163.216:53666] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXMp77em6jVGKqodwtK9hwAAAZA"]
[Fri Jan 23 21:45:50.260659 2026] [:error] [pid 1517:tid 1542] [client 43.130.16.140:41522] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXN7jiZNw8-8ydKHCJuUxwAAAdY"]
[Fri Jan 23 23:11:11.798107 2026] [:error] [pid 64912:tid 64921] [client 122.173.186.65:64378] [client 122.173.186.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.173.186.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXOPj7em6jVGKqodwtIU7QAAAYc"]
[Fri Jan 23 23:12:38.344307 2026] [:error] [pid 11732:tid 11752] [client 136.158.103.190:6714] [client 136.158.103.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.103.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXOP5ufd54xxq04JKuOkcAAAANI"]
[Fri Jan 23 23:17:17.773985 2026] [:error] [pid 1517:tid 1538] [client 136.158.103.190:15836] [client 136.158.103.190] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXOQ_SZNw8-8ydKHCJutZwAAAdI"]
[Fri Jan 23 23:21:30.732746 2026] [:error] [pid 62368:tid 62382] [client 122.173.186.65:52898] [client 122.173.186.65] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXOR-ieMzKRnyYLMANOzXQAAAQs"]
[Sat Jan 24 04:52:54.928967 2026] [:error] [pid 40905:tid 40977] [client 192.144.148.122:57546] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXPfpl3rUAneNkh7mXDqLQAAAIs"]
[Sat Jan 24 09:06:26.380590 2026] [:error] [pid 40903:tid 40951] [client 170.205.31.138:58151] [client 170.205.31.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-confiq.php"] [unique_id "aXQbEhxw3xvyqXTcGl_tcgAAAEw"]
[Sat Jan 24 15:27:40.999610 2026] [:error] [pid 40903:tid 40939] [client 213.209.159.55:33044] [client 213.209.159.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aXR0bBxw3xvyqXTcGl9g4gAAAEA"]
[Sat Jan 24 16:02:30.639843 2026] [:error] [pid 41009:tid 41013] [client 43.130.15.147:57272] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXR8lmrewfoFUDD3TM1XwAAAAMI"]
[Sat Jan 24 23:52:52.394017 2026] [:error] [pid 14976:tid 14992] [client 60.188.57.0:53160] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXTq1GvdigydYOB2KS-TcgAAAY4"]
[Sun Jan 25 00:57:05.154201 2026] [:error] [pid 40902:tid 40914] [client 64.89.163.25:58589] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXT54QSCceZpurDgOesefgAAAAI"]
[Sun Jan 25 00:57:05.788834 2026] [:error] [pid 40902:tid 40929] [client 64.89.163.25:58823] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXT54QSCceZpurDgOesemAAAABE"]
[Sun Jan 25 00:57:06.426695 2026] [:error] [pid 14976:tid 14984] [client 64.89.163.25:59058] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXT54mvdigydYOB2KS-kVgAAAYY"]
[Sun Jan 25 00:57:07.071672 2026] [:error] [pid 40902:tid 40920] [client 64.89.163.25:59278] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXT54wSCceZpurDgOesexQAAAAg"]
[Sun Jan 25 00:57:07.709767 2026] [:error] [pid 41009:tid 41015] [client 64.89.163.25:59523] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXT542rewfoFUDD3TM3_zQAAAMQ"]
[Sun Jan 25 10:37:55.834056 2026] [:error] [pid 53419:tid 53441] [client 103.77.106.81:56973] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aXWCAyNxBUypy_ALgwOUCwAAAA0"]
[Sun Jan 25 15:50:17.075642 2026] [:error] [pid 53521:tid 53551] [client 43.166.255.122:45942] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXXLOUAzLL1HphkAdX4ZOQAAANI"]
[Sun Jan 25 19:51:08.349601 2026] [:error] [pid 33847:tid 33875] [client 185.176.40.138:58568] [client 185.176.40.138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXYDrBb-MBjjiRpV5ScvPgAAAdc"]
[Sun Jan 25 19:52:34.980166 2026] [:error] [pid 9122:tid 9139] [client 109.234.165.115:50722] [client 109.234.165.115] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXYEAmgJ3AtoqtQp2gQ3tQAAAY8"]
[Sun Jan 25 19:52:36.765883 2026] [:error] [pid 53421:tid 53497] [client 185.176.40.138:47402] [client 185.176.40.138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXYEBJKP_6Rogdk6hdGN0QAAAI4"]
[Sun Jan 25 20:25:02.784360 2026] [:error] [pid 9122:tid 9143] [client 39.109.116.19:60586] [client 39.109.116.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.109.116.19, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXYLnmgJ3AtoqtQp2gQ9mwAAAZM"]
[Sun Jan 25 20:25:04.077597 2026] [:error] [pid 9122:tid 9126] [client 192.140.162.207:58590] [client 192.140.162.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.140.162.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXYLoGgJ3AtoqtQp2gQ9nQAAAYI"]
[Sun Jan 25 20:25:05.067860 2026] [:error] [pid 53420:tid 53464] [client 39.109.116.19:60740] [client 39.109.116.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.109.116.19, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXYLoY5y-t2ZKNqnnbU9EwAAAEg"]
[Sun Jan 25 20:25:10.051356 2026] [:error] [pid 53420:tid 53463] [client 192.140.162.207:58896] [client 192.140.162.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.140.162.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXYLpo5y-t2ZKNqnnbU9GAAAAEc"]
[Mon Jan 26 04:29:39.895238 2026] [:error] [pid 24556:tid 24569] [client 217.154.179.111:37804] [client 217.154.179.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.179.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXZ9M0yDW1_EbgDa3XJKeAAAAAQ"]
[Mon Jan 26 04:29:46.157483 2026] [:error] [pid 24558:tid 24623] [client 217.154.179.111:38804] [client 217.154.179.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.154.179.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXZ9Ogo1PXqeJqIMTQbsEgAAAII"]
[Mon Jan 26 04:29:55.739394 2026] [:error] [pid 24666:tid 24689] [client 132.148.185.11:57108] [client 132.148.185.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.185.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXZ9Q5mH-L0_jbK3i9EEswAAANU"]
[Mon Jan 26 04:30:15.856900 2026] [:error] [pid 61286:tid 61311] [client 159.203.3.128:65142] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXZ9V8nVt687wYGMPn9CyAAAAVU"]
[Mon Jan 26 04:30:16.293625 2026] [:error] [pid 61286:tid 61299] [client 159.203.3.128:65329] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXZ9WMnVt687wYGMPn9CzwAAAUk"]
[Mon Jan 26 04:30:16.728725 2026] [:error] [pid 24558:tid 24626] [client 159.203.3.128:65496] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aXZ9WAo1PXqeJqIMTQbsZQAAAIU"]
[Mon Jan 26 08:59:25.113786 2026] [:error] [pid 61287:tid 61318] [client 174.138.77.245:61485] [client 174.138.77.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 174.138.77.245, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXa8bdimZOwAM64CfR66GAAAAYE"]
[Mon Jan 26 08:59:27.845065 2026] [:error] [pid 61287:tid 61324] [client 174.138.77.245:62359] [client 174.138.77.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 174.138.77.245, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXa8b9imZOwAM64CfR66HQAAAYc"]
[Mon Jan 26 13:05:03.970439 2026] [:error] [pid 61286:tid 61304] [client 82.165.84.33:54204] [client 82.165.84.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.165.84.33, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXb1_8nVt687wYGMPn_V1gAAAU4"]
[Mon Jan 26 16:30:28.363987 2026] [:error] [pid 24557:tid 24610] [client 103.163.138.82:37722] [client 103.163.138.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.138.82, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXcmJOrlG7Vm9pxV14ztmgAAAFA"]
[Mon Jan 26 16:30:43.398134 2026] [:error] [pid 24556:tid 24584] [client 152.69.216.173:45586] [client 152.69.216.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.69.216.173, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXcmM0yDW1_EbgDa3XIJ3gAAABM"]
[Mon Jan 26 16:30:44.031283 2026] [:error] [pid 24556:tid 24572] [client 61.171.113.15:42756] [client 61.171.113.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.171.113.15, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXcmNEyDW1_EbgDa3XIJ4AAAAAc"]
[Mon Jan 26 16:31:18.215672 2026] [:error] [pid 24556:tid 24577] [client 61.171.113.15:44214] [client 61.171.113.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.171.113.15, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXcmVkyDW1_EbgDa3XIKFwAAAAw"]
[Mon Jan 26 17:10:42.040887 2026] [:error] [pid 61252:tid 61275] [client 152.69.210.5:64674] [client 152.69.210.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXcvkrrGlf8FG2etxUBmSAAAARU"]
[Mon Jan 26 17:10:42.400060 2026] [:error] [pid 24557:tid 24618] [client 152.69.210.5:58192] [client 152.69.210.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.69.210.5, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXcvkurlG7Vm9pxV14z3wAAAAFg"]
[Mon Jan 26 17:24:39.361482 2026] [:error] [pid 24557:tid 24605] [client 182.48.230.67:59082] [client 182.48.230.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.230.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXcy1-rlG7Vm9pxV14z6UwAAAEs"]
[Mon Jan 26 17:28:39.182601 2026] [:error] [pid 61252:tid 61269] [client 182.48.230.67:59598] [client 182.48.230.67] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXczx7rGlf8FG2etxUBqjgAAAQ8"]
[Mon Jan 26 18:29:34.721875 2026] [:error] [pid 24556:tid 24581] [client 46.224.98.179:44396] [client 46.224.98.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.224.98.179, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXdCDkyDW1_EbgDa3XIx7wAAABA"]
[Mon Jan 26 20:34:24.597366 2026] [:error] [pid 61286:tid 61290] [client 14.215.163.132:42903] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXdfUMnVt687wYGMPn8iEgAAAUA"]
[Mon Jan 26 20:49:47.741613 2026] [:error] [pid 24556:tid 24569] [client 38.248.90.105:56850] [client 38.248.90.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.248.90.105, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXdi60yDW1_EbgDa3XJjfwAAAAQ"]
[Mon Jan 26 20:49:50.697122 2026] [:error] [pid 61287:tid 61330] [client 38.248.90.105:57430] [client 38.248.90.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.248.90.105, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXdi7timZOwAM64CfR5f6AAAAY0"]
[Mon Jan 26 23:14:19.757317 2026] [:error] [pid 24666:tid 24685] [client 45.133.5.55:58309] [client 45.133.5.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.55, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXeEy5mH-L0_jbK3i9HrvAAAANE"]
[Mon Jan 26 23:36:19.435444 2026] [:error] [pid 24557:tid 24599] [client 34.26.168.186:45982] [client 34.26.168.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aXeJ8-rlG7Vm9pxV14xP1wAAAEU"]
[Tue Jan 27 00:12:19.417764 2026] [:error] [pid 24558:tid 24621] [client 65.21.129.21:41230] [client 65.21.129.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aXeSYwo1PXqeJqIMTQbKAAAAAIA"]
[Tue Jan 27 02:13:23.372845 2026] [:error] [pid 44587:tid 44800] [client 51.68.227.217:60500] [client 51.68.227.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aXeuw4sXadca93KAT8T3sgAAAMg"], referer: https://www.facebook.com/
[Tue Jan 27 03:17:34.431221 2026] [:error] [pid 44586:tid 44775] [client 119.96.24.54:39282] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXe9zqZDnq-dPBqM5Li8dAAAAIs"]
[Tue Jan 27 04:58:47.730325 2026] [:error] [pid 41780:tid 41792] [client 95.111.225.234:45316] [client 95.111.225.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aXfVh1vu-XLQ0TaZ4FFZWAAAAQo"], referer: https://www.notion.so/
[Tue Jan 27 05:35:30.660129 2026] [:error] [pid 7454:tid 7516] [client 52.243.60.34:9634] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aXfeIpltCoZEfMmfl8BaNgAAAIA"]
[Tue Jan 27 05:35:31.877431 2026] [:error] [pid 41780:tid 41782] [client 52.243.60.34:5057] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aXfeI1vu-XLQ0TaZ4FFhuwAAAQA"]
[Tue Jan 27 05:35:43.111741 2026] [:error] [pid 7452:tid 7463] [client 52.243.60.34:9631] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aXfeL2lXocEpHDB6FUZpQQAAAAI"]
[Tue Jan 27 05:35:44.992934 2026] [:error] [pid 7454:tid 7539] [client 52.243.60.34:10231] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aXfeMJltCoZEfMmfl8BaPAAAAJc"]
[Tue Jan 27 05:35:46.462493 2026] [:error] [pid 41780:tid 41803] [client 52.243.60.34:12020] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "aXfeMlvu-XLQ0TaZ4FFhxwAAARU"]
[Tue Jan 27 05:35:50.128569 2026] [:error] [pid 7454:tid 7536] [client 52.243.60.34:7651] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "aXfeNpltCoZEfMmfl8BaQAAAAJQ"]
[Tue Jan 27 05:35:54.292611 2026] [:error] [pid 7452:tid 7478] [client 52.243.60.34:7621] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "aXfeOmlXocEpHDB6FUZpTgAAABE"]
[Tue Jan 27 05:36:09.859851 2026] [:error] [pid 7453:tid 7495] [client 52.243.60.34:13224] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aXfeSRfsyA2ws_ADquiQhwAAAEY"]
[Tue Jan 27 05:36:12.704980 2026] [:error] [pid 41780:tid 41799] [client 52.243.60.34:10151] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aXfeTFvu-XLQ0TaZ4FFh9wAAARE"]
[Tue Jan 27 05:36:13.617345 2026] [:error] [pid 7561:tid 7571] [client 52.243.60.34:14982] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aXfeTbXGI6mgvHQqkXwPOAAAAMc"]
[Tue Jan 27 05:36:42.029543 2026] [:error] [pid 7452:tid 7470] [client 52.243.60.34:12016] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws38.php"] [unique_id "aXfeamlXocEpHDB6FUZpnAAAAAk"]
[Tue Jan 27 05:36:54.675505 2026] [:error] [pid 7452:tid 7473] [client 52.243.60.34:3402] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws38.php"] [unique_id "aXfedmlXocEpHDB6FUZptAAAAAw"]
[Tue Jan 27 05:37:11.217888 2026] [:error] [pid 7453:tid 7512] [client 52.243.60.34:3371] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXfehxfsyA2ws_ADquiRCQAAAFc"]
[Tue Jan 27 05:37:21.048246 2026] [:error] [pid 41780:tid 41786] [client 52.243.60.34:3379] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploaxa1.php"] [unique_id "aXfekVvu-XLQ0TaZ4FFiawAAAQQ"]
[Tue Jan 27 05:37:27.670031 2026] [:error] [pid 7453:tid 7511] [client 52.243.60.34:10128] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploaxa1.php"] [unique_id "aXfelxfsyA2ws_ADquiRJAAAAFY"]
[Tue Jan 27 05:37:35.836589 2026] [:error] [pid 7452:tid 7465] [client 52.243.60.34:8600] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-su.php"] [unique_id "aXfen2lXocEpHDB6FUZp6gAAAAQ"]
[Tue Jan 27 05:37:36.921529 2026] [:error] [pid 7454:tid 7539] [client 52.243.60.34:10114] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-su.php"] [unique_id "aXfeoJltCoZEfMmfl8BbsgAAAJc"]
[Tue Jan 27 05:37:39.927528 2026] [:error] [pid 7454:tid 7540] [client 52.243.60.34:10158] [client 52.243.60.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-su.php"] [unique_id "aXfeo5ltCoZEfMmfl8BbvgAAAJg"]
[Tue Jan 27 05:58:29.485793 2026] [:error] [pid 7454:tid 7534] [client 20.89.233.56:3350] [client 20.89.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXfjhZltCoZEfMmfl8BmawAAAJI"]
[Tue Jan 27 05:58:29.993182 2026] [:error] [pid 7452:tid 7464] [client 20.89.233.56:56086] [client 20.89.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXfjhWlXocEpHDB6FUZvjwAAAAM"]
[Tue Jan 27 05:58:30.531249 2026] [:error] [pid 7452:tid 7467] [client 20.89.233.56:20499] [client 20.89.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXfjhmlXocEpHDB6FUZvkQAAAAY"]
[Tue Jan 27 05:58:31.057564 2026] [:error] [pid 7561:tid 7564] [client 20.89.233.56:3766] [client 20.89.233.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXfjh7XGI6mgvHQqkXwVlwAAAMA"]
[Tue Jan 27 07:32:38.082386 2026] [:error] [pid 7454:tid 7530] [client 59.27.157.228:53040] [client 59.27.157.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.27.157.228, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXf5lpltCoZEfMmfl8CcZgAAAI4"]
[Tue Jan 27 07:32:41.713025 2026] [:error] [pid 7454:tid 7534] [client 54.232.138.219:57346] [client 54.232.138.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.232.138.219, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXf5mZltCoZEfMmfl8CcbgAAAJI"]
[Tue Jan 27 11:43:34.639573 2026] [:error] [pid 41780:tid 41802] [client 64.225.49.30:60043] [client 64.225.49.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aXg0Zlvu-XLQ0TaZ4FHBuQAAARQ"], referer: binance.com
[Tue Jan 27 14:12:03.745463 2026] [:error] [pid 48412:tid 48430] [client 190.92.174.33:52392] [client 190.92.174.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.33, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhXM3bJMfAKlln88JGscgAAAVA"]
[Tue Jan 27 14:12:06.197650 2026] [:error] [pid 48412:tid 48434] [client 190.92.174.33:52392] [client 190.92.174.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.33, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhXNnbJMfAKlln88JGsdQAAAVQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 14:18:17.456818 2026] [:error] [pid 48662:tid 48684] [client 103.231.202.90:43806] [client 103.231.202.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.231.202.90, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhYqeD8iESUP9uRiRPJiQAAApA"]
[Tue Jan 27 14:18:20.612563 2026] [:error] [pid 48662:tid 48674] [client 103.231.202.90:43806] [client 103.231.202.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.231.202.90, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhYrOD8iESUP9uRiRPJigAAAoY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 14:24:18.170159 2026] [:error] [pid 48631:tid 48638] [client 185.245.83.32:52018] [client 185.245.83.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.245.83.32, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhaEiN5eesHzEogX0wS5QAAAkU"]
[Tue Jan 27 14:44:35.397378 2026] [:error] [pid 7561:tid 7564] [client 103.92.235.85:47282] [client 103.92.235.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.92.235.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhe07XGI6mgvHQqkXynHAAAAMA"]
[Tue Jan 27 14:44:36.656400 2026] [:error] [pid 7561:tid 7574] [client 103.92.235.85:47282] [client 103.92.235.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.92.235.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhe1LXGI6mgvHQqkXynHQAAAMo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 14:49:06.104479 2026] [:error] [pid 7454:tid 7520] [client 188.55.86.237:51652] [client 188.55.86.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.55.86.237, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhf4pltCoZEfMmfl8DzxAAAAIQ"]
[Tue Jan 27 14:53:27.046126 2026] [:error] [pid 7453:tid 7501] [client 54.151.138.85:17042] [client 54.151.138.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.151.138.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhg5xfsyA2ws_ADquhTSAAAAEw"]
[Tue Jan 27 14:53:28.320205 2026] [:error] [pid 7453:tid 7512] [client 54.151.138.85:17042] [client 54.151.138.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.151.138.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhg6BfsyA2ws_ADquhTTQAAAFc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 14:53:35.701190 2026] [:error] [pid 48631:tid 48646] [client 171.244.17.74:52928] [client 171.244.17.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.244.17.74, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhg7yN5eesHzEogX0wWsAAAAk0"]
[Tue Jan 27 14:53:38.261652 2026] [:error] [pid 48631:tid 48655] [client 171.244.17.74:52928] [client 171.244.17.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.244.17.74, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhg8iN5eesHzEogX0wWtQAAAlY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 14:58:55.386877 2026] [:error] [pid 7561:tid 7575] [client 216.251.35.201:55840] [client 216.251.35.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.251.35.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhiL7XGI6mgvHQqkXypJgAAAMs"]
[Tue Jan 27 14:58:58.234820 2026] [:error] [pid 7561:tid 7587] [client 216.251.35.201:55840] [client 216.251.35.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.251.35.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhiMrXGI6mgvHQqkXypKAAAANc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 15:06:55.668405 2026] [:error] [pid 48662:tid 48686] [client 216.251.35.201:39858] [client 216.251.35.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.251.35.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhkD-D8iESUP9uRiRPOWgAAApI"]
[Tue Jan 27 15:06:58.431746 2026] [:error] [pid 48662:tid 48692] [client 216.251.35.201:39858] [client 216.251.35.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.251.35.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhkEuD8iESUP9uRiRPOXQAAApc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 15:08:38.850017 2026] [:error] [pid 48631:tid 48639] [client 51.15.139.63:8721] [client 51.15.139.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.15.139.63, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhkdiN5eesHzEogX0wYSgAAAkY"]
[Tue Jan 27 15:08:42.382345 2026] [:error] [pid 48631:tid 48645] [client 51.15.139.63:8721] [client 51.15.139.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.15.139.63, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhkeiN5eesHzEogX0wYTAAAAkw"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 15:08:56.889496 2026] [:error] [pid 48631:tid 48649] [client 69.57.172.153:33790] [client 69.57.172.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.57.172.153, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhkiCN5eesHzEogX0wYUwAAAlA"]
[Tue Jan 27 15:08:58.145882 2026] [:error] [pid 48631:tid 48646] [client 69.57.172.153:33790] [client 69.57.172.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.57.172.153, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhkiiN5eesHzEogX0wYVAAAAk0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 15:22:47.051580 2026] [:error] [pid 48412:tid 48433] [client 216.251.35.201:46480] [client 216.251.35.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.251.35.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhnx3bJMfAKlln88JG5jwAAAVM"]
[Tue Jan 27 15:22:48.248673 2026] [:error] [pid 48412:tid 48431] [client 216.251.35.201:46480] [client 216.251.35.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.251.35.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhnyHbJMfAKlln88JG5lQAAAVE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 15:24:42.118056 2026] [:error] [pid 41780:tid 41797] [client 47.242.167.96:44564] [client 47.242.167.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.242.167.96, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhoOlvu-XLQ0TaZ4FHnBQAAAQ8"]
[Tue Jan 27 15:36:20.562492 2026] [:error] [pid 48446:tid 48485] [client 82.165.84.17:37164] [client 82.165.84.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.84.17, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhq9MDRSaZ8F8aaLxlkQgAAAcg"]
[Tue Jan 27 15:36:21.995609 2026] [:error] [pid 48446:tid 48491] [client 82.165.84.17:37164] [client 82.165.84.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.84.17, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhq9cDRSaZ8F8aaLxlkRwAAAc0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 15:44:01.199610 2026] [:error] [pid 48412:tid 48420] [client 173.231.249.1:34568] [client 173.231.249.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.231.249.1, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhswXbJMfAKlln88JHAzQAAAUY"]
[Tue Jan 27 15:44:02.426490 2026] [:error] [pid 48412:tid 48424] [client 173.231.249.1:34568] [client 173.231.249.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.231.249.1, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhswnbJMfAKlln88JHAzwAAAUo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 15:49:32.014697 2026] [:error] [pid 48412:tid 48426] [client 103.92.235.85:58586] [client 103.92.235.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.92.235.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhuDHbJMfAKlln88JHBzwAAAUw"]
[Tue Jan 27 15:49:33.344981 2026] [:error] [pid 48412:tid 48418] [client 103.92.235.85:58586] [client 103.92.235.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.92.235.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhuDXbJMfAKlln88JHB0AAAAUQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 15:57:19.727610 2026] [:error] [pid 7454:tid 7538] [client 1.15.52.154:56908] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXhv35ltCoZEfMmfl8D8XgAAAJY"]
[Tue Jan 27 15:57:25.438249 2026] [:error] [pid 48412:tid 48431] [client 149.50.150.145:38772] [client 149.50.150.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.50.150.145, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhv5XbJMfAKlln88JHCywAAAVE"]
[Tue Jan 27 15:57:27.191013 2026] [:error] [pid 48412:tid 48433] [client 149.50.150.145:38772] [client 149.50.150.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.50.150.145, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhv53bJMfAKlln88JHCzAAAAVM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 16:10:34.562567 2026] [:error] [pid 7453:tid 7510] [client 103.75.185.145:53868] [client 103.75.185.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.75.185.145, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhy-hfsyA2ws_ADquhpcwAAAFU"]
[Tue Jan 27 16:10:35.832334 2026] [:error] [pid 7453:tid 7491] [client 103.75.185.145:53868] [client 103.75.185.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.75.185.145, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXhy-xfsyA2ws_ADquhpdwAAAEI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 16:28:16.508059 2026] [:error] [pid 7454:tid 7526] [client 209.235.136.138:60494] [client 209.235.136.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXh3IJltCoZEfMmfl8AAiAAAAIo"]
[Tue Jan 27 16:28:17.752838 2026] [:error] [pid 7454:tid 7537] [client 209.235.136.138:60494] [client 209.235.136.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.235.136.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXh3IZltCoZEfMmfl8AAigAAAJU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 16:34:52.130989 2026] [:error] [pid 7561:tid 7570] [client 212.224.93.202:51268] [client 212.224.93.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.224.93.202, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXh4rLXGI6mgvHQqkXy4uwAAAMY"]
[Tue Jan 27 16:34:54.144981 2026] [:error] [pid 7561:tid 7585] [client 212.224.93.202:51268] [client 212.224.93.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.224.93.202, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXh4rrXGI6mgvHQqkXy4vAAAANU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 16:44:46.415622 2026] [:error] [pid 48445:tid 48450] [client 213.32.30.198:64356] [client 213.32.30.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.198, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXh6_hFh_QNUhZ0Hkze-jwAAAYE"]
[Tue Jan 27 16:44:47.698481 2026] [:error] [pid 48445:tid 48469] [client 213.32.30.198:64356] [client 213.32.30.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.198, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXh6_xFh_QNUhZ0Hkze-kAAAAZQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 16:44:50.008791 2026] [:error] [pid 48631:tid 48635] [client 213.32.30.198:1844] [client 213.32.30.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.198, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXh7AiN5eesHzEogX0wk8AAAAkI"]
[Tue Jan 27 16:44:51.151663 2026] [:error] [pid 48631:tid 48657] [client 213.32.30.198:1844] [client 213.32.30.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.32.30.198, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXh7AyN5eesHzEogX0wk8QAAAlg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 17:04:32.576790 2026] [:error] [pid 48662:tid 48672] [client 190.92.174.81:47260] [client 190.92.174.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXh_oOD8iESUP9uRiRPcCQAAAoQ"]
[Tue Jan 27 17:04:34.851245 2026] [:error] [pid 48662:tid 48676] [client 190.92.174.81:47260] [client 190.92.174.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXh_ouD8iESUP9uRiRPcDAAAAog"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 17:14:36.342039 2026] [:error] [pid 41780:tid 41792] [client 34.30.170.78:52462] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXiB_Fvu-XLQ0TaZ4FH3owAAAQo"]
[Tue Jan 27 17:14:38.706317 2026] [:error] [pid 41780:tid 41796] [client 34.30.170.78:52462] [client 34.30.170.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.30.170.78, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXiB_lvu-XLQ0TaZ4FH3pgAAAQ4"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 17:17:27.522834 2026] [:error] [pid 48446:tid 48497] [client 192.250.235.90:34388] [client 192.250.235.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.235.90, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXiCp8DRSaZ8F8aaLxl1OQAAAdM"]
[Tue Jan 27 17:17:28.751810 2026] [:error] [pid 48446:tid 48486] [client 192.250.235.90:34388] [client 192.250.235.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.235.90, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXiCqMDRSaZ8F8aaLxl1OwAAAck"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Jan 27 18:11:10.242106 2026] [:error] [pid 48631:tid 48635] [client 168.196.213.97:53086] [client 168.196.213.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.196.213.97, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXiPPiN5eesHzEogX0wyAwAAAkI"]
[Tue Jan 27 19:42:12.997378 2026] [:error] [pid 48412:tid 48424] [client 143.110.223.228:59503] [client 143.110.223.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.223.228, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXiklHbJMfAKlln88JH1ygAAAUo"]
[Tue Jan 27 19:42:14.783068 2026] [:error] [pid 39017:tid 39058] [client 143.110.223.228:59623] [client 143.110.223.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.223.228, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXikls553xt-F_10bG6dDgAAAwo"]
[Tue Jan 27 22:17:59.622949 2026] [:error] [pid 39016:tid 39022] [client 43.163.206.70:44968] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXjJF_B6_y9crthwy8q4FgAAAsE"]
[Tue Jan 27 22:24:57.085621 2026] [:error] [pid 48662:tid 48669] [client 49.204.19.212:45030] [client 49.204.19.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.19.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXjKueD8iESUP9uRiRP-uAAAAoE"]
[Tue Jan 27 22:25:06.398441 2026] [:error] [pid 48446:tid 48477] [client 13.61.245.41:54090] [client 13.61.245.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.61.245.41, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXjKwsDRSaZ8F8aaLxmvRgAAAcA"]
[Tue Jan 27 23:44:52.132025 2026] [:error] [pid 7561:tid 7579] [client 49.204.19.212:43783] [client 49.204.19.212] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXjddLXGI6mgvHQqkXzwvAAAAM8"]
[Tue Jan 27 23:46:44.600536 2026] [:error] [pid 7561:tid 7564] [client 49.204.19.212:44695] [client 49.204.19.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.19.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXjd5LXGI6mgvHQqkXzw7wAAAMA"]
[Tue Jan 27 23:48:25.869599 2026] [:error] [pid 39016:tid 39030] [client 49.204.19.212:44826] [client 49.204.19.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.19.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXjeSfB6_y9crthwy8rDLgAAAsk"]
[Wed Jan 28 02:01:07.665681 2026] [:error] [pid 41678:tid 41698] [client 43.153.10.83:45698] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXj9Y6ja89ZyPVwMdig19QAAAAU"]
[Wed Jan 28 04:52:11.682097 2026] [:error] [pid 17425:tid 17479] [client 20.212.209.31:18577] [client 20.212.209.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aXkle6rcODKH1Dl7aZAIbgAAAFE"]
[Wed Jan 28 04:52:12.184373 2026] [:error] [pid 17535:tid 17543] [client 20.212.209.31:20178] [client 20.212.209.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aXklfK3QiSMgVscnN5L5SgAAAMU"]
[Wed Jan 28 04:52:12.605070 2026] [:error] [pid 17426:tid 17492] [client 20.212.209.31:17995] [client 20.212.209.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aXklfE8zvf_03BnziRfi-wAAAIM"]
[Wed Jan 28 04:52:12.988277 2026] [:error] [pid 17425:tid 17478] [client 20.212.209.31:19344] [client 20.212.209.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aXklfKrcODKH1Dl7aZAIcwAAAFA"]
[Wed Jan 28 04:53:37.605489 2026] [:error] [pid 58254:tid 58269] [client 117.33.163.216:49414] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXkl0fF8nSyBg9wOsa_wewAAAQ0"]
[Wed Jan 28 05:16:53.567921 2026] [:error] [pid 17425:tid 17479] [client 45.154.138.101:46945] [client 45.154.138.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXkrRarcODKH1Dl7aZAiDQAAAFE"]
[Wed Jan 28 05:17:05.925475 2026] [:error] [pid 58254:tid 58261] [client 45.154.138.235:31119] [client 45.154.138.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aXkrUfF8nSyBg9wOsa8O8QAAAQU"]
[Wed Jan 28 05:17:54.396819 2026] [:error] [pid 58254:tid 58265] [client 45.154.138.34:40671] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXkrgvF8nSyBg9wOsa8RWgAAAQk"]
[Wed Jan 28 05:18:14.012835 2026] [:error] [pid 17426:tid 17508] [client 45.154.138.46:29999] [client 45.154.138.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aXkrlk8zvf_03BnziRf97QAAAJM"]
[Wed Jan 28 05:18:14.933520 2026] [:error] [pid 58254:tid 58264] [client 45.154.138.50:51383] [client 45.154.138.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aXkrlvF8nSyBg9wOsa8SWQAAAQg"]
[Wed Jan 28 05:18:15.879386 2026] [:error] [pid 17425:tid 17463] [client 45.154.138.38:40133] [client 45.154.138.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aXkrl6rcODKH1Dl7aZAlNwAAAEE"]
[Wed Jan 28 05:18:25.172194 2026] [:error] [pid 17535:tid 17547] [client 45.154.138.42:47877] [client 45.154.138.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aXkroa3QiSMgVscnN5IYHAAAAMk"]
[Wed Jan 28 05:18:33.455719 2026] [:error] [pid 2454:tid 2463] [client 45.154.138.21:27437] [client 45.154.138.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aXkrqZvv4I21Ywd7NNbqzgAAAYU"]
[Wed Jan 28 05:18:49.395188 2026] [autoindex:error] [pid 64842:tid 64863] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:18:49.896758 2026] [autoindex:error] [pid 64842:tid 64860] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:18:50.375846 2026] [autoindex:error] [pid 64842:tid 64861] [client 45.154.138.2:32271] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:34.237302 2026] [autoindex:error] [pid 64842:tid 64868] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:47.277190 2026] [autoindex:error] [pid 64842:tid 64867] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:47.766820 2026] [autoindex:error] [pid 64842:tid 64854] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:48.238669 2026] [autoindex:error] [pid 64842:tid 64844] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:48.729137 2026] [autoindex:error] [pid 64842:tid 64851] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:49.198305 2026] [autoindex:error] [pid 64842:tid 64847] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:50.902462 2026] [autoindex:error] [pid 64842:tid 64844] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:51.375722 2026] [autoindex:error] [pid 64842:tid 64854] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:51.844432 2026] [autoindex:error] [pid 64842:tid 64847] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:19:52.323945 2026] [autoindex:error] [pid 64842:tid 64846] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:20:30.666175 2026] [autoindex:error] [pid 64842:tid 64857] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:20:40.767853 2026] [autoindex:error] [pid 64842:tid 64866] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:25.865667 2026] [autoindex:error] [pid 64842:tid 64866] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:26.343371 2026] [autoindex:error] [pid 64842:tid 64857] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:26.809311 2026] [autoindex:error] [pid 64842:tid 64847] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:27.278146 2026] [autoindex:error] [pid 64842:tid 64844] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:27.758663 2026] [autoindex:error] [pid 64842:tid 64866] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:28.243261 2026] [autoindex:error] [pid 64842:tid 64867] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:36.568799 2026] [autoindex:error] [pid 64842:tid 64850] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:37.038366 2026] [autoindex:error] [pid 64842:tid 64844] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:37.507184 2026] [autoindex:error] [pid 64842:tid 64846] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:37.975132 2026] [autoindex:error] [pid 64842:tid 64855] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:38.444104 2026] [autoindex:error] [pid 64842:tid 64863] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:45.714309 2026] [autoindex:error] [pid 64842:tid 64846] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:51.901878 2026] [autoindex:error] [pid 64842:tid 64852] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:52.385720 2026] [autoindex:error] [pid 64842:tid 64856] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:23:52.851001 2026] [autoindex:error] [pid 64842:tid 64855] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:24:02.300878 2026] [autoindex:error] [pid 64842:tid 64853] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:24:02.776777 2026] [autoindex:error] [pid 64842:tid 64855] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:24:03.243324 2026] [autoindex:error] [pid 64842:tid 64853] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:24:03.707865 2026] [autoindex:error] [pid 64842:tid 64857] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:24:04.186405 2026] [autoindex:error] [pid 64842:tid 64853] [client 45.154.138.2:32271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:25:06.075161 2026] [:error] [pid 2454:tid 2479] [client 45.154.138.4:40161] [client 45.154.138.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cekidot/"] [unique_id "aXktMpvv4I21Ywd7NNYDzgAAAZU"]
[Wed Jan 28 05:26:57.287933 2026] [autoindex:error] [pid 17535:tid 17555] [client 45.154.138.21:40527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:27:59.875166 2026] [autoindex:error] [pid 17535:tid 17551] [client 45.154.138.21:40527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:20.753462 2026] [autoindex:error] [pid 17535:tid 17554] [client 45.154.138.21:40527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:21.242419 2026] [autoindex:error] [pid 17535:tid 17552] [client 45.154.138.21:40527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:31.321534 2026] [:error] [pid 17535:tid 17540] [client 45.154.138.21:40527] [client 45.154.138.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/WordPressCore/"] [unique_id "aXkt_63QiSMgVscnN5I2TQAAAMI"]
[Wed Jan 28 05:28:36.283697 2026] [autoindex:error] [pid 17425:tid 17464] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:36.747742 2026] [autoindex:error] [pid 17425:tid 17485] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:37.220832 2026] [autoindex:error] [pid 17425:tid 17480] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:37.696544 2026] [autoindex:error] [pid 17425:tid 17478] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:38.168166 2026] [autoindex:error] [pid 17425:tid 17479] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:38.641142 2026] [autoindex:error] [pid 17425:tid 17475] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:39.106627 2026] [autoindex:error] [pid 17425:tid 17468] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:39.575330 2026] [autoindex:error] [pid 17425:tid 17465] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:40.043290 2026] [autoindex:error] [pid 17425:tid 17479] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:28:40.519014 2026] [autoindex:error] [pid 17425:tid 17466] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:29:24.394216 2026] [autoindex:error] [pid 17425:tid 17483] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:30:22.181487 2026] [autoindex:error] [pid 17425:tid 17483] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:30:22.646987 2026] [autoindex:error] [pid 17425:tid 17487] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:31:27.188800 2026] [autoindex:error] [pid 17425:tid 17480] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/paste/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:31:37.201696 2026] [autoindex:error] [pid 17425:tid 17487] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:31:52.650990 2026] [autoindex:error] [pid 17425:tid 17471] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:31:56.135076 2026] [autoindex:error] [pid 17425:tid 17463] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:32:05.072868 2026] [autoindex:error] [pid 17425:tid 17482] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/directionality/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:32:08.981680 2026] [autoindex:error] [pid 17425:tid 17470] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:32:09.450803 2026] [autoindex:error] [pid 17425:tid 17480] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:32:16.086104 2026] [autoindex:error] [pid 17425:tid 17487] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:32:21.492936 2026] [autoindex:error] [pid 17425:tid 17472] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:32:26.520165 2026] [autoindex:error] [pid 17425:tid 17483] [client 45.154.138.20:51313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:32:30.261607 2026] [proxy_fcgi:error] [pid 17425:tid 17483] [client 45.154.138.20:51313] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyone/index.php:17\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyone/index.php on line 17'
[Wed Jan 28 05:32:39.325144 2026] [autoindex:error] [pid 17425:tid 17466] [client 45.154.138.31:44905] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:33:05.966295 2026] [autoindex:error] [pid 17425:tid 17482] [client 45.154.138.31:44905] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:33:30.323045 2026] [autoindex:error] [pid 17425:tid 17477] [client 45.154.138.31:44905] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/nux/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:33:37.194465 2026] [autoindex:error] [pid 17425:tid 17482] [client 45.154.138.31:44905] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/lists/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:33:37.713535 2026] [autoindex:error] [pid 17425:tid 17463] [client 45.154.138.31:44905] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:35:35.125045 2026] [autoindex:error] [pid 17425:tid 17470] [client 45.154.138.31:44905] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:35:41.808738 2026] [autoindex:error] [pid 17425:tid 17464] [client 45.154.138.31:44905] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:36:37.086679 2026] [autoindex:error] [pid 17425:tid 17485] [client 45.154.138.31:44905] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/Core/Curve25519/Ge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:56:36.118539 2026] [autoindex:error] [pid 58254:tid 58265] [client 134.122.11.22:54102] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 28 06:07:17.096492 2026] [:error] [pid 17424:tid 17457] [client 49.51.52.250:45426] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXk3FWRvtDRvGDe-pIt4IQAAABg"]
[Wed Jan 28 07:09:02.063480 2026] [:error] [pid 64842:tid 64846] [client 141.98.11.239:52940] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXlFjluAAQZ5AN_SnDY20AAAAUI"]
[Wed Jan 28 07:09:02.063569 2026] [:error] [pid 64842:tid 64846] [client 141.98.11.239:52940] [client 141.98.11.239] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.239 on wp-login.php, counter = 26"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXlFjluAAQZ5AN_SnDY20AAAAUI"]
[Wed Jan 28 09:59:04.279601 2026] [:error] [pid 26993:tid 27007] [client 49.51.233.95:50968] [client 49.51.233.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXltaGnuZQRiIvPvxUuadwAAAco"]
[Wed Jan 28 11:04:13.218314 2026] [:error] [pid 33491:tid 33555] [client 45.137.126.23:38931] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aXl8rWP9UY0x3irkINCPywAAAMQ"]
[Wed Jan 28 13:53:20.223382 2026] [:error] [pid 24482:tid 24510] [client 43.153.123.3:52620] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXmkUKLaUZr_xWekSHM_jQAAAdg"]
[Wed Jan 28 17:29:04.190898 2026] [:error] [pid 2625:tid 2636] [client 192.144.148.122:58616] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXnW4FZhY64HvuPd7w05YAAAAUU"]
[Wed Jan 28 17:31:51.241943 2026] [:error] [pid 24482:tid 24492] [client 43.164.197.224:37124] [client 43.164.197.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXnXh6LaUZr_xWekSHN3gAAAAcY"]
[Wed Jan 28 21:03:29.824330 2026] [:error] [pid 33489:tid 33513] [client 83.223.106.35:17360] [client 83.223.106.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.223.106.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoJIRZrVZwQUFWC7_9TEgAAABQ"]
[Wed Jan 28 21:03:32.251564 2026] [:error] [pid 24452:tid 24478] [client 83.223.106.35:17518] [client 83.223.106.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.223.106.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoJJP0RQOh_GmqmVyZ3_gAAAZg"]
[Wed Jan 28 21:04:21.514966 2026] [:error] [pid 33491:tid 33559] [client 148.72.18.35:40242] [client 148.72.18.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.18.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoJVWP9UY0x3irkINAzEQAAAMg"]
[Wed Jan 28 21:04:23.455290 2026] [:error] [pid 33636:tid 33648] [client 148.72.18.35:40244] [client 148.72.18.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.72.18.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoJV9IVZAudQH0BSC4_fQAAAgo"]
[Wed Jan 28 21:04:28.820059 2026] [:error] [pid 24452:tid 24469] [client 81.88.52.99:36734] [client 81.88.52.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.52.99, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoJXP0RQOh_GmqmVyZ4MgAAAY8"]
[Wed Jan 28 21:04:31.100195 2026] [:error] [pid 33490:tid 33534] [client 81.88.52.99:36738] [client 81.88.52.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.52.99, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoJX2jexcy58gsBPJG5dQAAAEo"]
[Wed Jan 28 21:55:49.163837 2026] [:error] [pid 33491:tid 33574] [client 185.93.68.7:40756] [client 185.93.68.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.93.68.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoVZWP9UY0x3irkINA_qAAAANc"]
[Wed Jan 28 21:55:50.752011 2026] [:error] [pid 2625:tid 2643] [client 34.132.187.211:59858] [client 34.132.187.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.187.211, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoVZlZhY64HvuPd7w1yFwAAAUw"]
[Wed Jan 28 21:55:52.018434 2026] [:error] [pid 33490:tid 33533] [client 185.93.68.7:40806] [client 185.93.68.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.93.68.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoVaGjexcy58gsBPJHK4AAAAEk"]
[Wed Jan 28 21:55:53.106824 2026] [:error] [pid 42740:tid 42753] [client 34.132.187.211:59866] [client 34.132.187.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.187.211, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoVaVnjAS34srJlXgSy6gAAAIs"]
[Wed Jan 28 22:12:27.856647 2026] [:error] [pid 2625:tid 2639] [client 81.167.26.57:54210] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aXoZS1ZhY64HvuPd7w12SAAAAUg"]
[Wed Jan 28 22:12:30.470833 2026] [:error] [pid 24482:tid 24496] [client 81.167.26.57:32316] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aXoZTqLaUZr_xWekSHO3oAAAAco"]
[Wed Jan 28 22:12:33.233190 2026] [:error] [pid 24452:tid 24455] [client 81.167.26.57:28393] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aXoZUf0RQOh_GmqmVyaM-wAAAYE"]
[Wed Jan 28 22:12:35.984475 2026] [:error] [pid 33636:tid 33639] [client 81.167.26.57:2931] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aXoZU9IVZAudQH0BSC5OOQAAAgE"]
[Wed Jan 28 22:12:38.771829 2026] [:error] [pid 33491:tid 33573] [client 81.167.26.57:37689] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aXoZVmP9UY0x3irkINBEsAAAANY"]
[Wed Jan 28 22:12:41.345829 2026] [:error] [pid 2625:tid 2639] [client 81.167.26.57:62562] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aXoZWVZhY64HvuPd7w12VQAAAUg"]
[Wed Jan 28 22:12:43.971521 2026] [:error] [pid 2625:tid 2633] [client 81.167.26.57:35299] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aXoZW1ZhY64HvuPd7w12WQAAAUI"]
[Wed Jan 28 23:15:50.722660 2026] [:error] [pid 42740:tid 42761] [client 213.209.159.151:45350] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXooJlnjAS34srJlXgTGCgAAAJM"]
[Thu Jan 29 00:03:59.753327 2026] [:error] [pid 2625:tid 2653] [client 91.200.40.51:50644] [client 91.200.40.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.200.40.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXozb1ZhY64HvuPd7w2O0AAAAVY"]
[Thu Jan 29 00:04:02.412001 2026] [:error] [pid 33491:tid 33570] [client 91.200.40.51:50680] [client 91.200.40.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.200.40.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXozcmP9UY0x3irkINBg8wAAANM"]
[Thu Jan 29 00:05:04.591458 2026] [:error] [pid 2625:tid 2653] [client 35.225.23.104:48480] [client 35.225.23.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.23.104, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXozsFZhY64HvuPd7w2PFQAAAVY"]
[Thu Jan 29 00:05:07.042122 2026] [:error] [pid 2625:tid 2644] [client 35.225.23.104:48484] [client 35.225.23.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.23.104, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXozs1ZhY64HvuPd7w2PGgAAAU0"]
[Thu Jan 29 00:06:12.773243 2026] [:error] [pid 2625:tid 2640] [client 167.235.65.191:46358] [client 167.235.65.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.235.65.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoz9FZhY64HvuPd7w2PRwAAAUk"]
[Thu Jan 29 00:06:15.329604 2026] [:error] [pid 33489:tid 33495] [client 167.235.65.191:46362] [client 167.235.65.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.235.65.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXoz9xZrVZwQUFWC7_93qgAAAAI"]
[Thu Jan 29 01:26:45.846797 2026] [:error] [pid 32598:tid 32624] [client 51.68.233.43:41886] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXpG1VY4u2FXFuCu0C4OfQAAAZg"]
[Thu Jan 29 01:26:48.467264 2026] [:error] [pid 30729:tid 30798] [client 51.68.233.43:58218] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2050%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B9%84%E0%B8%94%E0%B9%89%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.aspx"] [unique_id "aXpG2IHlkRFkYwysACcqFQAAAMo"]
[Thu Jan 29 01:26:51.013962 2026] [:error] [pid 32895:tid 32917] [client 51.68.233.43:34326] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20%E0%B8%A2%E0%B8%AD%E0%B8%94%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20100.aspx"] [unique_id "aXpG23Q85pgihG9SXurFQgAAAhQ"]
[Thu Jan 29 01:26:53.597664 2026] [:error] [pid 30728:tid 30783] [client 51.68.233.43:34332] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81-%E0%B8%96%E0%B8%AD%E0%B8%99%20ufa365.aspx"] [unique_id "aXpG3cON3lWQ9OS6bguo4gAAAFY"]
[Thu Jan 29 01:26:56.289795 2026] [:error] [pid 32895:tid 32900] [client 51.68.233.43:34342] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%819%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%A3%E0%B8%B1%E0%B8%9A100%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXpG4HQ85pgihG9SXurFTAAAAgM"]
[Thu Jan 29 01:26:58.669638 2026] [:error] [pid 30728:tid 30782] [client 51.68.233.43:34354] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXpG4sON3lWQ9OS6bguo6wAAAFU"]
[Thu Jan 29 01:27:01.071185 2026] [:error] [pid 32747:tid 32760] [client 51.68.233.43:46730] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%E0%B8%81%E0%B9%87%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXpG5f0et-wQsmVMWlkeiQAAAcs"]
[Thu Jan 29 01:27:03.601687 2026] [:error] [pid 30728:tid 30783] [client 51.68.233.43:46740] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%84%E0%B8%99%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B9%80%E0%B8%A2%E0%B8%AD%E0%B8%B0%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXpG58ON3lWQ9OS6bguo8gAAAFY"]
[Thu Jan 29 01:27:06.115465 2026] [:error] [pid 32302:tid 32324] [client 51.68.233.43:46744] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXpG6s6l7zUXFnfUB7UcVAAAARQ"]
[Thu Jan 29 01:27:08.505943 2026] [:error] [pid 30727:tid 30755] [client 51.68.233.43:46756] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%88%E0%B8%B2%E0%B8%81%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXpG7J6XAsWrB4DloY_EkgAAABg"]
[Thu Jan 29 01:27:11.046734 2026] [:error] [pid 30817:tid 30833] [client 51.68.233.43:59196] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20456%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXpG75kL00co11SGgyox3AAAAI0"]
[Thu Jan 29 01:27:13.560654 2026] [:error] [pid 33151:tid 33212] [client 51.68.233.43:59198] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXpG8WtRH8LcJJ0AyU6ngwAAAk4"]
[Thu Jan 29 01:27:16.097141 2026] [:error] [pid 32598:tid 32619] [client 51.68.233.43:59200] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXpG9FY4u2FXFuCu0C4OqgAAAZM"]
[Thu Jan 29 01:27:18.596067 2026] [:error] [pid 33151:tid 33214] [client 51.68.233.43:59202] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXpG9mtRH8LcJJ0AyU6niAAAAlA"]
[Thu Jan 29 01:27:21.119507 2026] [:error] [pid 32747:tid 32751] [client 51.68.233.43:55068] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXpG-f0et-wQsmVMWlkemAAAAcI"]
[Thu Jan 29 01:27:23.539003 2026] [:error] [pid 30729:tid 30797] [client 51.68.233.43:55072] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXpG-4HlkRFkYwysACcqWAAAAMk"]
[Thu Jan 29 01:27:26.199148 2026] [:error] [pid 32451:tid 32470] [client 51.68.233.43:55084] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXpG_hnhmSN6e0P4d6s7wwAAAVE"]
[Thu Jan 29 01:27:28.725719 2026] [:error] [pid 32302:tid 32319] [client 51.68.233.43:55100] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXpHAM6l7zUXFnfUB7UcggAAAQ8"]
[Thu Jan 29 01:27:31.240602 2026] [:error] [pid 30728:tid 30762] [client 51.68.233.43:36292] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpHA8ON3lWQ9OS6bgupIwAAAEE"]
[Thu Jan 29 01:27:33.763080 2026] [:error] [pid 30728:tid 30775] [client 51.68.233.43:36300] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXpHBcON3lWQ9OS6bgupKAAAAE4"]
[Thu Jan 29 01:27:36.273747 2026] [:error] [pid 32895:tid 32900] [client 51.68.233.43:36312] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%AE%E0%B8%87%20999.aspx"] [unique_id "aXpHCHQ85pgihG9SXurFewAAAgM"]
[Thu Jan 29 01:27:38.785469 2026] [:error] [pid 32451:tid 32470] [client 51.68.233.43:36320] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%81%E0%B8%AD%E0%B8%9E%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpHChnhmSN6e0P4d6s79QAAAVE"]
[Thu Jan 29 01:27:41.295614 2026] [:error] [pid 30727:tid 30746] [client 51.68.233.43:41562] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%20%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXpHDZ6XAsWrB4DloY_EtQAAAA8"]
[Thu Jan 29 01:28:13.084628 2026] [:error] [pid 30729:tid 30798] [client 51.68.233.43:41568] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aXpHLYHlkRFkYwysACcqmAAAAMo"]
[Thu Jan 29 01:28:15.624145 2026] [:error] [pid 32747:tid 32761] [client 51.68.233.43:32878] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix168.aspx"] [unique_id "aXpHL_0et-wQsmVMWlkezQAAAcw"]
[Thu Jan 29 01:28:18.086745 2026] [:error] [pid 30729:tid 30806] [client 51.68.233.43:32890] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cat888%20%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXpHMoHlkRFkYwysACcqngAAANI"]
[Thu Jan 29 01:28:20.739469 2026] [:error] [pid 30727:tid 30746] [client 51.68.233.43:32906] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fullslot.aspx"] [unique_id "aXpHNJ6XAsWrB4DloY_E5wAAAA8"]
[Thu Jan 29 01:28:23.236709 2026] [:error] [pid 32451:tid 32472] [client 51.68.233.43:49478] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpHNxnhmSN6e0P4d6s8PwAAAVM"]
[Thu Jan 29 01:28:25.714627 2026] [:error] [pid 32451:tid 32466] [client 51.68.233.43:49482] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g1bet.aspx"] [unique_id "aXpHORnhmSN6e0P4d6s8XQAAAU0"]
[Thu Jan 29 01:28:28.040963 2026] [:error] [pid 30729:tid 30795] [client 51.68.233.43:49488] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aXpHPIHlkRFkYwysACcqswAAAMc"]
[Thu Jan 29 01:28:30.545055 2026] [:error] [pid 32598:tid 32604] [client 51.68.233.43:49502] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aXpHPlY4u2FXFuCu0C4O9QAAAYQ"]
[Thu Jan 29 01:28:33.178019 2026] [:error] [pid 30729:tid 30802] [client 51.68.233.43:48818] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aXpHQYHlkRFkYwysACcqvgAAAM4"]
[Thu Jan 29 01:28:35.675923 2026] [:error] [pid 33151:tid 33203] [client 51.68.233.43:48832] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aXpHQ2tRH8LcJJ0AyU6oAAAAAkY"]
[Thu Jan 29 01:28:38.296735 2026] [:error] [pid 32747:tid 32753] [client 51.68.233.43:48844] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aXpHRv0et-wQsmVMWlke1QAAAcQ"]
[Thu Jan 29 01:28:40.779482 2026] [:error] [pid 30727:tid 30755] [client 51.68.233.43:48852] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXpHSJ6XAsWrB4DloY_FAgAAABg"]
[Thu Jan 29 01:28:43.405095 2026] [:error] [pid 32451:tid 32468] [client 51.68.233.43:52170] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aXpHSxnhmSN6e0P4d6s8fgAAAU8"]
[Thu Jan 29 01:28:45.896844 2026] [:error] [pid 32451:tid 32477] [client 51.68.233.43:52174] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miami%201688%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXpHTRnhmSN6e0P4d6s8hAAAAVg"]
[Thu Jan 29 01:28:48.518879 2026] [:error] [pid 32302:tid 32314] [client 51.68.233.43:52176] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mm88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXpHUM6l7zUXFnfUB7Uc5wAAAQo"]
[Thu Jan 29 01:28:51.006700 2026] [:error] [pid 32302:tid 32305] [client 51.68.233.43:36638] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nagaway%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpHU86l7zUXFnfUB7Uc7QAAAQE"]
[Thu Jan 29 01:28:53.482408 2026] [:error] [pid 33151:tid 33200] [client 51.68.233.43:36648] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/noname%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpHVWtRH8LcJJ0AyU6oGAAAAkM"]
[Thu Jan 29 01:28:56.123715 2026] [:error] [pid 32451:tid 32470] [client 51.68.233.43:36652] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oker%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXpHWBnhmSN6e0P4d6s8lAAAAVE"]
[Thu Jan 29 01:28:58.736355 2026] [:error] [pid 32598:tid 32614] [client 51.68.233.43:36664] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20%E0%B8%84%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXpHWlY4u2FXFuCu0C4PDwAAAY4"]
[Thu Jan 29 01:29:01.366010 2026] [:error] [pid 30727:tid 30739] [client 51.68.233.43:47232] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aXpHXZ6XAsWrB4DloY_FGAAAAAg"]
[Thu Jan 29 01:29:03.840641 2026] [:error] [pid 32895:tid 32911] [client 51.68.233.43:47234] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aXpHX3Q85pgihG9SXurFvwAAAg4"]
[Thu Jan 29 01:29:06.476579 2026] [:error] [pid 33151:tid 33221] [client 51.68.233.43:47250] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXpHYmtRH8LcJJ0AyU6oJwAAAlc"]
[Thu Jan 29 01:29:09.089190 2026] [:error] [pid 30727:tid 30755] [client 51.68.233.43:47262] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXpHZZ6XAsWrB4DloY_FKAAAABg"]
[Thu Jan 29 01:29:40.260825 2026] [:error] [pid 32302:tid 32325] [client 51.68.233.43:38520] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXpHhM6l7zUXFnfUB7UdKAAAARU"]
[Thu Jan 29 01:29:42.780614 2026] [:error] [pid 32895:tid 32907] [client 51.68.233.43:33230] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aXpHhnQ85pgihG9SXurF1wAAAgo"]
[Thu Jan 29 01:29:45.382406 2026] [:error] [pid 30817:tid 30843] [client 51.68.233.43:33240] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot123.aspx"] [unique_id "aXpHiZkL00co11SGgyoyWwAAAJc"]
[Thu Jan 29 01:29:48.005487 2026] [:error] [pid 30817:tid 30822] [client 51.68.233.43:33250] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aXpHjJkL00co11SGgyoyXgAAAII"]
[Thu Jan 29 01:29:50.487337 2026] [:error] [pid 30727:tid 30755] [client 51.68.233.43:33258] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot24th%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXpHjp6XAsWrB4DloY_FZQAAABg"]
[Thu Jan 29 01:29:53.110296 2026] [:error] [pid 30727:tid 30733] [client 51.68.233.43:56942] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot24th.aspx"] [unique_id "aXpHkZ6XAsWrB4DloY_FcgAAAAI"]
[Thu Jan 29 01:29:55.739803 2026] [:error] [pid 32895:tid 32908] [client 51.68.233.43:56954] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot77.aspx"] [unique_id "aXpHk3Q85pgihG9SXurF5wAAAgs"]
[Thu Jan 29 01:29:58.213213 2026] [:error] [pid 32302:tid 32318] [client 51.68.233.43:56968] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot789.aspx"] [unique_id "aXpHls6l7zUXFnfUB7UdNAAAAQ4"]
[Thu Jan 29 01:30:00.835456 2026] [:error] [pid 30727:tid 30739] [client 51.68.233.43:54196] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot999.aspx"] [unique_id "aXpHmJ6XAsWrB4DloY_FggAAAAg"]
[Thu Jan 29 01:30:03.448874 2026] [:error] [pid 30728:tid 30784] [client 51.68.233.43:54208] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXpHm8ON3lWQ9OS6bgupvAAAAFc"]
[Thu Jan 29 01:30:06.053690 2026] [:error] [pid 33151:tid 33212] [client 51.68.233.43:54212] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXpHnmtRH8LcJJ0AyU6oXwAAAk4"]
[Thu Jan 29 01:30:08.656537 2026] [:error] [pid 30817:tid 30826] [client 51.68.233.43:54222] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXpHoJkL00co11SGgyoybQAAAIY"]
[Thu Jan 29 01:30:11.257042 2026] [:error] [pid 32302:tid 32327] [client 51.68.233.43:54862] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A.aspx"] [unique_id "aXpHo86l7zUXFnfUB7UdRQAAARc"]
[Thu Jan 29 01:30:13.862946 2026] [:error] [pid 30729:tid 30795] [client 51.68.233.43:54876] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXpHpYHlkRFkYwysACcrCwAAAMc"]
[Thu Jan 29 01:30:16.469185 2026] [:error] [pid 30817:tid 30821] [client 51.68.233.43:54884] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXpHqJkL00co11SGgyoycQAAAIE"]
[Thu Jan 29 01:30:19.072484 2026] [:error] [pid 32598:tid 32620] [client 51.68.233.43:54900] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tgaslot.aspx"] [unique_id "aXpHq1Y4u2FXFuCu0C4PYQAAAZQ"]
[Thu Jan 29 01:30:21.681080 2026] [:error] [pid 32451:tid 32469] [client 51.68.233.43:39438] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thaislot.aspx"] [unique_id "aXpHrRnhmSN6e0P4d6s86gAAAVA"]
[Thu Jan 29 01:30:24.149281 2026] [:error] [pid 32598:tid 32602] [client 51.68.233.43:39450] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXpHsFY4u2FXFuCu0C4PaAAAAYI"]
[Thu Jan 29 01:30:26.736429 2026] [:error] [pid 32747:tid 32761] [client 51.68.233.43:39460] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa7.aspx"] [unique_id "aXpHsv0et-wQsmVMWlkfFAAAAcw"]
[Thu Jan 29 01:30:29.381136 2026] [:error] [pid 32598:tid 32603] [client 51.68.233.43:39464] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa77.aspx"] [unique_id "aXpHtVY4u2FXFuCu0C4PbAAAAYM"]
[Thu Jan 29 01:30:31.973930 2026] [:error] [pid 33151:tid 33206] [client 51.68.233.43:43454] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa777.aspx"] [unique_id "aXpHt2tRH8LcJJ0AyU6ojwAAAkk"]
[Thu Jan 29 01:30:34.586191 2026] [:error] [pid 32302:tid 32305] [client 51.68.233.43:43460] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A888.aspx"] [unique_id "aXpHus6l7zUXFnfUB7UdbAAAAQE"]
[Thu Jan 29 01:31:06.050954 2026] [:error] [pid 32895:tid 32906] [client 51.68.233.43:43476] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpH2nQ85pgihG9SXurGHAAAAgk"]
[Thu Jan 29 02:38:16.609301 2026] [:error] [pid 30817:tid 30823] [client 62.84.185.60:31974] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXpXmJkL00co11SGgyo_vQAAAIM"]
[Thu Jan 29 02:38:19.594516 2026] [:error] [pid 30729:tid 30799] [client 62.84.185.60:31980] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXpXm4HlkRFkYwysACc4NgAAAMs"]
[Thu Jan 29 02:38:22.551315 2026] [:error] [pid 32451:tid 32458] [client 62.84.185.60:30224] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXpXnhnhmSN6e0P4d6tSfAAAAUU"]
[Thu Jan 29 02:40:46.800179 2026] [:error] [pid 64076:tid 64084] [client 62.84.185.60:32362] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/faw99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpYLsgWS9sk7GfiNFeVeAAAAoY"]
[Thu Jan 29 02:40:49.394845 2026] [:error] [pid 32451:tid 32471] [client 62.84.185.60:32368] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lotto888%20%E0%B8%AB%E0%B8%A7%E0%B8%A2.aspx"] [unique_id "aXpYMRnhmSN6e0P4d6tS7wAAAVI"]
[Thu Jan 29 02:40:52.165658 2026] [:error] [pid 32598:tid 32619] [client 62.84.185.60:65186] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lottovip%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXpYNFY4u2FXFuCu0C4cIwAAAZM"]
[Thu Jan 29 02:40:54.841633 2026] [:error] [pid 30817:tid 30831] [client 62.84.185.60:65190] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/noname%20auto%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpYNpkL00co11SGgypAhAAAAIs"]
[Thu Jan 29 02:40:57.708158 2026] [:error] [pid 30729:tid 30798] [client 62.84.185.60:65204] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aXpYOYHlkRFkYwysACc43gAAAMo"]
[Thu Jan 29 02:41:00.352024 2026] [:error] [pid 33151:tid 33204] [client 62.84.185.60:65214] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aXpYPGtRH8LcJJ0AyU64_QAAAkc"]
[Thu Jan 29 02:41:03.060344 2026] [:error] [pid 32747:tid 32754] [client 62.84.185.60:63112] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aXpYP_0et-wQsmVMWlksigAAAcU"]
[Thu Jan 29 02:41:05.843298 2026] [:error] [pid 33151:tid 33199] [client 62.84.185.60:63114] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg123.aspx"] [unique_id "aXpYQWtRH8LcJJ0AyU65CQAAAkI"]
[Thu Jan 29 02:41:08.636338 2026] [:error] [pid 64076:tid 64085] [client 62.84.185.60:63124] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgneko.aspx"] [unique_id "aXpYRMgWS9sk7GfiNFeVlgAAAoc"]
[Thu Jan 29 02:41:11.197633 2026] [:error] [pid 32747:tid 32767] [client 62.84.185.60:63136] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pxj.com%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXpYR_0et-wQsmVMWlksmwAAAdI"]
[Thu Jan 29 02:41:13.910645 2026] [:error] [pid 32895:tid 32920] [client 62.84.185.60:10026] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXpYSXQ85pgihG9SXurTwwAAAhc"]
[Thu Jan 29 02:41:16.714915 2026] [:error] [pid 30817:tid 30834] [client 62.84.185.60:10038] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aXpYTJkL00co11SGgypAnwAAAI4"]
[Thu Jan 29 02:41:19.514270 2026] [:error] [pid 32451:tid 32469] [client 62.84.185.60:10042] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aXpYTxnhmSN6e0P4d6tTDgAAAVA"]
[Thu Jan 29 02:41:22.250948 2026] [:error] [pid 30729:tid 30790] [client 62.84.185.60:58500] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aXpYUoHlkRFkYwysACc5CwAAAMI"]
[Thu Jan 29 02:41:24.931072 2026] [:error] [pid 33151:tid 33198] [client 62.84.185.60:58514] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aXpYVGtRH8LcJJ0AyU65KAAAAkE"]
[Thu Jan 29 02:41:27.734199 2026] [:error] [pid 30727:tid 30745] [client 62.84.185.60:58518] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXpYV56XAsWrB4DloY_WPwAAAA4"]
[Thu Jan 29 02:41:30.425267 2026] [:error] [pid 33151:tid 33210] [client 62.84.185.60:58526] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/u31%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXpYWmtRH8LcJJ0AyU65MQAAAk0"]
[Thu Jan 29 02:41:33.145658 2026] [:error] [pid 64076:tid 64087] [client 62.84.185.60:43458] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa168%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXpYXcgWS9sk7GfiNFeVsAAAAok"]
[Thu Jan 29 02:41:35.778385 2026] [:error] [pid 32598:tid 32608] [client 62.84.185.60:43468] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa356%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXpYX1Y4u2FXFuCu0C4cUgAAAYg"]
[Thu Jan 29 02:41:38.393145 2026] [:error] [pid 32598:tid 32609] [client 62.84.185.60:43484] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa369.aspx"] [unique_id "aXpYYlY4u2FXFuCu0C4cVwAAAYk"]
[Thu Jan 29 02:41:40.884213 2026] [:error] [pid 32598:tid 32600] [client 62.84.185.60:43500] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXpYZFY4u2FXFuCu0C4cWgAAAYA"]
[Thu Jan 29 03:24:59.637645 2026] [:error] [pid 30817:tid 30840] [client 147.135.213.234:38686] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXpii5kL00co11SGgypNMQAAAJQ"]
[Thu Jan 29 03:25:02.233141 2026] [:error] [pid 30729:tid 30790] [client 147.135.213.234:42212] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXpijoHlkRFkYwysACdCZAAAAMI"]
[Thu Jan 29 03:25:04.811559 2026] [:error] [pid 64139:tid 64162] [client 147.135.213.234:42224] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%82%E0%B8%88%E0%B9%8A%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C123.aspx"] [unique_id "aXpikE8_llMXywnNBzhaQAAAAxU"]
[Thu Jan 29 03:25:07.546495 2026] [:error] [pid 32895:tid 32911] [client 147.135.213.234:47066] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXpik3Q85pgihG9SXurcBAAAAg4"]
[Thu Jan 29 03:25:10.062590 2026] [:error] [pid 64076:tid 64092] [client 147.135.213.234:47080] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95333%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXpilsgWS9sk7GfiNFed1QAAAo4"]
[Thu Jan 29 03:25:12.642060 2026] [:error] [pid 32598:tid 32619] [client 147.135.213.234:47086] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95369.aspx"] [unique_id "aXpimFY4u2FXFuCu0C4nrAAAAZM"]
[Thu Jan 29 03:25:15.170146 2026] [:error] [pid 30817:tid 30822] [client 147.135.213.234:47098] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95555.aspx"] [unique_id "aXpim5kL00co11SGgypNVQAAAII"]
[Thu Jan 29 03:25:17.578161 2026] [:error] [pid 32895:tid 32897] [client 147.135.213.234:37668] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%9569.aspx"] [unique_id "aXpinXQ85pgihG9SXurcDQAAAgA"]
[Thu Jan 29 03:25:20.305459 2026] [:error] [pid 30729:tid 30800] [client 147.135.213.234:37680] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%20pg.aspx"] [unique_id "aXpioIHlkRFkYwysACdCdgAAAMw"]
[Thu Jan 29 03:25:22.676413 2026] [:error] [pid 64139:tid 64158] [client 147.135.213.234:37696] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXpiok8_llMXywnNBzhaTgAAAxE"]
[Thu Jan 29 03:25:25.148336 2026] [:error] [pid 32598:tid 32607] [client 147.135.213.234:37702] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%20pg.aspx"] [unique_id "aXpipVY4u2FXFuCu0C4nswAAAYc"]
[Thu Jan 29 03:25:27.759951 2026] [:error] [pid 33151:tid 33205] [client 147.135.213.234:43678] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXpip2tRH8LcJJ0AyU7JzwAAAkg"]
[Thu Jan 29 03:25:30.318706 2026] [:error] [pid 33151:tid 33214] [client 147.135.213.234:43690] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXpiqmtRH8LcJJ0AyU7J2QAAAlA"]
[Thu Jan 29 03:25:33.028700 2026] [:error] [pid 64139:tid 64152] [client 147.135.213.234:43692] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95999%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXpirU8_llMXywnNBzhaVQAAAws"]
[Thu Jan 29 03:25:35.899224 2026] [:error] [pid 32895:tid 32898] [client 147.135.213.234:43700] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95betflik.aspx"] [unique_id "aXpir3Q85pgihG9SXurcGAAAAgE"]
[Thu Jan 29 03:25:38.334536 2026] [:error] [pid 32895:tid 32903] [client 147.135.213.234:53152] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker.aspx"] [unique_id "aXpisnQ85pgihG9SXurcGwAAAgY"]
[Thu Jan 29 03:25:40.847198 2026] [:error] [pid 33151:tid 33209] [client 147.135.213.234:53164] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95joker123.aspx"] [unique_id "aXpitGtRH8LcJJ0AyU7J7wAAAkw"]
[Thu Jan 29 03:25:43.470240 2026] [:error] [pid 33151:tid 33200] [client 147.135.213.234:53176] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXpit2tRH8LcJJ0AyU7J9wAAAkM"]
[Thu Jan 29 03:25:46.002230 2026] [:error] [pid 64139:tid 64151] [client 147.135.213.234:53180] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXpiuk8_llMXywnNBzhaYQAAAwo"]
[Thu Jan 29 03:25:48.444640 2026] [:error] [pid 64139:tid 64154] [client 147.135.213.234:44762] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXpivE8_llMXywnNBzhaZgAAAw0"]
[Thu Jan 29 03:25:50.797668 2026] [:error] [pid 30817:tid 30836] [client 147.135.213.234:44770] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.aspx"] [unique_id "aXpivpkL00co11SGgypNmAAAAJA"]
[Thu Jan 29 03:25:53.331315 2026] [:error] [pid 32598:tid 32603] [client 147.135.213.234:44784] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXpiwVY4u2FXFuCu0C4nyAAAAYM"]
[Thu Jan 29 03:25:55.886035 2026] [:error] [pid 30817:tid 30824] [client 147.135.213.234:44790] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo168.aspx"] [unique_id "aXpiw5kL00co11SGgypNnwAAAIQ"]
[Thu Jan 29 03:26:28.584055 2026] [:error] [pid 64076:tid 64099] [client 147.135.213.234:37654] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXpi5MgWS9sk7GfiNFeeHgAAApU"]
[Thu Jan 29 03:26:31.146595 2026] [:error] [pid 64139:tid 64158] [client 147.135.213.234:58132] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXpi508_llMXywnNBzhajwAAAxE"]
[Thu Jan 29 03:26:33.742033 2026] [:error] [pid 32451:tid 32467] [client 147.135.213.234:58134] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXpi6RnhmSN6e0P4d6tb0gAAAU4"]
[Thu Jan 29 03:26:36.285094 2026] [:error] [pid 33151:tid 33202] [client 147.135.213.234:58148] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20k9win.aspx"] [unique_id "aXpi7GtRH8LcJJ0AyU7KTQAAAkU"]
[Thu Jan 29 03:26:38.817481 2026] [:error] [pid 64076:tid 64091] [client 147.135.213.234:57288] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%84%E0%B8%B2%E0%B8%AA%E0%B8%B4%E0%B9%82%E0%B8%99%E0%B8%A5%E0%B8%B2%E0%B8%AA%E0%B9%80%E0%B8%A7%E0%B8%81%E0%B8%B1%E0%B8%AA.aspx"] [unique_id "aXpi7sgWS9sk7GfiNFeeJgAAAo0"]
[Thu Jan 29 03:26:41.243074 2026] [:error] [pid 30729:tid 30808] [client 147.135.213.234:57292] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXpi8YHlkRFkYwysACdCygAAANQ"]
[Thu Jan 29 03:26:43.755907 2026] [:error] [pid 64139:tid 64152] [client 147.135.213.234:57304] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXpi808_llMXywnNBzhaoAAAAws"]
[Thu Jan 29 03:26:46.435454 2026] [:error] [pid 30727:tid 30740] [client 147.135.213.234:57312] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXpi9p6XAsWrB4DloY_fhQAAAAk"]
[Thu Jan 29 03:26:49.149505 2026] [:error] [pid 30817:tid 30836] [client 147.135.213.234:52296] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpi-ZkL00co11SGgypN2QAAAJA"]
[Thu Jan 29 03:26:51.508880 2026] [:error] [pid 30729:tid 30799] [client 147.135.213.234:52302] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777.aspx"] [unique_id "aXpi-4HlkRFkYwysACdC1gAAAMs"]
[Thu Jan 29 03:26:53.987179 2026] [:error] [pid 64076:tid 64097] [client 147.135.213.234:52318] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777.aspx"] [unique_id "aXpi_cgWS9sk7GfiNFeeLAAAApM"]
[Thu Jan 29 03:26:56.539204 2026] [:error] [pid 64139:tid 64143] [client 147.135.213.234:52334] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9Ajoker888.aspx"] [unique_id "aXpjAE8_llMXywnNBzhatQAAAwI"]
[Thu Jan 29 03:26:59.104713 2026] [:error] [pid 64076:tid 64086] [client 147.135.213.234:42324] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXpjA8gWS9sk7GfiNFeeNQAAAog"]
[Thu Jan 29 03:27:01.699784 2026] [:error] [pid 64076:tid 64100] [client 147.135.213.234:42328] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202022.aspx"] [unique_id "aXpjBcgWS9sk7GfiNFeeOQAAApY"]
[Thu Jan 29 03:27:04.247163 2026] [:error] [pid 30729:tid 30810] [client 147.135.213.234:42334] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%2030.aspx"] [unique_id "aXpjCIHlkRFkYwysACdC5gAAANY"]
[Thu Jan 29 03:27:07.002412 2026] [:error] [pid 33151:tid 33220] [client 147.135.213.234:46060] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXpjC2tRH8LcJJ0AyU7KbwAAAlY"]
[Thu Jan 29 03:27:09.589446 2026] [:error] [pid 32747:tid 32761] [client 147.135.213.234:46070] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%20%E0%B9%84%E0%B8%A5%20%E0%B8%84%E0%B9%8C%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXpjDf0et-wQsmVMWlk3fQAAAcw"]
[Thu Jan 29 03:27:12.289404 2026] [:error] [pid 30817:tid 30820] [client 147.135.213.234:46086] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXpjEJkL00co11SGgypN7wAAAIA"]
[Thu Jan 29 03:27:14.948092 2026] [:error] [pid 30817:tid 30833] [client 147.135.213.234:46088] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C%202024.aspx"] [unique_id "aXpjEpkL00co11SGgypN8wAAAI0"]
[Thu Jan 29 03:27:17.449420 2026] [:error] [pid 33151:tid 33202] [client 147.135.213.234:56176] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXpjFWtRH8LcJJ0AyU7KewAAAkU"]
[Thu Jan 29 03:27:20.088475 2026] [:error] [pid 32747:tid 32769] [client 147.135.213.234:56192] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXpjGP0et-wQsmVMWlk3jQAAAdQ"]
[Thu Jan 29 03:27:22.570583 2026] [:error] [pid 64076:tid 64088] [client 147.135.213.234:56208] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXpjGsgWS9sk7GfiNFeeTgAAAoo"]
[Thu Jan 29 03:27:54.681733 2026] [:error] [pid 30729:tid 30809] [client 147.135.213.234:56222] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXpjOoHlkRFkYwysACdDPAAAANU"]
[Thu Jan 29 03:27:57.198793 2026] [:error] [pid 64139:tid 64161] [client 147.135.213.234:60882] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpjPU8_llMXywnNBzha6AAAAxQ"]
[Thu Jan 29 03:27:59.914468 2026] [:error] [pid 64139:tid 64163] [client 147.135.213.234:60890] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%A2%2020%E0%B8%A3%E0%B8%B1%E0%B8%9A100%202%20%E0%B9%80%E0%B8%97%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXpjP08_llMXywnNBzha6wAAAxY"]
[Thu Jan 29 03:28:02.683645 2026] [:error] [pid 30817:tid 30842] [client 147.135.213.234:60894] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B2%E0%B8%8A%E0%B8%B4%E0%B8%81%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97%202565.aspx"] [unique_id "aXpjQpkL00co11SGgypOLQAAAJY"]
[Thu Jan 29 03:28:05.519339 2026] [:error] [pid 64139:tid 64154] [client 147.135.213.234:60904] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B9%8D%E0%B8%B2%20300%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89100%20%E0%B8%A7%E0%B8%AD%20%E0%B8%A5%20%E0%B9%80%E0%B8%A5%E0%B9%87%20%E0%B8%95.aspx"] [unique_id "aXpjRU8_llMXywnNBzha8AAAAw0"]
[Thu Jan 29 03:28:08.236595 2026] [:error] [pid 32747:tid 32754] [client 147.135.213.234:50874] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mafia%20slot%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXpjSP0et-wQsmVMWlk3uwAAAcU"]
[Thu Jan 29 03:28:10.935010 2026] [:error] [pid 33151:tid 33217] [client 147.135.213.234:50884] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/megaways%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpjSmtRH8LcJJ0AyU7K5AAAAlM"]
[Thu Jan 29 03:28:13.884697 2026] [:error] [pid 33151:tid 33208] [client 147.135.213.234:50900] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aXpjTWtRH8LcJJ0AyU7K8QAAAks"]
[Thu Jan 29 03:28:16.977150 2026] [:error] [pid 32598:tid 32616] [client 147.135.213.234:50496] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miami%201688%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpjUFY4u2FXFuCu0C4omQAAAZA"]
[Thu Jan 29 03:28:19.884543 2026] [:error] [pid 32598:tid 32615] [client 147.135.213.234:50510] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miami%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpjU1Y4u2FXFuCu0C4omwAAAY8"]
[Thu Jan 29 03:28:23.174507 2026] [:error] [pid 64139:tid 64161] [client 147.135.213.234:50520] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mm88rich%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXpjV08_llMXywnNBzhbAQAAAxQ"]
[Thu Jan 29 03:28:25.793581 2026] [:error] [pid 32895:tid 32904] [client 147.135.213.234:50534] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nagaway%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXpjWXQ85pgihG9SXurciQAAAgc"]
[Thu Jan 29 03:28:28.890563 2026] [:error] [pid 32747:tid 32773] [client 147.135.213.234:35272] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pay69%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXpjXP0et-wQsmVMWlk31QAAAdg"]
[Thu Jan 29 03:28:31.503719 2026] [:error] [pid 64076:tid 64084] [client 147.135.213.234:35282] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXpjX8gWS9sk7GfiNFeehwAAAoY"]
[Thu Jan 29 03:28:33.982684 2026] [:error] [pid 30727:tid 30739] [client 147.135.213.234:35296] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXpjYZ6XAsWrB4DloY_fvQAAAAg"]
[Thu Jan 29 03:28:36.743027 2026] [:error] [pid 30817:tid 30842] [client 147.135.213.234:35310] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aXpjZJkL00co11SGgypOagAAAJY"]
[Thu Jan 29 03:28:39.336301 2026] [:error] [pid 64076:tid 64086] [client 147.135.213.234:35354] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aXpjZ8gWS9sk7GfiNFeemgAAAog"]
[Thu Jan 29 03:28:41.986435 2026] [:error] [pid 33151:tid 33213] [client 147.135.213.234:35364] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aXpjaWtRH8LcJJ0AyU7LGwAAAk8"]
[Thu Jan 29 03:28:44.424648 2026] [:error] [pid 32598:tid 32613] [client 147.135.213.234:35376] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.aspx"] [unique_id "aXpjbFY4u2FXFuCu0C4orAAAAY0"]
[Thu Jan 29 03:28:47.204724 2026] [:error] [pid 32747:tid 32769] [client 147.135.213.234:36308] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXpjb_0et-wQsmVMWlk39wAAAdQ"]
[Thu Jan 29 03:28:49.862166 2026] [:error] [pid 32598:tid 32618] [client 147.135.213.234:36320] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx"] [unique_id "aXpjcVY4u2FXFuCu0C4osgAAAZI"]
[Thu Jan 29 03:29:23.637760 2026] [:error] [pid 32451:tid 32474] [client 147.135.213.234:36328] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aXpjkxnhmSN6e0P4d6tcSQAAAVU"]
[Thu Jan 29 03:29:26.217198 2026] [:error] [pid 32598:tid 32620] [client 147.135.213.234:59178] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aXpjllY4u2FXFuCu0C4o2wAAAZQ"]
[Thu Jan 29 03:29:29.050108 2026] [:error] [pid 32598:tid 32624] [client 147.135.213.234:52436] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXpjmVY4u2FXFuCu0C4o3wAAAZg"]
[Thu Jan 29 03:33:47.559069 2026] [:error] [pid 15949:tid 16014] [client 47.90.227.150:53730] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXpkmyUUtCw0-hDUhapNFAAAAFY"]
[Thu Jan 29 03:33:47.966896 2026] [:error] [pid 16050:tid 16055] [client 47.90.227.150:57670] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXpkm-FPpSEbViHfa9KQbwAAAME"]
[Thu Jan 29 04:47:57.423268 2026] [:error] [pid 19071:tid 19155] [client 51.75.116.156:46532] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXp1_Zfa8Ix5wWmtmJyPEQAAAJY"]
[Thu Jan 29 04:48:00.072886 2026] [:error] [pid 19177:tid 19182] [client 51.75.116.156:57430] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXp2AHipGz0PT8TrQv7kxAAAAMM"]
[Thu Jan 29 04:48:02.739208 2026] [:error] [pid 20578:tid 20623] [client 51.75.116.156:57434] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXp2Ag6UX7yOMwQFiyd3lAAAAgo"]
[Thu Jan 29 04:48:05.256086 2026] [:error] [pid 19071:tid 19142] [client 51.75.116.156:57436] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%2088.aspx"] [unique_id "aXp2BZfa8Ix5wWmtmJyPFgAAAIk"]
[Thu Jan 29 04:48:07.864146 2026] [:error] [pid 20486:tid 20509] [client 51.75.116.156:43470] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%2050.aspx"] [unique_id "aXp2B3gqSZb6GBx5nnPQHgAAARQ"]
[Thu Jan 29 04:48:10.392185 2026] [:error] [pid 19177:tid 19188] [client 51.75.116.156:43474] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20g2g.aspx"] [unique_id "aXp2CnipGz0PT8TrQv7kywAAAMk"]
[Thu Jan 29 04:48:12.968857 2026] [:error] [pid 20580:tid 20690] [client 51.75.116.156:43490] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXp2DJCZ5HHdXPmeL59CJwAAApY"]
[Thu Jan 29 04:48:15.443679 2026] [:error] [pid 20578:tid 20616] [client 51.75.116.156:43494] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXp2Dw6UX7yOMwQFiyd3sQAAAgM"]
[Thu Jan 29 04:48:17.987173 2026] [:error] [pid 20580:tid 20689] [client 51.75.116.156:58044] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXp2EZCZ5HHdXPmeL59CNQAAApU"]
[Thu Jan 29 04:48:20.471528 2026] [:error] [pid 19071:tid 19133] [client 51.75.116.156:58060] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81.aspx"] [unique_id "aXp2FJfa8Ix5wWmtmJyPKwAAAIA"]
[Thu Jan 29 04:48:22.939126 2026] [:error] [pid 19071:tid 19146] [client 51.75.116.156:58070] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%81%E0%B8%97%E0%B9%89.aspx"] [unique_id "aXp2Fpfa8Ix5wWmtmJyPMgAAAI0"]
[Thu Jan 29 04:48:25.343680 2026] [:error] [pid 20579:tid 20646] [client 51.75.116.156:58076] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXp2GTVXNopcNyjJc9VdkAAAAkU"]
[Thu Jan 29 04:48:27.852314 2026] [:error] [pid 20519:tid 20561] [client 51.75.116.156:42264] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20ufabet%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXp2Gwo4s4fyROrkyRk1UAAAAY0"]
[Thu Jan 29 04:48:30.229154 2026] [:error] [pid 20486:tid 20505] [client 51.75.116.156:42268] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20xo%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXp2HngqSZb6GBx5nnPQMgAAARA"]
[Thu Jan 29 04:48:32.725787 2026] [:error] [pid 19071:tid 19148] [client 51.75.116.156:42282] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20xo.aspx"] [unique_id "aXp2IJfa8Ix5wWmtmJyPQAAAAI8"]
[Thu Jan 29 04:48:35.233861 2026] [:error] [pid 19070:tid 19130] [client 51.75.116.156:42296] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%88%E0%B8%B5%E0%B8%84%E0%B8%A5%E0%B8%B1%E0%B8%9A.aspx"] [unique_id "aXp2I7ou83lIon_aKgYKQgAAAFg"]
[Thu Jan 29 04:48:37.744190 2026] [:error] [pid 19070:tid 19128] [client 51.75.116.156:60822] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXp2Jbou83lIon_aKgYKSQAAAFY"]
[Thu Jan 29 04:48:40.253018 2026] [:error] [pid 20486:tid 20511] [client 51.75.116.156:60828] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXp2KHgqSZb6GBx5nnPQRQAAARY"]
[Thu Jan 29 04:48:42.663326 2026] [:error] [pid 20486:tid 20512] [client 51.75.116.156:60842] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXp2KngqSZb6GBx5nnPQTgAAARc"]
[Thu Jan 29 04:48:45.181222 2026] [:error] [pid 20580:tid 20671] [client 51.75.116.156:60854] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pg.aspx"] [unique_id "aXp2LZCZ5HHdXPmeL59CaQAAAoM"]
[Thu Jan 29 04:48:47.604030 2026] [:error] [pid 19071:tid 19144] [client 51.75.116.156:34964] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXp2L5fa8Ix5wWmtmJyPTgAAAIs"]
[Thu Jan 29 04:48:50.244717 2026] [:error] [pid 20578:tid 20621] [client 51.75.116.156:34966] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%8799.aspx"] [unique_id "aXp2Mg6UX7yOMwQFiyd35QAAAgg"]
[Thu Jan 29 04:48:52.623887 2026] [:error] [pid 20576:tid 20587] [client 51.75.116.156:34980] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXp2NCrDZws_FlQGi9fFawAAAcE"]
[Thu Jan 29 04:49:23.841221 2026] [:error] [pid 19071:tid 19136] [client 51.75.116.156:34990] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%82%E0%B8%9B%E0%B8%A3.aspx"] [unique_id "aXp2U5fa8Ix5wWmtmJyPnQAAAIM"]
[Thu Jan 29 04:49:26.374631 2026] [:error] [pid 20578:tid 20616] [client 51.75.116.156:60656] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXp2Vg6UX7yOMwQFiyd4JQAAAgM"]
[Thu Jan 29 04:49:28.868610 2026] [:error] [pid 20579:tid 20668] [client 51.75.116.156:35748] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXp2WDVXNopcNyjJc9Vd6wAAAlg"]
[Thu Jan 29 04:49:31.360864 2026] [:error] [pid 20576:tid 20590] [client 51.75.116.156:35750] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXp2WyrDZws_FlQGi9fFiQAAAcQ"]
[Thu Jan 29 04:49:33.875670 2026] [:error] [pid 19070:tid 19121] [client 51.75.116.156:35764] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXp2Xbou83lIon_aKgYKcgAAAE8"]
[Thu Jan 29 04:49:36.390529 2026] [:error] [pid 20578:tid 20622] [client 51.75.116.156:35768] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202024.aspx"] [unique_id "aXp2YA6UX7yOMwQFiyd4NwAAAgk"]
[Thu Jan 29 04:49:38.914280 2026] [:error] [pid 20486:tid 20505] [client 51.75.116.156:45086] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%9A%E0%B8%B2%E0%B8%97%20%E0%B9%81%E0%B8%84%E0%B9%88%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3.aspx"] [unique_id "aXp2YngqSZb6GBx5nnPQuAAAARA"]
[Thu Jan 29 04:49:41.415392 2026] [:error] [pid 19069:tid 19090] [client 51.75.116.156:45088] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20mukob.aspx"] [unique_id "aXp2ZfDHsRM4BJ9a4QtN4AAAAAw"]
[Thu Jan 29 04:49:44.047800 2026] [:error] [pid 20519:tid 20566] [client 51.75.116.156:45100] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81.aspx"] [unique_id "aXp2aAo4s4fyROrkyRk1sAAAAZI"]
[Thu Jan 29 04:49:46.531885 2026] [:error] [pid 20486:tid 20513] [client 51.75.116.156:45114] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXp2angqSZb6GBx5nnPQyQAAARg"]
[Thu Jan 29 04:49:49.149144 2026] [:error] [pid 20578:tid 20622] [client 51.75.116.156:46532] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%95%E0%B8%B4%E0%B8%A1true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B22020.aspx"] [unique_id "aXp2bQ6UX7yOMwQFiyd4TAAAAgk"]
[Thu Jan 29 04:49:51.620661 2026] [:error] [pid 20519:tid 20559] [client 51.75.116.156:46534] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100.aspx"] [unique_id "aXp2bwo4s4fyROrkyRk1twAAAYs"]
[Thu Jan 29 04:49:54.251991 2026] [:error] [pid 20579:tid 20643] [client 51.75.116.156:46550] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%202024.aspx"] [unique_id "aXp2cjVXNopcNyjJc9VeEAAAAkI"]
[Thu Jan 29 04:49:56.877751 2026] [:error] [pid 19177:tid 19184] [client 51.75.116.156:37518] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.aspx"] [unique_id "aXp2dHipGz0PT8TrQv7lUAAAAMU"]
[Thu Jan 29 04:49:59.356469 2026] [:error] [pid 19069:tid 19102] [client 51.75.116.156:37528] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201.aspx"] [unique_id "aXp2d_DHsRM4BJ9a4QtN-wAAABg"]
[Thu Jan 29 04:50:01.837815 2026] [:error] [pid 19070:tid 19129] [client 51.75.116.156:37532] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXp2ebou83lIon_aKgYKnAAAAFc"]
[Thu Jan 29 04:50:04.156015 2026] [:error] [pid 19071:tid 19142] [client 51.75.116.156:37546] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXp2fJfa8Ix5wWmtmJyP1wAAAIk"]
[Thu Jan 29 04:50:06.625109 2026] [:error] [pid 20519:tid 20554] [client 51.75.116.156:37560] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100%20%E0%B8%95%E0%B9%88%E0%B8%B2%E0%B8%87%E0%B8%9B%E0%B8%A3%E0%B8%B0%E0%B9%80%E0%B8%97%E0%B8%A8.aspx"] [unique_id "aXp2fgo4s4fyROrkyRk1yQAAAYY"]
[Thu Jan 29 04:50:09.240420 2026] [:error] [pid 19071:tid 19138] [client 51.75.116.156:48310] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aXp2gZfa8Ix5wWmtmJyP5AAAAIU"]
[Thu Jan 29 04:50:11.858781 2026] [:error] [pid 19071:tid 19149] [client 51.75.116.156:48322] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20888.aspx"] [unique_id "aXp2g5fa8Ix5wWmtmJyP8AAAAJA"]
[Thu Jan 29 04:50:14.477188 2026] [:error] [pid 19070:tid 19121] [client 51.75.116.156:48330] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20chang123.io.aspx"] [unique_id "aXp2hrou83lIon_aKgYKqQAAAE8"]
[Thu Jan 29 04:50:16.942339 2026] [:error] [pid 20578:tid 20622] [client 51.75.116.156:49426] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20g2g%20vip.aspx"] [unique_id "aXp2iA6UX7yOMwQFiyd4awAAAgk"]
[Thu Jan 29 04:50:19.556765 2026] [:error] [pid 20580:tid 20676] [client 51.75.116.156:49428] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXp2i5CZ5HHdXPmeL59C3AAAAog"]
[Thu Jan 29 04:50:50.940719 2026] [:error] [pid 19069:tid 19096] [client 51.75.116.156:49440] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%20888%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXp2qvDHsRM4BJ9a4QtOVQAAABI"]
[Thu Jan 29 04:50:53.440053 2026] [:error] [pid 20486:tid 20495] [client 51.75.116.156:44960] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%20ufabet.aspx"] [unique_id "aXp2rXgqSZb6GBx5nnPRZwAAAQY"]
[Thu Jan 29 04:50:56.063252 2026] [:error] [pid 19071:tid 19153] [client 51.75.116.156:44962] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%9E%E0%B8%99%E0%B8%B1%E0%B8%99.aspx"] [unique_id "aXp2sJfa8Ix5wWmtmJyQQwAAAJQ"]
[Thu Jan 29 04:50:58.519288 2026] [:error] [pid 19071:tid 19134] [client 51.75.116.156:44774] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%B5%E0%B9%88%20%E0%B8%A1%E0%B8%B5%20%E0%B8%84%E0%B8%99%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%A1%E0%B8%B2%E0%B8%81%20%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXp2spfa8Ix5wWmtmJyQTwAAAIE"]
[Thu Jan 29 04:51:01.130880 2026] [:error] [pid 20486:tid 20489] [client 51.75.116.156:44776] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXp2tXgqSZb6GBx5nnPRfQAAAQA"]
[Thu Jan 29 04:51:03.736806 2026] [:error] [pid 20576:tid 20603] [client 51.75.116.156:44780] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXp2tyrDZws_FlQGi9fF7AAAAdE"]
[Thu Jan 29 04:51:06.229463 2026] [:error] [pid 19069:tid 19081] [client 51.75.116.156:44782] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXp2uvDHsRM4BJ9a4QtOZwAAAAM"]
[Thu Jan 29 04:51:08.818142 2026] [:error] [pid 20519:tid 20565] [client 51.75.116.156:37680] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%97%E0%B8%B1%E0%B9%89%E0%B8%87%E0%B8%AB%E0%B8%A1%E0%B8%94.aspx"] [unique_id "aXp2vAo4s4fyROrkyRk2DAAAAZE"]
[Thu Jan 29 04:51:11.423160 2026] [:error] [pid 19069:tid 19097] [client 51.75.116.156:37684] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%20true%20wallet.aspx"] [unique_id "aXp2v_DHsRM4BJ9a4QtOawAAABM"]
[Thu Jan 29 04:51:14.038750 2026] [:error] [pid 19070:tid 19118] [client 51.75.116.156:37700] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXp2wrou83lIon_aKgYLDgAAAEw"]
[Thu Jan 29 04:51:16.658015 2026] [:error] [pid 20580:tid 20673] [client 51.75.116.156:37706] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201%20%E0%B8%82%E0%B8%AD%E0%B8%87%E0%B9%82%E0%B8%A5%E0%B8%81%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%82%E0%B8%9A%E0%B8%99%E0%B8%B1%E0%B8%AA%20%E0%B8%94%E0%B8%B5%E0%B8%97%E0%B8%B5%E0%B9%88%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXp2xJCZ5HHdXPmeL59DOAAAAoU"]
[Thu Jan 29 04:51:19.278869 2026] [:error] [pid 19069:tid 19098] [client 51.75.116.156:44406] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%B1%E0%B8%99%E0%B8%94%E0%B8%B1%E0%B8%9A%201%20%E0%B8%82%E0%B8%AD%E0%B8%87%E0%B9%82%E0%B8%A5%E0%B8%81.aspx"] [unique_id "aXp2x_DHsRM4BJ9a4QtOeAAAABQ"]
[Thu Jan 29 04:51:21.890715 2026] [:error] [pid 20486:tid 20498] [client 51.75.116.156:44422] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88.aspx"] [unique_id "aXp2yXgqSZb6GBx5nnPRqgAAAQk"]
[Thu Jan 29 04:51:24.346525 2026] [:error] [pid 19069:tid 19084] [client 51.75.116.156:44436] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%94%E0%B8%B5.aspx"] [unique_id "aXp2zPDHsRM4BJ9a4QtOfwAAAAY"]
[Thu Jan 29 04:51:26.963817 2026] [:error] [pid 19177:tid 19186] [client 51.75.116.156:40646] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXp2znipGz0PT8TrQv7lpQAAAMc"]
[Thu Jan 29 04:51:29.562286 2026] [:error] [pid 20576:tid 20602] [client 51.75.116.156:40654] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXp20SrDZws_FlQGi9fGDAAAAdA"]
[Thu Jan 29 04:51:32.175142 2026] [:error] [pid 19069:tid 19088] [client 51.75.116.156:40662] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXp21PDHsRM4BJ9a4QtOhgAAAAo"]
[Thu Jan 29 04:51:34.798455 2026] [:error] [pid 20580:tid 20692] [client 51.75.116.156:40672] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95168.aspx"] [unique_id "aXp21pCZ5HHdXPmeL59DRgAAApg"]
[Thu Jan 29 04:51:37.273674 2026] [:error] [pid 20486:tid 20512] [client 51.75.116.156:44018] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95789.aspx"] [unique_id "aXp22XgqSZb6GBx5nnPRyAAAARc"]
[Thu Jan 29 04:51:39.890377 2026] [:error] [pid 20486:tid 20502] [client 51.75.116.156:44020] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A888%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXp223gqSZb6GBx5nnPRygAAAQ0"]
[Thu Jan 29 04:51:42.494078 2026] [:error] [pid 20578:tid 20614] [client 51.75.116.156:44028] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9B%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXp23g6UX7yOMwQFiyd41AAAAgE"]
[Thu Jan 29 04:51:45.112262 2026] [:error] [pid 19177:tid 19182] [client 51.75.116.156:44032] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%202020.aspx"] [unique_id "aXp24XipGz0PT8TrQv7lxwAAAMM"]
[Thu Jan 29 04:51:47.578237 2026] [:error] [pid 20576:tid 20609] [client 51.75.116.156:50192] [client 51.75.116.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%82%E0%B8%84%E0%B9%89%E0%B8%94%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXp24yrDZws_FlQGi9fGKAAAAdc"]
[Thu Jan 29 05:31:14.973483 2026] [:error] [pid 20580:tid 20688] [client 54.37.86.223:32862] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoslot.aspx"] [unique_id "aXqAIpCZ5HHdXPmeL59LHAAAApQ"]
[Thu Jan 29 05:31:17.526601 2026] [:error] [pid 20579:tid 20664] [client 54.37.86.223:54768] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bet365%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aXqAJTVXNopcNyjJc9VmpAAAAlY"]
[Thu Jan 29 05:31:20.258791 2026] [:error] [pid 19177:tid 19186] [client 54.37.86.223:54774] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bet911.aspx"] [unique_id "aXqAKHipGz0PT8TrQv7szgAAAMc"]
[Thu Jan 29 05:31:23.207450 2026] [:error] [pid 20578:tid 20623] [client 54.37.86.223:56192] [client 54.37.86.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050.aspx"] [unique_id "aXqAKw6UX7yOMwQFiyeAbQAAAgo"]
[Thu Jan 29 06:04:49.138366 2026] [:error] [pid 19071:tid 19134] [client 95.91.110.210:13360] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20300.aspx"] [unique_id "aXqIAZfa8Ix5wWmtmJylPgAAAIE"]
[Thu Jan 29 06:04:51.877916 2026] [:error] [pid 19070:tid 19111] [client 95.91.110.210:3610] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXqIA7ou83lIon_aKgYazQAAAEU"]
[Thu Jan 29 06:04:54.636184 2026] [:error] [pid 19071:tid 19137] [client 95.91.110.210:52430] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%95%E0%B8%B4%E0%B8%A1%20true%20wallet%20%E0%B8%9D%E0%B8%B2%E0%B8%81-%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%202020.aspx"] [unique_id "aXqIBpfa8Ix5wWmtmJylSQAAAIQ"]
[Thu Jan 29 06:04:57.400757 2026] [:error] [pid 20486:tid 20506] [client 95.91.110.210:52432] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97.aspx"] [unique_id "aXqICXgqSZb6GBx5nnPrPAAAARE"]
[Thu Jan 29 06:05:00.127712 2026] [:error] [pid 20576:tid 20589] [client 95.91.110.210:52438] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%A2%E0%B8%B8%E0%B9%82%E0%B8%A3%E0%B8%9B.aspx"] [unique_id "aXqIDCrDZws_FlQGi9fTtgAAAcM"]
[Thu Jan 29 06:05:02.861756 2026] [:error] [pid 20486:tid 20492] [client 95.91.110.210:52440] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B8%B3.aspx"] [unique_id "aXqIDngqSZb6GBx5nnPrRAAAAQM"]
[Thu Jan 29 06:05:05.608196 2026] [:error] [pid 19071:tid 19152] [client 95.91.110.210:13900] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXqIEZfa8Ix5wWmtmJylXAAAAJM"]
[Thu Jan 29 06:05:08.233376 2026] [:error] [pid 19069:tid 19078] [client 95.91.110.210:13904] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%84%E0%B8%AB%E0%B8%99%E0%B8%94%E0%B8%B5%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXqIFPDHsRM4BJ9a4QtffAAAAAA"]
[Thu Jan 29 06:05:20.486635 2026] [:error] [pid 20579:tid 20642] [client 95.91.110.210:13912] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%81%E0%B8%88%E0%B8%81%E0%B8%97%E0%B8%B8%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B9%80%E0%B8%87%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%82.aspx"] [unique_id "aXqIIDVXNopcNyjJc9VtxQAAAkE"]
[Thu Jan 29 06:05:23.243827 2026] [:error] [pid 20576:tid 20596] [client 95.91.110.210:61258] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXqIIyrDZws_FlQGi9fTxQAAAco"]
[Thu Jan 29 06:05:25.859658 2026] [:error] [pid 19070:tid 19124] [client 95.91.110.210:38674] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168.aspx"] [unique_id "aXqIJbou83lIon_aKgYa4wAAAFI"]
[Thu Jan 29 06:05:28.575479 2026] [:error] [pid 20519:tid 20572] [client 95.91.110.210:38686] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%201688%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXqIKAo4s4fyROrkyRlEIAAAAZg"]
[Thu Jan 29 06:05:31.286833 2026] [:error] [pid 19071:tid 19137] [client 95.91.110.210:38700] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20777%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXqIK5fa8Ix5wWmtmJylfQAAAIQ"]
[Thu Jan 29 06:05:33.940973 2026] [:error] [pid 19071:tid 19147] [client 95.91.110.210:16498] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20888.aspx"] [unique_id "aXqILZfa8Ix5wWmtmJylgQAAAI4"]
[Thu Jan 29 06:05:36.767793 2026] [:error] [pid 20576:tid 20586] [client 95.91.110.210:16500] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%202024.aspx"] [unique_id "aXqIMCrDZws_FlQGi9fT1QAAAcA"]
[Thu Jan 29 06:05:39.505816 2026] [:error] [pid 19069:tid 19086] [client 95.91.110.210:16508] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20100.aspx"] [unique_id "aXqIM_DHsRM4BJ9a4QtfkwAAAAg"]
[Thu Jan 29 06:05:42.228007 2026] [:error] [pid 20486:tid 20504] [client 95.91.110.210:16510] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C%202021.aspx"] [unique_id "aXqINngqSZb6GBx5nnPrbQAAAQ8"]
[Thu Jan 29 06:05:44.940524 2026] [:error] [pid 20486:tid 20496] [client 95.91.110.210:30138] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20wallet%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B550.aspx"] [unique_id "aXqIOHgqSZb6GBx5nnPrbgAAAQc"]
[Thu Jan 29 06:06:22.174116 2026] [:error] [pid 20578:tid 20614] [client 95.91.110.210:30148] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B9%8C%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIXg6UX7yOMwQFiyeHTgAAAgE"]
[Thu Jan 29 06:06:25.570776 2026] [:error] [pid 20579:tid 20642] [client 95.91.110.210:31658] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%20pg.aspx"] [unique_id "aXqIYTVXNopcNyjJc9Vt_AAAAkE"]
[Thu Jan 29 06:06:34.668343 2026] [:error] [pid 20578:tid 20624] [client 95.91.110.210:32760] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%81%E0%B8%84%E0%B9%88%20%E0%B9%83%E0%B8%AA%E0%B9%88%20%E0%B9%82%E0%B8%84%E0%B9%8A%E0%B8%94%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXqIag6UX7yOMwQFiyeHWAAAAgs"]
[Thu Jan 29 06:06:37.380039 2026] [:error] [pid 19177:tid 19190] [client 95.91.110.210:32774] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%81%E0%B8%94%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%AD%E0%B8%87%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%202023.aspx"] [unique_id "aXqIbXipGz0PT8TrQv7zJgAAAMs"]
[Thu Jan 29 06:06:40.151680 2026] [:error] [pid 19069:tid 19084] [client 95.91.110.210:32782] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXqIcPDHsRM4BJ9a4Qtf1QAAAAY"]
[Thu Jan 29 06:06:42.857703 2026] [:error] [pid 19071:tid 19152] [client 95.91.110.210:32794] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050%20%E0%B8%A2%E0%B8%B7%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%99%E0%B9%80%E0%B8%9A%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXqIcpfa8Ix5wWmtmJylqgAAAJM"]
[Thu Jan 29 06:06:45.522420 2026] [:error] [pid 20579:tid 20643] [client 95.91.110.210:43786] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXqIdTVXNopcNyjJc9VuEwAAAkI"]
[Thu Jan 29 06:06:48.263967 2026] [:error] [pid 20576:tid 20601] [client 95.91.110.210:43794] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5188.aspx"] [unique_id "aXqIeCrDZws_FlQGi9fT-wAAAc8"]
[Thu Jan 29 06:06:51.004298 2026] [:error] [pid 20519:tid 20564] [client 95.91.110.210:43804] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXqIewo4s4fyROrkyRlESwAAAZA"]
[Thu Jan 29 06:06:53.564545 2026] [:error] [pid 19070:tid 19123] [client 95.91.110.210:43816] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXqIfbou83lIon_aKgYbZQAAAFE"]
[Thu Jan 29 06:06:56.307951 2026] [:error] [pid 20576:tid 20595] [client 95.91.110.210:63806] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%20%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B9%83%E0%B8%AB%E0%B8%8D%E0%B9%88%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXqIgCrDZws_FlQGi9fUAwAAAck"]
[Thu Jan 29 06:06:59.032956 2026] [:error] [pid 19177:tid 19203] [client 95.91.110.210:63822] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95888.aspx"] [unique_id "aXqIg3ipGz0PT8TrQv7zaAAAANg"]
[Thu Jan 29 06:07:01.736467 2026] [:error] [pid 19071:tid 19138] [client 95.91.110.210:63824] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AB%E0%B8%A7%E0%B8%A2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C888.aspx"] [unique_id "aXqIhZfa8Ix5wWmtmJylvwAAAIU"]
[Thu Jan 29 06:07:04.461888 2026] [:error] [pid 19071:tid 19148] [client 95.91.110.210:12264] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqIiJfa8Ix5wWmtmJylwgAAAI8"]
[Thu Jan 29 06:07:07.246582 2026] [:error] [pid 19070:tid 19112] [client 95.91.110.210:12276] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%80%E0%B8%AE%E0%B8%87%20666.aspx"] [unique_id "aXqIi7ou83lIon_aKgYbbwAAAEY"]
[Thu Jan 29 06:07:09.986891 2026] [:error] [pid 20579:tid 20647] [client 95.91.110.210:12280] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B9%81%E0%B8%88%E0%B8%81%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXqIjTVXNopcNyjJc9VuRAAAAkY"]
[Thu Jan 29 06:07:12.579396 2026] [:error] [pid 20486:tid 20498] [client 95.91.110.210:12282] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXqIkHgqSZb6GBx5nnPrywAAAQk"]
[Thu Jan 29 06:07:15.271118 2026] [:error] [pid 19177:tid 19201] [client 95.91.110.210:14736] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "aXqIk3ipGz0PT8TrQv7zcAAAANY"]
[Thu Jan 29 06:07:17.984100 2026] [:error] [pid 20486:tid 20511] [client 95.91.110.210:14742] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aXqIlXgqSZb6GBx5nnPr1AAAARY"]
[Thu Jan 29 06:08:06.192823 2026] [:error] [pid 20579:tid 20647] [client 95.91.110.210:9930] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fafa168%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXqIxjVXNopcNyjJc9VufgAAAkY"]
[Thu Jan 29 06:08:08.975023 2026] [:error] [pid 19070:tid 19108] [client 95.91.110.210:36992] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fun88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXqIyLou83lIon_aKgYboAAAAEI"]
[Thu Jan 29 06:08:11.704356 2026] [:error] [pid 19069:tid 19102] [client 95.91.110.210:36998] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fun88%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXqIy_DHsRM4BJ9a4QtgGgAAABg"]
[Thu Jan 29 06:08:14.519781 2026] [:error] [pid 19071:tid 19133] [client 95.91.110.210:37984] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aXqIzpfa8Ix5wWmtmJymQgAAAIA"]
[Thu Jan 29 06:08:17.198565 2026] [:error] [pid 20579:tid 20644] [client 95.91.110.210:37988] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXqI0TVXNopcNyjJc9VuiQAAAkM"]
[Thu Jan 29 06:08:20.021729 2026] [:error] [pid 19177:tid 19184] [client 95.91.110.210:38004] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aXqI1HipGz0PT8TrQv7zoAAAAMU"]
[Thu Jan 29 06:08:22.643685 2026] [:error] [pid 19071:tid 19143] [client 95.91.110.210:38010] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gclub%20%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A.aspx"] [unique_id "aXqI1pfa8Ix5wWmtmJymTwAAAIo"]
[Thu Jan 29 06:08:25.395182 2026] [:error] [pid 19070:tid 19107] [client 95.91.110.210:28938] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goatbet909.aspx"] [unique_id "aXqI2bou83lIon_aKgYbrgAAAEE"]
[Thu Jan 29 06:08:28.140290 2026] [:error] [pid 19070:tid 19125] [client 95.91.110.210:28942] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grand%20lisboa%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqI3Lou83lIon_aKgYbswAAAFM"]
[Thu Jan 29 06:08:30.853819 2026] [:error] [pid 19177:tid 19200] [client 95.91.110.210:28944] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXqI3nipGz0PT8TrQv7zowAAANU"]
[Thu Jan 29 06:08:33.541643 2026] [:error] [pid 20486:tid 20495] [client 95.91.110.210:28960] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa7777.aspx"] [unique_id "aXqI4XgqSZb6GBx5nnPsOwAAAQY"]
[Thu Jan 29 06:08:36.271134 2026] [:error] [pid 20578:tid 20616] [client 95.91.110.210:56792] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa888%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20ufabet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXqI5A6UX7yOMwQFiyeHtgAAAgM"]
[Thu Jan 29 06:08:38.951263 2026] [:error] [pid 20578:tid 20622] [client 95.91.110.210:56798] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXqI5g6UX7yOMwQFiyeHuAAAAgk"]
[Thu Jan 29 06:08:41.583701 2026] [:error] [pid 20578:tid 20618] [client 95.91.110.210:56806] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXqI6Q6UX7yOMwQFiyeHuwAAAgU"]
[Thu Jan 29 06:09:00.745926 2026] [:error] [pid 20486:tid 20506] [client 95.91.110.210:28248] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXqI_HgqSZb6GBx5nnPsWgAAARE"]
[Thu Jan 29 06:09:38.893664 2026] [:error] [pid 19177:tid 19181] [client 95.91.110.210:3688] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet1688%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXqJInipGz0PT8TrQv7z1wAAAMI"]
[Thu Jan 29 06:09:41.661327 2026] [:error] [pid 19071:tid 19136] [client 95.91.110.210:55014] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet365%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXqJJZfa8Ix5wWmtmJymvAAAAIM"]
[Thu Jan 29 06:09:44.447702 2026] [:error] [pid 19070:tid 19113] [client 95.91.110.210:19096] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet789.aspx"] [unique_id "aXqJKLou83lIon_aKgYb7wAAAEc"]
[Thu Jan 29 06:09:47.181514 2026] [:error] [pid 20580:tid 20671] [client 95.91.110.210:19110] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufacash%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXqJK5CZ5HHdXPmeL59UFwAAAoM"]
[Thu Jan 29 06:09:49.957995 2026] [:error] [pid 19070:tid 19125] [client 95.91.110.210:19126] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufaseven.aspx"] [unique_id "aXqJLbou83lIon_aKgYb8gAAAFM"]
[Thu Jan 29 06:09:52.570906 2026] [:error] [pid 20519:tid 20557] [client 95.91.110.210:19138] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/victory%20club%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqJMAo4s4fyROrkyRlE2QAAAYk"]
[Thu Jan 29 06:09:55.297453 2026] [:error] [pid 19069:tid 19092] [client 95.91.110.210:4772] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aXqJM_DHsRM4BJ9a4QthEQAAAA4"]
[Thu Jan 29 06:09:59.475836 2026] [:error] [pid 19070:tid 19113] [client 95.91.110.210:4786] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w88%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXqJN7ou83lIon_aKgYcbwAAAEc"]
[Thu Jan 29 06:10:05.772708 2026] [:error] [pid 20579:tid 20661] [client 95.91.110.210:4790] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/warpufa.aspx"] [unique_id "aXqJPTVXNopcNyjJc9Vu2AAAAlQ"]
[Thu Jan 29 06:10:09.350146 2026] [:error] [pid 20486:tid 20508] [client 95.91.110.210:23720] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aXqJQXgqSZb6GBx5nnPsyAAAARM"]
[Thu Jan 29 06:10:12.039531 2026] [:error] [pid 20576:tid 20590] [client 95.91.110.210:23736] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wow%20slot%20%E0%B8%A1%E0%B8%B2%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXqJRCrDZws_FlQGi9fUsAAAAcQ"]
[Thu Jan 29 06:10:14.784253 2026] [:error] [pid 20486:tid 20506] [client 95.91.110.210:12596] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www.lotto.com%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.aspx"] [unique_id "aXqJRngqSZb6GBx5nnPszwAAARE"]
[Thu Jan 29 06:10:17.546725 2026] [:error] [pid 20576:tid 20605] [client 95.91.110.210:12612] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www.ufabet.com%20%E0%B8%A5%E0%B8%B4%E0%B9%89%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A24.aspx"] [unique_id "aXqJSSrDZws_FlQGi9fUuAAAAdM"]
[Thu Jan 29 06:10:20.273261 2026] [:error] [pid 20580:tid 20685] [client 95.91.110.210:12632] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aXqJTJCZ5HHdXPmeL59UOwAAApE"]
[Thu Jan 29 06:10:23.210760 2026] [:error] [pid 20576:tid 20588] [client 95.91.110.210:12646] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXqJTyrDZws_FlQGi9fUvAAAAcI"]
[Thu Jan 29 06:10:25.986073 2026] [:error] [pid 20486:tid 20510] [client 95.91.110.210:57596] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xoslotz.aspx"] [unique_id "aXqJUXgqSZb6GBx5nnPs6AAAARU"]
[Thu Jan 29 06:10:28.699589 2026] [:error] [pid 20580:tid 20689] [client 95.91.110.210:57598] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aXqJVJCZ5HHdXPmeL59UQQAAApU"]
[Thu Jan 29 06:44:01.736535 2026] [:error] [pid 19071:tid 19144] [client 177.12.168.13:59914] [client 177.12.168.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.12.168.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXqRMZfa8Ix5wWmtmJyvTwAAAIs"]
[Thu Jan 29 06:44:04.380808 2026] [:error] [pid 20486:tid 20491] [client 177.12.168.13:59926] [client 177.12.168.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.12.168.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXqRNHgqSZb6GBx5nnP5HQAAAQI"]
[Thu Jan 29 06:44:45.975863 2026] [:error] [pid 20578:tid 20623] [client 121.40.46.168:34776] [client 121.40.46.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.40.46.168, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXqRXQ6UX7yOMwQFiyeOrQAAAgo"]
[Thu Jan 29 06:44:49.619056 2026] [:error] [pid 19069:tid 19080] [client 121.40.46.168:34930] [client 121.40.46.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.40.46.168, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXqRYfDHsRM4BJ9a4QtoOwAAAAI"]
[Thu Jan 29 06:45:06.025068 2026] [:error] [pid 19070:tid 19115] [client 123.57.241.191:50766] [client 123.57.241.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.57.241.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXqRcrou83lIon_aKgYkfgAAAEk"]
[Thu Jan 29 06:45:07.953239 2026] [:error] [pid 19177:tid 19181] [client 123.57.241.191:50782] [client 123.57.241.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.57.241.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXqRc3ipGz0PT8TrQv75pgAAAMI"]
[Thu Jan 29 11:08:31.401244 2026] [:error] [pid 19177:tid 19180] [client 62.84.185.60:27470] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%94%E0%B8%B9%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%94%E0%B8%B5%E0%B9%80%E0%B8%A5%E0%B8%A2%E0%B9%8C.aspx"] [unique_id "aXrPL3ipGz0PT8TrQv4ovgAAAME"]
[Thu Jan 29 11:08:34.068603 2026] [:error] [pid 20486:tid 20506] [client 62.84.185.60:53402] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXrPMngqSZb6GBx5nnNcZQAAARE"]
[Thu Jan 29 11:08:36.703442 2026] [:error] [pid 19071:tid 19145] [client 62.84.185.60:53406] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrPNJfa8Ix5wWmtmJz7DAAAAIw"]
[Thu Jan 29 11:08:39.452294 2026] [:error] [pid 19071:tid 19136] [client 62.84.185.60:53414] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20pg.aspx"] [unique_id "aXrPN5fa8Ix5wWmtmJz7EQAAAIM"]
[Thu Jan 29 11:08:42.310933 2026] [:error] [pid 19070:tid 19115] [client 62.84.185.60:41928] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrPOrou83lIon_aKgZnVgAAAEk"]
[Thu Jan 29 11:08:44.914713 2026] [:error] [pid 20578:tid 20620] [client 62.84.185.60:41942] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg.aspx"] [unique_id "aXrPPA6UX7yOMwQFiyfA8QAAAgc"]
[Thu Jan 29 11:08:47.466785 2026] [:error] [pid 20519:tid 20556] [client 62.84.185.60:41954] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrPPwo4s4fyROrkyRl5WwAAAYg"]
[Thu Jan 29 11:08:50.300649 2026] [:error] [pid 20580:tid 20685] [client 62.84.185.60:41958] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20pg%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%AA%E0%B8%B0%E0%B8%94%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrPQpCZ5HHdXPmeL5-TYAAAApE"]
[Thu Jan 29 11:08:52.950824 2026] [:error] [pid 19071:tid 19139] [client 62.84.185.60:20434] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20pg.aspx"] [unique_id "aXrPRJfa8Ix5wWmtmJz7GgAAAIY"]
[Thu Jan 29 11:08:55.699174 2026] [:error] [pid 19177:tid 19186] [client 62.84.185.60:20446] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5%2010000.aspx"] [unique_id "aXrPR3ipGz0PT8TrQv4oyQAAAMc"]
[Thu Jan 29 11:08:58.525083 2026] [:error] [pid 19177:tid 19197] [client 62.84.185.60:20454] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5%201000000.aspx"] [unique_id "aXrPSnipGz0PT8TrQv4ozQAAANI"]
[Thu Jan 29 11:09:01.184267 2026] [:error] [pid 19177:tid 19203] [client 62.84.185.60:20460] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5%2050000.aspx"] [unique_id "aXrPTXipGz0PT8TrQv4o0AAAANg"]
[Thu Jan 29 11:09:03.809610 2026] [:error] [pid 20578:tid 20619] [client 62.84.185.60:1848] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXrPTw6UX7yOMwQFiyfA-QAAAgY"]
[Thu Jan 29 11:09:06.575202 2026] [:error] [pid 19070:tid 19125] [client 62.84.185.60:1858] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%8A%E0%B9%87%E0%B8%81%E0%B8%8A%E0%B8%B5%E0%B9%88.aspx"] [unique_id "aXrPUrou83lIon_aKgZndQAAAFM"]
[Thu Jan 29 11:09:09.248842 2026] [:error] [pid 20580:tid 20671] [client 62.84.185.60:1862] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXrPVZCZ5HHdXPmeL5-TewAAAoM"]
[Thu Jan 29 11:09:11.886699 2026] [:error] [pid 20580:tid 20673] [client 62.84.185.60:29550] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%A2%E0%B8%B4%E0%B8%87%E0%B8%9B%E0%B8%A5%E0%B8%B2.aspx"] [unique_id "aXrPV5CZ5HHdXPmeL5-TgAAAAoU"]
[Thu Jan 29 11:09:14.570971 2026] [:error] [pid 20579:tid 20653] [client 62.84.185.60:29562] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20joker.aspx"] [unique_id "aXrPWjVXNopcNyjJc9WowgAAAkw"]
[Thu Jan 29 11:09:17.240559 2026] [:error] [pid 19069:tid 19093] [client 62.84.185.60:29570] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%AA%20%E0%B8%9B%E0%B8%B4%20%E0%B8%99.aspx"] [unique_id "aXrPXfDHsRM4BJ9a4QujgQAAAA8"]
[Thu Jan 29 11:09:19.900656 2026] [:error] [pid 19070:tid 19125] [client 62.84.185.60:29572] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXrPX7ou83lIon_aKgZngQAAAFM"]
[Thu Jan 29 11:09:22.678019 2026] [:error] [pid 20579:tid 20644] [client 62.84.185.60:42956] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXrPYjVXNopcNyjJc9WoyQAAAkM"]
[Thu Jan 29 11:09:25.398661 2026] [:error] [pid 20486:tid 20490] [client 62.84.185.60:42958] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%B5%E0%B9%80%E0%B8%88%E0%B8%AD%E0%B8%A3%E0%B9%8C.aspx"] [unique_id "aXrPZXgqSZb6GBx5nnNcggAAAQE"]
[Thu Jan 29 11:10:13.361080 2026] [:error] [pid 20519:tid 20556] [client 62.84.185.60:18090] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100%20%E0%B8%9A%E0%B8%B2%E0%B8%97.aspx"] [unique_id "aXrPlQo4s4fyROrkyRl5lwAAAYg"]
[Thu Jan 29 11:10:16.004897 2026] [:error] [pid 19177:tid 19179] [client 62.84.185.60:18102] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%202020.aspx"] [unique_id "aXrPmHipGz0PT8TrQv4o_gAAAMA"]
[Thu Jan 29 11:10:18.761864 2026] [:error] [pid 19069:tid 19091] [client 62.84.185.60:18112] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%2088.aspx"] [unique_id "aXrPmvDHsRM4BJ9a4QujrQAAAA0"]
[Thu Jan 29 11:10:21.461876 2026] [:error] [pid 19070:tid 19126] [client 62.84.185.60:18124] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20joker.aspx"] [unique_id "aXrPnbou83lIon_aKgZntQAAAFQ"]
[Thu Jan 29 11:10:24.289793 2026] [:error] [pid 19070:tid 19113] [client 62.84.185.60:42298] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20pg.aspx"] [unique_id "aXrPoLou83lIon_aKgZnxAAAAEc"]
[Thu Jan 29 11:10:27.019468 2026] [:error] [pid 19071:tid 19136] [client 62.84.185.60:42300] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%97%E0%B8%B8%E0%B8%81%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2.aspx"] [unique_id "aXrPo5fa8Ix5wWmtmJz7eAAAAIM"]
[Thu Jan 29 11:10:29.728438 2026] [:error] [pid 19070:tid 19112] [client 62.84.185.60:42306] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99.aspx"] [unique_id "aXrPpbou83lIon_aKgZnzwAAAEY"]
[Thu Jan 29 11:10:32.420707 2026] [:error] [pid 19069:tid 19100] [client 62.84.185.60:21662] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXrPqPDHsRM4BJ9a4QujugAAABY"]
[Thu Jan 29 11:10:35.171505 2026] [:error] [pid 20486:tid 20510] [client 62.84.185.60:21674] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pg.aspx"] [unique_id "aXrPq3gqSZb6GBx5nnNc6wAAARU"]
[Thu Jan 29 11:10:37.758729 2026] [:error] [pid 20486:tid 20504] [client 62.84.185.60:21678] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99pp.aspx"] [unique_id "aXrPrXgqSZb6GBx5nnNc8AAAAQ8"]
[Thu Jan 29 11:10:40.465342 2026] [:error] [pid 20579:tid 20649] [client 62.84.185.60:21692] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXrPsDVXNopcNyjJc9Wo8wAAAkg"]
[Thu Jan 29 11:10:43.159263 2026] [:error] [pid 20579:tid 20664] [client 62.84.185.60:21558] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pg.aspx"] [unique_id "aXrPszVXNopcNyjJc9Wo9QAAAlY"]
[Thu Jan 29 11:10:45.906306 2026] [:error] [pid 19177:tid 19203] [client 62.84.185.60:21570] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87pp.aspx"] [unique_id "aXrPtXipGz0PT8TrQv4pDQAAANg"]
[Thu Jan 29 11:10:48.501023 2026] [:error] [pid 20519:tid 20548] [client 62.84.185.60:21578] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20gclub1688.aspx"] [unique_id "aXrPuAo4s4fyROrkyRl5tAAAAYA"]
[Thu Jan 29 11:10:51.017756 2026] [:error] [pid 20519:tid 20551] [client 62.84.185.60:21594] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20pg%20slot.aspx"] [unique_id "aXrPuwo4s4fyROrkyRl5uQAAAYM"]
[Thu Jan 29 11:10:53.769754 2026] [:error] [pid 19070:tid 19112] [client 62.84.185.60:4206] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%20%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet.aspx"] [unique_id "aXrPvbou83lIon_aKgZn2QAAAEY"]
[Thu Jan 29 11:10:56.294689 2026] [:error] [pid 20579:tid 20652] [client 62.84.185.60:4222] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20369.aspx"] [unique_id "aXrPwDVXNopcNyjJc9Wo_wAAAks"]
[Thu Jan 29 11:10:59.089056 2026] [:error] [pid 20578:tid 20615] [client 62.84.185.60:4238] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20789.aspx"] [unique_id "aXrPww6UX7yOMwQFiyfBQwAAAgI"]
[Thu Jan 29 11:11:01.823676 2026] [:error] [pid 20579:tid 20664] [client 62.84.185.60:2266] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20joker%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrPxTVXNopcNyjJc9WpAgAAAlY"]
[Thu Jan 29 11:11:04.613517 2026] [:error] [pid 20519:tid 20565] [client 62.84.185.60:2278] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20pg.aspx"] [unique_id "aXrPyAo4s4fyROrkyRl5xAAAAZE"]
[Thu Jan 29 11:11:07.313749 2026] [:error] [pid 20576:tid 20595] [client 62.84.185.60:2280] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD777.aspx"] [unique_id "aXrPyyrDZws_FlQGi9cJIAAAAck"]
[Thu Jan 29 11:11:53.562973 2026] [:error] [pid 19069:tid 19087] [client 62.84.185.60:26128] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2pg.aspx"] [unique_id "aXrP-fDHsRM4BJ9a4QukFQAAAAk"]
[Thu Jan 29 11:11:56.187952 2026] [:error] [pid 20519:tid 20548] [client 62.84.185.60:26134] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2s%20joker.aspx"] [unique_id "aXrP_Ao4s4fyROrkyRl55gAAAYA"]
[Thu Jan 29 11:11:58.708967 2026] [:error] [pid 20580:tid 20687] [client 62.84.185.60:26136] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2sbobet%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrP_pCZ5HHdXPmeL5-UGwAAApM"]
[Thu Jan 29 11:12:01.362056 2026] [:error] [pid 20580:tid 20674] [client 62.84.185.60:26138] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2slotxo%20joker.aspx"] [unique_id "aXrQAZCZ5HHdXPmeL5-UHQAAAoY"]
[Thu Jan 29 11:12:04.260277 2026] [:error] [pid 20576:tid 20596] [client 62.84.185.60:44916] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2ufabet.aspx"] [unique_id "aXrQBCrDZws_FlQGi9cJRQAAAco"]
[Thu Jan 29 11:12:06.942985 2026] [:error] [pid 20579:tid 20663] [client 62.84.185.60:44922] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9A%E0%B8%AD%E0%B8%A5%2069.aspx"] [unique_id "aXrQBjVXNopcNyjJc9WpPwAAAlU"]
[Thu Jan 29 11:12:09.540980 2026] [:error] [pid 19071:tid 19137] [client 62.84.185.60:44938] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%2099.aspx"] [unique_id "aXrQCZfa8Ix5wWmtmJz75AAAAIQ"]
[Thu Jan 29 11:12:12.129515 2026] [:error] [pid 19070:tid 19128] [client 62.84.185.60:60516] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXrQDLou83lIon_aKgZoSwAAAFY"]
[Thu Jan 29 11:12:14.571257 2026] [:error] [pid 20579:tid 20653] [client 62.84.185.60:60522] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXrQDjVXNopcNyjJc9WpQwAAAkw"]
[Thu Jan 29 11:12:17.161090 2026] [:error] [pid 20578:tid 20622] [client 62.84.185.60:60524] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C.aspx"] [unique_id "aXrQEQ6UX7yOMwQFiyfBoAAAAgk"]
[Thu Jan 29 11:12:19.861945 2026] [:error] [pid 19070:tid 19128] [client 62.84.185.60:60530] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B9%80%E0%B8%AD%E0%B9%80%E0%B8%A2%E0%B9%88%E0%B8%99%E0%B8%95%E0%B9%8C.aspx"] [unique_id "aXrQE7ou83lIon_aKgZoVgAAAFY"]
[Thu Jan 29 11:12:22.588781 2026] [:error] [pid 20486:tid 20511] [client 62.84.185.60:38520] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXrQFngqSZb6GBx5nnNdlgAAARY"]
[Thu Jan 29 11:12:25.146703 2026] [:error] [pid 19069:tid 19082] [client 62.84.185.60:38528] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXrQGfDHsRM4BJ9a4QukOQAAAAQ"]
[Thu Jan 29 11:12:28.585213 2026] [:error] [pid 19070:tid 19123] [client 62.84.185.60:38538] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXrQHLou83lIon_aKgZoWAAAAFE"]
[Thu Jan 29 11:12:31.320633 2026] [:error] [pid 19070:tid 19130] [client 62.84.185.60:38544] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20%E0%B8%AA%E0%B8%94%20thscore%20vip.aspx"] [unique_id "aXrQH7ou83lIon_aKgZoWwAAAFg"]
[Thu Jan 29 11:12:33.972628 2026] [:error] [pid 19071:tid 19147] [client 62.84.185.60:39060] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9C%E0%B8%A5%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%20vip.aspx"] [unique_id "aXrQIZfa8Ix5wWmtmJz7_QAAAI4"]
[Thu Jan 29 11:12:36.720968 2026] [:error] [pid 20519:tid 20561] [client 62.84.185.60:39070] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%2020%20%E0%B8%97%E0%B8%B3%20100%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%2050.aspx"] [unique_id "aXrQJAo4s4fyROrkyRl6BAAAAY0"]
[Thu Jan 29 11:12:39.326430 2026] [:error] [pid 19070:tid 19125] [client 62.84.185.60:39074] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%E0%B9%80%E0%B8%A5%E0%B8%A2.aspx"] [unique_id "aXrQJ7ou83lIon_aKgZoZQAAAFM"]
[Thu Jan 29 11:12:41.830611 2026] [:error] [pid 19071:tid 19137] [client 62.84.185.60:53962] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrQKZfa8Ix5wWmtmJz8FgAAAIQ"]
[Thu Jan 29 11:12:44.381418 2026] [:error] [pid 20580:tid 20690] [client 62.84.185.60:53968] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94%202020.aspx"] [unique_id "aXrQLJCZ5HHdXPmeL5-UQgAAApY"]
[Thu Jan 29 11:12:47.002600 2026] [:error] [pid 20486:tid 20509] [client 62.84.185.60:53976] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%9D%E0%B8%B2%E0%B8%8110%E0%B8%A3%E0%B8%B1%E0%B8%9A100.aspx"] [unique_id "aXrQL3gqSZb6GBx5nnNd-gAAARQ"]
[Thu Jan 29 11:13:33.411205 2026] [:error] [pid 20580:tid 20690] [client 62.84.185.60:55788] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%83%E0%B8%AB%E0%B9%89%20%E0%B9%81%E0%B8%95%E0%B8%81.aspx"] [unique_id "aXrQXZCZ5HHdXPmeL5-UgQAAApY"]
[Thu Jan 29 11:13:36.187815 2026] [:error] [pid 20580:tid 20671] [client 62.84.185.60:55798] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%9A%E0%B8%B2%E0%B8%A2%2099.aspx"] [unique_id "aXrQYJCZ5HHdXPmeL5-UgwAAAoM"]
[Thu Jan 29 11:13:38.904171 2026] [:error] [pid 20519:tid 20566] [client 62.84.185.60:55808] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%20sbobet.aspx"] [unique_id "aXrQYgo4s4fyROrkyRl6KwAAAZI"]
[Thu Jan 29 11:13:41.606223 2026] [:error] [pid 20576:tid 20599] [client 62.84.185.60:55822] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%9A%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%A3%E0%B9%88%E0%B8%B2.aspx"] [unique_id "aXrQZSrDZws_FlQGi9cJjQAAAc0"]
[Thu Jan 29 11:13:44.345203 2026] [:error] [pid 19071:tid 19152] [client 62.84.185.60:62448] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrQaJfa8Ix5wWmtmJz8bwAAAJM"]
[Thu Jan 29 11:13:47.054825 2026] [:error] [pid 19070:tid 19115] [client 62.84.185.60:62452] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95xo.aspx"] [unique_id "aXrQa7ou83lIon_aKgZosgAAAEk"]
[Thu Jan 29 11:13:49.585986 2026] [:error] [pid 19177:tid 19190] [client 62.84.185.60:62454] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrQbXipGz0PT8TrQv4ptAAAAMs"]
[Thu Jan 29 11:13:52.342764 2026] [:error] [pid 20486:tid 20490] [client 62.84.185.60:58226] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrQcHgqSZb6GBx5nnNerAAAAQE"]
[Thu Jan 29 11:13:55.010061 2026] [:error] [pid 19070:tid 19107] [client 62.84.185.60:58232] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3slotxo.aspx"] [unique_id "aXrQc7ou83lIon_aKgZowQAAAEE"]
[Thu Jan 29 11:13:57.776670 2026] [:error] [pid 19177:tid 19186] [client 62.84.185.60:58236] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A2%E0%B8%B2%E0%B8%A199%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrQdXipGz0PT8TrQv4puwAAAMc"]
[Thu Jan 29 11:14:00.299467 2026] [:error] [pid 20578:tid 20621] [client 62.84.185.60:58246] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B8%A7%E0%B8%AD%20%E0%B9%80%E0%B8%A5%E0%B8%97.aspx"] [unique_id "aXrQeA6UX7yOMwQFiyfB7wAAAgg"]
[Thu Jan 29 11:14:03.049696 2026] [:error] [pid 20486:tid 20493] [client 62.84.185.60:2474] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.aspx"] [unique_id "aXrQe3gqSZb6GBx5nnNeuwAAAQQ"]
[Thu Jan 29 11:14:05.762325 2026] [:error] [pid 20580:tid 20669] [client 62.84.185.60:2484] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.aspx"] [unique_id "aXrQfZCZ5HHdXPmeL5-UmAAAAoI"]
[Thu Jan 29 11:14:08.589753 2026] [:error] [pid 20578:tid 20624] [client 62.84.185.60:2492] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100.aspx"] [unique_id "aXrQgA6UX7yOMwQFiyfB9AAAAgs"]
[Thu Jan 29 11:14:11.470014 2026] [:error] [pid 19069:tid 19100] [client 62.84.185.60:2506] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%20pg.aspx"] [unique_id "aXrQg_DHsRM4BJ9a4QukpwAAABY"]
[Thu Jan 29 11:14:13.956957 2026] [:error] [pid 20579:tid 20663] [client 62.84.185.60:29524] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5.aspx"] [unique_id "aXrQhTVXNopcNyjJc9WpmQAAAlU"]
[Thu Jan 29 11:14:16.471146 2026] [:error] [pid 19071:tid 19151] [client 62.84.185.60:29538] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87.aspx"] [unique_id "aXrQiJfa8Ix5wWmtmJz8igAAAJI"]
[Thu Jan 29 11:14:19.085983 2026] [:error] [pid 20580:tid 20677] [client 62.84.185.60:29542] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9D%E0%B8%B2%E0%B8%81%2010%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%AD%E0%B8%94%20200.aspx"] [unique_id "aXrQi5CZ5HHdXPmeL5-UqwAAAok"]
[Thu Jan 29 11:14:21.724804 2026] [:error] [pid 19071:tid 19144] [client 62.84.185.60:29546] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrQjZfa8Ix5wWmtmJz8kQAAAIs"]
[Thu Jan 29 11:14:24.523022 2026] [:error] [pid 19071:tid 19154] [client 62.84.185.60:49824] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.aspx"] [unique_id "aXrQkJfa8Ix5wWmtmJz8mQAAAJU"]
[Thu Jan 29 11:14:27.359963 2026] [:error] [pid 19070:tid 19116] [client 62.84.185.60:49840] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.aspx"] [unique_id "aXrQk7ou83lIon_aKgZo8AAAAEo"]
[Thu Jan 29 11:15:13.525238 2026] [:error] [pid 19069:tid 19078] [client 62.84.185.60:22636] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m98%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXrQwfDHsRM4BJ9a4QulFQAAAAA"]
[Thu Jan 29 11:15:16.147953 2026] [:error] [pid 20486:tid 20512] [client 62.84.185.60:22644] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m98%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20188.aspx"] [unique_id "aXrQxHgqSZb6GBx5nnNfCgAAARc"]
[Thu Jan 29 11:15:18.695062 2026] [:error] [pid 19071:tid 19148] [client 62.84.185.60:22656] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m98%20bet%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%20%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXrQxpfa8Ix5wWmtmJz8zgAAAI8"]
[Thu Jan 29 11:15:21.271909 2026] [:error] [pid 19069:tid 19093] [client 62.84.185.60:22662] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myslot.aspx"] [unique_id "aXrQyfDHsRM4BJ9a4QulIwAAAA8"]
[Thu Jan 29 11:15:23.932473 2026] [:error] [pid 20576:tid 20589] [client 62.84.185.60:36120] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "aXrQyyrDZws_FlQGi9cJ8AAAAcM"]
[Thu Jan 29 11:15:26.574320 2026] [:error] [pid 20486:tid 20509] [client 62.84.185.60:36136] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD.aspx"] [unique_id "aXrQzngqSZb6GBx5nnNfHwAAARQ"]
[Thu Jan 29 11:15:29.119165 2026] [:error] [pid 20580:tid 20691] [client 62.84.185.60:36148] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aXrQ0ZCZ5HHdXPmeL5-U_QAAApc"]
[Thu Jan 29 11:15:32.045597 2026] [:error] [pid 19070:tid 19129] [client 62.84.185.60:6090] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot1234.aspx"] [unique_id "aXrQ1Lou83lIon_aKgZpPQAAAFc"]
[Thu Jan 29 11:15:34.636989 2026] [:error] [pid 19071:tid 19149] [client 62.84.185.60:6102] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168.aspx"] [unique_id "aXrQ1pfa8Ix5wWmtmJz84AAAAJA"]
[Thu Jan 29 11:15:37.309234 2026] [:error] [pid 19071:tid 19135] [client 62.84.185.60:6104] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot777.aspx"] [unique_id "aXrQ2Zfa8Ix5wWmtmJz85gAAAII"]
[Thu Jan 29 11:15:40.063691 2026] [:error] [pid 20486:tid 20499] [client 62.84.185.60:6110] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot888.aspx"] [unique_id "aXrQ3HgqSZb6GBx5nnNfLgAAAQo"]
[Thu Jan 29 11:15:42.735629 2026] [:error] [pid 20579:tid 20643] [client 62.84.185.60:24986] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslotclub.aspx"] [unique_id "aXrQ3jVXNopcNyjJc9Wp6AAAAkI"]
[Thu Jan 29 11:15:45.455036 2026] [:error] [pid 20576:tid 20606] [client 62.84.185.60:24994] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa700.aspx"] [unique_id "aXrQ4SrDZws_FlQGi9cKAAAAAdQ"]
[Thu Jan 29 11:15:48.188632 2026] [:error] [pid 20486:tid 20508] [client 62.84.185.60:25002] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa747%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXrQ5HgqSZb6GBx5nnNfNgAAARM"]
[Thu Jan 29 11:15:50.661199 2026] [:error] [pid 20578:tid 20623] [client 62.84.185.60:25016] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z16%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aXrQ5g6UX7yOMwQFiyfCSwAAAgo"]
[Thu Jan 29 13:19:03.513324 2026] [:error] [pid 20486:tid 20499] [client 43.130.31.17:60956] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXrtx3gqSZb6GBx5nnOPKAAAAQo"]
[Thu Jan 29 19:11:57.423232 2026] [:error] [pid 19071:tid 19149] [client 51.75.119.154:38618] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aXtAfZfa8Ix5wWmtmJx0fgAAAJA"]
[Thu Jan 29 19:12:01.071380 2026] [:error] [pid 20576:tid 20603] [client 51.75.119.154:44364] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aXtAgSrDZws_FlQGi9dgSwAAAdE"]
[Thu Jan 29 19:12:04.078242 2026] [:error] [pid 20579:tid 20649] [client 51.75.119.154:44380] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aXtAhDVXNopcNyjJc9UJtAAAAkg"]
[Thu Jan 29 19:12:07.124931 2026] [:error] [pid 20519:tid 20556] [client 51.75.119.154:47144] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aXtAhwo4s4fyROrkyRnTGAAAAYg"]
[Thu Jan 29 19:12:10.242316 2026] [:error] [pid 20580:tid 20676] [client 51.75.119.154:47154] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXtAipCZ5HHdXPmeL58Y0wAAAog"]
[Thu Jan 29 19:12:13.405416 2026] [:error] [pid 20580:tid 20692] [client 51.75.119.154:47170] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXtAjZCZ5HHdXPmeL58Y2AAAApg"]
[Thu Jan 29 19:12:16.392197 2026] [:error] [pid 20576:tid 20586] [client 51.75.119.154:33048] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aXtAkCrDZws_FlQGi9dgYgAAAcA"]
[Thu Jan 29 19:12:19.028476 2026] [:error] [pid 19070:tid 19123] [client 51.75.119.154:33060] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aXtAk7ou83lIon_aKgbVdgAAAFE"]
[Thu Jan 29 19:12:21.869502 2026] [:error] [pid 20580:tid 20689] [client 51.75.119.154:33074] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXtAlZCZ5HHdXPmeL58Y7wAAApU"]
[Thu Jan 29 19:12:25.277662 2026] [:error] [pid 20579:tid 20666] [client 51.75.119.154:36938] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aXtAmTVXNopcNyjJc9UJzAAAAlc"]
[Thu Jan 29 19:12:28.299603 2026] [:error] [pid 19071:tid 19148] [client 51.75.119.154:36952] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXtAnJfa8Ix5wWmtmJx0mwAAAI8"]
[Thu Jan 29 19:12:31.549151 2026] [:error] [pid 20580:tid 20690] [client 51.75.119.154:36966] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aXtAn5CZ5HHdXPmeL58Y_gAAApY"]
[Thu Jan 29 19:12:34.347640 2026] [:error] [pid 20576:tid 20606] [client 51.75.119.154:36970] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXtAoirDZws_FlQGi9dgbgAAAdQ"]
[Thu Jan 29 19:12:37.415066 2026] [:error] [pid 19177:tid 19190] [client 51.75.119.154:36914] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aXtApXipGz0PT8TrQv6AWwAAAMs"]
[Thu Jan 29 19:12:40.484505 2026] [:error] [pid 20580:tid 20681] [client 51.75.119.154:36926] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aXtAqJCZ5HHdXPmeL58ZDQAAAo0"]
[Thu Jan 29 19:12:43.575666 2026] [:error] [pid 20519:tid 20560] [client 51.75.119.154:36930] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXtAqwo4s4fyROrkyRnTMQAAAYw"]
[Thu Jan 29 19:12:46.189612 2026] [:error] [pid 20486:tid 20502] [client 51.75.119.154:40080] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXtArngqSZb6GBx5nnPk7wAAAQ0"]
[Thu Jan 29 19:12:49.068484 2026] [:error] [pid 19177:tid 19199] [client 51.75.119.154:40088] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aXtAsXipGz0PT8TrQv6AYAAAANQ"]
[Thu Jan 29 19:12:51.809857 2026] [:error] [pid 20486:tid 20503] [client 51.75.119.154:40090] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aXtAs3gqSZb6GBx5nnPk9AAAAQ4"]
[Thu Jan 29 20:46:03.421881 2026] [:error] [pid 19069:tid 19089] [client 43.153.123.3:45146] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXtWi_DHsRM4BJ9a4QtjLQAAAAs"]
[Thu Jan 29 22:28:21.751704 2026] [:error] [pid 20576:tid 20589] [client 47.90.227.150:37808] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXtuhSrDZws_FlQGi9eHBAAAAcM"]
[Thu Jan 29 22:28:22.161887 2026] [:error] [pid 39863:tid 39866] [client 47.90.227.150:36846] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXtuhrsHJJGGu8set58NQQAAAUA"]
[Thu Jan 29 23:22:20.677618 2026] [:error] [pid 19069:tid 19080] [client 54.37.252.212:52498] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "aXt7LPDHsRM4BJ9a4QuMJAAAAAI"]
[Thu Jan 29 23:22:23.364509 2026] [:error] [pid 20486:tid 20493] [client 54.37.252.212:34508] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "aXt7L3gqSZb6GBx5nnMh5AAAAQQ"]
[Thu Jan 29 23:22:25.862611 2026] [:error] [pid 19069:tid 19084] [client 54.37.252.212:34524] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "aXt7MfDHsRM4BJ9a4QuMKAAAAAY"]
[Thu Jan 29 23:22:28.496697 2026] [:error] [pid 20578:tid 20628] [client 54.37.252.212:34398] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aXt7NA6UX7yOMwQFiydU8wAAAg8"]
[Thu Jan 29 23:22:30.957306 2026] [:error] [pid 20486:tid 20498] [client 54.37.252.212:34406] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aXt7NngqSZb6GBx5nnMh6gAAAQk"]
[Thu Jan 29 23:22:33.433651 2026] [:error] [pid 40273:tid 40276] [client 54.37.252.212:34414] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aXt7ORN1IJpP__zZvujfSgAAAEE"]
[Thu Jan 29 23:22:36.117079 2026] [:error] [pid 20576:tid 20602] [client 54.37.252.212:34416] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aXt7PCrDZws_FlQGi9eS3wAAAdA"]
[Thu Jan 29 23:22:38.568385 2026] [:error] [pid 20519:tid 20554] [client 54.37.252.212:51400] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aXt7Pgo4s4fyROrkyRkMxwAAAYY"]
[Thu Jan 29 23:22:40.969098 2026] [:error] [pid 19071:tid 19144] [client 54.37.252.212:51412] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aXt7QJfa8Ix5wWmtmJyzbQAAAIs"]
[Thu Jan 29 23:22:43.488323 2026] [:error] [pid 19069:tid 19080] [client 54.37.252.212:51414] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aXt7Q_DHsRM4BJ9a4QuMPgAAAAI"]
[Thu Jan 29 23:22:45.863648 2026] [:error] [pid 20580:tid 20665] [client 54.37.252.212:51416] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aXt7RZCZ5HHdXPmeL59ZOQAAAoA"]
[Thu Jan 29 23:22:48.500654 2026] [:error] [pid 19069:tid 19091] [client 54.37.252.212:57442] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aXt7SPDHsRM4BJ9a4QuMRwAAAA0"]
[Thu Jan 29 23:22:51.278520 2026] [:error] [pid 19071:tid 19138] [client 54.37.252.212:57454] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXt7S5fa8Ix5wWmtmJyzegAAAIU"]
[Thu Jan 29 23:22:54.160370 2026] [:error] [pid 40273:tid 40292] [client 54.37.252.212:57468] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aXt7ThN1IJpP__zZvujfYwAAAFE"]
[Thu Jan 29 23:22:56.692676 2026] [:error] [pid 40273:tid 40275] [client 54.37.252.212:57484] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXt7UBN1IJpP__zZvujfZQAAAEA"]
[Thu Jan 29 23:22:59.265403 2026] [:error] [pid 20519:tid 20566] [client 54.37.252.212:36300] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aXt7Uwo4s4fyROrkyRkM3gAAAZI"]
[Thu Jan 29 23:23:01.726204 2026] [:error] [pid 39863:tid 39874] [client 54.37.252.212:36316] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aXt7VbsHJJGGu8set58gSAAAAUg"]
[Thu Jan 29 23:23:05.009243 2026] [:error] [pid 20580:tid 20687] [client 54.37.252.212:36320] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXt7WZCZ5HHdXPmeL59ZSAAAApM"]
[Thu Jan 29 23:23:07.361102 2026] [:error] [pid 20576:tid 20598] [client 54.37.252.212:42308] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aXt7WyrDZws_FlQGi9eS7wAAAcw"]
[Thu Jan 29 23:23:10.346247 2026] [:error] [pid 39863:tid 39869] [client 54.37.252.212:42316] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aXt7XrsHJJGGu8set58gUgAAAUM"]
[Thu Jan 29 23:23:12.969250 2026] [:error] [pid 19071:tid 19135] [client 54.37.252.212:42320] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aXt7YJfa8Ix5wWmtmJyznQAAAII"]
[Thu Jan 29 23:23:15.589420 2026] [:error] [pid 20486:tid 20512] [client 54.37.252.212:42322] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aXt7Y3gqSZb6GBx5nnMiHgAAARc"]
[Thu Jan 29 23:30:40.333767 2026] [:error] [pid 20579:tid 20641] [client 95.217.109.26:5970] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aXt9IDVXNopcNyjJc9U89QAAAkA"]
[Thu Jan 29 23:30:43.040951 2026] [:error] [pid 20578:tid 20622] [client 95.217.109.26:5972] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXt9Iw6UX7yOMwQFiydWWgAAAgk"]
[Fri Jan 30 00:12:08.297438 2026] [:error] [pid 39503:tid 39575] [client 43.166.238.12:56942] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXuG2DzoHqvQcupFdnbaxgAAAQw"]
[Fri Jan 30 00:55:10.038005 2026] [:error] [pid 39592:tid 39615] [client 144.172.112.54:43562] [client 144.172.112.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aXuQ7plnGYODSsJUyHk2ugAAANI"]
[Fri Jan 30 02:48:58.727387 2026] [:error] [pid 13765:tid 13781] [client 52.175.57.167:65179] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "aXurmrU6eEFCVbA7WHS_OgAAAY4"]
[Fri Jan 30 02:48:59.023352 2026] [:error] [pid 39592:tid 39605] [client 52.175.57.167:65212] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "aXurm5lnGYODSsJUyHldRAAAAMg"]
[Fri Jan 30 02:48:59.321623 2026] [:error] [pid 13765:tid 13774] [client 52.175.57.167:65228] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "aXurm7U6eEFCVbA7WHS_OwAAAYc"]
[Fri Jan 30 02:48:59.616271 2026] [:error] [pid 39502:tid 39546] [client 52.175.57.167:65176] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "aXurmwCUcXwXieepEYgKWAAAAIo"]
[Fri Jan 30 02:48:59.965562 2026] [:error] [pid 39503:tid 39576] [client 52.175.57.167:65210] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "aXurmzzoHqvQcupFdnYNMwAAAQ0"]
[Fri Jan 30 02:49:00.703563 2026] [:error] [pid 39502:tid 39557] [client 52.175.57.167:65218] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "aXurnACUcXwXieepEYgKWQAAAJU"]
[Fri Jan 30 02:49:01.115259 2026] [:error] [pid 26945:tid 26978] [client 52.175.57.167:10882] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "aXurnQW-EMYAck0PyR4xpAAAAlU"]
[Fri Jan 30 02:49:01.446744 2026] [:error] [pid 26945:tid 26956] [client 52.175.57.167:65209] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "aXurnQW-EMYAck0PyR4xpgAAAkA"]
[Fri Jan 30 02:49:01.784279 2026] [:error] [pid 26945:tid 26979] [client 52.175.57.167:65248] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ph33w.php"] [unique_id "aXurnQW-EMYAck0PyR4xpwAAAlY"]
[Fri Jan 30 02:49:02.138167 2026] [:error] [pid 13765:tid 13788] [client 52.175.57.167:64850] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ph33w.php"] [unique_id "aXurnrU6eEFCVbA7WHS_QQAAAZU"]
[Fri Jan 30 02:49:02.478078 2026] [:error] [pid 13765:tid 13778] [client 52.175.57.167:10915] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ph33w.php"] [unique_id "aXurnrU6eEFCVbA7WHS_QgAAAYs"]
[Fri Jan 30 02:49:02.776344 2026] [:error] [pid 13765:tid 13770] [client 52.175.57.167:10918] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ph33w.php"] [unique_id "aXurnrU6eEFCVbA7WHS_RAAAAYM"]
[Fri Jan 30 02:49:03.040465 2026] [:error] [pid 13797:tid 13816] [client 52.175.57.167:65198] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aXurn0Zz78bylh5pU4SKAQAAAdE"]
[Fri Jan 30 02:49:03.367818 2026] [:error] [pid 39501:tid 39521] [client 52.175.57.167:65206] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aXurny_BLgXFo3daaZjbwAAAAAw"]
[Fri Jan 30 02:49:03.641296 2026] [:error] [pid 26945:tid 26974] [client 52.175.57.167:10932] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aXurnwW-EMYAck0PyR4xqwAAAlE"]
[Fri Jan 30 02:49:03.960422 2026] [:error] [pid 39783:tid 39787] [client 52.175.57.167:65181] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aXurn651RNfzhKG5ppPeOwAAAEI"]
[Fri Jan 30 02:49:04.375944 2026] [:error] [pid 13765:tid 13775] [client 52.175.57.167:64867] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/it.php"] [unique_id "aXuroLU6eEFCVbA7WHS_TgAAAYg"]
[Fri Jan 30 02:49:04.742139 2026] [:error] [pid 26945:tid 26973] [client 52.175.57.167:65187] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/it.php"] [unique_id "aXuroAW-EMYAck0PyR4xsAAAAlA"]
[Fri Jan 30 02:49:05.108103 2026] [:error] [pid 13797:tid 13799] [client 52.175.57.167:65230] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/it.php"] [unique_id "aXuroUZz78bylh5pU4SKAgAAAcA"]
[Fri Jan 30 02:49:05.534772 2026] [:error] [pid 39503:tid 39574] [client 52.175.57.167:64847] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/it.php"] [unique_id "aXuroTzoHqvQcupFdnYNNgAAAQs"]
[Fri Jan 30 02:49:05.803736 2026] [:error] [pid 13765:tid 13779] [client 52.175.57.167:10916] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wwx.php"] [unique_id "aXurobU6eEFCVbA7WHS_VgAAAYw"]
[Fri Jan 30 02:49:06.383323 2026] [:error] [pid 39813:tid 39831] [client 52.175.57.167:64877] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wwx.php"] [unique_id "aXurot_AaZSBkqpNK00HQAAAAVA"]
[Fri Jan 30 02:49:06.761807 2026] [:error] [pid 39813:tid 39821] [client 52.175.57.167:10890] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wwx.php"] [unique_id "aXurot_AaZSBkqpNK00HQgAAAUY"]
[Fri Jan 30 02:49:07.041141 2026] [:error] [pid 13765:tid 13767] [client 52.175.57.167:65255] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wwx.php"] [unique_id "aXuro7U6eEFCVbA7WHS_XwAAAYA"]
[Fri Jan 30 02:49:07.389184 2026] [:error] [pid 39813:tid 39829] [client 52.175.57.167:65235] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aXuro9_AaZSBkqpNK00HQwAAAU4"]
[Fri Jan 30 02:49:07.715455 2026] [:error] [pid 13828:tid 13833] [client 52.175.57.167:65159] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aXuro-g30BgRfEx7ROHphQAAAgM"]
[Fri Jan 30 02:49:08.031668 2026] [:error] [pid 39813:tid 39830] [client 52.175.57.167:64843] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aXurpN_AaZSBkqpNK00HRAAAAU8"]
[Fri Jan 30 02:49:08.350649 2026] [:error] [pid 13828:tid 13843] [client 52.175.57.167:64848] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aXurpOg30BgRfEx7ROHphwAAAg0"]
[Fri Jan 30 02:49:08.621813 2026] [:error] [pid 39783:tid 39794] [client 52.175.57.167:10928] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/413.php"] [unique_id "aXurpK51RNfzhKG5ppPePgAAAEk"]
[Fri Jan 30 02:49:09.109967 2026] [:error] [pid 39783:tid 39793] [client 52.175.57.167:65183] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/413.php"] [unique_id "aXurpa51RNfzhKG5ppPePwAAAEg"]
[Fri Jan 30 02:49:09.447449 2026] [:error] [pid 39503:tid 39569] [client 52.175.57.167:64859] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/413.php"] [unique_id "aXurpTzoHqvQcupFdnYNPQAAAQY"]
[Fri Jan 30 02:49:09.809956 2026] [:error] [pid 13765:tid 13775] [client 52.175.57.167:10910] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/413.php"] [unique_id "aXurpbU6eEFCVbA7WHS_bAAAAYg"]
[Fri Jan 30 02:49:10.215254 2026] [:error] [pid 13765:tid 13771] [client 52.175.57.167:65227] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1a.php"] [unique_id "aXurprU6eEFCVbA7WHS_bwAAAYQ"]
[Fri Jan 30 02:49:10.479285 2026] [:error] [pid 13765:tid 13780] [client 52.175.57.167:64777] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1a.php"] [unique_id "aXurprU6eEFCVbA7WHS_cQAAAY0"]
[Fri Jan 30 02:49:10.850804 2026] [:error] [pid 13765:tid 13779] [client 52.175.57.167:65207] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1a.php"] [unique_id "aXurprU6eEFCVbA7WHS_cwAAAYw"]
[Fri Jan 30 02:49:11.288893 2026] [:error] [pid 39783:tid 39801] [client 52.175.57.167:10904] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1a.php"] [unique_id "aXurp651RNfzhKG5ppPeQAAAAFA"]
[Fri Jan 30 02:49:11.685137 2026] [:error] [pid 13765:tid 13767] [client 52.175.57.167:10920] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z9v.php"] [unique_id "aXurp7U6eEFCVbA7WHS_eAAAAYA"]
[Fri Jan 30 02:49:12.040292 2026] [:error] [pid 39503:tid 39568] [client 52.175.57.167:64856] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z9v.php"] [unique_id "aXurqDzoHqvQcupFdnYNQQAAAQU"]
[Fri Jan 30 02:49:12.440698 2026] [:error] [pid 39501:tid 39510] [client 52.175.57.167:10889] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z9v.php"] [unique_id "aXurqC_BLgXFo3daaZjbyAAAAAE"]
[Fri Jan 30 02:49:12.791866 2026] [:error] [pid 39813:tid 39832] [client 52.175.57.167:64865] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z9v.php"] [unique_id "aXurqN_AaZSBkqpNK00HRgAAAVE"]
[Fri Jan 30 02:49:13.075528 2026] [:error] [pid 39502:tid 39558] [client 52.175.57.167:64791] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aXurqQCUcXwXieepEYgKYgAAAJY"]
[Fri Jan 30 02:49:13.448459 2026] [:error] [pid 26945:tid 26965] [client 52.175.57.167:65160] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aXurqQW-EMYAck0PyR4xsgAAAkg"]
[Fri Jan 30 02:49:13.703058 2026] [:error] [pid 39502:tid 39551] [client 52.175.57.167:65217] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aXurqQCUcXwXieepEYgKZgAAAI8"]
[Fri Jan 30 02:49:13.976935 2026] [:error] [pid 13765:tid 13784] [client 52.175.57.167:64833] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aXurqbU6eEFCVbA7WHS_fwAAAZE"]
[Fri Jan 30 02:49:14.298048 2026] [:error] [pid 39503:tid 39579] [client 52.175.57.167:10907] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aXurqjzoHqvQcupFdnYNRwAAARA"]
[Fri Jan 30 02:49:14.594432 2026] [:error] [pid 39503:tid 39578] [client 52.175.57.167:65178] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aXurqjzoHqvQcupFdnYNSAAAAQ8"]
[Fri Jan 30 02:49:14.877520 2026] [:error] [pid 39502:tid 39554] [client 52.175.57.167:65240] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aXurqgCUcXwXieepEYgKcQAAAJI"]
[Fri Jan 30 02:49:15.147379 2026] [:error] [pid 39783:tid 39802] [client 52.175.57.167:10893] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aXurq651RNfzhKG5ppPeQQAAAFE"]
[Fri Jan 30 02:49:15.435928 2026] [:error] [pid 39783:tid 39808] [client 52.175.57.167:65271] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "aXurq651RNfzhKG5ppPeQgAAAFc"]
[Fri Jan 30 02:49:15.734107 2026] [:error] [pid 39783:tid 39791] [client 52.175.57.167:65274] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "aXurq651RNfzhKG5ppPeQwAAAEY"]
[Fri Jan 30 02:49:16.023287 2026] [:error] [pid 39592:tid 39618] [client 52.175.57.167:10900] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "aXurrJlnGYODSsJUyHldSgAAANU"]
[Fri Jan 30 02:49:16.412133 2026] [:error] [pid 13828:tid 13837] [client 52.175.57.167:64886] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "aXurrOg30BgRfEx7ROHpkAAAAgc"]
[Fri Jan 30 02:49:16.699041 2026] [:error] [pid 26945:tid 26977] [client 52.175.57.167:10922] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad5.php"] [unique_id "aXurrAW-EMYAck0PyR4xtwAAAlQ"]
[Fri Jan 30 02:49:16.972698 2026] [:error] [pid 26945:tid 26961] [client 52.175.57.167:10919] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad5.php"] [unique_id "aXurrAW-EMYAck0PyR4xuAAAAkQ"]
[Fri Jan 30 02:49:17.287507 2026] [:error] [pid 13765:tid 13768] [client 52.175.57.167:64882] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad5.php"] [unique_id "aXurrbU6eEFCVbA7WHS_gAAAAYE"]
[Fri Jan 30 02:49:17.539101 2026] [:error] [pid 39503:tid 39587] [client 52.175.57.167:65184] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad5.php"] [unique_id "aXurrTzoHqvQcupFdnYNTQAAARg"]
[Fri Jan 30 02:49:17.816603 2026] [:error] [pid 13765:tid 13780] [client 52.175.57.167:64372] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvde.php"] [unique_id "aXurrbU6eEFCVbA7WHS_gwAAAY0"]
[Fri Jan 30 02:49:18.259356 2026] [:error] [pid 39503:tid 39575] [client 52.175.57.167:10914] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvde.php"] [unique_id "aXurrjzoHqvQcupFdnYNUQAAAQw"]
[Fri Jan 30 02:49:18.553903 2026] [:error] [pid 13765:tid 13782] [client 52.175.57.167:64870] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvde.php"] [unique_id "aXurrrU6eEFCVbA7WHS_hAAAAY8"]
[Fri Jan 30 02:49:18.838189 2026] [:error] [pid 39783:tid 39790] [client 52.175.57.167:64883] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvde.php"] [unique_id "aXurrq51RNfzhKG5ppPeSQAAAEU"]
[Fri Jan 30 02:49:19.203535 2026] [:error] [pid 39813:tid 39825] [client 52.175.57.167:64349] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/shell.php"] [unique_id "aXurr9_AaZSBkqpNK00HWQAAAUo"]
[Fri Jan 30 02:49:19.547992 2026] [:error] [pid 13797:tid 13812] [client 52.175.57.167:65156] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/shell.php"] [unique_id "aXurr0Zz78bylh5pU4SKBgAAAc0"]
[Fri Jan 30 02:49:19.878163 2026] [:error] [pid 39813:tid 39834] [client 52.175.57.167:65273] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/shell.php"] [unique_id "aXurr9_AaZSBkqpNK00HXwAAAVM"]
[Fri Jan 30 02:49:20.202659 2026] [:error] [pid 39813:tid 39836] [client 52.175.57.167:65177] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/shell.php"] [unique_id "aXursN_AaZSBkqpNK00HYgAAAVU"]
[Fri Jan 30 02:49:20.681412 2026] [:error] [pid 39783:tid 39787] [client 52.175.57.167:64861] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f355.php"] [unique_id "aXursK51RNfzhKG5ppPeSwAAAEI"]
[Fri Jan 30 02:49:21.007862 2026] [:error] [pid 39501:tid 39532] [client 52.175.57.167:65236] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f355.php"] [unique_id "aXursS_BLgXFo3daaZjb0QAAABc"]
[Fri Jan 30 02:49:21.332465 2026] [:error] [pid 39502:tid 39544] [client 52.175.57.167:65199] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f355.php"] [unique_id "aXursQCUcXwXieepEYgKdQAAAIg"]
[Fri Jan 30 02:49:21.741195 2026] [:error] [pid 39503:tid 39566] [client 52.175.57.167:65162] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f355.php"] [unique_id "aXursTzoHqvQcupFdnYNVwAAAQM"]
[Fri Jan 30 02:49:22.007864 2026] [:error] [pid 39783:tid 39788] [client 52.175.57.167:64347] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aXursq51RNfzhKG5ppPeTgAAAEM"]
[Fri Jan 30 02:49:22.285617 2026] [:error] [pid 39501:tid 39517] [client 52.175.57.167:64868] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aXursi_BLgXFo3daaZjb1QAAAAg"]
[Fri Jan 30 02:49:22.546862 2026] [:error] [pid 39501:tid 39518] [client 52.175.57.167:65226] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aXursi_BLgXFo3daaZjb1gAAAAk"]
[Fri Jan 30 02:49:22.855317 2026] [:error] [pid 26945:tid 26967] [client 52.175.57.167:64853] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aXursgW-EMYAck0PyR4xuwAAAko"]
[Fri Jan 30 02:49:23.163895 2026] [:error] [pid 39501:tid 39529] [client 52.175.57.167:64866] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mt.php"] [unique_id "aXursy_BLgXFo3daaZjb2QAAABQ"]
[Fri Jan 30 02:49:23.481836 2026] [:error] [pid 39501:tid 39519] [client 52.175.57.167:65221] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mt.php"] [unique_id "aXursy_BLgXFo3daaZjb2wAAAAo"]
[Fri Jan 30 02:49:23.762360 2026] [:error] [pid 39502:tid 39552] [client 52.175.57.167:64871] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mt.php"] [unique_id "aXurswCUcXwXieepEYgKewAAAJA"]
[Fri Jan 30 02:49:24.002222 2026] [:error] [pid 39783:tid 39794] [client 52.175.57.167:65173] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mt.php"] [unique_id "aXurtK51RNfzhKG5ppPeUAAAAEk"]
[Fri Jan 30 02:49:24.568147 2026] [:error] [pid 39501:tid 39511] [client 52.175.57.167:65171] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aXurtC_BLgXFo3daaZjb3wAAAAI"]
[Fri Jan 30 02:49:24.815565 2026] [:error] [pid 39502:tid 39546] [client 52.175.57.167:65161] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aXurtACUcXwXieepEYgKfgAAAIo"]
[Fri Jan 30 02:49:25.066587 2026] [:error] [pid 39813:tid 39817] [client 52.175.57.167:65222] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aXurtd_AaZSBkqpNK00HcwAAAUI"]
[Fri Jan 30 02:49:25.358898 2026] [:error] [pid 39592:tid 39614] [client 52.175.57.167:64836] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aXurtZlnGYODSsJUyHldUQAAANE"]
[Fri Jan 30 02:49:25.659514 2026] [:error] [pid 39502:tid 39539] [client 52.175.57.167:64789] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3r.php"] [unique_id "aXurtQCUcXwXieepEYgKgAAAAIM"]
[Fri Jan 30 02:49:25.930243 2026] [:error] [pid 39783:tid 39802] [client 52.175.57.167:64876] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3r.php"] [unique_id "aXurta51RNfzhKG5ppPeUwAAAFE"]
[Fri Jan 30 02:49:26.206500 2026] [:error] [pid 39502:tid 39541] [client 52.175.57.167:64855] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3r.php"] [unique_id "aXurtgCUcXwXieepEYgKgQAAAIU"]
[Fri Jan 30 02:49:26.444229 2026] [:error] [pid 13765:tid 13788] [client 52.175.57.167:65239] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3r.php"] [unique_id "aXurtrU6eEFCVbA7WHS_iwAAAZU"]
[Fri Jan 30 02:49:26.689249 2026] [:error] [pid 39502:tid 39549] [client 52.175.57.167:65191] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aXurtgCUcXwXieepEYgKggAAAI0"]
[Fri Jan 30 02:49:26.935022 2026] [:error] [pid 39503:tid 39583] [client 52.175.57.167:65165] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aXurtjzoHqvQcupFdnYNXAAAARQ"]
[Fri Jan 30 02:49:27.191645 2026] [:error] [pid 39501:tid 39521] [client 52.175.57.167:64858] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aXurty_BLgXFo3daaZjb4wAAAAw"]
[Fri Jan 30 02:49:27.473315 2026] [:error] [pid 39592:tid 39619] [client 52.175.57.167:64854] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aXurt5lnGYODSsJUyHldUwAAANY"]
[Fri Jan 30 02:49:27.779134 2026] [:error] [pid 39502:tid 39543] [client 52.175.57.167:64864] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aXurtwCUcXwXieepEYgKhgAAAIc"]
[Fri Jan 30 02:49:28.057155 2026] [:error] [pid 39503:tid 39578] [client 52.175.57.167:10942] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aXuruDzoHqvQcupFdnYNYQAAAQ8"]
[Fri Jan 30 02:49:28.333846 2026] [:error] [pid 13765:tid 13786] [client 52.175.57.167:65231] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aXuruLU6eEFCVbA7WHS_jwAAAZM"]
[Fri Jan 30 02:49:28.590851 2026] [:error] [pid 13765:tid 13787] [client 52.175.57.167:10934] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aXuruLU6eEFCVbA7WHS_kAAAAZQ"]
[Fri Jan 30 02:49:28.873234 2026] [:error] [pid 13765:tid 13778] [client 52.175.57.167:65279] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aXuruLU6eEFCVbA7WHS_kQAAAYs"]
[Fri Jan 30 02:49:29.178924 2026] [:error] [pid 13797:tid 13817] [client 52.175.57.167:65170] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aXuruUZz78bylh5pU4SKDwAAAdI"]
[Fri Jan 30 02:49:29.461842 2026] [:error] [pid 13765:tid 13783] [client 52.175.57.167:63961] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aXurubU6eEFCVbA7WHS_lAAAAZA"]
[Fri Jan 30 02:49:29.737631 2026] [:error] [pid 39813:tid 39837] [client 52.175.57.167:64839] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aXurud_AaZSBkqpNK00HfwAAAVY"]
[Fri Jan 30 02:49:29.992205 2026] [:error] [pid 13765:tid 13769] [client 52.175.57.167:64328] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aXurubU6eEFCVbA7WHS_lwAAAYI"]
[Fri Jan 30 02:49:30.271879 2026] [:error] [pid 13765:tid 13767] [client 52.175.57.167:64862] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aXururU6eEFCVbA7WHS_mAAAAYA"]
[Fri Jan 30 02:49:30.536458 2026] [:error] [pid 13765:tid 13772] [client 52.175.57.167:65185] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aXururU6eEFCVbA7WHS_mwAAAYU"]
[Fri Jan 30 02:49:30.791730 2026] [:error] [pid 13828:tid 13849] [client 52.175.57.167:64343] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aXuruug30BgRfEx7ROHplQAAAhM"]
[Fri Jan 30 02:49:31.060426 2026] [:error] [pid 39503:tid 39587] [client 52.175.57.167:65202] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXuruzzoHqvQcupFdnYNZAAAARg"]
[Fri Jan 30 02:49:31.326529 2026] [:error] [pid 39783:tid 39806] [client 52.175.57.167:10941] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXuru651RNfzhKG5ppPeVgAAAFU"]
[Fri Jan 30 02:49:31.657830 2026] [:error] [pid 39813:tid 39827] [client 52.175.57.167:64794] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXuru9_AaZSBkqpNK00HggAAAUw"]
[Fri Jan 30 02:49:31.912226 2026] [:error] [pid 39501:tid 39519] [client 52.175.57.167:64881] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXuruy_BLgXFo3daaZjb6gAAAAo"]
[Fri Jan 30 02:49:32.175842 2026] [:error] [pid 39503:tid 39576] [client 52.175.57.167:10921] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXurvDzoHqvQcupFdnYNZQAAAQ0"]
[Fri Jan 30 02:49:32.415506 2026] [:error] [pid 39503:tid 39577] [client 52.175.57.167:63944] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXurvDzoHqvQcupFdnYNZgAAAQ4"]
[Fri Jan 30 02:49:32.672180 2026] [:error] [pid 39503:tid 39563] [client 52.175.57.167:64827] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXurvDzoHqvQcupFdnYNZwAAAQA"]
[Fri Jan 30 02:49:32.920085 2026] [:error] [pid 39783:tid 39798] [client 52.175.57.167:10926] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXurvK51RNfzhKG5ppPeWAAAAE0"]
[Fri Jan 30 02:49:33.196492 2026] [:error] [pid 13765:tid 13787] [client 52.175.57.167:65252] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aXurvbU6eEFCVbA7WHS_ogAAAZQ"]
[Fri Jan 30 02:49:33.445775 2026] [:error] [pid 13765:tid 13779] [client 52.175.57.167:10906] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aXurvbU6eEFCVbA7WHS_owAAAYw"]
[Fri Jan 30 02:49:33.701150 2026] [:error] [pid 26945:tid 26973] [client 52.175.57.167:65195] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aXurvQW-EMYAck0PyR4xxAAAAlA"]
[Fri Jan 30 02:49:33.984247 2026] [:error] [pid 39502:tid 39556] [client 52.175.57.167:65220] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aXurvQCUcXwXieepEYgKiwAAAJQ"]
[Fri Jan 30 02:49:34.298229 2026] [:error] [pid 13797:tid 13819] [client 52.175.57.167:65229] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aXurvkZz78bylh5pU4SKFQAAAdQ"]
[Fri Jan 30 02:49:34.557186 2026] [:error] [pid 39503:tid 39570] [client 52.175.57.167:10939] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aXurvjzoHqvQcupFdnYNagAAAQc"]
[Fri Jan 30 02:49:34.819160 2026] [:error] [pid 39592:tid 39620] [client 52.175.57.167:10935] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aXurvplnGYODSsJUyHldWgAAANc"]
[Fri Jan 30 02:49:35.059082 2026] [:error] [pid 13765:tid 13767] [client 52.175.57.167:64878] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aXurv7U6eEFCVbA7WHS_pwAAAYA"]
[Fri Jan 30 02:49:35.423039 2026] [:error] [pid 39503:tid 39571] [client 52.175.57.167:64313] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php/admin.php"] [unique_id "aXurvzzoHqvQcupFdnYNawAAAQg"]
[Fri Jan 30 02:49:35.749372 2026] [:error] [pid 13797:tid 13799] [client 52.175.57.167:64875] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php/admin.php"] [unique_id "aXurv0Zz78bylh5pU4SKGAAAAcA"]
[Fri Jan 30 02:49:36.014312 2026] [:error] [pid 39501:tid 39532] [client 52.175.57.167:64372] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php/admin.php"] [unique_id "aXurwC_BLgXFo3daaZjb7QAAABc"]
[Fri Jan 30 02:49:36.293894 2026] [:error] [pid 13765:tid 13775] [client 52.175.57.167:65163] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php/admin.php"] [unique_id "aXurwLU6eEFCVbA7WHS_qgAAAYg"]
[Fri Jan 30 02:49:36.530878 2026] [:error] [pid 13765:tid 13788] [client 52.175.57.167:63528] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aXurwLU6eEFCVbA7WHS_rAAAAZU"]
[Fri Jan 30 02:49:36.769753 2026] [:error] [pid 13828:tid 13850] [client 52.175.57.167:10902] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aXurwOg30BgRfEx7ROHpmAAAAhQ"]
[Fri Jan 30 02:49:37.020843 2026] [:error] [pid 39503:tid 39572] [client 52.175.57.167:10895] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aXurwTzoHqvQcupFdnYNbQAAAQk"]
[Fri Jan 30 02:49:37.302558 2026] [:error] [pid 13765:tid 13778] [client 52.175.57.167:64844] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aXurwbU6eEFCVbA7WHS_rgAAAYs"]
[Fri Jan 30 02:49:37.572714 2026] [:error] [pid 13765:tid 13780] [client 52.175.57.167:64879] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aXurwbU6eEFCVbA7WHS_sAAAAY0"]
[Fri Jan 30 02:49:37.898331 2026] [:error] [pid 13828:tid 13851] [client 52.175.57.167:63953] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aXurweg30BgRfEx7ROHpmwAAAhU"]
[Fri Jan 30 02:49:38.230950 2026] [:error] [pid 39503:tid 39585] [client 52.175.57.167:10897] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aXurwjzoHqvQcupFdnYNbgAAARY"]
[Fri Jan 30 02:49:38.533538 2026] [:error] [pid 13765:tid 13769] [client 52.175.57.167:65168] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aXurwrU6eEFCVbA7WHS_sQAAAYI"]
[Fri Jan 30 02:49:38.808940 2026] [:error] [pid 13797:tid 13817] [client 52.175.57.167:64802] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXurwkZz78bylh5pU4SKHAAAAdI"]
[Fri Jan 30 02:49:39.058511 2026] [:error] [pid 26945:tid 26967] [client 52.175.57.167:64851] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXurwwW-EMYAck0PyR4xxwAAAko"]
[Fri Jan 30 02:49:39.326818 2026] [:error] [pid 13828:tid 13841] [client 52.175.57.167:64822] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXurw-g30BgRfEx7ROHpnQAAAgs"]
[Fri Jan 30 02:49:39.577934 2026] [:error] [pid 39503:tid 39565] [client 52.175.57.167:65243] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aXurwzzoHqvQcupFdnYNbwAAAQI"]
[Fri Jan 30 02:49:39.847253 2026] [:error] [pid 13797:tid 13814] [client 52.175.57.167:64776] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aXurw0Zz78bylh5pU4SKHgAAAc8"]
[Fri Jan 30 02:49:40.183370 2026] [:error] [pid 39783:tid 39794] [client 52.175.57.167:64257] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aXurxK51RNfzhKG5ppPeXAAAAEk"]
[Fri Jan 30 02:49:40.448752 2026] [:error] [pid 13828:tid 13836] [client 52.175.57.167:64889] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aXurxOg30BgRfEx7ROHpngAAAgY"]
[Fri Jan 30 02:49:40.697070 2026] [:error] [pid 39813:tid 39839] [client 52.175.57.167:65189] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aXurxN_AaZSBkqpNK00HhwAAAVg"]
[Fri Jan 30 02:49:41.169099 2026] [:error] [pid 39813:tid 39822] [client 52.175.57.167:10931] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss1.php"] [unique_id "aXurxd_AaZSBkqpNK00HiQAAAUc"]
[Fri Jan 30 02:49:41.421279 2026] [:error] [pid 39783:tid 39802] [client 52.175.57.167:65208] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss1.php"] [unique_id "aXurxa51RNfzhKG5ppPeXgAAAFE"]
[Fri Jan 30 02:49:41.760557 2026] [:error] [pid 39813:tid 39827] [client 52.175.57.167:65223] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss1.php"] [unique_id "aXurxd_AaZSBkqpNK00HiwAAAUw"]
[Fri Jan 30 02:49:42.093953 2026] [:error] [pid 39813:tid 39838] [client 52.175.57.167:64379] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss1.php"] [unique_id "aXurxt_AaZSBkqpNK00HjAAAAVc"]
[Fri Jan 30 02:49:42.356422 2026] [:error] [pid 13765:tid 13770] [client 52.175.57.167:10880] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aXurxrU6eEFCVbA7WHS_tgAAAYM"]
[Fri Jan 30 02:49:42.649261 2026] [:error] [pid 39592:tid 39614] [client 52.175.57.167:64837] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aXurxplnGYODSsJUyHldXQAAANE"]
[Fri Jan 30 02:49:42.952901 2026] [:error] [pid 13797:tid 13818] [client 52.175.57.167:10912] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aXurxkZz78bylh5pU4SKHwAAAdM"]
[Fri Jan 30 02:49:43.368098 2026] [:error] [pid 39813:tid 39815] [client 52.175.57.167:63959] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aXurx9_AaZSBkqpNK00HjwAAAUA"]
[Fri Jan 30 02:49:43.676758 2026] [:error] [pid 13797:tid 13801] [client 52.175.57.167:65262] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aXurx0Zz78bylh5pU4SKIQAAAcI"]
[Fri Jan 30 02:49:43.953429 2026] [:error] [pid 39592:tid 39611] [client 52.175.57.167:65188] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aXurx5lnGYODSsJUyHldYAAAAM4"]
[Fri Jan 30 02:49:44.323655 2026] [:error] [pid 26945:tid 26969] [client 52.175.57.167:64768] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aXuryAW-EMYAck0PyR4xyQAAAkw"]
[Fri Jan 30 02:49:44.614119 2026] [:error] [pid 13797:tid 13822] [client 52.175.57.167:63968] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aXuryEZz78bylh5pU4SKJwAAAdc"]
[Fri Jan 30 02:49:44.916351 2026] [:error] [pid 39813:tid 39829] [client 52.175.57.167:64280] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aXuryN_AaZSBkqpNK00HkQAAAU4"]
[Fri Jan 30 02:49:45.239110 2026] [:error] [pid 39813:tid 39832] [client 52.175.57.167:64795] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aXuryd_AaZSBkqpNK00HkgAAAVE"]
[Fri Jan 30 02:49:45.551477 2026] [:error] [pid 13765:tid 13773] [client 52.175.57.167:10927] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aXurybU6eEFCVbA7WHS_vQAAAYY"]
[Fri Jan 30 02:49:45.902197 2026] [:error] [pid 39783:tid 39798] [client 52.175.57.167:64860] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aXurya51RNfzhKG5ppPeZAAAAE0"]
[Fri Jan 30 02:49:46.198971 2026] [:error] [pid 13765:tid 13790] [client 52.175.57.167:65269] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aXuryrU6eEFCVbA7WHS_wAAAAZc"]
[Fri Jan 30 02:49:46.570463 2026] [:error] [pid 13828:tid 13846] [client 52.175.57.167:64892] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aXuryug30BgRfEx7ROHppAAAAhA"]
[Fri Jan 30 02:49:46.910693 2026] [:error] [pid 13828:tid 13851] [client 52.175.57.167:10884] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aXuryug30BgRfEx7ROHppgAAAhU"]
[Fri Jan 30 02:49:47.250470 2026] [:error] [pid 39592:tid 39610] [client 52.175.57.167:65196] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aXury5lnGYODSsJUyHldbAAAAM0"]
[Fri Jan 30 02:49:47.555642 2026] [:error] [pid 13797:tid 13803] [client 52.175.57.167:64353] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/"] [unique_id "aXury0Zz78bylh5pU4SKNgAAAcQ"]
[Fri Jan 30 02:49:47.855780 2026] [:error] [pid 26945:tid 26980] [client 52.175.57.167:64869] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/"] [unique_id "aXurywW-EMYAck0PyR4xzAAAAlc"]
[Fri Jan 30 02:49:48.180480 2026] [:error] [pid 13797:tid 13819] [client 52.175.57.167:65247] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/"] [unique_id "aXurzEZz78bylh5pU4SKOAAAAdQ"]
[Fri Jan 30 02:49:48.546798 2026] [:error] [pid 26945:tid 26966] [client 52.175.57.167:64821] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/"] [unique_id "aXurzAW-EMYAck0PyR4xzgAAAkk"]
[Fri Jan 30 02:49:48.946752 2026] [:error] [pid 13828:tid 13837] [client 52.175.57.167:65238] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aXurzOg30BgRfEx7ROHpqQAAAgc"]
[Fri Jan 30 02:49:49.230896 2026] [:error] [pid 39813:tid 39836] [client 52.175.57.167:64373] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aXurzd_AaZSBkqpNK00HmwAAAVU"]
[Fri Jan 30 02:49:49.509609 2026] [:error] [pid 13828:tid 13842] [client 52.175.57.167:64873] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aXurzeg30BgRfEx7ROHpqgAAAgw"]
[Fri Jan 30 02:49:49.908447 2026] [:error] [pid 39501:tid 39531] [client 52.175.57.167:64891] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aXurzS_BLgXFo3daaZjb_QAAABY"]
[Fri Jan 30 02:49:50.192524 2026] [:error] [pid 13828:tid 13841] [client 52.175.57.167:64840] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aXurzug30BgRfEx7ROHprAAAAgs"]
[Fri Jan 30 02:49:50.524594 2026] [:error] [pid 39501:tid 39524] [client 52.175.57.167:64359] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aXurzi_BLgXFo3daaZjcAAAAAA8"]
[Fri Jan 30 02:49:51.003232 2026] [:error] [pid 39813:tid 39818] [client 52.175.57.167:64809] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aXurz9_AaZSBkqpNK00HngAAAUM"]
[Fri Jan 30 02:49:51.522098 2026] [:error] [pid 39502:tid 39545] [client 52.175.57.167:63938] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aXurzwCUcXwXieepEYgKjgAAAIk"]
[Fri Jan 30 02:49:51.890443 2026] [:error] [pid 39501:tid 39527] [client 52.175.57.167:64370] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aXurzy_BLgXFo3daaZjcBQAAABI"]
[Fri Jan 30 02:49:52.344677 2026] [:error] [pid 13828:tid 13843] [client 52.175.57.167:64799] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aXur0Og30BgRfEx7ROHprQAAAg0"]
[Fri Jan 30 02:49:52.775955 2026] [:error] [pid 13797:tid 13815] [client 52.175.57.167:64835] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aXur0EZz78bylh5pU4SKPQAAAdA"]
[Fri Jan 30 02:49:53.186761 2026] [:error] [pid 39783:tid 39807] [client 52.175.57.167:65167] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aXur0a51RNfzhKG5ppPebAAAAFY"]
[Fri Jan 30 02:49:53.922013 2026] [:error] [pid 13828:tid 13834] [client 52.175.57.167:64381] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aXur0eg30BgRfEx7ROHpsQAAAgQ"]
[Fri Jan 30 02:49:54.362486 2026] [:error] [pid 39813:tid 39815] [client 52.175.57.167:10908] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aXur0t_AaZSBkqpNK00HpgAAAUA"]
[Fri Jan 30 02:49:55.068933 2026] [:error] [pid 39813:tid 39833] [client 52.175.57.167:64350] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aXur09_AaZSBkqpNK00HqgAAAVI"]
[Fri Jan 30 02:49:55.549358 2026] [:error] [pid 39813:tid 39837] [client 52.175.57.167:64830] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aXur09_AaZSBkqpNK00HrgAAAVY"]
[Fri Jan 30 02:49:55.944332 2026] [:error] [pid 39813:tid 39827] [client 52.175.57.167:64838] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXur09_AaZSBkqpNK00HsAAAAUw"]
[Fri Jan 30 02:49:56.371741 2026] [:error] [pid 39503:tid 39587] [client 52.175.57.167:63977] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXur1DzoHqvQcupFdnYNfQAAARg"]
[Fri Jan 30 02:49:56.772201 2026] [:error] [pid 13797:tid 13808] [client 52.175.57.167:64334] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXur1EZz78bylh5pU4SKQQAAAck"]
[Fri Jan 30 02:49:57.176631 2026] [autoindex:error] [pid 39501:tid 39524] [client 52.175.57.167:65205] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 02:49:58.508346 2026] [autoindex:error] [pid 39501:tid 39510] [client 52.175.57.167:65205] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 02:50:13.093060 2026] [:error] [pid 39501:tid 39533] [client 52.175.57.167:65205] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aXur5S_BLgXFo3daaZjcJAAAABg"]
[Fri Jan 30 02:50:13.868397 2026] [:error] [pid 13765:tid 13778] [client 52.175.57.167:64805] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aXur5bU6eEFCVbA7WHS_3QAAAYs"]
[Fri Jan 30 02:50:14.539678 2026] [:error] [pid 39501:tid 39522] [client 52.175.57.167:64863] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aXur5i_BLgXFo3daaZjcJgAAAA0"]
[Fri Jan 30 02:50:15.503183 2026] [:error] [pid 39501:tid 39516] [client 52.175.57.167:65250] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aXur5y_BLgXFo3daaZjcKAAAAAc"]
[Fri Jan 30 02:50:15.794637 2026] [:error] [pid 39503:tid 39570] [client 52.175.57.167:64804] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aXur5zzoHqvQcupFdnYNjgAAAQc"]
[Fri Jan 30 02:50:16.191911 2026] [:error] [pid 13797:tid 13809] [client 52.175.57.167:64769] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aXur6EZz78bylh5pU4SKSgAAAco"]
[Fri Jan 30 02:50:16.537927 2026] [:error] [pid 39501:tid 39526] [client 52.175.57.167:64831] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aXur6C_BLgXFo3daaZjcKgAAABE"]
[Fri Jan 30 02:50:16.906461 2026] [:error] [pid 39501:tid 39521] [client 52.175.57.167:10931] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aXur6C_BLgXFo3daaZjcKwAAAAw"]
[Fri Jan 30 02:50:17.226242 2026] [:error] [pid 39783:tid 39801] [client 52.175.57.167:64304] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aXur6a51RNfzhKG5ppPefQAAAFA"]
[Fri Jan 30 02:50:17.674049 2026] [:error] [pid 39503:tid 39575] [client 52.175.57.167:64365] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aXur6TzoHqvQcupFdnYNkAAAAQw"]
[Fri Jan 30 02:50:18.036387 2026] [:error] [pid 26945:tid 26965] [client 52.175.57.167:10938] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aXur6gW-EMYAck0PyR4x8AAAAkg"]
[Fri Jan 30 02:50:18.545886 2026] [:error] [pid 39783:tid 39809] [client 52.175.57.167:64371] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aXur6q51RNfzhKG5ppPeggAAAFg"]
[Fri Jan 30 02:50:18.879799 2026] [:error] [pid 13828:tid 13853] [client 52.175.57.167:64783] [client 52.175.57.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aXur6ug30BgRfEx7ROHpwQAAAhc"]
[Fri Jan 30 02:50:19.328312 2026] [:error] [pid 13765:tid 13783] [client 52.175.57.167:64845] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aXur67U6eEFCVbA7WHS_4wAAAZA"]
[Fri Jan 30 02:50:19.814992 2026] [:error] [pid 39813:tid 39829] [client 52.175.57.167:65241] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aXur69_AaZSBkqpNK00HyAAAAU4"]
[Fri Jan 30 02:50:20.168024 2026] [:error] [pid 39501:tid 39518] [client 52.175.57.167:10894] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aXur7C_BLgXFo3daaZjcLgAAAAk"]
[Fri Jan 30 02:50:20.479471 2026] [:error] [pid 26945:tid 26980] [client 52.175.57.167:10909] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aXur7AW-EMYAck0PyR4x8QAAAlc"]
[Fri Jan 30 02:50:21.109814 2026] [:error] [pid 26945:tid 26961] [client 52.175.57.167:65259] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jane.php"] [unique_id "aXur7QW-EMYAck0PyR4x8gAAAkQ"]
[Fri Jan 30 02:50:21.522338 2026] [:error] [pid 13797:tid 13805] [client 52.175.57.167:64832] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jane.php"] [unique_id "aXur7UZz78bylh5pU4SKVAAAAcY"]
[Fri Jan 30 02:50:21.923406 2026] [:error] [pid 39783:tid 39798] [client 52.175.57.167:65153] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jane.php"] [unique_id "aXur7a51RNfzhKG5ppPegwAAAE0"]
[Fri Jan 30 02:50:22.334431 2026] [:error] [pid 13797:tid 13809] [client 52.175.57.167:65204] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jane.php"] [unique_id "aXur7kZz78bylh5pU4SKVgAAAco"]
[Fri Jan 30 02:50:22.706796 2026] [:error] [pid 13765:tid 13784] [client 52.175.57.167:64284] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aXur7rU6eEFCVbA7WHS_5gAAAZE"]
[Fri Jan 30 02:50:23.025385 2026] [:error] [pid 13797:tid 13806] [client 52.175.57.167:65192] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aXur70Zz78bylh5pU4SKWAAAAcc"]
[Fri Jan 30 02:50:23.516889 2026] [:error] [pid 39502:tid 39554] [client 52.175.57.167:63909] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aXur7wCUcXwXieepEYgKpQAAAJI"]
[Fri Jan 30 02:50:23.974750 2026] [:error] [pid 13828:tid 13845] [client 52.175.57.167:64272] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aXur7-g30BgRfEx7ROHpyQAAAg8"]
[Fri Jan 30 02:50:24.235451 2026] [:error] [pid 39502:tid 39542] [client 52.175.57.167:64314] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXur8ACUcXwXieepEYgKpwAAAIY"]
[Fri Jan 30 02:50:24.578877 2026] [:error] [pid 13797:tid 13811] [client 52.175.57.167:64817] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXur8EZz78bylh5pU4SKWQAAAcw"]
[Fri Jan 30 02:50:24.997779 2026] [:error] [pid 39592:tid 39607] [client 52.175.57.167:10903] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXur8JlnGYODSsJUyHldlAAAAMo"]
[Fri Jan 30 02:50:25.527166 2026] [:error] [pid 26945:tid 26962] [client 52.175.57.167:64302] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXur8QW-EMYAck0PyR4x9AAAAkU"]
[Fri Jan 30 02:50:26.106081 2026] [:error] [pid 39503:tid 39585] [client 52.175.57.167:65234] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aXur8jzoHqvQcupFdnYNkQAAARY"]
[Fri Jan 30 02:50:26.452770 2026] [:error] [pid 39501:tid 39533] [client 52.175.57.167:65268] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aXur8i_BLgXFo3daaZjcNgAAABg"]
[Fri Jan 30 02:50:27.029745 2026] [:error] [pid 39813:tid 39832] [client 52.175.57.167:65213] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aXur89_AaZSBkqpNK00H0QAAAVE"]
[Fri Jan 30 02:50:27.489058 2026] [:error] [pid 39501:tid 39516] [client 52.175.57.167:65256] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aXur8y_BLgXFo3daaZjcOQAAAAc"]
[Fri Jan 30 02:50:27.865820 2026] [:error] [pid 39501:tid 39521] [client 52.175.57.167:63936] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aXur8y_BLgXFo3daaZjcOgAAAAw"]
[Fri Jan 30 02:50:28.363517 2026] [:error] [pid 13765:tid 13789] [client 52.175.57.167:63508] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aXur9LU6eEFCVbA7WHS_6wAAAZY"]
[Fri Jan 30 02:50:28.857582 2026] [:error] [pid 13765:tid 13783] [client 52.175.57.167:65270] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aXur9LU6eEFCVbA7WHS_7QAAAZA"]
[Fri Jan 30 02:50:29.229613 2026] [:error] [pid 13828:tid 13837] [client 52.175.57.167:64268] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aXur9eg30BgRfEx7ROHpzwAAAgc"]
[Fri Jan 30 02:50:29.523667 2026] [:error] [pid 13765:tid 13777] [client 52.175.57.167:10883] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "aXur9bU6eEFCVbA7WHS_7gAAAYo"]
[Fri Jan 30 02:50:29.982472 2026] [:error] [pid 13828:tid 13841] [client 52.175.57.167:63577] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "aXur9eg30BgRfEx7ROHp0gAAAgs"]
[Fri Jan 30 02:50:30.380902 2026] [:error] [pid 13828:tid 13833] [client 52.175.57.167:64879] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "aXur9ug30BgRfEx7ROHp1AAAAgM"]
[Fri Jan 30 02:50:30.742888 2026] [:error] [pid 39592:tid 39620] [client 52.175.57.167:64325] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "aXur9plnGYODSsJUyHldlgAAANc"]
[Fri Jan 30 02:50:31.072454 2026] [:error] [pid 39783:tid 39795] [client 52.175.57.167:64380] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aXur9651RNfzhKG5ppPeiQAAAEo"]
[Fri Jan 30 02:50:31.438302 2026] [:error] [pid 39813:tid 39838] [client 52.175.57.167:64872] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aXur99_AaZSBkqpNK00H1gAAAVc"]
[Fri Jan 30 02:50:31.901943 2026] [:error] [pid 26945:tid 26973] [client 52.175.57.167:63952] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aXur9wW-EMYAck0PyR4x9gAAAlA"]
[Fri Jan 30 02:50:32.346012 2026] [:error] [pid 39813:tid 39822] [client 52.175.57.167:64357] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aXur-N_AaZSBkqpNK00H1wAAAUc"]
[Fri Jan 30 02:50:32.694630 2026] [:error] [pid 13765:tid 13790] [client 52.175.57.167:65154] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aXur-LU6eEFCVbA7WHS_9QAAAZc"]
[Fri Jan 30 02:50:32.992161 2026] [:error] [pid 26945:tid 26960] [client 52.175.57.167:64857] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aXur-AW-EMYAck0PyR4x-AAAAkM"]
[Fri Jan 30 02:50:33.423684 2026] [:error] [pid 26945:tid 26977] [client 52.175.57.167:64825] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aXur-QW-EMYAck0PyR4x-gAAAlQ"]
[Fri Jan 30 02:50:33.802474 2026] [:error] [pid 39813:tid 39835] [client 52.175.57.167:64815] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aXur-d_AaZSBkqpNK00H2wAAAVQ"]
[Fri Jan 30 02:50:34.149900 2026] [:error] [pid 26945:tid 26961] [client 52.175.57.167:10930] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aXur-gW-EMYAck0PyR4x_AAAAkQ"]
[Fri Jan 30 02:50:34.516796 2026] [:error] [pid 39501:tid 39528] [client 52.175.57.167:64888] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aXur-i_BLgXFo3daaZjcSAAAABM"]
[Fri Jan 30 02:50:35.017471 2026] [:error] [pid 39501:tid 39532] [client 52.175.57.167:64342] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aXur-y_BLgXFo3daaZjcSQAAABc"]
[Fri Jan 30 02:50:35.329722 2026] [:error] [pid 39501:tid 39526] [client 52.175.57.167:64264] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aXur-y_BLgXFo3daaZjcSgAAABE"]
[Fri Jan 30 02:50:35.839911 2026] [:error] [pid 39501:tid 39531] [client 52.175.57.167:63600] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXur-y_BLgXFo3daaZjcTwAAABY"]
[Fri Jan 30 02:50:36.371970 2026] [:error] [pid 39502:tid 39544] [client 52.175.57.167:10885] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXur_ACUcXwXieepEYgKqQAAAIg"]
[Fri Jan 30 02:50:36.755173 2026] [:error] [pid 39501:tid 39517] [client 52.175.57.167:65215] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXur_C_BLgXFo3daaZjcUgAAAAg"]
[Fri Jan 30 02:50:37.046236 2026] [:error] [pid 39502:tid 39551] [client 52.175.57.167:10911] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXur_QCUcXwXieepEYgKrAAAAI8"]
[Fri Jan 30 02:50:37.383212 2026] [:error] [pid 39501:tid 39524] [client 52.175.57.167:63532] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "aXur_S_BLgXFo3daaZjcVgAAAA8"]
[Fri Jan 30 02:50:37.735821 2026] [:error] [pid 39503:tid 39564] [client 52.175.57.167:65152] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "aXur_TzoHqvQcupFdnYNlQAAAQE"]
[Fri Jan 30 02:50:38.102969 2026] [:error] [pid 13765:tid 13772] [client 52.175.57.167:64864] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "aXur_rU6eEFCVbA7WHTAAwAAAYU"]
[Fri Jan 30 02:50:38.545018 2026] [:error] [pid 13765:tid 13789] [client 52.175.57.167:63940] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "aXur_rU6eEFCVbA7WHTABQAAAZY"]
[Fri Jan 30 02:50:38.962048 2026] [:error] [pid 39503:tid 39577] [client 52.175.57.167:64811] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aXur_jzoHqvQcupFdnYNlgAAAQ4"]
[Fri Jan 30 02:50:39.328080 2026] [:error] [pid 39592:tid 39612] [client 52.175.57.167:64852] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aXur_5lnGYODSsJUyHldmgAAAM8"]
[Fri Jan 30 02:50:39.668768 2026] [:error] [pid 39503:tid 39581] [client 52.175.57.167:63949] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aXur_zzoHqvQcupFdnYNmAAAARI"]
[Fri Jan 30 02:50:39.939456 2026] [:error] [pid 13765:tid 13767] [client 52.175.57.167:10881] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aXur_7U6eEFCVbA7WHTABgAAAYA"]
[Fri Jan 30 02:50:40.583149 2026] [:error] [pid 39783:tid 39806] [client 52.175.57.167:64341] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aXusAK51RNfzhKG5ppPejQAAAFU"]
[Fri Jan 30 02:50:40.969975 2026] [:error] [pid 39592:tid 39604] [client 52.175.57.167:63578] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aXusAJlnGYODSsJUyHldmwAAAMc"]
[Fri Jan 30 02:50:41.385856 2026] [:error] [pid 26945:tid 26967] [client 52.175.57.167:64375] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aXusAQW-EMYAck0PyR4yAwAAAko"]
[Fri Jan 30 02:50:41.801467 2026] [:error] [pid 39501:tid 39530] [client 52.175.57.167:64263] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aXusAS_BLgXFo3daaZjcXQAAABU"]
[Fri Jan 30 02:50:42.084235 2026] [:error] [pid 39503:tid 39570] [client 52.175.57.167:65277] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aXusAjzoHqvQcupFdnYNmgAAAQc"]
[Fri Jan 30 02:50:42.772165 2026] [:error] [pid 39501:tid 39528] [client 52.175.57.167:65253] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aXusAi_BLgXFo3daaZjcXgAAABM"]
[Fri Jan 30 02:50:43.100123 2026] [:error] [pid 13828:tid 13852] [client 52.175.57.167:10892] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aXusA-g30BgRfEx7ROHp2AAAAhY"]
[Fri Jan 30 02:50:43.694911 2026] [:error] [pid 13765:tid 13770] [client 52.175.57.167:65224] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aXusA7U6eEFCVbA7WHTAEgAAAYM"]
[Fri Jan 30 02:50:44.124577 2026] [:error] [pid 13765:tid 13791] [client 52.175.57.167:63593] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aXusBLU6eEFCVbA7WHTAFAAAAZg"]
[Fri Jan 30 02:50:44.512673 2026] [:error] [pid 39502:tid 39554] [client 52.175.57.167:64894] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aXusBACUcXwXieepEYgKsgAAAJI"]
[Fri Jan 30 02:50:44.784517 2026] [:error] [pid 39783:tid 39799] [client 52.175.57.167:63894] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aXusBK51RNfzhKG5ppPejwAAAE4"]
[Fri Jan 30 02:50:45.130052 2026] [:error] [pid 39502:tid 39538] [client 52.175.57.167:64814] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aXusBQCUcXwXieepEYgKtQAAAII"]
[Fri Jan 30 02:50:45.623940 2026] [:error] [pid 39783:tid 39786] [client 52.175.57.167:65260] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aXusBa51RNfzhKG5ppPekAAAAEE"]
[Fri Jan 30 02:50:46.192297 2026] [:error] [pid 39813:tid 39818] [client 52.175.57.167:64312] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aXusBt_AaZSBkqpNK00H6gAAAUM"]
[Fri Jan 30 02:50:46.482592 2026] [:error] [pid 26945:tid 26977] [client 52.175.57.167:64841] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aXusBgW-EMYAck0PyR4yBgAAAlQ"]
[Fri Jan 30 02:50:46.884913 2026] [:error] [pid 39501:tid 39524] [client 52.175.57.167:64792] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aXusBi_BLgXFo3daaZjcXwAAAA8"]
[Fri Jan 30 02:50:47.388215 2026] [:error] [pid 39783:tid 39809] [client 52.175.57.167:64798] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aXusB651RNfzhKG5ppPelAAAAFg"]
[Fri Jan 30 02:50:47.750138 2026] [:error] [pid 13765:tid 13782] [client 52.175.57.167:63877] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aXusB7U6eEFCVbA7WHTAHgAAAY8"]
[Fri Jan 30 02:50:48.099736 2026] [:error] [pid 39783:tid 39787] [client 52.175.57.167:63584] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aXusCK51RNfzhKG5ppPelQAAAEI"]
[Fri Jan 30 02:50:48.388351 2026] [:error] [pid 13765:tid 13790] [client 52.175.57.167:10905] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aXusCLU6eEFCVbA7WHTAIAAAAZc"]
[Fri Jan 30 02:50:48.764119 2026] [:error] [pid 26945:tid 26970] [client 52.175.57.167:64285] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aXusCAW-EMYAck0PyR4yCAAAAk0"]
[Fri Jan 30 02:50:49.045393 2026] [:error] [pid 13765:tid 13785] [client 52.175.57.167:63501] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aXusCbU6eEFCVbA7WHTAIwAAAZI"]
[Fri Jan 30 02:50:49.614131 2026] [:error] [pid 39592:tid 39615] [client 52.175.57.167:65216] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aXusCZlnGYODSsJUyHldpQAAANI"]
[Fri Jan 30 02:50:49.913626 2026] [:error] [pid 39813:tid 39838] [client 52.175.57.167:64793] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aXusCd_AaZSBkqpNK00H7wAAAVc"]
[Fri Jan 30 02:50:50.297622 2026] [:error] [pid 13828:tid 13835] [client 52.175.57.167:64887] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aXusCug30BgRfEx7ROHp4QAAAgU"]
[Fri Jan 30 02:50:50.608444 2026] [:error] [pid 13828:tid 13841] [client 52.175.57.167:63978] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aXusCug30BgRfEx7ROHp4gAAAgs"]
[Fri Jan 30 02:50:50.913097 2026] [:error] [pid 13828:tid 13836] [client 52.175.57.167:64771] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aXusCug30BgRfEx7ROHp4wAAAgY"]
[Fri Jan 30 02:50:51.234323 2026] [:error] [pid 13797:tid 13816] [client 52.175.57.167:10923] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aXusC0Zz78bylh5pU4SKaQAAAdE"]
[Fri Jan 30 02:50:51.585941 2026] [:error] [pid 39813:tid 39834] [client 52.175.57.167:64890] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "aXusC9_AaZSBkqpNK00H8AAAAVM"]
[Fri Jan 30 02:50:51.956986 2026] [:error] [pid 39502:tid 39559] [client 52.175.57.167:65276] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "aXusCwCUcXwXieepEYgKuwAAAJc"]
[Fri Jan 30 02:50:52.491357 2026] [:error] [pid 39501:tid 39532] [client 52.175.57.167:64327] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "aXusDC_BLgXFo3daaZjcbAAAABc"]
[Fri Jan 30 02:50:52.828187 2026] [:error] [pid 39503:tid 39582] [client 52.175.57.167:65171] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "aXusDDzoHqvQcupFdnYNoQAAARM"]
[Fri Jan 30 02:50:53.127287 2026] [:error] [pid 13797:tid 13822] [client 52.175.57.167:64323] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shoyo.php"] [unique_id "aXusDUZz78bylh5pU4SKcQAAAdc"]
[Fri Jan 30 02:50:53.520438 2026] [:error] [pid 13797:tid 13813] [client 52.175.57.167:64796] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shoyo.php"] [unique_id "aXusDUZz78bylh5pU4SKcgAAAc4"]
[Fri Jan 30 02:50:53.769008 2026] [:error] [pid 39503:tid 39570] [client 52.175.57.167:64895] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shoyo.php"] [unique_id "aXusDTzoHqvQcupFdnYNowAAAQc"]
[Fri Jan 30 02:50:54.215426 2026] [:error] [pid 26945:tid 26967] [client 52.175.57.167:63997] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shoyo.php"] [unique_id "aXusDgW-EMYAck0PyR4yEAAAAko"]
[Fri Jan 30 02:50:54.472958 2026] [:error] [pid 39592:tid 39619] [client 52.175.57.167:64800] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aXusDplnGYODSsJUyHldqQAAANY"]
[Fri Jan 30 02:50:54.808424 2026] [:error] [pid 39813:tid 39821] [client 52.175.57.167:65190] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aXusDt_AaZSBkqpNK00H8QAAAUY"]
[Fri Jan 30 02:50:55.143874 2026] [:error] [pid 13797:tid 13821] [client 52.175.57.167:64778] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aXusD0Zz78bylh5pU4SKdwAAAdY"]
[Fri Jan 30 02:50:55.423922 2026] [:error] [pid 39783:tid 39796] [client 52.175.57.167:64282] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aXusD651RNfzhKG5ppPemgAAAEs"]
[Fri Jan 30 02:50:55.707782 2026] [:error] [pid 13797:tid 13816] [client 52.175.57.167:64256] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aXusD0Zz78bylh5pU4SKeQAAAdE"]
[Fri Jan 30 02:50:56.012763 2026] [:error] [pid 39592:tid 39610] [client 52.175.57.167:64262] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aXusEJlnGYODSsJUyHldrQAAAM0"]
[Fri Jan 30 02:50:56.426705 2026] [:error] [pid 39503:tid 39571] [client 52.175.57.167:64364] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aXusEDzoHqvQcupFdnYNpAAAAQg"]
[Fri Jan 30 02:50:56.817783 2026] [:error] [pid 39503:tid 39569] [client 52.175.57.167:64770] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aXusEDzoHqvQcupFdnYNpgAAAQY"]
[Fri Jan 30 02:50:57.060716 2026] [:error] [pid 39783:tid 39795] [client 52.175.57.167:64329] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aXusEa51RNfzhKG5ppPenwAAAEo"]
[Fri Jan 30 02:50:57.340655 2026] [:error] [pid 39502:tid 39558] [client 52.175.57.167:10913] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aXusEQCUcXwXieepEYgKxQAAAJY"]
[Fri Jan 30 02:50:57.645944 2026] [:error] [pid 39592:tid 39615] [client 52.175.57.167:64884] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aXusEZlnGYODSsJUyHldswAAANI"]
[Fri Jan 30 02:50:57.999838 2026] [:error] [pid 39592:tid 39617] [client 52.175.57.167:64317] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aXusEZlnGYODSsJUyHldtAAAANQ"]
[Fri Jan 30 02:50:58.500691 2026] [:error] [pid 39592:tid 39614] [client 52.175.57.167:10889] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aXusEplnGYODSsJUyHldtQAAANE"]
[Fri Jan 30 02:50:58.842835 2026] [:error] [pid 39592:tid 39604] [client 52.175.57.167:63562] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aXusEplnGYODSsJUyHldtwAAAMc"]
[Fri Jan 30 02:50:59.172451 2026] [:error] [pid 39501:tid 39510] [client 52.175.57.167:64376] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aXusEy_BLgXFo3daaZjcbwAAAAE"]
[Fri Jan 30 02:50:59.451909 2026] [:error] [pid 39592:tid 39600] [client 52.175.57.167:65197] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aXusE5lnGYODSsJUyHldugAAAMM"]
[Fri Jan 30 02:50:59.706359 2026] [:error] [pid 13765:tid 13772] [client 52.175.57.167:64849] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aXusE7U6eEFCVbA7WHTAMgAAAYU"]
[Fri Jan 30 02:51:00.018948 2026] [:error] [pid 13828:tid 13831] [client 52.175.57.167:64816] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aXusFOg30BgRfEx7ROHp6gAAAgE"]
[Fri Jan 30 02:51:00.393614 2026] [:error] [pid 39813:tid 39816] [client 52.175.57.167:65261] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aXusFN_AaZSBkqpNK00H9QAAAUE"]
[Fri Jan 30 02:51:00.805617 2026] [:error] [pid 39502:tid 39536] [client 52.175.57.167:64834] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aXusFACUcXwXieepEYgKygAAAIA"]
[Fri Jan 30 02:51:01.315302 2026] [:error] [pid 39501:tid 39511] [client 52.175.57.167:63937] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aXusFS_BLgXFo3daaZjccQAAAAI"]
[Fri Jan 30 02:51:01.717846 2026] [:error] [pid 13765:tid 13785] [client 52.175.57.167:10900] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aXusFbU6eEFCVbA7WHTAOwAAAZI"]
[Fri Jan 30 02:51:02.091898 2026] [:error] [pid 13765:tid 13775] [client 52.175.57.167:64772] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aXusFrU6eEFCVbA7WHTAPQAAAYg"]
[Fri Jan 30 02:51:02.407259 2026] [:error] [pid 13765:tid 13770] [client 52.175.57.167:65244] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless14.php"] [unique_id "aXusFrU6eEFCVbA7WHTAQQAAAYM"]
[Fri Jan 30 02:51:02.681967 2026] [:error] [pid 26945:tid 26970] [client 52.175.57.167:64779] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aXusFgW-EMYAck0PyR4yGgAAAk0"]
[Fri Jan 30 02:51:03.189376 2026] [:error] [pid 39813:tid 39818] [client 52.175.57.167:64274] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aXusF9_AaZSBkqpNK00H9wAAAUM"]
[Fri Jan 30 02:51:03.599168 2026] [:error] [pid 39592:tid 39607] [client 52.175.57.167:64258] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aXusF5lnGYODSsJUyHldvAAAAMo"]
[Fri Jan 30 02:51:04.047628 2026] [:error] [pid 13828:tid 13830] [client 52.175.57.167:64305] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aXusGOg30BgRfEx7ROHp7AAAAgA"]
[Fri Jan 30 02:51:04.469754 2026] [:error] [pid 39501:tid 39528] [client 52.175.57.167:63497] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aXusGC_BLgXFo3daaZjcdwAAABM"]
[Fri Jan 30 02:51:04.771013 2026] [:error] [pid 26945:tid 26969] [client 52.175.57.167:64275] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aXusGAW-EMYAck0PyR4yHAAAAkw"]
[Fri Jan 30 02:51:05.159166 2026] [:error] [pid 39501:tid 39523] [client 52.175.57.167:64348] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aXusGS_BLgXFo3daaZjceAAAAA4"]
[Fri Jan 30 02:51:05.488923 2026] [:error] [pid 39813:tid 39823] [client 52.175.57.167:65203] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aXusGd_AaZSBkqpNK00H-QAAAUg"]
[Fri Jan 30 02:51:05.770815 2026] [:error] [pid 39592:tid 39598] [client 52.175.57.167:64781] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aXusGZlnGYODSsJUyHldvgAAAME"]
[Fri Jan 30 02:51:06.145160 2026] [:error] [pid 13828:tid 13849] [client 52.175.57.167:64318] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aXusGug30BgRfEx7ROHp7gAAAhM"]
[Fri Jan 30 02:51:06.413946 2026] [:error] [pid 39503:tid 39574] [client 52.175.57.167:64333] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aXusGjzoHqvQcupFdnYNrQAAAQs"]
[Fri Jan 30 02:51:06.725926 2026] [:error] [pid 26945:tid 26977] [client 52.175.57.167:65174] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aXusGgW-EMYAck0PyR4yHwAAAlQ"]
[Fri Jan 30 02:51:07.091496 2026] [:error] [pid 39813:tid 39833] [client 52.175.57.167:64804] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aXusG9_AaZSBkqpNK00H_AAAAVI"]
[Fri Jan 30 02:51:07.558792 2026] [:error] [pid 39813:tid 39830] [client 52.175.57.167:65264] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aXusG9_AaZSBkqpNK00H_QAAAU8"]
[Fri Jan 30 02:51:07.941164 2026] [:error] [pid 26945:tid 26970] [client 52.175.57.167:65232] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aXusGwW-EMYAck0PyR4yIQAAAk0"]
[Fri Jan 30 02:51:08.279234 2026] [:error] [pid 39502:tid 39549] [client 52.175.57.167:64267] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aXusHACUcXwXieepEYgKzwAAAI0"]
[Fri Jan 30 02:51:08.642057 2026] [:error] [pid 13797:tid 13808] [client 52.175.57.167:63974] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aXusHEZz78bylh5pU4SKhwAAAck"]
[Fri Jan 30 02:51:09.034761 2026] [:error] [pid 39502:tid 39537] [client 52.175.57.167:64337] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aXusHQCUcXwXieepEYgK0AAAAIE"]
[Fri Jan 30 02:51:09.529486 2026] [:error] [pid 39592:tid 39617] [client 52.175.57.167:64826] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aXusHZlnGYODSsJUyHldwgAAANQ"]
[Fri Jan 30 02:51:09.800018 2026] [:error] [pid 39501:tid 39525] [client 52.175.57.167:63561] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aXusHS_BLgXFo3daaZjcewAAABA"]
[Fri Jan 30 02:51:10.152436 2026] [:error] [pid 13765:tid 13771] [client 52.175.57.167:64829] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXusHrU6eEFCVbA7WHTATQAAAYQ"]
[Fri Jan 30 02:51:10.422907 2026] [:error] [pid 13828:tid 13837] [client 52.175.57.167:10896] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXusHug30BgRfEx7ROHp9gAAAgc"]
[Fri Jan 30 02:51:10.708465 2026] [:error] [pid 39502:tid 39553] [client 52.175.57.167:64283] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXusHgCUcXwXieepEYgK1AAAAJE"]
[Fri Jan 30 02:51:10.964784 2026] [:error] [pid 39502:tid 39550] [client 52.175.57.167:64335] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXusHgCUcXwXieepEYgK1QAAAI4"]
[Fri Jan 30 02:51:11.482664 2026] [:error] [pid 13765:tid 13769] [client 52.175.57.167:65266] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aXusH7U6eEFCVbA7WHTAUwAAAYI"]
[Fri Jan 30 02:51:11.788512 2026] [:error] [pid 13797:tid 13803] [client 52.175.57.167:63943] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aXusH0Zz78bylh5pU4SKiAAAAcQ"]
[Fri Jan 30 02:51:26.574417 2026] [:error] [pid 13765:tid 13791] [client 52.175.57.167:64382] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aXusLrU6eEFCVbA7WHTAbgAAAZg"]
[Fri Jan 30 02:51:26.830503 2026] [:error] [pid 13797:tid 13802] [client 52.175.57.167:64278] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aXusLkZz78bylh5pU4SKkQAAAcM"]
[Fri Jan 30 02:51:27.109146 2026] [:error] [pid 13765:tid 13778] [client 52.175.57.167:10899] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aXusL7U6eEFCVbA7WHTAbwAAAYs"]
[Fri Jan 30 02:51:27.366831 2026] [:error] [pid 13797:tid 13809] [client 52.175.57.167:63958] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aXusL0Zz78bylh5pU4SKkgAAAco"]
[Fri Jan 30 02:51:27.683847 2026] [:error] [pid 13765:tid 13777] [client 52.175.57.167:63893] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wag.php"] [unique_id "aXusL7U6eEFCVbA7WHTAcQAAAYo"]
[Fri Jan 30 02:51:27.972458 2026] [:error] [pid 13828:tid 13849] [client 52.175.57.167:64290] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wag.php"] [unique_id "aXusL-g30BgRfEx7ROHqBQAAAhM"]
[Fri Jan 30 02:51:28.259190 2026] [:error] [pid 13765:tid 13774] [client 52.175.57.167:64296] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wag.php"] [unique_id "aXusMLU6eEFCVbA7WHTAcwAAAYc"]
[Fri Jan 30 02:51:28.614627 2026] [:error] [pid 39813:tid 39833] [client 52.175.57.167:64789] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wag.php"] [unique_id "aXusMN_AaZSBkqpNK00IHwAAAVI"]
[Fri Jan 30 02:51:28.921299 2026] [:error] [pid 39501:tid 39510] [client 52.175.57.167:64360] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvent.php"] [unique_id "aXusMC_BLgXFo3daaZjckAAAAAE"]
[Fri Jan 30 02:51:29.235680 2026] [:error] [pid 39502:tid 39537] [client 52.175.57.167:63596] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvent.php"] [unique_id "aXusMQCUcXwXieepEYgK8gAAAIE"]
[Fri Jan 30 02:51:29.530882 2026] [:error] [pid 26945:tid 26960] [client 52.175.57.167:63594] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvent.php"] [unique_id "aXusMQW-EMYAck0PyR4yMgAAAkM"]
[Fri Jan 30 02:51:29.837363 2026] [:error] [pid 13797:tid 13803] [client 52.175.57.167:63569] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvent.php"] [unique_id "aXusMUZz78bylh5pU4SKkwAAAcQ"]
[Fri Jan 30 02:51:30.213525 2026] [:error] [pid 39501:tid 39518] [client 52.175.57.167:64315] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "aXusMi_BLgXFo3daaZjckgAAAAk"]
[Fri Jan 30 02:51:30.515441 2026] [:error] [pid 39783:tid 39786] [client 52.175.57.167:65157] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "aXusMq51RNfzhKG5ppPerAAAAEE"]
[Fri Jan 30 02:51:30.827181 2026] [:error] [pid 39592:tid 39608] [client 52.175.57.167:65254] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "aXusMplnGYODSsJUyHld0QAAAMs"]
[Fri Jan 30 02:51:31.174478 2026] [:error] [pid 39503:tid 39579] [client 52.175.57.167:65200] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "aXusMzzoHqvQcupFdnYNuQAAARA"]
[Fri Jan 30 02:51:31.651200 2026] [:error] [pid 39503:tid 39587] [client 52.175.57.167:65278] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aXusMzzoHqvQcupFdnYNugAAARg"]
[Fri Jan 30 02:51:31.966188 2026] [:error] [pid 13765:tid 13783] [client 52.175.57.167:64338] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aXusM7U6eEFCVbA7WHTAegAAAZA"]
[Fri Jan 30 02:51:32.254754 2026] [:error] [pid 39501:tid 39509] [client 52.175.57.167:64787] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aXusNC_BLgXFo3daaZjclQAAAAA"]
[Fri Jan 30 02:51:32.636395 2026] [:error] [pid 39501:tid 39513] [client 52.175.57.167:64346] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aXusNC_BLgXFo3daaZjclgAAAAQ"]
[Fri Jan 30 02:51:32.944456 2026] [:error] [pid 39501:tid 39527] [client 52.175.57.167:64368] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aXusNC_BLgXFo3daaZjclwAAABI"]
[Fri Jan 30 02:51:33.312075 2026] [:error] [pid 13765:tid 13767] [client 52.175.57.167:64782] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aXusNbU6eEFCVbA7WHTAggAAAYA"]
[Fri Jan 30 02:51:33.577649 2026] [:error] [pid 39783:tid 39809] [client 52.175.57.167:64785] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aXusNa51RNfzhKG5ppPergAAAFg"]
[Fri Jan 30 02:51:34.200248 2026] [:error] [pid 26945:tid 26971] [client 52.175.57.167:64354] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aXusNgW-EMYAck0PyR4yOQAAAk4"]
[Fri Jan 30 02:51:34.620636 2026] [:error] [pid 13828:tid 13849] [client 52.175.57.167:65249] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aXusNug30BgRfEx7ROHqFAAAAhM"]
[Fri Jan 30 02:51:34.976633 2026] [:error] [pid 13828:tid 13845] [client 52.175.57.167:64823] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aXusNug30BgRfEx7ROHqFgAAAg8"]
[Fri Jan 30 02:51:35.320692 2026] [:error] [pid 13828:tid 13846] [client 52.175.57.167:64820] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aXusN-g30BgRfEx7ROHqGAAAAhA"]
[Fri Jan 30 02:51:35.601527 2026] [:error] [pid 39592:tid 39599] [client 52.175.57.167:64344] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aXusN5lnGYODSsJUyHld1AAAAMI"]
[Fri Jan 30 02:51:35.889876 2026] [:error] [pid 39501:tid 39530] [client 52.175.57.167:65214] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aXusNy_BLgXFo3daaZjcmgAAABU"]
[Fri Jan 30 02:51:36.267640 2026] [:error] [pid 26945:tid 26970] [client 52.175.57.167:64332] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aXusOAW-EMYAck0PyR4yQAAAAk0"]
[Fri Jan 30 02:51:36.545713 2026] [:error] [pid 26945:tid 26962] [client 52.175.57.167:63555] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aXusOAW-EMYAck0PyR4yQgAAAkU"]
[Fri Jan 30 02:51:36.986541 2026] [:error] [pid 39503:tid 39586] [client 52.175.57.167:64291] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aXusODzoHqvQcupFdnYNvgAAARc"]
[Fri Jan 30 02:51:37.336567 2026] [:error] [pid 26945:tid 26963] [client 52.175.57.167:63947] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aXusOQW-EMYAck0PyR4ySAAAAkY"]
[Fri Jan 30 02:51:37.699918 2026] [:error] [pid 39503:tid 39570] [client 52.175.57.167:64824] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aXusOTzoHqvQcupFdnYNvwAAAQc"]
[Fri Jan 30 02:51:38.025298 2026] [:error] [pid 13765:tid 13787] [client 52.175.57.167:63941] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aXusOrU6eEFCVbA7WHTAjQAAAZQ"]
[Fri Jan 30 02:51:38.477295 2026] [:error] [pid 13765:tid 13785] [client 52.175.57.167:63604] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aXusOrU6eEFCVbA7WHTAkAAAAZI"]
[Fri Jan 30 02:51:38.806876 2026] [:error] [pid 39501:tid 39514] [client 52.175.57.167:63552] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aXusOi_BLgXFo3daaZjcowAAAAU"]
[Fri Jan 30 02:51:39.114361 2026] [:error] [pid 39502:tid 39544] [client 52.175.57.167:64882] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aXusOwCUcXwXieepEYgK9AAAAIg"]
[Fri Jan 30 02:51:39.417149 2026] [:error] [pid 39502:tid 39545] [client 52.175.57.167:63954] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aXusOwCUcXwXieepEYgK9QAAAIk"]
[Fri Jan 30 02:51:39.798972 2026] [:error] [pid 39783:tid 39801] [client 52.175.57.167:63575] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aXusO651RNfzhKG5ppPevQAAAFA"]
[Fri Jan 30 02:51:40.303966 2026] [:error] [pid 39501:tid 39509] [client 52.175.57.167:64788] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bp.php"] [unique_id "aXusPC_BLgXFo3daaZjcpgAAAAA"]
[Fri Jan 30 02:51:40.611381 2026] [:error] [pid 39783:tid 39799] [client 52.175.57.167:63985] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bp.php"] [unique_id "aXusPK51RNfzhKG5ppPewAAAAE4"]
[Fri Jan 30 02:51:40.968055 2026] [:error] [pid 39503:tid 39572] [client 52.175.57.167:65212] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bp.php"] [unique_id "aXusPDzoHqvQcupFdnYNwQAAAQk"]
[Fri Jan 30 02:51:41.636009 2026] [:error] [pid 39502:tid 39552] [client 52.175.57.167:64830] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bp.php"] [unique_id "aXusPQCUcXwXieepEYgK-gAAAJA"]
[Fri Jan 30 02:51:42.517657 2026] [:error] [pid 39501:tid 39530] [client 52.175.57.167:64810] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aXusPi_BLgXFo3daaZjcqgAAABU"]
[Fri Jan 30 02:51:42.947693 2026] [:error] [pid 13797:tid 13802] [client 52.175.57.167:65225] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aXusPkZz78bylh5pU4SKmwAAAcM"]
[Fri Jan 30 02:51:43.696306 2026] [:error] [pid 13797:tid 13809] [client 52.175.57.167:64276] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aXusP0Zz78bylh5pU4SKnQAAAco"]
[Fri Jan 30 02:51:44.713062 2026] [:error] [pid 13828:tid 13840] [client 52.175.57.167:10933] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aXusQOg30BgRfEx7ROHqIwAAAgo"]
[Fri Jan 30 02:51:45.208777 2026] [:error] [pid 13765:tid 13768] [client 52.175.57.167:64880] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geck.php"] [unique_id "aXusQbU6eEFCVbA7WHTAmgAAAYE"]
[Fri Jan 30 02:51:45.908946 2026] [:error] [pid 13797:tid 13816] [client 52.175.57.167:65189] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geck.php"] [unique_id "aXusQUZz78bylh5pU4SKoAAAAdE"]
[Fri Jan 30 02:51:47.115775 2026] [:error] [pid 39813:tid 39818] [client 52.175.57.167:63543] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geck.php"] [unique_id "aXusQ9_AaZSBkqpNK00IJQAAAUM"]
[Fri Jan 30 02:51:47.981940 2026] [:error] [pid 39503:tid 39567] [client 52.175.57.167:64378] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geck.php"] [unique_id "aXusQzzoHqvQcupFdnYNywAAAQQ"]
[Fri Jan 30 02:51:48.699654 2026] [:error] [pid 13797:tid 13800] [client 52.175.57.167:65158] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aXusREZz78bylh5pU4SKogAAAcE"]
[Fri Jan 30 02:51:49.783306 2026] [:error] [pid 39813:tid 39830] [client 52.175.57.167:65175] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aXusRd_AaZSBkqpNK00IKgAAAU8"]
[Fri Jan 30 02:51:50.916074 2026] [:error] [pid 39813:tid 39839] [client 52.175.57.167:64828] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aXusRt_AaZSBkqpNK00ILAAAAVg"]
[Fri Jan 30 02:51:52.326045 2026] [:error] [pid 13828:tid 13835] [client 52.175.57.167:63573] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aXusSOg30BgRfEx7ROHqNgAAAgU"]
[Fri Jan 30 02:51:53.140254 2026] [:error] [pid 39501:tid 39532] [client 52.175.57.167:64797] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aXusSS_BLgXFo3daaZjcuQAAABc"]
[Fri Jan 30 02:51:53.889432 2026] [:error] [pid 39592:tid 39600] [client 52.175.57.167:64259] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aXusSZlnGYODSsJUyHld3QAAAMM"]
[Fri Jan 30 02:51:54.909769 2026] [:error] [pid 39501:tid 39516] [client 52.175.57.167:64293] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aXusSi_BLgXFo3daaZjcuwAAAAc"]
[Fri Jan 30 02:51:55.449592 2026] [:error] [pid 13828:tid 13854] [client 52.175.57.167:64270] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aXusS-g30BgRfEx7ROHqPAAAAhg"]
[Fri Jan 30 02:51:56.170361 2026] [:error] [pid 13765:tid 13786] [client 52.175.57.167:63926] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admins.php"] [unique_id "aXusTLU6eEFCVbA7WHTApQAAAZM"]
[Fri Jan 30 02:51:56.867848 2026] [:error] [pid 39503:tid 39576] [client 52.175.57.167:65272] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admins.php"] [unique_id "aXusTDzoHqvQcupFdnYN1AAAAQ0"]
[Fri Jan 30 02:51:58.136079 2026] [:error] [pid 39501:tid 39527] [client 52.175.57.167:63544] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admins.php"] [unique_id "aXusTi_BLgXFo3daaZjcvwAAABI"]
[Fri Jan 30 02:51:58.793500 2026] [:error] [pid 39502:tid 39549] [client 52.175.57.167:65267] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admins.php"] [unique_id "aXusTgCUcXwXieepEYgLCQAAAI0"]
[Fri Jan 30 02:51:59.367631 2026] [:error] [pid 13828:tid 13845] [client 52.175.57.167:65211] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-configs.php"] [unique_id "aXusT-g30BgRfEx7ROHqQQAAAg8"]
[Fri Jan 30 02:51:59.811358 2026] [:error] [pid 39592:tid 39606] [client 52.175.57.167:65275] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-configs.php"] [unique_id "aXusT5lnGYODSsJUyHld4wAAAMk"]
[Fri Jan 30 02:52:00.735400 2026] [:error] [pid 13765:tid 13773] [client 52.175.57.167:63942] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-configs.php"] [unique_id "aXusULU6eEFCVbA7WHTAqAAAAYY"]
[Fri Jan 30 02:52:01.949171 2026] [:error] [pid 39592:tid 39609] [client 52.175.57.167:63993] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-configs.php"] [unique_id "aXusUZlnGYODSsJUyHld5wAAAMw"]
[Fri Jan 30 02:52:02.480112 2026] [:error] [pid 39503:tid 39575] [client 52.175.57.167:63990] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/temp.php/wp-update.php"] [unique_id "aXusUjzoHqvQcupFdnYN2wAAAQw"]
[Fri Jan 30 02:52:02.843684 2026] [:error] [pid 13797:tid 13823] [client 52.175.57.167:10936] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/temp.php/wp-update.php"] [unique_id "aXusUkZz78bylh5pU4SKrAAAAdg"]
[Fri Jan 30 02:52:03.204159 2026] [:error] [pid 13797:tid 13800] [client 52.175.57.167:63586] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/temp.php/wp-update.php"] [unique_id "aXusU0Zz78bylh5pU4SKrgAAAcE"]
[Fri Jan 30 02:52:03.619807 2026] [:error] [pid 26945:tid 26966] [client 52.175.57.167:63073] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/temp.php/wp-update.php"] [unique_id "aXusUwW-EMYAck0PyR4yXgAAAkk"]
[Fri Jan 30 02:52:04.145381 2026] [:error] [pid 39783:tid 39789] [client 52.175.57.167:63549] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aXusVK51RNfzhKG5ppPe1AAAAEQ"]
[Fri Jan 30 02:52:04.566343 2026] [:error] [pid 26945:tid 26976] [client 52.175.57.167:10883] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aXusVAW-EMYAck0PyR4yXwAAAlM"]
[Fri Jan 30 02:52:04.869735 2026] [:error] [pid 39813:tid 39839] [client 52.175.57.167:64874] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aXusVN_AaZSBkqpNK00IPQAAAVg"]
[Fri Jan 30 02:52:05.179058 2026] [:error] [pid 39783:tid 39786] [client 52.175.57.167:63877] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aXusVa51RNfzhKG5ppPe1wAAAEE"]
[Fri Jan 30 02:52:05.607249 2026] [:error] [pid 13828:tid 13850] [client 52.175.57.167:64306] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/main.php"] [unique_id "aXusVeg30BgRfEx7ROHqRQAAAhQ"]
[Fri Jan 30 02:52:05.957351 2026] [:error] [pid 39813:tid 39819] [client 52.175.57.167:63588] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/main.php"] [unique_id "aXusVd_AaZSBkqpNK00IQQAAAUQ"]
[Fri Jan 30 02:52:06.430748 2026] [:error] [pid 13797:tid 13813] [client 52.175.57.167:63581] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/main.php"] [unique_id "aXusVkZz78bylh5pU4SKsgAAAc4"]
[Fri Jan 30 02:52:06.818219 2026] [:error] [pid 39592:tid 39598] [client 52.175.57.167:64299] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/main.php"] [unique_id "aXusVplnGYODSsJUyHld7AAAAME"]
[Fri Jan 30 02:52:07.408882 2026] [:error] [pid 39501:tid 39520] [client 52.175.57.167:64271] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aXusVy_BLgXFo3daaZjcygAAAAs"]
[Fri Jan 30 02:52:08.130739 2026] [:error] [pid 13765:tid 13777] [client 52.175.57.167:65169] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aXusWLU6eEFCVbA7WHTArgAAAYo"]
[Fri Jan 30 02:52:08.778472 2026] [:error] [pid 39592:tid 39621] [client 52.175.57.167:64893] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aXusWJlnGYODSsJUyHld7QAAANg"]
[Fri Jan 30 02:52:09.441262 2026] [:error] [pid 26945:tid 26958] [client 52.175.57.167:10937] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aXusWQW-EMYAck0PyR4yZwAAAkI"]
[Fri Jan 30 02:52:10.116416 2026] [:error] [pid 39503:tid 39576] [client 52.175.57.167:64320] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aXusWjzoHqvQcupFdnYN4gAAAQ0"]
[Fri Jan 30 02:52:10.490689 2026] [:error] [pid 39501:tid 39510] [client 52.175.57.167:64287] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aXusWi_BLgXFo3daaZjczwAAAAE"]
[Fri Jan 30 02:52:10.915077 2026] [:error] [pid 39813:tid 39824] [client 52.175.57.167:63930] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aXusWt_AaZSBkqpNK00IRQAAAUk"]
[Fri Jan 30 02:52:11.375674 2026] [:error] [pid 13797:tid 13821] [client 52.175.57.167:63973] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aXusW0Zz78bylh5pU4SKtgAAAdY"]
[Fri Jan 30 02:52:12.210315 2026] [:error] [pid 13828:tid 13842] [client 52.175.57.167:63975] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aXusXOg30BgRfEx7ROHqRgAAAgw"]
[Fri Jan 30 02:52:12.651772 2026] [:error] [pid 13797:tid 13803] [client 52.175.57.167:65263] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aXusXEZz78bylh5pU4SKtwAAAcQ"]
[Fri Jan 30 02:52:13.139114 2026] [:error] [pid 39503:tid 39587] [client 52.175.57.167:64298] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aXusXTzoHqvQcupFdnYN5gAAARg"]
[Fri Jan 30 02:52:13.710819 2026] [:error] [pid 26945:tid 26979] [client 52.175.57.167:65193] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aXusXQW-EMYAck0PyR4ycgAAAlY"]
[Fri Jan 30 02:52:14.244880 2026] [:error] [pid 26945:tid 26957] [client 52.175.57.167:10901] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "aXusXgW-EMYAck0PyR4ycwAAAkE"]
[Fri Jan 30 02:52:14.565891 2026] [:error] [pid 39592:tid 39614] [client 52.175.57.167:63888] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "aXusXplnGYODSsJUyHld9AAAANE"]
[Fri Jan 30 02:52:14.961491 2026] [:error] [pid 39813:tid 39833] [client 52.175.57.167:63950] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "aXusXt_AaZSBkqpNK00ISQAAAVI"]
[Fri Jan 30 02:52:15.504997 2026] [:error] [pid 39592:tid 39609] [client 52.175.57.167:65201] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "aXusX5lnGYODSsJUyHld9gAAAMw"]
[Fri Jan 30 02:52:16.080989 2026] [:error] [pid 39503:tid 39577] [client 52.175.57.167:64846] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aXusYDzoHqvQcupFdnYN6QAAAQ4"]
[Fri Jan 30 02:52:16.707568 2026] [:error] [pid 39783:tid 39788] [client 52.175.57.167:65166] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aXusYK51RNfzhKG5ppPe3AAAAEM"]
[Fri Jan 30 02:52:17.010228 2026] [:error] [pid 39813:tid 39820] [client 52.175.57.167:65219] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aXusYd_AaZSBkqpNK00ITwAAAUU"]
[Fri Jan 30 02:52:17.484360 2026] [:error] [pid 13797:tid 13813] [client 52.175.57.167:63583] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aXusYUZz78bylh5pU4SKvgAAAc4"]
[Fri Jan 30 02:52:18.014868 2026] [:error] [pid 39592:tid 39601] [client 52.175.57.167:65258] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aXusYplnGYODSsJUyHld-gAAAMQ"]
[Fri Jan 30 02:52:18.554362 2026] [:error] [pid 13765:tid 13775] [client 52.175.57.167:63599] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aXusYrU6eEFCVbA7WHTAswAAAYg"]
[Fri Jan 30 02:52:19.022927 2026] [:error] [pid 39813:tid 39822] [client 52.175.57.167:64326] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aXusY9_AaZSBkqpNK00IVAAAAUc"]
[Fri Jan 30 02:52:19.334767 2026] [:error] [pid 39501:tid 39512] [client 52.175.57.167:10943] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aXusYy_BLgXFo3daaZjc3gAAAAM"]
[Fri Jan 30 02:52:19.793267 2026] [:error] [pid 13797:tid 13806] [client 52.175.57.167:64294] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aXusY0Zz78bylh5pU4SKwQAAAcc"]
[Fri Jan 30 02:52:20.530318 2026] [:error] [pid 13828:tid 13835] [client 52.175.57.167:64790] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aXusZOg30BgRfEx7ROHqSwAAAgU"]
[Fri Jan 30 02:52:21.080725 2026] [:error] [pid 13828:tid 13847] [client 52.175.57.167:10898] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aXusZeg30BgRfEx7ROHqTAAAAhE"]
[Fri Jan 30 02:52:21.559971 2026] [:error] [pid 13765:tid 13768] [client 52.175.57.167:63908] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aXusZbU6eEFCVbA7WHTAugAAAYE"]
[Fri Jan 30 02:52:21.995341 2026] [:error] [pid 13765:tid 13788] [client 52.175.57.167:64277] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXusZbU6eEFCVbA7WHTAvAAAAZU"]
[Fri Jan 30 02:52:22.599359 2026] [:error] [pid 39501:tid 39519] [client 52.175.57.167:63506] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXusZi_BLgXFo3daaZjc4AAAAAo"]
[Fri Jan 30 02:52:22.992547 2026] [:error] [pid 39501:tid 39522] [client 52.175.57.167:64352] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXusZi_BLgXFo3daaZjc4gAAAA0"]
[Fri Jan 30 02:52:23.683756 2026] [:error] [pid 39783:tid 39802] [client 52.175.57.167:63890] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXusZ651RNfzhKG5ppPe4wAAAFE"]
[Fri Jan 30 02:52:24.655529 2026] [:error] [pid 13797:tid 13814] [client 52.175.57.167:64286] [client 52.175.57.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aXusaEZz78bylh5pU4SK0gAAAc8"]
[Fri Jan 30 02:52:27.297367 2026] [:error] [pid 13797:tid 13823] [client 52.175.57.167:64279] [client 52.175.57.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aXusa0Zz78bylh5pU4SK2gAAAdg"]
[Fri Jan 30 02:52:28.646818 2026] [autoindex:error] [pid 13828:tid 13848] [client 52.175.57.167:65186] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 04:17:10.790598 2026] [:error] [pid 47021:tid 47034] [client 144.172.112.54:33980] [client 144.172.112.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aXvARtap1k13UdZUNSQaRwAAAMs"]
[Fri Jan 30 04:43:10.685755 2026] [:error] [pid 46913:tid 46972] [client 43.166.1.243:53736] [client 43.166.1.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXvGXjMWmKL8hOfC3uQAegAAAFU"]
[Fri Jan 30 05:57:37.484545 2026] [autoindex:error] [pid 46914:tid 46985] [client 164.90.142.198:61471] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 30 13:05:12.030320 2026] [:error] [pid 47663:tid 47667] [client 51.75.116.202:35432] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aXw8CEHGTrgIKCqEYbVKNQAAAkI"]
[Fri Jan 30 13:05:15.621414 2026] [:error] [pid 38980:tid 39000] [client 51.75.116.202:53280] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aXw8C7YByxUZEaKXdHpLGQAAAg0"]
[Fri Jan 30 13:05:18.630279 2026] [:error] [pid 46914:tid 46996] [client 51.75.116.202:53284] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aXw8DlgSfJ4kZxNKlb9DTQAAAJI"]
[Fri Jan 30 13:05:21.867197 2026] [:error] [pid 24712:tid 24743] [client 51.75.116.202:53296] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aXw8EYRLQrFiQF3h9-vVbgAAAYI"]
[Fri Jan 30 13:05:25.693472 2026] [:error] [pid 46913:tid 46960] [client 51.75.116.202:36292] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aXw8FTMWmKL8hOfC3uR-BgAAAEk"]
[Fri Jan 30 13:05:29.089326 2026] [:error] [pid 24681:tid 24704] [client 51.75.116.202:36296] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aXw8GYE368IXQpahn0IwpQAAARU"]
[Fri Jan 30 13:05:31.711017 2026] [:error] [pid 38980:tid 38994] [client 51.75.116.202:36308] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aXw8G7YByxUZEaKXdHpLJAAAAgc"]
[Fri Jan 30 13:05:34.773849 2026] [:error] [pid 24681:tid 24683] [client 51.75.116.202:55898] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aXw8HoE368IXQpahn0IwrwAAAQA"]
[Fri Jan 30 13:05:37.835235 2026] [:error] [pid 46912:tid 46946] [client 51.75.116.202:55910] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aXw8IT6yiVW7A9NwFFl-NgAAABY"]
[Fri Jan 30 13:05:41.106156 2026] [:error] [pid 46913:tid 46971] [client 51.75.116.202:55916] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aXw8JTMWmKL8hOfC3uR-EgAAAFQ"]
[Fri Jan 30 13:05:43.946144 2026] [:error] [pid 38980:tid 38995] [client 51.75.116.202:56702] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aXw8J7YByxUZEaKXdHpLLgAAAgg"]
[Fri Jan 30 13:05:46.868657 2026] [:error] [pid 24711:tid 24729] [client 51.75.116.202:56714] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aXw8Kq5Gwh4var6T23LwywAAAU8"]
[Fri Jan 30 13:05:49.795810 2026] [:error] [pid 46913:tid 46958] [client 51.75.116.202:56722] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aXw8LTMWmKL8hOfC3uR-HAAAAEc"]
[Fri Jan 30 13:05:52.540697 2026] [:error] [pid 24711:tid 24735] [client 51.75.116.202:38072] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aXw8MK5Gwh4var6T23Lw0wAAAVU"]
[Fri Jan 30 13:05:55.948659 2026] [:error] [pid 24681:tid 24700] [client 51.75.116.202:38078] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aXw8M4E368IXQpahn0IwxAAAARE"]
[Fri Jan 30 13:05:58.811136 2026] [:error] [pid 24712:tid 24743] [client 51.75.116.202:38086] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aXw8NoRLQrFiQF3h9-vVngAAAYI"]
[Fri Jan 30 13:06:01.614733 2026] [:error] [pid 46914:tid 46989] [client 51.75.116.202:38094] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aXw8OVgSfJ4kZxNKlb9DhAAAAIs"]
[Fri Jan 30 13:15:45.562933 2026] [:error] [pid 24712:tid 24765] [client 43.130.71.237:56590] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXw-gYRLQrFiQF3h9-vZOQAAAZc"]
[Fri Jan 30 13:44:15.647665 2026] [:error] [pid 46913:tid 46952] [client 217.165.250.195:41672] [client 217.165.250.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.250.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXxFLzMWmKL8hOfC3uSGzwAAAEE"]
[Fri Jan 30 16:10:54.630711 2026] [:error] [pid 46914:tid 46993] [client 91.217.249.198:61069] [client 91.217.249.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.198, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aXxnjlgSfJ4kZxNKlb998gAAAI8"]
[Fri Jan 30 16:31:48.585081 2026] [:error] [pid 46913:tid 46952] [client 51.75.119.173:57912] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aXxsdDMWmKL8hOfC3uSl2AAAAEE"]
[Fri Jan 30 16:31:51.302584 2026] [:error] [pid 47021:tid 47029] [client 51.75.119.173:55538] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aXxsd9ap1k13UdZUNSQP4gAAAMY"]
[Fri Jan 30 16:31:53.975957 2026] [:error] [pid 46914:tid 46980] [client 51.75.119.173:55546] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aXxseVgSfJ4kZxNKlb-EaQAAAII"]
[Fri Jan 30 16:31:56.552694 2026] [:error] [pid 46914:tid 46982] [client 51.75.119.173:55554] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aXxsfFgSfJ4kZxNKlb-EbAAAAIQ"]
[Fri Jan 30 16:31:59.185651 2026] [:error] [pid 46912:tid 46931] [client 51.75.119.173:41112] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aXxsfz6yiVW7A9NwFFmt1QAAAAc"]
[Fri Jan 30 16:32:01.827562 2026] [:error] [pid 46914:tid 46988] [client 51.75.119.173:41120] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aXxsgVgSfJ4kZxNKlb-EcwAAAIo"]
[Fri Jan 30 16:32:04.401737 2026] [:error] [pid 47021:tid 47037] [client 51.75.119.173:41130] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aXxshNap1k13UdZUNSQP8QAAAM4"]
[Fri Jan 30 16:32:06.950697 2026] [:error] [pid 38980:tid 38989] [client 51.75.119.173:41138] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aXxshrYByxUZEaKXdHp2DAAAAgI"]
[Fri Jan 30 16:32:09.514093 2026] [:error] [pid 47021:tid 47027] [client 51.75.119.173:39706] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aXxsidap1k13UdZUNSQP-wAAAMQ"]
[Fri Jan 30 16:32:12.041722 2026] [:error] [pid 24681:tid 24696] [client 51.75.119.173:39712] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aXxsjIE368IXQpahn0JXbQAAAQ0"]
[Fri Jan 30 16:32:14.588600 2026] [:error] [pid 24681:tid 24683] [client 51.75.119.173:39724] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aXxsjoE368IXQpahn0JXcgAAAQA"]
[Fri Jan 30 16:32:17.252721 2026] [:error] [pid 46914:tid 46989] [client 51.75.119.173:39726] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aXxskVgSfJ4kZxNKlb-EgAAAAIs"]
[Fri Jan 30 16:32:19.738272 2026] [:error] [pid 46912:tid 46934] [client 51.75.119.173:33856] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aXxskz6yiVW7A9NwFFmt4AAAAAo"]
[Fri Jan 30 16:32:22.381035 2026] [:error] [pid 46914:tid 46999] [client 51.75.119.173:33868] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aXxsllgSfJ4kZxNKlb-EhAAAAJU"]
[Fri Jan 30 16:32:24.857675 2026] [:error] [pid 24711:tid 24734] [client 51.75.119.173:33872] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aXxsmK5Gwh4var6T23JAPwAAAVQ"]
[Fri Jan 30 16:32:27.388787 2026] [:error] [pid 46913:tid 46952] [client 51.75.119.173:33880] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aXxsmzMWmKL8hOfC3uSl9wAAAEE"]
[Fri Jan 30 16:32:30.019352 2026] [:error] [pid 24712:tid 24760] [client 51.75.119.173:34450] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aXxsnoRLQrFiQF3h9-sLlQAAAZI"]
[Fri Jan 30 17:10:42.689774 2026] [:error] [pid 46912:tid 46944] [client 51.77.216.124:50846] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aXx1kj6yiVW7A9NwFFm1fgAAABQ"]
[Fri Jan 30 17:10:45.112399 2026] [:error] [pid 47663:tid 47670] [client 51.77.216.124:50656] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aXx1lUHGTrgIKCqEYbV2gwAAAkU"]
[Fri Jan 30 21:00:21.006567 2026] [:error] [pid 24712:tid 24760] [client 49.7.227.204:40918] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXyrZYRLQrFiQF3h9-tI_gAAAZI"]
[Fri Jan 30 21:21:11.442705 2026] [:error] [pid 47663:tid 47688] [client 97.74.92.57:42918] [client 97.74.92.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.74.92.57, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXywR0HGTrgIKCqEYbWaswAAAlc"]
[Fri Jan 30 21:21:17.180242 2026] [:error] [pid 46914:tid 47002] [client 97.74.92.57:43954] [client 97.74.92.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.74.92.57, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXywTVgSfJ4kZxNKlb_NfgAAAJg"]
[Fri Jan 30 22:12:01.454380 2026] [:error] [pid 46912:tid 46946] [client 45.137.126.13:59269] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXy8MT6yiVW7A9NwFFn2SgAAABY"]
[Fri Jan 30 22:12:16.903660 2026] [:error] [pid 38686:tid 38691] [client 45.137.126.44:63833] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aXy8QAoE8BAjgw1_sAV7DQAAAcE"]
[Fri Jan 30 22:12:44.467622 2026] [:error] [pid 47021:tid 47027] [client 45.137.126.33:44949] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aXy8XNap1k13UdZUNSRc2AAAAMQ"]
[Fri Jan 30 22:12:50.076584 2026] [:error] [pid 24711:tid 24733] [client 45.137.126.8:24185] [client 45.137.126.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aXy8Yq5Gwh4var6T23K4vAAAAVM"]
[Fri Jan 30 22:13:01.919605 2026] [:error] [pid 38686:tid 38707] [client 45.137.126.44:28415] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aXy8bQoE8BAjgw1_sAV8mgAAAdE"]
[Fri Jan 30 22:13:30.951641 2026] [:error] [pid 46912:tid 46948] [client 45.137.126.9:27483] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aXy8ij6yiVW7A9NwFFn5AgAAABg"]
[Fri Jan 30 22:13:41.146243 2026] [:error] [pid 24711:tid 24727] [client 45.137.126.26:37055] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aXy8la5Gwh4var6T23K6xwAAAU0"]
[Fri Jan 30 22:13:42.259309 2026] [:error] [pid 46913:tid 46967] [client 45.137.126.48:23381] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aXy8ljMWmKL8hOfC3uThIwAAAFA"]
[Fri Jan 30 22:13:43.367878 2026] [:error] [pid 24711:tid 24733] [client 45.137.126.6:65253] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aXy8l65Gwh4var6T23K63AAAAVM"]
[Fri Jan 30 22:13:44.464318 2026] [:error] [pid 24711:tid 24730] [client 45.137.126.7:50739] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aXy8mK5Gwh4var6T23K64gAAAVA"]
[Fri Jan 30 22:13:45.579090 2026] [:error] [pid 24712:tid 24761] [client 45.137.126.37:21751] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aXy8mYRLQrFiQF3h9-tikQAAAZM"]
[Fri Jan 30 22:13:52.334007 2026] [:error] [pid 24711:tid 24734] [client 45.137.126.13:54759] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aXy8oK5Gwh4var6T23K7KgAAAVQ"]
[Fri Jan 30 22:13:59.822796 2026] [:error] [pid 24681:tid 24692] [client 45.137.126.48:31999] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aXy8p4E368IXQpahn0KVegAAAQk"]
[Fri Jan 30 22:14:11.743579 2026] [:error] [pid 38686:tid 38697] [client 45.137.126.9:53645] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aXy8swoE8BAjgw1_sAV-_wAAAcc"]
[Fri Jan 30 22:14:16.769005 2026] [:error] [pid 47021:tid 47028] [client 45.137.126.47:59495] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aXy8uNap1k13UdZUNSRhQgAAAMU"]
[Fri Jan 30 22:14:26.260448 2026] [:error] [pid 47021:tid 47037] [client 45.137.126.30:51985] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aXy8wtap1k13UdZUNSRhugAAAM4"]
[Fri Jan 30 22:15:14.285073 2026] [:error] [pid 24712:tid 24759] [client 45.137.126.22:28385] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aXy88oRLQrFiQF3h9-tlVQAAAZE"]
[Fri Jan 30 22:15:21.458412 2026] [:error] [pid 46914:tid 47000] [client 45.137.126.26:49233] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aXy8-VgSfJ4kZxNKlb_n-QAAAJY"]
[Fri Jan 30 22:15:35.031732 2026] [:error] [pid 24681:tid 24684] [client 45.137.126.10:38739] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aXy9B4E368IXQpahn0KYNwAAAQE"]
[Fri Jan 30 22:15:41.378692 2026] [:error] [pid 46913:tid 46958] [client 45.137.126.10:28043] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aXy9DTMWmKL8hOfC3uTljQAAAEc"]
[Fri Jan 30 22:16:01.882665 2026] [:error] [pid 46914:tid 46978] [client 45.137.126.17:47475] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aXy9IVgSfJ4kZxNKlb_pwAAAAIA"]
[Fri Jan 30 22:16:10.321569 2026] [:error] [pid 47663:tid 47683] [client 45.137.126.12:43417] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aXy9KkHGTrgIKCqEYbWvOAAAAlI"]
[Fri Jan 30 22:16:18.200917 2026] [:error] [pid 47663:tid 47666] [client 45.137.126.50:34835] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aXy9MkHGTrgIKCqEYbWvfAAAAkE"]
[Fri Jan 30 22:16:19.584374 2026] [:error] [pid 24681:tid 24707] [client 45.137.126.12:64801] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aXy9M4E368IXQpahn0KZIAAAARg"]
[Fri Jan 30 22:16:20.682618 2026] [:error] [pid 24681:tid 24694] [client 45.137.126.43:44937] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXy9NIE368IXQpahn0KZJQAAAQs"]
[Fri Jan 30 22:16:31.791900 2026] [autoindex:error] [pid 46914:tid 46982] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:32.348242 2026] [autoindex:error] [pid 46914:tid 46990] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:32.906213 2026] [autoindex:error] [pid 46914:tid 46988] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:33.470764 2026] [autoindex:error] [pid 46914:tid 46989] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:38.709071 2026] [autoindex:error] [pid 46914:tid 46998] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:39.268368 2026] [autoindex:error] [pid 46914:tid 46986] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:39.824893 2026] [autoindex:error] [pid 46914:tid 46985] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:40.382731 2026] [autoindex:error] [pid 46914:tid 46989] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:40.944048 2026] [autoindex:error] [pid 46914:tid 47001] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:41.509325 2026] [autoindex:error] [pid 46914:tid 46982] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:42.636316 2026] [autoindex:error] [pid 46914:tid 46990] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:46.969583 2026] [autoindex:error] [pid 46914:tid 46982] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:47.523012 2026] [autoindex:error] [pid 46914:tid 46988] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:54.435753 2026] [autoindex:error] [pid 46914:tid 46998] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:55.003428 2026] [autoindex:error] [pid 46914:tid 46992] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:55.582753 2026] [autoindex:error] [pid 46914:tid 46989] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:56.136914 2026] [autoindex:error] [pid 46914:tid 46987] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:16:59.627495 2026] [autoindex:error] [pid 46914:tid 46983] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:00.192422 2026] [autoindex:error] [pid 46914:tid 46987] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:03.775222 2026] [autoindex:error] [pid 46914:tid 46978] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:09.824140 2026] [autoindex:error] [pid 46914:tid 46981] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:10.378882 2026] [autoindex:error] [pid 46914:tid 46991] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:10.930120 2026] [autoindex:error] [pid 46914:tid 47000] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:30.308564 2026] [autoindex:error] [pid 46914:tid 46982] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:33.761352 2026] [autoindex:error] [pid 46914:tid 46998] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:34.314646 2026] [autoindex:error] [pid 46914:tid 46978] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:36.027930 2026] [autoindex:error] [pid 46914:tid 46990] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:36.583472 2026] [autoindex:error] [pid 46914:tid 46985] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:37.143004 2026] [autoindex:error] [pid 46914:tid 46997] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:49.201209 2026] [autoindex:error] [pid 46914:tid 46991] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:17:53.217427 2026] [autoindex:error] [pid 46914:tid 46983] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:09.928820 2026] [autoindex:error] [pid 46914:tid 46999] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:10.479768 2026] [autoindex:error] [pid 46914:tid 46987] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:11.035706 2026] [autoindex:error] [pid 46914:tid 46994] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:11.588087 2026] [autoindex:error] [pid 46914:tid 46997] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:12.149109 2026] [autoindex:error] [pid 46914:tid 47002] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:12.703274 2026] [autoindex:error] [pid 46914:tid 46981] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:13.258129 2026] [autoindex:error] [pid 46914:tid 46990] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:13.819965 2026] [autoindex:error] [pid 46914:tid 46987] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:16.767357 2026] [autoindex:error] [pid 46914:tid 46981] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:19.979427 2026] [autoindex:error] [pid 46914:tid 46989] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:20.541220 2026] [autoindex:error] [pid 46914:tid 46978] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:21.097690 2026] [autoindex:error] [pid 46914:tid 46991] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:24.059925 2026] [autoindex:error] [pid 46914:tid 46978] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:24.626190 2026] [autoindex:error] [pid 46914:tid 46997] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:25.177777 2026] [autoindex:error] [pid 46914:tid 47001] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:19:25.730336 2026] [autoindex:error] [pid 46914:tid 46998] [client 45.137.126.13:58429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:20:18.918915 2026] [autoindex:error] [pid 38980:tid 38997] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:20:40.961567 2026] [autoindex:error] [pid 38980:tid 39007] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:20:49.985310 2026] [autoindex:error] [pid 38980:tid 38993] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:20:51.689180 2026] [autoindex:error] [pid 38980:tid 38997] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:20:59.963854 2026] [autoindex:error] [pid 38980:tid 38989] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:21:00.521898 2026] [autoindex:error] [pid 38980:tid 39004] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:21:01.101837 2026] [autoindex:error] [pid 38980:tid 39007] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:21:01.661179 2026] [autoindex:error] [pid 38980:tid 38991] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:21:02.226249 2026] [autoindex:error] [pid 38980:tid 39001] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:21:02.778998 2026] [autoindex:error] [pid 38980:tid 39008] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:21:03.330438 2026] [autoindex:error] [pid 38980:tid 38995] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:21:03.880218 2026] [autoindex:error] [pid 38980:tid 39002] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:21:04.436613 2026] [autoindex:error] [pid 38980:tid 38987] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 30 22:21:41.693257 2026] [autoindex:error] [pid 38980:tid 38989] [client 45.137.126.26:57335] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 00:56:06.794920 2026] [:error] [pid 59661:tid 59715] [client 203.162.234.20:37232] [client 203.162.234.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.162.234.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXzippw_qINw5Uk-43XNugAAAFg"]
[Sat Jan 31 00:56:10.177954 2026] [:error] [pid 59661:tid 59714] [client 116.103.108.158:42652] [client 116.103.108.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.103.108.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXziqpw_qINw5Uk-43XNwAAAAFc"]
[Sat Jan 31 00:56:39.734213 2026] [:error] [pid 59662:tid 59723] [client 8.217.89.127:34014] [client 8.217.89.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.217.89.127, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aXzixw7k73dlTgySEchMEwAAAIU"]
[Sat Jan 31 01:23:02.654599 2026] [:error] [pid 59662:tid 59729] [client 51.120.69.143:15487] [client 51.120.69.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aXzo9g7k73dlTgySEchV3AAAAIs"]
[Sat Jan 31 01:23:03.727645 2026] [:error] [pid 59661:tid 59697] [client 51.120.69.143:19216] [client 51.120.69.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aXzo95w_qINw5Uk-43XZkgAAAEY"]
[Sat Jan 31 01:23:04.815457 2026] [:error] [pid 59661:tid 59713] [client 51.120.69.143:50658] [client 51.120.69.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aXzo-Jw_qINw5Uk-43XZlgAAAFY"]
[Sat Jan 31 01:23:05.881803 2026] [:error] [pid 60001:tid 60006] [client 51.120.69.143:50242] [client 51.120.69.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aXzo-aM2ziQ7JN4IjDxPfgAAAQM"]
[Sat Jan 31 02:16:31.978119 2026] [:error] [pid 10754:tid 10805] [client 170.106.11.141:41298] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aXz1f-Uua7wHT-0pjVRbXwAAA9Q"]
[Sat Jan 31 03:35:09.457800 2026] [:error] [pid 39339:tid 39361] [client 120.71.59.24:33204] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aX0H7cWi-IjigR3oHY5cYAAAANQ"]
[Sat Jan 31 03:35:47.002692 2026] [autoindex:error] [pid 39339:tid 39345] [client 4.193.194.148:34332] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:35:56.871996 2026] [autoindex:error] [pid 39339:tid 39352] [client 4.193.194.148:34332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:35:59.259427 2026] [autoindex:error] [pid 39339:tid 39364] [client 4.193.194.148:34332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:36:00.588046 2026] [:error] [pid 39339:tid 39342] [client 4.193.194.148:34332] [client 4.193.194.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/"] [unique_id "aX0IIMWi-IjigR3oHY5cvgAAAME"]
[Sat Jan 31 03:36:00.944103 2026] [:error] [pid 39242:tid 39276] [client 4.193.194.148:33304] [client 4.193.194.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/"] [unique_id "aX0IINOgXnkKGGSSCINB6gAAABY"]
[Sat Jan 31 03:36:01.295202 2026] [:error] [pid 39244:tid 39313] [client 4.193.194.148:31578] [client 4.193.194.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/"] [unique_id "aX0IIXo-KRTvg3jHEDykugAAAIQ"]
[Sat Jan 31 03:36:01.646754 2026] [:error] [pid 39244:tid 39312] [client 4.193.194.148:33286] [client 4.193.194.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/"] [unique_id "aX0IIXo-KRTvg3jHEDykvAAAAIM"]
[Sat Jan 31 03:55:31.871209 2026] [autoindex:error] [pid 39244:tid 39322] [client 13.75.54.243:7272] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:32.116804 2026] [autoindex:error] [pid 39244:tid 39310] [client 13.75.54.243:7272] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/07/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:33.310411 2026] [autoindex:error] [pid 39244:tid 39325] [client 13.75.54.243:7272] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:33.433092 2026] [autoindex:error] [pid 39244:tid 39332] [client 13.75.54.243:7272] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:33.550690 2026] [:error] [pid 39244:tid 39319] [client 13.75.54.243:7272] [client 13.75.54.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aX0MtXo-KRTvg3jHEDyvIwAAAIk"]
[Sat Jan 31 03:55:34.031885 2026] [autoindex:error] [pid 39242:tid 39256] [client 13.75.54.243:54496] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:34.149208 2026] [:error] [pid 39242:tid 39268] [client 13.75.54.243:54496] [client 13.75.54.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aX0MttOgXnkKGGSSCINI8wAAAA4"]
[Sat Jan 31 03:55:34.633245 2026] [autoindex:error] [pid 39339:tid 39365] [client 13.75.54.243:7207] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:34.751662 2026] [:error] [pid 39339:tid 39363] [client 13.75.54.243:7207] [client 13.75.54.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aX0MtsWi-IjigR3oHY5o9gAAANY"]
[Sat Jan 31 03:55:35.229545 2026] [autoindex:error] [pid 39243:tid 39295] [client 13.75.54.243:7898] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:35.347140 2026] [:error] [pid 39243:tid 39286] [client 13.75.54.243:7898] [client 13.75.54.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aX0MtxBW1k4JK8a4v0YhuAAAAEQ"]
[Sat Jan 31 03:55:35.821949 2026] [:error] [pid 39244:tid 39323] [client 13.75.54.243:54490] [client 13.75.54.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aX0Mt3o-KRTvg3jHEDyvJwAAAI0"]
[Sat Jan 31 03:55:36.335351 2026] [autoindex:error] [pid 39339:tid 39354] [client 13.75.54.243:7311] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:36.459476 2026] [:error] [pid 39339:tid 39350] [client 13.75.54.243:7311] [client 13.75.54.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aX0MuMWi-IjigR3oHY5o-QAAAMk"]
[Sat Jan 31 03:55:36.941851 2026] [autoindex:error] [pid 39243:tid 39296] [client 13.75.54.243:7245] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:37.064214 2026] [autoindex:error] [pid 39243:tid 39303] [client 13.75.54.243:7245] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:37.186568 2026] [autoindex:error] [pid 39243:tid 39297] [client 13.75.54.243:7245] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:37.304450 2026] [:error] [pid 39243:tid 39306] [client 13.75.54.243:7245] [client 13.75.54.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aX0MuRBW1k4JK8a4v0YhvwAAAFg"]
[Sat Jan 31 03:55:37.812046 2026] [autoindex:error] [pid 39339:tid 39352] [client 13.75.54.243:7274] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:37.943448 2026] [autoindex:error] [pid 39339:tid 39365] [client 13.75.54.243:7274] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:38.068727 2026] [:error] [pid 39339:tid 39364] [client 13.75.54.243:7274] [client 13.75.54.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aX0MusWi-IjigR3oHY5pAAAAANc"]
[Sat Jan 31 03:55:38.550000 2026] [autoindex:error] [pid 39244:tid 39313] [client 13.75.54.243:7332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:38.672357 2026] [autoindex:error] [pid 39244:tid 39324] [client 13.75.54.243:7332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:38.796484 2026] [autoindex:error] [pid 39244:tid 39329] [client 13.75.54.243:7332] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:55:41.105703 2026] [:error] [pid 39244:tid 39314] [client 13.75.54.243:7332] [client 13.75.54.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.75.54.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aX0MvXo-KRTvg3jHEDyvMwAAAIU"]
[Sat Jan 31 05:19:46.412482 2026] [:error] [pid 39242:tid 39264] [client 64.225.60.178:47702] [client 64.225.60.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.225.60.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aX0gctOgXnkKGGSSCINn2QAAAAo"]
[Sat Jan 31 05:59:21.771333 2026] [:error] [pid 20210:tid 20228] [client 65.52.173.153:3231] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/444.php"] [unique_id "aX0puXKy7OGBlTY8MCe8rwAAARA"]
[Sat Jan 31 05:59:22.059994 2026] [:error] [pid 20210:tid 20233] [client 65.52.173.153:3201] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/444.php"] [unique_id "aX0punKy7OGBlTY8MCe8sAAAARU"]
[Sat Jan 31 05:59:22.391937 2026] [:error] [pid 20836:tid 20855] [client 65.52.173.153:3243] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/444.php"] [unique_id "aX0puoACllgWRWVrYITsmQAAAU4"]
[Sat Jan 31 05:59:22.688842 2026] [:error] [pid 20210:tid 20215] [client 65.52.173.153:3230] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/444.php"] [unique_id "aX0punKy7OGBlTY8MCe8sgAAAQM"]
[Sat Jan 31 05:59:22.941670 2026] [:error] [pid 39339:tid 39354] [client 65.52.173.153:3222] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aX0pusWi-IjigR3oHY6emAAAAM0"]
[Sat Jan 31 05:59:23.214168 2026] [:error] [pid 39244:tid 39324] [client 65.52.173.153:4421] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aX0pu3o-KRTvg3jHEDze5AAAAI4"]
[Sat Jan 31 05:59:23.458279 2026] [:error] [pid 39339:tid 39349] [client 65.52.173.153:3259] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aX0pu8Wi-IjigR3oHY6emgAAAMg"]
[Sat Jan 31 05:59:23.745751 2026] [:error] [pid 20836:tid 20853] [client 65.52.173.153:3223] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aX0pu4ACllgWRWVrYITsnAAAAUw"]
[Sat Jan 31 05:59:23.991367 2026] [:error] [pid 20836:tid 20847] [client 65.52.173.153:4447] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "aX0pu4ACllgWRWVrYITsnQAAAUY"]
[Sat Jan 31 05:59:24.226697 2026] [:error] [pid 20836:tid 20862] [client 65.52.173.153:3260] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "aX0pvIACllgWRWVrYITsnwAAAVU"]
[Sat Jan 31 05:59:24.461049 2026] [:error] [pid 20836:tid 20849] [client 65.52.173.153:3235] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "aX0pvIACllgWRWVrYITsoAAAAUg"]
[Sat Jan 31 05:59:24.773063 2026] [:error] [pid 39242:tid 39278] [client 65.52.173.153:4420] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "aX0pvNOgXnkKGGSSCINy8AAAABg"]
[Sat Jan 31 05:59:25.028075 2026] [:error] [pid 20210:tid 20232] [client 65.52.173.153:4440] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file88.php"] [unique_id "aX0pvXKy7OGBlTY8MCe8tAAAARQ"]
[Sat Jan 31 05:59:25.280448 2026] [:error] [pid 39339:tid 39365] [client 65.52.173.153:4425] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file88.php"] [unique_id "aX0pvcWi-IjigR3oHY6enQAAANg"]
[Sat Jan 31 05:59:25.541940 2026] [:error] [pid 39339:tid 39356] [client 65.52.173.153:3250] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file88.php"] [unique_id "aX0pvcWi-IjigR3oHY6engAAAM8"]
[Sat Jan 31 05:59:25.815670 2026] [:error] [pid 39339:tid 39348] [client 65.52.173.153:3218] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file88.php"] [unique_id "aX0pvcWi-IjigR3oHY6enwAAAMc"]
[Sat Jan 31 05:59:26.060412 2026] [:error] [pid 20210:tid 20230] [client 65.52.173.153:3211] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aX0pvnKy7OGBlTY8MCe8twAAARI"]
[Sat Jan 31 05:59:26.327936 2026] [:error] [pid 39243:tid 39302] [client 65.52.173.153:3248] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aX0pvhBW1k4JK8a4v0ZODAAAAFQ"]
[Sat Jan 31 05:59:26.574682 2026] [:error] [pid 39242:tid 39273] [client 65.52.173.153:4438] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aX0pvtOgXnkKGGSSCINy8wAAABM"]
[Sat Jan 31 05:59:26.882299 2026] [:error] [pid 39242:tid 39269] [client 65.52.173.153:4426] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aX0pvtOgXnkKGGSSCINy9QAAAA8"]
[Sat Jan 31 05:59:27.139058 2026] [:error] [pid 20836:tid 20864] [client 65.52.173.153:3242] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "aX0pv4ACllgWRWVrYITspQAAAVc"]
[Sat Jan 31 05:59:27.380440 2026] [:error] [pid 39244:tid 39313] [client 65.52.173.153:4417] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "aX0pv3o-KRTvg3jHEDze6wAAAIQ"]
[Sat Jan 31 05:59:27.655427 2026] [:error] [pid 20836:tid 20854] [client 65.52.173.153:4436] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "aX0pv4ACllgWRWVrYITspgAAAU0"]
[Sat Jan 31 05:59:27.933489 2026] [:error] [pid 20836:tid 20861] [client 65.52.173.153:3258] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "aX0pv4ACllgWRWVrYITspwAAAVQ"]
[Sat Jan 31 05:59:28.175446 2026] [:error] [pid 39244:tid 39325] [client 65.52.173.153:4446] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "aX0pwHo-KRTvg3jHEDze7QAAAI8"]
[Sat Jan 31 05:59:28.414092 2026] [:error] [pid 39242:tid 39255] [client 65.52.173.153:3245] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "aX0pwNOgXnkKGGSSCINy9gAAAAE"]
[Sat Jan 31 05:59:28.664691 2026] [:error] [pid 39339:tid 39360] [client 65.52.173.153:4429] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "aX0pwMWi-IjigR3oHY6eoQAAANM"]
[Sat Jan 31 05:59:28.908257 2026] [:error] [pid 39244:tid 39328] [client 65.52.173.153:4459] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "aX0pwHo-KRTvg3jHEDze7gAAAJI"]
[Sat Jan 31 05:59:29.186685 2026] [:error] [pid 39244:tid 39322] [client 65.52.173.153:3236] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aX0pwXo-KRTvg3jHEDze7wAAAIw"]
[Sat Jan 31 05:59:29.430761 2026] [:error] [pid 39242:tid 39276] [client 65.52.173.153:3246] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aX0pwdOgXnkKGGSSCINy-AAAABY"]
[Sat Jan 31 05:59:29.664716 2026] [:error] [pid 20210:tid 20217] [client 65.52.173.153:3214] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aX0pwXKy7OGBlTY8MCe8ugAAAQU"]
[Sat Jan 31 05:59:29.970449 2026] [:error] [pid 39339:tid 39351] [client 65.52.173.153:4423] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aX0pwcWi-IjigR3oHY6eowAAAMo"]
[Sat Jan 31 05:59:30.261608 2026] [:error] [pid 39243:tid 39298] [client 65.52.173.153:3206] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aX0pwhBW1k4JK8a4v0ZODQAAAFA"]
[Sat Jan 31 05:59:30.509866 2026] [:error] [pid 39339:tid 39343] [client 65.52.173.153:3226] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aX0pwsWi-IjigR3oHY6epAAAAMI"]
[Sat Jan 31 05:59:30.747818 2026] [:error] [pid 39339:tid 39354] [client 65.52.173.153:4476] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aX0pwsWi-IjigR3oHY6epgAAAM0"]
[Sat Jan 31 05:59:30.986322 2026] [:error] [pid 20210:tid 20231] [client 65.52.173.153:3227] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "aX0pwnKy7OGBlTY8MCe8vAAAARM"]
[Sat Jan 31 05:59:31.269650 2026] [:error] [pid 20836:tid 20863] [client 65.52.173.153:3244] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aX0pw4ACllgWRWVrYITsqgAAAVY"]
[Sat Jan 31 05:59:31.577082 2026] [:error] [pid 20836:tid 20851] [client 65.52.173.153:3251] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aX0pw4ACllgWRWVrYITsqwAAAUo"]
[Sat Jan 31 05:59:31.835862 2026] [:error] [pid 39242:tid 39275] [client 65.52.173.153:3247] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aX0pw9OgXnkKGGSSCINy-wAAABU"]
[Sat Jan 31 05:59:32.075001 2026] [:error] [pid 39243:tid 39293] [client 65.52.173.153:3239] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aX0pxBBW1k4JK8a4v0ZODwAAAEs"]
[Sat Jan 31 05:59:32.414652 2026] [:error] [pid 20836:tid 20846] [client 65.52.173.153:3212] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aX0pxIACllgWRWVrYITsrwAAAUU"]
[Sat Jan 31 05:59:32.723788 2026] [:error] [pid 20836:tid 20849] [client 65.52.173.153:3207] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aX0pxIACllgWRWVrYITssQAAAUg"]
[Sat Jan 31 05:59:32.974664 2026] [:error] [pid 20836:tid 20850] [client 65.52.173.153:4434] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aX0pxIACllgWRWVrYITssgAAAUk"]
[Sat Jan 31 05:59:33.236034 2026] [:error] [pid 39242:tid 39267] [client 65.52.173.153:3252] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aX0pxdOgXnkKGGSSCINy_QAAAA0"]
[Sat Jan 31 05:59:33.548227 2026] [:error] [pid 39244:tid 39324] [client 65.52.173.153:3237] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aX0pxXo-KRTvg3jHEDze8gAAAI4"]
[Sat Jan 31 05:59:33.805359 2026] [:error] [pid 39242:tid 39254] [client 65.52.173.153:4418] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aX0pxdOgXnkKGGSSCINy_gAAAAA"]
[Sat Jan 31 05:59:34.064273 2026] [:error] [pid 39339:tid 39365] [client 65.52.173.153:3233] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aX0pxsWi-IjigR3oHY6eqwAAANg"]
[Sat Jan 31 05:59:34.318090 2026] [:error] [pid 39242:tid 39256] [client 65.52.173.153:3225] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aX0pxtOgXnkKGGSSCINy_wAAAAI"]
[Sat Jan 31 05:59:34.565148 2026] [:error] [pid 39243:tid 39291] [client 65.52.173.153:3255] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hk.php"] [unique_id "aX0pxhBW1k4JK8a4v0ZOEgAAAEk"]
[Sat Jan 31 05:59:34.851901 2026] [:error] [pid 39243:tid 39290] [client 65.52.173.153:4477] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hk.php"] [unique_id "aX0pxhBW1k4JK8a4v0ZOEwAAAEg"]
[Sat Jan 31 05:59:35.106127 2026] [:error] [pid 20210:tid 20236] [client 65.52.173.153:3989] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hk.php"] [unique_id "aX0px3Ky7OGBlTY8MCe8vQAAARg"]
[Sat Jan 31 05:59:35.405693 2026] [:error] [pid 39244:tid 39317] [client 65.52.173.153:4441] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hk.php"] [unique_id "aX0px3o-KRTvg3jHEDze9AAAAIc"]
[Sat Jan 31 05:59:35.739458 2026] [:error] [pid 39243:tid 39304] [client 65.52.173.153:3213] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpa.php"] [unique_id "aX0pxxBW1k4JK8a4v0ZOFAAAAFY"]
[Sat Jan 31 05:59:36.059527 2026] [:error] [pid 39243:tid 39294] [client 65.52.173.153:4428] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpa.php"] [unique_id "aX0pyBBW1k4JK8a4v0ZOFQAAAEw"]
[Sat Jan 31 05:59:36.454151 2026] [:error] [pid 39243:tid 39287] [client 65.52.173.153:4011] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpa.php"] [unique_id "aX0pyBBW1k4JK8a4v0ZOFgAAAEU"]
[Sat Jan 31 05:59:36.727113 2026] [:error] [pid 20836:tid 20848] [client 65.52.173.153:4450] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpa.php"] [unique_id "aX0pyIACllgWRWVrYITstQAAAUc"]
[Sat Jan 31 05:59:36.973210 2026] [:error] [pid 20836:tid 20864] [client 65.52.173.153:4461] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aX0pyIACllgWRWVrYITstgAAAVc"]
[Sat Jan 31 05:59:37.218987 2026] [:error] [pid 20836:tid 20854] [client 65.52.173.153:4467] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aX0pyYACllgWRWVrYITstwAAAU0"]
[Sat Jan 31 05:59:37.527185 2026] [:error] [pid 20210:tid 20229] [client 65.52.173.153:3228] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aX0pyXKy7OGBlTY8MCe8wAAAARE"]
[Sat Jan 31 05:59:37.815089 2026] [:error] [pid 39243:tid 39306] [client 65.52.173.153:4478] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aX0pyRBW1k4JK8a4v0ZOGQAAAFg"]
[Sat Jan 31 05:59:38.151251 2026] [:error] [pid 20836:tid 20847] [client 65.52.173.153:4430] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ssss.php"] [unique_id "aX0pyoACllgWRWVrYITsugAAAUY"]
[Sat Jan 31 05:59:38.418820 2026] [:error] [pid 20836:tid 20865] [client 65.52.173.153:4419] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ssss.php"] [unique_id "aX0pyoACllgWRWVrYITsvAAAAVg"]
[Sat Jan 31 05:59:38.676143 2026] [:error] [pid 20836:tid 20850] [client 65.52.173.153:3972] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ssss.php"] [unique_id "aX0pyoACllgWRWVrYITsvQAAAUk"]
[Sat Jan 31 05:59:38.975940 2026] [:error] [pid 39243:tid 39282] [client 65.52.173.153:4444] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ssss.php"] [unique_id "aX0pyhBW1k4JK8a4v0ZOGgAAAEA"]
[Sat Jan 31 05:59:39.234066 2026] [:error] [pid 20210:tid 20213] [client 65.52.173.153:4416] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ut.php"] [unique_id "aX0py3Ky7OGBlTY8MCe8wQAAAQE"]
[Sat Jan 31 05:59:39.619859 2026] [:error] [pid 20210:tid 20216] [client 65.52.173.153:4422] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ut.php"] [unique_id "aX0py3Ky7OGBlTY8MCe8wgAAAQQ"]
[Sat Jan 31 05:59:39.945055 2026] [:error] [pid 39244:tid 39331] [client 65.52.173.153:3209] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ut.php"] [unique_id "aX0py3o-KRTvg3jHEDze9gAAAJU"]
[Sat Jan 31 05:59:40.182881 2026] [:error] [pid 20210:tid 20221] [client 65.52.173.153:4470] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ut.php"] [unique_id "aX0pzHKy7OGBlTY8MCe8xQAAAQk"]
[Sat Jan 31 05:59:40.512595 2026] [:error] [pid 39243:tid 39299] [client 65.52.173.153:4439] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "aX0pzBBW1k4JK8a4v0ZOGwAAAFE"]
[Sat Jan 31 05:59:40.756160 2026] [:error] [pid 39339:tid 39345] [client 65.52.173.153:3992] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "aX0pzMWi-IjigR3oHY6erQAAAMQ"]
[Sat Jan 31 05:59:41.043149 2026] [:error] [pid 39339:tid 39355] [client 65.52.173.153:4449] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "aX0pzcWi-IjigR3oHY6ergAAAM4"]
[Sat Jan 31 05:59:41.354787 2026] [:error] [pid 39243:tid 39301] [client 65.52.173.153:3240] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "aX0pzRBW1k4JK8a4v0ZOHAAAAFM"]
[Sat Jan 31 05:59:41.592454 2026] [:error] [pid 39242:tid 39276] [client 65.52.173.153:4468] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classgoto24.php"] [unique_id "aX0pzdOgXnkKGGSSCINzBAAAABY"]
[Sat Jan 31 05:59:41.848659 2026] [:error] [pid 20210:tid 20218] [client 65.52.173.153:3253] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classgoto24.php"] [unique_id "aX0pzXKy7OGBlTY8MCe8xwAAAQY"]
[Sat Jan 31 05:59:42.082970 2026] [:error] [pid 39242:tid 39274] [client 65.52.173.153:4471] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classgoto24.php"] [unique_id "aX0pztOgXnkKGGSSCINzBgAAABQ"]
[Sat Jan 31 05:59:42.340843 2026] [:error] [pid 39242:tid 39259] [client 65.52.173.153:3221] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classgoto24.php"] [unique_id "aX0pztOgXnkKGGSSCINzBwAAAAU"]
[Sat Jan 31 05:59:42.631727 2026] [:error] [pid 39242:tid 39275] [client 65.52.173.153:3204] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/030.php"] [unique_id "aX0pztOgXnkKGGSSCINzCAAAABU"]
[Sat Jan 31 05:59:42.878070 2026] [:error] [pid 39242:tid 39258] [client 65.52.173.153:4465] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/030.php"] [unique_id "aX0pztOgXnkKGGSSCINzCgAAAAQ"]
[Sat Jan 31 05:59:43.182694 2026] [:error] [pid 39242:tid 39256] [client 65.52.173.153:4442] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/030.php"] [unique_id "aX0pz9OgXnkKGGSSCINzDAAAAAI"]
[Sat Jan 31 05:59:43.427375 2026] [:error] [pid 39242:tid 39277] [client 65.52.173.153:4435] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/030.php"] [unique_id "aX0pz9OgXnkKGGSSCINzDgAAABc"]
[Sat Jan 31 05:59:43.702138 2026] [:error] [pid 39339:tid 39349] [client 65.52.173.153:4473] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thh.php"] [unique_id "aX0pz8Wi-IjigR3oHY6esgAAAMg"]
[Sat Jan 31 05:59:43.936844 2026] [:error] [pid 39242:tid 39268] [client 65.52.173.153:3997] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thh.php"] [unique_id "aX0pz9OgXnkKGGSSCINzEAAAAA4"]
[Sat Jan 31 05:59:44.185470 2026] [:error] [pid 20836:tid 20848] [client 65.52.173.153:3990] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thh.php"] [unique_id "aX0p0IACllgWRWVrYITswgAAAUc"]
[Sat Jan 31 05:59:44.476924 2026] [:error] [pid 20836:tid 20860] [client 65.52.173.153:3241] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thh.php"] [unique_id "aX0p0IACllgWRWVrYITsxQAAAVM"]
[Sat Jan 31 05:59:44.783971 2026] [:error] [pid 39244:tid 39321] [client 65.52.173.153:4017] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fffff.php"] [unique_id "aX0p0Ho-KRTvg3jHEDze9wAAAIs"]
[Sat Jan 31 05:59:45.022097 2026] [:error] [pid 39244:tid 39323] [client 65.52.173.153:3994] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fffff.php"] [unique_id "aX0p0Xo-KRTvg3jHEDze-AAAAI0"]
[Sat Jan 31 05:59:45.363254 2026] [:error] [pid 39242:tid 39255] [client 65.52.173.153:4433] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fffff.php"] [unique_id "aX0p0dOgXnkKGGSSCINzEQAAAAE"]
[Sat Jan 31 05:59:45.645937 2026] [:error] [pid 20210:tid 20226] [client 65.52.173.153:3263] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fffff.php"] [unique_id "aX0p0XKy7OGBlTY8MCe8yAAAAQ4"]
[Sat Jan 31 05:59:47.051001 2026] [:error] [pid 39339:tid 39346] [client 65.52.173.153:4431] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indo.php"] [unique_id "aX0p08Wi-IjigR3oHY6etgAAAMU"]
[Sat Jan 31 05:59:47.367653 2026] [:error] [pid 39339:tid 39358] [client 65.52.173.153:3232] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indo.php"] [unique_id "aX0p08Wi-IjigR3oHY6euAAAANE"]
[Sat Jan 31 05:59:47.609532 2026] [:error] [pid 39339:tid 39365] [client 65.52.173.153:4443] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indo.php"] [unique_id "aX0p08Wi-IjigR3oHY6eugAAANg"]
[Sat Jan 31 05:59:48.113540 2026] [:error] [pid 20836:tid 20851] [client 65.52.173.153:3205] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indo.php"] [unique_id "aX0p1IACllgWRWVrYITsxwAAAUo"]
[Sat Jan 31 05:59:48.566440 2026] [:error] [pid 39244:tid 39313] [client 65.52.173.153:3213] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fileas.php"] [unique_id "aX0p1Ho-KRTvg3jHEDze-gAAAIQ"]
[Sat Jan 31 05:59:48.867951 2026] [:error] [pid 39243:tid 39288] [client 65.52.173.153:4469] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fileas.php"] [unique_id "aX0p1BBW1k4JK8a4v0ZOHgAAAEY"]
[Sat Jan 31 05:59:49.181629 2026] [:error] [pid 39243:tid 39285] [client 65.52.173.153:4026] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fileas.php"] [unique_id "aX0p1RBW1k4JK8a4v0ZOHwAAAEM"]
[Sat Jan 31 05:59:49.444511 2026] [:error] [pid 39243:tid 39293] [client 65.52.173.153:4000] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fileas.php"] [unique_id "aX0p1RBW1k4JK8a4v0ZOIAAAAEs"]
[Sat Jan 31 05:59:49.784497 2026] [:error] [pid 39243:tid 39303] [client 65.52.173.153:4432] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yellow.php"] [unique_id "aX0p1RBW1k4JK8a4v0ZOIQAAAFU"]
[Sat Jan 31 05:59:50.174266 2026] [:error] [pid 39243:tid 39290] [client 65.52.173.153:4371] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yellow.php"] [unique_id "aX0p1hBW1k4JK8a4v0ZOIwAAAEg"]
[Sat Jan 31 05:59:50.449710 2026] [:error] [pid 39339:tid 39359] [client 65.52.173.153:3219] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yellow.php"] [unique_id "aX0p1sWi-IjigR3oHY6evQAAANI"]
[Sat Jan 31 05:59:50.877272 2026] [:error] [pid 39243:tid 39294] [client 65.52.173.153:3980] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yellow.php"] [unique_id "aX0p1hBW1k4JK8a4v0ZOJwAAAEw"]
[Sat Jan 31 05:59:51.129860 2026] [:error] [pid 20836:tid 20850] [client 65.52.173.153:3257] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/33.php"] [unique_id "aX0p14ACllgWRWVrYITsywAAAUk"]
[Sat Jan 31 05:59:51.374657 2026] [:error] [pid 20836:tid 20843] [client 65.52.173.153:4373] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/33.php"] [unique_id "aX0p14ACllgWRWVrYITszAAAAUI"]
[Sat Jan 31 05:59:51.647586 2026] [:error] [pid 20836:tid 20856] [client 65.52.173.153:3970] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/33.php"] [unique_id "aX0p14ACllgWRWVrYITszQAAAU8"]
[Sat Jan 31 05:59:51.947317 2026] [:error] [pid 20210:tid 20233] [client 65.52.173.153:4008] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/33.php"] [unique_id "aX0p13Ky7OGBlTY8MCe8zAAAARU"]
[Sat Jan 31 05:59:52.271389 2026] [:error] [pid 39243:tid 39289] [client 65.52.173.153:3254] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aX0p2BBW1k4JK8a4v0ZOKgAAAEc"]
[Sat Jan 31 05:59:52.579081 2026] [:error] [pid 20836:tid 20844] [client 65.52.173.153:4437] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aX0p2IACllgWRWVrYITs0gAAAUM"]
[Sat Jan 31 05:59:52.881965 2026] [:error] [pid 39339:tid 39349] [client 65.52.173.153:4475] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aX0p2MWi-IjigR3oHY6evwAAAMg"]
[Sat Jan 31 05:59:53.516985 2026] [:error] [pid 20210:tid 20213] [client 65.52.173.153:3971] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aX0p2XKy7OGBlTY8MCe8zwAAAQE"]
[Sat Jan 31 05:59:53.965633 2026] [:error] [pid 39242:tid 39274] [client 65.52.173.153:4472] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/he.php"] [unique_id "aX0p2dOgXnkKGGSSCINzFQAAABQ"]
[Sat Jan 31 05:59:54.387391 2026] [:error] [pid 39339:tid 39347] [client 65.52.173.153:3979] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/he.php"] [unique_id "aX0p2sWi-IjigR3oHY6ewgAAAMY"]
[Sat Jan 31 05:59:54.936019 2026] [:error] [pid 20836:tid 20847] [client 65.52.173.153:4424] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/he.php"] [unique_id "aX0p2oACllgWRWVrYITs1AAAAUY"]
[Sat Jan 31 05:59:55.219382 2026] [:error] [pid 20210:tid 20230] [client 65.52.173.153:3229] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/he.php"] [unique_id "aX0p23Ky7OGBlTY8MCe80QAAARI"]
[Sat Jan 31 05:59:55.499363 2026] [:error] [pid 20836:tid 20865] [client 65.52.173.153:4353] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thxt.php"] [unique_id "aX0p24ACllgWRWVrYITs1gAAAVg"]
[Sat Jan 31 05:59:55.809782 2026] [:error] [pid 20210:tid 20212] [client 65.52.173.153:4462] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thxt.php"] [unique_id "aX0p23Ky7OGBlTY8MCe80wAAAQA"]
[Sat Jan 31 05:59:56.546956 2026] [:error] [pid 39242:tid 39258] [client 65.52.173.153:4383] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thxt.php"] [unique_id "aX0p3NOgXnkKGGSSCINzFwAAAAQ"]
[Sat Jan 31 05:59:56.988361 2026] [:error] [pid 39243:tid 39290] [client 65.52.173.153:4456] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thxt.php"] [unique_id "aX0p3BBW1k4JK8a4v0ZOLwAAAEg"]
[Sat Jan 31 05:59:57.322425 2026] [:error] [pid 20210:tid 20227] [client 65.52.173.153:3261] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "aX0p3XKy7OGBlTY8MCe81QAAAQ8"]
[Sat Jan 31 05:59:57.647472 2026] [:error] [pid 39242:tid 39261] [client 65.52.173.153:3201] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "aX0p3dOgXnkKGGSSCINzGAAAAAc"]
[Sat Jan 31 05:59:57.906994 2026] [:error] [pid 20836:tid 20853] [client 65.52.173.153:3208] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "aX0p3YACllgWRWVrYITs3AAAAUw"]
[Sat Jan 31 05:59:58.239431 2026] [:error] [pid 39243:tid 39286] [client 65.52.173.153:4357] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "aX0p3hBW1k4JK8a4v0ZOMQAAAEQ"]
[Sat Jan 31 05:59:58.663790 2026] [:error] [pid 39339:tid 39365] [client 65.52.173.153:3977] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aX0p3sWi-IjigR3oHY6exQAAANg"]
[Sat Jan 31 05:59:59.079636 2026] [:error] [pid 39243:tid 39297] [client 65.52.173.153:3249] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aX0p3xBW1k4JK8a4v0ZOMwAAAE8"]
[Sat Jan 31 05:59:59.423402 2026] [:error] [pid 20836:tid 20864] [client 65.52.173.153:3845] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aX0p34ACllgWRWVrYITs3gAAAVc"]
[Sat Jan 31 05:59:59.719228 2026] [:error] [pid 39243:tid 39289] [client 65.52.173.153:3975] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aX0p3xBW1k4JK8a4v0ZONgAAAEc"]
[Sat Jan 31 05:59:59.962330 2026] [:error] [pid 39242:tid 39278] [client 65.52.173.153:3216] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aX0p39OgXnkKGGSSCINzHAAAABg"]
[Sat Jan 31 06:00:00.199259 2026] [:error] [pid 39339:tid 39342] [client 65.52.173.153:3210] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aX0p4MWi-IjigR3oHY6exwAAAME"]
[Sat Jan 31 06:00:00.462928 2026] [:error] [pid 39339:tid 39352] [client 65.52.173.153:3256] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aX0p4MWi-IjigR3oHY6eyAAAAMs"]
[Sat Jan 31 06:00:00.761723 2026] [:error] [pid 20836:tid 20861] [client 65.52.173.153:3974] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aX0p4IACllgWRWVrYITs4AAAAVQ"]
[Sat Jan 31 06:00:01.012512 2026] [:error] [pid 20836:tid 20847] [client 65.52.173.153:4365] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aX0p4YACllgWRWVrYITs4QAAAUY"]
[Sat Jan 31 06:00:01.550816 2026] [:error] [pid 39339:tid 39355] [client 65.52.173.153:4007] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aX0p4cWi-IjigR3oHY6eygAAAM4"]
[Sat Jan 31 06:00:02.028870 2026] [:error] [pid 39339:tid 39348] [client 65.52.173.153:4455] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aX0p4sWi-IjigR3oHY6eywAAAMc"]
[Sat Jan 31 06:00:02.313922 2026] [:error] [pid 39339:tid 39361] [client 65.52.173.153:3215] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aX0p4sWi-IjigR3oHY6ezAAAANQ"]
[Sat Jan 31 06:00:02.563646 2026] [:error] [pid 20836:tid 20853] [client 65.52.173.153:3999] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/usep.php"] [unique_id "aX0p4oACllgWRWVrYITs6gAAAUw"]
[Sat Jan 31 06:00:02.908144 2026] [:error] [pid 20210:tid 20223] [client 65.52.173.153:3991] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/usep.php"] [unique_id "aX0p4nKy7OGBlTY8MCe83AAAAQs"]
[Sat Jan 31 06:00:03.294808 2026] [:error] [pid 20836:tid 20860] [client 65.52.173.153:4380] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/usep.php"] [unique_id "aX0p44ACllgWRWVrYITs6wAAAVM"]
[Sat Jan 31 06:00:03.589876 2026] [:error] [pid 20836:tid 20852] [client 65.52.173.153:4448] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/usep.php"] [unique_id "aX0p44ACllgWRWVrYITs7AAAAUs"]
[Sat Jan 31 06:00:03.962150 2026] [:error] [pid 39243:tid 39302] [client 65.52.173.153:4012] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wa.php"] [unique_id "aX0p4xBW1k4JK8a4v0ZOOwAAAFQ"]
[Sat Jan 31 06:00:04.354162 2026] [:error] [pid 20210:tid 20218] [client 65.52.173.153:4354] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wa.php"] [unique_id "aX0p5HKy7OGBlTY8MCe84AAAAQY"]
[Sat Jan 31 06:00:04.662561 2026] [:error] [pid 39244:tid 39325] [client 65.52.173.153:4010] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wa.php"] [unique_id "aX0p5Ho-KRTvg3jHEDze-wAAAI8"]
[Sat Jan 31 06:00:04.975801 2026] [:error] [pid 20836:tid 20862] [client 65.52.173.153:3998] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wa.php"] [unique_id "aX0p5IACllgWRWVrYITs9AAAAVU"]
[Sat Jan 31 06:00:05.280142 2026] [:error] [pid 39244:tid 39326] [client 65.52.173.153:3203] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wb.php"] [unique_id "aX0p5Xo-KRTvg3jHEDze_AAAAJA"]
[Sat Jan 31 06:00:05.617894 2026] [:error] [pid 20836:tid 20853] [client 65.52.173.153:3982] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wb.php"] [unique_id "aX0p5YACllgWRWVrYITs9QAAAUw"]
[Sat Jan 31 06:00:05.947440 2026] [:error] [pid 20210:tid 20227] [client 65.52.173.153:4445] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wb.php"] [unique_id "aX0p5XKy7OGBlTY8MCe84QAAAQ8"]
[Sat Jan 31 06:00:06.236280 2026] [:error] [pid 39242:tid 39257] [client 65.52.173.153:3234] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wb.php"] [unique_id "aX0p5tOgXnkKGGSSCINzHQAAAAM"]
[Sat Jan 31 06:00:06.485393 2026] [:error] [pid 20836:tid 20847] [client 65.52.173.153:3217] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "aX0p5oACllgWRWVrYITs-QAAAUY"]
[Sat Jan 31 06:00:06.759254 2026] [:error] [pid 39339:tid 39350] [client 65.52.173.153:3895] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "aX0p5sWi-IjigR3oHY6ezgAAAMk"]
[Sat Jan 31 06:00:07.037605 2026] [:error] [pid 39242:tid 39255] [client 65.52.173.153:4427] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "aX0p59OgXnkKGGSSCINzHgAAAAE"]
[Sat Jan 31 06:00:07.296623 2026] [:error] [pid 39242:tid 39260] [client 65.52.173.153:4451] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "aX0p59OgXnkKGGSSCINzHwAAAAY"]
[Sat Jan 31 06:00:07.598166 2026] [:error] [pid 39242:tid 39269] [client 65.52.173.153:3238] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aX0p59OgXnkKGGSSCINzIAAAAA8"]
[Sat Jan 31 06:00:07.841348 2026] [:error] [pid 20210:tid 20228] [client 65.52.173.153:4458] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aX0p53Ky7OGBlTY8MCe85gAAARA"]
[Sat Jan 31 06:00:08.205859 2026] [:error] [pid 20836:tid 20842] [client 65.52.173.153:4014] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aX0p6IACllgWRWVrYITs_QAAAUE"]
[Sat Jan 31 06:00:08.616246 2026] [:error] [pid 39339:tid 39342] [client 65.52.173.153:4001] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aX0p6MWi-IjigR3oHY6e1gAAAME"]
[Sat Jan 31 06:00:08.979423 2026] [:error] [pid 39242:tid 39254] [client 65.52.173.153:4409] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aX0p6NOgXnkKGGSSCINzLQAAAAA"]
[Sat Jan 31 06:00:09.258269 2026] [:error] [pid 20836:tid 20845] [client 65.52.173.153:4361] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aX0p6YACllgWRWVrYITtHAAAAUQ"]
[Sat Jan 31 06:00:09.779467 2026] [:error] [pid 20836:tid 20865] [client 65.52.173.153:4372] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aX0p6YACllgWRWVrYITtLgAAAVg"]
[Sat Jan 31 06:00:10.129885 2026] [:error] [pid 20210:tid 20230] [client 65.52.173.153:3987] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aX0p6nKy7OGBlTY8MCe9FgAAARI"]
[Sat Jan 31 06:00:10.421415 2026] [:error] [pid 39244:tid 39322] [client 65.52.173.153:4391] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aX0p6no-KRTvg3jHEDze_gAAAIw"]
[Sat Jan 31 06:00:10.709037 2026] [:error] [pid 39243:tid 39288] [client 65.52.173.153:4394] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aX0p6hBW1k4JK8a4v0ZOPAAAAEY"]
[Sat Jan 31 06:00:10.996063 2026] [:error] [pid 39339:tid 39342] [client 65.52.173.153:4360] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aX0p6sWi-IjigR3oHY6e7wAAAME"]
[Sat Jan 31 06:00:11.441204 2026] [:error] [pid 39242:tid 39273] [client 65.52.173.153:4021] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aX0p69OgXnkKGGSSCINzNAAAABM"]
[Sat Jan 31 06:00:11.696772 2026] [:error] [pid 39242:tid 39257] [client 65.52.173.153:4362] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aX0p69OgXnkKGGSSCINzNQAAAAM"]
[Sat Jan 31 06:00:11.964065 2026] [:error] [pid 39242:tid 39260] [client 65.52.173.153:4452] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aX0p69OgXnkKGGSSCINzNwAAAAY"]
[Sat Jan 31 06:00:12.315449 2026] [:error] [pid 39242:tid 39264] [client 65.52.173.153:4464] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aX0p7NOgXnkKGGSSCINzOQAAAAo"]
[Sat Jan 31 06:00:12.584940 2026] [:error] [pid 20210:tid 20217] [client 65.52.173.153:4463] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aX0p7HKy7OGBlTY8MCe9HAAAAQU"]
[Sat Jan 31 06:00:12.928414 2026] [:error] [pid 20210:tid 20215] [client 65.52.173.153:4370] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aX0p7HKy7OGBlTY8MCe9HQAAAQM"]
[Sat Jan 31 06:00:13.173996 2026] [:error] [pid 20210:tid 20214] [client 65.52.173.153:3976] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aX0p7XKy7OGBlTY8MCe9HgAAAQI"]
[Sat Jan 31 06:00:13.533417 2026] [:error] [pid 39243:tid 39305] [client 65.52.173.153:4352] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aX0p7RBW1k4JK8a4v0ZOQAAAAFc"]
[Sat Jan 31 06:00:13.816399 2026] [:error] [pid 39243:tid 39297] [client 65.52.173.153:3211] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aX0p7RBW1k4JK8a4v0ZOQQAAAE8"]
[Sat Jan 31 06:00:14.100074 2026] [:error] [pid 39243:tid 39284] [client 65.52.173.153:4454] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aX0p7hBW1k4JK8a4v0ZOQwAAAEI"]
[Sat Jan 31 06:00:14.423233 2026] [:error] [pid 20210:tid 20225] [client 65.52.173.153:4005] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aX0p7nKy7OGBlTY8MCe9IAAAAQ0"]
[Sat Jan 31 06:00:14.793094 2026] [:error] [pid 20210:tid 20213] [client 65.52.173.153:4479] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aX0p7nKy7OGBlTY8MCe9IQAAAQE"]
[Sat Jan 31 06:00:15.043676 2026] [:error] [pid 20210:tid 20222] [client 65.52.173.153:3865] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aX0p73Ky7OGBlTY8MCe9JAAAAQo"]
[Sat Jan 31 06:00:15.310889 2026] [:error] [pid 39244:tid 39310] [client 65.52.173.153:4015] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aX0p73o-KRTvg3jHEDzfAQAAAIE"]
[Sat Jan 31 06:00:15.631985 2026] [:error] [pid 39244:tid 39319] [client 65.52.173.153:4019] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aX0p73o-KRTvg3jHEDzfAwAAAIk"]
[Sat Jan 31 06:00:16.008422 2026] [:error] [pid 39244:tid 39333] [client 65.52.173.153:4388] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aX0p8Ho-KRTvg3jHEDzfBQAAAJc"]
[Sat Jan 31 06:00:16.310601 2026] [:error] [pid 39339:tid 39349] [client 65.52.173.153:4024] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aX0p8MWi-IjigR3oHY6e9QAAAMg"]
[Sat Jan 31 06:00:16.702563 2026] [:error] [pid 39244:tid 39324] [client 65.52.173.153:3841] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aX0p8Ho-KRTvg3jHEDzfBgAAAI4"]
[Sat Jan 31 06:00:16.990702 2026] [:error] [pid 39243:tid 39287] [client 65.52.173.153:4367] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aX0p8BBW1k4JK8a4v0ZORgAAAEU"]
[Sat Jan 31 06:00:17.239259 2026] [:error] [pid 39339:tid 39344] [client 65.52.173.153:3985] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aX0p8cWi-IjigR3oHY6e-AAAAMM"]
[Sat Jan 31 06:00:17.499001 2026] [:error] [pid 39244:tid 39329] [client 65.52.173.153:3986] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aX0p8Xo-KRTvg3jHEDzfCAAAAJM"]
[Sat Jan 31 06:00:17.751985 2026] [:error] [pid 39242:tid 39261] [client 65.52.173.153:4453] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aX0p8dOgXnkKGGSSCINzPgAAAAc"]
[Sat Jan 31 06:00:18.017439 2026] [:error] [pid 39243:tid 39283] [client 65.52.173.153:4401] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aX0p8hBW1k4JK8a4v0ZOSQAAAEE"]
[Sat Jan 31 06:00:18.307320 2026] [:error] [pid 20836:tid 20848] [client 65.52.173.153:3983] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aX0p8oACllgWRWVrYITtPgAAAUc"]
[Sat Jan 31 06:00:18.544778 2026] [:error] [pid 39242:tid 39268] [client 65.52.173.153:3846] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aX0p8tOgXnkKGGSSCINzQAAAAA4"]
[Sat Jan 31 06:00:18.830858 2026] [:error] [pid 39339:tid 39347] [client 65.52.173.153:3869] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aX0p8sWi-IjigR3oHY6e-QAAAMY"]
[Sat Jan 31 06:00:19.105885 2026] [:error] [pid 39242:tid 39257] [client 65.52.173.153:4403] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aX0p89OgXnkKGGSSCINzQQAAAAM"]
[Sat Jan 31 06:00:19.363705 2026] [:error] [pid 39244:tid 39327] [client 65.52.173.153:4009] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aX0p83o-KRTvg3jHEDzfCgAAAJE"]
[Sat Jan 31 06:00:19.608134 2026] [:error] [pid 39244:tid 39321] [client 65.52.173.153:3968] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aX0p83o-KRTvg3jHEDzfDAAAAIs"]
[Sat Jan 31 06:00:19.861319 2026] [:error] [pid 20210:tid 20220] [client 65.52.173.153:3864] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aX0p83Ky7OGBlTY8MCe9MAAAAQg"]
[Sat Jan 31 06:00:32.748533 2026] [:error] [pid 39243:tid 39302] [client 65.52.173.153:4474] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aX0qABBW1k4JK8a4v0ZOXQAAAFQ"]
[Sat Jan 31 06:00:32.984600 2026] [:error] [pid 39339:tid 39345] [client 65.52.173.153:3988] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aX0qAMWi-IjigR3oHY6fEQAAAMQ"]
[Sat Jan 31 06:00:33.218309 2026] [:error] [pid 20210:tid 20216] [client 65.52.173.153:4002] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aX0qAXKy7OGBlTY8MCe9WQAAAQQ"]
[Sat Jan 31 06:00:33.489456 2026] [:error] [pid 20836:tid 20851] [client 65.52.173.153:3848] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aX0qAYACllgWRWVrYITtSQAAAUo"]
[Sat Jan 31 06:00:33.734429 2026] [:error] [pid 39243:tid 39296] [client 65.52.173.153:4428] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CLA.php"] [unique_id "aX0qARBW1k4JK8a4v0ZOXwAAAE4"]
[Sat Jan 31 06:00:33.974601 2026] [:error] [pid 20210:tid 20229] [client 65.52.173.153:4003] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CLA.php"] [unique_id "aX0qAXKy7OGBlTY8MCe9WgAAARE"]
[Sat Jan 31 06:00:34.209335 2026] [:error] [pid 39242:tid 39267] [client 65.52.173.153:3984] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CLA.php"] [unique_id "aX0qAtOgXnkKGGSSCINzTQAAAA0"]
[Sat Jan 31 06:00:34.445616 2026] [:error] [pid 20210:tid 20228] [client 65.52.173.153:4027] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CLA.php"] [unique_id "aX0qAnKy7OGBlTY8MCe9XAAAARA"]
[Sat Jan 31 06:00:34.681124 2026] [:error] [pid 39244:tid 39314] [client 65.52.173.153:4040] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aX0qAno-KRTvg3jHEDzfGAAAAIU"]
[Sat Jan 31 06:00:34.918336 2026] [:error] [pid 39242:tid 39278] [client 65.52.173.153:3868] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aX0qAtOgXnkKGGSSCINzUAAAABg"]
[Sat Jan 31 06:00:35.152609 2026] [:error] [pid 39243:tid 39305] [client 65.52.173.153:4368] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aX0qAxBW1k4JK8a4v0ZOYQAAAFc"]
[Sat Jan 31 06:00:35.386028 2026] [:error] [pid 39243:tid 39297] [client 65.52.173.153:4016] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aX0qAxBW1k4JK8a4v0ZOYgAAAE8"]
[Sat Jan 31 06:00:35.658440 2026] [:error] [pid 39242:tid 39255] [client 65.52.173.153:4377] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffile.php"] [unique_id "aX0qA9OgXnkKGGSSCINzUQAAAAE"]
[Sat Jan 31 06:00:35.901037 2026] [:error] [pid 39242:tid 39276] [client 65.52.173.153:3844] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffile.php"] [unique_id "aX0qA9OgXnkKGGSSCINzVAAAABY"]
[Sat Jan 31 06:00:36.168145 2026] [:error] [pid 39244:tid 39321] [client 65.52.173.153:3969] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffile.php"] [unique_id "aX0qBHo-KRTvg3jHEDzfGwAAAIs"]
[Sat Jan 31 06:00:36.417252 2026] [:error] [pid 39242:tid 39275] [client 65.52.173.153:4366] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffile.php"] [unique_id "aX0qBNOgXnkKGGSSCINzVQAAABU"]
[Sat Jan 31 06:00:36.657375 2026] [:error] [pid 39242:tid 39272] [client 65.52.173.153:4018] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aX0qBNOgXnkKGGSSCINzVwAAABI"]
[Sat Jan 31 06:00:36.910211 2026] [:error] [pid 20836:tid 20848] [client 65.52.173.153:4023] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aX0qBIACllgWRWVrYITtTAAAAUc"]
[Sat Jan 31 06:00:37.145750 2026] [:error] [pid 39242:tid 39254] [client 65.52.173.153:4358] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aX0qBdOgXnkKGGSSCINzWAAAAAA"]
[Sat Jan 31 06:00:37.425738 2026] [:error] [pid 39243:tid 39295] [client 65.52.173.153:3978] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aX0qBRBW1k4JK8a4v0ZOZAAAAE0"]
[Sat Jan 31 06:00:37.726431 2026] [:error] [pid 39339:tid 39347] [client 65.52.173.153:4404] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aX0qBcWi-IjigR3oHY6fGQAAAMY"]
[Sat Jan 31 06:00:37.965858 2026] [:error] [pid 39244:tid 39313] [client 65.52.173.153:4020] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aX0qBXo-KRTvg3jHEDzfHwAAAIQ"]
[Sat Jan 31 06:00:38.270353 2026] [:error] [pid 39242:tid 39262] [client 65.52.173.153:3873] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aX0qBtOgXnkKGGSSCINzWQAAAAg"]
[Sat Jan 31 06:00:38.516683 2026] [:error] [pid 20210:tid 20227] [client 65.52.173.153:4466] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aX0qBnKy7OGBlTY8MCe9XgAAAQ8"]
[Sat Jan 31 06:00:38.768482 2026] [:error] [pid 39244:tid 39325] [client 65.52.173.153:4006] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aX0qBno-KRTvg3jHEDzfIAAAAI8"]
[Sat Jan 31 06:00:39.046996 2026] [:error] [pid 39339:tid 39343] [client 65.52.173.153:4369] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aX0qB8Wi-IjigR3oHY6fGgAAAMI"]
[Sat Jan 31 06:00:39.328427 2026] [:error] [pid 39244:tid 39311] [client 65.52.173.153:3262] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aX0qB3o-KRTvg3jHEDzfIQAAAII"]
[Sat Jan 31 06:00:39.634125 2026] [:error] [pid 39339:tid 39353] [client 65.52.173.153:4364] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aX0qB8Wi-IjigR3oHY6fGwAAAMw"]
[Sat Jan 31 06:00:39.942050 2026] [:error] [pid 20210:tid 20221] [client 65.52.173.153:3995] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "aX0qB3Ky7OGBlTY8MCe9XwAAAQk"]
[Sat Jan 31 06:00:40.251664 2026] [:error] [pid 39339:tid 39358] [client 65.52.173.153:3857] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "aX0qCMWi-IjigR3oHY6fHAAAANE"]
[Sat Jan 31 06:00:40.515273 2026] [:error] [pid 39339:tid 39345] [client 65.52.173.153:4028] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "aX0qCMWi-IjigR3oHY6fHQAAAMQ"]
[Sat Jan 31 06:00:40.853778 2026] [:error] [pid 39339:tid 39357] [client 65.52.173.153:4363] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "aX0qCMWi-IjigR3oHY6fHgAAANA"]
[Sat Jan 31 06:00:41.190138 2026] [:error] [pid 20210:tid 20231] [client 65.52.173.153:4390] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex3.php"] [unique_id "aX0qCXKy7OGBlTY8MCe9YwAAARM"]
[Sat Jan 31 06:00:41.436028 2026] [:error] [pid 39244:tid 39329] [client 65.52.173.153:4400] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex3.php"] [unique_id "aX0qCXo-KRTvg3jHEDzfJgAAAJM"]
[Sat Jan 31 06:00:41.685366 2026] [:error] [pid 39243:tid 39288] [client 65.52.173.153:4389] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex3.php"] [unique_id "aX0qCRBW1k4JK8a4v0ZOawAAAEY"]
[Sat Jan 31 06:00:41.992291 2026] [:error] [pid 39243:tid 39293] [client 65.52.173.153:4374] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex3.php"] [unique_id "aX0qCRBW1k4JK8a4v0ZObAAAAEs"]
[Sat Jan 31 06:00:42.287428 2026] [:error] [pid 39244:tid 39331] [client 65.52.173.153:4408] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aX0qCno-KRTvg3jHEDzfKAAAAJU"]
[Sat Jan 31 06:00:42.615693 2026] [:error] [pid 39242:tid 39272] [client 65.52.173.153:3973] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aX0qCtOgXnkKGGSSCINzYgAAABI"]
[Sat Jan 31 06:00:42.859660 2026] [:error] [pid 20210:tid 20214] [client 65.52.173.153:4375] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aX0qCnKy7OGBlTY8MCe9ZQAAAQI"]
[Sat Jan 31 06:00:43.278265 2026] [:error] [pid 39242:tid 39259] [client 65.52.173.153:3858] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/des.php"] [unique_id "aX0qC9OgXnkKGGSSCINzZAAAAAU"]
[Sat Jan 31 06:00:43.550751 2026] [:error] [pid 20210:tid 20222] [client 65.52.173.153:3891] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aX0qC3Ky7OGBlTY8MCe9aAAAAQo"]
[Sat Jan 31 06:00:43.803491 2026] [:error] [pid 20836:tid 20846] [client 65.52.173.153:3200] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aX0qC4ACllgWRWVrYITtVgAAAUU"]
[Sat Jan 31 06:00:44.166658 2026] [:error] [pid 20836:tid 20863] [client 65.52.173.153:3881] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aX0qDIACllgWRWVrYITtWAAAAVY"]
[Sat Jan 31 06:00:44.547863 2026] [:error] [pid 20210:tid 20229] [client 65.52.173.153:4406] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aX0qDHKy7OGBlTY8MCe9awAAARE"]
[Sat Jan 31 06:00:44.787202 2026] [:error] [pid 39242:tid 39274] [client 65.52.173.153:3981] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aX0qDNOgXnkKGGSSCINzZgAAABQ"]
[Sat Jan 31 06:00:45.070718 2026] [:error] [pid 39243:tid 39289] [client 65.52.173.153:4032] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aX0qDRBW1k4JK8a4v0ZOcQAAAEc"]
[Sat Jan 31 06:00:45.312166 2026] [:error] [pid 39244:tid 39332] [client 65.52.173.153:4385] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aX0qDXo-KRTvg3jHEDzfKwAAAJY"]
[Sat Jan 31 06:00:45.586095 2026] [:error] [pid 39242:tid 39260] [client 65.52.173.153:4384] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aX0qDdOgXnkKGGSSCINzaAAAAAY"]
[Sat Jan 31 06:00:45.937740 2026] [:error] [pid 39243:tid 39290] [client 65.52.173.153:3877] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "aX0qDRBW1k4JK8a4v0ZOcgAAAEg"]
[Sat Jan 31 06:00:46.257025 2026] [:error] [pid 20210:tid 20212] [client 65.52.173.153:4029] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "aX0qDnKy7OGBlTY8MCe9bgAAAQA"]
[Sat Jan 31 06:00:46.608969 2026] [:error] [pid 20836:tid 20853] [client 65.52.173.153:4398] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "aX0qDoACllgWRWVrYITtXAAAAUw"]
[Sat Jan 31 06:00:46.934160 2026] [:error] [pid 20836:tid 20856] [client 65.52.173.153:4033] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "aX0qDoACllgWRWVrYITtXwAAAU8"]
[Sat Jan 31 06:00:47.199688 2026] [:error] [pid 39244:tid 39326] [client 65.52.173.153:4386] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/efile.php"] [unique_id "aX0qD3o-KRTvg3jHEDzfLQAAAJA"]
[Sat Jan 31 06:00:47.491416 2026] [:error] [pid 20210:tid 20215] [client 65.52.173.153:3900] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/efile.php"] [unique_id "aX0qD3Ky7OGBlTY8MCe9cAAAAQM"]
[Sat Jan 31 06:00:47.793240 2026] [:error] [pid 39244:tid 39328] [client 65.52.173.153:4060] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/efile.php"] [unique_id "aX0qD3o-KRTvg3jHEDzfLwAAAJI"]
[Sat Jan 31 06:00:48.093395 2026] [:error] [pid 20836:tid 20864] [client 65.52.173.153:4082] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/efile.php"] [unique_id "aX0qEIACllgWRWVrYITtYgAAAVc"]
[Sat Jan 31 06:00:48.517117 2026] [:error] [pid 20836:tid 20842] [client 65.52.173.153:4004] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afile.php"] [unique_id "aX0qEIACllgWRWVrYITtYwAAAUE"]
[Sat Jan 31 06:00:48.833641 2026] [:error] [pid 39244:tid 39322] [client 65.52.173.153:4412] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afile.php"] [unique_id "aX0qEHo-KRTvg3jHEDzfMAAAAIw"]
[Sat Jan 31 06:00:49.113155 2026] [:error] [pid 20836:tid 20862] [client 65.52.173.153:4411] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afile.php"] [unique_id "aX0qEYACllgWRWVrYITtZQAAAVU"]
[Sat Jan 31 06:00:49.498584 2026] [:error] [pid 39243:tid 39304] [client 65.52.173.153:3890] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afile.php"] [unique_id "aX0qERBW1k4JK8a4v0ZOdAAAAFY"]
[Sat Jan 31 06:00:49.909936 2026] [:error] [pid 39242:tid 39270] [client 65.52.173.153:4460] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/errorfile.php"] [unique_id "aX0qEdOgXnkKGGSSCINzagAAABA"]
[Sat Jan 31 06:00:50.188692 2026] [:error] [pid 20210:tid 20219] [client 65.52.173.153:4379] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/errorfile.php"] [unique_id "aX0qEnKy7OGBlTY8MCe9cwAAAQc"]
[Sat Jan 31 06:00:50.591030 2026] [:error] [pid 39244:tid 39312] [client 65.52.173.153:4378] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/errorfile.php"] [unique_id "aX0qEno-KRTvg3jHEDzfMgAAAIM"]
[Sat Jan 31 06:00:50.907008 2026] [:error] [pid 20210:tid 20222] [client 65.52.173.153:4038] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/errorfile.php"] [unique_id "aX0qEnKy7OGBlTY8MCe9dAAAAQo"]
[Sat Jan 31 06:00:51.148685 2026] [:error] [pid 39242:tid 39258] [client 65.52.173.153:3871] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aX0qE9OgXnkKGGSSCINzawAAAAQ"]
[Sat Jan 31 06:00:51.457849 2026] [:error] [pid 39243:tid 39282] [client 65.52.173.153:4407] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aX0qExBW1k4JK8a4v0ZOdgAAAEA"]
[Sat Jan 31 06:00:51.751689 2026] [:error] [pid 39242:tid 39268] [client 65.52.173.153:4025] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aX0qE9OgXnkKGGSSCINzbAAAAA4"]
[Sat Jan 31 06:00:52.095200 2026] [:error] [pid 39243:tid 39283] [client 65.52.173.153:4035] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aX0qFBBW1k4JK8a4v0ZOdwAAAEE"]
[Sat Jan 31 06:00:52.330083 2026] [:error] [pid 39242:tid 39271] [client 65.52.173.153:3867] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gool.php"] [unique_id "aX0qFNOgXnkKGGSSCINzbgAAABE"]
[Sat Jan 31 06:00:52.577954 2026] [:error] [pid 20210:tid 20225] [client 65.52.173.153:3898] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gool.php"] [unique_id "aX0qFHKy7OGBlTY8MCe9dQAAAQ0"]
[Sat Jan 31 06:00:52.845319 2026] [:error] [pid 20836:tid 20843] [client 65.52.173.153:4031] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gool.php"] [unique_id "aX0qFIACllgWRWVrYITtZgAAAUI"]
[Sat Jan 31 06:00:53.206402 2026] [:error] [pid 39339:tid 39342] [client 65.52.173.153:4355] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gool.php"] [unique_id "aX0qFcWi-IjigR3oHY6fMAAAAME"]
[Sat Jan 31 06:00:53.685079 2026] [:error] [pid 39242:tid 39276] [client 65.52.173.153:3893] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/haikh.php"] [unique_id "aX0qFdOgXnkKGGSSCINzcAAAABY"]
[Sat Jan 31 06:00:53.999035 2026] [:error] [pid 20836:tid 20848] [client 65.52.173.153:3202] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/haikh.php"] [unique_id "aX0qFYACllgWRWVrYITtZwAAAUc"]
[Sat Jan 31 06:00:54.677194 2026] [:error] [pid 20836:tid 20845] [client 65.52.173.153:3843] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/haikh.php"] [unique_id "aX0qFoACllgWRWVrYITtagAAAUQ"]
[Sat Jan 31 06:00:55.055019 2026] [:error] [pid 20210:tid 20220] [client 65.52.173.153:4045] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/haikh.php"] [unique_id "aX0qF3Ky7OGBlTY8MCe9dgAAAQg"]
[Sat Jan 31 06:00:55.289117 2026] [:error] [pid 39243:tid 39291] [client 65.52.173.153:3854] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/135.php"] [unique_id "aX0qFxBW1k4JK8a4v0ZOfAAAAEk"]
[Sat Jan 31 06:00:55.536293 2026] [:error] [pid 39243:tid 39296] [client 65.52.173.153:4013] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/135.php"] [unique_id "aX0qFxBW1k4JK8a4v0ZOfQAAAE4"]
[Sat Jan 31 06:00:56.222791 2026] [:error] [pid 20836:tid 20860] [client 65.52.173.153:4392] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/135.php"] [unique_id "aX0qGIACllgWRWVrYITtbwAAAVM"]
[Sat Jan 31 06:00:56.716713 2026] [:error] [pid 20210:tid 20229] [client 65.52.173.153:3882] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/135.php"] [unique_id "aX0qGHKy7OGBlTY8MCe9dwAAARE"]
[Sat Jan 31 06:00:57.012046 2026] [:error] [pid 39243:tid 39286] [client 65.52.173.153:4058] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/enclas.php"] [unique_id "aX0qGRBW1k4JK8a4v0ZOfwAAAEQ"]
[Sat Jan 31 06:00:57.767056 2026] [:error] [pid 39242:tid 39272] [client 65.52.173.153:4405] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/enclas.php"] [unique_id "aX0qGdOgXnkKGGSSCINzcgAAABI"]
[Sat Jan 31 06:00:58.240169 2026] [:error] [pid 39244:tid 39325] [client 65.52.173.153:3862] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/enclas.php"] [unique_id "aX0qGno-KRTvg3jHEDzfOQAAAI8"]
[Sat Jan 31 06:00:58.534036 2026] [:error] [pid 20836:tid 20846] [client 65.52.173.153:4070] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/enclas.php"] [unique_id "aX0qGoACllgWRWVrYITtcQAAAUU"]
[Sat Jan 31 06:00:58.843685 2026] [:error] [pid 39244:tid 39326] [client 65.52.173.153:3899] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aX0qGno-KRTvg3jHEDzfOgAAAJA"]
[Sat Jan 31 06:00:59.250203 2026] [:error] [pid 39242:tid 39254] [client 65.52.173.153:3996] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aX0qG9OgXnkKGGSSCINzdQAAAAA"]
[Sat Jan 31 06:00:59.511979 2026] [:error] [pid 39242:tid 39269] [client 65.52.173.153:4381] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aX0qG9OgXnkKGGSSCINzdgAAAA8"]
[Sat Jan 31 06:00:59.911338 2026] [:error] [pid 20836:tid 20844] [client 65.52.173.153:4395] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aX0qG4ACllgWRWVrYITtcwAAAUM"]
[Sat Jan 31 06:01:00.223998 2026] [:error] [pid 20836:tid 20865] [client 65.52.173.153:4092] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX0qHIACllgWRWVrYITtdAAAAVg"]
[Sat Jan 31 06:01:00.526042 2026] [:error] [pid 39242:tid 39260] [client 65.52.173.153:4382] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX0qHNOgXnkKGGSSCINzdwAAAAY"]
[Sat Jan 31 06:01:01.342980 2026] [:error] [pid 39244:tid 39318] [client 65.52.173.153:3860] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX0qHXo-KRTvg3jHEDzfPQAAAIg"]
[Sat Jan 31 06:01:02.212950 2026] [:error] [pid 20836:tid 20852] [client 65.52.173.153:3853] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX0qHoACllgWRWVrYITteQAAAUs"]
[Sat Jan 31 06:01:02.847539 2026] [:error] [pid 20836:tid 20855] [client 65.52.173.153:3855] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aX0qHoACllgWRWVrYITtfQAAAU4"]
[Sat Jan 31 06:01:03.501534 2026] [:error] [pid 20836:tid 20841] [client 65.52.173.153:4064] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aX0qH4ACllgWRWVrYITtfwAAAUA"]
[Sat Jan 31 06:01:04.087215 2026] [:error] [pid 20836:tid 20842] [client 65.52.173.153:4073] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aX0qIIACllgWRWVrYITtgAAAAUE"]
[Sat Jan 31 06:01:04.632277 2026] [:error] [pid 20836:tid 20844] [client 65.52.173.153:4356] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aX0qIIACllgWRWVrYITtgQAAAUM"]
[Sat Jan 31 06:01:05.385308 2026] [:error] [pid 20836:tid 20857] [client 65.52.173.153:4413] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/image.php"] [unique_id "aX0qIYACllgWRWVrYITthAAAAVA"]
[Sat Jan 31 06:01:05.694936 2026] [:error] [pid 39339:tid 39361] [client 65.52.173.153:3842] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/image.php"] [unique_id "aX0qIcWi-IjigR3oHY6fNQAAANQ"]
[Sat Jan 31 06:01:06.339506 2026] [:error] [pid 20836:tid 20849] [client 65.52.173.153:3876] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/image.php"] [unique_id "aX0qIoACllgWRWVrYITthQAAAUg"]
[Sat Jan 31 06:01:06.636340 2026] [:error] [pid 39244:tid 39331] [client 65.52.173.153:3897] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/image.php"] [unique_id "aX0qIno-KRTvg3jHEDzfQgAAAJU"]
[Sat Jan 31 06:01:06.923209 2026] [:error] [pid 39244:tid 39321] [client 65.52.173.153:3861] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aX0qIno-KRTvg3jHEDzfQwAAAIs"]
[Sat Jan 31 06:01:07.233864 2026] [:error] [pid 20836:tid 20848] [client 65.52.173.153:4071] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aX0qI4ACllgWRWVrYITthwAAAUc"]
[Sat Jan 31 06:01:07.977023 2026] [:error] [pid 39242:tid 39276] [client 65.52.173.153:4414] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aX0qI9OgXnkKGGSSCINzfwAAABY"]
[Sat Jan 31 06:01:08.413652 2026] [:error] [pid 20836:tid 20861] [client 65.52.173.153:4072] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aX0qJIACllgWRWVrYITtiQAAAVQ"]
[Sat Jan 31 06:01:08.742914 2026] [:error] [pid 39242:tid 39272] [client 65.52.173.153:3789] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aX0qJNOgXnkKGGSSCINzgAAAABI"]
[Sat Jan 31 06:01:09.025666 2026] [:error] [pid 39242:tid 39259] [client 65.52.173.153:4044] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aX0qJdOgXnkKGGSSCINzgQAAAAU"]
[Sat Jan 31 06:01:09.378013 2026] [:error] [pid 39242:tid 39275] [client 65.52.173.153:4047] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aX0qJdOgXnkKGGSSCINzgwAAABU"]
[Sat Jan 31 06:01:09.730010 2026] [:error] [pid 39339:tid 39352] [client 65.52.173.153:3892] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aX0qJcWi-IjigR3oHY6fOQAAAMs"]
[Sat Jan 31 06:01:10.110721 2026] [:error] [pid 39242:tid 39254] [client 65.52.173.153:3884] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aX0qJtOgXnkKGGSSCINzhAAAAAA"]
[Sat Jan 31 06:01:10.376659 2026] [:error] [pid 39339:tid 39341] [client 65.52.173.153:3849] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aX0qJsWi-IjigR3oHY6fOgAAAMA"]
[Sat Jan 31 06:01:10.637430 2026] [:error] [pid 39244:tid 39313] [client 65.52.173.153:3863] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aX0qJno-KRTvg3jHEDzfRQAAAIQ"]
[Sat Jan 31 06:01:10.874104 2026] [:error] [pid 20210:tid 20232] [client 65.52.173.153:4088] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aX0qJnKy7OGBlTY8MCe9fAAAARQ"]
[Sat Jan 31 06:01:11.112684 2026] [:error] [pid 39243:tid 39296] [client 65.52.173.153:3896] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aX0qJxBW1k4JK8a4v0ZOhgAAAE4"]
[Sat Jan 31 06:01:11.435427 2026] [:error] [pid 39243:tid 39297] [client 65.52.173.153:3879] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aX0qJxBW1k4JK8a4v0ZOiQAAAE8"]
[Sat Jan 31 06:01:11.743613 2026] [:error] [pid 20836:tid 20847] [client 65.52.173.153:4081] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aX0qJ4ACllgWRWVrYITtjgAAAUY"]
[Sat Jan 31 06:01:12.009372 2026] [:error] [pid 20836:tid 20842] [client 65.52.173.153:4393] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/max.php"] [unique_id "aX0qKIACllgWRWVrYITtjwAAAUE"]
[Sat Jan 31 06:01:12.274731 2026] [:error] [pid 20836:tid 20846] [client 65.52.173.153:4048] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "aX0qKIACllgWRWVrYITtkAAAAUU"]
[Sat Jan 31 06:01:12.528928 2026] [:error] [pid 20836:tid 20844] [client 65.52.173.153:4036] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "aX0qKIACllgWRWVrYITtkQAAAUM"]
[Sat Jan 31 06:01:12.764531 2026] [:error] [pid 20836:tid 20850] [client 65.52.173.153:3840] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "aX0qKIACllgWRWVrYITtkgAAAUk"]
[Sat Jan 31 06:01:13.027628 2026] [:error] [pid 20210:tid 20231] [client 65.52.173.153:3866] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "aX0qKXKy7OGBlTY8MCe9fgAAARM"]
[Sat Jan 31 06:01:13.267470 2026] [:error] [pid 20210:tid 20215] [client 65.52.173.153:4415] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mpxct.php"] [unique_id "aX0qKXKy7OGBlTY8MCe9fwAAAQM"]
[Sat Jan 31 06:01:13.533289 2026] [:error] [pid 20210:tid 20221] [client 65.52.173.153:3852] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mpxct.php"] [unique_id "aX0qKXKy7OGBlTY8MCe9gAAAAQk"]
[Sat Jan 31 06:01:13.792482 2026] [:error] [pid 39339:tid 39346] [client 65.52.173.153:4376] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mpxct.php"] [unique_id "aX0qKcWi-IjigR3oHY6fOwAAAMU"]
[Sat Jan 31 06:01:14.033321 2026] [:error] [pid 20836:tid 20848] [client 65.52.173.153:4090] [client 65.52.173.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mpxct.php"] [unique_id "aX0qKoACllgWRWVrYITtlAAAAUc"]
[Sat Jan 31 06:19:56.639194 2026] [:error] [pid 20210:tid 20227] [client 31.220.76.35:43378] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX0ujHKy7OGBlTY8MCfDyAAAAQ8"]
[Sat Jan 31 06:20:00.236871 2026] [:error] [pid 20836:tid 20856] [client 31.220.76.35:45660] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aX0ukIACllgWRWVrYIT0swAAAU8"]
[Sat Jan 31 06:20:06.315066 2026] [:error] [pid 20210:tid 20227] [client 31.220.76.35:38802] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aX0ulnKy7OGBlTY8MCfD2AAAAQ8"]
[Sat Jan 31 06:20:11.088029 2026] [:error] [pid 39244:tid 39319] [client 31.220.76.35:34518] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX0um3o-KRTvg3jHEDzjrgAAAIk"]
[Sat Jan 31 06:20:14.527564 2026] [:error] [pid 39244:tid 39319] [client 31.220.76.35:34532] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aX0unno-KRTvg3jHEDzjxwAAAIk"]
[Sat Jan 31 06:20:20.273900 2026] [:error] [pid 39242:tid 39270] [client 31.220.76.35:34534] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aX0upNOgXnkKGGSSCIN3lgAAABA"]
[Sat Jan 31 06:20:24.043712 2026] [:error] [pid 20836:tid 20855] [client 31.220.76.35:47196] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX0uqIACllgWRWVrYIT09AAAAU4"]
[Sat Jan 31 06:20:27.228056 2026] [:error] [pid 20836:tid 20851] [client 31.220.76.35:47204] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX0uq4ACllgWRWVrYIT0-AAAAUo"]
[Sat Jan 31 06:20:31.688151 2026] [:error] [pid 39339:tid 39360] [client 31.220.76.35:52636] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX0ur8Wi-IjigR3oHY6khgAAANM"]
[Sat Jan 31 06:20:35.629620 2026] [:error] [pid 39339:tid 39345] [client 31.220.76.35:52638] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aX0us8Wi-IjigR3oHY6kkQAAAMQ"]
[Sat Jan 31 06:20:38.813599 2026] [:error] [pid 20836:tid 20846] [client 31.220.76.35:52646] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX0utoACllgWRWVrYIT1FwAAAUU"]
[Sat Jan 31 06:20:43.320464 2026] [:error] [pid 20836:tid 20844] [client 31.220.76.35:35732] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX0uu4ACllgWRWVrYIT1JgAAAUM"]
[Sat Jan 31 06:20:47.197500 2026] [:error] [pid 39244:tid 39316] [client 31.220.76.35:35736] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aX0uv3o-KRTvg3jHEDzj-gAAAIY"]
[Sat Jan 31 06:20:51.874384 2026] [:error] [pid 20836:tid 20858] [client 31.220.76.35:59926] [client 31.220.76.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aX0uw4ACllgWRWVrYIT1PAAAAVE"]
[Sat Jan 31 07:50:21.816283 2026] [autoindex:error] [pid 52451:tid 52477] [client 20.46.176.183:23919] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 07:50:21.942545 2026] [autoindex:error] [pid 52451:tid 52466] [client 20.46.176.183:23919] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 07:50:22.066414 2026] [:error] [pid 52451:tid 52458] [client 20.46.176.183:23919] [client 20.46.176.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.46.176.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aX1DvnubVy7MGYWM2NYvagAAAcQ"]
[Sat Jan 31 07:50:35.973851 2026] [autoindex:error] [pid 52451:tid 52462] [client 20.46.176.183:23919] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 07:50:39.204045 2026] [autoindex:error] [pid 52451:tid 52465] [client 20.46.176.183:23919] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 07:50:39.319364 2026] [:error] [pid 52451:tid 52454] [client 20.46.176.183:23919] [client 20.46.176.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aX1Dz3ubVy7MGYWM2NYvhwAAAcA"]
[Sat Jan 31 07:50:39.932432 2026] [autoindex:error] [pid 39339:tid 39353] [client 20.46.176.183:16560] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 07:50:42.409753 2026] [:error] [pid 39339:tid 39351] [client 20.46.176.183:16560] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aX1D0sWi-IjigR3oHY62sgAAAMo"]
[Sat Jan 31 07:50:42.872069 2026] [:error] [pid 39244:tid 39313] [client 20.46.176.183:32213] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aX1D0no-KRTvg3jHEDz2LQAAAIQ"]
[Sat Jan 31 07:50:43.329071 2026] [:error] [pid 52520:tid 52522] [client 20.46.176.183:21103] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aX1D02S_bInnwm0xKSqzwAAAAkA"]
[Sat Jan 31 07:50:43.789467 2026] [:error] [pid 52520:tid 52537] [client 20.46.176.183:16574] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aX1D02S_bInnwm0xKSqzwQAAAk8"]
[Sat Jan 31 08:25:22.432286 2026] [:error] [pid 52484:tid 52500] [client 47.88.48.42:44038] [client 47.88.48.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.88.48.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aX1L8kpwiaulxucQh7XecAAAAg4"]
[Sat Jan 31 08:25:33.067809 2026] [:error] [pid 52451:tid 52464] [client 89.46.109.106:27172] [client 89.46.109.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.109.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aX1L_XubVy7MGYWM2NY2NAAAAco"]
[Sat Jan 31 09:47:56.365889 2026] [:error] [pid 52520:tid 52545] [client 93.158.213.25:58956] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aX1fTGS_bInnwm0xKSrpywAAAlc"]
[Sat Jan 31 09:47:59.656828 2026] [:error] [pid 52415:tid 52418] [client 93.158.213.25:37976] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aX1fT5-DUxb_li2fU6JM9AAAAYE"]
[Sat Jan 31 09:48:02.449042 2026] [:error] [pid 20210:tid 20230] [client 93.158.213.25:37988] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aX1fUnKy7OGBlTY8MCfziwAAARI"]
[Sat Jan 31 09:48:05.290747 2026] [:error] [pid 39242:tid 39260] [client 93.158.213.25:37996] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX1fVdOgXnkKGGSSCIOrfwAAAAY"]
[Sat Jan 31 09:48:07.901337 2026] [:error] [pid 52484:tid 52488] [client 93.158.213.25:47986] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aX1fV0pwiaulxucQh7X63gAAAgI"]
[Sat Jan 31 09:48:10.814017 2026] [:error] [pid 20836:tid 20854] [client 93.158.213.25:47996] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aX1fWoACllgWRWVrYIQkzAAAAU0"]
[Sat Jan 31 09:48:13.765667 2026] [:error] [pid 52520:tid 52539] [client 93.158.213.25:48008] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX1fXWS_bInnwm0xKSrp2gAAAlE"]
[Sat Jan 31 09:48:16.765307 2026] [:error] [pid 39242:tid 39277] [client 93.158.213.25:38030] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aX1fYNOgXnkKGGSSCIOrmQAAABc"]
[Sat Jan 31 09:48:19.610722 2026] [:error] [pid 39243:tid 39294] [client 93.158.213.25:38036] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX1fYxBW1k4JK8a4v0aPtgAAAEw"]
[Sat Jan 31 09:48:22.590010 2026] [:error] [pid 52520:tid 52535] [client 93.158.213.25:38050] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aX1fZmS_bInnwm0xKSrp5AAAAk0"]
[Sat Jan 31 09:48:25.293723 2026] [:error] [pid 39243:tid 39292] [client 93.158.213.25:38052] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aX1faRBW1k4JK8a4v0aPvAAAAEo"]
[Sat Jan 31 09:48:28.419934 2026] [:error] [pid 39243:tid 39290] [client 93.158.213.25:33780] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX1fbBBW1k4JK8a4v0aPxQAAAEg"]
[Sat Jan 31 09:48:31.716506 2026] [:error] [pid 52451:tid 52460] [client 93.158.213.25:33788] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX1fb3ubVy7MGYWM2NZPHAAAAcY"]
[Sat Jan 31 09:48:34.562587 2026] [:error] [pid 20210:tid 20213] [client 93.158.213.25:33796] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aX1fcnKy7OGBlTY8MCfztAAAAQE"]
[Sat Jan 31 09:48:37.345147 2026] [:error] [pid 39243:tid 39294] [client 93.158.213.25:42520] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aX1fdRBW1k4JK8a4v0aP0QAAAEw"]
[Sat Jan 31 09:48:40.172261 2026] [:error] [pid 20836:tid 20864] [client 93.158.213.25:42530] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aX1feIACllgWRWVrYIQk8AAAAVc"]
[Sat Jan 31 09:48:42.981668 2026] [:error] [pid 52415:tid 52431] [client 93.158.213.25:42532] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aX1fep-DUxb_li2fU6JNLwAAAY4"]
[Sat Jan 31 10:14:18.866174 2026] [:error] [pid 52520:tid 52523] [client 147.135.252.138:55092] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aX1lemS_bInnwm0xKSr0bAAAAkE"]
[Sat Jan 31 10:14:23.274829 2026] [:error] [pid 52484:tid 52494] [client 147.135.252.138:43538] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aX1lf0pwiaulxucQh7UCewAAAgg"]
[Sat Jan 31 13:16:36.974238 2026] [:error] [pid 59438:tid 59461] [client 172.211.184.239:2433] [client 172.211.184.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.211.184.239, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aX2QNJbUN6UcGMChdB3jsgAAApU"]
[Sat Jan 31 13:17:18.990624 2026] [:error] [pid 59438:tid 59459] [client 198.251.89.157:44478] [client 198.251.89.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.251.89.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aX2QXpbUN6UcGMChdB3j-gAAApM"]
[Sat Jan 31 13:17:24.407347 2026] [:error] [pid 59438:tid 59450] [client 152.69.216.173:22314] [client 152.69.216.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.69.216.173, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aX2QZJbUN6UcGMChdB3kAAAAAoo"]
[Sat Jan 31 15:33:43.232885 2026] [:error] [pid 59582:tid 59635] [client 145.239.69.153:38358] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX2wV45dwpvvp1Lc6f1JagAAA9Y"]
[Sat Jan 31 15:33:46.157379 2026] [:error] [pid 39242:tid 39255] [client 145.239.69.153:45236] [client 145.239.69.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aX2wWtOgXnkKGGSSCIMCegAAAAE"]
[Sat Jan 31 21:32:36.102596 2026] [:error] [pid 18773:tid 18776] [client 103.72.9.173:62320] [client 103.72.9.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.72.9.173, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aX4EdNHy21j24IPrB1X0JwAAAYE"]
[Sat Jan 31 21:43:35.421257 2026] [:error] [pid 39339:tid 39342] [client 103.72.9.173:62331] [client 103.72.9.173] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aX4HB8Wi-IjigR3oHY6HpwAAAME"]
[Sat Jan 31 23:01:39.185502 2026] [:error] [pid 39242:tid 39255] [client 122.51.236.174:38190] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aX4ZU9OgXnkKGGSSCINVEgAAAAE"]
[Sat Jan 31 23:39:56.311293 2026] [:error] [pid 59523:tid 59546] [client 51.75.128.81:52166] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX4iTJEkxOIGmVhqUWKazgAAAxM"]
[Sat Jan 31 23:39:58.896120 2026] [:error] [pid 44532:tid 44537] [client 51.75.128.81:48708] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX4iTsH-68uYbAtfrZ2kZwAAAUE"]
[Sat Jan 31 23:40:01.494759 2026] [:error] [pid 44532:tid 44556] [client 51.75.128.81:48710] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aX4iUcH-68uYbAtfrZ2kagAAAVQ"]
[Sat Jan 31 23:40:04.106685 2026] [:error] [pid 39339:tid 39349] [client 51.75.128.81:48724] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aX4iVMWi-IjigR3oHY6hbQAAAMg"]
[Sat Jan 31 23:40:06.641766 2026] [:error] [pid 18773:tid 18798] [client 51.75.128.81:48726] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX4iVtHy21j24IPrB1UFNgAAAZc"]
[Sat Jan 31 23:40:09.136711 2026] [:error] [pid 44533:tid 44568] [client 51.75.128.81:56038] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aX4iWYNjc98kHMNVmntjYgAAAcU"]
[Sat Jan 31 23:40:11.766400 2026] [:error] [pid 39339:tid 39363] [client 51.75.128.81:56042] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aX4iW8Wi-IjigR3oHY6hcwAAANY"]
[Sat Jan 31 23:40:14.370944 2026] [:error] [pid 44532:tid 44537] [client 51.75.128.81:56048] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX4iXsH-68uYbAtfrZ2kggAAAUE"]
[Sat Jan 31 23:40:16.967850 2026] [:error] [pid 59523:tid 59536] [client 51.75.128.81:56058] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX4iYJEkxOIGmVhqUWKa6wAAAwk"]
[Sat Jan 31 23:40:19.501609 2026] [:error] [pid 59523:tid 59545] [client 51.75.128.81:46070] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX4iY5EkxOIGmVhqUWKa7gAAAxI"]
[Sat Jan 31 23:40:21.914986 2026] [:error] [pid 59582:tid 59636] [client 51.75.128.81:46076] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aX4iZY5dwpvvp1Lc6f2ROgAAA9c"]
[Sat Jan 31 23:40:24.342013 2026] [:error] [pid 39339:tid 39358] [client 51.75.128.81:46080] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX4iaMWi-IjigR3oHY6hhAAAANE"]
[Sat Jan 31 23:40:26.876414 2026] [:error] [pid 44532:tid 44558] [client 51.75.128.81:46090] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX4iasH-68uYbAtfrZ2kpAAAAVY"]
[Sat Jan 31 23:40:29.414856 2026] [:error] [pid 31430:tid 31454] [client 51.75.128.81:48408] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aX4ibccb14YPxXg_g5FkgAAAAFQ"]
[Sat Jan 31 23:40:31.824870 2026] [:error] [pid 18773:tid 18798] [client 51.75.128.81:48424] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aX4ib9Hy21j24IPrB1UFUgAAAZc"]
[Sat Jan 31 23:40:34.372615 2026] [:error] [pid 44533:tid 44580] [client 51.75.128.81:48436] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aX4icoNjc98kHMNVmntjlwAAAdE"]
[Sat Jan 31 23:40:36.793871 2026] [:error] [pid 44533:tid 44586] [client 51.75.128.81:48448] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX4idINjc98kHMNVmntjnAAAAdc"]
[Sun Feb 01 01:15:25.047366 2026] [:error] [pid 44532:tid 44543] [client 79.120.76.144:52872] [client 79.120.76.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aX44rcH-68uYbAtfrZ20AQAAAUc"]
[Sun Feb 01 02:12:45.822786 2026] [:error] [pid 31430:tid 31448] [client 51.83.9.208:60542] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aX5GHccb14YPxXg_g5F9bAAAAE4"]
[Sun Feb 01 02:12:48.552943 2026] [:error] [pid 39242:tid 39258] [client 51.83.9.208:59966] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aX5GINOgXnkKGGSSCIN4iAAAAAQ"]
[Sun Feb 01 02:12:50.987537 2026] [:error] [pid 18773:tid 18776] [client 51.83.9.208:56106] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aX5GItHy21j24IPrB1UaqAAAAYE"]
[Sun Feb 01 02:12:53.422030 2026] [:error] [pid 18773:tid 18789] [client 51.83.9.208:56122] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX5GJdHy21j24IPrB1UaqgAAAY4"]
[Sun Feb 01 02:12:56.072807 2026] [:error] [pid 31465:tid 31514] [client 51.83.9.208:56128] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aX5GKDkaGp475ez0mlxo1AAAAlQ"]
[Sun Feb 01 02:12:58.708043 2026] [:error] [pid 18803:tid 18819] [client 51.83.9.208:56140] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aX5GKi2kTcRk9EBIxOHQdQAAAg0"]
[Sun Feb 01 02:13:01.544819 2026] [:error] [pid 39339:tid 39365] [client 51.83.9.208:54038] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX5GLcWi-IjigR3oHY7GAAAAANg"]
[Sun Feb 01 02:13:04.387891 2026] [:error] [pid 44532:tid 44540] [client 51.83.9.208:54054] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aX5GMMH-68uYbAtfrZ29WQAAAUQ"]
[Sun Feb 01 02:13:07.022511 2026] [:error] [pid 59523:tid 59530] [client 51.83.9.208:54066] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX5GM5EkxOIGmVhqUWKxewAAAwM"]
[Sun Feb 01 02:13:09.642461 2026] [:error] [pid 31465:tid 31505] [client 51.83.9.208:37208] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aX5GNTkaGp475ez0mlxo7QAAAks"]
[Sun Feb 01 02:13:12.238312 2026] [:error] [pid 18773:tid 18777] [client 51.83.9.208:37218] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aX5GONHy21j24IPrB1UatAAAAYI"]
[Sun Feb 01 02:13:14.748630 2026] [:error] [pid 44533:tid 44563] [client 51.83.9.208:37222] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX5GOoNjc98kHMNVmnt-agAAAcA"]
[Sun Feb 01 02:13:17.313752 2026] [:error] [pid 44532:tid 44549] [client 51.83.9.208:37234] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX5GPcH-68uYbAtfrZ29nwAAAU0"]
[Sun Feb 01 02:13:19.902299 2026] [:error] [pid 31465:tid 31508] [client 51.83.9.208:58968] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aX5GPzkaGp475ez0mlxo-AAAAk4"]
[Sun Feb 01 02:13:22.485037 2026] [:error] [pid 44533:tid 44585] [client 51.83.9.208:58974] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aX5GQoNjc98kHMNVmnt-cgAAAdY"]
[Sun Feb 01 02:13:25.105752 2026] [:error] [pid 39339:tid 39360] [client 51.83.9.208:58976] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aX5GRcWi-IjigR3oHY7GIQAAANM"]
[Sun Feb 01 02:13:27.719252 2026] [:error] [pid 18803:tid 18825] [client 51.83.9.208:58990] [client 51.83.9.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aX5GRy2kTcRk9EBIxOHQoQAAAhM"]
[Sun Feb 01 05:39:51.882532 2026] [:error] [pid 10509:tid 10571] [client 123.187.240.242:33428] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aX52p1MNpJBihOJgwVvbrQAAAIA"]
[Sun Feb 01 06:41:18.248060 2026] [:error] [pid 10616:tid 10625] [client 152.70.215.57:42282] [client 152.70.215.57] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aX6FDmd8pZdmVx6pUp7uIQAAAMU"]
[Sun Feb 01 06:54:09.480992 2026] [:error] [pid 2033:tid 2035] [client 148.113.194.43:40210] [client 148.113.194.43] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aX6IEfF7B4oR5nK3T_MRowAAAQA"]
[Sun Feb 01 06:54:16.362015 2026] [:error] [pid 2033:tid 2035] [client 202.124.204.254:60052] [client 202.124.204.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aX6IGPF7B4oR5nK3T_MRrwAAAQA"]
[Sun Feb 01 09:24:15.002858 2026] [:error] [pid 10508:tid 10563] [client 195.201.199.99:40100] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aX6rPwFwdoMQv5EWp9uiOwAAAFM"]
[Sun Feb 01 09:24:18.744497 2026] [:error] [pid 10506:tid 10518] [client 195.201.199.99:54130] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aX6rQq32IC2Db4uwFyPX0gAAAAI"]
[Sun Feb 01 09:24:22.422837 2026] [:error] [pid 10509:tid 10584] [client 195.201.199.99:55716] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aX6rRlMNpJBihOJgwVsmswAAAI0"]
[Sun Feb 01 09:24:25.592595 2026] [:error] [pid 10509:tid 10577] [client 195.201.199.99:56934] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aX6rSVMNpJBihOJgwVsmuQAAAIY"]
[Sun Feb 01 09:24:29.056818 2026] [:error] [pid 10509:tid 10584] [client 195.201.199.99:58384] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aX6rTVMNpJBihOJgwVsmwQAAAI0"]
[Sun Feb 01 09:37:21.212523 2026] [:error] [pid 10616:tid 10632] [client 62.84.185.55:18358] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aX6uUWd8pZdmVx6pUp4zxQAAAMw"]
[Sun Feb 01 09:37:23.991398 2026] [:error] [pid 2033:tid 2038] [client 62.84.185.55:18366] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aX6uU_F7B4oR5nK3T_NfSgAAAQM"]
[Sun Feb 01 11:38:29.217203 2026] [:error] [pid 51610:tid 51618] [client 185.193.89.25:57790] [client 185.193.89.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aX7Ktd7GFdNFAqImMQCPNQAAAUQ"]
[Sun Feb 01 16:50:08.105560 2026] [:error] [pid 10508:tid 10561] [client 43.133.139.6:55636] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aX8TwAFwdoMQv5EWp9sgTgAAAFE"]
[Sun Feb 01 17:39:21.563491 2026] [:error] [pid 10508:tid 10563] [client 61.238.27.209:54498] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aX8fSQFwdoMQv5EWp9sxCAAAAFM"]
[Sun Feb 01 17:39:23.524204 2026] [:error] [pid 51610:tid 51614] [client 61.238.27.209:33466] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aX8fS97GFdNFAqImMQD1zAAAAUA"]
[Sun Feb 01 17:39:25.521573 2026] [:error] [pid 10509:tid 10574] [client 61.238.27.209:45188] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aX8fTVMNpJBihOJgwVvMYgAAAIM"]
[Sun Feb 01 17:39:27.607425 2026] [:error] [pid 10616:tid 10630] [client 61.238.27.209:54873] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aX8fT2d8pZdmVx6pUp7OqgAAAMo"]
[Sun Feb 01 17:39:29.597626 2026] [:error] [pid 2033:tid 2048] [client 61.238.27.209:51973] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aX8fUfF7B4oR5nK3T_PohgAAAQ0"]
[Sun Feb 01 17:39:31.570508 2026] [:error] [pid 10508:tid 10544] [client 61.238.27.209:16935] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aX8fUwFwdoMQv5EWp9sxDgAAAEA"]
[Sun Feb 01 17:39:33.761211 2026] [:error] [pid 10506:tid 10520] [client 61.238.27.209:48486] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aX8fVa32IC2Db4uwFyNtnQAAAAQ"]
[Sun Feb 01 17:39:35.768988 2026] [:error] [pid 10509:tid 10587] [client 61.238.27.209:13492] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aX8fV1MNpJBihOJgwVvMcAAAAJA"]
[Sun Feb 01 17:39:37.744319 2026] [:error] [pid 10508:tid 10555] [client 61.238.27.209:24834] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aX8fWQFwdoMQv5EWp9sxFQAAAEs"]
[Sun Feb 01 17:39:39.861123 2026] [:error] [pid 10506:tid 10521] [client 61.238.27.209:37716] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aX8fW632IC2Db4uwFyNtowAAAAU"]
[Sun Feb 01 17:39:41.999707 2026] [:error] [pid 2033:tid 2044] [client 61.238.27.209:41545] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aX8fXfF7B4oR5nK3T_PojAAAAQk"]
[Sun Feb 01 17:39:44.002688 2026] [:error] [pid 29578:tid 29586] [client 61.238.27.209:37444] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aX8fYEwa4IUBrS8Q04F0swAAAYQ"]
[Sun Feb 01 17:39:45.946409 2026] [:error] [pid 29578:tid 29599] [client 61.238.27.209:15907] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aX8fYUwa4IUBrS8Q04F0tgAAAZE"]
[Sun Feb 01 17:39:48.092199 2026] [:error] [pid 29578:tid 29584] [client 61.238.27.209:21874] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aX8fZEwa4IUBrS8Q04F0uAAAAYI"]
[Sun Feb 01 17:39:50.209329 2026] [:error] [pid 10509:tid 10594] [client 61.238.27.209:41237] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aX8fZlMNpJBihOJgwVvMegAAAJc"]
[Sun Feb 01 17:39:52.330849 2026] [:error] [pid 10509:tid 10592] [client 61.238.27.209:42360] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aX8faFMNpJBihOJgwVvMfAAAAJU"]
[Sun Feb 01 17:39:55.537748 2026] [:error] [pid 10508:tid 10568] [client 61.238.27.209:36936] [client 61.238.27.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aX8fawFwdoMQv5EWp9sxJgAAAFg"]
[Sun Feb 01 18:30:39.627268 2026] [:error] [pid 51610:tid 51615] [client 182.44.8.254:59613] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aX8rT97GFdNFAqImMQABpAAAAUE"]
[Sun Feb 01 19:33:41.480085 2026] [:error] [pid 51610:tid 51628] [client 145.239.66.34:35244] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aX86Fd7GFdNFAqImMQAQmgAAAU4"]
[Sun Feb 01 19:33:44.198668 2026] [:error] [pid 10506:tid 10528] [client 145.239.66.34:37954] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aX86GK32IC2Db4uwFyOSFQAAAAw"]
[Sun Feb 01 19:33:47.273500 2026] [:error] [pid 10506:tid 10523] [client 145.239.66.34:37960] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aX86G632IC2Db4uwFyOSHAAAAAc"]
[Sun Feb 01 19:33:49.980970 2026] [:error] [pid 10509:tid 10575] [client 145.239.66.34:37972] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aX86HVMNpJBihOJgwVvoTQAAAIQ"]
[Sun Feb 01 19:33:52.637213 2026] [:error] [pid 2033:tid 2053] [client 145.239.66.34:50132] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aX86IPF7B4oR5nK3T_MDuwAAARI"]
[Sun Feb 01 19:33:55.713202 2026] [:error] [pid 29578:tid 29591] [client 145.239.66.34:50140] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aX86I0wa4IUBrS8Q04GcyAAAAYk"]
[Sun Feb 01 19:33:58.405763 2026] [:error] [pid 10509:tid 10571] [client 145.239.66.34:50156] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aX86JlMNpJBihOJgwVvoWAAAAIA"]
[Sun Feb 01 19:34:01.222643 2026] [:error] [pid 29578:tid 29599] [client 145.239.66.34:50164] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aX86KUwa4IUBrS8Q04Gc1wAAAZE"]
[Sun Feb 01 19:34:04.098424 2026] [:error] [pid 2033:tid 2057] [client 145.239.66.34:55970] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aX86LPF7B4oR5nK3T_MDxAAAARQ"]
[Sun Feb 01 19:34:06.879953 2026] [:error] [pid 29578:tid 29601] [client 145.239.66.34:55986] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aX86Lkwa4IUBrS8Q04Gc4QAAAZM"]
[Sun Feb 01 19:34:09.569609 2026] [:error] [pid 10616:tid 10627] [client 145.239.66.34:55996] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aX86MWd8pZdmVx6pUp7n1AAAAMc"]
[Sun Feb 01 19:34:12.144123 2026] [:error] [pid 10508:tid 10564] [client 145.239.66.34:35426] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aX86NAFwdoMQv5EWp9tQJAAAAFQ"]
[Sun Feb 01 19:34:14.668923 2026] [:error] [pid 29578:tid 29601] [client 145.239.66.34:35432] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aX86Nkwa4IUBrS8Q04Gc5AAAAZM"]
[Sun Feb 01 19:34:17.141634 2026] [:error] [pid 10508:tid 10558] [client 145.239.66.34:35464] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aX86OQFwdoMQv5EWp9tQKwAAAE4"]
[Sun Feb 01 19:34:19.596625 2026] [:error] [pid 51610:tid 51629] [client 145.239.66.34:35478] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aX86O97GFdNFAqImMQAQrwAAAU8"]
[Sun Feb 01 19:34:21.991288 2026] [:error] [pid 51610:tid 51636] [client 145.239.66.34:46950] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aX86Pd7GFdNFAqImMQAQtAAAAVY"]
[Sun Feb 01 19:34:24.437197 2026] [:error] [pid 10508:tid 10567] [client 145.239.66.34:46964] [client 145.239.66.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aX86QAFwdoMQv5EWp9tQNgAAAFc"]
[Sun Feb 01 20:31:11.048109 2026] [:error] [pid 10616:tid 10632] [client 38.246.32.217:56051] [client 38.246.32.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.246.32.217, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aX9Hj2d8pZdmVx6pUp7yywAAAMw"]
[Sun Feb 01 20:40:09.285316 2026] [:error] [pid 2033:tid 2035] [client 20.212.209.31:14109] [client 20.212.209.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aX9JqfF7B4oR5nK3T_MR6AAAAQA"]
[Sun Feb 01 20:40:09.686200 2026] [:error] [pid 29578:tid 29592] [client 20.212.209.31:2455] [client 20.212.209.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aX9JqUwa4IUBrS8Q04GuzgAAAYo"]
[Sun Feb 01 20:40:10.083862 2026] [:error] [pid 10616:tid 10628] [client 20.212.209.31:2702] [client 20.212.209.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aX9Jqmd8pZdmVx6pUp70vwAAAMg"]
[Sun Feb 01 20:40:10.446935 2026] [:error] [pid 10508:tid 10568] [client 20.212.209.31:2938] [client 20.212.209.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aX9JqgFwdoMQv5EWp9tg5AAAAFg"]
[Mon Feb 02 01:17:09.043828 2026] [:error] [pid 8877:tid 8894] [client 182.44.67.97:60762] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aX-KlVjWRgIEkmjg6oulNAAAAs0"]
[Mon Feb 02 03:20:11.958919 2026] [:error] [pid 54464:tid 54488] [client 151.196.18.82:51687] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aX-na3z5wlbByzCBBGQsGQAAABY"]
[Mon Feb 02 03:20:12.864768 2026] [:error] [pid 54377:tid 54390] [client 151.196.18.82:52401] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aX-nbPhqUeHWOT-OYVys6gAAAIg"]
[Mon Feb 02 03:20:13.766683 2026] [:error] [pid 54377:tid 54394] [client 151.196.18.82:52428] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aX-nbfhqUeHWOT-OYVys7QAAAIw"]
[Mon Feb 02 03:20:16.140143 2026] [:error] [pid 54379:tid 54444] [client 151.196.18.82:52490] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aX-ncM6vdfaryNIx2vgoQAAAAQg"]
[Mon Feb 02 03:20:17.031869 2026] [:error] [pid 54464:tid 54484] [client 151.196.18.82:52499] [client 151.196.18.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aX-ncXz5wlbByzCBBGQsJwAAABI"]
[Mon Feb 02 04:47:39.460969 2026] [:error] [pid 63034:tid 63139] [client 45.130.83.158:38421] [client 45.130.83.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aX-76-KXlgw75_wfbHoRQQAAAJU"]
[Mon Feb 02 04:47:40.075327 2026] [:error] [pid 63033:tid 63112] [client 45.130.83.167:32467] [client 45.130.83.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aX-77PeMX2QyIh3K16oV1AAAAFU"]
[Mon Feb 02 04:49:46.014128 2026] [:error] [pid 33612:tid 33632] [client 101.33.81.73:52380] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aX-8astFn80qQEmo5QopYQAAARI"]
[Mon Feb 02 08:04:24.682647 2026] [:error] [pid 63153:tid 63173] [client 193.37.32.203:34505] [client 193.37.32.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/nrhogjyecktixbal0fnt5Cakc.php"] [unique_id "aX_qCHC9GXHnmLkdgdnlKwAAAMw"]
[Mon Feb 02 08:04:25.029169 2026] [:error] [pid 63034:tid 63118] [client 193.37.32.214:39727] [client 193.37.32.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/znv3hcxz6mwjdz1jwxrxiCakc.php"] [unique_id "aX_qCeKXlgw75_wfbHo_MgAAAIA"]
[Mon Feb 02 08:04:25.376566 2026] [:error] [pid 8507:tid 8520] [client 193.37.32.212:61787] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aX_qCdk9kluqaCHoCymSIAAAAcs"]
[Mon Feb 02 08:04:25.725188 2026] [:error] [pid 63153:tid 63175] [client 193.37.32.220:22571] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/deepseek_d.php"] [unique_id "aX_qCXC9GXHnmLkdgdnlMAAAAM4"]
[Mon Feb 02 08:04:26.071595 2026] [:error] [pid 63153:tid 63183] [client 193.37.32.197:32689] [client 193.37.32.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aX_qCnC9GXHnmLkdgdnlNAAAANY"]
[Mon Feb 02 08:04:26.423420 2026] [:error] [pid 62826:tid 62844] [client 193.37.32.221:42633] [client 193.37.32.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aX_qCoF6vPvg_C5dUL-w6QAAAZA"]
[Mon Feb 02 08:04:31.774725 2026] [:error] [pid 63032:tid 63064] [client 193.37.32.206:54075] [client 193.37.32.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/pu9.php"] [unique_id "aX_qD3yEQ1PkpebvdRg5zQAAAAE"]
[Mon Feb 02 08:04:32.124975 2026] [:error] [pid 8507:tid 8524] [client 193.37.32.200:26339] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/uk5pqv0wksbuaourleCakc.php"] [unique_id "aX_qENk9kluqaCHoCymSSgAAAc8"]
[Mon Feb 02 08:04:32.471752 2026] [:error] [pid 62826:tid 62839] [client 193.37.32.183:25537] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp.php"] [unique_id "aX_qEIF6vPvg_C5dUL-xAwAAAYs"]
[Mon Feb 02 08:04:32.820866 2026] [:error] [pid 33612:tid 33629] [client 193.37.32.187:25213] [client 193.37.32.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aX_qEMtFn80qQEmo5Qpo5gAAAQ8"]
[Mon Feb 02 08:04:33.166310 2026] [:error] [pid 63032:tid 63074] [client 193.37.32.216:38647] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aX_qEXyEQ1PkpebvdRg50gAAAAs"]
[Mon Feb 02 08:04:33.511737 2026] [:error] [pid 63153:tid 63177] [client 193.37.32.225:56243] [client 193.37.32.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aX_qEXC9GXHnmLkdgdnlVwAAANA"]
[Mon Feb 02 08:04:33.858770 2026] [:error] [pid 63032:tid 63079] [client 193.37.32.193:42627] [client 193.37.32.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aX_qEXyEQ1PkpebvdRg50wAAABA"]
[Mon Feb 02 08:04:34.203331 2026] [:error] [pid 63153:tid 63176] [client 193.37.32.205:59589] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/"] [unique_id "aX_qEnC9GXHnmLkdgdnlWwAAAM8"]
[Mon Feb 02 08:04:34.550130 2026] [:error] [pid 63034:tid 63135] [client 193.37.32.212:29515] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aX_qEuKXlgw75_wfbHo_TgAAAJE"]
[Mon Feb 02 08:04:34.897142 2026] [:error] [pid 63033:tid 63093] [client 193.37.32.205:55409] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file_content_657f93f532f3b/"] [unique_id "aX_qEveMX2QyIh3K16pKPAAAAEI"]
[Mon Feb 02 08:04:35.245195 2026] [:error] [pid 63033:tid 63112] [client 193.37.32.225:45975] [client 193.37.32.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aX_qE_eMX2QyIh3K16pKPgAAAFU"]
[Mon Feb 02 08:04:35.598803 2026] [:error] [pid 33612:tid 33631] [client 193.37.32.219:39447] [client 193.37.32.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aX_qE8tFn80qQEmo5Qpo-AAAARE"]
[Mon Feb 02 08:04:38.297483 2026] [:error] [pid 63033:tid 63099] [client 193.37.32.200:60409] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/"] [unique_id "aX_qFveMX2QyIh3K16pKSQAAAEg"]
[Mon Feb 02 08:04:43.644743 2026] [:error] [pid 63033:tid 63091] [client 193.37.32.224:21139] [client 193.37.32.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aX_qG_eMX2QyIh3K16pKaAAAAEA"]
[Mon Feb 02 08:04:43.992132 2026] [:error] [pid 63033:tid 63107] [client 193.37.32.206:40425] [client 193.37.32.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ab.php"] [unique_id "aX_qG_eMX2QyIh3K16pKbAAAAFA"]
[Mon Feb 02 08:04:49.339657 2026] [:error] [pid 63032:tid 63073] [client 193.37.32.184:46755] [client 193.37.32.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aX_qIXyEQ1PkpebvdRg56wAAAAo"]
[Mon Feb 02 08:04:49.686399 2026] [:error] [pid 62826:tid 62830] [client 193.37.32.209:31873] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aX_qIYF6vPvg_C5dUL-xJgAAAYI"]
[Mon Feb 02 08:04:50.033312 2026] [:error] [pid 46008:tid 46025] [client 193.37.32.182:56753] [client 193.37.32.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aX_qIiRa52iYn7SlSMkAuwAAAU4"]
[Mon Feb 02 08:04:50.380797 2026] [:error] [pid 46008:tid 46035] [client 193.37.32.226:27067] [client 193.37.32.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/"] [unique_id "aX_qIiRa52iYn7SlSMkAvAAAAVg"]
[Mon Feb 02 08:04:50.727030 2026] [:error] [pid 8507:tid 8533] [client 193.37.32.219:43459] [client 193.37.32.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aX_qItk9kluqaCHoCymSbAAAAdg"]
[Mon Feb 02 08:04:51.072413 2026] [:error] [pid 63153:tid 63166] [client 193.37.32.179:42195] [client 193.37.32.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aX_qI3C9GXHnmLkdgdnlkgAAAMU"]
[Mon Feb 02 08:04:51.419930 2026] [:error] [pid 46008:tid 46024] [client 193.37.32.180:36769] [client 193.37.32.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "aX_qIyRa52iYn7SlSMkAvgAAAU0"]
[Mon Feb 02 08:04:51.765634 2026] [:error] [pid 46008:tid 46030] [client 193.37.32.181:30087] [client 193.37.32.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/cache/"] [unique_id "aX_qIyRa52iYn7SlSMkAwAAAAVM"]
[Mon Feb 02 08:04:52.114143 2026] [:error] [pid 63153:tid 63178] [client 193.37.32.197:39591] [client 193.37.32.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-confiq.php"] [unique_id "aX_qJHC9GXHnmLkdgdnllwAAANE"]
[Mon Feb 02 08:04:52.460104 2026] [:error] [pid 63032:tid 63082] [client 193.37.32.189:21659] [client 193.37.32.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aX_qJHyEQ1PkpebvdRg57AAAABM"]
[Mon Feb 02 08:04:52.812729 2026] [:error] [pid 46008:tid 46016] [client 193.37.32.221:55283] [client 193.37.32.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aX_qJCRa52iYn7SlSMkAwQAAAUY"]
[Mon Feb 02 08:04:53.166657 2026] [:error] [pid 63034:tid 63126] [client 193.37.32.182:23059] [client 193.37.32.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/images/selam.php"] [unique_id "aX_qJeKXlgw75_wfbHo_dwAAAIg"]
[Mon Feb 02 08:04:53.514778 2026] [:error] [pid 33612:tid 33625] [client 193.37.32.222:61935] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aX_qJctFn80qQEmo5QppIgAAAQs"]
[Mon Feb 02 08:04:53.862319 2026] [:error] [pid 63153:tid 63166] [client 193.37.32.197:50185] [client 193.37.32.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aX_qJXC9GXHnmLkdgdnlngAAAMU"]
[Mon Feb 02 08:04:54.207883 2026] [:error] [pid 63033:tid 63111] [client 193.37.32.216:53017] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "aX_qJveMX2QyIh3K16pKgQAAAFQ"]
[Mon Feb 02 08:04:54.553031 2026] [:error] [pid 63153:tid 63161] [client 193.37.32.201:32443] [client 193.37.32.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aX_qJnC9GXHnmLkdgdnlowAAAMA"]
[Mon Feb 02 08:04:54.904309 2026] [:error] [pid 33612:tid 33636] [client 193.37.32.183:34319] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aX_qJstFn80qQEmo5QppKAAAARY"]
[Mon Feb 02 08:04:55.251709 2026] [:error] [pid 63032:tid 63078] [client 193.37.32.187:30893] [client 193.37.32.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/"] [unique_id "aX_qJ3yEQ1PkpebvdRg58gAAAA8"]
[Mon Feb 02 08:04:55.596986 2026] [:error] [pid 63033:tid 63099] [client 193.37.32.225:51053] [client 193.37.32.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "aX_qJ_eMX2QyIh3K16pKiAAAAEg"]
[Mon Feb 02 08:04:55.944700 2026] [:error] [pid 63032:tid 63082] [client 193.37.32.222:26793] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aX_qJ3yEQ1PkpebvdRg5-QAAABM"]
[Mon Feb 02 08:04:56.291438 2026] [:error] [pid 62826:tid 62831] [client 193.37.32.184:40835] [client 193.37.32.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aX_qKIF6vPvg_C5dUL-xKgAAAYM"]
[Mon Feb 02 08:04:56.638098 2026] [:error] [pid 46008:tid 46034] [client 193.37.32.223:20435] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aX_qKCRa52iYn7SlSMkAxQAAAVc"]
[Mon Feb 02 08:04:56.982750 2026] [:error] [pid 63032:tid 63067] [client 193.37.32.188:53363] [client 193.37.32.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aX_qKHyEQ1PkpebvdRg6AgAAAAQ"]
[Mon Feb 02 08:04:57.328268 2026] [:error] [pid 63034:tid 63136] [client 193.37.32.194:36905] [client 193.37.32.194] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/class.api.php"] [unique_id "aX_qKeKXlgw75_wfbHo_hgAAAJI"]
[Mon Feb 02 08:04:57.673474 2026] [:error] [pid 63034:tid 63142] [client 193.37.32.199:36501] [client 193.37.32.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aX_qKeKXlgw75_wfbHo_iQAAAJg"]
[Mon Feb 02 08:04:58.020086 2026] [:error] [pid 63033:tid 63114] [client 193.37.32.209:58535] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/"] [unique_id "aX_qKveMX2QyIh3K16pKjQAAAFc"]
[Mon Feb 02 08:04:58.364851 2026] [:error] [pid 8507:tid 8518] [client 193.37.32.222:25529] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aX_qKtk9kluqaCHoCymSeQAAAck"]
[Mon Feb 02 08:04:58.709886 2026] [:error] [pid 63153:tid 63173] [client 193.37.32.227:37269] [client 193.37.32.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config-sample.php"] [unique_id "aX_qKnC9GXHnmLkdgdnlqAAAAMw"]
[Mon Feb 02 08:04:59.056435 2026] [:error] [pid 46008:tid 46029] [client 193.37.32.206:51319] [client 193.37.32.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "aX_qKyRa52iYn7SlSMkAzQAAAVI"]
[Mon Feb 02 08:04:59.407435 2026] [:error] [pid 63032:tid 63078] [client 193.37.32.224:24391] [client 193.37.32.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/radio.php"] [unique_id "aX_qK3yEQ1PkpebvdRg6CgAAAA8"]
[Mon Feb 02 08:04:59.754781 2026] [:error] [pid 62826:tid 62852] [client 193.37.32.190:38813] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aX_qK4F6vPvg_C5dUL-xMQAAAZg"]
[Mon Feb 02 08:05:00.101543 2026] [:error] [pid 63153:tid 63180] [client 193.37.32.200:63967] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/updates.php"] [unique_id "aX_qLHC9GXHnmLkdgdnlqgAAANM"]
[Mon Feb 02 08:05:00.446797 2026] [:error] [pid 62826:tid 62836] [client 193.37.32.204:21541] [client 193.37.32.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/shell.php"] [unique_id "aX_qLIF6vPvg_C5dUL-xMwAAAYg"]
[Mon Feb 02 08:05:00.816177 2026] [:error] [pid 62826:tid 62848] [client 193.37.32.220:61255] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aX_qLIF6vPvg_C5dUL-xNQAAAZQ"]
[Mon Feb 02 08:05:01.168982 2026] [:error] [pid 46008:tid 46014] [client 193.37.32.228:42247] [client 193.37.32.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aX_qLSRa52iYn7SlSMkA0gAAAUQ"]
[Mon Feb 02 08:05:01.514833 2026] [:error] [pid 63033:tid 63104] [client 193.37.32.220:32491] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aX_qLfeMX2QyIh3K16pKkwAAAE0"]
[Mon Feb 02 08:05:01.861357 2026] [:error] [pid 62826:tid 62843] [client 193.37.32.201:53651] [client 193.37.32.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aX_qLYF6vPvg_C5dUL-xPwAAAY8"]
[Mon Feb 02 08:05:02.206585 2026] [:error] [pid 8507:tid 8526] [client 193.37.32.218:35809] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "aX_qLtk9kluqaCHoCymSfwAAAdE"]
[Mon Feb 02 08:05:02.552291 2026] [:error] [pid 62826:tid 62845] [client 193.37.32.202:62053] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/"] [unique_id "aX_qLoF6vPvg_C5dUL-xRQAAAZE"]
[Mon Feb 02 08:05:02.894875 2026] [:error] [pid 62826:tid 62834] [client 193.37.32.187:49747] [client 193.37.32.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/"] [unique_id "aX_qLoF6vPvg_C5dUL-xSAAAAYY"]
[Mon Feb 02 08:05:03.239665 2026] [:error] [pid 62826:tid 62838] [client 193.37.32.209:54369] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/"] [unique_id "aX_qL4F6vPvg_C5dUL-xSgAAAYo"]
[Mon Feb 02 08:05:03.585994 2026] [:error] [pid 63153:tid 63162] [client 193.37.32.207:59735] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/shell/"] [unique_id "aX_qL3C9GXHnmLkdgdnlsAAAAME"]
[Mon Feb 02 08:05:03.929821 2026] [:error] [pid 46008:tid 46023] [client 193.37.32.226:50483] [client 193.37.32.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aX_qLyRa52iYn7SlSMkA1AAAAUw"]
[Mon Feb 02 08:05:04.276233 2026] [:error] [pid 62826:tid 62833] [client 193.37.32.220:30951] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aX_qMIF6vPvg_C5dUL-xUAAAAYU"]
[Mon Feb 02 08:05:04.622853 2026] [:error] [pid 62826:tid 62840] [client 193.37.32.184:57743] [client 193.37.32.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aX_qMIF6vPvg_C5dUL-xVAAAAYw"]
[Mon Feb 02 08:05:04.970246 2026] [:error] [pid 62826:tid 62829] [client 193.37.32.208:62587] [client 193.37.32.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap/function.php"] [unique_id "aX_qMIF6vPvg_C5dUL-xWgAAAYE"]
[Mon Feb 02 08:05:05.320944 2026] [:error] [pid 63033:tid 63093] [client 193.37.32.200:25393] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aX_qMfeMX2QyIh3K16pKnAAAAEI"]
[Mon Feb 02 08:05:05.666246 2026] [:error] [pid 63033:tid 63100] [client 193.37.32.184:22763] [client 193.37.32.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aX_qMfeMX2QyIh3K16pKnwAAAEk"]
[Mon Feb 02 08:05:06.022987 2026] [:error] [pid 63033:tid 63110] [client 193.37.32.197:32219] [client 193.37.32.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/"] [unique_id "aX_qMveMX2QyIh3K16pKogAAAFM"]
[Mon Feb 02 08:05:06.368794 2026] [:error] [pid 63033:tid 63097] [client 193.37.32.208:39901] [client 193.37.32.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aX_qMveMX2QyIh3K16pKpgAAAEY"]
[Mon Feb 02 08:05:06.715513 2026] [:error] [pid 62826:tid 62833] [client 193.37.32.216:43617] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/"] [unique_id "aX_qMoF6vPvg_C5dUL-xZQAAAYU"]
[Mon Feb 02 08:05:07.059428 2026] [:error] [pid 46008:tid 46018] [client 193.37.32.201:44333] [client 193.37.32.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aX_qMyRa52iYn7SlSMkA3wAAAUc"]
[Mon Feb 02 08:05:07.403115 2026] [:error] [pid 63032:tid 63077] [client 193.37.32.210:36845] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "aX_qM3yEQ1PkpebvdRg6EQAAAA4"]
[Mon Feb 02 08:05:07.747512 2026] [:error] [pid 62826:tid 62845] [client 193.37.32.195:52993] [client 193.37.32.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aX_qM4F6vPvg_C5dUL-xbwAAAZE"]
[Mon Feb 02 08:05:08.093016 2026] [:error] [pid 63033:tid 63103] [client 193.37.32.198:37263] [client 193.37.32.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aX_qNPeMX2QyIh3K16pKrQAAAEw"]
[Mon Feb 02 08:05:08.465401 2026] [:error] [pid 8507:tid 8528] [client 193.37.32.202:43231] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/"] [unique_id "aX_qNNk9kluqaCHoCymSgQAAAdM"]
[Mon Feb 02 08:05:08.818927 2026] [:error] [pid 46008:tid 46016] [client 193.37.32.217:54273] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/"] [unique_id "aX_qNCRa52iYn7SlSMkA4wAAAUY"]
[Mon Feb 02 08:05:09.164573 2026] [:error] [pid 62826:tid 62832] [client 193.37.32.180:30229] [client 193.37.32.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content.php"] [unique_id "aX_qNYF6vPvg_C5dUL-xdAAAAYQ"]
[Mon Feb 02 08:05:09.511415 2026] [:error] [pid 46008:tid 46021] [client 193.37.32.217:27967] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aX_qNSRa52iYn7SlSMkA5AAAAUo"]
[Mon Feb 02 08:05:09.859169 2026] [:error] [pid 33612:tid 33618] [client 193.37.32.207:32427] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aX_qNctFn80qQEmo5QppQAAAAQQ"]
[Mon Feb 02 08:05:10.204457 2026] [:error] [pid 33612:tid 33615] [client 193.37.32.190:55181] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aX_qNstFn80qQEmo5QppQgAAAQE"]
[Mon Feb 02 08:05:10.549757 2026] [:error] [pid 46008:tid 46028] [client 193.37.32.202:60119] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/chosen.php"] [unique_id "aX_qNiRa52iYn7SlSMkA5QAAAVE"]
[Mon Feb 02 08:05:10.896432 2026] [:error] [pid 63033:tid 63111] [client 193.37.32.216:37385] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aX_qNveMX2QyIh3K16pKuwAAAFQ"]
[Mon Feb 02 08:05:11.241722 2026] [:error] [pid 62826:tid 62834] [client 193.37.32.200:55273] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "aX_qN4F6vPvg_C5dUL-xfgAAAYY"]
[Mon Feb 02 08:05:11.589893 2026] [:error] [pid 63033:tid 63096] [client 193.37.32.204:38109] [client 193.37.32.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aX_qN_eMX2QyIh3K16pKwAAAAEU"]
[Mon Feb 02 08:05:13.370998 2026] [:error] [pid 62826:tid 62838] [client 193.37.32.180:32177] [client 193.37.32.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aX_qOYF6vPvg_C5dUL-xigAAAYo"]
[Mon Feb 02 08:05:13.718069 2026] [:error] [pid 62826:tid 62851] [client 193.37.32.205:23179] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/about.php"] [unique_id "aX_qOYF6vPvg_C5dUL-xjQAAAZc"]
[Mon Feb 02 08:05:14.064355 2026] [:error] [pid 62826:tid 62836] [client 193.37.32.182:35655] [client 193.37.32.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aX_qOoF6vPvg_C5dUL-xkgAAAYg"]
[Mon Feb 02 08:05:14.410602 2026] [:error] [pid 63033:tid 63115] [client 193.37.32.222:54601] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/"] [unique_id "aX_qOveMX2QyIh3K16pK0AAAAFg"]
[Mon Feb 02 08:05:16.365176 2026] [:error] [pid 63033:tid 63111] [client 193.37.32.190:24309] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/archives/"] [unique_id "aX_qPPeMX2QyIh3K16pK4gAAAFQ"]
[Mon Feb 02 08:05:16.715405 2026] [:error] [pid 62826:tid 62835] [client 193.37.32.208:32381] [client 193.37.32.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/"] [unique_id "aX_qPIF6vPvg_C5dUL-xoQAAAYc"]
[Mon Feb 02 08:05:17.062273 2026] [:error] [pid 63033:tid 63112] [client 193.37.32.188:59523] [client 193.37.32.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aX_qPfeMX2QyIh3K16pK5QAAAFU"]
[Mon Feb 02 08:05:17.409242 2026] [:error] [pid 63033:tid 63092] [client 193.37.32.209:33383] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aX_qPfeMX2QyIh3K16pK6gAAAEE"]
[Mon Feb 02 08:05:17.754136 2026] [:error] [pid 63033:tid 63099] [client 193.37.32.193:44863] [client 193.37.32.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aX_qPfeMX2QyIh3K16pK7wAAAEg"]
[Mon Feb 02 08:05:18.100049 2026] [:error] [pid 63032:tid 63071] [client 193.37.32.182:28181] [client 193.37.32.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/"] [unique_id "aX_qPnyEQ1PkpebvdRg6HwAAAAg"]
[Mon Feb 02 08:05:18.444085 2026] [:error] [pid 63153:tid 63181] [client 193.37.32.199:59097] [client 193.37.32.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aX_qPnC9GXHnmLkdgdnlwAAAANQ"]
[Mon Feb 02 08:05:18.788252 2026] [:error] [pid 62826:tid 62851] [client 193.37.32.222:34549] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aX_qPoF6vPvg_C5dUL-xrgAAAZc"]
[Mon Feb 02 08:05:24.135403 2026] [:error] [pid 8507:tid 8523] [client 193.37.32.226:42507] [client 193.37.32.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aX_qRNk9kluqaCHoCymSjAAAAc4"]
[Mon Feb 02 08:05:24.480228 2026] [:error] [pid 63032:tid 63084] [client 193.37.32.203:29195] [client 193.37.32.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aX_qRHyEQ1PkpebvdRg6KgAAABU"]
[Mon Feb 02 08:05:24.837298 2026] [:error] [pid 8507:tid 8515] [client 193.37.32.196:31051] [client 193.37.32.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2024/"] [unique_id "aX_qRNk9kluqaCHoCymSkQAAAcY"]
[Mon Feb 02 08:05:25.182146 2026] [:error] [pid 8507:tid 8520] [client 193.37.32.221:28385] [client 193.37.32.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/"] [unique_id "aX_qRdk9kluqaCHoCymSkgAAAcs"]
[Mon Feb 02 08:05:25.527892 2026] [:error] [pid 46008:tid 46028] [client 193.37.32.198:22021] [client 193.37.32.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/function/function.php"] [unique_id "aX_qRSRa52iYn7SlSMkA_AAAAVE"]
[Mon Feb 02 08:05:25.871895 2026] [:error] [pid 46008:tid 46010] [client 193.37.32.201:50125] [client 193.37.32.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "aX_qRSRa52iYn7SlSMkA_QAAAUA"]
[Mon Feb 02 08:05:26.218422 2026] [:error] [pid 8507:tid 8516] [client 193.37.32.212:54161] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/404.php"] [unique_id "aX_qRtk9kluqaCHoCymSlgAAAcc"]
[Mon Feb 02 08:05:26.567461 2026] [:error] [pid 46008:tid 46029] [client 193.37.32.189:59911] [client 193.37.32.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aX_qRiRa52iYn7SlSMkBAwAAAVI"]
[Mon Feb 02 08:05:26.913732 2026] [:error] [pid 8507:tid 8521] [client 193.37.32.203:63533] [client 193.37.32.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aX_qRtk9kluqaCHoCymSmgAAAcw"]
[Mon Feb 02 08:05:27.260249 2026] [:error] [pid 63153:tid 63184] [client 193.37.32.196:58113] [client 193.37.32.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/"] [unique_id "aX_qR3C9GXHnmLkdgdnl2AAAANc"]
[Mon Feb 02 08:05:27.609902 2026] [:error] [pid 33612:tid 33615] [client 193.37.32.213:54777] [client 193.37.32.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "aX_qR8tFn80qQEmo5QppagAAAQE"]
[Mon Feb 02 08:05:27.957721 2026] [:error] [pid 63033:tid 63106] [client 193.37.32.218:20373] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "aX_qR_eMX2QyIh3K16pLDwAAAE8"]
[Mon Feb 02 08:05:28.304945 2026] [:error] [pid 63034:tid 63120] [client 193.37.32.220:24287] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aX_qSOKXlgw75_wfbHo_pgAAAII"]
[Mon Feb 02 08:05:28.648011 2026] [:error] [pid 46008:tid 46032] [client 193.37.32.198:32275] [client 193.37.32.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-conflg.php"] [unique_id "aX_qSCRa52iYn7SlSMkBCAAAAVU"]
[Mon Feb 02 08:05:28.992461 2026] [:error] [pid 62826:tid 62847] [client 193.37.32.224:56591] [client 193.37.32.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aX_qSIF6vPvg_C5dUL-xxgAAAZM"]
[Mon Feb 02 08:05:29.339944 2026] [:error] [pid 63153:tid 63161] [client 193.37.32.222:27783] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aX_qSXC9GXHnmLkdgdnl2gAAAMA"]
[Mon Feb 02 08:05:29.685391 2026] [:error] [pid 33612:tid 33632] [client 193.37.32.201:61929] [client 193.37.32.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/"] [unique_id "aX_qSctFn80qQEmo5QppdgAAARI"]
[Mon Feb 02 08:05:30.030119 2026] [:error] [pid 33612:tid 33633] [client 193.37.32.218:20515] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aX_qSstFn80qQEmo5QppewAAARM"]
[Mon Feb 02 08:05:30.379044 2026] [:error] [pid 33612:tid 33638] [client 193.37.32.206:60601] [client 193.37.32.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/"] [unique_id "aX_qSstFn80qQEmo5QppfQAAARg"]
[Mon Feb 02 08:05:30.735398 2026] [:error] [pid 33612:tid 33620] [client 193.37.32.180:40403] [client 193.37.32.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "aX_qSstFn80qQEmo5QppgQAAAQY"]
[Mon Feb 02 08:05:31.193914 2026] [:error] [pid 62826:tid 62852] [client 193.37.32.213:59785] [client 193.37.32.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/packed.php"] [unique_id "aX_qS4F6vPvg_C5dUL-xzAAAAZg"]
[Mon Feb 02 08:05:31.547210 2026] [:error] [pid 33612:tid 33621] [client 193.37.32.198:40733] [client 193.37.32.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "aX_qS8tFn80qQEmo5QpphAAAAQc"]
[Mon Feb 02 08:05:31.891801 2026] [:error] [pid 63033:tid 63100] [client 193.37.32.221:46423] [client 193.37.32.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/"] [unique_id "aX_qS_eMX2QyIh3K16pLHQAAAEk"]
[Mon Feb 02 08:05:32.238180 2026] [:error] [pid 62826:tid 62828] [client 193.37.32.226:35167] [client 193.37.32.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aX_qTIF6vPvg_C5dUL-x0AAAAYA"]
[Mon Feb 02 08:05:32.583445 2026] [:error] [pid 33612:tid 33622] [client 193.37.32.219:27741] [client 193.37.32.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aX_qTMtFn80qQEmo5QppiAAAAQg"]
[Mon Feb 02 08:05:32.928259 2026] [:error] [pid 63033:tid 63112] [client 193.37.32.205:51793] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/edit.php"] [unique_id "aX_qTPeMX2QyIh3K16pLIAAAAFU"]
[Mon Feb 02 08:05:33.277863 2026] [:error] [pid 8507:tid 8529] [client 193.37.32.186:58099] [client 193.37.32.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aX_qTdk9kluqaCHoCymSogAAAdQ"]
[Mon Feb 02 08:05:33.622328 2026] [:error] [pid 62826:tid 62846] [client 193.37.32.205:47557] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aX_qTYF6vPvg_C5dUL-x0gAAAZI"]
[Mon Feb 02 08:05:33.968235 2026] [:error] [pid 8507:tid 8513] [client 193.37.32.222:21689] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aX_qTdk9kluqaCHoCymSpAAAAcQ"]
[Mon Feb 02 08:05:34.318139 2026] [:error] [pid 63153:tid 63180] [client 193.37.32.203:23875] [client 193.37.32.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/zoom1.php"] [unique_id "aX_qTnC9GXHnmLkdgdnl4gAAANM"]
[Mon Feb 02 08:05:34.664108 2026] [:error] [pid 63033:tid 63105] [client 193.37.32.205:35725] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aX_qTveMX2QyIh3K16pLLAAAAE4"]
[Mon Feb 02 08:05:35.011499 2026] [:error] [pid 63033:tid 63103] [client 193.37.32.209:39187] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aX_qT_eMX2QyIh3K16pLLQAAAEw"]
[Mon Feb 02 08:05:35.358758 2026] [:error] [pid 8507:tid 8530] [client 193.37.32.210:60035] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aX_qT9k9kluqaCHoCymSqQAAAdU"]
[Mon Feb 02 08:05:35.707384 2026] [:error] [pid 63033:tid 63114] [client 193.37.32.179:44091] [client 193.37.32.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aX_qT_eMX2QyIh3K16pLMAAAAFc"]
[Mon Feb 02 08:05:36.053208 2026] [:error] [pid 46008:tid 46016] [client 193.37.32.221:63903] [client 193.37.32.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/network_xo.php"] [unique_id "aX_qUCRa52iYn7SlSMkBDwAAAUY"]
[Mon Feb 02 08:05:36.398301 2026] [:error] [pid 63153:tid 63162] [client 193.37.32.221:33215] [client 193.37.32.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/"] [unique_id "aX_qUHC9GXHnmLkdgdnl6QAAAME"]
[Mon Feb 02 08:05:36.752414 2026] [:error] [pid 46008:tid 46035] [client 193.37.32.213:24401] [client 193.37.32.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/222.php"] [unique_id "aX_qUCRa52iYn7SlSMkBEwAAAVg"]
[Mon Feb 02 08:05:37.097459 2026] [:error] [pid 63033:tid 63104] [client 193.37.32.223:32213] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/dofault.php"] [unique_id "aX_qUfeMX2QyIh3K16pLMwAAAE0"]
[Mon Feb 02 08:05:37.444111 2026] [:error] [pid 46008:tid 46030] [client 193.37.32.214:20041] [client 193.37.32.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "aX_qUSRa52iYn7SlSMkBFgAAAVM"]
[Mon Feb 02 08:05:37.790017 2026] [:error] [pid 63033:tid 63091] [client 193.37.32.218:20415] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/"] [unique_id "aX_qUfeMX2QyIh3K16pLNwAAAEA"]
[Mon Feb 02 08:05:38.135152 2026] [:error] [pid 33612:tid 33624] [client 193.37.32.209:31915] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aX_qUstFn80qQEmo5QppowAAAQo"]
[Mon Feb 02 08:05:38.481801 2026] [:error] [pid 63033:tid 63106] [client 193.37.32.202:64857] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/components/"] [unique_id "aX_qUveMX2QyIh3K16pLOwAAAE8"]
[Mon Feb 02 08:05:38.829024 2026] [:error] [pid 8507:tid 8529] [client 193.37.32.224:35795] [client 193.37.32.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/"] [unique_id "aX_qUtk9kluqaCHoCymSrwAAAdQ"]
[Mon Feb 02 08:05:39.177491 2026] [:error] [pid 63153:tid 63176] [client 193.37.32.209:36753] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aX_qU3C9GXHnmLkdgdnl9AAAAM8"]
[Mon Feb 02 08:05:39.523352 2026] [:error] [pid 33612:tid 33619] [client 193.37.32.213:37703] [client 193.37.32.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aX_qU8tFn80qQEmo5QpppwAAAQU"]
[Mon Feb 02 08:05:39.871204 2026] [:error] [pid 63032:tid 63080] [client 193.37.32.197:44343] [client 193.37.32.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aX_qU3yEQ1PkpebvdRg6PgAAABE"]
[Mon Feb 02 08:05:40.237440 2026] [:error] [pid 8507:tid 8519] [client 193.37.32.180:24463] [client 193.37.32.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah/function.php"] [unique_id "aX_qVNk9kluqaCHoCymSsgAAAco"]
[Mon Feb 02 08:05:40.582244 2026] [:error] [pid 62826:tid 62833] [client 193.37.32.210:41551] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/themes.php"] [unique_id "aX_qVIF6vPvg_C5dUL-x4wAAAYU"]
[Mon Feb 02 08:05:40.926964 2026] [:error] [pid 63033:tid 63097] [client 193.37.32.227:45025] [client 193.37.32.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aX_qVPeMX2QyIh3K16pLPwAAAEY"]
[Mon Feb 02 08:05:41.272614 2026] [:error] [pid 46008:tid 46015] [client 193.37.32.193:43141] [client 193.37.32.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aX_qVSRa52iYn7SlSMkBJQAAAUU"]
[Mon Feb 02 08:05:41.618247 2026] [:error] [pid 62826:tid 62851] [client 193.37.32.191:55999] [client 193.37.32.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aX_qVYF6vPvg_C5dUL-x5QAAAZc"]
[Mon Feb 02 08:05:41.965673 2026] [:error] [pid 63032:tid 63079] [client 193.37.32.214:37115] [client 193.37.32.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/man.php"] [unique_id "aX_qVXyEQ1PkpebvdRg6RAAAABA"]
[Mon Feb 02 08:05:42.310643 2026] [:error] [pid 46008:tid 46012] [client 193.37.32.227:27737] [client 193.37.32.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/freeform/"] [unique_id "aX_qViRa52iYn7SlSMkBKgAAAUI"]
[Mon Feb 02 08:05:42.655831 2026] [:error] [pid 63033:tid 63114] [client 193.37.32.205:36821] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aX_qVveMX2QyIh3K16pLRAAAAFc"]
[Mon Feb 02 08:05:43.000485 2026] [:error] [pid 8507:tid 8524] [client 193.37.32.228:23755] [client 193.37.32.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/"] [unique_id "aX_qVtk9kluqaCHoCymSuAAAAc8"]
[Mon Feb 02 08:05:43.347435 2026] [:error] [pid 63033:tid 63110] [client 193.37.32.184:27439] [client 193.37.32.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aX_qV_eMX2QyIh3K16pLSQAAAFM"]
[Mon Feb 02 08:05:43.693677 2026] [:error] [pid 63033:tid 63095] [client 193.37.32.179:43031] [client 193.37.32.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/commands/"] [unique_id "aX_qV_eMX2QyIh3K16pLTAAAAEQ"]
[Mon Feb 02 08:05:44.040608 2026] [:error] [pid 46008:tid 46030] [client 193.37.32.218:50065] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aX_qWCRa52iYn7SlSMkBMgAAAVM"]
[Mon Feb 02 08:05:44.387892 2026] [:error] [pid 46008:tid 46011] [client 193.37.32.217:49423] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/column/"] [unique_id "aX_qWCRa52iYn7SlSMkBMwAAAUE"]
[Mon Feb 02 08:05:44.735349 2026] [:error] [pid 63032:tid 63075] [client 193.37.32.183:57155] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aX_qWHyEQ1PkpebvdRg6RwAAAAw"]
[Mon Feb 02 08:05:45.083677 2026] [:error] [pid 63033:tid 63096] [client 193.37.32.182:34529] [client 193.37.32.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/separator/"] [unique_id "aX_qWfeMX2QyIh3K16pLUQAAAEU"]
[Mon Feb 02 08:05:45.429739 2026] [:error] [pid 46008:tid 46024] [client 193.37.32.227:48415] [client 193.37.32.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/themes/"] [unique_id "aX_qWSRa52iYn7SlSMkBOQAAAU0"]
[Mon Feb 02 08:05:45.778163 2026] [:error] [pid 62826:tid 62842] [client 193.37.32.216:40361] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aX_qWYF6vPvg_C5dUL-x8AAAAY4"]
[Mon Feb 02 08:05:46.123852 2026] [:error] [pid 63033:tid 63095] [client 193.37.32.200:20495] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ufbngowues/main.php"] [unique_id "aX_qWveMX2QyIh3K16pLWAAAAEQ"]
[Mon Feb 02 08:05:46.484414 2026] [:error] [pid 63033:tid 63108] [client 193.37.32.227:64449] [client 193.37.32.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aX_qWveMX2QyIh3K16pLWwAAAFE"]
[Mon Feb 02 08:05:46.830361 2026] [:error] [pid 63034:tid 63130] [client 193.37.32.216:63037] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-file.php"] [unique_id "aX_qWuKXlgw75_wfbHo_wQAAAIw"]
[Mon Feb 02 08:05:47.175132 2026] [:error] [pid 63034:tid 63126] [client 193.37.32.222:31919] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aX_qW-KXlgw75_wfbHo_xAAAAIg"]
[Mon Feb 02 08:05:47.520647 2026] [:error] [pid 63033:tid 63105] [client 193.37.32.209:23201] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/edit-wolf.php"] [unique_id "aX_qW_eMX2QyIh3K16pLYQAAAE4"]
[Mon Feb 02 08:05:47.868433 2026] [:error] [pid 63153:tid 63168] [client 193.37.32.197:48991] [client 193.37.32.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aX_qW3C9GXHnmLkdgdnmDAAAAMc"]
[Mon Feb 02 08:05:48.212787 2026] [:error] [pid 33612:tid 33618] [client 193.37.32.180:24459] [client 193.37.32.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aX_qXMtFn80qQEmo5QpptwAAAQQ"]
[Mon Feb 02 08:05:48.556258 2026] [:error] [pid 8507:tid 8525] [client 193.37.32.196:53289] [client 193.37.32.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aX_qXNk9kluqaCHoCymSwgAAAdA"]
[Mon Feb 02 08:05:48.916516 2026] [:error] [pid 63033:tid 63099] [client 193.37.32.225:44545] [client 193.37.32.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aX_qXPeMX2QyIh3K16pLZwAAAEg"]
[Mon Feb 02 08:05:49.261502 2026] [:error] [pid 63033:tid 63109] [client 193.37.32.218:40071] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aX_qXfeMX2QyIh3K16pLaQAAAFI"]
[Mon Feb 02 08:05:49.607223 2026] [:error] [pid 63034:tid 63118] [client 193.37.32.224:21195] [client 193.37.32.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aX_qXeKXlgw75_wfbHo_zQAAAIA"]
[Mon Feb 02 08:05:49.953309 2026] [:error] [pid 33612:tid 33634] [client 193.37.32.212:24343] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aX_qXctFn80qQEmo5QppvAAAARQ"]
[Mon Feb 02 08:05:50.301564 2026] [:error] [pid 62826:tid 62841] [client 193.37.32.180:20877] [client 193.37.32.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/contact-form-7/wp-contact-form-7.php"] [unique_id "aX_qXoF6vPvg_C5dUL-x-gAAAY0"]
[Mon Feb 02 08:05:50.647046 2026] [:error] [pid 33612:tid 33626] [client 193.37.32.187:45191] [client 193.37.32.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aX_qXstFn80qQEmo5QppvgAAAQw"]
[Mon Feb 02 08:05:50.991815 2026] [:error] [pid 8507:tid 8529] [client 193.37.32.207:62237] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aX_qXtk9kluqaCHoCymSxQAAAdQ"]
[Mon Feb 02 08:05:51.338181 2026] [:error] [pid 63153:tid 63165] [client 193.37.32.191:26991] [client 193.37.32.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aX_qX3C9GXHnmLkdgdnmFwAAAMQ"]
[Mon Feb 02 08:05:51.685339 2026] [:error] [pid 63033:tid 63091] [client 193.37.32.206:59163] [client 193.37.32.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aX_qX_eMX2QyIh3K16pLcAAAAEA"]
[Mon Feb 02 08:05:52.032615 2026] [:error] [pid 63034:tid 63133] [client 193.37.32.202:47977] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/"] [unique_id "aX_qYOKXlgw75_wfbHo_1QAAAI8"]
[Mon Feb 02 08:05:52.381701 2026] [:error] [pid 8507:tid 8509] [client 193.37.32.207:64163] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/search/"] [unique_id "aX_qYNk9kluqaCHoCymSyAAAAcA"]
[Mon Feb 02 08:05:52.727478 2026] [:error] [pid 63033:tid 63096] [client 193.37.32.201:28291] [client 193.37.32.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aX_qYPeMX2QyIh3K16pLcgAAAEU"]
[Mon Feb 02 08:05:53.074411 2026] [:error] [pid 46008:tid 46021] [client 193.37.32.190:47861] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/chosen.php"] [unique_id "aX_qYSRa52iYn7SlSMkBPgAAAUo"]
[Mon Feb 02 08:05:54.912706 2026] [:error] [pid 63032:tid 63075] [client 193.37.32.221:43667] [client 193.37.32.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aX_qYnyEQ1PkpebvdRg6WwAAAAw"]
[Mon Feb 02 08:05:55.259868 2026] [:error] [pid 63033:tid 63113] [client 193.37.32.220:48761] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aX_qY_eMX2QyIh3K16pLeAAAAFY"]
[Mon Feb 02 08:05:55.605992 2026] [:error] [pid 33612:tid 33627] [client 193.37.32.197:39121] [client 193.37.32.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/"] [unique_id "aX_qY8tFn80qQEmo5Qpp0AAAAQ0"]
[Mon Feb 02 08:05:55.951331 2026] [:error] [pid 63034:tid 63133] [client 193.37.32.226:25351] [client 193.37.32.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aX_qY-KXlgw75_wfbHo_3wAAAI8"]
[Mon Feb 02 08:05:56.296659 2026] [:error] [pid 62826:tid 62850] [client 193.37.32.191:39113] [client 193.37.32.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aX_qZIF6vPvg_C5dUL-yBwAAAZY"]
[Mon Feb 02 08:05:56.646329 2026] [:error] [pid 63034:tid 63142] [client 193.37.32.190:53365] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aX_qZOKXlgw75_wfbHo_4AAAAJg"]
[Mon Feb 02 08:05:56.991594 2026] [:error] [pid 33612:tid 33617] [client 193.37.32.227:28737] [client 193.37.32.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aX_qZMtFn80qQEmo5Qpp0wAAAQM"]
[Mon Feb 02 08:05:57.337853 2026] [:error] [pid 62826:tid 62833] [client 193.37.32.190:43477] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aX_qZYF6vPvg_C5dUL-yCQAAAYU"]
[Mon Feb 02 08:05:57.687995 2026] [:error] [pid 33612:tid 33636] [client 193.37.32.204:28355] [client 193.37.32.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aX_qZctFn80qQEmo5Qpp1gAAARY"]
[Mon Feb 02 08:06:03.034165 2026] [:error] [pid 63032:tid 63064] [client 193.37.32.183:29375] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/"] [unique_id "aX_qa3yEQ1PkpebvdRg6cwAAAAE"]
[Mon Feb 02 08:06:03.378899 2026] [:error] [pid 63034:tid 63123] [client 193.37.32.215:36217] [client 193.37.32.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aX_qa-KXlgw75_wfbHo_7AAAAIU"]
[Mon Feb 02 08:06:03.722720 2026] [:error] [pid 63153:tid 63175] [client 193.37.32.220:44307] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shell3.php"] [unique_id "aX_qa3C9GXHnmLkdgdnmMQAAAM4"]
[Mon Feb 02 08:06:04.075472 2026] [:error] [pid 63034:tid 63122] [client 193.37.32.200:49213] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aX_qbOKXlgw75_wfbHo_7gAAAIQ"]
[Mon Feb 02 08:06:04.423671 2026] [:error] [pid 62826:tid 62848] [client 193.37.32.197:54115] [client 193.37.32.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/"] [unique_id "aX_qbIF6vPvg_C5dUL-yFQAAAZQ"]
[Mon Feb 02 08:06:04.770089 2026] [:error] [pid 62826:tid 62838] [client 193.37.32.195:53123] [client 193.37.32.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/xp.php"] [unique_id "aX_qbIF6vPvg_C5dUL-yGAAAAYo"]
[Mon Feb 02 08:06:05.119529 2026] [:error] [pid 63034:tid 63118] [client 193.37.32.195:20659] [client 193.37.32.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/chosen.php"] [unique_id "aX_qbeKXlgw75_wfbHo_9QAAAIA"]
[Mon Feb 02 08:06:05.467206 2026] [:error] [pid 46008:tid 46025] [client 193.37.32.226:62369] [client 193.37.32.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aX_qbSRa52iYn7SlSMkBWAAAAU4"]
[Mon Feb 02 08:06:05.814248 2026] [:error] [pid 62826:tid 62844] [client 193.37.32.188:33337] [client 193.37.32.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aX_qbYF6vPvg_C5dUL-yGwAAAZA"]
[Mon Feb 02 08:06:06.166660 2026] [:error] [pid 63153:tid 63179] [client 193.37.32.199:58869] [client 193.37.32.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/"] [unique_id "aX_qbnC9GXHnmLkdgdnmNAAAANI"]
[Mon Feb 02 08:06:06.512220 2026] [:error] [pid 63034:tid 63132] [client 193.37.32.198:55247] [client 193.37.32.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/"] [unique_id "aX_qbuKXlgw75_wfbHo_-wAAAI4"]
[Mon Feb 02 08:06:06.861251 2026] [:error] [pid 8507:tid 8517] [client 193.37.32.225:33397] [client 193.37.32.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aX_qbtk9kluqaCHoCymS7AAAAcg"]
[Mon Feb 02 08:06:07.208248 2026] [:error] [pid 63032:tid 63082] [client 193.37.32.210:32571] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aX_qb3yEQ1PkpebvdRg6fAAAABM"]
[Mon Feb 02 08:06:07.558141 2026] [:error] [pid 8507:tid 8525] [client 193.37.32.225:59999] [client 193.37.32.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aX_qb9k9kluqaCHoCymS8QAAAdA"]
[Mon Feb 02 08:06:07.902395 2026] [:error] [pid 63034:tid 63134] [client 193.37.32.200:43707] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "aX_qb-KXlgw75_wfbHpAAAAAAJA"]
[Mon Feb 02 08:06:08.370339 2026] [:error] [pid 63153:tid 63184] [client 193.37.32.207:41595] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/video/"] [unique_id "aX_qcHC9GXHnmLkdgdnmQAAAANc"]
[Mon Feb 02 08:06:08.715671 2026] [:error] [pid 46008:tid 46024] [client 193.37.32.189:47309] [client 193.37.32.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aX_qcCRa52iYn7SlSMkBXAAAAU0"]
[Mon Feb 02 08:06:09.059744 2026] [:error] [pid 63034:tid 63130] [client 193.37.32.188:49103] [client 193.37.32.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/options.php"] [unique_id "aX_qceKXlgw75_wfbHpAAgAAAIw"]
[Mon Feb 02 08:06:09.405470 2026] [:error] [pid 63153:tid 63181] [client 193.37.32.195:52739] [client 193.37.32.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aX_qcXC9GXHnmLkdgdnmRgAAANQ"]
[Mon Feb 02 08:06:09.751269 2026] [:error] [pid 8507:tid 8531] [client 193.37.32.203:52317] [client 193.37.32.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aX_qcdk9kluqaCHoCymS9gAAAdY"]
[Mon Feb 02 08:06:10.095471 2026] [:error] [pid 63153:tid 63162] [client 193.37.32.208:32133] [client 193.37.32.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comments-title/"] [unique_id "aX_qcnC9GXHnmLkdgdnmSgAAAME"]
[Mon Feb 02 08:06:10.440264 2026] [:error] [pid 33612:tid 33634] [client 193.37.32.201:28057] [client 193.37.32.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aX_qcstFn80qQEmo5Qpp9wAAARQ"]
[Mon Feb 02 08:06:10.786088 2026] [:error] [pid 46008:tid 46029] [client 193.37.32.205:60987] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aX_qciRa52iYn7SlSMkBYAAAAVI"]
[Mon Feb 02 08:06:11.130968 2026] [:error] [pid 33612:tid 33635] [client 193.37.32.204:50797] [client 193.37.32.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aX_qc8tFn80qQEmo5Qpp_AAAARU"]
[Mon Feb 02 08:06:11.475548 2026] [:error] [pid 63032:tid 63081] [client 193.37.32.181:58935] [client 193.37.32.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aX_qc3yEQ1PkpebvdRg6hQAAABI"]
[Mon Feb 02 08:06:11.819993 2026] [:error] [pid 63033:tid 63096] [client 193.37.32.218:31115] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aX_qc_eMX2QyIh3K16pLoQAAAEU"]
[Mon Feb 02 08:06:12.164645 2026] [:error] [pid 63153:tid 63182] [client 193.37.32.220:36609] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-domain.php"] [unique_id "aX_qdHC9GXHnmLkdgdnmTgAAANU"]
[Mon Feb 02 08:06:12.511062 2026] [:error] [pid 63033:tid 63104] [client 193.37.32.227:61619] [client 193.37.32.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aX_qdPeMX2QyIh3K16pLpAAAAE0"]
[Mon Feb 02 08:06:12.857007 2026] [:error] [pid 63153:tid 63176] [client 193.37.32.182:31999] [client 193.37.32.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin-header.php"] [unique_id "aX_qdHC9GXHnmLkdgdnmUwAAAM8"]
[Mon Feb 02 08:06:13.202126 2026] [:error] [pid 8507:tid 8525] [client 193.37.32.218:25153] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-title/"] [unique_id "aX_qddk9kluqaCHoCymS-wAAAdA"]
[Mon Feb 02 08:06:13.546993 2026] [:error] [pid 8507:tid 8510] [client 193.37.32.219:33439] [client 193.37.32.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "aX_qddk9kluqaCHoCymS_gAAAcE"]
[Mon Feb 02 08:06:13.893955 2026] [:error] [pid 63153:tid 63174] [client 193.37.32.219:44971] [client 193.37.32.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aX_qdXC9GXHnmLkdgdnmXQAAAM0"]
[Mon Feb 02 08:06:14.239207 2026] [:error] [pid 63032:tid 63071] [client 193.37.32.222:25367] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/development/"] [unique_id "aX_qdnyEQ1PkpebvdRg6kQAAAAg"]
[Mon Feb 02 08:06:14.584681 2026] [:error] [pid 46008:tid 46033] [client 193.37.32.229:46347] [client 193.37.32.229] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/"] [unique_id "aX_qdiRa52iYn7SlSMkBZQAAAVY"]
[Mon Feb 02 08:06:14.929990 2026] [:error] [pid 63153:tid 63165] [client 193.37.32.223:32969] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/"] [unique_id "aX_qdnC9GXHnmLkdgdnmYwAAAMQ"]
[Mon Feb 02 08:06:15.276065 2026] [:error] [pid 63033:tid 63092] [client 193.37.32.209:59931] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aX_qd_eMX2QyIh3K16pLrAAAAEE"]
[Mon Feb 02 08:06:15.621430 2026] [:error] [pid 63153:tid 63168] [client 193.37.32.223:29749] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aX_qd3C9GXHnmLkdgdnmZQAAAMc"]
[Mon Feb 02 08:06:15.968648 2026] [:error] [pid 63033:tid 63099] [client 193.37.32.209:55905] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-edit-link/"] [unique_id "aX_qd_eMX2QyIh3K16pLrwAAAEg"]
[Mon Feb 02 08:06:16.314453 2026] [:error] [pid 63153:tid 63169] [client 193.37.32.211:20337] [client 193.37.32.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aX_qeHC9GXHnmLkdgdnmZgAAAMg"]
[Mon Feb 02 08:06:16.659437 2026] [:error] [pid 63153:tid 63164] [client 193.37.32.204:60047] [client 193.37.32.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/chosen.php"] [unique_id "aX_qeHC9GXHnmLkdgdnmagAAAMM"]
[Mon Feb 02 08:06:17.007376 2026] [:error] [pid 62826:tid 62830] [client 193.37.32.186:59969] [client 193.37.32.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/"] [unique_id "aX_qeYF6vPvg_C5dUL-yJAAAAYI"]
[Mon Feb 02 08:06:17.353754 2026] [:error] [pid 63034:tid 63124] [client 193.37.32.210:39649] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/autoload_classmap.php"] [unique_id "aX_qeeKXlgw75_wfbHpAGAAAAIY"]
[Mon Feb 02 08:06:17.699573 2026] [:error] [pid 63034:tid 63136] [client 193.37.32.187:51233] [client 193.37.32.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aX_qeeKXlgw75_wfbHpAGwAAAJI"]
[Mon Feb 02 08:06:18.045846 2026] [:error] [pid 63033:tid 63102] [client 193.37.32.212:26427] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentythree/templates/"] [unique_id "aX_qeveMX2QyIh3K16pLsgAAAEs"]
[Mon Feb 02 08:06:18.400291 2026] [:error] [pid 63033:tid 63115] [client 193.37.32.205:43211] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aX_qeveMX2QyIh3K16pLtAAAAFg"]
[Mon Feb 02 08:06:18.745996 2026] [:error] [pid 33612:tid 33637] [client 193.37.32.216:44511] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/autoload_classmap.php"] [unique_id "aX_qestFn80qQEmo5QpqCwAAARc"]
[Mon Feb 02 08:06:19.094406 2026] [:error] [pid 62826:tid 62850] [client 193.37.32.210:32473] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aX_qe4F6vPvg_C5dUL-yKQAAAZY"]
[Mon Feb 02 08:06:19.438974 2026] [:error] [pid 33612:tid 33635] [client 193.37.32.188:44337] [client 193.37.32.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aX_qe8tFn80qQEmo5QpqDgAAARU"]
[Mon Feb 02 08:06:19.790249 2026] [:error] [pid 33612:tid 33620] [client 193.37.32.179:40707] [client 193.37.32.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/datate.php"] [unique_id "aX_qe8tFn80qQEmo5QpqFAAAAQY"]
[Mon Feb 02 08:06:20.137863 2026] [:error] [pid 33612:tid 33622] [client 193.37.32.192:55531] [client 193.37.32.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "aX_qfMtFn80qQEmo5QpqGAAAAQg"]
[Mon Feb 02 08:06:20.490440 2026] [:error] [pid 33612:tid 33635] [client 193.37.32.216:46589] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aX_qfMtFn80qQEmo5QpqHQAAARU"]
[Mon Feb 02 08:06:20.834672 2026] [:error] [pid 63033:tid 63112] [client 193.37.32.215:40283] [client 193.37.32.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aX_qfPeMX2QyIh3K16pLuwAAAFU"]
[Mon Feb 02 08:06:21.180359 2026] [:error] [pid 8507:tid 8516] [client 193.37.32.190:33787] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aX_qfdk9kluqaCHoCymTBwAAAcc"]
[Mon Feb 02 08:06:21.526180 2026] [:error] [pid 63033:tid 63095] [client 193.37.32.208:54907] [client 193.37.32.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comments/"] [unique_id "aX_qffeMX2QyIh3K16pLvgAAAEQ"]
[Mon Feb 02 08:06:26.888196 2026] [:error] [pid 8507:tid 8514] [client 193.37.32.214:57673] [client 193.37.32.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "aX_qgtk9kluqaCHoCymTEgAAAcU"]
[Mon Feb 02 08:06:27.233241 2026] [:error] [pid 63034:tid 63120] [client 193.37.32.188:46973] [client 193.37.32.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aX_qg-KXlgw75_wfbHpAMAAAAII"]
[Mon Feb 02 08:06:27.578748 2026] [:error] [pid 8507:tid 8515] [client 193.37.32.208:43571] [client 193.37.32.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wpr-addons/forms//file_content_657f93f532f3b/"] [unique_id "aX_qg9k9kluqaCHoCymTFQAAAcY"]
[Mon Feb 02 08:06:27.927566 2026] [:error] [pid 63034:tid 63122] [client 193.37.32.192:65089] [client 193.37.32.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/"] [unique_id "aX_qg-KXlgw75_wfbHpANgAAAIQ"]
[Mon Feb 02 08:06:28.273509 2026] [:error] [pid 63153:tid 63171] [client 193.37.32.220:30639] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aX_qhHC9GXHnmLkdgdnmfQAAAMo"]
[Mon Feb 02 08:06:28.618996 2026] [:error] [pid 33612:tid 33622] [client 193.37.32.206:27563] [client 193.37.32.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/"] [unique_id "aX_qhMtFn80qQEmo5QpqPAAAAQg"]
[Mon Feb 02 08:06:28.965912 2026] [:error] [pid 63033:tid 63108] [client 193.37.32.223:26607] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aX_qhPeMX2QyIh3K16pL2QAAAFE"]
[Mon Feb 02 08:06:29.313019 2026] [:error] [pid 63153:tid 63178] [client 193.37.32.223:63025] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aX_qhXC9GXHnmLkdgdnmgQAAANE"]
[Mon Feb 02 08:06:29.659588 2026] [:error] [pid 46008:tid 46011] [client 193.37.32.225:30285] [client 193.37.32.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aX_qhSRa52iYn7SlSMkBbwAAAUE"]
[Mon Feb 02 08:06:30.006862 2026] [:error] [pid 62826:tid 62838] [client 193.37.32.201:57335] [client 193.37.32.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aX_qhoF6vPvg_C5dUL-yMQAAAYo"]
[Mon Feb 02 08:06:30.353403 2026] [:error] [pid 62826:tid 62851] [client 193.37.32.207:28505] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/gv0eai61i0kwhxf2w28z/nrhogjyecktixbal0fnt5Cdefault.php"] [unique_id "aX_qhoF6vPvg_C5dUL-yNQAAAZc"]
[Mon Feb 02 08:06:30.706004 2026] [:error] [pid 62826:tid 62829] [client 193.37.32.186:27095] [client 193.37.32.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "aX_qhoF6vPvg_C5dUL-yOAAAAYE"]
[Mon Feb 02 08:06:31.053813 2026] [:error] [pid 63034:tid 63118] [client 193.37.32.204:65375] [client 193.37.32.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css.php"] [unique_id "aX_qh-KXlgw75_wfbHpAOQAAAIA"]
[Mon Feb 02 08:06:31.398784 2026] [:error] [pid 63032:tid 63075] [client 193.37.32.191:54661] [client 193.37.32.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/images/"] [unique_id "aX_qh3yEQ1PkpebvdRg6vgAAAAw"]
[Mon Feb 02 08:06:31.742656 2026] [:error] [pid 63153:tid 63172] [client 193.37.32.199:42203] [client 193.37.32.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp.php"] [unique_id "aX_qh3C9GXHnmLkdgdnmgwAAAMs"]
[Mon Feb 02 08:06:32.088029 2026] [:error] [pid 63033:tid 63097] [client 193.37.32.202:31111] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dvi1suj7vbijhcni3sCakc.php"] [unique_id "aX_qiPeMX2QyIh3K16pL3gAAAEY"]
[Mon Feb 02 08:06:32.433724 2026] [:error] [pid 46008:tid 46029] [client 193.37.32.202:30881] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aX_qiCRa52iYn7SlSMkBcwAAAVI"]
[Mon Feb 02 08:06:32.788585 2026] [:error] [pid 63032:tid 63087] [client 193.37.32.183:44863] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/index.html"] [unique_id "aX_qiHyEQ1PkpebvdRg6xwAAABg"]
[Mon Feb 02 08:06:33.133934 2026] [:error] [pid 63034:tid 63123] [client 193.37.32.202:28841] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aX_qieKXlgw75_wfbHpAPQAAAIU"]
[Mon Feb 02 08:06:33.479283 2026] [:error] [pid 46008:tid 46034] [client 193.37.32.183:22569] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aX_qiSRa52iYn7SlSMkBdQAAAVc"]
[Mon Feb 02 08:06:33.828208 2026] [:error] [pid 63034:tid 63121] [client 193.37.32.222:30741] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/gel4y.php"] [unique_id "aX_qieKXlgw75_wfbHpAQgAAAIM"]
[Mon Feb 02 08:06:34.174911 2026] [:error] [pid 63153:tid 63180] [client 193.37.32.187:62127] [client 193.37.32.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/hplfuns.php"] [unique_id "aX_qinC9GXHnmLkdgdnmhgAAANM"]
[Mon Feb 02 08:06:34.520696 2026] [:error] [pid 33612:tid 33629] [client 193.37.32.212:64303] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/classsmtps.php"] [unique_id "aX_qistFn80qQEmo5QpqSAAAAQ8"]
[Mon Feb 02 08:06:34.866404 2026] [:error] [pid 8507:tid 8524] [client 193.37.32.203:30781] [client 193.37.32.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah/function.php"] [unique_id "aX_qitk9kluqaCHoCymTHwAAAc8"]
[Mon Feb 02 08:06:35.214620 2026] [:error] [pid 33612:tid 33624] [client 193.37.32.206:24049] [client 193.37.32.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/123.php"] [unique_id "aX_qi8tFn80qQEmo5QpqTQAAAQo"]
[Mon Feb 02 08:06:35.561209 2026] [:error] [pid 63033:tid 63097] [client 193.37.32.222:46581] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/14bcjywsujyrjjwqegeCdefault.php"] [unique_id "aX_qi_eMX2QyIh3K16pL5QAAAEY"]
[Mon Feb 02 08:06:35.905672 2026] [:error] [pid 63034:tid 63123] [client 193.37.32.186:61779] [client 193.37.32.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/"] [unique_id "aX_qi-KXlgw75_wfbHpARgAAAIU"]
[Mon Feb 02 08:06:36.251729 2026] [:error] [pid 46008:tid 46024] [client 193.37.32.200:38375] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aX_qjCRa52iYn7SlSMkBegAAAU0"]
[Mon Feb 02 08:06:36.598728 2026] [:error] [pid 8507:tid 8529] [client 193.37.32.200:45667] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/css/"] [unique_id "aX_qjNk9kluqaCHoCymTIwAAAdQ"]
[Mon Feb 02 08:06:36.944229 2026] [:error] [pid 46008:tid 46026] [client 193.37.32.192:27349] [client 193.37.32.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aX_qjCRa52iYn7SlSMkBfAAAAU8"]
[Mon Feb 02 08:06:37.290189 2026] [:error] [pid 63033:tid 63101] [client 193.37.32.184:34973] [client 193.37.32.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aX_qjfeMX2QyIh3K16pL6gAAAEo"]
[Mon Feb 02 08:06:37.636219 2026] [:error] [pid 63153:tid 63168] [client 193.37.32.179:53515] [client 193.37.32.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aX_qjXC9GXHnmLkdgdnmjgAAAMc"]
[Mon Feb 02 08:06:37.981408 2026] [:error] [pid 63153:tid 63181] [client 193.37.32.214:29767] [client 193.37.32.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/php.php"] [unique_id "aX_qjXC9GXHnmLkdgdnmkQAAANQ"]
[Mon Feb 02 08:06:38.329761 2026] [:error] [pid 8507:tid 8513] [client 193.37.32.218:32111] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aX_qjtk9kluqaCHoCymTKAAAAcQ"]
[Mon Feb 02 08:06:38.676868 2026] [:error] [pid 63034:tid 63133] [client 193.37.32.216:29751] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/"] [unique_id "aX_qjuKXlgw75_wfbHpATAAAAI8"]
[Mon Feb 02 08:06:39.022849 2026] [:error] [pid 63033:tid 63106] [client 193.37.32.183:51345] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "aX_qj_eMX2QyIh3K16pL7wAAAE8"]
[Mon Feb 02 08:06:39.369599 2026] [:error] [pid 46008:tid 46033] [client 193.37.32.220:34577] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-admin/includes/"] [unique_id "aX_qjyRa52iYn7SlSMkBhQAAAVY"]
[Mon Feb 02 08:06:39.714654 2026] [:error] [pid 63033:tid 63099] [client 193.37.32.228:38715] [client 193.37.32.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aX_qj_eMX2QyIh3K16pL8QAAAEg"]
[Mon Feb 02 08:06:40.074050 2026] [:error] [pid 33612:tid 33622] [client 193.37.32.183:60229] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aX_qkMtFn80qQEmo5QpqVQAAAQg"]
[Mon Feb 02 08:06:40.430751 2026] [:error] [pid 33612:tid 33631] [client 193.37.32.196:27029] [client 193.37.32.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aX_qkMtFn80qQEmo5QpqVgAAARE"]
[Mon Feb 02 08:06:40.775570 2026] [:error] [pid 33612:tid 33634] [client 193.37.32.188:55547] [client 193.37.32.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/help.php"] [unique_id "aX_qkMtFn80qQEmo5QpqVwAAARQ"]
[Mon Feb 02 08:06:41.119991 2026] [:error] [pid 46008:tid 46029] [client 193.37.32.187:39295] [client 193.37.32.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aX_qkSRa52iYn7SlSMkBigAAAVI"]
[Mon Feb 02 08:06:41.467559 2026] [:error] [pid 63153:tid 63181] [client 193.37.32.206:45169] [client 193.37.32.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin"] [unique_id "aX_qkXC9GXHnmLkdgdnmnAAAANQ"]
[Mon Feb 02 08:06:41.813170 2026] [:error] [pid 63153:tid 63171] [client 193.37.32.196:25443] [client 193.37.32.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aX_qkXC9GXHnmLkdgdnmngAAAMo"]
[Mon Feb 02 08:06:42.158629 2026] [:error] [pid 63153:tid 63174] [client 193.37.32.193:33563] [client 193.37.32.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aX_qknC9GXHnmLkdgdnmogAAAM0"]
[Mon Feb 02 08:06:42.503668 2026] [:error] [pid 63034:tid 63125] [client 193.37.32.217:25527] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue"] [unique_id "aX_qkuKXlgw75_wfbHpAUgAAAIc"]
[Mon Feb 02 08:06:42.949111 2026] [:error] [pid 8507:tid 8533] [client 193.37.32.184:59937] [client 193.37.32.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/options-reading.php"] [unique_id "aX_qktk9kluqaCHoCymTLgAAAdg"]
[Mon Feb 02 08:06:43.296384 2026] [:error] [pid 63032:tid 63083] [client 193.37.32.188:50169] [client 193.37.32.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/"] [unique_id "aX_qk3yEQ1PkpebvdRg61QAAABQ"]
[Mon Feb 02 08:06:43.641269 2026] [:error] [pid 46008:tid 46034] [client 193.37.32.209:52655] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/"] [unique_id "aX_qkyRa52iYn7SlSMkBjQAAAVc"]
[Mon Feb 02 08:06:43.987671 2026] [:error] [pid 62826:tid 62836] [client 193.37.32.209:30921] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aX_qk4F6vPvg_C5dUL-yUQAAAYg"]
[Mon Feb 02 08:06:44.333459 2026] [:error] [pid 63032:tid 63073] [client 193.37.32.202:56911] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/about.php"] [unique_id "aX_qlHyEQ1PkpebvdRg61wAAAAo"]
[Mon Feb 02 08:06:44.679371 2026] [:error] [pid 63034:tid 63133] [client 193.37.32.183:53897] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/content.php"] [unique_id "aX_qlOKXlgw75_wfbHpAWAAAAI8"]
[Mon Feb 02 08:06:45.025078 2026] [:error] [pid 63153:tid 63165] [client 193.37.32.196:38891] [client 193.37.32.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/about.php"] [unique_id "aX_qlXC9GXHnmLkdgdnmrgAAAMQ"]
[Mon Feb 02 08:06:45.370452 2026] [:error] [pid 62826:tid 62838] [client 193.37.32.193:20369] [client 193.37.32.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/pki-validation/"] [unique_id "aX_qlYF6vPvg_C5dUL-yUgAAAYo"]
[Mon Feb 02 08:06:45.718927 2026] [:error] [pid 63153:tid 63183] [client 193.37.32.195:20907] [client 193.37.32.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/images/"] [unique_id "aX_qlXC9GXHnmLkdgdnmsgAAANY"]
[Mon Feb 02 08:06:46.093892 2026] [:error] [pid 63033:tid 63103] [client 193.37.32.188:33475] [client 193.37.32.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-editor.php"] [unique_id "aX_qlveMX2QyIh3K16pMAAAAAEw"]
[Mon Feb 02 08:06:46.439653 2026] [:error] [pid 8507:tid 8524] [client 193.37.32.219:21285] [client 193.37.32.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wordpress/wp-admin/maint/"] [unique_id "aX_qltk9kluqaCHoCymTMwAAAc8"]
[Mon Feb 02 08:06:46.787804 2026] [:error] [pid 62826:tid 62834] [client 193.37.32.217:20061] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aX_qloF6vPvg_C5dUL-yVgAAAYY"]
[Mon Feb 02 08:06:47.133248 2026] [:error] [pid 63153:tid 63165] [client 193.37.32.214:58255] [client 193.37.32.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/g3brivy5d2ox733srcpl/4z5enevnessqqjdcxuCdefault.php"] [unique_id "aX_ql3C9GXHnmLkdgdnmtgAAAMQ"]
[Mon Feb 02 08:06:47.478732 2026] [:error] [pid 63153:tid 63183] [client 193.37.32.224:55393] [client 193.37.32.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aX_ql3C9GXHnmLkdgdnmuwAAANY"]
[Mon Feb 02 08:06:47.823175 2026] [:error] [pid 46008:tid 46022] [client 193.37.32.229:42841] [client 193.37.32.229] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aX_qlyRa52iYn7SlSMkBlAAAAUs"]
[Mon Feb 02 08:06:48.168125 2026] [:error] [pid 63032:tid 63085] [client 193.37.32.224:40107] [client 193.37.32.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wa/"] [unique_id "aX_qmHyEQ1PkpebvdRg65wAAABY"]
[Mon Feb 02 08:06:48.519921 2026] [:error] [pid 63034:tid 63138] [client 193.37.32.216:59743] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aX_qmOKXlgw75_wfbHpAZgAAAJQ"]
[Mon Feb 02 08:06:48.884930 2026] [:error] [pid 63153:tid 63167] [client 193.37.32.203:26145] [client 193.37.32.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aX_qmHC9GXHnmLkdgdnmxQAAAMY"]
[Mon Feb 02 08:06:49.231696 2026] [:error] [pid 62826:tid 62829] [client 193.37.32.214:51163] [client 193.37.32.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aX_qmYF6vPvg_C5dUL-yWgAAAYE"]
[Mon Feb 02 08:06:49.575043 2026] [:error] [pid 46008:tid 46018] [client 193.37.32.220:53847] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "aX_qmSRa52iYn7SlSMkBmgAAAUc"]
[Mon Feb 02 08:06:49.920998 2026] [:error] [pid 33612:tid 33629] [client 193.37.32.198:40479] [client 193.37.32.198] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aX_qmctFn80qQEmo5QpqbAAAAQ8"]
[Mon Feb 02 08:06:50.268265 2026] [:error] [pid 63153:tid 63164] [client 193.37.32.220:58277] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aX_qmnC9GXHnmLkdgdnm0QAAAMM"]
[Mon Feb 02 08:06:50.613945 2026] [:error] [pid 63153:tid 63168] [client 193.37.32.223:29031] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/pwhb0t2cy9txbiga4ckhfrdsCakc.php"] [unique_id "aX_qmnC9GXHnmLkdgdnm1AAAAMc"]
[Mon Feb 02 08:06:50.959726 2026] [:error] [pid 46008:tid 46032] [client 193.37.32.217:62633] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aX_qmiRa52iYn7SlSMkBnQAAAVU"]
[Mon Feb 02 08:06:51.324604 2026] [:error] [pid 33612:tid 33621] [client 193.37.32.205:57493] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "aX_qm8tFn80qQEmo5QpqcgAAAQc"]
[Mon Feb 02 08:06:51.672681 2026] [:error] [pid 63034:tid 63137] [client 193.37.32.202:39701] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aX_qm-KXlgw75_wfbHpAcwAAAJM"]
[Mon Feb 02 08:06:52.018921 2026] [:error] [pid 8507:tid 8528] [client 193.37.32.218:22685] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aX_qnNk9kluqaCHoCymTOQAAAdM"]
[Mon Feb 02 08:06:52.366426 2026] [:error] [pid 46008:tid 46023] [client 193.37.32.217:22641] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.tresh/"] [unique_id "aX_qnCRa52iYn7SlSMkBoQAAAUw"]
[Mon Feb 02 08:06:52.712071 2026] [:error] [pid 63034:tid 63119] [client 193.37.32.223:37107] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/files/"] [unique_id "aX_qnOKXlgw75_wfbHpAdwAAAIE"]
[Mon Feb 02 08:06:53.059418 2026] [:error] [pid 62826:tid 62844] [client 193.37.32.216:34157] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets"] [unique_id "aX_qnYF6vPvg_C5dUL-yYQAAAZA"]
[Mon Feb 02 08:06:53.438282 2026] [:error] [pid 63032:tid 63074] [client 193.37.32.186:36957] [client 193.37.32.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "aX_qnXyEQ1PkpebvdRg6-wAAAAs"]
[Mon Feb 02 08:06:53.784941 2026] [:error] [pid 33612:tid 33624] [client 193.37.32.218:50149] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/css/admin.php"] [unique_id "aX_qnctFn80qQEmo5QpqewAAAQo"]
[Mon Feb 02 08:06:54.131824 2026] [:error] [pid 46008:tid 46011] [client 193.37.32.222:24891] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aX_qniRa52iYn7SlSMkBpQAAAUE"]
[Mon Feb 02 08:06:54.479450 2026] [:error] [pid 63032:tid 63068] [client 193.37.32.223:38119] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko-new.php"] [unique_id "aX_qnnyEQ1PkpebvdRg7AAAAAAU"]
[Mon Feb 02 08:06:54.824184 2026] [:error] [pid 63033:tid 63102] [client 193.37.32.204:30347] [client 193.37.32.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aX_qnveMX2QyIh3K16pMHwAAAEs"]
[Mon Feb 02 08:06:55.176268 2026] [:error] [pid 63153:tid 63175] [client 193.37.32.189:25789] [client 193.37.32.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aX_qn3C9GXHnmLkdgdnm3AAAAM4"]
[Mon Feb 02 08:06:55.540380 2026] [:error] [pid 62826:tid 62836] [client 193.37.32.194:60537] [client 193.37.32.194] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi002.PhP7"] [unique_id "aX_qn4F6vPvg_C5dUL-yaQAAAYg"]
[Mon Feb 02 08:06:55.885325 2026] [:error] [pid 63033:tid 63110] [client 193.37.32.205:47325] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings"] [unique_id "aX_qn_eMX2QyIh3K16pMIwAAAFM"]
[Mon Feb 02 08:06:56.229192 2026] [:error] [pid 33612:tid 33628] [client 193.37.32.210:51329] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aX_qoMtFn80qQEmo5QpqggAAAQ4"]
[Mon Feb 02 08:06:56.573528 2026] [:error] [pid 62826:tid 62830] [client 193.37.32.226:27237] [client 193.37.32.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aX_qoIF6vPvg_C5dUL-ybQAAAYI"]
[Mon Feb 02 08:06:56.920530 2026] [:error] [pid 63153:tid 63171] [client 193.37.32.212:63849] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aX_qoHC9GXHnmLkdgdnm4gAAAMo"]
[Mon Feb 02 08:06:57.268825 2026] [:error] [pid 63032:tid 63065] [client 193.37.32.226:45153] [client 193.37.32.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/leafmailer.php"] [unique_id "aX_qoXyEQ1PkpebvdRg7AwAAAAI"]
[Mon Feb 02 08:06:57.616943 2026] [:error] [pid 33612:tid 33633] [client 193.37.32.211:38413] [client 193.37.32.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aX_qoctFn80qQEmo5QpqiAAAARM"]
[Mon Feb 02 08:06:57.975912 2026] [:error] [pid 33612:tid 33625] [client 193.37.32.212:50407] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aX_qoctFn80qQEmo5QpqiwAAAQs"]
[Mon Feb 02 08:06:58.320995 2026] [:error] [pid 8507:tid 8528] [client 193.37.32.219:37859] [client 193.37.32.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "aX_qotk9kluqaCHoCymTRwAAAdM"]
[Mon Feb 02 08:06:58.667747 2026] [:error] [pid 62826:tid 62829] [client 193.37.32.181:31447] [client 193.37.32.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aX_qooF6vPvg_C5dUL-yegAAAYE"]
[Mon Feb 02 08:06:59.015015 2026] [:error] [pid 8507:tid 8522] [client 193.37.32.215:40517] [client 193.37.32.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aX_qo9k9kluqaCHoCymTSAAAAc0"]
[Mon Feb 02 08:06:59.361588 2026] [:error] [pid 62826:tid 62847] [client 193.37.32.188:32087] [client 193.37.32.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/man.php"] [unique_id "aX_qo4F6vPvg_C5dUL-yfQAAAZM"]
[Mon Feb 02 08:06:59.709917 2026] [:error] [pid 8507:tid 8524] [client 193.37.32.227:28857] [client 193.37.32.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "aX_qo9k9kluqaCHoCymTSgAAAc8"]
[Mon Feb 02 08:07:00.055684 2026] [:error] [pid 8507:tid 8521] [client 193.37.32.184:49935] [client 193.37.32.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/"] [unique_id "aX_qpNk9kluqaCHoCymTTQAAAcw"]
[Mon Feb 02 08:07:00.401234 2026] [:error] [pid 63034:tid 63140] [client 193.37.32.220:21331] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/"] [unique_id "aX_qpOKXlgw75_wfbHpAggAAAJY"]
[Mon Feb 02 08:07:00.749512 2026] [:error] [pid 63032:tid 63066] [client 193.37.32.183:64587] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aX_qpHyEQ1PkpebvdRg7BQAAAAM"]
[Mon Feb 02 08:07:01.103592 2026] [:error] [pid 33612:tid 33620] [client 193.37.32.208:47061] [client 193.37.32.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aX_qpctFn80qQEmo5QpqkgAAAQY"]
[Mon Feb 02 08:07:01.460950 2026] [:error] [pid 63033:tid 63109] [client 193.37.32.224:63933] [client 193.37.32.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/"] [unique_id "aX_qpfeMX2QyIh3K16pMKAAAAFI"]
[Mon Feb 02 08:07:01.805651 2026] [:error] [pid 63032:tid 63070] [client 193.37.32.200:57445] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aX_qpXyEQ1PkpebvdRg7CAAAAAc"]
[Mon Feb 02 08:07:02.150856 2026] [:error] [pid 62826:tid 62851] [client 193.37.32.221:41269] [client 193.37.32.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist"] [unique_id "aX_qpoF6vPvg_C5dUL-yigAAAZc"]
[Mon Feb 02 08:07:02.497806 2026] [:error] [pid 8507:tid 8519] [client 193.37.32.181:32027] [client 193.37.32.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aX_qptk9kluqaCHoCymTVQAAAco"]
[Mon Feb 02 08:07:02.843454 2026] [:error] [pid 33612:tid 33623] [client 193.37.32.202:34045] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aX_qpstFn80qQEmo5QpqlQAAAQk"]
[Mon Feb 02 08:07:03.191172 2026] [:error] [pid 63032:tid 63063] [client 193.37.32.224:50635] [client 193.37.32.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aX_qp3yEQ1PkpebvdRg7DAAAAAA"]
[Mon Feb 02 08:07:03.538091 2026] [:error] [pid 8507:tid 8509] [client 193.37.32.181:54529] [client 193.37.32.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js"] [unique_id "aX_qp9k9kluqaCHoCymTVgAAAcA"]
[Mon Feb 02 08:07:03.885479 2026] [:error] [pid 46008:tid 46035] [client 193.37.32.229:41315] [client 193.37.32.229] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/rk2.php"] [unique_id "aX_qpyRa52iYn7SlSMkBtQAAAVg"]
[Mon Feb 02 08:07:04.232310 2026] [:error] [pid 63032:tid 63079] [client 193.37.32.184:57419] [client 193.37.32.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin-header.php"] [unique_id "aX_qqHyEQ1PkpebvdRg7EgAAABA"]
[Mon Feb 02 08:07:04.580839 2026] [:error] [pid 8507:tid 8527] [client 193.37.32.190:37865] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aX_qqNk9kluqaCHoCymTWAAAAdI"]
[Mon Feb 02 08:07:04.925393 2026] [:error] [pid 46008:tid 46029] [client 193.37.32.209:60929] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aX_qqCRa52iYn7SlSMkBvgAAAVI"]
[Mon Feb 02 08:07:05.271972 2026] [:error] [pid 46008:tid 46034] [client 193.37.32.228:62521] [client 193.37.32.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aX_qqSRa52iYn7SlSMkBwgAAAVc"]
[Mon Feb 02 08:07:05.617214 2026] [:error] [pid 63034:tid 63120] [client 193.37.32.200:51163] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aX_qqeKXlgw75_wfbHpAjQAAAII"]
[Mon Feb 02 08:07:05.961826 2026] [:error] [pid 33612:tid 33638] [client 193.37.32.206:56389] [client 193.37.32.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/"] [unique_id "aX_qqctFn80qQEmo5QpqmwAAARg"]
[Mon Feb 02 08:07:06.308680 2026] [:error] [pid 63033:tid 63100] [client 193.37.32.207:48695] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aX_qqveMX2QyIh3K16pMLwAAAEk"]
[Mon Feb 02 08:07:06.658610 2026] [:error] [pid 46008:tid 46032] [client 193.37.32.192:54845] [client 193.37.32.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/private/"] [unique_id "aX_qqiRa52iYn7SlSMkBxgAAAVU"]
[Mon Feb 02 08:07:07.003515 2026] [:error] [pid 63153:tid 63177] [client 193.37.32.200:62371] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aX_qq3C9GXHnmLkdgdnm9gAAANA"]
[Mon Feb 02 08:07:07.348415 2026] [:error] [pid 63033:tid 63105] [client 193.37.32.189:48829] [client 193.37.32.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-themes.php"] [unique_id "aX_qq_eMX2QyIh3K16pMMgAAAE4"]
[Mon Feb 02 08:07:07.694610 2026] [:error] [pid 33612:tid 33621] [client 193.37.32.205:34789] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aX_qq8tFn80qQEmo5QpqngAAAQc"]
[Mon Feb 02 08:07:08.041954 2026] [:error] [pid 62826:tid 62845] [client 193.37.32.192:64031] [client 193.37.32.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aX_qrIF6vPvg_C5dUL-ylgAAAZE"]
[Mon Feb 02 08:07:08.390405 2026] [:error] [pid 62826:tid 62851] [client 193.37.32.191:24103] [client 193.37.32.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/1m5mvlb6d1iq7yog17r4/14bcjywsujyrjjwqegeCdefault.php"] [unique_id "aX_qrIF6vPvg_C5dUL-ymAAAAZc"]
[Mon Feb 02 08:07:08.735273 2026] [:error] [pid 63153:tid 63176] [client 193.37.32.217:54339] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content"] [unique_id "aX_qrHC9GXHnmLkdgdnm_QAAAM8"]
[Mon Feb 02 08:07:09.091367 2026] [:error] [pid 62826:tid 62846] [client 193.37.32.193:29737] [client 193.37.32.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/coffee"] [unique_id "aX_qrYF6vPvg_C5dUL-ynAAAAZI"]
[Mon Feb 02 08:07:09.438175 2026] [:error] [pid 8507:tid 8518] [client 193.37.32.181:22641] [client 193.37.32.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aX_qrdk9kluqaCHoCymTYQAAAck"]
[Mon Feb 02 08:07:09.784346 2026] [:error] [pid 63033:tid 63113] [client 193.37.32.220:55421] [client 193.37.32.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/api.php"] [unique_id "aX_qrfeMX2QyIh3K16pMNgAAAFY"]
[Mon Feb 02 08:07:10.130651 2026] [:error] [pid 63034:tid 63132] [client 193.37.32.207:58495] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aX_qruKXlgw75_wfbHpAmQAAAI4"]
[Mon Feb 02 08:07:10.475340 2026] [:error] [pid 8507:tid 8532] [client 193.37.32.228:34953] [client 193.37.32.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/users.php"] [unique_id "aX_qrtk9kluqaCHoCymTZwAAAdc"]
[Mon Feb 02 08:07:10.822568 2026] [:error] [pid 63034:tid 63135] [client 193.37.32.217:48759] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/images"] [unique_id "aX_qruKXlgw75_wfbHpAnAAAAJE"]
[Mon Feb 02 08:07:11.168875 2026] [:error] [pid 33612:tid 33622] [client 193.37.32.225:26081] [client 193.37.32.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ma.php"] [unique_id "aX_qr8tFn80qQEmo5QpqqwAAAQg"]
[Mon Feb 02 08:07:11.515039 2026] [:error] [pid 62826:tid 62840] [client 193.37.32.187:25723] [client 193.37.32.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors"] [unique_id "aX_qr4F6vPvg_C5dUL-ypAAAAYw"]
[Mon Feb 02 08:07:16.859178 2026] [:error] [pid 62826:tid 62830] [client 193.37.32.228:38301] [client 193.37.32.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "aX_qtIF6vPvg_C5dUL-yuAAAAYI"]
[Mon Feb 02 08:07:17.203707 2026] [:error] [pid 62826:tid 62840] [client 193.37.32.189:37901] [client 193.37.32.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aX_qtYF6vPvg_C5dUL-yuwAAAYw"]
[Mon Feb 02 08:07:17.549472 2026] [:error] [pid 63033:tid 63114] [client 193.37.32.219:61741] [client 193.37.32.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aX_qtfeMX2QyIh3K16pMOgAAAFc"]
[Mon Feb 02 08:07:17.898209 2026] [:error] [pid 33612:tid 33631] [client 193.37.32.181:49335] [client 193.37.32.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin.php"] [unique_id "aX_qtctFn80qQEmo5QpqwAAAARE"]
[Mon Feb 02 08:07:18.245808 2026] [:error] [pid 63034:tid 63133] [client 193.37.32.202:37833] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aX_qtuKXlgw75_wfbHpAqwAAAI8"]
[Mon Feb 02 08:07:18.591312 2026] [:error] [pid 63153:tid 63185] [client 193.37.32.214:51771] [client 193.37.32.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/controller/extension/extension/"] [unique_id "aX_qtnC9GXHnmLkdgdnnLQAAANg"]
[Mon Feb 02 08:07:18.937451 2026] [:error] [pid 8507:tid 8528] [client 193.37.32.202:62057] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/dropdown.php"] [unique_id "aX_qttk9kluqaCHoCymTfAAAAdM"]
[Mon Feb 02 08:07:19.282297 2026] [:error] [pid 62826:tid 62834] [client 193.37.32.182:61329] [client 193.37.32.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/post.php"] [unique_id "aX_qt4F6vPvg_C5dUL-yxgAAAYY"]
[Mon Feb 02 08:07:19.628472 2026] [:error] [pid 63153:tid 63161] [client 193.37.32.181:58703] [client 193.37.32.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aX_qt3C9GXHnmLkdgdnnNAAAAMA"]
[Mon Feb 02 08:07:19.974811 2026] [:error] [pid 63033:tid 63092] [client 193.37.32.202:21457] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/"] [unique_id "aX_qt_eMX2QyIh3K16pMOwAAAEE"]
[Mon Feb 02 08:07:20.371400 2026] [:error] [pid 63034:tid 63136] [client 193.37.32.183:53545] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/WSO.php"] [unique_id "aX_quOKXlgw75_wfbHpAswAAAJI"]
[Mon Feb 02 08:07:20.722167 2026] [:error] [pid 62826:tid 62848] [client 193.37.32.207:63605] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/light/"] [unique_id "aX_quIF6vPvg_C5dUL-yygAAAZQ"]
[Mon Feb 02 08:07:21.068872 2026] [:error] [pid 33612:tid 33620] [client 193.37.32.216:31403] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-user.php"] [unique_id "aX_quctFn80qQEmo5QpqxwAAAQY"]
[Mon Feb 02 08:07:21.415655 2026] [:error] [pid 8507:tid 8521] [client 193.37.32.194:31173] [client 193.37.32.194] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/sql.php"] [unique_id "aX_qudk9kluqaCHoCymTgwAAAcw"]
[Mon Feb 02 08:07:21.768588 2026] [:error] [pid 63153:tid 63162] [client 193.37.32.189:21383] [client 193.37.32.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/file.php"] [unique_id "aX_quXC9GXHnmLkdgdnnPQAAAME"]
[Mon Feb 02 08:07:22.112909 2026] [:error] [pid 46008:tid 46011] [client 193.37.32.186:53815] [client 193.37.32.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/file-manager.php"] [unique_id "aX_quiRa52iYn7SlSMkB0wAAAUE"]
[Mon Feb 02 08:07:22.457922 2026] [:error] [pid 63153:tid 63173] [client 193.37.32.186:32953] [client 193.37.32.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-signin.php"] [unique_id "aX_qunC9GXHnmLkdgdnnQAAAAMw"]
[Mon Feb 02 08:07:22.804910 2026] [:error] [pid 63032:tid 63080] [client 193.37.32.183:34565] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/zz.php"] [unique_id "aX_qunyEQ1PkpebvdRg7JQAAABE"]
[Mon Feb 02 08:07:23.150524 2026] [:error] [pid 62826:tid 62834] [client 193.37.32.210:46923] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/sx.php"] [unique_id "aX_qu4F6vPvg_C5dUL-y0gAAAYY"]
[Mon Feb 02 08:07:23.496395 2026] [:error] [pid 46008:tid 46035] [client 193.37.32.217:60611] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/zwso.php"] [unique_id "aX_quyRa52iYn7SlSMkB2AAAAVg"]
[Mon Feb 02 08:07:23.841684 2026] [:error] [pid 46008:tid 46024] [client 193.37.32.192:27753] [client 193.37.32.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/gettest.php"] [unique_id "aX_quyRa52iYn7SlSMkB2gAAAU0"]
[Mon Feb 02 08:07:24.188134 2026] [:error] [pid 8507:tid 8511] [client 193.37.32.203:20847] [client 193.37.32.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/cache/gfhfv.php"] [unique_id "aX_qvNk9kluqaCHoCymTiAAAAcI"]
[Mon Feb 02 08:07:24.533697 2026] [:error] [pid 33612:tid 33626] [client 193.37.32.183:25921] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/gfhfv.php"] [unique_id "aX_qvMtFn80qQEmo5QpqzQAAAQw"]
[Mon Feb 02 08:07:24.879883 2026] [:error] [pid 63153:tid 63163] [client 193.37.32.222:46515] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/config.php"] [unique_id "aX_qvHC9GXHnmLkdgdnnTQAAAMI"]
[Mon Feb 02 08:07:25.224297 2026] [:error] [pid 63153:tid 63172] [client 193.37.32.183:22017] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-mails.php"] [unique_id "aX_qvXC9GXHnmLkdgdnnUgAAAMs"]
[Mon Feb 02 08:07:25.571708 2026] [:error] [pid 63153:tid 63176] [client 193.37.32.200:42047] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aX_qvXC9GXHnmLkdgdnnVAAAAM8"]
[Mon Feb 02 08:07:25.915956 2026] [:error] [pid 8507:tid 8509] [client 193.37.32.218:49787] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/speculative8.php"] [unique_id "aX_qvdk9kluqaCHoCymTigAAAcA"]
[Mon Feb 02 08:07:26.261566 2026] [:error] [pid 62826:tid 62830] [client 193.37.32.208:45001] [client 193.37.32.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/000.php"] [unique_id "aX_qvoF6vPvg_C5dUL-y2QAAAYI"]
[Mon Feb 02 08:07:26.605818 2026] [:error] [pid 63033:tid 63114] [client 193.37.32.205:64323] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/k.php"] [unique_id "aX_qvveMX2QyIh3K16pMRQAAAFc"]
[Mon Feb 02 08:07:26.953987 2026] [:error] [pid 33612:tid 33620] [client 193.37.32.228:53083] [client 193.37.32.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/anskrit.php"] [unique_id "aX_qvstFn80qQEmo5Qpq0gAAAQY"]
[Mon Feb 02 08:07:27.299383 2026] [:error] [pid 63033:tid 63091] [client 193.37.32.228:51203] [client 193.37.32.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/abilities-api/about.php"] [unique_id "aX_qv_eMX2QyIh3K16pMSgAAAEA"]
[Mon Feb 02 08:07:27.643059 2026] [:error] [pid 8507:tid 8510] [client 193.37.32.225:49931] [client 193.37.32.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/webdb.php"] [unique_id "aX_qv9k9kluqaCHoCymTiwAAAcE"]
[Mon Feb 02 08:07:27.993068 2026] [:error] [pid 63153:tid 63172] [client 193.37.32.211:62203] [client 193.37.32.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-widget-table.php"] [unique_id "aX_qv3C9GXHnmLkdgdnnWwAAAMs"]
[Mon Feb 02 08:07:28.341324 2026] [:error] [pid 63032:tid 63072] [client 193.37.32.215:45399] [client 193.37.32.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/back.php"] [unique_id "aX_qwHyEQ1PkpebvdRg7MAAAAAk"]
[Mon Feb 02 08:07:28.685332 2026] [:error] [pid 63153:tid 63176] [client 193.37.32.216:57443] [client 193.37.32.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2025/index.php"] [unique_id "aX_qwHC9GXHnmLkdgdnnXwAAAM8"]
[Mon Feb 02 08:07:29.032531 2026] [:error] [pid 62826:tid 62838] [client 193.37.32.190:45153] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/brutal-menu/index.php"] [unique_id "aX_qwYF6vPvg_C5dUL-y5AAAAYo"]
[Mon Feb 02 08:07:29.379102 2026] [:error] [pid 62826:tid 62834] [client 193.37.32.190:56927] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/rockable-lineup-2/index.php"] [unique_id "aX_qwYF6vPvg_C5dUL-y6AAAAYY"]
[Mon Feb 02 08:07:29.726506 2026] [:error] [pid 63153:tid 63172] [client 193.37.32.182:38173] [client 193.37.32.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wcdp-uploads/temp/xxc/stuff/wp-class.php"] [unique_id "aX_qwXC9GXHnmLkdgdnnYgAAAMs"]
[Mon Feb 02 08:07:30.075769 2026] [:error] [pid 62826:tid 62842] [client 193.37.32.190:22095] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/cpo_temp/services.php"] [unique_id "aX_qwoF6vPvg_C5dUL-y7AAAAY4"]
[Mon Feb 02 08:07:30.423352 2026] [:error] [pid 8507:tid 8515] [client 193.37.32.196:64039] [client 193.37.32.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wpvivid_uploads/wp-conflg.php"] [unique_id "aX_qwtk9kluqaCHoCymTlgAAAcY"]
[Mon Feb 02 08:07:30.769353 2026] [:error] [pid 46008:tid 46031] [client 193.37.32.208:26531] [client 193.37.32.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wpvivid_uploads/Isolate/error/index.php"] [unique_id "aX_qwiRa52iYn7SlSMkB4QAAAVQ"]
[Mon Feb 02 08:07:31.123638 2026] [:error] [pid 63032:tid 63067] [client 193.37.32.199:62433] [client 193.37.32.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/updraft/emptydir/index.php"] [unique_id "aX_qw3yEQ1PkpebvdRg7NAAAAAQ"]
[Mon Feb 02 08:07:31.469181 2026] [:error] [pid 8507:tid 8532] [client 193.37.32.190:40685] [client 193.37.32.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/index.php"] [unique_id "aX_qw9k9kluqaCHoCymTnQAAAdc"]
[Mon Feb 02 08:07:31.814907 2026] [:error] [pid 63034:tid 63135] [client 193.37.32.212:40405] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/file.php"] [unique_id "aX_qw-KXlgw75_wfbHpA0AAAAJE"]
[Mon Feb 02 08:07:32.163100 2026] [:error] [pid 63153:tid 63166] [client 193.37.32.180:48147] [client 193.37.32.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aX_qxHC9GXHnmLkdgdnnbgAAAMU"]
[Mon Feb 02 08:07:32.510478 2026] [:error] [pid 62826:tid 62840] [client 193.37.32.204:26415] [client 193.37.32.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpadmin/autoload_classmap.php"] [unique_id "aX_qxIF6vPvg_C5dUL-y8wAAAYw"]
[Mon Feb 02 08:07:32.857109 2026] [:error] [pid 33612:tid 33617] [client 193.37.32.203:42801] [client 193.37.32.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/akismet/views/cmd.php"] [unique_id "aX_qxMtFn80qQEmo5Qpq2wAAAQM"]
[Mon Feb 02 08:07:33.205534 2026] [:error] [pid 62826:tid 62833] [client 193.37.32.201:38685] [client 193.37.32.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/junkfood/mainhack.php"] [unique_id "aX_qxYF6vPvg_C5dUL-y9AAAAYU"]
[Mon Feb 02 08:07:33.552413 2026] [:error] [pid 33612:tid 33614] [client 193.37.32.194:57821] [client 193.37.32.194] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/x/wp-fm.php"] [unique_id "aX_qxctFn80qQEmo5Qpq4AAAAQA"]
[Mon Feb 02 08:07:33.900157 2026] [:error] [pid 33612:tid 33619] [client 193.37.32.224:61977] [client 193.37.32.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/x/wp-classs-editor.php"] [unique_id "aX_qxctFn80qQEmo5Qpq4QAAAQU"]
[Mon Feb 02 08:07:34.247170 2026] [:error] [pid 63032:tid 63077] [client 193.37.32.222:51543] [client 193.37.32.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/acucozo/file.php"] [unique_id "aX_qxnyEQ1PkpebvdRg7OQAAAA4"]
[Mon Feb 02 08:07:34.593671 2026] [:error] [pid 46008:tid 46032] [client 193.37.32.211:26855] [client 193.37.32.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/sccrbel/index.php"] [unique_id "aX_qxiRa52iYn7SlSMkB7AAAAVU"]
[Mon Feb 02 08:07:34.939311 2026] [:error] [pid 63153:tid 63176] [client 193.37.32.205:61293] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/tilnzqc/index.php"] [unique_id "aX_qxnC9GXHnmLkdgdnndAAAAM8"]
[Mon Feb 02 08:07:40.289072 2026] [:error] [pid 63153:tid 63176] [client 193.37.32.180:59897] [client 193.37.32.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/radio.php"] [unique_id "aX_qzHC9GXHnmLkdgdnngQAAAM8"]
[Mon Feb 02 08:07:40.636444 2026] [:error] [pid 62826:tid 62849] [client 193.37.32.217:25103] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/ftde.php"] [unique_id "aX_qzIF6vPvg_C5dUL-zCwAAAZU"]
[Mon Feb 02 08:07:40.983690 2026] [:error] [pid 63033:tid 63096] [client 193.37.32.218:38477] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "aX_qzPeMX2QyIh3K16pMZQAAAEU"]
[Mon Feb 02 08:07:41.334691 2026] [:error] [pid 63034:tid 63126] [client 193.37.32.210:30343] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bbpress/mainhack.php"] [unique_id "aX_qzeKXlgw75_wfbHpA3wAAAIg"]
[Mon Feb 02 08:07:41.680841 2026] [:error] [pid 62826:tid 62831] [client 193.37.32.182:22777] [client 193.37.32.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "aX_qzYF6vPvg_C5dUL-zDwAAAYM"]
[Mon Feb 02 08:07:42.029017 2026] [:error] [pid 8507:tid 8510] [client 193.37.32.205:22483] [client 193.37.32.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentythree/locks.php"] [unique_id "aX_qztk9kluqaCHoCymTuAAAAcE"]
[Mon Feb 02 08:07:42.378526 2026] [:error] [pid 8507:tid 8532] [client 193.37.32.213:56941] [client 193.37.32.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/locks.php"] [unique_id "aX_qztk9kluqaCHoCymTugAAAdc"]
[Mon Feb 02 08:07:42.727185 2026] [:error] [pid 62826:tid 62829] [client 193.37.32.215:45951] [client 193.37.32.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentynineteen/sass/mixins/scss.php"] [unique_id "aX_qzoF6vPvg_C5dUL-zFwAAAYE"]
[Mon Feb 02 08:07:43.073997 2026] [:error] [pid 63153:tid 63179] [client 193.37.32.204:43295] [client 193.37.32.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/network.php"] [unique_id "aX_qz3C9GXHnmLkdgdnniAAAANI"]
[Mon Feb 02 08:07:43.420640 2026] [:error] [pid 63153:tid 63164] [client 193.37.32.217:56127] [client 193.37.32.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aX_qz3C9GXHnmLkdgdnnjQAAAMM"]
[Mon Feb 02 08:07:43.767627 2026] [:error] [pid 8507:tid 8509] [client 193.37.32.179:53817] [client 193.37.32.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aX_qz9k9kluqaCHoCymTvgAAAcA"]
[Mon Feb 02 08:07:44.114898 2026] [:error] [pid 33612:tid 33628] [client 193.37.32.218:31745] [client 193.37.32.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aX_q0MtFn80qQEmo5Qpq_QAAAQ4"]
[Mon Feb 02 08:07:44.472134 2026] [:error] [pid 46008:tid 46029] [client 193.37.32.193:52051] [client 193.37.32.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-differ1.php"] [unique_id "aX_q0CRa52iYn7SlSMkCBAAAAVI"]
[Mon Feb 02 08:07:44.819063 2026] [:error] [pid 33612:tid 33619] [client 193.37.32.183:32497] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/revealability.php"] [unique_id "aX_q0MtFn80qQEmo5QprAAAAAQU"]
[Mon Feb 02 08:07:45.166573 2026] [:error] [pid 63153:tid 63180] [client 193.37.32.210:35127] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/drive.php"] [unique_id "aX_q0XC9GXHnmLkdgdnnmAAAANM"]
[Mon Feb 02 08:07:45.515250 2026] [:error] [pid 8507:tid 8527] [client 193.37.32.195:52665] [client 193.37.32.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/vFWbf/wp-conflg.php"] [unique_id "aX_q0dk9kluqaCHoCymTxQAAAdI"]
[Mon Feb 02 08:07:45.862814 2026] [:error] [pid 46008:tid 46034] [client 193.37.32.229:41547] [client 193.37.32.229] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/image/chosen.php"] [unique_id "aX_q0SRa52iYn7SlSMkCCgAAAVc"]
[Mon Feb 02 08:07:46.211746 2026] [:error] [pid 46008:tid 46026] [client 193.37.32.201:43477] [client 193.37.32.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/google-feed/pki-validation/index.php"] [unique_id "aX_q0iRa52iYn7SlSMkCDQAAAU8"]
[Mon Feb 02 08:07:46.561624 2026] [:error] [pid 63153:tid 63167] [client 193.37.32.197:31291] [client 193.37.32.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/investor-relations/block-directory/index.php"] [unique_id "aX_q0nC9GXHnmLkdgdnnmwAAAMY"]
[Mon Feb 02 08:07:46.921599 2026] [:error] [pid 33612:tid 33637] [client 193.37.32.181:41387] [client 193.37.32.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s/wp-content/plugins/file52.php"] [unique_id "aX_q0stFn80qQEmo5QprBwAAARc"]
[Mon Feb 02 08:07:47.266996 2026] [:error] [pid 63034:tid 63126] [client 193.37.32.206:31587] [client 193.37.32.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s/wp-content/uploads/rank-math/about.php"] [unique_id "aX_q0-KXlgw75_wfbHpA7QAAAIg"]
[Mon Feb 02 08:07:47.612060 2026] [:error] [pid 63153:tid 63177] [client 193.37.32.208:49235] [client 193.37.32.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s/wp-content/mu-plugins/ID3/index.php"] [unique_id "aX_q03C9GXHnmLkdgdnnoAAAANA"]
[Mon Feb 02 08:07:47.959164 2026] [:error] [pid 63153:tid 63180] [client 193.37.32.192:34091] [client 193.37.32.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s/bk/wp-admin/includes/media1.php"] [unique_id "aX_q03C9GXHnmLkdgdnnoQAAANM"]
[Mon Feb 02 08:07:48.304697 2026] [:error] [pid 63153:tid 63173] [client 193.37.32.200:47781] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s/bk/wp-admin/network/about.php"] [unique_id "aX_q1HC9GXHnmLkdgdnnqAAAAMw"]
[Mon Feb 02 08:07:48.662113 2026] [:error] [pid 63153:tid 63183] [client 193.37.32.183:35577] [client 193.37.32.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s/bk/wp-includes/fonts/maint/index.php"] [unique_id "aX_q1HC9GXHnmLkdgdnnrAAAANY"]
[Mon Feb 02 08:07:49.009486 2026] [:error] [pid 62826:tid 62843] [client 193.37.32.210:63549] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s/bk/wp-includes/PHPMailer/widgets/index.php"] [unique_id "aX_q1YF6vPvg_C5dUL-zIgAAAY8"]
[Mon Feb 02 08:07:49.355441 2026] [:error] [pid 63032:tid 63064] [client 193.37.32.213:52685] [client 193.37.32.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s/wp-admin/network/icons/index.php"] [unique_id "aX_q1XyEQ1PkpebvdRg7UQAAAAE"]
[Mon Feb 02 08:07:49.703014 2026] [:error] [pid 46008:tid 46026] [client 193.37.32.223:56031] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s/wp-admin/user/colors/index.php"] [unique_id "aX_q1SRa52iYn7SlSMkCFQAAAU8"]
[Mon Feb 02 08:07:50.048150 2026] [:error] [pid 62826:tid 62844] [client 193.37.32.199:48561] [client 193.37.32.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s/wp-content/litespeed/debug/maint/index.php"] [unique_id "aX_q1oF6vPvg_C5dUL-zIwAAAZA"]
[Mon Feb 02 08:07:50.433581 2026] [:error] [pid 33612:tid 33636] [client 193.37.32.227:34735] [client 193.37.32.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aX_q1stFn80qQEmo5QprDwAAARY"]
[Mon Feb 02 08:07:50.781402 2026] [:error] [pid 46008:tid 46029] [client 193.37.32.207:47429] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/comments/feed/index.php"] [unique_id "aX_q1iRa52iYn7SlSMkCGAAAAVI"]
[Mon Feb 02 08:07:51.130701 2026] [:error] [pid 63033:tid 63094] [client 193.37.32.210:38097] [client 193.37.32.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/uploads/fm.php"] [unique_id "aX_q1_eMX2QyIh3K16pMdAAAAEM"]
[Mon Feb 02 08:07:51.477640 2026] [:error] [pid 46008:tid 46015] [client 193.37.32.223:32099] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aX_q1yRa52iYn7SlSMkCGgAAAUU"]
[Mon Feb 02 08:07:51.827093 2026] [:error] [pid 63153:tid 63174] [client 193.37.32.229:49311] [client 193.37.32.229] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/webp-express/radio.php"] [unique_id "aX_q13C9GXHnmLkdgdnnswAAAM0"]
[Mon Feb 02 08:07:52.174442 2026] [:error] [pid 63033:tid 63098] [client 193.37.32.182:54449] [client 193.37.32.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/webp-express/webp-images-bigger-than-source/providers/index.php"] [unique_id "aX_q2PeMX2QyIh3K16pMfQAAAEc"]
[Mon Feb 02 08:07:52.520770 2026] [:error] [pid 63153:tid 63162] [client 193.37.32.195:35099] [client 193.37.32.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/settings/gfhfv.php"] [unique_id "aX_q2HC9GXHnmLkdgdnntQAAAME"]
[Mon Feb 02 08:07:52.867649 2026] [:error] [pid 62826:tid 62850] [client 193.37.32.223:35817] [client 193.37.32.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/drive.php"] [unique_id "aX_q2IF6vPvg_C5dUL-zJwAAAZY"]
[Mon Feb 02 08:07:53.214287 2026] [:error] [pid 63034:tid 63124] [client 193.37.32.219:35523] [client 193.37.32.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/ws29.php"] [unique_id "aX_q2eKXlgw75_wfbHpA9AAAAIY"]
[Mon Feb 02 08:07:53.561799 2026] [:error] [pid 33612:tid 33627] [client 193.37.32.212:53481] [client 193.37.32.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/v3.php"] [unique_id "aX_q2ctFn80qQEmo5QprGAAAAQ0"]
[Mon Feb 02 08:07:53.907447 2026] [:error] [pid 33612:tid 33617] [client 193.37.32.179:57621] [client 193.37.32.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aX_q2ctFn80qQEmo5QprHAAAAQM"]
[Mon Feb 02 08:07:54.254772 2026] [:error] [pid 33612:tid 33631] [client 193.37.32.192:30167] [client 193.37.32.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aX_q2stFn80qQEmo5QprHgAAARE"]
[Mon Feb 02 08:07:54.599360 2026] [:error] [pid 63153:tid 63179] [client 193.37.32.209:59671] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aX_q2nC9GXHnmLkdgdnnvwAAANI"]
[Mon Feb 02 08:07:54.945830 2026] [:error] [pid 62826:tid 62832] [client 193.37.32.209:47559] [client 193.37.32.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aX_q2oF6vPvg_C5dUL-zKgAAAYQ"]
[Mon Feb 02 08:07:55.292769 2026] [:error] [pid 63032:tid 63064] [client 193.37.32.179:43435] [client 193.37.32.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aX_q23yEQ1PkpebvdRg7WgAAAAE"]
[Mon Feb 02 08:07:55.637983 2026] [:error] [pid 62826:tid 62835] [client 193.37.32.200:21415] [client 193.37.32.200] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "aX_q24F6vPvg_C5dUL-zKwAAAYc"]
[Mon Feb 02 08:07:55.984897 2026] [:error] [pid 63033:tid 63091] [client 193.37.32.203:56197] [client 193.37.32.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aX_q2_eMX2QyIh3K16pMgQAAAEA"]
[Mon Feb 02 08:07:56.330300 2026] [:error] [pid 46008:tid 46027] [client 193.37.32.207:50631] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/database.php"] [unique_id "aX_q3CRa52iYn7SlSMkCIwAAAVA"]
[Mon Feb 02 08:07:56.675060 2026] [:error] [pid 63032:tid 63085] [client 193.37.32.199:48249] [client 193.37.32.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/000.php"] [unique_id "aX_q3HyEQ1PkpebvdRg7XQAAABY"]
[Mon Feb 02 08:07:57.019843 2026] [:error] [pid 63153:tid 63170] [client 193.37.32.202:37129] [client 193.37.32.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/buy.php"] [unique_id "aX_q3XC9GXHnmLkdgdnnwgAAAMk"]
[Mon Feb 02 08:07:57.365419 2026] [:error] [pid 63153:tid 63164] [client 193.37.32.221:50933] [client 193.37.32.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/gettest.php"] [unique_id "aX_q3XC9GXHnmLkdgdnnxAAAAMM"]
[Mon Feb 02 08:07:57.717082 2026] [:error] [pid 8507:tid 8512] [client 193.37.32.214:31251] [client 193.37.32.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/gettest.php"] [unique_id "aX_q3dk9kluqaCHoCymT3QAAAcM"]
[Mon Feb 02 08:07:58.062611 2026] [:error] [pid 46008:tid 46034] [client 193.37.32.229:59863] [client 193.37.32.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/wp-good.php"] [unique_id "aX_q3iRa52iYn7SlSMkCJwAAAVc"]
[Mon Feb 02 08:07:58.409640 2026] [:error] [pid 33612:tid 33621] [client 193.37.32.226:37167] [client 193.37.32.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aX_q3stFn80qQEmo5QprKgAAAQc"]
[Mon Feb 02 08:07:58.768197 2026] [:error] [pid 46008:tid 46025] [client 193.37.32.201:22897] [client 193.37.32.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/user/index.php"] [unique_id "aX_q3iRa52iYn7SlSMkCLAAAAU4"]
[Mon Feb 02 08:07:59.112796 2026] [:error] [pid 63032:tid 63087] [client 193.37.32.189:57763] [client 193.37.32.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/includ.php"] [unique_id "aX_q33yEQ1PkpebvdRg7XgAAABg"]
[Mon Feb 02 08:07:59.458323 2026] [:error] [pid 63034:tid 63141] [client 193.37.32.184:48643] [client 193.37.32.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-xxx.php"] [unique_id "aX_q3-KXlgw75_wfbHpA9wAAAJc"]
[Mon Feb 02 08:52:08.411211 2026] [:error] [pid 62826:tid 62832] [client 119.28.89.249:52486] [client 119.28.89.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aX_1OIF6vPvg_C5dUL-97QAAAYQ"]
[Mon Feb 02 09:03:15.862066 2026] [:error] [pid 63033:tid 63104] [client 138.91.34.29:59600] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aX_30_eMX2QyIh3K16pbfwAAAE0"]
[Mon Feb 02 09:03:18.962389 2026] [:error] [pid 33612:tid 33633] [client 138.91.34.29:18541] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aX_31stFn80qQEmo5Qp7UAAAARM"]
[Mon Feb 02 09:03:20.204916 2026] [:error] [pid 63153:tid 63161] [client 138.91.34.29:58396] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aX_32HC9GXHnmLkdgdn42gAAAMA"]
[Mon Feb 02 09:03:36.475664 2026] [:error] [pid 63032:tid 63065] [client 138.91.34.29:6845] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit-tags.php"] [unique_id "aX_36HyEQ1PkpebvdRhPVQAAAAI"]
[Mon Feb 02 09:03:36.779144 2026] [:error] [pid 63032:tid 63080] [client 138.91.34.29:58416] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit-tags.php"] [unique_id "aX_36HyEQ1PkpebvdRhPVgAAABE"]
[Mon Feb 02 09:03:37.034860 2026] [:error] [pid 8507:tid 8519] [client 138.91.34.29:15101] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit-tags.php"] [unique_id "aX_36dk9kluqaCHoCymgDQAAAco"]
[Mon Feb 02 09:03:40.531368 2026] [:error] [pid 33612:tid 33614] [client 138.91.34.29:36319] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit-tags.php"] [unique_id "aX_37MtFn80qQEmo5Qp7ZwAAAQA"]
[Mon Feb 02 09:03:41.267900 2026] [:error] [pid 8507:tid 8509] [client 138.91.34.29:29448] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bk.php"] [unique_id "aX_37dk9kluqaCHoCymgEAAAAcA"]
[Mon Feb 02 09:03:42.800311 2026] [:error] [pid 62826:tid 62837] [client 138.91.34.29:16821] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bk.php"] [unique_id "aX_37oF6vPvg_C5dUL-_3QAAAYk"]
[Mon Feb 02 09:03:44.699577 2026] [:error] [pid 33612:tid 33636] [client 138.91.34.29:6834] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bk.php"] [unique_id "aX_38MtFn80qQEmo5Qp7bgAAARY"]
[Mon Feb 02 09:03:46.367698 2026] [:error] [pid 63033:tid 63114] [client 138.91.34.29:23093] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bk.php"] [unique_id "aX_38veMX2QyIh3K16pbpAAAAFc"]
[Mon Feb 02 09:03:50.328104 2026] [:error] [pid 63033:tid 63106] [client 138.91.34.29:58306] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aX_39veMX2QyIh3K16pbswAAAE8"]
[Mon Feb 02 09:03:50.924997 2026] [:error] [pid 8507:tid 8530] [client 138.91.34.29:6813] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aX_39tk9kluqaCHoCymgEgAAAdU"]
[Mon Feb 02 09:03:54.244356 2026] [:error] [pid 63153:tid 63175] [client 138.91.34.29:40041] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aX_3-nC9GXHnmLkdgdn49wAAAM4"]
[Mon Feb 02 09:03:56.100419 2026] [:error] [pid 63032:tid 63075] [client 138.91.34.29:15093] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aX_3_HyEQ1PkpebvdRhPbAAAAAw"]
[Mon Feb 02 09:04:00.766893 2026] [:error] [pid 63034:tid 63136] [client 138.91.34.29:6842] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws53.php"] [unique_id "aX_4AOKXlgw75_wfbHpNRgAAAJI"]
[Mon Feb 02 09:04:02.887895 2026] [:error] [pid 8507:tid 8528] [client 138.91.34.29:6479] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws53.php"] [unique_id "aX_4Atk9kluqaCHoCymgIgAAAdM"]
[Mon Feb 02 09:04:03.601465 2026] [:error] [pid 63034:tid 63128] [client 138.91.34.29:18535] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws53.php"] [unique_id "aX_4A-KXlgw75_wfbHpNSgAAAIo"]
[Mon Feb 02 09:04:04.624038 2026] [:error] [pid 63153:tid 63179] [client 138.91.34.29:6835] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws53.php"] [unique_id "aX_4BHC9GXHnmLkdgdn4_wAAANI"]
[Mon Feb 02 09:04:06.217635 2026] [:error] [pid 63033:tid 63102] [client 138.91.34.29:24954] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/revealability.php"] [unique_id "aX_4BveMX2QyIh3K16pbuQAAAEs"]
[Mon Feb 02 09:04:06.894217 2026] [:error] [pid 63153:tid 63181] [client 138.91.34.29:6840] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/revealability.php"] [unique_id "aX_4BnC9GXHnmLkdgdn5AwAAANQ"]
[Mon Feb 02 09:04:10.054223 2026] [:error] [pid 63032:tid 63078] [client 138.91.34.29:6792] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/revealability.php"] [unique_id "aX_4CnyEQ1PkpebvdRhPhQAAAA8"]
[Mon Feb 02 09:04:11.288857 2026] [:error] [pid 63034:tid 63128] [client 138.91.34.29:6825] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/revealability.php"] [unique_id "aX_4C-KXlgw75_wfbHpNVgAAAIo"]
[Mon Feb 02 09:04:13.267690 2026] [:error] [pid 46008:tid 46013] [client 138.91.34.29:15072] [client 138.91.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/soniau.php"] [unique_id "aX_4DSRa52iYn7SlSMkPiAAAAUM"]
[Mon Feb 02 10:42:43.498458 2026] [:error] [pid 57080:tid 57106] [client 147.135.252.182:49510] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYAPI49Utn0ZlfnF10PciwAAAtM"]
[Mon Feb 02 11:22:34.797280 2026] [:error] [pid 56989:tid 57005] [client 193.70.44.235:37864] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYAYekp44HnChN-GZlhjRwAAAg4"]
[Mon Feb 02 11:22:37.212076 2026] [:error] [pid 56989:tid 57004] [client 193.70.44.235:59736] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYAYfUp44HnChN-GZlhjTQAAAg0"]
[Mon Feb 02 11:22:39.735770 2026] [:error] [pid 33612:tid 33629] [client 193.70.44.235:59752] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYAYf8tFn80qQEmo5QqepwAAAQ8"]
[Mon Feb 02 11:22:42.119065 2026] [:error] [pid 63153:tid 63167] [client 193.70.44.235:59766] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYAYgnC9GXHnmLkdgdkUOwAAAMY"]
[Mon Feb 02 11:22:44.521265 2026] [:error] [pid 56989:tid 56993] [client 193.70.44.235:59774] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYAYhEp44HnChN-GZlhjWQAAAgI"]
[Mon Feb 02 11:22:47.053516 2026] [:error] [pid 57080:tid 57088] [client 193.70.44.235:40344] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aYAYh49Utn0ZlfnF10PnOAAAAsE"]
[Mon Feb 02 11:22:49.552668 2026] [:error] [pid 63153:tid 63165] [client 193.70.44.235:40350] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYAYiXC9GXHnmLkdgdkUQQAAAMQ"]
[Mon Feb 02 11:22:52.074183 2026] [:error] [pid 63153:tid 63180] [client 193.70.44.235:40358] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYAYjHC9GXHnmLkdgdkUQwAAANM"]
[Mon Feb 02 11:22:54.613729 2026] [:error] [pid 63032:tid 63075] [client 193.70.44.235:40360] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYAYjnyEQ1PkpebvdRhy9gAAAAw"]
[Mon Feb 02 11:22:57.149566 2026] [:error] [pid 57022:tid 57066] [client 193.70.44.235:59792] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYAYkRnEgLMzfcurxfnvEQAAAo4"]
[Mon Feb 02 11:22:59.673902 2026] [:error] [pid 63034:tid 63127] [client 193.70.44.235:59798] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYAYk-KXlgw75_wfbHprlgAAAIk"]
[Mon Feb 02 11:23:02.182364 2026] [:error] [pid 56989:tid 57005] [client 193.70.44.235:59800] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYAYlkp44HnChN-GZlhjewAAAg4"]
[Mon Feb 02 11:23:04.545141 2026] [:error] [pid 57080:tid 57111] [client 193.70.44.235:59816] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYAYmI9Utn0ZlfnF10PnSgAAAtg"]
[Mon Feb 02 11:23:07.072962 2026] [:error] [pid 57021:tid 57025] [client 193.70.44.235:42148] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYAYm_7AEpx7VcmYK3GjfwAAAkA"]
[Mon Feb 02 11:23:09.568873 2026] [:error] [pid 56989:tid 56992] [client 193.70.44.235:42160] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYAYnUp44HnChN-GZlhjgAAAAgE"]
[Mon Feb 02 11:23:12.073445 2026] [:error] [pid 63032:tid 63083] [client 193.70.44.235:42170] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYAYoHyEQ1PkpebvdRhzCAAAABQ"]
[Mon Feb 02 11:23:14.561418 2026] [:error] [pid 46008:tid 46013] [client 193.70.44.235:42184] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYAYoiRa52iYn7SlSMkw2gAAAUM"]
[Mon Feb 02 11:49:13.211351 2026] [:error] [pid 63032:tid 63072] [client 185.241.211.8:64232] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYAeuXyEQ1PkpebvdRh5ZgAAAAk"]
[Mon Feb 02 11:49:13.638423 2026] [:error] [pid 33612:tid 33631] [client 185.241.211.8:64332] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYAeuctFn80qQEmo5QqkWAAAARE"]
[Mon Feb 02 11:49:14.074782 2026] [:error] [pid 63153:tid 63180] [client 185.241.211.8:64491] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYAeunC9GXHnmLkdgdkZpQAAANM"]
[Mon Feb 02 11:49:14.503440 2026] [:error] [pid 56989:tid 56995] [client 185.241.211.8:64680] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYAeukp44HnChN-GZlhuPgAAAgQ"]
[Mon Feb 02 11:49:14.934285 2026] [:error] [pid 63153:tid 63183] [client 185.241.211.8:64876] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYAeunC9GXHnmLkdgdkZwwAAANY"]
[Mon Feb 02 12:41:51.275792 2026] [:error] [pid 56989:tid 57001] [client 43.130.57.76:59600] [client 43.130.57.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYArD0p44HnChN-GZliB-QAAAgo"]
[Mon Feb 02 12:47:24.427292 2026] [:error] [pid 46008:tid 46021] [client 54.36.60.91:34894] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYAsXCRa52iYn7SlSMlIRQAAAUo"]
[Mon Feb 02 12:47:26.802012 2026] [:error] [pid 46008:tid 46023] [client 54.36.60.91:48350] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYAsXiRa52iYn7SlSMlIRwAAAUw"]
[Mon Feb 02 12:47:29.318668 2026] [:error] [pid 33612:tid 33620] [client 54.36.60.91:48366] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYAsYctFn80qQEmo5Qqx2wAAAQY"]
[Mon Feb 02 12:47:31.850342 2026] [:error] [pid 46008:tid 46012] [client 54.36.60.91:48374] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYAsYyRa52iYn7SlSMlIUQAAAUI"]
[Mon Feb 02 12:47:34.524661 2026] [:error] [pid 57022:tid 57055] [client 54.36.60.91:43304] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aYAsZhnEgLMzfcurxfn_NAAAAoM"]
[Mon Feb 02 12:47:37.073710 2026] [:error] [pid 46008:tid 46031] [client 54.36.60.91:43320] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYAsaSRa52iYn7SlSMlIWwAAAVQ"]
[Mon Feb 02 12:47:39.656047 2026] [:error] [pid 57080:tid 57099] [client 54.36.60.91:43324] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYAsa49Utn0ZlfnF10MAUQAAAsw"]
[Mon Feb 02 12:47:42.224910 2026] [:error] [pid 63034:tid 63132] [client 54.36.60.91:43334] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYAsbuKXlgw75_wfbHp_2QAAAI4"]
[Mon Feb 02 12:47:45.012057 2026] [:error] [pid 56989:tid 57003] [client 54.36.60.91:49822] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYAscUp44HnChN-GZliE7wAAAgw"]
[Mon Feb 02 12:47:47.465142 2026] [:error] [pid 46008:tid 46016] [client 54.36.60.91:49832] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYAscyRa52iYn7SlSMlIaAAAAUY"]
[Mon Feb 02 12:47:49.833846 2026] [:error] [pid 57081:tid 57129] [client 54.36.60.91:49840] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYAsdWvouJ2Jkm6HfBjkrAAAAw4"]
[Mon Feb 02 12:47:52.376849 2026] [:error] [pid 63153:tid 63165] [client 54.36.60.91:49848] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYAseHC9GXHnmLkdgdkltwAAAMQ"]
[Mon Feb 02 12:47:54.891472 2026] [:error] [pid 46008:tid 46034] [client 54.36.60.91:45318] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYAseiRa52iYn7SlSMlIbgAAAVc"]
[Mon Feb 02 12:47:57.389354 2026] [:error] [pid 63034:tid 63138] [client 54.36.60.91:45330] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aYAsfeKXlgw75_wfbHp_5wAAAJQ"]
[Mon Feb 02 12:47:59.896152 2026] [:error] [pid 57080:tid 57093] [client 54.36.60.91:45342] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aYAsf49Utn0ZlfnF10MAbAAAAsY"]
[Mon Feb 02 12:48:02.431449 2026] [:error] [pid 46008:tid 46031] [client 54.36.60.91:45348] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aYAsgiRa52iYn7SlSMlIfAAAAVQ"]
[Mon Feb 02 12:48:04.923034 2026] [:error] [pid 63153:tid 63173] [client 54.36.60.91:60932] [client 54.36.60.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYAshHC9GXHnmLkdgdklxAAAAMw"]
[Mon Feb 02 19:57:57.011460 2026] [:error] [pid 63032:tid 63067] [client 46.101.248.102:57753] [client 46.101.248.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.248.102, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYCRRXyEQ1PkpebvdRje4wAAAAQ"]
[Mon Feb 02 21:53:36.428669 2026] [:error] [pid 63034:tid 63129] [client 117.33.163.216:33736] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYCsYOKXlgw75_wfbHrtFwAAAIs"]
[Tue Feb 03 00:08:57.259211 2026] [:error] [pid 57081:tid 57117] [client 43.130.53.252:36258] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYDMGWvouJ2Jkm6HfBhk7QAAAwI"]
[Tue Feb 03 01:07:15.627185 2026] [:error] [pid 57081:tid 57133] [client 160.250.133.80:63087] [client 160.250.133.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.133.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYDZw2vouJ2Jkm6HfBhuRAAAAxI"]
[Tue Feb 03 01:07:20.196773 2026] [:error] [pid 57081:tid 57132] [client 160.250.133.80:63087] [client 160.250.133.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.133.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYDZyGvouJ2Jkm6HfBhuSgAAAxE"], referer: http://hotbooksbookeeping2.com/wp-login.php?action=register
[Tue Feb 03 04:02:28.634495 2026] [:error] [pid 12362:tid 12401] [client 147.135.252.182:50294] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYEC1PypTadt6sfy5QE0-gAAAEI"]
[Tue Feb 03 04:37:06.976273 2026] [:error] [pid 42922:tid 42999] [client 145.239.69.44:54436] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYEK8mazX4WPS_dQRkiLCgAAAI4"]
[Tue Feb 03 04:37:17.391013 2026] [:error] [pid 42921:tid 42969] [client 145.239.69.44:53208] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYEK_YblShffGl-01odqggAAAEs"]
[Tue Feb 03 04:37:19.810364 2026] [:error] [pid 43028:tid 43052] [client 145.239.69.44:53210] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYEK_1nHWnJD4cJC5Dtk8gAAANY"]
[Tue Feb 03 04:37:22.350644 2026] [:error] [pid 42922:tid 42988] [client 145.239.69.44:47752] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYELAmazX4WPS_dQRkiLHwAAAIM"]
[Tue Feb 03 04:37:36.584277 2026] [:error] [pid 43028:tid 43038] [client 145.239.69.44:36542] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYELEFnHWnJD4cJC5DtlDQAAAMg"]
[Tue Feb 03 04:37:39.134381 2026] [:error] [pid 43028:tid 43041] [client 145.239.69.44:36548] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aYELE1nHWnJD4cJC5DtlGAAAAMs"]
[Tue Feb 03 04:37:41.785843 2026] [:error] [pid 43028:tid 43030] [client 145.239.69.44:36556] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYELFVnHWnJD4cJC5DtlIgAAAMA"]
[Tue Feb 03 04:37:44.395640 2026] [:error] [pid 43028:tid 43039] [client 145.239.69.44:40628] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYELGFnHWnJD4cJC5DtlKgAAAMk"]
[Tue Feb 03 04:37:46.968239 2026] [:error] [pid 43028:tid 43049] [client 145.239.69.44:40640] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYELGlnHWnJD4cJC5DtlMwAAANM"]
[Tue Feb 03 04:37:49.472404 2026] [:error] [pid 43028:tid 43038] [client 145.239.69.44:40652] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYELHVnHWnJD4cJC5DtlOwAAAMg"]
[Tue Feb 03 04:37:52.036006 2026] [:error] [pid 42920:tid 42947] [client 145.239.69.44:37778] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYELICix3YKltG4EU0l8CgAAABI"]
[Tue Feb 03 04:37:54.632740 2026] [:error] [pid 42920:tid 42939] [client 145.239.69.44:37794] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYELIiix3YKltG4EU0l8EgAAAAo"]
[Tue Feb 03 04:37:57.254445 2026] [:error] [pid 42921:tid 42960] [client 145.239.69.44:37802] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYELJYblShffGl-01odqowAAAEI"]
[Tue Feb 03 04:37:59.680292 2026] [:error] [pid 42920:tid 42950] [client 145.239.69.44:37808] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYELJyix3YKltG4EU0l8FAAAABU"]
[Tue Feb 03 04:38:02.221812 2026] [:error] [pid 43028:tid 43054] [client 145.239.69.44:53362] [client 145.239.69.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYELKlnHWnJD4cJC5DtlTgAAANg"]
[Tue Feb 03 06:08:25.325926 2026] [:error] [pid 28720:tid 28743] [client 62.84.185.67:57790] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYEgWWmRXm2bmr_sYia51wAAARU"]
[Tue Feb 03 06:08:27.927803 2026] [:error] [pid 42921:tid 42977] [client 62.84.185.67:25818] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYEgW4blShffGl-01oeHbwAAAFM"]
[Tue Feb 03 06:08:31.585404 2026] [:error] [pid 42921:tid 42959] [client 62.84.185.67:25820] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYEgX4blShffGl-01oeHdAAAAEE"]
[Tue Feb 03 06:08:34.379021 2026] [:error] [pid 43028:tid 43034] [client 62.84.185.67:25828] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYEgYlnHWnJD4cJC5DuM5QAAAMQ"]
[Tue Feb 03 06:08:36.925026 2026] [:error] [pid 42920:tid 42944] [client 62.84.185.67:27964] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aYEgZCix3YKltG4EU0mVlgAAAA8"]
[Tue Feb 03 06:08:39.635307 2026] [:error] [pid 28720:tid 28724] [client 62.84.185.67:27974] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYEgZ2mRXm2bmr_sYia5-gAAAQI"]
[Tue Feb 03 06:08:42.223685 2026] [:error] [pid 42921:tid 42959] [client 62.84.185.67:27988] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYEgaoblShffGl-01oeHfgAAAEE"]
[Tue Feb 03 06:08:44.873733 2026] [:error] [pid 42921:tid 42973] [client 62.84.185.67:27990] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYEgbIblShffGl-01oeHgwAAAE8"]
[Tue Feb 03 06:08:47.409197 2026] [:error] [pid 42920:tid 42949] [client 62.84.185.67:62140] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYEgbyix3YKltG4EU0mVsgAAABQ"]
[Tue Feb 03 06:08:50.137378 2026] [:error] [pid 43028:tid 43052] [client 62.84.185.67:62154] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYEgclnHWnJD4cJC5DuM-gAAANY"]
[Tue Feb 03 06:08:52.730678 2026] [:error] [pid 28720:tid 28734] [client 62.84.185.67:62160] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYEgdGmRXm2bmr_sYia6CAAAAQw"]
[Tue Feb 03 06:08:55.471176 2026] [:error] [pid 43028:tid 43051] [client 62.84.185.67:62176] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYEgd1nHWnJD4cJC5DuNDQAAANU"]
[Tue Feb 03 06:08:58.104735 2026] [:error] [pid 43028:tid 43048] [client 62.84.185.67:51900] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYEgelnHWnJD4cJC5DuNFAAAANI"]
[Tue Feb 03 06:09:00.719070 2026] [:error] [pid 28720:tid 28741] [client 62.84.185.67:51902] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aYEgfGmRXm2bmr_sYia6IgAAARM"]
[Tue Feb 03 06:09:03.427944 2026] [:error] [pid 42922:tid 42999] [client 62.84.185.67:51910] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aYEgf2azX4WPS_dQRkipTwAAAI4"]
[Tue Feb 03 06:09:06.170012 2026] [:error] [pid 28720:tid 28742] [client 62.84.185.67:51912] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aYEggmmRXm2bmr_sYia6LQAAARQ"]
[Tue Feb 03 06:09:09.698627 2026] [:error] [pid 28720:tid 28740] [client 62.84.185.67:9482] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYEghWmRXm2bmr_sYia6NAAAARI"]
[Tue Feb 03 07:58:19.407670 2026] [:error] [pid 43028:tid 43037] [client 43.130.31.17:40772] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYE6G1nHWnJD4cJC5Du95gAAAMc"]
[Tue Feb 03 09:17:46.560815 2026] [:error] [pid 5229:tid 5241] [client 54.38.38.130:54498] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYFMukKmEgmJub93yUrhDQAAAYo"]
[Tue Feb 03 09:17:46.962831 2026] [:error] [pid 5148:tid 5156] [client 54.38.38.130:54488] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aYFMur83HCHLtUIbS7IGrAAAAUU"]
[Tue Feb 03 09:17:49.569292 2026] [:error] [pid 43028:tid 43048] [client 54.38.38.130:40646] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aYFMvVnHWnJD4cJC5DvYqQAAANI"]
[Tue Feb 03 09:17:49.969968 2026] [:error] [pid 42921:tid 42981] [client 54.38.38.130:40662] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aYFMvYblShffGl-01ofHxgAAAFc"]
[Tue Feb 03 09:17:52.350515 2026] [:error] [pid 43028:tid 43049] [client 54.38.38.130:40678] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYFMwFnHWnJD4cJC5DvYtAAAANM"]
[Tue Feb 03 09:17:52.705461 2026] [:error] [pid 43028:tid 43033] [client 54.38.38.130:40686] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aYFMwFnHWnJD4cJC5DvYtQAAAMM"]
[Tue Feb 03 09:17:55.450831 2026] [:error] [pid 5148:tid 5166] [client 54.38.38.130:40692] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYFMw783HCHLtUIbS7IGygAAAU8"]
[Tue Feb 03 11:50:54.236033 2026] [:error] [pid 43028:tid 43031] [client 43.135.144.81:34632] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYFwnlnHWnJD4cJC5DsHNgAAAME"]
[Tue Feb 03 13:12:38.524317 2026] [:error] [pid 5229:tid 5246] [client 51.75.116.202:41120] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aYGDxkKmEgmJub93yUpJcQAAAY8"]
[Tue Feb 03 13:12:41.049031 2026] [:error] [pid 42922:tid 42998] [client 51.75.116.202:42086] [client 51.75.116.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYGDyWazX4WPS_dQRkgoRQAAAI0"]
[Tue Feb 03 13:51:26.058456 2026] [:error] [pid 42922:tid 43006] [client 165.227.166.217:56374] [client 165.227.166.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.166.217, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYGM3mazX4WPS_dQRkgzPQAAAJU"]
[Tue Feb 03 18:10:03.419088 2026] [:error] [pid 42921:tid 42967] [client 187.72.64.40:49217] [client 187.72.64.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.72.64.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYHJe4blShffGl-01odOuQAAAEk"]
[Tue Feb 03 18:50:46.161948 2026] [:error] [pid 42920:tid 42952] [client 125.75.66.97:54009] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYHTBiix3YKltG4EU0lkGgAAABc"]
[Tue Feb 03 19:16:30.822151 2026] [:error] [pid 42922:tid 42999] [client 43.134.186.61:56792] [client 43.134.186.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYHZDmazX4WPS_dQRkiAPAAAAI4"]
[Tue Feb 03 21:14:43.016789 2026] [autoindex:error] [pid 5148:tid 5169] [client 20.239.141.38:36290] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 21:14:44.427952 2026] [:error] [pid 5148:tid 5174] [client 20.239.141.38:36290] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aYH0xL83HCHLtUIbS7Lq9QAAAVc"]
[Tue Feb 03 21:14:45.196880 2026] [:error] [pid 42921:tid 42978] [client 20.239.141.38:25271] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aYH0xYblShffGl-01od8CgAAAFQ"]
[Tue Feb 03 21:14:47.159438 2026] [:error] [pid 5148:tid 5175] [client 20.239.141.38:15629] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aYH0x783HCHLtUIbS7Lq_AAAAVg"]
[Tue Feb 03 21:14:48.866053 2026] [:error] [pid 42921:tid 42981] [client 20.239.141.38:19647] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aYH0yIblShffGl-01od8EAAAAFc"]
[Tue Feb 03 21:14:53.322698 2026] [:error] [pid 42920:tid 42944] [client 20.239.141.38:16845] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aYH0zSix3YKltG4EU0mHawAAAA8"]
[Tue Feb 03 21:14:55.516585 2026] [:error] [pid 42920:tid 42943] [client 20.239.141.38:16858] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aYH0zyix3YKltG4EU0mHcQAAAA4"]
[Tue Feb 03 21:15:04.726612 2026] [:error] [pid 42922:tid 43002] [client 20.239.141.38:3708] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aYH02GazX4WPS_dQRkifowAAAJE"]
[Tue Feb 03 21:15:06.824836 2026] [:error] [pid 5229:tid 5245] [client 20.239.141.38:41507] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aYH02kKmEgmJub93yUoA7gAAAY4"]
[Tue Feb 03 21:15:07.785023 2026] [:error] [pid 28720:tid 28737] [client 20.239.141.38:3706] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aYH022mRXm2bmr_sYibTtgAAAQ8"]
[Tue Feb 03 21:15:15.996053 2026] [:error] [pid 28720:tid 28733] [client 20.239.141.38:13740] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aYH042mRXm2bmr_sYibTyAAAAQs"]
[Tue Feb 03 21:15:18.917901 2026] [:error] [pid 43028:tid 43046] [client 20.239.141.38:23329] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fwe.php"] [unique_id "aYH05lnHWnJD4cJC5DutlQAAANA"]
[Tue Feb 03 21:15:20.332799 2026] [:error] [pid 5148:tid 5164] [client 20.239.141.38:14861] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fwe.php"] [unique_id "aYH06L83HCHLtUIbS7LrOQAAAU0"]
[Tue Feb 03 21:15:24.811113 2026] [:error] [pid 42921:tid 42974] [client 20.239.141.38:4063] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fwe.php"] [unique_id "aYH07IblShffGl-01od8RAAAAFA"]
[Tue Feb 03 21:15:39.619633 2026] [:error] [pid 42921:tid 42965] [client 20.239.141.38:14181] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/m.php"] [unique_id "aYH0-4blShffGl-01od8VgAAAEc"]
[Tue Feb 03 21:15:42.462984 2026] [:error] [pid 42921:tid 42976] [client 20.239.141.38:18918] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/m.php"] [unique_id "aYH0_oblShffGl-01od8WAAAAFI"]
[Tue Feb 03 21:15:50.287731 2026] [:error] [pid 42920:tid 42929] [client 20.239.141.38:18895] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aYH1Biix3YKltG4EU0mH4gAAAAA"]
[Tue Feb 03 21:15:52.060434 2026] [:error] [pid 5148:tid 5162] [client 20.239.141.38:14895] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aYH1CL83HCHLtUIbS7LrZwAAAUs"]
[Tue Feb 03 21:15:54.815478 2026] [:error] [pid 42922:tid 43006] [client 20.239.141.38:20872] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aYH1CmazX4WPS_dQRkif8gAAAJU"]
[Tue Feb 03 21:15:58.099831 2026] [:error] [pid 5148:tid 5170] [client 20.239.141.38:20920] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aYH1Dr83HCHLtUIbS7LrbwAAAVM"]
[Tue Feb 03 21:16:09.644751 2026] [:error] [pid 28720:tid 28743] [client 20.239.141.38:3695] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aYH1GWmRXm2bmr_sYibUDgAAARU"]
[Tue Feb 03 21:16:10.757175 2026] [:error] [pid 5148:tid 5175] [client 20.239.141.38:14196] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aYH1Gr83HCHLtUIbS7LrhAAAAVg"]
[Tue Feb 03 21:16:12.657530 2026] [:error] [pid 42921:tid 42967] [client 20.239.141.38:14180] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aYH1HIblShffGl-01od8gQAAAEk"]
[Tue Feb 03 21:16:20.339421 2026] [:error] [pid 42922:tid 42986] [client 20.239.141.38:10897] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aYH1JGazX4WPS_dQRkigFwAAAIE"]
[Tue Feb 03 21:16:21.767455 2026] [:error] [pid 28720:tid 28727] [client 20.239.141.38:14885] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aYH1JWmRXm2bmr_sYibUGgAAAQU"]
[Tue Feb 03 21:16:23.298961 2026] [:error] [pid 42922:tid 42994] [client 20.239.141.38:18883] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aYH1J2azX4WPS_dQRkigGAAAAIk"]
[Tue Feb 03 21:16:35.781965 2026] [:error] [pid 43028:tid 43046] [client 20.239.141.38:10896] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aYH1M1nHWnJD4cJC5DuuCwAAANA"]
[Tue Feb 03 21:17:02.555085 2026] [:error] [pid 42922:tid 43009] [client 20.239.141.38:14858] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aYH1TmazX4WPS_dQRkigXAAAAJg"]
[Tue Feb 03 21:17:04.136917 2026] [:error] [pid 42921:tid 42980] [client 20.239.141.38:4065] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aYH1UIblShffGl-01od86AAAAFY"]
[Tue Feb 03 21:17:16.495203 2026] [:error] [pid 42922:tid 43009] [client 20.239.141.38:10917] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aYH1XGazX4WPS_dQRkigeAAAAJg"]
[Tue Feb 03 21:17:17.338857 2026] [:error] [pid 43028:tid 43053] [client 20.239.141.38:10499] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aYH1XVnHWnJD4cJC5DuuZAAAANc"]
[Tue Feb 03 21:17:19.855392 2026] [:error] [pid 42920:tid 42929] [client 20.239.141.38:18926] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aYH1Xyix3YKltG4EU0mIQgAAAAA"]
[Tue Feb 03 21:17:20.911959 2026] [:error] [pid 43028:tid 43048] [client 20.239.141.38:10505] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aYH1YFnHWnJD4cJC5DuuagAAANI"]
[Tue Feb 03 21:17:21.878743 2026] [:error] [pid 42921:tid 42979] [client 20.239.141.38:10941] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aYH1YYblShffGl-01od8_QAAAFU"]
[Tue Feb 03 21:17:25.267937 2026] [:error] [pid 42922:tid 43006] [client 20.239.141.38:14898] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aYH1ZWazX4WPS_dQRkigfQAAAJU"]
[Tue Feb 03 21:17:28.520085 2026] [:error] [pid 5229:tid 5251] [client 20.239.141.38:23161] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aYH1aEKmEgmJub93yUoBygAAAZQ"]
[Tue Feb 03 21:17:38.496203 2026] [:error] [pid 28720:tid 28742] [client 20.239.141.38:3689] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aYH1cmmRXm2bmr_sYibUbgAAARQ"]
[Tue Feb 03 21:17:39.567951 2026] [:error] [pid 5148:tid 5158] [client 20.239.141.38:14190] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aYH1c783HCHLtUIbS7LsEAAAAUc"]
[Tue Feb 03 21:17:42.053123 2026] [:error] [pid 5229:tid 5247] [client 20.239.141.38:10513] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aYH1dkKmEgmJub93yUoB3QAAAZA"]
[Tue Feb 03 21:18:30.375099 2026] [:error] [pid 42921:tid 42961] [client 20.239.141.38:20965] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aYH1poblShffGl-01od9UQAAAEM"]
[Tue Feb 03 21:18:32.545449 2026] [:error] [pid 42920:tid 42941] [client 20.239.141.38:25268] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aYH1qCix3YKltG4EU0mItQAAAAw"]
[Tue Feb 03 21:18:33.935718 2026] [:error] [pid 42921:tid 42976] [client 20.239.141.38:14177] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aYH1qYblShffGl-01od9VQAAAFI"]
[Tue Feb 03 21:18:36.527733 2026] [:error] [pid 5229:tid 5239] [client 20.239.141.38:14145] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aYH1rEKmEgmJub93yUoCNAAAAYg"]
[Tue Feb 03 21:18:38.355826 2026] [:error] [pid 5229:tid 5251] [client 20.239.141.38:3663] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aYH1rkKmEgmJub93yUoCOwAAAZQ"]
[Tue Feb 03 21:18:42.385876 2026] [:error] [pid 28720:tid 28733] [client 20.239.141.38:18925] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aYH1smmRXm2bmr_sYibVCQAAAQs"]
[Tue Feb 03 21:18:44.325238 2026] [:error] [pid 43028:tid 43037] [client 20.239.141.38:3693] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aYH1tFnHWnJD4cJC5Duu_wAAAMc"]
[Tue Feb 03 21:18:49.103426 2026] [:error] [pid 42922:tid 42991] [client 20.239.141.38:14906] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aYH1uWazX4WPS_dQRkihDAAAAIY"]
[Tue Feb 03 21:18:51.046088 2026] [:error] [pid 42920:tid 42942] [client 20.239.141.38:14156] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aYH1uyix3YKltG4EU0mI0gAAAA0"]
[Tue Feb 03 21:18:53.597971 2026] [:error] [pid 42922:tid 43001] [client 20.239.141.38:4089] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aYH1vWazX4WPS_dQRkihIgAAAJA"]
[Tue Feb 03 21:19:09.706907 2026] [:error] [pid 28720:tid 28722] [client 20.239.141.38:23314] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aYH1zWmRXm2bmr_sYibVKwAAAQA"]
[Tue Feb 03 21:19:10.877035 2026] [:error] [pid 5148:tid 5175] [client 20.239.141.38:23342] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aYH1zr83HCHLtUIbS7LsgAAAAVg"]
[Tue Feb 03 21:19:13.665637 2026] [:error] [pid 43028:tid 43053] [client 20.239.141.38:14148] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aYH10VnHWnJD4cJC5DuvMgAAANc"]
[Tue Feb 03 21:19:14.305055 2026] [:error] [pid 42922:tid 42993] [client 20.239.141.38:10904] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aYH10mazX4WPS_dQRkihNAAAAIg"]
[Tue Feb 03 21:19:14.823181 2026] [:error] [pid 43028:tid 43042] [client 20.239.141.38:14197] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYH10lnHWnJD4cJC5DuvNwAAAMw"]
[Tue Feb 03 21:19:15.462111 2026] [:error] [pid 42921:tid 42968] [client 20.239.141.38:11749] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYH104blShffGl-01od9oQAAAEo"]
[Tue Feb 03 21:19:20.457070 2026] [:error] [pid 43028:tid 43041] [client 20.239.141.38:4092] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYH12FnHWnJD4cJC5DuvPQAAAMs"]
[Tue Feb 03 21:19:22.854099 2026] [:error] [pid 42920:tid 42935] [client 20.239.141.38:3710] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYH12iix3YKltG4EU0mI-AAAAAY"]
[Tue Feb 03 21:19:33.673340 2026] [:error] [pid 42920:tid 42938] [client 20.239.141.38:23153] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aYH15Six3YKltG4EU0mJEgAAAAk"]
[Tue Feb 03 21:19:35.447578 2026] [:error] [pid 28720:tid 28725] [client 20.239.141.38:10925] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aYH152mRXm2bmr_sYibVOQAAAQM"]
[Tue Feb 03 21:19:37.985146 2026] [:error] [pid 5229:tid 5232] [client 20.239.141.38:10557] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aYH16UKmEgmJub93yUoCjQAAAYE"]
[Tue Feb 03 21:19:39.703126 2026] [:error] [pid 42922:tid 43001] [client 20.239.141.38:4088] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aYH162azX4WPS_dQRkihSAAAAJA"]
[Tue Feb 03 21:19:46.503645 2026] [:error] [pid 28720:tid 28741] [client 20.239.141.38:3670] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aYH18mmRXm2bmr_sYibVRgAAARM"]
[Tue Feb 03 21:19:47.621919 2026] [:error] [pid 42922:tid 42996] [client 20.239.141.38:11702] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aYH182azX4WPS_dQRkihTgAAAIs"]
[Tue Feb 03 21:19:49.173447 2026] [:error] [pid 28720:tid 28744] [client 20.239.141.38:14181] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aYH19WmRXm2bmr_sYibVSgAAARY"]
[Tue Feb 03 21:19:51.005155 2026] [:error] [pid 43028:tid 43045] [client 20.239.141.38:11694] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aYH191nHWnJD4cJC5DuvdwAAAM8"]
[Tue Feb 03 21:19:54.435810 2026] [:error] [pid 42922:tid 43003] [client 20.239.141.38:10922] [client 20.239.141.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYH1-mazX4WPS_dQRkihZwAAAJI"]
[Tue Feb 03 21:19:55.620981 2026] [:error] [pid 42920:tid 42946] [client 20.239.141.38:11690] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aYH1-yix3YKltG4EU0mJQAAAABE"]
[Tue Feb 03 21:19:58.233606 2026] [:error] [pid 28720:tid 28745] [client 20.239.141.38:3421] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aYH1_mmRXm2bmr_sYibVWgAAARc"]
[Tue Feb 03 21:20:00.304133 2026] [:error] [pid 42920:tid 42944] [client 20.239.141.38:10894] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aYH2ACix3YKltG4EU0mJRwAAAA8"]
[Tue Feb 03 21:20:06.073015 2026] [:error] [pid 5148:tid 5169] [client 20.239.141.38:14848] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aYH2Br83HCHLtUIbS7Ls0gAAAVI"]
[Tue Feb 03 21:20:47.366411 2026] [:error] [pid 28720:tid 28739] [client 20.239.141.38:10908] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aYH2L2mRXm2bmr_sYibVkwAAARE"]
[Tue Feb 03 21:21:09.550940 2026] [:error] [pid 28720:tid 28731] [client 20.239.141.38:41498] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aYH2RWmRXm2bmr_sYibVtgAAAQk"]
[Tue Feb 03 21:21:13.971361 2026] [:error] [pid 5148:tid 5157] [client 20.239.141.38:4085] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aYH2Sb83HCHLtUIbS7LtFwAAAUY"]
[Tue Feb 03 21:21:15.228312 2026] [:error] [pid 42922:tid 43002] [client 20.239.141.38:4068] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aYH2S2azX4WPS_dQRkihywAAAJE"]
[Tue Feb 03 21:21:17.557564 2026] [:error] [pid 43028:tid 43032] [client 20.239.141.38:14876] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aYH2TVnHWnJD4cJC5DuwDQAAAMI"]
[Tue Feb 03 21:21:18.502323 2026] [:error] [pid 42920:tid 42941] [client 20.239.141.38:10555] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aYH2Tiix3YKltG4EU0mJnAAAAAw"]
[Tue Feb 03 21:21:19.004333 2026] [:error] [pid 42920:tid 42935] [client 20.239.141.38:3703] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aYH2Tyix3YKltG4EU0mJngAAAAY"]
[Tue Feb 03 21:21:24.807653 2026] [:error] [pid 28720:tid 28745] [client 20.239.141.38:14886] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aYH2VGmRXm2bmr_sYibVwQAAARc"]
[Tue Feb 03 21:21:27.242326 2026] [:error] [pid 43028:tid 43053] [client 20.239.141.38:10541] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aYH2V1nHWnJD4cJC5DuwIQAAANc"]
[Tue Feb 03 21:21:30.869416 2026] [:error] [pid 43028:tid 43030] [client 20.239.141.38:13739] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYH2WlnHWnJD4cJC5DuwKAAAAMA"]
[Tue Feb 03 21:21:34.041619 2026] [:error] [pid 42921:tid 42975] [client 20.239.141.38:4036] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYH2XoblShffGl-01od-gAAAAFE"]
[Tue Feb 03 21:21:41.676683 2026] [:error] [pid 28720:tid 28734] [client 20.239.141.38:10500] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYH2ZWmRXm2bmr_sYibV0wAAAQw"]
[Tue Feb 03 21:21:44.514788 2026] [:error] [pid 43028:tid 43039] [client 20.239.141.38:22127] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aYH2aFnHWnJD4cJC5DuwPgAAAMk"]
[Tue Feb 03 21:21:55.751606 2026] [:error] [pid 43028:tid 43043] [client 20.239.141.38:41496] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aYH2c1nHWnJD4cJC5DuwWAAAAM0"]
[Tue Feb 03 21:21:58.134812 2026] [:error] [pid 43028:tid 43040] [client 20.239.141.38:13735] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aYH2dlnHWnJD4cJC5DuwXAAAAMo"]
[Tue Feb 03 21:21:59.549763 2026] [:error] [pid 42922:tid 42994] [client 20.239.141.38:18930] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aYH2d2azX4WPS_dQRkih8AAAAIk"]
[Tue Feb 03 21:22:01.919540 2026] [:error] [pid 42920:tid 42949] [client 20.239.141.38:10555] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aYH2eSix3YKltG4EU0mJzQAAABQ"]
[Tue Feb 03 21:22:03.619457 2026] [:error] [pid 28720:tid 28729] [client 20.239.141.38:20977] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aYH2e2mRXm2bmr_sYibV6wAAAQc"]
[Tue Feb 03 21:22:05.514724 2026] [:error] [pid 42922:tid 42989] [client 20.239.141.38:12541] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aYH2fWazX4WPS_dQRkih9wAAAIQ"]
[Tue Feb 03 21:22:08.543227 2026] [:error] [pid 42922:tid 43002] [client 20.239.141.38:20988] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aYH2gGazX4WPS_dQRkih_gAAAJE"]
[Tue Feb 03 21:22:10.750385 2026] [:error] [pid 5148:tid 5151] [client 20.239.141.38:41493] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aYH2gr83HCHLtUIbS7LtaQAAAUA"]
[Tue Feb 03 21:22:12.200635 2026] [:error] [pid 5229:tid 5243] [client 20.239.141.38:3286] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aYH2hEKmEgmJub93yUoDdAAAAYw"]
[Tue Feb 03 21:22:16.773683 2026] [:error] [pid 43028:tid 43042] [client 20.239.141.38:25243] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aYH2iFnHWnJD4cJC5DuwfQAAAMw"]
[Tue Feb 03 21:22:20.228415 2026] [:error] [pid 42921:tid 42959] [client 20.239.141.38:16846] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aYH2jIblShffGl-01od-mgAAAEE"]
[Tue Feb 03 21:22:21.039044 2026] [:error] [pid 42921:tid 42965] [client 20.239.141.38:25274] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aYH2jYblShffGl-01od-nAAAAEc"]
[Tue Feb 03 21:22:23.102683 2026] [:error] [pid 43028:tid 43052] [client 20.239.141.38:15335] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aYH2j1nHWnJD4cJC5DuwhgAAANY"]
[Tue Feb 03 21:22:29.821676 2026] [:error] [pid 28720:tid 28737] [client 20.239.141.38:25254] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aYH2lWmRXm2bmr_sYibWBQAAAQ8"]
[Tue Feb 03 21:22:31.948071 2026] [:error] [pid 5229:tid 5252] [client 20.239.141.38:22713] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aYH2l0KmEgmJub93yUoDfQAAAZU"]
[Tue Feb 03 21:22:33.205869 2026] [:error] [pid 5229:tid 5244] [client 20.239.141.38:22685] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aYH2mUKmEgmJub93yUoDgQAAAY0"]
[Tue Feb 03 21:22:34.714456 2026] [:error] [pid 28720:tid 28738] [client 20.239.141.38:25242] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYH2mmmRXm2bmr_sYibWCgAAARA"]
[Tue Feb 03 21:22:37.312304 2026] [:error] [pid 43028:tid 43036] [client 20.239.141.38:23584] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYH2nVnHWnJD4cJC5DuwqQAAAMY"]
[Tue Feb 03 21:22:39.989175 2026] [:error] [pid 42920:tid 42951] [client 20.239.141.38:15641] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYH2nyix3YKltG4EU0mJ7AAAABY"]
[Tue Feb 03 21:22:40.921599 2026] [:error] [pid 5148:tid 5167] [client 20.239.141.38:3279] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYH2oL83HCHLtUIbS7LtiAAAAVA"]
[Tue Feb 03 21:22:42.464953 2026] [:error] [pid 42921:tid 42977] [client 20.239.141.38:3294] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYH2ooblShffGl-01od-swAAAFM"]
[Tue Feb 03 21:23:04.390745 2026] [:error] [pid 5148:tid 5153] [client 20.239.141.38:19216] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aYH2uL83HCHLtUIbS7LtoAAAAUI"]
[Tue Feb 03 21:23:07.231230 2026] [:error] [pid 28720:tid 28745] [client 20.239.141.38:16436] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aYH2u2mRXm2bmr_sYibWNgAAARc"]
[Tue Feb 03 21:23:11.590200 2026] [:error] [pid 5148:tid 5154] [client 20.239.141.38:3191] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aYH2v783HCHLtUIbS7LtqAAAAUM"]
[Tue Feb 03 21:23:13.199322 2026] [:error] [pid 42921:tid 42979] [client 20.239.141.38:16808] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aYH2wYblShffGl-01od-3gAAAFU"]
[Tue Feb 03 21:23:18.744629 2026] [:error] [pid 42920:tid 42940] [client 20.239.141.38:3481] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aYH2xiix3YKltG4EU0mKJgAAAAs"]
[Tue Feb 03 21:23:20.819338 2026] [:error] [pid 42921:tid 42977] [client 20.239.141.38:3187] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aYH2yIblShffGl-01od-4QAAAFM"]
[Tue Feb 03 21:23:21.882491 2026] [:error] [pid 5229:tid 5254] [client 20.239.141.38:3146] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aYH2yUKmEgmJub93yUoDvAAAAZc"]
[Tue Feb 03 21:23:29.577658 2026] [:error] [pid 28720:tid 28745] [client 20.239.141.38:11006] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYH20WmRXm2bmr_sYibWQQAAARc"]
[Tue Feb 03 21:23:31.447186 2026] [:error] [pid 5229:tid 5246] [client 20.239.141.38:21257] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYH200KmEgmJub93yUoDxwAAAY8"]
[Tue Feb 03 21:23:40.537585 2026] [:error] [pid 5229:tid 5254] [client 20.239.141.38:10960] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYH23EKmEgmJub93yUoD0wAAAZc"]
[Tue Feb 03 21:23:42.709001 2026] [:error] [pid 42922:tid 42996] [client 20.239.141.38:10223] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYH23mazX4WPS_dQRkiiRgAAAIs"]
[Tue Feb 03 21:23:45.528445 2026] [:error] [pid 28720:tid 28731] [client 20.239.141.38:22468] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aYH24WmRXm2bmr_sYibWVgAAAQk"]
[Tue Feb 03 21:23:47.086891 2026] [:error] [pid 42921:tid 42974] [client 20.239.141.38:3807] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aYH244blShffGl-01od-_AAAAFA"]
[Tue Feb 03 21:23:52.694617 2026] [:error] [pid 42920:tid 42953] [client 20.239.141.38:42628] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aYH26Cix3YKltG4EU0mKTAAAABg"]
[Tue Feb 03 21:23:57.132544 2026] [:error] [pid 28720:tid 28737] [client 20.239.141.38:3964] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aYH27WmRXm2bmr_sYibWcAAAAQ8"]
[Tue Feb 03 21:24:02.465626 2026] [:error] [pid 42922:tid 43006] [client 20.239.141.38:14921] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYH28mazX4WPS_dQRkiiUwAAAJU"]
[Tue Feb 03 21:24:11.371417 2026] [autoindex:error] [pid 42920:tid 42952] [client 20.239.141.38:10573] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 21:24:14.347636 2026] [:error] [pid 43028:tid 43048] [client 20.239.141.38:3937] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYH2_lnHWnJD4cJC5DuxNwAAANI"]
[Tue Feb 03 21:24:30.021025 2026] [:error] [pid 42920:tid 42953] [client 20.239.141.38:3758] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aYH3Diix3YKltG4EU0mKfgAAABg"]
[Tue Feb 03 21:24:31.029325 2026] [:error] [pid 5229:tid 5254] [client 20.239.141.38:3770] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aYH3D0KmEgmJub93yUoD9AAAAZc"]
[Tue Feb 03 21:24:31.999519 2026] [:error] [pid 43028:tid 43040] [client 20.239.141.38:14916] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aYH3D1nHWnJD4cJC5DuxWwAAAMo"]
[Tue Feb 03 21:24:32.594908 2026] [:error] [pid 42921:tid 42964] [client 20.239.141.38:16478] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aYH3EIblShffGl-01od_LgAAAEY"]
[Tue Feb 03 21:24:35.311808 2026] [:error] [pid 5148:tid 5157] [client 20.239.141.38:10567] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aYH3E783HCHLtUIbS7Lt4gAAAUY"]
[Tue Feb 03 21:24:37.372010 2026] [:error] [pid 5148:tid 5163] [client 20.239.141.38:24342] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aYH3Fb83HCHLtUIbS7Lt5wAAAUw"]
[Tue Feb 03 21:24:51.768455 2026] [:error] [pid 42921:tid 42967] [client 20.239.141.38:24593] [client 20.239.141.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYH3I4blShffGl-01od_VQAAAEk"]
[Tue Feb 03 21:24:52.595209 2026] [:error] [pid 42922:tid 42999] [client 20.239.141.38:21647] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aYH3JGazX4WPS_dQRkiieQAAAI4"]
[Tue Feb 03 21:24:55.682800 2026] [:error] [pid 42921:tid 42979] [client 20.239.141.38:3775] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aYH3J4blShffGl-01od_WwAAAFU"]
[Tue Feb 03 21:24:57.765506 2026] [:error] [pid 5229:tid 5245] [client 20.239.141.38:9735] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aYH3KUKmEgmJub93yUoEGQAAAY4"]
[Tue Feb 03 21:24:59.053269 2026] [:error] [pid 5148:tid 5151] [client 20.239.141.38:20400] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aYH3K783HCHLtUIbS7LuBQAAAUA"]
[Tue Feb 03 21:25:01.076777 2026] [:error] [pid 28720:tid 28728] [client 20.239.141.38:22773] [client 20.239.141.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYH3LWmRXm2bmr_sYibWrAAAAQY"]
[Tue Feb 03 21:25:05.222489 2026] [:error] [pid 5229:tid 5253] [client 20.239.141.38:16503] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYH3MUKmEgmJub93yUoEJgAAAZY"]
[Tue Feb 03 21:25:05.878013 2026] [:error] [pid 28720:tid 28739] [client 20.239.141.38:24596] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYH3MWmRXm2bmr_sYibWrwAAARE"]
[Tue Feb 03 21:25:09.205227 2026] [:error] [pid 28720:tid 28746] [client 20.239.141.38:16485] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYH3NWmRXm2bmr_sYibWtAAAARg"]
[Tue Feb 03 21:25:14.936964 2026] [autoindex:error] [pid 28720:tid 28743] [client 20.239.141.38:23877] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 21:25:15.202910 2026] [:error] [pid 28720:tid 28737] [client 20.239.141.38:23877] [client 20.239.141.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aYH3O2mRXm2bmr_sYibWxAAAAQ8"]
[Tue Feb 03 21:25:28.131482 2026] [:error] [pid 43028:tid 43046] [client 20.239.141.38:17674] [client 20.239.141.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYH3SFnHWnJD4cJC5DuxugAAANA"]
[Tue Feb 03 21:25:49.801328 2026] [:error] [pid 43028:tid 43039] [client 20.239.141.38:23639] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aYH3XVnHWnJD4cJC5Dux2wAAAMk"]
[Tue Feb 03 21:25:51.519837 2026] [:error] [pid 42920:tid 42932] [client 20.239.141.38:19708] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aYH3Xyix3YKltG4EU0mK9wAAAAM"]
[Tue Feb 03 21:25:55.974039 2026] [:error] [pid 42920:tid 42933] [client 20.239.141.38:24272] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aYH3Yyix3YKltG4EU0mLBgAAAAQ"]
[Tue Feb 03 21:26:03.093468 2026] [:error] [pid 43028:tid 43045] [client 20.239.141.38:12041] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aYH3a1nHWnJD4cJC5DuyAgAAAM8"]
[Tue Feb 03 21:26:03.958657 2026] [:error] [pid 42920:tid 42937] [client 20.239.141.38:12079] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aYH3ayix3YKltG4EU0mLEwAAAAg"]
[Tue Feb 03 21:26:05.649729 2026] [:error] [pid 42920:tid 42947] [client 20.239.141.38:23103] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aYH3bSix3YKltG4EU0mLHAAAABI"]
[Tue Feb 03 21:26:07.315844 2026] [:error] [pid 42920:tid 42944] [client 20.239.141.38:24563] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aYH3byix3YKltG4EU0mLHwAAAA8"]
[Tue Feb 03 21:26:09.534376 2026] [:error] [pid 5148:tid 5157] [client 20.239.141.38:18436] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYH3cb83HCHLtUIbS7LucAAAAUY"]
[Tue Feb 03 21:26:18.303317 2026] [:error] [pid 42922:tid 42997] [client 20.239.141.38:17758] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYH3emazX4WPS_dQRkii1wAAAIw"]
[Tue Feb 03 21:26:29.928250 2026] [:error] [pid 43028:tid 43053] [client 20.239.141.38:23633] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aYH3hVnHWnJD4cJC5DuyRQAAANc"]
[Tue Feb 03 21:26:33.475750 2026] [:error] [pid 43028:tid 43032] [client 20.239.141.38:24122] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aYH3iVnHWnJD4cJC5DuySwAAAMI"]
[Tue Feb 03 21:26:58.507451 2026] [autoindex:error] [pid 42920:tid 42952] [client 20.239.141.38:23645] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 21:26:59.838783 2026] [:error] [pid 42920:tid 42930] [client 20.239.141.38:23645] [client 20.239.141.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYH3oyix3YKltG4EU0mLYAAAAAE"]
[Tue Feb 03 21:27:01.565598 2026] [:error] [pid 42920:tid 42945] [client 20.239.141.38:24552] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aYH3pSix3YKltG4EU0mLYgAAABA"]
[Tue Feb 03 21:27:10.001578 2026] [:error] [pid 43028:tid 43046] [client 20.239.141.38:18481] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aYH3rlnHWnJD4cJC5DuyhgAAANA"]
[Tue Feb 03 21:27:11.755401 2026] [:error] [pid 42922:tid 42988] [client 20.239.141.38:23657] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aYH3r2azX4WPS_dQRkijGwAAAIM"]
[Tue Feb 03 21:27:12.515053 2026] [:error] [pid 5229:tid 5234] [client 20.239.141.38:22695] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aYH3sEKmEgmJub93yUoE3gAAAYM"]
[Tue Feb 03 21:27:13.916061 2026] [:error] [pid 5229:tid 5251] [client 20.239.141.38:12935] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYH3sUKmEgmJub93yUoE5AAAAZQ"]
[Tue Feb 03 21:27:20.998799 2026] [:error] [pid 42920:tid 42931] [client 20.239.141.38:24155] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYH3uCix3YKltG4EU0mLdQAAAAI"]
[Tue Feb 03 21:27:23.433871 2026] [:error] [pid 28720:tid 28729] [client 20.239.141.38:24804] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYH3u2mRXm2bmr_sYibXNwAAAQc"]
[Tue Feb 03 21:27:24.870775 2026] [:error] [pid 42920:tid 42943] [client 20.239.141.38:21341] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYH3vCix3YKltG4EU0mLewAAAA4"]
[Tue Feb 03 21:27:27.406360 2026] [:error] [pid 5148:tid 5159] [client 20.239.141.38:3383] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aYH3v783HCHLtUIbS7Lu0QAAAUg"]
[Tue Feb 03 21:27:27.867784 2026] [:error] [pid 43028:tid 43032] [client 20.239.141.38:22043] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aYH3v1nHWnJD4cJC5DuysAAAAMI"]
[Tue Feb 03 21:27:32.503317 2026] [:error] [pid 42920:tid 42938] [client 20.239.141.38:23820] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aYH3xCix3YKltG4EU0mLgwAAAAk"]
[Tue Feb 03 21:27:34.271066 2026] [:error] [pid 43028:tid 43048] [client 20.239.141.38:25220] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aYH3xlnHWnJD4cJC5DuywAAAANI"]
[Tue Feb 03 21:27:37.774470 2026] [:error] [pid 28720:tid 28728] [client 20.239.141.38:23658] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aYH3yWmRXm2bmr_sYibXQgAAAQY"]
[Tue Feb 03 21:27:39.661673 2026] [:error] [pid 42922:tid 43001] [client 20.239.141.38:13787] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aYH3y2azX4WPS_dQRkijOgAAAJA"]
[Tue Feb 03 21:27:43.558685 2026] [:error] [pid 43028:tid 43033] [client 20.239.141.38:21723] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aYH3z1nHWnJD4cJC5Duy1AAAAMM"]
[Tue Feb 03 21:27:45.171715 2026] [:error] [pid 5229:tid 5238] [client 20.239.141.38:24101] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aYH30UKmEgmJub93yUoFBQAAAYc"]
[Tue Feb 03 21:28:03.423317 2026] [:error] [pid 43028:tid 43035] [client 20.239.141.38:3990] [client 20.239.141.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYH341nHWnJD4cJC5Duy_gAAAMU"]
[Tue Feb 03 21:28:05.770843 2026] [:error] [pid 42922:tid 43009] [client 20.239.141.38:17774] [client 20.239.141.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYH35WazX4WPS_dQRkijTgAAAJg"]
[Tue Feb 03 21:28:06.458732 2026] [:error] [pid 43028:tid 43046] [client 20.239.141.38:17728] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aYH35lnHWnJD4cJC5DuzDAAAANA"]
[Tue Feb 03 21:28:09.350170 2026] [:error] [pid 42922:tid 43008] [client 20.239.141.38:20074] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aYH36WazX4WPS_dQRkijUwAAAJc"]
[Tue Feb 03 21:28:21.008685 2026] [:error] [pid 43028:tid 43033] [client 20.239.141.38:24799] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aYH39VnHWnJD4cJC5DuzKAAAAMM"]
[Tue Feb 03 21:28:22.328129 2026] [:error] [pid 42920:tid 42951] [client 20.239.141.38:36289] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aYH39iix3YKltG4EU0mLoAAAABY"]
[Tue Feb 03 21:28:42.181642 2026] [:error] [pid 43028:tid 43054] [client 20.239.141.38:3185] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aYH4ClnHWnJD4cJC5DuzRAAAANg"]
[Tue Feb 03 21:28:46.153153 2026] [:error] [pid 43028:tid 43047] [client 20.239.141.38:3616] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aYH4DlnHWnJD4cJC5DuzTAAAANE"]
[Tue Feb 03 21:28:53.301925 2026] [:error] [pid 43028:tid 43045] [client 20.239.141.38:24880] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aYH4FVnHWnJD4cJC5DuzVwAAAM8"]
[Tue Feb 03 21:28:59.312482 2026] [:error] [pid 43028:tid 43044] [client 20.239.141.38:3176] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aYH4G1nHWnJD4cJC5DuzYwAAAM4"]
[Tue Feb 03 21:29:03.882814 2026] [:error] [pid 42920:tid 42938] [client 20.239.141.38:3611] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aYH4Hyix3YKltG4EU0mLtQAAAAk"]
[Tue Feb 03 21:29:13.714587 2026] [:error] [pid 5148:tid 5152] [client 20.239.141.38:3682] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aYH4Kb83HCHLtUIbS7LvVQAAAUE"]
[Tue Feb 03 21:29:16.253773 2026] [:error] [pid 43028:tid 43042] [client 20.239.141.38:22480] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aYH4LFnHWnJD4cJC5DuzhgAAAMw"]
[Tue Feb 03 21:29:19.314827 2026] [:error] [pid 5148:tid 5166] [client 20.239.141.38:3659] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aYH4L783HCHLtUIbS7LvXQAAAU8"]
[Tue Feb 03 21:29:30.893716 2026] [:error] [pid 42921:tid 42979] [client 20.239.141.38:42709] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aYH4OoblShffGl-01oeAUQAAAFU"]
[Tue Feb 03 21:29:31.308676 2026] [:error] [pid 42921:tid 42969] [client 20.239.141.38:11339] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aYH4O4blShffGl-01oeAUwAAAEs"]
[Tue Feb 03 21:29:47.899889 2026] [:error] [pid 5148:tid 5174] [client 20.239.141.38:42690] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aYH4S783HCHLtUIbS7LvZAAAAVc"]
[Tue Feb 03 21:29:50.006685 2026] [:error] [pid 5229:tid 5238] [client 20.239.141.38:21272] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aYH4TkKmEgmJub93yUoFegAAAYc"]
[Tue Feb 03 21:29:51.070946 2026] [:error] [pid 5229:tid 5239] [client 20.239.141.38:9466] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aYH4T0KmEgmJub93yUoFfgAAAYg"]
[Tue Feb 03 21:29:52.469111 2026] [:error] [pid 43028:tid 43042] [client 20.239.141.38:42707] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aYH4UFnHWnJD4cJC5DuztAAAAMw"]
[Tue Feb 03 21:29:59.773972 2026] [:error] [pid 5229:tid 5235] [client 20.239.141.38:42706] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aYH4V0KmEgmJub93yUoFgQAAAYQ"]
[Tue Feb 03 21:30:02.806974 2026] [:error] [pid 42920:tid 42931] [client 20.239.141.38:3851] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aYH4Wiix3YKltG4EU0mL_QAAAAI"]
[Tue Feb 03 21:30:09.885339 2026] [:error] [pid 5229:tid 5253] [client 20.239.141.38:3411] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aYH4YUKmEgmJub93yUoFkQAAAZY"]
[Tue Feb 03 21:30:22.863397 2026] [:error] [pid 43028:tid 43048] [client 20.239.141.38:17299] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aYH4blnHWnJD4cJC5Duz5QAAANI"]
[Tue Feb 03 21:30:24.098896 2026] [:error] [pid 5148:tid 5155] [client 20.239.141.38:14915] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aYH4cL83HCHLtUIbS7LviAAAAUQ"]
[Tue Feb 03 21:30:26.822332 2026] [:error] [pid 42920:tid 42948] [client 20.239.141.38:9430] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aYH4ciix3YKltG4EU0mMDwAAABM"]
[Tue Feb 03 21:30:30.986722 2026] [:error] [pid 5148:tid 5153] [client 20.239.141.38:22444] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aYH4dr83HCHLtUIbS7LvkAAAAUI"]
[Tue Feb 03 21:30:31.891039 2026] [:error] [pid 5148:tid 5168] [client 20.239.141.38:9785] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aYH4d783HCHLtUIbS7LvkgAAAVE"]
[Tue Feb 03 21:30:33.423534 2026] [:error] [pid 42922:tid 42991] [client 20.239.141.38:9791] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aYH4eWazX4WPS_dQRkijxwAAAIY"]
[Tue Feb 03 21:31:36.639242 2026] [:error] [pid 42921:tid 42982] [client 20.239.141.38:18857] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aYH4uIblShffGl-01oeA4wAAAFg"]
[Tue Feb 03 21:31:37.525445 2026] [:error] [pid 42920:tid 42949] [client 20.239.141.38:18861] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aYH4uSix3YKltG4EU0mMYQAAABQ"]
[Tue Feb 03 21:31:46.509852 2026] [:error] [pid 28720:tid 28734] [client 20.239.141.38:22132] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aYH4wmmRXm2bmr_sYibYRQAAAQw"]
[Tue Feb 03 21:31:49.036794 2026] [:error] [pid 42920:tid 42943] [client 20.239.141.38:4094] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aYH4xSix3YKltG4EU0mMcQAAAA4"]
[Tue Feb 03 21:31:55.706197 2026] [:error] [pid 43028:tid 43039] [client 20.239.141.38:23374] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aYH4y1nHWnJD4cJC5Du0ZAAAAMk"]
[Tue Feb 03 21:31:58.482011 2026] [:error] [pid 42921:tid 42966] [client 20.239.141.38:23389] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aYH4zoblShffGl-01oeA8AAAAEg"]
[Tue Feb 03 21:31:59.389368 2026] [:error] [pid 42921:tid 42964] [client 20.239.141.38:25223] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aYH4z4blShffGl-01oeBBwAAAEY"]
[Tue Feb 03 21:32:00.088491 2026] [:error] [pid 5229:tid 5254] [client 20.239.141.38:11659] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aYH40EKmEgmJub93yUoGDQAAAZc"]
[Tue Feb 03 21:32:02.604111 2026] [:error] [pid 5229:tid 5231] [client 20.239.141.38:10551] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aYH40kKmEgmJub93yUoGEgAAAYA"]
[Tue Feb 03 21:32:08.435603 2026] [:error] [pid 43028:tid 43045] [client 20.239.141.38:11676] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aYH42FnHWnJD4cJC5Du0iQAAAM8"]
[Tue Feb 03 21:32:21.765033 2026] [:error] [pid 42921:tid 42967] [client 20.239.141.38:11689] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aYH45YblShffGl-01oeBJwAAAEk"]
[Tue Feb 03 21:32:31.519055 2026] [:error] [pid 5229:tid 5239] [client 20.239.141.38:3245] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aYH470KmEgmJub93yUoGMgAAAYg"]
[Tue Feb 03 21:32:33.076407 2026] [:error] [pid 42920:tid 42929] [client 20.239.141.38:13405] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aYH48Six3YKltG4EU0mMnAAAAAA"]
[Tue Feb 03 21:32:34.789436 2026] [:error] [pid 5148:tid 5156] [client 20.239.141.38:23155] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aYH48r83HCHLtUIbS7LwEQAAAUU"]
[Tue Feb 03 21:32:45.903626 2026] [:error] [pid 28720:tid 28732] [client 20.239.141.38:23114] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aYH4_WmRXm2bmr_sYibYggAAAQo"]
[Tue Feb 03 21:33:00.333569 2026] [:error] [pid 42921:tid 42972] [client 20.239.141.38:18106] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aYH5DIblShffGl-01oeBUQAAAE4"]
[Tue Feb 03 21:33:11.888578 2026] [:error] [pid 28720:tid 28740] [client 20.239.141.38:42629] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aYH5F2mRXm2bmr_sYibY4AAAARI"]
[Tue Feb 03 21:33:12.992495 2026] [:error] [pid 42920:tid 42933] [client 20.239.141.38:9366] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aYH5GCix3YKltG4EU0mMtwAAAAQ"]
[Tue Feb 03 21:33:25.243812 2026] [:error] [pid 42922:tid 42995] [client 20.239.141.38:18079] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aYH5JWazX4WPS_dQRkikmQAAAIo"]
[Tue Feb 03 21:33:29.107828 2026] [:error] [pid 42920:tid 42944] [client 20.239.141.38:3816] [client 20.239.141.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aYH5KSix3YKltG4EU0mM7gAAAA8"]
[Tue Feb 03 21:51:44.329122 2026] [:error] [pid 42921:tid 42964] [client 54.37.252.212:45892] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aYH9cIblShffGl-01oeGGwAAAEY"]
[Tue Feb 03 21:51:44.978867 2026] [:error] [pid 5229:tid 5242] [client 54.37.252.212:49656] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aYH9cEKmEgmJub93yUoM8gAAAYs"]
[Tue Feb 03 21:51:47.120100 2026] [:error] [pid 42921:tid 42977] [client 54.37.252.212:56926] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aYH9c4blShffGl-01oeGKQAAAFM"]
[Tue Feb 03 21:51:47.639096 2026] [:error] [pid 5148:tid 5152] [client 54.37.252.212:56938] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYH9c783HCHLtUIbS7L2AQAAAUE"]
[Tue Feb 03 21:51:49.988606 2026] [:error] [pid 28720:tid 28739] [client 54.37.252.212:56946] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aYH9dWmRXm2bmr_sYibeIAAAARE"]
[Tue Feb 03 21:51:50.265231 2026] [:error] [pid 5148:tid 5156] [client 54.37.252.212:56948] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYH9dr83HCHLtUIbS7L2CAAAAUU"]
[Tue Feb 03 21:51:52.598026 2026] [:error] [pid 42920:tid 42940] [client 54.37.252.212:56962] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aYH9eCix3YKltG4EU0mRYgAAAAs"]
[Tue Feb 03 21:51:52.868229 2026] [:error] [pid 42921:tid 42966] [client 54.37.252.212:56972] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYH9eIblShffGl-01oeGNQAAAEg"]
[Tue Feb 03 21:51:55.206776 2026] [:error] [pid 28720:tid 28729] [client 54.37.252.212:56988] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aYH9e2mRXm2bmr_sYibeJQAAAQc"]
[Tue Feb 03 21:51:55.615682 2026] [:error] [pid 42921:tid 42971] [client 54.37.252.212:57004] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYH9e4blShffGl-01oeGPAAAAE0"]
[Tue Feb 03 21:51:58.031596 2026] [:error] [pid 28720:tid 28733] [client 54.37.252.212:37156] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aYH9fmmRXm2bmr_sYibeKAAAAQs"]
[Tue Feb 03 21:51:58.473190 2026] [:error] [pid 42920:tid 42951] [client 54.37.252.212:37166] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYH9fiix3YKltG4EU0mRZgAAABY"]
[Tue Feb 03 21:52:00.979761 2026] [:error] [pid 28720:tid 28742] [client 54.37.252.212:37182] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aYH9gGmRXm2bmr_sYibeMAAAARQ"]
[Tue Feb 03 21:52:01.178495 2026] [:error] [pid 5229:tid 5234] [client 54.37.252.212:37192] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aYH9gUKmEgmJub93yUoNHAAAAYM"]
[Tue Feb 03 21:52:03.599271 2026] [:error] [pid 42922:tid 42995] [client 54.37.252.212:37194] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYH9g2azX4WPS_dQRkipOAAAAIo"]
[Tue Feb 03 21:52:03.961465 2026] [:error] [pid 43028:tid 43054] [client 54.37.252.212:37210] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYH9g1nHWnJD4cJC5Du80QAAANg"]
[Tue Feb 03 21:52:06.282188 2026] [:error] [pid 5148:tid 5166] [client 54.37.252.212:37226] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aYH9hr83HCHLtUIbS7L2GQAAAU8"]
[Tue Feb 03 21:52:06.669593 2026] [:error] [pid 42920:tid 42932] [client 54.37.252.212:37228] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYH9hiix3YKltG4EU0mRfgAAAAM"]
[Tue Feb 03 21:52:08.936037 2026] [:error] [pid 5229:tid 5243] [client 54.37.252.212:33254] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYH9iEKmEgmJub93yUoNLQAAAYw"]
[Tue Feb 03 21:52:09.672691 2026] [:error] [pid 43028:tid 43044] [client 54.37.252.212:33260] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYH9iVnHWnJD4cJC5Du82gAAAM4"]
[Tue Feb 03 21:52:11.552969 2026] [:error] [pid 42920:tid 42933] [client 54.37.252.212:33272] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYH9iyix3YKltG4EU0mRhgAAAAQ"]
[Tue Feb 03 21:52:12.623168 2026] [:error] [pid 42922:tid 43000] [client 54.37.252.212:33276] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYH9jGazX4WPS_dQRkipXgAAAI8"]
[Tue Feb 03 21:52:14.185457 2026] [:error] [pid 5229:tid 5234] [client 54.37.252.212:33286] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYH9jkKmEgmJub93yUoNSAAAAYM"]
[Tue Feb 03 21:52:15.655666 2026] [:error] [pid 43028:tid 43044] [client 54.37.252.212:33300] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYH9j1nHWnJD4cJC5Du88gAAAM4"]
[Tue Feb 03 21:52:16.782873 2026] [:error] [pid 42922:tid 43001] [client 54.37.252.212:33314] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYH9kGazX4WPS_dQRkipZgAAAJA"]
[Tue Feb 03 21:52:18.451004 2026] [:error] [pid 5148:tid 5174] [client 54.37.252.212:36414] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYH9kr83HCHLtUIbS7L2NwAAAVc"]
[Tue Feb 03 21:52:19.337674 2026] [:error] [pid 5148:tid 5167] [client 54.37.252.212:36426] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYH9k783HCHLtUIbS7L2OwAAAVA"]
[Tue Feb 03 21:52:21.043537 2026] [:error] [pid 43028:tid 43052] [client 54.37.252.212:36428] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYH9lVnHWnJD4cJC5Du9AwAAANY"]
[Tue Feb 03 21:52:21.927858 2026] [:error] [pid 5229:tid 5242] [client 54.37.252.212:36438] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aYH9lUKmEgmJub93yUoNWAAAAYs"]
[Tue Feb 03 21:52:23.729646 2026] [:error] [pid 42922:tid 42998] [client 54.37.252.212:36446] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYH9l2azX4WPS_dQRkipbwAAAI0"]
[Tue Feb 03 21:52:24.853928 2026] [:error] [pid 28720:tid 28727] [client 54.37.252.212:36454] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYH9mGmRXm2bmr_sYibeWgAAAQU"]
[Tue Feb 03 21:52:26.410690 2026] [:error] [pid 5148:tid 5153] [client 54.37.252.212:36456] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYH9mr83HCHLtUIbS7L2TAAAAUI"]
[Tue Feb 03 21:52:27.484719 2026] [:error] [pid 42920:tid 42937] [client 54.37.252.212:37682] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYH9myix3YKltG4EU0mRnQAAAAg"]
[Tue Feb 03 21:52:28.974455 2026] [:error] [pid 5148:tid 5161] [client 54.37.252.212:37688] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYH9nL83HCHLtUIbS7L2UgAAAUo"]
[Tue Feb 03 21:52:30.395604 2026] [:error] [pid 42922:tid 43002] [client 54.37.252.212:37692] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYH9nmazX4WPS_dQRkipeQAAAJE"]
[Tue Feb 03 21:52:31.528080 2026] [:error] [pid 42922:tid 42997] [client 54.37.252.212:37706] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYH9n2azX4WPS_dQRkipewAAAIw"]
[Tue Feb 03 21:52:33.171622 2026] [:error] [pid 5229:tid 5234] [client 54.37.252.212:37722] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYH9oUKmEgmJub93yUoNbwAAAYM"]
[Tue Feb 03 21:52:34.211744 2026] [:error] [pid 5148:tid 5174] [client 54.37.252.212:37736] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYH9or83HCHLtUIbS7L2WwAAAVc"]
[Tue Feb 03 21:52:35.821215 2026] [:error] [pid 42921:tid 42965] [client 54.37.252.212:37742] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYH9o4blShffGl-01oeGlwAAAEc"]
[Tue Feb 03 21:52:36.719586 2026] [:error] [pid 5229:tid 5238] [client 54.37.252.212:37758] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYH9pEKmEgmJub93yUoNvAAAAYc"]
[Tue Feb 03 21:52:38.464313 2026] [:error] [pid 42920:tid 42942] [client 54.37.252.212:38142] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYH9piix3YKltG4EU0mRzQAAAA0"]
[Tue Feb 03 21:52:39.533226 2026] [:error] [pid 5229:tid 5232] [client 54.37.252.212:38146] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYH9p0KmEgmJub93yUoN4AAAAYE"]
[Tue Feb 03 21:52:41.796880 2026] [:error] [pid 28720:tid 28727] [client 54.37.252.212:38160] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYH9qWmRXm2bmr_sYibedAAAAQU"]
[Tue Feb 03 23:11:44.881661 2026] [:error] [pid 5148:tid 5155] [client 209.9.200.163:61622] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYIQML83HCHLtUIbS7IOywAAAUQ"]
[Tue Feb 03 23:11:48.445520 2026] [:error] [pid 5148:tid 5169] [client 209.9.200.163:42037] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYIQNL83HCHLtUIbS7IO0gAAAVI"]
[Tue Feb 03 23:11:52.294392 2026] [:error] [pid 42920:tid 42941] [client 209.9.200.163:50675] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYIQOCix3YKltG4EU0mo4QAAAAw"]
[Tue Feb 03 23:11:55.776615 2026] [:error] [pid 42920:tid 42932] [client 209.9.200.163:38922] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYIQOyix3YKltG4EU0mo6gAAAAM"]
[Tue Feb 03 23:12:01.646655 2026] [:error] [pid 28720:tid 28730] [client 209.9.200.163:63028] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYIQQWmRXm2bmr_sYib02AAAAQg"]
[Tue Feb 03 23:12:04.432793 2026] [:error] [pid 43028:tid 43048] [client 209.9.200.163:53600] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYIQRFnHWnJD4cJC5DvgywAAANI"]
[Tue Feb 03 23:12:07.937152 2026] [:error] [pid 5229:tid 5236] [client 209.9.200.163:7524] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYIQR0KmEgmJub93yUosJgAAAYU"]
[Tue Feb 03 23:12:22.874649 2026] [:error] [pid 42921:tid 42974] [client 209.9.200.163:39622] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYIQVoblShffGl-01oec0gAAAFA"]
[Tue Feb 03 23:19:06.926565 2026] [:error] [pid 42921:tid 42964] [client 187.72.64.40:54593] [client 187.72.64.40] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYIR6oblShffGl-01oeezgAAAEY"]
[Tue Feb 03 23:21:00.257887 2026] [:error] [pid 5229:tid 5231] [client 187.72.64.40:54081] [client 187.72.64.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.72.64.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYISXEKmEgmJub93yUovfwAAAYA"]
[Wed Feb 04 02:52:25.318944 2026] [:error] [pid 42922:tid 42986] [client 170.106.82.209:33712] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYJD6WazX4WPS_dQRkj6vwAAAIE"]
[Wed Feb 04 06:58:13.391343 2026] [:error] [pid 47577:tid 47587] [client 145.239.195.38:55010] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aYJ9havA4Yp0Sov-3kQPmgAAAAY"]
[Wed Feb 04 06:58:16.716246 2026] [:error] [pid 47577:tid 47589] [client 145.239.195.38:60584] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYJ9iKvA4Yp0Sov-3kQPnwAAAAg"]
[Wed Feb 04 06:58:19.571662 2026] [:error] [pid 55445:tid 55465] [client 145.239.195.38:42878] [client 145.239.195.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aYJ9i1nd043q8WHuhu3UrAAAAVI"]
[Wed Feb 04 10:46:56.557870 2026] [:error] [pid 47406:tid 47476] [client 43.153.36.110:43636] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYKzIAeu9R9b-_wtQ0KoFgAAAQk"]
[Wed Feb 04 14:24:30.687330 2026] [:error] [pid 55160:tid 55181] [client 51.77.43.170:53936] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYLmHuTAiAYDLSDaxde5uwAAAZM"]
[Wed Feb 04 14:26:14.523472 2026] [:error] [pid 50578:tid 50600] [client 51.77.43.170:52816] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "aYLmhtYUQBXdXxfW1mcd7QAAABQ"]
[Wed Feb 04 14:26:16.970440 2026] [:error] [pid 47406:tid 47487] [client 51.77.43.170:52828] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "aYLmiAeu9R9b-_wtQ0LtoAAAARQ"]
[Wed Feb 04 14:26:17.032944 2026] [:error] [pid 47406:tid 47471] [client 51.77.43.170:36116] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYLmiQeu9R9b-_wtQ0LtoQAAAQQ"]
[Wed Feb 04 14:26:18.450909 2026] [:error] [pid 47404:tid 47429] [client 51.77.43.170:45576] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aYLmiltGjJnGFKjTTubBtgAAAJM"]
[Wed Feb 04 14:26:19.612830 2026] [:error] [pid 8285:tid 8307] [client 51.77.43.170:45592] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aYLmixpweS7ndDaunz-UVwAAAFQ"]
[Wed Feb 04 14:26:20.979620 2026] [:error] [pid 8285:tid 8295] [client 51.77.43.170:45604] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYLmjBpweS7ndDaunz-UWwAAAEg"]
[Wed Feb 04 14:26:21.405657 2026] [:error] [pid 47405:tid 47444] [client 51.77.43.170:45628] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aYLmjaTmhSrwHQTn6I4SVAAAAMQ"]
[Wed Feb 04 14:26:21.826688 2026] [:error] [pid 8285:tid 8298] [client 51.77.43.170:45618] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aYLmjRpweS7ndDaunz-UXAAAAEs"]
[Wed Feb 04 14:26:22.260359 2026] [:error] [pid 50578:tid 50598] [client 51.77.43.170:45636] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aYLmjtYUQBXdXxfW1mceDwAAABI"]
[Wed Feb 04 14:26:25.403368 2026] [:error] [pid 47404:tid 47430] [client 51.77.43.170:45650] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYLmkVtGjJnGFKjTTubBwgAAAJQ"]
[Wed Feb 04 14:26:26.177559 2026] [:error] [pid 47404:tid 47410] [client 51.77.43.170:45670] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aYLmkltGjJnGFKjTTubBwwAAAIA"]
[Wed Feb 04 14:26:26.214010 2026] [:error] [pid 50578:tid 50592] [client 51.77.43.170:45656] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYLmktYUQBXdXxfW1mceFgAAAAw"]
[Wed Feb 04 14:26:28.007000 2026] [:error] [pid 47404:tid 47434] [client 51.77.43.170:33406] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYLmlFtGjJnGFKjTTubBxQAAAJg"]
[Wed Feb 04 14:26:29.529872 2026] [:error] [pid 55160:tid 55186] [client 51.77.43.170:33410] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYLmleTAiAYDLSDaxde6qwAAAZg"]
[Wed Feb 04 14:26:30.784785 2026] [:error] [pid 47404:tid 47422] [client 51.77.43.170:33416] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aYLmlltGjJnGFKjTTubBygAAAIw"]
[Wed Feb 04 14:26:32.696558 2026] [:error] [pid 47404:tid 47424] [client 51.77.43.170:33426] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aYLmmFtGjJnGFKjTTubB0AAAAI4"]
[Wed Feb 04 14:26:33.421372 2026] [:error] [pid 8285:tid 8295] [client 51.77.43.170:33440] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aYLmmRpweS7ndDaunz-UZgAAAEg"]
[Wed Feb 04 14:26:36.257910 2026] [:error] [pid 47404:tid 47425] [client 51.77.43.170:33450] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYLmnFtGjJnGFKjTTubB1gAAAI8"]
[Wed Feb 04 14:26:38.920657 2026] [:error] [pid 47500:tid 47521] [client 51.77.43.170:55986] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYLmnrrUat0rhPdY3A27iwAAAVE"]
[Wed Feb 04 14:26:39.093809 2026] [:error] [pid 47405:tid 47451] [client 51.77.43.170:55998] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aYLmn6TmhSrwHQTn6I4SaQAAAMs"]
[Wed Feb 04 14:26:41.597983 2026] [:error] [pid 47500:tid 47506] [client 51.77.43.170:56006] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYLmobrUat0rhPdY3A27jwAAAUI"]
[Wed Feb 04 14:26:42.432881 2026] [:error] [pid 47500:tid 47522] [client 51.77.43.170:56018] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYLmorrUat0rhPdY3A27kgAAAVI"]
[Wed Feb 04 14:26:44.374579 2026] [:error] [pid 50578:tid 50593] [client 51.77.43.170:56022] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYLmpNYUQBXdXxfW1mceHgAAAA0"]
[Wed Feb 04 14:26:45.886997 2026] [:error] [pid 8285:tid 8303] [client 51.77.43.170:56034] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYLmpRpweS7ndDaunz-UdAAAAFA"]
[Wed Feb 04 14:26:49.062483 2026] [:error] [pid 47404:tid 47424] [client 51.77.43.170:43812] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYLmqVtGjJnGFKjTTubB6wAAAI4"]
[Wed Feb 04 14:26:53.277747 2026] [:error] [pid 47404:tid 47423] [client 51.77.43.170:43828] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYLmrVtGjJnGFKjTTubB9gAAAI0"]
[Wed Feb 04 14:28:03.407532 2026] [:error] [pid 50578:tid 50602] [client 51.77.43.170:54204] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYLm89YUQBXdXxfW1mcekQAAABY"]
[Wed Feb 04 14:28:40.617736 2026] [:error] [pid 50578:tid 50599] [client 51.77.43.170:41294] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aYLnGNYUQBXdXxfW1mceuQAAABM"]
[Wed Feb 04 14:28:47.062837 2026] [:error] [pid 47404:tid 47411] [client 51.77.43.170:41308] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aYLnH1tGjJnGFKjTTubCbQAAAIE"]
[Wed Feb 04 14:32:21.367433 2026] [:error] [pid 50578:tid 50601] [client 51.77.43.170:47080] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYLn9dYUQBXdXxfW1mcf3AAAABU"]
[Wed Feb 04 14:32:22.067582 2026] [:error] [pid 50578:tid 50593] [client 51.77.43.170:60680] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "aYLn9tYUQBXdXxfW1mcf3QAAAA0"]
[Wed Feb 04 14:32:27.096221 2026] [:error] [pid 55160:tid 55163] [client 51.77.43.170:59142] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aYLn--TAiAYDLSDaxde9RAAAAYE"]
[Wed Feb 04 14:32:30.286902 2026] [:error] [pid 47406:tid 47477] [client 51.77.43.170:36226] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aYLn_geu9R9b-_wtQ0Lu_gAAAQo"]
[Wed Feb 04 14:32:34.148799 2026] [:error] [pid 47500:tid 47523] [client 51.77.43.170:36228] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aYLoArrUat0rhPdY3A29FwAAAVM"]
[Wed Feb 04 14:32:38.162885 2026] [:error] [pid 55160:tid 55179] [client 51.77.43.170:58564] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aYLoBuTAiAYDLSDaxde9WQAAAZE"]
[Wed Feb 04 14:32:41.208094 2026] [:error] [pid 55160:tid 55171] [client 51.77.43.170:58574] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aYLoCeTAiAYDLSDaxde9WwAAAYk"]
[Wed Feb 04 14:32:44.918784 2026] [:error] [pid 47500:tid 47521] [client 51.77.43.170:58576] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aYLoDLrUat0rhPdY3A29IgAAAVE"]
[Wed Feb 04 14:32:47.780679 2026] [:error] [pid 47404:tid 47411] [client 51.77.43.170:55444] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aYLoD1tGjJnGFKjTTubD6gAAAIE"]
[Wed Feb 04 14:32:51.218095 2026] [:error] [pid 55160:tid 55162] [client 51.77.43.170:55448] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "aYLoE-TAiAYDLSDaxde9XwAAAYA"]
[Wed Feb 04 14:32:55.339334 2026] [:error] [pid 47404:tid 47424] [client 51.77.43.170:55464] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aYLoF1tGjJnGFKjTTubD8gAAAI4"]
[Wed Feb 04 14:33:00.074041 2026] [:error] [pid 47500:tid 47510] [client 51.77.43.170:45984] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYLoHLrUat0rhPdY3A29IwAAAUY"]
[Wed Feb 04 14:40:36.801630 2026] [:error] [pid 47500:tid 47523] [client 51.77.43.170:33352] [client 51.77.43.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYLp5LrUat0rhPdY3A2-fAAAAVM"]
[Wed Feb 04 15:09:20.444475 2026] [:error] [pid 55160:tid 55165] [client 37.187.226.30:56834] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYLwoOTAiAYDLSDaxdfLwAAAAYM"]
[Wed Feb 04 15:09:22.899041 2026] [:error] [pid 55160:tid 55181] [client 37.187.226.30:36782] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYLwouTAiAYDLSDaxdfLwwAAAZM"]
[Wed Feb 04 15:09:25.365815 2026] [:error] [pid 47404:tid 47431] [client 37.187.226.30:36798] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYLwpVtGjJnGFKjTTubNgQAAAJU"]
[Wed Feb 04 15:09:27.814234 2026] [:error] [pid 47500:tid 47526] [client 37.187.226.30:43038] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYLwp7rUat0rhPdY3A3EVgAAAVY"]
[Wed Feb 04 15:09:30.300630 2026] [:error] [pid 47404:tid 47412] [client 37.187.226.30:43050] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYLwqltGjJnGFKjTTubNiwAAAII"]
[Wed Feb 04 15:09:32.844860 2026] [:error] [pid 8285:tid 8310] [client 37.187.226.30:43056] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aYLwrBpweS7ndDaunz-fyQAAAFc"]
[Wed Feb 04 15:09:35.238632 2026] [:error] [pid 47404:tid 47417] [client 37.187.226.30:43072] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYLwr1tGjJnGFKjTTubNjAAAAIc"]
[Wed Feb 04 15:09:37.651083 2026] [:error] [pid 55160:tid 55184] [client 37.187.226.30:36360] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYLwseTAiAYDLSDaxdfL4QAAAZY"]
[Wed Feb 04 15:09:40.053563 2026] [:error] [pid 47405:tid 47445] [client 37.187.226.30:36368] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYLwtKTmhSrwHQTn6I4aMQAAAMU"]
[Wed Feb 04 15:09:42.431035 2026] [:error] [pid 47406:tid 47482] [client 37.187.226.30:36376] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYLwtgeu9R9b-_wtQ0L2zQAAAQ8"]
[Wed Feb 04 15:09:44.951341 2026] [:error] [pid 47404:tid 47413] [client 37.187.226.30:36378] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYLwuFtGjJnGFKjTTubNlgAAAIM"]
[Wed Feb 04 15:09:47.347419 2026] [:error] [pid 47404:tid 47432] [client 37.187.226.30:49450] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYLwu1tGjJnGFKjTTubNmgAAAJY"]
[Wed Feb 04 15:09:49.879620 2026] [:error] [pid 8285:tid 8297] [client 37.187.226.30:49456] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYLwvRpweS7ndDaunz-f2wAAAEo"]
[Wed Feb 04 15:09:52.419406 2026] [:error] [pid 8285:tid 8301] [client 37.187.226.30:49472] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYLwwBpweS7ndDaunz-f4gAAAE4"]
[Wed Feb 04 15:09:54.808681 2026] [:error] [pid 47405:tid 47440] [client 37.187.226.30:49480] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYLwwqTmhSrwHQTn6I4aPQAAAMA"]
[Wed Feb 04 15:09:57.281409 2026] [:error] [pid 8285:tid 8307] [client 37.187.226.30:49400] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYLwxRpweS7ndDaunz-f7AAAAFQ"]
[Wed Feb 04 15:09:59.804994 2026] [:error] [pid 47404:tid 47426] [client 37.187.226.30:49412] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYLwx1tGjJnGFKjTTubN4QAAAJA"]
[Wed Feb 04 15:10:02.369474 2026] [:error] [pid 55160:tid 55173] [client 37.187.226.30:49420] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYLwyuTAiAYDLSDaxdfMDwAAAYs"]
[Wed Feb 04 15:10:04.887939 2026] [:error] [pid 55160:tid 55168] [client 37.187.226.30:49428] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYLwzOTAiAYDLSDaxdfMEgAAAYY"]
[Wed Feb 04 15:10:07.404775 2026] [:error] [pid 47405:tid 47453] [client 37.187.226.30:55532] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYLwz6TmhSrwHQTn6I4aXQAAAM0"]
[Wed Feb 04 15:10:09.935088 2026] [:error] [pid 55160:tid 55186] [client 37.187.226.30:55546] [client 37.187.226.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYLw0eTAiAYDLSDaxdfMHwAAAZg"]
[Wed Feb 04 15:59:27.967972 2026] [:error] [pid 8285:tid 8304] [client 104.28.214.116:47927] [client 104.28.214.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aYL8XxpweS7ndDaunz-qdgAAAFE"]
[Wed Feb 04 15:59:28.387160 2026] [:error] [pid 47404:tid 47421] [client 104.28.214.116:47928] [client 104.28.214.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/style.php"] [unique_id "aYL8YFtGjJnGFKjTTubadQAAAIs"]
[Wed Feb 04 21:52:54.508330 2026] [:error] [pid 47406:tid 47483] [client 170.106.152.218:52762] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYNPNgeu9R9b-_wtQ0JIdAAAARA"]
[Wed Feb 04 22:11:20.171113 2026] [:error] [pid 47404:tid 47434] [client 49.235.136.28:41330] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYNTiFtGjJnGFKjTTuZGNAAAAJg"]
[Wed Feb 04 22:46:26.924563 2026] [:error] [pid 63686:tid 63752] [client 20.58.166.68:2419] [client 20.58.166.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aYNbwhyaRl9O5jmngTzpZQAAAQk"]
[Wed Feb 04 22:46:27.009176 2026] [:error] [pid 63686:tid 63766] [client 20.58.166.68:11561] [client 20.58.166.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aYNbwxyaRl9O5jmngTzpZwAAARc"]
[Wed Feb 04 22:46:27.089452 2026] [:error] [pid 63685:tid 63734] [client 20.58.166.68:10021] [client 20.58.166.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aYNbw46Dyg716yRb8FB0ZgAAANI"]
[Wed Feb 04 22:46:27.157880 2026] [:error] [pid 63685:tid 63719] [client 20.58.166.68:15253] [client 20.58.166.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aYNbw46Dyg716yRb8FB0ZwAAAMM"]
[Thu Feb 05 01:30:48.858144 2026] [:error] [pid 63777:tid 63803] [client 39.62.218.13:52884] [client 39.62.218.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.62.218.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYOCSPQ-YVerd_zSVS-IqgAAABg"]
[Thu Feb 05 01:35:13.261595 2026] [:error] [pid 63777:tid 63783] [client 106.221.213.136:48688] [client 106.221.213.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.221.213.136, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYODUfQ-YVerd_zSVS-KLAAAAAQ"]
[Thu Feb 05 01:41:21.770820 2026] [:error] [pid 63685:tid 63723] [client 39.62.218.13:60469] [client 39.62.218.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYOEwY6Dyg716yRb8FCogwAAAMc"]
[Thu Feb 05 02:01:50.416163 2026] [:error] [pid 63684:tid 63707] [client 106.221.213.136:35162] [client 106.221.213.136] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYOJjtsfhS3nNwjjsUPWpAAAAJI"]
[Thu Feb 05 02:56:06.480292 2026] [:error] [pid 63686:tid 63749] [client 217.77.10.74:57334] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYOWRhyaRl9O5jmngTw03wAAAQY"]
[Thu Feb 05 05:22:38.617654 2026] [:error] [pid 12187:tid 12206] [client 65.108.2.171:28718] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYO4nonHiwpamEOSyaPn4wAAAAo"]
[Thu Feb 05 05:22:41.193651 2026] [:error] [pid 12287:tid 12300] [client 65.108.2.171:28728] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYO4oTOXzeBKhB81n7rYRgAAAMo"]
[Thu Feb 05 05:22:43.773293 2026] [:error] [pid 12188:tid 12248] [client 65.108.2.171:28738] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYO4ozKWpl9mNO_-qzPjOgAAAFg"]
[Thu Feb 05 05:22:46.201995 2026] [:error] [pid 12189:tid 12268] [client 65.108.2.171:26954] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYO4pr10V_VY_a0vRT52-gAAAJE"]
[Thu Feb 05 05:22:48.789913 2026] [:error] [pid 12187:tid 12205] [client 65.108.2.171:26958] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYO4qInHiwpamEOSyaPn8gAAAAk"]
[Thu Feb 05 05:22:51.380380 2026] [:error] [pid 12187:tid 12210] [client 65.108.2.171:26972] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYO4q4nHiwpamEOSyaPn-AAAAA4"]
[Thu Feb 05 05:22:53.867079 2026] [:error] [pid 12287:tid 12291] [client 65.108.2.171:26980] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aYO4rTOXzeBKhB81n7rYdAAAAME"]
[Thu Feb 05 05:22:56.442172 2026] [:error] [pid 12188:tid 12230] [client 65.108.2.171:50440] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYO4sDKWpl9mNO_-qzPjUAAAAEY"]
[Thu Feb 05 05:22:59.027483 2026] [:error] [pid 12187:tid 12200] [client 65.108.2.171:50456] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYO4s4nHiwpamEOSyaPoAgAAAAQ"]
[Thu Feb 05 05:23:01.599424 2026] [:error] [pid 12187:tid 12215] [client 65.108.2.171:50462] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYO4tYnHiwpamEOSyaPoCQAAABM"]
[Thu Feb 05 05:23:04.191392 2026] [:error] [pid 12287:tid 12292] [client 65.108.2.171:50476] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aYO4uDOXzeBKhB81n7rYgwAAAMI"]
[Thu Feb 05 05:23:06.763617 2026] [:error] [pid 12189:tid 12267] [client 65.108.2.171:53936] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aYO4ur10V_VY_a0vRT53IgAAAJA"]
[Thu Feb 05 05:23:09.340663 2026] [:error] [pid 12287:tid 12312] [client 65.108.2.171:53952] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aYO4vTOXzeBKhB81n7rYjgAAANU"]
[Thu Feb 05 05:23:11.933154 2026] [:error] [pid 12189:tid 12265] [client 65.108.2.171:53962] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYO4v710V_VY_a0vRT53JgAAAI4"]
[Thu Feb 05 05:23:14.498215 2026] [:error] [pid 12189:tid 12272] [client 65.108.2.171:53964] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aYO4wr10V_VY_a0vRT53LgAAAJU"]
[Thu Feb 05 05:23:17.074710 2026] [:error] [pid 12189:tid 12256] [client 65.108.2.171:13560] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYO4xb10V_VY_a0vRT53MwAAAIU"]
[Thu Feb 05 05:23:19.659792 2026] [:error] [pid 12287:tid 12290] [client 65.108.2.171:13566] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYO4xzOXzeBKhB81n7rYmgAAAMA"]
[Thu Feb 05 05:23:22.081279 2026] [:error] [pid 12189:tid 12253] [client 65.108.2.171:13576] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYO4yr10V_VY_a0vRT53NgAAAII"]
[Thu Feb 05 05:23:24.660620 2026] [:error] [pid 12188:tid 12224] [client 65.108.2.171:13592] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aYO4zDKWpl9mNO_-qzPjcwAAAEA"]
[Thu Feb 05 05:23:27.227042 2026] [:error] [pid 12287:tid 12315] [client 65.108.2.171:45718] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aYO4zzOXzeBKhB81n7rYpgAAANg"]
[Thu Feb 05 05:23:29.803245 2026] [:error] [pid 12188:tid 12233] [client 65.108.2.171:45722] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYO40TKWpl9mNO_-qzPjgAAAAEk"]
[Thu Feb 05 05:23:32.374420 2026] [:error] [pid 12189:tid 12273] [client 65.108.2.171:45728] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYO41L10V_VY_a0vRT53QgAAAJY"]
[Thu Feb 05 05:24:17.440615 2026] [:error] [pid 12187:tid 12217] [client 65.108.2.171:55000] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYO5AYnHiwpamEOSyaPoowAAABU"]
[Thu Feb 05 05:24:20.024957 2026] [:error] [pid 12287:tid 12300] [client 65.108.2.171:55012] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYO5BDOXzeBKhB81n7rZIAAAAMo"]
[Thu Feb 05 05:24:22.612826 2026] [:error] [pid 12189:tid 12263] [client 65.108.2.171:55016] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYO5Br10V_VY_a0vRT53iQAAAIw"]
[Thu Feb 05 05:24:25.218128 2026] [:error] [pid 12187:tid 12218] [client 65.108.2.171:30882] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aYO5CYnHiwpamEOSyaPotAAAABY"]
[Thu Feb 05 05:24:27.810877 2026] [:error] [pid 12188:tid 12230] [client 65.108.2.171:30890] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aYO5CzKWpl9mNO_-qzPj0AAAAEY"]
[Thu Feb 05 05:24:30.385403 2026] [:error] [pid 12189:tid 12263] [client 65.108.2.171:30900] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aYO5Dr10V_VY_a0vRT53mAAAAIw"]
[Thu Feb 05 05:24:32.813628 2026] [:error] [pid 12287:tid 12315] [client 65.108.2.171:30914] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYO5EDOXzeBKhB81n7rZPQAAANg"]
[Thu Feb 05 08:05:23.999679 2026] [:error] [pid 50182:tid 50189] [client 54.37.252.137:49944] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYPew5b6zPs3SP7NHoMV1QAAAAM"]
[Thu Feb 05 08:42:19.842838 2026] [:error] [pid 57067:tid 57088] [client 217.182.139.33:53868] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYPna-sowMC7VUmPp2M9cgAAAVM"]
[Thu Feb 05 08:42:22.268943 2026] [:error] [pid 57067:tid 57074] [client 217.182.139.33:41196] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYPnbusowMC7VUmPp2M9dwAAAUU"]
[Thu Feb 05 08:42:24.671632 2026] [:error] [pid 50624:tid 50632] [client 217.182.139.33:44140] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYPncNICUaNaYRCGlHI8YgAAAQU"]
[Thu Feb 05 08:42:27.068558 2026] [:error] [pid 50624:tid 50647] [client 217.182.139.33:44150] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYPnc9ICUaNaYRCGlHI8ZQAAARQ"]
[Thu Feb 05 08:42:29.447214 2026] [:error] [pid 50624:tid 50643] [client 217.182.139.33:44152] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYPnddICUaNaYRCGlHI8aAAAARA"]
[Thu Feb 05 08:42:31.981216 2026] [:error] [pid 50182:tid 50194] [client 217.182.139.33:44164] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aYPnd5b6zPs3SP7NHoMmUQAAAAg"]
[Thu Feb 05 08:42:34.498805 2026] [:error] [pid 50288:tid 50299] [client 217.182.139.33:45836] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYPnetJ_SR3UqxCWcb2MEgAAAMM"]
[Thu Feb 05 08:42:36.882346 2026] [:error] [pid 50184:tid 50245] [client 217.182.139.33:45840] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYPnfFoximo2jVxzvs9XxwAAAIM"]
[Thu Feb 05 08:42:39.430922 2026] [:error] [pid 50624:tid 50630] [client 217.182.139.33:45850] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYPnf9ICUaNaYRCGlHI8fAAAAQM"]
[Thu Feb 05 08:42:41.794897 2026] [:error] [pid 50183:tid 50225] [client 217.182.139.33:45860] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYPngUpo3f-TEEfujDR-ZgAAAEo"]
[Thu Feb 05 08:42:44.318902 2026] [:error] [pid 57067:tid 57089] [client 217.182.139.33:34332] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYPnhOsowMC7VUmPp2M9uwAAAVQ"]
[Thu Feb 05 08:42:46.825948 2026] [:error] [pid 50182:tid 50196] [client 217.182.139.33:34336] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYPnhpb6zPs3SP7NHoMmcwAAAAo"]
[Thu Feb 05 08:42:49.335974 2026] [:error] [pid 57067:tid 57090] [client 217.182.139.33:34352] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYPniesowMC7VUmPp2M9wgAAAVU"]
[Thu Feb 05 08:42:51.849635 2026] [:error] [pid 50288:tid 50303] [client 217.182.139.33:34366] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYPni9J_SR3UqxCWcb2MIAAAAMc"]
[Thu Feb 05 08:42:54.365725 2026] [:error] [pid 50183:tid 50219] [client 217.182.139.33:40870] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYPnjkpo3f-TEEfujDR-fAAAAEQ"]
[Thu Feb 05 08:42:56.861884 2026] [:error] [pid 50184:tid 50249] [client 217.182.139.33:40878] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYPnkFoximo2jVxzvs9X3QAAAIc"]
[Thu Feb 05 08:42:59.380476 2026] [:error] [pid 50624:tid 50633] [client 217.182.139.33:40884] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYPnk9ICUaNaYRCGlHI8kwAAAQY"]
[Thu Feb 05 08:43:01.895927 2026] [:error] [pid 50183:tid 50238] [client 217.182.139.33:40898] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYPnlUpo3f-TEEfujDR-kQAAAFc"]
[Thu Feb 05 08:43:04.254898 2026] [:error] [pid 50182:tid 50199] [client 217.182.139.33:47514] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYPnmJb6zPs3SP7NHoMmkQAAAA0"]
[Thu Feb 05 08:43:06.751615 2026] [:error] [pid 50288:tid 50309] [client 217.182.139.33:47524] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYPnmtJ_SR3UqxCWcb2MLgAAAM0"]
[Thu Feb 05 08:43:09.261937 2026] [:error] [pid 50624:tid 50647] [client 217.182.139.33:47532] [client 217.182.139.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYPnndICUaNaYRCGlHI8pgAAARQ"]
[Thu Feb 05 08:48:26.342412 2026] [:error] [pid 50624:tid 50632] [client 37.27.119.185:53185] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYPo2tICUaNaYRCGlHI-twAAAQU"], referer: https://www.instagram.com
[Thu Feb 05 08:48:27.195272 2026] [:error] [pid 57067:tid 57075] [client 37.27.119.185:54016] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYPo2-sowMC7VUmPp2M__QAAAUY"], referer: https://www.github.com
[Thu Feb 05 08:48:29.074674 2026] [:error] [pid 50624:tid 50641] [client 37.27.119.185:54697] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYPo3dICUaNaYRCGlHI-vAAAAQ4"], referer: https://www.netflix.com
[Thu Feb 05 08:48:29.938350 2026] [:error] [pid 50288:tid 50314] [client 37.27.119.185:55535] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYPo3dJ_SR3UqxCWcb2ODwAAANI"], referer: https://news.google.com
[Thu Feb 05 14:43:58.148363 2026] [:error] [pid 31775:tid 31812] [client 104.28.193.130:24681] [client 104.28.193.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aYQ8LhNlTj92HTKsJN26dQAAAQc"]
[Thu Feb 05 14:43:58.794159 2026] [:error] [pid 31774:tid 31785] [client 104.28.193.130:60548] [client 104.28.193.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/style.php"] [unique_id "aYQ8LqjDlLg1NOhSOXXkeAAAAIc"]
[Thu Feb 05 14:43:59.438933 2026] [:error] [pid 33122:tid 33133] [client 104.28.193.130:16176] [client 104.28.193.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/style.php"] [unique_id "aYQ8L_W0IebAnFB9KDDguAAAAEk"]
[Thu Feb 05 14:59:13.131102 2026] [autoindex:error] [pid 31775:tid 31809] [client 143.198.16.166:52336] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Feb 05 17:16:41.609227 2026] [:error] [pid 14577:tid 14600] [client 43.154.127.188:49764] [client 43.154.127.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYRf-ZZbKwRdMc_HlgJVmgAAAVU"]
[Thu Feb 05 19:49:46.780101 2026] [:error] [pid 31775:tid 31818] [client 20.220.62.160:5006] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYSD2hNlTj92HTKsJN0m4gAAAQ0"]
[Thu Feb 05 19:49:50.274294 2026] [:error] [pid 19246:tid 19268] [client 20.220.62.160:5058] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYSD3nE1Gc0V44f4mCdPPQAAAhE"]
[Thu Feb 05 19:49:51.953890 2026] [:error] [pid 19246:tid 19272] [client 20.220.62.160:5098] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYSD33E1Gc0V44f4mCdPQAAAAhU"]
[Thu Feb 05 19:49:52.804601 2026] [:error] [pid 31774:tid 31791] [client 20.220.62.160:5057] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYSD4KjDlLg1NOhSOXUwzAAAAI0"]
[Thu Feb 05 20:53:09.753121 2026] [:error] [pid 31775:tid 31814] [client 43.130.67.33:33012] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYSStRNlTj92HTKsJN0yXQAAAQk"]
[Thu Feb 05 22:37:44.920360 2026] [:error] [pid 33122:tid 33145] [client 20.220.62.160:31683] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYSrOPW0IebAnFB9KDBT1gAAAFU"]
[Thu Feb 05 22:37:45.330705 2026] [:error] [pid 19246:tid 19258] [client 20.220.62.160:31737] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYSrOXE1Gc0V44f4mCeDpgAAAgc"]
[Thu Feb 05 22:37:45.745279 2026] [:error] [pid 31739:tid 31741] [client 20.220.62.160:31717] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYSrOQGrHl_5BvMstJLxIgAAAAA"]
[Thu Feb 05 22:37:46.157167 2026] [:error] [pid 31775:tid 31821] [client 20.220.62.160:31701] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYSrOhNlTj92HTKsJN1JXQAAARA"]
[Thu Feb 05 22:52:24.958827 2026] [:error] [pid 31775:tid 31826] [client 51.77.216.124:41186] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYSuqBNlTj92HTKsJN1M4gAAARU"]
[Thu Feb 05 22:52:27.508438 2026] [:error] [pid 19246:tid 19271] [client 51.77.216.124:47270] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYSuq3E1Gc0V44f4mCeHPQAAAhQ"]
[Thu Feb 05 22:52:30.487902 2026] [:error] [pid 31775:tid 31816] [client 51.77.216.124:47280] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYSurhNlTj92HTKsJN1M5gAAAQs"]
[Thu Feb 05 22:52:33.041640 2026] [:error] [pid 31739:tid 31749] [client 51.77.216.124:47296] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYSusQGrHl_5BvMstJLzdQAAAAg"]
[Thu Feb 05 22:52:35.509948 2026] [:error] [pid 31774:tid 31780] [client 51.77.216.124:47300] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYSus6jDlLg1NOhSOXVR5wAAAII"]
[Thu Feb 05 22:52:38.283677 2026] [:error] [pid 14577:tid 14593] [client 51.77.216.124:53158] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYSutpZbKwRdMc_HlgKrpgAAAU4"]
[Thu Feb 05 22:52:40.960169 2026] [:error] [pid 33396:tid 33426] [client 51.77.216.124:53168] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aYSuuPTgp_Ev6LiSSgDnogAAANc"]
[Thu Feb 05 22:52:43.876186 2026] [:error] [pid 31775:tid 31814] [client 51.77.216.124:53178] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYSuuxNlTj92HTKsJN1M9gAAAQk"]
[Thu Feb 05 22:52:46.451542 2026] [:error] [pid 19246:tid 19269] [client 51.77.216.124:53180] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYSuvnE1Gc0V44f4mCeHXgAAAhI"]
[Thu Feb 05 22:52:49.144290 2026] [:error] [pid 19246:tid 19264] [client 51.77.216.124:35602] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYSuwXE1Gc0V44f4mCeHYQAAAg0"]
[Thu Feb 05 22:52:51.784099 2026] [:error] [pid 19213:tid 19222] [client 51.77.216.124:35618] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aYSuw17WBXhXgHKWAIB-gwAAAcQ"]
[Thu Feb 05 22:52:54.399314 2026] [:error] [pid 19246:tid 19252] [client 51.77.216.124:35620] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aYSuxnE1Gc0V44f4mCeHaAAAAgE"]
[Thu Feb 05 22:52:57.332243 2026] [:error] [pid 19213:tid 19221] [client 51.77.216.124:55324] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aYSuyV7WBXhXgHKWAIB-hgAAAcM"]
[Thu Feb 05 22:52:59.823400 2026] [:error] [pid 33122:tid 33128] [client 51.77.216.124:55338] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYSuy_W0IebAnFB9KDBXBwAAAEQ"]
[Thu Feb 05 22:53:02.447795 2026] [:error] [pid 33122:tid 33143] [client 51.77.216.124:55348] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aYSuzvW0IebAnFB9KDBXCgAAAFM"]
[Thu Feb 05 22:53:04.976836 2026] [:error] [pid 31775:tid 31827] [client 51.77.216.124:55362] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYSu0BNlTj92HTKsJN1NEwAAARY"]
[Thu Feb 05 22:53:07.490650 2026] [:error] [pid 33122:tid 33139] [client 51.77.216.124:35184] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYSu0_W0IebAnFB9KDBXDgAAAE8"]
[Thu Feb 05 22:53:10.035926 2026] [:error] [pid 31775:tid 31818] [client 51.77.216.124:35196] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYSu1hNlTj92HTKsJN1NFAAAAQ0"]
[Thu Feb 05 22:53:12.485665 2026] [:error] [pid 31775:tid 31820] [client 51.77.216.124:35204] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aYSu2BNlTj92HTKsJN1NFwAAAQ8"]
[Thu Feb 05 22:53:14.977638 2026] [:error] [pid 33396:tid 33420] [client 51.77.216.124:35212] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aYSu2vTgp_Ev6LiSSgDnwAAAANE"]
[Thu Feb 05 22:53:17.541684 2026] [:error] [pid 31833:tid 31859] [client 51.77.216.124:41912] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYSu3RzypZt5yekRAkF2BQAAAZg"]
[Thu Feb 05 22:53:20.059641 2026] [:error] [pid 31833:tid 31845] [client 51.77.216.124:41914] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYSu4BzypZt5yekRAkF2BwAAAYo"]
[Thu Feb 05 22:53:51.530855 2026] [:error] [pid 19246:tid 19273] [client 51.77.216.124:41926] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYSu_3E1Gc0V44f4mCeHigAAAhY"]
[Thu Feb 05 22:53:54.090049 2026] [:error] [pid 33122:tid 33133] [client 51.77.216.124:41244] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYSvAvW0IebAnFB9KDBXhgAAAEk"]
[Thu Feb 05 22:53:56.614016 2026] [:error] [pid 33122:tid 33129] [client 51.77.216.124:41258] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYSvBPW0IebAnFB9KDBXjQAAAEU"]
[Thu Feb 05 22:53:59.019429 2026] [:error] [pid 33122:tid 33125] [client 51.77.216.124:39936] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aYSvB_W0IebAnFB9KDBXkwAAAEE"]
[Thu Feb 05 22:54:01.516716 2026] [:error] [pid 31775:tid 31815] [client 51.77.216.124:39952] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aYSvCRNlTj92HTKsJN1NagAAAQo"]
[Thu Feb 05 22:54:04.006283 2026] [:error] [pid 31739:tid 31751] [client 51.77.216.124:39968] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aYSvDAGrHl_5BvMstJLzsQAAAAo"]
[Thu Feb 05 22:54:06.351775 2026] [:error] [pid 31774:tid 31778] [client 51.77.216.124:39970] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYSvDqjDlLg1NOhSOXVSJAAAAIA"]
[Fri Feb 06 01:35:31.324701 2026] [:error] [pid 11459:tid 11515] [client 51.75.119.173:58812] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYTU45n3t_QGiBnEMgMTHgAAAEU"]
[Fri Feb 06 04:45:04.010131 2026] [:error] [pid 1663:tid 1683] [client 43.130.3.120:34632] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYUBUF9EQrJaKkABjK-MrQAAAAo"]
[Fri Feb 06 05:07:17.420434 2026] [:error] [pid 1664:tid 1721] [client 199.195.253.116:25074] [client 199.195.253.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.195.253.116, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYUGhe_0lM6yA3VnvQVofgAAAFU"]
[Fri Feb 06 05:07:18.907617 2026] [:error] [pid 1664:tid 1712] [client 199.195.253.116:25074] [client 199.195.253.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.195.253.116, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYUGhu_0lM6yA3VnvQVogQAAAEw"]
[Fri Feb 06 08:46:33.903478 2026] [:error] [pid 1664:tid 1708] [client 49.51.72.76:37038] [client 49.51.72.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYU56e_0lM6yA3VnvQXqiQAAAEg"]
[Fri Feb 06 13:47:46.202824 2026] [:error] [pid 3382:tid 3441] [client 182.42.104.32:49422] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYWAgsIgU1HR0rhYrE-zNQAAAIE"]
[Fri Feb 06 14:41:19.997039 2026] [:error] [pid 3477:tid 3497] [client 54.229.157.250:36816] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYWND7L0Hdh40C7HYgXwXgAAANI"]
[Fri Feb 06 14:41:21.134453 2026] [:error] [pid 3513:tid 3533] [client 54.229.157.250:36832] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aYWNETSw3-HAlzpqSxxc4QAAAVI"]
[Fri Feb 06 14:41:22.272018 2026] [:error] [pid 3477:tid 3484] [client 54.229.157.250:36838] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/credentials"] [unique_id "aYWNErL0Hdh40C7HYgXwYAAAAMU"]
[Fri Feb 06 14:41:23.412185 2026] [:error] [pid 3513:tid 3538] [client 54.229.157.250:36852] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config.bak"] [unique_id "aYWNEzSw3-HAlzpqSxxc-gAAAVc"]
[Fri Feb 06 14:41:24.553159 2026] [:error] [pid 3382:tid 3448] [client 54.229.157.250:36864] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config.old"] [unique_id "aYWNFMIgU1HR0rhYrE_LVgAAAIg"]
[Fri Feb 06 14:41:49.385112 2026] [:error] [pid 3381:tid 3414] [client 54.229.157.250:40702] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aYWNLS81zqRg96ZREgjvgwAAAEE"]
[Fri Feb 06 14:41:50.526004 2026] [:error] [pid 3380:tid 3394] [client 54.229.157.250:40710] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "aYWNLhFAlUvBGSBK2jfgtQAAAAo"]
[Fri Feb 06 14:41:51.665708 2026] [:error] [pid 3477:tid 3497] [client 54.229.157.250:40714] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging"] [unique_id "aYWNL7L0Hdh40C7HYgXwmAAAANI"]
[Fri Feb 06 14:41:52.806836 2026] [:error] [pid 3382:tid 3458] [client 54.229.157.250:40724] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aYWNMMIgU1HR0rhYrE_LlQAAAJI"]
[Fri Feb 06 14:41:53.945138 2026] [:error] [pid 3477:tid 3495] [client 54.229.157.250:40728] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test"] [unique_id "aYWNMbL0Hdh40C7HYgXwngAAANA"]
[Fri Feb 06 14:41:55.084162 2026] [:error] [pid 3381:tid 3436] [client 54.229.157.250:41874] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "aYWNMy81zqRg96ZREgjvkAAAAFc"]
[Fri Feb 06 14:41:56.224496 2026] [:error] [pid 3381:tid 3435] [client 54.229.157.250:41876] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old"] [unique_id "aYWNNC81zqRg96ZREgjvkgAAAFY"]
[Fri Feb 06 14:41:57.362317 2026] [:error] [pid 3381:tid 3417] [client 54.229.157.250:41886] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "aYWNNS81zqRg96ZREgjvlAAAAEQ"]
[Fri Feb 06 14:41:58.501519 2026] [:error] [pid 3380:tid 3397] [client 54.229.157.250:41900] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dist"] [unique_id "aYWNNhFAlUvBGSBK2jfgxQAAAA0"]
[Fri Feb 06 14:41:59.643209 2026] [:error] [pid 3380:tid 3403] [client 54.229.157.250:41902] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aYWNNxFAlUvBGSBK2jfgzQAAABM"]
[Fri Feb 06 14:42:00.785938 2026] [:error] [pid 3477:tid 3497] [client 54.229.157.250:41910] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.php"] [unique_id "aYWNOLL0Hdh40C7HYgXwrQAAANI"]
[Fri Feb 06 14:42:01.926340 2026] [:error] [pid 3380:tid 3392] [client 54.229.157.250:41924] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "aYWNORFAlUvBGSBK2jfg0wAAAAg"]
[Fri Feb 06 14:42:03.066680 2026] [:error] [pid 3513:tid 3515] [client 54.229.157.250:41928] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample"] [unique_id "aYWNOzSw3-HAlzpqSxxdXwAAAUA"]
[Fri Feb 06 14:42:04.208162 2026] [:error] [pid 3477:tid 3490] [client 54.229.157.250:41940] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev"] [unique_id "aYWNPLL0Hdh40C7HYgXwtgAAAMs"]
[Fri Feb 06 14:42:05.347291 2026] [:error] [pid 3382:tid 3461] [client 54.229.157.250:34592] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.prod"] [unique_id "aYWNPcIgU1HR0rhYrE_LrAAAAJU"]
[Fri Feb 06 14:42:06.488066 2026] [:error] [pid 3513:tid 3521] [client 54.229.157.250:34604] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.stage"] [unique_id "aYWNPjSw3-HAlzpqSxxdaQAAAUY"]
[Fri Feb 06 14:42:07.628606 2026] [:error] [pid 3382:tid 3457] [client 54.229.157.250:34614] [client 54.229.157.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.live"] [unique_id "aYWNP8IgU1HR0rhYrE_LsAAAAJE"]
[Fri Feb 06 14:42:11.190081 2026] [:error] [pid 3513:tid 3517] [client 54.229.157.250:34636] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bitbucket_keys.json"] [unique_id "aYWNQzSw3-HAlzpqSxxdcQAAAUI"]
[Fri Feb 06 14:42:12.332277 2026] [:error] [pid 3477:tid 3492] [client 54.229.157.250:34648] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.bitbucket_keys"] [unique_id "aYWNRLL0Hdh40C7HYgXwyQAAAM0"]
[Fri Feb 06 14:42:13.471691 2026] [:error] [pid 3477:tid 3496] [client 54.229.157.250:34652] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aYWNRbL0Hdh40C7HYgXwzwAAANE"]
[Fri Feb 06 14:42:14.614126 2026] [:error] [pid 3513:tid 3531] [client 54.229.157.250:33328] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aYWNRjSw3-HAlzpqSxxddwAAAVA"]
[Fri Feb 06 14:42:15.752370 2026] [:error] [pid 3380:tid 3389] [client 54.229.157.250:33338] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aYWNRxFAlUvBGSBK2jfg8AAAAAU"]
[Fri Feb 06 14:42:16.890844 2026] [:error] [pid 3513:tid 3537] [client 54.229.157.250:33348] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php.php"] [unique_id "aYWNSDSw3-HAlzpqSxxdfQAAAVY"]
[Fri Feb 06 14:42:18.031230 2026] [:error] [pid 3380:tid 3386] [client 54.229.157.250:33364] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php.bak"] [unique_id "aYWNShFAlUvBGSBK2jfg-gAAAAI"]
[Fri Feb 06 14:42:19.173912 2026] [:error] [pid 3382:tid 3443] [client 54.229.157.250:33370] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/phpinfo.php"] [unique_id "aYWNS8IgU1HR0rhYrE_LwgAAAIM"]
[Fri Feb 06 14:42:20.314302 2026] [:error] [pid 3382:tid 3459] [client 54.229.157.250:33380] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/info.php"] [unique_id "aYWNTMIgU1HR0rhYrE_LxAAAAJM"]
[Fri Feb 06 14:42:21.454435 2026] [:error] [pid 3513:tid 3533] [client 54.229.157.250:33382] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/phpinfo.php"] [unique_id "aYWNTTSw3-HAlzpqSxxdjwAAAVI"]
[Fri Feb 06 14:42:22.594042 2026] [:error] [pid 3382:tid 3458] [client 54.229.157.250:33396] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server.php"] [unique_id "aYWNTsIgU1HR0rhYrE_LxgAAAJI"]
[Fri Feb 06 14:42:23.734361 2026] [:error] [pid 3477:tid 3487] [client 54.229.157.250:33404] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/debug.php"] [unique_id "aYWNT7L0Hdh40C7HYgXw_QAAAMg"]
[Fri Feb 06 14:42:24.874684 2026] [:error] [pid 3477:tid 3497] [client 54.229.157.250:49734] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_info.php"] [unique_id "aYWNULL0Hdh40C7HYgXxBgAAANI"]
[Fri Feb 06 14:42:26.014638 2026] [:error] [pid 3380:tid 3404] [client 54.229.157.250:49738] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/testphp.php"] [unique_id "aYWNUhFAlUvBGSBK2jfhJAAAABQ"]
[Fri Feb 06 14:42:27.154662 2026] [:error] [pid 3513:tid 3524] [client 54.229.157.250:49748] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/probe.php"] [unique_id "aYWNUzSw3-HAlzpqSxxdpQAAAUk"]
[Fri Feb 06 14:42:28.293581 2026] [:error] [pid 3382:tid 3460] [client 54.229.157.250:49758] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/check.php"] [unique_id "aYWNVMIgU1HR0rhYrE_LygAAAJQ"]
[Fri Feb 06 14:42:29.434248 2026] [:error] [pid 3380:tid 3384] [client 54.229.157.250:49764] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api/phpinfo.php"] [unique_id "aYWNVRFAlUvBGSBK2jfhMAAAAAA"]
[Fri Feb 06 14:42:30.573992 2026] [:error] [pid 3513:tid 3538] [client 54.229.157.250:49776] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api/info.php"] [unique_id "aYWNVjSw3-HAlzpqSxxdswAAAVc"]
[Fri Feb 06 14:42:31.714046 2026] [:error] [pid 3513:tid 3524] [client 54.229.157.250:49792] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo"] [unique_id "aYWNVzSw3-HAlzpqSxxdtQAAAUk"]
[Fri Feb 06 14:42:32.854627 2026] [:error] [pid 3513:tid 3519] [client 54.229.157.250:49806] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info"] [unique_id "aYWNWDSw3-HAlzpqSxxduQAAAUQ"]
[Fri Feb 06 14:42:33.995092 2026] [:error] [pid 3381:tid 3415] [client 54.229.157.250:49808] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test"] [unique_id "aYWNWS81zqRg96ZREgjwCQAAAEI"]
[Fri Feb 06 14:42:35.137820 2026] [:error] [pid 3477:tid 3479] [client 54.229.157.250:60592] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php"] [unique_id "aYWNW7L0Hdh40C7HYgXxIAAAAMA"]
[Fri Feb 06 14:42:36.281329 2026] [:error] [pid 3381:tid 3417] [client 54.229.157.250:60600] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.bak"] [unique_id "aYWNXC81zqRg96ZREgjwDwAAAEQ"]
[Fri Feb 06 14:42:37.420264 2026] [:error] [pid 3513:tid 3532] [client 54.229.157.250:60604] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/phpinfo"] [unique_id "aYWNXTSw3-HAlzpqSxxdwgAAAVE"]
[Fri Feb 06 14:42:38.560046 2026] [:error] [pid 3382:tid 3455] [client 54.229.157.250:60620] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/info"] [unique_id "aYWNXsIgU1HR0rhYrE_L3AAAAI8"]
[Fri Feb 06 14:42:39.700804 2026] [:error] [pid 3380:tid 3400] [client 54.229.157.250:60628] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/phpinfo"] [unique_id "aYWNXxFAlUvBGSBK2jfhRgAAABA"]
[Fri Feb 06 14:42:40.837900 2026] [:error] [pid 3381:tid 3422] [client 54.229.157.250:60638] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server"] [unique_id "aYWNYC81zqRg96ZREgjwFgAAAEk"]
[Fri Feb 06 14:42:41.977447 2026] [:error] [pid 3381:tid 3429] [client 54.229.157.250:60648] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/debug"] [unique_id "aYWNYS81zqRg96ZREgjwGAAAAFA"]
[Fri Feb 06 14:42:43.117858 2026] [:error] [pid 3513:tid 3536] [client 54.229.157.250:60664] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_info"] [unique_id "aYWNYzSw3-HAlzpqSxxdzgAAAVU"]
[Fri Feb 06 14:42:44.255156 2026] [:error] [pid 3381:tid 3427] [client 54.229.157.250:60678] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/testphp"] [unique_id "aYWNZC81zqRg96ZREgjwHAAAAE4"]
[Fri Feb 06 14:42:45.394393 2026] [:error] [pid 3382:tid 3459] [client 54.229.157.250:54312] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/probe"] [unique_id "aYWNZcIgU1HR0rhYrE_L6wAAAJM"]
[Fri Feb 06 14:42:46.533796 2026] [:error] [pid 3380:tid 3398] [client 54.229.157.250:54326] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/check"] [unique_id "aYWNZhFAlUvBGSBK2jfhXAAAAA4"]
[Fri Feb 06 14:42:47.674582 2026] [:error] [pid 3477:tid 3486] [client 54.229.157.250:54342] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api/phpinfo"] [unique_id "aYWNZ7L0Hdh40C7HYgXxQgAAAMc"]
[Fri Feb 06 14:42:48.814797 2026] [:error] [pid 3381:tid 3428] [client 54.229.157.250:54356] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/api/info"] [unique_id "aYWNaC81zqRg96ZREgjwIgAAAE8"]
[Fri Feb 06 14:42:49.953841 2026] [:error] [pid 3380:tid 3387] [client 54.229.157.250:54370] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php.old"] [unique_id "aYWNaRFAlUvBGSBK2jfhZgAAAAM"]
[Fri Feb 06 14:42:51.093722 2026] [:error] [pid 3380:tid 3401] [client 54.229.157.250:54376] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/_profiler/phpinfo"] [unique_id "aYWNaxFAlUvBGSBK2jfhaAAAABE"]
[Fri Feb 06 14:42:52.232347 2026] [:error] [pid 3382:tid 3458] [client 54.229.157.250:54390] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cpanel/phpinfo.php"] [unique_id "aYWNbMIgU1HR0rhYrE_L_gAAAJI"]
[Fri Feb 06 14:42:53.375848 2026] [:error] [pid 3380:tid 3390] [client 54.229.157.250:54402] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www/phpinfo.php"] [unique_id "aYWNbRFAlUvBGSBK2jfhfQAAAAY"]
[Fri Feb 06 14:42:54.517856 2026] [:error] [pid 3513:tid 3537] [client 54.229.157.250:54416] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web/phpinfo.php"] [unique_id "aYWNbjSw3-HAlzpqSxxd-gAAAVY"]
[Fri Feb 06 14:42:55.658032 2026] [:error] [pid 3380:tid 3408] [client 54.229.157.250:41034] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server/phpinfo.php"] [unique_id "aYWNbxFAlUvBGSBK2jfhlwAAABg"]
[Fri Feb 06 14:42:56.796837 2026] [:error] [pid 3382:tid 3451] [client 54.229.157.250:41046] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info2.php"] [unique_id "aYWNcMIgU1HR0rhYrE_MJwAAAIs"]
[Fri Feb 06 14:42:57.935251 2026] [:error] [pid 3513:tid 3530] [client 54.229.157.250:41058] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info1.php"] [unique_id "aYWNcTSw3-HAlzpqSxxeAgAAAU8"]
[Fri Feb 06 14:42:59.075769 2026] [:error] [pid 3477:tid 3481] [client 54.229.157.250:41074] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info3.php"] [unique_id "aYWNc7L0Hdh40C7HYgXxegAAAMI"]
[Fri Feb 06 14:43:00.215977 2026] [:error] [pid 3380:tid 3386] [client 54.229.157.250:41086] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php-info.php"] [unique_id "aYWNdBFAlUvBGSBK2jfhvQAAAAI"]
[Fri Feb 06 14:43:01.356438 2026] [:error] [pid 3382:tid 3444] [client 54.229.157.250:41098] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phptest.php"] [unique_id "aYWNdcIgU1HR0rhYrE_MLAAAAIQ"]
[Fri Feb 06 14:43:02.499969 2026] [:error] [pid 3381:tid 3431] [client 54.229.157.250:41112] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpversion.php"] [unique_id "aYWNdi81zqRg96ZREgjwSwAAAFI"]
[Fri Feb 06 14:43:03.638653 2026] [:error] [pid 3380:tid 3392] [client 54.229.157.250:41126] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_version.php"] [unique_id "aYWNdxFAlUvBGSBK2jfhygAAAAg"]
[Fri Feb 06 14:43:04.775836 2026] [:error] [pid 3381:tid 3426] [client 54.229.157.250:49790] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/serverinfo.php"] [unique_id "aYWNeC81zqRg96ZREgjwUAAAAE0"]
[Fri Feb 06 14:43:05.916615 2026] [:error] [pid 3477:tid 3497] [client 54.229.157.250:49800] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/_debug"] [unique_id "aYWNebL0Hdh40C7HYgXxmgAAANI"]
[Fri Feb 06 14:43:07.057667 2026] [:error] [pid 3380:tid 3403] [client 54.229.157.250:49808] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pi.php"] [unique_id "aYWNexFAlUvBGSBK2jfh5wAAABM"]
[Fri Feb 06 14:43:34.246546 2026] [:error] [pid 3382:tid 3464] [client 54.229.157.250:37842] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php~"] [unique_id "aYWNlsIgU1HR0rhYrE_MYgAAAJg"]
[Fri Feb 06 14:43:35.386326 2026] [:error] [pid 3382:tid 3442] [client 54.229.157.250:43446] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php.save"] [unique_id "aYWNl8IgU1HR0rhYrE_MZQAAAII"]
[Fri Feb 06 14:43:36.526805 2026] [:error] [pid 3513:tid 3538] [client 54.229.157.250:43450] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/info.php"] [unique_id "aYWNmDSw3-HAlzpqSxxeRgAAAVc"]
[Fri Feb 06 14:43:37.666790 2026] [:error] [pid 3513:tid 3537] [client 54.229.157.250:43462] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/phpinfo.php"] [unique_id "aYWNmTSw3-HAlzpqSxxeSQAAAVY"]
[Fri Feb 06 14:43:38.804849 2026] [:error] [pid 3477:tid 3489] [client 54.229.157.250:43464] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/phpinfo.php"] [unique_id "aYWNmrL0Hdh40C7HYgXyIAAAAMo"]
[Fri Feb 06 14:43:39.945759 2026] [:error] [pid 3382:tid 3449] [client 54.229.157.250:43466] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v1/phpinfo.php"] [unique_id "aYWNm8IgU1HR0rhYrE_MawAAAIk"]
[Fri Feb 06 14:43:41.084878 2026] [:error] [pid 3380:tid 3397] [client 54.229.157.250:43478] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2/phpinfo.php"] [unique_id "aYWNnRFAlUvBGSBK2jfihAAAAA0"]
[Fri Feb 06 14:43:42.227372 2026] [:error] [pid 3380:tid 3396] [client 54.229.157.250:43486] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.gitlab-ci.yml"] [unique_id "aYWNnhFAlUvBGSBK2jfihwAAAAw"]
[Fri Feb 06 14:43:43.371185 2026] [:error] [pid 3513:tid 3537] [client 54.229.157.250:43498] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.gitlab/config"] [unique_id "aYWNnzSw3-HAlzpqSxxeUgAAAVY"]
[Fri Feb 06 14:43:44.516434 2026] [:error] [pid 3380:tid 3388] [client 54.229.157.250:43500] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gitlab/config"] [unique_id "aYWNoBFAlUvBGSBK2jfijgAAAAQ"]
[Fri Feb 06 14:43:45.658252 2026] [:error] [pid 3477:tid 3495] [client 54.229.157.250:33464] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config/gitlab.json"] [unique_id "aYWNobL0Hdh40C7HYgXyKgAAANA"]
[Fri Feb 06 14:43:46.803400 2026] [:error] [pid 3513:tid 3515] [client 54.229.157.250:33476] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.config/git/config"] [unique_id "aYWNojSw3-HAlzpqSxxeVgAAAUA"]
[Fri Feb 06 14:43:47.943261 2026] [:error] [pid 3381:tid 3414] [client 54.229.157.250:33482] [client 54.229.157.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.config/git/credentials"] [unique_id "aYWNoy81zqRg96ZREgjwhAAAAEE"]
[Fri Feb 06 17:02:42.839603 2026] [:error] [pid 3380:tid 3385] [client 43.155.195.141:35200] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYWuMhFAlUvBGSBK2jc6vgAAAAE"]
[Fri Feb 06 19:06:16.766288 2026] [:error] [pid 3477:tid 3500] [client 193.70.44.235:58624] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYXLKLL0Hdh40C7HYgVW4gAAANU"]
[Fri Feb 06 19:56:50.317881 2026] [:error] [pid 3381:tid 3437] [client 65.108.125.120:52938] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aYXXAi81zqRg96ZREghdEgAAAFg"]
[Fri Feb 06 19:56:53.080524 2026] [:error] [pid 46432:tid 46436] [client 65.108.125.120:52942] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aYXXBQbwJwu_od0kZjMcAgAAAkI"]
[Fri Feb 06 19:56:55.633370 2026] [:error] [pid 37019:tid 37043] [client 65.108.125.120:52960] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aYXXBwkAjqd3bcgYBrtaVgAAAhY"]
[Fri Feb 06 19:56:58.141223 2026] [:error] [pid 37019:tid 37038] [client 65.108.125.120:52962] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aYXXCgkAjqd3bcgYBrtaWQAAAhE"]
[Fri Feb 06 19:57:00.855629 2026] [:error] [pid 37019:tid 37031] [client 65.108.125.120:63802] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aYXXDAkAjqd3bcgYBrtaXQAAAgo"]
[Fri Feb 06 19:57:03.433807 2026] [:error] [pid 15821:tid 15825] [client 65.108.125.120:63816] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aYXXD3ARQa67J4c772kAMQAAAQA"]
[Fri Feb 06 19:57:06.087828 2026] [:error] [pid 3477:tid 3496] [client 65.108.125.120:63830] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aYXXErL0Hdh40C7HYgVhjgAAANE"]
[Fri Feb 06 19:57:08.649696 2026] [:error] [pid 3381:tid 3415] [client 65.108.125.120:54280] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYXXFC81zqRg96ZREghdHgAAAEI"]
[Fri Feb 06 19:57:19.811117 2026] [:error] [pid 3513:tid 3533] [client 65.108.125.120:10740] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYXXHzSw3-HAlzpqSxzJMwAAAVI"]
[Fri Feb 06 19:57:22.354443 2026] [:error] [pid 3381:tid 3437] [client 65.108.125.120:10744] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYXXIi81zqRg96ZREghdLAAAAFg"]
[Fri Feb 06 19:57:24.964703 2026] [:error] [pid 46432:tid 46447] [client 65.108.125.120:10752] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYXXJAbwJwu_od0kZjMcOAAAAk0"]
[Fri Feb 06 19:57:27.675161 2026] [:error] [pid 3477:tid 3482] [client 65.108.125.120:10756] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYXXJ7L0Hdh40C7HYgVhswAAAMM"]
[Fri Feb 06 19:57:30.267435 2026] [:error] [pid 15821:tid 15839] [client 65.108.125.120:38684] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aYXXKnARQa67J4c772kAWAAAAQ4"]
[Fri Feb 06 19:57:32.779675 2026] [:error] [pid 3477:tid 3481] [client 65.108.125.120:38698] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYXXLLL0Hdh40C7HYgVhuAAAAMI"]
[Fri Feb 06 19:57:35.678874 2026] [:error] [pid 36928:tid 36950] [client 65.108.125.120:38724] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYXXL5s7fyU8D36r-OpmdgAAAdI"]
[Fri Feb 06 19:57:38.320046 2026] [:error] [pid 3477:tid 3479] [client 65.108.125.120:17828] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYXXMrL0Hdh40C7HYgVhvQAAAMA"]
[Fri Feb 06 19:57:41.020614 2026] [:error] [pid 3381:tid 3419] [client 65.108.125.120:17834] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYXXNS81zqRg96ZREghdRgAAAEY"]
[Fri Feb 06 19:57:43.648384 2026] [:error] [pid 36928:tid 36946] [client 65.108.125.120:17854] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYXXN5s7fyU8D36r-OpmegAAAc4"]
[Fri Feb 06 19:58:10.098719 2026] [:error] [pid 3381:tid 3435] [client 65.108.125.120:14146] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYXXUi81zqRg96ZREghdVgAAAFY"]
[Fri Feb 06 19:58:12.861829 2026] [:error] [pid 3380:tid 3398] [client 65.108.125.120:14166] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYXXVBFAlUvBGSBK2jddAwAAAA4"]
[Fri Feb 06 19:58:15.473761 2026] [:error] [pid 15821:tid 15841] [client 65.108.125.120:14180] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYXXV3ARQa67J4c772kAiAAAARA"]
[Fri Feb 06 19:58:18.107375 2026] [:error] [pid 15821:tid 15844] [client 65.108.125.120:14202] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYXXWnARQa67J4c772kAkAAAARM"]
[Fri Feb 06 20:12:00.101253 2026] [:error] [pid 3513:tid 3522] [client 65.108.2.171:1654] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYXakDSw3-HAlzpqSxzK7QAAAUc"]
[Fri Feb 06 20:12:02.671838 2026] [:error] [pid 3380:tid 3394] [client 65.108.2.171:1658] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYXakhFAlUvBGSBK2jdeuQAAAAo"]
[Fri Feb 06 20:12:05.238882 2026] [:error] [pid 46432:tid 46447] [client 65.108.2.171:3204] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYXalQbwJwu_od0kZjMedgAAAk0"]
[Fri Feb 06 20:12:07.821383 2026] [:error] [pid 3513:tid 3534] [client 65.108.2.171:3220] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYXalzSw3-HAlzpqSxzK8gAAAVM"]
[Fri Feb 06 20:12:10.401858 2026] [:error] [pid 3382:tid 3450] [client 65.108.2.171:3236] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYXamsIgU1HR0rhYrE9CbQAAAIo"]
[Fri Feb 06 20:12:12.977682 2026] [:error] [pid 3381:tid 3417] [client 65.108.2.171:3248] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYXanC81zqRg96ZREghf1gAAAEQ"]
[Fri Feb 06 20:12:15.550213 2026] [:error] [pid 15821:tid 15846] [client 65.108.2.171:22018] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aYXan3ARQa67J4c772kCgwAAARU"]
[Fri Feb 06 20:12:18.125098 2026] [:error] [pid 36928:tid 36941] [client 65.108.2.171:22026] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYXaops7fyU8D36r-OpoWwAAAck"]
[Fri Feb 06 20:12:20.704788 2026] [:error] [pid 3382:tid 3443] [client 65.108.2.171:22030] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYXapMIgU1HR0rhYrE9CgQAAAIM"]
[Fri Feb 06 20:12:23.273081 2026] [:error] [pid 36928:tid 36936] [client 65.108.2.171:22032] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYXap5s7fyU8D36r-OpoYgAAAcQ"]
[Fri Feb 06 20:12:25.854684 2026] [:error] [pid 46432:tid 46443] [client 65.108.2.171:19248] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aYXaqQbwJwu_od0kZjMejgAAAkk"]
[Fri Feb 06 20:12:28.437772 2026] [:error] [pid 37019:tid 37037] [client 65.108.2.171:19264] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aYXarAkAjqd3bcgYBrtcgwAAAhA"]
[Fri Feb 06 20:12:31.010016 2026] [:error] [pid 15821:tid 15840] [client 65.108.2.171:19276] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aYXar3ARQa67J4c772kCngAAAQ8"]
[Fri Feb 06 20:12:33.586282 2026] [:error] [pid 3477:tid 3493] [client 65.108.2.171:19284] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYXasbL0Hdh40C7HYgVlSAAAAM4"]
[Fri Feb 06 20:12:36.163823 2026] [:error] [pid 36928:tid 36945] [client 65.108.2.171:56624] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aYXatJs7fyU8D36r-OpoZwAAAc0"]
[Fri Feb 06 20:12:38.737939 2026] [:error] [pid 3381:tid 3428] [client 65.108.2.171:56628] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYXati81zqRg96ZREghgAgAAAE8"]
[Fri Feb 06 20:12:41.320520 2026] [:error] [pid 3380:tid 3387] [client 65.108.2.171:56642] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYXauRFAlUvBGSBK2jdeyAAAAAM"]
[Fri Feb 06 20:12:43.886763 2026] [:error] [pid 36857:tid 36859] [client 65.108.2.171:56650] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYXau5VQwfj7Kp4Dd0HojQAAAYA"]
[Fri Feb 06 20:12:46.463299 2026] [:error] [pid 3477:tid 3481] [client 65.108.2.171:10328] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aYXavrL0Hdh40C7HYgVlYgAAAMI"]
[Fri Feb 06 20:12:48.875432 2026] [:error] [pid 36857:tid 36864] [client 65.108.2.171:10344] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aYXawJVQwfj7Kp4Dd0HokAAAAYU"]
[Fri Feb 06 20:12:51.462329 2026] [:error] [pid 36857:tid 36875] [client 65.108.2.171:10360] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYXaw5VQwfj7Kp4Dd0HokwAAAZA"]
[Fri Feb 06 20:12:54.038750 2026] [:error] [pid 15821:tid 15846] [client 65.108.2.171:10372] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYXaxnARQa67J4c772kCtgAAARU"]
[Fri Feb 06 20:13:39.023438 2026] [:error] [pid 36857:tid 36866] [client 65.108.2.171:17598] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYXa85VQwfj7Kp4Dd0Ho1QAAAYc"]
[Fri Feb 06 20:13:41.599138 2026] [:error] [pid 3513:tid 3528] [client 65.108.2.171:17604] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYXa9TSw3-HAlzpqSxzLIgAAAU0"]
[Fri Feb 06 20:13:44.170865 2026] [:error] [pid 15821:tid 15833] [client 65.108.2.171:17618] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYXa-HARQa67J4c772kC0gAAAQg"]
[Fri Feb 06 20:13:46.735880 2026] [:error] [pid 37019:tid 37038] [client 65.108.2.171:9560] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aYXa-gkAjqd3bcgYBrtctQAAAhE"]
[Fri Feb 06 20:13:49.313332 2026] [:error] [pid 3513:tid 3529] [client 65.108.2.171:9566] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aYXa_TSw3-HAlzpqSxzLJwAAAU4"]
[Fri Feb 06 20:13:51.892341 2026] [:error] [pid 3382:tid 3454] [client 65.108.2.171:9578] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aYXa_8IgU1HR0rhYrE9C2QAAAI4"]
[Fri Feb 06 20:13:54.457365 2026] [:error] [pid 36857:tid 36861] [client 65.108.2.171:9592] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYXbApVQwfj7Kp4Dd0Ho4AAAAYI"]
[Fri Feb 06 21:50:24.393716 2026] [:error] [pid 3477:tid 3485] [client 159.223.18.2:56380] [client 159.223.18.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.18.2, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYXxoLL0Hdh40C7HYgV8jQAAAMY"]
[Fri Feb 06 21:50:26.428040 2026] [:error] [pid 3380:tid 3391] [client 159.223.18.2:57205] [client 159.223.18.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.18.2, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYXxohFAlUvBGSBK2jdsyQAAAAc"]
[Fri Feb 06 21:54:40.705940 2026] [:error] [pid 36857:tid 36872] [client 146.70.250.132:56980] [client 146.70.250.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYXyoJVQwfj7Kp4Dd0H4XQAAAY0"]
[Fri Feb 06 21:54:40.711859 2026] [:error] [pid 36857:tid 36871] [client 146.70.250.132:56984] [client 146.70.250.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYXyoJVQwfj7Kp4Dd0H4XgAAAYw"]
[Fri Feb 06 22:31:16.501513 2026] [:error] [pid 3513:tid 3528] [client 206.189.131.83:52092] [client 206.189.131.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.131.83, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYX7NDSw3-HAlzpqSxzdmAAAAU0"]
[Fri Feb 06 22:31:18.244758 2026] [:error] [pid 3513:tid 3539] [client 206.189.131.83:52200] [client 206.189.131.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.131.83, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYX7NjSw3-HAlzpqSxzdoQAAAVg"]
[Fri Feb 06 22:50:40.340841 2026] [:error] [pid 36928:tid 36950] [client 159.223.18.2:51360] [client 159.223.18.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.18.2, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYX_wJs7fyU8D36r-OqEsQAAAdI"]
[Fri Feb 06 22:57:59.558086 2026] [:error] [pid 3382:tid 3453] [client 159.223.18.2:63946] [client 159.223.18.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.18.2, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYYBd8IgU1HR0rhYrE9tBwAAAI0"]
[Fri Feb 06 23:06:38.963535 2026] [:error] [pid 46432:tid 46439] [client 159.223.18.2:60130] [client 159.223.18.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.18.2, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYYDfgbwJwu_od0kZjM7_wAAAkU"]
[Fri Feb 06 23:19:20.228901 2026] [:error] [pid 3380:tid 3403] [client 159.223.18.2:50094] [client 159.223.18.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.18.2, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYYGeBFAlUvBGSBK2jd19QAAABM"]
[Fri Feb 06 23:33:07.454525 2026] [:error] [pid 3381:tid 3427] [client 159.223.18.2:54601] [client 159.223.18.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.18.2, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYYJsy81zqRg96ZREgiIrgAAAE4"]
[Sat Feb 07 00:06:17.895869 2026] [:error] [pid 36928:tid 36933] [client 43.153.135.208:49556] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYYReZs7fyU8D36r-OqVggAAAcE"]
[Sat Feb 07 03:11:48.930183 2026] [:error] [pid 55616:tid 55624] [client 182.44.12.37:40785] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYY89OzxeKHfFD-B2b39UgAAAEU"]
[Sat Feb 07 04:00:14.310489 2026] [:error] [pid 50672:tid 50714] [client 20.151.206.105:53605] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aYZITg9o0jq1XS8Nv7NdxAAAAEY"]
[Sat Feb 07 04:00:14.732636 2026] [:error] [pid 55157:tid 55176] [client 20.151.206.105:55851] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aYZITn36JdtTn2bTEoygxAAAAQ4"]
[Sat Feb 07 04:00:15.145277 2026] [:error] [pid 55157:tid 55183] [client 20.151.206.105:55423] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aYZIT336JdtTn2bTEoygxQAAARU"]
[Sat Feb 07 04:00:15.557868 2026] [:error] [pid 50671:tid 50680] [client 20.151.206.105:53584] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aYZIT7vqLohWBI_mqBPAKwAAAAA"]
[Sat Feb 07 04:00:15.987028 2026] [:error] [pid 50671:tid 50687] [client 20.151.206.105:40830] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aYZIT7vqLohWBI_mqBPALAAAAAc"]
[Sat Feb 07 04:00:16.397521 2026] [:error] [pid 50780:tid 50792] [client 20.151.206.105:55833] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aYZIUOtUmIu2JHM2Crt6XAAAAMo"]
[Sat Feb 07 04:00:16.816407 2026] [:error] [pid 50780:tid 50786] [client 20.151.206.105:40559] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aYZIUOtUmIu2JHM2Crt6XQAAAMQ"]
[Sat Feb 07 04:00:17.230871 2026] [:error] [pid 50673:tid 50744] [client 20.151.206.105:40546] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aYZIUWVwLsaZ7aKO2cnY_gAAAIk"]
[Sat Feb 07 04:00:17.640378 2026] [:error] [pid 50671:tid 50691] [client 20.151.206.105:40520] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aYZIUbvqLohWBI_mqBPALwAAAAs"]
[Sat Feb 07 04:00:18.052205 2026] [:error] [pid 50780:tid 50790] [client 20.151.206.105:55823] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aYZIUutUmIu2JHM2Crt6XwAAAMg"]
[Sat Feb 07 04:00:18.464562 2026] [:error] [pid 55157:tid 55183] [client 20.151.206.105:40775] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aYZIUn36JdtTn2bTEoygzAAAARU"]
[Sat Feb 07 04:00:18.875387 2026] [:error] [pid 55157:tid 55165] [client 20.151.206.105:53552] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aYZIUn36JdtTn2bTEoygzgAAAQM"]
[Sat Feb 07 04:00:19.287945 2026] [:error] [pid 50673:tid 50738] [client 20.151.206.105:55408] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/te.php"] [unique_id "aYZIU2VwLsaZ7aKO2cnZAAAAAIM"]
[Sat Feb 07 04:00:19.700648 2026] [:error] [pid 50673:tid 50751] [client 20.151.206.105:53621] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/te.php"] [unique_id "aYZIU2VwLsaZ7aKO2cnZAQAAAJA"]
[Sat Feb 07 04:00:20.116379 2026] [:error] [pid 50671:tid 50683] [client 20.151.206.105:55365] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/te.php"] [unique_id "aYZIVLvqLohWBI_mqBPANAAAAAM"]
[Sat Feb 07 04:00:20.527285 2026] [:error] [pid 50673:tid 50755] [client 20.151.206.105:40830] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/te.php"] [unique_id "aYZIVGVwLsaZ7aKO2cnZAwAAAJQ"]
[Sat Feb 07 04:00:20.938087 2026] [:error] [pid 55157:tid 55186] [client 20.151.206.105:55864] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fot.php"] [unique_id "aYZIVH36JdtTn2bTEoyg1QAAARg"]
[Sat Feb 07 04:00:21.351682 2026] [:error] [pid 50672:tid 50717] [client 20.151.206.105:40526] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fot.php"] [unique_id "aYZIVQ9o0jq1XS8Nv7Nd0AAAAEk"]
[Sat Feb 07 04:00:21.767251 2026] [:error] [pid 50671:tid 50694] [client 20.151.206.105:53599] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fot.php"] [unique_id "aYZIVbvqLohWBI_mqBPAOgAAAA4"]
[Sat Feb 07 04:00:22.185048 2026] [:error] [pid 55157:tid 55173] [client 20.151.206.105:40816] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fot.php"] [unique_id "aYZIVn36JdtTn2bTEoyg2QAAAQs"]
[Sat Feb 07 04:00:22.598439 2026] [:error] [pid 50672:tid 50721] [client 20.151.206.105:53596] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x--krood.php"] [unique_id "aYZIVg9o0jq1XS8Nv7Nd0gAAAE0"]
[Sat Feb 07 04:00:23.009224 2026] [:error] [pid 50673:tid 50749] [client 20.151.206.105:53559] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x--krood.php"] [unique_id "aYZIV2VwLsaZ7aKO2cnZDAAAAI4"]
[Sat Feb 07 04:00:23.419245 2026] [:error] [pid 50780:tid 50802] [client 20.151.206.105:55415] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x--krood.php"] [unique_id "aYZIV-tUmIu2JHM2Crt6ZgAAANQ"]
[Sat Feb 07 04:00:23.852022 2026] [:error] [pid 50780:tid 50791] [client 20.151.206.105:53554] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x--krood.php"] [unique_id "aYZIV-tUmIu2JHM2Crt6ZwAAAMk"]
[Sat Feb 07 04:00:24.288597 2026] [:error] [pid 55157:tid 55174] [client 20.151.206.105:40789] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aYZIWH36JdtTn2bTEoyg2wAAAQw"]
[Sat Feb 07 04:00:24.742062 2026] [:error] [pid 50672:tid 50719] [client 20.151.206.105:55399] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aYZIWA9o0jq1XS8Nv7Nd1AAAAEs"]
[Sat Feb 07 04:00:25.176329 2026] [:error] [pid 50673:tid 50735] [client 20.151.206.105:55402] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aYZIWWVwLsaZ7aKO2cnZEwAAAIA"]
[Sat Feb 07 04:00:25.593071 2026] [:error] [pid 50672:tid 50729] [client 20.151.206.105:55822] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aYZIWQ9o0jq1XS8Nv7Nd1gAAAFU"]
[Sat Feb 07 04:00:26.012835 2026] [:error] [pid 50671:tid 50691] [client 20.151.206.105:53543] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/406.php"] [unique_id "aYZIWrvqLohWBI_mqBPATwAAAAs"]
[Sat Feb 07 04:00:26.475037 2026] [:error] [pid 50673:tid 50745] [client 20.151.206.105:40807] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/406.php"] [unique_id "aYZIWmVwLsaZ7aKO2cnZGAAAAIo"]
[Sat Feb 07 04:00:26.906892 2026] [:error] [pid 50780:tid 50790] [client 20.151.206.105:40568] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/406.php"] [unique_id "aYZIWutUmIu2JHM2Crt6awAAAMg"]
[Sat Feb 07 04:00:27.499298 2026] [:error] [pid 50672:tid 50720] [client 20.151.206.105:55821] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/406.php"] [unique_id "aYZIWw9o0jq1XS8Nv7Nd1wAAAEw"]
[Sat Feb 07 04:00:28.043608 2026] [:error] [pid 50780:tid 50797] [client 20.151.206.105:53551] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aYZIXOtUmIu2JHM2Crt6bAAAAM8"]
[Sat Feb 07 04:00:28.717099 2026] [:error] [pid 55157:tid 55175] [client 20.151.206.105:55832] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aYZIXH36JdtTn2bTEoyg4gAAAQ0"]
[Sat Feb 07 04:00:29.257336 2026] [:error] [pid 50671:tid 50681] [client 20.151.206.105:40540] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aYZIXbvqLohWBI_mqBPAVQAAAAE"]
[Sat Feb 07 04:00:29.712375 2026] [:error] [pid 50671:tid 50691] [client 20.151.206.105:30361] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aYZIXbvqLohWBI_mqBPAVgAAAAs"]
[Sat Feb 07 04:00:30.193709 2026] [:error] [pid 50672:tid 50722] [client 20.151.206.105:55411] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vdb.php"] [unique_id "aYZIXg9o0jq1XS8Nv7Nd3AAAAE4"]
[Sat Feb 07 04:00:30.642878 2026] [:error] [pid 50780:tid 50782] [client 20.151.206.105:33187] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vdb.php"] [unique_id "aYZIXutUmIu2JHM2Crt6dAAAAMA"]
[Sat Feb 07 04:00:31.068069 2026] [:error] [pid 50673:tid 50737] [client 20.151.206.105:53611] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vdb.php"] [unique_id "aYZIX2VwLsaZ7aKO2cnZJQAAAII"]
[Sat Feb 07 04:00:31.509360 2026] [:error] [pid 50780:tid 50795] [client 20.151.206.105:40530] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vdb.php"] [unique_id "aYZIX-tUmIu2JHM2Crt6dQAAAM0"]
[Sat Feb 07 04:00:31.928055 2026] [:error] [pid 55157:tid 55176] [client 20.151.206.105:55811] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aYZIX336JdtTn2bTEoyg5wAAAQ4"]
[Sat Feb 07 04:00:32.499626 2026] [:error] [pid 50673:tid 50753] [client 20.151.206.105:55842] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aYZIYGVwLsaZ7aKO2cnZLAAAAJI"]
[Sat Feb 07 04:00:32.982122 2026] [:error] [pid 55157:tid 55162] [client 20.151.206.105:53589] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aYZIYH36JdtTn2bTEoyg6wAAAQA"]
[Sat Feb 07 04:00:33.412851 2026] [:error] [pid 55157:tid 55166] [client 20.151.206.105:53547] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aYZIYX36JdtTn2bTEoyg7wAAAQQ"]
[Sat Feb 07 04:00:33.846158 2026] [:error] [pid 50780:tid 50803] [client 20.151.206.105:55387] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev1s.php"] [unique_id "aYZIYetUmIu2JHM2Crt6dgAAANU"]
[Sat Feb 07 04:00:34.282683 2026] [:error] [pid 55157:tid 55174] [client 20.151.206.105:53527] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev1s.php"] [unique_id "aYZIYn36JdtTn2bTEoyg8gAAAQw"]
[Sat Feb 07 04:00:34.712538 2026] [:error] [pid 55157:tid 55171] [client 20.151.206.105:40826] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev1s.php"] [unique_id "aYZIYn36JdtTn2bTEoyg9QAAAQk"]
[Sat Feb 07 04:00:35.160676 2026] [:error] [pid 55157:tid 55184] [client 20.151.206.105:55867] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev1s.php"] [unique_id "aYZIY336JdtTn2bTEoyg9wAAARY"]
[Sat Feb 07 04:00:35.739284 2026] [:error] [pid 50673:tid 50736] [client 20.151.206.105:40515] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffd.php"] [unique_id "aYZIY2VwLsaZ7aKO2cnZNgAAAIE"]
[Sat Feb 07 04:00:36.170967 2026] [:error] [pid 55157:tid 55180] [client 20.151.206.105:53540] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffd.php"] [unique_id "aYZIZH36JdtTn2bTEoyg_gAAARI"]
[Sat Feb 07 04:00:36.659255 2026] [:error] [pid 50671:tid 50698] [client 20.151.206.105:55840] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffd.php"] [unique_id "aYZIZLvqLohWBI_mqBPAawAAABI"]
[Sat Feb 07 04:00:37.111699 2026] [:error] [pid 50671:tid 50694] [client 20.151.206.105:40808] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffd.php"] [unique_id "aYZIZbvqLohWBI_mqBPAbQAAAA4"]
[Sat Feb 07 04:00:37.605351 2026] [:error] [pid 55157:tid 55179] [client 20.151.206.105:53585] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anna.php"] [unique_id "aYZIZX36JdtTn2bTEoyhBAAAARE"]
[Sat Feb 07 04:00:38.017248 2026] [:error] [pid 50780:tid 50805] [client 20.151.206.105:53550] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anna.php"] [unique_id "aYZIZutUmIu2JHM2Crt6ewAAANc"]
[Sat Feb 07 04:00:38.435051 2026] [:error] [pid 50673:tid 50753] [client 20.151.206.105:40517] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anna.php"] [unique_id "aYZIZmVwLsaZ7aKO2cnZOgAAAJI"]
[Sat Feb 07 04:00:38.878898 2026] [:error] [pid 50671:tid 50704] [client 20.151.206.105:53627] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anna.php"] [unique_id "aYZIZrvqLohWBI_mqBPAdQAAABg"]
[Sat Feb 07 04:00:39.298746 2026] [:error] [pid 50673:tid 50750] [client 20.151.206.105:55389] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aYZIZ2VwLsaZ7aKO2cnZPAAAAI8"]
[Sat Feb 07 04:00:39.744466 2026] [:error] [pid 50671:tid 50702] [client 20.151.206.105:53555] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aYZIZ7vqLohWBI_mqBPAeAAAABY"]
[Sat Feb 07 04:00:40.256254 2026] [:error] [pid 50671:tid 50703] [client 20.151.206.105:53563] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aYZIaLvqLohWBI_mqBPAegAAABc"]
[Sat Feb 07 04:00:40.731898 2026] [:error] [pid 55157:tid 55163] [client 20.151.206.105:53534] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aYZIaH36JdtTn2bTEoyhDAAAAQE"]
[Sat Feb 07 04:00:41.227738 2026] [:error] [pid 50780:tid 50787] [client 20.151.206.105:55849] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aYZIaetUmIu2JHM2Crt6gQAAAMU"]
[Sat Feb 07 04:00:41.763987 2026] [:error] [pid 55157:tid 55175] [client 20.151.206.105:53507] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aYZIaX36JdtTn2bTEoyhEgAAAQ0"]
[Sat Feb 07 04:00:42.263178 2026] [:error] [pid 50673:tid 50756] [client 20.151.206.105:40524] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aYZIamVwLsaZ7aKO2cnZPgAAAJU"]
[Sat Feb 07 04:00:42.903403 2026] [:error] [pid 50672:tid 50732] [client 20.151.206.105:55410] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aYZIag9o0jq1XS8Nv7Nd6AAAAFg"]
[Sat Feb 07 04:00:43.394181 2026] [:error] [pid 50672:tid 50715] [client 20.151.206.105:53541] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jmfi2.php"] [unique_id "aYZIaw9o0jq1XS8Nv7Nd6gAAAEc"]
[Sat Feb 07 04:00:44.041298 2026] [:error] [pid 55157:tid 55167] [client 20.151.206.105:53524] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jmfi2.php"] [unique_id "aYZIbH36JdtTn2bTEoyhGgAAAQU"]
[Sat Feb 07 04:00:44.663312 2026] [:error] [pid 55157:tid 55162] [client 20.151.206.105:40804] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jmfi2.php"] [unique_id "aYZIbH36JdtTn2bTEoyhGwAAAQA"]
[Sat Feb 07 04:00:45.141892 2026] [:error] [pid 50780:tid 50801] [client 20.151.206.105:40791] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jmfi2.php"] [unique_id "aYZIbetUmIu2JHM2Crt6hgAAANM"]
[Sat Feb 07 04:00:45.647942 2026] [:error] [pid 50672:tid 50718] [client 20.151.206.105:35338] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ez.php"] [unique_id "aYZIbQ9o0jq1XS8Nv7Nd7gAAAEo"]
[Sat Feb 07 04:00:46.064871 2026] [:error] [pid 50671:tid 50689] [client 20.151.206.105:53616] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ez.php"] [unique_id "aYZIbrvqLohWBI_mqBPAhgAAAAk"]
[Sat Feb 07 04:00:46.511363 2026] [:error] [pid 50672:tid 50727] [client 20.151.206.105:32841] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ez.php"] [unique_id "aYZIbg9o0jq1XS8Nv7Nd8gAAAFM"]
[Sat Feb 07 04:00:46.938950 2026] [:error] [pid 50780:tid 50794] [client 20.151.206.105:40828] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ez.php"] [unique_id "aYZIbutUmIu2JHM2Crt6igAAAMw"]
[Sat Feb 07 04:00:47.413220 2026] [:error] [pid 50673:tid 50747] [client 20.151.206.105:40547] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aYZIb2VwLsaZ7aKO2cnZQgAAAIw"]
[Sat Feb 07 04:00:47.904596 2026] [:error] [pid 55157:tid 55180] [client 20.151.206.105:55413] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aYZIb336JdtTn2bTEoyhJgAAARI"]
[Sat Feb 07 04:00:48.360291 2026] [:error] [pid 50673:tid 50744] [client 20.151.206.105:55866] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aYZIcGVwLsaZ7aKO2cnZRAAAAIk"]
[Sat Feb 07 04:00:48.857943 2026] [:error] [pid 55157:tid 55165] [client 20.151.206.105:53539] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aYZIcH36JdtTn2bTEoyhLgAAAQM"]
[Sat Feb 07 04:00:49.298368 2026] [:error] [pid 50671:tid 50693] [client 20.151.206.105:40790] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aYZIcbvqLohWBI_mqBPAjAAAAA0"]
[Sat Feb 07 04:00:49.898103 2026] [:error] [pid 50672:tid 50729] [client 20.151.206.105:35358] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aYZIcQ9o0jq1XS8Nv7Nd9wAAAFU"]
[Sat Feb 07 04:00:50.442005 2026] [:error] [pid 50673:tid 50759] [client 20.151.206.105:40550] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aYZIcmVwLsaZ7aKO2cnZTAAAAJg"]
[Sat Feb 07 04:00:50.912245 2026] [:error] [pid 50672:tid 50712] [client 20.151.206.105:55837] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aYZIcg9o0jq1XS8Nv7Nd-AAAAEQ"]
[Sat Feb 07 04:00:51.365502 2026] [:error] [pid 50673:tid 50742] [client 20.151.206.105:40768] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aYZIc2VwLsaZ7aKO2cnZTQAAAIc"]
[Sat Feb 07 04:00:51.800205 2026] [:error] [pid 50671:tid 50686] [client 20.151.206.105:55417] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aYZIc7vqLohWBI_mqBPAjwAAAAY"]
[Sat Feb 07 04:00:52.221048 2026] [:error] [pid 50671:tid 50700] [client 20.151.206.105:40824] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aYZIdLvqLohWBI_mqBPAkQAAABQ"]
[Sat Feb 07 04:00:52.648822 2026] [:error] [pid 50671:tid 50701] [client 20.151.206.105:35768] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aYZIdLvqLohWBI_mqBPAkgAAABU"]
[Sat Feb 07 04:00:53.082625 2026] [:error] [pid 50672:tid 50727] [client 20.151.206.105:35361] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cfile.php"] [unique_id "aYZIdQ9o0jq1XS8Nv7Nd_QAAAFM"]
[Sat Feb 07 04:00:53.502019 2026] [:error] [pid 50671:tid 50680] [client 20.151.206.105:35369] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cfile.php"] [unique_id "aYZIdbvqLohWBI_mqBPAkwAAAAA"]
[Sat Feb 07 04:00:53.939130 2026] [:error] [pid 50671:tid 50703] [client 20.151.206.105:32860] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cfile.php"] [unique_id "aYZIdbvqLohWBI_mqBPAlgAAABc"]
[Sat Feb 07 04:00:54.349960 2026] [:error] [pid 50671:tid 50689] [client 20.151.206.105:40792] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cfile.php"] [unique_id "aYZIdrvqLohWBI_mqBPAmAAAAAk"]
[Sat Feb 07 04:00:54.889314 2026] [:error] [pid 50672:tid 50710] [client 20.151.206.105:55369] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aYZIdg9o0jq1XS8Nv7Nd_gAAAEI"]
[Sat Feb 07 04:00:55.346247 2026] [:error] [pid 50671:tid 50692] [client 20.151.206.105:40784] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aYZId7vqLohWBI_mqBPAmQAAAAw"]
[Sat Feb 07 04:00:55.859662 2026] [:error] [pid 55157:tid 55181] [client 20.151.206.105:55421] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aYZId336JdtTn2bTEoyhRQAAARM"]
[Sat Feb 07 04:00:56.282377 2026] [:error] [pid 50672:tid 50728] [client 20.151.206.105:55830] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aYZIeA9o0jq1XS8Nv7NeAAAAAFQ"]
[Sat Feb 07 04:00:56.718065 2026] [:error] [pid 50780:tid 50787] [client 20.151.206.105:53579] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aYZIeOtUmIu2JHM2Crt6lgAAAMU"]
[Sat Feb 07 04:00:57.194900 2026] [:error] [pid 50673:tid 50742] [client 20.151.206.105:55843] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aYZIeWVwLsaZ7aKO2cnZWgAAAIc"]
[Sat Feb 07 04:00:57.622680 2026] [:error] [pid 55157:tid 55167] [client 20.151.206.105:40514] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aYZIeX36JdtTn2bTEoyhSgAAAQU"]
[Sat Feb 07 04:00:58.054627 2026] [:error] [pid 50672:tid 50716] [client 20.151.206.105:40795] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aYZIeg9o0jq1XS8Nv7NeAgAAAEg"]
[Sat Feb 07 04:00:58.518695 2026] [:error] [pid 50780:tid 50784] [client 20.151.206.105:40821] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aYZIeutUmIu2JHM2Crt6lwAAAMI"]
[Sat Feb 07 04:00:59.021639 2026] [:error] [pid 50673:tid 50740] [client 20.151.206.105:35376] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aYZIe2VwLsaZ7aKO2cnZYQAAAIU"]
[Sat Feb 07 04:00:59.454041 2026] [:error] [pid 50672:tid 50729] [client 20.151.206.105:55856] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aYZIew9o0jq1XS8Nv7NeBAAAAFU"]
[Sat Feb 07 04:01:00.314269 2026] [:error] [pid 55157:tid 55181] [client 20.151.206.105:55809] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aYZIfH36JdtTn2bTEoyhTwAAARM"]
[Sat Feb 07 04:01:00.872059 2026] [:error] [pid 50673:tid 50753] [client 20.151.206.105:53573] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aYZIfGVwLsaZ7aKO2cnZaAAAAJI"]
[Sat Feb 07 04:01:01.309471 2026] [:error] [pid 50673:tid 50738] [client 20.151.206.105:53562] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aYZIfWVwLsaZ7aKO2cnZagAAAIM"]
[Sat Feb 07 04:01:01.910694 2026] [:error] [pid 50672:tid 50718] [client 20.151.206.105:55826] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aYZIfQ9o0jq1XS8Nv7NeBgAAAEo"]
[Sat Feb 07 04:01:02.367756 2026] [:error] [pid 50672:tid 50717] [client 20.151.206.105:55391] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aYZIfg9o0jq1XS8Nv7NeCAAAAEk"]
[Sat Feb 07 04:01:02.841467 2026] [:error] [pid 50672:tid 50727] [client 20.151.206.105:40552] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aYZIfg9o0jq1XS8Nv7NeCwAAAFM"]
[Sat Feb 07 04:01:03.289896 2026] [:error] [pid 55157:tid 55178] [client 20.151.206.105:35716] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aYZIf336JdtTn2bTEoyhVQAAARA"]
[Sat Feb 07 04:01:03.772499 2026] [:error] [pid 50673:tid 50747] [client 20.151.206.105:40831] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aYZIf2VwLsaZ7aKO2cnZcAAAAIw"]
[Sat Feb 07 04:01:04.265820 2026] [:error] [pid 55157:tid 55174] [client 20.151.206.105:40555] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aYZIgH36JdtTn2bTEoyhWwAAAQw"]
[Sat Feb 07 04:01:04.687985 2026] [:error] [pid 50672:tid 50732] [client 20.151.206.105:55403] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style2.php"] [unique_id "aYZIgA9o0jq1XS8Nv7NeEQAAAFg"]
[Sat Feb 07 04:01:05.135180 2026] [:error] [pid 50780:tid 50798] [client 20.151.206.105:55827] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style2.php"] [unique_id "aYZIgetUmIu2JHM2Crt6ngAAANA"]
[Sat Feb 07 04:01:05.583754 2026] [:error] [pid 50672:tid 50729] [client 20.151.206.105:53530] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style2.php"] [unique_id "aYZIgQ9o0jq1XS8Nv7NeEgAAAFU"]
[Sat Feb 07 04:01:06.005751 2026] [:error] [pid 50780:tid 50789] [client 20.151.206.105:53628] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style2.php"] [unique_id "aYZIgutUmIu2JHM2Crt6oAAAAMc"]
[Sat Feb 07 04:01:06.723343 2026] [:error] [pid 55157:tid 55178] [client 20.151.206.105:53528] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aYZIgn36JdtTn2bTEoyhbAAAARA"]
[Sat Feb 07 04:01:07.217396 2026] [:error] [pid 55157:tid 55177] [client 20.151.206.105:53511] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aYZIg336JdtTn2bTEoyhcQAAAQ8"]
[Sat Feb 07 04:01:07.651567 2026] [:error] [pid 50780:tid 50788] [client 20.151.206.105:40534] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aYZIg-tUmIu2JHM2Crt6owAAAMY"]
[Sat Feb 07 04:01:08.119055 2026] [:error] [pid 50673:tid 50744] [client 20.151.206.105:53519] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aYZIhGVwLsaZ7aKO2cnZggAAAIk"]
[Sat Feb 07 04:01:08.753068 2026] [:error] [pid 50672:tid 50725] [client 20.151.206.105:35367] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aYZIhA9o0jq1XS8Nv7NeGQAAAFE"]
[Sat Feb 07 04:01:09.218774 2026] [:error] [pid 50780:tid 50786] [client 20.151.206.105:53586] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aYZIhetUmIu2JHM2Crt6pgAAAMQ"]
[Sat Feb 07 04:01:09.643187 2026] [:error] [pid 50780:tid 50806] [client 20.151.206.105:55396] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aYZIhetUmIu2JHM2Crt6qgAAANg"]
[Sat Feb 07 04:01:10.085975 2026] [:error] [pid 50671:tid 50697] [client 20.151.206.105:53581] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aYZIhrvqLohWBI_mqBPA1QAAABE"]
[Sat Feb 07 04:01:10.547217 2026] [:error] [pid 50672:tid 50732] [client 20.151.206.105:40811] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsback.php"] [unique_id "aYZIhg9o0jq1XS8Nv7NeGwAAAFg"]
[Sat Feb 07 04:01:10.971846 2026] [:error] [pid 55157:tid 55181] [client 20.151.206.105:40525] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsback.php"] [unique_id "aYZIhn36JdtTn2bTEoyhigAAARM"]
[Sat Feb 07 04:01:11.431730 2026] [:error] [pid 50780:tid 50789] [client 20.151.206.105:40566] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsback.php"] [unique_id "aYZIh-tUmIu2JHM2Crt6rgAAAMc"]
[Sat Feb 07 04:01:11.883372 2026] [:error] [pid 50671:tid 50681] [client 20.151.206.105:53630] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsback.php"] [unique_id "aYZIh7vqLohWBI_mqBPA5QAAAAE"]
[Sat Feb 07 04:01:12.300213 2026] [:error] [pid 50673:tid 50754] [client 20.151.206.105:55386] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pm.php"] [unique_id "aYZIiGVwLsaZ7aKO2cnZlgAAAJM"]
[Sat Feb 07 04:01:12.855490 2026] [:error] [pid 55157:tid 55162] [client 20.151.206.105:33159] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pm.php"] [unique_id "aYZIiH36JdtTn2bTEoyhkgAAAQA"]
[Sat Feb 07 04:01:21.893747 2026] [:error] [pid 50780:tid 50802] [client 20.151.206.105:53593] [client 20.151.206.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.206.105, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYZIketUmIu2JHM2Crt62gAAANQ"]
[Sat Feb 07 04:01:27.661276 2026] [:error] [pid 50780:tid 50804] [client 20.151.206.105:53593] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aYZIl-tUmIu2JHM2Crt69AAAANY"]
[Sat Feb 07 04:01:28.095941 2026] [:error] [pid 50780:tid 50784] [client 20.151.206.105:55854] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aYZImOtUmIu2JHM2Crt69QAAAMI"]
[Sat Feb 07 04:01:28.610205 2026] [:error] [pid 50780:tid 50788] [client 20.151.206.105:53578] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aYZImOtUmIu2JHM2Crt6-QAAAMY"]
[Sat Feb 07 04:01:29.039623 2026] [:error] [pid 50780:tid 50799] [client 20.151.206.105:53626] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aYZImetUmIu2JHM2Crt6-wAAANE"]
[Sat Feb 07 04:01:29.477270 2026] [:error] [pid 50672:tid 50715] [client 20.151.206.105:40814] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aYZImQ9o0jq1XS8Nv7NeNAAAAEc"]
[Sat Feb 07 04:01:29.892500 2026] [:error] [pid 50780:tid 50787] [client 20.151.206.105:53509] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aYZImetUmIu2JHM2Crt6_gAAAMU"]
[Sat Feb 07 04:01:30.345506 2026] [:error] [pid 55157:tid 55165] [client 20.151.206.105:53505] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aYZImn36JdtTn2bTEoyhqgAAAQM"]
[Sat Feb 07 04:01:30.788323 2026] [:error] [pid 50672:tid 50718] [client 20.151.206.105:55381] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aYZImg9o0jq1XS8Nv7NeOAAAAEo"]
[Sat Feb 07 04:01:31.278888 2026] [:error] [pid 50672:tid 50727] [client 20.151.206.105:40572] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-gr.php"] [unique_id "aYZImw9o0jq1XS8Nv7NeOgAAAFM"]
[Sat Feb 07 04:01:31.710476 2026] [:error] [pid 50672:tid 50721] [client 20.151.206.105:55812] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-gr.php"] [unique_id "aYZImw9o0jq1XS8Nv7NePgAAAE0"]
[Sat Feb 07 04:01:32.383512 2026] [:error] [pid 50672:tid 50724] [client 20.151.206.105:40574] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-gr.php"] [unique_id "aYZInA9o0jq1XS8Nv7NeQwAAAFA"]
[Sat Feb 07 04:01:32.906290 2026] [:error] [pid 50672:tid 50716] [client 20.151.206.105:35389] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-gr.php"] [unique_id "aYZInA9o0jq1XS8Nv7NeRgAAAEg"]
[Sat Feb 07 04:01:33.378331 2026] [:error] [pid 55157:tid 55177] [client 20.151.206.105:35390] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aYZInX36JdtTn2bTEoyhswAAAQ8"]
[Sat Feb 07 04:01:34.159965 2026] [:error] [pid 50671:tid 50693] [client 20.151.206.105:55869] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aYZInrvqLohWBI_mqBPBHAAAAA0"]
[Sat Feb 07 04:01:34.670360 2026] [:error] [pid 55157:tid 55184] [client 20.151.206.105:32864] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aYZInn36JdtTn2bTEoyhuQAAARY"]
[Sat Feb 07 04:01:35.111068 2026] [:error] [pid 50673:tid 50737] [client 20.151.206.105:55845] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aYZIn2VwLsaZ7aKO2cnZuAAAAII"]
[Sat Feb 07 04:01:35.533926 2026] [:error] [pid 50780:tid 50788] [client 20.151.206.105:40799] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aYZIn-tUmIu2JHM2Crt7DwAAAMY"]
[Sat Feb 07 04:01:35.975093 2026] [:error] [pid 50671:tid 50680] [client 20.151.206.105:53590] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aYZIn7vqLohWBI_mqBPBHwAAAAA"]
[Sat Feb 07 04:01:36.419171 2026] [:error] [pid 50780:tid 50803] [client 20.151.206.105:53594] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aYZIoOtUmIu2JHM2Crt7EgAAANU"]
[Sat Feb 07 04:01:36.985218 2026] [:error] [pid 50673:tid 50744] [client 20.151.206.105:33157] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aYZIoGVwLsaZ7aKO2cnZvwAAAIk"]
[Sat Feb 07 04:01:37.404346 2026] [:error] [pid 50673:tid 50748] [client 20.151.206.105:55841] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex3.php"] [unique_id "aYZIoWVwLsaZ7aKO2cnZwwAAAI0"]
[Sat Feb 07 04:01:37.873257 2026] [:error] [pid 50780:tid 50790] [client 20.151.206.105:40564] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex3.php"] [unique_id "aYZIoetUmIu2JHM2Crt7GwAAAMg"]
[Sat Feb 07 04:01:38.363196 2026] [:error] [pid 50671:tid 50686] [client 20.151.206.105:53592] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex3.php"] [unique_id "aYZIorvqLohWBI_mqBPBIgAAAAY"]
[Sat Feb 07 04:01:38.839182 2026] [:error] [pid 55157:tid 55168] [client 20.151.206.105:33173] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex3.php"] [unique_id "aYZIon36JdtTn2bTEoyhygAAAQY"]
[Sat Feb 07 04:01:39.279988 2026] [:error] [pid 55157:tid 55172] [client 20.151.206.105:55861] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aYZIo336JdtTn2bTEoyh0AAAAQo"]
[Sat Feb 07 04:01:39.846475 2026] [:error] [pid 50671:tid 50690] [client 20.151.206.105:53577] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aYZIo7vqLohWBI_mqBPBKAAAAAo"]
[Sat Feb 07 04:01:40.300280 2026] [:error] [pid 50673:tid 50747] [client 20.151.206.105:55814] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aYZIpGVwLsaZ7aKO2cnZyAAAAIw"]
[Sat Feb 07 04:01:40.713172 2026] [:error] [pid 50673:tid 50756] [client 20.151.206.105:55394] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aYZIpGVwLsaZ7aKO2cnZyQAAAJU"]
[Sat Feb 07 04:01:41.167821 2026] [:error] [pid 55157:tid 55168] [client 20.151.206.105:30382] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aYZIpX36JdtTn2bTEoyh2QAAAQY"]
[Sat Feb 07 04:01:41.618036 2026] [:error] [pid 50672:tid 50728] [client 20.151.206.105:55360] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aYZIpQ9o0jq1XS8Nv7NeSQAAAFQ"]
[Sat Feb 07 04:01:42.054577 2026] [:error] [pid 50780:tid 50802] [client 20.151.206.105:53529] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aYZIputUmIu2JHM2Crt7JgAAANQ"]
[Sat Feb 07 04:01:42.503010 2026] [:error] [pid 55157:tid 55165] [client 20.151.206.105:40770] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aYZIpn36JdtTn2bTEoyh3QAAAQM"]
[Sat Feb 07 04:01:43.081700 2026] [:error] [pid 50671:tid 50687] [client 20.151.206.105:55418] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aYZIp7vqLohWBI_mqBPBMAAAAAc"]
[Sat Feb 07 04:01:43.515522 2026] [:error] [pid 50780:tid 50804] [client 20.151.206.105:53623] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aYZIp-tUmIu2JHM2Crt7KQAAANY"]
[Sat Feb 07 04:01:43.992367 2026] [:error] [pid 50672:tid 50716] [client 20.151.206.105:35345] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aYZIpw9o0jq1XS8Nv7NeSwAAAEg"]
[Sat Feb 07 04:01:44.485509 2026] [:error] [pid 50671:tid 50698] [client 20.151.206.105:40772] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aYZIqLvqLohWBI_mqBPBNgAAABI"]
[Sat Feb 07 04:01:44.942095 2026] [:error] [pid 50672:tid 50718] [client 20.151.206.105:53512] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aYZIqA9o0jq1XS8Nv7NeTwAAAEo"]
[Sat Feb 07 04:01:45.443538 2026] [:error] [pid 50673:tid 50755] [client 20.151.206.105:40812] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aYZIqWVwLsaZ7aKO2cnZ2wAAAJQ"]
[Sat Feb 07 04:01:45.929638 2026] [:error] [pid 55157:tid 55181] [client 20.151.206.105:33209] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aYZIqX36JdtTn2bTEoyh4gAAARM"]
[Sat Feb 07 04:01:46.372164 2026] [:error] [pid 50780:tid 50798] [client 20.151.206.105:40538] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aYZIqutUmIu2JHM2Crt7LwAAANA"]
[Sat Feb 07 04:01:46.819998 2026] [:error] [pid 55157:tid 55176] [client 20.151.206.105:53564] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aYZIqn36JdtTn2bTEoyh5wAAAQ4"]
[Sat Feb 07 04:01:47.253698 2026] [:error] [pid 50671:tid 50683] [client 20.151.206.105:53597] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aYZIq7vqLohWBI_mqBPBPgAAAAM"]
[Sat Feb 07 04:01:47.724133 2026] [:error] [pid 55157:tid 55171] [client 20.151.206.105:40531] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aYZIq336JdtTn2bTEoyh6wAAAQk"]
[Sat Feb 07 04:01:48.176600 2026] [:error] [pid 50673:tid 50739] [client 20.151.206.105:35347] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "aYZIrGVwLsaZ7aKO2cnZ3wAAAIQ"]
[Sat Feb 07 04:01:48.620334 2026] [:error] [pid 50672:tid 50717] [client 20.151.206.105:40553] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYZIrA9o0jq1XS8Nv7NeUQAAAEk"]
[Sat Feb 07 04:01:49.159216 2026] [:error] [pid 50780:tid 50798] [client 20.151.206.105:33182] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYZIretUmIu2JHM2Crt7PAAAANA"]
[Sat Feb 07 04:01:49.577785 2026] [:error] [pid 55157:tid 55184] [client 20.151.206.105:53603] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYZIrX36JdtTn2bTEoyh7wAAARY"]
[Sat Feb 07 04:01:50.106342 2026] [:error] [pid 50672:tid 50711] [client 20.151.206.105:53537] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aYZIrg9o0jq1XS8Nv7NeVAAAAEM"]
[Sat Feb 07 04:01:50.544476 2026] [:error] [pid 50780:tid 50802] [client 20.151.206.105:40519] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aYZIrutUmIu2JHM2Crt7PgAAANQ"]
[Sat Feb 07 04:01:50.994457 2026] [:error] [pid 50780:tid 50787] [client 20.151.206.105:40573] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aYZIrutUmIu2JHM2Crt7QQAAAMU"]
[Sat Feb 07 04:01:51.420814 2026] [:error] [pid 50673:tid 50749] [client 20.151.206.105:40822] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aYZIr2VwLsaZ7aKO2cnZ5QAAAI4"]
[Sat Feb 07 04:01:51.844044 2026] [:error] [pid 50673:tid 50753] [client 20.151.206.105:53546] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aYZIr2VwLsaZ7aKO2cnZ5gAAAJI"]
[Sat Feb 07 04:01:52.260983 2026] [:error] [pid 50672:tid 50719] [client 20.151.206.105:53545] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aYZIsA9o0jq1XS8Nv7NeWgAAAEs"]
[Sat Feb 07 04:01:52.679987 2026] [:error] [pid 55157:tid 55169] [client 20.151.206.105:53615] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aYZIsH36JdtTn2bTEoyh9AAAAQc"]
[Sat Feb 07 04:01:53.094947 2026] [:error] [pid 50672:tid 50713] [client 20.151.206.105:40554] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aYZIsQ9o0jq1XS8Nv7NeXgAAAEU"]
[Sat Feb 07 04:01:53.538187 2026] [:error] [pid 50780:tid 50805] [client 20.151.206.105:33164] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aYZIsetUmIu2JHM2Crt7VQAAANc"]
[Sat Feb 07 04:01:53.954012 2026] [:error] [pid 50780:tid 50797] [client 20.151.206.105:55818] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aYZIsetUmIu2JHM2Crt7WAAAAM8"]
[Sat Feb 07 04:01:54.409250 2026] [:error] [pid 55157:tid 55181] [client 20.151.206.105:30374] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aYZIsn36JdtTn2bTEoyh_gAAARM"]
[Sat Feb 07 04:01:54.861200 2026] [:error] [pid 50672:tid 50722] [client 20.151.206.105:53619] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aYZIsg9o0jq1XS8Nv7NeYwAAAE4"]
[Sat Feb 07 04:01:55.276822 2026] [:error] [pid 55157:tid 55182] [client 20.151.206.105:32886] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aYZIs336JdtTn2bTEoyiAQAAARQ"]
[Sat Feb 07 04:01:55.716336 2026] [:error] [pid 50673:tid 50750] [client 20.151.206.105:30367] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi2.php"] [unique_id "aYZIs2VwLsaZ7aKO2cnZ7gAAAI8"]
[Sat Feb 07 04:01:56.163004 2026] [:error] [pid 50671:tid 50702] [client 20.151.206.105:55838] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi2.php"] [unique_id "aYZItLvqLohWBI_mqBPBUgAAABY"]
[Sat Feb 07 04:01:56.582808 2026] [:error] [pid 50672:tid 50716] [client 20.151.206.105:53517] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi2.php"] [unique_id "aYZItA9o0jq1XS8Nv7NeawAAAEg"]
[Sat Feb 07 04:01:57.041645 2026] [:error] [pid 50671:tid 50703] [client 20.151.206.105:53606] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi2.php"] [unique_id "aYZItbvqLohWBI_mqBPBVQAAABc"]
[Sat Feb 07 04:01:57.467644 2026] [:error] [pid 50672:tid 50715] [client 20.151.206.105:40562] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nope.php"] [unique_id "aYZItQ9o0jq1XS8Nv7NecwAAAEc"]
[Sat Feb 07 04:01:57.899434 2026] [:error] [pid 55157:tid 55162] [client 20.151.206.105:35332] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nope.php"] [unique_id "aYZItX36JdtTn2bTEoyiCwAAAQA"]
[Sat Feb 07 04:01:58.362527 2026] [:error] [pid 50780:tid 50785] [client 20.151.206.105:53558] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nope.php"] [unique_id "aYZItutUmIu2JHM2Crt7ZgAAAMM"]
[Sat Feb 07 04:01:58.781206 2026] [:error] [pid 50671:tid 50687] [client 20.151.206.105:40516] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nope.php"] [unique_id "aYZItrvqLohWBI_mqBPBWgAAAAc"]
[Sat Feb 07 04:01:59.256471 2026] [:error] [pid 55157:tid 55163] [client 20.151.206.105:32858] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aYZIt336JdtTn2bTEoyiEAAAAQE"]
[Sat Feb 07 04:01:59.707805 2026] [:error] [pid 50671:tid 50681] [client 20.151.206.105:40529] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aYZIt7vqLohWBI_mqBPBXAAAAAE"]
[Sat Feb 07 04:02:00.188945 2026] [:error] [pid 50780:tid 50802] [client 20.151.206.105:53561] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aYZIuOtUmIu2JHM2Crt7bgAAANQ"]
[Sat Feb 07 04:02:00.727988 2026] [:error] [pid 50780:tid 50805] [client 20.151.206.105:40818] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aYZIuOtUmIu2JHM2Crt7cAAAANc"]
[Sat Feb 07 04:02:01.158758 2026] [:error] [pid 50780:tid 50782] [client 20.151.206.105:53624] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aYZIuetUmIu2JHM2Crt7dgAAAMA"]
[Sat Feb 07 04:02:01.599087 2026] [:error] [pid 50671:tid 50691] [client 20.151.206.105:40800] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aYZIubvqLohWBI_mqBPBYQAAAAs"]
[Sat Feb 07 04:02:02.010676 2026] [:error] [pid 50780:tid 50784] [client 20.151.206.105:55422] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aYZIuutUmIu2JHM2Crt7fAAAAMI"]
[Sat Feb 07 04:02:02.555357 2026] [:error] [pid 50671:tid 50703] [client 20.151.206.105:55390] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "aYZIurvqLohWBI_mqBPBZgAAABc"]
[Sat Feb 07 04:02:02.977045 2026] [:error] [pid 50780:tid 50792] [client 20.151.206.105:33212] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aYZIuutUmIu2JHM2Crt7fwAAAMo"]
[Sat Feb 07 04:02:03.489205 2026] [:error] [pid 55157:tid 55178] [client 20.151.206.105:33199] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aYZIu336JdtTn2bTEoyiFwAAARA"]
[Sat Feb 07 04:02:03.976009 2026] [:error] [pid 50673:tid 50738] [client 20.151.206.105:35379] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aYZIu2VwLsaZ7aKO2cnZ9QAAAIM"]
[Sat Feb 07 04:02:04.825213 2026] [:error] [pid 50672:tid 50714] [client 20.151.206.105:33186] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aYZIvA9o0jq1XS8Nv7NefAAAAEY"]
[Sat Feb 07 04:02:05.574343 2026] [:error] [pid 55157:tid 55173] [client 20.151.206.105:55859] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aYZIvX36JdtTn2bTEoyiHwAAAQs"]
[Sat Feb 07 04:02:06.082152 2026] [:error] [pid 50673:tid 50736] [client 20.151.206.105:40549] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aYZIvmVwLsaZ7aKO2cnZ-AAAAIE"]
[Sat Feb 07 04:02:06.664321 2026] [:error] [pid 50780:tid 50798] [client 20.151.206.105:40823] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aYZIvutUmIu2JHM2Crt7iQAAANA"]
[Sat Feb 07 04:02:07.082645 2026] [:error] [pid 50672:tid 50719] [client 20.151.206.105:53612] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aYZIvw9o0jq1XS8Nv7NehQAAAEs"]
[Sat Feb 07 04:02:07.625589 2026] [:error] [pid 50673:tid 50758] [client 20.151.206.105:40545] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aYZIv2VwLsaZ7aKO2cnZ_gAAAJc"]
[Sat Feb 07 04:02:08.089641 2026] [:error] [pid 55157:tid 55175] [client 20.151.206.105:40773] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aYZIwH36JdtTn2bTEoyiKwAAAQ0"]
[Sat Feb 07 04:02:08.584216 2026] [:error] [pid 55157:tid 55173] [client 20.151.206.105:35723] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aYZIwH36JdtTn2bTEoyiLQAAAQs"]
[Sat Feb 07 04:02:08.996230 2026] [:error] [pid 50673:tid 50759] [client 20.151.206.105:40777] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aYZIwGVwLsaZ7aKO2cnaAAAAAJg"]
[Sat Feb 07 04:02:09.445808 2026] [:error] [pid 55157:tid 55162] [client 20.151.206.105:32876] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aYZIwX36JdtTn2bTEoyiMwAAAQA"]
[Sat Feb 07 04:02:10.039782 2026] [:error] [pid 50780:tid 50799] [client 20.151.206.105:32832] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aYZIwutUmIu2JHM2Crt7mgAAANE"]
[Sat Feb 07 04:02:10.493169 2026] [:error] [pid 50671:tid 50686] [client 20.151.206.105:40825] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aYZIwrvqLohWBI_mqBPBfQAAAAY"]
[Sat Feb 07 04:02:11.040817 2026] [:error] [pid 55157:tid 55186] [client 20.151.206.105:53557] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aYZIw336JdtTn2bTEoyiPAAAARg"]
[Sat Feb 07 04:02:11.475623 2026] [:error] [pid 50673:tid 50743] [client 20.151.206.105:53608] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/png.php"] [unique_id "aYZIw2VwLsaZ7aKO2cnaDQAAAIg"]
[Sat Feb 07 04:02:11.915607 2026] [:error] [pid 50673:tid 50746] [client 20.151.206.105:32893] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/png.php"] [unique_id "aYZIw2VwLsaZ7aKO2cnaEQAAAIs"]
[Sat Feb 07 04:02:12.493161 2026] [:error] [pid 50673:tid 50739] [client 20.151.206.105:53565] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/png.php"] [unique_id "aYZIxGVwLsaZ7aKO2cnaGQAAAIQ"]
[Sat Feb 07 04:02:12.954135 2026] [:error] [pid 50672:tid 50727] [client 20.151.206.105:33202] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/png.php"] [unique_id "aYZIxA9o0jq1XS8Nv7NeqAAAAFM"]
[Sat Feb 07 04:02:13.514473 2026] [:error] [pid 50672:tid 50714] [client 20.151.206.105:32884] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "aYZIxQ9o0jq1XS8Nv7NergAAAEY"]
[Sat Feb 07 04:02:14.127784 2026] [:error] [pid 55157:tid 55179] [client 20.151.206.105:55398] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "aYZIxn36JdtTn2bTEoyiUQAAARE"]
[Sat Feb 07 04:02:14.678495 2026] [:error] [pid 50780:tid 50782] [client 20.151.206.105:53544] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "aYZIxutUmIu2JHM2Crt7rgAAAMA"]
[Sat Feb 07 04:02:15.128637 2026] [:error] [pid 50671:tid 50700] [client 20.151.206.105:53620] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "aYZIx7vqLohWBI_mqBPBkwAAABQ"]
[Sat Feb 07 04:02:15.947127 2026] [:error] [pid 50671:tid 50702] [client 20.151.206.105:53576] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aYZIx7vqLohWBI_mqBPBmAAAABY"]
[Sat Feb 07 04:02:16.469595 2026] [:error] [pid 50673:tid 50745] [client 20.151.206.105:32861] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aYZIyGVwLsaZ7aKO2cnaLQAAAIo"]
[Sat Feb 07 04:02:17.022751 2026] [:error] [pid 50673:tid 50757] [client 20.151.206.105:40793] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aYZIyWVwLsaZ7aKO2cnaLwAAAJY"]
[Sat Feb 07 04:02:17.465125 2026] [:error] [pid 50671:tid 50690] [client 20.151.206.105:33176] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aYZIybvqLohWBI_mqBPBnQAAAAo"]
[Sat Feb 07 04:02:17.908330 2026] [:error] [pid 50671:tid 50682] [client 20.151.206.105:40778] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aYZIybvqLohWBI_mqBPBogAAAAI"]
[Sat Feb 07 04:02:18.635354 2026] [:error] [pid 50671:tid 50704] [client 20.151.206.105:53609] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aYZIyrvqLohWBI_mqBPBqAAAABg"]
[Sat Feb 07 04:02:19.477767 2026] [:error] [pid 55157:tid 55175] [client 20.151.206.105:53610] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aYZIy336JdtTn2bTEoyiaQAAAQ0"]
[Sat Feb 07 04:02:20.000594 2026] [:error] [pid 55157:tid 55167] [client 20.151.206.105:40537] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aYZIy336JdtTn2bTEoyibQAAAQU"]
[Sat Feb 07 04:02:20.653512 2026] [:error] [pid 50780:tid 50786] [client 20.151.206.105:35383] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aYZIzOtUmIu2JHM2Crt7uQAAAMQ"]
[Sat Feb 07 04:02:21.221480 2026] [:error] [pid 50780:tid 50802] [client 20.151.206.105:55854] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aYZIzetUmIu2JHM2Crt7ugAAANQ"]
[Sat Feb 07 04:02:22.196829 2026] [:error] [pid 50673:tid 50740] [client 20.151.206.105:35743] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aYZIzmVwLsaZ7aKO2cnaOQAAAIU"]
[Sat Feb 07 04:02:22.749885 2026] [:error] [pid 55157:tid 55162] [client 20.151.206.105:55862] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aYZIzn36JdtTn2bTEoyidAAAAQA"]
[Sat Feb 07 04:02:23.662099 2026] [:error] [pid 50673:tid 50751] [client 20.151.206.105:55419] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aYZIz2VwLsaZ7aKO2cnaPwAAAJA"]
[Sat Feb 07 04:02:24.406036 2026] [:error] [pid 50780:tid 50798] [client 20.151.206.105:55375] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aYZI0OtUmIu2JHM2Crt7wQAAANA"]
[Sat Feb 07 04:02:25.536157 2026] [:error] [pid 50672:tid 50712] [client 20.151.206.105:53560] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aYZI0Q9o0jq1XS8Nv7Ne2wAAAEQ"]
[Sat Feb 07 04:02:29.597645 2026] [:error] [pid 50672:tid 50713] [client 20.151.206.105:35328] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aYZI1Q9o0jq1XS8Nv7Ne6wAAAEU"]
[Sat Feb 07 04:02:37.346273 2026] [:error] [pid 55157:tid 55165] [client 20.151.206.105:35355] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aYZI3X36JdtTn2bTEoyimAAAAQM"]
[Sat Feb 07 04:02:37.833518 2026] [:error] [pid 50673:tid 50739] [client 20.151.206.105:32895] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aYZI3WVwLsaZ7aKO2cnaVQAAAIQ"]
[Sat Feb 07 04:02:38.292334 2026] [:error] [pid 50780:tid 50792] [client 20.151.206.105:40817] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aYZI3utUmIu2JHM2Crt73QAAAMo"]
[Sat Feb 07 04:02:38.704993 2026] [:error] [pid 50671:tid 50692] [client 20.151.206.105:35337] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aYZI3rvqLohWBI_mqBPB3QAAAAw"]
[Sat Feb 07 04:02:39.161343 2026] [:error] [pid 55157:tid 55184] [client 20.151.206.105:33189] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jquery.php"] [unique_id "aYZI3336JdtTn2bTEoyimwAAARY"]
[Sat Feb 07 04:02:39.623911 2026] [:error] [pid 50673:tid 50748] [client 20.151.206.105:55421] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jquery.php"] [unique_id "aYZI32VwLsaZ7aKO2cnaWgAAAI0"]
[Sat Feb 07 04:02:40.044152 2026] [:error] [pid 50780:tid 50804] [client 20.151.206.105:35713] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jquery.php"] [unique_id "aYZI4OtUmIu2JHM2Crt74gAAANY"]
[Sat Feb 07 04:02:40.456738 2026] [:error] [pid 50671:tid 50680] [client 20.151.206.105:29774] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jquery.php"] [unique_id "aYZI4LvqLohWBI_mqBPB4gAAAAA"]
[Sat Feb 07 04:02:40.880651 2026] [:error] [pid 50673:tid 50742] [client 20.151.206.105:53518] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aYZI4GVwLsaZ7aKO2cnaXAAAAIc"]
[Sat Feb 07 04:02:41.298014 2026] [:error] [pid 50780:tid 50792] [client 20.151.206.105:40536] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aYZI4etUmIu2JHM2Crt77gAAAMo"]
[Sat Feb 07 04:02:41.770063 2026] [:error] [pid 50672:tid 50718] [client 20.151.206.105:55870] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aYZI4Q9o0jq1XS8Nv7Ne-gAAAEo"]
[Sat Feb 07 04:02:42.217715 2026] [:error] [pid 50671:tid 50702] [client 20.151.206.105:32857] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aYZI4rvqLohWBI_mqBPB6QAAABY"]
[Sat Feb 07 04:02:42.642985 2026] [:error] [pid 50673:tid 50746] [client 20.151.206.105:40542] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aYZI4mVwLsaZ7aKO2cnaXgAAAIs"]
[Sat Feb 07 04:02:43.170723 2026] [:error] [pid 50671:tid 50696] [client 20.151.206.105:33189] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aYZI47vqLohWBI_mqBPB7wAAABA"]
[Sat Feb 07 04:02:43.591594 2026] [:error] [pid 55157:tid 55165] [client 20.151.206.105:40556] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aYZI4336JdtTn2bTEoyiogAAAQM"]
[Sat Feb 07 04:02:44.060152 2026] [:error] [pid 50672:tid 50732] [client 20.151.206.105:55835] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aYZI5A9o0jq1XS8Nv7Ne_AAAAFg"]
[Sat Feb 07 04:02:44.502596 2026] [:error] [pid 50671:tid 50698] [client 20.151.206.105:55401] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aYZI5LvqLohWBI_mqBPB9gAAABI"]
[Sat Feb 07 04:02:44.930081 2026] [:error] [pid 55157:tid 55184] [client 20.151.206.105:35717] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xfile25.php"] [unique_id "aYZI5H36JdtTn2bTEoyipgAAARY"]
[Sat Feb 07 04:02:45.349232 2026] [:error] [pid 50671:tid 50702] [client 20.151.206.105:53587] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xfile25.php"] [unique_id "aYZI5bvqLohWBI_mqBPB9wAAABY"]
[Sat Feb 07 04:02:45.834984 2026] [:error] [pid 55157:tid 55163] [client 20.151.206.105:40794] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xfile25.php"] [unique_id "aYZI5X36JdtTn2bTEoyiqgAAAQE"]
[Sat Feb 07 04:02:46.284248 2026] [:error] [pid 50673:tid 50741] [client 20.151.206.105:35775] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xfile25.php"] [unique_id "aYZI5mVwLsaZ7aKO2cnaYgAAAIY"]
[Sat Feb 07 04:02:46.719787 2026] [:error] [pid 55157:tid 55169] [client 20.151.206.105:40563] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aYZI5n36JdtTn2bTEoyirwAAAQc"]
[Sat Feb 07 04:02:47.174206 2026] [:error] [pid 50673:tid 50752] [client 20.151.206.105:55395] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aYZI52VwLsaZ7aKO2cnaZQAAAJE"]
[Sat Feb 07 04:02:47.665620 2026] [:error] [pid 55157:tid 55179] [client 20.151.206.105:53513] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aYZI5336JdtTn2bTEoyisQAAARE"]
[Sat Feb 07 04:02:48.126339 2026] [:error] [pid 55157:tid 55181] [client 20.151.206.105:40575] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aYZI6H36JdtTn2bTEoyitgAAARM"]
[Sat Feb 07 04:02:48.556191 2026] [:error] [pid 50671:tid 50698] [client 20.151.206.105:53566] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aYZI6LvqLohWBI_mqBPCAAAAABI"]
[Sat Feb 07 04:02:49.033841 2026] [:error] [pid 55157:tid 55186] [client 20.151.206.105:40803] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aYZI6X36JdtTn2bTEoyiugAAARg"]
[Sat Feb 07 04:02:49.497303 2026] [:error] [pid 55157:tid 55170] [client 20.151.206.105:32847] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aYZI6X36JdtTn2bTEoyivwAAAQg"]
[Sat Feb 07 04:02:49.929903 2026] [:error] [pid 50672:tid 50712] [client 20.151.206.105:33184] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aYZI6Q9o0jq1XS8Nv7NfAAAAAEQ"]
[Sat Feb 07 04:02:50.350772 2026] [:error] [pid 55157:tid 55167] [client 20.151.206.105:35354] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aYZI6n36JdtTn2bTEoyiwwAAAQU"]
[Sat Feb 07 04:02:50.808091 2026] [:error] [pid 55157:tid 55164] [client 20.151.206.105:40810] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aYZI6n36JdtTn2bTEoyixwAAAQI"]
[Sat Feb 07 04:02:51.329338 2026] [:error] [pid 55157:tid 55184] [client 20.151.206.105:53536] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aYZI6336JdtTn2bTEoyiywAAARY"]
[Sat Feb 07 04:02:51.753597 2026] [:error] [pid 50780:tid 50782] [client 20.151.206.105:35745] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aYZI6-tUmIu2JHM2Crt8AgAAAMA"]
[Sat Feb 07 04:02:52.171955 2026] [:error] [pid 50672:tid 50725] [client 20.151.206.105:40769] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/muzu.php"] [unique_id "aYZI7A9o0jq1XS8Nv7NfBQAAAFE"]
[Sat Feb 07 04:02:52.647782 2026] [:error] [pid 50673:tid 50741] [client 20.151.206.105:40518] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/muzu.php"] [unique_id "aYZI7GVwLsaZ7aKO2cnabQAAAIY"]
[Sat Feb 07 04:02:53.128523 2026] [:error] [pid 50780:tid 50806] [client 20.151.206.105:30344] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/muzu.php"] [unique_id "aYZI7etUmIu2JHM2Crt8BgAAANg"]
[Sat Feb 07 04:02:53.737524 2026] [:error] [pid 50672:tid 50730] [client 20.151.206.105:33198] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/muzu.php"] [unique_id "aYZI7Q9o0jq1XS8Nv7NfCgAAAFY"]
[Sat Feb 07 04:02:54.156778 2026] [:error] [pid 50780:tid 50785] [client 20.151.206.105:53542] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "aYZI7utUmIu2JHM2Crt8CQAAAMM"]
[Sat Feb 07 04:02:54.645977 2026] [:error] [pid 50672:tid 50732] [client 20.151.206.105:55865] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "aYZI7g9o0jq1XS8Nv7NfEQAAAFg"]
[Sat Feb 07 04:02:55.273530 2026] [:error] [pid 50780:tid 50794] [client 20.151.206.105:53567] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "aYZI7-tUmIu2JHM2Crt8DQAAAMw"]
[Sat Feb 07 04:02:55.990467 2026] [:error] [pid 50673:tid 50746] [client 20.151.206.105:53618] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "aYZI72VwLsaZ7aKO2cnacgAAAIs"]
[Sat Feb 07 04:02:56.627110 2026] [:error] [pid 50780:tid 50782] [client 20.151.206.105:55868] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aYZI8OtUmIu2JHM2Crt8EgAAAMA"]
[Sat Feb 07 04:02:57.226724 2026] [:error] [pid 55157:tid 55163] [client 20.151.206.105:40813] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aYZI8X36JdtTn2bTEoyi0wAAAQE"]
[Sat Feb 07 04:02:57.774571 2026] [:error] [pid 50673:tid 50740] [client 20.151.206.105:35733] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aYZI8WVwLsaZ7aKO2cnadAAAAIU"]
[Sat Feb 07 04:02:58.619239 2026] [:error] [pid 55157:tid 55180] [client 20.151.206.105:33214] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aYZI8n36JdtTn2bTEoyi1wAAARI"]
[Sat Feb 07 04:02:59.454608 2026] [:error] [pid 50780:tid 50795] [client 20.151.206.105:40797] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aYZI8-tUmIu2JHM2Crt8HQAAAM0"]
[Sat Feb 07 04:03:00.071463 2026] [:error] [pid 50673:tid 50750] [client 20.151.206.105:33205] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aYZI9GVwLsaZ7aKO2cnaeQAAAI8"]
[Sat Feb 07 04:03:00.757670 2026] [:error] [pid 50673:tid 50755] [client 20.151.206.105:33206] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aYZI9GVwLsaZ7aKO2cnaegAAAJQ"]
[Sat Feb 07 04:03:01.579867 2026] [:error] [pid 50673:tid 50751] [client 20.151.206.105:55400] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aYZI9WVwLsaZ7aKO2cnafAAAAJA"]
[Sat Feb 07 04:03:02.380584 2026] [:error] [pid 50780:tid 50790] [client 20.151.206.105:55393] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aYZI9utUmIu2JHM2Crt8IwAAAMg"]
[Sat Feb 07 04:03:03.309785 2026] [:error] [pid 50673:tid 50757] [client 20.151.206.105:29819] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aYZI92VwLsaZ7aKO2cnagAAAAJY"]
[Sat Feb 07 11:34:22.935830 2026] [:error] [pid 50671:tid 50699] [client 198.98.60.91:29975] [client 198.98.60.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.60.91, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYayvrvqLohWBI_mqBM3OAAAABM"]
[Sat Feb 07 11:34:25.279343 2026] [:error] [pid 50671:tid 50692] [client 198.98.60.91:29975] [client 198.98.60.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.60.91, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYaywbvqLohWBI_mqBM3OwAAAAw"]
[Sat Feb 07 12:37:40.117854 2026] [:error] [pid 50673:tid 50745] [client 95.91.110.210:63412] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYbBlGVwLsaZ7aKO2cl7lAAAAIo"]
[Sat Feb 07 13:11:20.283679 2026] [:error] [pid 50672:tid 50722] [client 95.91.110.210:18350] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYbJeA9o0jq1XS8Nv7Pn0gAAAE4"]
[Sat Feb 07 13:11:22.845712 2026] [:error] [pid 43182:tid 43184] [client 95.91.110.210:29574] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYbJevEC82JnxmrnFYlLigAAAUA"]
[Sat Feb 07 13:11:25.419976 2026] [:error] [pid 50673:tid 50759] [client 95.91.110.210:51568] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYbJfWVwLsaZ7aKO2cmGpQAAAJg"]
[Sat Feb 07 13:11:27.961572 2026] [:error] [pid 50673:tid 50756] [client 95.91.110.210:51580] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYbJf2VwLsaZ7aKO2cmGqQAAAJU"]
[Sat Feb 07 13:11:30.529599 2026] [:error] [pid 50780:tid 50803] [client 95.91.110.210:51582] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYbJgutUmIu2JHM2CrsfVAAAANU"]
[Sat Feb 07 13:11:33.095564 2026] [:error] [pid 50780:tid 50792] [client 95.91.110.210:51590] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aYbJhetUmIu2JHM2CrsfVQAAAMo"]
[Sat Feb 07 13:11:35.661282 2026] [:error] [pid 43182:tid 43192] [client 95.91.110.210:14666] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYbJh_EC82JnxmrnFYlLmgAAAUg"]
[Sat Feb 07 13:11:38.219173 2026] [:error] [pid 50780:tid 50788] [client 95.91.110.210:14668] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYbJiutUmIu2JHM2CrsfXAAAAMY"]
[Sat Feb 07 13:11:40.795675 2026] [:error] [pid 50780:tid 50800] [client 95.91.110.210:14674] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYbJjOtUmIu2JHM2CrsfXQAAANI"]
[Sat Feb 07 13:11:43.208246 2026] [:error] [pid 50780:tid 50802] [client 95.91.110.210:14676] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYbJj-tUmIu2JHM2CrsfXgAAANQ"]
[Sat Feb 07 13:11:45.937842 2026] [:error] [pid 55157:tid 55182] [client 95.91.110.210:56752] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYbJkX36JdtTn2bTEoxkWgAAARQ"]
[Sat Feb 07 13:11:48.363627 2026] [:error] [pid 50780:tid 50783] [client 95.91.110.210:56756] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYbJlOtUmIu2JHM2CrsfZgAAAME"]
[Sat Feb 07 13:11:51.092733 2026] [:error] [pid 50672:tid 50732] [client 95.91.110.210:56762] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYbJlw9o0jq1XS8Nv7Pn3QAAAFg"]
[Sat Feb 07 13:11:53.659718 2026] [:error] [pid 55157:tid 55170] [client 95.91.110.210:56774] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYbJmX36JdtTn2bTEoxkXAAAAQg"]
[Sat Feb 07 13:11:56.228811 2026] [:error] [pid 55157:tid 55171] [client 95.91.110.210:21420] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYbJnH36JdtTn2bTEoxkXQAAAQk"]
[Sat Feb 07 13:12:08.057252 2026] [:error] [pid 43182:tid 43184] [client 95.91.110.210:53154] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYbJqPEC82JnxmrnFYlLtgAAAUA"]
[Sat Feb 07 13:12:10.603636 2026] [:error] [pid 50671:tid 50694] [client 95.91.110.210:53156] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYbJqrvqLohWBI_mqBNHoAAAAA4"]
[Sat Feb 07 13:12:13.215070 2026] [:error] [pid 50671:tid 50686] [client 95.91.110.210:53166] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYbJrbvqLohWBI_mqBNHowAAAAY"]
[Sat Feb 07 13:12:15.766520 2026] [:error] [pid 58058:tid 58081] [client 95.91.110.210:35226] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYbJr7z-Qlvs65S4DP-vwwAAAZQ"]
[Sat Feb 07 13:49:58.464995 2026] [:error] [pid 55157:tid 55165] [client 51.68.235.38:49880] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYbShn36JdtTn2bTEoxtpAAAAQM"]
[Sat Feb 07 13:50:01.017352 2026] [:error] [pid 50780:tid 50798] [client 51.68.235.38:37438] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYbSietUmIu2JHM2CrsqigAAANA"]
[Sat Feb 07 13:50:03.411792 2026] [:error] [pid 55157:tid 55168] [client 51.68.235.38:37448] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYbSi336JdtTn2bTEoxtqQAAAQY"]
[Sat Feb 07 13:50:05.827901 2026] [:error] [pid 50671:tid 50684] [client 51.68.235.38:37906] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYbSjbvqLohWBI_mqBNQPgAAAAQ"]
[Sat Feb 07 13:50:08.211982 2026] [:error] [pid 50673:tid 50755] [client 51.68.235.38:37918] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYbSkGVwLsaZ7aKO2cmWhQAAAJQ"]
[Sat Feb 07 13:50:10.729344 2026] [:error] [pid 50673:tid 50748] [client 51.68.235.38:37932] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYbSkmVwLsaZ7aKO2cmWigAAAI0"]
[Sat Feb 07 13:50:13.130080 2026] [:error] [pid 50671:tid 50699] [client 51.68.235.38:37938] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aYbSlbvqLohWBI_mqBNQRQAAABM"]
[Sat Feb 07 13:50:15.646025 2026] [:error] [pid 55157:tid 55184] [client 51.68.235.38:48360] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYbSl336JdtTn2bTEoxtsgAAARY"]
[Sat Feb 07 13:50:18.073903 2026] [:error] [pid 55157:tid 55170] [client 51.68.235.38:48364] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYbSmn36JdtTn2bTEoxtvAAAAQg"]
[Sat Feb 07 13:50:20.461141 2026] [:error] [pid 50672:tid 50714] [client 51.68.235.38:48378] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYbSnA9o0jq1XS8Nv7PwvwAAAEY"]
[Sat Feb 07 13:50:23.004606 2026] [:error] [pid 43182:tid 43197] [client 51.68.235.38:48392] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aYbSn_EC82JnxmrnFYlVQwAAAU0"]
[Sat Feb 07 13:50:25.386402 2026] [:error] [pid 50671:tid 50700] [client 51.68.235.38:52756] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aYbSobvqLohWBI_mqBNQUAAAABQ"]
[Sat Feb 07 13:50:27.793540 2026] [:error] [pid 50780:tid 50786] [client 51.68.235.38:52766] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aYbSo-tUmIu2JHM2CrsquQAAAMQ"]
[Sat Feb 07 13:50:30.342771 2026] [:error] [pid 43182:tid 43187] [client 51.68.235.38:52774] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYbSpvEC82JnxmrnFYlVTgAAAUM"]
[Sat Feb 07 13:50:32.743462 2026] [:error] [pid 43182:tid 43201] [client 51.68.235.38:52780] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aYbSqPEC82JnxmrnFYlVUgAAAVE"]
[Sat Feb 07 13:50:35.142127 2026] [:error] [pid 55157:tid 55166] [client 51.68.235.38:51592] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYbSq336JdtTn2bTEoxtygAAAQQ"]
[Sat Feb 07 13:50:37.543580 2026] [:error] [pid 50672:tid 50727] [client 51.68.235.38:51608] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYbSrQ9o0jq1XS8Nv7Pw0QAAAFM"]
[Sat Feb 07 13:50:40.096191 2026] [:error] [pid 58058:tid 58064] [client 51.68.235.38:51612] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYbSsLz-Qlvs65S4DP-5ugAAAYM"]
[Sat Feb 07 13:50:42.465769 2026] [:error] [pid 43182:tid 43188] [client 51.68.235.38:51620] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aYbSsvEC82JnxmrnFYlVWQAAAUQ"]
[Sat Feb 07 13:50:45.007116 2026] [:error] [pid 50673:tid 50756] [client 51.68.235.38:37402] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aYbStWVwLsaZ7aKO2cmWxgAAAJU"]
[Sat Feb 07 13:50:47.448945 2026] [:error] [pid 50673:tid 50744] [client 51.68.235.38:37414] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYbSt2VwLsaZ7aKO2cmWzgAAAIk"]
[Sat Feb 07 13:50:49.847226 2026] [:error] [pid 43182:tid 43205] [client 51.68.235.38:37420] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYbSufEC82JnxmrnFYlVYAAAAVU"]
[Sat Feb 07 13:50:52.215831 2026] [:error] [pid 50673:tid 50737] [client 51.68.235.38:37426] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aYbSvGVwLsaZ7aKO2cmW2QAAAII"]
[Sat Feb 07 13:50:54.756961 2026] [:error] [pid 55157:tid 55162] [client 51.68.235.38:46842] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aYbSvn36JdtTn2bTEoxt4AAAAQA"]
[Sat Feb 07 13:51:06.692930 2026] [:error] [pid 50672:tid 50722] [client 43.135.130.202:36726] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYbSyg9o0jq1XS8Nv7Pw6QAAAE4"]
[Sat Feb 07 13:51:27.133857 2026] [:error] [pid 50673:tid 50753] [client 51.68.235.38:46852] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYbS32VwLsaZ7aKO2cmXIAAAAJI"]
[Sat Feb 07 13:51:29.521977 2026] [:error] [pid 55157:tid 55164] [client 51.68.235.38:35050] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aYbS4X36JdtTn2bTEoxt_wAAAQI"]
[Sat Feb 07 13:51:32.036925 2026] [:error] [pid 58058:tid 58076] [client 51.68.235.38:35054] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aYbS5Lz-Qlvs65S4DP-57QAAAY8"]
[Sat Feb 07 13:51:34.577624 2026] [:error] [pid 55157:tid 55173] [client 51.68.235.38:39132] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aYbS5n36JdtTn2bTEoxuCwAAAQs"]
[Sat Feb 07 13:51:37.094923 2026] [:error] [pid 50673:tid 50741] [client 51.68.235.38:39138] [client 51.68.235.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYbS6WVwLsaZ7aKO2cmXNwAAAIY"]
[Sat Feb 07 18:33:11.983142 2026] [:error] [pid 50673:tid 50738] [client 107.189.5.231:54054] [client 107.189.5.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.5.231, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYcU52VwLsaZ7aKO2cnjYQAAAIM"]
[Sat Feb 07 18:33:14.618095 2026] [:error] [pid 50673:tid 50736] [client 107.189.5.231:54054] [client 107.189.5.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.5.231, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYcU6mVwLsaZ7aKO2cnjagAAAIE"]
[Sat Feb 07 22:09:18.145666 2026] [:error] [pid 50673:tid 50738] [client 31.171.130.135:34155] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYdHjmVwLsaZ7aKO2cks5gAAAIM"]
[Sat Feb 07 22:09:31.476217 2026] [:error] [pid 50780:tid 50786] [client 31.171.130.149:56939] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYdHm-tUmIu2JHM2CrvbpAAAAMQ"]
[Sat Feb 07 22:10:02.512836 2026] [:error] [pid 43182:tid 43204] [client 31.171.130.149:30475] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aYdHuvEC82JnxmrnFYns5wAAAVQ"]
[Sat Feb 07 22:10:16.529737 2026] [:error] [pid 30684:tid 30709] [client 31.171.130.155:36243] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aYdHyLqwdxwowLt-_LwtewAAAdY"]
[Sat Feb 07 22:10:42.577924 2026] [:error] [pid 50673:tid 50751] [client 31.171.130.139:46199] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYdH4mVwLsaZ7aKO2ckuxgAAAJA"]
[Sat Feb 07 22:10:49.699844 2026] [:error] [pid 50671:tid 50701] [client 31.171.130.115:55347] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYdH6bvqLohWBI_mqBPBKgAAABU"]
[Sat Feb 07 22:10:50.681565 2026] [:error] [pid 55157:tid 55172] [client 31.171.130.142:53199] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYdH6n36JdtTn2bTEoznFQAAAQo"]
[Sat Feb 07 22:10:51.635570 2026] [:error] [pid 50673:tid 50759] [client 31.171.130.155:53467] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYdH62VwLsaZ7aKO2cku9QAAAJg"]
[Sat Feb 07 22:10:52.594752 2026] [:error] [pid 55157:tid 55183] [client 31.171.130.141:45699] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYdH7H36JdtTn2bTEoznHwAAARU"]
[Sat Feb 07 22:10:53.562567 2026] [:error] [pid 55157:tid 55165] [client 31.171.130.161:35759] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYdH7X36JdtTn2bTEoznKAAAAQM"]
[Sat Feb 07 22:10:58.105394 2026] [:error] [pid 50671:tid 50686] [client 31.171.130.116:27997] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYdH8rvqLohWBI_mqBPBbgAAAAY"]
[Sat Feb 07 22:11:05.313269 2026] [:error] [pid 30684:tid 30698] [client 31.171.130.115:24569] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aYdH-bqwdxwowLt-_Lwu_gAAAcs"]
[Sat Feb 07 22:11:15.709540 2026] [:error] [pid 58058:tid 58084] [client 31.171.130.131:57261] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYdIA7z-Qlvs65S4DP9EcwAAAZc"]
[Sat Feb 07 22:11:23.320757 2026] [:error] [pid 55157:tid 55166] [client 31.171.130.113:29085] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYdIC336JdtTn2bTEoznqAAAAQQ"]
[Sat Feb 07 22:11:27.489701 2026] [:error] [pid 50673:tid 50736] [client 31.171.130.133:63911] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYdID2VwLsaZ7aKO2ckv4gAAAIE"]
[Sat Feb 07 22:11:48.523875 2026] [:error] [pid 55157:tid 55169] [client 31.171.130.115:29433] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aYdIJH36JdtTn2bTEozoUgAAAQc"]
[Sat Feb 07 22:11:56.637722 2026] [:error] [pid 50780:tid 50784] [client 31.171.130.121:58145] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aYdILOtUmIu2JHM2Crve-AAAAMI"]
[Sat Feb 07 22:12:05.469914 2026] [:error] [pid 55157:tid 55165] [client 31.171.130.165:30695] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aYdINX36JdtTn2bTEozo0wAAAQM"]
[Sat Feb 07 22:12:10.069497 2026] [:error] [pid 50673:tid 50756] [client 31.171.130.118:25249] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aYdIOmVwLsaZ7aKO2ckwswAAAJU"]
[Sat Feb 07 22:12:25.054393 2026] [:error] [pid 30684:tid 30709] [client 31.171.130.158:54501] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aYdISbqwdxwowLt-_LwxSAAAAdY"]
[Sat Feb 07 22:12:31.760990 2026] [:error] [pid 50780:tid 50789] [client 31.171.130.113:34617] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aYdIT-tUmIu2JHM2CrvgRQAAAMc"]
[Sat Feb 07 22:12:37.151756 2026] [:error] [pid 50780:tid 50803] [client 31.171.130.112:52225] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYdIVetUmIu2JHM2CrvgbQAAANU"]
[Sat Feb 07 22:12:38.102046 2026] [:error] [pid 50673:tid 50754] [client 31.171.130.129:31969] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aYdIVmVwLsaZ7aKO2ckxaAAAAJM"]
[Sat Feb 07 22:12:39.135839 2026] [:error] [pid 55157:tid 55164] [client 31.171.130.162:33311] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYdIV336JdtTn2bTEozqMgAAAQI"]
[Sat Feb 07 22:12:51.101337 2026] [:error] [pid 58058:tid 58082] [client 31.171.130.138:20847] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aYdIY7z-Qlvs65S4DP9G0QAAAZU"]
[Sat Feb 07 22:12:52.066674 2026] [:error] [pid 43182:tid 43199] [client 31.171.130.151:49747] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aYdIZPEC82JnxmrnFYnyJgAAAU8"]
[Sat Feb 07 22:12:53.022481 2026] [:error] [pid 58058:tid 58064] [client 31.171.130.133:51283] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYdIZbz-Qlvs65S4DP9G4AAAAYM"]
[Sat Feb 07 22:13:20.830658 2026] [:error] [pid 50672:tid 50722] [client 31.171.130.159:52219] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aYdIgA9o0jq1XS8Nv7NmrwAAAE4"]
[Sat Feb 07 22:13:31.273625 2026] [:error] [pid 55157:tid 55174] [client 31.171.130.158:35715] [client 31.171.130.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.158, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aYdIi336JdtTn2bTEozsSQAAAQw"]
[Sat Feb 07 22:14:09.297699 2026] [:error] [pid 55157:tid 55171] [client 31.171.130.158:35715] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYdIsX36JdtTn2bTEozt-AAAAQk"]
[Sat Feb 07 22:14:16.831081 2026] [:error] [pid 50672:tid 50727] [client 31.171.130.148:63169] [client 31.171.130.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aYdIuA9o0jq1XS8Nv7NpgAAAAFM"]
[Sat Feb 07 22:14:22.936847 2026] [:error] [pid 50672:tid 50708] [client 31.171.130.148:63169] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aYdIvg9o0jq1XS8Nv7NpzQAAAEA"]
[Sat Feb 07 22:14:40.800609 2026] [:error] [pid 43182:tid 43185] [client 31.171.130.133:63643] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aYdI0PEC82JnxmrnFYn2gwAAAUE"]
[Sat Feb 07 22:14:57.646963 2026] [:error] [pid 50671:tid 50689] [client 31.171.130.130:62489] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aYdI4bvqLohWBI_mqBPIiAAAAAk"]
[Sat Feb 07 22:15:02.747409 2026] [:error] [pid 55157:tid 55186] [client 31.171.130.138:37223] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aYdI5n36JdtTn2bTEozwaQAAARg"]
[Sat Feb 07 22:15:08.976919 2026] [:error] [pid 50673:tid 50749] [client 31.171.130.141:39535] [client 31.171.130.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.141, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aYdI7GVwLsaZ7aKO2ck3GwAAAI4"]
[Sat Feb 07 22:15:11.073516 2026] [:error] [pid 50673:tid 50751] [client 31.171.130.141:39535] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aYdI72VwLsaZ7aKO2ck3MQAAAJA"]
[Sat Feb 07 22:15:47.709451 2026] [:error] [pid 55157:tid 55169] [client 31.171.130.118:54317] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aYdJE336JdtTn2bTEozySwAAAQc"]
[Sat Feb 07 22:15:54.291903 2026] [:error] [pid 43182:tid 43204] [client 31.171.130.163:36931] [client 31.171.130.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aYdJGvEC82JnxmrnFYn5CwAAAVQ"]
[Sat Feb 07 22:16:00.500634 2026] [:error] [pid 50671:tid 50690] [client 31.171.130.158:41625] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aYdJILvqLohWBI_mqBPKegAAAAo"]
[Sat Feb 07 22:16:02.575354 2026] [:error] [pid 50672:tid 50719] [client 31.171.130.138:29325] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aYdJIg9o0jq1XS8Nv7NtAgAAAEs"]
[Sat Feb 07 22:16:05.666677 2026] [:error] [pid 43182:tid 43207] [client 31.171.130.162:62871] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aYdJJfEC82JnxmrnFYn5mQAAAVc"]
[Sat Feb 07 22:16:11.587229 2026] [:error] [pid 50673:tid 50748] [client 31.171.130.159:25501] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYdJK2VwLsaZ7aKO2ck42QAAAI0"]
[Sat Feb 07 22:16:12.573064 2026] [:error] [pid 50673:tid 50740] [client 31.171.130.151:55145] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aYdJLGVwLsaZ7aKO2ck44QAAAIU"]
[Sat Feb 07 22:16:22.672159 2026] [:error] [pid 55157:tid 55184] [client 31.171.130.114:28533] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aYdJNn36JdtTn2bTEozy2gAAARY"]
[Sat Feb 07 22:16:25.487777 2026] [:error] [pid 50672:tid 50712] [client 31.171.130.151:36965] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aYdJOQ9o0jq1XS8Nv7Nt1AAAAEQ"]
[Sat Feb 07 22:16:36.592987 2026] [autoindex:error] [pid 30684:tid 30690] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:37.090501 2026] [autoindex:error] [pid 30684:tid 30704] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:37.713815 2026] [autoindex:error] [pid 30684:tid 30706] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:38.190751 2026] [autoindex:error] [pid 30684:tid 30697] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:40.708449 2026] [autoindex:error] [pid 30684:tid 30687] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:41.182686 2026] [autoindex:error] [pid 30684:tid 30691] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:41.677009 2026] [autoindex:error] [pid 30684:tid 30692] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:42.173191 2026] [autoindex:error] [pid 30684:tid 30701] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:42.760427 2026] [autoindex:error] [pid 30684:tid 30691] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:43.251976 2026] [autoindex:error] [pid 30684:tid 30692] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:44.207200 2026] [autoindex:error] [pid 30684:tid 30705] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:46.516098 2026] [autoindex:error] [pid 30684:tid 30690] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:47.005898 2026] [autoindex:error] [pid 30684:tid 30709] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:51.442463 2026] [autoindex:error] [pid 30684:tid 30701] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:51.914662 2026] [autoindex:error] [pid 30684:tid 30693] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:52.509259 2026] [autoindex:error] [pid 30684:tid 30698] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:52.989151 2026] [autoindex:error] [pid 30684:tid 30703] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:55.196497 2026] [autoindex:error] [pid 30684:tid 30687] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:56.795666 2026] [autoindex:error] [pid 30684:tid 30701] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:16:58.843956 2026] [autoindex:error] [pid 30684:tid 30701] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:17:02.604299 2026] [autoindex:error] [pid 30684:tid 30695] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:17:04.475107 2026] [autoindex:error] [pid 30684:tid 30704] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:17:04.988362 2026] [autoindex:error] [pid 30684:tid 30699] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:17:15.845810 2026] [autoindex:error] [pid 30684:tid 30704] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:17:17.901708 2026] [autoindex:error] [pid 30684:tid 30706] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:17:19.637909 2026] [autoindex:error] [pid 30684:tid 30711] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:17:21.182089 2026] [autoindex:error] [pid 30684:tid 30696] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:17:21.691415 2026] [autoindex:error] [pid 30684:tid 30700] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:17:22.181321 2026] [autoindex:error] [pid 30684:tid 30704] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:17:27.499875 2026] [autoindex:error] [pid 30684:tid 30700] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:17:29.637561 2026] [autoindex:error] [pid 30684:tid 30711] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:08.515450 2026] [autoindex:error] [pid 30684:tid 30708] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:09.017381 2026] [autoindex:error] [pid 30684:tid 30704] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:09.523885 2026] [autoindex:error] [pid 30684:tid 30698] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:10.009214 2026] [autoindex:error] [pid 30684:tid 30708] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:10.499065 2026] [autoindex:error] [pid 30684:tid 30701] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:12.213590 2026] [autoindex:error] [pid 30684:tid 30700] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:12.718999 2026] [autoindex:error] [pid 30684:tid 30697] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:13.221622 2026] [autoindex:error] [pid 30684:tid 30703] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:15.422233 2026] [autoindex:error] [pid 30684:tid 30690] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:17.675203 2026] [autoindex:error] [pid 30684:tid 30693] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:18.161280 2026] [autoindex:error] [pid 30684:tid 30700] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:18.665001 2026] [autoindex:error] [pid 30684:tid 30699] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:20.826123 2026] [autoindex:error] [pid 30684:tid 30711] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:21.385797 2026] [autoindex:error] [pid 30684:tid 30701] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:21.867888 2026] [autoindex:error] [pid 30684:tid 30696] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:18:22.368236 2026] [autoindex:error] [pid 30684:tid 30695] [client 31.171.130.143:38687] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:01.076415 2026] [autoindex:error] [pid 30684:tid 30698] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:19.417180 2026] [autoindex:error] [pid 30684:tid 30702] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:26.032742 2026] [autoindex:error] [pid 30684:tid 30690] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:26.507493 2026] [autoindex:error] [pid 30684:tid 30691] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:33.053668 2026] [autoindex:error] [pid 30684:tid 30694] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:33.593144 2026] [autoindex:error] [pid 30684:tid 30696] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:34.088468 2026] [autoindex:error] [pid 30684:tid 30711] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:34.572845 2026] [autoindex:error] [pid 30684:tid 30687] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:35.057883 2026] [autoindex:error] [pid 30684:tid 30707] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:35.586051 2026] [autoindex:error] [pid 30684:tid 30695] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:36.086833 2026] [autoindex:error] [pid 30684:tid 30688] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:36.592349 2026] [autoindex:error] [pid 30684:tid 30701] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:19:37.090000 2026] [autoindex:error] [pid 30684:tid 30705] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:20:05.958197 2026] [autoindex:error] [pid 30684:tid 30698] [client 31.171.130.144:43847] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 07 22:42:44.353689 2026] [:error] [pid 50672:tid 50720] [client 182.40.104.255:42226] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYdPZA9o0jq1XS8Nv7N1BwAAAEw"]
[Sun Feb 08 00:14:42.755504 2026] [:error] [pid 55157:tid 55167] [client 103.77.107.178:52165] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aYdk8n36JdtTn2bTEowPkAAAAQU"]
[Sun Feb 08 00:14:43.333450 2026] [:error] [pid 50672:tid 50711] [client 103.77.107.178:52538] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aYdk8w9o0jq1XS8Nv7OGkQAAAEM"]
[Sun Feb 08 02:08:46.963403 2026] [:error] [pid 62641:tid 62646] [client 217.77.10.74:59242] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aYd_ri_seVuUK_C4Appu0QAAAMM"]
[Sun Feb 08 04:16:04.764268 2026] [:error] [pid 24422:tid 24465] [client 20.215.184.141:24368] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byel.php"] [unique_id "aYedhCNNjcLoSCLKhTdtjgAAAEc"]
[Sun Feb 08 04:16:08.147732 2026] [:error] [pid 56906:tid 56920] [client 20.215.184.141:24343] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byel.php"] [unique_id "aYediPxl3WX27-WXfDhy1wAAAQw"]
[Sun Feb 08 04:16:08.995899 2026] [:error] [pid 24530:tid 24537] [client 20.215.184.141:2171] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byel.php"] [unique_id "aYediEazNRCs1GRWrh7gigAAAMU"]
[Sun Feb 08 04:16:10.941283 2026] [:error] [pid 56906:tid 56932] [client 20.215.184.141:2174] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byel.php"] [unique_id "aYedivxl3WX27-WXfDhy3wAAARg"]
[Sun Feb 08 04:16:31.327331 2026] [:error] [pid 24422:tid 24478] [client 20.215.184.141:26173] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lgsts.php"] [unique_id "aYednyNNjcLoSCLKhTdtrAAAAFQ"]
[Sun Feb 08 04:16:35.472448 2026] [:error] [pid 24422:tid 24458] [client 20.215.184.141:41042] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tourpa.php"] [unique_id "aYedoyNNjcLoSCLKhTdtsQAAAEA"]
[Sun Feb 08 04:16:38.787111 2026] [:error] [pid 56906:tid 56931] [client 20.215.184.141:32045] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tourpa.php"] [unique_id "aYedpvxl3WX27-WXfDhzDQAAARc"]
[Sun Feb 08 04:16:49.407509 2026] [:error] [pid 56906:tid 56927] [client 20.215.184.141:43974] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yvtuizub.php"] [unique_id "aYedsfxl3WX27-WXfDhzIAAAARM"]
[Sun Feb 08 05:19:14.912412 2026] [:error] [pid 24423:tid 24490] [client 182.42.110.255:44214] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYesUk3f9n1Y0TpV5YZ_nAAAAIU"]
[Sun Feb 08 05:52:25.247116 2026] [:error] [pid 24422:tid 24474] [client 51.75.129.164:52842] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYe0GSNNjcLoSCLKhTeRowAAAFA"]
[Sun Feb 08 07:08:52.033862 2026] [:error] [pid 24423:tid 24488] [client 51.68.234.121:49880] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYfGBE3f9n1Y0TpV5YahQgAAAIM"]
[Sun Feb 08 07:08:54.530597 2026] [:error] [pid 24422:tid 24466] [client 51.68.234.121:50888] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYfGBiNNjcLoSCLKhTep0wAAAEg"]
[Sun Feb 08 07:08:57.163681 2026] [:error] [pid 24421:tid 24448] [client 51.68.234.121:50894] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYfGCap7cTzhX5M1IP9DvwAAABE"]
[Sun Feb 08 07:08:59.705738 2026] [:error] [pid 24421:tid 24448] [client 51.68.234.121:50902] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYfGC6p7cTzhX5M1IP9DzAAAABE"]
[Sun Feb 08 07:09:02.185887 2026] [:error] [pid 24422:tid 24478] [client 51.68.234.121:50914] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYfGDiNNjcLoSCLKhTep3AAAAFQ"]
[Sun Feb 08 07:09:04.728644 2026] [:error] [pid 56906:tid 56929] [client 51.68.234.121:49304] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYfGEPxl3WX27-WXfDjGWQAAARU"]
[Sun Feb 08 07:09:07.323204 2026] [:error] [pid 24530:tid 24550] [client 51.68.234.121:49308] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aYfGE0azNRCs1GRWrh4VwQAAANI"]
[Sun Feb 08 07:09:09.954847 2026] [:error] [pid 56906:tid 56911] [client 51.68.234.121:49310] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYfGFfxl3WX27-WXfDjGYgAAAQM"]
[Sun Feb 08 07:09:12.480825 2026] [:error] [pid 56906:tid 56922] [client 51.68.234.121:49324] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYfGGPxl3WX27-WXfDjGdAAAAQ4"]
[Sun Feb 08 07:09:14.997775 2026] [:error] [pid 24421:tid 24455] [client 51.68.234.121:53504] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYfGGqp7cTzhX5M1IP9D7wAAABg"]
[Sun Feb 08 07:09:17.372754 2026] [:error] [pid 24530:tid 24538] [client 51.68.234.121:53518] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aYfGHUazNRCs1GRWrh4VzgAAAMY"]
[Sun Feb 08 07:09:19.926716 2026] [:error] [pid 56906:tid 56924] [client 51.68.234.121:53532] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aYfGH_xl3WX27-WXfDjGmQAAARA"]
[Sun Feb 08 07:09:22.442542 2026] [:error] [pid 24422:tid 24469] [client 51.68.234.121:53546] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aYfGIiNNjcLoSCLKhTeqCgAAAEs"]
[Sun Feb 08 07:09:24.942104 2026] [:error] [pid 56906:tid 56909] [client 51.68.234.121:35304] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYfGJPxl3WX27-WXfDjGowAAAQE"]
[Sun Feb 08 07:09:27.485606 2026] [:error] [pid 24423:tid 24501] [client 51.68.234.121:35314] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aYfGJ03f9n1Y0TpV5YahiAAAAJA"]
[Sun Feb 08 07:09:29.850106 2026] [:error] [pid 24421:tid 24455] [client 51.68.234.121:35330] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYfGKap7cTzhX5M1IP9EEQAAABg"]
[Sun Feb 08 07:09:32.358777 2026] [:error] [pid 56906:tid 56910] [client 51.68.234.121:35338] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYfGLPxl3WX27-WXfDjGuAAAAQI"]
[Sun Feb 08 07:09:34.912784 2026] [:error] [pid 24530:tid 24538] [client 51.68.234.121:50252] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYfGLkazNRCs1GRWrh4V5wAAAMY"]
[Sun Feb 08 07:09:37.420609 2026] [:error] [pid 24422:tid 24478] [client 51.68.234.121:50266] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aYfGMSNNjcLoSCLKhTeqIQAAAFQ"]
[Sun Feb 08 07:09:39.932849 2026] [:error] [pid 24422:tid 24482] [client 51.68.234.121:50270] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aYfGMyNNjcLoSCLKhTeqLgAAAFg"]
[Sun Feb 08 07:09:42.475296 2026] [:error] [pid 24530:tid 24554] [client 51.68.234.121:50278] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYfGNkazNRCs1GRWrh4V_QAAANY"]
[Sun Feb 08 07:09:44.996177 2026] [:error] [pid 24423:tid 24489] [client 51.68.234.121:39546] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYfGOE3f9n1Y0TpV5YahngAAAIQ"]
[Sun Feb 08 07:09:47.509589 2026] [:error] [pid 24423:tid 24490] [client 51.68.234.121:39554] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aYfGO03f9n1Y0TpV5YahpwAAAIU"]
[Sun Feb 08 07:10:19.767302 2026] [:error] [pid 24423:tid 24492] [client 51.68.234.121:39562] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYfGW03f9n1Y0TpV5Yah2AAAAIc"]
[Sun Feb 08 07:10:22.299691 2026] [:error] [pid 56906:tid 56914] [client 51.68.234.121:48142] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYfGXvxl3WX27-WXfDjHFgAAAQY"]
[Sun Feb 08 07:10:24.636616 2026] [:error] [pid 24422:tid 24475] [client 51.68.234.121:56604] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aYfGYCNNjcLoSCLKhTeqegAAAFE"]
[Sun Feb 08 07:10:27.145322 2026] [:error] [pid 56906:tid 56924] [client 51.68.234.121:56608] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aYfGY_xl3WX27-WXfDjHJgAAARA"]
[Sun Feb 08 07:10:29.637697 2026] [:error] [pid 56906:tid 56916] [client 51.68.234.121:56620] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aYfGZfxl3WX27-WXfDjHLQAAAQg"]
[Sun Feb 08 07:10:31.982758 2026] [:error] [pid 56906:tid 56931] [client 51.68.234.121:56622] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYfGZ_xl3WX27-WXfDjHMwAAARc"]
[Sun Feb 08 07:19:38.396104 2026] [:error] [pid 24421:tid 24438] [client 43.132.214.228:39556] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYfIiqp7cTzhX5M1IP9KCgAAAAc"]
[Sun Feb 08 08:14:08.471952 2026] [:error] [pid 24421:tid 24440] [client 20.193.65.50:38354] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aYfVUKp7cTzhX5M1IP9j3AAAAAk"]
[Sun Feb 08 08:14:09.678591 2026] [:error] [pid 24423:tid 24487] [client 20.193.65.50:14777] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aYfVUU3f9n1Y0TpV5Ya7qgAAAII"]
[Sun Feb 08 08:14:11.050871 2026] [:error] [pid 24422:tid 24462] [client 20.193.65.50:16081] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aYfVUyNNjcLoSCLKhTfFxgAAAEQ"]
[Sun Feb 08 08:14:13.058106 2026] [:error] [pid 56906:tid 56914] [client 20.193.65.50:23656] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cloud.php"] [unique_id "aYfVVfxl3WX27-WXfDjw5gAAAQY"]
[Sun Feb 08 08:14:14.036274 2026] [:error] [pid 24421:tid 24454] [client 20.193.65.50:5942] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aYfVVqp7cTzhX5M1IP9j6AAAABc"]
[Sun Feb 08 08:14:17.291460 2026] [:error] [pid 24421:tid 24435] [client 20.193.65.50:20605] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aYfVWap7cTzhX5M1IP9j8AAAAAQ"]
[Sun Feb 08 08:14:18.890131 2026] [:error] [pid 24423:tid 24498] [client 20.193.65.50:18681] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aYfVWk3f9n1Y0TpV5Ya7xQAAAI0"]
[Sun Feb 08 08:14:32.856687 2026] [:error] [pid 56906:tid 56917] [client 20.193.65.50:18624] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aYfVaPxl3WX27-WXfDjw_QAAAQk"]
[Sun Feb 08 08:14:41.149063 2026] [:error] [pid 56906:tid 56921] [client 20.193.65.50:41329] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aYfVcfxl3WX27-WXfDjxGwAAAQ0"]
[Sun Feb 08 08:14:47.473972 2026] [:error] [pid 24423:tid 24491] [client 20.193.65.50:21229] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugin.php"] [unique_id "aYfVd03f9n1Y0TpV5Ya77wAAAIY"]
[Sun Feb 08 08:14:50.256051 2026] [:error] [pid 24530:tid 24556] [client 20.193.65.50:15440] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugin.php"] [unique_id "aYfVekazNRCs1GRWrh4wowAAANg"]
[Sun Feb 08 08:14:58.351092 2026] [:error] [pid 24423:tid 24508] [client 20.193.65.50:27350] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugin.php"] [unique_id "aYfVgk3f9n1Y0TpV5Ya8BgAAAJc"]
[Sun Feb 08 08:14:59.194420 2026] [:error] [pid 24421:tid 24446] [client 20.193.65.50:48192] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugin.php"] [unique_id "aYfVg6p7cTzhX5M1IP9kJQAAAA8"]
[Sun Feb 08 08:14:59.529760 2026] [:error] [pid 56906:tid 56922] [client 20.193.65.50:40583] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php.php"] [unique_id "aYfVg_xl3WX27-WXfDjxOAAAAQ4"]
[Sun Feb 08 08:15:02.192715 2026] [:error] [pid 56906:tid 56927] [client 20.193.65.50:48236] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php.php"] [unique_id "aYfVhvxl3WX27-WXfDjxPAAAARM"]
[Sun Feb 08 08:15:02.894690 2026] [:error] [pid 24421:tid 24442] [client 20.193.65.50:15454] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php.php"] [unique_id "aYfVhqp7cTzhX5M1IP9kLQAAAAs"]
[Sun Feb 08 08:15:27.724540 2026] [:error] [pid 24422:tid 24480] [client 20.193.65.50:15448] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/text.php"] [unique_id "aYfVnyNNjcLoSCLKhTfGKQAAAFY"]
[Sun Feb 08 08:15:29.574673 2026] [:error] [pid 56906:tid 56929] [client 20.193.65.50:21222] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/text.php"] [unique_id "aYfVofxl3WX27-WXfDjxdAAAARU"]
[Sun Feb 08 08:15:33.015357 2026] [:error] [pid 24421:tid 24450] [client 20.193.65.50:46884] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/text.php"] [unique_id "aYfVpap7cTzhX5M1IP9kYQAAABM"]
[Sun Feb 08 08:15:35.338670 2026] [:error] [pid 24530:tid 24553] [client 20.193.65.50:41333] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/text.php"] [unique_id "aYfVp0azNRCs1GRWrh4w6AAAANU"]
[Sun Feb 08 08:15:43.621226 2026] [:error] [pid 24423:tid 24500] [client 20.193.65.50:34122] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aYfVr03f9n1Y0TpV5Ya8NwAAAI8"]
[Sun Feb 08 08:15:45.054832 2026] [:error] [pid 24422:tid 24482] [client 20.193.65.50:41334] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aYfVsSNNjcLoSCLKhTfGPAAAAFg"]
[Sun Feb 08 08:15:47.583192 2026] [:error] [pid 24421:tid 24453] [client 20.193.65.50:17998] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aYfVs6p7cTzhX5M1IP9keQAAABY"]
[Sun Feb 08 08:15:48.653144 2026] [:error] [pid 56906:tid 56919] [client 20.193.65.50:21850] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "aYfVtPxl3WX27-WXfDjxogAAAQs"]
[Sun Feb 08 08:15:58.727388 2026] [:error] [pid 56906:tid 56924] [client 20.193.65.50:19271] [client 20.193.65.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aYfVvvxl3WX27-WXfDjxsAAAARA"]
[Sun Feb 08 08:15:58.857773 2026] [:error] [pid 56906:tid 56929] [client 20.193.65.50:19288] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file13.php"] [unique_id "aYfVvvxl3WX27-WXfDjxsQAAARU"]
[Sun Feb 08 08:16:44.635600 2026] [:error] [pid 24421:tid 24447] [client 20.193.65.50:50751] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "aYfV7Kp7cTzhX5M1IP9lAAAAABA"]
[Sun Feb 08 08:17:15.629458 2026] [:error] [pid 24422:tid 24478] [client 20.193.65.50:41943] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aYfWCyNNjcLoSCLKhTfGpQAAAFQ"]
[Sun Feb 08 08:17:15.738183 2026] [:error] [pid 24421:tid 24435] [client 20.193.65.50:51995] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aYfWC6p7cTzhX5M1IP9lPwAAAAQ"]
[Sun Feb 08 08:17:17.042029 2026] [:error] [pid 24421:tid 24450] [client 20.193.65.50:56632] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aYfWDap7cTzhX5M1IP9lQQAAABM"]
[Sun Feb 08 08:17:21.115929 2026] [:error] [pid 24423:tid 24508] [client 20.193.65.50:19214] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aYfWEU3f9n1Y0TpV5Ya8mgAAAJc"]
[Sun Feb 08 08:17:22.407487 2026] [:error] [pid 56906:tid 56917] [client 20.193.65.50:46929] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aYfWEvxl3WX27-WXfDjyQAAAAQk"]
[Sun Feb 08 08:17:23.259241 2026] [:error] [pid 24421:tid 24434] [client 20.193.65.50:38815] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aYfWE6p7cTzhX5M1IP9lTAAAAAM"]
[Sun Feb 08 08:17:58.586918 2026] [:error] [pid 56906:tid 56911] [client 20.193.65.50:16693] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aYfWNvxl3WX27-WXfDjyhwAAAQM"]
[Sun Feb 08 08:18:00.842822 2026] [:error] [pid 56906:tid 56912] [client 20.193.65.50:26713] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aYfWOPxl3WX27-WXfDjyjQAAAQQ"]
[Sun Feb 08 08:18:01.952441 2026] [:error] [pid 24423:tid 24508] [client 20.193.65.50:41949] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aYfWOU3f9n1Y0TpV5Ya8zgAAAJc"]
[Sun Feb 08 08:18:05.797904 2026] [:error] [pid 24421:tid 24440] [client 20.193.65.50:62439] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aYfWPap7cTzhX5M1IP9lewAAAAk"]
[Sun Feb 08 08:18:06.980028 2026] [:error] [pid 24422:tid 24458] [client 20.193.65.50:26157] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/berlin.php"] [unique_id "aYfWPiNNjcLoSCLKhTfG4wAAAEA"]
[Sun Feb 08 08:18:11.905350 2026] [:error] [pid 56906:tid 56911] [client 20.193.65.50:62433] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/berlin.php"] [unique_id "aYfWQ_xl3WX27-WXfDjyoQAAAQM"]
[Sun Feb 08 08:18:13.115734 2026] [:error] [pid 56906:tid 56914] [client 20.193.65.50:52005] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/berlin.php"] [unique_id "aYfWRfxl3WX27-WXfDjypQAAAQY"]
[Sun Feb 08 08:18:16.158106 2026] [:error] [pid 56906:tid 56923] [client 20.193.65.50:51979] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/berlin.php"] [unique_id "aYfWSPxl3WX27-WXfDjyrwAAAQ8"]
[Sun Feb 08 08:18:16.792750 2026] [:error] [pid 24530:tid 24532] [client 20.193.65.50:26746] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aYfWSEazNRCs1GRWrh4xtQAAAMA"]
[Sun Feb 08 08:18:18.847847 2026] [:error] [pid 56906:tid 56917] [client 20.193.65.50:38847] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aYfWSvxl3WX27-WXfDjytAAAAQk"]
[Sun Feb 08 08:18:20.610442 2026] [:error] [pid 24530:tid 24549] [client 20.193.65.50:48191] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aYfWTEazNRCs1GRWrh4xvAAAANE"]
[Sun Feb 08 08:18:21.778789 2026] [:error] [pid 56906:tid 56918] [client 20.193.65.50:38784] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aYfWTfxl3WX27-WXfDjyvAAAAQo"]
[Sun Feb 08 08:18:23.999303 2026] [:error] [pid 24530:tid 24539] [client 20.193.65.50:41955] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/updates.php"] [unique_id "aYfWT0azNRCs1GRWrh4xvwAAAMc"]
[Sun Feb 08 08:18:26.589647 2026] [:error] [pid 56906:tid 56914] [client 20.193.65.50:62205] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/updates.php"] [unique_id "aYfWUvxl3WX27-WXfDjyyAAAAQY"]
[Sun Feb 08 08:18:28.197998 2026] [:error] [pid 24421:tid 24452] [client 20.193.65.50:46956] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/updates.php"] [unique_id "aYfWVKp7cTzhX5M1IP9lwQAAABU"]
[Sun Feb 08 08:18:30.832389 2026] [:error] [pid 24530:tid 24548] [client 20.193.65.50:48168] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/updates.php"] [unique_id "aYfWVkazNRCs1GRWrh4x3AAAANA"]
[Sun Feb 08 08:18:32.881607 2026] [:error] [pid 24530:tid 24542] [client 20.193.65.50:56609] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php7"] [unique_id "aYfWWEazNRCs1GRWrh4x4gAAAMo"]
[Sun Feb 08 08:18:34.137903 2026] [:error] [pid 56906:tid 56914] [client 20.193.65.50:24245] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php7"] [unique_id "aYfWWvxl3WX27-WXfDjzAgAAAQY"]
[Sun Feb 08 08:18:38.821297 2026] [:error] [pid 56906:tid 56931] [client 20.193.65.50:52003] [client 20.193.65.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php7"] [unique_id "aYfWXvxl3WX27-WXfDjzEQAAARc"]
[Sun Feb 08 08:19:18.714293 2026] [:error] [pid 56906:tid 56923] [client 20.193.65.50:62158] [client 20.193.65.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aYfWhvxl3WX27-WXfDjzYgAAAQ8"]
[Sun Feb 08 11:19:12.437837 2026] [:error] [pid 24422:tid 24480] [client 217.77.10.74:54989] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aYgAsCNNjcLoSCLKhTcKpwAAAFY"]
[Sun Feb 08 11:46:24.933078 2026] [:error] [pid 24530:tid 24544] [client 1.15.52.154:44018] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYgHEEazNRCs1GRWrh53LAAAAMw"]
[Sun Feb 08 14:30:12.797051 2026] [:error] [pid 24421:tid 24447] [client 206.189.135.92:59369] [client 206.189.135.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.135.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYgtdKp7cTzhX5M1IP_l_wAAABA"]
[Sun Feb 08 14:30:14.569936 2026] [:error] [pid 24421:tid 24433] [client 206.189.135.92:59519] [client 206.189.135.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.135.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYgtdqp7cTzhX5M1IP_mAgAAAAI"]
[Sun Feb 08 15:03:02.139696 2026] [:error] [pid 24530:tid 24548] [client 206.189.135.92:61587] [client 206.189.135.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.135.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYg1JkazNRCs1GRWrh7HbwAAANA"]
[Sun Feb 08 15:07:53.572680 2026] [:error] [pid 24530:tid 24538] [client 206.189.135.92:57053] [client 206.189.135.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.135.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYg2SUazNRCs1GRWrh7KWgAAAMY"]
[Sun Feb 08 15:12:17.511102 2026] [:error] [pid 56906:tid 56928] [client 206.189.135.92:53447] [client 206.189.135.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.189.135.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYg3Ufxl3WX27-WXfDiPZgAAARQ"]
[Sun Feb 08 16:09:19.461121 2026] [:error] [pid 43900:tid 43907] [client 104.28.208.85:59358] [client 104.28.208.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.208.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhEr-Wrhnpm_Csk3klxigAAAUQ"]
[Sun Feb 08 16:09:23.151445 2026] [:error] [pid 24423:tid 24485] [client 104.28.208.85:13718] [client 104.28.208.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.208.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhEs03f9n1Y0TpV5YY7hgAAAIA"]
[Sun Feb 08 16:09:25.755034 2026] [:error] [pid 43900:tid 43927] [client 104.28.208.85:44135] [client 104.28.208.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.208.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhEteWrhnpm_Csk3klxlgAAAVg"]
[Sun Feb 08 16:09:28.409016 2026] [:error] [pid 24530:tid 24535] [client 104.28.208.85:21078] [client 104.28.208.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.208.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhEuEazNRCs1GRWrh7hrwAAAMM"]
[Sun Feb 08 16:09:30.977669 2026] [:error] [pid 56906:tid 56927] [client 104.28.208.85:13722] [client 104.28.208.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.208.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhEuvxl3WX27-WXfDicSwAAARM"]
[Sun Feb 08 16:09:33.572540 2026] [:error] [pid 24422:tid 24471] [client 104.28.208.85:30817] [client 104.28.208.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.208.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhEvSNNjcLoSCLKhTdHVQAAAE0"]
[Sun Feb 08 16:10:25.868426 2026] [:error] [pid 56906:tid 56932] [client 104.28.163.17:25114] [client 104.28.163.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.163.17, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhE8fxl3WX27-WXfDicXwAAARg"]
[Sun Feb 08 16:11:53.614011 2026] [:error] [pid 56906:tid 56929] [client 104.28.163.17:24903] [client 104.28.163.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.163.17, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhFSfxl3WX27-WXfDicjgAAARU"]
[Sun Feb 08 16:12:16.334520 2026] [:error] [pid 24422:tid 24461] [client 104.28.163.17:26626] [client 104.28.163.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.163.17, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhFYCNNjcLoSCLKhTdHvQAAAEM"]
[Sun Feb 08 16:12:40.597687 2026] [:error] [pid 24422:tid 24480] [client 104.28.163.17:25069] [client 104.28.163.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.163.17, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhFeCNNjcLoSCLKhTdH0AAAAFY"]
[Sun Feb 08 16:13:02.323711 2026] [:error] [pid 24422:tid 24477] [client 104.28.163.17:27100] [client 104.28.163.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.163.17, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhFjiNNjcLoSCLKhTdH6wAAAFM"]
[Sun Feb 08 16:13:20.128504 2026] [:error] [pid 24530:tid 24553] [client 103.132.182.35:51946] [client 103.132.182.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.132.182.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYhFoEazNRCs1GRWrh7i5wAAANU"]
[Sun Feb 08 16:46:47.478777 2026] [:error] [pid 24421:tid 24446] [client 43.130.101.151:48026] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYhNd6p7cTzhX5M1IP8HxAAAAA8"]
[Sun Feb 08 16:49:47.500920 2026] [:error] [pid 24421:tid 24449] [client 209.141.52.212:61695] [client 209.141.52.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.52.212, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYhOK6p7cTzhX5M1IP8IjQAAABI"]
[Sun Feb 08 16:49:48.775974 2026] [:error] [pid 24421:tid 24448] [client 209.141.52.212:61695] [client 209.141.52.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.52.212, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYhOLKp7cTzhX5M1IP8IjgAAABE"]
[Sun Feb 08 22:15:02.015278 2026] [:error] [pid 6662:tid 6690] [client 34.53.64.76:58286] [client 34.53.64.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYiaZt-oEK1ut16KiNIKVQAAAlg"]
[Sun Feb 08 23:16:14.139416 2026] [:error] [pid 24421:tid 24447] [client 67.144.16.170:53910] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYiovqp7cTzhX5M1IP9MLwAAABA"]
[Sun Feb 08 23:16:15.093755 2026] [:error] [pid 24421:tid 24440] [client 67.144.16.170:54400] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYiov6p7cTzhX5M1IP9MMQAAAAk"]
[Sun Feb 08 23:16:16.140364 2026] [:error] [pid 6723:tid 6801] [client 67.144.16.170:54414] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYiowDkiu6gHwS33P0qA6wAAA1A"]
[Sun Feb 08 23:54:10.839048 2026] [:error] [pid 24423:tid 24505] [client 147.135.213.107:59512] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYixok3f9n1Y0TpV5YaDQQAAAJQ"]
[Sun Feb 08 23:54:13.261842 2026] [:error] [pid 6630:tid 6656] [client 147.135.213.107:45476] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYixpZ2jf0FBTEb_cWQHHwAAAhc"]
[Sun Feb 08 23:54:15.806976 2026] [:error] [pid 9482:tid 9550] [client 147.135.213.107:45482] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYixp8TkGH_puEFp5zPMFQAAA8s"]
[Sun Feb 08 23:54:18.181912 2026] [:error] [pid 6723:tid 6796] [client 147.135.213.107:45488] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYixqjkiu6gHwS33P0qH_AAAA0s"]
[Sun Feb 08 23:54:20.720775 2026] [:error] [pid 9482:tid 9563] [client 147.135.213.107:45496] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYixrMTkGH_puEFp5zPMGwAAA9g"]
[Sun Feb 08 23:54:23.126820 2026] [:error] [pid 9422:tid 9438] [client 147.135.213.107:47160] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aYixr69DqDJC68qBbyw3AQAAAY0"]
[Sun Feb 08 23:54:25.513921 2026] [:error] [pid 9482:tid 9547] [client 147.135.213.107:47176] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYixscTkGH_puEFp5zPMHQAAA8g"]
[Sun Feb 08 23:54:28.037999 2026] [:error] [pid 24423:tid 24497] [client 147.135.213.107:47190] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYixtE3f9n1Y0TpV5YaDTgAAAIw"]
[Sun Feb 08 23:54:30.412204 2026] [:error] [pid 43900:tid 43920] [client 147.135.213.107:47196] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYixtuWrhnpm_Csk3knCdAAAAVE"]
[Sun Feb 08 23:54:32.929621 2026] [:error] [pid 6723:tid 6796] [client 147.135.213.107:45882] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYixuDkiu6gHwS33P0qICwAAA0s"]
[Sun Feb 08 23:54:35.306731 2026] [:error] [pid 43900:tid 43907] [client 147.135.213.107:45886] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYixu-Wrhnpm_Csk3knCewAAAUQ"]
[Sun Feb 08 23:54:37.851806 2026] [:error] [pid 9422:tid 9431] [client 147.135.213.107:45894] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYixva9DqDJC68qBbyw3CQAAAYY"]
[Sun Feb 08 23:54:40.230052 2026] [:error] [pid 6630:tid 6634] [client 147.135.213.107:45902] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYixwJ2jf0FBTEb_cWQHOQAAAgE"]
[Sun Feb 08 23:54:42.755791 2026] [:error] [pid 43900:tid 43912] [client 147.135.213.107:39572] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYixwuWrhnpm_Csk3knCfgAAAUk"]
[Sun Feb 08 23:54:45.139266 2026] [:error] [pid 6723:tid 6804] [client 147.135.213.107:39586] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYixxTkiu6gHwS33P0qIEAAAA1M"]
[Sun Feb 08 23:54:47.666849 2026] [:error] [pid 43900:tid 43917] [client 147.135.213.107:39600] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYixx-Wrhnpm_Csk3knChAAAAU4"]
[Sun Feb 08 23:54:50.161776 2026] [:error] [pid 24530:tid 24550] [client 147.135.213.107:39614] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYixykazNRCs1GRWrh41WwAAANI"]
[Sun Feb 08 23:54:52.685349 2026] [:error] [pid 43900:tid 43924] [client 147.135.213.107:42700] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYixzOWrhnpm_Csk3knChQAAAVU"]
[Sun Feb 08 23:54:55.175149 2026] [:error] [pid 6723:tid 6809] [client 147.135.213.107:42706] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYixzzkiu6gHwS33P0qIEwAAA1g"]
[Sun Feb 08 23:54:57.667690 2026] [:error] [pid 24421:tid 24451] [client 147.135.213.107:42710] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYix0ap7cTzhX5M1IP9RagAAABQ"]
[Sun Feb 08 23:55:00.016278 2026] [:error] [pid 6630:tid 6650] [client 147.135.213.107:42720] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYix1J2jf0FBTEb_cWQHSgAAAhE"]
[Mon Feb 09 00:37:49.160286 2026] [:error] [pid 24530:tid 24534] [client 217.182.194.3:35104] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYi73UazNRCs1GRWrh46DQAAAMI"]
[Mon Feb 09 00:37:51.714307 2026] [:error] [pid 6723:tid 6798] [client 217.182.194.3:43946] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYi73zkiu6gHwS33P0qQHAAAA00"]
[Mon Feb 09 00:37:54.417595 2026] [:error] [pid 9422:tid 9445] [client 217.182.194.3:43954] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYi74q9DqDJC68qBbyxBTAAAAZQ"]
[Mon Feb 09 00:37:57.100666 2026] [:error] [pid 9482:tid 9563] [client 217.182.194.3:43958] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYi75cTkGH_puEFp5zPQJAAAA9g"]
[Mon Feb 09 00:37:59.725698 2026] [:error] [pid 9422:tid 9429] [client 217.182.194.3:57964] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYi7569DqDJC68qBbyxBWAAAAYQ"]
[Mon Feb 09 00:38:02.429808 2026] [:error] [pid 6630:tid 6636] [client 217.182.194.3:57974] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYi76p2jf0FBTEb_cWQOzQAAAgM"]
[Mon Feb 09 00:38:04.933665 2026] [:error] [pid 6723:tid 6802] [client 217.182.194.3:57988] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aYi77Dkiu6gHwS33P0qQJQAAA1E"]
[Mon Feb 09 00:38:07.530973 2026] [:error] [pid 6663:tid 6703] [client 217.182.194.3:57996] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYi772GI3uHqWdeZM76eoAAAAoo"]
[Mon Feb 09 00:38:10.118809 2026] [:error] [pid 6723:tid 6806] [client 217.182.194.3:38868] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYi78jkiu6gHwS33P0qQLgAAA1U"]
[Mon Feb 09 00:38:12.814618 2026] [:error] [pid 6663:tid 6717] [client 217.182.194.3:38878] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYi79GGI3uHqWdeZM76epgAAApg"]
[Mon Feb 09 00:38:15.367832 2026] [:error] [pid 9422:tid 9429] [client 217.182.194.3:38894] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aYi7969DqDJC68qBbyxBbQAAAYQ"]
[Mon Feb 09 00:38:17.897972 2026] [:error] [pid 6723:tid 6801] [client 217.182.194.3:38910] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aYi7-Tkiu6gHwS33P0qQOQAAA1A"]
[Mon Feb 09 00:38:20.526493 2026] [:error] [pid 6663:tid 6698] [client 217.182.194.3:53958] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aYi7_GGI3uHqWdeZM76erwAAAoU"]
[Mon Feb 09 00:38:23.161264 2026] [:error] [pid 6662:tid 6672] [client 217.182.194.3:53970] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYi7_9-oEK1ut16KiNIbTwAAAkY"]
[Mon Feb 09 00:38:25.696511 2026] [:error] [pid 9422:tid 9435] [client 217.182.194.3:53972] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aYi8Aa9DqDJC68qBbyxBewAAAYo"]
[Mon Feb 09 00:38:28.264779 2026] [:error] [pid 6663:tid 6710] [client 217.182.194.3:53978] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYi8BGGI3uHqWdeZM76evAAAApE"]
[Mon Feb 09 00:38:30.762954 2026] [:error] [pid 6662:tid 6672] [client 217.182.194.3:58904] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYi8Bt-oEK1ut16KiNIbXAAAAkY"]
[Mon Feb 09 00:38:33.303774 2026] [:error] [pid 24421:tid 24441] [client 217.182.194.3:58908] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYi8Cap7cTzhX5M1IP9XagAAAAo"]
[Mon Feb 09 00:38:35.888655 2026] [:error] [pid 43900:tid 43903] [client 217.182.194.3:58922] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aYi8C-Wrhnpm_Csk3knIEwAAAUA"]
[Mon Feb 09 00:38:38.584981 2026] [:error] [pid 6630:tid 6648] [client 217.182.194.3:58924] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aYi8Dp2jf0FBTEb_cWQO6wAAAg8"]
[Mon Feb 09 00:38:41.255299 2026] [:error] [pid 6723:tid 6800] [client 217.182.194.3:36462] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYi8ETkiu6gHwS33P0qQVQAAA08"]
[Mon Feb 09 00:38:43.932334 2026] [:error] [pid 6630:tid 6648] [client 217.182.194.3:36468] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYi8E52jf0FBTEb_cWQO9gAAAg8"]
[Mon Feb 09 00:39:16.486812 2026] [:error] [pid 6630:tid 6650] [client 217.182.194.3:36484] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYi8NJ2jf0FBTEb_cWQPFwAAAhE"]
[Mon Feb 09 00:39:19.073813 2026] [:error] [pid 6663:tid 6696] [client 217.182.194.3:46852] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYi8N2GI3uHqWdeZM76e4AAAAoM"]
[Mon Feb 09 00:39:21.732238 2026] [:error] [pid 9482:tid 9557] [client 217.182.194.3:46858] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYi8OcTkGH_puEFp5zPQTAAAA9I"]
[Mon Feb 09 00:39:24.187561 2026] [:error] [pid 6723:tid 6805] [client 217.182.194.3:46866] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aYi8PDkiu6gHwS33P0qQfQAAA1Q"]
[Mon Feb 09 00:39:26.685897 2026] [:error] [pid 6662:tid 6673] [client 217.182.194.3:46872] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aYi8Pt-oEK1ut16KiNIbeAAAAkc"]
[Mon Feb 09 00:39:29.255588 2026] [:error] [pid 6663:tid 6698] [client 217.182.194.3:54300] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aYi8QWGI3uHqWdeZM76e5gAAAoU"]
[Mon Feb 09 00:39:31.928891 2026] [:error] [pid 24421:tid 24434] [client 217.182.194.3:54304] [client 217.182.194.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYi8Q6p7cTzhX5M1IP9XhwAAAAM"]
[Mon Feb 09 05:44:43.331659 2026] [:error] [pid 47937:tid 47960] [client 34.82.223.73:45924] [client 34.82.223.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYkDy84Fd42MP2DhNrUkrAAAAA4"]
[Mon Feb 09 05:50:16.113019 2026] [:error] [pid 47939:tid 48026] [client 195.178.110.223:49842] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYkFGNkpZei8M7cJ2z1GdQAAAJQ"]
[Mon Feb 09 07:03:52.100411 2026] [:error] [pid 60619:tid 60672] [client 195.178.110.223:55564] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYkWWHEpg0UoeR8kJ-1dygAAAlY"]
[Mon Feb 09 08:37:21.325320 2026] [:error] [pid 60619:tid 60667] [client 43.130.9.111:46940] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYksQXEpg0UoeR8kJ-2F5QAAAlE"]
[Mon Feb 09 12:49:42.054037 2026] [:error] [pid 18303:tid 18317] [client 43.133.139.6:40214] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYlnZkY7TEaZkFrGG4lN2QAAAQw"]
[Mon Feb 09 14:29:23.699624 2026] [:error] [pid 60589:tid 60595] [client 36.41.75.167:36741] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYl-wzIJyhPWC0JyMLw-pQAAAcQ"]
[Mon Feb 09 16:22:36.470892 2026] [:error] [pid 47938:tid 47997] [client 43.130.67.33:39226] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYmZTLVCzWE6fQJEkNLvYgAAAFI"]
[Mon Feb 09 16:30:55.950950 2026] [:error] [pid 60619:tid 60667] [client 51.83.11.76:60598] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYmbP3Epg0UoeR8kJ-0O0gAAAlE"]
[Mon Feb 09 17:06:05.577009 2026] [:error] [pid 60679:tid 60781] [client 135.181.180.59:8310] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYmjfcixhoT1e6Iv6g_GhwAAA1c"]
[Mon Feb 09 17:06:08.145267 2026] [:error] [pid 47938:tid 47988] [client 135.181.180.59:8318] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYmjgLVCzWE6fQJEkNL7ZQAAAEk"]
[Mon Feb 09 17:06:10.716767 2026] [:error] [pid 60677:tid 60776] [client 135.181.180.59:8334] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYmjglyBgzfmDf6GaeuVtwAAAtc"]
[Mon Feb 09 17:06:13.298891 2026] [:error] [pid 60677:tid 60715] [client 135.181.180.59:8346] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYmjhVyBgzfmDf6GaeuVvQAAAsQ"]
[Mon Feb 09 17:06:15.875262 2026] [:error] [pid 60677:tid 60714] [client 135.181.180.59:34622] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYmjh1yBgzfmDf6GaeuVwwAAAsM"]
[Mon Feb 09 17:06:18.433492 2026] [:error] [pid 60619:tid 60672] [client 135.181.180.59:34636] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aYmjinEpg0UoeR8kJ-0WLQAAAlY"]
[Mon Feb 09 17:06:21.019835 2026] [:error] [pid 18303:tid 18321] [client 135.181.180.59:34646] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYmjjUY7TEaZkFrGG4l9pwAAARA"]
[Mon Feb 09 17:06:23.580082 2026] [:error] [pid 60679:tid 60750] [client 135.181.180.59:34656] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYmjj8ixhoT1e6Iv6g_GkQAAA0s"]
[Mon Feb 09 17:06:26.172096 2026] [:error] [pid 60677:tid 60725] [client 135.181.180.59:19682] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYmjklyBgzfmDf6GaeuVzwAAAss"]
[Mon Feb 09 17:06:28.583545 2026] [:error] [pid 60676:tid 60693] [client 135.181.180.59:19690] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYmjlHhKcn7mJYMx5_CFeQAAAok"]
[Mon Feb 09 17:06:31.156084 2026] [:error] [pid 60589:tid 60610] [client 135.181.180.59:19700] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYmjlzIJyhPWC0JyMLxkcAAAAdM"]
[Mon Feb 09 17:06:33.725667 2026] [:error] [pid 60508:tid 60516] [client 135.181.180.59:19708] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYmjmeXDvLC4ADfnEzOodAAAAYY"]
[Mon Feb 09 17:06:36.302685 2026] [:error] [pid 60677:tid 60712] [client 135.181.180.59:33070] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYmjnFyBgzfmDf6GaeuV_gAAAsE"]
[Mon Feb 09 17:06:38.881794 2026] [:error] [pid 60679:tid 60772] [client 135.181.180.59:33074] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYmjnsixhoT1e6Iv6g_GmwAAA1Q"]
[Mon Feb 09 17:06:41.300182 2026] [:error] [pid 47937:tid 47969] [client 135.181.180.59:33084] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYmjoc4Fd42MP2DhNrXJewAAABc"]
[Mon Feb 09 17:06:43.879617 2026] [:error] [pid 47938:tid 47995] [client 135.181.180.59:33086] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYmjo7VCzWE6fQJEkNL7nQAAAFA"]
[Mon Feb 09 17:06:46.443457 2026] [:error] [pid 47937:tid 47953] [client 135.181.180.59:46914] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYmjps4Fd42MP2DhNrXJfwAAAAc"]
[Mon Feb 09 17:06:49.008068 2026] [:error] [pid 60677:tid 60711] [client 135.181.180.59:46916] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYmjqVyBgzfmDf6GaeuWHAAAAsA"]
[Mon Feb 09 17:06:51.572654 2026] [:error] [pid 60619:tid 60646] [client 135.181.180.59:46932] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYmjq3Epg0UoeR8kJ-0WSgAAAkU"]
[Mon Feb 09 17:06:54.158634 2026] [:error] [pid 60676:tid 60703] [client 135.181.180.59:46944] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYmjrnhKcn7mJYMx5_CFqgAAApM"]
[Mon Feb 09 17:06:56.730559 2026] [:error] [pid 60676:tid 60696] [client 135.181.180.59:29212] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYmjsHhKcn7mJYMx5_CFsAAAAow"]
[Mon Feb 09 17:54:24.621197 2026] [:error] [pid 47937:tid 47953] [client 116.240.149.7:62182] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYmu0M4Fd42MP2DhNrXSQgAAAAc"]
[Mon Feb 09 17:54:28.678261 2026] [:error] [pid 60589:tid 60596] [client 116.240.149.7:60107] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYmu1DIJyhPWC0JyMLxvlQAAAcU"]
[Mon Feb 09 17:54:31.809253 2026] [:error] [pid 60508:tid 60530] [client 116.240.149.7:60302] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYmu1-XDvLC4ADfnEzOyLAAAAZQ"]
[Mon Feb 09 17:54:34.933109 2026] [:error] [pid 47938:tid 47983] [client 116.240.149.7:65065] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYmu2rVCzWE6fQJEkNIHsQAAAEQ"]
[Mon Feb 09 17:54:38.675125 2026] [:error] [pid 47937:tid 47970] [client 116.240.149.7:62286] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYmu3s4Fd42MP2DhNrXSSgAAABg"]
[Mon Feb 09 17:54:41.742374 2026] [:error] [pid 47938:tid 47988] [client 116.240.149.7:62125] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYmu4bVCzWE6fQJEkNIHuAAAAEk"]
[Mon Feb 09 17:54:45.461127 2026] [:error] [pid 47938:tid 47989] [client 116.240.149.7:60422] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aYmu5bVCzWE6fQJEkNIHvQAAAEo"]
[Mon Feb 09 17:54:48.461702 2026] [:error] [pid 60508:tid 60526] [client 116.240.149.7:60591] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYmu6OXDvLC4ADfnEzOyMwAAAZA"]
[Mon Feb 09 17:54:52.120640 2026] [:error] [pid 60679:tid 60757] [client 116.240.149.7:61638] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYmu7MixhoT1e6Iv6g_OTwAAA00"]
[Mon Feb 09 17:54:55.477564 2026] [:error] [pid 60677:tid 60778] [client 116.240.149.7:63722] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYmu71yBgzfmDf6Gaeul6QAAAtg"]
[Mon Feb 09 17:54:58.682561 2026] [:error] [pid 60679:tid 60754] [client 116.240.149.7:63173] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aYmu8sixhoT1e6Iv6g_OUgAAA0w"]
[Mon Feb 09 17:55:01.443997 2026] [:error] [pid 60619:tid 60646] [client 116.240.149.7:59432] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aYmu9XEpg0UoeR8kJ-0hsQAAAkU"]
[Mon Feb 09 17:55:05.134595 2026] [:error] [pid 60589:tid 60595] [client 116.240.149.7:59674] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aYmu-TIJyhPWC0JyMLxvsAAAAcQ"]
[Mon Feb 09 17:55:08.143793 2026] [:error] [pid 60677:tid 60742] [client 116.240.149.7:62272] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYmu_FyBgzfmDf6Gaeul-AAAAs8"]
[Mon Feb 09 17:55:11.295666 2026] [:error] [pid 47937:tid 47952] [client 116.240.149.7:64672] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aYmu_84Fd42MP2DhNrXSYwAAAAY"]
[Mon Feb 09 17:55:14.778285 2026] [:error] [pid 60677:tid 60756] [client 116.240.149.7:61672] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYmvAlyBgzfmDf6GaeumBAAAAtI"]
[Mon Feb 09 17:55:17.701723 2026] [:error] [pid 60589:tid 60600] [client 116.240.149.7:63771] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYmvBTIJyhPWC0JyMLxvxAAAAck"]
[Mon Feb 09 17:56:03.140333 2026] [:error] [pid 60589:tid 60606] [client 116.240.149.7:64446] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aYmvMzIJyhPWC0JyMLxv5AAAAc8"]
[Mon Feb 09 17:56:06.240716 2026] [:error] [pid 60677:tid 60773] [client 116.240.149.7:61377] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aYmvNlyBgzfmDf6GaeumVQAAAtY"]
[Mon Feb 09 17:56:09.170229 2026] [:error] [pid 60679:tid 60754] [client 116.240.149.7:62873] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYmvOcixhoT1e6Iv6g_OgwAAA0w"]
[Mon Feb 09 17:56:12.119710 2026] [:error] [pid 60676:tid 60695] [client 116.240.149.7:64438] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYmvPHhKcn7mJYMx5_COXwAAAos"]
[Mon Feb 09 17:56:14.975768 2026] [:error] [pid 60676:tid 60690] [client 116.240.149.7:59327] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYmvPnhKcn7mJYMx5_COYAAAAoY"]
[Mon Feb 09 17:56:18.295135 2026] [:error] [pid 47937:tid 47955] [client 116.240.149.7:60027] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYmvQs4Fd42MP2DhNrXSiQAAAAk"]
[Mon Feb 09 17:56:20.193650 2026] [:error] [pid 60619:tid 60647] [client 116.240.149.7:64167] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYmvRHEpg0UoeR8kJ-0iFgAAAkY"]
[Mon Feb 09 17:56:23.250450 2026] [:error] [pid 60508:tid 60516] [client 116.240.149.7:59943] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYmvR-XDvLC4ADfnEzOycAAAAYY"]
[Mon Feb 09 17:56:26.268017 2026] [:error] [pid 47938:tid 48000] [client 116.240.149.7:62348] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aYmvSrVCzWE6fQJEkNIIMgAAAFU"]
[Mon Feb 09 17:56:28.425700 2026] [:error] [pid 60677:tid 60770] [client 116.240.149.7:64988] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aYmvTFyBgzfmDf6GaeumcAAAAtU"]
[Mon Feb 09 17:56:31.687571 2026] [:error] [pid 60589:tid 60609] [client 116.240.149.7:60775] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aYmvTzIJyhPWC0JyMLxv_QAAAdI"]
[Mon Feb 09 17:56:34.201074 2026] [:error] [pid 60677:tid 60711] [client 116.240.149.7:59270] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYmvUlyBgzfmDf6GaeumdQAAAsA"]
[Mon Feb 09 19:58:36.559823 2026] [:error] [pid 60589:tid 60591] [client 43.165.65.180:50506] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYnL7DIJyhPWC0JyMLyLuAAAAcA"]
[Tue Feb 10 01:09:23.203331 2026] [:error] [pid 34139:tid 34160] [client 45.92.1.94:58486] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aYoUw-gedr85OdF4Mt3pOQAAAJE"]
[Tue Feb 10 01:09:23.703979 2026] [:error] [pid 34139:tid 34150] [client 45.92.1.94:58501] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aYoUw-gedr85OdF4Mt3pRAAAAIc"]
[Tue Feb 10 01:09:24.210490 2026] [:error] [pid 34139:tid 34167] [client 45.92.1.94:58536] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aYoUxOgedr85OdF4Mt3pTgAAAJg"]
[Tue Feb 10 01:09:26.378675 2026] [:error] [pid 34045:tid 34090] [client 45.92.1.94:58715] [client 45.92.1.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/txets.php"] [unique_id "aYoUxrYAPRwerv9YrkOD2AAAAE4"]
[Tue Feb 10 02:02:17.023327 2026] [:error] [pid 34139:tid 34146] [client 167.86.83.231:60965] [client 167.86.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "aYohKegedr85OdF4Mt0BlQAAAIM"], referer: binance.com
[Tue Feb 10 02:02:51.441842 2026] [autoindex:error] [pid 14069:tid 14084] [client 167.86.83.231:59486] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Feb 10 03:00:59.429235 2026] [:error] [pid 14194:tid 14213] [client 43.130.31.17:51854] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYou609dsx8pYaYQoNASMgAAAVA"]
[Tue Feb 10 04:31:55.950076 2026] [:error] [pid 47937:tid 47957] [client 104.209.173.99:48422] [client 104.209.173.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYpEO8pqXpC2CvJ3fONvhgAAANI"]
[Tue Feb 10 05:43:39.553141 2026] [:error] [pid 30054:tid 30064] [client 45.3.43.242:57195] [client 45.3.43.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aYpVC2ecgOOXCu-GgYUelQAAAQg"]
[Tue Feb 10 05:43:41.453606 2026] [:error] [pid 47830:tid 47855] [client 216.26.224.9:11485] [client 216.26.224.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aYpVDUco45BZs8e301A2IQAAAAk"]
[Tue Feb 10 05:43:42.090505 2026] [:error] [pid 47937:tid 47952] [client 216.26.255.120:51921] [client 216.26.255.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aYpVDspqXpC2CvJ3fOOSEQAAAM0"]
[Tue Feb 10 05:43:43.939038 2026] [:error] [pid 47837:tid 47907] [client 65.111.10.240:60033] [client 65.111.10.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aYpVD3FY8KYFPX79Z4nkEwAAAIc"]
[Tue Feb 10 05:43:45.212086 2026] [:error] [pid 47831:tid 47896] [client 216.26.243.99:52551] [client 216.26.243.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging"] [unique_id "aYpVESdxbZYarWVkiABC_gAAAFc"]
[Tue Feb 10 05:43:46.336263 2026] [:error] [pid 30054:tid 30061] [client 104.207.41.240:53857] [client 104.207.41.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging"] [unique_id "aYpVEmecgOOXCu-GgYUepgAAAQU"]
[Tue Feb 10 05:43:47.700638 2026] [:error] [pid 47937:tid 47945] [client 216.26.231.215:61593] [client 216.26.231.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "aYpVE8pqXpC2CvJ3fOOSHgAAAMY"]
[Tue Feb 10 05:43:49.601789 2026] [:error] [pid 47837:tid 47902] [client 104.207.60.38:43347] [client 104.207.60.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "aYpVFXFY8KYFPX79Z4nkIwAAAII"]
[Tue Feb 10 05:43:50.028473 2026] [:error] [pid 47937:tid 47942] [client 104.207.40.88:63379] [client 104.207.40.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.env"] [unique_id "aYpVFspqXpC2CvJ3fOOSIQAAAMM"]
[Tue Feb 10 05:43:51.495692 2026] [:error] [pid 47837:tid 47914] [client 154.213.162.158:28535] [client 154.213.162.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.env"] [unique_id "aYpVF3FY8KYFPX79Z4nkJwAAAI4"]
[Tue Feb 10 05:43:52.199721 2026] [:error] [pid 30054:tid 30061] [client 154.213.162.145:39281] [client 154.213.162.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "aYpVGGecgOOXCu-GgYUeyAAAAQU"]
[Tue Feb 10 05:43:53.374805 2026] [:error] [pid 47937:tid 47943] [client 65.111.0.44:50991] [client 65.111.0.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "aYpVGcpqXpC2CvJ3fOOSKwAAAMQ"]
[Tue Feb 10 05:43:54.121491 2026] [:error] [pid 47837:tid 47913] [client 104.207.43.94:31477] [client 104.207.43.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "aYpVGnFY8KYFPX79Z4nkLgAAAI0"]
[Tue Feb 10 05:43:54.959208 2026] [:error] [pid 47937:tid 47955] [client 104.207.39.48:45433] [client 104.207.39.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "aYpVGspqXpC2CvJ3fOOSMgAAANA"]
[Tue Feb 10 05:43:56.818825 2026] [:error] [pid 30054:tid 30080] [client 65.111.23.2:36551] [client 65.111.23.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/backend/.env"] [unique_id "aYpVHGecgOOXCu-GgYUe2wAAARg"]
[Tue Feb 10 05:43:58.442042 2026] [:error] [pid 47837:tid 47903] [client 104.207.63.13:38501] [client 104.207.63.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/frontend/.env"] [unique_id "aYpVHnFY8KYFPX79Z4nkQAAAAIM"]
[Tue Feb 10 05:43:59.397450 2026] [:error] [pid 30054:tid 30058] [client 104.207.47.80:17307] [client 104.207.47.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/frontend/.env"] [unique_id "aYpVH2ecgOOXCu-GgYUe4QAAAQI"]
[Tue Feb 10 05:44:00.332201 2026] [:error] [pid 47937:tid 47950] [client 209.50.177.84:12071] [client 209.50.177.84] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aYpVIMpqXpC2CvJ3fOOSRgAAAMs"]
[Tue Feb 10 05:44:02.039635 2026] [:error] [pid 47837:tid 47901] [client 45.3.37.64:36349] [client 45.3.37.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aYpVInFY8KYFPX79Z4nkTAAAAIE"]
[Tue Feb 10 05:44:02.665639 2026] [:error] [pid 30054:tid 30074] [client 45.3.39.27:29957] [client 45.3.39.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/config/.env"] [unique_id "aYpVImecgOOXCu-GgYUe4wAAARI"]
[Tue Feb 10 05:44:04.060451 2026] [:error] [pid 47830:tid 47855] [client 65.111.28.19:50495] [client 65.111.28.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/config/.env"] [unique_id "aYpVJEco45BZs8e301A2QAAAAAk"]
[Tue Feb 10 05:44:04.597448 2026] [:error] [pid 47831:tid 47896] [client 216.26.233.42:20749] [client 216.26.233.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYpVJCdxbZYarWVkiABDJgAAAFc"]
[Tue Feb 10 05:44:05.431371 2026] [:error] [pid 47937:tid 47945] [client 45.3.35.136:56775] [client 45.3.35.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYpVJcpqXpC2CvJ3fOOSWQAAAMY"]
[Tue Feb 10 05:44:05.857925 2026] [:error] [pid 47837:tid 47916] [client 104.207.47.164:45645] [client 104.207.47.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/dev/.git/config"] [unique_id "aYpVJXFY8KYFPX79Z4nkVAAAAJA"]
[Tue Feb 10 05:44:06.830116 2026] [:error] [pid 47837:tid 47920] [client 216.26.234.156:30749] [client 216.26.234.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/dev/.git/config"] [unique_id "aYpVJnFY8KYFPX79Z4nkWAAAAJQ"]
[Tue Feb 10 05:44:07.316754 2026] [:error] [pid 47830:tid 47849] [client 104.207.60.231:53287] [client 104.207.60.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.git/config"] [unique_id "aYpVJ0co45BZs8e301A2RQAAAAM"]
[Tue Feb 10 05:44:08.741281 2026] [:error] [pid 30054:tid 30071] [client 65.111.29.172:14441] [client 65.111.29.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.git/config"] [unique_id "aYpVKGecgOOXCu-GgYUe6AAAAQ8"]
[Tue Feb 10 05:44:09.439157 2026] [:error] [pid 30054:tid 30068] [client 65.111.23.198:58427] [client 65.111.23.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/v2/.git/config"] [unique_id "aYpVKWecgOOXCu-GgYUe7QAAAQw"]
[Tue Feb 10 05:44:10.330392 2026] [:error] [pid 47831:tid 47895] [client 216.26.226.236:50853] [client 216.26.226.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/v2/.git/config"] [unique_id "aYpVKidxbZYarWVkiABDNAAAAFY"]
[Tue Feb 10 05:44:10.737791 2026] [:error] [pid 30054:tid 30078] [client 209.50.174.70:39879] [client 209.50.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/.git/config"] [unique_id "aYpVKmecgOOXCu-GgYUe8gAAARY"]
[Tue Feb 10 05:44:12.143861 2026] [:error] [pid 47937:tid 47943] [client 45.3.40.172:22189] [client 45.3.40.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/.git/config"] [unique_id "aYpVLMpqXpC2CvJ3fOOSfAAAAMQ"]
[Tue Feb 10 05:44:12.779610 2026] [:error] [pid 47830:tid 47870] [client 65.111.24.11:54239] [client 65.111.24.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/test/.git/config"] [unique_id "aYpVLEco45BZs8e301A2RwAAABg"]
[Tue Feb 10 05:44:14.603322 2026] [:error] [pid 47937:tid 47939] [client 209.50.165.72:54097] [client 209.50.165.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/test/.git/config"] [unique_id "aYpVLspqXpC2CvJ3fOOSkQAAAMA"]
[Tue Feb 10 05:44:15.557111 2026] [:error] [pid 47830:tid 47851] [client 45.3.36.223:16527] [client 45.3.36.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.git/config"] [unique_id "aYpVL0co45BZs8e301A2UgAAAAU"]
[Tue Feb 10 05:44:16.180385 2026] [:error] [pid 47830:tid 47857] [client 65.111.24.138:59389] [client 65.111.24.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/backup/.git/config"] [unique_id "aYpVMEco45BZs8e301A2VgAAAAs"]
[Tue Feb 10 05:44:17.350158 2026] [:error] [pid 47937:tid 47951] [client 209.50.168.236:54551] [client 209.50.168.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/backup/.git/config"] [unique_id "aYpVMcpqXpC2CvJ3fOOSlQAAAMw"]
[Tue Feb 10 05:44:18.226665 2026] [:error] [pid 47830:tid 47861] [client 65.111.13.176:21611] [client 65.111.13.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/site/.git/config"] [unique_id "aYpVMkco45BZs8e301A2YQAAAA8"]
[Tue Feb 10 05:44:19.642915 2026] [:error] [pid 30054:tid 30075] [client 45.3.45.43:23597] [client 45.3.45.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/site/.git/config"] [unique_id "aYpVM2ecgOOXCu-GgYUe_gAAARM"]
[Tue Feb 10 05:44:21.555898 2026] [:error] [pid 47831:tid 47892] [client 154.213.166.14:45715] [client 154.213.166.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.git/config"] [unique_id "aYpVNSdxbZYarWVkiABDYgAAAFM"]
[Tue Feb 10 05:44:22.064595 2026] [:error] [pid 47831:tid 47878] [client 65.111.4.254:44845] [client 65.111.4.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/new/.git/config"] [unique_id "aYpVNidxbZYarWVkiABDZQAAAEU"]
[Tue Feb 10 05:44:23.042671 2026] [:error] [pid 47831:tid 47877] [client 104.207.48.199:62085] [client 104.207.48.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/new/.git/config"] [unique_id "aYpVNydxbZYarWVkiABDbgAAAEQ"]
[Tue Feb 10 06:34:25.023859 2026] [:error] [pid 47831:tid 47881] [client 101.33.81.73:38512] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYpg8SdxbZYarWVkiABY3AAAAEg"]
[Tue Feb 10 07:35:13.684277 2026] [:error] [pid 47831:tid 47891] [client 103.244.176.108:11388] [client 103.244.176.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.244.176.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYpvMSdxbZYarWVkiAB5TwAAAFI"]
[Tue Feb 10 09:45:58.757291 2026] [:error] [pid 47837:tid 47911] [client 51.195.103.76:49762] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYqN1nFY8KYFPX79Z4k9FgAAAIs"]
[Tue Feb 10 10:11:59.139271 2026] [:error] [pid 59407:tid 59424] [client 147.135.252.138:51048] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aYqT72LlhBXE3qmX-JmNDQAAAU8"]
[Tue Feb 10 10:12:01.474912 2026] [:error] [pid 47837:tid 47924] [client 147.135.252.138:37772] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aYqT8XFY8KYFPX79Z4lDqwAAAJg"]
[Tue Feb 10 10:12:03.875422 2026] [:error] [pid 47837:tid 47909] [client 147.135.252.138:37788] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aYqT83FY8KYFPX79Z4lDtwAAAIk"]
[Tue Feb 10 10:12:06.392226 2026] [:error] [pid 47830:tid 47854] [client 147.135.252.138:37802] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aYqT9kco45BZs8e301CgowAAAAg"]
[Tue Feb 10 10:12:08.904479 2026] [:error] [pid 47937:tid 47951] [client 147.135.252.138:37806] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aYqT-MpqXpC2CvJ3fOP5fQAAAMw"]
[Tue Feb 10 10:12:11.269734 2026] [:error] [pid 59544:tid 59572] [client 147.135.252.138:48620] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aYqT-6ZySR9mFY4BailaNgAAAZU"]
[Tue Feb 10 10:12:13.753744 2026] [:error] [pid 30054:tid 30069] [client 147.135.252.138:48632] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYqT_WecgOOXCu-GgYWq8gAAAQ0"]
[Tue Feb 10 10:12:16.280359 2026] [:error] [pid 59544:tid 59555] [client 147.135.252.138:48636] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYqUAKZySR9mFY4BailaPwAAAYc"]
[Tue Feb 10 10:12:18.798771 2026] [:error] [pid 59407:tid 59419] [client 147.135.252.138:48646] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYqUAmLlhBXE3qmX-JmNHQAAAUo"]
[Tue Feb 10 10:12:21.282411 2026] [:error] [pid 30054:tid 30062] [client 147.135.252.138:41450] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYqUBWecgOOXCu-GgYWq-gAAAQY"]
[Tue Feb 10 10:12:23.790811 2026] [:error] [pid 47831:tid 47875] [client 147.135.252.138:41452] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYqUBydxbZYarWVkiACvpgAAAEI"]
[Tue Feb 10 10:12:26.339329 2026] [:error] [pid 47831:tid 47880] [client 147.135.252.138:41458] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYqUCidxbZYarWVkiACvrgAAAEc"]
[Tue Feb 10 10:12:28.848931 2026] [:error] [pid 30054:tid 30077] [client 147.135.252.138:41472] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYqUDGecgOOXCu-GgYWrJgAAARU"]
[Tue Feb 10 10:12:31.352274 2026] [:error] [pid 47830:tid 47870] [client 147.135.252.138:48746] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYqUD0co45BZs8e301Cg4QAAABg"]
[Tue Feb 10 10:12:33.876053 2026] [:error] [pid 59407:tid 59432] [client 147.135.252.138:48762] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYqUEWLlhBXE3qmX-JmNJQAAAVc"]
[Tue Feb 10 10:12:36.374684 2026] [:error] [pid 47837:tid 47915] [client 147.135.252.138:48764] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYqUFHFY8KYFPX79Z4lD5AAAAI8"]
[Tue Feb 10 10:12:38.888983 2026] [:error] [pid 47837:tid 47914] [client 147.135.252.138:48772] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYqUFnFY8KYFPX79Z4lD7AAAAI4"]
[Tue Feb 10 10:12:41.387844 2026] [:error] [pid 47937:tid 47945] [client 147.135.252.138:57650] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYqUGcpqXpC2CvJ3fOP5rgAAAMY"]
[Tue Feb 10 10:12:43.770072 2026] [:error] [pid 7704:tid 7714] [client 147.135.252.138:57654] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYqUG_0EcqgVBUs6CW2OGQAAAcc"]
[Tue Feb 10 10:12:46.300456 2026] [:error] [pid 59544:tid 59576] [client 147.135.252.138:57660] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYqUHqZySR9mFY4BailamAAAAZg"]
[Tue Feb 10 10:12:48.674813 2026] [:error] [pid 59407:tid 59429] [client 147.135.252.138:57662] [client 147.135.252.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYqUIGLlhBXE3qmX-JmNcwAAAVQ"]
[Tue Feb 10 11:42:01.023771 2026] [:error] [pid 47837:tid 47905] [client 136.144.43.34:59749] [client 136.144.43.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYqpCXFY8KYFPX79Z4le2gAAAIU"], referer: https://www.google.com/
[Tue Feb 10 11:42:02.523545 2026] [:error] [pid 47831:tid 47897] [client 136.144.43.7:46721] [client 136.144.43.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYqpCidxbZYarWVkiADFqAAAAFg"], referer: https://www.google.com/
[Tue Feb 10 11:42:33.956699 2026] [:error] [pid 30054:tid 30080] [client 136.144.43.16:34315] [client 136.144.43.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYqpKWecgOOXCu-GgYXCGAAAARg"], referer: https://www.google.com/
[Tue Feb 10 11:45:05.711077 2026] [:error] [pid 47937:tid 47944] [client 136.144.43.29:37205] [client 136.144.43.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYqpwcpqXpC2CvJ3fOMY9wAAAMU"], referer: https://www.google.com/
[Tue Feb 10 11:45:37.293308 2026] [:error] [pid 59544:tid 59570] [client 136.144.43.9:22729] [client 136.144.43.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYqp4aZySR9mFY4Bail1ewAAAZM"], referer: https://www.google.com/
[Tue Feb 10 11:45:38.769154 2026] [:error] [pid 59407:tid 59429] [client 136.144.43.29:48353] [client 136.144.43.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYqp4mLlhBXE3qmX-JmkKgAAAVQ"], referer: https://www.google.com/
[Tue Feb 10 11:45:40.265635 2026] [:error] [pid 30054:tid 30058] [client 136.144.43.31:39987] [client 136.144.43.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.31, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYqp5GecgOOXCu-GgYXCrwAAAQI"], referer: https://www.google.com/
[Tue Feb 10 11:45:41.843412 2026] [:error] [pid 47830:tid 47866] [client 136.144.43.21:22619] [client 136.144.43.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.21, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYqp5Uco45BZs8e301DMsQAAABQ"], referer: https://www.google.com/
[Tue Feb 10 11:50:04.837426 2026] [:error] [pid 59407:tid 59429] [client 136.144.43.15:37205] [client 136.144.43.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.15, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYqq7GLlhBXE3qmX-JmlQwAAAVQ"], referer: https://www.google.com/
[Tue Feb 10 11:50:06.366060 2026] [:error] [pid 47937:tid 47949] [client 136.144.43.10:37717] [client 136.144.43.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYqq7spqXpC2CvJ3fOMaPgAAAMo"], referer: https://www.google.com/
[Tue Feb 10 11:51:07.859925 2026] [:error] [pid 7704:tid 7722] [client 136.144.43.10:46317] [client 136.144.43.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYqrK_0EcqgVBUs6CW2l3wAAAc8"], referer: https://www.google.com/
[Tue Feb 10 13:07:05.766485 2026] [ssl:error] [pid 47831:tid 47884] [client 91.243.22.180:44518] AH02032: Hostname hbtwo.com.au provided via SNI and hostname hotbooksbookeeping2.com provided via HTTP have no compatible SSL setup
[Tue Feb 10 14:19:29.977453 2026] [:error] [pid 59544:tid 59570] [client 104.244.78.102:39605] [client 104.244.78.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.78.102, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYrN8aZySR9mFY4Baimf2AAAAZM"], referer: https://www.hotbooksbookeeping2.com/wp-login.php
[Tue Feb 10 14:20:39.351263 2026] [:error] [pid 47837:tid 47920] [client 104.244.78.102:44594] [client 104.244.78.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.78.102, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYrON3FY8KYFPX79Z4mOJQAAAJQ"], referer: https://www.hotbooksbookeeping2.com/wp-login.php
[Tue Feb 10 17:01:55.106022 2026] [:error] [pid 7704:tid 7709] [client 123.187.240.242:54090] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYr0A_0EcqgVBUs6CW3tYAAAAcI"]
[Tue Feb 10 19:04:36.012693 2026] [:error] [pid 59407:tid 59432] [client 45.55.233.250:33516] [client 45.55.233.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYsQxGLlhBXE3qmX-JkQPwAAAVc"]
[Tue Feb 10 19:04:39.473073 2026] [:error] [pid 30054:tid 30069] [client 45.55.233.250:48550] [client 45.55.233.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYsQx2ecgOOXCu-GgYUotAAAAQ0"]
[Tue Feb 10 20:42:10.845424 2026] [:error] [pid 59407:tid 59421] [client 49.51.243.95:46922] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYsnomLlhBXE3qmX-JkmhwAAAUw"]
[Wed Feb 11 02:09:56.765498 2026] [:error] [pid 46779:tid 46831] [client 209.9.200.163:41192] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYt0dNZrCpVdS6yMMkdctQAAAIQ"]
[Wed Feb 11 02:10:07.091081 2026] [:error] [pid 46635:tid 46653] [client 209.9.200.163:43833] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYt0f0sK6EAyFtFakLpQDQAAAFA"]
[Wed Feb 11 02:10:12.938461 2026] [:error] [pid 46525:tid 46576] [client 209.9.200.163:35012] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYt0hAlEqQj0Mpse0PlK2wAAAAM"]
[Wed Feb 11 02:10:15.921781 2026] [:error] [pid 46779:tid 46843] [client 209.9.200.163:58018] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aYt0h9ZrCpVdS6yMMkdc1gAAAI8"]
[Wed Feb 11 02:10:30.200138 2026] [:error] [pid 14802:tid 14906] [client 209.9.200.163:17179] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aYt0liallVxgXDlFFibU6wAAANE"]
[Wed Feb 11 02:10:34.397812 2026] [:error] [pid 14803:tid 14929] [client 209.9.200.163:40930] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aYt0mrwzY9_NIasL_OXZ-gAAAQw"]
[Wed Feb 11 02:10:37.658604 2026] [:error] [pid 15011:tid 15028] [client 209.9.200.163:49655] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYt0nV-gTNLV94AtLrgBJwAAAc8"]
[Wed Feb 11 02:10:41.318118 2026] [:error] [pid 46779:tid 46837] [client 209.9.200.163:34396] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aYt0odZrCpVdS6yMMkddFwAAAIk"]
[Wed Feb 11 02:10:44.446623 2026] [:error] [pid 14802:tid 14902] [client 209.9.200.163:61139] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYt0pCallVxgXDlFFibU8wAAAM0"]
[Wed Feb 11 02:11:39.598780 2026] [:error] [pid 46779:tid 46834] [client 209.9.200.163:25231] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aYt029ZrCpVdS6yMMkddkgAAAIc"]
[Wed Feb 11 02:11:42.360754 2026] [:error] [pid 14802:tid 14908] [client 209.9.200.163:40957] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aYt03iallVxgXDlFFibVPAAAANM"]
[Wed Feb 11 02:11:44.986643 2026] [:error] [pid 15011:tid 15036] [client 209.9.200.163:26498] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aYt04F-gTNLV94AtLrgBaQAAAdc"]
[Wed Feb 11 02:11:48.063927 2026] [:error] [pid 14802:tid 14901] [client 209.9.200.163:20068] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aYt05CallVxgXDlFFibVQgAAAMw"]
[Wed Feb 11 02:11:51.007444 2026] [:error] [pid 46525:tid 46591] [client 209.9.200.163:6398] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aYt05wlEqQj0Mpse0PlLOwAAABI"]
[Wed Feb 11 02:11:54.055818 2026] [:error] [pid 46635:tid 46651] [client 209.9.200.163:10629] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYt06ksK6EAyFtFakLpQpQAAAE4"]
[Wed Feb 11 02:11:56.834051 2026] [:error] [pid 46779:tid 46828] [client 209.9.200.163:35763] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aYt07NZrCpVdS6yMMkddoQAAAII"]
[Wed Feb 11 02:11:59.387994 2026] [:error] [pid 46525:tid 46584] [client 209.9.200.163:63143] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aYt07wlEqQj0Mpse0PlLTgAAAAs"]
[Wed Feb 11 02:12:02.132242 2026] [:error] [pid 46779:tid 46837] [client 209.9.200.163:36774] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aYt08tZrCpVdS6yMMkddrAAAAIk"]
[Wed Feb 11 02:12:04.728759 2026] [:error] [pid 46779:tid 46843] [client 209.9.200.163:37843] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYt09NZrCpVdS6yMMkddrwAAAI8"]
[Wed Feb 11 03:26:51.254992 2026] [:error] [pid 46525:tid 46590] [client 147.135.212.202:49648] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYuGewlEqQj0Mpse0Ple9wAAABE"]
[Wed Feb 11 06:20:42.748178 2026] [:error] [pid 22569:tid 22589] [client 217.77.10.74:65055] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYuvOsAhSI7iX9G3enhaBAAAAZA"]
[Wed Feb 11 06:48:34.173771 2026] [:error] [pid 27966:tid 28040] [client 14.215.163.132:51633] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYu1wl8HJ9ydyf0SPu7LlgAAAIo"]
[Wed Feb 11 09:01:40.605821 2026] [:error] [pid 27966:tid 28042] [client 45.148.10.247:34230] [client 45.148.10.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYvU9F8HJ9ydyf0SPu7zMgAAAIw"]
[Wed Feb 11 11:42:51.091812 2026] [:error] [pid 27966:tid 28051] [client 104.131.41.113:54424] [client 104.131.41.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYv6u18HJ9ydyf0SPu4qJgAAAJU"]
[Wed Feb 11 11:42:58.121256 2026] [:error] [pid 27965:tid 28023] [client 104.131.41.113:36664] [client 104.131.41.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYv6wtHLAUAIo8qpZyHKWwAAAFQ"]
[Wed Feb 11 14:34:32.310980 2026] [:error] [pid 22569:tid 22591] [client 107.189.29.231:56466] [client 107.189.29.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.231, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYwi-MAhSI7iX9G3enjddgAAAZI"]
[Wed Feb 11 14:34:38.248260 2026] [:error] [pid 22569:tid 22592] [client 107.189.29.231:56466] [client 107.189.29.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.231, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aYwi_sAhSI7iX9G3enjdpQAAAZM"]
[Wed Feb 11 15:28:40.467610 2026] [:error] [pid 27965:tid 28010] [client 43.131.36.84:57694] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYwvqNHLAUAIo8qpZyEKTgAAAEc"]
[Wed Feb 11 15:47:16.263267 2026] [autoindex:error] [pid 27964:tid 27995] [client 172.213.26.245:31938] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:47:18.200213 2026] [:error] [pid 27964:tid 27984] [client 172.213.26.245:31938] [client 172.213.26.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYw0Bsp0XgWYHLcQtEiELgAAAAk"]
[Wed Feb 11 15:47:22.569152 2026] [autoindex:error] [pid 22569:tid 22586] [client 172.213.26.245:30356] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 15:47:32.817311 2026] [:error] [pid 22569:tid 22590] [client 172.213.26.245:30356] [client 172.213.26.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYw0FMAhSI7iX9G3enjwJAAAAZE"]
[Wed Feb 11 15:47:34.946656 2026] [:error] [pid 28073:tid 28079] [client 172.213.26.245:39233] [client 172.213.26.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYw0FoeHYIlOlF-DsMxkOgAAAMQ"]
[Wed Feb 11 15:47:37.979521 2026] [:error] [pid 27966:tid 28037] [client 172.213.26.245:38409] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aYw0GV8HJ9ydyf0SPu5quwAAAIc"]
[Wed Feb 11 15:47:40.663571 2026] [:error] [pid 27965:tid 28005] [client 172.213.26.245:36587] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aYw0HNHLAUAIo8qpZyEPhQAAAEI"]
[Wed Feb 11 15:47:42.040546 2026] [:error] [pid 27965:tid 28008] [client 172.213.26.245:39251] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aYw0HtHLAUAIo8qpZyEPhwAAAEU"]
[Wed Feb 11 15:47:43.906064 2026] [:error] [pid 27965:tid 28012] [client 172.213.26.245:33844] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aYw0H9HLAUAIo8qpZyEPnQAAAEk"]
[Wed Feb 11 15:47:44.996537 2026] [:error] [pid 27964:tid 27975] [client 172.213.26.245:33806] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aYw0IMp0XgWYHLcQtEiETwAAAAA"]
[Wed Feb 11 15:47:47.152444 2026] [:error] [pid 17401:tid 17414] [client 172.213.26.245:38413] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aYw0Iw0lHeayTY40t34n6gAAAQs"]
[Wed Feb 11 15:47:48.378728 2026] [:error] [pid 27964:tid 27992] [client 172.213.26.245:38463] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aYw0JMp0XgWYHLcQtEiEVwAAABE"]
[Wed Feb 11 15:47:49.315410 2026] [:error] [pid 27966:tid 28045] [client 172.213.26.245:36598] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aYw0JV8HJ9ydyf0SPu5q7wAAAI8"]
[Wed Feb 11 15:47:50.238653 2026] [:error] [pid 28073:tid 28081] [client 172.213.26.245:50279] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aYw0JoeHYIlOlF-DsMxkVAAAAMY"]
[Wed Feb 11 15:47:51.448370 2026] [:error] [pid 22537:tid 22541] [client 172.213.26.245:32850] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aYw0Jyfg2TagwM3bvQO6bQAAAUI"]
[Wed Feb 11 15:47:52.405689 2026] [:error] [pid 27966:tid 28037] [client 172.213.26.245:38417] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aYw0KF8HJ9ydyf0SPu5q8gAAAIc"]
[Wed Feb 11 15:47:53.648165 2026] [:error] [pid 22537:tid 22558] [client 172.213.26.245:33843] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aYw0KSfg2TagwM3bvQO6cwAAAVM"]
[Wed Feb 11 15:47:54.480503 2026] [:error] [pid 27965:tid 28008] [client 172.213.26.245:49704] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aYw0KtHLAUAIo8qpZyEP6AAAAEU"]
[Wed Feb 11 15:47:55.755194 2026] [:error] [pid 27964:tid 27999] [client 172.213.26.245:38419] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aYw0K8p0XgWYHLcQtEiEYQAAABg"]
[Wed Feb 11 15:47:58.358993 2026] [:error] [pid 17401:tid 17427] [client 172.213.26.245:31899] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aYw0Lg0lHeayTY40t34n8AAAARg"]
[Wed Feb 11 15:47:59.143461 2026] [:error] [pid 27966:tid 28031] [client 172.213.26.245:31962] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aYw0L18HJ9ydyf0SPu5q-QAAAIE"]
[Wed Feb 11 15:48:00.400345 2026] [:error] [pid 27965:tid 28022] [client 172.213.26.245:30351] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aYw0MNHLAUAIo8qpZyEP7QAAAFM"]
[Wed Feb 11 15:48:01.330381 2026] [:error] [pid 27964:tid 27975] [client 172.213.26.245:32876] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aYw0Mcp0XgWYHLcQtEiEcgAAAAA"]
[Wed Feb 11 15:48:03.251711 2026] [:error] [pid 27965:tid 28025] [client 172.213.26.245:33853] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aYw0M9HLAUAIo8qpZyEP8wAAAFY"]
[Wed Feb 11 15:48:04.577248 2026] [:error] [pid 27964:tid 27976] [client 172.213.26.245:50269] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aYw0NMp0XgWYHLcQtEiEggAAAAE"]
[Wed Feb 11 15:48:05.668624 2026] [:error] [pid 27964:tid 27984] [client 172.213.26.245:50246] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aYw0Ncp0XgWYHLcQtEiEhQAAAAk"]
[Wed Feb 11 15:48:07.325238 2026] [:error] [pid 27965:tid 28022] [client 172.213.26.245:30083] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aYw0N9HLAUAIo8qpZyEP-gAAAFM"]
[Wed Feb 11 15:48:08.368565 2026] [:error] [pid 17401:tid 17424] [client 172.213.26.245:31934] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aYw0OA0lHeayTY40t34n8wAAARU"]
[Wed Feb 11 15:48:09.612779 2026] [:error] [pid 17401:tid 17422] [client 172.213.26.245:31453] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aYw0OQ0lHeayTY40t34n9wAAARM"]
[Wed Feb 11 15:48:10.912609 2026] [:error] [pid 22569:tid 22587] [client 172.213.26.245:38425] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aYw0OsAhSI7iX9G3enjweQAAAY4"]
[Wed Feb 11 15:48:11.951421 2026] [:error] [pid 27965:tid 28014] [client 172.213.26.245:49687] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aYw0O9HLAUAIo8qpZyEP_gAAAEs"]
[Wed Feb 11 15:48:13.010215 2026] [:error] [pid 28073:tid 28090] [client 172.213.26.245:38401] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aYw0PYeHYIlOlF-DsMxkbQAAAM8"]
[Wed Feb 11 15:48:13.989805 2026] [:error] [pid 27965:tid 28020] [client 172.213.26.245:38450] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aYw0PdHLAUAIo8qpZyEQBQAAAFE"]
[Wed Feb 11 15:48:15.069342 2026] [:error] [pid 27966:tid 28044] [client 172.213.26.245:30088] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aYw0P18HJ9ydyf0SPu5rBQAAAI4"]
[Wed Feb 11 15:48:15.811307 2026] [:error] [pid 27965:tid 28024] [client 172.213.26.245:36554] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aYw0P9HLAUAIo8qpZyEQCQAAAFU"]
[Wed Feb 11 15:48:16.645379 2026] [:error] [pid 27964:tid 27984] [client 172.213.26.245:31971] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aYw0QMp0XgWYHLcQtEiEigAAAAk"]
[Wed Feb 11 15:48:17.739996 2026] [:error] [pid 27966:tid 28042] [client 172.213.26.245:39241] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aYw0QV8HJ9ydyf0SPu5rCQAAAIw"]
[Wed Feb 11 15:48:19.124031 2026] [:error] [pid 28073:tid 28089] [client 172.213.26.245:31919] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aYw0Q4eHYIlOlF-DsMxkcgAAAM4"]
[Wed Feb 11 15:48:20.103829 2026] [:error] [pid 28073:tid 28092] [client 172.213.26.245:30353] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aYw0RIeHYIlOlF-DsMxkcwAAANE"]
[Wed Feb 11 15:48:21.118792 2026] [:error] [pid 28073:tid 28096] [client 172.213.26.245:31426] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aYw0RYeHYIlOlF-DsMxkeAAAANU"]
[Wed Feb 11 15:48:22.152109 2026] [:error] [pid 28073:tid 28098] [client 172.213.26.245:38429] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aYw0RoeHYIlOlF-DsMxkegAAANc"]
[Wed Feb 11 15:48:22.932832 2026] [:error] [pid 22569:tid 22581] [client 172.213.26.245:33133] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aYw0RsAhSI7iX9G3enjwiQAAAYg"]
[Wed Feb 11 15:48:24.832952 2026] [:error] [pid 28073:tid 28091] [client 172.213.26.245:29903] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aYw0SIeHYIlOlF-DsMxkgwAAANA"]
[Wed Feb 11 15:48:26.623125 2026] [:error] [pid 17401:tid 17416] [client 172.213.26.245:30380] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aYw0Sg0lHeayTY40t34n_gAAAQ0"]
[Wed Feb 11 15:48:28.660792 2026] [:error] [pid 27965:tid 28006] [client 172.213.26.245:33810] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aYw0TNHLAUAIo8qpZyEQUAAAAEM"]
[Wed Feb 11 15:48:45.673652 2026] [:error] [pid 22570:tid 22609] [client 172.213.26.245:50264] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aYw0XSE5uSe043FXwQosxwAAAck"]
[Wed Feb 11 15:48:47.313262 2026] [:error] [pid 22570:tid 22602] [client 172.213.26.245:31472] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aYw0XyE5uSe043FXwQosygAAAcI"]
[Wed Feb 11 15:48:48.547317 2026] [:error] [pid 22569:tid 22592] [client 172.213.26.245:44108] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aYw0YMAhSI7iX9G3enjwrQAAAZM"]
[Wed Feb 11 15:48:49.684825 2026] [:error] [pid 22569:tid 22578] [client 172.213.26.245:36550] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aYw0YcAhSI7iX9G3enjwrwAAAYU"]
[Wed Feb 11 15:48:51.325857 2026] [:error] [pid 28073:tid 28086] [client 172.213.26.245:31917] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aYw0Y4eHYIlOlF-DsMxk5QAAAMs"]
[Wed Feb 11 15:48:52.736748 2026] [:error] [pid 27965:tid 28009] [client 172.213.26.245:40441] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aYw0ZNHLAUAIo8qpZyEQnQAAAEY"]
[Wed Feb 11 15:48:54.120133 2026] [:error] [pid 22569:tid 22589] [client 172.213.26.245:36574] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aYw0ZsAhSI7iX9G3enjwtAAAAZA"]
[Wed Feb 11 15:48:55.378203 2026] [:error] [pid 27966:tid 28049] [client 172.213.26.245:41282] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aYw0Z18HJ9ydyf0SPu5rhQAAAJM"]
[Wed Feb 11 15:48:56.179157 2026] [:error] [pid 22570:tid 22603] [client 172.213.26.245:40413] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aYw0aCE5uSe043FXwQos0gAAAcM"]
[Wed Feb 11 15:48:57.163193 2026] [:error] [pid 27965:tid 28015] [client 172.213.26.245:32476] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aYw0adHLAUAIo8qpZyEQpwAAAEw"]
[Wed Feb 11 15:48:57.835577 2026] [:error] [pid 17401:tid 17405] [client 172.213.26.245:38077] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aYw0aQ0lHeayTY40t34oMgAAAQI"]
[Wed Feb 11 15:48:58.435429 2026] [:error] [pid 22569:tid 22592] [client 172.213.26.245:29825] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aYw0asAhSI7iX9G3enjwuAAAAZM"]
[Wed Feb 11 15:48:59.597842 2026] [:error] [pid 27966:tid 28049] [client 172.213.26.245:29854] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aYw0a18HJ9ydyf0SPu5rmAAAAJM"]
[Wed Feb 11 15:49:00.884032 2026] [:error] [pid 22570:tid 22624] [client 172.213.26.245:36129] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aYw0bCE5uSe043FXwQotCQAAAdg"]
[Wed Feb 11 15:49:02.057211 2026] [:error] [pid 22570:tid 22623] [client 172.213.26.245:45706] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aYw0biE5uSe043FXwQotFwAAAdc"]
[Wed Feb 11 15:49:02.863695 2026] [:error] [pid 22570:tid 22602] [client 172.213.26.245:53369] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aYw0biE5uSe043FXwQotIgAAAcI"]
[Wed Feb 11 15:49:03.684320 2026] [:error] [pid 22537:tid 22540] [client 172.213.26.245:3104] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aYw0byfg2TagwM3bvQO61gAAAUE"]
[Wed Feb 11 15:49:04.718152 2026] [:error] [pid 27965:tid 28017] [client 172.213.26.245:42898] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aYw0cNHLAUAIo8qpZyEQrwAAAE4"]
[Wed Feb 11 15:49:05.712012 2026] [:error] [pid 27966:tid 28043] [client 172.213.26.245:34122] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aYw0cV8HJ9ydyf0SPu5rqQAAAI0"]
[Wed Feb 11 15:49:06.888182 2026] [:error] [pid 22570:tid 22602] [client 172.213.26.245:42431] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aYw0ciE5uSe043FXwQotRQAAAcI"]
[Wed Feb 11 15:49:07.954383 2026] [:error] [pid 27966:tid 28031] [client 172.213.26.245:42370] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aYw0c18HJ9ydyf0SPu5rrgAAAIE"]
[Wed Feb 11 15:49:08.925999 2026] [:error] [pid 27964:tid 27982] [client 172.213.26.245:31193] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aYw0dMp0XgWYHLcQtEiE2gAAAAc"]
[Wed Feb 11 15:49:10.153363 2026] [:error] [pid 17401:tid 17414] [client 172.213.26.245:38100] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aYw0dg0lHeayTY40t34oQAAAAQs"]
[Wed Feb 11 15:49:12.088879 2026] [:error] [pid 27964:tid 27987] [client 172.213.26.245:57834] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aYw0eMp0XgWYHLcQtEiE3wAAAAw"]
[Wed Feb 11 15:49:13.796572 2026] [:error] [pid 28073:tid 28084] [client 172.213.26.245:45463] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aYw0eYeHYIlOlF-DsMxlRAAAAMk"]
[Wed Feb 11 15:49:14.661430 2026] [:error] [pid 28073:tid 28095] [client 172.213.26.245:3874] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aYw0eoeHYIlOlF-DsMxlSAAAANQ"]
[Wed Feb 11 15:49:15.683314 2026] [:error] [pid 17401:tid 17423] [client 172.213.26.245:29463] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aYw0ew0lHeayTY40t34oRQAAARQ"]
[Wed Feb 11 15:49:16.472575 2026] [:error] [pid 28073:tid 28075] [client 172.213.26.245:42989] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aYw0fIeHYIlOlF-DsMxlTwAAAMA"]
[Wed Feb 11 15:49:17.208763 2026] [:error] [pid 27964:tid 27997] [client 172.213.26.245:54869] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aYw0fcp0XgWYHLcQtEiE6gAAABY"]
[Wed Feb 11 15:49:17.884170 2026] [:error] [pid 27964:tid 27978] [client 172.213.26.245:43324] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aYw0fcp0XgWYHLcQtEiE6wAAAAM"]
[Wed Feb 11 15:49:19.110996 2026] [:error] [pid 17401:tid 17410] [client 172.213.26.245:36950] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aYw0fw0lHeayTY40t34oRwAAAQc"]
[Wed Feb 11 15:49:20.092372 2026] [:error] [pid 17401:tid 17408] [client 172.213.26.245:37740] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aYw0gA0lHeayTY40t34oSAAAAQU"]
[Wed Feb 11 15:49:21.114724 2026] [:error] [pid 27965:tid 28005] [client 172.213.26.245:3972] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aYw0gdHLAUAIo8qpZyEQ0QAAAEI"]
[Wed Feb 11 15:49:22.674377 2026] [:error] [pid 27965:tid 28003] [client 172.213.26.245:33395] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aYw0gtHLAUAIo8qpZyEQ1gAAAEA"]
[Wed Feb 11 15:49:24.272076 2026] [:error] [pid 27965:tid 28006] [client 172.213.26.245:34732] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aYw0hNHLAUAIo8qpZyEQ3gAAAEM"]
[Wed Feb 11 15:49:25.424578 2026] [:error] [pid 22570:tid 22604] [client 172.213.26.245:45333] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aYw0hSE5uSe043FXwQotbQAAAcQ"]
[Wed Feb 11 15:49:27.148717 2026] [:error] [pid 27966:tid 28043] [client 172.213.26.245:31741] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aYw0h18HJ9ydyf0SPu5rwwAAAI0"]
[Wed Feb 11 15:49:29.794364 2026] [:error] [pid 27966:tid 28052] [client 172.213.26.245:45372] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aYw0iV8HJ9ydyf0SPu5rzgAAAJY"]
[Wed Feb 11 15:49:32.170967 2026] [:error] [pid 27965:tid 28025] [client 172.213.26.245:45337] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aYw0jNHLAUAIo8qpZyERBwAAAFY"]
[Wed Feb 11 15:49:34.993534 2026] [:error] [pid 17401:tid 17411] [client 172.213.26.245:44092] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aYw0jg0lHeayTY40t34oxgAAAQg"]
[Wed Feb 11 15:49:40.665994 2026] [:error] [pid 22569:tid 22590] [client 172.213.26.245:31708] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aYw0lMAhSI7iX9G3enjxEAAAAZE"]
[Wed Feb 11 15:49:59.763474 2026] [:error] [pid 28073:tid 28078] [client 172.213.26.245:30650] [client 172.213.26.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aYw0p4eHYIlOlF-DsMxlzwAAAMM"]
[Wed Feb 11 16:55:10.711673 2026] [:error] [pid 22569:tid 22591] [client 202.142.167.226:20630] [client 202.142.167.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.142.167.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aYxD7sAhSI7iX9G3engCiQAAAZI"]
[Wed Feb 11 17:04:51.445718 2026] [:error] [pid 22569:tid 22579] [client 202.142.167.226:15523] [client 202.142.167.226] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYxGM8AhSI7iX9G3engFCwAAAYY"]
[Wed Feb 11 18:38:48.419830 2026] [:error] [pid 22569:tid 22597] [client 62.84.185.56:19242] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aYxcOMAhSI7iX9G3engb8wAAAZg"]
[Wed Feb 11 18:38:51.120039 2026] [:error] [pid 28073:tid 28082] [client 62.84.185.56:19244] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aYxcO4eHYIlOlF-DsMyxSgAAAMc"]
[Wed Feb 11 18:38:53.747487 2026] [:error] [pid 27966:tid 28030] [client 62.84.185.56:19248] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aYxcPV8HJ9ydyf0SPu6b_wAAAIA"]
[Wed Feb 11 18:38:56.430378 2026] [:error] [pid 27966:tid 28043] [client 62.84.185.56:62374] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aYxcQF8HJ9ydyf0SPu6cBAAAAI0"]
[Wed Feb 11 18:38:59.220590 2026] [:error] [pid 17401:tid 17419] [client 62.84.185.56:62378] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aYxcQw0lHeayTY40t35SHAAAARA"]
[Wed Feb 11 18:39:01.970745 2026] [:error] [pid 22570:tid 22622] [client 62.84.185.56:62380] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aYxcRSE5uSe043FXwQpaKQAAAdY"]
[Wed Feb 11 18:39:04.619700 2026] [:error] [pid 28073:tid 28085] [client 62.84.185.56:62390] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aYxcSIeHYIlOlF-DsMyxXwAAAMo"]
[Wed Feb 11 18:39:07.428698 2026] [:error] [pid 27964:tid 27975] [client 62.84.185.56:31292] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aYxcS8p0XgWYHLcQtEi_RAAAAAA"]
[Wed Feb 11 18:39:10.122531 2026] [:error] [pid 27966:tid 28033] [client 62.84.185.56:31294] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aYxcTl8HJ9ydyf0SPu6cDwAAAIM"]
[Wed Feb 11 18:39:12.735945 2026] [:error] [pid 27964:tid 27994] [client 62.84.185.56:31296] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aYxcUMp0XgWYHLcQtEi_TgAAABM"]
[Wed Feb 11 18:39:15.428148 2026] [:error] [pid 17401:tid 17408] [client 62.84.185.56:63186] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aYxcUw0lHeayTY40t35SLQAAAQU"]
[Wed Feb 11 18:39:18.126612 2026] [:error] [pid 28073:tid 28082] [client 62.84.185.56:63202] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aYxcVoeHYIlOlF-DsMyxagAAAMc"]
[Wed Feb 11 18:39:20.821684 2026] [:error] [pid 22570:tid 22601] [client 62.84.185.56:63218] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aYxcWCE5uSe043FXwQpaPQAAAcE"]
[Wed Feb 11 18:39:23.422667 2026] [:error] [pid 22570:tid 22623] [client 62.84.185.56:63226] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aYxcWyE5uSe043FXwQpaQQAAAdc"]
[Wed Feb 11 18:39:25.977990 2026] [:error] [pid 28073:tid 28080] [client 62.84.185.56:14764] [client 62.84.185.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aYxcXYeHYIlOlF-DsMyxdQAAAMU"]
[Wed Feb 11 19:59:38.852536 2026] [:error] [pid 27964:tid 27988] [client 54.37.252.36:36666] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aYxvKsp0XgWYHLcQtEjaZwAAAA0"]
[Wed Feb 11 19:59:41.266032 2026] [:error] [pid 27964:tid 27992] [client 54.37.252.36:33952] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aYxvLcp0XgWYHLcQtEjaawAAABE"]
[Wed Feb 11 19:59:43.765859 2026] [:error] [pid 28073:tid 28095] [client 54.37.252.36:33968] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aYxvL4eHYIlOlF-DsMzU1AAAANQ"]
[Wed Feb 11 19:59:46.164574 2026] [:error] [pid 27965:tid 28023] [client 54.37.252.36:33982] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aYxvMtHLAUAIo8qpZyFeNQAAAFQ"]
[Wed Feb 11 19:59:48.502644 2026] [:error] [pid 22570:tid 22606] [client 54.37.252.36:33992] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aYxvNCE5uSe043FXwQpwvQAAAcY"]
[Wed Feb 11 19:59:50.836211 2026] [:error] [pid 22569:tid 22585] [client 54.37.252.36:50856] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aYxvNsAhSI7iX9G3engwawAAAYw"]
[Wed Feb 11 19:59:53.417101 2026] [:error] [pid 27964:tid 27991] [client 54.37.252.36:50858] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aYxvOcp0XgWYHLcQtEjalAAAABA"]
[Wed Feb 11 19:59:55.783296 2026] [:error] [pid 22537:tid 22550] [client 54.37.252.36:50862] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aYxvOyfg2TagwM3bvQP50AAAAUs"]
[Wed Feb 11 19:59:58.192117 2026] [:error] [pid 22570:tid 22610] [client 54.37.252.36:50866] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aYxvPiE5uSe043FXwQpw4gAAAco"]
[Wed Feb 11 20:00:00.501178 2026] [:error] [pid 27964:tid 27996] [client 54.37.252.36:33600] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aYxvQMp0XgWYHLcQtEjapwAAABU"]
[Wed Feb 11 20:00:02.981249 2026] [:error] [pid 22537:tid 22559] [client 54.37.252.36:33616] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aYxvQifg2TagwM3bvQP51AAAAVQ"]
[Wed Feb 11 20:00:05.497249 2026] [:error] [pid 22570:tid 22622] [client 54.37.252.36:33622] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aYxvRSE5uSe043FXwQpw5wAAAdY"]
[Wed Feb 11 20:00:07.899136 2026] [:error] [pid 22569:tid 22581] [client 54.37.252.36:33634] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aYxvR8AhSI7iX9G3engwhAAAAYg"]
[Wed Feb 11 20:00:10.427489 2026] [:error] [pid 22569:tid 22574] [client 54.37.252.36:57760] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aYxvSsAhSI7iX9G3engwhwAAAYE"]
[Wed Feb 11 20:00:12.849827 2026] [:error] [pid 22570:tid 22614] [client 54.37.252.36:57770] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aYxvTCE5uSe043FXwQpw8gAAAc4"]
[Wed Feb 11 20:00:15.233720 2026] [:error] [pid 27966:tid 28044] [client 54.37.252.36:57776] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aYxvT18HJ9ydyf0SPu61SgAAAI4"]
[Wed Feb 11 20:00:17.765273 2026] [:error] [pid 27964:tid 27983] [client 54.37.252.36:57784] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aYxvUcp0XgWYHLcQtEjauAAAAAg"]
[Wed Feb 11 20:00:20.228050 2026] [:error] [pid 27965:tid 28011] [client 54.37.252.36:56890] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aYxvVNHLAUAIo8qpZyFeXwAAAEg"]
[Wed Feb 11 20:00:22.621952 2026] [:error] [pid 17401:tid 17426] [client 54.37.252.36:56904] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aYxvVg0lHeayTY40t35mhwAAARc"]
[Wed Feb 11 20:00:25.182606 2026] [:error] [pid 22570:tid 22609] [client 54.37.252.36:56908] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aYxvWSE5uSe043FXwQpw_gAAAck"]
[Wed Feb 11 20:00:27.596937 2026] [:error] [pid 22537:tid 22545] [client 54.37.252.36:56922] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aYxvWyfg2TagwM3bvQP58AAAAUY"]
[Wed Feb 11 20:00:29.989960 2026] [:error] [pid 22570:tid 22608] [client 54.37.252.36:33364] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aYxvXSE5uSe043FXwQpxAwAAAcg"]
[Wed Feb 11 20:00:32.526873 2026] [:error] [pid 28073:tid 28090] [client 54.37.252.36:33380] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aYxvYIeHYIlOlF-DsMzVRwAAAM8"]
[Wed Feb 11 20:00:34.923929 2026] [:error] [pid 22570:tid 22612] [client 54.37.252.36:33394] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aYxvYiE5uSe043FXwQpxBwAAAcw"]
[Wed Feb 11 20:01:01.380717 2026] [:error] [pid 28073:tid 28094] [client 54.37.252.36:33400] [client 54.37.252.36] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "51.75.236.138_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "hotbooksbookeeping2.com"] [uri "/index.php"] [unique_id "aYxveIeHYIlOlF-DsMzVagAAANM"]
[Wed Feb 11 20:01:09.342762 2026] [:error] [pid 28073:tid 28085] [client 54.37.252.36:33400] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aYxvhYeHYIlOlF-DsMzVewAAAMo"]
[Wed Feb 11 20:01:11.680506 2026] [:error] [pid 22570:tid 22609] [client 54.37.252.36:53444] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aYxvhyE5uSe043FXwQpxQwAAAck"]
[Wed Feb 11 20:01:14.113003 2026] [:error] [pid 22537:tid 22555] [client 54.37.252.36:53448] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aYxviifg2TagwM3bvQP6BgAAAVA"]
[Wed Feb 11 20:01:16.636874 2026] [:error] [pid 27966:tid 28039] [client 54.37.252.36:53452] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aYxvjF8HJ9ydyf0SPu61nwAAAIk"]
[Wed Feb 11 20:01:19.031624 2026] [:error] [pid 22537:tid 22539] [client 54.37.252.36:39984] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aYxvjyfg2TagwM3bvQP6DQAAAUA"]
[Wed Feb 11 20:21:34.779655 2026] [:error] [pid 22570:tid 22603] [client 134.122.7.60:56538] [client 134.122.7.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYx0TiE5uSe043FXwQp2FgAAAcM"]
[Wed Feb 11 20:21:37.447736 2026] [:error] [pid 22570:tid 22604] [client 134.122.7.60:42518] [client 134.122.7.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aYx0USE5uSe043FXwQp2GwAAAcQ"]
[Wed Feb 11 21:10:44.025541 2026] [:error] [pid 27966:tid 28048] [client 161.97.66.6:49484] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aYx_1F8HJ9ydyf0SPu7FfAAAAJI"]
[Thu Feb 12 02:10:01.139263 2026] [:error] [pid 49095:tid 49158] [client 150.109.230.210:43534] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYzF-YDzbTIrmslQGKTs3wAAAQU"]
[Thu Feb 12 03:26:58.103407 2026] [:error] [pid 57533:tid 57598] [client 119.96.24.54:45710] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aYzYAsBMbk5EwuXt4ZesxAAAAFY"]
[Thu Feb 12 06:43:50.269211 2026] [:error] [pid 1851:tid 1859] [client 170.106.192.208:39074] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aY0GJvgC37byWfqZjZHZFQAAAUQ"]
[Thu Feb 12 09:09:03.744125 2026] [:error] [pid 50167:tid 50184] [client 45.61.188.95:51939] [client 45.61.188.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.95, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aY0oLzOWAjqME-_ayFOAqgAAAM0"]
[Thu Feb 12 09:09:06.051254 2026] [:error] [pid 50167:tid 50193] [client 45.61.188.95:51939] [client 45.61.188.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.95, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aY0oMjOWAjqME-_ayFOArwAAANY"]
[Thu Feb 12 10:04:17.163152 2026] [:error] [pid 50254:tid 50275] [client 106.227.49.113:37359] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aY01IVXkZ-o2G0C1rDGOHgAAAhA"]
[Thu Feb 12 11:56:16.499731 2026] [:error] [pid 8824:tid 8853] [client 209.9.200.163:30473] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aY1PYPGtP-XDMTktFc0d7wAAARE"]
[Thu Feb 12 11:56:33.277547 2026] [:error] [pid 3136:tid 3141] [client 209.9.200.163:36757] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aY1PcRiPjM-TIZEnQeFVNAAAAEM"]
[Thu Feb 12 11:56:38.187087 2026] [:error] [pid 3136:tid 3161] [client 209.9.200.163:57874] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aY1PdhiPjM-TIZEnQeFVQAAAAFc"]
[Thu Feb 12 11:56:42.216127 2026] [:error] [pid 50169:tid 50249] [client 209.9.200.163:34355] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aY1PerQmA2Sph23KFXBuuAAAAdc"]
[Thu Feb 12 11:56:46.503394 2026] [:error] [pid 50169:tid 50250] [client 209.9.200.163:3063] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aY1PfrQmA2Sph23KFXBuvAAAAdg"]
[Thu Feb 12 11:56:50.701964 2026] [:error] [pid 50168:tid 50216] [client 209.9.200.163:2035] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aY1Pggih-d2Mb0suxEf_GQAAAZE"]
[Thu Feb 12 11:56:55.315847 2026] [:error] [pid 50254:tid 50281] [client 209.9.200.163:46384] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aY1Ph1XkZ-o2G0C1rDGpkQAAAhY"]
[Thu Feb 12 11:56:58.347674 2026] [:error] [pid 50169:tid 50227] [client 209.9.200.163:49593] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aY1PirQmA2Sph23KFXBvCQAAAcE"]
[Thu Feb 12 11:57:03.545837 2026] [:error] [pid 60619:tid 60641] [client 209.9.200.163:23068] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aY1Pj0WmS0KSFtjY-wZODgAAABQ"]
[Thu Feb 12 11:57:07.896530 2026] [:error] [pid 3188:tid 3213] [client 209.9.200.163:3517] [client 209.9.200.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aY1Pk8YMNJKHx_XKcXzzQgAAAJc"]
[Thu Feb 12 13:19:27.920433 2026] [:error] [pid 3136:tid 3145] [client 51.83.11.76:38482] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aY1i3xiPjM-TIZEnQeFpAwAAAEc"]
[Thu Feb 12 13:19:31.215083 2026] [:error] [pid 50169:tid 50249] [client 51.83.11.76:33218] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aY1i47QmA2Sph23KFXCLjAAAAdc"]
[Thu Feb 12 13:19:33.777749 2026] [:error] [pid 60619:tid 60631] [client 51.83.11.76:33224] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aY1i5UWmS0KSFtjY-wZlUgAAAAo"]
[Thu Feb 12 13:19:36.682454 2026] [:error] [pid 8824:tid 8853] [client 51.83.11.76:33226] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aY1i6PGtP-XDMTktFc1BCQAAARE"]
[Thu Feb 12 13:19:39.120271 2026] [:error] [pid 50168:tid 50202] [client 51.83.11.76:38678] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aY1i6wih-d2Mb0suxEcS-AAAAYM"]
[Thu Feb 12 13:19:41.574170 2026] [:error] [pid 3188:tid 3200] [client 51.83.11.76:38692] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aY1i7cYMNJKHx_XKcXwIbAAAAIo"]
[Thu Feb 12 13:19:43.978742 2026] [:error] [pid 60619:tid 60638] [client 51.83.11.76:38700] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aY1i70WmS0KSFtjY-wZlYgAAABE"]
[Thu Feb 12 13:19:46.395456 2026] [:error] [pid 50168:tid 50222] [client 51.83.11.76:38706] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aY1i8gih-d2Mb0suxEcS_wAAAZc"]
[Thu Feb 12 13:19:48.907789 2026] [:error] [pid 3188:tid 3195] [client 51.83.11.76:33584] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aY1i9MYMNJKHx_XKcXwIdQAAAIU"]
[Thu Feb 12 13:19:51.605033 2026] [:error] [pid 8824:tid 8829] [client 51.83.11.76:33588] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aY1i9_GtP-XDMTktFc1BHwAAAQM"]
[Thu Feb 12 13:19:54.181652 2026] [:error] [pid 50168:tid 50216] [client 51.83.11.76:33598] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aY1i-gih-d2Mb0suxEcTBAAAAZE"]
[Thu Feb 12 13:19:57.278854 2026] [:error] [pid 8824:tid 8855] [client 51.83.11.76:33612] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aY1i_fGtP-XDMTktFc1BLAAAARM"]
[Thu Feb 12 13:19:59.875105 2026] [:error] [pid 50169:tid 50250] [client 51.83.11.76:34018] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aY1i_7QmA2Sph23KFXCLqQAAAdg"]
[Thu Feb 12 13:20:02.355400 2026] [:error] [pid 50254:tid 50264] [client 51.83.11.76:34022] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aY1jAlXkZ-o2G0C1rDG8EgAAAgU"]
[Thu Feb 12 13:20:04.912224 2026] [:error] [pid 50168:tid 50218] [client 51.83.11.76:34024] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aY1jBAih-d2Mb0suxEcTEAAAAZM"]
[Thu Feb 12 13:20:07.896874 2026] [:error] [pid 3188:tid 3200] [client 51.83.11.76:34028] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aY1jB8YMNJKHx_XKcXwIfgAAAIo"]
[Thu Feb 12 13:20:10.332085 2026] [:error] [pid 60619:tid 60639] [client 51.83.11.76:54952] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY1jCkWmS0KSFtjY-wZldgAAABI"]
[Thu Feb 12 13:20:12.919089 2026] [:error] [pid 60619:tid 60625] [client 51.83.11.76:54958] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY1jDEWmS0KSFtjY-wZlfgAAAAQ"]
[Thu Feb 12 13:20:15.514671 2026] [:error] [pid 60619:tid 60629] [client 51.83.11.76:54962] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aY1jD0WmS0KSFtjY-wZljgAAAAg"]
[Thu Feb 12 13:20:18.021739 2026] [:error] [pid 8824:tid 8847] [client 51.83.11.76:54964] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aY1jEvGtP-XDMTktFc1BQgAAAQs"]
[Thu Feb 12 13:20:20.838960 2026] [:error] [pid 50254:tid 50269] [client 51.83.11.76:59798] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aY1jFFXkZ-o2G0C1rDG8JQAAAgo"]
[Thu Feb 12 13:20:23.330125 2026] [:error] [pid 50254:tid 50262] [client 51.83.11.76:59800] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aY1jF1XkZ-o2G0C1rDG8KQAAAgM"]
[Thu Feb 12 13:21:00.654182 2026] [:error] [pid 50169:tid 50240] [client 51.83.11.76:59814] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aY1jPLQmA2Sph23KFXCMBAAAAc4"]
[Thu Feb 12 13:21:03.378688 2026] [:error] [pid 8824:tid 8847] [client 51.83.11.76:39146] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aY1jP_GtP-XDMTktFc1BhgAAAQs"]
[Thu Feb 12 13:21:06.015335 2026] [:error] [pid 3136:tid 3138] [client 51.83.11.76:39162] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY1jQhiPjM-TIZEnQeFpfwAAAEA"]
[Thu Feb 12 13:21:08.472108 2026] [:error] [pid 60619:tid 60641] [client 51.83.11.76:39166] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aY1jREWmS0KSFtjY-wZl-QAAABQ"]
[Thu Feb 12 13:21:11.099536 2026] [:error] [pid 8824:tid 8828] [client 51.83.11.76:46262] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aY1jR_GtP-XDMTktFc1BlAAAAQI"]
[Thu Feb 12 13:21:13.581719 2026] [:error] [pid 60619:tid 60637] [client 51.83.11.76:46266] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aY1jSUWmS0KSFtjY-wZl_gAAABA"]
[Thu Feb 12 13:21:16.563683 2026] [:error] [pid 60619:tid 60639] [client 51.83.11.76:46278] [client 51.83.11.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aY1jTEWmS0KSFtjY-wZmCAAAABI"]
[Thu Feb 12 16:12:26.626455 2026] [:error] [pid 21431:tid 21440] [client 104.236.27.98:60620] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY2LapgxKQsNF5X8gtRupAAAAMQ"]
[Thu Feb 12 16:12:30.293598 2026] [:error] [pid 21527:tid 21552] [client 104.236.27.98:34490] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY2Lbiaer9JPUXlMLuGa-AAAABc"]
[Thu Feb 12 17:51:42.171232 2026] [:error] [pid 63511:tid 63517] [client 43.166.244.66:53132] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aY2irqQCQbD5BgeyIk3F5wAAAAQ"]
[Thu Feb 12 18:46:48.073767 2026] [:error] [pid 63418:tid 63479] [client 104.236.27.98:57868] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY2vmNzjh-bbJnStPZKzXwAAAIM"]
[Thu Feb 12 18:46:50.529113 2026] [:error] [pid 63416:tid 63442] [client 104.236.27.98:60574] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY2vmr2wmecPaCHcM2-aoQAAAZU"]
[Thu Feb 12 19:09:50.079822 2026] [:error] [pid 63417:tid 63469] [client 68.178.222.132:47216] [client 68.178.222.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.178.222.132, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aY20_v8gSb97qRMtXCLFRAAAAFQ"]
[Thu Feb 12 19:20:09.629359 2026] [:error] [pid 63511:tid 63521] [client 104.236.27.98:35450] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY23aaQCQbD5BgeyIk31QwAAAAg"]
[Thu Feb 12 19:20:12.540366 2026] [:error] [pid 63417:tid 63472] [client 104.236.27.98:33336] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY23bP8gSb97qRMtXCLJRQAAAFc"]
[Thu Feb 12 19:25:15.076773 2026] [:error] [pid 65064:tid 65088] [client 104.28.234.179:10142] [client 104.28.234.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aY24mxOvRgscTcqsMBnGMgAAANU"]
[Thu Feb 12 20:17:05.192472 2026] [:error] [pid 63511:tid 63525] [client 68.219.89.70:27256] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY3EwaQCQbD5BgeyIk0SiAAAAAw"]
[Thu Feb 12 20:17:14.288210 2026] [:error] [pid 63417:tid 63460] [client 68.219.89.70:27922] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY3Eyv8gSb97qRMtXCLgsQAAAEs"]
[Thu Feb 12 20:17:18.365422 2026] [:error] [pid 65064:tid 65070] [client 68.219.89.70:1092] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY3EzhOvRgscTcqsMBnoFgAAAMM"]
[Thu Feb 12 20:17:20.696426 2026] [:error] [pid 65064:tid 65091] [client 68.219.89.70:12970] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY3E0BOvRgscTcqsMBnoLwAAANg"]
[Thu Feb 12 20:17:24.070073 2026] [:error] [pid 65064:tid 65088] [client 68.219.89.70:15986] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/007xx.php"] [unique_id "aY3E1BOvRgscTcqsMBnoXAAAANU"]
[Thu Feb 12 20:17:25.656781 2026] [:error] [pid 63418:tid 63490] [client 68.219.89.70:12955] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/007xx.php"] [unique_id "aY3E1dzjh-bbJnStPZLb8QAAAI4"]
[Thu Feb 12 20:17:27.959372 2026] [:error] [pid 63417:tid 63462] [client 68.219.89.70:18550] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/007xx.php"] [unique_id "aY3E1_8gSb97qRMtXCLg0QAAAE0"]
[Thu Feb 12 20:18:01.193100 2026] [:error] [pid 65064:tid 65067] [client 68.219.89.70:19721] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/l3gi0n.php"] [unique_id "aY3E-ROvRgscTcqsMBno_wAAAMA"]
[Thu Feb 12 20:19:02.943804 2026] [:error] [pid 63417:tid 63457] [client 68.219.89.70:14532] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aY3FNv8gSb97qRMtXCLhogAAAEg"]
[Thu Feb 12 20:19:04.168428 2026] [:error] [pid 65064:tid 65069] [client 68.219.89.70:19289] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aY3FOBOvRgscTcqsMBnprQAAAMI"]
[Thu Feb 12 20:19:07.118242 2026] [:error] [pid 63417:tid 63453] [client 68.219.89.70:27860] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aY3FO_8gSb97qRMtXCLhowAAAEQ"]
[Thu Feb 12 20:19:09.785674 2026] [:error] [pid 65064:tid 65085] [client 68.219.89.70:11382] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aY3FPROvRgscTcqsMBnptgAAANI"]
[Thu Feb 12 20:19:34.421759 2026] [:error] [pid 65064:tid 65084] [client 68.219.89.70:27932] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aY3FVhOvRgscTcqsMBnp-AAAANE"]
[Thu Feb 12 20:19:37.151286 2026] [:error] [pid 65064:tid 65084] [client 68.219.89.70:18509] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aY3FWROvRgscTcqsMBnqAwAAANE"]
[Thu Feb 12 20:19:38.506578 2026] [:error] [pid 63418:tid 63476] [client 68.219.89.70:16272] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aY3FWtzjh-bbJnStPZLc2wAAAIA"]
[Thu Feb 12 20:19:39.963080 2026] [:error] [pid 63416:tid 63430] [client 68.219.89.70:18052] [client 68.219.89.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aY3FW72wmecPaCHcM2-_SAAAAYk"]
[Thu Feb 12 22:06:11.918703 2026] [:error] [pid 46603:tid 46608] [client 104.236.27.98:60392] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY3eU_Ei6O39v05JNJeLDwAAAQM"]
[Thu Feb 12 22:06:16.483901 2026] [:error] [pid 63511:tid 63521] [client 104.236.27.98:59458] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY3eWKQCQbD5BgeyIk0z2QAAAAg"]
[Thu Feb 12 22:47:29.972311 2026] [:error] [pid 63417:tid 63473] [client 103.77.107.222:59375] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aY3oAf8gSb97qRMtXCIKRAAAAFg"]
[Thu Feb 12 22:47:30.204805 2026] [:error] [pid 65064:tid 65085] [client 103.77.107.222:59403] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aY3oAhOvRgscTcqsMBkcEQAAANI"]
[Fri Feb 13 00:37:21.187870 2026] [:error] [pid 37510:tid 37520] [client 107.189.12.18:54682] [client 107.189.12.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.12.18, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aY4BwcUrqDPNSf1wYBWDdQAAAYQ"]
[Fri Feb 13 00:37:24.839591 2026] [:error] [pid 37510:tid 37530] [client 107.189.12.18:54682] [client 107.189.12.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.12.18, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aY4BxMUrqDPNSf1wYBWDdwAAAY4"]
[Fri Feb 13 00:43:14.198952 2026] [:error] [pid 37512:tid 37624] [client 104.236.27.98:36654] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY4DItDe69znS-f6vSY5CAAAAA4"]
[Fri Feb 13 00:43:16.817442 2026] [:error] [pid 37512:tid 37632] [client 104.236.27.98:40154] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY4DJNDe69znS-f6vSY5EAAAABU"]
[Fri Feb 13 00:49:52.985468 2026] [:error] [pid 37510:tid 37530] [client 43.166.250.187:35284] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aY4EsMUrqDPNSf1wYBWH2gAAAY4"]
[Fri Feb 13 03:41:42.443796 2026] [:error] [pid 49223:tid 49237] [client 104.207.35.0:45943] [client 104.207.35.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY4s9h8A_fZBamNLnfUEOAAAAAU"]
[Fri Feb 13 03:41:44.042111 2026] [:error] [pid 49225:tid 49315] [client 104.207.61.39:51177] [client 104.207.61.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY4s-DwH8-zGxtAd3julaAAAAJU"]
[Fri Feb 13 03:48:16.017680 2026] [:error] [pid 49224:tid 49278] [client 75.119.155.172:48404] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aY4ugNiAvPoWmw5YhwldjAAAAEs"]
[Fri Feb 13 05:04:50.034311 2026] [:error] [pid 49335:tid 49349] [client 104.236.27.98:50896] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY5Acqp--SFY2nwOiqkbZAAAAMw"]
[Fri Feb 13 05:04:55.074900 2026] [:error] [pid 49335:tid 49344] [client 104.236.27.98:47300] [client 104.236.27.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aY5Ad6p--SFY2nwOiqkbgQAAAMc"]
[Fri Feb 13 05:22:33.150352 2026] [:error] [pid 51243:tid 51245] [client 147.135.213.107:54580] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aY5Emcim7ZTAHzi7xZu9mQAAAQA"]
[Fri Feb 13 05:22:36.149845 2026] [:error] [pid 49224:tid 49283] [client 147.135.213.107:50764] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aY5EnNiAvPoWmw5YhwmHJQAAAFA"]
[Fri Feb 13 05:22:39.373768 2026] [:error] [pid 51243:tid 51246] [client 147.135.213.107:50770] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aY5En8im7ZTAHzi7xZu9pQAAAQE"]
[Fri Feb 13 05:22:42.561738 2026] [:error] [pid 49223:tid 49243] [client 147.135.213.107:49176] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aY5Eoh8A_fZBamNLnfUrtgAAAAs"]
[Fri Feb 13 05:22:45.995052 2026] [:error] [pid 49335:tid 49360] [client 147.135.213.107:49190] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aY5Epap--SFY2nwOiqknlAAAANc"]
[Fri Feb 13 05:22:48.601878 2026] [:error] [pid 49335:tid 49341] [client 147.135.213.107:49202] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aY5EqKp--SFY2nwOiqknnwAAAMQ"]
[Fri Feb 13 05:22:51.088721 2026] [:error] [pid 49225:tid 49312] [client 147.135.213.107:49210] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aY5EqzwH8-zGxtAd3jvPKQAAAJI"]
[Fri Feb 13 05:22:53.898680 2026] [:error] [pid 49335:tid 49356] [client 147.135.213.107:34958] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aY5Erap--SFY2nwOiqkntgAAANM"]
[Fri Feb 13 05:22:56.497503 2026] [:error] [pid 49224:tid 49269] [client 147.135.213.107:34974] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aY5EsNiAvPoWmw5YhwmHTgAAAEI"]
[Fri Feb 13 05:22:59.280621 2026] [:error] [pid 49223:tid 49253] [client 147.135.213.107:34982] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aY5Esx8A_fZBamNLnfUr3wAAABU"]
[Fri Feb 13 05:23:02.008456 2026] [:error] [pid 49225:tid 49305] [client 147.135.213.107:55276] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aY5EtjwH8-zGxtAd3jvPOgAAAIs"]
[Fri Feb 13 05:23:04.559794 2026] [:error] [pid 49225:tid 49304] [client 147.135.213.107:55292] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aY5EuDwH8-zGxtAd3jvPPwAAAIo"]
[Fri Feb 13 05:23:06.982298 2026] [:error] [pid 49225:tid 49312] [client 147.135.213.107:55302] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aY5EujwH8-zGxtAd3jvPRAAAAJI"]
[Fri Feb 13 05:23:09.822651 2026] [:error] [pid 49223:tid 49234] [client 147.135.213.107:55310] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aY5EvR8A_fZBamNLnfUsAgAAAAI"]
[Fri Feb 13 05:23:12.383999 2026] [:error] [pid 49224:tid 49275] [client 147.135.213.107:43106] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aY5EwNiAvPoWmw5YhwmHcQAAAEg"]
[Fri Feb 13 05:23:14.926531 2026] [:error] [pid 49223:tid 49247] [client 147.135.213.107:43120] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aY5Ewh8A_fZBamNLnfUsEQAAAA8"]
[Fri Feb 13 05:23:17.356677 2026] [:error] [pid 49224:tid 49290] [client 147.135.213.107:43130] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aY5ExdiAvPoWmw5YhwmHiwAAAFc"]
[Fri Feb 13 05:23:19.821981 2026] [:error] [pid 49224:tid 49274] [client 147.135.213.107:43132] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aY5Ex9iAvPoWmw5YhwmHkwAAAEc"]
[Fri Feb 13 05:23:22.241651 2026] [:error] [pid 51243:tid 51257] [client 147.135.213.107:49820] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aY5Eysim7ZTAHzi7xZu95AAAAQw"]
[Fri Feb 13 05:23:24.796802 2026] [:error] [pid 49224:tid 49285] [client 147.135.213.107:49834] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aY5EzNiAvPoWmw5YhwmHpgAAAFI"]
[Fri Feb 13 05:23:27.240374 2026] [:error] [pid 49225:tid 49317] [client 147.135.213.107:49838] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aY5EzzwH8-zGxtAd3jvPYwAAAJc"]
[Fri Feb 13 07:04:35.873757 2026] [:error] [pid 49224:tid 49270] [client 40.89.152.156:59336] [client 40.89.152.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aY5cg9iAvPoWmw5Yhwm78wAAAEM"]
[Fri Feb 13 07:04:38.597600 2026] [:error] [pid 49225:tid 49300] [client 40.89.152.156:13246] [client 40.89.152.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aY5chjwH8-zGxtAd3jv88QAAAIY"]
[Fri Feb 13 07:04:41.360730 2026] [:error] [pid 49224:tid 49284] [client 40.89.152.156:47853] [client 40.89.152.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aY5cidiAvPoWmw5Yhwm7_gAAAFE"]
[Fri Feb 13 07:04:49.225099 2026] [:error] [pid 49223:tid 49248] [client 40.89.152.156:13202] [client 40.89.152.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aY5ckR8A_fZBamNLnfVX3AAAABA"]
[Fri Feb 13 07:04:57.691792 2026] [:error] [pid 49224:tid 49278] [client 40.89.152.156:46720] [client 40.89.152.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ans.php"] [unique_id "aY5cmdiAvPoWmw5Yhwm8EgAAAEs"]
[Fri Feb 13 07:05:19.294454 2026] [:error] [pid 49223:tid 49253] [client 40.89.152.156:43648] [client 40.89.152.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aY5crx8A_fZBamNLnfVYBgAAABU"]
[Fri Feb 13 07:05:26.854866 2026] [:error] [pid 49223:tid 49241] [client 40.89.152.156:10983] [client 40.89.152.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aY5cth8A_fZBamNLnfVYDQAAAAk"]
[Fri Feb 13 07:05:31.742443 2026] [:error] [pid 49225:tid 49298] [client 40.89.152.156:61919] [client 40.89.152.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aY5cuzwH8-zGxtAd3jv9NAAAAIQ"]
[Fri Feb 13 07:05:56.638974 2026] [:error] [pid 49335:tid 49355] [client 40.89.152.156:61900] [client 40.89.152.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aY5c1Kp--SFY2nwOiqlrKwAAANI"]
[Fri Feb 13 07:06:27.530886 2026] [:error] [pid 49223:tid 49247] [client 40.89.152.156:51845] [client 40.89.152.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass.php"] [unique_id "aY5c8x8A_fZBamNLnfVYXQAAAA8"]
[Fri Feb 13 07:44:04.297412 2026] [:error] [pid 49335:tid 49351] [client 62.84.185.67:31138] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aY5lxKp--SFY2nwOiqmGjgAAAM4"]
[Fri Feb 13 07:44:06.893749 2026] [:error] [pid 51243:tid 51252] [client 62.84.185.67:15022] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aY5lxsim7ZTAHzi7xZv-NAAAAQc"]
[Fri Feb 13 07:44:09.610700 2026] [:error] [pid 49224:tid 49289] [client 62.84.185.67:15032] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aY5lydiAvPoWmw5YhwnQfAAAAFY"]
[Fri Feb 13 07:44:12.208281 2026] [:error] [pid 49224:tid 49276] [client 62.84.185.67:15034] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aY5lzNiAvPoWmw5YhwnQgQAAAEk"]
[Fri Feb 13 07:44:14.831854 2026] [:error] [pid 49335:tid 49361] [client 62.84.185.67:15038] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aY5lzqp--SFY2nwOiqmGoQAAANg"]
[Fri Feb 13 07:44:17.444049 2026] [:error] [pid 51243:tid 51264] [client 62.84.185.67:51026] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aY5l0cim7ZTAHzi7xZv-RwAAARM"]
[Fri Feb 13 07:44:20.051003 2026] [:error] [pid 49225:tid 49294] [client 62.84.185.67:51040] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aY5l1DwH8-zGxtAd3jsPEgAAAIA"]
[Fri Feb 13 07:44:22.647258 2026] [:error] [pid 49224:tid 49274] [client 62.84.185.67:51050] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aY5l1tiAvPoWmw5YhwnQmAAAAEc"]
[Fri Feb 13 07:44:25.220691 2026] [:error] [pid 49224:tid 49268] [client 62.84.185.67:51064] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aY5l2diAvPoWmw5YhwnQnAAAAEE"]
[Fri Feb 13 07:44:27.716448 2026] [:error] [pid 51243:tid 51266] [client 62.84.185.67:33778] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aY5l28im7ZTAHzi7xZv-VgAAARU"]
[Fri Feb 13 07:44:30.331737 2026] [:error] [pid 51243:tid 51252] [client 62.84.185.67:33784] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aY5l3sim7ZTAHzi7xZv-WQAAAQc"]
[Fri Feb 13 07:44:32.963231 2026] [:error] [pid 49223:tid 49232] [client 62.84.185.67:33792] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aY5l4B8A_fZBamNLnfVotQAAAAA"]
[Fri Feb 13 07:44:35.648143 2026] [:error] [pid 49223:tid 49234] [client 62.84.185.67:33808] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aY5l4x8A_fZBamNLnfVoyQAAAAI"]
[Fri Feb 13 07:44:38.258992 2026] [:error] [pid 49335:tid 49346] [client 62.84.185.67:41426] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aY5l5qp--SFY2nwOiqmG2wAAAMk"]
[Fri Feb 13 07:44:40.900703 2026] [:error] [pid 49225:tid 49306] [client 62.84.185.67:41428] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aY5l6DwH8-zGxtAd3jsPPwAAAIw"]
[Fri Feb 13 07:44:43.421392 2026] [:error] [pid 49224:tid 49279] [client 62.84.185.67:41432] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY5l69iAvPoWmw5YhwnQugAAAEw"]
[Fri Feb 13 07:44:46.009765 2026] [:error] [pid 51243:tid 51267] [client 62.84.185.67:41448] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY5l7sim7ZTAHzi7xZv-dQAAARY"]
[Fri Feb 13 07:44:48.633679 2026] [:error] [pid 49225:tid 49297] [client 62.84.185.67:57418] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aY5l8DwH8-zGxtAd3jsPUAAAAIM"]
[Fri Feb 13 07:44:51.246106 2026] [:error] [pid 51243:tid 51267] [client 62.84.185.67:57422] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aY5l88im7ZTAHzi7xZv-hgAAARY"]
[Fri Feb 13 07:44:53.851903 2026] [:error] [pid 49335:tid 49347] [client 62.84.185.67:57430] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aY5l9ap--SFY2nwOiqmHAAAAAMo"]
[Fri Feb 13 07:44:56.433710 2026] [:error] [pid 49223:tid 49249] [client 62.84.185.67:65428] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aY5l-B8A_fZBamNLnfVo8wAAABE"]
[Fri Feb 13 07:44:59.036731 2026] [:error] [pid 51243:tid 51245] [client 62.84.185.67:65432] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aY5l-8im7ZTAHzi7xZv-pwAAAQA"]
[Fri Feb 13 07:46:06.302032 2026] [:error] [pid 49335:tid 49355] [client 62.84.185.67:14166] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aY5mPqp--SFY2nwOiqmHigAAANI"]
[Fri Feb 13 07:46:08.975126 2026] [:error] [pid 51243:tid 51250] [client 62.84.185.67:14186] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY5mQMim7ZTAHzi7xZv_KQAAAQU"]
[Fri Feb 13 07:46:11.584589 2026] [:error] [pid 49335:tid 49351] [client 62.84.185.67:14198] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aY5mQ6p--SFY2nwOiqmHjQAAAM4"]
[Fri Feb 13 07:46:13.985087 2026] [:error] [pid 49224:tid 49273] [client 62.84.185.67:14214] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aY5mRdiAvPoWmw5YhwnRLgAAAEY"]
[Fri Feb 13 07:46:16.681793 2026] [:error] [pid 49335:tid 49344] [client 62.84.185.67:40210] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aY5mSKp--SFY2nwOiqmHkQAAAMc"]
[Fri Feb 13 07:46:43.795279 2026] [:error] [pid 49223:tid 49235] [client 62.84.185.67:9772] [client 62.84.185.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aY5mYx8A_fZBamNLnfVpjwAAAAM"]
[Fri Feb 13 11:58:54.742433 2026] [:error] [pid 49224:tid 49276] [client 106.119.167.146:60234] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aY6hftiAvPoWmw5YhwlgCwAAAEk"]
[Fri Feb 13 13:58:39.478663 2026] [:error] [pid 51243:tid 51246] [client 193.36.225.166:37931] [client 193.36.225.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.166, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aY69j8im7ZTAHzi7xZuJ8QAAAQE"]
[Fri Feb 13 13:58:39.575676 2026] [:error] [pid 49223:tid 49249] [client 193.36.225.172:50989] [client 193.36.225.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aY69jx8A_fZBamNLnfXxhAAAABE"]
[Fri Feb 13 16:53:20.790064 2026] [:error] [pid 49223:tid 49243] [client 49.51.141.76:50422] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aY7mgB8A_fZBamNLnfUoXAAAAAs"]
[Fri Feb 13 21:32:59.194596 2026] [:error] [pid 46821:tid 46823] [client 51.75.128.94:49366] [client 51.75.128.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aY8oC46G1N5YSq0J0gchQgAAAUA"]
[Fri Feb 13 22:53:45.856321 2026] [:error] [pid 47080:tid 47096] [client 193.70.46.175:41532] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aY86-UbWJwYCVF39z6t3mwAAAcg"]
[Fri Feb 13 22:53:49.241755 2026] [:error] [pid 47080:tid 47107] [client 193.70.46.175:46552] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aY86_UbWJwYCVF39z6t3pAAAAdM"]
[Fri Feb 13 22:53:52.402582 2026] [:error] [pid 18097:tid 18121] [client 193.70.46.175:46568] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aY87AHFzYiQ_BfaDDlZTyQAAAZY"]
[Fri Feb 13 22:53:55.406922 2026] [:error] [pid 47575:tid 47589] [client 193.70.46.175:35072] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aY87AwIPBuXb07mA_mTo7wAAAsk"]
[Fri Feb 13 22:53:58.933541 2026] [:error] [pid 49223:tid 49233] [client 193.70.46.175:35086] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aY87Bh8A_fZBamNLnfWGTgAAAAE"]
[Fri Feb 13 22:54:02.264738 2026] [:error] [pid 51243:tid 51260] [client 193.70.46.175:35096] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aY87Csim7ZTAHzi7xZvl9wAAAQ8"]
[Fri Feb 13 22:54:05.606290 2026] [:error] [pid 18097:tid 18110] [client 193.70.46.175:38186] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aY87DXFzYiQ_BfaDDlZTzwAAAYs"]
[Fri Feb 13 22:54:08.678642 2026] [:error] [pid 49223:tid 49247] [client 193.70.46.175:38196] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aY87EB8A_fZBamNLnfWGVwAAAA8"]
[Fri Feb 13 22:54:11.616768 2026] [:error] [pid 18097:tid 18105] [client 193.70.46.175:38202] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aY87E3FzYiQ_BfaDDlZT1QAAAYY"]
[Fri Feb 13 22:54:14.529457 2026] [:error] [pid 47080:tid 47110] [client 193.70.46.175:50612] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aY87FkbWJwYCVF39z6t3swAAAdY"]
[Fri Feb 13 22:54:17.442834 2026] [:error] [pid 18097:tid 18110] [client 193.70.46.175:50614] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aY87GXFzYiQ_BfaDDlZT3AAAAYs"]
[Fri Feb 13 22:54:20.286489 2026] [:error] [pid 46821:tid 46833] [client 193.70.46.175:50622] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aY87HI6G1N5YSq0J0gctlgAAAUo"]
[Fri Feb 13 22:54:23.531475 2026] [:error] [pid 49225:tid 49311] [client 193.70.46.175:48464] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aY87HzwH8-zGxtAd3jspEQAAAJE"]
[Fri Feb 13 22:54:26.449931 2026] [:error] [pid 49335:tid 49339] [client 193.70.46.175:48480] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aY87Iqp--SFY2nwOiqmGugAAAMI"]
[Fri Feb 13 22:54:29.306607 2026] [:error] [pid 47575:tid 47601] [client 193.70.46.175:48490] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aY87JQIPBuXb07mA_mTpFAAAAtQ"]
[Fri Feb 13 22:54:32.377090 2026] [:error] [pid 47575:tid 47590] [client 193.70.46.175:48506] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aY87KAIPBuXb07mA_mTpGgAAAso"]
[Fri Feb 13 22:54:35.675428 2026] [:error] [pid 47358:tid 47386] [client 193.70.46.175:34472] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aY87K8QFBuVVUQTESUwxYgAAApQ"]
[Fri Feb 13 22:54:38.852152 2026] [:error] [pid 47080:tid 47091] [client 193.70.46.175:34476] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aY87LkbWJwYCVF39z6t31gAAAcM"]
[Fri Feb 13 22:54:41.751951 2026] [:error] [pid 47143:tid 47224] [client 193.70.46.175:34492] [client 193.70.46.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aY87MchV30NbMarHJLteaQAAAko"]
[Fri Feb 13 23:49:25.590578 2026] [:error] [pid 47143:tid 47236] [client 43.130.228.73:59798] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aY9IBchV30NbMarHJLtmIgAAAlY"]
[Sat Feb 14 00:50:19.389121 2026] [:error] [pid 47080:tid 47088] [client 106.54.62.156:46376] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aY9WS0bWJwYCVF39z6uY1AAAAcA"]
[Sat Feb 14 00:59:16.786435 2026] [:error] [pid 47080:tid 47093] [client 94.154.239.69:46610] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aY9YZEbWJwYCVF39z6ublgAAAcU"]
[Sat Feb 14 00:59:19.311362 2026] [:error] [pid 47080:tid 47110] [client 94.154.239.69:47558] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aY9YZ0bWJwYCVF39z6ubnAAAAdY"]
[Sat Feb 14 00:59:21.945622 2026] [:error] [pid 51243:tid 51256] [client 94.154.239.69:47560] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aY9Yacim7ZTAHzi7xZv4JwAAAQs"]
[Sat Feb 14 00:59:24.591566 2026] [:error] [pid 46821:tid 46834] [client 94.154.239.69:47572] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aY9YbI6G1N5YSq0J0gdAUAAAAUs"]
[Sat Feb 14 00:59:27.214667 2026] [:error] [pid 46821:tid 46843] [client 94.154.239.69:32958] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aY9Yb46G1N5YSq0J0gdAUwAAAVQ"]
[Sat Feb 14 00:59:29.827785 2026] [:error] [pid 47575:tid 47605] [client 94.154.239.69:32968] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aY9YcQIPBuXb07mA_mQBuwAAAtg"]
[Sat Feb 14 00:59:32.326297 2026] [:error] [pid 47143:tid 47223] [client 94.154.239.69:32980] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aY9YdMhV30NbMarHJLtwEwAAAkk"]
[Sat Feb 14 00:59:34.807284 2026] [:error] [pid 47143:tid 47236] [client 94.154.239.69:32986] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aY9YdshV30NbMarHJLtwFQAAAlY"]
[Sat Feb 14 00:59:37.474924 2026] [:error] [pid 47080:tid 47102] [client 94.154.239.69:46374] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aY9YeUbWJwYCVF39z6ubwAAAAc4"]
[Sat Feb 14 00:59:39.953794 2026] [:error] [pid 47080:tid 47105] [client 94.154.239.69:46382] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aY9Ye0bWJwYCVF39z6ubwwAAAdE"]
[Sat Feb 14 00:59:42.554259 2026] [:error] [pid 18097:tid 18114] [client 94.154.239.69:46390] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aY9YfnFzYiQ_BfaDDlZuBQAAAY8"]
[Sat Feb 14 00:59:45.175776 2026] [:error] [pid 47575:tid 47596] [client 94.154.239.69:46400] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aY9YgQIPBuXb07mA_mQByQAAAs8"]
[Sat Feb 14 00:59:47.610751 2026] [:error] [pid 49223:tid 49238] [client 94.154.239.69:49772] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aY9Ygx8A_fZBamNLnfWjOAAAAAY"]
[Sat Feb 14 00:59:50.239563 2026] [:error] [pid 49225:tid 49311] [client 94.154.239.69:49780] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aY9YhjwH8-zGxtAd3js-PAAAAJE"]
[Sat Feb 14 00:59:52.856225 2026] [:error] [pid 49335:tid 49355] [client 94.154.239.69:49792] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aY9YiKp--SFY2nwOiqmbAAAAANI"]
[Sat Feb 14 00:59:55.341735 2026] [:error] [pid 47358:tid 47390] [client 94.154.239.69:49806] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aY9Yi8QFBuVVUQTESUxFlAAAApg"]
[Sat Feb 14 00:59:57.872176 2026] [:error] [pid 47080:tid 47098] [client 94.154.239.69:47896] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aY9YjUbWJwYCVF39z6ub1gAAAco"]
[Sat Feb 14 01:00:00.375062 2026] [:error] [pid 47143:tid 47228] [client 94.154.239.69:47902] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aY9YkMhV30NbMarHJLtwJQAAAk4"]
[Sat Feb 14 01:00:03.055350 2026] [:error] [pid 49223:tid 49252] [client 94.154.239.69:47908] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aY9Ykx8A_fZBamNLnfWjSQAAABQ"]
[Sat Feb 14 01:00:05.672099 2026] [:error] [pid 46821:tid 46835] [client 94.154.239.69:47920] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aY9YlY6G1N5YSq0J0gdAYAAAAUw"]
[Sat Feb 14 01:00:08.280628 2026] [:error] [pid 49225:tid 49312] [client 94.154.239.69:49504] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aY9YmDwH8-zGxtAd3js-TgAAAJI"]
[Sat Feb 14 01:00:10.777495 2026] [:error] [pid 47080:tid 47109] [client 94.154.239.69:49506] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aY9YmkbWJwYCVF39z6ub4gAAAdU"]
[Sat Feb 14 01:00:13.201965 2026] [:error] [pid 49335:tid 49360] [client 94.154.239.69:49512] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aY9Ynap--SFY2nwOiqmbEAAAANc"]
[Sat Feb 14 01:00:44.100818 2026] [:error] [pid 47575:tid 47585] [client 94.154.239.69:49526] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aY9YvAIPBuXb07mA_mQCBAAAAsU"]
[Sat Feb 14 01:00:46.643756 2026] [:error] [pid 49225:tid 49300] [client 94.154.239.69:49576] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aY9YvjwH8-zGxtAd3js-ZAAAAIY"]
[Sat Feb 14 01:00:49.271499 2026] [:error] [pid 47358:tid 47363] [client 94.154.239.69:43142] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aY9YwcQFBuVVUQTESUxFvQAAAoI"]
[Sat Feb 14 01:00:51.767144 2026] [:error] [pid 49335:tid 49357] [client 94.154.239.69:43146] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aY9Yw6p--SFY2nwOiqmbNwAAANQ"]
[Sat Feb 14 01:00:54.381668 2026] [:error] [pid 47080:tid 47100] [client 94.154.239.69:43154] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aY9YxkbWJwYCVF39z6ucEAAAAcw"]
[Sat Feb 14 03:07:13.765084 2026] [:error] [pid 18097:tid 18100] [client 45.61.185.106:22233] [client 45.61.185.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.185.106, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aY92YXFzYiQ_BfaDDlaHvQAAAYE"], referer: https://www.hotbooksbookeeping2.com/wp-login.php
[Sat Feb 14 03:11:56.972026 2026] [:error] [pid 51243:tid 51265] [client 45.61.185.106:41699] [client 45.61.185.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.185.106, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aY93fMim7ZTAHzi7xZsMkQAAARQ"], referer: https://www.hotbooksbookeeping2.com/wp-login.php
[Sat Feb 14 07:18:15.599658 2026] [:error] [pid 21785:tid 21826] [client 114.96.103.33:36548] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aY-xNwOBjP5pmZ2xNN5SmAAAAYw"]
[Sat Feb 14 12:23:08.024739 2026] [:error] [pid 28853:tid 28863] [client 110.235.183.237:39166] [client 110.235.183.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.235.183.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aY_4rLwdrXcA78tPzCiwEQAAAMg"]
[Sat Feb 14 12:27:51.588280 2026] [:error] [pid 7849:tid 7874] [client 110.235.183.237:39181] [client 110.235.183.237] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aY_5x6o2GBj-ngzmcoWUgwAAAhc"]
[Sat Feb 14 13:02:00.417056 2026] [:error] [pid 58882:tid 58886] [client 43.166.129.247:60180] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZAByJ5gZqnf2ItlwaqaDAAAAcI"]
[Sat Feb 14 13:33:10.745662 2026] [:error] [pid 63327:tid 63364] [client 182.44.9.147:39169] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZAJFi9btvSz88ToHa-V-gAAAYg"]
[Sat Feb 14 14:57:53.719741 2026] [autoindex:error] [pid 28883:tid 28923] [client 139.59.24.163:55407] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 15:10:26.838587 2026] [:error] [pid 2535:tid 2540] [client 51.68.233.43:50644] [client 51.68.233.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZAf4oZyF0LcWLCdz2CdtwAAAUI"]
[Sat Feb 14 15:28:36.036241 2026] [autoindex:error] [pid 2503:tid 2508] [client 139.59.24.163:51630] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 16:22:31.576007 2026] [:error] [pid 35193:tid 35204] [client 147.135.214.239:58958] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZAwx87okn8Vvg54roS4wAAAAkU"]
[Sat Feb 14 16:22:33.928001 2026] [:error] [pid 7982:tid 8034] [client 147.135.214.239:43310] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZAwyWLTp1DWAgIKqwTWEgAAAtc"]
[Sat Feb 14 16:22:36.456929 2026] [:error] [pid 36219:tid 36256] [client 147.135.214.239:36798] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZAwzJe-m2OpEy0FNjgn6QAAA4g"]
[Sat Feb 14 16:22:38.998178 2026] [:error] [pid 36056:tid 36061] [client 147.135.214.239:36810] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZAwzrv3wQbSPS1vpOjrRwAAAAM"]
[Sat Feb 14 16:22:41.521311 2026] [:error] [pid 36056:tid 36080] [client 147.135.214.239:36820] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZAw0bv3wQbSPS1vpOjrSwAAABY"]
[Sat Feb 14 16:22:43.886349 2026] [:error] [pid 63325:tid 63345] [client 147.135.214.239:36836] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZAw0wGMleU5keYIEc55HgAAAJA"]
[Sat Feb 14 16:22:46.430653 2026] [:error] [pid 63325:tid 63351] [client 147.135.214.239:60384] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZAw1gGMleU5keYIEc55JwAAAJY"]
[Sat Feb 14 16:22:48.808977 2026] [:error] [pid 36056:tid 36061] [client 147.135.214.239:60398] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZAw2Lv3wQbSPS1vpOjrVQAAAAM"]
[Sat Feb 14 16:22:51.328991 2026] [:error] [pid 36219:tid 36249] [client 147.135.214.239:60404] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZAw25e-m2OpEy0FNjgn-AAAA4E"]
[Sat Feb 14 16:22:53.739941 2026] [:error] [pid 7982:tid 8029] [client 147.135.214.239:60410] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZAw3WLTp1DWAgIKqwTWHgAAAtI"]
[Sat Feb 14 16:22:56.130273 2026] [:error] [pid 35193:tid 35213] [client 147.135.214.239:42382] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZAw4M7okn8Vvg54roS42AAAAk4"]
[Sat Feb 14 16:22:58.637419 2026] [:error] [pid 35193:tid 35215] [client 147.135.214.239:42392] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZAw4s7okn8Vvg54roS43QAAAlA"]
[Sat Feb 14 16:23:01.057938 2026] [:error] [pid 2503:tid 2516] [client 147.135.214.239:42396] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZAw5btdZ0Z5BhXymOB3HwAAAMs"]
[Sat Feb 14 16:23:03.446851 2026] [:error] [pid 63327:tid 63373] [client 147.135.214.239:42412] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZAw5y9btvSz88ToHa-yxwAAAZE"]
[Sat Feb 14 16:23:05.983454 2026] [:error] [pid 7982:tid 8011] [client 147.135.214.239:60578] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZAw6WLTp1DWAgIKqwTWLQAAAsA"]
[Sat Feb 14 16:23:08.490009 2026] [:error] [pid 36219:tid 36264] [client 147.135.214.239:60588] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZAw7Je-m2OpEy0FNjgoAwAAA5A"]
[Sat Feb 14 16:23:10.996838 2026] [:error] [pid 35193:tid 35219] [client 147.135.214.239:60590] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZAw7s7okn8Vvg54roS46gAAAlQ"]
[Sat Feb 14 16:23:13.367361 2026] [:error] [pid 28883:tid 28922] [client 147.135.214.239:60594] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZAw8WBZFo3PsPpATCzBTgAAAoo"]
[Sat Feb 14 16:23:15.868378 2026] [:error] [pid 36056:tid 36071] [client 147.135.214.239:42322] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZAw87v3wQbSPS1vpOjriAAAAA0"]
[Sat Feb 14 16:23:18.211768 2026] [:error] [pid 63325:tid 63351] [client 147.135.214.239:42328] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZAw9gGMleU5keYIEc55QwAAAJY"]
[Sat Feb 14 16:23:20.735634 2026] [:error] [pid 35193:tid 35208] [client 147.135.214.239:42342] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZAw-M7okn8Vvg54roS4-QAAAkk"]
[Sat Feb 14 17:28:39.849921 2026] [:error] [pid 63327:tid 63361] [client 43.135.144.126:55402] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZBARy9btvSz88ToHa_DiwAAAYU"]
[Sat Feb 14 20:15:54.434657 2026] [:error] [pid 26209:tid 26279] [client 195.201.199.99:46478] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZBnemexYDXnloPeXAV9aAAAAos"]
[Sat Feb 14 20:15:57.502390 2026] [:error] [pid 50339:tid 50390] [client 195.201.199.99:46282] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZBnfcI6TclQ9GOl2Y1vWwAAAhQ"]
[Sat Feb 14 20:16:00.808021 2026] [:error] [pid 50339:tid 50388] [client 195.201.199.99:48770] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZBngMI6TclQ9GOl2Y1vXwAAAhI"]
[Sat Feb 14 20:16:03.543770 2026] [:error] [pid 36056:tid 36077] [client 195.201.199.99:50612] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZBng7v3wQbSPS1vpOgYLwAAABM"]
[Sat Feb 14 20:16:06.533521 2026] [:error] [pid 39454:tid 39483] [client 195.201.199.99:52614] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZBnhof01uYc0DFDtzvQUwAAAdg"]
[Sat Feb 14 20:16:09.813959 2026] [:error] [pid 50339:tid 50383] [client 195.201.199.99:55250] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZBnicI6TclQ9GOl2Y1vaAAAAg0"]
[Sat Feb 14 20:16:13.082319 2026] [:error] [pid 39521:tid 39576] [client 195.201.199.99:57610] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZBnjQAo-uyPyZFb8m_AcgAAAxg"]
[Sat Feb 14 20:16:16.567584 2026] [:error] [pid 39424:tid 39426] [client 195.201.199.99:60538] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZBnkBIMcKtrNwcaAtIdcwAAAEA"]
[Sat Feb 14 20:16:20.267601 2026] [:error] [pid 39424:tid 39447] [client 195.201.199.99:35076] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZBnlBIMcKtrNwcaAtIdeAAAAFU"]
[Sat Feb 14 20:16:23.209394 2026] [:error] [pid 39424:tid 39442] [client 195.201.199.99:37102] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZBnlxIMcKtrNwcaAtIdfQAAAFA"]
[Sat Feb 14 20:16:26.395101 2026] [:error] [pid 36219:tid 36271] [client 195.201.199.99:39284] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZBnmpe-m2OpEy0FNjhTngAAA5c"]
[Sat Feb 14 20:16:29.824509 2026] [:error] [pid 39424:tid 39442] [client 195.201.199.99:41810] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZBnnRIMcKtrNwcaAtIdhwAAAFA"]
[Sat Feb 14 20:16:32.871627 2026] [:error] [pid 39424:tid 39438] [client 195.201.199.99:43768] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZBnoBIMcKtrNwcaAtIdkAAAAEw"]
[Sat Feb 14 20:16:36.469337 2026] [:error] [pid 39424:tid 39435] [client 195.201.199.99:46000] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aZBnpBIMcKtrNwcaAtIdlAAAAEk"]
[Sat Feb 14 20:16:42.126657 2026] [:error] [pid 26150:tid 26155] [client 195.201.199.99:49354] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZBnqqqmPH3D5QJaUSHJ7wAAAIE"]
[Sat Feb 14 20:16:45.893893 2026] [:error] [pid 39454:tid 39471] [client 195.201.199.99:51382] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZBnrYf01uYc0DFDtzvQZgAAAcw"]
[Sat Feb 14 20:16:49.244668 2026] [:error] [pid 50339:tid 50393] [client 195.201.199.99:53248] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZBnscI6TclQ9GOl2Y1vjAAAAhc"]
[Sat Feb 14 20:17:30.771853 2026] [:error] [pid 56720:tid 56782] [client 195.201.199.99:55130] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZBn2njg3vzUoXJ19eAiFgAAA8U"]
[Sat Feb 14 20:17:33.481331 2026] [:error] [pid 26209:tid 26292] [client 195.201.199.99:44988] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aZBn3WexYDXnloPeXAV9nAAAApg"]
[Sat Feb 14 20:17:36.843571 2026] [:error] [pid 39456:tid 39496] [client 195.201.199.99:46218] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZBn4IKeIqKLynHIGnjTiwAAAko"]
[Sat Feb 14 20:17:39.727773 2026] [:error] [pid 39454:tid 39473] [client 195.201.199.99:47404] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZBn44f01uYc0DFDtzvQiQAAAc4"]
[Sat Feb 14 20:17:42.718869 2026] [:error] [pid 26209:tid 26287] [client 195.201.199.99:48508] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZBn5mexYDXnloPeXAV91gAAApM"]
[Sat Feb 14 20:17:45.769658 2026] [:error] [pid 36219:tid 36269] [client 195.201.199.99:49578] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZBn6Ze-m2OpEy0FNjhT4gAAA5U"]
[Sat Feb 14 20:17:48.880359 2026] [:error] [pid 26209:tid 26281] [client 195.201.199.99:50738] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZBn7GexYDXnloPeXAV93gAAAo0"]
[Sat Feb 14 20:17:52.473679 2026] [:error] [pid 36056:tid 36063] [client 195.201.199.99:51954] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZBn8Lv3wQbSPS1vpOgYdQAAAAU"]
[Sat Feb 14 20:17:55.297884 2026] [:error] [pid 36056:tid 36069] [client 195.201.199.99:53000] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZBn87v3wQbSPS1vpOgYdwAAAAs"]
[Sat Feb 14 20:17:58.109284 2026] [:error] [pid 39521:tid 39565] [client 195.201.199.99:53986] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZBn9gAo-uyPyZFb8m_AywAAAw0"]
[Sat Feb 14 20:18:01.444612 2026] [:error] [pid 36219:tid 36265] [client 195.201.199.99:55074] [client 195.201.199.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZBn-Ze-m2OpEy0FNjhT8QAAA5E"]
[Sun Feb 15 00:45:33.253647 2026] [:error] [pid 28479:tid 28493] [client 43.135.142.7:40700] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZCmrYyrlZ0IAq0j37jaJgAAAAw"]
[Sun Feb 15 02:38:55.275692 2026] [:error] [pid 15954:tid 16001] [client 182.42.104.32:58101] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZDBP-2YplA3pz7MAbWT7gAAAdE"]
[Sun Feb 15 05:59:29.396115 2026] [:error] [pid 33175:tid 33198] [client 43.135.130.202:43592] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZDwQTXeel6Kpkyzd_6rmQAAAZQ"]
[Sun Feb 15 08:44:07.975324 2026] [:error] [pid 14577:tid 14603] [client 51.68.34.57:58742] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZEW13Tqrkuce6u39HuVbAAAARc"]
[Sun Feb 15 08:48:23.200691 2026] [:error] [pid 21557:tid 21604] [client 51.68.34.57:58844] [client 51.68.34.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZEX1zuRDtQOeGsLVTFLqQAAAVI"]
[Sun Feb 15 09:02:18.608208 2026] [:error] [pid 14577:tid 14595] [client 182.42.104.32:56180] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZEbGnTqrkuce6u39HuZXAAAAQ8"]
[Sun Feb 15 09:55:09.136234 2026] [:error] [pid 35497:tid 35533] [client 45.85.147.218:34774] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZEnfcyqpfYzoxiskhsOfgAAAMY"]
[Sun Feb 15 09:55:12.158068 2026] [:error] [pid 42752:tid 42769] [client 45.85.147.218:60530] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZEngMClY05C-Gq9l0gKdAAAAso"]
[Sun Feb 15 09:55:17.449642 2026] [:error] [pid 42659:tid 42668] [client 45.85.147.218:60538] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZEnhey3JGHOB-Rj_FYPKwAAAEc"]
[Sun Feb 15 09:55:20.695903 2026] [:error] [pid 42659:tid 42667] [client 45.85.147.218:47660] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZEniOy3JGHOB-Rj_FYPMAAAAEY"]
[Sun Feb 15 09:55:24.055347 2026] [:error] [pid 42752:tid 42773] [client 45.85.147.218:47672] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZEnjMClY05C-Gq9l0gKfQAAAs4"]
[Sun Feb 15 09:55:26.868827 2026] [:error] [pid 42754:tid 42814] [client 45.85.147.218:47680] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZEnjuiCZrZWT4BVy1195QAAA8A"]
[Sun Feb 15 09:55:29.681476 2026] [:error] [pid 31679:tid 31713] [client 45.85.147.218:58000] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZEnkRz9Q_0Eh7M-Xr1NEQAAAgQ"]
[Sun Feb 15 09:55:32.557580 2026] [:error] [pid 31679:tid 31715] [client 45.85.147.218:58014] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZEnlBz9Q_0Eh7M-Xr1NEwAAAgY"]
[Sun Feb 15 09:55:35.577260 2026] [:error] [pid 42754:tid 42827] [client 45.85.147.218:58026] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZEnl-iCZrZWT4BVy1196gAAA80"]
[Sun Feb 15 09:55:38.878964 2026] [:error] [pid 42754:tid 42826] [client 45.85.147.218:58366] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZEnmuiCZrZWT4BVy1197gAAA8w"]
[Sun Feb 15 09:55:41.601681 2026] [:error] [pid 42754:tid 42823] [client 45.85.147.218:58380] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZEnneiCZrZWT4BVy1198AAAA8k"]
[Sun Feb 15 09:55:44.529001 2026] [:error] [pid 19652:tid 19669] [client 45.85.147.218:58392] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZEnoDHg2T9K5fiyOL-EiwAAAA8"]
[Sun Feb 15 09:55:47.567102 2026] [:error] [pid 14577:tid 14595] [client 45.85.147.218:58398] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZEno3Tqrkuce6u39Hul5gAAAQ8"]
[Sun Feb 15 09:55:50.125749 2026] [:error] [pid 42754:tid 42833] [client 45.85.147.218:52826] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZEnpuiCZrZWT4BVy1198QAAA9M"]
[Sun Feb 15 09:55:52.879972 2026] [:error] [pid 35557:tid 35582] [client 45.85.147.218:52832] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZEnqMI4REuGME4xEbPftwAAAlM"]
[Sun Feb 15 09:55:55.578632 2026] [:error] [pid 14577:tid 14601] [client 45.85.147.218:52840] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZEnq3Tqrkuce6u39Hul_QAAARU"]
[Sun Feb 15 09:55:58.275745 2026] [:error] [pid 35497:tid 35548] [client 45.85.147.218:49036] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZEnrsyqpfYzoxiskhsOogAAANU"]
[Sun Feb 15 09:56:01.039456 2026] [:error] [pid 42752:tid 42769] [client 45.85.147.218:49040] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZEnscClY05C-Gq9l0gKjgAAAso"]
[Sun Feb 15 09:56:03.744534 2026] [:error] [pid 35557:tid 35564] [client 45.85.147.218:49044] [client 45.85.147.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZEns8I4REuGME4xEbPfvgAAAkE"]
[Sun Feb 15 10:24:17.912421 2026] [:error] [pid 42659:tid 42663] [client 217.216.74.224:59619] [client 217.216.74.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZEuUey3JGHOB-Rj_FYW-AAAAEI"]
[Sun Feb 15 10:24:22.424057 2026] [:error] [pid 42659:tid 42673] [client 217.216.74.224:55835] [client 217.216.74.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aZEuVuy3JGHOB-Rj_FYW_gAAAEw"]
[Sun Feb 15 10:38:04.601860 2026] [:error] [pid 35560:tid 35624] [client 54.37.252.153:37640] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZExjAZSChHPc3occZ7sgAAAAwc"]
[Sun Feb 15 10:38:07.370509 2026] [:error] [pid 35497:tid 35540] [client 54.37.252.153:44588] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZExj8yqpfYzoxiskhsXOwAAAM0"]
[Sun Feb 15 10:38:09.848007 2026] [:error] [pid 42754:tid 42817] [client 54.37.252.153:33312] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZExkeiCZrZWT4BVy12DkgAAA8M"]
[Sun Feb 15 10:38:12.274927 2026] [:error] [pid 35560:tid 35631] [client 54.37.252.153:33324] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZExlAZSChHPc3occZ7skwAAAw4"]
[Sun Feb 15 10:38:14.668237 2026] [:error] [pid 35560:tid 35623] [client 54.37.252.153:33330] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZExlgZSChHPc3occZ7slwAAAwY"]
[Sun Feb 15 10:38:17.302802 2026] [:error] [pid 35497:tid 35528] [client 54.37.252.153:33338] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZExmcyqpfYzoxiskhsXRgAAAME"]
[Sun Feb 15 10:38:19.678034 2026] [:error] [pid 14577:tid 14584] [client 54.37.252.153:60064] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZExm3Tqrkuce6u39Hus6gAAAQQ"]
[Sun Feb 15 10:38:22.070944 2026] [:error] [pid 42752:tid 42777] [client 54.37.252.153:60080] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZExnsClY05C-Gq9l0gPdgAAAtI"]
[Sun Feb 15 10:38:24.564184 2026] [:error] [pid 35497:tid 35544] [client 54.37.252.153:60088] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZExoMyqpfYzoxiskhsXUAAAANE"]
[Sun Feb 15 10:38:27.059092 2026] [:error] [pid 19652:tid 19671] [client 54.37.252.153:60096] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZExozHg2T9K5fiyOL-K4gAAABE"]
[Sun Feb 15 10:38:29.655406 2026] [:error] [pid 35557:tid 35566] [client 54.37.252.153:43184] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZExpcI4REuGME4xEbPmLgAAAkM"]
[Sun Feb 15 10:38:32.389308 2026] [:error] [pid 35557:tid 35564] [client 54.37.252.153:43196] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZExqMI4REuGME4xEbPmMQAAAkE"]
[Sun Feb 15 10:38:35.026882 2026] [:error] [pid 35497:tid 35542] [client 54.37.252.153:43206] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZExq8yqpfYzoxiskhsXWwAAAM8"]
[Sun Feb 15 10:38:37.947431 2026] [:error] [pid 14577:tid 14583] [client 54.37.252.153:43214] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aZExrXTqrkuce6u39Hus9QAAAQM"]
[Sun Feb 15 10:38:40.697765 2026] [:error] [pid 42659:tid 42676] [client 54.37.252.153:48468] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZExsOy3JGHOB-Rj_FYavgAAAE8"]
[Sun Feb 15 10:38:43.358412 2026] [:error] [pid 35497:tid 35533] [client 54.37.252.153:48476] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZExs8yqpfYzoxiskhsXZAAAAMY"]
[Sun Feb 15 10:38:45.720015 2026] [:error] [pid 35557:tid 35582] [client 54.37.252.153:48480] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZExtcI4REuGME4xEbPmPQAAAlM"]
[Sun Feb 15 10:38:48.753664 2026] [:error] [pid 42752:tid 42761] [client 54.37.252.153:58702] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aZExuMClY05C-Gq9l0gPjQAAAsI"]
[Sun Feb 15 10:38:51.287886 2026] [:error] [pid 42753:tid 42810] [client 54.37.252.153:58710] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aZExuwhQMLzszrBLG6epBQAAA5c"]
[Sun Feb 15 10:38:53.866086 2026] [:error] [pid 35560:tid 35617] [client 54.37.252.153:58718] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZExvQZSChHPc3occZ7ssgAAAwA"]
[Sun Feb 15 10:38:56.466223 2026] [:error] [pid 42659:tid 42663] [client 54.37.252.153:58724] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZExwOy3JGHOB-Rj_FYaygAAAEI"]
[Sun Feb 15 10:38:59.242217 2026] [:error] [pid 35557:tid 35572] [client 54.37.252.153:47958] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aZExw8I4REuGME4xEbPmRwAAAkk"]
[Sun Feb 15 10:39:34.680394 2026] [:error] [pid 42752:tid 42761] [client 54.37.252.153:47970] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZEx5sClY05C-Gq9l0gPqgAAAsI"]
[Sun Feb 15 10:39:37.730604 2026] [:error] [pid 19652:tid 19670] [client 54.37.252.153:56036] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZEx6THg2T9K5fiyOL-LBQAAABA"]
[Sun Feb 15 10:39:40.403128 2026] [:error] [pid 42752:tid 42781] [client 54.37.252.153:38910] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZEx7MClY05C-Gq9l0gPswAAAtY"]
[Sun Feb 15 10:39:43.449775 2026] [:error] [pid 42753:tid 42796] [client 54.37.252.153:38916] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZEx7whQMLzszrBLG6epLQAAA4k"]
[Sun Feb 15 10:39:46.743707 2026] [:error] [pid 14577:tid 14599] [client 54.37.252.153:38918] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZEx8nTqrkuce6u39HutNAAAARM"]
[Sun Feb 15 10:39:49.364957 2026] [:error] [pid 42753:tid 42810] [client 54.37.252.153:44564] [client 54.37.252.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZEx9QhQMLzszrBLG6epMwAAA5c"]
[Sun Feb 15 11:09:12.938922 2026] [:error] [pid 35497:tid 35533] [client 174.138.93.200:38968] [client 174.138.93.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZE42MyqpfYzoxiskhsfGAAAAMY"]
[Sun Feb 15 11:09:14.220605 2026] [:error] [pid 42754:tid 42834] [client 174.138.93.200:58026] [client 174.138.93.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZE42uiCZrZWT4BVy12ILgAAA9Q"]
[Sun Feb 15 12:52:03.180358 2026] [:error] [pid 14577:tid 14593] [client 174.138.93.200:38834] [client 174.138.93.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZFQ83Tqrkuce6u39HvXRAAAAQ0"]
[Sun Feb 15 12:52:06.285441 2026] [:error] [pid 35497:tid 35549] [client 174.138.93.200:51386] [client 174.138.93.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZFQ9syqpfYzoxiskhs3lgAAANY"]
[Sun Feb 15 15:12:34.895600 2026] [:error] [pid 42754:tid 42837] [client 110.166.71.39:43072] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZFx4uiCZrZWT4BVy12xZwAAA9c"]
[Sun Feb 15 15:13:51.102125 2026] [:error] [pid 35557:tid 35570] [client 43.156.232.190:46424] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZFyL8I4REuGME4xEbMc2wAAAkc"]
[Sun Feb 15 19:44:39.804966 2026] [:error] [pid 42753:tid 42794] [client 174.138.93.200:38276] [client 174.138.93.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZGxpwhQMLzszrBLG6f_RwAAA4c"]
[Sun Feb 15 19:44:42.345061 2026] [:error] [pid 42754:tid 42830] [client 174.138.93.200:33966] [client 174.138.93.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZGxquiCZrZWT4BVy13gAgAAA9A"]
[Mon Feb 16 01:30:50.690163 2026] [:error] [pid 35497:tid 35535] [client 103.173.244.251:60844] [client 103.173.244.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.173.244.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZICysyqpfYzoxiskhu9tAAAAMg"]
[Mon Feb 16 01:36:21.638907 2026] [:error] [pid 19652:tid 19676] [client 103.173.244.251:50932] [client 103.173.244.251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZIEFTHg2T9K5fiyOL9UPwAAABY"]
[Mon Feb 16 01:38:13.012497 2026] [:error] [pid 35497:tid 35528] [client 103.173.244.251:60197] [client 103.173.244.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.173.244.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZIEhcyqpfYzoxiskhu-1QAAAME"]
[Mon Feb 16 01:48:31.814913 2026] [:error] [pid 35557:tid 35570] [client 51.75.151.149:61296] [client 51.75.151.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aZIG78I4REuGME4xEbOWLQAAAkc"]
[Mon Feb 16 02:07:55.275777 2026] [:error] [pid 42753:tid 42809] [client 174.138.93.200:45346] [client 174.138.93.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZILewhQMLzszrBLG6crLQAAA5Y"]
[Mon Feb 16 02:07:58.187066 2026] [:error] [pid 42752:tid 42774] [client 174.138.93.200:38454] [client 174.138.93.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZILfsClY05C-Gq9l0iSewAAAs8"]
[Mon Feb 16 02:33:06.707821 2026] [:error] [pid 42659:tid 42674] [client 43.131.36.84:55534] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZIRYuy3JGHOB-Rj_FbBJgAAAE0"]
[Mon Feb 16 04:08:41.419577 2026] [:error] [pid 4347:tid 4373] [client 217.182.195.233:40654] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZInyTFcjv6pEAnSEid4TQAAAAU"]
[Mon Feb 16 04:08:43.985921 2026] [:error] [pid 4455:tid 4471] [client 217.182.195.233:52762] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZInywNa-4dvQCL0rupHiwAAAM4"]
[Mon Feb 16 04:08:46.439561 2026] [:error] [pid 4347:tid 4375] [client 217.182.195.233:52772] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZInzjFcjv6pEAnSEid4UAAAAAc"]
[Mon Feb 16 04:08:48.993932 2026] [:error] [pid 4348:tid 4404] [client 217.182.195.233:52784] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZIn0HxbK-cCGKg9aytX3wAAAEk"]
[Mon Feb 16 04:08:51.397530 2026] [:error] [pid 4455:tid 4474] [client 217.182.195.233:57998] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZIn0wNa-4dvQCL0rupHmQAAANE"]
[Mon Feb 16 04:08:53.673795 2026] [:error] [pid 37004:tid 37017] [client 217.182.195.233:58012] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZIn1VXWqA9gxE5oGmbgMAAAAQs"]
[Mon Feb 16 04:08:56.169433 2026] [:error] [pid 4348:tid 4411] [client 217.182.195.233:58020] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZIn2HxbK-cCGKg9aytX6AAAAFA"]
[Mon Feb 16 04:08:58.571079 2026] [:error] [pid 4347:tid 4382] [client 217.182.195.233:58022] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZIn2jFcjv6pEAnSEid4XAAAAA4"]
[Mon Feb 16 04:09:01.178749 2026] [:error] [pid 4347:tid 4371] [client 217.182.195.233:45790] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZIn3TFcjv6pEAnSEid4YwAAAAM"]
[Mon Feb 16 04:09:03.704090 2026] [:error] [pid 37004:tid 37014] [client 217.182.195.233:45802] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZIn31XWqA9gxE5oGmbgQQAAAQg"]
[Mon Feb 16 04:09:06.267933 2026] [:error] [pid 4455:tid 4459] [client 217.182.195.233:45804] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZIn4gNa-4dvQCL0rupHvAAAAMI"]
[Mon Feb 16 04:09:08.757698 2026] [:error] [pid 4455:tid 4477] [client 217.182.195.233:45808] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZIn5ANa-4dvQCL0rupHxAAAANQ"]
[Mon Feb 16 04:09:11.444656 2026] [:error] [pid 4349:tid 4444] [client 217.182.195.233:35380] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZIn58rbZYafUL_3QfzRWgAAAJY"]
[Mon Feb 16 04:09:13.942681 2026] [:error] [pid 37004:tid 37012] [client 217.182.195.233:35386] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aZIn6VXWqA9gxE5oGmbgXgAAAQY"]
[Mon Feb 16 04:09:16.447644 2026] [:error] [pid 4455:tid 4462] [client 217.182.195.233:35398] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZIn7ANa-4dvQCL0rupH0gAAAMU"]
[Mon Feb 16 04:09:18.967741 2026] [:error] [pid 37004:tid 37029] [client 217.182.195.233:35408] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZIn7lXWqA9gxE5oGmbgdAAAARc"]
[Mon Feb 16 04:09:21.556222 2026] [:error] [pid 4349:tid 4439] [client 217.182.195.233:38384] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZIn8crbZYafUL_3QfzRaQAAAJE"]
[Mon Feb 16 04:09:24.022064 2026] [:error] [pid 4347:tid 4391] [client 217.182.195.233:38388] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aZIn9DFcjv6pEAnSEid4dAAAABc"]
[Mon Feb 16 04:09:26.482772 2026] [:error] [pid 37004:tid 37020] [client 217.182.195.233:38404] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aZIn9lXWqA9gxE5oGmbgjwAAAQ4"]
[Mon Feb 16 04:09:28.873618 2026] [:error] [pid 4349:tid 4422] [client 217.182.195.233:38414] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZIn-MrbZYafUL_3QfzReAAAAIA"]
[Mon Feb 16 04:09:31.271992 2026] [:error] [pid 4349:tid 4427] [client 217.182.195.233:38656] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZIn-8rbZYafUL_3QfzRfwAAAIU"]
[Mon Feb 16 04:09:33.558799 2026] [:error] [pid 4349:tid 4423] [client 217.182.195.233:38664] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aZIn_crbZYafUL_3QfzRhgAAAIE"]
[Mon Feb 16 04:09:35.979607 2026] [:error] [pid 4347:tid 4383] [client 217.182.195.233:38676] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aZIn_zFcjv6pEAnSEid4hwAAAA8"]
[Mon Feb 16 04:10:07.566405 2026] [:error] [pid 4348:tid 4419] [client 217.182.195.233:38688] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZIoH3xbK-cCGKg9aytYbAAAAFg"]
[Mon Feb 16 04:10:10.020711 2026] [:error] [pid 37004:tid 37008] [client 217.182.195.233:53668] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZIoIlXWqA9gxE5oGmbg7AAAAQI"]
[Mon Feb 16 04:10:12.560998 2026] [:error] [pid 4349:tid 4444] [client 217.182.195.233:34914] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZIoJMrbZYafUL_3QfzRrwAAAJY"]
[Mon Feb 16 04:10:15.058619 2026] [:error] [pid 4455:tid 4471] [client 217.182.195.233:34920] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZIoJwNa-4dvQCL0rupIUgAAAM4"]
[Mon Feb 16 04:10:17.575706 2026] [:error] [pid 4455:tid 4470] [client 217.182.195.233:34922] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZIoKQNa-4dvQCL0rupIUwAAAM0"]
[Mon Feb 16 04:31:38.522944 2026] [autoindex:error] [pid 4348:tid 4401] [client 206.189.137.214:50824] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Feb 16 06:31:23.699903 2026] [:error] [pid 37004:tid 37017] [client 62.84.185.52:10834] [client 62.84.185.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZJJO1XWqA9gxE5oGmYmnAAAAQs"]
[Mon Feb 16 06:32:38.982654 2026] [:error] [pid 4455:tid 4476] [client 65.108.78.33:12468] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZJJhgNa-4dvQCL0ruqFAgAAANM"]
[Mon Feb 16 06:32:41.580200 2026] [:error] [pid 4347:tid 4379] [client 65.108.78.33:12480] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZJJiTFcjv6pEAnSEieoogAAAAs"]
[Mon Feb 16 06:32:44.083441 2026] [:error] [pid 4349:tid 4438] [client 65.108.78.33:6472] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZJJjMrbZYafUL_3QfwFGgAAAJA"]
[Mon Feb 16 06:32:46.595979 2026] [:error] [pid 4455:tid 4464] [client 65.108.78.33:6476] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZJJjgNa-4dvQCL0ruqFBwAAAMc"]
[Mon Feb 16 06:32:49.261740 2026] [:error] [pid 4349:tid 4427] [client 65.108.78.33:6488] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZJJkcrbZYafUL_3QfwFIAAAAIU"]
[Mon Feb 16 06:32:51.822965 2026] [:error] [pid 4347:tid 4370] [client 65.108.78.33:6498] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZJJkzFcjv6pEAnSEieoswAAAAI"]
[Mon Feb 16 06:32:54.391580 2026] [:error] [pid 37004:tid 37011] [client 65.108.78.33:5266] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZJJllXWqA9gxE5oGmYnLgAAAQU"]
[Mon Feb 16 06:32:57.059866 2026] [:error] [pid 37004:tid 37009] [client 65.108.78.33:5282] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZJJmVXWqA9gxE5oGmYnNwAAAQM"]
[Mon Feb 16 06:33:10.073547 2026] [:error] [pid 4349:tid 4445] [client 65.108.78.33:30362] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZJJpsrbZYafUL_3QfwFMwAAAJc"]
[Mon Feb 16 06:33:12.702323 2026] [:error] [pid 4349:tid 4432] [client 65.108.78.33:61340] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZJJqMrbZYafUL_3QfwFNAAAAIo"]
[Mon Feb 16 06:33:15.362764 2026] [:error] [pid 4348:tid 4406] [client 65.108.78.33:61350] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZJJq3xbK-cCGKg9ayuJlgAAAEs"]
[Mon Feb 16 06:33:18.023528 2026] [:error] [pid 37004:tid 37022] [client 65.108.78.33:61358] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZJJrlXWqA9gxE5oGmYnZgAAARA"]
[Mon Feb 16 06:33:20.480264 2026] [:error] [pid 4347:tid 4368] [client 65.108.78.33:61362] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZJJsDFcjv6pEAnSEieoxwAAAAA"]
[Mon Feb 16 06:33:23.027223 2026] [:error] [pid 4455:tid 4473] [client 65.108.78.33:14258] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZJJswNa-4dvQCL0ruqFPwAAANA"]
[Mon Feb 16 06:33:25.516951 2026] [:error] [pid 4347:tid 4387] [client 65.108.78.33:14272] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZJJtTFcjv6pEAnSEieozwAAABM"]
[Mon Feb 16 06:33:27.937018 2026] [:error] [pid 4348:tid 4414] [client 65.108.78.33:14276] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZJJt3xbK-cCGKg9ayuJpwAAAFM"]
[Mon Feb 16 06:33:30.588002 2026] [:error] [pid 4348:tid 4413] [client 65.108.78.33:14292] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZJJunxbK-cCGKg9ayuJrAAAAFI"]
[Mon Feb 16 06:33:33.089688 2026] [:error] [pid 37004:tid 37021] [client 65.108.78.33:7650] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZJJvVXWqA9gxE5oGmYndgAAAQ8"]
[Mon Feb 16 07:12:45.803535 2026] [:error] [pid 4455:tid 4466] [client 65.108.78.33:40430] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZJS7QNa-4dvQCL0ruqXbwAAAMk"]
[Mon Feb 16 07:12:48.442208 2026] [:error] [pid 37004:tid 37007] [client 65.108.78.33:40434] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZJS8FXWqA9gxE5oGmY9LwAAAQE"]
[Mon Feb 16 07:12:51.040981 2026] [:error] [pid 4347:tid 4370] [client 65.108.78.33:40446] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZJS8zFcjv6pEAnSEie1-gAAAAI"]
[Mon Feb 16 07:12:53.648497 2026] [:error] [pid 37004:tid 37026] [client 65.108.78.33:34022] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZJS9VXWqA9gxE5oGmY9NwAAARQ"]
[Mon Feb 16 07:12:56.141462 2026] [:error] [pid 4348:tid 4405] [client 65.108.78.33:34030] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZJS-HxbK-cCGKg9ayuYIAAAAEo"]
[Mon Feb 16 07:12:58.655546 2026] [:error] [pid 4347:tid 4389] [client 65.108.78.33:34044] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZJS-jFcjv6pEAnSEie2EAAAABU"]
[Mon Feb 16 07:13:01.114221 2026] [:error] [pid 37004:tid 37026] [client 65.108.78.33:34046] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZJS_VXWqA9gxE5oGmY9UgAAARQ"]
[Mon Feb 16 07:13:03.787319 2026] [:error] [pid 37004:tid 37022] [client 65.108.78.33:49806] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZJS_1XWqA9gxE5oGmY9VgAAARA"]
[Mon Feb 16 07:13:06.248729 2026] [:error] [pid 4455:tid 4462] [client 65.108.78.33:49814] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZJTAgNa-4dvQCL0ruqXkAAAAMU"]
[Mon Feb 16 07:13:18.927470 2026] [:error] [pid 4347:tid 4385] [client 65.108.78.33:35596] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZJTDjFcjv6pEAnSEie2HQAAABE"]
[Mon Feb 16 07:13:21.493838 2026] [:error] [pid 4347:tid 4389] [client 65.108.78.33:35608] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZJTETFcjv6pEAnSEie2IAAAABU"]
[Mon Feb 16 07:13:24.079565 2026] [:error] [pid 37004:tid 37030] [client 65.108.78.33:62286] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZJTFFXWqA9gxE5oGmY9dgAAARg"]
[Mon Feb 16 07:13:26.715497 2026] [:error] [pid 4349:tid 4431] [client 65.108.78.33:62294] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZJTFsrbZYafUL_3QfwUhwAAAIk"]
[Mon Feb 16 07:13:29.425046 2026] [:error] [pid 37004:tid 37017] [client 65.108.78.33:62300] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZJTGVXWqA9gxE5oGmY9hQAAAQs"]
[Mon Feb 16 07:13:32.222689 2026] [:error] [pid 4349:tid 4422] [client 65.108.78.33:62306] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZJTHMrbZYafUL_3QfwUjAAAAIA"]
[Mon Feb 16 07:13:34.692605 2026] [:error] [pid 4348:tid 4409] [client 65.108.78.33:1284] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZJTHnxbK-cCGKg9ayuYVwAAAE4"]
[Mon Feb 16 07:13:37.136516 2026] [:error] [pid 37004:tid 37015] [client 65.108.78.33:1300] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZJTIVXWqA9gxE5oGmY9jgAAAQk"]
[Mon Feb 16 07:13:39.765614 2026] [:error] [pid 4348:tid 4396] [client 65.108.78.33:1308] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZJTI3xbK-cCGKg9ayuYYQAAAEE"]
[Mon Feb 16 12:31:02.237774 2026] [:error] [pid 26648:tid 26667] [client 185.193.89.19:54856] [client 185.193.89.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aZKdhjT55fUixS3gmyh-IAAAAY4"]
[Mon Feb 16 13:03:40.010021 2026] [autoindex:error] [pid 38888:tid 38904] [client 213.199.32.162:61240] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Feb 16 16:02:19.057165 2026] [:error] [pid 37004:tid 37011] [client 193.32.176.39:53692] [client 193.32.176.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aZLPC1XWqA9gxE5oGmbq_QAAAQU"]
[Mon Feb 16 21:10:31.842021 2026] [:error] [pid 37004:tid 37015] [client 93.158.213.26:60098] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZMXR1XWqA9gxE5oGmY5EwAAAQk"]
[Mon Feb 16 21:10:34.845646 2026] [:error] [pid 4347:tid 4392] [client 93.158.213.26:43634] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZMXSjFcjv6pEAnSEifgbQAAABg"]
[Mon Feb 16 21:10:37.697888 2026] [:error] [pid 26648:tid 26656] [client 93.158.213.26:43646] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZMXTTT55fUixS3gmyhHggAAAYM"]
[Mon Feb 16 21:10:40.294232 2026] [:error] [pid 4348:tid 4415] [client 93.158.213.26:43654] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZMXUHxbK-cCGKg9ayvAmwAAAFQ"]
[Mon Feb 16 21:10:43.399412 2026] [:error] [pid 26648:tid 26669] [client 93.158.213.26:43662] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZMXUzT55fUixS3gmyhHjAAAAZA"]
[Mon Feb 16 21:10:46.171779 2026] [:error] [pid 4348:tid 4411] [client 93.158.213.26:48832] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZMXVnxbK-cCGKg9ayvApgAAAFA"]
[Mon Feb 16 21:10:49.863080 2026] [:error] [pid 4347:tid 4384] [client 93.158.213.26:48836] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZMXWTFcjv6pEAnSEifgrwAAABA"]
[Mon Feb 16 21:10:52.289284 2026] [:error] [pid 4349:tid 4429] [client 93.158.213.26:48844] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZMXXMrbZYafUL_3QfwHNgAAAIc"]
[Mon Feb 16 21:10:55.051583 2026] [:error] [pid 37004:tid 37023] [client 93.158.213.26:39080] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZMXX1XWqA9gxE5oGmY5UgAAARE"]
[Mon Feb 16 21:10:58.117592 2026] [:error] [pid 38888:tid 38904] [client 93.158.213.26:39092] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZMXYqmDoBJWPvV4pcNmYwAAAU0"]
[Mon Feb 16 21:11:00.918341 2026] [:error] [pid 4349:tid 4425] [client 93.158.213.26:39100] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZMXZMrbZYafUL_3QfwHPwAAAIM"]
[Mon Feb 16 21:11:04.031617 2026] [:error] [pid 37004:tid 37021] [client 93.158.213.26:44844] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZMXaFXWqA9gxE5oGmY5WQAAAQ8"]
[Mon Feb 16 21:11:06.937197 2026] [:error] [pid 4349:tid 4436] [client 93.158.213.26:44850] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZMXasrbZYafUL_3QfwHQQAAAI4"]
[Mon Feb 16 21:11:11.259381 2026] [:error] [pid 4348:tid 4405] [client 93.158.213.26:44858] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aZMXb3xbK-cCGKg9ayvA0AAAAEo"]
[Mon Feb 16 21:11:14.133084 2026] [:error] [pid 26648:tid 26670] [client 93.158.213.26:40774] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZMXcjT55fUixS3gmyhHswAAAZE"]
[Mon Feb 16 21:11:16.723655 2026] [:error] [pid 4348:tid 4407] [client 93.158.213.26:40788] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZMXdHxbK-cCGKg9ayvA2AAAAEw"]
[Mon Feb 16 21:11:19.478304 2026] [:error] [pid 4349:tid 4444] [client 93.158.213.26:40802] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZMXd8rbZYafUL_3QfwHTQAAAJY"]
[Mon Feb 16 21:11:22.624500 2026] [:error] [pid 4348:tid 4406] [client 93.158.213.26:40812] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aZMXenxbK-cCGKg9ayvA5wAAAEs"]
[Mon Feb 16 21:11:25.384131 2026] [:error] [pid 4455:tid 4481] [client 93.158.213.26:55492] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aZMXfQNa-4dvQCL0ruqYnwAAANg"]
[Mon Feb 16 21:12:03.046260 2026] [:error] [pid 4347:tid 4372] [client 93.158.213.26:55506] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZMXozFcjv6pEAnSEifhdAAAAAQ"]
[Mon Feb 16 21:12:05.626416 2026] [:error] [pid 38888:tid 38911] [client 93.158.213.26:42332] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZMXpamDoBJWPvV4pcNmugAAAVQ"]
[Mon Feb 16 21:12:08.389378 2026] [:error] [pid 37004:tid 37017] [client 93.158.213.26:42340] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZMXqFXWqA9gxE5oGmY5mwAAAQs"]
[Mon Feb 16 21:12:11.393591 2026] [:error] [pid 26648:tid 26660] [client 93.158.213.26:42342] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZMXqzT55fUixS3gmyhH5wAAAYc"]
[Mon Feb 16 21:12:14.820992 2026] [:error] [pid 38888:tid 38896] [client 93.158.213.26:48266] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZMXrqmDoBJWPvV4pcNmxgAAAUU"]
[Mon Feb 16 21:12:17.759638 2026] [:error] [pid 38888:tid 38909] [client 93.158.213.26:48274] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZMXsamDoBJWPvV4pcNmzwAAAVI"]
[Mon Feb 16 21:12:20.524843 2026] [:error] [pid 38888:tid 38900] [client 93.158.213.26:48286] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZMXtKmDoBJWPvV4pcNm3QAAAUk"]
[Mon Feb 16 21:12:23.394882 2026] [:error] [pid 37004:tid 37013] [client 93.158.213.26:48290] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZMXt1XWqA9gxE5oGmY5rAAAAQc"]
[Mon Feb 16 21:12:26.294826 2026] [:error] [pid 37004:tid 37022] [client 93.158.213.26:47638] [client 93.158.213.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZMXulXWqA9gxE5oGmY5tgAAARA"]
[Mon Feb 16 23:05:43.573001 2026] [:error] [pid 26648:tid 26658] [client 180.110.203.108:55242] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZMyRzT55fUixS3gmyhmagAAAYU"]
[Mon Feb 16 23:55:14.101845 2026] [:error] [pid 4455:tid 4461] [client 79.137.67.84:59144] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZM94gNa-4dvQCL0rurATwAAAMQ"]
[Tue Feb 17 01:14:31.011961 2026] [:error] [pid 34933:tid 34969] [client 193.70.44.235:36676] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZNQd8ubrqI4iEJPNFmHuAAAAkM"]
[Tue Feb 17 01:14:33.407601 2026] [:error] [pid 4348:tid 4406] [client 193.70.44.235:48396] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZNQeXxbK-cCGKg9aysBMwAAAEs"]
[Tue Feb 17 01:14:35.707132 2026] [:error] [pid 4349:tid 4423] [client 193.70.44.235:48464] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZNQe8rbZYafUL_3Qfw-TAAAAIE"]
[Tue Feb 17 01:14:38.191616 2026] [:error] [pid 4349:tid 4422] [client 193.70.44.235:48466] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZNQfsrbZYafUL_3Qfw-UAAAAIA"]
[Tue Feb 17 01:14:40.760219 2026] [:error] [pid 38888:tid 38900] [client 193.70.44.235:48468] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZNQgKmDoBJWPvV4pcOcJQAAAUk"]
[Tue Feb 17 01:14:43.088943 2026] [:error] [pid 4455:tid 4478] [client 193.70.44.235:48482] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZNQgwNa-4dvQCL0rurOsQAAANU"]
[Tue Feb 17 01:14:45.468253 2026] [:error] [pid 4348:tid 4408] [client 193.70.44.235:48486] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZNQhXxbK-cCGKg9aysBQwAAAE0"]
[Tue Feb 17 01:14:47.881733 2026] [:error] [pid 4347:tid 4376] [client 193.70.44.235:53644] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZNQhzFcjv6pEAnSEicrrgAAAAg"]
[Tue Feb 17 01:14:50.116516 2026] [:error] [pid 4349:tid 4434] [client 193.70.44.235:53646] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZNQisrbZYafUL_3Qfw-WgAAAIw"]
[Tue Feb 17 01:14:52.385335 2026] [:error] [pid 38888:tid 38915] [client 193.70.44.235:53654] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZNQjKmDoBJWPvV4pcOcKQAAAVg"]
[Tue Feb 17 01:14:54.766864 2026] [:error] [pid 34904:tid 34927] [client 193.70.44.235:53670] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZNQjhoDUNgfYrSP5-t1WQAAAdU"]
[Tue Feb 17 01:14:57.142632 2026] [:error] [pid 4349:tid 4437] [client 193.70.44.235:45312] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZNQkcrbZYafUL_3Qfw-ZwAAAI8"]
[Tue Feb 17 01:14:59.694803 2026] [:error] [pid 4455:tid 4457] [client 193.70.44.235:45328] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZNQkwNa-4dvQCL0rurOvgAAAMA"]
[Tue Feb 17 01:15:02.092574 2026] [:error] [pid 34933:tid 34970] [client 193.70.44.235:45336] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZNQlsubrqI4iEJPNFmH2QAAAkQ"]
[Tue Feb 17 01:15:04.592815 2026] [:error] [pid 38888:tid 38899] [client 193.70.44.235:45346] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZNQmKmDoBJWPvV4pcOcNQAAAUg"]
[Tue Feb 17 01:15:07.142336 2026] [:error] [pid 4349:tid 4422] [client 193.70.44.235:55630] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZNQm8rbZYafUL_3Qfw-bQAAAIA"]
[Tue Feb 17 01:15:09.674513 2026] [:error] [pid 34932:tid 34956] [client 193.70.44.235:55634] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZNQnUKCWyYIg5P1IPfJRwAAAhE"]
[Tue Feb 17 01:15:12.191441 2026] [:error] [pid 4347:tid 4379] [client 193.70.44.235:55642] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZNQoDFcjv6pEAnSEicryAAAAAs"]
[Tue Feb 17 01:15:14.595166 2026] [:error] [pid 26648:tid 26668] [client 193.70.44.235:55646] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZNQojT55fUixS3gmyh_QgAAAY8"]
[Tue Feb 17 01:15:17.006504 2026] [:error] [pid 4348:tid 4403] [client 193.70.44.235:56976] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZNQpXxbK-cCGKg9aysBWQAAAEg"]
[Tue Feb 17 01:15:19.502565 2026] [:error] [pid 34904:tid 34916] [client 193.70.44.235:56980] [client 193.70.44.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZNQpxoDUNgfYrSP5-t1aQAAAco"]
[Tue Feb 17 04:23:30.090213 2026] [:error] [pid 58552:tid 58614] [client 49.51.52.250:42220] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZN8wjBHVJP2Oz3yR5e9AgAAAFM"]
[Tue Feb 17 05:41:51.340655 2026] [:error] [pid 58659:tid 58670] [client 20.238.121.35:46748] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aZOPH8DX32iTEO4jt2_i1gAAAMk"]
[Tue Feb 17 05:41:59.972205 2026] [:error] [pid 58551:tid 58566] [client 20.238.121.35:47777] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aZOPJ61t8eWr-MgFsppfSgAAAAY"]
[Tue Feb 17 05:42:04.280064 2026] [:error] [pid 58558:tid 58624] [client 20.238.121.35:26791] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aZOPLCmIxlfUL2nViZypIQAAAII"]
[Tue Feb 17 05:42:05.124049 2026] [:error] [pid 32790:tid 32803] [client 20.238.121.35:27329] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aZOPLXs3HJP9ozPHsN7LHQAAAQk"]
[Tue Feb 17 05:42:11.756459 2026] [:error] [pid 58558:tid 58626] [client 20.238.121.35:26766] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aZOPMymIxlfUL2nViZypKAAAAIQ"]
[Tue Feb 17 05:42:14.801449 2026] [:error] [pid 58552:tid 58611] [client 20.238.121.35:16905] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aZOPNjBHVJP2Oz3yR5fcxwAAAFA"]
[Tue Feb 17 05:42:15.991826 2026] [:error] [pid 58659:tid 58682] [client 20.238.121.35:60192] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aZOPN8DX32iTEO4jt2_i-QAAANU"]
[Tue Feb 17 05:42:17.059288 2026] [:error] [pid 58659:tid 58679] [client 20.238.121.35:31871] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aZOPOcDX32iTEO4jt2_i_QAAANI"]
[Tue Feb 17 05:42:18.559404 2026] [:error] [pid 58552:tid 58616] [client 20.238.121.35:4551] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asax.php"] [unique_id "aZOPOjBHVJP2Oz3yR5fczAAAAFU"]
[Tue Feb 17 05:42:20.844666 2026] [:error] [pid 58558:tid 58644] [client 20.238.121.35:24829] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asax.php"] [unique_id "aZOPPCmIxlfUL2nViZypMgAAAJY"]
[Tue Feb 17 05:42:24.202886 2026] [:error] [pid 58558:tid 58633] [client 20.238.121.35:4576] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asax.php"] [unique_id "aZOPQCmIxlfUL2nViZypOgAAAIs"]
[Tue Feb 17 05:42:27.546288 2026] [:error] [pid 58659:tid 58662] [client 20.238.121.35:16571] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asax.php"] [unique_id "aZOPQ8DX32iTEO4jt2_jDgAAAME"]
[Tue Feb 17 05:42:34.863826 2026] [:error] [pid 58558:tid 58622] [client 20.238.121.35:32660] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/co.php"] [unique_id "aZOPSimIxlfUL2nViZypTgAAAIA"]
[Tue Feb 17 05:42:39.092427 2026] [:error] [pid 58659:tid 58672] [client 20.238.121.35:15698] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/co.php"] [unique_id "aZOPT8DX32iTEO4jt2_jHgAAAMs"]
[Tue Feb 17 05:42:43.575249 2026] [:error] [pid 58659:tid 58662] [client 20.238.121.35:32665] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aZOPU8DX32iTEO4jt2_jIwAAAME"]
[Tue Feb 17 05:42:47.373504 2026] [:error] [pid 58551:tid 58575] [client 20.238.121.35:15736] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aZOPV61t8eWr-MgFsppfjwAAAA8"]
[Tue Feb 17 05:42:59.029530 2026] [:error] [pid 58558:tid 58632] [client 20.238.121.35:31761] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOPYymIxlfUL2nViZypgwAAAIo"]
[Tue Feb 17 05:43:05.860443 2026] [:error] [pid 58551:tid 58572] [client 20.238.121.35:5005] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOPaa1t8eWr-MgFsppfogAAAAw"]
[Tue Feb 17 05:43:10.081892 2026] [:error] [pid 32790:tid 32795] [client 20.238.121.35:35608] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZOPbns3HJP9ozPHsN7LjQAAAQE"]
[Tue Feb 17 05:43:32.693436 2026] [:error] [pid 58552:tid 58606] [client 20.238.121.35:9898] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZOPhDBHVJP2Oz3yR5fdLQAAAEs"]
[Tue Feb 17 05:43:35.935142 2026] [:error] [pid 58659:tid 58683] [client 20.238.121.35:35642] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZOPh8DX32iTEO4jt2_jcwAAANY"]
[Tue Feb 17 05:43:42.771314 2026] [:error] [pid 58659:tid 58669] [client 20.238.121.35:9874] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZOPjsDX32iTEO4jt2_jhgAAAMg"]
[Tue Feb 17 05:43:43.914971 2026] [:error] [pid 58552:tid 58597] [client 20.238.121.35:25270] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZOPjzBHVJP2Oz3yR5fdRQAAAEI"]
[Tue Feb 17 05:43:47.755488 2026] [:error] [pid 58552:tid 58597] [client 20.238.121.35:13383] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aZOPkzBHVJP2Oz3yR5fdTAAAAEI"]
[Tue Feb 17 05:43:49.118386 2026] [:error] [pid 58558:tid 58631] [client 20.238.121.35:33594] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aZOPlSmIxlfUL2nViZypzgAAAIk"]
[Tue Feb 17 05:43:52.178366 2026] [:error] [pid 58551:tid 58581] [client 20.238.121.35:16076] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aZOPmK1t8eWr-MgFsppf4AAAABU"]
[Tue Feb 17 05:43:53.836946 2026] [:error] [pid 58551:tid 58573] [client 20.238.121.35:60366] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aZOPma1t8eWr-MgFsppf5wAAAA0"]
[Tue Feb 17 05:43:55.027061 2026] [:error] [pid 58552:tid 58610] [client 20.238.121.35:30340] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZOPmzBHVJP2Oz3yR5fdZgAAAE8"]
[Tue Feb 17 05:43:56.534967 2026] [:error] [pid 58551:tid 58583] [client 20.238.121.35:30341] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZOPnK1t8eWr-MgFsppf7gAAABc"]
[Tue Feb 17 05:44:01.526680 2026] [:error] [pid 58552:tid 58608] [client 20.238.121.35:19807] [client 20.238.121.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/about.php"] [unique_id "aZOPoTBHVJP2Oz3yR5fddQAAAE0"]
[Tue Feb 17 05:44:08.739679 2026] [:error] [pid 58551:tid 58567] [client 20.238.121.35:60075] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aZOPqK1t8eWr-MgFsppf_gAAAAc"]
[Tue Feb 17 05:44:11.152516 2026] [:error] [pid 32790:tid 32808] [client 20.238.121.35:41435] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aZOPq3s3HJP9ozPHsN7MAgAAAQ4"]
[Tue Feb 17 05:44:16.123871 2026] [:error] [pid 32790:tid 32815] [client 20.238.121.35:41429] [client 20.238.121.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aZOPsHs3HJP9ozPHsN7MEQAAARU"]
[Tue Feb 17 08:02:03.333522 2026] [:error] [pid 58551:tid 58570] [client 43.153.15.51:34970] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZOv-61t8eWr-MgFspqaywAAAAo"]
[Tue Feb 17 10:01:19.005009 2026] [:error] [pid 58552:tid 58615] [client 20.111.44.121:56704] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "aZPL7zBHVJP2Oz3yR5dN0AAAAFQ"]
[Tue Feb 17 10:01:26.182202 2026] [:error] [pid 58659:tid 58673] [client 20.111.44.121:47715] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "aZPL9sDX32iTEO4jt29pvgAAAMw"]
[Tue Feb 17 10:01:37.390312 2026] [:error] [pid 58659:tid 58671] [client 20.111.44.121:47220] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aZPMAcDX32iTEO4jt29p4gAAAMo"]
[Tue Feb 17 10:01:38.630959 2026] [:error] [pid 32790:tid 32810] [client 20.111.44.121:47221] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aZPMAns3HJP9ozPHsN5uzQAAARA"]
[Tue Feb 17 10:01:39.655958 2026] [:error] [pid 58551:tid 58565] [client 20.111.44.121:54838] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aZPMA61t8eWr-MgFsprPtwAAAAU"]
[Tue Feb 17 10:01:42.836702 2026] [:error] [pid 58551:tid 58576] [client 20.111.44.121:57074] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aZPMBq1t8eWr-MgFsprPuwAAABA"]
[Tue Feb 17 10:01:49.118463 2026] [:error] [pid 58659:tid 58666] [client 20.111.44.121:63014] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aZPMDcDX32iTEO4jt29p-AAAAMU"]
[Tue Feb 17 10:01:57.275464 2026] [:error] [pid 32790:tid 32810] [client 20.111.44.121:63504] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aZPMFXs3HJP9ozPHsN5u9QAAARA"]
[Tue Feb 17 10:02:00.375059 2026] [:error] [pid 58551:tid 58574] [client 20.111.44.121:64641] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asax.php"] [unique_id "aZPMGK1t8eWr-MgFsprP5wAAAA4"]
[Tue Feb 17 10:02:05.564950 2026] [:error] [pid 32790:tid 32804] [client 20.111.44.121:64656] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asax.php"] [unique_id "aZPMHXs3HJP9ozPHsN5vCQAAAQo"]
[Tue Feb 17 10:02:09.841136 2026] [:error] [pid 58552:tid 58608] [client 20.111.44.121:42840] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asax.php"] [unique_id "aZPMITBHVJP2Oz3yR5dONAAAAE0"]
[Tue Feb 17 10:02:11.569152 2026] [:error] [pid 58551:tid 58578] [client 20.111.44.121:62106] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asax.php"] [unique_id "aZPMI61t8eWr-MgFsprP_QAAABI"]
[Tue Feb 17 10:02:15.756636 2026] [:error] [pid 32790:tid 32794] [client 20.111.44.121:53267] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/co.php"] [unique_id "aZPMJ3s3HJP9ozPHsN5vJQAAAQA"]
[Tue Feb 17 10:02:24.927651 2026] [:error] [pid 58558:tid 58644] [client 20.111.44.121:64730] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aZPMMCmIxlfUL2nViZwg_QAAAJY"]
[Tue Feb 17 10:02:28.156377 2026] [:error] [pid 32790:tid 32798] [client 20.111.44.121:37461] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aZPMNHs3HJP9ozPHsN5vQQAAAQQ"]
[Tue Feb 17 10:02:32.265460 2026] [:error] [pid 58552:tid 58598] [client 20.111.44.121:53274] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aZPMODBHVJP2Oz3yR5dOZgAAAEM"]
[Tue Feb 17 10:02:33.407094 2026] [:error] [pid 58552:tid 58616] [client 20.111.44.121:53254] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aZPMOTBHVJP2Oz3yR5dOaQAAAFU"]
[Tue Feb 17 10:02:51.235566 2026] [:error] [pid 58552:tid 58608] [client 20.111.44.121:43661] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aZPMSzBHVJP2Oz3yR5dOjAAAAE0"]
[Tue Feb 17 10:03:02.055299 2026] [:error] [pid 58659:tid 58667] [client 20.111.44.121:29555] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aZPMVsDX32iTEO4jt29qlwAAAMY"]
[Tue Feb 17 10:03:05.633449 2026] [:error] [pid 58659:tid 58685] [client 20.111.44.121:39270] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aZPMWcDX32iTEO4jt29qoQAAANg"]
[Tue Feb 17 10:03:10.092074 2026] [:error] [pid 58558:tid 58633] [client 20.111.44.121:64756] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aZPMXimIxlfUL2nViZwhUgAAAIs"]
[Tue Feb 17 10:03:13.834099 2026] [:error] [pid 58552:tid 58609] [client 20.111.44.121:53730] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aZPMYTBHVJP2Oz3yR5dOugAAAE4"]
[Tue Feb 17 10:03:56.752201 2026] [:error] [pid 58552:tid 58605] [client 20.111.44.121:63289] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPMjDBHVJP2Oz3yR5dPBgAAAEo"]
[Tue Feb 17 10:04:00.569812 2026] [:error] [pid 32790:tid 32814] [client 20.111.44.121:56087] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPMkHs3HJP9ozPHsN5wIAAAARQ"]
[Tue Feb 17 10:04:01.843693 2026] [:error] [pid 32790:tid 32816] [client 20.111.44.121:59767] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPMkXs3HJP9ozPHsN5wJgAAARY"]
[Tue Feb 17 10:04:03.765369 2026] [:error] [pid 58659:tid 58672] [client 20.111.44.121:42476] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZPMk8DX32iTEO4jt29rHgAAAMs"]
[Tue Feb 17 10:04:10.109387 2026] [:error] [pid 58552:tid 58616] [client 20.111.44.121:62080] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aZPMmjBHVJP2Oz3yR5dPFgAAAFU"]
[Tue Feb 17 10:04:12.557775 2026] [:error] [pid 58551:tid 58569] [client 20.111.44.121:62724] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aZPMnK1t8eWr-MgFsprQxAAAAAk"]
[Tue Feb 17 10:04:13.967800 2026] [:error] [pid 58659:tid 58673] [client 20.111.44.121:62986] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aZPMncDX32iTEO4jt29rNgAAAMw"]
[Tue Feb 17 10:04:16.009261 2026] [:error] [pid 58551:tid 58575] [client 20.111.44.121:60842] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aZPMoK1t8eWr-MgFsprQzgAAAA8"]
[Tue Feb 17 10:04:18.338741 2026] [:error] [pid 58552:tid 58603] [client 20.111.44.121:64664] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZPMojBHVJP2Oz3yR5dPKAAAAEg"]
[Tue Feb 17 10:04:24.356422 2026] [:error] [pid 58558:tid 58626] [client 20.111.44.121:39620] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZPMqCmIxlfUL2nViZwiMQAAAIQ"]
[Tue Feb 17 10:04:26.055195 2026] [:error] [pid 58558:tid 58631] [client 20.111.44.121:62779] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZPMqimIxlfUL2nViZwiNQAAAIk"]
[Tue Feb 17 10:04:31.673114 2026] [:error] [pid 58551:tid 58583] [client 20.111.44.121:62777] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aZPMr61t8eWr-MgFsprRPgAAABc"]
[Tue Feb 17 10:04:54.481839 2026] [:error] [pid 58558:tid 58639] [client 20.111.44.121:39676] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZPMximIxlfUL2nViZwiVgAAAJE"]
[Tue Feb 17 10:04:56.571001 2026] [:error] [pid 32790:tid 32795] [client 20.111.44.121:50466] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZPMyHs3HJP9ozPHsN5wsgAAAQE"]
[Tue Feb 17 10:04:58.095310 2026] [:error] [pid 32790:tid 32812] [client 20.111.44.121:39621] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZPMyns3HJP9ozPHsN5wuwAAARI"]
[Tue Feb 17 10:04:59.997987 2026] [:error] [pid 32790:tid 32810] [client 20.111.44.121:29528] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php/wp-admin/index.php"] [unique_id "aZPMy3s3HJP9ozPHsN5wwwAAARA"]
[Tue Feb 17 10:05:01.553937 2026] [:error] [pid 58558:tid 58633] [client 20.111.44.121:53284] [client 20.111.44.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/about.php"] [unique_id "aZPMzSmIxlfUL2nViZwiWwAAAIs"]
[Tue Feb 17 10:05:04.849809 2026] [:error] [pid 58551:tid 58565] [client 20.111.44.121:51809] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aZPM0K1t8eWr-MgFsprRswAAAAU"]
[Tue Feb 17 10:05:05.843213 2026] [:error] [pid 58659:tid 58672] [client 20.111.44.121:64663] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aZPM0cDX32iTEO4jt29rngAAAMs"]
[Tue Feb 17 10:05:06.805971 2026] [:error] [pid 58659:tid 58675] [client 20.111.44.121:2476] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aZPM0sDX32iTEO4jt29roAAAAM4"]
[Tue Feb 17 11:40:21.880983 2026] [:error] [pid 58558:tid 58623] [client 36.41.75.167:50047] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZPjJSmIxlfUL2nViZxMjQAAAIE"]
[Tue Feb 17 12:19:10.196615 2026] [:error] [pid 32790:tid 32804] [client 167.71.244.81:54537] [client 167.71.244.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZPsPns3HJP9ozPHsN7BrwAAAQo"]
[Tue Feb 17 14:29:53.053618 2026] [:error] [pid 58659:tid 58666] [client 51.68.32.135:49648] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZQK4cDX32iTEO4jt2_qeAAAAMU"]
[Tue Feb 17 14:29:55.852621 2026] [:error] [pid 58551:tid 58584] [client 51.68.32.135:32778] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZQK461t8eWr-MgFspo4AAAAABg"]
[Tue Feb 17 14:29:58.416001 2026] [:error] [pid 58558:tid 58628] [client 51.68.32.135:32794] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZQK5imIxlfUL2nViZySywAAAIY"]
[Tue Feb 17 14:30:01.114271 2026] [:error] [pid 58552:tid 58595] [client 51.68.32.135:32796] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZQK6TBHVJP2Oz3yR5e4yQAAAEA"]
[Tue Feb 17 14:30:03.652138 2026] [:error] [pid 58552:tid 58602] [client 51.68.32.135:32798] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZQK6zBHVJP2Oz3yR5e4zgAAAEc"]
[Tue Feb 17 14:30:06.190215 2026] [:error] [pid 58551:tid 58570] [client 51.68.32.135:52228] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZQK7q1t8eWr-MgFspo4LgAAAAo"]
[Tue Feb 17 14:30:08.699610 2026] [:error] [pid 58659:tid 58674] [client 51.68.32.135:52232] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZQK8MDX32iTEO4jt2_qhgAAAM0"]
[Tue Feb 17 14:30:11.416873 2026] [:error] [pid 58552:tid 58614] [client 51.68.32.135:52240] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZQK8zBHVJP2Oz3yR5e47QAAAFM"]
[Tue Feb 17 14:30:13.896973 2026] [:error] [pid 58552:tid 58604] [client 51.68.32.135:52244] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZQK9TBHVJP2Oz3yR5e48AAAAEk"]
[Tue Feb 17 14:30:16.488520 2026] [:error] [pid 58659:tid 58678] [client 51.68.32.135:56918] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZQK-MDX32iTEO4jt2_qkQAAANE"]
[Tue Feb 17 14:30:18.959954 2026] [:error] [pid 58659:tid 58665] [client 51.68.32.135:56928] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZQK-sDX32iTEO4jt2_qmQAAAMQ"]
[Tue Feb 17 14:30:21.571430 2026] [:error] [pid 58659:tid 58666] [client 51.68.32.135:56932] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZQK_cDX32iTEO4jt2_qoAAAAMU"]
[Tue Feb 17 14:30:24.076889 2026] [:error] [pid 58551:tid 58564] [client 51.68.32.135:56944] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZQLAK1t8eWr-MgFspo4RgAAAAQ"]
[Tue Feb 17 14:30:26.562377 2026] [:error] [pid 58552:tid 58617] [client 51.68.32.135:45402] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aZQLAjBHVJP2Oz3yR5e4-QAAAFY"]
[Tue Feb 17 14:30:29.137456 2026] [:error] [pid 32790:tid 32801] [client 51.68.32.135:45406] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZQLBXs3HJP9ozPHsN4L6AAAAQc"]
[Tue Feb 17 14:30:31.619187 2026] [:error] [pid 32790:tid 32799] [client 51.68.32.135:45422] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZQLB3s3HJP9ozPHsN4L6wAAAQU"]
[Tue Feb 17 14:30:34.045648 2026] [:error] [pid 58551:tid 58570] [client 51.68.32.135:45430] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZQLCq1t8eWr-MgFspo4VAAAAAo"]
[Tue Feb 17 14:30:36.605823 2026] [:error] [pid 58551:tid 58565] [client 51.68.32.135:60920] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aZQLDK1t8eWr-MgFspo4XgAAAAU"]
[Tue Feb 17 14:30:39.016062 2026] [:error] [pid 58551:tid 58580] [client 51.68.32.135:60930] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aZQLD61t8eWr-MgFspo4ZAAAABQ"]
[Tue Feb 17 14:30:41.487932 2026] [:error] [pid 58659:tid 58673] [client 51.68.32.135:60932] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZQLEcDX32iTEO4jt2_qqQAAAMw"]
[Tue Feb 17 14:30:44.029654 2026] [:error] [pid 32790:tid 32797] [client 51.68.32.135:60946] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZQLFHs3HJP9ozPHsN4MCgAAAQM"]
[Tue Feb 17 14:30:46.433147 2026] [:error] [pid 32790:tid 32814] [client 51.68.32.135:37684] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aZQLFns3HJP9ozPHsN4MEQAAARQ"]
[Tue Feb 17 14:30:48.953564 2026] [:error] [pid 32790:tid 32811] [client 51.68.32.135:37692] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aZQLGHs3HJP9ozPHsN4MHAAAARE"]
[Tue Feb 17 14:31:19.818566 2026] [:error] [pid 58551:tid 58567] [client 51.68.32.135:37706] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZQLN61t8eWr-MgFspo4pgAAAAc"]
[Tue Feb 17 14:31:22.144757 2026] [:error] [pid 58558:tid 58641] [client 51.68.32.135:43252] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZQLOimIxlfUL2nViZyTMwAAAJM"]
[Tue Feb 17 14:31:24.683617 2026] [:error] [pid 32790:tid 32814] [client 51.68.32.135:43256] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZQLPHs3HJP9ozPHsN4McwAAARQ"]
[Tue Feb 17 14:31:27.171036 2026] [:error] [pid 58552:tid 58603] [client 51.68.32.135:33958] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZQLPzBHVJP2Oz3yR5e5OgAAAEg"]
[Tue Feb 17 14:31:29.665979 2026] [:error] [pid 58659:tid 58677] [client 51.68.32.135:33972] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZQLQcDX32iTEO4jt2_rEAAAANA"]
[Tue Feb 17 16:02:42.061979 2026] [:error] [pid 58659:tid 58674] [client 106.222.205.112:18904] [client 106.222.205.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.205.112, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZQgosDX32iTEO4jt28O1AAAAM0"]
[Tue Feb 17 16:02:43.586886 2026] [:error] [pid 58558:tid 58638] [client 106.222.205.112:14426] [client 106.222.205.112] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZQgoymIxlfUL2nViZy0hwAAAJA"]
[Tue Feb 17 17:07:08.008101 2026] [:error] [pid 58659:tid 58662] [client 195.7.6.132:39960] [client 195.7.6.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZQvvMDX32iTEO4jt28jVgAAAME"]
[Tue Feb 17 18:29:00.051681 2026] [:error] [pid 32790:tid 32809] [client 43.130.101.151:38960] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZRC7Hs3HJP9ozPHsN5c0gAAAQ8"]
[Tue Feb 17 19:00:56.452496 2026] [:error] [pid 58558:tid 58622] [client 141.94.101.142:45018] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "aZRKaCmIxlfUL2nViZzkdQAAAIA"]
[Tue Feb 17 19:00:59.059283 2026] [:error] [pid 58659:tid 58677] [client 141.94.101.142:44094] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aZRKa8DX32iTEO4jt29A-QAAANA"]
[Tue Feb 17 19:01:02.918339 2026] [:error] [pid 58558:tid 58638] [client 141.94.101.142:44096] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZRKbimIxlfUL2nViZzkeQAAAJA"]
[Tue Feb 17 19:01:05.650649 2026] [:error] [pid 13106:tid 13119] [client 141.94.101.142:44102] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aZRKcbBEWrYCV-0FRdoBaAAAAUk"]
[Tue Feb 17 19:01:08.290104 2026] [:error] [pid 58558:tid 58635] [client 141.94.101.142:44104] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aZRKdCmIxlfUL2nViZzkfgAAAI0"]
[Tue Feb 17 19:01:10.661757 2026] [:error] [pid 58551:tid 58584] [client 141.94.101.142:50570] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aZRKdq1t8eWr-MgFspqJdgAAABg"]
[Tue Feb 17 19:01:13.229570 2026] [:error] [pid 32790:tid 32817] [client 141.94.101.142:50582] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aZRKeXs3HJP9ozPHsN5i3gAAARc"]
[Tue Feb 17 19:01:15.717144 2026] [:error] [pid 58558:tid 58626] [client 141.94.101.142:50586] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aZRKeymIxlfUL2nViZzkhgAAAIQ"]
[Tue Feb 17 19:01:18.177471 2026] [:error] [pid 58659:tid 58682] [client 141.94.101.142:50588] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aZRKfsDX32iTEO4jt29BDgAAANU"]
[Tue Feb 17 19:01:18.438963 2026] [:error] [pid 13106:tid 13110] [client 141.94.101.142:45472] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZRKfrBEWrYCV-0FRdoBfQAAAUA"]
[Tue Feb 17 19:01:20.565071 2026] [:error] [pid 58551:tid 58584] [client 141.94.101.142:45486] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZRKgK1t8eWr-MgFspqJggAAABg"]
[Tue Feb 17 19:01:21.110263 2026] [:error] [pid 58551:tid 58563] [client 141.94.101.142:45494] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aZRKga1t8eWr-MgFspqJgwAAAAM"]
[Tue Feb 17 19:01:22.962993 2026] [:error] [pid 58659:tid 58675] [client 141.94.101.142:45496] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZRKgsDX32iTEO4jt29BGAAAAM4"]
[Tue Feb 17 19:01:23.693032 2026] [:error] [pid 58659:tid 58674] [client 141.94.101.142:45512] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZRKg8DX32iTEO4jt29BGgAAAM0"]
[Tue Feb 17 19:01:25.360597 2026] [:error] [pid 58552:tid 58608] [client 141.94.101.142:45520] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZRKhTBHVJP2Oz3yR5cffwAAAE0"]
[Tue Feb 17 19:01:26.191629 2026] [:error] [pid 32790:tid 32799] [client 141.94.101.142:45526] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZRKhns3HJP9ozPHsN5i8QAAAQU"]
[Tue Feb 17 19:01:27.711682 2026] [:error] [pid 58551:tid 58562] [client 141.94.101.142:45530] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZRKh61t8eWr-MgFspqJjwAAAAI"]
[Tue Feb 17 19:01:28.809700 2026] [:error] [pid 32790:tid 32817] [client 141.94.101.142:56194] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZRKiHs3HJP9ozPHsN5i9QAAARc"]
[Tue Feb 17 19:01:30.178769 2026] [:error] [pid 32790:tid 32816] [client 141.94.101.142:56204] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZRKins3HJP9ozPHsN5i9wAAARY"]
[Tue Feb 17 19:01:31.481314 2026] [:error] [pid 13106:tid 13131] [client 141.94.101.142:56208] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZRKi7BEWrYCV-0FRdoBhwAAAVU"]
[Tue Feb 17 19:01:32.617113 2026] [:error] [pid 58659:tid 58684] [client 141.94.101.142:56214] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZRKjMDX32iTEO4jt29BIwAAANc"]
[Tue Feb 17 19:01:34.003557 2026] [:error] [pid 42555:tid 42563] [client 141.94.101.142:56222] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZRKjvCCGB-bBphvas2vIAAAAYY"]
[Tue Feb 17 19:01:35.074038 2026] [:error] [pid 58551:tid 58580] [client 141.94.101.142:56232] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZRKj61t8eWr-MgFspqJqQAAABQ"]
[Tue Feb 17 19:01:36.511646 2026] [:error] [pid 58552:tid 58608] [client 141.94.101.142:56240] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZRKkDBHVJP2Oz3yR5cfjgAAAE0"]
[Tue Feb 17 19:01:37.617086 2026] [:error] [pid 32790:tid 32797] [client 141.94.101.142:56244] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZRKkXs3HJP9ozPHsN5i_QAAAQM"]
[Tue Feb 17 19:01:39.123853 2026] [:error] [pid 13106:tid 13120] [client 141.94.101.142:46956] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZRKk7BEWrYCV-0FRdoBjgAAAUo"]
[Tue Feb 17 19:01:40.203874 2026] [:error] [pid 58552:tid 58611] [client 141.94.101.142:46970] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZRKlDBHVJP2Oz3yR5cfkAAAAFA"]
[Tue Feb 17 19:01:41.784610 2026] [:error] [pid 58558:tid 58646] [client 141.94.101.142:46980] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZRKlSmIxlfUL2nViZzknQAAAJg"]
[Tue Feb 17 19:01:42.637713 2026] [:error] [pid 58558:tid 58639] [client 141.94.101.142:46992] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZRKlimIxlfUL2nViZzkoQAAAJE"]
[Tue Feb 17 19:01:44.253641 2026] [:error] [pid 32790:tid 32801] [client 141.94.101.142:46998] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZRKmHs3HJP9ozPHsN5jAAAAAQc"]
[Tue Feb 17 19:01:45.058922 2026] [:error] [pid 58551:tid 58580] [client 141.94.101.142:47000] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZRKma1t8eWr-MgFspqJxAAAABQ"]
[Tue Feb 17 19:01:46.736703 2026] [:error] [pid 58558:tid 58631] [client 141.94.101.142:47002] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZRKmimIxlfUL2nViZzkpgAAAIk"]
[Tue Feb 17 19:01:47.651667 2026] [:error] [pid 13106:tid 13134] [client 141.94.101.142:47004] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZRKm7BEWrYCV-0FRdoBlwAAAVg"]
[Tue Feb 17 19:01:49.330595 2026] [:error] [pid 13106:tid 13123] [client 141.94.101.142:56610] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZRKnbBEWrYCV-0FRdoBmQAAAU0"]
[Tue Feb 17 19:01:50.199968 2026] [:error] [pid 13106:tid 13126] [client 141.94.101.142:56618] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZRKnrBEWrYCV-0FRdoBmwAAAVA"]
[Tue Feb 17 19:01:52.164989 2026] [:error] [pid 58558:tid 58634] [client 141.94.101.142:56620] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZRKoCmIxlfUL2nViZzkqwAAAIw"]
[Tue Feb 17 19:01:52.702249 2026] [:error] [pid 58659:tid 58663] [client 141.94.101.142:56636] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZRKoMDX32iTEO4jt29BMgAAAMI"]
[Tue Feb 17 19:02:11.443849 2026] [:error] [pid 42555:tid 42561] [client 141.94.101.142:56650] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZRKs_CCGB-bBphvas2vQgAAAYQ"]
[Tue Feb 17 19:02:11.558643 2026] [:error] [pid 32790:tid 32813] [client 141.94.101.142:56654] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZRKs3s3HJP9ozPHsN5jHwAAARM"]
[Tue Feb 17 19:02:13.970888 2026] [:error] [pid 58551:tid 58581] [client 141.94.101.142:35950] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZRKta1t8eWr-MgFspqJ4QAAABU"]
[Tue Feb 17 19:02:16.357799 2026] [:error] [pid 32790:tid 32803] [client 141.94.101.142:35964] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZRKuHs3HJP9ozPHsN5jJwAAAQk"]
[Tue Feb 17 19:02:28.267006 2026] [:error] [pid 58558:tid 58644] [client 141.94.101.142:33910] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZRKxCmIxlfUL2nViZzkwwAAAJY"]
[Tue Feb 17 19:02:32.605973 2026] [:error] [pid 13106:tid 13121] [client 141.94.101.142:42894] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZRKyLBEWrYCV-0FRdoBygAAAUs"]
[Tue Feb 17 19:04:44.882919 2026] [:error] [pid 58552:tid 58602] [client 141.94.101.142:43544] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZRLTDBHVJP2Oz3yR5ch0AAAAEc"]
[Tue Feb 17 19:04:45.603342 2026] [:error] [pid 58659:tid 58661] [client 141.94.101.142:43528] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "aZRLTcDX32iTEO4jt29COwAAAMA"]
[Tue Feb 17 19:04:46.283452 2026] [:error] [pid 32790:tid 32813] [client 141.94.101.142:48468] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aZRLTns3HJP9ozPHsN5knAAAARM"]
[Tue Feb 17 19:04:48.081601 2026] [:error] [pid 58551:tid 58565] [client 141.94.101.142:43548] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aZRLUK1t8eWr-MgFspqK0QAAAAU"]
[Tue Feb 17 19:04:48.852350 2026] [:error] [pid 58659:tid 58671] [client 141.94.101.142:53604] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZRLUMDX32iTEO4jt29CQQAAAMo"]
[Tue Feb 17 19:04:49.385961 2026] [:error] [pid 13106:tid 13122] [client 141.94.101.142:53608] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZRLUbBEWrYCV-0FRdoCZgAAAUw"]
[Tue Feb 17 19:04:50.534045 2026] [:error] [pid 58551:tid 58571] [client 141.94.101.142:53612] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZRLUq1t8eWr-MgFspqK3gAAAAs"]
[Tue Feb 17 19:04:51.224629 2026] [:error] [pid 58552:tid 58597] [client 141.94.101.142:53620] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZRLUzBHVJP2Oz3yR5ch8QAAAEI"]
[Tue Feb 17 19:04:53.088342 2026] [:error] [pid 13106:tid 13129] [client 141.94.101.142:53630] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aZRLVbBEWrYCV-0FRdoCaQAAAVM"]
[Tue Feb 17 19:04:53.679967 2026] [:error] [pid 58558:tid 58622] [client 141.94.101.142:53634] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZRLVSmIxlfUL2nViZzlmQAAAIA"]
[Tue Feb 17 19:04:55.479850 2026] [:error] [pid 58552:tid 58595] [client 141.94.101.142:53642] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aZRLVzBHVJP2Oz3yR5ch_AAAAEA"]
[Tue Feb 17 19:04:56.151913 2026] [:error] [pid 58659:tid 58667] [client 141.94.101.142:53646] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZRLWMDX32iTEO4jt29CRAAAAMY"]
[Tue Feb 17 19:04:58.135155 2026] [:error] [pid 58659:tid 58665] [client 141.94.101.142:53650] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aZRLWsDX32iTEO4jt29CRgAAAMQ"]
[Tue Feb 17 19:04:58.630658 2026] [:error] [pid 58558:tid 58631] [client 141.94.101.142:51426] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZRLWimIxlfUL2nViZzloAAAAIk"]
[Tue Feb 17 19:05:00.714639 2026] [:error] [pid 58659:tid 58678] [client 141.94.101.142:51438] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aZRLXMDX32iTEO4jt29CSwAAANE"]
[Tue Feb 17 19:05:01.181357 2026] [:error] [pid 13106:tid 13111] [client 141.94.101.142:51444] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZRLXbBEWrYCV-0FRdoCeQAAAUE"]
[Tue Feb 17 19:05:03.269206 2026] [:error] [pid 58552:tid 58604] [client 141.94.101.142:51454] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aZRLXzBHVJP2Oz3yR5ciCgAAAEk"]
[Tue Feb 17 19:05:03.699368 2026] [:error] [pid 58659:tid 58680] [client 141.94.101.142:51462] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZRLX8DX32iTEO4jt29CTgAAANM"]
[Tue Feb 17 19:05:06.040702 2026] [:error] [pid 42555:tid 42569] [client 141.94.101.142:51464] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZRLYvCCGB-bBphvas2v_gAAAYw"]
[Tue Feb 17 19:05:06.227822 2026] [:error] [pid 42555:tid 42567] [client 141.94.101.142:51466] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZRLYvCCGB-bBphvas2wAAAAAYo"]
[Tue Feb 17 19:05:08.471023 2026] [:error] [pid 13106:tid 13115] [client 141.94.101.142:56746] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aZRLZLBEWrYCV-0FRdoChgAAAUU"]
[Tue Feb 17 19:05:08.713217 2026] [:error] [pid 13106:tid 13116] [client 141.94.101.142:56758] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZRLZLBEWrYCV-0FRdoChwAAAUY"]
[Tue Feb 17 19:05:10.867822 2026] [:error] [pid 58552:tid 58603] [client 141.94.101.142:56764] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZRLZjBHVJP2Oz3yR5ciFAAAAEg"]
[Tue Feb 17 19:05:11.215258 2026] [:error] [pid 13106:tid 13127] [client 141.94.101.142:56768] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZRLZ7BEWrYCV-0FRdoCiAAAAVE"]
[Tue Feb 17 19:05:13.448098 2026] [:error] [pid 13106:tid 13131] [client 141.94.101.142:56770] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZRLabBEWrYCV-0FRdoCjAAAAVU"]
[Tue Feb 17 19:05:13.753670 2026] [:error] [pid 58558:tid 58629] [client 141.94.101.142:56780] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZRLaSmIxlfUL2nViZzltAAAAIc"]
[Tue Feb 17 19:05:16.067728 2026] [:error] [pid 13106:tid 13118] [client 141.94.101.142:56784] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZRLbLBEWrYCV-0FRdoCkQAAAUg"]
[Tue Feb 17 19:05:16.384859 2026] [:error] [pid 13106:tid 13112] [client 141.94.101.142:56800] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZRLbLBEWrYCV-0FRdoCkwAAAUI"]
[Tue Feb 17 19:05:18.493435 2026] [:error] [pid 58551:tid 58579] [client 141.94.101.142:41158] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZRLbq1t8eWr-MgFspqLBQAAABM"]
[Tue Feb 17 19:05:18.861799 2026] [:error] [pid 58552:tid 58607] [client 141.94.101.142:41172] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZRLbjBHVJP2Oz3yR5ciGgAAAEw"]
[Tue Feb 17 19:05:21.148961 2026] [:error] [pid 58659:tid 58672] [client 141.94.101.142:41178] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZRLccDX32iTEO4jt29CWQAAAMs"]
[Tue Feb 17 19:05:21.416203 2026] [:error] [pid 58659:tid 58664] [client 141.94.101.142:41188] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZRLccDX32iTEO4jt29CXAAAAMM"]
[Tue Feb 17 19:05:23.625058 2026] [:error] [pid 58659:tid 58669] [client 141.94.101.142:41192] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZRLc8DX32iTEO4jt29CXwAAAMg"]
[Tue Feb 17 19:05:23.726314 2026] [:error] [pid 58659:tid 58685] [client 141.94.101.142:41196] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZRLc8DX32iTEO4jt29CYAAAANg"]
[Tue Feb 17 19:05:26.075365 2026] [:error] [pid 58558:tid 58636] [client 141.94.101.142:41200] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZRLdimIxlfUL2nViZzlvgAAAI4"]
[Tue Feb 17 19:05:26.386203 2026] [:error] [pid 58659:tid 58666] [client 141.94.101.142:41216] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZRLdsDX32iTEO4jt29CYgAAAMU"]
[Tue Feb 17 19:05:28.649407 2026] [:error] [pid 58558:tid 58622] [client 141.94.101.142:35012] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZRLeCmIxlfUL2nViZzlwgAAAIA"]
[Tue Feb 17 19:05:29.035890 2026] [:error] [pid 58558:tid 58632] [client 141.94.101.142:35020] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZRLeSmIxlfUL2nViZzlwwAAAIo"]
[Tue Feb 17 19:05:31.167732 2026] [:error] [pid 42555:tid 42564] [client 141.94.101.142:35030] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZRLe_CCGB-bBphvas2wJAAAAYc"]
[Tue Feb 17 19:05:31.444971 2026] [:error] [pid 32790:tid 32811] [client 141.94.101.142:35042] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZRLe3s3HJP9ozPHsN5k3QAAARE"]
[Tue Feb 17 19:05:33.679599 2026] [:error] [pid 58552:tid 58597] [client 141.94.101.142:35050] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZRLfTBHVJP2Oz3yR5ciJQAAAEI"]
[Tue Feb 17 19:05:33.978057 2026] [:error] [pid 58552:tid 58612] [client 141.94.101.142:35064] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZRLfTBHVJP2Oz3yR5ciJgAAAFE"]
[Tue Feb 17 19:05:36.151617 2026] [:error] [pid 13106:tid 13129] [client 141.94.101.142:35076] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZRLgLBEWrYCV-0FRdoCqQAAAVM"]
[Tue Feb 17 19:05:36.596514 2026] [:error] [pid 58551:tid 58572] [client 141.94.101.142:35092] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZRLgK1t8eWr-MgFspqLDgAAAAw"]
[Tue Feb 17 19:05:38.697834 2026] [:error] [pid 58552:tid 58597] [client 141.94.101.142:42138] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZRLgjBHVJP2Oz3yR5ciMwAAAEI"]
[Tue Feb 17 19:05:41.154684 2026] [:error] [pid 58558:tid 58644] [client 141.94.101.142:42144] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZRLhSmIxlfUL2nViZzlygAAAJY"]
[Tue Feb 17 21:57:53.605454 2026] [:error] [pid 58558:tid 58639] [client 43.153.76.247:38478] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZRz4SmIxlfUL2nViZwStgAAAJE"]
[Wed Feb 18 01:14:59.555834 2026] [:error] [pid 2575:tid 2590] [client 170.106.113.235:51968] [client 170.106.113.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZSiE80nHzM9JGTFE56hXQAAAc0"]
[Wed Feb 18 06:38:35.042139 2026] [:error] [pid 21847:tid 21865] [client 182.44.2.148:50160] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZTt6_y9A5wy4LuXmJ3IpwAAAAc"]
[Wed Feb 18 08:11:11.499303 2026] [:error] [pid 5561:tid 5565] [client 65.108.125.120:37924] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZUDn0oQssCZYQ4NexYIWQAAAUE"]
[Wed Feb 18 08:11:14.013612 2026] [:error] [pid 21848:tid 21906] [client 65.108.125.120:37934] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZUDovbG91VRkVidT5dQOgAAAFE"]
[Wed Feb 18 08:11:16.498105 2026] [:error] [pid 21847:tid 21863] [client 65.108.125.120:37942] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZUDpPy9A5wy4LuXmJ339QAAAAU"]
[Wed Feb 18 08:11:19.052016 2026] [:error] [pid 57014:tid 57026] [client 65.108.125.120:39278] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZUDpxNZnhS5qKtVIMIrYgAAAQk"]
[Wed Feb 18 08:11:21.519811 2026] [:error] [pid 21847:tid 21875] [client 65.108.125.120:39292] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZUDqfy9A5wy4LuXmJ34BQAAABE"]
[Wed Feb 18 08:11:24.130047 2026] [:error] [pid 5561:tid 5567] [client 65.108.125.120:39294] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZUDrEoQssCZYQ4NexYIawAAAUM"]
[Wed Feb 18 08:11:26.643031 2026] [:error] [pid 5561:tid 5569] [client 65.108.125.120:39302] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZUDrkoQssCZYQ4NexYIbQAAAUU"]
[Wed Feb 18 08:11:29.105801 2026] [:error] [pid 21849:tid 21928] [client 65.108.125.120:14308] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZUDsbx9a1XrfTYnuzKgAwAAAIw"]
[Wed Feb 18 08:11:31.667885 2026] [:error] [pid 21848:tid 21898] [client 65.108.125.120:14314] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZUDs_bG91VRkVidT5dQUgAAAEk"]
[Wed Feb 18 08:11:34.107886 2026] [:error] [pid 5561:tid 5574] [client 65.108.125.120:14316] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZUDtkoQssCZYQ4NexYIdgAAAUo"]
[Wed Feb 18 08:11:36.780264 2026] [:error] [pid 21849:tid 21917] [client 65.108.125.120:14318] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZUDuLx9a1XrfTYnuzKgCwAAAIE"]
[Wed Feb 18 08:11:39.347998 2026] [:error] [pid 21849:tid 21920] [client 65.108.125.120:13852] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZUDu7x9a1XrfTYnuzKgEAAAAIQ"]
[Wed Feb 18 08:11:41.977925 2026] [:error] [pid 57014:tid 57021] [client 65.108.125.120:13858] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZUDvRNZnhS5qKtVIMIrgQAAAQQ"]
[Wed Feb 18 08:11:44.617320 2026] [:error] [pid 21847:tid 21868] [client 65.108.125.120:13874] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZUDwPy9A5wy4LuXmJ34KwAAAAo"]
[Wed Feb 18 08:11:47.015005 2026] [:error] [pid 21848:tid 21900] [client 65.108.125.120:13882] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aZUDw_bG91VRkVidT5dQaAAAAEs"]
[Wed Feb 18 08:11:49.516708 2026] [:error] [pid 21849:tid 21924] [client 65.108.125.120:20194] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZUDxbx9a1XrfTYnuzKgGgAAAIg"]
[Wed Feb 18 08:11:52.065668 2026] [:error] [pid 57014:tid 57019] [client 65.108.125.120:20196] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZUDyBNZnhS5qKtVIMIrnAAAAQI"]
[Wed Feb 18 08:11:54.670588 2026] [:error] [pid 21847:tid 21876] [client 65.108.125.120:20198] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZUDyvy9A5wy4LuXmJ34QgAAABI"]
[Wed Feb 18 08:11:57.166499 2026] [:error] [pid 5561:tid 5575] [client 65.108.125.120:20214] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aZUDzUoQssCZYQ4NexYImAAAAUs"]
[Wed Feb 18 08:11:59.667108 2026] [:error] [pid 21848:tid 21910] [client 65.108.125.120:29446] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aZUDz_bG91VRkVidT5dQcwAAAFU"]
[Wed Feb 18 08:12:02.077672 2026] [:error] [pid 21961:tid 21984] [client 65.108.125.120:29462] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZUD0sUBDt_-H0ms3gWG5gAAANU"]
[Wed Feb 18 08:12:04.550928 2026] [:error] [pid 21847:tid 21881] [client 65.108.125.120:29476] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZUD1Py9A5wy4LuXmJ34VQAAABc"]
[Wed Feb 18 08:12:48.129309 2026] [:error] [pid 21849:tid 21938] [client 65.108.125.120:17002] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZUEALx9a1XrfTYnuzKgbQAAAJY"]
[Wed Feb 18 08:12:50.566236 2026] [:error] [pid 5561:tid 5585] [client 65.108.125.120:17008] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZUEAkoQssCZYQ4NexYI3wAAAVU"]
[Wed Feb 18 08:12:53.011941 2026] [:error] [pid 21848:tid 21906] [client 65.108.125.120:17012] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZUEBfbG91VRkVidT5dQxwAAAFE"]
[Wed Feb 18 08:12:55.570506 2026] [:error] [pid 21848:tid 21911] [client 65.108.125.120:17020] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZUEB_bG91VRkVidT5dQzwAAAFY"]
[Wed Feb 18 08:12:58.280606 2026] [:error] [pid 57014:tid 57024] [client 65.108.125.120:60356] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZUEChNZnhS5qKtVIMIsDwAAAQc"]
[Wed Feb 18 08:13:00.722110 2026] [:error] [pid 21847:tid 21863] [client 65.108.125.120:60368] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZUEDPy9A5wy4LuXmJ34xQAAAAU"]
[Wed Feb 18 08:13:03.165920 2026] [:error] [pid 21961:tid 21969] [client 65.108.125.120:60370] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZUED8UBDt_-H0ms3gWHLQAAAMY"]
[Wed Feb 18 08:50:27.093408 2026] [:error] [pid 5561:tid 5578] [client 45.67.97.54:30743] [client 45.67.97.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/O-Simple.php"] [unique_id "aZUM00oQssCZYQ4NexYYcQAAAU4"]
[Wed Feb 18 08:50:30.292128 2026] [:error] [pid 21849:tid 21921] [client 45.67.97.54:43489] [client 45.67.97.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aZUM1rx9a1XrfTYnuzKwIQAAAIU"]
[Wed Feb 18 08:50:30.975103 2026] [:error] [pid 21848:tid 21907] [client 45.67.97.52:28813] [client 45.67.97.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aZUM1vbG91VRkVidT5di3QAAAFI"]
[Wed Feb 18 08:50:37.454230 2026] [autoindex:error] [pid 21961:tid 21979] [client 45.67.97.53:45519] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:37.809433 2026] [autoindex:error] [pid 21961:tid 21971] [client 45.67.97.53:45519] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:38.186973 2026] [autoindex:error] [pid 21961:tid 21966] [client 45.67.97.53:45519] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:38.658163 2026] [autoindex:error] [pid 21961:tid 21964] [client 45.67.97.53:45519] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:40.847153 2026] [autoindex:error] [pid 21961:tid 21973] [client 45.67.97.53:45519] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:41.335122 2026] [:error] [pid 21849:tid 21938] [client 45.67.97.53:63507] [client 45.67.97.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZUM4bx9a1XrfTYnuzKwTgAAAJY"]
[Wed Feb 18 08:50:41.483969 2026] [:error] [pid 21961:tid 21963] [client 45.67.97.53:45519] [client 45.67.97.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2023/11/"] [unique_id "aZUM4cUBDt_-H0ms3gWZPgAAAMA"]
[Wed Feb 18 08:50:42.326118 2026] [:error] [pid 21961:tid 21974] [client 45.67.97.54:38737] [client 45.67.97.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2023/11/"] [unique_id "aZUM4sUBDt_-H0ms3gWZQwAAAMs"]
[Wed Feb 18 08:50:43.172862 2026] [:error] [pid 21847:tid 21869] [client 45.67.97.53:39187] [client 45.67.97.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2023/11/"] [unique_id "aZUM4_y9A5wy4LuXmJ0RoQAAAAs"]
[Wed Feb 18 08:50:43.845421 2026] [autoindex:error] [pid 21848:tid 21903] [client 45.67.97.52:48141] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:43.961810 2026] [:error] [pid 21847:tid 21879] [client 45.67.97.52:32553] [client 45.67.97.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2023/11/"] [unique_id "aZUM4_y9A5wy4LuXmJ0RpQAAABU"]
[Wed Feb 18 08:50:44.172242 2026] [:error] [pid 21848:tid 21891] [client 45.67.97.52:48141] [client 45.67.97.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aZUM5PbG91VRkVidT5djMQAAAEI"]
[Wed Feb 18 08:50:44.687286 2026] [autoindex:error] [pid 21847:tid 21876] [client 45.67.97.53:46429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:44.842865 2026] [:error] [pid 21847:tid 21864] [client 45.67.97.53:22419] [client 45.67.97.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aZUM5Py9A5wy4LuXmJ0RqwAAAAY"]
[Wed Feb 18 08:50:45.028764 2026] [autoindex:error] [pid 21847:tid 21861] [client 45.67.97.53:46429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:45.382499 2026] [autoindex:error] [pid 21847:tid 21863] [client 45.67.97.53:46429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:45.632778 2026] [:error] [pid 21961:tid 21968] [client 45.67.97.54:51223] [client 45.67.97.54] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aZUM5cUBDt_-H0ms3gWZSQAAAMU"]
[Wed Feb 18 08:50:45.727429 2026] [autoindex:error] [pid 21847:tid 21879] [client 45.67.97.53:46429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:46.068505 2026] [autoindex:error] [pid 21847:tid 21877] [client 45.67.97.53:46429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:46.815398 2026] [autoindex:error] [pid 21847:tid 21879] [client 45.67.97.53:46429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:49.376807 2026] [autoindex:error] [pid 21847:tid 21867] [client 45.67.97.53:46429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:49.731048 2026] [autoindex:error] [pid 21847:tid 21875] [client 45.67.97.53:46429] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:50.057300 2026] [:error] [pid 21847:tid 21880] [client 45.67.97.53:46429] [client 45.67.97.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aZUM6vy9A5wy4LuXmJ0R3QAAABY"]
[Wed Feb 18 08:50:54.151777 2026] [autoindex:error] [pid 21848:tid 21902] [client 45.67.97.52:28549] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 08:50:54.490288 2026] [:error] [pid 21848:tid 21898] [client 45.67.97.52:28549] [client 45.67.97.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aZUM7vbG91VRkVidT5djSwAAAEk"]
[Wed Feb 18 08:50:55.135213 2026] [:error] [pid 57014:tid 57031] [client 45.67.97.52:62979] [client 45.67.97.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aZUM7xNZnhS5qKtVIMI_0gAAAQ4"]
[Wed Feb 18 10:08:34.848153 2026] [:error] [pid 21849:tid 21940] [client 45.61.185.101:64178] [client 45.61.185.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.185.101, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZUfIrx9a1XrfTYnuzLJKAAAAJg"], referer: https://www.hotbooksbookeeping2.com/wp-login.php
[Wed Feb 18 10:13:02.465587 2026] [:error] [pid 21847:tid 21872] [client 45.61.185.101:10348] [client 45.61.185.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.185.101, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZUgLvy9A5wy4LuXmJ07iwAAAA4"], referer: https://www.hotbooksbookeeping2.com/wp-login.php
[Wed Feb 18 10:22:09.111115 2026] [:error] [pid 21961:tid 21969] [client 51.75.119.112:41058] [client 51.75.119.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZUiUcUBDt_-H0ms3gW1vAAAAMY"]
[Wed Feb 18 10:42:26.559626 2026] [:error] [pid 21848:tid 21906] [client 165.245.187.140:50100] [client 165.245.187.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZUnEvbG91VRkVidT5eJsgAAAFE"]
[Wed Feb 18 12:52:10.709797 2026] [:error] [pid 21847:tid 21876] [client 194.247.173.99:53126] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZVFevy9A5wy4LuXmJ2GCwAAABI"]
[Wed Feb 18 12:52:13.414060 2026] [:error] [pid 5561:tid 5564] [client 194.247.173.99:49772] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZVFfUoQssCZYQ4NexZkEQAAAUA"]
[Wed Feb 18 12:52:15.979728 2026] [:error] [pid 21961:tid 21975] [client 194.247.173.99:49784] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZVFf8UBDt_-H0ms3gX3pwAAAMw"]
[Wed Feb 18 12:52:18.638675 2026] [:error] [pid 21847:tid 21865] [client 194.247.173.99:49790] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZVFgvy9A5wy4LuXmJ2GLgAAAAc"]
[Wed Feb 18 12:52:21.400371 2026] [:error] [pid 21848:tid 21890] [client 194.247.173.99:43648] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZVFhfbG91VRkVidT5e3dAAAAEE"]
[Wed Feb 18 12:52:24.099083 2026] [:error] [pid 21847:tid 21862] [client 194.247.173.99:43652] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZVFiPy9A5wy4LuXmJ2GOAAAAAQ"]
[Wed Feb 18 12:52:26.649708 2026] [:error] [pid 21848:tid 21890] [client 194.247.173.99:43658] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZVFivbG91VRkVidT5e3fwAAAEE"]
[Wed Feb 18 12:52:29.270127 2026] [:error] [pid 21847:tid 21863] [client 194.247.173.99:50048] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZVFjfy9A5wy4LuXmJ2GQgAAAAU"]
[Wed Feb 18 12:52:31.954642 2026] [:error] [pid 57014:tid 57030] [client 194.247.173.99:50052] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZVFjxNZnhS5qKtVIMKauAAAAQ0"]
[Wed Feb 18 12:52:34.643093 2026] [:error] [pid 21849:tid 21916] [client 194.247.173.99:50058] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZVFkrx9a1XrfTYnuzL71AAAAIA"]
[Wed Feb 18 12:52:37.191065 2026] [:error] [pid 21848:tid 21899] [client 194.247.173.99:50072] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZVFlfbG91VRkVidT5e3kgAAAEo"]
[Wed Feb 18 12:52:39.873739 2026] [:error] [pid 21847:tid 21867] [client 194.247.173.99:36612] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZVFl_y9A5wy4LuXmJ2GXQAAAAk"]
[Wed Feb 18 12:52:42.760327 2026] [:error] [pid 21847:tid 21865] [client 194.247.173.99:36616] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZVFmvy9A5wy4LuXmJ2GdQAAAAc"]
[Wed Feb 18 12:52:45.478881 2026] [:error] [pid 21848:tid 21892] [client 194.247.173.99:36626] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZVFnfbG91VRkVidT5e3oAAAAEM"]
[Wed Feb 18 12:52:48.179621 2026] [:error] [pid 21848:tid 21911] [client 194.247.173.99:36642] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZVFoPbG91VRkVidT5e3pgAAAFY"]
[Wed Feb 18 12:52:50.797159 2026] [:error] [pid 21961:tid 21968] [client 194.247.173.99:33498] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZVFosUBDt_-H0ms3gX35QAAAMU"]
[Wed Feb 18 12:52:53.396644 2026] [:error] [pid 21961:tid 21986] [client 194.247.173.99:33510] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZVFpcUBDt_-H0ms3gX37gAAANc"]
[Wed Feb 18 12:52:55.994290 2026] [:error] [pid 21961:tid 21966] [client 194.247.173.99:33518] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZVFp8UBDt_-H0ms3gX3-QAAAMM"]
[Wed Feb 18 12:52:58.619740 2026] [:error] [pid 21849:tid 21923] [client 194.247.173.99:33532] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZVFqrx9a1XrfTYnuzL8AwAAAIc"]
[Wed Feb 18 12:53:01.163439 2026] [:error] [pid 21961:tid 21972] [client 194.247.173.99:40264] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZVFrcUBDt_-H0ms3gX4BgAAAMk"]
[Wed Feb 18 12:53:03.687279 2026] [:error] [pid 57014:tid 57040] [client 194.247.173.99:40274] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZVFrxNZnhS5qKtVIMKa1QAAARc"]
[Wed Feb 18 13:58:52.068567 2026] [:error] [pid 5561:tid 5569] [client 36.73.176.156:56828] [client 36.73.176.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.73.176.156, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZVVHEoQssCZYQ4NexZ6RQAAAUU"]
[Wed Feb 18 16:11:28.272142 2026] [:error] [pid 21961:tid 21964] [client 43.165.135.242:57192] [client 43.165.135.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZV0MMUBDt_-H0ms3gVahQAAAME"]
[Wed Feb 18 19:16:18.926591 2026] [:error] [pid 11611:tid 11704] [client 123.187.240.242:35093] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZWfgu2m6IPN_aBZuKZfIQAAAwY"]
[Wed Feb 18 19:44:32.508639 2026] [:error] [pid 57014:tid 57026] [client 43.166.242.189:40080] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZWmIBNZnhS5qKtVIMIilAAAAQk"]
[Wed Feb 18 19:52:54.365478 2026] [:error] [pid 57014:tid 57024] [client 64.247.196.28:59198] [client 64.247.196.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZWoFhNZnhS5qKtVIMIkoQAAAQc"]
[Wed Feb 18 21:51:46.831580 2026] [autoindex:error] [pid 21848:tid 21897] [client 139.59.24.163:57806] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Feb 18 22:23:18.736242 2026] [:error] [pid 57014:tid 57033] [client 104.46.236.39:36230] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dom.php"] [unique_id "aZXLVhNZnhS5qKtVIMJEcQAAARA"]
[Wed Feb 18 22:23:19.714942 2026] [:error] [pid 21847:tid 21880] [client 104.46.236.39:10532] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dom.php"] [unique_id "aZXLV_y9A5wy4LuXmJ0vewAAABY"]
[Wed Feb 18 22:23:21.093248 2026] [:error] [pid 21848:tid 21894] [client 104.46.236.39:46697] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dom.php"] [unique_id "aZXLWfbG91VRkVidT5dbiAAAAEU"]
[Wed Feb 18 22:23:22.895928 2026] [:error] [pid 11609:tid 11646] [client 104.46.236.39:16832] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dom.php"] [unique_id "aZXLWshm3UjgaKO2Na9DuwAAAoM"]
[Wed Feb 18 22:23:24.291386 2026] [:error] [pid 21847:tid 21879] [client 104.46.236.39:14157] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aZXLXPy9A5wy4LuXmJ0vfAAAABU"]
[Wed Feb 18 22:23:25.772668 2026] [:error] [pid 11610:tid 11675] [client 104.46.236.39:61299] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aZXLXbWMUt4MNfN7mx3kagAAAsQ"]
[Wed Feb 18 22:23:26.849851 2026] [:error] [pid 11512:tid 11517] [client 104.46.236.39:38477] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aZXLXhGamu0xQuQ-jbFnswAAAYA"]
[Wed Feb 18 22:23:27.327857 2026] [:error] [pid 21847:tid 21862] [client 104.46.236.39:62128] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aZXLX_y9A5wy4LuXmJ0vfgAAAAQ"]
[Wed Feb 18 22:23:28.476211 2026] [:error] [pid 11610:tid 11682] [client 104.46.236.39:14446] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samiri.php"] [unique_id "aZXLYLWMUt4MNfN7mx3kawAAAss"]
[Wed Feb 18 22:23:28.972246 2026] [:error] [pid 11610:tid 11677] [client 104.46.236.39:61259] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samiri.php"] [unique_id "aZXLYLWMUt4MNfN7mx3kcAAAAsY"]
[Wed Feb 18 22:23:29.829794 2026] [:error] [pid 5561:tid 5569] [client 104.46.236.39:61287] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samiri.php"] [unique_id "aZXLYUoQssCZYQ4NexboegAAAUU"]
[Wed Feb 18 22:23:30.548170 2026] [:error] [pid 57014:tid 57017] [client 104.46.236.39:44038] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samiri.php"] [unique_id "aZXLYhNZnhS5qKtVIMJEeAAAAQA"]
[Wed Feb 18 22:23:31.053390 2026] [:error] [pid 11548:tid 11601] [client 104.46.236.39:46712] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aZXLYzSFZiBIZZvmIlMnHgAAAhc"]
[Wed Feb 18 22:23:31.813309 2026] [:error] [pid 11607:tid 11620] [client 104.46.236.39:62108] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aZXLYxw91ggRx3FA7BcA6QAAAkU"]
[Wed Feb 18 22:23:32.640592 2026] [:error] [pid 11512:tid 11541] [client 104.46.236.39:62083] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aZXLZBGamu0xQuQ-jbFnvgAAAZg"]
[Wed Feb 18 22:23:33.366228 2026] [:error] [pid 57014:tid 57038] [client 104.46.236.39:21936] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aZXLZRNZnhS5qKtVIMJEeQAAARU"]
[Wed Feb 18 22:23:34.396986 2026] [:error] [pid 11609:tid 11650] [client 104.46.236.39:10853] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xoot.php"] [unique_id "aZXLZshm3UjgaKO2Na9DyQAAAoc"]
[Wed Feb 18 22:23:34.880036 2026] [:error] [pid 11610:tid 11684] [client 104.46.236.39:62109] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xoot.php"] [unique_id "aZXLZrWMUt4MNfN7mx3kgQAAAs0"]
[Wed Feb 18 22:23:35.753941 2026] [:error] [pid 11610:tid 11676] [client 104.46.236.39:16895] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xoot.php"] [unique_id "aZXLZ7WMUt4MNfN7mx3kgwAAAsU"]
[Wed Feb 18 22:23:36.443219 2026] [:error] [pid 5561:tid 5586] [client 104.46.236.39:14177] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xoot.php"] [unique_id "aZXLaEoQssCZYQ4NexbogAAAAVY"]
[Wed Feb 18 22:23:37.373713 2026] [:error] [pid 5561:tid 5566] [client 104.46.236.39:14447] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aZXLaUoQssCZYQ4NexbogQAAAUI"]
[Wed Feb 18 22:23:37.921311 2026] [:error] [pid 21848:tid 21898] [client 104.46.236.39:14463] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aZXLafbG91VRkVidT5dbqwAAAEk"]
[Wed Feb 18 22:23:38.866002 2026] [:error] [pid 11512:tid 11536] [client 104.46.236.39:14168] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aZXLahGamu0xQuQ-jbFnvwAAAZM"]
[Wed Feb 18 22:23:40.654146 2026] [:error] [pid 11609:tid 11658] [client 104.46.236.39:29924] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aZXLbMhm3UjgaKO2Na9DzwAAAo8"]
[Wed Feb 18 22:23:41.768379 2026] [:error] [pid 11610:tid 11679] [client 104.46.236.39:16838] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZXLbbWMUt4MNfN7mx3khgAAAsg"]
[Wed Feb 18 22:23:42.431168 2026] [:error] [pid 11548:tid 11581] [client 104.46.236.39:44040] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZXLbjSFZiBIZZvmIlMnJAAAAgM"]
[Wed Feb 18 22:23:43.121148 2026] [:error] [pid 5561:tid 5586] [client 104.46.236.39:38518] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZXLb0oQssCZYQ4NexboiwAAAVY"]
[Wed Feb 18 22:23:43.639409 2026] [:error] [pid 11611:tid 11716] [client 104.46.236.39:16864] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZXLb-2m6IPN_aBZuKaAEgAAAxI"]
[Wed Feb 18 22:23:44.334608 2026] [:error] [pid 57014:tid 57022] [client 104.46.236.39:32426] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aZXLcBNZnhS5qKtVIMJEfQAAAQU"]
[Wed Feb 18 22:23:45.146381 2026] [:error] [pid 11607:tid 11623] [client 104.46.236.39:9726] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aZXLcRw91ggRx3FA7BcA8wAAAkg"]
[Wed Feb 18 22:23:45.629810 2026] [:error] [pid 11607:tid 11632] [client 104.46.236.39:32411] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aZXLcRw91ggRx3FA7BcA-AAAAlE"]
[Wed Feb 18 22:23:46.376853 2026] [:error] [pid 11512:tid 11535] [client 104.46.236.39:16402] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aZXLchGamu0xQuQ-jbFnxwAAAZI"]
[Wed Feb 18 22:23:46.890753 2026] [:error] [pid 11610:tid 11672] [client 104.46.236.39:9469] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZXLcrWMUt4MNfN7mx3khwAAAsE"]
[Wed Feb 18 22:23:48.177157 2026] [:error] [pid 11607:tid 11625] [client 104.46.236.39:16877] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZXLdBw91ggRx3FA7BcBBQAAAko"]
[Wed Feb 18 22:23:48.593514 2026] [:error] [pid 11610:tid 11694] [client 104.46.236.39:29932] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZXLdLWMUt4MNfN7mx3kiQAAAtc"]
[Wed Feb 18 22:23:49.188932 2026] [:error] [pid 11607:tid 11635] [client 104.46.236.39:9705] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZXLdRw91ggRx3FA7BcBCwAAAlQ"]
[Wed Feb 18 22:23:49.596067 2026] [:error] [pid 11548:tid 11580] [client 104.46.236.39:44084] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shas.php"] [unique_id "aZXLdTSFZiBIZZvmIlMnLQAAAgI"]
[Wed Feb 18 22:23:50.080826 2026] [:error] [pid 21848:tid 21903] [client 104.46.236.39:44085] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shas.php"] [unique_id "aZXLdvbG91VRkVidT5dbuAAAAE4"]
[Wed Feb 18 22:23:50.764255 2026] [:error] [pid 11607:tid 11638] [client 104.46.236.39:16863] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shas.php"] [unique_id "aZXLdhw91ggRx3FA7BcBDgAAAlc"]
[Wed Feb 18 22:23:51.128859 2026] [:error] [pid 11609:tid 11658] [client 104.46.236.39:14151] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shas.php"] [unique_id "aZXLd8hm3UjgaKO2Na9D2gAAAo8"]
[Wed Feb 18 22:23:52.287624 2026] [:error] [pid 21847:tid 21877] [client 104.46.236.39:9448] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aZXLePy9A5wy4LuXmJ0vjgAAABM"]
[Wed Feb 18 22:23:52.634666 2026] [:error] [pid 11512:tid 11522] [client 104.46.236.39:14156] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aZXLeBGamu0xQuQ-jbFnzwAAAYU"]
[Wed Feb 18 22:23:53.316465 2026] [:error] [pid 11609:tid 11666] [client 104.46.236.39:9464] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aZXLechm3UjgaKO2Na9D3QAAApY"]
[Wed Feb 18 22:23:53.751698 2026] [:error] [pid 5561:tid 5582] [client 104.46.236.39:10509] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aZXLeUoQssCZYQ4NexbojAAAAVI"]
[Wed Feb 18 22:23:54.335845 2026] [:error] [pid 11607:tid 11615] [client 104.46.236.39:10497] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "aZXLehw91ggRx3FA7BcBEQAAAkA"]
[Wed Feb 18 22:23:55.030402 2026] [:error] [pid 11610:tid 11681] [client 104.46.236.39:38521] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "aZXLe7WMUt4MNfN7mx3kiwAAAso"]
[Wed Feb 18 22:23:55.786669 2026] [:error] [pid 11548:tid 11598] [client 104.46.236.39:16410] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "aZXLezSFZiBIZZvmIlMnMAAAAhQ"]
[Wed Feb 18 22:23:56.252231 2026] [:error] [pid 57014:tid 57021] [client 104.46.236.39:10504] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "aZXLfBNZnhS5qKtVIMJEhQAAAQQ"]
[Wed Feb 18 22:23:56.917032 2026] [:error] [pid 21848:tid 21899] [client 104.46.236.39:10549] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/er.php"] [unique_id "aZXLfPbG91VRkVidT5dbxAAAAEo"]
[Wed Feb 18 22:23:57.536456 2026] [:error] [pid 21847:tid 21864] [client 104.46.236.39:16843] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/er.php"] [unique_id "aZXLffy9A5wy4LuXmJ0vlQAAAAY"]
[Wed Feb 18 22:23:58.181302 2026] [:error] [pid 11610:tid 11677] [client 104.46.236.39:21897] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/er.php"] [unique_id "aZXLfrWMUt4MNfN7mx3kjwAAAsY"]
[Wed Feb 18 22:23:58.699436 2026] [:error] [pid 11610:tid 11691] [client 104.46.236.39:10531] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/er.php"] [unique_id "aZXLfrWMUt4MNfN7mx3kkQAAAtQ"]
[Wed Feb 18 22:24:00.205908 2026] [:error] [pid 11512:tid 11537] [client 104.46.236.39:14453] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fault.php"] [unique_id "aZXLgBGamu0xQuQ-jbFn0QAAAZQ"]
[Wed Feb 18 22:24:01.369392 2026] [:error] [pid 11610:tid 11683] [client 104.46.236.39:21904] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fault.php"] [unique_id "aZXLgbWMUt4MNfN7mx3kkgAAAsw"]
[Wed Feb 18 22:24:03.305785 2026] [:error] [pid 11548:tid 11593] [client 104.46.236.39:32439] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fault.php"] [unique_id "aZXLgzSFZiBIZZvmIlMnNQAAAg8"]
[Wed Feb 18 22:24:04.937231 2026] [:error] [pid 11548:tid 11595] [client 104.46.236.39:44044] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fault.php"] [unique_id "aZXLhDSFZiBIZZvmIlMnNwAAAhE"]
[Wed Feb 18 22:24:05.421239 2026] [:error] [pid 11512:tid 11539] [client 104.46.236.39:16845] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aZXLhRGamu0xQuQ-jbFn1gAAAZY"]
[Wed Feb 18 22:24:07.445493 2026] [:error] [pid 57014:tid 57034] [client 104.46.236.39:14404] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aZXLhxNZnhS5qKtVIMJEiQAAARE"]
[Wed Feb 18 22:24:07.798856 2026] [:error] [pid 57014:tid 57025] [client 104.46.236.39:29918] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aZXLhxNZnhS5qKtVIMJEigAAAQg"]
[Wed Feb 18 22:24:08.848541 2026] [:error] [pid 11512:tid 11521] [client 104.46.236.39:9701] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aZXLiBGamu0xQuQ-jbFn2AAAAYQ"]
[Wed Feb 18 22:24:09.321316 2026] [:error] [pid 21847:tid 21882] [client 104.46.236.39:10871] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aZXLify9A5wy4LuXmJ0vmgAAABg"]
[Wed Feb 18 22:24:09.691347 2026] [:error] [pid 21847:tid 21877] [client 104.46.236.39:14202] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aZXLify9A5wy4LuXmJ0vmwAAABM"]
[Wed Feb 18 22:24:10.195849 2026] [:error] [pid 11607:tid 11623] [client 104.46.236.39:37128] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aZXLihw91ggRx3FA7BcBGgAAAkg"]
[Wed Feb 18 22:24:10.726836 2026] [:error] [pid 11609:tid 11666] [client 104.46.236.39:14401] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aZXLishm3UjgaKO2Na9D6gAAApY"]
[Wed Feb 18 22:24:11.034402 2026] [:error] [pid 11610:tid 11695] [client 104.46.236.39:14159] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/leuk.php"] [unique_id "aZXLi7WMUt4MNfN7mx3klgAAAtg"]
[Wed Feb 18 22:24:11.818912 2026] [:error] [pid 5561:tid 5566] [client 104.46.236.39:44034] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/leuk.php"] [unique_id "aZXLi0oQssCZYQ4NexbolgAAAUI"]
[Wed Feb 18 22:24:12.150525 2026] [:error] [pid 11610:tid 11687] [client 104.46.236.39:10526] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/leuk.php"] [unique_id "aZXLjLWMUt4MNfN7mx3kmAAAAtA"]
[Wed Feb 18 22:24:14.755343 2026] [:error] [pid 21848:tid 21894] [client 104.46.236.39:10534] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/leuk.php"] [unique_id "aZXLjvbG91VRkVidT5dbzQAAAEU"]
[Wed Feb 18 22:24:15.727626 2026] [:error] [pid 11611:tid 11720] [client 104.46.236.39:16427] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aZXLj-2m6IPN_aBZuKaAHgAAAxY"]
[Wed Feb 18 22:24:16.175343 2026] [:error] [pid 21848:tid 21893] [client 104.46.236.39:32392] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aZXLkPbG91VRkVidT5db0QAAAEQ"]
[Wed Feb 18 22:24:16.562967 2026] [:error] [pid 21848:tid 21901] [client 104.46.236.39:16843] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aZXLkPbG91VRkVidT5db0gAAAEw"]
[Wed Feb 18 22:24:28.785414 2026] [:error] [pid 11610:tid 11671] [client 104.46.236.39:44032] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aZXLnLWMUt4MNfN7mx3kswAAAsA"]
[Wed Feb 18 22:24:29.170975 2026] [:error] [pid 11512:tid 11528] [client 104.46.236.39:29894] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aZXLnRGamu0xQuQ-jbFn4wAAAYs"]
[Wed Feb 18 22:24:29.574287 2026] [:error] [pid 11611:tid 11706] [client 104.46.236.39:45014] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aZXLne2m6IPN_aBZuKaAJgAAAwg"]
[Wed Feb 18 22:24:31.284863 2026] [:error] [pid 57014:tid 57022] [client 104.46.236.39:21900] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aZXLnxNZnhS5qKtVIMJElwAAAQU"]
[Wed Feb 18 22:24:31.995556 2026] [:error] [pid 21848:tid 21889] [client 104.46.236.39:10824] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lul.php"] [unique_id "aZXLn_bG91VRkVidT5db2wAAAEA"]
[Wed Feb 18 22:24:32.658086 2026] [:error] [pid 11548:tid 11582] [client 104.46.236.39:36307] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lul.php"] [unique_id "aZXLoDSFZiBIZZvmIlMnUQAAAgQ"]
[Wed Feb 18 22:24:34.727400 2026] [:error] [pid 21847:tid 21872] [client 104.46.236.39:37137] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lul.php"] [unique_id "aZXLovy9A5wy4LuXmJ0voQAAAA4"]
[Wed Feb 18 22:24:35.404454 2026] [:error] [pid 21848:tid 21895] [client 104.46.236.39:10550] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lul.php"] [unique_id "aZXLo_bG91VRkVidT5db3QAAAEY"]
[Wed Feb 18 22:24:36.558302 2026] [:error] [pid 11610:tid 11687] [client 104.46.236.39:51155] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aZXLpLWMUt4MNfN7mx3kuAAAAtA"]
[Wed Feb 18 22:24:37.092589 2026] [:error] [pid 11548:tid 11602] [client 104.46.236.39:37162] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aZXLpTSFZiBIZZvmIlMnXwAAAhg"]
[Wed Feb 18 22:24:37.627420 2026] [:error] [pid 11512:tid 11522] [client 104.46.236.39:6325] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aZXLpRGamu0xQuQ-jbFn6AAAAYU"]
[Wed Feb 18 22:24:38.047106 2026] [:error] [pid 11512:tid 11517] [client 104.46.236.39:36351] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aZXLphGamu0xQuQ-jbFn6QAAAYA"]
[Wed Feb 18 22:24:38.829695 2026] [:error] [pid 11512:tid 11525] [client 104.46.236.39:15944] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZXLphGamu0xQuQ-jbFn6wAAAYg"]
[Wed Feb 18 22:24:39.510890 2026] [:error] [pid 11512:tid 11523] [client 104.46.236.39:15969] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZXLpxGamu0xQuQ-jbFn7QAAAYY"]
[Wed Feb 18 22:24:39.836714 2026] [:error] [pid 11610:tid 11676] [client 104.46.236.39:23837] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZXLp7WMUt4MNfN7mx3kuQAAAsU"]
[Wed Feb 18 22:24:40.163738 2026] [:error] [pid 11548:tid 11599] [client 104.46.236.39:46051] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZXLqDSFZiBIZZvmIlMnZgAAAhU"]
[Wed Feb 18 22:24:40.542853 2026] [:error] [pid 11611:tid 11712] [client 104.46.236.39:10359] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ya.php"] [unique_id "aZXLqO2m6IPN_aBZuKaAKQAAAw4"]
[Wed Feb 18 22:24:40.830310 2026] [:error] [pid 11548:tid 11582] [client 104.46.236.39:15940] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ya.php"] [unique_id "aZXLqDSFZiBIZZvmIlMnaAAAAgQ"]
[Wed Feb 18 22:24:41.150719 2026] [:error] [pid 11611:tid 11719] [client 104.46.236.39:6286] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ya.php"] [unique_id "aZXLqe2m6IPN_aBZuKaAKgAAAxU"]
[Wed Feb 18 22:24:41.637291 2026] [:error] [pid 5561:tid 5578] [client 104.46.236.39:15961] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ya.php"] [unique_id "aZXLqUoQssCZYQ4NexbonAAAAU4"]
[Wed Feb 18 22:24:42.836984 2026] [:error] [pid 21847:tid 21862] [client 104.46.236.39:16662] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZXLqvy9A5wy4LuXmJ0vqgAAAAQ"]
[Wed Feb 18 22:24:44.221700 2026] [:error] [pid 21848:tid 21902] [client 104.46.236.39:45046] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZXLrPbG91VRkVidT5db4wAAAE0"]
[Wed Feb 18 22:24:44.776565 2026] [:error] [pid 5561:tid 5585] [client 104.46.236.39:46023] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZXLrEoQssCZYQ4NexbonQAAAVU"]
[Wed Feb 18 22:24:45.381439 2026] [:error] [pid 11607:tid 11632] [client 104.46.236.39:10823] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZXLrRw91ggRx3FA7BcBKgAAAlE"]
[Wed Feb 18 22:24:46.100216 2026] [:error] [pid 11607:tid 11635] [client 104.46.236.39:11549] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aZXLrhw91ggRx3FA7BcBLAAAAlQ"]
[Wed Feb 18 22:24:46.415080 2026] [:error] [pid 11610:tid 11683] [client 104.46.236.39:9682] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aZXLrrWMUt4MNfN7mx3kvQAAAsw"]
[Wed Feb 18 22:24:47.176221 2026] [:error] [pid 11607:tid 11617] [client 104.46.236.39:29941] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aZXLrxw91ggRx3FA7BcBLgAAAkI"]
[Wed Feb 18 22:24:47.646496 2026] [:error] [pid 11611:tid 11709] [client 104.46.236.39:16885] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aZXLr-2m6IPN_aBZuKaAMwAAAws"]
[Wed Feb 18 22:24:47.990196 2026] [:error] [pid 21847:tid 21860] [client 104.46.236.39:10875] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "aZXLr_y9A5wy4LuXmJ0vswAAAAI"]
[Wed Feb 18 22:24:48.354147 2026] [:error] [pid 11610:tid 11681] [client 104.46.236.39:46681] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "aZXLsLWMUt4MNfN7mx3kwQAAAso"]
[Wed Feb 18 22:24:48.830914 2026] [:error] [pid 5561:tid 5583] [client 104.46.236.39:16842] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "aZXLsEoQssCZYQ4NexbopAAAAVM"]
[Wed Feb 18 22:24:49.703889 2026] [:error] [pid 11512:tid 11525] [client 104.46.236.39:9818] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "aZXLsRGamu0xQuQ-jbFn9wAAAYg"]
[Wed Feb 18 22:24:50.202673 2026] [:error] [pid 11610:tid 11672] [client 104.46.236.39:31862] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "aZXLsrWMUt4MNfN7mx3kwgAAAsE"]
[Wed Feb 18 22:24:51.290050 2026] [:error] [pid 11610:tid 11680] [client 104.46.236.39:13678] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "aZXLs7WMUt4MNfN7mx3kwwAAAsk"]
[Wed Feb 18 22:24:52.150816 2026] [:error] [pid 11611:tid 11705] [client 104.46.236.39:50488] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "aZXLtO2m6IPN_aBZuKaAOQAAAwc"]
[Wed Feb 18 22:24:52.714608 2026] [:error] [pid 11512:tid 11539] [client 104.46.236.39:6805] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "aZXLtBGamu0xQuQ-jbFn_gAAAZY"]
[Wed Feb 18 22:24:53.276812 2026] [:error] [pid 11512:tid 11528] [client 104.46.236.39:20089] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aZXLtRGamu0xQuQ-jbFoAAAAAYs"]
[Wed Feb 18 22:24:53.970511 2026] [:error] [pid 5561:tid 5565] [client 104.46.236.39:6401] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aZXLtUoQssCZYQ4NexboqgAAAUE"]
[Wed Feb 18 22:24:54.584613 2026] [:error] [pid 5561:tid 5583] [client 104.46.236.39:17554] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aZXLtkoQssCZYQ4NexborQAAAVM"]
[Wed Feb 18 22:24:55.606799 2026] [:error] [pid 11610:tid 11695] [client 104.46.236.39:18855] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aZXLt7WMUt4MNfN7mx3kxgAAAtg"]
[Wed Feb 18 22:24:56.472075 2026] [:error] [pid 11512:tid 11529] [client 104.46.236.39:43444] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aZXLuBGamu0xQuQ-jbFoBwAAAYw"]
[Wed Feb 18 22:24:57.353384 2026] [:error] [pid 11512:tid 11533] [client 104.46.236.39:19400] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aZXLuRGamu0xQuQ-jbFoCAAAAZA"]
[Wed Feb 18 22:24:58.958692 2026] [:error] [pid 11548:tid 11580] [client 104.46.236.39:18465] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aZXLujSFZiBIZZvmIlMngwAAAgI"]
[Wed Feb 18 22:24:59.367321 2026] [:error] [pid 21848:tid 21908] [client 104.46.236.39:52400] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aZXLu_bG91VRkVidT5db7AAAAFM"]
[Wed Feb 18 22:25:00.015990 2026] [:error] [pid 11512:tid 11528] [client 104.46.236.39:15736] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aZXLvBGamu0xQuQ-jbFoCwAAAYs"]
[Wed Feb 18 22:25:01.018595 2026] [:error] [pid 21848:tid 21911] [client 104.46.236.39:53631] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aZXLvfbG91VRkVidT5db7wAAAFY"]
[Wed Feb 18 22:25:01.512030 2026] [:error] [pid 21847:tid 21874] [client 104.46.236.39:16210] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aZXLvfy9A5wy4LuXmJ0vvQAAABA"]
[Wed Feb 18 22:25:02.299364 2026] [:error] [pid 11548:tid 11597] [client 104.46.236.39:6901] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aZXLvjSFZiBIZZvmIlMnhwAAAhM"]
[Wed Feb 18 22:25:02.877345 2026] [:error] [pid 11611:tid 11722] [client 104.46.236.39:7070] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aZXLvu2m6IPN_aBZuKaAPAAAAxg"]
[Wed Feb 18 22:25:03.880111 2026] [:error] [pid 11548:tid 11581] [client 104.46.236.39:41527] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aZXLvzSFZiBIZZvmIlMnigAAAgM"]
[Wed Feb 18 22:25:04.240837 2026] [:error] [pid 11548:tid 11594] [client 104.46.236.39:18541] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aZXLwDSFZiBIZZvmIlMnjgAAAhA"]
[Wed Feb 18 22:25:04.591037 2026] [:error] [pid 11610:tid 11671] [client 104.46.236.39:6948] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aZXLwLWMUt4MNfN7mx3k0QAAAsA"]
[Wed Feb 18 22:25:05.033427 2026] [:error] [pid 11611:tid 11706] [client 104.46.236.39:18552] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fot.php"] [unique_id "aZXLwe2m6IPN_aBZuKaAPwAAAwg"]
[Wed Feb 18 22:25:05.540409 2026] [:error] [pid 11607:tid 11629] [client 104.46.236.39:6613] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fot.php"] [unique_id "aZXLwRw91ggRx3FA7BcBRAAAAk4"]
[Wed Feb 18 22:25:05.844346 2026] [:error] [pid 11607:tid 11634] [client 104.46.236.39:33027] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fot.php"] [unique_id "aZXLwRw91ggRx3FA7BcBRgAAAlM"]
[Wed Feb 18 22:25:06.229190 2026] [:error] [pid 11611:tid 11702] [client 104.46.236.39:20127] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fot.php"] [unique_id "aZXLwu2m6IPN_aBZuKaAQwAAAwQ"]
[Wed Feb 18 22:25:06.617716 2026] [:error] [pid 11607:tid 11624] [client 104.46.236.39:37753] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aZXLwhw91ggRx3FA7BcBSQAAAkk"]
[Wed Feb 18 22:25:07.208289 2026] [:error] [pid 21848:tid 21889] [client 104.46.236.39:50173] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aZXLw_bG91VRkVidT5db9AAAAEA"]
[Wed Feb 18 22:25:07.780616 2026] [:error] [pid 21848:tid 21900] [client 104.46.236.39:20014] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aZXLw_bG91VRkVidT5db9QAAAEs"]
[Wed Feb 18 22:25:08.398457 2026] [:error] [pid 11610:tid 11694] [client 104.46.236.39:13111] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aZXLxLWMUt4MNfN7mx3k1QAAAtc"]
[Wed Feb 18 22:25:08.913502 2026] [:error] [pid 5561:tid 5584] [client 104.46.236.39:33063] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aZXLxEoQssCZYQ4NexbosQAAAVQ"]
[Wed Feb 18 22:25:09.262197 2026] [:error] [pid 11611:tid 11707] [client 104.46.236.39:37740] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aZXLxe2m6IPN_aBZuKaASAAAAwk"]
[Wed Feb 18 22:25:09.974886 2026] [:error] [pid 11548:tid 11595] [client 104.46.236.39:31117] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aZXLxTSFZiBIZZvmIlMnlQAAAhE"]
[Wed Feb 18 22:25:11.167242 2026] [:error] [pid 11610:tid 11676] [client 104.46.236.39:31107] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aZXLx7WMUt4MNfN7mx3k1wAAAsU"]
[Wed Feb 18 22:25:11.706819 2026] [:error] [pid 11610:tid 11682] [client 104.46.236.39:21373] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aZXLx7WMUt4MNfN7mx3k2QAAAss"]
[Wed Feb 18 22:25:12.251511 2026] [:error] [pid 11609:tid 11654] [client 104.46.236.39:37639] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aZXLyMhm3UjgaKO2Na9D_AAAAos"]
[Wed Feb 18 22:25:13.009874 2026] [:error] [pid 11607:tid 11636] [client 104.46.236.39:37663] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aZXLyRw91ggRx3FA7BcBTgAAAlU"]
[Wed Feb 18 22:25:13.904270 2026] [:error] [pid 11512:tid 11517] [client 104.46.236.39:12343] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aZXLyRGamu0xQuQ-jbFoDwAAAYA"]
[Wed Feb 18 22:25:15.047166 2026] [:error] [pid 5561:tid 5574] [client 104.46.236.39:7039] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev1s.php"] [unique_id "aZXLy0oQssCZYQ4NexboswAAAUo"]
[Wed Feb 18 22:25:16.556281 2026] [:error] [pid 11512:tid 11539] [client 104.46.236.39:44434] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev1s.php"] [unique_id "aZXLzBGamu0xQuQ-jbFoEwAAAZY"]
[Wed Feb 18 22:25:17.200422 2026] [:error] [pid 11512:tid 11520] [client 104.46.236.39:19713] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev1s.php"] [unique_id "aZXLzRGamu0xQuQ-jbFoFQAAAYM"]
[Wed Feb 18 22:25:18.504622 2026] [:error] [pid 11611:tid 11722] [client 104.46.236.39:11783] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev1s.php"] [unique_id "aZXLzu2m6IPN_aBZuKaASwAAAxg"]
[Wed Feb 18 22:25:19.664421 2026] [:error] [pid 21848:tid 21911] [client 104.46.236.39:31132] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffd.php"] [unique_id "aZXLz_bG91VRkVidT5db-wAAAFY"]
[Wed Feb 18 22:25:20.249124 2026] [:error] [pid 21847:tid 21871] [client 104.46.236.39:44151] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffd.php"] [unique_id "aZXL0Py9A5wy4LuXmJ0vzgAAAA0"]
[Wed Feb 18 22:25:20.599577 2026] [:error] [pid 11610:tid 11687] [client 104.46.236.39:62478] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffd.php"] [unique_id "aZXL0LWMUt4MNfN7mx3k4QAAAtA"]
[Wed Feb 18 22:25:21.049853 2026] [:error] [pid 21848:tid 21890] [client 104.46.236.39:20581] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffd.php"] [unique_id "aZXL0fbG91VRkVidT5db_AAAAEE"]
[Wed Feb 18 22:25:21.378877 2026] [:error] [pid 11548:tid 11587] [client 104.46.236.39:6976] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aZXL0TSFZiBIZZvmIlMnmAAAAgk"]
[Wed Feb 18 22:25:21.627091 2026] [:error] [pid 11548:tid 11593] [client 104.46.236.39:37697] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aZXL0TSFZiBIZZvmIlMnmgAAAg8"]
[Wed Feb 18 22:25:21.912775 2026] [:error] [pid 11548:tid 11589] [client 104.46.236.39:44140] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aZXL0TSFZiBIZZvmIlMnmwAAAgs"]
[Wed Feb 18 22:25:22.666430 2026] [:error] [pid 11548:tid 11590] [client 104.46.236.39:26477] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aZXL0jSFZiBIZZvmIlMnnQAAAgw"]
[Wed Feb 18 22:25:22.941703 2026] [:error] [pid 11548:tid 11597] [client 104.46.236.39:44098] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aZXL0jSFZiBIZZvmIlMnnwAAAhM"]
[Wed Feb 18 22:25:23.379853 2026] [:error] [pid 21848:tid 21899] [client 104.46.236.39:62472] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aZXL0_bG91VRkVidT5db_wAAAEo"]
[Wed Feb 18 22:25:23.957012 2026] [:error] [pid 11611:tid 11701] [client 104.46.236.39:48497] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aZXL0-2m6IPN_aBZuKaAUAAAAwM"]
[Wed Feb 18 22:25:24.434391 2026] [:error] [pid 11548:tid 11599] [client 104.46.236.39:62500] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aZXL1DSFZiBIZZvmIlMnoQAAAhU"]
[Wed Feb 18 22:25:24.878588 2026] [:error] [pid 21848:tid 21913] [client 104.46.236.39:27915] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aZXL1PbG91VRkVidT5dcAwAAAFg"]
[Wed Feb 18 22:25:25.205744 2026] [:error] [pid 11548:tid 11585] [client 104.46.236.39:19727] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aZXL1TSFZiBIZZvmIlMnowAAAgc"]
[Wed Feb 18 22:25:25.599609 2026] [:error] [pid 11611:tid 11712] [client 104.46.236.39:31122] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aZXL1e2m6IPN_aBZuKaAUgAAAw4"]
[Wed Feb 18 22:25:26.166973 2026] [:error] [pid 21848:tid 21903] [client 104.46.236.39:42868] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aZXL1vbG91VRkVidT5dcBwAAAE4"]
[Wed Feb 18 22:25:26.929648 2026] [:error] [pid 21847:tid 21859] [client 104.46.236.39:48472] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aZXL1vy9A5wy4LuXmJ0v1AAAAAE"]
[Wed Feb 18 22:25:38.887074 2026] [:error] [pid 11548:tid 11580] [client 104.46.236.39:62510] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "aZXL4jSFZiBIZZvmIlMnwAAAAgI"]
[Wed Feb 18 22:25:39.650855 2026] [:error] [pid 21847:tid 21876] [client 104.46.236.39:21347] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "aZXL4_y9A5wy4LuXmJ0v1QAAABI"]
[Wed Feb 18 22:25:39.927080 2026] [:error] [pid 21847:tid 21872] [client 104.46.236.39:11864] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "aZXL4_y9A5wy4LuXmJ0v1gAAAA4"]
[Wed Feb 18 22:25:40.604218 2026] [:error] [pid 11610:tid 11695] [client 104.46.236.39:27956] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "aZXL5LWMUt4MNfN7mx3k7AAAAtg"]
[Wed Feb 18 22:25:41.760610 2026] [:error] [pid 11607:tid 11619] [client 104.46.236.39:61527] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aZXL5Rw91ggRx3FA7BcBXwAAAkQ"]
[Wed Feb 18 22:25:42.154879 2026] [:error] [pid 11611:tid 11720] [client 104.46.236.39:6492] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aZXL5u2m6IPN_aBZuKaAVwAAAxY"]
[Wed Feb 18 22:25:43.029089 2026] [:error] [pid 11610:tid 11690] [client 104.46.236.39:12601] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aZXL57WMUt4MNfN7mx3k8AAAAtM"]
[Wed Feb 18 22:25:43.457361 2026] [:error] [pid 21847:tid 21867] [client 104.46.236.39:61524] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aZXL5_y9A5wy4LuXmJ0v2gAAAAk"]
[Wed Feb 18 22:25:43.821782 2026] [:error] [pid 21848:tid 21899] [client 104.46.236.39:11842] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZXL5_bG91VRkVidT5dcDgAAAEo"]
[Wed Feb 18 22:25:44.700109 2026] [:error] [pid 11512:tid 11531] [client 104.46.236.39:48462] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZXL6BGamu0xQuQ-jbFoLQAAAY4"]
[Wed Feb 18 22:25:45.075272 2026] [:error] [pid 11607:tid 11623] [client 104.46.236.39:19108] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZXL6Rw91ggRx3FA7BcBYgAAAkg"]
[Wed Feb 18 22:25:45.409095 2026] [:error] [pid 5561:tid 5577] [client 104.46.236.39:19332] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZXL6UoQssCZYQ4NexbozgAAAU0"]
[Wed Feb 18 22:25:45.772861 2026] [:error] [pid 11609:tid 11645] [client 104.46.236.39:26455] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZXL6chm3UjgaKO2Na9EDAAAAoI"]
[Wed Feb 18 22:25:46.666963 2026] [:error] [pid 11607:tid 11636] [client 104.46.236.39:11860] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZXL6hw91ggRx3FA7BcBZQAAAlU"]
[Wed Feb 18 22:25:47.538742 2026] [:error] [pid 11610:tid 11674] [client 104.46.236.39:6767] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZXL67WMUt4MNfN7mx3k8gAAAsM"]
[Wed Feb 18 22:25:48.274810 2026] [:error] [pid 11610:tid 11683] [client 104.46.236.39:19494] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZXL7LWMUt4MNfN7mx3k9QAAAsw"]
[Wed Feb 18 22:25:49.050035 2026] [:error] [pid 11610:tid 11677] [client 104.46.236.39:19073] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aZXL7bWMUt4MNfN7mx3k9gAAAsY"]
[Wed Feb 18 22:25:49.427070 2026] [:error] [pid 11512:tid 11541] [client 104.46.236.39:31107] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aZXL7RGamu0xQuQ-jbFoMAAAAZg"]
[Wed Feb 18 22:25:50.251199 2026] [:error] [pid 11611:tid 11710] [client 104.46.236.39:37220] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aZXL7u2m6IPN_aBZuKaAXwAAAww"]
[Wed Feb 18 22:25:50.687471 2026] [:error] [pid 11610:tid 11680] [client 104.46.236.39:12556] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aZXL7rWMUt4MNfN7mx3k9wAAAsk"]
[Wed Feb 18 22:25:51.444049 2026] [:error] [pid 11512:tid 11534] [client 104.46.236.39:25196] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aZXL7xGamu0xQuQ-jbFoNAAAAZE"]
[Wed Feb 18 22:25:51.809441 2026] [:error] [pid 11548:tid 11589] [client 104.46.236.39:17674] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aZXL7zSFZiBIZZvmIlMnygAAAgs"]
[Wed Feb 18 22:25:52.175688 2026] [:error] [pid 11610:tid 11672] [client 104.46.236.39:16815] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aZXL8LWMUt4MNfN7mx3k-wAAAsE"]
[Wed Feb 18 22:25:53.019599 2026] [:error] [pid 11512:tid 11517] [client 104.46.236.39:15575] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aZXL8RGamu0xQuQ-jbFoNgAAAYA"]
[Wed Feb 18 22:25:53.676782 2026] [:error] [pid 11610:tid 11679] [client 104.46.236.39:27963] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aZXL8bWMUt4MNfN7mx3k_AAAAsg"]
[Wed Feb 18 22:25:54.440312 2026] [:error] [pid 11512:tid 11533] [client 104.46.236.39:19357] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aZXL8hGamu0xQuQ-jbFoOAAAAZA"]
[Wed Feb 18 22:25:54.962429 2026] [:error] [pid 11512:tid 11523] [client 104.46.236.39:11861] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aZXL8hGamu0xQuQ-jbFoOQAAAYY"]
[Wed Feb 18 22:25:55.337439 2026] [:error] [pid 21848:tid 21902] [client 104.46.236.39:17724] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aZXL8_bG91VRkVidT5dcFAAAAE0"]
[Wed Feb 18 22:25:55.797610 2026] [:error] [pid 11611:tid 11698] [client 104.46.236.39:11900] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aZXL8-2m6IPN_aBZuKaAYwAAAwA"]
[Wed Feb 18 22:25:56.543804 2026] [:error] [pid 11610:tid 11688] [client 104.46.236.39:61523] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aZXL9LWMUt4MNfN7mx3k_gAAAtE"]
[Wed Feb 18 22:25:56.945207 2026] [:error] [pid 11607:tid 11620] [client 104.46.236.39:37197] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aZXL9Bw91ggRx3FA7BcBaAAAAkU"]
[Wed Feb 18 22:25:57.226658 2026] [:error] [pid 11512:tid 11519] [client 104.46.236.39:19094] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aZXL9RGamu0xQuQ-jbFoPAAAAYI"]
[Wed Feb 18 22:25:58.528623 2026] [:error] [pid 11610:tid 11674] [client 104.46.236.39:6363] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aZXL9rWMUt4MNfN7mx3lAQAAAsM"]
[Wed Feb 18 22:25:59.489820 2026] [:error] [pid 11609:tid 11665] [client 104.46.236.39:16787] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aZXL98hm3UjgaKO2Na9EEQAAApU"]
[Wed Feb 18 22:26:00.053790 2026] [:error] [pid 11609:tid 11661] [client 104.46.236.39:18012] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aZXL-Mhm3UjgaKO2Na9EEgAAApE"]
[Wed Feb 18 22:26:00.498886 2026] [:error] [pid 57014:tid 57017] [client 104.46.236.39:6517] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aZXL-BNZnhS5qKtVIMJEtQAAAQA"]
[Wed Feb 18 22:26:01.551538 2026] [:error] [pid 57014:tid 57035] [client 104.46.236.39:62052] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aZXL-RNZnhS5qKtVIMJEtgAAARI"]
[Wed Feb 18 22:26:02.070327 2026] [:error] [pid 21848:tid 21912] [client 104.46.236.39:19088] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aZXL-vbG91VRkVidT5dcGAAAAFc"]
[Wed Feb 18 22:26:02.725485 2026] [:error] [pid 11610:tid 11686] [client 104.46.236.39:37193] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aZXL-rWMUt4MNfN7mx3lBgAAAs8"]
[Wed Feb 18 22:26:03.183421 2026] [:error] [pid 11610:tid 11681] [client 104.46.236.39:61534] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aZXL-7WMUt4MNfN7mx3lBwAAAso"]
[Wed Feb 18 22:26:03.476353 2026] [:error] [pid 5561:tid 5585] [client 104.46.236.39:61510] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aZXL-0oQssCZYQ4Nexbo2QAAAVU"]
[Wed Feb 18 22:26:03.858700 2026] [:error] [pid 21848:tid 21907] [client 104.46.236.39:14648] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aZXL-_bG91VRkVidT5dcGwAAAFI"]
[Wed Feb 18 22:26:04.477285 2026] [:error] [pid 57014:tid 57027] [client 104.46.236.39:62048] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aZXL_BNZnhS5qKtVIMJEwQAAAQo"]
[Wed Feb 18 22:26:05.213920 2026] [:error] [pid 11610:tid 11695] [client 104.46.236.39:25185] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aZXL_bWMUt4MNfN7mx3lCgAAAtg"]
[Wed Feb 18 22:26:05.637235 2026] [:error] [pid 11607:tid 11618] [client 104.46.236.39:6683] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZXL_Rw91ggRx3FA7BcBqAAAAkM"]
[Wed Feb 18 22:26:05.991349 2026] [:error] [pid 11548:tid 11594] [client 104.46.236.39:9736] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZXL_TSFZiBIZZvmIlMoIAAAAhA"]
[Wed Feb 18 22:26:06.320265 2026] [:error] [pid 11548:tid 11589] [client 104.46.236.39:61520] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZXL_jSFZiBIZZvmIlMoKQAAAgs"]
[Wed Feb 18 22:26:06.627370 2026] [:error] [pid 21848:tid 21905] [client 104.46.236.39:37203] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZXL_vbG91VRkVidT5dcHQAAAFA"]
[Wed Feb 18 22:26:07.356896 2026] [:error] [pid 11610:tid 11684] [client 104.46.236.39:19400] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aZXL_7WMUt4MNfN7mx3lDAAAAs0"]
[Wed Feb 18 22:26:09.465815 2026] [:error] [pid 11548:tid 11591] [client 104.46.236.39:18024] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aZXMATSFZiBIZZvmIlMoNQAAAg0"]
[Wed Feb 18 22:26:09.775480 2026] [:error] [pid 11611:tid 11720] [client 104.46.236.39:18030] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aZXMAe2m6IPN_aBZuKaAbAAAAxY"]
[Wed Feb 18 22:26:10.085676 2026] [:error] [pid 11610:tid 11673] [client 104.46.236.39:12391] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aZXMArWMUt4MNfN7mx3lDwAAAsI"]
[Wed Feb 18 22:26:10.458262 2026] [:error] [pid 21848:tid 21896] [client 104.46.236.39:48437] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aZXMAvbG91VRkVidT5dcIQAAAEc"]
[Wed Feb 18 22:26:11.242943 2026] [:error] [pid 21847:tid 21858] [client 104.46.236.39:62079] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aZXMA_y9A5wy4LuXmJ0wDQAAAAA"]
[Wed Feb 18 22:26:11.776209 2026] [:error] [pid 11607:tid 11615] [client 104.46.236.39:6382] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aZXMAxw91ggRx3FA7BcBvAAAAkA"]
[Wed Feb 18 22:26:12.171250 2026] [:error] [pid 11607:tid 11638] [client 104.46.236.39:14635] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aZXMBBw91ggRx3FA7BcBvQAAAlc"]
[Wed Feb 18 22:26:12.820496 2026] [:error] [pid 11611:tid 11708] [client 104.46.236.39:6513] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZXMBO2m6IPN_aBZuKaAbgAAAwo"]
[Wed Feb 18 22:26:14.059383 2026] [:error] [pid 11609:tid 11645] [client 104.46.236.39:16806] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZXMBshm3UjgaKO2Na9EGwAAAoI"]
[Wed Feb 18 22:26:15.091267 2026] [:error] [pid 21848:tid 21912] [client 104.46.236.39:16779] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZXMB_bG91VRkVidT5dcJQAAAFc"]
[Wed Feb 18 22:26:15.651402 2026] [:error] [pid 11512:tid 11531] [client 104.46.236.39:15552] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZXMBxGamu0xQuQ-jbFoRAAAAY4"]
[Wed Feb 18 22:26:17.484531 2026] [:error] [pid 21848:tid 21907] [client 104.46.236.39:19461] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aZXMCfbG91VRkVidT5dcJwAAAFI"]
[Wed Feb 18 22:26:17.996038 2026] [:error] [pid 21848:tid 21889] [client 104.46.236.39:12590] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aZXMCfbG91VRkVidT5dcKQAAAEA"]
[Wed Feb 18 22:26:18.766138 2026] [:error] [pid 11607:tid 11640] [client 104.46.236.39:19516] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aZXMChw91ggRx3FA7BcBwgAAAlg"]
[Wed Feb 18 22:26:19.306740 2026] [:error] [pid 11607:tid 11633] [client 104.46.236.39:48395] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aZXMCxw91ggRx3FA7BcBxAAAAlI"]
[Wed Feb 18 22:26:20.112897 2026] [:error] [pid 11609:tid 11650] [client 104.46.236.39:6490] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aZXMDMhm3UjgaKO2Na9EHgAAAoc"]
[Wed Feb 18 22:26:20.643437 2026] [:error] [pid 11548:tid 11597] [client 104.46.236.39:17696] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aZXMDDSFZiBIZZvmIlMoPQAAAhM"]
[Wed Feb 18 22:26:21.142567 2026] [:error] [pid 11512:tid 11536] [client 104.46.236.39:61511] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aZXMDRGamu0xQuQ-jbFoSgAAAZM"]
[Wed Feb 18 22:26:21.596777 2026] [:error] [pid 5561:tid 5581] [client 104.46.236.39:15603] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aZXMDUoQssCZYQ4Nexbo6AAAAVE"]
[Wed Feb 18 22:26:22.218294 2026] [:error] [pid 5561:tid 5571] [client 104.46.236.39:16801] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aZXMDkoQssCZYQ4Nexbo6QAAAUc"]
[Wed Feb 18 22:26:23.100891 2026] [:error] [pid 11548:tid 11590] [client 104.46.236.39:12376] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aZXMDzSFZiBIZZvmIlMoQQAAAgw"]
[Wed Feb 18 22:26:23.481301 2026] [:error] [pid 11548:tid 11602] [client 104.46.236.39:37221] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aZXMDzSFZiBIZZvmIlMoQwAAAhg"]
[Wed Feb 18 22:26:23.994172 2026] [:error] [pid 11512:tid 11541] [client 104.46.236.39:19474] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aZXMDxGamu0xQuQ-jbFoTAAAAZg"]
[Wed Feb 18 22:26:24.484098 2026] [:error] [pid 11610:tid 11685] [client 104.46.236.39:19471] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aZXMELWMUt4MNfN7mx3lGgAAAs4"]
[Wed Feb 18 22:26:25.424432 2026] [:error] [pid 11610:tid 11680] [client 104.46.236.39:28016] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aZXMEbWMUt4MNfN7mx3lGwAAAsk"]
[Wed Feb 18 22:26:25.987770 2026] [:error] [pid 11548:tid 11583] [client 104.46.236.39:12363] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aZXMETSFZiBIZZvmIlMoRgAAAgU"]
[Wed Feb 18 22:26:26.407575 2026] [:error] [pid 11611:tid 11708] [client 104.46.236.39:6397] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aZXMEu2m6IPN_aBZuKaAeQAAAwo"]
[Wed Feb 18 22:26:26.762785 2026] [:error] [pid 11548:tid 11585] [client 104.46.236.39:37231] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aZXMEjSFZiBIZZvmIlMoSAAAAgc"]
[Wed Feb 18 22:26:27.296630 2026] [:error] [pid 11611:tid 11703] [client 104.46.236.39:12394] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aZXME-2m6IPN_aBZuKaAfAAAAwU"]
[Wed Feb 18 22:26:28.004967 2026] [:error] [pid 57014:tid 57029] [client 104.46.236.39:48409] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aZXMFBNZnhS5qKtVIMJE4gAAAQw"]
[Wed Feb 18 22:26:28.416169 2026] [:error] [pid 11609:tid 11648] [client 104.46.236.39:61629] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aZXMFMhm3UjgaKO2Na9EIwAAAoU"]
[Wed Feb 18 22:26:28.699701 2026] [:error] [pid 21847:tid 21863] [client 104.46.236.39:16808] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aZXMFPy9A5wy4LuXmJ0wHgAAAAU"]
[Wed Feb 18 22:26:29.058442 2026] [:error] [pid 11611:tid 11715] [client 104.46.236.39:37229] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aZXMFe2m6IPN_aBZuKaAgQAAAxE"]
[Wed Feb 18 22:26:29.792319 2026] [:error] [pid 21847:tid 21867] [client 104.46.236.39:61564] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aZXMFfy9A5wy4LuXmJ0wIQAAAAk"]
[Wed Feb 18 22:26:30.097707 2026] [:error] [pid 11609:tid 11657] [client 104.46.236.39:11853] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aZXMFshm3UjgaKO2Na9EKwAAAo4"]
[Wed Feb 18 22:26:30.385338 2026] [:error] [pid 11610:tid 11673] [client 104.46.236.39:14636] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aZXMFrWMUt4MNfN7mx3lHgAAAsI"]
[Wed Feb 18 22:26:30.653841 2026] [:error] [pid 21848:tid 21909] [client 104.46.236.39:19514] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aZXMFvbG91VRkVidT5dcLQAAAFQ"]
[Wed Feb 18 22:26:31.354177 2026] [:error] [pid 11611:tid 11720] [client 104.46.236.39:27993] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aZXMF-2m6IPN_aBZuKaAhgAAAxY"]
[Wed Feb 18 22:26:31.947480 2026] [:error] [pid 57014:tid 57028] [client 104.46.236.39:9744] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aZXMFxNZnhS5qKtVIMJE5gAAAQs"]
[Wed Feb 18 22:26:32.370654 2026] [:error] [pid 11548:tid 11599] [client 104.46.236.39:27991] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aZXMGDSFZiBIZZvmIlMoTQAAAhU"]
[Wed Feb 18 22:26:32.789717 2026] [:error] [pid 11607:tid 11631] [client 104.46.236.39:18248] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aZXMGBw91ggRx3FA7BcBzAAAAlA"]
[Wed Feb 18 22:26:33.183702 2026] [:error] [pid 11611:tid 11698] [client 104.46.236.39:19466] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aZXMGe2m6IPN_aBZuKaAiAAAAwA"]
[Wed Feb 18 22:26:33.707331 2026] [:error] [pid 21848:tid 21908] [client 104.46.236.39:19109] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aZXMGfbG91VRkVidT5dcMAAAAFM"]
[Wed Feb 18 22:26:34.068648 2026] [:error] [pid 11611:tid 11709] [client 104.46.236.39:19385] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZXMGu2m6IPN_aBZuKaAigAAAws"]
[Wed Feb 18 22:26:34.340969 2026] [:error] [pid 21847:tid 21871] [client 104.46.236.39:11895] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZXMGvy9A5wy4LuXmJ0wIgAAAA0"]
[Wed Feb 18 22:26:35.114206 2026] [:error] [pid 21848:tid 21911] [client 104.46.236.39:48406] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZXMG_bG91VRkVidT5dcMQAAAFY"]
[Wed Feb 18 22:26:35.466813 2026] [:error] [pid 11607:tid 11617] [client 104.46.236.39:25157] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZXMGxw91ggRx3FA7BcB0AAAAkI"]
[Wed Feb 18 22:26:35.963108 2026] [:error] [pid 11610:tid 11674] [client 104.46.236.39:19356] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZXMG7WMUt4MNfN7mx3lIgAAAsM"]
[Wed Feb 18 22:26:36.398275 2026] [:error] [pid 11609:tid 11652] [client 104.46.236.39:41564] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZXMHMhm3UjgaKO2Na9EMwAAAok"]
[Wed Feb 18 22:26:36.914145 2026] [:error] [pid 11611:tid 11702] [client 104.46.236.39:9913] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZXMHO2m6IPN_aBZuKaAjgAAAwQ"]
[Wed Feb 18 22:26:38.678094 2026] [:error] [pid 11610:tid 11682] [client 104.46.236.39:9867] [client 104.46.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aZXMHrWMUt4MNfN7mx3lJgAAAss"]
[Wed Feb 18 22:26:44.238960 2026] [:error] [pid 11611:tid 11716] [client 104.46.236.39:9893] [client 104.46.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aZXMJO2m6IPN_aBZuKaAmQAAAxI"]
[Wed Feb 18 22:26:50.006934 2026] [:error] [pid 5561:tid 5566] [client 104.46.236.39:15651] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aZXMKkoQssCZYQ4NexbpCgAAAUI"]
[Wed Feb 18 22:26:51.215902 2026] [:error] [pid 11609:tid 11668] [client 104.46.236.39:17677] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aZXMK8hm3UjgaKO2Na9ERgAAApg"]
[Wed Feb 18 22:26:51.504800 2026] [:error] [pid 11548:tid 11601] [client 104.46.236.39:7060] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aZXMKzSFZiBIZZvmIlMoVAAAAhc"]
[Wed Feb 18 22:26:51.834492 2026] [:error] [pid 11611:tid 11719] [client 104.46.236.39:11102] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aZXMK-2m6IPN_aBZuKaApQAAAxU"]
[Wed Feb 18 22:26:52.720286 2026] [:error] [pid 11611:tid 11701] [client 104.46.236.39:61505] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aZXMLO2m6IPN_aBZuKaAqAAAAwM"]
[Wed Feb 18 22:26:53.284730 2026] [:error] [pid 11611:tid 11711] [client 104.46.236.39:7082] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aZXMLe2m6IPN_aBZuKaArAAAAw0"]
[Wed Feb 18 22:26:53.992896 2026] [:error] [pid 11548:tid 11597] [client 104.46.236.39:15664] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aZXMLTSFZiBIZZvmIlMoVwAAAhM"]
[Wed Feb 18 22:26:54.668996 2026] [:error] [pid 57014:tid 57021] [client 104.46.236.39:19820] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x7.php"] [unique_id "aZXMLhNZnhS5qKtVIMJE8gAAAQQ"]
[Wed Feb 18 22:26:55.012874 2026] [:error] [pid 21847:tid 21871] [client 104.46.236.39:27983] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aZXML_y9A5wy4LuXmJ0wLgAAAA0"]
[Wed Feb 18 22:26:56.025406 2026] [:error] [pid 11611:tid 11706] [client 104.46.236.39:61575] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aZXMMO2m6IPN_aBZuKaAtwAAAwg"]
[Wed Feb 18 22:26:56.555304 2026] [:error] [pid 11611:tid 11716] [client 104.46.236.39:9870] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aZXMMO2m6IPN_aBZuKaAuAAAAxI"]
[Wed Feb 18 22:26:57.044674 2026] [:error] [pid 11548:tid 11596] [client 104.46.236.39:27988] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aZXMMTSFZiBIZZvmIlMoXAAAAhI"]
[Wed Feb 18 22:26:57.918294 2026] [:error] [pid 11611:tid 11711] [client 104.46.236.39:20535] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aZXMMe2m6IPN_aBZuKaAuwAAAw0"]
[Wed Feb 18 22:26:58.361515 2026] [:error] [pid 5561:tid 5567] [client 104.46.236.39:14598] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aZXMMkoQssCZYQ4NexbpCwAAAUM"]
[Wed Feb 18 22:26:59.060613 2026] [:error] [pid 21848:tid 21912] [client 104.46.236.39:18285] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aZXMM_bG91VRkVidT5dcTAAAAFc"]
[Wed Feb 18 22:26:59.786040 2026] [:error] [pid 11548:tid 11585] [client 104.46.236.39:18243] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aZXMMzSFZiBIZZvmIlMoYAAAAgc"]
[Wed Feb 18 22:27:00.876198 2026] [:error] [pid 11609:tid 11668] [client 104.46.236.39:9733] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZXMNMhm3UjgaKO2Na9ETwAAApg"]
[Wed Feb 18 22:27:04.074715 2026] [:error] [pid 11607:tid 11620] [client 104.46.236.39:61587] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZXMOBw91ggRx3FA7BcB3QAAAkU"]
[Wed Feb 18 22:27:06.630394 2026] [:error] [pid 11548:tid 11597] [client 104.46.236.39:11119] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZXMOjSFZiBIZZvmIlMoYgAAAhM"]
[Wed Feb 18 22:27:08.079421 2026] [:error] [pid 11610:tid 11675] [client 104.46.236.39:15575] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZXMPLWMUt4MNfN7mx3lOwAAAsQ"]
[Wed Feb 18 22:27:09.001151 2026] [:error] [pid 11610:tid 11685] [client 104.46.236.39:25847] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aZXMPbWMUt4MNfN7mx3lPwAAAs4"]
[Wed Feb 18 22:27:10.763273 2026] [:error] [pid 5561:tid 5571] [client 104.46.236.39:15917] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aZXMPkoQssCZYQ4NexbpFwAAAUc"]
[Wed Feb 18 22:27:12.405763 2026] [:error] [pid 21847:tid 21878] [client 104.46.236.39:14378] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aZXMQPy9A5wy4LuXmJ0wQQAAABQ"]
[Wed Feb 18 22:27:13.056491 2026] [:error] [pid 21848:tid 21908] [client 104.46.236.39:7054] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aZXMQfbG91VRkVidT5dcXwAAAFM"]
[Wed Feb 18 22:27:14.252684 2026] [:error] [pid 11548:tid 11601] [client 104.46.236.39:22015] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZXMQjSFZiBIZZvmIlMobQAAAhc"]
[Wed Feb 18 22:27:14.810567 2026] [:error] [pid 57014:tid 57031] [client 104.46.236.39:14344] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZXMQhNZnhS5qKtVIMJFBAAAAQ4"]
[Wed Feb 18 22:27:15.550303 2026] [:error] [pid 11611:tid 11704] [client 104.46.236.39:21986] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZXMQ-2m6IPN_aBZuKaAxAAAAwY"]
[Wed Feb 18 22:27:16.177460 2026] [:error] [pid 11611:tid 11698] [client 104.46.236.39:14636] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZXMRO2m6IPN_aBZuKaAxQAAAwA"]
[Wed Feb 18 22:27:17.702130 2026] [:error] [pid 57014:tid 57029] [client 104.46.236.39:7046] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aZXMRRNZnhS5qKtVIMJFBQAAAQw"]
[Wed Feb 18 22:27:18.715901 2026] [:error] [pid 57014:tid 57023] [client 104.46.236.39:52470] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aZXMRhNZnhS5qKtVIMJFBwAAAQY"]
[Wed Feb 18 22:27:19.201600 2026] [:error] [pid 11609:tid 11644] [client 104.46.236.39:11068] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aZXMR8hm3UjgaKO2Na9EYQAAAoE"]
[Wed Feb 18 22:27:19.743578 2026] [:error] [pid 11548:tid 11599] [client 104.46.236.39:25798] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aZXMRzSFZiBIZZvmIlMobwAAAhU"]
[Wed Feb 18 22:27:20.714452 2026] [:error] [pid 11512:tid 11533] [client 104.46.236.39:15250] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZXMSBGamu0xQuQ-jbFoagAAAZA"]
[Wed Feb 18 22:27:21.334467 2026] [:error] [pid 21847:tid 21865] [client 104.46.236.39:7042] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZXMSfy9A5wy4LuXmJ0wSAAAAAc"]
[Wed Feb 18 22:27:22.291887 2026] [:error] [pid 11610:tid 11677] [client 104.46.236.39:11029] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZXMSrWMUt4MNfN7mx3lQgAAAsY"]
[Wed Feb 18 22:27:22.713160 2026] [:error] [pid 5561:tid 5583] [client 104.46.236.39:13177] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZXMSkoQssCZYQ4NexbpHwAAAVM"]
[Wed Feb 18 22:27:23.776916 2026] [:error] [pid 11610:tid 11676] [client 104.46.236.39:14393] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZXMS7WMUt4MNfN7mx3lQwAAAsU"]
[Wed Feb 18 22:27:24.291334 2026] [:error] [pid 21847:tid 21881] [client 104.46.236.39:53508] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZXMTPy9A5wy4LuXmJ0wSgAAABc"]
[Wed Feb 18 22:27:24.546060 2026] [:error] [pid 57014:tid 57028] [client 104.46.236.39:14675] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZXMTBNZnhS5qKtVIMJFDAAAAQs"]
[Wed Feb 18 22:27:25.465793 2026] [:error] [pid 11610:tid 11695] [client 104.46.236.39:11061] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZXMTbWMUt4MNfN7mx3lRwAAAtg"]
[Wed Feb 18 22:27:25.720065 2026] [:error] [pid 11610:tid 11687] [client 104.46.236.39:13124] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZXMTbWMUt4MNfN7mx3lSAAAAtA"]
[Wed Feb 18 22:27:26.468356 2026] [:error] [pid 11610:tid 11680] [client 104.46.236.39:15255] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZXMTrWMUt4MNfN7mx3lSQAAAsk"]
[Wed Feb 18 22:27:27.362057 2026] [:error] [pid 21847:tid 21862] [client 104.46.236.39:26376] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZXMT_y9A5wy4LuXmJ0wTQAAAAQ"]
[Wed Feb 18 22:27:27.789493 2026] [:error] [pid 11548:tid 11591] [client 104.46.236.39:9341] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZXMTzSFZiBIZZvmIlMoegAAAg0"]
[Wed Feb 18 22:27:28.604629 2026] [:error] [pid 21847:tid 21864] [client 104.46.236.39:15926] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZXMUPy9A5wy4LuXmJ0wUAAAAAY"]
[Wed Feb 18 22:27:29.110199 2026] [:error] [pid 11610:tid 11678] [client 104.46.236.39:12391] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZXMUbWMUt4MNfN7mx3lSwAAAsc"]
[Wed Feb 18 22:27:29.497866 2026] [:error] [pid 11611:tid 11714] [client 104.46.236.39:15912] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZXMUe2m6IPN_aBZuKaAzAAAAxA"]
[Wed Feb 18 22:27:30.157712 2026] [:error] [pid 21847:tid 21868] [client 104.46.236.39:26384] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZXMUvy9A5wy4LuXmJ0wVAAAAAo"]
[Wed Feb 18 22:27:30.457586 2026] [:error] [pid 11548:tid 11596] [client 104.46.236.39:31850] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZXMUjSFZiBIZZvmIlMoggAAAhI"]
[Wed Feb 18 22:27:31.080765 2026] [:error] [pid 11548:tid 11579] [client 104.46.236.39:15918] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZXMUzSFZiBIZZvmIlMohAAAAgE"]
[Wed Feb 18 22:27:31.379458 2026] [:error] [pid 11548:tid 11601] [client 104.46.236.39:17647] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZXMUzSFZiBIZZvmIlMohQAAAhc"]
[Wed Feb 18 22:27:31.905311 2026] [:error] [pid 57014:tid 57036] [client 104.46.236.39:6856] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZXMUxNZnhS5qKtVIMJFEQAAARM"]
[Wed Feb 18 22:27:32.191344 2026] [:error] [pid 11610:tid 11679] [client 104.46.236.39:9542] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZXMVLWMUt4MNfN7mx3lTwAAAsg"]
[Wed Feb 18 22:27:32.553322 2026] [:error] [pid 57014:tid 57035] [client 104.46.236.39:6894] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZXMVBNZnhS5qKtVIMJFEwAAARI"]
[Wed Feb 18 22:27:33.538219 2026] [:error] [pid 11610:tid 11677] [client 104.46.236.39:15904] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZXMVbWMUt4MNfN7mx3lUwAAAsY"]
[Wed Feb 18 22:27:34.393536 2026] [:error] [pid 21848:tid 21892] [client 104.46.236.39:52423] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZXMVvbG91VRkVidT5dcZwAAAEM"]
[Wed Feb 18 22:27:34.716966 2026] [:error] [pid 57014:tid 57033] [client 104.46.236.39:25823] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aZXMVhNZnhS5qKtVIMJFFgAAARA"]
[Wed Feb 18 22:27:35.440113 2026] [:error] [pid 11610:tid 11682] [client 104.46.236.39:52432] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aZXMV7WMUt4MNfN7mx3lVAAAAss"]
[Wed Feb 18 22:27:36.027772 2026] [:error] [pid 11548:tid 11578] [client 104.46.236.39:33106] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aZXMWDSFZiBIZZvmIlMojAAAAgA"]
[Wed Feb 18 22:27:36.401447 2026] [:error] [pid 57014:tid 57026] [client 104.46.236.39:31810] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aZXMWBNZnhS5qKtVIMJFGQAAAQk"]
[Wed Feb 18 22:27:36.742910 2026] [:error] [pid 5561:tid 5566] [client 104.46.236.39:17634] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZXMWEoQssCZYQ4NexbpIQAAAUI"]
[Wed Feb 18 22:27:37.366225 2026] [:error] [pid 11607:tid 11633] [client 104.46.236.39:31182] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZXMWRw91ggRx3FA7BcB_QAAAlI"]
[Wed Feb 18 22:27:37.775562 2026] [:error] [pid 11611:tid 11720] [client 104.46.236.39:9592] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZXMWe2m6IPN_aBZuKaA1gAAAxY"]
[Wed Feb 18 22:27:38.326072 2026] [:error] [pid 11548:tid 11589] [client 104.46.236.39:14695] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZXMWjSFZiBIZZvmIlMokAAAAgs"]
[Wed Feb 18 22:27:38.884212 2026] [:error] [pid 11548:tid 11580] [client 104.46.236.39:15233] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZXMWjSFZiBIZZvmIlMokgAAAgI"]
[Wed Feb 18 22:27:39.212456 2026] [:error] [pid 11512:tid 11533] [client 104.46.236.39:52458] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZXMWxGamu0xQuQ-jbFocwAAAZA"]
[Wed Feb 18 22:27:39.580651 2026] [:error] [pid 5561:tid 5584] [client 104.46.236.39:13132] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZXMW0oQssCZYQ4NexbpIgAAAVQ"]
[Wed Feb 18 22:27:39.878982 2026] [:error] [pid 11548:tid 11587] [client 104.46.236.39:31208] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZXMWzSFZiBIZZvmIlMokwAAAgk"]
[Wed Feb 18 22:27:40.368216 2026] [:error] [pid 11548:tid 11579] [client 104.46.236.39:9575] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZXMXDSFZiBIZZvmIlMolwAAAgE"]
[Wed Feb 18 22:27:40.626419 2026] [:error] [pid 11548:tid 11595] [client 104.46.236.39:15273] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZXMXDSFZiBIZZvmIlMomgAAAhE"]
[Wed Feb 18 22:27:41.034024 2026] [:error] [pid 11610:tid 11685] [client 104.46.236.39:17651] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZXMXbWMUt4MNfN7mx3lVwAAAs4"]
[Wed Feb 18 22:27:41.575410 2026] [:error] [pid 11610:tid 11683] [client 104.46.236.39:48066] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZXMXbWMUt4MNfN7mx3lWQAAAsw"]
[Wed Feb 18 22:27:41.839052 2026] [:error] [pid 11548:tid 11598] [client 104.46.236.39:51107] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aZXMXTSFZiBIZZvmIlMonAAAAhQ"]
[Wed Feb 18 22:27:42.292374 2026] [:error] [pid 5561:tid 5572] [client 104.46.236.39:48086] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aZXMXkoQssCZYQ4NexbpIwAAAUg"]
[Wed Feb 18 22:27:42.727628 2026] [:error] [pid 5561:tid 5581] [client 104.46.236.39:14719] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aZXMXkoQssCZYQ4NexbpJAAAAVE"]
[Wed Feb 18 22:27:43.191632 2026] [:error] [pid 11610:tid 11679] [client 104.46.236.39:33123] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aZXMX7WMUt4MNfN7mx3lXAAAAsg"]
[Wed Feb 18 22:27:43.840702 2026] [:error] [pid 11512:tid 11535] [client 104.46.236.39:23229] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZXMXxGamu0xQuQ-jbFodwAAAZI"]
[Wed Feb 18 22:27:44.375602 2026] [:error] [pid 11548:tid 11587] [client 104.46.236.39:48108] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZXMYDSFZiBIZZvmIlMonwAAAgk"]
[Wed Feb 18 22:27:45.180817 2026] [:error] [pid 21848:tid 21896] [client 104.46.236.39:23184] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZXMYfbG91VRkVidT5dcdgAAAEc"]
[Wed Feb 18 22:27:45.535453 2026] [:error] [pid 21848:tid 21889] [client 104.46.236.39:30558] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZXMYfbG91VRkVidT5dceAAAAEA"]
[Wed Feb 18 22:27:45.885901 2026] [:error] [pid 21848:tid 21911] [client 104.46.236.39:15249] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aZXMYfbG91VRkVidT5dceQAAAFY"]
[Wed Feb 18 22:27:46.171301 2026] [:error] [pid 21847:tid 21882] [client 104.46.236.39:14786] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aZXMYvy9A5wy4LuXmJ0wZgAAABg"]
[Wed Feb 18 22:27:46.497169 2026] [:error] [pid 21847:tid 21875] [client 104.46.236.39:30554] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aZXMYvy9A5wy4LuXmJ0waAAAABE"]
[Wed Feb 18 22:27:47.015832 2026] [:error] [pid 57014:tid 57040] [client 104.46.236.39:10805] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aZXMYxNZnhS5qKtVIMJFIAAAARc"]
[Wed Feb 18 22:27:47.771625 2026] [:error] [pid 57014:tid 57025] [client 104.46.236.39:23209] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZXMYxNZnhS5qKtVIMJFIwAAAQg"]
[Wed Feb 18 22:27:48.680940 2026] [:error] [pid 11609:tid 11651] [client 104.46.236.39:42795] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZXMZMhm3UjgaKO2Na9EbgAAAog"]
[Wed Feb 18 22:27:56.737183 2026] [autoindex:error] [pid 57014:tid 57025] [client 104.46.236.39:17657] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 22:27:56.861340 2026] [autoindex:error] [pid 57014:tid 57018] [client 104.46.236.39:17657] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 18 22:27:58.913754 2026] [:error] [pid 57014:tid 57039] [client 104.46.236.39:17657] [client 104.46.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZXMbhNZnhS5qKtVIMJFNAAAARY"]
[Wed Feb 18 22:28:04.759109 2026] [:error] [pid 11610:tid 11687] [client 104.46.236.39:42808] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aZXMdLWMUt4MNfN7mx3lfAAAAtA"]
[Wed Feb 18 22:28:05.371534 2026] [:error] [pid 11611:tid 11702] [client 104.46.236.39:23191] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aZXMde2m6IPN_aBZuKaA4wAAAwQ"]
[Wed Feb 18 22:28:07.014890 2026] [:error] [pid 11512:tid 11523] [client 104.46.236.39:51120] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aZXMdxGamu0xQuQ-jbFogAAAAYY"]
[Wed Feb 18 22:28:08.059326 2026] [:error] [pid 11548:tid 11589] [client 104.46.236.39:48074] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aZXMeDSFZiBIZZvmIlMoqgAAAgs"]
[Wed Feb 18 22:28:09.323086 2026] [:error] [pid 11607:tid 11634] [client 104.46.236.39:10015] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aZXMeRw91ggRx3FA7BcCCAAAAlM"]
[Wed Feb 18 22:28:12.184392 2026] [:error] [pid 11609:tid 11663] [client 104.46.236.39:42794] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aZXMfMhm3UjgaKO2Na9EiwAAApM"]
[Wed Feb 18 22:28:12.992968 2026] [:error] [pid 11548:tid 11580] [client 104.46.236.39:14807] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aZXMfDSFZiBIZZvmIlMosAAAAgI"]
[Wed Feb 18 22:28:14.116336 2026] [:error] [pid 11610:tid 11682] [client 104.46.236.39:14777] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aZXMfrWMUt4MNfN7mx3lhAAAAss"]
[Wed Feb 18 22:28:14.454771 2026] [:error] [pid 11607:tid 11623] [client 104.46.236.39:19182] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZXMfhw91ggRx3FA7BcCDwAAAkg"]
[Wed Feb 18 22:28:14.877110 2026] [:error] [pid 21848:tid 21891] [client 104.46.236.39:35723] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZXMfvbG91VRkVidT5dciAAAAEI"]
[Wed Feb 18 22:28:15.540415 2026] [:error] [pid 5561:tid 5579] [client 104.46.236.39:17544] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZXMf0oQssCZYQ4NexbpOAAAAU8"]
[Wed Feb 18 22:28:16.240142 2026] [:error] [pid 11609:tid 11655] [client 104.46.236.39:14754] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZXMgMhm3UjgaKO2Na9EjQAAAow"]
[Wed Feb 18 22:28:16.855278 2026] [:error] [pid 11610:tid 11693] [client 104.46.236.39:51120] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZXMgLWMUt4MNfN7mx3lhwAAAtY"]
[Wed Feb 18 22:28:17.542561 2026] [:error] [pid 11609:tid 11649] [client 104.46.236.39:17759] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZXMgchm3UjgaKO2Na9EkAAAAoY"]
[Wed Feb 18 22:28:18.555209 2026] [:error] [pid 11611:tid 11714] [client 104.46.236.39:19172] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZXMgu2m6IPN_aBZuKaA6QAAAxA"]
[Wed Feb 18 22:28:18.962673 2026] [:error] [pid 5561:tid 5575] [client 104.46.236.39:17937] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZXMgkoQssCZYQ4NexbpPAAAAUs"]
[Wed Feb 18 22:28:19.567014 2026] [:error] [pid 11609:tid 11652] [client 104.46.236.39:50060] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aZXMg8hm3UjgaKO2Na9EkgAAAok"]
[Wed Feb 18 22:28:20.156096 2026] [:error] [pid 57014:tid 57019] [client 104.46.236.39:35749] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aZXMhBNZnhS5qKtVIMJFQAAAAQI"]
[Wed Feb 18 22:28:20.683563 2026] [:error] [pid 5561:tid 5576] [client 104.46.236.39:19178] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aZXMhEoQssCZYQ4NexbpPQAAAUw"]
[Wed Feb 18 22:28:20.985703 2026] [:error] [pid 11611:tid 11712] [client 104.46.236.39:19191] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aZXMhO2m6IPN_aBZuKaA7gAAAw4"]
[Wed Feb 18 22:28:21.312402 2026] [:error] [pid 5561:tid 5588] [client 104.46.236.39:19195] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZXMhUoQssCZYQ4NexbpPgAAAVg"]
[Wed Feb 18 22:28:21.625480 2026] [:error] [pid 57014:tid 57030] [client 104.46.236.39:50054] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZXMhRNZnhS5qKtVIMJFQQAAAQ0"]
[Wed Feb 18 22:28:21.981685 2026] [:error] [pid 11609:tid 11661] [client 104.46.236.39:19143] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZXMhchm3UjgaKO2Na9ElwAAApE"]
[Wed Feb 18 22:28:23.833588 2026] [:error] [pid 11610:tid 11673] [client 104.46.236.39:13662] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZXMh7WMUt4MNfN7mx3liwAAAsI"]
[Wed Feb 18 22:28:24.333566 2026] [:error] [pid 21848:tid 21913] [client 104.46.236.39:50086] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZXMiPbG91VRkVidT5dcjwAAAFg"]
[Wed Feb 18 22:28:24.908030 2026] [:error] [pid 21848:tid 21890] [client 104.46.236.39:43452] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZXMiPbG91VRkVidT5dckAAAAEE"]
[Wed Feb 18 22:28:25.241652 2026] [:error] [pid 11609:tid 11658] [client 104.46.236.39:7126] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZXMichm3UjgaKO2Na9EmwAAAo8"]
[Wed Feb 18 22:28:25.785132 2026] [:error] [pid 21847:tid 21869] [client 104.46.236.39:6400] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZXMify9A5wy4LuXmJ0whAAAAAs"]
[Wed Feb 18 22:28:26.178821 2026] [:error] [pid 11607:tid 11622] [client 104.46.236.39:14752] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aZXMihw91ggRx3FA7BcCGAAAAkc"]
[Wed Feb 18 22:28:26.516752 2026] [:error] [pid 21848:tid 21891] [client 104.46.236.39:38466] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aZXMivbG91VRkVidT5dckwAAAEI"]
[Wed Feb 18 22:28:26.831688 2026] [:error] [pid 21848:tid 21906] [client 104.46.236.39:14775] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aZXMivbG91VRkVidT5dclAAAAFE"]
[Wed Feb 18 22:28:27.275893 2026] [:error] [pid 11610:tid 11672] [client 104.46.236.39:17784] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aZXMi7WMUt4MNfN7mx3lkwAAAsE"]
[Wed Feb 18 22:28:27.979993 2026] [:error] [pid 11548:tid 11580] [client 104.46.236.39:20933] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aZXMizSFZiBIZZvmIlMouQAAAgI"]
[Wed Feb 18 22:28:28.525982 2026] [:error] [pid 11610:tid 11682] [client 104.46.236.39:43447] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aZXMjLWMUt4MNfN7mx3llAAAAss"]
[Wed Feb 18 22:28:28.992919 2026] [:error] [pid 21847:tid 21875] [client 104.46.236.39:19179] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aZXMjPy9A5wy4LuXmJ0whQAAABE"]
[Wed Feb 18 22:28:29.566073 2026] [:error] [pid 11611:tid 11700] [client 104.46.236.39:19176] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aZXMje2m6IPN_aBZuKaA8AAAAwI"]
[Wed Feb 18 22:28:30.313827 2026] [:error] [pid 11611:tid 11706] [client 104.46.236.39:18577] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZXMju2m6IPN_aBZuKaA8QAAAwg"]
[Wed Feb 18 22:28:30.736843 2026] [:error] [pid 21847:tid 21860] [client 104.46.236.39:18570] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZXMjvy9A5wy4LuXmJ0whwAAAAI"]
[Wed Feb 18 22:28:31.154443 2026] [:error] [pid 21847:tid 21872] [client 104.46.236.39:18222] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZXMj_y9A5wy4LuXmJ0wiAAAAA4"]
[Wed Feb 18 22:28:31.771156 2026] [:error] [pid 5561:tid 5574] [client 104.46.236.39:13633] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZXMj0oQssCZYQ4NexbpQgAAAUo"]
[Wed Feb 18 22:28:32.087973 2026] [:error] [pid 5561:tid 5564] [client 104.46.236.39:62462] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZXMkEoQssCZYQ4NexbpRAAAAUA"]
[Wed Feb 18 22:28:32.593849 2026] [:error] [pid 11548:tid 11592] [client 104.46.236.39:18593] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZXMkDSFZiBIZZvmIlMovwAAAg4"]
[Wed Feb 18 22:28:32.997503 2026] [:error] [pid 57014:tid 57025] [client 104.46.236.39:6454] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZXMkBNZnhS5qKtVIMJFRQAAAQg"]
[Wed Feb 18 22:28:33.347679 2026] [:error] [pid 5561:tid 5571] [client 104.46.236.39:14788] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZXMkUoQssCZYQ4NexbpRgAAAUc"]
[Wed Feb 18 22:28:33.807932 2026] [:error] [pid 5561:tid 5565] [client 104.46.236.39:29845] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZXMkUoQssCZYQ4NexbpRwAAAUE"]
[Wed Feb 18 22:28:34.943870 2026] [:error] [pid 11512:tid 11528] [client 104.46.236.39:32469] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZXMkhGamu0xQuQ-jbFokwAAAYs"]
[Wed Feb 18 22:28:35.452636 2026] [:error] [pid 21848:tid 21897] [client 104.46.236.39:6460] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZXMk_bG91VRkVidT5dcogAAAEg"]
[Wed Feb 18 22:28:35.883573 2026] [:error] [pid 11610:tid 11676] [client 104.46.236.39:6289] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZXMk7WMUt4MNfN7mx3lmQAAAsU"]
[Wed Feb 18 22:28:36.231591 2026] [:error] [pid 57014:tid 57024] [client 104.46.236.39:6448] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZXMlBNZnhS5qKtVIMJFSQAAAQc"]
[Wed Feb 18 22:28:37.124102 2026] [:error] [pid 57014:tid 57031] [client 104.46.236.39:6429] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZXMlRNZnhS5qKtVIMJFSwAAAQ4"]
[Wed Feb 18 22:28:37.606842 2026] [:error] [pid 21848:tid 21904] [client 104.46.236.39:62079] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZXMlfbG91VRkVidT5dcpAAAAE8"]
[Wed Feb 18 22:28:38.247718 2026] [:error] [pid 21848:tid 21898] [client 104.46.236.39:6332] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZXMlvbG91VRkVidT5dcpwAAAEk"]
[Wed Feb 18 22:28:38.701196 2026] [:error] [pid 11548:tid 11600] [client 104.46.236.39:32405] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZXMljSFZiBIZZvmIlMoyAAAAhY"]
[Wed Feb 18 22:28:39.487653 2026] [:error] [pid 11609:tid 11644] [client 104.46.236.39:20888] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZXMl8hm3UjgaKO2Na9EoQAAAoE"]
[Wed Feb 18 22:28:40.112182 2026] [:error] [pid 11548:tid 11588] [client 104.46.236.39:7149] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZXMmDSFZiBIZZvmIlMoyQAAAgo"]
[Wed Feb 18 22:28:40.644627 2026] [:error] [pid 11607:tid 11618] [client 104.46.236.39:18219] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZXMmBw91ggRx3FA7BcCKAAAAkM"]
[Wed Feb 18 22:28:40.932150 2026] [:error] [pid 11548:tid 11591] [client 104.46.236.39:11312] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aZXMmDSFZiBIZZvmIlMoygAAAg0"]
[Wed Feb 18 22:28:41.239093 2026] [:error] [pid 11607:tid 11616] [client 104.46.236.39:11313] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aZXMmRw91ggRx3FA7BcCKQAAAkE"]
[Wed Feb 18 22:28:41.761485 2026] [:error] [pid 11610:tid 11690] [client 104.46.236.39:18227] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aZXMmbWMUt4MNfN7mx3loAAAAtM"]
[Wed Feb 18 22:28:42.278055 2026] [:error] [pid 11548:tid 11584] [client 104.46.236.39:46061] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aZXMmjSFZiBIZZvmIlMo0AAAAgY"]
[Wed Feb 18 22:28:42.748966 2026] [:error] [pid 11607:tid 11626] [client 104.46.236.39:32470] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aZXMmhw91ggRx3FA7BcCKwAAAks"]
[Wed Feb 18 22:28:43.158069 2026] [:error] [pid 11610:tid 11687] [client 104.46.236.39:20162] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aZXMm7WMUt4MNfN7mx3loQAAAtA"]
[Wed Feb 18 22:28:43.727027 2026] [:error] [pid 5561:tid 5576] [client 104.46.236.39:11325] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aZXMm0oQssCZYQ4NexbpSQAAAUw"]
[Wed Feb 18 22:28:44.192658 2026] [:error] [pid 11607:tid 11632] [client 104.46.236.39:18460] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aZXMnBw91ggRx3FA7BcCLQAAAlE"]
[Wed Feb 18 22:28:44.588762 2026] [:error] [pid 5561:tid 5582] [client 104.46.236.39:32466] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aZXMnEoQssCZYQ4NexbpTAAAAVI"]
[Wed Feb 18 22:28:45.107124 2026] [:error] [pid 21847:tid 21876] [client 104.46.236.39:6276] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aZXMnfy9A5wy4LuXmJ0wjwAAABI"]
[Wed Feb 18 22:28:45.712683 2026] [:error] [pid 5561:tid 5588] [client 104.46.236.39:6416] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aZXMnUoQssCZYQ4NexbpTQAAAVg"]
[Wed Feb 18 22:28:46.086491 2026] [:error] [pid 11609:tid 11657] [client 104.46.236.39:6275] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aZXMnshm3UjgaKO2Na9EqAAAAo4"]
[Wed Feb 18 22:28:46.524949 2026] [:error] [pid 11607:tid 11621] [client 104.46.236.39:32510] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZXMnhw91ggRx3FA7BcCLwAAAkY"]
[Wed Feb 18 22:28:47.059220 2026] [:error] [pid 5561:tid 5569] [client 104.46.236.39:51178] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZXMn0oQssCZYQ4NexbpTgAAAUU"]
[Wed Feb 18 22:28:47.419361 2026] [:error] [pid 11609:tid 11648] [client 104.46.236.39:42240] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZXMn8hm3UjgaKO2Na9EqwAAAoU"]
[Wed Feb 18 22:28:48.396461 2026] [:error] [pid 11610:tid 11677] [client 104.46.236.39:20178] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZXMoLWMUt4MNfN7mx3lpAAAAsY"]
[Wed Feb 18 22:28:49.245595 2026] [:error] [pid 11548:tid 11582] [client 104.46.236.39:20890] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aZXMoTSFZiBIZZvmIlMo4AAAAgQ"]
[Wed Feb 18 22:28:49.745788 2026] [:error] [pid 11548:tid 11580] [client 104.46.236.39:10336] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aZXMoTSFZiBIZZvmIlMo4gAAAgI"]
[Wed Feb 18 22:28:50.445790 2026] [:error] [pid 11548:tid 11583] [client 104.46.236.39:45042] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aZXMojSFZiBIZZvmIlMo4wAAAgU"]
[Wed Feb 18 22:28:51.002521 2026] [:error] [pid 21848:tid 21899] [client 104.46.236.39:42254] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aZXMo_bG91VRkVidT5dcqgAAAEo"]
[Wed Feb 18 22:28:51.404416 2026] [:error] [pid 21848:tid 21901] [client 104.46.236.39:23810] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aZXMo_bG91VRkVidT5dcqwAAAEw"]
[Wed Feb 18 22:28:52.100545 2026] [:error] [pid 11610:tid 11692] [client 104.46.236.39:15946] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aZXMpLWMUt4MNfN7mx3lqgAAAtU"]
[Wed Feb 18 22:28:52.648788 2026] [:error] [pid 11548:tid 11601] [client 104.46.236.39:17300] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aZXMpDSFZiBIZZvmIlMo6QAAAhc"]
[Wed Feb 18 22:28:53.038695 2026] [:error] [pid 21848:tid 21904] [client 104.46.236.39:32504] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aZXMpfbG91VRkVidT5dcrQAAAE8"]
[Wed Feb 18 22:28:53.742625 2026] [:error] [pid 11548:tid 11600] [client 104.46.236.39:10858] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aZXMpTSFZiBIZZvmIlMo6wAAAhY"]
[Wed Feb 18 22:28:54.172306 2026] [:error] [pid 11610:tid 11694] [client 104.46.236.39:49184] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aZXMprWMUt4MNfN7mx3lsgAAAtc"]
[Wed Feb 18 22:28:55.165365 2026] [:error] [pid 11548:tid 11594] [client 104.46.236.39:16866] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aZXMpzSFZiBIZZvmIlMo7gAAAhA"]
[Wed Feb 18 22:28:55.695130 2026] [:error] [pid 11611:tid 11702] [client 104.46.236.39:25768] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aZXMp-2m6IPN_aBZuKaA9wAAAwQ"]
[Wed Feb 18 22:28:56.199832 2026] [:error] [pid 11611:tid 11710] [client 104.46.236.39:10822] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aZXMqO2m6IPN_aBZuKaA-AAAAww"]
[Wed Feb 18 22:28:57.054709 2026] [:error] [pid 11512:tid 11534] [client 104.46.236.39:37122] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aZXMqRGamu0xQuQ-jbFonQAAAZE"]
[Wed Feb 18 22:28:57.885787 2026] [:error] [pid 57014:tid 57029] [client 104.46.236.39:46659] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aZXMqRNZnhS5qKtVIMJFUQAAAQw"]
[Wed Feb 18 22:28:58.226171 2026] [:error] [pid 21848:tid 21898] [client 104.46.236.39:46683] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aZXMqvbG91VRkVidT5dcsAAAAEk"]
[Wed Feb 18 22:28:58.546852 2026] [:error] [pid 57014:tid 57035] [client 104.46.236.39:37166] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aZXMqhNZnhS5qKtVIMJFUwAAARI"]
[Wed Feb 18 22:28:58.816447 2026] [:error] [pid 11512:tid 11522] [client 104.46.236.39:14178] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aZXMqhGamu0xQuQ-jbFooAAAAYU"]
[Wed Feb 18 22:28:59.238067 2026] [:error] [pid 11607:tid 11623] [client 104.46.236.39:46695] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aZXMqxw91ggRx3FA7BcCOwAAAkg"]
[Wed Feb 18 22:29:00.013005 2026] [:error] [pid 11548:tid 11587] [client 104.46.236.39:17131] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aZXMrDSFZiBIZZvmIlMo7wAAAgk"]
[Wed Feb 18 22:29:00.596090 2026] [:error] [pid 11548:tid 11582] [client 104.46.236.39:14167] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZXMrDSFZiBIZZvmIlMo8AAAAgQ"]
[Wed Feb 18 22:29:01.496687 2026] [:error] [pid 5561:tid 5587] [client 104.46.236.39:14181] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZXMrUoQssCZYQ4NexbpWgAAAVc"]
[Wed Feb 18 22:29:02.128773 2026] [:error] [pid 21848:tid 21910] [client 104.46.236.39:13368] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZXMrvbG91VRkVidT5dctAAAAFU"]
[Wed Feb 18 22:29:02.442051 2026] [:error] [pid 21847:tid 21862] [client 104.46.236.39:14421] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZXMrvy9A5wy4LuXmJ0wkQAAAAQ"]
[Wed Feb 18 22:29:02.803358 2026] [:error] [pid 11609:tid 11650] [client 104.46.236.39:42353] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admins.php"] [unique_id "aZXMrshm3UjgaKO2Na9EtAAAAoc"]
[Wed Feb 18 22:29:10.503632 2026] [:error] [pid 11512:tid 11522] [client 104.46.236.39:44093] [client 104.46.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aZXMthGamu0xQuQ-jbForAAAAYU"]
[Thu Feb 19 02:13:00.692024 2026] [:error] [pid 11607:tid 11635] [client 145.239.65.236:37284] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZYBLBw91ggRx3FA7BcwCQAAAlQ"]
[Thu Feb 19 02:13:02.997686 2026] [:error] [pid 21848:tid 21893] [client 145.239.65.236:33436] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZYBLvbG91VRkVidT5ePlAAAAEQ"]
[Thu Feb 19 02:13:05.384183 2026] [:error] [pid 57014:tid 57030] [client 145.239.65.236:33448] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZYBMRNZnhS5qKtVIMJkvAAAAQ0"]
[Thu Feb 19 02:13:07.938562 2026] [:error] [pid 11607:tid 11621] [client 145.239.65.236:33452] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZYBMxw91ggRx3FA7BcwEwAAAkY"]
[Thu Feb 19 02:13:10.306274 2026] [:error] [pid 11610:tid 11683] [client 145.239.65.236:35818] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZYBNrWMUt4MNfN7mx0OSAAAAsw"]
[Thu Feb 19 02:13:12.814544 2026] [:error] [pid 21848:tid 21901] [client 145.239.65.236:35832] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZYBOPbG91VRkVidT5ePoAAAAEw"]
[Thu Feb 19 02:13:15.348920 2026] [:error] [pid 5561:tid 5567] [client 145.239.65.236:35846] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZYBO0oQssCZYQ4NexYPYAAAAUM"]
[Thu Feb 19 02:13:17.728659 2026] [:error] [pid 21848:tid 21913] [client 145.239.65.236:35848] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZYBPfbG91VRkVidT5ePpAAAAFg"]
[Thu Feb 19 02:13:20.271749 2026] [:error] [pid 21847:tid 21874] [client 145.239.65.236:57188] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZYBQPy9A5wy4LuXmJ1SbAAAABA"]
[Thu Feb 19 02:13:22.658004 2026] [:error] [pid 11548:tid 11598] [client 145.239.65.236:57190] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZYBQjSFZiBIZZvmIlNn8AAAAhQ"]
[Thu Feb 19 02:13:25.161588 2026] [:error] [pid 57014:tid 57034] [client 145.239.65.236:57204] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZYBRRNZnhS5qKtVIMJkxwAAARE"]
[Thu Feb 19 02:13:27.676643 2026] [:error] [pid 11607:tid 11636] [client 145.239.65.236:57212] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZYBRxw91ggRx3FA7BcwLQAAAlU"]
[Thu Feb 19 02:13:30.195631 2026] [:error] [pid 11609:tid 11665] [client 145.239.65.236:43240] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZYBSshm3UjgaKO2Na9kWgAAApU"]
[Thu Feb 19 02:13:32.693271 2026] [:error] [pid 21848:tid 21890] [client 145.239.65.236:43252] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZYBTPbG91VRkVidT5ePrAAAAEE"]
[Thu Feb 19 02:13:35.051346 2026] [:error] [pid 11610:tid 11681] [client 145.239.65.236:43258] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aZYBT7WMUt4MNfN7mx0OWAAAAso"]
[Thu Feb 19 02:13:37.585188 2026] [:error] [pid 11548:tid 11599] [client 145.239.65.236:43264] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZYBUTSFZiBIZZvmIlNn_gAAAhU"]
[Thu Feb 19 02:13:40.086318 2026] [:error] [pid 21848:tid 21895] [client 145.239.65.236:50444] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZYBVPbG91VRkVidT5ePtAAAAEY"]
[Thu Feb 19 02:13:42.606003 2026] [:error] [pid 11548:tid 11581] [client 145.239.65.236:50450] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZYBVjSFZiBIZZvmIlNoDAAAAgM"]
[Thu Feb 19 02:13:45.114369 2026] [:error] [pid 11548:tid 11579] [client 145.239.65.236:50454] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aZYBWTSFZiBIZZvmIlNoDwAAAgE"]
[Thu Feb 19 02:13:47.620087 2026] [:error] [pid 21848:tid 21889] [client 145.239.65.236:50464] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aZYBW_bG91VRkVidT5ePugAAAEA"]
[Thu Feb 19 02:13:50.138943 2026] [:error] [pid 11548:tid 11586] [client 145.239.65.236:54286] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZYBXjSFZiBIZZvmIlNoFgAAAgg"]
[Thu Feb 19 02:13:52.646874 2026] [:error] [pid 21847:tid 21872] [client 145.239.65.236:54300] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZYBYPy9A5wy4LuXmJ1ShAAAAA4"]
[Thu Feb 19 02:13:55.033645 2026] [:error] [pid 21848:tid 21894] [client 145.239.65.236:54308] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aZYBY_bG91VRkVidT5ePvQAAAEU"]
[Thu Feb 19 02:13:57.555227 2026] [:error] [pid 11610:tid 11683] [client 145.239.65.236:54318] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aZYBZbWMUt4MNfN7mx0OZwAAAsw"]
[Thu Feb 19 02:14:28.163121 2026] [:error] [pid 11607:tid 11626] [client 145.239.65.236:58416] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZYBhBw91ggRx3FA7BcwZgAAAks"]
[Thu Feb 19 02:14:30.611233 2026] [:error] [pid 11548:tid 11590] [client 145.239.65.236:57150] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZYBhjSFZiBIZZvmIlNoUgAAAgw"]
[Thu Feb 19 02:14:33.105811 2026] [:error] [pid 11512:tid 11521] [client 145.239.65.236:57162] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZYBiRGamu0xQuQ-jbGHygAAAYQ"]
[Thu Feb 19 02:14:35.596656 2026] [:error] [pid 21848:tid 21893] [client 145.239.65.236:57170] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZYBi_bG91VRkVidT5eP5wAAAEQ"]
[Thu Feb 19 02:14:37.939706 2026] [:error] [pid 11610:tid 11681] [client 145.239.65.236:57178] [client 145.239.65.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZYBjbWMUt4MNfN7mx0OiwAAAso"]
[Thu Feb 19 02:15:44.411482 2026] [:error] [pid 11548:tid 11581] [client 103.65.236.149:58793] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aZYB0DSFZiBIZZvmIlNovwAAAgM"]
[Thu Feb 19 02:15:45.642619 2026] [:error] [pid 11607:tid 11620] [client 103.65.236.149:58824] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aZYB0Rw91ggRx3FA7Bcw3gAAAkU"]
[Thu Feb 19 03:35:49.435341 2026] [:error] [pid 11548:tid 11578] [client 147.135.214.103:48676] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZYUlTSFZiBIZZvmIlN99gAAAgA"]
[Thu Feb 19 04:41:51.579863 2026] [:error] [pid 48901:tid 48930] [client 20.219.0.75:49585] [client 20.219.0.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.219.0.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZYkD8ixYz-lHbN0WBKwQQAAABQ"]
[Thu Feb 19 04:42:00.125807 2026] [:error] [pid 48901:tid 48921] [client 20.219.0.75:49585] [client 20.219.0.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aZYkGMixYz-lHbN0WBKwjwAAAAs"]
[Thu Feb 19 04:42:00.772222 2026] [:error] [pid 15513:tid 15526] [client 20.219.0.75:55448] [client 20.219.0.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aZYkGMGTRTE022JWg1-C-wAAAQs"]
[Thu Feb 19 04:42:03.209272 2026] [:error] [pid 49002:tid 49027] [client 20.219.0.75:56763] [client 20.219.0.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aZYkG1fcBtQ6hSJuEQlwbgAAAM0"]
[Thu Feb 19 04:42:03.948779 2026] [:error] [pid 49002:tid 49034] [client 20.219.0.75:58029] [client 20.219.0.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aZYkG1fcBtQ6hSJuEQlwbwAAANQ"]
[Thu Feb 19 06:05:42.463128 2026] [:error] [pid 24048:tid 24055] [client 51.77.43.72:36684] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aZY3tmug6wHHqU0QyDbO4gAAAUU"]
[Thu Feb 19 06:05:42.494827 2026] [:error] [pid 24048:tid 24064] [client 51.77.43.72:36680] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aZY3tmug6wHHqU0QyDbO4wAAAU4"]
[Thu Feb 19 06:05:44.865667 2026] [:error] [pid 15513:tid 15530] [client 51.77.43.72:35374] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aZY3uMGTRTE022JWg1-hrAAAAQ8"]
[Thu Feb 19 06:05:45.320058 2026] [:error] [pid 24048:tid 24060] [client 51.77.43.72:39950] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aZY3uWug6wHHqU0QyDbO7gAAAUo"]
[Thu Feb 19 06:05:47.423736 2026] [:error] [pid 15513:tid 15528] [client 51.77.43.72:39954] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aZY3u8GTRTE022JWg1-htwAAAQ0"]
[Thu Feb 19 06:05:48.010447 2026] [:error] [pid 48901:tid 48927] [client 51.77.43.72:39968] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aZY3vMixYz-lHbN0WBLHDAAAABE"]
[Thu Feb 19 06:05:50.015858 2026] [:error] [pid 48901:tid 48915] [client 51.77.43.72:39974] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZY3vsixYz-lHbN0WBLHDQAAAAU"]
[Thu Feb 19 06:05:50.559909 2026] [:error] [pid 24048:tid 24073] [client 51.77.43.72:39976] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZY3vmug6wHHqU0QyDbO_wAAAVc"]
[Thu Feb 19 06:05:52.584056 2026] [:error] [pid 48901:tid 48929] [client 51.77.43.72:39982] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aZY3wMixYz-lHbN0WBLHFQAAABM"]
[Thu Feb 19 06:05:53.148434 2026] [:error] [pid 48903:tid 48979] [client 51.77.43.72:39990] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aZY3wY6aTgKrpAR115sK7gAAAI4"]
[Thu Feb 19 06:05:55.366807 2026] [:error] [pid 15513:tid 15528] [client 51.77.43.72:46632] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZY3w8GTRTE022JWg1-hygAAAQ0"]
[Thu Feb 19 06:05:55.904309 2026] [:error] [pid 48902:tid 48950] [client 51.77.43.72:46648] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZY3w2cJ-6aYRpRRFsVJvgAAAEw"]
[Thu Feb 19 06:05:57.792205 2026] [:error] [pid 48903:tid 48986] [client 51.77.43.72:46658] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZY3xY6aTgKrpAR115sK8gAAAJU"]
[Thu Feb 19 06:05:58.517231 2026] [:error] [pid 15513:tid 15517] [client 51.77.43.72:46674] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZY3xsGTRTE022JWg1-h1QAAAQI"]
[Thu Feb 19 06:06:00.271035 2026] [:error] [pid 24048:tid 24064] [client 51.77.43.72:46682] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZY3yGug6wHHqU0QyDbPHAAAAU4"]
[Thu Feb 19 06:06:01.137477 2026] [:error] [pid 15513:tid 15523] [client 51.77.43.72:46684] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZY3ycGTRTE022JWg1-h3wAAAQg"]
[Thu Feb 19 06:06:02.843610 2026] [:error] [pid 15513:tid 15527] [client 51.77.43.72:46698] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZY3ysGTRTE022JWg1-h4QAAAQw"]
[Thu Feb 19 06:06:03.712817 2026] [:error] [pid 48903:tid 48973] [client 51.77.43.72:46700] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZY3y46aTgKrpAR115sLAQAAAIg"]
[Thu Feb 19 06:06:05.487699 2026] [:error] [pid 24048:tid 24068] [client 51.77.43.72:53390] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZY3zWug6wHHqU0QyDbPKgAAAVI"]
[Thu Feb 19 06:06:06.146153 2026] [:error] [pid 24048:tid 24053] [client 51.77.43.72:53400] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZY3zmug6wHHqU0QyDbPLgAAAUM"]
[Thu Feb 19 06:06:07.911026 2026] [:error] [pid 15513:tid 15519] [client 51.77.43.72:53408] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZY3z8GTRTE022JWg1-h7AAAAQQ"]
[Thu Feb 19 06:06:08.475182 2026] [:error] [pid 15513:tid 15529] [client 51.77.43.72:53412] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZY30MGTRTE022JWg1-h7QAAAQ4"]
[Thu Feb 19 06:06:10.449639 2026] [:error] [pid 24048:tid 24056] [client 51.77.43.72:53416] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZY30mug6wHHqU0QyDbPPQAAAUY"]
[Thu Feb 19 06:06:10.805240 2026] [:error] [pid 48902:tid 48944] [client 51.77.43.72:53418] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZY30mcJ-6aYRpRRFsVJzQAAAEY"]
[Thu Feb 19 06:06:12.948724 2026] [:error] [pid 24048:tid 24067] [client 51.77.43.72:53420] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZY31Gug6wHHqU0QyDbPSwAAAVE"]
[Thu Feb 19 06:06:13.363363 2026] [:error] [pid 48902:tid 48941] [client 51.77.43.72:53430] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZY31WcJ-6aYRpRRFsVJzwAAAEM"]
[Thu Feb 19 06:06:15.565850 2026] [:error] [pid 48903:tid 48968] [client 51.77.43.72:40746] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZY3146aTgKrpAR115sLDAAAAIM"]
[Thu Feb 19 06:06:16.053032 2026] [:error] [pid 48902:tid 48948] [client 51.77.43.72:40758] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZY32GcJ-6aYRpRRFsVJ1AAAAEo"]
[Thu Feb 19 06:06:18.169621 2026] [:error] [pid 48903:tid 48987] [client 51.77.43.72:40764] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZY32o6aTgKrpAR115sLDQAAAJY"]
[Thu Feb 19 06:06:18.540900 2026] [:error] [pid 48903:tid 48972] [client 51.77.43.72:40770] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZY32o6aTgKrpAR115sLDwAAAIc"]
[Thu Feb 19 06:06:20.734502 2026] [:error] [pid 24048:tid 24050] [client 51.77.43.72:40782] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZY33Gug6wHHqU0QyDbPZwAAAUA"]
[Thu Feb 19 06:06:21.117932 2026] [:error] [pid 49002:tid 49032] [client 51.77.43.72:40788] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZY33VfcBtQ6hSJuEQmNAAAAANI"]
[Thu Feb 19 06:06:23.255725 2026] [:error] [pid 24048:tid 24068] [client 51.77.43.72:40804] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZY332ug6wHHqU0QyDbPaQAAAVI"]
[Thu Feb 19 06:06:23.674145 2026] [:error] [pid 48901:tid 48920] [client 51.77.43.72:40814] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZY338ixYz-lHbN0WBLHNwAAAAo"]
[Thu Feb 19 06:06:25.891302 2026] [:error] [pid 15513:tid 15516] [client 51.77.43.72:50576] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZY34cGTRTE022JWg1-h-gAAAQE"]
[Thu Feb 19 06:06:26.307622 2026] [:error] [pid 48902:tid 48944] [client 51.77.43.72:50582] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZY34mcJ-6aYRpRRFsVJ5gAAAEY"]
[Thu Feb 19 06:06:28.486444 2026] [:error] [pid 24048:tid 24071] [client 51.77.43.72:50598] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZY35Gug6wHHqU0QyDbPbwAAAVU"]
[Thu Feb 19 06:06:28.796628 2026] [:error] [pid 24048:tid 24060] [client 51.77.43.72:50608] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZY35Gug6wHHqU0QyDbPcQAAAUo"]
[Thu Feb 19 06:06:31.003736 2026] [:error] [pid 15513:tid 15516] [client 51.77.43.72:50610] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZY358GTRTE022JWg1-iCQAAAQE"]
[Thu Feb 19 06:06:31.408932 2026] [:error] [pid 48901:tid 48928] [client 51.77.43.72:50618] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZY358ixYz-lHbN0WBLHOwAAABI"]
[Thu Feb 19 06:06:33.314582 2026] [:error] [pid 48901:tid 48918] [client 51.77.43.72:50628] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZY36cixYz-lHbN0WBLHPgAAAAg"]
[Thu Feb 19 06:06:33.856321 2026] [:error] [pid 48903:tid 48985] [client 51.77.43.72:50644] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZY36Y6aTgKrpAR115sLIgAAAJQ"]
[Thu Feb 19 06:06:35.733352 2026] [:error] [pid 48901:tid 48922] [client 51.77.43.72:55336] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZY368ixYz-lHbN0WBLHQwAAAAw"]
[Thu Feb 19 06:06:36.523085 2026] [:error] [pid 48903:tid 48978] [client 51.77.43.72:55346] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZY37I6aTgKrpAR115sLJQAAAI0"]
[Thu Feb 19 06:06:38.414979 2026] [:error] [pid 49002:tid 49036] [client 51.77.43.72:55360] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZY37lfcBtQ6hSJuEQmNHgAAANY"]
[Thu Feb 19 06:06:53.815076 2026] [:error] [pid 24048:tid 24064] [client 51.77.43.72:52744] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aZY3_Wug6wHHqU0QyDbPngAAAU4"]
[Thu Feb 19 06:06:55.040452 2026] [:error] [pid 49002:tid 49035] [client 51.77.43.72:52750] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aZY3_1fcBtQ6hSJuEQmNPQAAANU"]
[Thu Feb 19 06:06:56.376121 2026] [:error] [pid 48902:tid 48948] [client 51.77.43.72:57916] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZY4AGcJ-6aYRpRRFsVKDgAAAEo"]
[Thu Feb 19 06:06:57.584625 2026] [:error] [pid 48902:tid 48951] [client 51.77.43.72:57930] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aZY4AWcJ-6aYRpRRFsVKEgAAAE0"]
[Thu Feb 19 06:06:58.779490 2026] [:error] [pid 48903:tid 48984] [client 51.77.43.72:57934] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aZY4Ao6aTgKrpAR115sLSQAAAJM"]
[Thu Feb 19 06:07:00.114008 2026] [:error] [pid 49002:tid 49034] [client 51.77.43.72:57944] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aZY4BFfcBtQ6hSJuEQmNRgAAANQ"]
[Thu Feb 19 06:07:01.291814 2026] [:error] [pid 24048:tid 24060] [client 51.77.43.72:57946] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aZY4BWug6wHHqU0QyDbPpwAAAUo"]
[Thu Feb 19 06:07:02.647964 2026] [:error] [pid 24048:tid 24068] [client 51.77.43.72:57960] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aZY4Bmug6wHHqU0QyDbPrgAAAVI"]
[Thu Feb 19 06:07:03.756158 2026] [:error] [pid 48903:tid 48967] [client 51.77.43.72:57968] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aZY4B46aTgKrpAR115sLUAAAAII"]
[Thu Feb 19 06:07:04.962629 2026] [:error] [pid 48903:tid 48966] [client 51.77.43.72:38910] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aZY4CI6aTgKrpAR115sLUgAAAIE"]
[Thu Feb 19 06:07:06.162566 2026] [:error] [pid 48903:tid 48983] [client 51.77.43.72:38918] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aZY4Co6aTgKrpAR115sLVAAAAJI"]
[Thu Feb 19 06:07:07.485752 2026] [:error] [pid 48903:tid 48979] [client 51.77.43.72:38930] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aZY4C46aTgKrpAR115sLXAAAAI4"]
[Thu Feb 19 06:07:08.615159 2026] [:error] [pid 24048:tid 24065] [client 51.77.43.72:38934] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aZY4DGug6wHHqU0QyDbPuQAAAU8"]
[Thu Feb 19 06:07:09.800775 2026] [:error] [pid 15513:tid 15519] [client 51.77.43.72:38940] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aZY4DcGTRTE022JWg1-iPQAAAQQ"]
[Thu Feb 19 06:07:11.283993 2026] [:error] [pid 48903:tid 48974] [client 51.77.43.72:38952] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZY4D46aTgKrpAR115sLaQAAAIk"]
[Thu Feb 19 06:07:12.353462 2026] [:error] [pid 49002:tid 49019] [client 51.77.43.72:38966] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aZY4EFfcBtQ6hSJuEQmNWwAAAMU"]
[Thu Feb 19 06:07:14.021612 2026] [:error] [pid 49002:tid 49027] [client 51.77.43.72:38976] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aZY4ElfcBtQ6hSJuEQmNagAAAM0"]
[Thu Feb 19 06:07:14.834472 2026] [:error] [pid 24048:tid 24062] [client 51.77.43.72:38980] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aZY4Emug6wHHqU0QyDbPxQAAAUw"]
[Thu Feb 19 06:07:16.677829 2026] [:error] [pid 48902:tid 48957] [client 51.77.43.72:56452] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZY4FGcJ-6aYRpRRFsVKPwAAAFM"]
[Thu Feb 19 06:07:17.319727 2026] [:error] [pid 48901:tid 48914] [client 51.77.43.72:56460] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZY4FcixYz-lHbN0WBLH3gAAAAQ"]
[Thu Feb 19 06:07:19.215017 2026] [:error] [pid 24048:tid 24055] [client 51.77.43.72:56466] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZY4F2ug6wHHqU0QyDbP4QAAAUU"]
[Thu Feb 19 06:07:19.843256 2026] [:error] [pid 48901:tid 48913] [client 51.77.43.72:56482] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZY4F8ixYz-lHbN0WBLH4QAAAAM"]
[Thu Feb 19 06:07:21.764347 2026] [:error] [pid 15513:tid 15521] [client 51.77.43.72:56484] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZY4GcGTRTE022JWg1-iZAAAAQY"]
[Thu Feb 19 06:07:22.350777 2026] [:error] [pid 15513:tid 15519] [client 51.77.43.72:56488] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZY4GsGTRTE022JWg1-iZgAAAQQ"]
[Thu Feb 19 06:07:24.337970 2026] [:error] [pid 49002:tid 49020] [client 51.77.43.72:56498] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZY4HFfcBtQ6hSJuEQmN3gAAAMY"]
[Thu Feb 19 06:07:24.718343 2026] [:error] [pid 24048:tid 24067] [client 51.77.43.72:56512] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZY4HGug6wHHqU0QyDbP8wAAAVE"]
[Thu Feb 19 06:07:26.913966 2026] [:error] [pid 48902:tid 48941] [client 51.77.43.72:37646] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZY4HmcJ-6aYRpRRFsVKaQAAAEM"]
[Thu Feb 19 06:07:27.129328 2026] [:error] [pid 48901:tid 48910] [client 51.77.43.72:37654] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZY4H8ixYz-lHbN0WBLH8QAAAAA"]
[Thu Feb 19 06:07:29.443782 2026] [:error] [pid 48902:tid 48950] [client 51.77.43.72:37660] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZY4IWcJ-6aYRpRRFsVKbgAAAEw"]
[Thu Feb 19 06:07:29.665073 2026] [:error] [pid 15513:tid 15521] [client 51.77.43.72:37664] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZY4IcGTRTE022JWg1-icwAAAQY"]
[Thu Feb 19 06:07:31.944527 2026] [:error] [pid 48901:tid 48934] [client 51.77.43.72:37680] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZY4I8ixYz-lHbN0WBLH9AAAABg"]
[Thu Feb 19 06:07:32.152054 2026] [:error] [pid 49002:tid 49019] [client 51.77.43.72:37688] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZY4JFfcBtQ6hSJuEQmN_QAAAMU"]
[Thu Feb 19 06:07:34.693590 2026] [:error] [pid 48901:tid 48925] [client 51.77.43.72:37702] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZY4JsixYz-lHbN0WBLH9wAAAA8"]
[Thu Feb 19 06:07:34.759154 2026] [:error] [pid 15513:tid 15525] [client 51.77.43.72:37708] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZY4JsGTRTE022JWg1-igAAAAQo"]
[Thu Feb 19 06:07:37.292906 2026] [:error] [pid 48903:tid 48986] [client 51.77.43.72:59492] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZY4KY6aTgKrpAR115sLoQAAAJU"]
[Thu Feb 19 06:07:39.768434 2026] [:error] [pid 48903:tid 48986] [client 51.77.43.72:59496] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZY4K46aTgKrpAR115sLrQAAAJU"]
[Thu Feb 19 06:07:42.357612 2026] [:error] [pid 49002:tid 49032] [client 51.77.43.72:59500] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZY4LlfcBtQ6hSJuEQmOWgAAANI"]
[Thu Feb 19 06:07:44.953138 2026] [:error] [pid 15513:tid 15538] [client 51.77.43.72:44362] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZY4MMGTRTE022JWg1-ijwAAARc"]
[Thu Feb 19 06:07:45.907536 2026] [:error] [pid 48901:tid 48929] [client 51.77.43.72:44370] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZY4McixYz-lHbN0WBLICAAAABM"]
[Thu Feb 19 06:07:47.524905 2026] [:error] [pid 15513:tid 15530] [client 51.77.43.72:44386] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZY4M8GTRTE022JWg1-ilgAAAQ8"]
[Thu Feb 19 06:07:48.420081 2026] [:error] [pid 15513:tid 15522] [client 51.77.43.72:44390] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZY4NMGTRTE022JWg1-imAAAAQc"]
[Thu Feb 19 06:07:50.009442 2026] [:error] [pid 49002:tid 49017] [client 51.77.43.72:44404] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZY4NlfcBtQ6hSJuEQmOZQAAAMM"]
[Thu Feb 19 06:07:50.840058 2026] [:error] [pid 49002:tid 49015] [client 51.77.43.72:44416] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZY4NlfcBtQ6hSJuEQmOagAAAME"]
[Thu Feb 19 06:08:07.780091 2026] [:error] [pid 48903:tid 48982] [client 51.77.43.72:60284] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZY4R46aTgKrpAR115sL1wAAAJE"]
[Thu Feb 19 06:08:09.488757 2026] [:error] [pid 48902:tid 48952] [client 51.77.43.72:44430] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZY4SWcJ-6aYRpRRFsVK4gAAAE4"]
[Thu Feb 19 06:08:09.896986 2026] [:error] [pid 48902:tid 48958] [client 51.77.43.72:44440] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZY4SWcJ-6aYRpRRFsVK5AAAAFQ"]
[Thu Feb 19 06:08:12.038414 2026] [:error] [pid 48903:tid 48978] [client 51.77.43.72:60300] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZY4TI6aTgKrpAR115sL4gAAAI0"]
[Thu Feb 19 06:08:12.405640 2026] [:error] [pid 24048:tid 24050] [client 51.77.43.72:60302] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZY4TGug6wHHqU0QyDbQUgAAAUA"]
[Thu Feb 19 06:08:15.013320 2026] [:error] [pid 15513:tid 15538] [client 51.77.43.72:45604] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZY4T8GTRTE022JWg1-iyAAAARc"]
[Thu Feb 19 06:08:17.501949 2026] [:error] [pid 48901:tid 48930] [client 51.77.43.72:45620] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZY4UcixYz-lHbN0WBLIQgAAABQ"]
[Thu Feb 19 06:08:53.413808 2026] [:error] [pid 49002:tid 49014] [client 51.77.43.72:33004] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZY4dVfcBtQ6hSJuEQmO1AAAAMA"]
[Thu Feb 19 06:08:57.944797 2026] [:error] [pid 48902:tid 48948] [client 51.77.43.72:33220] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZY4eWcJ-6aYRpRRFsVLMAAAAEo"]
[Thu Feb 19 06:08:58.370939 2026] [:error] [pid 48902:tid 48959] [client 51.77.43.72:33230] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZY4emcJ-6aYRpRRFsVLMwAAAFU"]
[Thu Feb 19 06:09:02.669053 2026] [:error] [pid 15513:tid 15526] [client 51.77.43.72:33232] [client 51.77.43.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZY4fsGTRTE022JWg1-jRQAAAQs"]
[Thu Feb 19 06:49:40.369694 2026] [:error] [pid 48903:tid 48987] [client 20.89.40.149:7234] [client 20.89.40.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.89.40.149, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZZCBI6aTgKrpAR115saGgAAAJY"]
[Thu Feb 19 06:49:48.735689 2026] [:error] [pid 48903:tid 48967] [client 20.89.40.149:7234] [client 20.89.40.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conten/upload/"] [unique_id "aZZCDI6aTgKrpAR115saJAAAAII"]
[Thu Feb 19 06:49:49.258450 2026] [:error] [pid 24048:tid 24060] [client 20.89.40.149:4695] [client 20.89.40.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conten/upload/"] [unique_id "aZZCDWug6wHHqU0QyDbkTAAAAUo"]
[Thu Feb 19 06:49:49.788641 2026] [:error] [pid 49002:tid 49018] [client 20.89.40.149:4807] [client 20.89.40.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conten/upload/"] [unique_id "aZZCDVfcBtQ6hSJuEQmdHwAAAMQ"]
[Thu Feb 19 06:49:50.253629 2026] [:error] [pid 24048:tid 24066] [client 20.89.40.149:4484] [client 20.89.40.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conten/upload/"] [unique_id "aZZCDmug6wHHqU0QyDbkUQAAAVA"]
[Thu Feb 19 06:51:13.505374 2026] [:error] [pid 48902:tid 48948] [client 153.92.208.93:37778] [client 153.92.208.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aZZCYWcJ-6aYRpRRFsVYEAAAAEo"]
[Thu Feb 19 08:02:25.973432 2026] [:error] [pid 48901:tid 48934] [client 182.43.70.143:44238] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZZTEcixYz-lHbN0WBLsrQAAABg"]
[Thu Feb 19 10:50:33.171945 2026] [:error] [pid 15513:tid 15521] [client 43.166.142.76:35260] [client 43.166.142.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZZ6ecGTRTE022JWg18XwwAAAQY"]
[Thu Feb 19 11:21:39.403882 2026] [:error] [pid 15513:tid 15535] [client 216.81.248.151:60392] [client 216.81.248.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZaBw8GTRTE022JWg18iegAAARQ"]
[Thu Feb 19 11:21:44.633086 2026] [:error] [pid 48903:tid 48965] [client 216.81.248.151:35318] [client 216.81.248.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZaByI6aTgKrpAR115t0rQAAAIA"]
[Thu Feb 19 12:22:04.152710 2026] [:error] [pid 5580:tid 5590] [client 104.244.75.208:37442] [client 104.244.75.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.75.208, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZaP7IV24kZpmf6nh3Ci7gAAAcc"]
[Thu Feb 19 12:22:05.929028 2026] [:error] [pid 5580:tid 5608] [client 104.244.75.208:37442] [client 104.244.75.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.75.208, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZaP7YV24kZpmf6nh3Ci8AAAAdg"]
[Thu Feb 19 14:31:27.763069 2026] [:error] [pid 15513:tid 15530] [client 157.230.43.38:62330] [client 157.230.43.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZauP8GTRTE022JWg19o4wAAAQ8"]
[Thu Feb 19 17:47:48.213865 2026] [:error] [pid 49002:tid 49014] [client 43.130.67.6:46344] [client 43.130.67.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZbcRFfcBtQ6hSJuEQlJVQAAAMA"]
[Thu Feb 19 19:33:31.427126 2026] [:error] [pid 49002:tid 49029] [client 217.182.195.179:46314] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZb1C1fcBtQ6hSJuEQlcdwAAAM8"]
[Thu Feb 19 19:33:33.749565 2026] [:error] [pid 49002:tid 49021] [client 217.182.195.179:41220] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZb1DVfcBtQ6hSJuEQlceQAAAMc"]
[Thu Feb 19 19:33:36.166989 2026] [:error] [pid 49002:tid 49025] [client 217.182.195.179:41224] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZb1EFfcBtQ6hSJuEQlcewAAAMs"]
[Thu Feb 19 19:33:38.541537 2026] [:error] [pid 24048:tid 24058] [client 217.182.195.179:41232] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZb1Emug6wHHqU0QyDbqLwAAAUg"]
[Thu Feb 19 19:33:41.053983 2026] [:error] [pid 24048:tid 24071] [client 217.182.195.179:58896] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZb1FWug6wHHqU0QyDbqNgAAAVU"]
[Thu Feb 19 19:33:43.435930 2026] [:error] [pid 5580:tid 5583] [client 217.182.195.179:58908] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZb1F4V24kZpmf6nh3D4rAAAAcA"]
[Thu Feb 19 19:33:45.966045 2026] [:error] [pid 49002:tid 49032] [client 217.182.195.179:58910] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZb1GVfcBtQ6hSJuEQlcfgAAANI"]
[Thu Feb 19 19:33:48.364197 2026] [:error] [pid 15513:tid 15533] [client 217.182.195.179:58922] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZb1HMGTRTE022JWg1_UbgAAARI"]
[Thu Feb 19 19:33:50.877667 2026] [:error] [pid 48903:tid 48967] [client 217.182.195.179:36886] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZb1Ho6aTgKrpAR115vjBwAAAII"]
[Thu Feb 19 19:33:53.435835 2026] [:error] [pid 15513:tid 15531] [client 217.182.195.179:36902] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZb1IcGTRTE022JWg1_UcwAAARA"]
[Thu Feb 19 19:33:55.781705 2026] [:error] [pid 49002:tid 49015] [client 217.182.195.179:36914] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZb1I1fcBtQ6hSJuEQlciQAAAME"]
[Thu Feb 19 19:33:58.191257 2026] [:error] [pid 15513:tid 15534] [client 217.182.195.179:36928] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZb1JsGTRTE022JWg1_UfAAAARM"]
[Thu Feb 19 19:34:00.704314 2026] [:error] [pid 5580:tid 5603] [client 217.182.195.179:56730] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZb1KIV24kZpmf6nh3D4rwAAAdM"]
[Thu Feb 19 19:34:03.085175 2026] [:error] [pid 24048:tid 24051] [client 217.182.195.179:56738] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZb1K2ug6wHHqU0QyDbqTgAAAUE"]
[Thu Feb 19 19:34:05.620366 2026] [:error] [pid 48901:tid 48927] [client 217.182.195.179:56746] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aZb1LcixYz-lHbN0WBKzdgAAABE"]
[Thu Feb 19 19:34:08.012762 2026] [:error] [pid 48901:tid 48929] [client 217.182.195.179:56756] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aZb1MMixYz-lHbN0WBKzfAAAABM"]
[Thu Feb 19 19:34:10.539798 2026] [:error] [pid 15513:tid 15516] [client 217.182.195.179:59114] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZb1MsGTRTE022JWg1_UigAAAQE"]
[Thu Feb 19 19:34:12.934062 2026] [:error] [pid 5581:tid 5635] [client 217.182.195.179:59126] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZb1NHIfW0xlXmrVd3rCCAAAAhg"]
[Thu Feb 19 19:34:15.428927 2026] [:error] [pid 48903:tid 48979] [client 217.182.195.179:59138] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aZb1N46aTgKrpAR115vjEgAAAI4"]
[Thu Feb 19 19:34:17.821658 2026] [:error] [pid 5580:tid 5593] [client 217.182.195.179:59154] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aZb1OYV24kZpmf6nh3D4tQAAAck"]
[Thu Feb 19 19:34:20.341612 2026] [:error] [pid 48903:tid 48988] [client 217.182.195.179:42910] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZb1PI6aTgKrpAR115vjGAAAAJc"]
[Thu Feb 19 19:34:22.721524 2026] [:error] [pid 5580:tid 5589] [client 217.182.195.179:42926] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZb1PoV24kZpmf6nh3D4ugAAAcY"]
[Thu Feb 19 19:34:25.252631 2026] [:error] [pid 15513:tid 15522] [client 217.182.195.179:42934] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aZb1QcGTRTE022JWg1_UmAAAAQc"]
[Thu Feb 19 19:34:27.769914 2026] [:error] [pid 5581:tid 5621] [client 217.182.195.179:42950] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aZb1Q3IfW0xlXmrVd3rCEAAAAgo"]
[Thu Feb 19 19:34:58.680768 2026] [:error] [pid 24048:tid 24050] [client 217.182.195.179:37276] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZb1Ymug6wHHqU0QyDbqggAAAUA"]
[Thu Feb 19 19:35:01.145485 2026] [:error] [pid 15513:tid 15525] [client 217.182.195.179:34076] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZb1ZcGTRTE022JWg1_UwQAAAQo"]
[Thu Feb 19 19:35:03.656125 2026] [:error] [pid 5548:tid 5553] [client 217.182.195.179:34078] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZb1Z5MpsAkdKxbTbsOxpQAAAYI"]
[Thu Feb 19 19:35:06.135880 2026] [:error] [pid 24048:tid 24064] [client 217.182.195.179:34090] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZb1amug6wHHqU0QyDbqhgAAAU4"]
[Thu Feb 19 19:35:08.497684 2026] [:error] [pid 15513:tid 15529] [client 217.182.195.179:34106] [client 217.182.195.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZb1bMGTRTE022JWg1_UywAAAQ4"]
[Thu Feb 19 20:44:14.692713 2026] [:error] [pid 48902:tid 48959] [client 194.247.173.99:35470] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZcFnmcJ-6aYRpRRFsUw2AAAAFU"]
[Thu Feb 19 23:15:56.030762 2026] [:error] [pid 5580:tid 5588] [client 147.135.253.47:59038] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZcpLIV24kZpmf6nh3Ah8wAAAcU"]
[Thu Feb 19 23:15:58.379614 2026] [:error] [pid 5581:tid 5619] [client 147.135.253.47:40572] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZcpLnIfW0xlXmrVd3rqowAAAgg"]
[Thu Feb 19 23:16:00.850665 2026] [:error] [pid 24048:tid 24060] [client 147.135.253.47:40576] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZcpMGug6wHHqU0QyDYc4QAAAUo"]
[Thu Feb 19 23:16:03.299346 2026] [:error] [pid 48903:tid 48968] [client 147.135.253.47:40584] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZcpM46aTgKrpAR115sPigAAAIM"]
[Thu Feb 19 23:16:05.802145 2026] [:error] [pid 5580:tid 5598] [client 147.135.253.47:40596] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZcpNYV24kZpmf6nh3Ah-QAAAc4"]
[Thu Feb 19 23:16:08.381068 2026] [:error] [pid 24048:tid 24056] [client 147.135.253.47:46066] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZcpOGug6wHHqU0QyDYc6AAAAUY"]
[Thu Feb 19 23:16:10.966172 2026] [:error] [pid 5580:tid 5595] [client 147.135.253.47:46070] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZcpOoV24kZpmf6nh3AiAgAAAcs"]
[Thu Feb 19 23:16:13.364055 2026] [:error] [pid 15513:tid 15526] [client 147.135.253.47:46082] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZcpPcGTRTE022JWg18ZnAAAAQs"]
[Thu Feb 19 23:16:15.799505 2026] [:error] [pid 48902:tid 48943] [client 147.135.253.47:46084] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZcpP2cJ-6aYRpRRFsVKEAAAAEU"]
[Thu Feb 19 23:16:18.322325 2026] [:error] [pid 48903:tid 48983] [client 147.135.253.47:50208] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZcpQo6aTgKrpAR115sPnQAAAJI"]
[Thu Feb 19 23:16:20.728970 2026] [:error] [pid 48903:tid 48985] [client 147.135.253.47:50218] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZcpRI6aTgKrpAR115sPoQAAAJQ"]
[Thu Feb 19 23:16:23.136212 2026] [:error] [pid 49002:tid 49023] [client 147.135.253.47:50226] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZcpR1fcBtQ6hSJuEQmBBAAAAMk"]
[Thu Feb 19 23:16:25.513294 2026] [:error] [pid 49002:tid 49033] [client 147.135.253.47:50240] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZcpSVfcBtQ6hSJuEQmBDQAAANM"]
[Thu Feb 19 23:16:28.032869 2026] [:error] [pid 48901:tid 48924] [client 147.135.253.47:50256] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZcpTMixYz-lHbN0WBLr7gAAAA4"]
[Thu Feb 19 23:16:30.425258 2026] [:error] [pid 15513:tid 15532] [client 147.135.253.47:43888] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZcpTsGTRTE022JWg18ZugAAARE"]
[Thu Feb 19 23:16:32.959756 2026] [:error] [pid 48903:tid 48982] [client 147.135.253.47:43900] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZcpUI6aTgKrpAR115sPqAAAAJE"]
[Thu Feb 19 23:16:35.473373 2026] [:error] [pid 15513:tid 15517] [client 147.135.253.47:43916] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZcpU8GTRTE022JWg18ZxwAAAQI"]
[Thu Feb 19 23:16:37.860904 2026] [:error] [pid 15513:tid 15538] [client 147.135.253.47:43918] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZcpVcGTRTE022JWg18ZywAAARc"]
[Thu Feb 19 23:16:40.386288 2026] [:error] [pid 5581:tid 5616] [client 147.135.253.47:51000] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZcpWHIfW0xlXmrVd3rquwAAAgU"]
[Thu Feb 19 23:16:42.780801 2026] [:error] [pid 5580:tid 5590] [client 147.135.253.47:51010] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZcpWoV24kZpmf6nh3AiDwAAAcc"]
[Thu Feb 19 23:16:45.315588 2026] [:error] [pid 48903:tid 48988] [client 147.135.253.47:51018] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZcpXY6aTgKrpAR115sPvQAAAJc"]
[Fri Feb 20 03:00:46.270638 2026] [:error] [pid 5580:tid 5587] [client 43.140.247.223:40568] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZdd3oV24kZpmf6nh3BLfwAAAcQ"]
[Fri Feb 20 03:43:08.337831 2026] [:error] [pid 46129:tid 46140] [client 51.75.151.149:64589] [client 51.75.151.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aZdnzL3YHNz4kvNuXVhv1AAAAQk"]
[Fri Feb 20 05:16:48.716939 2026] [:error] [pid 64403:tid 64421] [client 173.239.240.171:26851] [client 173.239.240.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZd9wGsY-w3EIXaNGw5qrwAAAAg"]
[Fri Feb 20 06:24:34.085673 2026] [:error] [pid 417:tid 434] [client 45.226.61.26:53444] [client 45.226.61.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.226.61.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZeNomZ8vv9H56paZ2D75gAAAQ8"]
[Fri Feb 20 07:05:53.306404 2026] [:error] [pid 64405:tid 64481] [client 45.226.61.26:63986] [client 45.226.61.26] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZeXUdSgDnQB5OAbOuTa2gAAAI4"]
[Fri Feb 20 07:19:23.272679 2026] [:error] [pid 64510:tid 64512] [client 104.244.73.251:63029] [client 104.244.73.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.73.251, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZeaeyxwOnmwqVfn93VsuQAAAMA"]
[Fri Feb 20 07:19:26.721133 2026] [:error] [pid 64510:tid 64523] [client 104.244.73.251:63029] [client 104.244.73.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.73.251, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZeafixwOnmwqVfn93VsvAAAAMs"]
[Fri Feb 20 07:28:14.186662 2026] [:error] [pid 64510:tid 64524] [client 173.239.240.163:51093] [client 173.239.240.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZecjixwOnmwqVfn93VxawAAAMw"]
[Fri Feb 20 08:15:22.517644 2026] [:error] [pid 22200:tid 22224] [client 173.239.240.157:29571] [client 173.239.240.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.157, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZenmiR0iwS_xZvYegCFDAAAAZU"]
[Fri Feb 20 09:02:31.123903 2026] [:error] [pid 39818:tid 39843] [client 173.239.240.172:41451] [client 173.239.240.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZeyp2QMTpiKlnmsoKbn7QAAAJU"]
[Fri Feb 20 09:49:42.134103 2026] [:error] [pid 54460:tid 54473] [client 173.239.240.167:64165] [client 173.239.240.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.167, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZe9tsoUiaZ-Z7V-F9-dYAAAAAg"]
[Fri Feb 20 10:36:53.061099 2026] [:error] [pid 54552:tid 54575] [client 173.239.240.161:23825] [client 173.239.240.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.161, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZfIxce4t0F-_sbWepZsWgAAANQ"]
[Fri Feb 20 11:24:12.994134 2026] [:error] [pid 59127:tid 59129] [client 173.239.240.160:60319] [client 173.239.240.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZfT3HSltzl55Qz-09iRLQAAAQA"]
[Fri Feb 20 12:11:32.961008 2026] [:error] [pid 54461:tid 54502] [client 173.239.240.170:41349] [client 173.239.240.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.170, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZfe9C372fkN0w39NDMhNAAAAEo"]
[Fri Feb 20 12:58:48.255594 2026] [:error] [pid 54552:tid 54570] [client 173.239.240.149:43843] [client 173.239.240.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZfqCMe4t0F-_sbWeparjAAAAM8"]
[Fri Feb 20 13:46:14.856831 2026] [:error] [pid 59127:tid 59129] [client 173.239.240.147:59379] [client 173.239.240.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.147, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZf1JnSltzl55Qz-09jNdAAAAQA"]
[Fri Feb 20 14:33:31.509523 2026] [:error] [pid 54520:tid 54522] [client 173.239.240.160:31081] [client 173.239.240.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZgAO2QaQX7QUBqXcyGHdQAAAIA"]
[Fri Feb 20 15:21:07.796978 2026] [:error] [pid 46012:tid 46026] [client 173.239.240.162:60683] [client 173.239.240.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.162, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZgLYzXz-GTvuxLwgUHJlAAAAUw"]
[Fri Feb 20 16:09:02.743529 2026] [:error] [pid 59127:tid 59153] [client 173.239.240.172:26625] [client 173.239.240.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZgWnnSltzl55Qz-09j5WQAAARg"]
[Fri Feb 20 16:56:51.024208 2026] [:error] [pid 46012:tid 46027] [client 173.239.240.166:27739] [client 173.239.240.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.166, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZgh0zXz-GTvuxLwgUH1mQAAAU0"]
[Fri Feb 20 17:44:42.774655 2026] [:error] [pid 54520:tid 54531] [client 173.239.240.155:59523] [client 173.239.240.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.155, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZgtCmQaQX7QUBqXcyG_HQAAAIk"]
[Fri Feb 20 18:32:33.176104 2026] [:error] [pid 46012:tid 46033] [client 173.239.240.154:25177] [client 173.239.240.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.154, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZg4QTXz-GTvuxLwgUEgsAAAAVM"]
[Fri Feb 20 18:56:48.422789 2026] [:error] [pid 54461:tid 54500] [client 173.239.240.171:60675] [client 173.239.240.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZg98C372fkN0w39NDOkYgAAAEg"]
[Fri Feb 20 19:34:12.594639 2026] [:error] [pid 54460:tid 54469] [client 101.33.80.42:34890] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZhGtMoUiaZ-Z7V-F99nMAAAAAQ"]
[Fri Feb 20 19:41:17.069560 2026] [:error] [pid 54461:tid 54514] [client 173.239.240.158:57625] [client 173.239.240.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.158, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZhIXS372fkN0w39NDOzVwAAAFY"]
[Fri Feb 20 20:29:19.099533 2026] [:error] [pid 59127:tid 59130] [client 173.239.240.158:65245] [client 173.239.240.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.158, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZhTn3Sltzl55Qz-09hDOQAAAQE"]
[Fri Feb 20 20:47:00.327105 2026] [autoindex:error] [pid 54461:tid 54512] [client 212.227.100.3:64692] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Feb 20 20:47:11.417053 2026] [:error] [pid 59127:tid 59151] [client 209.198.154.95:26904] [client 209.198.154.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.154.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZhXz3Sltzl55Qz-09hHgwAAARY"]
[Fri Feb 20 21:17:32.303800 2026] [:error] [pid 46012:tid 46037] [client 173.239.240.153:35869] [client 173.239.240.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.153, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZhe7DXz-GTvuxLwgUFivAAAAVc"]
[Fri Feb 20 21:59:22.492853 2026] [:error] [pid 54461:tid 54510] [client 182.8.129.89:5544] [client 182.8.129.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZhoui372fkN0w39NDPckAAAAFI"]
[Fri Feb 20 22:05:32.704531 2026] [:error] [pid 54460:tid 54485] [client 173.239.240.163:22471] [client 173.239.240.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZhqLMoUiaZ-Z7V-F9-iSwAAABQ"]
[Fri Feb 20 22:53:55.425042 2026] [:error] [pid 54520:tid 54542] [client 173.239.240.147:65423] [client 173.239.240.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.147, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZh1g2QaQX7QUBqXcyEWXgAAAJQ"]
[Fri Feb 20 23:42:20.070715 2026] [:error] [pid 54460:tid 54469] [client 173.239.240.156:55329] [client 173.239.240.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.156, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZiA3MoUiaZ-Z7V-F9_DdgAAAAQ"]
[Fri Feb 20 23:51:04.102422 2026] [:error] [pid 59127:tid 59152] [client 18.219.131.181:52394] [client 18.219.131.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZiC6HSltzl55Qz-09h2oQAAARc"]
[Fri Feb 20 23:51:04.539208 2026] [:error] [pid 46012:tid 46025] [client 18.219.131.181:56868] [client 18.219.131.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aZiC6DXz-GTvuxLwgUGRvAAAAUs"]
[Fri Feb 20 23:51:05.015213 2026] [:error] [pid 46012:tid 46024] [client 18.219.131.181:59168] [client 18.219.131.181] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/media/system/js/core.js"] [unique_id "aZiC6TXz-GTvuxLwgUGRvgAAAUo"]
[Sat Feb 21 00:19:25.473527 2026] [:error] [pid 46012:tid 46038] [client 107.189.11.186:15778] [client 107.189.11.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.11.186, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZiJjTXz-GTvuxLwgUGZCQAAAVg"]
[Sat Feb 21 00:19:27.107046 2026] [:error] [pid 46012:tid 46024] [client 107.189.11.186:15778] [client 107.189.11.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.11.186, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZiJjzXz-GTvuxLwgUGZCgAAAUo"]
[Sat Feb 21 00:26:11.896114 2026] [:error] [pid 54552:tid 54560] [client 209.198.154.95:6238] [client 209.198.154.95] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZiLI8e4t0F-_sbWepZ0uwAAAMU"]
[Sat Feb 21 00:26:57.078274 2026] [:error] [pid 54520:tid 54530] [client 209.198.154.95:29472] [client 209.198.154.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.154.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZiLUWQaQX7QUBqXcyE2qAAAAIg"]
[Sat Feb 21 00:27:53.650016 2026] [:error] [pid 54461:tid 54509] [client 209.198.154.95:47463] [client 209.198.154.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.154.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZiLiS372fkN0w39NDMDpAAAAFE"]
[Sat Feb 21 00:30:11.510208 2026] [:error] [pid 46012:tid 46027] [client 173.239.240.173:47467] [client 173.239.240.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.173, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZiMEzXz-GTvuxLwgUGb2gAAAU0"]
[Sat Feb 21 01:18:24.992059 2026] [:error] [pid 59127:tid 59134] [client 173.239.240.171:46687] [client 173.239.240.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZiXYHSltzl55Qz-09iM6wAAAQU"]
[Sat Feb 21 02:06:46.333677 2026] [:error] [pid 25617:tid 25677] [client 173.239.240.159:47539] [client 173.239.240.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.159, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZiittqt50qKix2zKUSrDwAAAY0"]
[Sat Feb 21 02:56:35.693058 2026] [:error] [pid 54552:tid 54559] [client 173.239.240.172:38739] [client 173.239.240.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZiuY8e4t0F-_sbWepafXgAAAMQ"]
[Sat Feb 21 03:46:05.599240 2026] [:error] [pid 40757:tid 40797] [client 173.239.240.146:60009] [client 173.239.240.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZi5_ag_MKVL7zhH7dz00AAAAEI"]
[Sat Feb 21 04:35:25.459194 2026] [:error] [pid 40756:tid 40775] [client 173.239.240.157:50457] [client 173.239.240.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.157, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZjFjQNlDP60sLYgqXKysgAAAAk"]
[Sat Feb 21 05:25:09.053609 2026] [:error] [pid 40757:tid 40808] [client 173.239.240.170:39367] [client 173.239.240.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.170, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZjRNag_MKVL7zhH7dwkZAAAAE0"]
[Sat Feb 21 06:14:39.981067 2026] [:error] [pid 40756:tid 40773] [client 173.239.240.169:25119] [client 173.239.240.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.169, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZjczwNlDP60sLYgqXLcFgAAAAc"]
[Sat Feb 21 07:04:13.715814 2026] [:error] [pid 40757:tid 40809] [client 173.239.240.163:28623] [client 173.239.240.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZjobag_MKVL7zhH7dxMlgAAAE4"]
[Sat Feb 21 07:52:15.754709 2026] [:error] [pid 40757:tid 40806] [client 173.239.240.155:46873] [client 173.239.240.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.155, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZjzr6g_MKVL7zhH7dxbSQAAAEs"]
[Sat Feb 21 08:40:33.803017 2026] [:error] [pid 40756:tid 40790] [client 173.239.240.148:21653] [client 173.239.240.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZj_AQNlDP60sLYgqXISQQAAABg"]
[Sat Feb 21 09:18:20.403730 2026] [:error] [pid 11941:tid 11967] [client 135.149.8.148:53864] [client 135.149.8.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.149.8.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZkH3HTUkHs3EVWllKkL9gAAAZg"]
[Sat Feb 21 09:28:49.549899 2026] [:error] [pid 40871:tid 40877] [client 173.239.240.172:47287] [client 173.239.240.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZkKUTqDikjdiOZeJyURBAAAAMQ"]
[Sat Feb 21 09:45:46.257958 2026] [:error] [pid 40871:tid 40888] [client 20.197.194.128:65363] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bvb.php"] [unique_id "aZkOSjqDikjdiOZeJyUVdAAAAM8"]
[Sat Feb 21 09:45:46.871963 2026] [:error] [pid 40758:tid 40824] [client 20.197.194.128:65410] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bvb.php"] [unique_id "aZkOSkBAHxvBM3i9iKHw1gAAAII"]
[Sat Feb 21 09:45:47.487036 2026] [:error] [pid 40757:tid 40795] [client 20.197.194.128:62896] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bvb.php"] [unique_id "aZkOS6g_MKVL7zhH7dx-2wAAAEA"]
[Sat Feb 21 09:45:48.123646 2026] [:error] [pid 11941:tid 11954] [client 20.197.194.128:65414] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aZkOTHTUkHs3EVWllKkTkAAAAYs"]
[Sat Feb 21 09:45:48.739801 2026] [:error] [pid 40757:tid 40819] [client 20.197.194.128:65360] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aZkOTKg_MKVL7zhH7dx-3AAAAFg"]
[Sat Feb 21 09:45:49.354898 2026] [:error] [pid 11941:tid 11944] [client 20.197.194.128:64929] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aZkOTXTUkHs3EVWllKkTkwAAAYE"]
[Sat Feb 21 09:45:49.973011 2026] [:error] [pid 40757:tid 40802] [client 20.197.194.128:62798] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/un.php"] [unique_id "aZkOTag_MKVL7zhH7dx-3QAAAEc"]
[Sat Feb 21 09:45:50.587721 2026] [:error] [pid 22558:tid 22584] [client 20.197.194.128:64164] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/un.php"] [unique_id "aZkOTirVaIb2gXsVbDqDawAAARg"]
[Sat Feb 21 09:45:51.203108 2026] [:error] [pid 22558:tid 22577] [client 20.197.194.128:64184] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/un.php"] [unique_id "aZkOTyrVaIb2gXsVbDqDbQAAARE"]
[Sat Feb 21 09:45:51.841607 2026] [:error] [pid 22558:tid 22580] [client 20.197.194.128:62808] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/un.php"] [unique_id "aZkOTyrVaIb2gXsVbDqDcgAAARQ"]
[Sat Feb 21 09:45:52.457876 2026] [:error] [pid 40756:tid 40766] [client 20.197.194.128:64082] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aZkOUANlDP60sLYgqXIuRQAAAAA"]
[Sat Feb 21 09:45:53.074360 2026] [:error] [pid 40871:tid 40883] [client 20.197.194.128:64846] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aZkOUTqDikjdiOZeJyUVeAAAAMo"]
[Sat Feb 21 09:45:53.689379 2026] [:error] [pid 40871:tid 40890] [client 20.197.194.128:62325] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aZkOUTqDikjdiOZeJyUVewAAANE"]
[Sat Feb 21 09:45:54.305873 2026] [:error] [pid 40871:tid 40873] [client 20.197.194.128:65361] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aZkOUjqDikjdiOZeJyUVfQAAAMA"]
[Sat Feb 21 09:45:54.924273 2026] [:error] [pid 22558:tid 22562] [client 20.197.194.128:64132] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aZkOUirVaIb2gXsVbDqDdQAAAQI"]
[Sat Feb 21 09:45:55.541307 2026] [:error] [pid 40756:tid 40769] [client 20.197.194.128:62318] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aZkOUwNlDP60sLYgqXIuSgAAAAM"]
[Sat Feb 21 09:45:56.156174 2026] [:error] [pid 40757:tid 40797] [client 20.197.194.128:65437] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aZkOVKg_MKVL7zhH7dx-4AAAAEI"]
[Sat Feb 21 09:45:56.772104 2026] [:error] [pid 11941:tid 11952] [client 20.197.194.128:62847] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aZkOVHTUkHs3EVWllKkTlwAAAYk"]
[Sat Feb 21 09:45:57.388542 2026] [:error] [pid 40756:tid 40778] [client 20.197.194.128:64087] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login8.php"] [unique_id "aZkOVQNlDP60sLYgqXIuTgAAAAw"]
[Sat Feb 21 09:45:58.003036 2026] [:error] [pid 40757:tid 40803] [client 20.197.194.128:65462] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login8.php"] [unique_id "aZkOVqg_MKVL7zhH7dx-4wAAAEg"]
[Sat Feb 21 09:45:58.619850 2026] [:error] [pid 40757:tid 40805] [client 20.197.194.128:62905] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login8.php"] [unique_id "aZkOVqg_MKVL7zhH7dx-6AAAAEo"]
[Sat Feb 21 09:45:59.236947 2026] [:error] [pid 40757:tid 40816] [client 20.197.194.128:65357] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login8.php"] [unique_id "aZkOV6g_MKVL7zhH7dx-6wAAAFU"]
[Sat Feb 21 09:45:59.860834 2026] [:error] [pid 40758:tid 40827] [client 20.197.194.128:64881] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZkOV0BAHxvBM3i9iKHw4QAAAIU"]
[Sat Feb 21 09:46:00.477364 2026] [:error] [pid 11743:tid 11745] [client 20.197.194.128:64067] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZkOWAALoZZjiTbGvqWQnQAAAUA"]
[Sat Feb 21 09:46:01.096054 2026] [:error] [pid 40758:tid 40834] [client 20.197.194.128:64157] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZkOWUBAHxvBM3i9iKHw5AAAAIw"]
[Sat Feb 21 09:46:01.737368 2026] [:error] [pid 40756:tid 40777] [client 20.197.194.128:65347] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZkOWQNlDP60sLYgqXIuVQAAAAs"]
[Sat Feb 21 09:46:02.352221 2026] [:error] [pid 40756:tid 40780] [client 20.197.194.128:62867] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ya.php"] [unique_id "aZkOWgNlDP60sLYgqXIuWAAAAA4"]
[Sat Feb 21 09:46:02.969220 2026] [:error] [pid 40756:tid 40778] [client 20.197.194.128:64150] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ya.php"] [unique_id "aZkOWgNlDP60sLYgqXIuXAAAAAw"]
[Sat Feb 21 09:46:03.600150 2026] [:error] [pid 40871:tid 40891] [client 20.197.194.128:65382] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7wom.php"] [unique_id "aZkOWzqDikjdiOZeJyUVgQAAANI"]
[Sat Feb 21 09:46:04.215838 2026] [:error] [pid 40756:tid 40787] [client 20.197.194.128:64888] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7wom.php"] [unique_id "aZkOXANlDP60sLYgqXIuZQAAABU"]
[Sat Feb 21 09:46:04.832223 2026] [:error] [pid 11743:tid 11766] [client 20.197.194.128:64885] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7wom.php"] [unique_id "aZkOXAALoZZjiTbGvqWQogAAAVU"]
[Sat Feb 21 09:46:05.448388 2026] [:error] [pid 22558:tid 22579] [client 20.197.194.128:62834] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7wom.php"] [unique_id "aZkOXSrVaIb2gXsVbDqDfgAAARM"]
[Sat Feb 21 09:46:06.069568 2026] [:error] [pid 40871:tid 40886] [client 20.197.194.128:64134] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aZkOXjqDikjdiOZeJyUVgwAAAM0"]
[Sat Feb 21 09:46:06.709863 2026] [:error] [pid 40756:tid 40774] [client 20.197.194.128:65431] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aZkOXgNlDP60sLYgqXIucAAAAAg"]
[Sat Feb 21 09:46:07.327369 2026] [:error] [pid 11743:tid 11761] [client 20.197.194.128:64137] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aZkOXwALoZZjiTbGvqWQpwAAAVA"]
[Sat Feb 21 09:46:07.943833 2026] [:error] [pid 40758:tid 40825] [client 20.197.194.128:64106] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aZkOX0BAHxvBM3i9iKHw6wAAAIM"]
[Sat Feb 21 09:46:08.559116 2026] [:error] [pid 40758:tid 40843] [client 20.197.194.128:64958] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aZkOYEBAHxvBM3i9iKHw7gAAAJU"]
[Sat Feb 21 09:46:09.191474 2026] [:error] [pid 40757:tid 40808] [client 20.197.194.128:63567] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aZkOYag_MKVL7zhH7dx-8QAAAE0"]
[Sat Feb 21 09:46:09.808096 2026] [:error] [pid 11941:tid 11950] [client 20.197.194.128:64869] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aZkOYXTUkHs3EVWllKkToAAAAYc"]
[Sat Feb 21 09:46:10.423164 2026] [:error] [pid 11743:tid 11756] [client 20.197.194.128:64959] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aZkOYgALoZZjiTbGvqWQqwAAAUs"]
[Sat Feb 21 09:46:11.044334 2026] [:error] [pid 40758:tid 40832] [client 20.197.194.128:65371] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aZkOY0BAHxvBM3i9iKHw9AAAAIo"]
[Sat Feb 21 09:46:11.663321 2026] [:error] [pid 40757:tid 40809] [client 20.197.194.128:65367] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aZkOY6g_MKVL7zhH7dx-9QAAAE4"]
[Sat Feb 21 09:46:12.279757 2026] [:error] [pid 40757:tid 40812] [client 20.197.194.128:62872] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aZkOZKg_MKVL7zhH7dx-9wAAAFE"]
[Sat Feb 21 09:46:12.895820 2026] [:error] [pid 40871:tid 40873] [client 20.197.194.128:65352] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "aZkOZDqDikjdiOZeJyUVigAAAMA"]
[Sat Feb 21 09:46:13.511448 2026] [:error] [pid 40871:tid 40887] [client 20.197.194.128:62334] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aZkOZTqDikjdiOZeJyUVjAAAAM4"]
[Sat Feb 21 09:46:14.127432 2026] [:error] [pid 11941:tid 11962] [client 20.197.194.128:65430] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aZkOZnTUkHs3EVWllKkTqQAAAZM"]
[Sat Feb 21 09:46:14.746864 2026] [:error] [pid 22558:tid 22576] [client 20.197.194.128:62316] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aZkOZirVaIb2gXsVbDqDjAAAARA"]
[Sat Feb 21 09:46:15.363886 2026] [:error] [pid 22558:tid 22561] [client 20.197.194.128:64940] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aZkOZyrVaIb2gXsVbDqDjgAAAQE"]
[Sat Feb 21 09:46:15.979444 2026] [:error] [pid 40871:tid 40882] [client 20.197.194.128:65400] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aZkOZzqDikjdiOZeJyUVkQAAAMk"]
[Sat Feb 21 09:46:16.594652 2026] [:error] [pid 22558:tid 22566] [client 20.197.194.128:65378] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admiin.php"] [unique_id "aZkOaCrVaIb2gXsVbDqDjwAAAQY"]
[Sat Feb 21 09:46:17.210693 2026] [:error] [pid 22558:tid 22569] [client 20.197.194.128:64882] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aZkOaSrVaIb2gXsVbDqDkAAAAQk"]
[Sat Feb 21 09:46:17.829703 2026] [:error] [pid 40757:tid 40800] [client 20.197.194.128:65409] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aZkOaag_MKVL7zhH7dx_BAAAAEU"]
[Sat Feb 21 09:46:18.444391 2026] [:error] [pid 11743:tid 11769] [client 20.197.194.128:62170] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aZkOagALoZZjiTbGvqWQuAAAAVg"]
[Sat Feb 21 09:46:19.065018 2026] [:error] [pid 40756:tid 40778] [client 20.197.194.128:62849] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aZkOawNlDP60sLYgqXIufAAAAAw"]
[Sat Feb 21 09:46:19.680087 2026] [:error] [pid 40757:tid 40819] [client 20.197.194.128:64899] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aZkOa6g_MKVL7zhH7dx_BwAAAFg"]
[Sat Feb 21 09:46:20.295182 2026] [:error] [pid 40756:tid 40782] [client 20.197.194.128:64175] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aZkObANlDP60sLYgqXIujgAAABA"]
[Sat Feb 21 09:46:20.912041 2026] [:error] [pid 11941:tid 11956] [client 20.197.194.128:64880] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aZkObHTUkHs3EVWllKkTsQAAAY0"]
[Sat Feb 21 09:46:21.528141 2026] [:error] [pid 40756:tid 40768] [client 20.197.194.128:64837] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aZkObQNlDP60sLYgqXIunQAAAAI"]
[Sat Feb 21 09:46:22.145869 2026] [:error] [pid 40757:tid 40796] [client 20.197.194.128:64857] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aZkObqg_MKVL7zhH7dx_EwAAAEE"]
[Sat Feb 21 09:46:22.761566 2026] [:error] [pid 40871:tid 40897] [client 20.197.194.128:64838] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aZkObjqDikjdiOZeJyUVmwAAANg"]
[Sat Feb 21 09:46:23.377772 2026] [:error] [pid 22558:tid 22574] [client 20.197.194.128:64074] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trd.php"] [unique_id "aZkObyrVaIb2gXsVbDqDlQAAAQ4"]
[Sat Feb 21 09:46:23.996696 2026] [:error] [pid 22558:tid 22572] [client 20.197.194.128:65454] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "aZkObyrVaIb2gXsVbDqDmAAAAQw"]
[Sat Feb 21 09:46:24.612431 2026] [:error] [pid 40756:tid 40784] [client 20.197.194.128:62911] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "aZkOcANlDP60sLYgqXIupQAAABI"]
[Sat Feb 21 09:46:25.231813 2026] [:error] [pid 11941:tid 11955] [client 20.197.194.128:62809] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "aZkOcXTUkHs3EVWllKkTuAAAAYw"]
[Sat Feb 21 09:46:25.848696 2026] [:error] [pid 40871:tid 40894] [client 20.197.194.128:62895] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "aZkOcTqDikjdiOZeJyUVnQAAANU"]
[Sat Feb 21 09:46:26.464365 2026] [:error] [pid 40758:tid 40832] [client 20.197.194.128:63558] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/admin.php"] [unique_id "aZkOckBAHxvBM3i9iKHxDQAAAIo"]
[Sat Feb 21 09:46:27.079334 2026] [:error] [pid 11941:tid 11960] [client 20.197.194.128:62858] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/admin.php"] [unique_id "aZkOc3TUkHs3EVWllKkTuwAAAZE"]
[Sat Feb 21 09:46:27.697102 2026] [:error] [pid 40756:tid 40789] [client 20.197.194.128:65344] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/admin.php"] [unique_id "aZkOcwNlDP60sLYgqXIuqgAAABc"]
[Sat Feb 21 09:46:28.316496 2026] [:error] [pid 11743:tid 11749] [client 20.197.194.128:62933] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/admin.php"] [unique_id "aZkOdAALoZZjiTbGvqWQ1QAAAUQ"]
[Sat Feb 21 09:46:28.932595 2026] [:error] [pid 40757:tid 40797] [client 20.197.194.128:64186] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZkOdKg_MKVL7zhH7dx_HAAAAEI"]
[Sat Feb 21 09:46:29.547819 2026] [:error] [pid 11941:tid 11951] [client 20.197.194.128:62873] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZkOdXTUkHs3EVWllKkTvgAAAYg"]
[Sat Feb 21 09:46:30.166103 2026] [:error] [pid 40756:tid 40788] [client 20.197.194.128:62862] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZkOdgNlDP60sLYgqXIurQAAABY"]
[Sat Feb 21 09:46:30.784304 2026] [:error] [pid 11941:tid 11946] [client 20.197.194.128:65465] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZkOdnTUkHs3EVWllKkTwAAAAYM"]
[Sat Feb 21 09:46:31.400085 2026] [:error] [pid 11941:tid 11963] [client 20.197.194.128:65375] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZkOd3TUkHs3EVWllKkTwgAAAZQ"]
[Sat Feb 21 09:46:32.017455 2026] [:error] [pid 11743:tid 11769] [client 20.197.194.128:64115] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZkOeAALoZZjiTbGvqWQ2gAAAVg"]
[Sat Feb 21 09:46:32.633230 2026] [:error] [pid 40757:tid 40805] [client 20.197.194.128:62881] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZkOeKg_MKVL7zhH7dx_HwAAAEo"]
[Sat Feb 21 09:46:33.251506 2026] [:error] [pid 11743:tid 11750] [client 20.197.194.128:62306] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZkOeQALoZZjiTbGvqWQ3AAAAUU"]
[Sat Feb 21 09:46:33.873286 2026] [:error] [pid 22558:tid 22583] [client 20.197.194.128:64902] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aZkOeSrVaIb2gXsVbDqDpgAAARc"]
[Sat Feb 21 09:46:34.490663 2026] [:error] [pid 40757:tid 40814] [client 20.197.194.128:62859] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aZkOeqg_MKVL7zhH7dx_IwAAAFM"]
[Sat Feb 21 09:46:35.117229 2026] [:error] [pid 11743:tid 11768] [client 20.197.194.128:62311] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aZkOewALoZZjiTbGvqWQ4gAAAVc"]
[Sat Feb 21 09:46:35.734075 2026] [:error] [pid 11743:tid 11769] [client 20.197.194.128:65367] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tcp.php"] [unique_id "aZkOewALoZZjiTbGvqWQ5AAAAVg"]
[Sat Feb 21 09:46:36.350248 2026] [:error] [pid 22558:tid 22582] [client 20.197.194.128:64191] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aZkOfCrVaIb2gXsVbDqDqgAAARY"]
[Sat Feb 21 09:46:36.965677 2026] [:error] [pid 40757:tid 40796] [client 20.197.194.128:62885] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aZkOfKg_MKVL7zhH7dx_KAAAAEE"]
[Sat Feb 21 09:46:37.581637 2026] [:error] [pid 40757:tid 40797] [client 20.197.194.128:64859] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aZkOfag_MKVL7zhH7dx_KQAAAEI"]
[Sat Feb 21 09:46:38.197584 2026] [:error] [pid 40758:tid 40842] [client 20.197.194.128:64957] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aZkOfkBAHxvBM3i9iKHxFQAAAJQ"]
[Sat Feb 21 09:46:38.813561 2026] [:error] [pid 40756:tid 40783] [client 20.197.194.128:65372] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aZkOfgNlDP60sLYgqXIutgAAABE"]
[Sat Feb 21 09:46:39.429947 2026] [:error] [pid 22558:tid 22571] [client 20.197.194.128:63657] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aZkOfyrVaIb2gXsVbDqDrwAAAQs"]
[Sat Feb 21 09:46:40.046040 2026] [:error] [pid 40758:tid 40839] [client 20.197.194.128:65446] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aZkOgEBAHxvBM3i9iKHxFwAAAJE"]
[Sat Feb 21 09:46:40.661839 2026] [:error] [pid 40758:tid 40845] [client 20.197.194.128:65440] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aZkOgEBAHxvBM3i9iKHxGAAAAJc"]
[Sat Feb 21 09:46:41.286491 2026] [:error] [pid 40871:tid 40873] [client 20.197.194.128:65441] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZkOgTqDikjdiOZeJyUVqwAAAMA"]
[Sat Feb 21 09:46:41.912790 2026] [:error] [pid 40758:tid 40843] [client 20.197.194.128:62786] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZkOgUBAHxvBM3i9iKHxGwAAAJU"]
[Sat Feb 21 09:46:42.528442 2026] [:error] [pid 40758:tid 40828] [client 20.197.194.128:64898] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZkOgkBAHxvBM3i9iKHxHgAAAIY"]
[Sat Feb 21 09:46:43.144855 2026] [:error] [pid 40871:tid 40876] [client 20.197.194.128:64121] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZkOgzqDikjdiOZeJyUVrwAAAMM"]
[Sat Feb 21 09:46:43.762990 2026] [:error] [pid 40757:tid 40808] [client 20.197.194.128:62799] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZkOg6g_MKVL7zhH7dx_MQAAAE0"]
[Sat Feb 21 09:46:44.378670 2026] [:error] [pid 11743:tid 11757] [client 20.197.194.128:62794] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZkOhAALoZZjiTbGvqWQ8gAAAUw"]
[Sat Feb 21 09:46:44.994597 2026] [:error] [pid 40757:tid 40796] [client 20.197.194.128:65369] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZkOhKg_MKVL7zhH7dx_NQAAAEE"]
[Sat Feb 21 09:46:56.085514 2026] [:error] [pid 11743:tid 11768] [client 20.197.194.128:62829] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZkOkAALoZZjiTbGvqWREwAAAVc"]
[Sat Feb 21 09:46:57.161399 2026] [:error] [pid 40756:tid 40780] [client 20.197.194.128:64910] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZkOkQNlDP60sLYgqXIu2wAAAA4"]
[Sat Feb 21 09:46:57.777328 2026] [:error] [pid 40756:tid 40769] [client 20.197.194.128:62838] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZkOkQNlDP60sLYgqXIu3gAAAAM"]
[Sat Feb 21 09:46:58.392437 2026] [:error] [pid 40756:tid 40785] [client 20.197.194.128:63660] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZkOkgNlDP60sLYgqXIu4AAAABM"]
[Sat Feb 21 09:46:59.009741 2026] [:error] [pid 40756:tid 40775] [client 20.197.194.128:62333] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZkOkwNlDP60sLYgqXIu4gAAAAk"]
[Sat Feb 21 09:46:59.627011 2026] [:error] [pid 40756:tid 40768] [client 20.197.194.128:27007] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZkOkwNlDP60sLYgqXIu5QAAAAI"]
[Sat Feb 21 09:47:00.245399 2026] [:error] [pid 40756:tid 40767] [client 20.197.194.128:26988] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZkOlANlDP60sLYgqXIu6gAAAAE"]
[Sat Feb 21 09:47:00.860781 2026] [:error] [pid 40756:tid 40774] [client 20.197.194.128:63621] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZkOlANlDP60sLYgqXIu6wAAAAg"]
[Sat Feb 21 09:47:01.477769 2026] [:error] [pid 11743:tid 11756] [client 20.197.194.128:62330] [client 20.197.194.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aZkOlQALoZZjiTbGvqWRHAAAAUs"]
[Sat Feb 21 09:47:02.100455 2026] [:error] [pid 40756:tid 40786] [client 20.197.194.128:42885] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aZkOlgNlDP60sLYgqXIu7gAAABQ"]
[Sat Feb 21 09:47:02.716938 2026] [:error] [pid 40871:tid 40887] [client 20.197.194.128:26990] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aZkOljqDikjdiOZeJyUVxAAAAM4"]
[Sat Feb 21 09:47:03.341809 2026] [:error] [pid 11941:tid 11946] [client 20.197.194.128:26948] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aZkOl3TUkHs3EVWllKkTzAAAAYM"]
[Sat Feb 21 09:47:03.957826 2026] [:error] [pid 40756:tid 40767] [client 20.197.194.128:62810] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aZkOlwNlDP60sLYgqXIu9QAAAAE"]
[Sat Feb 21 09:47:04.574016 2026] [:error] [pid 11743:tid 11763] [client 20.197.194.128:63618] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hexx.php"] [unique_id "aZkOmAALoZZjiTbGvqWRJQAAAVI"]
[Sat Feb 21 09:47:05.189139 2026] [:error] [pid 40756:tid 40782] [client 20.197.194.128:42940] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hexx.php"] [unique_id "aZkOmQNlDP60sLYgqXIu-AAAABA"]
[Sat Feb 21 09:47:05.803251 2026] [:error] [pid 11743:tid 11746] [client 20.197.194.128:62800] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hexx.php"] [unique_id "aZkOmQALoZZjiTbGvqWRJwAAAUE"]
[Sat Feb 21 09:47:06.419376 2026] [:error] [pid 11941:tid 11966] [client 20.197.194.128:64914] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hexx.php"] [unique_id "aZkOmnTUkHs3EVWllKkTzQAAAZc"]
[Sat Feb 21 09:47:07.035099 2026] [:error] [pid 11941:tid 11955] [client 20.197.194.128:62272] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cbrfo.php"] [unique_id "aZkOm3TUkHs3EVWllKkT0QAAAYw"]
[Sat Feb 21 09:47:07.653483 2026] [:error] [pid 11941:tid 11945] [client 20.197.194.128:26982] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cbrfo.php"] [unique_id "aZkOm3TUkHs3EVWllKkT0wAAAYI"]
[Sat Feb 21 09:47:08.270984 2026] [:error] [pid 40756:tid 40781] [client 20.197.194.128:64949] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cbrfo.php"] [unique_id "aZkOnANlDP60sLYgqXIvAgAAAA8"]
[Sat Feb 21 09:47:08.885769 2026] [:error] [pid 40758:tid 40841] [client 20.197.194.128:42928] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cbrfo.php"] [unique_id "aZkOnEBAHxvBM3i9iKHxPAAAAJM"]
[Sat Feb 21 09:47:09.504108 2026] [:error] [pid 40871:tid 40878] [client 20.197.194.128:65366] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aZkOnTqDikjdiOZeJyUVxwAAAMU"]
[Sat Feb 21 09:47:10.123612 2026] [:error] [pid 40758:tid 40839] [client 20.197.194.128:62315] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aZkOnkBAHxvBM3i9iKHxPgAAAJE"]
[Sat Feb 21 09:47:10.739806 2026] [:error] [pid 11941:tid 11961] [client 20.197.194.128:64911] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aZkOnnTUkHs3EVWllKkT2AAAAZI"]
[Sat Feb 21 09:47:11.355502 2026] [:error] [pid 40756:tid 40774] [client 20.197.194.128:64943] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aZkOnwNlDP60sLYgqXIvDgAAAAg"]
[Sat Feb 21 09:47:11.972816 2026] [:error] [pid 11743:tid 11761] [client 20.197.194.128:62803] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aZkOnwALoZZjiTbGvqWRNQAAAVA"]
[Sat Feb 21 09:47:12.588212 2026] [:error] [pid 40757:tid 40817] [client 20.197.194.128:62853] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aZkOoKg_MKVL7zhH7dx_RwAAAFY"]
[Sat Feb 21 09:47:13.203791 2026] [:error] [pid 40756:tid 40772] [client 20.197.194.128:65373] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aZkOoQNlDP60sLYgqXIvEwAAAAY"]
[Sat Feb 21 09:47:13.818632 2026] [:error] [pid 40756:tid 40770] [client 20.197.194.128:65374] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aZkOoQNlDP60sLYgqXIvFgAAAAQ"]
[Sat Feb 21 09:47:14.434944 2026] [:error] [pid 40756:tid 40767] [client 20.197.194.128:64901] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aZkOogNlDP60sLYgqXIvGgAAAAE"]
[Sat Feb 21 09:47:15.051074 2026] [:error] [pid 40756:tid 40777] [client 20.197.194.128:64904] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aZkOowNlDP60sLYgqXIvHQAAAAs"]
[Sat Feb 21 09:47:15.683177 2026] [:error] [pid 40758:tid 40842] [client 20.197.194.128:65404] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aZkOo0BAHxvBM3i9iKHxRQAAAJQ"]
[Sat Feb 21 09:47:16.300300 2026] [:error] [pid 40756:tid 40771] [client 20.197.194.128:42932] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aZkOpANlDP60sLYgqXIvIQAAAAU"]
[Sat Feb 21 09:47:16.918080 2026] [:error] [pid 40757:tid 40802] [client 20.197.194.128:64833] [client 20.197.194.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aZkOpKg_MKVL7zhH7dx_TgAAAEc"]
[Sat Feb 21 09:47:17.534719 2026] [:error] [pid 40756:tid 40778] [client 20.197.194.128:65419] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xfile25.php"] [unique_id "aZkOpQNlDP60sLYgqXIvJAAAAAw"]
[Sat Feb 21 09:47:18.151927 2026] [:error] [pid 40757:tid 40806] [client 20.197.194.128:64952] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xfile25.php"] [unique_id "aZkOpqg_MKVL7zhH7dx_TwAAAEs"]
[Sat Feb 21 09:47:18.787907 2026] [:error] [pid 11743:tid 11748] [client 20.197.194.128:62296] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xfile25.php"] [unique_id "aZkOpgALoZZjiTbGvqWRPgAAAUM"]
[Sat Feb 21 09:47:19.404900 2026] [:error] [pid 40756:tid 40773] [client 20.197.194.128:26969] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aZkOpwNlDP60sLYgqXIvMQAAAAc"]
[Sat Feb 21 09:47:20.024607 2026] [:error] [pid 11941:tid 11944] [client 20.197.194.128:42894] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/muzu.php"] [unique_id "aZkOqHTUkHs3EVWllKkT4AAAAYE"]
[Sat Feb 21 09:47:20.641500 2026] [:error] [pid 40756:tid 40782] [client 20.197.194.128:42938] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/muzu.php"] [unique_id "aZkOqANlDP60sLYgqXIvNAAAABA"]
[Sat Feb 21 09:47:21.283754 2026] [:error] [pid 40758:tid 40835] [client 20.197.194.128:64187] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZkOqUBAHxvBM3i9iKHxTgAAAI0"]
[Sat Feb 21 09:47:21.900362 2026] [:error] [pid 40758:tid 40833] [client 20.197.194.128:62876] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZkOqUBAHxvBM3i9iKHxUAAAAIs"]
[Sat Feb 21 09:47:22.519334 2026] [:error] [pid 11941:tid 11958] [client 20.197.194.128:62870] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZkOqnTUkHs3EVWllKkT4gAAAY8"]
[Sat Feb 21 09:47:23.133827 2026] [:error] [pid 22558:tid 22578] [client 20.197.194.128:65391] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZkOqyrVaIb2gXsVbDqD1QAAARI"]
[Sat Feb 21 09:47:23.750025 2026] [:error] [pid 22558:tid 22563] [client 20.197.194.128:26971] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aZkOqyrVaIb2gXsVbDqD1gAAAQM"]
[Sat Feb 21 09:47:24.372876 2026] [:error] [pid 40757:tid 40812] [client 20.197.194.128:63648] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZkOrKg_MKVL7zhH7dx_UQAAAFE"]
[Sat Feb 21 09:47:24.988087 2026] [:error] [pid 22558:tid 22568] [client 20.197.194.128:64851] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZkOrCrVaIb2gXsVbDqD2QAAAQg"]
[Sat Feb 21 09:47:25.614791 2026] [:error] [pid 22558:tid 22574] [client 20.197.194.128:64174] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZkOrSrVaIb2gXsVbDqD2wAAAQ4"]
[Sat Feb 21 09:47:26.231819 2026] [:error] [pid 40757:tid 40798] [client 20.197.194.128:26979] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZkOrqg_MKVL7zhH7dx_VQAAAEM"]
[Sat Feb 21 09:47:26.846898 2026] [:error] [pid 40756:tid 40784] [client 20.197.194.128:64076] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZkOrgNlDP60sLYgqXIvOAAAABI"]
[Sat Feb 21 09:47:27.461534 2026] [:error] [pid 40871:tid 40892] [client 20.197.194.128:26992] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZkOrzqDikjdiOZeJyUV5wAAANM"]
[Sat Feb 21 09:47:28.076903 2026] [:error] [pid 11941:tid 11960] [client 20.197.194.128:26946] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZkOsHTUkHs3EVWllKkT6gAAAZE"]
[Sat Feb 21 09:47:28.691935 2026] [:error] [pid 11941:tid 11944] [client 20.197.194.128:65468] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZkOsHTUkHs3EVWllKkT7QAAAYE"]
[Sat Feb 21 09:47:29.334378 2026] [:error] [pid 22558:tid 22561] [client 20.197.194.128:27006] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aZkOsSrVaIb2gXsVbDqD3wAAAQE"]
[Sat Feb 21 09:47:29.950894 2026] [:error] [pid 40757:tid 40813] [client 20.197.194.128:65413] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aZkOsag_MKVL7zhH7dx_WgAAAFI"]
[Sat Feb 21 09:47:30.568311 2026] [:error] [pid 40757:tid 40816] [client 20.197.194.128:64835] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aZkOsqg_MKVL7zhH7dx_XQAAAFU"]
[Sat Feb 21 09:47:31.189674 2026] [:error] [pid 40871:tid 40876] [client 20.197.194.128:26946] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZkOszqDikjdiOZeJyUV6wAAAMM"]
[Sat Feb 21 09:47:31.805616 2026] [:error] [pid 40871:tid 40875] [client 20.197.194.128:26960] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZkOszqDikjdiOZeJyUV7QAAAMI"]
[Sat Feb 21 09:47:32.426704 2026] [:error] [pid 40756:tid 40774] [client 20.197.194.128:62852] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZkOtANlDP60sLYgqXIvSQAAAAg"]
[Sat Feb 21 09:47:33.045329 2026] [:error] [pid 40757:tid 40795] [client 20.197.194.128:65458] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZkOtag_MKVL7zhH7dx_XwAAAEA"]
[Sat Feb 21 09:47:33.661749 2026] [:error] [pid 40756:tid 40766] [client 20.197.194.128:62846] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZkOtQNlDP60sLYgqXIvTwAAAAA"]
[Sat Feb 21 09:47:34.277925 2026] [:error] [pid 40758:tid 40839] [client 20.197.194.128:62864] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZkOtkBAHxvBM3i9iKHxXgAAAJE"]
[Sat Feb 21 09:47:34.893567 2026] [:error] [pid 40756:tid 40768] [client 20.197.194.128:62307] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZkOtgNlDP60sLYgqXIvUwAAAAI"]
[Sat Feb 21 09:47:35.510703 2026] [:error] [pid 40756:tid 40784] [client 20.197.194.128:63609] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZkOtwNlDP60sLYgqXIvVAAAABI"]
[Sat Feb 21 09:47:36.127705 2026] [:error] [pid 40758:tid 40828] [client 20.197.194.128:62787] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZkOuEBAHxvBM3i9iKHxXwAAAIY"]
[Sat Feb 21 09:47:36.745097 2026] [:error] [pid 11743:tid 11755] [client 20.197.194.128:42921] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZkOuAALoZZjiTbGvqWRVwAAAUo"]
[Sat Feb 21 09:47:37.360672 2026] [:error] [pid 40756:tid 40773] [client 20.197.194.128:65380] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZkOuQNlDP60sLYgqXIvWQAAAAc"]
[Sat Feb 21 09:47:37.976032 2026] [:error] [pid 40756:tid 40787] [client 20.197.194.128:64076] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZkOuQNlDP60sLYgqXIvXAAAABU"]
[Sat Feb 21 09:47:38.593776 2026] [:error] [pid 40756:tid 40779] [client 20.197.194.128:62276] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZkOugNlDP60sLYgqXIvYAAAAA0"]
[Sat Feb 21 09:47:39.208945 2026] [:error] [pid 40871:tid 40897] [client 20.197.194.128:42923] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZkOuzqDikjdiOZeJyUV-AAAANg"]
[Sat Feb 21 09:47:39.826839 2026] [:error] [pid 40756:tid 40769] [client 20.197.194.128:62879] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aZkOuwNlDP60sLYgqXIvYQAAAAM"]
[Sat Feb 21 09:47:40.462768 2026] [:error] [pid 40756:tid 40788] [client 20.197.194.128:64841] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aZkOvANlDP60sLYgqXIvYgAAABY"]
[Sat Feb 21 09:47:41.078969 2026] [:error] [pid 40871:tid 40890] [client 20.197.194.128:62790] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aZkOvTqDikjdiOZeJyUV_gAAANE"]
[Sat Feb 21 09:47:41.695492 2026] [:error] [pid 40756:tid 40773] [client 20.197.194.128:26986] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aZkOvQNlDP60sLYgqXIvZQAAAAc"]
[Sat Feb 21 09:47:42.350448 2026] [:error] [pid 11743:tid 11763] [client 20.197.194.128:64950] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "aZkOvgALoZZjiTbGvqWRXgAAAVI"]
[Sat Feb 21 09:47:42.967316 2026] [:error] [pid 11743:tid 11747] [client 20.197.194.128:62323] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aZkOvgALoZZjiTbGvqWRYAAAAUI"]
[Sat Feb 21 09:47:43.583833 2026] [:error] [pid 11743:tid 11759] [client 20.197.194.128:26998] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aZkOvwALoZZjiTbGvqWRYQAAAU4"]
[Sat Feb 21 09:47:44.231235 2026] [:error] [pid 11941:tid 11943] [client 20.197.194.128:62982] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aZkOwHTUkHs3EVWllKkUBwAAAYA"]
[Sat Feb 21 09:47:44.861178 2026] [:error] [pid 11743:tid 11764] [client 20.197.194.128:62785] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aZkOwAALoZZjiTbGvqWRZQAAAVM"]
[Sat Feb 21 09:47:45.476423 2026] [:error] [pid 40871:tid 40885] [client 20.197.194.128:42926] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aZkOwTqDikjdiOZeJyUWAwAAAMw"]
[Sat Feb 21 09:47:46.113981 2026] [:error] [pid 40757:tid 40797] [client 20.197.194.128:64916] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aZkOwqg_MKVL7zhH7dx_bwAAAEI"]
[Sat Feb 21 09:47:46.730749 2026] [:error] [pid 11743:tid 11757] [client 20.197.194.128:64918] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aZkOwgALoZZjiTbGvqWRaQAAAUw"]
[Sat Feb 21 09:47:47.347306 2026] [:error] [pid 40758:tid 40842] [client 20.197.194.128:42880] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aZkOw0BAHxvBM3i9iKHxZAAAAJQ"]
[Sat Feb 21 09:47:47.964349 2026] [:error] [pid 40756:tid 40773] [client 20.197.194.128:26949] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZkOwwNlDP60sLYgqXIvdwAAAAc"]
[Sat Feb 21 09:47:48.607521 2026] [:error] [pid 40757:tid 40809] [client 20.197.194.128:26952] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aZkOxKg_MKVL7zhH7dx_cgAAAE4"]
[Sat Feb 21 09:47:49.225725 2026] [:error] [pid 40756:tid 40766] [client 20.197.194.128:64854] [client 20.197.194.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nyan.php"] [unique_id "aZkOxQNlDP60sLYgqXIvfgAAAAA"]
[Sat Feb 21 09:55:07.055532 2026] [:error] [pid 11743:tid 11762] [client 60.188.57.0:43801] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZkQewALoZZjiTbGvqWT-QAAAVE"]
[Sat Feb 21 09:59:31.147450 2026] [:error] [pid 40756:tid 40787] [client 179.189.47.7:22262] [client 179.189.47.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.189.47.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZkRgwNlDP60sLYgqXI0bAAAABU"]
[Sat Feb 21 10:17:01.018869 2026] [:error] [pid 40757:tid 40797] [client 173.239.240.152:60913] [client 173.239.240.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.152, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZkVnag_MKVL7zhH7dyI9AAAAEI"]
[Sat Feb 21 11:05:04.519503 2026] [:error] [pid 40756:tid 40785] [client 173.239.240.146:55847] [client 173.239.240.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZkg4ANlDP60sLYgqXJN1AAAABM"]
[Sat Feb 21 11:49:15.118486 2026] [:error] [pid 40757:tid 40801] [client 51.195.103.76:9558] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZkrO6g_MKVL7zhH7dyoOAAAAEY"]
[Sat Feb 21 11:49:17.433215 2026] [:error] [pid 40756:tid 40785] [client 51.195.103.76:9570] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZkrPQNlDP60sLYgqXJZ9AAAABM"]
[Sat Feb 21 11:49:19.983650 2026] [:error] [pid 11743:tid 11749] [client 51.195.103.76:9572] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZkrPwALoZZjiTbGvqW2VQAAAUQ"]
[Sat Feb 21 11:49:22.504007 2026] [:error] [pid 40871:tid 40881] [client 51.195.103.76:14594] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZkrQjqDikjdiOZeJyU0GQAAAMg"]
[Sat Feb 21 11:49:25.121533 2026] [:error] [pid 40758:tid 40828] [client 51.195.103.76:14602] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZkrRUBAHxvBM3i9iKERFQAAAIY"]
[Sat Feb 21 11:49:27.597793 2026] [:error] [pid 40757:tid 40812] [client 51.195.103.76:14614] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZkrR6g_MKVL7zhH7dyoTAAAAFE"]
[Sat Feb 21 11:49:30.186404 2026] [:error] [pid 40757:tid 40815] [client 51.195.103.76:14628] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZkrSqg_MKVL7zhH7dyoTQAAAFQ"]
[Sat Feb 21 11:49:32.629712 2026] [:error] [pid 40871:tid 40882] [client 51.195.103.76:3952] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZkrTDqDikjdiOZeJyU0JgAAAMk"]
[Sat Feb 21 11:49:35.299762 2026] [:error] [pid 40757:tid 40813] [client 51.195.103.76:3956] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZkrT6g_MKVL7zhH7dyoWQAAAFI"]
[Sat Feb 21 11:49:37.780883 2026] [:error] [pid 40756:tid 40783] [client 51.195.103.76:3962] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZkrUQNlDP60sLYgqXJaEwAAABE"]
[Sat Feb 21 11:49:40.158257 2026] [:error] [pid 40871:tid 40885] [client 51.195.103.76:3972] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZkrVDqDikjdiOZeJyU0LQAAAMw"]
[Sat Feb 21 11:49:42.680986 2026] [:error] [pid 40757:tid 40818] [client 51.195.103.76:38656] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZkrVqg_MKVL7zhH7dyoXwAAAFc"]
[Sat Feb 21 11:49:45.143300 2026] [:error] [pid 11743:tid 11745] [client 51.195.103.76:38662] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZkrWQALoZZjiTbGvqW2eAAAAUA"]
[Sat Feb 21 11:49:47.662642 2026] [:error] [pid 11941:tid 11957] [client 51.195.103.76:38664] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZkrW3TUkHs3EVWllKkx2wAAAY4"]
[Sat Feb 21 11:49:50.011388 2026] [:error] [pid 11941:tid 11956] [client 51.195.103.76:38678] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZkrXnTUkHs3EVWllKkx3gAAAY0"]
[Sat Feb 21 11:49:52.326809 2026] [:error] [pid 40757:tid 40810] [client 51.195.103.76:15588] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZkrYKg_MKVL7zhH7dyobwAAAE8"]
[Sat Feb 21 11:49:54.816725 2026] [:error] [pid 40757:tid 40813] [client 51.195.103.76:15596] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZkrYqg_MKVL7zhH7dyodAAAAFI"]
[Sat Feb 21 11:49:57.174873 2026] [:error] [pid 40758:tid 40836] [client 51.195.103.76:15612] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZkrZUBAHxvBM3i9iKERQQAAAI4"]
[Sat Feb 21 11:49:59.650215 2026] [:error] [pid 40756:tid 40780] [client 51.195.103.76:15616] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZkrZwNlDP60sLYgqXJaIwAAAA4"]
[Sat Feb 21 11:50:02.162323 2026] [:error] [pid 40756:tid 40771] [client 51.195.103.76:47266] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZkragNlDP60sLYgqXJaKQAAAAU"]
[Sat Feb 21 11:50:04.516461 2026] [:error] [pid 11743:tid 11746] [client 51.195.103.76:47278] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZkrbAALoZZjiTbGvqW2jAAAAUE"]
[Sat Feb 21 11:53:16.104239 2026] [:error] [pid 22558:tid 22575] [client 173.239.240.172:32423] [client 173.239.240.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZksLCrVaIb2gXsVbDqguwAAAQ8"]
[Sat Feb 21 12:41:32.957148 2026] [:error] [pid 22558:tid 22565] [client 173.239.240.156:23051] [client 173.239.240.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.156, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZk3fCrVaIb2gXsVbDqrmAAAAQU"]
[Sat Feb 21 13:34:08.052837 2026] [:error] [pid 11743:tid 11750] [client 173.239.240.164:36329] [client 173.239.240.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.164, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZlD0AALoZZjiTbGvqXSDQAAAUU"]
[Sat Feb 21 14:22:12.860245 2026] [:error] [pid 40757:tid 40813] [client 173.239.240.161:33035] [client 173.239.240.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.161, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZlPFKg_MKVL7zhH7dzb4QAAAFI"]
[Sat Feb 21 15:04:00.018066 2026] [:error] [pid 40757:tid 40796] [client 179.189.47.7:24672] [client 179.189.47.7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZlY4Kg_MKVL7zhH7dzlhwAAAEE"]
[Sat Feb 21 15:05:11.223876 2026] [:error] [pid 22558:tid 22577] [client 179.189.47.7:23993] [client 179.189.47.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.189.47.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZlZJyrVaIb2gXsVbDrQtwAAARE"]
[Sat Feb 21 15:10:08.411076 2026] [:error] [pid 11743:tid 11745] [client 173.239.240.159:43729] [client 173.239.240.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.159, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZlaUAALoZZjiTbGvqXnVgAAAUA"]
[Sat Feb 21 15:57:59.749473 2026] [:error] [pid 40758:tid 40841] [client 43.166.128.86:48804] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZllh0BAHxvBM3i9iKFHZwAAAJM"]
[Sat Feb 21 15:58:05.540919 2026] [:error] [pid 40757:tid 40797] [client 173.239.240.173:33791] [client 173.239.240.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.173, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZlljag_MKVL7zhH7dzzRwAAAEI"]
[Sat Feb 21 16:10:32.418803 2026] [:error] [pid 40758:tid 40823] [client 122.51.236.174:37090] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZloeEBAHxvBM3i9iKFLLgAAAIE"]
[Sat Feb 21 16:46:11.124885 2026] [:error] [pid 40756:tid 40779] [client 173.239.240.155:27913] [client 173.239.240.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.155, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZlw0wNlDP60sLYgqXKptgAAAA0"]
[Sat Feb 21 17:33:59.877215 2026] [:error] [pid 40757:tid 40811] [client 173.239.240.173:39535] [client 173.239.240.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.173, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZl8B6g_MKVL7zhH7dwR8AAAAFA"]
[Sat Feb 21 18:22:14.746426 2026] [:error] [pid 40758:tid 40835] [client 173.239.240.161:25373] [client 173.239.240.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.161, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZmHVkBAHxvBM3i9iKFucQAAAI0"]
[Sat Feb 21 19:03:41.235176 2026] [:error] [pid 36509:tid 36527] [client 173.239.240.150:36375] [client 173.239.240.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZmRDTG8U28d2EFbEqWWcwAAAdA"]
[Sat Feb 21 19:21:27.091594 2026] [:error] [pid 11941:tid 11945] [client 173.239.240.171:55491] [client 173.239.240.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZmVN3TUkHs3EVWllKnEIAAAAYI"]
[Sat Feb 21 19:57:46.766078 2026] [:error] [pid 40758:tid 40825] [client 173.239.240.167:20753] [client 173.239.240.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.167, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZmdukBAHxvBM3i9iKF9PwAAAIM"]
[Sat Feb 21 20:46:35.476762 2026] [:error] [pid 36509:tid 36521] [client 173.239.240.156:38139] [client 173.239.240.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.156, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZmpKzG8U28d2EFbEqWxRAAAAco"]
[Sun Feb 22 00:00:03.371935 2026] [:error] [pid 53976:tid 54024] [client 209.87.169.127:38207] [client 209.87.169.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.127, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZnWg9BEV5I20TLqUt7h8wAAApE"]
[Sun Feb 22 01:45:51.937941 2026] [:error] [pid 4789:tid 4792] [client 193.70.46.38:45878] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aZnvT69_231lp37V1xxQQwAAAQE"]
[Sun Feb 22 01:45:54.505164 2026] [:error] [pid 3516:tid 3541] [client 193.70.46.38:53648] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aZnvUktaWLejEJFWY3E9JQAAANY"]
[Sun Feb 22 01:45:57.103632 2026] [:error] [pid 3204:tid 3476] [client 193.70.46.38:53654] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZnvVXAwnUMG8727rz4V5QAAAIo"]
[Sun Feb 22 01:45:59.442600 2026] [:error] [pid 3179:tid 3414] [client 193.70.46.38:53662] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZnvV9gAWCcL8bTGJUUsfQAAAAI"]
[Sun Feb 22 01:46:01.933639 2026] [:error] [pid 3179:tid 3424] [client 193.70.46.38:53664] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZnvWdgAWCcL8bTGJUUsiAAAAAw"]
[Sun Feb 22 01:46:04.331617 2026] [:error] [pid 3204:tid 3489] [client 193.70.46.38:35938] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZnvXHAwnUMG8727rz4V-AAAAJc"]
[Sun Feb 22 01:46:07.039669 2026] [:error] [pid 3516:tid 3524] [client 193.70.46.38:35944] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aZnvX0taWLejEJFWY3E9OgAAAMU"]
[Sun Feb 22 01:46:09.469537 2026] [:error] [pid 4789:tid 4810] [client 193.70.46.38:35946] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZnvYa9_231lp37V1xxQdQAAARM"]
[Sun Feb 22 01:46:12.055380 2026] [:error] [pid 3195:tid 3456] [client 193.70.46.38:35954] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZnvZA28anZ1nWyZCI5DJgAAAFE"]
[Sun Feb 22 01:46:14.461559 2026] [:error] [pid 3195:tid 3447] [client 193.70.46.38:50352] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZnvZg28anZ1nWyZCI5DLgAAAEg"]
[Sun Feb 22 01:46:16.835642 2026] [:error] [pid 3195:tid 3461] [client 193.70.46.38:50354] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZnvaA28anZ1nWyZCI5DOwAAAFY"]
[Sun Feb 22 01:46:19.376287 2026] [:error] [pid 3195:tid 3445] [client 193.70.46.38:50362] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZnvaw28anZ1nWyZCI5DQQAAAEY"]
[Sun Feb 22 01:46:21.873288 2026] [:error] [pid 3516:tid 3524] [client 193.70.46.38:50364] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZnvbUtaWLejEJFWY3E9aQAAAMU"]
[Sun Feb 22 01:46:24.181044 2026] [:error] [pid 3204:tid 3471] [client 193.70.46.38:58684] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZnvcHAwnUMG8727rz4WPAAAAIU"]
[Sun Feb 22 01:46:26.749672 2026] [:error] [pid 3195:tid 3452] [client 193.70.46.38:58686] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZnvcg28anZ1nWyZCI5DXwAAAE0"]
[Sun Feb 22 01:46:29.305079 2026] [:error] [pid 4789:tid 4813] [client 193.70.46.38:58694] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZnvda9_231lp37V1xxQwgAAARY"]
[Sun Feb 22 01:46:31.693384 2026] [:error] [pid 4789:tid 4803] [client 193.70.46.38:58698] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aZnvd69_231lp37V1xxQyQAAAQw"]
[Sun Feb 22 01:46:33.992639 2026] [:error] [pid 4789:tid 4814] [client 193.70.46.38:43284] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZnvea9_231lp37V1xxQ0AAAARc"]
[Sun Feb 22 01:46:36.368251 2026] [:error] [pid 4789:tid 4809] [client 193.70.46.38:43298] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZnvfK9_231lp37V1xxQ4gAAARI"]
[Sun Feb 22 01:46:38.769324 2026] [:error] [pid 4789:tid 4813] [client 193.70.46.38:43304] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZnvfq9_231lp37V1xxQ7gAAARY"]
[Sun Feb 22 01:46:41.182007 2026] [:error] [pid 3195:tid 3455] [client 193.70.46.38:43314] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZnvgQ28anZ1nWyZCI5DjAAAAFA"]
[Sun Feb 22 01:46:43.710315 2026] [:error] [pid 4789:tid 4799] [client 193.70.46.38:42888] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aZnvg69_231lp37V1xxRDwAAAQg"]
[Sun Feb 22 01:46:46.124173 2026] [:error] [pid 4789:tid 4814] [client 193.70.46.38:42902] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZnvhq9_231lp37V1xxRFQAAARc"]
[Sun Feb 22 01:46:48.523389 2026] [:error] [pid 4789:tid 4800] [client 193.70.46.38:42906] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aZnviK9_231lp37V1xxRIQAAAQk"]
[Sun Feb 22 01:47:15.077341 2026] [:error] [pid 3516:tid 3522] [client 193.70.46.38:42912] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aZnvo0taWLejEJFWY3E-BwAAAMM"]
[Sun Feb 22 01:47:17.405610 2026] [:error] [pid 3179:tid 3415] [client 193.70.46.38:41220] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aZnvpdgAWCcL8bTGJUUtGQAAAAM"]
[Sun Feb 22 01:47:19.916778 2026] [:error] [pid 3516:tid 3533] [client 193.70.46.38:41230] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZnvp0taWLejEJFWY3E-CwAAAM4"]
[Sun Feb 22 01:47:22.422900 2026] [:error] [pid 3204:tid 3479] [client 193.70.46.38:41242] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aZnvqnAwnUMG8727rz4WoQAAAI0"]
[Sun Feb 22 01:47:24.777390 2026] [:error] [pid 4789:tid 4805] [client 193.70.46.38:47788] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aZnvrK9_231lp37V1xxRYQAAAQ4"]
[Sun Feb 22 01:47:27.321256 2026] [:error] [pid 4789:tid 4799] [client 193.70.46.38:47794] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZnvr69_231lp37V1xxRagAAAQg"]
[Sun Feb 22 01:47:29.700519 2026] [:error] [pid 3516:tid 3529] [client 193.70.46.38:47806] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZnvsUtaWLejEJFWY3E-GAAAAMo"]
[Sun Feb 22 01:47:32.209723 2026] [:error] [pid 4789:tid 4815] [client 193.70.46.38:47814] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aZnvtK9_231lp37V1xxRbwAAARg"]
[Sun Feb 22 01:47:34.713385 2026] [:error] [pid 3204:tid 3485] [client 193.70.46.38:35886] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZnvtnAwnUMG8727rz4WugAAAJM"]
[Sun Feb 22 01:47:37.234031 2026] [:error] [pid 3204:tid 3473] [client 193.70.46.38:35902] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZnvuXAwnUMG8727rz4WyQAAAIc"]
[Sun Feb 22 01:47:39.711755 2026] [:error] [pid 3179:tid 3422] [client 193.70.46.38:35916] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZnvu9gAWCcL8bTGJUUtNQAAAAo"]
[Sun Feb 22 01:47:42.230978 2026] [:error] [pid 3195:tid 3460] [client 193.70.46.38:35920] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZnvvg28anZ1nWyZCI5D-wAAAFU"]
[Sun Feb 22 01:47:44.731615 2026] [:error] [pid 3195:tid 3439] [client 193.70.46.38:55220] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZnvwA28anZ1nWyZCI5D_gAAAEA"]
[Sun Feb 22 01:47:47.224146 2026] [:error] [pid 3195:tid 3442] [client 193.70.46.38:55236] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZnvww28anZ1nWyZCI5EAwAAAEM"]
[Sun Feb 22 01:47:49.732618 2026] [:error] [pid 4789:tid 4809] [client 193.70.46.38:55238] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZnvxa9_231lp37V1xxRlAAAARI"]
[Sun Feb 22 01:47:52.225365 2026] [:error] [pid 3179:tid 3424] [client 193.70.46.38:55246] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZnvyNgAWCcL8bTGJUUtRgAAAAw"]
[Sun Feb 22 01:47:54.727641 2026] [:error] [pid 3516:tid 3540] [client 193.70.46.38:57246] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZnvyktaWLejEJFWY3E-TwAAANU"]
[Sun Feb 22 03:30:01.184317 2026] [:error] [pid 1459:tid 1479] [client 209.87.169.131:56795] [client 209.87.169.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.131, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZoHuQ81_IonH7sstu2k9gAAABA"]
[Sun Feb 22 03:47:14.922730 2026] [:error] [pid 44392:tid 44443] [client 209.87.169.152:26327] [client 209.87.169.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.152, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZoLwiMeNHF38yLF2roitAAAAEs"]
[Sun Feb 22 04:00:07.699596 2026] [:error] [pid 10537:tid 10558] [client 43.135.185.59:33474] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZoOx7gCiSojLQQBckjACQAAARM"]
[Sun Feb 22 04:04:29.387706 2026] [:error] [pid 9589:tid 9654] [client 209.87.169.148:21751] [client 209.87.169.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZoPzdr-1mylR_FoXQX9sAAAAIM"]
[Sun Feb 22 04:21:34.638998 2026] [:error] [pid 9589:tid 9652] [client 45.131.195.112:39203] [client 45.131.195.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZoTztr-1mylR_FoXQUEvAAAAIE"]
[Sun Feb 22 04:38:45.927157 2026] [:error] [pid 9695:tid 9708] [client 209.87.169.138:38665] [client 209.87.169.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZoX1VpPqolBNLmJ4eoYywAAAMs"]
[Sun Feb 22 04:44:06.666433 2026] [autoindex:error] [pid 10537:tid 10563] [client 20.197.58.121:17384] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 04:44:06.825654 2026] [autoindex:error] [pid 10537:tid 10545] [client 20.197.58.121:17384] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 04:44:06.997027 2026] [autoindex:error] [pid 10537:tid 10543] [client 20.197.58.121:17384] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 04:44:07.142634 2026] [autoindex:error] [pid 10537:tid 10542] [client 20.197.58.121:17384] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 04:44:07.287166 2026] [autoindex:error] [pid 10537:tid 10552] [client 20.197.58.121:17384] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 04:44:07.431870 2026] [autoindex:error] [pid 10537:tid 10546] [client 20.197.58.121:17384] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 04:44:07.578324 2026] [autoindex:error] [pid 10537:tid 10540] [client 20.197.58.121:17384] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Feb 22 04:44:08.358233 2026] [:error] [pid 10537:tid 10548] [client 20.197.58.121:17384] [client 20.197.58.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aZoZGLgCiSojLQQBckjXLwAAAQk"]
[Sun Feb 22 04:44:09.016020 2026] [:error] [pid 9695:tid 9705] [client 20.197.58.121:16549] [client 20.197.58.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aZoZGVpPqolBNLmJ4eoasgAAAMg"]
[Sun Feb 22 04:44:09.616650 2026] [:error] [pid 9695:tid 9702] [client 20.197.58.121:13868] [client 20.197.58.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aZoZGVpPqolBNLmJ4eoaswAAAMU"]
[Sun Feb 22 04:44:10.231631 2026] [:error] [pid 9588:tid 9624] [client 20.197.58.121:4277] [client 20.197.58.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aZoZGmjNBsxseiTcEllRGwAAAEA"]
[Sun Feb 22 04:55:49.947878 2026] [:error] [pid 9588:tid 9628] [client 209.87.169.154:27531] [client 209.87.169.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.154, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZob1WjNBsxseiTcEllVWQAAAEQ"]
[Sun Feb 22 05:07:46.215713 2026] [:error] [pid 9588:tid 9629] [client 51.83.237.175:37838] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZoeomjNBsxseiTcEllZYAAAAEU"]
[Sun Feb 22 05:07:48.882369 2026] [:error] [pid 10537:tid 10539] [client 51.83.237.175:59994] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZoepLgCiSojLQQBckjjfAAAAQA"]
[Sun Feb 22 05:07:51.580920 2026] [:error] [pid 9587:tid 9611] [client 51.83.237.175:59996] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZoep-hqt7NXCp-NupHhqwAAAA8"]
[Sun Feb 22 05:07:54.525649 2026] [:error] [pid 9695:tid 9720] [client 51.83.237.175:59998] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZoeqlpPqolBNLmJ4eokowAAANc"]
[Sun Feb 22 05:07:56.934990 2026] [:error] [pid 9588:tid 9636] [client 51.83.237.175:60008] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZoerGjNBsxseiTcEllZcwAAAEw"]
[Sun Feb 22 05:07:59.619245 2026] [:error] [pid 9695:tid 9705] [client 51.83.237.175:32838] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZoer1pPqolBNLmJ4eokrgAAAMg"]
[Sun Feb 22 05:08:02.465939 2026] [:error] [pid 10537:tid 10548] [client 51.83.237.175:32848] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZoesrgCiSojLQQBckjjpwAAAQk"]
[Sun Feb 22 05:08:05.207895 2026] [:error] [pid 9588:tid 9624] [client 51.83.237.175:32850] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZoetWjNBsxseiTcEllZgQAAAEA"]
[Sun Feb 22 05:08:07.936930 2026] [:error] [pid 10537:tid 10550] [client 51.83.237.175:60244] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZoet7gCiSojLQQBckjjsgAAAQs"]
[Sun Feb 22 05:08:11.101847 2026] [:error] [pid 10537:tid 10546] [client 51.83.237.175:60260] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZoeu7gCiSojLQQBckjjugAAAQc"]
[Sun Feb 22 05:08:15.277647 2026] [:error] [pid 10537:tid 10546] [client 51.83.237.175:60276] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZoev7gCiSojLQQBckjjwwAAAQc"]
[Sun Feb 22 05:08:17.897829 2026] [:error] [pid 9695:tid 9715] [client 51.83.237.175:40342] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZoewVpPqolBNLmJ4eokzwAAANI"]
[Sun Feb 22 05:08:20.835020 2026] [:error] [pid 10537:tid 10542] [client 51.83.237.175:40352] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZoexLgCiSojLQQBckjjygAAAQM"]
[Sun Feb 22 05:08:23.401336 2026] [:error] [pid 9589:tid 9651] [client 51.83.237.175:40354] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZoex9r-1mylR_FoXQUVSwAAAIA"]
[Sun Feb 22 05:08:26.856966 2026] [:error] [pid 9588:tid 9647] [client 51.83.237.175:40368] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZoeymjNBsxseiTcEllZpwAAAFc"]
[Sun Feb 22 05:08:29.892120 2026] [:error] [pid 9587:tid 9605] [client 51.83.237.175:37028] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZoezehqt7NXCp-NupHh5wAAAAk"]
[Sun Feb 22 05:08:32.735269 2026] [:error] [pid 10537:tid 10561] [client 51.83.237.175:37030] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZoe0LgCiSojLQQBckjj5gAAARY"]
[Sun Feb 22 05:08:35.703314 2026] [:error] [pid 9589:tid 9663] [client 51.83.237.175:37042] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZoe09r-1mylR_FoXQUVYwAAAIw"]
[Sun Feb 22 05:08:38.744784 2026] [:error] [pid 9588:tid 9648] [client 51.83.237.175:55068] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZoe1mjNBsxseiTcEllZuAAAAFg"]
[Sun Feb 22 05:08:41.381477 2026] [:error] [pid 9695:tid 9721] [client 51.83.237.175:55074] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZoe2VpPqolBNLmJ4eok5gAAANg"]
[Sun Feb 22 05:13:08.577572 2026] [:error] [pid 9588:tid 9638] [client 209.87.169.131:58137] [client 209.87.169.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.131, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZof5GjNBsxseiTcEllcagAAAE4"]
[Sun Feb 22 05:21:32.405428 2026] [:error] [pid 9587:tid 9617] [client 51.83.237.175:51332] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZoh3Ohqt7NXCp-NupHnsQAAABU"]
[Sun Feb 22 05:21:35.076606 2026] [:error] [pid 9588:tid 9632] [client 51.83.237.175:34360] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZoh32jNBsxseiTcEllfnAAAAEg"]
[Sun Feb 22 05:21:39.034388 2026] [:error] [pid 9695:tid 9709] [client 51.83.237.175:57868] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZoh41pPqolBNLmJ4eoreQAAAMw"]
[Sun Feb 22 05:21:41.815222 2026] [:error] [pid 9695:tid 9698] [client 51.83.237.175:57880] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZoh5VpPqolBNLmJ4eorgwAAAME"]
[Sun Feb 22 05:21:44.686020 2026] [:error] [pid 9695:tid 9705] [client 51.83.237.175:57896] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZoh6FpPqolBNLmJ4eorjQAAAMg"]
[Sun Feb 22 05:21:47.907226 2026] [:error] [pid 9695:tid 9699] [client 51.83.237.175:45324] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZoh61pPqolBNLmJ4eornAAAAMI"]
[Sun Feb 22 05:21:50.550489 2026] [:error] [pid 9588:tid 9631] [client 51.83.237.175:45332] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZoh7mjNBsxseiTcEllfqwAAAEc"]
[Sun Feb 22 05:21:54.252779 2026] [:error] [pid 9589:tid 9658] [client 51.83.237.175:45342] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZoh8tr-1mylR_FoXQUblgAAAIc"]
[Sun Feb 22 05:21:56.953403 2026] [:error] [pid 9587:tid 9603] [client 51.83.237.175:45358] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZoh9Ohqt7NXCp-NupHn4QAAAAc"]
[Sun Feb 22 05:21:59.518512 2026] [:error] [pid 10537:tid 10542] [client 51.83.237.175:44682] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZoh97gCiSojLQQBckjr0AAAAQM"]
[Sun Feb 22 05:22:02.370761 2026] [:error] [pid 9589:tid 9674] [client 51.83.237.175:44692] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZoh-tr-1mylR_FoXQUbpwAAAJc"]
[Sun Feb 22 05:22:04.974991 2026] [:error] [pid 9588:tid 9642] [client 51.83.237.175:44698] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZoh_GjNBsxseiTcEllf0AAAAFI"]
[Sun Feb 22 05:22:07.880271 2026] [:error] [pid 9589:tid 9661] [client 51.83.237.175:33792] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZoh_9r-1mylR_FoXQUbuQAAAIo"]
[Sun Feb 22 05:22:11.272653 2026] [:error] [pid 9587:tid 9597] [client 51.83.237.175:33806] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZoiA-hqt7NXCp-NupHn-AAAAAE"]
[Sun Feb 22 05:22:14.122569 2026] [:error] [pid 10537:tid 10550] [client 51.83.237.175:33818] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZoiBrgCiSojLQQBckjsBgAAAQs"]
[Sun Feb 22 05:22:16.673027 2026] [:error] [pid 10537:tid 10543] [client 51.83.237.175:33824] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZoiCLgCiSojLQQBckjsFwAAAQQ"]
[Sun Feb 22 05:22:20.039458 2026] [:error] [pid 9588:tid 9624] [client 51.83.237.175:45496] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZoiDGjNBsxseiTcEllf5AAAAEA"]
[Sun Feb 22 05:22:23.125774 2026] [:error] [pid 9695:tid 9714] [client 51.83.237.175:45512] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZoiD1pPqolBNLmJ4eor4gAAANE"]
[Sun Feb 22 05:22:26.049498 2026] [:error] [pid 10537:tid 10558] [client 51.83.237.175:45514] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZoiErgCiSojLQQBckjsTQAAARM"]
[Sun Feb 22 05:22:28.990226 2026] [:error] [pid 9587:tid 9598] [client 51.83.237.175:48298] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZoiFOhqt7NXCp-NupHoGwAAAAI"]
[Sun Feb 22 05:30:26.737864 2026] [:error] [pid 9587:tid 9604] [client 209.87.169.136:28383] [client 209.87.169.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.136, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZoj8uhqt7NXCp-NupHrSAAAAAg"]
[Sun Feb 22 05:47:47.747714 2026] [:error] [pid 9588:tid 9644] [client 45.131.195.148:28667] [client 45.131.195.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZooA2jNBsxseiTcEllpUwAAAFQ"]
[Sun Feb 22 05:59:17.855787 2026] [:error] [pid 9587:tid 9613] [client 216.81.248.168:37908] [client 216.81.248.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aZoqtehqt7NXCp-NupH2KQAAABE"]
[Sun Feb 22 06:05:02.258989 2026] [:error] [pid 9589:tid 9664] [client 209.87.169.149:47835] [client 209.87.169.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZosDtr-1mylR_FoXQUrwAAAAI0"]
[Sun Feb 22 06:22:27.584715 2026] [:error] [pid 9695:tid 9708] [client 209.87.169.149:57959] [client 209.87.169.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZowI1pPqolBNLmJ4epFLgAAAMs"]
[Sun Feb 22 06:39:41.341994 2026] [:error] [pid 9588:tid 9633] [client 209.87.169.144:58437] [client 209.87.169.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.144, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZo0LWjNBsxseiTcEll7JQAAAEk"]
[Sun Feb 22 06:56:46.004864 2026] [:error] [pid 9589:tid 9669] [client 209.87.169.139:27761] [client 209.87.169.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.139, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZo4Ltr-1mylR_FoXQU-mQAAAJI"]
[Sun Feb 22 07:14:09.798145 2026] [:error] [pid 10537:tid 10563] [client 45.131.195.241:46385] [client 45.131.195.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.241, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZo8QbgCiSojLQQBckgmlwAAARg"]
[Sun Feb 22 07:31:26.798980 2026] [:error] [pid 9695:tid 9718] [client 45.131.195.118:42189] [client 45.131.195.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.118, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZpATlpPqolBNLmJ4epl8QAAANU"]
[Sun Feb 22 07:48:41.568614 2026] [:error] [pid 9589:tid 9674] [client 209.87.169.133:24587] [client 209.87.169.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.133, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZpEWdr-1mylR_FoXQVWCgAAAJc"]
[Sun Feb 22 08:06:08.754402 2026] [:error] [pid 9695:tid 9717] [client 45.131.195.122:61725] [client 45.131.195.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.122, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZpIcFpPqolBNLmJ4ep4KwAAANQ"]
[Sun Feb 22 08:23:31.847070 2026] [:error] [pid 10537:tid 10540] [client 209.87.169.137:58243] [client 209.87.169.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.137, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZpMg7gCiSojLQQBckhAiwAAAQE"]
[Sun Feb 22 08:41:03.517609 2026] [:error] [pid 9695:tid 9716] [client 45.131.195.143:30909] [client 45.131.195.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.143, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZpQn1pPqolBNLmJ4eqLRwAAANM"]
[Sun Feb 22 08:55:00.062331 2026] [:error] [pid 9589:tid 9663] [client 43.164.196.57:43634] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZpT5Nr-1mylR_FoXQVywAAAAIw"]
[Sun Feb 22 09:16:09.355793 2026] [:error] [pid 12501:tid 12524] [client 209.87.169.135:39041] [client 209.87.169.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.135, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZpY2ZicztrbvinWGXMcbgAAAVU"]
[Sun Feb 22 09:33:55.079136 2026] [:error] [pid 9589:tid 9668] [client 173.239.214.57:65065] [client 173.239.214.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZpdA9r-1mylR_FoXQWHWgAAAJE"]
[Sun Feb 22 09:51:25.031804 2026] [:error] [pid 9695:tid 9704] [client 209.87.169.138:56031] [client 209.87.169.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZphHVpPqolBNLmJ4eqrewAAAMc"]
[Sun Feb 22 09:52:03.235786 2026] [:error] [pid 10537:tid 10555] [client 51.120.79.113:63142] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aZphQ7gCiSojLQQBckhfzgAAARA"]
[Sun Feb 22 09:52:03.797732 2026] [:error] [pid 12501:tid 12512] [client 51.120.79.113:36471] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aZphQ5icztrbvinWGXMwZgAAAUk"]
[Sun Feb 22 09:52:04.322898 2026] [:error] [pid 9587:tid 9610] [client 51.120.79.113:63838] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aZphROhqt7NXCp-NupFK4wAAAA4"]
[Sun Feb 22 09:52:04.842615 2026] [:error] [pid 9588:tid 9645] [client 51.120.79.113:64745] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aZphRGjNBsxseiTcElnAjAAAAFU"]
[Sun Feb 22 09:52:05.512253 2026] [:error] [pid 9589:tid 9653] [client 51.120.79.113:64345] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/baixy.php"] [unique_id "aZphRdr-1mylR_FoXQWOgQAAAII"]
[Sun Feb 22 09:52:21.102393 2026] [:error] [pid 10537:tid 10554] [client 51.120.79.113:27002] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zu.php"] [unique_id "aZphVbgCiSojLQQBckhf9AAAAQ8"]
[Sun Feb 22 09:52:21.727986 2026] [:error] [pid 9588:tid 9631] [client 51.120.79.113:63840] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zu.php"] [unique_id "aZphVWjNBsxseiTcElnArgAAAEc"]
[Sun Feb 22 09:52:22.286120 2026] [:error] [pid 9587:tid 9607] [client 51.120.79.113:50188] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zu.php"] [unique_id "aZphVuhqt7NXCp-NupFK9AAAAAs"]
[Sun Feb 22 09:52:23.037561 2026] [:error] [pid 12501:tid 12520] [client 51.120.79.113:26962] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zu.php"] [unique_id "aZphV5icztrbvinWGXMweAAAAVE"]
[Sun Feb 22 09:52:23.566592 2026] [:error] [pid 9587:tid 9620] [client 51.120.79.113:65017] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "aZphV-hqt7NXCp-NupFK-QAAABg"]
[Sun Feb 22 09:52:24.103506 2026] [:error] [pid 10537:tid 10561] [client 51.120.79.113:43634] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "aZphWLgCiSojLQQBckhgAQAAARY"]
[Sun Feb 22 09:52:24.623956 2026] [:error] [pid 9695:tid 9711] [client 51.120.79.113:50195] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "aZphWFpPqolBNLmJ4eqrrAAAAM4"]
[Sun Feb 22 09:52:25.173849 2026] [:error] [pid 9587:tid 9601] [client 51.120.79.113:63852] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "aZphWehqt7NXCp-NupFLAgAAAAU"]
[Sun Feb 22 09:52:25.695137 2026] [:error] [pid 9695:tid 9706] [client 51.120.79.113:37514] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZphWVpPqolBNLmJ4eqrrgAAAMk"]
[Sun Feb 22 09:52:26.258919 2026] [:error] [pid 9587:tid 9603] [client 51.120.79.113:54579] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZphWuhqt7NXCp-NupFLBAAAAAc"]
[Sun Feb 22 09:52:26.801065 2026] [:error] [pid 12501:tid 12513] [client 51.120.79.113:57214] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZphWpicztrbvinWGXMwiAAAAUo"]
[Sun Feb 22 09:52:28.408032 2026] [:error] [pid 12501:tid 12504] [client 51.120.79.113:4222] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZphXJicztrbvinWGXMwjQAAAUE"]
[Sun Feb 22 09:52:28.935063 2026] [:error] [pid 9587:tid 9602] [client 51.120.79.113:57163] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aZphXOhqt7NXCp-NupFLDAAAAAY"]
[Sun Feb 22 09:52:29.462691 2026] [:error] [pid 9588:tid 9632] [client 51.120.79.113:57204] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aZphXWjNBsxseiTcElnAvAAAAEg"]
[Sun Feb 22 09:52:31.068715 2026] [:error] [pid 9588:tid 9624] [client 51.120.79.113:64976] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aZphX2jNBsxseiTcElnAwAAAAEA"]
[Sun Feb 22 09:52:31.693243 2026] [:error] [pid 12501:tid 12525] [client 51.120.79.113:50208] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aZphX5icztrbvinWGXMwlAAAAVY"]
[Sun Feb 22 09:52:32.308652 2026] [:error] [pid 9587:tid 9616] [client 51.120.79.113:64996] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a332.php"] [unique_id "aZphYOhqt7NXCp-NupFLFQAAABQ"]
[Sun Feb 22 09:52:33.079611 2026] [:error] [pid 9588:tid 9627] [client 51.120.79.113:44307] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a332.php"] [unique_id "aZphYWjNBsxseiTcElnAxQAAAEM"]
[Sun Feb 22 09:52:33.662345 2026] [:error] [pid 9587:tid 9598] [client 51.120.79.113:64721] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a332.php"] [unique_id "aZphYehqt7NXCp-NupFLGAAAAAI"]
[Sun Feb 22 09:52:34.430683 2026] [:error] [pid 9587:tid 9614] [client 51.120.79.113:50236] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a332.php"] [unique_id "aZphYuhqt7NXCp-NupFLGQAAABI"]
[Sun Feb 22 09:52:38.324040 2026] [:error] [pid 9695:tid 9715] [client 51.120.79.113:64735] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bootstrap.php"] [unique_id "aZphZlpPqolBNLmJ4eqrygAAANI"]
[Sun Feb 22 09:52:38.881587 2026] [:error] [pid 9587:tid 9611] [client 51.120.79.113:57171] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bootstrap.php"] [unique_id "aZphZuhqt7NXCp-NupFLHwAAAA8"]
[Sun Feb 22 09:52:39.420344 2026] [:error] [pid 9695:tid 9706] [client 51.120.79.113:33690] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2.php"] [unique_id "aZphZ1pPqolBNLmJ4eqrzQAAAMk"]
[Sun Feb 22 09:52:39.984523 2026] [:error] [pid 9587:tid 9604] [client 51.120.79.113:43604] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2.php"] [unique_id "aZphZ-hqt7NXCp-NupFLIgAAAAg"]
[Sun Feb 22 09:52:40.511604 2026] [:error] [pid 9695:tid 9698] [client 51.120.79.113:64970] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2.php"] [unique_id "aZphaFpPqolBNLmJ4eqr0QAAAME"]
[Sun Feb 22 09:52:41.049646 2026] [:error] [pid 9589:tid 9654] [client 51.120.79.113:33691] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f2.php"] [unique_id "aZphadr-1mylR_FoXQWOzQAAAIM"]
[Sun Feb 22 09:52:41.777206 2026] [:error] [pid 12501:tid 12508] [client 51.120.79.113:64754] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "aZphaZicztrbvinWGXMwuwAAAUU"]
[Sun Feb 22 09:52:42.297628 2026] [:error] [pid 12501:tid 12519] [client 51.120.79.113:51250] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "aZphapicztrbvinWGXMwwgAAAVA"]
[Sun Feb 22 09:52:42.822667 2026] [:error] [pid 9588:tid 9630] [client 51.120.79.113:4163] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "aZphamjNBsxseiTcElnA5wAAAEY"]
[Sun Feb 22 09:52:43.343010 2026] [:error] [pid 9695:tid 9714] [client 51.120.79.113:33708] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "aZpha1pPqolBNLmJ4eqr1QAAANE"]
[Sun Feb 22 09:52:43.906139 2026] [:error] [pid 9695:tid 9704] [client 51.120.79.113:4185] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aZpha1pPqolBNLmJ4eqr1wAAAMc"]
[Sun Feb 22 09:52:44.424584 2026] [:error] [pid 9589:tid 9672] [client 51.120.79.113:37537] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aZphbNr-1mylR_FoXQWO4QAAAJU"]
[Sun Feb 22 09:52:44.945484 2026] [:error] [pid 12501:tid 12524] [client 51.120.79.113:43631] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aZphbJicztrbvinWGXMw0QAAAVU"]
[Sun Feb 22 09:52:45.464753 2026] [:error] [pid 9588:tid 9640] [client 51.120.79.113:57203] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aZphbWjNBsxseiTcElnA7QAAAFA"]
[Sun Feb 22 09:52:45.985269 2026] [:error] [pid 12501:tid 12512] [client 51.120.79.113:4731] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thui.php"] [unique_id "aZphbZicztrbvinWGXMw1AAAAUk"]
[Sun Feb 22 09:52:46.507396 2026] [:error] [pid 9695:tid 9715] [client 51.120.79.113:57191] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thui.php"] [unique_id "aZphblpPqolBNLmJ4eqr3AAAANI"]
[Sun Feb 22 09:52:47.027394 2026] [:error] [pid 9695:tid 9706] [client 51.120.79.113:33681] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thui.php"] [unique_id "aZphb1pPqolBNLmJ4eqr3wAAAMk"]
[Sun Feb 22 09:52:47.547905 2026] [:error] [pid 9695:tid 9709] [client 51.120.79.113:33665] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thui.php"] [unique_id "aZphb1pPqolBNLmJ4eqr5AAAAMw"]
[Sun Feb 22 09:52:48.073834 2026] [:error] [pid 9587:tid 9612] [client 51.120.79.113:47711] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aZphcOhqt7NXCp-NupFLQgAAABA"]
[Sun Feb 22 09:52:48.597235 2026] [:error] [pid 12501:tid 12506] [client 51.120.79.113:26952] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aZphcJicztrbvinWGXMw3wAAAUM"]
[Sun Feb 22 09:52:49.116362 2026] [:error] [pid 10537:tid 10545] [client 51.120.79.113:64989] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aZphcbgCiSojLQQBckhgOgAAAQY"]
[Sun Feb 22 09:52:49.637023 2026] [:error] [pid 9695:tid 9698] [client 51.120.79.113:51248] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aZphcVpPqolBNLmJ4eqr5gAAAME"]
[Sun Feb 22 09:52:51.156544 2026] [:error] [pid 9587:tid 9610] [client 51.120.79.113:59489] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fresh3.php"] [unique_id "aZphc-hqt7NXCp-NupFLRQAAAA4"]
[Sun Feb 22 09:52:51.683934 2026] [:error] [pid 9695:tid 9704] [client 51.120.79.113:59461] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fresh3.php"] [unique_id "aZphc1pPqolBNLmJ4eqr6wAAAMc"]
[Sun Feb 22 09:52:52.207851 2026] [:error] [pid 9588:tid 9628] [client 51.120.79.113:4721] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fresh3.php"] [unique_id "aZphdGjNBsxseiTcElnA9QAAAEQ"]
[Sun Feb 22 09:52:52.729437 2026] [:error] [pid 9695:tid 9720] [client 51.120.79.113:59498] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fresh3.php"] [unique_id "aZphdFpPqolBNLmJ4eqr7QAAANc"]
[Sun Feb 22 09:52:53.249880 2026] [:error] [pid 12501:tid 12525] [client 51.120.79.113:33726] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/selesai.php"] [unique_id "aZphdZicztrbvinWGXMw7gAAAVY"]
[Sun Feb 22 09:52:53.774288 2026] [:error] [pid 9695:tid 9708] [client 51.120.79.113:44327] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/selesai.php"] [unique_id "aZphdVpPqolBNLmJ4eqr7wAAAMs"]
[Sun Feb 22 09:53:01.322093 2026] [:error] [pid 9589:tid 9668] [client 51.120.79.113:4678] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/selesai.php"] [unique_id "aZphfdr-1mylR_FoXQWPCAAAAJE"]
[Sun Feb 22 09:53:01.843769 2026] [:error] [pid 9587:tid 9596] [client 51.120.79.113:50178] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/selesai.php"] [unique_id "aZphfehqt7NXCp-NupFLYgAAAAA"]
[Sun Feb 22 09:53:11.100776 2026] [:error] [pid 12501:tid 12522] [client 51.120.79.113:33685] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aZphh5icztrbvinWGXMxMQAAAVM"]
[Sun Feb 22 09:53:11.620358 2026] [:error] [pid 9589:tid 9675] [client 51.120.79.113:47705] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aZphh9r-1mylR_FoXQWPHwAAAJg"]
[Sun Feb 22 09:53:12.169064 2026] [:error] [pid 10537:tid 10540] [client 51.120.79.113:25466] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aZphiLgCiSojLQQBckhgaAAAAQE"]
[Sun Feb 22 09:53:12.688737 2026] [:error] [pid 10537:tid 10551] [client 51.120.79.113:43599] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aZphiLgCiSojLQQBckhgbgAAAQw"]
[Sun Feb 22 09:53:13.207132 2026] [:error] [pid 9695:tid 9716] [client 51.120.79.113:41397] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak.php"] [unique_id "aZphiVpPqolBNLmJ4eqsEAAAANM"]
[Sun Feb 22 09:53:13.726642 2026] [:error] [pid 10537:tid 10554] [client 51.120.79.113:59496] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak.php"] [unique_id "aZphibgCiSojLQQBckhgdQAAAQ8"]
[Sun Feb 22 09:53:14.247844 2026] [:error] [pid 12501:tid 12520] [client 51.120.79.113:47736] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak.php"] [unique_id "aZphipicztrbvinWGXMxQwAAAVE"]
[Sun Feb 22 09:53:14.767987 2026] [:error] [pid 9587:tid 9613] [client 51.120.79.113:25418] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak.php"] [unique_id "aZphiuhqt7NXCp-NupFLaQAAABE"]
[Sun Feb 22 09:53:18.299328 2026] [:error] [pid 9588:tid 9630] [client 51.120.79.113:57386] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-style.php"] [unique_id "aZphjmjNBsxseiTcElnBGAAAAEY"]
[Sun Feb 22 09:53:18.818857 2026] [:error] [pid 10537:tid 10546] [client 51.120.79.113:59474] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-style.php"] [unique_id "aZphjrgCiSojLQQBckhggwAAAQc"]
[Sun Feb 22 09:53:19.346040 2026] [:error] [pid 10537:tid 10547] [client 51.120.79.113:4474] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-style.php"] [unique_id "aZphj7gCiSojLQQBckhghgAAAQg"]
[Sun Feb 22 09:53:19.867360 2026] [:error] [pid 9695:tid 9713] [client 51.120.79.113:25438] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-style.php"] [unique_id "aZphj1pPqolBNLmJ4eqsFQAAANA"]
[Sun Feb 22 09:53:20.388435 2026] [:error] [pid 9587:tid 9618] [client 51.120.79.113:50206] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "aZphkOhqt7NXCp-NupFLegAAABY"]
[Sun Feb 22 09:53:20.907292 2026] [:error] [pid 9587:tid 9605] [client 51.120.79.113:51202] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "aZphkOhqt7NXCp-NupFLfAAAAAk"]
[Sun Feb 22 09:53:22.440927 2026] [:error] [pid 9695:tid 9711] [client 51.120.79.113:25435] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "aZphklpPqolBNLmJ4eqsGwAAAM4"]
[Sun Feb 22 09:53:22.959997 2026] [:error] [pid 9695:tid 9716] [client 51.120.79.113:4683] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "aZphklpPqolBNLmJ4eqsHQAAANM"]
[Sun Feb 22 09:53:23.480508 2026] [:error] [pid 9588:tid 9629] [client 51.120.79.113:57130] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x0x.php"] [unique_id "aZphk2jNBsxseiTcElnBIQAAAEU"]
[Sun Feb 22 09:53:23.999708 2026] [:error] [pid 9587:tid 9603] [client 51.120.79.113:4438] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x0x.php"] [unique_id "aZphk-hqt7NXCp-NupFLggAAAAc"]
[Sun Feb 22 09:53:31.547743 2026] [:error] [pid 9588:tid 9640] [client 51.120.79.113:57117] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x0x.php"] [unique_id "aZphm2jNBsxseiTcElnBLwAAAFA"]
[Sun Feb 22 09:53:32.067877 2026] [:error] [pid 12501:tid 12522] [client 51.120.79.113:57210] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x0x.php"] [unique_id "aZphnJicztrbvinWGXMxcgAAAVM"]
[Sun Feb 22 09:53:32.589444 2026] [:error] [pid 9589:tid 9660] [client 51.120.79.113:57144] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0byte.php"] [unique_id "aZphnNr-1mylR_FoXQWPQwAAAIk"]
[Sun Feb 22 09:53:33.108352 2026] [:error] [pid 9695:tid 9705] [client 51.120.79.113:4430] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0byte.php"] [unique_id "aZphnVpPqolBNLmJ4eqsNQAAAMg"]
[Sun Feb 22 09:53:33.654088 2026] [:error] [pid 9695:tid 9699] [client 51.120.79.113:50226] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0byte.php"] [unique_id "aZphnVpPqolBNLmJ4eqsOAAAAMI"]
[Sun Feb 22 09:53:34.178917 2026] [:error] [pid 12501:tid 12512] [client 51.120.79.113:44323] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0byte.php"] [unique_id "aZphnpicztrbvinWGXMxfQAAAUk"]
[Sun Feb 22 09:53:34.699249 2026] [:error] [pid 9587:tid 9613] [client 51.120.79.113:57364] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "aZphnuhqt7NXCp-NupFLnQAAABE"]
[Sun Feb 22 09:53:35.227103 2026] [:error] [pid 9695:tid 9706] [client 51.120.79.113:26961] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "aZphn1pPqolBNLmJ4eqsPAAAAMk"]
[Sun Feb 22 09:53:35.758318 2026] [:error] [pid 9695:tid 9713] [client 51.120.79.113:26963] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "aZphn1pPqolBNLmJ4eqsPgAAANA"]
[Sun Feb 22 09:53:36.311448 2026] [:error] [pid 9589:tid 9665] [client 51.120.79.113:44344] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "aZphoNr-1mylR_FoXQWPUAAAAI4"]
[Sun Feb 22 09:53:36.913781 2026] [:error] [pid 12501:tid 12524] [client 51.120.79.113:25434] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logs1.php"] [unique_id "aZphoJicztrbvinWGXMxgwAAAVU"]
[Sun Feb 22 09:53:37.500518 2026] [:error] [pid 9587:tid 9606] [client 51.120.79.113:26461] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logs1.php"] [unique_id "aZphoehqt7NXCp-NupFLqAAAAAo"]
[Sun Feb 22 09:53:38.072460 2026] [:error] [pid 9589:tid 9667] [client 51.120.79.113:56501] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logs1.php"] [unique_id "aZphotr-1mylR_FoXQWPUgAAAJA"]
[Sun Feb 22 09:53:38.662593 2026] [:error] [pid 10537:tid 10551] [client 51.120.79.113:4423] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/logs1.php"] [unique_id "aZphorgCiSojLQQBckhguQAAAQw"]
[Sun Feb 22 09:53:39.338693 2026] [:error] [pid 9587:tid 9615] [client 51.120.79.113:37555] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/35.php"] [unique_id "aZpho-hqt7NXCp-NupFLqwAAABM"]
[Sun Feb 22 09:53:40.027078 2026] [:error] [pid 9589:tid 9658] [client 51.120.79.113:26986] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/35.php"] [unique_id "aZphpNr-1mylR_FoXQWPWwAAAIc"]
[Sun Feb 22 09:53:40.911963 2026] [:error] [pid 12501:tid 12516] [client 51.120.79.113:38486] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/35.php"] [unique_id "aZphpJicztrbvinWGXMxiQAAAU0"]
[Sun Feb 22 09:53:41.454547 2026] [:error] [pid 9587:tid 9611] [client 51.120.79.113:51219] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/35.php"] [unique_id "aZphpehqt7NXCp-NupFLsgAAAA8"]
[Sun Feb 22 09:53:42.011975 2026] [:error] [pid 10537:tid 10558] [client 51.120.79.113:39083] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanka.php"] [unique_id "aZphprgCiSojLQQBckhgvgAAARM"]
[Sun Feb 22 09:53:42.568106 2026] [:error] [pid 9695:tid 9705] [client 51.120.79.113:56458] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanka.php"] [unique_id "aZphplpPqolBNLmJ4eqsWQAAAMg"]
[Sun Feb 22 09:53:43.533774 2026] [:error] [pid 9589:tid 9659] [client 51.120.79.113:4707] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanka.php"] [unique_id "aZphp9r-1mylR_FoXQWPYgAAAIg"]
[Sun Feb 22 09:53:44.118594 2026] [:error] [pid 9588:tid 9645] [client 51.120.79.113:26977] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanka.php"] [unique_id "aZphqGjNBsxseiTcElnBRAAAAFU"]
[Sun Feb 22 09:53:44.651833 2026] [:error] [pid 9695:tid 9702] [client 51.120.79.113:56471] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/knmt.php"] [unique_id "aZphqFpPqolBNLmJ4eqsYAAAAMU"]
[Sun Feb 22 09:53:45.178997 2026] [:error] [pid 9589:tid 9662] [client 51.120.79.113:51224] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/knmt.php"] [unique_id "aZphqdr-1mylR_FoXQWPZwAAAIs"]
[Sun Feb 22 09:53:45.702618 2026] [:error] [pid 9695:tid 9700] [client 51.120.79.113:39052] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/knmt.php"] [unique_id "aZphqVpPqolBNLmJ4eqsYwAAAMM"]
[Sun Feb 22 09:53:46.222435 2026] [:error] [pid 9589:tid 9673] [client 51.120.79.113:26474] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/knmt.php"] [unique_id "aZphqtr-1mylR_FoXQWPagAAAJY"]
[Sun Feb 22 09:53:46.745383 2026] [:error] [pid 9587:tid 9608] [client 51.120.79.113:50232] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZphquhqt7NXCp-NupFLwAAAAAw"]
[Sun Feb 22 09:53:47.277838 2026] [:error] [pid 9588:tid 9647] [client 51.120.79.113:51222] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZphq2jNBsxseiTcElnBSwAAAFc"]
[Sun Feb 22 09:53:47.798564 2026] [:error] [pid 12501:tid 12517] [client 51.120.79.113:4416] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZphq5icztrbvinWGXMxmwAAAU4"]
[Sun Feb 22 09:53:48.325428 2026] [:error] [pid 12501:tid 12521] [client 51.120.79.113:43926] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZphrJicztrbvinWGXMxnAAAAVI"]
[Sun Feb 22 09:53:48.846897 2026] [:error] [pid 9589:tid 9653] [client 51.120.79.113:47707] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lkui.php"] [unique_id "aZphrNr-1mylR_FoXQWPcwAAAII"]
[Sun Feb 22 09:53:49.420279 2026] [:error] [pid 10537:tid 10543] [client 51.120.79.113:48551] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lkui.php"] [unique_id "aZphrbgCiSojLQQBckhgxwAAAQQ"]
[Sun Feb 22 09:53:49.940680 2026] [:error] [pid 9589:tid 9661] [client 51.120.79.113:59510] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lkui.php"] [unique_id "aZphrdr-1mylR_FoXQWPdgAAAIo"]
[Sun Feb 22 09:53:51.468349 2026] [:error] [pid 9587:tid 9615] [client 51.120.79.113:59456] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lkui.php"] [unique_id "aZphr-hqt7NXCp-NupFLxwAAABM"]
[Sun Feb 22 09:53:51.989010 2026] [:error] [pid 9695:tid 9702] [client 51.120.79.113:51240] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZphr1pPqolBNLmJ4eqscQAAAMU"]
[Sun Feb 22 09:53:52.520600 2026] [:error] [pid 10537:tid 10544] [client 51.120.79.113:60017] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZphsLgCiSojLQQBckhgzgAAAQU"]
[Sun Feb 22 09:53:53.039336 2026] [:error] [pid 9695:tid 9716] [client 51.120.79.113:34835] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZphsVpPqolBNLmJ4eqsdQAAANM"]
[Sun Feb 22 09:53:53.561428 2026] [:error] [pid 12501:tid 12504] [client 51.120.79.113:4428] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZphsZicztrbvinWGXMxtAAAAUE"]
[Sun Feb 22 09:53:54.085021 2026] [:error] [pid 10537:tid 10546] [client 51.120.79.113:56469] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZphsrgCiSojLQQBckhg0gAAAQc"]
[Sun Feb 22 09:53:54.605701 2026] [:error] [pid 10537:tid 10547] [client 51.120.79.113:48540] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZphsrgCiSojLQQBckhg1AAAAQg"]
[Sun Feb 22 09:53:55.124062 2026] [:error] [pid 9589:tid 9655] [client 51.120.79.113:4445] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZphs9r-1mylR_FoXQWPgQAAAIQ"]
[Sun Feb 22 09:53:56.669507 2026] [:error] [pid 10537:tid 10539] [client 51.120.79.113:45083] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZphtLgCiSojLQQBckhg2gAAAQA"]
[Sun Feb 22 09:53:57.189876 2026] [:error] [pid 10537:tid 10551] [client 51.120.79.113:34124] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Geforce.php"] [unique_id "aZphtbgCiSojLQQBckhg3QAAAQw"]
[Sun Feb 22 09:53:57.710835 2026] [:error] [pid 10537:tid 10555] [client 51.120.79.113:45066] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Geforce.php"] [unique_id "aZphtbgCiSojLQQBckhg4AAAARA"]
[Sun Feb 22 09:53:58.229331 2026] [:error] [pid 9589:tid 9670] [client 51.120.79.113:26472] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Geforce.php"] [unique_id "aZphttr-1mylR_FoXQWPlQAAAJM"]
[Sun Feb 22 09:53:58.751226 2026] [:error] [pid 12501:tid 12507] [client 51.120.79.113:26442] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Geforce.php"] [unique_id "aZphtpicztrbvinWGXMxzAAAAUQ"]
[Sun Feb 22 09:53:59.275416 2026] [:error] [pid 9587:tid 9617] [client 51.120.79.113:59482] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/easy.php"] [unique_id "aZpht-hqt7NXCp-NupFL0gAAABU"]
[Sun Feb 22 09:54:06.808510 2026] [:error] [pid 9588:tid 9624] [client 51.120.79.113:34818] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/easy.php"] [unique_id "aZphvmjNBsxseiTcElnBaAAAAEA"]
[Sun Feb 22 09:54:08.338782 2026] [:error] [pid 9587:tid 9597] [client 51.120.79.113:47711] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/easy.php"] [unique_id "aZphwOhqt7NXCp-NupFL5QAAAAE"]
[Sun Feb 22 09:54:08.864905 2026] [:error] [pid 9587:tid 9601] [client 51.120.79.113:34878] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/easy.php"] [unique_id "aZphwOhqt7NXCp-NupFL6gAAAAU"]
[Sun Feb 22 09:54:09.385491 2026] [:error] [pid 10537:tid 10541] [client 51.120.79.113:45072] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s1.php"] [unique_id "aZphwbgCiSojLQQBckhg9AAAAQI"]
[Sun Feb 22 09:54:09.905066 2026] [:error] [pid 9695:tid 9706] [client 51.120.79.113:43932] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s1.php"] [unique_id "aZphwVpPqolBNLmJ4eqsmwAAAMk"]
[Sun Feb 22 09:54:18.195991 2026] [:error] [pid 9589:tid 9669] [client 51.120.79.113:57366] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aZphytr-1mylR_FoXQWPtwAAAJI"]
[Sun Feb 22 09:54:18.730599 2026] [:error] [pid 9589:tid 9662] [client 51.120.79.113:34827] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aZphytr-1mylR_FoXQWPuQAAAIs"]
[Sun Feb 22 09:54:19.250810 2026] [:error] [pid 9588:tid 9634] [client 51.120.79.113:46627] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aZphy2jNBsxseiTcElnBdwAAAEo"]
[Sun Feb 22 09:54:19.770817 2026] [:error] [pid 12501:tid 12525] [client 51.120.79.113:34851] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "aZphy5icztrbvinWGXMyDQAAAVY"]
[Sun Feb 22 09:54:20.297770 2026] [:error] [pid 12501:tid 12515] [client 51.120.79.113:60677] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsox.php"] [unique_id "aZphzJicztrbvinWGXMyDgAAAUw"]
[Sun Feb 22 09:54:20.817536 2026] [:error] [pid 9589:tid 9671] [client 51.120.79.113:45080] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsox.php"] [unique_id "aZphzNr-1mylR_FoXQWPvAAAAJQ"]
[Sun Feb 22 09:54:21.338944 2026] [:error] [pid 9589:tid 9656] [client 51.120.79.113:43913] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsox.php"] [unique_id "aZphzdr-1mylR_FoXQWPvwAAAIU"]
[Sun Feb 22 09:54:21.859748 2026] [:error] [pid 9589:tid 9657] [client 51.120.79.113:26455] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsox.php"] [unique_id "aZphzdr-1mylR_FoXQWPwAAAAIY"]
[Sun Feb 22 09:54:22.381306 2026] [:error] [pid 9589:tid 9667] [client 51.120.79.113:25424] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "aZphztr-1mylR_FoXQWPwgAAAJA"]
[Sun Feb 22 09:54:22.903841 2026] [:error] [pid 9589:tid 9660] [client 51.120.79.113:56503] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "aZphztr-1mylR_FoXQWPxAAAAIk"]
[Sun Feb 22 09:54:23.423391 2026] [:error] [pid 9588:tid 9648] [client 51.120.79.113:56455] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "aZphz2jNBsxseiTcElnBfgAAAFg"]
[Sun Feb 22 09:54:23.952723 2026] [:error] [pid 12501:tid 12519] [client 51.120.79.113:4424] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "aZphz5icztrbvinWGXMyEgAAAVA"]
[Sun Feb 22 09:54:24.473956 2026] [:error] [pid 9695:tid 9703] [client 51.120.79.113:8919] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZph0FpPqolBNLmJ4eqsvQAAAMY"]
[Sun Feb 22 09:54:24.991842 2026] [:error] [pid 9695:tid 9698] [client 51.120.79.113:43923] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZph0FpPqolBNLmJ4eqsvgAAAME"]
[Sun Feb 22 09:54:25.524348 2026] [:error] [pid 9588:tid 9625] [client 51.120.79.113:59472] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZph0WjNBsxseiTcElnBgwAAAEE"]
[Sun Feb 22 09:54:26.046462 2026] [:error] [pid 10537:tid 10550] [client 51.120.79.113:8913] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZph0rgCiSojLQQBckhhFAAAAQs"]
[Sun Feb 22 09:54:26.598691 2026] [:error] [pid 10537:tid 10556] [client 51.120.79.113:47734] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "aZph0rgCiSojLQQBckhhGQAAARE"]
[Sun Feb 22 09:54:27.126387 2026] [:error] [pid 12501:tid 12526] [client 51.120.79.113:26490] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "aZph05icztrbvinWGXMyHQAAAVc"]
[Sun Feb 22 09:54:27.648046 2026] [:error] [pid 9587:tid 9612] [client 51.120.79.113:26433] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "aZph0-hqt7NXCp-NupFMAwAAABA"]
[Sun Feb 22 09:54:28.170688 2026] [:error] [pid 12501:tid 12511] [client 51.120.79.113:51208] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "aZph1JicztrbvinWGXMyIAAAAUg"]
[Sun Feb 22 09:54:28.690339 2026] [:error] [pid 10537:tid 10561] [client 51.120.79.113:39057] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoo.php"] [unique_id "aZph1LgCiSojLQQBckhhHQAAARY"]
[Sun Feb 22 09:54:29.227514 2026] [:error] [pid 9695:tid 9714] [client 51.120.79.113:43588] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoo.php"] [unique_id "aZph1VpPqolBNLmJ4eqsxQAAANE"]
[Sun Feb 22 09:54:29.755518 2026] [:error] [pid 9588:tid 9638] [client 51.120.79.113:37962] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoo.php"] [unique_id "aZph1WjNBsxseiTcElnBjgAAAE4"]
[Sun Feb 22 09:54:30.287457 2026] [:error] [pid 9588:tid 9634] [client 51.120.79.113:47712] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoo.php"] [unique_id "aZph1mjNBsxseiTcElnBjwAAAEo"]
[Sun Feb 22 09:54:30.807717 2026] [:error] [pid 9587:tid 9605] [client 51.120.79.113:57391] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxekqlxb.php"] [unique_id "aZph1uhqt7NXCp-NupFMCgAAAAk"]
[Sun Feb 22 09:54:31.348955 2026] [:error] [pid 9588:tid 9639] [client 51.120.79.113:64992] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxekqlxb.php"] [unique_id "aZph12jNBsxseiTcElnBkgAAAE8"]
[Sun Feb 22 09:54:31.869470 2026] [:error] [pid 12501:tid 12511] [client 51.120.79.113:50224] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxekqlxb.php"] [unique_id "aZph15icztrbvinWGXMyLAAAAUg"]
[Sun Feb 22 09:54:32.404786 2026] [:error] [pid 9695:tid 9716] [client 51.120.79.113:4166] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxekqlxb.php"] [unique_id "aZph2FpPqolBNLmJ4eqs0AAAANM"]
[Sun Feb 22 09:54:32.933645 2026] [:error] [pid 9587:tid 9612] [client 51.120.79.113:24420] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scr1pts.php"] [unique_id "aZph2Ohqt7NXCp-NupFMEQAAABA"]
[Sun Feb 22 09:54:33.466667 2026] [:error] [pid 10537:tid 10557] [client 51.120.79.113:38472] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scr1pts.php"] [unique_id "aZph2bgCiSojLQQBckhhJQAAARI"]
[Sun Feb 22 09:54:33.986806 2026] [:error] [pid 9589:tid 9667] [client 51.120.79.113:63864] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scr1pts.php"] [unique_id "aZph2dr-1mylR_FoXQWPzAAAAJA"]
[Sun Feb 22 09:54:34.529664 2026] [:error] [pid 9695:tid 9702] [client 51.120.79.113:63848] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scr1pts.php"] [unique_id "aZph2lpPqolBNLmJ4eqs1QAAAMU"]
[Sun Feb 22 09:54:35.051021 2026] [:error] [pid 9695:tid 9715] [client 51.120.79.113:38001] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "aZph21pPqolBNLmJ4eqs1wAAANI"]
[Sun Feb 22 09:54:35.574588 2026] [:error] [pid 9587:tid 9599] [client 51.120.79.113:38517] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "aZph2-hqt7NXCp-NupFMFAAAAAM"]
[Sun Feb 22 09:54:36.102582 2026] [:error] [pid 9695:tid 9713] [client 51.120.79.113:46581] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "aZph3FpPqolBNLmJ4eqs2wAAANA"]
[Sun Feb 22 09:54:39.655111 2026] [:error] [pid 9588:tid 9633] [client 51.120.79.113:50746] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "aZph32jNBsxseiTcElnBoAAAAEk"]
[Sun Feb 22 09:54:40.197596 2026] [:error] [pid 9587:tid 9619] [client 51.120.79.113:36427] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "aZph4Ohqt7NXCp-NupFMHQAAABc"]
[Sun Feb 22 09:54:40.716283 2026] [:error] [pid 9589:tid 9671] [client 51.120.79.113:50639] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "aZph4Nr-1mylR_FoXQWP1wAAAJQ"]
[Sun Feb 22 09:54:41.236698 2026] [:error] [pid 9588:tid 9624] [client 51.120.79.113:4204] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "aZph4WjNBsxseiTcElnBowAAAEA"]
[Sun Feb 22 09:54:41.787807 2026] [:error] [pid 9589:tid 9670] [client 51.120.79.113:36424] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "aZph4dr-1mylR_FoXQWP2QAAAJM"]
[Sun Feb 22 09:54:42.313636 2026] [:error] [pid 10537:tid 10557] [client 51.120.79.113:36464] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6bcwiqwj.php"] [unique_id "aZph4rgCiSojLQQBckhhLwAAARI"]
[Sun Feb 22 09:54:42.834017 2026] [:error] [pid 9589:tid 9674] [client 51.120.79.113:4221] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6bcwiqwj.php"] [unique_id "aZph4tr-1mylR_FoXQWP3gAAAJc"]
[Sun Feb 22 09:54:43.366019 2026] [:error] [pid 10537:tid 10555] [client 51.120.79.113:50663] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6bcwiqwj.php"] [unique_id "aZph47gCiSojLQQBckhhMAAAARA"]
[Sun Feb 22 09:54:43.884749 2026] [:error] [pid 9589:tid 9662] [client 51.120.79.113:38005] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6bcwiqwj.php"] [unique_id "aZph49r-1mylR_FoXQWP4gAAAIs"]
[Sun Feb 22 09:54:44.408613 2026] [:error] [pid 9589:tid 9665] [client 51.120.79.113:41362] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aZph5Nr-1mylR_FoXQWP5AAAAI4"]
[Sun Feb 22 09:54:44.928425 2026] [:error] [pid 9589:tid 9671] [client 51.120.79.113:42071] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aZph5Nr-1mylR_FoXQWP5gAAAJQ"]
[Sun Feb 22 09:54:45.449872 2026] [:error] [pid 9589:tid 9675] [client 51.120.79.113:50654] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aZph5dr-1mylR_FoXQWP6QAAAJg"]
[Sun Feb 22 09:54:49.015826 2026] [:error] [pid 9589:tid 9665] [client 51.120.79.113:33696] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aZph6dr-1mylR_FoXQWP9AAAAI4"]
[Sun Feb 22 09:54:49.538987 2026] [:error] [pid 12501:tid 12509] [client 51.120.79.113:63839] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws69.php"] [unique_id "aZph6ZicztrbvinWGXMyUAAAAUY"]
[Sun Feb 22 09:54:50.063515 2026] [:error] [pid 9695:tid 9698] [client 51.120.79.113:41351] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws69.php"] [unique_id "aZph6lpPqolBNLmJ4eqs3wAAAME"]
[Sun Feb 22 09:54:50.603835 2026] [:error] [pid 12501:tid 12511] [client 51.120.79.113:64346] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws69.php"] [unique_id "aZph6picztrbvinWGXMyVAAAAUg"]
[Sun Feb 22 09:54:51.125694 2026] [:error] [pid 12501:tid 12518] [client 51.120.79.113:37991] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws69.php"] [unique_id "aZph65icztrbvinWGXMyVwAAAU8"]
[Sun Feb 22 09:55:06.674329 2026] [:error] [pid 9588:tid 9647] [client 51.120.79.113:38522] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aZph-mjNBsxseiTcElnBwwAAAFc"]
[Sun Feb 22 09:55:07.194478 2026] [:error] [pid 9695:tid 9719] [client 51.120.79.113:44407] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aZph-1pPqolBNLmJ4eqs5QAAANY"]
[Sun Feb 22 09:55:07.714245 2026] [:error] [pid 9589:tid 9674] [client 51.120.79.113:44384] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aZph-9r-1mylR_FoXQWQAQAAAJc"]
[Sun Feb 22 09:55:08.239862 2026] [:error] [pid 12501:tid 12510] [client 51.120.79.113:51240] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aZph_JicztrbvinWGXMyrQAAAUc"]
[Sun Feb 22 09:55:08.760569 2026] [:error] [pid 9587:tid 9601] [client 51.120.79.113:50633] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "aZph_Ohqt7NXCp-NupFMSgAAAAU"]
[Sun Feb 22 09:55:09.284807 2026] [:error] [pid 9589:tid 9652] [client 51.120.79.113:50715] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "aZph_dr-1mylR_FoXQWQBQAAAIE"]
[Sun Feb 22 09:55:09.804946 2026] [:error] [pid 9588:tid 9646] [client 51.120.79.113:64692] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "aZph_WjNBsxseiTcElnByAAAAFY"]
[Sun Feb 22 09:55:10.326345 2026] [:error] [pid 9588:tid 9626] [client 51.120.79.113:64377] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "aZph_mjNBsxseiTcElnByQAAAEI"]
[Sun Feb 22 09:55:10.855597 2026] [:error] [pid 9589:tid 9658] [client 51.120.79.113:64738] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aZph_tr-1mylR_FoXQWQCQAAAIc"]
[Sun Feb 22 09:55:11.376485 2026] [:error] [pid 10537:tid 10541] [client 51.120.79.113:64370] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aZph_7gCiSojLQQBckhhVQAAAQI"]
[Sun Feb 22 09:55:11.897236 2026] [:error] [pid 9587:tid 9619] [client 51.120.79.113:46564] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aZph_-hqt7NXCp-NupFMUAAAABc"]
[Sun Feb 22 09:55:12.420502 2026] [:error] [pid 12501:tid 12527] [client 51.120.79.113:43535] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aZpiAJicztrbvinWGXMy3AAAAVg"]
[Sun Feb 22 09:55:12.942574 2026] [:error] [pid 10537:tid 10552] [client 51.120.79.113:64352] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-link10.php"] [unique_id "aZpiALgCiSojLQQBckhhWQAAAQ0"]
[Sun Feb 22 09:55:13.463053 2026] [:error] [pid 9588:tid 9648] [client 51.120.79.113:42069] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-link10.php"] [unique_id "aZpiAWjNBsxseiTcElnBzgAAAFg"]
[Sun Feb 22 09:55:13.986710 2026] [:error] [pid 10537:tid 10542] [client 51.120.79.113:43562] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-link10.php"] [unique_id "aZpiAbgCiSojLQQBckhhWwAAAQM"]
[Sun Feb 22 09:55:14.512141 2026] [:error] [pid 9589:tid 9665] [client 51.120.79.113:63854] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-link10.php"] [unique_id "aZpiAtr-1mylR_FoXQWQEgAAAI4"]
[Sun Feb 22 09:55:15.032200 2026] [:error] [pid 9695:tid 9719] [client 51.120.79.113:37976] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aZpiA1pPqolBNLmJ4eqs7gAAANY"]
[Sun Feb 22 09:55:15.555810 2026] [:error] [pid 9695:tid 9718] [client 51.120.79.113:43564] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aZpiA1pPqolBNLmJ4eqs7wAAANU"]
[Sun Feb 22 09:55:16.076333 2026] [:error] [pid 9589:tid 9675] [client 51.120.79.113:37977] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aZpiBNr-1mylR_FoXQWQFwAAAJg"]
[Sun Feb 22 09:55:16.601388 2026] [:error] [pid 9587:tid 9602] [client 51.120.79.113:43555] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aZpiBOhqt7NXCp-NupFMXQAAAAY"]
[Sun Feb 22 09:55:24.963022 2026] [:error] [pid 9695:tid 9721] [client 51.120.79.113:63819] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aZpiDFpPqolBNLmJ4eqtAwAAANg"]
[Sun Feb 22 09:55:25.483646 2026] [:error] [pid 9589:tid 9656] [client 51.120.79.113:46587] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aZpiDdr-1mylR_FoXQWQKQAAAIU"]
[Sun Feb 22 09:55:26.012601 2026] [:error] [pid 9589:tid 9673] [client 51.120.79.113:38495] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aZpiDtr-1mylR_FoXQWQKwAAAJY"]
[Sun Feb 22 09:55:26.535128 2026] [:error] [pid 9695:tid 9703] [client 51.120.79.113:64965] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aZpiDlpPqolBNLmJ4eqtBAAAAMY"]
[Sun Feb 22 09:55:27.056996 2026] [:error] [pid 10537:tid 10545] [client 51.120.79.113:36440] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "aZpiD7gCiSojLQQBckhhbQAAAQY"]
[Sun Feb 22 09:55:27.577101 2026] [:error] [pid 9587:tid 9611] [client 51.120.79.113:43243] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "aZpiD-hqt7NXCp-NupFMdAAAAA8"]
[Sun Feb 22 09:55:28.098601 2026] [:error] [pid 9587:tid 9605] [client 51.120.79.113:63859] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "aZpiEOhqt7NXCp-NupFMdQAAAAk"]
[Sun Feb 22 09:55:35.652497 2026] [:error] [pid 9588:tid 9642] [client 51.120.79.113:36465] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "aZpiF2jNBsxseiTcElnB6wAAAFI"]
[Sun Feb 22 09:55:36.170561 2026] [:error] [pid 12501:tid 12521] [client 51.120.79.113:43542] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aZpiGJicztrbvinWGXMzLAAAAVI"]
[Sun Feb 22 09:55:39.704667 2026] [:error] [pid 9588:tid 9646] [client 51.120.79.113:63834] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aZpiG2jNBsxseiTcElnB8gAAAFY"]
[Sun Feb 22 09:55:40.225428 2026] [:error] [pid 9587:tid 9600] [client 51.120.79.113:50650] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aZpiHOhqt7NXCp-NupFMhAAAAAQ"]
[Sun Feb 22 09:55:40.746568 2026] [:error] [pid 9695:tid 9715] [client 51.120.79.113:38516] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aZpiHFpPqolBNLmJ4eqtIQAAANI"]
[Sun Feb 22 09:55:41.272920 2026] [:error] [pid 12501:tid 12518] [client 51.120.79.113:63814] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws68.php"] [unique_id "aZpiHZicztrbvinWGXMzNwAAAU8"]
[Sun Feb 22 09:55:48.836179 2026] [:error] [pid 12501:tid 12525] [client 51.120.79.113:64665] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/R57.php"] [unique_id "aZpiJJicztrbvinWGXMzRQAAAVY"]
[Sun Feb 22 09:55:49.355463 2026] [:error] [pid 10537:tid 10551] [client 51.120.79.113:44404] [client 51.120.79.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/R57.php"] [unique_id "aZpiJbgCiSojLQQBckhhjwAAAQw"]
[Sun Feb 22 10:08:58.662924 2026] [:error] [pid 10537:tid 10548] [client 209.87.169.131:64461] [client 209.87.169.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.131, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZplOrgCiSojLQQBckhl3gAAAQk"]
[Sun Feb 22 10:26:34.905617 2026] [:error] [pid 9589:tid 9651] [client 45.131.195.240:45901] [client 45.131.195.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.240, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZppWtr-1mylR_FoXQWbxgAAAIA"]
[Sun Feb 22 10:44:04.894083 2026] [:error] [pid 12501:tid 12514] [client 45.131.195.133:46593] [client 45.131.195.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.133, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZptdJicztrbvinWGXNHfAAAAUs"]
[Sun Feb 22 11:01:24.218581 2026] [:error] [pid 12501:tid 12513] [client 45.131.195.112:61827] [client 45.131.195.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZpxhJicztrbvinWGXNM6AAAAUo"]
[Sun Feb 22 11:18:58.343041 2026] [:error] [pid 17328:tid 17366] [client 45.131.195.127:27531] [client 45.131.195.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.127, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZp1oimytOXCmY4_PcaWewAAAY4"]
[Sun Feb 22 11:36:24.998784 2026] [:error] [pid 9589:tid 9651] [client 45.131.195.123:48835] [client 45.131.195.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.123, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZp5uNr-1mylR_FoXQWxbwAAAIA"]
[Sun Feb 22 11:53:51.726321 2026] [:error] [pid 10537:tid 10555] [client 209.87.169.139:25833] [client 209.87.169.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.139, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZp9z7gCiSojLQQBckiCFQAAARA"]
[Sun Feb 22 12:11:21.861791 2026] [:error] [pid 17328:tid 17354] [client 209.87.169.148:35169] [client 209.87.169.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqB6SmytOXCmY4_PcanYAAAAYQ"]
[Sun Feb 22 12:28:40.904747 2026] [:error] [pid 9587:tid 9615] [client 45.131.195.240:40453] [client 45.131.195.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.240, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqF-Ohqt7NXCp-NupFz3QAAABM"]
[Sun Feb 22 12:46:18.527070 2026] [:error] [pid 10537:tid 10558] [client 45.131.195.142:54083] [client 45.131.195.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqKGrgCiSojLQQBckiNcgAAARM"]
[Sun Feb 22 13:04:08.786434 2026] [:error] [pid 9589:tid 9674] [client 209.87.169.143:28197] [client 209.87.169.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.143, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqOSNr-1mylR_FoXQXH7wAAAJc"]
[Sun Feb 22 13:21:51.713891 2026] [:error] [pid 12501:tid 12518] [client 209.87.169.155:33391] [client 209.87.169.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.155, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqSb5icztrbvinWGXN3UQAAAU8"]
[Sun Feb 22 13:39:27.938724 2026] [:error] [pid 17328:tid 17365] [client 45.131.195.112:29511] [client 45.131.195.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqWjymytOXCmY4_PcbL4wAAAY0"]
[Sun Feb 22 13:57:02.590234 2026] [:error] [pid 9695:tid 9709] [client 45.131.195.127:45207] [client 45.131.195.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.127, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqarlpPqolBNLmJ4eryXQAAAMw"]
[Sun Feb 22 14:14:38.919877 2026] [:error] [pid 9695:tid 9698] [client 209.87.169.145:65363] [client 209.87.169.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.145, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqezlpPqolBNLmJ4er29QAAAME"]
[Sun Feb 22 14:32:16.743196 2026] [:error] [pid 10537:tid 10548] [client 45.131.195.127:58975] [client 45.131.195.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.127, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqi8LgCiSojLQQBckiomwAAAQk"]
[Sun Feb 22 14:49:41.873211 2026] [:error] [pid 10537:tid 10550] [client 209.87.169.136:28053] [client 209.87.169.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.136, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqnBbgCiSojLQQBckis-QAAAQs"]
[Sun Feb 22 15:07:11.792769 2026] [:error] [pid 17328:tid 17372] [client 185.198.240.185:40963] [client 185.198.240.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqrHymytOXCmY4_PcbvuwAAAZQ"]
[Sun Feb 22 15:24:48.228933 2026] [:error] [pid 10537:tid 10561] [client 45.131.195.240:65021] [client 45.131.195.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.240, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqvQLgCiSojLQQBcki14AAAARY"]
[Sun Feb 22 15:36:12.972533 2026] [:error] [pid 9588:tid 9647] [client 106.219.176.156:25412] [client 106.219.176.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.176.156, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZqx7GjNBsxseiTcElkZcwAAAFc"]
[Sun Feb 22 15:42:21.916639 2026] [:error] [pid 9695:tid 9698] [client 45.131.195.142:31273] [client 45.131.195.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZqzXVpPqolBNLmJ4eoNeAAAAME"]
[Sun Feb 22 15:59:45.536666 2026] [:error] [pid 17328:tid 17373] [client 209.87.169.155:42765] [client 209.87.169.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.155, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZq3cSmytOXCmY4_Pcb_WQAAAZU"]
[Sun Feb 22 16:17:24.692244 2026] [:error] [pid 9695:tid 9714] [client 209.87.169.151:63993] [client 209.87.169.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.151, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZq7lFpPqolBNLmJ4eoXqAAAANE"]
[Sun Feb 22 16:35:01.316711 2026] [:error] [pid 17328:tid 17373] [client 209.87.169.148:22247] [client 209.87.169.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZq_tSmytOXCmY4_PcYK4wAAAZU"]
[Sun Feb 22 16:52:37.649664 2026] [:error] [pid 10537:tid 10542] [client 45.131.195.123:27001] [client 45.131.195.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.123, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrD1bgCiSojLQQBckjMIAAAAQM"]
[Sun Feb 22 17:09:39.883403 2026] [:error] [pid 10537:tid 10561] [client 110.166.71.39:45945] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZrH07gCiSojLQQBckjPiQAAARY"]
[Sun Feb 22 17:10:18.573969 2026] [:error] [pid 17328:tid 17366] [client 209.87.169.147:24391] [client 209.87.169.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.147, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrH-imytOXCmY4_PcYSlQAAAY4"]
[Sun Feb 22 17:28:00.239695 2026] [:error] [pid 17328:tid 17353] [client 45.131.195.128:56979] [client 45.131.195.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.128, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrMICmytOXCmY4_PcYXOwAAAYM"]
[Sun Feb 22 17:45:59.487390 2026] [:error] [pid 12501:tid 12504] [client 43.153.102.138:41844] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZrQV5icztrbvinWGXPJeAAAAUE"]
[Sun Feb 22 17:48:17.501098 2026] [:error] [pid 12501:tid 12527] [client 209.87.169.129:52739] [client 209.87.169.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.129, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrQ4ZicztrbvinWGXPKQwAAAVg"]
[Sun Feb 22 18:05:57.206807 2026] [:error] [pid 10537:tid 10558] [client 209.87.169.139:24799] [client 209.87.169.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.139, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrVBbgCiSojLQQBckjbnAAAARM"]
[Sun Feb 22 18:23:36.124032 2026] [:error] [pid 17328:tid 17361] [client 209.87.169.145:38337] [client 209.87.169.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.145, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrZKCmytOXCmY4_PcYkDAAAAYo"]
[Sun Feb 22 18:41:10.562512 2026] [:error] [pid 9589:tid 9660] [client 209.87.169.131:22573] [client 209.87.169.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.131, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrdRtr-1mylR_FoXQUh6AAAAIk"]
[Sun Feb 22 18:58:39.866150 2026] [:error] [pid 17328:tid 17368] [client 209.87.169.129:21791] [client 209.87.169.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.129, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrhXymytOXCmY4_PcYsUgAAAZA"]
[Sun Feb 22 19:07:58.910658 2026] [:error] [pid 9587:tid 9620] [client 54.37.252.36:35604] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aZrjjuhqt7NXCp-NupHcfAAAABg"]
[Sun Feb 22 19:08:01.580947 2026] [:error] [pid 9589:tid 9667] [client 54.37.252.36:53474] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZrjkdr-1mylR_FoXQUqWQAAAJA"]
[Sun Feb 22 19:08:04.464570 2026] [:error] [pid 17328:tid 17370] [client 54.37.252.36:53476] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZrjlCmytOXCmY4_PcYuzQAAAZI"]
[Sun Feb 22 19:08:07.514587 2026] [:error] [pid 17328:tid 17354] [client 54.37.252.36:53482] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZrjlymytOXCmY4_PcYu0wAAAYQ"]
[Sun Feb 22 19:08:10.259626 2026] [:error] [pid 9587:tid 9603] [client 54.37.252.36:55394] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZrjmuhqt7NXCp-NupHcjwAAAAc"]
[Sun Feb 22 19:08:13.036023 2026] [:error] [pid 9587:tid 9598] [client 54.37.252.36:55400] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aZrjnehqt7NXCp-NupHclAAAAAI"]
[Sun Feb 22 19:08:15.689522 2026] [:error] [pid 9695:tid 9709] [client 54.37.252.36:55412] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZrjn1pPqolBNLmJ4epCIQAAAMw"]
[Sun Feb 22 19:08:18.394849 2026] [:error] [pid 9587:tid 9617] [client 54.37.252.36:55428] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZrjouhqt7NXCp-NupHcugAAABU"]
[Sun Feb 22 19:08:21.227137 2026] [:error] [pid 9587:tid 9608] [client 54.37.252.36:38884] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZrjpehqt7NXCp-NupHcvwAAAAw"]
[Sun Feb 22 19:08:24.061255 2026] [:error] [pid 12501:tid 12518] [client 54.37.252.36:38894] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZrjqJicztrbvinWGXPoKQAAAU8"]
[Sun Feb 22 19:08:26.789485 2026] [:error] [pid 12501:tid 12508] [client 54.37.252.36:38896] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZrjqpicztrbvinWGXPoLAAAAUU"]
[Sun Feb 22 19:08:29.548928 2026] [:error] [pid 12501:tid 12524] [client 54.37.252.36:37024] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZrjrZicztrbvinWGXPoQgAAAVU"]
[Sun Feb 22 19:08:32.981657 2026] [:error] [pid 9695:tid 9718] [client 54.37.252.36:37034] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZrjsFpPqolBNLmJ4epCSgAAANU"]
[Sun Feb 22 19:08:35.765635 2026] [:error] [pid 10537:tid 10549] [client 54.37.252.36:37046] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZrjs7gCiSojLQQBckjr9QAAAQo"]
[Sun Feb 22 19:08:38.793478 2026] [:error] [pid 9588:tid 9624] [client 54.37.252.36:37056] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZrjtmjNBsxseiTcEllTvAAAAEA"]
[Sun Feb 22 19:08:41.944601 2026] [:error] [pid 9589:tid 9653] [client 54.37.252.36:48828] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aZrjudr-1mylR_FoXQUq-QAAAII"]
[Sun Feb 22 19:08:44.857677 2026] [:error] [pid 9587:tid 9605] [client 54.37.252.36:48844] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZrjvOhqt7NXCp-NupHdBAAAAAk"]
[Sun Feb 22 19:08:47.712811 2026] [:error] [pid 9695:tid 9707] [client 54.37.252.36:48856] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZrjv1pPqolBNLmJ4epCXgAAAMo"]
[Sun Feb 22 19:08:50.588498 2026] [:error] [pid 12501:tid 12505] [client 54.37.252.36:49826] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZrjwpicztrbvinWGXPoaAAAAUI"]
[Sun Feb 22 19:08:53.787335 2026] [:error] [pid 17328:tid 17360] [client 54.37.252.36:49834] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZrjxSmytOXCmY4_PcYvEwAAAYk"]
[Sun Feb 22 19:09:26.119461 2026] [:error] [pid 10537:tid 10558] [client 54.37.252.36:49848] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZrj5rgCiSojLQQBckjsPgAAARM"]
[Sun Feb 22 19:09:28.964891 2026] [:error] [pid 10537:tid 10545] [client 54.37.252.36:60986] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZrj6LgCiSojLQQBckjsQAAAAQY"]
[Sun Feb 22 19:09:32.045622 2026] [:error] [pid 9588:tid 9642] [client 54.37.252.36:60998] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aZrj7GjNBsxseiTcEllT-QAAAFI"]
[Sun Feb 22 19:09:34.907590 2026] [:error] [pid 9589:tid 9669] [client 54.37.252.36:32772] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aZrj7tr-1mylR_FoXQUrRgAAAJI"]
[Sun Feb 22 19:09:37.810431 2026] [:error] [pid 9589:tid 9669] [client 54.37.252.36:32776] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aZrj8dr-1mylR_FoXQUrXAAAAJI"]
[Sun Feb 22 19:09:41.045534 2026] [:error] [pid 9695:tid 9721] [client 54.37.252.36:37778] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZrj9VpPqolBNLmJ4epCngAAANg"]
[Sun Feb 22 19:09:44.696239 2026] [:error] [pid 9588:tid 9634] [client 54.37.252.36:37794] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aZrj-GjNBsxseiTcEllUCwAAAEo"]
[Sun Feb 22 19:09:47.493616 2026] [:error] [pid 9587:tid 9606] [client 54.37.252.36:37804] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aZrj--hqt7NXCp-NupHdmAAAAAo"]
[Sun Feb 22 19:09:50.796255 2026] [:error] [pid 9589:tid 9657] [client 54.37.252.36:37022] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZrj_tr-1mylR_FoXQUrfAAAAIY"]
[Sun Feb 22 19:09:53.354347 2026] [:error] [pid 9588:tid 9630] [client 54.37.252.36:37026] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZrkAWjNBsxseiTcEllUFAAAAEY"]
[Sun Feb 22 19:09:56.394357 2026] [:error] [pid 9589:tid 9659] [client 54.37.252.36:37032] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aZrkBNr-1mylR_FoXQUrhQAAAIg"]
[Sun Feb 22 19:09:59.646321 2026] [:error] [pid 9588:tid 9645] [client 54.37.252.36:33778] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZrkB2jNBsxseiTcEllUHQAAAFU"]
[Sun Feb 22 19:10:03.627719 2026] [:error] [pid 10537:tid 10552] [client 54.37.252.36:33784] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZrkC7gCiSojLQQBckjslAAAAQ0"]
[Sun Feb 22 19:10:06.756495 2026] [:error] [pid 17328:tid 17372] [client 54.37.252.36:33786] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZrkDimytOXCmY4_PcYvpgAAAZQ"]
[Sun Feb 22 19:10:09.510836 2026] [:error] [pid 9695:tid 9717] [client 54.37.252.36:54668] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZrkEVpPqolBNLmJ4epCvAAAANQ"]
[Sun Feb 22 19:10:12.590528 2026] [:error] [pid 9589:tid 9671] [client 54.37.252.36:54684] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZrkFNr-1mylR_FoXQUrlwAAAJQ"]
[Sun Feb 22 19:10:15.672590 2026] [:error] [pid 9588:tid 9637] [client 54.37.252.36:54690] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZrkF2jNBsxseiTcEllUMgAAAE0"]
[Sun Feb 22 19:10:18.721613 2026] [:error] [pid 9589:tid 9675] [client 54.37.252.36:54700] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZrkGtr-1mylR_FoXQUrnwAAAJg"]
[Sun Feb 22 19:10:21.414640 2026] [:error] [pid 17328:tid 17371] [client 54.37.252.36:42024] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZrkHSmytOXCmY4_PcYvuQAAAZM"]
[Sun Feb 22 19:16:16.211642 2026] [:error] [pid 10537:tid 10553] [client 209.87.169.149:63967] [client 209.87.169.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrlgLgCiSojLQQBckjuJQAAAQ4"]
[Sun Feb 22 19:33:47.079187 2026] [:error] [pid 10537:tid 10556] [client 45.131.195.138:61009] [client 45.131.195.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrpm7gCiSojLQQBckjyuwAAARE"]
[Sun Feb 22 19:51:26.297290 2026] [:error] [pid 2762:tid 2826] [client 45.131.195.138:43607] [client 45.131.195.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrtvn0XaxeZ1xx2EW9ZRwAAAIg"]
[Sun Feb 22 20:09:02.735357 2026] [:error] [pid 3183:tid 3217] [client 209.87.169.155:28805] [client 209.87.169.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.155, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZrx3h_OBrCiPf5qSt2hSwAAARM"]
[Sun Feb 22 20:26:44.314160 2026] [:error] [pid 2762:tid 2831] [client 45.131.195.112:55879] [client 45.131.195.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZr2BH0XaxeZ1xx2EW9lzgAAAI0"]
[Sun Feb 22 20:44:08.154348 2026] [:error] [pid 3183:tid 3198] [client 45.131.195.142:56597] [client 45.131.195.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZr6GB_OBrCiPf5qSt2zLAAAAQA"]
[Sun Feb 22 21:19:16.668054 2026] [:error] [pid 3069:tid 3078] [client 209.87.169.140:29861] [client 209.87.169.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.140, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZsCVN9fDph5YapFEwCTOwAAAYc"]
[Sun Feb 22 21:21:46.067197 2026] [:error] [pid 2669:tid 2703] [client 43.165.135.242:40034] [client 43.165.135.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZsC6jINRU27jvxhRrEM9wAAAUQ"]
[Sun Feb 22 21:36:58.667813 2026] [:error] [pid 2668:tid 2677] [client 209.87.169.130:31259] [client 209.87.169.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.130, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZsGeowR6fmUX_Qh5GNtRQAAAQU"]
[Sun Feb 22 21:54:21.508548 2026] [:error] [pid 2629:tid 2661] [client 209.87.169.131:30261] [client 209.87.169.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.131, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZsKjQlsXSV5M4mfwZ8xUwAAAUM"]
[Sun Feb 22 23:33:17.495272 2026] [:error] [pid 2474:tid 2532] [client 185.137.164.21:56703] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aZshvfhvE7P5hX_xKnS2jgAAAE4"]
[Sun Feb 22 23:33:36.941330 2026] [:error] [pid 2574:tid 2594] [client 185.137.164.19:23071] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/hello.php"] [unique_id "aZsh0MkPV7h4nTf-jiTl-wAAAM0"]
[Sun Feb 22 23:33:55.223454 2026] [:error] [pid 2475:tid 2562] [client 185.137.164.16:57797] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "aZsh4ydme8TSKYpXujdxVgAAAJY"]
[Sun Feb 22 23:33:56.893396 2026] [:error] [pid 2475:tid 2536] [client 185.137.164.16:47741] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/ubh/up.php"] [unique_id "aZsh5Cdme8TSKYpXujdxZwAAAIU"]
[Sun Feb 22 23:34:01.295406 2026] [:error] [pid 26033:tid 26049] [client 185.137.164.15:25711] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/bootstrap.php"] [unique_id "aZsh6UTRRZdhkkS8ouSJOwAAAc4"]
[Sun Feb 22 23:34:06.849624 2026] [:error] [pid 26033:tid 26040] [client 185.137.164.19:27231] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/upload.php"] [unique_id "aZsh7kTRRZdhkkS8ouSJkQAAAcU"]
[Sun Feb 22 23:34:07.533051 2026] [:error] [pid 2628:tid 2648] [client 185.137.164.14:34845] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/upload.php"] [unique_id "aZsh77K4woMTeUPH2ns85QAAARE"]
[Sun Feb 22 23:34:08.204397 2026] [:error] [pid 3103:tid 3114] [client 185.137.164.19:64657] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/upload.php"] [unique_id "aZsh8JfzX5hBIaQY93OALAAAAYg"]
[Sun Feb 22 23:34:11.009995 2026] [:error] [pid 2628:tid 2643] [client 185.137.164.14:44553] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aZsh87K4woMTeUPH2ns9CQAAAQw"]
[Sun Feb 22 23:34:11.619339 2026] [:error] [pid 2628:tid 2652] [client 185.137.164.20:49087] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aZsh87K4woMTeUPH2ns9DQAAARU"]
[Sun Feb 22 23:34:15.216071 2026] [:error] [pid 2629:tid 2661] [client 185.137.164.18:31775] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aZsh9wlsXSV5M4mfwZ9byQAAAUM"]
[Sun Feb 22 23:34:18.452257 2026] [:error] [pid 3103:tid 3123] [client 185.137.164.19:27433] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aZsh-pfzX5hBIaQY93OAnwAAAZE"]
[Sun Feb 22 23:34:18.985954 2026] [:error] [pid 2474:tid 2525] [client 185.137.164.17:44293] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aZsh-vhvE7P5hX_xKnS5jwAAAEo"]
[Sun Feb 22 23:34:19.733445 2026] [:error] [pid 2474:tid 2510] [client 185.137.164.12:37311] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aZsh-_hvE7P5hX_xKnS5mAAAAEE"]
[Sun Feb 22 23:34:20.517957 2026] [:error] [pid 2574:tid 2600] [client 185.137.164.14:45741] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aZsh_MkPV7h4nTf-jiTnowAAANM"]
[Sun Feb 22 23:34:25.148422 2026] [:error] [pid 2628:tid 2654] [client 185.137.164.15:65355] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aZsiAbK4woMTeUPH2ns9agAAARc"]
[Sun Feb 22 23:34:25.685087 2026] [:error] [pid 2628:tid 2649] [client 185.137.164.15:44211] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aZsiAbK4woMTeUPH2ns9bwAAARI"]
[Sun Feb 22 23:34:26.245422 2026] [:error] [pid 2474:tid 2535] [client 185.137.164.13:42119] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aZsiAvhvE7P5hX_xKnS5zQAAAFA"]
[Sun Feb 22 23:34:28.473299 2026] [:error] [pid 2628:tid 2640] [client 185.137.164.16:56897] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZsiBLK4woMTeUPH2ns9iQAAAQk"]
[Sun Feb 22 23:34:34.964399 2026] [:error] [pid 2574:tid 2603] [client 185.137.164.12:51133] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZsiCskPV7h4nTf-jiTn_wAAANY"]
[Sun Feb 22 23:34:37.592127 2026] [:error] [pid 2628:tid 2649] [client 185.137.164.12:27679] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aZsiDbK4woMTeUPH2ns9vwAAARI"]
[Sun Feb 22 23:34:40.150639 2026] [:error] [pid 2574:tid 2590] [client 185.137.164.19:32767] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aZsiEMkPV7h4nTf-jiToGAAAAMk"]
[Sun Feb 22 23:34:48.031841 2026] [:error] [pid 2628:tid 2642] [client 185.137.164.17:27965] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aZsiGLK4woMTeUPH2ns-BwAAAQs"]
[Sun Feb 22 23:34:51.370535 2026] [:error] [pid 2474:tid 2541] [client 185.137.164.15:41581] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZsiG_hvE7P5hX_xKnS6dgAAAFQ"]
[Sun Feb 22 23:34:53.326566 2026] [:error] [pid 2474:tid 2534] [client 185.137.164.18:48039] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aZsiHfhvE7P5hX_xKnS6hgAAAE8"]
[Sun Feb 22 23:35:02.985142 2026] [:error] [pid 2628:tid 2634] [client 185.137.164.18:41847] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZsiJrK4woMTeUPH2ns-TgAAAQM"]
[Sun Feb 22 23:35:05.460629 2026] [:error] [pid 2629:tid 2677] [client 185.137.164.18:38835] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZsiKQlsXSV5M4mfwZ9cnAAAAVM"]
[Sun Feb 22 23:35:06.032983 2026] [:error] [pid 3103:tid 3106] [client 185.137.164.14:35913] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZsiKpfzX5hBIaQY93OBoQAAAYA"]
[Sun Feb 22 23:35:07.723965 2026] [:error] [pid 3103:tid 3124] [client 185.137.164.20:25751] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZsiK5fzX5hBIaQY93OBowAAAZI"]
[Sun Feb 22 23:35:08.227151 2026] [:error] [pid 3103:tid 3114] [client 185.137.164.16:44025] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZsiLJfzX5hBIaQY93OBpAAAAYg"]
[Sun Feb 22 23:35:08.738275 2026] [:error] [pid 2474:tid 2542] [client 185.137.164.17:30633] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZsiLPhvE7P5hX_xKnS6rQAAAFU"]
[Sun Feb 22 23:35:10.502807 2026] [:error] [pid 2475:tid 2550] [client 185.137.164.16:54465] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZsiLidme8TSKYpXujdzMgAAAIo"]
[Sun Feb 22 23:35:13.955795 2026] [:error] [pid 3103:tid 3129] [client 185.137.164.13:27947] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aZsiMZfzX5hBIaQY93OBzgAAAZc"]
[Sun Feb 22 23:35:17.709110 2026] [:error] [pid 2628:tid 2649] [client 185.137.164.19:42263] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZsiNbK4woMTeUPH2ns-mQAAARI"]
[Sun Feb 22 23:35:20.761804 2026] [:error] [pid 26033:tid 26037] [client 185.137.164.16:62467] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZsiOETRRZdhkkS8ouSLagAAAcI"]
[Sun Feb 22 23:35:22.830587 2026] [:error] [pid 2574:tid 2591] [client 185.137.164.20:28193] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZsiOskPV7h4nTf-jiTo9AAAAMo"]
[Sun Feb 22 23:35:33.950858 2026] [:error] [pid 2474:tid 2525] [client 185.137.164.20:56291] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZsiRfhvE7P5hX_xKnS65gAAAEo"]
[Sun Feb 22 23:35:36.519820 2026] [:error] [pid 2474:tid 2514] [client 185.137.164.16:28031] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZsiSPhvE7P5hX_xKnS67gAAAEU"]
[Sun Feb 22 23:35:39.944001 2026] [:error] [pid 2574:tid 2600] [client 185.137.164.20:34335] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd-1/admin.php"] [unique_id "aZsiS8kPV7h4nTf-jiTpcwAAANM"]
[Sun Feb 22 23:35:43.119837 2026] [:error] [pid 2475:tid 2538] [client 185.137.164.21:24167] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aZsiTydme8TSKYpXujdz6AAAAIY"]
[Sun Feb 22 23:35:46.042820 2026] [:error] [pid 3103:tid 3114] [client 185.137.164.13:41841] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aZsiUpfzX5hBIaQY93OCOQAAAYg"]
[Sun Feb 22 23:35:53.236786 2026] [:error] [pid 2474:tid 2530] [client 185.137.164.13:24135] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZsiWfhvE7P5hX_xKnS7FQAAAE0"]
[Sun Feb 22 23:35:55.449826 2026] [:error] [pid 26033:tid 26036] [client 185.137.164.18:29805] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZsiW0TRRZdhkkS8ouSL2AAAAcE"]
[Sun Feb 22 23:35:57.862539 2026] [:error] [pid 2475:tid 2549] [client 185.137.164.19:56205] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZsiXSdme8TSKYpXujd0TgAAAIk"]
[Sun Feb 22 23:35:58.524862 2026] [:error] [pid 2629:tid 2666] [client 185.137.164.19:26267] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZsiXglsXSV5M4mfwZ9dXAAAAUg"]
[Sun Feb 22 23:35:59.046101 2026] [:error] [pid 2628:tid 2650] [client 185.137.164.17:37021] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZsiX7K4woMTeUPH2ns_FgAAARM"]
[Sun Feb 22 23:35:59.606543 2026] [:error] [pid 2628:tid 2655] [client 185.137.164.12:46071] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/404.php"] [unique_id "aZsiX7K4woMTeUPH2ns_GQAAARg"]
[Sun Feb 22 23:36:04.358026 2026] [:error] [pid 2473:tid 2485] [client 185.137.164.14:50775] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aZsiZHptAeV7-XzzNzhBAwAAAAg"]
[Sun Feb 22 23:36:04.975039 2026] [:error] [pid 3103:tid 3117] [client 185.137.164.13:55551] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aZsiZJfzX5hBIaQY93OChwAAAYs"]
[Sun Feb 22 23:36:05.505002 2026] [:error] [pid 2473:tid 2498] [client 185.137.164.20:55061] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZsiZXptAeV7-XzzNzhBBwAAABU"]
[Mon Feb 23 00:46:42.847799 2026] [:error] [pid 28558:tid 28574] [client 43.132.214.228:46982] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZsy8idFHR5e1Gd10vdzTQAAAM4"]
[Mon Feb 23 02:22:01.625816 2026] [:error] [pid 4806:tid 4820] [client 107.189.29.155:13895] [client 107.189.29.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.155, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZtJSfFTHI_ud-cTYbQWUQAAAQw"]
[Mon Feb 23 02:22:03.704186 2026] [:error] [pid 4806:tid 4810] [client 107.189.29.155:13895] [client 107.189.29.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.155, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZtJS_FTHI_ud-cTYbQWWAAAAQI"]
[Mon Feb 23 04:58:42.681045 2026] [:error] [pid 54381:tid 54459] [client 45.236.20.148:6376] [client 45.236.20.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.236.20.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZtuArZA3T28ex6RStphUQAAAJE"]
[Mon Feb 23 05:05:12.785497 2026] [:error] [pid 54381:tid 54451] [client 45.236.20.148:6599] [client 45.236.20.148] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZtviLZA3T28ex6RStpk1gAAAIk"]
[Mon Feb 23 06:20:59.698093 2026] [:error] [pid 2445:tid 2476] [client 121.229.185.160:55877] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZuBSz1z6EhBn71lCAF3hAAAAEE"]
[Mon Feb 23 07:47:29.206406 2026] [:error] [pid 25294:tid 25362] [client 104.28.203.58:24466] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aZuVkSRCFB3CqIo_jfY_AQAAAE4"]
[Mon Feb 23 07:47:48.963195 2026] [:error] [pid 25294:tid 25377] [client 104.28.161.188:56592] [client 104.28.161.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/style.php"] [unique_id "aZuVpCRCFB3CqIo_jfY_HAAAAFg"]
[Mon Feb 23 08:19:07.671831 2026] [:error] [pid 25294:tid 25372] [client 43.167.157.80:42732] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZuc-yRCFB3CqIo_jfZYIgAAAFM"]
[Mon Feb 23 09:47:52.220444 2026] [:error] [pid 39640:tid 39681] [client 74.248.32.28:7713] [client 74.248.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZuxyNsK--eVCgzvvuc8MwAAAos"]
[Mon Feb 23 09:48:01.398910 2026] [:error] [pid 25380:tid 25397] [client 74.248.32.28:6701] [client 74.248.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aZux0aKrc8yFQ8fy78o-QAAAAM8"]
[Mon Feb 23 09:48:06.241823 2026] [:error] [pid 39640:tid 39687] [client 74.248.32.28:9615] [client 74.248.32.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/35.php"] [unique_id "aZux1tsK--eVCgzvvuc8WAAAApE"]
[Mon Feb 23 09:48:06.802370 2026] [:error] [pid 39640:tid 39678] [client 74.248.32.28:12425] [client 74.248.32.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/35.php"] [unique_id "aZux1tsK--eVCgzvvuc8WwAAAog"]
[Mon Feb 23 09:48:07.339450 2026] [:error] [pid 39640:tid 39677] [client 74.248.32.28:6055] [client 74.248.32.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/35.php"] [unique_id "aZux19sK--eVCgzvvuc8XgAAAoc"]
[Mon Feb 23 09:48:07.955718 2026] [:error] [pid 25380:tid 25390] [client 74.248.32.28:7387] [client 74.248.32.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/35.php"] [unique_id "aZux16Krc8yFQ8fy78o-awAAAMg"]
[Mon Feb 23 09:48:08.525520 2026] [:error] [pid 39540:tid 39587] [client 74.248.32.28:6365] [client 74.248.32.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aZux2Lsgm9aTWhlRScKUrwAAAdI"]
[Mon Feb 23 09:48:09.034253 2026] [:error] [pid 25294:tid 25364] [client 74.248.32.28:7443] [client 74.248.32.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aZux2SRCFB3CqIo_jfZ4nAAAAE8"]
[Mon Feb 23 09:48:09.612857 2026] [:error] [pid 39540:tid 39591] [client 74.248.32.28:15131] [client 74.248.32.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aZux2bsgm9aTWhlRScKUtQAAAdY"]
[Mon Feb 23 10:54:41.009926 2026] [:error] [pid 39639:tid 39663] [client 107.189.29.155:46287] [client 107.189.29.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.155, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZvBcRpFkMoMi8uTUUMg2gAAAlQ"]
[Mon Feb 23 10:54:42.602210 2026] [:error] [pid 39639:tid 39657] [client 107.189.29.155:46287] [client 107.189.29.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.155, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZvBchpFkMoMi8uTUUMg3AAAAk4"]
[Mon Feb 23 12:05:41.565419 2026] [:error] [pid 39639:tid 39650] [client 43.157.38.131:44334] [client 43.157.38.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZvSFRpFkMoMi8uTUUMx6QAAAkc"]
[Mon Feb 23 12:43:54.827633 2026] [:error] [pid 39640:tid 39694] [client 54.37.252.46:56430] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aZvbCtsK--eVCgzvvud0nwAAApg"]
[Mon Feb 23 12:43:57.694497 2026] [:error] [pid 39639:tid 39666] [client 54.37.252.46:59024] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aZvbDRpFkMoMi8uTUUM5HAAAAlc"]
[Mon Feb 23 12:44:00.246171 2026] [:error] [pid 25380:tid 25403] [client 54.37.252.46:59038] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZvbEKKrc8yFQ8fy78qLeAAAANU"]
[Mon Feb 23 12:44:02.783035 2026] [:error] [pid 39639:tid 39659] [client 54.37.252.46:59040] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZvbEhpFkMoMi8uTUUM5HwAAAlA"]
[Mon Feb 23 12:44:05.405025 2026] [:error] [pid 39639:tid 39646] [client 54.37.252.46:38238] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZvbFRpFkMoMi8uTUUM5LQAAAkM"]
[Mon Feb 23 12:44:07.933708 2026] [:error] [pid 39640:tid 39674] [client 54.37.252.46:38250] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZvbF9sK--eVCgzvvud0qAAAAoQ"]
[Mon Feb 23 12:44:10.435944 2026] [:error] [pid 39540:tid 39589] [client 54.37.252.46:38260] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aZvbGrsgm9aTWhlRScL8mwAAAdQ"]
[Mon Feb 23 12:44:12.918882 2026] [:error] [pid 39639:tid 39651] [client 54.37.252.46:38270] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZvbHBpFkMoMi8uTUUM5NAAAAkg"]
[Mon Feb 23 12:44:15.458884 2026] [:error] [pid 39639:tid 39644] [client 54.37.252.46:43990] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZvbHxpFkMoMi8uTUUM5OwAAAkE"]
[Mon Feb 23 12:44:18.012580 2026] [:error] [pid 25295:tid 25333] [client 54.37.252.46:44006] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZvbIo2Av4J1Jnqi7yKnKAAAAIM"]
[Mon Feb 23 12:44:20.408090 2026] [:error] [pid 25294:tid 25354] [client 54.37.252.46:44018] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZvbJCRCFB3CqIo_jfaU4AAAAEo"]
[Mon Feb 23 12:44:22.894769 2026] [:error] [pid 39639:tid 39654] [client 54.37.252.46:44020] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZvbJhpFkMoMi8uTUUM5PQAAAks"]
[Mon Feb 23 12:44:25.384530 2026] [:error] [pid 29909:tid 29930] [client 54.37.252.46:40808] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZvbKT9oc2QzltksUk66lQAAARM"]
[Mon Feb 23 12:44:28.025816 2026] [:error] [pid 39540:tid 39573] [client 54.37.252.46:40816] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZvbLLsgm9aTWhlRScL8sgAAAcQ"]
[Mon Feb 23 12:44:30.629814 2026] [:error] [pid 39540:tid 39590] [client 54.37.252.46:40830] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZvbLrsgm9aTWhlRScL8tgAAAdU"]
[Mon Feb 23 12:44:33.081639 2026] [:error] [pid 39540:tid 39593] [client 54.37.252.46:40838] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZvbMbsgm9aTWhlRScL8vQAAAdg"]
[Mon Feb 23 12:44:35.498920 2026] [:error] [pid 39540:tid 39586] [client 54.37.252.46:57280] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aZvbM7sgm9aTWhlRScL8wQAAAdE"]
[Mon Feb 23 12:44:37.943562 2026] [:error] [pid 39640:tid 39675] [client 54.37.252.46:57282] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZvbNdsK--eVCgzvvud0xgAAAoU"]
[Mon Feb 23 12:44:40.523552 2026] [:error] [pid 25380:tid 25402] [client 54.37.252.46:57294] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZvbOKKrc8yFQ8fy78qLtgAAANQ"]
[Mon Feb 23 12:44:42.969817 2026] [:error] [pid 39538:tid 39561] [client 54.37.252.46:57310] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZvbOi4Zk8-cQOG3Zno4FwAAAZM"]
[Mon Feb 23 12:44:45.408897 2026] [:error] [pid 25380:tid 25405] [client 54.37.252.46:49368] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZvbPaKrc8yFQ8fy78qLwQAAANc"]
[Mon Feb 23 12:44:48.056104 2026] [:error] [pid 39640:tid 39675] [client 54.37.252.46:49384] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aZvbQNsK--eVCgzvvud00wAAAoU"]
[Mon Feb 23 12:44:50.648624 2026] [:error] [pid 39540:tid 39584] [client 54.37.252.46:49386] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aZvbQrsgm9aTWhlRScL8xgAAAc8"]
[Mon Feb 23 12:45:22.026446 2026] [:error] [pid 39540:tid 39571] [client 54.37.252.46:49396] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aZvbYrsgm9aTWhlRScL8-gAAAcI"]
[Mon Feb 23 12:45:24.367004 2026] [:error] [pid 39540:tid 39572] [client 54.37.252.46:45790] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aZvbZLsgm9aTWhlRScL8_wAAAcM"]
[Mon Feb 23 12:45:26.793713 2026] [:error] [pid 39640:tid 39677] [client 54.37.252.46:45804] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aZvbZtsK--eVCgzvvud09QAAAoc"]
[Mon Feb 23 12:45:29.320668 2026] [:error] [pid 25380:tid 25386] [client 54.37.252.46:45810] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZvbaaKrc8yFQ8fy78qL7QAAAMQ"]
[Mon Feb 23 12:45:31.753872 2026] [:error] [pid 25380:tid 25398] [client 54.37.252.46:45812] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aZvba6Krc8yFQ8fy78qL8gAAANA"]
[Mon Feb 23 12:45:34.254578 2026] [:error] [pid 25293:tid 25315] [client 54.37.252.46:49490] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aZvbbuL9XfBf66iHi_eWcgAAABA"]
[Mon Feb 23 12:45:36.656877 2026] [:error] [pid 29909:tid 29920] [client 54.37.252.46:49496] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZvbcD9oc2QzltksUk66oAAAAQk"]
[Mon Feb 23 12:45:39.043336 2026] [:error] [pid 25294:tid 25362] [client 54.37.252.46:49512] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZvbcyRCFB3CqIo_jfaVBAAAAE4"]
[Mon Feb 23 12:45:41.575115 2026] [:error] [pid 25294:tid 25358] [client 54.37.252.46:49528] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aZvbdSRCFB3CqIo_jfaVCAAAAEw"]
[Mon Feb 23 12:45:44.109044 2026] [:error] [pid 39540:tid 39582] [client 54.37.252.46:40702] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZvbeLsgm9aTWhlRScL9EgAAAc0"]
[Mon Feb 23 12:45:46.511243 2026] [:error] [pid 25380:tid 25399] [client 54.37.252.46:40716] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZvbeqKrc8yFQ8fy78qMBgAAANE"]
[Mon Feb 23 12:45:48.876950 2026] [:error] [pid 39639:tid 39645] [client 54.37.252.46:40730] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZvbfBpFkMoMi8uTUUM5bQAAAkI"]
[Mon Feb 23 12:45:51.414807 2026] [:error] [pid 25380:tid 25395] [client 54.37.252.46:40746] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZvbf6Krc8yFQ8fy78qMCgAAAM0"]
[Mon Feb 23 12:45:53.922608 2026] [:error] [pid 25380:tid 25386] [client 54.37.252.46:36114] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZvbgaKrc8yFQ8fy78qMEQAAAMQ"]
[Mon Feb 23 12:45:56.299189 2026] [:error] [pid 39540:tid 39579] [client 54.37.252.46:36120] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZvbhLsgm9aTWhlRScL9HAAAAco"]
[Mon Feb 23 12:45:58.803582 2026] [:error] [pid 39540:tid 39582] [client 54.37.252.46:36126] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZvbhrsgm9aTWhlRScL9HwAAAc0"]
[Mon Feb 23 12:46:01.323849 2026] [:error] [pid 39540:tid 39578] [client 54.37.252.46:36142] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZvbibsgm9aTWhlRScL9IQAAAck"]
[Mon Feb 23 12:46:03.830031 2026] [:error] [pid 29909:tid 29912] [client 54.37.252.46:56890] [client 54.37.252.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZvbiz9oc2QzltksUk66qAAAAQE"]
[Mon Feb 23 13:02:37.761622 2026] [:error] [pid 39639:tid 39663] [client 106.119.167.146:37699] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZvfbRpFkMoMi8uTUUM8HQAAAlQ"]
[Mon Feb 23 15:25:16.761305 2026] [:error] [pid 39540:tid 39580] [client 43.130.91.95:47634] [client 43.130.91.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZwA3Lsgm9aTWhlRScJQXAAAAcs"]
[Mon Feb 23 17:59:56.691813 2026] [:error] [pid 39504:tid 39511] [client 51.77.218.189:45692] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZwlHHLcHpOlI9gwwJoN2AAAAUU"]
[Mon Feb 23 17:59:59.216362 2026] [:error] [pid 39540:tid 39580] [client 51.77.218.189:43952] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZwlH7sgm9aTWhlRScKMqgAAAcs"]
[Mon Feb 23 18:00:01.917271 2026] [:error] [pid 39639:tid 39651] [client 51.77.218.189:43956] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZwlIRpFkMoMi8uTUUOFlwAAAkg"]
[Mon Feb 23 18:00:04.591999 2026] [:error] [pid 39504:tid 39529] [client 51.77.218.189:34292] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZwlJHLcHpOlI9gwwJoN2QAAAVc"]
[Mon Feb 23 18:00:07.147173 2026] [:error] [pid 25380:tid 25405] [client 51.77.218.189:34296] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZwlJ6Krc8yFQ8fy78oJFwAAANc"]
[Mon Feb 23 18:00:09.732104 2026] [:error] [pid 39639:tid 39653] [client 51.77.218.189:34306] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZwlKRpFkMoMi8uTUUOFrgAAAko"]
[Mon Feb 23 18:00:12.187880 2026] [:error] [pid 25380:tid 25385] [client 51.77.218.189:34314] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZwlLKKrc8yFQ8fy78oJJAAAAMM"]
[Mon Feb 23 18:00:14.811924 2026] [:error] [pid 25380:tid 25404] [client 51.77.218.189:40842] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZwlLqKrc8yFQ8fy78oJNwAAANY"]
[Mon Feb 23 18:00:17.325613 2026] [:error] [pid 39640:tid 39681] [client 51.77.218.189:40856] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZwlMdsK--eVCgzvvufIfgAAAos"]
[Mon Feb 23 18:00:19.790780 2026] [:error] [pid 25380:tid 25405] [client 51.77.218.189:40868] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZwlM6Krc8yFQ8fy78oJVgAAANc"]
[Mon Feb 23 18:00:22.270406 2026] [:error] [pid 39540:tid 39576] [client 51.77.218.189:40880] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZwlNrsgm9aTWhlRScKMzQAAAcc"]
[Mon Feb 23 18:00:24.667831 2026] [:error] [pid 39540:tid 39587] [client 51.77.218.189:38776] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZwlOLsgm9aTWhlRScKM3AAAAdI"]
[Mon Feb 23 18:00:26.967086 2026] [:error] [pid 39639:tid 39664] [client 51.77.218.189:38792] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZwlOhpFkMoMi8uTUUOFtgAAAlU"]
[Mon Feb 23 18:00:29.415675 2026] [:error] [pid 39640:tid 39680] [client 51.77.218.189:38794] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZwlPdsK--eVCgzvvufIoQAAAoo"]
[Mon Feb 23 18:00:31.877660 2026] [:error] [pid 39639:tid 39658] [client 51.77.218.189:38808] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZwlPxpFkMoMi8uTUUOFxgAAAk8"]
[Mon Feb 23 18:00:34.366574 2026] [:error] [pid 39540:tid 39576] [client 51.77.218.189:39188] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZwlQrsgm9aTWhlRScKM6wAAAcc"]
[Mon Feb 23 18:00:36.818247 2026] [:error] [pid 39639:tid 39662] [client 51.77.218.189:39198] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZwlRBpFkMoMi8uTUUOF1gAAAlM"]
[Mon Feb 23 18:00:39.125661 2026] [:error] [pid 39540:tid 39576] [client 51.77.218.189:39208] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZwlR7sgm9aTWhlRScKM9gAAAcc"]
[Mon Feb 23 18:00:41.752404 2026] [:error] [pid 39640:tid 39685] [client 51.77.218.189:39214] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZwlSdsK--eVCgzvvufIrwAAAo8"]
[Mon Feb 23 18:00:44.181027 2026] [:error] [pid 39540:tid 39569] [client 51.77.218.189:49384] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZwlTLsgm9aTWhlRScKM_QAAAcA"]
[Mon Feb 23 18:00:46.787260 2026] [:error] [pid 39640:tid 39678] [client 51.77.218.189:49396] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZwlTtsK--eVCgzvvufIswAAAog"]
[Mon Feb 23 19:42:02.901986 2026] [:error] [pid 39540:tid 39583] [client 20.114.221.114:9679] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aZw9Crsgm9aTWhlRScKnfQAAAc4"]
[Mon Feb 23 19:42:03.946288 2026] [:error] [pid 39640:tid 39677] [client 20.114.221.114:9378] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aZw9C9sK--eVCgzvvufXywAAAoc"]
[Mon Feb 23 19:42:05.438345 2026] [:error] [pid 39639:tid 39644] [client 20.114.221.114:64902] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aZw9DRpFkMoMi8uTUUO4rAAAAkE"]
[Mon Feb 23 19:42:06.017183 2026] [:error] [pid 39639:tid 39654] [client 20.114.221.114:9382] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aZw9DhpFkMoMi8uTUUO4rwAAAks"]
[Mon Feb 23 19:42:06.607527 2026] [:error] [pid 39540:tid 39580] [client 20.114.221.114:9551] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "aZw9Drsgm9aTWhlRScKnfgAAAcs"]
[Mon Feb 23 19:42:08.501549 2026] [:error] [pid 29909:tid 29915] [client 20.114.221.114:9685] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "aZw9ED9oc2QzltksUk7YnwAAAQQ"]
[Mon Feb 23 19:42:09.807790 2026] [:error] [pid 29909:tid 29922] [client 20.114.221.114:9703] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "aZw9ET9oc2QzltksUk7YoAAAAQs"]
[Mon Feb 23 19:42:10.640842 2026] [:error] [pid 39540:tid 39592] [client 20.114.221.114:9557] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "aZw9Ersgm9aTWhlRScKngQAAAdc"]
[Mon Feb 23 19:42:11.778065 2026] [:error] [pid 39538:tid 39560] [client 20.114.221.114:64930] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aZw9Ey4Zk8-cQOG3ZnpqhwAAAZI"]
[Mon Feb 23 19:42:12.995883 2026] [:error] [pid 25380:tid 25392] [client 20.114.221.114:9581] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aZw9FKKrc8yFQ8fy78otEQAAAMo"]
[Mon Feb 23 19:42:14.053704 2026] [:error] [pid 39639:tid 39655] [client 20.114.221.114:65013] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aZw9FhpFkMoMi8uTUUO4vQAAAkw"]
[Mon Feb 23 19:42:14.859843 2026] [:error] [pid 39639:tid 39656] [client 20.114.221.114:9555] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aZw9FhpFkMoMi8uTUUO4wwAAAk0"]
[Mon Feb 23 19:42:15.803172 2026] [:error] [pid 39639:tid 39646] [client 20.114.221.114:64949] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/update_with_pics.php"] [unique_id "aZw9FxpFkMoMi8uTUUO4xgAAAkM"]
[Mon Feb 23 19:42:16.423502 2026] [:error] [pid 39639:tid 39667] [client 20.114.221.114:9571] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/update_with_pics.php"] [unique_id "aZw9GBpFkMoMi8uTUUO4ygAAAlg"]
[Mon Feb 23 19:42:17.114523 2026] [:error] [pid 25380:tid 25399] [client 20.114.221.114:65014] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/update_with_pics.php"] [unique_id "aZw9GaKrc8yFQ8fy78otGAAAANE"]
[Mon Feb 23 19:42:18.555671 2026] [:error] [pid 39504:tid 39516] [client 20.114.221.114:64942] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/update_with_pics.php"] [unique_id "aZw9GnLcHpOlI9gwwJoWygAAAUo"]
[Mon Feb 23 19:42:19.880406 2026] [:error] [pid 39639:tid 39646] [client 20.114.221.114:9567] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/yes.php"] [unique_id "aZw9GxpFkMoMi8uTUUO41AAAAkM"]
[Mon Feb 23 19:42:21.495323 2026] [:error] [pid 39540:tid 39575] [client 20.114.221.114:9577] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/yes.php"] [unique_id "aZw9Hbsgm9aTWhlRScKniwAAAcY"]
[Mon Feb 23 19:42:22.604214 2026] [:error] [pid 39639:tid 39667] [client 20.114.221.114:9400] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/yes.php"] [unique_id "aZw9HhpFkMoMi8uTUUO41wAAAlg"]
[Mon Feb 23 19:42:23.346256 2026] [:error] [pid 25294:tid 25351] [client 20.114.221.114:9721] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/yes.php"] [unique_id "aZw9HyRCFB3CqIo_jfbcdwAAAEk"]
[Mon Feb 23 19:42:24.234718 2026] [:error] [pid 25294:tid 25328] [client 20.114.221.114:64980] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "aZw9ICRCFB3CqIo_jfbceQAAAEA"]
[Mon Feb 23 19:42:25.064660 2026] [:error] [pid 39640:tid 39676] [client 20.114.221.114:9368] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "aZw9IdsK--eVCgzvvufX0AAAAoY"]
[Mon Feb 23 19:42:26.049278 2026] [:error] [pid 39640:tid 39686] [client 20.114.221.114:9575] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "aZw9ItsK--eVCgzvvufX0wAAApA"]
[Mon Feb 23 19:42:26.716630 2026] [:error] [pid 39640:tid 39684] [client 20.114.221.114:64982] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "aZw9ItsK--eVCgzvvufX1QAAAo4"]
[Mon Feb 23 19:42:27.440619 2026] [:error] [pid 25380:tid 25399] [client 20.114.221.114:9710] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aZw9I6Krc8yFQ8fy78otJAAAANE"]
[Mon Feb 23 19:42:28.391181 2026] [:error] [pid 25380:tid 25386] [client 20.114.221.114:64956] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aZw9JKKrc8yFQ8fy78otJwAAAMQ"]
[Mon Feb 23 19:42:29.173851 2026] [:error] [pid 39540:tid 39585] [client 20.114.221.114:9721] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aZw9Jbsgm9aTWhlRScKnjgAAAdA"]
[Mon Feb 23 19:42:29.662121 2026] [:error] [pid 25380:tid 25396] [client 20.114.221.114:9718] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aZw9JaKrc8yFQ8fy78otKwAAAM4"]
[Mon Feb 23 19:42:30.265484 2026] [:error] [pid 39540:tid 39591] [client 20.114.221.114:9380] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ze.php"] [unique_id "aZw9Jrsgm9aTWhlRScKnjwAAAdY"]
[Mon Feb 23 19:42:30.939188 2026] [:error] [pid 25295:tid 25347] [client 20.114.221.114:9677] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ze.php"] [unique_id "aZw9Jo2Av4J1Jnqi7yLAbgAAAI0"]
[Mon Feb 23 19:42:31.801043 2026] [:error] [pid 25295:tid 25338] [client 20.114.221.114:9699] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ze.php"] [unique_id "aZw9J42Av4J1Jnqi7yLAbwAAAIc"]
[Mon Feb 23 19:42:32.370821 2026] [:error] [pid 25294:tid 25356] [client 20.114.221.114:9365] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ze.php"] [unique_id "aZw9KCRCFB3CqIo_jfbcegAAAEs"]
[Mon Feb 23 19:42:33.044619 2026] [:error] [pid 25380:tid 25392] [client 20.114.221.114:9722] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seetox.php"] [unique_id "aZw9KaKrc8yFQ8fy78otNQAAAMo"]
[Mon Feb 23 19:42:34.006403 2026] [:error] [pid 39639:tid 39644] [client 20.114.221.114:9388] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seetox.php"] [unique_id "aZw9KhpFkMoMi8uTUUO43wAAAkE"]
[Mon Feb 23 19:42:34.749902 2026] [:error] [pid 25295:tid 25365] [client 20.114.221.114:64913] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seetox.php"] [unique_id "aZw9Ko2Av4J1Jnqi7yLAcAAAAJY"]
[Mon Feb 23 19:42:35.294997 2026] [:error] [pid 25293:tid 25315] [client 20.114.221.114:9564] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seetox.php"] [unique_id "aZw9K-L9XfBf66iHi_epywAAABA"]
[Mon Feb 23 19:42:35.877031 2026] [:error] [pid 29909:tid 29919] [client 20.114.221.114:9558] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aZw9Kz9oc2QzltksUk7YpAAAAQg"]
[Mon Feb 23 19:42:37.367364 2026] [:error] [pid 39640:tid 39693] [client 20.114.221.114:9357] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aZw9LdsK--eVCgzvvufX2QAAApc"]
[Mon Feb 23 19:42:38.168920 2026] [:error] [pid 39640:tid 39682] [client 20.114.221.114:9565] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aZw9LtsK--eVCgzvvufX2wAAAow"]
[Mon Feb 23 19:42:38.924137 2026] [:error] [pid 39640:tid 39673] [client 20.114.221.114:65009] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aZw9LtsK--eVCgzvvufX3QAAAoM"]
[Mon Feb 23 19:42:39.646596 2026] [:error] [pid 25295:tid 25369] [client 20.114.221.114:9358] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aZw9L42Av4J1Jnqi7yLAdgAAAJg"]
[Mon Feb 23 19:42:40.181110 2026] [:error] [pid 39640:tid 39675] [client 20.114.221.114:9398] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aZw9MNsK--eVCgzvvufX4AAAAoU"]
[Mon Feb 23 19:42:41.099597 2026] [:error] [pid 25380:tid 25383] [client 20.114.221.114:9597] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aZw9MaKrc8yFQ8fy78otOgAAAME"]
[Mon Feb 23 19:42:42.406745 2026] [:error] [pid 29909:tid 29926] [client 20.114.221.114:65012] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aZw9Mj9oc2QzltksUk7YqQAAAQ8"]
[Mon Feb 23 19:42:43.336314 2026] [:error] [pid 39504:tid 39512] [client 20.114.221.114:64972] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xoot.php"] [unique_id "aZw9M3LcHpOlI9gwwJoW0gAAAUY"]
[Mon Feb 23 19:42:44.231788 2026] [:error] [pid 39639:tid 39645] [client 20.114.221.114:9667] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xoot.php"] [unique_id "aZw9NBpFkMoMi8uTUUO46AAAAkI"]
[Mon Feb 23 19:42:45.138620 2026] [:error] [pid 39639:tid 39650] [client 20.114.221.114:9356] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xoot.php"] [unique_id "aZw9NRpFkMoMi8uTUUO46wAAAkc"]
[Mon Feb 23 19:42:46.056710 2026] [:error] [pid 39639:tid 39647] [client 20.114.221.114:9546] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xoot.php"] [unique_id "aZw9NhpFkMoMi8uTUUO47gAAAkQ"]
[Mon Feb 23 19:42:47.086504 2026] [:error] [pid 39540:tid 39581] [client 20.114.221.114:64900] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aZw9N7sgm9aTWhlRScKnlAAAAcw"]
[Mon Feb 23 19:42:47.696433 2026] [:error] [pid 39640:tid 39690] [client 20.114.221.114:9579] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aZw9N9sK--eVCgzvvufX5gAAApQ"]
[Mon Feb 23 19:42:48.397945 2026] [:error] [pid 39640:tid 39689] [client 20.114.221.114:9394] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aZw9ONsK--eVCgzvvufX5wAAApM"]
[Mon Feb 23 19:42:49.952305 2026] [:error] [pid 39639:tid 39661] [client 20.114.221.114:9390] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aZw9ORpFkMoMi8uTUUO49AAAAlI"]
[Mon Feb 23 19:42:51.198547 2026] [:error] [pid 39639:tid 39645] [client 20.114.221.114:63732] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZw9OxpFkMoMi8uTUUO4-AAAAkI"]
[Mon Feb 23 19:42:51.928268 2026] [:error] [pid 29909:tid 29917] [client 20.114.221.114:9369] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZw9Oz9oc2QzltksUk7YqgAAAQY"]
[Mon Feb 23 19:42:52.440358 2026] [:error] [pid 39639:tid 39666] [client 20.114.221.114:64969] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZw9PBpFkMoMi8uTUUO4_wAAAlc"]
[Mon Feb 23 19:42:52.991359 2026] [:error] [pid 39639:tid 39667] [client 20.114.221.114:9665] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aZw9PBpFkMoMi8uTUUO5AQAAAlg"]
[Mon Feb 23 19:42:53.753241 2026] [:error] [pid 39639:tid 39657] [client 20.114.221.114:64965] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aZw9PRpFkMoMi8uTUUO5BAAAAk4"]
[Mon Feb 23 19:42:54.500683 2026] [:error] [pid 39538:tid 39553] [client 20.114.221.114:63684] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aZw9Pi4Zk8-cQOG3ZnpqmAAAAYs"]
[Mon Feb 23 19:42:55.160329 2026] [:error] [pid 25294:tid 25364] [client 20.114.221.114:9371] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aZw9PyRCFB3CqIo_jfbcfgAAAE8"]
[Mon Feb 23 19:42:55.774184 2026] [:error] [pid 39639:tid 39652] [client 20.114.221.114:64993] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aZw9PxpFkMoMi8uTUUO5CAAAAkk"]
[Mon Feb 23 19:42:56.344794 2026] [:error] [pid 25380:tid 25405] [client 20.114.221.114:64953] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZw9QKKrc8yFQ8fy78otSwAAANc"]
[Mon Feb 23 19:42:56.919229 2026] [:error] [pid 39538:tid 39549] [client 20.114.221.114:9392] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZw9QC4Zk8-cQOG3ZnpqmgAAAYc"]
[Mon Feb 23 19:42:57.416934 2026] [:error] [pid 25380:tid 25406] [client 20.114.221.114:9377] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZw9QaKrc8yFQ8fy78otTgAAANg"]
[Mon Feb 23 19:42:57.952600 2026] [:error] [pid 25380:tid 25388] [client 20.114.221.114:63707] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZw9QaKrc8yFQ8fy78otUQAAAMY"]
[Mon Feb 23 19:42:58.497471 2026] [:error] [pid 39538:tid 39555] [client 20.114.221.114:64906] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aZw9Qi4Zk8-cQOG3ZnpqnAAAAY0"]
[Mon Feb 23 19:42:59.018290 2026] [:error] [pid 39538:tid 39557] [client 20.114.221.114:64987] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aZw9Qy4Zk8-cQOG3ZnpqnQAAAY8"]
[Mon Feb 23 19:42:59.523611 2026] [:error] [pid 25294:tid 25330] [client 20.114.221.114:9541] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aZw9QyRCFB3CqIo_jfbcgQAAAEE"]
[Mon Feb 23 19:43:00.229656 2026] [:error] [pid 39540:tid 39576] [client 20.114.221.114:63688] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aZw9RLsgm9aTWhlRScKnmgAAAcc"]
[Mon Feb 23 19:43:00.962471 2026] [:error] [pid 39639:tid 39662] [client 20.114.221.114:64978] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/er.php"] [unique_id "aZw9RBpFkMoMi8uTUUO5DgAAAlM"]
[Mon Feb 23 19:43:15.103063 2026] [:error] [pid 39540:tid 39575] [client 20.114.221.114:65000] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aZw9U7sgm9aTWhlRScKnqQAAAcY"]
[Mon Feb 23 19:43:17.130556 2026] [:error] [pid 39639:tid 39666] [client 20.114.221.114:63719] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aZw9VRpFkMoMi8uTUUO5IAAAAlc"]
[Mon Feb 23 19:43:19.191287 2026] [:error] [pid 39640:tid 39681] [client 20.114.221.114:9360] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aZw9V9sK--eVCgzvvufX_AAAAos"]
[Mon Feb 23 19:43:21.781251 2026] [:error] [pid 29909:tid 29932] [client 20.114.221.114:9694] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aZw9WT9oc2QzltksUk7YsgAAARU"]
[Mon Feb 23 19:43:22.856126 2026] [:error] [pid 39540:tid 39580] [client 20.114.221.114:64947] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aZw9Wrsgm9aTWhlRScKnqwAAAcs"]
[Mon Feb 23 19:43:24.147761 2026] [:error] [pid 39540:tid 39592] [client 20.114.221.114:9540] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aZw9XLsgm9aTWhlRScKnrgAAAdc"]
[Mon Feb 23 19:43:25.750151 2026] [:error] [pid 39640:tid 39678] [client 20.114.221.114:9574] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aZw9XdsK--eVCgzvvufYBgAAAog"]
[Mon Feb 23 19:43:26.790990 2026] [:error] [pid 39639:tid 39664] [client 20.114.221.114:9362] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aZw9XhpFkMoMi8uTUUO5KgAAAlU"]
[Mon Feb 23 19:43:28.216848 2026] [:error] [pid 29909:tid 29922] [client 20.114.221.114:9724] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login5.php"] [unique_id "aZw9YD9oc2QzltksUk7YuAAAAQs"]
[Mon Feb 23 19:43:29.218999 2026] [:error] [pid 29909:tid 29913] [client 20.114.221.114:9594] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login5.php"] [unique_id "aZw9YT9oc2QzltksUk7YugAAAQI"]
[Mon Feb 23 19:43:30.066100 2026] [:error] [pid 39538:tid 39564] [client 20.114.221.114:64909] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login5.php"] [unique_id "aZw9Yi4Zk8-cQOG3ZnpqtwAAAZY"]
[Mon Feb 23 19:43:30.922476 2026] [:error] [pid 39639:tid 39649] [client 20.114.221.114:64911] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login5.php"] [unique_id "aZw9YhpFkMoMi8uTUUO5LwAAAkY"]
[Mon Feb 23 19:43:31.492301 2026] [:error] [pid 25380:tid 25388] [client 20.114.221.114:64910] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aZw9Y6Krc8yFQ8fy78otXAAAAMY"]
[Mon Feb 23 19:43:32.028724 2026] [:error] [pid 25380:tid 25390] [client 20.114.221.114:9570] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aZw9ZKKrc8yFQ8fy78otZAAAAMg"]
[Mon Feb 23 19:43:33.013954 2026] [:error] [pid 25380:tid 25388] [client 20.114.221.114:9348] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aZw9ZaKrc8yFQ8fy78otaQAAAMY"]
[Mon Feb 23 19:43:34.897375 2026] [:error] [pid 39639:tid 39655] [client 20.114.221.114:9349] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aZw9ZhpFkMoMi8uTUUO5MgAAAkw"]
[Mon Feb 23 19:43:36.960754 2026] [:error] [pid 25380:tid 25384] [client 20.114.221.114:9593] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lul.php"] [unique_id "aZw9aKKrc8yFQ8fy78otdQAAAMI"]
[Mon Feb 23 19:43:38.032514 2026] [:error] [pid 39538:tid 39545] [client 20.114.221.114:9680] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lul.php"] [unique_id "aZw9ai4Zk8-cQOG3ZnpqvwAAAYM"]
[Mon Feb 23 19:43:39.872722 2026] [:error] [pid 29909:tid 29915] [client 20.114.221.114:9669] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lul.php"] [unique_id "aZw9az9oc2QzltksUk7YxAAAAQQ"]
[Mon Feb 23 19:43:40.670756 2026] [:error] [pid 29909:tid 29922] [client 20.114.221.114:9403] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lul.php"] [unique_id "aZw9bD9oc2QzltksUk7YxQAAAQs"]
[Mon Feb 23 19:43:41.239145 2026] [:error] [pid 25295:tid 25359] [client 20.114.221.114:63658] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aZw9bY2Av4J1Jnqi7yLAjgAAAJM"]
[Mon Feb 23 19:43:42.312400 2026] [:error] [pid 39504:tid 39528] [client 20.114.221.114:9542] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aZw9bnLcHpOlI9gwwJoW4QAAAVY"]
[Mon Feb 23 19:43:43.859626 2026] [:error] [pid 25380:tid 25384] [client 20.114.221.114:64926] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aZw9b6Krc8yFQ8fy78otfwAAAMI"]
[Mon Feb 23 19:43:46.216429 2026] [:error] [pid 25294:tid 25343] [client 20.114.221.114:9666] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aZw9ciRCFB3CqIo_jfbcmgAAAEU"]
[Mon Feb 23 19:43:47.625479 2026] [:error] [pid 25295:tid 25338] [client 20.114.221.114:9712] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZw9c42Av4J1Jnqi7yLAlgAAAIc"]
[Mon Feb 23 19:43:48.258006 2026] [:error] [pid 39639:tid 39661] [client 20.114.221.114:63698] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZw9dBpFkMoMi8uTUUO5PgAAAlI"]
[Mon Feb 23 19:43:49.082624 2026] [:error] [pid 25294:tid 25334] [client 20.114.221.114:64933] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZw9dSRCFB3CqIo_jfbcmwAAAEM"]
[Mon Feb 23 19:43:50.080766 2026] [:error] [pid 25294:tid 25370] [client 20.114.221.114:9351] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aZw9diRCFB3CqIo_jfbcnwAAAFI"]
[Mon Feb 23 19:43:50.623369 2026] [:error] [pid 25294:tid 25348] [client 20.114.221.114:9560] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZw9diRCFB3CqIo_jfbcogAAAEc"]
[Mon Feb 23 19:43:51.562683 2026] [:error] [pid 39639:tid 39648] [client 20.114.221.114:64946] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZw9dxpFkMoMi8uTUUO5RQAAAkU"]
[Mon Feb 23 19:43:52.465809 2026] [:error] [pid 39639:tid 39647] [client 20.114.221.114:9372] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZw9eBpFkMoMi8uTUUO5SgAAAkQ"]
[Mon Feb 23 19:43:53.098750 2026] [:error] [pid 39639:tid 39651] [client 20.114.221.114:65008] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aZw9eRpFkMoMi8uTUUO5TAAAAkg"]
[Mon Feb 23 19:43:54.780444 2026] [:error] [pid 39540:tid 39572] [client 20.114.221.114:9726] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aZw9ersgm9aTWhlRScKntQAAAcM"]
[Mon Feb 23 19:43:56.241235 2026] [:error] [pid 25380:tid 25393] [client 20.114.221.114:9350] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aZw9fKKrc8yFQ8fy78othAAAAMs"]
[Mon Feb 23 19:43:56.906443 2026] [:error] [pid 25380:tid 25386] [client 20.114.221.114:9686] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aZw9fKKrc8yFQ8fy78othwAAAMQ"]
[Mon Feb 23 19:43:58.735358 2026] [:error] [pid 39538:tid 39550] [client 20.114.221.114:64989] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aZw9fi4Zk8-cQOG3ZnpqyAAAAYg"]
[Mon Feb 23 19:44:00.395361 2026] [:error] [pid 39538:tid 39563] [client 20.114.221.114:9370] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "aZw9gC4Zk8-cQOG3ZnpqyQAAAZU"]
[Mon Feb 23 19:44:02.106328 2026] [:error] [pid 39639:tid 39650] [client 20.114.221.114:64940] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "aZw9ghpFkMoMi8uTUUO5XAAAAkc"]
[Mon Feb 23 19:44:03.714763 2026] [:error] [pid 39640:tid 39671] [client 20.114.221.114:9683] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "aZw9g9sK--eVCgzvvufYCgAAAoE"]
[Mon Feb 23 19:44:04.525181 2026] [:error] [pid 39640:tid 39690] [client 20.114.221.114:64915] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "aZw9hNsK--eVCgzvvufYDAAAApQ"]
[Mon Feb 23 19:44:05.377162 2026] [:error] [pid 39540:tid 39573] [client 20.114.221.114:9672] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "aZw9hbsgm9aTWhlRScKnuQAAAcQ"]
[Mon Feb 23 19:44:06.477274 2026] [:error] [pid 39540:tid 39576] [client 20.114.221.114:9692] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "aZw9hrsgm9aTWhlRScKnugAAAcc"]
[Mon Feb 23 19:44:08.014468 2026] [:error] [pid 39639:tid 39654] [client 20.114.221.114:9715] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "aZw9iBpFkMoMi8uTUUO5YwAAAks"]
[Mon Feb 23 19:44:09.342217 2026] [:error] [pid 39639:tid 39656] [client 20.114.221.114:9689] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "aZw9iRpFkMoMi8uTUUO5ZgAAAk0"]
[Mon Feb 23 19:44:09.933951 2026] [:error] [pid 39540:tid 39588] [client 20.114.221.114:65004] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aZw9ibsgm9aTWhlRScKnvQAAAdM"]
[Mon Feb 23 19:44:10.459798 2026] [:error] [pid 39639:tid 39648] [client 20.114.221.114:9719] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aZw9ihpFkMoMi8uTUUO5agAAAkU"]
[Mon Feb 23 19:44:11.206792 2026] [:error] [pid 39504:tid 39512] [client 20.114.221.114:63639] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aZw9i3LcHpOlI9gwwJoW6AAAAUY"]
[Mon Feb 23 19:44:12.566969 2026] [:error] [pid 25294:tid 25328] [client 20.114.221.114:9364] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aZw9jCRCFB3CqIo_jfbcuAAAAEA"]
[Mon Feb 23 19:44:13.373800 2026] [:error] [pid 25294:tid 25364] [client 20.114.221.114:9674] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aZw9jSRCFB3CqIo_jfbcvAAAAE8"]
[Mon Feb 23 19:44:27.892199 2026] [:error] [pid 39639:tid 39649] [client 20.114.221.114:63694] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aZw9mxpFkMoMi8uTUUO5hQAAAkY"]
[Mon Feb 23 19:44:28.982881 2026] [:error] [pid 39640:tid 39672] [client 20.114.221.114:62450] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aZw9nNsK--eVCgzvvufYFAAAAoI"]
[Mon Feb 23 19:44:29.848601 2026] [:error] [pid 25294:tid 25368] [client 20.114.221.114:9375] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aZw9nSRCFB3CqIo_jfbc9gAAAFE"]
[Mon Feb 23 19:44:30.957758 2026] [:error] [pid 39504:tid 39523] [client 20.114.221.114:62405] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aZw9nnLcHpOlI9gwwJoW-gAAAVE"]
[Mon Feb 23 19:44:32.674576 2026] [:error] [pid 29909:tid 29929] [client 20.114.221.114:9585] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aZw9oD9oc2QzltksUk7Y0QAAARI"]
[Mon Feb 23 19:44:33.659560 2026] [:error] [pid 39540:tid 39592] [client 20.114.221.114:9399] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aZw9obsgm9aTWhlRScKnxwAAAdc"]
[Mon Feb 23 19:44:34.211062 2026] [:error] [pid 39504:tid 39521] [client 20.114.221.114:9702] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aZw9onLcHpOlI9gwwJoW_AAAAU8"]
[Mon Feb 23 19:44:34.888094 2026] [:error] [pid 29909:tid 29913] [client 20.114.221.114:9401] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aZw9oj9oc2QzltksUk7Y1QAAAQI"]
[Mon Feb 23 19:44:35.972968 2026] [:error] [pid 29909:tid 29934] [client 20.114.221.114:65010] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aZw9oz9oc2QzltksUk7Y2QAAARc"]
[Mon Feb 23 19:44:36.836319 2026] [:error] [pid 25380:tid 25406] [client 20.114.221.114:9389] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aZw9pKKrc8yFQ8fy78otrAAAANg"]
[Mon Feb 23 19:44:37.605429 2026] [:error] [pid 39640:tid 39689] [client 20.114.221.114:63644] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aZw9pdsK--eVCgzvvufYHAAAApM"]
[Mon Feb 23 19:44:38.092767 2026] [:error] [pid 39640:tid 39670] [client 20.114.221.114:9599] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aZw9ptsK--eVCgzvvufYHQAAAoA"]
[Mon Feb 23 19:44:39.066696 2026] [:error] [pid 39540:tid 39569] [client 20.114.221.114:65002] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aZw9p7sgm9aTWhlRScKn0gAAAcA"]
[Mon Feb 23 19:44:40.082716 2026] [:error] [pid 39540:tid 39575] [client 20.114.221.114:9402] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aZw9qLsgm9aTWhlRScKn1AAAAcY"]
[Mon Feb 23 19:44:40.990279 2026] [:error] [pid 39639:tid 39647] [client 20.114.221.114:63631] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aZw9qBpFkMoMi8uTUUO5jgAAAkQ"]
[Mon Feb 23 19:44:42.170176 2026] [:error] [pid 39640:tid 39686] [client 20.114.221.114:65011] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aZw9qtsK--eVCgzvvufYJQAAApA"]
[Mon Feb 23 19:44:42.671715 2026] [:error] [pid 39504:tid 39514] [client 20.114.221.114:63723] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aZw9qnLcHpOlI9gwwJoXEQAAAUg"]
[Mon Feb 23 19:44:43.614143 2026] [:error] [pid 39540:tid 39576] [client 20.114.221.114:9673] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aZw9q7sgm9aTWhlRScKn3AAAAcc"]
[Mon Feb 23 19:44:44.377486 2026] [:error] [pid 39639:tid 39658] [client 20.114.221.114:63685] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aZw9rBpFkMoMi8uTUUO5lAAAAk8"]
[Mon Feb 23 19:44:45.094996 2026] [:error] [pid 39639:tid 39653] [client 20.114.221.114:9539] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aZw9rRpFkMoMi8uTUUO5lgAAAko"]
[Mon Feb 23 19:44:46.348277 2026] [:error] [pid 39639:tid 39666] [client 20.114.221.114:64951] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aZw9rhpFkMoMi8uTUUO5mgAAAlc"]
[Mon Feb 23 19:44:46.828995 2026] [:error] [pid 39540:tid 39574] [client 20.114.221.114:64952] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aZw9rrsgm9aTWhlRScKn4AAAAcU"]
[Mon Feb 23 19:44:47.555991 2026] [:error] [pid 25380:tid 25383] [client 20.114.221.114:9562] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aZw9r6Krc8yFQ8fy78otvAAAAME"]
[Mon Feb 23 19:44:48.792939 2026] [:error] [pid 25380:tid 25396] [client 20.114.221.114:9346] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vxrl.php"] [unique_id "aZw9sKKrc8yFQ8fy78otvwAAAM4"]
[Mon Feb 23 19:44:50.153818 2026] [:error] [pid 39639:tid 39654] [client 20.114.221.114:64943] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aZw9shpFkMoMi8uTUUO5oAAAAks"]
[Mon Feb 23 19:44:51.003094 2026] [:error] [pid 39639:tid 39660] [client 20.114.221.114:63681] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aZw9sxpFkMoMi8uTUUO5ogAAAlE"]
[Mon Feb 23 19:44:51.761943 2026] [:error] [pid 25380:tid 25395] [client 20.114.221.114:63640] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aZw9s6Krc8yFQ8fy78otxAAAAM0"]
[Mon Feb 23 19:44:52.421855 2026] [:error] [pid 25380:tid 25383] [client 20.114.221.114:64992] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aZw9tKKrc8yFQ8fy78otzAAAAME"]
[Mon Feb 23 19:44:52.951477 2026] [:error] [pid 39639:tid 39666] [client 20.114.221.114:9707] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aZw9tBpFkMoMi8uTUUO5qgAAAlc"]
[Mon Feb 23 19:44:53.759862 2026] [:error] [pid 25294:tid 25370] [client 20.114.221.114:9397] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aZw9tSRCFB3CqIo_jfbdEQAAAFI"]
[Mon Feb 23 19:44:55.166422 2026] [:error] [pid 39538:tid 39542] [client 20.114.221.114:64939] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aZw9ty4Zk8-cQOG3Znpq9gAAAYA"]
[Mon Feb 23 19:44:57.992373 2026] [:error] [pid 39540:tid 39590] [client 20.114.221.114:9583] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aZw9ubsgm9aTWhlRScKn6QAAAdU"]
[Mon Feb 23 19:44:59.519206 2026] [:error] [pid 39639:tid 39652] [client 20.114.221.114:62421] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aZw9uxpFkMoMi8uTUUO5ugAAAkk"]
[Mon Feb 23 19:45:02.401273 2026] [:error] [pid 39540:tid 39571] [client 20.114.221.114:9373] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aZw9vrsgm9aTWhlRScKn7wAAAcI"]
[Mon Feb 23 19:45:04.150286 2026] [:error] [pid 39540:tid 39572] [client 20.114.221.114:9387] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aZw9wLsgm9aTWhlRScKn8AAAAcM"]
[Mon Feb 23 19:45:04.984865 2026] [:error] [pid 39540:tid 39578] [client 20.114.221.114:64962] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aZw9wLsgm9aTWhlRScKn8QAAAck"]
[Mon Feb 23 19:45:05.796767 2026] [:error] [pid 39540:tid 39592] [client 20.114.221.114:63693] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aZw9wbsgm9aTWhlRScKn9AAAAdc"]
[Mon Feb 23 19:45:06.426493 2026] [:error] [pid 25295:tid 25365] [client 20.114.221.114:64981] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aZw9wo2Av4J1Jnqi7yLAsQAAAJY"]
[Mon Feb 23 19:45:06.989243 2026] [:error] [pid 39639:tid 39660] [client 20.114.221.114:9682] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aZw9whpFkMoMi8uTUUO5xgAAAlE"]
[Mon Feb 23 19:45:07.823462 2026] [:error] [pid 25380:tid 25397] [client 20.114.221.114:64986] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aZw9w6Krc8yFQ8fy78ouFwAAAM8"]
[Mon Feb 23 19:45:08.364824 2026] [:error] [pid 39540:tid 39584] [client 20.114.221.114:63649] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aZw9xLsgm9aTWhlRScKn-gAAAc8"]
[Mon Feb 23 19:45:08.840319 2026] [:error] [pid 39504:tid 39528] [client 20.114.221.114:9547] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aZw9xHLcHpOlI9gwwJoXFgAAAVY"]
[Mon Feb 23 19:45:09.562498 2026] [:error] [pid 39639:tid 39662] [client 20.114.221.114:63731] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aZw9xRpFkMoMi8uTUUO5zAAAAlM"]
[Mon Feb 23 19:45:10.241894 2026] [:error] [pid 39540:tid 39592] [client 20.114.221.114:63650] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/karak.php"] [unique_id "aZw9xrsgm9aTWhlRScKoAQAAAdc"]
[Mon Feb 23 19:45:10.801632 2026] [:error] [pid 39540:tid 39582] [client 20.114.221.114:62350] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aZw9xrsgm9aTWhlRScKoCAAAAc0"]
[Mon Feb 23 19:45:11.360486 2026] [:error] [pid 25294:tid 25334] [client 20.114.221.114:9671] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aZw9xyRCFB3CqIo_jfbdJwAAAEM"]
[Mon Feb 23 19:45:12.189497 2026] [:error] [pid 39540:tid 39578] [client 20.114.221.114:64944] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aZw9yLsgm9aTWhlRScKoDwAAAck"]
[Mon Feb 23 19:45:12.837058 2026] [:error] [pid 39540:tid 39573] [client 20.114.221.114:63648] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aZw9yLsgm9aTWhlRScKoEQAAAcQ"]
[Mon Feb 23 19:45:13.658689 2026] [:error] [pid 39540:tid 39577] [client 20.114.221.114:64904] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/acces.php"] [unique_id "aZw9ybsgm9aTWhlRScKoFQAAAcg"]
[Mon Feb 23 19:45:14.302539 2026] [:error] [pid 29909:tid 29924] [client 20.114.221.114:9584] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/acces.php"] [unique_id "aZw9yj9oc2QzltksUk7ZIAAAAQ0"]
[Mon Feb 23 19:45:14.820494 2026] [:error] [pid 39504:tid 39515] [client 20.114.221.114:64957] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/acces.php"] [unique_id "aZw9ynLcHpOlI9gwwJoXGQAAAUk"]
[Mon Feb 23 19:45:15.280009 2026] [:error] [pid 39639:tid 39656] [client 20.114.221.114:9596] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/acces.php"] [unique_id "aZw9yxpFkMoMi8uTUUO50gAAAk0"]
[Mon Feb 23 19:45:15.777306 2026] [:error] [pid 39639:tid 39644] [client 20.114.221.114:9700] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aZw9yxpFkMoMi8uTUUO51QAAAkE"]
[Mon Feb 23 19:45:16.566172 2026] [:error] [pid 39540:tid 39572] [client 20.114.221.114:62449] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aZw9zLsgm9aTWhlRScKoHQAAAcM"]
[Mon Feb 23 19:45:17.452374 2026] [:error] [pid 29909:tid 29934] [client 20.114.221.114:9676] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aZw9zT9oc2QzltksUk7ZKQAAARc"]
[Mon Feb 23 19:45:18.487258 2026] [:error] [pid 25294:tid 25345] [client 20.114.221.114:62402] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aZw9ziRCFB3CqIo_jfbdMwAAAEY"]
[Mon Feb 23 19:45:18.971082 2026] [:error] [pid 39538:tid 39562] [client 20.114.221.114:63657] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZw9zi4Zk8-cQOG3Znpq-QAAAZQ"]
[Mon Feb 23 19:45:19.607291 2026] [:error] [pid 25293:tid 25314] [client 20.114.221.114:9396] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZw9z-L9XfBf66iHi_ep9AAAAA8"]
[Mon Feb 23 19:45:20.293831 2026] [:error] [pid 25380:tid 25385] [client 20.114.221.114:9588] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZw90KKrc8yFQ8fy78ouVgAAAMM"]
[Mon Feb 23 19:45:20.966598 2026] [:error] [pid 39639:tid 39663] [client 20.114.221.114:9395] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZw90BpFkMoMi8uTUUO51wAAAlQ"]
[Mon Feb 23 19:45:21.666180 2026] [:error] [pid 39640:tid 39690] [client 20.114.221.114:62415] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZw90dsK--eVCgzvvufYNAAAApQ"]
[Mon Feb 23 19:45:22.245216 2026] [:error] [pid 39640:tid 39670] [client 20.114.221.114:64950] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZw90tsK--eVCgzvvufYNwAAAoA"]
[Mon Feb 23 19:45:23.156865 2026] [:error] [pid 39540:tid 39572] [client 20.114.221.114:60768] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZw907sgm9aTWhlRScKoJQAAAcM"]
[Mon Feb 23 19:45:23.938195 2026] [:error] [pid 39538:tid 39545] [client 20.114.221.114:60749] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "aZw90y4Zk8-cQOG3ZnprBwAAAYM"]
[Mon Feb 23 19:45:25.877426 2026] [:error] [pid 39540:tid 39581] [client 20.114.221.114:62443] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aZw91bsgm9aTWhlRScKoJwAAAcw"]
[Mon Feb 23 19:45:36.376446 2026] [:error] [pid 39639:tid 39654] [client 20.114.221.114:62424] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aZw94BpFkMoMi8uTUUO56AAAAks"]
[Mon Feb 23 19:45:36.870209 2026] [:error] [pid 39639:tid 39662] [client 20.114.221.114:63680] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aZw94BpFkMoMi8uTUUO56gAAAlM"]
[Mon Feb 23 19:45:37.354375 2026] [:error] [pid 29909:tid 29919] [client 20.114.221.114:64974] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aZw94T9oc2QzltksUk7ZVQAAAQg"]
[Mon Feb 23 19:45:37.958610 2026] [:error] [pid 29909:tid 29932] [client 20.114.221.114:64900] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aZw94T9oc2QzltksUk7ZVgAAARU"]
[Mon Feb 23 19:45:38.605234 2026] [:error] [pid 39504:tid 39519] [client 20.114.221.114:9705] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aZw94nLcHpOlI9gwwJoXKQAAAU0"]
[Mon Feb 23 19:45:39.219848 2026] [:error] [pid 39640:tid 39683] [client 20.114.221.114:64948] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aZw949sK--eVCgzvvufYUgAAAo0"]
[Mon Feb 23 19:45:41.276858 2026] [:error] [pid 39639:tid 39652] [client 20.114.221.114:63716] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aZw95RpFkMoMi8uTUUO58QAAAkk"]
[Mon Feb 23 19:45:43.519446 2026] [:error] [pid 39504:tid 39514] [client 20.114.221.114:62459] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ov.php"] [unique_id "aZw953LcHpOlI9gwwJoXLAAAAUg"]
[Mon Feb 23 19:45:45.904514 2026] [:error] [pid 39639:tid 39664] [client 20.114.221.114:9713] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZw96RpFkMoMi8uTUUO6AAAAAlU"]
[Mon Feb 23 19:45:47.242391 2026] [:error] [pid 39640:tid 39672] [client 20.114.221.114:63708] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZw969sK--eVCgzvvufYVQAAAoI"]
[Mon Feb 23 19:45:50.214087 2026] [:error] [pid 25380:tid 25385] [client 20.114.221.114:9554] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZw97qKrc8yFQ8fy78ouhAAAAMM"]
[Mon Feb 23 19:45:51.763077 2026] [:error] [pid 25380:tid 25400] [client 20.114.221.114:63668] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZw976Krc8yFQ8fy78ouhQAAANI"]
[Mon Feb 23 19:45:53.129805 2026] [:error] [pid 39639:tid 39664] [client 20.114.221.114:9687] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aZw98RpFkMoMi8uTUUO6DQAAAlU"]
[Mon Feb 23 19:45:53.836404 2026] [:error] [pid 39639:tid 39644] [client 20.114.221.114:63636] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aZw98RpFkMoMi8uTUUO6EAAAAkE"]
[Mon Feb 23 19:45:54.701644 2026] [:error] [pid 25295:tid 25355] [client 20.114.221.114:9556] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aZw98o2Av4J1Jnqi7yLAyQAAAJE"]
[Mon Feb 23 19:45:55.231423 2026] [:error] [pid 25295:tid 25327] [client 20.114.221.114:64976] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aZw9842Av4J1Jnqi7yLAzgAAAIA"]
[Mon Feb 23 19:45:55.779478 2026] [:error] [pid 25380:tid 25382] [client 20.114.221.114:63714] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aZw986Krc8yFQ8fy78ouiwAAAMA"]
[Mon Feb 23 19:45:57.310704 2026] [:error] [pid 39639:tid 39667] [client 20.114.221.114:62414] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aZw99RpFkMoMi8uTUUO6EgAAAlg"]
[Mon Feb 23 19:45:57.979444 2026] [:error] [pid 29909:tid 29928] [client 20.114.221.114:9582] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aZw99T9oc2QzltksUk7ZaAAAARE"]
[Mon Feb 23 19:45:59.276258 2026] [:error] [pid 25380:tid 25388] [client 20.114.221.114:63692] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aZw996Krc8yFQ8fy78oulwAAAMY"]
[Mon Feb 23 19:45:59.890427 2026] [:error] [pid 39639:tid 39644] [client 20.114.221.114:65007] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aZw99xpFkMoMi8uTUUO6HwAAAkE"]
[Mon Feb 23 19:46:00.533341 2026] [:error] [pid 25294:tid 25373] [client 20.114.221.114:64908] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aZw9-CRCFB3CqIo_jfbdgQAAAFQ"]
[Mon Feb 23 19:46:01.321247 2026] [:error] [pid 29909:tid 29918] [client 20.114.221.114:63739] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aZw9-T9oc2QzltksUk7ZbgAAAQc"]
[Mon Feb 23 19:46:02.077769 2026] [:error] [pid 39538:tid 39545] [client 20.114.221.114:63634] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aZw9-i4Zk8-cQOG3ZnprLQAAAYM"]
[Mon Feb 23 19:46:02.654447 2026] [:error] [pid 39538:tid 39551] [client 20.114.221.114:62427] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aZw9-i4Zk8-cQOG3ZnprLgAAAYk"]
[Mon Feb 23 19:46:03.289948 2026] [:error] [pid 39540:tid 39582] [client 20.114.221.114:62394] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aZw9-7sgm9aTWhlRScKoSQAAAc0"]
[Mon Feb 23 19:46:04.713210 2026] [:error] [pid 25294:tid 25343] [client 20.114.221.114:60785] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aZw9_CRCFB3CqIo_jfbdhgAAAEU"]
[Mon Feb 23 19:46:05.545563 2026] [:error] [pid 39538:tid 39544] [client 20.114.221.114:64970] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "aZw9_S4Zk8-cQOG3ZnprMgAAAYI"]
[Mon Feb 23 19:46:06.225167 2026] [:error] [pid 39639:tid 39654] [client 20.114.221.114:63651] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aZw9_hpFkMoMi8uTUUO6JQAAAks"]
[Mon Feb 23 19:46:06.766859 2026] [:error] [pid 39639:tid 39657] [client 20.114.221.114:64899] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aZw9_hpFkMoMi8uTUUO6KAAAAk4"]
[Mon Feb 23 19:46:07.628459 2026] [:error] [pid 39639:tid 39664] [client 20.114.221.114:64897] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aZw9_xpFkMoMi8uTUUO6LgAAAlU"]
[Mon Feb 23 19:46:08.450767 2026] [:error] [pid 29909:tid 29930] [client 20.114.221.114:64927] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/async.php"] [unique_id "aZw-AD9oc2QzltksUk7ZegAAARM"]
[Mon Feb 23 19:46:10.076613 2026] [:error] [pid 39538:tid 39542] [client 20.114.221.114:64912] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aZw-Ai4Zk8-cQOG3ZnprNgAAAYA"]
[Mon Feb 23 19:46:11.384744 2026] [:error] [pid 25294:tid 25374] [client 20.114.221.114:63641] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aZw-AyRCFB3CqIo_jfbdigAAAFU"]
[Mon Feb 23 19:46:11.934262 2026] [:error] [pid 25294:tid 25328] [client 20.114.221.114:9538] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aZw-AyRCFB3CqIo_jfbdiwAAAEA"]
[Mon Feb 23 19:46:13.095002 2026] [:error] [pid 39639:tid 39647] [client 20.114.221.114:9693] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff.php"] [unique_id "aZw-BRpFkMoMi8uTUUO6VgAAAkQ"]
[Mon Feb 23 19:46:14.263249 2026] [:error] [pid 39540:tid 39584] [client 20.114.221.114:9406] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aZw-Brsgm9aTWhlRScKoXQAAAc8"]
[Mon Feb 23 19:46:15.299164 2026] [:error] [pid 39639:tid 39645] [client 20.114.221.114:9374] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aZw-BxpFkMoMi8uTUUO6ZAAAAkI"]
[Mon Feb 23 19:46:16.639300 2026] [:error] [pid 39540:tid 39581] [client 20.114.221.114:9669] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aZw-CLsgm9aTWhlRScKogAAAAcw"]
[Mon Feb 23 19:46:18.360929 2026] [:error] [pid 39640:tid 39690] [client 20.114.221.114:9355] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aZw-CtsK--eVCgzvvufYZAAAApQ"]
[Mon Feb 23 19:46:18.930733 2026] [:error] [pid 39639:tid 39653] [client 20.114.221.114:9563] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aZw-ChpFkMoMi8uTUUO6fgAAAko"]
[Mon Feb 23 19:46:20.890654 2026] [:error] [pid 25294:tid 25351] [client 20.114.221.114:62417] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aZw-DCRCFB3CqIo_jfbdkgAAAEk"]
[Mon Feb 23 19:46:21.575961 2026] [:error] [pid 39639:tid 39647] [client 20.114.221.114:64901] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aZw-DRpFkMoMi8uTUUO6hgAAAkQ"]
[Mon Feb 23 19:46:22.538502 2026] [:error] [pid 25380:tid 25400] [client 20.114.221.114:64917] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aZw-DqKrc8yFQ8fy78oupQAAANI"]
[Mon Feb 23 19:46:23.393955 2026] [:error] [pid 39640:tid 39670] [client 20.114.221.114:9536] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZw-D9sK--eVCgzvvufYawAAAoA"]
[Mon Feb 23 19:46:23.966187 2026] [:error] [pid 25380:tid 25406] [client 20.114.221.114:64966] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZw-D6Krc8yFQ8fy78ouqAAAANg"]
[Mon Feb 23 19:46:24.784571 2026] [:error] [pid 39639:tid 39643] [client 20.114.221.114:60786] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZw-EBpFkMoMi8uTUUO6igAAAkA"]
[Mon Feb 23 19:46:25.296694 2026] [:error] [pid 39639:tid 39660] [client 20.114.221.114:9381] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aZw-ERpFkMoMi8uTUUO6iwAAAlE"]
[Mon Feb 23 19:46:26.756469 2026] [:error] [pid 39639:tid 39652] [client 20.114.221.114:9550] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZw-EhpFkMoMi8uTUUO6kgAAAkk"]
[Mon Feb 23 19:46:28.078722 2026] [:error] [pid 39639:tid 39648] [client 20.114.221.114:9382] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZw-FBpFkMoMi8uTUUO6oQAAAkU"]
[Mon Feb 23 19:46:29.325900 2026] [:error] [pid 39639:tid 39647] [client 20.114.221.114:64999] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZw-FRpFkMoMi8uTUUO6pgAAAkQ"]
[Mon Feb 23 19:46:30.064131 2026] [:error] [pid 29909:tid 29927] [client 20.114.221.114:63695] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZw-Fj9oc2QzltksUk7ZhgAAARA"]
[Mon Feb 23 19:46:30.594878 2026] [:error] [pid 39640:tid 39670] [client 20.114.221.114:9723] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aZw-FtsK--eVCgzvvufYegAAAoA"]
[Mon Feb 23 19:46:31.659796 2026] [:error] [pid 25380:tid 25385] [client 20.114.221.114:60741] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aZw-F6Krc8yFQ8fy78outAAAAMM"]
[Mon Feb 23 19:46:33.274741 2026] [:error] [pid 25294:tid 25330] [client 20.114.221.114:64998] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aZw-GSRCFB3CqIo_jfbdoAAAAEE"]
[Mon Feb 23 19:46:34.186538 2026] [:error] [pid 25294:tid 25343] [client 20.114.221.114:62454] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lc.php"] [unique_id "aZw-GiRCFB3CqIo_jfbdogAAAEU"]
[Mon Feb 23 19:46:34.744317 2026] [:error] [pid 25380:tid 25382] [client 20.114.221.114:64920] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cbrfo.php"] [unique_id "aZw-GqKrc8yFQ8fy78ouvQAAAMA"]
[Mon Feb 23 19:46:40.180298 2026] [:error] [pid 25380:tid 25389] [client 20.114.221.114:9385] [client 20.114.221.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aZw-IKKrc8yFQ8fy78ouzAAAAMc"]
[Mon Feb 23 19:46:48.737442 2026] [:error] [pid 39640:tid 39681] [client 20.114.221.114:9575] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aZw-KNsK--eVCgzvvufYmAAAAos"]
[Mon Feb 23 19:46:49.620408 2026] [:error] [pid 29909:tid 29921] [client 20.114.221.114:62423] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aZw-KT9oc2QzltksUk7ZiAAAAQo"]
[Mon Feb 23 19:46:50.783387 2026] [:error] [pid 39639:tid 39667] [client 20.114.221.114:62435] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aZw-KhpFkMoMi8uTUUO60QAAAlg"]
[Mon Feb 23 19:46:51.766203 2026] [:error] [pid 39640:tid 39672] [client 20.114.221.114:64939] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/thebe.php"] [unique_id "aZw-K9sK--eVCgzvvufYnAAAAoI"]
[Mon Feb 23 19:46:52.705628 2026] [:error] [pid 39538:tid 39549] [client 20.114.221.114:60753] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aZw-LC4Zk8-cQOG3ZnprTAAAAYc"]
[Mon Feb 23 19:46:53.288377 2026] [:error] [pid 25380:tid 25402] [client 20.114.221.114:9710] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aZw-LaKrc8yFQ8fy78ovJgAAANQ"]
[Mon Feb 23 19:46:54.313952 2026] [:error] [pid 39540:tid 39586] [client 20.114.221.114:63711] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aZw-Lrsgm9aTWhlRScKo4wAAAdE"]
[Mon Feb 23 19:46:55.268795 2026] [:error] [pid 25294:tid 25377] [client 20.114.221.114:9552] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "aZw-LyRCFB3CqIo_jfbdswAAAFg"]
[Mon Feb 23 19:46:55.868252 2026] [:error] [pid 39640:tid 39681] [client 20.114.221.114:9553] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZw-L9sK--eVCgzvvufYpAAAAos"]
[Mon Feb 23 19:46:56.500062 2026] [:error] [pid 25295:tid 25353] [client 20.114.221.114:9543] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZw-MI2Av4J1Jnqi7yLA8wAAAJA"]
[Mon Feb 23 19:46:57.619806 2026] [:error] [pid 39639:tid 39666] [client 20.114.221.114:9345] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZw-MRpFkMoMi8uTUUO62AAAAlc"]
[Mon Feb 23 19:46:58.245353 2026] [:error] [pid 29909:tid 29924] [client 20.114.221.114:63713] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aZw-Mj9oc2QzltksUk7ZiwAAAQ0"]
[Mon Feb 23 19:46:58.908147 2026] [:error] [pid 25295:tid 25346] [client 20.114.221.114:62404] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aZw-Mo2Av4J1Jnqi7yLA9gAAAIw"]
[Mon Feb 23 19:46:59.882252 2026] [:error] [pid 39639:tid 39660] [client 20.114.221.114:9549] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aZw-MxpFkMoMi8uTUUO62wAAAlE"]
[Mon Feb 23 19:47:00.664573 2026] [:error] [pid 39504:tid 39509] [client 20.114.221.114:62342] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aZw-NHLcHpOlI9gwwJoXUgAAAUM"]
[Mon Feb 23 19:47:01.223957 2026] [:error] [pid 39640:tid 39689] [client 20.114.221.114:9717] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aZw-NdsK--eVCgzvvufYqAAAApM"]
[Mon Feb 23 19:47:01.717175 2026] [:error] [pid 39538:tid 39550] [client 20.114.221.114:9546] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZw-NS4Zk8-cQOG3ZnprUQAAAYg"]
[Mon Feb 23 19:47:02.607529 2026] [:error] [pid 25380:tid 25403] [client 20.114.221.114:64929] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZw-NqKrc8yFQ8fy78ovLQAAANU"]
[Mon Feb 23 19:47:03.266509 2026] [:error] [pid 39540:tid 39580] [client 20.114.221.114:60793] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZw-N7sgm9aTWhlRScKo_QAAAcs"]
[Mon Feb 23 19:47:03.889267 2026] [:error] [pid 25380:tid 25398] [client 20.114.221.114:64896] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "aZw-N6Krc8yFQ8fy78ovLgAAANA"]
[Mon Feb 23 19:47:04.525297 2026] [:error] [pid 29909:tid 29912] [client 20.114.221.114:65006] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aZw-OD9oc2QzltksUk7ZjAAAAQE"]
[Mon Feb 23 19:47:05.448963 2026] [:error] [pid 39540:tid 39575] [client 20.114.221.114:65014] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aZw-Obsgm9aTWhlRScKpCQAAAcY"]
[Mon Feb 23 19:47:06.086374 2026] [:error] [pid 39540:tid 39570] [client 20.114.221.114:63715] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aZw-Orsgm9aTWhlRScKpCwAAAcE"]
[Mon Feb 23 19:47:07.527349 2026] [:error] [pid 39640:tid 39687] [client 20.114.221.114:60745] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "aZw-O9sK--eVCgzvvufYtQAAApE"]
[Mon Feb 23 19:47:08.231951 2026] [:error] [pid 25380:tid 25395] [client 20.114.221.114:63622] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZw-PKKrc8yFQ8fy78ovOQAAAM0"]
[Mon Feb 23 19:47:09.207323 2026] [:error] [pid 39639:tid 39654] [client 20.114.221.114:64964] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZw-PRpFkMoMi8uTUUO68AAAAks"]
[Mon Feb 23 19:47:10.487948 2026] [:error] [pid 25294:tid 25373] [client 20.114.221.114:64991] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZw-PiRCFB3CqIo_jfbduwAAAFQ"]
[Mon Feb 23 19:47:12.134992 2026] [:error] [pid 25293:tid 25317] [client 20.114.221.114:9698] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZw-QOL9XfBf66iHi_eqDAAAABI"]
[Mon Feb 23 19:47:12.906118 2026] [:error] [pid 39538:tid 39552] [client 20.114.221.114:62438] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZw-QC4Zk8-cQOG3ZnprVgAAAYo"]
[Mon Feb 23 19:47:14.962750 2026] [:error] [pid 39538:tid 39563] [client 20.114.221.114:62337] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZw-Qi4Zk8-cQOG3ZnprVwAAAZU"]
[Mon Feb 23 19:47:15.762112 2026] [:error] [pid 39504:tid 39516] [client 20.114.221.114:64925] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZw-Q3LcHpOlI9gwwJoXYgAAAUo"]
[Mon Feb 23 19:47:16.491024 2026] [:error] [pid 29909:tid 29916] [client 20.114.221.114:64983] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZw-RD9oc2QzltksUk7ZjgAAAQU"]
[Mon Feb 23 19:47:17.694279 2026] [:error] [pid 39504:tid 39520] [client 20.114.221.114:9675] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZw-RXLcHpOlI9gwwJoXYwAAAU4"]
[Mon Feb 23 19:47:18.838082 2026] [:error] [pid 25380:tid 25388] [client 20.114.221.114:60750] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZw-RqKrc8yFQ8fy78ovQQAAAMY"]
[Mon Feb 23 19:47:20.027123 2026] [:error] [pid 39639:tid 39654] [client 20.114.221.114:64968] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZw-SBpFkMoMi8uTUUO6-wAAAks"]
[Mon Feb 23 19:47:20.918460 2026] [:error] [pid 25380:tid 25385] [client 20.114.221.114:64959] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZw-SKKrc8yFQ8fy78ovTAAAAMM"]
[Mon Feb 23 19:47:21.779072 2026] [:error] [pid 39504:tid 39508] [client 20.114.221.114:63687] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZw-SXLcHpOlI9gwwJoXZAAAAUI"]
[Mon Feb 23 19:47:22.700019 2026] [:error] [pid 25295:tid 25352] [client 20.114.221.114:64977] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZw-So2Av4J1Jnqi7yLA_QAAAI8"]
[Mon Feb 23 19:47:23.374893 2026] [:error] [pid 25293:tid 25304] [client 20.114.221.114:64918] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZw-S-L9XfBf66iHi_eqEgAAAAU"]
[Mon Feb 23 19:47:23.991964 2026] [:error] [pid 39639:tid 39660] [client 20.114.221.114:9400] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZw-SxpFkMoMi8uTUUO7AgAAAlE"]
[Mon Feb 23 19:47:24.564273 2026] [:error] [pid 39639:tid 39657] [client 20.114.221.114:9576] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZw-TBpFkMoMi8uTUUO7BAAAAk4"]
[Mon Feb 23 19:47:25.190896 2026] [:error] [pid 39639:tid 39652] [client 20.114.221.114:62407] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZw-TRpFkMoMi8uTUUO7BwAAAkk"]
[Mon Feb 23 19:47:25.923494 2026] [:error] [pid 39640:tid 39676] [client 20.114.221.114:65000] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZw-TdsK--eVCgzvvufYvAAAAoY"]
[Mon Feb 23 19:47:26.826278 2026] [:error] [pid 25295:tid 25337] [client 20.114.221.114:64965] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZw-To2Av4J1Jnqi7yLA_wAAAIY"]
[Mon Feb 23 19:47:27.760509 2026] [:error] [pid 25380:tid 25397] [client 20.114.221.114:9358] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZw-T6Krc8yFQ8fy78ovVAAAAM8"]
[Mon Feb 23 19:47:28.247058 2026] [:error] [pid 25380:tid 25388] [client 20.114.221.114:62386] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZw-UKKrc8yFQ8fy78ovVwAAAMY"]
[Mon Feb 23 19:47:28.832974 2026] [:error] [pid 25380:tid 25387] [client 20.114.221.114:9378] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZw-UKKrc8yFQ8fy78ovWQAAAMU"]
[Mon Feb 23 19:47:29.409449 2026] [:error] [pid 39639:tid 39643] [client 20.114.221.114:9405] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZw-URpFkMoMi8uTUUO7FAAAAkA"]
[Mon Feb 23 19:47:30.015719 2026] [:error] [pid 39540:tid 39591] [client 20.114.221.114:64919] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aZw-Ursgm9aTWhlRScKpTwAAAdY"]
[Mon Feb 23 19:47:30.632793 2026] [:error] [pid 25380:tid 25398] [client 20.114.221.114:65017] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aZw-UqKrc8yFQ8fy78ovWgAAANA"]
[Mon Feb 23 19:47:31.162313 2026] [:error] [pid 39639:tid 39663] [client 20.114.221.114:64914] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aZw-UxpFkMoMi8uTUUO7FwAAAlQ"]
[Mon Feb 23 19:47:31.760697 2026] [:error] [pid 39639:tid 39657] [client 20.114.221.114:64937] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aZw-UxpFkMoMi8uTUUO7GQAAAk4"]
[Mon Feb 23 19:47:32.254993 2026] [:error] [pid 39639:tid 39665] [client 20.114.221.114:63627] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZw-VBpFkMoMi8uTUUO7GwAAAlY"]
[Mon Feb 23 19:47:32.791617 2026] [:error] [pid 25380:tid 25393] [client 20.114.221.114:63702] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZw-VKKrc8yFQ8fy78ovXAAAAMs"]
[Mon Feb 23 19:47:33.283779 2026] [:error] [pid 25294:tid 25345] [client 20.114.221.114:63682] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZw-VSRCFB3CqIo_jfbd2gAAAEY"]
[Mon Feb 23 19:47:33.736277 2026] [:error] [pid 29909:tid 29931] [client 20.114.221.114:63720] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZw-VT9oc2QzltksUk7ZkQAAARQ"]
[Mon Feb 23 19:47:34.347708 2026] [:error] [pid 25293:tid 25309] [client 20.114.221.114:64979] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZw-VuL9XfBf66iHi_eqEwAAAAo"]
[Mon Feb 23 19:47:34.973570 2026] [:error] [pid 25380:tid 25405] [client 20.114.221.114:9695] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZw-VqKrc8yFQ8fy78ovYAAAANc"]
[Mon Feb 23 19:47:35.540352 2026] [:error] [pid 39540:tid 39578] [client 20.114.221.114:9352] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZw-V7sgm9aTWhlRScKpXgAAAck"]
[Mon Feb 23 19:47:36.108673 2026] [:error] [pid 29909:tid 29919] [client 20.114.221.114:63688] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aZw-WD9oc2QzltksUk7ZlAAAAQg"]
[Mon Feb 23 19:47:36.886315 2026] [:error] [pid 39540:tid 39591] [client 20.114.221.114:9380] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZw-WLsgm9aTWhlRScKpYAAAAdY"]
[Mon Feb 23 19:47:37.609008 2026] [:error] [pid 39639:tid 39653] [client 20.114.221.114:62431] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZw-WRpFkMoMi8uTUUO7KAAAAko"]
[Mon Feb 23 19:47:38.724373 2026] [:error] [pid 25295:tid 25359] [client 20.114.221.114:63676] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZw-Wo2Av4J1Jnqi7yLBAAAAAJM"]
[Mon Feb 23 19:47:39.218956 2026] [:error] [pid 25294:tid 25375] [client 20.114.221.114:9684] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZw-WyRCFB3CqIo_jfbd3QAAAFY"]
[Mon Feb 23 19:47:39.873719 2026] [:error] [pid 25380:tid 25395] [client 20.114.221.114:62412] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aZw-W6Krc8yFQ8fy78ovZQAAAM0"]
[Mon Feb 23 19:47:40.606769 2026] [:error] [pid 39540:tid 39592] [client 20.114.221.114:64963] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aZw-XLsgm9aTWhlRScKpaAAAAdc"]
[Mon Feb 23 19:47:41.478832 2026] [:error] [pid 39639:tid 39656] [client 20.114.221.114:9592] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aZw-XRpFkMoMi8uTUUO7NQAAAk0"]
[Mon Feb 23 19:47:42.104867 2026] [:error] [pid 39640:tid 39686] [client 20.114.221.114:64947] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aZw-XtsK--eVCgzvvufYvgAAApA"]
[Mon Feb 23 19:47:42.713742 2026] [:error] [pid 25380:tid 25389] [client 20.114.221.114:65016] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZw-XqKrc8yFQ8fy78ovaAAAAMc"]
[Mon Feb 23 19:47:43.377332 2026] [:error] [pid 29909:tid 29926] [client 20.114.221.114:9727] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZw-Xz9oc2QzltksUk7ZmgAAAQ8"]
[Mon Feb 23 19:47:44.244764 2026] [:error] [pid 25380:tid 25396] [client 20.114.221.114:63734] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZw-YKKrc8yFQ8fy78ovaQAAAM4"]
[Mon Feb 23 19:47:44.722478 2026] [:error] [pid 39538:tid 39564] [client 20.114.221.114:62365] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZw-YC4Zk8-cQOG3ZnprXwAAAZY"]
[Mon Feb 23 19:47:45.264736 2026] [:error] [pid 39639:tid 39658] [client 20.114.221.114:64985] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aZw-YRpFkMoMi8uTUUO7PgAAAk8"]
[Mon Feb 23 19:47:46.085287 2026] [:error] [pid 39504:tid 39527] [client 20.114.221.114:63659] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aZw-YnLcHpOlI9gwwJoXawAAAVU"]
[Mon Feb 23 19:47:46.559889 2026] [:error] [pid 25380:tid 25383] [client 20.114.221.114:64941] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aZw-YqKrc8yFQ8fy78ovbQAAAME"]
[Mon Feb 23 19:47:56.077755 2026] [autoindex:error] [pid 39540:tid 39587] [client 20.114.221.114:65019] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 19:47:56.280929 2026] [autoindex:error] [pid 39540:tid 39585] [client 20.114.221.114:65019] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Feb 23 19:47:58.526218 2026] [:error] [pid 39540:tid 39576] [client 20.114.221.114:65019] [client 20.114.221.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZw-brsgm9aTWhlRScKpiAAAAcc"]
[Mon Feb 23 19:48:04.590632 2026] [:error] [pid 39538:tid 39549] [client 20.114.221.114:63683] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aZw-dC4Zk8-cQOG3ZnprZgAAAYc"]
[Mon Feb 23 19:48:05.283783 2026] [:error] [pid 39639:tid 39651] [client 20.114.221.114:64967] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aZw-dRpFkMoMi8uTUUO7XQAAAkg"]
[Mon Feb 23 19:48:06.147483 2026] [:error] [pid 39538:tid 39559] [client 20.114.221.114:64928] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aZw-di4Zk8-cQOG3ZnpraAAAAZE"]
[Mon Feb 23 19:48:07.427829 2026] [:error] [pid 25294:tid 25341] [client 20.114.221.114:64980] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abe.php"] [unique_id "aZw-dyRCFB3CqIo_jfbd9QAAAEQ"]
[Mon Feb 23 19:48:08.957470 2026] [:error] [pid 25380:tid 25387] [client 20.114.221.114:62457] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aZw-eKKrc8yFQ8fy78ovgQAAAMU"]
[Mon Feb 23 19:48:09.800543 2026] [:error] [pid 39540:tid 39571] [client 20.114.221.114:9691] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aZw-ebsgm9aTWhlRScKpiwAAAcI"]
[Mon Feb 23 19:48:10.574089 2026] [:error] [pid 39639:tid 39654] [client 20.114.221.114:64990] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aZw-ehpFkMoMi8uTUUO7igAAAks"]
[Mon Feb 23 19:48:11.610459 2026] [:error] [pid 39538:tid 39566] [client 20.114.221.114:64994] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aZw-ey4Zk8-cQOG3ZnprawAAAZg"]
[Mon Feb 23 19:48:12.413902 2026] [:error] [pid 39540:tid 39592] [client 20.114.221.114:9591] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aZw-fLsgm9aTWhlRScKpjAAAAdc"]
[Mon Feb 23 19:48:13.205008 2026] [:error] [pid 29909:tid 29933] [client 20.114.221.114:9403] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aZw-fT9oc2QzltksUk7ZnQAAARY"]
[Mon Feb 23 19:48:13.957517 2026] [:error] [pid 29909:tid 29931] [client 20.114.221.114:63705] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aZw-fT9oc2QzltksUk7ZnwAAARQ"]
[Mon Feb 23 19:48:14.869323 2026] [:error] [pid 25293:tid 25305] [client 20.114.221.114:9388] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "aZw-fuL9XfBf66iHi_eqHAAAAAY"]
[Mon Feb 23 19:48:16.115463 2026] [:error] [pid 25380:tid 25394] [client 20.114.221.114:63741] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZw-gKKrc8yFQ8fy78ovqgAAAMw"]
[Mon Feb 23 19:48:16.621946 2026] [:error] [pid 39639:tid 39656] [client 20.114.221.114:9577] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZw-gBpFkMoMi8uTUUO8UwAAAk0"]
[Mon Feb 23 19:48:17.107470 2026] [:error] [pid 25380:tid 25406] [client 20.114.221.114:63673] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZw-gaKrc8yFQ8fy78ovrQAAANg"]
[Mon Feb 23 19:48:17.536485 2026] [:error] [pid 39639:tid 39644] [client 20.114.221.114:63741] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aZw-gRpFkMoMi8uTUUO8WwAAAkE"]
[Mon Feb 23 19:48:18.264127 2026] [:error] [pid 39639:tid 39659] [client 20.114.221.114:64903] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZw-ghpFkMoMi8uTUUO8YAAAAlA"]
[Mon Feb 23 19:48:19.266890 2026] [:error] [pid 39540:tid 39572] [client 20.114.221.114:9551] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZw-g7sgm9aTWhlRScKpkAAAAcM"]
[Mon Feb 23 19:48:19.974941 2026] [:error] [pid 39639:tid 39662] [client 20.114.221.114:62357] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZw-gxpFkMoMi8uTUUO8ZgAAAlM"]
[Mon Feb 23 19:48:20.956846 2026] [:error] [pid 39540:tid 39591] [client 20.114.221.114:9353] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aZw-hLsgm9aTWhlRScKpkwAAAdY"]
[Mon Feb 23 19:48:22.196450 2026] [:error] [pid 39540:tid 39593] [client 20.114.221.114:9357] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aZw-hrsgm9aTWhlRScKplgAAAdg"]
[Mon Feb 23 19:48:22.869370 2026] [:error] [pid 39540:tid 39570] [client 20.114.221.114:9544] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aZw-hrsgm9aTWhlRScKpmAAAAcE"]
[Mon Feb 23 19:48:24.108521 2026] [:error] [pid 39504:tid 39522] [client 20.114.221.114:60744] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aZw-iHLcHpOlI9gwwJoXewAAAVA"]
[Mon Feb 23 19:48:25.043131 2026] [:error] [pid 39640:tid 39676] [client 20.114.221.114:9678] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aZw-idsK--eVCgzvvufYygAAAoY"]
[Mon Feb 23 19:48:26.371541 2026] [:error] [pid 25380:tid 25397] [client 20.114.221.114:64995] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZw-iqKrc8yFQ8fy78ovvwAAAM8"]
[Mon Feb 23 19:48:26.911298 2026] [:error] [pid 25380:tid 25403] [client 20.114.221.114:9725] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZw-iqKrc8yFQ8fy78ovwAAAANU"]
[Mon Feb 23 19:48:27.531138 2026] [:error] [pid 39540:tid 39583] [client 20.114.221.114:64942] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZw-i7sgm9aTWhlRScKpmwAAAc4"]
[Mon Feb 23 19:48:28.318796 2026] [:error] [pid 39640:tid 39686] [client 20.114.221.114:64935] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aZw-jNsK--eVCgzvvufYzQAAApA"]
[Mon Feb 23 19:48:28.961218 2026] [:error] [pid 25380:tid 25404] [client 20.114.221.114:9350] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZw-jKKrc8yFQ8fy78ovwwAAANY"]
[Mon Feb 23 19:48:29.649054 2026] [:error] [pid 39540:tid 39573] [client 20.114.221.114:63698] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZw-jbsgm9aTWhlRScKpnAAAAcQ"]
[Mon Feb 23 19:48:30.359002 2026] [:error] [pid 25380:tid 25396] [client 20.114.221.114:62387] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZw-jqKrc8yFQ8fy78ovxAAAAM4"]
[Mon Feb 23 19:48:31.947301 2026] [:error] [pid 39540:tid 39575] [client 20.114.221.114:63700] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZw-j7sgm9aTWhlRScKpnwAAAcY"]
[Mon Feb 23 19:48:32.586272 2026] [:error] [pid 29909:tid 29924] [client 20.114.221.114:64934] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aZw-kD9oc2QzltksUk7ZpQAAAQ0"]
[Mon Feb 23 19:48:33.431835 2026] [:error] [pid 39504:tid 39523] [client 20.114.221.114:64949] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aZw-kXLcHpOlI9gwwJoXkgAAAVE"]
[Mon Feb 23 19:48:34.178372 2026] [:error] [pid 39639:tid 39649] [client 20.114.221.114:64924] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aZw-khpFkMoMi8uTUUO8hQAAAkY"]
[Mon Feb 23 19:48:35.893662 2026] [:error] [pid 39540:tid 39585] [client 20.114.221.114:60679] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aZw-k7sgm9aTWhlRScKpowAAAdA"]
[Mon Feb 23 19:48:37.516547 2026] [:error] [pid 39639:tid 39660] [client 20.114.221.114:64902] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aZw-lRpFkMoMi8uTUUO8jwAAAlE"]
[Mon Feb 23 19:48:39.158096 2026] [:error] [pid 39538:tid 39556] [client 20.114.221.114:9368] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aZw-ly4Zk8-cQOG3ZnprdgAAAY4"]
[Mon Feb 23 19:48:42.944182 2026] [:error] [pid 25380:tid 25386] [client 20.114.221.114:9567] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aZw-mqKrc8yFQ8fy78ovzQAAAMQ"]
[Mon Feb 23 19:48:43.925617 2026] [:error] [pid 25380:tid 25391] [client 20.114.221.114:9670] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs18.php"] [unique_id "aZw-m6Krc8yFQ8fy78ov0AAAAMk"]
[Mon Feb 23 19:48:44.688202 2026] [:error] [pid 25380:tid 25389] [client 20.114.221.114:9376] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZw-nKKrc8yFQ8fy78ov0gAAAMc"]
[Mon Feb 23 19:48:45.286852 2026] [:error] [pid 39540:tid 39590] [client 20.114.221.114:9591] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZw-nbsgm9aTWhlRScKppQAAAdU"]
[Mon Feb 23 19:48:45.983845 2026] [:error] [pid 39504:tid 39525] [client 20.114.221.114:64969] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZw-nXLcHpOlI9gwwJoXlQAAAVM"]
[Mon Feb 23 19:48:46.541463 2026] [:error] [pid 39640:tid 39693] [client 20.114.221.114:9697] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZw-ntsK--eVCgzvvufY2QAAApc"]
[Mon Feb 23 19:48:47.237516 2026] [:error] [pid 25294:tid 25376] [client 20.114.221.114:63616] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZw-nyRCFB3CqIo_jfbeEAAAAFc"]
[Mon Feb 23 19:48:48.345776 2026] [:error] [pid 39640:tid 39687] [client 20.114.221.114:64916] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZw-oNsK--eVCgzvvufY2wAAApE"]
[Mon Feb 23 19:48:49.059734 2026] [:error] [pid 39538:tid 39542] [client 20.114.221.114:9568] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZw-oS4Zk8-cQOG3ZnprdwAAAYA"]
[Mon Feb 23 19:48:49.786137 2026] [:error] [pid 39639:tid 39660] [client 20.114.221.114:9716] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZw-oRpFkMoMi8uTUUO8oQAAAlE"]
[Mon Feb 23 19:48:50.437073 2026] [:error] [pid 25294:tid 25364] [client 20.114.221.114:9587] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZw-oiRCFB3CqIo_jfbeEgAAAE8"]
[Mon Feb 23 19:48:51.072918 2026] [:error] [pid 39639:tid 39659] [client 20.114.221.114:9673] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZw-oxpFkMoMi8uTUUO8pQAAAlA"]
[Mon Feb 23 19:48:51.525354 2026] [:error] [pid 39540:tid 39570] [client 20.114.221.114:64984] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZw-o7sgm9aTWhlRScKpqgAAAcE"]
[Mon Feb 23 19:48:52.012889 2026] [:error] [pid 25294:tid 25334] [client 20.114.221.114:65003] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZw-pCRCFB3CqIo_jfbeFQAAAEM"]
[Mon Feb 23 19:48:52.795926 2026] [:error] [pid 39640:tid 39681] [client 20.114.221.114:9351] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZw-pNsK--eVCgzvvufY3gAAAos"]
[Mon Feb 23 19:48:55.138416 2026] [:error] [pid 39640:tid 39690] [client 20.114.221.114:60789] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZw-p9sK--eVCgzvvufY3wAAApQ"]
[Mon Feb 23 19:48:57.277440 2026] [:error] [pid 29909:tid 29917] [client 20.114.221.114:62429] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZw-qT9oc2QzltksUk7ZpwAAAQY"]
[Mon Feb 23 19:48:58.741721 2026] [:error] [pid 39504:tid 39523] [client 20.114.221.114:64951] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZw-qnLcHpOlI9gwwJoXnQAAAVE"]
[Mon Feb 23 19:49:00.021733 2026] [:error] [pid 39640:tid 39685] [client 20.114.221.114:60796] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZw-rNsK--eVCgzvvufY4gAAAo8"]
[Mon Feb 23 19:49:00.889939 2026] [:error] [pid 25295:tid 25336] [client 20.114.221.114:63660] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZw-rI2Av4J1Jnqi7yLBJwAAAIU"]
[Mon Feb 23 19:49:03.585993 2026] [:error] [pid 39640:tid 39683] [client 20.114.221.114:9539] [client 20.114.221.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZw-r9sK--eVCgzvvufY5gAAAo0"]
[Mon Feb 23 19:49:29.114447 2026] [:error] [pid 39639:tid 39665] [client 20.114.221.114:9362] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/main.php"] [unique_id "aZw-yRpFkMoMi8uTUUO84AAAAlY"]
[Mon Feb 23 19:49:30.188889 2026] [:error] [pid 39639:tid 39643] [client 20.114.221.114:9676] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/main.php"] [unique_id "aZw-yhpFkMoMi8uTUUO84gAAAkA"]
[Mon Feb 23 19:49:30.812610 2026] [:error] [pid 39538:tid 39547] [client 20.114.221.114:9401] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/main.php"] [unique_id "aZw-yi4Zk8-cQOG3ZnprhgAAAYU"]
[Mon Feb 23 19:49:31.704562 2026] [:error] [pid 25380:tid 25386] [client 20.114.221.114:9699] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/main.php"] [unique_id "aZw-y6Krc8yFQ8fy78owmwAAAMQ"]
[Mon Feb 23 19:49:32.747638 2026] [:error] [pid 39639:tid 39659] [client 20.114.221.114:9574] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aZw-zBpFkMoMi8uTUUO86wAAAlA"]
[Mon Feb 23 19:49:33.797397 2026] [:error] [pid 25380:tid 25406] [client 20.114.221.114:60776] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aZw-zaKrc8yFQ8fy78owoQAAANg"]
[Mon Feb 23 19:49:34.226731 2026] [:error] [pid 25295:tid 25332] [client 20.114.221.114:64996] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aZw-zo2Av4J1Jnqi7yLBKwAAAII"]
[Mon Feb 23 19:49:34.767915 2026] [:error] [pid 39540:tid 39581] [client 20.114.221.114:60777] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aZw-zrsgm9aTWhlRScKpygAAAcw"]
[Mon Feb 23 19:49:35.857272 2026] [:error] [pid 39540:tid 39591] [client 20.114.221.114:62448] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZw-z7sgm9aTWhlRScKpzAAAAdY"]
[Mon Feb 23 19:49:36.358094 2026] [:error] [pid 29909:tid 29926] [client 20.114.221.114:64938] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZw-0D9oc2QzltksUk7ZvgAAAQ8"]
[Mon Feb 23 19:49:37.010612 2026] [:error] [pid 39639:tid 39659] [client 20.114.221.114:62432] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZw-0RpFkMoMi8uTUUO8-wAAAlA"]
[Mon Feb 23 19:49:37.717172 2026] [:error] [pid 39538:tid 39551] [client 20.114.221.114:63644] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aZw-0S4Zk8-cQOG3ZnpriwAAAYk"]
[Mon Feb 23 19:49:38.407465 2026] [:error] [pid 39538:tid 39543] [client 20.114.221.114:9703] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aZw-0i4Zk8-cQOG3ZnprjAAAAYE"]
[Mon Feb 23 19:49:38.924454 2026] [:error] [pid 25380:tid 25398] [client 20.114.221.114:9558] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aZw-0qKrc8yFQ8fy78owqgAAANA"]
[Mon Feb 23 19:49:39.893212 2026] [:error] [pid 39639:tid 39658] [client 20.114.221.114:9540] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aZw-0xpFkMoMi8uTUUO9BQAAAk8"]
[Mon Feb 23 19:49:41.120324 2026] [:error] [pid 39639:tid 39643] [client 20.114.221.114:9395] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aZw-1RpFkMoMi8uTUUO9CgAAAkA"]
[Mon Feb 23 19:49:41.726333 2026] [:error] [pid 39639:tid 39653] [client 20.114.221.114:63619] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aZw-1RpFkMoMi8uTUUO9DAAAAko"]
[Mon Feb 23 19:49:42.558297 2026] [:error] [pid 25380:tid 25402] [client 20.114.221.114:62419] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aZw-1qKrc8yFQ8fy78owvQAAANQ"]
[Mon Feb 23 19:49:43.949486 2026] [:error] [pid 39640:tid 39670] [client 20.114.221.114:9712] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aZw-19sK--eVCgzvvufZAgAAAoA"]
[Mon Feb 23 19:49:45.269443 2026] [:error] [pid 39540:tid 39577] [client 20.114.221.114:65011] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aZw-2bsgm9aTWhlRScKp6QAAAcg"]
[Mon Feb 23 19:49:46.342209 2026] [:error] [pid 39640:tid 39672] [client 20.114.221.114:9387] [client 20.114.221.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aZw-2tsK--eVCgzvvufZBgAAAoI"]
[Mon Feb 23 19:49:47.003002 2026] [:error] [pid 29909:tid 29931] [client 20.114.221.114:65018] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jsond.php"] [unique_id "aZw-2z9oc2QzltksUk7Z2gAAARQ"]
[Mon Feb 23 19:49:47.545261 2026] [:error] [pid 25380:tid 25386] [client 20.114.221.114:65020] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jsond.php"] [unique_id "aZw-26Krc8yFQ8fy78owwwAAAMQ"]
[Mon Feb 23 19:49:48.088206 2026] [:error] [pid 29909:tid 29925] [client 20.114.221.114:63729] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jsond.php"] [unique_id "aZw-3D9oc2QzltksUk7Z2wAAAQ4"]
[Mon Feb 23 19:49:48.767358 2026] [:error] [pid 29909:tid 29934] [client 20.114.221.114:9375] [client 20.114.221.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jsond.php"] [unique_id "aZw-3D9oc2QzltksUk7Z3QAAARc"]
[Mon Feb 23 20:11:07.409332 2026] [:error] [pid 39540:tid 39582] [client 43.140.247.223:38084] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZxD27sgm9aTWhlRScKvGQAAAc0"]
[Mon Feb 23 22:09:40.656141 2026] [:error] [pid 25293:tid 25318] [client 43.166.128.86:52282] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZxfpOL9XfBf66iHi_ewsQAAABM"]
[Mon Feb 23 23:20:08.828777 2026] [:error] [pid 25295:tid 25361] [client 158.94.208.230:49257] [client 158.94.208.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aZxwKI2Av4J1Jnqi7yLMtQAAAJQ"]
[Mon Feb 23 23:20:09.923047 2026] [:error] [pid 39540:tid 39580] [client 158.94.208.230:49590] [client 158.94.208.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aZxwKbsgm9aTWhlRScLV-QAAAcs"]
[Tue Feb 24 03:18:45.774769 2026] [:error] [pid 60063:tid 60076] [client 182.44.12.37:44055] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZyoFU_6t1uQomVVdUOeLwAAAQs"]
[Tue Feb 24 05:20:53.904467 2026] [:error] [pid 37538:tid 37569] [client 49.51.252.146:59702] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZzEtSynTiHZ9J0Y2nZeHAAAABU"]
[Tue Feb 24 07:11:13.679198 2026] [:error] [pid 11672:tid 11692] [client 45.67.97.194:64685] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZzekfa0fhnmfPYq92vB4AAAARI"]
[Tue Feb 24 07:11:20.469700 2026] [:error] [pid 37540:tid 37618] [client 45.67.97.44:51775] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZzemCahRAUBJS8hpJV5EwAAAJA"]
[Tue Feb 24 07:11:29.396981 2026] [:error] [pid 37540:tid 37624] [client 45.67.97.44:33519] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aZzeoSahRAUBJS8hpJV5LAAAAJY"]
[Tue Feb 24 07:11:34.386893 2026] [:error] [pid 11672:tid 11695] [client 45.67.97.45:30269] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aZzepva0fhnmfPYq92vCGwAAARU"]
[Tue Feb 24 07:11:43.083758 2026] [:error] [pid 37540:tid 37603] [client 45.67.97.45:64199] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZzeryahRAUBJS8hpJV5TgAAAIE"]
[Tue Feb 24 07:11:45.276904 2026] [:error] [pid 37540:tid 37622] [client 45.67.97.44:51161] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZzesSahRAUBJS8hpJV5WAAAAJQ"]
[Tue Feb 24 07:11:45.915488 2026] [:error] [pid 41188:tid 41202] [client 45.67.97.45:38987] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZzesQWRg7szIRhA0WiCGQAAAUs"]
[Tue Feb 24 07:11:46.573194 2026] [:error] [pid 37540:tid 37603] [client 45.67.97.43:62063] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZzesiahRAUBJS8hpJV5WgAAAIE"]
[Tue Feb 24 07:11:47.211677 2026] [:error] [pid 37538:tid 37551] [client 45.67.97.43:52403] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZzesyynTiHZ9J0Y2nZxAgAAAAM"]
[Tue Feb 24 07:11:47.857227 2026] [:error] [pid 37644:tid 37665] [client 45.67.97.43:47385] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZzes0LaEhVDwBRydH10DAAAANM"]
[Tue Feb 24 07:11:49.719213 2026] [:error] [pid 41188:tid 41205] [client 45.67.97.44:22827] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZzetQWRg7szIRhA0WiCMgAAAU4"]
[Tue Feb 24 07:11:52.403215 2026] [:error] [pid 41188:tid 41211] [client 45.67.97.44:43449] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aZzeuAWRg7szIRhA0WiCPgAAAVQ"]
[Tue Feb 24 07:11:56.222926 2026] [:error] [pid 37644:tid 37656] [client 45.67.97.43:40777] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZzevELaEhVDwBRydH10MwAAAMo"]
[Tue Feb 24 07:11:58.014774 2026] [:error] [pid 37540:tid 37618] [client 45.67.97.44:63197] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZzeviahRAUBJS8hpJV5hQAAAJA"]
[Tue Feb 24 07:12:01.179930 2026] [:error] [pid 41188:tid 41206] [client 45.67.97.45:30087] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZzewQWRg7szIRhA0WiCTwAAAU8"]
[Tue Feb 24 07:12:10.175698 2026] [:error] [pid 37538:tid 37559] [client 45.67.97.194:24227] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZzeyiynTiHZ9J0Y2nZxHQAAAAs"]
[Tue Feb 24 07:12:12.362081 2026] [:error] [pid 11672:tid 11694] [client 45.67.97.43:53155] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZzezPa0fhnmfPYq92vCSwAAARQ"]
[Tue Feb 24 07:12:15.907088 2026] [:error] [pid 37540:tid 37615] [client 45.67.97.45:48253] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aZzezyahRAUBJS8hpJV5wgAAAI0"]
[Tue Feb 24 07:12:18.240151 2026] [:error] [pid 41188:tid 41207] [client 45.67.97.44:64771] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aZze0gWRg7szIRhA0WiCkwAAAVA"]
[Tue Feb 24 07:12:24.811318 2026] [:error] [pid 41188:tid 41212] [client 45.67.97.44:21779] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZze2AWRg7szIRhA0WiCnwAAAVU"]
[Tue Feb 24 07:12:26.873184 2026] [:error] [pid 37539:tid 37587] [client 45.67.97.45:47175] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZze2nEnr46jUQep9z_dmwAAAEw"]
[Tue Feb 24 07:12:29.028903 2026] [:error] [pid 41188:tid 41215] [client 45.67.97.194:25435] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZze3QWRg7szIRhA0WiCpwAAAVg"]
[Tue Feb 24 07:12:29.667962 2026] [:error] [pid 37540:tid 37618] [client 45.67.97.44:63411] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZze3SahRAUBJS8hpJV58wAAAJA"]
[Tue Feb 24 07:12:30.318486 2026] [:error] [pid 41188:tid 41194] [client 45.67.97.43:37089] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZze3gWRg7szIRhA0WiCrQAAAUM"]
[Tue Feb 24 07:12:35.217114 2026] [:error] [pid 37644:tid 37658] [client 45.67.97.45:35617] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aZze40LaEhVDwBRydH10dAAAAMw"]
[Tue Feb 24 07:12:35.872426 2026] [:error] [pid 37538:tid 37571] [client 45.67.97.43:30987] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aZze4yynTiHZ9J0Y2nZxMwAAABc"]
[Tue Feb 24 07:12:36.511897 2026] [:error] [pid 37540:tid 37602] [client 45.67.97.44:29613] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZze5CahRAUBJS8hpJV6CQAAAIA"]
[Tue Feb 24 07:12:48.133707 2026] [:error] [pid 37540:tid 37609] [client 45.67.97.194:59053] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aZze8CahRAUBJS8hpJV6mAAAAIc"]
[Tue Feb 24 07:12:52.905218 2026] [:error] [pid 41188:tid 41212] [client 45.67.97.194:37425] [client 45.67.97.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZze9AWRg7szIRhA0WiC5AAAAVU"]
[Tue Feb 24 07:13:10.471113 2026] [:error] [pid 41188:tid 41212] [client 45.67.97.194:37425] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZzfBgWRg7szIRhA0WiDCQAAAVU"]
[Tue Feb 24 07:13:13.897227 2026] [:error] [pid 37538:tid 37558] [client 45.67.97.43:64451] [client 45.67.97.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZzfCSynTiHZ9J0Y2nZxTwAAAAo"]
[Tue Feb 24 07:13:16.403521 2026] [:error] [pid 37538:tid 37564] [client 45.67.97.43:64451] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aZzfDCynTiHZ9J0Y2nZxUQAAABA"]
[Tue Feb 24 07:13:29.159574 2026] [:error] [pid 37540:tid 37606] [client 45.67.97.45:25203] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZzfGSahRAUBJS8hpJV7bgAAAIQ"]
[Tue Feb 24 07:13:40.375137 2026] [:error] [pid 37540:tid 37620] [client 45.67.97.43:29889] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZzfJCahRAUBJS8hpJV7kgAAAJI"]
[Tue Feb 24 07:13:45.080240 2026] [:error] [pid 37540:tid 37604] [client 45.67.97.44:32713] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZzfKSahRAUBJS8hpJV7mwAAAII"]
[Tue Feb 24 07:13:50.153478 2026] [:error] [pid 37538:tid 37557] [client 45.67.97.44:62121] [client 45.67.97.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aZzfLiynTiHZ9J0Y2nZxZQAAAAk"]
[Tue Feb 24 07:13:51.587362 2026] [:error] [pid 37538:tid 37565] [client 45.67.97.44:62121] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZzfLyynTiHZ9J0Y2nZxZwAAABE"]
[Tue Feb 24 07:14:14.567462 2026] [:error] [pid 37644:tid 37669] [client 45.67.97.45:56953] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZzfRkLaEhVDwBRydH11NQAAANc"]
[Tue Feb 24 07:14:19.754375 2026] [:error] [pid 37540:tid 37625] [client 45.67.97.44:61275] [client 45.67.97.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.44, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aZzfSyahRAUBJS8hpJV8BgAAAJc"]
[Tue Feb 24 07:14:25.052650 2026] [:error] [pid 37540:tid 37605] [client 45.67.97.44:61275] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aZzfUSahRAUBJS8hpJV8CgAAAIM"]
[Tue Feb 24 07:14:27.217688 2026] [:error] [pid 41188:tid 41213] [client 45.67.97.45:20029] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aZzfUwWRg7szIRhA0WiDYAAAAVY"]
[Tue Feb 24 07:14:31.540984 2026] [:error] [pid 37644:tid 37648] [client 45.67.97.44:46123] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZzfV0LaEhVDwBRydH11SwAAAMI"]
[Tue Feb 24 07:14:36.097305 2026] [:error] [pid 41188:tid 41191] [client 45.67.97.45:46853] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZzfXAWRg7szIRhA0WiDdgAAAUA"]
[Tue Feb 24 07:14:36.736158 2026] [:error] [pid 37644:tid 37669] [client 45.67.97.194:51385] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZzfXELaEhVDwBRydH11TwAAANc"]
[Tue Feb 24 07:14:43.880559 2026] [:error] [pid 37538:tid 37565] [client 45.67.97.45:39195] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZzfYyynTiHZ9J0Y2nZxjwAAABE"]
[Tue Feb 24 07:14:46.021832 2026] [:error] [pid 37538:tid 37552] [client 45.67.97.44:61371] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aZzfZiynTiHZ9J0Y2nZxlAAAAAQ"]
[Tue Feb 24 07:14:50.533181 2026] [:error] [pid 11672:tid 11691] [client 45.67.97.45:61455] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aZzfava0fhnmfPYq92vC-QAAARE"]
[Tue Feb 24 07:14:55.736505 2026] [:error] [pid 37540:tid 37612] [client 45.67.97.45:61355] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aZzfbyahRAUBJS8hpJV8LQAAAIo"]
[Tue Feb 24 07:14:59.351275 2026] [:error] [pid 41188:tid 41208] [client 45.67.97.44:52445] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aZzfcwWRg7szIRhA0WiDkwAAAVE"]
[Tue Feb 24 07:15:04.653070 2026] [:error] [pid 37540:tid 37616] [client 45.67.97.194:63633] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aZzfeCahRAUBJS8hpJV8QAAAAI4"]
[Tue Feb 24 07:15:14.174125 2026] [:error] [pid 37540:tid 37621] [client 45.67.97.43:46145] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aZzfgiahRAUBJS8hpJV8VgAAAJM"]
[Tue Feb 24 07:15:14.822089 2026] [:error] [pid 37540:tid 37604] [client 45.67.97.194:51533] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aZzfgiahRAUBJS8hpJV8VwAAAII"]
[Tue Feb 24 07:15:15.459663 2026] [:error] [pid 41188:tid 41203] [client 45.67.97.45:33441] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aZzfgwWRg7szIRhA0WiDxgAAAUw"]
[Tue Feb 24 07:15:16.098317 2026] [:error] [pid 41188:tid 41201] [client 45.67.97.45:47285] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aZzfhAWRg7szIRhA0WiDyQAAAUo"]
[Tue Feb 24 07:15:18.284082 2026] [:error] [pid 11672:tid 11674] [client 45.67.97.43:55073] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aZzfhva0fhnmfPYq92vC_QAAAQA"]
[Tue Feb 24 07:15:18.924027 2026] [:error] [pid 37538:tid 37558] [client 45.67.97.194:39289] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aZzfhiynTiHZ9J0Y2nZx4gAAAAo"]
[Tue Feb 24 07:15:22.416106 2026] [:error] [pid 37540:tid 37610] [client 45.67.97.43:64955] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aZzfiiahRAUBJS8hpJV8ogAAAIg"]
[Tue Feb 24 07:15:23.058375 2026] [:error] [pid 37644:tid 37655] [client 45.67.97.194:51935] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZzfi0LaEhVDwBRydH11bQAAAMk"]
[Tue Feb 24 07:15:23.696454 2026] [:error] [pid 37540:tid 37606] [client 45.67.97.44:31903] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aZzfiyahRAUBJS8hpJV8owAAAIQ"]
[Tue Feb 24 07:15:24.334754 2026] [:error] [pid 37644:tid 37647] [client 45.67.97.44:44363] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aZzfjELaEhVDwBRydH11cQAAAME"]
[Tue Feb 24 07:15:26.503722 2026] [:error] [pid 37644:tid 37647] [client 45.67.97.44:36195] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZzfjkLaEhVDwBRydH11gwAAAME"]
[Tue Feb 24 07:15:30.693132 2026] [:error] [pid 41188:tid 41192] [client 45.67.97.45:23841] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aZzfkgWRg7szIRhA0WiEEAAAAUE"]
[Tue Feb 24 07:15:37.055586 2026] [:error] [pid 11672:tid 11679] [client 45.67.97.43:40831] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aZzfmfa0fhnmfPYq92vDDAAAAQU"]
[Tue Feb 24 07:15:47.105045 2026] [:error] [pid 37540:tid 37604] [client 45.67.97.43:32705] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aZzfoyahRAUBJS8hpJV88AAAAII"]
[Tue Feb 24 07:15:51.848062 2026] [:error] [pid 37540:tid 37603] [client 45.67.97.45:42993] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aZzfpyahRAUBJS8hpJV9BAAAAIE"]
[Tue Feb 24 07:15:52.486276 2026] [:error] [pid 37644:tid 37670] [client 45.67.97.45:52361] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aZzfqELaEhVDwBRydH11lgAAANg"]
[Tue Feb 24 07:15:58.338785 2026] [:error] [pid 41188:tid 41196] [client 45.67.97.194:36273] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZzfrgWRg7szIRhA0WiEVAAAAUU"]
[Tue Feb 24 07:16:03.298968 2026] [proxy_fcgi:error] [pid 11672:tid 11692] [client 45.67.97.194:24121] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:16:03.623413 2026] [proxy_fcgi:error] [pid 11672:tid 11684] [client 45.67.97.194:24121] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:16:03.949955 2026] [proxy_fcgi:error] [pid 11672:tid 11691] [client 45.67.97.194:24121] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:16:08.563077 2026] [:error] [pid 11672:tid 11687] [client 45.67.97.194:24121] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZzfuPa0fhnmfPYq92vDNAAAAQ0"]
[Tue Feb 24 07:16:09.324680 2026] [:error] [pid 41188:tid 41197] [client 45.67.97.194:55091] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aZzfuQWRg7szIRhA0WiEaAAAAUY"]
[Tue Feb 24 07:16:09.970630 2026] [:error] [pid 37644:tid 37649] [client 45.67.97.44:49615] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aZzfuULaEhVDwBRydH11tQAAAMM"]
[Tue Feb 24 07:16:10.649576 2026] [:error] [pid 41188:tid 41212] [client 45.67.97.43:32697] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aZzfugWRg7szIRhA0WiEbAAAAVU"]
[Tue Feb 24 07:16:11.300116 2026] [:error] [pid 41188:tid 41201] [client 45.67.97.43:58599] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aZzfuwWRg7szIRhA0WiEbwAAAUo"]
[Tue Feb 24 07:16:12.032371 2026] [:error] [pid 37539:tid 37598] [client 45.67.97.44:55651] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aZzfvHEnr46jUQep9z_eWAAAAFc"]
[Tue Feb 24 07:16:13.846383 2026] [:error] [pid 37538:tid 37568] [client 45.67.97.43:32413] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aZzfvSynTiHZ9J0Y2nZyCwAAABQ"]
[Tue Feb 24 07:16:14.507849 2026] [:error] [pid 37644:tid 37649] [client 45.67.97.43:45435] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aZzfvkLaEhVDwBRydH11vgAAAMM"]
[Tue Feb 24 07:16:15.147810 2026] [:error] [pid 11672:tid 11688] [client 45.67.97.44:40407] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aZzfv_a0fhnmfPYq92vDOAAAAQ4"]
[Tue Feb 24 07:16:15.787009 2026] [:error] [pid 37538:tid 37548] [client 45.67.97.45:30587] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aZzfvyynTiHZ9J0Y2nZyDQAAAAA"]
[Tue Feb 24 07:16:19.212119 2026] [:error] [pid 37540:tid 37618] [client 45.67.97.45:51475] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aZzfwyahRAUBJS8hpJV9QgAAAJA"]
[Tue Feb 24 07:16:21.038332 2026] [:error] [pid 37540:tid 37624] [client 45.67.97.43:57375] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aZzfxSahRAUBJS8hpJV9RQAAAJY"]
[Tue Feb 24 07:16:24.556625 2026] [:error] [pid 37539:tid 37595] [client 45.67.97.43:60697] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aZzfyHEnr46jUQep9z_eZgAAAFQ"]
[Tue Feb 24 07:16:28.289157 2026] [:error] [pid 37644:tid 37663] [client 45.67.97.44:23047] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aZzfzELaEhVDwBRydH11xwAAANE"]
[Tue Feb 24 07:16:33.302784 2026] [:error] [pid 41188:tid 41206] [client 45.67.97.194:36279] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZzf0QWRg7szIRhA0WiEkQAAAU8"]
[Tue Feb 24 07:16:39.706603 2026] [:error] [pid 37644:tid 37659] [client 45.67.97.194:45723] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZzf10LaEhVDwBRydH11zgAAAM0"]
[Tue Feb 24 07:16:41.867087 2026] [:error] [pid 37539:tid 37593] [client 45.67.97.45:31167] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aZzf2XEnr46jUQep9z_ebgAAAFI"]
[Tue Feb 24 07:17:06.365043 2026] [:error] [pid 37539:tid 37575] [client 45.67.97.194:40509] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aZzf8nEnr46jUQep9z_eqQAAAEA"]
[Tue Feb 24 07:17:07.012595 2026] [:error] [pid 37644:tid 37655] [client 45.67.97.43:37269] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aZzf80LaEhVDwBRydH115QAAAMk"]
[Tue Feb 24 07:17:07.651880 2026] [:error] [pid 37538:tid 37548] [client 45.67.97.194:25049] [client 45.67.97.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZzf8yynTiHZ9J0Y2nZySQAAAAA"]
[Tue Feb 24 07:17:10.486946 2026] [:error] [pid 37538:tid 37555] [client 45.67.97.194:25049] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aZzf9iynTiHZ9J0Y2nZyTQAAAAc"]
[Tue Feb 24 07:17:14.255243 2026] [:error] [pid 37540:tid 37615] [client 45.67.97.194:63643] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aZzf-iahRAUBJS8hpJV9ewAAAI0"]
[Tue Feb 24 07:17:14.897622 2026] [:error] [pid 37540:tid 37618] [client 45.67.97.194:64255] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aZzf-iahRAUBJS8hpJV9gQAAAJA"]
[Tue Feb 24 07:17:21.379836 2026] [:error] [pid 37540:tid 37614] [client 45.67.97.44:56101] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZzgASahRAUBJS8hpJV9mAAAAIw"]
[Tue Feb 24 07:17:22.020511 2026] [:error] [pid 37644:tid 37651] [client 45.67.97.194:53673] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aZzgAkLaEhVDwBRydH12AwAAAMU"]
[Tue Feb 24 07:17:29.725279 2026] [:error] [pid 11672:tid 11695] [client 45.67.97.194:42319] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aZzgCfa0fhnmfPYq92vDfAAAARU"]
[Tue Feb 24 07:17:33.052194 2026] [proxy_fcgi:error] [pid 37540:tid 37621] [client 45.67.97.45:44199] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:17:34.871052 2026] [:error] [pid 37540:tid 37611] [client 45.67.97.45:44199] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "aZzgDiahRAUBJS8hpJV9wwAAAIk"]
[Tue Feb 24 07:17:35.508753 2026] [:error] [pid 37644:tid 37662] [client 45.67.97.44:23255] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "aZzgD0LaEhVDwBRydH12FgAAANA"]
[Tue Feb 24 07:17:39.303579 2026] [:error] [pid 41188:tid 41203] [client 45.67.97.45:37149] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aZzgEwWRg7szIRhA0WiEywAAAUw"]
[Tue Feb 24 07:17:39.943504 2026] [:error] [pid 37539:tid 37593] [client 45.67.97.44:25299] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aZzgE3Enr46jUQep9z_exgAAAFI"]
[Tue Feb 24 07:17:50.469542 2026] [:error] [pid 37644:tid 37662] [client 45.67.97.194:42693] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aZzgHkLaEhVDwBRydH12JgAAANA"]
[Tue Feb 24 07:17:51.107055 2026] [:error] [pid 37540:tid 37616] [client 45.67.97.44:49637] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aZzgHyahRAUBJS8hpJV93gAAAI4"]
[Tue Feb 24 07:17:57.613945 2026] [:error] [pid 37538:tid 37551] [client 45.67.97.194:44743] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aZzgJSynTiHZ9J0Y2nZyZgAAAAM"]
[Tue Feb 24 07:17:58.263867 2026] [:error] [pid 41188:tid 41201] [client 45.67.97.44:39353] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZzgJgWRg7szIRhA0WiE4wAAAUo"]
[Tue Feb 24 07:17:58.921968 2026] [:error] [pid 37644:tid 37652] [client 45.67.97.44:55833] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aZzgJkLaEhVDwBRydH12KAAAAMY"]
[Tue Feb 24 07:18:06.737813 2026] [:error] [pid 37540:tid 37610] [client 45.67.97.43:55513] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aZzgLiahRAUBJS8hpJV-bgAAAIg"]
[Tue Feb 24 07:18:08.955848 2026] [:error] [pid 41188:tid 41210] [client 45.67.97.44:32319] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aZzgMAWRg7szIRhA0WiE-gAAAVM"]
[Tue Feb 24 07:18:18.531165 2026] [:error] [pid 37538:tid 37566] [client 45.67.97.194:33275] [client 45.67.97.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "aZzgOiynTiHZ9J0Y2nZyggAAABI"]
[Tue Feb 24 07:18:27.146834 2026] [:error] [pid 37538:tid 37563] [client 45.67.97.194:33275] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aZzgQyynTiHZ9J0Y2nZyigAAAA8"]
[Tue Feb 24 07:18:27.801093 2026] [:error] [pid 37540:tid 37607] [client 45.67.97.194:64179] [client 45.67.97.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.67.97.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aZzgQyahRAUBJS8hpJV-vQAAAIU"]
[Tue Feb 24 07:18:45.944476 2026] [proxy_fcgi:error] [pid 37540:tid 37605] [client 45.67.97.194:64179] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:19:06.719145 2026] [:error] [pid 37540:tid 37619] [client 45.67.97.194:64179] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aZzgaiahRAUBJS8hpJV_SAAAAJE"]
[Tue Feb 24 07:19:11.629789 2026] [:error] [pid 37539:tid 37587] [client 45.67.97.43:34263] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aZzgb3Enr46jUQep9z_fEgAAAEw"]
[Tue Feb 24 07:19:15.392317 2026] [:error] [pid 37644:tid 37655] [client 45.67.97.45:21647] [client 45.67.97.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aZzgc0LaEhVDwBRydH121gAAAMk"]
[Tue Feb 24 07:19:28.437016 2026] [:error] [pid 37539:tid 37581] [client 45.67.97.194:57919] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aZzggHEnr46jUQep9z_fKgAAAEY"]
[Tue Feb 24 07:19:32.098706 2026] [:error] [pid 37540:tid 37617] [client 45.67.97.44:53065] [client 45.67.97.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZzghCahRAUBJS8hpJV_cAAAAI8"]
[Tue Feb 24 07:19:34.277026 2026] [:error] [pid 11672:tid 11675] [client 45.67.97.43:62929] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aZzghva0fhnmfPYq92vEBwAAAQE"]
[Tue Feb 24 07:19:40.219745 2026] [proxy_fcgi:error] [pid 37644:tid 37658] [client 45.67.97.43:39365] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:19:40.542963 2026] [proxy_fcgi:error] [pid 37644:tid 37652] [client 45.67.97.43:39365] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:19:40.862885 2026] [:error] [pid 37644:tid 37669] [client 45.67.97.43:39365] [client 45.67.97.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aZzgjELaEhVDwBRydH126QAAANc"]
[Tue Feb 24 07:19:41.502287 2026] [:error] [pid 41188:tid 41200] [client 45.67.97.194:45899] [client 45.67.97.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aZzgjQWRg7szIRhA0WiFZgAAAUk"]
[Tue Feb 24 07:19:52.147295 2026] [autoindex:error] [pid 11672:tid 11694] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:52.471336 2026] [autoindex:error] [pid 11672:tid 11677] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:52.798836 2026] [autoindex:error] [pid 11672:tid 11685] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:53.127338 2026] [autoindex:error] [pid 11672:tid 11684] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:55.103911 2026] [autoindex:error] [pid 11672:tid 11696] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:55.429293 2026] [autoindex:error] [pid 11672:tid 11688] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:55.752833 2026] [autoindex:error] [pid 11672:tid 11674] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:56.076782 2026] [autoindex:error] [pid 11672:tid 11678] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:56.400306 2026] [autoindex:error] [pid 11672:tid 11681] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:56.723622 2026] [autoindex:error] [pid 11672:tid 11676] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:57.374640 2026] [autoindex:error] [pid 11672:tid 11697] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:59.003304 2026] [autoindex:error] [pid 11672:tid 11693] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:19:59.327327 2026] [autoindex:error] [pid 11672:tid 11692] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:02.841128 2026] [autoindex:error] [pid 11672:tid 11685] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:03.223662 2026] [autoindex:error] [pid 11672:tid 11679] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:03.548574 2026] [autoindex:error] [pid 11672:tid 11684] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:03.889984 2026] [autoindex:error] [pid 11672:tid 11698] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:05.775125 2026] [autoindex:error] [pid 11672:tid 11680] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:06.109972 2026] [autoindex:error] [pid 11672:tid 11689] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:07.776718 2026] [autoindex:error] [pid 11672:tid 11688] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:10.939720 2026] [autoindex:error] [pid 11672:tid 11681] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:11.265590 2026] [autoindex:error] [pid 11672:tid 11686] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:11.596670 2026] [autoindex:error] [pid 11672:tid 11676] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:20.690463 2026] [autoindex:error] [pid 11672:tid 11695] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:22.407923 2026] [autoindex:error] [pid 11672:tid 11679] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:22.735430 2026] [autoindex:error] [pid 11672:tid 11684] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:23.709990 2026] [autoindex:error] [pid 11672:tid 11682] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:24.038679 2026] [autoindex:error] [pid 11672:tid 11687] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:24.363980 2026] [autoindex:error] [pid 11672:tid 11683] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:28.780487 2026] [autoindex:error] [pid 11672:tid 11688] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:20:30.474763 2026] [autoindex:error] [pid 11672:tid 11686] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:04.140082 2026] [autoindex:error] [pid 11672:tid 11685] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:04.465127 2026] [autoindex:error] [pid 11672:tid 11679] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:04.790349 2026] [autoindex:error] [pid 11672:tid 11698] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:05.132887 2026] [autoindex:error] [pid 11672:tid 11684] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:05.457200 2026] [autoindex:error] [pid 11672:tid 11683] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:05.783522 2026] [autoindex:error] [pid 11672:tid 11689] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:06.105632 2026] [autoindex:error] [pid 11672:tid 11688] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:06.431707 2026] [autoindex:error] [pid 11672:tid 11686] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:08.233045 2026] [autoindex:error] [pid 11672:tid 11675] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:09.971052 2026] [autoindex:error] [pid 11672:tid 11690] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:10.298550 2026] [autoindex:error] [pid 11672:tid 11677] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:10.621844 2026] [autoindex:error] [pid 11672:tid 11685] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:12.224155 2026] [autoindex:error] [pid 11672:tid 11683] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:12.548571 2026] [autoindex:error] [pid 11672:tid 11691] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:12.904322 2026] [autoindex:error] [pid 11672:tid 11680] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:14.378195 2026] [autoindex:error] [pid 11672:tid 11682] [client 45.67.97.45:58677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:21:48.496789 2026] [autoindex:error] [pid 37539:tid 37599] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:03.855946 2026] [autoindex:error] [pid 37539:tid 37580] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:09.556627 2026] [autoindex:error] [pid 37539:tid 37575] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:09.880056 2026] [autoindex:error] [pid 37539:tid 37585] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:15.318058 2026] [autoindex:error] [pid 37539:tid 37590] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:15.643922 2026] [autoindex:error] [pid 37539:tid 37593] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:15.969542 2026] [autoindex:error] [pid 37539:tid 37595] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:16.292642 2026] [autoindex:error] [pid 37539:tid 37589] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:16.616885 2026] [autoindex:error] [pid 37539:tid 37598] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:16.940212 2026] [autoindex:error] [pid 37539:tid 37581] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:17.265828 2026] [autoindex:error] [pid 37539:tid 37599] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:17.592697 2026] [autoindex:error] [pid 37539:tid 37576] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:17.916925 2026] [autoindex:error] [pid 37539:tid 37580] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 07:22:43.875129 2026] [autoindex:error] [pid 37539:tid 37580] [client 45.67.97.44:58621] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 24 08:44:14.381945 2026] [:error] [pid 41188:tid 41199] [client 45.61.185.116:30460] [client 45.61.185.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.185.116, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZz0XgWRg7szIRhA0Wiq8AAAAUg"], referer: https://duckduckgo.com/
[Tue Feb 24 08:44:17.079332 2026] [:error] [pid 41188:tid 41210] [client 45.61.185.116:30460] [client 45.61.185.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.185.116, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aZz0YQWRg7szIRhA0Wiq9AAAAVM"], referer: https://duckduckgo.com/
[Tue Feb 24 09:02:06.803182 2026] [:error] [pid 37539:tid 37589] [client 170.106.165.76:41822] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZz4jnEnr46jUQep9z_zRAAAAE4"]
[Tue Feb 24 09:52:30.613522 2026] [:error] [pid 37644:tid 37656] [client 182.44.67.97:45656] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ0EXkLaEhVDwBRydH2YSwAAAMo"]
[Tue Feb 24 11:17:02.789980 2026] [:error] [pid 41188:tid 41212] [client 51.68.233.44:34962] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ0YLgWRg7szIRhA0WjwyQAAAVU"]
[Tue Feb 24 11:17:05.240322 2026] [:error] [pid 37644:tid 37651] [client 51.68.233.44:49228] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ0YMULaEhVDwBRydH2lzAAAAMU"]
[Tue Feb 24 11:17:07.875662 2026] [:error] [pid 41188:tid 41197] [client 51.68.233.44:49240] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZ0YMwWRg7szIRhA0Wjw1AAAAUY"]
[Tue Feb 24 11:17:10.373889 2026] [:error] [pid 37538:tid 37562] [client 51.68.233.44:52366] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZ0YNiynTiHZ9J0Y2naPiQAAAA4"]
[Tue Feb 24 11:17:12.822524 2026] [:error] [pid 11672:tid 11689] [client 51.68.233.44:52378] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ0YOPa0fhnmfPYq92sJqAAAAQ8"]
[Tue Feb 24 11:17:15.319445 2026] [:error] [pid 41188:tid 41197] [client 51.68.233.44:52388] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZ0YOwWRg7szIRhA0Wjw5gAAAUY"]
[Tue Feb 24 11:17:17.783487 2026] [:error] [pid 37644:tid 37667] [client 51.68.233.44:52396] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ0YPULaEhVDwBRydH2l1QAAANU"]
[Tue Feb 24 11:17:20.255857 2026] [:error] [pid 11672:tid 11679] [client 51.68.233.44:40956] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ0YQPa0fhnmfPYq92sJrwAAAQU"]
[Tue Feb 24 11:17:22.749249 2026] [:error] [pid 37538:tid 37571] [client 51.68.233.44:40962] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ0YQiynTiHZ9J0Y2naPjAAAABc"]
[Tue Feb 24 11:17:25.226577 2026] [:error] [pid 37540:tid 37621] [client 51.68.233.44:40974] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ0YRSahRAUBJS8hpJXXxgAAAJM"]
[Tue Feb 24 11:17:27.678450 2026] [:error] [pid 41188:tid 41204] [client 51.68.233.44:40988] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ0YRwWRg7szIRhA0Wjw7wAAAU0"]
[Tue Feb 24 11:17:30.163388 2026] [:error] [pid 37539:tid 37580] [client 51.68.233.44:60426] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ0YSnEnr46jUQep9z8LiwAAAEU"]
[Tue Feb 24 11:17:32.662458 2026] [:error] [pid 11672:tid 11687] [client 51.68.233.44:60436] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ0YTPa0fhnmfPYq92sJtAAAAQ0"]
[Tue Feb 24 11:17:35.122916 2026] [:error] [pid 11672:tid 11683] [client 51.68.233.44:60442] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZ0YT_a0fhnmfPYq92sJugAAAQk"]
[Tue Feb 24 11:17:37.448136 2026] [:error] [pid 11672:tid 11696] [client 51.68.233.44:60448] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZ0YUfa0fhnmfPYq92sJvwAAARY"]
[Tue Feb 24 11:17:39.921539 2026] [:error] [pid 41188:tid 41207] [client 51.68.233.44:53386] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ0YUwWRg7szIRhA0WjxAQAAAVA"]
[Tue Feb 24 11:17:42.263845 2026] [:error] [pid 37644:tid 37652] [client 51.68.233.44:53398] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZ0YVkLaEhVDwBRydH2l3gAAAMY"]
[Tue Feb 24 11:17:44.756627 2026] [:error] [pid 37538:tid 37555] [client 51.68.233.44:53400] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZ0YWCynTiHZ9J0Y2naPkAAAAAc"]
[Tue Feb 24 11:17:47.087106 2026] [:error] [pid 37539:tid 37577] [client 51.68.233.44:53404] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZ0YW3Enr46jUQep9z8LqQAAAEI"]
[Tue Feb 24 11:17:49.541192 2026] [:error] [pid 37539:tid 37595] [client 51.68.233.44:45832] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ0YXXEnr46jUQep9z8LrgAAAFQ"]
[Tue Feb 24 11:17:51.868404 2026] [:error] [pid 41188:tid 41192] [client 51.68.233.44:45840] [client 51.68.233.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZ0YXwWRg7szIRhA0WjxHgAAAUE"]
[Tue Feb 24 12:26:57.998525 2026] [:error] [pid 37540:tid 37617] [client 170.106.72.178:53218] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ0okSahRAUBJS8hpJX17gAAAI8"]
[Tue Feb 24 12:40:05.405097 2026] [autoindex:error] [pid 37540:tid 37624] [client 68.183.93.46:58142] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Feb 24 14:29:36.125435 2026] [:error] [pid 34175:tid 34197] [client 115.133.109.178:50236] [client 115.133.109.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.133.109.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZ1FUHNLnkJcHQ-bNtWcTQAAAZM"]
[Tue Feb 24 15:23:55.526331 2026] [:error] [pid 25969:tid 25982] [client 115.133.109.178:50769] [client 115.133.109.178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ1SCw8BalASL0Ivc6nx0AAAAAs"]
[Tue Feb 24 19:46:57.187713 2026] [:error] [pid 16868:tid 16903] [client 103.77.107.57:64415] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aZ2PsSdEecEcYKsh8PTlGgAAA8Y"]
[Tue Feb 24 19:46:57.392678 2026] [:error] [pid 16716:tid 16742] [client 103.77.107.57:64418] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aZ2PscD67Ke7uCRSQazVEgAAAlg"]
[Tue Feb 24 22:50:19.802888 2026] [:error] [pid 40455:tid 40472] [client 162.62.213.187:56494] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ26q1w13ca9RV2qrBmLIgAAAUw"]
[Tue Feb 24 23:37:26.718039 2026] [:error] [pid 40394:tid 40427] [client 38.242.239.223:35846] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aZ3FtuDlibHIQ-y0MaSK8wAAAIA"]
[Tue Feb 24 23:37:30.342691 2026] [:error] [pid 37715:tid 37738] [client 38.242.239.223:40422] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aZ3FukIBAxg--xL5ughf7QAAAhU"]
[Tue Feb 24 23:37:33.445137 2026] [:error] [pid 37884:tid 37894] [client 38.242.239.223:40432] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ3Fvf08KJo-7FmKlnBbaAAAA0Y"]
[Tue Feb 24 23:37:37.108369 2026] [:error] [pid 37715:tid 37730] [client 38.242.239.223:40446] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ3FwUIBAxg--xL5ughf7gAAAg0"]
[Tue Feb 24 23:37:40.236311 2026] [:error] [pid 40455:tid 40472] [client 38.242.239.223:33854] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ3FxFw13ca9RV2qrBmWBwAAAUw"]
[Tue Feb 24 23:37:43.482632 2026] [:error] [pid 40394:tid 40437] [client 38.242.239.223:33866] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ3Fx-DlibHIQ-y0MaSK-AAAAIo"]
[Tue Feb 24 23:37:46.828109 2026] [:error] [pid 40455:tid 40471] [client 38.242.239.223:33878] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ3Fylw13ca9RV2qrBmWDwAAAUs"]
[Tue Feb 24 23:37:50.593547 2026] [:error] [pid 37884:tid 37902] [client 38.242.239.223:42506] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ3Fzv08KJo-7FmKlnBbawAAA04"]
[Tue Feb 24 23:37:53.825586 2026] [:error] [pid 40455:tid 40465] [client 38.242.239.223:42512] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ3F0Vw13ca9RV2qrBmWEgAAAUU"]
[Tue Feb 24 23:37:57.482243 2026] [:error] [pid 35061:tid 35078] [client 38.242.239.223:42524] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ3F1STtNYeQS_BngHwJjgAAAQs"]
[Tue Feb 24 23:38:01.046481 2026] [:error] [pid 37715:tid 37740] [client 38.242.239.223:44722] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ3F2UIBAxg--xL5ughf-QAAAhc"]
[Tue Feb 24 23:38:06.430889 2026] [:error] [pid 40394:tid 40427] [client 38.242.239.223:44730] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZ3F3uDlibHIQ-y0MaSK_gAAAIA"]
[Tue Feb 24 23:38:12.768361 2026] [:error] [pid 35061:tid 35071] [client 38.242.239.223:42336] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ3F5CTtNYeQS_BngHwJkwAAAQQ"]
[Tue Feb 24 23:38:15.807276 2026] [:error] [pid 40456:tid 40494] [client 38.242.239.223:42340] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ3F5-P0ojUS1IXv0AXfagAAAYc"]
[Tue Feb 24 23:38:19.868991 2026] [:error] [pid 34018:tid 34045] [client 38.242.239.223:42350] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ3F6xGkEvccktzDf_ix7QAAAME"]
[Tue Feb 24 23:38:22.819843 2026] [:error] [pid 40456:tid 40490] [client 38.242.239.223:51582] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ3F7uP0ojUS1IXv0AXfbQAAAYM"]
[Tue Feb 24 23:39:02.556005 2026] [:error] [pid 40394:tid 40449] [client 38.242.239.223:51590] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aZ3GFuDlibHIQ-y0MaSLEAAAAJY"]
[Tue Feb 24 23:39:06.714586 2026] [:error] [pid 37884:tid 37888] [client 38.242.239.223:45194] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ3GGv08KJo-7FmKlnBbbgAAA0A"]
[Tue Feb 24 23:39:09.919983 2026] [:error] [pid 40456:tid 40495] [client 36.111.67.189:36316] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ3GHeP0ojUS1IXv0AXftQAAAYg"]
[Tue Feb 24 23:39:10.607229 2026] [:error] [pid 40393:tid 40401] [client 38.242.239.223:42384] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ3GHrDZWhNc1DniCm3iBAAAAEI"]
[Tue Feb 24 23:39:15.479198 2026] [:error] [pid 40456:tid 40500] [client 38.242.239.223:42388] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aZ3GI-P0ojUS1IXv0AXfwQAAAY0"]
[Tue Feb 24 23:39:18.748601 2026] [:error] [pid 40456:tid 40504] [client 38.242.239.223:42392] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aZ3GJuP0ojUS1IXv0AXfygAAAZE"]
[Tue Feb 24 23:39:22.993212 2026] [:error] [pid 40393:tid 40421] [client 38.242.239.223:48232] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZ3GKrDZWhNc1DniCm3iBwAAAFY"]
[Tue Feb 24 23:39:26.722319 2026] [:error] [pid 37715:tid 37732] [client 38.242.239.223:48244] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZ3GLkIBAxg--xL5ughgFQAAAg8"]
[Tue Feb 24 23:39:29.795169 2026] [:error] [pid 40394:tid 40428] [client 38.242.239.223:51936] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aZ3GMeDlibHIQ-y0MaSLGAAAAIE"]
[Tue Feb 24 23:39:33.397056 2026] [:error] [pid 37715:tid 37719] [client 38.242.239.223:51944] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aZ3GNUIBAxg--xL5ughgGAAAAgI"]
[Tue Feb 24 23:39:36.882356 2026] [:error] [pid 40456:tid 40487] [client 38.242.239.223:51956] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aZ3GOOP0ojUS1IXv0AXf6wAAAYA"]
[Tue Feb 24 23:39:40.350938 2026] [:error] [pid 35061:tid 35091] [client 38.242.239.223:36220] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ3GPCTtNYeQS_BngHwJrQAAARg"]
[Tue Feb 24 23:39:43.442804 2026] [:error] [pid 40456:tid 40499] [client 38.242.239.223:36226] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ3GP-P0ojUS1IXv0AXgBgAAAYw"]
[Tue Feb 24 23:39:46.584435 2026] [:error] [pid 40456:tid 40491] [client 38.242.239.223:36238] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aZ3GQuP0ojUS1IXv0AXgFQAAAYQ"]
[Tue Feb 24 23:39:49.908021 2026] [:error] [pid 40393:tid 40406] [client 38.242.239.223:55348] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ3GRbDZWhNc1DniCm3iEAAAAEc"]
[Tue Feb 24 23:39:53.199676 2026] [:error] [pid 40456:tid 40497] [client 38.242.239.223:55362] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZ3GSeP0ojUS1IXv0AXgMAAAAYo"]
[Tue Feb 24 23:39:56.415764 2026] [:error] [pid 40456:tid 40504] [client 38.242.239.223:55370] [client 38.242.239.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aZ3GTOP0ojUS1IXv0AXgNwAAAZE"]
[Wed Feb 25 04:31:43.818582 2026] [:error] [pid 60501:tid 60627] [client 20.100.197.204:1290] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw2.php"] [unique_id "aZ4Kr0x4pzY-iMYBCAEKdQAAA40"]
[Wed Feb 25 04:31:44.653800 2026] [:error] [pid 20659:tid 20711] [client 20.100.197.204:6389] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw2.php"] [unique_id "aZ4KsD_THK_HtK-Q44LaFwAAAFA"]
[Wed Feb 25 04:31:47.597237 2026] [:error] [pid 20659:tid 20719] [client 20.100.197.204:58052] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw2.php"] [unique_id "aZ4Ksz_THK_HtK-Q44LaIgAAAFg"]
[Wed Feb 25 04:31:49.055249 2026] [:error] [pid 60501:tid 60621] [client 20.100.197.204:58068] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw2.php"] [unique_id "aZ4KtUx4pzY-iMYBCAEKeQAAA4c"]
[Wed Feb 25 04:31:53.953471 2026] [:error] [pid 60387:tid 60477] [client 20.100.197.204:16228] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blackmini.php"] [unique_id "aZ4KuYHL0QH7Sr13X0KeEgAAAoU"]
[Wed Feb 25 04:31:55.831851 2026] [:error] [pid 60501:tid 60636] [client 20.100.197.204:14856] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blackmini.php"] [unique_id "aZ4Ku0x4pzY-iMYBCAEKiAAAA5Y"]
[Wed Feb 25 04:32:03.506199 2026] [:error] [pid 20659:tid 20708] [client 20.100.197.204:3355] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blackmini.php"] [unique_id "aZ4Kwz_THK_HtK-Q44LaOwAAAE0"]
[Wed Feb 25 04:32:04.441608 2026] [:error] [pid 20659:tid 20706] [client 20.100.197.204:11122] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blackmini.php"] [unique_id "aZ4KxD_THK_HtK-Q44LaQQAAAEs"]
[Wed Feb 25 04:32:07.928175 2026] [:error] [pid 60501:tid 60638] [client 20.100.197.204:2957] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aZ4Kx0x4pzY-iMYBCAEKlQAAA5g"]
[Wed Feb 25 04:32:09.466547 2026] [:error] [pid 60501:tid 60617] [client 20.100.197.204:2956] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aZ4KyUx4pzY-iMYBCAEKmgAAA4M"]
[Wed Feb 25 04:32:12.249776 2026] [:error] [pid 60500:tid 60592] [client 20.100.197.204:2963] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aZ4KzPY9avxuno9KAT_oqgAAA0k"]
[Wed Feb 25 04:32:14.195873 2026] [:error] [pid 20659:tid 20702] [client 20.100.197.204:12945] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aZ4Kzj_THK_HtK-Q44LaZAAAAEc"]
[Wed Feb 25 04:32:20.364170 2026] [:error] [pid 60500:tid 60594] [client 20.100.197.204:8350] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F19.php"] [unique_id "aZ4K1PY9avxuno9KAT_otQAAA0o"]
[Wed Feb 25 04:32:24.375582 2026] [:error] [pid 60498:tid 60523] [client 20.100.197.204:12187] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F19.php"] [unique_id "aZ4K2CFCVhQ3ffus0uJe6AAAAtI"]
[Wed Feb 25 04:32:27.078130 2026] [:error] [pid 60501:tid 60620] [client 20.100.197.204:12551] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F19.php"] [unique_id "aZ4K20x4pzY-iMYBCAEKwwAAA4Y"]
[Wed Feb 25 04:32:29.353704 2026] [:error] [pid 60500:tid 60610] [client 20.100.197.204:12549] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F19.php"] [unique_id "aZ4K3fY9avxuno9KAT_oywAAA1c"]
[Wed Feb 25 04:32:31.589602 2026] [:error] [pid 60387:tid 60481] [client 20.100.197.204:2064] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F1.php"] [unique_id "aZ4K34HL0QH7Sr13X0KeHgAAAok"]
[Wed Feb 25 04:32:33.003407 2026] [:error] [pid 60500:tid 60609] [client 20.100.197.204:12182] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F1.php"] [unique_id "aZ4K4fY9avxuno9KAT_o2wAAA1Y"]
[Wed Feb 25 04:32:34.117208 2026] [:error] [pid 20659:tid 20696] [client 20.100.197.204:5261] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F1.php"] [unique_id "aZ4K4j_THK_HtK-Q44LafwAAAEE"]
[Wed Feb 25 04:32:36.899353 2026] [:error] [pid 60501:tid 60614] [client 20.100.197.204:12210] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F1.php"] [unique_id "aZ4K5Ex4pzY-iMYBCAEK0AAAA4A"]
[Wed Feb 25 04:33:11.650601 2026] [:error] [pid 20659:tid 20701] [client 20.100.197.204:12213] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah/function.php"] [unique_id "aZ4LBz_THK_HtK-Q44La2AAAAEY"]
[Wed Feb 25 04:33:17.323097 2026] [:error] [pid 20659:tid 20714] [client 20.100.197.204:16476] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah/function.php"] [unique_id "aZ4LDT_THK_HtK-Q44La5QAAAFM"]
[Wed Feb 25 04:33:18.520330 2026] [:error] [pid 60500:tid 60587] [client 20.100.197.204:5514] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah/function.php"] [unique_id "aZ4LDvY9avxuno9KAT_pAwAAA0U"]
[Wed Feb 25 04:33:19.612460 2026] [:error] [pid 60501:tid 60618] [client 20.100.197.204:8917] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah/function.php"] [unique_id "aZ4LD0x4pzY-iMYBCAEK7QAAA4Q"]
[Wed Feb 25 04:33:21.633272 2026] [:error] [pid 60325:tid 60365] [client 20.100.197.204:16500] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZ4LET_ZVAUc2QWjBCnQpAAAAYo"]
[Wed Feb 25 04:33:22.421020 2026] [:error] [pid 60501:tid 60619] [client 20.100.197.204:16857] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZ4LEkx4pzY-iMYBCAEK7gAAA4U"]
[Wed Feb 25 04:33:23.645626 2026] [:error] [pid 20659:tid 20699] [client 20.100.197.204:6575] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZ4LEz_THK_HtK-Q44La9QAAAEQ"]
[Wed Feb 25 04:33:24.438170 2026] [:error] [pid 20659:tid 20711] [client 20.100.197.204:4794] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZ4LFD_THK_HtK-Q44La_gAAAFA"]
[Wed Feb 25 04:33:25.348819 2026] [:error] [pid 20658:tid 20678] [client 20.100.197.204:17831] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aZ4LFeu8cohhPfsAIFmeUgAAAAs"]
[Wed Feb 25 04:33:28.082900 2026] [:error] [pid 20763:tid 20787] [client 20.100.197.204:59441] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aZ4LGE0w_zc13OX-xiblawAAANY"]
[Wed Feb 25 04:33:29.854534 2026] [:error] [pid 20659:tid 20700] [client 20.100.197.204:4742] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aZ4LGT_THK_HtK-Q44LbEAAAAEU"]
[Wed Feb 25 04:33:30.857722 2026] [:error] [pid 60501:tid 60638] [client 20.100.197.204:18686] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aZ4LGkx4pzY-iMYBCAEK-AAAA5g"]
[Wed Feb 25 04:33:31.950557 2026] [:error] [pid 60386:tid 60460] [client 20.100.197.204:17666] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZ4LG2ynlRR535nGyxLxaAAAAk8"]
[Wed Feb 25 04:33:37.150062 2026] [:error] [pid 20659:tid 20707] [client 20.100.197.204:17705] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZ4LIT_THK_HtK-Q44LbKAAAAEw"]
[Wed Feb 25 04:33:39.436110 2026] [:error] [pid 20658:tid 20682] [client 20.100.197.204:2445] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZ4LI-u8cohhPfsAIFmeWgAAAA8"]
[Wed Feb 25 04:33:40.155375 2026] [:error] [pid 20659:tid 20698] [client 20.100.197.204:1969] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aZ4LJD_THK_HtK-Q44LbNwAAAEM"]
[Wed Feb 25 04:33:42.228663 2026] [:error] [pid 20763:tid 20765] [client 20.100.197.204:10788] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZ4LJk0w_zc13OX-xiblbgAAAMA"]
[Wed Feb 25 04:33:43.557402 2026] [:error] [pid 60387:tid 60494] [client 20.100.197.204:1701] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZ4LJ4HL0QH7Sr13X0KeRwAAApY"]
[Wed Feb 25 04:33:44.770082 2026] [:error] [pid 60501:tid 60628] [client 20.100.197.204:2943] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZ4LKEx4pzY-iMYBCAEK_wAAA44"]
[Wed Feb 25 04:33:46.360782 2026] [:error] [pid 60498:tid 60506] [client 20.100.197.204:5139] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aZ4LKiFCVhQ3ffus0uJfKAAAAsE"]
[Wed Feb 25 04:33:47.436559 2026] [:error] [pid 60500:tid 60609] [client 20.100.197.204:13147] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aZ4LK_Y9avxuno9KAT_pEQAAA1Y"]
[Wed Feb 25 04:33:48.505030 2026] [:error] [pid 20658:tid 20680] [client 20.100.197.204:16028] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aZ4LLOu8cohhPfsAIFmeXwAAAA0"]
[Wed Feb 25 04:33:49.784976 2026] [:error] [pid 60501:tid 60636] [client 20.100.197.204:13373] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aZ4LLUx4pzY-iMYBCAELBgAAA5Y"]
[Wed Feb 25 04:33:51.241690 2026] [:error] [pid 20659:tid 20708] [client 20.100.197.204:17702] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aZ4LLz_THK_HtK-Q44LbQQAAAE0"]
[Wed Feb 25 04:33:52.921273 2026] [:error] [pid 20659:tid 20706] [client 20.100.197.204:26846] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aZ4LMD_THK_HtK-Q44LbRQAAAEs"]
[Wed Feb 25 04:33:54.711598 2026] [:error] [pid 60501:tid 60619] [client 20.100.197.204:4274] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aZ4LMkx4pzY-iMYBCAELCAAAA4U"]
[Wed Feb 25 04:33:55.633060 2026] [:error] [pid 60498:tid 60512] [client 20.100.197.204:1703] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aZ4LMyFCVhQ3ffus0uJfKwAAAsc"]
[Wed Feb 25 04:33:56.694784 2026] [:error] [pid 60498:tid 60528] [client 20.100.197.204:6744] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aZ4LNCFCVhQ3ffus0uJfLAAAAtc"]
[Wed Feb 25 04:33:57.850744 2026] [:error] [pid 60498:tid 60515] [client 20.100.197.204:1272] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/beez/index.php"] [unique_id "aZ4LNSFCVhQ3ffus0uJfLwAAAso"]
[Wed Feb 25 04:34:01.125424 2026] [:error] [pid 20658:tid 20676] [client 20.100.197.204:1225] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/beez/index.php"] [unique_id "aZ4LOeu8cohhPfsAIFmebgAAAAk"]
[Wed Feb 25 04:34:02.086235 2026] [:error] [pid 60387:tid 60480] [client 20.100.197.204:6752] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/beez/index.php"] [unique_id "aZ4LOoHL0QH7Sr13X0KeSwAAAog"]
[Wed Feb 25 04:34:03.360321 2026] [:error] [pid 60500:tid 60606] [client 20.100.197.204:2489] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/beez/index.php"] [unique_id "aZ4LO_Y9avxuno9KAT_pFgAAA1M"]
[Wed Feb 25 04:34:04.652762 2026] [:error] [pid 60500:tid 60607] [client 20.100.197.204:4890] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aZ4LPPY9avxuno9KAT_pGgAAA1Q"]
[Wed Feb 25 04:34:07.098660 2026] [:error] [pid 60500:tid 60601] [client 20.100.197.204:10027] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aZ4LP_Y9avxuno9KAT_pIAAAA04"]
[Wed Feb 25 04:34:09.915996 2026] [:error] [pid 60386:tid 60464] [client 20.100.197.204:2591] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aZ4LQWynlRR535nGyxLxeQAAAlM"]
[Wed Feb 25 04:34:22.077602 2026] [autoindex:error] [pid 20659:tid 20701] [client 20.100.197.204:10025] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 04:34:32.809123 2026] [autoindex:error] [pid 20659:tid 20712] [client 20.100.197.204:10025] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 04:34:33.074815 2026] [:error] [pid 20659:tid 20706] [client 20.100.197.204:10025] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aZ4LWT_THK_HtK-Q44LbnwAAAEs"]
[Wed Feb 25 04:34:41.195793 2026] [autoindex:error] [pid 60500:tid 60590] [client 20.100.197.204:2575] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 04:34:41.550610 2026] [autoindex:error] [pid 60500:tid 60611] [client 20.100.197.204:2575] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 04:34:44.953696 2026] [:error] [pid 60500:tid 60588] [client 20.100.197.204:2575] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aZ4LZPY9avxuno9KAT_pRAAAA0Y"]
[Wed Feb 25 04:34:48.175969 2026] [:error] [pid 60501:tid 60618] [client 20.100.197.204:17262] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aZ4LaEx4pzY-iMYBCAELMgAAA4Q"]
[Wed Feb 25 04:34:50.919509 2026] [:error] [pid 20659:tid 20704] [client 20.100.197.204:13232] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aZ4Laj_THK_HtK-Q44LbtAAAAEk"]
[Wed Feb 25 04:34:52.808605 2026] [:error] [pid 20659:tid 20711] [client 20.100.197.204:10286] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aZ4LbD_THK_HtK-Q44LbvwAAAFA"]
[Wed Feb 25 04:34:54.831651 2026] [:error] [pid 20659:tid 20696] [client 20.100.197.204:5745] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZ4Lbj_THK_HtK-Q44LbxwAAAEE"]
[Wed Feb 25 04:34:55.901369 2026] [:error] [pid 60387:tid 60486] [client 20.100.197.204:17132] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZ4Lb4HL0QH7Sr13X0KeWwAAAo4"]
[Wed Feb 25 04:34:57.098780 2026] [:error] [pid 20658:tid 20685] [client 20.100.197.204:4542] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZ4Lceu8cohhPfsAIFmejAAAABI"]
[Wed Feb 25 04:34:58.913077 2026] [:error] [pid 20659:tid 20718] [client 20.100.197.204:5076] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZ4Lcj_THK_HtK-Q44Lb0AAAAFc"]
[Wed Feb 25 04:35:01.712128 2026] [:error] [pid 20659:tid 20709] [client 20.100.197.204:5818] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aZ4LdT_THK_HtK-Q44Lb2gAAAE4"]
[Wed Feb 25 04:35:03.272166 2026] [:error] [pid 20659:tid 20710] [client 20.100.197.204:2521] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aZ4Ldz_THK_HtK-Q44Lb3gAAAE8"]
[Wed Feb 25 04:35:05.890595 2026] [:error] [pid 20659:tid 20709] [client 20.100.197.204:4940] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aZ4LeT_THK_HtK-Q44Lb6AAAAE4"]
[Wed Feb 25 04:35:07.325679 2026] [:error] [pid 20763:tid 20779] [client 20.100.197.204:2584] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aZ4Le00w_zc13OX-xiblfwAAAM4"]
[Wed Feb 25 04:35:08.741025 2026] [:error] [pid 20659:tid 20714] [client 20.100.197.204:3717] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zsec.php"] [unique_id "aZ4LfD_THK_HtK-Q44Lb8QAAAFM"]
[Wed Feb 25 04:35:11.579044 2026] [:error] [pid 20763:tid 20783] [client 20.100.197.204:12809] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zsec.php"] [unique_id "aZ4Lf00w_zc13OX-xiblggAAANI"]
[Wed Feb 25 04:35:37.593951 2026] [:error] [pid 60501:tid 60624] [client 20.100.197.204:4375] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZ4LmUx4pzY-iMYBCAELUwAAA4o"]
[Wed Feb 25 04:35:38.402157 2026] [:error] [pid 60501:tid 60614] [client 20.100.197.204:2615] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZ4Lmkx4pzY-iMYBCAELVQAAA4A"]
[Wed Feb 25 04:35:40.313455 2026] [:error] [pid 60500:tid 60580] [client 20.100.197.204:8633] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZ4LnPY9avxuno9KAT_pmAAAA0A"]
[Wed Feb 25 04:35:57.759710 2026] [autoindex:error] [pid 60500:tid 60588] [client 20.100.197.204:3556] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 04:35:58.078269 2026] [autoindex:error] [pid 60500:tid 60594] [client 20.100.197.204:3556] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 04:35:58.463905 2026] [:error] [pid 60500:tid 60607] [client 20.100.197.204:3556] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZ4LrvY9avxuno9KAT_psQAAA1Q"]
[Wed Feb 25 04:36:08.446833 2026] [autoindex:error] [pid 60500:tid 60594] [client 20.100.197.204:13079] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 04:36:11.092407 2026] [autoindex:error] [pid 60500:tid 60590] [client 20.100.197.204:13079] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 25 04:36:18.406679 2026] [:error] [pid 60500:tid 60599] [client 20.100.197.204:13079] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/8.php"] [unique_id "aZ4LwvY9avxuno9KAT_pzQAAA00"]
[Wed Feb 25 04:36:19.313187 2026] [:error] [pid 20763:tid 20773] [client 20.100.197.204:12247] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/8.php"] [unique_id "aZ4Lw00w_zc13OX-xiblkwAAAMg"]
[Wed Feb 25 04:36:21.758505 2026] [:error] [pid 60325:tid 60355] [client 20.100.197.204:13037] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/8.php"] [unique_id "aZ4LxT_ZVAUc2QWjBCnQuQAAAYA"]
[Wed Feb 25 04:36:23.055444 2026] [:error] [pid 60501:tid 60629] [client 20.100.197.204:11211] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/8.php"] [unique_id "aZ4Lx0x4pzY-iMYBCAELcwAAA48"]
[Wed Feb 25 04:36:24.117482 2026] [:error] [pid 20658:tid 20669] [client 20.100.197.204:2214] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/sh.php"] [unique_id "aZ4LyOu8cohhPfsAIFmexwAAAAI"]
[Wed Feb 25 04:36:25.165086 2026] [:error] [pid 20763:tid 20765] [client 20.100.197.204:13098] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/sh.php"] [unique_id "aZ4LyU0w_zc13OX-xibllQAAAMA"]
[Wed Feb 25 04:36:25.848915 2026] [:error] [pid 20659:tid 20699] [client 20.100.197.204:13093] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/sh.php"] [unique_id "aZ4LyT_THK_HtK-Q44LcVQAAAEQ"]
[Wed Feb 25 04:36:26.912606 2026] [:error] [pid 60501:tid 60625] [client 20.100.197.204:13041] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/sh.php"] [unique_id "aZ4Lykx4pzY-iMYBCAELeQAAA4s"]
[Wed Feb 25 04:36:27.862769 2026] [:error] [pid 20659:tid 20719] [client 20.100.197.204:14622] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/start.php"] [unique_id "aZ4Lyz_THK_HtK-Q44LcWAAAAFg"]
[Wed Feb 25 04:36:29.279670 2026] [:error] [pid 20659:tid 20704] [client 20.100.197.204:16421] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/start.php"] [unique_id "aZ4LzT_THK_HtK-Q44LcXQAAAEk"]
[Wed Feb 25 04:36:29.945404 2026] [:error] [pid 20658:tid 20686] [client 20.100.197.204:13062] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/start.php"] [unique_id "aZ4Lzeu8cohhPfsAIFmeyAAAABM"]
[Wed Feb 25 04:36:31.060310 2026] [:error] [pid 20658:tid 20673] [client 20.100.197.204:3939] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/start.php"] [unique_id "aZ4Lz-u8cohhPfsAIFmeyQAAAAY"]
[Wed Feb 25 04:36:32.563945 2026] [:error] [pid 60387:tid 60496] [client 20.100.197.204:8556] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/xaw.php"] [unique_id "aZ4L0IHL0QH7Sr13X0KeggAAApg"]
[Wed Feb 25 04:36:33.377582 2026] [:error] [pid 60500:tid 60598] [client 20.100.197.204:3826] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/xaw.php"] [unique_id "aZ4L0fY9avxuno9KAT_p2wAAA0w"]
[Wed Feb 25 04:36:34.455228 2026] [:error] [pid 60500:tid 60608] [client 20.100.197.204:15141] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/xaw.php"] [unique_id "aZ4L0vY9avxuno9KAT_p3wAAA1U"]
[Wed Feb 25 04:36:35.608914 2026] [:error] [pid 60386:tid 60456] [client 20.100.197.204:4190] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/xaw.php"] [unique_id "aZ4L02ynlRR535nGyxLxrAAAAks"]
[Wed Feb 25 04:36:36.505642 2026] [:error] [pid 60500:tid 60589] [client 20.100.197.204:10059] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ4L1PY9avxuno9KAT_p5gAAA0c"]
[Wed Feb 25 04:36:38.701994 2026] [:error] [pid 60500:tid 60608] [client 20.100.197.204:14595] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ4L1vY9avxuno9KAT_p7QAAA1U"]
[Wed Feb 25 04:36:42.676280 2026] [:error] [pid 60500:tid 60610] [client 20.100.197.204:10461] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ4L2vY9avxuno9KAT_p-QAAA1c"]
[Wed Feb 25 04:36:43.855457 2026] [:error] [pid 20659:tid 20718] [client 20.100.197.204:16426] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aZ4L2z_THK_HtK-Q44LcbwAAAFc"]
[Wed Feb 25 04:54:47.249999 2026] [:error] [pid 60498:tid 60525] [client 93.218.123.48:58729] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ4QFyFCVhQ3ffus0uJjPgAAAtQ"]
[Wed Feb 25 04:54:48.661881 2026] [:error] [pid 60500:tid 60611] [client 93.218.123.48:59027] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ4QGPY9avxuno9KAT_zrQAAA1g"]
[Wed Feb 25 04:54:50.012447 2026] [:error] [pid 60290:tid 60297] [client 93.218.123.48:59040] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ4QGjPwSUztcPyiofpojAAAAQU"]
[Wed Feb 25 04:54:53.137964 2026] [:error] [pid 60500:tid 60587] [client 93.218.123.48:59067] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ4QHfY9avxuno9KAT_zuAAAA0U"]
[Wed Feb 25 04:54:54.575336 2026] [:error] [pid 60500:tid 60606] [client 93.218.123.48:59078] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ4QHvY9avxuno9KAT_zvQAAA1M"]
[Wed Feb 25 04:54:57.541990 2026] [:error] [pid 20659:tid 20719] [client 93.218.123.48:59096] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZ4QIT_THK_HtK-Q44LnzQAAAFg"]
[Wed Feb 25 04:54:59.057404 2026] [:error] [pid 20659:tid 20715] [client 93.218.123.48:59107] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZ4QIz_THK_HtK-Q44Ln1AAAAFQ"]
[Wed Feb 25 04:55:03.486239 2026] [:error] [pid 60387:tid 60473] [client 93.218.123.48:59146] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZ4QJ4HL0QH7Sr13X0Kg2AAAAoE"]
[Wed Feb 25 04:55:04.873078 2026] [:error] [pid 60498:tid 60518] [client 93.218.123.48:59150] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZ4QKCFCVhQ3ffus0uJjVwAAAs0"]
[Wed Feb 25 04:55:11.727344 2026] [:error] [pid 20658:tid 20673] [client 93.218.123.48:59193] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ4QL-u8cohhPfsAIFmhqAAAAAY"]
[Wed Feb 25 04:55:16.576135 2026] [:error] [pid 20659:tid 20696] [client 93.218.123.48:59276] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ4QND_THK_HtK-Q44Ln-wAAAEE"]
[Wed Feb 25 04:55:22.223097 2026] [:error] [pid 60498:tid 60521] [client 93.218.123.48:59295] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZ4QOiFCVhQ3ffus0uJjZwAAAtA"]
[Wed Feb 25 04:55:23.675844 2026] [:error] [pid 60500:tid 60584] [client 93.218.123.48:59331] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZ4QO_Y9avxuno9KAT_z6wAAA0M"]
[Wed Feb 25 04:55:33.945288 2026] [:error] [pid 60387:tid 60491] [client 93.218.123.48:59358] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ4QRYHL0QH7Sr13X0Kg7wAAApM"]
[Wed Feb 25 04:55:36.551589 2026] [:error] [pid 20763:tid 20770] [client 93.218.123.48:59452] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ4QSE0w_zc13OX-xibndQAAAMU"]
[Wed Feb 25 04:55:40.516664 2026] [:error] [pid 20659:tid 20696] [client 93.218.123.48:59509] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ4QTD_THK_HtK-Q44LoJgAAAEE"]
[Wed Feb 25 04:55:41.884651 2026] [:error] [pid 20659:tid 20711] [client 93.218.123.48:59521] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ4QTT_THK_HtK-Q44LoLgAAAFA"]
[Wed Feb 25 04:56:46.193352 2026] [:error] [pid 20659:tid 20716] [client 93.218.123.48:59796] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ4Qjj_THK_HtK-Q44LosQAAAFU"]
[Wed Feb 25 04:56:47.659480 2026] [:error] [pid 20658:tid 20682] [client 93.218.123.48:60123] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ4Qj-u8cohhPfsAIFmh0gAAAA8"]
[Wed Feb 25 04:56:49.085187 2026] [:error] [pid 20659:tid 20700] [client 93.218.123.48:60136] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ4QkT_THK_HtK-Q44LovQAAAEU"]
[Wed Feb 25 04:56:52.270633 2026] [:error] [pid 20659:tid 20713] [client 93.218.123.48:60166] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZ4QlD_THK_HtK-Q44LozQAAAFI"]
[Wed Feb 25 04:56:53.798348 2026] [:error] [pid 60498:tid 60513] [client 93.218.123.48:60180] [client 93.218.123.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZ4QlSFCVhQ3ffus0uJjlAAAAsg"]
[Wed Feb 25 05:57:33.360584 2026] [:error] [pid 20658:tid 20673] [client 114.96.103.33:50463] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ4ezeu8cohhPfsAIFmrUgAAAAY"]
[Wed Feb 25 07:48:25.374213 2026] [:error] [pid 5556:tid 5610] [client 4.193.97.168:26132] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aZ44yaOrYeaTyh7lGRVHoQAAAdc"]
[Wed Feb 25 07:48:25.729991 2026] [:error] [pid 20659:tid 20719] [client 4.193.97.168:24181] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aZ44yT_THK_HtK-Q44IF0gAAAFg"]
[Wed Feb 25 07:48:26.128028 2026] [:error] [pid 60498:tid 60525] [client 4.193.97.168:24155] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aZ44yiFCVhQ3ffus0uKFtQAAAtQ"]
[Wed Feb 25 07:48:26.501767 2026] [:error] [pid 5556:tid 5596] [client 4.193.97.168:22270] [client 4.193.97.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aZ44yqOrYeaTyh7lGRVHogAAAck"]
[Wed Feb 25 09:39:52.093880 2026] [:error] [pid 60498:tid 60511] [client 43.130.174.37:48052] [client 43.130.174.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ5S6CFCVhQ3ffus0uKe_wAAAsY"]
[Wed Feb 25 12:29:00.520104 2026] [:error] [pid 5619:tid 5659] [client 121.229.185.160:39194] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ56jJFUzdv-0L_F4fsMgQAAAhg"]
[Wed Feb 25 13:19:29.482575 2026] [:error] [pid 5556:tid 5605] [client 49.51.38.193:52834] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ6GYaOrYeaTyh7lGRWy8QAAAdI"]
[Wed Feb 25 15:47:08.171665 2026] [:error] [pid 5619:tid 5639] [client 143.110.255.76:47670] [client 143.110.255.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aZ6o_JFUzdv-0L_F4fsmGAAAAgQ"]
[Wed Feb 25 16:42:41.607755 2026] [:error] [pid 60500:tid 60604] [client 43.153.102.138:43500] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ62AfY9avxuno9KAT87fQAAA1E"]
[Wed Feb 25 17:25:06.222243 2026] [:error] [pid 60387:tid 60494] [client 5.135.131.86:37178] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ6_8oHL0QH7Sr13X0IltQAAApY"]
[Wed Feb 25 17:25:10.172654 2026] [:error] [pid 5556:tid 5588] [client 5.135.131.86:56166] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ6_9qOrYeaTyh7lGRUPkQAAAcE"]
[Wed Feb 25 17:25:15.288203 2026] [:error] [pid 60498:tid 60515] [client 5.135.131.86:56174] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ6_-yFCVhQ3ffus0uILpAAAAso"]
[Wed Feb 25 17:25:19.115267 2026] [:error] [pid 60387:tid 60496] [client 5.135.131.86:56176] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ6__4HL0QH7Sr13X0IlxwAAApg"]
[Wed Feb 25 17:25:22.427806 2026] [:error] [pid 60387:tid 60480] [client 5.135.131.86:42544] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ7AAoHL0QH7Sr13X0IlyQAAAog"]
[Wed Feb 25 17:25:25.878297 2026] [:error] [pid 5556:tid 5588] [client 5.135.131.86:42560] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ7ABaOrYeaTyh7lGRUPtQAAAcE"]
[Wed Feb 25 17:25:31.331633 2026] [:error] [pid 60387:tid 60482] [client 5.135.131.86:41688] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ7AC4HL0QH7Sr13X0Il2wAAAoo"]
[Wed Feb 25 17:25:34.487092 2026] [:error] [pid 60387:tid 60484] [client 5.135.131.86:41702] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ7ADoHL0QH7Sr13X0Il5AAAAow"]
[Wed Feb 25 17:25:38.180342 2026] [:error] [pid 60500:tid 60583] [client 5.135.131.86:41718] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ7AEvY9avxuno9KAT8_3gAAA0I"]
[Wed Feb 25 17:25:41.431600 2026] [:error] [pid 20659:tid 20706] [client 5.135.131.86:49120] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZ7AFT_THK_HtK-Q44L3SAAAAEs"]
[Wed Feb 25 17:25:44.559664 2026] [:error] [pid 60498:tid 60518] [client 5.135.131.86:49132] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ7AGCFCVhQ3ffus0uILyQAAAs0"]
[Wed Feb 25 17:25:48.167799 2026] [:error] [pid 20659:tid 20710] [client 5.135.131.86:49138] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ7AHD_THK_HtK-Q44L3SwAAAE8"]
[Wed Feb 25 17:25:51.335299 2026] [:error] [pid 5619:tid 5654] [client 5.135.131.86:51538] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ7AH5FUzdv-0L_F4fszKAAAAhM"]
[Wed Feb 25 17:25:55.521416 2026] [:error] [pid 60387:tid 60483] [client 5.135.131.86:51552] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ7AI4HL0QH7Sr13X0ImEgAAAos"]
[Wed Feb 25 17:25:59.321762 2026] [:error] [pid 5619:tid 5639] [client 5.135.131.86:51562] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aZ7AJ5FUzdv-0L_F4fszMAAAAgQ"]
[Wed Feb 25 17:26:40.777459 2026] [:error] [pid 60387:tid 60482] [client 5.135.131.86:47882] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aZ7AUIHL0QH7Sr13X0ImcgAAAoo"]
[Wed Feb 25 17:26:44.458039 2026] [:error] [pid 20659:tid 20696] [client 5.135.131.86:59788] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aZ7AVD_THK_HtK-Q44L3fgAAAEE"]
[Wed Feb 25 17:26:47.725783 2026] [:error] [pid 5556:tid 5606] [client 5.135.131.86:59796] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aZ7AV6OrYeaTyh7lGRUQIwAAAdM"]
[Wed Feb 25 17:26:50.433358 2026] [:error] [pid 60498:tid 60520] [client 5.135.131.86:59996] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aZ7AWiFCVhQ3ffus0uIMDAAAAs8"]
[Wed Feb 25 17:26:53.796026 2026] [:error] [pid 5556:tid 5609] [client 5.135.131.86:60010] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZ7AXaOrYeaTyh7lGRUQOwAAAdY"]
[Wed Feb 25 17:26:56.862751 2026] [:error] [pid 5619:tid 5656] [client 5.135.131.86:60022] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZ7AYJFUzdv-0L_F4fszWwAAAhU"]
[Wed Feb 25 17:26:59.999178 2026] [:error] [pid 20659:tid 20716] [client 5.135.131.86:39072] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aZ7AYz_THK_HtK-Q44L3jAAAAFU"]
[Wed Feb 25 17:27:03.954801 2026] [:error] [pid 60387:tid 60476] [client 5.135.131.86:39088] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aZ7AZ4HL0QH7Sr13X0ImmAAAAoQ"]
[Wed Feb 25 17:27:06.765976 2026] [:error] [pid 5556:tid 5608] [client 5.135.131.86:39096] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aZ7AaqOrYeaTyh7lGRUQVQAAAdU"]
[Wed Feb 25 17:27:09.862432 2026] [:error] [pid 20659:tid 20717] [client 5.135.131.86:32858] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ7AbT_THK_HtK-Q44L3kgAAAFY"]
[Wed Feb 25 17:27:12.633979 2026] [:error] [pid 60500:tid 60605] [client 5.135.131.86:32868] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ7AcPY9avxuno9KAT9ABwAAA1I"]
[Wed Feb 25 17:27:15.561894 2026] [:error] [pid 60500:tid 60604] [client 5.135.131.86:32872] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aZ7Ac_Y9avxuno9KAT9ADwAAA1E"]
[Wed Feb 25 17:27:18.271107 2026] [:error] [pid 60387:tid 60475] [client 5.135.131.86:32888] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ7AdoHL0QH7Sr13X0ImtAAAAoM"]
[Wed Feb 25 17:27:21.424050 2026] [:error] [pid 60387:tid 60488] [client 5.135.131.86:53670] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZ7AeYHL0QH7Sr13X0ImugAAApA"]
[Wed Feb 25 17:27:24.241380 2026] [:error] [pid 60387:tid 60479] [client 5.135.131.86:53672] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aZ7AfIHL0QH7Sr13X0ImvgAAAoc"]
[Wed Feb 25 17:27:27.090217 2026] [:error] [pid 60387:tid 60495] [client 5.135.131.86:53680] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZ7Af4HL0QH7Sr13X0ImxAAAApc"]
[Wed Feb 25 17:27:30.185640 2026] [:error] [pid 60387:tid 60486] [client 5.135.131.86:45476] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZ7AgoHL0QH7Sr13X0Im0wAAAo4"]
[Wed Feb 25 17:27:33.476475 2026] [:error] [pid 60387:tid 60493] [client 5.135.131.86:45490] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZ7AhYHL0QH7Sr13X0Im4AAAApU"]
[Wed Feb 25 18:16:48.514776 2026] [autoindex:error] [pid 60387:tid 60490] [client 167.172.93.181:56774] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Feb 25 20:10:32.529739 2026] [:error] [pid 5556:tid 5608] [client 170.106.107.87:55474] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ7muKOrYeaTyh7lGRVWhQAAAdU"]
[Wed Feb 25 22:02:59.704199 2026] [:error] [pid 5556:tid 5599] [client 84.239.41.207:57030] [client 84.239.41.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZ8BE6OrYeaTyh7lGRWLWQAAAcw"]
[Wed Feb 25 22:03:01.370046 2026] [:error] [pid 60387:tid 60491] [client 84.239.41.207:28690] [client 84.239.41.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ8BFYHL0QH7Sr13X0KZvwAAApM"]
[Wed Feb 25 22:03:02.045834 2026] [:error] [pid 5556:tid 5596] [client 84.239.41.207:15582] [client 84.239.41.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aZ8BFqOrYeaTyh7lGRWLZQAAAck"]
[Wed Feb 25 22:03:02.495976 2026] [:error] [pid 5556:tid 5601] [client 84.239.41.207:26411] [client 84.239.41.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ8BFqOrYeaTyh7lGRWLagAAAc4"]
[Wed Feb 25 22:03:05.928850 2026] [:error] [pid 5556:tid 5605] [client 84.239.41.207:28612] [client 84.239.41.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ8BGaOrYeaTyh7lGRWLfQAAAdI"]
[Wed Feb 25 22:03:06.321473 2026] [:error] [pid 5556:tid 5610] [client 84.239.41.207:26411] [client 84.239.41.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ8BGqOrYeaTyh7lGRWLgAAAAdc"]
[Wed Feb 25 22:03:07.794273 2026] [:error] [pid 5556:tid 5610] [client 84.239.41.207:6389] [client 84.239.41.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ8BG6OrYeaTyh7lGRWLiQAAAdc"]
[Wed Feb 25 22:03:11.912503 2026] [:error] [pid 5619:tid 5656] [client 84.239.41.207:8921] [client 84.239.41.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ8BH5FUzdv-0L_F4ftaCgAAAhU"]
[Wed Feb 25 22:03:12.204663 2026] [:error] [pid 5556:tid 5599] [client 84.239.41.207:6389] [client 84.239.41.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hotbooksbookeeping2.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ8BIKOrYeaTyh7lGRWLmQAAAcw"]
[Wed Feb 25 23:14:56.191458 2026] [:error] [pid 5556:tid 5607] [client 54.36.179.84:54482] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aZ8R8KOrYeaTyh7lGRWu_QAAAdQ"]
[Wed Feb 25 23:14:58.636205 2026] [:error] [pid 20763:tid 20783] [client 54.36.179.84:45222] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aZ8R8k0w_zc13OX-xiYtuQAAANI"]
[Wed Feb 25 23:15:00.990580 2026] [:error] [pid 20658:tid 20679] [client 54.36.179.84:45228] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aZ8R9Ou8cohhPfsAIFkJQQAAAAw"]
[Wed Feb 25 23:15:03.341921 2026] [:error] [pid 5556:tid 5592] [client 54.36.179.84:45238] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aZ8R96OrYeaTyh7lGRWvBgAAAcU"]
[Wed Feb 25 23:15:05.802263 2026] [:error] [pid 20659:tid 20701] [client 54.36.179.84:45248] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aZ8R-T_THK_HtK-Q44JUkAAAAEY"]
[Wed Feb 25 23:15:08.128713 2026] [:error] [pid 60387:tid 60484] [client 54.36.179.84:60128] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aZ8R_IHL0QH7Sr13X0Kx-AAAAow"]
[Wed Feb 25 23:15:10.623021 2026] [:error] [pid 5556:tid 5599] [client 54.36.179.84:60132] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aZ8R_qOrYeaTyh7lGRWvKQAAAcw"]
[Wed Feb 25 23:15:13.106264 2026] [:error] [pid 60498:tid 60513] [client 54.36.179.84:60146] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aZ8SASFCVhQ3ffus0uJMHAAAAsg"]
[Wed Feb 25 23:15:15.430971 2026] [:error] [pid 60387:tid 60476] [client 54.36.179.84:60152] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aZ8SA4HL0QH7Sr13X0KyAQAAAoQ"]
[Wed Feb 25 23:15:17.916770 2026] [:error] [pid 5556:tid 5591] [client 54.36.179.84:35964] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aZ8SBaOrYeaTyh7lGRWvQgAAAcQ"]
[Wed Feb 25 23:15:20.251687 2026] [:error] [pid 20658:tid 20667] [client 54.36.179.84:35966] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aZ8SCOu8cohhPfsAIFkJRAAAAAA"]
[Wed Feb 25 23:15:22.727347 2026] [:error] [pid 5556:tid 5608] [client 54.36.179.84:35972] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aZ8SCqOrYeaTyh7lGRWvSwAAAdU"]
[Wed Feb 25 23:15:25.041337 2026] [:error] [pid 60498:tid 60511] [client 54.36.179.84:35986] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aZ8SDSFCVhQ3ffus0uJMJgAAAsY"]
[Wed Feb 25 23:15:27.536631 2026] [:error] [pid 5556:tid 5610] [client 54.36.179.84:60430] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aZ8SD6OrYeaTyh7lGRWvVgAAAdc"]
[Wed Feb 25 23:15:29.847839 2026] [:error] [pid 5556:tid 5598] [client 54.36.179.84:60444] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aZ8SEaOrYeaTyh7lGRWvXQAAAcs"]
[Wed Feb 25 23:15:32.337158 2026] [:error] [pid 60387:tid 60481] [client 54.36.179.84:60452] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aZ8SFIHL0QH7Sr13X0KyDwAAAok"]
[Wed Feb 25 23:15:34.678516 2026] [:error] [pid 60290:tid 60312] [client 54.36.179.84:60460] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aZ8SFjPwSUztcPyiofq4VwAAARQ"]
[Wed Feb 25 23:15:37.148145 2026] [:error] [pid 20763:tid 20780] [client 54.36.179.84:50052] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aZ8SGU0w_zc13OX-xiYtwQAAAM8"]
[Wed Feb 25 23:15:39.643083 2026] [:error] [pid 60290:tid 60294] [client 54.36.179.84:50062] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aZ8SGzPwSUztcPyiofq4WwAAAQI"]
[Wed Feb 25 23:15:42.175151 2026] [:error] [pid 60290:tid 60315] [client 54.36.179.84:50076] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aZ8SHjPwSUztcPyiofq4XAAAARc"]
[Wed Feb 25 23:15:44.644814 2026] [:error] [pid 5556:tid 5598] [client 54.36.179.84:50090] [client 54.36.179.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aZ8SIKOrYeaTyh7lGRWvZgAAAcs"]
[Wed Feb 25 23:23:54.477504 2026] [:error] [pid 60498:tid 60506] [client 43.159.152.184:45638] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ8UCiFCVhQ3ffus0uJNrgAAAsE"]
[Thu Feb 26 01:50:28.615537 2026] [:error] [pid 49554:tid 49615] [client 80.71.141.185:11781] [client 80.71.141.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 80.71.141.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aZ82ZNtlDT3cCGsQMTc5UwAAAAY"]
[Thu Feb 26 02:06:34.986310 2026] [:error] [pid 49770:tid 49849] [client 192.144.148.122:49416] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ86Ki7xhdZV4TFeNytpJgAAAJc"]
[Thu Feb 26 03:21:41.031116 2026] [:error] [pid 42713:tid 42738] [client 43.156.202.34:41926] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ9LxWDBTJe-yzGeFDgC_wAAABQ"]
[Thu Feb 26 03:32:25.406079 2026] [:error] [pid 9589:tid 9663] [client 85.203.23.82:62605] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-confiq.php"] [unique_id "aZ9OSaBuBxYiI1p-njSEEAAAAIo"]
[Thu Feb 26 03:32:25.592367 2026] [:error] [pid 9589:tid 9665] [client 85.203.23.98:40171] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/nrhogjyecktixbal0fnt5Cakc.php"] [unique_id "aZ9OSaBuBxYiI1p-njSEEQAAAIw"]
[Thu Feb 26 03:32:25.776900 2026] [:error] [pid 9702:tid 9725] [client 85.203.23.81:50893] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aZ9OSZvL1wp7EOGdesz3HwAAANM"]
[Thu Feb 26 03:32:35.962168 2026] [:error] [pid 9588:tid 9631] [client 85.203.23.60:36829] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/form.php"] [unique_id "aZ9OU-SfsVC0YxizsTuXKwAAAEU"]
[Thu Feb 26 03:32:36.144730 2026] [:error] [pid 9589:tid 9669] [client 85.203.23.54:51623] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aZ9OVKBuBxYiI1p-njSEJwAAAJA"]
[Thu Feb 26 03:32:36.330751 2026] [:error] [pid 9589:tid 9671] [client 85.203.23.101:64137] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aZ9OVKBuBxYiI1p-njSEKAAAAJI"]
[Thu Feb 26 03:32:36.514782 2026] [:error] [pid 9589:tid 9670] [client 85.203.23.104:59725] [client 85.203.23.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aZ9OVKBuBxYiI1p-njSEKQAAAJE"]
[Thu Feb 26 03:32:41.708382 2026] [:error] [pid 9702:tid 9718] [client 85.203.23.60:23405] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aZ9OWZvL1wp7EOGdesz3aQAAAMw"]
[Thu Feb 26 03:32:41.895755 2026] [:error] [pid 9702:tid 9729] [client 85.203.23.70:25927] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "aZ9OWZvL1wp7EOGdesz3bAAAANc"]
[Thu Feb 26 03:32:42.079583 2026] [:error] [pid 9702:tid 9720] [client 85.203.23.107:27757] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/shell.php"] [unique_id "aZ9OWpvL1wp7EOGdesz3bwAAAM4"]
[Thu Feb 26 03:32:42.266207 2026] [:error] [pid 9702:tid 9721] [client 85.203.23.74:44993] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aZ9OWpvL1wp7EOGdesz3cQAAAM8"]
[Thu Feb 26 03:32:42.454384 2026] [:error] [pid 9702:tid 9708] [client 85.203.23.67:60725] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aZ9OWpvL1wp7EOGdesz3dAAAAMI"]
[Thu Feb 26 03:32:42.638552 2026] [:error] [pid 9702:tid 9723] [client 85.203.23.65:44223] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aZ9OWpvL1wp7EOGdesz3eAAAANE"]
[Thu Feb 26 03:32:42.822683 2026] [:error] [pid 9702:tid 9706] [client 85.203.23.106:46461] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aZ9OWpvL1wp7EOGdesz3egAAAMA"]
[Thu Feb 26 03:32:43.012106 2026] [:error] [pid 9702:tid 9720] [client 85.203.23.99:59457] [client 85.203.23.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aZ9OW5vL1wp7EOGdesz3ewAAAM4"]
[Thu Feb 26 03:32:43.200175 2026] [:error] [pid 9702:tid 9722] [client 85.203.23.102:54499] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aZ9OW5vL1wp7EOGdesz3fgAAANA"]
[Thu Feb 26 03:32:43.384404 2026] [:error] [pid 9589:tid 9674] [client 85.203.23.105:46171] [client 85.203.23.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/"] [unique_id "aZ9OW6BuBxYiI1p-njSEMwAAAJU"]
[Thu Feb 26 03:32:43.573433 2026] [:error] [pid 9702:tid 9708] [client 85.203.23.69:52789] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "aZ9OW5vL1wp7EOGdesz3fwAAAMI"]
[Thu Feb 26 03:32:43.758464 2026] [:error] [pid 9589:tid 9671] [client 85.203.23.78:26785] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZ9OW6BuBxYiI1p-njSENQAAAJI"]
[Thu Feb 26 03:32:43.940470 2026] [:error] [pid 9702:tid 9726] [client 85.203.23.67:48545] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aZ9OW5vL1wp7EOGdesz3gQAAANQ"]
[Thu Feb 26 03:32:44.123400 2026] [:error] [pid 9702:tid 9723] [client 85.203.23.78:59903] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/cache/"] [unique_id "aZ9OXJvL1wp7EOGdesz3gwAAANE"]
[Thu Feb 26 03:32:44.312908 2026] [:error] [pid 9588:tid 9632] [client 85.203.23.93:25151] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aZ9OXOSfsVC0YxizsTuXNAAAAEY"]
[Thu Feb 26 03:32:44.496999 2026] [:error] [pid 9587:tid 9611] [client 85.203.23.107:31343] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/"] [unique_id "aZ9OXPiLfyuakov_VlANZAAAAA4"]
[Thu Feb 26 03:32:44.698206 2026] [:error] [pid 9589:tid 9670] [client 85.203.23.107:50481] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aZ9OXKBuBxYiI1p-njSENgAAAJE"]
[Thu Feb 26 03:32:44.885679 2026] [:error] [pid 9702:tid 9719] [client 85.203.23.89:62821] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aZ9OXJvL1wp7EOGdesz3hgAAAM0"]
[Thu Feb 26 03:32:45.071845 2026] [:error] [pid 9702:tid 9714] [client 85.203.23.85:57301] [client 85.203.23.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aZ9OXZvL1wp7EOGdesz3iQAAAMg"]
[Thu Feb 26 03:32:45.258861 2026] [:error] [pid 9702:tid 9722] [client 85.203.23.99:22365] [client 85.203.23.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aZ9OXZvL1wp7EOGdesz3iwAAANA"]
[Thu Feb 26 03:32:45.442558 2026] [:error] [pid 9702:tid 9708] [client 85.203.23.63:46101] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "aZ9OXZvL1wp7EOGdesz3jQAAAMI"]
[Thu Feb 26 03:32:45.625541 2026] [:error] [pid 9702:tid 9724] [client 85.203.23.98:30203] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aZ9OXZvL1wp7EOGdesz3kAAAANI"]
[Thu Feb 26 03:32:45.815746 2026] [:error] [pid 9702:tid 9710] [client 85.203.23.106:62575] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/5PJcpMFsD8B.php"] [unique_id "aZ9OXZvL1wp7EOGdesz3kQAAAMQ"]
[Thu Feb 26 03:32:46.004111 2026] [:error] [pid 9702:tid 9719] [client 85.203.23.89:29745] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aZ9OXpvL1wp7EOGdesz3kwAAAM0"]
[Thu Feb 26 03:32:46.218716 2026] [:error] [pid 9702:tid 9711] [client 85.203.23.56:53407] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aZ9OXpvL1wp7EOGdesz3lAAAAMU"]
[Thu Feb 26 03:32:46.441676 2026] [:error] [pid 9702:tid 9706] [client 85.203.23.107:38371] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css.php"] [unique_id "aZ9OXpvL1wp7EOGdesz3lQAAAMA"]
[Thu Feb 26 03:32:46.623306 2026] [:error] [pid 9589:tid 9673] [client 85.203.23.70:55539] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aZ9OXqBuBxYiI1p-njSEOQAAAJQ"]
[Thu Feb 26 03:32:51.811686 2026] [:error] [pid 9702:tid 9715] [client 85.203.23.68:55085] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/themes.php"] [unique_id "aZ9OY5vL1wp7EOGdesz3qAAAAMk"]
[Thu Feb 26 03:32:51.999156 2026] [:error] [pid 9589:tid 9653] [client 85.203.23.69:56341] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/updates.php"] [unique_id "aZ9OY6BuBxYiI1p-njSEPwAAAIA"]
[Thu Feb 26 03:32:52.185608 2026] [:error] [pid 9589:tid 9677] [client 85.203.23.84:32357] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aZ9OZKBuBxYiI1p-njSEQAAAAJg"]
[Thu Feb 26 03:32:52.373499 2026] [:error] [pid 9702:tid 9714] [client 85.203.23.89:21761] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aZ9OZJvL1wp7EOGdesz3rQAAAMg"]
[Thu Feb 26 03:32:52.559371 2026] [:error] [pid 9702:tid 9725] [client 85.203.23.74:55441] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/"] [unique_id "aZ9OZJvL1wp7EOGdesz3rgAAANM"]
[Thu Feb 26 03:32:52.749951 2026] [:error] [pid 9589:tid 9676] [client 85.203.23.77:37749] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "aZ9OZKBuBxYiI1p-njSEQQAAAJc"]
[Thu Feb 26 03:32:52.937141 2026] [:error] [pid 9702:tid 9716] [client 85.203.23.90:31059] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "aZ9OZJvL1wp7EOGdesz3sAAAAMo"]
[Thu Feb 26 03:32:53.123280 2026] [:error] [pid 9702:tid 9715] [client 85.203.23.86:53755] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/class.api.php"] [unique_id "aZ9OZZvL1wp7EOGdesz3swAAAMk"]
[Thu Feb 26 03:32:53.312112 2026] [:error] [pid 9588:tid 9633] [client 85.203.23.84:42365] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aZ9OZeSfsVC0YxizsTuXOAAAAEc"]
[Thu Feb 26 03:32:53.505148 2026] [:error] [pid 9702:tid 9718] [client 85.203.23.106:60367] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aZ9OZZvL1wp7EOGdesz3tQAAAMw"]
[Thu Feb 26 03:32:53.689487 2026] [:error] [pid 9702:tid 9725] [client 85.203.23.71:39329] [client 85.203.23.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/"] [unique_id "aZ9OZZvL1wp7EOGdesz3uQAAANM"]
[Thu Feb 26 03:32:53.870912 2026] [:error] [pid 9587:tid 9605] [client 85.203.23.60:46111] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aZ9OZfiLfyuakov_VlANdgAAAAg"]
[Thu Feb 26 03:32:54.083089 2026] [:error] [pid 9702:tid 9724] [client 85.203.23.90:24717] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config-sample.php"] [unique_id "aZ9OZpvL1wp7EOGdesz3vgAAANI"]
[Thu Feb 26 03:32:54.269532 2026] [:error] [pid 9587:tid 9611] [client 85.203.23.91:61403] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aZ9OZviLfyuakov_VlANeAAAAA4"]
[Thu Feb 26 03:32:54.460318 2026] [:error] [pid 9588:tid 9638] [client 85.203.23.81:37169] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aZ9OZuSfsVC0YxizsTuXPQAAAEw"]
[Thu Feb 26 03:32:54.642310 2026] [:error] [pid 9702:tid 9714] [client 85.203.23.93:31563] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aZ9OZpvL1wp7EOGdesz3wgAAAMg"]
[Thu Feb 26 03:33:04.827485 2026] [:error] [pid 9589:tid 9659] [client 85.203.23.56:45971] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/posts"] [unique_id "aZ9OcKBuBxYiI1p-njSEeAAAAIY"]
[Thu Feb 26 03:33:10.009361 2026] [:error] [pid 9588:tid 9626] [client 85.203.23.68:35501] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aZ9OduSfsVC0YxizsTuXUgAAAEA"]
[Thu Feb 26 03:33:10.197463 2026] [:error] [pid 9587:tid 9621] [client 85.203.23.58:49929] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/"] [unique_id "aZ9OdviLfyuakov_VlANiAAAABg"]
[Thu Feb 26 03:33:10.385091 2026] [:error] [pid 9588:tid 9646] [client 85.203.23.67:64853] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "aZ9OduSfsVC0YxizsTuXUwAAAFQ"]
[Thu Feb 26 03:33:15.580148 2026] [:error] [pid 9702:tid 9707] [client 85.203.23.87:54957] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aZ9Oe5vL1wp7EOGdesz4FQAAAME"]
[Thu Feb 26 03:33:15.765678 2026] [:error] [pid 9589:tid 9673] [client 85.203.23.99:31447] [client 85.203.23.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aZ9Oe6BuBxYiI1p-njSEtQAAAJQ"]
[Thu Feb 26 03:33:15.949229 2026] [:error] [pid 9589:tid 9670] [client 85.203.23.83:41471] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/shell/"] [unique_id "aZ9Oe6BuBxYiI1p-njSEtgAAAJE"]
[Thu Feb 26 03:33:16.133518 2026] [:error] [pid 9702:tid 9719] [client 85.203.23.54:31159] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/"] [unique_id "aZ9OfJvL1wp7EOGdesz4FgAAAM0"]
[Thu Feb 26 03:33:16.332457 2026] [:error] [pid 9702:tid 9724] [client 85.203.23.65:62157] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/fm.php"] [unique_id "aZ9OfJvL1wp7EOGdesz4FwAAANI"]
[Thu Feb 26 03:33:16.523439 2026] [:error] [pid 9702:tid 9729] [client 85.203.23.73:61905] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aZ9OfJvL1wp7EOGdesz4GwAAANc"]
[Thu Feb 26 03:33:21.705899 2026] [:error] [pid 9702:tid 9706] [client 85.203.23.99:22201] [client 85.203.23.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "aZ9OgZvL1wp7EOGdesz4KwAAAMA"]
[Thu Feb 26 03:33:26.893763 2026] [:error] [pid 9588:tid 9637] [client 85.203.23.101:42809] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/"] [unique_id "aZ9OhuSfsVC0YxizsTuXZQAAAEs"]
[Thu Feb 26 03:33:27.082358 2026] [:error] [pid 9588:tid 9632] [client 85.203.23.75:45681] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/network_xo.php"] [unique_id "aZ9Oh-SfsVC0YxizsTuXZgAAAEY"]
[Thu Feb 26 03:33:27.263885 2026] [:error] [pid 9587:tid 9608] [client 85.203.23.71:55265] [client 85.203.23.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aZ9Oh_iLfyuakov_VlANpwAAAAs"]
[Thu Feb 26 03:33:42.449565 2026] [:error] [pid 9702:tid 9727] [client 85.203.23.74:20453] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/chosen.php"] [unique_id "aZ9OlpvL1wp7EOGdesz4ZQAAANU"]
[Thu Feb 26 03:33:42.631853 2026] [:error] [pid 9702:tid 9728] [client 85.203.23.65:38869] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aZ9OlpvL1wp7EOGdesz4aQAAANY"]
[Thu Feb 26 03:33:42.822411 2026] [:error] [pid 9702:tid 9724] [client 85.203.23.90:41529] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/function/function.php"] [unique_id "aZ9OlpvL1wp7EOGdesz4agAAANI"]
[Thu Feb 26 03:33:43.005454 2026] [:error] [pid 9702:tid 9712] [client 85.203.23.73:59557] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aZ9Ol5vL1wp7EOGdesz4bgAAAMY"]
[Thu Feb 26 03:33:43.190462 2026] [:error] [pid 9702:tid 9727] [client 85.203.23.105:60225] [client 85.203.23.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/"] [unique_id "aZ9Ol5vL1wp7EOGdesz4cQAAANU"]
[Thu Feb 26 03:33:43.374108 2026] [:error] [pid 9702:tid 9725] [client 85.203.23.63:37453] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/areak1.php"] [unique_id "aZ9Ol5vL1wp7EOGdesz4cwAAANM"]
[Thu Feb 26 03:33:43.556009 2026] [:error] [pid 9702:tid 9717] [client 85.203.23.90:48843] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/"] [unique_id "aZ9Ol5vL1wp7EOGdesz4dgAAAMs"]
[Thu Feb 26 03:33:43.737484 2026] [:error] [pid 9702:tid 9714] [client 85.203.23.66:44759] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ufbngowues/main.php"] [unique_id "aZ9Ol5vL1wp7EOGdesz4eQAAAMg"]
[Thu Feb 26 03:33:43.921750 2026] [:error] [pid 9589:tid 9672] [client 85.203.23.86:43477] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shell3.php"] [unique_id "aZ9Ol6BuBxYiI1p-njSFGwAAAJM"]
[Thu Feb 26 03:33:44.104425 2026] [:error] [pid 9702:tid 9715] [client 85.203.23.81:23425] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/includes/template-singl-portfolio.php"] [unique_id "aZ9OmJvL1wp7EOGdesz4fAAAAMk"]
[Thu Feb 26 03:33:49.286880 2026] [:error] [pid 9587:tid 9597] [client 85.203.23.54:49143] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aZ9OnfiLfyuakov_VlAN2wAAAAA"]
[Thu Feb 26 03:33:49.471478 2026] [:error] [pid 9588:tid 9642] [client 85.203.23.61:54415] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aZ9OneSfsVC0YxizsTuXjgAAAFA"]
[Thu Feb 26 03:33:49.652811 2026] [:error] [pid 9589:tid 9675] [client 85.203.23.70:36397] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aZ9OnaBuBxYiI1p-njSFJgAAAJY"]
[Thu Feb 26 03:33:49.844870 2026] [:error] [pid 9588:tid 9634] [client 85.203.23.68:21499] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aZ9OneSfsVC0YxizsTuXkwAAAEg"]
[Thu Feb 26 03:33:50.037831 2026] [:error] [pid 9587:tid 9609] [client 85.203.23.93:62021] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aZ9OnviLfyuakov_VlAN3wAAAAw"]
[Thu Feb 26 03:33:55.223485 2026] [:error] [pid 9702:tid 9706] [client 85.203.23.106:20387] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "aZ9Oo5vL1wp7EOGdesz4pQAAAMA"]
[Thu Feb 26 03:33:55.408289 2026] [:error] [pid 9588:tid 9632] [client 85.203.23.93:22561] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/"] [unique_id "aZ9Oo-SfsVC0YxizsTuXqwAAAEY"]
[Thu Feb 26 03:33:55.591138 2026] [:error] [pid 9588:tid 9641] [client 85.203.23.62:41429] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin-header.php"] [unique_id "aZ9Oo-SfsVC0YxizsTuXrQAAAE8"]
[Thu Feb 26 03:33:55.779270 2026] [:error] [pid 9587:tid 9613] [client 85.203.23.71:64521] [client 85.203.23.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/about.php"] [unique_id "aZ9Oo_iLfyuakov_VlAN5wAAABA"]
[Thu Feb 26 03:33:55.963836 2026] [:error] [pid 9702:tid 9707] [client 85.203.23.87:62981] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/"] [unique_id "aZ9Oo5vL1wp7EOGdesz4qgAAAME"]
[Thu Feb 26 03:33:56.145686 2026] [:error] [pid 9702:tid 9708] [client 85.203.23.89:65093] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/222.php"] [unique_id "aZ9OpJvL1wp7EOGdesz4rQAAAMI"]
[Thu Feb 26 03:33:56.333964 2026] [:error] [pid 9588:tid 9629] [client 85.203.23.98:48811] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "aZ9OpOSfsVC0YxizsTuXrwAAAEM"]
[Thu Feb 26 03:33:56.520063 2026] [:error] [pid 9588:tid 9643] [client 85.203.23.63:28213] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "aZ9OpOSfsVC0YxizsTuXsQAAAFE"]
[Thu Feb 26 03:34:01.704899 2026] [:error] [pid 9702:tid 9707] [client 85.203.23.74:27687] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aZ9OqZvL1wp7EOGdesz42AAAAME"]
[Thu Feb 26 03:34:01.891029 2026] [:error] [pid 9702:tid 9729] [client 85.203.23.82:27473] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aZ9OqZvL1wp7EOGdesz42gAAANc"]
[Thu Feb 26 03:34:02.106833 2026] [:error] [pid 9589:tid 9656] [client 85.203.23.87:36319] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/themes/"] [unique_id "aZ9OqqBuBxYiI1p-njSFRAAAAIM"]
[Thu Feb 26 03:34:02.297186 2026] [:error] [pid 9588:tid 9634] [client 85.203.23.104:39157] [client 85.203.23.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aZ9OquSfsVC0YxizsTuXvAAAAEg"]
[Thu Feb 26 03:34:02.481036 2026] [:error] [pid 9587:tid 9604] [client 85.203.23.104:23529] [client 85.203.23.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/components/"] [unique_id "aZ9OqviLfyuakov_VlAN7AAAAAc"]
[Thu Feb 26 03:34:02.666174 2026] [:error] [pid 9587:tid 9599] [client 85.203.23.90:64645] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/"] [unique_id "aZ9OqviLfyuakov_VlAN7QAAAAI"]
[Thu Feb 26 03:34:07.852447 2026] [:error] [pid 9588:tid 9632] [client 85.203.23.99:53159] [client 85.203.23.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aZ9Or-SfsVC0YxizsTuXwgAAAEY"]
[Thu Feb 26 03:34:08.036594 2026] [:error] [pid 9587:tid 9603] [client 85.203.23.75:20935] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/404.php"] [unique_id "aZ9OsPiLfyuakov_VlAN9gAAAAY"]
[Thu Feb 26 03:34:23.227824 2026] [:error] [pid 9589:tid 9669] [client 85.203.23.77:34987] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aZ9Ov6BuBxYiI1p-njSFlwAAAJA"]
[Thu Feb 26 03:34:23.420051 2026] [:error] [pid 9702:tid 9728] [client 85.203.23.105:42903] [client 85.203.23.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/"] [unique_id "aZ9Ov5vL1wp7EOGdesz5RgAAANY"]
[Thu Feb 26 03:34:28.603935 2026] [:error] [pid 9702:tid 9726] [client 85.203.23.82:52535] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aZ9OxJvL1wp7EOGdesz5WQAAANQ"]
[Thu Feb 26 03:34:28.797334 2026] [:error] [pid 9587:tid 9618] [client 85.203.23.95:29615] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/"] [unique_id "aZ9OxPiLfyuakov_VlAODQAAABU"]
[Thu Feb 26 03:34:38.981900 2026] [:error] [pid 9587:tid 9606] [client 85.203.23.93:29981] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aZ9OzviLfyuakov_VlAOKQAAAAk"]
[Thu Feb 26 03:34:39.176052 2026] [:error] [pid 9587:tid 9605] [client 85.203.23.65:20301] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/search/"] [unique_id "aZ9Oz_iLfyuakov_VlAOLQAAAAg"]
[Thu Feb 26 03:34:39.360358 2026] [:error] [pid 9588:tid 9648] [client 85.203.23.90:30209] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aZ9Oz-SfsVC0YxizsTuYFgAAAFY"]
[Thu Feb 26 03:34:39.545419 2026] [:error] [pid 9587:tid 9619] [client 85.203.23.62:31527] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aZ9Oz_iLfyuakov_VlAOMQAAABY"]
[Thu Feb 26 03:34:39.729947 2026] [:error] [pid 9588:tid 9642] [client 85.203.23.91:35873] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/"] [unique_id "aZ9Oz-SfsVC0YxizsTuYFwAAAFA"]
[Thu Feb 26 03:34:39.935690 2026] [:error] [pid 9589:tid 9655] [client 85.203.23.60:46753] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/"] [unique_id "aZ9Oz6BuBxYiI1p-njSF2QAAAII"]
[Thu Feb 26 03:34:45.119461 2026] [:error] [pid 9702:tid 9718] [client 85.203.23.70:37563] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/"] [unique_id "aZ9O1ZvL1wp7EOGdesz5wgAAAMw"]
[Thu Feb 26 03:34:45.306177 2026] [:error] [pid 9702:tid 9723] [client 85.203.23.67:20085] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/"] [unique_id "aZ9O1ZvL1wp7EOGdesz5wwAAANE"]
[Thu Feb 26 03:34:45.494059 2026] [:error] [pid 9702:tid 9727] [client 85.203.23.78:26459] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aZ9O1ZvL1wp7EOGdesz5xwAAANU"]
[Thu Feb 26 03:34:45.676665 2026] [:error] [pid 9702:tid 9724] [client 85.203.23.100:45291] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aZ9O1ZvL1wp7EOGdesz5yQAAANI"]
[Thu Feb 26 03:34:50.860832 2026] [:error] [pid 9588:tid 9630] [client 85.203.23.77:44589] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aZ9O2uSfsVC0YxizsTuYPgAAAEQ"]
[Thu Feb 26 03:34:51.045102 2026] [:error] [pid 9589:tid 9663] [client 85.203.23.62:41133] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/archives/"] [unique_id "aZ9O26BuBxYiI1p-njSF8wAAAIo"]
[Thu Feb 26 03:34:51.229058 2026] [:error] [pid 9589:tid 9656] [client 85.203.23.98:52577] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/"] [unique_id "aZ9O26BuBxYiI1p-njSF9gAAAIM"]
[Thu Feb 26 03:34:51.412171 2026] [:error] [pid 9588:tid 9633] [client 85.203.23.101:24585] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/"] [unique_id "aZ9O2-SfsVC0YxizsTuYQwAAAEc"]
[Thu Feb 26 03:34:56.591651 2026] [:error] [pid 9589:tid 9674] [client 85.203.23.101:43949] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aZ9O4KBuBxYiI1p-njSGFQAAAJU"]
[Thu Feb 26 03:34:56.774202 2026] [:error] [pid 9589:tid 9658] [client 85.203.23.73:35291] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/"] [unique_id "aZ9O4KBuBxYiI1p-njSGGAAAAIU"]
[Thu Feb 26 03:35:11.962168 2026] [:error] [pid 9589:tid 9674] [client 85.203.23.70:38519] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aZ9O76BuBxYiI1p-njSGVgAAAJU"]
[Thu Feb 26 03:35:12.149899 2026] [:error] [pid 9702:tid 9725] [client 85.203.23.54:48071] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZ9O8JvL1wp7EOGdesz6WgAAANM"]
[Thu Feb 26 03:35:12.333015 2026] [:error] [pid 9587:tid 9610] [client 85.203.23.59:63641] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aZ9O8PiLfyuakov_VlAOfwAAAA0"]
[Thu Feb 26 03:35:12.520082 2026] [:error] [pid 9589:tid 9669] [client 85.203.23.81:35157] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/"] [unique_id "aZ9O8KBuBxYiI1p-njSGXQAAAJA"]
[Thu Feb 26 03:35:12.706865 2026] [:error] [pid 9588:tid 9644] [client 85.203.23.60:50319] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aZ9O8OSfsVC0YxizsTuYcgAAAFI"]
[Thu Feb 26 03:35:12.890648 2026] [:error] [pid 9588:tid 9650] [client 85.203.23.106:44339] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aZ9O8OSfsVC0YxizsTuYdAAAAFg"]
[Thu Feb 26 03:35:18.080252 2026] [:error] [pid 9588:tid 9636] [client 85.203.23.87:24423] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/"] [unique_id "aZ9O9uSfsVC0YxizsTuYfAAAAEo"]
[Thu Feb 26 03:35:18.270134 2026] [:error] [pid 9587:tid 9613] [client 85.203.23.62:39817] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aZ9O9viLfyuakov_VlAOkAAAABA"]
[Thu Feb 26 03:35:18.452729 2026] [:error] [pid 9702:tid 9725] [client 85.203.23.62:26123] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "aZ9O9pvL1wp7EOGdesz6fQAAANM"]
[Thu Feb 26 03:35:18.633063 2026] [:error] [pid 9588:tid 9646] [client 85.203.23.58:43997] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aZ9O9uSfsVC0YxizsTuYgAAAAFQ"]
[Thu Feb 26 03:35:18.815926 2026] [:error] [pid 9587:tid 9617] [client 85.203.23.73:46157] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-file.php"] [unique_id "aZ9O9viLfyuakov_VlAOmgAAABQ"]
[Thu Feb 26 03:35:19.005065 2026] [:error] [pid 9588:tid 9634] [client 85.203.23.107:61553] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/"] [unique_id "aZ9O9-SfsVC0YxizsTuYggAAAEg"]
[Thu Feb 26 03:35:19.191906 2026] [:error] [pid 9702:tid 9722] [client 85.203.23.65:27361] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aZ9O95vL1wp7EOGdesz6fwAAANA"]
[Thu Feb 26 03:35:19.384126 2026] [:error] [pid 9588:tid 9645] [client 85.203.23.106:20503] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aZ9O9-SfsVC0YxizsTuYigAAAFM"]
[Thu Feb 26 03:35:19.578284 2026] [:error] [pid 9588:tid 9629] [client 85.203.23.68:37129] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aZ9O9-SfsVC0YxizsTuYjQAAAEM"]
[Thu Feb 26 03:35:19.764915 2026] [:error] [pid 9587:tid 9607] [client 85.203.23.98:51149] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aZ9O9_iLfyuakov_VlAOpQAAAAo"]
[Thu Feb 26 03:35:19.951771 2026] [:error] [pid 9588:tid 9639] [client 85.203.23.62:33729] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/"] [unique_id "aZ9O9-SfsVC0YxizsTuYjgAAAE0"]
[Thu Feb 26 03:35:20.137258 2026] [:error] [pid 9589:tid 9655] [client 85.203.23.78:27131] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aZ9O-KBuBxYiI1p-njSGlAAAAII"]
[Thu Feb 26 03:35:20.324606 2026] [:error] [pid 9589:tid 9670] [client 85.203.23.62:60875] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-domain.php"] [unique_id "aZ9O-KBuBxYiI1p-njSGmgAAAJE"]
[Thu Feb 26 03:35:20.515831 2026] [:error] [pid 9587:tid 9598] [client 85.203.23.62:33167] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aZ9O-PiLfyuakov_VlAOqQAAAAE"]
[Thu Feb 26 03:35:20.712188 2026] [:error] [pid 9587:tid 9599] [client 85.203.23.67:34117] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aZ9O-PiLfyuakov_VlAOqgAAAAI"]
[Thu Feb 26 03:35:20.898624 2026] [:error] [pid 9702:tid 9716] [client 85.203.23.89:41421] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aZ9O-JvL1wp7EOGdesz6hAAAAMo"]
[Thu Feb 26 03:35:21.105472 2026] [:error] [pid 9589:tid 9662] [client 85.203.23.94:48427] [client 85.203.23.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aZ9O-aBuBxYiI1p-njSGoAAAAIk"]
[Thu Feb 26 03:35:26.293397 2026] [:error] [pid 9588:tid 9630] [client 85.203.23.80:50617] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aZ9O_uSfsVC0YxizsTuYqQAAAEQ"]
[Thu Feb 26 03:35:26.480674 2026] [:error] [pid 9702:tid 9717] [client 85.203.23.75:46825] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wpforms/"] [unique_id "aZ9O_pvL1wp7EOGdesz6kQAAAMs"]
[Thu Feb 26 03:35:26.668665 2026] [:error] [pid 9589:tid 9674] [client 85.203.23.87:57907] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/twenty/function.php"] [unique_id "aZ9O_qBuBxYiI1p-njSGwwAAAJU"]
[Thu Feb 26 03:35:26.855498 2026] [:error] [pid 9587:tid 9616] [client 85.203.23.65:32991] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aZ9O_viLfyuakov_VlAO0gAAABM"]
[Thu Feb 26 03:35:27.042368 2026] [:error] [pid 9587:tid 9611] [client 85.203.23.95:53275] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/cache/et/"] [unique_id "aZ9O__iLfyuakov_VlAO1AAAAA4"]
[Thu Feb 26 03:35:27.228415 2026] [:error] [pid 9588:tid 9631] [client 85.203.23.58:52679] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/"] [unique_id "aZ9O_-SfsVC0YxizsTuYrwAAAEU"]
[Thu Feb 26 03:35:27.407869 2026] [:error] [pid 9702:tid 9715] [client 85.203.23.87:47531] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aZ9O_5vL1wp7EOGdesz6mQAAAMk"]
[Thu Feb 26 03:35:32.606346 2026] [:error] [pid 9587:tid 9600] [client 85.203.23.77:29463] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aZ9PBPiLfyuakov_VlAO4QAAAAM"]
[Thu Feb 26 03:35:32.790891 2026] [:error] [pid 9589:tid 9664] [client 85.203.23.104:53745] [client 85.203.23.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aZ9PBKBuBxYiI1p-njSG3wAAAIs"]
[Thu Feb 26 03:35:32.974857 2026] [:error] [pid 9589:tid 9670] [client 85.203.23.73:49565] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/z.php"] [unique_id "aZ9PBKBuBxYiI1p-njSG4QAAAJE"]
[Thu Feb 26 03:35:34.698754 2026] [:error] [pid 9588:tid 9641] [client 85.203.23.77:36837] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZ9PBuSfsVC0YxizsTuYygAAAE8"]
[Thu Feb 26 03:35:34.888733 2026] [:error] [pid 9589:tid 9654] [client 85.203.23.94:62139] [client 85.203.23.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/chosen.php"] [unique_id "aZ9PBqBuBxYiI1p-njSG6gAAAIE"]
[Thu Feb 26 03:35:35.075465 2026] [:error] [pid 9589:tid 9671] [client 85.203.23.80:33653] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZ9PB6BuBxYiI1p-njSG7AAAAJI"]
[Thu Feb 26 03:35:35.260451 2026] [:error] [pid 9589:tid 9658] [client 85.203.23.85:37755] [client 85.203.23.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "aZ9PB6BuBxYiI1p-njSG7QAAAIU"]
[Thu Feb 26 03:35:35.446011 2026] [:error] [pid 9587:tid 9619] [client 85.203.23.65:62353] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/"] [unique_id "aZ9PB_iLfyuakov_VlAO6QAAABY"]
[Thu Feb 26 03:35:35.633190 2026] [:error] [pid 9702:tid 9714] [client 85.203.23.89:50927] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/chosen.php"] [unique_id "aZ9PB5vL1wp7EOGdesz62wAAAMg"]
[Thu Feb 26 03:35:35.816989 2026] [:error] [pid 9702:tid 9726] [client 85.203.23.65:52959] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/mediaelement/"] [unique_id "aZ9PB5vL1wp7EOGdesz63wAAANQ"]
[Thu Feb 26 03:35:36.004803 2026] [:error] [pid 9702:tid 9718] [client 85.203.23.93:38711] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aZ9PCJvL1wp7EOGdesz64QAAAMw"]
[Thu Feb 26 03:35:36.201328 2026] [:error] [pid 9702:tid 9721] [client 85.203.23.70:58903] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/m.php"] [unique_id "aZ9PCJvL1wp7EOGdesz64wAAAM8"]
[Thu Feb 26 03:35:36.382904 2026] [:error] [pid 9589:tid 9666] [client 85.203.23.77:62105] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/fm.php"] [unique_id "aZ9PCKBuBxYiI1p-njSG9gAAAI0"]
[Thu Feb 26 03:35:41.564889 2026] [:error] [pid 9588:tid 9649] [client 85.203.23.62:30429] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aZ9PDeSfsVC0YxizsTuY5wAAAFc"]
[Thu Feb 26 03:35:41.792719 2026] [:error] [pid 9589:tid 9665] [client 85.203.23.106:52197] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aZ9PDaBuBxYiI1p-njSHCwAAAIw"]
[Thu Feb 26 03:35:41.984505 2026] [:error] [pid 9589:tid 9676] [client 85.203.23.74:34625] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/chosen.php"] [unique_id "aZ9PDaBuBxYiI1p-njSHEAAAAJc"]
[Thu Feb 26 03:35:42.174568 2026] [:error] [pid 9702:tid 9724] [client 85.203.23.107:37609] [client 85.203.23.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aZ9PDpvL1wp7EOGdesz7EAAAANI"]
[Thu Feb 26 03:35:52.360154 2026] [:error] [pid 9702:tid 9716] [client 85.203.23.60:62721] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aZ9PGJvL1wp7EOGdesz7SQAAAMo"]
[Thu Feb 26 03:35:52.546545 2026] [:error] [pid 9702:tid 9713] [client 85.203.23.82:62757] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aZ9PGJvL1wp7EOGdesz7SwAAAMc"]
[Thu Feb 26 03:35:57.741834 2026] [:error] [pid 9588:tid 9628] [client 85.203.23.105:41499] [client 85.203.23.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aZ9PHeSfsVC0YxizsTuZFQAAAEI"]
[Thu Feb 26 03:35:57.938167 2026] [:error] [pid 9587:tid 9607] [client 85.203.23.101:32801] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "aZ9PHfiLfyuakov_VlAPDQAAAAo"]
[Thu Feb 26 03:36:03.126370 2026] [:error] [pid 9702:tid 9717] [client 85.203.23.54:64237] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/database.php"] [unique_id "aZ9PI5vL1wp7EOGdesz7fwAAAMs"]
[Thu Feb 26 03:36:03.334440 2026] [:error] [pid 9702:tid 9721] [client 85.203.23.87:34069] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/vudel/list.php"] [unique_id "aZ9PI5vL1wp7EOGdesz7gwAAAM8"]
[Thu Feb 26 03:36:08.528796 2026] [:error] [pid 9702:tid 9721] [client 85.203.23.66:46143] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/hello-elementor/assets/css/lightbox.php"] [unique_id "aZ9PKJvL1wp7EOGdesz7qgAAAM8"]
[Thu Feb 26 03:36:10.118357 2026] [:error] [pid 9589:tid 9666] [client 85.203.23.81:30069] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-custom-fields/includes/walkers/about.php"] [unique_id "aZ9PKqBuBxYiI1p-njSHhQAAAI0"]
[Thu Feb 26 03:36:10.311504 2026] [:error] [pid 9588:tid 9650] [client 85.203.23.74:52119] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/includes/controls/about.php"] [unique_id "aZ9PKuSfsVC0YxizsTuZPgAAAFg"]
[Thu Feb 26 03:36:15.501356 2026] [:error] [pid 9702:tid 9710] [client 85.203.23.74:39923] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/well-known/acme-challenge/c/e/about.php"] [unique_id "aZ9PL5vL1wp7EOGdesz7zQAAAMQ"]
[Thu Feb 26 03:36:15.685669 2026] [:error] [pid 9588:tid 9637] [client 85.203.23.54:25617] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aZ9PL-SfsVC0YxizsTuZRQAAAEs"]
[Thu Feb 26 03:36:15.881906 2026] [:error] [pid 9589:tid 9663] [client 85.203.23.58:25771] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aZ9PL6BuBxYiI1p-njSHjAAAAIo"]
[Thu Feb 26 03:36:26.066197 2026] [:error] [pid 9702:tid 9711] [client 85.203.23.65:29033] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/man.php"] [unique_id "aZ9POpvL1wp7EOGdesz8BwAAAMU"]
[Thu Feb 26 03:36:26.252879 2026] [:error] [pid 9702:tid 9724] [client 85.203.23.101:47569] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/zoom1.php"] [unique_id "aZ9POpvL1wp7EOGdesz8DAAAANI"]
[Thu Feb 26 03:36:31.437694 2026] [:error] [pid 9587:tid 9602] [client 85.203.23.101:37077] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/astra/inc/customizer/custom-controls/assets/js/unminified/"] [unique_id "aZ9PP_iLfyuakov_VlAPawAAAAU"]
[Thu Feb 26 03:36:36.620611 2026] [:error] [pid 9588:tid 9638] [client 85.203.23.101:45093] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/astra/assets/js/"] [unique_id "aZ9PROSfsVC0YxizsTuZZQAAAEw"]
[Thu Feb 26 03:36:36.804285 2026] [:error] [pid 9587:tid 9613] [client 85.203.23.106:62393] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/astra-addon/"] [unique_id "aZ9PRPiLfyuakov_VlAPbwAAABA"]
[Thu Feb 26 03:36:36.988294 2026] [:error] [pid 9589:tid 9665] [client 85.203.23.70:41571] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-mails.php"] [unique_id "aZ9PRKBuBxYiI1p-njSH1AAAAIw"]
[Thu Feb 26 03:36:37.168771 2026] [:error] [pid 9589:tid 9676] [client 85.203.23.87:21827] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/new.php"] [unique_id "aZ9PRaBuBxYiI1p-njSH1wAAAJc"]
[Thu Feb 26 03:36:37.354040 2026] [:error] [pid 9588:tid 9635] [client 85.203.23.91:57547] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/"] [unique_id "aZ9PReSfsVC0YxizsTuZZwAAAEk"]
[Thu Feb 26 03:36:37.546338 2026] [:error] [pid 9588:tid 9645] [client 85.203.23.84:31787] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/js/crd/admin.php"] [unique_id "aZ9PReSfsVC0YxizsTuZaAAAAFM"]
[Thu Feb 26 03:36:37.735750 2026] [:error] [pid 9702:tid 9712] [client 85.203.23.90:43009] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/uploads/isc/"] [unique_id "aZ9PRZvL1wp7EOGdesz8XgAAAMY"]
[Thu Feb 26 03:36:37.933268 2026] [:error] [pid 9702:tid 9716] [client 85.203.23.87:28447] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/img/docs/includes/data/tmp/klo/aawl/"] [unique_id "aZ9PRZvL1wp7EOGdesz8XwAAAMo"]
[Thu Feb 26 03:36:38.114609 2026] [:error] [pid 9587:tid 9601] [client 85.203.23.66:63723] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-pridmag/load.php"] [unique_id "aZ9PRviLfyuakov_VlAPdQAAAAQ"]
[Thu Feb 26 03:36:38.297174 2026] [:error] [pid 9588:tid 9644] [client 85.203.23.84:35235] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/"] [unique_id "aZ9PRuSfsVC0YxizsTuZagAAAFI"]
[Thu Feb 26 03:36:38.495585 2026] [:error] [pid 9587:tid 9615] [client 85.203.23.78:21131] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aZ9PRviLfyuakov_VlAPeQAAABI"]
[Thu Feb 26 03:36:38.690700 2026] [:error] [pid 9588:tid 9640] [client 85.203.23.63:26609] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "aZ9PRuSfsVC0YxizsTuZawAAAE4"]
[Thu Feb 26 03:36:38.877031 2026] [:error] [pid 9588:tid 9650] [client 85.203.23.78:25523] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/list/"] [unique_id "aZ9PRuSfsVC0YxizsTuZbgAAAFg"]
[Thu Feb 26 03:36:44.064328 2026] [:error] [pid 9587:tid 9615] [client 85.203.23.87:54973] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/go.php"] [unique_id "aZ9PTPiLfyuakov_VlAPhAAAABI"]
[Thu Feb 26 03:36:44.249876 2026] [:error] [pid 9588:tid 9633] [client 85.203.23.74:58069] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/imagess.php"] [unique_id "aZ9PTOSfsVC0YxizsTuZiQAAAEc"]
[Thu Feb 26 03:36:44.432283 2026] [:error] [pid 9587:tid 9609] [client 85.203.23.65:65499] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/imagess.php"] [unique_id "aZ9PTPiLfyuakov_VlAPhQAAAAw"]
[Thu Feb 26 03:36:44.613232 2026] [:error] [pid 9587:tid 9599] [client 85.203.23.61:23991] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/let.php"] [unique_id "aZ9PTPiLfyuakov_VlAPhwAAAAI"]
[Thu Feb 26 03:36:44.794131 2026] [:error] [pid 9587:tid 9608] [client 85.203.23.87:27829] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/go.php"] [unique_id "aZ9PTPiLfyuakov_VlAPiQAAAAs"]
[Thu Feb 26 03:36:44.976859 2026] [:error] [pid 9588:tid 9646] [client 85.203.23.105:30831] [client 85.203.23.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/huan.php"] [unique_id "aZ9PTOSfsVC0YxizsTuZjAAAAFQ"]
[Thu Feb 26 03:36:50.161825 2026] [:error] [pid 9588:tid 9631] [client 85.203.23.71:23661] [client 85.203.23.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aZ9PUuSfsVC0YxizsTuZlwAAAEU"]
[Thu Feb 26 03:36:55.354600 2026] [:error] [pid 9702:tid 9711] [client 85.203.23.106:52031] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aZ9PV5vL1wp7EOGdesz8jAAAAMU"]
[Thu Feb 26 03:37:00.548022 2026] [:error] [pid 9589:tid 9653] [client 85.203.23.68:33793] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/foogallery/foogallery.php"] [unique_id "aZ9PXKBuBxYiI1p-njSIHgAAAIA"]
[Thu Feb 26 03:37:00.735528 2026] [:error] [pid 9589:tid 9667] [client 85.203.23.62:45709] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/404-solution/404-solution.php"] [unique_id "aZ9PXKBuBxYiI1p-njSIHwAAAI4"]
[Thu Feb 26 03:37:00.931091 2026] [:error] [pid 9702:tid 9717] [client 85.203.23.81:23663] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/duplicator/src/moon.php"] [unique_id "aZ9PXJvL1wp7EOGdesz8oAAAAMs"]
[Thu Feb 26 03:37:06.113646 2026] [:error] [pid 9588:tid 9639] [client 85.203.23.83:30721] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin-site-enhancements/admin-site-enhancements.php"] [unique_id "aZ9PYuSfsVC0YxizsTuZvwAAAE0"]
[Thu Feb 26 03:37:06.295849 2026] [:error] [pid 9702:tid 9728] [client 85.203.23.90:50403] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/members/members.php"] [unique_id "aZ9PYpvL1wp7EOGdesz8tAAAANY"]
[Thu Feb 26 03:37:06.478236 2026] [:error] [pid 9702:tid 9719] [client 85.203.23.75:25937] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/performance-lab/load.php"] [unique_id "aZ9PYpvL1wp7EOGdesz8tgAAAM0"]
[Thu Feb 26 03:37:06.663148 2026] [:error] [pid 9589:tid 9668] [client 85.203.23.63:49929] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/performance-lab/includes/admin/tags.php"] [unique_id "aZ9PYqBuBxYiI1p-njSILAAAAI8"]
[Thu Feb 26 03:37:06.845838 2026] [:error] [pid 9702:tid 9711] [client 85.203.23.83:45747] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/tinymce-advanced/tinymce-advanced.php"] [unique_id "aZ9PYpvL1wp7EOGdesz8uAAAAMU"]
[Thu Feb 26 03:37:22.037775 2026] [:error] [pid 9589:tid 9660] [client 85.203.23.90:31035] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aZ9PcqBuBxYiI1p-njSIWQAAAIc"]
[Thu Feb 26 03:37:22.217301 2026] [:error] [pid 9587:tid 9610] [client 85.203.23.75:54359] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aZ9PcviLfyuakov_VlAP9QAAAA0"]
[Thu Feb 26 03:37:22.406746 2026] [:error] [pid 9589:tid 9655] [client 85.203.23.54:51111] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/new.php"] [unique_id "aZ9PcqBuBxYiI1p-njSIWwAAAII"]
[Thu Feb 26 03:37:22.589109 2026] [:error] [pid 9589:tid 9675] [client 85.203.23.77:32413] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Iitespeed-cache/zczv.php"] [unique_id "aZ9PcqBuBxYiI1p-njSIXAAAAJY"]
[Thu Feb 26 03:37:22.770281 2026] [:error] [pid 9589:tid 9657] [client 85.203.23.105:53805] [client 85.203.23.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/woocommerce_uploads/about.php"] [unique_id "aZ9PcqBuBxYiI1p-njSIXwAAAIQ"]
[Thu Feb 26 03:37:27.967269 2026] [:error] [pid 9589:tid 9655] [client 85.203.23.98:31611] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/adca.php"] [unique_id "aZ9Pd6BuBxYiI1p-njSIewAAAII"]
[Thu Feb 26 03:37:28.154105 2026] [:error] [pid 9588:tid 9650] [client 85.203.23.101:37557] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/maintenance/bolt.php"] [unique_id "aZ9PeOSfsVC0YxizsTuaBwAAAFg"]
[Thu Feb 26 03:37:28.357750 2026] [:error] [pid 9702:tid 9725] [client 85.203.23.77:40817] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/html-api/about.php"] [unique_id "aZ9PeJvL1wp7EOGdesz8_wAAANM"]
[Thu Feb 26 03:37:28.549947 2026] [:error] [pid 9702:tid 9716] [client 85.203.23.82:60175] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/interactivity-api/"] [unique_id "aZ9PeJvL1wp7EOGdesz9AQAAAMo"]
[Thu Feb 26 03:37:28.736764 2026] [:error] [pid 9702:tid 9712] [client 85.203.23.81:64323] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/siteorigin-panels/"] [unique_id "aZ9PeJvL1wp7EOGdesz9AwAAAMY"]
[Thu Feb 26 03:37:28.919956 2026] [:error] [pid 9702:tid 9729] [client 85.203.23.93:64959] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/nav-menu-trigger.php"] [unique_id "aZ9PeJvL1wp7EOGdesz9BgAAANc"]
[Thu Feb 26 03:37:29.143087 2026] [:error] [pid 9589:tid 9675] [client 85.203.23.84:49569] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aZ9PeaBuBxYiI1p-njSIfgAAAJY"]
[Thu Feb 26 03:37:34.331288 2026] [:error] [pid 9702:tid 9709] [client 85.203.23.82:21227] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-author/"] [unique_id "aZ9PfpvL1wp7EOGdesz9GgAAAMM"]
[Thu Feb 26 03:37:34.517297 2026] [:error] [pid 9702:tid 9712] [client 85.203.23.106:60483] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "aZ9PfpvL1wp7EOGdesz9HwAAAMY"]
[Thu Feb 26 03:37:34.699723 2026] [:error] [pid 9702:tid 9721] [client 85.203.23.69:23881] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aZ9PfpvL1wp7EOGdesz9IwAAAM8"]
[Thu Feb 26 03:37:39.886492 2026] [:error] [pid 9702:tid 9730] [client 85.203.23.67:24237] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/components/style-rtl.min_42.php"] [unique_id "aZ9Pg5vL1wp7EOGdesz9QgAAANg"]
[Thu Feb 26 03:37:40.093653 2026] [:error] [pid 9589:tid 9677] [client 85.203.23.74:49371] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/"] [unique_id "aZ9PhKBuBxYiI1p-njSIrgAAAJg"]
[Thu Feb 26 03:37:40.286267 2026] [:error] [pid 9702:tid 9719] [client 85.203.23.87:56097] [client 85.203.23.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Credit_74.php"] [unique_id "aZ9PhJvL1wp7EOGdesz9RQAAAM0"]
[Thu Feb 26 03:37:40.472703 2026] [:error] [pid 9702:tid 9707] [client 85.203.23.56:60509] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/akismet/_40.php"] [unique_id "aZ9PhJvL1wp7EOGdesz9RwAAAME"]
[Thu Feb 26 03:37:40.654473 2026] [:error] [pid 9588:tid 9648] [client 85.203.23.65:33367] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/coffee/colors_26.php"] [unique_id "aZ9PhOSfsVC0YxizsTuaFAAAAFY"]
[Thu Feb 26 03:37:45.837541 2026] [:error] [pid 9589:tid 9670] [client 85.203.23.101:34811] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aZ9PiaBuBxYiI1p-njSIvwAAAJE"]
[Thu Feb 26 03:37:46.020152 2026] [:error] [pid 9587:tid 9613] [client 85.203.23.75:20167] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aZ9PiviLfyuakov_VlAQKQAAABA"]
[Thu Feb 26 03:37:46.209618 2026] [:error] [pid 9589:tid 9654] [client 85.203.23.100:38255] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/video/"] [unique_id "aZ9PiqBuBxYiI1p-njSIwQAAAIE"]
[Thu Feb 26 03:37:46.395633 2026] [:error] [pid 9589:tid 9664] [client 85.203.23.70:56661] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/"] [unique_id "aZ9PiqBuBxYiI1p-njSIwgAAAIs"]
[Thu Feb 26 03:37:51.578332 2026] [:error] [pid 9589:tid 9658] [client 85.203.23.59:56255] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/classwithtostring.php"] [unique_id "aZ9Pj6BuBxYiI1p-njSI0gAAAIU"]
[Thu Feb 26 03:37:51.765179 2026] [:error] [pid 9589:tid 9663] [client 85.203.23.91:43401] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/theme-editor-class.php"] [unique_id "aZ9Pj6BuBxYiI1p-njSI1AAAAIo"]
[Thu Feb 26 03:37:56.952221 2026] [:error] [pid 9587:tid 9599] [client 85.203.23.70:58865] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/LayerSlider/assets/static/layerslider/skins/carousel/about.php"] [unique_id "aZ9PlPiLfyuakov_VlAQOQAAAAI"]
[Thu Feb 26 03:37:57.142445 2026] [:error] [pid 9587:tid 9618] [client 85.203.23.71:57117] [client 85.203.23.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fusion-core/css/about.php"] [unique_id "aZ9PlfiLfyuakov_VlAQOgAAABU"]
[Thu Feb 26 03:38:12.332522 2026] [:error] [pid 9702:tid 9727] [client 85.203.23.62:51967] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/sql.php"] [unique_id "aZ9PpJvL1wp7EOGdesz94wAAANU"]
[Thu Feb 26 03:38:12.521977 2026] [:error] [pid 9589:tid 9674] [client 85.203.23.62:48737] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/chosen.php"] [unique_id "aZ9PpKBuBxYiI1p-njSI-wAAAJU"]
[Thu Feb 26 03:38:12.707799 2026] [:error] [pid 9589:tid 9669] [client 85.203.23.81:59989] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/prayer_intentions.php"] [unique_id "aZ9PpKBuBxYiI1p-njSI_AAAAJA"]
[Thu Feb 26 03:38:17.889813 2026] [:error] [pid 9702:tid 9726] [client 85.203.23.90:38361] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aZ9PqZvL1wp7EOGdesz-AQAAANQ"]
[Thu Feb 26 03:38:18.077151 2026] [:error] [pid 9588:tid 9642] [client 85.203.23.85:57211] [client 85.203.23.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aZ9PquSfsVC0YxizsTuaZgAAAFA"]
[Thu Feb 26 03:38:18.263993 2026] [:error] [pid 9702:tid 9730] [client 85.203.23.68:49151] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/v3/dist/build/build/cache.php"] [unique_id "aZ9PqpvL1wp7EOGdesz-BAAAANg"]
[Thu Feb 26 03:38:18.477407 2026] [:error] [pid 9588:tid 9643] [client 85.203.23.71:38923] [client 85.203.23.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/post-views-counter/"] [unique_id "aZ9PquSfsVC0YxizsTuaaAAAAFE"]
[Thu Feb 26 03:38:18.662743 2026] [:error] [pid 9588:tid 9645] [client 85.203.23.91:50213] [client 85.203.23.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/media/dwv/admin.php"] [unique_id "aZ9PquSfsVC0YxizsTuaaQAAAFM"]
[Thu Feb 26 03:38:18.845253 2026] [:error] [pid 9702:tid 9714] [client 85.203.23.80:59109] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/zoom1.php"] [unique_id "aZ9PqpvL1wp7EOGdesz-BgAAAMg"]
[Thu Feb 26 03:38:19.044255 2026] [:error] [pid 9588:tid 9648] [client 85.203.23.67:49599] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/fonts/roboto/wp-admins.php"] [unique_id "aZ9Pq-SfsVC0YxizsTuabAAAAFY"]
[Thu Feb 26 03:38:20.802565 2026] [:error] [pid 9587:tid 9612] [client 85.203.23.73:24435] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/flatsome/wp-kgg.php"] [unique_id "aZ9PrPiLfyuakov_VlAQaAAAAA8"]
[Thu Feb 26 03:38:20.987780 2026] [:error] [pid 9589:tid 9665] [client 85.203.23.94:62571] [client 85.203.23.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/wp-admins.php"] [unique_id "aZ9PrKBuBxYiI1p-njSJIgAAAIw"]
[Thu Feb 26 03:38:21.173538 2026] [:error] [pid 9587:tid 9606] [client 85.203.23.89:39239] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "aZ9PrfiLfyuakov_VlAQbAAAAAk"]
[Thu Feb 26 03:38:26.356966 2026] [:error] [pid 9702:tid 9710] [client 85.203.23.62:20947] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/buy.php"] [unique_id "aZ9PspvL1wp7EOGdesz-LAAAAMQ"]
[Thu Feb 26 03:38:26.542283 2026] [:error] [pid 9589:tid 9665] [client 85.203.23.101:42987] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/spacious-pro/js/theia-sticky-sidebar/"] [unique_id "aZ9PsqBuBxYiI1p-njSJMwAAAIw"]
[Thu Feb 26 03:38:26.728607 2026] [:error] [pid 9589:tid 9656] [client 85.203.23.70:58281] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/zxasd.php"] [unique_id "aZ9PsqBuBxYiI1p-njSJNAAAAIM"]
[Thu Feb 26 03:38:26.926943 2026] [:error] [pid 9589:tid 9670] [client 85.203.23.100:59551] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/database.php"] [unique_id "aZ9PsqBuBxYiI1p-njSJNQAAAJE"]
[Thu Feb 26 03:38:27.108208 2026] [:error] [pid 9587:tid 9621] [client 85.203.23.85:30643] [client 85.203.23.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/sql.php"] [unique_id "aZ9Ps_iLfyuakov_VlAQegAAABg"]
[Thu Feb 26 03:38:27.297284 2026] [:error] [pid 9588:tid 9640] [client 85.203.23.105:61921] [client 85.203.23.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/ty.php"] [unique_id "aZ9Ps-SfsVC0YxizsTuahgAAAE4"]
[Thu Feb 26 03:38:32.481781 2026] [:error] [pid 9589:tid 9659] [client 85.203.23.63:23835] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/ty.php"] [unique_id "aZ9PuKBuBxYiI1p-njSJRwAAAIY"]
[Thu Feb 26 03:38:32.665154 2026] [:error] [pid 9702:tid 9717] [client 85.203.23.71:40027] [client 85.203.23.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/a1cord.php"] [unique_id "aZ9PuJvL1wp7EOGdesz-UQAAAMs"]
[Thu Feb 26 03:38:32.844589 2026] [:error] [pid 9587:tid 9615] [client 85.203.23.58:36659] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-edit-link/"] [unique_id "aZ9PuPiLfyuakov_VlAQkAAAABI"]
[Thu Feb 26 03:38:33.032480 2026] [:error] [pid 9702:tid 9722] [client 85.203.23.75:28395] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xex.php"] [unique_id "aZ9PuZvL1wp7EOGdesz-UgAAANA"]
[Thu Feb 26 03:38:33.218164 2026] [:error] [pid 9589:tid 9654] [client 85.203.23.69:61805] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/edit-wolf.php"] [unique_id "aZ9PuaBuBxYiI1p-njSJTQAAAIE"]
[Thu Feb 26 03:38:33.400939 2026] [:error] [pid 9589:tid 9662] [client 85.203.23.86:59779] [client 85.203.23.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp_helper_bimfl/shell.php"] [unique_id "aZ9PuaBuBxYiI1p-njSJUAAAAIk"]
[Thu Feb 26 03:38:33.604037 2026] [:error] [pid 9589:tid 9668] [client 85.203.23.90:41205] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp_helper_avcdl/shell.php"] [unique_id "aZ9PuaBuBxYiI1p-njSJUgAAAI8"]
[Thu Feb 26 03:38:38.828561 2026] [:error] [pid 9702:tid 9723] [client 85.203.23.74:63141] [client 85.203.23.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/contact-form-7/wp-contact-form-7.php"] [unique_id "aZ9PvpvL1wp7EOGdesz-fAAAANE"]
[Thu Feb 26 03:38:39.011807 2026] [:error] [pid 9587:tid 9619] [client 85.203.23.84:47609] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp_theme_ahewl/shell.php"] [unique_id "aZ9Pv_iLfyuakov_VlAQvwAAABY"]
[Thu Feb 26 03:38:39.194712 2026] [:error] [pid 9589:tid 9673] [client 85.203.23.98:60505] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "aZ9Pv6BuBxYiI1p-njSJZwAAAJQ"]
[Thu Feb 26 03:38:39.382498 2026] [:error] [pid 9702:tid 9726] [client 85.203.23.70:53403] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/"] [unique_id "aZ9Pv5vL1wp7EOGdesz-fgAAANQ"]
[Thu Feb 26 03:38:39.585365 2026] [:error] [pid 9702:tid 9707] [client 85.203.23.102:49159] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/tx20.php"] [unique_id "aZ9Pv5vL1wp7EOGdesz-fwAAAME"]
[Thu Feb 26 03:38:39.772579 2026] [:error] [pid 9702:tid 9727] [client 85.203.23.61:35811] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ah22.php"] [unique_id "aZ9Pv5vL1wp7EOGdesz-gQAAANU"]
[Thu Feb 26 03:38:39.952832 2026] [:error] [pid 9589:tid 9657] [client 85.203.23.71:23677] [client 85.203.23.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/ooo.php"] [unique_id "aZ9Pv6BuBxYiI1p-njSJbAAAAIQ"]
[Thu Feb 26 03:38:40.136969 2026] [:error] [pid 9588:tid 9628] [client 85.203.23.94:38331] [client 85.203.23.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/dist/content/pmdwx/xfe/admin.php"] [unique_id "aZ9PwOSfsVC0YxizsTuaqAAAAEI"]
[Thu Feb 26 03:38:40.319080 2026] [:error] [pid 9702:tid 9730] [client 85.203.23.60:44149] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/resources/dist/includes/img/alw/"] [unique_id "aZ9PwJvL1wp7EOGdesz-hQAAANg"]
[Thu Feb 26 03:38:40.508322 2026] [:error] [pid 9587:tid 9605] [client 85.203.23.89:52405] [client 85.203.23.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/cache/assets/v3/v3/files/akami/admin.php"] [unique_id "aZ9PwPiLfyuakov_VlAQzgAAAAg"]
[Thu Feb 26 03:38:40.698003 2026] [:error] [pid 9587:tid 9603] [client 85.203.23.99:26919] [client 85.203.23.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/datate.php"] [unique_id "aZ9PwPiLfyuakov_VlAQ0QAAAAY"]
[Thu Feb 26 03:38:40.896695 2026] [:error] [pid 9587:tid 9614] [client 85.203.23.60:27779] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/chosen.php"] [unique_id "aZ9PwPiLfyuakov_VlAQ1AAAABE"]
[Thu Feb 26 03:38:41.079070 2026] [:error] [pid 9702:tid 9717] [client 85.203.23.77:46133] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/autoload_classmap.php"] [unique_id "aZ9PwZvL1wp7EOGdesz-igAAAMs"]
[Thu Feb 26 03:38:41.261183 2026] [:error] [pid 9589:tid 9671] [client 85.203.23.84:46791] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/call-now-button/admin.php"] [unique_id "aZ9PwaBuBxYiI1p-njSJbgAAAJI"]
[Thu Feb 26 03:38:41.462143 2026] [:error] [pid 9589:tid 9659] [client 85.203.23.66:23239] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/rank-math/mmm.php"] [unique_id "aZ9PwaBuBxYiI1p-njSJcAAAAIY"]
[Thu Feb 26 03:38:41.649796 2026] [:error] [pid 9589:tid 9655] [client 85.203.23.100:40391] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/maintenance/assets/mmm.php"] [unique_id "aZ9PwaBuBxYiI1p-njSJcgAAAII"]
[Thu Feb 26 03:38:46.833879 2026] [:error] [pid 9702:tid 9709] [client 85.203.23.93:30881] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/menu.php"] [unique_id "aZ9PxpvL1wp7EOGdesz-pQAAAMM"]
[Thu Feb 26 03:38:52.018532 2026] [:error] [pid 9588:tid 9628] [client 85.203.23.62:20731] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah/function.php"] [unique_id "aZ9PzOSfsVC0YxizsTua1QAAAEI"]
[Thu Feb 26 03:38:57.202760 2026] [:error] [pid 9589:tid 9676] [client 85.203.23.101:42809] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about/autoload_classmap.php"] [unique_id "aZ9P0aBuBxYiI1p-njSJqwAAAJc"]
[Thu Feb 26 03:38:57.392313 2026] [:error] [pid 9587:tid 9609] [client 85.203.23.99:59083] [client 85.203.23.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/new/update/chosen.php"] [unique_id "aZ9P0fiLfyuakov_VlAQ_QAAAAw"]
[Thu Feb 26 03:38:57.576564 2026] [:error] [pid 9702:tid 9711] [client 85.203.23.70:60271] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/new/wp-2019.php"] [unique_id "aZ9P0ZvL1wp7EOGdesz_AAAAAMU"]
[Thu Feb 26 03:38:57.758608 2026] [:error] [pid 9589:tid 9677] [client 85.203.23.65:63809] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-2019.php"] [unique_id "aZ9P0aBuBxYiI1p-njSJsAAAAJg"]
[Thu Feb 26 03:38:57.954545 2026] [:error] [pid 9587:tid 9607] [client 85.203.23.106:23469] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/zczv.php"] [unique_id "aZ9P0fiLfyuakov_VlARAAAAAAo"]
[Thu Feb 26 03:38:58.140274 2026] [:error] [pid 9587:tid 9599] [client 85.203.23.60:30341] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/as/classwithtostring.php"] [unique_id "aZ9P0viLfyuakov_VlARAgAAAAI"]
[Thu Feb 26 03:38:58.323818 2026] [:error] [pid 9702:tid 9712] [client 85.203.23.66:55157] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-rocket-config/V.php"] [unique_id "aZ9P0pvL1wp7EOGdesz_BgAAAMY"]
[Thu Feb 26 03:38:58.512319 2026] [:error] [pid 9702:tid 9726] [client 85.203.23.77:34347] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/wp-conflg.php"] [unique_id "aZ9P0pvL1wp7EOGdesz_CQAAANQ"]
[Thu Feb 26 03:38:58.701507 2026] [:error] [pid 9702:tid 9710] [client 85.203.23.106:58953] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/freeform/"] [unique_id "aZ9P0pvL1wp7EOGdesz_DwAAAMQ"]
[Thu Feb 26 03:38:58.885663 2026] [:error] [pid 9702:tid 9730] [client 85.203.23.105:32209] [client 85.203.23.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/autoload_classmap.php"] [unique_id "aZ9P0pvL1wp7EOGdesz_EQAAANg"]
[Thu Feb 26 03:38:59.080108 2026] [:error] [pid 9589:tid 9664] [client 85.203.23.65:49473] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/v.php"] [unique_id "aZ9P06BuBxYiI1p-njSJtAAAAIs"]
[Thu Feb 26 03:38:59.309437 2026] [:error] [pid 9702:tid 9717] [client 85.203.23.73:41915] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/chosen.php"] [unique_id "aZ9P05vL1wp7EOGdesz_FQAAAMs"]
[Thu Feb 26 03:38:59.497429 2026] [:error] [pid 9589:tid 9654] [client 85.203.23.58:34643] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentythree/templates/"] [unique_id "aZ9P06BuBxYiI1p-njSJtwAAAIE"]
[Thu Feb 26 03:38:59.691477 2026] [:error] [pid 9588:tid 9632] [client 85.203.23.77:45715] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/fonts/page.php"] [unique_id "aZ9P0-SfsVC0YxizsTua_AAAAEY"]
[Thu Feb 26 03:38:59.879531 2026] [:error] [pid 9702:tid 9715] [client 85.203.23.85:49129] [client 85.203.23.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/separator/"] [unique_id "aZ9P05vL1wp7EOGdesz_HwAAAMk"]
[Thu Feb 26 03:39:00.063453 2026] [:error] [pid 9587:tid 9606] [client 85.203.23.101:29595] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/webix.php"] [unique_id "aZ9P1PiLfyuakov_VlARDAAAAAk"]
[Thu Feb 26 03:39:05.243960 2026] [:error] [pid 9589:tid 9653] [client 85.203.23.81:25251] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/wp-conflg.php"] [unique_id "aZ9P2aBuBxYiI1p-njSJ0AAAAIA"]
[Thu Feb 26 03:39:05.426526 2026] [:error] [pid 9702:tid 9707] [client 85.203.23.97:22615] [client 85.203.23.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aZ9P2ZvL1wp7EOGdesz_YwAAAME"]
[Thu Feb 26 03:39:05.615938 2026] [:error] [pid 9588:tid 9649] [client 85.203.23.101:35373] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/info.php"] [unique_id "aZ9P2eSfsVC0YxizsTubGAAAAFc"]
[Thu Feb 26 03:39:05.800613 2026] [:error] [pid 9587:tid 9618] [client 85.203.23.102:51827] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-style.php"] [unique_id "aZ9P2fiLfyuakov_VlARKQAAABU"]
[Thu Feb 26 03:39:05.984447 2026] [:error] [pid 9587:tid 9612] [client 85.203.23.71:27779] [client 85.203.23.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/xp.php"] [unique_id "aZ9P2fiLfyuakov_VlARLAAAAA8"]
[Thu Feb 26 03:39:06.175873 2026] [:error] [pid 9588:tid 9626] [client 85.203.23.60:45709] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/admin/skin/base/mixins/about.php"] [unique_id "aZ9P2uSfsVC0YxizsTubGwAAAEA"]
[Thu Feb 26 03:39:06.366079 2026] [:error] [pid 9702:tid 9721] [client 85.203.23.65:30677] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Content/"] [unique_id "aZ9P2pvL1wp7EOGdesz_bwAAAM8"]
[Thu Feb 26 03:39:06.560097 2026] [:error] [pid 9589:tid 9658] [client 85.203.23.54:62529] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "aZ9P2qBuBxYiI1p-njSJ1AAAAIU"]
[Thu Feb 26 03:39:06.743531 2026] [:error] [pid 9702:tid 9724] [client 85.203.23.95:23999] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/min.php"] [unique_id "aZ9P2pvL1wp7EOGdesz_cgAAANI"]
[Thu Feb 26 03:39:06.925943 2026] [:error] [pid 9702:tid 9719] [client 85.203.23.59:50083] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-title/"] [unique_id "aZ9P2pvL1wp7EOGdesz_dQAAAM0"]
[Thu Feb 26 03:39:07.109584 2026] [:error] [pid 9702:tid 9710] [client 85.203.23.84:26841] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "aZ9P25vL1wp7EOGdesz_dwAAAMQ"]
[Thu Feb 26 03:39:12.317142 2026] [:error] [pid 9587:tid 9619] [client 85.203.23.58:55509] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aZ9P4PiLfyuakov_VlARUAAAABY"]
[Thu Feb 26 03:39:12.501198 2026] [:error] [pid 9702:tid 9718] [client 85.203.23.100:46931] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/"] [unique_id "aZ9P4JvL1wp7EOGdesz_lQAAAMw"]
[Thu Feb 26 03:39:47.691024 2026] [:error] [pid 9702:tid 9713] [client 85.203.23.106:56869] [client 85.203.23.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentynineteen/content-"] [unique_id "aZ9QA5vL1wp7EOGdeswATgAAAMc"]
[Thu Feb 26 03:39:47.873579 2026] [:error] [pid 9588:tid 9643] [client 85.203.23.67:55473] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-excerpt-constructor.php"] [unique_id "aZ9QA-SfsVC0YxizsTucCAAAAFE"]
[Thu Feb 26 03:39:48.057298 2026] [:error] [pid 9588:tid 9628] [client 85.203.23.54:36587] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/edit.php"] [unique_id "aZ9QBOSfsVC0YxizsTucCQAAAEI"]
[Thu Feb 26 03:39:48.239444 2026] [:error] [pid 9589:tid 9669] [client 85.203.23.99:46253] [client 85.203.23.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/class-ftp-sockets-more.php"] [unique_id "aZ9QBKBuBxYiI1p-njSKlgAAAJA"]
[Thu Feb 26 03:39:48.420828 2026] [:error] [pid 9589:tid 9661] [client 85.203.23.56:33011] [client 85.203.23.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/options-privacy-pic.php"] [unique_id "aZ9QBKBuBxYiI1p-njSKlwAAAIg"]
[Thu Feb 26 03:39:48.600319 2026] [:error] [pid 9589:tid 9671] [client 85.203.23.78:21429] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/post-template-soap.php"] [unique_id "aZ9QBKBuBxYiI1p-njSKmAAAAJI"]
[Thu Feb 26 03:39:48.782743 2026] [:error] [pid 9588:tid 9635] [client 85.203.23.75:21735] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aZ9QBOSfsVC0YxizsTucDgAAAEk"]
[Thu Feb 26 03:39:48.966537 2026] [:error] [pid 9702:tid 9729] [client 85.203.23.93:35757] [client 85.203.23.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/privacy-beta.php"] [unique_id "aZ9QBJvL1wp7EOGdeswAUwAAANc"]
[Thu Feb 26 03:39:49.149653 2026] [:error] [pid 9588:tid 9637] [client 85.203.23.63:64929] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/particle-effect-three/"] [unique_id "aZ9QBeSfsVC0YxizsTucEAAAAEs"]
[Thu Feb 26 03:39:49.332030 2026] [:error] [pid 9702:tid 9727] [client 85.203.23.54:24741] [client 85.203.23.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/magazineposts/"] [unique_id "aZ9QBZvL1wp7EOGdeswAVgAAANU"]
[Thu Feb 26 03:39:49.514207 2026] [:error] [pid 9588:tid 9647] [client 85.203.23.62:35879] [client 85.203.23.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/landing-page-hero/"] [unique_id "aZ9QBeSfsVC0YxizsTucEQAAAFU"]
[Thu Feb 26 03:39:49.698471 2026] [:error] [pid 9589:tid 9673] [client 85.203.23.73:57647] [client 85.203.23.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/revslider/templates/le-chef-la-carte/"] [unique_id "aZ9QBaBuBxYiI1p-njSKngAAAJQ"]
[Thu Feb 26 03:39:49.882310 2026] [:error] [pid 9588:tid 9646] [client 85.203.23.95:49657] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/flatco/assets/"] [unique_id "aZ9QBeSfsVC0YxizsTucFAAAAFQ"]
[Thu Feb 26 03:39:50.069106 2026] [:error] [pid 9588:tid 9640] [client 85.203.23.95:56713] [client 85.203.23.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/flatco/framework/"] [unique_id "aZ9QBuSfsVC0YxizsTucFgAAAE4"]
[Thu Feb 26 03:39:50.253771 2026] [:error] [pid 9589:tid 9670] [client 85.203.23.98:30979] [client 85.203.23.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/Avada/woocommerce/checkout/"] [unique_id "aZ9QBqBuBxYiI1p-njSKoAAAAJE"]
[Thu Feb 26 03:39:55.436532 2026] [:error] [pid 9589:tid 9667] [client 85.203.23.75:60585] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/target/admin/"] [unique_id "aZ9QC6BuBxYiI1p-njSKqgAAAI4"]
[Thu Feb 26 03:39:55.618111 2026] [:error] [pid 9589:tid 9662] [client 85.203.23.90:49647] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/dt-the7/inc/extensions/options-framework/js/"] [unique_id "aZ9QC6BuBxYiI1p-njSKrAAAAIk"]
[Thu Feb 26 03:39:55.803828 2026] [:error] [pid 9588:tid 9643] [client 85.203.23.90:63159] [client 85.203.23.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aZ9QC-SfsVC0YxizsTucJAAAAFE"]
[Thu Feb 26 03:39:55.987995 2026] [:error] [pid 9589:tid 9673] [client 85.203.23.84:60763] [client 85.203.23.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "aZ9QC6BuBxYiI1p-njSKrQAAAJQ"]
[Thu Feb 26 03:40:01.179706 2026] [:error] [pid 9589:tid 9662] [client 85.203.23.58:30999] [client 85.203.23.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/"] [unique_id "aZ9QEaBuBxYiI1p-njSKuwAAAIk"]
[Thu Feb 26 03:40:01.369545 2026] [:error] [pid 9588:tid 9640] [client 85.203.23.77:62095] [client 85.203.23.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-includes.php"] [unique_id "aZ9QEeSfsVC0YxizsTucMQAAAE4"]
[Thu Feb 26 03:40:01.567738 2026] [:error] [pid 9702:tid 9724] [client 85.203.23.80:35101] [client 85.203.23.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-rocket-config/wp-login.php"] [unique_id "aZ9QEZvL1wp7EOGdeswAlAAAANI"]
[Thu Feb 26 03:40:01.789152 2026] [:error] [pid 9702:tid 9728] [client 85.203.23.59:53049] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/moon.php"] [unique_id "aZ9QEZvL1wp7EOGdeswAlQAAANY"]
[Thu Feb 26 03:40:01.973042 2026] [:error] [pid 9702:tid 9707] [client 85.203.23.65:42995] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/cloud.php"] [unique_id "aZ9QEZvL1wp7EOGdeswAlwAAAME"]
[Thu Feb 26 03:40:07.161857 2026] [:error] [pid 9702:tid 9719] [client 85.203.23.69:35035] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/404.php"] [unique_id "aZ9QF5vL1wp7EOGdeswAogAAAM0"]
[Thu Feb 26 03:40:07.354787 2026] [:error] [pid 9588:tid 9636] [client 85.203.23.63:40859] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/social-links/atomlib.php"] [unique_id "aZ9QF-SfsVC0YxizsTucOAAAAEo"]
[Thu Feb 26 03:40:17.562939 2026] [:error] [pid 9587:tid 9618] [client 85.203.23.99:64981] [client 85.203.23.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cherry-plugin-master/includes/makeasmtp.php"] [unique_id "aZ9QIfiLfyuakov_VlAR7wAAABU"]
[Thu Feb 26 03:40:17.750642 2026] [:error] [pid 9589:tid 9662] [client 85.203.23.65:51851] [client 85.203.23.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aZ9QIaBuBxYiI1p-njSLBAAAAIk"]
[Thu Feb 26 03:40:17.949834 2026] [:error] [pid 9702:tid 9727] [client 85.203.23.59:45497] [client 85.203.23.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/lock.php"] [unique_id "aZ9QIZvL1wp7EOGdeswAzwAAANU"]
[Thu Feb 26 03:40:19.145672 2026] [:error] [pid 9702:tid 9707] [client 85.203.23.69:61337] [client 85.203.23.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php"] [unique_id "aZ9QI5vL1wp7EOGdeswA2QAAAME"]
[Thu Feb 26 03:40:19.330249 2026] [:error] [pid 9589:tid 9674] [client 85.203.23.66:21831] [client 85.203.23.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wtu_gagal.php"] [unique_id "aZ9QI6BuBxYiI1p-njSLEQAAAJU"]
[Thu Feb 26 03:40:19.513196 2026] [:error] [pid 9588:tid 9647] [client 85.203.23.83:23447] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pgaas/"] [unique_id "aZ9QI-SfsVC0YxizsTucWwAAAFU"]
[Thu Feb 26 03:40:24.700488 2026] [:error] [pid 9702:tid 9719] [client 85.203.23.102:42171] [client 85.203.23.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "aZ9QKJvL1wp7EOGdeswA6QAAAM0"]
[Thu Feb 26 03:40:24.883363 2026] [:error] [pid 9589:tid 9675] [client 85.203.23.81:64247] [client 85.203.23.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php"] [unique_id "aZ9QKKBuBxYiI1p-njSLJQAAAJY"]
[Thu Feb 26 03:40:30.071493 2026] [:error] [pid 9702:tid 9723] [client 85.203.23.63:31213] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aZ9QLpvL1wp7EOGdeswA-gAAANE"]
[Thu Feb 26 03:40:30.253754 2026] [:error] [pid 9702:tid 9711] [client 85.203.23.85:47311] [client 85.203.23.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wophq/"] [unique_id "aZ9QLpvL1wp7EOGdeswA_AAAAMU"]
[Thu Feb 26 03:40:40.437247 2026] [:error] [pid 9587:tid 9613] [client 85.203.23.63:49577] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-page-dropdown-first.php"] [unique_id "aZ9QOPiLfyuakov_VlASFwAAABA"]
[Thu Feb 26 03:40:40.623625 2026] [:error] [pid 9587:tid 9619] [client 85.203.23.61:26409] [client 85.203.23.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-tag-cloud-new.php"] [unique_id "aZ9QOPiLfyuakov_VlASGwAAABY"]
[Thu Feb 26 03:40:40.816150 2026] [:error] [pid 9587:tid 9614] [client 85.203.23.83:60525] [client 85.203.23.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/zer.php"] [unique_id "aZ9QOPiLfyuakov_VlASHAAAABE"]
[Thu Feb 26 03:40:40.999177 2026] [:error] [pid 9588:tid 9639] [client 85.203.23.67:31747] [client 85.203.23.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/autoload_classmap.php"] [unique_id "aZ9QOOSfsVC0YxizsTuciwAAAE0"]
[Thu Feb 26 03:40:41.191169 2026] [:error] [pid 9588:tid 9644] [client 85.203.23.75:63233] [client 85.203.23.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/screen-event.php"] [unique_id "aZ9QOeSfsVC0YxizsTucjQAAAFI"]
[Thu Feb 26 03:40:41.379511 2026] [:error] [pid 9702:tid 9720] [client 85.203.23.101:32899] [client 85.203.23.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/site-info-client.php"] [unique_id "aZ9QOZvL1wp7EOGdeswBNgAAAM4"]
[Thu Feb 26 03:40:41.607224 2026] [:error] [pid 9587:tid 9604] [client 85.203.23.104:35583] [client 85.203.23.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-mails.php"] [unique_id "aZ9QOfiLfyuakov_VlASIAAAAAc"]
[Thu Feb 26 03:40:41.794114 2026] [:error] [pid 9702:tid 9723] [client 85.203.23.82:57343] [client 85.203.23.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZ9QOZvL1wp7EOGdeswBOwAAANE"]
[Thu Feb 26 03:40:41.978966 2026] [:error] [pid 9702:tid 9718] [client 85.203.23.60:27611] [client 85.203.23.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/dofault.php"] [unique_id "aZ9QOZvL1wp7EOGdeswBPAAAAMw"]
[Thu Feb 26 03:40:47.163042 2026] [:error] [pid 9589:tid 9665] [client 85.203.23.100:30033] [client 85.203.23.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/radio.php"] [unique_id "aZ9QP6BuBxYiI1p-njSLfgAAAIw"]
[Thu Feb 26 03:40:47.359207 2026] [:error] [pid 9702:tid 9712] [client 85.203.23.71:58321] [client 85.203.23.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aZ9QP5vL1wp7EOGdeswBUwAAAMY"]
[Thu Feb 26 03:40:52.545132 2026] [:error] [pid 9587:tid 9606] [client 85.203.23.78:29075] [client 85.203.23.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Iitespeed-cache/drive.php"] [unique_id "aZ9QRPiLfyuakov_VlASPgAAAAk"]
[Thu Feb 26 03:40:52.728758 2026] [:error] [pid 9589:tid 9668] [client 85.203.23.63:32015] [client 85.203.23.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/images/selam.php"] [unique_id "aZ9QRKBuBxYiI1p-njSLkQAAAI8"]
[Thu Feb 26 03:40:52.911093 2026] [:error] [pid 9588:tid 9645] [client 85.203.23.70:61833] [client 85.203.23.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aZ9QROSfsVC0YxizsTucqwAAAFM"]
[Thu Feb 26 03:40:53.103358 2026] [:error] [pid 9589:tid 9663] [client 85.203.23.68:28731] [client 85.203.23.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "aZ9QRaBuBxYiI1p-njSLlAAAAIo"]
[Thu Feb 26 04:25:42.273161 2026] [autoindex:error] [pid 9589:tid 9662] [client 87.106.83.88:63781] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Feb 26 06:47:41.888830 2026] [autoindex:error] [pid 9702:tid 9709] [client 86.48.2.117:57341] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Feb 26 07:13:17.543844 2026] [:error] [pid 54991:tid 55023] [client 43.165.65.180:44212] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ-CDd4Zx-mJ8gbRB2hMGAAAAEM"]
[Thu Feb 26 10:57:03.119541 2026] [:error] [pid 55618:tid 55623] [client 147.135.213.107:35516] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aZ-2fx61Vrh12f_8oWQ84wAAAQI"]
[Thu Feb 26 10:57:05.859151 2026] [:error] [pid 55051:tid 55068] [client 147.135.213.107:50362] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aZ-2gQmK1w2kZvh5eLHFlQAAAI4"]
[Thu Feb 26 10:57:08.446101 2026] [:error] [pid 3883:tid 3902] [client 147.135.213.107:50366] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aZ-2hOA33x90V6yYHagMJAAAAVA"]
[Thu Feb 26 10:57:11.534696 2026] [:error] [pid 55051:tid 55066] [client 147.135.213.107:50882] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aZ-2hwmK1w2kZvh5eLHFlwAAAIw"]
[Thu Feb 26 10:57:14.615419 2026] [:error] [pid 25311:tid 25324] [client 147.135.213.107:50884] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aZ-2itfdM__yZAgJFStYnAAAAYo"]
[Thu Feb 26 10:57:17.481060 2026] [:error] [pid 55618:tid 55624] [client 147.135.213.107:50894] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aZ-2jR61Vrh12f_8oWQ89QAAAQM"]
[Thu Feb 26 10:57:20.140102 2026] [:error] [pid 3883:tid 3899] [client 147.135.213.107:50896] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aZ-2kOA33x90V6yYHagMNAAAAU0"]
[Thu Feb 26 10:57:23.100266 2026] [:error] [pid 25311:tid 25320] [client 147.135.213.107:52914] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aZ-2k9fdM__yZAgJFStYyAAAAYY"]
[Thu Feb 26 10:57:25.581937 2026] [:error] [pid 55122:tid 55135] [client 147.135.213.107:52920] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aZ-2lYLiR0OfjFxvcN-ZqwAAAMs"]
[Thu Feb 26 10:57:28.192162 2026] [:error] [pid 3883:tid 3886] [client 147.135.213.107:52936] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aZ-2mOA33x90V6yYHagMPwAAAUA"]
[Thu Feb 26 10:57:31.021485 2026] [:error] [pid 55122:tid 55140] [client 147.135.213.107:52940] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aZ-2m4LiR0OfjFxvcN-ZsAAAANA"]
[Thu Feb 26 10:57:33.836505 2026] [:error] [pid 3883:tid 3907] [client 147.135.213.107:47822] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aZ-2neA33x90V6yYHagMSQAAAVU"]
[Thu Feb 26 10:57:36.442098 2026] [:error] [pid 3883:tid 3908] [client 147.135.213.107:47836] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aZ-2oOA33x90V6yYHagMTwAAAVY"]
[Thu Feb 26 10:57:39.266136 2026] [:error] [pid 25311:tid 25330] [client 147.135.213.107:47838] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aZ-2o9fdM__yZAgJFStY-wAAAZA"]
[Thu Feb 26 10:57:42.061409 2026] [:error] [pid 25311:tid 25326] [client 147.135.213.107:37456] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aZ-2ptfdM__yZAgJFStZBwAAAYw"]
[Thu Feb 26 10:57:44.809519 2026] [:error] [pid 25311:tid 25317] [client 147.135.213.107:37470] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aZ-2qNfdM__yZAgJFStZEAAAAYM"]
[Thu Feb 26 10:57:47.441296 2026] [:error] [pid 25311:tid 25317] [client 147.135.213.107:37482] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aZ-2q9fdM__yZAgJFStZHQAAAYM"]
[Thu Feb 26 10:57:49.936156 2026] [:error] [pid 3883:tid 3896] [client 147.135.213.107:37484] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aZ-2reA33x90V6yYHagMYQAAAUo"]
[Thu Feb 26 10:57:52.620965 2026] [:error] [pid 55618:tid 55626] [client 147.135.213.107:54934] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aZ-2sB61Vrh12f_8oWQ9DQAAAQU"]
[Thu Feb 26 10:57:55.269289 2026] [:error] [pid 55122:tid 55141] [client 147.135.213.107:54948] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aZ-2s4LiR0OfjFxvcN-ZwAAAANE"]
[Thu Feb 26 10:57:57.880643 2026] [:error] [pid 25311:tid 25320] [client 147.135.213.107:54964] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aZ-2tdfdM__yZAgJFStZMgAAAYY"]
[Thu Feb 26 10:58:33.167073 2026] [:error] [pid 25311:tid 25328] [client 147.135.213.107:54970] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aZ-22dfdM__yZAgJFStZuQAAAY4"]
[Thu Feb 26 10:58:35.651057 2026] [:error] [pid 55618:tid 55640] [client 147.135.213.107:55286] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aZ-22x61Vrh12f_8oWQ9OgAAARM"]
[Thu Feb 26 10:58:38.165010 2026] [:error] [pid 25311:tid 25316] [client 147.135.213.107:55290] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aZ-23tfdM__yZAgJFStZwgAAAYI"]
[Thu Feb 26 10:58:40.476089 2026] [:error] [pid 25311:tid 25332] [client 147.135.213.107:55304] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aZ-24NfdM__yZAgJFStZzQAAAZI"]
[Thu Feb 26 10:58:42.869098 2026] [:error] [pid 25311:tid 25324] [client 147.135.213.107:50424] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aZ-24tfdM__yZAgJFStZ4AAAAYo"]
[Thu Feb 26 10:58:45.403314 2026] [:error] [pid 55122:tid 55144] [client 147.135.213.107:50436] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aZ-25YLiR0OfjFxvcN-Z9AAAANQ"]
[Thu Feb 26 10:58:47.795086 2026] [:error] [pid 55618:tid 55639] [client 147.135.213.107:50444] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aZ-25x61Vrh12f_8oWQ9TAAAARI"]
[Thu Feb 26 10:58:50.190501 2026] [:error] [pid 3883:tid 3894] [client 147.135.213.107:50450] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aZ-26uA33x90V6yYHagNBgAAAUg"]
[Thu Feb 26 10:58:52.630185 2026] [:error] [pid 25311:tid 25337] [client 147.135.213.107:60334] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aZ-27NfdM__yZAgJFStZ9QAAAZc"]
[Thu Feb 26 10:58:55.034241 2026] [:error] [pid 25311:tid 25324] [client 147.135.213.107:60350] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aZ-279fdM__yZAgJFStZ_QAAAYo"]
[Thu Feb 26 10:58:57.457759 2026] [:error] [pid 25311:tid 25334] [client 147.135.213.107:60360] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aZ-28dfdM__yZAgJFStaBQAAAZQ"]
[Thu Feb 26 10:58:59.872505 2026] [:error] [pid 3883:tid 3898] [client 147.135.213.107:60374] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aZ-28-A33x90V6yYHagNLwAAAUw"]
[Thu Feb 26 10:59:02.183678 2026] [:error] [pid 25311:tid 25317] [client 147.135.213.107:48064] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aZ-29tfdM__yZAgJFStaKwAAAYM"]
[Thu Feb 26 10:59:04.567974 2026] [:error] [pid 25311:tid 25321] [client 147.135.213.107:48078] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aZ-2-NfdM__yZAgJFStaNAAAAYc"]
[Thu Feb 26 10:59:07.042713 2026] [:error] [pid 55122:tid 55142] [client 147.135.213.107:48080] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aZ-2-4LiR0OfjFxvcN-Z-wAAANI"]
[Thu Feb 26 10:59:09.347571 2026] [:error] [pid 54990:tid 55008] [client 147.135.213.107:48104] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aZ-2_Xtr2qmt_mBhH2zMAQAAAA8"]
[Thu Feb 26 10:59:11.916637 2026] [:error] [pid 55618:tid 55642] [client 147.135.213.107:50912] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aZ-2_x61Vrh12f_8oWQ9WQAAARU"]
[Thu Feb 26 10:59:14.341855 2026] [:error] [pid 3883:tid 3886] [client 147.135.213.107:50924] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aZ-3AuA33x90V6yYHagNRQAAAUA"]
[Thu Feb 26 10:59:16.736601 2026] [:error] [pid 55051:tid 55068] [client 147.135.213.107:50932] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aZ-3BAmK1w2kZvh5eLHF7QAAAI4"]
[Thu Feb 26 10:59:19.209782 2026] [:error] [pid 3883:tid 3895] [client 147.135.213.107:50942] [client 147.135.213.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aZ-3B-A33x90V6yYHagNTQAAAUk"]
[Thu Feb 26 11:09:51.151928 2026] [:error] [pid 25311:tid 25319] [client 43.159.145.153:43404] [client 43.159.145.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ-5f9fdM__yZAgJFStizgAAAYU"]
[Thu Feb 26 12:12:04.433836 2026] [:error] [pid 25311:tid 25328] [client 51.75.151.149:61631] [client 51.75.151.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss.php"] [unique_id "aZ_IFNfdM__yZAgJFSuYMwAAAY4"]
[Thu Feb 26 14:26:35.172406 2026] [:error] [pid 25311:tid 25329] [client 170.106.140.110:34304] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ_nm9fdM__yZAgJFSsDegAAAY8"]
[Thu Feb 26 14:49:08.456776 2026] [:error] [pid 55618:tid 55628] [client 175.6.217.4:40377] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aZ_s5B61Vrh12f_8oWSULgAAAQc"]
[Thu Feb 26 16:41:27.789332 2026] [:error] [pid 55122:tid 55143] [client 123.243.193.153:43744] [client 123.243.193.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.243.193.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaAHN4LiR0OfjFxvcN_magAAANM"]
[Thu Feb 26 16:55:29.948223 2026] [:error] [pid 55051:tid 55055] [client 146.59.46.29:42682] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aaAKgQmK1w2kZvh5eLEVpAAAAIE"]
[Thu Feb 26 16:55:32.653184 2026] [:error] [pid 3883:tid 3897] [client 146.59.46.29:34148] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aaAKhOA33x90V6yYHajjMQAAAUs"]
[Thu Feb 26 16:55:33.619301 2026] [:error] [pid 25311:tid 25321] [client 146.59.46.29:57530] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aaAKhdfdM__yZAgJFStJ8QAAAYc"]
[Thu Feb 26 16:55:36.587006 2026] [:error] [pid 55051:tid 55063] [client 146.59.46.29:57542] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aaAKiAmK1w2kZvh5eLEVqwAAAIk"]
[Thu Feb 26 16:55:36.962307 2026] [:error] [pid 25311:tid 25323] [client 146.59.46.29:57548] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aaAKiNfdM__yZAgJFStJ-wAAAYk"]
[Thu Feb 26 16:55:39.848022 2026] [:error] [pid 3883:tid 3908] [client 146.59.46.29:53774] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aaAKi-A33x90V6yYHajjcQAAAVY"]
[Thu Feb 26 16:55:40.767596 2026] [:error] [pid 20419:tid 20425] [client 146.59.46.29:53760] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aaAKjO3DVDvMfTYYUBXoXgAAAcM"]
[Thu Feb 26 16:55:43.111962 2026] [:error] [pid 25311:tid 25323] [client 146.59.46.29:53786] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aaAKj9fdM__yZAgJFStKDgAAAYk"]
[Thu Feb 26 16:55:43.331490 2026] [:error] [pid 25311:tid 25333] [client 146.59.46.29:53800] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aaAKj9fdM__yZAgJFStKEQAAAZM"]
[Thu Feb 26 16:55:44.053085 2026] [:error] [pid 25311:tid 25326] [client 146.59.46.29:53812] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aaAKkNfdM__yZAgJFStKFAAAAYw"]
[Thu Feb 26 16:55:47.205860 2026] [:error] [pid 54990:tid 55009] [client 146.59.46.29:53828] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aaAKk3tr2qmt_mBhH2z1ZAAAABA"]
[Thu Feb 26 16:55:47.652205 2026] [:error] [pid 54990:tid 54995] [client 146.59.46.29:53820] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aaAKk3tr2qmt_mBhH2z1ZQAAAAI"]
[Thu Feb 26 16:55:48.995801 2026] [:error] [pid 3883:tid 3903] [client 146.59.46.29:36168] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aaAKlOA33x90V6yYHajjpQAAAVE"]
[Thu Feb 26 16:55:50.431334 2026] [:error] [pid 55122:tid 55127] [client 146.59.46.29:36174] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aaAKloLiR0OfjFxvcN_p-AAAAMM"]
[Thu Feb 26 16:55:51.051023 2026] [:error] [pid 3883:tid 3901] [client 146.59.46.29:36178] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aaAKl-A33x90V6yYHajjsAAAAU8"]
[Thu Feb 26 16:55:53.382097 2026] [:error] [pid 25311:tid 25333] [client 146.59.46.29:36180] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aaAKmdfdM__yZAgJFStKIQAAAZM"]
[Thu Feb 26 16:55:54.059406 2026] [:error] [pid 25311:tid 25327] [client 146.59.46.29:36194] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aaAKmtfdM__yZAgJFStKJwAAAY0"]
[Thu Feb 26 16:55:56.523600 2026] [:error] [pid 55618:tid 55635] [client 146.59.46.29:36200] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aaAKnB61Vrh12f_8oWS0TwAAAQ4"]
[Thu Feb 26 16:55:58.044625 2026] [:error] [pid 55051:tid 55057] [client 146.59.46.29:36212] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aaAKngmK1w2kZvh5eLEV2gAAAIM"]
[Thu Feb 26 16:55:59.580509 2026] [:error] [pid 20419:tid 20438] [client 146.59.46.29:42366] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaAKn-3DVDvMfTYYUBXofgAAAdA"]
[Thu Feb 26 16:56:01.170137 2026] [:error] [pid 55051:tid 55074] [client 146.59.46.29:42378] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aaAKoQmK1w2kZvh5eLEV7gAAAJQ"]
[Thu Feb 26 16:56:02.161596 2026] [:error] [pid 20419:tid 20430] [client 146.59.46.29:42386] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aaAKou3DVDvMfTYYUBXogAAAAcg"]
[Thu Feb 26 16:56:04.027222 2026] [:error] [pid 55051:tid 55069] [client 146.59.46.29:42396] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaAKpAmK1w2kZvh5eLEV9AAAAI8"]
[Thu Feb 26 16:56:06.742855 2026] [:error] [pid 55051:tid 55062] [client 146.59.46.29:42408] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aaAKpgmK1w2kZvh5eLEV9gAAAIg"]
[Thu Feb 26 16:56:07.900947 2026] [:error] [pid 55618:tid 55628] [client 146.59.46.29:42436] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aaAKpx61Vrh12f_8oWS0XgAAAQc"]
[Thu Feb 26 16:56:08.209867 2026] [:error] [pid 3883:tid 3890] [client 146.59.46.29:42424] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaAKqOA33x90V6yYHajj3wAAAUQ"]
[Thu Feb 26 16:56:11.658656 2026] [:error] [pid 20419:tid 20437] [client 146.59.46.29:33812] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aaAKq-3DVDvMfTYYUBXokgAAAc8"]
[Thu Feb 26 16:56:13.905605 2026] [:error] [pid 55051:tid 55060] [client 146.59.46.29:33818] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaAKrQmK1w2kZvh5eLEWCwAAAIY"]
[Thu Feb 26 16:56:14.367744 2026] [:error] [pid 55051:tid 55072] [client 146.59.46.29:33822] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaAKrgmK1w2kZvh5eLEWDAAAAJI"]
[Thu Feb 26 16:56:14.906580 2026] [:error] [pid 55051:tid 55059] [client 146.59.46.29:33838] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaAKrgmK1w2kZvh5eLEWDgAAAIU"]
[Thu Feb 26 16:56:18.024911 2026] [:error] [pid 54990:tid 54997] [client 146.59.46.29:33850] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aaAKsntr2qmt_mBhH2z1ggAAAAQ"]
[Thu Feb 26 16:56:18.275857 2026] [:error] [pid 55618:tid 55623] [client 146.59.46.29:33846] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaAKsh61Vrh12f_8oWS0cgAAAQI"]
[Thu Feb 26 16:56:19.362090 2026] [:error] [pid 55051:tid 55070] [client 146.59.46.29:34738] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aaAKswmK1w2kZvh5eLEWIwAAAJA"]
[Thu Feb 26 16:56:21.352632 2026] [:error] [pid 55051:tid 55064] [client 146.59.46.29:34744] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aaAKtQmK1w2kZvh5eLEWJgAAAIo"]
[Thu Feb 26 16:56:23.412165 2026] [:error] [pid 55051:tid 55067] [client 146.59.46.29:34776] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aaAKtwmK1w2kZvh5eLEWNQAAAI0"]
[Thu Feb 26 16:56:23.449166 2026] [:error] [pid 3883:tid 3895] [client 146.59.46.29:34760] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aaAKt-A33x90V6yYHajkEgAAAUk"]
[Thu Feb 26 16:56:26.668449 2026] [:error] [pid 55051:tid 55077] [client 146.59.46.29:34800] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaAKugmK1w2kZvh5eLEWQwAAAJc"]
[Thu Feb 26 16:56:26.725827 2026] [:error] [pid 55051:tid 55056] [client 146.59.46.29:34788] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aaAKugmK1w2kZvh5eLEWRAAAAII"]
[Thu Feb 26 16:56:26.782985 2026] [:error] [pid 55051:tid 55057] [client 146.59.46.29:34814] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaAKugmK1w2kZvh5eLEWRQAAAIM"]
[Thu Feb 26 16:56:49.313836 2026] [:error] [pid 3883:tid 3901] [client 146.59.46.29:55884] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaAK0eA33x90V6yYHajkZQAAAU8"]
[Thu Feb 26 16:56:50.194819 2026] [:error] [pid 3883:tid 3900] [client 146.59.46.29:55888] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaAK0uA33x90V6yYHajkagAAAU4"]
[Thu Feb 26 16:56:50.399070 2026] [:error] [pid 3883:tid 3896] [client 146.59.46.29:55896] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaAK0uA33x90V6yYHajkawAAAUo"]
[Thu Feb 26 16:56:53.069070 2026] [:error] [pid 55122:tid 55131] [client 146.59.46.29:55898] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaAK1YLiR0OfjFxvcN_qKQAAAMc"]
[Thu Feb 26 16:56:55.297193 2026] [:error] [pid 25311:tid 25320] [client 146.59.46.29:55912] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaAK19fdM__yZAgJFStKbgAAAYY"]
[Thu Feb 26 16:56:55.379354 2026] [:error] [pid 54991:tid 55039] [client 146.59.46.29:55914] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaAK194Zx-mJ8gbRB2iqiwAAAFM"]
[Thu Feb 26 16:56:58.323613 2026] [:error] [pid 55051:tid 55054] [client 146.59.46.29:43032] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaAK2gmK1w2kZvh5eLEWkQAAAIA"]
[Thu Feb 26 16:56:58.418258 2026] [:error] [pid 55051:tid 55071] [client 146.59.46.29:43048] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaAK2gmK1w2kZvh5eLEWkgAAAJE"]
[Thu Feb 26 16:56:59.272386 2026] [:error] [pid 54990:tid 54993] [client 146.59.46.29:43056] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaAK23tr2qmt_mBhH2z1mwAAAAA"]
[Thu Feb 26 16:57:01.403531 2026] [:error] [pid 55618:tid 55645] [client 146.59.46.29:43058] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaAK3R61Vrh12f_8oWS0mAAAARg"]
[Thu Feb 26 16:57:03.335469 2026] [:error] [pid 55122:tid 55129] [client 146.59.46.29:43064] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aaAK34LiR0OfjFxvcN_qMAAAAMU"]
[Thu Feb 26 16:57:03.706700 2026] [:error] [pid 55051:tid 55073] [client 146.59.46.29:43078] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaAK3wmK1w2kZvh5eLEWmQAAAJM"]
[Thu Feb 26 16:57:04.372420 2026] [:error] [pid 54990:tid 55017] [client 146.59.46.29:43084] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaAK4Htr2qmt_mBhH2z1oQAAABg"]
[Thu Feb 26 16:57:06.825687 2026] [:error] [pid 20419:tid 20444] [client 146.59.46.29:43100] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaAK4u3DVDvMfTYYUBXotAAAAdY"]
[Thu Feb 26 16:57:07.798875 2026] [:error] [pid 20419:tid 20431] [client 146.59.46.29:43102] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaAK4-3DVDvMfTYYUBXouAAAAck"]
[Thu Feb 26 16:57:09.573445 2026] [:error] [pid 54991:tid 55043] [client 146.59.46.29:54734] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaAK5d4Zx-mJ8gbRB2iqkAAAAFc"]
[Thu Feb 26 16:57:11.012699 2026] [:error] [pid 25311:tid 25321] [client 146.59.46.29:54742] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaAK59fdM__yZAgJFStKeQAAAYc"]
[Thu Feb 26 16:57:11.179883 2026] [:error] [pid 54990:tid 55013] [client 146.59.46.29:54746] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaAK53tr2qmt_mBhH2z1pwAAABQ"]
[Thu Feb 26 16:57:12.740237 2026] [:error] [pid 55122:tid 55125] [client 146.59.46.29:54748] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaAK6ILiR0OfjFxvcN_qOgAAAME"]
[Thu Feb 26 16:57:14.252322 2026] [:error] [pid 55051:tid 55066] [client 146.59.46.29:54758] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaAK6gmK1w2kZvh5eLEWqwAAAIw"]
[Thu Feb 26 16:57:14.730670 2026] [:error] [pid 25311:tid 25331] [client 146.59.46.29:54750] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaAK6tfdM__yZAgJFStKegAAAZE"]
[Thu Feb 26 16:57:16.938711 2026] [:error] [pid 55051:tid 55068] [client 146.59.46.29:54766] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aaAK7AmK1w2kZvh5eLEWugAAAI4"]
[Thu Feb 26 16:57:17.452782 2026] [:error] [pid 55051:tid 55073] [client 146.59.46.29:54782] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaAK7QmK1w2kZvh5eLEWuwAAAJM"]
[Thu Feb 26 16:57:17.814764 2026] [:error] [pid 55051:tid 55057] [client 146.59.46.29:54776] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaAK7QmK1w2kZvh5eLEWvgAAAIM"]
[Thu Feb 26 16:57:21.037916 2026] [:error] [pid 55051:tid 55059] [client 146.59.46.29:59750] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaAK8QmK1w2kZvh5eLEWzQAAAIU"]
[Thu Feb 26 16:57:21.150137 2026] [:error] [pid 55051:tid 55068] [client 146.59.46.29:59762] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaAK8QmK1w2kZvh5eLEWzgAAAI4"]
[Thu Feb 26 16:57:24.688332 2026] [:error] [pid 20419:tid 20431] [client 146.59.46.29:59768] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaAK9O3DVDvMfTYYUBXoyAAAAck"]
[Thu Feb 26 16:57:26.192961 2026] [:error] [pid 55618:tid 55638] [client 146.59.46.29:59784] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aaAK9h61Vrh12f_8oWS0rQAAARE"]
[Thu Feb 26 16:57:29.350299 2026] [:error] [pid 25311:tid 25317] [client 146.59.46.29:48928] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaAK-dfdM__yZAgJFStKggAAAYM"]
[Thu Feb 26 16:57:30.732336 2026] [:error] [pid 20419:tid 20427] [client 146.59.46.29:48940] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaAK-u3DVDvMfTYYUBXo3AAAAcU"]
[Thu Feb 26 16:57:32.950329 2026] [:error] [pid 55051:tid 55069] [client 146.59.46.29:48942] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaAK_AmK1w2kZvh5eLEW_gAAAI8"]
[Thu Feb 26 16:57:34.489791 2026] [:error] [pid 55051:tid 55057] [client 146.59.46.29:48954] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaAK_gmK1w2kZvh5eLEXBQAAAIM"]
[Thu Feb 26 16:57:38.930212 2026] [:error] [pid 20419:tid 20422] [client 146.59.46.29:52382] [client 146.59.46.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaALAu3DVDvMfTYYUBXo7AAAAcA"]
[Thu Feb 26 17:12:19.089604 2026] [:error] [pid 3883:tid 3903] [client 2.58.56.91:49202] [client 2.58.56.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "aaAOc-A33x90V6yYHajwdwAAAVE"]
[Thu Feb 26 17:12:19.602865 2026] [:error] [pid 3883:tid 3909] [client 2.58.56.91:52436] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aaAOc-A33x90V6yYHajweQAAAVc"]
[Thu Feb 26 17:12:20.135250 2026] [:error] [pid 54990:tid 55008] [client 2.58.56.91:51199] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aaAOdHtr2qmt_mBhH2z4CgAAAA8"]
[Thu Feb 26 17:12:20.633124 2026] [:error] [pid 55051:tid 55064] [client 2.58.56.91:63964] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aaAOdAmK1w2kZvh5eLEfawAAAIo"]
[Thu Feb 26 17:12:21.161459 2026] [:error] [pid 55618:tid 55624] [client 2.58.56.91:50665] [client 2.58.56.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "aaAOdR61Vrh12f_8oWS4ZwAAAQM"]
[Thu Feb 26 17:12:21.670668 2026] [:error] [pid 54991:tid 55036] [client 2.58.56.91:52870] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/txets.php"] [unique_id "aaAOdd4Zx-mJ8gbRB2itTwAAAFA"]
[Thu Feb 26 17:12:22.201310 2026] [:error] [pid 3883:tid 3898] [client 2.58.56.91:50488] [client 2.58.56.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schallfuns.php"] [unique_id "aaAOduA33x90V6yYHajwfQAAAUw"]
[Thu Feb 26 17:12:22.720732 2026] [:error] [pid 20419:tid 20426] [client 2.58.56.91:53845] [client 2.58.56.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "aaAOdu3DVDvMfTYYUBXtuAAAAcQ"]
[Thu Feb 26 18:00:52.831688 2026] [:error] [pid 25311:tid 25322] [client 43.159.148.221:34558] [client 43.159.148.221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaAZ1NfdM__yZAgJFStmTQAAAYg"]
[Thu Feb 26 18:27:30.122590 2026] [:error] [pid 54990:tid 55015] [client 77.37.92.171:44738] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env.prod"] [unique_id "aaAgEntr2qmt_mBhH2wE8QAAABY"]
[Thu Feb 26 18:27:30.123480 2026] [:error] [pid 3883:tid 3908] [client 77.37.92.171:44698] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/backend/.env.test"] [unique_id "aaAgEuA33x90V6yYHagoqgAAAVY"]
[Thu Feb 26 18:27:30.123717 2026] [:error] [pid 3883:tid 3890] [client 77.37.92.171:44646] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/backend/.env.local"] [unique_id "aaAgEuA33x90V6yYHagoqwAAAUQ"]
[Thu Feb 26 18:27:30.123917 2026] [:error] [pid 3883:tid 3902] [client 77.37.92.171:44684] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env.dev"] [unique_id "aaAgEuA33x90V6yYHagorAAAAVA"]
[Thu Feb 26 18:27:30.124226 2026] [:error] [pid 3883:tid 3898] [client 77.37.92.171:44766] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/backend/.env.prod"] [unique_id "aaAgEuA33x90V6yYHagorQAAAUw"]
[Thu Feb 26 18:27:30.124308 2026] [:error] [pid 54991:tid 55039] [client 77.37.92.171:44784] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/backend/.env.dev"] [unique_id "aaAgEt4Zx-mJ8gbRB2i7egAAAFM"]
[Thu Feb 26 18:27:30.125142 2026] [:error] [pid 20419:tid 20431] [client 77.37.92.171:44772] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "aaAgEu3DVDvMfTYYUBUF3wAAAck"]
[Thu Feb 26 18:27:30.125409 2026] [:error] [pid 3883:tid 3901] [client 77.37.92.171:44736] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/www/.env"] [unique_id "aaAgEuA33x90V6yYHagorgAAAU8"]
[Thu Feb 26 18:27:30.125839 2026] [:error] [pid 3883:tid 3887] [client 77.37.92.171:44836] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env.local"] [unique_id "aaAgEuA33x90V6yYHagorwAAAUE"]
[Thu Feb 26 18:27:30.126154 2026] [:error] [pid 3883:tid 3905] [client 77.37.92.171:44848] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/backend/.env"] [unique_id "aaAgEuA33x90V6yYHagosAAAAVM"]
[Thu Feb 26 18:27:30.126723 2026] [:error] [pid 3883:tid 3897] [client 77.37.92.171:44810] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.env.local"] [unique_id "aaAgEuA33x90V6yYHagosQAAAUs"]
[Thu Feb 26 18:27:30.127038 2026] [:error] [pid 3883:tid 3909] [client 77.37.92.171:44790] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aaAgEuA33x90V6yYHagosgAAAVc"]
[Thu Feb 26 18:27:30.127527 2026] [:error] [pid 3883:tid 3893] [client 77.37.92.171:44662] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env.local"] [unique_id "aaAgEuA33x90V6yYHagoswAAAUc"]
[Thu Feb 26 18:27:30.127911 2026] [:error] [pid 54991:tid 55037] [client 77.37.92.171:44822] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env.prod"] [unique_id "aaAgEt4Zx-mJ8gbRB2i7ewAAAFE"]
[Thu Feb 26 18:27:30.128108 2026] [:error] [pid 3883:tid 3896] [client 77.37.92.171:44672] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.env.prod"] [unique_id "aaAgEuA33x90V6yYHagotAAAAUo"]
[Thu Feb 26 18:27:30.128228 2026] [:error] [pid 3883:tid 3906] [client 77.37.92.171:44788] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.env"] [unique_id "aaAgEuA33x90V6yYHagotQAAAVQ"]
[Thu Feb 26 18:27:30.128535 2026] [:error] [pid 54990:tid 55011] [client 77.37.92.171:44712] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.env.dev"] [unique_id "aaAgEntr2qmt_mBhH2wE8gAAABI"]
[Thu Feb 26 18:27:30.128693 2026] [:error] [pid 3883:tid 3910] [client 77.37.92.171:44854] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "aaAgEuA33x90V6yYHagotgAAAVg"]
[Thu Feb 26 18:27:30.129186 2026] [:error] [pid 3883:tid 3900] [client 77.37.92.171:44744] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/public/.env"] [unique_id "aaAgEuA33x90V6yYHagotwAAAU4"]
[Thu Feb 26 18:27:30.129946 2026] [:error] [pid 3883:tid 3903] [client 77.37.92.171:44856] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env.dev"] [unique_id "aaAgEuA33x90V6yYHagouAAAAVE"]
[Thu Feb 26 18:27:30.130014 2026] [:error] [pid 3883:tid 3886] [client 77.37.92.171:44706] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env.test"] [unique_id "aaAgEuA33x90V6yYHagouQAAAUA"]
[Thu Feb 26 18:27:30.130702 2026] [:error] [pid 3883:tid 3888] [client 77.37.92.171:44724] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/storage/.env"] [unique_id "aaAgEuA33x90V6yYHagougAAAUI"]
[Thu Feb 26 18:27:30.130855 2026] [:error] [pid 3883:tid 3892] [client 77.37.92.171:44760] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.env.test"] [unique_id "aaAgEuA33x90V6yYHagouwAAAUY"]
[Thu Feb 26 18:27:30.130989 2026] [:error] [pid 3883:tid 3891] [client 77.37.92.171:44806] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env.test"] [unique_id "aaAgEuA33x90V6yYHagovAAAAUU"]
[Thu Feb 26 18:49:01.804524 2026] [autoindex:error] [pid 55051:tid 55067] [client 20.194.29.45:16958] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:49:06.870446 2026] [proxy_fcgi:error] [pid 55051:tid 55078] [client 20.194.29.45:16958] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:49:07.010436 2026] [proxy_fcgi:error] [pid 55051:tid 55067] [client 20.194.29.45:16958] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:49:07.149632 2026] [proxy_fcgi:error] [pid 55051:tid 55063] [client 20.194.29.45:16958] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:49:42.413957 2026] [:error] [pid 55051:tid 55069] [client 20.194.29.45:16958] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaAlRgmK1w2kZvh5eLFgaAAAAI8"]
[Thu Feb 26 18:49:42.957888 2026] [:error] [pid 20419:tid 20423] [client 20.194.29.45:17294] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaAlRu3DVDvMfTYYUBUV9gAAAcE"]
[Thu Feb 26 18:49:43.532297 2026] [:error] [pid 20419:tid 20441] [client 20.194.29.45:17310] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaAlR-3DVDvMfTYYUBUWBQAAAdM"]
[Thu Feb 26 18:49:44.079290 2026] [:error] [pid 20419:tid 20433] [client 20.194.29.45:7708] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaAlSO3DVDvMfTYYUBUWEAAAAcs"]
[Thu Feb 26 18:57:57.240431 2026] [:error] [pid 25311:tid 25329] [client 20.48.148.227:53652] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaAnNdfdM__yZAgJFSub8AAAAY8"]
[Thu Feb 26 18:57:58.278124 2026] [autoindex:error] [pid 25311:tid 25323] [client 193.37.32.40:38803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:57:58.455755 2026] [:error] [pid 3883:tid 3903] [client 20.48.148.227:53702] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaAnNuA33x90V6yYHahjtwAAAVE"]
[Thu Feb 26 18:57:58.771735 2026] [autoindex:error] [pid 25311:tid 25334] [client 193.37.32.40:38803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:57:59.232720 2026] [autoindex:error] [pid 25311:tid 25324] [client 193.37.32.40:38803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:57:59.419141 2026] [autoindex:error] [pid 25311:tid 25333] [client 193.37.32.40:38803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:58:01.649770 2026] [:error] [pid 44444:tid 44462] [client 20.48.148.227:53644] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaAnOW2sMNmj-yekUk23ggAAAgw"]
[Thu Feb 26 18:58:04.345873 2026] [:error] [pid 54991:tid 55044] [client 20.48.148.227:53726] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaAnPN4Zx-mJ8gbRB2jOKAAAAFg"]
[Thu Feb 26 18:58:06.093819 2026] [autoindex:error] [pid 20419:tid 20432] [client 193.37.32.13:64271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:58:06.284541 2026] [autoindex:error] [pid 20419:tid 20423] [client 193.37.32.13:64271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:58:06.492512 2026] [autoindex:error] [pid 20419:tid 20445] [client 193.37.32.13:64271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 18:58:06.641741 2026] [autoindex:error] [pid 20419:tid 20432] [client 193.37.32.13:64271] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 21:10:58.603946 2026] [:error] [pid 55122:tid 55128] [client 43.131.243.61:50300] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaBGYoLiR0OfjFxvcN8ugQAAAMQ"]
[Thu Feb 26 21:27:27.684788 2026] [:error] [pid 44444:tid 44467] [client 20.104.19.195:62810] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aaBKP22sMNmj-yekUk0l2AAAAhE"]
[Thu Feb 26 21:27:29.521226 2026] [:error] [pid 54991:tid 55042] [client 20.104.19.195:62765] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aaBKQd4Zx-mJ8gbRB2jpXQAAAFY"]
[Thu Feb 26 21:27:31.196268 2026] [:error] [pid 55618:tid 55633] [client 20.104.19.195:62747] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aaBKQx61Vrh12f_8oWQNUgAAAQw"]
[Thu Feb 26 21:27:32.269287 2026] [:error] [pid 25311:tid 25322] [client 20.104.19.195:62731] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wso.php"] [unique_id "aaBKRNfdM__yZAgJFSvjdAAAAYg"]
[Thu Feb 26 21:27:32.927195 2026] [:error] [pid 55618:tid 55642] [client 20.104.19.195:62830] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inject.php"] [unique_id "aaBKRB61Vrh12f_8oWQNVAAAARU"]
[Thu Feb 26 21:27:35.155203 2026] [:error] [pid 44444:tid 44450] [client 20.104.19.195:62840] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inject.php"] [unique_id "aaBKR22sMNmj-yekUk0l2wAAAgA"]
[Thu Feb 26 21:27:36.532326 2026] [:error] [pid 44444:tid 44456] [client 20.104.19.195:62838] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inject.php"] [unique_id "aaBKSG2sMNmj-yekUk0l4gAAAgY"]
[Thu Feb 26 21:27:37.788441 2026] [:error] [pid 44444:tid 44455] [client 20.104.19.195:62820] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inject.php"] [unique_id "aaBKSW2sMNmj-yekUk0l5QAAAgU"]
[Thu Feb 26 21:27:40.407133 2026] [:error] [pid 44444:tid 44465] [client 20.104.19.195:62158] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aaBKTG2sMNmj-yekUk0l7wAAAg8"]
[Thu Feb 26 21:27:42.594877 2026] [:error] [pid 44444:tid 44457] [client 20.104.19.195:62771] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aaBKTm2sMNmj-yekUk0l8gAAAgc"]
[Thu Feb 26 21:27:43.882652 2026] [:error] [pid 3883:tid 3895] [client 20.104.19.195:62821] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aaBKT-A33x90V6yYHajrjQAAAUk"]
[Thu Feb 26 21:27:44.816174 2026] [:error] [pid 55122:tid 55131] [client 20.104.19.195:62847] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aaBKUILiR0OfjFxvcN8wkAAAAMc"]
[Thu Feb 26 21:27:45.638708 2026] [:error] [pid 25311:tid 25324] [client 20.104.19.195:62842] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pro.php"] [unique_id "aaBKUdfdM__yZAgJFSvjewAAAYo"]
[Thu Feb 26 21:27:46.369237 2026] [:error] [pid 55122:tid 55142] [client 20.104.19.195:62814] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pro.php"] [unique_id "aaBKUoLiR0OfjFxvcN8wlQAAANI"]
[Thu Feb 26 21:27:47.291507 2026] [:error] [pid 44444:tid 44468] [client 20.104.19.195:62742] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pro.php"] [unique_id "aaBKU22sMNmj-yekUk0l_gAAAhI"]
[Thu Feb 26 21:27:48.347246 2026] [:error] [pid 44444:tid 44457] [client 20.104.19.195:62801] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pro.php"] [unique_id "aaBKVG2sMNmj-yekUk0mAQAAAgc"]
[Thu Feb 26 21:27:49.196186 2026] [:error] [pid 3883:tid 3890] [client 20.104.19.195:62775] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aaBKVeA33x90V6yYHajrkAAAAUQ"]
[Thu Feb 26 21:27:50.334068 2026] [:error] [pid 55051:tid 55058] [client 20.104.19.195:62746] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aaBKVgmK1w2kZvh5eLGxywAAAIQ"]
[Thu Feb 26 21:27:50.963929 2026] [:error] [pid 44444:tid 44470] [client 20.104.19.195:62791] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aaBKVm2sMNmj-yekUk0mCgAAAhQ"]
[Thu Feb 26 21:27:52.036267 2026] [:error] [pid 55051:tid 55067] [client 20.104.19.195:62755] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e.php"] [unique_id "aaBKWAmK1w2kZvh5eLGx0wAAAI0"]
[Thu Feb 26 21:27:52.817776 2026] [:error] [pid 55051:tid 55078] [client 20.104.19.195:62151] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aaBKWAmK1w2kZvh5eLGx4QAAAJg"]
[Thu Feb 26 21:27:54.034048 2026] [:error] [pid 44444:tid 44458] [client 20.104.19.195:62135] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aaBKWm2sMNmj-yekUk0mSgAAAgg"]
[Thu Feb 26 21:27:55.269722 2026] [:error] [pid 54991:tid 55034] [client 20.104.19.195:62845] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aaBKW94Zx-mJ8gbRB2jpZwAAAE4"]
[Thu Feb 26 21:27:55.861767 2026] [:error] [pid 44444:tid 44456] [client 20.104.19.195:62796] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aaBKW22sMNmj-yekUk0mUwAAAgY"]
[Thu Feb 26 21:27:56.990057 2026] [:error] [pid 20419:tid 20441] [client 20.104.19.195:62165] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aaBKXO3DVDvMfTYYUBVYbwAAAdM"]
[Thu Feb 26 21:27:57.952156 2026] [:error] [pid 20419:tid 20438] [client 20.104.19.195:62806] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aaBKXe3DVDvMfTYYUBVYcQAAAdA"]
[Thu Feb 26 21:27:58.884736 2026] [:error] [pid 20419:tid 20426] [client 20.104.19.195:62726] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aaBKXu3DVDvMfTYYUBVYcwAAAcQ"]
[Thu Feb 26 21:27:59.673038 2026] [:error] [pid 55051:tid 55072] [client 20.104.19.195:62786] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php"] [unique_id "aaBKXwmK1w2kZvh5eLGyPwAAAJI"]
[Thu Feb 26 21:28:01.330384 2026] [:error] [pid 44444:tid 44452] [client 20.104.19.195:62763] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aaBKYW2sMNmj-yekUk0mXAAAAgI"]
[Thu Feb 26 21:28:02.968436 2026] [:error] [pid 44444:tid 44467] [client 20.104.19.195:62153] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aaBKYm2sMNmj-yekUk0maAAAAhE"]
[Thu Feb 26 21:28:03.967937 2026] [:error] [pid 55051:tid 55057] [client 20.104.19.195:62152] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aaBKYwmK1w2kZvh5eLGyRgAAAIM"]
[Thu Feb 26 21:28:05.148079 2026] [:error] [pid 25311:tid 25322] [client 20.104.19.195:62146] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypass.php"] [unique_id "aaBKZdfdM__yZAgJFSvjhgAAAYg"]
[Thu Feb 26 21:28:06.163355 2026] [:error] [pid 54991:tid 55038] [client 20.104.19.195:62815] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "aaBKZt4Zx-mJ8gbRB2jpdAAAAFI"]
[Thu Feb 26 21:28:08.018984 2026] [:error] [pid 55618:tid 55643] [client 20.104.19.195:62762] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "aaBKaB61Vrh12f_8oWQNXQAAARY"]
[Thu Feb 26 21:28:09.046114 2026] [:error] [pid 54990:tid 55002] [client 20.104.19.195:62754] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "aaBKaXtr2qmt_mBhH2wp2QAAAAk"]
[Thu Feb 26 21:28:09.979940 2026] [:error] [pid 44444:tid 44474] [client 20.104.19.195:62157] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "aaBKaW2sMNmj-yekUk0mgwAAAhg"]
[Thu Feb 26 21:28:10.845122 2026] [:error] [pid 55051:tid 55064] [client 20.104.19.195:62158] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aaBKagmK1w2kZvh5eLGyUgAAAIo"]
[Thu Feb 26 21:28:12.147914 2026] [:error] [pid 55051:tid 55068] [client 20.104.19.195:62748] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aaBKbAmK1w2kZvh5eLGyVQAAAI4"]
[Thu Feb 26 21:28:13.100413 2026] [:error] [pid 54991:tid 55041] [client 20.104.19.195:62828] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aaBKbd4Zx-mJ8gbRB2jpfQAAAFU"]
[Thu Feb 26 21:28:14.688899 2026] [:error] [pid 54991:tid 55024] [client 20.104.19.195:62150] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aaBKbt4Zx-mJ8gbRB2jpggAAAEQ"]
[Thu Feb 26 21:28:16.322830 2026] [:error] [pid 54990:tid 55016] [client 20.104.19.195:62753] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aaBKcHtr2qmt_mBhH2wp2wAAABc"]
[Thu Feb 26 21:28:17.201076 2026] [:error] [pid 3883:tid 3895] [client 20.104.19.195:62780] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aaBKceA33x90V6yYHajrngAAAUk"]
[Thu Feb 26 21:28:18.558941 2026] [:error] [pid 54991:tid 55029] [client 20.104.19.195:62777] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aaBKct4Zx-mJ8gbRB2jpiQAAAEk"]
[Thu Feb 26 21:28:19.382878 2026] [:error] [pid 44444:tid 44467] [client 20.104.19.195:58951] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aaBKc22sMNmj-yekUk0mqQAAAhE"]
[Thu Feb 26 21:28:20.193639 2026] [:error] [pid 20419:tid 20429] [client 20.104.19.195:62807] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaBKdO3DVDvMfTYYUBVYegAAAcc"]
[Thu Feb 26 21:28:21.823535 2026] [:error] [pid 44444:tid 44453] [client 20.104.19.195:62767] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaBKdW2sMNmj-yekUk0mrgAAAgM"]
[Thu Feb 26 21:28:22.851097 2026] [:error] [pid 54990:tid 55004] [client 20.104.19.195:62776] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaBKdntr2qmt_mBhH2wp4QAAAAs"]
[Thu Feb 26 21:28:25.599463 2026] [:error] [pid 55051:tid 55062] [client 20.104.19.195:62783] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaBKeQmK1w2kZvh5eLGyewAAAIg"]
[Thu Feb 26 21:28:40.455232 2026] [:error] [pid 25311:tid 25326] [client 20.104.19.195:62159] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaBKiNfdM__yZAgJFSvjqQAAAYw"]
[Thu Feb 26 21:28:42.059234 2026] [:error] [pid 20419:tid 20442] [client 20.104.19.195:62841] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaBKiu3DVDvMfTYYUBVYogAAAdQ"]
[Thu Feb 26 21:28:43.935681 2026] [:error] [pid 20419:tid 20431] [client 20.104.19.195:62807] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaBKi-3DVDvMfTYYUBVYqAAAAck"]
[Thu Feb 26 21:28:44.861477 2026] [:error] [pid 44444:tid 44472] [client 20.104.19.195:62739] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaBKjG2sMNmj-yekUk0m4AAAAhY"]
[Thu Feb 26 21:28:45.928561 2026] [:error] [pid 25311:tid 25319] [client 20.104.19.195:62826] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaBKjdfdM__yZAgJFSvjqgAAAYU"]
[Thu Feb 26 21:28:46.973808 2026] [:error] [pid 54991:tid 55023] [client 20.104.19.195:62769] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaBKjt4Zx-mJ8gbRB2jpqAAAAEM"]
[Thu Feb 26 21:28:48.208070 2026] [:error] [pid 44444:tid 44450] [client 20.104.19.195:62732] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaBKkG2sMNmj-yekUk0m9QAAAgA"]
[Thu Feb 26 21:28:51.690487 2026] [:error] [pid 54991:tid 55036] [client 20.104.19.195:62104] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaBKk94Zx-mJ8gbRB2jp0QAAAFA"]
[Thu Feb 26 21:28:54.032525 2026] [:error] [pid 44444:tid 44458] [client 20.104.19.195:62738] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaBKlm2sMNmj-yekUk0nHwAAAgg"]
[Thu Feb 26 21:28:55.294652 2026] [:error] [pid 55051:tid 55059] [client 20.104.19.195:62835] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaBKlwmK1w2kZvh5eLGyqQAAAIU"]
[Thu Feb 26 21:28:56.384833 2026] [:error] [pid 55051:tid 55055] [client 20.104.19.195:62774] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaBKmAmK1w2kZvh5eLGyrQAAAIE"]
[Thu Feb 26 21:28:57.566161 2026] [:error] [pid 44444:tid 44456] [client 20.104.19.195:62160] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaBKmW2sMNmj-yekUk0nLQAAAgY"]
[Thu Feb 26 21:28:58.835910 2026] [:error] [pid 44444:tid 44469] [client 20.104.19.195:62761] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aaBKmm2sMNmj-yekUk0nMwAAAhM"]
[Thu Feb 26 21:28:59.852560 2026] [:error] [pid 55051:tid 55069] [client 20.104.19.195:62164] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aaBKmwmK1w2kZvh5eLGytgAAAI8"]
[Thu Feb 26 21:29:01.205492 2026] [:error] [pid 44444:tid 44464] [client 20.104.19.195:62178] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aaBKnW2sMNmj-yekUk0nQgAAAg4"]
[Thu Feb 26 21:29:02.717802 2026] [:error] [pid 55051:tid 55062] [client 20.104.19.195:62168] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aaBKngmK1w2kZvh5eLGyvwAAAIg"]
[Thu Feb 26 21:29:04.101508 2026] [:error] [pid 55051:tid 55068] [client 20.104.19.195:62800] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aaBKoAmK1w2kZvh5eLGyxwAAAI4"]
[Thu Feb 26 21:29:05.030484 2026] [:error] [pid 55051:tid 55071] [client 20.104.19.195:62756] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aaBKoQmK1w2kZvh5eLGy0QAAAJE"]
[Thu Feb 26 21:29:05.919860 2026] [:error] [pid 20419:tid 20446] [client 20.104.19.195:62789] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aaBKoe3DVDvMfTYYUBVYugAAAdg"]
[Thu Feb 26 21:29:07.489005 2026] [:error] [pid 54991:tid 55041] [client 20.104.19.195:62196] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "aaBKo94Zx-mJ8gbRB2jqMAAAAFU"]
[Thu Feb 26 21:29:08.891076 2026] [:error] [pid 44444:tid 44460] [client 20.104.19.195:62824] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aaBKpG2sMNmj-yekUk0nVAAAAgo"]
[Thu Feb 26 21:29:09.913046 2026] [:error] [pid 44444:tid 44455] [client 20.104.19.195:58960] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aaBKpW2sMNmj-yekUk0nXQAAAgU"]
[Thu Feb 26 21:29:10.777981 2026] [:error] [pid 54991:tid 55041] [client 20.104.19.195:62843] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aaBKpt4Zx-mJ8gbRB2jqRQAAAFU"]
[Thu Feb 26 21:29:11.462869 2026] [:error] [pid 55051:tid 55061] [client 20.104.19.195:62798] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c.php"] [unique_id "aaBKpwmK1w2kZvh5eLGy4wAAAIc"]
[Thu Feb 26 21:29:12.642211 2026] [:error] [pid 44444:tid 44455] [client 20.104.19.195:62733] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaBKqG2sMNmj-yekUk0naAAAAgU"]
[Thu Feb 26 21:29:13.510477 2026] [:error] [pid 3883:tid 3895] [client 20.104.19.195:62142] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaBKqeA33x90V6yYHajsOAAAAUk"]
[Thu Feb 26 21:29:14.618475 2026] [:error] [pid 55618:tid 55639] [client 20.104.19.195:62132] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaBKqh61Vrh12f_8oWQNiwAAARI"]
[Thu Feb 26 21:29:15.119915 2026] [:error] [pid 54991:tid 55021] [client 20.104.19.195:62729] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaBKq94Zx-mJ8gbRB2jqUgAAAEE"]
[Thu Feb 26 21:29:15.725385 2026] [:error] [pid 25311:tid 25338] [client 20.104.19.195:62750] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aaBKq9fdM__yZAgJFSvjtQAAAZg"]
[Thu Feb 26 21:29:16.791844 2026] [:error] [pid 20419:tid 20428] [client 20.104.19.195:62757] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aaBKrO3DVDvMfTYYUBVYyQAAAcY"]
[Thu Feb 26 21:29:17.978553 2026] [:error] [pid 3883:tid 3906] [client 20.104.19.195:62163] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aaBKreA33x90V6yYHajsOgAAAVQ"]
[Thu Feb 26 21:29:18.862976 2026] [:error] [pid 3883:tid 3891] [client 20.104.19.195:58958] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aaBKruA33x90V6yYHajsOwAAAUU"]
[Thu Feb 26 21:29:20.902434 2026] [:error] [pid 44444:tid 44471] [client 20.104.19.195:62203] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/u.php"] [unique_id "aaBKsG2sMNmj-yekUk0ncQAAAhU"]
[Thu Feb 26 21:29:22.177377 2026] [:error] [pid 44444:tid 44454] [client 20.104.19.195:62825] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/u.php"] [unique_id "aaBKsm2sMNmj-yekUk0ndwAAAgQ"]
[Thu Feb 26 21:29:23.531949 2026] [:error] [pid 54991:tid 55021] [client 20.104.19.195:62727] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/u.php"] [unique_id "aaBKs94Zx-mJ8gbRB2jqXgAAAEE"]
[Thu Feb 26 21:29:25.310370 2026] [:error] [pid 3883:tid 3898] [client 20.104.19.195:62804] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/u.php"] [unique_id "aaBKteA33x90V6yYHajsPwAAAUw"]
[Thu Feb 26 21:29:26.162824 2026] [:error] [pid 54991:tid 55020] [client 20.104.19.195:62195] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaBKtt4Zx-mJ8gbRB2jqYgAAAEA"]
[Thu Feb 26 21:29:28.471154 2026] [:error] [pid 20419:tid 20430] [client 20.104.19.195:62758] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaBKuO3DVDvMfTYYUBVY0QAAAcg"]
[Thu Feb 26 21:29:29.528021 2026] [:error] [pid 44444:tid 44469] [client 20.104.19.195:62740] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaBKuW2sMNmj-yekUk0niAAAAhM"]
[Thu Feb 26 21:29:30.829272 2026] [:error] [pid 25311:tid 25316] [client 20.104.19.195:62736] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaBKutfdM__yZAgJFSvjugAAAYI"]
[Thu Feb 26 21:29:33.719404 2026] [:error] [pid 55051:tid 55077] [client 20.104.19.195:62812] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "aaBKvQmK1w2kZvh5eLGy-QAAAJc"]
[Thu Feb 26 21:29:34.759489 2026] [:error] [pid 55051:tid 55075] [client 20.104.19.195:62773] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "aaBKvgmK1w2kZvh5eLGy-wAAAJU"]
[Thu Feb 26 21:29:36.090703 2026] [:error] [pid 20419:tid 20424] [client 20.104.19.195:58965] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "aaBKwO3DVDvMfTYYUBVY1AAAAcI"]
[Thu Feb 26 21:29:37.694836 2026] [:error] [pid 55051:tid 55059] [client 20.104.19.195:62148] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "aaBKwQmK1w2kZvh5eLGzAAAAAIU"]
[Thu Feb 26 21:29:52.345055 2026] [:error] [pid 54991:tid 55027] [client 20.104.19.195:62162] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aaBK0N4Zx-mJ8gbRB2jqkwAAAEc"]
[Thu Feb 26 21:29:53.661546 2026] [:error] [pid 3883:tid 3902] [client 20.104.19.195:62093] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aaBK0eA33x90V6yYHajsagAAAVA"]
[Thu Feb 26 21:29:55.205885 2026] [:error] [pid 44444:tid 44471] [client 20.104.19.195:62137] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aaBK022sMNmj-yekUk0noQAAAhU"]
[Thu Feb 26 21:29:56.119945 2026] [:error] [pid 54991:tid 55044] [client 20.104.19.195:62766] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aaBK1N4Zx-mJ8gbRB2jqmgAAAFg"]
[Thu Feb 26 21:29:57.137799 2026] [:error] [pid 54991:tid 55020] [client 20.104.19.195:62108] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.trash7309/index.php"] [unique_id "aaBK1d4Zx-mJ8gbRB2jqnAAAAEA"]
[Thu Feb 26 21:29:58.373791 2026] [:error] [pid 55051:tid 55066] [client 20.104.19.195:62770] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.trash7309/index.php"] [unique_id "aaBK1gmK1w2kZvh5eLGzMgAAAIw"]
[Thu Feb 26 21:29:59.720206 2026] [:error] [pid 55051:tid 55074] [client 20.104.19.195:58945] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.trash7309/index.php"] [unique_id "aaBK1wmK1w2kZvh5eLGzNAAAAJQ"]
[Thu Feb 26 21:30:00.517817 2026] [:error] [pid 55051:tid 55077] [client 20.104.19.195:62156] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.trash7309/index.php"] [unique_id "aaBK2AmK1w2kZvh5eLGzNwAAAJc"]
[Thu Feb 26 21:30:01.812690 2026] [:error] [pid 54991:tid 55023] [client 20.104.19.195:62784] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "aaBK2d4Zx-mJ8gbRB2jqqwAAAEM"]
[Thu Feb 26 21:30:02.902914 2026] [:error] [pid 44444:tid 44453] [client 20.104.19.195:62177] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "aaBK2m2sMNmj-yekUk0nygAAAgM"]
[Thu Feb 26 21:30:03.707723 2026] [:error] [pid 44444:tid 44468] [client 20.104.19.195:62089] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "aaBK222sMNmj-yekUk0n1gAAAhI"]
[Thu Feb 26 21:30:04.479497 2026] [:error] [pid 44444:tid 44454] [client 20.104.19.195:62805] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "aaBK3G2sMNmj-yekUk0n4AAAAgQ"]
[Thu Feb 26 21:30:05.630574 2026] [:error] [pid 44444:tid 44453] [client 20.104.19.195:62745] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaBK3W2sMNmj-yekUk0n8QAAAgM"]
[Thu Feb 26 21:30:07.252278 2026] [:error] [pid 44444:tid 44461] [client 20.104.19.195:62724] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaBK322sMNmj-yekUk0oAQAAAgs"]
[Thu Feb 26 21:30:08.460132 2026] [:error] [pid 55122:tid 55132] [client 20.104.19.195:62086] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaBK4ILiR0OfjFxvcN8wvQAAAMg"]
[Thu Feb 26 21:30:12.360551 2026] [:error] [pid 44444:tid 44466] [client 20.104.19.195:62836] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaBK5G2sMNmj-yekUk0oIwAAAhA"]
[Thu Feb 26 21:30:14.518544 2026] [:error] [pid 54990:tid 55000] [client 20.104.19.195:62187] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aaBK5ntr2qmt_mBhH2wqJAAAAAc"]
[Thu Feb 26 21:30:17.869329 2026] [:error] [pid 54991:tid 55038] [client 20.104.19.195:62779] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aaBK6d4Zx-mJ8gbRB2jqvwAAAFI"]
[Thu Feb 26 21:30:20.122278 2026] [:error] [pid 44444:tid 44472] [client 20.104.19.195:62147] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aaBK7G2sMNmj-yekUk0oNQAAAhY"]
[Thu Feb 26 21:30:23.418586 2026] [:error] [pid 55122:tid 55125] [client 20.104.19.195:62809] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file17.php"] [unique_id "aaBK74LiR0OfjFxvcN8wwgAAAME"]
[Thu Feb 26 21:30:25.477750 2026] [:error] [pid 44444:tid 44450] [client 20.104.19.195:62176] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/footer.php"] [unique_id "aaBK8W2sMNmj-yekUk0oRgAAAgA"]
[Thu Feb 26 21:30:27.343244 2026] [:error] [pid 54991:tid 55024] [client 20.104.19.195:62792] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/footer.php"] [unique_id "aaBK894Zx-mJ8gbRB2jq0gAAAEQ"]
[Thu Feb 26 21:30:28.973969 2026] [:error] [pid 20419:tid 20429] [client 20.104.19.195:62846] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/footer.php"] [unique_id "aaBK9O3DVDvMfTYYUBVY7gAAAcc"]
[Thu Feb 26 21:30:30.268451 2026] [:error] [pid 44444:tid 44459] [client 20.104.19.195:62818] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/footer.php"] [unique_id "aaBK9m2sMNmj-yekUk0oTQAAAgk"]
[Thu Feb 26 21:30:31.356998 2026] [:error] [pid 44444:tid 44455] [client 20.104.19.195:62793] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file8.php"] [unique_id "aaBK922sMNmj-yekUk0oUAAAAgU"]
[Thu Feb 26 21:30:32.272971 2026] [:error] [pid 44444:tid 44466] [client 20.104.19.195:62811] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file8.php"] [unique_id "aaBK-G2sMNmj-yekUk0oVAAAAhA"]
[Thu Feb 26 21:30:33.090958 2026] [:error] [pid 3883:tid 3890] [client 20.104.19.195:62166] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file8.php"] [unique_id "aaBK-eA33x90V6yYHajsgQAAAUQ"]
[Thu Feb 26 21:30:34.083114 2026] [:error] [pid 54990:tid 55010] [client 20.104.19.195:62728] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file8.php"] [unique_id "aaBK-ntr2qmt_mBhH2wqJwAAABE"]
[Thu Feb 26 21:30:35.025700 2026] [:error] [pid 20419:tid 20432] [client 20.104.19.195:62145] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aaBK--3DVDvMfTYYUBVY-wAAAco"]
[Thu Feb 26 21:30:36.038362 2026] [:error] [pid 20419:tid 20437] [client 20.104.19.195:62778] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aaBK_O3DVDvMfTYYUBVY_QAAAc8"]
[Thu Feb 26 21:30:38.047245 2026] [:error] [pid 54991:tid 55023] [client 20.104.19.195:62170] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aaBK_t4Zx-mJ8gbRB2jq2AAAAEM"]
[Thu Feb 26 21:30:40.494759 2026] [:error] [pid 54991:tid 55036] [client 20.104.19.195:62831] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aaBLAN4Zx-mJ8gbRB2jq2gAAAFA"]
[Thu Feb 26 21:30:41.364605 2026] [:error] [pid 44444:tid 44461] [client 20.104.19.195:62110] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "aaBLAW2sMNmj-yekUk0obwAAAgs"]
[Thu Feb 26 21:30:42.508731 2026] [:error] [pid 44444:tid 44471] [client 20.104.19.195:62760] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "aaBLAm2sMNmj-yekUk0oeAAAAhU"]
[Thu Feb 26 21:30:43.327466 2026] [:error] [pid 44444:tid 44467] [client 20.104.19.195:62127] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "aaBLA22sMNmj-yekUk0ofAAAAhE"]
[Thu Feb 26 21:30:44.102089 2026] [:error] [pid 44444:tid 44459] [client 20.104.19.195:62816] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "aaBLBG2sMNmj-yekUk0ofgAAAgk"]
[Thu Feb 26 21:30:45.429765 2026] [:error] [pid 20419:tid 20427] [client 20.104.19.195:62827] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaBLBe3DVDvMfTYYUBVZCwAAAcU"]
[Thu Feb 26 21:30:46.885604 2026] [:error] [pid 44444:tid 44468] [client 20.104.19.195:62100] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaBLBm2sMNmj-yekUk0ohgAAAhI"]
[Thu Feb 26 21:30:48.392461 2026] [:error] [pid 55051:tid 55067] [client 20.104.19.195:62083] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaBLCAmK1w2kZvh5eLGzfgAAAI0"]
[Thu Feb 26 21:30:49.771481 2026] [:error] [pid 44444:tid 44472] [client 20.104.19.195:62090] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaBLCW2sMNmj-yekUk0oiwAAAhY"]
[Thu Feb 26 21:31:18.854900 2026] [:error] [pid 44444:tid 44458] [client 20.104.19.195:58957] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index1.php"] [unique_id "aaBLJm2sMNmj-yekUk0pMAAAAgg"]
[Thu Feb 26 21:31:20.485292 2026] [:error] [pid 3883:tid 3889] [client 20.104.19.195:62751] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index1.php"] [unique_id "aaBLKOA33x90V6yYHajslwAAAUM"]
[Thu Feb 26 21:31:21.842692 2026] [:error] [pid 55051:tid 55055] [client 20.104.19.195:62122] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index1.php"] [unique_id "aaBLKQmK1w2kZvh5eLGznwAAAIE"]
[Thu Feb 26 21:31:22.773704 2026] [:error] [pid 54991:tid 55043] [client 20.104.19.195:62721] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index1.php"] [unique_id "aaBLKt4Zx-mJ8gbRB2jrGAAAAFc"]
[Thu Feb 26 21:31:23.578575 2026] [:error] [pid 44444:tid 44471] [client 20.104.19.195:62735] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaBLK22sMNmj-yekUk0pPwAAAhU"]
[Thu Feb 26 21:31:24.067517 2026] [:error] [pid 44444:tid 44465] [client 20.104.19.195:62813] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaBLLG2sMNmj-yekUk0pQwAAAg8"]
[Thu Feb 26 21:31:25.077096 2026] [:error] [pid 20419:tid 20436] [client 20.104.19.195:62837] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaBLLe3DVDvMfTYYUBVZJAAAAc4"]
[Thu Feb 26 21:31:26.963283 2026] [:error] [pid 54991:tid 55020] [client 20.104.19.195:62782] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaBLLt4Zx-mJ8gbRB2jrIQAAAEA"]
[Thu Feb 26 21:31:28.487983 2026] [:error] [pid 55051:tid 55056] [client 20.104.19.195:62186] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aaBLMAmK1w2kZvh5eLGzrQAAAII"]
[Thu Feb 26 21:31:29.378866 2026] [:error] [pid 55618:tid 55643] [client 20.104.19.195:62808] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aaBLMR61Vrh12f_8oWQNpQAAARY"]
[Thu Feb 26 21:31:31.250830 2026] [:error] [pid 44444:tid 44459] [client 20.104.19.195:62144] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aaBLM22sMNmj-yekUk0pTQAAAgk"]
[Thu Feb 26 21:31:33.460130 2026] [:error] [pid 54990:tid 55013] [client 20.104.19.195:58993] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aaBLNXtr2qmt_mBhH2wqXQAAABQ"]
[Thu Feb 26 21:31:34.691353 2026] [:error] [pid 55051:tid 55059] [client 20.104.19.195:62161] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/news.php"] [unique_id "aaBLNgmK1w2kZvh5eLGztAAAAIU"]
[Thu Feb 26 21:31:36.808830 2026] [:error] [pid 55051:tid 55055] [client 20.104.19.195:58947] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/news.php"] [unique_id "aaBLOAmK1w2kZvh5eLGzuQAAAIE"]
[Thu Feb 26 21:31:38.995331 2026] [:error] [pid 55051:tid 55070] [client 20.104.19.195:62128] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/news.php"] [unique_id "aaBLOgmK1w2kZvh5eLGzvgAAAJA"]
[Thu Feb 26 21:31:40.199114 2026] [:error] [pid 55051:tid 55060] [client 20.104.19.195:58959] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/news.php"] [unique_id "aaBLPAmK1w2kZvh5eLGzvwAAAIY"]
[Thu Feb 26 21:31:41.131086 2026] [:error] [pid 20419:tid 20431] [client 20.104.19.195:58978] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aaBLPe3DVDvMfTYYUBVZOgAAAck"]
[Thu Feb 26 21:31:41.921552 2026] [:error] [pid 44444:tid 44466] [client 20.104.19.195:62133] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aaBLPW2sMNmj-yekUk0pZAAAAhA"]
[Thu Feb 26 21:31:42.771546 2026] [:error] [pid 44444:tid 44454] [client 20.104.19.195:62206] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aaBLPm2sMNmj-yekUk0pZQAAAgQ"]
[Thu Feb 26 21:31:43.662219 2026] [:error] [pid 25311:tid 25338] [client 20.104.19.195:62194] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aaBLP9fdM__yZAgJFSvj8wAAAZg"]
[Thu Feb 26 21:31:44.427735 2026] [:error] [pid 44444:tid 44457] [client 20.104.19.195:62101] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aaBLQG2sMNmj-yekUk0pcQAAAgc"]
[Thu Feb 26 21:31:45.136039 2026] [:error] [pid 25311:tid 25326] [client 20.104.19.195:62730] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aaBLQdfdM__yZAgJFSvj9wAAAYw"]
[Thu Feb 26 21:31:46.046918 2026] [:error] [pid 55051:tid 55064] [client 20.104.19.195:62154] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aaBLQgmK1w2kZvh5eLGz2wAAAIo"]
[Thu Feb 26 21:31:46.898245 2026] [:error] [pid 55051:tid 55065] [client 20.104.19.195:62193] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aaBLQgmK1w2kZvh5eLGz4gAAAIs"]
[Thu Feb 26 21:31:47.793486 2026] [:error] [pid 54991:tid 55040] [client 20.104.19.195:62190] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mn.php"] [unique_id "aaBLQ94Zx-mJ8gbRB2jrNgAAAFQ"]
[Thu Feb 26 21:31:48.422482 2026] [:error] [pid 20419:tid 20440] [client 20.104.19.195:62174] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mn.php"] [unique_id "aaBLRO3DVDvMfTYYUBVZawAAAdI"]
[Thu Feb 26 21:31:49.849980 2026] [:error] [pid 55051:tid 55068] [client 20.104.19.195:62765] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mn.php"] [unique_id "aaBLRQmK1w2kZvh5eLGz6wAAAI4"]
[Thu Feb 26 21:31:50.861470 2026] [:error] [pid 55051:tid 55064] [client 20.104.19.195:62772] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mn.php"] [unique_id "aaBLRgmK1w2kZvh5eLGz8AAAAIo"]
[Thu Feb 26 21:31:51.660208 2026] [:error] [pid 55051:tid 55074] [client 20.104.19.195:62743] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aaBLRwmK1w2kZvh5eLGz8wAAAJQ"]
[Thu Feb 26 21:31:52.508689 2026] [:error] [pid 55051:tid 55067] [client 20.104.19.195:62149] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aaBLSAmK1w2kZvh5eLGz9wAAAI0"]
[Thu Feb 26 21:31:53.257321 2026] [:error] [pid 44444:tid 44457] [client 20.104.19.195:62749] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aaBLSW2sMNmj-yekUk0pkQAAAgc"]
[Thu Feb 26 21:31:53.883732 2026] [:error] [pid 55618:tid 55637] [client 20.104.19.195:62833] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aaBLSR61Vrh12f_8oWQNrAAAARA"]
[Thu Feb 26 21:31:55.054233 2026] [:error] [pid 44444:tid 44452] [client 20.104.19.195:62119] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "aaBLS22sMNmj-yekUk0plQAAAgI"]
[Thu Feb 26 21:31:56.349143 2026] [:error] [pid 54991:tid 55026] [client 20.104.19.195:62838] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "aaBLTN4Zx-mJ8gbRB2jrYgAAAEY"]
[Thu Feb 26 21:31:57.579724 2026] [:error] [pid 54991:tid 55029] [client 20.104.19.195:62183] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "aaBLTd4Zx-mJ8gbRB2jragAAAEk"]
[Thu Feb 26 21:31:58.833261 2026] [:error] [pid 20419:tid 20446] [client 20.104.19.195:62167] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "aaBLTu3DVDvMfTYYUBVZfwAAAdg"]
[Thu Feb 26 21:31:59.632838 2026] [:error] [pid 54990:tid 55012] [client 20.104.19.195:62834] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aaBLT3tr2qmt_mBhH2wqmQAAABM"]
[Thu Feb 26 21:32:00.711138 2026] [:error] [pid 55618:tid 55631] [client 20.104.19.195:62775] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aaBLUB61Vrh12f_8oWQNsAAAAQo"]
[Thu Feb 26 21:32:01.722598 2026] [:error] [pid 55122:tid 55140] [client 20.104.19.195:62205] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aaBLUYLiR0OfjFxvcN8w0wAAANA"]
[Thu Feb 26 21:32:02.835764 2026] [:error] [pid 55122:tid 55148] [client 20.104.19.195:62095] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/build.php"] [unique_id "aaBLUoLiR0OfjFxvcN8w1QAAANg"]
[Thu Feb 26 21:32:03.518191 2026] [:error] [pid 54991:tid 55037] [client 20.104.19.195:58989] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js/fm.php"] [unique_id "aaBLU94Zx-mJ8gbRB2jriwAAAFE"]
[Thu Feb 26 21:32:04.187803 2026] [:error] [pid 54991:tid 55040] [client 20.104.19.195:62103] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js/fm.php"] [unique_id "aaBLVN4Zx-mJ8gbRB2jrlQAAAFQ"]
[Thu Feb 26 21:32:05.492674 2026] [:error] [pid 44444:tid 44463] [client 20.104.19.195:62802] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js/fm.php"] [unique_id "aaBLVW2sMNmj-yekUk0pvwAAAg0"]
[Thu Feb 26 21:32:06.093561 2026] [:error] [pid 44444:tid 44457] [client 20.104.19.195:62180] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js/fm.php"] [unique_id "aaBLVm2sMNmj-yekUk0pxAAAAgc"]
[Thu Feb 26 21:32:06.876886 2026] [:error] [pid 44444:tid 44453] [client 20.104.19.195:62179] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaBLVm2sMNmj-yekUk0pywAAAgM"]
[Thu Feb 26 21:32:07.891191 2026] [:error] [pid 44444:tid 44463] [client 20.104.19.195:62181] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaBLV22sMNmj-yekUk0p0wAAAg0"]
[Thu Feb 26 21:32:09.305049 2026] [:error] [pid 20419:tid 20433] [client 20.104.19.195:62113] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaBLWe3DVDvMfTYYUBVZiAAAAcs"]
[Thu Feb 26 21:32:11.966160 2026] [:error] [pid 55051:tid 55064] [client 20.104.19.195:62131] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaBLWwmK1w2kZvh5eLG0NAAAAIo"]
[Thu Feb 26 21:32:14.946907 2026] [:error] [pid 55051:tid 55076] [client 20.104.19.195:62840] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aaBLXgmK1w2kZvh5eLG0OQAAAJY"]
[Thu Feb 26 21:43:46.823225 2026] [:error] [pid 20419:tid 20439] [client 117.33.163.216:57656] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaBOEu3DVDvMfTYYUBVcKQAAAdE"]
[Thu Feb 26 22:02:01.205139 2026] [:error] [pid 54991:tid 55026] [client 157.245.196.99:56631] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBSWd4Zx-mJ8gbRB2j1zQAAAEY"]
[Thu Feb 26 22:13:44.701828 2026] [:error] [pid 44444:tid 44465] [client 103.8.27.27:56408] [client 103.8.27.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/laravel/.env"] [unique_id "aaBVGG2sMNmj-yekUk1FLAAAAg8"]
[Thu Feb 26 22:13:44.701828 2026] [:error] [pid 44444:tid 44469] [client 103.8.27.27:55857] [client 103.8.27.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/member/.env"] [unique_id "aaBVGG2sMNmj-yekUk1FKwAAAhM"]
[Thu Feb 26 23:32:04.070217 2026] [:error] [pid 44444:tid 44469] [client 4.193.177.110:3233] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaBndG2sMNmj-yekUk19cAAAAhM"]
[Thu Feb 26 23:32:04.492441 2026] [:error] [pid 20419:tid 20423] [client 4.193.177.110:3058] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaBndO3DVDvMfTYYUBV6xwAAAcE"]
[Thu Feb 26 23:32:04.922752 2026] [:error] [pid 55618:tid 55640] [client 4.193.177.110:3072] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaBndB61Vrh12f_8oWQe5AAAARM"]
[Thu Feb 26 23:32:05.565696 2026] [:error] [pid 55051:tid 55063] [client 4.193.177.110:8409] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaBndQmK1w2kZvh5eLHxfQAAAIk"]
[Fri Feb 27 00:44:40.819186 2026] [:error] [pid 18831:tid 18931] [client 43.153.119.119:47806] [client 43.153.119.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaB4eP5KHTHUIuWRG2a5mwAAAFI"]
[Fri Feb 27 02:27:41.640290 2026] [:error] [pid 20059:tid 20123] [client 194.32.120.95:39637] [client 194.32.120.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.95, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaCQnZZBS5wIa_Nsqsg4ugAAAdU"]
[Fri Feb 27 03:36:45.032186 2026] [:error] [pid 19020:tid 19026] [client 194.32.120.98:32267] [client 194.32.120.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.98, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaCgzbN3kp7wL6QzPnVxRwAAAUQ"]
[Fri Feb 27 03:57:50.288688 2026] [:error] [pid 1201:tid 1224] [client 194.32.120.106:27257] [client 194.32.120.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.106, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaClvlST6IFd4laX4Psx4wAAARU"]
[Fri Feb 27 04:03:38.572404 2026] [:error] [pid 37895:tid 37972] [client 51.68.32.135:42636] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aaCnGrx7AKEYlDsU2_126QAAAJU"]
[Fri Feb 27 04:03:41.007260 2026] [:error] [pid 37894:tid 37937] [client 51.68.32.135:41244] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaCnHQrG3d4cnTcm0zwdUQAAAE0"]
[Fri Feb 27 04:03:43.477473 2026] [:error] [pid 37984:tid 38004] [client 51.68.32.135:41248] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaCnH7vzllUfvW6W6vGGywAAANI"]
[Fri Feb 27 04:03:45.796554 2026] [:error] [pid 37895:tid 37965] [client 51.68.32.135:34032] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaCnIbx7AKEYlDsU2_127QAAAI4"]
[Fri Feb 27 04:03:48.315408 2026] [:error] [pid 37894:tid 37932] [client 51.68.32.135:34036] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaCnJArG3d4cnTcm0zwddQAAAEg"]
[Fri Feb 27 04:03:50.794032 2026] [:error] [pid 37894:tid 37925] [client 51.68.32.135:34050] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaCnJgrG3d4cnTcm0zwdgwAAAEE"]
[Fri Feb 27 04:03:53.220886 2026] [:error] [pid 37894:tid 37931] [client 51.68.32.135:34062] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aaCnKQrG3d4cnTcm0zwdjgAAAEc"]
[Fri Feb 27 04:03:55.699234 2026] [:error] [pid 37895:tid 37971] [client 51.68.32.135:34078] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaCnK7x7AKEYlDsU2_13BwAAAJQ"]
[Fri Feb 27 04:03:58.343556 2026] [:error] [pid 37984:tid 37996] [client 51.68.32.135:55170] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaCnLrvzllUfvW6W6vGHBgAAAMo"]
[Fri Feb 27 04:04:00.897609 2026] [:error] [pid 37984:tid 37993] [client 51.68.32.135:55182] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaCnMLvzllUfvW6W6vGHDAAAAMc"]
[Fri Feb 27 04:04:03.505755 2026] [:error] [pid 37984:tid 38003] [client 51.68.32.135:55186] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaCnM7vzllUfvW6W6vGHGAAAANE"]
[Fri Feb 27 04:04:06.229245 2026] [:error] [pid 37984:tid 38006] [client 51.68.32.135:54358] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aaCnNrvzllUfvW6W6vGHHgAAANQ"]
[Fri Feb 27 04:04:08.714495 2026] [:error] [pid 37894:tid 37932] [client 51.68.32.135:54370] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaCnOArG3d4cnTcm0zwdtQAAAEg"]
[Fri Feb 27 04:04:11.277590 2026] [:error] [pid 37893:tid 37910] [client 51.68.32.135:54384] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaCnO7CiThGvciFYy77jAwAAAA0"]
[Fri Feb 27 04:04:13.772484 2026] [:error] [pid 37895:tid 37974] [client 51.68.32.135:54388] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaCnPbx7AKEYlDsU2_13NQAAAJc"]
[Fri Feb 27 04:04:16.199165 2026] [:error] [pid 37894:tid 37925] [client 51.68.32.135:36764] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaCnQArG3d4cnTcm0zwdzQAAAEE"]
[Fri Feb 27 04:04:18.682140 2026] [:error] [pid 37984:tid 38000] [client 51.68.32.135:36774] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aaCnQrvzllUfvW6W6vGHQgAAAM4"]
[Fri Feb 27 04:04:21.154890 2026] [:error] [pid 37894:tid 37931] [client 51.68.32.135:36790] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aaCnRQrG3d4cnTcm0zwd0AAAAEc"]
[Fri Feb 27 04:04:23.570727 2026] [:error] [pid 37894:tid 37930] [client 51.68.32.135:36802] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aaCnRwrG3d4cnTcm0zwd1QAAAEY"]
[Fri Feb 27 04:04:26.030199 2026] [:error] [pid 37984:tid 37996] [client 51.68.32.135:48560] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aaCnSrvzllUfvW6W6vGHXwAAAMo"]
[Fri Feb 27 04:04:28.596329 2026] [:error] [pid 37894:tid 37924] [client 51.68.32.135:48564] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaCnTArG3d4cnTcm0zwd6AAAAEA"]
[Fri Feb 27 04:04:31.041625 2026] [:error] [pid 37893:tid 37899] [client 51.68.32.135:48566] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aaCnT7CiThGvciFYy77jJQAAAAI"]
[Fri Feb 27 04:04:33.518297 2026] [:error] [pid 37895:tid 37952] [client 51.68.32.135:48576] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaCnUbx7AKEYlDsU2_13YwAAAIE"]
[Fri Feb 27 04:05:05.594568 2026] [:error] [pid 37895:tid 37962] [client 51.68.32.135:37680] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aaCncbx7AKEYlDsU2_13ygAAAIs"]
[Fri Feb 27 04:05:07.933402 2026] [:error] [pid 37893:tid 37909] [client 51.68.32.135:59556] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aaCnc7CiThGvciFYy77jbQAAAAw"]
[Fri Feb 27 04:05:10.337755 2026] [:error] [pid 37895:tid 37957] [client 51.68.32.135:59560] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aaCndrx7AKEYlDsU2_131QAAAIY"]
[Fri Feb 27 04:05:12.866461 2026] [:error] [pid 37984:tid 38010] [client 51.68.32.135:59570] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaCneLvzllUfvW6W6vGIXwAAANg"]
[Fri Feb 27 04:05:15.263836 2026] [:error] [pid 37894:tid 37946] [client 51.68.32.135:59582] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aaCnewrG3d4cnTcm0zweVwAAAFY"]
[Fri Feb 27 04:05:17.811501 2026] [:error] [pid 37895:tid 37970] [client 51.68.32.135:52586] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aaCnfbx7AKEYlDsU2_14EgAAAJM"]
[Fri Feb 27 04:05:20.219477 2026] [:error] [pid 37894:tid 37928] [client 51.68.32.135:52592] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaCngArG3d4cnTcm0zweYAAAAEQ"]
[Fri Feb 27 04:05:22.624108 2026] [:error] [pid 37894:tid 37937] [client 51.68.32.135:52598] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaCnggrG3d4cnTcm0zweaAAAAE0"]
[Fri Feb 27 04:05:25.157469 2026] [:error] [pid 37895:tid 37951] [client 51.68.32.135:52604] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aaCnhbx7AKEYlDsU2_14PAAAAIA"]
[Fri Feb 27 04:05:27.671920 2026] [:error] [pid 37984:tid 38004] [client 51.68.32.135:40334] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaCnh7vzllUfvW6W6vGI2wAAANI"]
[Fri Feb 27 04:05:30.036218 2026] [:error] [pid 37984:tid 37987] [client 51.68.32.135:40346] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaCnirvzllUfvW6W6vGI6wAAAME"]
[Fri Feb 27 04:05:32.534281 2026] [:error] [pid 37984:tid 38003] [client 51.68.32.135:40354] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaCnjLvzllUfvW6W6vGI-gAAANE"]
[Fri Feb 27 04:05:34.889575 2026] [:error] [pid 37984:tid 37987] [client 51.68.32.135:40368] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaCnjrvzllUfvW6W6vGJCgAAAME"]
[Fri Feb 27 04:05:37.408112 2026] [:error] [pid 37984:tid 38008] [client 51.68.32.135:44426] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaCnkbvzllUfvW6W6vGJFQAAANY"]
[Fri Feb 27 04:05:39.868254 2026] [:error] [pid 37895:tid 37972] [client 51.68.32.135:44438] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aaCnk7x7AKEYlDsU2_14YQAAAJU"]
[Fri Feb 27 04:05:42.230603 2026] [:error] [pid 37893:tid 37912] [client 51.68.32.135:44442] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aaCnlrCiThGvciFYy77jngAAAA8"]
[Fri Feb 27 04:05:44.691978 2026] [:error] [pid 37893:tid 37915] [client 51.68.32.135:44448] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aaCnmLCiThGvciFYy77jpwAAABI"]
[Fri Feb 27 04:05:47.174888 2026] [:error] [pid 37895:tid 37973] [client 51.68.32.135:51026] [client 51.68.32.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaCnm7x7AKEYlDsU2_14bgAAAJY"]
[Fri Feb 27 04:08:08.949370 2026] [:error] [pid 3974:tid 4049] [client 194.32.120.115:40649] [client 194.32.120.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.115, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaCoKHp-fQtdOYjkuFvA9wAAAEw"]
[Fri Feb 27 04:19:53.233025 2026] [:error] [pid 4081:tid 4100] [client 194.32.120.100:31309] [client 194.32.120.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.100, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaCq6Q55mnr35z8h7t3G9QAAANE"]
[Fri Feb 27 04:30:05.268965 2026] [autoindex:error] [pid 3975:tid 4018] [client 185.198.240.138:42755] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:05.554774 2026] [autoindex:error] [pid 3975:tid 4031] [client 185.198.240.138:42755] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:05.823145 2026] [autoindex:error] [pid 3975:tid 4018] [client 185.198.240.138:42755] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:06.144181 2026] [autoindex:error] [pid 3975:tid 4025] [client 185.198.240.138:42755] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:13.110767 2026] [autoindex:error] [pid 3975:tid 4031] [client 185.198.240.138:42755] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:13.416352 2026] [autoindex:error] [pid 3975:tid 4029] [client 185.198.240.138:42755] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:13.699268 2026] [autoindex:error] [pid 3975:tid 4031] [client 185.198.240.138:42755] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:14.067232 2026] [:error] [pid 3975:tid 4010] [client 185.198.240.138:42755] [client 185.198.240.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/"] [unique_id "aaCtVhMVp0-T2hD76b221wAAAIA"]
[Fri Feb 27 04:30:14.583326 2026] [autoindex:error] [pid 3975:tid 4028] [client 45.131.195.208:46131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:14.882959 2026] [autoindex:error] [pid 3975:tid 4010] [client 45.131.195.208:46131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:15.122710 2026] [autoindex:error] [pid 3975:tid 4020] [client 45.131.195.208:46131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:15.669305 2026] [autoindex:error] [pid 3975:tid 4034] [client 45.131.195.208:46131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:24.368877 2026] [autoindex:error] [pid 3975:tid 4016] [client 45.131.195.208:46131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:24.625033 2026] [autoindex:error] [pid 3975:tid 4015] [client 45.131.195.208:46131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:39.873796 2026] [autoindex:error] [pid 3975:tid 4016] [client 45.131.195.208:46131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:40.123450 2026] [autoindex:error] [pid 3975:tid 4018] [client 45.131.195.208:46131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:40.436147 2026] [autoindex:error] [pid 3975:tid 4016] [client 45.131.195.208:46131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:30:40.696573 2026] [autoindex:error] [pid 3975:tid 4022] [client 45.131.195.208:46131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 04:35:21.109477 2026] [:error] [pid 21329:tid 21402] [client 43.130.57.46:55902] [client 43.130.57.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaCuiZvQWnde-MjcQ1FUvAAAAVM"]
[Fri Feb 27 04:38:55.559711 2026] [:error] [pid 5365:tid 5387] [client 194.32.120.92:23853] [client 194.32.120.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaCvX5YAa8J3tYxdG3wSrgAAARQ"]
[Fri Feb 27 05:06:09.900719 2026] [:error] [pid 42563:tid 42580] [client 194.32.120.100:20127] [client 194.32.120.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.100, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaC1wXKL5BclZy73IRHBAwAAAco"]
[Fri Feb 27 05:34:18.307513 2026] [:error] [pid 42435:tid 42459] [client 194.32.120.114:52325] [client 194.32.120.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.114, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaC8Wh5hHLnaukp_y9-OxwAAAZM"]
[Fri Feb 27 05:53:10.931568 2026] [:error] [pid 5365:tid 5379] [client 194.32.120.85:57469] [client 194.32.120.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDAxpYAa8J3tYxdG3xKIgAAAQw"]
[Fri Feb 27 06:06:24.715347 2026] [:error] [pid 42563:tid 42580] [client 194.32.120.84:53175] [client 194.32.120.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.84, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDD4HKL5BclZy73IRHS9gAAAco"]
[Fri Feb 27 06:20:29.677042 2026] [:error] [pid 5365:tid 5389] [client 185.192.70.17:49607] [client 185.192.70.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.70.17, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDHLZYAa8J3tYxdG3xY2wAAARY"]
[Fri Feb 27 06:39:51.568437 2026] [:error] [pid 42658:tid 42669] [client 194.32.120.87:24635] [client 194.32.120.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.87, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDLt4zcoYl3nRbu1jaJlAAAAgk"]
[Fri Feb 27 06:52:06.260450 2026] [:error] [pid 5365:tid 5377] [client 194.32.120.103:32409] [client 194.32.120.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDOlpYAa8J3tYxdG3xquwAAAQo"]
[Fri Feb 27 07:06:51.152417 2026] [:error] [pid 4081:tid 4089] [client 194.32.120.114:59277] [client 194.32.120.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.114, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDSCw55mnr35z8h7t3w2wAAAMY"]
[Fri Feb 27 07:07:07.514609 2026] [:error] [pid 42658:tid 42672] [client 142.188.75.61:53091] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDSG4zcoYl3nRbu1jaXQgAAAgw"]
[Fri Feb 27 07:07:59.878165 2026] [:error] [pid 42563:tid 42590] [client 124.150.139.46:40062] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDST3KL5BclZy73IRHm4AAAAdQ"]
[Fri Feb 27 07:21:12.732625 2026] [:error] [pid 5365:tid 5367] [client 194.32.120.111:46263] [client 194.32.120.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDVaJYAa8J3tYxdG3yDDwAAAQA"]
[Fri Feb 27 08:07:33.163451 2026] [:error] [pid 4081:tid 4102] [client 194.32.120.94:50365] [client 194.32.120.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDgRQ55mnr35z8h7t350AAAANM"]
[Fri Feb 27 08:08:49.926533 2026] [:error] [pid 42658:tid 42660] [client 142.188.75.61:50341] [client 142.188.75.61] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaDgkYzcoYl3nRbu1ja2KgAAAgA"]
[Fri Feb 27 08:09:41.365834 2026] [:error] [pid 5365:tid 5377] [client 142.188.75.61:50585] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDgxZYAa8J3tYxdG3yhhgAAAQo"]
[Fri Feb 27 08:10:42.820051 2026] [:error] [pid 21329:tid 21403] [client 142.188.75.61:51265] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDhApvQWnde-MjcQ1F79AAAAVQ"]
[Fri Feb 27 08:11:36.901480 2026] [:error] [pid 42658:tid 42679] [client 142.188.75.61:52035] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDhOIzcoYl3nRbu1ja3rgAAAhM"]
[Fri Feb 27 08:11:36.904829 2026] [:error] [pid 42658:tid 42679] [client 142.188.75.61:52035] [client 142.188.75.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminhotbooksbookeeping2%wppass_d%title0x189342d4description0x189342d4mt_keywords0x189342d4mt_excerpt0x189342d41"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDhOIzcoYl3nRbu1ja3rgAAAhM"]
[Fri Feb 27 08:12:43.113731 2026] [:error] [pid 42435:tid 42452] [client 142.188.75.61:52850] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDhex5hHLnaukp_y9-yfwAAAYw"]
[Fri Feb 27 08:13:37.532905 2026] [:error] [pid 53574:tid 53647] [client 142.188.75.61:53504] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDhsQnAgABR7uoOZTvmGwAAANA"]
[Fri Feb 27 08:13:37.536330 2026] [:error] [pid 53574:tid 53647] [client 142.188.75.61:53504] [client 142.188.75.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminadmin$%wppass_u%title0xf67dc8c7description0xf67dc8c7mt_keywords0xf67dc8c7mt_excerpt0xf67dc8c71"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDhsQnAgABR7uoOZTvmGwAAANA"]
[Fri Feb 27 08:14:53.264705 2026] [:error] [pid 54103:tid 54177] [client 142.188.75.61:54351] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDh_evG4MPCmE0B2sDfcQAAAMY"]
[Fri Feb 27 08:15:47.406355 2026] [:error] [pid 54231:tid 54254] [client 142.188.75.61:54918] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDiM-Tvb5AeyJCdY7AL2QAAAFQ"]
[Fri Feb 27 08:16:44.314996 2026] [:error] [pid 54231:tid 54245] [client 142.188.75.61:55493] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDibOTvb5AeyJCdY7ANSwAAAEs"]
[Fri Feb 27 08:16:44.318139 2026] [:error] [pid 54231:tid 54245] [client 142.188.75.61:55493] [client 142.188.75.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminadmin.2023%wppass_u%title0x595978acdescription0x595978acmt_keywords0x595978acmt_excerpt0x595978ac1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDibOTvb5AeyJCdY7ANSwAAAEs"]
[Fri Feb 27 08:17:52.824956 2026] [:error] [pid 54101:tid 54122] [client 142.188.75.61:56044] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDisFY5qgRktcYTGFuyjQAAAc4"]
[Fri Feb 27 08:18:50.196097 2026] [:error] [pid 54103:tid 54188] [client 142.188.75.61:56478] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDi6uvG4MPCmE0B2sDiAAAAANE"]
[Fri Feb 27 08:19:48.327735 2026] [:error] [pid 54103:tid 54192] [client 142.188.75.61:56901] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDjJOvG4MPCmE0B2sDjEAAAANU"]
[Fri Feb 27 08:19:48.330627 2026] [:error] [pid 54103:tid 54192] [client 142.188.75.61:56901] [client 142.188.75.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminadmin%title0x75f21092description0x75f21092mt_keywords0x75f21092mt_excerpt0x75f210921"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDjJOvG4MPCmE0B2sDjEAAAANU"]
[Fri Feb 27 08:20:49.047910 2026] [:error] [pid 54101:tid 54112] [client 142.188.75.61:57378] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDjYVY5qgRktcYTGFuzWwAAAcQ"]
[Fri Feb 27 08:21:48.175884 2026] [:error] [pid 54103:tid 54191] [client 142.188.75.61:58163] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDjnOvG4MPCmE0B2sDkEwAAANQ"]
[Fri Feb 27 08:22:44.881245 2026] [:error] [pid 54102:tid 54165] [client 142.188.75.61:58925] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDj1Hi74D4fiYUm_GfMKwAAAJU"]
[Fri Feb 27 08:22:44.883116 2026] [:error] [pid 54102:tid 54165] [client 142.188.75.61:58925] [client 142.188.75.61] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDj1Hi74D4fiYUm_GfMKwAAAJU"]
[Fri Feb 27 08:22:44.884370 2026] [:error] [pid 54102:tid 54165] [client 142.188.75.61:58925] [client 142.188.75.61] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||hotbooksbookeeping2.com|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDj1Hi74D4fiYUm_GfMKwAAAJU"]
[Fri Feb 27 08:23:52.324876 2026] [:error] [pid 56075:tid 56083] [client 142.188.75.61:59742] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDkGMKBhrfI6KNv9RgArwAAAAY"]
[Fri Feb 27 08:24:54.439067 2026] [:error] [pid 56075:tid 56101] [client 142.188.75.61:60476] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDkVsKBhrfI6KNv9RgBaQAAABc"]
[Fri Feb 27 08:25:48.189503 2026] [:error] [pid 54103:tid 54179] [client 142.188.75.61:61060] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDkjOvG4MPCmE0B2sDlaAAAAMg"]
[Fri Feb 27 08:25:48.192725 2026] [:error] [pid 54103:tid 54179] [client 142.188.75.61:61060] [client 142.188.75.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminadmin_22%wppass_u%title0xc1622108description0xc1622108mt_keywords0xc1622108mt_excerpt0xc16221081"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDkjOvG4MPCmE0B2sDlaAAAAMg"]
[Fri Feb 27 08:26:58.699819 2026] [:error] [pid 54101:tid 54120] [client 142.188.75.61:61918] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDk0lY5qgRktcYTGFu1HQAAAcw"]
[Fri Feb 27 08:27:59.857517 2026] [:error] [pid 54101:tid 54121] [client 142.188.75.61:62691] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDlD1Y5qgRktcYTGFu1mAAAAc0"]
[Fri Feb 27 08:28:54.690741 2026] [:error] [pid 54101:tid 54110] [client 142.188.75.61:63426] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDlRlY5qgRktcYTGFu14wAAAcI"]
[Fri Feb 27 08:29:55.396909 2026] [:error] [pid 54231:tid 54253] [client 142.188.75.61:64240] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDlg-Tvb5AeyJCdY7AV1gAAAFM"]
[Fri Feb 27 08:30:11.833097 2026] [:error] [pid 54231:tid 54249] [client 124.150.139.46:55272] [client 124.150.139.46] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaDlk-Tvb5AeyJCdY7AV_gAAAE8"]
[Fri Feb 27 08:30:51.874749 2026] [:error] [pid 54103:tid 54186] [client 142.188.75.61:64920] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDlu-vG4MPCmE0B2sDnmwAAAM8"]
[Fri Feb 27 08:31:42.049078 2026] [:error] [pid 54103:tid 54192] [client 124.150.139.46:50926] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDl7uvG4MPCmE0B2sDoMQAAANU"]
[Fri Feb 27 08:31:52.969749 2026] [:error] [pid 56075:tid 56098] [client 142.188.75.61:49158] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDl-MKBhrfI6KNv9RgJNwAAABQ"]
[Fri Feb 27 08:31:52.974331 2026] [:error] [pid 56075:tid 56098] [client 142.188.75.61:49158] [client 142.188.75.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping2%wppass_d%title0x45ed30f4description0x45ed30f4mt_keywords0x45ed30f4mt_excerpt0x45ed30f41"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDl-MKBhrfI6KNv9RgJNwAAABQ"]
[Fri Feb 27 08:31:54.987850 2026] [:error] [pid 56075:tid 56084] [client 194.32.120.102:22511] [client 194.32.120.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.102, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDl-sKBhrfI6KNv9RgJPQAAAAc"]
[Fri Feb 27 08:32:56.293711 2026] [:error] [pid 54231:tid 54239] [client 124.150.139.46:50998] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDmOOTvb5AeyJCdY7AYmAAAAEU"]
[Fri Feb 27 08:32:59.116954 2026] [:error] [pid 54102:tid 54151] [client 142.188.75.61:50074] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDmO3i74D4fiYUm_GfPdAAAAIc"]
[Fri Feb 27 08:33:51.808872 2026] [:error] [pid 54231:tid 54239] [client 142.188.75.61:50769] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDmb-Tvb5AeyJCdY7AZhwAAAEU"]
[Fri Feb 27 08:33:51.812169 2026] [:error] [pid 54231:tid 54239] [client 142.188.75.61:50769] [client 142.188.75.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping2.com$%wppass_u%title0x7607dedbdescription0x7607dedbmt_keywords0x7607dedbmt_excerpt0x7607dedb1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDmb-Tvb5AeyJCdY7AZhwAAAEU"]
[Fri Feb 27 08:34:03.086238 2026] [:error] [pid 54103:tid 54181] [client 124.150.139.46:53376] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDme-vG4MPCmE0B2sDpLAAAAMo"]
[Fri Feb 27 08:34:03.089410 2026] [:error] [pid 54103:tid 54181] [client 124.150.139.46:53376] [client 124.150.139.46] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminadmin-%wppass_u%title0x359d632fdescription0x359d632fmt_keywords0x359d632fmt_excerpt0x359d632f1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDme-vG4MPCmE0B2sDpLAAAAMo"]
[Fri Feb 27 08:34:50.363651 2026] [:error] [pid 56075:tid 56100] [client 142.188.75.61:51497] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDmqsKBhrfI6KNv9RgMGgAAABY"]
[Fri Feb 27 08:35:04.905239 2026] [:error] [pid 56075:tid 56077] [client 124.150.139.46:33526] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDmuMKBhrfI6KNv9RgMkwAAAAA"]
[Fri Feb 27 08:35:48.810865 2026] [:error] [pid 54102:tid 54168] [client 142.188.75.61:52288] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDm5Hi74D4fiYUm_GfQNwAAAJc"]
[Fri Feb 27 08:36:16.783720 2026] [:error] [pid 56075:tid 56087] [client 124.150.139.46:36684] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDnAMKBhrfI6KNv9RgNggAAAAo"]
[Fri Feb 27 08:36:47.124262 2026] [:error] [pid 54231:tid 54248] [client 142.188.75.61:53135] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDnH-Tvb5AeyJCdY7AbmQAAAE4"]
[Fri Feb 27 08:36:47.127839 2026] [:error] [pid 54231:tid 54248] [client 142.188.75.61:53135] [client 142.188.75.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping2.com.2023%wppass_u%title0xb7d8387cdescription0xb7d8387cmt_keywords0xb7d8387cmt_excerpt0xb7d8387c1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDnH-Tvb5AeyJCdY7AbmQAAAE4"]
[Fri Feb 27 08:37:22.514821 2026] [:error] [pid 54231:tid 54236] [client 124.150.139.46:43656] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDnQuTvb5AeyJCdY7Ab2QAAAEI"]
[Fri Feb 27 08:37:51.452049 2026] [:error] [pid 54103:tid 54180] [client 142.188.75.61:53945] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDnX-vG4MPCmE0B2sDrCwAAAMk"]
[Fri Feb 27 08:37:57.443244 2026] [:error] [pid 54103:tid 54175] [client 43.166.136.24:58658] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaDnZevG4MPCmE0B2sDrEgAAAMQ"]
[Fri Feb 27 08:38:34.371750 2026] [:error] [pid 56075:tid 56097] [client 124.150.139.46:46224] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDnisKBhrfI6KNv9RgO9AAAABM"]
[Fri Feb 27 08:38:49.134130 2026] [:error] [pid 56075:tid 56094] [client 142.188.75.61:54486] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDnmcKBhrfI6KNv9RgPHAAAABA"]
[Fri Feb 27 08:39:40.612723 2026] [:error] [pid 56075:tid 56092] [client 124.150.139.46:59832] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDnzMKBhrfI6KNv9RgPgAAAAA4"]
[Fri Feb 27 08:39:45.439386 2026] [:error] [pid 54101:tid 54118] [client 142.188.75.61:54868] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDn0VY5qgRktcYTGFu34QAAAco"]
[Fri Feb 27 08:39:45.442562 2026] [:error] [pid 54101:tid 54118] [client 142.188.75.61:54868] [client 142.188.75.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping2.com%title0x13e4d180description0x13e4d180mt_keywords0x13e4d180mt_excerpt0x13e4d1801"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDn0VY5qgRktcYTGFu34QAAAco"]
[Fri Feb 27 08:40:44.029821 2026] [:error] [pid 62998:tid 63015] [client 124.150.139.46:60334] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDoDFQeueXZDUmoLomvgwAAAQ0"]
[Fri Feb 27 08:40:44.031551 2026] [:error] [pid 62998:tid 63015] [client 124.150.139.46:60334] [client 124.150.139.46] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDoDFQeueXZDUmoLomvgwAAAQ0"]
[Fri Feb 27 08:40:44.032917 2026] [:error] [pid 62998:tid 63015] [client 124.150.139.46:60334] [client 124.150.139.46] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||hotbooksbookeeping2.com|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDoDFQeueXZDUmoLomvgwAAAQ0"]
[Fri Feb 27 08:40:48.019645 2026] [:error] [pid 54101:tid 54108] [client 142.188.75.61:55213] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDoEFY5qgRktcYTGFu4KwAAAcA"]
[Fri Feb 27 08:41:07.812451 2026] [:error] [pid 62998:tid 63019] [client 20.205.227.70:11341] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-editor.php"] [unique_id "aaDoI1QeueXZDUmoLomwEAAAARE"]
[Fri Feb 27 08:41:08.165856 2026] [:error] [pid 62998:tid 63013] [client 20.205.227.70:17223] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-editor.php"] [unique_id "aaDoJFQeueXZDUmoLomwEQAAAQs"]
[Fri Feb 27 08:41:08.535699 2026] [:error] [pid 62998:tid 63007] [client 20.205.227.70:21046] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-editor.php"] [unique_id "aaDoJFQeueXZDUmoLomwEwAAAQU"]
[Fri Feb 27 08:41:08.901797 2026] [:error] [pid 56075:tid 56098] [client 20.205.227.70:4241] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-editor.php"] [unique_id "aaDoJMKBhrfI6KNv9RgQtwAAABQ"]
[Fri Feb 27 08:41:48.115571 2026] [:error] [pid 54231:tid 54252] [client 142.188.75.61:55498] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDoTOTvb5AeyJCdY7AdkAAAAFI"]
[Fri Feb 27 08:41:50.472187 2026] [:error] [pid 54102:tid 54161] [client 124.150.139.46:58214] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDoTni74D4fiYUm_GfRxQAAAJE"]
[Fri Feb 27 08:42:47.124492 2026] [:error] [pid 62998:tid 63018] [client 142.188.75.61:56006] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDoh1QeueXZDUmoLomxxQAAARA"]
[Fri Feb 27 08:42:47.125995 2026] [:error] [pid 62998:tid 63018] [client 142.188.75.61:56006] [client 142.188.75.61] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDoh1QeueXZDUmoLomxxQAAARA"]
[Fri Feb 27 08:42:47.127435 2026] [:error] [pid 62998:tid 63018] [client 142.188.75.61:56006] [client 142.188.75.61] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||hotbooksbookeeping2.com|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDoh1QeueXZDUmoLomxxQAAARA"]
[Fri Feb 27 08:42:58.763053 2026] [:error] [pid 62998:tid 63024] [client 124.150.139.46:51600] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDoklQeueXZDUmoLomx5wAAARY"]
[Fri Feb 27 08:43:48.229285 2026] [:error] [pid 62998:tid 63023] [client 142.188.75.61:56940] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDoxFQeueXZDUmoLomyjAAAARU"]
[Fri Feb 27 08:44:03.508292 2026] [:error] [pid 56075:tid 56095] [client 124.150.139.46:48554] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDo08KBhrfI6KNv9RgSWwAAABE"]
[Fri Feb 27 08:44:50.112084 2026] [:error] [pid 54102:tid 54159] [client 142.188.75.61:57829] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDpAni74D4fiYUm_GfSUgAAAI8"]
[Fri Feb 27 08:45:03.806428 2026] [:error] [pid 62998:tid 63016] [client 124.150.139.46:47316] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDpD1QeueXZDUmoLomzpAAAAQ4"]
[Fri Feb 27 08:45:41.060632 2026] [:error] [pid 62998:tid 63013] [client 185.192.70.18:60617] [client 185.192.70.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.70.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDpNVQeueXZDUmoLom0NgAAAQs"]
[Fri Feb 27 08:45:46.058884 2026] [:error] [pid 54101:tid 54125] [client 142.188.75.61:60201] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDpOlY5qgRktcYTGFu5OAAAAdE"]
[Fri Feb 27 08:45:46.061938 2026] [:error] [pid 54101:tid 54125] [client 142.188.75.61:60201] [client 142.188.75.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping2.com_22%wppass_u%title0xdaee4a7bdescription0xdaee4a7bmt_keywords0xdaee4a7bmt_excerpt0xdaee4a7b1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDpOlY5qgRktcYTGFu5OAAAAdE"]
[Fri Feb 27 08:46:03.518842 2026] [:error] [pid 54231:tid 54244] [client 124.150.139.46:43032] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDpS-Tvb5AeyJCdY7AfnwAAAEo"]
[Fri Feb 27 08:46:03.520520 2026] [:error] [pid 54231:tid 54244] [client 124.150.139.46:43032] [client 124.150.139.46] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDpS-Tvb5AeyJCdY7AfnwAAAEo"]
[Fri Feb 27 08:46:03.522044 2026] [:error] [pid 54231:tid 54244] [client 124.150.139.46:43032] [client 124.150.139.46] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||hotbooksbookeeping2.com|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDpS-Tvb5AeyJCdY7AfnwAAAEo"]
[Fri Feb 27 08:46:48.228615 2026] [:error] [pid 54231:tid 54255] [client 142.188.75.61:61081] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDpeOTvb5AeyJCdY7AgAgAAAFU"]
[Fri Feb 27 08:47:03.683210 2026] [:error] [pid 54231:tid 54244] [client 124.150.139.46:52674] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDph-Tvb5AeyJCdY7AgFwAAAEo"]
[Fri Feb 27 08:47:49.653060 2026] [:error] [pid 56075:tid 56088] [client 142.188.75.61:61739] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDptcKBhrfI6KNv9RgVIgAAAAs"]
[Fri Feb 27 08:48:01.664918 2026] [:error] [pid 56075:tid 56097] [client 124.150.139.46:47536] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDpwcKBhrfI6KNv9RgVSAAAABM"]
[Fri Feb 27 08:48:01.668830 2026] [:error] [pid 56075:tid 56097] [client 124.150.139.46:47536] [client 124.150.139.46] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminhotbooksbookeeping22024%wppass_d%title0x771d9261description0x771d9261mt_keywords0x771d9261mt_excerpt0x771d92611"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDpwcKBhrfI6KNv9RgVSAAAABM"]
[Fri Feb 27 08:48:48.438452 2026] [:error] [pid 62998:tid 63010] [client 142.188.75.61:62119] [client 142.188.75.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.188.75.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDp8FQeueXZDUmoLom33gAAAQg"]
[Fri Feb 27 08:49:04.096991 2026] [:error] [pid 62998:tid 63013] [client 124.150.139.46:47212] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDqAFQeueXZDUmoLom4HwAAAQs"]
[Fri Feb 27 08:50:09.188927 2026] [:error] [pid 54231:tid 54254] [client 124.150.139.46:50510] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDqQeTvb5AeyJCdY7AhpQAAAFQ"]
[Fri Feb 27 08:51:08.551833 2026] [:error] [pid 54102:tid 54158] [client 124.150.139.46:55198] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDqfHi74D4fiYUm_GfUTAAAAI4"]
[Fri Feb 27 08:51:08.555213 2026] [:error] [pid 54102:tid 54158] [client 124.150.139.46:55198] [client 124.150.139.46] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminadmin22%wppass_u%title0x98d99b65description0x98d99b65mt_keywords0x98d99b65mt_excerpt0x98d99b651"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDqfHi74D4fiYUm_GfUTAAAAI4"]
[Fri Feb 27 08:52:10.456333 2026] [:error] [pid 62998:tid 63020] [client 124.150.139.46:47618] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDqulQeueXZDUmoLom7yQAAARI"]
[Fri Feb 27 08:53:15.678493 2026] [:error] [pid 62998:tid 63011] [client 124.150.139.46:60256] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDq-1QeueXZDUmoLom8vwAAAQk"]
[Fri Feb 27 08:54:18.051593 2026] [:error] [pid 56075:tid 56080] [client 124.150.139.46:41488] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDrOsKBhrfI6KNv9RgZwwAAAAM"]
[Fri Feb 27 08:55:16.157942 2026] [:error] [pid 62998:tid 63021] [client 124.150.139.46:42158] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDrdFQeueXZDUmoLom_BwAAARM"]
[Fri Feb 27 08:55:16.161593 2026] [:error] [pid 62998:tid 63021] [client 124.150.139.46:42158] [client 124.150.139.46] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping2.com-%wppass_u%title0x5b1bf09fdescription0x5b1bf09fmt_keywords0x5b1bf09fmt_excerpt0x5b1bf09f1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDrdFQeueXZDUmoLom_BwAAARM"]
[Fri Feb 27 08:56:18.711901 2026] [:error] [pid 62998:tid 63021] [client 124.150.139.46:49112] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDrslQeueXZDUmoLonAlgAAARM"]
[Fri Feb 27 08:57:25.819621 2026] [:error] [pid 62998:tid 63019] [client 124.150.139.46:39764] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDr9VQeueXZDUmoLonBSwAAARE"]
[Fri Feb 27 08:58:25.218319 2026] [:error] [pid 62998:tid 63022] [client 124.150.139.46:58510] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDsMVQeueXZDUmoLonCOQAAARQ"]
[Fri Feb 27 08:59:25.020356 2026] [:error] [pid 56075:tid 56080] [client 124.150.139.46:34436] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDsbcKBhrfI6KNv9Rgc-QAAAAM"]
[Fri Feb 27 08:59:28.681805 2026] [:error] [pid 62998:tid 63014] [client 194.32.120.88:62137] [client 194.32.120.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.88, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDscFQeueXZDUmoLonDQQAAAQw"]
[Fri Feb 27 09:00:25.492666 2026] [:error] [pid 54231:tid 54250] [client 124.150.139.46:37102] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDsqeTvb5AeyJCdY7AmngAAAFA"]
[Fri Feb 27 09:01:25.522639 2026] [:error] [pid 54102:tid 54164] [client 124.150.139.46:37742] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDs5Xi74D4fiYUm_GfXFgAAAJQ"]
[Fri Feb 27 09:01:25.524705 2026] [:error] [pid 54102:tid 54164] [client 124.150.139.46:37742] [client 124.150.139.46] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDs5Xi74D4fiYUm_GfXFgAAAJQ"]
[Fri Feb 27 09:01:25.526347 2026] [:error] [pid 54102:tid 54164] [client 124.150.139.46:37742] [client 124.150.139.46] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||hotbooksbookeeping2.com|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDs5Xi74D4fiYUm_GfXFgAAAJQ"]
[Fri Feb 27 09:02:25.755854 2026] [:error] [pid 62998:tid 63016] [client 124.150.139.46:46076] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDtIVQeueXZDUmoLonHoAAAAQ4"]
[Fri Feb 27 09:03:31.439115 2026] [:error] [pid 62998:tid 63023] [client 124.150.139.46:44118] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDtY1QeueXZDUmoLonIPgAAARU"]
[Fri Feb 27 09:04:30.472958 2026] [:error] [pid 54103:tid 54183] [client 124.150.139.46:58394] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDtnuvG4MPCmE0B2sDzAQAAAMw"]
[Fri Feb 27 09:05:30.958231 2026] [:error] [pid 62998:tid 63020] [client 124.150.139.46:43100] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDt2lQeueXZDUmoLonJhgAAARI"]
[Fri Feb 27 09:06:34.733075 2026] [:error] [pid 54102:tid 54161] [client 124.150.139.46:37126] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDuGni74D4fiYUm_GfYFgAAAJE"]
[Fri Feb 27 09:06:34.734893 2026] [:error] [pid 54102:tid 54161] [client 124.150.139.46:37126] [client 124.150.139.46] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDuGni74D4fiYUm_GfYFgAAAJE"]
[Fri Feb 27 09:06:34.736489 2026] [:error] [pid 54102:tid 54161] [client 124.150.139.46:37126] [client 124.150.139.46] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||hotbooksbookeeping2.com|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDuGni74D4fiYUm_GfYFgAAAJE"]
[Fri Feb 27 09:07:34.631342 2026] [:error] [pid 54102:tid 54155] [client 124.150.139.46:39042] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDuVni74D4fiYUm_GfYOwAAAIs"]
[Fri Feb 27 09:08:32.709980 2026] [:error] [pid 62998:tid 63002] [client 124.150.139.46:39480] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDukFQeueXZDUmoLonMPAAAAQE"]
[Fri Feb 27 09:08:32.715336 2026] [:error] [pid 62998:tid 63002] [client 124.150.139.46:39480] [client 124.150.139.46] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping22024%wppass_d%title0xa36b9038description0xa36b9038mt_keywords0xa36b9038mt_excerpt0xa36b90381"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDukFQeueXZDUmoLonMPAAAAQE"]
[Fri Feb 27 09:09:35.441522 2026] [:error] [pid 62998:tid 63022] [client 124.150.139.46:37326] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDuz1QeueXZDUmoLonNZQAAARQ"]
[Fri Feb 27 09:10:42.671946 2026] [:error] [pid 54231:tid 54236] [client 124.150.139.46:52198] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDvEuTvb5AeyJCdY7AsEgAAAEI"]
[Fri Feb 27 09:11:40.617215 2026] [:error] [pid 62998:tid 63018] [client 124.150.139.46:54190] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDvTFQeueXZDUmoLonO5QAAARA"]
[Fri Feb 27 09:11:40.620953 2026] [:error] [pid 62998:tid 63018] [client 124.150.139.46:54190] [client 124.150.139.46] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping2.com22%wppass_u%title0xdc0384d2description0xdc0384d2mt_keywords0xdc0384d2mt_excerpt0xdc0384d21"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDvTFQeueXZDUmoLonO5QAAARA"]
[Fri Feb 27 09:12:42.829214 2026] [:error] [pid 62998:tid 63006] [client 124.150.139.46:46132] [client 124.150.139.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.150.139.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaDvilQeueXZDUmoLonP0AAAAQQ"]
[Fri Feb 27 09:13:16.528334 2026] [:error] [pid 56075:tid 56096] [client 194.32.120.83:28809] [client 194.32.120.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.83, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDvrMKBhrfI6KNv9Rgl9QAAABI"]
[Fri Feb 27 09:27:15.261280 2026] [:error] [pid 56075:tid 56095] [client 194.32.120.83:40177] [client 194.32.120.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.83, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaDy88KBhrfI6KNv9RgvFQAAABE"]
[Fri Feb 27 09:41:06.176877 2026] [:error] [pid 54231:tid 54253] [client 194.32.120.91:59723] [client 194.32.120.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.91, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaD2MuTvb5AeyJCdY7A3JwAAAFM"]
[Fri Feb 27 09:54:55.066543 2026] [:error] [pid 54101:tid 54108] [client 194.32.120.91:40379] [client 194.32.120.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.91, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaD5b1Y5qgRktcYTGFvGhwAAAcA"]
[Fri Feb 27 10:08:42.986997 2026] [:error] [pid 56075:tid 56088] [client 194.32.120.94:58969] [client 194.32.120.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaD8qsKBhrfI6KNv9RhHpAAAAAs"]
[Fri Feb 27 10:22:27.138872 2026] [:error] [pid 62998:tid 63008] [client 194.32.120.110:32765] [client 194.32.120.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.110, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaD_41QeueXZDUmoLokLHAAAAQY"]
[Fri Feb 27 10:36:23.836441 2026] [:error] [pid 56075:tid 56078] [client 194.32.120.97:23523] [client 194.32.120.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.97, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaEDJ8KBhrfI6KNv9RhYyQAAAAE"]
[Fri Feb 27 10:45:15.697484 2026] [:error] [pid 62998:tid 63018] [client 65.108.78.33:34428] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaEFO1QeueXZDUmoLokfsgAAARA"]
[Fri Feb 27 10:45:18.405247 2026] [:error] [pid 54231:tid 54254] [client 65.108.78.33:34442] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaEFPuTvb5AeyJCdY7BS_wAAAFQ"]
[Fri Feb 27 10:45:21.159271 2026] [:error] [pid 62998:tid 63005] [client 65.108.78.33:34444] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aaEFQVQeueXZDUmoLokf2QAAAQM"]
[Fri Feb 27 10:45:23.728870 2026] [:error] [pid 62998:tid 63007] [client 65.108.78.33:13420] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aaEFQ1QeueXZDUmoLokgEwAAAQU"]
[Fri Feb 27 10:45:26.361228 2026] [:error] [pid 56075:tid 56096] [client 65.108.78.33:13434] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaEFRsKBhrfI6KNv9RheHQAAABI"]
[Fri Feb 27 10:45:28.952602 2026] [:error] [pid 56075:tid 56102] [client 65.108.78.33:13446] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aaEFSMKBhrfI6KNv9RheJQAAABg"]
[Fri Feb 27 10:45:31.709404 2026] [:error] [pid 62998:tid 63023] [client 65.108.78.33:13456] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aaEFS1QeueXZDUmoLokgkAAAARU"]
[Fri Feb 27 10:45:34.266584 2026] [:error] [pid 54231:tid 54236] [client 65.108.78.33:19240] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaEFTuTvb5AeyJCdY7BTQQAAAEI"]
[Fri Feb 27 10:45:36.921183 2026] [:error] [pid 54103:tid 54181] [client 65.108.78.33:19256] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaEFUOvG4MPCmE0B2sAQ-wAAAMo"]
[Fri Feb 27 10:45:39.477276 2026] [:error] [pid 54103:tid 54193] [client 65.108.78.33:19270] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaEFU-vG4MPCmE0B2sARDgAAANY"]
[Fri Feb 27 10:45:41.952704 2026] [:error] [pid 56075:tid 56083] [client 65.108.78.33:19274] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaEFVcKBhrfI6KNv9RheNQAAAAY"]
[Fri Feb 27 10:45:44.503579 2026] [:error] [pid 54231:tid 54237] [client 65.108.78.33:28336] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaEFWOTvb5AeyJCdY7BTWwAAAEM"]
[Fri Feb 27 10:45:47.012474 2026] [:error] [pid 56075:tid 56077] [client 65.108.78.33:28348] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaEFW8KBhrfI6KNv9RheSAAAAAA"]
[Fri Feb 27 10:45:49.906915 2026] [:error] [pid 62998:tid 63024] [client 65.108.78.33:28352] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaEFXVQeueXZDUmoLokgxgAAARY"]
[Fri Feb 27 10:45:52.524491 2026] [:error] [pid 56075:tid 56083] [client 65.108.78.33:2450] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaEFYMKBhrfI6KNv9RheVgAAAAY"]
[Fri Feb 27 10:45:55.131927 2026] [:error] [pid 62998:tid 63018] [client 65.108.78.33:2456] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaEFY1QeueXZDUmoLokg0wAAARA"]
[Fri Feb 27 10:45:57.694911 2026] [:error] [pid 56075:tid 56095] [client 65.108.78.33:2458] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aaEFZcKBhrfI6KNv9RheZAAAABE"]
[Fri Feb 27 10:46:00.178660 2026] [:error] [pid 54231:tid 54243] [client 65.108.78.33:2460] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaEFaOTvb5AeyJCdY7BTcgAAAEk"]
[Fri Feb 27 10:46:02.829508 2026] [:error] [pid 62998:tid 63005] [client 65.108.78.33:50482] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaEFalQeueXZDUmoLokhCgAAAQM"]
[Fri Feb 27 10:46:05.416114 2026] [:error] [pid 62998:tid 63001] [client 65.108.78.33:50494] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaEFbVQeueXZDUmoLokhKgAAAQA"]
[Fri Feb 27 10:46:07.906795 2026] [:error] [pid 56075:tid 56088] [client 65.108.78.33:50496] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaEFb8KBhrfI6KNv9Rhe5wAAAAs"]
[Fri Feb 27 11:03:18.146999 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.35:31203] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aaEJdlQeueXZDUmoLok09gAAAQ0"]
[Fri Feb 27 11:03:19.176188 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.19:44457] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aaEJd1QeueXZDUmoLok1BwAAAQc"]
[Fri Feb 27 11:03:20.273768 2026] [:error] [pid 54103:tid 54179] [client 64.64.108.49:45963] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aaEJeOvG4MPCmE0B2sAXrgAAAMg"]
[Fri Feb 27 11:03:26.566755 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.48:23381] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaEJflQeueXZDUmoLok1ZgAAAQ0"]
[Fri Feb 27 11:03:27.612307 2026] [:error] [pid 54102:tid 54153] [client 64.64.108.47:48493] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaEJf3i74D4fiYUm_Gf1CAAAAIk"]
[Fri Feb 27 11:03:59.346746 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.43:39121] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaEJn1QeueXZDUmoLok3SQAAARU"]
[Fri Feb 27 11:04:00.288921 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.35:47699] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaEJoMKBhrfI6KNv9Rhv4QAAAAw"]
[Fri Feb 27 11:17:27.132999 2026] [:error] [pid 54102:tid 54146] [client 182.42.105.85:49355] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaEMx3i74D4fiYUm_GcVLgAAAII"]
[Fri Feb 27 11:29:56.031579 2026] [:error] [pid 56075:tid 56098] [client 194.32.120.107:61447] [client 194.32.120.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.107, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaEPtMKBhrfI6KNv9RimcQAAABQ"]
[Fri Feb 27 12:12:17.915037 2026] [:error] [pid 49306:tid 49320] [client 194.32.120.95:36271] [client 194.32.120.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.95, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaEZofnSUDZue59Px9vHuwAAAUw"]
[Fri Feb 27 12:26:09.929261 2026] [:error] [pid 49306:tid 49324] [client 194.32.120.115:58263] [client 194.32.120.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.115, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaEc4fnSUDZue59Px9vVIgAAAVA"]
[Fri Feb 27 12:29:00.304948 2026] [:error] [pid 54103:tid 54187] [client 43.128.149.102:36774] [client 43.128.149.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaEdjOvG4MPCmE0B2sBV7wAAANA"]
[Fri Feb 27 12:56:32.754840 2026] [:error] [pid 52073:tid 52093] [client 194.32.120.83:40373] [client 194.32.120.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.83, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaEkAIa650YPyxXVeRblOAAAAZE"]
[Fri Feb 27 13:11:02.236060 2026] [:error] [pid 49306:tid 49331] [client 4.193.177.110:2207] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaEnZvnSUDZue59Px9sAQgAAAVc"]
[Fri Feb 27 13:11:02.614778 2026] [:error] [pid 54101:tid 54126] [client 4.193.177.110:2193] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaEnZlY5qgRktcYTGFsNyQAAAdI"]
[Fri Feb 27 13:11:03.011236 2026] [:error] [pid 54231:tid 54248] [client 4.193.177.110:5556] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaEnZ-Tvb5AeyJCdY7CsXgAAAE4"]
[Fri Feb 27 13:11:03.363510 2026] [:error] [pid 52073:tid 52098] [client 4.193.177.110:2216] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaEnZ4a650YPyxXVeRbskQAAAZY"]
[Fri Feb 27 13:15:03.024812 2026] [:error] [pid 49306:tid 49329] [client 194.32.120.112:63929] [client 194.32.120.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaEoV_nSUDZue59Px9sDSQAAAVU"]
[Fri Feb 27 13:28:58.200522 2026] [:error] [pid 52073:tid 52090] [client 194.32.120.100:29941] [client 194.32.120.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.100, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaErmoa650YPyxXVeRb0kQAAAY4"]
[Fri Feb 27 13:42:38.034929 2026] [:error] [pid 54231:tid 54254] [client 194.32.120.96:38909] [client 194.32.120.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.96, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaEuzuTvb5AeyJCdY7CxIAAAAFQ"]
[Fri Feb 27 14:21:27.094262 2026] [:error] [pid 54101:tid 54111] [client 194.32.120.116:63665] [client 194.32.120.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.116, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaE351Y5qgRktcYTGFsUTQAAAcM"]
[Fri Feb 27 14:35:09.114801 2026] [:error] [pid 54103:tid 54195] [client 194.32.120.101:35085] [client 194.32.120.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaE7HevG4MPCmE0B2sBlqAAAANg"]
[Fri Feb 27 14:49:00.937460 2026] [:error] [pid 49306:tid 49317] [client 194.32.120.87:47971] [client 194.32.120.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.87, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaE-XPnSUDZue59Px9tD3AAAAUk"]
[Fri Feb 27 15:02:55.157874 2026] [:error] [pid 52073:tid 52094] [client 194.32.120.90:21837] [client 194.32.120.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.90, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaFBn4a650YPyxXVeRYoVwAAAZI"]
[Fri Feb 27 15:16:35.299477 2026] [:error] [pid 52073:tid 52082] [client 185.192.70.18:29713] [client 185.192.70.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.70.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaFE04a650YPyxXVeRY0dQAAAYY"]
[Fri Feb 27 15:58:30.887308 2026] [:error] [pid 49306:tid 49319] [client 194.32.120.97:44755] [client 194.32.120.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.97, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaFOpvnSUDZue59Px9tvsgAAAUs"]
[Fri Feb 27 16:20:56.671340 2026] [:error] [pid 56075:tid 56081] [client 45.157.54.16:62111] [client 45.157.54.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaFT6MKBhrfI6KNv9RgpqwAAAAQ"]
[Fri Feb 27 16:20:56.671549 2026] [:error] [pid 56075:tid 56081] [client 45.157.54.16:62111] [client 45.157.54.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 45.157.54.16, counter = 9"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaFT6MKBhrfI6KNv9RgpqwAAAAQ"]
[Fri Feb 27 16:20:56.756939 2026] [:error] [pid 52073:tid 52091] [client 45.157.54.16:49183] [client 45.157.54.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaFT6Ia650YPyxXVeRZsmwAAAY8"]
[Fri Feb 27 16:20:56.757100 2026] [:error] [pid 52073:tid 52091] [client 45.157.54.16:49183] [client 45.157.54.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 45.157.54.16, counter = 10"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaFT6Ia650YPyxXVeRZsmwAAAY8"]
[Fri Feb 27 16:33:28.589333 2026] [:error] [pid 62998:tid 63004] [client 194.32.120.93:54345] [client 194.32.120.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.93, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaFW2FQeueXZDUmoLonw-AAAAQI"]
[Fri Feb 27 16:47:12.261491 2026] [:error] [pid 52073:tid 52089] [client 194.32.120.85:51193] [client 194.32.120.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaFaEIa650YPyxXVeRZ8twAAAY0"]
[Fri Feb 27 16:55:00.241336 2026] [:error] [pid 54102:tid 54157] [client 43.157.181.189:58318] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaFb5Hi74D4fiYUm_GdLNgAAAI0"]
[Fri Feb 27 17:00:51.693658 2026] [:error] [pid 52073:tid 52085] [client 194.32.120.84:59539] [client 194.32.120.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.84, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaFdQ4a650YPyxXVeRaGYQAAAYk"]
[Fri Feb 27 17:04:41.699105 2026] [:error] [pid 54103:tid 54177] [client 103.8.27.27:54991] [client 103.8.27.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aaFeKevG4MPCmE0B2sB6QQAAAMY"]
[Fri Feb 27 17:04:41.700106 2026] [:error] [pid 52073:tid 52094] [client 103.8.27.27:54718] [client 103.8.27.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/core/.env"] [unique_id "aaFeKYa650YPyxXVeRaJlwAAAZI"]
[Fri Feb 27 17:55:24.066586 2026] [:error] [pid 49306:tid 49323] [client 194.32.120.101:24763] [client 194.32.120.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaFqDPnSUDZue59Px9unwAAAAU8"]
[Fri Feb 27 18:09:10.578864 2026] [:error] [pid 49306:tid 49328] [client 194.32.120.89:52309] [client 194.32.120.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.89, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaFtRvnSUDZue59Px9uwCAAAAVQ"]
[Fri Feb 27 18:36:46.302492 2026] [:error] [pid 49306:tid 49326] [client 194.32.120.114:36057] [client 194.32.120.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.114, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaFzvvnSUDZue59Px9u-rQAAAVI"]
[Fri Feb 27 18:40:17.217967 2026] [:error] [pid 62998:tid 63011] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0kVQeueXZDUmoLokPsQAAAQk"]
[Fri Feb 27 18:40:24.317397 2026] [:error] [pid 62998:tid 63007] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaF0mFQeueXZDUmoLokPuQAAAQU"], referer: https://www.bing.com/
[Fri Feb 27 18:40:24.491544 2026] [:error] [pid 62998:tid 63017] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0mFQeueXZDUmoLokPugAAAQ8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:40:29.688548 2026] [:error] [pid 62998:tid 63013] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0nVQeueXZDUmoLokPwgAAAQs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:40:33.031848 2026] [:error] [pid 62998:tid 63009] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0oVQeueXZDUmoLokPxgAAAQc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:40:36.357919 2026] [:error] [pid 62998:tid 63023] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0pFQeueXZDUmoLokPzgAAARU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:40:39.794217 2026] [:error] [pid 62998:tid 63013] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0p1QeueXZDUmoLokP0gAAAQs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:40:43.277080 2026] [:error] [pid 62998:tid 63009] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0q1QeueXZDUmoLokP2AAAAQc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:40:46.700204 2026] [:error] [pid 62998:tid 63020] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0rlQeueXZDUmoLokP3QAAARI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:40:49.970753 2026] [:error] [pid 62998:tid 63013] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0sVQeueXZDUmoLokP5gAAAQs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:40:53.163386 2026] [:error] [pid 62998:tid 63026] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0tVQeueXZDUmoLokP7AAAARg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:40:56.276975 2026] [:error] [pid 62998:tid 63017] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0uFQeueXZDUmoLokP8gAAAQ8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:40:59.665582 2026] [:error] [pid 62998:tid 63013] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0u1QeueXZDUmoLokP9gAAAQs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:03.071958 2026] [:error] [pid 62998:tid 63009] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0v1QeueXZDUmoLokP-AAAAQc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:06.420021 2026] [:error] [pid 62998:tid 63001] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0wlQeueXZDUmoLokP_AAAAQA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:09.843595 2026] [:error] [pid 62998:tid 63019] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0xVQeueXZDUmoLokQAwAAARE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:13.058233 2026] [:error] [pid 62998:tid 63024] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0yVQeueXZDUmoLokQBgAAARY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:16.417846 2026] [:error] [pid 62998:tid 63004] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0zFQeueXZDUmoLokQCAAAAQI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:19.745864 2026] [:error] [pid 62998:tid 63009] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF0z1QeueXZDUmoLokQCwAAAQc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:23.112569 2026] [:error] [pid 62998:tid 63026] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF001QeueXZDUmoLokQDQAAARg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:26.442071 2026] [:error] [pid 62998:tid 63015] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF01lQeueXZDUmoLokQEgAAAQ0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:29.931062 2026] [:error] [pid 62998:tid 63023] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF02VQeueXZDUmoLokQFAAAARU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:33.509240 2026] [:error] [pid 62998:tid 63021] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF03VQeueXZDUmoLokQIAAAARM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:36.853471 2026] [:error] [pid 62998:tid 63017] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF04FQeueXZDUmoLokQIgAAAQ8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:40.266938 2026] [:error] [pid 62998:tid 63011] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF05FQeueXZDUmoLokQJgAAAQk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:43.575602 2026] [:error] [pid 62998:tid 63004] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF051QeueXZDUmoLokQKwAAAQI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:46.902233 2026] [:error] [pid 62998:tid 63026] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF06lQeueXZDUmoLokQLgAAARg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:41:50.373556 2026] [:error] [pid 62998:tid 63007] [client 54.215.238.21:60613] [client 54.215.238.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.215.238.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF07lQeueXZDUmoLokQNAAAAQU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Feb 27 18:42:51.785889 2026] [:error] [pid 49306:tid 49325] [client 123.187.240.242:47224] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaF1K_nSUDZue59Px9vBigAAAVE"]
[Fri Feb 27 18:50:32.520212 2026] [:error] [pid 52073:tid 52093] [client 194.32.120.96:25195] [client 194.32.120.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.96, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF2-Ia650YPyxXVeRbWLwAAAZE"]
[Fri Feb 27 19:04:20.685117 2026] [:error] [pid 49306:tid 49314] [client 194.32.120.91:64373] [client 194.32.120.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.91, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF6NPnSUDZue59Px9vOMwAAAUY"]
[Fri Feb 27 19:21:03.585463 2026] [:error] [pid 52073:tid 52092] [client 194.32.120.101:24981] [client 194.32.120.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaF-H4a650YPyxXVeRbxgwAAAZA"]
[Fri Feb 27 19:35:37.004707 2026] [:error] [pid 52073:tid 52086] [client 194.32.120.113:36891] [client 194.32.120.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.113, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaGBiYa650YPyxXVeRb-qAAAAYo"]
[Fri Feb 27 19:58:31.906649 2026] [:error] [pid 52073:tid 52097] [client 194.32.120.100:56673] [client 194.32.120.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.100, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaGG54a650YPyxXVeRYSfQAAAZU"]
[Fri Feb 27 20:21:53.683625 2026] [:error] [pid 49306:tid 49312] [client 170.106.82.209:56884] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaGMYfnSUDZue59Px9v3fAAAAUQ"]
[Fri Feb 27 20:55:52.862453 2026] [:error] [pid 62998:tid 63008] [client 194.32.120.101:37225] [client 194.32.120.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaGUWFQeueXZDUmoLok9dwAAAQY"]
[Fri Feb 27 21:09:45.287465 2026] [:error] [pid 54101:tid 54113] [client 194.32.120.84:59825] [client 194.32.120.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.84, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaGXmVY5qgRktcYTGFs9-QAAAcU"]
[Fri Feb 27 21:33:03.036664 2026] [autoindex:error] [pid 56075:tid 56093] [client 45.131.195.75:31079] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:33:03.290749 2026] [autoindex:error] [pid 56075:tid 56077] [client 45.131.195.75:31079] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:33:03.557169 2026] [autoindex:error] [pid 56075:tid 56084] [client 45.131.195.75:31079] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:33:03.853230 2026] [autoindex:error] [pid 56075:tid 56093] [client 45.131.195.75:31079] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:33:05.873114 2026] [autoindex:error] [pid 52073:tid 52095] [client 45.131.195.58:46791] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:33:06.114632 2026] [autoindex:error] [pid 52073:tid 52095] [client 45.131.195.58:46791] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:33:06.357910 2026] [autoindex:error] [pid 52073:tid 52093] [client 45.131.195.58:46791] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:33:06.686406 2026] [autoindex:error] [pid 52073:tid 52095] [client 45.131.195.58:46791] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 21:36:14.539886 2026] [:error] [pid 54231:tid 54257] [client 65.108.125.120:13506] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aaGdzuTvb5AeyJCdY7AilQAAAFc"]
[Fri Feb 27 21:36:17.204145 2026] [:error] [pid 52073:tid 52094] [client 65.108.125.120:13520] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaGd0Ya650YPyxXVeRZ17AAAAZI"]
[Fri Feb 27 21:36:19.892145 2026] [:error] [pid 52073:tid 52093] [client 65.108.125.120:47346] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaGd04a650YPyxXVeRZ2DQAAAZE"]
[Fri Feb 27 21:36:22.572375 2026] [:error] [pid 56075:tid 56080] [client 65.108.125.120:47352] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaGd1sKBhrfI6KNv9RjsQwAAAAM"]
[Fri Feb 27 21:36:25.110653 2026] [:error] [pid 54231:tid 54252] [client 65.108.125.120:47364] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaGd2eTvb5AeyJCdY7Ai9QAAAFI"]
[Fri Feb 27 21:36:27.722546 2026] [:error] [pid 56075:tid 56100] [client 65.108.125.120:47372] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaGd28KBhrfI6KNv9RjszgAAABY"]
[Fri Feb 27 21:36:30.412801 2026] [:error] [pid 54102:tid 54144] [client 65.108.125.120:15760] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aaGd3ni74D4fiYUm_Gd-ZQAAAIA"]
[Fri Feb 27 21:36:32.906979 2026] [:error] [pid 54231:tid 54258] [client 65.108.125.120:15764] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaGd4OTvb5AeyJCdY7AjSQAAAFg"]
[Fri Feb 27 21:36:35.524597 2026] [:error] [pid 52073:tid 52090] [client 65.108.125.120:15780] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaGd44a650YPyxXVeRZ20AAAAY4"]
[Fri Feb 27 21:36:38.009990 2026] [:error] [pid 52073:tid 52088] [client 65.108.125.120:15796] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaGd5oa650YPyxXVeRZ3BAAAAYw"]
[Fri Feb 27 21:36:40.649215 2026] [:error] [pid 54231:tid 54240] [client 65.108.125.120:6366] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaGd6OTvb5AeyJCdY7AjjwAAAEY"]
[Fri Feb 27 21:36:43.309830 2026] [:error] [pid 56075:tid 56088] [client 65.108.125.120:6380] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aaGd68KBhrfI6KNv9Rjt-gAAAAs"]
[Fri Feb 27 21:36:46.032546 2026] [:error] [pid 56075:tid 56101] [client 65.108.125.120:6388] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaGd7sKBhrfI6KNv9RjuVAAAABc"]
[Fri Feb 27 21:36:48.629206 2026] [:error] [pid 52073:tid 52079] [client 65.108.125.120:65212] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaGd8Ia650YPyxXVeRZ3zgAAAYM"]
[Fri Feb 27 21:36:51.349508 2026] [:error] [pid 56075:tid 56088] [client 65.108.125.120:65218] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaGd88KBhrfI6KNv9RjuvAAAAAs"]
[Fri Feb 27 21:36:54.010431 2026] [:error] [pid 52073:tid 52080] [client 65.108.125.120:65232] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaGd9oa650YPyxXVeRZ4KQAAAYQ"]
[Fri Feb 27 21:36:56.674404 2026] [:error] [pid 54231:tid 54248] [client 65.108.125.120:65242] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aaGd-OTvb5AeyJCdY7AkBgAAAE4"]
[Fri Feb 27 21:36:59.316402 2026] [:error] [pid 62998:tid 63013] [client 65.108.125.120:33692] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aaGd-1QeueXZDUmoLolfgQAAAQs"]
[Fri Feb 27 21:37:01.935638 2026] [:error] [pid 54102:tid 54169] [client 65.108.125.120:33698] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aaGd_Xi74D4fiYUm_Gd-zwAAAJg"]
[Fri Feb 27 21:37:04.588961 2026] [:error] [pid 56075:tid 56086] [client 65.108.125.120:33714] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aaGeAMKBhrfI6KNv9RjvcQAAAAk"]
[Fri Feb 27 21:37:07.229418 2026] [:error] [pid 49306:tid 49318] [client 65.108.125.120:33720] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaGeA_nSUDZue59Px9syrwAAAUo"]
[Fri Feb 27 21:37:19.277645 2026] [:error] [pid 49306:tid 49325] [client 194.32.120.85:41799] [client 194.32.120.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaGeD_nSUDZue59Px9szgQAAAVE"]
[Fri Feb 27 21:38:08.330295 2026] [:error] [pid 56075:tid 56087] [client 65.108.125.120:4816] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aaGeQMKBhrfI6KNv9RjygQAAAAo"]
[Fri Feb 27 21:38:10.879614 2026] [:error] [pid 52073:tid 52090] [client 65.108.125.120:4830] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aaGeQoa650YPyxXVeRZ9TwAAAY4"]
[Fri Feb 27 21:38:13.405538 2026] [:error] [pid 56075:tid 56102] [client 65.108.125.120:4838] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aaGeRcKBhrfI6KNv9RjyxAAAABg"]
[Fri Feb 27 21:38:15.978630 2026] [:error] [pid 52073:tid 52098] [client 65.108.125.120:4840] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aaGeR4a650YPyxXVeRZ9nQAAAZY"]
[Fri Feb 27 21:38:18.504769 2026] [:error] [pid 56075:tid 56077] [client 65.108.125.120:48594] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aaGeSsKBhrfI6KNv9Rjy_AAAAAA"]
[Fri Feb 27 21:38:21.167253 2026] [:error] [pid 49306:tid 49326] [client 65.108.125.120:48610] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaGeTfnSUDZue59Px9s2IwAAAVI"]
[Fri Feb 27 21:38:23.906649 2026] [:error] [pid 52073:tid 52092] [client 65.108.125.120:48614] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aaGeT4a650YPyxXVeRZ-AQAAAZA"]
[Fri Feb 27 21:38:26.291025 2026] [:error] [pid 52073:tid 52087] [client 65.108.125.120:48622] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aaGeUoa650YPyxXVeRZ-QAAAAYs"]
[Fri Feb 27 21:38:28.960011 2026] [:error] [pid 56075:tid 56084] [client 65.108.125.120:42060] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaGeVMKBhrfI6KNv9RjzeQAAAAc"]
[Fri Feb 27 21:38:31.555047 2026] [:error] [pid 52073:tid 52085] [client 65.108.125.120:42068] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaGeV4a650YPyxXVeRZ-mQAAAYk"]
[Fri Feb 27 21:38:34.230111 2026] [:error] [pid 52073:tid 52084] [client 65.108.125.120:42070] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aaGeWoa650YPyxXVeRZ-xwAAAYg"]
[Fri Feb 27 21:38:36.771019 2026] [:error] [pid 56075:tid 56082] [client 65.108.125.120:42084] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaGeXMKBhrfI6KNv9Rj0HgAAAAU"]
[Fri Feb 27 21:38:39.451744 2026] [:error] [pid 52073:tid 52098] [client 65.108.125.120:11358] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaGeX4a650YPyxXVeRZ-_gAAAZY"]
[Fri Feb 27 21:38:42.169262 2026] [:error] [pid 54101:tid 54109] [client 65.108.125.120:11370] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaGeYlY5qgRktcYTGFtPWgAAAcE"]
[Fri Feb 27 21:38:44.752006 2026] [:error] [pid 54103:tid 54180] [client 65.108.125.120:11386] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaGeZOvG4MPCmE0B2sC2gAAAAMk"]
[Fri Feb 27 21:38:50.283504 2026] [:error] [pid 49306:tid 49328] [client 65.108.125.120:19610] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaGeavnSUDZue59Px9s3SAAAAVQ"]
[Fri Feb 27 21:38:52.819210 2026] [:error] [pid 49306:tid 49321] [client 65.108.125.120:19616] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aaGebPnSUDZue59Px9s3ZAAAAU0"]
[Fri Feb 27 21:38:55.215133 2026] [:error] [pid 52073:tid 52081] [client 65.108.125.120:19626] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aaGeb4a650YPyxXVeRZ_cwAAAYU"]
[Fri Feb 27 21:38:57.761901 2026] [:error] [pid 62998:tid 63025] [client 65.108.125.120:19638] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aaGecVQeueXZDUmoLoliswAAARc"]
[Fri Feb 27 21:39:00.351733 2026] [:error] [pid 52073:tid 52080] [client 65.108.125.120:36622] [client 65.108.125.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaGedIa650YPyxXVeRZ_kwAAAYQ"]
[Fri Feb 27 21:56:45.795364 2026] [:error] [pid 56075:tid 56082] [client 20.151.128.128:51053] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aaGincKBhrfI6KNv9RgXNAAAAAU"]
[Fri Feb 27 21:56:47.015131 2026] [:error] [pid 52073:tid 52087] [client 20.151.128.128:61296] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aaGin4a650YPyxXVeRaYnQAAAYs"]
[Fri Feb 27 21:56:49.489904 2026] [:error] [pid 56075:tid 56092] [client 20.151.128.128:61310] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aaGiocKBhrfI6KNv9RgXSwAAAA4"]
[Fri Feb 27 21:56:50.311194 2026] [:error] [pid 54231:tid 54238] [client 20.151.128.128:58134] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aaGiouTvb5AeyJCdY7AtLQAAAEQ"]
[Fri Feb 27 21:57:14.867679 2026] [:error] [pid 52073:tid 52082] [client 20.151.128.128:61263] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123.php"] [unique_id "aaGiuoa650YPyxXVeRaYxwAAAYY"]
[Fri Feb 27 21:57:16.551604 2026] [:error] [pid 52073:tid 52093] [client 20.151.128.128:61289] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123.php"] [unique_id "aaGivIa650YPyxXVeRaYzQAAAZE"]
[Fri Feb 27 21:57:17.931705 2026] [:error] [pid 54101:tid 54112] [client 20.151.128.128:37800] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123.php"] [unique_id "aaGivVY5qgRktcYTGFtSQwAAAcQ"]
[Fri Feb 27 21:57:19.596266 2026] [:error] [pid 54231:tid 54249] [client 20.151.128.128:32097] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123.php"] [unique_id "aaGiv-Tvb5AeyJCdY7AtkwAAAE8"]
[Fri Feb 27 21:57:21.333206 2026] [:error] [pid 62998:tid 63020] [client 20.151.128.128:33077] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh.php"] [unique_id "aaGiwVQeueXZDUmoLoltHAAAARI"]
[Fri Feb 27 21:57:24.260605 2026] [:error] [pid 52073:tid 52078] [client 20.151.128.128:29251] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh.php"] [unique_id "aaGixIa650YPyxXVeRaY5QAAAYI"]
[Fri Feb 27 21:57:25.793295 2026] [:error] [pid 54101:tid 54129] [client 20.151.128.128:58165] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh.php"] [unique_id "aaGixVY5qgRktcYTGFtSSgAAAdU"]
[Fri Feb 27 21:57:27.174888 2026] [:error] [pid 56075:tid 56093] [client 20.151.128.128:58170] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh.php"] [unique_id "aaGix8KBhrfI6KNv9RgXjgAAAA8"]
[Fri Feb 27 21:57:35.316647 2026] [:error] [pid 62998:tid 63013] [client 20.151.128.128:64680] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aaGiz1QeueXZDUmoLoltPAAAAQs"]
[Fri Feb 27 21:57:36.575830 2026] [:error] [pid 54231:tid 54243] [client 20.151.128.128:32125] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aaGi0OTvb5AeyJCdY7AtvgAAAEk"]
[Fri Feb 27 21:57:37.279283 2026] [:error] [pid 54231:tid 54234] [client 20.151.128.128:33047] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aaGi0eTvb5AeyJCdY7AtwgAAAEA"]
[Fri Feb 27 21:57:38.335067 2026] [:error] [pid 54102:tid 54146] [client 20.151.128.128:64691] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aaGi0ni74D4fiYUm_GeDLgAAAII"]
[Fri Feb 27 21:57:41.236209 2026] [:error] [pid 54103:tid 54175] [client 20.151.128.128:29164] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xigmltad.php"] [unique_id "aaGi1evG4MPCmE0B2sC7eAAAAMQ"]
[Fri Feb 27 21:57:55.546999 2026] [:error] [pid 49306:tid 49311] [client 20.151.128.128:58140] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aqotrjkg.php"] [unique_id "aaGi4_nSUDZue59Px9tGSQAAAUM"]
[Fri Feb 27 21:57:57.491365 2026] [:error] [pid 56075:tid 56083] [client 20.151.128.128:37818] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aqotrjkg.php"] [unique_id "aaGi5cKBhrfI6KNv9RgYDwAAAAY"]
[Fri Feb 27 21:57:58.793240 2026] [:error] [pid 54101:tid 54114] [client 20.151.128.128:59541] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aqotrjkg.php"] [unique_id "aaGi5lY5qgRktcYTGFtSaQAAAcY"]
[Fri Feb 27 21:58:01.473855 2026] [:error] [pid 52073:tid 52093] [client 20.151.128.128:32100] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aqotrjkg.php"] [unique_id "aaGi6Ya650YPyxXVeRaZXQAAAZE"]
[Fri Feb 27 21:58:04.225593 2026] [:error] [pid 49306:tid 49323] [client 20.151.128.128:32089] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aaGi7PnSUDZue59Px9tGVgAAAU8"]
[Fri Feb 27 21:58:07.077987 2026] [:error] [pid 52073:tid 52095] [client 20.151.128.128:29291] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aaGi74a650YPyxXVeRaZeQAAAZM"]
[Fri Feb 27 21:58:11.295807 2026] [:error] [pid 62998:tid 63015] [client 20.151.128.128:37823] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aaGi81QeueXZDUmoLolthQAAAQ0"]
[Fri Feb 27 21:58:19.890146 2026] [:error] [pid 56075:tid 56080] [client 20.151.128.128:32075] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "aaGi-8KBhrfI6KNv9RgYZwAAAAM"]
[Fri Feb 27 21:58:32.426281 2026] [:error] [pid 56075:tid 56081] [client 20.151.128.128:29167] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "aaGjCMKBhrfI6KNv9RgY4AAAAAQ"]
[Fri Feb 27 21:58:41.533020 2026] [:error] [pid 62998:tid 63008] [client 20.151.128.128:59570] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aaGjEVQeueXZDUmoLoltnAAAAQY"]
[Fri Feb 27 21:58:45.697501 2026] [:error] [pid 54103:tid 54184] [client 20.151.128.128:58131] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aaGjFevG4MPCmE0B2sC75wAAAM0"]
[Fri Feb 27 21:58:47.114127 2026] [:error] [pid 52073:tid 52082] [client 20.151.128.128:61299] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aaGjF4a650YPyxXVeRaZ2gAAAYY"]
[Fri Feb 27 21:58:48.696713 2026] [:error] [pid 52073:tid 52100] [client 20.151.128.128:29272] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aaGjGIa650YPyxXVeRaZ6AAAAZg"]
[Fri Feb 27 21:58:51.050875 2026] [:error] [pid 52073:tid 52078] [client 20.151.128.128:32126] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ovajkgsbb.php"] [unique_id "aaGjG4a650YPyxXVeRaZ8wAAAYI"]
[Fri Feb 27 21:58:52.476927 2026] [:error] [pid 52073:tid 52079] [client 20.151.128.128:37766] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ovajkgsbb.php"] [unique_id "aaGjHIa650YPyxXVeRaZ_AAAAYM"]
[Fri Feb 27 21:58:59.860895 2026] [:error] [pid 49306:tid 49329] [client 20.151.128.128:64934] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhigtouj.php"] [unique_id "aaGjI_nSUDZue59Px9tG5wAAAVU"]
[Fri Feb 27 21:59:00.713934 2026] [:error] [pid 62998:tid 63007] [client 20.151.128.128:62971] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhigtouj.php"] [unique_id "aaGjJFQeueXZDUmoLoltuAAAAQU"]
[Fri Feb 27 21:59:02.497318 2026] [:error] [pid 54103:tid 54176] [client 20.151.128.128:61276] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhigtouj.php"] [unique_id "aaGjJuvG4MPCmE0B2sC79gAAAMU"]
[Fri Feb 27 21:59:14.742082 2026] [:error] [pid 49306:tid 49325] [client 20.151.128.128:29256] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhigtouj.php"] [unique_id "aaGjMvnSUDZue59Px9tG-gAAAVE"]
[Fri Feb 27 21:59:17.556084 2026] [:error] [pid 52073:tid 52092] [client 20.151.128.128:64909] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggddssvl.php"] [unique_id "aaGjNYa650YPyxXVeRaaNQAAAZA"]
[Fri Feb 27 21:59:20.964214 2026] [:error] [pid 56075:tid 56101] [client 20.151.128.128:59540] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggddssvl.php"] [unique_id "aaGjOMKBhrfI6KNv9RgZegAAABc"]
[Fri Feb 27 21:59:23.244212 2026] [:error] [pid 54101:tid 54131] [client 20.151.128.128:53774] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggddssvl.php"] [unique_id "aaGjO1Y5qgRktcYTGFtSpAAAAdc"]
[Fri Feb 27 21:59:25.909733 2026] [:error] [pid 56075:tid 56082] [client 20.151.128.128:37791] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggddssvl.php"] [unique_id "aaGjPcKBhrfI6KNv9RgZiQAAAAU"]
[Fri Feb 27 21:59:28.341682 2026] [:error] [pid 62998:tid 63017] [client 20.151.128.128:37821] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uujuu.php"] [unique_id "aaGjQFQeueXZDUmoLolt4gAAAQ8"]
[Fri Feb 27 21:59:37.104542 2026] [:error] [pid 54103:tid 54180] [client 20.151.128.128:61267] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uujuu.php"] [unique_id "aaGjSevG4MPCmE0B2sC8NAAAAMk"]
[Fri Feb 27 21:59:38.274655 2026] [:error] [pid 49306:tid 49330] [client 20.151.128.128:29169] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uujuu.php"] [unique_id "aaGjSvnSUDZue59Px9tHOAAAAVY"]
[Fri Feb 27 21:59:44.428563 2026] [:error] [pid 52073:tid 52084] [client 20.151.128.128:48063] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aaGjUIa650YPyxXVeRaaiwAAAYg"]
[Fri Feb 27 21:59:46.002612 2026] [:error] [pid 54231:tid 54248] [client 20.151.128.128:29138] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aaGjUuTvb5AeyJCdY7AuYAAAAE4"]
[Fri Feb 27 21:59:47.183027 2026] [:error] [pid 56075:tid 56090] [client 20.151.128.128:64913] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aaGjU8KBhrfI6KNv9RgaBQAAAAw"]
[Fri Feb 27 21:59:48.291917 2026] [:error] [pid 49306:tid 49324] [client 20.151.128.128:29173] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aaGjVPnSUDZue59Px9tHXgAAAVA"]
[Fri Feb 27 21:59:54.331615 2026] [:error] [pid 49306:tid 49325] [client 20.151.128.128:64552] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp5.php"] [unique_id "aaGjWvnSUDZue59Px9tHewAAAVE"]
[Fri Feb 27 21:59:56.462762 2026] [:error] [pid 56075:tid 56101] [client 20.151.128.128:64928] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp5.php"] [unique_id "aaGjXMKBhrfI6KNv9RgaRQAAABc"]
[Fri Feb 27 21:59:57.354001 2026] [:error] [pid 56075:tid 56096] [client 20.151.128.128:53766] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp5.php"] [unique_id "aaGjXcKBhrfI6KNv9RgaSwAAABI"]
[Fri Feb 27 22:00:11.519678 2026] [:error] [pid 54103:tid 54173] [client 20.151.128.128:41105] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aaGja-vG4MPCmE0B2sC8XQAAAMI"]
[Fri Feb 27 22:00:17.258240 2026] [:error] [pid 56075:tid 56079] [client 20.151.128.128:37884] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aaGjccKBhrfI6KNv9RgaowAAAAI"]
[Fri Feb 27 22:00:19.596972 2026] [:error] [pid 56075:tid 56088] [client 20.151.128.128:41112] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aaGjc8KBhrfI6KNv9RgaqAAAAAs"]
[Fri Feb 27 22:00:28.821475 2026] [:error] [pid 54101:tid 54113] [client 20.151.128.128:63036] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccrheegr.php"] [unique_id "aaGjfFY5qgRktcYTGFtS0gAAAcU"]
[Fri Feb 27 22:00:30.158600 2026] [:error] [pid 54102:tid 54152] [client 20.151.128.128:59127] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccrheegr.php"] [unique_id "aaGjfni74D4fiYUm_GeEFQAAAIg"]
[Fri Feb 27 22:00:31.738348 2026] [:error] [pid 56075:tid 56098] [client 20.151.128.128:59090] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccrheegr.php"] [unique_id "aaGjf8KBhrfI6KNv9RgawAAAABQ"]
[Fri Feb 27 22:00:33.397251 2026] [:error] [pid 54103:tid 54188] [client 20.151.128.128:47190] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccrheegr.php"] [unique_id "aaGjgevG4MPCmE0B2sC8aQAAANE"]
[Fri Feb 27 22:00:34.440988 2026] [:error] [pid 52073:tid 52085] [client 20.151.128.128:37881] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aaGjgoa650YPyxXVeRabWAAAAYk"]
[Fri Feb 27 22:00:35.994026 2026] [:error] [pid 54231:tid 54250] [client 20.151.128.128:34729] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aaGjg-Tvb5AeyJCdY7AujQAAAFA"]
[Fri Feb 27 22:00:39.436766 2026] [:error] [pid 54231:tid 54252] [client 20.151.128.128:64574] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aaGjh-Tvb5AeyJCdY7AumQAAAFI"]
[Fri Feb 27 22:00:40.226616 2026] [:error] [pid 54102:tid 54158] [client 20.151.128.128:47168] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aaGjiHi74D4fiYUm_GeEJgAAAI4"]
[Fri Feb 27 22:28:55.799011 2026] [autoindex:error] [pid 56075:tid 56099] [client 20.198.0.58:57954] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 27 22:28:57.000873 2026] [:error] [pid 56075:tid 56096] [client 20.198.0.58:57954] [client 20.198.0.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aaGqKMKBhrfI6KNv9Rg0sgAAABI"]
[Fri Feb 27 22:28:57.551506 2026] [:error] [pid 56075:tid 56087] [client 20.198.0.58:49777] [client 20.198.0.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aaGqKcKBhrfI6KNv9Rg0tAAAAAo"]
[Fri Feb 27 22:28:58.106086 2026] [:error] [pid 49306:tid 49330] [client 20.198.0.58:50138] [client 20.198.0.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aaGqKvnSUDZue59Px9tUrQAAAVY"]
[Fri Feb 27 22:28:58.657060 2026] [:error] [pid 54231:tid 54250] [client 20.198.0.58:50442] [client 20.198.0.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aaGqKuTvb5AeyJCdY7A2QgAAAFA"]
[Fri Feb 27 22:38:58.221605 2026] [:error] [pid 49306:tid 49328] [client 194.32.120.116:41645] [client 194.32.120.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.116, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaGsgvnSUDZue59Px9tdMQAAAVQ"]
[Fri Feb 27 23:15:34.539887 2026] [:error] [pid 54102:tid 54153] [client 20.151.128.128:4040] [client 20.151.128.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaG1Fni74D4fiYUm_GeURwAAAIk"]
[Fri Feb 27 23:15:47.422602 2026] [:error] [pid 49306:tid 49329] [client 20.151.128.128:4073] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaG1I_nSUDZue59Px9tukAAAAVU"]
[Fri Feb 27 23:15:49.749078 2026] [:error] [pid 54103:tid 54191] [client 20.151.128.128:4086] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaG1JevG4MPCmE0B2sDPxAAAANQ"]
[Fri Feb 27 23:15:55.335507 2026] [:error] [pid 62998:tid 63017] [client 20.151.128.128:4079] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaG1K1QeueXZDUmoLomJvwAAAQ8"]
[Fri Feb 27 23:15:56.639865 2026] [:error] [pid 52073:tid 52094] [client 20.151.128.128:3996] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaG1LIa650YPyxXVeRbQfQAAAZI"]
[Fri Feb 27 23:15:58.971458 2026] [:error] [pid 56075:tid 56098] [client 20.151.128.128:4044] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaG1LsKBhrfI6KNv9RhgNAAAABQ"]
[Fri Feb 27 23:16:01.803665 2026] [:error] [pid 54231:tid 54235] [client 20.151.128.128:4067] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaG1MeTvb5AeyJCdY7BHHgAAAEE"]
[Fri Feb 27 23:16:05.604014 2026] [:error] [pid 56075:tid 56087] [client 20.151.128.128:3982] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaG1NcKBhrfI6KNv9RhgVQAAAAo"]
[Fri Feb 27 23:16:08.693292 2026] [:error] [pid 54102:tid 54148] [client 20.151.128.128:4049] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaG1OHi74D4fiYUm_GeUYQAAAIQ"]
[Fri Feb 27 23:16:14.124496 2026] [:error] [pid 49306:tid 49314] [client 20.151.128.128:3978] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf-shell.php"] [unique_id "aaG1PvnSUDZue59Px9tuyAAAAUY"]
[Fri Feb 27 23:16:18.725515 2026] [:error] [pid 54102:tid 54146] [client 20.151.128.128:4053] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf-shell.php"] [unique_id "aaG1Qni74D4fiYUm_GeUYwAAAII"]
[Fri Feb 27 23:16:23.248500 2026] [:error] [pid 62998:tid 63022] [client 20.151.128.128:4050] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf-shell.php"] [unique_id "aaG1R1QeueXZDUmoLomJ6AAAARQ"]
[Fri Feb 27 23:16:28.290483 2026] [:error] [pid 56075:tid 56085] [client 20.151.128.128:4075] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaG1TMKBhrfI6KNv9RhgewAAAAg"]
[Fri Feb 27 23:16:35.385956 2026] [:error] [pid 52073:tid 52079] [client 20.151.128.128:4084] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaG1U4a650YPyxXVeRbQ1wAAAYM"]
[Fri Feb 27 23:16:41.488704 2026] [:error] [pid 62998:tid 63023] [client 20.151.128.128:3974] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaG1WVQeueXZDUmoLomKAwAAARU"]
[Fri Feb 27 23:16:44.398903 2026] [:error] [pid 52073:tid 52077] [client 20.151.128.128:4069] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaG1XIa650YPyxXVeRbQ4AAAAYE"]
[Fri Feb 27 23:16:45.941162 2026] [:error] [pid 54102:tid 54152] [client 20.151.128.128:3977] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaG1XXi74D4fiYUm_GeUbQAAAIg"]
[Fri Feb 27 23:24:57.413714 2026] [:error] [pid 54103:tid 54194] [client 91.224.92.164:50583] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aaG3SevG4MPCmE0B2sDR9wAAANc"]
[Fri Feb 27 23:24:59.004708 2026] [:error] [pid 54103:tid 54190] [client 91.224.92.164:39631] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aaG3S-vG4MPCmE0B2sDR-AAAANM"]
[Fri Feb 27 23:29:11.284885 2026] [:error] [pid 62998:tid 63016] [client 20.220.8.221:45714] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wk/index.php"] [unique_id "aaG4R1QeueXZDUmoLomOYwAAAQ4"]
[Fri Feb 27 23:29:12.124808 2026] [:error] [pid 54102:tid 54165] [client 20.220.8.221:45837] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wk/index.php"] [unique_id "aaG4SHi74D4fiYUm_GeWwQAAAJU"]
[Fri Feb 27 23:29:12.952310 2026] [:error] [pid 49306:tid 49321] [client 20.220.8.221:45716] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wk/index.php"] [unique_id "aaG4SPnSUDZue59Px9t1lgAAAU0"]
[Fri Feb 27 23:29:13.783755 2026] [:error] [pid 54231:tid 54255] [client 20.220.8.221:45750] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wk/index.php"] [unique_id "aaG4SeTvb5AeyJCdY7BKdwAAAFU"]
[Fri Feb 27 23:29:57.637363 2026] [:error] [pid 56075:tid 56098] [client 194.32.120.111:47463] [client 194.32.120.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaG4dcKBhrfI6KNv9RhtWwAAABQ"]
[Fri Feb 27 23:43:36.036936 2026] [:error] [pid 56075:tid 56079] [client 194.32.120.114:22939] [client 194.32.120.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.114, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaG7qMKBhrfI6KNv9Rh68gAAAAI"]
[Fri Feb 27 23:44:26.447658 2026] [:error] [pid 62998:tid 63022] [client 43.154.250.181:45894] [client 43.154.250.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaG72lQeueXZDUmoLomTyAAAARQ"]
[Sat Feb 28 00:36:45.863668 2026] [:error] [pid 38620:tid 38636] [client 194.32.120.115:39023] [client 194.32.120.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.115, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaHIHQP6I7SRqrhh7RrInwAAAU4"]
[Sat Feb 28 00:50:18.461094 2026] [:error] [pid 38586:tid 38598] [client 194.32.120.107:35877] [client 194.32.120.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.107, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaHLSr_i6nvKNhjFW7UlyAAAAQk"]
[Sat Feb 28 01:35:03.964140 2026] [:error] [pid 15240:tid 15261] [client 194.32.120.100:58341] [client 194.32.120.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.100, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaHVxy1iKL_41Rk9A9OAfwAAABM"]
[Sat Feb 28 02:04:51.796408 2026] [:error] [pid 15240:tid 15256] [client 175.6.217.4:56958] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaHcwy1iKL_41Rk9A9OQLQAAAA4"]
[Sat Feb 28 02:22:01.452083 2026] [:error] [pid 15098:tid 15119] [client 20.211.1.210:1032] [client 20.211.1.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.211.1.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaHgyckFqny8dQQbmTk0NwAAAI0"]
[Sat Feb 28 02:22:08.574848 2026] [:error] [pid 15098:tid 15116] [client 20.211.1.210:1032] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aaHg0MkFqny8dQQbmTk0QgAAAIo"]
[Sat Feb 28 02:22:08.648013 2026] [:error] [pid 15098:tid 15121] [client 20.211.1.210:19326] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aaHg0MkFqny8dQQbmTk0QwAAAI8"]
[Sat Feb 28 02:22:08.732048 2026] [:error] [pid 15098:tid 15115] [client 20.211.1.210:26043] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aaHg0MkFqny8dQQbmTk0RAAAAIk"]
[Sat Feb 28 02:22:08.793398 2026] [:error] [pid 15240:tid 15249] [client 20.211.1.210:12601] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aaHg0C1iKL_41Rk9A9OZGwAAAAc"]
[Sat Feb 28 02:26:23.745909 2026] [:error] [pid 38620:tid 38633] [client 178.239.198.155:55147] [client 178.239.198.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.239.198.155, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaHhzwP6I7SRqrhh7RpMUAAAAUs"]
[Sat Feb 28 02:30:16.916694 2026] [:error] [pid 15099:tid 15133] [client 20.104.19.195:51152] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contact.php"] [unique_id "aaHiuOnvP2vtPjYDq_hK-gAAAMA"]
[Sat Feb 28 02:30:17.432437 2026] [:error] [pid 38586:tid 38603] [client 20.104.19.195:51062] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contact.php"] [unique_id "aaHiub_i6nvKNhjFW7V2tAAAAQ4"]
[Sat Feb 28 02:30:18.481850 2026] [:error] [pid 38620:tid 38638] [client 20.104.19.195:15120] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contact.php"] [unique_id "aaHiugP6I7SRqrhh7RpQJAAAAVA"]
[Sat Feb 28 02:30:19.071119 2026] [:error] [pid 15240:tid 15248] [client 20.104.19.195:17826] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contact.php"] [unique_id "aaHiuy1iKL_41Rk9A9OclgAAAAY"]
[Sat Feb 28 02:30:19.623029 2026] [:error] [pid 15240:tid 15243] [client 20.104.19.195:9901] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aaHiuy1iKL_41Rk9A9OcmAAAAAE"]
[Sat Feb 28 02:30:20.118181 2026] [:error] [pid 38586:tid 38601] [client 20.104.19.195:9872] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aaHivL_i6nvKNhjFW7V2ugAAAQw"]
[Sat Feb 28 02:30:20.775290 2026] [:error] [pid 38586:tid 38589] [client 20.104.19.195:51151] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aaHivL_i6nvKNhjFW7V2vgAAAQA"]
[Sat Feb 28 02:30:22.360038 2026] [:error] [pid 38620:tid 38623] [client 20.104.19.195:4562] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "aaHivgP6I7SRqrhh7RpQKgAAAUE"]
[Sat Feb 28 02:30:23.000311 2026] [:error] [pid 15099:tid 15154] [client 20.104.19.195:9856] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/plugins.php"] [unique_id "aaHivunvP2vtPjYDq_hLAwAAANU"]
[Sat Feb 28 02:30:23.871103 2026] [:error] [pid 38620:tid 38628] [client 20.104.19.195:51022] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/plugins.php"] [unique_id "aaHivwP6I7SRqrhh7RpQMQAAAUY"]
[Sat Feb 28 02:30:24.540895 2026] [:error] [pid 38586:tid 38592] [client 20.104.19.195:3940] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/plugins.php"] [unique_id "aaHiwL_i6nvKNhjFW7V2wQAAAQM"]
[Sat Feb 28 02:30:25.001896 2026] [:error] [pid 15240:tid 15263] [client 20.104.19.195:10800] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/plugins.php"] [unique_id "aaHiwS1iKL_41Rk9A9OcoQAAABU"]
[Sat Feb 28 02:30:25.574665 2026] [:error] [pid 15240:tid 15245] [client 20.104.19.195:10369] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aaHiwS1iKL_41Rk9A9OcpgAAAAM"]
[Sat Feb 28 02:30:26.192316 2026] [:error] [pid 38620:tid 38638] [client 20.104.19.195:15130] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aaHiwgP6I7SRqrhh7RpQNgAAAVA"]
[Sat Feb 28 02:30:27.174414 2026] [:error] [pid 38620:tid 38625] [client 20.104.19.195:51039] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aaHiwwP6I7SRqrhh7RpQOQAAAUM"]
[Sat Feb 28 02:30:27.900878 2026] [:error] [pid 38620:tid 38632] [client 20.104.19.195:7508] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aaHiwwP6I7SRqrhh7RpQPQAAAUo"]
[Sat Feb 28 02:30:28.663370 2026] [:error] [pid 38620:tid 38624] [client 20.104.19.195:9159] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaHixAP6I7SRqrhh7RpQQQAAAUI"]
[Sat Feb 28 02:30:29.358137 2026] [:error] [pid 15100:tid 15182] [client 20.104.19.195:17842] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaHixUOEbzcINan_ctLetQAAAFY"]
[Sat Feb 28 02:30:30.150946 2026] [:error] [pid 38620:tid 38622] [client 20.104.19.195:17803] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaHixgP6I7SRqrhh7RpQRwAAAUA"]
[Sat Feb 28 02:30:31.574913 2026] [:error] [pid 38620:tid 38639] [client 20.104.19.195:11816] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaHixwP6I7SRqrhh7RpQSwAAAVE"]
[Sat Feb 28 02:30:32.671341 2026] [:error] [pid 38620:tid 38645] [client 20.104.19.195:2392] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aaHiyAP6I7SRqrhh7RpQVwAAAVc"]
[Sat Feb 28 02:30:33.240997 2026] [:error] [pid 38586:tid 38595] [client 20.104.19.195:51068] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aaHiyb_i6nvKNhjFW7V2zwAAAQY"]
[Sat Feb 28 02:30:33.955917 2026] [:error] [pid 38620:tid 38640] [client 20.104.19.195:14270] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aaHiyQP6I7SRqrhh7RpQYQAAAVI"]
[Sat Feb 28 02:30:34.631580 2026] [:error] [pid 38620:tid 38628] [client 20.104.19.195:10809] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aaHiygP6I7SRqrhh7RpQZwAAAUY"]
[Sat Feb 28 02:30:35.488277 2026] [:error] [pid 38586:tid 38599] [client 20.104.19.195:10804] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/astab.php"] [unique_id "aaHiy7_i6nvKNhjFW7V21gAAAQo"]
[Sat Feb 28 02:30:36.115163 2026] [:error] [pid 15240:tid 15242] [client 20.104.19.195:51157] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/astab.php"] [unique_id "aaHizC1iKL_41Rk9A9OcwAAAAAA"]
[Sat Feb 28 02:30:36.608054 2026] [:error] [pid 38620:tid 38625] [client 20.104.19.195:15146] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/astab.php"] [unique_id "aaHizAP6I7SRqrhh7RpQdAAAAUM"]
[Sat Feb 28 02:30:37.106001 2026] [:error] [pid 38620:tid 38646] [client 20.104.19.195:3956] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/astab.php"] [unique_id "aaHizQP6I7SRqrhh7RpQdgAAAVg"]
[Sat Feb 28 02:30:37.756732 2026] [:error] [pid 38620:tid 38636] [client 20.104.19.195:10777] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless1.php"] [unique_id "aaHizQP6I7SRqrhh7RpQegAAAU4"]
[Sat Feb 28 02:30:38.345069 2026] [:error] [pid 38620:tid 38632] [client 20.104.19.195:51014] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless1.php"] [unique_id "aaHizgP6I7SRqrhh7RpQgQAAAUo"]
[Sat Feb 28 02:30:39.056415 2026] [:error] [pid 15240:tid 15263] [client 20.104.19.195:7513] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless1.php"] [unique_id "aaHizy1iKL_41Rk9A9OcwwAAABU"]
[Sat Feb 28 02:30:39.752717 2026] [:error] [pid 38620:tid 38635] [client 20.104.19.195:14223] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless1.php"] [unique_id "aaHizwP6I7SRqrhh7RpQlQAAAU0"]
[Sat Feb 28 02:30:40.335322 2026] [:error] [pid 38620:tid 38624] [client 20.104.19.195:7515] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file11.php"] [unique_id "aaHi0AP6I7SRqrhh7RpQmwAAAUI"]
[Sat Feb 28 02:30:41.001958 2026] [:error] [pid 38620:tid 38639] [client 20.104.19.195:51178] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file11.php"] [unique_id "aaHi0QP6I7SRqrhh7RpQpgAAAVE"]
[Sat Feb 28 02:30:41.564641 2026] [:error] [pid 15098:tid 15117] [client 20.104.19.195:12951] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file11.php"] [unique_id "aaHi0ckFqny8dQQbmTk20AAAAIs"]
[Sat Feb 28 02:30:42.028360 2026] [:error] [pid 15098:tid 15119] [client 20.104.19.195:11814] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file11.php"] [unique_id "aaHi0skFqny8dQQbmTk20gAAAI0"]
[Sat Feb 28 02:30:42.565456 2026] [:error] [pid 38586:tid 38600] [client 20.104.19.195:17807] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file12.php"] [unique_id "aaHi0r_i6nvKNhjFW7V25QAAAQs"]
[Sat Feb 28 02:30:43.115506 2026] [:error] [pid 38586:tid 38593] [client 20.104.19.195:12991] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file12.php"] [unique_id "aaHi07_i6nvKNhjFW7V25wAAAQQ"]
[Sat Feb 28 02:30:43.627556 2026] [:error] [pid 38620:tid 38642] [client 20.104.19.195:11821] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file12.php"] [unique_id "aaHi0wP6I7SRqrhh7RpQtgAAAVQ"]
[Sat Feb 28 02:30:44.055265 2026] [:error] [pid 15240:tid 15249] [client 20.104.19.195:11776] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file12.php"] [unique_id "aaHi1C1iKL_41Rk9A9OczgAAAAc"]
[Sat Feb 28 02:30:44.575610 2026] [:error] [pid 15100:tid 15161] [client 20.104.19.195:12932] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file13.php"] [unique_id "aaHi1EOEbzcINan_ctLevgAAAEE"]
[Sat Feb 28 02:30:45.076334 2026] [:error] [pid 15240:tid 15251] [client 20.104.19.195:18759] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file13.php"] [unique_id "aaHi1S1iKL_41Rk9A9Oc1QAAAAk"]
[Sat Feb 28 02:30:45.607279 2026] [:error] [pid 38620:tid 38636] [client 20.104.19.195:7541] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file13.php"] [unique_id "aaHi1QP6I7SRqrhh7RpQxAAAAU4"]
[Sat Feb 28 02:30:46.124972 2026] [:error] [pid 38586:tid 38609] [client 20.104.19.195:9178] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file13.php"] [unique_id "aaHi1r_i6nvKNhjFW7V27AAAARQ"]
[Sat Feb 28 02:30:46.616350 2026] [:error] [pid 38620:tid 38637] [client 20.104.19.195:3923] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file14.php"] [unique_id "aaHi1gP6I7SRqrhh7RpQ0AAAAU8"]
[Sat Feb 28 02:30:47.065161 2026] [:error] [pid 15100:tid 15169] [client 20.104.19.195:5321] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file14.php"] [unique_id "aaHi10OEbzcINan_ctLevwAAAEk"]
[Sat Feb 28 02:30:47.719397 2026] [:error] [pid 15240:tid 15257] [client 20.104.19.195:14311] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file14.php"] [unique_id "aaHi1y1iKL_41Rk9A9Oc2QAAAA8"]
[Sat Feb 28 02:30:48.224686 2026] [:error] [pid 15098:tid 15106] [client 20.104.19.195:12928] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file14.php"] [unique_id "aaHi2MkFqny8dQQbmTk23wAAAIE"]
[Sat Feb 28 02:30:48.767786 2026] [:error] [pid 15240:tid 15256] [client 20.104.19.195:9207] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aaHi2C1iKL_41Rk9A9Oc2gAAAA4"]
[Sat Feb 28 02:30:49.424875 2026] [:error] [pid 15240:tid 15265] [client 20.104.19.195:14244] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aaHi2S1iKL_41Rk9A9Oc3gAAABc"]
[Sat Feb 28 02:30:49.898248 2026] [:error] [pid 15099:tid 15157] [client 20.104.19.195:7522] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aaHi2envP2vtPjYDq_hLDAAAANg"]
[Sat Feb 28 02:30:50.396417 2026] [:error] [pid 38586:tid 38590] [client 20.104.19.195:7509] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "aaHi2r_i6nvKNhjFW7V29gAAAQE"]
[Sat Feb 28 02:30:50.845227 2026] [:error] [pid 38620:tid 38637] [client 20.104.19.195:17845] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file16.php"] [unique_id "aaHi2gP6I7SRqrhh7RpQ9wAAAU8"]
[Sat Feb 28 02:30:51.355028 2026] [:error] [pid 15099:tid 15140] [client 20.104.19.195:17846] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file16.php"] [unique_id "aaHi2-nvP2vtPjYDq_hLDQAAAMc"]
[Sat Feb 28 02:30:51.801242 2026] [:error] [pid 15100:tid 15165] [client 20.104.19.195:17828] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file16.php"] [unique_id "aaHi20OEbzcINan_ctLezAAAAEU"]
[Sat Feb 28 02:30:52.300564 2026] [:error] [pid 15100:tid 15174] [client 20.104.19.195:12959] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file16.php"] [unique_id "aaHi3EOEbzcINan_ctLezgAAAE4"]
[Sat Feb 28 02:30:52.808297 2026] [:error] [pid 15100:tid 15161] [client 20.104.19.195:15560] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aaHi3EOEbzcINan_ctLe0gAAAEE"]
[Sat Feb 28 02:30:53.223686 2026] [:error] [pid 38620:tid 38633] [client 20.104.19.195:18772] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aaHi3QP6I7SRqrhh7RpQ-wAAAUs"]
[Sat Feb 28 02:30:53.839288 2026] [:error] [pid 15099:tid 15150] [client 20.104.19.195:5312] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aaHi3envP2vtPjYDq_hLEAAAANE"]
[Sat Feb 28 02:30:54.418262 2026] [:error] [pid 38620:tid 38643] [client 20.104.19.195:12937] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aaHi3gP6I7SRqrhh7RpQ_QAAAVU"]
[Sat Feb 28 02:30:54.873296 2026] [:error] [pid 38586:tid 38593] [client 20.104.19.195:15690] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file19.php"] [unique_id "aaHi3r_i6nvKNhjFW7V3BQAAAQQ"]
[Sat Feb 28 02:30:55.544525 2026] [:error] [pid 15098:tid 15122] [client 20.104.19.195:10814] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file19.php"] [unique_id "aaHi38kFqny8dQQbmTk27QAAAJA"]
[Sat Feb 28 02:30:56.059055 2026] [:error] [pid 15099:tid 15135] [client 20.104.19.195:9155] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file19.php"] [unique_id "aaHi4OnvP2vtPjYDq_hLEwAAAMI"]
[Sat Feb 28 02:30:56.721935 2026] [:error] [pid 38620:tid 38628] [client 20.104.19.195:15131] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file19.php"] [unique_id "aaHi4AP6I7SRqrhh7RpQ_wAAAUY"]
[Sat Feb 28 02:30:57.452002 2026] [:error] [pid 15100:tid 15167] [client 20.104.19.195:14225] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aaHi4UOEbzcINan_ctLe6AAAAEc"]
[Sat Feb 28 02:30:58.080163 2026] [:error] [pid 15240:tid 15258] [client 20.104.19.195:15583] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aaHi4i1iKL_41Rk9A9Oc5AAAABA"]
[Sat Feb 28 02:30:58.700246 2026] [:error] [pid 15098:tid 15106] [client 20.104.19.195:10813] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aaHi4skFqny8dQQbmTk29AAAAIE"]
[Sat Feb 28 02:30:59.504778 2026] [:error] [pid 15098:tid 15128] [client 20.104.19.195:51174] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aaHi48kFqny8dQQbmTk2-AAAAJY"]
[Sat Feb 28 02:31:00.242781 2026] [:error] [pid 38620:tid 38644] [client 20.104.19.195:12982] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aaHi5AP6I7SRqrhh7RpRCAAAAVY"]
[Sat Feb 28 02:31:00.976953 2026] [:error] [pid 38620:tid 38646] [client 20.104.19.195:9209] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aaHi5AP6I7SRqrhh7RpRDAAAAVg"]
[Sat Feb 28 02:31:01.570093 2026] [:error] [pid 15240:tid 15265] [client 20.104.19.195:10795] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aaHi5S1iKL_41Rk9A9Oc7AAAABc"]
[Sat Feb 28 02:31:02.110809 2026] [:error] [pid 38620:tid 38641] [client 20.104.19.195:11794] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file22.php"] [unique_id "aaHi5gP6I7SRqrhh7RpRFAAAAVM"]
[Sat Feb 28 02:31:02.638596 2026] [:error] [pid 38620:tid 38639] [client 20.104.19.195:14289] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file23.php"] [unique_id "aaHi5gP6I7SRqrhh7RpRFgAAAVE"]
[Sat Feb 28 02:31:03.114795 2026] [:error] [pid 38620:tid 38623] [client 20.104.19.195:5318] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file23.php"] [unique_id "aaHi5wP6I7SRqrhh7RpRHAAAAUE"]
[Sat Feb 28 02:31:03.726663 2026] [:error] [pid 38620:tid 38626] [client 20.104.19.195:5313] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file23.php"] [unique_id "aaHi5wP6I7SRqrhh7RpRIQAAAUQ"]
[Sat Feb 28 02:31:04.368735 2026] [:error] [pid 38620:tid 38632] [client 20.104.19.195:14259] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file23.php"] [unique_id "aaHi6AP6I7SRqrhh7RpRJgAAAUo"]
[Sat Feb 28 02:31:04.971819 2026] [:error] [pid 15099:tid 15152] [client 20.104.19.195:9196] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file24.php"] [unique_id "aaHi6OnvP2vtPjYDq_hLGQAAANM"]
[Sat Feb 28 02:31:05.442303 2026] [:error] [pid 15240:tid 15257] [client 20.104.19.195:5338] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file24.php"] [unique_id "aaHi6S1iKL_41Rk9A9Oc9gAAAA8"]
[Sat Feb 28 02:31:05.908003 2026] [:error] [pid 38586:tid 38589] [client 20.104.19.195:15587] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file24.php"] [unique_id "aaHi6b_i6nvKNhjFW7V3GgAAAQA"]
[Sat Feb 28 02:31:06.440588 2026] [:error] [pid 15098:tid 15107] [client 20.104.19.195:5313] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file24.php"] [unique_id "aaHi6skFqny8dQQbmTk2_wAAAII"]
[Sat Feb 28 02:31:06.949303 2026] [:error] [pid 38586:tid 38593] [client 20.104.19.195:12934] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file25.php"] [unique_id "aaHi6r_i6nvKNhjFW7V3HQAAAQQ"]
[Sat Feb 28 02:31:07.386883 2026] [:error] [pid 38586:tid 38600] [client 20.104.19.195:12940] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file25.php"] [unique_id "aaHi67_i6nvKNhjFW7V3HwAAAQs"]
[Sat Feb 28 02:31:07.850120 2026] [:error] [pid 38620:tid 38626] [client 20.104.19.195:17056] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file25.php"] [unique_id "aaHi6wP6I7SRqrhh7RpRLQAAAUQ"]
[Sat Feb 28 02:31:08.302768 2026] [:error] [pid 15240:tid 15252] [client 20.104.19.195:4600] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file25.php"] [unique_id "aaHi7C1iKL_41Rk9A9Oc_wAAAAo"]
[Sat Feb 28 02:31:08.761189 2026] [:error] [pid 38586:tid 38594] [client 20.104.19.195:2386] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file26.php"] [unique_id "aaHi7L_i6nvKNhjFW7V3JwAAAQU"]
[Sat Feb 28 02:31:09.232133 2026] [:error] [pid 38586:tid 38612] [client 20.104.19.195:7536] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file26.php"] [unique_id "aaHi7b_i6nvKNhjFW7V3KQAAARc"]
[Sat Feb 28 02:31:09.742387 2026] [:error] [pid 38586:tid 38610] [client 20.104.19.195:2419] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file26.php"] [unique_id "aaHi7b_i6nvKNhjFW7V3LgAAARU"]
[Sat Feb 28 02:31:10.262928 2026] [:error] [pid 38586:tid 38589] [client 20.104.19.195:2409] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file26.php"] [unique_id "aaHi7r_i6nvKNhjFW7V3MgAAAQA"]
[Sat Feb 28 02:31:10.769379 2026] [:error] [pid 38620:tid 38630] [client 20.104.19.195:12953] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file27.php"] [unique_id "aaHi7gP6I7SRqrhh7RpRMQAAAUg"]
[Sat Feb 28 02:31:11.289983 2026] [:error] [pid 38620:tid 38622] [client 20.104.19.195:10771] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file27.php"] [unique_id "aaHi7wP6I7SRqrhh7RpRMwAAAUA"]
[Sat Feb 28 02:31:11.779910 2026] [:error] [pid 15240:tid 15259] [client 20.104.19.195:18799] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file27.php"] [unique_id "aaHi7y1iKL_41Rk9A9OdBAAAABE"]
[Sat Feb 28 02:31:12.305413 2026] [:error] [pid 38620:tid 38633] [client 20.104.19.195:2943] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file27.php"] [unique_id "aaHi8AP6I7SRqrhh7RpRNQAAAUs"]
[Sat Feb 28 02:31:13.005274 2026] [:error] [pid 38586:tid 38602] [client 20.104.19.195:14299] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file28.php"] [unique_id "aaHi8b_i6nvKNhjFW7V3PgAAAQ0"]
[Sat Feb 28 02:31:13.530940 2026] [:error] [pid 15098:tid 15123] [client 20.104.19.195:51137] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file28.php"] [unique_id "aaHi8ckFqny8dQQbmTk3BAAAAJE"]
[Sat Feb 28 02:31:14.167009 2026] [:error] [pid 15240:tid 15248] [client 20.104.19.195:15133] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file28.php"] [unique_id "aaHi8i1iKL_41Rk9A9OdBwAAAAY"]
[Sat Feb 28 02:31:14.664911 2026] [:error] [pid 15240:tid 15249] [client 20.104.19.195:19276] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file28.php"] [unique_id "aaHi8i1iKL_41Rk9A9OdCQAAAAc"]
[Sat Feb 28 02:31:28.972376 2026] [:error] [pid 15240:tid 15254] [client 20.104.19.195:14219] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mek.php"] [unique_id "aaHjAC1iKL_41Rk9A9OdMAAAAAw"]
[Sat Feb 28 02:31:29.862586 2026] [:error] [pid 38620:tid 38638] [client 20.104.19.195:5331] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mek.php"] [unique_id "aaHjAQP6I7SRqrhh7RpRhQAAAVA"]
[Sat Feb 28 02:31:30.519156 2026] [:error] [pid 15240:tid 15259] [client 20.104.19.195:12961] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mek.php"] [unique_id "aaHjAi1iKL_41Rk9A9OdNAAAABE"]
[Sat Feb 28 02:31:31.345545 2026] [:error] [pid 15240:tid 15264] [client 20.104.19.195:3905] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mek.php"] [unique_id "aaHjAy1iKL_41Rk9A9OdNgAAABY"]
[Sat Feb 28 02:31:31.845455 2026] [:error] [pid 15099:tid 15154] [client 20.104.19.195:5371] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "aaHjA-nvP2vtPjYDq_hLIwAAANU"]
[Sat Feb 28 02:31:32.533180 2026] [:error] [pid 38620:tid 38629] [client 20.104.19.195:15144] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "aaHjBAP6I7SRqrhh7RpRkQAAAUc"]
[Sat Feb 28 02:31:33.349062 2026] [:error] [pid 38620:tid 38634] [client 20.104.19.195:51199] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "aaHjBQP6I7SRqrhh7RpRmAAAAUw"]
[Sat Feb 28 02:31:33.900828 2026] [:error] [pid 38620:tid 38635] [client 20.104.19.195:12939] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "aaHjBQP6I7SRqrhh7RpRnAAAAU0"]
[Sat Feb 28 02:31:34.756489 2026] [:error] [pid 38620:tid 38628] [client 20.104.19.195:51186] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass.php"] [unique_id "aaHjBgP6I7SRqrhh7RpRngAAAUY"]
[Sat Feb 28 02:31:35.542077 2026] [:error] [pid 38586:tid 38598] [client 20.104.19.195:4545] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass.php"] [unique_id "aaHjB7_i6nvKNhjFW7V3fQAAAQk"]
[Sat Feb 28 02:31:36.503096 2026] [:error] [pid 38620:tid 38636] [client 20.104.19.195:14314] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass.php"] [unique_id "aaHjCAP6I7SRqrhh7RpRpAAAAU4"]
[Sat Feb 28 02:31:37.228963 2026] [:error] [pid 15098:tid 15107] [client 20.104.19.195:51067] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass.php"] [unique_id "aaHjCckFqny8dQQbmTk3EAAAAII"]
[Sat Feb 28 02:31:37.925341 2026] [:error] [pid 38586:tid 38589] [client 20.104.19.195:14329] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pepe.php"] [unique_id "aaHjCb_i6nvKNhjFW7V3gwAAAQA"]
[Sat Feb 28 02:31:38.465025 2026] [:error] [pid 15240:tid 15250] [client 20.104.19.195:17798] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pepe.php"] [unique_id "aaHjCi1iKL_41Rk9A9OdSAAAAAg"]
[Sat Feb 28 02:31:39.103445 2026] [:error] [pid 15099:tid 15142] [client 20.104.19.195:18756] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pepe.php"] [unique_id "aaHjC-nvP2vtPjYDq_hLMAAAAMk"]
[Sat Feb 28 02:31:39.711573 2026] [:error] [pid 38620:tid 38636] [client 20.104.19.195:7498] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pepe.php"] [unique_id "aaHjCwP6I7SRqrhh7RpRsQAAAU4"]
[Sat Feb 28 02:31:40.336284 2026] [:error] [pid 38620:tid 38643] [client 20.104.19.195:51042] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleetx.php"] [unique_id "aaHjDAP6I7SRqrhh7RpRtAAAAVU"]
[Sat Feb 28 02:31:40.992415 2026] [:error] [pid 15240:tid 15254] [client 20.104.19.195:51162] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleetx.php"] [unique_id "aaHjDC1iKL_41Rk9A9OdTAAAAAw"]
[Sat Feb 28 02:31:41.544926 2026] [:error] [pid 38586:tid 38602] [client 20.104.19.195:18780] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleetx.php"] [unique_id "aaHjDb_i6nvKNhjFW7V3igAAAQ0"]
[Sat Feb 28 02:31:42.024606 2026] [:error] [pid 15240:tid 15248] [client 20.104.19.195:10786] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleetx.php"] [unique_id "aaHjDi1iKL_41Rk9A9OdTwAAAAY"]
[Sat Feb 28 02:31:42.714731 2026] [:error] [pid 38620:tid 38631] [client 20.104.19.195:3958] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaHjDgP6I7SRqrhh7RpRxgAAAUk"]
[Sat Feb 28 02:31:43.259296 2026] [:error] [pid 38620:tid 38625] [client 20.104.19.195:18802] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaHjDwP6I7SRqrhh7RpRzgAAAUM"]
[Sat Feb 28 02:31:43.768752 2026] [:error] [pid 15099:tid 15143] [client 20.104.19.195:15594] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaHjD-nvP2vtPjYDq_hLMwAAAMo"]
[Sat Feb 28 02:31:44.255639 2026] [:error] [pid 38586:tid 38607] [client 20.104.19.195:5318] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaHjEL_i6nvKNhjFW7V3jQAAARI"]
[Sat Feb 28 02:31:44.766643 2026] [:error] [pid 38586:tid 38598] [client 20.104.19.195:51147] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/great.php"] [unique_id "aaHjEL_i6nvKNhjFW7V3kAAAAQk"]
[Sat Feb 28 02:31:45.466626 2026] [:error] [pid 15240:tid 15242] [client 20.104.19.195:14322] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/great.php"] [unique_id "aaHjES1iKL_41Rk9A9OdUQAAAAA"]
[Sat Feb 28 02:31:46.185639 2026] [:error] [pid 38620:tid 38623] [client 20.104.19.195:51038] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/great.php"] [unique_id "aaHjEgP6I7SRqrhh7RpR-wAAAUE"]
[Sat Feb 28 02:31:46.777746 2026] [:error] [pid 38620:tid 38638] [client 20.104.19.195:51018] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/great.php"] [unique_id "aaHjEgP6I7SRqrhh7RpSBQAAAVA"]
[Sat Feb 28 02:31:47.360217 2026] [:error] [pid 38620:tid 38636] [client 20.104.19.195:14312] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aaHjEwP6I7SRqrhh7RpSDgAAAU4"]
[Sat Feb 28 02:31:48.115216 2026] [:error] [pid 15240:tid 15250] [client 20.104.19.195:51154] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aaHjFC1iKL_41Rk9A9OdVwAAAAg"]
[Sat Feb 28 02:31:49.730989 2026] [:error] [pid 38620:tid 38626] [client 20.104.19.195:3950] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aaHjFQP6I7SRqrhh7RpSJgAAAUQ"]
[Sat Feb 28 02:31:50.767315 2026] [:error] [pid 38586:tid 38591] [client 20.104.19.195:10427] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "aaHjFr_i6nvKNhjFW7V3mQAAAQI"]
[Sat Feb 28 02:31:51.698056 2026] [:error] [pid 15240:tid 15265] [client 20.104.19.195:15154] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xax.php"] [unique_id "aaHjFy1iKL_41Rk9A9OdWQAAABc"]
[Sat Feb 28 02:31:52.250148 2026] [:error] [pid 38586:tid 38611] [client 20.104.19.195:7496] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xax.php"] [unique_id "aaHjGL_i6nvKNhjFW7V3nQAAARY"]
[Sat Feb 28 02:31:52.801105 2026] [:error] [pid 38586:tid 38592] [client 20.104.19.195:8163] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xax.php"] [unique_id "aaHjGL_i6nvKNhjFW7V3oQAAAQM"]
[Sat Feb 28 02:31:53.304847 2026] [:error] [pid 38620:tid 38638] [client 20.104.19.195:9198] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xax.php"] [unique_id "aaHjGQP6I7SRqrhh7RpSOAAAAVA"]
[Sat Feb 28 02:31:53.932200 2026] [:error] [pid 38620:tid 38624] [client 20.104.19.195:12930] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaHjGQP6I7SRqrhh7RpSPQAAAUI"]
[Sat Feb 28 02:31:54.752233 2026] [:error] [pid 15099:tid 15149] [client 20.104.19.195:18803] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaHjGunvP2vtPjYDq_hLNgAAANA"]
[Sat Feb 28 02:31:55.500181 2026] [:error] [pid 38586:tid 38593] [client 20.104.19.195:17804] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaHjG7_i6nvKNhjFW7V3sgAAAQQ"]
[Sat Feb 28 02:31:56.015237 2026] [:error] [pid 38586:tid 38605] [client 20.104.19.195:4596] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaHjHL_i6nvKNhjFW7V3tgAAARA"]
[Sat Feb 28 02:31:56.575246 2026] [:error] [pid 38620:tid 38631] [client 20.104.19.195:3946] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlex.php"] [unique_id "aaHjHAP6I7SRqrhh7RpSRQAAAUk"]
[Sat Feb 28 02:31:58.623356 2026] [:error] [pid 38620:tid 38634] [client 20.104.19.195:51176] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlex.php"] [unique_id "aaHjHgP6I7SRqrhh7RpSSwAAAUw"]
[Sat Feb 28 02:31:59.991179 2026] [:error] [pid 15100:tid 15178] [client 20.104.19.195:9161] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlex.php"] [unique_id "aaHjH0OEbzcINan_ctLfLwAAAFI"]
[Sat Feb 28 02:32:00.569956 2026] [:error] [pid 15100:tid 15173] [client 20.104.19.195:17797] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlex.php"] [unique_id "aaHjIEOEbzcINan_ctLfMQAAAE0"]
[Sat Feb 28 02:32:01.052991 2026] [:error] [pid 15098:tid 15114] [client 20.104.19.195:8142] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless2.php"] [unique_id "aaHjIckFqny8dQQbmTk3HQAAAIg"]
[Sat Feb 28 02:32:01.731644 2026] [:error] [pid 15240:tid 15258] [client 20.104.19.195:10426] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless2.php"] [unique_id "aaHjIS1iKL_41Rk9A9OdcAAAABA"]
[Sat Feb 28 02:32:02.327161 2026] [:error] [pid 15240:tid 15242] [client 20.104.19.195:17837] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless2.php"] [unique_id "aaHjIi1iKL_41Rk9A9OdcQAAAAA"]
[Sat Feb 28 02:32:03.088994 2026] [:error] [pid 38620:tid 38644] [client 20.104.19.195:14529] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless2.php"] [unique_id "aaHjIwP6I7SRqrhh7RpSUQAAAVY"]
[Sat Feb 28 02:32:04.272166 2026] [:error] [pid 15240:tid 15260] [client 20.104.19.195:19062] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless3.php"] [unique_id "aaHjJC1iKL_41Rk9A9OdcgAAABI"]
[Sat Feb 28 02:32:04.968995 2026] [:error] [pid 15240:tid 15256] [client 20.104.19.195:10421] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless3.php"] [unique_id "aaHjJC1iKL_41Rk9A9OdeAAAAA4"]
[Sat Feb 28 02:32:05.827353 2026] [:error] [pid 15099:tid 15139] [client 20.104.19.195:19045] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless3.php"] [unique_id "aaHjJenvP2vtPjYDq_hLTwAAAMY"]
[Sat Feb 28 02:32:06.402518 2026] [:error] [pid 15099:tid 15151] [client 20.104.19.195:8157] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless3.php"] [unique_id "aaHjJunvP2vtPjYDq_hLVAAAANI"]
[Sat Feb 28 02:32:07.063171 2026] [:error] [pid 15099:tid 15152] [client 20.104.19.195:8187] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "aaHjJ-nvP2vtPjYDq_hLVgAAANM"]
[Sat Feb 28 02:32:07.574661 2026] [:error] [pid 15098:tid 15105] [client 20.104.19.195:10132] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "aaHjJ8kFqny8dQQbmTk3LgAAAIA"]
[Sat Feb 28 02:32:08.807442 2026] [:error] [pid 38586:tid 38609] [client 20.104.19.195:13131] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "aaHjKL_i6nvKNhjFW7V34wAAARQ"]
[Sat Feb 28 02:32:10.523046 2026] [:error] [pid 38620:tid 38638] [client 20.104.19.195:18792] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "aaHjKgP6I7SRqrhh7RpSbAAAAVA"]
[Sat Feb 28 02:32:11.170541 2026] [:error] [pid 15098:tid 15111] [client 20.104.19.195:8141] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aaHjK8kFqny8dQQbmTk3MgAAAIU"]
[Sat Feb 28 02:32:11.638326 2026] [:error] [pid 38620:tid 38626] [client 20.104.19.195:11053] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aaHjKwP6I7SRqrhh7RpSdgAAAUQ"]
[Sat Feb 28 02:32:12.282814 2026] [:error] [pid 38586:tid 38610] [client 20.104.19.195:15695] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aaHjLL_i6nvKNhjFW7V37gAAARU"]
[Sat Feb 28 02:32:12.921732 2026] [:error] [pid 15240:tid 15246] [client 20.104.19.195:10430] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aaHjLC1iKL_41Rk9A9OdjgAAAAQ"]
[Sat Feb 28 02:32:13.557136 2026] [:error] [pid 15240:tid 15264] [client 20.104.19.195:13173] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless6.php"] [unique_id "aaHjLS1iKL_41Rk9A9OdkwAAABY"]
[Sat Feb 28 02:32:14.379576 2026] [:error] [pid 15240:tid 15252] [client 20.104.19.195:11049] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless6.php"] [unique_id "aaHjLi1iKL_41Rk9A9OdmgAAAAo"]
[Sat Feb 28 02:32:14.836698 2026] [:error] [pid 38620:tid 38646] [client 20.104.19.195:11021] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless6.php"] [unique_id "aaHjLgP6I7SRqrhh7RpShgAAAVg"]
[Sat Feb 28 02:32:15.341191 2026] [:error] [pid 38620:tid 38627] [client 20.104.19.195:11065] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless6.php"] [unique_id "aaHjLwP6I7SRqrhh7RpSiwAAAUU"]
[Sat Feb 28 02:32:15.900190 2026] [:error] [pid 15100:tid 15171] [client 20.104.19.195:18928] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless7.php"] [unique_id "aaHjL0OEbzcINan_ctLfRgAAAEs"]
[Sat Feb 28 02:32:16.589546 2026] [:error] [pid 38586:tid 38596] [client 20.104.19.195:17046] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless7.php"] [unique_id "aaHjML_i6nvKNhjFW7V39wAAAQc"]
[Sat Feb 28 02:32:17.443239 2026] [:error] [pid 38620:tid 38627] [client 20.104.19.195:17040] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless7.php"] [unique_id "aaHjMQP6I7SRqrhh7RpSlgAAAUU"]
[Sat Feb 28 02:32:18.231881 2026] [:error] [pid 38620:tid 38638] [client 20.104.19.195:15738] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless7.php"] [unique_id "aaHjMgP6I7SRqrhh7RpSogAAAVA"]
[Sat Feb 28 02:32:18.824538 2026] [:error] [pid 15099:tid 15155] [client 20.104.19.195:17042] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless8.php"] [unique_id "aaHjMunvP2vtPjYDq_hLYgAAANY"]
[Sat Feb 28 02:32:19.369733 2026] [:error] [pid 15240:tid 15249] [client 20.104.19.195:10378] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless8.php"] [unique_id "aaHjMy1iKL_41Rk9A9OdrQAAAAc"]
[Sat Feb 28 02:32:19.885696 2026] [:error] [pid 15240:tid 15245] [client 20.104.19.195:13159] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless8.php"] [unique_id "aaHjMy1iKL_41Rk9A9OdtAAAAAM"]
[Sat Feb 28 02:32:20.395521 2026] [:error] [pid 15240:tid 15242] [client 20.104.19.195:18882] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless8.php"] [unique_id "aaHjNC1iKL_41Rk9A9OdtwAAAAA"]
[Sat Feb 28 02:32:20.984321 2026] [:error] [pid 38586:tid 38604] [client 20.104.19.195:18789] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless9.php"] [unique_id "aaHjNL_i6nvKNhjFW7V4AwAAAQ8"]
[Sat Feb 28 02:32:21.809250 2026] [:error] [pid 15099:tid 15136] [client 20.104.19.195:15694] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless9.php"] [unique_id "aaHjNenvP2vtPjYDq_hLcAAAAMM"]
[Sat Feb 28 02:32:22.491830 2026] [:error] [pid 38620:tid 38623] [client 20.104.19.195:19529] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless9.php"] [unique_id "aaHjNgP6I7SRqrhh7RpSyQAAAUE"]
[Sat Feb 28 02:32:23.245877 2026] [:error] [pid 15240:tid 15259] [client 20.104.19.195:19035] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless9.php"] [unique_id "aaHjNy1iKL_41Rk9A9OdwQAAABE"]
[Sat Feb 28 02:32:24.085274 2026] [:error] [pid 38620:tid 38622] [client 20.104.19.195:10935] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/law2.php"] [unique_id "aaHjOAP6I7SRqrhh7RpS1wAAAUA"]
[Sat Feb 28 02:32:24.707864 2026] [:error] [pid 38620:tid 38631] [client 20.104.19.195:17051] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/law2.php"] [unique_id "aaHjOAP6I7SRqrhh7RpS3QAAAUk"]
[Sat Feb 28 02:32:25.689940 2026] [:error] [pid 15100:tid 15177] [client 20.104.19.195:18765] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/law2.php"] [unique_id "aaHjOUOEbzcINan_ctLfTQAAAFE"]
[Sat Feb 28 02:32:26.439333 2026] [:error] [pid 38586:tid 38592] [client 20.104.19.195:10928] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/law2.php"] [unique_id "aaHjOr_i6nvKNhjFW7V4DgAAAQM"]
[Sat Feb 28 02:32:39.627698 2026] [:error] [pid 38620:tid 38624] [client 20.104.19.195:18909] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aaHjRwP6I7SRqrhh7RpTJwAAAUI"]
[Sat Feb 28 02:32:40.549948 2026] [:error] [pid 38620:tid 38632] [client 20.104.19.195:19583] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aaHjSAP6I7SRqrhh7RpTMAAAAUo"]
[Sat Feb 28 02:32:41.148551 2026] [:error] [pid 38620:tid 38634] [client 20.104.19.195:18897] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aaHjSQP6I7SRqrhh7RpTNwAAAUw"]
[Sat Feb 28 02:32:41.773435 2026] [:error] [pid 15100:tid 15163] [client 20.104.19.195:10164] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xleet.php"] [unique_id "aaHjSUOEbzcINan_ctLfXAAAAEM"]
[Sat Feb 28 02:32:42.287645 2026] [:error] [pid 38586:tid 38611] [client 20.104.19.195:10409] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aaHjSr_i6nvKNhjFW7V4LgAAARY"]
[Sat Feb 28 02:32:42.815831 2026] [:error] [pid 38586:tid 38595] [client 20.104.19.195:14788] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aaHjSr_i6nvKNhjFW7V4MwAAAQY"]
[Sat Feb 28 02:32:43.421066 2026] [:error] [pid 15240:tid 15256] [client 20.104.19.195:10382] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aaHjSy1iKL_41Rk9A9Od5gAAAA4"]
[Sat Feb 28 02:32:44.050076 2026] [:error] [pid 15099:tid 15157] [client 20.104.19.195:8155] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/minik.php"] [unique_id "aaHjTOnvP2vtPjYDq_hLkwAAANg"]
[Sat Feb 28 02:32:44.755474 2026] [:error] [pid 15100:tid 15174] [client 20.104.19.195:17086] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/avaa.php"] [unique_id "aaHjTEOEbzcINan_ctLfZAAAAE4"]
[Sat Feb 28 02:32:45.354528 2026] [:error] [pid 38620:tid 38643] [client 20.104.19.195:10883] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/avaa.php"] [unique_id "aaHjTQP6I7SRqrhh7RpTPwAAAVU"]
[Sat Feb 28 02:32:45.919623 2026] [:error] [pid 38586:tid 38605] [client 20.104.19.195:19049] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/avaa.php"] [unique_id "aaHjTb_i6nvKNhjFW7V4OgAAARA"]
[Sat Feb 28 02:32:46.382466 2026] [:error] [pid 38620:tid 38646] [client 20.104.19.195:13151] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/avaa.php"] [unique_id "aaHjTgP6I7SRqrhh7RpTQQAAAVg"]
[Sat Feb 28 02:32:46.886948 2026] [:error] [pid 15240:tid 15246] [client 20.104.19.195:14787] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaHjTi1iKL_41Rk9A9Od7QAAAAQ"]
[Sat Feb 28 02:32:47.379417 2026] [:error] [pid 38620:tid 38637] [client 20.104.19.195:18914] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaHjTwP6I7SRqrhh7RpTRQAAAU8"]
[Sat Feb 28 02:32:48.004439 2026] [:error] [pid 15240:tid 15259] [client 20.104.19.195:18906] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaHjUC1iKL_41Rk9A9Od7wAAABE"]
[Sat Feb 28 02:32:48.603032 2026] [:error] [pid 15099:tid 15147] [client 20.104.19.195:16406] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaHjUOnvP2vtPjYDq_hLmQAAAM4"]
[Sat Feb 28 02:32:49.450130 2026] [:error] [pid 38586:tid 38603] [client 20.104.19.195:14539] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aaHjUb_i6nvKNhjFW7V4QQAAAQ4"]
[Sat Feb 28 02:32:50.156195 2026] [:error] [pid 15240:tid 15244] [client 20.104.19.195:13130] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aaHjUi1iKL_41Rk9A9Od8wAAAAI"]
[Sat Feb 28 02:32:51.389587 2026] [:error] [pid 38620:tid 38645] [client 20.104.19.195:14800] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aaHjUwP6I7SRqrhh7RpTTgAAAVc"]
[Sat Feb 28 02:32:52.619175 2026] [:error] [pid 38620:tid 38641] [client 20.104.19.195:19545] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/arig.php"] [unique_id "aaHjVAP6I7SRqrhh7RpTVAAAAVM"]
[Sat Feb 28 02:32:53.235004 2026] [:error] [pid 15098:tid 15121] [client 20.104.19.195:13741] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aaHjVckFqny8dQQbmTk3XgAAAI8"]
[Sat Feb 28 02:32:54.278207 2026] [:error] [pid 38586:tid 38600] [client 20.104.19.195:51087] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aaHjVr_i6nvKNhjFW7V4SAAAAQs"]
[Sat Feb 28 02:32:54.824496 2026] [:error] [pid 38586:tid 38596] [client 20.104.19.195:19030] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aaHjVr_i6nvKNhjFW7V4SQAAAQc"]
[Sat Feb 28 02:32:56.358341 2026] [:error] [pid 38620:tid 38624] [client 20.104.19.195:14819] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aaHjWAP6I7SRqrhh7RpTXgAAAUI"]
[Sat Feb 28 02:32:57.695601 2026] [:error] [pid 38586:tid 38602] [client 20.104.19.195:18939] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aaHjWb_i6nvKNhjFW7V4TwAAAQ0"]
[Sat Feb 28 02:32:58.741452 2026] [:error] [pid 38620:tid 38646] [client 20.104.19.195:13700] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aaHjWgP6I7SRqrhh7RpTcAAAAVg"]
[Sat Feb 28 02:32:59.452832 2026] [:error] [pid 15240:tid 15256] [client 20.104.19.195:51123] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aaHjWy1iKL_41Rk9A9OeAAAAAA4"]
[Sat Feb 28 02:33:00.471338 2026] [:error] [pid 38620:tid 38635] [client 20.104.19.195:10135] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aaHjXAP6I7SRqrhh7RpTegAAAU0"]
[Sat Feb 28 02:33:01.267841 2026] [:error] [pid 15240:tid 15242] [client 20.104.19.195:20157] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aaHjXS1iKL_41Rk9A9OeBwAAAAA"]
[Sat Feb 28 02:33:02.074135 2026] [:error] [pid 15240:tid 15247] [client 20.104.19.195:20150] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aaHjXi1iKL_41Rk9A9OeEAAAAAU"]
[Sat Feb 28 02:33:02.889379 2026] [:error] [pid 38620:tid 38644] [client 20.104.19.195:8849] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aaHjXgP6I7SRqrhh7RpTgwAAAVY"]
[Sat Feb 28 02:33:03.398788 2026] [:error] [pid 38620:tid 38622] [client 20.104.19.195:18904] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aaHjXwP6I7SRqrhh7RpTiAAAAUA"]
[Sat Feb 28 02:33:03.920790 2026] [:error] [pid 38620:tid 38643] [client 20.104.19.195:16411] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ynz.PhP7"] [unique_id "aaHjXwP6I7SRqrhh7RpTkwAAAVU"]
[Sat Feb 28 02:33:04.675827 2026] [:error] [pid 15099:tid 15143] [client 20.104.19.195:13739] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ynz.PhP7"] [unique_id "aaHjYOnvP2vtPjYDq_hLnwAAAMo"]
[Sat Feb 28 02:33:05.744331 2026] [:error] [pid 38620:tid 38629] [client 20.104.19.195:13857] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ynz.PhP7"] [unique_id "aaHjYQP6I7SRqrhh7RpTrQAAAUc"]
[Sat Feb 28 02:33:06.372147 2026] [:error] [pid 38620:tid 38639] [client 20.104.19.195:13870] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ynz.PhP7"] [unique_id "aaHjYgP6I7SRqrhh7RpTuAAAAVE"]
[Sat Feb 28 02:33:07.232903 2026] [:error] [pid 38620:tid 38639] [client 20.104.19.195:16435] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style2.php"] [unique_id "aaHjYwP6I7SRqrhh7RpTyAAAAVE"]
[Sat Feb 28 02:33:08.142535 2026] [:error] [pid 38620:tid 38642] [client 20.104.19.195:13863] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style2.php"] [unique_id "aaHjZAP6I7SRqrhh7RpT1wAAAVQ"]
[Sat Feb 28 02:33:08.930573 2026] [:error] [pid 38620:tid 38627] [client 20.104.19.195:17736] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style2.php"] [unique_id "aaHjZAP6I7SRqrhh7RpT6gAAAUU"]
[Sat Feb 28 02:33:09.630765 2026] [:error] [pid 38620:tid 38642] [client 20.104.19.195:20154] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style2.php"] [unique_id "aaHjZQP6I7SRqrhh7RpT-QAAAVQ"]
[Sat Feb 28 02:33:10.698302 2026] [:error] [pid 38620:tid 38633] [client 20.104.19.195:11375] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bugz.php"] [unique_id "aaHjZgP6I7SRqrhh7RpUEQAAAUs"]
[Sat Feb 28 02:33:11.235855 2026] [:error] [pid 38620:tid 38645] [client 20.104.19.195:5418] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bugz.php"] [unique_id "aaHjZwP6I7SRqrhh7RpUGwAAAVc"]
[Sat Feb 28 02:33:11.836975 2026] [:error] [pid 38620:tid 38627] [client 20.104.19.195:8846] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bugz.php"] [unique_id "aaHjZwP6I7SRqrhh7RpUKAAAAUU"]
[Sat Feb 28 02:33:12.656090 2026] [:error] [pid 38620:tid 38644] [client 20.104.19.195:10189] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bugz.php"] [unique_id "aaHjaAP6I7SRqrhh7RpUNAAAAVY"]
[Sat Feb 28 02:33:13.793332 2026] [:error] [pid 15099:tid 15149] [client 20.104.19.195:19155] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "aaHjaenvP2vtPjYDq_hLowAAANA"]
[Sat Feb 28 02:33:14.878306 2026] [:error] [pid 15098:tid 15111] [client 20.104.19.195:20664] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "aaHjaskFqny8dQQbmTk3ZwAAAIU"]
[Sat Feb 28 02:33:16.155000 2026] [:error] [pid 15240:tid 15266] [client 20.104.19.195:19152] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "aaHjbC1iKL_41Rk9A9OeIgAAABg"]
[Sat Feb 28 02:33:17.562526 2026] [:error] [pid 38586:tid 38592] [client 20.104.19.195:20110] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "aaHjbb_i6nvKNhjFW7V4agAAAQM"]
[Sat Feb 28 02:33:18.377349 2026] [:error] [pid 38586:tid 38593] [client 20.104.19.195:17418] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/page.php"] [unique_id "aaHjbr_i6nvKNhjFW7V4bgAAAQQ"]
[Sat Feb 28 02:33:19.000050 2026] [:error] [pid 38620:tid 38622] [client 20.104.19.195:19197] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/page.php"] [unique_id "aaHjbgP6I7SRqrhh7RpUVAAAAUA"]
[Sat Feb 28 02:33:20.329694 2026] [:error] [pid 38586:tid 38606] [client 20.104.19.195:3362] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/page.php"] [unique_id "aaHjcL_i6nvKNhjFW7V4dQAAARE"]
[Sat Feb 28 02:33:21.213283 2026] [:error] [pid 38620:tid 38644] [client 20.104.19.195:19435] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/page.php"] [unique_id "aaHjcQP6I7SRqrhh7RpUdAAAAVY"]
[Sat Feb 28 02:33:21.860803 2026] [:error] [pid 15099:tid 15154] [client 20.104.19.195:18538] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h.php"] [unique_id "aaHjcenvP2vtPjYDq_hLuwAAANU"]
[Sat Feb 28 02:33:22.598717 2026] [:error] [pid 15100:tid 15160] [client 20.104.19.195:20159] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h.php"] [unique_id "aaHjckOEbzcINan_ctLfiwAAAEA"]
[Sat Feb 28 02:33:23.164459 2026] [:error] [pid 15100:tid 15182] [client 20.104.19.195:13033] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h.php"] [unique_id "aaHjc0OEbzcINan_ctLfkAAAAFY"]
[Sat Feb 28 02:33:23.869987 2026] [:error] [pid 15100:tid 15170] [client 20.104.19.195:19335] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h.php"] [unique_id "aaHjc0OEbzcINan_ctLflgAAAEo"]
[Sat Feb 28 02:33:24.600447 2026] [:error] [pid 15100:tid 15162] [client 20.104.19.195:50569] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hi.php"] [unique_id "aaHjdEOEbzcINan_ctLfnQAAAEI"]
[Sat Feb 28 02:33:25.143260 2026] [:error] [pid 15100:tid 15180] [client 20.104.19.195:19383] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hi.php"] [unique_id "aaHjdUOEbzcINan_ctLfowAAAFQ"]
[Sat Feb 28 02:33:25.737644 2026] [:error] [pid 38620:tid 38625] [client 20.104.19.195:20658] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hi.php"] [unique_id "aaHjdQP6I7SRqrhh7RpUmQAAAUM"]
[Sat Feb 28 02:33:26.309473 2026] [:error] [pid 15240:tid 15253] [client 20.104.19.195:18523] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hi.php"] [unique_id "aaHjdi1iKL_41Rk9A9OeLwAAAAs"]
[Sat Feb 28 02:33:26.755243 2026] [:error] [pid 38586:tid 38602] [client 20.104.19.195:6536] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ini.php"] [unique_id "aaHjdr_i6nvKNhjFW7V4jgAAAQ0"]
[Sat Feb 28 02:33:27.590105 2026] [:error] [pid 38620:tid 38639] [client 20.104.19.195:15468] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ini.php"] [unique_id "aaHjdwP6I7SRqrhh7RpUnwAAAVE"]
[Sat Feb 28 02:33:28.230519 2026] [:error] [pid 15100:tid 15184] [client 20.104.19.195:19451] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ini.php"] [unique_id "aaHjeEOEbzcINan_ctLftAAAAFg"]
[Sat Feb 28 02:33:29.449846 2026] [:error] [pid 15099:tid 15150] [client 20.104.19.195:6562] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ini.php"] [unique_id "aaHjeenvP2vtPjYDq_hLyAAAANE"]
[Sat Feb 28 02:33:30.035684 2026] [:error] [pid 15100:tid 15163] [client 20.104.19.195:6163] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erin1.PhP7"] [unique_id "aaHjekOEbzcINan_ctLfwAAAAEM"]
[Sat Feb 28 02:33:30.547051 2026] [:error] [pid 15240:tid 15259] [client 20.104.19.195:6149] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erin1.PhP7"] [unique_id "aaHjei1iKL_41Rk9A9OeOwAAABE"]
[Sat Feb 28 02:33:31.024815 2026] [:error] [pid 15100:tid 15168] [client 20.104.19.195:16503] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erin1.PhP7"] [unique_id "aaHje0OEbzcINan_ctLfxAAAAEg"]
[Sat Feb 28 02:33:31.509642 2026] [:error] [pid 38586:tid 38598] [client 20.104.19.195:15479] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erin1.PhP7"] [unique_id "aaHje7_i6nvKNhjFW7V4pgAAAQk"]
[Sat Feb 28 02:33:32.045324 2026] [:error] [pid 38620:tid 38633] [client 20.104.19.195:19413] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Njima.php"] [unique_id "aaHjfAP6I7SRqrhh7RpUqQAAAUs"]
[Sat Feb 28 02:33:32.502784 2026] [:error] [pid 15100:tid 15175] [client 20.104.19.195:10200] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Njima.php"] [unique_id "aaHjfEOEbzcINan_ctLfyAAAAE8"]
[Sat Feb 28 02:33:33.018462 2026] [:error] [pid 15098:tid 15118] [client 20.104.19.195:6992] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Njima.php"] [unique_id "aaHjfckFqny8dQQbmTk3dgAAAIw"]
[Sat Feb 28 02:33:33.495421 2026] [:error] [pid 38586:tid 38597] [client 20.104.19.195:7002] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Njima.php"] [unique_id "aaHjfb_i6nvKNhjFW7V4rgAAAQg"]
[Sat Feb 28 02:33:34.014049 2026] [:error] [pid 15100:tid 15162] [client 20.104.19.195:17446] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packed.php"] [unique_id "aaHjfkOEbzcINan_ctLfywAAAEI"]
[Sat Feb 28 02:33:34.474769 2026] [:error] [pid 15100:tid 15163] [client 20.104.19.195:19443] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packed.php"] [unique_id "aaHjfkOEbzcINan_ctLfzQAAAEM"]
[Sat Feb 28 02:33:34.934691 2026] [:error] [pid 38620:tid 38641] [client 20.104.19.195:17444] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packed.php"] [unique_id "aaHjfgP6I7SRqrhh7RpUswAAAVM"]
[Sat Feb 28 02:33:35.496157 2026] [:error] [pid 38586:tid 38593] [client 20.104.19.195:20635] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packed.php"] [unique_id "aaHjf7_i6nvKNhjFW7V4sAAAAQQ"]
[Sat Feb 28 02:33:36.160267 2026] [:error] [pid 38586:tid 38595] [client 20.104.19.195:11351] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BIBIL.php"] [unique_id "aaHjgL_i6nvKNhjFW7V4tQAAAQY"]
[Sat Feb 28 02:33:36.725564 2026] [:error] [pid 15240:tid 15247] [client 20.104.19.195:15455] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BIBIL.php"] [unique_id "aaHjgC1iKL_41Rk9A9OePAAAAAU"]
[Sat Feb 28 02:33:37.343836 2026] [:error] [pid 38586:tid 38608] [client 20.104.19.195:17446] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BIBIL.php"] [unique_id "aaHjgb_i6nvKNhjFW7V4uAAAARM"]
[Sat Feb 28 03:04:17.887604 2026] [:error] [pid 38586:tid 38596] [client 4.193.177.110:2376] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaHqsb_i6nvKNhjFW7WP4QAAAQc"]
[Sat Feb 28 03:04:18.268908 2026] [:error] [pid 38586:tid 38608] [client 4.193.177.110:7612] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaHqsr_i6nvKNhjFW7WP5gAAARM"]
[Sat Feb 28 03:04:18.668209 2026] [:error] [pid 20709:tid 20731] [client 4.193.177.110:2418] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaHqsk5CnHafo7s0kbTa0AAAAdQ"]
[Sat Feb 28 03:04:19.078480 2026] [:error] [pid 19669:tid 19676] [client 4.193.177.110:7563] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaHqs0y98E5mX0pQrMo_bgAAAYQ"]
[Sat Feb 28 03:42:52.840574 2026] [autoindex:error] [pid 34654:tid 34669] [client 194.146.12.7:59677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 03:50:09.292875 2026] [:error] [pid 8262:tid 8317] [client 54.37.252.152:42340] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaH1cSwDS5PS_GHd9LuG7AAAAFI"]
[Sat Feb 28 03:50:11.988206 2026] [:error] [pid 8356:tid 8374] [client 54.37.252.152:56436] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaH1c0OZwaFLhMxGseFy5wAAAM8"]
[Sat Feb 28 03:50:14.914247 2026] [:error] [pid 8356:tid 8367] [client 54.37.252.152:56448] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aaH1dkOZwaFLhMxGseFy7QAAAMg"]
[Sat Feb 28 03:50:17.392329 2026] [:error] [pid 8356:tid 8382] [client 54.37.252.152:56456] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aaH1eUOZwaFLhMxGseFy-AAAANc"]
[Sat Feb 28 03:50:20.116739 2026] [:error] [pid 8262:tid 8312] [client 54.37.252.152:56460] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaH1fCwDS5PS_GHd9LuG9gAAAE0"]
[Sat Feb 28 03:50:22.547821 2026] [:error] [pid 8262:tid 8301] [client 54.37.252.152:38622] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aaH1fiwDS5PS_GHd9LuG-wAAAEI"]
[Sat Feb 28 03:50:25.606865 2026] [:error] [pid 8356:tid 8382] [client 54.37.252.152:38624] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aaH1gUOZwaFLhMxGseFzFwAAANc"]
[Sat Feb 28 03:50:28.057488 2026] [:error] [pid 8263:tid 8343] [client 54.37.252.152:38626] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaH1hPy129qEf4EbCsiOhQAAAJE"]
[Sat Feb 28 03:50:30.512750 2026] [:error] [pid 8263:tid 8340] [client 54.37.252.152:38642] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaH1hvy129qEf4EbCsiOjAAAAI4"]
[Sat Feb 28 03:50:33.291506 2026] [:error] [pid 8262:tid 8308] [client 54.37.252.152:35728] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaH1iSwDS5PS_GHd9LuHEQAAAEk"]
[Sat Feb 28 03:50:35.747744 2026] [:error] [pid 8263:tid 8345] [client 54.37.252.152:35734] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaH1i_y129qEf4EbCsiOpgAAAJM"]
[Sat Feb 28 03:50:38.541291 2026] [:error] [pid 8263:tid 8333] [client 54.37.252.152:35748] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaH1jvy129qEf4EbCsiOxQAAAIc"]
[Sat Feb 28 03:50:41.564369 2026] [:error] [pid 8356:tid 8382] [client 54.37.252.152:35752] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaH1kUOZwaFLhMxGseFzPwAAANc"]
[Sat Feb 28 03:50:44.185526 2026] [:error] [pid 8263:tid 8346] [client 54.37.252.152:40668] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaH1lPy129qEf4EbCsiO_QAAAJQ"]
[Sat Feb 28 03:50:46.637289 2026] [:error] [pid 8356:tid 8367] [client 54.37.252.152:40674] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaH1lkOZwaFLhMxGseFzUgAAAMg"]
[Sat Feb 28 03:50:49.204002 2026] [:error] [pid 8356:tid 8364] [client 54.37.252.152:40690] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaH1mUOZwaFLhMxGseFzXwAAAMU"]
[Sat Feb 28 03:50:51.813472 2026] [:error] [pid 8356:tid 8382] [client 54.37.252.152:34254] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aaH1m0OZwaFLhMxGseFzdgAAANc"]
[Sat Feb 28 03:50:54.873929 2026] [:error] [pid 8356:tid 8362] [client 54.37.252.152:34256] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaH1nkOZwaFLhMxGseFzkgAAAMM"]
[Sat Feb 28 03:50:57.809435 2026] [:error] [pid 8262:tid 8314] [client 54.37.252.152:34262] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaH1oSwDS5PS_GHd9LuHTwAAAE8"]
[Sat Feb 28 03:51:00.369869 2026] [:error] [pid 8263:tid 8335] [client 54.37.252.152:34272] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaH1pPy129qEf4EbCsiPhgAAAIk"]
[Sat Feb 28 03:51:03.143504 2026] [:error] [pid 8263:tid 8343] [client 54.37.252.152:50440] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaH1p_y129qEf4EbCsiPogAAAJE"]
[Sat Feb 28 05:56:44.119479 2026] [:error] [pid 39183:tid 39205] [client 43.134.141.244:60054] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaITHBCf4HvhVePw3LZk-wAAAA0"]
[Sat Feb 28 06:09:28.595015 2026] [:error] [pid 39292:tid 39309] [client 20.151.113.230:20360] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aaIWGKIAO5fN7BxyqcFUOQAAAM8"]
[Sat Feb 28 06:09:29.008025 2026] [:error] [pid 22194:tid 22213] [client 20.151.113.230:20453] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aaIWGX6mbajs3bzQGyv0MAAAAVE"]
[Sat Feb 28 06:09:29.426025 2026] [:error] [pid 22194:tid 22220] [client 20.151.113.230:20444] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aaIWGX6mbajs3bzQGyv0NQAAAVg"]
[Sat Feb 28 06:09:29.839416 2026] [:error] [pid 39292:tid 39296] [client 20.151.113.230:20471] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aaIWGaIAO5fN7BxyqcFUPgAAAMI"]
[Sat Feb 28 06:09:30.263431 2026] [:error] [pid 22194:tid 22196] [client 20.151.113.230:20419] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aaIWGn6mbajs3bzQGyv0PgAAAUA"]
[Sat Feb 28 06:09:30.674902 2026] [:error] [pid 22194:tid 22208] [client 20.151.113.230:20425] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aaIWGn6mbajs3bzQGyv0RAAAAUw"]
[Sat Feb 28 06:09:31.086764 2026] [:error] [pid 39184:tid 39241] [client 20.151.113.230:20445] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aaIWG1tZF9Zd_U7easA0GgAAAFY"]
[Sat Feb 28 06:09:31.501773 2026] [:error] [pid 11791:tid 11794] [client 20.151.113.230:20428] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aaIWG2uX5e1Q32gqxH2f7gAAAQE"]
[Sat Feb 28 06:09:31.939865 2026] [:error] [pid 11791:tid 11817] [client 20.151.113.230:20354] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/000.php"] [unique_id "aaIWG2uX5e1Q32gqxH2f8wAAARg"]
[Sat Feb 28 06:09:32.383040 2026] [:error] [pid 11791:tid 11812] [client 20.151.113.230:20467] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/000.php"] [unique_id "aaIWHGuX5e1Q32gqxH2f9wAAARM"]
[Sat Feb 28 06:09:32.797281 2026] [:error] [pid 11791:tid 11809] [client 20.151.113.230:20371] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/000.php"] [unique_id "aaIWHGuX5e1Q32gqxH2f-gAAARA"]
[Sat Feb 28 06:09:33.224191 2026] [:error] [pid 11791:tid 11793] [client 20.151.113.230:20422] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/000.php"] [unique_id "aaIWHWuX5e1Q32gqxH2f_AAAAQA"]
[Sat Feb 28 06:09:33.638175 2026] [:error] [pid 39292:tid 39310] [client 20.151.113.230:20424] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mails.php"] [unique_id "aaIWHaIAO5fN7BxyqcFUSgAAANA"]
[Sat Feb 28 06:09:34.048829 2026] [:error] [pid 39184:tid 39221] [client 20.151.113.230:20455] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mails.php"] [unique_id "aaIWHltZF9Zd_U7easA0HAAAAEI"]
[Sat Feb 28 06:09:34.460685 2026] [:error] [pid 39184:tid 39226] [client 20.151.113.230:20472] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mails.php"] [unique_id "aaIWHltZF9Zd_U7easA0HgAAAEc"]
[Sat Feb 28 06:09:34.872433 2026] [:error] [pid 39183:tid 39212] [client 20.151.113.230:20372] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mails.php"] [unique_id "aaIWHhCf4HvhVePw3LZo6wAAABQ"]
[Sat Feb 28 06:09:35.288735 2026] [:error] [pid 39183:tid 39211] [client 20.151.113.230:20440] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xex.php"] [unique_id "aaIWHxCf4HvhVePw3LZo7gAAABM"]
[Sat Feb 28 06:09:35.699820 2026] [:error] [pid 39185:tid 39261] [client 20.151.113.230:20459] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xex.php"] [unique_id "aaIWHxVE-FfM89u7BQZHxAAAAI8"]
[Sat Feb 28 06:09:36.112663 2026] [:error] [pid 39292:tid 39303] [client 20.151.113.230:20365] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xex.php"] [unique_id "aaIWIKIAO5fN7BxyqcFUXQAAAMk"]
[Sat Feb 28 06:09:36.523500 2026] [:error] [pid 39292:tid 39307] [client 20.151.113.230:20465] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xex.php"] [unique_id "aaIWIKIAO5fN7BxyqcFUZQAAAM0"]
[Sat Feb 28 06:09:36.940008 2026] [:error] [pid 39292:tid 39314] [client 20.151.113.230:20436] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3.php"] [unique_id "aaIWIKIAO5fN7BxyqcFUagAAANQ"]
[Sat Feb 28 06:09:37.354823 2026] [:error] [pid 39292:tid 39297] [client 20.151.113.230:20474] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3.php"] [unique_id "aaIWIaIAO5fN7BxyqcFUbQAAAMM"]
[Sat Feb 28 06:09:37.782340 2026] [:error] [pid 39292:tid 39316] [client 20.151.113.230:20374] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3.php"] [unique_id "aaIWIaIAO5fN7BxyqcFUcQAAANY"]
[Sat Feb 28 06:09:38.206421 2026] [:error] [pid 39292:tid 39303] [client 20.151.113.230:20456] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3.php"] [unique_id "aaIWIqIAO5fN7BxyqcFUeQAAAMk"]
[Sat Feb 28 06:09:38.618916 2026] [:error] [pid 11791:tid 11812] [client 20.151.113.230:20416] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/key.php"] [unique_id "aaIWImuX5e1Q32gqxH2gAQAAARM"]
[Sat Feb 28 06:09:39.054196 2026] [:error] [pid 39185:tid 39259] [client 20.151.113.230:20438] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/key.php"] [unique_id "aaIWIxVE-FfM89u7BQZHyAAAAI0"]
[Sat Feb 28 06:09:39.485670 2026] [:error] [pid 22194:tid 22218] [client 20.151.113.230:20357] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/key.php"] [unique_id "aaIWI36mbajs3bzQGyv0TwAAAVY"]
[Sat Feb 28 06:09:39.919304 2026] [:error] [pid 22194:tid 22202] [client 20.151.113.230:20364] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/key.php"] [unique_id "aaIWI36mbajs3bzQGyv0UQAAAUY"]
[Sat Feb 28 06:09:40.337675 2026] [:error] [pid 39185:tid 39255] [client 20.151.113.230:20421] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/667.php"] [unique_id "aaIWJBVE-FfM89u7BQZHygAAAIk"]
[Sat Feb 28 06:09:40.750803 2026] [:error] [pid 39183:tid 39194] [client 20.151.113.230:20475] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/667.php"] [unique_id "aaIWJBCf4HvhVePw3LZo8QAAAAI"]
[Sat Feb 28 06:09:41.171857 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:20461] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/667.php"] [unique_id "aaIWJRVE-FfM89u7BQZHzQAAAJE"]
[Sat Feb 28 06:09:41.590499 2026] [:error] [pid 39183:tid 39207] [client 20.151.113.230:20368] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/667.php"] [unique_id "aaIWJRCf4HvhVePw3LZo9gAAAA8"]
[Sat Feb 28 06:09:42.006061 2026] [:error] [pid 39183:tid 39214] [client 20.151.113.230:20410] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctfbe.php"] [unique_id "aaIWJhCf4HvhVePw3LZo-AAAABY"]
[Sat Feb 28 06:09:42.430861 2026] [:error] [pid 39183:tid 39216] [client 20.151.113.230:20423] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctfbe.php"] [unique_id "aaIWJhCf4HvhVePw3LZo-QAAABg"]
[Sat Feb 28 06:09:42.846558 2026] [:error] [pid 39185:tid 39264] [client 20.151.113.230:20441] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctfbe.php"] [unique_id "aaIWJhVE-FfM89u7BQZHzwAAAJI"]
[Sat Feb 28 06:09:43.265354 2026] [:error] [pid 11791:tid 11810] [client 20.151.113.230:20442] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctfbe.php"] [unique_id "aaIWJ2uX5e1Q32gqxH2gDQAAARE"]
[Sat Feb 28 06:09:43.688973 2026] [:error] [pid 39292:tid 39307] [client 20.151.113.230:20437] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hkweu.php"] [unique_id "aaIWJ6IAO5fN7BxyqcFUhAAAAM0"]
[Sat Feb 28 06:09:44.102965 2026] [:error] [pid 39292:tid 39294] [client 20.151.113.230:20369] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hkweu.php"] [unique_id "aaIWKKIAO5fN7BxyqcFUhwAAAMA"]
[Sat Feb 28 06:09:44.516667 2026] [:error] [pid 22194:tid 22211] [client 20.151.113.230:20356] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hkweu.php"] [unique_id "aaIWKH6mbajs3bzQGyv0WgAAAU8"]
[Sat Feb 28 06:09:44.936570 2026] [:error] [pid 22194:tid 22203] [client 20.151.113.230:20426] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hkweu.php"] [unique_id "aaIWKH6mbajs3bzQGyv0XgAAAUc"]
[Sat Feb 28 06:09:45.346193 2026] [:error] [pid 11791:tid 11804] [client 20.151.113.230:20361] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qdlte.php"] [unique_id "aaIWKWuX5e1Q32gqxH2gDwAAAQs"]
[Sat Feb 28 06:09:45.762997 2026] [:error] [pid 11791:tid 11812] [client 20.151.113.230:20381] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qdlte.php"] [unique_id "aaIWKWuX5e1Q32gqxH2gEAAAARM"]
[Sat Feb 28 06:09:46.180882 2026] [:error] [pid 39184:tid 39234] [client 20.151.113.230:20432] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qdlte.php"] [unique_id "aaIWKltZF9Zd_U7easA0LAAAAE8"]
[Sat Feb 28 06:09:46.589801 2026] [:error] [pid 39183:tid 39211] [client 20.151.113.230:20477] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qdlte.php"] [unique_id "aaIWKhCf4HvhVePw3LZo_gAAABM"]
[Sat Feb 28 06:09:47.000279 2026] [:error] [pid 39185:tid 39253] [client 20.151.113.230:20391] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f7.php"] [unique_id "aaIWKhVE-FfM89u7BQZH0gAAAIc"]
[Sat Feb 28 06:09:47.415236 2026] [:error] [pid 39185:tid 39270] [client 20.151.113.230:20462] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f7.php"] [unique_id "aaIWKxVE-FfM89u7BQZH0wAAAJg"]
[Sat Feb 28 06:09:47.832484 2026] [:error] [pid 39292:tid 39312] [client 20.151.113.230:20385] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f7.php"] [unique_id "aaIWK6IAO5fN7BxyqcFUjwAAANI"]
[Sat Feb 28 06:09:48.241448 2026] [:error] [pid 39183:tid 39210] [client 20.151.113.230:20427] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f7.php"] [unique_id "aaIWLBCf4HvhVePw3LZpAQAAABI"]
[Sat Feb 28 06:09:48.654823 2026] [:error] [pid 39184:tid 39228] [client 20.151.113.230:20420] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "aaIWLFtZF9Zd_U7easA0MAAAAEk"]
[Sat Feb 28 06:09:49.065614 2026] [:error] [pid 39184:tid 39227] [client 20.151.113.230:20366] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "aaIWLVtZF9Zd_U7easA0MgAAAEg"]
[Sat Feb 28 06:09:49.484648 2026] [:error] [pid 39292:tid 39301] [client 20.151.113.230:20454] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "aaIWLaIAO5fN7BxyqcFUkgAAAMc"]
[Sat Feb 28 06:09:49.895490 2026] [:error] [pid 39184:tid 39230] [client 20.151.113.230:20430] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "aaIWLVtZF9Zd_U7easA0OQAAAEs"]
[Sat Feb 28 06:09:50.308719 2026] [:error] [pid 39183:tid 39207] [client 20.151.113.230:20469] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp7.php"] [unique_id "aaIWLhCf4HvhVePw3LZpBgAAAA8"]
[Sat Feb 28 06:09:50.719894 2026] [:error] [pid 39292:tid 39299] [client 20.151.113.230:20295] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp7.php"] [unique_id "aaIWLqIAO5fN7BxyqcFUkwAAAMU"]
[Sat Feb 28 06:09:51.133056 2026] [:error] [pid 39185:tid 39255] [client 20.151.113.230:20407] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp7.php"] [unique_id "aaIWLxVE-FfM89u7BQZH3AAAAIk"]
[Sat Feb 28 06:09:51.543430 2026] [:error] [pid 22194:tid 22215] [client 20.151.113.230:20414] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp7.php"] [unique_id "aaIWL36mbajs3bzQGyv0ZwAAAVM"]
[Sat Feb 28 06:09:51.964184 2026] [:error] [pid 22194:tid 22205] [client 20.151.113.230:20447] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/C1.php"] [unique_id "aaIWL36mbajs3bzQGyv0awAAAUk"]
[Sat Feb 28 06:09:52.377603 2026] [:error] [pid 22194:tid 22206] [client 20.151.113.230:20386] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/C1.php"] [unique_id "aaIWMH6mbajs3bzQGyv0bAAAAUo"]
[Sat Feb 28 06:09:52.793172 2026] [:error] [pid 22194:tid 22210] [client 20.151.113.230:20435] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/C1.php"] [unique_id "aaIWMH6mbajs3bzQGyv0bwAAAU4"]
[Sat Feb 28 06:09:53.207982 2026] [:error] [pid 22194:tid 22208] [client 20.151.113.230:20470] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/C1.php"] [unique_id "aaIWMX6mbajs3bzQGyv0cgAAAUw"]
[Sat Feb 28 06:09:53.622597 2026] [:error] [pid 22194:tid 22216] [client 20.151.113.230:20478] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clcdu.php"] [unique_id "aaIWMX6mbajs3bzQGyv0dwAAAVQ"]
[Sat Feb 28 06:09:54.038662 2026] [:error] [pid 39184:tid 39232] [client 20.151.113.230:20429] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clcdu.php"] [unique_id "aaIWMltZF9Zd_U7easA0QAAAAE0"]
[Sat Feb 28 06:09:54.454672 2026] [:error] [pid 39185:tid 39246] [client 20.151.113.230:20296] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clcdu.php"] [unique_id "aaIWMhVE-FfM89u7BQZH4QAAAIA"]
[Sat Feb 28 06:09:54.867550 2026] [:error] [pid 22194:tid 22219] [client 20.151.113.230:20353] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clcdu.php"] [unique_id "aaIWMn6mbajs3bzQGyv0egAAAVc"]
[Sat Feb 28 06:09:55.291377 2026] [:error] [pid 39292:tid 39305] [client 20.151.113.230:20448] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffbsq.php"] [unique_id "aaIWM6IAO5fN7BxyqcFUnAAAAMs"]
[Sat Feb 28 06:09:55.703051 2026] [:error] [pid 11791:tid 11793] [client 20.151.113.230:20406] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffbsq.php"] [unique_id "aaIWM2uX5e1Q32gqxH2gFwAAAQA"]
[Sat Feb 28 06:09:56.114234 2026] [:error] [pid 39292:tid 39312] [client 20.151.113.230:20457] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffbsq.php"] [unique_id "aaIWNKIAO5fN7BxyqcFUoAAAANI"]
[Sat Feb 28 06:09:56.527517 2026] [:error] [pid 22194:tid 22198] [client 20.151.113.230:20412] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffbsq.php"] [unique_id "aaIWNH6mbajs3bzQGyv0fQAAAUI"]
[Sat Feb 28 06:09:56.938957 2026] [:error] [pid 39184:tid 39230] [client 20.151.113.230:20362] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/resp.php"] [unique_id "aaIWNFtZF9Zd_U7easA0RQAAAEs"]
[Sat Feb 28 06:09:57.350911 2026] [:error] [pid 39184:tid 39240] [client 20.151.113.230:20384] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/resp.php"] [unique_id "aaIWNVtZF9Zd_U7easA0RwAAAFU"]
[Sat Feb 28 06:09:57.760385 2026] [:error] [pid 39292:tid 39294] [client 20.151.113.230:20434] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/resp.php"] [unique_id "aaIWNaIAO5fN7BxyqcFUpQAAAMA"]
[Sat Feb 28 06:09:58.175814 2026] [:error] [pid 39292:tid 39307] [client 20.151.113.230:20288] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/resp.php"] [unique_id "aaIWNqIAO5fN7BxyqcFUpgAAAM0"]
[Sat Feb 28 06:09:58.587331 2026] [:error] [pid 39185:tid 39252] [client 20.151.113.230:20439] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aaIWNhVE-FfM89u7BQZH6AAAAIY"]
[Sat Feb 28 06:09:59.002371 2026] [:error] [pid 22194:tid 22219] [client 20.151.113.230:20394] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aaIWN36mbajs3bzQGyv0hQAAAVc"]
[Sat Feb 28 06:09:59.415386 2026] [:error] [pid 39292:tid 39314] [client 20.151.113.230:20401] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aaIWN6IAO5fN7BxyqcFUqwAAANQ"]
[Sat Feb 28 06:09:59.858009 2026] [:error] [pid 22194:tid 22213] [client 20.151.113.230:20446] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aaIWN36mbajs3bzQGyv0hgAAAVE"]
[Sat Feb 28 06:10:00.296252 2026] [:error] [pid 39292:tid 39295] [client 20.151.113.230:20392] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaIWOKIAO5fN7BxyqcFUsQAAAME"]
[Sat Feb 28 06:10:00.705832 2026] [:error] [pid 39292:tid 39300] [client 20.151.113.230:20379] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaIWOKIAO5fN7BxyqcFUtQAAAMY"]
[Sat Feb 28 06:10:01.141144 2026] [:error] [pid 11791:tid 11810] [client 20.151.113.230:20303] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaIWOWuX5e1Q32gqxH2gGwAAARE"]
[Sat Feb 28 06:10:01.552616 2026] [:error] [pid 39184:tid 39237] [client 20.151.113.230:20418] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaIWOVtZF9Zd_U7easA0TQAAAFI"]
[Sat Feb 28 06:10:01.969309 2026] [:error] [pid 39292:tid 39296] [client 20.151.113.230:20376] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kma.php"] [unique_id "aaIWOaIAO5fN7BxyqcFUuQAAAMI"]
[Sat Feb 28 06:10:02.392585 2026] [:error] [pid 22194:tid 22199] [client 20.151.113.230:20458] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kma.php"] [unique_id "aaIWOn6mbajs3bzQGyv0iQAAAUM"]
[Sat Feb 28 06:10:02.824165 2026] [:error] [pid 22194:tid 22202] [client 20.151.113.230:20359] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kma.php"] [unique_id "aaIWOn6mbajs3bzQGyv0jQAAAUY"]
[Sat Feb 28 06:10:03.241213 2026] [:error] [pid 39292:tid 39313] [client 20.151.113.230:20403] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kma.php"] [unique_id "aaIWO6IAO5fN7BxyqcFUvQAAANM"]
[Sat Feb 28 06:10:03.652059 2026] [:error] [pid 39184:tid 39240] [client 20.151.113.230:20367] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpls.php"] [unique_id "aaIWO1tZF9Zd_U7easA0VQAAAFU"]
[Sat Feb 28 06:10:04.061946 2026] [:error] [pid 39292:tid 39303] [client 20.151.113.230:20352] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpls.php"] [unique_id "aaIWPKIAO5fN7BxyqcFUvwAAAMk"]
[Sat Feb 28 06:10:04.474459 2026] [:error] [pid 39183:tid 39213] [client 20.151.113.230:20378] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpls.php"] [unique_id "aaIWPBCf4HvhVePw3LZpFAAAABU"]
[Sat Feb 28 06:10:04.887833 2026] [:error] [pid 11791:tid 11802] [client 20.151.113.230:20310] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpls.php"] [unique_id "aaIWPGuX5e1Q32gqxH2gHQAAAQk"]
[Sat Feb 28 06:10:05.301954 2026] [:error] [pid 22194:tid 22209] [client 20.151.113.230:20382] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova-wso.php"] [unique_id "aaIWPX6mbajs3bzQGyv0kgAAAU0"]
[Sat Feb 28 06:10:05.716727 2026] [:error] [pid 11791:tid 11811] [client 20.151.113.230:20358] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova-wso.php"] [unique_id "aaIWPWuX5e1Q32gqxH2gIQAAARI"]
[Sat Feb 28 06:10:06.130898 2026] [:error] [pid 22194:tid 22201] [client 20.151.113.230:20431] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova-wso.php"] [unique_id "aaIWPn6mbajs3bzQGyv0lAAAAUU"]
[Sat Feb 28 06:10:06.543565 2026] [:error] [pid 39292:tid 39306] [client 20.151.113.230:20313] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova-wso.php"] [unique_id "aaIWPqIAO5fN7BxyqcFUxQAAAMw"]
[Sat Feb 28 06:10:06.953649 2026] [:error] [pid 39292:tid 39318] [client 20.151.113.230:20291] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjq.php"] [unique_id "aaIWPqIAO5fN7BxyqcFUyQAAANg"]
[Sat Feb 28 06:10:07.365535 2026] [:error] [pid 39292:tid 39310] [client 20.151.113.230:20335] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjq.php"] [unique_id "aaIWP6IAO5fN7BxyqcFUzAAAANA"]
[Sat Feb 28 06:10:07.779425 2026] [:error] [pid 11791:tid 11806] [client 20.151.113.230:20336] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjq.php"] [unique_id "aaIWP2uX5e1Q32gqxH2gJgAAAQ0"]
[Sat Feb 28 06:10:08.195480 2026] [:error] [pid 11791:tid 11796] [client 20.151.113.230:20479] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjq.php"] [unique_id "aaIWQGuX5e1Q32gqxH2gJwAAAQM"]
[Sat Feb 28 06:10:08.614688 2026] [:error] [pid 11791:tid 11801] [client 20.151.113.230:20297] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php7"] [unique_id "aaIWQGuX5e1Q32gqxH2gKwAAAQg"]
[Sat Feb 28 06:10:09.025179 2026] [:error] [pid 22194:tid 22207] [client 20.151.113.230:20318] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php7"] [unique_id "aaIWQX6mbajs3bzQGyv0lgAAAUs"]
[Sat Feb 28 06:10:09.436438 2026] [:error] [pid 22194:tid 22210] [client 20.151.113.230:20234] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php7"] [unique_id "aaIWQX6mbajs3bzQGyv0mAAAAU4"]
[Sat Feb 28 06:10:09.850961 2026] [:error] [pid 11791:tid 11800] [client 20.151.113.230:20375] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php7"] [unique_id "aaIWQWuX5e1Q32gqxH2gMgAAAQc"]
[Sat Feb 28 06:10:10.261668 2026] [:error] [pid 39184:tid 39222] [client 20.151.113.230:20315] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaIWQltZF9Zd_U7easA0awAAAEM"]
[Sat Feb 28 06:10:10.683652 2026] [:error] [pid 39183:tid 39216] [client 20.151.113.230:20390] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaIWQhCf4HvhVePw3LZpGAAAABg"]
[Sat Feb 28 06:10:11.097273 2026] [:error] [pid 39185:tid 39253] [client 20.151.113.230:20301] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaIWQxVE-FfM89u7BQZH8QAAAIc"]
[Sat Feb 28 06:10:11.511222 2026] [:error] [pid 39292:tid 39314] [client 20.151.113.230:20409] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaIWQ6IAO5fN7BxyqcFU1QAAANQ"]
[Sat Feb 28 06:10:11.923062 2026] [:error] [pid 39185:tid 39256] [client 20.151.113.230:20451] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sql.php7"] [unique_id "aaIWQxVE-FfM89u7BQZH9AAAAIo"]
[Sat Feb 28 06:10:12.343908 2026] [:error] [pid 11791:tid 11808] [client 20.151.113.230:20261] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sql.php7"] [unique_id "aaIWRGuX5e1Q32gqxH2gOQAAAQ8"]
[Sat Feb 28 06:10:12.756075 2026] [:error] [pid 22194:tid 22202] [client 20.151.113.230:20395] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sql.php7"] [unique_id "aaIWRH6mbajs3bzQGyv0nAAAAUY"]
[Sat Feb 28 06:10:13.187453 2026] [:error] [pid 22194:tid 22198] [client 20.151.113.230:20327] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sql.php7"] [unique_id "aaIWRX6mbajs3bzQGyv0nQAAAUI"]
[Sat Feb 28 06:10:13.598863 2026] [:error] [pid 39184:tid 39232] [client 20.151.113.230:20302] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/55.php"] [unique_id "aaIWRVtZF9Zd_U7easA0dwAAAE0"]
[Sat Feb 28 06:10:14.010008 2026] [:error] [pid 39184:tid 39230] [client 20.151.113.230:20433] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/55.php"] [unique_id "aaIWRltZF9Zd_U7easA0eQAAAEs"]
[Sat Feb 28 06:10:14.436522 2026] [:error] [pid 11791:tid 11795] [client 20.151.113.230:20373] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/55.php"] [unique_id "aaIWRmuX5e1Q32gqxH2gOwAAAQI"]
[Sat Feb 28 06:10:14.858007 2026] [:error] [pid 11791:tid 11802] [client 20.151.113.230:20355] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/55.php"] [unique_id "aaIWRmuX5e1Q32gqxH2gPQAAAQk"]
[Sat Feb 28 06:10:15.271436 2026] [:error] [pid 22194:tid 22215] [client 20.151.113.230:20466] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc.php"] [unique_id "aaIWR36mbajs3bzQGyv0oAAAAVM"]
[Sat Feb 28 06:10:15.688974 2026] [:error] [pid 39183:tid 39203] [client 20.151.113.230:20299] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc.php"] [unique_id "aaIWRxCf4HvhVePw3LZpHQAAAAs"]
[Sat Feb 28 06:10:16.106995 2026] [:error] [pid 39185:tid 39258] [client 20.151.113.230:20314] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc.php"] [unique_id "aaIWSBVE-FfM89u7BQZH-QAAAIw"]
[Sat Feb 28 06:10:16.521447 2026] [:error] [pid 39292:tid 39307] [client 20.151.113.230:20256] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc.php"] [unique_id "aaIWSKIAO5fN7BxyqcFU4QAAAM0"]
[Sat Feb 28 06:10:16.936873 2026] [:error] [pid 39292:tid 39296] [client 20.151.113.230:20393] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aaIWSKIAO5fN7BxyqcFU5QAAAMI"]
[Sat Feb 28 06:10:17.361227 2026] [:error] [pid 39292:tid 39315] [client 20.151.113.230:20269] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aaIWSaIAO5fN7BxyqcFU5gAAANU"]
[Sat Feb 28 06:10:17.784888 2026] [:error] [pid 39292:tid 39310] [client 20.151.113.230:20325] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aaIWSaIAO5fN7BxyqcFU6wAAANA"]
[Sat Feb 28 06:10:18.201001 2026] [:error] [pid 39292:tid 39300] [client 20.151.113.230:20464] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/re.php"] [unique_id "aaIWSqIAO5fN7BxyqcFU7AAAAMY"]
[Sat Feb 28 07:07:53.315742 2026] [autoindex:error] [pid 39183:tid 39193] [client 20.104.124.39:30290] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 07:08:05.297916 2026] [:error] [pid 39183:tid 39205] [client 20.104.124.39:30290] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aaIj1RCf4HvhVePw3LZ2swAAAA0"]
[Sat Feb 28 07:08:06.181183 2026] [:error] [pid 22194:tid 22202] [client 20.104.124.39:30335] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aaIj1n6mbajs3bzQGysYZwAAAUY"]
[Sat Feb 28 07:08:07.124046 2026] [:error] [pid 22194:tid 22207] [client 20.104.124.39:30288] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aaIj136mbajs3bzQGysYbQAAAUs"]
[Sat Feb 28 07:08:08.110729 2026] [:error] [pid 39183:tid 39199] [client 20.104.124.39:30310] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aaIj2BCf4HvhVePw3LZ2vAAAAAc"]
[Sat Feb 28 07:08:09.289878 2026] [:error] [pid 22194:tid 22210] [client 20.104.124.39:30330] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aaIj2X6mbajs3bzQGysYewAAAU4"]
[Sat Feb 28 07:08:10.116001 2026] [:error] [pid 39183:tid 39209] [client 20.104.124.39:30293] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aaIj2hCf4HvhVePw3LZ2vgAAABE"]
[Sat Feb 28 07:08:10.877298 2026] [:error] [pid 39292:tid 39300] [client 20.104.124.39:30239] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aaIj2qIAO5fN7BxyqcGMEwAAAMY"]
[Sat Feb 28 07:08:11.663938 2026] [:error] [pid 39184:tid 39239] [client 20.104.124.39:30305] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aaIj21tZF9Zd_U7easBFiAAAAFQ"]
[Sat Feb 28 07:08:12.250283 2026] [:error] [pid 39184:tid 39225] [client 20.104.124.39:48207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aaIj3FtZF9Zd_U7easBFigAAAEY"]
[Sat Feb 28 07:08:13.759935 2026] [:error] [pid 22194:tid 22212] [client 20.104.124.39:30300] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aaIj3X6mbajs3bzQGysYkAAAAVA"]
[Sat Feb 28 07:08:15.070438 2026] [:error] [pid 39292:tid 39297] [client 20.104.124.39:30234] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aaIj36IAO5fN7BxyqcGMKQAAAMM"]
[Sat Feb 28 07:08:15.757794 2026] [:error] [pid 39292:tid 39296] [client 20.104.124.39:30236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aaIj36IAO5fN7BxyqcGMMAAAAMI"]
[Sat Feb 28 07:08:16.289310 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:30276] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaIj4KIAO5fN7BxyqcGMNAAAANA"]
[Sat Feb 28 07:08:17.126282 2026] [:error] [pid 11791:tid 11802] [client 20.104.124.39:30226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaIj4WuX5e1Q32gqxH27WQAAAQk"]
[Sat Feb 28 07:08:18.630131 2026] [:error] [pid 39184:tid 39230] [client 20.104.124.39:30323] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaIj4ltZF9Zd_U7easBFlgAAAEs"]
[Sat Feb 28 07:08:19.947314 2026] [:error] [pid 11791:tid 11798] [client 20.104.124.39:30275] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaIj42uX5e1Q32gqxH27YgAAAQU"]
[Sat Feb 28 07:08:20.584800 2026] [:error] [pid 39292:tid 39305] [client 20.104.124.39:30301] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aaIj5KIAO5fN7BxyqcGMSAAAAMs"]
[Sat Feb 28 07:08:21.736171 2026] [:error] [pid 39184:tid 39243] [client 20.104.124.39:30228] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aaIj5VtZF9Zd_U7easBFpAAAAFg"]
[Sat Feb 28 07:08:22.401197 2026] [:error] [pid 39183:tid 39215] [client 20.104.124.39:30294] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aaIj5hCf4HvhVePw3LZ2xAAAABc"]
[Sat Feb 28 07:08:23.123665 2026] [:error] [pid 39184:tid 39236] [client 20.104.124.39:30312] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aaIj51tZF9Zd_U7easBFqwAAAFE"]
[Sat Feb 28 07:08:23.744109 2026] [:error] [pid 11791:tid 11798] [client 20.104.124.39:30292] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aaIj52uX5e1Q32gqxH27dQAAAQU"]
[Sat Feb 28 07:08:24.779439 2026] [:error] [pid 39292:tid 39301] [client 20.104.124.39:30210] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aaIj6KIAO5fN7BxyqcGMYwAAAMc"]
[Sat Feb 28 07:08:25.517169 2026] [:error] [pid 39183:tid 39211] [client 20.104.124.39:30230] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aaIj6RCf4HvhVePw3LZ2zQAAABM"]
[Sat Feb 28 07:08:26.552189 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:30272] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aaIj6qIAO5fN7BxyqcGMbQAAANQ"]
[Sat Feb 28 07:08:27.223211 2026] [:error] [pid 22194:tid 22199] [client 20.104.124.39:30229] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaIj636mbajs3bzQGysYpQAAAUM"]
[Sat Feb 28 07:08:27.919152 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:30313] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaIj66IAO5fN7BxyqcGMfAAAAMg"]
[Sat Feb 28 07:08:28.758873 2026] [:error] [pid 22194:tid 22204] [client 20.104.124.39:48194] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaIj7H6mbajs3bzQGysYpgAAAUg"]
[Sat Feb 28 07:08:29.996678 2026] [:error] [pid 39184:tid 39231] [client 20.104.124.39:30308] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaIj7VtZF9Zd_U7easBFsQAAAEw"]
[Sat Feb 28 07:08:31.084730 2026] [:error] [pid 39185:tid 39256] [client 20.104.124.39:30304] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aaIj7xVE-FfM89u7BQZaxwAAAIo"]
[Sat Feb 28 07:08:32.145917 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:30237] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aaIj8KIAO5fN7BxyqcGMjAAAAM8"]
[Sat Feb 28 07:08:33.306184 2026] [:error] [pid 11791:tid 11808] [client 20.104.124.39:30283] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aaIj8WuX5e1Q32gqxH27jAAAAQ8"]
[Sat Feb 28 07:08:34.152768 2026] [:error] [pid 11791:tid 11797] [client 20.104.124.39:30326] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aaIj8muX5e1Q32gqxH27kgAAAQQ"]
[Sat Feb 28 07:08:35.065337 2026] [:error] [pid 22194:tid 22208] [client 20.104.124.39:30307] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaIj836mbajs3bzQGysYvQAAAUw"]
[Sat Feb 28 07:08:36.138113 2026] [:error] [pid 22194:tid 22210] [client 20.104.124.39:30334] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaIj9H6mbajs3bzQGysYvgAAAU4"]
[Sat Feb 28 07:08:38.096422 2026] [:error] [pid 22194:tid 22220] [client 20.104.124.39:30242] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaIj9n6mbajs3bzQGysYyAAAAVg"]
[Sat Feb 28 07:08:39.367045 2026] [:error] [pid 39185:tid 39262] [client 20.104.124.39:48193] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaIj9xVE-FfM89u7BQZa1gAAAJA"]
[Sat Feb 28 07:08:40.645557 2026] [:error] [pid 22194:tid 22196] [client 20.104.124.39:30247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaIj-H6mbajs3bzQGysY3gAAAUA"]
[Sat Feb 28 07:08:42.348753 2026] [:error] [pid 39292:tid 39318] [client 20.104.124.39:30285] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaIj-qIAO5fN7BxyqcGMtwAAANg"]
[Sat Feb 28 07:08:43.566170 2026] [:error] [pid 11791:tid 11815] [client 20.104.124.39:30225] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaIj-2uX5e1Q32gqxH27rQAAARY"]
[Sat Feb 28 07:08:44.116878 2026] [:error] [pid 11791:tid 11811] [client 20.104.124.39:30220] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaIj_GuX5e1Q32gqxH27sQAAARI"]
[Sat Feb 28 07:08:44.857813 2026] [:error] [pid 11791:tid 11816] [client 20.104.124.39:30279] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaIj_GuX5e1Q32gqxH27tgAAARc"]
[Sat Feb 28 07:08:45.780544 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:30240] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaIj_aIAO5fN7BxyqcGM1gAAAM8"]
[Sat Feb 28 07:08:46.606048 2026] [:error] [pid 22194:tid 22202] [client 20.104.124.39:30245] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaIj_n6mbajs3bzQGysY9wAAAUY"]
[Sat Feb 28 07:08:48.019107 2026] [:error] [pid 39184:tid 39240] [client 20.104.124.39:30328] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaIkAFtZF9Zd_U7easBFvQAAAFU"]
[Sat Feb 28 07:08:48.770081 2026] [:error] [pid 39292:tid 39311] [client 20.104.124.39:30254] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aaIkAKIAO5fN7BxyqcGM2wAAANE"]
[Sat Feb 28 07:08:49.496492 2026] [:error] [pid 39183:tid 39208] [client 20.104.124.39:30215] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aaIkARCf4HvhVePw3LZ22QAAABA"]
[Sat Feb 28 07:08:50.099636 2026] [:error] [pid 39183:tid 39212] [client 20.104.124.39:30332] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aaIkAhCf4HvhVePw3LZ22wAAABQ"]
[Sat Feb 28 07:08:51.180817 2026] [:error] [pid 39183:tid 39205] [client 20.104.124.39:30291] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aaIkAxCf4HvhVePw3LZ25AAAAA0"]
[Sat Feb 28 07:08:51.888532 2026] [:error] [pid 39292:tid 39308] [client 20.104.124.39:30235] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aaIkA6IAO5fN7BxyqcGM6wAAAM4"]
[Sat Feb 28 07:08:52.823704 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:30299] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aaIkBKIAO5fN7BxyqcGM8wAAAMw"]
[Sat Feb 28 07:08:53.622642 2026] [:error] [pid 39184:tid 39234] [client 20.104.124.39:48232] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aaIkBVtZF9Zd_U7easBFxwAAAE8"]
[Sat Feb 28 07:08:54.671011 2026] [:error] [pid 11791:tid 11809] [client 20.104.124.39:30333] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z60.php"] [unique_id "aaIkBmuX5e1Q32gqxH273AAAARA"]
[Sat Feb 28 07:08:55.687790 2026] [:error] [pid 22194:tid 22214] [client 20.104.124.39:30298] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aaIkB36mbajs3bzQGysZEwAAAVI"]
[Sat Feb 28 07:08:57.501344 2026] [:error] [pid 39292:tid 39300] [client 20.104.124.39:30216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aaIkCaIAO5fN7BxyqcGM-wAAAMY"]
[Sat Feb 28 07:08:58.266837 2026] [:error] [pid 22194:tid 22219] [client 20.104.124.39:30331] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aaIkCn6mbajs3bzQGysZHQAAAVc"]
[Sat Feb 28 07:08:59.995121 2026] [:error] [pid 39292:tid 39317] [client 20.104.124.39:30219] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aaIkC6IAO5fN7BxyqcGNBAAAANc"]
[Sat Feb 28 07:09:00.974371 2026] [:error] [pid 39184:tid 39239] [client 20.104.124.39:30250] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aaIkDFtZF9Zd_U7easBF3wAAAFQ"]
[Sat Feb 28 07:09:01.605043 2026] [:error] [pid 39292:tid 39300] [client 20.104.124.39:30329] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aaIkDaIAO5fN7BxyqcGNCgAAAMY"]
[Sat Feb 28 07:09:02.495121 2026] [:error] [pid 11791:tid 11815] [client 20.104.124.39:30248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aaIkDmuX5e1Q32gqxH277gAAARY"]
[Sat Feb 28 07:09:03.614536 2026] [:error] [pid 39292:tid 39301] [client 20.104.124.39:48192] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "aaIkD6IAO5fN7BxyqcGNEwAAAMc"]
[Sat Feb 28 07:09:16.558095 2026] [:error] [pid 39292:tid 39305] [client 20.104.124.39:48224] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaIkHKIAO5fN7BxyqcGNTAAAAMs"]
[Sat Feb 28 07:09:20.555784 2026] [:error] [pid 39185:tid 39268] [client 20.104.124.39:30208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaIkIBVE-FfM89u7BQZbIAAAAJY"]
[Sat Feb 28 07:09:21.131477 2026] [:error] [pid 22194:tid 22209] [client 20.104.124.39:30265] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaIkIX6mbajs3bzQGysZWgAAAU0"]
[Sat Feb 28 07:09:21.764991 2026] [:error] [pid 39185:tid 39250] [client 20.104.124.39:30238] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaIkIRVE-FfM89u7BQZbJAAAAIQ"]
[Sat Feb 28 07:09:22.329495 2026] [:error] [pid 22194:tid 22211] [client 20.104.124.39:30318] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaIkIn6mbajs3bzQGysZYgAAAU8"]
[Sat Feb 28 07:09:22.879904 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:30256] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaIkIqIAO5fN7BxyqcGNTgAAAMw"]
[Sat Feb 28 07:09:23.745611 2026] [:error] [pid 39292:tid 39307] [client 20.104.124.39:30287] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaIkI6IAO5fN7BxyqcGNUQAAAM0"]
[Sat Feb 28 07:09:24.529223 2026] [:error] [pid 22194:tid 22197] [client 20.104.124.39:30231] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaIkJH6mbajs3bzQGysZagAAAUE"]
[Sat Feb 28 07:09:25.291544 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:48251] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaIkJRVE-FfM89u7BQZbLwAAAIw"]
[Sat Feb 28 07:09:26.115334 2026] [:error] [pid 22194:tid 22214] [client 20.104.124.39:30264] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaIkJn6mbajs3bzQGysZcAAAAVI"]
[Sat Feb 28 07:09:27.304083 2026] [:error] [pid 39183:tid 39199] [client 20.104.124.39:30296] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaIkJxCf4HvhVePw3LZ2_AAAAAc"]
[Sat Feb 28 07:09:28.258620 2026] [:error] [pid 11791:tid 11799] [client 20.104.124.39:48243] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaIkKGuX5e1Q32gqxH28EwAAAQY"]
[Sat Feb 28 07:09:28.998919 2026] [:error] [pid 11791:tid 11803] [client 20.104.124.39:48236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaIkKGuX5e1Q32gqxH28GQAAAQo"]
[Sat Feb 28 07:09:29.662812 2026] [:error] [pid 39292:tid 39296] [client 20.104.124.39:30267] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aaIkKaIAO5fN7BxyqcGNXQAAAMI"]
[Sat Feb 28 07:09:30.965840 2026] [:error] [pid 11791:tid 11817] [client 20.104.124.39:30284] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aaIkKmuX5e1Q32gqxH28MQAAARg"]
[Sat Feb 28 07:09:32.478791 2026] [:error] [pid 39185:tid 39264] [client 20.104.124.39:30259] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aaIkLBVE-FfM89u7BQZbPAAAAJI"]
[Sat Feb 28 07:09:33.704744 2026] [:error] [pid 11791:tid 11794] [client 20.104.124.39:30211] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aaIkLWuX5e1Q32gqxH28UwAAAQE"]
[Sat Feb 28 07:09:34.334203 2026] [:error] [pid 22194:tid 22199] [client 20.104.124.39:30273] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaIkLn6mbajs3bzQGysZgQAAAUM"]
[Sat Feb 28 07:09:35.046941 2026] [:error] [pid 22194:tid 22208] [client 20.104.124.39:48200] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaIkL36mbajs3bzQGysZgwAAAUw"]
[Sat Feb 28 07:09:35.975864 2026] [:error] [pid 11791:tid 11810] [client 20.104.124.39:30251] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaIkL2uX5e1Q32gqxH28bAAAARE"]
[Sat Feb 28 07:09:36.968999 2026] [:error] [pid 39292:tid 39299] [client 20.104.124.39:30253] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaIkMKIAO5fN7BxyqcGNeAAAAMU"]
[Sat Feb 28 07:09:38.351046 2026] [:error] [pid 11791:tid 11801] [client 20.104.124.39:30223] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aaIkMmuX5e1Q32gqxH28cAAAAQg"]
[Sat Feb 28 07:09:39.597316 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:30221] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aaIkM6IAO5fN7BxyqcGNhQAAAM8"]
[Sat Feb 28 07:09:40.502221 2026] [:error] [pid 22194:tid 22205] [client 20.104.124.39:48204] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aaIkNH6mbajs3bzQGysZiAAAAUk"]
[Sat Feb 28 07:09:41.732734 2026] [:error] [pid 22194:tid 22209] [client 20.104.124.39:30282] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aaIkNX6mbajs3bzQGysZiQAAAU0"]
[Sat Feb 28 07:09:42.449640 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:30227] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaIkNhVE-FfM89u7BQZbUgAAAIw"]
[Sat Feb 28 07:09:43.883046 2026] [:error] [pid 39292:tid 39294] [client 20.104.124.39:30261] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaIkN6IAO5fN7BxyqcGNjwAAAMA"]
[Sat Feb 28 07:09:45.004866 2026] [:error] [pid 39184:tid 39237] [client 20.104.124.39:48130] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaIkOVtZF9Zd_U7easBGBAAAAFI"]
[Sat Feb 28 07:09:46.265465 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:30212] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaIkOqIAO5fN7BxyqcGNmQAAAMw"]
[Sat Feb 28 07:09:46.938018 2026] [:error] [pid 39292:tid 39298] [client 20.104.124.39:48212] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaIkOqIAO5fN7BxyqcGNnQAAAMQ"]
[Sat Feb 28 07:09:48.059300 2026] [:error] [pid 22194:tid 22204] [client 20.104.124.39:48197] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaIkPH6mbajs3bzQGysZjQAAAUg"]
[Sat Feb 28 07:09:48.655200 2026] [:error] [pid 11791:tid 11799] [client 20.104.124.39:30217] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaIkPGuX5e1Q32gqxH28igAAAQY"]
[Sat Feb 28 07:09:50.020226 2026] [:error] [pid 39184:tid 39228] [client 20.104.124.39:48195] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaIkPltZF9Zd_U7easBGCwAAAEk"]
[Sat Feb 28 07:09:50.766806 2026] [:error] [pid 39184:tid 39238] [client 20.104.124.39:30255] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaIkPltZF9Zd_U7easBGDAAAAFM"]
[Sat Feb 28 07:09:51.616182 2026] [:error] [pid 22194:tid 22199] [client 20.104.124.39:30319] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaIkP36mbajs3bzQGysZlAAAAUM"]
[Sat Feb 28 07:09:52.314016 2026] [:error] [pid 22194:tid 22213] [client 20.104.124.39:48246] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaIkQH6mbajs3bzQGysZmAAAAVE"]
[Sat Feb 28 07:09:52.813423 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:48253] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaIkQKIAO5fN7BxyqcGNqwAAAM8"]
[Sat Feb 28 07:09:53.785704 2026] [:error] [pid 39292:tid 39316] [client 20.104.124.39:30214] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaIkQaIAO5fN7BxyqcGNsAAAANY"]
[Sat Feb 28 07:09:54.762701 2026] [:error] [pid 39292:tid 39308] [client 20.104.124.39:30233] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaIkQqIAO5fN7BxyqcGNtgAAAM4"]
[Sat Feb 28 07:09:55.716923 2026] [:error] [pid 39185:tid 39259] [client 20.104.124.39:48211] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaIkQxVE-FfM89u7BQZbXwAAAI0"]
[Sat Feb 28 07:09:56.586309 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:30278] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaIkRBVE-FfM89u7BQZbZAAAAIw"]
[Sat Feb 28 07:09:57.192932 2026] [:error] [pid 39292:tid 39318] [client 20.104.124.39:30209] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aaIkRaIAO5fN7BxyqcGNwQAAANg"]
[Sat Feb 28 07:09:57.740025 2026] [:error] [pid 39292:tid 39308] [client 20.104.124.39:48201] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aaIkRaIAO5fN7BxyqcGNxgAAAM4"]
[Sat Feb 28 07:09:58.465156 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:48199] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aaIkRqIAO5fN7BxyqcGNywAAANQ"]
[Sat Feb 28 07:09:59.127108 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:30321] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "aaIkR6IAO5fN7BxyqcGN0wAAAMg"]
[Sat Feb 28 07:09:59.916673 2026] [:error] [pid 39292:tid 39298] [client 20.104.124.39:48210] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aaIkR6IAO5fN7BxyqcGN2wAAAMQ"]
[Sat Feb 28 07:10:00.674291 2026] [:error] [pid 39292:tid 39312] [client 20.104.124.39:48129] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aaIkSKIAO5fN7BxyqcGN4QAAANI"]
[Sat Feb 28 07:10:01.244963 2026] [:error] [pid 39292:tid 39300] [client 20.104.124.39:48217] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aaIkSaIAO5fN7BxyqcGN6AAAAMY"]
[Sat Feb 28 07:10:02.087129 2026] [:error] [pid 39292:tid 39300] [client 20.104.124.39:30274] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aaIkSqIAO5fN7BxyqcGN8wAAAMY"]
[Sat Feb 28 07:10:02.719365 2026] [:error] [pid 39292:tid 39317] [client 20.104.124.39:48214] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaIkSqIAO5fN7BxyqcGN_AAAANc"]
[Sat Feb 28 07:10:03.524061 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:48218] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaIkS6IAO5fN7BxyqcGOBgAAANA"]
[Sat Feb 28 07:10:04.461056 2026] [:error] [pid 39292:tid 39300] [client 20.104.124.39:48229] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaIkTKIAO5fN7BxyqcGOEAAAAMY"]
[Sat Feb 28 07:10:05.823012 2026] [:error] [pid 11791:tid 11814] [client 20.104.124.39:30218] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaIkTWuX5e1Q32gqxH28nQAAARU"]
[Sat Feb 28 07:10:06.581550 2026] [:error] [pid 11791:tid 11795] [client 20.104.124.39:48216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaIkTmuX5e1Q32gqxH28oAAAAQI"]
[Sat Feb 28 07:10:07.512849 2026] [:error] [pid 39184:tid 39234] [client 20.104.124.39:30289] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaIkT1tZF9Zd_U7easBGHgAAAE8"]
[Sat Feb 28 07:10:08.375512 2026] [:error] [pid 22194:tid 22220] [client 20.104.124.39:30277] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaIkUH6mbajs3bzQGysZtgAAAVg"]
[Sat Feb 28 07:10:09.204160 2026] [:error] [pid 39184:tid 39240] [client 20.104.124.39:30263] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaIkUVtZF9Zd_U7easBGIAAAAFU"]
[Sat Feb 28 07:10:09.818071 2026] [:error] [pid 39184:tid 39232] [client 20.104.124.39:48154] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaIkUVtZF9Zd_U7easBGIgAAAE0"]
[Sat Feb 28 07:10:10.510114 2026] [:error] [pid 11791:tid 11816] [client 20.104.124.39:48249] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaIkUmuX5e1Q32gqxH28pQAAARc"]
[Sat Feb 28 07:10:11.447645 2026] [:error] [pid 39183:tid 39196] [client 20.104.124.39:30262] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaIkUxCf4HvhVePw3LZ3HgAAAAQ"]
[Sat Feb 28 07:10:12.084453 2026] [:error] [pid 39183:tid 39209] [client 20.104.124.39:30297] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaIkVBCf4HvhVePw3LZ3IQAAABE"]
[Sat Feb 28 07:10:12.600776 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:30324] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaIkVKIAO5fN7BxyqcGONgAAANA"]
[Sat Feb 28 07:10:13.378626 2026] [:error] [pid 39292:tid 39294] [client 20.104.124.39:48228] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaIkVaIAO5fN7BxyqcGOPAAAAMA"]
[Sat Feb 28 07:10:14.742639 2026] [:error] [pid 11791:tid 11795] [client 20.104.124.39:30325] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaIkVmuX5e1Q32gqxH28tgAAAQI"]
[Sat Feb 28 07:10:15.420100 2026] [:error] [pid 22194:tid 22197] [client 20.104.124.39:48198] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaIkV36mbajs3bzQGysZyAAAAUE"]
[Sat Feb 28 07:10:16.205953 2026] [:error] [pid 39292:tid 39295] [client 20.104.124.39:48203] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaIkWKIAO5fN7BxyqcGOTQAAAME"]
[Sat Feb 28 07:10:16.887250 2026] [:error] [pid 39292:tid 39313] [client 20.104.124.39:48226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaIkWKIAO5fN7BxyqcGOVAAAANM"]
[Sat Feb 28 07:10:17.663697 2026] [:error] [pid 39184:tid 39238] [client 20.104.124.39:30271] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaIkWVtZF9Zd_U7easBGLwAAAFM"]
[Sat Feb 28 07:10:18.183304 2026] [:error] [pid 39184:tid 39220] [client 20.104.124.39:48167] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaIkWltZF9Zd_U7easBGMgAAAEE"]
[Sat Feb 28 07:10:18.994001 2026] [:error] [pid 22194:tid 22211] [client 20.104.124.39:30260] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaIkWn6mbajs3bzQGysZzQAAAU8"]
[Sat Feb 28 07:10:35.581013 2026] [:error] [pid 11791:tid 11798] [client 20.104.124.39:48159] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaIka2uX5e1Q32gqxH285QAAAQU"]
[Sat Feb 28 07:10:36.268298 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:48209] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaIkbKIAO5fN7BxyqcGO7gAAANQ"]
[Sat Feb 28 07:10:36.985040 2026] [:error] [pid 22194:tid 22216] [client 20.104.124.39:48071] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaIkbH6mbajs3bzQGysZ6wAAAVQ"]
[Sat Feb 28 07:10:38.104743 2026] [:error] [pid 22194:tid 22203] [client 20.104.124.39:48234] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaIkbn6mbajs3bzQGysZ9AAAAUc"]
[Sat Feb 28 07:10:39.227244 2026] [:error] [pid 39185:tid 39247] [client 20.104.124.39:48242] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aaIkbxVE-FfM89u7BQZbkQAAAIE"]
[Sat Feb 28 07:10:39.887719 2026] [:error] [pid 39292:tid 39317] [client 20.104.124.39:30302] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aaIkb6IAO5fN7BxyqcGO_QAAANc"]
[Sat Feb 28 07:10:40.682942 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:30303] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aaIkcKIAO5fN7BxyqcGPAwAAAMg"]
[Sat Feb 28 07:10:41.215606 2026] [:error] [pid 39292:tid 39296] [client 20.104.124.39:30213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aaIkcaIAO5fN7BxyqcGPBwAAAMI"]
[Sat Feb 28 07:10:41.863406 2026] [:error] [pid 39185:tid 39266] [client 20.104.124.39:30309] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaIkcRVE-FfM89u7BQZbnAAAAJQ"]
[Sat Feb 28 07:10:42.605537 2026] [:error] [pid 11791:tid 11804] [client 20.104.124.39:48163] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaIkcmuX5e1Q32gqxH289wAAAQs"]
[Sat Feb 28 07:10:43.168778 2026] [:error] [pid 22194:tid 22200] [client 20.104.124.39:30314] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaIkc36mbajs3bzQGysaBQAAAUQ"]
[Sat Feb 28 07:10:44.179071 2026] [:error] [pid 39185:tid 39262] [client 20.104.124.39:30316] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaIkdBVE-FfM89u7BQZbnwAAAJA"]
[Sat Feb 28 07:10:45.071996 2026] [:error] [pid 39292:tid 39299] [client 20.104.124.39:30249] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aaIkdaIAO5fN7BxyqcGPGAAAAMU"]
[Sat Feb 28 07:10:46.112521 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:48231] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aaIkdqIAO5fN7BxyqcGPHgAAAM8"]
[Sat Feb 28 07:10:46.750341 2026] [:error] [pid 22194:tid 22213] [client 20.104.124.39:48162] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aaIkdn6mbajs3bzQGysaCwAAAVE"]
[Sat Feb 28 07:10:47.248835 2026] [:error] [pid 39185:tid 39261] [client 20.104.124.39:30320] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "aaIkdxVE-FfM89u7BQZbrgAAAI8"]
[Sat Feb 28 07:10:47.895444 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:48239] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aaIkdxVE-FfM89u7BQZbsgAAAIw"]
[Sat Feb 28 07:10:49.027275 2026] [:error] [pid 22194:tid 22219] [client 20.104.124.39:30246] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aaIkeX6mbajs3bzQGysaFQAAAVc"]
[Sat Feb 28 07:10:49.818550 2026] [:error] [pid 39292:tid 39307] [client 20.104.124.39:30311] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aaIkeaIAO5fN7BxyqcGPMwAAAM0"]
[Sat Feb 28 07:10:50.497535 2026] [:error] [pid 39184:tid 39242] [client 20.104.124.39:48144] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gmo.php"] [unique_id "aaIkeltZF9Zd_U7easBGRgAAAFc"]
[Sat Feb 28 07:10:51.018344 2026] [:error] [pid 39292:tid 39317] [client 20.104.124.39:48166] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaIke6IAO5fN7BxyqcGPOAAAANc"]
[Sat Feb 28 07:10:51.469853 2026] [:error] [pid 22194:tid 22217] [client 20.104.124.39:48187] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aaIke36mbajs3bzQGysaHwAAAVU"]
[Sat Feb 28 07:10:51.977269 2026] [:error] [pid 22194:tid 22203] [client 20.104.124.39:48078] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aaIke36mbajs3bzQGysaIQAAAUc"]
[Sat Feb 28 07:10:52.843768 2026] [:error] [pid 39292:tid 39316] [client 20.104.124.39:48175] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aaIkfKIAO5fN7BxyqcGPQAAAANY"]
[Sat Feb 28 07:10:54.068886 2026] [:error] [pid 22194:tid 22204] [client 20.104.124.39:30244] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaIkfn6mbajs3bzQGysaLAAAAUg"]
[Sat Feb 28 07:10:56.910116 2026] [:error] [pid 22194:tid 22197] [client 20.104.124.39:48128] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaIkgH6mbajs3bzQGysaNwAAAUE"]
[Sat Feb 28 07:10:58.494972 2026] [:error] [pid 11791:tid 11810] [client 20.104.124.39:48073] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaIkgmuX5e1Q32gqxH29FQAAARE"]
[Sat Feb 28 07:10:59.549000 2026] [:error] [pid 39185:tid 39268] [client 20.104.124.39:48157] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaIkgxVE-FfM89u7BQZbugAAAJY"]
[Sat Feb 28 07:11:00.547210 2026] [:error] [pid 39185:tid 39270] [client 20.104.124.39:30327] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aaIkhBVE-FfM89u7BQZbvQAAAJg"]
[Sat Feb 28 07:11:01.312700 2026] [:error] [pid 39185:tid 39249] [client 20.104.124.39:48134] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aaIkhRVE-FfM89u7BQZbwQAAAIM"]
[Sat Feb 28 07:11:02.082935 2026] [:error] [pid 11791:tid 11795] [client 20.104.124.39:30334] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aaIkhmuX5e1Q32gqxH29GQAAAQI"]
[Sat Feb 28 07:11:02.972445 2026] [:error] [pid 11791:tid 11814] [client 20.104.124.39:48219] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager/dialog.php"] [unique_id "aaIkhmuX5e1Q32gqxH29HgAAARU"]
[Sat Feb 28 07:11:03.627006 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:48173] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aaIkh6IAO5fN7BxyqcGPYQAAAMw"]
[Sat Feb 28 07:11:04.405560 2026] [:error] [pid 39292:tid 39305] [client 20.104.124.39:48237] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aaIkiKIAO5fN7BxyqcGPaQAAAMs"]
[Sat Feb 28 07:11:05.212590 2026] [:error] [pid 39292:tid 39313] [client 20.104.124.39:30257] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aaIkiaIAO5fN7BxyqcGPbQAAANM"]
[Sat Feb 28 07:11:06.037114 2026] [:error] [pid 39292:tid 39303] [client 20.104.124.39:48182] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aaIkiqIAO5fN7BxyqcGPdAAAAMk"]
[Sat Feb 28 07:11:07.204132 2026] [:error] [pid 39292:tid 39308] [client 20.104.124.39:48245] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaIki6IAO5fN7BxyqcGPgwAAAM4"]
[Sat Feb 28 07:11:07.857020 2026] [:error] [pid 11791:tid 11812] [client 20.104.124.39:48136] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aaIki2uX5e1Q32gqxH29JwAAARM"]
[Sat Feb 28 07:11:08.340894 2026] [:error] [pid 22194:tid 22197] [client 20.104.124.39:48250] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aaIkjH6mbajs3bzQGysaSwAAAUE"]
[Sat Feb 28 07:11:08.911144 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:30224] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aaIkjH6mbajs3bzQGysaTgAAAUI"]
[Sat Feb 28 07:11:09.659041 2026] [:error] [pid 39183:tid 39192] [client 20.104.124.39:48222] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "aaIkjRCf4HvhVePw3LZ3TAAAAAA"]
[Sat Feb 28 07:11:10.750491 2026] [:error] [pid 22194:tid 22207] [client 20.104.124.39:48165] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaIkjn6mbajs3bzQGysaVAAAAUs"]
[Sat Feb 28 07:11:11.723738 2026] [:error] [pid 22194:tid 22204] [client 20.104.124.39:48252] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaIkj36mbajs3bzQGysaWAAAAUg"]
[Sat Feb 28 07:11:12.481985 2026] [:error] [pid 39292:tid 39316] [client 20.104.124.39:48174] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaIkkKIAO5fN7BxyqcGPtgAAANY"]
[Sat Feb 28 07:11:13.455872 2026] [:error] [pid 22194:tid 22210] [client 20.104.124.39:48247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaIkkX6mbajs3bzQGysaYAAAAU4"]
[Sat Feb 28 07:11:14.615725 2026] [:error] [pid 39292:tid 39313] [client 20.104.124.39:48098] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaIkkqIAO5fN7BxyqcGP2AAAANM"]
[Sat Feb 28 07:11:16.072328 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:48151] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aaIklKIAO5fN7BxyqcGP6wAAANA"]
[Sat Feb 28 07:11:16.839569 2026] [:error] [pid 39184:tid 39238] [client 20.104.124.39:48140] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aaIklFtZF9Zd_U7easBGXgAAAFM"]
[Sat Feb 28 07:11:17.910011 2026] [:error] [pid 39185:tid 39262] [client 20.104.124.39:48141] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww1.php"] [unique_id "aaIklRVE-FfM89u7BQZb5wAAAJA"]
[Sat Feb 28 07:11:18.720475 2026] [:error] [pid 11791:tid 11803] [client 20.104.124.39:48171] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aaIklmuX5e1Q32gqxH29NwAAAQo"]
[Sat Feb 28 07:11:19.494853 2026] [:error] [pid 39292:tid 39304] [client 20.104.124.39:48254] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aaIkl6IAO5fN7BxyqcGQCgAAAMo"]
[Sat Feb 28 07:11:20.146906 2026] [:error] [pid 39184:tid 39232] [client 20.104.124.39:48161] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aaIkmFtZF9Zd_U7easBGYwAAAE0"]
[Sat Feb 28 07:11:21.116674 2026] [:error] [pid 22194:tid 22206] [client 20.104.124.39:48208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about/function.php"] [unique_id "aaIkmX6mbajs3bzQGysamQAAAUo"]
[Sat Feb 28 07:11:21.713480 2026] [:error] [pid 39292:tid 39312] [client 20.104.124.39:30266] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aaIkmaIAO5fN7BxyqcGQEwAAANI"]
[Sat Feb 28 07:11:22.552206 2026] [:error] [pid 11791:tid 11810] [client 20.104.124.39:30243] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aaIkmmuX5e1Q32gqxH29OwAAARE"]
[Sat Feb 28 07:11:23.124256 2026] [:error] [pid 22194:tid 22212] [client 20.104.124.39:48172] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aaIkm36mbajs3bzQGysapwAAAVA"]
[Sat Feb 28 07:11:23.583439 2026] [:error] [pid 39292:tid 39311] [client 20.104.124.39:48156] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "aaIkm6IAO5fN7BxyqcGQGgAAANE"]
[Sat Feb 28 07:11:24.155940 2026] [:error] [pid 22194:tid 22199] [client 20.104.124.39:48137] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaIknH6mbajs3bzQGysaswAAAUM"]
[Sat Feb 28 07:11:25.312999 2026] [:error] [pid 39183:tid 39194] [client 20.104.124.39:48185] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaIknRCf4HvhVePw3LZ3VQAAAAI"]
[Sat Feb 28 07:11:25.911120 2026] [:error] [pid 39292:tid 39311] [client 20.104.124.39:48150] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaIknaIAO5fN7BxyqcGQKQAAANE"]
[Sat Feb 28 07:11:26.630336 2026] [:error] [pid 39185:tid 39246] [client 20.104.124.39:48065] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaIknhVE-FfM89u7BQZb7gAAAIA"]
[Sat Feb 28 07:11:27.898584 2026] [:error] [pid 39185:tid 39253] [client 20.104.124.39:48131] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aaIknxVE-FfM89u7BQZb9wAAAIc"]
[Sat Feb 28 07:11:29.440467 2026] [:error] [pid 11791:tid 11802] [client 20.104.124.39:48075] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aaIkoWuX5e1Q32gqxH29RgAAAQk"]
[Sat Feb 28 07:11:30.295999 2026] [:error] [pid 39292:tid 39311] [client 20.104.124.39:48181] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aaIkoqIAO5fN7BxyqcGQNwAAANE"]
[Sat Feb 28 07:11:31.359922 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:48233] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/colors/blue/index.php"] [unique_id "aaIkoxVE-FfM89u7BQZcBAAAAIw"]
[Sat Feb 28 07:11:32.279658 2026] [:error] [pid 39185:tid 39253] [client 20.104.124.39:48132] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaIkpBVE-FfM89u7BQZcCAAAAIc"]
[Sat Feb 28 07:11:33.677336 2026] [:error] [pid 39183:tid 39199] [client 20.104.124.39:48076] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaIkpRCf4HvhVePw3LZ3YQAAAAc"]
[Sat Feb 28 07:11:46.101680 2026] [autoindex:error] [pid 39292:tid 39299] [client 20.104.124.39:48172] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 07:11:47.760479 2026] [:error] [pid 39292:tid 39315] [client 20.104.124.39:48172] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaIks6IAO5fN7BxyqcGQUQAAANU"]
[Sat Feb 28 07:11:50.950713 2026] [autoindex:error] [pid 39185:tid 39251] [client 20.104.124.39:48255] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 07:11:58.889854 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:48255] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaIkvhVE-FfM89u7BQZcNwAAAIw"]
[Sat Feb 28 07:12:00.626450 2026] [:error] [pid 39183:tid 39204] [client 20.104.124.39:48152] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaIkwBCf4HvhVePw3LZ3agAAAAw"]
[Sat Feb 28 07:12:04.408212 2026] [:error] [pid 39184:tid 39242] [client 20.104.124.39:48205] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aaIkxFtZF9Zd_U7easBGogAAAFc"]
[Sat Feb 28 07:12:05.219623 2026] [:error] [pid 39183:tid 39192] [client 20.104.124.39:48238] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aaIkxRCf4HvhVePw3LZ3bAAAAAA"]
[Sat Feb 28 07:12:06.036295 2026] [:error] [pid 11791:tid 11796] [client 20.104.124.39:48123] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aaIkxmuX5e1Q32gqxH29iAAAAQM"]
[Sat Feb 28 07:12:07.303807 2026] [:error] [pid 39183:tid 39195] [client 20.104.124.39:48158] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aaIkxxCf4HvhVePw3LZ3bQAAAAM"]
[Sat Feb 28 07:12:07.990759 2026] [:error] [pid 39184:tid 39239] [client 20.104.124.39:48168] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aaIkx1tZF9Zd_U7easBGpwAAAFQ"]
[Sat Feb 28 07:12:08.873989 2026] [:error] [pid 39292:tid 39315] [client 20.104.124.39:48153] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aaIkyKIAO5fN7BxyqcGQeQAAANU"]
[Sat Feb 28 07:12:09.584219 2026] [:error] [pid 39292:tid 39300] [client 20.104.124.39:48188] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aaIkyaIAO5fN7BxyqcGQfAAAAMY"]
[Sat Feb 28 07:12:10.608372 2026] [:error] [pid 39292:tid 39301] [client 20.104.124.39:48077] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aaIkyqIAO5fN7BxyqcGQgQAAAMc"]
[Sat Feb 28 07:12:11.476057 2026] [:error] [pid 39292:tid 39298] [client 20.104.124.39:48225] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aaIky6IAO5fN7BxyqcGQhgAAAMQ"]
[Sat Feb 28 07:12:12.212827 2026] [:error] [pid 39183:tid 39207] [client 20.104.124.39:30222] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aaIkzBCf4HvhVePw3LZ3dgAAAA8"]
[Sat Feb 28 07:12:12.943345 2026] [:error] [pid 39184:tid 39231] [client 20.104.124.39:30268] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aaIkzFtZF9Zd_U7easBGrgAAAEw"]
[Sat Feb 28 07:12:13.429167 2026] [:error] [pid 39292:tid 39313] [client 20.104.124.39:30270] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aaIkzaIAO5fN7BxyqcGQigAAANM"]
[Sat Feb 28 07:12:13.958317 2026] [:error] [pid 39292:tid 39294] [client 20.104.124.39:48146] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aaIkzaIAO5fN7BxyqcGQjwAAAMA"]
[Sat Feb 28 07:12:14.670433 2026] [:error] [pid 39184:tid 39236] [client 20.104.124.39:48133] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aaIkzltZF9Zd_U7easBGsgAAAFE"]
[Sat Feb 28 07:12:15.245066 2026] [:error] [pid 39184:tid 39239] [client 20.104.124.39:48118] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aaIkz1tZF9Zd_U7easBGtgAAAFQ"]
[Sat Feb 28 07:12:15.854249 2026] [:error] [pid 11791:tid 11794] [client 20.104.124.39:48179] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aaIkz2uX5e1Q32gqxH29jgAAAQE"]
[Sat Feb 28 07:12:16.494892 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:48186] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aaIk0H6mbajs3bzQGysb2AAAAUI"]
[Sat Feb 28 07:12:17.599807 2026] [:error] [pid 22194:tid 22206] [client 20.104.124.39:30295] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aaIk0X6mbajs3bzQGysb4gAAAUo"]
[Sat Feb 28 07:12:18.386364 2026] [:error] [pid 22194:tid 22207] [client 20.104.124.39:48176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aaIk0n6mbajs3bzQGysb5gAAAUs"]
[Sat Feb 28 07:12:18.979953 2026] [:error] [pid 22194:tid 22213] [client 20.104.124.39:48223] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "aaIk0n6mbajs3bzQGysb7AAAAVE"]
[Sat Feb 28 07:12:19.659993 2026] [:error] [pid 39185:tid 39254] [client 20.104.124.39:30322] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aaIk0xVE-FfM89u7BQZcQgAAAIg"]
[Sat Feb 28 07:12:20.229443 2026] [:error] [pid 22194:tid 22205] [client 20.104.124.39:48248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aaIk1H6mbajs3bzQGysb9AAAAUk"]
[Sat Feb 28 07:12:20.917857 2026] [:error] [pid 22194:tid 22211] [client 20.104.124.39:48135] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aaIk1H6mbajs3bzQGysb9gAAAU8"]
[Sat Feb 28 07:12:22.415706 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:48220] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aaIk1qIAO5fN7BxyqcGQoQAAANA"]
[Sat Feb 28 07:12:23.404368 2026] [:error] [pid 39184:tid 39236] [client 20.104.124.39:30300] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aaIk11tZF9Zd_U7easBGwQAAAFE"]
[Sat Feb 28 07:12:24.014454 2026] [:error] [pid 39292:tid 39299] [client 20.104.124.39:30258] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aaIk2KIAO5fN7BxyqcGQrAAAAMU"]
[Sat Feb 28 07:12:24.504697 2026] [:error] [pid 11791:tid 11796] [client 20.104.124.39:30239] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aaIk2GuX5e1Q32gqxH29lgAAAQM"]
[Sat Feb 28 07:12:25.413659 2026] [:error] [pid 39184:tid 39242] [client 20.104.124.39:48213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "aaIk2VtZF9Zd_U7easBGwwAAAFc"]
[Sat Feb 28 07:12:25.913234 2026] [:error] [pid 39185:tid 39267] [client 20.104.124.39:48109] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aaIk2RVE-FfM89u7BQZcRQAAAJU"]
[Sat Feb 28 07:12:26.771182 2026] [:error] [pid 39184:tid 39232] [client 20.104.124.39:48221] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aaIk2ltZF9Zd_U7easBGxAAAAE0"]
[Sat Feb 28 07:12:27.917069 2026] [:error] [pid 39292:tid 39305] [client 20.104.124.39:48227] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aaIk26IAO5fN7BxyqcGQvQAAAMs"]
[Sat Feb 28 07:12:28.896518 2026] [:error] [pid 39292:tid 39313] [client 20.104.124.39:48064] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aaIk3KIAO5fN7BxyqcGQwQAAANM"]
[Sat Feb 28 07:12:29.530779 2026] [:error] [pid 39184:tid 39219] [client 20.104.124.39:48230] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aaIk3VtZF9Zd_U7easBGzwAAAEA"]
[Sat Feb 28 07:12:30.272259 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:30290] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aaIk3qIAO5fN7BxyqcGQyQAAAM8"]
[Sat Feb 28 07:12:31.208316 2026] [:error] [pid 22194:tid 22205] [client 20.104.124.39:48155] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aaIk336mbajs3bzQGyscAQAAAUk"]
[Sat Feb 28 07:12:31.996591 2026] [:error] [pid 39184:tid 39220] [client 20.104.124.39:48237] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aaIk31tZF9Zd_U7easBG0gAAAEE"]
[Sat Feb 28 07:12:33.109573 2026] [:error] [pid 11791:tid 11815] [client 20.104.124.39:48110] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaIk4WuX5e1Q32gqxH29nQAAARY"]
[Sat Feb 28 07:12:34.193899 2026] [:error] [pid 39292:tid 39312] [client 20.104.124.39:48111] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaIk4qIAO5fN7BxyqcGQ2gAAANI"]
[Sat Feb 28 07:12:34.950378 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:48018] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaIk4qIAO5fN7BxyqcGQ4QAAANQ"]
[Sat Feb 28 07:12:35.644070 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:30312] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaIk46IAO5fN7BxyqcGQ5gAAAMg"]
[Sat Feb 28 07:12:36.252337 2026] [:error] [pid 39292:tid 39301] [client 20.104.124.39:48113] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aaIk5KIAO5fN7BxyqcGQ6gAAAMc"]
[Sat Feb 28 07:12:37.083818 2026] [:error] [pid 39183:tid 39204] [client 20.104.124.39:48178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aaIk5RCf4HvhVePw3LZ3igAAAAw"]
[Sat Feb 28 07:12:38.233666 2026] [:error] [pid 22194:tid 22204] [client 20.104.124.39:30275] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aaIk5n6mbajs3bzQGyscCQAAAUg"]
[Sat Feb 28 07:12:39.198001 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:48081] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "aaIk56IAO5fN7BxyqcGQ7QAAANQ"]
[Sat Feb 28 07:12:39.847006 2026] [:error] [pid 11791:tid 11796] [client 20.104.124.39:48067] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aaIk52uX5e1Q32gqxH29pQAAAQM"]
[Sat Feb 28 07:12:41.054765 2026] [:error] [pid 11791:tid 11804] [client 20.104.124.39:48191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aaIk6WuX5e1Q32gqxH29rAAAAQs"]
[Sat Feb 28 07:12:41.964867 2026] [:error] [pid 39184:tid 39241] [client 20.104.124.39:48189] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aaIk6VtZF9Zd_U7easBG4gAAAFY"]
[Sat Feb 28 07:12:42.741697 2026] [:error] [pid 22194:tid 22217] [client 20.104.124.39:48097] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass4.php"] [unique_id "aaIk6n6mbajs3bzQGyscDAAAAVU"]
[Sat Feb 28 07:12:43.395101 2026] [:error] [pid 39185:tid 39246] [client 20.104.124.39:48139] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aaIk6xVE-FfM89u7BQZcUwAAAIA"]
[Sat Feb 28 07:12:44.095861 2026] [:error] [pid 39184:tid 39233] [client 20.104.124.39:30293] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aaIk7FtZF9Zd_U7easBG5QAAAE4"]
[Sat Feb 28 07:12:44.976156 2026] [:error] [pid 39184:tid 39239] [client 20.104.124.39:30228] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aaIk7FtZF9Zd_U7easBG6gAAAFQ"]
[Sat Feb 28 07:12:45.556056 2026] [:error] [pid 11791:tid 11800] [client 20.104.124.39:30286] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2clas.php"] [unique_id "aaIk7WuX5e1Q32gqxH29ugAAAQc"]
[Sat Feb 28 07:12:46.608455 2026] [:error] [pid 22194:tid 22216] [client 20.104.124.39:48053] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aaIk7n6mbajs3bzQGyscFwAAAVQ"]
[Sat Feb 28 07:12:47.478118 2026] [:error] [pid 22194:tid 22197] [client 20.104.124.39:48054] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aaIk736mbajs3bzQGyscJQAAAUE"]
[Sat Feb 28 07:12:48.507668 2026] [:error] [pid 22194:tid 22220] [client 20.104.124.39:48096] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aaIk8H6mbajs3bzQGyscLwAAAVg"]
[Sat Feb 28 07:12:51.007195 2026] [:error] [pid 39184:tid 39241] [client 20.104.124.39:48080] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aaIk81tZF9Zd_U7easBG8QAAAFY"]
[Sat Feb 28 07:12:51.986293 2026] [:error] [pid 39183:tid 39203] [client 20.104.124.39:48134] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaIk8xCf4HvhVePw3LZ3nQAAAAs"]
[Sat Feb 28 07:12:52.676899 2026] [:error] [pid 22194:tid 22197] [client 20.104.124.39:30229] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaIk9H6mbajs3bzQGyscPwAAAUE"]
[Sat Feb 28 07:12:54.142103 2026] [:error] [pid 22194:tid 22213] [client 20.104.124.39:30252] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaIk9n6mbajs3bzQGyscRwAAAVE"]
[Sat Feb 28 07:12:55.109339 2026] [:error] [pid 11791:tid 11810] [client 20.104.124.39:30210] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaIk92uX5e1Q32gqxH296AAAARE"]
[Sat Feb 28 07:12:56.214792 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:48207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aaIk-KIAO5fN7BxyqcGQ-wAAANA"]
[Sat Feb 28 07:12:57.032265 2026] [:error] [pid 39185:tid 39247] [client 20.104.124.39:30269] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aaIk-RVE-FfM89u7BQZcXgAAAIE"]
[Sat Feb 28 07:12:58.025532 2026] [:error] [pid 22194:tid 22215] [client 20.104.124.39:30335] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aaIk-n6mbajs3bzQGyscUgAAAVM"]
[Sat Feb 28 07:12:58.783804 2026] [:error] [pid 11791:tid 11808] [client 20.104.124.39:48196] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aaIk-muX5e1Q32gqxH299gAAAQ8"]
[Sat Feb 28 07:12:59.479861 2026] [:error] [pid 22194:tid 22196] [client 20.104.124.39:48138] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaIk-36mbajs3bzQGyscXAAAAUA"]
[Sat Feb 28 07:13:00.153194 2026] [:error] [pid 22194:tid 22215] [client 20.104.124.39:48148] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaIk_H6mbajs3bzQGyscYQAAAVM"]
[Sat Feb 28 07:13:01.291506 2026] [:error] [pid 39184:tid 39226] [client 20.104.124.39:30323] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaIk_VtZF9Zd_U7easBG_wAAAEc"]
[Sat Feb 28 07:13:01.938220 2026] [:error] [pid 39184:tid 39242] [client 20.104.124.39:48108] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaIk_VtZF9Zd_U7easBHAgAAAFc"]
[Sat Feb 28 07:13:02.564833 2026] [:error] [pid 39184:tid 39221] [client 20.104.124.39:30280] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aaIk_ltZF9Zd_U7easBHBQAAAEI"]
[Sat Feb 28 07:13:15.569943 2026] [:error] [pid 39185:tid 39250] [client 20.104.124.39:48244] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aaIlCxVE-FfM89u7BQZcfAAAAIQ"]
[Sat Feb 28 07:13:16.403216 2026] [:error] [pid 39184:tid 39227] [client 20.104.124.39:30306] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aaIlDFtZF9Zd_U7easBHIAAAAEg"]
[Sat Feb 28 07:13:17.179836 2026] [:error] [pid 39185:tid 39263] [client 20.104.124.39:30292] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aaIlDRVE-FfM89u7BQZcfQAAAJE"]
[Sat Feb 28 07:13:18.088737 2026] [:error] [pid 11791:tid 11805] [client 20.104.124.39:48194] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "aaIlDmuX5e1Q32gqxH2-LQAAAQw"]
[Sat Feb 28 07:13:18.865292 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:30317] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aaIlDqIAO5fN7BxyqcGRHAAAANA"]
[Sat Feb 28 07:13:19.736869 2026] [:error] [pid 39292:tid 39305] [client 20.104.124.39:30236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aaIlD6IAO5fN7BxyqcGRIAAAAMs"]
[Sat Feb 28 07:13:20.769020 2026] [:error] [pid 39292:tid 39313] [client 20.104.124.39:30307] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aaIlEKIAO5fN7BxyqcGRKgAAANM"]
[Sat Feb 28 07:13:21.286604 2026] [:error] [pid 39185:tid 39259] [client 20.104.124.39:48068] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aaIlERVE-FfM89u7BQZchwAAAI0"]
[Sat Feb 28 07:13:21.863654 2026] [:error] [pid 22194:tid 22216] [client 20.104.124.39:30299] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aaIlEX6mbajs3bzQGysceQAAAVQ"]
[Sat Feb 28 07:13:22.688918 2026] [:error] [pid 39292:tid 39299] [client 20.104.124.39:30220] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aaIlEqIAO5fN7BxyqcGRNAAAAMU"]
[Sat Feb 28 07:13:23.201767 2026] [:error] [pid 39185:tid 39268] [client 20.104.124.39:48241] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aaIlExVE-FfM89u7BQZciwAAAJY"]
[Sat Feb 28 07:13:23.733568 2026] [:error] [pid 39292:tid 39315] [client 20.104.124.39:48202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "aaIlE6IAO5fN7BxyqcGRQAAAANU"]
[Sat Feb 28 07:13:24.346911 2026] [:error] [pid 22194:tid 22204] [client 20.104.124.39:48184] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aaIlFH6mbajs3bzQGyscfgAAAUg"]
[Sat Feb 28 07:13:25.255259 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:48079] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aaIlFaIAO5fN7BxyqcGRSQAAAMg"]
[Sat Feb 28 07:13:26.403468 2026] [:error] [pid 39185:tid 39251] [client 20.104.124.39:30291] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aaIlFhVE-FfM89u7BQZckQAAAIU"]
[Sat Feb 28 07:13:27.389309 2026] [:error] [pid 11791:tid 11803] [client 20.104.124.39:48013] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ac.php"] [unique_id "aaIlF2uX5e1Q32gqxH2-NAAAAQo"]
[Sat Feb 28 07:13:28.591553 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:30248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aaIlGKIAO5fN7BxyqcGRVgAAAMg"]
[Sat Feb 28 07:13:29.213614 2026] [:error] [pid 39292:tid 39316] [client 20.104.124.39:30315] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aaIlGaIAO5fN7BxyqcGRXAAAANY"]
[Sat Feb 28 07:13:30.102247 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:30226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aaIlGqIAO5fN7BxyqcGRYgAAAMw"]
[Sat Feb 28 07:13:31.053055 2026] [:error] [pid 39183:tid 39193] [client 20.104.124.39:30254] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "aaIlGxCf4HvhVePw3LZ3xAAAAAE"]
[Sat Feb 28 07:13:31.780670 2026] [:error] [pid 39292:tid 39297] [client 20.104.124.39:30285] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aaIlG6IAO5fN7BxyqcGRbAAAAMM"]
[Sat Feb 28 07:13:32.695739 2026] [:error] [pid 39183:tid 39208] [client 20.104.124.39:48037] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aaIlHBCf4HvhVePw3LZ3xwAAABA"]
[Sat Feb 28 07:13:33.583715 2026] [:error] [pid 39185:tid 39252] [client 20.104.124.39:48147] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aaIlHRVE-FfM89u7BQZcnQAAAIY"]
[Sat Feb 28 07:13:34.281263 2026] [:error] [pid 39183:tid 39212] [client 20.104.124.39:48190] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pop.php"] [unique_id "aaIlHhCf4HvhVePw3LZ3yAAAABQ"]
[Sat Feb 28 07:13:34.815732 2026] [:error] [pid 39292:tid 39295] [client 20.104.124.39:48192] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aaIlHqIAO5fN7BxyqcGRhQAAAME"]
[Sat Feb 28 07:13:35.787095 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:30238] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aaIlH6IAO5fN7BxyqcGRiQAAAMw"]
[Sat Feb 28 07:13:36.380333 2026] [:error] [pid 39184:tid 39222] [client 20.104.124.39:30215] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aaIlIFtZF9Zd_U7easBHOAAAAEM"]
[Sat Feb 28 07:13:37.072026 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:30328] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "aaIlIaIAO5fN7BxyqcGRkQAAAMg"]
[Sat Feb 28 07:13:37.761537 2026] [:error] [pid 11791:tid 11804] [client 20.104.124.39:30304] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aaIlIWuX5e1Q32gqxH2-OAAAAQs"]
[Sat Feb 28 07:13:38.408226 2026] [:error] [pid 11791:tid 11809] [client 20.104.124.39:48009] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aaIlImuX5e1Q32gqxH2-QQAAARA"]
[Sat Feb 28 07:13:39.068641 2026] [:error] [pid 39292:tid 39295] [client 20.104.124.39:48170] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aaIlI6IAO5fN7BxyqcGRlgAAAME"]
[Sat Feb 28 07:13:39.845001 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:30235] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xaz.php"] [unique_id "aaIlI6IAO5fN7BxyqcGRnAAAANQ"]
[Sat Feb 28 07:13:40.356468 2026] [:error] [pid 11791:tid 11795] [client 20.104.124.39:48105] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up4.php"] [unique_id "aaIlJGuX5e1Q32gqxH2-SAAAAQI"]
[Sat Feb 28 07:13:41.274164 2026] [:error] [pid 39183:tid 39194] [client 20.104.124.39:30298] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up4.php"] [unique_id "aaIlJRCf4HvhVePw3LZ30AAAAAI"]
[Sat Feb 28 07:13:42.044673 2026] [:error] [pid 39183:tid 39204] [client 20.104.124.39:30329] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up4.php"] [unique_id "aaIlJhCf4HvhVePw3LZ30QAAAAw"]
[Sat Feb 28 07:13:42.966239 2026] [:error] [pid 39292:tid 39315] [client 20.104.124.39:48082] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up4.php"] [unique_id "aaIlJqIAO5fN7BxyqcGRogAAANU"]
[Sat Feb 28 07:13:43.666170 2026] [:error] [pid 22194:tid 22209] [client 20.104.124.39:48125] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aaIlJ36mbajs3bzQGysciQAAAU0"]
[Sat Feb 28 07:13:44.383615 2026] [:error] [pid 39292:tid 39303] [client 20.104.124.39:48106] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aaIlKKIAO5fN7BxyqcGRpQAAAMk"]
[Sat Feb 28 07:13:45.361643 2026] [:error] [pid 22194:tid 22202] [client 20.104.124.39:30230] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aaIlKX6mbajs3bzQGysckQAAAUY"]
[Sat Feb 28 07:13:46.154626 2026] [:error] [pid 39292:tid 39304] [client 20.104.124.39:48099] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "aaIlKqIAO5fN7BxyqcGRqQAAAMo"]
[Sat Feb 28 07:13:47.153453 2026] [:error] [pid 39185:tid 39262] [client 20.104.124.39:30232] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaIlKxVE-FfM89u7BQZcsgAAAJA"]
[Sat Feb 28 07:13:48.179186 2026] [:error] [pid 11791:tid 11808] [client 20.104.124.39:48059] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaIlLGuX5e1Q32gqxH2-UgAAAQ8"]
[Sat Feb 28 07:13:48.811465 2026] [:error] [pid 11791:tid 11813] [client 20.104.124.39:48193] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaIlLGuX5e1Q32gqxH2-VAAAARQ"]
[Sat Feb 28 07:13:49.737797 2026] [:error] [pid 39292:tid 39318] [client 20.104.124.39:47939] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaIlLaIAO5fN7BxyqcGRsQAAANg"]
[Sat Feb 28 07:13:50.618596 2026] [:error] [pid 11791:tid 11793] [client 20.104.124.39:48094] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aaIlLmuX5e1Q32gqxH2-VwAAAQA"]
[Sat Feb 28 07:13:51.484376 2026] [:error] [pid 39184:tid 39238] [client 20.104.124.39:30301] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aaIlL1tZF9Zd_U7easBHWAAAAFM"]
[Sat Feb 28 07:13:52.094527 2026] [:error] [pid 39185:tid 39270] [client 20.104.124.39:30241] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aaIlMBVE-FfM89u7BQZctwAAAJg"]
[Sat Feb 28 07:13:53.144731 2026] [:error] [pid 11791:tid 11807] [client 20.104.124.39:30259] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aaIlMWuX5e1Q32gqxH2-WgAAAQ4"]
[Sat Feb 28 07:13:53.693601 2026] [:error] [pid 11791:tid 11801] [client 20.104.124.39:30208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aaIlMWuX5e1Q32gqxH2-WwAAAQg"]
[Sat Feb 28 07:13:54.815392 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:48005] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aaIlMqIAO5fN7BxyqcGRvgAAAMg"]
[Sat Feb 28 07:13:56.527926 2026] [:error] [pid 39292:tid 39299] [client 20.104.124.39:48235] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aaIlNKIAO5fN7BxyqcGRwgAAAMU"]
[Sat Feb 28 07:13:58.535247 2026] [:error] [pid 39292:tid 39313] [client 20.104.124.39:30247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aaIlNqIAO5fN7BxyqcGRzgAAANM"]
[Sat Feb 28 07:13:59.546383 2026] [:error] [pid 39292:tid 39315] [client 20.104.124.39:48236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aaIlN6IAO5fN7BxyqcGR0wAAANU"]
[Sat Feb 28 07:14:00.547734 2026] [:error] [pid 11791:tid 11807] [client 20.104.124.39:30294] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aaIlOGuX5e1Q32gqxH2-bAAAAQ4"]
[Sat Feb 28 07:14:01.496827 2026] [:error] [pid 22194:tid 22212] [client 20.104.124.39:30313] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aaIlOX6mbajs3bzQGysctwAAAVA"]
[Sat Feb 28 07:14:01.997271 2026] [:error] [pid 22194:tid 22216] [client 20.104.124.39:48197] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aaIlOX6mbajs3bzQGyscvQAAAVQ"]
[Sat Feb 28 07:14:02.733982 2026] [:error] [pid 39184:tid 39224] [client 20.104.124.39:48200] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aaIlOltZF9Zd_U7easBHYQAAAEU"]
[Sat Feb 28 07:14:03.340757 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:30287] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aaIlO6IAO5fN7BxyqcGR2gAAANA"]
[Sat Feb 28 07:14:04.167205 2026] [:error] [pid 39292:tid 39317] [client 20.104.124.39:30282] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aaIlPKIAO5fN7BxyqcGR4AAAANc"]
[Sat Feb 28 07:14:05.205426 2026] [:error] [pid 11791:tid 11804] [client 20.104.124.39:30227] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aaIlPWuX5e1Q32gqxH2-dQAAAQs"]
[Sat Feb 28 07:14:06.020520 2026] [:error] [pid 11791:tid 11793] [client 20.104.124.39:48180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaIlPmuX5e1Q32gqxH2-eAAAAQA"]
[Sat Feb 28 07:14:06.595331 2026] [:error] [pid 11791:tid 11807] [client 20.104.124.39:30255] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaIlPmuX5e1Q32gqxH2-fgAAAQ4"]
[Sat Feb 28 07:14:07.429439 2026] [:error] [pid 22194:tid 22203] [client 20.104.124.39:30231] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaIlP36mbajs3bzQGyscwwAAAUc"]
[Sat Feb 28 07:14:07.921553 2026] [:error] [pid 11791:tid 11800] [client 20.104.124.39:48212] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaIlP2uX5e1Q32gqxH2-jQAAAQc"]
[Sat Feb 28 07:14:08.613869 2026] [:error] [pid 22194:tid 22197] [client 20.104.124.39:48004] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aaIlQH6mbajs3bzQGyscygAAAUE"]
[Sat Feb 28 07:14:09.349681 2026] [:error] [pid 22194:tid 22218] [client 20.104.124.39:48183] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aaIlQX6mbajs3bzQGysczwAAAVY"]
[Sat Feb 28 07:14:09.942265 2026] [:error] [pid 39292:tid 39296] [client 20.104.124.39:30225] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aaIlQaIAO5fN7BxyqcGR6wAAAMI"]
[Sat Feb 28 07:14:10.671298 2026] [:error] [pid 39292:tid 39305] [client 20.104.124.39:30273] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aaIlQqIAO5fN7BxyqcGR7wAAAMs"]
[Sat Feb 28 07:51:24.282953 2026] [autoindex:error] [pid 22194:tid 22214] [client 37.60.228.196:57140] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 08:03:25.203615 2026] [:error] [pid 39183:tid 39206] [client 104.248.163.215:59543] [client 104.248.163.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.163.215, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaIwzRCf4HvhVePw3LaE_gAAAA4"]
[Sat Feb 28 08:27:20.115458 2026] [:error] [pid 39184:tid 39221] [client 125.75.66.97:52418] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaI2aFtZF9Zd_U7easBhHwAAAEI"]
[Sat Feb 28 08:29:18.590950 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.25:53395] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaI23muX5e1Q32gqxH3vaAAAAQc"]
[Sat Feb 28 08:29:21.379112 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.28:57193] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "aaI24aIAO5fN7BxyqcH0mgAAAMc"]
[Sat Feb 28 08:29:25.735816 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.30:28815] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaI25aIAO5fN7BxyqcH09wAAANE"]
[Sat Feb 28 08:29:42.998960 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.26:47779] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaI29muX5e1Q32gqxH3woQAAARA"]
[Sat Feb 28 08:29:43.871679 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.23:28913] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaI296IAO5fN7BxyqcH2NgAAAMU"]
[Sat Feb 28 08:30:10.924561 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.22:48713] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aaI3En6mbajs3bzQGytkjgAAAUk"]
[Sat Feb 28 08:30:11.811715 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.25:39889] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aaI3E36mbajs3bzQGytkoAAAAUg"]
[Sat Feb 28 08:30:14.724398 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.26:21257] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/uploads/bn_1_1754420677.phtml"] [unique_id "aaI3FmuX5e1Q32gqxH3yCQAAAQk"]
[Sat Feb 28 08:30:19.594964 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.21:31915] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI3G6IAO5fN7BxyqcH4jgAAAMI"]
[Sat Feb 28 08:30:25.926187 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.29:40627] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI3IaIAO5fN7BxyqcH46QAAANE"]
[Sat Feb 28 08:30:41.684427 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.25:29643] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaI3MX6mbajs3bzQGytmigAAAU8"]
[Sat Feb 28 08:30:49.443146 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.26:30567] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaI3OX6mbajs3bzQGytnJAAAAVg"]
[Sat Feb 28 08:30:55.108464 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.29:30627] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/wp-conflg.php"] [unique_id "aaI3PxCf4HvhVePw3LaO_QAAABY"]
[Sat Feb 28 08:31:05.581897 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.30:58509] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI3SWuX5e1Q32gqxH30cgAAARI"]
[Sat Feb 28 08:31:09.066193 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.21:20347] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI3TaIAO5fN7BxyqcH7WgAAAMc"]
[Sat Feb 28 08:31:09.953719 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.29:56723] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI3TaIAO5fN7BxyqcH7bAAAANU"]
[Sat Feb 28 08:31:10.832512 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.28:25001] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI3TqIAO5fN7BxyqcH7ewAAAMY"]
[Sat Feb 28 08:31:11.716264 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.21:21283] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI3T2uX5e1Q32gqxH30sAAAAQY"]
[Sat Feb 28 08:31:13.605780 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.26:55621] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI3UaIAO5fN7BxyqcH7nQAAANg"]
[Sat Feb 28 08:31:15.953996 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.29:24657] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI3U2uX5e1Q32gqxH306AAAAQM"]
[Sat Feb 28 08:31:16.852521 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.20:50655] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inc.php"] [unique_id "aaI3VH6mbajs3bzQGyto9AAAAVE"]
[Sat Feb 28 08:31:20.236026 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.25:62089] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aaI3WGuX5e1Q32gqxH31FwAAAQo"]
[Sat Feb 28 08:31:21.564630 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.30:23191] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aaI3WWuX5e1Q32gqxH31JAAAAQQ"]
[Sat Feb 28 08:31:22.456945 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.26:57637] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/bypass.php"] [unique_id "aaI3WmuX5e1Q32gqxH31LAAAARY"]
[Sat Feb 28 08:31:27.673952 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.22:52897] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI3X6IAO5fN7BxyqcH8ywAAAMk"]
[Sat Feb 28 08:31:30.209184 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.28:48523] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI3YhVE-FfM89u7BQaE2wAAAJQ"]
[Sat Feb 28 08:31:33.262860 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.30:50679] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI3ZX6mbajs3bzQGytptgAAAVE"]
[Sat Feb 28 08:31:45.379605 2026] [:error] [pid 39183:tid 39204] [client 173.244.55.21:40507] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI3cRCf4HvhVePw3LaP9QAAAAw"]
[Sat Feb 28 08:31:49.226442 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.26:53635] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI3daIAO5fN7BxyqcH-MgAAAMk"]
[Sat Feb 28 08:31:54.669633 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.29:44527] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaI3eqIAO5fN7BxyqcH--QAAAMI"]
[Sat Feb 28 08:31:58.419821 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.26:51535] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI3fhVE-FfM89u7BQaF6gAAAI8"]
[Sat Feb 28 08:32:08.316574 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.25:49113] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI3iFtZF9Zd_U7easBoygAAAEQ"]
[Sat Feb 28 08:32:12.338036 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.21:36207] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI3jH6mbajs3bzQGytsAwAAAVE"]
[Sat Feb 28 08:32:16.314354 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.28:46855] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI3kBCf4HvhVePw3LaQaAAAABM"]
[Sat Feb 28 08:32:17.195563 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.25:20263] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI3kaIAO5fN7BxyqcEAHAAAAMw"]
[Sat Feb 28 08:32:18.076320 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.28:43155] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI3kn6mbajs3bzQGytsWQAAAVY"]
[Sat Feb 28 08:32:27.831728 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.30:60861] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI3m36mbajs3bzQGyttHgAAAU8"]
[Sat Feb 28 08:32:28.714646 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.31:28075] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaI3nBVE-FfM89u7BQaGfQAAAJA"]
[Sat Feb 28 08:32:29.601280 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.21:32763] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI3naIAO5fN7BxyqcEBWAAAAMc"]
[Sat Feb 28 08:32:30.475779 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.26:63465] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/chosen.php"] [unique_id "aaI3nhVE-FfM89u7BQaGiwAAAI8"]
[Sat Feb 28 08:32:31.355951 2026] [:error] [pid 39183:tid 39203] [client 173.244.55.26:23931] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/chosen.php"] [unique_id "aaI3nxCf4HvhVePw3LaQhwAAAAs"]
[Sat Feb 28 08:32:32.226624 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.21:53507] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/chosen.php"] [unique_id "aaI3oGuX5e1Q32gqxH330gAAARI"]
[Sat Feb 28 08:32:36.273088 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.28:60827] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap/bypass.php"] [unique_id "aaI3pFtZF9Zd_U7easBpdQAAAFI"]
[Sat Feb 28 08:32:46.594304 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.23:22851] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aaI3rqIAO5fN7BxyqcECewAAAMQ"]
[Sat Feb 28 08:32:47.481822 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.23:29321] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aaI3r36mbajs3bzQGytuUgAAAUo"]
[Sat Feb 28 08:33:00.983041 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.21:49489] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aaI3vH6mbajs3bzQGytvYgAAAUY"]
[Sat Feb 28 08:33:08.199716 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.22:58367] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/templates/beez3/index.php"] [unique_id "aaI3xKIAO5fN7BxyqcEEOgAAAMQ"]
[Sat Feb 28 08:33:12.467357 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.21:28923] [client 173.244.55.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI3yKIAO5fN7BxyqcEEygAAAM0"]
[Sat Feb 28 08:33:46.827682 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.21:28923] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aaI36qIAO5fN7BxyqcEHtwAAAMQ"]
[Sat Feb 28 08:33:57.255068 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.20:60357] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI39RVE-FfM89u7BQaIPAAAAIo"]
[Sat Feb 28 08:34:06.765198 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.22:22089] [client 173.244.55.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.22, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI3_ltZF9Zd_U7easBsEAAAAFU"]
[Sat Feb 28 08:34:13.462376 2026] [:error] [pid 39184:tid 39222] [client 173.244.55.22:22089] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aaI4BVtZF9Zd_U7easBsKwAAAEM"]
[Sat Feb 28 08:34:14.347724 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.28:42089] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/index.php"] [unique_id "aaI4BhVE-FfM89u7BQaIyQAAAJE"]
[Sat Feb 28 08:34:15.232460 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.28:33071] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/index.php"] [unique_id "aaI4B6IAO5fN7BxyqcEJYgAAANU"]
[Sat Feb 28 08:34:44.012930 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.23:51135] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI4JGuX5e1Q32gqxH38wQAAARU"]
[Sat Feb 28 08:34:44.888568 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.28:63873] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aaI4JBVE-FfM89u7BQaJVwAAAJM"]
[Sat Feb 28 08:34:48.242293 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.21:37409] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/wp-trackback.php"] [unique_id "aaI4KH6mbajs3bzQGyt1gAAAAUk"]
[Sat Feb 28 08:35:09.017083 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.29:64025] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI4PVtZF9Zd_U7easBtbQAAAEE"]
[Sat Feb 28 08:35:16.731143 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.31:29229] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI4RKIAO5fN7BxyqcEM-gAAAMY"]
[Sat Feb 28 08:35:25.185988 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.30:46167] [client 173.244.55.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.30, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI4TaIAO5fN7BxyqcENbgAAANQ"]
[Sat Feb 28 08:35:28.501701 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.30:46167] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI4UKIAO5fN7BxyqcENogAAAMc"]
[Sat Feb 28 08:35:39.384921 2026] [autoindex:error] [pid 39292:tid 39298] [client 173.244.55.29:40051] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:39.828878 2026] [autoindex:error] [pid 39292:tid 39308] [client 173.244.55.29:40051] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:40.270069 2026] [autoindex:error] [pid 39292:tid 39304] [client 173.244.55.29:40051] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:40.711071 2026] [autoindex:error] [pid 39292:tid 39299] [client 173.244.55.29:40051] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:45.357586 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.29:40051] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "aaI4YaIAO5fN7BxyqcEOYQAAANY"]
[Sat Feb 28 08:35:46.247539 2026] [autoindex:error] [pid 11791:tid 11807] [client 173.244.55.26:35711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:46.693000 2026] [autoindex:error] [pid 11791:tid 11806] [client 173.244.55.26:35711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:47.155487 2026] [autoindex:error] [pid 11791:tid 11797] [client 173.244.55.26:35711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:47.609849 2026] [autoindex:error] [pid 11791:tid 11813] [client 173.244.55.26:35711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:48.055352 2026] [autoindex:error] [pid 11791:tid 11803] [client 173.244.55.26:35711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:48.506150 2026] [autoindex:error] [pid 11791:tid 11802] [client 173.244.55.26:35711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:49.407089 2026] [autoindex:error] [pid 11791:tid 11805] [client 173.244.55.26:35711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:53.111732 2026] [autoindex:error] [pid 11791:tid 11815] [client 173.244.55.26:35711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:53.561596 2026] [autoindex:error] [pid 11791:tid 11811] [client 173.244.55.26:35711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:35:59.920587 2026] [autoindex:error] [pid 11791:tid 11796] [client 173.244.55.26:35711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:00.368086 2026] [autoindex:error] [pid 11791:tid 11814] [client 173.244.55.26:35711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:00.808750 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.26:35711] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "aaI4cGuX5e1Q32gqxH3_VgAAAQU"]
[Sat Feb 28 08:36:01.724442 2026] [autoindex:error] [pid 39183:tid 39201] [client 173.244.55.30:24413] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:02.172013 2026] [autoindex:error] [pid 39183:tid 39203] [client 173.244.55.30:24413] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:06.533951 2026] [:error] [pid 39183:tid 39210] [client 173.244.55.30:24413] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aaI4dhCf4HvhVePw3LaUDQAAABI"]
[Sat Feb 28 08:36:07.403250 2026] [:error] [pid 39183:tid 39209] [client 173.244.55.26:41937] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aaI4dxCf4HvhVePw3LaUEAAAABE"]
[Sat Feb 28 08:36:08.290652 2026] [autoindex:error] [pid 39185:tid 39269] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:08.742734 2026] [autoindex:error] [pid 39185:tid 39255] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:12.196774 2026] [autoindex:error] [pid 39185:tid 39256] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:17.175231 2026] [autoindex:error] [pid 39185:tid 39249] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:17.621438 2026] [autoindex:error] [pid 39185:tid 39263] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:18.071164 2026] [autoindex:error] [pid 39185:tid 39253] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:42.633464 2026] [autoindex:error] [pid 39185:tid 39249] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:45.762995 2026] [autoindex:error] [pid 39185:tid 39255] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:46.210857 2026] [autoindex:error] [pid 39185:tid 39259] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:47.552187 2026] [autoindex:error] [pid 39185:tid 39267] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:48.007963 2026] [autoindex:error] [pid 39185:tid 39251] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:36:48.465993 2026] [autoindex:error] [pid 39185:tid 39259] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:37:04.731746 2026] [autoindex:error] [pid 39185:tid 39249] [client 173.244.55.22:60455] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:37:05.172025 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.22:60455] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/"] [unique_id "aaI4sRVE-FfM89u7BQaN5wAAAIo"]
[Sat Feb 28 08:37:06.056600 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.31:60325] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/"] [unique_id "aaI4smuX5e1Q32gqxH0BpwAAARY"]
[Sat Feb 28 08:37:11.295886 2026] [autoindex:error] [pid 22194:tid 22200] [client 173.244.55.26:52893] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:37:27.357434 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.26:52893] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sites/default/files/"] [unique_id "aaI4x36mbajs3bzQGyt-CAAAAU4"]
[Sat Feb 28 08:37:30.692900 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.28:38647] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/controller/extension/extension/"] [unique_id "aaI4yltZF9Zd_U7easBxAgAAAEA"]
[Sat Feb 28 08:37:31.565782 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.31:23721] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/controller/extension/extension/"] [unique_id "aaI4y6IAO5fN7BxyqcEUcAAAANc"]
[Sat Feb 28 08:37:47.295258 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.25:21175] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Admin/uploads/"] [unique_id "aaI42xCf4HvhVePw3LaWogAAABM"]
[Sat Feb 28 08:37:53.827487 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.29:53031] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/administrator/"] [unique_id "aaI44RVE-FfM89u7BQaPtQAAAIQ"]
[Sat Feb 28 08:38:40.143142 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.25:29761] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wordpress/wp-admin/includes/wp-admin/js/"] [unique_id "aaI5EH6mbajs3bzQGyuCugAAAVE"]
[Sat Feb 28 08:38:44.853658 2026] [autoindex:error] [pid 11791:tid 11800] [client 173.244.55.21:33475] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:38:45.305095 2026] [autoindex:error] [pid 11791:tid 11812] [client 173.244.55.21:33475] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:38:45.748131 2026] [autoindex:error] [pid 11791:tid 11808] [client 173.244.55.21:33475] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:38:46.195694 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.21:33475] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aaI5FmuX5e1Q32gqxH0GkQAAARI"]
[Sat Feb 28 08:38:47.065282 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.21:36529] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aaI5F6IAO5fN7BxyqcEYvgAAAMU"]
[Sat Feb 28 08:38:47.941298 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.29:29211] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aaI5F6IAO5fN7BxyqcEY3AAAANI"]
[Sat Feb 28 08:38:48.820526 2026] [autoindex:error] [pid 39292:tid 39299] [client 173.244.55.28:48985] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:38:49.264166 2026] [autoindex:error] [pid 39292:tid 39309] [client 173.244.55.28:48985] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:38:49.709291 2026] [autoindex:error] [pid 39292:tid 39300] [client 173.244.55.28:48985] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:38:50.152039 2026] [autoindex:error] [pid 39292:tid 39300] [client 173.244.55.28:48985] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:38:50.594040 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.28:48985] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2024/"] [unique_id "aaI5GqIAO5fN7BxyqcEZHwAAAME"]
[Sat Feb 28 08:38:51.491830 2026] [autoindex:error] [pid 39185:tid 39249] [client 173.244.55.31:20677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:38:51.935747 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.31:20677] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-includes/"] [unique_id "aaI5GxVE-FfM89u7BQaRsAAAAJc"]
[Sat Feb 28 08:38:56.971353 2026] [autoindex:error] [pid 39185:tid 39262] [client 173.244.55.30:20105] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:39:00.255776 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.30:20105] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/"] [unique_id "aaI5JBVE-FfM89u7BQaSDQAAAIQ"]
[Sat Feb 28 08:39:01.131919 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.23:33391] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/"] [unique_id "aaI5JaIAO5fN7BxyqcEZygAAANA"]
[Sat Feb 28 08:39:02.012057 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.30:51979] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/"] [unique_id "aaI5JltZF9Zd_U7easByiwAAAEs"]
[Sat Feb 28 08:39:02.890675 2026] [autoindex:error] [pid 22194:tid 22200] [client 173.244.55.25:35853] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:39:03.340794 2026] [autoindex:error] [pid 22194:tid 22220] [client 173.244.55.25:35853] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:39:03.782956 2026] [autoindex:error] [pid 22194:tid 22211] [client 173.244.55.25:35853] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:39:06.797405 2026] [autoindex:error] [pid 22194:tid 22198] [client 173.244.55.25:35853] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:39:07.234352 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.25:35853] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/plupload/"] [unique_id "aaI5K36mbajs3bzQGyuE0gAAAUM"]
[Sat Feb 28 08:39:08.117909 2026] [autoindex:error] [pid 22194:tid 22201] [client 173.244.55.31:33191] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:39:08.563698 2026] [autoindex:error] [pid 22194:tid 22207] [client 173.244.55.31:33191] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:39:09.002894 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.31:33191] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaI5LX6mbajs3bzQGyuE9AAAAVQ"]
[Sat Feb 28 08:39:09.886664 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.31:39975] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaI5LRCf4HvhVePw3LaX8gAAABY"]
[Sat Feb 28 08:39:10.782443 2026] [autoindex:error] [pid 11791:tid 11793] [client 173.244.55.29:26633] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:39:11.223924 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.29:26633] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cache-wordpress/"] [unique_id "aaI5L2uX5e1Q32gqxH0HeAAAARM"]
[Sat Feb 28 08:40:04.621468 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.30:52445] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Uwogh-Segs/"] [unique_id "aaI5ZFtZF9Zd_U7easB0YQAAAEU"]
[Sat Feb 28 08:40:05.505042 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.29:20973] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Uwogh-Segs/"] [unique_id "aaI5ZVtZF9Zd_U7easB0aAAAAEk"]
[Sat Feb 28 08:40:06.391627 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.31:30007] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Uwogh-Segs/"] [unique_id "aaI5ZmuX5e1Q32gqxH0JlAAAAQM"]
[Sat Feb 28 08:40:43.377740 2026] [autoindex:error] [pid 39292:tid 39294] [client 173.244.55.25:43643] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 08:41:14.173634 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.25:43643] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentyfive/"] [unique_id "aaI5qqIAO5fN7BxyqcEhlgAAAME"]
[Sat Feb 28 08:41:28.090352 2026] [:error] [pid 39183:tid 39201] [client 173.244.55.30:26837] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/zakra/"] [unique_id "aaI5uBCf4HvhVePw3LaaigAAAAk"]
[Sat Feb 28 08:41:28.978353 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.22:40203] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/zakra/"] [unique_id "aaI5uH6mbajs3bzQGyuMjwAAAVM"]
[Sat Feb 28 09:10:05.689523 2026] [:error] [pid 11791:tid 11794] [client 49.43.112.61:22244] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJAbWuX5e1Q32gqxH19UAAAAQE"]
[Sat Feb 28 09:14:27.912962 2026] [:error] [pid 39292:tid 39312] [client 49.43.112.61:25601] [client 49.43.112.61] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaJBc6IAO5fN7BxyqcFvJAAAANI"]
[Sat Feb 28 09:16:13.368069 2026] [:error] [pid 22194:tid 22215] [client 49.43.112.61:25953] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJB3X6mbajs3bzQGyvwCQAAAVM"]
[Sat Feb 28 09:18:00.272975 2026] [:error] [pid 39184:tid 39229] [client 49.43.112.61:26205] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJCSFtZF9Zd_U7easClJQAAAEo"]
[Sat Feb 28 09:19:43.025932 2026] [:error] [pid 39185:tid 39261] [client 49.43.112.61:27218] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJCrxVE-FfM89u7BQbXoQAAAI8"]
[Sat Feb 28 09:21:29.478884 2026] [:error] [pid 11791:tid 11794] [client 49.43.112.61:28721] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJDGWuX5e1Q32gqxH2VngAAAQE"]
[Sat Feb 28 09:23:22.461126 2026] [:error] [pid 52460:tid 52473] [client 49.43.112.61:50640] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJDirLWOogAgHGh62RTrwAAAYo"]
[Sat Feb 28 09:24:51.727679 2026] [:error] [pid 52460:tid 52467] [client 49.43.112.61:51973] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJD47LWOogAgHGh62RV9wAAAYQ"]
[Sat Feb 28 09:24:51.731478 2026] [:error] [pid 52460:tid 52467] [client 49.43.112.61:51973] [client 49.43.112.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminhotbooksbookeeping2.22%wppass_d%title0xcbde7e60description0xcbde7e60mt_keywords0xcbde7e60mt_excerpt0xcbde7e601"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJD47LWOogAgHGh62RV9wAAAYQ"]
[Sat Feb 28 09:26:18.419680 2026] [:error] [pid 11791:tid 11808] [client 49.43.112.61:52742] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJEOmuX5e1Q32gqxH2anAAAAQ8"]
[Sat Feb 28 09:26:18.423749 2026] [:error] [pid 11791:tid 11808] [client 49.43.112.61:52742] [client 49.43.112.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminhotbooksbookeeping21%wppass_d%title0x8c07c86fdescription0x8c07c86fmt_keywords0x8c07c86fmt_excerpt0x8c07c86f1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJEOmuX5e1Q32gqxH2anAAAAQ8"]
[Sat Feb 28 09:27:51.868833 2026] [:error] [pid 39183:tid 39211] [client 49.43.112.61:53151] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJElxCf4HvhVePw3LbBgwAAABM"]
[Sat Feb 28 09:29:17.771595 2026] [:error] [pid 11791:tid 11808] [client 49.43.112.61:53559] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJE7WuX5e1Q32gqxH2eUgAAAQ8"]
[Sat Feb 28 09:29:17.773252 2026] [:error] [pid 11791:tid 11808] [client 49.43.112.61:53559] [client 49.43.112.61] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJE7WuX5e1Q32gqxH2eUgAAAQ8"]
[Sat Feb 28 09:29:17.774677 2026] [:error] [pid 11791:tid 11808] [client 49.43.112.61:53559] [client 49.43.112.61] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||hotbooksbookeeping2.com|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJE7WuX5e1Q32gqxH2eUgAAAQ8"]
[Sat Feb 28 09:30:50.868615 2026] [:error] [pid 39184:tid 39228] [client 49.43.112.61:54730] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJFSltZF9Zd_U7easCpZgAAAEk"]
[Sat Feb 28 09:32:10.535674 2026] [:error] [pid 39185:tid 39270] [client 49.43.112.61:55796] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJFmhVE-FfM89u7BQbsgAAAAJg"]
[Sat Feb 28 09:33:24.331225 2026] [:error] [pid 39183:tid 39212] [client 49.43.112.61:56871] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJF5BCf4HvhVePw3LbCRgAAABQ"]
[Sat Feb 28 09:33:24.335111 2026] [:error] [pid 39183:tid 39212] [client 49.43.112.61:56871] [client 49.43.112.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminhotbooksbookeeping22024%wppass_d%title0xcee9c1aedescription0xcee9c1aemt_keywords0xcee9c1aemt_excerpt0xcee9c1ae1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJF5BCf4HvhVePw3LbCRgAAABQ"]
[Sat Feb 28 09:34:38.321611 2026] [:error] [pid 52460:tid 52482] [client 49.43.112.61:57905] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJGLrLWOogAgHGh62Rj_wAAAZM"]
[Sat Feb 28 09:35:54.696821 2026] [:error] [pid 11791:tid 11806] [client 49.43.112.61:58978] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJGemuX5e1Q32gqxH2kZgAAAQ0"]
[Sat Feb 28 09:37:06.396236 2026] [:error] [pid 11791:tid 11810] [client 49.43.112.61:59994] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJGwmuX5e1Q32gqxH2lMAAAARE"]
[Sat Feb 28 09:38:18.059555 2026] [:error] [pid 22194:tid 22217] [client 49.43.112.61:60734] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJHCn6mbajs3bzQGysB3QAAAVU"]
[Sat Feb 28 09:38:18.062825 2026] [:error] [pid 22194:tid 22217] [client 49.43.112.61:60734] [client 49.43.112.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1adminhotbooksbookeeping2%wppass_d%title0x3a6a256cdescription0x3a6a256cmt_keywords0x3a6a256cmt_excerpt0x3a6a256c1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJHCn6mbajs3bzQGysB3QAAAVU"]
[Sat Feb 28 09:39:25.767302 2026] [:error] [pid 39292:tid 39306] [client 49.43.112.61:61249] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJHTaIAO5fN7BxyqcGD1gAAAMw"]
[Sat Feb 28 09:40:33.103093 2026] [:error] [pid 39184:tid 39234] [client 49.43.112.61:61843] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJHkVtZF9Zd_U7easCsAgAAAE8"]
[Sat Feb 28 09:41:31.701948 2026] [:error] [pid 39185:tid 39266] [client 49.43.112.61:62891] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJHyxVE-FfM89u7BQb7EAAAAJQ"]
[Sat Feb 28 09:42:25.034816 2026] [:error] [pid 39185:tid 39251] [client 49.43.112.61:63850] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJIARVE-FfM89u7BQb8FwAAAIU"]
[Sat Feb 28 09:43:34.145195 2026] [:error] [pid 52460:tid 52463] [client 49.43.112.61:65088] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJIRrLWOogAgHGh62RqnAAAAYA"]
[Sat Feb 28 09:44:28.387654 2026] [:error] [pid 52460:tid 52473] [client 49.43.112.61:1633] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJIfLLWOogAgHGh62RrYgAAAYo"]
[Sat Feb 28 09:45:26.415664 2026] [:error] [pid 39183:tid 39203] [client 49.43.112.61:2667] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJIthCf4HvhVePw3LbEBAAAAAs"]
[Sat Feb 28 09:46:21.178039 2026] [:error] [pid 39185:tid 39261] [client 49.43.112.61:3645] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJI7RVE-FfM89u7BQYAZgAAAI8"]
[Sat Feb 28 09:47:28.470597 2026] [:error] [pid 11791:tid 11815] [client 49.43.112.61:4445] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJJMGuX5e1Q32gqxH2qaQAAARY"]
[Sat Feb 28 09:48:20.013857 2026] [:error] [pid 52460:tid 52483] [client 49.43.112.61:4817] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJJZLLWOogAgHGh62RvLQAAAZQ"]
[Sat Feb 28 09:48:20.018475 2026] [:error] [pid 52460:tid 52483] [client 49.43.112.61:4817] [client 49.43.112.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping2.22%wppass_d%title0x4e0ff262description0x4e0ff262mt_keywords0x4e0ff262mt_excerpt0x4e0ff2621"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJJZLLWOogAgHGh62RvLQAAAZQ"]
[Sat Feb 28 09:49:16.799696 2026] [:error] [pid 39185:tid 39247] [client 49.43.112.61:5137] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJJnBVE-FfM89u7BQYDJQAAAIE"]
[Sat Feb 28 09:49:16.803194 2026] [:error] [pid 39185:tid 39247] [client 49.43.112.61:5137] [client 49.43.112.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping21%wppass_d%title0x5b1dc4f0description0x5b1dc4f0mt_keywords0x5b1dc4f0mt_excerpt0x5b1dc4f01"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJJnBVE-FfM89u7BQYDJQAAAIE"]
[Sat Feb 28 09:50:22.235076 2026] [:error] [pid 39185:tid 39270] [client 49.43.112.61:5504] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJJ3hVE-FfM89u7BQYEHAAAAJg"]
[Sat Feb 28 09:51:17.617354 2026] [:error] [pid 11791:tid 11813] [client 49.43.112.61:5920] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJKFWuX5e1Q32gqxH2sOwAAARQ"]
[Sat Feb 28 09:51:17.619352 2026] [:error] [pid 11791:tid 11813] [client 49.43.112.61:5920] [client 49.43.112.61] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJKFWuX5e1Q32gqxH2sOwAAARQ"]
[Sat Feb 28 09:51:17.620785 2026] [:error] [pid 11791:tid 11813] [client 49.43.112.61:5920] [client 49.43.112.61] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||hotbooksbookeeping2.com|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJKFWuX5e1Q32gqxH2sOwAAARQ"]
[Sat Feb 28 09:52:20.129183 2026] [:error] [pid 39183:tid 39195] [client 49.43.112.61:6945] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJKVBCf4HvhVePw3LbFpAAAAAM"]
[Sat Feb 28 09:53:15.913225 2026] [:error] [pid 39185:tid 39261] [client 49.43.112.61:7767] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJKixVE-FfM89u7BQYHwQAAAI8"]
[Sat Feb 28 09:54:38.381555 2026] [:error] [pid 11791:tid 11800] [client 49.43.112.61:9059] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJK3muX5e1Q32gqxH2uKAAAAQc"]
[Sat Feb 28 09:54:38.384930 2026] [:error] [pid 11791:tid 11800] [client 49.43.112.61:9059] [client 49.43.112.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping22024%wppass_d%title0xeaa8da01description0xeaa8da01mt_keywords0xeaa8da01mt_excerpt0xeaa8da011"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJK3muX5e1Q32gqxH2uKAAAAQc"]
[Sat Feb 28 09:55:33.572973 2026] [:error] [pid 39292:tid 39316] [client 49.43.112.61:9925] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJLFaIAO5fN7BxyqcGJGgAAANY"]
[Sat Feb 28 09:56:29.544015 2026] [:error] [pid 22194:tid 22205] [client 49.43.112.61:10763] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJLTX6mbajs3bzQGysGmwAAAUk"]
[Sat Feb 28 09:57:38.241767 2026] [:error] [pid 52460:tid 52486] [client 49.43.112.61:11760] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJLkrLWOogAgHGh62R3DwAAAZc"]
[Sat Feb 28 09:58:46.261925 2026] [:error] [pid 11791:tid 11817] [client 49.43.112.61:12441] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJL1muX5e1Q32gqxH2whgAAARg"]
[Sat Feb 28 09:58:46.266536 2026] [:error] [pid 11791:tid 11817] [client 49.43.112.61:12441] [client 49.43.112.61] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at XML. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "73"] [id "210380"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||hotbooksbookeeping2.com|F|4"] [data "XML=metaWeblog.newPost1hotbooksbookeeping2.comhotbooksbookeeping2%wppass_d%title0x3ef06d41description0x3ef06d41mt_keywords0x3ef06d41mt_excerpt0x3ef06d411"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJL1muX5e1Q32gqxH2whgAAARg"]
[Sat Feb 28 09:59:50.335873 2026] [:error] [pid 39185:tid 39268] [client 49.43.112.61:12871] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJMFhVE-FfM89u7BQYPrQAAAJY"]
[Sat Feb 28 10:00:58.294836 2026] [:error] [pid 39185:tid 39252] [client 49.43.112.61:13224] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJMWhVE-FfM89u7BQYRkwAAAIY"]
[Sat Feb 28 10:02:06.292019 2026] [:error] [pid 11791:tid 11802] [client 49.43.112.61:13674] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJMnmuX5e1Q32gqxH2y_gAAAQk"]
[Sat Feb 28 10:03:10.320835 2026] [:error] [pid 39292:tid 39317] [client 49.43.112.61:14700] [client 49.43.112.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.112.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJM3qIAO5fN7BxyqcGM7gAAANc"]
[Sat Feb 28 10:27:16.182042 2026] [:error] [pid 39185:tid 39263] [client 94.205.136.38:36978] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaJShBVE-FfM89u7BQYzaQAAAJE"]
[Sat Feb 28 12:09:09.042164 2026] [:error] [pid 22194:tid 22206] [client 170.106.197.109:37632] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaJqZX6mbajs3bzQGyswIgAAAUo"]
[Sat Feb 28 12:49:11.916277 2026] [:error] [pid 52460:tid 52473] [client 34.17.8.31:50028] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aaJzx7LWOogAgHGh62QifQAAAYo"]
[Sat Feb 28 12:49:17.887961 2026] [:error] [pid 52460:tid 52482] [client 34.17.8.31:50103] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aaJzzbLWOogAgHGh62QijQAAAZM"]
[Sat Feb 28 12:49:19.365745 2026] [:error] [pid 52460:tid 52464] [client 34.17.8.31:50302] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJzz7LWOogAgHGh62QikwAAAYE"]
[Sat Feb 28 12:49:30.597781 2026] [:error] [pid 39183:tid 39208] [client 34.17.8.31:50346] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJz2hCf4HvhVePw3LbmSAAAABA"]
[Sat Feb 28 12:49:32.686502 2026] [:error] [pid 52460:tid 52468] [client 34.17.8.31:50717] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.www"] [unique_id "aaJz3LLWOogAgHGh62QitAAAAYU"]
[Sat Feb 28 12:49:34.379310 2026] [:error] [pid 52460:tid 52464] [client 34.17.8.31:50758] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.www"] [unique_id "aaJz3rLWOogAgHGh62QixAAAAYE"]
[Sat Feb 28 12:49:35.866825 2026] [:error] [pid 39185:tid 39255] [client 34.17.8.31:50818] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJz3xVE-FfM89u7BQauLwAAAIk"]
[Sat Feb 28 12:49:41.865849 2026] [:error] [pid 39185:tid 39264] [client 34.17.8.31:50866] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJz5RVE-FfM89u7BQauYgAAAJI"]
[Sat Feb 28 12:49:42.937219 2026] [:error] [pid 39185:tid 39266] [client 34.17.8.31:51086] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env_1"] [unique_id "aaJz5hVE-FfM89u7BQaubQAAAJQ"]
[Sat Feb 28 12:49:44.435831 2026] [:error] [pid 22194:tid 22199] [client 34.17.8.31:51131] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env_1"] [unique_id "aaJz6H6mbajs3bzQGys8MQAAAUM"]
[Sat Feb 28 12:49:45.688474 2026] [:error] [pid 39183:tid 39194] [client 34.17.8.31:51196] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJz6RCf4HvhVePw3LbmhAAAAAI"]
[Sat Feb 28 12:50:02.654654 2026] [:error] [pid 39185:tid 39265] [client 34.17.8.31:51438] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJz-hVE-FfM89u7BQauxAAAAJM"]
[Sat Feb 28 12:50:04.618878 2026] [:error] [pid 39185:tid 39267] [client 34.17.8.31:51750] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env_sample"] [unique_id "aaJz_BVE-FfM89u7BQau1QAAAJU"]
[Sat Feb 28 12:50:08.350713 2026] [:error] [pid 39183:tid 39195] [client 34.17.8.31:51872] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env_sample"] [unique_id "aaJ0ABCf4HvhVePw3LbmtgAAAAM"]
[Sat Feb 28 12:50:10.650080 2026] [:error] [pid 39185:tid 39247] [client 34.17.8.31:51920] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0AhVE-FfM89u7BQau7wAAAIE"]
[Sat Feb 28 12:50:17.635972 2026] [:error] [pid 52460:tid 52481] [client 34.17.8.31:52135] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0CbLWOogAgHGh62QjSwAAAZI"]
[Sat Feb 28 12:50:35.871509 2026] [:error] [pid 39185:tid 39246] [client 34.17.8.31:52684] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0GxVE-FfM89u7BQav7gAAAIA"]
[Sat Feb 28 12:50:38.135281 2026] [:error] [pid 52460:tid 52476] [client 34.17.8.31:52816] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0HrLWOogAgHGh62QjpAAAAY0"]
[Sat Feb 28 12:50:45.596340 2026] [:error] [pid 11791:tid 11814] [client 34.17.8.31:53102] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/_static/.env"] [unique_id "aaJ0JWuX5e1Q32gqxH0QvQAAARU"]
[Sat Feb 28 12:50:47.424143 2026] [:error] [pid 39185:tid 39255] [client 34.17.8.31:53151] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/_static/.env"] [unique_id "aaJ0JxVE-FfM89u7BQawKwAAAIk"]
[Sat Feb 28 12:50:48.118441 2026] [:error] [pid 52460:tid 52470] [client 34.17.8.31:53205] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0KLLWOogAgHGh62QjugAAAYc"]
[Sat Feb 28 12:50:49.387297 2026] [:error] [pid 52460:tid 52465] [client 34.17.8.31:53237] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0KbLWOogAgHGh62QjwwAAAYI"]
[Sat Feb 28 12:50:56.143215 2026] [:error] [pid 39185:tid 39246] [client 34.17.8.31:53330] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "aaJ0MBVE-FfM89u7BQawLwAAAIA"]
[Sat Feb 28 12:51:08.650550 2026] [:error] [pid 39185:tid 39247] [client 34.17.8.31:53495] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "aaJ0PBVE-FfM89u7BQawRgAAAIE"]
[Sat Feb 28 12:51:19.945299 2026] [:error] [pid 22194:tid 22210] [client 34.17.8.31:54154] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0R36mbajs3bzQGys8hgAAAU4"]
[Sat Feb 28 12:51:24.330001 2026] [:error] [pid 11791:tid 11800] [client 34.17.8.31:54386] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0TGuX5e1Q32gqxH0RHQAAAQc"]
[Sat Feb 28 12:51:26.684202 2026] [:error] [pid 52460:tid 52476] [client 34.17.8.31:54478] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.docker/.env"] [unique_id "aaJ0TrLWOogAgHGh62QkiwAAAY0"]
[Sat Feb 28 12:51:32.612828 2026] [:error] [pid 39292:tid 39316] [client 34.17.8.31:54629] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.docker/.env"] [unique_id "aaJ0VKIAO5fN7BxyqcHNpwAAANY"]
[Sat Feb 28 12:51:47.393211 2026] [:error] [pid 39185:tid 39247] [client 34.17.8.31:55116] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0YxVE-FfM89u7BQaxHAAAAIE"]
[Sat Feb 28 12:51:52.915887 2026] [:error] [pid 39185:tid 39248] [client 34.17.8.31:55218] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0aBVE-FfM89u7BQaxVgAAAII"]
[Sat Feb 28 12:51:57.369105 2026] [:error] [pid 39184:tid 39240] [client 34.17.8.31:55437] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "aaJ0bVtZF9Zd_U7easDYJAAAAFU"]
[Sat Feb 28 12:51:58.867656 2026] [:error] [pid 11791:tid 11799] [client 34.17.8.31:55469] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "aaJ0bmuX5e1Q32gqxH0RdQAAAQY"]
[Sat Feb 28 12:52:01.656247 2026] [:error] [pid 52460:tid 52463] [client 34.17.8.31:55597] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0cbLWOogAgHGh62QlHwAAAYA"]
[Sat Feb 28 12:52:03.151156 2026] [:error] [pid 52460:tid 52483] [client 34.17.8.31:55629] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0c7LWOogAgHGh62QlKgAAAZQ"]
[Sat Feb 28 12:52:04.582230 2026] [:error] [pid 11791:tid 11803] [client 34.17.8.31:55704] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev"] [unique_id "aaJ0dGuX5e1Q32gqxH0RhgAAAQo"]
[Sat Feb 28 12:52:05.918264 2026] [:error] [pid 11791:tid 11797] [client 34.17.8.31:55740] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev"] [unique_id "aaJ0dWuX5e1Q32gqxH0RjwAAAQQ"]
[Sat Feb 28 12:52:06.617907 2026] [:error] [pid 11791:tid 11794] [client 34.17.8.31:55788] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0dmuX5e1Q32gqxH0RkgAAAQE"]
[Sat Feb 28 12:52:11.929565 2026] [:error] [pid 52460:tid 52468] [client 34.17.8.31:55908] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0e7LWOogAgHGh62QlQgAAAYU"]
[Sat Feb 28 12:52:13.425143 2026] [:error] [pid 39292:tid 39295] [client 34.17.8.31:55992] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/shop/.env"] [unique_id "aaJ0faIAO5fN7BxyqcHN4QAAAME"]
[Sat Feb 28 12:52:14.914632 2026] [:error] [pid 39292:tid 39311] [client 34.17.8.31:56034] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/shop/.env"] [unique_id "aaJ0fqIAO5fN7BxyqcHN5QAAANE"]
[Sat Feb 28 12:52:16.145102 2026] [:error] [pid 39292:tid 39301] [client 34.17.8.31:56101] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0gKIAO5fN7BxyqcHN6AAAAMc"]
[Sat Feb 28 12:52:27.349514 2026] [:error] [pid 39185:tid 39267] [client 34.17.8.31:56144] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0ixVE-FfM89u7BQax4AAAAJU"]
[Sat Feb 28 12:52:27.870127 2026] [:error] [pid 39185:tid 39246] [client 34.17.8.31:56564] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/dashboard/.env"] [unique_id "aaJ0ixVE-FfM89u7BQax5AAAAIA"]
[Sat Feb 28 12:52:29.315532 2026] [:error] [pid 11791:tid 11795] [client 34.17.8.31:56576] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/dashboard/.env"] [unique_id "aaJ0jWuX5e1Q32gqxH0RuQAAAQI"]
[Sat Feb 28 12:52:30.849944 2026] [:error] [pid 39183:tid 39214] [client 34.17.8.31:56660] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0jhCf4HvhVePw3LbnAwAAABY"]
[Sat Feb 28 12:52:36.424229 2026] [:error] [pid 39185:tid 39250] [client 34.17.8.31:56839] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0lBVE-FfM89u7BQayDwAAAIQ"]
[Sat Feb 28 12:52:37.595098 2026] [:error] [pid 39183:tid 39196] [client 34.17.8.31:56894] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/public/.env"] [unique_id "aaJ0lRCf4HvhVePw3LbnCAAAAAQ"]
[Sat Feb 28 12:52:39.338902 2026] [:error] [pid 52460:tid 52464] [client 34.17.8.31:56938] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/public/.env"] [unique_id "aaJ0l7LWOogAgHGh62QlpQAAAYE"]
[Sat Feb 28 12:52:41.671008 2026] [:error] [pid 52460:tid 52463] [client 34.17.8.31:57018] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0mbLWOogAgHGh62QlqgAAAYA"]
[Sat Feb 28 12:52:44.831434 2026] [:error] [pid 39292:tid 39296] [client 34.17.8.31:57114] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0nKIAO5fN7BxyqcHN-AAAAMI"]
[Sat Feb 28 12:52:45.389739 2026] [:error] [pid 39184:tid 39234] [client 34.17.8.31:57153] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "aaJ0nVtZF9Zd_U7easDYRgAAAE8"]
[Sat Feb 28 12:52:46.929705 2026] [:error] [pid 39185:tid 39261] [client 34.17.8.31:57187] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "aaJ0nhVE-FfM89u7BQayMwAAAI8"]
[Sat Feb 28 12:52:50.648750 2026] [:error] [pid 39185:tid 39270] [client 34.17.8.31:57321] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0ohVE-FfM89u7BQayRAAAAJg"]
[Sat Feb 28 12:52:52.430349 2026] [:error] [pid 39292:tid 39295] [client 34.17.8.31:57353] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0pKIAO5fN7BxyqcHN_gAAAME"]
[Sat Feb 28 12:52:56.367330 2026] [:error] [pid 39292:tid 39315] [client 34.17.8.31:57441] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/production/.env"] [unique_id "aaJ0qKIAO5fN7BxyqcHOAgAAANU"]
[Sat Feb 28 12:53:00.836540 2026] [:error] [pid 11791:tid 11814] [client 34.17.8.31:57541] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/production/.env"] [unique_id "aaJ0rGuX5e1Q32gqxH0R7QAAARU"]
[Sat Feb 28 12:53:01.611484 2026] [:error] [pid 11791:tid 11794] [client 34.17.8.31:57703] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0rWuX5e1Q32gqxH0R8gAAAQE"]
[Sat Feb 28 12:53:15.926838 2026] [:error] [pid 39185:tid 39264] [client 34.17.8.31:58192] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sites/all/libraries/mailchimp/.env"] [unique_id "aaJ0uxVE-FfM89u7BQayxAAAAJI"]
[Sat Feb 28 12:53:19.634056 2026] [:error] [pid 39292:tid 39318] [client 34.17.8.31:58224] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sites/all/libraries/mailchimp/.env"] [unique_id "aaJ0v6IAO5fN7BxyqcHOFgAAANg"]
[Sat Feb 28 12:53:21.153648 2026] [:error] [pid 39185:tid 39263] [client 34.17.8.31:58399] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0wRVE-FfM89u7BQay3QAAAJE"]
[Sat Feb 28 12:53:23.896996 2026] [:error] [pid 52460:tid 52483] [client 34.17.8.31:58460] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0w7LWOogAgHGh62QmDAAAAZQ"]
[Sat Feb 28 12:53:25.120819 2026] [:error] [pid 39185:tid 39262] [client 34.17.8.31:58499] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/www/.env"] [unique_id "aaJ0xRVE-FfM89u7BQay8AAAAJA"]
[Sat Feb 28 12:53:27.603820 2026] [:error] [pid 11791:tid 11805] [client 34.17.8.31:58537] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/www/.env"] [unique_id "aaJ0x2uX5e1Q32gqxH0SGwAAAQw"]
[Sat Feb 28 12:53:43.405826 2026] [:error] [pid 39185:tid 39255] [client 34.17.8.31:59001] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ01xVE-FfM89u7BQazogAAAIk"]
[Sat Feb 28 12:53:46.567180 2026] [:error] [pid 39185:tid 39253] [client 34.17.8.31:59058] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ02hVE-FfM89u7BQazswAAAIc"]
[Sat Feb 28 12:53:50.886896 2026] [:error] [pid 11791:tid 11806] [client 34.17.8.31:59265] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/protected/.env"] [unique_id "aaJ03muX5e1Q32gqxH0SQgAAAQ0"]
[Sat Feb 28 12:53:52.199376 2026] [:error] [pid 39184:tid 39221] [client 34.17.8.31:59294] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/protected/.env"] [unique_id "aaJ04FtZF9Zd_U7easDYbAAAAEI"]
[Sat Feb 28 12:53:59.156037 2026] [:error] [pid 52460:tid 52483] [client 34.17.8.31:59544] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ057LWOogAgHGh62QmfwAAAZQ"]
[Sat Feb 28 12:54:00.918683 2026] [:error] [pid 52460:tid 52485] [client 34.17.8.31:59577] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ06LLWOogAgHGh62QmgwAAAZY"]
[Sat Feb 28 12:54:05.128151 2026] [:error] [pid 39183:tid 39206] [client 34.17.8.31:59702] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/core/.env"] [unique_id "aaJ07RCf4HvhVePw3LbnJgAAAA4"]
[Sat Feb 28 12:54:07.078201 2026] [:error] [pid 39185:tid 39254] [client 34.17.8.31:59722] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/core/.env"] [unique_id "aaJ07xVE-FfM89u7BQa0CQAAAIg"]
[Sat Feb 28 12:54:07.826300 2026] [:error] [pid 39183:tid 39201] [client 34.17.8.31:59797] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ07xCf4HvhVePw3LbnKgAAAAk"]
[Sat Feb 28 12:54:11.088563 2026] [:error] [pid 52460:tid 52466] [client 34.17.8.31:59808] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ087LWOogAgHGh62QmkAAAAYM"]
[Sat Feb 28 12:54:12.107758 2026] [:error] [pid 52460:tid 52470] [client 34.17.8.31:59932] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/base/.env"] [unique_id "aaJ09LLWOogAgHGh62QmlgAAAYc"]
[Sat Feb 28 12:54:13.924293 2026] [:error] [pid 39184:tid 39243] [client 34.17.8.31:59973] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/base/.env"] [unique_id "aaJ09VtZF9Zd_U7easDYcgAAAFg"]
[Sat Feb 28 12:54:14.679929 2026] [:error] [pid 39185:tid 39255] [client 34.17.8.31:60046] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ09hVE-FfM89u7BQa0PgAAAIk"]
[Sat Feb 28 12:54:18.908990 2026] [:error] [pid 11791:tid 11805] [client 34.17.8.31:60075] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ0-muX5e1Q32gqxH0SewAAAQw"]
[Sat Feb 28 12:54:21.120660 2026] [:error] [pid 39185:tid 39270] [client 34.17.8.31:60258] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/src/.env"] [unique_id "aaJ0_RVE-FfM89u7BQa0XQAAAJg"]
[Sat Feb 28 12:54:44.439173 2026] [:error] [pid 39185:tid 39255] [client 34.17.8.31:60984] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1FBVE-FfM89u7BQa0rQAAAIk"]
[Sat Feb 28 12:54:54.843445 2026] [:error] [pid 52460:tid 52467] [client 34.17.8.31:61074] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1HrLWOogAgHGh62QnLgAAAYQ"]
[Sat Feb 28 12:54:58.873042 2026] [:error] [pid 39185:tid 39258] [client 34.17.8.31:61458] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/.env"] [unique_id "aaJ1IhVE-FfM89u7BQa05wAAAIw"]
[Sat Feb 28 12:55:03.617028 2026] [:error] [pid 39183:tid 39203] [client 34.17.8.31:61515] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/.env"] [unique_id "aaJ1JxCf4HvhVePw3LbnXwAAAAs"]
[Sat Feb 28 12:55:04.354284 2026] [:error] [pid 39185:tid 39250] [client 34.17.8.31:61607] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1KBVE-FfM89u7BQa0_wAAAIQ"]
[Sat Feb 28 12:55:06.151255 2026] [:error] [pid 39185:tid 39248] [client 34.17.8.31:61667] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1KhVE-FfM89u7BQa1BQAAAII"]
[Sat Feb 28 12:55:08.184036 2026] [:error] [pid 52460:tid 52474] [client 34.17.8.31:61752] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/apps/.env"] [unique_id "aaJ1LLLWOogAgHGh62QnVQAAAYs"]
[Sat Feb 28 12:55:14.156613 2026] [:error] [pid 52460:tid 52479] [client 34.17.8.31:61786] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/apps/.env"] [unique_id "aaJ1MrLWOogAgHGh62QnZwAAAZA"]
[Sat Feb 28 12:55:17.175375 2026] [:error] [pid 39183:tid 39211] [client 34.17.8.31:61982] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1NRCf4HvhVePw3LbnbAAAABM"]
[Sat Feb 28 12:55:26.881122 2026] [:error] [pid 11791:tid 11801] [client 34.17.8.31:62098] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1PmuX5e1Q32gqxH0S5QAAAQg"]
[Sat Feb 28 12:55:27.614532 2026] [:error] [pid 11791:tid 11805] [client 34.17.8.31:62356] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/.env"] [unique_id "aaJ1P2uX5e1Q32gqxH0S6gAAAQw"]
[Sat Feb 28 12:55:29.102792 2026] [:error] [pid 39184:tid 39222] [client 34.17.8.31:62379] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/.env"] [unique_id "aaJ1QVtZF9Zd_U7easDYsAAAAEM"]
[Sat Feb 28 12:55:29.618484 2026] [:error] [pid 11791:tid 11793] [client 34.17.8.31:62427] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1QWuX5e1Q32gqxH0S8AAAAQA"]
[Sat Feb 28 12:55:32.363292 2026] [:error] [pid 22194:tid 22220] [client 34.17.8.31:62525] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1RH6mbajs3bzQGys9QQAAAVg"]
[Sat Feb 28 12:55:34.889139 2026] [:error] [pid 39185:tid 39267] [client 34.17.8.31:62644] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/.env"] [unique_id "aaJ1RhVE-FfM89u7BQa1dwAAAJU"]
[Sat Feb 28 12:55:42.667916 2026] [:error] [pid 11791:tid 11799] [client 34.17.8.31:62900] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1TmuX5e1Q32gqxH0TFgAAAQY"]
[Sat Feb 28 12:55:44.345552 2026] [:error] [pid 11791:tid 11796] [client 34.17.8.31:62963] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1UGuX5e1Q32gqxH0TJAAAAQM"]
[Sat Feb 28 12:55:46.386003 2026] [:error] [pid 39185:tid 39253] [client 34.17.8.31:63085] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/library/.env"] [unique_id "aaJ1UhVE-FfM89u7BQa1uQAAAIc"]
[Sat Feb 28 12:55:53.841271 2026] [:error] [pid 39185:tid 39258] [client 34.17.8.31:63155] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/library/.env"] [unique_id "aaJ1WRVE-FfM89u7BQa15gAAAIw"]
[Sat Feb 28 12:55:55.820330 2026] [:error] [pid 39185:tid 39253] [client 34.17.8.31:63391] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1WxVE-FfM89u7BQa1-AAAAIc"]
[Sat Feb 28 12:56:10.080182 2026] [:error] [pid 22194:tid 22196] [client 34.17.8.31:63845] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/new/.env"] [unique_id "aaJ1an6mbajs3bzQGys9dQAAAUA"]
[Sat Feb 28 12:56:12.434927 2026] [:error] [pid 39185:tid 39252] [client 34.17.8.31:63909] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/new/.env"] [unique_id "aaJ1bBVE-FfM89u7BQa2YwAAAIY"]
[Sat Feb 28 12:56:13.649309 2026] [:error] [pid 39183:tid 39200] [client 34.17.8.31:63969] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1bRCf4HvhVePw3LbnuwAAAAg"]
[Sat Feb 28 12:56:15.626116 2026] [:error] [pid 22194:tid 22213] [client 34.17.8.31:64031] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1b36mbajs3bzQGys9hgAAAVE"]
[Sat Feb 28 12:56:17.591254 2026] [:error] [pid 39185:tid 39262] [client 34.17.8.31:64121] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/old/.env"] [unique_id "aaJ1cRVE-FfM89u7BQa2ewAAAJA"]
[Sat Feb 28 12:56:21.822180 2026] [:error] [pid 39183:tid 39208] [client 34.17.8.31:64149] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/old/.env"] [unique_id "aaJ1dRCf4HvhVePw3LbnywAAABA"]
[Sat Feb 28 12:56:28.849836 2026] [:error] [pid 11791:tid 11809] [client 34.17.8.31:64345] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1fGuX5e1Q32gqxH0TlgAAARA"]
[Sat Feb 28 12:56:30.830475 2026] [:error] [pid 11791:tid 11798] [client 34.17.8.31:64517] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1fmuX5e1Q32gqxH0TogAAAQU"]
[Sat Feb 28 12:56:32.109456 2026] [:error] [pid 52460:tid 52466] [client 34.17.8.31:64594] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/local/.env"] [unique_id "aaJ1gLLWOogAgHGh62QoewAAAYM"]
[Sat Feb 28 12:56:34.857060 2026] [:error] [pid 39183:tid 39193] [client 34.17.8.31:64693] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/local/.env"] [unique_id "aaJ1ghCf4HvhVePw3Lbn0AAAAAE"]
[Sat Feb 28 12:56:40.413913 2026] [:error] [pid 52460:tid 52468] [client 34.17.8.31:64748] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1iLLWOogAgHGh62QolwAAAYU"]
[Sat Feb 28 12:56:47.120471 2026] [:error] [pid 39184:tid 39220] [client 34.17.8.31:65113] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1j1tZF9Zd_U7easDY_wAAAEE"]
[Sat Feb 28 12:56:48.359996 2026] [:error] [pid 11791:tid 11801] [client 34.17.8.31:65187] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/crm/.env"] [unique_id "aaJ1kGuX5e1Q32gqxH0TyAAAAQg"]
[Sat Feb 28 12:56:55.681207 2026] [:error] [pid 11791:tid 11812] [client 34.17.8.31:65430] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/crm/.env"] [unique_id "aaJ1l2uX5e1Q32gqxH0T4gAAARM"]
[Sat Feb 28 12:56:56.655273 2026] [:error] [pid 52460:tid 52466] [client 34.17.8.31:65499] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1mLLWOogAgHGh62QozgAAAYM"]
[Sat Feb 28 12:56:58.851261 2026] [:error] [pid 52460:tid 52467] [client 34.17.8.31:49168] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1mrLWOogAgHGh62Qo1QAAAYQ"]
[Sat Feb 28 12:56:59.602034 2026] [:error] [pid 39185:tid 39269] [client 34.17.8.31:49228] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/audio/.env"] [unique_id "aaJ1mxVE-FfM89u7BQa3GQAAAJc"]
[Sat Feb 28 12:57:02.397404 2026] [:error] [pid 39292:tid 39313] [client 34.17.8.31:49267] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/audio/.env"] [unique_id "aaJ1nqIAO5fN7BxyqcHPcQAAANM"]
[Sat Feb 28 12:57:03.168995 2026] [:error] [pid 52460:tid 52468] [client 34.17.8.31:49332] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1n7LWOogAgHGh62Qo6AAAAYU"]
[Sat Feb 28 12:57:12.599060 2026] [:error] [pid 11791:tid 11793] [client 34.17.8.31:49498] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1qGuX5e1Q32gqxH0UNAAAAQA"]
[Sat Feb 28 12:57:14.340140 2026] [:error] [pid 39185:tid 39252] [client 34.17.8.31:49707] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/config/.env"] [unique_id "aaJ1qhVE-FfM89u7BQa3OAAAAIY"]
[Sat Feb 28 12:57:16.438997 2026] [:error] [pid 39185:tid 39259] [client 34.17.8.31:49735] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/config/.env"] [unique_id "aaJ1rBVE-FfM89u7BQa3RAAAAI0"]
[Sat Feb 28 12:57:18.088337 2026] [:error] [pid 39292:tid 39314] [client 34.17.8.31:49848] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1rqIAO5fN7BxyqcHPiAAAANQ"]
[Sat Feb 28 12:57:28.660637 2026] [:error] [pid 39185:tid 39250] [client 34.17.8.31:50096] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1uBVE-FfM89u7BQa3cgAAAIQ"]
[Sat Feb 28 12:57:39.606714 2026] [:error] [pid 52460:tid 52472] [client 34.17.8.31:50519] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "aaJ1w7LWOogAgHGh62QpagAAAYk"]
[Sat Feb 28 12:57:42.098058 2026] [:error] [pid 39185:tid 39248] [client 34.17.8.31:50583] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "aaJ1xhVE-FfM89u7BQa39QAAAII"]
[Sat Feb 28 12:57:43.858759 2026] [:error] [pid 39185:tid 39252] [client 34.17.8.31:50676] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1xxVE-FfM89u7BQa4CQAAAIY"]
[Sat Feb 28 12:57:51.847706 2026] [:error] [pid 39184:tid 39232] [client 34.17.8.31:50749] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ1z1tZF9Zd_U7easDZSAAAAE0"]
[Sat Feb 28 12:57:53.117177 2026] [:error] [pid 39185:tid 39250] [client 34.17.8.31:50986] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/conf/.env"] [unique_id "aaJ10RVE-FfM89u7BQa4KgAAAIQ"]
[Sat Feb 28 12:57:54.584155 2026] [:error] [pid 11791:tid 11798] [client 34.17.8.31:51035] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/conf/.env"] [unique_id "aaJ10muX5e1Q32gqxH0VEQAAAQU"]
[Sat Feb 28 12:57:55.322194 2026] [:error] [pid 52460:tid 52474] [client 34.17.8.31:51092] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ107LWOogAgHGh62QplQAAAYs"]
[Sat Feb 28 12:57:57.609956 2026] [:error] [pid 39185:tid 39254] [client 34.17.8.31:51136] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ11RVE-FfM89u7BQa4TwAAAIg"]
[Sat Feb 28 12:57:58.641573 2026] [:error] [pid 39292:tid 39306] [client 34.17.8.31:51216] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/database/.env"] [unique_id "aaJ11qIAO5fN7BxyqcHPxwAAAMw"]
[Sat Feb 28 12:58:16.666179 2026] [:error] [pid 22194:tid 22211] [client 34.17.8.31:51729] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ16H6mbajs3bzQGys-HQAAAU8"]
[Sat Feb 28 12:58:23.581115 2026] [:error] [pid 39185:tid 39268] [client 34.17.8.31:51874] [client 34.17.8.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/hotbooksbookeeping2.com/.env"] [unique_id "aaJ17xVE-FfM89u7BQa5AwAAAJY"]
[Sat Feb 28 14:08:04.335458 2026] [:error] [pid 39185:tid 39256] [client 204.76.203.25:41524] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aaKGRBVE-FfM89u7BQYC4wAAAIo"]
[Sat Feb 28 14:52:03.953537 2026] [:error] [pid 52460:tid 52472] [client 117.62.235.53:56168] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaKQk7LWOogAgHGh62R6VQAAAYk"]
[Sat Feb 28 14:54:24.646666 2026] [:error] [pid 11791:tid 11816] [client 91.224.92.164:19040] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aaKRIGuX5e1Q32gqxH1SUgAAARc"]
[Sat Feb 28 14:54:26.141303 2026] [:error] [pid 11791:tid 11806] [client 91.224.92.164:35299] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aaKRImuX5e1Q32gqxH1SYgAAAQ0"]
[Sat Feb 28 15:29:55.947738 2026] [:error] [pid 52460:tid 52470] [client 104.194.155.80:59144] [client 104.194.155.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aaKZc7LWOogAgHGh62Sa0wAAAYc"]
[Sat Feb 28 15:41:25.248173 2026] [:error] [pid 49763:tid 49784] [client 135.181.213.219:33240] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aaKcJbTHSOG_yf2PpqG-IgAAAdI"]
[Sat Feb 28 15:41:27.882022 2026] [:error] [pid 39292:tid 39305] [client 135.181.213.219:33254] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaKcJ6IAO5fN7BxyqcEIZQAAAMs"]
[Sat Feb 28 15:41:30.483948 2026] [:error] [pid 49763:tid 49776] [client 135.181.213.219:18284] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaKcKrTHSOG_yf2PpqG-QQAAAco"]
[Sat Feb 28 15:41:33.001188 2026] [:error] [pid 39184:tid 39243] [client 135.181.213.219:18290] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaKcLVtZF9Zd_U7easACNgAAAFg"]
[Sat Feb 28 15:41:35.478015 2026] [:error] [pid 49763:tid 49785] [client 135.181.213.219:18302] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaKcL7THSOG_yf2PpqG-vwAAAdM"]
[Sat Feb 28 15:41:38.109045 2026] [:error] [pid 39183:tid 39194] [client 135.181.213.219:18312] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaKcMhCf4HvhVePw3LYJpgAAAAI"]
[Sat Feb 28 15:41:40.744040 2026] [:error] [pid 39184:tid 39228] [client 135.181.213.219:21904] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aaKcNFtZF9Zd_U7easACTwAAAEk"]
[Sat Feb 28 15:41:43.356465 2026] [:error] [pid 39184:tid 39240] [client 135.181.213.219:21920] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaKcN1tZF9Zd_U7easACYAAAAFU"]
[Sat Feb 28 15:41:45.874904 2026] [:error] [pid 39292:tid 39297] [client 135.181.213.219:21922] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaKcOaIAO5fN7BxyqcEItQAAAMM"]
[Sat Feb 28 15:41:48.492701 2026] [:error] [pid 11791:tid 11795] [client 135.181.213.219:21930] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaKcPGuX5e1Q32gqxH1pPQAAAQI"]
[Sat Feb 28 15:41:50.968111 2026] [:error] [pid 52460:tid 52478] [client 135.181.213.219:63116] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaKcPrLWOogAgHGh62SgCgAAAY8"]
[Sat Feb 28 15:41:53.567247 2026] [:error] [pid 39184:tid 39228] [client 135.181.213.219:63120] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aaKcQVtZF9Zd_U7easACtgAAAEk"]
[Sat Feb 28 15:41:56.088580 2026] [:error] [pid 49763:tid 49772] [client 135.181.213.219:63132] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaKcRLTHSOG_yf2PpqG_JAAAAcY"]
[Sat Feb 28 15:41:58.676369 2026] [:error] [pid 39183:tid 39216] [client 135.181.213.219:63146] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaKcRhCf4HvhVePw3LYJ0wAAABg"]
[Sat Feb 28 15:42:01.192141 2026] [:error] [pid 39183:tid 39195] [client 135.181.213.219:42600] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaKcSRCf4HvhVePw3LYJ1AAAAAM"]
[Sat Feb 28 15:42:03.717956 2026] [:error] [pid 49763:tid 49770] [client 135.181.213.219:42608] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaKcS7THSOG_yf2PpqG_NwAAAcQ"]
[Sat Feb 28 15:42:06.260636 2026] [:error] [pid 39183:tid 39192] [client 135.181.213.219:42622] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aaKcThCf4HvhVePw3LYJ9QAAAAA"]
[Sat Feb 28 15:42:08.734953 2026] [:error] [pid 39292:tid 39303] [client 135.181.213.219:42626] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aaKcUKIAO5fN7BxyqcEIywAAAMk"]
[Sat Feb 28 15:42:11.170972 2026] [:error] [pid 52460:tid 52472] [client 135.181.213.219:9874] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aaKcU7LWOogAgHGh62SgEAAAAYk"]
[Sat Feb 28 15:42:13.678704 2026] [:error] [pid 22194:tid 22220] [client 135.181.213.219:9890] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aaKcVX6mbajs3bzQGytq8QAAAVg"]
[Sat Feb 28 15:42:16.025727 2026] [:error] [pid 52460:tid 52475] [client 135.181.213.219:9896] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaKcWLLWOogAgHGh62SgFQAAAYw"]
[Sat Feb 28 15:42:18.708876 2026] [:error] [pid 39184:tid 39240] [client 135.181.213.219:9906] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aaKcWltZF9Zd_U7easAC8gAAAFU"]
[Sat Feb 28 15:43:02.450036 2026] [:error] [pid 39184:tid 39234] [client 135.181.213.219:46400] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aaKchltZF9Zd_U7easADjgAAAE8"]
[Sat Feb 28 15:43:05.111229 2026] [:error] [pid 39185:tid 39265] [client 135.181.213.219:46414] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aaKciRVE-FfM89u7BQZeCgAAAJM"]
[Sat Feb 28 15:43:07.756476 2026] [:error] [pid 39292:tid 39300] [client 135.181.213.219:46430] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aaKci6IAO5fN7BxyqcEJAAAAAMY"]
[Sat Feb 28 15:43:10.233932 2026] [:error] [pid 39183:tid 39212] [client 135.181.213.219:46446] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aaKcjhCf4HvhVePw3LYKpAAAABQ"]
[Sat Feb 28 15:43:12.831968 2026] [:error] [pid 49763:tid 49788] [client 135.181.213.219:15714] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaKckLTHSOG_yf2PpqHAQgAAAdY"]
[Sat Feb 28 15:43:15.358270 2026] [:error] [pid 49763:tid 49768] [client 135.181.213.219:15718] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aaKck7THSOG_yf2PpqHASwAAAcI"]
[Sat Feb 28 15:43:17.859845 2026] [:error] [pid 49763:tid 49771] [client 135.181.213.219:15722] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aaKclbTHSOG_yf2PpqHAYAAAAcU"]
[Sat Feb 28 15:43:20.384927 2026] [:error] [pid 39292:tid 39304] [client 135.181.213.219:52690] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaKcmKIAO5fN7BxyqcEJCgAAAMo"]
[Sat Feb 28 15:43:22.913482 2026] [:error] [pid 22194:tid 22213] [client 135.181.213.219:52700] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaKcmn6mbajs3bzQGytrEwAAAVE"]
[Sat Feb 28 15:43:25.286383 2026] [:error] [pid 39292:tid 39294] [client 135.181.213.219:52704] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aaKcnaIAO5fN7BxyqcEJFgAAAMA"]
[Sat Feb 28 15:43:27.907049 2026] [:error] [pid 39184:tid 39221] [client 135.181.213.219:52708] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaKcn1tZF9Zd_U7easAD9gAAAEI"]
[Sat Feb 28 15:43:30.513733 2026] [:error] [pid 49763:tid 49789] [client 135.181.213.219:57484] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaKcorTHSOG_yf2PpqHAmAAAAdc"]
[Sat Feb 28 15:43:33.100979 2026] [:error] [pid 49763:tid 49776] [client 135.181.213.219:57492] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaKcpbTHSOG_yf2PpqHApQAAAco"]
[Sat Feb 28 15:43:35.595937 2026] [:error] [pid 39183:tid 39197] [client 135.181.213.219:57504] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaKcpxCf4HvhVePw3LYKxQAAAAU"]
[Sat Feb 28 15:43:37.940709 2026] [:error] [pid 49763:tid 49780] [client 135.181.213.219:57508] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaKcqbTHSOG_yf2PpqHAyQAAAc4"]
[Sat Feb 28 15:43:40.428817 2026] [:error] [pid 39184:tid 39238] [client 135.181.213.219:63578] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aaKcrFtZF9Zd_U7easAEEgAAAFM"]
[Sat Feb 28 15:43:43.034775 2026] [:error] [pid 49763:tid 49780] [client 135.181.213.219:63582] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aaKcr7THSOG_yf2PpqHA4wAAAc4"]
[Sat Feb 28 15:43:45.576327 2026] [:error] [pid 49763:tid 49777] [client 135.181.213.219:63588] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aaKcsbTHSOG_yf2PpqHA9gAAAcs"]
[Sat Feb 28 15:43:48.046016 2026] [:error] [pid 49763:tid 49777] [client 135.181.213.219:63592] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaKctLTHSOG_yf2PpqHBCQAAAcs"]
[Sat Feb 28 15:49:48.267638 2026] [autoindex:error] [pid 39185:tid 39264] [client 217.160.139.117:57049] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 15:50:48.551288 2026] [:error] [pid 49763:tid 49772] [client 52.169.119.118:9558] [client 52.169.119.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaKeWLTHSOG_yf2PpqHGrQAAAcY"]
[Sat Feb 28 15:50:55.060613 2026] [:error] [pid 49763:tid 49788] [client 52.169.119.118:14807] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "aaKeX7THSOG_yf2PpqHGxQAAAdY"]
[Sat Feb 28 15:50:55.582774 2026] [:error] [pid 49763:tid 49784] [client 52.169.119.118:14206] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "aaKeX7THSOG_yf2PpqHGxgAAAdI"]
[Sat Feb 28 15:50:56.110096 2026] [:error] [pid 39183:tid 39192] [client 52.169.119.118:10134] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "aaKeYBCf4HvhVePw3LYORAAAAAA"]
[Sat Feb 28 15:50:56.628433 2026] [:error] [pid 22194:tid 22215] [client 52.169.119.118:13713] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "aaKeYH6mbajs3bzQGytr0wAAAVM"]
[Sat Feb 28 15:50:57.155154 2026] [:error] [pid 39185:tid 39258] [client 52.169.119.118:3752] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpo.php"] [unique_id "aaKeYRVE-FfM89u7BQZfbAAAAIw"]
[Sat Feb 28 15:50:57.717732 2026] [:error] [pid 11791:tid 11799] [client 52.169.119.118:12984] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpo.php"] [unique_id "aaKeYWuX5e1Q32gqxH1rhwAAAQY"]
[Sat Feb 28 15:50:58.217452 2026] [:error] [pid 39185:tid 39255] [client 52.169.119.118:12356] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaKeYhVE-FfM89u7BQZfbQAAAIk"]
[Sat Feb 28 15:50:58.714836 2026] [:error] [pid 39184:tid 39219] [client 52.169.119.118:11053] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaKeYltZF9Zd_U7easAJTwAAAEA"]
[Sat Feb 28 15:50:59.212738 2026] [:error] [pid 39184:tid 39235] [client 52.169.119.118:17088] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaKeY1tZF9Zd_U7easAJUwAAAFA"]
[Sat Feb 28 15:50:59.709913 2026] [:error] [pid 49763:tid 49782] [client 52.169.119.118:12352] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaKeY7THSOG_yf2PpqHG3gAAAdA"]
[Sat Feb 28 15:51:00.208259 2026] [:error] [pid 49763:tid 49768] [client 52.169.119.118:12985] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaKeZLTHSOG_yf2PpqHG4gAAAcI"]
[Sat Feb 28 15:51:00.718609 2026] [:error] [pid 49763:tid 49784] [client 52.169.119.118:16645] [client 52.169.119.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaKeZLTHSOG_yf2PpqHG6AAAAdI"]
[Sat Feb 28 16:18:03.546476 2026] [:error] [pid 39183:tid 39194] [client 51.75.151.149:53916] [client 51.75.151.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/teknocore/v1/"] [unique_id "aaKkuxCf4HvhVePw3LYZsAAAAAI"]
[Sat Feb 28 16:29:36.203791 2026] [:error] [pid 49763:tid 49783] [client 43.157.158.178:32912] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaKncLTHSOG_yf2PpqHqFQAAAdE"]
[Sat Feb 28 16:38:12.276359 2026] [:error] [pid 39292:tid 39316] [client 4.193.177.110:3719] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaKpdKIAO5fN7BxyqcEYagAAANY"]
[Sat Feb 28 16:38:12.703555 2026] [:error] [pid 49763:tid 49775] [client 4.193.177.110:5103] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaKpdLTHSOG_yf2PpqHvhAAAAck"]
[Sat Feb 28 16:38:13.091448 2026] [:error] [pid 39185:tid 39264] [client 4.193.177.110:3002] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaKpdRVE-FfM89u7BQZmhgAAAJI"]
[Sat Feb 28 16:38:13.458725 2026] [:error] [pid 39292:tid 39294] [client 4.193.177.110:5100] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaKpdaIAO5fN7BxyqcEYbQAAAMA"]
[Sat Feb 28 17:15:53.323665 2026] [:error] [pid 39183:tid 39215] [client 4.205.9.11:39126] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aaKySRCf4HvhVePw3LY2aQAAABc"]
[Sat Feb 28 17:15:53.744275 2026] [:error] [pid 39292:tid 39305] [client 4.205.9.11:31558] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aaKySaIAO5fN7BxyqcEkEwAAAMs"]
[Sat Feb 28 17:15:54.165402 2026] [:error] [pid 49763:tid 49784] [client 4.205.9.11:39160] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aaKySrTHSOG_yf2PpqENZgAAAdI"]
[Sat Feb 28 17:15:54.588371 2026] [:error] [pid 49763:tid 49781] [client 4.205.9.11:31559] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aaKySrTHSOG_yf2PpqENaAAAAc8"]
[Sat Feb 28 17:15:55.036806 2026] [:error] [pid 49763:tid 49780] [client 4.205.9.11:31575] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aaKyS7THSOG_yf2PpqENbQAAAc4"]
[Sat Feb 28 17:15:55.461875 2026] [:error] [pid 49763:tid 49774] [client 4.205.9.11:39146] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aaKyS7THSOG_yf2PpqENcgAAAcg"]
[Sat Feb 28 17:15:55.882703 2026] [:error] [pid 52460:tid 52464] [client 4.205.9.11:39161] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aaKyS7LWOogAgHGh62SyPAAAAYE"]
[Sat Feb 28 17:15:56.303129 2026] [:error] [pid 39185:tid 39253] [client 4.205.9.11:31564] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aaKyTBVE-FfM89u7BQZs4AAAAIc"]
[Sat Feb 28 17:15:56.739029 2026] [:error] [pid 49763:tid 49767] [client 4.205.9.11:39116] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cxxuv.php"] [unique_id "aaKyTLTHSOG_yf2PpqENdgAAAcE"]
[Sat Feb 28 17:15:57.214166 2026] [:error] [pid 11791:tid 11806] [client 4.205.9.11:39143] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cxxuv.php"] [unique_id "aaKyTWuX5e1Q32gqxH1_agAAAQ0"]
[Sat Feb 28 17:15:57.675467 2026] [:error] [pid 39292:tid 39315] [client 4.205.9.11:39120] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cxxuv.php"] [unique_id "aaKyTaIAO5fN7BxyqcEkKAAAANU"]
[Sat Feb 28 17:15:58.097037 2026] [:error] [pid 49763:tid 49776] [client 4.205.9.11:31556] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cxxuv.php"] [unique_id "aaKyTrTHSOG_yf2PpqENeAAAAco"]
[Sat Feb 28 17:15:58.518129 2026] [:error] [pid 39292:tid 39316] [client 4.205.9.11:39148] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaKyTqIAO5fN7BxyqcEkMgAAANY"]
[Sat Feb 28 17:15:58.953280 2026] [:error] [pid 39185:tid 39265] [client 4.205.9.11:31572] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaKyThVE-FfM89u7BQZs4wAAAJM"]
[Sat Feb 28 17:15:59.409358 2026] [:error] [pid 39184:tid 39233] [client 4.205.9.11:31568] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaKyT1tZF9Zd_U7easA7zgAAAE4"]
[Sat Feb 28 17:15:59.829514 2026] [:error] [pid 39183:tid 39216] [client 4.205.9.11:31578] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaKyTxCf4HvhVePw3LY2dQAAABg"]
[Sat Feb 28 17:16:00.240589 2026] [:error] [pid 39183:tid 39201] [client 4.205.9.11:39104] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gi.php"] [unique_id "aaKyUBCf4HvhVePw3LY2eAAAAAk"]
[Sat Feb 28 17:16:00.662113 2026] [:error] [pid 39183:tid 39198] [client 4.205.9.11:7116] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gi.php"] [unique_id "aaKyUBCf4HvhVePw3LY2fAAAAAY"]
[Sat Feb 28 17:16:01.083933 2026] [:error] [pid 39184:tid 39228] [client 4.205.9.11:39166] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gi.php"] [unique_id "aaKyUVtZF9Zd_U7easA70QAAAEk"]
[Sat Feb 28 17:16:01.500013 2026] [:error] [pid 39184:tid 39234] [client 4.205.9.11:39134] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gi.php"] [unique_id "aaKyUVtZF9Zd_U7easA71QAAAE8"]
[Sat Feb 28 17:16:01.916073 2026] [:error] [pid 49763:tid 49786] [client 4.205.9.11:39118] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e0v9e95c.php"] [unique_id "aaKyUbTHSOG_yf2PpqENfgAAAdQ"]
[Sat Feb 28 17:16:02.340457 2026] [:error] [pid 49763:tid 49768] [client 4.205.9.11:39135] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e0v9e95c.php"] [unique_id "aaKyUrTHSOG_yf2PpqENgAAAAcI"]
[Sat Feb 28 17:16:02.767282 2026] [:error] [pid 49763:tid 49773] [client 4.205.9.11:39147] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e0v9e95c.php"] [unique_id "aaKyUrTHSOG_yf2PpqENgwAAAcc"]
[Sat Feb 28 17:16:03.183693 2026] [:error] [pid 39185:tid 39258] [client 4.205.9.11:31577] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e0v9e95c.php"] [unique_id "aaKyUxVE-FfM89u7BQZs5gAAAIw"]
[Sat Feb 28 17:16:03.601306 2026] [:error] [pid 49763:tid 49783] [client 4.205.9.11:31576] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2gz1dxix.php"] [unique_id "aaKyU7THSOG_yf2PpqENhgAAAdE"]
[Sat Feb 28 17:16:04.008475 2026] [:error] [pid 39184:tid 39230] [client 4.205.9.11:39152] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2gz1dxix.php"] [unique_id "aaKyVFtZF9Zd_U7easA72wAAAEs"]
[Sat Feb 28 17:16:04.420174 2026] [:error] [pid 39184:tid 39241] [client 4.205.9.11:31580] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2gz1dxix.php"] [unique_id "aaKyVFtZF9Zd_U7easA73gAAAFY"]
[Sat Feb 28 17:16:04.851101 2026] [:error] [pid 52460:tid 52470] [client 4.205.9.11:39154] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2gz1dxix.php"] [unique_id "aaKyVLLWOogAgHGh62SyQgAAAYc"]
[Sat Feb 28 17:16:05.286075 2026] [:error] [pid 39184:tid 39235] [client 4.205.9.11:39167] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws75.php"] [unique_id "aaKyVVtZF9Zd_U7easA74QAAAFA"]
[Sat Feb 28 17:16:05.701688 2026] [:error] [pid 11791:tid 11811] [client 4.205.9.11:31570] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws75.php"] [unique_id "aaKyVWuX5e1Q32gqxH1_ggAAARI"]
[Sat Feb 28 17:16:06.119125 2026] [:error] [pid 39183:tid 39205] [client 4.205.9.11:31557] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws75.php"] [unique_id "aaKyVhCf4HvhVePw3LY2kQAAAA0"]
[Sat Feb 28 17:16:06.531624 2026] [:error] [pid 49763:tid 49770] [client 4.205.9.11:39162] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws75.php"] [unique_id "aaKyVrTHSOG_yf2PpqENjgAAAcQ"]
[Sat Feb 28 17:16:06.946752 2026] [:error] [pid 52460:tid 52483] [client 4.205.9.11:39133] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "aaKyVrLWOogAgHGh62SyRAAAAZQ"]
[Sat Feb 28 17:16:07.362413 2026] [:error] [pid 39292:tid 39296] [client 4.205.9.11:39113] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "aaKyV6IAO5fN7BxyqcEkXwAAAMI"]
[Sat Feb 28 17:16:07.782288 2026] [:error] [pid 39183:tid 39197] [client 4.205.9.11:39124] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "aaKyVxCf4HvhVePw3LY2mwAAAAU"]
[Sat Feb 28 17:16:08.202053 2026] [:error] [pid 39183:tid 39196] [client 4.205.9.11:7135] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "aaKyWBCf4HvhVePw3LY2nwAAAAQ"]
[Sat Feb 28 17:16:08.619504 2026] [:error] [pid 52460:tid 52486] [client 4.205.9.11:31582] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaKyWLLWOogAgHGh62SyRQAAAZc"]
[Sat Feb 28 17:16:09.052907 2026] [:error] [pid 39292:tid 39306] [client 4.205.9.11:39142] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaKyWaIAO5fN7BxyqcEkaAAAAMw"]
[Sat Feb 28 17:16:09.484834 2026] [:error] [pid 49763:tid 49785] [client 4.205.9.11:7143] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaKyWbTHSOG_yf2PpqENkgAAAdM"]
[Sat Feb 28 17:16:09.930272 2026] [:error] [pid 39183:tid 39197] [client 4.205.9.11:39165] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaKyWRCf4HvhVePw3LY2qgAAAAU"]
[Sat Feb 28 17:16:10.352669 2026] [:error] [pid 11791:tid 11794] [client 4.205.9.11:39164] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaKyWmuX5e1Q32gqxH1_hwAAAQE"]
[Sat Feb 28 17:16:10.814114 2026] [:error] [pid 39183:tid 39192] [client 4.205.9.11:39139] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaKyWhCf4HvhVePw3LY2rwAAAAA"]
[Sat Feb 28 17:16:11.242957 2026] [:error] [pid 39183:tid 39200] [client 4.205.9.11:7126] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaKyWxCf4HvhVePw3LY2sQAAAAg"]
[Sat Feb 28 17:16:11.685622 2026] [:error] [pid 39185:tid 39268] [client 4.205.9.11:39155] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaKyWxVE-FfM89u7BQZs6QAAAJY"]
[Sat Feb 28 17:16:12.117749 2026] [:error] [pid 22194:tid 22207] [client 4.205.9.11:39131] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-f.php"] [unique_id "aaKyXH6mbajs3bzQGyt4xQAAAUs"]
[Sat Feb 28 17:16:12.538702 2026] [:error] [pid 22194:tid 22210] [client 4.205.9.11:39158] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-f.php"] [unique_id "aaKyXH6mbajs3bzQGyt4xwAAAU4"]
[Sat Feb 28 17:16:12.968323 2026] [:error] [pid 39183:tid 39214] [client 4.205.9.11:7139] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-f.php"] [unique_id "aaKyXBCf4HvhVePw3LY2ugAAABY"]
[Sat Feb 28 17:16:13.392062 2026] [:error] [pid 39184:tid 39232] [client 4.205.9.11:31561] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-f.php"] [unique_id "aaKyXVtZF9Zd_U7easA75gAAAE0"]
[Sat Feb 28 17:16:13.837517 2026] [:error] [pid 39183:tid 39200] [client 4.205.9.11:31554] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aaKyXRCf4HvhVePw3LY2wAAAAAg"]
[Sat Feb 28 17:16:14.261740 2026] [:error] [pid 39183:tid 39206] [client 4.205.9.11:39107] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aaKyXhCf4HvhVePw3LY2xAAAAA4"]
[Sat Feb 28 17:16:14.732164 2026] [:error] [pid 39184:tid 39243] [client 4.205.9.11:39127] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aaKyXltZF9Zd_U7easA76AAAAFg"]
[Sat Feb 28 17:16:15.215234 2026] [:error] [pid 49763:tid 49779] [client 4.205.9.11:39114] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aaKyX7THSOG_yf2PpqENmAAAAc0"]
[Sat Feb 28 17:16:15.639563 2026] [:error] [pid 39183:tid 39202] [client 4.205.9.11:39149] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx78.php"] [unique_id "aaKyXxCf4HvhVePw3LY2zgAAAAo"]
[Sat Feb 28 17:16:16.053224 2026] [:error] [pid 39183:tid 39212] [client 4.205.9.11:31565] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx78.php"] [unique_id "aaKyYBCf4HvhVePw3LY20AAAABQ"]
[Sat Feb 28 17:16:16.472651 2026] [:error] [pid 39292:tid 39307] [client 4.205.9.11:39132] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx78.php"] [unique_id "aaKyYKIAO5fN7BxyqcEkgwAAAM0"]
[Sat Feb 28 17:16:16.888913 2026] [:error] [pid 49763:tid 49784] [client 4.205.9.11:39145] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx78.php"] [unique_id "aaKyYLTHSOG_yf2PpqENmQAAAdI"]
[Sat Feb 28 17:16:17.311789 2026] [:error] [pid 39183:tid 39200] [client 4.205.9.11:31590] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaKyYRCf4HvhVePw3LY21AAAAAg"]
[Sat Feb 28 17:16:17.746306 2026] [:error] [pid 39183:tid 39193] [client 4.205.9.11:7123] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaKyYRCf4HvhVePw3LY21wAAAAE"]
[Sat Feb 28 17:16:18.187718 2026] [:error] [pid 39184:tid 39221] [client 4.205.9.11:31579] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaKyYltZF9Zd_U7easA77AAAAEI"]
[Sat Feb 28 17:16:18.600897 2026] [:error] [pid 49763:tid 49785] [client 4.205.9.11:39125] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaKyYrTHSOG_yf2PpqENoAAAAdM"]
[Sat Feb 28 17:16:19.016732 2026] [:error] [pid 39183:tid 39214] [client 4.205.9.11:39150] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0bb45ctt.php"] [unique_id "aaKyYxCf4HvhVePw3LY23gAAABY"]
[Sat Feb 28 17:16:19.432303 2026] [:error] [pid 39184:tid 39223] [client 4.205.9.11:31602] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0bb45ctt.php"] [unique_id "aaKyY1tZF9Zd_U7easA77gAAAEQ"]
[Sat Feb 28 17:16:19.846869 2026] [:error] [pid 11791:tid 11805] [client 4.205.9.11:31569] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0bb45ctt.php"] [unique_id "aaKyY2uX5e1Q32gqxH1_igAAAQw"]
[Sat Feb 28 17:16:20.285429 2026] [:error] [pid 39292:tid 39308] [client 4.205.9.11:31608] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0bb45ctt.php"] [unique_id "aaKyZKIAO5fN7BxyqcEkjQAAAM4"]
[Sat Feb 28 17:16:20.711828 2026] [:error] [pid 22194:tid 22197] [client 4.205.9.11:7145] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aaKyZH6mbajs3bzQGyt4zgAAAUE"]
[Sat Feb 28 17:16:21.138916 2026] [:error] [pid 39185:tid 39260] [client 4.205.9.11:39115] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aaKyZRVE-FfM89u7BQZs7gAAAI4"]
[Sat Feb 28 17:16:21.548499 2026] [:error] [pid 39185:tid 39267] [client 4.205.9.11:39122] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aaKyZRVE-FfM89u7BQZs8QAAAJU"]
[Sat Feb 28 17:16:21.959934 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:31562] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aaKyZbLWOogAgHGh62SyTwAAAZM"]
[Sat Feb 28 17:16:22.386528 2026] [:error] [pid 39184:tid 39241] [client 4.205.9.11:31555] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aaKyZltZF9Zd_U7easA78AAAAFY"]
[Sat Feb 28 17:16:22.807225 2026] [:error] [pid 39292:tid 39318] [client 4.205.9.11:7106] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aaKyZqIAO5fN7BxyqcEkmgAAANg"]
[Sat Feb 28 17:16:23.221587 2026] [:error] [pid 39292:tid 39294] [client 4.205.9.11:7131] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aaKyZ6IAO5fN7BxyqcEkoAAAAMA"]
[Sat Feb 28 17:16:23.637106 2026] [:error] [pid 39184:tid 39235] [client 4.205.9.11:31581] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aaKyZ1tZF9Zd_U7easA79AAAAFA"]
[Sat Feb 28 17:16:24.061622 2026] [:error] [pid 49763:tid 49790] [client 4.205.9.11:39106] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aaKyaLTHSOG_yf2PpqENqQAAAdg"]
[Sat Feb 28 17:16:24.491243 2026] [:error] [pid 52460:tid 52471] [client 4.205.9.11:7134] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aaKyaLLWOogAgHGh62SyUgAAAYg"]
[Sat Feb 28 17:16:24.909014 2026] [:error] [pid 39184:tid 39228] [client 4.205.9.11:39153] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aaKyaFtZF9Zd_U7easA7-gAAAEk"]
[Sat Feb 28 17:16:25.392650 2026] [:error] [pid 39184:tid 39243] [client 4.205.9.11:31609] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aaKyaVtZF9Zd_U7easA7_QAAAFg"]
[Sat Feb 28 17:16:25.818789 2026] [:error] [pid 39292:tid 39307] [client 4.205.9.11:31574] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aaKyaaIAO5fN7BxyqcEkqQAAAM0"]
[Sat Feb 28 17:16:26.239536 2026] [:error] [pid 39183:tid 39203] [client 4.205.9.11:31583] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aaKyahCf4HvhVePw3LY27wAAAAs"]
[Sat Feb 28 17:16:26.683727 2026] [:error] [pid 49763:tid 49784] [client 4.205.9.11:31552] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aaKyarTHSOG_yf2PpqENuAAAAdI"]
[Sat Feb 28 17:16:27.105335 2026] [:error] [pid 39185:tid 39264] [client 4.205.9.11:31560] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aaKyaxVE-FfM89u7BQZs-AAAAJI"]
[Sat Feb 28 17:16:27.529592 2026] [:error] [pid 39184:tid 39240] [client 4.205.9.11:39141] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aaKya1tZF9Zd_U7easA8AAAAAFU"]
[Sat Feb 28 17:16:27.946419 2026] [:error] [pid 39183:tid 39192] [client 4.205.9.11:7150] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aaKyaxCf4HvhVePw3LY29wAAAAA"]
[Sat Feb 28 17:16:28.363232 2026] [:error] [pid 49763:tid 49767] [client 4.205.9.11:7130] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aaKybLTHSOG_yf2PpqENyAAAAcE"]
[Sat Feb 28 17:16:28.793334 2026] [:error] [pid 49763:tid 49788] [client 4.205.9.11:7121] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aaKybLTHSOG_yf2PpqENzgAAAdY"]
[Sat Feb 28 17:16:29.213514 2026] [:error] [pid 49763:tid 49770] [client 4.205.9.11:31592] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/62ix02bk.php"] [unique_id "aaKybbTHSOG_yf2PpqEN1AAAAcQ"]
[Sat Feb 28 17:16:29.664955 2026] [:error] [pid 49763:tid 49779] [client 4.205.9.11:31584] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/62ix02bk.php"] [unique_id "aaKybbTHSOG_yf2PpqEN2wAAAc0"]
[Sat Feb 28 17:16:30.091815 2026] [:error] [pid 49763:tid 49780] [client 4.205.9.11:7127] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/62ix02bk.php"] [unique_id "aaKybrTHSOG_yf2PpqEN4wAAAc4"]
[Sat Feb 28 17:16:30.537497 2026] [:error] [pid 49763:tid 49774] [client 4.205.9.11:31591] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/62ix02bk.php"] [unique_id "aaKybrTHSOG_yf2PpqEN6QAAAcg"]
[Sat Feb 28 17:16:30.994647 2026] [:error] [pid 39185:tid 39255] [client 4.205.9.11:39123] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaKybhVE-FfM89u7BQZs-gAAAIk"]
[Sat Feb 28 17:16:31.430048 2026] [:error] [pid 22194:tid 22213] [client 4.205.9.11:7065] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaKyb36mbajs3bzQGyt40AAAAVE"]
[Sat Feb 28 17:16:31.874259 2026] [:error] [pid 39292:tid 39318] [client 4.205.9.11:31599] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaKyb6IAO5fN7BxyqcEkuQAAANg"]
[Sat Feb 28 17:16:32.289669 2026] [:error] [pid 39184:tid 39222] [client 4.205.9.11:31595] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaKycFtZF9Zd_U7easA8BQAAAEM"]
[Sat Feb 28 17:16:32.711338 2026] [:error] [pid 39183:tid 39216] [client 4.205.9.11:39108] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6ijmjpa.php"] [unique_id "aaKycBCf4HvhVePw3LY3AAAAABg"]
[Sat Feb 28 17:16:33.127822 2026] [:error] [pid 39184:tid 39229] [client 4.205.9.11:31563] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6ijmjpa.php"] [unique_id "aaKycVtZF9Zd_U7easA8BgAAAEo"]
[Sat Feb 28 17:16:33.548177 2026] [:error] [pid 39292:tid 39315] [client 4.205.9.11:39130] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6ijmjpa.php"] [unique_id "aaKycaIAO5fN7BxyqcEkvQAAANU"]
[Sat Feb 28 17:16:33.968993 2026] [:error] [pid 39185:tid 39263] [client 4.205.9.11:39140] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6ijmjpa.php"] [unique_id "aaKycRVE-FfM89u7BQZtAAAAAJE"]
[Sat Feb 28 17:16:34.386462 2026] [:error] [pid 39184:tid 39233] [client 4.205.9.11:7113] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaKycltZF9Zd_U7easA8CQAAAE4"]
[Sat Feb 28 17:16:34.801731 2026] [:error] [pid 39184:tid 39220] [client 4.205.9.11:39136] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaKycltZF9Zd_U7easA8CgAAAEE"]
[Sat Feb 28 17:16:35.216925 2026] [:error] [pid 11791:tid 11807] [client 4.205.9.11:39111] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaKyc2uX5e1Q32gqxH1_kgAAAQ4"]
[Sat Feb 28 17:16:35.632461 2026] [:error] [pid 39184:tid 39231] [client 4.205.9.11:7119] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_jVML8V37.php"] [unique_id "aaKyc1tZF9Zd_U7easA8DwAAAEw"]
[Sat Feb 28 17:16:36.051728 2026] [:error] [pid 49763:tid 49773] [client 4.205.9.11:7147] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4wj632p1.php"] [unique_id "aaKydLTHSOG_yf2PpqEOCAAAAcc"]
[Sat Feb 28 17:16:36.462556 2026] [:error] [pid 39183:tid 39213] [client 4.205.9.11:39144] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4wj632p1.php"] [unique_id "aaKydBCf4HvhVePw3LY3CAAAABU"]
[Sat Feb 28 17:16:36.877908 2026] [:error] [pid 39184:tid 39239] [client 4.205.9.11:39105] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4wj632p1.php"] [unique_id "aaKydFtZF9Zd_U7easA8FgAAAFQ"]
[Sat Feb 28 17:16:37.299937 2026] [:error] [pid 11791:tid 11796] [client 4.205.9.11:31587] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4wj632p1.php"] [unique_id "aaKydWuX5e1Q32gqxH1_mgAAAQM"]
[Sat Feb 28 17:16:37.719485 2026] [:error] [pid 39184:tid 39225] [client 4.205.9.11:31573] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "aaKydVtZF9Zd_U7easA8IQAAAEY"]
[Sat Feb 28 17:16:38.136224 2026] [:error] [pid 39292:tid 39304] [client 4.205.9.11:7128] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "aaKydqIAO5fN7BxyqcEkywAAAMo"]
[Sat Feb 28 17:16:38.557122 2026] [:error] [pid 39184:tid 39227] [client 4.205.9.11:31605] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "aaKydltZF9Zd_U7easA8JwAAAEg"]
[Sat Feb 28 17:16:38.982784 2026] [:error] [pid 22194:tid 22207] [client 4.205.9.11:7152] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "aaKydn6mbajs3bzQGyt41wAAAUs"]
[Sat Feb 28 17:16:39.412524 2026] [:error] [pid 39183:tid 39200] [client 4.205.9.11:7151] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e31hmf9b.php"] [unique_id "aaKydxCf4HvhVePw3LY3LQAAAAg"]
[Sat Feb 28 17:16:39.829924 2026] [:error] [pid 39183:tid 39213] [client 4.205.9.11:7141] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e31hmf9b.php"] [unique_id "aaKydxCf4HvhVePw3LY3MgAAABU"]
[Sat Feb 28 17:16:40.265587 2026] [:error] [pid 39183:tid 39192] [client 4.205.9.11:39128] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e31hmf9b.php"] [unique_id "aaKyeBCf4HvhVePw3LY3OQAAAAA"]
[Sat Feb 28 17:16:40.691524 2026] [:error] [pid 11791:tid 11801] [client 4.205.9.11:39163] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e31hmf9b.php"] [unique_id "aaKyeGuX5e1Q32gqxH1_ogAAAQg"]
[Sat Feb 28 18:18:36.699753 2026] [:error] [pid 49763:tid 49773] [client 185.198.240.174:33719] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaLA_LTHSOG_yf2PpqFMtwAAAcc"]
[Sat Feb 28 18:18:41.312602 2026] [:error] [pid 39292:tid 39318] [client 185.198.240.177:24915] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaLBAaIAO5fN7BxyqcE-rQAAANg"]
[Sat Feb 28 18:18:49.389093 2026] [:error] [pid 52460:tid 52470] [client 185.198.240.167:62443] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaLBCbLWOogAgHGh62TxUgAAAYc"]
[Sat Feb 28 18:18:53.916048 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.167:33687] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaLBDbTHSOG_yf2PpqFM_gAAAdE"]
[Sat Feb 28 18:19:02.290083 2026] [:error] [pid 49763:tid 49784] [client 45.131.195.217:20909] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaLBFrTHSOG_yf2PpqFNEgAAAdI"]
[Sat Feb 28 18:19:05.580041 2026] [:error] [pid 39183:tid 39208] [client 173.239.214.179:37667] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaLBGRCf4HvhVePw3LZ1fgAAABA"]
[Sat Feb 28 18:19:06.222023 2026] [:error] [pid 49763:tid 49776] [client 185.198.240.98:40923] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaLBGrTHSOG_yf2PpqFNFgAAAco"]
[Sat Feb 28 18:19:06.702333 2026] [:error] [pid 49763:tid 49779] [client 45.131.195.216:36897] [client 45.131.195.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaLBGrTHSOG_yf2PpqFNGQAAAc0"]
[Sat Feb 28 18:19:08.266976 2026] [:error] [pid 39292:tid 39295] [client 185.198.240.169:21137] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaLBHKIAO5fN7BxyqcE-1gAAAME"]
[Sat Feb 28 18:19:08.814308 2026] [:error] [pid 39185:tid 39246] [client 185.198.240.165:61527] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaLBHBVE-FfM89u7BQZ7MwAAAIA"]
[Sat Feb 28 18:19:10.398218 2026] [:error] [pid 52460:tid 52479] [client 185.198.240.180:61189] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaLBHrLWOogAgHGh62Tx1QAAAZA"]
[Sat Feb 28 18:19:12.541047 2026] [:error] [pid 52460:tid 52470] [client 185.198.240.164:32779] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aaLBILLWOogAgHGh62Tx6wAAAYc"]
[Sat Feb 28 18:19:15.648009 2026] [:error] [pid 52460:tid 52474] [client 209.87.169.160:22509] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaLBI7LWOogAgHGh62TyDQAAAYs"]
[Sat Feb 28 18:19:17.400355 2026] [:error] [pid 52460:tid 52482] [client 185.198.240.179:53239] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaLBJbLWOogAgHGh62TyJQAAAZM"]
[Sat Feb 28 18:19:19.515320 2026] [:error] [pid 39183:tid 39202] [client 209.87.169.161:52399] [client 209.87.169.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaLBJxCf4HvhVePw3LZ1kQAAAAo"]
[Sat Feb 28 18:19:27.241623 2026] [:error] [pid 52460:tid 52466] [client 185.198.240.164:36665] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaLBL7LWOogAgHGh62TycQAAAYM"]
[Sat Feb 28 18:19:29.219564 2026] [:error] [pid 52460:tid 52465] [client 185.198.240.169:48831] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaLBMbLWOogAgHGh62TyjwAAAYI"]
[Sat Feb 28 18:19:32.248916 2026] [:error] [pid 39184:tid 39226] [client 209.87.169.156:52537] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaLBNFtZF9Zd_U7easBd_AAAAEc"]
[Sat Feb 28 18:19:34.142837 2026] [:error] [pid 39184:tid 39224] [client 185.198.240.165:49533] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaLBNltZF9Zd_U7easBeAgAAAEU"]
[Sat Feb 28 18:19:39.927500 2026] [:error] [pid 49763:tid 49777] [client 185.198.240.167:61277] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaLBO7THSOG_yf2PpqFNlQAAAcs"]
[Sat Feb 28 18:19:41.982307 2026] [:error] [pid 39292:tid 39316] [client 185.198.240.169:25047] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaLBPaIAO5fN7BxyqcE--wAAANY"]
[Sat Feb 28 18:19:43.936686 2026] [:error] [pid 39183:tid 39196] [client 45.131.195.215:32473] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaLBPxCf4HvhVePw3LZ2BwAAAAQ"]
[Sat Feb 28 18:19:44.472938 2026] [:error] [pid 49763:tid 49790] [client 185.198.240.177:23141] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaLBQLTHSOG_yf2PpqFNqgAAAdg"]
[Sat Feb 28 18:19:45.044311 2026] [:error] [pid 49763:tid 49779] [client 185.198.240.180:55249] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaLBQbTHSOG_yf2PpqFNsAAAAc0"]
[Sat Feb 28 18:19:49.639616 2026] [:error] [pid 39183:tid 39208] [client 209.87.169.160:41627] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaLBRRCf4HvhVePw3LZ2KAAAABA"]
[Sat Feb 28 18:19:50.138236 2026] [:error] [pid 39183:tid 39202] [client 185.198.240.166:25539] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaLBRhCf4HvhVePw3LZ2LAAAAAo"]
[Sat Feb 28 18:19:50.703082 2026] [:error] [pid 39183:tid 39206] [client 185.198.240.175:20721] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaLBRhCf4HvhVePw3LZ2MAAAAA4"]
[Sat Feb 28 18:20:01.688649 2026] [:error] [pid 39184:tid 39234] [client 173.239.214.180:47113] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aaLBUVtZF9Zd_U7easBeWQAAAE8"]
[Sat Feb 28 18:20:06.686667 2026] [:error] [pid 39184:tid 39222] [client 185.198.240.179:28279] [client 185.198.240.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.179, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaLBVltZF9Zd_U7easBebAAAAEM"]
[Sat Feb 28 18:20:21.786256 2026] [:error] [pid 39184:tid 39228] [client 185.198.240.179:28279] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaLBZVtZF9Zd_U7easBejwAAAEk"]
[Sat Feb 28 18:20:25.065447 2026] [:error] [pid 49763:tid 49766] [client 45.131.195.215:39619] [client 45.131.195.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.215, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaLBabTHSOG_yf2PpqFORAAAAcA"]
[Sat Feb 28 18:20:27.540349 2026] [:error] [pid 49763:tid 49767] [client 45.131.195.215:39619] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aaLBa7THSOG_yf2PpqFOSQAAAcE"]
[Sat Feb 28 18:20:40.478990 2026] [:error] [pid 52460:tid 52480] [client 185.198.240.178:42439] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaLBeLLWOogAgHGh62T0XwAAAZE"]
[Sat Feb 28 18:20:51.146561 2026] [:error] [pid 52460:tid 52471] [client 185.198.240.165:44539] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaLBg7LWOogAgHGh62T0-gAAAYg"]
[Sat Feb 28 18:20:54.531193 2026] [:error] [pid 49763:tid 49781] [client 185.198.240.161:20557] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaLBhrTHSOG_yf2PpqFObQAAAc8"]
[Sat Feb 28 18:20:58.869867 2026] [:error] [pid 39183:tid 39215] [client 45.131.195.252:41309] [client 45.131.195.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.252, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaLBihCf4HvhVePw3LZ3DQAAABc"]
[Sat Feb 28 18:21:00.455491 2026] [:error] [pid 39183:tid 39214] [client 45.131.195.252:41309] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaLBjBCf4HvhVePw3LZ3EAAAABY"]
[Sat Feb 28 18:21:22.463265 2026] [:error] [pid 39185:tid 39249] [client 45.131.195.216:50111] [client 45.131.195.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaLBohVE-FfM89u7BQZ7-QAAAIM"]
[Sat Feb 28 18:21:26.951355 2026] [:error] [pid 39185:tid 39262] [client 185.198.240.164:44353] [client 185.198.240.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.164, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaLBphVE-FfM89u7BQZ8BAAAAJA"]
[Sat Feb 28 18:21:31.981700 2026] [:error] [pid 39185:tid 39256] [client 185.198.240.164:44353] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaLBqxVE-FfM89u7BQZ8EgAAAIo"]
[Sat Feb 28 18:21:34.085452 2026] [:error] [pid 49763:tid 49775] [client 45.131.195.215:43825] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aaLBrrTHSOG_yf2PpqFPLgAAAck"]
[Sat Feb 28 18:21:37.127310 2026] [:error] [pid 52460:tid 52463] [client 185.198.240.162:65093] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaLBsbLWOogAgHGh62T2XAAAAYA"]
[Sat Feb 28 18:21:41.764808 2026] [:error] [pid 49763:tid 49789] [client 185.198.240.172:64137] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaLBtbTHSOG_yf2PpqFPVAAAAdc"]
[Sat Feb 28 18:21:42.348119 2026] [:error] [pid 52460:tid 52472] [client 209.87.169.159:48417] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaLBtrLWOogAgHGh62T2eAAAAYk"]
[Sat Feb 28 18:21:50.161169 2026] [:error] [pid 52460:tid 52485] [client 185.198.240.164:24283] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaLBvrLWOogAgHGh62T2vwAAAZY"]
[Sat Feb 28 18:21:52.152848 2026] [:error] [pid 39183:tid 39192] [client 185.198.240.168:58969] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaLBwBCf4HvhVePw3LZ3qgAAAAA"]
[Sat Feb 28 18:21:56.789328 2026] [:error] [pid 49763:tid 49768] [client 209.87.169.170:37087] [client 209.87.169.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aaLBxLTHSOG_yf2PpqFPcwAAAcI"]
[Sat Feb 28 18:22:01.569895 2026] [:error] [pid 39183:tid 39212] [client 185.198.240.172:51469] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaLByRCf4HvhVePw3LZ3vgAAABQ"]
[Sat Feb 28 18:22:04.925163 2026] [:error] [pid 52460:tid 52474] [client 209.87.169.159:44211] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aaLBzLLWOogAgHGh62T3GAAAAYs"]
[Sat Feb 28 18:22:09.476924 2026] [:error] [pid 49763:tid 49767] [client 209.87.169.164:62263] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaLB0bTHSOG_yf2PpqFPoAAAAcE"]
[Sat Feb 28 18:22:19.471491 2026] [:error] [pid 49763:tid 49767] [client 185.198.240.167:24063] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaLB27THSOG_yf2PpqFP1QAAAcE"]
[Sat Feb 28 18:22:20.079977 2026] [:error] [pid 52460:tid 52473] [client 185.198.240.167:55135] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaLB3LLWOogAgHGh62T3VAAAAYo"]
[Sat Feb 28 18:22:20.643020 2026] [:error] [pid 52460:tid 52478] [client 45.131.195.214:42973] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaLB3LLWOogAgHGh62T3WgAAAY8"]
[Sat Feb 28 18:22:21.207027 2026] [:error] [pid 49763:tid 49770] [client 209.87.169.168:47041] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaLB3bTHSOG_yf2PpqFP1gAAAcQ"]
[Sat Feb 28 18:22:23.153359 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.162:47833] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaLB37THSOG_yf2PpqFP4AAAAdE"]
[Sat Feb 28 18:22:23.950065 2026] [:error] [pid 52460:tid 52486] [client 173.239.214.181:26919] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLB37LWOogAgHGh62T3ZwAAAZc"]
[Sat Feb 28 18:22:27.514060 2026] [:error] [pid 39185:tid 39252] [client 185.198.240.158:47701] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaLB4xVE-FfM89u7BQZ8ZwAAAIY"]
[Sat Feb 28 18:22:28.173992 2026] [:error] [pid 49763:tid 49775] [client 209.87.169.169:49185] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaLB5LTHSOG_yf2PpqFP8gAAAck"]
[Sat Feb 28 18:22:28.676705 2026] [:error] [pid 52460:tid 52469] [client 185.198.240.98:44921] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaLB5LLWOogAgHGh62T3hQAAAYY"]
[Sat Feb 28 18:22:29.260784 2026] [:error] [pid 39184:tid 39243] [client 185.198.240.181:42031] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaLB5VtZF9Zd_U7easBfkgAAAFg"]
[Sat Feb 28 18:22:31.209611 2026] [:error] [pid 39185:tid 39257] [client 185.198.240.162:52223] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaLB5xVE-FfM89u7BQZ8bQAAAIs"]
[Sat Feb 28 18:22:34.535048 2026] [:error] [pid 52460:tid 52480] [client 185.198.240.158:21679] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaLB6rLWOogAgHGh62T3pQAAAZE"]
[Sat Feb 28 18:22:40.207015 2026] [:error] [pid 39184:tid 39228] [client 209.87.169.166:29297] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaLB8FtZF9Zd_U7easBfnQAAAEk"]
[Sat Feb 28 18:22:55.128267 2026] [:error] [pid 49763:tid 49774] [client 185.198.240.158:63289] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaLB_7THSOG_yf2PpqFQRAAAAcg"]
[Sat Feb 28 18:22:59.573837 2026] [:error] [pid 11791:tid 11806] [client 173.239.214.181:55171] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaLCA2uX5e1Q32gqxH2ThwAAAQ0"]
[Sat Feb 28 18:23:00.092082 2026] [:error] [pid 52460:tid 52475] [client 173.239.214.180:24093] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaLCBLLWOogAgHGh62T39AAAAYw"]
[Sat Feb 28 18:23:07.917069 2026] [:error] [pid 39183:tid 39195] [client 185.198.240.173:35829] [client 185.198.240.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaLCCxCf4HvhVePw3LZ4VQAAAAM"]
[Sat Feb 28 18:23:13.343922 2026] [proxy_fcgi:error] [pid 39184:tid 39229] [client 185.198.240.167:33493] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:23:13.613040 2026] [proxy_fcgi:error] [pid 39184:tid 39219] [client 185.198.240.167:33493] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:23:13.861589 2026] [proxy_fcgi:error] [pid 39184:tid 39233] [client 185.198.240.167:33493] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:23:18.809352 2026] [:error] [pid 39184:tid 39221] [client 185.198.240.167:33493] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaLCFltZF9Zd_U7easBf8QAAAEI"]
[Sat Feb 28 18:23:19.363404 2026] [:error] [pid 39292:tid 39294] [client 185.198.240.173:42491] [client 185.198.240.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaLCF6IAO5fN7BxyqcE_7wAAAMA"]
[Sat Feb 28 18:23:19.878286 2026] [:error] [pid 39183:tid 39212] [client 209.87.169.171:38797] [client 209.87.169.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaLCFxCf4HvhVePw3LZ4ewAAABQ"]
[Sat Feb 28 18:23:20.387516 2026] [:error] [pid 39184:tid 39243] [client 185.198.240.175:51433] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaLCGFtZF9Zd_U7easBf9QAAAFg"]
[Sat Feb 28 18:23:20.911167 2026] [:error] [pid 39292:tid 39306] [client 185.198.240.173:65317] [client 185.198.240.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaLCGKIAO5fN7BxyqcE_8QAAAMw"]
[Sat Feb 28 18:23:21.432095 2026] [:error] [pid 22194:tid 22198] [client 185.198.240.180:60615] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaLCGX6mbajs3bzQGyuDbgAAAUI"]
[Sat Feb 28 18:23:23.133561 2026] [:error] [pid 49763:tid 49778] [client 185.198.240.178:40237] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaLCG7THSOG_yf2PpqFQogAAAcw"]
[Sat Feb 28 18:23:23.634674 2026] [:error] [pid 49763:tid 49767] [client 45.131.195.214:35761] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaLCG7THSOG_yf2PpqFQpgAAAcE"]
[Sat Feb 28 18:23:24.102975 2026] [:error] [pid 49763:tid 49781] [client 209.87.169.156:29329] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaLCHLTHSOG_yf2PpqFQqQAAAc8"]
[Sat Feb 28 18:23:24.638662 2026] [:error] [pid 49763:tid 49775] [client 185.198.240.175:59791] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaLCHLTHSOG_yf2PpqFQrQAAAck"]
[Sat Feb 28 18:23:27.724899 2026] [:error] [pid 52460:tid 52481] [client 45.131.195.252:49817] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaLCH7LWOogAgHGh62T4LwAAAZI"]
[Sat Feb 28 18:23:29.541296 2026] [:error] [pid 39184:tid 39234] [client 209.87.169.166:58117] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaLCIVtZF9Zd_U7easBgAAAAAE8"]
[Sat Feb 28 18:23:32.857571 2026] [:error] [pid 52460:tid 52471] [client 45.131.195.252:28197] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaLCJLLWOogAgHGh62T4SAAAAYg"]
[Sat Feb 28 18:23:36.790504 2026] [:error] [pid 49763:tid 49771] [client 209.87.169.158:60721] [client 209.87.169.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaLCKLTHSOG_yf2PpqFQ2QAAAcU"]
[Sat Feb 28 18:23:41.370871 2026] [:error] [pid 39183:tid 39213] [client 185.198.240.181:25485] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaLCLRCf4HvhVePw3LZ4qAAAABU"]
[Sat Feb 28 18:23:47.026065 2026] [:error] [pid 39183:tid 39200] [client 45.131.195.215:43255] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaLCMxCf4HvhVePw3LZ4ugAAAAg"]
[Sat Feb 28 18:23:48.947808 2026] [:error] [pid 52460:tid 52485] [client 185.198.240.166:21689] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaLCNLLWOogAgHGh62T4aAAAAZY"]
[Sat Feb 28 18:24:10.528343 2026] [:error] [pid 52460:tid 52477] [client 185.198.240.171:48409] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaLCSrLWOogAgHGh62T4wwAAAY4"]
[Sat Feb 28 18:24:11.040885 2026] [:error] [pid 39183:tid 39216] [client 209.87.169.163:45985] [client 209.87.169.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaLCSxCf4HvhVePw3LZ47gAAABg"]
[Sat Feb 28 18:24:11.533903 2026] [:error] [pid 22194:tid 22215] [client 209.87.169.173:45391] [client 209.87.169.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.173, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaLCS36mbajs3bzQGyuDggAAAVM"]
[Sat Feb 28 18:24:14.385952 2026] [:error] [pid 22194:tid 22203] [client 209.87.169.173:45391] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaLCTn6mbajs3bzQGyuDhAAAAUc"]
[Sat Feb 28 18:24:17.591740 2026] [:error] [pid 39183:tid 39197] [client 45.131.195.214:27823] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLCURCf4HvhVePw3LZ5EwAAAAU"]
[Sat Feb 28 18:24:18.142130 2026] [:error] [pid 39184:tid 39226] [client 209.87.169.159:21721] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaLCUltZF9Zd_U7easBgTwAAAEc"]
[Sat Feb 28 18:24:23.821399 2026] [:error] [pid 39292:tid 39297] [client 185.198.240.175:36529] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaLCV6IAO5fN7BxyqcFAGAAAAMM"]
[Sat Feb 28 18:24:24.371216 2026] [:error] [pid 49763:tid 49790] [client 209.87.169.156:49585] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aaLCWLTHSOG_yf2PpqFRnwAAAdg"]
[Sat Feb 28 18:24:31.109340 2026] [:error] [pid 49763:tid 49770] [client 185.198.240.181:31763] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaLCX7THSOG_yf2PpqFR0wAAAcQ"]
[Sat Feb 28 18:24:34.401559 2026] [proxy_fcgi:error] [pid 49763:tid 49769] [client 209.87.169.156:30995] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:24:36.011962 2026] [:error] [pid 49763:tid 49768] [client 209.87.169.156:30995] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "aaLCZLTHSOG_yf2PpqFR_gAAAcI"]
[Sat Feb 28 18:24:36.562766 2026] [:error] [pid 39183:tid 39211] [client 185.198.240.169:29525] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaLCZBCf4HvhVePw3LZ5YAAAABM"]
[Sat Feb 28 18:24:39.746641 2026] [:error] [pid 49763:tid 49786] [client 173.239.214.179:60709] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaLCZ7THSOG_yf2PpqFSFwAAAdQ"]
[Sat Feb 28 18:24:40.293087 2026] [:error] [pid 39292:tid 39294] [client 45.131.195.252:47635] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaLCaKIAO5fN7BxyqcFAHAAAAMA"]
[Sat Feb 28 18:24:49.892211 2026] [:error] [pid 39183:tid 39211] [client 209.87.169.165:48189] [client 209.87.169.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaLCcRCf4HvhVePw3LZ5lgAAABM"]
[Sat Feb 28 18:24:50.428302 2026] [:error] [pid 49763:tid 49773] [client 209.87.169.156:40571] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaLCcrTHSOG_yf2PpqFSPQAAAcc"]
[Sat Feb 28 18:24:56.281614 2026] [:error] [pid 52460:tid 52480] [client 185.198.240.162:35687] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aaLCeLLWOogAgHGh62T5dAAAAZE"]
[Sat Feb 28 18:24:56.791559 2026] [:error] [pid 39183:tid 39212] [client 209.87.169.169:56685] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaLCeBCf4HvhVePw3LZ5rAAAABQ"]
[Sat Feb 28 18:24:57.351596 2026] [:error] [pid 52460:tid 52487] [client 209.87.169.159:35257] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaLCebLWOogAgHGh62T5dwAAAZg"]
[Sat Feb 28 18:25:04.930676 2026] [:error] [pid 52460:tid 52469] [client 209.87.169.166:61831] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaLCgLLWOogAgHGh62T5lgAAAYY"]
[Sat Feb 28 18:25:06.973041 2026] [:error] [pid 49763:tid 49772] [client 185.198.240.171:58177] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaLCgrTHSOG_yf2PpqFSoQAAAcY"]
[Sat Feb 28 18:25:15.716081 2026] [:error] [pid 39184:tid 39241] [client 185.198.240.174:54695] [client 185.198.240.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.174, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "aaLCi1tZF9Zd_U7easBgtwAAAFY"]
[Sat Feb 28 18:25:23.487922 2026] [:error] [pid 39184:tid 39231] [client 185.198.240.174:54695] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaLCk1tZF9Zd_U7easBgxAAAAEw"]
[Sat Feb 28 18:25:24.033274 2026] [:error] [pid 52460:tid 52486] [client 185.198.240.174:51105] [client 185.198.240.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.174, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaLClLLWOogAgHGh62T55gAAAZc"]
[Sat Feb 28 18:25:34.496644 2026] [:error] [pid 39292:tid 39317] [client 195.178.110.109:49176] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aaLCnqIAO5fN7BxyqcFAWwAAANc"]
[Sat Feb 28 18:25:38.317490 2026] [proxy_fcgi:error] [pid 52460:tid 52487] [client 185.198.240.174:51105] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:25:55.916995 2026] [:error] [pid 52460:tid 52473] [client 185.198.240.174:51105] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaLCs7LWOogAgHGh62T6eQAAAYo"]
[Sat Feb 28 18:26:00.828713 2026] [:error] [pid 49763:tid 49770] [client 185.198.240.159:33731] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaLCuLTHSOG_yf2PpqFT7gAAAcQ"]
[Sat Feb 28 18:26:04.297079 2026] [:error] [pid 39292:tid 39316] [client 173.239.214.179:42121] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaLCvKIAO5fN7BxyqcFAqQAAANY"]
[Sat Feb 28 18:26:16.262560 2026] [:error] [pid 52460:tid 52484] [client 185.198.240.175:48431] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaLCyLLWOogAgHGh62T65QAAAZU"]
[Sat Feb 28 18:26:19.602515 2026] [:error] [pid 39184:tid 39239] [client 209.87.169.170:24657] [client 209.87.169.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaLCy1tZF9Zd_U7easBhagAAAFQ"]
[Sat Feb 28 18:26:21.574804 2026] [:error] [pid 39183:tid 39193] [client 209.87.169.166:58565] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaLCzRCf4HvhVePw3LZ7nAAAAAE"]
[Sat Feb 28 18:26:27.411128 2026] [proxy_fcgi:error] [pid 49763:tid 49777] [client 209.87.169.169:64999] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:26:27.678129 2026] [proxy_fcgi:error] [pid 49763:tid 49769] [client 209.87.169.169:64999] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:26:27.926176 2026] [:error] [pid 49763:tid 49785] [client 209.87.169.169:64999] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaLC07THSOG_yf2PpqFUfgAAAdM"]
[Sat Feb 28 18:26:28.944847 2026] [:error] [pid 39183:tid 39200] [client 45.131.195.217:40475] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaLC1BCf4HvhVePw3LZ7xgAAAAg"]
[Sat Feb 28 18:26:38.271300 2026] [:error] [pid 39185:tid 39255] [client 185.198.240.172:61533] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaLC3hVE-FfM89u7BQZ9AgAAAIk"]
[Sat Feb 28 18:26:40.198915 2026] [:error] [pid 49763:tid 49788] [client 185.198.240.173:29859] [client 185.198.240.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aaLC4LTHSOG_yf2PpqFUvwAAAdY"]
[Sat Feb 28 18:26:44.411494 2026] [:error] [pid 49763:tid 49775] [client 209.87.169.160:57805] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaLC5LTHSOG_yf2PpqFVAQAAAck"]
[Sat Feb 28 18:26:54.144692 2026] [:error] [pid 52460:tid 52470] [client 185.198.240.165:54499] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaLC7rLWOogAgHGh62T7bwAAAYc"]
[Sat Feb 28 18:26:54.726250 2026] [proxy_fcgi:error] [pid 52460:tid 52466] [client 185.198.240.158:37015] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:26:57.708175 2026] [:error] [pid 52460:tid 52477] [client 185.198.240.158:37015] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaLC8bLWOogAgHGh62T7ewAAAY4"]
[Sat Feb 28 18:27:05.484312 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 209.87.169.162:27341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:27:07.015629 2026] [:error] [pid 39292:tid 39313] [client 209.87.169.162:27341] [client 209.87.169.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.162, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaLC-6IAO5fN7BxyqcFBBgAAANM"]
[Sat Feb 28 18:27:14.008751 2026] [:error] [pid 39292:tid 39305] [client 209.87.169.162:27341] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaLDAqIAO5fN7BxyqcFBEgAAAMs"]
[Sat Feb 28 18:27:16.078967 2026] [:error] [pid 49763:tid 49779] [client 209.87.169.158:32997] [client 209.87.169.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaLDBLTHSOG_yf2PpqFV0QAAAc0"]
[Sat Feb 28 18:27:20.648300 2026] [:error] [pid 49763:tid 49768] [client 209.87.169.167:47035] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaLDCLTHSOG_yf2PpqFWFQAAAcI"]
[Sat Feb 28 18:27:27.009167 2026] [:error] [pid 49763:tid 49776] [client 185.198.240.161:33923] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaLDD7THSOG_yf2PpqFWUAAAAco"]
[Sat Feb 28 18:27:28.956363 2026] [:error] [pid 39184:tid 39235] [client 209.87.169.165:23317] [client 209.87.169.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaLDEFtZF9Zd_U7easBh8gAAAFA"]
[Sat Feb 28 18:27:34.093290 2026] [:error] [pid 49763:tid 49777] [client 209.87.169.158:60381] [client 209.87.169.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaLDFrTHSOG_yf2PpqFWiQAAAcs"]
[Sat Feb 28 18:27:37.919427 2026] [proxy_fcgi:error] [pid 49763:tid 49785] [client 185.198.240.180:30053] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:27:38.170802 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.180:30053] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaLDGrTHSOG_yf2PpqFWogAAAdE"]
[Sat Feb 28 18:27:38.729726 2026] [proxy_fcgi:error] [pid 39183:tid 39197] [client 185.198.240.172:24651] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Sat Feb 28 18:27:39.299802 2026] [:error] [pid 49763:tid 49767] [client 209.87.169.157:61459] [client 209.87.169.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "aaLDG7THSOG_yf2PpqFWqAAAAcE"]
[Sat Feb 28 18:27:39.880125 2026] [:error] [pid 39184:tid 39227] [client 173.239.214.181:51701] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaLDG1tZF9Zd_U7easBiEAAAAEg"]
[Sat Feb 28 18:27:40.402168 2026] [:error] [pid 49763:tid 49785] [client 185.198.240.178:20999] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaLDHLTHSOG_yf2PpqFWrwAAAdM"]
[Sat Feb 28 18:27:40.934473 2026] [:error] [pid 39184:tid 39242] [client 185.198.240.166:40427] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaLDHFtZF9Zd_U7easBiFQAAAFc"]
[Sat Feb 28 18:27:41.458979 2026] [:error] [pid 49763:tid 49776] [client 185.198.240.166:27847] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaLDHbTHSOG_yf2PpqFWswAAAco"]
[Sat Feb 28 18:27:41.984770 2026] [:error] [pid 49763:tid 49767] [client 209.87.169.164:40719] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaLDHbTHSOG_yf2PpqFWtwAAAcE"]
[Sat Feb 28 18:27:45.670438 2026] [:error] [pid 11791:tid 11793] [client 185.198.240.168:28543] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaLDIWuX5e1Q32gqxH2VhAAAAQA"]
[Sat Feb 28 18:27:46.188894 2026] [:error] [pid 49763:tid 49784] [client 185.198.240.181:49405] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaLDIrTHSOG_yf2PpqFW0wAAAdI"]
[Sat Feb 28 18:27:46.710956 2026] [:error] [pid 39183:tid 39200] [client 45.131.195.215:35949] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaLDIhCf4HvhVePw3LZ9JAAAAAg"]
[Sat Feb 28 18:27:48.592683 2026] [:error] [pid 39184:tid 39232] [client 209.87.169.172:42973] [client 209.87.169.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaLDJFtZF9Zd_U7easBiOAAAAE0"]
[Sat Feb 28 18:27:52.138762 2026] [:error] [pid 49763:tid 49785] [client 185.198.240.177:30339] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaLDKLTHSOG_yf2PpqFW-gAAAdM"]
[Sat Feb 28 18:27:52.691453 2026] [proxy_fcgi:error] [pid 11791:tid 11816] [client 209.87.169.158:36685] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:27:57.102817 2026] [:error] [pid 11791:tid 11795] [client 209.87.169.158:36685] [client 209.87.169.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.158, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaLDLWuX5e1Q32gqxH2VlgAAAQI"]
[Sat Feb 28 18:28:04.740083 2026] [:error] [pid 11791:tid 11798] [client 209.87.169.158:36685] [client 209.87.169.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaLDNGuX5e1Q32gqxH2VoAAAAQU"]
[Sat Feb 28 18:28:05.316142 2026] [:error] [pid 52460:tid 52464] [client 45.131.195.217:33605] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaLDNbLWOogAgHGh62T8fAAAAYE"]
[Sat Feb 28 18:28:29.565008 2026] [:error] [pid 22194:tid 22214] [client 185.198.240.161:56499] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaLDTX6mbajs3bzQGyuEagAAAVI"]
[Sat Feb 28 18:28:30.062706 2026] [:error] [pid 39183:tid 39193] [client 209.87.169.173:47921] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaLDThCf4HvhVePw3LZ-DgAAAAE"]
[Sat Feb 28 18:28:30.606548 2026] [:error] [pid 52460:tid 52478] [client 185.198.240.177:33753] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaLDTrLWOogAgHGh62T81AAAAY8"]
[Sat Feb 28 18:28:38.802716 2026] [:error] [pid 52460:tid 52483] [client 185.198.240.162:30787] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaLDVrLWOogAgHGh62T9BAAAAZQ"]
[Sat Feb 28 18:28:39.606746 2026] [:error] [pid 49763:tid 49783] [client 209.87.169.163:53345] [client 209.87.169.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaLDV7THSOG_yf2PpqFYPgAAAdE"]
[Sat Feb 28 18:28:40.150885 2026] [:error] [pid 39185:tid 39246] [client 209.87.169.169:41523] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaLDWBVE-FfM89u7BQZ9NQAAAIA"]
[Sat Feb 28 18:28:45.668324 2026] [:error] [pid 39183:tid 39197] [client 185.198.240.172:44521] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaLDXRCf4HvhVePw3LZ-XQAAAAU"]
[Sat Feb 28 18:28:47.590455 2026] [:error] [pid 22194:tid 22202] [client 185.198.240.98:49617] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaLDX36mbajs3bzQGyuEfQAAAUY"]
[Sat Feb 28 18:28:50.817969 2026] [:error] [pid 49763:tid 49772] [client 173.239.214.180:51617] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaLDYrTHSOG_yf2PpqFYnwAAAcY"]
[Sat Feb 28 18:29:08.298180 2026] [:error] [pid 49763:tid 49781] [client 209.87.169.169:35417] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaLDdLTHSOG_yf2PpqFZYAAAAc8"]
[Sat Feb 28 18:29:11.883328 2026] [:error] [pid 39184:tid 39233] [client 185.198.240.158:58369] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "aaLDd1tZF9Zd_U7easBjIwAAAE4"]
[Sat Feb 28 18:29:20.038187 2026] [:error] [pid 52460:tid 52481] [client 185.198.240.178:30449] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaLDgLLWOogAgHGh62T9lQAAAZI"]
[Sat Feb 28 18:29:23.261476 2026] [:error] [pid 49763:tid 49768] [client 185.198.240.170:56911] [client 185.198.240.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaLDg7THSOG_yf2PpqFZ6QAAAcI"]
[Sat Feb 28 18:29:29.695101 2026] [:error] [pid 39183:tid 39204] [client 185.198.240.159:61643] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaLDiRCf4HvhVePw3LZ_cgAAAAw"]
[Sat Feb 28 18:29:36.786676 2026] [:error] [pid 52460:tid 52480] [client 209.87.169.167:44859] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaLDkLLWOogAgHGh62T94wAAAZE"]
[Sat Feb 28 18:29:40.589788 2026] [:error] [pid 39183:tid 39214] [client 185.198.240.161:58375] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaLDlBCf4HvhVePw3LaAPwAAABY"]
[Sat Feb 28 18:29:41.069169 2026] [:error] [pid 52460:tid 52468] [client 209.87.169.172:44875] [client 209.87.169.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaLDlbLWOogAgHGh62T-CQAAAYU"]
[Sat Feb 28 18:29:48.964848 2026] [:error] [pid 49763:tid 49778] [client 185.198.240.163:59813] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaLDnLTHSOG_yf2PpqFahgAAAcw"]
[Sat Feb 28 18:29:55.980635 2026] [:error] [pid 49763:tid 49786] [client 45.131.195.217:55739] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaLDo7THSOG_yf2PpqFanwAAAdQ"]
[Sat Feb 28 18:30:02.586548 2026] [:error] [pid 39183:tid 39209] [client 209.87.169.160:42797] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaLDqhCf4HvhVePw3LaAuAAAABE"]
[Sat Feb 28 18:30:03.268591 2026] [:error] [pid 39184:tid 39236] [client 185.198.240.158:26369] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaLDq1tZF9Zd_U7easBjmQAAAFE"]
[Sat Feb 28 18:30:07.375370 2026] [:error] [pid 22194:tid 22207] [client 185.198.240.159:23241] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaLDr36mbajs3bzQGyuErgAAAUs"]
[Sat Feb 28 18:30:12.205914 2026] [:error] [pid 52460:tid 52480] [client 45.131.195.253:24213] [client 45.131.195.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaLDtLLWOogAgHGh62T-eQAAAZE"]
[Sat Feb 28 18:30:12.787616 2026] [:error] [pid 39183:tid 39202] [client 45.131.195.217:54941] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaLDtBCf4HvhVePw3LaA-AAAAAo"]
[Sat Feb 28 18:30:21.598103 2026] [:error] [pid 39185:tid 39266] [client 209.87.169.162:42765] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaLDvRVE-FfM89u7BQZ9lwAAAJQ"]
[Sat Feb 28 18:30:24.879144 2026] [:error] [pid 49763:tid 49790] [client 209.87.169.159:62931] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaLDwLTHSOG_yf2PpqFbcwAAAdg"]
[Sat Feb 28 18:30:25.414999 2026] [:error] [pid 49763:tid 49787] [client 185.198.240.181:51135] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaLDwbTHSOG_yf2PpqFbdgAAAdU"]
[Sat Feb 28 18:30:28.806788 2026] [:error] [pid 49763:tid 49784] [client 209.87.169.165:28967] [client 209.87.169.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaLDxLTHSOG_yf2PpqFbmgAAAdI"]
[Sat Feb 28 18:30:30.998026 2026] [:error] [pid 52460:tid 52470] [client 45.131.195.252:22975] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaLDxrLWOogAgHGh62T-6AAAAYc"]
[Sat Feb 28 18:30:38.224691 2026] [:error] [pid 39183:tid 39209] [client 185.198.240.172:52571] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaLDzhCf4HvhVePw3LaCOgAAABE"]
[Sat Feb 28 18:30:41.303399 2026] [:error] [pid 49763:tid 49788] [client 209.87.169.170:53429] [client 209.87.169.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaLD0bTHSOG_yf2PpqFb0AAAAdY"]
[Sat Feb 28 18:30:44.528663 2026] [:error] [pid 39183:tid 39211] [client 209.87.169.169:35227] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaLD1BCf4HvhVePw3LaCfgAAABM"]
[Sat Feb 28 18:30:46.910325 2026] [:error] [pid 39292:tid 39308] [client 185.198.240.179:62677] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "aaLD1qIAO5fN7BxyqcFCOgAAAM4"]
[Sat Feb 28 18:30:48.910941 2026] [:error] [pid 49763:tid 49769] [client 45.131.195.217:30653] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaLD2LTHSOG_yf2PpqFcEAAAAcM"]
[Sat Feb 28 18:30:49.424098 2026] [:error] [pid 11791:tid 11797] [client 209.87.169.166:23909] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "aaLD2WuX5e1Q32gqxH2WYwAAAQQ"]
[Sat Feb 28 18:30:49.918943 2026] [:error] [pid 49763:tid 49787] [client 209.87.169.162:42489] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaLD2bTHSOG_yf2PpqFcGgAAAdU"]
[Sat Feb 28 18:30:58.357513 2026] [:error] [pid 39184:tid 39233] [client 185.198.240.168:62255] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaLD4ltZF9Zd_U7easBkGQAAAE4"]
[Sat Feb 28 18:31:03.407332 2026] [:error] [pid 22194:tid 22212] [client 185.198.240.171:37063] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaLD536mbajs3bzQGyuExgAAAVA"]
[Sat Feb 28 18:31:07.931885 2026] [:error] [pid 39183:tid 39193] [client 45.131.195.252:43777] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaLD6xCf4HvhVePw3LaDHAAAAAE"]
[Sat Feb 28 18:31:12.452859 2026] [:error] [pid 39184:tid 39227] [client 209.87.169.161:30323] [client 209.87.169.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaLD8FtZF9Zd_U7easBkPAAAAEg"]
[Sat Feb 28 18:31:20.515550 2026] [:error] [pid 39184:tid 39227] [client 209.87.169.165:52751] [client 209.87.169.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaLD-FtZF9Zd_U7easBkTwAAAEg"]
[Sat Feb 28 18:31:22.441993 2026] [:error] [pid 49763:tid 49774] [client 45.131.195.217:23987] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaLD-rTHSOG_yf2PpqFc0QAAAcg"]
[Sat Feb 28 18:31:24.320327 2026] [:error] [pid 39184:tid 39242] [client 209.87.169.161:37665] [client 209.87.169.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaLD_FtZF9Zd_U7easBkVwAAAFc"]
[Sat Feb 28 18:31:27.852579 2026] [:error] [pid 52460:tid 52470] [client 185.198.240.176:60351] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaLD_7LWOogAgHGh62T_cgAAAYc"]
[Sat Feb 28 18:31:40.623017 2026] [:error] [pid 49763:tid 49782] [client 173.239.214.179:22271] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaLEDLTHSOG_yf2PpqFdgwAAAdA"]
[Sat Feb 28 18:31:41.201242 2026] [:error] [pid 39292:tid 39299] [client 185.198.240.178:39937] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaLEDaIAO5fN7BxyqcFCjAAAAMU"]
[Sat Feb 28 18:31:45.722315 2026] [:error] [pid 39184:tid 39219] [client 45.131.195.215:55941] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaLEEVtZF9Zd_U7easBkngAAAEA"]
[Sat Feb 28 18:31:46.219514 2026] [:error] [pid 52460:tid 52473] [client 185.198.240.168:54857] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaLEErLWOogAgHGh62T_sgAAAYo"]
[Sat Feb 28 18:31:49.596521 2026] [:error] [pid 52460:tid 52476] [client 185.198.240.174:22611] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaLEFbLWOogAgHGh62T_wQAAAY0"]
[Sat Feb 28 18:31:50.108691 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.178:38575] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aaLEFrTHSOG_yf2PpqFdsQAAAdE"]
[Sat Feb 28 18:31:50.648079 2026] [:error] [pid 49763:tid 49766] [client 185.198.240.181:20369] [client 185.198.240.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.181, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaLEFrTHSOG_yf2PpqFdtwAAAcA"]
[Sat Feb 28 18:31:50.654162 2026] [proxy_fcgi:error] [pid 49763:tid 49766] [client 185.198.240.181:20369] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:31:50.887778 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.181:20369] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaLEFrTHSOG_yf2PpqFduwAAAdE"]
[Sat Feb 28 18:31:55.312432 2026] [:error] [pid 49763:tid 49769] [client 185.198.240.164:36101] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaLEG7THSOG_yf2PpqFd0wAAAcM"]
[Sat Feb 28 18:31:56.162698 2026] [:error] [pid 52460:tid 52476] [client 173.239.214.179:34595] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "aaLEHLLWOogAgHGh62T_5AAAAY0"]
[Sat Feb 28 18:32:06.537237 2026] [:error] [pid 39183:tid 39201] [client 185.198.240.180:43437] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaLEJhCf4HvhVePw3LaEygAAAAk"]
[Sat Feb 28 18:32:07.059334 2026] [:error] [pid 39292:tid 39309] [client 209.87.169.168:40607] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaLEJ6IAO5fN7BxyqcFCzwAAAM8"]
[Sat Feb 28 18:32:09.920980 2026] [:error] [pid 49763:tid 49768] [client 185.198.240.170:52185] [client 185.198.240.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaLEKbTHSOG_yf2PpqFeiAAAAcI"]
[Sat Feb 28 18:32:10.389670 2026] [:error] [pid 39185:tid 39269] [client 209.87.169.166:60327] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aaLEKhVE-FfM89u7BQZ94gAAAJc"]
[Sat Feb 28 18:32:10.984014 2026] [proxy_fcgi:error] [pid 39184:tid 39220] [client 185.198.240.98:55577] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:32:11.234581 2026] [:error] [pid 39184:tid 39241] [client 185.198.240.98:55577] [client 185.198.240.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.98, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaLEK1tZF9Zd_U7easBk1gAAAFY"]
[Sat Feb 28 18:32:14.061696 2026] [:error] [pid 39184:tid 39224] [client 185.198.240.98:55577] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaLELltZF9Zd_U7easBk6wAAAEU"]
[Sat Feb 28 18:32:19.819434 2026] [:error] [pid 49763:tid 49768] [client 185.198.240.98:31353] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaLEM7THSOG_yf2PpqFe9gAAAcI"]
[Sat Feb 28 18:32:21.995341 2026] [:error] [pid 49763:tid 49790] [client 185.198.240.173:36549] [client 185.198.240.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaLENbTHSOG_yf2PpqFfBgAAAdg"]
[Sat Feb 28 18:32:22.526288 2026] [:error] [pid 39183:tid 39192] [client 209.87.169.171:30291] [client 209.87.169.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaLENhCf4HvhVePw3LaFWAAAAAA"]
[Sat Feb 28 18:32:27.315805 2026] [:error] [pid 52460:tid 52471] [client 209.87.169.168:26157] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaLEO7LWOogAgHGh62QAZwAAAYg"]
[Sat Feb 28 18:32:31.252892 2026] [:error] [pid 52460:tid 52481] [client 209.87.169.156:38895] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaLEP7LWOogAgHGh62QAfgAAAZI"]
[Sat Feb 28 18:32:37.634664 2026] [:error] [pid 49763:tid 49767] [client 185.198.240.180:34761] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaLERbTHSOG_yf2PpqFfmgAAAcE"]
[Sat Feb 28 18:32:38.091962 2026] [:error] [pid 49763:tid 49788] [client 209.87.169.156:59763] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "aaLERrTHSOG_yf2PpqFfoQAAAdY"]
[Sat Feb 28 18:32:40.016123 2026] [:error] [pid 39184:tid 39222] [client 185.198.240.181:63039] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "aaLESFtZF9Zd_U7easBlWwAAAEM"]
[Sat Feb 28 18:32:49.978558 2026] [:error] [pid 49763:tid 49770] [client 185.198.240.179:46251] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaLEUbTHSOG_yf2PpqFgIAAAAcQ"]
[Sat Feb 28 18:32:53.503740 2026] [:error] [pid 49763:tid 49770] [client 45.131.195.214:34443] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "aaLEVbTHSOG_yf2PpqFgPgAAAcQ"]
[Sat Feb 28 18:32:53.748746 2026] [:error] [pid 49763:tid 49769] [client 45.131.195.214:34443] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaLEVbTHSOG_yf2PpqFgPwAAAcM"]
[Sat Feb 28 18:32:56.857410 2026] [:error] [pid 39292:tid 39294] [client 209.87.169.160:37303] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaLEWKIAO5fN7BxyqcFDDgAAAMA"]
[Sat Feb 28 18:32:57.339658 2026] [:error] [pid 52460:tid 52474] [client 209.87.169.163:47751] [client 209.87.169.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaLEWbLWOogAgHGh62QBFgAAAYs"]
[Sat Feb 28 18:33:06.407452 2026] [:error] [pid 49763:tid 49779] [client 185.198.240.166:56585] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaLEYrTHSOG_yf2PpqFglQAAAc0"]
[Sat Feb 28 18:33:09.703601 2026] [:error] [pid 39183:tid 39214] [client 185.198.240.169:24179] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaLEZRCf4HvhVePw3LaGkgAAABY"]
[Sat Feb 28 18:33:11.809734 2026] [:error] [pid 49763:tid 49775] [client 185.198.240.179:32761] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaLEZ7THSOG_yf2PpqFgvwAAAck"]
[Sat Feb 28 18:33:19.186588 2026] [:error] [pid 49763:tid 49784] [client 209.87.169.162:45369] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaLEb7THSOG_yf2PpqFhBgAAAdI"]
[Sat Feb 28 18:33:21.577607 2026] [:error] [pid 39183:tid 39206] [client 209.87.169.169:57077] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "aaLEcRCf4HvhVePw3LaG2gAAAA4"]
[Sat Feb 28 18:33:23.541025 2026] [:error] [pid 11791:tid 11796] [client 45.131.195.215:23661] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaLEc2uX5e1Q32gqxH2XSwAAAQM"]
[Sat Feb 28 18:33:24.095332 2026] [:error] [pid 39183:tid 39210] [client 185.198.240.179:45841] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaLEdBCf4HvhVePw3LaG5QAAABI"]
[Sat Feb 28 18:33:25.392997 2026] [:error] [pid 52460:tid 52485] [client 209.87.169.157:63635] [client 209.87.169.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaLEdbLWOogAgHGh62QBtAAAAZY"]
[Sat Feb 28 18:33:27.311706 2026] [:error] [pid 39292:tid 39312] [client 173.239.214.181:61515] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaLEd6IAO5fN7BxyqcFDawAAANI"]
[Sat Feb 28 18:33:30.074307 2026] [:error] [pid 39183:tid 39202] [client 209.87.169.167:49267] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaLEehCf4HvhVePw3LaHAAAAAAo"]
[Sat Feb 28 18:33:33.734498 2026] [:error] [pid 39184:tid 39229] [client 209.87.169.171:34797] [client 209.87.169.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaLEfVtZF9Zd_U7easBl-AAAAEo"]
[Sat Feb 28 18:33:34.213660 2026] [:error] [pid 49763:tid 49772] [client 209.87.169.169:50245] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaLEfrTHSOG_yf2PpqFhoAAAAcY"]
[Sat Feb 28 18:33:38.924133 2026] [:error] [pid 52460:tid 52472] [client 185.198.240.165:23163] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaLEgrLWOogAgHGh62QB2gAAAYk"]
[Sat Feb 28 18:33:42.086371 2026] [:error] [pid 49763:tid 49771] [client 209.87.169.166:52235] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaLEhrTHSOG_yf2PpqFh9wAAAcU"]
[Sat Feb 28 18:33:43.871558 2026] [:error] [pid 39184:tid 39241] [client 209.87.169.167:47383] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaLEh1tZF9Zd_U7easBmGQAAAFY"]
[Sat Feb 28 18:33:45.987211 2026] [:error] [pid 49763:tid 49778] [client 185.198.240.158:40591] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaLEibTHSOG_yf2PpqFiIwAAAcw"]
[Sat Feb 28 18:33:50.756294 2026] [:error] [pid 52460:tid 52486] [client 209.87.169.168:57329] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaLEjrLWOogAgHGh62QB_gAAAZc"]
[Sat Feb 28 18:33:51.260679 2026] [:error] [pid 49763:tid 49770] [client 209.87.169.167:54587] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaLEj7THSOG_yf2PpqFiZwAAAcQ"]
[Sat Feb 28 18:33:53.069763 2026] [:error] [pid 49763:tid 49769] [client 45.131.195.216:32689] [client 45.131.195.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaLEkbTHSOG_yf2PpqFiigAAAcM"]
[Sat Feb 28 18:33:53.135893 2026] [:error] [pid 49763:tid 49773] [client 45.131.195.253:59851] [client 45.131.195.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaLEkbTHSOG_yf2PpqFijQAAAcc"]
[Sat Feb 28 18:33:54.946987 2026] [:error] [pid 49763:tid 49766] [client 185.198.240.181:57799] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaLEkrTHSOG_yf2PpqFirgAAAcA"]
[Sat Feb 28 18:33:55.428264 2026] [:error] [pid 39183:tid 39194] [client 209.87.169.160:44461] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaLEkxCf4HvhVePw3LaHvgAAAAI"]
[Sat Feb 28 18:33:55.977417 2026] [:error] [pid 49763:tid 49782] [client 185.198.240.178:51767] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaLEk7THSOG_yf2PpqFitwAAAdA"]
[Sat Feb 28 18:33:56.360001 2026] [:error] [pid 49763:tid 49773] [client 173.239.214.179:28063] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaLElLTHSOG_yf2PpqFiwAAAAcc"]
[Sat Feb 28 18:33:56.568354 2026] [:error] [pid 39292:tid 39302] [client 209.87.169.159:29237] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaLElKIAO5fN7BxyqcFDygAAAMg"]
[Sat Feb 28 18:33:57.050499 2026] [:error] [pid 49763:tid 49769] [client 209.87.169.162:60359] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaLElbTHSOG_yf2PpqFiygAAAcM"]
[Sat Feb 28 18:33:58.736801 2026] [:error] [pid 52460:tid 52469] [client 185.198.240.171:44351] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaLElrLWOogAgHGh62QCGQAAAYY"]
[Sat Feb 28 18:33:59.868101 2026] [:error] [pid 49763:tid 49766] [client 209.87.169.169:27587] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaLEl7THSOG_yf2PpqFi4gAAAcA"]
[Sat Feb 28 18:34:00.415887 2026] [:error] [pid 11791:tid 11817] [client 185.198.240.169:34399] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaLEmGuX5e1Q32gqxH2XcQAAARg"]
[Sat Feb 28 18:34:01.044225 2026] [:error] [pid 39183:tid 39213] [client 209.87.169.163:35181] [client 209.87.169.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aaLEmRCf4HvhVePw3LaH7wAAABU"]
[Sat Feb 28 18:34:02.438210 2026] [:error] [pid 49763:tid 49779] [client 185.198.240.169:25963] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaLEmrTHSOG_yf2PpqFi7gAAAc0"]
[Sat Feb 28 18:34:03.042752 2026] [:error] [pid 49763:tid 49774] [client 45.131.195.214:58031] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aaLEm7THSOG_yf2PpqFi9QAAAcg"]
[Sat Feb 28 18:34:04.332619 2026] [:error] [pid 39183:tid 39199] [client 209.87.169.162:41035] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaLEnBCf4HvhVePw3LaIDgAAAAc"]
[Sat Feb 28 18:34:05.977366 2026] [:error] [pid 22194:tid 22219] [client 185.198.240.166:33365] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaLEnX6mbajs3bzQGyuFLQAAAVc"]
[Sat Feb 28 18:34:06.707969 2026] [:error] [pid 39184:tid 39234] [client 209.87.169.160:24945] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaLEnltZF9Zd_U7easBmTwAAAE8"]
[Sat Feb 28 18:34:08.020758 2026] [:error] [pid 39183:tid 39214] [client 209.87.169.169:49263] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaLEoBCf4HvhVePw3LaIKwAAABY"]
[Sat Feb 28 18:34:08.510588 2026] [:error] [pid 11791:tid 11815] [client 185.198.240.175:58971] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaLEoGuX5e1Q32gqxH2XfAAAARY"]
[Sat Feb 28 18:34:09.026451 2026] [:error] [pid 39184:tid 39243] [client 185.198.240.177:60557] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaLEoVtZF9Zd_U7easBmUQAAAFg"]
[Sat Feb 28 18:34:09.929033 2026] [:error] [pid 49763:tid 49770] [client 209.87.169.165:25979] [client 209.87.169.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaLEobTHSOG_yf2PpqFjHQAAAcQ"]
[Sat Feb 28 18:34:14.282301 2026] [:error] [pid 52460:tid 52483] [client 173.239.214.179:34937] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaLEprLWOogAgHGh62QCTgAAAZQ"]
[Sat Feb 28 18:34:17.572779 2026] [:error] [pid 22194:tid 22199] [client 209.87.169.164:41845] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaLEqX6mbajs3bzQGyuFMwAAAUM"]
[Sat Feb 28 18:34:17.995226 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.168:49117] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaLEqbTHSOG_yf2PpqFjcQAAAdE"]
[Sat Feb 28 18:34:20.020253 2026] [:error] [pid 39183:tid 39192] [client 185.198.240.160:24219] [client 185.198.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaLErBCf4HvhVePw3LaIYgAAAAA"]
[Sat Feb 28 18:34:21.781509 2026] [:error] [pid 52460:tid 52465] [client 185.198.240.181:32401] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaLErbLWOogAgHGh62QCZQAAAYI"]
[Sat Feb 28 18:34:22.436996 2026] [proxy_fcgi:error] [pid 49763:tid 49771] [client 209.87.169.163:54657] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Sat Feb 28 18:34:22.981790 2026] [:error] [pid 49763:tid 49786] [client 185.198.240.170:25473] [client 185.198.240.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaLErrTHSOG_yf2PpqFjoAAAAdQ"]
[Sat Feb 28 18:34:23.049016 2026] [:error] [pid 39185:tid 39253] [client 209.87.169.173:63701] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaLErxVE-FfM89u7BQZ-TwAAAIc"]
[Sat Feb 28 18:34:25.104465 2026] [:error] [pid 22194:tid 22210] [client 209.87.169.168:56891] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaLEsX6mbajs3bzQGyuFPgAAAU4"]
[Sat Feb 28 18:34:30.901023 2026] [:error] [pid 39292:tid 39307] [client 209.87.169.166:48601] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaLEtqIAO5fN7BxyqcFEBAAAAM0"]
[Sat Feb 28 18:34:31.569707 2026] [:error] [pid 39184:tid 39223] [client 185.198.240.165:39165] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaLEt1tZF9Zd_U7easBmgwAAAEQ"]
[Sat Feb 28 18:34:32.071920 2026] [:error] [pid 39292:tid 39310] [client 209.87.169.166:52317] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaLEuKIAO5fN7BxyqcFECQAAANA"]
[Sat Feb 28 18:34:34.156671 2026] [:error] [pid 11791:tid 11801] [client 185.198.240.173:64395] [client 185.198.240.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaLEumuX5e1Q32gqxH2XrQAAAQg"]
[Sat Feb 28 18:34:35.467443 2026] [:error] [pid 39183:tid 39193] [client 185.198.240.176:32447] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaLEuxCf4HvhVePw3LaIsQAAAAE"]
[Sat Feb 28 18:34:36.399950 2026] [:error] [pid 39185:tid 39250] [client 209.87.169.159:42931] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaLEvBVE-FfM89u7BQZ-WwAAAIQ"]
[Sat Feb 28 18:34:36.917532 2026] [:error] [pid 39183:tid 39210] [client 185.198.240.177:25253] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaLEvBCf4HvhVePw3LaIuAAAABI"]
[Sat Feb 28 18:34:37.411682 2026] [:error] [pid 39183:tid 39202] [client 209.87.169.167:61887] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaLEvRCf4HvhVePw3LaIvwAAAAo"]
[Sat Feb 28 18:34:41.068140 2026] [:error] [pid 49763:tid 49770] [client 173.239.214.181:49527] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaLEwbTHSOG_yf2PpqFkJgAAAcQ"]
[Sat Feb 28 18:34:42.141944 2026] [:error] [pid 39183:tid 39199] [client 185.198.240.180:22033] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaLEwhCf4HvhVePw3LaI0AAAAAc"]
[Sat Feb 28 18:34:42.643173 2026] [:error] [pid 49763:tid 49790] [client 45.131.195.214:32045] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaLEwrTHSOG_yf2PpqFkQAAAAdg"]
[Sat Feb 28 18:34:43.295322 2026] [:error] [pid 49763:tid 49772] [client 185.198.240.168:25277] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaLEw7THSOG_yf2PpqFkTgAAAcY"]
[Sat Feb 28 18:34:44.811471 2026] [:error] [pid 49763:tid 49787] [client 185.198.240.178:20645] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaLExLTHSOG_yf2PpqFkagAAAdU"]
[Sat Feb 28 18:34:47.314926 2026] [:error] [pid 39184:tid 39231] [client 185.198.240.161:22161] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaLEx1tZF9Zd_U7easBmjgAAAEw"]
[Sat Feb 28 18:34:50.395335 2026] [:error] [pid 39183:tid 39196] [client 185.198.240.163:48503] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaLEyhCf4HvhVePw3LaI4AAAAAQ"]
[Sat Feb 28 18:34:53.362585 2026] [:error] [pid 52460:tid 52468] [client 185.198.240.181:26253] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaLEzbLWOogAgHGh62QCmgAAAYU"]
[Sat Feb 28 18:34:53.940496 2026] [:error] [pid 49763:tid 49779] [client 185.198.240.168:58633] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aaLEzbTHSOG_yf2PpqFkvgAAAc0"]
[Sat Feb 28 18:34:59.081254 2026] [:error] [pid 39184:tid 39224] [client 209.87.169.162:49671] [client 209.87.169.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.162, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaLE01tZF9Zd_U7easBmugAAAEU"]
[Sat Feb 28 18:34:59.475497 2026] [:error] [pid 39184:tid 39233] [client 185.198.240.176:34699] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaLE01tZF9Zd_U7easBmvQAAAE4"]
[Sat Feb 28 18:35:05.755674 2026] [:error] [pid 39292:tid 39297] [client 173.239.214.179:49707] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaLE2aIAO5fN7BxyqcFELQAAAMM"]
[Sat Feb 28 18:35:06.429749 2026] [proxy_fcgi:error] [pid 39184:tid 39240] [client 209.87.169.173:51599] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:35:06.718464 2026] [:error] [pid 39184:tid 39226] [client 209.87.169.173:51599] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaLE2ltZF9Zd_U7easBm4wAAAEc"]
[Sat Feb 28 18:35:07.269273 2026] [:error] [pid 49763:tid 49768] [client 209.87.169.167:49287] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaLE27THSOG_yf2PpqFlLgAAAcI"]
[Sat Feb 28 18:35:10.672492 2026] [:error] [pid 39183:tid 39199] [client 45.131.195.252:28595] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaLE3hCf4HvhVePw3LaJJwAAAAc"]
[Sat Feb 28 18:35:11.197228 2026] [:error] [pid 39183:tid 39214] [client 45.131.195.214:33523] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaLE3xCf4HvhVePw3LaJLgAAABY"]
[Sat Feb 28 18:35:16.085250 2026] [:error] [pid 39184:tid 39222] [client 209.87.169.162:49671] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaLE5FtZF9Zd_U7easBnEwAAAEM"]
[Sat Feb 28 18:35:19.310840 2026] [:error] [pid 49763:tid 49776] [client 185.198.240.98:64225] [client 185.198.240.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.98, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaLE57THSOG_yf2PpqFlfwAAAco"]
[Sat Feb 28 18:35:19.806054 2026] [:error] [pid 52460:tid 52484] [client 185.198.240.175:38547] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaLE57LWOogAgHGh62QDBAAAAZU"]
[Sat Feb 28 18:35:20.327676 2026] [:error] [pid 39183:tid 39215] [client 185.198.240.172:54937] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaLE6BCf4HvhVePw3LaJcgAAABc"]
[Sat Feb 28 18:35:21.728310 2026] [:error] [pid 49763:tid 49768] [client 185.198.240.98:64225] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aaLE6bTHSOG_yf2PpqFlkQAAAcI"]
[Sat Feb 28 18:35:22.289620 2026] [:error] [pid 49763:tid 49790] [client 45.131.195.253:36857] [client 45.131.195.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/log.php"] [unique_id "aaLE6rTHSOG_yf2PpqFllwAAAdg"]
[Sat Feb 28 18:35:22.766979 2026] [:error] [pid 49763:tid 49768] [client 185.198.240.170:38411] [client 185.198.240.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaLE6rTHSOG_yf2PpqFloAAAAcI"]
[Sat Feb 28 18:35:23.331093 2026] [:error] [pid 39292:tid 39312] [client 185.198.240.171:43133] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaLE66IAO5fN7BxyqcFEPQAAANI"]
[Sat Feb 28 18:35:23.883346 2026] [:error] [pid 52460:tid 52480] [client 185.198.240.175:55823] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/aw.php"] [unique_id "aaLE67LWOogAgHGh62QDIAAAAZE"]
[Sat Feb 28 18:35:31.163737 2026] [:error] [pid 49763:tid 49774] [client 185.198.240.172:35705] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaLE87THSOG_yf2PpqFl-gAAAcg"]
[Sat Feb 28 18:35:31.694039 2026] [:error] [pid 49763:tid 49779] [client 209.87.169.164:31411] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/install.php"] [unique_id "aaLE87THSOG_yf2PpqFl_wAAAc0"]
[Sat Feb 28 18:35:32.467966 2026] [:error] [pid 39183:tid 39205] [client 209.87.169.158:51175] [client 209.87.169.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaLE9BCf4HvhVePw3LaJrgAAAA0"]
[Sat Feb 28 18:35:34.843226 2026] [:error] [pid 11791:tid 11804] [client 209.87.169.163:64599] [client 209.87.169.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaLE9muX5e1Q32gqxH2X3AAAAQs"]
[Sat Feb 28 18:35:35.388885 2026] [:error] [pid 49763:tid 49780] [client 185.198.240.162:45601] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaLE97THSOG_yf2PpqFmIQAAAc4"]
[Sat Feb 28 18:35:38.594881 2026] [:error] [pid 39183:tid 39207] [client 185.198.240.168:33569] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/template-less.php"] [unique_id "aaLE-hCf4HvhVePw3LaJwgAAAA8"]
[Sat Feb 28 18:35:39.476297 2026] [:error] [pid 39184:tid 39229] [client 173.239.214.180:59045] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaLE-1tZF9Zd_U7easBnPgAAAEo"]
[Sat Feb 28 18:35:44.344447 2026] [:error] [pid 22194:tid 22196] [client 185.198.240.181:44355] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaLFAH6mbajs3bzQGyuFeQAAAUA"]
[Sat Feb 28 18:35:47.555355 2026] [:error] [pid 49763:tid 49774] [client 45.131.195.217:48425] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaLFA7THSOG_yf2PpqFmoQAAAcg"]
[Sat Feb 28 18:35:49.649307 2026] [:error] [pid 39185:tid 39270] [client 173.239.214.180:61021] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aaLFBRVE-FfM89u7BQZ-gAAAAJg"]
[Sat Feb 28 18:35:50.176323 2026] [:error] [pid 49763:tid 49781] [client 209.87.169.159:26943] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaLFBrTHSOG_yf2PpqFmtAAAAc8"]
[Sat Feb 28 18:35:52.110596 2026] [:error] [pid 39183:tid 39215] [client 185.198.240.180:30083] [client 185.198.240.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.180, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaLFCBCf4HvhVePw3LaKIwAAABc"]
[Sat Feb 28 18:35:53.286760 2026] [:error] [pid 39183:tid 39197] [client 185.198.240.180:30083] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaLFCRCf4HvhVePw3LaKKAAAAAU"]
[Sat Feb 28 18:35:53.718828 2026] [:error] [pid 39184:tid 39228] [client 185.198.240.178:25199] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "aaLFCVtZF9Zd_U7easBnbAAAAEk"]
[Sat Feb 28 18:35:55.713441 2026] [:error] [pid 39183:tid 39199] [client 209.87.169.172:27463] [client 209.87.169.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaLFCxCf4HvhVePw3LaKNAAAAAc"]
[Sat Feb 28 18:35:57.663033 2026] [:error] [pid 49763:tid 49777] [client 185.198.240.169:63405] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/load.php"] [unique_id "aaLFDbTHSOG_yf2PpqFm_AAAAcs"]
[Sat Feb 28 18:35:58.165688 2026] [:error] [pid 22194:tid 22210] [client 185.198.240.159:61825] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaLFDn6mbajs3bzQGyuFhQAAAU4"]
[Sat Feb 28 18:35:58.777178 2026] [:error] [pid 49763:tid 49779] [client 209.87.169.173:29819] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaLFDrTHSOG_yf2PpqFnBwAAAc0"]
[Sat Feb 28 18:36:05.145066 2026] [:error] [pid 52460:tid 52464] [client 209.87.169.156:51645] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaLFFbLWOogAgHGh62QDsQAAAYE"]
[Sat Feb 28 18:36:08.924331 2026] [:error] [pid 39184:tid 39230] [client 209.87.169.169:56875] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaLFGFtZF9Zd_U7easBnqAAAAEs"]
[Sat Feb 28 18:36:13.730109 2026] [:error] [pid 52460:tid 52484] [client 185.198.240.168:28109] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaLFHbLWOogAgHGh62QD2gAAAZU"]
[Sat Feb 28 18:36:14.256430 2026] [:error] [pid 39184:tid 39238] [client 185.198.240.179:23117] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaLFHltZF9Zd_U7easBnvwAAAFM"]
[Sat Feb 28 18:36:15.514032 2026] [:error] [pid 52460:tid 52486] [client 45.131.195.214:39105] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaLFH7LWOogAgHGh62QD5gAAAZc"]
[Sat Feb 28 18:36:16.203282 2026] [:error] [pid 52460:tid 52483] [client 185.198.240.177:37907] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaLFILLWOogAgHGh62QD6QAAAZQ"]
[Sat Feb 28 18:36:20.040407 2026] [:error] [pid 49763:tid 49786] [client 209.87.169.167:22221] [client 209.87.169.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.167, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaLFJLTHSOG_yf2PpqFoBwAAAdQ"]
[Sat Feb 28 18:36:25.113930 2026] [:error] [pid 49763:tid 49769] [client 209.87.169.167:22221] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaLFKbTHSOG_yf2PpqFoIQAAAcM"]
[Sat Feb 28 18:36:27.130138 2026] [:error] [pid 39185:tid 39265] [client 185.198.240.158:35189] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aaLFKxVE-FfM89u7BQZ-pAAAAJM"]
[Sat Feb 28 18:36:28.928223 2026] [:error] [pid 39185:tid 39263] [client 209.87.169.164:59873] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aaLFLBVE-FfM89u7BQZ-pgAAAJE"]
[Sat Feb 28 18:36:30.437784 2026] [:error] [pid 49763:tid 49778] [client 185.198.240.179:21193] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaLFLrTHSOG_yf2PpqFoRQAAAcw"]
[Sat Feb 28 18:36:30.832061 2026] [:error] [pid 49763:tid 49769] [client 45.131.195.253:61899] [client 45.131.195.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaLFLrTHSOG_yf2PpqFoSAAAAcM"]
[Sat Feb 28 18:36:34.055295 2026] [:error] [pid 39184:tid 39224] [client 185.198.240.178:57201] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaLFMltZF9Zd_U7easBoLAAAAEU"]
[Sat Feb 28 18:36:34.604166 2026] [:error] [pid 39185:tid 39253] [client 209.87.169.167:40267] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaLFMhVE-FfM89u7BQZ-rQAAAIc"]
[Sat Feb 28 18:36:35.113839 2026] [:error] [pid 39184:tid 39241] [client 45.131.195.217:54093] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaLFM1tZF9Zd_U7easBoMQAAAFY"]
[Sat Feb 28 18:36:35.250458 2026] [:error] [pid 52460:tid 52476] [client 185.198.240.158:48347] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaLFM7LWOogAgHGh62QESQAAAY0"]
[Sat Feb 28 18:36:35.756601 2026] [:error] [pid 52460:tid 52473] [client 185.198.240.175:52925] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaLFM7LWOogAgHGh62QESwAAAYo"]
[Sat Feb 28 18:36:37.096426 2026] [autoindex:error] [pid 39184:tid 39235] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:37.349001 2026] [autoindex:error] [pid 39184:tid 39221] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:37.590451 2026] [autoindex:error] [pid 39184:tid 39222] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:37.860128 2026] [autoindex:error] [pid 39184:tid 39223] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:39.480767 2026] [autoindex:error] [pid 39184:tid 39234] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:39.745183 2026] [autoindex:error] [pid 39184:tid 39229] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:40.002209 2026] [autoindex:error] [pid 39184:tid 39238] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:40.265778 2026] [autoindex:error] [pid 39184:tid 39225] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:40.544233 2026] [autoindex:error] [pid 39184:tid 39237] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:40.801289 2026] [autoindex:error] [pid 39184:tid 39242] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:41.316516 2026] [autoindex:error] [pid 39184:tid 39233] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:43.340584 2026] [autoindex:error] [pid 39184:tid 39240] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:44.034410 2026] [:error] [pid 11791:tid 11795] [client 185.198.240.159:41751] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaLFPGuX5e1Q32gqxH2YKgAAAQI"]
[Sat Feb 28 18:36:44.616466 2026] [autoindex:error] [pid 39184:tid 39242] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:48.469175 2026] [:error] [pid 39184:tid 39231] [client 209.87.169.167:41187] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaLFQFtZF9Zd_U7easBoiAAAAEw"]
[Sat Feb 28 18:36:52.137991 2026] [autoindex:error] [pid 39184:tid 39237] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:53.070561 2026] [autoindex:error] [pid 39184:tid 39225] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:53.334572 2026] [autoindex:error] [pid 39184:tid 39235] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:53.566185 2026] [autoindex:error] [pid 39184:tid 39230] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:54.365141 2026] [:error] [pid 11791:tid 11797] [client 185.198.240.174:60425] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aaLFRmuX5e1Q32gqxH2YMgAAAQQ"]
[Sat Feb 28 18:36:55.279860 2026] [autoindex:error] [pid 39184:tid 39220] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:55.564828 2026] [autoindex:error] [pid 39184:tid 39226] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:57.053274 2026] [autoindex:error] [pid 39184:tid 39231] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:36:59.354225 2026] [:error] [pid 49763:tid 49789] [client 45.131.195.253:23783] [client 45.131.195.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaLFS7THSOG_yf2PpqFo6gAAAdc"]
[Sat Feb 28 18:37:00.341805 2026] [autoindex:error] [pid 39184:tid 39226] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:00.656572 2026] [autoindex:error] [pid 39184:tid 39222] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:00.923449 2026] [autoindex:error] [pid 39184:tid 39229] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:02.677016 2026] [:error] [pid 39184:tid 39224] [client 185.198.240.172:34991] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aaLFTltZF9Zd_U7easBo2AAAAEU"]
[Sat Feb 28 18:37:07.528161 2026] [:error] [pid 39183:tid 39215] [client 185.198.240.176:57127] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaLFUxCf4HvhVePw3LaL3wAAABc"]
[Sat Feb 28 18:37:10.171120 2026] [autoindex:error] [pid 39184:tid 39221] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:11.769028 2026] [autoindex:error] [pid 39184:tid 39224] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:12.027427 2026] [autoindex:error] [pid 39184:tid 39240] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:13.058329 2026] [autoindex:error] [pid 39184:tid 39231] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:13.368493 2026] [autoindex:error] [pid 39184:tid 39241] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:13.616062 2026] [autoindex:error] [pid 39184:tid 39221] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:18.039182 2026] [autoindex:error] [pid 39184:tid 39225] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:18.497826 2026] [:error] [pid 52460:tid 52464] [client 185.198.240.164:22745] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaLFXrLWOogAgHGh62QEuwAAAYE"]
[Sat Feb 28 18:37:18.960855 2026] [:error] [pid 49763:tid 49771] [client 209.87.169.173:48681] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaLFXrTHSOG_yf2PpqFpiAAAAcU"]
[Sat Feb 28 18:37:19.560121 2026] [:error] [pid 49763:tid 49771] [client 185.198.240.175:30517] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaLFX7THSOG_yf2PpqFpmAAAAcU"]
[Sat Feb 28 18:37:19.951541 2026] [autoindex:error] [pid 39184:tid 39234] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:20.059779 2026] [:error] [pid 39292:tid 39307] [client 173.239.214.181:52877] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaLFYKIAO5fN7BxyqcFE2QAAAM0"]
[Sat Feb 28 18:37:22.260324 2026] [:error] [pid 39292:tid 39308] [client 173.239.214.180:56811] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaLFYqIAO5fN7BxyqcFE2wAAAM4"]
[Sat Feb 28 18:37:23.856118 2026] [:error] [pid 39184:tid 39229] [client 185.198.240.169:53333] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLFY1tZF9Zd_U7easBpNwAAAEo"]
[Sat Feb 28 18:37:27.233125 2026] [:error] [pid 39292:tid 39298] [client 185.198.240.176:62179] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaLFZ6IAO5fN7BxyqcFE4wAAAMQ"]
[Sat Feb 28 18:37:27.797068 2026] [:error] [pid 39183:tid 39194] [client 45.131.195.252:41527] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaLFZxCf4HvhVePw3LaMKgAAAAI"]
[Sat Feb 28 18:37:28.342917 2026] [:error] [pid 49763:tid 49789] [client 209.87.169.161:53159] [client 209.87.169.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaLFaLTHSOG_yf2PpqFp5QAAAdc"]
[Sat Feb 28 18:37:28.894399 2026] [:error] [pid 49763:tid 49779] [client 185.198.240.174:64405] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaLFaLTHSOG_yf2PpqFp6wAAAc0"]
[Sat Feb 28 18:37:31.230521 2026] [:error] [pid 39183:tid 39205] [client 209.87.169.165:28137] [client 209.87.169.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaLFaxCf4HvhVePw3LaMOgAAAA0"]
[Sat Feb 28 18:37:34.801036 2026] [:error] [pid 49763:tid 49782] [client 185.198.240.167:29159] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaLFbrTHSOG_yf2PpqFqMQAAAdA"]
[Sat Feb 28 18:37:40.702086 2026] [:error] [pid 52460:tid 52479] [client 209.87.169.156:53443] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaLFdLLWOogAgHGh62QFFwAAAZA"]
[Sat Feb 28 18:37:50.947629 2026] [:error] [pid 49763:tid 49766] [client 185.198.240.98:43053] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaLFfrTHSOG_yf2PpqFq3QAAAcA"]
[Sat Feb 28 18:37:54.290694 2026] [autoindex:error] [pid 39184:tid 39230] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:54.614415 2026] [autoindex:error] [pid 39184:tid 39224] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:54.886988 2026] [autoindex:error] [pid 39184:tid 39219] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:55.153062 2026] [autoindex:error] [pid 39184:tid 39239] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:55.404682 2026] [autoindex:error] [pid 39184:tid 39238] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:55.495340 2026] [:error] [pid 49763:tid 49777] [client 209.87.169.170:55161] [client 209.87.169.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaLFg7THSOG_yf2PpqFrAgAAAcs"]
[Sat Feb 28 18:37:55.682174 2026] [autoindex:error] [pid 39184:tid 39242] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:55.953211 2026] [autoindex:error] [pid 39184:tid 39232] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:56.055453 2026] [:error] [pid 52460:tid 52484] [client 209.87.169.160:28967] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaLFhLLWOogAgHGh62QFSgAAAZU"]
[Sat Feb 28 18:37:56.201128 2026] [autoindex:error] [pid 39184:tid 39226] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:57.827046 2026] [autoindex:error] [pid 39184:tid 39237] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:59.305553 2026] [autoindex:error] [pid 39184:tid 39230] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:59.567342 2026] [autoindex:error] [pid 39184:tid 39241] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:37:59.801568 2026] [autoindex:error] [pid 39184:tid 39239] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:38:01.481289 2026] [autoindex:error] [pid 39184:tid 39228] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:38:01.786544 2026] [autoindex:error] [pid 39184:tid 39234] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:38:02.095548 2026] [autoindex:error] [pid 39184:tid 39222] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:38:02.383165 2026] [autoindex:error] [pid 39184:tid 39243] [client 185.198.240.168:26927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:38:02.519348 2026] [:error] [pid 39292:tid 39312] [client 209.87.169.161:41791] [client 209.87.169.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaLFiqIAO5fN7BxyqcFFHQAAANI"]
[Sat Feb 28 18:38:07.466105 2026] [proxy_fcgi:error] [pid 39183:tid 39197] [client 185.198.240.181:48251] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:38:07.725719 2026] [proxy_fcgi:error] [pid 39183:tid 39199] [client 185.198.240.181:48251] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:38:07.992292 2026] [proxy_fcgi:error] [pid 39183:tid 39211] [client 185.198.240.181:48251] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:38:13.607485 2026] [:error] [pid 39183:tid 39215] [client 185.198.240.181:48251] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaLFlRCf4HvhVePw3LaNDQAAABc"]
[Sat Feb 28 18:38:14.105221 2026] [:error] [pid 49763:tid 49766] [client 185.198.240.174:28231] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaLFlrTHSOG_yf2PpqFrkwAAAcA"]
[Sat Feb 28 18:38:14.602520 2026] [:error] [pid 52460:tid 52464] [client 173.239.214.179:58371] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaLFlrLWOogAgHGh62QFgQAAAYE"]
[Sat Feb 28 18:38:15.089784 2026] [:error] [pid 52460:tid 52465] [client 185.198.240.159:41853] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaLFl7LWOogAgHGh62QFhAAAAYI"]
[Sat Feb 28 18:38:15.600423 2026] [:error] [pid 52460:tid 52467] [client 209.87.169.161:52523] [client 209.87.169.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaLFl7LWOogAgHGh62QFhQAAAYQ"]
[Sat Feb 28 18:38:16.107021 2026] [:error] [pid 39184:tid 39230] [client 45.131.195.215:36173] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaLFmFtZF9Zd_U7easBqGQAAAEs"]
[Sat Feb 28 18:38:17.830221 2026] [:error] [pid 39183:tid 39197] [client 209.87.169.158:24783] [client 209.87.169.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaLFmRCf4HvhVePw3LaNKgAAAAU"]
[Sat Feb 28 18:38:18.332984 2026] [:error] [pid 39183:tid 39214] [client 185.198.240.174:43717] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaLFmhCf4HvhVePw3LaNLgAAABY"]
[Sat Feb 28 18:38:18.839661 2026] [:error] [pid 39183:tid 39192] [client 185.198.240.164:61979] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaLFmhCf4HvhVePw3LaNNgAAAAA"]
[Sat Feb 28 18:38:19.373323 2026] [:error] [pid 49763:tid 49780] [client 185.198.240.175:34427] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaLFm7THSOG_yf2PpqFr1QAAAc4"]
[Sat Feb 28 18:38:22.391261 2026] [:error] [pid 49763:tid 49767] [client 185.198.240.180:58973] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaLFnrTHSOG_yf2PpqFr-wAAAcE"]
[Sat Feb 28 18:38:24.029288 2026] [:error] [pid 39292:tid 39308] [client 185.198.240.165:39097] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaLFoKIAO5fN7BxyqcFFJgAAAM4"]
[Sat Feb 28 18:38:27.286712 2026] [:error] [pid 11791:tid 11801] [client 185.198.240.167:27259] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaLFo2uX5e1Q32gqxH2YegAAAQg"]
[Sat Feb 28 18:38:30.450757 2026] [:error] [pid 39183:tid 39207] [client 209.87.169.166:62795] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaLFphCf4HvhVePw3LaNcAAAAA8"]
[Sat Feb 28 18:38:33.835328 2026] [autoindex:error] [pid 49763:tid 49770] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:38:34.837750 2026] [:error] [pid 52460:tid 52466] [client 185.198.240.168:51045] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaLFqrLWOogAgHGh62QFuwAAAYM"]
[Sat Feb 28 18:38:40.476262 2026] [:error] [pid 39183:tid 39197] [client 185.198.240.171:36783] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaLFsBCf4HvhVePw3LaNlgAAAAU"]
[Sat Feb 28 18:38:43.128893 2026] [:error] [pid 49763:tid 49775] [client 185.198.240.166:31801] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaLFs7THSOG_yf2PpqFsgAAAAck"]
[Sat Feb 28 18:38:49.419405 2026] [autoindex:error] [pid 49763:tid 49778] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:38:55.199406 2026] [autoindex:error] [pid 49763:tid 49768] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:38:55.451401 2026] [autoindex:error] [pid 49763:tid 49790] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:39:00.849463 2026] [autoindex:error] [pid 49763:tid 49778] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:39:01.097742 2026] [autoindex:error] [pid 49763:tid 49773] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:39:01.398334 2026] [autoindex:error] [pid 49763:tid 49781] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:39:02.013960 2026] [autoindex:error] [pid 49763:tid 49771] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:39:02.325840 2026] [autoindex:error] [pid 49763:tid 49767] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:39:02.627674 2026] [autoindex:error] [pid 49763:tid 49777] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:39:02.926680 2026] [autoindex:error] [pid 49763:tid 49785] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:39:03.227278 2026] [autoindex:error] [pid 49763:tid 49770] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:39:03.518738 2026] [autoindex:error] [pid 49763:tid 49773] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:39:05.834891 2026] [:error] [pid 39183:tid 39210] [client 209.87.169.166:32289] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaLFyRCf4HvhVePw3LaN6gAAABI"]
[Sat Feb 28 18:39:06.398330 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.168:39885] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaLFyrTHSOG_yf2PpqFtcgAAAdE"]
[Sat Feb 28 18:39:06.886647 2026] [:error] [pid 52460:tid 52474] [client 209.87.169.163:39079] [client 209.87.169.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.163, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaLFyrLWOogAgHGh62QGFAAAAYs"]
[Sat Feb 28 18:39:09.350137 2026] [:error] [pid 52460:tid 52477] [client 209.87.169.163:39079] [client 209.87.169.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaLFzbLWOogAgHGh62QGHQAAAY4"]
[Sat Feb 28 18:39:12.540832 2026] [:error] [pid 49763:tid 49766] [client 209.87.169.165:54195] [client 209.87.169.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLF0LTHSOG_yf2PpqFtpAAAAcA"]
[Sat Feb 28 18:39:13.059141 2026] [:error] [pid 49763:tid 49780] [client 209.87.169.169:51565] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaLF0bTHSOG_yf2PpqFtqgAAAc4"]
[Sat Feb 28 18:39:18.914902 2026] [:error] [pid 49763:tid 49784] [client 185.198.240.165:38169] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaLF1rTHSOG_yf2PpqFt5AAAAdI"]
[Sat Feb 28 18:39:19.409567 2026] [:error] [pid 52460:tid 52470] [client 185.198.240.162:28219] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aaLF17LWOogAgHGh62QGTQAAAYc"]
[Sat Feb 28 18:39:26.913024 2026] [:error] [pid 39292:tid 39301] [client 209.87.169.168:57103] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaLF3qIAO5fN7BxyqcFFgwAAAMc"]
[Sat Feb 28 18:39:28.476240 2026] [autoindex:error] [pid 49763:tid 49776] [client 209.87.169.157:57993] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:39:30.098184 2026] [proxy_fcgi:error] [pid 39184:tid 39232] [client 185.198.240.174:43521] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:39:31.605660 2026] [:error] [pid 39184:tid 39228] [client 185.198.240.174:43521] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "aaLF41tZF9Zd_U7easBqpwAAAEk"]
[Sat Feb 28 18:39:32.162826 2026] [:error] [pid 39292:tid 39306] [client 185.198.240.177:50149] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaLF5KIAO5fN7BxyqcFFiwAAAMw"]
[Sat Feb 28 18:39:35.895996 2026] [:error] [pid 39183:tid 39196] [client 209.87.169.158:62759] [client 209.87.169.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaLF5xCf4HvhVePw3LaOkQAAAAQ"]
[Sat Feb 28 18:39:36.577090 2026] [:error] [pid 49763:tid 49767] [client 185.198.240.177:37915] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaLF6LTHSOG_yf2PpqFuUQAAAcE"]
[Sat Feb 28 18:39:46.644726 2026] [:error] [pid 39292:tid 39297] [client 45.131.195.253:33067] [client 45.131.195.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaLF8qIAO5fN7BxyqcFFuQAAAMM"]
[Sat Feb 28 18:39:47.120493 2026] [:error] [pid 49763:tid 49775] [client 209.87.169.163:48251] [client 209.87.169.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaLF87THSOG_yf2PpqFulAAAAck"]
[Sat Feb 28 18:39:52.859572 2026] [:error] [pid 22194:tid 22196] [client 209.87.169.166:27657] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aaLF-H6mbajs3bzQGyuGNwAAAUA"]
[Sat Feb 28 18:39:53.287620 2026] [:error] [pid 39184:tid 39233] [client 45.131.195.214:42347] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaLF-VtZF9Zd_U7easBrBQAAAE4"]
[Sat Feb 28 18:39:53.791718 2026] [:error] [pid 49763:tid 49781] [client 185.198.240.160:27527] [client 185.198.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaLF-bTHSOG_yf2PpqFusAAAAc8"]
[Sat Feb 28 18:40:00.359143 2026] [:error] [pid 39184:tid 39224] [client 209.87.169.166:61147] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaLGAFtZF9Zd_U7easBrSQAAAEU"]
[Sat Feb 28 18:40:03.404344 2026] [:error] [pid 49763:tid 49771] [client 185.198.240.160:44515] [client 185.198.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaLGA7THSOG_yf2PpqFu8wAAAcU"]
[Sat Feb 28 18:40:11.505866 2026] [:error] [pid 39184:tid 39233] [client 209.87.169.158:36453] [client 209.87.169.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.158, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "aaLGC1tZF9Zd_U7easBrdQAAAE4"]
[Sat Feb 28 18:40:18.713560 2026] [:error] [pid 39184:tid 39233] [client 209.87.169.158:36453] [client 209.87.169.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaLGEltZF9Zd_U7easBrjAAAAE4"]
[Sat Feb 28 18:40:19.328995 2026] [:error] [pid 39183:tid 39208] [client 185.198.240.172:50589] [client 185.198.240.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.172, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaLGExCf4HvhVePw3LaPKwAAABA"]
[Sat Feb 28 18:40:32.839658 2026] [proxy_fcgi:error] [pid 39183:tid 39192] [client 185.198.240.172:50589] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:40:49.848248 2026] [:error] [pid 39183:tid 39201] [client 185.198.240.172:50589] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaLGMRCf4HvhVePw3LaP3wAAAAk"]
[Sat Feb 28 18:40:54.157607 2026] [:error] [pid 39183:tid 39197] [client 209.87.169.159:62113] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaLGNhCf4HvhVePw3LaQBAAAAAU"]
[Sat Feb 28 18:40:57.262508 2026] [:error] [pid 39184:tid 39219] [client 209.87.169.164:29143] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaLGOVtZF9Zd_U7easBr3gAAAEA"]
[Sat Feb 28 18:41:10.476641 2026] [:error] [pid 49763:tid 49790] [client 209.87.169.170:54145] [client 209.87.169.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaLGRrTHSOG_yf2PpqFwUQAAAdg"]
[Sat Feb 28 18:41:16.272189 2026] [:error] [pid 22194:tid 22209] [client 209.87.169.166:44603] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaLGTH6mbajs3bzQGyuGrQAAAU0"]
[Sat Feb 28 18:41:18.283854 2026] [:error] [pid 39185:tid 39259] [client 185.198.240.173:57161] [client 185.198.240.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaLGThVE-FfM89u7BQZ_3QAAAI0"]
[Sat Feb 28 18:41:23.635066 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 185.198.240.165:58731] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:23.885171 2026] [proxy_fcgi:error] [pid 39185:tid 39252] [client 185.198.240.165:58731] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:24.107448 2026] [:error] [pid 39185:tid 39262] [client 185.198.240.165:58731] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaLGVBVE-FfM89u7BQZ_5wAAAJA"]
[Sat Feb 28 18:41:24.605167 2026] [:error] [pid 52460:tid 52474] [client 185.198.240.169:32981] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaLGVLLWOogAgHGh62QH3QAAAYs"]
[Sat Feb 28 18:41:34.004519 2026] [:error] [pid 52460:tid 52486] [client 185.198.240.162:56551] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaLGXrLWOogAgHGh62QH_QAAAZc"]
[Sat Feb 28 18:41:35.871239 2026] [:error] [pid 49763:tid 49788] [client 185.198.240.162:53185] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aaLGX7THSOG_yf2PpqFxPgAAAdY"]
[Sat Feb 28 18:41:40.367197 2026] [:error] [pid 49763:tid 49767] [client 185.198.240.178:59327] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaLGZLTHSOG_yf2PpqFxawAAAcE"]
[Sat Feb 28 18:41:49.794041 2026] [:error] [pid 39184:tid 39234] [client 173.239.214.179:42057] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaLGbVtZF9Zd_U7easBscAAAAE8"]
[Sat Feb 28 18:41:50.298477 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 185.198.240.164:64899] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:41:53.222114 2026] [:error] [pid 39184:tid 39231] [client 185.198.240.164:64899] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaLGcVtZF9Zd_U7easBsnAAAAEw"]
[Sat Feb 28 18:42:02.326760 2026] [proxy_fcgi:error] [pid 39183:tid 39205] [client 185.198.240.171:54293] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:42:03.886988 2026] [:error] [pid 39183:tid 39201] [client 185.198.240.171:54293] [client 185.198.240.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.171, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaLGexCf4HvhVePw3LaR9wAAAAk"]
[Sat Feb 28 18:42:10.199507 2026] [:error] [pid 39183:tid 39205] [client 185.198.240.171:54293] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaLGghCf4HvhVePw3LaSGwAAAA0"]
[Sat Feb 28 18:42:12.022304 2026] [:error] [pid 39292:tid 39294] [client 209.87.169.168:49107] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaLGhKIAO5fN7BxyqcFGpAAAAMA"]
[Sat Feb 28 18:42:16.715927 2026] [:error] [pid 39183:tid 39193] [client 185.198.240.167:64361] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaLGiBCf4HvhVePw3LaSWAAAAAE"]
[Sat Feb 28 18:42:22.245701 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.163:24721] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaLGjrTHSOG_yf2PpqFyxwAAAdE"]
[Sat Feb 28 18:42:24.216462 2026] [:error] [pid 39292:tid 39304] [client 185.198.240.179:63737] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaLGkKIAO5fN7BxyqcFG3QAAAMo"]
[Sat Feb 28 18:42:28.529512 2026] [:error] [pid 39183:tid 39198] [client 209.87.169.160:51411] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaLGlBCf4HvhVePw3LaSmwAAAAY"]
[Sat Feb 28 18:42:31.774636 2026] [proxy_fcgi:error] [pid 22194:tid 22219] [client 185.198.240.178:55617] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:42:32.021472 2026] [:error] [pid 22194:tid 22204] [client 185.198.240.178:55617] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaLGmH6mbajs3bzQGyuG-AAAAUg"]
[Sat Feb 28 18:42:32.527092 2026] [proxy_fcgi:error] [pid 49763:tid 49774] [client 185.198.240.173:62521] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Sat Feb 28 18:42:33.007067 2026] [:error] [pid 49763:tid 49787] [client 45.131.195.253:41025] [client 45.131.195.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "aaLGmbTHSOG_yf2PpqFzMwAAAdU"]
[Sat Feb 28 18:42:33.489140 2026] [:error] [pid 39185:tid 39246] [client 185.198.240.177:47699] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaLGmRVE-FfM89u7BQaAYAAAAIA"]
[Sat Feb 28 18:42:33.969304 2026] [:error] [pid 52460:tid 52487] [client 209.87.169.166:53259] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaLGmbLWOogAgHGh62QIzwAAAZg"]
[Sat Feb 28 18:42:34.506268 2026] [:error] [pid 39184:tid 39223] [client 185.198.240.170:42985] [client 185.198.240.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaLGmltZF9Zd_U7easBtAQAAAEQ"]
[Sat Feb 28 18:42:35.039269 2026] [:error] [pid 39184:tid 39229] [client 185.198.240.163:35537] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaLGm1tZF9Zd_U7easBtBgAAAEo"]
[Sat Feb 28 18:42:35.511005 2026] [:error] [pid 52460:tid 52471] [client 185.198.240.160:36029] [client 185.198.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaLGm7LWOogAgHGh62QI2AAAAYg"]
[Sat Feb 28 18:42:38.702189 2026] [:error] [pid 39184:tid 39241] [client 209.87.169.158:34669] [client 209.87.169.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaLGnltZF9Zd_U7easBtCwAAAFY"]
[Sat Feb 28 18:42:39.241830 2026] [:error] [pid 39292:tid 39310] [client 185.198.240.165:54383] [client 185.198.240.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaLGn6IAO5fN7BxyqcFHJAAAANA"]
[Sat Feb 28 18:42:39.839845 2026] [:error] [pid 52460:tid 52477] [client 185.198.240.158:60463] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaLGn7LWOogAgHGh62QI8gAAAY4"]
[Sat Feb 28 18:42:41.733793 2026] [:error] [pid 39185:tid 39254] [client 185.198.240.163:48903] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaLGoRVE-FfM89u7BQaAZQAAAIg"]
[Sat Feb 28 18:42:45.049457 2026] [:error] [pid 49763:tid 49769] [client 45.131.195.253:28127] [client 45.131.195.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaLGpbTHSOG_yf2PpqFzywAAAcM"]
[Sat Feb 28 18:42:45.570688 2026] [proxy_fcgi:error] [pid 39184:tid 39237] [client 173.239.214.179:43683] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:42:49.939788 2026] [:error] [pid 39184:tid 39241] [client 173.239.214.179:43683] [client 173.239.214.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.179, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaLGqVtZF9Zd_U7easBtHwAAAFY"]
[Sat Feb 28 18:42:57.404862 2026] [:error] [pid 39184:tid 39231] [client 173.239.214.179:43683] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaLGsVtZF9Zd_U7easBtLwAAAEw"]
[Sat Feb 28 18:42:57.904903 2026] [:error] [pid 39183:tid 39207] [client 209.87.169.173:42403] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaLGsRCf4HvhVePw3LaTQQAAAA8"]
[Sat Feb 28 18:43:19.460523 2026] [:error] [pid 39183:tid 39216] [client 209.87.169.168:24539] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaLGxxCf4HvhVePw3LaTnQAAABg"]
[Sat Feb 28 18:43:20.017212 2026] [:error] [pid 39183:tid 39207] [client 185.198.240.180:59899] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaLGyBCf4HvhVePw3LaToAAAAA8"]
[Sat Feb 28 18:43:20.537894 2026] [:error] [pid 39183:tid 39209] [client 185.198.240.163:48691] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaLGyBCf4HvhVePw3LaTpwAAABE"]
[Sat Feb 28 18:43:28.434977 2026] [:error] [pid 39183:tid 39197] [client 209.87.169.169:20559] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaLG0BCf4HvhVePw3LaT2AAAAAU"]
[Sat Feb 28 18:43:28.933014 2026] [:error] [pid 11791:tid 11805] [client 173.239.214.179:58097] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaLG0GuX5e1Q32gqxH2aPAAAAQw"]
[Sat Feb 28 18:43:29.461762 2026] [:error] [pid 39292:tid 39307] [client 185.198.240.164:48083] [client 185.198.240.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaLG0aIAO5fN7BxyqcFHpgAAAM0"]
[Sat Feb 28 18:43:35.004613 2026] [:error] [pid 39183:tid 39201] [client 209.87.169.166:41293] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaLG1xCf4HvhVePw3LaT9wAAAAk"]
[Sat Feb 28 18:43:36.972560 2026] [:error] [pid 49763:tid 49766] [client 209.87.169.163:45599] [client 209.87.169.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaLG2LTHSOG_yf2PpqF1GQAAAcA"]
[Sat Feb 28 18:43:40.238698 2026] [:error] [pid 49763:tid 49768] [client 209.87.169.168:35619] [client 209.87.169.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaLG3LTHSOG_yf2PpqF1OgAAAcI"]
[Sat Feb 28 18:43:55.966357 2026] [:error] [pid 49763:tid 49784] [client 185.198.240.159:31095] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaLG67THSOG_yf2PpqF1xQAAAdI"]
[Sat Feb 28 18:43:59.055995 2026] [:error] [pid 39184:tid 39242] [client 185.198.240.180:47715] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "aaLG71tZF9Zd_U7easBuDgAAAFc"]
[Sat Feb 28 18:44:07.269509 2026] [:error] [pid 22194:tid 22202] [client 185.198.240.166:42263] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaLG936mbajs3bzQGyuHWAAAAUY"]
[Sat Feb 28 18:44:10.413671 2026] [:error] [pid 52460:tid 52475] [client 173.239.214.180:43023] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaLG-rLWOogAgHGh62QKvgAAAYw"]
[Sat Feb 28 18:44:16.488190 2026] [:error] [pid 52460:tid 52487] [client 209.87.169.164:57881] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaLHALLWOogAgHGh62QK8gAAAZg"]
[Sat Feb 28 18:44:23.199335 2026] [:error] [pid 39183:tid 39208] [client 185.198.240.176:23331] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaLHBxCf4HvhVePw3LaVAAAAABA"]
[Sat Feb 28 18:44:26.258830 2026] [:error] [pid 39185:tid 39260] [client 185.198.240.175:51225] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaLHChVE-FfM89u7BQaA1AAAAI4"]
[Sat Feb 28 18:44:26.746068 2026] [:error] [pid 52460:tid 52475] [client 173.239.214.181:44289] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaLHCrLWOogAgHGh62QLHAAAAYw"]
[Sat Feb 28 18:44:34.259101 2026] [:error] [pid 39184:tid 39235] [client 185.198.240.173:53519] [client 185.198.240.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaLHEltZF9Zd_U7easBucQAAAFA"]
[Sat Feb 28 18:44:40.956505 2026] [:error] [pid 39292:tid 39299] [client 209.87.169.163:48717] [client 209.87.169.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaLHGKIAO5fN7BxyqcFIPQAAAMU"]
[Sat Feb 28 18:44:46.513777 2026] [:error] [pid 49763:tid 49773] [client 209.87.169.169:23729] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaLHHrTHSOG_yf2PpqF3EQAAAcc"]
[Sat Feb 28 18:44:46.982446 2026] [:error] [pid 49763:tid 49774] [client 45.131.195.215:43171] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaLHHrTHSOG_yf2PpqF3FQAAAcg"]
[Sat Feb 28 18:44:50.154446 2026] [:error] [pid 49763:tid 49781] [client 185.198.240.181:62345] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaLHIrTHSOG_yf2PpqF3QgAAAc8"]
[Sat Feb 28 18:44:54.431227 2026] [:error] [pid 49763:tid 49768] [client 185.198.240.171:36325] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaLHJrTHSOG_yf2PpqF3cgAAAcI"]
[Sat Feb 28 18:44:54.940946 2026] [:error] [pid 11791:tid 11798] [client 209.87.169.173:58223] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaLHJmuX5e1Q32gqxH2algAAAQU"]
[Sat Feb 28 18:45:03.897598 2026] [:error] [pid 22194:tid 22203] [client 185.198.240.166:54753] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaLHL36mbajs3bzQGyuHkQAAAUc"]
[Sat Feb 28 18:45:08.977526 2026] [:error] [pid 39183:tid 39199] [client 185.198.240.179:60927] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaLHNBCf4HvhVePw3LaWNwAAAAc"]
[Sat Feb 28 18:45:09.500132 2026] [:error] [pid 39184:tid 39225] [client 185.198.240.179:50375] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaLHNVtZF9Zd_U7easBu9AAAAEY"]
[Sat Feb 28 18:45:12.652572 2026] [:error] [pid 49763:tid 49788] [client 185.198.240.179:26379] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaLHOLTHSOG_yf2PpqF4PQAAAdY"]
[Sat Feb 28 18:45:14.511459 2026] [:error] [pid 52460:tid 52472] [client 173.239.214.179:41939] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaLHOrLWOogAgHGh62QL8AAAAYk"]
[Sat Feb 28 18:45:21.759008 2026] [:error] [pid 49763:tid 49777] [client 209.87.169.170:34015] [client 209.87.169.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaLHQbTHSOG_yf2PpqF4lQAAAcs"]
[Sat Feb 28 18:45:25.091966 2026] [:error] [pid 39183:tid 39213] [client 185.198.240.177:42583] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaLHRRCf4HvhVePw3LaWxgAAABU"]
[Sat Feb 28 18:45:28.336763 2026] [:error] [pid 39184:tid 39233] [client 173.239.214.181:38215] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaLHSFtZF9Zd_U7easBvIgAAAE4"]
[Sat Feb 28 18:45:30.305358 2026] [:error] [pid 49763:tid 49780] [client 209.87.169.172:58649] [client 209.87.169.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "aaLHSrTHSOG_yf2PpqF42QAAAc4"]
[Sat Feb 28 18:45:32.612558 2026] [:error] [pid 39292:tid 39309] [client 209.87.169.164:54585] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaLHTKIAO5fN7BxyqcFIgwAAAM8"]
[Sat Feb 28 18:45:33.171495 2026] [:error] [pid 49763:tid 49786] [client 173.239.214.180:49087] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "aaLHTbTHSOG_yf2PpqF45gAAAdQ"]
[Sat Feb 28 18:45:33.703019 2026] [:error] [pid 39185:tid 39261] [client 185.198.240.161:41893] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaLHTRVE-FfM89u7BQaA_wAAAI8"]
[Sat Feb 28 18:45:42.164865 2026] [:error] [pid 39183:tid 39213] [client 185.198.240.168:34725] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaLHVhCf4HvhVePw3LaXYwAAABU"]
[Sat Feb 28 18:45:46.591278 2026] [:error] [pid 52460:tid 52466] [client 209.87.169.164:63115] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaLHWrLWOogAgHGh62QMaAAAAYM"]
[Sat Feb 28 18:45:51.048849 2026] [:error] [pid 39183:tid 39196] [client 209.87.169.159:49247] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaLHXxCf4HvhVePw3LaXngAAAAQ"]
[Sat Feb 28 18:45:55.595031 2026] [:error] [pid 39183:tid 39197] [client 209.87.169.159:58295] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaLHYxCf4HvhVePw3LaXxwAAAAU"]
[Sat Feb 28 18:46:03.929020 2026] [:error] [pid 39183:tid 39192] [client 209.87.169.173:59201] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaLHaxCf4HvhVePw3LaYNQAAAAA"]
[Sat Feb 28 18:46:05.867735 2026] [:error] [pid 39184:tid 39226] [client 185.198.240.179:32521] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaLHbVtZF9Zd_U7easBvjAAAAEc"]
[Sat Feb 28 18:46:07.874400 2026] [:error] [pid 39183:tid 39192] [client 185.198.240.167:26905] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaLHbxCf4HvhVePw3LaYWQAAAAA"]
[Sat Feb 28 18:46:11.595810 2026] [:error] [pid 52460:tid 52486] [client 209.87.169.166:35313] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaLHc7LWOogAgHGh62QM3wAAAZc"]
[Sat Feb 28 18:46:22.490979 2026] [:error] [pid 39292:tid 39298] [client 185.198.240.98:61647] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaLHfqIAO5fN7BxyqcFI-QAAAMQ"]
[Sat Feb 28 18:46:22.995642 2026] [:error] [pid 49763:tid 49778] [client 185.198.240.162:57883] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaLHfrTHSOG_yf2PpqF6ogAAAcw"]
[Sat Feb 28 18:46:27.307882 2026] [:error] [pid 52460:tid 52471] [client 185.198.240.172:46257] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaLHg7LWOogAgHGh62QNLAAAAYg"]
[Sat Feb 28 18:46:27.840148 2026] [:error] [pid 39292:tid 39307] [client 185.198.240.167:21199] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaLHg6IAO5fN7BxyqcFJCQAAAM0"]
[Sat Feb 28 18:46:31.033506 2026] [:error] [pid 52460:tid 52471] [client 185.198.240.181:59833] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaLHh7LWOogAgHGh62QNNgAAAYg"]
[Sat Feb 28 18:46:31.534166 2026] [:error] [pid 39183:tid 39194] [client 209.87.169.163:41805] [client 209.87.169.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aaLHhxCf4HvhVePw3LaZAAAAAAI"]
[Sat Feb 28 18:46:32.042310 2026] [:error] [pid 49763:tid 49777] [client 185.198.240.159:28913] [client 185.198.240.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.159, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaLHiLTHSOG_yf2PpqF6-AAAAcs"]
[Sat Feb 28 18:46:32.046995 2026] [proxy_fcgi:error] [pid 49763:tid 49777] [client 185.198.240.159:28913] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:46:32.305778 2026] [:error] [pid 49763:tid 49782] [client 185.198.240.159:28913] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaLHiLTHSOG_yf2PpqF6-gAAAdA"]
[Sat Feb 28 18:46:37.805539 2026] [:error] [pid 49763:tid 49779] [client 185.198.240.159:29181] [client 185.198.240.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaLHjbTHSOG_yf2PpqF7RgAAAc0"]
[Sat Feb 28 18:46:38.353525 2026] [:error] [pid 39184:tid 39224] [client 185.198.240.174:43579] [client 185.198.240.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "aaLHjltZF9Zd_U7easBv2wAAAEU"]
[Sat Feb 28 18:46:49.145535 2026] [:error] [pid 39183:tid 39201] [client 185.198.240.161:21443] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaLHmRCf4HvhVePw3LaZcAAAAAk"]
[Sat Feb 28 18:46:51.347763 2026] [:error] [pid 39183:tid 39208] [client 185.198.240.167:26861] [client 185.198.240.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaLHmxCf4HvhVePw3LaZiQAAABA"]
[Sat Feb 28 18:46:54.431984 2026] [:error] [pid 39183:tid 39210] [client 45.131.195.252:32783] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaLHnhCf4HvhVePw3LaZoQAAABI"]
[Sat Feb 28 18:46:54.956830 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.177:58119] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aaLHnrTHSOG_yf2PpqF7vQAAAdE"]
[Sat Feb 28 18:46:56.543331 2026] [proxy_fcgi:error] [pid 39292:tid 39312] [client 185.198.240.98:40703] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:46:56.790261 2026] [:error] [pid 39292:tid 39313] [client 185.198.240.98:40703] [client 185.198.240.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.98, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaLHoKIAO5fN7BxyqcFJNAAAANM"]
[Sat Feb 28 18:46:59.406189 2026] [:error] [pid 39292:tid 39296] [client 185.198.240.98:40703] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaLHo6IAO5fN7BxyqcFJOgAAAMI"]
[Sat Feb 28 18:47:04.809497 2026] [:error] [pid 49763:tid 49785] [client 185.198.240.169:20751] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaLHqLTHSOG_yf2PpqF8GQAAAdM"]
[Sat Feb 28 18:47:06.827937 2026] [:error] [pid 39183:tid 39209] [client 209.87.169.158:24489] [client 209.87.169.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaLHqhCf4HvhVePw3LaZ6wAAABE"]
[Sat Feb 28 18:47:07.355077 2026] [:error] [pid 49763:tid 49771] [client 209.87.169.170:22633] [client 209.87.169.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaLHq7THSOG_yf2PpqF8JAAAAcU"]
[Sat Feb 28 18:47:11.895436 2026] [:error] [pid 49763:tid 49779] [client 45.131.195.215:58579] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaLHr7THSOG_yf2PpqF8VQAAAc0"]
[Sat Feb 28 18:47:15.335764 2026] [:error] [pid 49763:tid 49770] [client 45.131.195.216:44005] [client 45.131.195.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaLHs7THSOG_yf2PpqF8bQAAAcQ"]
[Sat Feb 28 18:47:21.182128 2026] [:error] [pid 49763:tid 49782] [client 173.239.214.179:21465] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaLHubTHSOG_yf2PpqF8pwAAAdA"]
[Sat Feb 28 18:47:21.710902 2026] [:error] [pid 49763:tid 49787] [client 185.198.240.168:32705] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "aaLHubTHSOG_yf2PpqF8qgAAAdU"]
[Sat Feb 28 18:47:23.618855 2026] [:error] [pid 49763:tid 49785] [client 45.131.195.215:56157] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "aaLHu7THSOG_yf2PpqF8vwAAAdM"]
[Sat Feb 28 18:47:32.049572 2026] [:error] [pid 49763:tid 49790] [client 185.198.240.179:61915] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaLHxLTHSOG_yf2PpqF8_QAAAdg"]
[Sat Feb 28 18:47:35.243036 2026] [:error] [pid 39185:tid 39262] [client 209.87.169.166:63245] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "aaLHxxVE-FfM89u7BQaBbgAAAJA"]
[Sat Feb 28 18:47:35.531248 2026] [:error] [pid 39185:tid 39253] [client 209.87.169.166:63245] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaLHxxVE-FfM89u7BQaBbwAAAIc"]
[Sat Feb 28 18:47:38.673737 2026] [:error] [pid 49763:tid 49788] [client 185.198.240.172:40387] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaLHyrTHSOG_yf2PpqF9SgAAAdY"]
[Sat Feb 28 18:47:39.235215 2026] [:error] [pid 49763:tid 49769] [client 173.239.214.181:25567] [client 173.239.214.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaLHy7THSOG_yf2PpqF9UAAAAcM"]
[Sat Feb 28 18:47:47.869742 2026] [:error] [pid 52460:tid 52472] [client 185.198.240.176:41393] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaLH07LWOogAgHGh62QOKwAAAYk"]
[Sat Feb 28 18:47:50.987908 2026] [:error] [pid 39183:tid 39195] [client 185.198.240.166:21077] [client 185.198.240.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaLH1hCf4HvhVePw3LaawwAAAAM"]
[Sat Feb 28 18:47:52.904629 2026] [:error] [pid 39183:tid 39203] [client 185.198.240.160:25315] [client 185.198.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaLH2BCf4HvhVePw3Laa0AAAAAs"]
[Sat Feb 28 18:47:59.674058 2026] [:error] [pid 52460:tid 52465] [client 209.87.169.166:48477] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaLH37LWOogAgHGh62QOYAAAAYI"]
[Sat Feb 28 18:48:01.669810 2026] [:error] [pid 49763:tid 49775] [client 45.131.195.214:27939] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "aaLH4bTHSOG_yf2PpqF96wAAAck"]
[Sat Feb 28 18:48:03.606521 2026] [:error] [pid 22194:tid 22212] [client 209.87.169.169:42169] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaLH436mbajs3bzQGyuIEQAAAVA"]
[Sat Feb 28 18:48:04.082076 2026] [:error] [pid 39184:tid 39223] [client 185.198.240.162:25785] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaLH5FtZF9Zd_U7easBwmAAAAEQ"]
[Sat Feb 28 18:48:07.181194 2026] [:error] [pid 39185:tid 39263] [client 185.198.240.168:53465] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaLH5xVE-FfM89u7BQaBewAAAJE"]
[Sat Feb 28 18:48:12.795255 2026] [:error] [pid 39183:tid 39215] [client 45.131.195.214:53927] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaLH7BCf4HvhVePw3LabLwAAABc"]
[Sat Feb 28 18:48:13.276993 2026] [:error] [pid 49763:tid 49784] [client 209.87.169.169:60805] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaLH7bTHSOG_yf2PpqF-IgAAAdI"]
[Sat Feb 28 18:48:19.838987 2026] [:error] [pid 49763:tid 49781] [client 209.87.169.159:57253] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaLH87THSOG_yf2PpqF-RgAAAc8"]
[Sat Feb 28 18:48:22.934928 2026] [:error] [pid 39184:tid 39237] [client 185.198.240.177:57765] [client 185.198.240.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaLH9ltZF9Zd_U7easBw0QAAAFI"]
[Sat Feb 28 18:48:27.338341 2026] [:error] [pid 49763:tid 49772] [client 209.87.169.157:20093] [client 209.87.169.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaLH-7THSOG_yf2PpqF-cwAAAcY"]
[Sat Feb 28 18:48:27.972318 2026] [:error] [pid 49763:tid 49780] [client 209.87.169.173:26187] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaLH-7THSOG_yf2PpqF-eQAAAc4"]
[Sat Feb 28 18:48:29.879339 2026] [:error] [pid 39184:tid 39226] [client 185.198.240.179:26885] [client 185.198.240.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaLH_VtZF9Zd_U7easBw4AAAAEc"]
[Sat Feb 28 18:48:32.949802 2026] [:error] [pid 39183:tid 39213] [client 185.198.240.181:24527] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaLIABCf4HvhVePw3LabkwAAABU"]
[Sat Feb 28 18:48:36.118015 2026] [:error] [pid 39292:tid 39295] [client 209.87.169.165:21727] [client 209.87.169.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaLIBKIAO5fN7BxyqcFJ7wAAAME"]
[Sat Feb 28 18:48:36.628898 2026] [:error] [pid 49763:tid 49771] [client 185.198.240.98:35861] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaLIBLTHSOG_yf2PpqF-rAAAAcU"]
[Sat Feb 28 18:48:38.987164 2026] [:error] [pid 39183:tid 39198] [client 209.87.169.169:55017] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaLIBhCf4HvhVePw3LabugAAAAY"]
[Sat Feb 28 18:48:39.566443 2026] [:error] [pid 39184:tid 39222] [client 185.198.240.176:57941] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aaLIB1tZF9Zd_U7easBw5gAAAEM"]
[Sat Feb 28 18:48:42.748438 2026] [:error] [pid 49763:tid 49784] [client 209.87.169.173:63087] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaLICrTHSOG_yf2PpqF-1wAAAdI"]
[Sat Feb 28 18:48:44.430782 2026] [:error] [pid 49763:tid 49766] [client 209.87.169.166:29747] [client 209.87.169.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaLIDLTHSOG_yf2PpqF-5wAAAcA"]
[Sat Feb 28 18:48:45.007603 2026] [:error] [pid 52460:tid 52486] [client 209.87.169.156:34829] [client 209.87.169.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaLIDbLWOogAgHGh62QPQAAAAZc"]
[Sat Feb 28 18:48:45.480738 2026] [:error] [pid 39183:tid 39206] [client 45.131.195.217:34247] [client 45.131.195.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaLIDRCf4HvhVePw3Lab0QAAAA4"]
[Sat Feb 28 18:48:49.786216 2026] [:error] [pid 39184:tid 39233] [client 185.198.240.163:58165] [client 185.198.240.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaLIEVtZF9Zd_U7easBw-wAAAE4"]
[Sat Feb 28 18:48:53.198025 2026] [:error] [pid 52460:tid 52482] [client 209.87.169.167:32175] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaLIFbLWOogAgHGh62QPaQAAAZM"]
[Sat Feb 28 18:48:55.053903 2026] [:error] [pid 52460:tid 52477] [client 185.198.240.181:61037] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaLIF7LWOogAgHGh62QPbwAAAY4"]
[Sat Feb 28 18:48:55.575501 2026] [proxy_fcgi:error] [pid 49763:tid 49772] [client 185.198.240.164:39321] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Sat Feb 28 18:48:56.147189 2026] [:error] [pid 49763:tid 49779] [client 209.87.169.159:63599] [client 209.87.169.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaLIGLTHSOG_yf2PpqF_IwAAAc0"]
[Sat Feb 28 18:49:04.602199 2026] [:error] [pid 49763:tid 49781] [client 185.198.240.161:36857] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaLIILTHSOG_yf2PpqF_bAAAAc8"]
[Sat Feb 28 18:49:05.153661 2026] [:error] [pid 49763:tid 49789] [client 45.131.195.252:44171] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaLIIbTHSOG_yf2PpqF_cgAAAdc"]
[Sat Feb 28 18:49:08.418295 2026] [:error] [pid 52460:tid 52484] [client 185.198.240.161:51267] [client 185.198.240.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaLIJLLWOogAgHGh62QPhgAAAZU"]
[Sat Feb 28 18:49:14.222895 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.170:59841] [client 185.198.240.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaLIKrTHSOG_yf2PpqF_uAAAAdE"]
[Sat Feb 28 18:49:17.504071 2026] [:error] [pid 11791:tid 11805] [client 173.239.214.179:27929] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaLILWuX5e1Q32gqxH2cBgAAAQw"]
[Sat Feb 28 18:49:20.018257 2026] [:error] [pid 39183:tid 39197] [client 209.87.169.157:20707] [client 209.87.169.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaLIMBCf4HvhVePw3LacUgAAAAU"]
[Sat Feb 28 18:49:21.849136 2026] [:error] [pid 39183:tid 39205] [client 185.198.240.171:58275] [client 185.198.240.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaLIMRCf4HvhVePw3LacVQAAAA0"]
[Sat Feb 28 18:49:23.850242 2026] [:error] [pid 39184:tid 39231] [client 209.87.169.173:28591] [client 209.87.169.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaLIM1tZF9Zd_U7easBxKQAAAEw"]
[Sat Feb 28 18:49:29.603037 2026] [:error] [pid 39183:tid 39196] [client 185.198.240.172:58097] [client 185.198.240.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaLIORCf4HvhVePw3LaccgAAAAQ"]
[Sat Feb 28 18:49:34.169675 2026] [:error] [pid 52460:tid 52469] [client 185.198.240.168:60749] [client 185.198.240.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaLIPrLWOogAgHGh62QPqQAAAYY"]
[Sat Feb 28 18:49:34.688645 2026] [proxy_fcgi:error] [pid 39183:tid 39196] [client 209.87.169.172:31423] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 18:49:34.962590 2026] [:error] [pid 39183:tid 39211] [client 209.87.169.172:31423] [client 209.87.169.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaLIPhCf4HvhVePw3LacggAAABM"]
[Sat Feb 28 18:49:35.445693 2026] [:error] [pid 49763:tid 49773] [client 209.87.169.162:53485] [client 209.87.169.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaLIP7THSOG_yf2PpqGAMwAAAcc"]
[Sat Feb 28 18:49:39.208095 2026] [:error] [pid 49763:tid 49774] [client 185.198.240.173:26319] [client 185.198.240.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaLIQ7THSOG_yf2PpqGAUwAAAcg"]
[Sat Feb 28 18:49:39.719200 2026] [:error] [pid 39183:tid 39210] [client 45.131.195.214:44777] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaLIQxCf4HvhVePw3LacjgAAABI"]
[Sat Feb 28 18:49:47.601305 2026] [:error] [pid 52460:tid 52471] [client 185.198.240.181:25755] [client 185.198.240.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaLIS7LWOogAgHGh62QPyQAAAYg"]
[Sat Feb 28 18:49:48.218789 2026] [:error] [pid 49763:tid 49779] [client 209.87.169.169:32107] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaLITLTHSOG_yf2PpqGAmQAAAc0"]
[Sat Feb 28 18:49:50.066548 2026] [:error] [pid 49763:tid 49773] [client 173.239.214.180:58217] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/log.php"] [unique_id "aaLITrTHSOG_yf2PpqGArwAAAcc"]
[Sat Feb 28 18:49:50.527506 2026] [:error] [pid 49763:tid 49788] [client 185.198.240.180:56801] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaLITrTHSOG_yf2PpqGAtAAAAdY"]
[Sat Feb 28 18:49:51.084783 2026] [:error] [pid 49763:tid 49776] [client 45.131.195.215:22887] [client 45.131.195.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaLIT7THSOG_yf2PpqGAvQAAAco"]
[Sat Feb 28 18:49:51.698682 2026] [:error] [pid 49763:tid 49783] [client 45.131.195.214:48873] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/aw.php"] [unique_id "aaLIT7THSOG_yf2PpqGAwgAAAdE"]
[Sat Feb 28 18:49:57.937783 2026] [:error] [pid 49763:tid 49790] [client 173.239.214.179:51313] [client 173.239.214.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaLIVbTHSOG_yf2PpqGA_gAAAdg"]
[Sat Feb 28 18:49:58.395461 2026] [:error] [pid 39185:tid 39258] [client 173.239.214.180:60477] [client 173.239.214.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/install.php"] [unique_id "aaLIVhVE-FfM89u7BQaBrQAAAIw"]
[Sat Feb 28 18:50:01.523110 2026] [:error] [pid 49763:tid 49767] [client 185.198.240.158:29793] [client 185.198.240.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaLIWbTHSOG_yf2PpqGBJgAAAcE"]
[Sat Feb 28 18:50:02.022247 2026] [:error] [pid 39183:tid 39206] [client 185.198.240.162:31399] [client 185.198.240.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaLIWhCf4HvhVePw3LacwQAAAA4"]
[Sat Feb 28 18:50:06.773954 2026] [:error] [pid 11791:tid 11812] [client 209.87.169.161:60391] [client 209.87.169.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/template-less.php"] [unique_id "aaLIXmuX5e1Q32gqxH2cewAAARM"]
[Sat Feb 28 18:50:07.306636 2026] [:error] [pid 39184:tid 39238] [client 185.198.240.98:42213] [client 185.198.240.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaLIX1tZF9Zd_U7easBxZAAAAFM"]
[Sat Feb 28 18:50:16.868861 2026] [:error] [pid 39183:tid 39198] [client 185.198.240.160:60687] [client 185.198.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aaLIaBCf4HvhVePw3Lac7wAAAAY"]
[Sat Feb 28 18:50:17.327098 2026] [:error] [pid 39185:tid 39253] [client 185.198.240.175:23755] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaLIaRVE-FfM89u7BQaBswAAAIc"]
[Sat Feb 28 18:50:20.474604 2026] [:error] [pid 49763:tid 49788] [client 185.198.240.178:54121] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "aaLIbLTHSOG_yf2PpqGBlQAAAdY"]
[Sat Feb 28 18:50:22.355160 2026] [:error] [pid 39184:tid 39240] [client 185.198.240.180:42429] [client 185.198.240.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaLIbltZF9Zd_U7easBxdgAAAFU"]
[Sat Feb 28 18:50:24.340304 2026] [:error] [pid 49763:tid 49783] [client 185.198.240.178:24031] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/load.php"] [unique_id "aaLIcLTHSOG_yf2PpqGBugAAAdE"]
[Sat Feb 28 18:50:24.855998 2026] [:error] [pid 39184:tid 39230] [client 185.198.240.178:25047] [client 185.198.240.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaLIcFtZF9Zd_U7easBxeAAAAEs"]
[Sat Feb 28 18:50:25.370151 2026] [:error] [pid 39184:tid 39224] [client 45.131.195.252:42741] [client 45.131.195.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaLIcVtZF9Zd_U7easBxegAAAEU"]
[Sat Feb 28 18:50:29.738557 2026] [:error] [pid 39183:tid 39207] [client 209.87.169.171:32629] [client 209.87.169.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaLIdRCf4HvhVePw3LadCAAAAA8"]
[Sat Feb 28 18:50:31.911281 2026] [:error] [pid 49763:tid 49769] [client 185.198.240.169:55741] [client 185.198.240.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaLId7THSOG_yf2PpqGCDgAAAcM"]
[Sat Feb 28 18:50:36.350659 2026] [:error] [pid 49763:tid 49766] [client 209.87.169.164:27731] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaLIfLTHSOG_yf2PpqGCPwAAAcA"]
[Sat Feb 28 18:50:36.880877 2026] [:error] [pid 49763:tid 49775] [client 209.87.169.160:47249] [client 209.87.169.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaLIfLTHSOG_yf2PpqGCQQAAAck"]
[Sat Feb 28 18:50:38.977283 2026] [:error] [pid 49763:tid 49785] [client 209.87.169.164:44551] [client 209.87.169.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaLIfrTHSOG_yf2PpqGCVQAAAdM"]
[Sat Feb 28 18:50:50.457994 2026] [:error] [pid 52460:tid 52477] [client 185.198.240.175:33899] [client 185.198.240.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aaLIirLWOogAgHGh62QQLgAAAY4"]
[Sat Feb 28 18:50:52.031312 2026] [:error] [pid 39183:tid 39203] [client 209.87.169.169:62933] [client 209.87.169.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaLIjBCf4HvhVePw3LadOgAAAAs"]
[Sat Feb 28 18:50:56.603257 2026] [:error] [pid 49763:tid 49773] [client 209.87.169.171:39865] [client 209.87.169.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaLIkLTHSOG_yf2PpqGC8wAAAcc"]
[Sat Feb 28 18:50:57.096925 2026] [:error] [pid 52460:tid 52479] [client 185.198.240.176:61723] [client 185.198.240.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaLIkbLWOogAgHGh62QQTQAAAZA"]
[Sat Feb 28 18:50:57.551646 2026] [:error] [pid 49763:tid 49775] [client 45.131.195.214:33347] [client 45.131.195.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaLIkbTHSOG_yf2PpqGC9wAAAck"]
[Sat Feb 28 18:50:59.382567 2026] [autoindex:error] [pid 39183:tid 39196] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:50:59.675399 2026] [autoindex:error] [pid 39183:tid 39214] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:50:59.936778 2026] [autoindex:error] [pid 39183:tid 39205] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:00.269865 2026] [autoindex:error] [pid 39183:tid 39209] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:01.822793 2026] [autoindex:error] [pid 39183:tid 39202] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:02.091621 2026] [autoindex:error] [pid 39183:tid 39192] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:02.391453 2026] [autoindex:error] [pid 39183:tid 39215] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:02.657793 2026] [autoindex:error] [pid 39183:tid 39204] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:02.938283 2026] [autoindex:error] [pid 39183:tid 39199] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:03.220103 2026] [autoindex:error] [pid 39183:tid 39213] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:03.750066 2026] [autoindex:error] [pid 39183:tid 39197] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:05.238686 2026] [autoindex:error] [pid 39183:tid 39212] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:05.787953 2026] [autoindex:error] [pid 39183:tid 39214] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:08.492490 2026] [autoindex:error] [pid 39183:tid 39195] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:08.780883 2026] [autoindex:error] [pid 39183:tid 39209] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:09.079403 2026] [autoindex:error] [pid 39183:tid 39202] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:09.328098 2026] [autoindex:error] [pid 39183:tid 39210] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:10.827563 2026] [autoindex:error] [pid 39183:tid 39215] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:11.073015 2026] [autoindex:error] [pid 39183:tid 39214] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:12.550269 2026] [autoindex:error] [pid 39183:tid 39192] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:15.477337 2026] [autoindex:error] [pid 39183:tid 39201] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:15.736533 2026] [autoindex:error] [pid 39183:tid 39204] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:15.995773 2026] [autoindex:error] [pid 39183:tid 39192] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:24.049918 2026] [autoindex:error] [pid 39183:tid 39206] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:25.466065 2026] [autoindex:error] [pid 39183:tid 39200] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:25.717074 2026] [autoindex:error] [pid 39183:tid 39212] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:26.476161 2026] [autoindex:error] [pid 39183:tid 39204] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:26.744969 2026] [autoindex:error] [pid 39183:tid 39197] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:26.984994 2026] [autoindex:error] [pid 39183:tid 39194] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:30.845057 2026] [autoindex:error] [pid 39183:tid 39215] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:51:32.360724 2026] [autoindex:error] [pid 39183:tid 39205] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:03.453862 2026] [autoindex:error] [pid 39183:tid 39192] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:03.730013 2026] [autoindex:error] [pid 39183:tid 39200] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:04.056920 2026] [autoindex:error] [pid 39183:tid 39197] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:04.341041 2026] [autoindex:error] [pid 39183:tid 39204] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:04.604501 2026] [autoindex:error] [pid 39183:tid 39201] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:04.876606 2026] [autoindex:error] [pid 39183:tid 39213] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:05.121244 2026] [autoindex:error] [pid 39183:tid 39209] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:05.372779 2026] [autoindex:error] [pid 39183:tid 39216] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:06.991466 2026] [autoindex:error] [pid 39183:tid 39202] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:08.718975 2026] [autoindex:error] [pid 39183:tid 39203] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:09.008572 2026] [autoindex:error] [pid 39183:tid 39194] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:09.243307 2026] [autoindex:error] [pid 39183:tid 39196] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:10.748621 2026] [autoindex:error] [pid 39183:tid 39213] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:11.035256 2026] [autoindex:error] [pid 39183:tid 39209] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:11.305872 2026] [autoindex:error] [pid 39183:tid 39193] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:11.540485 2026] [autoindex:error] [pid 39183:tid 39205] [client 185.198.240.163:39235] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:44.758619 2026] [autoindex:error] [pid 49763:tid 49771] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:52:58.719111 2026] [autoindex:error] [pid 49763:tid 49775] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:03.860022 2026] [autoindex:error] [pid 49763:tid 49786] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:04.150975 2026] [autoindex:error] [pid 49763:tid 49778] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:09.333371 2026] [autoindex:error] [pid 49763:tid 49771] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:09.598666 2026] [autoindex:error] [pid 49763:tid 49773] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:09.889855 2026] [autoindex:error] [pid 49763:tid 49768] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:10.167391 2026] [autoindex:error] [pid 49763:tid 49769] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:10.461063 2026] [autoindex:error] [pid 49763:tid 49789] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:10.735754 2026] [autoindex:error] [pid 49763:tid 49770] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:11.017796 2026] [autoindex:error] [pid 49763:tid 49766] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:11.300147 2026] [autoindex:error] [pid 49763:tid 49782] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:11.584018 2026] [autoindex:error] [pid 49763:tid 49781] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:53:35.422687 2026] [autoindex:error] [pid 49763:tid 49775] [client 45.131.195.216:50937] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 18:58:30.841106 2026] [:error] [pid 39184:tid 39224] [client 82.29.157.105:22994] [client 82.29.157.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aaLKVltZF9Zd_U7easB2hwAAAEU"]
[Sat Feb 28 19:12:18.190699 2026] [:error] [pid 49763:tid 49781] [client 20.205.227.70:24255] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/000.php"] [unique_id "aaLNkrTHSOG_yf2PpqGiiAAAAc8"]
[Sat Feb 28 19:12:18.541926 2026] [:error] [pid 39183:tid 39196] [client 20.205.227.70:17497] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/000.php"] [unique_id "aaLNkhCf4HvhVePw3La0YAAAAAQ"]
[Sat Feb 28 19:12:18.896453 2026] [:error] [pid 49763:tid 49769] [client 20.205.227.70:4906] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/000.php"] [unique_id "aaLNkrTHSOG_yf2PpqGikAAAAcM"]
[Sat Feb 28 19:12:19.264496 2026] [:error] [pid 49763:tid 49780] [client 20.205.227.70:19462] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/000.php"] [unique_id "aaLNk7THSOG_yf2PpqGilQAAAc4"]
[Sat Feb 28 19:58:51.856252 2026] [:error] [pid 52460:tid 52475] [client 4.204.192.31:50065] [client 4.204.192.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaLYe7LWOogAgHGh62RG5wAAAYw"]
[Sat Feb 28 19:59:06.376437 2026] [:error] [pid 49763:tid 49787] [client 4.204.192.31:8319] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaLYirTHSOG_yf2PpqHzEAAAAdU"]
[Sat Feb 28 20:00:02.914962 2026] [:error] [pid 39185:tid 39264] [client 4.204.192.31:54130] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaLYwhVE-FfM89u7BQaQdQAAAJI"]
[Sat Feb 28 20:05:20.015170 2026] [:error] [pid 49763:tid 49776] [client 43.133.187.11:51958] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaLaALTHSOG_yf2PpqH_AAAAAco"]
[Sat Feb 28 20:14:31.196812 2026] [:error] [pid 49763:tid 49789] [client 20.220.212.70:19436] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaLcJ7THSOG_yf2PpqETSgAAAdc"]
[Sat Feb 28 20:14:32.047780 2026] [:error] [pid 49763:tid 49780] [client 20.220.212.70:19417] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaLcKLTHSOG_yf2PpqETVAAAAc4"]
[Sat Feb 28 20:14:32.895363 2026] [:error] [pid 52460:tid 52472] [client 20.220.212.70:18506] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaLcKLLWOogAgHGh62RVbwAAAYk"]
[Sat Feb 28 20:14:33.735310 2026] [:error] [pid 52460:tid 52483] [client 20.220.212.70:19399] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaLcKbLWOogAgHGh62RVcQAAAZQ"]
[Sat Feb 28 20:52:41.662596 2026] [:error] [pid 11791:tid 11800] [client 94.247.172.129:12498] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaLlGWuX5e1Q32gqxH2_nAAAAQc"]
[Sat Feb 28 21:13:12.045177 2026] [:error] [pid 39184:tid 39219] [client 20.104.82.189:1130] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/jga.php"] [unique_id "aaLp6FtZF9Zd_U7easC_hgAAAEA"]
[Sat Feb 28 21:13:14.193189 2026] [:error] [pid 49763:tid 49779] [client 20.104.82.189:1272] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/widget-cache.php"] [unique_id "aaLp6rTHSOG_yf2PpqFg8gAAAc0"]
[Sat Feb 28 21:13:15.796508 2026] [:error] [pid 52460:tid 52469] [client 20.104.82.189:1247] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-json-ajax.php"] [unique_id "aaLp67LWOogAgHGh62SCfQAAAYY"]
[Sat Feb 28 21:13:19.387481 2026] [:error] [pid 49763:tid 49775] [client 20.104.82.189:1091] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/select_file2.php"] [unique_id "aaLp77THSOG_yf2PpqFhFQAAAck"]
[Sat Feb 28 21:13:20.060610 2026] [:error] [pid 49763:tid 49783] [client 20.104.82.189:1143] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/select_file2.php"] [unique_id "aaLp8LTHSOG_yf2PpqFhHQAAAdE"]
[Sat Feb 28 21:13:20.744961 2026] [:error] [pid 52460:tid 52470] [client 20.104.82.189:1063] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/select_file2.php"] [unique_id "aaLp8LLWOogAgHGh62SChgAAAYc"]
[Sat Feb 28 21:13:21.255775 2026] [:error] [pid 52460:tid 52479] [client 20.104.82.189:1136] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/select_file2.php"] [unique_id "aaLp8bLWOogAgHGh62SCigAAAZA"]
[Sat Feb 28 21:13:21.700198 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:1262] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaLp8bLWOogAgHGh62SCkAAAAZM"]
[Sat Feb 28 21:13:22.189930 2026] [:error] [pid 22194:tid 22216] [client 20.104.82.189:1293] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaLp8n6mbajs3bzQGyukiAAAAVQ"]
[Sat Feb 28 21:13:22.681870 2026] [:error] [pid 52460:tid 52481] [client 20.104.82.189:1241] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaLp8rLWOogAgHGh62SClwAAAZI"]
[Sat Feb 28 21:13:23.129030 2026] [:error] [pid 39292:tid 39309] [client 20.104.82.189:1057] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaLp86IAO5fN7BxyqcF6DwAAAM8"]
[Sat Feb 28 21:13:23.574696 2026] [:error] [pid 49763:tid 49790] [client 20.104.82.189:1104] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/8.php"] [unique_id "aaLp87THSOG_yf2PpqFhKwAAAdg"]
[Sat Feb 28 21:13:24.075725 2026] [:error] [pid 11791:tid 11816] [client 20.104.82.189:1025] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/8.php"] [unique_id "aaLp9GuX5e1Q32gqxH3EIQAAARc"]
[Sat Feb 28 21:13:24.569409 2026] [:error] [pid 49763:tid 49771] [client 20.104.82.189:1255] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/8.php"] [unique_id "aaLp9LTHSOG_yf2PpqFhMwAAAcU"]
[Sat Feb 28 21:13:25.079873 2026] [:error] [pid 39183:tid 39214] [client 20.104.82.189:1059] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/8.php"] [unique_id "aaLp9RCf4HvhVePw3LY_yQAAABY"]
[Sat Feb 28 21:13:25.556311 2026] [:error] [pid 39184:tid 39227] [client 20.104.82.189:1037] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/sh.php"] [unique_id "aaLp9VtZF9Zd_U7easC_ogAAAEg"]
[Sat Feb 28 21:13:25.980508 2026] [:error] [pid 39184:tid 39233] [client 20.104.82.189:1260] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/sh.php"] [unique_id "aaLp9VtZF9Zd_U7easC_pwAAAE4"]
[Sat Feb 28 21:13:26.472401 2026] [:error] [pid 39185:tid 39259] [client 20.104.82.189:1180] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/sh.php"] [unique_id "aaLp9hVE-FfM89u7BQahGQAAAI0"]
[Sat Feb 28 21:13:26.905997 2026] [:error] [pid 39292:tid 39303] [client 20.104.82.189:1324] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/sh.php"] [unique_id "aaLp9qIAO5fN7BxyqcF6FQAAAMk"]
[Sat Feb 28 21:13:27.470257 2026] [:error] [pid 52460:tid 52467] [client 20.104.82.189:1283] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/start.php"] [unique_id "aaLp97LWOogAgHGh62SCoAAAAYQ"]
[Sat Feb 28 21:13:28.137582 2026] [:error] [pid 52460:tid 52479] [client 20.104.82.189:1360] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/start.php"] [unique_id "aaLp-LLWOogAgHGh62SCqgAAAZA"]
[Sat Feb 28 21:13:28.616538 2026] [:error] [pid 39185:tid 39249] [client 20.104.82.189:1146] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/start.php"] [unique_id "aaLp-BVE-FfM89u7BQahGgAAAIM"]
[Sat Feb 28 21:13:29.240458 2026] [:error] [pid 52460:tid 52473] [client 20.104.82.189:1189] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/start.php"] [unique_id "aaLp-bLWOogAgHGh62SCrwAAAYo"]
[Sat Feb 28 21:13:29.769747 2026] [:error] [pid 49763:tid 49778] [client 20.104.82.189:1198] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/incl.php"] [unique_id "aaLp-bTHSOG_yf2PpqFhSAAAAcw"]
[Sat Feb 28 21:13:30.204675 2026] [:error] [pid 39183:tid 39204] [client 20.104.82.189:1109] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers.php"] [unique_id "aaLp-hCf4HvhVePw3LY_4AAAAAw"]
[Sat Feb 28 21:13:30.647448 2026] [:error] [pid 39183:tid 39209] [client 20.104.82.189:1125] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/403.php"] [unique_id "aaLp-hCf4HvhVePw3LY_4gAAABE"]
[Sat Feb 28 21:13:31.060723 2026] [:error] [pid 49763:tid 49782] [client 20.104.82.189:1230] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/403.php"] [unique_id "aaLp-7THSOG_yf2PpqFhTgAAAdA"]
[Sat Feb 28 21:13:31.505929 2026] [:error] [pid 49763:tid 49789] [client 20.104.82.189:1160] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/403.php"] [unique_id "aaLp-7THSOG_yf2PpqFhUwAAAdc"]
[Sat Feb 28 21:13:31.932740 2026] [:error] [pid 49763:tid 49781] [client 20.104.82.189:1175] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/image.php"] [unique_id "aaLp-7THSOG_yf2PpqFhWQAAAc8"]
[Sat Feb 28 21:13:32.499204 2026] [:error] [pid 39292:tid 39311] [client 20.104.82.189:1353] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/image.php"] [unique_id "aaLp_KIAO5fN7BxyqcF6GgAAANE"]
[Sat Feb 28 21:13:33.520712 2026] [:error] [pid 39292:tid 39296] [client 20.104.82.189:1203] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/image.php"] [unique_id "aaLp_aIAO5fN7BxyqcF6GwAAAMI"]
[Sat Feb 28 21:13:34.550876 2026] [:error] [pid 49763:tid 49774] [client 20.104.82.189:1030] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/image.php"] [unique_id "aaLp_rTHSOG_yf2PpqFhbgAAAcg"]
[Sat Feb 28 21:13:35.897038 2026] [:error] [pid 39184:tid 39235] [client 20.104.82.189:1342] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/image2.php"] [unique_id "aaLp_1tZF9Zd_U7easC_xwAAAFA"]
[Sat Feb 28 21:13:38.072463 2026] [:error] [pid 39184:tid 39241] [client 20.104.82.189:1223] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/image2.php"] [unique_id "aaLqAltZF9Zd_U7easC_1AAAAFY"]
[Sat Feb 28 21:13:38.710752 2026] [:error] [pid 11791:tid 11815] [client 20.104.82.189:1178] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/image2.php"] [unique_id "aaLqAmuX5e1Q32gqxH3ENgAAARY"]
[Sat Feb 28 21:13:39.273387 2026] [:error] [pid 11791:tid 11810] [client 20.104.82.189:1282] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/image2.php"] [unique_id "aaLqA2uX5e1Q32gqxH3ENwAAARE"]
[Sat Feb 28 21:13:39.741968 2026] [:error] [pid 39292:tid 39294] [client 20.104.82.189:1412] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaLqA6IAO5fN7BxyqcF6KAAAAMA"]
[Sat Feb 28 21:13:40.521038 2026] [:error] [pid 39183:tid 39192] [client 20.104.82.189:1273] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaLqBBCf4HvhVePw3LY_9AAAAAA"]
[Sat Feb 28 21:13:42.773190 2026] [:error] [pid 39184:tid 39225] [client 20.104.82.189:1053] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaLqBltZF9Zd_U7easC_7gAAAEY"]
[Sat Feb 28 21:13:43.760687 2026] [:error] [pid 39183:tid 39202] [client 20.104.82.189:1103] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaLqBxCf4HvhVePw3LY__QAAAAo"]
[Sat Feb 28 21:13:44.824737 2026] [:error] [pid 49763:tid 49778] [client 20.104.82.189:1151] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/mandals.php"] [unique_id "aaLqCLTHSOG_yf2PpqFhtAAAAcw"]
[Sat Feb 28 21:13:45.717084 2026] [:error] [pid 22194:tid 22208] [client 20.104.82.189:1312] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/mandals.php"] [unique_id "aaLqCX6mbajs3bzQGyukuwAAAUw"]
[Sat Feb 28 21:13:46.942450 2026] [:error] [pid 49763:tid 49779] [client 20.104.82.189:1299] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/mandals.php"] [unique_id "aaLqCrTHSOG_yf2PpqFhvAAAAc0"]
[Sat Feb 28 21:13:50.062630 2026] [:error] [pid 39183:tid 39196] [client 20.104.82.189:1245] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/mandals.php"] [unique_id "aaLqDhCf4HvhVePw3LZAFQAAAAQ"]
[Sat Feb 28 21:13:51.540880 2026] [:error] [pid 11791:tid 11801] [client 20.104.82.189:1279] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaLqD2uX5e1Q32gqxH3ESQAAAQg"]
[Sat Feb 28 21:13:52.779678 2026] [:error] [pid 49763:tid 49786] [client 20.104.82.189:1112] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaLqELTHSOG_yf2PpqFhxAAAAdQ"]
[Sat Feb 28 21:13:53.460883 2026] [:error] [pid 49763:tid 49784] [client 20.104.82.189:1181] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaLqEbTHSOG_yf2PpqFhygAAAdI"]
[Sat Feb 28 21:13:54.531486 2026] [:error] [pid 52460:tid 52472] [client 20.104.82.189:1082] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaLqErLWOogAgHGh62SC3gAAAYk"]
[Sat Feb 28 21:13:55.090993 2026] [:error] [pid 11791:tid 11794] [client 20.104.82.189:1253] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-duotone.php"] [unique_id "aaLqE2uX5e1Q32gqxH3EUwAAAQE"]
[Sat Feb 28 21:13:55.672478 2026] [:error] [pid 39183:tid 39202] [client 20.104.82.189:1075] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/d.be.brow.php"] [unique_id "aaLqExCf4HvhVePw3LZAOQAAAAo"]
[Sat Feb 28 21:13:56.498047 2026] [:error] [pid 52460:tid 52482] [client 20.104.82.189:1101] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/d.be.brow.php"] [unique_id "aaLqFLLWOogAgHGh62SC5gAAAZM"]
[Sat Feb 28 21:13:57.058049 2026] [:error] [pid 39183:tid 39215] [client 20.104.82.189:1350] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/d.be.brow.php"] [unique_id "aaLqFRCf4HvhVePw3LZAQQAAABc"]
[Sat Feb 28 21:13:57.670722 2026] [:error] [pid 11791:tid 11816] [client 20.104.82.189:1304] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/d.be.brow.php"] [unique_id "aaLqFWuX5e1Q32gqxH3EXAAAARc"]
[Sat Feb 28 21:13:58.165316 2026] [:error] [pid 52460:tid 52483] [client 20.104.82.189:1171] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/submitticket.php"] [unique_id "aaLqFrLWOogAgHGh62SC7AAAAZQ"]
[Sat Feb 28 21:13:58.783313 2026] [:error] [pid 39185:tid 39251] [client 20.104.82.189:1252] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/submitticket.php"] [unique_id "aaLqFhVE-FfM89u7BQahNwAAAIU"]
[Sat Feb 28 21:13:59.459885 2026] [:error] [pid 39292:tid 39309] [client 20.104.82.189:1067] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/submitticket.php"] [unique_id "aaLqF6IAO5fN7BxyqcF6UwAAAM8"]
[Sat Feb 28 21:13:59.985737 2026] [:error] [pid 39183:tid 39194] [client 20.104.82.189:1540] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/submitticket.php"] [unique_id "aaLqFxCf4HvhVePw3LZASwAAAAI"]
[Sat Feb 28 21:14:01.227547 2026] [:error] [pid 39183:tid 39206] [client 20.104.82.189:1319] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/add_evento.php"] [unique_id "aaLqGRCf4HvhVePw3LZAVAAAAA4"]
[Sat Feb 28 21:14:01.989086 2026] [:error] [pid 49763:tid 49779] [client 20.104.82.189:1044] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/add_evento.php"] [unique_id "aaLqGbTHSOG_yf2PpqFh3AAAAc0"]
[Sat Feb 28 21:14:02.534879 2026] [:error] [pid 39183:tid 39200] [client 20.104.82.189:1559] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/add_evento.php"] [unique_id "aaLqGhCf4HvhVePw3LZAWwAAAAg"]
[Sat Feb 28 21:14:03.134910 2026] [:error] [pid 39183:tid 39192] [client 20.104.82.189:1068] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/add_evento.php"] [unique_id "aaLqGxCf4HvhVePw3LZAYQAAAAA"]
[Sat Feb 28 21:14:03.607128 2026] [:error] [pid 11791:tid 11813] [client 20.104.82.189:1139] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaLqG2uX5e1Q32gqxH3EZAAAARQ"]
[Sat Feb 28 21:14:04.294132 2026] [:error] [pid 49763:tid 49783] [client 20.104.82.189:1199] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaLqHLTHSOG_yf2PpqFh6wAAAdE"]
[Sat Feb 28 21:14:04.832472 2026] [:error] [pid 39292:tid 39318] [client 20.104.82.189:1256] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaLqHKIAO5fN7BxyqcF6XQAAANg"]
[Sat Feb 28 21:14:05.407559 2026] [:error] [pid 49763:tid 49766] [client 20.104.82.189:1306] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaLqHbTHSOG_yf2PpqFh-gAAAcA"]
[Sat Feb 28 21:14:05.990660 2026] [:error] [pid 49763:tid 49789] [client 20.104.82.189:1255] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/goods.php"] [unique_id "aaLqHbTHSOG_yf2PpqFiBAAAAdc"]
[Sat Feb 28 21:14:07.292784 2026] [:error] [pid 11791:tid 11810] [client 20.104.82.189:1296] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/goods.php"] [unique_id "aaLqH2uX5e1Q32gqxH3EagAAARE"]
[Sat Feb 28 21:14:08.083557 2026] [:error] [pid 11791:tid 11801] [client 20.104.82.189:1077] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/goods.php"] [unique_id "aaLqIGuX5e1Q32gqxH3EbAAAAQg"]
[Sat Feb 28 21:14:09.104682 2026] [:error] [pid 39184:tid 39231] [client 20.104.82.189:1221] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/goods.php"] [unique_id "aaLqIVtZF9Zd_U7easDAagAAAEw"]
[Sat Feb 28 21:14:10.527859 2026] [:error] [pid 39184:tid 39233] [client 20.104.82.189:1543] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaLqIltZF9Zd_U7easDAbwAAAE4"]
[Sat Feb 28 21:14:11.624307 2026] [:error] [pid 11791:tid 11795] [client 20.104.82.189:1124] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaLqI2uX5e1Q32gqxH3EcQAAAQI"]
[Sat Feb 28 21:14:12.537522 2026] [:error] [pid 11791:tid 11797] [client 20.104.82.189:1170] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaLqJGuX5e1Q32gqxH3EcwAAAQQ"]
[Sat Feb 28 21:14:13.241317 2026] [:error] [pid 39184:tid 39225] [client 20.104.82.189:1145] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaLqJVtZF9Zd_U7easDAewAAAEY"]
[Sat Feb 28 21:14:13.777154 2026] [:error] [pid 39183:tid 39204] [client 20.104.82.189:1058] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/222.php"] [unique_id "aaLqJRCf4HvhVePw3LZAdgAAAAw"]
[Sat Feb 28 21:14:14.538160 2026] [:error] [pid 39184:tid 39238] [client 20.104.82.189:1329] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/222.php"] [unique_id "aaLqJltZF9Zd_U7easDAfQAAAFM"]
[Sat Feb 28 21:14:15.080936 2026] [:error] [pid 39183:tid 39199] [client 20.104.82.189:1032] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/222.php"] [unique_id "aaLqJxCf4HvhVePw3LZAgQAAAAc"]
[Sat Feb 28 21:14:15.521543 2026] [:error] [pid 39183:tid 39215] [client 20.104.82.189:1310] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/222.php"] [unique_id "aaLqJxCf4HvhVePw3LZAgwAAABc"]
[Sat Feb 28 21:14:15.956961 2026] [:error] [pid 11791:tid 11813] [client 20.104.82.189:1127] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/xaw.php"] [unique_id "aaLqJ2uX5e1Q32gqxH3EeQAAARQ"]
[Sat Feb 28 21:14:16.420406 2026] [:error] [pid 11791:tid 11794] [client 20.104.82.189:1218] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/xaw.php"] [unique_id "aaLqKGuX5e1Q32gqxH3EegAAAQE"]
[Sat Feb 28 21:14:16.848740 2026] [:error] [pid 11791:tid 11799] [client 20.104.82.189:1195] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/xaw.php"] [unique_id "aaLqKGuX5e1Q32gqxH3EfgAAAQY"]
[Sat Feb 28 21:14:17.499307 2026] [:error] [pid 52460:tid 52481] [client 20.104.82.189:1328] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files/xaw.php"] [unique_id "aaLqKbLWOogAgHGh62SC_AAAAZI"]
[Sat Feb 28 21:14:17.939221 2026] [:error] [pid 52460:tid 52465] [client 20.104.82.189:1368] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaLqKbLWOogAgHGh62SC_QAAAYI"]
[Sat Feb 28 21:14:21.228841 2026] [:error] [pid 39183:tid 39206] [client 20.104.82.189:1553] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-settings2.php"] [unique_id "aaLqLRCf4HvhVePw3LZAsQAAAA4"]
[Sat Feb 28 21:14:29.260997 2026] [:error] [pid 39183:tid 39206] [client 20.104.82.189:1138] [client 20.104.82.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.82.189, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaLqNRCf4HvhVePw3LZA6QAAAA4"]
[Sat Feb 28 21:14:31.514084 2026] [autoindex:error] [pid 39183:tid 39208] [client 20.104.82.189:1138] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:14:39.597303 2026] [:error] [pid 39183:tid 39215] [client 20.104.82.189:1138] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/leuk.php"] [unique_id "aaLqPxCf4HvhVePw3LZBLwAAABc"]
[Sat Feb 28 21:14:40.021550 2026] [:error] [pid 49763:tid 49774] [client 20.104.82.189:1096] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/leuk.php"] [unique_id "aaLqQLTHSOG_yf2PpqFiiwAAAcg"]
[Sat Feb 28 21:14:40.451476 2026] [:error] [pid 11791:tid 11795] [client 20.104.82.189:1298] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/leuk.php"] [unique_id "aaLqQGuX5e1Q32gqxH3E7AAAAQI"]
[Sat Feb 28 21:14:40.889181 2026] [:error] [pid 11791:tid 11806] [client 20.104.82.189:1344] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/leuk.php"] [unique_id "aaLqQGuX5e1Q32gqxH3E8gAAAQ0"]
[Sat Feb 28 21:14:41.341369 2026] [:error] [pid 11791:tid 11799] [client 20.104.82.189:1330] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/chris.php"] [unique_id "aaLqQWuX5e1Q32gqxH3E9wAAAQY"]
[Sat Feb 28 21:14:41.776816 2026] [:error] [pid 52460:tid 52477] [client 20.104.82.189:1478] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/chris.php"] [unique_id "aaLqQbLWOogAgHGh62SDKAAAAY4"]
[Sat Feb 28 21:14:42.227944 2026] [:error] [pid 39184:tid 39243] [client 20.104.82.189:1226] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/chris.php"] [unique_id "aaLqQltZF9Zd_U7easDAyQAAAFg"]
[Sat Feb 28 21:14:42.767948 2026] [:error] [pid 11791:tid 11805] [client 20.104.82.189:1231] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/chris.php"] [unique_id "aaLqQmuX5e1Q32gqxH3FCQAAAQw"]
[Sat Feb 28 21:14:43.557448 2026] [:error] [pid 22194:tid 22203] [client 20.104.82.189:1533] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xx.php"] [unique_id "aaLqQ36mbajs3bzQGyuk7wAAAUc"]
[Sat Feb 28 21:14:44.276340 2026] [:error] [pid 22194:tid 22200] [client 20.104.82.189:1244] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/sql.php"] [unique_id "aaLqRH6mbajs3bzQGyuk8gAAAUQ"]
[Sat Feb 28 21:14:46.535029 2026] [:error] [pid 49763:tid 49778] [client 20.104.82.189:1188] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/sql.php"] [unique_id "aaLqRrTHSOG_yf2PpqFilwAAAcw"]
[Sat Feb 28 21:14:47.599308 2026] [:error] [pid 49763:tid 49768] [client 20.104.82.189:1451] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/sql.php"] [unique_id "aaLqR7THSOG_yf2PpqFimgAAAcI"]
[Sat Feb 28 21:14:48.046163 2026] [:error] [pid 39292:tid 39300] [client 20.104.82.189:1246] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/wp.php"] [unique_id "aaLqSKIAO5fN7BxyqcF6tQAAAMY"]
[Sat Feb 28 21:14:48.498719 2026] [:error] [pid 52460:tid 52468] [client 20.104.82.189:1250] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/wp.php"] [unique_id "aaLqSLLWOogAgHGh62SDOwAAAYU"]
[Sat Feb 28 21:14:49.011114 2026] [:error] [pid 39292:tid 39298] [client 20.104.82.189:1066] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/wp.php"] [unique_id "aaLqSaIAO5fN7BxyqcF6uQAAAMQ"]
[Sat Feb 28 21:14:49.494217 2026] [:error] [pid 52460:tid 52471] [client 20.104.82.189:1080] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/wp.php"] [unique_id "aaLqSbLWOogAgHGh62SDPwAAAYg"]
[Sat Feb 28 21:14:50.053004 2026] [:error] [pid 52460:tid 52464] [client 20.104.82.189:1065] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaLqSrLWOogAgHGh62SDRgAAAYE"]
[Sat Feb 28 21:14:50.583919 2026] [:error] [pid 39184:tid 39230] [client 20.104.82.189:1179] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaLqSltZF9Zd_U7easDA1AAAAEs"]
[Sat Feb 28 21:14:51.087041 2026] [:error] [pid 39184:tid 39221] [client 20.104.82.189:1271] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaLqS1tZF9Zd_U7easDA2QAAAEI"]
[Sat Feb 28 21:14:51.541305 2026] [:error] [pid 49763:tid 49779] [client 20.104.82.189:1162] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaLqS7THSOG_yf2PpqFipAAAAc0"]
[Sat Feb 28 21:14:52.180777 2026] [:error] [pid 39292:tid 39317] [client 20.104.82.189:1105] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/ws62.php"] [unique_id "aaLqTKIAO5fN7BxyqcF6wAAAANc"]
[Sat Feb 28 21:14:52.776157 2026] [:error] [pid 22194:tid 22198] [client 20.104.82.189:1157] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aaLqTH6mbajs3bzQGyuk-gAAAUI"]
[Sat Feb 28 21:14:53.369039 2026] [:error] [pid 52460:tid 52466] [client 20.104.82.189:1031] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aaLqTbLWOogAgHGh62SDTwAAAYM"]
[Sat Feb 28 21:14:54.205723 2026] [:error] [pid 39184:tid 39235] [client 20.104.82.189:1158] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aaLqTltZF9Zd_U7easDA4gAAAFA"]
[Sat Feb 28 21:14:54.806802 2026] [:error] [pid 49763:tid 49778] [client 20.104.82.189:1364] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/feeds.php"] [unique_id "aaLqTrTHSOG_yf2PpqFiqQAAAcw"]
[Sat Feb 28 21:14:55.654448 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:1278] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aaLqT7LWOogAgHGh62SDVQAAAY0"]
[Sat Feb 28 21:14:56.627332 2026] [:error] [pid 22194:tid 22203] [client 20.104.82.189:1064] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aaLqUH6mbajs3bzQGyuk_QAAAUc"]
[Sat Feb 28 21:14:57.819693 2026] [:error] [pid 11791:tid 11813] [client 20.104.82.189:1212] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aaLqUWuX5e1Q32gqxH3FOQAAARQ"]
[Sat Feb 28 21:14:58.598254 2026] [:error] [pid 49763:tid 49784] [client 20.104.82.189:1191] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aaLqUrTHSOG_yf2PpqFitgAAAdI"]
[Sat Feb 28 21:14:59.049193 2026] [:error] [pid 49763:tid 49781] [client 20.104.82.189:1791] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/signup_pad_classic.php"] [unique_id "aaLqU7THSOG_yf2PpqFiugAAAc8"]
[Sat Feb 28 21:14:59.667709 2026] [:error] [pid 52460:tid 52467] [client 20.104.82.189:1268] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/v2.php"] [unique_id "aaLqU7LWOogAgHGh62SDbwAAAYQ"]
[Sat Feb 28 21:15:00.099946 2026] [:error] [pid 52460:tid 52484] [client 20.104.82.189:1045] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/v2.php"] [unique_id "aaLqVLLWOogAgHGh62SDdgAAAZU"]
[Sat Feb 28 21:15:00.875126 2026] [:error] [pid 39183:tid 39210] [client 20.104.82.189:1155] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/v2.php"] [unique_id "aaLqVBCf4HvhVePw3LZBowAAABI"]
[Sat Feb 28 21:15:01.781004 2026] [:error] [pid 39183:tid 39203] [client 20.104.82.189:1204] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/v2.php"] [unique_id "aaLqVRCf4HvhVePw3LZBqAAAAAs"]
[Sat Feb 28 21:15:02.403830 2026] [:error] [pid 39183:tid 39198] [client 20.104.82.189:1238] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaLqVhCf4HvhVePw3LZBsQAAAAY"]
[Sat Feb 28 21:15:02.886997 2026] [:error] [pid 39184:tid 39224] [client 20.104.82.189:1512] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaLqVltZF9Zd_U7easDA7gAAAEU"]
[Sat Feb 28 21:15:03.486586 2026] [:error] [pid 39184:tid 39243] [client 20.104.82.189:1135] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaLqV1tZF9Zd_U7easDA7wAAAFg"]
[Sat Feb 28 21:15:04.043471 2026] [:error] [pid 39184:tid 39236] [client 20.104.82.189:1345] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaLqWFtZF9Zd_U7easDA8gAAAFE"]
[Sat Feb 28 21:15:04.529909 2026] [:error] [pid 39184:tid 39241] [client 20.104.82.189:1172] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-https.php"] [unique_id "aaLqWFtZF9Zd_U7easDA9wAAAFY"]
[Sat Feb 28 21:15:05.305249 2026] [:error] [pid 11791:tid 11794] [client 20.104.82.189:1326] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/rawwp.php"] [unique_id "aaLqWWuX5e1Q32gqxH3FSwAAAQE"]
[Sat Feb 28 21:15:05.925067 2026] [:error] [pid 11791:tid 11793] [client 20.104.82.189:1086] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/about.php"] [unique_id "aaLqWWuX5e1Q32gqxH3FTgAAAQA"]
[Sat Feb 28 21:15:06.822349 2026] [:error] [pid 39185:tid 39252] [client 20.104.82.189:1040] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/about.php"] [unique_id "aaLqWhVE-FfM89u7BQahhwAAAIY"]
[Sat Feb 28 21:15:07.336691 2026] [:error] [pid 39184:tid 39236] [client 20.104.82.189:1564] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/about.php"] [unique_id "aaLqW1tZF9Zd_U7easDBBAAAAFE"]
[Sat Feb 28 21:15:07.872926 2026] [:error] [pid 11791:tid 11796] [client 20.104.82.189:1149] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/about.php"] [unique_id "aaLqW2uX5e1Q32gqxH3FUwAAAQM"]
[Sat Feb 28 21:15:08.364744 2026] [:error] [pid 11791:tid 11803] [client 20.104.82.189:1152] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-mail.php"] [unique_id "aaLqXGuX5e1Q32gqxH3FVQAAAQo"]
[Sat Feb 28 21:15:08.842029 2026] [:error] [pid 39184:tid 39242] [client 20.104.82.189:1215] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/uhuybro.php"] [unique_id "aaLqXFtZF9Zd_U7easDBBgAAAFc"]
[Sat Feb 28 21:15:09.364570 2026] [:error] [pid 39292:tid 39307] [client 20.104.82.189:1403] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/uhuybro.php"] [unique_id "aaLqXaIAO5fN7BxyqcF60gAAAM0"]
[Sat Feb 28 21:15:10.106799 2026] [:error] [pid 22194:tid 22207] [client 20.104.82.189:1233] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/uhuybro.php"] [unique_id "aaLqXn6mbajs3bzQGyulJwAAAUs"]
[Sat Feb 28 21:15:10.559340 2026] [:error] [pid 22194:tid 22206] [client 20.104.82.189:1386] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/uhuybro.php"] [unique_id "aaLqXn6mbajs3bzQGyulKgAAAUo"]
[Sat Feb 28 21:15:11.167988 2026] [:error] [pid 39183:tid 39202] [client 20.104.82.189:1235] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/footers.php"] [unique_id "aaLqXxCf4HvhVePw3LZBwgAAAAo"]
[Sat Feb 28 21:15:11.958811 2026] [:error] [pid 39183:tid 39213] [client 20.104.82.189:1028] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/footers.php"] [unique_id "aaLqXxCf4HvhVePw3LZBywAAABU"]
[Sat Feb 28 21:15:12.534713 2026] [:error] [pid 11791:tid 11815] [client 20.104.82.189:1277] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/footers.php"] [unique_id "aaLqYGuX5e1Q32gqxH3FWQAAARY"]
[Sat Feb 28 21:15:13.409586 2026] [:error] [pid 52460:tid 52487] [client 20.104.82.189:1269] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/footers.php"] [unique_id "aaLqYbLWOogAgHGh62SDkwAAAZg"]
[Sat Feb 28 21:15:13.964305 2026] [:error] [pid 52460:tid 52475] [client 20.104.82.189:1392] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/icedknnv.php"] [unique_id "aaLqYbLWOogAgHGh62SDmAAAAYw"]
[Sat Feb 28 21:15:14.699673 2026] [:error] [pid 39183:tid 39202] [client 20.104.82.189:1415] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/icedknnv.php"] [unique_id "aaLqYhCf4HvhVePw3LZB1AAAAAo"]
[Sat Feb 28 21:15:15.565270 2026] [:error] [pid 49763:tid 49774] [client 20.104.82.189:1222] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/icedknnv.php"] [unique_id "aaLqY7THSOG_yf2PpqFi4gAAAcg"]
[Sat Feb 28 21:15:16.272163 2026] [:error] [pid 39183:tid 39210] [client 20.104.82.189:1225] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/icedknnv.php"] [unique_id "aaLqZBCf4HvhVePw3LZB3AAAABI"]
[Sat Feb 28 21:15:16.897256 2026] [:error] [pid 39183:tid 39204] [client 20.104.82.189:1311] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/post_genprdt.php"] [unique_id "aaLqZBCf4HvhVePw3LZB4AAAAAw"]
[Sat Feb 28 21:15:17.510080 2026] [:error] [pid 39183:tid 39209] [client 20.104.82.189:1208] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/post_genprdt.php"] [unique_id "aaLqZRCf4HvhVePw3LZB6AAAABE"]
[Sat Feb 28 21:15:18.090049 2026] [:error] [pid 49763:tid 49789] [client 20.104.82.189:1332] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/post_genprdt.php"] [unique_id "aaLqZrTHSOG_yf2PpqFi7QAAAdc"]
[Sat Feb 28 21:15:18.554237 2026] [:error] [pid 49763:tid 49776] [client 20.104.82.189:1248] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/images/post_genprdt.php"] [unique_id "aaLqZrTHSOG_yf2PpqFi8gAAAco"]
[Sat Feb 28 21:15:19.067359 2026] [:error] [pid 39183:tid 39214] [client 20.104.82.189:1303] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/5.php"] [unique_id "aaLqZxCf4HvhVePw3LZB7gAAABY"]
[Sat Feb 28 21:15:19.536799 2026] [:error] [pid 39183:tid 39204] [client 20.104.82.189:1261] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/5.php"] [unique_id "aaLqZxCf4HvhVePw3LZB8QAAAAw"]
[Sat Feb 28 21:15:19.955557 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:1200] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/5.php"] [unique_id "aaLqZ7LWOogAgHGh62SDpQAAAYs"]
[Sat Feb 28 21:15:20.461555 2026] [:error] [pid 11791:tid 11804] [client 20.104.82.189:1093] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/5.php"] [unique_id "aaLqaGuX5e1Q32gqxH3FWwAAAQs"]
[Sat Feb 28 21:15:21.127929 2026] [:error] [pid 49763:tid 49773] [client 20.104.82.189:1092] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/by.php"] [unique_id "aaLqabTHSOG_yf2PpqFi_AAAAcc"]
[Sat Feb 28 21:15:21.665969 2026] [:error] [pid 39292:tid 39309] [client 20.104.82.189:1502] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/by.php"] [unique_id "aaLqaaIAO5fN7BxyqcF62gAAAM8"]
[Sat Feb 28 21:15:22.140135 2026] [:error] [pid 39183:tid 39207] [client 20.104.82.189:1789] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/by.php"] [unique_id "aaLqahCf4HvhVePw3LZB9QAAAA8"]
[Sat Feb 28 21:15:22.759484 2026] [:error] [pid 11791:tid 11810] [client 20.104.82.189:1286] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/by.php"] [unique_id "aaLqamuX5e1Q32gqxH3FXwAAARE"]
[Sat Feb 28 21:15:23.564540 2026] [:error] [pid 39183:tid 39214] [client 20.104.82.189:1301] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaLqaxCf4HvhVePw3LZB_QAAABY"]
[Sat Feb 28 21:15:24.003603 2026] [:error] [pid 39184:tid 39236] [client 20.104.82.189:1327] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaLqbFtZF9Zd_U7easDBFwAAAFE"]
[Sat Feb 28 21:15:24.614345 2026] [:error] [pid 39184:tid 39231] [client 20.104.82.189:1452] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaLqbFtZF9Zd_U7easDBHAAAAEw"]
[Sat Feb 28 21:15:25.273139 2026] [:error] [pid 39292:tid 39310] [client 20.104.82.189:1257] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaLqbaIAO5fN7BxyqcF64gAAANA"]
[Sat Feb 28 21:15:25.762985 2026] [:error] [pid 39292:tid 39307] [client 20.104.82.189:1210] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/chati.php"] [unique_id "aaLqbaIAO5fN7BxyqcF65AAAAM0"]
[Sat Feb 28 21:15:26.365300 2026] [:error] [pid 11791:tid 11814] [client 20.104.82.189:1407] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/chati.php"] [unique_id "aaLqbmuX5e1Q32gqxH3FZQAAARU"]
[Sat Feb 28 21:15:27.057045 2026] [:error] [pid 52460:tid 52464] [client 20.104.82.189:1352] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/chati.php"] [unique_id "aaLqb7LWOogAgHGh62SDpwAAAYE"]
[Sat Feb 28 21:15:27.933631 2026] [:error] [pid 39292:tid 39300] [client 20.104.82.189:1493] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/chati.php"] [unique_id "aaLqb6IAO5fN7BxyqcF66wAAAMY"]
[Sat Feb 28 21:15:28.640188 2026] [:error] [pid 39183:tid 39206] [client 20.104.82.189:1156] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaLqcBCf4HvhVePw3LZCFQAAAA4"]
[Sat Feb 28 21:15:29.112312 2026] [:error] [pid 52460:tid 52485] [client 20.104.82.189:1308] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaLqcbLWOogAgHGh62SDrAAAAZY"]
[Sat Feb 28 21:15:29.939154 2026] [:error] [pid 39184:tid 39235] [client 20.104.82.189:1292] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaLqcVtZF9Zd_U7easDBKwAAAFA"]
[Sat Feb 28 21:15:30.647316 2026] [:error] [pid 39183:tid 39197] [client 20.104.82.189:1099] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaLqchCf4HvhVePw3LZCGwAAAAU"]
[Sat Feb 28 21:15:31.375670 2026] [:error] [pid 39185:tid 39248] [client 20.104.82.189:1176] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaLqcxVE-FfM89u7BQahngAAAII"]
[Sat Feb 28 21:15:31.960193 2026] [:error] [pid 39183:tid 39192] [client 20.104.82.189:1565] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaLqcxCf4HvhVePw3LZCIgAAAAA"]
[Sat Feb 28 21:15:32.773046 2026] [:error] [pid 39184:tid 39224] [client 20.104.82.189:1365] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaLqdFtZF9Zd_U7easDBNwAAAEU"]
[Sat Feb 28 21:15:33.451265 2026] [:error] [pid 39184:tid 39235] [client 20.104.82.189:1081] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaLqdVtZF9Zd_U7easDBOwAAAFA"]
[Sat Feb 28 21:15:33.945954 2026] [:error] [pid 39185:tid 39251] [client 20.104.82.189:1048] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLqdRVE-FfM89u7BQahoQAAAIU"]
[Sat Feb 28 21:15:34.377693 2026] [:error] [pid 39292:tid 39297] [client 20.104.82.189:1647] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLqdqIAO5fN7BxyqcF68gAAAMM"]
[Sat Feb 28 21:15:34.797159 2026] [:error] [pid 39185:tid 39267] [client 20.104.82.189:1322] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLqdhVE-FfM89u7BQahogAAAJU"]
[Sat Feb 28 21:15:35.300097 2026] [:error] [pid 52460:tid 52473] [client 20.104.82.189:1331] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLqd7LWOogAgHGh62SDswAAAYo"]
[Sat Feb 28 21:15:36.399717 2026] [:error] [pid 39183:tid 39212] [client 20.104.82.189:1193] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aaLqeBCf4HvhVePw3LZCMQAAABQ"]
[Sat Feb 28 21:15:36.929312 2026] [:error] [pid 39183:tid 39207] [client 20.104.82.189:1116] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aaLqeBCf4HvhVePw3LZCNAAAAA8"]
[Sat Feb 28 21:15:37.512313 2026] [:error] [pid 49763:tid 49768] [client 20.104.82.189:1287] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aaLqebTHSOG_yf2PpqFjDAAAAcI"]
[Sat Feb 28 21:15:40.749333 2026] [autoindex:error] [pid 49763:tid 49772] [client 20.104.82.189:1239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:15:55.719187 2026] [:error] [pid 49763:tid 49784] [client 20.104.82.189:1239] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aaLqi7THSOG_yf2PpqFjbwAAAdI"]
[Sat Feb 28 21:15:56.444894 2026] [:error] [pid 52460:tid 52487] [client 20.104.82.189:1206] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aaLqjLLWOogAgHGh62SETwAAAZg"]
[Sat Feb 28 21:15:56.990532 2026] [:error] [pid 49763:tid 49780] [client 20.104.82.189:1561] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aaLqjLTHSOG_yf2PpqFjfgAAAc4"]
[Sat Feb 28 21:15:57.542820 2026] [:error] [pid 39183:tid 39208] [client 20.104.82.189:1041] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aaLqjRCf4HvhVePw3LZCkwAAABA"]
[Sat Feb 28 21:15:58.016180 2026] [:error] [pid 49763:tid 49772] [client 20.104.82.189:1421] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aaLqjrTHSOG_yf2PpqFjiQAAAcY"]
[Sat Feb 28 21:15:58.553537 2026] [:error] [pid 39183:tid 39205] [client 20.104.82.189:1442] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aaLqjhCf4HvhVePw3LZClgAAAA0"]
[Sat Feb 28 21:15:59.062969 2026] [:error] [pid 39183:tid 39195] [client 20.104.82.189:1197] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aaLqjxCf4HvhVePw3LZClwAAAAM"]
[Sat Feb 28 21:15:59.731254 2026] [:error] [pid 39292:tid 39297] [client 20.104.82.189:1638] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "aaLqj6IAO5fN7BxyqcF7AQAAAMM"]
[Sat Feb 28 21:16:00.153615 2026] [:error] [pid 39183:tid 39193] [client 20.104.82.189:1133] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaLqkBCf4HvhVePw3LZCnAAAAAE"]
[Sat Feb 28 21:16:00.685350 2026] [:error] [pid 39184:tid 39232] [client 20.104.82.189:1638] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaLqkFtZF9Zd_U7easDBZgAAAE0"]
[Sat Feb 28 21:16:01.147470 2026] [:error] [pid 49763:tid 49777] [client 20.104.82.189:1240] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaLqkbTHSOG_yf2PpqFjoAAAAcs"]
[Sat Feb 28 21:16:01.573080 2026] [:error] [pid 49763:tid 49782] [client 20.104.82.189:1297] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaLqkbTHSOG_yf2PpqFjpgAAAdA"]
[Sat Feb 28 21:16:02.036882 2026] [:error] [pid 39184:tid 39225] [client 20.104.82.189:1316] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaLqkltZF9Zd_U7easDBaAAAAEY"]
[Sat Feb 28 21:16:02.464451 2026] [:error] [pid 39185:tid 39263] [client 20.104.82.189:1630] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaLqkhVE-FfM89u7BQahpwAAAJE"]
[Sat Feb 28 21:16:02.943745 2026] [:error] [pid 52460:tid 52483] [client 20.104.82.189:1356] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaLqkrLWOogAgHGh62SEWwAAAZQ"]
[Sat Feb 28 21:16:03.367242 2026] [:error] [pid 39184:tid 39239] [client 20.104.82.189:1051] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaLqk1tZF9Zd_U7easDBaQAAAFQ"]
[Sat Feb 28 21:16:03.791779 2026] [:error] [pid 52460:tid 52471] [client 20.104.82.189:1325] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aaLqk7LWOogAgHGh62SEXQAAAYg"]
[Sat Feb 28 21:16:04.261980 2026] [:error] [pid 52460:tid 52468] [client 20.104.82.189:1083] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aaLqlLLWOogAgHGh62SEXgAAAYU"]
[Sat Feb 28 21:16:04.693938 2026] [:error] [pid 39183:tid 39192] [client 20.104.82.189:1186] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aaLqlBCf4HvhVePw3LZCpAAAAAA"]
[Sat Feb 28 21:16:05.118666 2026] [:error] [pid 39292:tid 39305] [client 20.104.82.189:1346] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ha.php"] [unique_id "aaLqlaIAO5fN7BxyqcF7CAAAAMs"]
[Sat Feb 28 21:16:05.550354 2026] [:error] [pid 39292:tid 39313] [client 20.104.82.189:1049] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaLqlaIAO5fN7BxyqcF7CgAAANM"]
[Sat Feb 28 21:16:06.003876 2026] [:error] [pid 52460:tid 52466] [client 20.104.82.189:1249] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaLqlrLWOogAgHGh62SEXwAAAYM"]
[Sat Feb 28 21:16:06.420787 2026] [:error] [pid 49763:tid 49772] [client 20.104.82.189:1371] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaLqlrTHSOG_yf2PpqFj2gAAAcY"]
[Sat Feb 28 21:16:06.864406 2026] [:error] [pid 49763:tid 49769] [client 20.104.82.189:1414] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaLqlrTHSOG_yf2PpqFj3wAAAcM"]
[Sat Feb 28 21:16:07.342557 2026] [:error] [pid 39183:tid 39193] [client 20.104.82.189:1314] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aaLqlxCf4HvhVePw3LZCqwAAAAE"]
[Sat Feb 28 21:16:07.852287 2026] [:error] [pid 49763:tid 49788] [client 20.104.82.189:1416] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aaLql7THSOG_yf2PpqFj6AAAAdY"]
[Sat Feb 28 21:16:08.286301 2026] [:error] [pid 49763:tid 49778] [client 20.104.82.189:1348] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aaLqmLTHSOG_yf2PpqFj8QAAAcw"]
[Sat Feb 28 21:16:08.730480 2026] [:error] [pid 49763:tid 49784] [client 20.104.82.189:1527] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "aaLqmLTHSOG_yf2PpqFj9gAAAdI"]
[Sat Feb 28 21:16:09.223213 2026] [:error] [pid 39184:tid 39227] [client 20.104.82.189:1570] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaLqmVtZF9Zd_U7easDBdQAAAEg"]
[Sat Feb 28 21:16:09.674868 2026] [:error] [pid 52460:tid 52481] [client 20.104.82.189:1515] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaLqmbLWOogAgHGh62SEZAAAAZI"]
[Sat Feb 28 21:16:10.157353 2026] [:error] [pid 39183:tid 39207] [client 20.104.82.189:1110] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaLqmhCf4HvhVePw3LZCsAAAAA8"]
[Sat Feb 28 21:16:10.651328 2026] [:error] [pid 39292:tid 39313] [client 20.104.82.189:1309] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaLqmqIAO5fN7BxyqcF7HQAAANM"]
[Sat Feb 28 21:16:11.338199 2026] [:error] [pid 39184:tid 39221] [client 20.104.82.189:1418] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaLqm1tZF9Zd_U7easDBewAAAEI"]
[Sat Feb 28 21:16:12.221530 2026] [:error] [pid 39292:tid 39295] [client 20.104.82.189:1055] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaLqnKIAO5fN7BxyqcF7IQAAAME"]
[Sat Feb 28 21:16:13.050861 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:1034] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaLqnbLWOogAgHGh62SEagAAAYs"]
[Sat Feb 28 21:16:13.941099 2026] [:error] [pid 39184:tid 39224] [client 20.104.82.189:1114] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaLqnVtZF9Zd_U7easDBfgAAAEU"]
[Sat Feb 28 21:16:14.661895 2026] [:error] [pid 52460:tid 52468] [client 20.104.82.189:1145] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaLqnrLWOogAgHGh62SEbAAAAYU"]
[Sat Feb 28 21:16:15.998903 2026] [:error] [pid 39183:tid 39192] [client 20.104.82.189:1595] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaLqnxCf4HvhVePw3LZCzwAAAAA"]
[Sat Feb 28 21:16:16.652190 2026] [:error] [pid 39183:tid 39201] [client 20.104.82.189:1483] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaLqoBCf4HvhVePw3LZC0wAAAAk"]
[Sat Feb 28 21:16:17.217917 2026] [:error] [pid 22194:tid 22208] [client 20.104.82.189:1307] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaLqoX6mbajs3bzQGyulQQAAAUw"]
[Sat Feb 28 21:16:17.713559 2026] [:error] [pid 11791:tid 11804] [client 20.104.82.189:1441] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aaLqoWuX5e1Q32gqxH3FzQAAAQs"]
[Sat Feb 28 21:16:18.152706 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:1347] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aaLqorLWOogAgHGh62SEfwAAAYs"]
[Sat Feb 28 21:16:18.687488 2026] [:error] [pid 11791:tid 11797] [client 20.104.82.189:1227] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aaLqomuX5e1Q32gqxH3FzwAAAQQ"]
[Sat Feb 28 21:16:19.182662 2026] [:error] [pid 22194:tid 22200] [client 20.104.82.189:1207] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aaLqo36mbajs3bzQGyulQwAAAUQ"]
[Sat Feb 28 21:16:19.622429 2026] [:error] [pid 39183:tid 39196] [client 20.104.82.189:1095] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aaLqoxCf4HvhVePw3LZC2QAAAAQ"]
[Sat Feb 28 21:16:20.118778 2026] [:error] [pid 39185:tid 39251] [client 20.104.82.189:1121] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aaLqpBVE-FfM89u7BQahsAAAAIU"]
[Sat Feb 28 21:16:20.528890 2026] [:error] [pid 39185:tid 39260] [client 20.104.82.189:1183] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aaLqpBVE-FfM89u7BQahswAAAI4"]
[Sat Feb 28 21:16:20.997328 2026] [:error] [pid 49763:tid 49768] [client 20.104.82.189:1476] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aaLqpLTHSOG_yf2PpqFkMQAAAcI"]
[Sat Feb 28 21:16:21.418271 2026] [:error] [pid 49763:tid 49776] [client 20.104.82.189:1419] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaLqpbTHSOG_yf2PpqFkMwAAAco"]
[Sat Feb 28 21:16:21.859170 2026] [:error] [pid 52460:tid 52487] [client 20.104.82.189:1258] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaLqpbLWOogAgHGh62SElwAAAZg"]
[Sat Feb 28 21:16:22.281354 2026] [:error] [pid 52460:tid 52479] [client 20.104.82.189:1418] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaLqprLWOogAgHGh62SEnAAAAZA"]
[Sat Feb 28 21:16:22.722770 2026] [:error] [pid 39184:tid 39243] [client 20.104.82.189:1459] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaLqpltZF9Zd_U7easDBhgAAAFg"]
[Sat Feb 28 21:16:23.193319 2026] [:error] [pid 52460:tid 52467] [client 20.104.82.189:1644] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aaLqp7LWOogAgHGh62SEogAAAYQ"]
[Sat Feb 28 21:16:23.623869 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:1236] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aaLqp7LWOogAgHGh62SEpQAAAYs"]
[Sat Feb 28 21:16:24.076908 2026] [:error] [pid 39184:tid 39220] [client 20.104.82.189:1122] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aaLqqFtZF9Zd_U7easDBiAAAAEE"]
[Sat Feb 28 21:16:24.587460 2026] [:error] [pid 52460:tid 52470] [client 20.104.82.189:1489] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aaLqqLLWOogAgHGh62SEswAAAYc"]
[Sat Feb 28 21:16:25.197276 2026] [:error] [pid 39185:tid 39246] [client 20.104.82.189:1216] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaLqqRVE-FfM89u7BQahugAAAIA"]
[Sat Feb 28 21:16:25.646815 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:1070] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaLqqbLWOogAgHGh62SEuAAAAYs"]
[Sat Feb 28 21:16:26.073839 2026] [:error] [pid 39185:tid 39249] [client 20.104.82.189:1102] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaLqqhVE-FfM89u7BQahvAAAAIM"]
[Sat Feb 28 21:16:26.608999 2026] [:error] [pid 39292:tid 39318] [client 20.104.82.189:1664] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaLqqqIAO5fN7BxyqcF7WAAAANg"]
[Sat Feb 28 21:16:27.166906 2026] [:error] [pid 52460:tid 52464] [client 20.104.82.189:1388] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aaLqq7LWOogAgHGh62SEuwAAAYE"]
[Sat Feb 28 21:16:27.600236 2026] [:error] [pid 39183:tid 39200] [client 20.104.82.189:1069] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aaLqqxCf4HvhVePw3LZC4wAAAAg"]
[Sat Feb 28 21:16:28.150782 2026] [:error] [pid 52460:tid 52472] [client 20.104.82.189:1430] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aaLqrLLWOogAgHGh62SEwAAAAYk"]
[Sat Feb 28 21:16:28.572949 2026] [:error] [pid 11791:tid 11804] [client 20.104.82.189:1381] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "aaLqrGuX5e1Q32gqxH3F4AAAAQs"]
[Sat Feb 28 21:16:29.022545 2026] [:error] [pid 39185:tid 39267] [client 20.104.82.189:1229] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aaLqrRVE-FfM89u7BQahwAAAAJU"]
[Sat Feb 28 21:16:29.490792 2026] [:error] [pid 49763:tid 49774] [client 20.104.82.189:1163] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aaLqrbTHSOG_yf2PpqFkNgAAAcg"]
[Sat Feb 28 21:16:30.203203 2026] [:error] [pid 49763:tid 49790] [client 20.104.82.189:1583] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aaLqrrTHSOG_yf2PpqFkOQAAAdg"]
[Sat Feb 28 21:16:30.852260 2026] [:error] [pid 39184:tid 39221] [client 20.104.82.189:1087] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aaLqrltZF9Zd_U7easDBiwAAAEI"]
[Sat Feb 28 21:16:31.609428 2026] [:error] [pid 39184:tid 39223] [client 20.104.82.189:1194] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aaLqr1tZF9Zd_U7easDBjgAAAEQ"]
[Sat Feb 28 21:16:32.500739 2026] [:error] [pid 49763:tid 49771] [client 20.104.82.189:1589] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aaLqsLTHSOG_yf2PpqFkQgAAAcU"]
[Sat Feb 28 21:16:33.813268 2026] [:error] [pid 39183:tid 39208] [client 20.104.82.189:1089] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aaLqsRCf4HvhVePw3LZC9AAAABA"]
[Sat Feb 28 21:16:34.512230 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:1318] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aaLqsrLWOogAgHGh62SExAAAAY0"]
[Sat Feb 28 21:16:35.592798 2026] [:error] [pid 39183:tid 39193] [client 20.104.82.189:1506] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaLqsxCf4HvhVePw3LZC-QAAAAE"]
[Sat Feb 28 21:16:36.296735 2026] [:error] [pid 39183:tid 39209] [client 20.104.82.189:1376] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aaLqtBCf4HvhVePw3LZC-wAAABE"]
[Sat Feb 28 21:16:36.921060 2026] [:error] [pid 39183:tid 39200] [client 20.104.82.189:1456] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aaLqtBCf4HvhVePw3LZC_wAAAAg"]
[Sat Feb 28 21:16:37.563480 2026] [:error] [pid 52460:tid 52463] [client 20.104.82.189:1443] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aaLqtbLWOogAgHGh62SExwAAAYA"]
[Sat Feb 28 21:16:38.113712 2026] [:error] [pid 52460:tid 52484] [client 20.104.82.189:1074] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/click.php"] [unique_id "aaLqtrLWOogAgHGh62SEywAAAZU"]
[Sat Feb 28 21:16:38.700329 2026] [:error] [pid 49763:tid 49772] [client 20.104.82.189:1224] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLqtrTHSOG_yf2PpqFkVQAAAcY"]
[Sat Feb 28 21:16:39.358709 2026] [:error] [pid 39183:tid 39210] [client 20.104.82.189:1118] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLqtxCf4HvhVePw3LZDBAAAABI"]
[Sat Feb 28 21:16:40.052772 2026] [:error] [pid 39183:tid 39206] [client 20.104.82.189:1060] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLquBCf4HvhVePw3LZDCAAAAA4"]
[Sat Feb 28 21:16:40.552486 2026] [:error] [pid 52460:tid 52469] [client 20.104.82.189:1313] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLquLLWOogAgHGh62SE0gAAAYY"]
[Sat Feb 28 21:16:40.964182 2026] [:error] [pid 39183:tid 39210] [client 20.104.82.189:1514] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaLquBCf4HvhVePw3LZDEgAAABI"]
[Sat Feb 28 21:16:41.489864 2026] [:error] [pid 39183:tid 39202] [client 20.104.82.189:1504] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaLquRCf4HvhVePw3LZDGgAAAAo"]
[Sat Feb 28 21:16:42.253456 2026] [:error] [pid 49763:tid 49770] [client 20.104.82.189:1380] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaLqurTHSOG_yf2PpqFkWgAAAcQ"]
[Sat Feb 28 21:16:42.683696 2026] [:error] [pid 52460:tid 52463] [client 20.104.82.189:1024] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaLqurLWOogAgHGh62SE1QAAAYA"]
[Sat Feb 28 21:16:43.132579 2026] [:error] [pid 52460:tid 52468] [client 20.104.82.189:1192] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaLqu7LWOogAgHGh62SE1wAAAYU"]
[Sat Feb 28 21:16:43.590212 2026] [:error] [pid 49763:tid 49776] [client 20.104.82.189:1433] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaLqu7THSOG_yf2PpqFkYgAAAco"]
[Sat Feb 28 21:16:44.026220 2026] [:error] [pid 49763:tid 49772] [client 20.104.82.189:1446] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaLqvLTHSOG_yf2PpqFkZAAAAcY"]
[Sat Feb 28 21:16:44.635091 2026] [:error] [pid 49763:tid 49767] [client 20.104.82.189:1211] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaLqvLTHSOG_yf2PpqFkZQAAAcE"]
[Sat Feb 28 21:16:45.668158 2026] [:error] [pid 49763:tid 49784] [client 20.104.82.189:1496] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaLqvbTHSOG_yf2PpqFkaAAAAdI"]
[Sat Feb 28 21:16:46.212929 2026] [:error] [pid 11791:tid 11794] [client 20.104.82.189:1305] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaLqvmuX5e1Q32gqxH3F8wAAAQE"]
[Sat Feb 28 21:16:47.159088 2026] [:error] [pid 39184:tid 39224] [client 20.104.82.189:1390] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaLqv1tZF9Zd_U7easDBnwAAAEU"]
[Sat Feb 28 21:16:47.662430 2026] [:error] [pid 39185:tid 39252] [client 20.104.82.189:1154] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaLqvxVE-FfM89u7BQahxwAAAIY"]
[Sat Feb 28 21:16:48.201318 2026] [:error] [pid 22194:tid 22198] [client 20.104.82.189:1567] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaLqwH6mbajs3bzQGyulTQAAAUI"]
[Sat Feb 28 21:16:48.671665 2026] [:error] [pid 39292:tid 39306] [client 20.104.82.189:1073] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaLqwKIAO5fN7BxyqcF7YwAAAMw"]
[Sat Feb 28 21:16:49.408898 2026] [:error] [pid 11791:tid 11805] [client 20.104.82.189:1454] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaLqwWuX5e1Q32gqxH3F-QAAAQw"]
[Sat Feb 28 21:16:50.233140 2026] [:error] [pid 49763:tid 49774] [client 20.104.82.189:1117] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaLqwrTHSOG_yf2PpqFkdAAAAcg"]
[Sat Feb 28 21:16:51.006919 2026] [:error] [pid 49763:tid 49777] [client 20.104.82.189:1129] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aaLqw7THSOG_yf2PpqFkewAAAcs"]
[Sat Feb 28 21:16:52.150170 2026] [:error] [pid 52460:tid 52480] [client 20.104.82.189:1050] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aaLqxLLWOogAgHGh62SE3QAAAZE"]
[Sat Feb 28 21:16:53.171691 2026] [:error] [pid 49763:tid 49767] [client 20.104.82.189:1076] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aaLqxbTHSOG_yf2PpqFkhAAAAcE"]
[Sat Feb 28 21:16:53.608111 2026] [:error] [pid 39185:tid 39246] [client 20.104.82.189:1243] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/04.php"] [unique_id "aaLqxRVE-FfM89u7BQahyQAAAIA"]
[Sat Feb 28 21:17:08.971533 2026] [:error] [pid 49763:tid 49789] [client 20.104.82.189:1280] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/321.php"] [unique_id "aaLq1LTHSOG_yf2PpqFkyAAAAdc"]
[Sat Feb 28 21:17:10.182304 2026] [:error] [pid 39292:tid 39314] [client 20.104.82.189:1716] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/321.php"] [unique_id "aaLq1qIAO5fN7BxyqcF7bAAAANQ"]
[Sat Feb 28 21:17:11.446870 2026] [:error] [pid 49763:tid 49773] [client 20.104.82.189:1382] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/321.php"] [unique_id "aaLq17THSOG_yf2PpqFk4QAAAcc"]
[Sat Feb 28 21:17:12.222805 2026] [:error] [pid 49763:tid 49767] [client 20.104.82.189:1281] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/321.php"] [unique_id "aaLq2LTHSOG_yf2PpqFk6AAAAcE"]
[Sat Feb 28 21:17:13.757004 2026] [:error] [pid 39183:tid 39214] [client 20.104.82.189:1532] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aaLq2RCf4HvhVePw3LZDcwAAABY"]
[Sat Feb 28 21:17:14.850316 2026] [:error] [pid 39184:tid 39235] [client 20.104.82.189:1065] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aaLq2ltZF9Zd_U7easDBvQAAAFA"]
[Sat Feb 28 21:17:15.518108 2026] [:error] [pid 39292:tid 39304] [client 20.104.82.189:1448] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aaLq26IAO5fN7BxyqcF7bQAAAMo"]
[Sat Feb 28 21:17:16.008881 2026] [:error] [pid 52460:tid 52483] [client 20.104.82.189:1481] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aaLq3LLWOogAgHGh62SFCQAAAZQ"]
[Sat Feb 28 21:17:16.515510 2026] [:error] [pid 52460:tid 52465] [client 20.104.82.189:1251] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aaLq3LLWOogAgHGh62SFCwAAAYI"]
[Sat Feb 28 21:17:16.999062 2026] [:error] [pid 39184:tid 39238] [client 20.104.82.189:1123] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aaLq3FtZF9Zd_U7easDBwgAAAFM"]
[Sat Feb 28 21:17:17.497218 2026] [:error] [pid 11791:tid 11816] [client 20.104.82.189:1275] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aaLq3WuX5e1Q32gqxH3GDgAAARc"]
[Sat Feb 28 21:17:18.142272 2026] [:error] [pid 39183:tid 39207] [client 20.104.82.189:1217] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "aaLq3hCf4HvhVePw3LZDhwAAAA8"]
[Sat Feb 28 21:17:19.068423 2026] [:error] [pid 39183:tid 39214] [client 20.104.82.189:1406] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLq3xCf4HvhVePw3LZDkwAAABY"]
[Sat Feb 28 21:17:19.691966 2026] [:error] [pid 49763:tid 49776] [client 20.104.82.189:1379] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLq37THSOG_yf2PpqFk8QAAAco"]
[Sat Feb 28 21:17:20.608929 2026] [:error] [pid 49763:tid 49771] [client 20.104.82.189:1123] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLq4LTHSOG_yf2PpqFk9gAAAcU"]
[Sat Feb 28 21:17:21.131559 2026] [:error] [pid 52460:tid 52474] [client 20.104.82.189:1130] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaLq4bLWOogAgHGh62SFGAAAAYs"]
[Sat Feb 28 21:17:21.888533 2026] [:error] [pid 39184:tid 39225] [client 20.104.82.189:1449] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aaLq4VtZF9Zd_U7easDByAAAAEY"]
[Sat Feb 28 21:17:22.702248 2026] [:error] [pid 49763:tid 49783] [client 20.104.82.189:1518] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aaLq4rTHSOG_yf2PpqFk_gAAAdE"]
[Sat Feb 28 21:17:23.428917 2026] [:error] [pid 49763:tid 49775] [client 20.104.82.189:1288] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aaLq47THSOG_yf2PpqFlCAAAAck"]
[Sat Feb 28 21:17:24.213989 2026] [:error] [pid 49763:tid 49769] [client 20.104.82.189:1359] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aaLq5LTHSOG_yf2PpqFlCQAAAcM"]
[Sat Feb 28 21:17:24.867492 2026] [:error] [pid 39185:tid 39256] [client 20.104.82.189:1137] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aaLq5BVE-FfM89u7BQah0wAAAIo"]
[Sat Feb 28 21:17:25.722619 2026] [:error] [pid 49763:tid 49782] [client 20.104.82.189:1690] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aaLq5bTHSOG_yf2PpqFlDQAAAdA"]
[Sat Feb 28 21:17:26.253079 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:1678] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aaLq5rLWOogAgHGh62SFLgAAAY0"]
[Sat Feb 28 21:17:26.920805 2026] [:error] [pid 49763:tid 49771] [client 20.104.82.189:1551] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/al.php"] [unique_id "aaLq5rTHSOG_yf2PpqFlEQAAAcU"]
[Sat Feb 28 21:17:27.529642 2026] [:error] [pid 49763:tid 49784] [client 20.104.82.189:1043] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aaLq57THSOG_yf2PpqFlEwAAAdI"]
[Sat Feb 28 21:17:28.060723 2026] [:error] [pid 49763:tid 49781] [client 20.104.82.189:1290] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aaLq6LTHSOG_yf2PpqFlFAAAAc8"]
[Sat Feb 28 21:17:28.502068 2026] [:error] [pid 49763:tid 49772] [client 20.104.82.189:1317] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aaLq6LTHSOG_yf2PpqFlFwAAAcY"]
[Sat Feb 28 21:17:28.964476 2026] [:error] [pid 49763:tid 49780] [client 20.104.82.189:1395] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "aaLq6LTHSOG_yf2PpqFlHAAAAc4"]
[Sat Feb 28 21:17:29.466560 2026] [:error] [pid 39184:tid 39239] [client 20.104.82.189:1500] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaLq6VtZF9Zd_U7easDB1QAAAFQ"]
[Sat Feb 28 21:17:29.968859 2026] [:error] [pid 39185:tid 39266] [client 20.104.82.189:1394] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaLq6RVE-FfM89u7BQah3gAAAJQ"]
[Sat Feb 28 21:17:30.540333 2026] [:error] [pid 49763:tid 49787] [client 20.104.82.189:1436] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaLq6rTHSOG_yf2PpqFlIwAAAdU"]
[Sat Feb 28 21:17:31.052658 2026] [:error] [pid 49763:tid 49775] [client 20.104.82.189:1228] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaLq67THSOG_yf2PpqFlJgAAAck"]
[Sat Feb 28 21:17:31.523642 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:1428] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaLq67LWOogAgHGh62SFRwAAAY0"]
[Sat Feb 28 21:17:32.074749 2026] [:error] [pid 52460:tid 52479] [client 20.104.82.189:1563] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaLq7LLWOogAgHGh62SFSwAAAZA"]
[Sat Feb 28 21:17:32.629882 2026] [:error] [pid 11791:tid 11798] [client 20.104.82.189:1674] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaLq7GuX5e1Q32gqxH3GJwAAAQU"]
[Sat Feb 28 21:17:33.081019 2026] [:error] [pid 49763:tid 49774] [client 20.104.82.189:1115] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaLq7bTHSOG_yf2PpqFlNAAAAcg"]
[Sat Feb 28 21:17:33.588973 2026] [:error] [pid 39184:tid 39239] [client 20.104.82.189:1458] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaLq7VtZF9Zd_U7easDB6gAAAFQ"]
[Sat Feb 28 21:17:34.171175 2026] [:error] [pid 39183:tid 39210] [client 20.104.82.189:1148] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaLq7hCf4HvhVePw3LZDpAAAABI"]
[Sat Feb 28 21:17:34.667699 2026] [:error] [pid 49763:tid 49771] [client 20.104.82.189:1525] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaLq7rTHSOG_yf2PpqFlPAAAAcU"]
[Sat Feb 28 21:17:35.143655 2026] [:error] [pid 11791:tid 11809] [client 20.104.82.189:1136] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaLq72uX5e1Q32gqxH3GLwAAARA"]
[Sat Feb 28 21:17:35.797090 2026] [:error] [pid 11791:tid 11795] [client 20.104.82.189:1385] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aaLq72uX5e1Q32gqxH3GMQAAAQI"]
[Sat Feb 28 21:17:36.265591 2026] [:error] [pid 39292:tid 39316] [client 20.104.82.189:1262] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aaLq8KIAO5fN7BxyqcF7dAAAANY"]
[Sat Feb 28 21:17:36.765424 2026] [:error] [pid 11791:tid 11797] [client 20.104.82.189:1340] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aaLq8GuX5e1Q32gqxH3GNAAAAQQ"]
[Sat Feb 28 21:17:37.603707 2026] [:error] [pid 52460:tid 52479] [client 20.104.82.189:1474] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aaLq8bLWOogAgHGh62SFWQAAAZA"]
[Sat Feb 28 21:17:38.248588 2026] [:error] [pid 49763:tid 49780] [client 20.104.82.189:1458] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aaLq8rTHSOG_yf2PpqFlVAAAAc4"]
[Sat Feb 28 21:17:38.894655 2026] [:error] [pid 49763:tid 49772] [client 20.104.82.189:1293] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aaLq8rTHSOG_yf2PpqFlWQAAAcY"]
[Sat Feb 28 21:17:39.647322 2026] [:error] [pid 39183:tid 39206] [client 20.104.82.189:1524] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aaLq8xCf4HvhVePw3LZDrQAAAA4"]
[Sat Feb 28 21:17:40.533056 2026] [:error] [pid 49763:tid 49775] [client 20.104.82.189:1636] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "aaLq9LTHSOG_yf2PpqFlYQAAAck"]
[Sat Feb 28 21:17:41.095844 2026] [:error] [pid 11791:tid 11796] [client 20.104.82.189:1126] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aaLq9WuX5e1Q32gqxH3GOAAAAQM"]
[Sat Feb 28 21:17:41.650053 2026] [:error] [pid 11791:tid 11801] [client 20.104.82.189:1056] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aaLq9WuX5e1Q32gqxH3GOwAAAQg"]
[Sat Feb 28 21:17:42.096766 2026] [:error] [pid 52460:tid 52473] [client 20.104.82.189:1557] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aaLq9rLWOogAgHGh62SFbgAAAYo"]
[Sat Feb 28 21:17:42.526712 2026] [:error] [pid 49763:tid 49774] [client 20.104.82.189:1320] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aaLq9rTHSOG_yf2PpqFlagAAAcg"]
[Sat Feb 28 21:17:42.940039 2026] [:error] [pid 52460:tid 52476] [client 20.104.82.189:1427] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aaLq9rLWOogAgHGh62SFdwAAAY0"]
[Sat Feb 28 21:17:43.432918 2026] [:error] [pid 39184:tid 39231] [client 20.104.82.189:1072] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aaLq91tZF9Zd_U7easDB9gAAAEw"]
[Sat Feb 28 21:17:43.865816 2026] [:error] [pid 49763:tid 49768] [client 20.104.82.189:1259] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aaLq97THSOG_yf2PpqFlcgAAAcI"]
[Sat Feb 28 21:17:44.375908 2026] [:error] [pid 39292:tid 39295] [client 20.104.82.189:1373] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aaLq-KIAO5fN7BxyqcF7gAAAAME"]
[Sat Feb 28 21:17:44.865562 2026] [:error] [pid 49763:tid 49787] [client 20.104.82.189:1673] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/about.php"] [unique_id "aaLq-LTHSOG_yf2PpqFlegAAAdU"]
[Sat Feb 28 21:17:45.398136 2026] [:error] [pid 49763:tid 49769] [client 20.104.82.189:1274] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/about.php"] [unique_id "aaLq-bTHSOG_yf2PpqFlgAAAAcM"]
[Sat Feb 28 21:17:45.843353 2026] [:error] [pid 22194:tid 22198] [client 20.104.82.189:1175] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/about.php"] [unique_id "aaLq-X6mbajs3bzQGyulfwAAAUI"]
[Sat Feb 28 21:17:46.318110 2026] [:error] [pid 49763:tid 49780] [client 20.104.82.189:1438] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/about.php"] [unique_id "aaLq-rTHSOG_yf2PpqFligAAAc4"]
[Sat Feb 28 21:17:46.751330 2026] [:error] [pid 49763:tid 49766] [client 20.104.82.189:1264] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaLq-rTHSOG_yf2PpqFljwAAAcA"]
[Sat Feb 28 21:17:47.316880 2026] [:error] [pid 11791:tid 11807] [client 20.104.82.189:1166] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaLq-2uX5e1Q32gqxH3GQgAAAQ4"]
[Sat Feb 28 21:17:47.767152 2026] [:error] [pid 39183:tid 39201] [client 20.104.82.189:1409] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaLq-xCf4HvhVePw3LZDyQAAAAk"]
[Sat Feb 28 21:17:48.195603 2026] [:error] [pid 39183:tid 39193] [client 20.104.82.189:1169] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaLq_BCf4HvhVePw3LZD0AAAAAE"]
[Sat Feb 28 21:17:48.630153 2026] [:error] [pid 39292:tid 39301] [client 20.104.82.189:1120] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaLq_KIAO5fN7BxyqcF7hQAAAMc"]
[Sat Feb 28 21:17:49.090857 2026] [:error] [pid 49763:tid 49774] [client 20.104.82.189:1521] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaLq_bTHSOG_yf2PpqFllgAAAcg"]
[Sat Feb 28 21:17:49.511034 2026] [:error] [pid 49763:tid 49781] [client 20.104.82.189:1387] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaLq_bTHSOG_yf2PpqFlmgAAAc8"]
[Sat Feb 28 21:17:49.951284 2026] [:error] [pid 49763:tid 49786] [client 20.104.82.189:1974] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aaLq_bTHSOG_yf2PpqFlnwAAAdQ"]
[Sat Feb 28 21:17:50.393106 2026] [:error] [pid 49763:tid 49769] [client 20.104.82.189:1302] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex.php7"] [unique_id "aaLq_rTHSOG_yf2PpqFlqQAAAcM"]
[Sat Feb 28 21:17:50.965196 2026] [:error] [pid 49763:tid 49772] [client 20.104.82.189:1036] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex.php7"] [unique_id "aaLq_rTHSOG_yf2PpqFlrQAAAcY"]
[Sat Feb 28 21:17:51.412156 2026] [:error] [pid 39292:tid 39305] [client 20.104.82.189:1812] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex.php7"] [unique_id "aaLq_6IAO5fN7BxyqcF7igAAAMs"]
[Sat Feb 28 21:17:52.021746 2026] [:error] [pid 39185:tid 39256] [client 20.104.82.189:1578] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex.php7"] [unique_id "aaLrABVE-FfM89u7BQah8gAAAIo"]
[Sat Feb 28 21:17:52.512429 2026] [:error] [pid 11791:tid 11817] [client 20.104.82.189:1276] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aaLrAGuX5e1Q32gqxH3GUQAAARg"]
[Sat Feb 28 21:17:52.967132 2026] [:error] [pid 49763:tid 49784] [client 20.104.82.189:1266] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aaLrALTHSOG_yf2PpqFltgAAAdI"]
[Sat Feb 28 21:17:53.462050 2026] [:error] [pid 39183:tid 39193] [client 20.104.82.189:1659] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aaLrARCf4HvhVePw3LZD3AAAAAE"]
[Sat Feb 28 21:17:53.876264 2026] [:error] [pid 39292:tid 39314] [client 20.104.82.189:1300] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aaLrAaIAO5fN7BxyqcF7jQAAANQ"]
[Sat Feb 28 21:17:54.312588 2026] [:error] [pid 39183:tid 39197] [client 20.104.82.189:1272] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aaLrAhCf4HvhVePw3LZD4AAAAAU"]
[Sat Feb 28 21:17:54.771628 2026] [:error] [pid 39185:tid 39252] [client 20.104.82.189:1730] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aaLrAhVE-FfM89u7BQah-AAAAIY"]
[Sat Feb 28 21:17:55.225290 2026] [:error] [pid 39292:tid 39296] [client 20.104.82.189:1473] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aaLrA6IAO5fN7BxyqcF7kQAAAMI"]
[Sat Feb 28 21:17:55.691982 2026] [:error] [pid 52460:tid 52471] [client 20.104.82.189:1029] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/520.php"] [unique_id "aaLrA7LWOogAgHGh62SFmgAAAYg"]
[Sat Feb 28 21:17:56.172486 2026] [:error] [pid 39185:tid 39262] [client 20.104.82.189:1689] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaLrBBVE-FfM89u7BQah-QAAAJA"]
[Sat Feb 28 21:17:56.660661 2026] [:error] [pid 22194:tid 22205] [client 20.104.82.189:1185] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaLrBH6mbajs3bzQGyuljQAAAUk"]
[Sat Feb 28 21:17:57.647667 2026] [:error] [pid 39183:tid 39196] [client 20.104.82.189:1662] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaLrBRCf4HvhVePw3LZD8QAAAAQ"]
[Sat Feb 28 21:17:58.118518 2026] [:error] [pid 11791:tid 11803] [client 20.104.82.189:1711] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaLrBmuX5e1Q32gqxH3GXwAAAQo"]
[Sat Feb 28 21:17:58.739554 2026] [:error] [pid 39292:tid 39305] [client 20.104.82.189:1632] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaLrBqIAO5fN7BxyqcF7mwAAAMs"]
[Sat Feb 28 21:17:59.321509 2026] [:error] [pid 11791:tid 11794] [client 20.104.82.189:1501] [client 20.104.82.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLrB2uX5e1Q32gqxH3GYAAAAQE"]
[Sat Feb 28 21:17:59.748126 2026] [:error] [pid 39184:tid 39221] [client 20.104.82.189:1776] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaLrB1tZF9Zd_U7easDCIAAAAEI"]
[Sat Feb 28 21:18:00.178189 2026] [:error] [pid 39185:tid 39264] [client 20.104.82.189:1440] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaLrCBVE-FfM89u7BQah_QAAAJI"]
[Sat Feb 28 21:18:00.593099 2026] [:error] [pid 49763:tid 49777] [client 20.104.82.189:1112] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaLrCLTHSOG_yf2PpqFlzwAAAcs"]
[Sat Feb 28 21:18:01.032277 2026] [:error] [pid 39183:tid 39213] [client 20.104.82.189:1041] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaLrCRCf4HvhVePw3LZD-QAAABU"]
[Sat Feb 28 21:21:53.734299 2026] [autoindex:error] [pid 39184:tid 39223] [client 194.146.12.7:61427] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 21:28:23.995742 2026] [:error] [pid 39183:tid 39216] [client 20.63.83.162:46827] [client 20.63.83.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLtdxCf4HvhVePw3LZPEAAAABg"]
[Sat Feb 28 21:28:28.153982 2026] [autoindex:error] [pid 39183:tid 39195] [client 20.63.83.162:46277] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:28:28.370299 2026] [proxy_fcgi:error] [pid 39183:tid 39215] [client 20.63.83.162:46277] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:28:28.585835 2026] [autoindex:error] [pid 39183:tid 39208] [client 20.63.83.162:46277] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:28:28.801557 2026] [autoindex:error] [pid 39183:tid 39210] [client 20.63.83.162:46277] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:28:29.011683 2026] [:error] [pid 39183:tid 39196] [client 20.63.83.162:46277] [client 20.63.83.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.63.83.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaLtfRCf4HvhVePw3LZPOQAAAAQ"]
[Sat Feb 28 21:28:31.603852 2026] [autoindex:error] [pid 39183:tid 39215] [client 20.63.83.162:46277] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:28:33.008693 2026] [:error] [pid 39183:tid 39199] [client 20.63.83.162:46277] [client 20.63.83.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaLtgRCf4HvhVePw3LZPTQAAAAc"]
[Sat Feb 28 21:28:40.052221 2026] [:error] [pid 52460:tid 52467] [client 20.63.83.162:46284] [client 20.63.83.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aaLtiLLWOogAgHGh62SPQQAAAYQ"]
[Sat Feb 28 21:28:45.898900 2026] [:error] [pid 39183:tid 39212] [client 20.63.83.162:46808] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaLtjRCf4HvhVePw3LZPnwAAABQ"]
[Sat Feb 28 21:28:49.754346 2026] [:error] [pid 52460:tid 52468] [client 20.63.83.162:46828] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaLtkbLWOogAgHGh62SPfQAAAYU"]
[Sat Feb 28 21:28:58.972933 2026] [:error] [pid 39183:tid 39205] [client 20.63.83.162:46834] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaLtmhCf4HvhVePw3LZPxAAAAA0"]
[Sat Feb 28 21:29:00.296127 2026] [:error] [pid 39184:tid 39241] [client 20.63.83.162:46285] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaLtnFtZF9Zd_U7easDH0QAAAFY"]
[Sat Feb 28 21:34:54.372812 2026] [:error] [pid 49763:tid 49779] [client 54.37.252.212:36072] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaLu_rTHSOG_yf2PpqGCcgAAAc0"]
[Sat Feb 28 21:34:57.339173 2026] [:error] [pid 39183:tid 39204] [client 54.37.252.212:60498] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaLvARCf4HvhVePw3LZXSAAAAAw"]
[Sat Feb 28 21:35:00.780874 2026] [:error] [pid 52460:tid 52483] [client 54.37.252.212:60512] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aaLvBLLWOogAgHGh62SVSAAAAZQ"]
[Sat Feb 28 21:35:03.585011 2026] [:error] [pid 39184:tid 39231] [client 54.37.252.212:60528] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aaLvB1tZF9Zd_U7easDK5QAAAEw"]
[Sat Feb 28 21:35:06.205971 2026] [:error] [pid 11791:tid 11811] [client 54.37.252.212:60538] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaLvCmuX5e1Q32gqxH3KfAAAARI"]
[Sat Feb 28 21:35:08.698059 2026] [:error] [pid 11791:tid 11796] [client 54.37.252.212:43344] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aaLvDGuX5e1Q32gqxH3KfgAAAQM"]
[Sat Feb 28 21:35:11.170944 2026] [:error] [pid 11791:tid 11798] [client 54.37.252.212:43346] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aaLvD2uX5e1Q32gqxH3KiQAAAQU"]
[Sat Feb 28 21:35:13.698220 2026] [:error] [pid 39292:tid 39295] [client 54.37.252.212:43350] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaLvEaIAO5fN7BxyqcGD4AAAAME"]
[Sat Feb 28 21:35:16.364138 2026] [:error] [pid 49763:tid 49775] [client 54.37.252.212:43366] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaLvFLTHSOG_yf2PpqGDJAAAAck"]
[Sat Feb 28 21:35:19.137423 2026] [:error] [pid 49763:tid 49789] [client 54.37.252.212:40490] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaLvF7THSOG_yf2PpqGDRgAAAdc"]
[Sat Feb 28 21:35:21.878421 2026] [:error] [pid 52460:tid 52480] [client 54.37.252.212:40498] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaLvGbLWOogAgHGh62SVuQAAAZE"]
[Sat Feb 28 21:35:24.412802 2026] [:error] [pid 52460:tid 52473] [client 54.37.252.212:40504] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaLvHLLWOogAgHGh62SVyAAAAYo"]
[Sat Feb 28 21:35:27.009656 2026] [:error] [pid 39183:tid 39214] [client 54.37.252.212:50914] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaLvHxCf4HvhVePw3LZXywAAABY"]
[Sat Feb 28 21:35:29.705374 2026] [:error] [pid 52460:tid 52483] [client 54.37.252.212:50928] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaLvIbLWOogAgHGh62SV3gAAAZQ"]
[Sat Feb 28 21:35:32.862551 2026] [:error] [pid 39292:tid 39315] [client 54.37.252.212:50944] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaLvJKIAO5fN7BxyqcGD7AAAANU"]
[Sat Feb 28 21:35:35.813362 2026] [:error] [pid 49763:tid 49789] [client 54.37.252.212:50954] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaLvJ7THSOG_yf2PpqGDnAAAAdc"]
[Sat Feb 28 21:35:38.248637 2026] [:error] [pid 49763:tid 49776] [client 54.37.252.212:60768] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aaLvKrTHSOG_yf2PpqGDrAAAAco"]
[Sat Feb 28 21:35:41.268465 2026] [:error] [pid 49763:tid 49771] [client 54.37.252.212:60778] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaLvLbTHSOG_yf2PpqGD1gAAAcU"]
[Sat Feb 28 21:35:43.709696 2026] [:error] [pid 39292:tid 39296] [client 54.37.252.212:60788] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaLvL6IAO5fN7BxyqcGD8wAAAMI"]
[Sat Feb 28 21:35:46.400731 2026] [:error] [pid 49763:tid 49782] [client 54.37.252.212:60796] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaLvMrTHSOG_yf2PpqGD6QAAAdA"]
[Sat Feb 28 21:35:49.191163 2026] [:error] [pid 39292:tid 39318] [client 54.37.252.212:40104] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaLvNaIAO5fN7BxyqcGEBQAAANg"]
[Sat Feb 28 21:36:11.482417 2026] [:error] [pid 49763:tid 49783] [client 20.63.83.162:46288] [client 20.63.83.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLvS7THSOG_yf2PpqGE7QAAAdE"]
[Sat Feb 28 21:36:17.529715 2026] [autoindex:error] [pid 49763:tid 49781] [client 20.63.83.162:46824] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:36:17.746767 2026] [proxy_fcgi:error] [pid 49763:tid 49787] [client 20.63.83.162:46824] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:36:18.003830 2026] [autoindex:error] [pid 49763:tid 49775] [client 20.63.83.162:46824] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:36:18.224209 2026] [autoindex:error] [pid 49763:tid 49785] [client 20.63.83.162:46824] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:36:18.660244 2026] [:error] [pid 49763:tid 49772] [client 20.63.83.162:46824] [client 20.63.83.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.63.83.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaLvUrTHSOG_yf2PpqGFTQAAAcY"]
[Sat Feb 28 21:36:21.278165 2026] [autoindex:error] [pid 49763:tid 49775] [client 20.63.83.162:46824] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 21:36:23.634035 2026] [:error] [pid 49763:tid 49785] [client 20.63.83.162:46824] [client 20.63.83.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaLvV7THSOG_yf2PpqGFoQAAAdM"]
[Sat Feb 28 21:36:25.290914 2026] [:error] [pid 49763:tid 49781] [client 20.63.83.162:46272] [client 20.63.83.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aaLvWbTHSOG_yf2PpqGFyAAAAc8"]
[Sat Feb 28 21:36:33.405049 2026] [:error] [pid 39292:tid 39310] [client 20.63.83.162:46287] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaLvYaIAO5fN7BxyqcGEPAAAANA"]
[Sat Feb 28 21:36:34.839618 2026] [:error] [pid 49763:tid 49772] [client 20.63.83.162:46808] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaLvYrTHSOG_yf2PpqGGiAAAAcY"]
[Sat Feb 28 21:36:35.963295 2026] [:error] [pid 39183:tid 39214] [client 20.63.83.162:46812] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaLvYxCf4HvhVePw3LZZUQAAABY"]
[Sat Feb 28 21:36:40.352545 2026] [:error] [pid 39292:tid 39307] [client 20.63.83.162:46817] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaLvaKIAO5fN7BxyqcGESQAAAM0"]
[Sat Feb 28 21:52:19.941176 2026] [:error] [pid 39184:tid 39241] [client 182.42.105.85:49621] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaLzE1tZF9Zd_U7easDVTQAAAFY"]
[Sat Feb 28 22:56:05.890912 2026] [:error] [pid 39183:tid 39193] [client 185.82.72.102:29935] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaMCBRCf4HvhVePw3La1pwAAAAE"]
[Sat Feb 28 22:56:12.479560 2026] [:error] [pid 52460:tid 52479] [client 45.86.200.223:20099] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaMCDLLWOogAgHGh62TQ2AAAAZA"]
[Sat Feb 28 22:56:22.141529 2026] [:error] [pid 39292:tid 39312] [client 45.86.200.218:30667] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaMCFqIAO5fN7BxyqcGgWAAAANI"]
[Sat Feb 28 22:56:26.927330 2026] [:error] [pid 39184:tid 39233] [client 45.86.200.244:34681] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaMCGltZF9Zd_U7easDzXgAAAE4"]
[Sat Feb 28 22:56:36.204310 2026] [:error] [pid 49763:tid 49783] [client 185.82.72.109:54709] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaMCJLTHSOG_yf2PpqHu0QAAAdE"]
[Sat Feb 28 22:56:38.432271 2026] [:error] [pid 22194:tid 22200] [client 45.86.200.231:49437] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaMCJn6mbajs3bzQGyu5VgAAAUQ"]
[Sat Feb 28 22:56:39.029372 2026] [:error] [pid 11791:tid 11815] [client 185.82.72.102:62723] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaMCJ2uX5e1Q32gqxH3glwAAARY"]
[Sat Feb 28 22:56:39.984752 2026] [:error] [pid 39185:tid 39270] [client 45.86.200.221:22823] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaMCJxVE-FfM89u7BQa3ZQAAAJg"]
[Sat Feb 28 22:56:40.622221 2026] [:error] [pid 39183:tid 39193] [client 185.82.72.206:32971] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaMCKBCf4HvhVePw3La2zwAAAAE"]
[Sat Feb 28 22:56:41.275036 2026] [:error] [pid 39185:tid 39267] [client 185.82.72.111:38881] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaMCKRVE-FfM89u7BQa3bQAAAJU"]
[Sat Feb 28 22:56:43.129532 2026] [:error] [pid 39183:tid 39202] [client 185.82.72.107:41901] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaMCKxCf4HvhVePw3La2_QAAAAo"]
[Sat Feb 28 22:56:45.634682 2026] [:error] [pid 39184:tid 39236] [client 45.86.200.250:43115] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aaMCLVtZF9Zd_U7easDzfwAAAFE"]
[Sat Feb 28 22:56:49.143084 2026] [:error] [pid 52460:tid 52465] [client 45.86.200.227:26511] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaMCMbLWOogAgHGh62TRXAAAAYI"]
[Sat Feb 28 22:56:51.010659 2026] [:error] [pid 39184:tid 39241] [client 45.86.200.227:22891] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaMCM1tZF9Zd_U7easDziQAAAFY"]
[Sat Feb 28 22:56:53.319249 2026] [:error] [pid 39185:tid 39249] [client 45.86.200.235:59643] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaMCNRVE-FfM89u7BQa3fgAAAIM"]
[Sat Feb 28 22:57:02.379027 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.241:47219] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaMCPrTHSOG_yf2PpqHvRAAAAc4"]
[Sat Feb 28 22:57:04.730108 2026] [:error] [pid 52460:tid 52465] [client 45.86.200.214:52781] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaMCQLLWOogAgHGh62TRjAAAAYI"]
[Sat Feb 28 22:57:08.952799 2026] [:error] [pid 39183:tid 39214] [client 45.86.200.233:32509] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaMCRBCf4HvhVePw3La4GAAAABY"]
[Sat Feb 28 22:57:11.353267 2026] [:error] [pid 39183:tid 39204] [client 185.82.72.109:58989] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaMCRxCf4HvhVePw3La4JgAAAAw"]
[Sat Feb 28 22:57:18.948239 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.226:48217] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaMCThCf4HvhVePw3La4fgAAAA4"]
[Sat Feb 28 22:57:26.150734 2026] [:error] [pid 49763:tid 49788] [client 185.82.72.179:48215] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaMCVrTHSOG_yf2PpqHv2AAAAdY"]
[Sat Feb 28 22:57:28.467969 2026] [:error] [pid 39183:tid 39203] [client 185.82.72.108:26627] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaMCWBCf4HvhVePw3La4zAAAAAs"]
[Sat Feb 28 22:57:29.166801 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.249:26127] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaMCWRCf4HvhVePw3La41QAAAAc"]
[Sat Feb 28 22:57:29.812564 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.247:49077] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaMCWbLWOogAgHGh62TR2AAAAYw"]
[Sat Feb 28 22:57:34.846578 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.231:50499] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaMCXrLWOogAgHGh62TR6gAAAYw"]
[Sat Feb 28 22:57:35.617944 2026] [:error] [pid 11791:tid 11811] [client 45.86.200.232:51189] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaMCX2uX5e1Q32gqxH3g1wAAARI"]
[Sat Feb 28 22:57:36.215928 2026] [:error] [pid 52460:tid 52472] [client 185.82.72.103:32689] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaMCYLLWOogAgHGh62TR7QAAAYk"]
[Sat Feb 28 22:57:48.923463 2026] [:error] [pid 52460:tid 52484] [client 45.86.200.227:62685] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aaMCbLLWOogAgHGh62TSGAAAAZU"]
[Sat Feb 28 22:57:54.046649 2026] [:error] [pid 39183:tid 39193] [client 45.86.200.233:39391] [client 45.86.200.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.233, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaMCchCf4HvhVePw3La5mAAAAAE"]
[Sat Feb 28 22:58:12.928567 2026] [:error] [pid 39183:tid 39205] [client 45.86.200.233:39391] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaMChBCf4HvhVePw3La5-wAAAA0"]
[Sat Feb 28 22:58:17.498958 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.251:27517] [client 45.86.200.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.251, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaMCiRCf4HvhVePw3La6FwAAAAg"]
[Sat Feb 28 22:58:20.336453 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.251:27517] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aaMCjBCf4HvhVePw3La6KwAAAAc"]
[Sat Feb 28 22:58:33.500031 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.232:40129] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaMCmRCf4HvhVePw3La6nQAAABA"]
[Sat Feb 28 22:58:45.337894 2026] [:error] [pid 11791:tid 11797] [client 45.86.200.225:54187] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaMCpWuX5e1Q32gqxH3hFAAAAQQ"]
[Sat Feb 28 22:58:48.702503 2026] [:error] [pid 39184:tid 39225] [client 45.86.200.229:42831] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaMCqFtZF9Zd_U7easD0TgAAAEY"]
[Sat Feb 28 22:58:53.410046 2026] [:error] [pid 11791:tid 11807] [client 185.82.72.104:65231] [client 185.82.72.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaMCrWuX5e1Q32gqxH3hLAAAAQ4"]
[Sat Feb 28 22:58:54.746638 2026] [:error] [pid 11791:tid 11804] [client 185.82.72.104:65231] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaMCrmuX5e1Q32gqxH3hLgAAAQs"]
[Sat Feb 28 22:59:20.197644 2026] [:error] [pid 39185:tid 39262] [client 45.86.200.234:39093] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaMCyBVE-FfM89u7BQa33QAAAJA"]
[Sat Feb 28 22:59:25.248535 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.244:20495] [client 45.86.200.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.244, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaMCzRCf4HvhVePw3La7KgAAAAc"]
[Sat Feb 28 22:59:30.367335 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.244:20495] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaMC0hCf4HvhVePw3La7TQAAAAI"]
[Sat Feb 28 22:59:33.080594 2026] [:error] [pid 39185:tid 39260] [client 45.86.200.230:46323] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aaMC1RVE-FfM89u7BQa35gAAAI4"]
[Sat Feb 28 22:59:36.516193 2026] [:error] [pid 49763:tid 49786] [client 185.82.72.103:36531] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaMC2LTHSOG_yf2PpqHyOgAAAdQ"]
[Sat Feb 28 22:59:42.236943 2026] [:error] [pid 49763:tid 49770] [client 185.82.72.106:27837] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaMC3rTHSOG_yf2PpqHyUQAAAcQ"]
[Sat Feb 28 22:59:42.833503 2026] [:error] [pid 39292:tid 39315] [client 45.86.200.240:56129] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaMC3qIAO5fN7BxyqcGhDAAAANU"]
[Sat Feb 28 22:59:51.057207 2026] [:error] [pid 49763:tid 49789] [client 45.86.200.214:61533] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaMC57THSOG_yf2PpqHydAAAAdc"]
[Sat Feb 28 22:59:53.440834 2026] [:error] [pid 52460:tid 52466] [client 45.86.200.215:55709] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaMC6bLWOogAgHGh62TTZQAAAYM"]
[Sat Feb 28 22:59:59.375697 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.235:28547] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aaMC7xCf4HvhVePw3La7zAAAAAg"]
[Sat Feb 28 23:00:04.733703 2026] [:error] [pid 39292:tid 39301] [client 45.86.200.248:30477] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaMC9KIAO5fN7BxyqcGhMQAAAMc"]
[Sat Feb 28 23:00:08.338057 2026] [:error] [pid 22194:tid 22204] [client 45.86.200.227:64427] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aaMC-H6mbajs3bzQGyu6BwAAAUg"]
[Sat Feb 28 23:00:13.285167 2026] [:error] [pid 11791:tid 11805] [client 185.82.72.206:37555] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaMC_WuX5e1Q32gqxH3haAAAAQw"]
[Sat Feb 28 23:00:22.988769 2026] [:error] [pid 39184:tid 39222] [client 185.82.72.104:21765] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaMDBltZF9Zd_U7easD0vwAAAEM"]
[Sat Feb 28 23:00:23.597952 2026] [:error] [pid 39183:tid 39210] [client 185.82.72.179:37327] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaMDBxCf4HvhVePw3La8VQAAABI"]
[Sat Feb 28 23:00:24.199871 2026] [:error] [pid 49763:tid 49788] [client 185.82.72.10:26795] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaMDCLTHSOG_yf2PpqHzEwAAAdY"]
[Sat Feb 28 23:00:24.789474 2026] [:error] [pid 49763:tid 49772] [client 45.86.200.237:22483] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaMDCLTHSOG_yf2PpqHzFwAAAcY"]
[Sat Feb 28 23:00:27.231311 2026] [:error] [pid 39183:tid 39195] [client 185.82.72.107:50589] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaMDCxCf4HvhVePw3La8fgAAAAM"]
[Sat Feb 28 23:00:27.937545 2026] [:error] [pid 39183:tid 39211] [client 185.82.72.106:53183] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaMDCxCf4HvhVePw3La8iQAAABM"]
[Sat Feb 28 23:00:31.595703 2026] [:error] [pid 11791:tid 11805] [client 185.82.72.10:48787] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaMDD2uX5e1Q32gqxH3h3gAAAQw"]
[Sat Feb 28 23:00:32.221383 2026] [:error] [pid 39292:tid 39311] [client 45.86.200.243:52567] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaMDEKIAO5fN7BxyqcGhQAAAANE"]
[Sat Feb 28 23:00:32.899155 2026] [:error] [pid 39185:tid 39257] [client 45.86.200.220:55711] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaMDEBVE-FfM89u7BQa3_QAAAIs"]
[Sat Feb 28 23:00:33.485499 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.234:45171] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaMDEbTHSOG_yf2PpqHzPAAAAc8"]
[Sat Feb 28 23:00:35.887703 2026] [:error] [pid 49763:tid 49788] [client 185.82.72.108:61591] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaMDE7THSOG_yf2PpqHzSQAAAdY"]
[Sat Feb 28 23:00:41.076762 2026] [:error] [pid 39184:tid 39240] [client 45.86.200.246:23157] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaMDGVtZF9Zd_U7easD04wAAAFU"]
[Sat Feb 28 23:00:47.298698 2026] [:error] [pid 49763:tid 49788] [client 185.82.72.107:39599] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaMDH7THSOG_yf2PpqHzjAAAAdY"]
[Sat Feb 28 23:00:57.179001 2026] [:error] [pid 22194:tid 22197] [client 185.82.72.10:24585] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaMDKX6mbajs3bzQGyu6IAAAAUE"]
[Sat Feb 28 23:01:01.661926 2026] [:error] [pid 52460:tid 52474] [client 185.82.72.103:30445] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaMDLbLWOogAgHGh62TT5gAAAYs"]
[Sat Feb 28 23:01:02.244128 2026] [:error] [pid 39184:tid 39229] [client 185.82.72.179:58559] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaMDLltZF9Zd_U7easD09AAAAEo"]
[Sat Feb 28 23:01:08.341329 2026] [:error] [pid 52460:tid 52470] [client 185.82.72.106:56169] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaMDNLLWOogAgHGh62TT7wAAAYc"]
[Sat Feb 28 23:01:13.502712 2026] [proxy_fcgi:error] [pid 39183:tid 39204] [client 45.86.200.230:48359] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:01:13.816673 2026] [proxy_fcgi:error] [pid 39183:tid 39193] [client 45.86.200.230:48359] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:01:14.144874 2026] [proxy_fcgi:error] [pid 39183:tid 39209] [client 45.86.200.230:48359] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:01:18.603293 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.230:48359] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaMDPhCf4HvhVePw3La9XwAAABM"]
[Sat Feb 28 23:01:19.298814 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.248:48291] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaMDPxCf4HvhVePw3La9ZAAAAA8"]
[Sat Feb 28 23:01:19.942761 2026] [:error] [pid 39183:tid 39211] [client 185.82.72.103:63421] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaMDPxCf4HvhVePw3La9aQAAABM"]
[Sat Feb 28 23:01:20.582936 2026] [:error] [pid 39183:tid 39210] [client 185.82.72.10:51315] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaMDQBCf4HvhVePw3La9bQAAABI"]
[Sat Feb 28 23:01:21.171515 2026] [:error] [pid 39183:tid 39207] [client 185.82.72.106:21523] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaMDQRCf4HvhVePw3La9bwAAAA8"]
[Sat Feb 28 23:01:21.772759 2026] [:error] [pid 39184:tid 39220] [client 45.86.200.250:56017] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaMDQVtZF9Zd_U7easD1FwAAAEE"]
[Sat Feb 28 23:01:23.577863 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.216:48693] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaMDQ7THSOG_yf2PpqHzzQAAAcE"]
[Sat Feb 28 23:01:24.237856 2026] [:error] [pid 49763:tid 49773] [client 45.86.200.217:26055] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaMDRLTHSOG_yf2PpqHzzwAAAcc"]
[Sat Feb 28 23:01:24.818308 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.237:30307] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaMDRLTHSOG_yf2PpqHz1AAAAcU"]
[Sat Feb 28 23:01:25.456169 2026] [:error] [pid 39183:tid 39209] [client 45.86.200.237:52243] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaMDRRCf4HvhVePw3La9hgAAABE"]
[Sat Feb 28 23:01:28.814544 2026] [:error] [pid 52460:tid 52484] [client 45.86.200.220:51377] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaMDSLLWOogAgHGh62TT_AAAAZU"]
[Sat Feb 28 23:01:31.148947 2026] [:error] [pid 39183:tid 39198] [client 45.86.200.220:55051] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaMDSxCf4HvhVePw3La9nwAAAAY"]
[Sat Feb 28 23:01:34.574985 2026] [:error] [pid 39292:tid 39309] [client 45.86.200.230:45037] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaMDTqIAO5fN7BxyqcGhbwAAAM8"]
[Sat Feb 28 23:01:38.101657 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.246:54855] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaMDUrTHSOG_yf2PpqHz6gAAAdY"]
[Sat Feb 28 23:01:42.818519 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.244:26521] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaMDVrTHSOG_yf2PpqHz8gAAAcU"]
[Sat Feb 28 23:01:48.647024 2026] [:error] [pid 52460:tid 52478] [client 45.86.200.225:44383] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaMDXLLWOogAgHGh62TUIgAAAY8"]
[Sat Feb 28 23:01:50.742779 2026] [:error] [pid 52460:tid 52487] [client 45.86.200.222:46749] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaMDXrLWOogAgHGh62TUJgAAAZg"]
[Sat Feb 28 23:02:14.521735 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.243:57343] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaMDdhCf4HvhVePw3La-fgAAAAw"]
[Sat Feb 28 23:02:15.253637 2026] [:error] [pid 39183:tid 39214] [client 45.86.200.230:40879] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaMDdxCf4HvhVePw3La-ggAAABY"]
[Sat Feb 28 23:02:15.856647 2026] [:error] [pid 39183:tid 39210] [client 185.82.72.104:45975] [client 185.82.72.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaMDdxCf4HvhVePw3La-iAAAABI"]
[Sat Feb 28 23:02:18.621270 2026] [:error] [pid 39183:tid 39211] [client 185.82.72.104:45975] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaMDehCf4HvhVePw3La-nwAAABM"]
[Sat Feb 28 23:02:22.223105 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.241:27605] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaMDfrTHSOG_yf2PpqH0hgAAAdA"]
[Sat Feb 28 23:02:23.833212 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.229:26997] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaMDfxCf4HvhVePw3La-0wAAAAg"]
[Sat Feb 28 23:02:30.012647 2026] [:error] [pid 52460:tid 52464] [client 185.82.72.103:55243] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaMDhrLWOogAgHGh62TUpQAAAYE"]
[Sat Feb 28 23:02:30.654463 2026] [:error] [pid 39292:tid 39301] [client 45.86.200.247:21397] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aaMDhqIAO5fN7BxyqcGhhAAAAMc"]
[Sat Feb 28 23:02:39.489954 2026] [:error] [pid 52460:tid 52482] [client 45.86.200.241:57853] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaMDj7LWOogAgHGh62TU_AAAAZM"]
[Sat Feb 28 23:02:42.868031 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 45.86.200.244:35407] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:02:44.589982 2026] [:error] [pid 39292:tid 39300] [client 45.86.200.244:35407] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "aaMDlKIAO5fN7BxyqcGhlQAAAMY"]
[Sat Feb 28 23:02:45.183944 2026] [:error] [pid 49763:tid 49773] [client 45.86.200.217:63993] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaMDlbTHSOG_yf2PpqH0vAAAAcc"]
[Sat Feb 28 23:02:48.882546 2026] [:error] [pid 11791:tid 11805] [client 185.82.72.107:31557] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaMDmGuX5e1Q32gqxH3iSwAAAQw"]
[Sat Feb 28 23:02:49.450044 2026] [:error] [pid 39184:tid 39233] [client 45.86.200.217:56353] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaMDmVtZF9Zd_U7easD1pgAAAE4"]
[Sat Feb 28 23:03:00.546107 2026] [:error] [pid 22194:tid 22214] [client 45.86.200.246:60661] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaMDpH6mbajs3bzQGyu6hwAAAVI"]
[Sat Feb 28 23:03:02.311319 2026] [:error] [pid 39185:tid 39260] [client 45.86.200.229:39867] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaMDphVE-FfM89u7BQa4XwAAAI4"]
[Sat Feb 28 23:03:08.904007 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.229:47017] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aaMDrLTHSOG_yf2PpqH0_gAAAcw"]
[Sat Feb 28 23:03:09.478759 2026] [:error] [pid 39184:tid 39237] [client 45.86.200.222:44513] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaMDrVtZF9Zd_U7easD1wwAAAFI"]
[Sat Feb 28 23:03:10.447439 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.234:53817] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaMDrhCf4HvhVePw3LbAVwAAAAw"]
[Sat Feb 28 23:03:17.420088 2026] [:error] [pid 39292:tid 39295] [client 45.86.200.215:29383] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaMDtaIAO5fN7BxyqcGhxQAAAME"]
[Sat Feb 28 23:03:19.866301 2026] [:error] [pid 39183:tid 39195] [client 45.86.200.241:30243] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaMDtxCf4HvhVePw3LbAewAAAAM"]
[Sat Feb 28 23:03:28.669436 2026] [:error] [pid 49763:tid 49770] [client 45.86.200.232:37389] [client 45.86.200.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.232, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "aaMDwLTHSOG_yf2PpqH1RQAAAcQ"]
[Sat Feb 28 23:03:36.141361 2026] [:error] [pid 49763:tid 49772] [client 45.86.200.232:37389] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaMDyLTHSOG_yf2PpqH1SwAAAcY"]
[Sat Feb 28 23:03:36.834101 2026] [:error] [pid 11791:tid 11811] [client 45.86.200.225:54115] [client 45.86.200.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.225, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaMDyGuX5e1Q32gqxH3ihwAAARI"]
[Sat Feb 28 23:03:53.618573 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 45.86.200.225:54115] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:04:13.581892 2026] [:error] [pid 11791:tid 11797] [client 45.86.200.225:54115] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaMD7WuX5e1Q32gqxH3ivwAAAQQ"]
[Sat Feb 28 23:04:18.495607 2026] [:error] [pid 39183:tid 39215] [client 185.82.72.179:52599] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaMD8hCf4HvhVePw3LbB0wAAABc"]
[Sat Feb 28 23:04:21.892688 2026] [:error] [pid 39184:tid 39221] [client 45.86.200.236:26651] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaMD9VtZF9Zd_U7easD2NAAAAEI"]
[Sat Feb 28 23:04:35.088001 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.213:52771] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaMEAxCf4HvhVePw3LbCKAAAAAw"]
[Sat Feb 28 23:04:38.601841 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.240:20121] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaMEBrTHSOG_yf2PpqH12wAAAcA"]
[Sat Feb 28 23:04:41.304569 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.239:52297] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaMECRCf4HvhVePw3LbCQwAAAAc"]
[Sat Feb 28 23:04:47.699031 2026] [proxy_fcgi:error] [pid 39183:tid 39196] [client 185.82.72.179:41481] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:04:47.998222 2026] [proxy_fcgi:error] [pid 39183:tid 39206] [client 185.82.72.179:41481] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:04:48.315031 2026] [:error] [pid 39183:tid 39193] [client 185.82.72.179:41481] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaMEEBCf4HvhVePw3LbCfAAAAAE"]
[Sat Feb 28 23:04:48.901320 2026] [:error] [pid 39185:tid 39270] [client 45.86.200.216:29457] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaMEEBVE-FfM89u7BQa4uwAAAJg"]
[Sat Feb 28 23:04:59.849465 2026] [:error] [pid 49763:tid 49783] [client 185.82.72.182:23089] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaMEG7THSOG_yf2PpqH2BwAAAdE"]
[Sat Feb 28 23:05:02.069718 2026] [:error] [pid 39292:tid 39301] [client 45.86.200.221:62867] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aaMEHqIAO5fN7BxyqcGiJQAAAMc"]
[Sat Feb 28 23:05:07.494067 2026] [:error] [pid 11791:tid 11816] [client 185.82.72.104:55473] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaMEI2uX5e1Q32gqxH3jFQAAARc"]
[Sat Feb 28 23:05:18.412004 2026] [:error] [pid 52460:tid 52481] [client 45.86.200.221:35715] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaMELrLWOogAgHGh62TW-QAAAZI"]
[Sat Feb 28 23:05:19.082711 2026] [proxy_fcgi:error] [pid 22194:tid 22206] [client 45.86.200.243:38023] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:05:22.664463 2026] [:error] [pid 22194:tid 22213] [client 45.86.200.243:38023] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaMEMn6mbajs3bzQGyu6yAAAAVE"]
[Sat Feb 28 23:05:29.906614 2026] [proxy_fcgi:error] [pid 39183:tid 39207] [client 45.86.200.234:45747] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:05:31.630534 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.234:45747] [client 45.86.200.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.234, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaMEOxCf4HvhVePw3LbDqgAAABA"]
[Sat Feb 28 23:05:38.306620 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.234:45747] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaMEQhCf4HvhVePw3LbDygAAABQ"]
[Sat Feb 28 23:05:40.362879 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.215:60051] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaMERLTHSOG_yf2PpqH2xgAAAco"]
[Sat Feb 28 23:05:46.168249 2026] [:error] [pid 52460:tid 52478] [client 45.86.200.235:55695] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaMESrLWOogAgHGh62TXHgAAAY8"]
[Sat Feb 28 23:05:52.073887 2026] [:error] [pid 49763:tid 49786] [client 185.82.72.10:27229] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaMEULTHSOG_yf2PpqH2-gAAAdQ"]
[Sat Feb 28 23:05:54.425731 2026] [:error] [pid 39183:tid 39193] [client 185.82.72.102:58189] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaMEUhCf4HvhVePw3LbEEgAAAAE"]
[Sat Feb 28 23:05:59.402150 2026] [:error] [pid 39292:tid 39315] [client 45.86.200.236:29933] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaMEV6IAO5fN7BxyqcGiQwAAANU"]
[Sat Feb 28 23:06:04.348966 2026] [proxy_fcgi:error] [pid 49763:tid 49790] [client 45.86.200.235:21235] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:06:04.784267 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.235:21235] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaMEXLTHSOG_yf2PpqH3MwAAAc0"]
[Sat Feb 28 23:06:05.441325 2026] [proxy_fcgi:error] [pid 52460:tid 52463] [client 185.82.72.103:57865] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Sat Feb 28 23:06:06.031931 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.234:45487] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "aaMEXrTHSOG_yf2PpqH3OAAAAcw"]
[Sat Feb 28 23:06:06.966102 2026] [:error] [pid 39292:tid 39317] [client 45.86.200.229:41855] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaMEXqIAO5fN7BxyqcGiTgAAANc"]
[Sat Feb 28 23:06:07.668365 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.235:23165] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaMEXxCf4HvhVePw3LbEHQAAAAI"]
[Sat Feb 28 23:06:08.461269 2026] [:error] [pid 39184:tid 39222] [client 45.86.200.214:61945] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaMEYFtZF9Zd_U7easD2ogAAAEM"]
[Sat Feb 28 23:06:09.210987 2026] [:error] [pid 39292:tid 39315] [client 45.86.200.225:34213] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaMEYaIAO5fN7BxyqcGiUwAAANU"]
[Sat Feb 28 23:06:09.871463 2026] [:error] [pid 52460:tid 52481] [client 45.86.200.226:30345] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaMEYbLWOogAgHGh62TXWAAAAZI"]
[Sat Feb 28 23:06:13.486335 2026] [:error] [pid 11791:tid 11816] [client 45.86.200.222:56265] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaMEZWuX5e1Q32gqxH3jMwAAARc"]
[Sat Feb 28 23:06:14.150625 2026] [:error] [pid 39183:tid 39195] [client 185.82.72.182:43555] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaMEZhCf4HvhVePw3LbEJwAAAAM"]
[Sat Feb 28 23:06:14.784922 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.225:33505] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaMEZrTHSOG_yf2PpqH3VQAAAcU"]
[Sat Feb 28 23:06:17.326749 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.222:31381] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaMEaRCf4HvhVePw3LbEOgAAAAk"]
[Sat Feb 28 23:06:20.828295 2026] [:error] [pid 39184:tid 39240] [client 45.86.200.216:42533] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaMEbFtZF9Zd_U7easD2qgAAAFU"]
[Sat Feb 28 23:06:21.565476 2026] [proxy_fcgi:error] [pid 49763:tid 49767] [client 45.86.200.218:52803] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:06:26.306779 2026] [:error] [pid 49763:tid 49775] [client 45.86.200.218:52803] [client 45.86.200.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.218, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaMEcrTHSOG_yf2PpqH3ggAAAck"]
[Sat Feb 28 23:06:34.394687 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.218:52803] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaMEerTHSOG_yf2PpqH3mAAAAdA"]
[Sat Feb 28 23:06:35.041846 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.222:30527] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaMEexCf4HvhVePw3LbEZwAAAAI"]
[Sat Feb 28 23:06:57.307175 2026] [:error] [pid 39183:tid 39205] [client 185.82.72.206:20047] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaMEkRCf4HvhVePw3LbEsAAAAA0"]
[Sat Feb 28 23:06:57.955000 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.214:64805] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaMEkRCf4HvhVePw3LbEtQAAAAk"]
[Sat Feb 28 23:06:58.595301 2026] [:error] [pid 52460:tid 52473] [client 185.82.72.9:25945] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaMEkrLWOogAgHGh62TXmgAAAYo"]
[Sat Feb 28 23:07:07.019630 2026] [:error] [pid 49763:tid 49773] [client 45.86.200.221:49613] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaMEm7THSOG_yf2PpqH4FAAAAcc"]
[Sat Feb 28 23:07:07.710471 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.238:54499] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaMEmxCf4HvhVePw3LbEzgAAAA4"]
[Sat Feb 28 23:07:08.472912 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.244:40153] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaMEnBCf4HvhVePw3LbE0wAAAAc"]
[Sat Feb 28 23:07:14.611666 2026] [:error] [pid 39183:tid 39193] [client 185.82.72.107:41845] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaMEohCf4HvhVePw3LbE8gAAAAE"]
[Sat Feb 28 23:07:16.929033 2026] [:error] [pid 39183:tid 39195] [client 185.82.72.111:31017] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaMEpBCf4HvhVePw3LbFCAAAAAM"]
[Sat Feb 28 23:07:20.744606 2026] [:error] [pid 39184:tid 39221] [client 45.86.200.242:45641] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaMEqFtZF9Zd_U7easD29AAAAEI"]
[Sat Feb 28 23:07:37.411252 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.243:31029] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaMEuRCf4HvhVePw3LbFdAAAAAk"]
[Sat Feb 28 23:07:40.859326 2026] [:error] [pid 39292:tid 39315] [client 45.86.200.225:58115] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "aaMEvKIAO5fN7BxyqcGiogAAANU"]
[Sat Feb 28 23:07:49.799334 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.228:22935] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaMExbLWOogAgHGh62TYAQAAAZQ"]
[Sat Feb 28 23:07:53.294097 2026] [:error] [pid 49763:tid 49777] [client 45.86.200.240:56809] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaMEybTHSOG_yf2PpqH4xAAAAcs"]
[Sat Feb 28 23:07:59.887707 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.225:21809] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaMEzxCf4HvhVePw3LbF6QAAABQ"]
[Sat Feb 28 23:08:07.847123 2026] [:error] [pid 39183:tid 39210] [client 45.86.200.220:35919] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaME1xCf4HvhVePw3LbGDwAAABI"]
[Sat Feb 28 23:08:11.143761 2026] [:error] [pid 39185:tid 39268] [client 185.82.72.109:35589] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaME2xVE-FfM89u7BQa5GAAAAJY"]
[Sat Feb 28 23:08:11.765428 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.220:49607] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaME2xCf4HvhVePw3LbGFQAAAAk"]
[Sat Feb 28 23:08:19.659608 2026] [:error] [pid 22194:tid 22219] [client 45.86.200.224:22739] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaME436mbajs3bzQGyu7GwAAAVc"]
[Sat Feb 28 23:08:26.996608 2026] [:error] [pid 39184:tid 39223] [client 45.86.200.243:42609] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaME6ltZF9Zd_U7easD3owAAAEQ"]
[Sat Feb 28 23:08:33.602815 2026] [:error] [pid 39292:tid 39317] [client 45.86.200.248:48949] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaME8aIAO5fN7BxyqcGjHwAAANc"]
[Sat Feb 28 23:08:35.376479 2026] [:error] [pid 39184:tid 39223] [client 45.86.200.222:60875] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaME81tZF9Zd_U7easD3tgAAAEQ"]
[Sat Feb 28 23:08:39.467852 2026] [:error] [pid 39185:tid 39250] [client 45.86.200.226:37223] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaME9xVE-FfM89u7BQa5UgAAAIQ"]
[Sat Feb 28 23:08:44.500593 2026] [:error] [pid 39292:tid 39305] [client 45.86.200.251:56857] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaME_KIAO5fN7BxyqcGjRAAAAMs"]
[Sat Feb 28 23:08:45.249861 2026] [:error] [pid 39183:tid 39214] [client 45.86.200.227:28857] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaME_RCf4HvhVePw3LbGqwAAABY"]
[Sat Feb 28 23:08:54.416354 2026] [:error] [pid 39184:tid 39225] [client 185.82.72.109:48519] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaMFBltZF9Zd_U7easD38gAAAEY"]
[Sat Feb 28 23:08:57.969185 2026] [:error] [pid 52460:tid 52467] [client 45.86.200.223:29015] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaMFCbLWOogAgHGh62TYyAAAAYQ"]
[Sat Feb 28 23:08:58.660129 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.234:54211] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaMFCrLWOogAgHGh62TYyQAAAYw"]
[Sat Feb 28 23:09:02.706197 2026] [:error] [pid 49763:tid 49774] [client 185.82.72.106:50727] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaMFDrTHSOG_yf2PpqH5pQAAAcg"]
[Sat Feb 28 23:09:05.043484 2026] [:error] [pid 39184:tid 39237] [client 45.86.200.226:20457] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaMFEVtZF9Zd_U7easD4SQAAAFI"]
[Sat Feb 28 23:09:12.915079 2026] [:error] [pid 39292:tid 39309] [client 185.82.72.106:60047] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaMFGKIAO5fN7BxyqcGjdQAAAM8"]
[Sat Feb 28 23:09:16.370588 2026] [:error] [pid 11791:tid 11812] [client 185.82.72.10:24713] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaMFHGuX5e1Q32gqxH3jvAAAARM"]
[Sat Feb 28 23:09:19.911508 2026] [:error] [pid 39183:tid 39197] [client 45.86.200.220:57437] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaMFHxCf4HvhVePw3LbH6AAAAAU"]
[Sat Feb 28 23:09:22.053747 2026] [:error] [pid 49763:tid 49771] [client 185.82.72.179:61275] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "aaMFIrTHSOG_yf2PpqH6FQAAAcU"]
[Sat Feb 28 23:09:24.725278 2026] [:error] [pid 49763:tid 49767] [client 185.82.72.104:38193] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaMFJLTHSOG_yf2PpqH6NAAAAcE"]
[Sat Feb 28 23:09:25.314849 2026] [:error] [pid 39184:tid 39239] [client 45.86.200.232:60975] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "aaMFJVtZF9Zd_U7easD4aAAAAFQ"]
[Sat Feb 28 23:09:25.981808 2026] [:error] [pid 39184:tid 39234] [client 45.86.200.214:55411] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaMFJVtZF9Zd_U7easD4bwAAAE8"]
[Sat Feb 28 23:09:35.291824 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.217:35817] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaMFL7THSOG_yf2PpqH6hwAAAcI"]
[Sat Feb 28 23:09:40.356881 2026] [:error] [pid 52460:tid 52482] [client 45.86.200.218:44077] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaMFNLLWOogAgHGh62TZZwAAAZM"]
[Sat Feb 28 23:09:45.118161 2026] [:error] [pid 11791:tid 11808] [client 45.86.200.221:43401] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaMFOWuX5e1Q32gqxH3jyAAAAQ8"]
[Sat Feb 28 23:09:50.137752 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.216:55493] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaMFPhCf4HvhVePw3LbIhAAAAAI"]
[Sat Feb 28 23:09:58.494911 2026] [:error] [pid 39292:tid 39313] [client 45.86.200.249:60439] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaMFRqIAO5fN7BxyqcGjoQAAANM"]
[Sat Feb 28 23:10:00.834166 2026] [:error] [pid 39183:tid 39214] [client 45.86.200.245:43035] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaMFSBCf4HvhVePw3LbI4wAAABY"]
[Sat Feb 28 23:10:03.039234 2026] [:error] [pid 39183:tid 39203] [client 45.86.200.222:24481] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaMFSxCf4HvhVePw3LbJBgAAAAs"]
[Sat Feb 28 23:10:07.731679 2026] [:error] [pid 11791:tid 11804] [client 45.86.200.251:33105] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaMFT2uX5e1Q32gqxH3j2gAAAQs"]
[Sat Feb 28 23:10:20.111310 2026] [:error] [pid 49763:tid 49780] [client 185.82.72.9:54717] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaMFXLTHSOG_yf2PpqH7YwAAAc4"]
[Sat Feb 28 23:10:20.829815 2026] [:error] [pid 52460:tid 52485] [client 45.86.200.233:35569] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaMFXLLWOogAgHGh62TZqQAAAZY"]
[Sat Feb 28 23:10:25.820453 2026] [:error] [pid 22194:tid 22203] [client 45.86.200.217:55643] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaMFYX6mbajs3bzQGyu7mAAAAUc"]
[Sat Feb 28 23:10:26.451793 2026] [:error] [pid 52460:tid 52463] [client 45.86.200.245:22471] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaMFYrLWOogAgHGh62TZxwAAAYA"]
[Sat Feb 28 23:10:29.844405 2026] [:error] [pid 39184:tid 39241] [client 45.86.200.233:45685] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaMFZVtZF9Zd_U7easD4zAAAAFY"]
[Sat Feb 28 23:10:30.500926 2026] [:error] [pid 39184:tid 39242] [client 185.82.72.10:57097] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aaMFZltZF9Zd_U7easD4zwAAAFc"]
[Sat Feb 28 23:10:31.199498 2026] [:error] [pid 49763:tid 49777] [client 45.86.200.226:25969] [client 45.86.200.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.226, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaMFZ7THSOG_yf2PpqH7kgAAAcs"]
[Sat Feb 28 23:10:31.203518 2026] [proxy_fcgi:error] [pid 49763:tid 49777] [client 45.86.200.226:25969] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:10:31.513643 2026] [:error] [pid 49763:tid 49789] [client 45.86.200.226:25969] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaMFZ7THSOG_yf2PpqH7kwAAAdc"]
[Sat Feb 28 23:10:35.951065 2026] [:error] [pid 39184:tid 39235] [client 185.82.72.102:42403] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaMFa1tZF9Zd_U7easD46gAAAFA"]
[Sat Feb 28 23:10:36.547696 2026] [:error] [pid 39292:tid 39298] [client 185.82.72.111:55197] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "aaMFbKIAO5fN7BxyqcGjtwAAAMQ"]
[Sat Feb 28 23:10:46.477955 2026] [:error] [pid 39185:tid 39249] [client 185.82.72.179:57873] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaMFdhVE-FfM89u7BQa5ugAAAIM"]
[Sat Feb 28 23:10:47.124426 2026] [:error] [pid 49763:tid 49767] [client 45.86.200.244:30225] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaMFd7THSOG_yf2PpqH7xAAAAcE"]
[Sat Feb 28 23:10:51.864807 2026] [:error] [pid 39183:tid 39203] [client 45.86.200.249:64925] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaMFexCf4HvhVePw3LbKQwAAAAs"]
[Sat Feb 28 23:10:52.735124 2026] [:error] [pid 39183:tid 39200] [client 185.82.72.102:33423] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aaMFfBCf4HvhVePw3LbKSAAAAAg"]
[Sat Feb 28 23:10:54.609408 2026] [proxy_fcgi:error] [pid 11791:tid 11813] [client 45.86.200.234:31835] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:10:55.081876 2026] [:error] [pid 11791:tid 11811] [client 45.86.200.234:31835] [client 45.86.200.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.234, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaMFf2uX5e1Q32gqxH3kAwAAARI"]
[Sat Feb 28 23:10:58.119967 2026] [:error] [pid 11791:tid 11797] [client 45.86.200.234:31835] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaMFgmuX5e1Q32gqxH3kBQAAAQQ"]
[Sat Feb 28 23:11:05.063097 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.247:38971] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaMFiRCf4HvhVePw3LbKtwAAAAk"]
[Sat Feb 28 23:11:08.033645 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.251:51681] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaMFjBCf4HvhVePw3LbKxQAAABM"]
[Sat Feb 28 23:11:08.647433 2026] [:error] [pid 39183:tid 39202] [client 185.82.72.9:58415] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaMFjBCf4HvhVePw3LbKyAAAAAo"]
[Sat Feb 28 23:11:14.023676 2026] [:error] [pid 49763:tid 49778] [client 45.86.200.248:42271] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaMFkrTHSOG_yf2PpqH8CwAAAcw"]
[Sat Feb 28 23:11:17.441570 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.248:22351] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaMFlRCf4HvhVePw3LbK-AAAAA8"]
[Sat Feb 28 23:11:23.909826 2026] [:error] [pid 39292:tid 39318] [client 185.82.72.106:47069] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaMFm6IAO5fN7BxyqcGj8wAAANg"]
[Sat Feb 28 23:11:24.815459 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.236:36203] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "aaMFnLTHSOG_yf2PpqH8MQAAAc0"]
[Sat Feb 28 23:11:27.142887 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.244:34497] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "aaMFn7LWOogAgHGh62TahgAAAZQ"]
[Sat Feb 28 23:11:37.572309 2026] [:error] [pid 52460:tid 52467] [client 45.86.200.241:63957] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaMFqbLWOogAgHGh62TaowAAAYQ"]
[Sat Feb 28 23:11:41.159658 2026] [:error] [pid 39183:tid 39195] [client 185.82.72.109:39771] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "aaMFrRCf4HvhVePw3LbLcwAAAAM"]
[Sat Feb 28 23:11:41.493325 2026] [:error] [pid 39183:tid 39197] [client 185.82.72.109:39771] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaMFrRCf4HvhVePw3LbLdgAAAAU"]
[Sat Feb 28 23:11:45.264456 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.229:62977] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaMFsRCf4HvhVePw3LbLkwAAAAc"]
[Sat Feb 28 23:11:45.896065 2026] [:error] [pid 39183:tid 39216] [client 45.86.200.248:49641] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaMFsRCf4HvhVePw3LbLlwAAABg"]
[Sat Feb 28 23:11:55.396851 2026] [:error] [pid 49763:tid 49774] [client 185.82.72.10:26597] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaMFu7THSOG_yf2PpqH8gAAAAcg"]
[Sat Feb 28 23:11:59.100441 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.230:62043] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaMFv7LWOogAgHGh62Ta2gAAAY4"]
[Sat Feb 28 23:12:01.316644 2026] [:error] [pid 39184:tid 39234] [client 45.86.200.225:61171] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaMFwVtZF9Zd_U7easD5TAAAAE8"]
[Sat Feb 28 23:12:10.628615 2026] [:error] [pid 22194:tid 22201] [client 45.86.200.249:61225] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaMFyn6mbajs3bzQGyu7xAAAAUU"]
[Sat Feb 28 23:12:13.156694 2026] [:error] [pid 39183:tid 39199] [client 185.82.72.103:64095] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "aaMFzRCf4HvhVePw3LbMLQAAAAc"]
[Sat Feb 28 23:12:15.810817 2026] [:error] [pid 52460:tid 52463] [client 185.82.72.179:42089] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaMFz7LWOogAgHGh62TbOAAAAYA"]
[Sat Feb 28 23:12:16.501851 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.233:38961] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaMF0LLWOogAgHGh62TbPwAAAZc"]
[Sat Feb 28 23:12:20.316786 2026] [:error] [pid 39183:tid 39193] [client 45.86.200.250:31619] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaMF1BCf4HvhVePw3LbMlQAAAAE"]
[Sat Feb 28 23:12:26.897950 2026] [:error] [pid 49763:tid 49772] [client 45.86.200.213:21029] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaMF2rTHSOG_yf2PpqH8wQAAAcY"]
[Sat Feb 28 23:12:27.510807 2026] [:error] [pid 39183:tid 39197] [client 45.86.200.251:62345] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaMF2xCf4HvhVePw3LbMvAAAAAU"]
[Sat Feb 28 23:12:35.888703 2026] [:error] [pid 11791:tid 11805] [client 45.86.200.220:31775] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaMF42uX5e1Q32gqxH3kNgAAAQw"]
[Sat Feb 28 23:12:39.668607 2026] [:error] [pid 39183:tid 39205] [client 185.82.72.179:30201] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaMF5xCf4HvhVePw3LbM9wAAAA0"]
[Sat Feb 28 23:12:44.464921 2026] [:error] [pid 39184:tid 39230] [client 185.82.72.179:45329] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaMF7FtZF9Zd_U7easD5qwAAAEs"]
[Sat Feb 28 23:12:45.173360 2026] [:error] [pid 39183:tid 39197] [client 45.86.200.233:60005] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaMF7RCf4HvhVePw3LbNDAAAAAU"]
[Sat Feb 28 23:12:47.306775 2026] [:error] [pid 39183:tid 39214] [client 45.86.200.238:65081] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaMF7xCf4HvhVePw3LbNIQAAABY"]
[Sat Feb 28 23:12:51.499438 2026] [:error] [pid 39184:tid 39220] [client 45.86.200.239:27583] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaMF81tZF9Zd_U7easD5tgAAAEE"]
[Sat Feb 28 23:12:55.083277 2026] [:error] [pid 52460:tid 52472] [client 45.86.200.213:31163] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaMF97LWOogAgHGh62Tb1QAAAYk"]
[Sat Feb 28 23:12:55.734607 2026] [:error] [pid 39183:tid 39209] [client 45.86.200.242:36803] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaMF9xCf4HvhVePw3LbNRgAAABE"]
[Sat Feb 28 23:12:58.026305 2026] [:error] [pid 49763:tid 49787] [client 45.86.200.216:31005] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaMF-rTHSOG_yf2PpqH9LgAAAdU"]
[Sat Feb 28 23:12:58.742303 2026] [:error] [pid 49763:tid 49769] [client 45.86.200.221:35727] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aaMF-rTHSOG_yf2PpqH9MQAAAcM"]
[Sat Feb 28 23:13:02.396324 2026] [:error] [pid 39184:tid 39237] [client 45.86.200.228:60983] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaMF_ltZF9Zd_U7easD5wQAAAFI"]
[Sat Feb 28 23:13:04.187737 2026] [:error] [pid 39184:tid 39243] [client 185.82.72.106:27953] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaMGAFtZF9Zd_U7easD5xQAAAFg"]
[Sat Feb 28 23:13:05.875234 2026] [:error] [pid 22194:tid 22219] [client 185.82.72.107:47769] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaMGAX6mbajs3bzQGyu77QAAAVc"]
[Sat Feb 28 23:13:06.435456 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.239:59905] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaMGAhCf4HvhVePw3LbNYAAAAA4"]
[Sat Feb 28 23:13:06.505838 2026] [:error] [pid 39183:tid 39211] [client 185.82.72.182:29067] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaMGAhCf4HvhVePw3LbNYQAAABM"]
[Sat Feb 28 23:13:11.880513 2026] [:error] [pid 49763:tid 49775] [client 45.86.200.244:39085] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaMGB7THSOG_yf2PpqH9YQAAAck"]
[Sat Feb 28 23:13:13.542302 2026] [:error] [pid 49763:tid 49788] [client 45.86.200.237:22349] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaMGCbTHSOG_yf2PpqH9YgAAAdY"]
[Sat Feb 28 23:13:17.377360 2026] [:error] [pid 49763:tid 49787] [client 45.86.200.217:56699] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaMGDbTHSOG_yf2PpqH9dwAAAdU"]
[Sat Feb 28 23:13:19.804704 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.215:31579] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaMGDxCf4HvhVePw3LbNpAAAAAw"]
[Sat Feb 28 23:13:20.553128 2026] [proxy_fcgi:error] [pid 49763:tid 49790] [client 45.86.200.213:51799] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Sat Feb 28 23:13:21.295030 2026] [:error] [pid 52460:tid 52472] [client 45.86.200.244:23337] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaMGEbLWOogAgHGh62TcHgAAAYk"]
[Sat Feb 28 23:13:22.256448 2026] [:error] [pid 49763:tid 49773] [client 45.86.200.234:28609] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaMGErTHSOG_yf2PpqH9iQAAAcc"]
[Sat Feb 28 23:13:27.191514 2026] [:error] [pid 11791:tid 11813] [client 45.86.200.241:62831] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaMGF2uX5e1Q32gqxH3kbQAAARQ"]
[Sat Feb 28 23:13:31.579012 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.239:49395] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaMGGxCf4HvhVePw3LbN5gAAABc"]
[Sat Feb 28 23:13:32.347592 2026] [:error] [pid 39183:tid 39209] [client 185.82.72.182:41223] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaMGHBCf4HvhVePw3LbN6QAAABE"]
[Sat Feb 28 23:13:36.114104 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.244:51955] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaMGIBCf4HvhVePw3LbOAAAAABM"]
[Sat Feb 28 23:13:36.552902 2026] [:error] [pid 52460:tid 52471] [client 45.86.200.224:26805] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaMGILLWOogAgHGh62TcSwAAAYg"]
[Sat Feb 28 23:13:38.859350 2026] [:error] [pid 39184:tid 39227] [client 45.86.200.238:30827] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaMGIltZF9Zd_U7easD57QAAAEg"]
[Sat Feb 28 23:13:40.163875 2026] [:error] [pid 39183:tid 39203] [client 185.82.72.179:56411] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaMGJBCf4HvhVePw3LbOCgAAAAs"]
[Sat Feb 28 23:13:40.861504 2026] [:error] [pid 39183:tid 39197] [client 45.86.200.223:29897] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaMGJBCf4HvhVePw3LbODAAAAAU"]
[Sat Feb 28 23:13:41.556111 2026] [:error] [pid 49763:tid 49786] [client 45.86.200.238:23769] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaMGJbTHSOG_yf2PpqH9zQAAAdQ"]
[Sat Feb 28 23:13:42.190187 2026] [:error] [pid 39184:tid 39232] [client 185.82.72.111:24943] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaMGJltZF9Zd_U7easD59AAAAE0"]
[Sat Feb 28 23:13:42.304825 2026] [:error] [pid 52460:tid 52475] [client 185.82.72.108:31189] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaMGJrLWOogAgHGh62TcVQAAAYw"]
[Sat Feb 28 23:13:44.130217 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.247:55901] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaMGKLTHSOG_yf2PpqH92wAAAdI"]
[Sat Feb 28 23:13:45.665780 2026] [:error] [pid 49763:tid 49783] [client 45.86.200.223:36147] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaMGKbTHSOG_yf2PpqH93QAAAdE"]
[Sat Feb 28 23:13:46.977446 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.238:41309] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aaMGKhCf4HvhVePw3LbOLAAAABQ"]
[Sat Feb 28 23:13:49.043857 2026] [:error] [pid 39183:tid 39213] [client 45.86.200.213:34385] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaMGLRCf4HvhVePw3LbOQAAAABU"]
[Sat Feb 28 23:13:51.154558 2026] [:error] [pid 39183:tid 39195] [client 45.86.200.229:59257] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaMGLxCf4HvhVePw3LbOWQAAAAM"]
[Sat Feb 28 23:13:51.663082 2026] [:error] [pid 39184:tid 39225] [client 185.82.72.106:50439] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaMGL1tZF9Zd_U7easD6AwAAAEY"]
[Sat Feb 28 23:13:53.024142 2026] [:error] [pid 11791:tid 11794] [client 185.82.72.182:41703] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaMGMWuX5e1Q32gqxH3khwAAAQE"]
[Sat Feb 28 23:13:54.309662 2026] [:error] [pid 39183:tid 39209] [client 185.82.72.103:55409] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaMGMhCf4HvhVePw3LbOgAAAABE"]
[Sat Feb 28 23:13:55.622149 2026] [:error] [pid 39185:tid 39268] [client 45.86.200.214:57447] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaMGMxVE-FfM89u7BQa6gwAAAJY"]
[Sat Feb 28 23:14:01.241237 2026] [:error] [pid 49763:tid 49777] [client 45.86.200.239:31303] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaMGObTHSOG_yf2PpqH99wAAAcs"]
[Sat Feb 28 23:14:04.401647 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.225:38595] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaMGPLLWOogAgHGh62TcdwAAAYw"]
[Sat Feb 28 23:14:06.445760 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.226:20715] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaMGPhCf4HvhVePw3LbOwQAAAAw"]
[Sat Feb 28 23:14:07.074828 2026] [proxy_fcgi:error] [pid 49763:tid 49786] [client 45.86.200.234:30791] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:14:07.518292 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.234:30791] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaMGP7THSOG_yf2PpqH-CQAAAdI"]
[Sat Feb 28 23:14:07.519545 2026] [:error] [pid 52460:tid 52485] [client 45.86.200.227:37099] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaMGP7LWOogAgHGh62TchQAAAZY"]
[Sat Feb 28 23:14:08.216027 2026] [:error] [pid 39183:tid 39209] [client 45.86.200.244:37619] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaMGQBCf4HvhVePw3LbOxQAAABE"]
[Sat Feb 28 23:14:11.026316 2026] [:error] [pid 52460:tid 52473] [client 185.82.72.106:38531] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaMGQ7LWOogAgHGh62TcjQAAAYo"]
[Sat Feb 28 23:14:12.027038 2026] [:error] [pid 39184:tid 39222] [client 45.86.200.229:23951] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaMGRFtZF9Zd_U7easD6JwAAAEM"]
[Sat Feb 28 23:14:12.693261 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.218:27573] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaMGRBCf4HvhVePw3LbO0wAAAA4"]
[Sat Feb 28 23:14:14.506110 2026] [:error] [pid 39183:tid 39192] [client 185.82.72.109:64617] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaMGRhCf4HvhVePw3LbO4AAAAAA"]
[Sat Feb 28 23:14:20.619280 2026] [:error] [pid 39292:tid 39299] [client 45.86.200.235:32245] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaMGTKIAO5fN7BxyqcGkrAAAAMU"]
[Sat Feb 28 23:14:22.957486 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.238:22943] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaMGThCf4HvhVePw3LbPAAAAAAg"]
[Sat Feb 28 23:14:24.142275 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.219:64261] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaMGUBCf4HvhVePw3LbPBQAAABA"]
[Sat Feb 28 23:14:24.848150 2026] [:error] [pid 39183:tid 39200] [client 185.82.72.104:47857] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaMGUBCf4HvhVePw3LbPDQAAAAg"]
[Sat Feb 28 23:14:25.327996 2026] [:error] [pid 39184:tid 39222] [client 45.86.200.250:29089] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaMGUVtZF9Zd_U7easD6NgAAAEM"]
[Sat Feb 28 23:14:25.904784 2026] [:error] [pid 39184:tid 39231] [client 45.86.200.236:46439] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaMGUVtZF9Zd_U7easD6OQAAAEw"]
[Sat Feb 28 23:14:26.506165 2026] [:error] [pid 22194:tid 22217] [client 185.82.72.182:48285] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaMGUn6mbajs3bzQGyu8HgAAAVU"]
[Sat Feb 28 23:14:26.994901 2026] [:error] [pid 39184:tid 39228] [client 45.86.200.250:27819] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/log.php"] [unique_id "aaMGUltZF9Zd_U7easD6PAAAAEk"]
[Sat Feb 28 23:14:29.112778 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.237:47165] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaMGVRCf4HvhVePw3LbPIwAAAAw"]
[Sat Feb 28 23:14:29.896555 2026] [:error] [pid 39183:tid 39197] [client 185.82.72.109:57921] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaMGVRCf4HvhVePw3LbPJQAAAAU"]
[Sat Feb 28 23:14:30.447112 2026] [:error] [pid 39183:tid 39192] [client 185.82.72.109:36029] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/aw.php"] [unique_id "aaMGVhCf4HvhVePw3LbPKQAAAAA"]
[Sat Feb 28 23:14:32.697003 2026] [:error] [pid 39185:tid 39269] [client 185.82.72.206:32831] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaMGWBVE-FfM89u7BQa6mgAAAJc"]
[Sat Feb 28 23:14:33.335091 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.220:39633] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaMGWbTHSOG_yf2PpqH-VgAAAcA"]
[Sat Feb 28 23:14:33.959713 2026] [:error] [pid 52460:tid 52478] [client 45.86.200.225:35783] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaMGWbLWOogAgHGh62TcxQAAAY8"]
[Sat Feb 28 23:14:36.754990 2026] [:error] [pid 39183:tid 39194] [client 185.82.72.104:33329] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaMGXBCf4HvhVePw3LbPUgAAAAI"]
[Sat Feb 28 23:14:37.427098 2026] [:error] [pid 39183:tid 39206] [client 185.82.72.182:49101] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/install.php"] [unique_id "aaMGXRCf4HvhVePw3LbPWQAAAA4"]
[Sat Feb 28 23:14:40.885891 2026] [:error] [pid 11791:tid 11801] [client 185.82.72.10:24045] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaMGYGuX5e1Q32gqxH3koQAAAQg"]
[Sat Feb 28 23:14:41.541479 2026] [:error] [pid 39292:tid 39299] [client 45.86.200.226:28355] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaMGYaIAO5fN7BxyqcGkvgAAAMU"]
[Sat Feb 28 23:14:45.487227 2026] [:error] [pid 49763:tid 49777] [client 45.86.200.233:34167] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aaMGZbTHSOG_yf2PpqH-dAAAAcs"]
[Sat Feb 28 23:14:46.325625 2026] [:error] [pid 52460:tid 52469] [client 45.86.200.233:20781] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/template-less.php"] [unique_id "aaMGZrLWOogAgHGh62Tc3wAAAYY"]
[Sat Feb 28 23:14:47.083086 2026] [:error] [pid 22194:tid 22211] [client 45.86.200.237:44465] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaMGZ36mbajs3bzQGyu8IwAAAU8"]
[Sat Feb 28 23:14:50.257232 2026] [:error] [pid 52460:tid 52464] [client 45.86.200.217:46247] [client 45.86.200.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.217, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaMGarLWOogAgHGh62Tc7wAAAYE"]
[Sat Feb 28 23:14:57.070724 2026] [:error] [pid 52460:tid 52481] [client 185.82.72.111:44991] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aaMGcbLWOogAgHGh62TdCAAAAZI"]
[Sat Feb 28 23:14:57.728239 2026] [:error] [pid 52460:tid 52474] [client 185.82.72.103:29057] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaMGcbLWOogAgHGh62TdDAAAAYs"]
[Sat Feb 28 23:15:01.703298 2026] [:error] [pid 39185:tid 39249] [client 45.86.200.221:41585] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "aaMGdRVE-FfM89u7BQa6owAAAIM"]
[Sat Feb 28 23:15:03.899296 2026] [:error] [pid 22194:tid 22200] [client 185.82.72.104:33909] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaMGd36mbajs3bzQGyu8MAAAAUQ"]
[Sat Feb 28 23:15:05.579020 2026] [:error] [pid 52460:tid 52480] [client 45.86.200.217:46247] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaMGebLWOogAgHGh62TdKAAAAZE"]
[Sat Feb 28 23:15:06.112811 2026] [:error] [pid 39184:tid 39225] [client 45.86.200.234:20241] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/load.php"] [unique_id "aaMGeltZF9Zd_U7easD6bgAAAEY"]
[Sat Feb 28 23:15:06.781744 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.247:35581] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaMGehCf4HvhVePw3LbP1gAAAAc"]
[Sat Feb 28 23:15:07.367418 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.243:24987] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaMGexCf4HvhVePw3LbP2wAAAAg"]
[Sat Feb 28 23:15:09.280058 2026] [:error] [pid 52460:tid 52475] [client 45.86.200.220:55631] [client 45.86.200.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.220, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaMGfbLWOogAgHGh62TdMQAAAYw"]
[Sat Feb 28 23:15:12.317797 2026] [:error] [pid 52460:tid 52472] [client 45.86.200.220:55631] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aaMGgLLWOogAgHGh62TdOwAAAYk"]
[Sat Feb 28 23:15:14.254213 2026] [:error] [pid 39184:tid 39220] [client 45.86.200.241:21247] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaMGgltZF9Zd_U7easD6fAAAAEE"]
[Sat Feb 28 23:15:16.974132 2026] [:error] [pid 52460:tid 52487] [client 45.86.200.228:51731] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaMGhLLWOogAgHGh62TdRwAAAZg"]
[Sat Feb 28 23:15:23.064662 2026] [:error] [pid 49763:tid 49773] [client 45.86.200.223:25989] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaMGi7THSOG_yf2PpqH-_AAAAcc"]
[Sat Feb 28 23:15:23.615944 2026] [:error] [pid 39183:tid 39216] [client 45.86.200.230:49675] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaMGixCf4HvhVePw3LbQPgAAABg"]
[Sat Feb 28 23:15:23.697817 2026] [:error] [pid 22194:tid 22198] [client 45.86.200.242:54507] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaMGi36mbajs3bzQGyu8OwAAAUI"]
[Sat Feb 28 23:15:25.761679 2026] [:error] [pid 11791:tid 11812] [client 45.86.200.231:64031] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaMGjWuX5e1Q32gqxH3kzgAAARM"]
[Sat Feb 28 23:15:35.240481 2026] [:error] [pid 39292:tid 39302] [client 45.86.200.234:46583] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaMGl6IAO5fN7BxyqcGk5AAAAMg"]
[Sat Feb 28 23:15:38.733273 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.231:29463] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaMGmrLWOogAgHGh62TdkgAAAZc"]
[Sat Feb 28 23:15:38.881959 2026] [:error] [pid 39184:tid 39236] [client 45.86.200.215:53943] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aaMGmltZF9Zd_U7easD6vgAAAFE"]
[Sat Feb 28 23:15:41.160612 2026] [:error] [pid 52460:tid 52478] [client 45.86.200.229:45425] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaMGnbLWOogAgHGh62TdngAAAY8"]
[Sat Feb 28 23:15:43.983807 2026] [:error] [pid 39184:tid 39241] [client 45.86.200.233:26699] [client 45.86.200.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.233, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaMGn1tZF9Zd_U7easD62QAAAFY"]
[Sat Feb 28 23:15:45.093932 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.250:42379] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaMGoRCf4HvhVePw3LbQvgAAAAw"]
[Sat Feb 28 23:15:45.495347 2026] [:error] [pid 39184:tid 39228] [client 45.86.200.233:26699] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaMGoVtZF9Zd_U7easD63AAAAEk"]
[Sat Feb 28 23:15:46.000059 2026] [:error] [pid 39183:tid 39202] [client 185.82.72.206:34697] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaMGoRCf4HvhVePw3LbQ1QAAAAo"]
[Sat Feb 28 23:15:46.611364 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.213:64183] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaMGohCf4HvhVePw3LbQ3QAAAA8"]
[Sat Feb 28 23:15:48.758308 2026] [autoindex:error] [pid 22194:tid 22216] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:49.077655 2026] [autoindex:error] [pid 22194:tid 22220] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:49.421203 2026] [autoindex:error] [pid 22194:tid 22196] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:49.867128 2026] [autoindex:error] [pid 22194:tid 22205] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:52.041084 2026] [autoindex:error] [pid 22194:tid 22200] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:52.450912 2026] [autoindex:error] [pid 22194:tid 22201] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:52.801698 2026] [autoindex:error] [pid 22194:tid 22210] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:53.175093 2026] [autoindex:error] [pid 22194:tid 22219] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:53.543697 2026] [autoindex:error] [pid 22194:tid 22199] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:53.840531 2026] [autoindex:error] [pid 22194:tid 22203] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:54.789033 2026] [autoindex:error] [pid 22194:tid 22202] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:56.420743 2026] [autoindex:error] [pid 22194:tid 22207] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:56.743763 2026] [autoindex:error] [pid 22194:tid 22198] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:15:59.907624 2026] [autoindex:error] [pid 22194:tid 22220] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:00.501617 2026] [autoindex:error] [pid 22194:tid 22196] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:00.846952 2026] [autoindex:error] [pid 22194:tid 22205] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:01.175752 2026] [autoindex:error] [pid 22194:tid 22218] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:02.959869 2026] [autoindex:error] [pid 22194:tid 22201] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:03.286995 2026] [autoindex:error] [pid 22194:tid 22210] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:04.968294 2026] [autoindex:error] [pid 22194:tid 22212] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:08.368889 2026] [autoindex:error] [pid 22194:tid 22202] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:08.711086 2026] [autoindex:error] [pid 22194:tid 22198] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:08.980628 2026] [:error] [pid 39292:tid 39306] [client 45.86.200.222:22793] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaMGuKIAO5fN7BxyqcGlOAAAAMw"]
[Sat Feb 28 23:16:09.042480 2026] [autoindex:error] [pid 22194:tid 22215] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:14.340910 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.226:47129] [client 45.86.200.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.226, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaMGvrTHSOG_yf2PpqH_dwAAAc4"]
[Sat Feb 28 23:16:18.005061 2026] [autoindex:error] [pid 22194:tid 22212] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:19.603529 2026] [:error] [pid 49763:tid 49773] [client 45.86.200.226:47129] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaMGw7THSOG_yf2PpqH_ggAAAcc"]
[Sat Feb 28 23:16:19.672202 2026] [autoindex:error] [pid 22194:tid 22206] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:19.995489 2026] [autoindex:error] [pid 22194:tid 22200] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:21.295501 2026] [autoindex:error] [pid 22194:tid 22204] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:22.023999 2026] [:error] [pid 39183:tid 39197] [client 45.86.200.222:36553] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aaMGxhCf4HvhVePw3LbRugAAAAU"]
[Sat Feb 28 23:16:22.867555 2026] [autoindex:error] [pid 22194:tid 22213] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:23.181301 2026] [autoindex:error] [pid 22194:tid 22214] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:25.472642 2026] [:error] [pid 39292:tid 39297] [client 185.82.72.10:33195] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaMGyaIAO5fN7BxyqcGlQwAAAMM"]
[Sat Feb 28 23:16:27.472978 2026] [autoindex:error] [pid 22194:tid 22206] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:29.914883 2026] [autoindex:error] [pid 22194:tid 22207] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:16:30.707635 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.214:61275] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaMGzhCf4HvhVePw3LbSIwAAAAQ"]
[Sat Feb 28 23:16:32.365588 2026] [:error] [pid 52460:tid 52485] [client 185.82.72.104:35399] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaMG0LLWOogAgHGh62TeYQAAAZY"]
[Sat Feb 28 23:16:40.729098 2026] [:error] [pid 49763:tid 49781] [client 185.82.72.10:64329] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaMG2LTHSOG_yf2PpqH_1gAAAc8"]
[Sat Feb 28 23:16:42.878736 2026] [:error] [pid 39183:tid 39204] [client 45.86.200.225:61317] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaMG2hCf4HvhVePw3LbSVQAAAAw"]
[Sat Feb 28 23:16:49.004132 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.218:58503] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aaMG4bTHSOG_yf2PpqEAIgAAAcI"]
[Sat Feb 28 23:16:53.709472 2026] [:error] [pid 49763:tid 49790] [client 45.86.200.221:27683] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaMG5bTHSOG_yf2PpqEASgAAAdg"]
[Sat Feb 28 23:16:57.152974 2026] [:error] [pid 49763:tid 49781] [client 185.82.72.182:63197] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aaMG6bTHSOG_yf2PpqEAXgAAAc8"]
[Sat Feb 28 23:17:02.679712 2026] [:error] [pid 52460:tid 52481] [client 45.86.200.247:31943] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaMG7rLWOogAgHGh62TelAAAAZI"]
[Sat Feb 28 23:17:04.312844 2026] [autoindex:error] [pid 22194:tid 22203] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:04.958232 2026] [autoindex:error] [pid 22194:tid 22217] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:05.264804 2026] [autoindex:error] [pid 22194:tid 22205] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:05.591511 2026] [autoindex:error] [pid 22194:tid 22219] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:05.917667 2026] [autoindex:error] [pid 22194:tid 22208] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:06.221627 2026] [autoindex:error] [pid 22194:tid 22211] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:06.541981 2026] [autoindex:error] [pid 22194:tid 22196] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:06.860973 2026] [autoindex:error] [pid 22194:tid 22209] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:08.435192 2026] [autoindex:error] [pid 22194:tid 22210] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:10.112373 2026] [autoindex:error] [pid 22194:tid 22218] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:10.414272 2026] [autoindex:error] [pid 22194:tid 22212] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:11.104778 2026] [autoindex:error] [pid 22194:tid 22202] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:12.637099 2026] [:error] [pid 52460:tid 52476] [client 45.86.200.249:36261] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaMG-LLWOogAgHGh62TetwAAAY0"]
[Sat Feb 28 23:17:13.073910 2026] [autoindex:error] [pid 22194:tid 22200] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:13.255168 2026] [:error] [pid 52460:tid 52470] [client 45.86.200.214:44081] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaMG-bLWOogAgHGh62TeugAAAYc"]
[Sat Feb 28 23:17:13.385025 2026] [autoindex:error] [pid 22194:tid 22198] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:13.711826 2026] [autoindex:error] [pid 22194:tid 22204] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:13.888705 2026] [:error] [pid 39292:tid 39314] [client 45.86.200.237:20989] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaMG-aIAO5fN7BxyqcGlnQAAANQ"]
[Sat Feb 28 23:17:14.039544 2026] [autoindex:error] [pid 22194:tid 22207] [client 45.86.200.214:33999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:14.520912 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.233:62705] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaMG-hCf4HvhVePw3LbThgAAABc"]
[Sat Feb 28 23:17:16.631122 2026] [:error] [pid 39183:tid 39207] [client 45.86.200.233:39687] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaMG_BCf4HvhVePw3LbTqAAAAA8"]
[Sat Feb 28 23:17:17.251872 2026] [:error] [pid 11791:tid 11812] [client 45.86.200.216:29895] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaMG_WuX5e1Q32gqxH3lUAAAARM"]
[Sat Feb 28 23:17:20.923727 2026] [:error] [pid 52460:tid 52480] [client 185.82.72.10:40953] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaMHALLWOogAgHGh62Te1AAAAZE"]
[Sat Feb 28 23:17:21.624050 2026] [:error] [pid 49763:tid 49784] [client 185.82.72.106:21915] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaMHAbTHSOG_yf2PpqEAkwAAAdI"]
[Sat Feb 28 23:17:22.402678 2026] [:error] [pid 52460:tid 52486] [client 45.86.200.219:35327] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaMHArLWOogAgHGh62Te1gAAAZc"]
[Sat Feb 28 23:17:23.142657 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.241:61659] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaMHAxCf4HvhVePw3LbT7gAAABQ"]
[Sat Feb 28 23:17:25.701746 2026] [:error] [pid 49763:tid 49773] [client 45.86.200.221:53743] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaMHBbTHSOG_yf2PpqEAqAAAAcc"]
[Sat Feb 28 23:17:29.226999 2026] [:error] [pid 49763:tid 49789] [client 45.86.200.234:20919] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaMHCbTHSOG_yf2PpqEAwwAAAdc"]
[Sat Feb 28 23:17:35.474163 2026] [:error] [pid 39183:tid 39201] [client 45.86.200.234:37441] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaMHDxCf4HvhVePw3LbUWAAAAAk"]
[Sat Feb 28 23:17:46.516536 2026] [:error] [pid 39184:tid 39238] [client 185.82.72.106:62251] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaMHGltZF9Zd_U7easD8TAAAAFM"]
[Sat Feb 28 23:17:50.525492 2026] [autoindex:error] [pid 39183:tid 39209] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:17:51.326841 2026] [:error] [pid 39184:tid 39221] [client 45.86.200.215:59577] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaMHH1tZF9Zd_U7easD8cwAAAEI"]
[Sat Feb 28 23:17:52.496350 2026] [:error] [pid 39183:tid 39216] [client 185.82.72.103:21917] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaMHIBCf4HvhVePw3LbUqgAAABg"]
[Sat Feb 28 23:17:59.277020 2026] [:error] [pid 39183:tid 39193] [client 185.82.72.109:31189] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaMHJxCf4HvhVePw3LbU7QAAAAE"]
[Sat Feb 28 23:18:04.471507 2026] [proxy_fcgi:error] [pid 39183:tid 39201] [client 45.86.200.239:34921] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:18:04.812449 2026] [proxy_fcgi:error] [pid 39183:tid 39199] [client 45.86.200.239:34921] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:18:05.133794 2026] [proxy_fcgi:error] [pid 39183:tid 39196] [client 45.86.200.239:34921] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:18:10.109913 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.239:34921] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaMHMhCf4HvhVePw3LbViQAAAAc"]
[Sat Feb 28 23:18:10.994575 2026] [:error] [pid 49763:tid 49784] [client 45.86.200.221:50325] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaMHMrTHSOG_yf2PpqEBbAAAAdI"]
[Sat Feb 28 23:18:11.392923 2026] [autoindex:error] [pid 39183:tid 39201] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:11.802339 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.231:61367] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaMHM7THSOG_yf2PpqEBdQAAAco"]
[Sat Feb 28 23:18:12.433128 2026] [:error] [pid 39183:tid 39198] [client 45.86.200.243:45935] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaMHNBCf4HvhVePw3LbVlwAAAAY"]
[Sat Feb 28 23:18:13.099308 2026] [:error] [pid 39183:tid 39212] [client 185.82.72.107:53089] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaMHNRCf4HvhVePw3LbVpAAAABQ"]
[Sat Feb 28 23:18:13.756551 2026] [:error] [pid 39183:tid 39214] [client 185.82.72.108:27901] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaMHNRCf4HvhVePw3LbVtwAAABY"]
[Sat Feb 28 23:18:15.635322 2026] [:error] [pid 49763:tid 49777] [client 45.86.200.234:50901] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaMHN7THSOG_yf2PpqEBlwAAAcs"]
[Sat Feb 28 23:18:16.263375 2026] [:error] [pid 39183:tid 39203] [client 185.82.72.107:37743] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaMHOBCf4HvhVePw3LbV_gAAAAs"]
[Sat Feb 28 23:18:16.938587 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.232:21487] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaMHOBCf4HvhVePw3LbWEQAAABc"]
[Sat Feb 28 23:18:17.513241 2026] [autoindex:error] [pid 39183:tid 39205] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:17.593322 2026] [:error] [pid 39184:tid 39228] [client 45.86.200.236:48285] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaMHOVtZF9Zd_U7easD8nAAAAEk"]
[Sat Feb 28 23:18:17.843336 2026] [autoindex:error] [pid 39183:tid 39194] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:21.997659 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.220:41967] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaMHPbTHSOG_yf2PpqEB0gAAAc0"]
[Sat Feb 28 23:18:24.201062 2026] [:error] [pid 49763:tid 49790] [client 45.86.200.235:35749] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaMHQLTHSOG_yf2PpqEB5AAAAdg"]
[Sat Feb 28 23:18:25.313335 2026] [autoindex:error] [pid 39183:tid 39198] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:25.634965 2026] [autoindex:error] [pid 39183:tid 39215] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:26.049408 2026] [autoindex:error] [pid 39183:tid 39208] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:26.493151 2026] [autoindex:error] [pid 39183:tid 39199] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:26.894588 2026] [autoindex:error] [pid 39183:tid 39216] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:27.306631 2026] [autoindex:error] [pid 39183:tid 39201] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:27.641880 2026] [autoindex:error] [pid 39183:tid 39213] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:27.876685 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.242:30373] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaMHQ7THSOG_yf2PpqECBwAAAc0"]
[Sat Feb 28 23:18:28.008729 2026] [autoindex:error] [pid 39183:tid 39198] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:28.384192 2026] [autoindex:error] [pid 39183:tid 39204] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:18:32.760352 2026] [:error] [pid 39183:tid 39209] [client 45.86.200.217:34427] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaMHSBCf4HvhVePw3LbWtAAAABE"]
[Sat Feb 28 23:18:37.741704 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.229:56365] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaMHTbTHSOG_yf2PpqECTAAAAcU"]
[Sat Feb 28 23:18:45.093021 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.243:43017] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaMHVbTHSOG_yf2PpqECiQAAAcg"]
[Sat Feb 28 23:18:47.779792 2026] [:error] [pid 39183:tid 39205] [client 45.86.200.236:38219] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaMHVxCf4HvhVePw3LbXgAAAAA0"]
[Sat Feb 28 23:18:55.203035 2026] [autoindex:error] [pid 39183:tid 39215] [client 185.82.72.107:36967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:19:09.055981 2026] [:error] [pid 39184:tid 39242] [client 45.86.200.229:36045] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaMHbVtZF9Zd_U7easD92AAAAFc"]
[Sat Feb 28 23:19:09.716456 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.214:56177] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaMHbbTHSOG_yf2PpqEDXwAAAco"]
[Sat Feb 28 23:19:10.471547 2026] [:error] [pid 39183:tid 39210] [client 45.86.200.233:32001] [client 45.86.200.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.233, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaMHbhCf4HvhVePw3LbYXQAAABI"]
[Sat Feb 28 23:19:13.148060 2026] [:error] [pid 39183:tid 39202] [client 45.86.200.233:32001] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaMHcRCf4HvhVePw3LbYlQAAAAo"]
[Sat Feb 28 23:19:17.013661 2026] [:error] [pid 49763:tid 49769] [client 185.82.72.206:58363] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaMHdbTHSOG_yf2PpqEDtQAAAcM"]
[Sat Feb 28 23:19:17.689925 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.219:25993] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaMHdbLWOogAgHGh62ThYwAAAY4"]
[Sat Feb 28 23:19:23.946803 2026] [:error] [pid 39184:tid 39236] [client 45.86.200.233:24371] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaMHe1tZF9Zd_U7easD-MwAAAFE"]
[Sat Feb 28 23:19:24.982999 2026] [:error] [pid 39185:tid 39258] [client 45.86.200.250:29679] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aaMHfBVE-FfM89u7BQa79gAAAIw"]
[Sat Feb 28 23:19:31.561561 2026] [:error] [pid 39183:tid 39211] [client 49.51.33.159:34014] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaMHgxCf4HvhVePw3LbZwwAAABM"]
[Sat Feb 28 23:19:33.470701 2026] [:error] [pid 11791:tid 11812] [client 45.86.200.242:63199] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaMHhWuX5e1Q32gqxH3mXAAAARM"]
[Sat Feb 28 23:19:36.955206 2026] [proxy_fcgi:error] [pid 39183:tid 39201] [client 185.82.72.108:36107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:19:38.686967 2026] [:error] [pid 39183:tid 39196] [client 185.82.72.108:36107] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "aaMHihCf4HvhVePw3LbaGQAAAAQ"]
[Sat Feb 28 23:19:39.353879 2026] [:error] [pid 39185:tid 39251] [client 185.82.72.9:58211] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaMHixVE-FfM89u7BQa8CAAAAIU"]
[Sat Feb 28 23:19:42.929579 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.229:49291] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaMHjrTHSOG_yf2PpqEEpgAAAdA"]
[Sat Feb 28 23:19:43.551276 2026] [:error] [pid 39292:tid 39300] [client 45.86.200.219:55271] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaMHj6IAO5fN7BxyqcGm-gAAAMY"]
[Sat Feb 28 23:19:53.576651 2026] [:error] [pid 39292:tid 39310] [client 45.86.200.223:52523] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaMHmaIAO5fN7BxyqcGnMwAAANA"]
[Sat Feb 28 23:19:54.223892 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.246:34131] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaMHmrTHSOG_yf2PpqEE2wAAAco"]
[Sat Feb 28 23:20:00.565782 2026] [:error] [pid 39185:tid 39253] [client 45.86.200.238:47593] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aaMHoBVE-FfM89u7BQa8PAAAAIc"]
[Sat Feb 28 23:20:01.125623 2026] [:error] [pid 22194:tid 22218] [client 45.86.200.246:29645] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaMHoX6mbajs3bzQGyu9yAAAAVY"]
[Sat Feb 28 23:20:01.999409 2026] [:error] [pid 49763:tid 49775] [client 45.86.200.242:47663] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaMHobTHSOG_yf2PpqEFDwAAAck"]
[Sat Feb 28 23:20:09.793541 2026] [:error] [pid 49763:tid 49772] [client 45.86.200.233:26481] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaMHqbTHSOG_yf2PpqEFNAAAAcY"]
[Sat Feb 28 23:20:13.116978 2026] [:error] [pid 39183:tid 39213] [client 45.86.200.216:43733] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaMHrRCf4HvhVePw3Lba6QAAABU"]
[Sat Feb 28 23:20:23.701687 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.220:57355] [client 45.86.200.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.220, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "aaMHtxCf4HvhVePw3LbbTwAAAAc"]
[Sat Feb 28 23:20:32.599500 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.220:57355] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaMHwBCf4HvhVePw3LbbbAAAAAQ"]
[Sat Feb 28 23:20:33.350241 2026] [:error] [pid 39184:tid 39238] [client 185.82.72.104:53527] [client 185.82.72.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.104, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaMHwVtZF9Zd_U7easD-_gAAAFM"]
[Sat Feb 28 23:20:48.294809 2026] [proxy_fcgi:error] [pid 39184:tid 39226] [client 185.82.72.104:53527] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:21:08.534714 2026] [:error] [pid 39184:tid 39241] [client 185.82.72.104:53527] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaMH5FtZF9Zd_U7easD_VQAAAFY"]
[Sat Feb 28 23:21:14.085987 2026] [:error] [pid 39183:tid 39205] [client 45.86.200.218:48583] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaMH6hCf4HvhVePw3LbcrwAAAA0"]
[Sat Feb 28 23:21:18.039015 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.220:62737] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaMH7hCf4HvhVePw3Lbc2QAAAAg"]
[Sat Feb 28 23:21:31.317295 2026] [:error] [pid 39183:tid 39213] [client 185.82.72.206:28315] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaMH-xCf4HvhVePw3LbdbgAAABU"]
[Sat Feb 28 23:21:35.741166 2026] [:error] [pid 52460:tid 52484] [client 45.86.200.214:30197] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaMH_7LWOogAgHGh62TjYgAAAZU"]
[Sat Feb 28 23:21:38.034284 2026] [:error] [pid 52460:tid 52485] [client 45.86.200.249:27733] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaMIArLWOogAgHGh62TjaAAAAZY"]
[Sat Feb 28 23:21:45.626328 2026] [proxy_fcgi:error] [pid 52460:tid 52478] [client 45.86.200.226:32981] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:21:45.960268 2026] [proxy_fcgi:error] [pid 52460:tid 52477] [client 45.86.200.226:32981] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:21:46.291236 2026] [:error] [pid 52460:tid 52487] [client 45.86.200.226:32981] [client 45.86.200.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaMICrLWOogAgHGh62TjgQAAAZg"]
[Sat Feb 28 23:21:47.018985 2026] [:error] [pid 49763:tid 49768] [client 185.82.72.102:53645] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaMIC7THSOG_yf2PpqEHyAAAAcI"]
[Sat Feb 28 23:21:57.235224 2026] [:error] [pid 39184:tid 39241] [client 45.86.200.225:55371] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaMIFVtZF9Zd_U7easD_4gAAAFY"]
[Sat Feb 28 23:21:59.418625 2026] [:error] [pid 52460:tid 52469] [client 45.86.200.242:30305] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aaMIF7LWOogAgHGh62Tj1QAAAYY"]
[Sat Feb 28 23:22:04.420873 2026] [:error] [pid 39183:tid 39213] [client 185.82.72.107:24401] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaMIHBCf4HvhVePw3LbeaQAAABU"]
[Sat Feb 28 23:22:15.860270 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.217:35937] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaMIJxCf4HvhVePw3Lbe0gAAAAI"]
[Sat Feb 28 23:22:16.505539 2026] [proxy_fcgi:error] [pid 39183:tid 39208] [client 45.86.200.215:40899] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:22:19.986266 2026] [:error] [pid 39183:tid 39193] [client 45.86.200.215:40899] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaMIKxCf4HvhVePw3Lbe3wAAAAE"]
[Sat Feb 28 23:22:28.325601 2026] [proxy_fcgi:error] [pid 39183:tid 39197] [client 45.86.200.221:20095] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:22:30.267113 2026] [:error] [pid 39183:tid 39205] [client 45.86.200.221:20095] [client 45.86.200.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.221, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaMINhCf4HvhVePw3LbfQwAAAA0"]
[Sat Feb 28 23:22:37.073049 2026] [:error] [pid 39183:tid 39197] [client 45.86.200.221:20095] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaMIPRCf4HvhVePw3LbfdgAAAAU"]
[Sat Feb 28 23:22:39.273636 2026] [:error] [pid 49763:tid 49779] [client 185.82.72.9:53831] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaMIP7THSOG_yf2PpqEIvQAAAc0"]
[Sat Feb 28 23:22:45.713288 2026] [:error] [pid 39183:tid 39195] [client 185.82.72.179:61815] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaMIRRCf4HvhVePw3LbfkAAAAAM"]
[Sat Feb 28 23:22:51.698187 2026] [:error] [pid 49763:tid 49769] [client 45.86.200.222:65123] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaMIS7THSOG_yf2PpqEJIgAAAcM"]
[Sat Feb 28 23:22:54.033982 2026] [:error] [pid 52460:tid 52478] [client 45.86.200.241:42767] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaMITrLWOogAgHGh62TkggAAAY8"]
[Sat Feb 28 23:22:59.604022 2026] [:error] [pid 39183:tid 39192] [client 45.86.200.239:21825] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaMIUxCf4HvhVePw3LbfyQAAAAA"]
[Sat Feb 28 23:23:04.514580 2026] [proxy_fcgi:error] [pid 49763:tid 49773] [client 185.82.72.10:36563] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:23:05.265221 2026] [:error] [pid 49763:tid 49788] [client 185.82.72.10:36563] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaMIWbTHSOG_yf2PpqEJTwAAAdY"]
[Sat Feb 28 23:23:05.900011 2026] [proxy_fcgi:error] [pid 39184:tid 39231] [client 45.86.200.229:62317] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Sat Feb 28 23:23:06.541126 2026] [:error] [pid 39184:tid 39219] [client 45.86.200.245:25419] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "aaMIWltZF9Zd_U7easAAbwAAAEA"]
[Sat Feb 28 23:23:07.172678 2026] [:error] [pid 39183:tid 39197] [client 45.86.200.225:42923] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaMIWxCf4HvhVePw3Lbf8gAAAAU"]
[Sat Feb 28 23:23:08.255814 2026] [:error] [pid 39183:tid 39198] [client 45.86.200.234:24333] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaMIXBCf4HvhVePw3Lbf_gAAAAY"]
[Sat Feb 28 23:23:08.878142 2026] [:error] [pid 11791:tid 11806] [client 185.82.72.206:27247] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaMIXGuX5e1Q32gqxH3nxgAAAQ0"]
[Sat Feb 28 23:23:09.476187 2026] [:error] [pid 11791:tid 11816] [client 45.86.200.222:27517] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaMIXWuX5e1Q32gqxH3nxwAAARc"]
[Sat Feb 28 23:23:10.125030 2026] [:error] [pid 11791:tid 11814] [client 45.86.200.242:57271] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaMIXmuX5e1Q32gqxH3nygAAARU"]
[Sat Feb 28 23:23:14.067071 2026] [:error] [pid 39183:tid 39210] [client 45.86.200.231:51445] [client 45.86.200.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaMIYhCf4HvhVePw3LbgJgAAABI"]
[Sat Feb 28 23:23:14.744920 2026] [:error] [pid 39292:tid 39316] [client 45.86.200.250:38645] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaMIYqIAO5fN7BxyqcGoPwAAANY"]
[Sat Feb 28 23:23:15.375630 2026] [:error] [pid 49763:tid 49768] [client 185.82.72.9:46961] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaMIY7THSOG_yf2PpqEJZwAAAcI"]
[Sat Feb 28 23:23:17.577123 2026] [:error] [pid 39292:tid 39314] [client 45.86.200.244:48381] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaMIZaIAO5fN7BxyqcGoRgAAANQ"]
[Sat Feb 28 23:23:21.155154 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.223:37261] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaMIaRCf4HvhVePw3LbgSQAAABM"]
[Sat Feb 28 23:23:21.803155 2026] [proxy_fcgi:error] [pid 49763:tid 49780] [client 45.86.200.222:40469] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:23:26.497766 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.222:40469] [client 45.86.200.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.222, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaMIbrTHSOG_yf2PpqEJlAAAAcU"]
[Sat Feb 28 23:23:34.713884 2026] [:error] [pid 49763:tid 49789] [client 45.86.200.222:40469] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaMIdrTHSOG_yf2PpqEJvgAAAdc"]
[Sat Feb 28 23:23:36.380338 2026] [:error] [pid 49763:tid 49781] [client 45.86.200.249:37373] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaMIeLTHSOG_yf2PpqEJxgAAAc8"]
[Sat Feb 28 23:24:01.838782 2026] [:error] [pid 49763:tid 49775] [client 45.86.200.244:34673] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaMIkbTHSOG_yf2PpqEKOAAAAck"]
[Sat Feb 28 23:24:02.513485 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.228:25557] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaMIkrTHSOG_yf2PpqEKPgAAAcI"]
[Sat Feb 28 23:24:03.123558 2026] [:error] [pid 49763:tid 49790] [client 185.82.72.9:24669] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaMIk7THSOG_yf2PpqEKRAAAAdg"]
[Sat Feb 28 23:24:12.015652 2026] [:error] [pid 39292:tid 39297] [client 45.86.200.228:55605] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaMInKIAO5fN7BxyqcGolAAAAMM"]
[Sat Feb 28 23:24:13.237161 2026] [:error] [pid 39183:tid 39192] [client 185.82.72.9:24943] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaMInRCf4HvhVePw3Lbg4AAAAAA"]
[Sat Feb 28 23:24:14.788750 2026] [:error] [pid 39184:tid 39224] [client 45.86.200.241:52449] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaMInltZF9Zd_U7easAAtgAAAEU"]
[Sat Feb 28 23:24:21.266430 2026] [:error] [pid 39183:tid 39197] [client 185.82.72.102:27415] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaMIpRCf4HvhVePw3Lbg_QAAAAU"]
[Sat Feb 28 23:24:23.679804 2026] [:error] [pid 49763:tid 49767] [client 185.82.72.10:33165] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaMIp7THSOG_yf2PpqEKjgAAAcE"]
[Sat Feb 28 23:24:27.200033 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.243:38977] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaMIqxCf4HvhVePw3LbhQAAAABM"]
[Sat Feb 28 23:24:44.197168 2026] [:error] [pid 39183:tid 39207] [client 185.82.72.206:42583] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaMIvBCf4HvhVePw3LbhzgAAAA8"]
[Sat Feb 28 23:24:47.502374 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.234:27911] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "aaMIvxCf4HvhVePw3Lbh7QAAAAQ"]
[Sat Feb 28 23:24:56.825276 2026] [:error] [pid 52460:tid 52474] [client 185.82.72.182:56903] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaMIyLLWOogAgHGh62TmWwAAAYs"]
[Sat Feb 28 23:25:00.805978 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.244:58527] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaMIzLTHSOG_yf2PpqEK6wAAAcA"]
[Sat Feb 28 23:25:06.874797 2026] [:error] [pid 39183:tid 39202] [client 185.82.72.103:36535] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaMI0hCf4HvhVePw3LbifgAAAAo"]
[Sat Feb 28 23:25:15.244832 2026] [:error] [pid 49763:tid 49777] [client 185.82.72.103:64281] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaMI27THSOG_yf2PpqELFgAAAcs"]
[Sat Feb 28 23:25:19.079691 2026] [:error] [pid 39292:tid 39297] [client 45.86.200.247:63011] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaMI36IAO5fN7BxyqcGpLQAAAMM"]
[Sat Feb 28 23:25:19.888931 2026] [:error] [pid 52460:tid 52464] [client 45.86.200.246:64079] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaMI37LWOogAgHGh62TmuAAAAYE"]
[Sat Feb 28 23:25:27.342123 2026] [:error] [pid 11791:tid 11815] [client 45.86.200.216:63095] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaMI52uX5e1Q32gqxH3oPQAAARY"]
[Sat Feb 28 23:25:36.045203 2026] [:error] [pid 22194:tid 22200] [client 185.82.72.10:59811] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaMI8H6mbajs3bzQGyu-kQAAAUQ"]
[Sat Feb 28 23:25:42.770814 2026] [:error] [pid 52460:tid 52479] [client 45.86.200.237:34279] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaMI9rLWOogAgHGh62TnCAAAAZA"]
[Sat Feb 28 23:25:43.444090 2026] [:error] [pid 49763:tid 49773] [client 185.82.72.206:45407] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaMI97THSOG_yf2PpqELXAAAAcc"]
[Sat Feb 28 23:25:47.005201 2026] [:error] [pid 39184:tid 39231] [client 45.86.200.233:26121] [client 45.86.200.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaMI-1tZF9Zd_U7easABIgAAAEw"]
[Sat Feb 28 23:25:51.948578 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.220:45507] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaMI_7THSOG_yf2PpqELoAAAAcg"]
[Sat Feb 28 23:25:52.524455 2026] [:error] [pid 39184:tid 39240] [client 185.82.72.104:62199] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaMJAFtZF9Zd_U7easABLQAAAFU"]
[Sat Feb 28 23:26:01.481547 2026] [:error] [pid 39183:tid 39216] [client 45.86.200.215:57753] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaMJCRCf4HvhVePw3LbkEQAAABg"]
[Sat Feb 28 23:26:04.956276 2026] [:error] [pid 39292:tid 39308] [client 45.86.200.217:35385] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaMJDKIAO5fN7BxyqcGpbAAAAM4"]
[Sat Feb 28 23:26:05.585855 2026] [:error] [pid 39183:tid 39198] [client 185.82.72.10:44743] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaMJDRCf4HvhVePw3LbkKAAAAAY"]
[Sat Feb 28 23:26:09.339913 2026] [:error] [pid 52460:tid 52470] [client 45.86.200.218:36735] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaMJEbLWOogAgHGh62TneAAAAYc"]
[Sat Feb 28 23:26:11.747047 2026] [:error] [pid 52460:tid 52480] [client 185.82.72.206:28083] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaMJE7LWOogAgHGh62TnjQAAAZE"]
[Sat Feb 28 23:26:19.913026 2026] [:error] [pid 49763:tid 49771] [client 45.86.200.219:48471] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaMJG7THSOG_yf2PpqEMSAAAAcU"]
[Sat Feb 28 23:26:23.345511 2026] [:error] [pid 49763:tid 49775] [client 45.86.200.243:58483] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaMJH7THSOG_yf2PpqEMXgAAAck"]
[Sat Feb 28 23:26:27.017308 2026] [:error] [pid 49763:tid 49773] [client 185.82.72.106:59995] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaMJI7THSOG_yf2PpqEMhAAAAcc"]
[Sat Feb 28 23:26:29.376029 2026] [:error] [pid 39183:tid 39208] [client 185.82.72.179:35733] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "aaMJJRCf4HvhVePw3LbktgAAABA"]
[Sat Feb 28 23:26:32.025750 2026] [:error] [pid 52460:tid 52469] [client 45.86.200.248:25327] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaMJKLLWOogAgHGh62Tn0AAAAYY"]
[Sat Feb 28 23:26:32.692716 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.227:65469] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "aaMJKBCf4HvhVePw3LbkzAAAAA4"]
[Sat Feb 28 23:26:33.404037 2026] [:error] [pid 39183:tid 39210] [client 45.86.200.221:31905] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaMJKRCf4HvhVePw3Lbk0QAAABI"]
[Sat Feb 28 23:26:42.262236 2026] [:error] [pid 49763:tid 49783] [client 185.82.72.108:38119] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaMJMrTHSOG_yf2PpqEMwgAAAdE"]
[Sat Feb 28 23:26:47.348293 2026] [:error] [pid 39183:tid 39211] [client 45.86.200.215:31053] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaMJNxCf4HvhVePw3LblCwAAABM"]
[Sat Feb 28 23:26:52.664746 2026] [:error] [pid 52460:tid 52468] [client 45.86.200.218:60225] [client 45.86.200.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaMJPLLWOogAgHGh62ToFwAAAYU"]
[Sat Feb 28 23:26:58.634532 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.239:28235] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaMJQrTHSOG_yf2PpqENEgAAAdA"]
[Sat Feb 28 23:27:11.071807 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.235:50981] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaMJTxCf4HvhVePw3LblVgAAAAI"]
[Sat Feb 28 23:27:13.344063 2026] [:error] [pid 39183:tid 39195] [client 45.86.200.234:37345] [client 45.86.200.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaMJURCf4HvhVePw3LblZgAAAAM"]
[Sat Feb 28 23:27:15.730660 2026] [:error] [pid 22194:tid 22219] [client 185.82.72.103:57053] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaMJU36mbajs3bzQGyu-sgAAAVc"]
[Sat Feb 28 23:27:20.586112 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.219:21925] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaMJWLTHSOG_yf2PpqENyQAAAcI"]
[Sat Feb 28 23:27:36.313270 2026] [:error] [pid 49763:tid 49790] [client 185.82.72.104:39371] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaMJaLTHSOG_yf2PpqEOKAAAAdg"]
[Sat Feb 28 23:27:37.026866 2026] [:error] [pid 49763:tid 49772] [client 45.86.200.236:43141] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaMJabTHSOG_yf2PpqEOLAAAAcY"]
[Sat Feb 28 23:27:42.857352 2026] [:error] [pid 39183:tid 39215] [client 45.86.200.245:57955] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaMJbhCf4HvhVePw3LbmCgAAABc"]
[Sat Feb 28 23:27:43.479699 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.232:53663] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaMJb7THSOG_yf2PpqEOTAAAAcI"]
[Sat Feb 28 23:27:47.253844 2026] [:error] [pid 49763:tid 49776] [client 45.86.200.251:29803] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaMJc7THSOG_yf2PpqEOXwAAAco"]
[Sat Feb 28 23:27:47.927229 2026] [:error] [pid 49763:tid 49767] [client 185.82.72.182:51355] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aaMJc7THSOG_yf2PpqEOZwAAAcE"]
[Sat Feb 28 23:27:48.611246 2026] [:error] [pid 39184:tid 39238] [client 45.86.200.214:62799] [client 45.86.200.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.214, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaMJdFtZF9Zd_U7easACQAAAAFM"]
[Sat Feb 28 23:27:48.616536 2026] [proxy_fcgi:error] [pid 39184:tid 39238] [client 45.86.200.214:62799] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:27:49.003828 2026] [:error] [pid 39184:tid 39230] [client 45.86.200.214:62799] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaMJdVtZF9Zd_U7easACRAAAAEs"]
[Sat Feb 28 23:27:54.445604 2026] [:error] [pid 49763:tid 49779] [client 185.82.72.103:41353] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaMJerTHSOG_yf2PpqEOogAAAc0"]
[Sat Feb 28 23:27:55.111295 2026] [:error] [pid 49763:tid 49780] [client 45.86.200.248:41993] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "aaMJe7THSOG_yf2PpqEOpQAAAc4"]
[Sat Feb 28 23:28:07.345060 2026] [:error] [pid 52460:tid 52470] [client 45.86.200.235:62859] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaMJh7LWOogAgHGh62TopAAAAYc"]
[Sat Feb 28 23:28:08.149008 2026] [:error] [pid 52460:tid 52484] [client 185.82.72.179:29467] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaMJiLLWOogAgHGh62ToqAAAAZU"]
[Sat Feb 28 23:28:11.110641 2026] [:error] [pid 52460:tid 52467] [client 45.86.200.217:35809] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaMJi7LWOogAgHGh62TovAAAAYQ"]
[Sat Feb 28 23:28:11.711404 2026] [:error] [pid 39183:tid 39193] [client 185.82.72.107:26353] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aaMJixCf4HvhVePw3LbmZgAAAAE"]
[Sat Feb 28 23:28:12.312879 2026] [proxy_fcgi:error] [pid 52460:tid 52472] [client 45.86.200.232:38773] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:28:12.675591 2026] [:error] [pid 52460:tid 52480] [client 45.86.200.232:38773] [client 45.86.200.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.232, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaMJjLLWOogAgHGh62ToxAAAAZE"]
[Sat Feb 28 23:28:16.203443 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.232:38773] [client 45.86.200.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaMJkLLWOogAgHGh62TozQAAAZQ"]
[Sat Feb 28 23:28:22.681405 2026] [:error] [pid 39183:tid 39203] [client 45.86.200.240:38389] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaMJlhCf4HvhVePw3LbmpwAAAAs"]
[Sat Feb 28 23:28:25.008027 2026] [:error] [pid 49763:tid 49770] [client 185.82.72.104:37527] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaMJmbTHSOG_yf2PpqEPLAAAAcQ"]
[Sat Feb 28 23:28:25.759605 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.221:21289] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaMJmbTHSOG_yf2PpqEPLwAAAcI"]
[Sat Feb 28 23:28:30.658073 2026] [:error] [pid 39292:tid 39318] [client 185.82.72.107:21431] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaMJnqIAO5fN7BxyqcGqJwAAANg"]
[Sat Feb 28 23:28:34.387973 2026] [:error] [pid 39183:tid 39209] [client 45.86.200.236:21679] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaMJohCf4HvhVePw3Lbm9AAAABE"]
[Sat Feb 28 23:28:41.360324 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.245:62393] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaMJqRCf4HvhVePw3LbnGAAAABQ"]
[Sat Feb 28 23:28:42.025501 2026] [:error] [pid 49763:tid 49782] [client 185.82.72.10:56089] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "aaMJqrTHSOG_yf2PpqEPWgAAAdA"]
[Sat Feb 28 23:28:44.229524 2026] [:error] [pid 49763:tid 49786] [client 45.86.200.235:53453] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "aaMJrLTHSOG_yf2PpqEPYQAAAdQ"]
[Sat Feb 28 23:28:53.282868 2026] [:error] [pid 22194:tid 22206] [client 45.86.200.225:63691] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaMJtX6mbajs3bzQGyu-1gAAAUo"]
[Sat Feb 28 23:28:58.102624 2026] [:error] [pid 49763:tid 49769] [client 185.82.72.179:42937] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "aaMJurTHSOG_yf2PpqEPkQAAAcM"]
[Sat Feb 28 23:28:58.490734 2026] [:error] [pid 49763:tid 49789] [client 185.82.72.179:42937] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaMJurTHSOG_yf2PpqEPkwAAAdc"]
[Sat Feb 28 23:29:02.365593 2026] [:error] [pid 39183:tid 39194] [client 45.86.200.225:26101] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaMJvhCf4HvhVePw3LbnpwAAAAI"]
[Sat Feb 28 23:29:02.972531 2026] [:error] [pid 39183:tid 39213] [client 45.86.200.224:53555] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaMJvhCf4HvhVePw3LbnrQAAABU"]
[Sat Feb 28 23:29:13.447314 2026] [:error] [pid 39183:tid 39199] [client 45.86.200.241:54601] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaMJyRCf4HvhVePw3LbnwgAAAAc"]
[Sat Feb 28 23:29:17.861733 2026] [:error] [pid 49763:tid 49768] [client 45.86.200.217:63377] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaMJzbTHSOG_yf2PpqEP7QAAAcI"]
[Sat Feb 28 23:29:20.184399 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.244:42543] [client 45.86.200.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaMJ0BCf4HvhVePw3Lbn2gAAAAg"]
[Sat Feb 28 23:29:27.887274 2026] [:error] [pid 52460:tid 52483] [client 45.86.200.249:38511] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaMJ17LWOogAgHGh62TpnwAAAZQ"]
[Sat Feb 28 23:29:30.286595 2026] [:error] [pid 22194:tid 22207] [client 45.86.200.217:35671] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "aaMJ2n6mbajs3bzQGyu-4QAAAUs"]
[Sat Feb 28 23:29:32.901688 2026] [:error] [pid 39184:tid 39243] [client 45.86.200.230:43953] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaMJ3FtZF9Zd_U7easADRgAAAFg"]
[Sat Feb 28 23:29:33.794000 2026] [:error] [pid 39183:tid 39196] [client 45.86.200.223:28785] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaMJ3RCf4HvhVePw3Lbn_gAAAAQ"]
[Sat Feb 28 23:29:37.706531 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.221:31765] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaMJ4RCf4HvhVePw3LboFAAAAA4"]
[Sat Feb 28 23:29:44.155787 2026] [:error] [pid 39185:tid 39258] [client 45.86.200.247:34537] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaMJ6BVE-FfM89u7BQa91gAAAIw"]
[Sat Feb 28 23:29:44.793738 2026] [:error] [pid 52460:tid 52467] [client 45.86.200.241:50013] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaMJ6LLWOogAgHGh62TpswAAAYQ"]
[Sat Feb 28 23:29:52.973980 2026] [:error] [pid 39183:tid 39210] [client 185.82.72.10:57381] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaMJ8BCf4HvhVePw3LboWAAAABI"]
[Sat Feb 28 23:29:56.561189 2026] [:error] [pid 49763:tid 49780] [client 185.82.72.103:55885] [client 185.82.72.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaMJ9LTHSOG_yf2PpqEQggAAAc4"]
[Sat Feb 28 23:30:02.684556 2026] [:error] [pid 52460:tid 52482] [client 45.86.200.229:25243] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaMJ-rLWOogAgHGh62Tp2wAAAZM"]
[Sat Feb 28 23:30:03.317292 2026] [:error] [pid 39183:tid 39206] [client 185.82.72.9:64745] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaMJ-xCf4HvhVePw3LbobQAAAA4"]
[Sat Feb 28 23:30:05.660744 2026] [:error] [pid 39183:tid 39206] [client 45.86.200.223:33765] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaMJ_RCf4HvhVePw3LbofQAAAA4"]
[Sat Feb 28 23:30:09.272575 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.225:54525] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaMKAbLWOogAgHGh62Tp5gAAAY4"]
[Sat Feb 28 23:30:13.148321 2026] [:error] [pid 49763:tid 49767] [client 185.82.72.106:25503] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaMKBbTHSOG_yf2PpqEQrQAAAcE"]
[Sat Feb 28 23:30:13.893644 2026] [:error] [pid 52460:tid 52485] [client 45.86.200.236:33569] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaMKBbLWOogAgHGh62Tp7QAAAZY"]
[Sat Feb 28 23:30:16.802850 2026] [:error] [pid 52460:tid 52466] [client 45.86.200.236:24213] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaMKCLLWOogAgHGh62Tp8QAAAYM"]
[Sat Feb 28 23:30:17.473132 2026] [:error] [pid 52460:tid 52463] [client 45.86.200.220:48637] [client 45.86.200.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aaMKCbLWOogAgHGh62Tp8gAAAYA"]
[Sat Feb 28 23:30:21.309548 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.219:61829] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaMKDRCf4HvhVePw3LborwAAABQ"]
[Sat Feb 28 23:30:23.270284 2026] [:error] [pid 39183:tid 39195] [client 185.82.72.10:27809] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaMKDxCf4HvhVePw3LbowAAAAAM"]
[Sat Feb 28 23:30:23.935068 2026] [:error] [pid 49763:tid 49779] [client 45.86.200.242:42063] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaMKD7THSOG_yf2PpqEQ0QAAAc0"]
[Sat Feb 28 23:30:24.657709 2026] [:error] [pid 52460:tid 52477] [client 45.86.200.247:53165] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaMKELLWOogAgHGh62TqAwAAAY4"]
[Sat Feb 28 23:30:29.313320 2026] [:error] [pid 39184:tid 39222] [client 45.86.200.213:32839] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaMKFVtZF9Zd_U7easAD8wAAAEM"]
[Sat Feb 28 23:30:32.860719 2026] [:error] [pid 49763:tid 49778] [client 185.82.72.111:38943] [client 185.82.72.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaMKGLTHSOG_yf2PpqEQ6gAAAcw"]
[Sat Feb 28 23:30:35.005008 2026] [:error] [pid 39183:tid 39202] [client 45.86.200.245:33043] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaMKGxCf4HvhVePw3Lbo3gAAAAo"]
[Sat Feb 28 23:30:35.687248 2026] [proxy_fcgi:error] [pid 39183:tid 39193] [client 45.86.200.248:24805] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Sat Feb 28 23:30:37.410456 2026] [:error] [pid 39184:tid 39219] [client 185.82.72.108:24545] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaMKHVtZF9Zd_U7easAEBAAAAEA"]
[Sat Feb 28 23:30:46.842071 2026] [:error] [pid 11791:tid 11794] [client 45.86.200.222:59581] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaMKJmuX5e1Q32gqxH3p5AAAAQE"]
[Sat Feb 28 23:30:47.438602 2026] [:error] [pid 39292:tid 39314] [client 185.82.72.9:57973] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaMKJ6IAO5fN7BxyqcGqfAAAANQ"]
[Sat Feb 28 23:30:51.612702 2026] [:error] [pid 49763:tid 49774] [client 45.86.200.237:22145] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaMKK7THSOG_yf2PpqERFAAAAcg"]
[Sat Feb 28 23:30:58.791236 2026] [:error] [pid 11791:tid 11802] [client 45.86.200.245:62341] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaMKMmuX5e1Q32gqxH3p8gAAAQk"]
[Sat Feb 28 23:31:02.432761 2026] [:error] [pid 39292:tid 39312] [client 45.86.200.240:48469] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaMKNqIAO5fN7BxyqcGqnQAAANI"]
[Sat Feb 28 23:31:05.664159 2026] [:error] [pid 39183:tid 39196] [client 185.82.72.182:65141] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaMKORCf4HvhVePw3LbpcQAAAAQ"]
[Sat Feb 28 23:31:08.402274 2026] [:error] [pid 39183:tid 39212] [client 45.86.200.241:57887] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaMKPBCf4HvhVePw3LbpiwAAABQ"]
[Sat Feb 28 23:31:10.542538 2026] [:error] [pid 39183:tid 39212] [client 185.82.72.102:38837] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaMKPhCf4HvhVePw3LbpmAAAABQ"]
[Sat Feb 28 23:31:17.038138 2026] [:error] [pid 52460:tid 52472] [client 45.86.200.240:52039] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaMKRbLWOogAgHGh62TqcgAAAYk"]
[Sat Feb 28 23:31:22.644297 2026] [:error] [pid 39183:tid 39198] [client 45.86.200.216:55305] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaMKShCf4HvhVePw3LbqAQAAAAY"]
[Sat Feb 28 23:31:23.360974 2026] [proxy_fcgi:error] [pid 39184:tid 39228] [client 185.82.72.106:64169] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:31:23.786181 2026] [:error] [pid 39184:tid 39220] [client 185.82.72.106:64169] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaMKS1tZF9Zd_U7easAERgAAAEE"]
[Sat Feb 28 23:31:24.501514 2026] [:error] [pid 52460:tid 52483] [client 185.82.72.182:63755] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaMKTLLWOogAgHGh62TqgAAAAZQ"]
[Sat Feb 28 23:31:27.950869 2026] [:error] [pid 49763:tid 49769] [client 185.82.72.109:31193] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaMKT7THSOG_yf2PpqERmgAAAcM"]
[Sat Feb 28 23:31:28.603834 2026] [:error] [pid 39183:tid 39208] [client 45.86.200.224:52107] [client 45.86.200.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaMKUBCf4HvhVePw3LbqRgAAABA"]
[Sat Feb 28 23:31:37.825355 2026] [:error] [pid 39183:tid 39210] [client 45.86.200.214:23545] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaMKWRCf4HvhVePw3LbqpwAAABI"]
[Sat Feb 28 23:31:38.507877 2026] [:error] [pid 39183:tid 39203] [client 45.86.200.230:48033] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaMKWhCf4HvhVePw3LbqqgAAAAs"]
[Sat Feb 28 23:31:41.781676 2026] [:error] [pid 11791:tid 11796] [client 185.82.72.102:43219] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/log.php"] [unique_id "aaMKXWuX5e1Q32gqxH3qEQAAAQM"]
[Sat Feb 28 23:31:42.426515 2026] [:error] [pid 52460:tid 52463] [client 45.86.200.247:50825] [client 45.86.200.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaMKXrLWOogAgHGh62TqrQAAAYA"]
[Sat Feb 28 23:31:43.066123 2026] [:error] [pid 39184:tid 39229] [client 45.86.200.236:60045] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaMKX1tZF9Zd_U7easAEXgAAAEo"]
[Sat Feb 28 23:31:43.788828 2026] [:error] [pid 39184:tid 39238] [client 185.82.72.182:29313] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/aw.php"] [unique_id "aaMKX1tZF9Zd_U7easAEYAAAAFM"]
[Sat Feb 28 23:31:51.032689 2026] [:error] [pid 39185:tid 39269] [client 45.86.200.215:65299] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaMKZxVE-FfM89u7BQa-hwAAAJc"]
[Sat Feb 28 23:31:52.673762 2026] [:error] [pid 22194:tid 22220] [client 45.86.200.237:51771] [client 45.86.200.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/install.php"] [unique_id "aaMKaH6mbajs3bzQGyu_awAAAVg"]
[Sat Feb 28 23:31:57.695480 2026] [:error] [pid 39183:tid 39202] [client 45.86.200.240:31349] [client 45.86.200.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaMKbRCf4HvhVePw3LbrgAAAAAo"]
[Sat Feb 28 23:31:58.422777 2026] [:error] [pid 49763:tid 49779] [client 185.82.72.108:47885] [client 185.82.72.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaMKbrTHSOG_yf2PpqER6gAAAc0"]
[Sat Feb 28 23:32:02.729482 2026] [:error] [pid 49763:tid 49776] [client 185.82.72.9:46683] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/template-less.php"] [unique_id "aaMKcrTHSOG_yf2PpqESHgAAAco"]
[Sat Feb 28 23:32:03.403726 2026] [:error] [pid 39184:tid 39231] [client 185.82.72.179:45367] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaMKc1tZF9Zd_U7easAEzwAAAEw"]
[Sat Feb 28 23:32:14.520485 2026] [:error] [pid 39183:tid 39192] [client 45.86.200.225:37041] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aaMKfhCf4HvhVePw3LbsAAAAAAA"]
[Sat Feb 28 23:32:15.264289 2026] [:error] [pid 52460:tid 52482] [client 45.86.200.243:32647] [client 45.86.200.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaMKf7LWOogAgHGh62TrPQAAAZM"]
[Sat Feb 28 23:32:18.937314 2026] [:error] [pid 49763:tid 49789] [client 45.86.200.241:21281] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "aaMKgrTHSOG_yf2PpqESnAAAAdc"]
[Sat Feb 28 23:32:21.440439 2026] [:error] [pid 11791:tid 11796] [client 45.86.200.216:25697] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaMKhWuX5e1Q32gqxH3qbAAAAQM"]
[Sat Feb 28 23:32:24.196750 2026] [:error] [pid 52460:tid 52471] [client 45.86.200.217:44263] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/load.php"] [unique_id "aaMKiLLWOogAgHGh62TrUQAAAYg"]
[Sat Feb 28 23:32:24.961815 2026] [:error] [pid 49763:tid 49766] [client 45.86.200.223:31139] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaMKiLTHSOG_yf2PpqEStwAAAcA"]
[Sat Feb 28 23:32:25.657101 2026] [:error] [pid 39184:tid 39235] [client 45.86.200.214:62005] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaMKiVtZF9Zd_U7easAFAgAAAFA"]
[Sat Feb 28 23:32:30.278961 2026] [:error] [pid 39183:tid 39200] [client 45.86.200.230:60317] [client 45.86.200.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaMKjhCf4HvhVePw3LbsOAAAAAg"]
[Sat Feb 28 23:32:32.710531 2026] [:error] [pid 39292:tid 39315] [client 185.82.72.9:32317] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaMKkKIAO5fN7BxyqcGrOwAAANU"]
[Sat Feb 28 23:32:37.632007 2026] [:error] [pid 52460:tid 52473] [client 185.82.72.102:25779] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaMKlbLWOogAgHGh62TreAAAAYo"]
[Sat Feb 28 23:32:38.288310 2026] [:error] [pid 39292:tid 39309] [client 45.86.200.223:22979] [client 45.86.200.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaMKlqIAO5fN7BxyqcGrPwAAAM8"]
[Sat Feb 28 23:32:40.711221 2026] [:error] [pid 22194:tid 22215] [client 185.82.72.179:22615] [client 185.82.72.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaMKmH6mbajs3bzQGyu_sAAAAVM"]
[Sat Feb 28 23:32:54.132614 2026] [:error] [pid 52460:tid 52480] [client 45.86.200.213:21351] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aaMKprLWOogAgHGh62TrzwAAAZE"]
[Sat Feb 28 23:32:56.122128 2026] [:error] [pid 39292:tid 39299] [client 45.86.200.227:61955] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaMKqKIAO5fN7BxyqcGrXAAAAMU"]
[Sat Feb 28 23:33:01.318684 2026] [:error] [pid 52460:tid 52483] [client 185.82.72.182:45169] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaMKrbLWOogAgHGh62Tr6AAAAZQ"]
[Sat Feb 28 23:33:02.038683 2026] [:error] [pid 49763:tid 49782] [client 45.86.200.222:55353] [client 45.86.200.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaMKrrTHSOG_yf2PpqETowAAAdA"]
[Sat Feb 28 23:33:02.809255 2026] [:error] [pid 22194:tid 22201] [client 45.86.200.217:53727] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaMKrn6mbajs3bzQGyu_vAAAAUU"]
[Sat Feb 28 23:33:05.244419 2026] [autoindex:error] [pid 22194:tid 22216] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:05.689273 2026] [autoindex:error] [pid 22194:tid 22204] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:06.045145 2026] [autoindex:error] [pid 22194:tid 22202] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:06.365989 2026] [autoindex:error] [pid 22194:tid 22209] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:08.183923 2026] [autoindex:error] [pid 22194:tid 22208] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:08.541986 2026] [autoindex:error] [pid 22194:tid 22202] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:08.871874 2026] [autoindex:error] [pid 22194:tid 22196] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:09.215976 2026] [autoindex:error] [pid 22194:tid 22198] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:09.565747 2026] [autoindex:error] [pid 22194:tid 22220] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:10.292862 2026] [autoindex:error] [pid 22194:tid 22206] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:11.787893 2026] [autoindex:error] [pid 22194:tid 22204] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:13.441983 2026] [autoindex:error] [pid 22194:tid 22213] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:13.763692 2026] [autoindex:error] [pid 22194:tid 22209] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:17.061705 2026] [autoindex:error] [pid 22194:tid 22219] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:17.377297 2026] [autoindex:error] [pid 22194:tid 22218] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:17.792740 2026] [autoindex:error] [pid 22194:tid 22206] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:18.101644 2026] [autoindex:error] [pid 22194:tid 22197] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:19.643434 2026] [autoindex:error] [pid 22194:tid 22201] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:19.965923 2026] [autoindex:error] [pid 22194:tid 22214] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:21.647793 2026] [autoindex:error] [pid 22194:tid 22213] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:24.771078 2026] [autoindex:error] [pid 22194:tid 22198] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:25.095980 2026] [autoindex:error] [pid 22194:tid 22212] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:25.531488 2026] [autoindex:error] [pid 22194:tid 22215] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:35.463335 2026] [autoindex:error] [pid 22194:tid 22217] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:37.456147 2026] [autoindex:error] [pid 22194:tid 22205] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:37.810776 2026] [autoindex:error] [pid 22194:tid 22220] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:38.899422 2026] [autoindex:error] [pid 22194:tid 22203] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:39.344864 2026] [autoindex:error] [pid 22194:tid 22197] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:39.695868 2026] [autoindex:error] [pid 22194:tid 22211] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:44.755743 2026] [autoindex:error] [pid 22194:tid 22204] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:33:47.042952 2026] [autoindex:error] [pid 22194:tid 22209] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:23.944065 2026] [autoindex:error] [pid 22194:tid 22201] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:24.406703 2026] [autoindex:error] [pid 22194:tid 22206] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:24.769761 2026] [autoindex:error] [pid 22194:tid 22214] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:25.169902 2026] [autoindex:error] [pid 22194:tid 22202] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:25.491044 2026] [autoindex:error] [pid 22194:tid 22213] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:26.234350 2026] [autoindex:error] [pid 22194:tid 22212] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:26.602780 2026] [autoindex:error] [pid 22194:tid 22199] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:27.004658 2026] [autoindex:error] [pid 22194:tid 22205] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:28.701565 2026] [autoindex:error] [pid 22194:tid 22215] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:30.492055 2026] [autoindex:error] [pid 22194:tid 22198] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:30.899493 2026] [autoindex:error] [pid 22194:tid 22196] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:31.234746 2026] [autoindex:error] [pid 22194:tid 22197] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:33.118699 2026] [autoindex:error] [pid 22194:tid 22204] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:33.589928 2026] [autoindex:error] [pid 22194:tid 22206] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:33.949652 2026] [autoindex:error] [pid 22194:tid 22214] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:34:34.301745 2026] [autoindex:error] [pid 22194:tid 22216] [client 45.86.200.234:57725] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:11.185683 2026] [autoindex:error] [pid 39183:tid 39192] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:27.390696 2026] [autoindex:error] [pid 39183:tid 39193] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:34.121881 2026] [autoindex:error] [pid 39183:tid 39198] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:34.442003 2026] [autoindex:error] [pid 39183:tid 39197] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:40.587655 2026] [autoindex:error] [pid 39183:tid 39204] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:41.036681 2026] [autoindex:error] [pid 39183:tid 39200] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:41.667183 2026] [autoindex:error] [pid 39183:tid 39216] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:42.335096 2026] [autoindex:error] [pid 39183:tid 39192] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:42.674332 2026] [autoindex:error] [pid 39183:tid 39215] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:43.019068 2026] [autoindex:error] [pid 39183:tid 39203] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:43.350008 2026] [autoindex:error] [pid 39183:tid 39202] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:43.677207 2026] [autoindex:error] [pid 39183:tid 39208] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:35:44.004840 2026] [autoindex:error] [pid 39183:tid 39200] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 23:36:10.734680 2026] [autoindex:error] [pid 39183:tid 39216] [client 185.82.72.111:53513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 00:22:43.426508 2026] [:error] [pid 31190:tid 31226] [client 111.92.156.223:48917] [client 111.92.156.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.156.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaMWUxfvwGOholYpM1E6RwAAANQ"]
[Sun Mar 01 00:33:40.407959 2026] [:error] [pid 53600:tid 53618] [client 111.92.156.223:48605] [client 111.92.156.223] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaMY5A2UMRAYWtDB23SsEgAAAQ8"]
[Sun Mar 01 00:36:30.791080 2026] [:error] [pid 31190:tid 31210] [client 111.92.156.223:48645] [client 111.92.156.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.156.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaMZjhfvwGOholYpM1FJfAAAAMQ"]
[Sun Mar 01 00:41:08.099160 2026] [:error] [pid 53600:tid 53606] [client 111.92.156.223:48076] [client 111.92.156.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.156.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaMapA2UMRAYWtDB23S68AAAAQM"]
[Sun Mar 01 00:49:19.090302 2026] [:error] [pid 30797:tid 30890] [client 20.63.83.162:17154] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aaMcj_QmcmSQL-3rvLAAPwAAAFM"]
[Sun Mar 01 00:49:19.923699 2026] [:error] [pid 7644:tid 7655] [client 20.63.83.162:17129] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aaMcj_qeDUGmVAHX7VCKugAAAUk"]
[Sun Mar 01 00:49:20.749829 2026] [:error] [pid 7644:tid 7657] [client 20.63.83.162:17135] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aaMckPqeDUGmVAHX7VCK0QAAAUs"]
[Sun Mar 01 00:49:21.580161 2026] [:error] [pid 7644:tid 7668] [client 20.63.83.162:17137] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aaMckfqeDUGmVAHX7VCK4AAAAVY"]
[Sun Mar 01 00:56:11.227226 2026] [:error] [pid 30798:tid 30906] [client 105.157.127.150:54685] [client 105.157.127.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.157.127.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaMeK8BkD73gO8wTonZLcwAAAIc"]
[Sun Mar 01 01:23:02.417575 2026] [:error] [pid 30798:tid 30921] [client 40.85.222.96:41841] [client 40.85.222.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaMkdsBkD73gO8wTonZoHgAAAJU"]
[Sun Mar 01 01:23:23.564652 2026] [:error] [pid 30798:tid 30907] [client 40.85.222.96:41745] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaMki8BkD73gO8wTonZoegAAAIg"]
[Sun Mar 01 01:23:24.743279 2026] [:error] [pid 30798:tid 30899] [client 40.85.222.96:41840] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaMkjMBkD73gO8wTonZogAAAAIA"]
[Sun Mar 01 01:23:25.796110 2026] [:error] [pid 30795:tid 30832] [client 40.85.222.96:41735] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaMkjWuI44IL94Zgti-95AAAABg"]
[Sun Mar 01 01:23:26.858619 2026] [:error] [pid 30798:tid 30902] [client 40.85.222.96:41812] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaMkjsBkD73gO8wTonZokQAAAIM"]
[Sun Mar 01 01:23:29.244764 2026] [:error] [pid 30798:tid 30909] [client 40.85.222.96:41800] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaMkkcBkD73gO8wTonZopgAAAIo"]
[Sun Mar 01 01:23:29.996400 2026] [:error] [pid 53600:tid 53603] [client 40.85.222.96:41833] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaMkkQ2UMRAYWtDB23TZrQAAAQA"]
[Sun Mar 01 01:23:30.710718 2026] [:error] [pid 30798:tid 30920] [client 40.85.222.96:41848] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaMkksBkD73gO8wTonZorwAAAJQ"]
[Sun Mar 01 01:23:32.652535 2026] [:error] [pid 30798:tid 30912] [client 40.85.222.96:41838] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aaMklMBkD73gO8wTonZoxwAAAI0"]
[Sun Mar 01 01:23:34.185185 2026] [:error] [pid 30798:tid 30915] [client 40.85.222.96:41826] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf-shell.php"] [unique_id "aaMklsBkD73gO8wTonZo2wAAAJA"]
[Sun Mar 01 01:23:37.408224 2026] [:error] [pid 30798:tid 30900] [client 40.85.222.96:41830] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf-shell.php"] [unique_id "aaMkmcBkD73gO8wTonZo5QAAAIE"]
[Sun Mar 01 01:23:38.410215 2026] [:error] [pid 7644:tid 7656] [client 40.85.222.96:41828] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf-shell.php"] [unique_id "aaMkmvqeDUGmVAHX7VCZRwAAAUo"]
[Sun Mar 01 01:23:39.114759 2026] [:error] [pid 11920:tid 11936] [client 40.85.222.96:41794] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf-shell.php"] [unique_id "aaMkmyzLNJUKxvBorrCc7QAAAYw"]
[Sun Mar 01 01:23:40.859134 2026] [:error] [pid 30798:tid 30900] [client 40.85.222.96:41738] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaMknMBkD73gO8wTonZo9AAAAIE"]
[Sun Mar 01 01:23:42.151377 2026] [:error] [pid 11920:tid 11930] [client 40.85.222.96:41793] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaMknizLNJUKxvBorrCdAQAAAYY"]
[Sun Mar 01 01:23:43.288652 2026] [:error] [pid 30798:tid 30909] [client 40.85.222.96:41747] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaMkn8BkD73gO8wTonZo_QAAAIo"]
[Sun Mar 01 01:23:45.279258 2026] [:error] [pid 31190:tid 31212] [client 40.85.222.96:41842] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaMkoRfvwGOholYpM1FzMwAAAMY"]
[Sun Mar 01 01:23:48.451203 2026] [:error] [pid 11920:tid 11933] [client 40.85.222.96:41846] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaMkpCzLNJUKxvBorrCdMwAAAYk"]
[Sun Mar 01 01:23:49.584650 2026] [:error] [pid 11920:tid 11937] [client 40.85.222.96:41782] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaMkpSzLNJUKxvBorrCdQQAAAY0"]
[Sun Mar 01 01:23:52.034783 2026] [:error] [pid 30795:tid 30822] [client 40.85.222.96:41847] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaMkqGuI44IL94Zgti-98AAAAA4"]
[Sun Mar 01 01:23:54.021941 2026] [:error] [pid 31190:tid 31225] [client 40.85.222.96:41748] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaMkqhfvwGOholYpM1FzSwAAANM"]
[Sun Mar 01 01:23:56.539452 2026] [:error] [pid 7644:tid 7653] [client 40.85.222.96:41762] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aaMkrPqeDUGmVAHX7VCZUwAAAUc"]
[Sun Mar 01 01:24:00.559779 2026] [:error] [pid 53600:tid 53604] [client 40.85.222.96:41783] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aaMksA2UMRAYWtDB23TZzgAAAQE"]
[Sun Mar 01 01:24:19.713028 2026] [:error] [pid 11920:tid 11947] [client 40.85.222.96:41854] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa.php"] [unique_id "aaMkwyzLNJUKxvBorrCeBQAAAZc"]
[Sun Mar 01 01:24:21.765861 2026] [:error] [pid 11920:tid 11945] [client 40.85.222.96:41839] [client 40.85.222.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa.php"] [unique_id "aaMkxSzLNJUKxvBorrCeDQAAAZU"]
[Sun Mar 01 01:44:55.523368 2026] [:error] [pid 11920:tid 11926] [client 20.63.83.162:62688] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-corn-sample.php"] [unique_id "aaMplyzLNJUKxvBorrDDZgAAAYI"]
[Sun Mar 01 01:45:05.893269 2026] [:error] [pid 30798:tid 30920] [client 20.63.83.162:46988] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-corn-sample.php"] [unique_id "aaMpocBkD73gO8wTonZ_dAAAAJQ"]
[Sun Mar 01 01:45:08.299326 2026] [:error] [pid 53600:tid 53623] [client 20.63.83.162:62661] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-corn-sample.php"] [unique_id "aaMppA2UMRAYWtDB23TlEAAAARQ"]
[Sun Mar 01 02:42:21.101315 2026] [:error] [pid 31190:tid 31222] [client 20.63.83.162:57613] [client 20.63.83.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaM3DRfvwGOholYpM1GvLwAAANA"]
[Sun Mar 01 02:51:34.014738 2026] [:error] [pid 53600:tid 53617] [client 20.104.96.199:31671] [client 20.104.96.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aaM5Ng2UMRAYWtDB23T-8AAAAQ4"]
[Sun Mar 01 02:51:34.853492 2026] [:error] [pid 11920:tid 11928] [client 20.104.96.199:30974] [client 20.104.96.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aaM5NizLNJUKxvBorrAdVAAAAYQ"]
[Sun Mar 01 02:51:35.681500 2026] [:error] [pid 30798:tid 30901] [client 20.104.96.199:31641] [client 20.104.96.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aaM5N8BkD73gO8wTona9EgAAAII"]
[Sun Mar 01 02:51:36.517497 2026] [:error] [pid 11920:tid 11938] [client 20.104.96.199:31619] [client 20.104.96.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aaM5OCzLNJUKxvBorrAdWwAAAY4"]
[Sun Mar 01 03:16:48.237224 2026] [:error] [pid 30798:tid 30918] [client 20.219.132.149:12380] [client 20.219.132.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.219.132.149, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaM_IMBkD73gO8wTonbefAAAAJM"]
[Sun Mar 01 03:16:56.687492 2026] [:error] [pid 30798:tid 30908] [client 20.219.132.149:12380] [client 20.219.132.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aaM_KMBkD73gO8wTonbepgAAAIk"]
[Sun Mar 01 03:16:57.245749 2026] [:error] [pid 30798:tid 30917] [client 20.219.132.149:18325] [client 20.219.132.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aaM_KcBkD73gO8wTonbeqgAAAJI"]
[Sun Mar 01 03:16:57.802481 2026] [:error] [pid 31190:tid 31230] [client 20.219.132.149:12037] [client 20.219.132.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aaM_KRfvwGOholYpM1HG5wAAANg"]
[Sun Mar 01 03:16:58.374682 2026] [:error] [pid 30797:tid 30892] [client 20.219.132.149:20706] [client 20.219.132.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aaM_KvQmcmSQL-3rvLAZBwAAAFU"]
[Sun Mar 01 03:56:57.730286 2026] [:error] [pid 10292:tid 10406] [client 43.166.244.251:52236] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaNIiQUd4thFAarmPH2AIgAAAEw"]
[Sun Mar 01 04:29:57.567534 2026] [:error] [pid 21263:tid 21275] [client 4.204.200.32:55688] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaNQRdAxjzLvN1upBhm1wwAAAMg"]
[Sun Mar 01 04:29:58.014819 2026] [:error] [pid 21159:tid 21243] [client 4.204.200.32:55696] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaNQRuLi3ouy1NZIkgoFKwAAAJY"]
[Sun Mar 01 04:29:58.470306 2026] [:error] [pid 21156:tid 21186] [client 4.204.200.32:18468] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaNQRqsaG_9IkG8N2p3ZMwAAABQ"]
[Sun Mar 01 04:29:58.888738 2026] [:error] [pid 24576:tid 24598] [client 4.204.200.32:18439] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaNQRovfb5CnctJh07263QAAARI"]
[Sun Mar 01 04:30:26.482997 2026] [:error] [pid 21159:tid 21232] [client 119.96.24.54:55950] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaNQYuLi3ouy1NZIkgoFbQAAAIs"]
[Sun Mar 01 04:40:18.111946 2026] [:error] [pid 24576:tid 24584] [client 103.65.236.153:60781] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aaNSsovfb5CnctJh073IEAAAAQU"]
[Sun Mar 01 05:53:38.439530 2026] [:error] [pid 8688:tid 8700] [client 94.205.136.38:22782] [client 94.205.136.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaNj4jHJ4Nn-RvulD0qtxgAAAUo"]
[Sun Mar 01 05:55:11.085609 2026] [:error] [pid 24576:tid 24591] [client 94.205.136.38:8585] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNkP4vfb5CnctJh070ZCwAAAQs"]
[Sun Mar 01 05:56:39.217084 2026] [:error] [pid 24576:tid 24601] [client 94.205.136.38:8586] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNkl4vfb5CnctJh070Z7QAAARU"]
[Sun Mar 01 05:58:14.255102 2026] [:error] [pid 8688:tid 8700] [client 94.205.136.38:22721] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNk9jHJ4Nn-RvulD0qz6QAAAUo"]
[Sun Mar 01 05:59:52.697742 2026] [:error] [pid 21263:tid 21274] [client 94.205.136.38:22724] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNlWNAxjzLvN1upBhn3tgAAAMc"]
[Sun Mar 01 06:01:22.210482 2026] [:error] [pid 24576:tid 24588] [client 94.205.136.38:22776] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNlsovfb5CnctJh070dhwAAAQk"]
[Sun Mar 01 06:03:05.014069 2026] [:error] [pid 8688:tid 8698] [client 94.205.136.38:22726] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNmGTHJ4Nn-RvulD0q4_gAAAUg"]
[Sun Mar 01 06:04:36.897447 2026] [:error] [pid 8688:tid 8699] [client 94.205.136.38:22764] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNmdDHJ4Nn-RvulD0q68AAAAUk"]
[Sun Mar 01 06:06:08.777286 2026] [:error] [pid 21263:tid 21281] [client 94.205.136.38:36967] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNm0NAxjzLvN1upBhn6mgAAAM4"]
[Sun Mar 01 06:07:42.199878 2026] [:error] [pid 24576:tid 24587] [client 94.205.136.38:8579] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNnLovfb5CnctJh070jhAAAAQg"]
[Sun Mar 01 06:09:10.197834 2026] [:error] [pid 21263:tid 21291] [client 94.205.136.38:8603] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNnhtAxjzLvN1upBhn8WAAAANg"]
[Sun Mar 01 06:10:38.267719 2026] [:error] [pid 24576:tid 24585] [client 94.205.136.38:36939] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNn3ovfb5CnctJh070lTwAAAQY"]
[Sun Mar 01 06:12:16.697410 2026] [:error] [pid 24576:tid 24584] [client 94.205.136.38:22737] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNoQIvfb5CnctJh070mawAAAQU"]
[Sun Mar 01 06:13:46.259535 2026] [:error] [pid 21263:tid 21286] [client 94.205.136.38:36969] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNomtAxjzLvN1upBhn-fgAAANM"]
[Sun Mar 01 06:15:16.338884 2026] [:error] [pid 21263:tid 21282] [client 94.205.136.38:8618] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNo9NAxjzLvN1upBhn_OQAAAM8"]
[Sun Mar 01 06:16:42.217329 2026] [:error] [pid 21263:tid 21273] [client 94.205.136.38:8616] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNpStAxjzLvN1upBhkAUwAAAMY"]
[Sun Mar 01 06:18:20.979277 2026] [:error] [pid 33539:tid 33559] [client 94.205.136.38:22778] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNprNCsLwBYg4s018unJwAAAc4"]
[Sun Mar 01 06:19:44.459829 2026] [:error] [pid 33976:tid 34000] [client 94.205.136.38:8607] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNqAAUyU3c4Xm_xpMSpPQAAAlY"]
[Sun Mar 01 06:21:02.198131 2026] [:error] [pid 34552:tid 34560] [client 94.205.136.38:8579] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNqTnBlU_DRqGi4yvv9SgAAAsU"]
[Sun Mar 01 06:22:22.216241 2026] [:error] [pid 34785:tid 34804] [client 94.205.136.38:8591] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNqnoC4dBNEGEcJx-NgrQAAAxE"]
[Sun Mar 01 06:23:48.264714 2026] [:error] [pid 35060:tid 35070] [client 94.205.136.38:8632] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNq9JL8JPoS_tq-tiXyUAAAA0g"]
[Sun Mar 01 06:25:24.729853 2026] [:error] [pid 33767:tid 33783] [client 94.205.136.38:8591] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNrVEGyeKe3MWsxvBj6mwAAAg0"]
[Sun Mar 01 06:26:38.299795 2026] [:error] [pid 21156:tid 21187] [client 94.205.136.38:22774] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNrnqsaG_9IkG8N2p34fgAAABU"]
[Sun Mar 01 06:27:41.045706 2026] [:error] [pid 21156:tid 21187] [client 94.205.136.38:8578] [client 94.205.136.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.136.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaNr3asaG_9IkG8N2p35SwAAABU"]
[Sun Mar 01 08:48:34.192307 2026] [:error] [pid 21159:tid 21244] [client 135.181.213.219:55362] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aaOM4uLi3ouy1NZIkgo7rQAAAJc"]
[Sun Mar 01 08:54:10.853288 2026] [:error] [pid 34286:tid 34289] [client 135.181.213.219:36322] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaOOMnPFxpCIhHW6XmmXPAAAAoE"]
[Sun Mar 01 08:54:39.244505 2026] [:error] [pid 34286:tid 34289] [client 135.181.213.219:56716] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaOOT3PFxpCIhHW6XmmXPgAAAoE"]
[Sun Mar 01 08:57:32.803351 2026] [:error] [pid 35654:tid 35662] [client 135.181.213.219:62096] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aaOO_EIPeuEwCTirofJ19gAAA8Q"]
[Sun Mar 01 08:57:46.182217 2026] [:error] [pid 34286:tid 34302] [client 135.181.213.219:9008] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aaOPCnPFxpCIhHW6XmmXvQAAAo4"]
[Sun Mar 01 08:57:56.837734 2026] [:error] [pid 34785:tid 34790] [client 135.181.213.219:2986] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aaOPFIC4dBNEGEcJx-Nl8QAAAwM"]
[Sun Mar 01 09:03:35.511690 2026] [:error] [pid 24576:tid 24595] [client 135.181.213.219:30630] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aaOQZ4vfb5CnctJh070vzAAAAQ8"]
[Sun Mar 01 09:09:25.987619 2026] [:error] [pid 24576:tid 24586] [client 135.181.213.219:36954] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaORxYvfb5CnctJh070v6wAAAQc"]
[Sun Mar 01 09:32:11.232176 2026] [:error] [pid 21263:tid 21285] [client 40.80.83.34:11020] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaOXG9AxjzLvN1upBhkFEQAAANI"]
[Sun Mar 01 09:32:12.477532 2026] [:error] [pid 35060:tid 35086] [client 40.80.83.34:18345] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaOXHJL8JPoS_tq-tiX2SAAAA1g"]
[Sun Mar 01 09:32:13.035529 2026] [:error] [pid 8688:tid 8702] [client 40.80.83.34:14666] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaOXHTHJ4Nn-RvulD0rNuAAAAUw"]
[Sun Mar 01 09:32:14.085591 2026] [:error] [pid 8688:tid 8702] [client 40.80.83.34:1087] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaOXHjHJ4Nn-RvulD0rNvQAAAUw"]
[Sun Mar 01 10:26:29.486284 2026] [:error] [pid 8688:tid 8702] [client 182.42.110.255:35190] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaOj1THJ4Nn-RvulD0rVtAAAAUw"]
[Sun Mar 01 12:04:23.422000 2026] [:error] [pid 33976:tid 34002] [client 172.71.164.166:13459] [client 172.71.164.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aaO6xwUyU3c4Xm_xpMTQXAAAAlg"]
[Sun Mar 01 12:49:54.453969 2026] [:error] [pid 34785:tid 34789] [client 170.106.113.235:41878] [client 170.106.113.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaPFcoC4dBNEGEcJx-OZfwAAAwI"]
[Sun Mar 01 14:12:21.770777 2026] [autoindex:error] [pid 38034:tid 38057] [client 20.151.11.238:16706] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:12:33.191044 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:21793] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aaPY0QxtfZjwlJok9K9v5QAAARU"]
[Sun Mar 01 14:12:35.092971 2026] [:error] [pid 38241:tid 38248] [client 20.151.11.238:2808] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aaPY0_KRPk6YnJBxw_wQ3gAAAMQ"]
[Sun Mar 01 14:12:37.046070 2026] [:error] [pid 38241:tid 38267] [client 20.151.11.238:21458] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aaPY1fKRPk6YnJBxw_wQ9gAAANc"]
[Sun Mar 01 14:12:39.558919 2026] [:error] [pid 44644:tid 44649] [client 20.151.11.238:21795] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xv.php"] [unique_id "aaPY153RJaXMcw3y9V9e5QAAAAI"]
[Sun Mar 01 14:12:41.867190 2026] [:error] [pid 44644:tid 44652] [client 20.151.11.238:17202] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aaPY2Z3RJaXMcw3y9V9e-QAAAAU"]
[Sun Mar 01 14:12:44.086973 2026] [:error] [pid 42619:tid 42627] [client 20.151.11.238:2775] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aaPY3B_zUXcYaZE4AOdw3QAAAUY"]
[Sun Mar 01 14:12:45.529133 2026] [:error] [pid 38241:tid 38267] [client 20.151.11.238:10902] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aaPY3fKRPk6YnJBxw_wRJAAAANc"]
[Sun Mar 01 14:12:47.660846 2026] [:error] [pid 44644:tid 44670] [client 20.151.11.238:7389] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x56.php"] [unique_id "aaPY353RJaXMcw3y9V9fBgAAABc"]
[Sun Mar 01 14:12:48.663759 2026] [:error] [pid 38034:tid 38057] [client 20.151.11.238:20779] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aaPY4AxtfZjwlJok9K9v_wAAARM"]
[Sun Mar 01 14:12:49.464250 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:13882] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aaPY4QxtfZjwlJok9K9wDAAAARU"]
[Sun Mar 01 14:12:50.593700 2026] [:error] [pid 42619:tid 42626] [client 20.151.11.238:2215] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aaPY4h_zUXcYaZE4AOdw8gAAAUU"]
[Sun Mar 01 14:12:52.033424 2026] [:error] [pid 38034:tid 38057] [client 20.151.11.238:25637] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htaccess.php"] [unique_id "aaPY5AxtfZjwlJok9K9wGwAAARM"]
[Sun Mar 01 14:12:54.653156 2026] [:error] [pid 44644:tid 44655] [client 20.151.11.238:25610] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaPY5p3RJaXMcw3y9V9fGgAAAAg"]
[Sun Mar 01 14:12:56.916620 2026] [:error] [pid 38034:tid 38050] [client 20.151.11.238:24140] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaPY6AxtfZjwlJok9K9wQQAAAQw"]
[Sun Mar 01 14:12:57.872714 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:13013] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaPY6QxtfZjwlJok9K9wSgAAARU"]
[Sun Mar 01 14:12:58.769134 2026] [:error] [pid 40750:tid 40764] [client 20.151.11.238:25615] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.php"] [unique_id "aaPY6gfBuk03yQKDyqvFcwAAAcs"]
[Sun Mar 01 14:12:59.876004 2026] [:error] [pid 44644:tid 44652] [client 20.151.11.238:17446] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aaPY653RJaXMcw3y9V9fIAAAAAU"]
[Sun Mar 01 14:13:00.797704 2026] [:error] [pid 44644:tid 44655] [client 20.151.11.238:22099] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aaPY7J3RJaXMcw3y9V9fIgAAAAg"]
[Sun Mar 01 14:13:01.503450 2026] [:error] [pid 44644:tid 44647] [client 20.151.11.238:25613] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aaPY7Z3RJaXMcw3y9V9fIwAAAAA"]
[Sun Mar 01 14:13:02.255182 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:20795] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x50.php"] [unique_id "aaPY7gxtfZjwlJok9K9wbAAAARg"]
[Sun Mar 01 14:13:03.599199 2026] [:error] [pid 38241:tid 38252] [client 20.151.11.238:25603] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aaPY7_KRPk6YnJBxw_wRUgAAAMg"]
[Sun Mar 01 14:13:05.007387 2026] [:error] [pid 38241:tid 38265] [client 20.151.11.238:6260] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aaPY8fKRPk6YnJBxw_wRXAAAANU"]
[Sun Mar 01 14:13:05.654803 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:6269] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aaPY8QxtfZjwlJok9K9wiQAAARU"]
[Sun Mar 01 14:13:06.207245 2026] [:error] [pid 41967:tid 41976] [client 20.151.11.238:6120] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fv.php"] [unique_id "aaPY8oO1bqY181I02eF5MgAAAIc"]
[Sun Mar 01 14:13:06.716641 2026] [:error] [pid 38241:tid 38265] [client 20.151.11.238:22102] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaPY8vKRPk6YnJBxw_wRZQAAANU"]
[Sun Mar 01 14:13:07.242914 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:2500] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaPY8wxtfZjwlJok9K9wkgAAARU"]
[Sun Mar 01 14:13:08.187297 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:16513] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaPY9AxtfZjwlJok9K9wlAAAARg"]
[Sun Mar 01 14:13:10.247502 2026] [:error] [pid 44644:tid 44652] [client 20.151.11.238:9051] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaPY9p3RJaXMcw3y9V9fQgAAAAU"]
[Sun Mar 01 14:13:11.835975 2026] [:error] [pid 44644:tid 44647] [client 20.151.11.238:5984] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aaPY953RJaXMcw3y9V9fVAAAAAA"]
[Sun Mar 01 14:13:12.834570 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:2250] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aaPY-AxtfZjwlJok9K9woQAAARU"]
[Sun Mar 01 14:13:14.113138 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:26826] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aaPY-gxtfZjwlJok9K9wqgAAARg"]
[Sun Mar 01 14:13:15.190456 2026] [:error] [pid 41780:tid 41796] [client 20.151.11.238:2254] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lsd.php"] [unique_id "aaPY-8ONkVoocLIqzy0G9AAAA80"]
[Sun Mar 01 14:13:16.275970 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:16553] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaPY_AxtfZjwlJok9K9wuwAAARU"]
[Sun Mar 01 14:13:17.366568 2026] [:error] [pid 38034:tid 38054] [client 20.151.11.238:18417] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaPY_QxtfZjwlJok9K9wxAAAARA"]
[Sun Mar 01 14:13:18.237342 2026] [:error] [pid 41780:tid 41788] [client 20.151.11.238:9414] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaPY_sONkVoocLIqzy0G-AAAA8U"]
[Sun Mar 01 14:13:18.888735 2026] [:error] [pid 38241:tid 38265] [client 20.151.11.238:26844] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aaPY_vKRPk6YnJBxw_wRlgAAANU"]
[Sun Mar 01 14:13:20.153503 2026] [:error] [pid 37032:tid 37034] [client 20.151.11.238:16520] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaPZAOu0U4o7eSImsVQKoQAAAYA"]
[Sun Mar 01 14:13:21.541922 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:9446] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaPZAQxtfZjwlJok9K9w0wAAARg"]
[Sun Mar 01 14:13:22.525071 2026] [:error] [pid 38034:tid 38054] [client 20.151.11.238:5963] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaPZAgxtfZjwlJok9K9w2gAAARA"]
[Sun Mar 01 14:13:23.630623 2026] [:error] [pid 44644:tid 44655] [client 20.151.11.238:16549] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "aaPZA53RJaXMcw3y9V9fbQAAAAg"]
[Sun Mar 01 14:13:24.428779 2026] [:error] [pid 38034:tid 38054] [client 20.151.11.238:12222] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaPZBAxtfZjwlJok9K9w5gAAARA"]
[Sun Mar 01 14:13:25.138576 2026] [:error] [pid 41780:tid 41791] [client 20.151.11.238:18368] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaPZBcONkVoocLIqzy0HAAAAA8g"]
[Sun Mar 01 14:13:27.340950 2026] [:error] [pid 38241:tid 38253] [client 20.151.11.238:12206] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaPZB_KRPk6YnJBxw_wRswAAAMk"]
[Sun Mar 01 14:13:28.093380 2026] [:error] [pid 38241:tid 38264] [client 20.151.11.238:9420] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gtc.php"] [unique_id "aaPZCPKRPk6YnJBxw_wRuQAAANQ"]
[Sun Mar 01 14:13:28.926676 2026] [:error] [pid 41967:tid 41977] [client 20.151.11.238:2271] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aaPZCIO1bqY181I02eF5UgAAAIg"]
[Sun Mar 01 14:13:29.542822 2026] [:error] [pid 38034:tid 38054] [client 20.151.11.238:12211] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aaPZCQxtfZjwlJok9K9xAAAAARA"]
[Sun Mar 01 14:13:30.187459 2026] [:error] [pid 44644:tid 44663] [client 20.151.11.238:22735] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aaPZCp3RJaXMcw3y9V9feAAAABA"]
[Sun Mar 01 14:13:31.824168 2026] [:error] [pid 38241:tid 38253] [client 20.151.11.238:9434] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atx.php"] [unique_id "aaPZC_KRPk6YnJBxw_wR0QAAAMk"]
[Sun Mar 01 14:13:47.999326 2026] [:error] [pid 38241:tid 38267] [client 20.151.11.238:7632] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aaPZG_KRPk6YnJBxw_wSVwAAANc"]
[Sun Mar 01 14:13:48.970751 2026] [:error] [pid 44644:tid 44670] [client 20.151.11.238:2953] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aaPZHJ3RJaXMcw3y9V9fuwAAABc"]
[Sun Mar 01 14:13:50.706157 2026] [:error] [pid 42619:tid 42641] [client 20.151.11.238:26605] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aaPZHh_zUXcYaZE4AOdxSQAAAVQ"]
[Sun Mar 01 14:13:52.206284 2026] [:error] [pid 41967:tid 41971] [client 20.151.11.238:14866] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aaPZIIO1bqY181I02eF5eQAAAII"]
[Sun Mar 01 14:13:54.312449 2026] [:error] [pid 38241:tid 38267] [client 20.151.11.238:2960] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaPZIvKRPk6YnJBxw_wSYwAAANc"]
[Sun Mar 01 14:13:55.765120 2026] [:error] [pid 38241:tid 38253] [client 20.151.11.238:9190] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aaPZI_KRPk6YnJBxw_wScgAAAMk"]
[Sun Mar 01 14:13:57.095302 2026] [:error] [pid 44644:tid 44670] [client 20.151.11.238:8287] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aaPZJZ3RJaXMcw3y9V9fyQAAABc"]
[Sun Mar 01 14:13:57.758842 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:26569] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aaPZJQxtfZjwlJok9K9xiwAAARg"]
[Sun Mar 01 14:13:59.006301 2026] [:error] [pid 41967:tid 41978] [client 20.151.11.238:2980] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cong.php"] [unique_id "aaPZJ4O1bqY181I02eF5jgAAAIk"]
[Sun Mar 01 14:13:59.889318 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:12609] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aaPZJwxtfZjwlJok9K9xlAAAARg"]
[Sun Mar 01 14:14:01.003610 2026] [:error] [pid 38034:tid 38057] [client 20.151.11.238:6351] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aaPZKQxtfZjwlJok9K9xlwAAARM"]
[Sun Mar 01 14:14:01.826248 2026] [:error] [pid 38034:tid 38050] [client 20.151.11.238:22867] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aaPZKQxtfZjwlJok9K9xnQAAAQw"]
[Sun Mar 01 14:14:02.580510 2026] [:error] [pid 42619:tid 42633] [client 20.151.11.238:8259] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aaPZKh_zUXcYaZE4AOdxZAAAAUw"]
[Sun Mar 01 14:14:03.368813 2026] [:error] [pid 38034:tid 38050] [client 20.151.11.238:8262] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaPZKwxtfZjwlJok9K9xpQAAAQw"]
[Sun Mar 01 14:14:04.213333 2026] [:error] [pid 42619:tid 42635] [client 20.151.11.238:16363] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaPZLB_zUXcYaZE4AOdxZQAAAU4"]
[Sun Mar 01 14:14:05.429955 2026] [:error] [pid 44644:tid 44655] [client 20.151.11.238:20927] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaPZLZ3RJaXMcw3y9V9f2AAAAAg"]
[Sun Mar 01 14:14:06.527175 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:14855] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaPZLgxtfZjwlJok9K9xuAAAARg"]
[Sun Mar 01 14:14:07.428319 2026] [:error] [pid 38241:tid 38263] [client 20.151.11.238:16378] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaPZL_KRPk6YnJBxw_wSlQAAANM"]
[Sun Mar 01 14:14:08.690641 2026] [:error] [pid 44644:tid 44648] [client 20.151.11.238:22891] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaPZMJ3RJaXMcw3y9V9f4wAAAAE"]
[Sun Mar 01 14:14:09.934118 2026] [:error] [pid 37032:tid 37040] [client 20.151.11.238:12862] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaPZMeu0U4o7eSImsVQLTgAAAYY"]
[Sun Mar 01 14:14:10.774570 2026] [:error] [pid 37032:tid 37056] [client 20.151.11.238:6342] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaPZMuu0U4o7eSImsVQLUgAAAZY"]
[Sun Mar 01 14:14:12.833060 2026] [:error] [pid 42619:tid 42621] [client 20.151.11.238:24933] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaPZNB_zUXcYaZE4AOdxbQAAAUA"]
[Sun Mar 01 14:14:14.146309 2026] [:error] [pid 41342:tid 41348] [client 20.151.11.238:22903] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaPZNo4iJ6RAS5CatDlBwQAAAgM"]
[Sun Mar 01 14:14:16.309253 2026] [:error] [pid 38241:tid 38246] [client 20.151.11.238:22853] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaPZOPKRPk6YnJBxw_wSpAAAAMI"]
[Sun Mar 01 14:14:18.700918 2026] [:error] [pid 38241:tid 38252] [client 20.151.11.238:12810] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aaPZOvKRPk6YnJBxw_wStgAAAMg"]
[Sun Mar 01 14:14:19.480495 2026] [:error] [pid 44644:tid 44652] [client 20.151.11.238:25472] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aaPZO53RJaXMcw3y9V9gEQAAAAU"]
[Sun Mar 01 14:14:21.038259 2026] [:error] [pid 38241:tid 38264] [client 20.151.11.238:25515] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aaPZPfKRPk6YnJBxw_wSyQAAANQ"]
[Sun Mar 01 14:14:22.633963 2026] [:error] [pid 38241:tid 38268] [client 20.151.11.238:17129] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aaPZPvKRPk6YnJBxw_wS2gAAANg"]
[Sun Mar 01 14:14:23.517862 2026] [:error] [pid 44644:tid 44650] [client 20.151.11.238:22855] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aaPZP53RJaXMcw3y9V9gJgAAAAM"]
[Sun Mar 01 14:14:24.255897 2026] [:error] [pid 38241:tid 38253] [client 20.151.11.238:8317] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaPZQPKRPk6YnJBxw_wS6AAAAMk"]
[Sun Mar 01 14:14:25.681647 2026] [:error] [pid 37032:tid 37037] [client 20.151.11.238:20899] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaPZQeu0U4o7eSImsVQLdQAAAYM"]
[Sun Mar 01 14:14:26.437100 2026] [:error] [pid 44644:tid 44658] [client 20.151.11.238:22881] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaPZQp3RJaXMcw3y9V9gNwAAAAs"]
[Sun Mar 01 14:14:27.652234 2026] [:error] [pid 44644:tid 44655] [client 20.151.11.238:25512] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaPZQ53RJaXMcw3y9V9gRwAAAAg"]
[Sun Mar 01 14:14:28.593009 2026] [:error] [pid 40750:tid 40767] [client 20.151.11.238:22871] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aaPZRAfBuk03yQKDyqvFjwAAAc4"]
[Sun Mar 01 14:14:29.451886 2026] [:error] [pid 44644:tid 44652] [client 20.151.11.238:8266] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aaPZRZ3RJaXMcw3y9V9gZgAAAAU"]
[Sun Mar 01 14:14:30.386892 2026] [:error] [pid 38034:tid 38057] [client 20.151.11.238:2329] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aaPZRgxtfZjwlJok9K9x8gAAARM"]
[Sun Mar 01 14:14:31.647628 2026] [:error] [pid 38034:tid 38050] [client 20.151.11.238:14854] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aaPZRwxtfZjwlJok9K9x_AAAAQw"]
[Sun Mar 01 14:14:33.034266 2026] [:error] [pid 37032:tid 37036] [client 20.151.11.238:20878] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaPZSeu0U4o7eSImsVQLlwAAAYI"]
[Sun Mar 01 14:14:34.390931 2026] [:error] [pid 42619:tid 42628] [client 20.151.11.238:8263] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaPZSh_zUXcYaZE4AOdxgwAAAUc"]
[Sun Mar 01 14:14:36.151586 2026] [:error] [pid 38034:tid 38050] [client 20.151.11.238:25509] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaPZTAxtfZjwlJok9K9yBQAAAQw"]
[Sun Mar 01 14:14:36.902719 2026] [:error] [pid 44644:tid 44650] [client 20.151.11.238:22879] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aaPZTJ3RJaXMcw3y9V9gmgAAAAM"]
[Sun Mar 01 14:14:38.114950 2026] [:error] [pid 38241:tid 38261] [client 20.151.11.238:22887] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaPZTvKRPk6YnJBxw_wTIAAAANE"]
[Sun Mar 01 14:14:39.290969 2026] [:error] [pid 42619:tid 42634] [client 20.151.11.238:6361] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaPZTx_zUXcYaZE4AOdxhwAAAU0"]
[Sun Mar 01 14:14:40.147224 2026] [:error] [pid 38241:tid 38265] [client 20.151.11.238:17136] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaPZUPKRPk6YnJBxw_wTKgAAANU"]
[Sun Mar 01 14:14:41.181831 2026] [:error] [pid 38241:tid 38264] [client 20.151.11.238:12624] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaPZUfKRPk6YnJBxw_wTMgAAANQ"]
[Sun Mar 01 14:14:42.274798 2026] [:error] [pid 44644:tid 44663] [client 20.151.11.238:20440] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaPZUp3RJaXMcw3y9V9gxAAAABA"]
[Sun Mar 01 14:14:43.210428 2026] [:error] [pid 37032:tid 37036] [client 20.151.11.238:8301] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaPZU-u0U4o7eSImsVQLwQAAAYI"]
[Sun Mar 01 14:14:44.093056 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:25488] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaPZVAxtfZjwlJok9K9yEQAAARg"]
[Sun Mar 01 14:14:45.358842 2026] [:error] [pid 38241:tid 38263] [client 20.151.11.238:20463] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaPZVfKRPk6YnJBxw_wTSAAAANM"]
[Sun Mar 01 14:15:08.725282 2026] [:error] [pid 42619:tid 42628] [client 20.151.11.238:2304] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aaPZbB_zUXcYaZE4AOdxsgAAAUc"]
[Sun Mar 01 14:15:10.370231 2026] [:error] [pid 42619:tid 42633] [client 20.151.11.238:8987] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aaPZbh_zUXcYaZE4AOdxswAAAUw"]
[Sun Mar 01 14:15:11.468717 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:20421] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aaPZbwxtfZjwlJok9K9ydAAAARg"]
[Sun Mar 01 14:15:12.475985 2026] [:error] [pid 38241:tid 38267] [client 20.151.11.238:8962] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aaPZcPKRPk6YnJBxw_wTpgAAANc"]
[Sun Mar 01 14:15:13.027992 2026] [:error] [pid 38034:tid 38062] [client 20.151.2.242:32588] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaPZcQxtfZjwlJok9K9yewAAARg"]
[Sun Mar 01 14:15:13.249099 2026] [:error] [pid 38034:tid 38057] [client 20.151.11.238:12809] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaPZcQxtfZjwlJok9K9yfAAAARM"]
[Sun Mar 01 14:15:13.965701 2026] [:error] [pid 38034:tid 38050] [client 20.151.2.242:32635] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaPZcQxtfZjwlJok9K9ygAAAAQw"]
[Sun Mar 01 14:15:14.713808 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:2311] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaPZcgxtfZjwlJok9K9yhgAAARg"]
[Sun Mar 01 14:15:15.244481 2026] [:error] [pid 44644:tid 44654] [client 20.151.2.242:21695] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaPZc53RJaXMcw3y9V9hcAAAAAc"]
[Sun Mar 01 14:15:15.900412 2026] [:error] [pid 44644:tid 44655] [client 20.151.2.242:46468] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaPZc53RJaXMcw3y9V9hdAAAAAg"]
[Sun Mar 01 14:15:16.492241 2026] [:error] [pid 44644:tid 44669] [client 20.151.11.238:17104] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaPZdJ3RJaXMcw3y9V9hewAAABY"]
[Sun Mar 01 14:15:18.723403 2026] [:error] [pid 44644:tid 44658] [client 20.151.11.238:8994] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaPZdp3RJaXMcw3y9V9hiQAAAAs"]
[Sun Mar 01 14:15:20.311173 2026] [:error] [pid 38241:tid 38244] [client 20.151.11.238:2605] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aaPZePKRPk6YnJBxw_wTxwAAAMA"]
[Sun Mar 01 14:15:21.214173 2026] [:error] [pid 38241:tid 38263] [client 20.151.11.238:21235] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aaPZefKRPk6YnJBxw_wTzwAAANM"]
[Sun Mar 01 14:15:22.819565 2026] [:error] [pid 38241:tid 38252] [client 20.151.11.238:12821] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aaPZevKRPk6YnJBxw_wT2gAAAMg"]
[Sun Mar 01 14:15:23.726611 2026] [:error] [pid 38241:tid 38259] [client 20.151.11.238:20441] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail.php"] [unique_id "aaPZe_KRPk6YnJBxw_wT4wAAAM8"]
[Sun Mar 01 14:15:24.925273 2026] [:error] [pid 37032:tid 37045] [client 20.151.11.238:20450] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPZfOu0U4o7eSImsVQMEAAAAYs"]
[Sun Mar 01 14:15:25.916499 2026] [:error] [pid 44644:tid 44648] [client 20.151.11.238:17035] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPZfZ3RJaXMcw3y9V9hpwAAAAE"]
[Sun Mar 01 14:15:26.855468 2026] [:error] [pid 44644:tid 44647] [client 20.151.11.238:2600] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPZfp3RJaXMcw3y9V9hsgAAAAA"]
[Sun Mar 01 14:15:28.575697 2026] [:error] [pid 38241:tid 38267] [client 20.151.11.238:2355] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPZgPKRPk6YnJBxw_wT_QAAANc"]
[Sun Mar 01 14:15:30.773149 2026] [:error] [pid 44644:tid 44663] [client 20.151.11.238:2564] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aaPZgp3RJaXMcw3y9V9hzgAAABA"]
[Sun Mar 01 14:15:31.598591 2026] [:error] [pid 38034:tid 38050] [client 20.151.11.238:2604] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aaPZgwxtfZjwlJok9K9ypgAAAQw"]
[Sun Mar 01 14:15:32.825779 2026] [:error] [pid 41780:tid 41796] [client 20.151.11.238:20477] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aaPZhMONkVoocLIqzy0HQQAAA80"]
[Sun Mar 01 14:15:33.807477 2026] [:error] [pid 41342:tid 41353] [client 20.151.11.238:22352] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sx.php"] [unique_id "aaPZhY4iJ6RAS5CatDlCGQAAAgg"]
[Sun Mar 01 14:15:35.632729 2026] [:error] [pid 37032:tid 37040] [client 20.151.11.238:17073] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaPZh-u0U4o7eSImsVQMMgAAAYY"]
[Sun Mar 01 14:15:37.418368 2026] [:error] [pid 40750:tid 40759] [client 20.151.11.238:22367] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaPZiQfBuk03yQKDyqvFnAAAAcY"]
[Sun Mar 01 14:15:38.874186 2026] [:error] [pid 44644:tid 44669] [client 20.151.11.238:9000] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaPZip3RJaXMcw3y9V9h7AAAABY"]
[Sun Mar 01 14:15:40.616443 2026] [:error] [pid 41342:tid 41362] [client 20.151.11.238:2365] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaPZjI4iJ6RAS5CatDlCHwAAAhE"]
[Sun Mar 01 14:15:42.345768 2026] [:error] [pid 44644:tid 44653] [client 20.151.11.238:21236] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaPZjp3RJaXMcw3y9V9iGwAAAAY"]
[Sun Mar 01 14:15:43.191370 2026] [:error] [pid 38034:tid 38057] [client 20.151.11.238:7070] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaPZjwxtfZjwlJok9K9ywwAAARM"]
[Sun Mar 01 14:15:44.771524 2026] [:error] [pid 44644:tid 44655] [client 20.151.11.238:10902] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaPZkJ3RJaXMcw3y9V9iNgAAAAg"]
[Sun Mar 01 14:15:45.626655 2026] [:error] [pid 42619:tid 42634] [client 20.151.11.238:22387] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "aaPZkR_zUXcYaZE4AOdxzwAAAU0"]
[Sun Mar 01 14:15:46.563299 2026] [:error] [pid 38241:tid 38250] [client 20.151.11.238:2749] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaPZkvKRPk6YnJBxw_wUXQAAAMY"]
[Sun Mar 01 14:15:47.304101 2026] [:error] [pid 42619:tid 42629] [client 20.151.11.238:2737] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaPZkx_zUXcYaZE4AOdx1wAAAUg"]
[Sun Mar 01 14:15:48.372727 2026] [:error] [pid 37032:tid 37051] [client 20.151.11.238:2683] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaPZlOu0U4o7eSImsVQMegAAAZE"]
[Sun Mar 01 14:15:48.877743 2026] [:error] [pid 41967:tid 41971] [client 20.151.11.238:14195] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaPZlIO1bqY181I02eF6EgAAAII"]
[Sun Mar 01 14:15:49.575558 2026] [:error] [pid 38034:tid 38060] [client 20.151.11.238:11329] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aaPZlQxtfZjwlJok9K9y0wAAARY"]
[Sun Mar 01 14:15:50.455342 2026] [:error] [pid 37032:tid 37043] [client 20.151.11.238:14180] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aaPZluu0U4o7eSImsVQMkAAAAYk"]
[Sun Mar 01 14:15:51.767116 2026] [:error] [pid 41967:tid 41977] [client 20.151.11.238:11142] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aaPZl4O1bqY181I02eF6GgAAAIg"]
[Sun Mar 01 14:15:53.247649 2026] [:error] [pid 37032:tid 37050] [client 20.151.11.238:16673] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aaPZmeu0U4o7eSImsVQMpgAAAZA"]
[Sun Mar 01 14:15:54.050333 2026] [:error] [pid 37032:tid 37054] [client 20.151.11.238:16907] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaPZmuu0U4o7eSImsVQMqgAAAZQ"]
[Sun Mar 01 14:15:55.242147 2026] [:error] [pid 42619:tid 42624] [client 20.151.11.238:28688] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaPZmx_zUXcYaZE4AOdx-wAAAUM"]
[Sun Mar 01 14:15:57.288506 2026] [:error] [pid 38241:tid 38257] [client 20.151.11.238:9223] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaPZnfKRPk6YnJBxw_wUjQAAAM0"]
[Sun Mar 01 14:15:58.382051 2026] [:error] [pid 44644:tid 44669] [client 20.151.11.238:25580] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "aaPZnp3RJaXMcw3y9V9iYgAAABY"]
[Sun Mar 01 14:16:00.949151 2026] [:error] [pid 40750:tid 40755] [client 20.151.11.238:8429] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aaPZoAfBuk03yQKDyqvFoAAAAcI"]
[Sun Mar 01 14:16:03.523782 2026] [:error] [pid 40750:tid 40770] [client 20.151.11.238:16945] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aaPZowfBuk03yQKDyqvFowAAAdE"]
[Sun Mar 01 14:16:05.922860 2026] [:error] [pid 44644:tid 44670] [client 20.151.11.238:17911] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aaPZpZ3RJaXMcw3y9V9inAAAABc"]
[Sun Mar 01 14:16:06.828400 2026] [:error] [pid 44644:tid 44650] [client 20.151.11.238:16020] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/index.php"] [unique_id "aaPZpp3RJaXMcw3y9V9ipwAAAAM"]
[Sun Mar 01 14:16:28.220737 2026] [:error] [pid 42619:tid 42627] [client 20.151.11.238:2873] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaPZvB_zUXcYaZE4AOdyWQAAAUY"]
[Sun Mar 01 14:16:31.643338 2026] [:error] [pid 41967:tid 41987] [client 20.151.11.238:6666] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaPZv4O1bqY181I02eF6TwAAAJI"]
[Sun Mar 01 14:16:36.103269 2026] [autoindex:error] [pid 44644:tid 44654] [client 20.151.11.238:17276] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 14:16:36.314304 2026] [:error] [pid 44644:tid 44661] [client 20.151.11.238:17276] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaPZxJ3RJaXMcw3y9V9jbwAAAA4"]
[Sun Mar 01 14:16:39.514231 2026] [:error] [pid 37032:tid 37054] [client 20.151.11.238:6710] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaPZx-u0U4o7eSImsVQNYQAAAZQ"]
[Sun Mar 01 14:16:43.825881 2026] [proxy_fcgi:error] [pid 44644:tid 44647] [client 20.151.11.238:22703] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 14:16:46.316152 2026] [:error] [pid 44644:tid 44654] [client 20.151.11.238:22703] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaPZzp3RJaXMcw3y9V9j1AAAAAc"]
[Sun Mar 01 14:16:47.310084 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:13541] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaPZzwxtfZjwlJok9K9zSwAAARg"]
[Sun Mar 01 14:16:48.188821 2026] [:error] [pid 41967:tid 41982] [client 20.151.11.238:2127] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaPZ0IO1bqY181I02eF6ZAAAAI0"]
[Sun Mar 01 14:16:48.813619 2026] [:error] [pid 37032:tid 37053] [client 20.151.11.238:13514] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/security.php"] [unique_id "aaPZ0Ou0U4o7eSImsVQNcgAAAZM"]
[Sun Mar 01 14:16:49.557031 2026] [:error] [pid 44644:tid 44647] [client 20.151.11.238:22707] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaPZ0Z3RJaXMcw3y9V9j2gAAAAA"]
[Sun Mar 01 14:16:50.332793 2026] [:error] [pid 37032:tid 37036] [client 20.151.11.238:22635] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaPZ0uu0U4o7eSImsVQNeAAAAYI"]
[Sun Mar 01 14:16:51.425302 2026] [:error] [pid 44644:tid 44666] [client 20.151.11.238:2117] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaPZ053RJaXMcw3y9V9j4AAAABM"]
[Sun Mar 01 14:16:51.983283 2026] [:error] [pid 42619:tid 42632] [client 20.151.11.238:19804] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaPZ0x_zUXcYaZE4AOdyjQAAAUs"]
[Sun Mar 01 14:16:52.683174 2026] [:error] [pid 38241:tid 38264] [client 20.151.11.238:2118] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aaPZ1PKRPk6YnJBxw_wVXwAAANQ"]
[Sun Mar 01 14:16:53.943342 2026] [:error] [pid 44644:tid 44653] [client 20.151.11.238:5870] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aaPZ1Z3RJaXMcw3y9V9j5QAAAAY"]
[Sun Mar 01 14:16:55.048521 2026] [:error] [pid 41342:tid 41350] [client 20.151.11.238:13506] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aaPZ144iJ6RAS5CatDlCNgAAAgU"]
[Sun Mar 01 14:16:55.809874 2026] [:error] [pid 40750:tid 40767] [client 20.151.11.238:6606] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aaPZ1wfBuk03yQKDyqvFuAAAAc4"]
[Sun Mar 01 14:16:56.460008 2026] [:error] [pid 41780:tid 41799] [client 20.151.11.238:13530] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaPZ2MONkVoocLIqzy0HjwAAA9A"]
[Sun Mar 01 14:16:57.631336 2026] [:error] [pid 38241:tid 38250] [client 20.151.11.238:19794] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaPZ2fKRPk6YnJBxw_wVZgAAAMY"]
[Sun Mar 01 14:16:58.421038 2026] [:error] [pid 38034:tid 38050] [client 20.151.11.238:10283] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaPZ2gxtfZjwlJok9K9zZQAAAQw"]
[Sun Mar 01 14:16:59.067630 2026] [:error] [pid 42619:tid 42629] [client 20.151.11.238:18789] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaPZ2x_zUXcYaZE4AOdylQAAAUg"]
[Sun Mar 01 14:16:59.742927 2026] [:error] [pid 41780:tid 41793] [client 20.151.11.238:6639] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaPZ28ONkVoocLIqzy0HmAAAA8o"]
[Sun Mar 01 14:17:00.416691 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:22633] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aaPZ3AxtfZjwlJok9K9zagAAARg"]
[Sun Mar 01 14:17:01.219805 2026] [:error] [pid 37032:tid 37057] [client 20.151.11.238:13505] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aaPZ3eu0U4o7eSImsVQNiQAAAZc"]
[Sun Mar 01 14:17:01.952233 2026] [:error] [pid 38241:tid 38247] [client 20.151.11.238:18784] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "aaPZ3fKRPk6YnJBxw_wVagAAAMM"]
[Sun Mar 01 14:17:02.750531 2026] [:error] [pid 44644:tid 44647] [client 20.151.11.238:13550] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaPZ3p3RJaXMcw3y9V9j_gAAAAA"]
[Sun Mar 01 14:17:03.236923 2026] [:error] [pid 38241:tid 38254] [client 20.151.11.238:18799] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaPZ3_KRPk6YnJBxw_wVbwAAAMo"]
[Sun Mar 01 14:17:04.328342 2026] [:error] [pid 42619:tid 42630] [client 20.151.11.238:5834] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaPZ4B_zUXcYaZE4AOdypQAAAUk"]
[Sun Mar 01 14:17:06.074241 2026] [:error] [pid 44644:tid 44655] [client 20.151.11.238:10255] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaPZ4p3RJaXMcw3y9V9kCAAAAAg"]
[Sun Mar 01 14:17:06.743342 2026] [:error] [pid 44644:tid 44647] [client 20.151.11.238:16766] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aaPZ4p3RJaXMcw3y9V9kEAAAAAA"]
[Sun Mar 01 14:17:07.586047 2026] [:error] [pid 38034:tid 38057] [client 20.151.11.238:2150] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aaPZ4wxtfZjwlJok9K9zfQAAARM"]
[Sun Mar 01 14:17:08.521640 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:6610] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aaPZ5AxtfZjwlJok9K9zhgAAARg"]
[Sun Mar 01 14:17:09.447833 2026] [:error] [pid 38241:tid 38253] [client 20.151.11.238:22600] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "aaPZ5fKRPk6YnJBxw_wVhAAAAMk"]
[Sun Mar 01 14:17:09.989203 2026] [:error] [pid 38241:tid 38251] [client 20.151.11.238:18794] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaPZ5fKRPk6YnJBxw_wVigAAAMc"]
[Sun Mar 01 14:17:10.520832 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:2116] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaPZ5gxtfZjwlJok9K9znAAAARg"]
[Sun Mar 01 14:17:11.430336 2026] [:error] [pid 38034:tid 38057] [client 20.151.11.238:2124] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaPZ5wxtfZjwlJok9K9zowAAARM"]
[Sun Mar 01 14:17:12.108799 2026] [:error] [pid 38034:tid 38057] [client 20.151.11.238:2142] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaPZ6AxtfZjwlJok9K9zpgAAARM"]
[Sun Mar 01 14:17:13.348262 2026] [:error] [pid 37032:tid 37049] [client 20.151.11.238:22713] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaPZ6eu0U4o7eSImsVQNtgAAAY8"]
[Sun Mar 01 14:17:14.107207 2026] [:error] [pid 38241:tid 38247] [client 20.151.11.238:5837] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaPZ6vKRPk6YnJBxw_wVkgAAAMM"]
[Sun Mar 01 14:17:15.490222 2026] [:error] [pid 37032:tid 37052] [client 20.151.11.238:2145] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaPZ6-u0U4o7eSImsVQNxAAAAZI"]
[Sun Mar 01 14:17:16.371325 2026] [:error] [pid 44644:tid 44661] [client 20.151.11.238:22691] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaPZ7J3RJaXMcw3y9V9kMwAAAA4"]
[Sun Mar 01 14:17:17.099173 2026] [:error] [pid 37032:tid 37053] [client 20.151.11.238:5856] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaPZ7eu0U4o7eSImsVQNyAAAAZM"]
[Sun Mar 01 14:17:17.659073 2026] [:error] [pid 38034:tid 38050] [client 20.151.11.238:2144] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaPZ7QxtfZjwlJok9K9zugAAAQw"]
[Sun Mar 01 14:17:18.511193 2026] [:error] [pid 40750:tid 40755] [client 20.151.11.238:16757] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaPZ7gfBuk03yQKDyqvFvwAAAcI"]
[Sun Mar 01 14:17:19.705330 2026] [:error] [pid 38241:tid 38251] [client 20.151.11.238:22649] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaPZ7_KRPk6YnJBxw_wVmAAAAMc"]
[Sun Mar 01 14:17:20.543408 2026] [:error] [pid 38034:tid 38060] [client 20.151.11.238:6613] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/log.php"] [unique_id "aaPZ8AxtfZjwlJok9K9zwwAAARY"]
[Sun Mar 01 14:17:21.165938 2026] [:error] [pid 38034:tid 38057] [client 20.151.11.238:5886] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/log.php"] [unique_id "aaPZ8QxtfZjwlJok9K9zxAAAARM"]
[Sun Mar 01 14:17:21.990933 2026] [:error] [pid 37032:tid 37037] [client 20.151.11.238:16753] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/log.php"] [unique_id "aaPZ8eu0U4o7eSImsVQN1wAAAYM"]
[Sun Mar 01 14:17:22.699547 2026] [:error] [pid 37032:tid 37054] [client 20.151.11.238:2129] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/log.php"] [unique_id "aaPZ8uu0U4o7eSImsVQN2wAAAZQ"]
[Sun Mar 01 14:17:23.202820 2026] [:error] [pid 44644:tid 44648] [client 20.151.11.238:22608] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aaPZ853RJaXMcw3y9V9kSQAAAAE"]
[Sun Mar 01 14:17:23.721546 2026] [:error] [pid 37032:tid 37051] [client 20.151.11.238:19780] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aaPZ8-u0U4o7eSImsVQN4QAAAZE"]
[Sun Mar 01 14:17:24.310803 2026] [:error] [pid 38241:tid 38261] [client 20.151.11.238:16735] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aaPZ9PKRPk6YnJBxw_wVogAAANE"]
[Sun Mar 01 14:17:25.130197 2026] [:error] [pid 44644:tid 44648] [client 20.151.11.238:13551] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aaPZ9Z3RJaXMcw3y9V9kVAAAAAE"]
[Sun Mar 01 14:17:25.924810 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:6605] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aaPZ9QxtfZjwlJok9K9zzQAAARU"]
[Sun Mar 01 14:17:26.773105 2026] [:error] [pid 44644:tid 44669] [client 20.151.11.238:2119] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aaPZ9p3RJaXMcw3y9V9kWQAAABY"]
[Sun Mar 01 14:17:27.520284 2026] [:error] [pid 38241:tid 38247] [client 20.151.11.238:6592] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aaPZ9_KRPk6YnJBxw_wVqgAAAMM"]
[Sun Mar 01 14:17:28.027158 2026] [:error] [pid 44644:tid 44653] [client 20.151.11.238:13524] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "aaPZ-J3RJaXMcw3y9V9kXwAAAAY"]
[Sun Mar 01 14:17:28.647064 2026] [:error] [pid 37032:tid 37054] [client 20.151.11.238:19789] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaPZ-Ou0U4o7eSImsVQN9gAAAZQ"]
[Sun Mar 01 14:17:29.223152 2026] [:error] [pid 42619:tid 42638] [client 20.151.11.238:22628] [client 20.151.11.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaPZ-R_zUXcYaZE4AOdywQAAAVE"]
[Sun Mar 01 14:17:29.956108 2026] [:error] [pid 41780:tid 41796] [client 20.151.11.238:2159] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaPZ-cONkVoocLIqzy0HuAAAA80"]
[Sun Mar 01 14:17:30.792338 2026] [:error] [pid 42619:tid 42633] [client 20.151.11.238:22630] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaPZ-h_zUXcYaZE4AOdyxwAAAUw"]
[Sun Mar 01 14:17:32.076698 2026] [:error] [pid 38034:tid 38047] [client 20.151.11.238:18782] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaPZ_AxtfZjwlJok9K9z2wAAAQk"]
[Sun Mar 01 14:17:32.879769 2026] [:error] [pid 41967:tid 41989] [client 20.151.11.238:18769] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aaPZ_IO1bqY181I02eF6ngAAAJQ"]
[Sun Mar 01 14:17:33.512411 2026] [:error] [pid 40750:tid 40753] [client 20.151.11.238:5862] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aaPZ_QfBuk03yQKDyqvFwwAAAcA"]
[Sun Mar 01 14:17:34.051668 2026] [:error] [pid 37032:tid 37036] [client 20.151.11.238:5852] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aaPZ_uu0U4o7eSImsVQOEAAAAYI"]
[Sun Mar 01 14:17:34.943709 2026] [:error] [pid 38034:tid 38047] [client 20.151.11.238:19838] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aaPZ_gxtfZjwlJok9K9z7wAAAQk"]
[Sun Mar 01 14:17:35.695163 2026] [:error] [pid 38034:tid 38047] [client 20.151.11.238:6646] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aaPZ_wxtfZjwlJok9K9z9QAAAQk"]
[Sun Mar 01 14:17:36.731011 2026] [:error] [pid 38034:tid 38053] [client 20.151.11.238:22639] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aaPaAAxtfZjwlJok9K9z_AAAAQ8"]
[Sun Mar 01 14:17:37.808820 2026] [:error] [pid 44644:tid 44647] [client 20.151.11.238:22664] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aaPaAZ3RJaXMcw3y9V9kkAAAAAA"]
[Sun Mar 01 14:17:38.905751 2026] [:error] [pid 38241:tid 38254] [client 20.151.11.238:2151] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aaPaAvKRPk6YnJBxw_wVvQAAAMo"]
[Sun Mar 01 14:17:39.943424 2026] [:error] [pid 37032:tid 37046] [client 20.151.11.238:18771] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o1.php"] [unique_id "aaPaA-u0U4o7eSImsVQOMAAAAYw"]
[Sun Mar 01 14:17:41.371831 2026] [:error] [pid 38241:tid 38266] [client 20.151.11.238:19811] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aaPaBfKRPk6YnJBxw_wVxQAAANY"]
[Sun Mar 01 14:17:42.391284 2026] [:error] [pid 37032:tid 37048] [client 20.151.11.238:2172] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aaPaBuu0U4o7eSImsVQOPwAAAY4"]
[Sun Mar 01 14:17:43.780445 2026] [:error] [pid 38034:tid 38053] [client 20.151.11.238:19819] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aaPaBwxtfZjwlJok9K90CQAAAQ8"]
[Sun Mar 01 14:17:44.910766 2026] [:error] [pid 37032:tid 37036] [client 20.151.11.238:6598] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "aaPaCOu0U4o7eSImsVQOTQAAAYI"]
[Sun Mar 01 14:17:59.369895 2026] [:error] [pid 44644:tid 44654] [client 20.151.11.238:22697] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aaPaF53RJaXMcw3y9V9k-AAAAAc"]
[Sun Mar 01 14:18:00.190573 2026] [:error] [pid 38034:tid 38050] [client 20.151.11.238:25512] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aaPaGAxtfZjwlJok9K90SQAAAQw"]
[Sun Mar 01 14:18:00.803783 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:22638] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aaPaGAxtfZjwlJok9K90TAAAARg"]
[Sun Mar 01 14:18:02.025119 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:22671] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ave.php"] [unique_id "aaPaGgxtfZjwlJok9K90UwAAARU"]
[Sun Mar 01 14:18:03.280486 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:16706] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaPaGwxtfZjwlJok9K90XAAAARU"]
[Sun Mar 01 14:18:04.203327 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:2155] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaPaHAxtfZjwlJok9K90ZAAAARU"]
[Sun Mar 01 14:18:05.847766 2026] [:error] [pid 37032:tid 37052] [client 20.151.11.238:19800] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaPaHeu0U4o7eSImsVQOuAAAAZI"]
[Sun Mar 01 14:18:07.387349 2026] [:error] [pid 41780:tid 41804] [client 20.151.11.238:5855] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wrt.php"] [unique_id "aaPaH8ONkVoocLIqzy0H0QAAA9U"]
[Sun Mar 01 14:18:08.237994 2026] [:error] [pid 38034:tid 38038] [client 20.151.11.238:19825] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aaPaIAxtfZjwlJok9K90awAAAQI"]
[Sun Mar 01 14:18:09.131342 2026] [:error] [pid 44644:tid 44669] [client 20.151.11.238:22686] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aaPaIZ3RJaXMcw3y9V9lGwAAABY"]
[Sun Mar 01 14:18:09.759333 2026] [:error] [pid 44644:tid 44648] [client 20.151.11.238:19834] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aaPaIZ3RJaXMcw3y9V9lHwAAAAE"]
[Sun Mar 01 14:18:10.458619 2026] [:error] [pid 38241:tid 38244] [client 20.151.11.238:13538] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "aaPaIvKRPk6YnJBxw_wV-gAAAMA"]
[Sun Mar 01 14:18:11.070861 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:22700] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaPaIwxtfZjwlJok9K90ewAAARU"]
[Sun Mar 01 14:18:11.823549 2026] [:error] [pid 38034:tid 38058] [client 20.151.11.238:19815] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaPaIwxtfZjwlJok9K90hQAAARQ"]
[Sun Mar 01 14:18:12.853547 2026] [:error] [pid 37032:tid 37036] [client 20.151.11.238:22666] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaPaJOu0U4o7eSImsVQOxAAAAYI"]
[Sun Mar 01 14:18:13.504468 2026] [:error] [pid 37032:tid 37042] [client 20.151.11.238:19832] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aaPaJeu0U4o7eSImsVQOyAAAAYg"]
[Sun Mar 01 14:18:14.324080 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:2148] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aaPaJgxtfZjwlJok9K90nQAAARg"]
[Sun Mar 01 14:18:15.431467 2026] [:error] [pid 38034:tid 38038] [client 20.151.11.238:5829] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aaPaJwxtfZjwlJok9K90qwAAAQI"]
[Sun Mar 01 14:18:15.897198 2026] [:error] [pid 37032:tid 37056] [client 20.151.11.238:13559] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aaPaJ-u0U4o7eSImsVQOzgAAAZY"]
[Sun Mar 01 14:18:16.389025 2026] [:error] [pid 38034:tid 38058] [client 20.151.11.238:16719] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "aaPaKAxtfZjwlJok9K90sgAAARQ"]
[Sun Mar 01 14:18:17.102143 2026] [:error] [pid 41967:tid 41975] [client 20.151.11.238:10294] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aaPaKYO1bqY181I02eF6wAAAAIY"]
[Sun Mar 01 14:18:18.365746 2026] [:error] [pid 41967:tid 41981] [client 20.151.11.238:22632] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aaPaKoO1bqY181I02eF6wgAAAIw"]
[Sun Mar 01 14:18:18.978279 2026] [:error] [pid 38241:tid 38267] [client 20.151.11.238:22601] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aaPaKvKRPk6YnJBxw_wWBgAAANc"]
[Sun Mar 01 14:18:19.972874 2026] [:error] [pid 44644:tid 44654] [client 20.151.11.238:5866] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file7.php"] [unique_id "aaPaK53RJaXMcw3y9V9lMAAAAAc"]
[Sun Mar 01 14:18:20.904295 2026] [:error] [pid 44644:tid 44669] [client 20.151.11.238:19130] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aaPaLJ3RJaXMcw3y9V9lOQAAABY"]
[Sun Mar 01 14:18:21.954533 2026] [:error] [pid 38034:tid 38038] [client 20.151.11.238:10255] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aaPaLQxtfZjwlJok9K90yAAAAQI"]
[Sun Mar 01 14:18:23.173951 2026] [:error] [pid 38034:tid 38038] [client 20.151.11.238:18767] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aaPaLwxtfZjwlJok9K900AAAAQI"]
[Sun Mar 01 14:18:24.390002 2026] [:error] [pid 44644:tid 44648] [client 20.151.11.238:19779] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aaPaMJ3RJaXMcw3y9V9lQQAAAAE"]
[Sun Mar 01 14:18:25.705125 2026] [:error] [pid 44644:tid 44669] [client 20.151.11.238:19826] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaPaMZ3RJaXMcw3y9V9lQgAAABY"]
[Sun Mar 01 14:18:27.421912 2026] [:error] [pid 38241:tid 38251] [client 20.151.11.238:19818] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaPaM_KRPk6YnJBxw_wWGwAAAMc"]
[Sun Mar 01 14:18:28.967437 2026] [:error] [pid 38034:tid 38047] [client 20.151.11.238:18772] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaPaNAxtfZjwlJok9K909gAAAQk"]
[Sun Mar 01 14:18:29.687902 2026] [:error] [pid 44644:tid 44661] [client 20.151.11.238:5864] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaPaNZ3RJaXMcw3y9V9lSQAAAA4"]
[Sun Mar 01 14:18:30.233768 2026] [:error] [pid 44644:tid 44669] [client 20.151.11.238:18792] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aaPaNp3RJaXMcw3y9V9lYgAAABY"]
[Sun Mar 01 14:18:32.196671 2026] [:error] [pid 44644:tid 44654] [client 20.151.11.238:6599] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aaPaOJ3RJaXMcw3y9V9lcQAAAAc"]
[Sun Mar 01 14:18:33.502016 2026] [:error] [pid 44644:tid 44654] [client 20.151.11.238:13533] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aaPaOZ3RJaXMcw3y9V9ldgAAAAc"]
[Sun Mar 01 14:18:34.392254 2026] [:error] [pid 41967:tid 41987] [client 20.151.11.238:2168] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "aaPaOoO1bqY181I02eF6yAAAAJI"]
[Sun Mar 01 14:18:35.095686 2026] [:error] [pid 44644:tid 44648] [client 20.151.11.238:13548] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aaPaO53RJaXMcw3y9V9legAAAAE"]
[Sun Mar 01 14:18:35.773811 2026] [:error] [pid 44644:tid 44648] [client 20.151.11.238:19098] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aaPaO53RJaXMcw3y9V9lggAAAAE"]
[Sun Mar 01 14:18:36.987683 2026] [:error] [pid 44644:tid 44648] [client 20.151.11.238:13509] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aaPaPJ3RJaXMcw3y9V9liwAAAAE"]
[Sun Mar 01 14:18:38.258269 2026] [:error] [pid 41967:tid 41975] [client 20.151.11.238:22716] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aaPaPoO1bqY181I02eF6zgAAAIY"]
[Sun Mar 01 14:18:39.079925 2026] [:error] [pid 41967:tid 41982] [client 20.151.11.238:6643] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaPaP4O1bqY181I02eF60gAAAI0"]
[Sun Mar 01 14:18:39.644572 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:13562] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaPaPwxtfZjwlJok9K91NAAAARg"]
[Sun Mar 01 14:18:40.577423 2026] [:error] [pid 38241:tid 38253] [client 20.151.11.238:6704] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaPaQPKRPk6YnJBxw_wWfQAAAMk"]
[Sun Mar 01 14:18:41.370809 2026] [:error] [pid 44644:tid 44648] [client 20.151.11.238:17255] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaPaQZ3RJaXMcw3y9V9lmwAAAAE"]
[Sun Mar 01 14:18:43.030766 2026] [:error] [pid 42619:tid 42632] [client 20.151.11.238:2834] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aaPaQx_zUXcYaZE4AOdzmAAAAUs"]
[Sun Mar 01 14:18:43.706459 2026] [:error] [pid 42619:tid 42631] [client 20.151.11.238:9641] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aaPaQx_zUXcYaZE4AOdzmwAAAUo"]
[Sun Mar 01 14:18:44.594306 2026] [:error] [pid 38034:tid 38036] [client 20.151.11.238:2861] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aaPaRAxtfZjwlJok9K91WQAAAQA"]
[Sun Mar 01 14:18:45.987931 2026] [:error] [pid 41342:tid 41356] [client 20.151.11.238:26984] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class9.php"] [unique_id "aaPaRY4iJ6RAS5CatDlCZwAAAgs"]
[Sun Mar 01 14:18:47.591892 2026] [:error] [pid 38241:tid 38264] [client 20.151.11.238:10953] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aaPaR_KRPk6YnJBxw_wWnAAAANQ"]
[Sun Mar 01 14:18:48.893461 2026] [:error] [pid 44644:tid 44669] [client 20.151.11.238:27005] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aaPaSJ3RJaXMcw3y9V9ltwAAABY"]
[Sun Mar 01 14:18:49.556466 2026] [:error] [pid 37032:tid 37053] [client 20.151.11.238:25581] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aaPaSeu0U4o7eSImsVQPEQAAAZM"]
[Sun Mar 01 14:18:50.229852 2026] [:error] [pid 44644:tid 44666] [client 20.151.11.238:19869] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "aaPaSp3RJaXMcw3y9V9lvwAAABM"]
[Sun Mar 01 14:18:51.062767 2026] [:error] [pid 41780:tid 41803] [client 20.151.11.238:14980] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aaPaS8ONkVoocLIqzy0H5AAAA9Q"]
[Sun Mar 01 14:18:52.001202 2026] [:error] [pid 38034:tid 38053] [client 20.151.11.238:16685] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aaPaSwxtfZjwlJok9K91fwAAAQ8"]
[Sun Mar 01 14:18:53.273731 2026] [:error] [pid 41967:tid 41972] [client 20.151.11.238:22381] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aaPaTYO1bqY181I02eF63wAAAIM"]
[Sun Mar 01 14:18:54.074013 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:6388] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "aaPaTgxtfZjwlJok9K91kwAAARg"]
[Sun Mar 01 14:18:55.400385 2026] [:error] [pid 38034:tid 38036] [client 20.151.11.238:15794] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aaPaTwxtfZjwlJok9K91ogAAAQA"]
[Sun Mar 01 14:18:56.719004 2026] [:error] [pid 41342:tid 41357] [client 20.151.11.238:9424] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "aaPaUI4iJ6RAS5CatDlCbwAAAgw"]
[Sun Mar 01 14:19:11.227708 2026] [:error] [pid 38034:tid 38053] [client 20.151.11.238:9052] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaPaXwxtfZjwlJok9K914QAAAQ8"]
[Sun Mar 01 14:19:11.672132 2026] [:error] [pid 37032:tid 37039] [client 20.151.11.238:6243] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaPaX-u0U4o7eSImsVQPOwAAAYU"]
[Sun Mar 01 14:19:12.577294 2026] [:error] [pid 44644:tid 44669] [client 20.151.11.238:14028] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaPaYJ3RJaXMcw3y9V9l-AAAABY"]
[Sun Mar 01 14:19:13.663020 2026] [:error] [pid 41967:tid 41993] [client 20.151.11.238:17427] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elp.php"] [unique_id "aaPaYYO1bqY181I02eF7EAAAAJg"]
[Sun Mar 01 14:19:14.606046 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:17169] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aaPaYgxtfZjwlJok9K919AAAARg"]
[Sun Mar 01 14:19:15.540353 2026] [:error] [pid 38034:tid 38060] [client 20.151.11.238:22329] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aaPaYwxtfZjwlJok9K91-QAAARY"]
[Sun Mar 01 14:19:16.504400 2026] [:error] [pid 44644:tid 44660] [client 20.151.11.238:2796] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aaPaZJ3RJaXMcw3y9V9mEgAAAA0"]
[Sun Mar 01 14:19:17.624776 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:8026] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtz.php"] [unique_id "aaPaZQxtfZjwlJok9K92CgAAARU"]
[Sun Mar 01 14:19:18.644950 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:2426] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aaPaZgxtfZjwlJok9K92EAAAARg"]
[Sun Mar 01 14:19:19.493661 2026] [:error] [pid 41342:tid 41361] [client 20.151.11.238:13854] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aaPaZ44iJ6RAS5CatDlCgAAAAhA"]
[Sun Mar 01 14:19:20.758817 2026] [:error] [pid 42619:tid 42636] [client 20.151.11.238:25625] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aaPaaB_zUXcYaZE4AOdz0gAAAU8"]
[Sun Mar 01 14:19:21.545927 2026] [:error] [pid 38241:tid 38261] [client 20.151.11.238:25635] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galex.php"] [unique_id "aaPaafKRPk6YnJBxw_wXFAAAANE"]
[Sun Mar 01 14:19:22.296841 2026] [:error] [pid 42619:tid 42624] [client 20.151.11.238:25634] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aaPaah_zUXcYaZE4AOdz1QAAAUM"]
[Sun Mar 01 14:19:23.313651 2026] [:error] [pid 41780:tid 41799] [client 20.151.11.238:24168] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aaPaa8ONkVoocLIqzy0H_AAAA9A"]
[Sun Mar 01 14:19:24.027165 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:21775] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aaPabAxtfZjwlJok9K92IwAAARU"]
[Sun Mar 01 14:19:24.541593 2026] [:error] [pid 44644:tid 44661] [client 20.151.11.238:14064] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xb.php"] [unique_id "aaPabJ3RJaXMcw3y9V9mKQAAAA4"]
[Sun Mar 01 14:19:25.654039 2026] [:error] [pid 44644:tid 44657] [client 20.151.11.238:10907] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aaPabZ3RJaXMcw3y9V9mMgAAAAo"]
[Sun Mar 01 14:19:26.327602 2026] [:error] [pid 42619:tid 42625] [client 20.151.11.238:25622] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aaPabh_zUXcYaZE4AOdz3AAAAUQ"]
[Sun Mar 01 14:19:27.061920 2026] [:error] [pid 42619:tid 42622] [client 20.151.11.238:24180] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aaPabx_zUXcYaZE4AOdz3QAAAUE"]
[Sun Mar 01 14:19:28.016530 2026] [:error] [pid 38241:tid 38265] [client 20.151.11.238:13376] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ova.php"] [unique_id "aaPacPKRPk6YnJBxw_wXLgAAANU"]
[Sun Mar 01 14:19:28.962965 2026] [:error] [pid 38034:tid 38053] [client 20.151.11.238:24133] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaPacAxtfZjwlJok9K92LgAAAQ8"]
[Sun Mar 01 14:19:29.540039 2026] [:error] [pid 38034:tid 38062] [client 20.151.11.238:14048] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaPacQxtfZjwlJok9K92MQAAARg"]
[Sun Mar 01 14:19:30.074398 2026] [:error] [pid 38034:tid 38053] [client 20.151.11.238:14017] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaPacgxtfZjwlJok9K92NAAAAQ8"]
[Sun Mar 01 14:19:30.731582 2026] [:error] [pid 41342:tid 41363] [client 20.151.11.238:14043] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aaPaco4iJ6RAS5CatDlChAAAAhI"]
[Sun Mar 01 14:19:31.670667 2026] [:error] [pid 44644:tid 44666] [client 20.151.11.238:24181] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aaPac53RJaXMcw3y9V9mUAAAABM"]
[Sun Mar 01 14:19:32.879469 2026] [:error] [pid 41780:tid 41802] [client 20.151.11.238:2233] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aaPadMONkVoocLIqzy0H_gAAA9M"]
[Sun Mar 01 14:19:33.449774 2026] [:error] [pid 38034:tid 38059] [client 20.151.11.238:13869] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aaPadQxtfZjwlJok9K92PwAAARU"]
[Sun Mar 01 14:19:34.243760 2026] [:error] [pid 41780:tid 41790] [client 20.151.11.238:22819] [client 20.151.11.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aaPadsONkVoocLIqzy0IAAAAA8c"]
[Sun Mar 01 14:29:32.981746 2026] [:error] [pid 38034:tid 38043] [client 62.60.131.218:53053] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaPczAxtfZjwlJok9K9_8wAAAQU"]
[Sun Mar 01 14:55:33.814381 2026] [:error] [pid 44644:tid 44662] [client 45.86.202.179:63145] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaPi5Z3RJaXMcw3y9V-PWAAAAA8"]
[Sun Mar 01 14:55:38.687499 2026] [:error] [pid 38241:tid 38268] [client 45.86.202.197:45135] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaPi6vKRPk6YnJBxw_woXgAAANg"]
[Sun Mar 01 14:55:47.464830 2026] [:error] [pid 44644:tid 44667] [client 45.86.202.178:63441] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaPi853RJaXMcw3y9V-PvQAAABQ"]
[Sun Mar 01 14:55:52.037164 2026] [:error] [pid 44644:tid 44647] [client 45.86.202.175:27203] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaPi-J3RJaXMcw3y9V-P0gAAAAA"]
[Sun Mar 01 14:56:00.311708 2026] [:error] [pid 7165:tid 7176] [client 45.86.202.160:48989] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaPjABRjCrA8qWBjgG8eMwAAAkk"]
[Sun Mar 01 14:56:02.456755 2026] [:error] [pid 41967:tid 41982] [client 45.86.202.171:64117] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaPjAoO1bqY181I02eGFJAAAAI0"]
[Sun Mar 01 14:56:03.037897 2026] [:error] [pid 7165:tid 7176] [client 45.86.202.183:23281] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaPjAxRjCrA8qWBjgG8eQAAAAkk"]
[Sun Mar 01 14:56:04.729987 2026] [:error] [pid 41967:tid 41978] [client 45.86.202.166:43155] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaPjBIO1bqY181I02eGFJwAAAIk"]
[Sun Mar 01 14:56:05.340868 2026] [:error] [pid 37032:tid 37046] [client 45.86.202.160:65163] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaPjBeu0U4o7eSImsVQqIQAAAYw"]
[Sun Mar 01 14:56:06.060935 2026] [:error] [pid 44644:tid 44647] [client 45.86.202.162:54257] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaPjBp3RJaXMcw3y9V-P9AAAAAA"]
[Sun Mar 01 14:56:09.005969 2026] [:error] [pid 37032:tid 37043] [client 45.86.202.187:32305] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaPjCeu0U4o7eSImsVQqOgAAAYk"]
[Sun Mar 01 14:56:11.325122 2026] [:error] [pid 7165:tid 7180] [client 45.86.202.156:59835] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aaPjCxRjCrA8qWBjgG8ecQAAAk0"]
[Sun Mar 01 14:56:14.629456 2026] [:error] [pid 37032:tid 37058] [client 45.86.202.166:32691] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaPjDuu0U4o7eSImsVQqQwAAAZg"]
[Sun Mar 01 14:56:17.428046 2026] [:error] [pid 44644:tid 44647] [client 45.86.202.174:36357] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaPjEZ3RJaXMcw3y9V-QHwAAAAA"]
[Sun Mar 01 14:56:19.439992 2026] [:error] [pid 37032:tid 37043] [client 45.86.202.191:24337] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaPjE-u0U4o7eSImsVQqSgAAAYk"]
[Sun Mar 01 14:56:28.682073 2026] [:error] [pid 7165:tid 7174] [client 45.86.202.176:40021] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaPjHBRjCrA8qWBjgG8e_QAAAkc"]
[Sun Mar 01 14:56:30.684505 2026] [:error] [pid 41967:tid 41986] [client 45.86.202.194:55531] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaPjHoO1bqY181I02eGFNAAAAJE"]
[Sun Mar 01 14:56:34.106332 2026] [:error] [pid 7133:tid 7135] [client 45.86.202.193:60195] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaPjIvCtubh8pR64qB_C_QAAAEA"]
[Sun Mar 01 14:56:36.415871 2026] [:error] [pid 38241:tid 38260] [client 45.86.202.194:29473] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaPjJPKRPk6YnJBxw_wpmwAAANA"]
[Sun Mar 01 14:56:43.661404 2026] [:error] [pid 42619:tid 42645] [client 45.86.202.169:35917] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaPjKx_zUXcYaZE4AOeBnwAAAVg"]
[Sun Mar 01 14:56:45.668614 2026] [:error] [pid 38241:tid 38268] [client 45.86.202.205:44029] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaPjLfKRPk6YnJBxw_wp8gAAANg"]
[Sun Mar 01 14:56:47.644214 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.184:25295] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaPjL53RJaXMcw3y9V-QfQAAAA4"]
[Sun Mar 01 14:56:48.242468 2026] [:error] [pid 37032:tid 37043] [client 45.86.202.186:32911] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaPjMOu0U4o7eSImsVQqbAAAAYk"]
[Sun Mar 01 14:56:48.774722 2026] [:error] [pid 41780:tid 41784] [client 45.86.202.179:65527] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaPjMMONkVoocLIqzy0NqAAAA8E"]
[Sun Mar 01 14:56:53.367710 2026] [:error] [pid 38034:tid 38036] [client 45.86.202.157:62731] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaPjNQxtfZjwlJok9K-buAAAAQA"]
[Sun Mar 01 14:56:53.974783 2026] [:error] [pid 38241:tid 38260] [client 45.86.202.183:44027] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaPjNfKRPk6YnJBxw_wqJQAAANA"]
[Sun Mar 01 14:56:54.534228 2026] [:error] [pid 44644:tid 44652] [client 45.86.202.156:51781] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaPjNp3RJaXMcw3y9V-QkQAAAAU"]
[Sun Mar 01 14:57:07.455035 2026] [:error] [pid 41342:tid 41359] [client 45.86.202.184:25869] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aaPjQ44iJ6RAS5CatDlHMQAAAg4"]
[Sun Mar 01 14:57:11.940258 2026] [:error] [pid 44644:tid 44664] [client 45.86.202.200:60215] [client 45.86.202.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.200, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaPjR53RJaXMcw3y9V-QzQAAABE"]
[Sun Mar 01 14:57:26.812629 2026] [:error] [pid 44644:tid 44667] [client 45.86.202.200:60215] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaPjVp3RJaXMcw3y9V-RBgAAABQ"]
[Sun Mar 01 14:57:30.321065 2026] [:error] [pid 44644:tid 44667] [client 45.86.202.171:40007] [client 45.86.202.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaPjWp3RJaXMcw3y9V-REAAAABQ"]
[Sun Mar 01 14:57:32.682945 2026] [:error] [pid 44644:tid 44667] [client 45.86.202.171:40007] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aaPjXJ3RJaXMcw3y9V-RFAAAABQ"]
[Sun Mar 01 14:57:44.201540 2026] [:error] [pid 7165:tid 7168] [client 45.86.202.200:51815] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaPjaBRjCrA8qWBjgG8gfgAAAkE"]
[Sun Mar 01 14:57:55.192602 2026] [:error] [pid 42619:tid 42623] [client 45.86.202.201:57009] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaPjcx_zUXcYaZE4AOeCBAAAAUI"]
[Sun Mar 01 14:57:58.776289 2026] [:error] [pid 41967:tid 41984] [client 45.86.202.193:26149] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaPjdoO1bqY181I02eGFiQAAAI8"]
[Sun Mar 01 14:58:03.614363 2026] [:error] [pid 7165:tid 7179] [client 45.86.202.175:58193] [client 45.86.202.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.175, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaPjexRjCrA8qWBjgG8guAAAAkw"]
[Sun Mar 01 14:58:04.864347 2026] [:error] [pid 7165:tid 7168] [client 45.86.202.175:58193] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaPjfBRjCrA8qWBjgG8guQAAAkE"]
[Sun Mar 01 14:58:27.385377 2026] [:error] [pid 40750:tid 40760] [client 45.86.202.192:40229] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaPjkwfBuk03yQKDyqvI3AAAAcc"]
[Sun Mar 01 14:58:33.190595 2026] [:error] [pid 42619:tid 42629] [client 45.86.202.193:62347] [client 45.86.202.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.193, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaPjmR_zUXcYaZE4AOeCNwAAAUg"]
[Sun Mar 01 14:58:38.183281 2026] [:error] [pid 42619:tid 42629] [client 45.86.202.193:62347] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaPjnh_zUXcYaZE4AOeCRwAAAUg"]
[Sun Mar 01 14:58:40.204876 2026] [:error] [pid 44644:tid 44664] [client 45.86.202.164:53675] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aaPjoJ3RJaXMcw3y9V-RmwAAABE"]
[Sun Mar 01 14:58:43.447885 2026] [:error] [pid 38034:tid 38036] [client 45.86.202.200:59451] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaPjowxtfZjwlJok9K-cHwAAAQA"]
[Sun Mar 01 14:58:48.155850 2026] [:error] [pid 42619:tid 42623] [client 45.86.202.181:21311] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaPjqB_zUXcYaZE4AOeCVwAAAUI"]
[Sun Mar 01 14:58:48.708150 2026] [:error] [pid 7165:tid 7173] [client 45.86.202.158:55955] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaPjqBRjCrA8qWBjgG8hDgAAAkY"]
[Sun Mar 01 14:58:56.120200 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.159:30593] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaPjsAxtfZjwlJok9K-cNAAAARY"]
[Sun Mar 01 14:58:59.123781 2026] [:error] [pid 41342:tid 41350] [client 45.86.202.162:35383] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaPjs44iJ6RAS5CatDlHSAAAAgU"]
[Sun Mar 01 14:59:04.807315 2026] [:error] [pid 37032:tid 37051] [client 45.86.202.180:26727] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aaPjuOu0U4o7eSImsVQrfQAAAZE"]
[Sun Mar 01 14:59:09.481485 2026] [:error] [pid 7165:tid 7186] [client 45.86.202.197:37575] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaPjvRRjCrA8qWBjgG8hSAAAAlM"]
[Sun Mar 01 14:59:13.064557 2026] [:error] [pid 41967:tid 41989] [client 45.86.202.199:53349] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aaPjwYO1bqY181I02eGGNgAAAJQ"]
[Sun Mar 01 14:59:17.423193 2026] [:error] [pid 41967:tid 41974] [client 45.86.202.177:48211] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaPjxYO1bqY181I02eGGPwAAAIU"]
[Sun Mar 01 14:59:27.418166 2026] [:error] [pid 41342:tid 41351] [client 45.86.202.180:56879] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaPjz44iJ6RAS5CatDlHVQAAAgY"]
[Sun Mar 01 14:59:28.006500 2026] [:error] [pid 42619:tid 42627] [client 45.86.202.194:32697] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaPj0B_zUXcYaZE4AOeCtAAAAUY"]
[Sun Mar 01 14:59:28.547189 2026] [:error] [pid 42619:tid 42635] [client 45.86.202.188:35963] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaPj0B_zUXcYaZE4AOeCtQAAAU4"]
[Sun Mar 01 14:59:29.098966 2026] [:error] [pid 38034:tid 38048] [client 45.86.202.158:33807] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaPj0QxtfZjwlJok9K-cVwAAAQo"]
[Sun Mar 01 14:59:31.495821 2026] [:error] [pid 38034:tid 38052] [client 45.86.202.157:20685] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaPj0wxtfZjwlJok9K-cXgAAAQ4"]
[Sun Mar 01 14:59:32.022890 2026] [:error] [pid 37032:tid 37041] [client 45.86.202.195:22631] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaPj1Ou0U4o7eSImsVQsCQAAAYc"]
[Sun Mar 01 14:59:35.590947 2026] [:error] [pid 44644:tid 44657] [client 45.86.202.224:26715] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaPj153RJaXMcw3y9V-RpgAAAAo"]
[Sun Mar 01 14:59:36.107759 2026] [:error] [pid 38034:tid 38036] [client 45.86.202.157:38609] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaPj2AxtfZjwlJok9K-cYwAAAQA"]
[Sun Mar 01 14:59:36.788043 2026] [:error] [pid 38034:tid 38052] [client 45.86.202.194:43961] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaPj2AxtfZjwlJok9K-cZQAAAQ4"]
[Sun Mar 01 14:59:37.536892 2026] [:error] [pid 41967:tid 41972] [client 45.86.202.166:54735] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaPj2YO1bqY181I02eGGSgAAAIM"]
[Sun Mar 01 14:59:40.848698 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.200:38863] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaPj3AxtfZjwlJok9K-ccQAAARY"]
[Sun Mar 01 14:59:43.976211 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.156:34563] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaPj3wxtfZjwlJok9K-cfAAAARY"]
[Sun Mar 01 14:59:49.873436 2026] [:error] [pid 41967:tid 41971] [client 45.86.202.175:41585] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaPj5YO1bqY181I02eGGVgAAAII"]
[Sun Mar 01 15:00:00.144202 2026] [:error] [pid 41780:tid 41804] [client 45.86.202.200:33709] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaPj8MONkVoocLIqzy0OFAAAA9U"]
[Sun Mar 01 15:00:06.009220 2026] [:error] [pid 7165:tid 7183] [client 45.86.202.174:61927] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaPj9hRjCrA8qWBjgG8huQAAAlA"]
[Sun Mar 01 15:00:06.751982 2026] [:error] [pid 37032:tid 37047] [client 45.86.202.200:54063] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaPj9uu0U4o7eSImsVQsWAAAAY0"]
[Sun Mar 01 15:00:12.878551 2026] [:error] [pid 37032:tid 37039] [client 45.86.202.159:62735] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaPj_Ou0U4o7eSImsVQsdAAAAYU"]
[Sun Mar 01 15:00:17.625256 2026] [proxy_fcgi:error] [pid 40750:tid 40761] [client 45.86.202.172:62989] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:00:17.906317 2026] [proxy_fcgi:error] [pid 40750:tid 40771] [client 45.86.202.172:62989] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:00:18.228020 2026] [proxy_fcgi:error] [pid 40750:tid 40770] [client 45.86.202.172:62989] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:00:22.670543 2026] [:error] [pid 40750:tid 40757] [client 45.86.202.172:62989] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaPkBgfBuk03yQKDyqvJDgAAAcQ"]
[Sun Mar 01 15:00:23.266999 2026] [:error] [pid 38034:tid 38048] [client 45.86.202.177:52233] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaPkBwxtfZjwlJok9K-c7QAAAQo"]
[Sun Mar 01 15:00:23.838491 2026] [:error] [pid 37032:tid 37039] [client 45.86.202.173:59439] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaPkB-u0U4o7eSImsVQsigAAAYU"]
[Sun Mar 01 15:00:24.583088 2026] [:error] [pid 7165:tid 7189] [client 45.86.202.156:32527] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaPkCBRjCrA8qWBjgG8h2gAAAlY"]
[Sun Mar 01 15:00:25.301403 2026] [:error] [pid 7165:tid 7182] [client 45.86.202.162:32065] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaPkCRRjCrA8qWBjgG8h4QAAAk8"]
[Sun Mar 01 15:00:25.868984 2026] [:error] [pid 41967:tid 41985] [client 45.86.202.178:42407] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaPkCYO1bqY181I02eGGXwAAAJA"]
[Sun Mar 01 15:00:27.606126 2026] [:error] [pid 37032:tid 37041] [client 45.86.202.200:43027] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaPkC-u0U4o7eSImsVQskwAAAYc"]
[Sun Mar 01 15:00:28.134150 2026] [:error] [pid 41967:tid 41988] [client 45.86.202.162:56375] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaPkDIO1bqY181I02eGGYQAAAJM"]
[Sun Mar 01 15:00:28.657376 2026] [:error] [pid 7133:tid 7144] [client 45.86.202.192:62867] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaPkDPCtubh8pR64qB_DigAAAEk"]
[Sun Mar 01 15:00:29.233740 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.225:41971] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaPkDQxtfZjwlJok9K-c_gAAARY"]
[Sun Mar 01 15:00:32.828852 2026] [:error] [pid 38034:tid 38048] [client 45.86.202.198:21559] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaPkEAxtfZjwlJok9K-dCQAAAQo"]
[Sun Mar 01 15:00:34.534045 2026] [:error] [pid 37032:tid 37055] [client 45.86.202.172:35533] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaPkEuu0U4o7eSImsVQsoAAAAZU"]
[Sun Mar 01 15:00:38.128579 2026] [:error] [pid 37032:tid 37036] [client 45.86.202.157:39205] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaPkFuu0U4o7eSImsVQstAAAAYI"]
[Sun Mar 01 15:00:41.529356 2026] [:error] [pid 41967:tid 41974] [client 45.86.202.198:55573] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaPkGYO1bqY181I02eGGfQAAAIU"]
[Sun Mar 01 15:00:45.984500 2026] [:error] [pid 7165:tid 7182] [client 45.86.202.181:44827] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaPkHRRjCrA8qWBjgG8iIwAAAk8"]
[Sun Mar 01 15:00:52.547493 2026] [:error] [pid 41342:tid 41351] [client 45.86.202.157:51341] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaPkJI4iJ6RAS5CatDlHYgAAAgY"]
[Sun Mar 01 15:00:55.453178 2026] [:error] [pid 37032:tid 37036] [client 45.86.202.187:41203] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaPkJ-u0U4o7eSImsVQs4gAAAYI"]
[Sun Mar 01 15:01:15.934400 2026] [:error] [pid 7165:tid 7182] [client 45.86.202.203:42103] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaPkOxRjCrA8qWBjgG8icQAAAk8"]
[Sun Mar 01 15:01:16.507177 2026] [:error] [pid 7133:tid 7146] [client 45.86.202.181:61933] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaPkPPCtubh8pR64qB_DpgAAAEs"]
[Sun Mar 01 15:01:17.116012 2026] [:error] [pid 38241:tid 38252] [client 45.86.202.186:53643] [client 45.86.202.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.186, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaPkPfKRPk6YnJBxw_wrOQAAAMg"]
[Sun Mar 01 15:01:19.735828 2026] [:error] [pid 38241:tid 38252] [client 45.86.202.186:53643] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaPkP_KRPk6YnJBxw_wrPQAAAMg"]
[Sun Mar 01 15:01:24.910756 2026] [:error] [pid 38034:tid 38048] [client 45.86.202.185:37487] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaPkRAxtfZjwlJok9K-dzgAAAQo"]
[Sun Mar 01 15:01:25.536796 2026] [:error] [pid 7165:tid 7183] [client 45.86.202.164:23447] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaPkRRRjCrA8qWBjgG8inAAAAlA"]
[Sun Mar 01 15:01:31.250149 2026] [:error] [pid 42619:tid 42639] [client 45.86.202.199:50401] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaPkSx_zUXcYaZE4AOeDTgAAAVI"]
[Sun Mar 01 15:01:31.811204 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.224:63771] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aaPkS_KRPk6YnJBxw_wrTwAAAM8"]
[Sun Mar 01 15:01:41.653665 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.202:61457] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaPkVQxtfZjwlJok9K-d_gAAARY"]
[Sun Mar 01 15:01:44.960339 2026] [proxy_fcgi:error] [pid 44644:tid 44658] [client 45.86.202.168:41273] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:01:46.429306 2026] [:error] [pid 44644:tid 44652] [client 45.86.202.168:41273] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "aaPkWp3RJaXMcw3y9V-ScQAAAAU"]
[Sun Mar 01 15:01:47.036764 2026] [:error] [pid 38034:tid 38036] [client 45.86.202.178:30379] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaPkWwxtfZjwlJok9K-eFwAAAQA"]
[Sun Mar 01 15:01:50.613070 2026] [:error] [pid 38241:tid 38247] [client 45.86.202.165:50735] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaPkXvKRPk6YnJBxw_wrbQAAAMM"]
[Sun Mar 01 15:01:51.181760 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.168:36341] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaPkX53RJaXMcw3y9V-SeAAAABg"]
[Sun Mar 01 15:02:03.080493 2026] [:error] [pid 37032:tid 37039] [client 45.86.202.158:60359] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaPka-u0U4o7eSImsVQttgAAAYU"]
[Sun Mar 01 15:02:03.713649 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.185:35679] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaPka53RJaXMcw3y9V-SqwAAAAQ"]
[Sun Mar 01 15:02:11.530259 2026] [:error] [pid 37032:tid 37036] [client 45.86.202.189:41085] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aaPkc-u0U4o7eSImsVQtvQAAAYI"]
[Sun Mar 01 15:02:12.087906 2026] [:error] [pid 42619:tid 42634] [client 45.86.202.188:34795] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaPkdB_zUXcYaZE4AOeDiAAAAU0"]
[Sun Mar 01 15:02:12.683170 2026] [:error] [pid 42619:tid 42635] [client 45.86.202.187:61813] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaPkdB_zUXcYaZE4AOeDjgAAAU4"]
[Sun Mar 01 15:02:20.679005 2026] [:error] [pid 37032:tid 37036] [client 45.86.202.195:23599] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaPkfOu0U4o7eSImsVQt2AAAAYI"]
[Sun Mar 01 15:02:24.724872 2026] [:error] [pid 38034:tid 38062] [client 45.86.202.187:65107] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaPkgAxtfZjwlJok9K-eswAAARg"]
[Sun Mar 01 15:02:33.605354 2026] [:error] [pid 37032:tid 37054] [client 45.86.202.181:57207] [client 45.86.202.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.181, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "aaPkieu0U4o7eSImsVQt9wAAAZQ"]
[Sun Mar 01 15:02:41.331507 2026] [:error] [pid 37032:tid 37046] [client 45.86.202.181:57207] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaPkkeu0U4o7eSImsVQuBAAAAYw"]
[Sun Mar 01 15:02:42.086260 2026] [:error] [pid 42619:tid 42635] [client 45.86.202.181:56191] [client 45.86.202.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.181, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaPkkh_zUXcYaZE4AOeDpAAAAU4"]
[Sun Mar 01 15:02:55.664083 2026] [proxy_fcgi:error] [pid 42619:tid 42639] [client 45.86.202.181:56191] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:03:14.214010 2026] [:error] [pid 42619:tid 42626] [client 45.86.202.181:56191] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaPksh_zUXcYaZE4AOeD6gAAAUU"]
[Sun Mar 01 15:03:19.098899 2026] [:error] [pid 38034:tid 38058] [client 45.86.202.189:27419] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaPktwxtfZjwlJok9K-fbAAAARQ"]
[Sun Mar 01 15:03:23.026615 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.157:54321] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaPku53RJaXMcw3y9V-TuwAAABA"]
[Sun Mar 01 15:03:35.529295 2026] [:error] [pid 37032:tid 37048] [client 45.86.202.157:33757] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaPkx-u0U4o7eSImsVQu2gAAAY4"]
[Sun Mar 01 15:03:39.641017 2026] [:error] [pid 37032:tid 37049] [client 45.86.202.166:35877] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaPky-u0U4o7eSImsVQu_wAAAY8"]
[Sun Mar 01 15:03:41.935140 2026] [:error] [pid 44644:tid 44653] [client 45.86.202.167:60761] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaPkzZ3RJaXMcw3y9V-T5wAAAAY"]
[Sun Mar 01 15:03:48.577228 2026] [proxy_fcgi:error] [pid 7165:tid 7181] [client 45.86.202.165:35905] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:03:48.900241 2026] [proxy_fcgi:error] [pid 7165:tid 7182] [client 45.86.202.165:35905] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:03:49.165498 2026] [:error] [pid 7165:tid 7191] [client 45.86.202.165:35905] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaPk1RRjCrA8qWBjgG8kSgAAAlg"]
[Sun Mar 01 15:03:49.714672 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.157:42389] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaPk1fKRPk6YnJBxw_wspgAAANQ"]
[Sun Mar 01 15:04:00.407948 2026] [:error] [pid 7165:tid 7174] [client 45.86.202.186:44651] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaPk4BRjCrA8qWBjgG8keAAAAkc"]
[Sun Mar 01 15:04:03.276514 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.177:37569] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aaPk453RJaXMcw3y9V-UJwAAABg"]
[Sun Mar 01 15:04:09.089063 2026] [:error] [pid 44644:tid 44653] [client 45.86.202.187:55377] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaPk6Z3RJaXMcw3y9V-UPQAAAAY"]
[Sun Mar 01 15:04:20.602252 2026] [:error] [pid 41780:tid 41792] [client 45.86.202.199:38287] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaPk9MONkVoocLIqzy0ObwAAA8k"]
[Sun Mar 01 15:04:21.131963 2026] [proxy_fcgi:error] [pid 38241:tid 38264] [client 45.86.202.168:38053] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:04:25.461324 2026] [:error] [pid 37032:tid 37049] [client 45.86.202.224:60189] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaPk-eu0U4o7eSImsVQvmQAAAY8"]
[Sun Mar 01 15:04:33.775673 2026] [proxy_fcgi:error] [pid 44644:tid 44651] [client 45.86.202.205:28245] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:04:36.188617 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.205:28245] [client 45.86.202.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.205, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaPlBJ3RJaXMcw3y9V-UoQAAABg"]
[Sun Mar 01 15:04:43.440066 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.205:28245] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaPlC53RJaXMcw3y9V-UqQAAABY"]
[Sun Mar 01 15:04:45.540675 2026] [:error] [pid 41967:tid 41986] [client 45.86.202.156:49579] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaPlDYO1bqY181I02eGHMgAAAJE"]
[Sun Mar 01 15:04:53.338135 2026] [:error] [pid 37032:tid 37049] [client 45.86.202.184:27949] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaPlFeu0U4o7eSImsVQwAAAAAY8"]
[Sun Mar 01 15:04:59.914971 2026] [:error] [pid 38034:tid 38058] [client 45.86.202.225:30835] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaPlGwxtfZjwlJok9K-gUQAAARQ"]
[Sun Mar 01 15:05:01.994682 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.179:38217] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaPlHZ3RJaXMcw3y9V-U1QAAAAQ"]
[Sun Mar 01 15:05:07.908801 2026] [:error] [pid 42619:tid 42636] [client 45.86.202.200:60589] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaPlIx_zUXcYaZE4AOeEfgAAAU8"]
[Sun Mar 01 15:05:12.036821 2026] [proxy_fcgi:error] [pid 42619:tid 42641] [client 45.86.202.181:46207] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:05:12.373879 2026] [:error] [pid 42619:tid 42639] [client 45.86.202.181:46207] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaPlKB_zUXcYaZE4AOeEkwAAAVI"]
[Sun Mar 01 15:05:12.933200 2026] [proxy_fcgi:error] [pid 42619:tid 42632] [client 45.86.202.176:35945] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Sun Mar 01 15:05:13.523432 2026] [:error] [pid 38034:tid 38058] [client 45.86.202.225:27905] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "aaPlKQxtfZjwlJok9K-gZgAAARQ"]
[Sun Mar 01 15:05:14.093407 2026] [:error] [pid 7165:tid 7178] [client 45.86.202.193:39675] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaPlKhRjCrA8qWBjgG8lmwAAAks"]
[Sun Mar 01 15:05:14.648348 2026] [:error] [pid 42619:tid 42639] [client 45.86.202.160:58235] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaPlKh_zUXcYaZE4AOeElwAAAVI"]
[Sun Mar 01 15:05:15.308500 2026] [:error] [pid 42619:tid 42642] [client 45.86.202.201:43371] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaPlKx_zUXcYaZE4AOeEmAAAAVU"]
[Sun Mar 01 15:05:15.914347 2026] [:error] [pid 42619:tid 42632] [client 45.86.202.164:63021] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaPlKx_zUXcYaZE4AOeEmwAAAUs"]
[Sun Mar 01 15:05:16.459474 2026] [:error] [pid 37032:tid 37053] [client 45.86.202.163:20175] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaPlLOu0U4o7eSImsVQwZgAAAZM"]
[Sun Mar 01 15:05:19.892520 2026] [:error] [pid 42619:tid 42644] [client 45.86.202.193:21749] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaPlLx_zUXcYaZE4AOeEqgAAAVc"]
[Sun Mar 01 15:05:20.491088 2026] [:error] [pid 37032:tid 37053] [client 45.86.202.187:25991] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaPlMOu0U4o7eSImsVQwdQAAAZM"]
[Sun Mar 01 15:05:21.042685 2026] [:error] [pid 37032:tid 37053] [client 45.86.202.178:29209] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaPlMeu0U4o7eSImsVQweAAAAZM"]
[Sun Mar 01 15:05:23.753550 2026] [:error] [pid 7165:tid 7180] [client 45.86.202.163:64447] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaPlMxRjCrA8qWBjgG8lrgAAAk0"]
[Sun Mar 01 15:05:27.245267 2026] [:error] [pid 37032:tid 37036] [client 45.86.202.160:48913] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaPlN-u0U4o7eSImsVQwqAAAAYI"]
[Sun Mar 01 15:05:27.838494 2026] [proxy_fcgi:error] [pid 37032:tid 37036] [client 45.86.202.172:33723] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:05:32.404470 2026] [:error] [pid 37032:tid 37054] [client 45.86.202.172:33723] [client 45.86.202.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaPlPOu0U4o7eSImsVQw3gAAAZQ"]
[Sun Mar 01 15:05:40.437098 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.172:33723] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaPlROu0U4o7eSImsVQxMwAAAYQ"]
[Sun Mar 01 15:05:41.030335 2026] [:error] [pid 41342:tid 41349] [client 45.86.202.159:25781] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaPlRY4iJ6RAS5CatDlH-wAAAgQ"]
[Sun Mar 01 15:06:04.909025 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.202:28119] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaPlXJ3RJaXMcw3y9V-VogAAABY"]
[Sun Mar 01 15:06:05.534638 2026] [:error] [pid 38034:tid 38045] [client 45.86.202.181:65239] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaPlXQxtfZjwlJok9K-gnQAAAQc"]
[Sun Mar 01 15:06:06.103010 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.192:23183] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaPlXp3RJaXMcw3y9V-VpgAAAAQ"]
[Sun Mar 01 15:06:15.912157 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.199:56657] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaPlZwxtfZjwlJok9K-gtgAAAQY"]
[Sun Mar 01 15:06:16.471032 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.181:24421] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaPlaAxtfZjwlJok9K-gvAAAAQY"]
[Sun Mar 01 15:06:17.013887 2026] [:error] [pid 41967:tid 41991] [client 45.86.202.205:30885] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaPlaYO1bqY181I02eGHtQAAAJY"]
[Sun Mar 01 15:06:24.731854 2026] [:error] [pid 41780:tid 41801] [client 45.86.202.177:24437] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaPlcMONkVoocLIqzy0O6gAAA9I"]
[Sun Mar 01 15:06:26.952586 2026] [:error] [pid 42619:tid 42622] [client 45.86.202.164:62813] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaPlch_zUXcYaZE4AOeFWwAAAUE"]
[Sun Mar 01 15:06:33.615670 2026] [:error] [pid 38241:tid 38247] [client 45.86.202.161:51469] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaPlefKRPk6YnJBxw_wtnQAAAMM"]
[Sun Mar 01 15:06:48.466581 2026] [:error] [pid 38034:tid 38045] [client 45.86.202.205:49231] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaPliAxtfZjwlJok9K-haQAAAQc"]
[Sun Mar 01 15:06:51.854110 2026] [:error] [pid 38241:tid 38247] [client 45.86.202.205:26401] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "aaPli_KRPk6YnJBxw_wttAAAAMM"]
[Sun Mar 01 15:07:00.098292 2026] [:error] [pid 37032:tid 37046] [client 45.86.202.189:54183] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaPllOu0U4o7eSImsVQyhQAAAYw"]
[Sun Mar 01 15:07:03.553886 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.169:27613] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaPllwxtfZjwlJok9K-hvwAAAQI"]
[Sun Mar 01 15:07:11.374205 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.156:49795] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaPlnwxtfZjwlJok9K-h3wAAAQY"]
[Sun Mar 01 15:07:18.933684 2026] [:error] [pid 37032:tid 37036] [client 45.86.202.195:47687] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaPlpuu0U4o7eSImsVQyvgAAAYI"]
[Sun Mar 01 15:07:22.492121 2026] [:error] [pid 38241:tid 38247] [client 45.86.202.180:59611] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaPlqvKRPk6YnJBxw_wt-QAAAMM"]
[Sun Mar 01 15:07:23.141177 2026] [:error] [pid 41780:tid 41798] [client 45.86.202.199:62053] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaPlq8ONkVoocLIqzy0PBwAAA88"]
[Sun Mar 01 15:07:31.346945 2026] [:error] [pid 40750:tid 40755] [client 45.86.202.193:49125] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaPlswfBuk03yQKDyqvJVQAAAcI"]
[Sun Mar 01 15:07:38.526211 2026] [:error] [pid 44644:tid 44665] [client 45.86.202.169:48235] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaPlup3RJaXMcw3y9V-WwQAAABI"]
[Sun Mar 01 15:07:45.828544 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.205:28295] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaPlwZ3RJaXMcw3y9V-WzQAAABY"]
[Sun Mar 01 15:07:46.360499 2026] [:error] [pid 44644:tid 44650] [client 45.86.202.187:29295] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaPlwp3RJaXMcw3y9V-WzwAAAAM"]
[Sun Mar 01 15:07:51.036172 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.187:42647] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaPlxwxtfZjwlJok9K-ixQAAARE"]
[Sun Mar 01 15:07:55.757648 2026] [:error] [pid 7165:tid 7187] [client 45.86.202.193:54921] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaPlyxRjCrA8qWBjgG8nAQAAAlQ"]
[Sun Mar 01 15:07:56.319040 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.192:41105] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaPlzAxtfZjwlJok9K-i4AAAAQI"]
[Sun Mar 01 15:08:05.265371 2026] [:error] [pid 37032:tid 37054] [client 45.86.202.168:20339] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaPl1eu0U4o7eSImsVQzBwAAAZQ"]
[Sun Mar 01 15:08:09.385541 2026] [:error] [pid 7165:tid 7187] [client 45.86.202.204:64073] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaPl2RRjCrA8qWBjgG8nLAAAAlQ"]
[Sun Mar 01 15:08:10.016584 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.199:35549] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaPl2uu0U4o7eSImsVQzDQAAAYQ"]
[Sun Mar 01 15:08:13.753860 2026] [:error] [pid 37032:tid 37035] [client 45.86.202.192:63269] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaPl3eu0U4o7eSImsVQzHQAAAYE"]
[Sun Mar 01 15:08:15.856322 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.201:38373] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaPl353RJaXMcw3y9V-XIgAAABY"]
[Sun Mar 01 15:08:17.140152 2026] [:error] [pid 38034:tid 38045] [client 45.86.202.200:32859] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaPl4QxtfZjwlJok9K-jKgAAAQc"]
[Sun Mar 01 15:08:22.911890 2026] [:error] [pid 41967:tid 41979] [client 45.86.202.198:56107] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaPl5oO1bqY181I02eGIGgAAAIo"]
[Sun Mar 01 15:08:25.388787 2026] [:error] [pid 38241:tid 38247] [client 45.86.202.163:42463] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaPl6fKRPk6YnJBxw_wungAAAMM"]
[Sun Mar 01 15:08:29.013346 2026] [:error] [pid 38241:tid 38247] [client 45.86.202.166:44631] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaPl7fKRPk6YnJBxw_wusQAAAMM"]
[Sun Mar 01 15:08:31.554923 2026] [:error] [pid 44644:tid 44653] [client 45.86.202.184:21971] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaPl753RJaXMcw3y9V-XSAAAAAY"]
[Sun Mar 01 15:08:34.353119 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.194:49767] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaPl8gxtfZjwlJok9K-jWQAAAQ8"]
[Sun Mar 01 15:08:36.847938 2026] [:error] [pid 38241:tid 38247] [client 45.86.202.185:52117] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "aaPl9PKRPk6YnJBxw_wu0QAAAMM"]
[Sun Mar 01 15:08:37.533606 2026] [:error] [pid 41780:tid 41800] [client 45.86.202.181:56671] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaPl9cONkVoocLIqzy0PEQAAA9E"]
[Sun Mar 01 15:08:39.091175 2026] [:error] [pid 42619:tid 42644] [client 45.86.202.181:20189] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaPl9x_zUXcYaZE4AOeHJwAAAVc"]
[Sun Mar 01 15:08:39.804868 2026] [:error] [pid 38034:tid 38045] [client 45.86.202.204:50773] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "aaPl9wxtfZjwlJok9K-jXwAAAQc"]
[Sun Mar 01 15:08:40.557420 2026] [:error] [pid 41967:tid 41980] [client 45.86.202.168:27579] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaPl-IO1bqY181I02eGIJAAAAIs"]
[Sun Mar 01 15:08:46.905877 2026] [:error] [pid 38241:tid 38261] [client 45.86.202.169:40533] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaPl_vKRPk6YnJBxw_wu_QAAANE"]
[Sun Mar 01 15:08:48.575923 2026] [:error] [pid 42619:tid 42641] [client 45.86.202.159:63041] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaPmAB_zUXcYaZE4AOeHUQAAAVQ"]
[Sun Mar 01 15:08:49.060290 2026] [:error] [pid 7165:tid 7188] [client 45.86.202.162:63735] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaPmARRjCrA8qWBjgG8naQAAAlU"]
[Sun Mar 01 15:08:49.760129 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.167:34789] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaPmAQxtfZjwlJok9K-jagAAAQ8"]
[Sun Mar 01 15:08:50.306591 2026] [:error] [pid 44644:tid 44653] [client 45.86.202.169:61625] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaPmAp3RJaXMcw3y9V-XXgAAAAY"]
[Sun Mar 01 15:08:50.881747 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.201:36019] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaPmAgxtfZjwlJok9K-jbgAAAQY"]
[Sun Mar 01 15:08:51.472851 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.189:59315] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaPmAwxtfZjwlJok9K-jcAAAAQI"]
[Sun Mar 01 15:08:53.340120 2026] [:error] [pid 38034:tid 38058] [client 45.86.202.181:26417] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaPmBQxtfZjwlJok9K-jegAAARQ"]
[Sun Mar 01 15:08:53.406049 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.157:44999] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaPmBQxtfZjwlJok9K-jewAAAQI"]
[Sun Mar 01 15:08:55.928997 2026] [:error] [pid 37032:tid 37049] [client 45.86.202.179:61873] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aaPmB-u0U4o7eSImsVQzagAAAY8"]
[Sun Mar 01 15:08:57.994744 2026] [:error] [pid 41967:tid 41971] [client 45.86.202.185:38095] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaPmCYO1bqY181I02eGIOgAAAII"]
[Sun Mar 01 15:08:59.322646 2026] [:error] [pid 38241:tid 38257] [client 45.86.202.181:56057] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaPmC_KRPk6YnJBxw_wvHgAAAM0"]
[Sun Mar 01 15:09:01.054906 2026] [:error] [pid 41342:tid 41352] [client 45.86.202.173:49063] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaPmDY4iJ6RAS5CatDlIIQAAAgc"]
[Sun Mar 01 15:09:02.682843 2026] [:error] [pid 37032:tid 37054] [client 45.86.202.176:58795] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaPmDuu0U4o7eSImsVQzeQAAAZQ"]
[Sun Mar 01 15:09:03.257078 2026] [:error] [pid 37032:tid 37042] [client 45.86.202.203:40961] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaPmD-u0U4o7eSImsVQzegAAAYg"]
[Sun Mar 01 15:09:10.917335 2026] [:error] [pid 7133:tid 7157] [client 45.86.202.188:54943] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaPmFvCtubh8pR64qB_FCwAAAFY"]
[Sun Mar 01 15:09:12.041250 2026] [:error] [pid 41780:tid 41807] [client 45.86.202.201:41903] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaPmGMONkVoocLIqzy0PNAAAA9g"]
[Sun Mar 01 15:09:12.984333 2026] [:error] [pid 37032:tid 37039] [client 45.86.202.168:65345] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaPmGOu0U4o7eSImsVQziAAAAYU"]
[Sun Mar 01 15:09:14.564553 2026] [:error] [pid 42619:tid 42644] [client 45.86.202.202:34737] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaPmGh_zUXcYaZE4AOeHmAAAAVc"]
[Sun Mar 01 15:09:15.048798 2026] [:error] [pid 41780:tid 41794] [client 45.86.202.178:30497] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaPmG8ONkVoocLIqzy0PNgAAA8s"]
[Sun Mar 01 15:09:17.695529 2026] [:error] [pid 38034:tid 38050] [client 45.86.202.174:37283] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaPmHQxtfZjwlJok9K-jmwAAAQw"]
[Sun Mar 01 15:09:18.475221 2026] [:error] [pid 41967:tid 41993] [client 45.86.202.190:26089] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaPmHoO1bqY181I02eGIZgAAAJg"]
[Sun Mar 01 15:09:19.907581 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.205:26275] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaPmH53RJaXMcw3y9V-XngAAABg"]
[Sun Mar 01 15:09:25.768923 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.224:46513] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaPmJQxtfZjwlJok9K-jtQAAAQI"]
[Sun Mar 01 15:09:27.755437 2026] [:error] [pid 38034:tid 38038] [client 45.86.202.193:35253] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaPmJwxtfZjwlJok9K-jwgAAAQI"]
[Sun Mar 01 15:09:29.761431 2026] [:error] [pid 44644:tid 44653] [client 45.86.202.193:33809] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaPmKZ3RJaXMcw3y9V-XrgAAAAY"]
[Sun Mar 01 15:09:30.464525 2026] [:error] [pid 41780:tid 41790] [client 45.86.202.203:33943] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaPmKsONkVoocLIqzy0PQQAAA8c"]
[Sun Mar 01 15:09:30.556636 2026] [:error] [pid 42619:tid 42628] [client 45.86.202.165:33651] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaPmKh_zUXcYaZE4AOeHuQAAAUc"]
[Sun Mar 01 15:09:31.165523 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.180:34623] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaPmK_KRPk6YnJBxw_wvXwAAAMU"]
[Sun Mar 01 15:09:31.201802 2026] [:error] [pid 41967:tid 41983] [client 45.86.202.190:42827] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaPmK4O1bqY181I02eGIeAAAAI4"]
[Sun Mar 01 15:09:36.046493 2026] [:error] [pid 40750:tid 40772] [client 45.86.202.165:63663] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaPmMAfBuk03yQKDyqvJgwAAAdM"]
[Sun Mar 01 15:09:36.060578 2026] [:error] [pid 41780:tid 41798] [client 45.86.202.201:22411] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaPmMMONkVoocLIqzy0PRwAAA88"]
[Sun Mar 01 15:09:36.602230 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.195:21563] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaPmMJ3RJaXMcw3y9V-XuAAAAA0"]
[Sun Mar 01 15:09:36.608545 2026] [:error] [pid 41967:tid 41988] [client 45.86.202.179:24905] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaPmMIO1bqY181I02eGIfwAAAJM"]
[Sun Mar 01 15:09:37.171919 2026] [:error] [pid 41342:tid 41356] [client 45.86.202.158:53541] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaPmMY4iJ6RAS5CatDlIMQAAAgs"]
[Sun Mar 01 15:09:39.874594 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.168:28535] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaPmMwxtfZjwlJok9K-j8AAAAQ8"]
[Sun Mar 01 15:09:40.523101 2026] [:error] [pid 38034:tid 38058] [client 45.86.202.171:28617] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aaPmNAxtfZjwlJok9K-j8gAAARQ"]
[Sun Mar 01 15:09:41.105698 2026] [:error] [pid 7133:tid 7141] [client 45.86.202.180:55721] [client 45.86.202.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.180, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaPmNfCtubh8pR64qB_FIQAAAEY"]
[Sun Mar 01 15:09:41.109949 2026] [proxy_fcgi:error] [pid 7133:tid 7141] [client 45.86.202.180:55721] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:09:41.371087 2026] [:error] [pid 7133:tid 7147] [client 45.86.202.180:55721] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaPmNfCtubh8pR64qB_FJgAAAEw"]
[Sun Mar 01 15:09:45.713798 2026] [:error] [pid 7133:tid 7137] [client 45.86.202.174:57177] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaPmOfCtubh8pR64qB_FOgAAAEI"]
[Sun Mar 01 15:09:46.257577 2026] [:error] [pid 41342:tid 41347] [client 45.86.202.177:64019] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "aaPmOo4iJ6RAS5CatDlIQQAAAgI"]
[Sun Mar 01 15:09:47.885803 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.205:31617] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aaPmO53RJaXMcw3y9V-X0gAAAA0"]
[Sun Mar 01 15:09:52.498960 2026] [:error] [pid 38241:tid 38245] [client 45.86.202.197:36209] [client 45.86.202.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.197, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaPmQPKRPk6YnJBxw_wvkQAAAME"]
[Sun Mar 01 15:09:56.155582 2026] [:error] [pid 41342:tid 41358] [client 45.86.202.195:20617] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaPmRI4iJ6RAS5CatDlITAAAAg0"]
[Sun Mar 01 15:09:56.837310 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.168:39219] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaPmRJ3RJaXMcw3y9V-X7gAAAAc"]
[Sun Mar 01 15:09:59.568053 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.199:48431] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaPmR53RJaXMcw3y9V-X8gAAAA0"]
[Sun Mar 01 15:10:00.233337 2026] [:error] [pid 38034:tid 38058] [client 45.86.202.178:21595] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aaPmSAxtfZjwlJok9K-kKAAAARQ"]
[Sun Mar 01 15:10:00.912498 2026] [proxy_fcgi:error] [pid 38241:tid 38251] [client 45.86.202.169:20723] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:10:01.221579 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.169:20723] [client 45.86.202.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.169, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaPmSfKRPk6YnJBxw_wv0wAAAMU"]
[Sun Mar 01 15:10:05.207696 2026] [:error] [pid 38241:tid 38247] [client 45.86.202.169:20723] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaPmTfKRPk6YnJBxw_wv4AAAAMM"]
[Sun Mar 01 15:10:08.230743 2026] [:error] [pid 38241:tid 38251] [client 45.86.202.197:36209] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaPmUPKRPk6YnJBxw_wv5QAAAMc"]
[Sun Mar 01 15:10:11.495130 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.179:29509] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaPmU53RJaXMcw3y9V-YDgAAAA0"]
[Sun Mar 01 15:10:11.632878 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.163:27427] [client 45.86.202.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaPmU-u0U4o7eSImsVQz4gAAAYQ"]
[Sun Mar 01 15:10:13.640098 2026] [:error] [pid 37032:tid 37042] [client 45.86.202.178:21245] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaPmVeu0U4o7eSImsVQz7wAAAYg"]
[Sun Mar 01 15:10:14.093362 2026] [:error] [pid 37032:tid 37042] [client 45.86.202.163:27427] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aaPmVuu0U4o7eSImsVQz9gAAAYg"]
[Sun Mar 01 15:10:14.299158 2026] [:error] [pid 37032:tid 37034] [client 45.86.202.170:42301] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaPmVuu0U4o7eSImsVQz9wAAAYA"]
[Sun Mar 01 15:10:19.027137 2026] [:error] [pid 37032:tid 37035] [client 45.86.202.189:44953] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaPmW-u0U4o7eSImsVQ0BwAAAYE"]
[Sun Mar 01 15:10:22.531128 2026] [:error] [pid 38034:tid 38058] [client 45.86.202.204:64539] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaPmXgxtfZjwlJok9K-kVwAAARQ"]
[Sun Mar 01 15:10:25.570113 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.224:54343] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaPmYZ3RJaXMcw3y9V-YSwAAABU"]
[Sun Mar 01 15:10:28.889148 2026] [:error] [pid 44644:tid 44656] [client 45.86.202.201:42979] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaPmZJ3RJaXMcw3y9V-YaAAAAAk"]
[Sun Mar 01 15:10:29.559699 2026] [:error] [pid 37032:tid 37035] [client 45.86.202.167:37777] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "aaPmZeu0U4o7eSImsVQ0MAAAAYE"]
[Sun Mar 01 15:10:32.126992 2026] [:error] [pid 37032:tid 37053] [client 45.86.202.185:37553] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "aaPmaOu0U4o7eSImsVQ0PAAAAZM"]
[Sun Mar 01 15:10:38.522733 2026] [:error] [pid 41967:tid 41976] [client 45.86.202.160:33847] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaPmboO1bqY181I02eGI8QAAAIc"]
[Sun Mar 01 15:10:40.718755 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.184:56423] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaPmcJ3RJaXMcw3y9V-YpgAAABg"]
[Sun Mar 01 15:10:41.824060 2026] [:error] [pid 38241:tid 38244] [client 45.86.202.182:34795] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaPmcfKRPk6YnJBxw_wwSwAAAMA"]
[Sun Mar 01 15:10:44.905646 2026] [:error] [pid 37032:tid 37034] [client 45.86.202.202:48683] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "aaPmdOu0U4o7eSImsVQ0lAAAAYA"]
[Sun Mar 01 15:10:45.193142 2026] [:error] [pid 37032:tid 37039] [client 45.86.202.202:48683] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaPmdeu0U4o7eSImsVQ0lgAAAYU"]
[Sun Mar 01 15:10:46.307181 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.158:25583] [client 45.86.202.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.158, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaPmdp3RJaXMcw3y9V-YtgAAAA0"]
[Sun Mar 01 15:10:47.565031 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.158:25583] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaPmd53RJaXMcw3y9V-YtwAAABg"]
[Sun Mar 01 15:10:48.669660 2026] [:error] [pid 37032:tid 37042] [client 45.86.202.224:26707] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaPmeOu0U4o7eSImsVQ0pAAAAYg"]
[Sun Mar 01 15:10:49.276535 2026] [:error] [pid 38241:tid 38251] [client 45.86.202.181:40821] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaPmefKRPk6YnJBxw_wwlAAAAMc"]
[Sun Mar 01 15:10:58.107513 2026] [:error] [pid 42619:tid 42644] [client 45.86.202.203:44471] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaPmgh_zUXcYaZE4AOeImAAAAVc"]
[Sun Mar 01 15:11:02.056990 2026] [:error] [pid 37032:tid 37037] [client 45.86.202.186:43673] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaPmhuu0U4o7eSImsVQ06QAAAYM"]
[Sun Mar 01 15:11:04.267329 2026] [:error] [pid 38241:tid 38261] [client 45.86.202.174:24563] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaPmiPKRPk6YnJBxw_ww0wAAANE"]
[Sun Mar 01 15:11:09.590337 2026] [:error] [pid 37032:tid 37039] [client 45.86.202.172:21397] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaPmjeu0U4o7eSImsVQ1DgAAAYU"]
[Sun Mar 01 15:11:11.354597 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.159:21861] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaPmj53RJaXMcw3y9V-ZGAAAABU"]
[Sun Mar 01 15:11:13.428227 2026] [:error] [pid 44644:tid 44665] [client 45.86.202.181:54551] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "aaPmkZ3RJaXMcw3y9V-ZLQAAABI"]
[Sun Mar 01 15:11:14.576632 2026] [:error] [pid 37032:tid 37035] [client 45.86.202.182:32127] [client 45.86.202.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.182, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaPmkuu0U4o7eSImsVQ1OgAAAYE"]
[Sun Mar 01 15:11:15.587153 2026] [:error] [pid 7133:tid 7149] [client 45.86.202.201:48745] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaPmk_Ctubh8pR64qB_FbgAAAE4"]
[Sun Mar 01 15:11:16.174256 2026] [:error] [pid 37032:tid 37053] [client 45.86.202.204:38905] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaPmlOu0U4o7eSImsVQ1PgAAAZM"]
[Sun Mar 01 15:11:19.453822 2026] [:error] [pid 37032:tid 37058] [client 45.86.202.177:20509] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaPml-u0U4o7eSImsVQ1UQAAAZg"]
[Sun Mar 01 15:11:19.816657 2026] [:error] [pid 37032:tid 37058] [client 45.86.202.182:32127] [client 45.86.202.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaPml-u0U4o7eSImsVQ1VAAAAZg"]
[Sun Mar 01 15:11:21.884796 2026] [:error] [pid 41967:tid 41993] [client 45.86.202.190:55175] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aaPmmYO1bqY181I02eGJPQAAAJg"]
[Sun Mar 01 15:11:25.826613 2026] [:error] [pid 44644:tid 44671] [client 45.86.202.158:53321] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaPmnZ3RJaXMcw3y9V-ZUwAAABg"]
[Sun Mar 01 15:11:26.029069 2026] [:error] [pid 41780:tid 41805] [client 45.86.202.164:33133] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaPmnsONkVoocLIqzy0PkAAAA9Y"]
[Sun Mar 01 15:11:26.383098 2026] [:error] [pid 38241:tid 38245] [client 45.86.202.224:44003] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaPmnvKRPk6YnJBxw_wxOQAAAME"]
[Sun Mar 01 15:11:30.643223 2026] [:error] [pid 44644:tid 44662] [client 45.86.202.172:46245] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaPmop3RJaXMcw3y9V-ZfgAAAA8"]
[Sun Mar 01 15:11:31.357253 2026] [:error] [pid 37032:tid 37058] [client 45.86.202.159:30333] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaPmo-u0U4o7eSImsVQ1fAAAAZg"]
[Sun Mar 01 15:11:34.279217 2026] [:error] [pid 44644:tid 44647] [client 45.86.202.224:51031] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaPmpp3RJaXMcw3y9V-ZnQAAAAA"]
[Sun Mar 01 15:11:37.788762 2026] [:error] [pid 41967:tid 41982] [client 54.37.252.229:60454] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaPmqYO1bqY181I02eGJVAAAAI0"]
[Sun Mar 01 15:11:37.835873 2026] [:error] [pid 42619:tid 42640] [client 45.86.202.158:21317] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaPmqR_zUXcYaZE4AOeJTAAAAVM"]
[Sun Mar 01 15:11:38.907972 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.187:58791] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaPmqp3RJaXMcw3y9V-ZsQAAABU"]
[Sun Mar 01 15:11:41.053632 2026] [:error] [pid 37032:tid 37058] [client 45.86.202.165:27395] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaPmreu0U4o7eSImsVQ1lQAAAZg"]
[Sun Mar 01 15:11:42.436628 2026] [:error] [pid 41967:tid 41985] [client 45.86.202.185:24667] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaPmroO1bqY181I02eGJYAAAAJA"]
[Sun Mar 01 15:11:43.045288 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.225:34473] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaPmr53RJaXMcw3y9V-ZygAAAA0"]
[Sun Mar 01 15:11:44.622586 2026] [:error] [pid 44644:tid 44654] [client 54.37.252.229:38108] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aaPmsJ3RJaXMcw3y9V-Z0QAAAAc"]
[Sun Mar 01 15:11:45.256786 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.176:32751] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaPmsfKRPk6YnJBxw_wxawAAAMU"]
[Sun Mar 01 15:11:45.500492 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.184:54543] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aaPmseu0U4o7eSImsVQ1ogAAAYQ"]
[Sun Mar 01 15:11:48.739269 2026] [:error] [pid 42619:tid 42642] [client 45.86.202.205:23547] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaPmtB_zUXcYaZE4AOeJaQAAAVU"]
[Sun Mar 01 15:11:50.126211 2026] [:error] [pid 41967:tid 41986] [client 45.86.202.187:30657] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaPmtoO1bqY181I02eGJeQAAAJE"]
[Sun Mar 01 15:11:50.644298 2026] [:error] [pid 42619:tid 42631] [client 54.37.252.229:38438] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aaPmth_zUXcYaZE4AOeJdQAAAUo"]
[Sun Mar 01 15:11:52.856301 2026] [:error] [pid 37032:tid 37053] [client 45.86.202.165:48933] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaPmuOu0U4o7eSImsVQ1xgAAAZM"]
[Sun Mar 01 15:11:53.472228 2026] [:error] [pid 37032:tid 37053] [client 45.86.202.181:65407] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaPmueu0U4o7eSImsVQ1ywAAAZM"]
[Sun Mar 01 15:11:54.142983 2026] [:error] [pid 37032:tid 37039] [client 45.86.202.170:60931] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aaPmuuu0U4o7eSImsVQ10wAAAYU"]
[Sun Mar 01 15:11:55.590188 2026] [:error] [pid 37032:tid 37058] [client 45.86.202.162:48429] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaPmu-u0U4o7eSImsVQ13QAAAZg"]
[Sun Mar 01 15:11:56.412078 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.188:56177] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aaPmvPKRPk6YnJBxw_wxfwAAAMU"]
[Sun Mar 01 15:11:57.354990 2026] [:error] [pid 44644:tid 44647] [client 54.37.252.229:44360] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaPmvZ3RJaXMcw3y9V-aMQAAAAA"]
[Sun Mar 01 15:11:58.998287 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.188:59293] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaPmvuu0U4o7eSImsVQ19AAAAYQ"]
[Sun Mar 01 15:12:00.300857 2026] [:error] [pid 37032:tid 37042] [client 45.86.202.225:38991] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaPmwOu0U4o7eSImsVQ1-AAAAYg"]
[Sun Mar 01 15:12:02.069179 2026] [:error] [pid 38034:tid 38040] [client 45.86.202.166:40233] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaPmwgxtfZjwlJok9K-kggAAAQQ"]
[Sun Mar 01 15:12:02.892199 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.205:41735] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaPmwuu0U4o7eSImsVQ1-gAAAYQ"]
[Sun Mar 01 15:12:03.059041 2026] [:error] [pid 7133:tid 7153] [client 54.37.252.229:44366] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aaPmw_Ctubh8pR64qB_FsAAAAFI"]
[Sun Mar 01 15:12:04.147094 2026] [:error] [pid 42619:tid 42644] [client 45.86.202.184:56071] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaPmxB_zUXcYaZE4AOeJtwAAAVc"]
[Sun Mar 01 15:12:07.107129 2026] [:error] [pid 38241:tid 38250] [client 54.37.252.229:39962] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aaPmx_KRPk6YnJBxw_wxmgAAAMY"]
[Sun Mar 01 15:12:08.813625 2026] [:error] [pid 41342:tid 41367] [client 45.86.202.184:28653] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaPmyI4iJ6RAS5CatDlIfAAAAhY"]
[Sun Mar 01 15:12:09.385053 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.175:48113] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaPmyZ3RJaXMcw3y9V-abgAAAA4"]
[Sun Mar 01 15:12:09.978210 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.180:26423] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaPmyfKRPk6YnJBxw_wxoAAAAMU"]
[Sun Mar 01 15:12:10.551405 2026] [:error] [pid 41780:tid 41787] [client 45.86.202.189:57291] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaPmysONkVoocLIqzy0PoQAAA8Q"]
[Sun Mar 01 15:12:11.158205 2026] [:error] [pid 37032:tid 37053] [client 45.86.202.188:22703] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaPmy-u0U4o7eSImsVQ2CwAAAZM"]
[Sun Mar 01 15:12:11.768044 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.188:59599] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaPmy53RJaXMcw3y9V-adwAAAA4"]
[Sun Mar 01 15:12:12.592919 2026] [:error] [pid 37032:tid 37038] [client 54.37.252.229:39978] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaPmzOu0U4o7eSImsVQ2FQAAAYQ"]
[Sun Mar 01 15:12:13.234969 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.188:46369] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaPmzeu0U4o7eSImsVQ2FwAAAYQ"]
[Sun Mar 01 15:12:13.964847 2026] [:error] [pid 42619:tid 42642] [client 45.86.202.163:64445] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaPmzR_zUXcYaZE4AOeJ1AAAAVU"]
[Sun Mar 01 15:12:14.690780 2026] [proxy_fcgi:error] [pid 38034:tid 38053] [client 45.86.202.156:49391] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Sun Mar 01 15:12:14.993373 2026] [:error] [pid 37032:tid 37034] [client 45.86.202.193:27289] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaPmzuu0U4o7eSImsVQ2HgAAAYA"]
[Sun Mar 01 15:12:15.377781 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.180:57061] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaPmzwxtfZjwlJok9K-kqQAAAQ8"]
[Sun Mar 01 15:12:17.749461 2026] [:error] [pid 41780:tid 41784] [client 54.37.252.229:40938] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaPm0cONkVoocLIqzy0PpAAAA8E"]
[Sun Mar 01 15:12:18.477291 2026] [:error] [pid 38034:tid 38059] [client 45.86.202.156:52677] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaPm0gxtfZjwlJok9K-kswAAARU"]
[Sun Mar 01 15:12:19.110561 2026] [:error] [pid 42619:tid 42639] [client 45.86.202.163:47361] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaPm0x_zUXcYaZE4AOeJ3AAAAVI"]
[Sun Mar 01 15:12:19.727013 2026] [:error] [pid 7133:tid 7146] [client 45.86.202.199:53019] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaPm0_Ctubh8pR64qB_FvAAAAEs"]
[Sun Mar 01 15:12:20.335502 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.171:26755] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaPm1J3RJaXMcw3y9V-angAAAAc"]
[Sun Mar 01 15:12:22.352890 2026] [:error] [pid 38034:tid 38040] [client 45.86.202.166:46371] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaPm1gxtfZjwlJok9K-kuQAAAQQ"]
[Sun Mar 01 15:12:23.558644 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.160:40075] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaPm1-u0U4o7eSImsVQ2SAAAAYQ"]
[Sun Mar 01 15:12:23.589507 2026] [:error] [pid 38241:tid 38249] [client 54.37.252.229:40942] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaPm1_KRPk6YnJBxw_wxtQAAAMU"]
[Sun Mar 01 15:12:24.146411 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.195:59101] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaPm2PKRPk6YnJBxw_wxuAAAAMY"]
[Sun Mar 01 15:12:25.560135 2026] [:error] [pid 37032:tid 37039] [client 45.86.202.225:30081] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaPm2eu0U4o7eSImsVQ2TAAAAYU"]
[Sun Mar 01 15:12:28.067223 2026] [:error] [pid 42619:tid 42623] [client 54.37.252.229:44406] [client 54.37.252.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaPm3B_zUXcYaZE4AOeJ5gAAAUI"]
[Sun Mar 01 15:12:31.473685 2026] [:error] [pid 7133:tid 7152] [client 45.86.202.196:33001] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaPm3_Ctubh8pR64qB_FzQAAAFE"]
[Sun Mar 01 15:12:34.901398 2026] [autoindex:error] [pid 38241:tid 38249] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:35.210670 2026] [autoindex:error] [pid 38241:tid 38245] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:35.541899 2026] [autoindex:error] [pid 38241:tid 38245] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:35.805817 2026] [autoindex:error] [pid 38241:tid 38249] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:37.592719 2026] [autoindex:error] [pid 38241:tid 38249] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:37.909307 2026] [autoindex:error] [pid 38241:tid 38251] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:38.209230 2026] [autoindex:error] [pid 38241:tid 38245] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:38.554671 2026] [autoindex:error] [pid 38241:tid 38249] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:38.881703 2026] [autoindex:error] [pid 38241:tid 38251] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:39.226243 2026] [autoindex:error] [pid 38241:tid 38250] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:40.108694 2026] [autoindex:error] [pid 38241:tid 38245] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:41.751920 2026] [autoindex:error] [pid 38241:tid 38249] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:42.038502 2026] [autoindex:error] [pid 38241:tid 38251] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:42.108117 2026] [:error] [pid 41967:tid 41974] [client 45.86.202.178:33903] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaPm6oO1bqY181I02eGJswAAAIU"]
[Sun Mar 01 15:12:45.031589 2026] [autoindex:error] [pid 38241:tid 38249] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:45.328169 2026] [autoindex:error] [pid 38241:tid 38245] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:45.633263 2026] [autoindex:error] [pid 38241:tid 38245] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:45.921458 2026] [autoindex:error] [pid 38241:tid 38245] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:47.484747 2026] [:error] [pid 42619:tid 42642] [client 45.86.202.187:34083] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaPm7x_zUXcYaZE4AOeKFQAAAVU"]
[Sun Mar 01 15:12:48.169050 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.194:31335] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaPm8J3RJaXMcw3y9V-a6wAAABU"]
[Sun Mar 01 15:12:48.669856 2026] [autoindex:error] [pid 38241:tid 38268] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:48.961188 2026] [autoindex:error] [pid 38241:tid 38251] [client 45.86.202.176:23557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:52.413002 2026] [autoindex:error] [pid 37032:tid 37039] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:55.110939 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.161:51993] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaPm9wxtfZjwlJok9K-k6gAAAQ8"]
[Sun Mar 01 15:12:56.262269 2026] [autoindex:error] [pid 37032:tid 37034] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:56.672941 2026] [autoindex:error] [pid 37032:tid 37045] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:12:56.998299 2026] [autoindex:error] [pid 37032:tid 37035] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:00.516320 2026] [proxy_fcgi:error] [pid 44644:tid 44660] [client 45.86.202.186:46177] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:13:00.875164 2026] [proxy_fcgi:error] [pid 44644:tid 44654] [client 45.86.202.186:46177] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:13:01.157359 2026] [proxy_fcgi:error] [pid 44644:tid 44654] [client 45.86.202.186:46177] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:13:05.615137 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.186:46177] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaPnAZ3RJaXMcw3y9V-bHwAAAA0"]
[Sun Mar 01 15:13:05.690605 2026] [autoindex:error] [pid 37032:tid 37045] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:06.155633 2026] [:error] [pid 7165:tid 7176] [client 45.86.202.177:40389] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaPnAhRjCrA8qWBjgG8nkQAAAkk"]
[Sun Mar 01 15:13:07.219580 2026] [autoindex:error] [pid 37032:tid 37045] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:07.495565 2026] [autoindex:error] [pid 37032:tid 37034] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:07.790617 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.181:29687] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaPnA53RJaXMcw3y9V-bJQAAAA4"]
[Sun Mar 01 15:13:08.343727 2026] [autoindex:error] [pid 37032:tid 37038] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:08.445185 2026] [:error] [pid 41967:tid 41980] [client 45.86.202.183:47245] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaPnBIO1bqY181I02eGJygAAAIs"]
[Sun Mar 01 15:13:08.834017 2026] [autoindex:error] [pid 37032:tid 37045] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:09.065603 2026] [:error] [pid 38034:tid 38053] [client 45.86.202.167:36253] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaPnBQxtfZjwlJok9K-lEwAAAQ8"]
[Sun Mar 01 15:13:09.259077 2026] [autoindex:error] [pid 37032:tid 37042] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:09.767909 2026] [:error] [pid 38034:tid 38056] [client 45.86.202.205:52855] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaPnBQxtfZjwlJok9K-lFgAAARI"]
[Sun Mar 01 15:13:11.516843 2026] [:error] [pid 7165:tid 7177] [client 45.86.202.171:44161] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaPnBxRjCrA8qWBjgG8noQAAAko"]
[Sun Mar 01 15:13:12.583491 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.175:55931] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaPnCJ3RJaXMcw3y9V-bMQAAAAc"]
[Sun Mar 01 15:13:13.210733 2026] [:error] [pid 42619:tid 42640] [client 45.86.202.161:21969] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaPnCR_zUXcYaZE4AOeKTwAAAVM"]
[Sun Mar 01 15:13:14.492605 2026] [autoindex:error] [pid 37032:tid 37035] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:14.864148 2026] [:error] [pid 44644:tid 44654] [client 45.86.202.184:33097] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaPnCp3RJaXMcw3y9V-bNgAAAAc"]
[Sun Mar 01 15:13:15.939498 2026] [autoindex:error] [pid 37032:tid 37035] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:18.198440 2026] [:error] [pid 42619:tid 42642] [client 45.86.202.203:45525] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaPnDh_zUXcYaZE4AOeKWAAAAVU"]
[Sun Mar 01 15:13:20.947679 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.190:24159] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaPnEJ3RJaXMcw3y9V-bSAAAABU"]
[Sun Mar 01 15:13:25.282765 2026] [:error] [pid 38241:tid 38245] [client 45.86.202.170:44913] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaPnFfKRPk6YnJBxw_wykwAAAME"]
[Sun Mar 01 15:13:28.441451 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.165:48023] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaPnGPKRPk6YnJBxw_wyowAAAMY"]
[Sun Mar 01 15:13:32.930260 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.156:35663] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaPnHPKRPk6YnJBxw_wysAAAAMU"]
[Sun Mar 01 15:13:39.072454 2026] [:error] [pid 42619:tid 42639] [client 45.86.202.189:55101] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaPnIx_zUXcYaZE4AOeKcwAAAVI"]
[Sun Mar 01 15:13:41.739877 2026] [:error] [pid 37032:tid 37045] [client 45.86.202.188:61471] [client 45.86.202.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaPnJeu0U4o7eSImsVQ2-AAAAYs"]
[Sun Mar 01 15:13:49.701677 2026] [autoindex:error] [pid 37032:tid 37039] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:49.996406 2026] [autoindex:error] [pid 37032:tid 37042] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:50.280646 2026] [autoindex:error] [pid 37032:tid 37035] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:50.579378 2026] [autoindex:error] [pid 37032:tid 37045] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:50.902588 2026] [autoindex:error] [pid 37032:tid 37039] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:51.177967 2026] [autoindex:error] [pid 37032:tid 37038] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:51.513164 2026] [autoindex:error] [pid 37032:tid 37042] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:51.777834 2026] [autoindex:error] [pid 37032:tid 37034] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:53.331760 2026] [autoindex:error] [pid 37032:tid 37058] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:54.974608 2026] [autoindex:error] [pid 37032:tid 37050] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:55.274585 2026] [autoindex:error] [pid 37032:tid 37042] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:55.583899 2026] [autoindex:error] [pid 37032:tid 37034] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:57.235055 2026] [autoindex:error] [pid 37032:tid 37038] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:57.518862 2026] [autoindex:error] [pid 37032:tid 37035] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:57.807636 2026] [autoindex:error] [pid 37032:tid 37039] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:13:58.097971 2026] [autoindex:error] [pid 37032:tid 37035] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:04.591468 2026] [:error] [pid 44644:tid 44661] [client 45.86.202.195:60543] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaPnPJ3RJaXMcw3y9V-bwAAAAA4"]
[Sun Mar 01 15:14:05.163481 2026] [:error] [pid 44644:tid 44660] [client 45.86.202.187:29569] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaPnPZ3RJaXMcw3y9V-bwwAAAA0"]
[Sun Mar 01 15:14:05.815952 2026] [:error] [pid 37032:tid 37045] [client 45.86.202.187:44837] [client 45.86.202.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.187, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaPnPeu0U4o7eSImsVQ3SQAAAYs"]
[Sun Mar 01 15:14:08.767368 2026] [:error] [pid 37032:tid 37050] [client 45.86.202.187:44837] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaPnQOu0U4o7eSImsVQ3WwAAAZA"]
[Sun Mar 01 15:14:12.052330 2026] [:error] [pid 37032:tid 37035] [client 45.86.202.158:59743] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaPnROu0U4o7eSImsVQ3aQAAAYE"]
[Sun Mar 01 15:14:12.649475 2026] [:error] [pid 38034:tid 38056] [client 45.86.202.185:50177] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaPnRAxtfZjwlJok9K-lIgAAARI"]
[Sun Mar 01 15:14:18.975252 2026] [:error] [pid 38034:tid 38056] [client 45.86.202.171:38723] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaPnSgxtfZjwlJok9K-lKQAAARI"]
[Sun Mar 01 15:14:19.558861 2026] [:error] [pid 41967:tid 41992] [client 45.86.202.194:25607] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aaPnS4O1bqY181I02eGKDgAAAJc"]
[Sun Mar 01 15:14:26.876699 2026] [:error] [pid 7165:tid 7176] [client 45.86.202.166:38233] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaPnUhRjCrA8qWBjgG8oNwAAAkk"]
[Sun Mar 01 15:14:30.211463 2026] [proxy_fcgi:error] [pid 38241:tid 38268] [client 45.86.202.194:39241] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:14:30.332445 2026] [autoindex:error] [pid 37032:tid 37035] [client 45.86.202.166:51293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:31.916176 2026] [:error] [pid 38241:tid 38262] [client 45.86.202.194:39241] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "aaPnV_KRPk6YnJBxw_wzWAAAANI"]
[Sun Mar 01 15:14:32.549633 2026] [:error] [pid 37032:tid 37035] [client 45.86.202.162:55863] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaPnWOu0U4o7eSImsVQ3lgAAAYE"]
[Sun Mar 01 15:14:35.821172 2026] [:error] [pid 44644:tid 44655] [client 45.86.202.200:35027] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaPnW53RJaXMcw3y9V-cWwAAAAg"]
[Sun Mar 01 15:14:36.352690 2026] [:error] [pid 41967:tid 41991] [client 45.86.202.179:57933] [client 45.86.202.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaPnXIO1bqY181I02eGKFgAAAJY"]
[Sun Mar 01 15:14:45.776858 2026] [:error] [pid 42619:tid 42639] [client 45.86.202.201:31385] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaPnZR_zUXcYaZE4AOeLCgAAAVI"]
[Sun Mar 01 15:14:45.845769 2026] [autoindex:error] [pid 41780:tid 41804] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:46.451193 2026] [:error] [pid 38241:tid 38260] [client 45.86.202.156:62765] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaPnZvKRPk6YnJBxw_wzjgAAANA"]
[Sun Mar 01 15:14:51.089645 2026] [autoindex:error] [pid 41780:tid 41803] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:51.654733 2026] [autoindex:error] [pid 41780:tid 41801] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:54.011558 2026] [:error] [pid 44644:tid 44655] [client 45.86.202.175:46585] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aaPnbp3RJaXMcw3y9V-chwAAAAg"]
[Sun Mar 01 15:14:54.602733 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.167:56331] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaPnbp3RJaXMcw3y9V-cigAAABU"]
[Sun Mar 01 15:14:55.232360 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.201:35557] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaPnb_KRPk6YnJBxw_wztwAAAMY"]
[Sun Mar 01 15:14:57.481600 2026] [autoindex:error] [pid 41780:tid 41796] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:57.776911 2026] [autoindex:error] [pid 41780:tid 41799] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:58.044294 2026] [autoindex:error] [pid 41780:tid 41785] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:58.309684 2026] [autoindex:error] [pid 41780:tid 41805] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:58.575164 2026] [autoindex:error] [pid 41780:tid 41795] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:58.878937 2026] [autoindex:error] [pid 41780:tid 41788] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:59.174101 2026] [autoindex:error] [pid 41780:tid 41807] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:59.507938 2026] [autoindex:error] [pid 41780:tid 41792] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:14:59.797068 2026] [autoindex:error] [pid 41780:tid 41787] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:15:02.222115 2026] [:error] [pid 44644:tid 44655] [client 45.86.202.185:62917] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaPndp3RJaXMcw3y9V-cqwAAAAg"]
[Sun Mar 01 15:15:04.539468 2026] [:error] [pid 41967:tid 41985] [client 45.86.202.205:20485] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaPneIO1bqY181I02eGKKAAAAJA"]
[Sun Mar 01 15:15:14.346157 2026] [:error] [pid 44644:tid 44647] [client 45.86.202.191:59059] [client 45.86.202.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.191, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "aaPngp3RJaXMcw3y9V-cwAAAAAA"]
[Sun Mar 01 15:15:22.906702 2026] [:error] [pid 44644:tid 44647] [client 45.86.202.191:59059] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaPnip3RJaXMcw3y9V-c4AAAAAA"]
[Sun Mar 01 15:15:23.441274 2026] [:error] [pid 38241:tid 38260] [client 45.86.202.189:38739] [client 45.86.202.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.189, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaPni_KRPk6YnJBxw_w0JAAAANA"]
[Sun Mar 01 15:15:25.454580 2026] [autoindex:error] [pid 41780:tid 41794] [client 45.86.202.200:65257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:15:38.818457 2026] [proxy_fcgi:error] [pid 38241:tid 38262] [client 45.86.202.189:38739] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:15:58.640514 2026] [:error] [pid 41780:tid 41789] [client 45.86.202.200:65257] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaPnrsONkVoocLIqzy0QUgAAA8Y"]
[Sun Mar 01 15:16:02.836799 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.198:46981] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaPnsvKRPk6YnJBxw_w1DAAAAMU"]
[Sun Mar 01 15:16:06.363045 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.195:34299] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaPntvKRPk6YnJBxw_w1JwAAAMY"]
[Sun Mar 01 15:16:19.033587 2026] [:error] [pid 37032:tid 37047] [client 45.86.202.178:25579] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaPnw-u0U4o7eSImsVQ5GQAAAY0"]
[Sun Mar 01 15:16:22.433733 2026] [:error] [pid 37032:tid 37042] [client 45.86.202.205:20731] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaPnxuu0U4o7eSImsVQ5IQAAAYg"]
[Sun Mar 01 15:16:24.598122 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.175:22711] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaPnyPKRPk6YnJBxw_w1XwAAAMY"]
[Sun Mar 01 15:16:30.877305 2026] [proxy_fcgi:error] [pid 37032:tid 37045] [client 45.86.202.205:60577] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:16:31.208170 2026] [proxy_fcgi:error] [pid 37032:tid 37047] [client 45.86.202.205:60577] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:16:31.513461 2026] [:error] [pid 37032:tid 37050] [client 45.86.202.205:60577] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaPnz-u0U4o7eSImsVQ5cwAAAZA"]
[Sun Mar 01 15:16:32.093930 2026] [:error] [pid 37032:tid 37034] [client 45.86.202.171:51883] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaPn0Ou0U4o7eSImsVQ5fAAAAYA"]
[Sun Mar 01 15:16:41.685208 2026] [:error] [pid 37032:tid 37047] [client 45.86.202.157:22215] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaPn2eu0U4o7eSImsVQ50AAAAY0"]
[Sun Mar 01 15:16:43.714552 2026] [:error] [pid 7165:tid 7167] [client 45.86.202.224:46871] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aaPn2xRjCrA8qWBjgG8p6wAAAkA"]
[Sun Mar 01 15:16:48.287787 2026] [:error] [pid 44644:tid 44667] [client 45.86.202.165:61223] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaPn4J3RJaXMcw3y9V-eBQAAABQ"]
[Sun Mar 01 15:16:58.680779 2026] [:error] [pid 38241:tid 38254] [client 45.86.202.201:62487] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaPn6vKRPk6YnJBxw_w1tAAAAMo"]
[Sun Mar 01 15:16:59.347802 2026] [proxy_fcgi:error] [pid 7165:tid 7173] [client 45.86.202.203:22703] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:17:02.509510 2026] [:error] [pid 7165:tid 7169] [client 45.86.202.203:22703] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaPn7hRjCrA8qWBjgG8qAgAAAkI"]
[Sun Mar 01 15:17:10.608600 2026] [proxy_fcgi:error] [pid 38241:tid 38254] [client 45.86.202.166:51013] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:17:12.100271 2026] [:error] [pid 38241:tid 38254] [client 45.86.202.166:51013] [client 45.86.202.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.166, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaPn-PKRPk6YnJBxw_w2BgAAAMo"]
[Sun Mar 01 15:17:19.476574 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.166:51013] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaPn__KRPk6YnJBxw_w2PgAAAMU"]
[Sun Mar 01 15:17:21.504240 2026] [:error] [pid 7165:tid 7169] [client 45.86.202.184:42903] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaPoARRjCrA8qWBjgG8qJAAAAkI"]
[Sun Mar 01 15:17:27.134071 2026] [:error] [pid 7165:tid 7172] [client 45.86.202.224:63463] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaPoBxRjCrA8qWBjgG8qMAAAAkU"]
[Sun Mar 01 15:17:33.883560 2026] [:error] [pid 41342:tid 41350] [client 45.86.202.180:35539] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaPoDY4iJ6RAS5CatDlI1QAAAgU"]
[Sun Mar 01 15:17:36.122592 2026] [:error] [pid 37032:tid 37050] [client 45.86.202.160:28827] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaPoEOu0U4o7eSImsVQ6xgAAAZA"]
[Sun Mar 01 15:17:41.553086 2026] [:error] [pid 42619:tid 42633] [client 45.86.202.176:62519] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaPoFR_zUXcYaZE4AOeMpQAAAUw"]
[Sun Mar 01 15:17:45.259503 2026] [proxy_fcgi:error] [pid 44644:tid 44668] [client 45.86.202.174:21493] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:17:45.594106 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.174:21493] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaPoGZ3RJaXMcw3y9V-emQAAABU"]
[Sun Mar 01 15:17:46.306154 2026] [proxy_fcgi:error] [pid 7165:tid 7183] [client 45.86.202.190:43465] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Sun Mar 01 15:17:46.907291 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.160:32283] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "aaPoGp3RJaXMcw3y9V-eqgAAABU"]
[Sun Mar 01 15:17:47.533347 2026] [:error] [pid 41342:tid 41368] [client 45.86.202.160:51529] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaPoG44iJ6RAS5CatDlI2AAAAhc"]
[Sun Mar 01 15:17:48.113209 2026] [:error] [pid 44644:tid 44668] [client 45.86.202.161:52793] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaPoHJ3RJaXMcw3y9V-erwAAABU"]
[Sun Mar 01 15:17:48.841706 2026] [:error] [pid 38241:tid 38265] [client 45.86.202.197:59161] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaPoHPKRPk6YnJBxw_w2ygAAANU"]
[Sun Mar 01 15:17:49.593468 2026] [:error] [pid 38034:tid 38049] [client 45.86.202.201:51185] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaPoHQxtfZjwlJok9K-lxQAAAQs"]
[Sun Mar 01 15:17:50.158156 2026] [:error] [pid 7165:tid 7179] [client 45.86.202.203:62631] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaPoHhRjCrA8qWBjgG8qhgAAAkw"]
[Sun Mar 01 15:17:53.538833 2026] [:error] [pid 44644:tid 44652] [client 45.86.202.173:33585] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaPoIZ3RJaXMcw3y9V-ezgAAAAU"]
[Sun Mar 01 15:17:54.181162 2026] [:error] [pid 7165:tid 7169] [client 45.86.202.197:60635] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaPoIhRjCrA8qWBjgG8qkwAAAkI"]
[Sun Mar 01 15:17:54.808905 2026] [:error] [pid 40750:tid 40774] [client 45.86.202.172:42565] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaPoIgfBuk03yQKDyqvKBAAAAdU"]
[Sun Mar 01 15:17:56.477087 2026] [:error] [pid 37032:tid 37034] [client 45.86.202.173:57915] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaPoJOu0U4o7eSImsVQ7DwAAAYA"]
[Sun Mar 01 15:17:59.942323 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.156:34381] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaPoJwxtfZjwlJok9K-l5AAAAQE"]
[Sun Mar 01 15:18:00.558213 2026] [proxy_fcgi:error] [pid 37032:tid 37034] [client 45.86.202.169:48065] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:18:05.312375 2026] [:error] [pid 37032:tid 37041] [client 45.86.202.169:48065] [client 45.86.202.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.169, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaPoLeu0U4o7eSImsVQ7SAAAAYc"]
[Sun Mar 01 15:18:13.342397 2026] [:error] [pid 37032:tid 37047] [client 45.86.202.169:48065] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaPoNeu0U4o7eSImsVQ7pgAAAY0"]
[Sun Mar 01 15:18:13.891315 2026] [:error] [pid 7133:tid 7158] [client 45.86.202.194:32293] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaPoNfCtubh8pR64qB_GfwAAAFc"]
[Sun Mar 01 15:18:36.508677 2026] [:error] [pid 37032:tid 37035] [client 45.86.202.174:39937] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaPoTOu0U4o7eSImsVQ8GQAAAYE"]
[Sun Mar 01 15:18:37.135667 2026] [:error] [pid 7165:tid 7177] [client 45.86.202.180:65347] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaPoTRRjCrA8qWBjgG8rDgAAAko"]
[Sun Mar 01 15:18:37.735044 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.181:51241] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaPoTfKRPk6YnJBxw_w3-QAAAMU"]
[Sun Mar 01 15:18:46.268624 2026] [:error] [pid 41780:tid 41796] [client 45.86.202.187:32349] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaPoVsONkVoocLIqzy0QrgAAA80"]
[Sun Mar 01 15:18:46.927016 2026] [:error] [pid 37032:tid 37035] [client 45.86.202.176:56339] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaPoVuu0U4o7eSImsVQ8WwAAAYE"]
[Sun Mar 01 15:18:47.466280 2026] [:error] [pid 37032:tid 37038] [client 45.86.202.168:54353] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaPoV-u0U4o7eSImsVQ8XQAAAYQ"]
[Sun Mar 01 15:18:53.828798 2026] [:error] [pid 7165:tid 7177] [client 45.86.202.173:20699] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaPoXRRjCrA8qWBjgG8rPAAAAko"]
[Sun Mar 01 15:18:55.876280 2026] [:error] [pid 38241:tid 38249] [client 45.86.202.198:59145] [client 45.86.202.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaPoX_KRPk6YnJBxw_w4IAAAAMU"]
[Sun Mar 01 15:18:59.123204 2026] [:error] [pid 37032:tid 37055] [client 45.86.202.200:54999] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaPoY-u0U4o7eSImsVQ8ewAAAZU"]
[Sun Mar 01 15:19:15.138028 2026] [:error] [pid 7165:tid 7190] [client 45.86.202.175:36349] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaPocxRjCrA8qWBjgG8rcwAAAlc"]
[Sun Mar 01 15:19:18.493792 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.167:30189] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "aaPodvKRPk6YnJBxw_w4SQAAAM8"]
[Sun Mar 01 15:19:27.116101 2026] [:error] [pid 7165:tid 7179] [client 45.86.202.176:55187] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaPofxRjCrA8qWBjgG8rigAAAkw"]
[Sun Mar 01 15:19:30.675047 2026] [:error] [pid 38241:tid 38254] [client 45.86.202.165:55813] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaPogvKRPk6YnJBxw_w4XQAAAMo"]
[Sun Mar 01 15:19:36.426915 2026] [:error] [pid 42619:tid 42639] [client 45.86.202.174:62311] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaPoiB_zUXcYaZE4AOeNKQAAAVI"]
[Sun Mar 01 15:19:43.880975 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.173:22249] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaPojwxtfZjwlJok9K-nnAAAAQE"]
[Sun Mar 01 15:19:47.160664 2026] [:error] [pid 7133:tid 7144] [client 45.86.202.197:37203] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaPok_Ctubh8pR64qB_GqAAAAEk"]
[Sun Mar 01 15:19:47.908519 2026] [:error] [pid 41967:tid 41970] [client 45.86.202.184:40821] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaPok4O1bqY181I02eGLcQAAAIE"]
[Sun Mar 01 15:19:56.058553 2026] [:error] [pid 38034:tid 38047] [client 45.86.202.162:39691] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaPonAxtfZjwlJok9K-n1gAAAQk"]
[Sun Mar 01 15:20:04.392547 2026] [:error] [pid 7165:tid 7183] [client 45.86.202.191:25071] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaPopBRjCrA8qWBjgG8rtQAAAlA"]
[Sun Mar 01 15:20:10.122970 2026] [:error] [pid 38034:tid 38036] [client 45.86.202.176:39591] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaPoqgxtfZjwlJok9K-n_QAAAQA"]
[Sun Mar 01 15:20:10.690531 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.196:55897] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaPoqgxtfZjwlJok9K-n_gAAARY"]
[Sun Mar 01 15:20:14.012528 2026] [:error] [pid 37032:tid 37042] [client 45.86.202.183:52643] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaPoruu0U4o7eSImsVQ9MwAAAYg"]
[Sun Mar 01 15:20:19.063402 2026] [:error] [pid 7165:tid 7177] [client 45.86.202.172:59201] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaPosxRjCrA8qWBjgG8ryQAAAko"]
[Sun Mar 01 15:20:19.675173 2026] [:error] [pid 7133:tid 7151] [client 45.86.202.189:27867] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaPos_Ctubh8pR64qB_GtgAAAFA"]
[Sun Mar 01 15:20:29.534912 2026] [:error] [pid 41967:tid 41982] [client 45.86.202.176:60425] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaPovYO1bqY181I02eGLuwAAAI0"]
[Sun Mar 01 15:20:32.901905 2026] [:error] [pid 41967:tid 41969] [client 45.86.202.225:40447] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaPowIO1bqY181I02eGLyAAAAIA"]
[Sun Mar 01 15:20:33.534209 2026] [:error] [pid 38241:tid 38254] [client 45.86.202.178:42621] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaPowfKRPk6YnJBxw_w5HgAAAMo"]
[Sun Mar 01 15:20:36.814234 2026] [:error] [pid 38241:tid 38256] [client 45.86.202.195:65007] [client 45.86.202.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaPoxPKRPk6YnJBxw_w5LQAAAMw"]
[Sun Mar 01 15:20:39.005141 2026] [:error] [pid 38034:tid 38060] [client 45.86.202.186:30431] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaPoxwxtfZjwlJok9K-osQAAARY"]
[Sun Mar 01 15:20:46.714336 2026] [:error] [pid 7133:tid 7147] [client 45.86.202.191:33843] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaPozvCtubh8pR64qB_G4wAAAEw"]
[Sun Mar 01 15:20:50.143456 2026] [:error] [pid 7165:tid 7174] [client 45.86.202.197:44021] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaPo0hRjCrA8qWBjgG8r9AAAAkc"]
[Sun Mar 01 15:20:53.410864 2026] [:error] [pid 38241:tid 38256] [client 45.86.202.203:53577] [client 45.86.202.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaPo1fKRPk6YnJBxw_w5XgAAAMw"]
[Sun Mar 01 15:20:55.994221 2026] [:error] [pid 38034:tid 38048] [client 45.86.202.185:53597] [client 45.86.202.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "aaPo1wxtfZjwlJok9K-o7gAAAQo"]
[Sun Mar 01 15:20:59.413995 2026] [:error] [pid 38241:tid 38245] [client 45.86.202.161:44007] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaPo2_KRPk6YnJBxw_w5fwAAAME"]
[Sun Mar 01 15:21:00.033221 2026] [:error] [pid 37032:tid 37047] [client 45.86.202.169:57437] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "aaPo3Ou0U4o7eSImsVQ90gAAAY0"]
[Sun Mar 01 15:21:00.650947 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.190:24609] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaPo3PKRPk6YnJBxw_w5iQAAAM8"]
[Sun Mar 01 15:21:10.301171 2026] [:error] [pid 37032:tid 37042] [client 45.86.202.177:47635] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaPo5uu0U4o7eSImsVQ98QAAAYg"]
[Sun Mar 01 15:21:16.458335 2026] [:error] [pid 38241:tid 38246] [client 45.86.202.192:46495] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaPo7PKRPk6YnJBxw_w54gAAAMI"]
[Sun Mar 01 15:21:21.190615 2026] [:error] [pid 38034:tid 38062] [client 45.86.202.181:44527] [client 45.86.202.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaPo8QxtfZjwlJok9K-pTAAAARg"]
[Sun Mar 01 15:21:25.796991 2026] [:error] [pid 37032:tid 37042] [client 45.86.202.196:62209] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaPo9eu0U4o7eSImsVQ-UwAAAYg"]
[Sun Mar 01 15:21:34.205735 2026] [:error] [pid 7165:tid 7168] [client 45.86.202.156:49739] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaPo_hRjCrA8qWBjgG8sNgAAAkE"]
[Sun Mar 01 15:21:36.367469 2026] [:error] [pid 38241:tid 38246] [client 45.86.202.177:61437] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaPpAPKRPk6YnJBxw_w6ZgAAAMI"]
[Sun Mar 01 15:21:38.318789 2026] [:error] [pid 7165:tid 7167] [client 45.86.202.202:54833] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaPpAhRjCrA8qWBjgG8sOgAAAkA"]
[Sun Mar 01 15:21:41.714439 2026] [:error] [pid 38241:tid 38256] [client 45.86.202.173:22343] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaPpBfKRPk6YnJBxw_w6iAAAAMw"]
[Sun Mar 01 15:21:53.296339 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.199:24737] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaPpEfKRPk6YnJBxw_w6zAAAAM8"]
[Sun Mar 01 15:21:53.942740 2026] [:error] [pid 44644:tid 44663] [client 45.86.202.168:27537] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaPpEZ3RJaXMcw3y9V-g7gAAABA"]
[Sun Mar 01 15:21:58.550903 2026] [:error] [pid 42619:tid 42628] [client 45.86.202.172:47043] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaPpFh_zUXcYaZE4AOeNswAAAUc"]
[Sun Mar 01 15:21:59.205772 2026] [:error] [pid 7165:tid 7183] [client 45.86.202.199:43035] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaPpFxRjCrA8qWBjgG8sWQAAAlA"]
[Sun Mar 01 15:22:02.578119 2026] [:error] [pid 7165:tid 7171] [client 45.86.202.197:63357] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaPpGhRjCrA8qWBjgG8sZQAAAkQ"]
[Sun Mar 01 15:22:03.338281 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.175:24937] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aaPpGwxtfZjwlJok9K-p0gAAAQE"]
[Sun Mar 01 15:22:03.972861 2026] [:error] [pid 38241:tid 38256] [client 45.86.202.158:50547] [client 45.86.202.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.158, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaPpG_KRPk6YnJBxw_w7FgAAAMw"]
[Sun Mar 01 15:22:03.977106 2026] [proxy_fcgi:error] [pid 38241:tid 38256] [client 45.86.202.158:50547] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:22:04.296752 2026] [:error] [pid 38241:tid 38256] [client 45.86.202.158:50547] [client 45.86.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaPpHPKRPk6YnJBxw_w7GgAAAMw"]
[Sun Mar 01 15:22:08.846276 2026] [:error] [pid 42619:tid 42643] [client 45.86.202.201:30581] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaPpIB_zUXcYaZE4AOeN1wAAAVY"]
[Sun Mar 01 15:22:09.415586 2026] [:error] [pid 7165:tid 7181] [client 45.86.202.204:43031] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "aaPpIRRjCrA8qWBjgG8sbwAAAk4"]
[Sun Mar 01 15:22:18.830287 2026] [:error] [pid 38241:tid 38256] [client 45.86.202.165:27505] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaPpKvKRPk6YnJBxw_w7fgAAAMw"]
[Sun Mar 01 15:22:19.408447 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.177:28913] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaPpK_KRPk6YnJBxw_w7ggAAAM8"]
[Sun Mar 01 15:22:22.269451 2026] [:error] [pid 38241:tid 38264] [client 45.86.202.187:35419] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaPpLvKRPk6YnJBxw_w7kQAAANQ"]
[Sun Mar 01 15:22:22.853281 2026] [:error] [pid 41967:tid 41978] [client 45.86.202.190:20099] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aaPpLoO1bqY181I02eGMeQAAAIk"]
[Sun Mar 01 15:22:23.503482 2026] [proxy_fcgi:error] [pid 37032:tid 37042] [client 45.86.202.224:27173] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:22:23.810072 2026] [:error] [pid 37032:tid 37055] [client 45.86.202.224:27173] [client 45.86.202.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.224, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaPpL-u0U4o7eSImsVQ-6gAAAZU"]
[Sun Mar 01 15:22:27.095090 2026] [:error] [pid 37032:tid 37055] [client 45.86.202.224:27173] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaPpM-u0U4o7eSImsVQ-9gAAAZU"]
[Sun Mar 01 15:22:33.078534 2026] [:error] [pid 38241:tid 38256] [client 45.86.202.190:37911] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaPpOfKRPk6YnJBxw_w7zAAAAMw"]
[Sun Mar 01 15:22:35.186084 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.157:42931] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaPpOwxtfZjwlJok9K-qIAAAAQE"]
[Sun Mar 01 15:22:35.765210 2026] [:error] [pid 38241:tid 38245] [client 45.86.202.199:57491] [client 45.86.202.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaPpO_KRPk6YnJBxw_w72wAAAME"]
[Sun Mar 01 15:22:41.093278 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.183:64881] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaPpQfKRPk6YnJBxw_w7-wAAAM8"]
[Sun Mar 01 15:22:44.575830 2026] [:error] [pid 38241:tid 38259] [client 45.86.202.194:33099] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaPpRPKRPk6YnJBxw_w8BgAAAM8"]
[Sun Mar 01 15:22:50.625407 2026] [:error] [pid 7165:tid 7186] [client 45.86.202.162:51233] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaPpShRjCrA8qWBjgG8sswAAAlM"]
[Sun Mar 01 15:22:51.352084 2026] [:error] [pid 38034:tid 38046] [client 45.86.202.205:58489] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "aaPpSwxtfZjwlJok9K-qPQAAAQg"]
[Sun Mar 01 15:22:53.386241 2026] [:error] [pid 37032:tid 37052] [client 45.86.202.162:60547] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "aaPpTeu0U4o7eSImsVQ_JwAAAZI"]
[Sun Mar 01 15:23:04.093375 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.184:44971] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaPpWAxtfZjwlJok9K-qbgAAAQE"]
[Sun Mar 01 15:23:07.509602 2026] [:error] [pid 41967:tid 41982] [client 45.86.202.162:22879] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "aaPpW4O1bqY181I02eGMpQAAAI0"]
[Sun Mar 01 15:23:07.800023 2026] [:error] [pid 41967:tid 41974] [client 45.86.202.162:22879] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaPpW4O1bqY181I02eGMqQAAAIU"]
[Sun Mar 01 15:23:11.612481 2026] [:error] [pid 41780:tid 41795] [client 45.86.202.175:52863] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaPpX8ONkVoocLIqzy0Q9QAAA8w"]
[Sun Mar 01 15:23:12.377454 2026] [:error] [pid 37032:tid 37056] [client 45.86.202.166:55843] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaPpYOu0U4o7eSImsVQ_TwAAAZY"]
[Sun Mar 01 15:23:21.041474 2026] [:error] [pid 7165:tid 7168] [client 45.86.202.167:61763] [client 45.86.202.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaPpaRRjCrA8qWBjgG8tQwAAAkE"]
[Sun Mar 01 15:23:25.432732 2026] [:error] [pid 38241:tid 38256] [client 45.86.202.201:48765] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaPpbfKRPk6YnJBxw_w8WgAAAMw"]
[Sun Mar 01 15:23:27.505599 2026] [:error] [pid 42619:tid 42635] [client 45.86.202.174:27639] [client 45.86.202.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaPpbx_zUXcYaZE4AOeO9wAAAU4"]
[Sun Mar 01 15:23:36.264068 2026] [:error] [pid 41967:tid 41978] [client 45.86.202.225:60451] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaPpeIO1bqY181I02eGMxgAAAIk"]
[Sun Mar 01 15:23:38.364066 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.225:62335] [client 45.86.202.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "aaPpevKRPk6YnJBxw_w8gAAAAMY"]
[Sun Mar 01 15:23:40.998969 2026] [:error] [pid 38034:tid 38061] [client 45.86.202.224:58779] [client 45.86.202.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaPpfAxtfZjwlJok9K-q4QAAARc"]
[Sun Mar 01 15:23:41.556674 2026] [:error] [pid 44644:tid 44659] [client 45.86.202.162:29577] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaPpfZ3RJaXMcw3y9V-hEgAAAAw"]
[Sun Mar 01 15:23:44.897778 2026] [:error] [pid 37032:tid 37056] [client 45.86.202.168:26749] [client 45.86.202.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaPpgOu0U4o7eSImsVQ_qAAAAZY"]
[Sun Mar 01 15:23:51.195011 2026] [:error] [pid 38241:tid 38245] [client 45.86.202.171:36279] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaPph_KRPk6YnJBxw_w8rAAAAME"]
[Sun Mar 01 15:23:51.881913 2026] [:error] [pid 40750:tid 40772] [client 45.86.202.172:61389] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaPphwfBuk03yQKDyqvK2wAAAdM"]
[Sun Mar 01 15:24:00.861890 2026] [:error] [pid 38034:tid 38048] [client 45.86.202.177:51933] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaPpkAxtfZjwlJok9K-rDAAAAQo"]
[Sun Mar 01 15:24:04.802680 2026] [:error] [pid 38034:tid 38061] [client 45.86.202.187:60949] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaPplAxtfZjwlJok9K-rEgAAARc"]
[Sun Mar 01 15:24:13.298169 2026] [:error] [pid 7165:tid 7177] [client 45.86.202.205:47255] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaPpnRRjCrA8qWBjgG8t9QAAAko"]
[Sun Mar 01 15:24:14.025522 2026] [:error] [pid 37032:tid 37035] [client 45.86.202.187:49035] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaPpnuu0U4o7eSImsVRAOAAAAYE"]
[Sun Mar 01 15:24:16.343881 2026] [:error] [pid 37032:tid 37041] [client 45.86.202.157:32881] [client 45.86.202.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaPpoOu0U4o7eSImsVRAUAAAAYc"]
[Sun Mar 01 15:24:19.770988 2026] [:error] [pid 37032:tid 37056] [client 45.86.202.177:28805] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaPpo-u0U4o7eSImsVRAcAAAAZY"]
[Sun Mar 01 15:24:23.271013 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.159:20419] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaPpp53RJaXMcw3y9V-hWgAAAAQ"]
[Sun Mar 01 15:24:24.726910 2026] [:error] [pid 44644:tid 44659] [client 45.86.202.172:53603] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaPpqJ3RJaXMcw3y9V-hXQAAAAw"]
[Sun Mar 01 15:24:27.045313 2026] [:error] [pid 37032:tid 37056] [client 45.86.202.171:38571] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaPpq-u0U4o7eSImsVRApAAAAZY"]
[Sun Mar 01 15:24:27.839711 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.171:39229] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aaPpqwxtfZjwlJok9K-rXQAAAQE"]
[Sun Mar 01 15:24:31.347638 2026] [:error] [pid 38034:tid 38061] [client 45.86.202.171:56573] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaPprwxtfZjwlJok9K-rZgAAARc"]
[Sun Mar 01 15:24:33.178766 2026] [:error] [pid 7133:tid 7159] [client 45.86.202.160:53445] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaPpsfCtubh8pR64qB_HNwAAAFg"]
[Sun Mar 01 15:24:33.758070 2026] [:error] [pid 7133:tid 7147] [client 45.86.202.196:40251] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaPpsfCtubh8pR64qB_HOAAAAEw"]
[Sun Mar 01 15:24:34.424053 2026] [:error] [pid 7133:tid 7154] [client 45.86.202.200:20921] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaPpsvCtubh8pR64qB_HPQAAAFM"]
[Sun Mar 01 15:24:40.858137 2026] [:error] [pid 7165:tid 7190] [client 45.86.202.205:51037] [client 45.86.202.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaPpuBRjCrA8qWBjgG8uMwAAAlc"]
[Sun Mar 01 15:24:45.379498 2026] [:error] [pid 44644:tid 44651] [client 45.86.202.166:39433] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaPpvZ3RJaXMcw3y9V-hgQAAAAQ"]
[Sun Mar 01 15:24:47.546350 2026] [:error] [pid 37032:tid 37048] [client 45.86.202.196:31957] [client 45.86.202.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaPpv-u0U4o7eSImsVRA3gAAAY4"]
[Sun Mar 01 15:24:48.217736 2026] [proxy_fcgi:error] [pid 38241:tid 38255] [client 45.86.202.183:64885] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Sun Mar 01 15:24:48.867355 2026] [:error] [pid 44644:tid 44659] [client 45.86.202.159:27987] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaPpwJ3RJaXMcw3y9V-hhwAAAAw"]
[Sun Mar 01 15:24:57.551263 2026] [:error] [pid 38034:tid 38054] [client 45.86.202.169:51591] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaPpyQxtfZjwlJok9K-r1gAAARA"]
[Sun Mar 01 15:24:58.322361 2026] [:error] [pid 37032:tid 37041] [client 45.86.202.171:43413] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaPpyuu0U4o7eSImsVRA9wAAAYc"]
[Sun Mar 01 15:25:02.385964 2026] [:error] [pid 38241:tid 38256] [client 45.86.202.197:34901] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaPpzvKRPk6YnJBxw_w9mQAAAMw"]
[Sun Mar 01 15:25:09.652234 2026] [:error] [pid 38241:tid 38263] [client 45.86.202.170:60459] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaPp1fKRPk6YnJBxw_w9wAAAANM"]
[Sun Mar 01 15:25:13.116001 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.180:47209] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaPp2fKRPk6YnJBxw_w9zQAAAMY"]
[Sun Mar 01 15:25:16.099984 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.170:52019] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaPp3PKRPk6YnJBxw_w91gAAAMY"]
[Sun Mar 01 15:25:18.346001 2026] [:error] [pid 41967:tid 41992] [client 45.86.202.169:37319] [client 45.86.202.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaPp3oO1bqY181I02eGNQwAAAJc"]
[Sun Mar 01 15:25:20.485599 2026] [:error] [pid 38241:tid 38263] [client 45.86.202.176:21469] [client 45.86.202.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaPp4PKRPk6YnJBxw_w96AAAANM"]
[Sun Mar 01 15:25:26.607723 2026] [:error] [pid 38241:tid 38263] [client 45.86.202.193:58461] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaPp5vKRPk6YnJBxw_w9-QAAANM"]
[Sun Mar 01 15:25:32.165032 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.170:33743] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaPp7J3RJaXMcw3y9V-h1QAAABY"]
[Sun Mar 01 15:25:32.859512 2026] [proxy_fcgi:error] [pid 38034:tid 38054] [client 45.86.202.202:49027] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 15:25:33.184509 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.202:49027] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaPp7QxtfZjwlJok9K-sUAAAARE"]
[Sun Mar 01 15:25:33.759234 2026] [:error] [pid 37032:tid 37048] [client 45.86.202.163:37415] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaPp7eu0U4o7eSImsVRBPgAAAY4"]
[Sun Mar 01 15:25:37.418466 2026] [:error] [pid 42619:tid 42622] [client 45.86.202.163:30007] [client 45.86.202.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaPp8R_zUXcYaZE4AOeP-AAAAUE"]
[Sun Mar 01 15:25:38.183221 2026] [:error] [pid 38241:tid 38263] [client 45.86.202.177:38281] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaPp8vKRPk6YnJBxw_w-EQAAANM"]
[Sun Mar 01 15:25:50.124972 2026] [:error] [pid 7165:tid 7180] [client 45.86.202.192:49225] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaPp_hRjCrA8qWBjgG8uwQAAAk0"]
[Sun Mar 01 15:25:50.788417 2026] [:error] [pid 38241:tid 38263] [client 45.86.202.160:62965] [client 45.86.202.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaPp_vKRPk6YnJBxw_w-PwAAANM"]
[Sun Mar 01 15:25:53.097196 2026] [:error] [pid 44644:tid 44670] [client 45.86.202.173:53235] [client 45.86.202.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/log.php"] [unique_id "aaPqAZ3RJaXMcw3y9V-iSwAAABc"]
[Sun Mar 01 15:25:53.759532 2026] [:error] [pid 38034:tid 38054] [client 45.86.202.162:47633] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaPqAQxtfZjwlJok9K-s5wAAARA"]
[Sun Mar 01 15:25:54.405265 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.186:28525] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaPqAgxtfZjwlJok9K-s6gAAARE"]
[Sun Mar 01 15:25:55.093849 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.172:56711] [client 45.86.202.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/aw.php"] [unique_id "aaPqAwxtfZjwlJok9K-s6wAAARE"]
[Sun Mar 01 15:26:01.389741 2026] [:error] [pid 41967:tid 41975] [client 45.86.202.183:24485] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaPqCYO1bqY181I02eGNaAAAAIY"]
[Sun Mar 01 15:26:02.083571 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.194:36273] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/install.php"] [unique_id "aaPqCgxtfZjwlJok9K-tFwAAAQE"]
[Sun Mar 01 15:26:05.597218 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.189:27877] [client 45.86.202.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaPqDZ3RJaXMcw3y9V-iawAAABY"]
[Sun Mar 01 15:26:06.290533 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.161:38539] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaPqDgxtfZjwlJok9K-tLQAAARE"]
[Sun Mar 01 15:26:09.810786 2026] [:error] [pid 37032:tid 37042] [client 45.86.202.166:59351] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/template-less.php"] [unique_id "aaPqEeu0U4o7eSImsVRBrwAAAYg"]
[Sun Mar 01 15:26:10.461108 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.164:44923] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaPqEgxtfZjwlJok9K-tSgAAAQE"]
[Sun Mar 01 15:26:21.131945 2026] [:error] [pid 37032:tid 37036] [client 45.86.202.204:30907] [client 45.86.202.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aaPqHeu0U4o7eSImsVRB4QAAAYI"]
[Sun Mar 01 15:26:21.709583 2026] [:error] [pid 38034:tid 38054] [client 45.86.202.184:36199] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaPqHQxtfZjwlJok9K-tewAAARA"]
[Sun Mar 01 15:26:25.334731 2026] [:error] [pid 7165:tid 7167] [client 45.86.202.186:45451] [client 45.86.202.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "aaPqIRRjCrA8qWBjgG8vEQAAAkA"]
[Sun Mar 01 15:26:27.474138 2026] [:error] [pid 38241:tid 38267] [client 45.86.202.187:22363] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaPqI_KRPk6YnJBxw_w-1wAAANc"]
[Sun Mar 01 15:26:29.436740 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.178:41517] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/load.php"] [unique_id "aaPqJfKRPk6YnJBxw_w-4wAAAMY"]
[Sun Mar 01 15:26:30.072632 2026] [:error] [pid 38034:tid 38051] [client 45.86.202.194:27935] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaPqJgxtfZjwlJok9K-tkAAAAQ0"]
[Sun Mar 01 15:26:30.741881 2026] [:error] [pid 44644:tid 44669] [client 45.86.202.200:54019] [client 45.86.202.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaPqJp3RJaXMcw3y9V-ilAAAABY"]
[Sun Mar 01 15:26:35.545797 2026] [:error] [pid 37032:tid 37056] [client 45.86.202.156:23157] [client 45.86.202.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaPqK-u0U4o7eSImsVRCAwAAAZY"]
[Sun Mar 01 15:26:37.736457 2026] [:error] [pid 38034:tid 38055] [client 45.86.202.194:22139] [client 45.86.202.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaPqLQxtfZjwlJok9K-tpAAAARE"]
[Sun Mar 01 15:26:42.306749 2026] [:error] [pid 38241:tid 38250] [client 45.86.202.184:33087] [client 45.86.202.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaPqMvKRPk6YnJBxw_w_HgAAAMY"]
[Sun Mar 01 15:26:42.974450 2026] [:error] [pid 38034:tid 38037] [client 45.86.202.166:60171] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaPqMgxtfZjwlJok9K-twQAAAQE"]
[Sun Mar 01 15:26:45.302942 2026] [:error] [pid 41780:tid 41795] [client 45.86.202.183:26865] [client 45.86.202.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaPqNcONkVoocLIqzy0RZAAAA8w"]
[Sun Mar 01 15:27:01.716995 2026] [:error] [pid 37032:tid 37042] [client 45.86.202.178:32675] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aaPqReu0U4o7eSImsVRCUQAAAYg"]
[Sun Mar 01 15:27:03.711874 2026] [:error] [pid 41780:tid 41797] [client 45.86.202.159:64535] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaPqR8ONkVoocLIqzy0RbQAAA84"]
[Sun Mar 01 15:27:07.421930 2026] [:error] [pid 37032:tid 37046] [client 45.86.202.162:43259] [client 45.86.202.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaPqS-u0U4o7eSImsVRCdQAAAYw"]
[Sun Mar 01 15:27:08.077956 2026] [:error] [pid 38241:tid 38255] [client 45.86.202.159:40173] [client 45.86.202.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaPqTPKRPk6YnJBxw_w_egAAAMs"]
[Sun Mar 01 15:27:08.719581 2026] [:error] [pid 38034:tid 38044] [client 45.86.202.193:22683] [client 45.86.202.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaPqTAxtfZjwlJok9K-uTQAAAQY"]
[Sun Mar 01 15:27:12.108364 2026] [autoindex:error] [pid 41967:tid 41978] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:12.428226 2026] [autoindex:error] [pid 41967:tid 41970] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:12.763080 2026] [autoindex:error] [pid 41967:tid 41972] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:13.439333 2026] [autoindex:error] [pid 41967:tid 41975] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:15.037371 2026] [autoindex:error] [pid 41967:tid 41980] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:15.336731 2026] [autoindex:error] [pid 41967:tid 41990] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:15.670685 2026] [autoindex:error] [pid 41967:tid 41993] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:15.960934 2026] [autoindex:error] [pid 41967:tid 41969] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:16.290951 2026] [autoindex:error] [pid 41967:tid 41982] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:16.589231 2026] [autoindex:error] [pid 41967:tid 41984] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:17.148684 2026] [autoindex:error] [pid 41967:tid 41975] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:18.876653 2026] [autoindex:error] [pid 41967:tid 41990] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:19.187514 2026] [autoindex:error] [pid 41967:tid 41974] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:21.998024 2026] [autoindex:error] [pid 41967:tid 41972] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:22.311408 2026] [autoindex:error] [pid 41967:tid 41988] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:22.645149 2026] [autoindex:error] [pid 41967:tid 41973] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:22.962147 2026] [autoindex:error] [pid 41967:tid 41992] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:24.733721 2026] [autoindex:error] [pid 41967:tid 41983] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:25.408430 2026] [autoindex:error] [pid 41967:tid 41982] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:27.214804 2026] [autoindex:error] [pid 41967:tid 41986] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:30.180981 2026] [autoindex:error] [pid 41967:tid 41991] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:30.466890 2026] [autoindex:error] [pid 41967:tid 41973] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:30.827666 2026] [autoindex:error] [pid 41967:tid 41992] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:40.002579 2026] [autoindex:error] [pid 41967:tid 41990] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:41.603222 2026] [autoindex:error] [pid 41967:tid 41993] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:41.927243 2026] [autoindex:error] [pid 41967:tid 41989] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:42.957042 2026] [autoindex:error] [pid 41967:tid 41978] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:43.268977 2026] [autoindex:error] [pid 41967:tid 41984] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:43.600550 2026] [autoindex:error] [pid 41967:tid 41991] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:47.836078 2026] [autoindex:error] [pid 41967:tid 41976] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:27:49.507113 2026] [autoindex:error] [pid 41967:tid 41972] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:24.665194 2026] [autoindex:error] [pid 41967:tid 41983] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:24.962243 2026] [autoindex:error] [pid 41967:tid 41973] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:25.314806 2026] [autoindex:error] [pid 41967:tid 41975] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:25.672118 2026] [autoindex:error] [pid 41967:tid 41970] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:25.959077 2026] [autoindex:error] [pid 41967:tid 41990] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:26.392940 2026] [autoindex:error] [pid 41967:tid 41983] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:26.709925 2026] [autoindex:error] [pid 41967:tid 41978] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:27.030429 2026] [autoindex:error] [pid 41967:tid 41986] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:28.680168 2026] [autoindex:error] [pid 41967:tid 41989] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:30.395733 2026] [autoindex:error] [pid 41967:tid 41990] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:30.728746 2026] [autoindex:error] [pid 41967:tid 41969] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:31.077077 2026] [autoindex:error] [pid 41967:tid 41979] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:32.780206 2026] [autoindex:error] [pid 41967:tid 41984] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:33.130513 2026] [autoindex:error] [pid 41967:tid 41978] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:33.776677 2026] [autoindex:error] [pid 41967:tid 41970] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:28:34.109405 2026] [autoindex:error] [pid 41967:tid 41992] [client 45.86.202.165:42505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:05.688548 2026] [autoindex:error] [pid 38241:tid 38261] [client 45.86.202.225:38691] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:19.779050 2026] [autoindex:error] [pid 38241:tid 38257] [client 45.86.202.225:38691] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:26.034502 2026] [autoindex:error] [pid 38241:tid 38261] [client 45.86.202.205:61103] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:26.330828 2026] [autoindex:error] [pid 38241:tid 38258] [client 45.86.202.205:61103] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:31.622282 2026] [autoindex:error] [pid 38241:tid 38258] [client 45.86.202.205:61103] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:31.946300 2026] [autoindex:error] [pid 38241:tid 38257] [client 45.86.202.205:61103] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:32.246937 2026] [autoindex:error] [pid 38241:tid 38257] [client 45.86.202.205:61103] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:32.595943 2026] [autoindex:error] [pid 38241:tid 38261] [client 45.86.202.205:61103] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:33.050371 2026] [autoindex:error] [pid 38241:tid 38261] [client 45.86.202.205:61103] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:33.329340 2026] [autoindex:error] [pid 38241:tid 38261] [client 45.86.202.205:61103] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:33.625183 2026] [autoindex:error] [pid 38241:tid 38258] [client 45.86.202.205:61103] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:33.919764 2026] [autoindex:error] [pid 38241:tid 38261] [client 45.86.202.205:61103] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:34.196021 2026] [autoindex:error] [pid 38241:tid 38257] [client 45.86.202.205:61103] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 15:29:58.310171 2026] [autoindex:error] [pid 44644:tid 44662] [client 45.86.202.177:61681] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 16:35:22.449023 2026] [:error] [pid 40750:tid 40757] [client 43.166.129.247:33714] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaP6SgfBuk03yQKDyqvpQQAAAcQ"]
[Sun Mar 01 17:07:07.412926 2026] [:error] [pid 7165:tid 7182] [client 223.244.35.77:60178] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaQBuxRjCrA8qWBjgG9oxgAAAk8"]
[Sun Mar 01 18:34:39.087734 2026] [:error] [pid 38241:tid 38255] [client 216.73.216.11:35320] [client 216.73.216.11] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||hotbooksbookeeping2.com|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aaQWP_KRPk6YnJBxw_y9vQAAAMs"]
[Sun Mar 01 18:38:49.762024 2026] [:error] [pid 40750:tid 40767] [client 24.68.167.246:63094] [client 24.68.167.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.68.167.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaQXOQfBuk03yQKDyqt-mAAAAc4"]
[Sun Mar 01 18:53:27.762827 2026] [:error] [pid 7133:tid 7154] [client 51.75.151.149:53688] [client 51.75.151.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.75.151.149, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaQap_Ctubh8pR64qB8OWgAAAFM"]
[Sun Mar 01 20:05:06.519602 2026] [:error] [pid 40750:tid 40765] [client 43.157.142.101:51336] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaQrcgfBuk03yQKDyqvvcQAAAcw"]
[Sun Mar 01 20:09:18.899121 2026] [:error] [pid 7165:tid 7184] [client 51.75.151.149:52091] [client 51.75.151.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aaQsbhRjCrA8qWBjgG8NmAAAAlE"]
[Sun Mar 01 20:15:47.160165 2026] [autoindex:error] [pid 41780:tid 41791] [client 161.97.107.16:54635] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 01 20:26:05.362242 2026] [:error] [pid 40750:tid 40756] [client 52.138.3.9:21378] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaQwXQfBuk03yQKDyqsDtgAAAcM"]
[Sun Mar 01 20:26:05.828376 2026] [:error] [pid 38241:tid 38253] [client 52.138.3.9:21477] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaQwXfKRPk6YnJBxw_z5igAAAMk"]
[Sun Mar 01 20:26:06.444295 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:21482] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaQwXhRjCrA8qWBjgG8WfwAAAks"]
[Sun Mar 01 20:26:06.991509 2026] [:error] [pid 7165:tid 7170] [client 52.138.3.9:21449] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaQwXhRjCrA8qWBjgG8WhwAAAkM"]
[Sun Mar 01 21:38:58.031909 2026] [:error] [pid 40750:tid 40756] [client 20.220.162.180:54113] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaRBcgfBuk03yQKDyqtNnQAAAcM"]
[Sun Mar 01 21:38:58.873298 2026] [:error] [pid 7133:tid 7149] [client 20.220.162.180:46551] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaRBcvCtubh8pR64qB9NwwAAAE4"]
[Sun Mar 01 21:38:59.713879 2026] [:error] [pid 38241:tid 38252] [client 20.220.162.180:50745] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaRBc_KRPk6YnJBxw_weDAAAAMg"]
[Sun Mar 01 21:39:00.558722 2026] [:error] [pid 7133:tid 7137] [client 20.220.162.180:46738] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaRBdPCtubh8pR64qB9NxAAAAEI"]
[Sun Mar 01 21:54:21.250077 2026] [:error] [pid 40750:tid 40769] [client 20.63.80.2:3573] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aaRFDQfBuk03yQKDyqtbRwAAAdA"]
[Sun Mar 01 21:54:22.074636 2026] [:error] [pid 7133:tid 7147] [client 20.63.80.2:3776] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aaRFDvCtubh8pR64qB9SWwAAAEw"]
[Sun Mar 01 21:54:22.897071 2026] [:error] [pid 7165:tid 7180] [client 20.63.80.2:3571] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aaRFDhRjCrA8qWBjgG9bdQAAAk0"]
[Sun Mar 01 21:54:23.720409 2026] [:error] [pid 7165:tid 7180] [client 20.63.80.2:3541] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f.php"] [unique_id "aaRFDxRjCrA8qWBjgG9bhwAAAk0"]
[Sun Mar 01 22:09:03.033605 2026] [:error] [pid 41342:tid 41365] [client 20.205.120.43:5376] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaRIf44iJ6RAS5CatDlhxgAAAhQ"]
[Sun Mar 01 22:09:03.552616 2026] [:error] [pid 7165:tid 7167] [client 20.205.120.43:5378] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaRIfxRjCrA8qWBjgG9piAAAAkA"]
[Sun Mar 01 22:09:04.049324 2026] [:error] [pid 7165:tid 7169] [client 20.205.120.43:1373] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaRIgBRjCrA8qWBjgG9pjAAAAkI"]
[Sun Mar 01 22:09:04.547871 2026] [:error] [pid 7165:tid 7174] [client 20.205.120.43:7694] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaRIgBRjCrA8qWBjgG9pkAAAAkc"]
[Sun Mar 01 22:11:21.902492 2026] [:error] [pid 7165:tid 7183] [client 40.69.27.251:3231] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaRJCRRjCrA8qWBjgG9r3AAAAlA"]
[Sun Mar 01 22:11:22.992871 2026] [:error] [pid 38241:tid 38262] [client 40.69.27.251:4239] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaRJCvKRPk6YnJBxw_wrzQAAANI"]
[Sun Mar 01 22:11:23.806306 2026] [:error] [pid 7165:tid 7170] [client 40.69.27.251:6948] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaRJCxRjCrA8qWBjgG9r4AAAAkM"]
[Sun Mar 01 22:11:24.978700 2026] [:error] [pid 40750:tid 40764] [client 40.69.27.251:15307] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaRJDAfBuk03yQKDyqtmtwAAAcs"]
[Sun Mar 01 22:11:26.020319 2026] [:error] [pid 7165:tid 7175] [client 40.69.27.251:11708] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "aaRJDhRjCrA8qWBjgG9r5QAAAkg"]
[Sun Mar 01 22:11:26.806835 2026] [:error] [pid 7165:tid 7191] [client 40.69.27.251:10367] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "aaRJDhRjCrA8qWBjgG9r6QAAAlg"]
[Sun Mar 01 22:11:27.530627 2026] [:error] [pid 40750:tid 40772] [client 40.69.27.251:12735] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "aaRJDwfBuk03yQKDyqtmuQAAAdM"]
[Sun Mar 01 22:11:28.384103 2026] [:error] [pid 7165:tid 7170] [client 40.69.27.251:15326] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "aaRJEBRjCrA8qWBjgG9r8QAAAkM"]
[Sun Mar 01 22:11:29.196596 2026] [:error] [pid 40750:tid 40769] [client 40.69.27.251:3228] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaRJEQfBuk03yQKDyqtmvQAAAdA"]
[Sun Mar 01 22:11:30.196915 2026] [:error] [pid 7165:tid 7191] [client 40.69.27.251:12727] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaRJEhRjCrA8qWBjgG9r_AAAAlg"]
[Sun Mar 01 22:11:31.667100 2026] [:error] [pid 40750:tid 40765] [client 40.69.27.251:2320] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaRJEwfBuk03yQKDyqtmvwAAAcw"]
[Sun Mar 01 22:11:32.915343 2026] [:error] [pid 7165:tid 7189] [client 40.69.27.251:13932] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaRJFBRjCrA8qWBjgG9sGAAAAlY"]
[Sun Mar 01 22:11:33.793094 2026] [:error] [pid 33822:tid 33825] [client 40.69.27.251:11676] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaRJFW6W3ygu1YVssuYtHQAAAoE"]
[Sun Mar 01 22:11:34.859364 2026] [:error] [pid 40750:tid 40764] [client 40.69.27.251:6913] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaRJFgfBuk03yQKDyqtmxQAAAcs"]
[Sun Mar 01 22:11:35.608073 2026] [:error] [pid 7165:tid 7176] [client 40.69.27.251:15113] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaRJFxRjCrA8qWBjgG9sMwAAAkk"]
[Sun Mar 01 22:11:36.555543 2026] [:error] [pid 40750:tid 40763] [client 40.69.27.251:14592] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaRJGAfBuk03yQKDyqtmygAAAco"]
[Sun Mar 01 22:11:37.537636 2026] [:error] [pid 38241:tid 38254] [client 40.69.27.251:3207] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "aaRJGfKRPk6YnJBxw_wr2QAAAMo"]
[Sun Mar 01 22:11:38.460587 2026] [:error] [pid 7165:tid 7184] [client 40.69.27.251:9061] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "aaRJGhRjCrA8qWBjgG9sUAAAAlE"]
[Sun Mar 01 22:11:39.263054 2026] [:error] [pid 40750:tid 40762] [client 40.69.27.251:13937] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "aaRJGwfBuk03yQKDyqtmywAAAck"]
[Sun Mar 01 22:11:40.124745 2026] [:error] [pid 33822:tid 33848] [client 40.69.27.251:1668] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "aaRJHG6W3ygu1YVssuYtJgAAApg"]
[Sun Mar 01 22:11:41.076831 2026] [:error] [pid 40750:tid 40753] [client 40.69.27.251:14478] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "aaRJHQfBuk03yQKDyqtmzAAAAcA"]
[Sun Mar 01 22:11:41.954541 2026] [:error] [pid 7165:tid 7185] [client 40.69.27.251:14484] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "aaRJHRRjCrA8qWBjgG9sYwAAAlI"]
[Sun Mar 01 22:11:42.914669 2026] [:error] [pid 7165:tid 7177] [client 40.69.27.251:14654] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "aaRJHhRjCrA8qWBjgG9sawAAAko"]
[Sun Mar 01 22:11:44.055746 2026] [:error] [pid 40750:tid 40754] [client 40.69.27.251:17006] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "aaRJIAfBuk03yQKDyqtmzwAAAcE"]
[Sun Mar 01 22:11:45.126662 2026] [:error] [pid 7133:tid 7139] [client 40.69.27.251:8501] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaRJIfCtubh8pR64qB9YDwAAAEQ"]
[Sun Mar 01 22:11:46.213408 2026] [:error] [pid 33822:tid 33835] [client 40.69.27.251:12619] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaRJIm6W3ygu1YVssuYtMAAAAos"]
[Sun Mar 01 22:11:47.560999 2026] [:error] [pid 40750:tid 40775] [client 40.69.27.251:10324] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaRJIwfBuk03yQKDyqtm1wAAAdY"]
[Sun Mar 01 22:11:48.334067 2026] [:error] [pid 40750:tid 40753] [client 40.69.27.251:13990] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaRJJAfBuk03yQKDyqtm3QAAAcA"]
[Sun Mar 01 22:11:49.416732 2026] [:error] [pid 40750:tid 40754] [client 40.69.27.251:11482] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "aaRJJQfBuk03yQKDyqtm4gAAAcE"]
[Sun Mar 01 22:11:50.431118 2026] [:error] [pid 37032:tid 37044] [client 40.69.27.251:16974] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "aaRJJuu0U4o7eSImsVSIEgAAAYo"]
[Sun Mar 01 22:11:51.284803 2026] [:error] [pid 37032:tid 37045] [client 40.69.27.251:2840] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "aaRJJ-u0U4o7eSImsVSIFQAAAYs"]
[Sun Mar 01 22:11:52.213511 2026] [:error] [pid 38241:tid 38262] [client 40.69.27.251:3250] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "aaRJKPKRPk6YnJBxw_wr6gAAANI"]
[Sun Mar 01 22:11:53.756242 2026] [:error] [pid 40750:tid 40754] [client 40.69.27.251:6043] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aaRJKQfBuk03yQKDyqtm8AAAAcE"]
[Sun Mar 01 22:11:54.737592 2026] [:error] [pid 7133:tid 7156] [client 40.69.27.251:11334] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aaRJKvCtubh8pR64qB9YGgAAAFU"]
[Sun Mar 01 22:11:55.526772 2026] [:error] [pid 7165:tid 7170] [client 40.69.27.251:10350] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aaRJKxRjCrA8qWBjgG9ssAAAAkM"]
[Sun Mar 01 22:11:56.547560 2026] [:error] [pid 37032:tid 37036] [client 40.69.27.251:1674] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aaRJLOu0U4o7eSImsVSIGgAAAYI"]
[Sun Mar 01 22:11:57.361570 2026] [:error] [pid 7133:tid 7150] [client 40.69.27.251:11519] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "aaRJLfCtubh8pR64qB9YHwAAAE8"]
[Sun Mar 01 22:11:58.168041 2026] [:error] [pid 33822:tid 33838] [client 40.69.27.251:10310] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "aaRJLm6W3ygu1YVssuYtOgAAAo4"]
[Sun Mar 01 22:11:59.199228 2026] [:error] [pid 33822:tid 33836] [client 40.69.27.251:4278] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "aaRJL26W3ygu1YVssuYtPAAAAow"]
[Sun Mar 01 22:12:00.129565 2026] [:error] [pid 38034:tid 38056] [client 40.69.27.251:11681] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "aaRJMAxtfZjwlJok9K8gtgAAARI"]
[Sun Mar 01 22:12:00.824085 2026] [:error] [pid 7133:tid 7153] [client 40.69.27.251:15320] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "aaRJMPCtubh8pR64qB9YIwAAAFI"]
[Sun Mar 01 22:12:01.549754 2026] [:error] [pid 33822:tid 33837] [client 40.69.27.251:1679] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "aaRJMW6W3ygu1YVssuYtQgAAAo0"]
[Sun Mar 01 22:12:02.846742 2026] [:error] [pid 33822:tid 33832] [client 40.69.27.251:4814] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "aaRJMm6W3ygu1YVssuYtRgAAAog"]
[Sun Mar 01 22:12:03.671355 2026] [:error] [pid 38034:tid 38059] [client 40.69.27.251:6060] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "aaRJMwxtfZjwlJok9K8guQAAARU"]
[Sun Mar 01 22:12:04.615545 2026] [:error] [pid 33822:tid 33833] [client 40.69.27.251:10325] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aaRJNG6W3ygu1YVssuYtUQAAAok"]
[Sun Mar 01 22:12:05.470701 2026] [:error] [pid 37032:tid 37054] [client 40.69.27.251:4447] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aaRJNeu0U4o7eSImsVSIHgAAAZQ"]
[Sun Mar 01 22:12:06.484877 2026] [:error] [pid 38034:tid 38036] [client 40.69.27.251:11709] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aaRJNgxtfZjwlJok9K8gugAAAQA"]
[Sun Mar 01 22:12:07.316623 2026] [:error] [pid 7165:tid 7168] [client 40.69.27.251:1702] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aaRJNxRjCrA8qWBjgG9suQAAAkE"]
[Sun Mar 01 22:12:08.435357 2026] [:error] [pid 38034:tid 38055] [client 40.69.27.251:11499] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aaRJOAxtfZjwlJok9K8gwQAAARE"]
[Sun Mar 01 22:12:09.248981 2026] [:error] [pid 38241:tid 38244] [client 40.69.27.251:14525] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aaRJOfKRPk6YnJBxw_wr_AAAAMA"]
[Sun Mar 01 22:12:10.078850 2026] [:error] [pid 7165:tid 7186] [client 40.69.27.251:14002] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aaRJOhRjCrA8qWBjgG9syQAAAlM"]
[Sun Mar 01 22:12:10.822231 2026] [:error] [pid 7165:tid 7177] [client 40.69.27.251:6914] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aaRJOhRjCrA8qWBjgG9szAAAAko"]
[Sun Mar 01 22:12:11.570123 2026] [:error] [pid 7133:tid 7156] [client 40.69.27.251:1664] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "aaRJO_Ctubh8pR64qB9YNgAAAFU"]
[Sun Mar 01 22:12:12.294287 2026] [:error] [pid 7133:tid 7144] [client 40.69.27.251:7529] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "aaRJPPCtubh8pR64qB9YOwAAAEk"]
[Sun Mar 01 22:12:13.243325 2026] [:error] [pid 33822:tid 33842] [client 40.69.27.251:12661] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "aaRJPW6W3ygu1YVssuYtYQAAApI"]
[Sun Mar 01 22:12:14.104842 2026] [:error] [pid 38241:tid 38264] [client 40.69.27.251:15120] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "aaRJPvKRPk6YnJBxw_wsAwAAANQ"]
[Sun Mar 01 22:12:15.521216 2026] [:error] [pid 40750:tid 40773] [client 40.69.27.251:15339] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaRJPwfBuk03yQKDyqtnPwAAAdQ"]
[Sun Mar 01 22:12:16.642882 2026] [:error] [pid 7165:tid 7184] [client 40.69.27.251:3220] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaRJQBRjCrA8qWBjgG9s3QAAAlE"]
[Sun Mar 01 22:12:17.956990 2026] [:error] [pid 33822:tid 33832] [client 40.69.27.251:15314] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaRJQW6W3ygu1YVssuYtaQAAAog"]
[Sun Mar 01 22:12:18.851359 2026] [:error] [pid 33822:tid 33831] [client 40.69.27.251:4829] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaRJQm6W3ygu1YVssuYtagAAAoc"]
[Sun Mar 01 22:12:19.980978 2026] [:error] [pid 40750:tid 40754] [client 40.69.27.251:13992] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaRJQwfBuk03yQKDyqtnSQAAAcE"]
[Sun Mar 01 22:12:25.269278 2026] [autoindex:error] [pid 33822:tid 33826] [client 40.69.27.251:1036] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:12:26.681502 2026] [:error] [pid 33822:tid 33830] [client 40.69.27.251:1036] [client 40.69.27.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaRJSm6W3ygu1YVssuYtjAAAAoY"]
[Sun Mar 01 22:12:34.043044 2026] [:error] [pid 7133:tid 7156] [client 40.69.27.251:15394] [client 40.69.27.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 40.69.27.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaRJUvCtubh8pR64qB9YVgAAAFU"]
[Sun Mar 01 22:12:43.237002 2026] [:error] [pid 7133:tid 7149] [client 40.69.27.251:15394] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aaRJW_Ctubh8pR64qB9YZgAAAE4"]
[Sun Mar 01 22:12:43.965838 2026] [:error] [pid 7165:tid 7170] [client 40.69.27.251:3219] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aaRJWxRjCrA8qWBjgG9tNwAAAkM"]
[Sun Mar 01 22:12:45.333533 2026] [:error] [pid 37032:tid 37056] [client 40.69.27.251:9101] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aaRJXeu0U4o7eSImsVSIOgAAAZY"]
[Sun Mar 01 22:12:46.150451 2026] [:error] [pid 7165:tid 7180] [client 40.69.27.251:4214] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aaRJXhRjCrA8qWBjgG9tSQAAAk0"]
[Sun Mar 01 22:12:46.838057 2026] [:error] [pid 7133:tid 7159] [client 40.69.27.251:2973] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aaRJXvCtubh8pR64qB9YcAAAAFg"]
[Sun Mar 01 22:12:47.623770 2026] [:error] [pid 38034:tid 38043] [client 40.69.27.251:15671] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aaRJXwxtfZjwlJok9K8g3wAAAQU"]
[Sun Mar 01 22:12:48.357971 2026] [:error] [pid 7133:tid 7149] [client 40.69.27.251:1054] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aaRJYPCtubh8pR64qB9YdAAAAE4"]
[Sun Mar 01 22:12:49.335947 2026] [:error] [pid 38241:tid 38247] [client 40.69.27.251:4855] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aaRJYfKRPk6YnJBxw_wsSAAAAMM"]
[Sun Mar 01 22:12:50.029125 2026] [:error] [pid 7133:tid 7144] [client 40.69.27.251:6445] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaRJYvCtubh8pR64qB9YeAAAAEk"]
[Sun Mar 01 22:12:50.941628 2026] [:error] [pid 38241:tid 38251] [client 40.69.27.251:1068] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaRJYvKRPk6YnJBxw_wsSgAAAMc"]
[Sun Mar 01 22:12:51.713812 2026] [:error] [pid 33822:tid 33845] [client 40.69.27.251:17533] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaRJY26W3ygu1YVssuYtowAAApU"]
[Sun Mar 01 22:12:52.664426 2026] [:error] [pid 7133:tid 7157] [client 40.69.27.251:15390] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aaRJZPCtubh8pR64qB9YfQAAAFY"]
[Sun Mar 01 22:12:53.330184 2026] [:error] [pid 38241:tid 38266] [client 40.69.27.251:4189] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaRJZfKRPk6YnJBxw_wsUAAAANY"]
[Sun Mar 01 22:12:54.336934 2026] [:error] [pid 38241:tid 38268] [client 40.69.27.251:11664] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaRJZvKRPk6YnJBxw_wsVAAAANg"]
[Sun Mar 01 22:12:56.229934 2026] [:error] [pid 41780:tid 41783] [client 40.69.27.251:11495] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaRJaMONkVoocLIqzy0wCwAAA8A"]
[Sun Mar 01 22:12:57.155923 2026] [:error] [pid 38034:tid 38053] [client 40.69.27.251:3241] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaRJaQxtfZjwlJok9K8g9wAAAQ8"]
[Sun Mar 01 22:12:58.231822 2026] [:error] [pid 44644:tid 44652] [client 40.69.27.251:15977] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaRJap3RJaXMcw3y9V_jSQAAAAU"]
[Sun Mar 01 22:12:58.955346 2026] [:error] [pid 7165:tid 7190] [client 40.69.27.251:6014] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaRJahRjCrA8qWBjgG9teQAAAlc"]
[Sun Mar 01 22:12:59.670558 2026] [:error] [pid 7165:tid 7178] [client 40.69.27.251:17036] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaRJaxRjCrA8qWBjgG9tgQAAAks"]
[Sun Mar 01 22:13:00.732966 2026] [:error] [pid 38034:tid 38043] [client 40.69.27.251:15988] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaRJbAxtfZjwlJok9K8hAwAAAQU"]
[Sun Mar 01 22:13:01.709057 2026] [:error] [pid 40750:tid 40758] [client 40.69.27.251:1721] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaRJbQfBuk03yQKDyqtnmwAAAcU"]
[Sun Mar 01 22:13:02.811277 2026] [:error] [pid 7165:tid 7174] [client 40.69.27.251:9533] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaRJbhRjCrA8qWBjgG9tiwAAAkc"]
[Sun Mar 01 22:13:03.756918 2026] [:error] [pid 7133:tid 7135] [client 40.69.27.251:11984] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaRJb_Ctubh8pR64qB9YiQAAAEA"]
[Sun Mar 01 22:13:04.634162 2026] [:error] [pid 40750:tid 40764] [client 40.69.27.251:9525] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "aaRJcAfBuk03yQKDyqtnswAAAcs"]
[Sun Mar 01 22:13:05.417783 2026] [:error] [pid 44644:tid 44669] [client 40.69.27.251:15985] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaRJcZ3RJaXMcw3y9V_jVAAAABY"]
[Sun Mar 01 22:13:06.055891 2026] [:error] [pid 33822:tid 33824] [client 40.69.27.251:4818] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaRJcm6W3ygu1YVssuYt6gAAAoA"]
[Sun Mar 01 22:13:06.946298 2026] [:error] [pid 40750:tid 40767] [client 40.69.27.251:11660] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaRJcgfBuk03yQKDyqtnxwAAAc4"]
[Sun Mar 01 22:13:07.788939 2026] [:error] [pid 7165:tid 7182] [client 40.69.27.251:5770] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaRJcxRjCrA8qWBjgG9tkwAAAk8"]
[Sun Mar 01 22:13:08.415667 2026] [:error] [pid 7165:tid 7174] [client 40.69.27.251:6958] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aaRJdBRjCrA8qWBjgG9tlgAAAkc"]
[Sun Mar 01 22:13:09.314989 2026] [:error] [pid 7165:tid 7190] [client 40.69.27.251:4846] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aaRJdRRjCrA8qWBjgG9tmwAAAlc"]
[Sun Mar 01 22:13:10.000942 2026] [:error] [pid 7165:tid 7189] [client 40.69.27.251:1078] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aaRJdhRjCrA8qWBjgG9tpAAAAlY"]
[Sun Mar 01 22:13:10.626828 2026] [:error] [pid 7165:tid 7180] [client 40.69.27.251:15995] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "aaRJdhRjCrA8qWBjgG9tpwAAAk0"]
[Sun Mar 01 22:13:11.580630 2026] [:error] [pid 33822:tid 33844] [client 40.69.27.251:4198] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aaRJd26W3ygu1YVssuYt_wAAApQ"]
[Sun Mar 01 22:13:12.354344 2026] [:error] [pid 7133:tid 7141] [client 40.69.27.251:11992] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aaRJePCtubh8pR64qB9YjgAAAEY"]
[Sun Mar 01 22:13:13.294120 2026] [:error] [pid 7133:tid 7151] [client 40.69.27.251:1027] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aaRJefCtubh8pR64qB9YmQAAAFA"]
[Sun Mar 01 22:13:14.082267 2026] [:error] [pid 37032:tid 37039] [client 40.69.27.251:2479] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aaRJeuu0U4o7eSImsVSIRwAAAYU"]
[Sun Mar 01 22:13:14.849242 2026] [:error] [pid 41780:tid 41806] [client 40.69.27.251:14727] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaRJesONkVoocLIqzy0wEAAAA9c"]
[Sun Mar 01 22:13:15.617299 2026] [:error] [pid 38241:tid 38245] [client 40.69.27.251:3229] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaRJe_KRPk6YnJBxw_wsdgAAAME"]
[Sun Mar 01 22:13:16.348531 2026] [:error] [pid 38034:tid 38060] [client 40.69.27.251:14762] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaRJfAxtfZjwlJok9K8hDgAAARY"]
[Sun Mar 01 22:13:17.158500 2026] [:error] [pid 41342:tid 41359] [client 40.69.27.251:15143] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaRJfY4iJ6RAS5CatDliIQAAAg4"]
[Sun Mar 01 22:13:18.132009 2026] [:error] [pid 44644:tid 44647] [client 40.69.27.251:16195] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aaRJfp3RJaXMcw3y9V_jWgAAAAA"]
[Sun Mar 01 22:13:18.853016 2026] [:error] [pid 38034:tid 38056] [client 40.69.27.251:10906] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aaRJfgxtfZjwlJok9K8hGwAAARI"]
[Sun Mar 01 22:13:19.826943 2026] [:error] [pid 40750:tid 40757] [client 40.69.27.251:6973] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aaRJfwfBuk03yQKDyqtn1QAAAcQ"]
[Sun Mar 01 22:13:21.077579 2026] [:error] [pid 37032:tid 37058] [client 40.69.27.251:6923] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aaRJgeu0U4o7eSImsVSISgAAAZg"]
[Sun Mar 01 22:13:22.090211 2026] [:error] [pid 38241:tid 38258] [client 40.69.27.251:15408] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aaRJgvKRPk6YnJBxw_wsngAAAM4"]
[Sun Mar 01 22:13:23.339127 2026] [:error] [pid 7165:tid 7169] [client 40.69.27.251:12553] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aaRJgxRjCrA8qWBjgG9ttQAAAkI"]
[Sun Mar 01 22:13:24.051091 2026] [:error] [pid 7165:tid 7175] [client 40.69.27.251:3204] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aaRJhBRjCrA8qWBjgG9tvAAAAkg"]
[Sun Mar 01 22:13:25.246736 2026] [:error] [pid 7165:tid 7184] [client 40.69.27.251:11440] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "aaRJhRRjCrA8qWBjgG9tzwAAAlE"]
[Sun Mar 01 22:13:26.310063 2026] [:error] [pid 7165:tid 7178] [client 40.69.27.251:6924] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aaRJhhRjCrA8qWBjgG9t1wAAAks"]
[Sun Mar 01 22:13:27.093242 2026] [:error] [pid 7165:tid 7175] [client 40.69.27.251:12823] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aaRJhxRjCrA8qWBjgG9t4QAAAkg"]
[Sun Mar 01 22:13:28.010502 2026] [:error] [pid 40750:tid 40762] [client 40.69.27.251:12840] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aaRJiAfBuk03yQKDyqtoBQAAAck"]
[Sun Mar 01 22:13:29.347305 2026] [:error] [pid 7133:tid 7141] [client 40.69.27.251:9001] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aaRJifCtubh8pR64qB9YygAAAEY"]
[Sun Mar 01 22:13:30.303585 2026] [:error] [pid 40750:tid 40757] [client 40.69.27.251:11667] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaRJigfBuk03yQKDyqtoDwAAAcQ"]
[Sun Mar 01 22:13:31.130265 2026] [:error] [pid 33822:tid 33848] [client 40.69.27.251:14199] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaRJi26W3ygu1YVssuYuJQAAApg"]
[Sun Mar 01 22:13:32.010406 2026] [:error] [pid 7133:tid 7154] [client 40.69.27.251:1033] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaRJjPCtubh8pR64qB9Y0AAAAFM"]
[Sun Mar 01 22:13:32.784967 2026] [:error] [pid 7165:tid 7168] [client 40.69.27.251:4221] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaRJjBRjCrA8qWBjgG9uKAAAAkE"]
[Sun Mar 01 22:13:33.493832 2026] [:error] [pid 41342:tid 41361] [client 40.69.27.251:10901] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaRJjY4iJ6RAS5CatDliMQAAAhA"]
[Sun Mar 01 22:13:34.428236 2026] [:error] [pid 7165:tid 7182] [client 40.69.27.251:13070] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaRJjhRjCrA8qWBjgG9uOwAAAk8"]
[Sun Mar 01 22:13:35.341988 2026] [:error] [pid 7133:tid 7143] [client 40.69.27.251:8984] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaRJj_Ctubh8pR64qB9Y1AAAAEg"]
[Sun Mar 01 22:13:36.193170 2026] [:error] [pid 7133:tid 7144] [client 40.69.27.251:14197] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaRJkPCtubh8pR64qB9Y1gAAAEk"]
[Sun Mar 01 22:13:37.445776 2026] [:error] [pid 7165:tid 7172] [client 40.69.27.251:1389] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aaRJkRRjCrA8qWBjgG9uWwAAAkU"]
[Sun Mar 01 22:13:38.397545 2026] [:error] [pid 40750:tid 40762] [client 40.69.27.251:1806] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aaRJkgfBuk03yQKDyqtoJAAAAck"]
[Sun Mar 01 22:13:39.329651 2026] [:error] [pid 38241:tid 38265] [client 40.69.27.251:1748] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aaRJk_KRPk6YnJBxw_ws6QAAANU"]
[Sun Mar 01 22:13:40.263289 2026] [:error] [pid 38241:tid 38261] [client 40.69.27.251:9068] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aaRJlPKRPk6YnJBxw_ws8wAAANE"]
[Sun Mar 01 22:13:41.186037 2026] [:error] [pid 33822:tid 33844] [client 40.69.27.251:1035] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aaRJlW6W3ygu1YVssuYuPQAAApQ"]
[Sun Mar 01 22:13:41.966523 2026] [:error] [pid 7165:tid 7190] [client 40.69.27.251:2447] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aaRJlRRjCrA8qWBjgG9uaQAAAlc"]
[Sun Mar 01 22:13:50.995150 2026] [:error] [pid 38241:tid 38261] [client 40.69.27.251:4859] [client 40.69.27.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaRJnvKRPk6YnJBxw_wtEQAAANE"]
[Sun Mar 01 22:14:04.589865 2026] [:error] [pid 7165:tid 7178] [client 40.69.27.251:8992] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aaRJrBRjCrA8qWBjgG9u9AAAAks"]
[Sun Mar 01 22:14:05.530604 2026] [:error] [pid 40750:tid 40764] [client 40.69.27.251:9799] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aaRJrQfBuk03yQKDyqtofQAAAcs"]
[Sun Mar 01 22:14:06.197751 2026] [:error] [pid 7165:tid 7168] [client 40.69.27.251:4166] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aaRJrhRjCrA8qWBjgG9vBAAAAkE"]
[Sun Mar 01 22:14:07.188499 2026] [:error] [pid 7165:tid 7177] [client 40.69.27.251:4292] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aaRJrxRjCrA8qWBjgG9vDgAAAko"]
[Sun Mar 01 22:14:08.081890 2026] [:error] [pid 7133:tid 7135] [client 40.69.27.251:4167] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaRJsPCtubh8pR64qB9Y-wAAAEA"]
[Sun Mar 01 22:14:09.038890 2026] [:error] [pid 7133:tid 7145] [client 40.69.27.251:11670] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaRJsfCtubh8pR64qB9Y_AAAAEo"]
[Sun Mar 01 22:14:09.863718 2026] [:error] [pid 33822:tid 33834] [client 40.69.27.251:1041] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaRJsW6W3ygu1YVssuYuYAAAAoo"]
[Sun Mar 01 22:14:10.640372 2026] [:error] [pid 7165:tid 7174] [client 40.69.27.251:11691] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaRJshRjCrA8qWBjgG9vIAAAAkc"]
[Sun Mar 01 22:14:11.758406 2026] [:error] [pid 38241:tid 38248] [client 40.69.27.251:11958] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aaRJs_KRPk6YnJBxw_wtQQAAAMQ"]
[Sun Mar 01 22:14:12.710187 2026] [:error] [pid 38241:tid 38264] [client 40.69.27.251:15132] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aaRJtPKRPk6YnJBxw_wtSgAAANQ"]
[Sun Mar 01 22:14:13.394085 2026] [:error] [pid 38241:tid 38248] [client 40.69.27.251:4305] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aaRJtfKRPk6YnJBxw_wtUQAAAMQ"]
[Sun Mar 01 22:14:14.002031 2026] [:error] [pid 40750:tid 40754] [client 40.69.27.251:11961] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aaRJtgfBuk03yQKDyqtonQAAAcE"]
[Sun Mar 01 22:14:14.823426 2026] [:error] [pid 7133:tid 7138] [client 40.69.27.251:6964] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaRJtvCtubh8pR64qB9ZBQAAAEM"]
[Sun Mar 01 22:14:16.207957 2026] [:error] [pid 33822:tid 33841] [client 40.69.27.251:11686] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaRJuG6W3ygu1YVssuYucQAAApE"]
[Sun Mar 01 22:14:17.318219 2026] [:error] [pid 41780:tid 41791] [client 40.69.27.251:7416] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaRJucONkVoocLIqzy0wMQAAA8g"]
[Sun Mar 01 22:14:18.342467 2026] [:error] [pid 7165:tid 7189] [client 40.69.27.251:17329] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaRJuhRjCrA8qWBjgG9vRAAAAlY"]
[Sun Mar 01 22:14:19.223115 2026] [:error] [pid 7165:tid 7188] [client 40.69.27.251:1899] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaRJuxRjCrA8qWBjgG9vSgAAAlU"]
[Sun Mar 01 22:14:20.039946 2026] [:error] [pid 7133:tid 7146] [client 40.69.27.251:9935] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaRJvPCtubh8pR64qB9ZEgAAAEs"]
[Sun Mar 01 22:14:20.959461 2026] [:error] [pid 33822:tid 33837] [client 40.69.27.251:1871] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaRJvG6W3ygu1YVssuYugAAAAo0"]
[Sun Mar 01 22:14:21.710761 2026] [:error] [pid 37032:tid 37055] [client 40.69.27.251:3261] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaRJveu0U4o7eSImsVSIdwAAAZU"]
[Sun Mar 01 22:14:22.877139 2026] [:error] [pid 7165:tid 7173] [client 40.69.27.251:16530] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaRJvhRjCrA8qWBjgG9vWgAAAkY"]
[Sun Mar 01 22:14:23.842788 2026] [:error] [pid 40750:tid 40774] [client 40.69.27.251:1683] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaRJvwfBuk03yQKDyqtowgAAAdU"]
[Sun Mar 01 22:14:25.044930 2026] [:error] [pid 7133:tid 7139] [client 40.69.27.251:1072] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaRJwfCtubh8pR64qB9ZFgAAAEQ"]
[Sun Mar 01 22:14:26.157381 2026] [:error] [pid 7165:tid 7187] [client 40.69.27.251:3210] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaRJwhRjCrA8qWBjgG9vZgAAAlQ"]
[Sun Mar 01 22:14:27.089042 2026] [:error] [pid 38034:tid 38037] [client 40.69.27.251:1048] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaRJwwxtfZjwlJok9K8hQwAAAQE"]
[Sun Mar 01 22:14:27.969095 2026] [:error] [pid 7165:tid 7189] [client 40.69.27.251:15154] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaRJwxRjCrA8qWBjgG9vdgAAAlY"]
[Sun Mar 01 22:14:28.734554 2026] [:error] [pid 7165:tid 7174] [client 40.69.27.251:9650] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaRJxBRjCrA8qWBjgG9vgAAAAkc"]
[Sun Mar 01 22:14:29.522022 2026] [:error] [pid 38241:tid 38261] [client 40.69.27.251:4218] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaRJxfKRPk6YnJBxw_wteQAAANE"]
[Sun Mar 01 22:14:30.282874 2026] [:error] [pid 33822:tid 33840] [client 40.69.27.251:13961] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaRJxm6W3ygu1YVssuYukgAAApA"]
[Sun Mar 01 22:14:31.370639 2026] [:error] [pid 38241:tid 38248] [client 40.69.27.251:13973] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaRJx_KRPk6YnJBxw_wtgQAAAMQ"]
[Sun Mar 01 22:14:32.755438 2026] [:error] [pid 38034:tid 38050] [client 40.69.27.251:1700] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaRJyAxtfZjwlJok9K8hSgAAAQw"]
[Sun Mar 01 22:14:33.886913 2026] [:error] [pid 7165:tid 7190] [client 40.69.27.251:17286] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaRJyRRjCrA8qWBjgG9vqAAAAlc"]
[Sun Mar 01 22:14:34.833766 2026] [:error] [pid 7165:tid 7167] [client 40.69.27.251:4295] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaRJyhRjCrA8qWBjgG9vtQAAAkA"]
[Sun Mar 01 22:14:35.787510 2026] [:error] [pid 7165:tid 7191] [client 40.69.27.251:15140] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaRJyxRjCrA8qWBjgG9vvwAAAlg"]
[Sun Mar 01 22:14:36.799123 2026] [:error] [pid 7165:tid 7181] [client 40.69.27.251:1812] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaRJzBRjCrA8qWBjgG9vxQAAAk4"]
[Sun Mar 01 22:14:37.901143 2026] [:error] [pid 40750:tid 40768] [client 40.69.27.251:1681] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaRJzQfBuk03yQKDyqto7wAAAc8"]
[Sun Mar 01 22:14:39.446803 2026] [:error] [pid 40750:tid 40769] [client 40.69.27.251:4819] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaRJzwfBuk03yQKDyqto9wAAAdA"]
[Sun Mar 01 22:14:40.994801 2026] [:error] [pid 38241:tid 38250] [client 40.69.27.251:1626] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaRJ0PKRPk6YnJBxw_wtnQAAAMY"]
[Sun Mar 01 22:14:42.119061 2026] [:error] [pid 38241:tid 38259] [client 40.69.27.251:16513] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaRJ0vKRPk6YnJBxw_wtqAAAAM8"]
[Sun Mar 01 22:14:43.277967 2026] [:error] [pid 44644:tid 44665] [client 40.69.27.251:13995] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaRJ053RJaXMcw3y9V_jdAAAABI"]
[Sun Mar 01 22:14:44.153570 2026] [:error] [pid 44644:tid 44667] [client 40.69.27.251:13476] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aaRJ1J3RJaXMcw3y9V_jeQAAABQ"]
[Sun Mar 01 22:14:45.493936 2026] [:error] [pid 33822:tid 33847] [client 40.69.27.251:11666] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aaRJ1W6W3ygu1YVssuYunAAAApc"]
[Sun Mar 01 22:14:46.518939 2026] [:error] [pid 44644:tid 44653] [client 40.69.27.251:15155] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aaRJ1p3RJaXMcw3y9V_jgwAAAAY"]
[Sun Mar 01 22:14:47.359308 2026] [:error] [pid 41780:tid 41802] [client 40.69.27.251:6556] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aaRJ18ONkVoocLIqzy0wPgAAA9M"]
[Sun Mar 01 22:14:48.251837 2026] [:error] [pid 40750:tid 40776] [client 40.69.27.251:6859] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aaRJ2AfBuk03yQKDyqtpDwAAAdc"]
[Sun Mar 01 22:14:49.026570 2026] [:error] [pid 40750:tid 40753] [client 40.69.27.251:4848] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aaRJ2QfBuk03yQKDyqtpEgAAAcA"]
[Sun Mar 01 22:14:49.764672 2026] [:error] [pid 7133:tid 7143] [client 40.69.27.251:15530] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aaRJ2fCtubh8pR64qB9ZMAAAAEg"]
[Sun Mar 01 22:14:50.704864 2026] [:error] [pid 7133:tid 7152] [client 40.69.27.251:6530] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aaRJ2vCtubh8pR64qB9ZMgAAAFE"]
[Sun Mar 01 22:14:51.732395 2026] [:error] [pid 38241:tid 38256] [client 40.69.27.251:5035] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaRJ2_KRPk6YnJBxw_wt6QAAAMw"]
[Sun Mar 01 22:14:52.416354 2026] [:error] [pid 40750:tid 40773] [client 40.69.27.251:11698] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaRJ3AfBuk03yQKDyqtpPwAAAdQ"]
[Sun Mar 01 22:14:53.380214 2026] [:error] [pid 37032:tid 37049] [client 40.69.27.251:1038] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaRJ3eu0U4o7eSImsVSIhgAAAY8"]
[Sun Mar 01 22:14:54.415891 2026] [:error] [pid 33822:tid 33824] [client 40.69.27.251:13781] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaRJ3m6W3ygu1YVssuYupwAAAoA"]
[Sun Mar 01 22:14:55.658734 2026] [:error] [pid 7165:tid 7184] [client 40.69.27.251:12975] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aaRJ3xRjCrA8qWBjgG9wBAAAAlE"]
[Sun Mar 01 22:14:59.650417 2026] [:error] [pid 7133:tid 7150] [client 40.69.27.251:10077] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aaRJ4_Ctubh8pR64qB9ZPQAAAE8"]
[Sun Mar 01 22:15:00.920605 2026] [:error] [pid 7165:tid 7177] [client 40.69.27.251:6867] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aaRJ5BRjCrA8qWBjgG9wIwAAAko"]
[Sun Mar 01 22:15:01.890208 2026] [:error] [pid 7133:tid 7143] [client 40.69.27.251:6529] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aaRJ5fCtubh8pR64qB9ZQQAAAEg"]
[Sun Mar 01 22:15:17.720817 2026] [autoindex:error] [pid 7165:tid 7167] [client 40.69.27.251:16531] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:15:19.151001 2026] [autoindex:error] [pid 7165:tid 7168] [client 40.69.27.251:16531] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:15:20.629491 2026] [:error] [pid 7165:tid 7178] [client 40.69.27.251:16531] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aaRJ-BRjCrA8qWBjgG9woAAAAks"]
[Sun Mar 01 22:15:21.509822 2026] [:error] [pid 7165:tid 7171] [client 40.69.27.251:13998] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aaRJ-RRjCrA8qWBjgG9wpwAAAkQ"]
[Sun Mar 01 22:15:22.651457 2026] [:error] [pid 7165:tid 7187] [client 40.69.27.251:8374] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aaRJ-hRjCrA8qWBjgG9wrgAAAlQ"]
[Sun Mar 01 22:15:23.481612 2026] [:error] [pid 41780:tid 41800] [client 40.69.27.251:17142] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aaRJ-8ONkVoocLIqzy0wSwAAA9E"]
[Sun Mar 01 22:15:24.468533 2026] [:error] [pid 7133:tid 7137] [client 40.69.27.251:6993] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w4.php"] [unique_id "aaRJ_PCtubh8pR64qB9ZTAAAAEI"]
[Sun Mar 01 22:15:25.104066 2026] [:error] [pid 7165:tid 7179] [client 40.69.27.251:7660] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w4.php"] [unique_id "aaRJ_RRjCrA8qWBjgG9wvAAAAkw"]
[Sun Mar 01 22:15:26.042700 2026] [:error] [pid 7133:tid 7148] [client 40.69.27.251:15006] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w4.php"] [unique_id "aaRJ_vCtubh8pR64qB9ZTgAAAE0"]
[Sun Mar 01 22:15:27.122224 2026] [:error] [pid 41342:tid 41360] [client 40.69.27.251:7644] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w4.php"] [unique_id "aaRJ_44iJ6RAS5CatDliQgAAAg8"]
[Sun Mar 01 22:15:27.996666 2026] [:error] [pid 33822:tid 33831] [client 40.69.27.251:11626] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaRJ_26W3ygu1YVssuYuvAAAAoc"]
[Sun Mar 01 22:15:29.033353 2026] [:error] [pid 7165:tid 7175] [client 40.69.27.251:7003] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaRKARRjCrA8qWBjgG9wzAAAAkg"]
[Sun Mar 01 22:15:29.788347 2026] [:error] [pid 40750:tid 40759] [client 40.69.27.251:7021] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaRKAQfBuk03yQKDyqtpxAAAAcY"]
[Sun Mar 01 22:15:30.457752 2026] [:error] [pid 7165:tid 7183] [client 40.69.27.251:13496] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaRKAhRjCrA8qWBjgG9w0gAAAlA"]
[Sun Mar 01 22:15:31.363733 2026] [:error] [pid 38034:tid 38055] [client 40.69.27.251:7662] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aaRKAwxtfZjwlJok9K8hjgAAARE"]
[Sun Mar 01 22:15:32.534520 2026] [:error] [pid 38034:tid 38060] [client 40.69.27.251:13905] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aaRKBAxtfZjwlJok9K8hlAAAARY"]
[Sun Mar 01 22:15:33.396518 2026] [:error] [pid 38241:tid 38268] [client 40.69.27.251:6946] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aaRKBfKRPk6YnJBxw_wuFQAAANg"]
[Sun Mar 01 22:15:34.420004 2026] [:error] [pid 7165:tid 7174] [client 40.69.27.251:14253] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aaRKBhRjCrA8qWBjgG9w5wAAAkc"]
[Sun Mar 01 22:15:35.428259 2026] [:error] [pid 40750:tid 40755] [client 40.69.27.251:8337] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaRKBwfBuk03yQKDyqtpzQAAAcI"]
[Sun Mar 01 22:15:36.434114 2026] [:error] [pid 38241:tid 38247] [client 40.69.27.251:17150] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaRKCPKRPk6YnJBxw_wuGQAAAMM"]
[Sun Mar 01 22:15:37.924704 2026] [:error] [pid 37032:tid 37051] [client 40.69.27.251:5239] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaRKCeu0U4o7eSImsVSIsQAAAZE"]
[Sun Mar 01 22:15:39.759010 2026] [:error] [pid 7133:tid 7155] [client 40.69.27.251:11631] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaRKC_Ctubh8pR64qB9ZYQAAAFQ"]
[Sun Mar 01 22:15:40.516442 2026] [:error] [pid 38241:tid 38244] [client 40.69.27.251:14294] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymn.php"] [unique_id "aaRKDPKRPk6YnJBxw_wuHQAAAMA"]
[Sun Mar 01 22:15:41.649771 2026] [:error] [pid 38241:tid 38252] [client 40.69.27.251:3708] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymn.php"] [unique_id "aaRKDfKRPk6YnJBxw_wuHwAAAMg"]
[Sun Mar 01 22:15:42.868575 2026] [:error] [pid 38034:tid 38060] [client 40.69.27.251:11699] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymn.php"] [unique_id "aaRKDgxtfZjwlJok9K8hogAAARY"]
[Sun Mar 01 22:15:43.475368 2026] [:error] [pid 40750:tid 40755] [client 40.69.27.251:5220] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymn.php"] [unique_id "aaRKDwfBuk03yQKDyqtp3wAAAcI"]
[Sun Mar 01 22:15:44.314362 2026] [:error] [pid 37032:tid 37039] [client 40.69.27.251:7358] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaRKEOu0U4o7eSImsVSIugAAAYU"]
[Sun Mar 01 22:15:45.258371 2026] [:error] [pid 44644:tid 44666] [client 40.69.27.251:2068] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaRKEZ3RJaXMcw3y9V_j2AAAABM"]
[Sun Mar 01 22:15:46.117544 2026] [:error] [pid 7165:tid 7186] [client 40.69.27.251:9070] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaRKEhRjCrA8qWBjgG9w8QAAAlM"]
[Sun Mar 01 22:15:46.990995 2026] [:error] [pid 7165:tid 7184] [client 40.69.27.251:13872] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaRKEhRjCrA8qWBjgG9w9wAAAlE"]
[Sun Mar 01 22:15:48.087472 2026] [:error] [pid 7165:tid 7174] [client 40.69.27.251:7673] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaRKFBRjCrA8qWBjgG9xAwAAAkc"]
[Sun Mar 01 22:15:49.253929 2026] [:error] [pid 7165:tid 7170] [client 40.69.27.251:3200] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaRKFRRjCrA8qWBjgG9xCAAAAkM"]
[Sun Mar 01 22:15:50.066581 2026] [:error] [pid 40750:tid 40761] [client 40.69.27.251:7640] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaRKFgfBuk03yQKDyqtp7wAAAcg"]
[Sun Mar 01 22:15:50.943826 2026] [:error] [pid 40750:tid 40776] [client 40.69.27.251:7677] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaRKFgfBuk03yQKDyqtp8wAAAdc"]
[Sun Mar 01 22:15:51.771171 2026] [:error] [pid 7133:tid 7146] [client 40.69.27.251:3686] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aaRKF_Ctubh8pR64qB9ZawAAAEs"]
[Sun Mar 01 22:15:53.397443 2026] [:error] [pid 33822:tid 33834] [client 40.69.27.251:10183] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aaRKGW6W3ygu1YVssuYu6gAAAoo"]
[Sun Mar 01 22:15:54.804972 2026] [:error] [pid 38241:tid 38262] [client 40.69.27.251:16945] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aaRKGvKRPk6YnJBxw_wuMgAAANI"]
[Sun Mar 01 22:15:56.264264 2026] [:error] [pid 40750:tid 40768] [client 40.69.27.251:6966] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aaRKHAfBuk03yQKDyqtqAAAAAc8"]
[Sun Mar 01 22:15:57.193292 2026] [:error] [pid 33822:tid 33831] [client 40.69.27.251:7267] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aaRKHW6W3ygu1YVssuYu9QAAAoc"]
[Sun Mar 01 22:15:58.635302 2026] [:error] [pid 7133:tid 7150] [client 40.69.27.251:16102] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aaRKHvCtubh8pR64qB9ZjgAAAE8"]
[Sun Mar 01 22:15:59.413194 2026] [:error] [pid 40750:tid 40774] [client 40.69.27.251:1029] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aaRKHwfBuk03yQKDyqtqDAAAAdU"]
[Sun Mar 01 22:16:00.634483 2026] [:error] [pid 7165:tid 7188] [client 40.69.27.251:11696] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aaRKIBRjCrA8qWBjgG9xGAAAAlU"]
[Sun Mar 01 22:16:01.337160 2026] [:error] [pid 7133:tid 7143] [client 40.69.27.251:17103] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaRKIfCtubh8pR64qB9ZogAAAEg"]
[Sun Mar 01 22:16:02.099358 2026] [:error] [pid 7165:tid 7179] [client 40.69.27.251:17250] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaRKIhRjCrA8qWBjgG9xHAAAAkw"]
[Sun Mar 01 22:16:02.749739 2026] [:error] [pid 7165:tid 7170] [client 40.69.27.251:16105] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaRKIhRjCrA8qWBjgG9xIQAAAkM"]
[Sun Mar 01 22:16:03.884343 2026] [:error] [pid 7165:tid 7188] [client 40.69.27.251:3677] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaRKIxRjCrA8qWBjgG9xJQAAAlU"]
[Sun Mar 01 22:16:04.753802 2026] [:error] [pid 41780:tid 41802] [client 40.69.27.251:16916] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaRKJMONkVoocLIqzy0wWwAAA9M"]
[Sun Mar 01 22:16:05.889964 2026] [:error] [pid 40750:tid 40760] [client 40.69.27.251:16901] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaRKJQfBuk03yQKDyqtqNAAAAcc"]
[Sun Mar 01 22:16:06.695356 2026] [:error] [pid 41780:tid 41793] [client 40.69.27.251:16511] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaRKJsONkVoocLIqzy0wYwAAA8o"]
[Sun Mar 01 22:16:07.667184 2026] [:error] [pid 41780:tid 41786] [client 40.69.27.251:13912] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaRKJ8ONkVoocLIqzy0wZwAAA8M"]
[Sun Mar 01 22:16:08.854654 2026] [:error] [pid 40750:tid 40768] [client 40.69.27.251:6375] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaRKKAfBuk03yQKDyqtqRQAAAc8"]
[Sun Mar 01 22:16:09.694231 2026] [:error] [pid 7165:tid 7180] [client 40.69.27.251:6371] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaRKKRRjCrA8qWBjgG9xNAAAAk0"]
[Sun Mar 01 22:16:10.902829 2026] [:error] [pid 7133:tid 7142] [client 40.69.27.251:16922] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaRKKvCtubh8pR64qB9ZyAAAAEc"]
[Sun Mar 01 22:16:11.817798 2026] [:error] [pid 7165:tid 7169] [client 40.69.27.251:6777] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaRKKxRjCrA8qWBjgG9xPgAAAkI"]
[Sun Mar 01 22:16:12.622794 2026] [:error] [pid 7165:tid 7186] [client 40.69.27.251:11661] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aaRKLBRjCrA8qWBjgG9xRQAAAlM"]
[Sun Mar 01 22:16:13.429112 2026] [:error] [pid 38241:tid 38253] [client 40.69.27.251:14977] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aaRKLfKRPk6YnJBxw_wuRwAAAMk"]
[Sun Mar 01 22:16:14.345658 2026] [:error] [pid 7165:tid 7172] [client 40.69.27.251:13885] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aaRKLhRjCrA8qWBjgG9xTwAAAkU"]
[Sun Mar 01 22:16:14.918693 2026] [:error] [pid 7165:tid 7190] [client 40.69.27.251:3654] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aaRKLhRjCrA8qWBjgG9xUAAAAlc"]
[Sun Mar 01 22:16:15.608546 2026] [:error] [pid 41342:tid 41345] [client 40.69.27.251:7656] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aaRKL44iJ6RAS5CatDliUQAAAgA"]
[Sun Mar 01 22:16:16.168595 2026] [:error] [pid 7165:tid 7191] [client 40.69.27.251:7317] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aaRKMBRjCrA8qWBjgG9xWAAAAlg"]
[Sun Mar 01 22:16:16.847465 2026] [:error] [pid 41780:tid 41783] [client 40.69.27.251:10224] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aaRKMMONkVoocLIqzy0wawAAA8A"]
[Sun Mar 01 22:16:17.687016 2026] [:error] [pid 38034:tid 38051] [client 40.69.27.251:17115] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aaRKMQxtfZjwlJok9K8huAAAAQ0"]
[Sun Mar 01 22:16:18.469880 2026] [:error] [pid 7133:tid 7147] [client 40.69.27.251:3734] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aaRKMvCtubh8pR64qB9Z8QAAAEw"]
[Sun Mar 01 22:16:23.317583 2026] [:error] [pid 7133:tid 7154] [client 40.69.27.251:8376] [client 40.69.27.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaRKN_Ctubh8pR64qB9aCQAAAFM"]
[Sun Mar 01 22:16:32.667932 2026] [autoindex:error] [pid 7165:tid 7169] [client 40.69.27.251:17227] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:16:37.233334 2026] [autoindex:error] [pid 7165:tid 7188] [client 40.69.27.251:17227] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 01 22:16:39.887647 2026] [:error] [pid 7165:tid 7174] [client 40.69.27.251:17227] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aaRKRxRjCrA8qWBjgG9x3QAAAkc"]
[Sun Mar 01 22:16:40.899592 2026] [:error] [pid 40750:tid 40753] [client 40.69.27.251:6350] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aaRKSAfBuk03yQKDyqtq6AAAAcA"]
[Sun Mar 01 22:16:41.713087 2026] [:error] [pid 41780:tid 41802] [client 40.69.27.251:6725] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aaRKScONkVoocLIqzy0wbAAAA9M"]
[Sun Mar 01 22:16:42.812811 2026] [:error] [pid 38241:tid 38252] [client 40.69.27.251:12198] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aaRKSvKRPk6YnJBxw_wufQAAAMg"]
[Sun Mar 01 22:16:43.831961 2026] [:error] [pid 7165:tid 7177] [client 40.69.27.251:3673] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "aaRKSxRjCrA8qWBjgG9x9gAAAko"]
[Sun Mar 01 22:16:44.776662 2026] [:error] [pid 40750:tid 40765] [client 40.69.27.251:1594] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "aaRKTAfBuk03yQKDyqtq9wAAAcw"]
[Sun Mar 01 22:16:45.808958 2026] [:error] [pid 7165:tid 7191] [client 40.69.27.251:16076] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "aaRKTRRjCrA8qWBjgG9x_AAAAlg"]
[Sun Mar 01 22:16:46.627960 2026] [:error] [pid 40750:tid 40769] [client 40.69.27.251:6762] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "aaRKTgfBuk03yQKDyqtq_wAAAdA"]
[Sun Mar 01 22:16:47.416722 2026] [:error] [pid 40750:tid 40768] [client 40.69.27.251:16095] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aaRKTwfBuk03yQKDyqtrBQAAAc8"]
[Sun Mar 01 22:16:48.172776 2026] [:error] [pid 33822:tid 33828] [client 40.69.27.251:6347] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aaRKUG6W3ygu1YVssuYvMgAAAoQ"]
[Sun Mar 01 22:16:48.962226 2026] [:error] [pid 7165:tid 7172] [client 40.69.27.251:3559] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aaRKUBRjCrA8qWBjgG9yCAAAAkU"]
[Sun Mar 01 22:16:49.717531 2026] [:error] [pid 7165:tid 7189] [client 40.69.27.251:9583] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aaRKURRjCrA8qWBjgG9yDgAAAlY"]
[Sun Mar 01 22:16:50.413054 2026] [:error] [pid 40750:tid 40756] [client 40.69.27.251:10191] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aaRKUgfBuk03yQKDyqtrGQAAAcM"]
[Sun Mar 01 22:16:51.215814 2026] [:error] [pid 33822:tid 33836] [client 40.69.27.251:17259] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aaRKU26W3ygu1YVssuYvPAAAAow"]
[Sun Mar 01 22:16:52.145801 2026] [:error] [pid 38241:tid 38256] [client 40.69.27.251:6339] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aaRKVPKRPk6YnJBxw_wuggAAAMw"]
[Sun Mar 01 22:16:52.980288 2026] [:error] [pid 7133:tid 7140] [client 40.69.27.251:1572] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aaRKVPCtubh8pR64qB9aLgAAAEU"]
[Sun Mar 01 22:16:53.787050 2026] [:error] [pid 7133:tid 7138] [client 40.69.27.251:16450] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aaRKVfCtubh8pR64qB9aMwAAAEM"]
[Sun Mar 01 22:16:54.643720 2026] [:error] [pid 38034:tid 38062] [client 40.69.27.251:6733] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aaRKVgxtfZjwlJok9K8hxAAAARg"]
[Sun Mar 01 22:16:55.562982 2026] [:error] [pid 7165:tid 7184] [client 40.69.27.251:4977] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aaRKVxRjCrA8qWBjgG9yKwAAAlE"]
[Sun Mar 01 22:16:56.446665 2026] [:error] [pid 7165:tid 7188] [client 40.69.27.251:17275] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aaRKWBRjCrA8qWBjgG9yMgAAAlU"]
[Sun Mar 01 22:16:57.336041 2026] [:error] [pid 38241:tid 38260] [client 40.69.27.251:5675] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aaRKWfKRPk6YnJBxw_wukAAAANA"]
[Sun Mar 01 22:16:58.400783 2026] [:error] [pid 38241:tid 38259] [client 40.69.27.251:7838] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aaRKWvKRPk6YnJBxw_wulwAAAM8"]
[Sun Mar 01 22:16:59.035295 2026] [:error] [pid 38241:tid 38254] [client 40.69.27.251:3555] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aaRKW_KRPk6YnJBxw_wumgAAAMo"]
[Sun Mar 01 22:17:00.397491 2026] [:error] [pid 37032:tid 37058] [client 40.69.27.251:6167] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aaRKXOu0U4o7eSImsVSI3wAAAZg"]
[Sun Mar 01 22:17:02.184510 2026] [:error] [pid 38241:tid 38253] [client 40.69.27.251:1599] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aaRKXvKRPk6YnJBxw_wuowAAAMk"]
[Sun Mar 01 22:17:03.267739 2026] [:error] [pid 7165:tid 7181] [client 40.69.27.251:13365] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aaRKXxRjCrA8qWBjgG9ySwAAAk4"]
[Sun Mar 01 22:17:04.949825 2026] [:error] [pid 40750:tid 40753] [client 40.69.27.251:12751] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aaRKYAfBuk03yQKDyqtrPQAAAcA"]
[Sun Mar 01 22:17:05.902735 2026] [:error] [pid 7165:tid 7179] [client 40.69.27.251:3764] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aaRKYRRjCrA8qWBjgG9yUgAAAkw"]
[Sun Mar 01 22:17:07.050867 2026] [:error] [pid 7165:tid 7177] [client 40.69.27.251:6336] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "aaRKYxRjCrA8qWBjgG9yXAAAAko"]
[Sun Mar 01 22:17:07.934596 2026] [:error] [pid 40750:tid 40757] [client 40.69.27.251:2915] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "aaRKYwfBuk03yQKDyqtrRQAAAcQ"]
[Sun Mar 01 22:17:08.791418 2026] [:error] [pid 7165:tid 7170] [client 40.69.27.251:13681] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "aaRKZBRjCrA8qWBjgG9yZQAAAkM"]
[Sun Mar 01 22:17:10.496590 2026] [:error] [pid 41342:tid 41347] [client 40.69.27.251:3271] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "aaRKZo4iJ6RAS5CatDliVwAAAgI"]
[Sun Mar 01 22:17:11.385640 2026] [:error] [pid 7133:tid 7159] [client 40.69.27.251:3530] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aaRKZ_Ctubh8pR64qB9aSgAAAFg"]
[Sun Mar 01 22:17:12.333758 2026] [:error] [pid 7165:tid 7170] [client 40.69.27.251:12177] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aaRKaBRjCrA8qWBjgG9ycQAAAkM"]
[Sun Mar 01 22:17:13.347324 2026] [:error] [pid 7165:tid 7180] [client 40.69.27.251:17241] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aaRKaRRjCrA8qWBjgG9ydQAAAk0"]
[Sun Mar 01 22:17:14.765730 2026] [:error] [pid 7165:tid 7172] [client 40.69.27.251:3531] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aaRKahRjCrA8qWBjgG9ydwAAAkU"]
[Sun Mar 01 22:17:15.648995 2026] [:error] [pid 41342:tid 41356] [client 40.69.27.251:16473] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aaRKa44iJ6RAS5CatDliWAAAAgs"]
[Sun Mar 01 22:17:16.541704 2026] [:error] [pid 7133:tid 7159] [client 40.69.27.251:13690] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aaRKbPCtubh8pR64qB9aWgAAAFg"]
[Sun Mar 01 22:17:17.396702 2026] [:error] [pid 7165:tid 7181] [client 40.69.27.251:3765] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aaRKbRRjCrA8qWBjgG9ygwAAAk4"]
[Sun Mar 01 22:17:18.168344 2026] [:error] [pid 7133:tid 7145] [client 40.69.27.251:9549] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/miansha.php"] [unique_id "aaRKbvCtubh8pR64qB9aWwAAAEo"]
[Sun Mar 01 22:17:19.185872 2026] [:error] [pid 40750:tid 40759] [client 40.69.27.251:13349] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aaRKbwfBuk03yQKDyqtrUwAAAcY"]
[Sun Mar 01 22:17:20.150837 2026] [:error] [pid 33822:tid 33824] [client 40.69.27.251:2530] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aaRKcG6W3ygu1YVssuYvWwAAAoA"]
[Sun Mar 01 22:17:20.954099 2026] [:error] [pid 38241:tid 38246] [client 40.69.27.251:2658] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aaRKcPKRPk6YnJBxw_wu1QAAAMI"]
[Sun Mar 01 22:17:21.800613 2026] [:error] [pid 37032:tid 37035] [client 40.69.27.251:13676] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aaRKceu0U4o7eSImsVSI-QAAAYE"]
[Sun Mar 01 22:17:22.674629 2026] [:error] [pid 38241:tid 38252] [client 40.69.27.251:2675] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaRKcvKRPk6YnJBxw_wu4wAAAMg"]
[Sun Mar 01 22:17:23.518398 2026] [:error] [pid 7165:tid 7184] [client 40.69.27.251:2910] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaRKcxRjCrA8qWBjgG9ykAAAAlE"]
[Sun Mar 01 22:17:24.484383 2026] [:error] [pid 33822:tid 33835] [client 40.69.27.251:8906] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaRKdG6W3ygu1YVssuYvYwAAAos"]
[Sun Mar 01 22:17:25.348543 2026] [:error] [pid 38241:tid 38255] [client 40.69.27.251:3276] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaRKdfKRPk6YnJBxw_wu8gAAAMs"]
[Sun Mar 01 22:17:26.205436 2026] [:error] [pid 40750:tid 40769] [client 40.69.27.251:12761] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aaRKdgfBuk03yQKDyqtrZQAAAdA"]
[Sun Mar 01 22:17:27.186819 2026] [:error] [pid 40750:tid 40777] [client 40.69.27.251:17279] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aaRKdwfBuk03yQKDyqtrbwAAAdg"]
[Sun Mar 01 22:17:28.050995 2026] [:error] [pid 7165:tid 7168] [client 40.69.27.251:8916] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aaRKeBRjCrA8qWBjgG9yqwAAAkE"]
[Sun Mar 01 22:17:29.318854 2026] [:error] [pid 40750:tid 40764] [client 40.69.27.251:10665] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "aaRKeQfBuk03yQKDyqtrdwAAAcs"]
[Sun Mar 01 22:17:30.371258 2026] [:error] [pid 41780:tid 41786] [client 40.69.27.251:3310] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aaRKesONkVoocLIqzy0wdgAAA8M"]
[Sun Mar 01 22:17:31.453381 2026] [:error] [pid 33822:tid 33828] [client 40.69.27.251:17260] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aaRKe26W3ygu1YVssuYvaQAAAoQ"]
[Sun Mar 01 22:17:32.199250 2026] [:error] [pid 40750:tid 40760] [client 40.69.27.251:4954] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aaRKfAfBuk03yQKDyqtrhQAAAcc"]
[Sun Mar 01 22:17:33.258108 2026] [:error] [pid 38241:tid 38244] [client 40.69.27.251:10687] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aaRKffKRPk6YnJBxw_wvAQAAAMA"]
[Sun Mar 01 22:17:34.090225 2026] [:error] [pid 40750:tid 40769] [client 40.69.27.251:4480] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aaRKfgfBuk03yQKDyqtrlgAAAdA"]
[Sun Mar 01 22:17:35.159527 2026] [:error] [pid 38241:tid 38250] [client 40.69.27.251:8944] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aaRKf_KRPk6YnJBxw_wvCAAAAMY"]
[Sun Mar 01 22:17:36.442341 2026] [:error] [pid 7165:tid 7189] [client 40.69.27.251:4663] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aaRKgBRjCrA8qWBjgG9ywwAAAlY"]
[Sun Mar 01 22:17:37.392324 2026] [:error] [pid 7165:tid 7178] [client 40.69.27.251:10641] [client 40.69.27.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aaRKgRRjCrA8qWBjgG9yzwAAAks"]
[Sun Mar 01 23:00:31.645111 2026] [:error] [pid 41342:tid 41363] [client 104.28.235.59:54203] [client 104.28.235.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aaRUj44iJ6RAS5CatDlljgAAAhI"]
[Sun Mar 01 23:00:32.144854 2026] [:error] [pid 7165:tid 7186] [client 104.28.235.59:54206] [client 104.28.235.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/style.php"] [unique_id "aaRUkBRjCrA8qWBjgG-csQAAAlM"]
[Sun Mar 01 23:00:37.562035 2026] [:error] [pid 38241:tid 38247] [client 104.28.235.59:18657] [client 104.28.235.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/style.php"] [unique_id "aaRUlfKRPk6YnJBxw_xD4AAAAMM"]
[Sun Mar 01 23:13:47.288232 2026] [:error] [pid 40750:tid 40777] [client 43.130.15.147:33832] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaRXqwfBuk03yQKDyquU_gAAAdg"]
[Sun Mar 01 23:14:29.455744 2026] [:error] [pid 38241:tid 38246] [client 20.63.83.113:5574] [client 20.63.83.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaRX1fKRPk6YnJBxw_xKMQAAAMI"]
[Sun Mar 01 23:14:39.614986 2026] [:error] [pid 7133:tid 7157] [client 20.63.83.113:41850] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xleet.php"] [unique_id "aaRX3_Ctubh8pR64qB9wuQAAAFY"]
[Sun Mar 01 23:14:40.027476 2026] [:error] [pid 40750:tid 40770] [client 20.63.83.113:46492] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xleet.php"] [unique_id "aaRX4AfBuk03yQKDyquVSAAAAdE"]
[Sun Mar 01 23:14:40.447351 2026] [:error] [pid 41780:tid 41799] [client 20.63.83.113:41033] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xleet.php"] [unique_id "aaRX4MONkVoocLIqzy01dwAAA9A"]
[Sun Mar 01 23:14:40.895121 2026] [:error] [pid 7165:tid 7183] [client 20.63.83.113:9415] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xleet.php"] [unique_id "aaRX4BRjCrA8qWBjgG-rAgAAAlA"]
[Sun Mar 01 23:14:41.342825 2026] [:error] [pid 33822:tid 33829] [client 20.63.83.113:41822] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fosil.php"] [unique_id "aaRX4W6W3ygu1YVssuY-PgAAAoU"]
[Sun Mar 01 23:14:41.767160 2026] [:error] [pid 41780:tid 41794] [client 20.63.83.113:12890] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fosil.php"] [unique_id "aaRX4cONkVoocLIqzy01eAAAA8s"]
[Sun Mar 01 23:14:42.193491 2026] [:error] [pid 7165:tid 7172] [client 20.63.83.113:41077] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fosil.php"] [unique_id "aaRX4hRjCrA8qWBjgG-rBwAAAkU"]
[Sun Mar 01 23:14:42.641941 2026] [:error] [pid 38241:tid 38259] [client 20.63.83.113:9436] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fosil.php"] [unique_id "aaRX4vKRPk6YnJBxw_xKOwAAAM8"]
[Sun Mar 01 23:14:43.072796 2026] [:error] [pid 33822:tid 33827] [client 20.63.83.113:35459] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/issue.php"] [unique_id "aaRX426W3ygu1YVssuY-QAAAAoM"]
[Sun Mar 01 23:14:43.493225 2026] [:error] [pid 40750:tid 40760] [client 20.63.83.113:9408] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/issue.php"] [unique_id "aaRX4wfBuk03yQKDyquVTAAAAcc"]
[Sun Mar 01 23:14:43.923261 2026] [:error] [pid 7165:tid 7190] [client 20.63.83.113:9321] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/issue.php"] [unique_id "aaRX4xRjCrA8qWBjgG-rGAAAAlc"]
[Sun Mar 01 23:14:44.342127 2026] [:error] [pid 7165:tid 7185] [client 20.63.83.113:35467] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/issue.php"] [unique_id "aaRX5BRjCrA8qWBjgG-rGgAAAlI"]
[Sun Mar 01 23:14:44.763343 2026] [:error] [pid 7165:tid 7189] [client 20.63.83.113:46466] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/verify.php"] [unique_id "aaRX5BRjCrA8qWBjgG-rHgAAAlY"]
[Sun Mar 01 23:14:45.184984 2026] [:error] [pid 7165:tid 7184] [client 20.63.83.113:35512] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/verify.php"] [unique_id "aaRX5RRjCrA8qWBjgG-rHwAAAlE"]
[Sun Mar 01 23:14:45.599580 2026] [:error] [pid 7133:tid 7138] [client 20.63.83.113:53230] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/verify.php"] [unique_id "aaRX5fCtubh8pR64qB9wxQAAAEM"]
[Sun Mar 01 23:14:46.020543 2026] [:error] [pid 7133:tid 7147] [client 20.63.83.113:12868] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/verify.php"] [unique_id "aaRX5vCtubh8pR64qB9wxgAAAEw"]
[Sun Mar 01 23:14:46.461538 2026] [:error] [pid 7165:tid 7169] [client 20.63.83.113:41081] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/29rc7ExgS6p.php"] [unique_id "aaRX5hRjCrA8qWBjgG-rIwAAAkI"]
[Sun Mar 01 23:14:46.891119 2026] [:error] [pid 40750:tid 40774] [client 20.63.83.113:46474] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/29rc7ExgS6p.php"] [unique_id "aaRX5gfBuk03yQKDyquVTgAAAdU"]
[Sun Mar 01 23:14:47.319499 2026] [:error] [pid 7133:tid 7149] [client 20.63.83.113:35468] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/29rc7ExgS6p.php"] [unique_id "aaRX5_Ctubh8pR64qB9wyQAAAE4"]
[Sun Mar 01 23:14:47.742979 2026] [:error] [pid 38034:tid 38049] [client 20.63.83.113:53188] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/29rc7ExgS6p.php"] [unique_id "aaRX5wxtfZjwlJok9K8t2gAAAQs"]
[Sun Mar 01 23:14:48.157757 2026] [:error] [pid 38034:tid 38059] [client 20.63.83.113:12925] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indeex.php"] [unique_id "aaRX6AxtfZjwlJok9K8t4QAAARU"]
[Sun Mar 01 23:14:48.576771 2026] [:error] [pid 44644:tid 44667] [client 20.63.83.113:36229] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indeex.php"] [unique_id "aaRX6J3RJaXMcw3y9V_pggAAABQ"]
[Sun Mar 01 23:14:48.994070 2026] [:error] [pid 38034:tid 38051] [client 20.63.83.113:9444] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indeex.php"] [unique_id "aaRX6AxtfZjwlJok9K8t5gAAAQ0"]
[Sun Mar 01 23:14:49.416603 2026] [:error] [pid 44644:tid 44670] [client 20.63.83.113:36286] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indeex.php"] [unique_id "aaRX6Z3RJaXMcw3y9V_pgwAAABc"]
[Sun Mar 01 23:14:49.835729 2026] [:error] [pid 7133:tid 7156] [client 20.63.83.113:9430] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aaRX6fCtubh8pR64qB9wzQAAAFU"]
[Sun Mar 01 23:14:50.264013 2026] [:error] [pid 7133:tid 7145] [client 20.63.83.113:46471] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aaRX6vCtubh8pR64qB9wzwAAAEo"]
[Sun Mar 01 23:14:50.703670 2026] [:error] [pid 44644:tid 44659] [client 20.63.83.113:53202] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aaRX6p3RJaXMcw3y9V_phAAAAAw"]
[Sun Mar 01 23:14:51.121008 2026] [:error] [pid 37032:tid 37035] [client 20.63.83.113:12883] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php"] [unique_id "aaRX6-u0U4o7eSImsVSSAgAAAYE"]
[Sun Mar 01 23:14:51.556667 2026] [:error] [pid 38034:tid 38055] [client 20.63.83.113:38344] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aaRX6wxtfZjwlJok9K8t7QAAARE"]
[Sun Mar 01 23:14:51.977699 2026] [:error] [pid 7133:tid 7136] [client 20.63.83.113:41044] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aaRX6_Ctubh8pR64qB9w2QAAAEE"]
[Sun Mar 01 23:14:52.408455 2026] [:error] [pid 33822:tid 33837] [client 20.63.83.113:9338] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aaRX7G6W3ygu1YVssuY-SAAAAo0"]
[Sun Mar 01 23:14:52.842843 2026] [:error] [pid 33822:tid 33834] [client 20.63.83.113:35495] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aaRX7G6W3ygu1YVssuY-TAAAAoo"]
[Sun Mar 01 23:14:53.278166 2026] [:error] [pid 7133:tid 7158] [client 20.63.83.113:9420] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php.php"] [unique_id "aaRX7fCtubh8pR64qB9w3wAAAFc"]
[Sun Mar 01 23:14:53.702729 2026] [:error] [pid 7165:tid 7185] [client 20.63.83.113:35506] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php.php"] [unique_id "aaRX7RRjCrA8qWBjgG-rLAAAAlI"]
[Sun Mar 01 23:14:54.122780 2026] [:error] [pid 7165:tid 7168] [client 20.63.83.113:46503] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php.php"] [unique_id "aaRX7hRjCrA8qWBjgG-rLgAAAkE"]
[Sun Mar 01 23:14:54.599018 2026] [:error] [pid 33822:tid 33844] [client 20.63.83.113:15554] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php.php"] [unique_id "aaRX7m6W3ygu1YVssuY-TgAAApQ"]
[Sun Mar 01 23:14:55.039138 2026] [:error] [pid 40750:tid 40767] [client 20.63.83.113:12915] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aks.php"] [unique_id "aaRX7wfBuk03yQKDyquVUwAAAc4"]
[Sun Mar 01 23:14:55.457840 2026] [:error] [pid 41780:tid 41787] [client 20.63.83.113:9336] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aks.php"] [unique_id "aaRX78ONkVoocLIqzy01fwAAA8Q"]
[Sun Mar 01 23:14:55.900308 2026] [:error] [pid 41780:tid 41800] [client 20.63.83.113:9290] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aks.php"] [unique_id "aaRX78ONkVoocLIqzy01gQAAA9E"]
[Sun Mar 01 23:14:56.317319 2026] [:error] [pid 40750:tid 40762] [client 20.63.83.113:46510] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aks.php"] [unique_id "aaRX8AfBuk03yQKDyquVVwAAAck"]
[Sun Mar 01 23:14:56.757972 2026] [:error] [pid 38241:tid 38262] [client 20.63.83.113:41030] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex1.php"] [unique_id "aaRX8PKRPk6YnJBxw_xKTAAAANI"]
[Sun Mar 01 23:14:57.249895 2026] [:error] [pid 41780:tid 41797] [client 20.63.83.113:35496] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex1.php"] [unique_id "aaRX8cONkVoocLIqzy01hAAAA84"]
[Sun Mar 01 23:14:57.664201 2026] [:error] [pid 41342:tid 41367] [client 20.63.83.113:35472] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex1.php"] [unique_id "aaRX8Y4iJ6RAS5CatDlnGQAAAhY"]
[Sun Mar 01 23:14:58.123294 2026] [:error] [pid 33822:tid 33826] [client 20.63.83.113:9335] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex1.php"] [unique_id "aaRX8m6W3ygu1YVssuY-XQAAAoI"]
[Sun Mar 01 23:14:58.543838 2026] [:error] [pid 40750:tid 40775] [client 20.63.83.113:46488] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aaRX8gfBuk03yQKDyquVXAAAAdY"]
[Sun Mar 01 23:14:58.964655 2026] [:error] [pid 38034:tid 38060] [client 20.63.83.113:35492] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aaRX8gxtfZjwlJok9K8t8AAAARY"]
[Sun Mar 01 23:14:59.384362 2026] [:error] [pid 40750:tid 40760] [client 20.63.83.113:41028] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aaRX8wfBuk03yQKDyquVXQAAAcc"]
[Sun Mar 01 23:14:59.806429 2026] [:error] [pid 40750:tid 40756] [client 20.63.83.113:46509] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "aaRX8wfBuk03yQKDyquVXwAAAcM"]
[Sun Mar 01 23:15:00.220514 2026] [:error] [pid 33822:tid 33846] [client 20.63.83.113:41837] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/configs.php"] [unique_id "aaRX9G6W3ygu1YVssuY-YAAAApY"]
[Sun Mar 01 23:15:00.692767 2026] [:error] [pid 40750:tid 40772] [client 20.63.83.113:9332] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/configs.php"] [unique_id "aaRX9AfBuk03yQKDyquVYwAAAdM"]
[Sun Mar 01 23:15:01.124309 2026] [:error] [pid 40750:tid 40761] [client 20.63.83.113:9299] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/configs.php"] [unique_id "aaRX9QfBuk03yQKDyquVZwAAAcg"]
[Sun Mar 01 23:15:01.547292 2026] [:error] [pid 40750:tid 40757] [client 20.63.83.113:9297] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/configs.php"] [unique_id "aaRX9QfBuk03yQKDyquVawAAAcQ"]
[Sun Mar 01 23:15:01.970944 2026] [:error] [pid 40750:tid 40776] [client 20.63.83.113:38346] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa1.php"] [unique_id "aaRX9QfBuk03yQKDyquVbgAAAdc"]
[Sun Mar 01 23:15:02.401244 2026] [:error] [pid 7133:tid 7136] [client 20.63.83.113:35480] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa1.php"] [unique_id "aaRX9vCtubh8pR64qB9w5wAAAEE"]
[Sun Mar 01 23:15:02.811150 2026] [:error] [pid 33822:tid 33843] [client 20.63.83.113:12986] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa1.php"] [unique_id "aaRX9m6W3ygu1YVssuY-ZAAAApM"]
[Sun Mar 01 23:15:03.223340 2026] [:error] [pid 33822:tid 33831] [client 20.63.83.113:9294] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa1.php"] [unique_id "aaRX926W3ygu1YVssuY-ZQAAAoc"]
[Sun Mar 01 23:15:03.639582 2026] [:error] [pid 7165:tid 7183] [client 20.63.83.113:9412] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouts.php"] [unique_id "aaRX9xRjCrA8qWBjgG-rPAAAAlA"]
[Sun Mar 01 23:15:04.053989 2026] [:error] [pid 7165:tid 7185] [client 20.63.83.113:36266] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouts.php"] [unique_id "aaRX-BRjCrA8qWBjgG-rPgAAAlI"]
[Sun Mar 01 23:15:04.477865 2026] [:error] [pid 38034:tid 38050] [client 20.63.83.113:35484] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouts.php"] [unique_id "aaRX-AxtfZjwlJok9K8t-QAAAQw"]
[Sun Mar 01 23:15:04.902907 2026] [:error] [pid 7133:tid 7147] [client 20.63.83.113:41048] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouts.php"] [unique_id "aaRX-PCtubh8pR64qB9w6wAAAEw"]
[Sun Mar 01 23:15:05.365363 2026] [:error] [pid 44644:tid 44662] [client 20.63.83.113:41802] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cache.php"] [unique_id "aaRX-Z3RJaXMcw3y9V_pjwAAAA8"]
[Sun Mar 01 23:15:05.786893 2026] [:error] [pid 33822:tid 33828] [client 20.63.83.113:38386] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cache.php"] [unique_id "aaRX-W6W3ygu1YVssuY-aQAAAoQ"]
[Sun Mar 01 23:15:06.210261 2026] [:error] [pid 7165:tid 7176] [client 20.63.83.113:9439] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cache.php"] [unique_id "aaRX-hRjCrA8qWBjgG-rQgAAAkk"]
[Sun Mar 01 23:15:06.634127 2026] [:error] [pid 33822:tid 33841] [client 20.63.83.113:9302] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cache.php"] [unique_id "aaRX-m6W3ygu1YVssuY-awAAApE"]
[Sun Mar 01 23:15:07.045947 2026] [:error] [pid 7165:tid 7170] [client 20.63.83.113:38351] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aaRX-xRjCrA8qWBjgG-rRgAAAkM"]
[Sun Mar 01 23:15:07.457283 2026] [:error] [pid 7165:tid 7169] [client 20.63.83.113:9441] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aaRX-xRjCrA8qWBjgG-rSQAAAkI"]
[Sun Mar 01 23:15:07.874635 2026] [:error] [pid 7165:tid 7174] [client 20.63.83.113:53209] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aaRX-xRjCrA8qWBjgG-rSwAAAkc"]
[Sun Mar 01 23:15:08.288532 2026] [:error] [pid 40750:tid 40754] [client 20.63.83.113:9305] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aaRX_AfBuk03yQKDyquVfwAAAcE"]
[Sun Mar 01 23:15:08.707636 2026] [:error] [pid 7165:tid 7175] [client 20.63.83.113:53235] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aaRX_BRjCrA8qWBjgG-rTgAAAkg"]
[Sun Mar 01 23:15:09.129864 2026] [:error] [pid 7133:tid 7149] [client 20.63.83.113:41045] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aaRX_fCtubh8pR64qB9w7gAAAE4"]
[Sun Mar 01 23:15:09.543114 2026] [:error] [pid 33822:tid 33844] [client 20.63.83.113:41824] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aaRX_W6W3ygu1YVssuY-dAAAApQ"]
[Sun Mar 01 23:15:09.966028 2026] [:error] [pid 7165:tid 7179] [client 20.63.83.113:35503] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aaRX_RRjCrA8qWBjgG-rUgAAAkw"]
[Mon Mar 02 01:05:00.149481 2026] [:error] [pid 53182:tid 53555] [client 20.220.162.180:41832] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaRxvPv073cA6eM1YCS3mAAAAMs"]
[Mon Mar 02 01:05:01.000845 2026] [:error] [pid 53181:tid 53516] [client 20.220.162.180:46591] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaRxvIr_0T1SazTrJOAo1wAAAQI"]
[Mon Mar 02 01:05:01.826933 2026] [:error] [pid 26940:tid 26964] [client 20.220.162.180:43846] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaRxvRrUg-j5GLDtRFl9pAAAAFQ"]
[Mon Mar 02 01:05:02.654864 2026] [:error] [pid 53585:tid 53610] [client 20.220.162.180:46517] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaRxvnbCvYsvu6kKhM1-XgAAABY"]
[Mon Mar 02 01:38:27.841074 2026] [:error] [pid 53182:tid 53564] [client 40.80.83.34:15878] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaR5k_v073cA6eM1YCTK_wAAANQ"]
[Mon Mar 02 01:38:28.517687 2026] [:error] [pid 26940:tid 26948] [client 40.80.83.34:11992] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaR5lBrUg-j5GLDtRFmj9QAAAEQ"]
[Mon Mar 02 01:38:29.152887 2026] [:error] [pid 53181:tid 53539] [client 40.80.83.34:9027] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaR5lYr_0T1SazTrJOA30wAAARg"]
[Mon Mar 02 01:38:29.721081 2026] [:error] [pid 26940:tid 26955] [client 40.80.83.34:14125] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aaR5lRrUg-j5GLDtRFmj_wAAAEs"]
[Mon Mar 02 02:19:18.687669 2026] [:error] [pid 26940:tid 26962] [client 147.135.213.234:49458] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aaSDJhrUg-j5GLDtRFnf3wAAAFI"]
[Mon Mar 02 02:19:21.068001 2026] [:error] [pid 26940:tid 26954] [client 147.135.213.234:44786] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaSDKRrUg-j5GLDtRFnf6wAAAEo"]
[Mon Mar 02 02:19:23.524703 2026] [:error] [pid 26940:tid 26952] [client 147.135.213.234:44796] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaSDKxrUg-j5GLDtRFnf9wAAAEg"]
[Mon Mar 02 02:19:26.010272 2026] [:error] [pid 26940:tid 26966] [client 147.135.213.234:44810] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaSDLhrUg-j5GLDtRFngEQAAAFY"]
[Mon Mar 02 02:19:28.444450 2026] [:error] [pid 53585:tid 53589] [client 147.135.213.234:56324] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaSDMHbCvYsvu6kKhM3EUAAAAAE"]
[Mon Mar 02 02:19:30.938123 2026] [:error] [pid 53180:tid 53466] [client 147.135.213.234:56326] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaSDMjPPJpDOBvYnaa1m6AAAAZY"]
[Mon Mar 02 02:19:33.422281 2026] [:error] [pid 26940:tid 26959] [client 147.135.213.234:56336] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aaSDNRrUg-j5GLDtRFngXwAAAE8"]
[Mon Mar 02 02:19:35.964332 2026] [:error] [pid 53182:tid 53555] [client 147.135.213.234:56344] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaSDN_v073cA6eM1YCTpMAAAAMs"]
[Mon Mar 02 02:19:38.527945 2026] [:error] [pid 53585:tid 53601] [client 147.135.213.234:46270] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaSDOnbCvYsvu6kKhM3EgAAAAA0"]
[Mon Mar 02 02:19:41.078633 2026] [:error] [pid 26940:tid 26950] [client 147.135.213.234:46276] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaSDPRrUg-j5GLDtRFngsgAAAEY"]
[Mon Mar 02 02:19:43.652153 2026] [:error] [pid 53585:tid 53606] [client 147.135.213.234:46282] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaSDP3bCvYsvu6kKhM3EmQAAABI"]
[Mon Mar 02 02:19:46.152961 2026] [:error] [pid 53585:tid 53588] [client 147.135.213.234:46284] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aaSDQnbCvYsvu6kKhM3EowAAAAA"]
[Mon Mar 02 02:19:48.824014 2026] [:error] [pid 26940:tid 26958] [client 147.135.213.234:53098] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaSDRBrUg-j5GLDtRFng5AAAAE4"]
[Mon Mar 02 02:19:51.278165 2026] [:error] [pid 53585:tid 53608] [client 147.135.213.234:53106] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaSDR3bCvYsvu6kKhM3EtwAAABQ"]
[Mon Mar 02 02:19:53.753406 2026] [:error] [pid 26940:tid 26966] [client 147.135.213.234:53122] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaSDSRrUg-j5GLDtRFnhFAAAAFY"]
[Mon Mar 02 02:19:56.257620 2026] [:error] [pid 53181:tid 53522] [client 147.135.213.234:53138] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaSDTIr_0T1SazTrJOBQTAAAAQc"]
[Mon Mar 02 02:19:58.580945 2026] [:error] [pid 26940:tid 26960] [client 147.135.213.234:44416] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aaSDThrUg-j5GLDtRFnhOgAAAFA"]
[Mon Mar 02 02:20:01.018941 2026] [:error] [pid 53182:tid 53559] [client 147.135.213.234:44420] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aaSDUfv073cA6eM1YCTpXgAAAM8"]
[Mon Mar 02 02:20:03.398531 2026] [:error] [pid 53182:tid 53547] [client 147.135.213.234:44422] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aaSDU_v073cA6eM1YCTpaQAAAMQ"]
[Mon Mar 02 02:20:05.833929 2026] [:error] [pid 53180:tid 53449] [client 147.135.213.234:44424] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aaSDVTPPJpDOBvYnaa1nFwAAAYU"]
[Mon Mar 02 02:20:08.290460 2026] [:error] [pid 53180:tid 53452] [client 147.135.213.234:53238] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaSDWDPPJpDOBvYnaa1nGQAAAYg"]
[Mon Mar 02 02:20:10.851334 2026] [:error] [pid 53181:tid 53517] [client 147.135.213.234:53242] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aaSDWor_0T1SazTrJOBQYAAAAQM"]
[Mon Mar 02 02:20:13.353979 2026] [:error] [pid 26940:tid 26948] [client 147.135.213.234:53250] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aaSDXRrUg-j5GLDtRFnhywAAAEQ"]
[Mon Mar 02 02:20:45.889133 2026] [:error] [pid 53181:tid 53538] [client 147.135.213.234:53258] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aaSDfYr_0T1SazTrJOBQ0wAAARc"]
[Mon Mar 02 02:20:48.353433 2026] [:error] [pid 26940:tid 26944] [client 147.135.213.234:53738] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aaSDgBrUg-j5GLDtRFnipQAAAEA"]
[Mon Mar 02 02:20:50.901488 2026] [:error] [pid 53585:tid 53592] [client 147.135.213.234:53748] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aaSDgnbCvYsvu6kKhM3F-QAAAAQ"]
[Mon Mar 02 02:20:53.406482 2026] [:error] [pid 53182:tid 53556] [client 147.135.213.234:53760] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaSDhfv073cA6eM1YCTqAQAAAMw"]
[Mon Mar 02 02:20:55.932975 2026] [:error] [pid 53181:tid 53517] [client 147.135.213.234:53770] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aaSDh4r_0T1SazTrJOBQ7wAAAQM"]
[Mon Mar 02 02:20:58.405994 2026] [:error] [pid 53585:tid 53605] [client 147.135.213.234:59196] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aaSDinbCvYsvu6kKhM3GTwAAABE"]
[Mon Mar 02 02:21:01.021140 2026] [:error] [pid 53180:tid 53449] [client 147.135.213.234:59212] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaSDjTPPJpDOBvYnaa1nXAAAAYU"]
[Mon Mar 02 02:21:03.424747 2026] [:error] [pid 53182:tid 53560] [client 147.135.213.234:59214] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaSDj_v073cA6eM1YCTqGQAAANA"]
[Mon Mar 02 02:21:06.138369 2026] [:error] [pid 53585:tid 53605] [client 147.135.213.234:59216] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aaSDknbCvYsvu6kKhM3GbAAAABE"]
[Mon Mar 02 02:21:08.782320 2026] [:error] [pid 26940:tid 26966] [client 147.135.213.234:50092] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaSDlBrUg-j5GLDtRFnjEQAAAFY"]
[Mon Mar 02 02:21:11.258844 2026] [:error] [pid 53182:tid 53566] [client 147.135.213.234:50106] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaSDl_v073cA6eM1YCTqKQAAANY"]
[Mon Mar 02 02:21:13.684034 2026] [:error] [pid 26940:tid 26948] [client 147.135.213.234:50112] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaSDmRrUg-j5GLDtRFnjMwAAAEQ"]
[Mon Mar 02 02:21:16.137712 2026] [:error] [pid 53585:tid 53598] [client 147.135.213.234:50124] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaSDnHbCvYsvu6kKhM3GkwAAAAo"]
[Mon Mar 02 02:21:18.632550 2026] [:error] [pid 53181:tid 53537] [client 147.135.213.234:44884] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaSDnor_0T1SazTrJOBRFQAAARY"]
[Mon Mar 02 02:21:21.097872 2026] [:error] [pid 53585:tid 53601] [client 147.135.213.234:44894] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aaSDoXbCvYsvu6kKhM3GrQAAAA0"]
[Mon Mar 02 02:21:23.735960 2026] [:error] [pid 26940:tid 26957] [client 147.135.213.234:44908] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aaSDoxrUg-j5GLDtRFnjcQAAAE0"]
[Mon Mar 02 02:21:26.341881 2026] [:error] [pid 26940:tid 26961] [client 147.135.213.234:44918] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aaSDphrUg-j5GLDtRFnjiwAAAFE"]
[Mon Mar 02 02:21:28.852466 2026] [:error] [pid 53182:tid 53559] [client 147.135.213.234:56928] [client 147.135.213.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaSDqPv073cA6eM1YCTqVwAAAM8"]
[Mon Mar 02 02:47:49.112844 2026] [:error] [pid 53181:tid 53525] [client 43.166.250.187:42896] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaSJ1Yr_0T1SazTrJOBgNgAAAQo"]
[Mon Mar 02 04:46:58.059884 2026] [:error] [pid 31257:tid 31277] [client 146.190.117.220:56143] [client 146.190.117.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.117.220, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaSlwv-JFLfishX45N_0QAAAAQ4"]
[Mon Mar 02 06:17:57.515881 2026] [:error] [pid 31257:tid 31287] [client 170.106.197.109:43926] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaS7Ff-JFLfishX45N9VzgAAARg"]
[Mon Mar 02 08:41:42.623404 2026] [:error] [pid 28908:tid 28911] [client 70.77.124.202:51846] [client 70.77.124.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 70.77.124.202, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTcxoqJmC8ih_lQQnDVKwAAAME"]
[Mon Mar 02 08:42:02.835531 2026] [:error] [pid 28908:tid 28925] [client 94.187.171.125:55095] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTc2oqJmC8ih_lQQnDVXgAAAM8"]
[Mon Mar 02 08:54:04.069619 2026] [:error] [pid 21575:tid 21600] [client 20.104.97.185:40975] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaTfrCrocdArcJqFfIl19wAAAVU"]
[Mon Mar 02 08:54:04.916283 2026] [:error] [pid 21575:tid 21587] [client 20.104.97.185:41018] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaTfrCrocdArcJqFfIl1_AAAAUg"]
[Mon Mar 02 08:54:05.759875 2026] [:error] [pid 23872:tid 23879] [client 20.104.97.185:40995] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaTfrUzkQFuA2qBk8UM1WwAAAYQ"]
[Mon Mar 02 08:54:06.590583 2026] [:error] [pid 23872:tid 23887] [client 20.104.97.185:41879] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaTfrkzkQFuA2qBk8UM1YQAAAYw"]
[Mon Mar 02 09:15:54.736349 2026] [:error] [pid 31257:tid 31272] [client 51.195.103.76:23786] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaTkyv-JFLfishX45N_t-AAAAQk"]
[Mon Mar 02 09:15:57.198598 2026] [:error] [pid 23872:tid 23884] [client 51.195.103.76:23790] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaTkzUzkQFuA2qBk8UNX7gAAAYk"]
[Mon Mar 02 09:15:59.699052 2026] [:error] [pid 31257:tid 31276] [client 51.195.103.76:23802] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aaTkz_-JFLfishX45N_uJAAAAQ0"]
[Mon Mar 02 09:16:02.239489 2026] [:error] [pid 23872:tid 23881] [client 51.195.103.76:59058] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aaTk0kzkQFuA2qBk8UNYCQAAAYY"]
[Mon Mar 02 09:16:04.804224 2026] [:error] [pid 28795:tid 28886] [client 51.195.103.76:59064] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaTk1LROd53wZBkdI_eRogAAAJc"]
[Mon Mar 02 09:16:07.333893 2026] [:error] [pid 28795:tid 28880] [client 51.195.103.76:59068] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aaTk17ROd53wZBkdI_eRqQAAAJE"]
[Mon Mar 02 09:16:09.859972 2026] [:error] [pid 23872:tid 23890] [client 51.195.103.76:59076] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aaTk2UzkQFuA2qBk8UNYKQAAAY8"]
[Mon Mar 02 09:16:12.295993 2026] [:error] [pid 28793:tid 28816] [client 51.195.103.76:62348] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaTk3A2_fxBANaHo1f5HiAAAAAk"]
[Mon Mar 02 09:16:14.804684 2026] [:error] [pid 21575:tid 21580] [client 51.195.103.76:62360] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaTk3irocdArcJqFfImEHQAAAUE"]
[Mon Mar 02 09:16:17.287912 2026] [:error] [pid 21575:tid 21588] [client 51.195.103.76:62364] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaTk4SrocdArcJqFfImELQAAAUk"]
[Mon Mar 02 09:16:19.634278 2026] [:error] [pid 28793:tid 28826] [client 51.195.103.76:62366] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaTk4w2_fxBANaHo1f5HiwAAABM"]
[Mon Mar 02 09:16:22.045556 2026] [:error] [pid 23872:tid 23892] [client 51.195.103.76:51282] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaTk5kzkQFuA2qBk8UNYTAAAAZE"]
[Mon Mar 02 09:16:24.538552 2026] [:error] [pid 28793:tid 28828] [client 51.195.103.76:51284] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaTk6A2_fxBANaHo1f5HjgAAABU"]
[Mon Mar 02 09:16:27.016536 2026] [:error] [pid 23872:tid 23878] [client 51.195.103.76:51300] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaTk60zkQFuA2qBk8UNYYwAAAYM"]
[Mon Mar 02 09:16:29.409099 2026] [:error] [pid 23872:tid 23892] [client 51.195.103.76:51310] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaTk7UzkQFuA2qBk8UNYdAAAAZE"]
[Mon Mar 02 09:16:31.943618 2026] [:error] [pid 23872:tid 23885] [client 51.195.103.76:22036] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaTk70zkQFuA2qBk8UNYkAAAAYo"]
[Mon Mar 02 09:16:34.360456 2026] [:error] [pid 21575:tid 21592] [client 51.195.103.76:22052] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aaTk8irocdArcJqFfImEnAAAAU0"]
[Mon Mar 02 09:16:36.884185 2026] [:error] [pid 31257:tid 31264] [client 51.195.103.76:22068] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaTk9P-JFLfishX45N_u1gAAAQE"]
[Mon Mar 02 09:16:39.368359 2026] [:error] [pid 21575:tid 21595] [client 51.195.103.76:22082] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaTk9yrocdArcJqFfImEyAAAAVA"]
[Mon Mar 02 09:16:41.705965 2026] [:error] [pid 23872:tid 23878] [client 51.195.103.76:22092] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaTk-UzkQFuA2qBk8UNYsgAAAYM"]
[Mon Mar 02 09:16:44.243540 2026] [:error] [pid 31257:tid 31270] [client 51.195.103.76:41538] [client 51.195.103.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaTk_P-JFLfishX45N_u7AAAAQc"]
[Mon Mar 02 09:21:31.159591 2026] [autoindex:error] [pid 21575:tid 21588] [client 40.80.83.34:5190] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 09:21:44.055821 2026] [:error] [pid 21575:tid 21603] [client 40.80.83.34:5190] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaTmKCrocdArcJqFfImH3QAAAVg"]
[Mon Mar 02 09:21:44.640037 2026] [:error] [pid 21575:tid 21600] [client 40.80.83.34:4295] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaTmKCrocdArcJqFfImH4wAAAVU"]
[Mon Mar 02 09:21:45.188605 2026] [:error] [pid 28795:tid 28880] [client 40.80.83.34:3202] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaTmKbROd53wZBkdI_eURgAAAJE"]
[Mon Mar 02 09:21:45.738124 2026] [:error] [pid 28793:tid 28818] [client 40.80.83.34:3263] [client 40.80.83.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaTmKQ2_fxBANaHo1f5ITAAAAAs"]
[Mon Mar 02 09:24:12.910272 2026] [:error] [pid 28908:tid 28910] [client 146.190.117.220:61329] [client 146.190.117.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.117.220, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaTmvIqJmC8ih_lQQnDoYQAAAMA"]
[Mon Mar 02 09:43:18.275679 2026] [:error] [pid 28908:tid 28928] [client 94.187.171.125:57085] [client 94.187.171.125] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaTrNoqJmC8ih_lQQnDvzgAAANI"]
[Mon Mar 02 09:44:42.441822 2026] [:error] [pid 28793:tid 28821] [client 94.187.171.125:57985] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTrig2_fxBANaHo1f5LzQAAAA4"]
[Mon Mar 02 09:46:05.654668 2026] [:error] [pid 23872:tid 23883] [client 94.187.171.125:64291] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTr3UzkQFuA2qBk8UOCIAAAAYg"]
[Mon Mar 02 09:47:21.732483 2026] [:error] [pid 31257:tid 31268] [client 94.187.171.125:64729] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTsKf-JFLfishX45N8JrgAAAQU"]
[Mon Mar 02 09:48:37.575476 2026] [:error] [pid 23872:tid 23881] [client 94.187.171.125:49543] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTsdUzkQFuA2qBk8UOD_wAAAYY"]
[Mon Mar 02 09:49:50.168005 2026] [:error] [pid 31257:tid 31274] [client 94.187.171.125:50686] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTsvv-JFLfishX45N8LJgAAAQs"]
[Mon Mar 02 09:51:02.393145 2026] [:error] [pid 31257:tid 31268] [client 94.187.171.125:51864] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTtBv-JFLfishX45N8L5wAAAQU"]
[Mon Mar 02 09:52:13.540667 2026] [:error] [pid 31257:tid 31273] [client 94.187.171.125:53144] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTtTf-JFLfishX45N8MigAAAQo"]
[Mon Mar 02 09:53:27.288697 2026] [:error] [pid 23872:tid 23890] [client 94.187.171.125:54368] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTtl0zkQFuA2qBk8UOIOQAAAY8"]
[Mon Mar 02 09:54:31.358045 2026] [:error] [pid 23872:tid 23892] [client 94.187.171.125:55142] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTt10zkQFuA2qBk8UOI0wAAAZE"]
[Mon Mar 02 09:55:44.501125 2026] [:error] [pid 28793:tid 28818] [client 94.187.171.125:55605] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTuIA2_fxBANaHo1f5NQAAAAAs"]
[Mon Mar 02 09:57:02.410311 2026] [:error] [pid 23872:tid 23881] [client 94.187.171.125:55943] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTubkzkQFuA2qBk8UOKrAAAAYY"]
[Mon Mar 02 09:58:12.384588 2026] [:error] [pid 31257:tid 31274] [client 94.187.171.125:56883] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTutP-JFLfishX45N8QVgAAAQs"]
[Mon Mar 02 09:59:11.851948 2026] [:error] [pid 28794:tid 28843] [client 94.187.171.125:50620] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTu76Vy2qpaelbUob1q-wAAAEc"]
[Mon Mar 02 10:00:14.582849 2026] [:error] [pid 23872:tid 23886] [client 94.187.171.125:51572] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTvLkzkQFuA2qBk8UONXwAAAYs"]
[Mon Mar 02 10:00:51.742011 2026] [:error] [pid 31257:tid 31281] [client 43.131.26.226:58876] [client 43.131.26.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaTvU_-JFLfishX45N8TGAAAARI"]
[Mon Mar 02 10:01:12.329846 2026] [:error] [pid 21575:tid 21603] [client 94.187.171.125:52471] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTvaCrocdArcJqFfImejQAAAVg"]
[Mon Mar 02 10:02:14.354938 2026] [:error] [pid 23872:tid 23899] [client 94.187.171.125:53465] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTvpkzkQFuA2qBk8UOQhAAAAZg"]
[Mon Mar 02 10:03:14.381574 2026] [:error] [pid 28794:tid 28839] [client 94.187.171.125:54387] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTv4qVy2qpaelbUob1shwAAAEM"]
[Mon Mar 02 10:04:14.344092 2026] [:error] [pid 28795:tid 28884] [client 94.187.171.125:54955] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTwHrROd53wZBkdI_eg8gAAAJU"]
[Mon Mar 02 10:05:12.090220 2026] [:error] [pid 31257:tid 31274] [client 94.187.171.125:55297] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTwWP-JFLfishX45N8X2wAAAQs"]
[Mon Mar 02 10:06:12.021570 2026] [:error] [pid 31257:tid 31266] [client 94.187.171.125:55509] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTwlP-JFLfishX45N8YaQAAAQM"]
[Mon Mar 02 10:07:11.886725 2026] [:error] [pid 23872:tid 23893] [client 94.187.171.125:55730] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTwz0zkQFuA2qBk8UOVXQAAAZI"]
[Mon Mar 02 10:08:14.323349 2026] [:error] [pid 21575:tid 21583] [client 94.187.171.125:56576] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTxDirocdArcJqFfImilQAAAUQ"]
[Mon Mar 02 10:09:12.449744 2026] [:error] [pid 21575:tid 21579] [client 94.187.171.125:57500] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTxSCrocdArcJqFfImjUQAAAUA"]
[Mon Mar 02 10:10:12.156312 2026] [:error] [pid 23872:tid 23881] [client 94.187.171.125:58435] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTxhEzkQFuA2qBk8UOYCAAAAYY"]
[Mon Mar 02 10:11:12.381509 2026] [:error] [pid 31257:tid 31273] [client 94.187.171.125:59336] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTxwP-JFLfishX45N8b0AAAAQo"]
[Mon Mar 02 10:12:14.401749 2026] [:error] [pid 31257:tid 31276] [client 94.187.171.125:60258] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTx_v-JFLfishX45N8cgQAAAQ0"]
[Mon Mar 02 10:13:14.737929 2026] [:error] [pid 31257:tid 31264] [client 94.187.171.125:61263] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTyOv-JFLfishX45N8dNwAAAQE"]
[Mon Mar 02 10:14:14.335690 2026] [:error] [pid 28795:tid 28883] [client 94.187.171.125:62020] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTydrROd53wZBkdI_ejygAAAJQ"]
[Mon Mar 02 10:15:14.281820 2026] [:error] [pid 31257:tid 31269] [client 94.187.171.125:62418] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTysv-JFLfishX45N8e7AAAAQY"]
[Mon Mar 02 10:16:14.465896 2026] [:error] [pid 28795:tid 28872] [client 94.187.171.125:62617] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTy7rROd53wZBkdI_ekJQAAAIk"]
[Mon Mar 02 10:17:14.361934 2026] [:error] [pid 31257:tid 31282] [client 94.187.171.125:62812] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTzKv-JFLfishX45N8gvAAAARM"]
[Mon Mar 02 10:18:14.383442 2026] [:error] [pid 31257:tid 31287] [client 94.187.171.125:63443] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTzZv-JFLfishX45N8hrQAAARg"]
[Mon Mar 02 10:19:13.084499 2026] [:error] [pid 23872:tid 23889] [client 94.187.171.125:64139] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTzoUzkQFuA2qBk8UOhkAAAAY4"]
[Mon Mar 02 10:20:12.335511 2026] [:error] [pid 23872:tid 23880] [client 94.187.171.125:64850] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaTz3EzkQFuA2qBk8UOiXQAAAYU"]
[Mon Mar 02 10:21:14.420031 2026] [:error] [pid 28794:tid 28845] [client 94.187.171.125:49154] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT0GqVy2qpaelbUob1wfwAAAEk"]
[Mon Mar 02 10:22:14.269409 2026] [:error] [pid 21575:tid 21581] [client 94.187.171.125:49845] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT0VirocdArcJqFfImq0gAAAUI"]
[Mon Mar 02 10:23:12.513221 2026] [:error] [pid 31257:tid 31279] [client 94.187.171.125:50623] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT0kP-JFLfishX45N8k3AAAARA"]
[Mon Mar 02 10:24:14.303680 2026] [:error] [pid 23872:tid 23891] [client 94.187.171.125:51337] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT0zkzkQFuA2qBk8UOmNQAAAZA"]
[Mon Mar 02 10:24:59.389481 2026] [:error] [pid 31257:tid 31276] [client 20.151.11.236:58214] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aaT0-_-JFLfishX45N8l5wAAAQ0"]
[Mon Mar 02 10:24:59.803083 2026] [:error] [pid 31257:tid 31269] [client 20.151.11.236:60062] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aaT0-_-JFLfishX45N8l6gAAAQY"]
[Mon Mar 02 10:25:00.257547 2026] [:error] [pid 28794:tid 28837] [client 20.151.11.236:60142] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aaT0_KVy2qpaelbUob1xSAAAAEE"]
[Mon Mar 02 10:25:00.684128 2026] [:error] [pid 23872:tid 23885] [client 20.151.11.236:60144] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aaT0_EzkQFuA2qBk8UOniAAAAYo"]
[Mon Mar 02 10:25:01.144566 2026] [:error] [pid 28908:tid 28928] [client 20.151.11.236:60113] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaT0_YqJmC8ih_lQQnD_BwAAANI"]
[Mon Mar 02 10:25:01.569817 2026] [:error] [pid 28793:tid 28817] [client 20.151.11.236:60052] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaT0_Q2_fxBANaHo1f5SngAAAAo"]
[Mon Mar 02 10:25:02.018408 2026] [:error] [pid 31257:tid 31275] [client 20.151.11.236:60091] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaT0_v-JFLfishX45N8l8QAAAQw"]
[Mon Mar 02 10:25:02.463728 2026] [:error] [pid 31257:tid 31276] [client 20.151.11.236:60076] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aaT0_v-JFLfishX45N8l8wAAAQ0"]
[Mon Mar 02 10:25:02.901906 2026] [:error] [pid 28908:tid 28931] [client 20.151.11.236:60069] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "aaT0_oqJmC8ih_lQQnD_CgAAANU"]
[Mon Mar 02 10:25:03.382748 2026] [:error] [pid 31257:tid 31268] [client 20.151.11.236:60098] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "aaT0__-JFLfishX45N8l-wAAAQU"]
[Mon Mar 02 10:25:03.864574 2026] [:error] [pid 21575:tid 21595] [client 20.151.11.236:60135] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "aaT0_yrocdArcJqFfIms1AAAAVA"]
[Mon Mar 02 10:25:04.350014 2026] [:error] [pid 21575:tid 21594] [client 20.151.11.236:60080] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "aaT1ACrocdArcJqFfIms1QAAAU8"]
[Mon Mar 02 10:25:04.768703 2026] [:error] [pid 21575:tid 21591] [client 20.151.11.236:60101] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaT1ACrocdArcJqFfIms1gAAAUw"]
[Mon Mar 02 10:25:05.194148 2026] [:error] [pid 31257:tid 31269] [client 20.151.11.236:60107] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaT1Af-JFLfishX45N8mBwAAAQY"]
[Mon Mar 02 10:25:05.627117 2026] [:error] [pid 31257:tid 31277] [client 20.151.11.236:60137] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaT1Af-JFLfishX45N8mCQAAAQ4"]
[Mon Mar 02 10:25:06.071701 2026] [:error] [pid 28908:tid 28918] [client 20.151.11.236:58220] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaT1AoqJmC8ih_lQQnD_DQAAAMg"]
[Mon Mar 02 10:25:06.490237 2026] [:error] [pid 31257:tid 31263] [client 20.151.11.236:58113] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaT1Av-JFLfishX45N8mDQAAAQA"]
[Mon Mar 02 10:25:07.018853 2026] [:error] [pid 23872:tid 23885] [client 20.151.11.236:60138] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaT1A0zkQFuA2qBk8UOnrwAAAYo"]
[Mon Mar 02 10:25:07.527305 2026] [:error] [pid 31257:tid 31285] [client 20.151.11.236:58223] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaT1A_-JFLfishX45N8mDwAAARY"]
[Mon Mar 02 10:25:08.061089 2026] [:error] [pid 23872:tid 23884] [client 20.151.11.236:58196] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaT1BEzkQFuA2qBk8UOntQAAAYk"]
[Mon Mar 02 10:25:08.492779 2026] [:error] [pid 28908:tid 28910] [client 20.151.11.236:58190] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "aaT1BIqJmC8ih_lQQnD_DwAAAMA"]
[Mon Mar 02 10:25:08.997034 2026] [:error] [pid 28795:tid 28878] [client 20.151.11.236:58120] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "aaT1BLROd53wZBkdI_emXgAAAI8"]
[Mon Mar 02 10:25:09.483945 2026] [:error] [pid 31257:tid 31280] [client 20.151.11.236:58179] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "aaT1Bf-JFLfishX45N8mEwAAARE"]
[Mon Mar 02 10:25:09.912569 2026] [:error] [pid 23872:tid 23875] [client 20.151.11.236:60115] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "aaT1BUzkQFuA2qBk8UOnywAAAYA"]
[Mon Mar 02 10:25:10.353159 2026] [:error] [pid 23872:tid 23895] [client 20.151.11.236:60054] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "aaT1BkzkQFuA2qBk8UOnzwAAAZQ"]
[Mon Mar 02 10:25:10.918419 2026] [:error] [pid 23872:tid 23880] [client 20.151.11.236:60127] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "aaT1BkzkQFuA2qBk8UOn0QAAAYU"]
[Mon Mar 02 10:25:11.393936 2026] [:error] [pid 21575:tid 21593] [client 20.151.11.236:58180] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "aaT1ByrocdArcJqFfIms3QAAAU4"]
[Mon Mar 02 10:25:11.844602 2026] [:error] [pid 21575:tid 21581] [client 20.151.11.236:58209] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "aaT1ByrocdArcJqFfIms4AAAAUI"]
[Mon Mar 02 10:25:12.332253 2026] [:error] [pid 23872:tid 23881] [client 20.151.11.236:58149] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaT1CEzkQFuA2qBk8UOn1AAAAYY"]
[Mon Mar 02 10:25:12.756412 2026] [:error] [pid 28795:tid 28874] [client 20.151.11.236:60039] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaT1CLROd53wZBkdI_emYgAAAIs"]
[Mon Mar 02 10:25:13.199092 2026] [:error] [pid 23872:tid 23898] [client 20.151.11.236:60128] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaT1CUzkQFuA2qBk8UOn2AAAAZc"]
[Mon Mar 02 10:25:13.628011 2026] [:error] [pid 23872:tid 23887] [client 20.151.11.236:58189] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaT1CUzkQFuA2qBk8UOn2gAAAYw"]
[Mon Mar 02 10:25:14.050875 2026] [:error] [pid 31257:tid 31272] [client 20.151.11.236:60154] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "aaT1Cv-JFLfishX45N8mIAAAAQk"]
[Mon Mar 02 10:25:14.205450 2026] [:error] [pid 23872:tid 23885] [client 94.187.171.125:52041] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT1CkzkQFuA2qBk8UOn3gAAAYo"]
[Mon Mar 02 10:25:14.494283 2026] [:error] [pid 31257:tid 31284] [client 20.151.11.236:60064] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "aaT1Cv-JFLfishX45N8mIwAAARU"]
[Mon Mar 02 10:25:14.970550 2026] [:error] [pid 31257:tid 31267] [client 20.151.11.236:58114] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "aaT1Cv-JFLfishX45N8mJgAAAQQ"]
[Mon Mar 02 10:25:15.505203 2026] [:error] [pid 31257:tid 31281] [client 20.151.11.236:55783] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "aaT1C_-JFLfishX45N8mJwAAARI"]
[Mon Mar 02 10:25:15.957213 2026] [:error] [pid 28908:tid 28925] [client 20.151.11.236:60081] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aaT1C4qJmC8ih_lQQnD_FAAAAM8"]
[Mon Mar 02 10:25:16.766527 2026] [:error] [pid 28795:tid 28879] [client 20.151.11.236:60060] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aaT1DLROd53wZBkdI_emZwAAAJA"]
[Mon Mar 02 10:25:17.201261 2026] [:error] [pid 23872:tid 23896] [client 20.151.11.236:55680] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aaT1DUzkQFuA2qBk8UOn5gAAAZU"]
[Mon Mar 02 10:25:17.679973 2026] [:error] [pid 21575:tid 21586] [client 20.151.11.236:58230] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aaT1DSrocdArcJqFfIms9gAAAUc"]
[Mon Mar 02 10:25:18.156127 2026] [:error] [pid 28795:tid 28875] [client 20.151.11.236:60056] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "aaT1DrROd53wZBkdI_emagAAAIw"]
[Mon Mar 02 10:25:18.705944 2026] [:error] [pid 21575:tid 21583] [client 20.151.11.236:60132] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "aaT1DirocdArcJqFfIms9wAAAUQ"]
[Mon Mar 02 10:25:19.166010 2026] [:error] [pid 28794:tid 28846] [client 20.151.11.236:58186] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "aaT1D6Vy2qpaelbUob1xUQAAAEo"]
[Mon Mar 02 10:25:19.658527 2026] [:error] [pid 28794:tid 28844] [client 20.151.11.236:60119] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "aaT1D6Vy2qpaelbUob1xUgAAAEg"]
[Mon Mar 02 10:25:20.113294 2026] [:error] [pid 28795:tid 28867] [client 20.151.11.236:58227] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "aaT1ELROd53wZBkdI_embgAAAIQ"]
[Mon Mar 02 10:25:20.532812 2026] [:error] [pid 28908:tid 28916] [client 20.151.11.236:58198] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "aaT1EIqJmC8ih_lQQnD_HwAAAMY"]
[Mon Mar 02 10:25:20.951897 2026] [:error] [pid 28908:tid 28919] [client 20.151.11.236:58234] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "aaT1EIqJmC8ih_lQQnD_IgAAAMk"]
[Mon Mar 02 10:25:21.727324 2026] [:error] [pid 28793:tid 28819] [client 20.151.11.236:60040] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "aaT1EQ2_fxBANaHo1f5SowAAAAw"]
[Mon Mar 02 10:25:22.180909 2026] [:error] [pid 31257:tid 31286] [client 20.151.11.236:60146] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aaT1Ev-JFLfishX45N8mMgAAARc"]
[Mon Mar 02 10:25:22.597905 2026] [:error] [pid 31257:tid 31285] [client 20.151.11.236:58188] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aaT1Ev-JFLfishX45N8mNAAAARY"]
[Mon Mar 02 10:25:23.024123 2026] [:error] [pid 28795:tid 28870] [client 20.151.11.236:58233] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aaT1E7ROd53wZBkdI_emcgAAAIc"]
[Mon Mar 02 10:25:23.492644 2026] [:error] [pid 23872:tid 23890] [client 20.151.11.236:58205] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aaT1E0zkQFuA2qBk8UOoFQAAAY8"]
[Mon Mar 02 10:25:23.935801 2026] [:error] [pid 23872:tid 23883] [client 20.151.11.236:58162] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aaT1E0zkQFuA2qBk8UOoGQAAAYg"]
[Mon Mar 02 10:25:24.367547 2026] [:error] [pid 21575:tid 21594] [client 20.151.11.236:60086] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aaT1FCrocdArcJqFfIms_AAAAU8"]
[Mon Mar 02 10:25:24.984180 2026] [:error] [pid 28793:tid 28808] [client 20.151.11.236:58238] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aaT1FA2_fxBANaHo1f5SpgAAAAE"]
[Mon Mar 02 10:25:25.536694 2026] [:error] [pid 23872:tid 23882] [client 20.151.11.236:60125] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "aaT1FUzkQFuA2qBk8UOoLAAAAYc"]
[Mon Mar 02 10:25:26.001028 2026] [:error] [pid 23872:tid 23878] [client 20.151.11.236:60087] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "aaT1FkzkQFuA2qBk8UOoNgAAAYM"]
[Mon Mar 02 10:25:26.468348 2026] [:error] [pid 21575:tid 21592] [client 20.151.11.236:60049] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "aaT1FirocdArcJqFfImtQgAAAU0"]
[Mon Mar 02 10:25:26.879823 2026] [:error] [pid 21575:tid 21588] [client 20.151.11.236:60032] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "aaT1FirocdArcJqFfImtTgAAAUk"]
[Mon Mar 02 10:25:27.314643 2026] [:error] [pid 31257:tid 31271] [client 20.151.11.236:55797] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "aaT1F_-JFLfishX45N8mPgAAAQg"]
[Mon Mar 02 10:25:27.755281 2026] [:error] [pid 23872:tid 23891] [client 20.151.11.236:60117] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaT1F0zkQFuA2qBk8UOoPAAAAZA"]
[Mon Mar 02 10:25:28.183031 2026] [:error] [pid 31257:tid 31287] [client 20.151.11.236:58200] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaT1GP-JFLfishX45N8mRAAAARg"]
[Mon Mar 02 10:25:28.720320 2026] [:error] [pid 23872:tid 23899] [client 20.151.11.236:58211] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaT1GEzkQFuA2qBk8UOoPwAAAZg"]
[Mon Mar 02 10:25:29.232021 2026] [:error] [pid 31257:tid 31271] [client 20.151.11.236:58204] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaT1Gf-JFLfishX45N8mTAAAAQg"]
[Mon Mar 02 10:25:29.706178 2026] [:error] [pid 23872:tid 23893] [client 20.151.11.236:60095] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaT1GUzkQFuA2qBk8UOoQwAAAZI"]
[Mon Mar 02 10:25:30.293617 2026] [:error] [pid 28908:tid 28933] [client 20.151.11.236:60139] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaT1GoqJmC8ih_lQQnD_TQAAANc"]
[Mon Mar 02 10:25:30.731707 2026] [:error] [pid 28908:tid 28927] [client 20.151.11.236:58126] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaT1GoqJmC8ih_lQQnD_UQAAANE"]
[Mon Mar 02 10:25:31.194896 2026] [:error] [pid 28793:tid 28817] [client 20.151.11.236:58239] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aaT1Gw2_fxBANaHo1f5SzQAAAAo"]
[Mon Mar 02 10:25:31.634866 2026] [:error] [pid 28908:tid 28916] [client 20.151.11.236:58210] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaT1G4qJmC8ih_lQQnD_VwAAAMY"]
[Mon Mar 02 10:25:32.045508 2026] [:error] [pid 23872:tid 23883] [client 20.151.11.236:58228] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaT1HEzkQFuA2qBk8UOoRwAAAYg"]
[Mon Mar 02 10:25:32.471096 2026] [:error] [pid 21575:tid 21584] [client 20.151.11.236:60153] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaT1HCrocdArcJqFfImtWgAAAUU"]
[Mon Mar 02 10:25:32.905002 2026] [:error] [pid 21575:tid 21583] [client 20.151.11.236:55728] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaT1HCrocdArcJqFfImtWwAAAUQ"]
[Mon Mar 02 10:25:33.343887 2026] [:error] [pid 21575:tid 21601] [client 20.151.11.236:60045] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aaT1HSrocdArcJqFfImtXgAAAVY"]
[Mon Mar 02 10:25:33.779250 2026] [:error] [pid 21575:tid 21598] [client 20.151.11.236:55747] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aaT1HSrocdArcJqFfImtYQAAAVM"]
[Mon Mar 02 10:25:34.209607 2026] [:error] [pid 23872:tid 23889] [client 20.151.11.236:60145] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aaT1HkzkQFuA2qBk8UOoUwAAAY4"]
[Mon Mar 02 10:25:34.659923 2026] [:error] [pid 23872:tid 23898] [client 20.151.11.236:55758] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aaT1HkzkQFuA2qBk8UOoVQAAAZc"]
[Mon Mar 02 10:25:35.097453 2026] [:error] [pid 23872:tid 23896] [client 20.151.11.236:58161] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaT1H0zkQFuA2qBk8UOoWgAAAZU"]
[Mon Mar 02 10:25:35.541544 2026] [:error] [pid 28908:tid 28933] [client 20.151.11.236:58224] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaT1H4qJmC8ih_lQQnD_XwAAANc"]
[Mon Mar 02 10:25:35.979988 2026] [:error] [pid 28908:tid 28931] [client 20.151.11.236:60122] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaT1H4qJmC8ih_lQQnD_YgAAANU"]
[Mon Mar 02 10:25:36.420300 2026] [:error] [pid 31257:tid 31273] [client 20.151.11.236:55757] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaT1IP-JFLfishX45N8mUAAAAQo"]
[Mon Mar 02 10:25:37.016020 2026] [:error] [pid 23872:tid 23878] [client 20.151.11.236:60149] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aaT1IUzkQFuA2qBk8UOoXQAAAYM"]
[Mon Mar 02 10:25:37.464938 2026] [:error] [pid 23872:tid 23877] [client 20.151.11.236:58144] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aaT1IUzkQFuA2qBk8UOoZQAAAYI"]
[Mon Mar 02 10:25:37.952591 2026] [:error] [pid 28908:tid 28916] [client 20.151.11.236:55714] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aaT1IYqJmC8ih_lQQnD_cAAAAMY"]
[Mon Mar 02 10:25:38.451662 2026] [:error] [pid 28795:tid 28867] [client 20.151.11.236:60093] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aaT1IrROd53wZBkdI_emqQAAAIQ"]
[Mon Mar 02 10:25:38.909568 2026] [:error] [pid 23872:tid 23894] [client 20.151.11.236:60034] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaT1IkzkQFuA2qBk8UOofwAAAZM"]
[Mon Mar 02 10:25:39.358981 2026] [:error] [pid 31257:tid 31280] [client 20.151.11.236:58175] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaT1I_-JFLfishX45N8mVAAAARE"]
[Mon Mar 02 10:25:39.775701 2026] [:error] [pid 21575:tid 21584] [client 20.151.11.236:60078] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaT1IyrocdArcJqFfImtdwAAAUU"]
[Mon Mar 02 10:25:40.208823 2026] [:error] [pid 28794:tid 28857] [client 20.151.11.236:55749] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaT1JKVy2qpaelbUob1xYQAAAFU"]
[Mon Mar 02 10:25:40.663517 2026] [:error] [pid 28793:tid 28809] [client 20.151.11.236:60157] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaT1JA2_fxBANaHo1f5S0gAAAAI"]
[Mon Mar 02 10:25:41.087811 2026] [:error] [pid 23872:tid 23894] [client 20.151.11.236:60155] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaT1JUzkQFuA2qBk8UOoqAAAAZM"]
[Mon Mar 02 10:25:41.508778 2026] [:error] [pid 28908:tid 28930] [client 20.151.11.236:60147] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaT1JYqJmC8ih_lQQnD_hwAAANQ"]
[Mon Mar 02 10:25:41.938798 2026] [:error] [pid 31257:tid 31283] [client 20.151.11.236:60048] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaT1Jf-JFLfishX45N8mWwAAARQ"]
[Mon Mar 02 10:25:42.366346 2026] [:error] [pid 23872:tid 23890] [client 20.151.11.236:58136] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaT1JkzkQFuA2qBk8UOoswAAAY8"]
[Mon Mar 02 10:25:42.797725 2026] [:error] [pid 21575:tid 21599] [client 20.151.11.236:58237] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aaT1JirocdArcJqFfImthAAAAVQ"]
[Mon Mar 02 10:25:43.224017 2026] [:error] [pid 28794:tid 28856] [client 20.151.11.236:58182] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aaT1J6Vy2qpaelbUob1xZAAAAFQ"]
[Mon Mar 02 10:25:43.736981 2026] [:error] [pid 23872:tid 23890] [client 20.151.11.236:60083] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aaT1J0zkQFuA2qBk8UOowAAAAY8"]
[Mon Mar 02 10:25:44.164438 2026] [:error] [pid 31257:tid 31267] [client 20.151.11.236:58213] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "aaT1KP-JFLfishX45N8mYQAAAQQ"]
[Mon Mar 02 10:25:44.587136 2026] [:error] [pid 21575:tid 21587] [client 20.151.11.236:58112] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaT1KCrocdArcJqFfImthgAAAUg"]
[Mon Mar 02 10:25:45.051914 2026] [:error] [pid 21575:tid 21584] [client 20.151.11.236:58201] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaT1KSrocdArcJqFfImthwAAAUU"]
[Mon Mar 02 10:25:45.478157 2026] [:error] [pid 23872:tid 23897] [client 20.151.11.236:58141] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaT1KUzkQFuA2qBk8UOoygAAAZY"]
[Mon Mar 02 10:25:45.924640 2026] [:error] [pid 28795:tid 28881] [client 20.151.11.236:58151] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "aaT1KbROd53wZBkdI_emvgAAAJI"]
[Mon Mar 02 10:25:46.352966 2026] [:error] [pid 23872:tid 23878] [client 20.151.11.236:60047] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT1KkzkQFuA2qBk8UOozwAAAYM"]
[Mon Mar 02 10:25:46.822075 2026] [:error] [pid 23872:tid 23885] [client 20.151.11.236:60130] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT1KkzkQFuA2qBk8UOo0wAAAYo"]
[Mon Mar 02 10:25:47.246266 2026] [:error] [pid 23872:tid 23875] [client 20.151.11.236:60099] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT1K0zkQFuA2qBk8UOo1gAAAYA"]
[Mon Mar 02 10:25:47.693313 2026] [:error] [pid 23872:tid 23881] [client 20.151.11.236:58184] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT1K0zkQFuA2qBk8UOo2QAAAYY"]
[Mon Mar 02 10:25:48.110292 2026] [:error] [pid 23872:tid 23895] [client 20.151.11.236:58218] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aaT1LEzkQFuA2qBk8UOo3gAAAZQ"]
[Mon Mar 02 10:25:48.537847 2026] [:error] [pid 23872:tid 23891] [client 20.151.11.236:58191] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aaT1LEzkQFuA2qBk8UOo4AAAAZA"]
[Mon Mar 02 10:25:48.968249 2026] [:error] [pid 21575:tid 21594] [client 20.151.11.236:60111] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aaT1LCrocdArcJqFfImtigAAAU8"]
[Mon Mar 02 10:25:49.390291 2026] [:error] [pid 28795:tid 28872] [client 20.151.11.236:60110] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aaT1LbROd53wZBkdI_emxgAAAIk"]
[Mon Mar 02 10:25:49.801364 2026] [:error] [pid 23872:tid 23896] [client 20.151.11.236:60140] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aaT1LUzkQFuA2qBk8UOo5AAAAZU"]
[Mon Mar 02 10:25:50.263649 2026] [:error] [pid 28908:tid 28925] [client 20.151.11.236:60066] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aaT1LoqJmC8ih_lQQnD_kgAAAM8"]
[Mon Mar 02 10:25:50.677026 2026] [:error] [pid 31257:tid 31270] [client 20.151.11.236:58157] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aaT1Lv-JFLfishX45N8mawAAAQc"]
[Mon Mar 02 10:25:51.096455 2026] [:error] [pid 28908:tid 28933] [client 20.151.11.236:60042] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aaT1L4qJmC8ih_lQQnD_lwAAANc"]
[Mon Mar 02 10:25:51.556094 2026] [:error] [pid 28794:tid 28859] [client 20.151.11.236:55789] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aaT1L6Vy2qpaelbUob1xZwAAAFc"]
[Mon Mar 02 10:25:51.987458 2026] [:error] [pid 23872:tid 23879] [client 20.151.11.236:60118] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aaT1L0zkQFuA2qBk8UOo6gAAAYQ"]
[Mon Mar 02 10:25:52.420158 2026] [:error] [pid 21575:tid 21600] [client 20.151.11.236:55741] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aaT1MCrocdArcJqFfImtiwAAAVU"]
[Mon Mar 02 10:25:52.835778 2026] [:error] [pid 23872:tid 23895] [client 20.151.11.236:58215] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aaT1MEzkQFuA2qBk8UOo7gAAAZQ"]
[Mon Mar 02 10:25:53.290527 2026] [:error] [pid 23872:tid 23886] [client 20.151.11.236:58185] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aaT1MUzkQFuA2qBk8UOo8QAAAYs"]
[Mon Mar 02 10:25:53.710932 2026] [:error] [pid 28908:tid 28927] [client 20.151.11.236:38851] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aaT1MYqJmC8ih_lQQnD_ngAAANE"]
[Mon Mar 02 10:25:54.227176 2026] [:error] [pid 28908:tid 28912] [client 20.151.11.236:60116] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aaT1MoqJmC8ih_lQQnD_nwAAAMI"]
[Mon Mar 02 10:25:54.660415 2026] [:error] [pid 21575:tid 21579] [client 20.151.11.236:55733] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aaT1MirocdArcJqFfImtkgAAAUA"]
[Mon Mar 02 10:25:55.109400 2026] [:error] [pid 28795:tid 28874] [client 20.151.11.236:58121] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aaT1M7ROd53wZBkdI_emzQAAAIs"]
[Mon Mar 02 10:25:55.538622 2026] [:error] [pid 21575:tid 21580] [client 20.151.11.236:60044] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aaT1MyrocdArcJqFfImtlwAAAUE"]
[Mon Mar 02 10:25:55.987529 2026] [:error] [pid 28908:tid 28931] [client 20.151.11.236:58147] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aaT1M4qJmC8ih_lQQnD_pgAAANU"]
[Mon Mar 02 10:25:56.410619 2026] [:error] [pid 28908:tid 28911] [client 20.151.11.236:55697] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aaT1NIqJmC8ih_lQQnD_pwAAAME"]
[Mon Mar 02 10:25:56.847665 2026] [:error] [pid 28794:tid 28850] [client 20.151.11.236:58124] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aaT1NKVy2qpaelbUob1xbwAAAE4"]
[Mon Mar 02 10:26:13.108549 2026] [:error] [pid 28794:tid 28858] [client 94.187.171.125:52562] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT1RaVy2qpaelbUob1xhgAAAFY"]
[Mon Mar 02 10:26:16.296864 2026] [:error] [pid 28793:tid 28813] [client 20.151.11.236:58225] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aaT1SA2_fxBANaHo1f5S-wAAAAY"]
[Mon Mar 02 10:26:17.411151 2026] [:error] [pid 31257:tid 31285] [client 20.151.11.236:58148] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aaT1Sf-JFLfishX45N8mtAAAARY"]
[Mon Mar 02 10:26:17.846031 2026] [:error] [pid 31257:tid 31280] [client 20.151.11.236:58158] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aaT1Sf-JFLfishX45N8muQAAARE"]
[Mon Mar 02 10:26:18.299308 2026] [:error] [pid 28908:tid 28919] [client 20.151.11.236:55690] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aaT1SoqJmC8ih_lQQnD_vAAAAMk"]
[Mon Mar 02 10:26:18.776324 2026] [:error] [pid 23872:tid 23895] [client 20.151.11.236:60033] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaT1SkzkQFuA2qBk8UOpUQAAAZQ"]
[Mon Mar 02 10:26:19.212354 2026] [:error] [pid 23872:tid 23892] [client 20.151.11.236:58154] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaT1S0zkQFuA2qBk8UOpUwAAAZE"]
[Mon Mar 02 10:26:19.647289 2026] [:error] [pid 23872:tid 23885] [client 20.151.11.236:58145] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaT1S0zkQFuA2qBk8UOpVgAAAYo"]
[Mon Mar 02 10:26:20.098387 2026] [:error] [pid 21575:tid 21580] [client 20.151.11.236:58222] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaT1TCrocdArcJqFfImtvwAAAUE"]
[Mon Mar 02 10:26:20.596680 2026] [:error] [pid 23872:tid 23891] [client 20.151.11.236:60055] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaT1TEzkQFuA2qBk8UOpXQAAAZA"]
[Mon Mar 02 10:26:21.029645 2026] [:error] [pid 21575:tid 21602] [client 20.151.11.236:58178] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaT1TSrocdArcJqFfImtwwAAAVc"]
[Mon Mar 02 10:26:21.500477 2026] [:error] [pid 28908:tid 28913] [client 20.151.11.236:60035] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaT1TYqJmC8ih_lQQnD_wAAAAMM"]
[Mon Mar 02 10:26:21.927256 2026] [:error] [pid 23872:tid 23890] [client 20.151.11.236:60075] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "aaT1TUzkQFuA2qBk8UOpYwAAAY8"]
[Mon Mar 02 10:26:22.343491 2026] [:error] [pid 23872:tid 23876] [client 20.151.11.236:60057] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aaT1TkzkQFuA2qBk8UOpZgAAAYE"]
[Mon Mar 02 10:26:22.761109 2026] [:error] [pid 23872:tid 23892] [client 20.151.11.236:60104] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aaT1TkzkQFuA2qBk8UOpawAAAZE"]
[Mon Mar 02 10:26:23.171878 2026] [:error] [pid 23872:tid 23890] [client 20.151.11.236:58235] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aaT1T0zkQFuA2qBk8UOpbgAAAY8"]
[Mon Mar 02 10:26:23.614856 2026] [:error] [pid 23872:tid 23886] [client 20.151.11.236:58159] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "aaT1T0zkQFuA2qBk8UOpdQAAAYs"]
[Mon Mar 02 10:26:24.052595 2026] [:error] [pid 23872:tid 23897] [client 20.151.11.236:60074] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aaT1UEzkQFuA2qBk8UOpeAAAAZY"]
[Mon Mar 02 10:26:24.481137 2026] [:error] [pid 23872:tid 23894] [client 20.151.11.236:58195] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aaT1UEzkQFuA2qBk8UOpfwAAAZM"]
[Mon Mar 02 10:26:24.913679 2026] [:error] [pid 23872:tid 23876] [client 20.151.11.236:58115] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aaT1UEzkQFuA2qBk8UOphQAAAYE"]
[Mon Mar 02 10:26:25.336632 2026] [:error] [pid 21575:tid 21592] [client 20.151.11.236:58119] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aaT1USrocdArcJqFfImtygAAAU0"]
[Mon Mar 02 10:26:25.747147 2026] [:error] [pid 31257:tid 31283] [client 20.151.11.236:60067] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aaT1Uf-JFLfishX45N8myQAAARQ"]
[Mon Mar 02 10:26:26.171882 2026] [:error] [pid 28795:tid 28877] [client 20.151.11.236:58217] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aaT1UrROd53wZBkdI_em5AAAAI4"]
[Mon Mar 02 10:26:26.614778 2026] [:error] [pid 28908:tid 28919] [client 20.151.11.236:55704] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aaT1UoqJmC8ih_lQQnD_yAAAAMk"]
[Mon Mar 02 10:26:27.056475 2026] [:error] [pid 28794:tid 28857] [client 20.151.11.236:60061] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aaT1U6Vy2qpaelbUob1xvwAAAFU"]
[Mon Mar 02 10:26:27.477034 2026] [:error] [pid 31257:tid 31267] [client 20.151.11.236:58134] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaT1U_-JFLfishX45N8m1QAAAQQ"]
[Mon Mar 02 10:26:27.935706 2026] [:error] [pid 28908:tid 28934] [client 20.151.11.236:58192] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaT1U4qJmC8ih_lQQnD_zAAAANg"]
[Mon Mar 02 10:26:28.356845 2026] [:error] [pid 28908:tid 28914] [client 20.151.11.236:60094] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaT1VIqJmC8ih_lQQnD_0QAAAMQ"]
[Mon Mar 02 10:26:28.795761 2026] [:error] [pid 28908:tid 28921] [client 20.151.11.236:58166] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aaT1VIqJmC8ih_lQQnD_1gAAAMs"]
[Mon Mar 02 10:26:29.245021 2026] [:error] [pid 23872:tid 23886] [client 20.151.11.236:55720] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaT1VUzkQFuA2qBk8UOpmQAAAYs"]
[Mon Mar 02 10:26:29.698737 2026] [:error] [pid 23872:tid 23893] [client 20.151.11.236:58221] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaT1VUzkQFuA2qBk8UOpmwAAAZI"]
[Mon Mar 02 10:26:30.144319 2026] [:error] [pid 31257:tid 31282] [client 20.151.11.236:58132] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaT1Vv-JFLfishX45N8m6AAAARM"]
[Mon Mar 02 10:26:30.572835 2026] [:error] [pid 23872:tid 23883] [client 20.151.11.236:58156] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaT1VkzkQFuA2qBk8UOpoAAAAYg"]
[Mon Mar 02 10:26:31.021296 2026] [:error] [pid 23872:tid 23876] [client 20.151.11.236:60038] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaT1V0zkQFuA2qBk8UOppQAAAYE"]
[Mon Mar 02 10:26:31.529718 2026] [:error] [pid 23872:tid 23896] [client 20.151.11.236:58202] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaT1V0zkQFuA2qBk8UOpqQAAAZU"]
[Mon Mar 02 10:26:31.956262 2026] [:error] [pid 31257:tid 31276] [client 20.151.11.236:58116] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaT1V_-JFLfishX45N8m6wAAAQ0"]
[Mon Mar 02 10:26:32.374701 2026] [:error] [pid 31257:tid 31274] [client 20.151.11.236:55802] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaT1WP-JFLfishX45N8m7QAAAQs"]
[Mon Mar 02 10:26:32.791188 2026] [:error] [pid 21575:tid 21589] [client 20.151.11.236:60058] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaT1WCrocdArcJqFfImt1AAAAUo"]
[Mon Mar 02 10:26:33.257408 2026] [:error] [pid 21575:tid 21591] [client 20.151.11.236:58236] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaT1WSrocdArcJqFfImt1gAAAUw"]
[Mon Mar 02 10:26:33.671551 2026] [:error] [pid 28795:tid 28878] [client 20.151.11.236:55726] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaT1WbROd53wZBkdI_em7gAAAI8"]
[Mon Mar 02 10:26:34.097090 2026] [:error] [pid 21575:tid 21596] [client 20.151.11.236:55791] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aaT1WirocdArcJqFfImt1wAAAVE"]
[Mon Mar 02 10:26:34.523229 2026] [:error] [pid 21575:tid 21585] [client 20.151.11.236:60096] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aaT1WirocdArcJqFfImt2QAAAUY"]
[Mon Mar 02 10:26:35.005187 2026] [:error] [pid 28793:tid 28809] [client 20.151.11.236:58140] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aaT1Ww2_fxBANaHo1f5S_gAAAAI"]
[Mon Mar 02 10:26:35.440958 2026] [:error] [pid 21575:tid 21600] [client 20.151.11.236:58122] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aaT1WyrocdArcJqFfImt3wAAAVU"]
[Mon Mar 02 10:26:35.879442 2026] [:error] [pid 28908:tid 28926] [client 20.151.11.236:38892] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "aaT1W4qJmC8ih_lQQnD_2gAAANA"]
[Mon Mar 02 10:26:36.295745 2026] [:error] [pid 23872:tid 23884] [client 20.151.11.236:55681] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaT1XEzkQFuA2qBk8UOptgAAAYk"]
[Mon Mar 02 10:26:36.755100 2026] [:error] [pid 28795:tid 28866] [client 20.151.11.236:60068] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaT1XLROd53wZBkdI_em8QAAAIM"]
[Mon Mar 02 10:26:37.250860 2026] [:error] [pid 23872:tid 23893] [client 20.151.11.236:55736] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaT1XUzkQFuA2qBk8UOpvQAAAZI"]
[Mon Mar 02 10:26:37.669893 2026] [:error] [pid 28794:tid 28849] [client 20.151.11.236:55705] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaT1XaVy2qpaelbUob1xxQAAAE0"]
[Mon Mar 02 10:26:38.080606 2026] [:error] [pid 31257:tid 31269] [client 20.151.11.236:58167] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaT1Xv-JFLfishX45N8m_QAAAQY"]
[Mon Mar 02 10:26:38.506100 2026] [:error] [pid 31257:tid 31271] [client 20.151.11.236:60159] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaT1Xv-JFLfishX45N8nAQAAAQg"]
[Mon Mar 02 10:26:38.919036 2026] [:error] [pid 28794:tid 28859] [client 20.151.11.236:55740] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaT1XqVy2qpaelbUob1xxgAAAFc"]
[Mon Mar 02 10:26:39.335048 2026] [:error] [pid 28908:tid 28928] [client 20.151.11.236:55701] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aaT1X4qJmC8ih_lQQnD_4QAAANI"]
[Mon Mar 02 10:26:39.766466 2026] [:error] [pid 31257:tid 31279] [client 20.151.11.236:58177] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aaT1X_-JFLfishX45N8nAwAAARA"]
[Mon Mar 02 10:26:40.201735 2026] [:error] [pid 28794:tid 28843] [client 20.151.11.236:55689] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aaT1YKVy2qpaelbUob1xyAAAAEc"]
[Mon Mar 02 10:26:40.623725 2026] [:error] [pid 21575:tid 21601] [client 20.151.11.236:60106] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aaT1YCrocdArcJqFfImt6gAAAVY"]
[Mon Mar 02 10:26:41.051994 2026] [:error] [pid 23872:tid 23882] [client 20.151.11.236:55798] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aaT1YUzkQFuA2qBk8UOpxAAAAYc"]
[Mon Mar 02 10:26:41.488047 2026] [:error] [pid 28908:tid 28923] [client 20.151.11.236:58128] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aaT1YYqJmC8ih_lQQnD_5AAAAM0"]
[Mon Mar 02 10:26:41.923274 2026] [:error] [pid 21575:tid 21603] [client 20.151.11.236:60114] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aaT1YSrocdArcJqFfImt7gAAAVg"]
[Mon Mar 02 10:26:42.356628 2026] [:error] [pid 31257:tid 31265] [client 20.151.11.236:60050] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aaT1Yv-JFLfishX45N8nCgAAAQI"]
[Mon Mar 02 10:26:42.777883 2026] [:error] [pid 28794:tid 28850] [client 20.151.11.236:60043] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aaT1YqVy2qpaelbUob1xygAAAE4"]
[Mon Mar 02 10:26:43.208939 2026] [:error] [pid 23872:tid 23877] [client 20.151.11.236:38870] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aaT1Y0zkQFuA2qBk8UOpzAAAAYI"]
[Mon Mar 02 10:26:43.652018 2026] [:error] [pid 28795:tid 28870] [client 20.151.11.236:58168] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aaT1Y7ROd53wZBkdI_em-wAAAIc"]
[Mon Mar 02 10:26:44.089177 2026] [:error] [pid 28908:tid 28913] [client 20.151.11.236:60103] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aaT1ZIqJmC8ih_lQQnD_5wAAAMM"]
[Mon Mar 02 10:26:44.540580 2026] [:error] [pid 28794:tid 28837] [client 20.151.11.236:60079] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x/"] [unique_id "aaT1ZKVy2qpaelbUob1xzQAAAEE"]
[Mon Mar 02 10:26:45.110791 2026] [:error] [pid 28908:tid 28912] [client 20.151.11.236:55790] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aaT1ZYqJmC8ih_lQQnD_6QAAAMI"]
[Mon Mar 02 10:26:45.526361 2026] [:error] [pid 28795:tid 28883] [client 20.151.11.236:60046] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aaT1ZbROd53wZBkdI_enAQAAAJQ"]
[Mon Mar 02 10:26:45.949320 2026] [:error] [pid 21575:tid 21584] [client 20.151.11.236:58207] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aaT1ZSrocdArcJqFfImt_QAAAUU"]
[Mon Mar 02 10:26:46.387951 2026] [:error] [pid 23872:tid 23878] [client 20.151.11.236:55805] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aaT1ZkzkQFuA2qBk8UOp0wAAAYM"]
[Mon Mar 02 10:26:46.798942 2026] [:error] [pid 28794:tid 28848] [client 20.151.11.236:58206] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aaT1ZqVy2qpaelbUob1xzgAAAEw"]
[Mon Mar 02 10:26:47.236024 2026] [:error] [pid 28795:tid 28865] [client 20.151.11.236:60085] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aaT1Z7ROd53wZBkdI_enBgAAAII"]
[Mon Mar 02 10:26:47.705757 2026] [:error] [pid 28795:tid 28868] [client 20.151.11.236:55722] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aaT1Z7ROd53wZBkdI_enBwAAAIU"]
[Mon Mar 02 10:26:48.117703 2026] [:error] [pid 31257:tid 31282] [client 20.151.11.236:60051] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aaT1aP-JFLfishX45N8nFAAAARM"]
[Mon Mar 02 10:26:48.536278 2026] [:error] [pid 31257:tid 31268] [client 20.151.11.236:60036] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaT1aP-JFLfishX45N8nFgAAAQU"]
[Mon Mar 02 10:26:48.975081 2026] [:error] [pid 31257:tid 31269] [client 20.151.11.236:60124] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaT1aP-JFLfishX45N8nFwAAAQY"]
[Mon Mar 02 10:26:49.402085 2026] [:error] [pid 31257:tid 31284] [client 20.151.11.236:60090] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaT1af-JFLfishX45N8nGgAAARU"]
[Mon Mar 02 10:26:49.851092 2026] [:error] [pid 31257:tid 31266] [client 20.151.11.236:60084] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aaT1af-JFLfishX45N8nHQAAAQM"]
[Mon Mar 02 10:26:50.269709 2026] [:error] [pid 31257:tid 31267] [client 20.151.11.236:55801] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aaT1av-JFLfishX45N8nHwAAAQQ"]
[Mon Mar 02 10:26:50.683202 2026] [:error] [pid 28908:tid 28915] [client 20.151.11.236:60158] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aaT1aoqJmC8ih_lQQnD_8QAAAMU"]
[Mon Mar 02 10:26:51.109868 2026] [:error] [pid 28795:tid 28881] [client 20.151.11.236:60141] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aaT1a7ROd53wZBkdI_enCwAAAJI"]
[Mon Mar 02 10:26:51.564691 2026] [:error] [pid 23872:tid 23898] [client 20.151.11.236:55774] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aaT1a0zkQFuA2qBk8UOp1wAAAZc"]
[Mon Mar 02 10:26:51.995553 2026] [:error] [pid 31257:tid 31266] [client 20.151.11.236:38861] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaT1a_-JFLfishX45N8nLAAAAQM"]
[Mon Mar 02 10:26:52.439984 2026] [:error] [pid 23872:tid 23897] [client 20.151.11.236:58194] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaT1bEzkQFuA2qBk8UOp2QAAAZY"]
[Mon Mar 02 10:26:52.860248 2026] [:error] [pid 31257:tid 31286] [client 20.151.11.236:60136] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaT1bP-JFLfishX45N8nMAAAARc"]
[Mon Mar 02 10:26:53.300272 2026] [:error] [pid 31257:tid 31264] [client 20.151.11.236:58212] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "aaT1bf-JFLfishX45N8nMgAAAQE"]
[Mon Mar 02 10:26:53.754820 2026] [:error] [pid 28794:tid 28841] [client 20.151.11.236:60151] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaT1baVy2qpaelbUob1x0AAAAEU"]
[Mon Mar 02 10:26:54.173513 2026] [:error] [pid 21575:tid 21594] [client 20.151.11.236:55770] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaT1birocdArcJqFfImuDQAAAU8"]
[Mon Mar 02 10:26:54.645805 2026] [:error] [pid 21575:tid 21603] [client 20.151.11.236:55787] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaT1birocdArcJqFfImuEQAAAVg"]
[Mon Mar 02 10:26:55.066040 2026] [:error] [pid 23872:tid 23882] [client 20.151.11.236:55780] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aaT1b0zkQFuA2qBk8UOp4gAAAYc"]
[Mon Mar 02 10:26:55.497350 2026] [:error] [pid 23872:tid 23879] [client 20.151.11.236:55800] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaT1b0zkQFuA2qBk8UOp5QAAAYQ"]
[Mon Mar 02 10:26:55.935806 2026] [:error] [pid 23872:tid 23892] [client 20.151.11.236:55787] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaT1b0zkQFuA2qBk8UOp6gAAAZE"]
[Mon Mar 02 10:26:56.357913 2026] [:error] [pid 31257:tid 31263] [client 20.151.11.236:60065] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaT1cP-JFLfishX45N8nUgAAAQA"]
[Mon Mar 02 10:26:56.827990 2026] [:error] [pid 23872:tid 23890] [client 20.151.11.236:58197] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaT1cEzkQFuA2qBk8UOp7AAAAY8"]
[Mon Mar 02 10:26:57.279153 2026] [:error] [pid 23872:tid 23888] [client 20.151.11.236:60037] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaT1cUzkQFuA2qBk8UOp7gAAAY0"]
[Mon Mar 02 10:26:57.700742 2026] [:error] [pid 21575:tid 21586] [client 20.151.11.236:60152] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaT1cSrocdArcJqFfImuFwAAAUc"]
[Mon Mar 02 10:26:58.115785 2026] [:error] [pid 21575:tid 21589] [client 20.151.11.236:58142] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaT1cirocdArcJqFfImuGAAAAUo"]
[Mon Mar 02 10:26:58.620570 2026] [:error] [pid 31257:tid 31271] [client 20.151.11.236:55735] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aaT1cv-JFLfishX45N8nZQAAAQg"]
[Mon Mar 02 10:26:59.088628 2026] [:error] [pid 31257:tid 31285] [client 20.151.11.236:38888] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaT1c_-JFLfishX45N8naAAAARY"]
[Mon Mar 02 10:26:59.517326 2026] [:error] [pid 31257:tid 31267] [client 20.151.11.236:55776] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaT1c_-JFLfishX45N8nbAAAAQQ"]
[Mon Mar 02 10:26:59.927297 2026] [:error] [pid 23872:tid 23879] [client 20.151.11.236:58172] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaT1c0zkQFuA2qBk8UOp_wAAAYQ"]
[Mon Mar 02 10:27:00.380367 2026] [:error] [pid 23872:tid 23885] [client 20.151.11.236:55782] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aaT1dEzkQFuA2qBk8UOqAgAAAYo"]
[Mon Mar 02 10:27:00.807667 2026] [:error] [pid 23872:tid 23888] [client 20.151.11.236:60073] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaT1dEzkQFuA2qBk8UOqCQAAAY0"]
[Mon Mar 02 10:27:01.254997 2026] [:error] [pid 21575:tid 21603] [client 20.151.11.236:58133] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaT1dSrocdArcJqFfImuGwAAAVg"]
[Mon Mar 02 10:27:01.745517 2026] [:error] [pid 21575:tid 21602] [client 20.151.11.236:55746] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaT1dSrocdArcJqFfImuHQAAAVc"]
[Mon Mar 02 10:27:02.184319 2026] [:error] [pid 21575:tid 21601] [client 20.151.11.236:55692] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aaT1dirocdArcJqFfImuHwAAAVY"]
[Mon Mar 02 10:27:02.681224 2026] [:error] [pid 23872:tid 23880] [client 20.151.11.236:55744] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaT1dkzkQFuA2qBk8UOqGgAAAYU"]
[Mon Mar 02 10:27:03.127867 2026] [:error] [pid 21575:tid 21585] [client 20.151.11.236:60063] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaT1dyrocdArcJqFfImuIAAAAUY"]
[Mon Mar 02 10:27:03.538363 2026] [:error] [pid 21575:tid 21588] [client 20.151.11.236:58163] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaT1dyrocdArcJqFfImuIwAAAUk"]
[Mon Mar 02 10:27:04.010166 2026] [:error] [pid 31257:tid 31286] [client 20.151.11.236:36581] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aaT1eP-JFLfishX45N8ncgAAARc"]
[Mon Mar 02 10:27:04.459433 2026] [:error] [pid 21575:tid 21599] [client 20.151.11.236:58117] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aaT1eCrocdArcJqFfImuKAAAAVQ"]
[Mon Mar 02 10:27:04.898365 2026] [:error] [pid 23872:tid 23880] [client 20.151.11.236:38885] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aaT1eEzkQFuA2qBk8UOqJgAAAYU"]
[Mon Mar 02 10:27:05.352538 2026] [:error] [pid 23872:tid 23878] [client 20.151.11.236:60143] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aaT1eUzkQFuA2qBk8UOqKQAAAYM"]
[Mon Mar 02 10:27:05.823030 2026] [:error] [pid 28908:tid 28924] [client 20.151.11.236:58183] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "aaT1eYqJmC8ih_lQQnAABQAAAM4"]
[Mon Mar 02 10:27:06.270730 2026] [:error] [pid 23872:tid 23886] [client 20.151.11.236:60097] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aaT1ekzkQFuA2qBk8UOqLgAAAYs"]
[Mon Mar 02 10:27:06.711262 2026] [:error] [pid 28794:tid 28842] [client 20.151.11.236:60102] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aaT1eqVy2qpaelbUob1x2AAAAEY"]
[Mon Mar 02 10:27:07.151778 2026] [:error] [pid 28794:tid 28857] [client 20.151.11.236:60077] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aaT1e6Vy2qpaelbUob1x3AAAAFU"]
[Mon Mar 02 10:27:07.624918 2026] [:error] [pid 21575:tid 21592] [client 20.151.11.236:38853] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aaT1eyrocdArcJqFfImuNwAAAU0"]
[Mon Mar 02 10:27:08.046082 2026] [:error] [pid 28793:tid 28819] [client 20.151.11.236:55692] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaT1fA2_fxBANaHo1f5TCwAAAAw"]
[Mon Mar 02 10:27:08.459924 2026] [:error] [pid 28908:tid 28919] [client 20.151.11.236:55717] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaT1fIqJmC8ih_lQQnAACgAAAMk"]
[Mon Mar 02 10:27:08.903442 2026] [:error] [pid 21575:tid 21591] [client 20.151.11.236:55709] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaT1fCrocdArcJqFfImuPgAAAUw"]
[Mon Mar 02 10:27:09.314430 2026] [:error] [pid 28793:tid 28830] [client 20.151.11.236:55769] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaT1fQ2_fxBANaHo1f5TDgAAABc"]
[Mon Mar 02 10:27:09.739574 2026] [:error] [pid 23872:tid 23887] [client 20.151.11.236:58129] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aaT1fUzkQFuA2qBk8UOqOAAAAYw"]
[Mon Mar 02 10:27:10.158409 2026] [:error] [pid 23872:tid 23898] [client 20.151.11.236:58118] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aaT1fkzkQFuA2qBk8UOqPgAAAZc"]
[Mon Mar 02 10:27:10.588438 2026] [:error] [pid 28795:tid 28880] [client 20.151.11.236:38882] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aaT1frROd53wZBkdI_enaAAAAJE"]
[Mon Mar 02 10:27:11.009563 2026] [:error] [pid 28908:tid 28913] [client 20.151.11.236:55751] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aaT1f4qJmC8ih_lQQnAADwAAAMM"]
[Mon Mar 02 10:27:11.422103 2026] [:error] [pid 28795:tid 28885] [client 20.151.11.236:38879] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aaT1f7ROd53wZBkdI_encAAAAJY"]
[Mon Mar 02 10:27:11.856303 2026] [:error] [pid 21575:tid 21586] [client 20.151.11.236:58229] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aaT1fyrocdArcJqFfImuTAAAAUc"]
[Mon Mar 02 10:27:12.281692 2026] [:error] [pid 31257:tid 31277] [client 20.151.11.236:55752] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aaT1gP-JFLfishX45N8ndQAAAQ4"]
[Mon Mar 02 10:27:12.422443 2026] [:error] [pid 31257:tid 31270] [client 94.187.171.125:52940] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT1gP-JFLfishX45N8ndgAAAQc"]
[Mon Mar 02 10:27:12.714923 2026] [:error] [pid 31257:tid 31282] [client 20.151.11.236:60129] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aaT1gP-JFLfishX45N8ndwAAARM"]
[Mon Mar 02 10:27:13.135560 2026] [:error] [pid 23872:tid 23884] [client 20.151.11.236:58135] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aaT1gUzkQFuA2qBk8UOqTgAAAYk"]
[Mon Mar 02 10:27:13.560293 2026] [:error] [pid 23872:tid 23875] [client 20.151.11.236:36557] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aaT1gUzkQFuA2qBk8UOqUgAAAYA"]
[Mon Mar 02 10:27:13.984718 2026] [:error] [pid 23872:tid 23882] [client 20.151.11.236:38827] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aaT1gUzkQFuA2qBk8UOqUwAAAYc"]
[Mon Mar 02 10:27:27.076601 2026] [autoindex:error] [pid 23872:tid 23884] [client 20.151.11.236:38791] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 10:27:28.517694 2026] [autoindex:error] [pid 23872:tid 23880] [client 20.151.11.236:38791] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 10:27:32.349161 2026] [:error] [pid 23872:tid 23876] [client 20.151.11.236:38791] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w4.php"] [unique_id "aaT1lEzkQFuA2qBk8UOq5wAAAYE"]
[Mon Mar 02 10:27:32.787929 2026] [:error] [pid 21575:tid 21583] [client 20.151.11.236:38854] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w4.php"] [unique_id "aaT1lCrocdArcJqFfImuYgAAAUQ"]
[Mon Mar 02 10:27:33.332084 2026] [:error] [pid 23872:tid 23891] [client 20.151.11.236:55753] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w4.php"] [unique_id "aaT1lUzkQFuA2qBk8UOq7QAAAZA"]
[Mon Mar 02 10:27:33.758586 2026] [:error] [pid 31257:tid 31277] [client 20.151.11.236:55694] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w4.php"] [unique_id "aaT1lf-JFLfishX45N8n8wAAAQ4"]
[Mon Mar 02 10:27:34.184130 2026] [:error] [pid 21575:tid 21584] [client 20.151.11.236:55737] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaT1lirocdArcJqFfImubQAAAUU"]
[Mon Mar 02 10:27:34.624048 2026] [:error] [pid 23872:tid 23885] [client 20.151.11.236:55756] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaT1lkzkQFuA2qBk8UOq9QAAAYo"]
[Mon Mar 02 10:27:35.049506 2026] [:error] [pid 21575:tid 21582] [client 20.151.11.236:55738] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaT1lyrocdArcJqFfImucwAAAUM"]
[Mon Mar 02 10:27:35.459907 2026] [:error] [pid 31257:tid 31287] [client 20.151.11.236:58181] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaT1l_-JFLfishX45N8n_QAAARg"]
[Mon Mar 02 10:27:35.903699 2026] [:error] [pid 23872:tid 23895] [client 20.151.11.236:55756] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aaT1l0zkQFuA2qBk8UOq_AAAAZQ"]
[Mon Mar 02 10:27:36.318347 2026] [:error] [pid 23872:tid 23884] [client 20.151.11.236:55710] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aaT1mEzkQFuA2qBk8UOq_wAAAYk"]
[Mon Mar 02 10:27:36.740636 2026] [:error] [pid 28908:tid 28924] [client 20.151.11.236:38832] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aaT1mIqJmC8ih_lQQnAAVgAAAM4"]
[Mon Mar 02 10:27:37.168254 2026] [:error] [pid 23872:tid 23890] [client 20.151.11.236:58137] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "aaT1mUzkQFuA2qBk8UOrBAAAAY8"]
[Mon Mar 02 10:27:37.707640 2026] [:error] [pid 23872:tid 23892] [client 20.151.11.236:55788] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaT1mUzkQFuA2qBk8UOrDAAAAZE"]
[Mon Mar 02 10:27:38.127089 2026] [:error] [pid 23872:tid 23883] [client 20.151.11.236:36554] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaT1mkzkQFuA2qBk8UOrEQAAAYg"]
[Mon Mar 02 10:27:38.570245 2026] [:error] [pid 23872:tid 23898] [client 20.151.11.236:38880] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaT1mkzkQFuA2qBk8UOrFgAAAZc"]
[Mon Mar 02 10:27:38.986353 2026] [:error] [pid 21575:tid 21596] [client 20.151.11.236:38877] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aaT1mirocdArcJqFfImulQAAAVE"]
[Mon Mar 02 10:27:39.421329 2026] [:error] [pid 23872:tid 23883] [client 20.151.11.236:55804] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymn.php"] [unique_id "aaT1m0zkQFuA2qBk8UOrHgAAAYg"]
[Mon Mar 02 10:27:39.856304 2026] [:error] [pid 23872:tid 23893] [client 20.151.11.236:58203] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymn.php"] [unique_id "aaT1m0zkQFuA2qBk8UOrIQAAAZI"]
[Mon Mar 02 10:27:40.327996 2026] [:error] [pid 28793:tid 28819] [client 20.151.11.236:55759] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymn.php"] [unique_id "aaT1nA2_fxBANaHo1f5TGQAAAAw"]
[Mon Mar 02 10:27:40.749316 2026] [:error] [pid 28908:tid 28912] [client 20.151.11.236:60092] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymn.php"] [unique_id "aaT1nIqJmC8ih_lQQnAAWQAAAMI"]
[Mon Mar 02 10:27:41.184985 2026] [:error] [pid 28795:tid 28887] [client 20.151.11.236:55708] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaT1nbROd53wZBkdI_enlgAAAJg"]
[Mon Mar 02 10:27:41.666080 2026] [:error] [pid 21575:tid 21579] [client 20.151.11.236:38835] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaT1nSrocdArcJqFfImumQAAAUA"]
[Mon Mar 02 10:27:42.079918 2026] [:error] [pid 21575:tid 21596] [client 20.151.11.236:38873] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaT1nirocdArcJqFfImunAAAAVE"]
[Mon Mar 02 10:27:42.493806 2026] [:error] [pid 21575:tid 21597] [client 20.151.11.236:60105] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bak.php"] [unique_id "aaT1nirocdArcJqFfImunwAAAVI"]
[Mon Mar 02 10:27:43.017828 2026] [:error] [pid 21575:tid 21585] [client 20.151.11.236:58232] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaT1nyrocdArcJqFfImuogAAAUY"]
[Mon Mar 02 10:27:43.440513 2026] [:error] [pid 31257:tid 31278] [client 20.151.11.236:55778] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaT1n_-JFLfishX45N8oBQAAAQ8"]
[Mon Mar 02 10:27:43.862192 2026] [:error] [pid 23872:tid 23887] [client 20.151.11.236:58231] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaT1n0zkQFuA2qBk8UOrLAAAAYw"]
[Mon Mar 02 10:27:44.278425 2026] [:error] [pid 23872:tid 23881] [client 20.151.11.236:36544] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aaT1oEzkQFuA2qBk8UOrLgAAAYY"]
[Mon Mar 02 10:27:44.737301 2026] [:error] [pid 28795:tid 28877] [client 20.151.11.236:58152] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aaT1oLROd53wZBkdI_enmQAAAI4"]
[Mon Mar 02 10:27:45.153089 2026] [:error] [pid 21575:tid 21587] [client 20.151.11.236:55768] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aaT1oSrocdArcJqFfImusAAAAUg"]
[Mon Mar 02 10:27:45.595823 2026] [:error] [pid 23872:tid 23884] [client 20.151.11.236:58226] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aaT1oUzkQFuA2qBk8UOrNAAAAYk"]
[Mon Mar 02 10:27:46.027992 2026] [:error] [pid 23872:tid 23878] [client 20.151.11.236:58130] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aaT1okzkQFuA2qBk8UOrNgAAAYM"]
[Mon Mar 02 10:27:46.445670 2026] [:error] [pid 31257:tid 31283] [client 20.151.11.236:60156] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aaT1ov-JFLfishX45N8oCwAAARQ"]
[Mon Mar 02 10:27:46.871921 2026] [:error] [pid 31257:tid 31274] [client 20.151.11.236:38788] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aaT1ov-JFLfishX45N8oDQAAAQs"]
[Mon Mar 02 10:27:47.296099 2026] [:error] [pid 31257:tid 31271] [client 20.151.11.236:55750] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aaT1o_-JFLfishX45N8oEAAAAQg"]
[Mon Mar 02 10:27:47.729360 2026] [:error] [pid 28908:tid 28919] [client 20.151.11.236:38813] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aaT1o4qJmC8ih_lQQnAAYQAAAMk"]
[Mon Mar 02 10:27:48.196194 2026] [:error] [pid 23872:tid 23897] [client 20.151.11.236:58176] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaT1pEzkQFuA2qBk8UOrQwAAAZY"]
[Mon Mar 02 10:27:48.628579 2026] [:error] [pid 28794:tid 28840] [client 20.151.11.236:58125] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaT1pKVy2qpaelbUob1x_AAAAEQ"]
[Mon Mar 02 10:27:49.051067 2026] [:error] [pid 28794:tid 28839] [client 20.151.11.236:55707] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaT1paVy2qpaelbUob1x_gAAAEM"]
[Mon Mar 02 10:27:49.509184 2026] [:error] [pid 31257:tid 31278] [client 20.151.11.236:60070] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaT1pf-JFLfishX45N8oFQAAAQ8"]
[Mon Mar 02 10:27:49.958943 2026] [:error] [pid 23872:tid 23881] [client 20.151.11.236:60120] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaT1pUzkQFuA2qBk8UOrTgAAAYY"]
[Mon Mar 02 10:27:50.375700 2026] [:error] [pid 31257:tid 31268] [client 20.151.11.236:58131] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaT1pv-JFLfishX45N8oGAAAAQU"]
[Mon Mar 02 10:27:50.789790 2026] [:error] [pid 28908:tid 28924] [client 20.151.11.236:58193] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaT1poqJmC8ih_lQQnAAZQAAAM4"]
[Mon Mar 02 10:27:51.220322 2026] [:error] [pid 28908:tid 28915] [client 20.151.11.236:58143] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aaT1p4qJmC8ih_lQQnAAZwAAAMU"]
[Mon Mar 02 10:27:51.669971 2026] [:error] [pid 28794:tid 28847] [client 20.151.11.236:38821] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaT1p6Vy2qpaelbUob1x_wAAAEs"]
[Mon Mar 02 10:27:52.089823 2026] [:error] [pid 31257:tid 31283] [client 20.151.11.236:55688] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaT1qP-JFLfishX45N8oJQAAARQ"]
[Mon Mar 02 10:27:52.524014 2026] [:error] [pid 28794:tid 28838] [client 20.151.11.236:55698] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaT1qKVy2qpaelbUob1yAQAAAEI"]
[Mon Mar 02 10:27:52.967846 2026] [:error] [pid 21575:tid 21603] [client 20.151.11.236:58219] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aaT1qCrocdArcJqFfImutAAAAVg"]
[Mon Mar 02 10:27:53.395258 2026] [:error] [pid 21575:tid 21583] [client 20.151.11.236:38886] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aaT1qSrocdArcJqFfImutwAAAUQ"]
[Mon Mar 02 10:27:53.861551 2026] [:error] [pid 23872:tid 23885] [client 20.151.11.236:55683] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aaT1qUzkQFuA2qBk8UOregAAAYo"]
[Mon Mar 02 10:27:54.283731 2026] [:error] [pid 28908:tid 28916] [client 20.151.11.236:38876] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aaT1qoqJmC8ih_lQQnAAawAAAMY"]
[Mon Mar 02 10:27:54.720885 2026] [:error] [pid 28908:tid 28914] [client 20.151.11.236:60041] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "aaT1qoqJmC8ih_lQQnAAbQAAAMQ"]
[Mon Mar 02 10:27:55.140333 2026] [:error] [pid 23872:tid 23898] [client 20.151.11.236:55731] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aaT1q0zkQFuA2qBk8UOrngAAAZc"]
[Mon Mar 02 10:27:55.587743 2026] [:error] [pid 23872:tid 23879] [client 20.151.11.236:55691] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aaT1q0zkQFuA2qBk8UOrowAAAYQ"]
[Mon Mar 02 10:27:56.003878 2026] [:error] [pid 28794:tid 28853] [client 20.151.11.236:55684] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aaT1rKVy2qpaelbUob1yAwAAAFE"]
[Mon Mar 02 10:27:56.417787 2026] [:error] [pid 31257:tid 31281] [client 20.151.11.236:58155] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aaT1rP-JFLfishX45N8oNQAAARI"]
[Mon Mar 02 10:27:56.886487 2026] [:error] [pid 28793:tid 28808] [client 20.151.11.236:55803] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aaT1rA2_fxBANaHo1f5THwAAAAE"]
[Mon Mar 02 10:27:57.331868 2026] [:error] [pid 21575:tid 21594] [client 20.151.11.236:38800] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aaT1rSrocdArcJqFfImvGwAAAU8"]
[Mon Mar 02 10:27:57.760695 2026] [:error] [pid 21575:tid 21580] [client 20.151.11.236:38806] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aaT1rSrocdArcJqFfImvHwAAAUE"]
[Mon Mar 02 10:27:58.215987 2026] [:error] [pid 21575:tid 21589] [client 20.151.11.236:38868] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aaT1rirocdArcJqFfImvIgAAAUo"]
[Mon Mar 02 10:27:58.631595 2026] [:error] [pid 21575:tid 21581] [client 20.151.11.236:38906] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aaT1rirocdArcJqFfImvJgAAAUI"]
[Mon Mar 02 10:27:59.060790 2026] [:error] [pid 23872:tid 23883] [client 20.151.11.236:38889] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aaT1r0zkQFuA2qBk8UOrtwAAAYg"]
[Mon Mar 02 10:27:59.516144 2026] [:error] [pid 23872:tid 23887] [client 20.151.11.236:58187] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aaT1r0zkQFuA2qBk8UOruQAAAYw"]
[Mon Mar 02 10:27:59.951523 2026] [:error] [pid 23872:tid 23881] [client 20.151.11.236:58170] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aaT1r0zkQFuA2qBk8UOrwgAAAYY"]
[Mon Mar 02 10:28:00.391610 2026] [:error] [pid 23872:tid 23879] [client 20.151.11.236:38831] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaT1sEzkQFuA2qBk8UOrxwAAAYQ"]
[Mon Mar 02 10:28:00.822989 2026] [:error] [pid 23872:tid 23888] [client 20.151.11.236:55754] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aaT1sEzkQFuA2qBk8UOrywAAAY0"]
[Mon Mar 02 10:28:01.249568 2026] [:error] [pid 21575:tid 21595] [client 20.151.11.236:55760] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aaT1sSrocdArcJqFfImvKQAAAVA"]
[Mon Mar 02 10:28:01.661154 2026] [:error] [pid 21575:tid 21587] [client 20.151.11.236:60082] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aaT1sSrocdArcJqFfImvKgAAAUg"]
[Mon Mar 02 10:28:02.070115 2026] [:error] [pid 21575:tid 21586] [client 20.151.11.236:38792] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hi.php"] [unique_id "aaT1sirocdArcJqFfImvLgAAAUc"]
[Mon Mar 02 10:28:02.484236 2026] [:error] [pid 23872:tid 23893] [client 20.151.11.236:55699] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hi.php"] [unique_id "aaT1skzkQFuA2qBk8UOr0wAAAZI"]
[Mon Mar 02 10:28:02.911083 2026] [:error] [pid 23872:tid 23881] [client 20.151.11.236:19431] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hi.php"] [unique_id "aaT1skzkQFuA2qBk8UOr2QAAAYY"]
[Mon Mar 02 10:28:03.323531 2026] [:error] [pid 23872:tid 23894] [client 20.151.11.236:58164] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hi.php"] [unique_id "aaT1s0zkQFuA2qBk8UOr3gAAAZM"]
[Mon Mar 02 10:28:03.765990 2026] [:error] [pid 31257:tid 31266] [client 20.151.11.236:55781] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aaT1s_-JFLfishX45N8oSQAAAQM"]
[Mon Mar 02 10:28:04.211473 2026] [:error] [pid 23872:tid 23877] [client 20.151.11.236:55702] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aaT1tEzkQFuA2qBk8UOr7QAAAYI"]
[Mon Mar 02 10:28:04.632819 2026] [:error] [pid 23872:tid 23882] [client 20.151.11.236:58202] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aaT1tEzkQFuA2qBk8UOr9gAAAYc"]
[Mon Mar 02 10:28:05.098735 2026] [:error] [pid 28793:tid 28823] [client 20.151.11.236:58160] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "aaT1tQ2_fxBANaHo1f5TIgAAABA"]
[Mon Mar 02 10:28:05.523615 2026] [:error] [pid 23872:tid 23892] [client 20.151.11.236:55739] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aaT1tUzkQFuA2qBk8UOr_AAAAZE"]
[Mon Mar 02 10:28:05.946508 2026] [:error] [pid 28795:tid 28864] [client 20.151.11.236:38894] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aaT1tbROd53wZBkdI_enzgAAAIE"]
[Mon Mar 02 10:28:06.359330 2026] [:error] [pid 28794:tid 28844] [client 20.151.11.236:55711] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aaT1tqVy2qpaelbUob1yBgAAAEg"]
[Mon Mar 02 10:28:06.767195 2026] [:error] [pid 28908:tid 28934] [client 20.151.11.236:38884] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aaT1toqJmC8ih_lQQnAAhwAAANg"]
[Mon Mar 02 10:28:07.200987 2026] [:error] [pid 31257:tid 31281] [client 20.151.11.236:38819] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaT1t_-JFLfishX45N8oWAAAARI"]
[Mon Mar 02 10:28:07.657113 2026] [:error] [pid 31257:tid 31268] [client 20.151.11.236:55732] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaT1t_-JFLfishX45N8oXQAAAQU"]
[Mon Mar 02 10:28:08.098688 2026] [:error] [pid 31257:tid 31267] [client 20.151.11.236:55795] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaT1uP-JFLfishX45N8oZwAAAQQ"]
[Mon Mar 02 10:28:08.520879 2026] [:error] [pid 31257:tid 31275] [client 20.151.11.236:55748] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaT1uP-JFLfishX45N8obAAAAQw"]
[Mon Mar 02 10:28:08.938330 2026] [:error] [pid 28795:tid 28880] [client 20.151.11.236:19401] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aaT1uLROd53wZBkdI_en0QAAAJE"]
[Mon Mar 02 10:28:09.413468 2026] [:error] [pid 23872:tid 23875] [client 20.151.11.236:55762] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aaT1uUzkQFuA2qBk8UOsJgAAAYA"]
[Mon Mar 02 10:28:09.832846 2026] [:error] [pid 31257:tid 31264] [client 20.151.11.236:55807] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aaT1uf-JFLfishX45N8oewAAAQE"]
[Mon Mar 02 10:28:10.250211 2026] [:error] [pid 28795:tid 28868] [client 20.151.11.236:55755] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "aaT1urROd53wZBkdI_en0gAAAIU"]
[Mon Mar 02 10:28:10.663792 2026] [:error] [pid 31257:tid 31287] [client 20.151.11.236:58169] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaT1uv-JFLfishX45N8ohwAAARg"]
[Mon Mar 02 10:28:11.082409 2026] [:error] [pid 23872:tid 23896] [client 20.151.11.236:38896] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaT1u0zkQFuA2qBk8UOsJwAAAZU"]
[Mon Mar 02 10:28:11.524745 2026] [:error] [pid 28908:tid 28913] [client 20.151.11.236:60088] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaT1u4qJmC8ih_lQQnAAkwAAAMM"]
[Mon Mar 02 10:28:11.953932 2026] [:error] [pid 21575:tid 21596] [client 20.151.11.236:36583] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aaT1uyrocdArcJqFfImvpgAAAVE"]
[Mon Mar 02 10:28:12.369512 2026] [:error] [pid 28793:tid 28829] [client 20.151.11.236:55794] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaT1vA2_fxBANaHo1f5TKAAAABY"]
[Mon Mar 02 10:28:12.784863 2026] [:error] [pid 28908:tid 28921] [client 20.151.11.236:55682] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaT1vIqJmC8ih_lQQnAAmAAAAMs"]
[Mon Mar 02 10:28:13.194804 2026] [:error] [pid 21575:tid 21590] [client 20.151.11.236:38818] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaT1vSrocdArcJqFfImvqgAAAUs"]
[Mon Mar 02 10:28:13.619333 2026] [:error] [pid 21575:tid 21598] [client 20.151.11.236:36572] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "aaT1vSrocdArcJqFfImvrQAAAVM"]
[Mon Mar 02 10:28:14.043598 2026] [:error] [pid 28908:tid 28925] [client 20.151.11.236:38822] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaT1voqJmC8ih_lQQnAAnwAAAM8"]
[Mon Mar 02 10:28:14.339337 2026] [:error] [pid 28908:tid 28918] [client 94.187.171.125:53473] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT1voqJmC8ih_lQQnAAoQAAAMg"]
[Mon Mar 02 10:28:14.455752 2026] [:error] [pid 21575:tid 21591] [client 20.151.11.236:36586] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaT1virocdArcJqFfImvtAAAAUw"]
[Mon Mar 02 10:28:14.878824 2026] [:error] [pid 21575:tid 21592] [client 20.151.11.236:55773] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaT1virocdArcJqFfImvtgAAAU0"]
[Mon Mar 02 10:28:15.308826 2026] [:error] [pid 23872:tid 23882] [client 20.151.11.236:58127] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaT1v0zkQFuA2qBk8UOsOQAAAYc"]
[Mon Mar 02 10:28:15.731046 2026] [:error] [pid 23872:tid 23897] [client 20.151.11.236:38808] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aaT1v0zkQFuA2qBk8UOsPQAAAZY"]
[Mon Mar 02 10:28:16.151858 2026] [:error] [pid 23872:tid 23887] [client 20.151.11.236:55771] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aaT1wEzkQFuA2qBk8UOsQAAAAYw"]
[Mon Mar 02 10:28:16.572220 2026] [:error] [pid 23872:tid 23877] [client 20.151.11.236:36564] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aaT1wEzkQFuA2qBk8UOsQwAAAYI"]
[Mon Mar 02 10:28:17.000946 2026] [:error] [pid 28793:tid 28826] [client 20.151.11.236:38793] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aaT1wA2_fxBANaHo1f5TKgAAABM"]
[Mon Mar 02 10:28:17.441484 2026] [:error] [pid 28793:tid 28819] [client 20.151.11.236:38789] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aaT1wQ2_fxBANaHo1f5TLAAAAAw"]
[Mon Mar 02 10:28:17.862136 2026] [:error] [pid 28908:tid 28933] [client 20.151.11.236:36485] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aaT1wYqJmC8ih_lQQnAAswAAANc"]
[Mon Mar 02 10:28:18.284000 2026] [:error] [pid 23872:tid 23887] [client 20.151.11.236:58174] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aaT1wkzkQFuA2qBk8UOsTgAAAYw"]
[Mon Mar 02 10:28:18.695633 2026] [:error] [pid 28795:tid 28875] [client 20.151.11.236:38856] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aaT1wrROd53wZBkdI_en7wAAAIw"]
[Mon Mar 02 10:28:19.109782 2026] [:error] [pid 31257:tid 31269] [client 20.151.11.236:36555] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aaT1w_-JFLfishX45N8omAAAAQY"]
[Mon Mar 02 10:28:19.536668 2026] [:error] [pid 21575:tid 21601] [client 20.151.11.236:36480] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aaT1wyrocdArcJqFfImvugAAAVY"]
[Mon Mar 02 10:28:19.982721 2026] [:error] [pid 21575:tid 21591] [client 20.151.11.236:55775] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aaT1wyrocdArcJqFfImvvgAAAUw"]
[Mon Mar 02 10:28:20.519027 2026] [:error] [pid 28908:tid 28933] [client 20.151.11.236:58146] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aaT1xIqJmC8ih_lQQnAAwAAAANc"]
[Mon Mar 02 10:28:20.948706 2026] [:error] [pid 31257:tid 31284] [client 20.151.11.236:60150] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "aaT1xP-JFLfishX45N8onAAAARU"]
[Mon Mar 02 10:28:21.366645 2026] [:error] [pid 28908:tid 28923] [client 20.151.11.236:38871] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "aaT1xYqJmC8ih_lQQnAAyQAAAM0"]
[Mon Mar 02 10:28:21.879589 2026] [:error] [pid 21575:tid 21593] [client 20.151.11.236:55764] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "aaT1xSrocdArcJqFfImvxAAAAU4"]
[Mon Mar 02 10:28:22.289864 2026] [:error] [pid 28794:tid 28859] [client 20.151.11.236:55729] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "aaT1xqVy2qpaelbUob1yHAAAAFc"]
[Mon Mar 02 10:28:22.774995 2026] [:error] [pid 21575:tid 21584] [client 20.151.11.236:58165] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aaT1xirocdArcJqFfImvygAAAUU"]
[Mon Mar 02 10:28:23.202313 2026] [:error] [pid 28908:tid 28932] [client 20.151.11.236:55763] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aaT1x4qJmC8ih_lQQnAAzAAAANY"]
[Mon Mar 02 10:28:23.617028 2026] [:error] [pid 31257:tid 31263] [client 20.151.11.236:36545] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aaT1x_-JFLfishX45N8ooQAAAQA"]
[Mon Mar 02 10:28:24.029725 2026] [:error] [pid 23872:tid 23897] [client 20.151.11.236:55806] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aaT1yEzkQFuA2qBk8UOsUwAAAZY"]
[Mon Mar 02 10:28:24.454156 2026] [:error] [pid 23872:tid 23884] [client 20.151.11.236:60121] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aaT1yEzkQFuA2qBk8UOsVwAAAYk"]
[Mon Mar 02 10:28:24.872239 2026] [:error] [pid 28795:tid 28866] [client 20.151.11.236:19402] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aaT1yLROd53wZBkdI_en_QAAAIM"]
[Mon Mar 02 10:28:25.341459 2026] [:error] [pid 21575:tid 21592] [client 20.151.11.236:55786] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aaT1ySrocdArcJqFfImv0QAAAU0"]
[Mon Mar 02 10:28:25.769474 2026] [:error] [pid 21575:tid 21585] [client 20.151.11.236:55685] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aaT1ySrocdArcJqFfImv0gAAAUY"]
[Mon Mar 02 10:28:26.190132 2026] [:error] [pid 21575:tid 21590] [client 20.151.11.236:55792] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aaT1yirocdArcJqFfImv2AAAAUs"]
[Mon Mar 02 10:28:26.599831 2026] [:error] [pid 28793:tid 28822] [client 20.151.11.236:38844] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aaT1yg2_fxBANaHo1f5TMwAAAA8"]
[Mon Mar 02 10:28:27.018480 2026] [:error] [pid 21575:tid 21601] [client 20.151.11.236:38802] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aaT1yyrocdArcJqFfImv3AAAAVY"]
[Mon Mar 02 10:28:27.472828 2026] [:error] [pid 28794:tid 28836] [client 20.151.11.236:36573] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aaT1y6Vy2qpaelbUob1yJwAAAEA"]
[Mon Mar 02 10:28:27.939053 2026] [:error] [pid 28908:tid 28921] [client 20.151.11.236:38890] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aaT1y4qJmC8ih_lQQnAA2QAAAMs"]
[Mon Mar 02 10:28:28.384338 2026] [:error] [pid 21575:tid 21596] [client 20.151.11.236:55723] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aaT1zCrocdArcJqFfImv3gAAAVE"]
[Mon Mar 02 10:28:28.929251 2026] [:error] [pid 31257:tid 31265] [client 20.151.11.236:36495] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aaT1zP-JFLfishX45N8orgAAAQI"]
[Mon Mar 02 10:28:29.357223 2026] [:error] [pid 28793:tid 28825] [client 20.151.11.236:38839] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aaT1zQ2_fxBANaHo1f5TNgAAABI"]
[Mon Mar 02 10:28:29.800348 2026] [:error] [pid 21575:tid 21597] [client 20.151.11.236:36596] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aaT1zSrocdArcJqFfImv3wAAAVI"]
[Mon Mar 02 10:28:30.304460 2026] [:error] [pid 21575:tid 21587] [client 20.151.11.236:38867] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aaT1zirocdArcJqFfImv4wAAAUg"]
[Mon Mar 02 10:28:30.726186 2026] [:error] [pid 21575:tid 21599] [client 20.151.11.236:36563] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aaT1zirocdArcJqFfImv5gAAAVQ"]
[Mon Mar 02 10:28:47.648594 2026] [:error] [pid 28908:tid 28912] [client 20.151.11.236:19450] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aaT134qJmC8ih_lQQnABNwAAAMI"]
[Mon Mar 02 10:28:48.062824 2026] [:error] [pid 28794:tid 28856] [client 20.151.11.236:55700] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aaT14KVy2qpaelbUob1yPwAAAFQ"]
[Mon Mar 02 10:28:48.503683 2026] [:error] [pid 23872:tid 23886] [client 20.151.11.236:38890] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aaT14EzkQFuA2qBk8UOsvwAAAYs"]
[Mon Mar 02 10:28:48.932781 2026] [:error] [pid 23872:tid 23893] [client 20.151.11.236:60059] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/styll.php"] [unique_id "aaT14EzkQFuA2qBk8UOsxQAAAZI"]
[Mon Mar 02 10:28:49.361533 2026] [:error] [pid 28795:tid 28864] [client 20.151.11.236:55718] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aaT14bROd53wZBkdI_eoPQAAAIE"]
[Mon Mar 02 10:28:49.769544 2026] [:error] [pid 23872:tid 23876] [client 20.151.11.236:58173] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aaT14UzkQFuA2qBk8UOsyAAAAYE"]
[Mon Mar 02 10:28:50.181644 2026] [:error] [pid 28908:tid 28916] [client 20.151.11.236:19403] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aaT14oqJmC8ih_lQQnABOgAAAMY"]
[Mon Mar 02 10:28:50.590754 2026] [:error] [pid 28794:tid 28857] [client 20.151.11.236:38866] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "aaT14qVy2qpaelbUob1yQQAAAFU"]
[Mon Mar 02 10:28:51.020247 2026] [:error] [pid 28908:tid 28930] [client 20.151.11.236:36553] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aaT144qJmC8ih_lQQnABPAAAANQ"]
[Mon Mar 02 10:28:51.427883 2026] [:error] [pid 28908:tid 28911] [client 20.151.11.236:36484] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aaT144qJmC8ih_lQQnABQAAAAME"]
[Mon Mar 02 10:28:51.851700 2026] [:error] [pid 23872:tid 23886] [client 20.151.11.236:55765] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aaT140zkQFuA2qBk8UOszAAAAYs"]
[Mon Mar 02 10:28:52.264323 2026] [:error] [pid 23872:tid 23894] [client 20.151.11.236:38860] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower2.php"] [unique_id "aaT15EzkQFuA2qBk8UOszwAAAZM"]
[Mon Mar 02 10:28:52.681559 2026] [:error] [pid 28908:tid 28927] [client 20.151.11.236:19406] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4h.php"] [unique_id "aaT15IqJmC8ih_lQQnABRgAAANE"]
[Mon Mar 02 10:28:53.096223 2026] [:error] [pid 28908:tid 28929] [client 20.151.11.236:55743] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4h.php"] [unique_id "aaT15YqJmC8ih_lQQnABRwAAANM"]
[Mon Mar 02 10:28:53.539507 2026] [:error] [pid 28908:tid 28918] [client 20.151.11.236:36598] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4h.php"] [unique_id "aaT15YqJmC8ih_lQQnABSAAAAMg"]
[Mon Mar 02 10:28:53.984963 2026] [:error] [pid 28795:tid 28867] [client 20.151.11.236:38830] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4h.php"] [unique_id "aaT15bROd53wZBkdI_eoQwAAAIQ"]
[Mon Mar 02 10:28:54.401826 2026] [:error] [pid 28795:tid 28882] [client 20.151.11.236:38817] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aaT15rROd53wZBkdI_eoRgAAAJM"]
[Mon Mar 02 10:28:54.860907 2026] [:error] [pid 21575:tid 21589] [client 20.151.11.236:38859] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aaT15irocdArcJqFfImwLQAAAUo"]
[Mon Mar 02 10:28:55.276718 2026] [:error] [pid 28793:tid 28812] [client 20.151.11.236:60053] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aaT15w2_fxBANaHo1f5TYwAAAAU"]
[Mon Mar 02 10:28:55.697142 2026] [:error] [pid 31257:tid 31286] [client 20.151.11.236:38848] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aaT15_-JFLfishX45N8pNgAAARc"]
[Mon Mar 02 10:28:56.111938 2026] [:error] [pid 31257:tid 31272] [client 20.151.11.236:58150] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aaT16P-JFLfishX45N8pOwAAAQk"]
[Mon Mar 02 10:28:56.531845 2026] [:error] [pid 31257:tid 31287] [client 20.151.11.236:38911] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aaT16P-JFLfishX45N8pQAAAARg"]
[Mon Mar 02 10:28:56.953952 2026] [:error] [pid 28908:tid 28925] [client 20.151.11.236:60131] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aaT16IqJmC8ih_lQQnABVAAAAM8"]
[Mon Mar 02 10:28:57.379299 2026] [:error] [pid 28908:tid 28920] [client 20.151.11.236:55713] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aaT16YqJmC8ih_lQQnABWAAAAMo"]
[Mon Mar 02 10:28:57.822388 2026] [:error] [pid 21575:tid 21592] [client 20.151.11.236:58216] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "aaT16SrocdArcJqFfImwMAAAAU0"]
[Mon Mar 02 10:28:58.252918 2026] [:error] [pid 31257:tid 31284] [client 20.151.11.236:55767] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "aaT16v-JFLfishX45N8pSwAAARU"]
[Mon Mar 02 10:28:58.697564 2026] [:error] [pid 31257:tid 31266] [client 20.151.11.236:36578] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "aaT16v-JFLfishX45N8pUQAAAQM"]
[Mon Mar 02 10:28:59.118033 2026] [:error] [pid 31257:tid 31264] [client 20.151.11.236:38855] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "aaT16_-JFLfishX45N8pVQAAAQE"]
[Mon Mar 02 10:29:14.533346 2026] [:error] [pid 23872:tid 23888] [client 94.187.171.125:54101] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT1-kzkQFuA2qBk8UOtDAAAAY0"]
[Mon Mar 02 10:30:24.642831 2026] [:error] [pid 28794:tid 28856] [client 94.187.171.125:54824] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT2QKVy2qpaelbUob1yfQAAAFQ"]
[Mon Mar 02 10:31:34.334965 2026] [:error] [pid 31257:tid 31267] [client 94.187.171.125:55577] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT2hv-JFLfishX45N8qqAAAAQQ"]
[Mon Mar 02 10:32:46.279897 2026] [:error] [pid 23872:tid 23889] [client 94.187.171.125:56383] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT2zkzkQFuA2qBk8UOwGwAAAY4"]
[Mon Mar 02 10:33:49.942515 2026] [:error] [pid 21575:tid 21586] [client 94.187.171.125:57048] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT3DSrocdArcJqFfImyTQAAAUc"]
[Mon Mar 02 10:34:55.209782 2026] [:error] [pid 28908:tid 28922] [client 94.187.171.125:57726] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT3T4qJmC8ih_lQQnADSwAAAMw"]
[Mon Mar 02 10:36:06.266629 2026] [:error] [pid 31257:tid 31264] [client 94.187.171.125:58394] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT3lv-JFLfishX45N8tLQAAAQE"]
[Mon Mar 02 10:37:10.619620 2026] [:error] [pid 31257:tid 31275] [client 94.187.171.125:58877] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT31v-JFLfishX45N8t8QAAAQw"]
[Mon Mar 02 10:38:15.100314 2026] [:error] [pid 28908:tid 28915] [client 94.187.171.125:59520] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT4F4qJmC8ih_lQQnAEwwAAAMU"]
[Mon Mar 02 10:39:20.684853 2026] [:error] [pid 21575:tid 21590] [client 94.187.171.125:60377] [client 94.187.171.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.171.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaT4WCrocdArcJqFfIm1GAAAAUs"]
[Mon Mar 02 11:54:12.364103 2026] [:error] [pid 23872:tid 23885] [client 20.205.120.43:1122] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaUJ5EzkQFuA2qBk8UP_ogAAAYo"]
[Mon Mar 02 11:54:12.884749 2026] [:error] [pid 23872:tid 23888] [client 20.205.120.43:7449] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaUJ5EzkQFuA2qBk8UP_pAAAAY0"]
[Mon Mar 02 11:54:13.390220 2026] [:error] [pid 21575:tid 21586] [client 20.205.120.43:7424] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaUJ5SrocdArcJqFfIkB3wAAAUc"]
[Mon Mar 02 11:54:13.938447 2026] [:error] [pid 21575:tid 21587] [client 20.205.120.43:2104] [client 20.205.120.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaUJ5SrocdArcJqFfIkB4wAAAUg"]
[Mon Mar 02 12:47:31.749999 2026] [:error] [pid 28908:tid 28931] [client 146.190.117.220:52053] [client 146.190.117.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.117.220, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aaUWY4qJmC8ih_lQQnCSegAAANU"]
[Mon Mar 02 13:06:34.170919 2026] [:error] [pid 59601:tid 59646] [client 43.157.46.118:40350] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaUa2sQ1lXfvWN0-ZQk3iAAAAEg"]
[Mon Mar 02 16:37:59.061323 2026] [:error] [pid 28847:tid 28855] [client 43.155.27.244:53058] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaVMZ59xbBq8VfeqVDZzIAAAAMY"]
[Mon Mar 02 19:41:48.435299 2026] [:error] [pid 28847:tid 28851] [client 49.51.183.84:42846] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaV3fJ9xbBq8VfeqVDYDzwAAAMI"]
[Mon Mar 02 19:47:40.102542 2026] [:error] [pid 59734:tid 59739] [client 43.140.247.223:46640] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaV43JeWQx7ZQG9NybEQsAAAAUM"]
[Mon Mar 02 19:49:07.899138 2026] [:error] [pid 59602:tid 59675] [client 20.104.86.139:33550] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaV5MzMtSo_Fr0lHnSZJ8wAAAIo"]
[Mon Mar 02 19:49:08.826949 2026] [:error] [pid 28847:tid 28855] [client 20.104.86.139:37374] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaV5NJ9xbBq8VfeqVDYKCQAAAMY"]
[Mon Mar 02 19:49:09.684863 2026] [:error] [pid 59701:tid 59725] [client 20.104.86.139:37362] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaV5NeUmTDVso96U9_LEKQAAARU"]
[Mon Mar 02 19:49:10.529017 2026] [:error] [pid 28847:tid 28851] [client 20.104.86.139:33576] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aaV5Np9xbBq8VfeqVDYKDwAAAMI"]
[Mon Mar 02 20:19:01.736474 2026] [:error] [pid 28847:tid 28865] [client 91.230.225.111:40225] [client 91.230.225.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "aaWANZ9xbBq8VfeqVDYengAAANA"]
[Mon Mar 02 20:19:02.360642 2026] [:error] [pid 59701:tid 59721] [client 185.192.71.163:47871] [client 185.192.71.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "aaWANuUmTDVso96U9_LLlgAAARE"]
[Mon Mar 02 20:19:03.042289 2026] [:error] [pid 59701:tid 59710] [client 185.192.71.149:65045] [client 185.192.71.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "aaWAN-UmTDVso96U9_LLmAAAAQY"]
[Mon Mar 02 20:19:03.554322 2026] [:error] [pid 59701:tid 59714] [client 185.192.71.155:44109] [client 185.192.71.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/txets.php"] [unique_id "aaWAN-UmTDVso96U9_LLmwAAAQo"]
[Mon Mar 02 20:19:04.043768 2026] [:error] [pid 28847:tid 28856] [client 185.192.71.162:32493] [client 185.192.71.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "aaWAOJ9xbBq8VfeqVDYeoAAAAMc"]
[Mon Mar 02 21:40:39.332973 2026] [:error] [pid 59701:tid 59719] [client 20.151.217.152:55037] [client 20.151.217.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaWTV-UmTDVso96U9_LePgAAAQ8"]
[Mon Mar 02 21:40:43.338549 2026] [:error] [pid 59734:tid 59746] [client 20.151.217.152:54915] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aaWTW5eWQx7ZQG9NybEwOgAAAUo"]
[Mon Mar 02 21:40:43.751219 2026] [:error] [pid 59734:tid 59743] [client 20.151.217.152:55003] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aaWTW5eWQx7ZQG9NybEwPAAAAUc"]
[Mon Mar 02 21:40:44.161197 2026] [:error] [pid 59600:tid 59614] [client 20.151.217.152:54954] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aaWTXIQ5lE4yocV9IBdvtQAAAAU"]
[Mon Mar 02 21:40:44.576553 2026] [:error] [pid 59600:tid 59617] [client 20.151.217.152:55013] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/011i.php"] [unique_id "aaWTXIQ5lE4yocV9IBdvuAAAAAg"]
[Mon Mar 02 21:40:44.993296 2026] [:error] [pid 59600:tid 59611] [client 20.151.217.152:55017] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaWTXIQ5lE4yocV9IBdvvwAAAAI"]
[Mon Mar 02 21:40:45.407702 2026] [:error] [pid 28847:tid 28864] [client 20.151.217.152:54922] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaWTXZ9xbBq8VfeqVDZi2QAAAM8"]
[Mon Mar 02 21:40:45.818869 2026] [:error] [pid 28847:tid 28850] [client 20.151.217.152:54918] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaWTXZ9xbBq8VfeqVDZi3AAAAME"]
[Mon Mar 02 21:40:46.231451 2026] [:error] [pid 59701:tid 59707] [client 20.151.217.152:54932] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaWTXuUmTDVso96U9_LeRQAAAQM"]
[Mon Mar 02 21:40:46.645858 2026] [:error] [pid 59600:tid 59612] [client 20.151.217.152:54924] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aaWTXoQ5lE4yocV9IBdvxgAAAAM"]
[Mon Mar 02 21:40:47.057260 2026] [:error] [pid 59734:tid 59738] [client 20.151.217.152:54928] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aaWTX5eWQx7ZQG9NybEwTgAAAUI"]
[Mon Mar 02 21:40:47.472074 2026] [:error] [pid 59701:tid 59712] [client 20.151.217.152:54938] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aaWTX-UmTDVso96U9_LeRwAAAQg"]
[Mon Mar 02 21:40:47.882719 2026] [:error] [pid 59701:tid 59726] [client 20.151.217.152:54979] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aaWTX-UmTDVso96U9_LeSQAAARY"]
[Mon Mar 02 21:40:48.303716 2026] [:error] [pid 59701:tid 59728] [client 20.151.217.152:55036] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa.php"] [unique_id "aaWTYOUmTDVso96U9_LeTQAAARg"]
[Mon Mar 02 22:11:17.236312 2026] [:error] [pid 28847:tid 28857] [client 98.159.37.18:57747] [client 98.159.37.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaWahZ9xbBq8VfeqVDZ6TgAAAMg"]
[Mon Mar 02 22:11:21.098235 2026] [:error] [pid 59601:tid 59641] [client 216.24.210.84:23019] [client 216.24.210.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaWaicQ1lXfvWN0-ZQmdlQAAAEM"]
[Mon Mar 02 22:11:27.842957 2026] [:error] [pid 59701:tid 59724] [client 173.239.218.11:44197] [client 173.239.218.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaWaj-UmTDVso96U9_LliwAAARQ"]
[Mon Mar 02 22:11:31.867874 2026] [:error] [pid 59701:tid 59728] [client 173.239.218.4:35903] [client 173.239.218.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaWak-UmTDVso96U9_LlkAAAARg"]
[Mon Mar 02 22:11:39.822366 2026] [:error] [pid 59701:tid 59728] [client 216.24.210.71:24373] [client 216.24.210.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaWam-UmTDVso96U9_LlnAAAARg"]
[Mon Mar 02 22:11:41.296384 2026] [:error] [pid 28847:tid 28859] [client 216.24.210.46:45313] [client 216.24.210.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaWanZ9xbBq8VfeqVDZ6cQAAAMo"]
[Mon Mar 02 22:11:41.701279 2026] [:error] [pid 59600:tid 59627] [client 173.239.218.13:25995] [client 173.239.218.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaWanYQ5lE4yocV9IBeA-gAAABI"]
[Mon Mar 02 22:11:42.100522 2026] [:error] [pid 59600:tid 59621] [client 98.159.37.19:32791] [client 98.159.37.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaWanoQ5lE4yocV9IBeA_AAAAAw"]
[Mon Mar 02 22:11:42.510977 2026] [:error] [pid 28847:tid 28857] [client 173.239.218.10:22599] [client 173.239.218.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaWanp9xbBq8VfeqVDZ6cgAAAMg"]
[Mon Mar 02 22:11:42.924869 2026] [:error] [pid 28847:tid 28870] [client 216.24.210.94:65077] [client 216.24.210.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaWanp9xbBq8VfeqVDZ6cwAAANU"]
[Mon Mar 02 22:11:44.533662 2026] [:error] [pid 28847:tid 28866] [client 216.24.210.73:52409] [client 216.24.210.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaWaoJ9xbBq8VfeqVDZ6fgAAANE"]
[Mon Mar 02 22:11:46.602349 2026] [:error] [pid 59600:tid 59613] [client 216.24.210.80:55587] [client 216.24.210.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aaWaooQ5lE4yocV9IBeBBgAAAAQ"]
[Mon Mar 02 22:11:49.429885 2026] [:error] [pid 28847:tid 28861] [client 98.159.37.18:51309] [client 98.159.37.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaWapZ9xbBq8VfeqVDZ6kQAAAMw"]
[Mon Mar 02 22:11:50.902652 2026] [:error] [pid 59600:tid 59630] [client 98.159.37.13:64923] [client 98.159.37.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaWapoQ5lE4yocV9IBeBEwAAABU"]
[Mon Mar 02 22:11:52.615526 2026] [:error] [pid 59600:tid 59609] [client 216.24.210.70:34439] [client 216.24.210.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaWaqIQ5lE4yocV9IBeBFwAAAAA"]
[Mon Mar 02 22:11:59.623528 2026] [:error] [pid 59601:tid 59653] [client 216.24.210.68:62103] [client 216.24.210.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaWar8Q1lXfvWN0-ZQmdrQAAAE8"]
[Mon Mar 02 22:12:01.316425 2026] [:error] [pid 28847:tid 28857] [client 216.24.210.85:58299] [client 216.24.210.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaWasZ9xbBq8VfeqVDZ60QAAAMg"]
[Mon Mar 02 22:12:04.082059 2026] [:error] [pid 59600:tid 59623] [client 216.24.210.75:33807] [client 216.24.210.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaWatIQ5lE4yocV9IBeBLQAAAA4"]
[Mon Mar 02 22:12:05.688951 2026] [:error] [pid 28847:tid 28850] [client 173.239.218.14:56551] [client 173.239.218.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaWatZ9xbBq8VfeqVDZ67AAAAME"]
[Mon Mar 02 22:12:10.900166 2026] [:error] [pid 59600:tid 59626] [client 98.159.37.14:43385] [client 98.159.37.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaWauoQ5lE4yocV9IBeBPgAAABE"]
[Mon Mar 02 22:12:14.189931 2026] [:error] [pid 59701:tid 59704] [client 216.24.210.92:22597] [client 216.24.210.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaWavuUmTDVso96U9_LlswAAAQA"]
[Mon Mar 02 22:12:15.925806 2026] [:error] [pid 28847:tid 28856] [client 173.239.218.10:21375] [client 173.239.218.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaWav59xbBq8VfeqVDZ7PQAAAMc"]
[Mon Mar 02 22:12:17.779260 2026] [:error] [pid 59600:tid 59619] [client 216.24.210.81:34157] [client 216.24.210.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaWawYQ5lE4yocV9IBeBVAAAAAo"]
[Mon Mar 02 22:12:18.149500 2026] [:error] [pid 59600:tid 59609] [client 216.24.210.87:47899] [client 216.24.210.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaWawoQ5lE4yocV9IBeBYwAAAAA"]
[Mon Mar 02 22:12:22.096138 2026] [:error] [pid 59734:tid 59759] [client 98.159.37.18:53453] [client 98.159.37.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaWaxpeWQx7ZQG9NybE6nAAAAVc"]
[Mon Mar 02 22:12:22.540117 2026] [:error] [pid 28847:tid 28859] [client 173.239.218.10:43077] [client 173.239.218.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaWaxp9xbBq8VfeqVDZ75gAAAMo"]
[Mon Mar 02 22:12:22.967495 2026] [:error] [pid 59600:tid 59611] [client 216.24.210.91:57591] [client 216.24.210.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaWaxoQ5lE4yocV9IBeBtQAAAAI"]
[Mon Mar 02 22:12:33.333571 2026] [autoindex:error] [pid 59734:tid 59754] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:33.775034 2026] [autoindex:error] [pid 59734:tid 59746] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:33.943905 2026] [autoindex:error] [pid 59734:tid 59745] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:34.123169 2026] [autoindex:error] [pid 59734:tid 59752] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:35.559074 2026] [autoindex:error] [pid 59734:tid 59758] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:35.757574 2026] [autoindex:error] [pid 59734:tid 59738] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:35.971757 2026] [autoindex:error] [pid 59734:tid 59737] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:36.156120 2026] [autoindex:error] [pid 59734:tid 59757] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:36.330633 2026] [autoindex:error] [pid 59734:tid 59748] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:36.521128 2026] [autoindex:error] [pid 59734:tid 59743] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:36.958899 2026] [autoindex:error] [pid 59734:tid 59736] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:38.347299 2026] [autoindex:error] [pid 59734:tid 59742] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:38.602033 2026] [autoindex:error] [pid 59734:tid 59758] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:40.984739 2026] [autoindex:error] [pid 59734:tid 59759] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:41.161181 2026] [autoindex:error] [pid 59734:tid 59754] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:41.355600 2026] [autoindex:error] [pid 59734:tid 59744] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:41.550951 2026] [autoindex:error] [pid 59734:tid 59746] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:42.870516 2026] [autoindex:error] [pid 59734:tid 59751] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:43.087869 2026] [autoindex:error] [pid 59734:tid 59752] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:44.343631 2026] [autoindex:error] [pid 59734:tid 59758] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:46.775498 2026] [autoindex:error] [pid 59734:tid 59747] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:47.012342 2026] [autoindex:error] [pid 59734:tid 59738] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:47.201241 2026] [autoindex:error] [pid 59734:tid 59753] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:55.236112 2026] [autoindex:error] [pid 59734:tid 59758] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:56.723741 2026] [autoindex:error] [pid 59734:tid 59757] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:56.932263 2026] [autoindex:error] [pid 59734:tid 59741] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:57.507081 2026] [autoindex:error] [pid 59734:tid 59760] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:57.725485 2026] [autoindex:error] [pid 59734:tid 59754] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:12:57.917046 2026] [autoindex:error] [pid 59734:tid 59743] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:01.584607 2026] [autoindex:error] [pid 59734:tid 59749] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:02.899502 2026] [autoindex:error] [pid 59734:tid 59758] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:29.654404 2026] [autoindex:error] [pid 59734:tid 59758] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:29.847926 2026] [autoindex:error] [pid 59734:tid 59749] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:30.023961 2026] [autoindex:error] [pid 59734:tid 59752] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:30.234419 2026] [autoindex:error] [pid 59734:tid 59742] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:30.423135 2026] [autoindex:error] [pid 59734:tid 59755] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:30.642493 2026] [autoindex:error] [pid 59734:tid 59757] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:30.947016 2026] [autoindex:error] [pid 59734:tid 59756] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:31.179168 2026] [autoindex:error] [pid 59734:tid 59747] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:32.473534 2026] [autoindex:error] [pid 59734:tid 59736] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:33.694991 2026] [autoindex:error] [pid 59734:tid 59758] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:33.887649 2026] [autoindex:error] [pid 59734:tid 59752] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:34.071020 2026] [autoindex:error] [pid 59734:tid 59742] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:35.342958 2026] [autoindex:error] [pid 59734:tid 59747] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:35.513627 2026] [autoindex:error] [pid 59734:tid 59750] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:35.764381 2026] [autoindex:error] [pid 59734:tid 59737] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:13:35.955892 2026] [autoindex:error] [pid 59734:tid 59753] [client 173.239.218.5:26819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:03.244960 2026] [autoindex:error] [pid 59734:tid 59759] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:16.316008 2026] [autoindex:error] [pid 59734:tid 59743] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:20.839210 2026] [autoindex:error] [pid 59734:tid 59750] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:21.033523 2026] [autoindex:error] [pid 59734:tid 59747] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:25.531023 2026] [autoindex:error] [pid 59734:tid 59752] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:25.997705 2026] [autoindex:error] [pid 59734:tid 59747] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:26.175006 2026] [autoindex:error] [pid 59734:tid 59753] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:26.339898 2026] [autoindex:error] [pid 59734:tid 59749] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:26.562236 2026] [autoindex:error] [pid 59734:tid 59738] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:26.772701 2026] [autoindex:error] [pid 59734:tid 59744] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:26.941553 2026] [autoindex:error] [pid 59734:tid 59745] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:27.217699 2026] [autoindex:error] [pid 59734:tid 59746] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:27.406386 2026] [autoindex:error] [pid 59734:tid 59736] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:14:47.564907 2026] [autoindex:error] [pid 59734:tid 59748] [client 216.24.210.73:41321] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 22:53:36.372847 2026] [:error] [pid 59734:tid 59758] [client 24.68.167.246:53817] [client 24.68.167.246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaWkcJeWQx7ZQG9NybFH1wAAAVY"]
[Mon Mar 02 22:55:20.622945 2026] [:error] [pid 59602:tid 59688] [client 24.68.167.246:54725] [client 24.68.167.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.68.167.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaWk2DMtSo_Fr0lHnSaVHgAAAJc"]
[Mon Mar 02 22:57:34.292219 2026] [:error] [pid 28847:tid 28863] [client 20.151.217.152:49511] [client 20.151.217.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaWlXp9xbBq8VfeqVDacBwAAAM4"]
[Mon Mar 02 22:57:46.890160 2026] [:error] [pid 59600:tid 59623] [client 20.151.217.152:49507] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaWlaoQ5lE4yocV9IBebiwAAAA4"]
[Mon Mar 02 22:57:47.301987 2026] [:error] [pid 59734:tid 59756] [client 20.151.217.152:49483] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaWla5eWQx7ZQG9NybFI8wAAAVQ"]
[Mon Mar 02 22:57:47.713196 2026] [:error] [pid 59602:tid 59676] [client 20.151.217.152:49501] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as1337.php"] [unique_id "aaWlazMtSo_Fr0lHnSaV-QAAAIs"]
[Mon Mar 02 22:57:48.160444 2026] [:error] [pid 59602:tid 59669] [client 20.151.217.152:49516] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaWlbDMtSo_Fr0lHnSaV-wAAAIQ"]
[Mon Mar 02 22:57:48.585048 2026] [:error] [pid 59600:tid 59617] [client 20.151.217.152:49490] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaWlbIQ5lE4yocV9IBebjgAAAAg"]
[Mon Mar 02 22:57:49.002353 2026] [:error] [pid 28847:tid 28861] [client 20.151.217.152:49499] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaWlbZ9xbBq8VfeqVDacKAAAAMw"]
[Mon Mar 02 22:57:49.416469 2026] [:error] [pid 28847:tid 28873] [client 20.151.217.152:49428] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zeal.php"] [unique_id "aaWlbZ9xbBq8VfeqVDacKwAAANg"]
[Mon Mar 02 22:57:49.831574 2026] [:error] [pid 59601:tid 59656] [client 20.151.217.152:49476] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aaWlbcQ1lXfvWN0-ZQmnhwAAAFI"]
[Mon Mar 02 22:57:50.241093 2026] [:error] [pid 59602:tid 59670] [client 20.151.217.152:49534] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aaWlbjMtSo_Fr0lHnSaV_gAAAIU"]
[Mon Mar 02 22:57:50.652645 2026] [:error] [pid 59602:tid 59673] [client 20.151.217.152:49494] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aaWlbjMtSo_Fr0lHnSaWAQAAAIg"]
[Mon Mar 02 22:57:51.068342 2026] [:error] [pid 28847:tid 28872] [client 20.151.217.152:49421] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asf.php"] [unique_id "aaWlb59xbBq8VfeqVDacLQAAANc"]
[Mon Mar 02 22:58:09.069723 2026] [:error] [pid 59602:tid 59666] [client 170.106.179.68:35308] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaWlgTMtSo_Fr0lHnSaWKQAAAIE"]
[Mon Mar 02 23:30:47.522628 2026] [:error] [pid 59734:tid 59754] [client 20.104.86.139:33097] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaWtJ5eWQx7ZQG9NybFQ2gAAAVI"]
[Mon Mar 02 23:30:48.380322 2026] [:error] [pid 28847:tid 28868] [client 20.104.86.139:33149] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaWtKJ9xbBq8VfeqVDazQAAAANM"]
[Mon Mar 02 23:30:49.211377 2026] [:error] [pid 28847:tid 28866] [client 20.104.86.139:34939] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaWtKZ9xbBq8VfeqVDazSwAAANE"]
[Mon Mar 02 23:30:50.039331 2026] [:error] [pid 28847:tid 28867] [client 20.104.86.139:6093] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "aaWtKp9xbBq8VfeqVDazUwAAANI"]
[Mon Mar 02 23:33:02.773212 2026] [:error] [pid 59701:tid 59713] [client 167.249.108.177:44383] [client 167.249.108.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.249.108.177, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaWtruUmTDVso96U9_L5LAAAAQk"]
[Mon Mar 02 23:36:51.071923 2026] [:error] [pid 28847:tid 28873] [client 167.249.108.177:44787] [client 167.249.108.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaWuk59xbBq8VfeqVDa3CwAAANg"]
[Tue Mar 03 01:30:22.213915 2026] [:error] [pid 60214:tid 60235] [client 20.151.217.152:6632] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXJLomuQ_v4S3RkLisETAAAARM"]
[Tue Mar 03 01:30:22.624411 2026] [:error] [pid 18558:tid 18870] [client 20.151.217.152:6637] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXJLrO1kQHjTOLioCnDnwAAAJA"]
[Tue Mar 03 01:30:23.035556 2026] [:error] [pid 60214:tid 60234] [client 20.151.217.152:6608] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXJL4muQ_v4S3RkLisEUgAAARI"]
[Tue Mar 03 01:30:23.448190 2026] [:error] [pid 60214:tid 60224] [client 20.151.217.152:6604] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXJL4muQ_v4S3RkLisEVAAAAQg"]
[Tue Mar 03 02:36:05.608651 2026] [:error] [pid 18558:tid 18856] [client 182.42.105.85:33510] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaXYlbO1kQHjTOLioCnhIAAAAII"]
[Tue Mar 03 02:39:14.885791 2026] [:error] [pid 60214:tid 60219] [client 20.151.114.166:14504] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaXZUomuQ_v4S3RkLitAMwAAAQM"]
[Tue Mar 03 02:39:15.711818 2026] [:error] [pid 60214:tid 60217] [client 20.151.114.166:14465] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaXZU4muQ_v4S3RkLitANwAAAQE"]
[Tue Mar 03 02:39:16.542451 2026] [:error] [pid 18960:tid 18980] [client 20.151.114.166:14520] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaXZVNCu09icM9oIHwANBQAAANE"]
[Tue Mar 03 02:39:17.393090 2026] [:error] [pid 60214:tid 60216] [client 20.151.114.166:14489] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aaXZVYmuQ_v4S3RkLitAPwAAAQA"]
[Tue Mar 03 02:43:57.097810 2026] [:error] [pid 18557:tid 18828] [client 94.154.239.69:55224] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aaXabdngZqR9Tp8JM0F0YQAAAEY"]
[Tue Mar 03 02:43:59.725360 2026] [:error] [pid 18558:tid 18872] [client 94.154.239.69:49944] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aaXab7O1kQHjTOLioCnjegAAAJI"]
[Tue Mar 03 02:44:02.224245 2026] [:error] [pid 18556:tid 18771] [client 94.154.239.69:49946] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aaXacn9AYyTTd2eEk9FRowAAABA"]
[Tue Mar 03 02:44:04.790911 2026] [:error] [pid 18556:tid 18778] [client 94.154.239.69:49954] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aaXadH9AYyTTd2eEk9FRpAAAABY"]
[Tue Mar 03 02:44:07.299484 2026] [:error] [pid 18557:tid 18846] [client 94.154.239.69:40972] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aaXad9ngZqR9Tp8JM0F0awAAAFc"]
[Tue Mar 03 02:44:10.466316 2026] [:error] [pid 18558:tid 18860] [client 94.154.239.69:40980] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aaXaerO1kQHjTOLioCnjjAAAAIY"]
[Tue Mar 03 02:44:13.130476 2026] [:error] [pid 18557:tid 18843] [client 94.154.239.69:40982] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aaXafdngZqR9Tp8JM0F0cgAAAFQ"]
[Tue Mar 03 02:44:15.730380 2026] [:error] [pid 60214:tid 60227] [client 94.154.239.69:40996] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aaXaf4muQ_v4S3RkLitDwwAAAQs"]
[Tue Mar 03 02:44:18.357933 2026] [:error] [pid 60214:tid 60235] [client 94.154.239.69:43208] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aaXagomuQ_v4S3RkLitD0QAAARM"]
[Tue Mar 03 02:44:21.087907 2026] [:error] [pid 18558:tid 18876] [client 94.154.239.69:43216] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aaXahbO1kQHjTOLioCnjmwAAAJY"]
[Tue Mar 03 02:44:23.575037 2026] [:error] [pid 18557:tid 18833] [client 94.154.239.69:43218] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aaXah9ngZqR9Tp8JM0F0egAAAEo"]
[Tue Mar 03 02:44:26.147516 2026] [:error] [pid 18960:tid 18984] [client 94.154.239.69:55118] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aaXaitCu09icM9oIHwAPuwAAANU"]
[Tue Mar 03 02:44:29.402819 2026] [:error] [pid 18556:tid 18769] [client 94.154.239.69:55120] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aaXajX9AYyTTd2eEk9FRwAAAAA4"]
[Tue Mar 03 02:44:31.878561 2026] [:error] [pid 18558:tid 18858] [client 94.154.239.69:55130] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aaXaj7O1kQHjTOLioCnjqgAAAIQ"]
[Tue Mar 03 02:44:34.413655 2026] [:error] [pid 18960:tid 18964] [client 94.154.239.69:55146] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aaXaktCu09icM9oIHwAP1AAAAME"]
[Tue Mar 03 02:44:36.784781 2026] [:error] [pid 60214:tid 60219] [client 94.154.239.69:52492] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aaXalImuQ_v4S3RkLitD7AAAAQM"]
[Tue Mar 03 02:44:39.320490 2026] [:error] [pid 60214:tid 60218] [client 94.154.239.69:52508] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aaXal4muQ_v4S3RkLitD9QAAAQI"]
[Tue Mar 03 02:44:42.066563 2026] [:error] [pid 18960:tid 18967] [client 94.154.239.69:52522] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aaXamtCu09icM9oIHwAP6AAAAMQ"]
[Tue Mar 03 02:44:44.792973 2026] [:error] [pid 18960:tid 18980] [client 94.154.239.69:52534] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aaXanNCu09icM9oIHwAP9QAAANE"]
[Tue Mar 03 02:44:47.479926 2026] [:error] [pid 60214:tid 60226] [client 94.154.239.69:59292] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aaXan4muQ_v4S3RkLitEEgAAAQo"]
[Tue Mar 03 02:44:50.066470 2026] [:error] [pid 60214:tid 60219] [client 94.154.239.69:59300] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aaXaoomuQ_v4S3RkLitEIAAAAQM"]
[Tue Mar 03 04:47:47.727790 2026] [:error] [pid 20872:tid 20885] [client 104.28.214.113:20063] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aaX3c4lYbNk3E_3CgBhRzQAAAQs"]
[Tue Mar 03 05:41:12.034739 2026] [:error] [pid 36783:tid 36812] [client 49.51.47.100:41964] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaYD-D4tNYh5NtLaTXf4tAAAABI"]
[Tue Mar 03 06:57:25.209991 2026] [:error] [pid 26186:tid 26200] [client 45.91.23.88:38513] [client 45.91.23.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaYV1fbZCNtk8wDak9e25QAAAUw"]
[Tue Mar 03 06:57:30.046061 2026] [:error] [pid 36785:tid 36853] [client 45.91.23.69:20247] [client 45.91.23.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaYV2nhJejauENG9qTiblwAAAIM"]
[Tue Mar 03 06:57:39.430794 2026] [:error] [pid 26186:tid 26194] [client 45.91.23.98:32473] [client 45.91.23.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aaYV4_bZCNtk8wDak9e2-QAAAUY"]
[Tue Mar 03 06:57:45.848182 2026] [:error] [pid 14042:tid 14052] [client 45.91.23.53:39731] [client 45.91.23.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaYV6WeHGCmSEiIBcK4sBQAAAYg"]
[Tue Mar 03 06:57:55.359755 2026] [:error] [pid 36785:tid 36860] [client 45.91.23.56:22195] [client 45.91.23.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaYV83hJejauENG9qTibvgAAAIo"]
[Tue Mar 03 06:57:57.603047 2026] [:error] [pid 14042:tid 14049] [client 45.91.23.74:63561] [client 45.91.23.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaYV9WeHGCmSEiIBcK4sDwAAAYU"]
[Tue Mar 03 06:57:58.455079 2026] [:error] [pid 14042:tid 14046] [client 45.91.23.102:49647] [client 45.91.23.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaYV9meHGCmSEiIBcK4sEQAAAYI"]
[Tue Mar 03 06:57:59.245323 2026] [:error] [pid 26186:tid 26192] [client 45.91.23.62:65263] [client 45.91.23.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaYV9_bZCNtk8wDak9e3HQAAAUQ"]
[Tue Mar 03 06:57:59.899094 2026] [:error] [pid 26186:tid 26194] [client 45.91.23.61:20437] [client 45.91.23.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaYV9_bZCNtk8wDak9e3IAAAAUY"]
[Tue Mar 03 06:58:00.518788 2026] [:error] [pid 36897:tid 36903] [client 45.91.23.90:45833] [client 45.91.23.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaYV-CZC69_8eM0Uouvt7gAAAME"]
[Tue Mar 03 06:58:03.956148 2026] [:error] [pid 36783:tid 36801] [client 45.91.23.61:31313] [client 45.91.23.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaYV-z4tNYh5NtLaTXcFIAAAAAc"]
[Tue Mar 03 06:58:08.116569 2026] [:error] [pid 14042:tid 14065] [client 45.91.23.66:40833] [client 45.91.23.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aaYWAGeHGCmSEiIBcK4sLwAAAZU"]
[Tue Mar 03 06:58:12.411055 2026] [:error] [pid 26186:tid 26202] [client 45.91.23.59:48797] [client 45.91.23.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaYWBPbZCNtk8wDak9e3MwAAAU4"]
[Tue Mar 03 06:58:14.513559 2026] [:error] [pid 36897:tid 36924] [client 45.91.23.81:59225] [client 45.91.23.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaYWBiZC69_8eM0Uouvt_AAAANY"]
[Tue Mar 03 06:58:17.036376 2026] [:error] [pid 14042:tid 14048] [client 45.91.23.88:26979] [client 45.91.23.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaYWCWeHGCmSEiIBcK4sUAAAAYQ"]
[Tue Mar 03 06:58:26.314010 2026] [:error] [pid 20872:tid 20878] [client 45.91.23.65:55519] [client 45.91.23.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaYWEolYbNk3E_3CgBiQBgAAAQQ"]
[Tue Mar 03 06:58:28.579300 2026] [:error] [pid 14042:tid 14062] [client 45.91.23.80:61983] [client 45.91.23.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaYWFGeHGCmSEiIBcK4sZgAAAZI"]
[Tue Mar 03 06:58:32.611427 2026] [:error] [pid 20872:tid 20874] [client 45.91.23.53:62771] [client 45.91.23.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaYWGIlYbNk3E_3CgBiQFQAAAQA"]
[Tue Mar 03 06:58:34.803442 2026] [:error] [pid 14042:tid 14050] [client 45.91.23.65:60291] [client 45.91.23.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaYWGmeHGCmSEiIBcK4sdgAAAYY"]
[Tue Mar 03 06:58:41.113486 2026] [:error] [pid 36897:tid 36918] [client 45.91.23.102:26253] [client 45.91.23.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaYWISZC69_8eM0UouvuEgAAANA"]
[Tue Mar 03 06:58:43.401794 2026] [:error] [pid 36897:tid 36903] [client 45.91.23.94:54765] [client 45.91.23.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaYWIyZC69_8eM0UouvuFgAAAME"]
[Tue Mar 03 06:58:45.574237 2026] [:error] [pid 26186:tid 26199] [client 45.91.23.55:45673] [client 45.91.23.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaYWJfbZCNtk8wDak9e3dAAAAUs"]
[Tue Mar 03 06:58:46.068445 2026] [:error] [pid 20872:tid 20898] [client 45.91.23.88:53725] [client 45.91.23.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaYWJolYbNk3E_3CgBiQKwAAARg"]
[Tue Mar 03 06:58:46.713683 2026] [:error] [pid 36784:tid 36840] [client 45.91.23.75:48709] [client 45.91.23.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaYWJnNeKOSGbW9kDgTaKwAAAFE"]
[Tue Mar 03 06:58:51.606737 2026] [:error] [pid 20872:tid 20895] [client 45.91.23.89:58779] [client 45.91.23.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaYWK4lYbNk3E_3CgBiQPwAAARU"]
[Tue Mar 03 06:58:52.123916 2026] [:error] [pid 20872:tid 20894] [client 45.91.23.102:47129] [client 45.91.23.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaYWLIlYbNk3E_3CgBiQQAAAARQ"]
[Tue Mar 03 06:58:52.715728 2026] [:error] [pid 26186:tid 26200] [client 45.91.23.77:64213] [client 45.91.23.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaYWLPbZCNtk8wDak9e3fwAAAUw"]
[Tue Mar 03 06:59:04.788690 2026] [:error] [pid 26186:tid 26196] [client 45.91.23.76:58465] [client 45.91.23.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aaYWOPbZCNtk8wDak9e3kgAAAUg"]
[Tue Mar 03 06:59:10.108872 2026] [:error] [pid 14042:tid 14061] [client 45.91.23.85:50431] [client 45.91.23.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.91.23.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaYWPmeHGCmSEiIBcK4ssQAAAZE"]
[Tue Mar 03 06:59:26.862601 2026] [:error] [pid 14042:tid 14057] [client 45.91.23.85:50431] [client 45.91.23.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaYWTmeHGCmSEiIBcK4szwAAAY0"]
[Tue Mar 03 06:59:30.026882 2026] [:error] [pid 36784:tid 36833] [client 45.91.23.90:25373] [client 45.91.23.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.91.23.90, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaYWUnNeKOSGbW9kDgTaWQAAAEo"]
[Tue Mar 03 06:59:32.665985 2026] [:error] [pid 36784:tid 36831] [client 45.91.23.90:25373] [client 45.91.23.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aaYWVHNeKOSGbW9kDgTaWwAAAEg"]
[Tue Mar 03 06:59:43.304228 2026] [:error] [pid 26186:tid 26188] [client 45.91.23.74:33161] [client 45.91.23.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaYWX_bZCNtk8wDak9e4AwAAAUA"]
[Tue Mar 03 06:59:54.725737 2026] [:error] [pid 26186:tid 26207] [client 45.91.23.103:21217] [client 45.91.23.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaYWavbZCNtk8wDak9e4ZQAAAVM"]
[Tue Mar 03 06:59:58.364036 2026] [:error] [pid 14042:tid 14048] [client 45.91.23.75:50401] [client 45.91.23.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaYWbmeHGCmSEiIBcK4tJgAAAYQ"]
[Tue Mar 03 07:00:03.122992 2026] [:error] [pid 26186:tid 26209] [client 45.91.23.93:45193] [client 45.91.23.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.91.23.93, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaYWc_bZCNtk8wDak9e4hQAAAVU"]
[Tue Mar 03 07:00:04.985121 2026] [:error] [pid 26186:tid 26198] [client 45.91.23.93:45193] [client 45.91.23.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaYWdPbZCNtk8wDak9e4jwAAAUo"]
[Tue Mar 03 07:00:30.504005 2026] [:error] [pid 26186:tid 26209] [client 45.91.23.105:41607] [client 45.91.23.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaYWjvbZCNtk8wDak9e48wAAAVU"]
[Tue Mar 03 07:00:36.191223 2026] [:error] [pid 36785:tid 36850] [client 45.91.23.93:63709] [client 45.91.23.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.91.23.93, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaYWlHhJejauENG9qTicQAAAAIA"]
[Tue Mar 03 07:00:42.119726 2026] [:error] [pid 36785:tid 36854] [client 45.91.23.93:63709] [client 45.91.23.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaYWmnhJejauENG9qTicTAAAAIQ"]
[Tue Mar 03 07:00:44.466455 2026] [:error] [pid 26186:tid 26194] [client 45.91.23.68:58457] [client 45.91.23.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aaYWnPbZCNtk8wDak9e5OgAAAUY"]
[Tue Mar 03 07:00:48.555538 2026] [:error] [pid 26186:tid 26197] [client 45.91.23.75:43897] [client 45.91.23.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaYWoPbZCNtk8wDak9e5VQAAAUk"]
[Tue Mar 03 07:00:54.457137 2026] [:error] [pid 14042:tid 14048] [client 45.91.23.58:24633] [client 45.91.23.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaYWpmeHGCmSEiIBcK4tggAAAYQ"]
[Tue Mar 03 07:00:55.095060 2026] [:error] [pid 36785:tid 36869] [client 45.91.23.57:21159] [client 45.91.23.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaYWp3hJejauENG9qTicUQAAAJM"]
[Tue Mar 03 07:01:04.080753 2026] [:error] [pid 26186:tid 26204] [client 45.91.23.62:63447] [client 45.91.23.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaYWsPbZCNtk8wDak9e5bgAAAVA"]
[Tue Mar 03 07:01:06.286655 2026] [:error] [pid 36785:tid 36858] [client 45.91.23.65:50561] [client 45.91.23.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaYWsnhJejauENG9qTicVwAAAIg"]
[Tue Mar 03 07:01:11.848922 2026] [:error] [pid 20872:tid 20898] [client 45.91.23.73:58391] [client 45.91.23.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aaYWt4lYbNk3E_3CgBiQ-QAAARg"]
[Tue Mar 03 07:01:16.812360 2026] [:error] [pid 36785:tid 36851] [client 45.91.23.65:22363] [client 45.91.23.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaYWvHhJejauENG9qTicYgAAAIE"]
[Tue Mar 03 07:01:20.773102 2026] [:error] [pid 20872:tid 20884] [client 45.91.23.76:34905] [client 45.91.23.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aaYWwIlYbNk3E_3CgBiRCwAAAQo"]
[Tue Mar 03 07:01:25.838331 2026] [:error] [pid 36783:tid 36799] [client 45.91.23.77:59911] [client 45.91.23.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaYWxT4tNYh5NtLaTXcGJQAAAAU"]
[Tue Mar 03 07:01:37.001399 2026] [:error] [pid 20872:tid 20886] [client 45.91.23.76:35403] [client 45.91.23.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaYW0YlYbNk3E_3CgBiRQAAAAQw"]
[Tue Mar 03 07:01:37.691330 2026] [:error] [pid 26186:tid 26192] [client 45.91.23.101:22929] [client 45.91.23.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaYW0fbZCNtk8wDak9e5zQAAAUQ"]
[Tue Mar 03 07:01:38.332330 2026] [:error] [pid 36897:tid 36907] [client 45.91.23.55:28849] [client 45.91.23.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaYW0iZC69_8eM0UouvuxwAAAMU"]
[Tue Mar 03 07:01:39.039062 2026] [:error] [pid 36783:tid 36809] [client 45.91.23.99:47969] [client 45.91.23.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaYW0z4tNYh5NtLaTXcGKgAAAA8"]
[Tue Mar 03 07:01:41.366760 2026] [:error] [pid 14042:tid 14061] [client 45.91.23.103:55603] [client 45.91.23.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaYW1WeHGCmSEiIBcK4tyAAAAZE"]
[Tue Mar 03 07:01:43.108780 2026] [:error] [pid 36897:tid 36908] [client 45.91.23.72:27589] [client 45.91.23.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaYW1yZC69_8eM0UouvuzAAAAMY"]
[Tue Mar 03 07:01:53.753865 2026] [autoindex:error] [pid 14042:tid 14044] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:01:54.012330 2026] [autoindex:error] [pid 14042:tid 14063] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:01:54.320643 2026] [autoindex:error] [pid 14042:tid 14052] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:01:54.681699 2026] [autoindex:error] [pid 14042:tid 14056] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:01:56.594692 2026] [autoindex:error] [pid 14042:tid 14068] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:01:56.877040 2026] [autoindex:error] [pid 14042:tid 14064] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:01:57.165343 2026] [autoindex:error] [pid 14042:tid 14057] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:01:57.427325 2026] [autoindex:error] [pid 14042:tid 14051] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:01:57.740635 2026] [autoindex:error] [pid 14042:tid 14061] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:01:58.040614 2026] [autoindex:error] [pid 14042:tid 14059] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:01:58.830144 2026] [autoindex:error] [pid 14042:tid 14067] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:00.765727 2026] [autoindex:error] [pid 14042:tid 14052] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:01.261319 2026] [autoindex:error] [pid 14042:tid 14050] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:05.103004 2026] [autoindex:error] [pid 14042:tid 14060] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:05.407683 2026] [autoindex:error] [pid 14042:tid 14045] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:05.800726 2026] [autoindex:error] [pid 14042:tid 14059] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:06.090093 2026] [autoindex:error] [pid 14042:tid 14068] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:08.271535 2026] [autoindex:error] [pid 14042:tid 14065] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:08.603330 2026] [autoindex:error] [pid 14042:tid 14062] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:10.522776 2026] [autoindex:error] [pid 14042:tid 14051] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:13.552356 2026] [autoindex:error] [pid 14042:tid 14047] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:13.810411 2026] [autoindex:error] [pid 14042:tid 14051] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:14.072515 2026] [autoindex:error] [pid 14042:tid 14046] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:22.792471 2026] [autoindex:error] [pid 14042:tid 14065] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:24.773360 2026] [autoindex:error] [pid 14042:tid 14050] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:25.247722 2026] [autoindex:error] [pid 14042:tid 14055] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:26.301717 2026] [autoindex:error] [pid 14042:tid 14051] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:26.611880 2026] [autoindex:error] [pid 14042:tid 14044] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:26.902831 2026] [autoindex:error] [pid 14042:tid 14065] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:31.996177 2026] [autoindex:error] [pid 14042:tid 14060] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:02:33.942889 2026] [autoindex:error] [pid 14042:tid 14047] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:09.591824 2026] [autoindex:error] [pid 14042:tid 14060] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:09.885129 2026] [autoindex:error] [pid 14042:tid 14049] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:10.256123 2026] [autoindex:error] [pid 14042:tid 14051] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:10.608844 2026] [autoindex:error] [pid 14042:tid 14066] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:10.919192 2026] [autoindex:error] [pid 14042:tid 14055] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:11.298484 2026] [autoindex:error] [pid 14042:tid 14052] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:11.696489 2026] [autoindex:error] [pid 14042:tid 14046] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:12.000835 2026] [autoindex:error] [pid 14042:tid 14054] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:13.619169 2026] [autoindex:error] [pid 14042:tid 14068] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:15.371133 2026] [autoindex:error] [pid 14042:tid 14062] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:15.788857 2026] [autoindex:error] [pid 14042:tid 14056] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:16.188050 2026] [autoindex:error] [pid 14042:tid 14044] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:17.944116 2026] [autoindex:error] [pid 14042:tid 14060] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:18.275218 2026] [autoindex:error] [pid 14042:tid 14051] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:18.674115 2026] [autoindex:error] [pid 14042:tid 14055] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:19.036304 2026] [autoindex:error] [pid 14042:tid 14054] [client 45.91.23.58:64689] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:03:54.663481 2026] [autoindex:error] [pid 26186:tid 26204] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:11.009853 2026] [autoindex:error] [pid 26186:tid 26197] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:17.405551 2026] [autoindex:error] [pid 26186:tid 26189] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:17.716144 2026] [autoindex:error] [pid 26186:tid 26195] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:25.349936 2026] [autoindex:error] [pid 26186:tid 26192] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:25.597366 2026] [autoindex:error] [pid 26186:tid 26191] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:25.941532 2026] [autoindex:error] [pid 26186:tid 26189] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:26.191749 2026] [autoindex:error] [pid 26186:tid 26188] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:26.513826 2026] [autoindex:error] [pid 26186:tid 26212] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:26.755657 2026] [autoindex:error] [pid 26186:tid 26190] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:27.030725 2026] [autoindex:error] [pid 26186:tid 26206] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:27.295897 2026] [autoindex:error] [pid 26186:tid 26211] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:27.538808 2026] [autoindex:error] [pid 26186:tid 26196] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 07:04:56.100921 2026] [autoindex:error] [pid 26186:tid 26190] [client 45.91.23.80:41789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 12:19:52.200660 2026] [:error] [pid 20872:tid 20889] [client 170.106.197.109:35278] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaZhaIlYbNk3E_3CgBgHjgAAAQ8"]
[Tue Mar 03 14:12:56.182488 2026] [:error] [pid 36785:tid 36870] [client 49.47.217.52:52266] [client 49.47.217.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.217.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaZ76HhJejauENG9qTj-3QAAAJQ"]
[Tue Mar 03 14:14:39.902763 2026] [:error] [pid 14042:tid 14045] [client 122.172.87.81:21604] [client 122.172.87.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.87.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaZ8T2eHGCmSEiIBcK4ovgAAAYE"]
[Tue Mar 03 14:34:22.402207 2026] [:error] [pid 36784:tid 36840] [client 49.47.217.52:10629] [client 49.47.217.52] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaaA7nNeKOSGbW9kDgRVBQAAAFE"]
[Tue Mar 03 14:35:51.430242 2026] [:error] [pid 14042:tid 14066] [client 49.47.217.52:22146] [client 49.47.217.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.217.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaaBR2eHGCmSEiIBcK4svgAAAZY"]
[Tue Mar 03 15:07:58.532315 2026] [:error] [pid 36785:tid 36851] [client 14.215.163.132:38607] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaaIznhJejauENG9qTgl7QAAAIE"]
[Tue Mar 03 15:15:16.783920 2026] [:error] [pid 36785:tid 36872] [client 135.181.213.219:48414] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aaaKhHhJejauENG9qTgqNgAAAJY"]
[Tue Mar 03 15:15:19.411582 2026] [:error] [pid 36897:tid 36921] [client 135.181.213.219:48426] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaaKhyZC69_8eM0Uouu42QAAANM"]
[Tue Mar 03 15:15:21.936625 2026] [:error] [pid 26186:tid 26203] [client 135.181.213.219:55210] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaaKifbZCNtk8wDak9ebXgAAAU8"]
[Tue Mar 03 15:15:24.523216 2026] [:error] [pid 36785:tid 36869] [client 135.181.213.219:55212] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaaKjHhJejauENG9qTgqRAAAAJM"]
[Tue Mar 03 15:15:26.992367 2026] [:error] [pid 36783:tid 36815] [client 135.181.213.219:55214] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaaKjj4tNYh5NtLaTXdsIwAAABU"]
[Tue Mar 03 15:15:29.485992 2026] [:error] [pid 36783:tid 36801] [client 135.181.213.219:55216] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaaKkT4tNYh5NtLaTXdsJwAAAAc"]
[Tue Mar 03 15:15:32.114970 2026] [:error] [pid 36783:tid 36803] [client 135.181.213.219:3806] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aaaKlD4tNYh5NtLaTXdsKQAAAAk"]
[Tue Mar 03 15:15:34.714112 2026] [:error] [pid 36784:tid 36846] [client 135.181.213.219:3820] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaaKlnNeKOSGbW9kDgRkCAAAAFc"]
[Tue Mar 03 15:15:37.345769 2026] [:error] [pid 36897:tid 36914] [client 135.181.213.219:3828] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaaKmSZC69_8eM0Uouu5BwAAAMw"]
[Tue Mar 03 15:15:39.955370 2026] [:error] [pid 36783:tid 36813] [client 135.181.213.219:3830] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaaKmz4tNYh5NtLaTXdsSwAAABM"]
[Tue Mar 03 15:15:42.576198 2026] [:error] [pid 36784:tid 36835] [client 135.181.213.219:34004] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaaKnnNeKOSGbW9kDgRkEQAAAEw"]
[Tue Mar 03 15:15:45.138082 2026] [:error] [pid 14042:tid 14051] [client 135.181.213.219:34016] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aaaKoWeHGCmSEiIBcK40egAAAYc"]
[Tue Mar 03 15:15:47.760598 2026] [:error] [pid 36784:tid 36843] [client 135.181.213.219:34022] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaaKo3NeKOSGbW9kDgRkFwAAAFQ"]
[Tue Mar 03 15:15:50.424372 2026] [:error] [pid 36785:tid 36871] [client 135.181.213.219:8132] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaaKpnhJejauENG9qTgqdwAAAJU"]
[Tue Mar 03 15:15:53.028818 2026] [:error] [pid 36783:tid 36816] [client 135.181.213.219:8142] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaaKqT4tNYh5NtLaTXdsWgAAABY"]
[Tue Mar 03 15:15:55.526049 2026] [:error] [pid 20872:tid 20880] [client 135.181.213.219:8148] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaaKq4lYbNk3E_3CgBgWmwAAAQY"]
[Tue Mar 03 15:15:58.016629 2026] [:error] [pid 20872:tid 20894] [client 135.181.213.219:8164] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aaaKrolYbNk3E_3CgBgWnAAAARQ"]
[Tue Mar 03 15:16:00.720740 2026] [:error] [pid 36897:tid 36924] [client 135.181.213.219:29976] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aaaKsCZC69_8eM0Uouu5jgAAANY"]
[Tue Mar 03 15:16:03.363039 2026] [:error] [pid 36785:tid 36868] [client 135.181.213.219:29992] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aaaKs3hJejauENG9qTgqjwAAAJI"]
[Tue Mar 03 15:16:05.884460 2026] [:error] [pid 14042:tid 14056] [client 135.181.213.219:30006] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aaaKtWeHGCmSEiIBcK40hAAAAYw"]
[Tue Mar 03 15:16:08.407702 2026] [:error] [pid 36785:tid 36854] [client 135.181.213.219:30020] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaaKuHhJejauENG9qTgqmQAAAIQ"]
[Tue Mar 03 15:16:10.832859 2026] [:error] [pid 26186:tid 26191] [client 135.181.213.219:61718] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aaaKuvbZCNtk8wDak9ebcQAAAUM"]
[Tue Mar 03 15:16:55.497084 2026] [:error] [pid 14042:tid 14061] [client 135.181.213.219:36702] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aaaK52eHGCmSEiIBcK400gAAAZE"]
[Tue Mar 03 15:16:58.033185 2026] [:error] [pid 26186:tid 26205] [client 135.181.213.219:36708] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aaaK6vbZCNtk8wDak9ebkwAAAVE"]
[Tue Mar 03 15:17:00.645161 2026] [:error] [pid 36783:tid 36797] [client 135.181.213.219:51996] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aaaK7D4tNYh5NtLaTXdsjAAAAAM"]
[Tue Mar 03 15:17:03.172318 2026] [:error] [pid 36897:tid 36906] [client 135.181.213.219:52004] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aaaK7yZC69_8eM0Uouu6CAAAAMQ"]
[Tue Mar 03 15:17:05.819080 2026] [:error] [pid 26186:tid 26194] [client 135.181.213.219:52020] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaaK8fbZCNtk8wDak9eboAAAAUY"]
[Tue Mar 03 15:17:08.468207 2026] [:error] [pid 36785:tid 36866] [client 135.181.213.219:52024] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aaaK9HhJejauENG9qTgrZAAAAJA"]
[Tue Mar 03 15:17:10.977949 2026] [:error] [pid 20872:tid 20878] [client 135.181.213.219:52068] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aaaK9olYbNk3E_3CgBgWwAAAAQQ"]
[Tue Mar 03 15:17:13.513945 2026] [:error] [pid 36783:tid 36797] [client 135.181.213.219:52072] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaaK-T4tNYh5NtLaTXdslgAAAAM"]
[Tue Mar 03 15:17:16.063878 2026] [:error] [pid 36783:tid 36802] [client 135.181.213.219:52086] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaaK_D4tNYh5NtLaTXdsoQAAAAg"]
[Tue Mar 03 15:17:18.621965 2026] [:error] [pid 36897:tid 36903] [client 135.181.213.219:52100] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aaaK_iZC69_8eM0Uouu6HgAAAME"]
[Tue Mar 03 15:17:32.708476 2026] [:error] [pid 14042:tid 14053] [client 135.181.213.219:13136] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaaLDGeHGCmSEiIBcK41AQAAAYk"]
[Tue Mar 03 15:17:35.255657 2026] [:error] [pid 36784:tid 36842] [client 135.181.213.219:13150] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaaLD3NeKOSGbW9kDgRklAAAAFM"]
[Tue Mar 03 15:17:37.884702 2026] [:error] [pid 36784:tid 36843] [client 135.181.213.219:13158] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaaLEXNeKOSGbW9kDgRkmgAAAFQ"]
[Tue Mar 03 15:17:40.384098 2026] [:error] [pid 36784:tid 36832] [client 135.181.213.219:33456] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaaLFHNeKOSGbW9kDgRkpAAAAEk"]
[Tue Mar 03 15:17:43.082509 2026] [:error] [pid 26186:tid 26205] [client 135.181.213.219:33464] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaaLF_bZCNtk8wDak9ebtQAAAVE"]
[Tue Mar 03 15:17:45.599071 2026] [:error] [pid 36783:tid 36807] [client 135.181.213.219:33470] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aaaLGT4tNYh5NtLaTXdsvwAAAA0"]
[Tue Mar 03 15:17:48.162313 2026] [:error] [pid 14042:tid 14057] [client 135.181.213.219:33486] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aaaLHGeHGCmSEiIBcK41BwAAAY0"]
[Tue Mar 03 15:17:50.674014 2026] [:error] [pid 20872:tid 20891] [client 135.181.213.219:56130] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aaaLHolYbNk3E_3CgBgW5QAAARE"]
[Tue Mar 03 15:29:08.646564 2026] [:error] [pid 26186:tid 26188] [client 43.153.71.132:39722] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaaNxPbZCNtk8wDak9edMAAAAUA"]
[Tue Mar 03 17:54:56.383437 2026] [:error] [pid 26186:tid 26191] [client 160.178.47.110:61468] [client 160.178.47.110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaav8PbZCNtk8wDak9ewaAAAAUM"]
[Tue Mar 03 17:55:48.210595 2026] [:error] [pid 36783:tid 36796] [client 160.178.47.110:61811] [client 160.178.47.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.178.47.110, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaawJD4tNYh5NtLaTXeRAwAAAAI"]
[Tue Mar 03 17:56:48.072294 2026] [:error] [pid 36784:tid 36846] [client 160.178.47.110:62837] [client 160.178.47.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.178.47.110, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaawYHNeKOSGbW9kDgSWywAAAFc"]
[Tue Mar 03 18:51:37.410905 2026] [:error] [pid 36897:tid 36917] [client 43.130.16.140:36220] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaa9OSZC69_8eM0UousncgAAAM8"]
[Tue Mar 03 19:47:43.330249 2026] [autoindex:error] [pid 36897:tid 36917] [client 20.127.130.112:49342] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:47:43.557635 2026] [:error] [pid 36897:tid 36923] [client 20.127.130.112:49342] [client 20.127.130.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.127.130.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aabKXyZC69_8eM0UoutNEQAAANU"]
[Tue Mar 03 19:47:49.452692 2026] [autoindex:error] [pid 36897:tid 36915] [client 20.127.130.112:49342] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:47:49.673584 2026] [autoindex:error] [pid 36897:tid 36922] [client 20.127.130.112:49342] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:47:51.021896 2026] [autoindex:error] [pid 36897:tid 36917] [client 20.127.130.112:49342] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:47:56.955645 2026] [autoindex:error] [pid 36897:tid 36902] [client 20.127.130.112:49342] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 19:47:58.266667 2026] [:error] [pid 36897:tid 36911] [client 20.127.130.112:49342] [client 20.127.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aabKbiZC69_8eM0UoutNTgAAAMk"]
[Tue Mar 03 19:48:00.496995 2026] [:error] [pid 36783:tid 36799] [client 20.127.130.112:42368] [client 20.127.130.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aabKcD4tNYh5NtLaTXet0wAAAAU"]
[Tue Mar 03 19:48:01.415975 2026] [:error] [pid 36897:tid 36921] [client 20.127.130.112:41063] [client 20.127.130.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aabKcSZC69_8eM0UoutNVwAAANM"]
[Tue Mar 03 19:48:02.298711 2026] [:error] [pid 36897:tid 36920] [client 20.127.130.112:40440] [client 20.127.130.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aabKciZC69_8eM0UoutNXgAAANI"]
[Tue Mar 03 19:48:03.154723 2026] [:error] [pid 36897:tid 36908] [client 20.127.130.112:42409] [client 20.127.130.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aabKcyZC69_8eM0UoutNZAAAAMY"]
[Tue Mar 03 20:02:15.443918 2026] [autoindex:error] [pid 36783:tid 36812] [client 20.151.222.76:50908] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 20:02:15.654012 2026] [:error] [pid 36783:tid 36807] [client 20.151.222.76:50908] [client 20.151.222.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.222.76, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aabNxz4tNYh5NtLaTXexYgAAAA0"]
[Tue Mar 03 20:02:21.600794 2026] [autoindex:error] [pid 36783:tid 36799] [client 20.151.222.76:50908] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 20:02:21.816078 2026] [autoindex:error] [pid 36783:tid 36812] [client 20.151.222.76:50908] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 20:02:23.156154 2026] [autoindex:error] [pid 36783:tid 36816] [client 20.151.222.76:50908] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 20:02:28.727684 2026] [autoindex:error] [pid 36783:tid 36811] [client 20.151.222.76:50908] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 20:02:30.008355 2026] [:error] [pid 36783:tid 36814] [client 20.151.222.76:50908] [client 20.151.222.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aabN1j4tNYh5NtLaTXexfAAAABQ"]
[Tue Mar 03 20:02:32.140867 2026] [:error] [pid 14042:tid 14054] [client 20.151.222.76:50934] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aabN2GeHGCmSEiIBcK5qQAAAAYo"]
[Tue Mar 03 20:02:32.984442 2026] [:error] [pid 62485:tid 62505] [client 20.151.222.76:50911] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aabN2P9R7DZ1ENjPMXRu2wAAAdA"]
[Tue Mar 03 20:02:33.821639 2026] [:error] [pid 26186:tid 26199] [client 20.151.222.76:50918] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aabN2fbZCNtk8wDak9fESQAAAUs"]
[Tue Mar 03 20:02:34.654200 2026] [:error] [pid 36784:tid 36836] [client 20.151.222.76:50579] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aabN2nNeKOSGbW9kDgTBnwAAAE0"]
[Tue Mar 03 20:27:51.803481 2026] [:error] [pid 62485:tid 62505] [client 79.137.67.84:35116] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aabTx_9R7DZ1ENjPMXRydwAAAdA"]
[Tue Mar 03 20:27:54.382212 2026] [:error] [pid 36897:tid 36904] [client 79.137.67.84:54530] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aabTyiZC69_8eM0UoutinQAAAMI"]
[Tue Mar 03 20:27:56.851345 2026] [:error] [pid 26186:tid 26199] [client 79.137.67.84:54534] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aabTzPbZCNtk8wDak9fIhgAAAUs"]
[Tue Mar 03 20:27:59.341900 2026] [:error] [pid 36897:tid 36908] [client 79.137.67.84:54548] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aabTzyZC69_8eM0UoutisAAAAMY"]
[Tue Mar 03 20:28:01.758232 2026] [:error] [pid 36897:tid 36921] [client 79.137.67.84:34182] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aabT0SZC69_8eM0UoutiuAAAANM"]
[Tue Mar 03 20:28:04.308435 2026] [:error] [pid 26186:tid 26194] [client 79.137.67.84:34190] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aabT1PbZCNtk8wDak9fIkQAAAUY"]
[Tue Mar 03 20:28:06.843458 2026] [:error] [pid 36783:tid 36794] [client 79.137.67.84:34202] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aabT1j4tNYh5NtLaTXe2ogAAAAA"]
[Tue Mar 03 20:28:09.418311 2026] [:error] [pid 36784:tid 36837] [client 79.137.67.84:34216] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aabT2XNeKOSGbW9kDgTI3gAAAE4"]
[Tue Mar 03 20:28:11.778855 2026] [:error] [pid 36783:tid 36797] [client 79.137.67.84:50638] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aabT2z4tNYh5NtLaTXe2qQAAAAM"]
[Tue Mar 03 20:28:14.348462 2026] [:error] [pid 26186:tid 26203] [client 79.137.67.84:50650] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aabT3vbZCNtk8wDak9fIoQAAAU8"]
[Tue Mar 03 20:28:16.743695 2026] [:error] [pid 26186:tid 26190] [client 79.137.67.84:50664] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aabT4PbZCNtk8wDak9fIqgAAAUI"]
[Tue Mar 03 20:28:19.128206 2026] [:error] [pid 14042:tid 14057] [client 79.137.67.84:50666] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aabT42eHGCmSEiIBcK5uswAAAY0"]
[Tue Mar 03 20:28:21.668485 2026] [:error] [pid 62485:tid 62510] [client 79.137.67.84:60976] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aabT5f9R7DZ1ENjPMXRyhwAAAdU"]
[Tue Mar 03 20:28:24.033364 2026] [:error] [pid 20872:tid 20888] [client 79.137.67.84:60982] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aabT6IlYbNk3E_3CgBgyygAAAQ4"]
[Tue Mar 03 20:28:26.549454 2026] [:error] [pid 20872:tid 20885] [client 79.137.67.84:60984] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aabT6olYbNk3E_3CgBgyzgAAAQs"]
[Tue Mar 03 20:28:29.079253 2026] [:error] [pid 26186:tid 26193] [client 79.137.67.84:60986] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aabT7fbZCNtk8wDak9fIswAAAUU"]
[Tue Mar 03 20:28:31.475936 2026] [:error] [pid 36785:tid 36865] [client 79.137.67.84:55518] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aabT73hJejauENG9qTjc4AAAAI8"]
[Tue Mar 03 20:28:33.828534 2026] [:error] [pid 36785:tid 36859] [client 79.137.67.84:55534] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aabT8XhJejauENG9qTjc5QAAAIk"]
[Tue Mar 03 20:28:36.338078 2026] [:error] [pid 36897:tid 36905] [client 79.137.67.84:55542] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aabT9CZC69_8eM0Uouti8AAAAMM"]
[Tue Mar 03 20:28:38.708192 2026] [:error] [pid 36785:tid 36868] [client 79.137.67.84:55548] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aabT9nhJejauENG9qTjc7wAAAJI"]
[Tue Mar 03 20:28:41.246022 2026] [:error] [pid 36783:tid 36795] [client 79.137.67.84:33070] [client 79.137.67.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aabT-T4tNYh5NtLaTXe2vgAAAAE"]
[Tue Mar 03 22:11:33.643556 2026] [:error] [pid 36897:tid 36925] [client 178.16.53.90:59323] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aabsFSZC69_8eM0UouufLgAAANc"]
[Tue Mar 03 22:40:23.720568 2026] [:error] [pid 14042:tid 14056] [client 144.31.25.36:59426] [client 144.31.25.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaby12eHGCmSEiIBcK6GQgAAAYw"]
[Tue Mar 03 22:40:24.692904 2026] [:error] [pid 36784:tid 36834] [client 144.31.25.36:62255] [client 144.31.25.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaby2HNeKOSGbW9kDgT1HQAAAEs"]
[Tue Mar 03 22:40:25.666869 2026] [:error] [pid 36784:tid 36844] [client 144.31.25.36:62554] [client 144.31.25.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaby2XNeKOSGbW9kDgT1JgAAAFU"]
[Tue Mar 03 22:40:26.637213 2026] [:error] [pid 20872:tid 20878] [client 144.31.25.36:62963] [client 144.31.25.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaby2olYbNk3E_3CgBg_5gAAAQQ"]
[Tue Mar 03 22:40:27.614521 2026] [:error] [pid 36784:tid 36827] [client 144.31.25.36:63318] [client 144.31.25.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaby23NeKOSGbW9kDgT1LAAAAEQ"]
[Tue Mar 03 22:40:28.645547 2026] [:error] [pid 26186:tid 26193] [client 144.31.25.36:63671] [client 144.31.25.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaby3PbZCNtk8wDak9fdiQAAAUU"]
[Tue Mar 03 22:40:29.611318 2026] [:error] [pid 36785:tid 36858] [client 144.31.25.36:63989] [client 144.31.25.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaby3XhJejauENG9qTgZKAAAAIg"]
[Tue Mar 03 22:40:30.584147 2026] [:error] [pid 36785:tid 36864] [client 144.31.25.36:64310] [client 144.31.25.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaby3nhJejauENG9qTgZKwAAAI4"]
[Tue Mar 03 22:40:31.551059 2026] [:error] [pid 26186:tid 26194] [client 144.31.25.36:64704] [client 144.31.25.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaby3_bZCNtk8wDak9fdigAAAUY"]
[Tue Mar 03 22:40:32.528912 2026] [:error] [pid 36897:tid 36915] [client 144.31.25.36:64988] [client 144.31.25.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaby4CZC69_8eM0UouuwOgAAAM0"]
[Tue Mar 03 22:40:33.506164 2026] [:error] [pid 36784:tid 36830] [client 144.31.25.36:65299] [client 144.31.25.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaby4XNeKOSGbW9kDgT1OgAAAEc"]
[Wed Mar 04 02:26:33.918125 2026] [:error] [pid 48405:tid 48571] [client 122.172.87.81:6902] [client 122.172.87.81] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aacn2RBIGeGp5MBz7gJ_AAAAAAI"]
[Wed Mar 04 02:28:43.946820 2026] [:error] [pid 48406:tid 48668] [client 122.172.87.81:15011] [client 122.172.87.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.87.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aacoWzStn8zJHlZMxFgkmwAAAEY"]
[Wed Mar 04 03:37:57.376156 2026] [:error] [pid 13889:tid 13969] [client 51.38.104.193:64914] [client 51.38.104.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aac4lQ9JNV1nAmD7LEfRPgAAAJU"]
[Wed Mar 04 04:33:33.315316 2026] [:error] [pid 18554:tid 18611] [client 122.51.236.174:35602] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aadFnZ0fKmKeTIK7QS10vwAAAFM"]
[Wed Mar 04 04:40:55.320841 2026] [:error] [pid 54487:tid 54494] [client 170.106.163.48:37038] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aadHV_N8030QMpFXddvxNAAAAQU"]
[Wed Mar 04 05:30:20.697052 2026] [:error] [pid 54487:tid 54509] [client 105.157.125.75:61498] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aadS7PN8030QMpFXddsZFwAAARQ"], referer: https://gitlab.com/explore/projects?sort=latest_activity_desc
[Wed Mar 04 05:30:25.452360 2026] [:error] [pid 18553:tid 18585] [client 105.157.125.75:54116] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env."] [unique_id "aadS8Wbax1neh8d0AHaJ-gAAABU"], referer: https://www.reddit.com/r/worldnews/comments/def789/headline/?utm_source=share&utm_medium=web2x
[Wed Mar 04 05:30:28.826657 2026] [:error] [pid 54487:tid 54490] [client 105.157.125.75:52608] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env/"] [unique_id "aadS9PN8030QMpFXddsZKwAAAQE"], referer: https://www.ebay.com/itm/123456789012?hash=item1a2b3c4d5e
[Wed Mar 04 05:30:33.091343 2026] [:error] [pid 54487:tid 54507] [client 105.157.125.75:53553] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env%00"] [unique_id "aadS-fN8030QMpFXddsZMwAAARI"], referer: https://www.twitch.tv/directory/game/Just%20Chatting
[Wed Mar 04 05:30:34.419241 2026] [:error] [pid 54487:tid 54496] [client 105.157.125.75:57137] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env%20"] [unique_id "aadS-vN8030QMpFXddsZOAAAAQc"], referer: https://www.amazon.com/
[Wed Mar 04 05:30:36.732716 2026] [:error] [pid 54487:tid 54506] [client 105.157.125.75:53817] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env%20"] [unique_id "aadS_PN8030QMpFXddsZRwAAARE"], referer: https://www.tiktok.com/tag/cooking?lang=en
[Wed Mar 04 05:30:39.361344 2026] [:error] [pid 18555:tid 18631] [client 105.157.125.75:53069] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aadS_zQeUDANiOsQ3Gds-AAAAIw"], referer: https://www.google.de/
[Wed Mar 04 05:30:43.516784 2026] [:error] [pid 18681:tid 18693] [client 105.157.125.75:59466] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local."] [unique_id "aadTA6E_TuZYUBveWkWV6QAAAMo"], referer: https://stackoverflow.com/
[Wed Mar 04 05:30:47.389023 2026] [:error] [pid 18553:tid 18572] [client 105.157.125.75:53012] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local/"] [unique_id "aadTB2bax1neh8d0AHaKAgAAAAg"], referer: https://l.facebook.com/
[Wed Mar 04 05:30:53.054550 2026] [:error] [pid 54487:tid 54490] [client 105.157.125.75:64477] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local%00"] [unique_id "aadTDfN8030QMpFXddsZqQAAAQE"], referer: https://www.qwant.com/
[Wed Mar 04 05:30:54.290885 2026] [:error] [pid 18555:tid 18622] [client 105.157.125.75:49925] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local%20"] [unique_id "aadTDjQeUDANiOsQ3GdtAQAAAIM"], referer: https://www.youtube.com/results?search_query=guitar+tutorial+for+beginners
[Wed Mar 04 05:30:55.574270 2026] [:error] [pid 18554:tid 18594] [client 105.157.125.75:50128] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local%20"] [unique_id "aadTD50fKmKeTIK7QS2TOwAAAEI"], referer: https://www.goodreads.com/search?q=historical+fiction&qid=
[Wed Mar 04 05:31:05.984950 2026] [:error] [pid 54487:tid 54507] [client 105.157.125.75:58516] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aadTGfN8030QMpFXddsaDwAAARI"], referer: https://www.youtube.com/results?search_query=
[Wed Mar 04 05:31:07.255811 2026] [:error] [pid 18681:tid 18694] [client 105.157.125.75:63988] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production."] [unique_id "aadTG6E_TuZYUBveWkWWEAAAAMs"], referer: https://twitter.com/
[Wed Mar 04 05:31:09.830533 2026] [:error] [pid 18553:tid 18586] [client 105.157.125.75:64130] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production/"] [unique_id "aadTHWbax1neh8d0AHaKBgAAABY"], referer: https://www.bing.com/search?q=latest+movies+2026&form=QBLH
[Wed Mar 04 05:31:11.124816 2026] [:error] [pid 18554:tid 18600] [client 105.157.125.75:50186] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production%00"] [unique_id "aadTH50fKmKeTIK7QS2TtwAAAEg"], referer: https://www.bing.com/search?q=
[Wed Mar 04 05:31:15.176061 2026] [:error] [pid 18554:tid 18603] [client 105.157.125.75:50353] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production%20"] [unique_id "aadTI50fKmKeTIK7QS2TvwAAAEs"], referer: https://www.google.com/search?q=chocolate+chip+cookie+recipe&source=hp&ei=xyz789
[Wed Mar 04 05:31:16.519081 2026] [:error] [pid 54487:tid 54490] [client 105.157.125.75:53871] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production%20"] [unique_id "aadTJPN8030QMpFXddsaLgAAAQE"], referer: https://www.reddit.com/r/worldnews/comments/def789/headline/?utm_source=share&utm_medium=web2x
[Wed Mar 04 05:31:21.167129 2026] [:error] [pid 18554:tid 18607] [client 105.157.125.75:49206] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "aadTKZ0fKmKeTIK7QS2TzwAAAE8"], referer: https://www.reddit.com/r/cooking/search?q=dinner+ideas&restrict_sr=1&t=week
[Wed Mar 04 05:31:22.443280 2026] [:error] [pid 18554:tid 18599] [client 105.157.125.75:57725] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development."] [unique_id "aadTKp0fKmKeTIK7QS2T0wAAAEc"], referer: https://search.yahoo.com/
[Wed Mar 04 05:31:23.773302 2026] [:error] [pid 54487:tid 54508] [client 105.157.125.75:64994] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development/"] [unique_id "aadTK_N8030QMpFXddsaNwAAARM"], referer: https://www.facebook.com/travel/posts/67890?__cft__[0]=xyz
[Wed Mar 04 05:31:25.068643 2026] [:error] [pid 18555:tid 18643] [client 105.157.125.75:65175] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development%00"] [unique_id "aadTLTQeUDANiOsQ3GdtOwAAAJg"], referer: https://www.amazon.com/dp/B08N5WRWNW?ref_=nav_em__k_ods_ha_0_1_1_3
[Wed Mar 04 05:31:26.465922 2026] [:error] [pid 54487:tid 54506] [client 105.157.125.75:57027] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development%20"] [unique_id "aadTLvN8030QMpFXddsaPwAAARE"], referer: https://search.yahoo.com/search?p=learn+spanish+online+free&fr=yfp-t
[Wed Mar 04 05:31:27.877822 2026] [:error] [pid 54487:tid 54502] [client 105.157.125.75:63582] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development%20"] [unique_id "aadTL_N8030QMpFXddsaSwAAAQ0"], referer: https://t.co/
[Wed Mar 04 05:31:30.507254 2026] [:error] [pid 18553:tid 18576] [client 105.157.125.75:63737] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging"] [unique_id "aadTMmbax1neh8d0AHaKGQAAAAw"], referer: https://twitter.com/CookingBlog/status/9876543210?ref_src=twsrc%5Etfw
[Wed Mar 04 05:31:31.849271 2026] [:error] [pid 18554:tid 18600] [client 105.157.125.75:51327] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging."] [unique_id "aadTM50fKmKeTIK7QS2T3gAAAEg"], referer: https://stackoverflow.com/
[Wed Mar 04 05:31:33.233450 2026] [:error] [pid 18554:tid 18615] [client 105.157.125.75:58637] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging/"] [unique_id "aadTNZ0fKmKeTIK7QS2T3wAAAFc"], referer: https://www.ecosia.org/
[Wed Mar 04 05:31:37.523729 2026] [:error] [pid 54487:tid 54499] [client 105.157.125.75:52410] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging%00"] [unique_id "aadTOfN8030QMpFXddsajwAAAQo"], referer: https://medium.com/
[Wed Mar 04 05:31:42.680635 2026] [:error] [pid 54487:tid 54498] [client 105.157.125.75:50113] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging%20"] [unique_id "aadTPvN8030QMpFXddsanwAAAQk"], referer: https://vimeo.com/search?q=short+film+festival
[Wed Mar 04 05:31:45.310028 2026] [:error] [pid 18555:tid 18642] [client 105.157.125.75:56869] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging%20"] [unique_id "aadTQTQeUDANiOsQ3GdtRQAAAJc"], referer: https://news.ycombinator.com/from?site=nytimes.com
[Wed Mar 04 05:31:52.473967 2026] [:error] [pid 54487:tid 54497] [client 105.157.125.75:63468] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test"] [unique_id "aadTSPN8030QMpFXddsavAAAAQg"], referer: https://news.ycombinator.com/from?site=nytimes.com
[Wed Mar 04 05:31:53.781010 2026] [:error] [pid 18555:tid 18620] [client 105.157.125.75:61295] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test."] [unique_id "aadTSTQeUDANiOsQ3GdtUAAAAIE"], referer: https://search.yahoo.com/
[Wed Mar 04 05:31:55.033314 2026] [:error] [pid 18554:tid 18605] [client 105.157.125.75:58454] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test/"] [unique_id "aadTS50fKmKeTIK7QS2UCgAAAE0"], referer: https://www.google.com/search?q=weather+new+york&client=firefox-b-d
[Wed Mar 04 05:31:58.642669 2026] [:error] [pid 54487:tid 54492] [client 105.157.125.75:58604] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test%00"] [unique_id "aadTTvN8030QMpFXddsaxwAAAQM"], referer: https://news.ycombinator.com/item?id=34567890
[Wed Mar 04 05:32:01.919609 2026] [:error] [pid 18554:tid 18612] [client 105.157.125.75:51513] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test%20"] [unique_id "aadTUZ0fKmKeTIK7QS2UGgAAAFQ"], referer: https://www.aliexpress.com/wholesale?SearchText=phone+case&catId=0
[Wed Mar 04 05:32:06.592915 2026] [:error] [pid 54487:tid 54500] [client 105.157.125.75:51667] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test%20"] [unique_id "aadTVvN8030QMpFXddsa1AAAAQs"], referer: https://l.facebook.com/
[Wed Mar 04 05:32:09.145110 2026] [:error] [pid 54487:tid 54491] [client 105.157.125.75:60720] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "aadTWfN8030QMpFXddsa3gAAAQI"], referer: https://www.nytimes.com/section/technology?action=click&pgtype=Article&state=default
[Wed Mar 04 05:32:12.257342 2026] [:error] [pid 18681:tid 18686] [client 105.157.125.75:65202] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup."] [unique_id "aadTXKE_TuZYUBveWkWWdAAAAMM"], referer: https://www.youtube.com/
[Wed Mar 04 05:32:18.569153 2026] [:error] [pid 54487:tid 54513] [client 105.157.125.75:62834] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup%00"] [unique_id "aadTYvN8030QMpFXddsa_AAAARg"], referer: https://www.wolframalpha.com/input?i=population+of+japan
[Wed Mar 04 05:32:19.857493 2026] [:error] [pid 18681:tid 18696] [client 105.157.125.75:57925] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup%20"] [unique_id "aadTY6E_TuZYUBveWkWWfgAAAM0"], referer: https://www.youtube.com/results?search_query=
[Wed Mar 04 05:32:21.137961 2026] [:error] [pid 18555:tid 18628] [client 105.157.125.75:58075] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup%20"] [unique_id "aadTZTQeUDANiOsQ3GdtagAAAIk"], referer: https://news.ycombinator.com/item?id=34567890
[Wed Mar 04 05:32:26.838943 2026] [:error] [pid 54487:tid 54489] [client 105.157.125.75:64421] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old"] [unique_id "aadTavN8030QMpFXddsbEAAAAQA"], referer: https://www.bing.com/search?q=how+to+tie+a+tie&qs=n&first=5
[Wed Mar 04 05:32:28.110938 2026] [:error] [pid 54487:tid 54506] [client 105.157.125.75:60375] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old."] [unique_id "aadTbPN8030QMpFXddsbGwAAARE"], referer: https://www.bing.com/
[Wed Mar 04 05:32:29.358827 2026] [:error] [pid 54487:tid 54512] [client 105.157.125.75:64004] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old/"] [unique_id "aadTbfN8030QMpFXddsbIwAAARc"], referer: https://www.bing.com/search?q=how+to+tie+a+tie&qs=n&first=5
[Wed Mar 04 05:32:33.645230 2026] [:error] [pid 18554:tid 18607] [client 105.157.125.75:61592] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old%20"] [unique_id "aadTcZ0fKmKeTIK7QS2UTgAAAE8"], referer: https://stackoverflow.com/search?q=%5Bcss%5D+animation&sort=newest
[Wed Mar 04 05:32:34.902022 2026] [:error] [pid 18555:tid 18636] [client 105.157.125.75:61765] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old%20"] [unique_id "aadTcjQeUDANiOsQ3GdteQAAAJE"], referer: https://bitbucket.org/dashboard/overview
[Wed Mar 04 05:32:37.442180 2026] [:error] [pid 18554:tid 18607] [client 105.157.125.75:59745] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "aadTdZ0fKmKeTIK7QS2UVgAAAE8"], referer: https://www.google.es/
[Wed Mar 04 05:32:40.083022 2026] [:error] [pid 18555:tid 18621] [client 105.157.125.75:58608] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save."] [unique_id "aadTeDQeUDANiOsQ3GdthQAAAII"], referer: https://www.google.es/
[Wed Mar 04 05:32:43.676427 2026] [:error] [pid 18554:tid 18605] [client 105.157.125.75:55608] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save/"] [unique_id "aadTe50fKmKeTIK7QS2UYwAAAE0"], referer: https://www.ecosia.org/search?q=indoor+plant+care+tips
[Wed Mar 04 05:32:47.609579 2026] [:error] [pid 54487:tid 54507] [client 105.157.125.75:52797] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save%00"] [unique_id "aadTf_N8030QMpFXddsbVgAAARI"], referer: https://stackoverflow.com/questions/7654321/how-to-center-a-div?noredirect=1
[Wed Mar 04 05:32:49.867882 2026] [:error] [pid 18555:tid 18636] [client 105.157.125.75:58575] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save%20"] [unique_id "aadTgTQeUDANiOsQ3GdtkAAAAJE"], referer: https://www.npmjs.com/search?q=date+formatter
[Wed Mar 04 05:32:53.935854 2026] [:error] [pid 18555:tid 18629] [client 105.157.125.75:50356] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save%20"] [unique_id "aadThTQeUDANiOsQ3GdtnQAAAIo"], referer: https://www.quora.com/search?q=best+books+to+read+2026
[Wed Mar 04 05:32:56.922974 2026] [:error] [pid 18553:tid 18582] [client 105.157.125.75:58761] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "aadTiGbax1neh8d0AHaKXgAAABI"], referer: https://www.goodreads.com/search?q=historical+fiction&qid=
[Wed Mar 04 05:32:58.171380 2026] [:error] [pid 54487:tid 54502] [client 105.157.125.75:53173] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example."] [unique_id "aadTivN8030QMpFXddsbeAAAAQ0"], referer: https://gitlab.com/explore/projects?sort=latest_activity_desc
[Wed Mar 04 05:32:59.438609 2026] [:error] [pid 18554:tid 18600] [client 105.157.125.75:61910] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example/"] [unique_id "aadTi50fKmKeTIK7QS2UfQAAAEg"], referer: https://news.ycombinator.com/item?id=34567890
[Wed Mar 04 05:33:03.172655 2026] [:error] [pid 18555:tid 18629] [client 105.157.125.75:49947] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example%00"] [unique_id "aadTjzQeUDANiOsQ3GdtogAAAIo"], referer: https://www.google.com/search?q=
[Wed Mar 04 05:33:04.412971 2026] [:error] [pid 54487:tid 54501] [client 105.157.125.75:57644] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example%20"] [unique_id "aadTkPN8030QMpFXddsbkQAAAQw"], referer: https://stackoverflow.com/questions/7654321/how-to-center-a-div?noredirect=1
[Wed Mar 04 05:33:05.670161 2026] [:error] [pid 18554:tid 18611] [client 105.157.125.75:60763] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example%20"] [unique_id "aadTkZ0fKmKeTIK7QS2UgwAAAFM"], referer: https://twitter.com/search?q=%23travel&src=typed_query&f=live
[Wed Mar 04 05:33:08.232956 2026] [:error] [pid 54487:tid 54501] [client 105.157.125.75:60902] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production.local"] [unique_id "aadTlPN8030QMpFXddsbnwAAAQw"], referer: https://www.imdb.com/search/title/?title_type=feature&year=2025,2026
[Wed Mar 04 05:33:09.487581 2026] [:error] [pid 54487:tid 54509] [client 105.157.125.75:59031] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production.local."] [unique_id "aadTlfN8030QMpFXddsbpgAAARQ"], referer: https://search.yahoo.com/search?p=home+decor+ideas&ei=UTF-8
[Wed Mar 04 05:33:10.746046 2026] [:error] [pid 18554:tid 18595] [client 105.157.125.75:59175] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production.local/"] [unique_id "aadTlp0fKmKeTIK7QS2UiwAAAEM"], referer: https://www.linkedin.com/
[Wed Mar 04 05:33:14.414154 2026] [:error] [pid 18554:tid 18603] [client 105.157.125.75:59303] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production.local%00"] [unique_id "aadTmp0fKmKeTIK7QS2UlAAAAEs"], referer: https://www.bing.com/search?q=
[Wed Mar 04 05:33:15.682516 2026] [:error] [pid 18554:tid 18593] [client 105.157.125.75:60703] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production.local%20"] [unique_id "aadTm50fKmKeTIK7QS2UmgAAAEE"], referer: https://www.walmart.com/search?q=organic+coffee&cat_id=0
[Wed Mar 04 05:33:16.904719 2026] [:error] [pid 18553:tid 18581] [client 105.157.125.75:57176] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production.local%20"] [unique_id "aadTnGbax1neh8d0AHaKZQAAABE"], referer: https://www.facebook.com/
[Wed Mar 04 05:33:20.418106 2026] [:error] [pid 18555:tid 18638] [client 105.157.125.75:57305] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development.local"] [unique_id "aadToDQeUDANiOsQ3GdtrAAAAJM"], referer: https://www.ebay.com/sch/i.html?_nkw=vintage+camera&_sacat=0
[Wed Mar 04 05:33:21.664976 2026] [:error] [pid 54487:tid 54502] [client 105.157.125.75:60114] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development.local."] [unique_id "aadTofN8030QMpFXddsbwAAAAQ0"], referer: https://www.nytimes.com/section/technology?action=click&pgtype=Article&state=default
[Wed Mar 04 05:33:25.957311 2026] [:error] [pid 18553:tid 18579] [client 105.157.125.75:60231] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development.local/"] [unique_id "aadTpWbax1neh8d0AHaKcQAAAA8"], referer: https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ftravelblog.com
[Wed Mar 04 05:33:31.547784 2026] [:error] [pid 18681:tid 18693] [client 105.157.125.75:61252] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development.local%20"] [unique_id "aadTq6E_TuZYUBveWkWWwAAAAMo"], referer: https://www.google.com/search?q=
[Wed Mar 04 05:33:32.804180 2026] [:error] [pid 54487:tid 54493] [client 105.157.125.75:59923] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development.local%20"] [unique_id "aadTrPN8030QMpFXddsb1wAAAQQ"], referer: https://news.ycombinator.com/item?id=34567890
[Wed Mar 04 05:33:36.430161 2026] [:error] [pid 54487:tid 54491] [client 105.157.125.75:60048] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dist"] [unique_id "aadTsPN8030QMpFXddsb5wAAAQI"], referer: https://www.ebay.com/sch/i.html?_nkw=vintage+camera&_sacat=0
[Wed Mar 04 05:33:38.377795 2026] [:error] [pid 18554:tid 18602] [client 105.157.125.75:55008] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dist."] [unique_id "aadTsp0fKmKeTIK7QS2UvwAAAEo"], referer: https://search.yahoo.com/search?p=home+decor+ideas&ei=UTF-8
[Wed Mar 04 05:33:39.624217 2026] [:error] [pid 18555:tid 18628] [client 105.157.125.75:55175] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dist/"] [unique_id "aadTszQeUDANiOsQ3GdtwwAAAIk"], referer: https://www.bing.com/
[Wed Mar 04 05:33:40.866646 2026] [:error] [pid 18554:tid 18608] [client 105.157.125.75:55392] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dist%00"] [unique_id "aadTtJ0fKmKeTIK7QS2UxQAAAFA"], referer: https://www.imdb.com/search/title/?title_type=feature&year=2025,2026
[Wed Mar 04 05:33:42.138566 2026] [:error] [pid 54487:tid 54490] [client 105.157.125.75:51164] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dist%20"] [unique_id "aadTtvN8030QMpFXddsb_AAAAQE"], referer: https://twitter.com/CookingBlog/status/9876543210?ref_src=twsrc%5Etfw
[Wed Mar 04 05:33:43.421727 2026] [:error] [pid 18681:tid 18694] [client 105.157.125.75:51294] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dist%20"] [unique_id "aadTt6E_TuZYUBveWkWWxQAAAMs"], referer: https://www.wolframalpha.com/input?i=population+of+japan
[Wed Mar 04 05:33:46.942277 2026] [:error] [pid 18554:tid 18615] [client 105.157.125.75:57259] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample"] [unique_id "aadTup0fKmKeTIK7QS2UzwAAAFc"], referer: https://search.yahoo.com/
[Wed Mar 04 05:33:49.201430 2026] [:error] [pid 54487:tid 54498] [client 105.157.125.75:63172] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample."] [unique_id "aadTvfN8030QMpFXddscDwAAAQk"], referer: https://twitter.com/
[Wed Mar 04 05:33:54.595521 2026] [:error] [pid 18555:tid 18627] [client 105.157.125.75:51117] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample/"] [unique_id "aadTwjQeUDANiOsQ3Gdt6AAAAIg"], referer: https://www.google.com/search?q=chocolate+chip+cookie+recipe&source=hp&ei=xyz789
[Wed Mar 04 05:33:55.852945 2026] [:error] [pid 18681:tid 18691] [client 105.157.125.75:56342] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample%00"] [unique_id "aadTw6E_TuZYUBveWkWW1QAAAMg"], referer: https://www.bbc.com/news/science-environment-12345678
[Wed Mar 04 05:33:58.240829 2026] [:error] [pid 18553:tid 18585] [client 105.157.125.75:56469] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample%20"] [unique_id "aadTxmbax1neh8d0AHaKlQAAABU"], referer: https://www.wikipedia.org/wiki/Main_Page?action=history
[Wed Mar 04 05:33:59.567558 2026] [:error] [pid 54487:tid 54513] [client 105.157.125.75:58623] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample%20"] [unique_id "aadTx_N8030QMpFXddscNQAAARg"], referer: https://t.co/
[Wed Mar 04 05:34:04.659949 2026] [:error] [pid 18553:tid 18584] [client 105.157.125.75:54159] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.template"] [unique_id "aadTzGbax1neh8d0AHaKnAAAABQ"], referer: https://www.google.com/search?q=
[Wed Mar 04 05:34:05.930079 2026] [:error] [pid 18554:tid 18602] [client 105.157.125.75:59839] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.template."] [unique_id "aadTzZ0fKmKeTIK7QS2U-wAAAEo"], referer: https://news.ycombinator.com/item?id=34567890
[Wed Mar 04 05:34:07.182014 2026] [:error] [pid 18681:tid 18702] [client 105.157.125.75:51535] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.template/"] [unique_id "aadTz6E_TuZYUBveWkWW5gAAANM"], referer: https://dev.to/search?q=react+hooks+tutorial
[Wed Mar 04 05:34:08.416957 2026] [:error] [pid 54487:tid 54492] [client 105.157.125.75:51688] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.template%00"] [unique_id "aadT0PN8030QMpFXddscSAAAAQM"], referer: https://www.nytimes.com/section/technology?action=click&pgtype=Article&state=default
[Wed Mar 04 05:34:09.669534 2026] [:error] [pid 18554:tid 18614] [client 105.157.125.75:49738] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.template%20"] [unique_id "aadT0Z0fKmKeTIK7QS2VBgAAAFY"], referer: https://www.reddit.com/r/aww/comments/abc456/cute_puppy/?utm_source=share&utm_medium=web2x
[Wed Mar 04 05:34:10.939508 2026] [:error] [pid 18681:tid 18703] [client 105.157.125.75:49920] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.template%20"] [unique_id "aadT0qE_TuZYUBveWkWW7QAAANQ"], referer: https://www.quora.com/search?q=best+books+to+read+2026
[Wed Mar 04 05:34:15.999211 2026] [:error] [pid 18681:tid 18690] [client 105.157.125.75:53956] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example.local"] [unique_id "aadT16E_TuZYUBveWkWW8gAAAMc"], referer: https://t.co/
[Wed Mar 04 05:34:19.849317 2026] [:error] [pid 18554:tid 18601] [client 105.157.125.75:59396] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example.local."] [unique_id "aadT250fKmKeTIK7QS2VGQAAAEk"], referer: https://www.bing.com/
[Wed Mar 04 05:34:21.110082 2026] [:error] [pid 18555:tid 18624] [client 105.157.125.75:59170] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example.local/"] [unique_id "aadT3TQeUDANiOsQ3GduFwAAAIU"], referer: https://www.linkedin.com/feed/update/def456/
[Wed Mar 04 05:34:22.345869 2026] [:error] [pid 18554:tid 18593] [client 105.157.125.75:59321] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example.local%00"] [unique_id "aadT3p0fKmKeTIK7QS2VHQAAAEE"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Wed Mar 04 05:34:23.638110 2026] [:error] [pid 18553:tid 18571] [client 105.157.125.75:50892] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example.local%20"] [unique_id "aadT32bax1neh8d0AHaKxQAAAAc"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Wed Mar 04 05:34:44.087560 2026] [:error] [pid 18681:tid 18696] [client 105.157.125.75:57097] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.docker"] [unique_id "aadT9KE_TuZYUBveWkWXIAAAAM0"], referer: https://www.cloudflare.com/
[Wed Mar 04 05:34:46.236090 2026] [:error] [pid 54487:tid 54498] [client 105.157.125.75:64820] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.docker."] [unique_id "aadT9vN8030QMpFXddscqwAAAQk"], referer: https://stackoverflow.com/questions/7654321/how-to-center-a-div?noredirect=1
[Wed Mar 04 05:34:47.484135 2026] [:error] [pid 18555:tid 18628] [client 105.157.125.75:52748] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.docker/"] [unique_id "aadT9zQeUDANiOsQ3GduJAAAAIk"], referer: https://news.google.com/
[Wed Mar 04 05:34:48.857055 2026] [:error] [pid 18555:tid 18630] [client 105.157.125.75:59680] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.docker%00"] [unique_id "aadT-DQeUDANiOsQ3GduJwAAAIs"], referer: https://twitter.com/search?q=%23travel&src=typed_query&f=live
[Wed Mar 04 05:34:50.136132 2026] [:error] [pid 54487:tid 54499] [client 105.157.125.75:52012] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.docker%20"] [unique_id "aadT-vN8030QMpFXddscsQAAAQo"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Wed Mar 04 05:34:53.242493 2026] [:error] [pid 18553:tid 18582] [client 105.157.125.75:56282] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.docker%20"] [unique_id "aadT_Wbax1neh8d0AHaK0wAAABI"], referer: https://github.com/search?q=topic%3Acooking-recipes&type=repositories
[Wed Mar 04 05:34:55.856919 2026] [:error] [pid 18553:tid 18572] [client 105.157.125.75:56404] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.ci"] [unique_id "aadT_2bax1neh8d0AHaLAQAAAAg"], referer: https://search.yahoo.com/search?p=home+decor+ideas&ei=UTF-8
[Wed Mar 04 05:34:57.131082 2026] [:error] [pid 18554:tid 18613] [client 105.157.125.75:52016] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.ci."] [unique_id "aadUAZ0fKmKeTIK7QS2VmQAAAFU"], referer: https://t.co/
[Wed Mar 04 05:34:58.361214 2026] [:error] [pid 18553:tid 18582] [client 105.157.125.75:52202] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.ci/"] [unique_id "aadUAmbax1neh8d0AHaLDwAAABI"], referer: https://github.com/
[Wed Mar 04 05:34:59.610968 2026] [:error] [pid 18555:tid 18629] [client 105.157.125.75:53905] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.ci%00"] [unique_id "aadUAzQeUDANiOsQ3GduLgAAAIo"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Wed Mar 04 05:35:00.845613 2026] [:error] [pid 54487:tid 54503] [client 105.157.125.75:54054] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.ci%20"] [unique_id "aadUBPN8030QMpFXddsdHgAAAQ4"], referer: https://www.amazon.com/s?k=running+shoes&ref=nb_sb_noss_2
[Wed Mar 04 05:35:04.684619 2026] [:error] [pid 18554:tid 18616] [client 105.157.125.75:52717] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.ci%20"] [unique_id "aadUCJ0fKmKeTIK7QS2VtwAAAFg"], referer: https://www.ebay.com/itm/123456789012?hash=item1a2b3c4d5e
[Wed Mar 04 05:35:07.233672 2026] [:error] [pid 18555:tid 18633] [client 105.157.125.75:63197] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.live"] [unique_id "aadUCzQeUDANiOsQ3GduNQAAAI4"], referer: https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ftravelblog.com
[Wed Mar 04 05:35:08.484268 2026] [:error] [pid 18554:tid 18607] [client 105.157.125.75:61126] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.live."] [unique_id "aadUDJ0fKmKeTIK7QS2VwQAAAE8"], referer: https://t.me/share/url?url=https%3A%2F%2Frecipe-site.com&text=Great+recipe
[Wed Mar 04 05:35:09.732835 2026] [:error] [pid 18554:tid 18601] [client 105.157.125.75:61286] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.live/"] [unique_id "aadUDZ0fKmKeTIK7QS2VygAAAEk"], referer: https://www.reddit.com/r/cooking/search?q=dinner+ideas&restrict_sr=1&t=week
[Wed Mar 04 05:35:10.988060 2026] [:error] [pid 54487:tid 54501] [client 105.157.125.75:61412] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.live%00"] [unique_id "aadUDvN8030QMpFXddsdLwAAAQw"], referer: https://www.bing.com/
[Wed Mar 04 05:35:13.284441 2026] [:error] [pid 54487:tid 54492] [client 105.157.125.75:64490] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.live%20"] [unique_id "aadUEfN8030QMpFXddsdOQAAAQM"], referer: https://t.me/share/url?url=https%3A%2F%2Frecipe-site.com&text=Great+recipe
[Wed Mar 04 05:35:14.554747 2026] [:error] [pid 18554:tid 18593] [client 105.157.125.75:63939] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.live%20"] [unique_id "aadUEp0fKmKeTIK7QS2V1wAAAEE"], referer: https://medium.com/
[Wed Mar 04 05:35:21.627619 2026] [:error] [pid 54487:tid 54492] [client 105.157.125.75:65318] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.prod"] [unique_id "aadUGfN8030QMpFXddsdXAAAAQM"], referer: https://www.youtube.com/watch?v=abcdEFGHijk&feature=share
[Wed Mar 04 05:35:25.245074 2026] [:error] [pid 54487:tid 54512] [client 105.157.125.75:58312] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.prod."] [unique_id "aadUHfN8030QMpFXddsdYgAAARc"], referer: https://en.wikipedia.org/w/index.php?title=Python&action=edit
[Wed Mar 04 05:35:31.971353 2026] [:error] [pid 18554:tid 18603] [client 105.157.125.75:51634] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.prod/"] [unique_id "aadUI50fKmKeTIK7QS2WKgAAAEs"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Wed Mar 04 05:35:33.222756 2026] [:error] [pid 18553:tid 18583] [client 105.157.125.75:56232] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.prod%00"] [unique_id "aadUJWbax1neh8d0AHaLQgAAABM"], referer: https://scholar.google.com/scholar?q=machine+learning+history
[Wed Mar 04 05:35:35.481081 2026] [:error] [pid 18553:tid 18569] [client 105.157.125.75:65289] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.prod%20"] [unique_id "aadUJ2bax1neh8d0AHaLRAAAAAU"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Wed Mar 04 05:35:36.732327 2026] [:error] [pid 54487:tid 54511] [client 105.157.125.75:61123] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.prod%20"] [unique_id "aadUKPN8030QMpFXddsdhAAAARY"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Wed Mar 04 05:35:39.311205 2026] [:error] [pid 18554:tid 18597] [client 105.157.125.75:61312] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.release"] [unique_id "aadUK50fKmKeTIK7QS2WRQAAAEU"], referer: https://www.ecosia.org/search?q=indoor+plant+care+tips
[Wed Mar 04 05:35:40.525978 2026] [:error] [pid 18553:tid 18564] [client 105.157.125.75:59223] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.release."] [unique_id "aadULGbax1neh8d0AHaLTQAAAAA"], referer: https://www.goodreads.com/search?q=historical+fiction&qid=
[Wed Mar 04 05:35:41.764508 2026] [:error] [pid 18554:tid 18611] [client 105.157.125.75:59383] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.release/"] [unique_id "aadULZ0fKmKeTIK7QS2WTAAAAFM"], referer: https://www.quora.com/search?q=best+books+to+read+2026
[Wed Mar 04 05:35:45.745566 2026] [:error] [pid 54487:tid 54510] [client 105.157.125.75:55439] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.release%00"] [unique_id "aadUMfN8030QMpFXddsdlAAAARU"], referer: https://www.google.de/
[Wed Mar 04 05:35:47.955190 2026] [:error] [pid 54487:tid 54499] [client 105.157.125.75:55695] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.release%20"] [unique_id "aadUM_N8030QMpFXddsdnwAAAQo"], referer: https://pypi.org/search/?q=data+visualization
[Wed Mar 04 05:35:51.404253 2026] [:error] [pid 54487:tid 54505] [client 105.157.125.75:56559] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.release%20"] [unique_id "aadUN_N8030QMpFXddsdswAAARA"], referer: https://www.wikipedia.org/
[Wed Mar 04 05:35:53.858157 2026] [:error] [pid 54487:tid 54492] [client 105.157.125.75:52202] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.uat"] [unique_id "aadUOfN8030QMpFXddsduQAAAQM"], referer: https://www.google.com/
[Wed Mar 04 05:35:55.114407 2026] [:error] [pid 18554:tid 18604] [client 105.157.125.75:51406] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.uat."] [unique_id "aadUO50fKmKeTIK7QS2WYwAAAEw"], referer: https://www.linkedin.com/
[Wed Mar 04 05:35:56.352260 2026] [:error] [pid 18554:tid 18592] [client 105.157.125.75:51546] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.uat/"] [unique_id "aadUPJ0fKmKeTIK7QS2WZQAAAEA"], referer: https://www.reddit.com/r/aww/comments/abc456/cute_puppy/?utm_source=share&utm_medium=web2x
[Wed Mar 04 05:35:57.620014 2026] [:error] [pid 18554:tid 18597] [client 105.157.125.75:63592] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.uat%00"] [unique_id "aadUPZ0fKmKeTIK7QS2WZgAAAEU"], referer: https://www.linkedin.com/
[Wed Mar 04 05:35:58.940533 2026] [:error] [pid 18681:tid 18688] [client 105.157.125.75:55670] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.uat%20"] [unique_id "aadUPqE_TuZYUBveWkWXaAAAAMU"], referer: https://news.ycombinator.com/item?id=34567890
[Wed Mar 04 05:36:01.104334 2026] [:error] [pid 18553:tid 18571] [client 105.157.125.75:55808] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.uat%20"] [unique_id "aadUQWbax1neh8d0AHaLWAAAAAc"], referer: https://www.imdb.com/search/title/?title_type=feature&year=2025,2026
[Wed Mar 04 05:36:03.678451 2026] [:error] [pid 18554:tid 18608] [client 105.157.125.75:61907] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.deploy"] [unique_id "aadUQ50fKmKeTIK7QS2WcgAAAFA"], referer: https://www.perplexity.ai/search?q=renaissance+art+characteristics
[Wed Mar 04 05:36:05.016473 2026] [:error] [pid 54487:tid 54509] [client 105.157.125.75:49246] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.deploy."] [unique_id "aadURfN8030QMpFXddsdywAAARQ"], referer: https://docs.python.org/3/search.html?q=json+parsing&check_keywords=yes
[Wed Mar 04 05:36:08.180620 2026] [:error] [pid 54487:tid 54509] [client 105.157.125.75:65516] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.deploy/"] [unique_id "aadUSPN8030QMpFXddsd1AAAARQ"], referer: https://t.co/
[Wed Mar 04 05:36:10.486198 2026] [:error] [pid 54487:tid 54511] [client 105.157.125.75:49274] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.deploy%00"] [unique_id "aadUSvN8030QMpFXddsd2AAAARY"], referer: https://twitter.com/
[Wed Mar 04 05:36:12.423216 2026] [:error] [pid 54487:tid 54512] [client 105.157.125.75:52872] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.deploy%20"] [unique_id "aadUTPN8030QMpFXddsd3wAAARc"], referer: https://search.yahoo.com/search?p=learn+spanish+online+free&fr=yfp-t
[Wed Mar 04 05:36:13.676894 2026] [:error] [pid 54487:tid 54498] [client 105.157.125.75:53365] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.deploy%20"] [unique_id "aadUTfN8030QMpFXddsd5AAAAQk"], referer: https://github.com/user/project/blob/main/script.js?raw=true
[Wed Mar 04 05:36:30.275198 2026] [:error] [pid 54487:tid 54492] [client 105.157.125.75:65103] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php"] [unique_id "aadUXvN8030QMpFXddseJgAAAQM"], referer: https://www.reddit.com/r/all/
[Wed Mar 04 05:36:31.534486 2026] [:error] [pid 18555:tid 18641] [client 105.157.125.75:60640] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php."] [unique_id "aadUXzQeUDANiOsQ3GdufAAAAJY"], referer: https://www.ecosia.org/
[Wed Mar 04 05:36:32.797906 2026] [:error] [pid 18554:tid 18592] [client 105.157.125.75:60779] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php/"] [unique_id "aadUYJ0fKmKeTIK7QS2WjwAAAEA"], referer: https://github.com/user/project/blob/main/script.js?raw=true
[Wed Mar 04 05:36:34.134907 2026] [:error] [pid 54487:tid 54497] [client 105.157.125.75:51199] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php%00"] [unique_id "aadUYvN8030QMpFXddseLAAAAQg"], referer: https://www.facebook.com/
[Wed Mar 04 05:36:37.435104 2026] [:error] [pid 18555:tid 18627] [client 105.157.125.75:58453] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php%20"] [unique_id "aadUZTQeUDANiOsQ3GdugQAAAIg"], referer: https://www.perplexity.ai/search?q=renaissance+art+characteristics
[Wed Mar 04 05:36:41.284114 2026] [:error] [pid 18681:tid 18686] [client 105.157.125.75:58586] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php%20"] [unique_id "aadUaaE_TuZYUBveWkWXkgAAAMM"], referer: https://www.quora.com/How-do-I-make-pizza-dough
[Wed Mar 04 05:37:23.619534 2026] [:error] [pid 18554:tid 18600] [client 105.157.125.75:54565] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/config.ini"] [unique_id "aadUk50fKmKeTIK7QS2XEwAAAEg"], referer: https://www.google.de/
[Wed Mar 04 05:37:41.375056 2026] [:error] [pid 18681:tid 18688] [client 105.157.125.75:57588] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/web.config"] [unique_id "aadUpaE_TuZYUBveWkWX4gAAAMU"], referer: https://www.quora.com/How-do-I-make-pizza-dough
[Wed Mar 04 05:37:42.619048 2026] [:error] [pid 18555:tid 18635] [client 105.157.125.75:57206] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/web.config."] [unique_id "aadUpjQeUDANiOsQ3GdupQAAAJA"], referer: https://www.wolframalpha.com/input?i=population+of+japan
[Wed Mar 04 05:37:48.541278 2026] [:error] [pid 54487:tid 54499] [client 105.157.125.75:53657] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/web.config/"] [unique_id "aadUrPN8030QMpFXddse0wAAAQo"], referer: https://www.perplexity.ai/search?q=renaissance+art+characteristics
[Wed Mar 04 05:37:49.783326 2026] [:error] [pid 54487:tid 54509] [client 105.157.125.75:59900] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/web.config%00"] [unique_id "aadUrfN8030QMpFXddse2wAAARQ"], referer: https://news.google.com/
[Wed Mar 04 05:37:51.036870 2026] [:error] [pid 18681:tid 18686] [client 105.157.125.75:49792] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/web.config%20"] [unique_id "aadUr6E_TuZYUBveWkWX6wAAAMM"], referer: https://www.google.com/search?q=chocolate+chip+cookie+recipe&source=hp&ei=xyz789
[Wed Mar 04 05:37:53.184069 2026] [:error] [pid 54487:tid 54502] [client 105.157.125.75:58223] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/web.config%20"] [unique_id "aadUsfN8030QMpFXddse-wAAAQ0"], referer: https://www.aliexpress.com/wholesale?SearchText=phone+case&catId=0
[Wed Mar 04 05:37:55.605148 2026] [:error] [pid 54487:tid 54494] [client 105.157.125.75:58466] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/app.config"] [unique_id "aadUs_N8030QMpFXddsfDgAAAQU"], referer: https://bitbucket.org/dashboard/overview
[Wed Mar 04 05:38:14.206896 2026] [:error] [pid 54487:tid 54500] [client 105.157.125.75:58466] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php"] [unique_id "aadUxvN8030QMpFXddsfTwAAAQs"], referer: https://t.me/share/url?url=https%3A%2F%2Frecipe-site.com&text=Great+recipe
[Wed Mar 04 05:38:18.002248 2026] [:error] [pid 18554:tid 18605] [client 105.157.125.75:59329] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php."] [unique_id "aadUyp0fKmKeTIK7QS2XiQAAAE0"], referer: https://search.yahoo.com/search?p=home+decor+ideas&ei=UTF-8
[Wed Mar 04 05:38:23.777140 2026] [:error] [pid 54487:tid 54496] [client 105.157.125.75:53790] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php/"] [unique_id "aadUz_N8030QMpFXddsfWQAAAQc"], referer: https://www.ebay.com/sch/i.html?_nkw=vintage+camera&_sacat=0
[Wed Mar 04 05:38:25.733588 2026] [:error] [pid 18554:tid 18604] [client 105.157.125.75:62367] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php%00"] [unique_id "aadU0Z0fKmKeTIK7QS2XjQAAAEw"], referer: https://www.bing.com/search?q=how+to+tie+a+tie&qs=n&first=5
[Wed Mar 04 05:38:27.056195 2026] [:error] [pid 54487:tid 54512] [client 105.157.125.75:58710] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php%20"] [unique_id "aadU0_N8030QMpFXddsfYAAAARc"], referer: https://www.goodreads.com/search?q=historical+fiction&qid=
[Wed Mar 04 05:38:28.341714 2026] [:error] [pid 18555:tid 18642] [client 105.157.125.75:58890] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php%20"] [unique_id "aadU1DQeUDANiOsQ3Gdu3wAAAJc"], referer: https://twitter.com/CookingBlog/status/9876543210?ref_src=twsrc%5Etfw
[Wed Mar 04 05:38:30.828152 2026] [:error] [pid 18554:tid 18594] [client 105.157.125.75:49300] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/.config"] [unique_id "aadU1p0fKmKeTIK7QS2XlwAAAEI"], referer: https://www.google.com/search?q=weather+new+york&client=firefox-b-d
[Wed Mar 04 05:38:41.945568 2026] [:error] [pid 18554:tid 18616] [client 105.157.125.75:49300] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.htpasswd"] [unique_id "aadU4Z0fKmKeTIK7QS2XrgAAAFg"], referer: https://search.yahoo.com/
[Wed Mar 04 05:38:43.340338 2026] [:error] [pid 18681:tid 18691] [client 105.157.125.75:63890] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.htpasswd."] [unique_id "aadU46E_TuZYUBveWkWYQAAAAMg"], referer: https://www.google.de/
[Wed Mar 04 05:38:47.301220 2026] [:error] [pid 18553:tid 18568] [client 105.157.125.75:64077] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.htpasswd/"] [unique_id "aadU52bax1neh8d0AHaLxAAAAAQ"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Wed Mar 04 05:38:48.670426 2026] [:error] [pid 18554:tid 18603] [client 105.157.125.75:59767] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.htpasswd%00"] [unique_id "aadU6J0fKmKeTIK7QS2XvgAAAEs"], referer: https://www.ecosia.org/search?q=indoor+plant+care+tips
[Wed Mar 04 05:38:49.986322 2026] [:error] [pid 54487:tid 54513] [client 105.157.125.75:60915] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.htpasswd%20"] [unique_id "aadU6fN8030QMpFXddsfcgAAARg"], referer: https://duckduckgo.com/?q=
[Wed Mar 04 05:38:51.247216 2026] [:error] [pid 18554:tid 18600] [client 105.157.125.75:61068] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.htpasswd%20"] [unique_id "aadU650fKmKeTIK7QS2XwwAAAEg"], referer: https://duckduckgo.com/?q=
[Wed Mar 04 05:38:54.901997 2026] [:error] [pid 18681:tid 18683] [client 105.157.125.75:56585] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/config.inc"] [unique_id "aadU7qE_TuZYUBveWkWYTAAAAMA"], referer: https://www.youtube.com/
[Wed Mar 04 05:39:04.222320 2026] [:error] [pid 18681:tid 18694] [client 105.157.125.75:56585] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/db.inc"] [unique_id "aadU-KE_TuZYUBveWkWYXQAAAMs"], referer: https://www.aliexpress.com/wholesale?SearchText=phone+case&catId=0
[Wed Mar 04 05:39:12.629419 2026] [:error] [pid 18681:tid 18700] [client 105.157.125.75:56585] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/database.inc"] [unique_id "aadVAKE_TuZYUBveWkWYaAAAANE"], referer: https://developer.mozilla.org/en-US/search?q=javascript+array&locale=en-US
[Wed Mar 04 05:39:21.532031 2026] [:error] [pid 18681:tid 18690] [client 105.157.125.75:56585] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".asa"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/config.asa"] [unique_id "aadVCaE_TuZYUBveWkWYeQAAAMc"], referer: https://www.wikipedia.org/wiki/Main_Page?action=history
[Wed Mar 04 05:39:30.285913 2026] [:error] [pid 18681:tid 18704] [client 105.157.125.75:56585] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".asa"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/global.asa"] [unique_id "aadVEqE_TuZYUBveWkWYjgAAANU"], referer: https://www.nytimes.com/section/technology?action=click&pgtype=Article&state=default
[Wed Mar 04 05:39:52.712732 2026] [:error] [pid 18554:tid 18614] [client 105.157.125.75:53272] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/composer.json"] [unique_id "aadVKJ0fKmKeTIK7QS2YJQAAAFY"], referer: https://www.tiktok.com/tag/cooking?lang=en
[Wed Mar 04 05:39:58.075846 2026] [:error] [pid 18554:tid 18598] [client 105.157.125.75:52411] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/composer.json."] [unique_id "aadVLp0fKmKeTIK7QS2YLAAAAEY"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Wed Mar 04 05:40:04.994991 2026] [:error] [pid 18681:tid 18687] [client 105.157.125.75:52568] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/composer.json."] [unique_id "aadVNKE_TuZYUBveWkWYtwAAAMQ"], referer: https://duckduckgo.com/?q=funny+cat+videos&t=brave
[Wed Mar 04 05:40:06.254326 2026] [:error] [pid 18554:tid 18597] [client 105.157.125.75:52762] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/composer.json/"] [unique_id "aadVNp0fKmKeTIK7QS2YOwAAAEU"], referer: https://www.instagram.com/explore/tags/landscapephotography/
[Wed Mar 04 05:40:11.036623 2026] [:error] [pid 18681:tid 18689] [client 105.157.125.75:57950] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/composer.json%00"] [unique_id "aadVO6E_TuZYUBveWkWYvwAAAMY"], referer: https://www.google.es/
[Wed Mar 04 05:40:12.304160 2026] [:error] [pid 18681:tid 18707] [client 105.157.125.75:49721] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/composer.json%20"] [unique_id "aadVPKE_TuZYUBveWkWYwAAAANg"], referer: https://stackoverflow.com/
[Wed Mar 04 05:40:13.603281 2026] [:error] [pid 18554:tid 18611] [client 105.157.125.75:49892] [client 105.157.125.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/composer.json%20"] [unique_id "aadVPZ0fKmKeTIK7QS2YRwAAAFM"], referer: https://www.google.fr/
[Wed Mar 04 07:02:07.848046 2026] [:error] [pid 18554:tid 18609] [client 223.123.2.60:8091] [client 223.123.2.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.123.2.60, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aadob50fKmKeTIK7QS3IEAAAAFE"]
[Wed Mar 04 07:14:46.060284 2026] [:error] [pid 18681:tid 18701] [client 223.123.2.60:21604] [client 223.123.2.60] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aadrZqE_TuZYUBveWkW0lwAAANI"]
[Wed Mar 04 08:01:42.560549 2026] [:error] [pid 54487:tid 54502] [client 43.159.143.139:38080] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aad2ZvN8030QMpFXddtpzQAAAQ0"]
[Wed Mar 04 09:34:28.736944 2026] [:error] [pid 54487:tid 54512] [client 4.205.67.132:62593] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko-new.php"] [unique_id "aaeMJPN8030QMpFXddu_gwAAARc"]
[Wed Mar 04 09:34:29.209025 2026] [:error] [pid 54487:tid 54496] [client 4.205.67.132:64786] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko-new.php"] [unique_id "aaeMJfN8030QMpFXddu_iQAAAQc"]
[Wed Mar 04 09:34:29.626433 2026] [:error] [pid 54487:tid 54498] [client 4.205.67.132:8348] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aaeMJfN8030QMpFXddu_kAAAAQk"]
[Wed Mar 04 09:34:30.093116 2026] [:error] [pid 18681:tid 18707] [client 4.205.67.132:62635] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aaeMJqE_TuZYUBveWkXjsgAAANg"]
[Wed Mar 04 09:34:30.564078 2026] [:error] [pid 54487:tid 54507] [client 4.205.67.132:62594] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/headers.php"] [unique_id "aaeMJvN8030QMpFXddu_mQAAARI"]
[Wed Mar 04 09:34:31.030163 2026] [:error] [pid 18555:tid 18625] [client 4.205.67.132:62622] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/headers.php"] [unique_id "aaeMJzQeUDANiOsQ3GelbAAAAIY"]
[Wed Mar 04 09:34:31.498748 2026] [:error] [pid 54487:tid 54494] [client 4.205.67.132:62645] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/headers.php"] [unique_id "aaeMJ_N8030QMpFXddu_nQAAAQU"]
[Wed Mar 04 09:34:31.961636 2026] [:error] [pid 54487:tid 54493] [client 4.205.67.132:8359] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/headers.php"] [unique_id "aaeMJ_N8030QMpFXddu_ngAAAQQ"]
[Wed Mar 04 09:34:32.476006 2026] [:error] [pid 54487:tid 54492] [client 4.205.67.132:64148] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.PhP7"] [unique_id "aaeMKPN8030QMpFXddu_ogAAAQM"]
[Wed Mar 04 09:34:32.989070 2026] [:error] [pid 18554:tid 18608] [client 4.205.67.132:62630] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.PhP7"] [unique_id "aaeMKJ0fKmKeTIK7QS0t4gAAAFA"]
[Wed Mar 04 09:34:33.486111 2026] [:error] [pid 18554:tid 18592] [client 4.205.67.132:64144] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.PhP7"] [unique_id "aaeMKZ0fKmKeTIK7QS0t5wAAAEA"]
[Wed Mar 04 09:34:33.951385 2026] [:error] [pid 18554:tid 18607] [client 4.205.67.132:62629] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.PhP7"] [unique_id "aaeMKZ0fKmKeTIK7QS0t7AAAAE8"]
[Wed Mar 04 09:34:34.510805 2026] [:error] [pid 18554:tid 18609] [client 4.205.67.132:64810] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aaeMKp0fKmKeTIK7QS0t8AAAAFE"]
[Wed Mar 04 09:34:35.094783 2026] [:error] [pid 54487:tid 54496] [client 4.205.67.132:64129] [client 4.205.67.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "aaeMK_N8030QMpFXddu_rgAAAQc"]
[Wed Mar 04 11:17:10.362735 2026] [:error] [pid 18681:tid 18683] [client 43.130.31.17:38952] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaekNqE_TuZYUBveWkUK-QAAAMA"]
[Wed Mar 04 13:01:36.425101 2026] [:error] [pid 18681:tid 18706] [client 43.228.157.73:52320] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aae8sKE_TuZYUBveWkUo-gAAANc"]
[Wed Mar 04 13:01:37.035098 2026] [:error] [pid 18553:tid 18571] [client 43.228.157.73:52541] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aae8sWbax1neh8d0AHbO0QAAAAc"]
[Wed Mar 04 13:01:37.615245 2026] [:error] [pid 18555:tid 18628] [client 43.228.157.73:52755] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aae8sTQeUDANiOsQ3GfQvgAAAIk"]
[Wed Mar 04 13:01:38.215002 2026] [:error] [pid 45947:tid 46045] [client 43.228.157.73:52974] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aae8skQXEtszYKy6sasU7gAAAU0"]
[Wed Mar 04 13:01:38.791440 2026] [:error] [pid 18553:tid 18570] [client 43.228.157.73:53173] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aae8smbax1neh8d0AHbPJAAAAAY"]
[Wed Mar 04 14:38:14.357580 2026] [:error] [pid 51358:tid 51450] [client 170.106.165.76:52354] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aafTVlDC2WZyp0MMf72ybgAAAE4"]
[Wed Mar 04 15:11:43.596734 2026] [:error] [pid 51359:tid 51482] [client 167.86.127.54:47864] [client 167.86.127.54] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aafbL_eZtYUOh-itqcqFaAAAAJM"]
[Wed Mar 04 15:12:37.946923 2026] [:error] [pid 51510:tid 51532] [client 118.139.167.171:45806] [client 118.139.167.171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aafbZX-78MmWmoTGI7tKuwAAARM"]
[Wed Mar 04 17:16:00.590644 2026] [:error] [pid 63260:tid 63346] [client 36.41.75.167:47531] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaf4UFGzBomxCi_QBtEWHwAAANc"]
[Wed Mar 04 17:50:38.116693 2026] [:error] [pid 61225:tid 61261] [client 118.68.109.170:48190] [client 118.68.109.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.68.109.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aagAboFRsPGnBbt4lyRBvAAAABQ"]
[Wed Mar 04 17:51:15.613356 2026] [:error] [pid 63260:tid 63329] [client 51.235.120.9:38580] [client 51.235.120.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.235.120.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aagAk1GzBomxCi_QBtEmuAAAAMY"]
[Wed Mar 04 17:58:25.783128 2026] [:error] [pid 63259:tid 63297] [client 51.235.120.9:55881] [client 51.235.120.9] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aagCQZYdi0T768Nnor6wSgAAAQE"]
[Wed Mar 04 18:00:15.234176 2026] [:error] [pid 63356:tid 63364] [client 51.235.120.9:55800] [client 51.235.120.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.235.120.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aagCr85gxyQKbLIoyf_bnAAAAEY"]
[Wed Mar 04 19:53:49.817920 2026] [:error] [pid 60730:tid 60741] [client 70.77.124.202:65081] [client 70.77.124.202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aagdTUeC7wxPGxvN8ZgCJAAAAUk"]
[Wed Mar 04 19:55:13.349082 2026] [:error] [pid 64829:tid 64834] [client 70.77.124.202:53867] [client 70.77.124.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 70.77.124.202, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aagdoZ9ZED3FG9h7uijCsQAAAAM"]
[Wed Mar 04 20:55:02.217016 2026] [:error] [pid 60621:tid 60676] [client 43.130.3.120:56322] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aagrplfRSaORpCbdjO2Y7AAAAM4"]
[Wed Mar 04 22:36:48.265701 2026] [:error] [pid 64829:tid 64841] [client 109.178.163.60:1097] [client 109.178.163.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.178.163.60, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aahDgJ9ZED3FG9h7uiggZAAAAAo"]
[Wed Mar 04 22:40:13.205293 2026] [:error] [pid 61723:tid 61739] [client 109.178.163.60:1050] [client 109.178.163.60] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aahETT-cYcKSTgnaHK51YQAAAII"]
[Wed Mar 04 22:41:30.843643 2026] [:error] [pid 61723:tid 61753] [client 109.178.163.60:1086] [client 109.178.163.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.178.163.60, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aahEmj-cYcKSTgnaHK52AAAAAJA"]
[Wed Mar 04 23:58:16.982080 2026] [:error] [pid 64829:tid 64833] [client 170.106.113.159:48846] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aahWmJ9ZED3FG9h7uihCwwAAAAI"]
[Thu Mar 05 00:14:47.441104 2026] [:error] [pid 60622:tid 60694] [client 125.75.66.97:49255] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aahadxjlaiZh5Vup4nCfLgAAAEM"]
[Thu Mar 05 02:51:46.779992 2026] [:error] [pid 26934:tid 26965] [client 217.182.195.140:33852] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aah_QmDWd71V_nuoqWJezwAAAIw"]
[Thu Mar 05 02:51:49.083943 2026] [:error] [pid 27814:tid 27893] [client 217.182.195.140:36610] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aah_RbPcbh1BHIHQb9KSVgAAANM"]
[Thu Mar 05 02:51:51.495620 2026] [:error] [pid 27814:tid 27886] [client 217.182.195.140:36624] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aah_R7Pcbh1BHIHQb9KSXwAAAMw"]
[Thu Mar 05 02:51:53.861457 2026] [:error] [pid 27814:tid 27892] [client 217.182.195.140:36638] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aah_SbPcbh1BHIHQb9KSZQAAANI"]
[Thu Mar 05 02:51:56.369102 2026] [:error] [pid 26934:tid 26975] [client 217.182.195.140:43778] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aah_TGDWd71V_nuoqWJe8wAAAJQ"]
[Thu Mar 05 02:51:58.870222 2026] [:error] [pid 27472:tid 27544] [client 217.182.195.140:43780] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aah_Trt7N-W1OaN6b8rtRQAAAY0"]
[Thu Mar 05 02:52:01.125458 2026] [:error] [pid 26934:tid 26972] [client 217.182.195.140:43784] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aah_UWDWd71V_nuoqWJfCAAAAJE"]
[Thu Mar 05 02:52:03.487485 2026] [:error] [pid 26934:tid 26958] [client 217.182.195.140:43794] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aah_U2DWd71V_nuoqWJfEgAAAIU"]
[Thu Mar 05 02:52:05.993991 2026] [:error] [pid 26934:tid 26967] [client 217.182.195.140:48010] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aah_VWDWd71V_nuoqWJfGQAAAI0"]
[Thu Mar 05 02:52:08.523335 2026] [:error] [pid 26934:tid 26975] [client 217.182.195.140:48014] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aah_WGDWd71V_nuoqWJfHwAAAJQ"]
[Thu Mar 05 02:52:10.918802 2026] [:error] [pid 27472:tid 27532] [client 217.182.195.140:48028] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aah_Wrt7N-W1OaN6b8rtUAAAAYE"]
[Thu Mar 05 02:52:13.420949 2026] [:error] [pid 27472:tid 27548] [client 217.182.195.140:48044] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aah_Xbt7N-W1OaN6b8rtUwAAAZA"]
[Thu Mar 05 02:52:15.953742 2026] [:error] [pid 27814:tid 27875] [client 217.182.195.140:59358] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aah_X7Pcbh1BHIHQb9KSlAAAAMI"]
[Thu Mar 05 02:52:18.468927 2026] [:error] [pid 26934:tid 26958] [client 217.182.195.140:59364] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aah_YmDWd71V_nuoqWJfRAAAAIU"]
[Thu Mar 05 02:52:20.839805 2026] [:error] [pid 26966:tid 27018] [client 217.182.195.140:59372] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aah_ZBaIQuoePO_dwgdBqAAAAEU"]
[Thu Mar 05 02:52:23.366242 2026] [:error] [pid 27814:tid 27875] [client 217.182.195.140:59384] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aah_Z7Pcbh1BHIHQb9KSoAAAAMI"]
[Thu Mar 05 02:52:25.884319 2026] [:error] [pid 27472:tid 27551] [client 217.182.195.140:36890] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aah_abt7N-W1OaN6b8rtXwAAAZI"]
[Thu Mar 05 02:52:28.399260 2026] [:error] [pid 27472:tid 27555] [client 217.182.195.140:36894] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aah_bLt7N-W1OaN6b8rtYQAAAZY"]
[Thu Mar 05 02:52:30.755343 2026] [:error] [pid 26934:tid 26957] [client 217.182.195.140:36904] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aah_bmDWd71V_nuoqWJfYwAAAIQ"]
[Thu Mar 05 02:52:33.277602 2026] [:error] [pid 27814:tid 27889] [client 217.182.195.140:36910] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aah_cbPcbh1BHIHQb9KStwAAAM8"]
[Thu Mar 05 02:52:35.792607 2026] [:error] [pid 26934:tid 26956] [client 217.182.195.140:42128] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aah_c2DWd71V_nuoqWJfcQAAAIM"]
[Thu Mar 05 02:52:38.309199 2026] [:error] [pid 27472:tid 27556] [client 217.182.195.140:42132] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aah_drt7N-W1OaN6b8rtawAAAZc"]
[Thu Mar 05 02:52:40.697309 2026] [:error] [pid 27472:tid 27550] [client 217.182.195.140:42144] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aah_eLt7N-W1OaN6b8rtbQAAAZE"]
[Thu Mar 05 02:52:43.223668 2026] [:error] [pid 26934:tid 26963] [client 217.182.195.140:42146] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aah_e2DWd71V_nuoqWJfgQAAAIo"]
[Thu Mar 05 02:53:14.528562 2026] [:error] [pid 27814:tid 27882] [client 217.182.195.140:53200] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aah_mrPcbh1BHIHQb9KTAwAAAMg"]
[Thu Mar 05 02:53:16.993889 2026] [:error] [pid 26934:tid 26977] [client 217.182.195.140:46622] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aah_nGDWd71V_nuoqWJf5QAAAJY"]
[Thu Mar 05 02:53:19.357203 2026] [:error] [pid 27472:tid 27532] [client 217.182.195.140:46634] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aah_n7t7N-W1OaN6b8rtjgAAAYE"]
[Thu Mar 05 02:53:21.909085 2026] [:error] [pid 26969:tid 27061] [client 217.182.195.140:46648] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aah_oZlCO2K-E0MVfPPrEgAAABU"]
[Thu Mar 05 02:53:24.308633 2026] [:error] [pid 26969:tid 27057] [client 217.182.195.140:46664] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aah_pJlCO2K-E0MVfPPrFAAAABE"]
[Thu Mar 05 02:53:26.824323 2026] [:error] [pid 27814:tid 27888] [client 217.182.195.140:37498] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aah_prPcbh1BHIHQb9KTFwAAAM4"]
[Thu Mar 05 02:53:29.329986 2026] [:error] [pid 26969:tid 27040] [client 217.182.195.140:37506] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aah_qZlCO2K-E0MVfPPrIAAAAAA"]
[Thu Mar 05 02:53:31.693122 2026] [:error] [pid 27472:tid 27548] [client 217.182.195.140:37508] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aah_q7t7N-W1OaN6b8rtogAAAZA"]
[Thu Mar 05 02:53:34.194063 2026] [:error] [pid 27814:tid 27882] [client 217.182.195.140:37514] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aah_rrPcbh1BHIHQb9KTJAAAAMg"]
[Thu Mar 05 02:53:36.534201 2026] [:error] [pid 27814:tid 27876] [client 217.182.195.140:54174] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aah_sLPcbh1BHIHQb9KTKwAAAMM"]
[Thu Mar 05 02:53:39.028353 2026] [:error] [pid 27814:tid 27873] [client 217.182.195.140:54184] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aah_s7Pcbh1BHIHQb9KTLwAAAMA"]
[Thu Mar 05 02:53:41.541685 2026] [:error] [pid 26934:tid 26955] [client 217.182.195.140:54190] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aah_tWDWd71V_nuoqWJgGAAAAII"]
[Thu Mar 05 02:53:44.052489 2026] [:error] [pid 27814:tid 27886] [client 217.182.195.140:54198] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aah_uLPcbh1BHIHQb9KTNQAAAMw"]
[Thu Mar 05 02:53:46.555666 2026] [:error] [pid 27814:tid 27883] [client 217.182.195.140:38596] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aah_urPcbh1BHIHQb9KTOgAAAMk"]
[Thu Mar 05 02:53:49.049475 2026] [:error] [pid 26934:tid 26961] [client 217.182.195.140:38602] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aah_vWDWd71V_nuoqWJgKAAAAIg"]
[Thu Mar 05 02:53:51.565976 2026] [:error] [pid 26934:tid 26976] [client 217.182.195.140:38608] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aah_v2DWd71V_nuoqWJgLgAAAJU"]
[Thu Mar 05 02:53:54.066756 2026] [:error] [pid 26934:tid 26962] [client 217.182.195.140:38618] [client 217.182.195.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aah_wmDWd71V_nuoqWJgMgAAAIk"]
[Thu Mar 05 03:32:19.692628 2026] [access_compat:error] [pid 45592:tid 45617] [client 85.203.23.200:31769] AH01797: client denied by server configuration: /home/hbtwocom/public_html/wp-content/updraft/plugins-old
[Thu Mar 05 03:32:35.254892 2026] [:error] [pid 45697:tid 45702] [client 85.203.23.178:38251] [client 85.203.23.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaiI0-IVa-kccjOHA3Ce7QAAAMI"]
[Thu Mar 05 03:32:38.679131 2026] [autoindex:error] [pid 45594:tid 45679] [client 85.203.23.187:27173] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:32:42.263615 2026] [autoindex:error] [pid 45697:tid 45722] [client 85.203.23.225:56811] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:32:43.515849 2026] [:error] [pid 45594:tid 45690] [client 85.203.23.181:22809] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/speculative8.php"] [unique_id "aaiI24i281gQdrjQoutB-wAAAJU"]
[Thu Mar 05 03:32:49.114835 2026] [autoindex:error] [pid 45593:tid 45653] [client 85.203.23.168:61065] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://hotbooksbookeeping2.com/wp-includes/js/dist
[Thu Mar 05 03:32:50.431067 2026] [autoindex:error] [pid 45592:tid 45618] [client 85.203.23.178:50157] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:32:51.740423 2026] [autoindex:error] [pid 45593:tid 45655] [client 85.203.23.214:41435] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:32:51.972594 2026] [:error] [pid 45592:tid 45621] [client 85.203.23.178:43789] [client 85.203.23.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aaiI4yDVTCs60skc_EijQwAAAAc"]
[Thu Mar 05 03:32:52.170208 2026] [autoindex:error] [pid 45592:tid 45627] [client 85.203.23.169:50997] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:32:57.077622 2026] [autoindex:error] [pid 45697:tid 45706] [client 85.203.23.176:45859] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:32:57.331435 2026] [autoindex:error] [pid 45697:tid 45707] [client 85.203.23.202:33729] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:32:59.842979 2026] [autoindex:error] [pid 45593:tid 45664] [client 85.203.23.182:41947] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:04.409662 2026] [:error] [pid 45697:tid 45700] [client 85.203.23.166:60929] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aaiI8OIVa-kccjOHA3CfdAAAAMA"]
[Thu Mar 05 03:33:12.239757 2026] [autoindex:error] [pid 45697:tid 45712] [client 85.203.23.195:51707] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:15.436933 2026] [:error] [pid 45697:tid 45708] [client 85.203.23.212:55309] [client 85.203.23.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aaiI--IVa-kccjOHA3CfnwAAAMg"]
[Thu Mar 05 03:33:17.876913 2026] [autoindex:error] [pid 45697:tid 45717] [client 85.203.23.208:39749] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:28.916764 2026] [autoindex:error] [pid 45593:tid 45650] [client 85.203.23.182:31293] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:29.149281 2026] [autoindex:error] [pid 45593:tid 45643] [client 85.203.23.169:63797] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/mediaelement/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:29.350569 2026] [autoindex:error] [pid 45592:tid 45619] [client 85.203.23.176:58565] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:31.744409 2026] [autoindex:error] [pid 45697:tid 45720] [client 85.203.23.166:57349] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:44.229648 2026] [autoindex:error] [pid 45594:tid 45690] [client 85.203.23.217:45475] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:50.076773 2026] [autoindex:error] [pid 45594:tid 45679] [client 85.203.23.206:48619] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:51.513563 2026] [:error] [pid 45697:tid 45716] [client 85.203.23.217:40051] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaiJH-IVa-kccjOHA3CgAwAAANA"]
[Thu Mar 05 03:33:51.716625 2026] [autoindex:error] [pid 45697:tid 45714] [client 85.203.23.209:36339] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:51.899822 2026] [:error] [pid 45697:tid 45718] [client 85.203.23.193:44517] [client 85.203.23.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/wp-good.php"] [unique_id "aaiJH-IVa-kccjOHA3CgBwAAANI"]
[Thu Mar 05 03:33:54.410720 2026] [autoindex:error] [pid 45697:tid 45718] [client 85.203.23.219:56701] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:54.598023 2026] [:error] [pid 45697:tid 45710] [client 85.203.23.219:62545] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aaiJIuIVa-kccjOHA3CgEgAAAMo"]
[Thu Mar 05 03:33:54.816934 2026] [autoindex:error] [pid 45593:tid 45666] [client 85.203.23.206:54347] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:57.358519 2026] [:error] [pid 45594:tid 45687] [client 85.203.23.210:31577] [client 85.203.23.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaiJJYi281gQdrjQoutClgAAAJI"]
[Thu Mar 05 03:33:57.551040 2026] [autoindex:error] [pid 45697:tid 45702] [client 85.203.23.203:48811] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:33:57.749970 2026] [autoindex:error] [pid 45592:tid 45636] [client 85.203.23.202:63595] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:00.395502 2026] [autoindex:error] [pid 45697:tid 45701] [client 85.203.23.208:21465] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:01.803982 2026] [autoindex:error] [pid 45697:tid 45721] [client 85.203.23.211:53375] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:03.235048 2026] [autoindex:error] [pid 45593:tid 45651] [client 85.203.23.193:36875] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:03.535273 2026] [autoindex:error] [pid 45697:tid 45722] [client 85.203.23.205:42327] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:04.742644 2026] [autoindex:error] [pid 45594:tid 45689] [client 85.203.23.220:30845] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:06.121074 2026] [autoindex:error] [pid 45592:tid 45622] [client 85.203.23.177:55769] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:07.582245 2026] [autoindex:error] [pid 45593:tid 45648] [client 85.203.23.204:57711] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://hotbooksbookeeping2.com/wp-includes/block-bindings
[Thu Mar 05 03:34:08.778221 2026] [autoindex:error] [pid 45697:tid 45723] [client 85.203.23.215:26773] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:08.965960 2026] [autoindex:error] [pid 45594:tid 45687] [client 85.203.23.208:21191] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:09.168999 2026] [autoindex:error] [pid 45697:tid 45722] [client 85.203.23.173:57979] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:11.578076 2026] [autoindex:error] [pid 45697:tid 45703] [client 85.203.23.183:29557] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:14.012106 2026] [autoindex:error] [pid 45697:tid 45716] [client 85.203.23.178:64253] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comment-content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:15.442934 2026] [autoindex:error] [pid 45697:tid 45723] [client 85.203.23.199:59069] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/nextpage/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:15.627548 2026] [:error] [pid 45697:tid 45713] [client 85.203.23.181:32467] [client 85.203.23.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aaiJN-IVa-kccjOHA3CgWwAAAM0"]
[Thu Mar 05 03:34:18.116758 2026] [autoindex:error] [pid 45593:tid 45650] [client 85.203.23.188:55025] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:18.324388 2026] [autoindex:error] [pid 45594:tid 45692] [client 85.203.23.217:26261] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:18.519038 2026] [autoindex:error] [pid 45594:tid 45684] [client 85.203.23.221:42373] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:18.705904 2026] [autoindex:error] [pid 45594:tid 45685] [client 85.203.23.206:57885] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query-pagination/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:18.899078 2026] [autoindex:error] [pid 45594:tid 45682] [client 85.203.23.172:47101] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:20.258806 2026] [autoindex:error] [pid 45594:tid 45683] [client 85.203.23.201:32437] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:21.552718 2026] [autoindex:error] [pid 45594:tid 45678] [client 85.203.23.171:58493] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:25.903957 2026] [proxy_fcgi:error] [pid 45592:tid 45639] [client 85.203.23.188:51469] AH01071: Got error 'Primary script unknown'
[Thu Mar 05 03:34:26.100115 2026] [autoindex:error] [pid 45697:tid 45709] [client 85.203.23.183:28987] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:34.493377 2026] [autoindex:error] [pid 45594:tid 45676] [client 85.203.23.168:60871] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:34.685602 2026] [autoindex:error] [pid 45594:tid 45681] [client 85.203.23.178:59661] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/freeform/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:37.068240 2026] [:error] [pid 45594:tid 45682] [client 85.203.23.180:51383] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aaiJTYi281gQdrjQoutDCAAAAI0"]
[Thu Mar 05 03:34:37.264734 2026] [autoindex:error] [pid 45697:tid 45717] [client 85.203.23.203:45853] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:38.724088 2026] [:error] [pid 45697:tid 45710] [client 85.203.23.169:20147] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaiJTuIVa-kccjOHA3Cg0wAAAMo"]
[Thu Mar 05 03:34:38.916650 2026] [autoindex:error] [pid 45697:tid 45713] [client 85.203.23.168:38041] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:46.224697 2026] [autoindex:error] [pid 45697:tid 45720] [client 85.203.23.214:38119] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:46.668096 2026] [:error] [pid 45594:tid 45677] [client 85.203.23.166:42269] [client 85.203.23.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaiJVoi281gQdrjQoutDNAAAAIg"]
[Thu Mar 05 03:34:49.602408 2026] [:error] [pid 45697:tid 45714] [client 85.203.23.219:39529] [client 85.203.23.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "aaiJWeIVa-kccjOHA3ChMQAAAM4"]
[Thu Mar 05 03:34:50.959953 2026] [autoindex:error] [pid 45697:tid 45702] [client 85.203.23.200:36871] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/separator/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:54.172026 2026] [autoindex:error] [pid 45697:tid 45711] [client 85.203.23.192:44409] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/video/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:34:55.619986 2026] [autoindex:error] [pid 45593:tid 45656] [client 85.203.23.208:54311] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:08.324151 2026] [autoindex:error] [pid 45593:tid 45661] [client 85.203.23.172:56175] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:08.536734 2026] [:error] [pid 45594:tid 45673] [client 85.203.23.176:32755] [client 85.203.23.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.23.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaiJbIi281gQdrjQoutDagAAAIQ"]
[Thu Mar 05 03:35:11.056870 2026] [autoindex:error] [pid 45594:tid 45672] [client 85.203.23.219:39527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwenty/assets/fonts/inter/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:13.459856 2026] [autoindex:error] [pid 45697:tid 45719] [client 85.203.23.181:28527] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:14.978690 2026] [autoindex:error] [pid 45593:tid 45664] [client 85.203.23.210:21595] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/block-library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:17.636513 2026] [autoindex:error] [pid 45593:tid 45657] [client 85.203.23.199:59975] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:17.924028 2026] [:error] [pid 45592:tid 45632] [client 85.203.23.178:54195] [client 85.203.23.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aaiJdSDVTCs60skc_EikMQAAABI"]
[Thu Mar 05 03:35:29.232843 2026] [autoindex:error] [pid 45592:tid 45629] [client 85.203.23.173:46269] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:32.861673 2026] [autoindex:error] [pid 45592:tid 45615] [client 85.203.23.222:49723] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/column/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:34.103136 2026] [autoindex:error] [pid 45697:tid 45718] [client 85.203.23.176:22431] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:35.460829 2026] [autoindex:error] [pid 45593:tid 45664] [client 85.203.23.181:46257] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:44.848332 2026] [autoindex:error] [pid 45697:tid 45700] [client 85.203.23.187:61239] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:46.122942 2026] [autoindex:error] [pid 45697:tid 45712] [client 85.203.23.202:53871] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:53.371556 2026] [:error] [pid 45594:tid 45685] [client 85.203.23.211:29103] [client 85.203.23.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaiJmYi281gQdrjQoutD4QAAAJA"]
[Thu Mar 05 03:35:55.940566 2026] [autoindex:error] [pid 45697:tid 45720] [client 85.203.23.225:33691] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:56.127468 2026] [autoindex:error] [pid 45593:tid 45666] [client 85.203.23.193:58491] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:56.313357 2026] [autoindex:error] [pid 45697:tid 45710] [client 85.203.23.170:33241] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/commands/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:56.526647 2026] [autoindex:error] [pid 45697:tid 45709] [client 85.203.23.193:61593] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:35:57.898105 2026] [:error] [pid 45697:tid 45722] [client 85.203.23.215:63311] [client 85.203.23.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "aaiJneIVa-kccjOHA3CiEAAAANY"]
[Thu Mar 05 03:35:58.108726 2026] [autoindex:error] [pid 45697:tid 45718] [client 85.203.23.172:41925] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:01.141811 2026] [autoindex:error] [pid 45594:tid 45693] [client 85.203.23.166:43819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/tag-cloud/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:03.817741 2026] [autoindex:error] [pid 45592:tid 45623] [client 85.203.23.202:59163] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:04.048768 2026] [:error] [pid 45697:tid 45706] [client 85.203.23.177:31851] [client 85.203.23.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/admin.php"] [unique_id "aaiJpOIVa-kccjOHA3CiMAAAAMY"]
[Thu Mar 05 03:36:04.235676 2026] [:error] [pid 45592:tid 45636] [client 85.203.23.225:45111] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/themes.php"] [unique_id "aaiJpCDVTCs60skc_EikeAAAABU"]
[Thu Mar 05 03:36:11.654341 2026] [autoindex:error] [pid 45697:tid 45700] [client 85.203.23.196:53217] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:23.919532 2026] [:error] [pid 45697:tid 45718] [client 85.203.23.171:46211] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "aaiJt-IVa-kccjOHA3CijgAAANI"]
[Thu Mar 05 03:36:26.414373 2026] [autoindex:error] [pid 51641:tid 51656] [client 85.203.23.202:60869] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:29.813404 2026] [autoindex:error] [pid 51641:tid 51664] [client 85.203.23.222:43281] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:30.033236 2026] [:error] [pid 45593:tid 45656] [client 85.203.23.216:54489] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaiJvkux1JWn_3eTLFo89AAAAE4"]
[Thu Mar 05 03:36:30.233804 2026] [autoindex:error] [pid 45592:tid 45634] [client 85.203.23.204:49035] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:35.725773 2026] [:error] [pid 51641:tid 51661] [client 85.203.23.222:55465] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp.php"] [unique_id "aaiJw74c_dpQJKU4TVP6xgAAAQ4"]
[Thu Mar 05 03:36:38.007779 2026] [autoindex:error] [pid 51641:tid 51657] [client 85.203.23.176:28789] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:38.217431 2026] [autoindex:error] [pid 51641:tid 51670] [client 85.203.23.169:33385] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:43.646932 2026] [autoindex:error] [pid 45593:tid 45656] [client 85.203.23.181:29075] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:46.200139 2026] [autoindex:error] [pid 45697:tid 45703] [client 85.203.23.171:45831] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:48.612429 2026] [autoindex:error] [pid 45594:tid 45692] [client 85.203.23.203:54343] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:52.904046 2026] [autoindex:error] [pid 51641:tid 51647] [client 85.203.23.173:36167] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:56.513604 2026] [access_compat:error] [pid 51641:tid 51646] [client 85.203.23.211:23273] AH01797: client denied by server configuration: /home/hbtwocom/public_html/wp-content/updraft/emptydir/
[Thu Mar 05 03:36:56.711230 2026] [autoindex:error] [pid 51641:tid 51661] [client 85.203.23.166:26981] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:59.343675 2026] [autoindex:error] [pid 51641:tid 51659] [client 85.203.23.215:52449] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-comments-form/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:59.569546 2026] [autoindex:error] [pid 45593:tid 45665] [client 85.203.23.171:52707] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/navigation-submenu/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:59.770539 2026] [autoindex:error] [pid 45697:tid 45718] [client 85.203.23.172:60505] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/customize-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:36:59.974547 2026] [autoindex:error] [pid 51641:tid 51662] [client 85.203.23.192:45591] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/script-modules/block-library/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:37:01.569962 2026] [autoindex:error] [pid 51641:tid 51646] [client 85.203.23.222:52157] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/image/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:37:01.773248 2026] [autoindex:error] [pid 51641:tid 51666] [client 85.203.23.180:23115] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:37:01.957078 2026] [:error] [pid 51641:tid 51667] [client 85.203.23.217:23173] [client 85.203.23.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/categories/admin.php"] [unique_id "aaiJ3b4c_dpQJKU4TVP7RAAAARQ"]
[Thu Mar 05 03:37:03.157301 2026] [:error] [pid 51641:tid 51646] [client 85.203.23.203:36445] [client 85.203.23.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/list-item/test.php"] [unique_id "aaiJ374c_dpQJKU4TVP7UAAAAQM"]
[Thu Mar 05 03:37:06.753236 2026] [:error] [pid 45592:tid 45619] [client 85.203.23.216:43713] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/tag-cloud/wp-load.php"] [unique_id "aaiJ4iDVTCs60skc_Eik2gAAAAU"]
[Thu Mar 05 03:37:10.979240 2026] [:error] [pid 45593:tid 45646] [client 85.203.23.193:61897] [client 85.203.23.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-xxx.php"] [unique_id "aaiJ5kux1JWn_3eTLFo9JQAAAEQ"]
[Thu Mar 05 03:37:17.188149 2026] [:error] [pid 51641:tid 51647] [client 85.203.23.176:52571] [client 85.203.23.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/categories/chosen.php"] [unique_id "aaiJ7b4c_dpQJKU4TVP7mQAAAQQ"]
[Thu Mar 05 03:37:32.890904 2026] [:error] [pid 45594:tid 45687] [client 85.203.23.195:42447] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/gettest.php"] [unique_id "aaiJ_Ii281gQdrjQoutEywAAAJI"]
[Thu Mar 05 03:37:42.861687 2026] [autoindex:error] [pid 45697:tid 45702] [client 85.203.23.201:35637] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyone/template-parts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:37:47.328289 2026] [autoindex:error] [pid 51641:tid 51644] [client 85.203.23.202:59291] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 05 03:37:48.722214 2026] [:error] [pid 45697:tid 45717] [client 85.203.23.223:27723] [client 85.203.23.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/zczv.php"] [unique_id "aaiKDOIVa-kccjOHA3CjXwAAANE"]
[Thu Mar 05 03:37:48.910864 2026] [:error] [pid 45593:tid 45656] [client 85.203.23.208:31561] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaiKDEux1JWn_3eTLFo9RgAAAE4"]
[Thu Mar 05 03:37:52.566753 2026] [authz_core:error] [pid 45697:tid 45703] [client 85.203.23.192:30727] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/views/cmd.php
[Thu Mar 05 03:37:55.077359 2026] [:error] [pid 45697:tid 45705] [client 85.203.23.206:41663] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/about.php"] [unique_id "aaiKE-IVa-kccjOHA3CjfgAAAMU"]
[Thu Mar 05 03:37:55.276386 2026] [:error] [pid 45697:tid 45711] [client 85.203.23.171:32647] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaiKE-IVa-kccjOHA3CjgQAAAMs"]
[Thu Mar 05 03:37:56.487891 2026] [:error] [pid 45592:tid 45616] [client 85.203.23.214:42349] [client 85.203.23.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/customize-widgets/about.php"] [unique_id "aaiKFCDVTCs60skc_Eik_wAAAAI"]
[Thu Mar 05 03:38:04.189031 2026] [proxy_fcgi:error] [pid 45697:tid 45705] [client 85.203.23.192:30345] AH01071: Got error 'PHP message: PHP Fatal error:  Trait 'WPCF7_PocketHolder' not found in /home/hbtwocom/public_html/wp-content/plugins/contact-form-7/includes/submission.php on line 6'
[Thu Mar 05 03:38:14.119700 2026] [:error] [pid 45594:tid 45684] [client 85.203.23.184:57429] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/chosen.php"] [unique_id "aaiKJoi281gQdrjQoutFJAAAAI8"]
[Thu Mar 05 03:38:32.559233 2026] [:error] [pid 45697:tid 45705] [client 85.203.23.191:29489] [client 85.203.23.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aaiKOOIVa-kccjOHA3Cj8gAAAMU"]
[Thu Mar 05 03:38:36.318354 2026] [:error] [pid 45592:tid 45633] [client 85.203.23.206:35319] [client 85.203.23.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-mails.php"] [unique_id "aaiKPCDVTCs60skc_EilHQAAABM"]
[Thu Mar 05 03:38:36.506558 2026] [:error] [pid 45593:tid 45644] [client 85.203.23.188:27583] [client 85.203.23.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/Curve25519/wp-cron.php"] [unique_id "aaiKPEux1JWn_3eTLFo9kgAAAEI"]
[Thu Mar 05 03:38:40.002765 2026] [:error] [pid 51641:tid 51670] [client 85.203.23.176:47783] [client 85.203.23.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-widget-table.php"] [unique_id "aaiKQL4c_dpQJKU4TVP8ggAAARc"]
[Thu Mar 05 03:38:40.201346 2026] [:error] [pid 51641:tid 51671] [client 85.203.23.187:28549] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/config.php"] [unique_id "aaiKQL4c_dpQJKU4TVP8hAAAARg"]
[Thu Mar 05 03:38:40.397142 2026] [:error] [pid 51641:tid 51668] [client 85.203.23.184:36443] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "aaiKQL4c_dpQJKU4TVP8hwAAARU"]
[Thu Mar 05 03:38:40.596358 2026] [:error] [pid 45697:tid 45704] [client 85.203.23.171:43505] [client 85.203.23.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/missing/about.php"] [unique_id "aaiKQOIVa-kccjOHA3CkCgAAAMQ"]
[Thu Mar 05 03:38:50.739300 2026] [:error] [pid 45697:tid 45719] [client 85.203.23.222:40831] [client 85.203.23.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-terms/vx.php"] [unique_id "aaiKSuIVa-kccjOHA3CkIwAAANM"]
[Thu Mar 05 03:38:50.923306 2026] [:error] [pid 51641:tid 51671] [client 85.203.23.192:53943] [client 85.203.23.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/webdb.php"] [unique_id "aaiKSr4c_dpQJKU4TVP8wgAAARg"]
[Thu Mar 05 03:39:15.210770 2026] [:error] [pid 51641:tid 51653] [client 85.203.23.196:48729] [client 85.203.23.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/about.php"] [unique_id "aaiKY74c_dpQJKU4TVP9EQAAAQY"]
[Thu Mar 05 03:39:15.402111 2026] [:error] [pid 45697:tid 45719] [client 85.203.23.170:49423] [client 85.203.23.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/footnotes/about.php"] [unique_id "aaiKY-IVa-kccjOHA3CkUwAAANM"]
[Thu Mar 05 03:39:15.587833 2026] [:error] [pid 45697:tid 45700] [client 85.203.23.199:52791] [client 85.203.23.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/wp-conflg.php"] [unique_id "aaiKY-IVa-kccjOHA3CkVAAAAMA"]
[Thu Mar 05 03:39:15.805128 2026] [:error] [pid 45697:tid 45712] [client 85.203.23.180:36777] [client 85.203.23.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/about.php"] [unique_id "aaiKY-IVa-kccjOHA3CkVwAAAMw"]
[Thu Mar 05 03:39:31.567579 2026] [access_compat:error] [pid 45594:tid 45687] [client 85.203.23.181:40851] AH01797: client denied by server configuration: /home/hbtwocom/public_html/wp-content/updraft/fonts
[Thu Mar 05 03:39:43.353521 2026] [:error] [pid 51641:tid 51668] [client 85.203.23.184:37763] [client 85.203.23.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "aaiKf74c_dpQJKU4TVP9RwAAARU"]
[Thu Mar 05 03:40:06.872511 2026] [:error] [pid 45697:tid 45702] [client 85.203.23.209:56179] [client 85.203.23.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/Content/Type/about.php"] [unique_id "aaiKluIVa-kccjOHA3Ck0QAAAMI"]
[Thu Mar 05 03:40:07.181140 2026] [:error] [pid 45593:tid 45659] [client 85.203.23.195:39569] [client 85.203.23.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaiKl0ux1JWn_3eTLFo95gAAAFE"]
[Thu Mar 05 03:40:19.304377 2026] [:error] [pid 45594:tid 45673] [client 85.203.23.169:55955] [client 85.203.23.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/abilities-api/about.php"] [unique_id "aaiKo4i281gQdrjQoutF5gAAAIQ"]
[Thu Mar 05 03:40:20.705729 2026] [:error] [pid 51641:tid 51671] [client 85.203.23.183:44755] [client 85.203.23.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/000.php"] [unique_id "aaiKpL4c_dpQJKU4TVP9rQAAARg"]
[Thu Mar 05 03:40:24.180820 2026] [:error] [pid 45592:tid 45631] [client 85.203.23.190:38151] [client 85.203.23.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/chosen.php"] [unique_id "aaiKqCDVTCs60skc_EiliAAAABE"]
[Thu Mar 05 03:40:24.410068 2026] [:error] [pid 45592:tid 45638] [client 85.203.23.225:45435] [client 85.203.23.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aaiKqCDVTCs60skc_EiliQAAABc"]
[Thu Mar 05 03:40:24.606143 2026] [:error] [pid 45593:tid 45650] [client 85.203.23.185:40229] [client 85.203.23.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/anskrit.php"] [unique_id "aaiKqEux1JWn_3eTLFo9-QAAAEg"]
[Thu Mar 05 03:40:45.341810 2026] [:error] [pid 51641:tid 51662] [client 85.203.23.172:32675] [client 85.203.23.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/rxzx.php"] [unique_id "aaiKvb4c_dpQJKU4TVP98AAAAQ8"]
[Thu Mar 05 03:40:48.975847 2026] [:error] [pid 51641:tid 51666] [client 85.203.23.216:27029] [client 85.203.23.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaiKwL4c_dpQJKU4TVP9-QAAARM"]
[Thu Mar 05 03:40:49.163912 2026] [:error] [pid 51641:tid 51669] [client 85.203.23.208:48625] [client 85.203.23.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/zczv.php"] [unique_id "aaiKwb4c_dpQJKU4TVP9-gAAARY"]
[Thu Mar 05 03:40:49.347300 2026] [:error] [pid 51641:tid 51662] [client 85.203.23.187:61987] [client 85.203.23.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/rstsgd.php"] [unique_id "aaiKwb4c_dpQJKU4TVP9-wAAAQ8"]
[Thu Mar 05 07:20:11.624334 2026] [:error] [pid 62435:tid 62458] [client 43.164.196.57:48822] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aai-KyMZJMDfZh_-8sXKEAAAAMg"]
[Thu Mar 05 07:30:11.374398 2026] [:error] [pid 53350:tid 53391] [client 169.224.1.37:9511] [client 169.224.1.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.224.1.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aajAg6O0Baxc5WFYeP2Y-QAAAQ4"]
[Thu Mar 05 07:36:51.714730 2026] [:error] [pid 41459:tid 41491] [client 169.224.1.37:49773] [client 169.224.1.37] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aajCE-dFBZEnZ3pzxrVOhQAAAVE"]
[Thu Mar 05 10:59:32.726204 2026] [:error] [pid 41459:tid 41495] [client 43.128.156.124:46528] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aajxlOdFBZEnZ3pzxrXvVQAAAVU"]
[Thu Mar 05 19:08:48.818700 2026] [:error] [pid 53350:tid 53393] [client 103.77.106.118:49282] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aalkQKO0Baxc5WFYeP0CygAAARA"]
[Thu Mar 05 19:08:49.047473 2026] [:error] [pid 41459:tid 41487] [client 103.77.106.118:49302] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aalkQedFBZEnZ3pzxrUT1gAAAU0"]
[Thu Mar 05 19:42:22.151313 2026] [:error] [pid 53350:tid 53381] [client 106.54.62.156:59944] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aalsHqO0Baxc5WFYeP0crQAAAQY"]
[Thu Mar 05 20:18:33.857677 2026] [:error] [pid 53350:tid 53388] [client 43.153.204.189:51644] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aal0maO0Baxc5WFYeP01dAAAAQs"]
[Thu Mar 05 20:26:51.005566 2026] [:error] [pid 53350:tid 53385] [client 91.65.123.43:27166] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aal2i6O0Baxc5WFYeP08lgAAAQk"]
[Thu Mar 05 20:26:53.592168 2026] [:error] [pid 62435:tid 62456] [client 91.65.123.43:56512] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aal2jSMZJMDfZh_-8sWA6wAAAMY"]
[Thu Mar 05 20:26:56.224804 2026] [:error] [pid 53350:tid 53394] [client 91.65.123.43:56227] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aal2kKO0Baxc5WFYeP08sgAAARE"]
[Thu Mar 05 20:26:58.735157 2026] [:error] [pid 62177:tid 62316] [client 91.65.123.43:15637] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aal2khWSQc2OzPrsnwXbpwAAAIU"]
[Thu Mar 05 20:27:01.258945 2026] [:error] [pid 53350:tid 53398] [client 91.65.123.43:33170] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aal2laO0Baxc5WFYeP08wgAAARU"]
[Thu Mar 05 20:27:03.752016 2026] [:error] [pid 41459:tid 41488] [client 91.65.123.43:25805] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aal2l-dFBZEnZ3pzxrU8swAAAU4"]
[Thu Mar 05 20:27:06.441073 2026] [:error] [pid 53350:tid 53388] [client 91.65.123.43:57274] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aal2mqO0Baxc5WFYeP081QAAAQs"]
[Thu Mar 05 20:27:08.958256 2026] [:error] [pid 53350:tid 53391] [client 91.65.123.43:35740] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aal2nKO0Baxc5WFYeP085AAAAQ4"]
[Thu Mar 05 20:27:11.659225 2026] [:error] [pid 41459:tid 41492] [client 91.65.123.43:22524] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aal2n-dFBZEnZ3pzxrU8xgAAAVI"]
[Thu Mar 05 20:27:14.165237 2026] [:error] [pid 62177:tid 62321] [client 91.65.123.43:46475] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aal2ohWSQc2OzPrsnwXbswAAAIo"]
[Thu Mar 05 20:27:16.641635 2026] [:error] [pid 53350:tid 53382] [client 91.65.123.43:45106] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aal2pKO0Baxc5WFYeP09AAAAAQc"]
[Thu Mar 05 20:27:19.321077 2026] [:error] [pid 53350:tid 53393] [client 91.65.123.43:65502] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aal2p6O0Baxc5WFYeP09DAAAARA"]
[Thu Mar 05 20:27:21.917536 2026] [:error] [pid 53350:tid 53395] [client 91.65.123.43:6072] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aal2qaO0Baxc5WFYeP09HAAAARI"]
[Thu Mar 05 20:27:24.547118 2026] [:error] [pid 41459:tid 41489] [client 91.65.123.43:52365] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aal2rOdFBZEnZ3pzxrU84QAAAU8"]
[Thu Mar 05 20:27:27.052877 2026] [:error] [pid 53350:tid 53378] [client 91.65.123.43:58737] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aal2r6O0Baxc5WFYeP09NAAAAQM"]
[Thu Mar 05 20:27:29.560100 2026] [:error] [pid 53350:tid 53378] [client 91.65.123.43:52615] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aal2saO0Baxc5WFYeP09OwAAAQM"]
[Thu Mar 05 20:27:32.059231 2026] [:error] [pid 53350:tid 53394] [client 91.65.123.43:24884] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aal2tKO0Baxc5WFYeP09RAAAARE"]
[Thu Mar 05 20:27:34.537907 2026] [:error] [pid 53350:tid 53376] [client 91.65.123.43:46408] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aal2tqO0Baxc5WFYeP09SQAAAQE"]
[Thu Mar 05 20:27:37.183840 2026] [:error] [pid 53350:tid 53376] [client 91.65.123.43:15661] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aal2uaO0Baxc5WFYeP09VgAAAQE"]
[Thu Mar 05 20:27:43.493083 2026] [:error] [pid 62177:tid 62311] [client 91.65.123.43:7023] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aal2vxWSQc2OzPrsnwXb0wAAAIA"]
[Thu Mar 05 20:27:46.911469 2026] [:error] [pid 53350:tid 53376] [client 91.65.123.43:61638] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aal2wqO0Baxc5WFYeP09egAAAQE"]
[Thu Mar 05 20:28:27.039015 2026] [:error] [pid 41459:tid 41479] [client 91.65.123.43:1030] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aal26-dFBZEnZ3pzxrU9hAAAAUU"]
[Thu Mar 05 20:28:29.567921 2026] [:error] [pid 41459:tid 41475] [client 91.65.123.43:6176] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aal27edFBZEnZ3pzxrU9jQAAAUE"]
[Thu Mar 05 20:28:32.268124 2026] [:error] [pid 62177:tid 62331] [client 91.65.123.43:39602] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aal28BWSQc2OzPrsnwXcHwAAAJM"]
[Thu Mar 05 20:28:34.875410 2026] [:error] [pid 41459:tid 41475] [client 91.65.123.43:11592] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aal28udFBZEnZ3pzxrU9mgAAAUE"]
[Thu Mar 05 20:28:37.538560 2026] [:error] [pid 62177:tid 62325] [client 91.65.123.43:64831] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aal29RWSQc2OzPrsnwXcLwAAAI0"]
[Thu Mar 05 20:28:40.060466 2026] [:error] [pid 53350:tid 53393] [client 91.65.123.43:55716] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aal2-KO0Baxc5WFYeP0-GgAAARA"]
[Thu Mar 05 20:28:42.544183 2026] [:error] [pid 62177:tid 62320] [client 91.65.123.43:26656] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aal2-hWSQc2OzPrsnwXcSwAAAIk"]
[Thu Mar 05 20:28:45.009239 2026] [:error] [pid 62176:tid 62286] [client 91.65.123.43:12668] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aal2_SNfTPJryi30JPn80gAAAEI"]
[Thu Mar 05 20:28:47.399164 2026] [:error] [pid 62176:tid 62284] [client 91.65.123.43:54462] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aal2_yNfTPJryi30JPn80wAAAEA"]
[Thu Mar 05 20:28:50.050051 2026] [:error] [pid 62177:tid 62328] [client 91.65.123.43:6939] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aal3AhWSQc2OzPrsnwXcZQAAAJA"]
[Thu Mar 05 20:28:53.002572 2026] [:error] [pid 62176:tid 62298] [client 91.65.123.43:15967] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aal3BSNfTPJryi30JPn82wAAAE4"]
[Thu Mar 05 20:28:55.622149 2026] [:error] [pid 41459:tid 41478] [client 91.65.123.43:16520] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aal3B-dFBZEnZ3pzxrU-BgAAAUQ"]
[Thu Mar 05 20:28:58.104067 2026] [:error] [pid 62435:tid 62456] [client 91.65.123.43:5545] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aal3CiMZJMDfZh_-8sWBVAAAAMY"]
[Thu Mar 05 20:29:01.382109 2026] [:error] [pid 53350:tid 53389] [client 91.65.123.43:21668] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aal3DaO0Baxc5WFYeP0-PQAAAQw"]
[Thu Mar 05 20:29:04.017963 2026] [:error] [pid 53350:tid 53386] [client 91.65.123.43:50003] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aal3EKO0Baxc5WFYeP0-RgAAAQo"]
[Thu Mar 05 20:29:06.675333 2026] [:error] [pid 53350:tid 53386] [client 91.65.123.43:57227] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aal3EqO0Baxc5WFYeP0-UgAAAQo"]
[Thu Mar 05 20:29:09.243867 2026] [:error] [pid 41459:tid 41485] [client 91.65.123.43:43377] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aal3FedFBZEnZ3pzxrU-YwAAAUs"]
[Thu Mar 05 20:29:11.682434 2026] [:error] [pid 53350:tid 53385] [client 91.65.123.43:5736] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aal3F6O0Baxc5WFYeP0-XgAAAQk"]
[Thu Mar 05 20:29:14.697222 2026] [:error] [pid 53350:tid 53398] [client 91.65.123.43:5142] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aal3GqO0Baxc5WFYeP0-awAAARU"]
[Thu Mar 05 20:29:17.222055 2026] [:error] [pid 62435:tid 62454] [client 91.65.123.43:49103] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aal3HSMZJMDfZh_-8sWBbQAAAMQ"]
[Thu Mar 05 21:33:19.660455 2026] [:error] [pid 41459:tid 41493] [client 138.128.140.82:49979] [client 138.128.140.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.128.140.82, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aamGH-dFBZEnZ3pzxrVblQAAAVM"]
[Thu Mar 05 21:33:43.244948 2026] [:error] [pid 62435:tid 62470] [client 183.87.224.93:65184] [client 183.87.224.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.87.224.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aamGNyMZJMDfZh_-8sWMEwAAANQ"]
[Thu Mar 05 21:42:41.151943 2026] [:error] [pid 53350:tid 53394] [client 183.87.224.93:63742] [client 183.87.224.93] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aamIUaO0Baxc5WFYeP11_QAAARE"]
[Thu Mar 05 21:44:22.600525 2026] [:error] [pid 62176:tid 62305] [client 183.87.224.93:51269] [client 183.87.224.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.87.224.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aamItiNfTPJryi30JPkFkgAAAFU"]
[Thu Mar 05 22:40:28.095855 2026] [:error] [pid 8151:tid 8220] [client 157.15.40.88:50900] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "aamV3JO3dLEidct1HvCpKgAAAYE"]
[Thu Mar 05 22:40:28.353306 2026] [:error] [pid 8151:tid 8239] [client 157.15.40.88:50982] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "aamV3JO3dLEidct1HvCpRAAAAZM"]
[Thu Mar 05 22:40:28.613655 2026] [:error] [pid 8151:tid 8232] [client 157.15.40.88:51064] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "aamV3JO3dLEidct1HvCpUwAAAYw"]
[Thu Mar 05 22:40:28.887006 2026] [:error] [pid 53350:tid 53390] [client 157.15.40.88:51155] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/txets.php"] [unique_id "aamV3KO0Baxc5WFYeP2FawAAAQ0"]
[Thu Mar 05 22:40:29.199625 2026] [:error] [pid 53350:tid 53397] [client 157.15.40.88:51245] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/schallfuns.php"] [unique_id "aamV3aO0Baxc5WFYeP2FkwAAARQ"]
[Thu Mar 05 22:40:29.473084 2026] [:error] [pid 41459:tid 41475] [client 157.15.40.88:51344] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "aamV3edFBZEnZ3pzxrWEpwAAAUE"]
[Thu Mar 05 22:40:29.752803 2026] [:error] [pid 62177:tid 62328] [client 157.15.40.88:51434] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/postnews.php"] [unique_id "aamV3RWSQc2OzPrsnwX6mgAAAJA"]
[Thu Mar 05 22:40:30.013361 2026] [:error] [pid 62435:tid 62464] [client 157.15.40.88:51526] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/postnews.php"] [unique_id "aamV3iMZJMDfZh_-8sWTOgAAAM4"]
[Thu Mar 05 22:40:30.270536 2026] [:error] [pid 41459:tid 41489] [client 157.15.40.88:51599] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/postnews.php"] [unique_id "aamV3udFBZEnZ3pzxrWE2gAAAU8"]
[Fri Mar 06 00:43:57.902252 2026] [:error] [pid 48372:tid 48412] [client 103.77.107.222:51784] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aamyzUWaQyQyfhXPRrYF-gAAAVc"]
[Fri Mar 06 00:43:58.142003 2026] [:error] [pid 48372:tid 48398] [client 103.77.107.222:51922] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aamyzkWaQyQyfhXPRrYF-wAAAUs"]
[Fri Mar 06 01:51:07.111530 2026] [:error] [pid 47657:tid 47907] [client 81.167.26.57:40636] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aanCiy76-uV01o_084mYCAAAAAc"]
[Fri Mar 06 01:51:09.885320 2026] [:error] [pid 48372:tid 48392] [client 81.167.26.57:37379] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aanCjUWaQyQyfhXPRrYk0wAAAUU"]
[Fri Mar 06 01:51:12.617490 2026] [:error] [pid 27687:tid 27702] [client 81.167.26.57:54748] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aanCkEI2IG23EwU7sL8v_AAAAIE"]
[Fri Mar 06 01:51:15.367062 2026] [:error] [pid 48372:tid 48412] [client 81.167.26.57:34732] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aanCk0WaQyQyfhXPRrYk3QAAAVc"]
[Fri Mar 06 01:51:18.110772 2026] [:error] [pid 47661:tid 47987] [client 81.167.26.57:58037] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aanCloh_LGQjIl8XP2euqAAAAEg"]
[Fri Mar 06 01:51:20.833923 2026] [:error] [pid 47657:tid 47922] [client 81.167.26.57:3782] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aanCmC76-uV01o_084mYFwAAABU"]
[Fri Mar 06 01:51:23.582489 2026] [:error] [pid 27687:tid 27725] [client 81.167.26.57:53604] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aanCm0I2IG23EwU7sL8wVQAAAJg"]
[Fri Mar 06 01:51:26.319453 2026] [:error] [pid 48372:tid 48387] [client 81.167.26.57:52693] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aanCnkWaQyQyfhXPRrYk8gAAAUA"]
[Fri Mar 06 01:51:29.073137 2026] [:error] [pid 47657:tid 47916] [client 81.167.26.57:57793] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aanCoS76-uV01o_084mYIAAAAA8"]
[Fri Mar 06 01:51:31.802719 2026] [:error] [pid 48372:tid 48394] [client 81.167.26.57:53564] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aanCo0WaQyQyfhXPRrYk_AAAAUc"]
[Fri Mar 06 01:51:34.553762 2026] [:error] [pid 48372:tid 48388] [client 81.167.26.57:12289] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aanCpkWaQyQyfhXPRrYlAgAAAUE"]
[Fri Mar 06 01:51:37.297270 2026] [:error] [pid 48372:tid 48394] [client 81.167.26.57:37728] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aanCqUWaQyQyfhXPRrYlBgAAAUc"]
[Fri Mar 06 01:51:40.009950 2026] [:error] [pid 27687:tid 27714] [client 81.167.26.57:14262] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aanCrEI2IG23EwU7sL8wggAAAI0"]
[Fri Mar 06 01:51:42.759825 2026] [:error] [pid 48372:tid 48394] [client 81.167.26.57:42367] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aanCrkWaQyQyfhXPRrYlGAAAAUc"]
[Fri Mar 06 01:51:45.512047 2026] [:error] [pid 48372:tid 48387] [client 81.167.26.57:43457] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aanCsUWaQyQyfhXPRrYlIQAAAUA"]
[Fri Mar 06 01:51:49.233910 2026] [:error] [pid 27687:tid 27713] [client 81.167.26.57:51076] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aanCtUI2IG23EwU7sL8wlAAAAIw"]
[Fri Mar 06 01:51:51.877164 2026] [:error] [pid 47661:tid 47983] [client 81.167.26.57:23058] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aanCt4h_LGQjIl8XP2eusgAAAEQ"]
[Fri Mar 06 01:51:54.614275 2026] [:error] [pid 47665:tid 48036] [client 81.167.26.57:54193] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aanCunvwcWrOi3qzRcd_JwAAANM"]
[Fri Mar 06 01:51:57.189464 2026] [:error] [pid 27687:tid 27725] [client 81.167.26.57:18239] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aanCvUI2IG23EwU7sL8wyAAAAJg"]
[Fri Mar 06 01:51:59.925934 2026] [:error] [pid 27687:tid 27705] [client 81.167.26.57:54435] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aanCv0I2IG23EwU7sL8w1AAAAIQ"]
[Fri Mar 06 01:52:02.662956 2026] [:error] [pid 27687:tid 27713] [client 81.167.26.57:14564] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aanCwkI2IG23EwU7sL8w2QAAAIw"]
[Fri Mar 06 02:36:01.853365 2026] [:error] [pid 27687:tid 27724] [client 182.44.2.148:55264] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aanNEUI2IG23EwU7sL9Q7AAAAJc"]
[Fri Mar 06 08:48:57.851575 2026] [:error] [pid 8656:tid 8810] [client 118.68.109.170:49589] [client 118.68.109.170] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaokeZPxTG9Ff1TtP6NHUgAAAIA"]
[Fri Mar 06 08:50:30.858098 2026] [:error] [pid 8656:tid 8830] [client 118.68.109.170:12838] [client 118.68.109.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.68.109.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaok1pPxTG9Ff1TtP6NJQwAAAJQ"]
[Fri Mar 06 08:51:45.973292 2026] [:error] [pid 16140:tid 16163] [client 118.68.109.170:21306] [client 118.68.109.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.68.109.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aaolIZZVpEeGhAeSpv263wAAARU"]
[Fri Mar 06 12:40:08.929780 2026] [:error] [pid 8656:tid 8830] [client 103.66.98.113:51651] [client 103.66.98.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.66.98.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aapaqJPxTG9Ff1TtP6MwWQAAAJQ"]
[Fri Mar 06 12:40:21.347399 2026] [:error] [pid 8656:tid 8828] [client 181.136.204.174:52472] [client 181.136.204.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.136.204.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aapatZPxTG9Ff1TtP6MwdgAAAJI"]
[Fri Mar 06 12:48:36.620239 2026] [:error] [pid 8656:tid 8812] [client 103.226.186.232:46482] [client 103.226.186.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.186.232, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aapcpJPxTG9Ff1TtP6M3MwAAAII"]
[Fri Mar 06 12:51:20.242175 2026] [:error] [pid 16140:tid 16155] [client 27.5.215.167:56732] [client 27.5.215.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.5.215.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aapdSJZVpEeGhAeSpv0SMwAAAQ0"]
[Fri Mar 06 12:54:48.482019 2026] [:error] [pid 16140:tid 16148] [client 103.226.186.232:46353] [client 103.226.186.232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aapeGJZVpEeGhAeSpv0TPgAAAQY"]
[Fri Mar 06 12:55:54.072846 2026] [:error] [pid 16140:tid 16146] [client 27.5.215.167:59163] [client 27.5.215.167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aapeWpZVpEeGhAeSpv0TkQAAAQQ"]
[Fri Mar 06 12:57:13.562621 2026] [:error] [pid 8656:tid 8829] [client 103.60.205.64:53256] [client 103.60.205.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.60.205.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aapeqZPxTG9Ff1TtP6M9egAAAJM"]
[Fri Mar 06 15:09:14.956942 2026] [:error] [pid 8656:tid 8830] [client 182.44.10.67:36031] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aap9mpPxTG9Ff1TtP6OPzwAAAJQ"]
[Fri Mar 06 17:27:33.742996 2026] [:error] [pid 59198:tid 59200] [client 170.106.143.6:59470] [client 170.106.143.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaqeBdFYTNmfCEavFrI0LAAAA0A"]
[Fri Mar 06 21:00:12.874466 2026] [:error] [pid 16140:tid 16161] [client 147.135.213.27:47556] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aarP3JZVpEeGhAeSpv3vcwAAARM"]
[Fri Mar 06 21:00:29.261382 2026] [:error] [pid 16140:tid 16153] [client 147.135.213.27:56820] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aarP7ZZVpEeGhAeSpv3vkgAAAQs"]
[Fri Mar 06 21:00:32.398487 2026] [:error] [pid 59239:tid 59273] [client 147.135.213.27:56822] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aarP8LG1EpnE909fvGesBAAAA8Q"]
[Fri Mar 06 21:00:34.943276 2026] [:error] [pid 59237:tid 59243] [client 147.135.213.27:48012] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aarP8uqfMSBs0nxOTxFMugAAA4E"]
[Fri Mar 06 21:00:37.663153 2026] [:error] [pid 59237:tid 59259] [client 147.135.213.27:48026] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aarP9eqfMSBs0nxOTxFMwAAAA5E"]
[Fri Mar 06 21:00:40.269689 2026] [:error] [pid 59037:tid 59062] [client 147.135.213.27:48032] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aarP-PLSf47J21UqfPZM_wAAAks"]
[Fri Mar 06 21:00:42.919281 2026] [:error] [pid 59037:tid 59064] [client 147.135.213.27:48038] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aarP-vLSf47J21UqfPZNAQAAAk0"]
[Fri Mar 06 21:00:46.014065 2026] [:error] [pid 59239:tid 59280] [client 147.135.213.27:59256] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aarP_rG1EpnE909fvGesIAAAA8s"]
[Fri Mar 06 21:00:48.966344 2026] [:error] [pid 16140:tid 16155] [client 147.135.213.27:59262] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aarQAJZVpEeGhAeSpv3vwgAAAQ0"]
[Fri Mar 06 21:00:51.777782 2026] [:error] [pid 59237:tid 59256] [client 147.135.213.27:59268] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aarQA-qfMSBs0nxOTxFM3wAAA44"]
[Fri Mar 06 21:00:54.443861 2026] [:error] [pid 59237:tid 59253] [client 147.135.213.27:50740] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aarQBuqfMSBs0nxOTxFM6QAAA4s"]
[Fri Mar 06 21:00:57.177015 2026] [:error] [pid 16140:tid 16164] [client 147.135.213.27:50756] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aarQCZZVpEeGhAeSpv3vzgAAARY"]
[Fri Mar 06 21:00:59.921629 2026] [:error] [pid 59237:tid 59246] [client 147.135.213.27:50760] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aarQC-qfMSBs0nxOTxFM-QAAA4Q"]
[Fri Mar 06 21:01:02.952884 2026] [:error] [pid 59040:tid 59123] [client 147.135.213.27:50762] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aarQDrhQWeDH4WbmEIibQAAAAw0"]
[Fri Mar 06 21:01:05.686295 2026] [:error] [pid 59237:tid 59245] [client 147.135.213.27:44642] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aarQEeqfMSBs0nxOTxFNAQAAA4M"]
[Fri Mar 06 21:01:08.180511 2026] [:error] [pid 59198:tid 59210] [client 147.135.213.27:44644] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aarQFNFYTNmfCEavFrJbEgAAA0o"]
[Fri Mar 06 23:10:55.141573 2026] [:error] [pid 59239:tid 59276] [client 62.60.131.218:57031] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaruf7G1EpnE909fvGfIpAAAA8c"]
[Sat Mar 07 01:22:30.312183 2026] [:error] [pid 6923:tid 7075] [client 138.204.79.181:25813] [client 138.204.79.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.181, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aasNVrAJONsbDnxnyfPTswAAAIQ"]
[Sat Mar 07 03:23:00.502142 2026] [:error] [pid 23853:tid 23861] [client 77.37.92.171:23086] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/core/.env"] [unique_id "aasplHNwhuLw8Ep_7YpOggAAAMY"]
[Sat Mar 07 03:23:00.504637 2026] [:error] [pid 23853:tid 23858] [client 77.37.92.171:23090] [client 77.37.92.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aasplHNwhuLw8Ep_7YpOgwAAAMM"]
[Sat Mar 07 05:57:36.219243 2026] [:error] [pid 52484:tid 52519] [client 43.166.128.86:57880] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aatN0PE9AnX6zUICFeTnJAAAAQ8"]
[Sat Mar 07 07:13:17.778820 2026] [:error] [pid 52484:tid 52523] [client 138.204.79.181:26223] [client 138.204.79.181] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aatfjfE9AnX6zUICFeQdOAAAARM"]
[Sat Mar 07 07:14:28.997602 2026] [:error] [pid 4311:tid 4443] [client 138.204.79.181:26185] [client 138.204.79.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.181, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aatf1HbyS653WMGf2vX-nwAAAFg"]
[Sat Mar 07 07:15:28.698781 2026] [:error] [pid 4609:tid 4636] [client 138.204.79.181:25338] [client 138.204.79.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.79.181, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aatgEOP7JMxUbw4Fd1ZRNwAAAMg"]
[Sat Mar 07 08:28:17.048714 2026] [:error] [pid 52484:tid 52507] [client 62.60.131.218:60777] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aatxIfE9AnX6zUICFeRUvwAAAQQ"]
[Sat Mar 07 11:17:10.092911 2026] [:error] [pid 52484:tid 52525] [client 20.24.211.85:2819] [client 20.24.211.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aauYtvE9AnX6zUICFeTjEQAAARU"]
[Sat Mar 07 11:17:10.643938 2026] [:error] [pid 52484:tid 52517] [client 20.24.211.85:4251] [client 20.24.211.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aauYtvE9AnX6zUICFeTjFAAAAQ4"]
[Sat Mar 07 11:17:11.178724 2026] [:error] [pid 4609:tid 4649] [client 20.24.211.85:2840] [client 20.24.211.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aauYt-P7JMxUbw4Fd1bHUQAAANU"]
[Sat Mar 07 11:17:11.659159 2026] [:error] [pid 4609:tid 4642] [client 20.24.211.85:2687] [client 20.24.211.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aauYt-P7JMxUbw4Fd1bHVAAAAM4"]
[Sat Mar 07 14:37:33.194257 2026] [:error] [pid 52484:tid 52526] [client 34.24.47.138:58077] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/media/system/js/core.js"] [unique_id "aavHrfE9AnX6zUICFeRcsgAAARY"]
[Sat Mar 07 15:44:04.336191 2026] [:error] [pid 37998:tid 38059] [client 170.106.181.163:51796] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aavXRMl3xHpv0STGaSbklwAAAU8"]
[Sat Mar 07 16:21:18.092816 2026] [:error] [pid 52484:tid 52517] [client 207.180.205.85:50406] [client 207.180.205.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aavf_vE9AnX6zUICFeRzFwAAAQ4"]
[Sat Mar 07 16:21:18.094702 2026] [:error] [pid 52484:tid 52514] [client 207.180.205.85:50404] [client 207.180.205.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aavf_vE9AnX6zUICFeRzGAAAAQs"]
[Sat Mar 07 17:22:50.977351 2026] [:error] [pid 37998:tid 38057] [client 180.110.203.108:54802] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aavuasl3xHpv0STGaSYXzQAAAU0"]
[Sat Mar 07 17:27:08.272354 2026] [:error] [pid 52484:tid 52517] [client 89.163.146.197:54350] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "aavvbPE9AnX6zUICFeSCBAAAAQ4"], referer: www.google.com
[Sat Mar 07 20:06:29.754002 2026] [:error] [pid 36899:tid 36945] [client 178.134.74.172:54931] [client 178.134.74.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.134.74.172, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aawUxTIlMfwxLHrLy_9dugAAAZY"]
[Sat Mar 07 20:10:09.168788 2026] [:error] [pid 4315:tid 4452] [client 179.109.82.136:26018] [client 179.109.82.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.109.82.136, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aawVodDEK9AXzxu9OSjo5AAAAIU"]
[Sat Mar 07 20:22:54.039750 2026] [:error] [pid 54127:tid 54145] [client 178.134.74.172:55487] [client 178.134.74.172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aawYnkuQzHmVv_Y3VjdnOQAAAsM"]
[Sat Mar 07 20:23:58.410487 2026] [:error] [pid 50682:tid 50696] [client 178.134.74.172:58360] [client 178.134.74.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.134.74.172, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aawY3k_32_2CpDTtIRmniQAAAos"]
[Sat Mar 07 22:52:20.752006 2026] [:error] [pid 4315:tid 4453] [client 147.135.213.27:52440] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aaw7pNDEK9AXzxu9OSgndQAAAIY"]
[Sat Mar 07 22:52:23.645934 2026] [:error] [pid 4315:tid 4465] [client 147.135.213.27:32872] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aaw7p9DEK9AXzxu9OSgndwAAAJE"]
[Sat Mar 07 22:52:26.415131 2026] [:error] [pid 10276:tid 10309] [client 147.135.213.27:57264] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aaw7qqNawseyHvpv0LltFAAAA1M"]
[Sat Mar 07 22:52:29.229017 2026] [:error] [pid 14885:tid 14919] [client 147.135.213.27:57280] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aaw7rVj4t7-EBJadtcXcogAAA5Q"]
[Sat Mar 07 22:52:31.550910 2026] [:error] [pid 4315:tid 4470] [client 147.135.213.27:57288] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aaw7r9DEK9AXzxu9OSgnewAAAJU"]
[Sat Mar 07 22:52:34.029231 2026] [:error] [pid 26035:tid 26067] [client 147.135.213.27:40084] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aaw7shCGZKfdaQTfT7XtUgAAAdA"]
[Sat Mar 07 22:52:36.594664 2026] [:error] [pid 14885:tid 14918] [client 147.135.213.27:40090] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aaw7tFj4t7-EBJadtcXcpAAAA5M"]
[Sat Mar 07 22:52:39.230564 2026] [:error] [pid 4315:tid 4472] [client 147.135.213.27:40096] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aaw7t9DEK9AXzxu9OSgnfwAAAJc"]
[Sat Mar 07 22:52:41.719328 2026] [:error] [pid 36899:tid 36947] [client 147.135.213.27:40112] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aaw7uTIlMfwxLHrLy_-I8QAAAZg"]
[Sat Mar 07 22:52:44.788261 2026] [:error] [pid 54127:tid 54153] [client 147.135.213.27:38720] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aaw7vEuQzHmVv_Y3VjdwagAAAss"]
[Sat Mar 07 22:52:47.269032 2026] [:error] [pid 14885:tid 14907] [client 147.135.213.27:38722] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aaw7v1j4t7-EBJadtcXcrgAAA4g"]
[Sat Mar 07 22:52:49.857077 2026] [:error] [pid 4315:tid 4447] [client 147.135.213.27:38732] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aaw7wdDEK9AXzxu9OSgniQAAAIA"]
[Sat Mar 07 22:52:52.656912 2026] [:error] [pid 14885:tid 14910] [client 147.135.213.27:38744] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aaw7xFj4t7-EBJadtcXctgAAA4s"]
[Sat Mar 07 22:52:55.186747 2026] [:error] [pid 50682:tid 50700] [client 147.135.213.27:42540] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aaw7x0_32_2CpDTtIRmsTgAAAo8"]
[Sat Mar 07 22:52:58.104023 2026] [:error] [pid 54127:tid 54152] [client 147.135.213.27:42550] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aaw7ykuQzHmVv_Y3VjdwbAAAAso"]
[Sat Mar 07 22:53:00.746275 2026] [:error] [pid 4307:tid 4391] [client 147.135.213.27:42556] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aaw7zDeKp4wgnLc38f-YUQAAAAk"]
[Sat Mar 07 22:53:03.787456 2026] [:error] [pid 10276:tid 10295] [client 147.135.213.27:40200] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aaw7z6NawseyHvpv0LltFwAAA0U"]
[Sat Mar 07 22:53:06.350850 2026] [:error] [pid 4315:tid 4457] [client 147.135.213.27:40216] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aaw70tDEK9AXzxu9OSgnjwAAAIo"]
[Sat Mar 07 22:53:08.999908 2026] [:error] [pid 4315:tid 4459] [client 147.135.213.27:40220] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aaw71NDEK9AXzxu9OSgnlAAAAIw"]
[Sat Mar 07 22:53:11.779741 2026] [:error] [pid 4315:tid 4461] [client 147.135.213.27:40228] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aaw719DEK9AXzxu9OSgnlgAAAI4"]
[Sat Mar 07 22:53:14.539748 2026] [:error] [pid 4315:tid 4447] [client 147.135.213.27:39972] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aaw72tDEK9AXzxu9OSgnmAAAAIA"]
[Sat Mar 07 22:53:51.773909 2026] [:error] [pid 36899:tid 36922] [client 147.135.213.27:39988] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aaw7_zIlMfwxLHrLy_-JEwAAAYA"]
[Sat Mar 07 22:53:54.322867 2026] [:error] [pid 26035:tid 26052] [client 147.135.213.27:36050] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aaw8AhCGZKfdaQTfT7XtWQAAAcE"]
[Sat Mar 07 22:53:57.198444 2026] [:error] [pid 10276:tid 10307] [client 147.135.213.27:36058] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aaw8BaNawseyHvpv0LltGgAAA1E"]
[Sat Mar 07 22:54:00.171141 2026] [:error] [pid 26035:tid 26055] [client 147.135.213.27:36066] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aaw8CBCGZKfdaQTfT7XtXgAAAcQ"]
[Sat Mar 07 22:54:03.156123 2026] [:error] [pid 14885:tid 14901] [client 147.135.213.27:36076] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aaw8C1j4t7-EBJadtcXcvgAAA4I"]
[Sat Mar 07 22:54:05.747617 2026] [:error] [pid 36899:tid 36933] [client 147.135.213.27:37532] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aaw8DTIlMfwxLHrLy_-JIQAAAYo"]
[Sat Mar 07 22:54:08.482522 2026] [:error] [pid 4315:tid 4460] [client 147.135.213.27:37544] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aaw8ENDEK9AXzxu9OSgn6QAAAI0"]
[Sat Mar 07 22:54:10.953696 2026] [:error] [pid 4315:tid 4473] [client 147.135.213.27:37550] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aaw8EtDEK9AXzxu9OSgn8QAAAJg"]
[Sat Mar 07 22:54:13.817659 2026] [:error] [pid 54127:tid 54162] [client 147.135.213.27:38652] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aaw8FUuQzHmVv_Y3VjdwtQAAAtQ"]
[Sat Mar 07 22:54:16.796366 2026] [:error] [pid 54127:tid 54153] [client 147.135.213.27:38654] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aaw8GEuQzHmVv_Y3VjdwvwAAAss"]
[Sat Mar 07 22:54:19.449341 2026] [:error] [pid 4315:tid 4451] [client 147.135.213.27:38668] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aaw8G9DEK9AXzxu9OSgoAAAAAIQ"]
[Sat Mar 07 22:54:22.251916 2026] [:error] [pid 4315:tid 4450] [client 147.135.213.27:38672] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aaw8HtDEK9AXzxu9OSgoCgAAAIM"]
[Sat Mar 07 22:54:24.899579 2026] [:error] [pid 4315:tid 4459] [client 147.135.213.27:33894] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aaw8INDEK9AXzxu9OSgoDwAAAIw"]
[Sat Mar 07 22:54:27.421798 2026] [:error] [pid 10276:tid 10300] [client 147.135.213.27:33900] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aaw8I6NawseyHvpv0LltHwAAA0o"]
[Sat Mar 07 22:54:29.982823 2026] [:error] [pid 14885:tid 14899] [client 147.135.213.27:33914] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aaw8JVj4t7-EBJadtcXcwQAAA4A"]
[Sat Mar 07 22:54:32.705730 2026] [:error] [pid 36899:tid 36930] [client 147.135.213.27:33918] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aaw8KDIlMfwxLHrLy_-JOwAAAYg"]
[Sat Mar 07 22:54:35.430079 2026] [:error] [pid 14885:tid 14912] [client 147.135.213.27:35824] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aaw8K1j4t7-EBJadtcXcyQAAA40"]
[Sat Mar 07 22:54:38.161129 2026] [:error] [pid 31847:tid 31872] [client 147.135.213.27:35838] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aaw8LvTG-z9jwgL8vXkzcgAAAks"]
[Sat Mar 07 22:54:40.909974 2026] [:error] [pid 10276:tid 10302] [client 147.135.213.27:35848] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aaw8MKNawseyHvpv0LltMwAAA0w"]
[Sat Mar 07 22:54:43.573184 2026] [:error] [pid 36899:tid 36923] [client 147.135.213.27:35856] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aaw8MzIlMfwxLHrLy_-JSQAAAYE"]
[Sun Mar 08 00:29:40.866472 2026] [:error] [pid 19534:tid 19552] [client 111.172.249.49:49723] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaxSdIiRddMMzZb47n5MfAAAAFA"]
[Sun Mar 08 01:56:52.519591 2026] [:error] [pid 42362:tid 42388] [client 43.166.129.247:36344] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aaxm5K-bLI2XD-bK6dCx_QAAAJI"]
[Sun Mar 08 06:50:34.457591 2026] [:error] [pid 22790:tid 22896] [client 122.51.236.174:36108] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aayruhXbGDWrzD_dTOct1QAAA84"]
[Sun Mar 08 09:38:55.348514 2026] [:error] [pid 22790:tid 22889] [client 103.117.180.206:54022] [client 103.117.180.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.117.180.206, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aazTLxXbGDWrzD_dTOe5twAAA8c"]
[Sun Mar 08 09:38:59.041286 2026] [:error] [pid 22790:tid 22890] [client 103.117.180.206:54022] [client 103.117.180.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.117.180.206, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aazTMxXbGDWrzD_dTOe51gAAA8g"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 10:05:05.790825 2026] [:error] [pid 22788:tid 22864] [client 186.235.174.175:31414] [client 186.235.174.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.235.174.175, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aazZUUhwluk21OG9mScwJwAAA4k"]
[Sun Mar 08 10:39:52.613293 2026] [:error] [pid 22787:tid 22852] [client 186.235.174.175:25705] [client 186.235.174.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aazheEF9MGMhk9pT4z5lyQAAA1g"]
[Sun Mar 08 11:43:04.695033 2026] [:error] [pid 22787:tid 22840] [client 42.96.13.80:52294] [client 42.96.13.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 42.96.13.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aazwSEF9MGMhk9pT4z5-YgAAA0w"]
[Sun Mar 08 11:43:06.175318 2026] [:error] [pid 22787:tid 22841] [client 42.96.13.80:52294] [client 42.96.13.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 42.96.13.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aazwSkF9MGMhk9pT4z5-ZgAAA00"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 13:23:19.298066 2026] [:error] [pid 22790:tid 22905] [client 182.43.70.143:47467] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa0HxxXbGDWrzD_dTOdOcAAAA9c"]
[Sun Mar 08 13:24:04.205976 2026] [:error] [pid 22786:tid 22814] [client 69.49.112.70:52060] [client 69.49.112.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.70, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0H9HPuJewMN2jPbdV35gAAAw0"]
[Sun Mar 08 13:24:06.891645 2026] [:error] [pid 22786:tid 22808] [client 69.49.112.70:52060] [client 69.49.112.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.70, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0H9nPuJewMN2jPbdV36AAAAwc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 14:33:50.287863 2026] [:error] [pid 22667:tid 22712] [client 103.23.155.210:43422] [client 103.23.155.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.23.155.210, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0YTuG7qk1roo-TRWN19wAAAkc"]
[Sun Mar 08 14:33:54.414080 2026] [:error] [pid 22667:tid 22708] [client 103.23.155.210:43422] [client 103.23.155.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.23.155.210, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0YUuG7qk1roo-TRWN1-wAAAkM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 14:35:20.481464 2026] [:error] [pid 22787:tid 22834] [client 69.49.112.70:55694] [client 69.49.112.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.70, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0YqEF9MGMhk9pT4z68PwAAA0Y"]
[Sun Mar 08 14:35:21.742983 2026] [:error] [pid 22787:tid 22845] [client 69.49.112.70:55694] [client 69.49.112.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.70, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0YqUF9MGMhk9pT4z68QwAAA1E"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 14:53:03.547626 2026] [:error] [pid 22790:tid 22899] [client 110.4.40.116:59550] [client 110.4.40.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.4.40.116, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0czxXbGDWrzD_dTOd8aAAAA9E"]
[Sun Mar 08 14:53:05.230168 2026] [:error] [pid 22790:tid 22886] [client 110.4.40.116:59550] [client 110.4.40.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.4.40.116, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0c0RXbGDWrzD_dTOd8awAAA8Q"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 15:01:35.676232 2026] [:error] [pid 22788:tid 22865] [client 122.175.189.80:58852] [client 122.175.189.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 122.175.189.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0ez0hwluk21OG9mSeCwAAAA4o"]
[Sun Mar 08 15:01:36.946910 2026] [:error] [pid 22788:tid 22856] [client 122.175.189.80:58852] [client 122.175.189.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 122.175.189.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0e0Ehwluk21OG9mSeCyAAAA4E"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 16:01:03.705093 2026] [:error] [pid 22788:tid 22870] [client 147.135.253.34:51914] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aa0sv0hwluk21OG9mSfCsQAAA48"]
[Sun Mar 08 16:01:06.031435 2026] [:error] [pid 22667:tid 22713] [client 147.135.253.34:39146] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aa0swuG7qk1roo-TRWOLmwAAAkg"]
[Sun Mar 08 16:01:08.496437 2026] [:error] [pid 22788:tid 22879] [client 147.135.253.34:39482] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aa0sxEhwluk21OG9mSfC1gAAA5g"]
[Sun Mar 08 16:01:10.910539 2026] [:error] [pid 22787:tid 22848] [client 147.135.253.34:39488] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aa0sxkF9MGMhk9pT4z7kbgAAA1Q"]
[Sun Mar 08 16:01:13.470313 2026] [:error] [pid 43672:tid 43764] [client 147.135.253.34:39500] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aa0syXqp35WgfA0DoNA8KwAAAI4"]
[Sun Mar 08 16:01:16.013431 2026] [:error] [pid 22668:tid 22741] [client 147.135.253.34:39512] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aa0szOmzLHpblwnQgPgAagAAAok"]
[Sun Mar 08 16:01:18.441796 2026] [:error] [pid 22788:tid 22877] [client 147.135.253.34:53452] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aa0szkhwluk21OG9mSfDWAAAA5Y"]
[Sun Mar 08 16:01:20.961557 2026] [:error] [pid 22790:tid 22900] [client 147.135.253.34:53458] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aa0s0BXbGDWrzD_dTOeu8wAAA9I"]
[Sun Mar 08 16:01:23.342865 2026] [:error] [pid 22561:tid 22589] [client 147.135.253.34:53460] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aa0s08IVn0KLevwXc5FBUAAAAVg"]
[Sun Mar 08 16:01:25.743084 2026] [:error] [pid 22788:tid 22878] [client 147.135.253.34:53462] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aa0s1Uhwluk21OG9mSfDjAAAA5c"]
[Sun Mar 08 16:01:28.262521 2026] [:error] [pid 22790:tid 22898] [client 147.135.253.34:53078] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aa0s2BXbGDWrzD_dTOevMQAAA9A"]
[Sun Mar 08 16:01:30.657731 2026] [:error] [pid 22788:tid 22877] [client 147.135.253.34:53090] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aa0s2khwluk21OG9mSfDrAAAA5Y"]
[Sun Mar 08 16:01:33.191185 2026] [:error] [pid 22561:tid 22571] [client 147.135.253.34:53100] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aa0s3cIVn0KLevwXc5FBWAAAAUY"]
[Sun Mar 08 16:01:35.563105 2026] [:error] [pid 22786:tid 22804] [client 147.135.253.34:53114] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aa0s33PuJewMN2jPbdWiAgAAAwM"]
[Sun Mar 08 16:01:38.083512 2026] [:error] [pid 22788:tid 22878] [client 147.135.253.34:53122] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aa0s4khwluk21OG9mSfD2AAAA5c"]
[Sun Mar 08 16:01:40.606952 2026] [:error] [pid 22786:tid 22815] [client 147.135.253.34:42776] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aa0s5HPuJewMN2jPbdWiGAAAAw4"]
[Sun Mar 08 16:01:42.995174 2026] [:error] [pid 22790:tid 22898] [client 147.135.253.34:42784] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aa0s5hXbGDWrzD_dTOeveAAAA9A"]
[Sun Mar 08 16:01:45.401883 2026] [:error] [pid 22669:tid 22781] [client 147.135.253.34:42792] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aa0s6WvqAhy8LIaua-px2gAAAtY"]
[Sun Mar 08 16:01:47.918708 2026] [:error] [pid 22669:tid 22769] [client 147.135.253.34:42800] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aa0s62vqAhy8LIaua-px4gAAAso"]
[Sun Mar 08 16:01:50.285177 2026] [:error] [pid 22786:tid 22813] [client 147.135.253.34:32802] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aa0s7nPuJewMN2jPbdWiQwAAAww"]
[Sun Mar 08 16:01:52.806584 2026] [:error] [pid 22787:tid 22846] [client 147.135.253.34:32810] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aa0s8EF9MGMhk9pT4z7lCQAAA1I"]
[Sun Mar 08 16:01:55.342531 2026] [:error] [pid 43671:tid 43728] [client 147.135.253.34:32822] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aa0s866AdwroU1gT3XGZdgAAAEU"]
[Sun Mar 08 16:01:57.705892 2026] [:error] [pid 22790:tid 22896] [client 147.135.253.34:32828] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aa0s9RXbGDWrzD_dTOev9AAAA84"]
[Sun Mar 08 16:02:29.264266 2026] [:error] [pid 22788:tid 22879] [client 147.135.253.34:59258] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aa0tFUhwluk21OG9mSfFfwAAA5g"]
[Sun Mar 08 16:02:31.696037 2026] [:error] [pid 22788:tid 22874] [client 147.135.253.34:34532] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aa0tF0hwluk21OG9mSfFnQAAA5M"]
[Sun Mar 08 16:02:34.152203 2026] [:error] [pid 22668:tid 22745] [client 147.135.253.34:34540] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aa0tGumzLHpblwnQgPgA8QAAAo0"]
[Sun Mar 08 16:02:36.607133 2026] [:error] [pid 22790:tid 22889] [client 147.135.253.34:34546] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aa0tHBXbGDWrzD_dTOexQAAAA8c"]
[Sun Mar 08 16:02:39.065837 2026] [:error] [pid 22667:tid 22717] [client 147.135.253.34:36642] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aa0tH-G7qk1roo-TRWOMUQAAAkw"]
[Sun Mar 08 16:02:41.519382 2026] [:error] [pid 22786:tid 22821] [client 147.135.253.34:36646] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aa0tIXPuJewMN2jPbdWi-QAAAxQ"]
[Sun Mar 08 16:02:43.985068 2026] [:error] [pid 22786:tid 22808] [client 147.135.253.34:36662] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aa0tI3PuJewMN2jPbdWjAQAAAwc"]
[Sun Mar 08 16:02:46.282492 2026] [:error] [pid 22790:tid 22900] [client 147.135.253.34:36674] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aa0tJhXbGDWrzD_dTOexdAAAA9I"]
[Sun Mar 08 16:02:48.588935 2026] [:error] [pid 22786:tid 22808] [client 147.135.253.34:42800] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aa0tKHPuJewMN2jPbdWjEgAAAwc"]
[Sun Mar 08 16:02:50.896000 2026] [:error] [pid 22788:tid 22873] [client 147.135.253.34:42804] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aa0tKkhwluk21OG9mSfGIAAAA5I"]
[Sun Mar 08 16:02:53.362921 2026] [:error] [pid 22669:tid 22767] [client 147.135.253.34:42812] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aa0tLWvqAhy8LIaua-pySAAAAsg"]
[Sun Mar 08 16:02:55.834963 2026] [:error] [pid 22788:tid 22860] [client 147.135.253.34:42816] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aa0tL0hwluk21OG9mSfGdAAAA4U"]
[Sun Mar 08 16:02:58.302288 2026] [:error] [pid 22667:tid 22728] [client 147.135.253.34:50492] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aa0tMuG7qk1roo-TRWOMcwAAAlc"]
[Sun Mar 08 16:03:00.615891 2026] [:error] [pid 22790:tid 22882] [client 147.135.253.34:50506] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aa0tNBXbGDWrzD_dTOexpwAAA8A"]
[Sun Mar 08 16:03:03.060326 2026] [:error] [pid 22788:tid 22877] [client 147.135.253.34:50508] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aa0tN0hwluk21OG9mSfGsAAAA5Y"]
[Sun Mar 08 16:03:05.512324 2026] [:error] [pid 22790:tid 22883] [client 147.135.253.34:50514] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aa0tORXbGDWrzD_dTOexxwAAA8E"]
[Sun Mar 08 16:03:07.973107 2026] [:error] [pid 22790:tid 22902] [client 147.135.253.34:50530] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aa0tOxXbGDWrzD_dTOex0wAAA9Q"]
[Sun Mar 08 16:03:10.420553 2026] [:error] [pid 22790:tid 22904] [client 147.135.253.34:37676] [client 147.135.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aa0tPhXbGDWrzD_dTOex-wAAA9Y"]
[Sun Mar 08 17:22:41.548880 2026] [:error] [pid 22790:tid 22903] [client 165.232.53.222:39748] [client 165.232.53.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.232.53.222, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0_4RXbGDWrzD_dTOfNfgAAA9U"]
[Sun Mar 08 17:22:44.112596 2026] [:error] [pid 22790:tid 22896] [client 165.232.53.222:39748] [client 165.232.53.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.232.53.222, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa0_5BXbGDWrzD_dTOfNhQAAA84"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 17:35:28.150403 2026] [:error] [pid 22786:tid 22805] [client 103.23.155.210:55380] [client 103.23.155.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.23.155.210, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa1C4HPuJewMN2jPbdXVhgAAAwQ"]
[Sun Mar 08 18:12:55.155667 2026] [:error] [pid 22790:tid 22885] [client 216.250.12.125:53422] [client 216.250.12.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.250.12.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa1LpxXbGDWrzD_dTOfblgAAA8M"]
[Sun Mar 08 18:12:56.689123 2026] [:error] [pid 22790:tid 22888] [client 216.250.12.125:53422] [client 216.250.12.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.250.12.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa1LqBXbGDWrzD_dTOfbmQAAA8Y"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 18:44:31.158675 2026] [:error] [pid 22669:tid 22766] [client 79.11.134.34:60084] [client 79.11.134.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.11.134.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa1TD2vqAhy8LIaua-p-WwAAAsc"]
[Sun Mar 08 18:44:32.476478 2026] [:error] [pid 22669:tid 22760] [client 79.11.134.34:60084] [client 79.11.134.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.11.134.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa1TEGvqAhy8LIaua-p-XAAAAsE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 18:52:51.064037 2026] [:error] [pid 22786:tid 22818] [client 98.70.76.51:40848] [client 98.70.76.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.70.76.51, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa1VA3PuJewMN2jPbdUDDAAAAxE"]
[Sun Mar 08 18:52:52.370544 2026] [:error] [pid 22786:tid 22820] [client 98.70.76.51:40848] [client 98.70.76.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.70.76.51, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa1VBHPuJewMN2jPbdUDDQAAAxM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 19:23:55.863529 2026] [:error] [pid 22787:tid 22842] [client 173.252.167.150:59892] [client 173.252.167.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa1cS0F9MGMhk9pT4z4UiwAAA04"]
[Sun Mar 08 19:23:57.196062 2026] [:error] [pid 22787:tid 22841] [client 173.252.167.150:59892] [client 173.252.167.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa1cTUF9MGMhk9pT4z4UjgAAA00"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 21:10:07.488616 2026] [:error] [pid 43671:tid 43730] [client 194.180.48.253:38852] [client 194.180.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aa11L66AdwroU1gT3XG9DAAAAEc"]
[Sun Mar 08 22:00:53.742519 2026] [:error] [pid 22668:tid 22742] [client 170.106.163.84:34296] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa2BFemzLHpblwnQgPg5XQAAAoo"]
[Sun Mar 08 22:04:41.795544 2026] [:error] [pid 43671:tid 43734] [client 103.49.131.239:33670] [client 103.49.131.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.49.131.239, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2B-a6AdwroU1gT3XHxAQAAAEs"]
[Sun Mar 08 22:04:44.416492 2026] [:error] [pid 43671:tid 43732] [client 103.49.131.239:33670] [client 103.49.131.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.49.131.239, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2B_K6AdwroU1gT3XHxBQAAAEk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 22:05:39.519473 2026] [:error] [pid 10427:tid 10450] [client 167.179.82.69:33316] [client 167.179.82.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.179.82.69, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2CM-uBPlvYOFwlpaeM1QAAAMQ"]
[Sun Mar 08 22:05:41.221290 2026] [:error] [pid 10427:tid 10491] [client 167.179.82.69:33316] [client 167.179.82.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.179.82.69, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2CNeuBPlvYOFwlpaeM1gAAANI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 23:18:05.571372 2026] [:error] [pid 22788:tid 22864] [client 122.175.189.80:54514] [client 122.175.189.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 122.175.189.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2TLUhwluk21OG9mSdo9gAAA4k"]
[Sun Mar 08 23:18:06.896016 2026] [:error] [pid 22788:tid 22860] [client 122.175.189.80:54514] [client 122.175.189.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 122.175.189.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2TLkhwluk21OG9mSdo-gAAA4U"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 23:29:04.208599 2026] [:error] [pid 22667:tid 22712] [client 114.10.45.132:37797] [client 114.10.45.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.10.45.132, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aa2VwOG7qk1roo-TRWPQ2QAAAkc"]
[Sun Mar 08 23:45:11.450320 2026] [:error] [pid 22667:tid 22725] [client 103.138.189.156:49744] [client 103.138.189.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.189.156, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2Zh-G7qk1roo-TRWPTOgAAAlQ"]
[Sun Mar 08 23:45:13.466816 2026] [:error] [pid 22667:tid 22722] [client 103.138.189.156:49744] [client 103.138.189.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.189.156, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2ZieG7qk1roo-TRWPTOwAAAlE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 08 23:45:52.170206 2026] [:error] [pid 43671:tid 43725] [client 212.58.119.217:6230] [client 212.58.119.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.58.119.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aa2ZsK6AdwroU1gT3XEmMQAAAEI"]
[Sun Mar 08 23:50:47.986549 2026] [:error] [pid 10524:tid 10605] [client 212.58.119.217:6185] [client 212.58.119.217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aa2a19JkfNNXb-EWpCBx7wAAAg8"]
[Sun Mar 08 23:51:36.634542 2026] [:error] [pid 10522:tid 10553] [client 157.90.130.252:38796] [client 157.90.130.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.130.252, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2bCFEZGQssSI3mZTMwAwAAAZE"]
[Sun Mar 08 23:51:38.988295 2026] [:error] [pid 10522:tid 10549] [client 157.90.130.252:38796] [client 157.90.130.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.130.252, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2bClEZGQssSI3mZTMwBAAAAY0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 09 00:23:39.733487 2026] [:error] [pid 49392:tid 49597] [client 220.158.233.237:20062] [client 220.158.233.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.233.237, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2ii7hnfLjo2gwJdbEpTAAAAEs"]
[Mon Mar 09 00:23:43.584354 2026] [:error] [pid 49392:tid 49602] [client 220.158.233.237:20062] [client 220.158.233.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.233.237, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2ij7hnfLjo2gwJdbEpUAAAAFA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 09 00:24:56.435361 2026] [:error] [pid 49419:tid 49665] [client 67.207.86.6:60148] [client 67.207.86.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.207.86.6, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2i2PSUwH6DJwBBi5BjvgAAABg"]
[Mon Mar 09 00:24:59.710248 2026] [:error] [pid 49419:tid 49650] [client 67.207.86.6:60148] [client 67.207.86.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.207.86.6, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa2i2_SUwH6DJwBBi5BjxQAAAAk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 09 00:28:03.158595 2026] [:error] [pid 49419:tid 49650] [client 161.97.66.6:34234] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aa2jk_SUwH6DJwBBi5BkvgAAAAk"]
[Mon Mar 09 00:28:05.755297 2026] [:error] [pid 49404:tid 49622] [client 161.97.66.6:52112] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aa2jlXc8Cw-aeCN3s76ERgAAA0g"]
[Mon Mar 09 00:28:08.465994 2026] [:error] [pid 49677:tid 49743] [client 161.97.66.6:52122] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aa2jmNgMztaTv5fI2XrOTAAAAI8"]
[Mon Mar 09 00:28:11.005257 2026] [:error] [pid 49419:tid 49644] [client 161.97.66.6:59944] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aa2jm_SUwH6DJwBBi5BkxgAAAAM"]
[Mon Mar 09 00:28:13.451681 2026] [:error] [pid 49677:tid 49745] [client 161.97.66.6:59948] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa2jndgMztaTv5fI2XrObgAAAJE"]
[Mon Mar 09 00:28:15.928470 2026] [:error] [pid 49392:tid 49606] [client 161.97.66.6:59954] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aa2jn7hnfLjo2gwJdbErhgAAAFQ"]
[Mon Mar 09 00:28:18.751840 2026] [:error] [pid 49419:tid 49646] [client 161.97.66.6:47116] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aa2jovSUwH6DJwBBi5Bk3AAAAAU"]
[Mon Mar 09 00:28:21.511829 2026] [:error] [pid 49419:tid 49652] [client 161.97.66.6:47124] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aa2jpfSUwH6DJwBBi5Bk4wAAAAs"]
[Mon Mar 09 00:28:24.041019 2026] [:error] [pid 49677:tid 49740] [client 161.97.66.6:47130] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aa2jqNgMztaTv5fI2XrO1wAAAIw"]
[Mon Mar 09 00:28:26.638348 2026] [:error] [pid 49677:tid 49741] [client 161.97.66.6:47138] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aa2jqtgMztaTv5fI2XrO6gAAAI0"]
[Mon Mar 09 00:28:29.328319 2026] [:error] [pid 49392:tid 49607] [client 161.97.66.6:42304] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aa2jrbhnfLjo2gwJdbErsAAAAFU"]
[Mon Mar 09 00:28:31.957512 2026] [:error] [pid 49677:tid 49729] [client 161.97.66.6:42306] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aa2jr9gMztaTv5fI2XrPDAAAAIE"]
[Mon Mar 09 00:28:34.448383 2026] [:error] [pid 49677:tid 49745] [client 161.97.66.6:42318] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aa2jstgMztaTv5fI2XrPHAAAAJE"]
[Mon Mar 09 00:28:37.083278 2026] [:error] [pid 49404:tid 49624] [client 161.97.66.6:42324] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aa2jtXc8Cw-aeCN3s76EfwAAA0o"]
[Mon Mar 09 00:28:39.826054 2026] [:error] [pid 49677:tid 49731] [client 161.97.66.6:44954] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa2jt9gMztaTv5fI2XrPMgAAAIM"]
[Mon Mar 09 00:28:42.447188 2026] [:error] [pid 49677:tid 49731] [client 161.97.66.6:44964] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aa2jutgMztaTv5fI2XrPPQAAAIM"]
[Mon Mar 09 00:28:45.136222 2026] [:error] [pid 49677:tid 49744] [client 161.97.66.6:44980] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aa2jvdgMztaTv5fI2XrPRwAAAJA"]
[Mon Mar 09 00:28:47.895840 2026] [:error] [pid 49677:tid 49752] [client 161.97.66.6:44992] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aa2jv9gMztaTv5fI2XrPVwAAAJg"]
[Mon Mar 09 00:28:50.571326 2026] [:error] [pid 49677:tid 49748] [client 161.97.66.6:39378] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aa2jwtgMztaTv5fI2XrPYgAAAJQ"]
[Mon Mar 09 00:28:53.260646 2026] [:error] [pid 49404:tid 49618] [client 161.97.66.6:39392] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aa2jxXc8Cw-aeCN3s76ElQAAA0Q"]
[Mon Mar 09 00:28:55.623118 2026] [:error] [pid 49677:tid 49738] [client 161.97.66.6:39398] [client 161.97.66.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aa2jx9gMztaTv5fI2XrPgwAAAIo"]
[Mon Mar 09 03:11:47.710116 2026] [:error] [pid 62100:tid 62121] [client 121.229.185.160:35211] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa3J82gNjCeV8lp4tZXsHgAAARM"]
[Mon Mar 09 06:35:10.962569 2026] [:error] [pid 5787:tid 5937] [client 13.58.51.181:58020] [client 13.58.51.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aa35nrGpMgQ18gGUaFN4PQAAAI8"]
[Mon Mar 09 06:35:12.491805 2026] [:error] [pid 6074:tid 6108] [client 13.58.51.181:61930] [client 13.58.51.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aa35oBgvXHMVGYw_ElzkdwAAANE"]
[Mon Mar 09 06:35:14.927224 2026] [:error] [pid 17485:tid 17508] [client 13.58.51.181:63799] [client 13.58.51.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aa35otQOL_kxQEc1PTCZiQAAARQ"]
[Mon Mar 09 06:35:16.546063 2026] [:error] [pid 5783:tid 5896] [client 13.58.51.181:49929] [client 13.58.51.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aa35pAdiZJ1FQPtsTNQO9wAAAEI"]
[Mon Mar 09 08:30:32.936701 2026] [:error] [pid 6074:tid 6110] [client 43.153.71.12:37928] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa4UqBgvXHMVGYw_ElwjqwAAANM"]
[Mon Mar 09 09:11:15.382623 2026] [:error] [pid 2145:tid 2194] [client 101.128.96.20:34247] [client 101.128.96.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.128.96.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aa4eM3czzpD9XHtKwuAmRgAAAVY"]
[Mon Mar 09 09:25:32.212267 2026] [:error] [pid 5783:tid 5914] [client 182.44.12.37:37942] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa4hjAdiZJ1FQPtsTNQu3AAAAFQ"]
[Mon Mar 09 09:37:47.393192 2026] [:error] [pid 2145:tid 2179] [client 101.128.96.20:25195] [client 101.128.96.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aa4ka3czzpD9XHtKwuA5mAAAAUs"]
[Mon Mar 09 10:24:32.974802 2026] [:error] [pid 6074:tid 6099] [client 179.109.82.136:26173] [client 179.109.82.136] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aa4vYBgvXHMVGYw_ElxXqQAAAMg"]
[Mon Mar 09 10:26:06.060475 2026] [:error] [pid 17485:tid 17488] [client 179.109.82.136:26103] [client 179.109.82.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.109.82.136, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aa4vvtQOL_kxQEc1PTBzogAAAQA"]
[Mon Mar 09 11:48:18.912049 2026] [:error] [pid 5779:tid 5873] [client 20.219.138.200:12355] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aa5DAgaHbHwtklaurgWZPAAAABI"]
[Mon Mar 09 11:48:19.517968 2026] [:error] [pid 2145:tid 2167] [client 20.219.138.200:12893] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aa5DA3czzpD9XHtKwuCshQAAAUE"]
[Mon Mar 09 11:48:20.116435 2026] [:error] [pid 2145:tid 2170] [client 20.219.138.200:12578] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aa5DBHczzpD9XHtKwuCshwAAAUQ"]
[Mon Mar 09 11:48:20.683261 2026] [:error] [pid 17485:tid 17509] [client 20.219.138.200:11035] [client 20.219.138.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "aa5DBNQOL_kxQEc1PTDMzAAAARU"]
[Mon Mar 09 13:59:28.471162 2026] [:error] [pid 5787:tid 5940] [client 193.111.73.176:58908] [client 193.111.73.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.111.73.176, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aa5hwLGpMgQ18gGUaFMBSAAAAJI"]
[Mon Mar 09 14:13:59.431527 2026] [:error] [pid 2145:tid 2179] [client 2.50.38.150:55182] [client 2.50.38.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.50.38.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aa5lJ3czzpD9XHtKwuD9tgAAAUs"]
[Mon Mar 09 16:00:46.646763 2026] [:error] [pid 17485:tid 17497] [client 106.119.167.146:44095] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa5-LtQOL_kxQEc1PTCX8wAAAQk"]
[Mon Mar 09 21:35:26.652948 2026] [:error] [pid 5779:tid 5874] [client 194.247.173.99:35666] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "aa7MngaHbHwtklaurgU_nQAAABM"]
[Mon Mar 09 21:35:29.240830 2026] [:error] [pid 5787:tid 5937] [client 194.247.173.99:46910] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aa7MobGpMgQ18gGUaFPmywAAAI8"]
[Mon Mar 09 21:35:32.517663 2026] [:error] [pid 44503:tid 44527] [client 194.247.173.99:46912] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aa7MpMpGKFA8jlKDDh0sdAAAAdQ"]
[Mon Mar 09 21:35:34.968524 2026] [:error] [pid 5779:tid 5875] [client 194.247.173.99:45094] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "aa7MpgaHbHwtklaurgU_rAAAABQ"]
[Mon Mar 09 21:35:37.676696 2026] [:error] [pid 5779:tid 5879] [client 194.247.173.99:45106] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aa7MqQaHbHwtklaurgU_twAAABg"]
[Mon Mar 09 21:35:40.437246 2026] [:error] [pid 5779:tid 5865] [client 194.247.173.99:45118] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aa7MrAaHbHwtklaurgU_wgAAAAo"]
[Mon Mar 09 21:35:43.000951 2026] [:error] [pid 5787:tid 5926] [client 194.247.173.99:50316] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aa7MrrGpMgQ18gGUaFPm8wAAAIQ"]
[Mon Mar 09 21:35:45.604538 2026] [:error] [pid 5779:tid 5857] [client 194.247.173.99:50318] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aa7MsQaHbHwtklaurgU_0AAAAAI"]
[Mon Mar 09 21:35:48.274093 2026] [:error] [pid 5779:tid 5870] [client 194.247.173.99:50332] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aa7MtAaHbHwtklaurgU_1wAAAA8"]
[Mon Mar 09 21:35:50.701128 2026] [:error] [pid 5787:tid 5929] [client 194.247.173.99:50342] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aa7MtrGpMgQ18gGUaFPnDQAAAIc"]
[Mon Mar 09 21:35:53.321108 2026] [:error] [pid 6074:tid 6105] [client 194.247.173.99:35812] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aa7MuRgvXHMVGYw_ElwKiAAAAM4"]
[Mon Mar 09 21:35:55.937814 2026] [:error] [pid 17485:tid 17503] [client 194.247.173.99:35818] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aa7Mu9QOL_kxQEc1PTC3ZgAAAQ8"]
[Mon Mar 09 21:35:59.195092 2026] [:error] [pid 44503:tid 44518] [client 194.247.173.99:35834] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aa7Mv8pGKFA8jlKDDh0spwAAAcs"]
[Mon Mar 09 21:36:01.635113 2026] [:error] [pid 5787:tid 5939] [client 194.247.173.99:35838] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aa7MwbGpMgQ18gGUaFPnKQAAAJE"]
[Mon Mar 09 21:36:04.269671 2026] [:error] [pid 5779:tid 5877] [client 194.247.173.99:52778] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aa7MxAaHbHwtklaurgVABgAAABY"]
[Mon Mar 09 21:36:06.879267 2026] [:error] [pid 2145:tid 2180] [client 194.247.173.99:52786] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aa7MxnczzpD9XHtKwuBRagAAAUw"]
[Mon Mar 09 21:36:09.518738 2026] [:error] [pid 44504:tid 44548] [client 194.247.173.99:52802] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aa7MyXri56-8oxPimmhPjwAAAg4"]
[Mon Mar 09 21:36:12.124825 2026] [:error] [pid 44503:tid 44509] [client 194.247.173.99:52718] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aa7MzMpGKFA8jlKDDh0syQAAAcI"]
[Mon Mar 09 21:36:14.764162 2026] [:error] [pid 44503:tid 44518] [client 194.247.173.99:52732] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aa7MzspGKFA8jlKDDh0szAAAAcs"]
[Mon Mar 09 21:36:17.371754 2026] [:error] [pid 5783:tid 5908] [client 194.247.173.99:52740] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aa7M0QdiZJ1FQPtsTNTffgAAAE4"]
[Mon Mar 09 21:36:20.990678 2026] [:error] [pid 5779:tid 5857] [client 194.247.173.99:52750] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aa7M1AaHbHwtklaurgVAFQAAAAI"]
[Mon Mar 09 21:36:59.456090 2026] [:error] [pid 44503:tid 44517] [client 194.247.173.99:43604] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "aa7M-8pGKFA8jlKDDh0tpAAAAco"]
[Mon Mar 09 21:37:01.885517 2026] [:error] [pid 5787:tid 5924] [client 194.247.173.99:35472] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aa7M_bGpMgQ18gGUaFPnmAAAAII"]
[Mon Mar 09 21:37:04.506789 2026] [:error] [pid 44503:tid 44524] [client 194.247.173.99:46476] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aa7NAMpGKFA8jlKDDh0tsAAAAdE"]
[Mon Mar 09 21:37:07.094508 2026] [:error] [pid 5779:tid 5878] [client 194.247.173.99:46480] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aa7NAwaHbHwtklaurgVARwAAABc"]
[Mon Mar 09 21:37:09.712903 2026] [:error] [pid 5787:tid 5927] [client 194.247.173.99:46486] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aa7NBbGpMgQ18gGUaFPntAAAAIU"]
[Mon Mar 09 21:37:12.318513 2026] [:error] [pid 5787:tid 5946] [client 194.247.173.99:38494] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aa7NCLGpMgQ18gGUaFPnuAAAAJg"]
[Mon Mar 09 21:37:14.903689 2026] [:error] [pid 5787:tid 5928] [client 194.247.173.99:38510] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aa7NCrGpMgQ18gGUaFPnvgAAAIY"]
[Mon Mar 09 21:37:17.519102 2026] [:error] [pid 44463:tid 44485] [client 194.247.173.99:38516] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aa7NDS5tVkWjZvDknB0qwAAAAY4"]
[Mon Mar 09 21:37:20.124192 2026] [:error] [pid 44503:tid 44507] [client 194.247.173.99:38520] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aa7NEMpGKFA8jlKDDh0t7AAAAcA"]
[Mon Mar 09 21:37:23.720968 2026] [:error] [pid 44503:tid 44530] [client 194.247.173.99:59188] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aa7NE8pGKFA8jlKDDh0uEgAAAdc"]
[Mon Mar 09 21:37:26.402697 2026] [:error] [pid 44503:tid 44518] [client 194.247.173.99:59192] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aa7NFspGKFA8jlKDDh0uNAAAAcs"]
[Mon Mar 09 21:37:28.853351 2026] [:error] [pid 5787:tid 5940] [client 194.247.173.99:59202] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aa7NGLGpMgQ18gGUaFPnzAAAAJI"]
[Mon Mar 09 21:37:31.451673 2026] [:error] [pid 6074:tid 6110] [client 194.247.173.99:59210] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aa7NGxgvXHMVGYw_ElwKvAAAANM"]
[Mon Mar 09 21:37:34.035005 2026] [:error] [pid 5779:tid 5876] [client 194.247.173.99:54302] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aa7NHgaHbHwtklaurgVAegAAABU"]
[Mon Mar 09 21:37:36.634876 2026] [:error] [pid 44504:tid 44534] [client 194.247.173.99:54314] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa7NIHri56-8oxPimmhQEAAAAgA"]
[Mon Mar 09 21:37:39.224692 2026] [:error] [pid 5787:tid 5937] [client 194.247.173.99:54318] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aa7NI7GpMgQ18gGUaFPn3QAAAI8"]
[Mon Mar 09 21:37:41.839776 2026] [:error] [pid 17485:tid 17490] [client 194.247.173.99:54320] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aa7NJdQOL_kxQEc1PTC3hQAAAQI"]
[Mon Mar 09 21:37:44.422603 2026] [:error] [pid 44503:tid 44524] [client 194.247.173.99:51390] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aa7NKMpGKFA8jlKDDh0uhgAAAdE"]
[Mon Mar 09 21:37:47.013085 2026] [:error] [pid 44504:tid 44550] [client 194.247.173.99:51400] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aa7NK3ri56-8oxPimmhQHgAAAhA"]
[Mon Mar 09 21:37:49.470155 2026] [:error] [pid 44503:tid 44519] [client 194.247.173.99:51402] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aa7NLcpGKFA8jlKDDh0ujwAAAcw"]
[Mon Mar 09 21:37:52.082948 2026] [:error] [pid 44504:tid 44536] [client 194.247.173.99:60030] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aa7NMHri56-8oxPimmhQIAAAAgI"]
[Mon Mar 09 21:37:54.663912 2026] [:error] [pid 44503:tid 44517] [client 194.247.173.99:60034] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aa7NMspGKFA8jlKDDh0ungAAAco"]
[Mon Mar 09 21:38:35.543728 2026] [:error] [pid 5787:tid 5931] [client 194.247.173.99:60044] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aa7NW7GpMgQ18gGUaFPoXAAAAIk"]
[Mon Mar 09 21:38:38.118534 2026] [:error] [pid 5787:tid 5922] [client 194.247.173.99:53562] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aa7NXrGpMgQ18gGUaFPoYwAAAIA"]
[Mon Mar 09 21:38:40.695082 2026] [:error] [pid 5779:tid 5862] [client 194.247.173.99:53570] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aa7NYAaHbHwtklaurgVAwgAAAAc"]
[Mon Mar 09 21:38:43.126502 2026] [:error] [pid 44463:tid 44475] [client 194.247.173.99:53180] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aa7NYy5tVkWjZvDknB0q_gAAAYQ"]
[Mon Mar 09 21:38:45.735780 2026] [:error] [pid 5783:tid 5909] [client 194.247.173.99:53192] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aa7NZQdiZJ1FQPtsTNTgDgAAAE8"]
[Mon Mar 09 21:38:48.320551 2026] [:error] [pid 5779:tid 5856] [client 194.247.173.99:53194] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aa7NaAaHbHwtklaurgVA1wAAAAE"]
[Mon Mar 09 21:38:50.896412 2026] [:error] [pid 44503:tid 44519] [client 194.247.173.99:53202] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aa7NaspGKFA8jlKDDh0vdAAAAcw"]
[Mon Mar 09 21:38:53.481671 2026] [:error] [pid 6074:tid 6095] [client 194.247.173.99:44230] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aa7NbRgvXHMVGYw_ElwK5wAAAMQ"]
[Mon Mar 09 21:38:56.062278 2026] [:error] [pid 5787:tid 5943] [client 194.247.173.99:44234] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aa7NcLGpMgQ18gGUaFPojgAAAJU"]
[Mon Mar 09 21:38:58.651720 2026] [:error] [pid 5787:tid 5927] [client 194.247.173.99:44248] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aa7NcrGpMgQ18gGUaFPolAAAAIU"]
[Mon Mar 09 21:39:01.229517 2026] [:error] [pid 5783:tid 5910] [client 194.247.173.99:44258] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aa7NdQdiZJ1FQPtsTNTgFgAAAFA"]
[Mon Mar 09 21:39:03.856068 2026] [:error] [pid 44463:tid 44474] [client 194.247.173.99:56406] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aa7Ndy5tVkWjZvDknB0rCQAAAYM"]
[Mon Mar 09 21:39:06.571703 2026] [:error] [pid 2145:tid 2177] [client 194.247.173.99:56416] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aa7NenczzpD9XHtKwuBRrgAAAUk"]
[Mon Mar 09 21:39:09.149650 2026] [:error] [pid 44503:tid 44507] [client 194.247.173.99:56432] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aa7NfcpGKFA8jlKDDh0vlQAAAcA"]
[Mon Mar 09 21:39:11.720687 2026] [:error] [pid 44503:tid 44514] [client 194.247.173.99:56440] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aa7Nf8pGKFA8jlKDDh0vqgAAAcc"]
[Mon Mar 09 21:39:15.149447 2026] [:error] [pid 44503:tid 44530] [client 194.247.173.99:45922] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aa7Ng8pGKFA8jlKDDh0vwQAAAdc"]
[Mon Mar 09 21:39:18.335282 2026] [:error] [pid 44503:tid 44528] [client 194.247.173.99:45926] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aa7NhspGKFA8jlKDDh0v0gAAAdU"]
[Mon Mar 09 21:49:14.960794 2026] [:error] [pid 44504:tid 44549] [client 43.159.128.247:36490] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa7P2nri56-8oxPimmhT9gAAAg8"]
[Mon Mar 09 22:50:04.230878 2026] [:error] [pid 5779:tid 5871] [client 122.51.236.174:55510] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa7eHAaHbHwtklaurgVXVAAAABA"]
[Tue Mar 10 03:33:24.379038 2026] [:error] [pid 32798:tid 32821] [client 216.234.215.184:32165] [client 216.234.215.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.234.215.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aa8ghGxfsI4EbE3KrNC-kQAAAFQ"]
[Tue Mar 10 04:30:19.198948 2026] [:error] [pid 8193:tid 8226] [client 43.153.87.54:50100] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa8t2x27LTs3sNpMSvz30gAAAMY"]
[Tue Mar 10 04:36:40.011457 2026] [:error] [pid 7908:tid 8051] [client 104.28.159.135:25865] [client 104.28.159.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aa8vWMY8gEjgYKb1A_jAXgAAAFA"]
[Tue Mar 10 05:23:22.056524 2026] [:error] [pid 8193:tid 8244] [client 62.60.131.218:58409] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa86Sh27LTs3sNpMSvwQbgAAANg"]
[Tue Mar 10 05:28:46.609940 2026] [:error] [pid 8193:tid 8226] [client 190.245.146.99:60453] [client 190.245.146.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.245.146.99, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aa87jh27LTs3sNpMSvwSFwAAAMY"]
[Tue Mar 10 05:32:06.579644 2026] [:error] [pid 8193:tid 8227] [client 190.245.146.99:61923] [client 190.245.146.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aa88Vh27LTs3sNpMSvwS6QAAAMc"]
[Tue Mar 10 05:40:48.911805 2026] [:error] [pid 7908:tid 8035] [client 62.60.131.218:59195] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa8-YMY8gEjgYKb1A_jLKQAAAEE"]
[Tue Mar 10 07:50:27.562033 2026] [:error] [pid 13407:tid 13441] [client 43.153.71.12:60198] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa9cw9qN0GV-aESMjNyBggAAAU8"]
[Tue Mar 10 08:58:17.818184 2026] [:error] [pid 13407:tid 13427] [client 43.228.157.67:39960] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aa9sqdqN0GV-aESMjNyeugAAAUE"]
[Tue Mar 10 08:58:20.177066 2026] [:error] [pid 31977:tid 32111] [client 43.228.157.67:40606] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aa9srC_lkX6-Mo89SmEBrAAAAEY"]
[Tue Mar 10 08:58:22.417888 2026] [:error] [pid 31977:tid 32115] [client 43.228.157.67:40622] [client 43.228.157.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/public/.git/config"] [unique_id "aa9sri_lkX6-Mo89SmEBuwAAAEo"]
[Tue Mar 10 11:46:37.286115 2026] [:error] [pid 39996:tid 40018] [client 49.7.227.204:60106] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa-UHf5uf5_ai0O9BswO3AAAAAU"]
[Tue Mar 10 14:26:48.569495 2026] [:error] [pid 39996:tid 40037] [client 43.135.36.201:53470] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aa-5qP5uf5_ai0O9BswvjQAAABg"]
[Tue Mar 10 15:08:07.641033 2026] [:error] [pid 21317:tid 21357] [client 145.239.69.106:59536] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "aa_DV1UUqcn7vK991D13hwAAAEo"]
[Tue Mar 10 15:08:10.154428 2026] [:error] [pid 21316:tid 21335] [client 145.239.69.106:39942] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "aa_DWpmAQfAZtna2rDxxwwAAAA8"]
[Tue Mar 10 15:08:12.632504 2026] [:error] [pid 21317:tid 21367] [client 145.239.69.106:43128] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aa_DXFUUqcn7vK991D13igAAAFQ"]
[Tue Mar 10 15:08:15.127243 2026] [:error] [pid 21400:tid 21416] [client 145.239.69.106:43130] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "aa_DXzCFYMzi4orNuEGlAQAAAM4"]
[Tue Mar 10 15:08:17.701428 2026] [:error] [pid 21316:tid 21338] [client 145.239.69.106:43142] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aa_DYZmAQfAZtna2rDxxyQAAABI"]
[Tue Mar 10 15:08:20.198464 2026] [:error] [pid 21316:tid 21330] [client 145.239.69.106:43150] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aa_DZJmAQfAZtna2rDxxzAAAAAo"]
[Tue Mar 10 15:08:22.596819 2026] [:error] [pid 21317:tid 21356] [client 145.239.69.106:38726] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aa_DZlUUqcn7vK991D13lQAAAEk"]
[Tue Mar 10 15:08:25.052132 2026] [:error] [pid 21400:tid 21417] [client 145.239.69.106:38732] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aa_DaTCFYMzi4orNuEGlFQAAAM8"]
[Tue Mar 10 15:08:27.521336 2026] [:error] [pid 21317:tid 21349] [client 145.239.69.106:38736] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aa_Da1UUqcn7vK991D13mQAAAEI"]
[Tue Mar 10 15:08:29.989564 2026] [:error] [pid 21400:tid 21409] [client 145.239.69.106:38738] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aa_DbTCFYMzi4orNuEGlHQAAAMc"]
[Tue Mar 10 15:08:32.474873 2026] [:error] [pid 21316:tid 21342] [client 145.239.69.106:56774] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aa_DcJmAQfAZtna2rDxx1QAAABY"]
[Tue Mar 10 15:08:34.960576 2026] [:error] [pid 21316:tid 21341] [client 145.239.69.106:56790] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aa_DcpmAQfAZtna2rDxx2AAAABU"]
[Tue Mar 10 15:08:37.445783 2026] [:error] [pid 21317:tid 21364] [client 145.239.69.106:56798] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aa_DdVUUqcn7vK991D13oQAAAFE"]
[Tue Mar 10 15:08:39.908212 2026] [:error] [pid 21400:tid 21405] [client 145.239.69.106:56800] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aa_DdzCFYMzi4orNuEGlKgAAAMM"]
[Tue Mar 10 15:08:42.428919 2026] [:error] [pid 21318:tid 21396] [client 145.239.69.106:35000] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aa_DehTTkPqKydpYiII4HgAAAJY"]
[Tue Mar 10 15:08:44.756343 2026] [:error] [pid 21318:tid 21397] [client 145.239.69.106:35006] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aa_DfBTTkPqKydpYiII4IwAAAJc"]
[Tue Mar 10 15:08:47.265545 2026] [:error] [pid 21400:tid 21426] [client 145.239.69.106:35012] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aa_DfzCFYMzi4orNuEGlMQAAANg"]
[Tue Mar 10 15:08:49.763013 2026] [:error] [pid 21316:tid 21341] [client 145.239.69.106:35026] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aa_DgZmAQfAZtna2rDxx7QAAABU"]
[Tue Mar 10 15:08:52.269635 2026] [:error] [pid 21400:tid 21417] [client 145.239.69.106:53050] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aa_DhDCFYMzi4orNuEGlOQAAAM8"]
[Tue Mar 10 15:08:54.593784 2026] [:error] [pid 21400:tid 21418] [client 145.239.69.106:53058] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aa_DhjCFYMzi4orNuEGlRwAAANA"]
[Tue Mar 10 15:08:57.117540 2026] [:error] [pid 21400:tid 21407] [client 145.239.69.106:53064] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aa_DiTCFYMzi4orNuEGlTgAAAMU"]
[Tue Mar 10 15:08:59.435490 2026] [:error] [pid 21317:tid 21358] [client 145.239.69.106:53066] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aa_Di1UUqcn7vK991D13xgAAAEs"]
[Tue Mar 10 15:09:01.951247 2026] [:error] [pid 21318:tid 21375] [client 145.239.69.106:36572] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aa_DjRTTkPqKydpYiII4OQAAAIE"]
[Tue Mar 10 15:09:04.442376 2026] [:error] [pid 21317:tid 21350] [client 145.239.69.106:36574] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aa_DkFUUqcn7vK991D136AAAAEM"]
[Tue Mar 10 15:09:35.547194 2026] [:error] [pid 21318:tid 21396] [client 145.239.69.106:36578] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aa_DrxTTkPqKydpYiII4hwAAAJY"]
[Tue Mar 10 15:09:38.021207 2026] [:error] [pid 21317:tid 21369] [client 145.239.69.106:50418] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aa_DslUUqcn7vK991D13_AAAAFY"]
[Tue Mar 10 15:09:40.536398 2026] [:error] [pid 21318:tid 21380] [client 145.239.69.106:50426] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aa_DtBTTkPqKydpYiII4jgAAAIY"]
[Tue Mar 10 15:09:43.040025 2026] [:error] [pid 21318:tid 21375] [client 145.239.69.106:43104] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aa_DtxTTkPqKydpYiII4kwAAAIE"]
[Tue Mar 10 15:09:45.535366 2026] [:error] [pid 21400:tid 21412] [client 145.239.69.106:43110] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aa_DuTCFYMzi4orNuEGlugAAAMo"]
[Tue Mar 10 15:09:47.886325 2026] [:error] [pid 21316:tid 21344] [client 145.239.69.106:43114] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aa_Du5mAQfAZtna2rDxyEAAAABg"]
[Tue Mar 10 15:09:50.234556 2026] [:error] [pid 21400:tid 21421] [client 145.239.69.106:43126] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aa_DvjCFYMzi4orNuEGlxwAAANM"]
[Tue Mar 10 15:09:52.696683 2026] [:error] [pid 21400:tid 21417] [client 145.239.69.106:55814] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aa_DwDCFYMzi4orNuEGlzgAAAM8"]
[Tue Mar 10 15:09:55.276897 2026] [:error] [pid 21316:tid 21324] [client 145.239.69.106:55826] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aa_Dw5mAQfAZtna2rDxyFwAAAAQ"]
[Tue Mar 10 15:09:57.753442 2026] [:error] [pid 21400:tid 21422] [client 145.239.69.106:55830] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aa_DxTCFYMzi4orNuEGl1gAAANQ"]
[Tue Mar 10 15:10:00.226942 2026] [:error] [pid 21318:tid 21374] [client 145.239.69.106:55846] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aa_DyBTTkPqKydpYiII4ngAAAIA"]
[Tue Mar 10 15:10:02.808107 2026] [:error] [pid 21317:tid 21350] [client 145.239.69.106:49914] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aa_DylUUqcn7vK991D14KQAAAEM"]
[Tue Mar 10 15:10:05.281619 2026] [:error] [pid 21317:tid 21355] [client 145.239.69.106:49930] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aa_DzVUUqcn7vK991D14LQAAAEg"]
[Tue Mar 10 15:10:07.745970 2026] [:error] [pid 21400:tid 21421] [client 145.239.69.106:49944] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aa_DzzCFYMzi4orNuEGl4wAAANM"]
[Tue Mar 10 15:10:10.244268 2026] [:error] [pid 21316:tid 21323] [client 145.239.69.106:49954] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aa_D0pmAQfAZtna2rDxyJwAAAAM"]
[Tue Mar 10 15:10:12.687528 2026] [:error] [pid 21318:tid 21390] [client 145.239.69.106:38020] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aa_D1BTTkPqKydpYiII4sQAAAJA"]
[Tue Mar 10 15:10:15.117641 2026] [:error] [pid 21318:tid 21397] [client 145.239.69.106:38024] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aa_D1xTTkPqKydpYiII4uAAAAJc"]
[Tue Mar 10 15:10:17.440862 2026] [:error] [pid 21317:tid 21363] [client 145.239.69.106:38040] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aa_D2VUUqcn7vK991D14NwAAAFA"]
[Tue Mar 10 15:10:19.905742 2026] [:error] [pid 21317:tid 21364] [client 145.239.69.106:38050] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aa_D21UUqcn7vK991D14PQAAAFE"]
[Tue Mar 10 15:10:22.350085 2026] [:error] [pid 21400:tid 21408] [client 145.239.69.106:52564] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aa_D3jCFYMzi4orNuEGl9QAAAMY"]
[Tue Mar 10 15:10:24.668844 2026] [:error] [pid 21317:tid 21365] [client 145.239.69.106:52570] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aa_D4FUUqcn7vK991D14QgAAAFI"]
[Tue Mar 10 15:10:27.124285 2026] [:error] [pid 21318:tid 21390] [client 145.239.69.106:52572] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aa_D4xTTkPqKydpYiII42QAAAJA"]
[Tue Mar 10 15:10:29.555139 2026] [:error] [pid 21400:tid 21403] [client 145.239.69.106:52584] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aa_D5TCFYMzi4orNuEGmCAAAAME"]
[Tue Mar 10 15:10:32.003832 2026] [:error] [pid 21400:tid 21403] [client 145.239.69.106:47868] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aa_D6DCFYMzi4orNuEGmEwAAAME"]
[Tue Mar 10 15:11:03.042149 2026] [:error] [pid 21400:tid 21426] [client 145.239.69.106:47884] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aa_EBzCFYMzi4orNuEGmaQAAANg"]
[Tue Mar 10 15:11:05.478724 2026] [:error] [pid 21400:tid 21423] [client 145.239.69.106:49920] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aa_ECTCFYMzi4orNuEGmcAAAANU"]
[Tue Mar 10 15:11:07.965958 2026] [:error] [pid 21318:tid 21392] [client 145.239.69.106:49934] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aa_ECxTTkPqKydpYiII5BwAAAJI"]
[Tue Mar 10 15:11:10.419904 2026] [:error] [pid 21400:tid 21404] [client 145.239.69.106:49950] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aa_EDjCFYMzi4orNuEGmewAAAMI"]
[Tue Mar 10 15:11:12.885329 2026] [:error] [pid 21316:tid 21329] [client 145.239.69.106:39266] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aa_EEJmAQfAZtna2rDxyTgAAAAk"]
[Tue Mar 10 15:11:15.332212 2026] [:error] [pid 21317:tid 21365] [client 145.239.69.106:39272] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aa_EE1UUqcn7vK991D14WQAAAFI"]
[Tue Mar 10 15:11:17.779022 2026] [:error] [pid 21316:tid 21331] [client 145.239.69.106:39278] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aa_EFZmAQfAZtna2rDxyVQAAAAs"]
[Tue Mar 10 15:11:20.219618 2026] [:error] [pid 21400:tid 21403] [client 145.239.69.106:39280] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aa_EGDCFYMzi4orNuEGmkgAAAME"]
[Tue Mar 10 15:11:22.660160 2026] [:error] [pid 21318:tid 21398] [client 145.239.69.106:54576] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aa_EGhTTkPqKydpYiII5FgAAAJg"]
[Tue Mar 10 15:11:25.102956 2026] [:error] [pid 21318:tid 21385] [client 145.239.69.106:54584] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aa_EHRTTkPqKydpYiII5GwAAAIs"]
[Tue Mar 10 15:11:27.364203 2026] [:error] [pid 21317:tid 21366] [client 145.239.69.106:54596] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aa_EH1UUqcn7vK991D14awAAAFM"]
[Tue Mar 10 15:11:29.670132 2026] [:error] [pid 21400:tid 21410] [client 145.239.69.106:54606] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aa_EITCFYMzi4orNuEGmkwAAAMg"]
[Tue Mar 10 15:11:32.131335 2026] [:error] [pid 21400:tid 21418] [client 145.239.69.106:34244] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aa_EJDCFYMzi4orNuEGmmAAAANA"]
[Tue Mar 10 18:32:50.482056 2026] [:error] [pid 14508:tid 14588] [client 106.222.206.98:32914] [client 106.222.206.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aa_zUgnKcSOnGhLjpL4nVgAAAIM"]
[Tue Mar 10 18:33:38.548151 2026] [:error] [pid 14627:tid 14658] [client 49.43.25.162:33614] [client 49.43.25.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aa_zgoNRj9158hP_6x_uFAAAANU"]
[Tue Mar 10 19:35:26.005283 2026] [autoindex:error] [pid 14507:tid 14559] [client 139.59.32.166:34884] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 19:56:33.623912 2026] [:error] [pid 14507:tid 14570] [client 185.38.195.233:52004] [client 185.38.195.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abAG8VJsAHIn9Awu5QvFcAAAAE4"]
[Tue Mar 10 19:59:38.104012 2026] [:error] [pid 48041:tid 48047] [client 93.188.41.69:54480] [client 93.188.41.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abAHqslHlmjf-3oznxfLlwAAAQI"]
[Tue Mar 10 20:03:22.211851 2026] [:error] [pid 14506:tid 14537] [client 93.188.41.69:57964] [client 93.188.41.69] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abAIio2Aq9vu-sfjs-VxsgAAABE"]
[Tue Mar 10 20:03:58.080714 2026] [:error] [pid 48041:tid 48069] [client 185.38.195.233:58456] [client 185.38.195.233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abAIrslHlmjf-3oznxfNPAAAARg"]
[Tue Mar 10 20:04:45.148492 2026] [:error] [pid 48041:tid 48051] [client 185.38.195.233:59124] [client 185.38.195.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abAI3clHlmjf-3oznxfNjgAAAQY"]
[Tue Mar 10 20:17:09.198725 2026] [autoindex:error] [pid 3965:tid 3978] [client 139.59.32.166:42124] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 23:44:24.366946 2026] [:error] [pid 50463:tid 50480] [client 170.64.210.41:51756] [client 170.64.210.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "abA8WHWeJpDsCJ44MSv-OAAAAQ8"]
2026/03/10 23:44:24 [error] 3843#3843: *251896 access forbidden by rule, client: 170.64.210.41, server: hotbooksbookeeping2.com, request: "GET /.git/config HTTP/1.1", host: "hotbooksbookeeping2.com"
[Wed Mar 11 04:54:20.248172 2026] [autoindex:error] [pid 6118:tid 6176] [client 161.97.107.16:49422] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 11 07:48:38.864632 2026] [:error] [pid 6222:tid 6228] [client 209.87.169.101:40656] [client 209.87.169.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abCt1ns7MIv-0SYBFu25pQAAAMQ"]
[Wed Mar 11 07:54:12.529987 2026] [:error] [pid 11751:tid 11768] [client 45.82.64.76:44972] [client 45.82.64.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abCvJHKeU7OoUEz26eXIVwAAAU8"]
[Wed Mar 11 08:38:46.453031 2026] [:error] [pid 6222:tid 6236] [client 79.137.67.30:49458] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "abC5lns7MIv-0SYBFu3HGwAAAMw"]
2026/03/11 08:38:46 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /betflik%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20casino.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:38:48.013333 2026] [:error] [pid 6119:tid 6197] [client 79.137.67.30:49486] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "abC5mG9mEGP4iomVkSZR0QAAAIY"]
2026/03/11 08:38:48 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /betflik%20co.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20co.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:38:49.723625 2026] [:error] [pid 11751:tid 11765] [client 79.137.67.30:49516] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "abC5mXKeU7OoUEz26eXZmAAAAUw"]
2026/03/11 08:38:49 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /betflik%20dc.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20dc.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:38:51 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /betflik%20original.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20original.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:38:51.418343 2026] [:error] [pid 25979:tid 26000] [client 79.137.67.30:49550] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "abC5m_z_E7FgvsuOejDWEwAAAc4"]
[Wed Mar 11 08:38:53.122963 2026] [:error] [pid 6222:tid 6236] [client 79.137.67.30:49584] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "abC5nXs7MIv-0SYBFu3HJQAAAMw"]
2026/03/11 08:38:53 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /betflik%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20slot.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:38:54 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /betflik%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflik%20thailand.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:38:54.824402 2026] [:error] [pid 6119:tid 6204] [client 79.137.67.30:49608] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "abC5nm9mEGP4iomVkSZR2gAAAI0"]
2026/03/11 08:38:56 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /betflix%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20auto.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:38:56.531401 2026] [:error] [pid 11572:tid 11587] [client 79.137.67.30:49634] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "abC5oBiTc5L_QZTsfYFCgAAAAQ0"]
2026/03/11 08:38:58 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /betflix%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20casino.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:38:58.233347 2026] [:error] [pid 11751:tid 11763] [client 79.137.67.30:49666] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "abC5onKeU7OoUEz26eXZoAAAAUo"]
[Wed Mar 11 08:38:59.947063 2026] [:error] [pid 6118:tid 6180] [client 79.137.67.30:49700] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "abC5o1XprP7_-KEgC-0bLQAAAFE"]
2026/03/11 08:38:59 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /betflix%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20slot.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:39:01 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /betflix%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20thailand.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:01.651343 2026] [:error] [pid 6222:tid 6243] [client 79.137.67.30:49736] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "abC5pXs7MIv-0SYBFu3HMQAAANM"]
2026/03/11 08:39:03 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /betflix%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/betflix%20wallet.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:03.355450 2026] [:error] [pid 11796:tid 11801] [client 79.137.67.30:49770] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "abC5pwEDXoQrlStpO9AnyQAAAYM"]
[Wed Mar 11 08:39:05.059433 2026] [:error] [pid 11751:tid 11758] [client 79.137.67.30:49798] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "abC5qXKeU7OoUEz26eXZtwAAAUU"]
2026/03/11 08:39:05 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /casino%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/casino%20wallet.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:06.757099 2026] [:error] [pid 6118:tid 6186] [client 79.137.67.30:49824] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abC5qlXprP7_-KEgC-0bMwAAAFc"]
2026/03/11 08:39:06 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /demon%20slot%20game.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/demon%20slot%20game.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:39:08 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /dg%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/dg%20casino.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:08.459086 2026] [:error] [pid 6222:tid 6237] [client 79.137.67.30:49848] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "abC5rHs7MIv-0SYBFu3HQwAAAM0"]
2026/03/11 08:39:10 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /g2g%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/g2g%20slot.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:10.164786 2026] [:error] [pid 6222:tid 6235] [client 79.137.67.30:49878] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "abC5rns7MIv-0SYBFu3HRwAAAMs"]
[Wed Mar 11 08:39:11.879256 2026] [:error] [pid 11796:tid 11818] [client 79.137.67.30:49912] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abC5rwEDXoQrlStpO9An0AAAAZQ"]
2026/03/11 08:39:11 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /galaxy%20auto%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/galaxy%20auto%20slot.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:39:13 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /galaxy%20bet%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/galaxy%20bet%20slot.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:13.579638 2026] [:error] [pid 6222:tid 6225] [client 79.137.67.30:49938] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abC5sXs7MIv-0SYBFu3HUAAAAME"]
2026/03/11 08:39:15 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /galaxy%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/galaxy%20slot.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:15.275680 2026] [:error] [pid 11751:tid 11757] [client 79.137.67.30:49958] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abC5s3KeU7OoUEz26eXZwwAAAUQ"]
2026/03/11 08:39:16 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /h25%20com.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/h25%20com.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:16.986782 2026] [:error] [pid 11751:tid 11762] [client 79.137.67.30:49988] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "abC5tHKeU7OoUEz26eXZxwAAAUk"]
2026/03/11 08:39:18 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /jili%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/jili%20slot.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:18.696400 2026] [:error] [pid 11751:tid 11761] [client 79.137.67.30:50010] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "abC5tnKeU7OoUEz26eXZzQAAAUg"]
2026/03/11 08:39:20 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /joker%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/joker%20slot.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:20.254857 2026] [:error] [pid 11572:tid 11588] [client 79.137.67.30:50026] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "abC5uBiTc5L_QZTsfYFCigAAAQ4"]
2026/03/11 08:39:21 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /joker%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/joker%20vip.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:21.955852 2026] [:error] [pid 6118:tid 6173] [client 79.137.67.30:50048] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "abC5uVXprP7_-KEgC-0bOQAAAEo"]
2026/03/11 08:39:23 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /kingkong%20joker.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/kingkong%20joker.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:23.658810 2026] [:error] [pid 6222:tid 6247] [client 79.137.67.30:50074] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abC5u3s7MIv-0SYBFu3HXAAAANc"]
[Wed Mar 11 08:39:25.362731 2026] [:error] [pid 11796:tid 11813] [client 79.137.67.30:50088] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "abC5vQEDXoQrlStpO9An4AAAAY8"]
2026/03/11 08:39:25 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /lava%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/lava%20slot.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:27.061783 2026] [:error] [pid 11751:tid 11760] [client 79.137.67.30:50106] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "abC5v3KeU7OoUEz26eXZ1wAAAUc"]
2026/03/11 08:39:27 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /mega%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/mega%20slot.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:39:28 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /metal%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/metal%20slot.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:28.758141 2026] [:error] [pid 11751:tid 11756] [client 79.137.67.30:50132] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "abC5wHKeU7OoUEz26eXZ3gAAAUM"]
2026/03/11 08:39:30 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /pg%20168.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20168.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:30.609557 2026] [:error] [pid 11751:tid 11755] [client 79.137.67.30:50148] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "abC5wnKeU7OoUEz26eXZ4QAAAUI"]
2026/03/11 08:39:32 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /pg%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20auto.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:32.303562 2026] [:error] [pid 11751:tid 11766] [client 79.137.67.30:50166] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "abC5xHKeU7OoUEz26eXZ5AAAAU0"]
[Wed Mar 11 08:39:33.997408 2026] [:error] [pid 6117:tid 6142] [client 79.137.67.30:50188] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "abC5xcU0P9gyi5rKFp6lmAAAAAY"]
2026/03/11 08:39:33 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /pg%20betflik.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20betflik.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:35.180659 2026] [:error] [pid 11796:tid 11805] [client 45.82.64.76:50202] [client 45.82.64.76] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abC5xwEDXoQrlStpO9An5wAAAYc"]
2026/03/11 08:39:35 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /pg%20game%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20game%20slot.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:35.710777 2026] [:error] [pid 11572:tid 11596] [client 79.137.67.30:50212] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abC5xxiTc5L_QZTsfYFCmQAAARY"]
[Wed Mar 11 08:39:37.410565 2026] [:error] [pid 6119:tid 6203] [client 79.137.67.30:50228] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "abC5yW9mEGP4iomVkSZR5wAAAIw"]
2026/03/11 08:39:37 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /pg%20game.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20game.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:39:39 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /pg%20joker%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20joker%20auto.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:39.106155 2026] [:error] [pid 6119:tid 6213] [client 79.137.67.30:50256] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abC5y29mEGP4iomVkSZR6QAAAJY"]
2026/03/11 08:39:40 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /pg%20joker.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20joker.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:40.798353 2026] [:error] [pid 6222:tid 6246] [client 79.137.67.30:50278] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "abC5zHs7MIv-0SYBFu3HdQAAANY"]
2026/03/11 08:39:42 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /pg%20osaka.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20osaka.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:39:42.495310 2026] [:error] [pid 6222:tid 6245] [client 79.137.67.30:50296] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "abC5zns7MIv-0SYBFu3HegAAANU"]
2026/03/11 08:40:07 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /pg%20thailand.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pg%20thailand.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:07.146787 2026] [:error] [pid 11572:tid 11580] [client 79.137.67.30:50712] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "abC55xiTc5L_QZTsfYFCtgAAAQY"]
2026/03/11 08:40:08 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /pgslot%20login.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pgslot%20login.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:08.843226 2026] [:error] [pid 11751:tid 11761] [client 79.137.67.30:50740] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "abC56HKeU7OoUEz26eXaLwAAAUg"]
2026/03/11 08:40:10 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /pgzeed%20gold.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/pgzeed%20gold.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:10.540681 2026] [:error] [pid 11751:tid 11770] [client 79.137.67.30:50772] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abC56nKeU7OoUEz26eXaNQAAAVE"]
[Wed Mar 11 08:40:12.238077 2026] [:error] [pid 11796:tid 11805] [client 79.137.67.30:50806] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "abC57AEDXoQrlStpO9AoBAAAAYc"]
2026/03/11 08:40:12 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /riches888%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/riches888%20pg.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:13.940174 2026] [:error] [pid 11796:tid 11802] [client 79.137.67.30:50830] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "abC57QEDXoQrlStpO9AoBgAAAYQ"]
2026/03/11 08:40:13 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /royal%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/royal%20slot.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:15.655618 2026] [:error] [pid 6119:tid 6196] [client 79.137.67.30:50866] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "abC5729mEGP4iomVkSZR9gAAAIU"]
2026/03/11 08:40:15 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /sa%20casino.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/sa%20casino.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:17.226583 2026] [:error] [pid 11572:tid 11589] [client 79.137.67.30:50886] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "abC58RiTc5L_QZTsfYFCwQAAAQ8"]
2026/03/11 08:40:17 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /sbobet%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/sbobet%20auto.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:40:18 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20888.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20888.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:18.930822 2026] [:error] [pid 6118:tid 6166] [client 79.137.67.30:50916] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "abC58lXprP7_-KEgC-0bTAAAAEM"]
2026/03/11 08:40:20 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20free.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20free.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:20.645743 2026] [:error] [pid 25979:tid 25987] [client 79.137.67.30:50958] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "abC59Pz_E7FgvsuOejDWMAAAAcI"]
2026/03/11 08:40:22 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20game%20666.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20game%20666.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:22.358461 2026] [:error] [pid 6222:tid 6237] [client 79.137.67.30:50978] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abC59ns7MIv-0SYBFu3HwQAAAM0"]
2026/03/11 08:40:24 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20joker.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20joker.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:24.073977 2026] [:error] [pid 11796:tid 11819] [client 79.137.67.30:51000] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "abC5-AEDXoQrlStpO9AoEgAAAZU"]
2026/03/11 08:40:25 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20online.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20online.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:25.786365 2026] [:error] [pid 6222:tid 6230] [client 79.137.67.30:51042] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "abC5-Xs7MIv-0SYBFu3HzAAAAMY"]
[Wed Mar 11 08:40:27.350077 2026] [:error] [pid 6222:tid 6239] [client 79.137.67.30:51062] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abC5-3s7MIv-0SYBFu3H0AAAAM8"]
2026/03/11 08:40:27 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20pg%20soft.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20soft.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:40:29 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20pg%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20vip.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:29.068271 2026] [:error] [pid 25979:tid 25985] [client 79.137.67.30:51098] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abC5_fz_E7FgvsuOejDWNgAAAcA"]
2026/03/11 08:40:30 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20pg%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20pg%20wallet.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:30.760723 2026] [:error] [pid 6118:tid 6176] [client 79.137.67.30:51124] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abC5_lXprP7_-KEgC-0bUwAAAE0"]
[Wed Mar 11 08:40:32.451720 2026] [:error] [pid 6222:tid 6230] [client 79.137.67.30:51162] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abC6AHs7MIv-0SYBFu3H3QAAAMY"]
2026/03/11 08:40:32 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20super%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20super%20wallet.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:34.169430 2026] [:error] [pid 6222:tid 6231] [client 79.137.67.30:51192] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abC6Ans7MIv-0SYBFu3H5gAAAMc"]
2026/03/11 08:40:34 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20true%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20true%20wallet.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:35.883895 2026] [:error] [pid 6117:tid 6144] [client 79.137.67.30:51216] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abC6A8U0P9gyi5rKFp6lpgAAAAg"]
2026/03/11 08:40:35 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20wallet%20777%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet%20777%20auto.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:40:37 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot%20wallet%20iwallet%20link%20login.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot%20wallet%20iwallet%20link%20login.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:37.587373 2026] [:error] [pid 11751:tid 11777] [client 79.137.67.30:51244] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abC6BXKeU7OoUEz26eXaVQAAAVg"]
2026/03/11 08:40:39 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /slot1234%20pg.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/slot1234%20pg.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:39.303843 2026] [:error] [pid 11796:tid 11799] [client 79.137.67.30:51272] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abC6BwEDXoQrlStpO9AoJAAAAYE"]
2026/03/11 08:40:40 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /superslot%20max%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20max%20wallet.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:40.875168 2026] [:error] [pid 6118:tid 6181] [client 79.137.67.30:51302] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abC6CFXprP7_-KEgC-0bWAAAAFI"]
[Wed Mar 11 08:40:42.588592 2026] [:error] [pid 11572:tid 11576] [client 79.137.67.30:51324] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "abC6ChiTc5L_QZTsfYFC5wAAAQI"]
2026/03/11 08:40:42 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /superslot%20vip.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot%20vip.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:44.308064 2026] [:error] [pid 11572:tid 11577] [client 79.137.67.30:51354] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abC6DBiTc5L_QZTsfYFC6wAAAQM"]
2026/03/11 08:40:44 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /superslot168%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/superslot168%20wallet.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:40:46 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /ufa%20wallet%20777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufa%20wallet%20777.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:46.018418 2026] [:error] [pid 6117:tid 6156] [client 79.137.67.30:51374] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abC6DsU0P9gyi5rKFp6lqgAAABQ"]
[Wed Mar 11 08:40:47.577591 2026] [:error] [pid 11796:tid 11821] [client 79.137.67.30:51396] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "abC6DwEDXoQrlStpO9AoJQAAAZc"]
2026/03/11 08:40:47 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /ufabet%20100.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20100.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:49.302130 2026] [:error] [pid 11751:tid 11766] [client 79.137.67.30:51420] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "abC6EXKeU7OoUEz26eXaYQAAAU0"]
2026/03/11 08:40:49 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /ufabet%201668.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%201668.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:40:51 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /ufabet%207777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%207777.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:51.002717 2026] [:error] [pid 6222:tid 6241] [client 79.137.67.30:51456] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "abC6E3s7MIv-0SYBFu3H_QAAANE"]
[Wed Mar 11 08:40:52.692132 2026] [:error] [pid 11751:tid 11762] [client 79.137.67.30:51496] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abC6FHKeU7OoUEz26eXadAAAAUk"]
2026/03/11 08:40:52 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /ufabet%20auto%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20auto%20wallet.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:40:54 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /ufabet%20auto.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20auto.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:54.378677 2026] [:error] [pid 11751:tid 11774] [client 79.137.67.30:51520] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abC6FnKeU7OoUEz26eXaegAAAVU"]
[Wed Mar 11 08:40:56.068804 2026] [:error] [pid 11796:tid 11815] [client 79.137.67.30:51562] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "abC6GAEDXoQrlStpO9AoKwAAAZE"]
2026/03/11 08:40:56 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /ufabet%20net.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20net.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:40:57 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /ufabet%20wallet%20777.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20wallet%20777.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:57.757763 2026] [:error] [pid 11751:tid 11757] [client 79.137.67.30:51590] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abC6GXKeU7OoUEz26eXakgAAAUQ"]
2026/03/11 08:40:59 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /ufabet%20wallet.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/ufabet%20wallet.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:40:59.291810 2026] [:error] [pid 6222:tid 6232] [client 79.137.67.30:51620] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abC6G3s7MIv-0SYBFu3IDAAAAMg"]
[Wed Mar 11 08:41:00.981010 2026] [:error] [pid 11796:tid 11812] [client 79.137.67.30:51656] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "abC6HAEDXoQrlStpO9AoNAAAAY4"]
2026/03/11 08:41:00 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /w69%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/w69%20slot.aspx", host: "hotbooksbookeeping2.com"
2026/03/11 08:41:02 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /wallet%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/wallet%20slot.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:41:02.663907 2026] [:error] [pid 6222:tid 6237] [client 79.137.67.30:51684] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "abC6Hns7MIv-0SYBFu3IEQAAAM0"]
2026/03/11 08:41:04 [error] 3470#3470: *612157 upstream prematurely closed connection while reading response header from upstream, client: 79.137.67.30, server: hotbooksbookeeping2.com, request: "GET /we88%20slot.aspx HTTP/1.1", upstream: "http://103.4.122.14:8181/we88%20slot.aspx", host: "hotbooksbookeeping2.com"
[Wed Mar 11 08:41:04.197387 2026] [:error] [pid 11751:tid 11767] [client 79.137.67.30:51718] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "abC6IHKeU7OoUEz26eXamAAAAU4"]
[Wed Mar 11 14:44:30.206381 2026] [:error] [pid 23482:tid 23507] [client 45.61.184.67:34026] [client 45.61.184.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abEPTsrYaTAnN_mLXymS3gAAARY"], referer: http://www.google.com.hk
[Wed Mar 11 14:45:04.603673 2026] [:error] [pid 53955:tid 54030] [client 45.61.184.67:34312] [client 45.61.184.67] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abEPcNP1Uf6qBkbxZg-97wAAAIs"]
2026/03/11 14:48:01 [error] 53947#53947: *826535 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=15 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=15", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:48:01.298631 2026] [:error] [pid 53955:tid 54021] [client 45.61.184.67:35874] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abEQIdP1Uf6qBkbxZg--kgAAAIM"]
2026/03/11 14:48:14 [error] 53948#53948: *826667 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=16 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=16", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:48:14.175076 2026] [:error] [pid 54045:tid 54060] [client 45.61.184.67:36016] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abEQLiRcKzQ1f-N8TgRIEQAAAM0"]
2026/03/11 14:48:24 [error] 53948#53948: *826763 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=17 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=17", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:48:24.249671 2026] [:error] [pid 23482:tid 23506] [client 45.61.184.67:36136] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abEQOMrYaTAnN_mLXymUEQAAARU"]
2026/03/11 14:48:33 [error] 53948#53948: *826842 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=18 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=18", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:48:33.034979 2026] [:error] [pid 54045:tid 54062] [client 45.61.184.67:36234] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abEQQSRcKzQ1f-N8TgRIIAAAAM8"]
2026/03/11 14:48:44 [error] 53943#53943: *826898 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=19 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=19", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:48:44.123931 2026] [:error] [pid 45143:tid 45149] [client 45.61.184.67:36320] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abEQTCEXSpYdWImkpzaopwAAAYQ"]
2026/03/11 14:51:03 [error] 53940#53940: *828249 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=31 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=31", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:51:03.874447 2026] [:error] [pid 23482:tid 23505] [client 45.61.184.67:37828] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abEQ18rYaTAnN_mLXymVBAAAARQ"]
[Wed Mar 11 14:51:16.328856 2026] [:error] [pid 23482:tid 23495] [client 45.61.184.67:38066] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abEQ5MrYaTAnN_mLXymVKgAAAQo"]
2026/03/11 14:51:16 [error] 53944#53944: *828433 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=32 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=32", host: "hotbooksbookeeping2.com"
2026/03/11 14:51:35 [error] 53943#53943: *828645 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=33 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=33", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:51:35.226519 2026] [:error] [pid 23482:tid 23495] [client 45.61.184.67:38342] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abEQ98rYaTAnN_mLXymVVwAAAQo"]
[Wed Mar 11 14:51:51.255048 2026] [:error] [pid 53955:tid 54026] [client 45.61.184.67:38534] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abERB9P1Uf6qBkbxZg-_rgAAAIc"]
2026/03/11 14:51:51 [error] 53938#53938: *828773 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=34 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=34", host: "hotbooksbookeeping2.com"
2026/03/11 14:54:50 [error] 53946#53946: *830429 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=46 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=46", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:54:50.342333 2026] [:error] [pid 23482:tid 23494] [client 45.61.184.67:40504] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abERusrYaTAnN_mLXymWwgAAAQk"]
2026/03/11 14:54:59 [error] 53944#53944: *830516 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=47 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=47", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:54:59.845761 2026] [:error] [pid 23482:tid 23498] [client 45.61.184.67:40606] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abERw8rYaTAnN_mLXymW1AAAAQ0"]
2026/03/11 14:55:07 [error] 53943#53943: *830599 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=48 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=48", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:55:07.237517 2026] [:error] [pid 23512:tid 23518] [client 45.61.184.67:40708] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abERy6euPtNfm7KRzWXI4AAAAUM"]
2026/03/11 14:55:14 [error] 53947#53947: *830668 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=49 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=49", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:55:14.172067 2026] [:error] [pid 53955:tid 54030] [client 45.61.184.67:40800] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abER0tP1Uf6qBkbxZg_AiwAAAIs"]
2026/03/11 14:55:25 [error] 53947#53947: *830799 upstream prematurely closed connection while reading response header from upstream, client: 45.61.184.67, server: hotbooksbookeeping2.com, request: "GET /?author=50 HTTP/1.1", upstream: "http://103.4.122.14:8181/?author=50", host: "hotbooksbookeeping2.com"
[Wed Mar 11 14:55:25.554729 2026] [:error] [pid 23482:tid 23506] [client 45.61.184.67:40956] [client 45.61.184.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abER3crYaTAnN_mLXymXAwAAARU"]
[Wed Mar 11 14:59:13.320997 2026] [:error] [pid 45143:tid 45161] [client 45.61.184.67:43338] [client 45.61.184.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abESwSEXSpYdWImkpzaqVQAAAZA"]
[Wed Mar 11 14:59:14.455128 2026] [:error] [pid 53955:tid 54034] [client 45.61.184.67:43354] [client 45.61.184.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abESwtP1Uf6qBkbxZg_BbQAAAI8"]
[Wed Mar 11 15:01:09.319619 2026] [:error] [pid 53955:tid 54034] [client 45.61.184.67:44734] [client 45.61.184.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abETNdP1Uf6qBkbxZg_B5wAAAI8"]
[Wed Mar 11 15:01:10.453042 2026] [:error] [pid 45143:tid 45168] [client 45.61.184.67:44746] [client 45.61.184.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abETNiEXSpYdWImkpzaqwwAAAZc"]
[Wed Mar 11 16:32:03.136027 2026] [:error] [pid 44995:tid 45021] [client 20.63.38.5:39408] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp11.php"] [unique_id "abEogzoOSr9ks_axo6N9HQAAAlg"]
2026/03/11 16:32:03 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /wp11.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp11.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:03 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /file61.php HTTP/1.1", upstream: "http://103.4.122.14:8181/file61.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:03.342375 2026] [:error] [pid 53955:tid 54043] [client 20.63.38.5:39414] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "abEog9P1Uf6qBkbxZg_fMwAAAJg"]
[Wed Mar 11 16:32:03.548783 2026] [:error] [pid 44995:tid 45004] [client 20.63.38.5:39418] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/16.php"] [unique_id "abEogzoOSr9ks_axo6N9HwAAAkc"]
2026/03/11 16:32:03 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /16.php HTTP/1.1", upstream: "http://103.4.122.14:8181/16.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:03.754392 2026] [:error] [pid 44995:tid 45003] [client 20.63.38.5:39420] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bb.php"] [unique_id "abEogzoOSr9ks_axo6N9IAAAAkY"]
2026/03/11 16:32:03 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /bb.php HTTP/1.1", upstream: "http://103.4.122.14:8181/bb.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:03 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /ss.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ss.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:03.960322 2026] [:error] [pid 44995:tid 45002] [client 20.63.38.5:39428] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss.php"] [unique_id "abEogzoOSr9ks_axo6N9IwAAAkU"]
[Wed Mar 11 16:32:04.167096 2026] [:error] [pid 44995:tid 45008] [client 20.63.38.5:39432] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cash.php"] [unique_id "abEohDoOSr9ks_axo6N9JAAAAks"]
2026/03/11 16:32:04 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /cash.php HTTP/1.1", upstream: "http://103.4.122.14:8181/cash.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:04 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /wp-p2r3q9c8k4.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-p2r3q9c8k4.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:04.372660 2026] [:error] [pid 44995:tid 45011] [client 20.63.38.5:39436] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "abEohDoOSr9ks_axo6N9JQAAAk4"]
[Wed Mar 11 16:32:04.578524 2026] [:error] [pid 44995:tid 45018] [client 20.63.38.5:39442] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "abEohDoOSr9ks_axo6N9JgAAAlU"]
2026/03/11 16:32:04 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /ty.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ty.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:04 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /albin.php HTTP/1.1", upstream: "http://103.4.122.14:8181/albin.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:04.784484 2026] [:error] [pid 44800:tid 44822] [client 20.63.38.5:39448] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "abEohDN8ZerbIEHTO2qPawAAAdQ"]
2026/03/11 16:32:04 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /wsd.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wsd.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:04.989704 2026] [:error] [pid 44882:tid 44907] [client 20.63.38.5:39452] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "abEohFC06UlbDFYZNg36dQAAAhc"]
[Wed Mar 11 16:32:05.196112 2026] [:error] [pid 44882:tid 44888] [client 20.63.38.5:39456] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/utky.php"] [unique_id "abEohVC06UlbDFYZNg36dgAAAgQ"]
2026/03/11 16:32:05 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /utky.php HTTP/1.1", upstream: "http://103.4.122.14:8181/utky.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:05 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /settings.php HTTP/1.1", upstream: "http://103.4.122.14:8181/settings.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:05.402014 2026] [:error] [pid 44800:tid 44808] [client 20.63.38.5:39460] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.php"] [unique_id "abEohTN8ZerbIEHTO2qPbQAAAcY"]
[Wed Mar 11 16:32:05.607962 2026] [:error] [pid 44995:tid 45016] [client 20.63.38.5:39462] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fsgdjkl.php"] [unique_id "abEohToOSr9ks_axo6N9KQAAAlM"]
2026/03/11 16:32:05 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /fsgdjkl.php HTTP/1.1", upstream: "http://103.4.122.14:8181/fsgdjkl.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:05 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /uuu.php HTTP/1.1", upstream: "http://103.4.122.14:8181/uuu.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:05.814602 2026] [:error] [pid 44995:tid 45000] [client 20.63.38.5:39464] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "abEohToOSr9ks_axo6N9KgAAAkM"]
[Wed Mar 11 16:32:06.021484 2026] [:error] [pid 44995:tid 45005] [client 20.63.38.5:39470] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x12.php"] [unique_id "abEohjoOSr9ks_axo6N9KwAAAkg"]
2026/03/11 16:32:06 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /x12.php HTTP/1.1", upstream: "http://103.4.122.14:8181/x12.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:06 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /by.php HTTP/1.1", upstream: "http://103.4.122.14:8181/by.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:06.227676 2026] [:error] [pid 54045:tid 54054] [client 20.63.38.5:39472] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/by.php"] [unique_id "abEohiRcKzQ1f-N8TgRY3gAAAMc"]
2026/03/11 16:32:06 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /sf.php HTTP/1.1", upstream: "http://103.4.122.14:8181/sf.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:06.433748 2026] [:error] [pid 54045:tid 54071] [client 20.63.38.5:39478] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "abEohiRcKzQ1f-N8TgRY4AAAANg"]
2026/03/11 16:32:06 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /asw.php HTTP/1.1", upstream: "http://103.4.122.14:8181/asw.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:06.642677 2026] [:error] [pid 44995:tid 45001] [client 20.63.38.5:39480] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asw.php"] [unique_id "abEohjoOSr9ks_axo6N9LQAAAkQ"]
2026/03/11 16:32:06 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /eee.php HTTP/1.1", upstream: "http://103.4.122.14:8181/eee.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:06.848502 2026] [:error] [pid 54045:tid 54057] [client 20.63.38.5:39488] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "abEohiRcKzQ1f-N8TgRY4gAAAMo"]
[Wed Mar 11 16:32:07.053902 2026] [:error] [pid 54045:tid 54069] [client 20.63.38.5:39494] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "abEohyRcKzQ1f-N8TgRY4wAAANY"]
2026/03/11 16:32:07 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /lp6.php HTTP/1.1", upstream: "http://103.4.122.14:8181/lp6.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:07 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /akses.php HTTP/1.1", upstream: "http://103.4.122.14:8181/akses.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:07.260524 2026] [:error] [pid 44800:tid 44817] [client 20.63.38.5:39496] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akses.php"] [unique_id "abEohzN8ZerbIEHTO2qPbgAAAc8"]
[Wed Mar 11 16:32:07.466253 2026] [:error] [pid 44800:tid 44804] [client 20.63.38.5:39502] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "abEohzN8ZerbIEHTO2qPcAAAAcI"]
2026/03/11 16:32:07 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /no1.php HTTP/1.1", upstream: "http://103.4.122.14:8181/no1.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:07 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /teee.php HTTP/1.1", upstream: "http://103.4.122.14:8181/teee.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:07.672345 2026] [:error] [pid 54045:tid 54058] [client 20.63.38.5:39504] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/teee.php"] [unique_id "abEohyRcKzQ1f-N8TgRY5AAAAMs"]
2026/03/11 16:32:07 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /elabel.php HTTP/1.1", upstream: "http://103.4.122.14:8181/elabel.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:07.878132 2026] [:error] [pid 44995:tid 45004] [client 20.63.38.5:39508] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/elabel.php"] [unique_id "abEohzoOSr9ks_axo6N9LwAAAkc"]
2026/03/11 16:32:08 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /bafFz.php HTTP/1.1", upstream: "http://103.4.122.14:8181/bafFz.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:08.083905 2026] [:error] [pid 23482:tid 23508] [client 20.63.38.5:39510] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bafFz.php"] [unique_id "abEoiMrYaTAnN_mLXynD0gAAARc"]
2026/03/11 16:32:08 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /rere.php HTTP/1.1", upstream: "http://103.4.122.14:8181/rere.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:08.289940 2026] [:error] [pid 44995:tid 45003] [client 20.63.38.5:39512] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rere.php"] [unique_id "abEoiDoOSr9ks_axo6N9MAAAAkY"]
[Wed Mar 11 16:32:08.495981 2026] [:error] [pid 44995:tid 45002] [client 20.63.38.5:39516] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jocundly.php"] [unique_id "abEoiDoOSr9ks_axo6N9MQAAAkU"]
2026/03/11 16:32:08 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /jocundly.php HTTP/1.1", upstream: "http://103.4.122.14:8181/jocundly.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:08.701793 2026] [:error] [pid 45143:tid 45164] [client 20.63.38.5:39520] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wo.php"] [unique_id "abEoiCEXSpYdWImkpza-pwAAAZM"]
2026/03/11 16:32:08 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /wo.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wo.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:08 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /h2h.php HTTP/1.1", upstream: "http://103.4.122.14:8181/h2h.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:08.907725 2026] [:error] [pid 53955:tid 54020] [client 20.63.38.5:39526] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2h.php"] [unique_id "abEoiNP1Uf6qBkbxZg_fNQAAAII"]
2026/03/11 16:32:09 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /rithin.php HTTP/1.1", upstream: "http://103.4.122.14:8181/rithin.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:09.114000 2026] [:error] [pid 54045:tid 54047] [client 20.63.38.5:39530] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "abEoiSRcKzQ1f-N8TgRY5gAAAMA"]
2026/03/11 16:32:09 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /kk.php HTTP/1.1", upstream: "http://103.4.122.14:8181/kk.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:09.319724 2026] [:error] [pid 23482:tid 23502] [client 20.63.38.5:39534] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kk.php"] [unique_id "abEoicrYaTAnN_mLXynD0wAAARE"]
2026/03/11 16:32:09 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /path.php HTTP/1.1", upstream: "http://103.4.122.14:8181/path.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:09.525566 2026] [:error] [pid 53955:tid 54029] [client 20.63.38.5:39536] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "abEoidP1Uf6qBkbxZg_fNgAAAIo"]
2026/03/11 16:32:09 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /cs.php HTTP/1.1", upstream: "http://103.4.122.14:8181/cs.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:09.732410 2026] [:error] [pid 45143:tid 45160] [client 20.63.38.5:39540] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cs.php"] [unique_id "abEoiSEXSpYdWImkpza-qgAAAY8"]
2026/03/11 16:32:09 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /w2025.php HTTP/1.1", upstream: "http://103.4.122.14:8181/w2025.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:09.938342 2026] [:error] [pid 54045:tid 54063] [client 20.63.38.5:39548] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "abEoiSRcKzQ1f-N8TgRY6AAAANA"]
2026/03/11 16:32:10 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /foxr.php HTTP/1.1", upstream: "http://103.4.122.14:8181/foxr.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:10.144516 2026] [:error] [pid 54045:tid 54066] [client 20.63.38.5:39550] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/foxr.php"] [unique_id "abEoiiRcKzQ1f-N8TgRY6QAAANM"]
2026/03/11 16:32:10 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /swallowable.php HTTP/1.1", upstream: "http://103.4.122.14:8181/swallowable.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:10.350807 2026] [:error] [pid 54045:tid 54051] [client 20.63.38.5:39556] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "abEoiiRcKzQ1f-N8TgRY7AAAAMQ"]
2026/03/11 16:32:10 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /claw.php HTTP/1.1", upstream: "http://103.4.122.14:8181/claw.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:10.556521 2026] [:error] [pid 54045:tid 54060] [client 20.63.38.5:39558] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/claw.php"] [unique_id "abEoiiRcKzQ1f-N8TgRY7QAAAM0"]
[Wed Mar 11 16:32:10.763123 2026] [:error] [pid 54045:tid 54068] [client 20.63.38.5:39560] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "abEoiiRcKzQ1f-N8TgRY7gAAANU"]
2026/03/11 16:32:10 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /fvvff.php HTTP/1.1", upstream: "http://103.4.122.14:8181/fvvff.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:10.969041 2026] [:error] [pid 54045:tid 54054] [client 20.63.38.5:39570] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "abEoiiRcKzQ1f-N8TgRY7wAAAMc"]
2026/03/11 16:32:10 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /a2.php HTTP/1.1", upstream: "http://103.4.122.14:8181/a2.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:11 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /sty.php HTTP/1.1", upstream: "http://103.4.122.14:8181/sty.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:11.175043 2026] [:error] [pid 54045:tid 54059] [client 20.63.38.5:39574] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "abEoiyRcKzQ1f-N8TgRY8AAAAMw"]
[Wed Mar 11 16:32:11.381381 2026] [:error] [pid 54045:tid 54062] [client 20.63.38.5:39576] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "abEoiyRcKzQ1f-N8TgRY8QAAAM8"]
2026/03/11 16:32:11 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /xxxx.php HTTP/1.1", upstream: "http://103.4.122.14:8181/xxxx.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:11 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //h.php HTTP/1.1", upstream: "http://103.4.122.14:8181//h.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:11.588337 2026] [:error] [pid 23482:tid 23496] [client 20.63.38.5:39580] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h.php"] [unique_id "abEoi8rYaTAnN_mLXynD1QAAAQs"]
[Wed Mar 11 16:32:11.794032 2026] [:error] [pid 45143:tid 45156] [client 20.63.38.5:39588] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "abEoiyEXSpYdWImkpza-rQAAAYs"]
2026/03/11 16:32:11 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /g.php HTTP/1.1", upstream: "http://103.4.122.14:8181/g.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:12 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /pp.php HTTP/1.1", upstream: "http://103.4.122.14:8181/pp.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:12.000878 2026] [:error] [pid 54045:tid 54058] [client 20.63.38.5:39598] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "abEoiyRcKzQ1f-N8TgRY9QAAAMs"]
[Wed Mar 11 16:32:12.207213 2026] [:error] [pid 54045:tid 54047] [client 20.63.38.5:39606] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sys.php"] [unique_id "abEojCRcKzQ1f-N8TgRY9wAAAMA"]
2026/03/11 16:32:12 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //sys.php HTTP/1.1", upstream: "http://103.4.122.14:8181//sys.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:12 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /txets.php HTTP/1.1", upstream: "http://103.4.122.14:8181/txets.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:12.413230 2026] [:error] [pid 44995:tid 45010] [client 20.63.38.5:39610] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "abEojDoOSr9ks_axo6N9OwAAAk0"]
2026/03/11 16:32:12 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /wp9.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp9.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:12.619390 2026] [:error] [pid 45143:tid 45163] [client 20.63.38.5:39614] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "abEojCEXSpYdWImkpza-rgAAAZI"]
2026/03/11 16:32:12 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /path.php HTTP/1.1", upstream: "http://103.4.122.14:8181/path.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:12.825398 2026] [:error] [pid 44995:tid 45004] [client 20.63.38.5:39622] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "abEojDoOSr9ks_axo6N9PgAAAkc"]
2026/03/11 16:32:13 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /wdf.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wdf.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:13.031630 2026] [:error] [pid 44995:tid 45002] [client 20.63.38.5:39626] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "abEojToOSr9ks_axo6N9QAAAAkU"]
2026/03/11 16:32:13 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //2.php HTTP/1.1", upstream: "http://103.4.122.14:8181//2.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:13.237442 2026] [:error] [pid 23482:tid 23509] [client 20.63.38.5:39632] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "abEojcrYaTAnN_mLXynD1gAAARg"]
[Wed Mar 11 16:32:13.443336 2026] [:error] [pid 45143:tid 45167] [client 20.63.38.5:39638] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "abEojSEXSpYdWImkpza-rwAAAZY"]
2026/03/11 16:32:13 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /mga.php HTTP/1.1", upstream: "http://103.4.122.14:8181/mga.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:13 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /maxro.php HTTP/1.1", upstream: "http://103.4.122.14:8181/maxro.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:13.649032 2026] [:error] [pid 54045:tid 54049] [client 20.63.38.5:39640] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "abEojSRcKzQ1f-N8TgRY-QAAAMI"]
2026/03/11 16:32:13 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /pass2.php HTTP/1.1", upstream: "http://103.4.122.14:8181/pass2.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:13.855046 2026] [:error] [pid 54045:tid 54051] [client 20.63.38.5:39644] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass2.php"] [unique_id "abEojSRcKzQ1f-N8TgRY-wAAAMQ"]
2026/03/11 16:32:14 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /wsvvs.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wsvvs.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:14.060963 2026] [:error] [pid 44995:tid 45018] [client 20.63.38.5:39646] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "abEojjoOSr9ks_axo6N9QwAAAlU"]
[Wed Mar 11 16:32:14.266816 2026] [:error] [pid 44995:tid 45020] [client 20.63.38.5:39648] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "abEojjoOSr9ks_axo6N9RAAAAlc"]
2026/03/11 16:32:14 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //3.php HTTP/1.1", upstream: "http://103.4.122.14:8181//3.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:14 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //edit.php HTTP/1.1", upstream: "http://103.4.122.14:8181//edit.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:14.473355 2026] [:error] [pid 54045:tid 54056] [client 20.63.38.5:39652] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "abEojiRcKzQ1f-N8TgRY_QAAAMk"]
2026/03/11 16:32:14 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /ioxi-o.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ioxi-o.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:14.679357 2026] [:error] [pid 44995:tid 45016] [client 20.63.38.5:39658] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "abEojjoOSr9ks_axo6N9RgAAAlM"]
2026/03/11 16:32:14 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /wp-content/admin.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-content/admin.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:14.885661 2026] [:error] [pid 45143:tid 45159] [client 20.63.38.5:39660] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "abEojiEXSpYdWImkpza-sAAAAY4"]
2026/03/11 16:32:15 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /66.php HTTP/1.1", upstream: "http://103.4.122.14:8181/66.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:15.092136 2026] [:error] [pid 45143:tid 45158] [client 20.63.38.5:39666] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "abEojyEXSpYdWImkpza-sQAAAY0"]
[Wed Mar 11 16:32:15.298916 2026] [:error] [pid 54045:tid 54054] [client 20.63.38.5:39668] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "abEojyRcKzQ1f-N8TgRY_wAAAMc"]
2026/03/11 16:32:15 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1", upstream: "http://103.4.122.14:8181//wp-includes/js/tinymce/themes/inlite/", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:15.520517 2026] [:error] [pid 44995:tid 45010] [client 20.63.38.5:39670] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "abEojzoOSr9ks_axo6N9SQAAAk0"]
2026/03/11 16:32:15 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /gifclass.php HTTP/1.1", upstream: "http://103.4.122.14:8181/gifclass.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:15.726802 2026] [:error] [pid 23482:tid 23493] [client 20.63.38.5:39678] [client 20.63.38.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "abEoj8rYaTAnN_mLXynD2QAAAQg"]
2026/03/11 16:32:15 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1", upstream: "http://103.4.122.14:8181//wp-admin/images/wp-conflg.php?p=", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:15.932917 2026] [:error] [pid 54045:tid 54048] [client 20.63.38.5:39686] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "abEojyRcKzQ1f-N8TgRZAwAAAME"]
2026/03/11 16:32:16 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /wp-content/plugins/index.php?p= HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-content/plugins/index.php?p=", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:16.138420 2026] [:error] [pid 23482:tid 23506] [client 20.63.38.5:39690] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "abEokMrYaTAnN_mLXynD2gAAARU"]
2026/03/11 16:32:16 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //assets/css/index.php HTTP/1.1", upstream: "http://103.4.122.14:8181//assets/css/index.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:16.344809 2026] [:error] [pid 45143:tid 45154] [client 20.63.38.5:39692] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "abEokCEXSpYdWImkpza-swAAAYk"]
2026/03/11 16:32:16 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /sc.php HTTP/1.1", upstream: "http://103.4.122.14:8181/sc.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:16.558042 2026] [:error] [pid 45143:tid 45147] [client 20.63.38.5:39694] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "abEokCEXSpYdWImkpza-tAAAAYI"]
2026/03/11 16:32:16 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "http://103.4.122.14:8181/xmlrpc.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:16.763595 2026] [:error] [pid 44995:tid 45001] [client 20.63.38.5:39698] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abEokDoOSr9ks_axo6N9SgAAAkQ"]
[Wed Mar 11 16:32:16.969741 2026] [:error] [pid 54045:tid 54069] [client 20.63.38.5:39704] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "abEokCRcKzQ1f-N8TgRZBAAAANY"]
2026/03/11 16:32:16 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /ol.php HTTP/1.1", upstream: "http://103.4.122.14:8181/ol.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:17 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //f6.php HTTP/1.1", upstream: "http://103.4.122.14:8181//f6.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:17.175390 2026] [:error] [pid 54045:tid 54063] [client 20.63.38.5:39710] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "abEokSRcKzQ1f-N8TgRZBwAAANA"]
2026/03/11 16:32:17 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //inputs.php HTTP/1.1", upstream: "http://103.4.122.14:8181//inputs.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:17.380909 2026] [:error] [pid 54045:tid 54070] [client 20.63.38.5:39712] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "abEokSRcKzQ1f-N8TgRZCAAAANc"]
2026/03/11 16:32:17 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /style.php HTTP/1.1", upstream: "http://103.4.122.14:8181/style.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:17.602116 2026] [:error] [pid 45143:tid 45164] [client 20.63.38.5:39714] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "abEokSEXSpYdWImkpza-tgAAAZM"]
2026/03/11 16:32:17 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /bgymj.php HTTP/1.1", upstream: "http://103.4.122.14:8181/bgymj.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:17.808360 2026] [:error] [pid 54045:tid 54060] [client 20.63.38.5:39720] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "abEokSRcKzQ1f-N8TgRZCwAAAM0"]
[Wed Mar 11 16:32:18.014452 2026] [:error] [pid 54045:tid 54068] [client 20.63.38.5:39724] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "abEokiRcKzQ1f-N8TgRZDQAAANU"]
2026/03/11 16:32:18 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //aa.php HTTP/1.1", upstream: "http://103.4.122.14:8181//aa.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:18 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //1.php HTTP/1.1", upstream: "http://103.4.122.14:8181//1.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:18.220360 2026] [:error] [pid 45143:tid 45152] [client 20.63.38.5:39728] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "abEokiEXSpYdWImkpza-twAAAYc"]
2026/03/11 16:32:18 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //sc.php HTTP/1.1", upstream: "http://103.4.122.14:8181//sc.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:18.426415 2026] [:error] [pid 45143:tid 45151] [client 20.63.38.5:39732] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "abEokiEXSpYdWImkpza-uQAAAYY"]
[Wed Mar 11 16:32:18.633667 2026] [:error] [pid 45143:tid 45165] [client 20.63.38.5:39736] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "abEokiEXSpYdWImkpza-ugAAAZQ"]
2026/03/11 16:32:18 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET //av.php HTTP/1.1", upstream: "http://103.4.122.14:8181//av.php", host: "hotbooksbookeeping2.com"
2026/03/11 16:32:18 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /file.php? HTTP/1.1", upstream: "http://103.4.122.14:8181/file.php?", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:18.839696 2026] [:error] [pid 23482:tid 23486] [client 20.63.38.5:39746] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "abEoksrYaTAnN_mLXynD3QAAAQE"]
2026/03/11 16:32:19 [error] 53947#53947: *897936 upstream prematurely closed connection while reading response header from upstream, client: 20.63.38.5, server: hotbooksbookeeping2.com, request: "GET /file59.php HTTP/1.1", upstream: "http://103.4.122.14:8181/file59.php", host: "hotbooksbookeeping2.com"
[Wed Mar 11 16:32:19.045224 2026] [:error] [pid 45143:tid 45155] [client 20.63.38.5:39752] [client 20.63.38.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "abEokyEXSpYdWImkpza-vAAAAYo"]
[Wed Mar 11 22:16:59.642585 2026] [:error] [pid 44995:tid 45003] [client 148.222.231.107:41218] [client 148.222.231.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abF5WzoOSr9ks_axo6P6mAAAAkY"]
[Wed Mar 11 22:25:58.328123 2026] [:error] [pid 45143:tid 45150] [client 148.222.231.107:49088] [client 148.222.231.107] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abF7diEXSpYdWImkpzYHVwAAAYU"]
[Wed Mar 11 22:27:22.589811 2026] [:error] [pid 44995:tid 45010] [client 148.222.231.107:50282] [client 148.222.231.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abF7yjoOSr9ks_axo6P_5gAAAk0"]
[Wed Mar 11 23:59:28.047690 2026] [:error] [pid 45143:tid 45155] [client 209.141.54.90:46338] [client 209.141.54.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abGRYCEXSpYdWImkpzYaDgAAAYo"]
[Wed Mar 11 23:59:30.549327 2026] [:error] [pid 23482:tid 23501] [client 209.141.54.90:46384] [client 209.141.54.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abGRYsrYaTAnN_mLXykARgAAARA"]
[Thu Mar 12 01:14:10.259898 2026] [:error] [pid 55247:tid 55280] [client 209.141.54.205:59962] [client 209.141.54.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abGi4uxWBoHgpiqMqkiurAAAAAs"]
[Thu Mar 12 01:14:16.864079 2026] [:error] [pid 55266:tid 55311] [client 209.141.54.205:60068] [client 209.141.54.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abGi6JsmvC-0sL-4DxHTsAAAAIw"]
[Thu Mar 12 01:49:24.780466 2026] [:error] [pid 55247:tid 55285] [client 143.105.37.64:36024] [client 143.105.37.64] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abGrJOxWBoHgpiqMqkizHAAAABA"]
[Thu Mar 12 01:51:22.786458 2026] [:error] [pid 55266:tid 55327] [client 143.105.37.64:37370] [client 143.105.37.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abGrmpsmvC-0sL-4DxHqhAAAAJQ"]
[Thu Mar 12 03:00:46.382908 2026] [:error] [pid 55587:tid 55618] [client 209.141.54.205:58984] [client 209.141.54.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abG73ovUDIu2al9Vqa8xagAAARM"]
[Thu Mar 12 04:02:13.799671 2026] [:error] [pid 63148:tid 63189] [client 172.98.33.19:42794] [client 172.98.33.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abHKRYWsahF1swCrZG7HggAAAEA"]
[Thu Mar 12 04:59:12.399136 2026] [:error] [pid 63256:tid 63268] [client 45.132.115.252:43244] [client 45.132.115.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abHXoAhgyalB3r3y_ThHaQAAAMQ"]
[Thu Mar 12 06:22:06.918076 2026] [:error] [pid 8814:tid 8831] [client 162.206.79.97:55786] [client 162.206.79.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abHrDiMSZIp7jqLHukMQrQAAAQM"]
[Thu Mar 12 13:09:42.497654 2026] [:error] [pid 51540:tid 51552] [client 82.48.212.3:64362] [client 82.48.212.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.48.212.3, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abJKlmOFFjotMIN2UD2gqgAAAMo"]
[Thu Mar 12 13:10:51.762484 2026] [:error] [pid 8249:tid 8269] [client 113.193.237.211:51115] [client 113.193.237.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.193.237.211, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abJK2yK5dL3-8Jdf0M1X8wAAARI"]
[Thu Mar 12 13:17:38.003897 2026] [:error] [pid 11985:tid 11991] [client 223.217.235.159:58330] [client 223.217.235.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.217.235.159, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abJMcncAcNujsOssVDfxJgAAAYA"]
[Thu Mar 12 13:19:58.031879 2026] [:error] [pid 22063:tid 22074] [client 113.193.237.211:49716] [client 113.193.237.211] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abJM_q0RUhS-MJyHWLTB7gAAAgk"]
[Thu Mar 12 13:32:29.613178 2026] [:error] [pid 51456:tid 51488] [client 82.48.212.3:63998] [client 82.48.212.3] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abJP7RXu8LzVixNGr0tKzwAAAEE"]
[Thu Mar 12 18:04:26.811009 2026] [:error] [pid 51455:tid 51483] [client 96.44.136.159:47602] [client 96.44.136.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abKPqpE0YyNxdg6PL_AkxgAAABc"], referer: https://www.google.com
[Thu Mar 12 18:24:40.492096 2026] [:error] [pid 22063:tid 22074] [client 103.65.236.149:50356] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "abKUaK0RUhS-MJyHWLQbzwAAAgk"]
[Thu Mar 12 20:40:57.469091 2026] [:error] [pid 20531:tid 20627] [client 104.28.156.112:15041] [client 104.28.156.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.156.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abK0Wfvw-RvNQd9b3a-uxgAAA8s"]
[Thu Mar 12 21:33:27.546497 2026] [:error] [pid 11986:tid 12025] [client 185.198.240.166:50183] [client 185.198.240.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.166, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abLApzKqY2w-DVCrxTAmAwAAAcc"]
[Thu Mar 12 23:10:54.535982 2026] [:error] [pid 20467:tid 20488] [client 106.54.62.156:59990] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abLXfnJ3UvosyIqy8ay3hwAAApI"]
[Thu Mar 12 23:29:57.891303 2026] [:error] [pid 11953:tid 11956] [client 147.135.213.172:54094] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "abLb9Zudzqsnq3bvtDaGbAAAAUE"]
[Thu Mar 12 23:30:00.312046 2026] [:error] [pid 8249:tid 8254] [client 147.135.213.172:59048] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "abLb-CK5dL3-8Jdf0M2hLwAAAQM"]
[Thu Mar 12 23:30:02.754080 2026] [:error] [pid 51456:tid 51495] [client 147.135.213.172:37660] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "abLb-hXu8LzVixNGr0uRTQAAAEg"]
[Thu Mar 12 23:30:05.195528 2026] [:error] [pid 51456:tid 51502] [client 147.135.213.172:37666] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "abLb_RXu8LzVixNGr0uRWAAAAE8"]
[Thu Mar 12 23:30:07.642530 2026] [:error] [pid 51457:tid 51516] [client 147.135.213.172:37678] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "abLb_yjknw2FvT4H3DbejAAAAII"]
[Thu Mar 12 23:30:10.116494 2026] [:error] [pid 8249:tid 8268] [client 147.135.213.172:37682] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "abLcAiK5dL3-8Jdf0M2hPwAAARE"]
[Thu Mar 12 23:30:12.558918 2026] [:error] [pid 20529:tid 20589] [client 147.135.213.172:59468] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "abLcBG4BhuYHZriajQ-LZAAAA1I"]
[Thu Mar 12 23:30:14.996975 2026] [:error] [pid 51456:tid 51499] [client 147.135.213.172:59474] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "abLcBhXu8LzVixNGr0uRdwAAAEw"]
[Thu Mar 12 23:30:17.440294 2026] [:error] [pid 51456:tid 51495] [client 147.135.213.172:59484] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "abLcCRXu8LzVixNGr0uRggAAAEg"]
[Thu Mar 12 23:30:19.902223 2026] [:error] [pid 51456:tid 51505] [client 147.135.213.172:59492] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "abLcCxXu8LzVixNGr0uRhQAAAFI"]
[Thu Mar 12 23:30:22.356705 2026] [:error] [pid 11986:tid 12034] [client 147.135.213.172:37372] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "abLcDjKqY2w-DVCrxTBGQAAAAdA"]
[Thu Mar 12 23:30:24.803256 2026] [:error] [pid 11953:tid 11974] [client 147.135.213.172:37380] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "abLcEJudzqsnq3bvtDaGiQAAAVM"]
[Thu Mar 12 23:30:27.244467 2026] [:error] [pid 11986:tid 12031] [client 147.135.213.172:37388] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abLcEzKqY2w-DVCrxTBGSAAAAc0"]
[Thu Mar 12 23:30:29.521280 2026] [:error] [pid 11986:tid 12032] [client 147.135.213.172:37400] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "abLcFTKqY2w-DVCrxTBGTQAAAc4"]
[Thu Mar 12 23:30:31.969752 2026] [:error] [pid 11953:tid 11970] [client 147.135.213.172:32966] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "abLcF5udzqsnq3bvtDaGlwAAAU8"]
[Thu Mar 12 23:30:34.437080 2026] [:error] [pid 20529:tid 20584] [client 147.135.213.172:32968] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abLcGm4BhuYHZriajQ-LaAAAA08"]
[Thu Mar 12 23:30:36.889752 2026] [:error] [pid 11953:tid 11979] [client 147.135.213.172:32980] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abLcHJudzqsnq3bvtDaGsAAAAVg"]
[Thu Mar 12 23:30:39.341721 2026] [:error] [pid 20531:tid 20625] [client 147.135.213.172:32984] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abLcH_vw-RvNQd9b3a-6qQAAA8k"]
[Thu Mar 12 23:30:41.782075 2026] [:error] [pid 8249:tid 8264] [client 147.135.213.172:46948] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "abLcISK5dL3-8Jdf0M2hUQAAAQ0"]
[Thu Mar 12 23:30:44.234450 2026] [:error] [pid 20530:tid 20593] [client 147.135.213.172:46956] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "abLcJAkNGxMzPO-s9qca7AAAA4k"]
[Thu Mar 12 23:30:46.672683 2026] [:error] [pid 8249:tid 8256] [client 147.135.213.172:46964] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "abLcJiK5dL3-8Jdf0M2hXAAAAQU"]
[Thu Mar 12 23:30:49.130192 2026] [:error] [pid 11953:tid 11965] [client 147.135.213.172:46976] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "abLcKZudzqsnq3bvtDaG1AAAAUo"]
[Thu Mar 12 23:30:51.577142 2026] [:error] [pid 11953:tid 11962] [client 147.135.213.172:46986] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abLcK5udzqsnq3bvtDaG3AAAAUc"]
[Thu Mar 12 23:30:54.019548 2026] [:error] [pid 20529:tid 20582] [client 147.135.213.172:50510] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "abLcLm4BhuYHZriajQ-LbAAAA04"]
[Thu Mar 12 23:31:25.535505 2026] [:error] [pid 51457:tid 51519] [client 147.135.213.172:50524] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abLcTSjknw2FvT4H3Dbe6AAAAIU"]
[Thu Mar 12 23:31:28.080776 2026] [:error] [pid 20531:tid 20635] [client 147.135.213.172:47136] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abLcUPvw-RvNQd9b3a-6uAAAA9M"]
[Thu Mar 12 23:31:30.532338 2026] [:error] [pid 8249:tid 8258] [client 147.135.213.172:47140] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abLcUiK5dL3-8Jdf0M2hmgAAAQc"]
[Thu Mar 12 23:31:33.089205 2026] [:error] [pid 8249:tid 8266] [client 147.135.213.172:48826] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abLcVSK5dL3-8Jdf0M2hnwAAAQ8"]
[Thu Mar 12 23:31:35.588920 2026] [:error] [pid 8249:tid 8258] [client 147.135.213.172:48832] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abLcVyK5dL3-8Jdf0M2hpgAAAQc"]
[Thu Mar 12 23:31:37.996460 2026] [:error] [pid 51457:tid 51517] [client 147.135.213.172:48844] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abLcWSjknw2FvT4H3Dbe-AAAAIM"]
[Thu Mar 12 23:31:40.298641 2026] [:error] [pid 20467:tid 20477] [client 147.135.213.172:48858] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abLcXHJ3UvosyIqy8ay6FgAAAoc"]
[Thu Mar 12 23:31:42.740003 2026] [:error] [pid 11986:tid 12029] [client 147.135.213.172:33482] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "abLcXjKqY2w-DVCrxTBGnwAAAcs"]
[Thu Mar 12 23:31:45.165599 2026] [:error] [pid 11953:tid 11973] [client 147.135.213.172:33490] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "abLcYZudzqsnq3bvtDaHWwAAAVI"]
[Thu Mar 12 23:31:47.610298 2026] [:error] [pid 20530:tid 20588] [client 147.135.213.172:33500] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "abLcYwkNGxMzPO-s9qcbEAAAA4c"]
[Thu Mar 12 23:31:49.923871 2026] [:error] [pid 11953:tid 11965] [client 147.135.213.172:33516] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "abLcZZudzqsnq3bvtDaHYgAAAUo"]
[Thu Mar 12 23:31:52.386213 2026] [:error] [pid 8249:tid 8257] [client 147.135.213.172:37864] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "abLcaCK5dL3-8Jdf0M2hwgAAAQY"]
[Thu Mar 12 23:31:54.824670 2026] [:error] [pid 11986:tid 12042] [client 147.135.213.172:37878] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abLcajKqY2w-DVCrxTBGrgAAAdg"]
[Thu Mar 12 23:31:57.131421 2026] [:error] [pid 11986:tid 12022] [client 147.135.213.172:37892] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "abLcbTKqY2w-DVCrxTBGvAAAAcQ"]
[Thu Mar 12 23:31:59.429953 2026] [:error] [pid 20530:tid 20593] [client 147.135.213.172:37896] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "abLcbwkNGxMzPO-s9qcbFQAAA4k"]
[Thu Mar 12 23:32:01.724106 2026] [:error] [pid 8249:tid 8270] [client 147.135.213.172:38420] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "abLccSK5dL3-8Jdf0M2hygAAARM"]
[Thu Mar 12 23:32:04.155028 2026] [:error] [pid 20528:tid 20544] [client 147.135.213.172:38436] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "abLcdKnDNsf46-tKxqkgPAAAAwo"]
[Thu Mar 12 23:32:06.629919 2026] [:error] [pid 11953:tid 11971] [client 147.135.213.172:38450] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "abLcdpudzqsnq3bvtDaHhQAAAVA"]
[Thu Mar 12 23:32:09.071979 2026] [:error] [pid 51456:tid 51501] [client 147.135.213.172:38458] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "abLceRXu8LzVixNGr0uRywAAAE4"]
[Thu Mar 12 23:32:11.502915 2026] [:error] [pid 11953:tid 11968] [client 147.135.213.172:38470] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abLce5udzqsnq3bvtDaHngAAAU0"]
[Thu Mar 12 23:32:13.966466 2026] [:error] [pid 11953:tid 11955] [client 147.135.213.172:44312] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "abLcfZudzqsnq3bvtDaHsgAAAUA"]
[Thu Mar 12 23:32:16.395712 2026] [:error] [pid 11953:tid 11971] [client 147.135.213.172:44322] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "abLcgJudzqsnq3bvtDaHwAAAAVA"]
[Thu Mar 12 23:32:18.845962 2026] [:error] [pid 11986:tid 12021] [client 147.135.213.172:44328] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abLcgjKqY2w-DVCrxTBGyAAAAcM"]
[Thu Mar 12 23:32:21.291043 2026] [:error] [pid 20467:tid 20490] [client 147.135.213.172:44332] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abLchXJ3UvosyIqy8ay6MgAAApQ"]
[Thu Mar 12 23:32:52.640114 2026] [:error] [pid 8249:tid 8253] [client 147.135.213.172:47684] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "abLcpCK5dL3-8Jdf0M2h8wAAAQI"]
[Thu Mar 12 23:32:55.054368 2026] [:error] [pid 20529:tid 20566] [client 147.135.213.172:58084] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "abLcp24BhuYHZriajQ-LjgAAA0Q"]
[Thu Mar 12 23:32:57.484150 2026] [:error] [pid 11953:tid 11977] [client 147.135.213.172:58090] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abLcqZudzqsnq3bvtDaH8gAAAVY"]
[Thu Mar 12 23:32:59.930165 2026] [:error] [pid 8249:tid 8270] [client 147.135.213.172:58102] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abLcqyK5dL3-8Jdf0M2h9AAAARM"]
[Thu Mar 12 23:33:02.353080 2026] [:error] [pid 20531:tid 20633] [client 147.135.213.172:44542] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "abLcrvvw-RvNQd9b3a-63QAAA9E"]
[Thu Mar 12 23:33:04.789449 2026] [:error] [pid 51456:tid 51504] [client 147.135.213.172:44548] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abLcsBXu8LzVixNGr0uSCQAAAFE"]
[Thu Mar 12 23:33:07.231020 2026] [:error] [pid 8249:tid 8272] [client 147.135.213.172:44558] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abLcsyK5dL3-8Jdf0M2iCQAAARU"]
[Thu Mar 12 23:33:09.677835 2026] [:error] [pid 8249:tid 8269] [client 147.135.213.172:44560] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "abLctSK5dL3-8Jdf0M2iEAAAARI"]
[Thu Mar 12 23:33:12.111675 2026] [:error] [pid 8249:tid 8270] [client 147.135.213.172:45010] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "abLcuCK5dL3-8Jdf0M2iFAAAARM"]
[Thu Mar 12 23:33:14.530403 2026] [:error] [pid 20530:tid 20583] [client 147.135.213.172:45024] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "abLcugkNGxMzPO-s9qcbPAAAA4U"]
[Thu Mar 12 23:33:16.992372 2026] [:error] [pid 51457:tid 51528] [client 147.135.213.172:45026] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abLcvCjknw2FvT4H3DbfMwAAAI4"]
[Thu Mar 12 23:33:19.440901 2026] [:error] [pid 20528:tid 20537] [client 147.135.213.172:45036] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "abLcv6nDNsf46-tKxqkgWwAAAwM"]
[Thu Mar 12 23:33:21.907284 2026] [:error] [pid 20529:tid 20580] [client 147.135.213.172:50804] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abLcwW4BhuYHZriajQ-LkwAAA00"]
[Fri Mar 13 02:31:13.922390 2026] [:error] [pid 47893:tid 47977] [client 193.36.225.9:57197] [client 193.36.225.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.9, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abMGcQYSdu6aqxO_Yucv1gAAAII"]
[Fri Mar 13 04:36:07.126994 2026] [:error] [pid 61927:tid 61950] [client 162.206.79.97:57631] [client 162.206.79.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.206.79.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abMjt7LkK584eBa2J7WyEgAAAAQ"]
[Fri Mar 13 09:50:32.867313 2026] [:error] [pid 9111:tid 9140] [client 173.239.214.57:54019] [client 173.239.214.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abNtaE-M156SLpD2BrsTTAAAAY4"]
[Fri Mar 13 09:54:10.376677 2026] [:error] [pid 9309:tid 9327] [client 173.239.214.33:24835] [client 173.239.214.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.33, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abNuQqo1KEMMghNWAN8-3QAAAgQ"]
[Fri Mar 13 12:22:33.183609 2026] [:error] [pid 62036:tid 62044] [client 43.155.140.157:45572] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abORCbce6g9kILuh_R5btAAAAME"]
[Fri Mar 13 12:57:49.474908 2026] [:error] [pid 9309:tid 9345] [client 3.145.19.203:63458] [client 3.145.19.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abOZTao1KEMMghNWAN-bDwAAAhY"]
[Fri Mar 13 12:57:51.528105 2026] [:error] [pid 9111:tid 9131] [client 3.145.19.203:60736] [client 3.145.19.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "abOZT0-M156SLpD2BrshVAAAAYU"]
[Fri Mar 13 12:57:51.921947 2026] [:error] [pid 9241:tid 9269] [client 3.145.19.203:51126] [client 3.145.19.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/media/system/js/core.js"] [unique_id "abOZTw48xagB6AsXkJ7m5gAAAdA"]
[Fri Mar 13 15:47:28.886624 2026] [:error] [pid 55077:tid 55080] [client 162.62.132.25:48122] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abPBEN9Ul5ym4M-PlQKfwwAAAUE"]
[Fri Mar 13 16:52:32.102013 2026] [:error] [pid 9309:tid 9333] [client 115.147.11.125:19847] [client 115.147.11.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.147.11.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abPQUKo1KEMMghNWAN8EqAAAAgo"]
[Fri Mar 13 17:03:41.285357 2026] [:error] [pid 9241:tid 9270] [client 115.147.11.125:60908] [client 115.147.11.125] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abPS7Q48xagB6AsXkJ4DdAAAAdE"]
[Fri Mar 13 18:48:02.828878 2026] [:error] [pid 9311:tid 9351] [client 43.153.10.83:45988] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abPrYlTiCkU4QLmYwPkgLwAAAkA"]
[Fri Mar 13 21:53:51.736552 2026] [:error] [pid 60398:tid 60421] [client 43.156.204.134:47292] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abQW70CJdGSTt6QlH2BPSwAAApI"]
[Fri Mar 13 23:57:05.054004 2026] [:error] [pid 60398:tid 60412] [client 4.204.197.4:24457] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "abQz0UCJdGSTt6QlH2BjHAAAAok"]
[Fri Mar 13 23:57:05.544367 2026] [:error] [pid 60398:tid 60410] [client 4.204.197.4:24542] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "abQz0UCJdGSTt6QlH2BjHgAAAoc"]
[Fri Mar 13 23:57:06.019480 2026] [:error] [pid 60496:tid 60506] [client 4.204.197.4:24575] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "abQz0gb67oGiJ3jaL8wtHQAAA0I"]
[Fri Mar 13 23:57:06.523910 2026] [:error] [pid 61929:tid 62027] [client 4.204.197.4:24533] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "abQz0jGGsow2jgUjLtzEJAAAAJc"]
[Fri Mar 13 23:57:07.031631 2026] [:error] [pid 60496:tid 60512] [client 4.204.197.4:24566] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "abQz0wb67oGiJ3jaL8wtHgAAA0g"]
[Fri Mar 13 23:57:07.480155 2026] [:error] [pid 61928:tid 61982] [client 4.204.197.4:24575] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "abQz0wod66AHekJJZiqz5AAAAEU"]
[Fri Mar 13 23:57:07.944010 2026] [:error] [pid 61928:tid 61978] [client 4.204.197.4:24460] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "abQz0wod66AHekJJZiqz5QAAAEE"]
[Fri Mar 13 23:57:08.446960 2026] [:error] [pid 60497:tid 60554] [client 4.204.197.4:24536] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "abQz1BjNYgapWlkb4ljaCAAAA5Y"]
[Fri Mar 13 23:57:08.963827 2026] [:error] [pid 60497:tid 60553] [client 4.204.197.4:24519] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "abQz1BjNYgapWlkb4ljaCQAAA5U"]
[Fri Mar 13 23:57:09.529775 2026] [:error] [pid 9111:tid 9135] [client 4.204.197.4:24561] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "abQz1U-M156SLpD2BrtgUQAAAYk"]
[Fri Mar 13 23:57:09.955826 2026] [:error] [pid 60497:tid 60537] [client 4.204.197.4:24521] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "abQz1RjNYgapWlkb4ljaCgAAA4Y"]
[Fri Mar 13 23:57:10.385617 2026] [:error] [pid 61928:tid 61996] [client 4.204.197.4:24537] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "abQz1god66AHekJJZiqz6AAAAFM"]
[Fri Mar 13 23:57:10.813956 2026] [:error] [pid 61928:tid 62000] [client 4.204.197.4:24459] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin.php"] [unique_id "abQz1god66AHekJJZiqz6gAAAFc"]
[Fri Mar 13 23:57:11.270814 2026] [:error] [pid 61928:tid 61990] [client 4.204.197.4:24520] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin.php"] [unique_id "abQz1wod66AHekJJZiqz7AAAAE0"]
[Fri Mar 13 23:57:11.769343 2026] [:error] [pid 60497:tid 60539] [client 4.204.197.4:24560] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin.php"] [unique_id "abQz1xjNYgapWlkb4ljaDAAAA4g"]
[Fri Mar 13 23:57:12.263536 2026] [:error] [pid 60497:tid 60547] [client 4.204.197.4:24573] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin.php"] [unique_id "abQz2BjNYgapWlkb4ljaDgAAA5A"]
[Fri Mar 13 23:57:12.713296 2026] [:error] [pid 60497:tid 60531] [client 4.204.197.4:24529] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "abQz2BjNYgapWlkb4ljaEQAAA4A"]
[Fri Mar 13 23:57:13.140838 2026] [:error] [pid 61929:tid 62006] [client 4.204.197.4:24564] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "abQz2TGGsow2jgUjLtzEJgAAAII"]
[Fri Mar 13 23:57:13.637455 2026] [:error] [pid 60497:tid 60535] [client 4.204.197.4:24463] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "abQz2RjNYgapWlkb4ljaFAAAA4Q"]
[Fri Mar 13 23:57:14.144048 2026] [:error] [pid 60398:tid 60411] [client 4.204.197.4:24517] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "abQz2kCJdGSTt6QlH2BjIwAAAog"]
[Fri Mar 13 23:57:14.800459 2026] [:error] [pid 60496:tid 60509] [client 4.204.197.4:24456] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "abQz2gb67oGiJ3jaL8wtHwAAA0U"]
[Fri Mar 13 23:57:15.392961 2026] [:error] [pid 60497:tid 60553] [client 4.204.197.4:24570] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "abQz2xjNYgapWlkb4ljaGQAAA5U"]
[Fri Mar 13 23:57:15.916202 2026] [:error] [pid 60497:tid 60547] [client 4.204.197.4:24574] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "abQz2xjNYgapWlkb4ljaGgAAA5A"]
[Fri Mar 13 23:57:16.401929 2026] [:error] [pid 60497:tid 60531] [client 4.204.197.4:24462] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "abQz3BjNYgapWlkb4ljaHwAAA4A"]
[Fri Mar 13 23:57:16.907206 2026] [:error] [pid 60497:tid 60535] [client 4.204.197.4:24476] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQz3BjNYgapWlkb4ljaIQAAA4Q"]
[Fri Mar 13 23:57:17.493614 2026] [:error] [pid 60497:tid 60554] [client 4.204.197.4:24417] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQz3RjNYgapWlkb4ljaJQAAA5Y"]
[Fri Mar 13 23:57:18.053887 2026] [:error] [pid 9309:tid 9342] [client 4.204.197.4:24451] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQz3qo1KEMMghNWAN9eDgAAAhM"]
[Fri Mar 13 23:57:18.568711 2026] [:error] [pid 60436:tid 60481] [client 4.204.197.4:24548] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQz3oI3PEddCArY1Aa4KwAAAww"]
[Fri Mar 13 23:57:19.356056 2026] [:error] [pid 60497:tid 60548] [client 4.204.197.4:24461] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "abQz3xjNYgapWlkb4ljaMAAAA5E"]
[Fri Mar 13 23:57:20.378096 2026] [:error] [pid 60436:tid 60489] [client 4.204.197.4:24558] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "abQz4II3PEddCArY1Aa4LgAAAxQ"]
[Fri Mar 13 23:57:21.079486 2026] [:error] [pid 9309:tid 9347] [client 4.204.197.4:24472] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "abQz4ao1KEMMghNWAN9eEQAAAhg"]
[Fri Mar 13 23:57:21.552015 2026] [:error] [pid 60398:tid 60414] [client 4.204.197.4:24569] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "abQz4UCJdGSTt6QlH2BjJQAAAos"]
[Fri Mar 13 23:57:22.085320 2026] [:error] [pid 60398:tid 60415] [client 4.204.197.4:24562] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "abQz4kCJdGSTt6QlH2BjJgAAAow"]
[Fri Mar 13 23:57:22.569722 2026] [:error] [pid 9309:tid 9331] [client 4.204.197.4:24568] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "abQz4qo1KEMMghNWAN9eGQAAAgg"]
[Fri Mar 13 23:57:23.026575 2026] [:error] [pid 61929:tid 62010] [client 4.204.197.4:24571] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "abQz4zGGsow2jgUjLtzELQAAAIY"]
[Fri Mar 13 23:57:23.462713 2026] [:error] [pid 60398:tid 60412] [client 4.204.197.4:24506] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/up.php"] [unique_id "abQz40CJdGSTt6QlH2BjKAAAAok"]
[Fri Mar 13 23:57:23.924729 2026] [:error] [pid 9309:tid 9346] [client 4.204.197.4:24499] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "abQz46o1KEMMghNWAN9eHAAAAhc"]
[Fri Mar 13 23:57:24.615994 2026] [:error] [pid 60398:tid 60407] [client 4.204.197.4:24468] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "abQz5ECJdGSTt6QlH2BjLQAAAoQ"]
[Fri Mar 13 23:57:25.049120 2026] [:error] [pid 60398:tid 60426] [client 4.204.197.4:24490] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "abQz5UCJdGSTt6QlH2BjMAAAApc"]
[Fri Mar 13 23:57:25.500666 2026] [:error] [pid 60436:tid 60487] [client 4.204.197.4:24567] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "abQz5YI3PEddCArY1Aa4MwAAAxI"]
[Sat Mar 14 00:00:57.012168 2026] [:error] [pid 55077:tid 55101] [client 4.204.233.55:41166] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chati.php"] [unique_id "abQ0ud9Ul5ym4M-PlQIFdgAAAVY"]
[Sat Mar 14 00:00:57.839124 2026] [:error] [pid 60496:tid 60510] [client 4.204.233.55:41192] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chati.php"] [unique_id "abQ0uQb67oGiJ3jaL8wuOQAAA0Y"]
[Sat Mar 14 00:00:58.671909 2026] [:error] [pid 60497:tid 60549] [client 4.204.233.55:41156] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chati.php"] [unique_id "abQ0uhjNYgapWlkb4ljazQAAA5I"]
[Sat Mar 14 00:00:59.501337 2026] [:error] [pid 60398:tid 60418] [client 4.204.233.55:41199] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chati.php"] [unique_id "abQ0u0CJdGSTt6QlH2BjtwAAAo8"]
[Sat Mar 14 01:13:51.466874 2026] [:error] [pid 47878:tid 47948] [client 20.151.4.179:17711] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/hp2.php"] [unique_id "abRFz38jymmmpr1jcBeodAAAAEk"]
[Sat Mar 14 01:13:52.292349 2026] [:error] [pid 47905:tid 47994] [client 20.151.4.179:17727] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/hp2.php"] [unique_id "abRF0BaYZayP4o4wpJccswAAAUE"]
[Sat Mar 14 01:13:53.117462 2026] [:error] [pid 48070:tid 48082] [client 20.151.4.179:17863] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/hp2.php"] [unique_id "abRF0UIvrhMS5BVHxNkUdwAAAAo"]
[Sat Mar 14 01:13:53.966799 2026] [:error] [pid 47905:tid 48013] [client 20.151.4.179:17677] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/hp2.php"] [unique_id "abRF0RaYZayP4o4wpJcctgAAAVQ"]
[Sat Mar 14 02:10:40.833139 2026] [:error] [pid 47891:tid 47966] [client 117.62.235.53:38314] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abRTIPchNnuMqi7I_WELogAAAIA"]
[Sat Mar 14 02:50:39.897488 2026] [:error] [pid 47878:tid 47939] [client 62.151.179.222:56702] [client 62.151.179.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.151.179.222, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abRcf38jymmmpr1jcBfCVwAAAEA"]
[Sat Mar 14 02:50:41.349384 2026] [:error] [pid 47878:tid 47946] [client 62.151.179.222:56702] [client 62.151.179.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.151.179.222, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abRcgX8jymmmpr1jcBfCWQAAAEc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 14 06:02:02.555860 2026] [:error] [pid 35801:tid 35813] [client 204.112.34.104:65169] [client 204.112.34.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 204.112.34.104, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abSJWm8tVFelXGsqbU-xTwAAAQk"]
[Sat Mar 14 06:25:50.997684 2026] [:error] [pid 4018:tid 4035] [client 151.31.154.25:52582] [client 151.31.154.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.31.154.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abSO7gEk1fxdMMkDDaLdUAAAAMo"]
[Sat Mar 14 07:16:11.795538 2026] [:error] [pid 4018:tid 4027] [client 217.160.229.15:42100] [client 217.160.229.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.229.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abSauwEk1fxdMMkDDaLl7AAAAMI"]
[Sat Mar 14 07:16:13.067098 2026] [:error] [pid 4018:tid 4038] [client 217.160.229.15:42100] [client 217.160.229.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.160.229.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abSavQEk1fxdMMkDDaLl7QAAAM0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 14 08:02:30.184882 2026] [:error] [pid 3913:tid 3957] [client 43.166.255.102:47770] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abSllh9qvQd4GQHUp68qFwAAAEA"]
[Sat Mar 14 09:13:25.755853 2026] [:error] [pid 57226:tid 57234] [client 79.137.67.30:50458] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "abS2NWxFlXQvNewjeI9yqQAAAUQ"]
[Sat Mar 14 09:13:28.189488 2026] [:error] [pid 3912:tid 3941] [client 79.137.67.30:39974] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "abS2OMXFZBK-jpdCvTHi9wAAAA4"]
[Sat Mar 14 09:13:30.489691 2026] [:error] [pid 57226:tid 57250] [client 79.137.67.30:39980] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "abS2OmxFlXQvNewjeI9yuQAAAVQ"]
[Sat Mar 14 09:13:32.840490 2026] [:error] [pid 57226:tid 57254] [client 79.137.67.30:39994] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "abS2PGxFlXQvNewjeI9yxgAAAVg"]
[Sat Mar 14 09:13:35.316404 2026] [:error] [pid 57226:tid 57232] [client 79.137.67.30:57978] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "abS2P2xFlXQvNewjeI9yzgAAAUI"]
[Sat Mar 14 09:13:37.625497 2026] [:error] [pid 35801:tid 35826] [client 79.137.67.30:57982] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "abS2QW8tVFelXGsqbU_dDgAAARY"]
[Sat Mar 14 09:13:39.940604 2026] [:error] [pid 3912:tid 3943] [client 79.137.67.30:57998] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "abS2Q8XFZBK-jpdCvTHi_AAAABA"]
[Sat Mar 14 09:13:42.407151 2026] [:error] [pid 57226:tid 57237] [client 79.137.67.30:58010] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "abS2RmxFlXQvNewjeI9y2gAAAUc"]
[Sat Mar 14 09:13:44.718825 2026] [:error] [pid 3913:tid 3980] [client 79.137.67.30:41218] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "abS2SB9qvQd4GQHUp69APgAAAFc"]
[Sat Mar 14 09:13:47.031189 2026] [:error] [pid 35801:tid 35808] [client 79.137.67.30:41224] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "abS2S28tVFelXGsqbU_dOQAAAQQ"]
[Sat Mar 14 09:13:49.330075 2026] [:error] [pid 3913:tid 3977] [client 79.137.67.30:41240] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "abS2TR9qvQd4GQHUp69AUQAAAFQ"]
[Sat Mar 14 09:13:51.819995 2026] [:error] [pid 3913:tid 3969] [client 79.137.67.30:41256] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "abS2Tx9qvQd4GQHUp69AVgAAAEw"]
[Sat Mar 14 09:13:54.127309 2026] [:error] [pid 3914:tid 3996] [client 79.137.67.30:41268] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abS2UvH_HeUqa_sn9-AqQgAAAIw"]
[Sat Mar 14 09:13:56.436312 2026] [:error] [pid 57226:tid 57241] [client 79.137.67.30:37792] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "abS2VGxFlXQvNewjeI9zEQAAAUs"]
[Sat Mar 14 09:13:58.905656 2026] [:error] [pid 57226:tid 57249] [client 79.137.67.30:37798] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "abS2VmxFlXQvNewjeI9zHgAAAVM"]
[Sat Mar 14 09:14:01.368747 2026] [:error] [pid 57226:tid 57247] [client 79.137.67.30:37800] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abS2WWxFlXQvNewjeI9zJgAAAVE"]
[Sat Mar 14 09:14:03.839550 2026] [:error] [pid 57226:tid 57253] [client 79.137.67.30:37810] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abS2W2xFlXQvNewjeI9zLwAAAVc"]
[Sat Mar 14 09:14:06.154471 2026] [:error] [pid 57226:tid 57233] [client 79.137.67.30:36032] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abS2XmxFlXQvNewjeI9zNQAAAUM"]
[Sat Mar 14 09:14:08.459450 2026] [:error] [pid 35801:tid 35826] [client 79.137.67.30:36046] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "abS2YG8tVFelXGsqbU_dYgAAARY"]
[Sat Mar 14 09:14:10.752627 2026] [:error] [pid 35801:tid 35807] [client 79.137.67.30:36054] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "abS2Ym8tVFelXGsqbU_dYwAAAQM"]
[Sat Mar 14 09:14:13.053854 2026] [:error] [pid 3914:tid 3991] [client 79.137.67.30:36062] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "abS2ZfH_HeUqa_sn9-AqTgAAAIc"]
[Sat Mar 14 09:14:15.371664 2026] [:error] [pid 3913:tid 3973] [client 79.137.67.30:55724] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "abS2Zx9qvQd4GQHUp69AfwAAAFA"]
[Sat Mar 14 09:14:17.837666 2026] [:error] [pid 57226:tid 57254] [client 79.137.67.30:55726] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abS2aWxFlXQvNewjeI9zbwAAAVg"]
[Sat Mar 14 09:14:20.284457 2026] [:error] [pid 4018:tid 4045] [client 79.137.67.30:55738] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "abS2bAEk1fxdMMkDDaL89QAAANQ"]
[Sat Mar 14 09:14:22.757721 2026] [:error] [pid 3913:tid 3964] [client 79.137.67.30:55744] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "abS2bh9qvQd4GQHUp69AkgAAAEc"]
[Sat Mar 14 09:14:54.011554 2026] [:error] [pid 57226:tid 57231] [client 79.137.67.30:36118] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abS2jmxFlXQvNewjeI9z8AAAAUE"]
[Sat Mar 14 09:14:56.439750 2026] [:error] [pid 3913:tid 3961] [client 79.137.67.30:39586] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abS2kB9qvQd4GQHUp69A4AAAAEQ"]
[Sat Mar 14 09:14:58.896476 2026] [:error] [pid 35801:tid 35814] [client 79.137.67.30:39588] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abS2km8tVFelXGsqbU_dkwAAAQo"]
[Sat Mar 14 09:15:01.355758 2026] [:error] [pid 35801:tid 35818] [client 79.137.67.30:39590] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abS2lW8tVFelXGsqbU_dmQAAAQ4"]
[Sat Mar 14 09:15:03.825718 2026] [:error] [pid 35801:tid 35828] [client 79.137.67.30:39604] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abS2l28tVFelXGsqbU_dngAAARg"]
[Sat Mar 14 09:15:06.271307 2026] [:error] [pid 4018:tid 4028] [client 79.137.67.30:59216] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abS2mgEk1fxdMMkDDaL9IgAAAMM"]
[Sat Mar 14 09:15:08.742415 2026] [:error] [pid 35801:tid 35827] [client 79.137.67.30:59218] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "abS2nG8tVFelXGsqbU_dqgAAARc"]
[Sat Mar 14 09:15:11.187904 2026] [:error] [pid 35801:tid 35807] [client 79.137.67.30:59232] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "abS2n28tVFelXGsqbU_drQAAAQM"]
[Sat Mar 14 09:15:13.644610 2026] [:error] [pid 57226:tid 57250] [client 79.137.67.30:59240] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "abS2oWxFlXQvNewjeI90DwAAAVQ"]
[Sat Mar 14 09:15:15.944672 2026] [:error] [pid 3913:tid 3958] [client 79.137.67.30:42884] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "abS2ox9qvQd4GQHUp69A7wAAAEE"]
[Sat Mar 14 09:15:18.411066 2026] [:error] [pid 57226:tid 57252] [client 79.137.67.30:42898] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "abS2pmxFlXQvNewjeI90KQAAAVY"]
[Sat Mar 14 09:15:20.864204 2026] [:error] [pid 3913:tid 3960] [client 79.137.67.30:42900] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abS2qB9qvQd4GQHUp69A_AAAAEM"]
[Sat Mar 14 09:15:23.172761 2026] [:error] [pid 57226:tid 57254] [client 79.137.67.30:42902] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "abS2q2xFlXQvNewjeI90XAAAAVg"]
[Sat Mar 14 09:15:25.663647 2026] [:error] [pid 4018:tid 4049] [client 79.137.67.30:53912] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "abS2rQEk1fxdMMkDDaL9KgAAANg"]
[Sat Mar 14 09:15:27.969803 2026] [:error] [pid 3912:tid 3934] [client 79.137.67.30:53924] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "abS2r8XFZBK-jpdCvTHjJgAAAAc"]
[Sat Mar 14 09:15:30.294515 2026] [:error] [pid 3912:tid 3928] [client 79.137.67.30:53934] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "abS2ssXFZBK-jpdCvTHjKQAAAAE"]
[Sat Mar 14 09:15:32.774817 2026] [:error] [pid 3914:tid 4008] [client 79.137.67.30:53938] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "abS2tPH_HeUqa_sn9-AqlwAAAJg"]
[Sat Mar 14 09:15:35.216782 2026] [:error] [pid 3913:tid 3969] [client 79.137.67.30:47878] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "abS2tx9qvQd4GQHUp69BEgAAAEw"]
[Sat Mar 14 09:15:37.684267 2026] [:error] [pid 3914:tid 3992] [client 79.137.67.30:47892] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abS2ufH_HeUqa_sn9-AqpAAAAIg"]
[Sat Mar 14 09:15:39.996162 2026] [:error] [pid 3913:tid 3975] [client 79.137.67.30:47896] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "abS2ux9qvQd4GQHUp69BIAAAAFI"]
[Sat Mar 14 09:15:42.281085 2026] [:error] [pid 35801:tid 35817] [client 79.137.67.30:47908] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "abS2vm8tVFelXGsqbU_d0QAAAQ0"]
[Sat Mar 14 09:15:44.605752 2026] [:error] [pid 35801:tid 35809] [client 79.137.67.30:47916] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abS2wG8tVFelXGsqbU_d1AAAAQU"]
[Sat Mar 14 09:15:47.064281 2026] [:error] [pid 3914:tid 4006] [client 79.137.67.30:39124] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abS2w_H_HeUqa_sn9-AqrQAAAJY"]
[Sat Mar 14 09:15:49.529210 2026] [:error] [pid 35801:tid 35810] [client 79.137.67.30:39134] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abS2xW8tVFelXGsqbU_d2AAAAQY"]
[Sat Mar 14 09:16:20.790224 2026] [:error] [pid 57226:tid 57246] [client 79.137.67.30:39146] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "abS25GxFlXQvNewjeI901gAAAVA"]
[Sat Mar 14 09:16:23.198511 2026] [:error] [pid 3912:tid 3938] [client 79.137.67.30:36052] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abS258XFZBK-jpdCvTHjSgAAAAs"]
[Sat Mar 14 09:16:25.660176 2026] [:error] [pid 3913:tid 3963] [client 79.137.67.30:45832] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abS26R9qvQd4GQHUp69BVwAAAEY"]
[Sat Mar 14 09:16:27.939025 2026] [:error] [pid 57226:tid 57246] [client 79.137.67.30:45844] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "abS262xFlXQvNewjeI904QAAAVA"]
[Sat Mar 14 09:16:30.395304 2026] [:error] [pid 35801:tid 35815] [client 79.137.67.30:45860] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abS27m8tVFelXGsqbU_eEgAAAQs"]
[Sat Mar 14 09:16:32.850828 2026] [:error] [pid 35801:tid 35827] [client 79.137.67.30:45868] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abS28G8tVFelXGsqbU_eFQAAARc"]
[Sat Mar 14 09:16:35.153552 2026] [:error] [pid 3914:tid 3987] [client 79.137.67.30:44206] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "abS28_H_HeUqa_sn9-AqzQAAAIM"]
[Sat Mar 14 09:16:37.459070 2026] [:error] [pid 57226:tid 57253] [client 79.137.67.30:44220] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "abS29WxFlXQvNewjeI907QAAAVc"]
[Sat Mar 14 09:16:39.763574 2026] [:error] [pid 3913:tid 3974] [client 79.137.67.30:44224] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "abS29x9qvQd4GQHUp69BYQAAAFE"]
[Sat Mar 14 09:16:42.200976 2026] [:error] [pid 35801:tid 35807] [client 79.137.67.30:44236] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abS2-m8tVFelXGsqbU_eHAAAAQM"]
[Sat Mar 14 09:16:44.634961 2026] [:error] [pid 57226:tid 57235] [client 79.137.67.30:44248] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "abS2_GxFlXQvNewjeI909QAAAUU"]
[Sat Mar 14 09:16:47.090988 2026] [:error] [pid 35801:tid 35805] [client 79.137.67.30:48378] [client 79.137.67.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abS2_28tVFelXGsqbU_eHgAAAQE"]
[Sat Mar 14 11:05:54.297296 2026] [:error] [pid 3912:tid 3947] [client 192.159.99.205:53551] [client 192.159.99.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/txets.php"] [unique_id "abTQksXFZBK-jpdCvTH9UAAAABQ"]
[Sat Mar 14 11:05:54.715289 2026] [:error] [pid 3912:tid 3929] [client 192.159.99.205:53676] [client 192.159.99.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "abTQksXFZBK-jpdCvTH9UQAAAAI"]
[Sat Mar 14 11:05:55.132596 2026] [:error] [pid 35801:tid 35828] [client 192.159.99.205:53816] [client 192.159.99.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "abTQk28tVFelXGsqbU_ySgAAARg"]
[Sat Mar 14 11:05:57.108785 2026] [:error] [pid 53961:tid 53971] [client 192.159.99.205:54392] [client 192.159.99.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/txets.php"] [unique_id "abTQldczYH1OqY7y2cOMGwAAAcc"]
[Sat Mar 14 11:42:58.823631 2026] [:error] [pid 13360:tid 13385] [client 51.89.43.80:50488] [client 51.89.43.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "abTZQvoSWtMry3M5X6vWzwAAApU"]
[Sat Mar 14 11:43:54.469968 2026] [:error] [pid 13261:tid 13275] [client 162.211.80.57:38860] [client 162.211.80.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.211.80.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abTZevDFVxjWSW61p5kD4wAAAMk"]
[Sat Mar 14 11:43:57.231914 2026] [:error] [pid 13262:tid 13304] [client 162.211.80.57:39998] [client 162.211.80.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.211.80.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abTZfTAdvM7ft5BXQ2d1BQAAAYs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 14 16:49:20.614415 2026] [:error] [pid 61384:tid 61443] [client 173.239.224.112:42509] [client 173.239.224.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.112, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abUhEPzibL2IYJprDHKdvQAAAcA"]
[Sat Mar 14 16:49:26.862878 2026] [:error] [pid 61382:tid 61400] [client 173.239.224.104:23555] [client 173.239.224.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abUhFv5UUtpNLvwsJ7jnowAAAA4"]
[Sat Mar 14 20:11:40.836387 2026] [:error] [pid 30154:tid 30162] [client 152.53.170.80:42626] [client 152.53.170.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.170.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abVQfF6OP9woRgp3v0F0hAAAAMI"]
[Sat Mar 14 20:11:42.080526 2026] [:error] [pid 30154:tid 30179] [client 152.53.170.80:42626] [client 152.53.170.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.170.80, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abVQfl6OP9woRgp3v0F0hgAAANM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 14 23:05:55.867962 2026] [:error] [pid 61382:tid 61409] [client 197.94.20.251:14465] [client 197.94.20.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.94.20.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abV5U_5UUtpNLvwsJ7gOJQAAABc"]
[Sat Mar 14 23:11:51.440923 2026] [:error] [pid 49293:tid 49302] [client 197.94.20.251:2832] [client 197.94.20.251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abV6tzAUTjJFxypCRwKUXQAAAsc"]
[Sun Mar 15 01:41:14.527055 2026] [:error] [pid 20020:tid 20039] [client 202.184.74.125:45290] [client 202.184.74.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.184.74.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abWdukPjaRwagw2fU7gRzgAAAFE"]
[Sun Mar 15 01:41:15.883109 2026] [:error] [pid 20020:tid 20033] [client 202.184.74.125:45290] [client 202.184.74.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.184.74.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abWdu0PjaRwagw2fU7gR0gAAAEs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 15 02:06:14.979739 2026] [:error] [pid 20020:tid 20040] [client 43.167.236.228:36504] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abWjlkPjaRwagw2fU7ga-wAAAFI"]
[Sun Mar 15 02:38:30.617349 2026] [:error] [pid 19671:tid 19978] [client 147.135.213.32:50334] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "abWrJlu8gYYbnWVq3mUsPAAAAQ0"]
[Sun Mar 15 02:38:32.931005 2026] [:error] [pid 59255:tid 59262] [client 147.135.213.32:39446] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "abWrKK3w_Oi6c1avgTsNZQAAAIE"]
[Sun Mar 15 02:38:35.439291 2026] [:error] [pid 59255:tid 59264] [client 147.135.213.32:39452] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "abWrK63w_Oi6c1avgTsNbwAAAIM"]
[Sun Mar 15 02:38:37.941007 2026] [:error] [pid 19658:tid 19952] [client 147.135.213.32:47610] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "abWrLVIS7ZSIcsV9BQqYGQAAAA8"]
[Sun Mar 15 02:38:40.449586 2026] [:error] [pid 20020:tid 20046] [client 147.135.213.32:47618] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "abWrMEPjaRwagw2fU7gozwAAAFg"]
[Sun Mar 15 02:38:42.933678 2026] [:error] [pid 19671:tid 19971] [client 147.135.213.32:47624] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "abWrMlu8gYYbnWVq3mUsRgAAAQY"]
[Sun Mar 15 02:38:45.257723 2026] [:error] [pid 20020:tid 20034] [client 147.135.213.32:47640] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "abWrNUPjaRwagw2fU7go1QAAAEw"]
[Sun Mar 15 02:38:47.728706 2026] [:error] [pid 59255:tid 59277] [client 147.135.213.32:50918] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "abWrN63w_Oi6c1avgTsNlwAAAJA"]
[Sun Mar 15 02:38:50.261368 2026] [:error] [pid 59255:tid 59266] [client 147.135.213.32:50920] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "abWrOq3w_Oi6c1avgTsNowAAAIU"]
[Sun Mar 15 02:38:52.732477 2026] [:error] [pid 59255:tid 59266] [client 147.135.213.32:50934] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "abWrPK3w_Oi6c1avgTsNqwAAAIU"]
[Sun Mar 15 02:38:55.256827 2026] [:error] [pid 59255:tid 59269] [client 147.135.213.32:50950] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "abWrP63w_Oi6c1avgTsNrwAAAIg"]
[Sun Mar 15 02:38:57.745130 2026] [:error] [pid 59255:tid 59262] [client 147.135.213.32:54338] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "abWrQa3w_Oi6c1avgTsNsgAAAIE"]
[Sun Mar 15 02:39:00.069466 2026] [:error] [pid 20020:tid 20024] [client 147.135.213.32:54342] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abWrREPjaRwagw2fU7go6wAAAEI"]
[Sun Mar 15 02:39:02.379121 2026] [:error] [pid 20020:tid 20042] [client 147.135.213.32:54356] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "abWrRkPjaRwagw2fU7go8gAAAFQ"]
[Sun Mar 15 02:39:04.863916 2026] [:error] [pid 59255:tid 59285] [client 147.135.213.32:54358] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "abWrSK3w_Oi6c1avgTsNvgAAAJg"]
[Sun Mar 15 02:39:07.210331 2026] [:error] [pid 59255:tid 59275] [client 147.135.213.32:54372] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abWrS63w_Oi6c1avgTsNxQAAAI4"]
[Sun Mar 15 02:39:09.690969 2026] [:error] [pid 20020:tid 20040] [client 147.135.213.32:56022] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abWrTUPjaRwagw2fU7gpAgAAAFI"]
[Sun Mar 15 02:39:12.179796 2026] [:error] [pid 19680:tid 19992] [client 147.135.213.32:56036] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abWrUEnhGahR8LEhCX-6EwAAAcA"]
[Sun Mar 15 02:39:14.513402 2026] [:error] [pid 59255:tid 59269] [client 147.135.213.32:56052] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "abWrUq3w_Oi6c1avgTsN2QAAAIg"]
[Sun Mar 15 02:39:17.001863 2026] [:error] [pid 19671:tid 19967] [client 147.135.213.32:56068] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "abWrVVu8gYYbnWVq3mUsYgAAAQI"]
[Sun Mar 15 02:39:19.308725 2026] [:error] [pid 59255:tid 59263] [client 147.135.213.32:60744] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "abWrV63w_Oi6c1avgTsN5gAAAII"]
[Sun Mar 15 02:39:21.801388 2026] [:error] [pid 19680:tid 20001] [client 147.135.213.32:60754] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "abWrWUnhGahR8LEhCX-6HwAAAck"]
[Sun Mar 15 02:39:24.109108 2026] [:error] [pid 19671:tid 19966] [client 147.135.213.32:60770] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abWrXFu8gYYbnWVq3mUscQAAAQE"]
[Sun Mar 15 02:39:26.432717 2026] [:error] [pid 59255:tid 59277] [client 147.135.213.32:60784] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "abWrXq3w_Oi6c1avgTsN9wAAAJA"]
[Sun Mar 15 02:39:57.764914 2026] [:error] [pid 59255:tid 59265] [client 147.135.213.32:51280] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abWrfa3w_Oi6c1avgTsOvQAAAIQ"]
[Sun Mar 15 02:40:00.202014 2026] [:error] [pid 19680:tid 20013] [client 147.135.213.32:35592] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abWrgEnhGahR8LEhCX-6agAAAdU"]
[Sun Mar 15 02:40:02.513826 2026] [:error] [pid 20020:tid 20046] [client 147.135.213.32:35608] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abWrgkPjaRwagw2fU7gpRQAAAFg"]
[Sun Mar 15 02:40:05.008577 2026] [:error] [pid 20020:tid 20024] [client 147.135.213.32:35620] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abWrhUPjaRwagw2fU7gpUAAAAEI"]
[Sun Mar 15 02:40:07.328889 2026] [:error] [pid 19671:tid 19984] [client 147.135.213.32:35622] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abWrh1u8gYYbnWVq3mUskQAAARM"]
[Sun Mar 15 02:40:09.803686 2026] [:error] [pid 59255:tid 59268] [client 147.135.213.32:42142] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abWria3w_Oi6c1avgTsO9QAAAIc"]
[Sun Mar 15 02:40:12.109843 2026] [:error] [pid 59255:tid 59278] [client 147.135.213.32:42158] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abWrjK3w_Oi6c1avgTsO_AAAAJE"]
[Sun Mar 15 02:40:14.435221 2026] [:error] [pid 19680:tid 20014] [client 147.135.213.32:42162] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "abWrjknhGahR8LEhCX-6hgAAAdY"]
[Sun Mar 15 02:40:16.909675 2026] [:error] [pid 20020:tid 20038] [client 147.135.213.32:42170] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "abWrkEPjaRwagw2fU7gpYgAAAFA"]
[Sun Mar 15 02:40:19.370630 2026] [:error] [pid 19680:tid 19993] [client 147.135.213.32:48772] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "abWrk0nhGahR8LEhCX-6kQAAAcE"]
[Sun Mar 15 02:40:21.845190 2026] [:error] [pid 19658:tid 19951] [client 147.135.213.32:48786] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "abWrlVIS7ZSIcsV9BQqYgwAAAA4"]
[Sun Mar 15 02:40:24.311012 2026] [:error] [pid 19671:tid 19966] [client 147.135.213.32:48798] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "abWrmFu8gYYbnWVq3mUsogAAAQE"]
[Sun Mar 15 02:40:26.644138 2026] [:error] [pid 59255:tid 59281] [client 147.135.213.32:48814] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abWrmq3w_Oi6c1avgTsPFAAAAJQ"]
[Sun Mar 15 02:40:28.943145 2026] [:error] [pid 20020:tid 20027] [client 147.135.213.32:44630] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "abWrnEPjaRwagw2fU7gphwAAAEU"]
[Sun Mar 15 02:40:31.425658 2026] [:error] [pid 20020:tid 20022] [client 147.135.213.32:44634] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "abWrn0PjaRwagw2fU7gplgAAAEA"]
[Sun Mar 15 02:40:33.742106 2026] [:error] [pid 20020:tid 20044] [client 147.135.213.32:44640] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "abWroUPjaRwagw2fU7gppAAAAFY"]
[Sun Mar 15 02:40:36.065163 2026] [:error] [pid 59255:tid 59271] [client 147.135.213.32:44644] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "abWrpK3w_Oi6c1avgTsPMAAAAIo"]
[Sun Mar 15 02:40:38.517722 2026] [:error] [pid 59255:tid 59261] [client 147.135.213.32:48710] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "abWrpq3w_Oi6c1avgTsPQwAAAIA"]
[Sun Mar 15 02:40:40.983699 2026] [:error] [pid 59255:tid 59270] [client 147.135.213.32:48716] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "abWrqK3w_Oi6c1avgTsPTwAAAIk"]
[Sun Mar 15 02:40:43.453095 2026] [:error] [pid 19680:tid 19996] [client 147.135.213.32:48732] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abWrq0nhGahR8LEhCX-6qAAAAcQ"]
[Sun Mar 15 02:40:45.929671 2026] [:error] [pid 20020:tid 20041] [client 147.135.213.32:48736] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "abWrrUPjaRwagw2fU7gpvAAAAFM"]
[Sun Mar 15 02:40:48.379716 2026] [:error] [pid 20020:tid 20037] [client 147.135.213.32:53126] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "abWrsEPjaRwagw2fU7gpwgAAAE8"]
[Sun Mar 15 02:40:50.841836 2026] [:error] [pid 20020:tid 20034] [client 147.135.213.32:53132] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abWrskPjaRwagw2fU7gpyQAAAEw"]
[Sun Mar 15 02:40:53.303612 2026] [:error] [pid 59255:tid 59280] [client 147.135.213.32:53144] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abWrta3w_Oi6c1avgTsPXAAAAJM"]
[Sun Mar 15 02:41:24.073860 2026] [:error] [pid 59255:tid 59278] [client 147.135.213.32:53146] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "abWr1K3w_Oi6c1avgTsPtgAAAJE"]
[Sun Mar 15 02:41:26.508704 2026] [:error] [pid 59255:tid 59263] [client 147.135.213.32:47298] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "abWr1q3w_Oi6c1avgTsPugAAAII"]
[Sun Mar 15 02:41:28.816008 2026] [:error] [pid 59255:tid 59267] [client 147.135.213.32:48286] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abWr2K3w_Oi6c1avgTsPyAAAAIY"]
[Sun Mar 15 02:41:31.279405 2026] [:error] [pid 59255:tid 59272] [client 147.135.213.32:48320] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abWr263w_Oi6c1avgTsP0QAAAIs"]
[Sun Mar 15 02:41:33.751580 2026] [:error] [pid 19680:tid 20005] [client 147.135.213.32:48348] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "abWr3UnhGahR8LEhCX-7JgAAAc0"]
[Sun Mar 15 02:41:36.241304 2026] [:error] [pid 59255:tid 59267] [client 147.135.213.32:48370] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abWr4K3w_Oi6c1avgTsP6wAAAIY"]
[Sun Mar 15 02:41:38.712716 2026] [:error] [pid 19658:tid 19951] [client 147.135.213.32:57352] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abWr4lIS7ZSIcsV9BQqY3QAAAA4"]
[Sun Mar 15 02:41:41.178367 2026] [:error] [pid 19680:tid 20006] [client 147.135.213.32:57358] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "abWr5UnhGahR8LEhCX-7KAAAAc4"]
[Sun Mar 15 02:41:43.627731 2026] [:error] [pid 20020:tid 20044] [client 147.135.213.32:57370] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "abWr50PjaRwagw2fU7gqKwAAAFY"]
[Sun Mar 15 02:41:45.935376 2026] [:error] [pid 59255:tid 59268] [client 147.135.213.32:57378] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "abWr6a3w_Oi6c1avgTsQGAAAAIc"]
[Sun Mar 15 02:41:48.231484 2026] [:error] [pid 19671:tid 19969] [client 147.135.213.32:56590] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abWr7Fu8gYYbnWVq3mUtJQAAAQQ"]
[Sun Mar 15 02:41:50.668168 2026] [:error] [pid 59255:tid 59278] [client 147.135.213.32:56600] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "abWr7q3w_Oi6c1avgTsQMAAAAJE"]
[Sun Mar 15 02:41:53.133418 2026] [:error] [pid 19680:tid 20004] [client 147.135.213.32:56612] [client 147.135.213.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abWr8UnhGahR8LEhCX-7PQAAAcw"]
[Sun Mar 15 04:43:56.866252 2026] [:error] [pid 38645:tid 38653] [client 103.117.180.69:51384] [client 103.117.180.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.117.180.69, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abXIjBFPHtsDUuVrWDZVhwAAAMY"]
[Sun Mar 15 04:44:00.200209 2026] [:error] [pid 38645:tid 38649] [client 103.117.180.69:51384] [client 103.117.180.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.117.180.69, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abXIkBFPHtsDUuVrWDZVlQAAAMI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 15 05:23:13.958992 2026] [:error] [pid 9995:tid 10012] [client 151.31.154.25:63279] [client 151.31.154.25] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abXRwQa8xkcaSmgTbwjfMgAAAQ4"]
[Sun Mar 15 05:24:25.748472 2026] [:error] [pid 38541:tid 38631] [client 151.31.154.25:63709] [client 151.31.154.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.31.154.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abXSCXuOpex8jIO0jt7S4AAAAJI"]
[Sun Mar 15 06:20:57.040653 2026] [:error] [pid 38645:tid 38662] [client 109.236.45.26:51101] [client 109.236.45.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.236.45.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abXfSRFPHtsDUuVrWDZuGQAAAM8"]
[Sun Mar 15 06:29:33.245373 2026] [:error] [pid 38541:tid 38615] [client 109.236.45.26:51877] [client 109.236.45.26] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abXhTXuOpex8jIO0jt7oNQAAAII"]
[Sun Mar 15 06:30:26.530332 2026] [:error] [pid 38536:tid 38577] [client 109.236.45.26:50458] [client 109.236.45.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.236.45.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abXhgvpTEqkVJ0rBEWuavAAAABg"]
[Sun Mar 15 06:55:34.766513 2026] [:error] [pid 38541:tid 38625] [client 162.62.231.139:56940] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abXnZnuOpex8jIO0jt7tkgAAAIw"]
[Sun Mar 15 08:39:26.835907 2026] [:error] [pid 50986:tid 51003] [client 184.107.184.66:37064] [client 184.107.184.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.107.184.66, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abX_viknK4c779bcQqGsxAAAAU4"]
[Sun Mar 15 08:39:28.011331 2026] [:error] [pid 50986:tid 51009] [client 184.107.184.66:37064] [client 184.107.184.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 184.107.184.66, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abX_wCknK4c779bcQqGsxQAAAVQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 15 09:08:49.627867 2026] [:error] [pid 38541:tid 38619] [client 161.97.68.161:54202] [client 161.97.68.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.68.161, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abYGoXuOpex8jIO0jt4WRgAAAIY"]
[Sun Mar 15 09:08:50.887332 2026] [:error] [pid 38541:tid 38626] [client 161.97.68.161:54202] [client 161.97.68.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.68.161, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abYGonuOpex8jIO0jt4WSAAAAI0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 15 10:18:53.148026 2026] [autoindex:error] [pid 50986:tid 50994] [client 20.244.84.206:50967] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 15 12:43:05.525626 2026] [:error] [pid 45801:tid 45825] [client 103.170.123.175:56372] [client 103.170.123.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.170.123.175, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abY42YaKHL9CTKoVzTDmCgAAAdY"]
[Sun Mar 15 12:43:06.823173 2026] [:error] [pid 45801:tid 45826] [client 103.170.123.175:56372] [client 103.170.123.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.170.123.175, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abY42oaKHL9CTKoVzTDmCwAAAdc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 15 12:56:31.192420 2026] [:error] [pid 45974:tid 45983] [client 18.136.51.126:59462] [client 18.136.51.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.136.51.126, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abY7_xWn4R6u72SegehxmwAAAgc"]
[Sun Mar 15 12:56:33.593139 2026] [:error] [pid 38540:tid 38609] [client 18.136.51.126:59474] [client 18.136.51.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.136.51.126, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abY8AV8bnHsJ1dE90bJKvQAAAFc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 15 13:10:10.349103 2026] [:error] [pid 50986:tid 50997] [client 66.116.226.103:47312] [client 66.116.226.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.116.226.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abY_MiknK4c779bcQqFChwAAAUg"]
[Sun Mar 15 13:10:12.809924 2026] [:error] [pid 45801:tid 45819] [client 66.116.226.103:37022] [client 66.116.226.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.116.226.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abY_NIaKHL9CTKoVzTDrjgAAAdA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 15 17:54:25.814371 2026] [:error] [pid 38540:tid 38610] [client 43.157.38.228:33216] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abaB0V8bnHsJ1dE90bJltgAAAFg"]
[Sun Mar 15 18:36:04.774088 2026] [:error] [pid 45801:tid 45818] [client 60.188.57.0:55883] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abaLlIaKHL9CTKoVzTA3DAAAAc8"]
[Sun Mar 15 20:50:10.963292 2026] [:error] [pid 9995:tid 10013] [client 147.93.153.73:34560] [client 147.93.153.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.93.153.73, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abarAga8xkcaSmgTbwiICQAAAQ8"]
[Sun Mar 15 20:50:12.336534 2026] [:error] [pid 9995:tid 10015] [client 147.93.153.73:34560] [client 147.93.153.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.93.153.73, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abarBAa8xkcaSmgTbwiIDgAAARE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 15 21:01:58.390526 2026] [:error] [pid 50986:tid 50989] [client 49.51.141.76:43082] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abatxiknK4c779bcQqHiwwAAAUE"]
[Mon Mar 16 01:41:04.876658 2026] [:error] [pid 60666:tid 60773] [client 14.215.163.132:38178] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abbvMBLlrGpRCJDg8VLsAgAAABU"]
[Mon Mar 16 02:15:21.147581 2026] [:error] [pid 23458:tid 23478] [client 35.193.28.49:33074] [client 35.193.28.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.193.28.49, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abb3OQ4cKIHVuOkxhhojJQAAARI"]
[Mon Mar 16 02:15:22.354188 2026] [:error] [pid 23458:tid 23467] [client 35.193.28.49:33074] [client 35.193.28.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.193.28.49, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abb3Og4cKIHVuOkxhhojKAAAAQc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 16 03:19:49.703172 2026] [:error] [pid 59717:tid 59732] [client 170.106.15.3:46198] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abcGVXgKsYrJ87ROOHZsjQAAAM0"]
[Mon Mar 16 04:13:36.385052 2026] [:error] [pid 62429:tid 62507] [client 167.86.116.144:36066] [client 167.86.116.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.86.116.144, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abcS8FewIPukhLCowEGazwAAAIs"]
[Mon Mar 16 04:13:39.010161 2026] [:error] [pid 62427:tid 62441] [client 167.86.116.144:37748] [client 167.86.116.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.86.116.144, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abcS88UPP8fzo6XzJCX-9gAAAAA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 16 06:04:58.019614 2026] [:error] [pid 62529:tid 62549] [client 139.59.3.17:36944] [client 139.59.3.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.3.17, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abctCj84-luOVYZKK0N6jwAAAMw"]
[Mon Mar 16 06:05:00.678371 2026] [:error] [pid 62529:tid 62560] [client 139.59.3.17:36944] [client 139.59.3.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.3.17, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abctDD84-luOVYZKK0N6kwAAANc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 16 06:50:26.427387 2026] [:error] [pid 52152:tid 52173] [client 170.106.163.48:53928] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abc3ssA6rS_GLRd0NKWEVQAAARI"]
[Mon Mar 16 07:02:28.342903 2026] [:error] [pid 62428:tid 62473] [client 203.188.168.28:64239] [client 203.188.168.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abc6hKrHSRXFZx1-aIHoGQAAAEQ"]
[Mon Mar 16 07:02:28.342980 2026] [:error] [pid 62428:tid 62473] [client 203.188.168.28:64239] [client 203.188.168.28] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 203.188.168.28 on wp-login.php, counter = 14"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abc6hKrHSRXFZx1-aIHoGQAAAEQ"]
[Mon Mar 16 07:48:03.503317 2026] [:error] [pid 62429:tid 62516] [client 190.92.175.38:49124] [client 190.92.175.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.175.38, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abdFM1ewIPukhLCowEHt_AAAAJQ"]
[Mon Mar 16 07:48:41.168513 2026] [:error] [pid 12823:tid 12883] [client 190.92.175.38:56526] [client 190.92.175.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.175.38, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abdFWRlVKeelxvdJEr475gAAAhU"]
[Mon Mar 16 07:48:43.928945 2026] [:error] [pid 12823:tid 12878] [client 190.92.175.38:56526] [client 190.92.175.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.175.38, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abdFWxlVKeelxvdJEr476AAAAhA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 16 08:04:51.798332 2026] [:error] [pid 12823:tid 12864] [client 125.75.66.97:42658] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abdJIxlVKeelxvdJEr4_FwAAAgI"]
[Mon Mar 16 08:20:37.346296 2026] [:error] [pid 12768:tid 12788] [client 103.65.237.124:52579] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "abdM1Yvjhfol0SJym0_KxwAAAY8"]
[Mon Mar 16 08:20:37.611915 2026] [:error] [pid 62429:tid 62505] [client 103.65.237.124:52623] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "abdM1VewIPukhLCowEH4ngAAAIk"]
[Mon Mar 16 10:38:12.032519 2026] [:error] [pid 62119:tid 62130] [client 43.166.237.57:60578] [client 43.166.237.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abdtFD-Co-Fir-PyAwfFjwAAAMg"]
[Mon Mar 16 11:05:13.331625 2026] [:error] [pid 62510:tid 62529] [client 173.239.236.224:23579] [client 173.239.236.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abdzaSE33_T9aKpoDdjpuwAAARA"]
[Mon Mar 16 11:05:23.652580 2026] [:error] [pid 62026:tid 62096] [client 173.239.236.231:35679] [client 173.239.236.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abdzc-8oW52PUIYI2O4LzQAAAIo"]
[Mon Mar 16 11:05:23.895297 2026] [:error] [pid 62026:tid 62095] [client 173.239.236.73:49915] [client 173.239.236.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abdzc-8oW52PUIYI2O4L0AAAAIk"]
[Mon Mar 16 11:05:24.119029 2026] [:error] [pid 9249:tid 9257] [client 173.239.236.181:46797] [client 173.239.236.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abdzdAsX15dONR9F2wy31AAAAUM"]
[Mon Mar 16 11:05:24.339505 2026] [:error] [pid 9249:tid 9261] [client 173.239.236.61:23443] [client 173.239.236.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "abdzdAsX15dONR9F2wy31gAAAUc"]
[Mon Mar 16 11:05:24.563357 2026] [:error] [pid 62510:tid 62519] [client 173.239.236.18:61577] [client 173.239.236.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "abdzdCE33_T9aKpoDdjqEgAAAQY"]
[Mon Mar 16 11:05:24.783622 2026] [:error] [pid 62025:tid 62070] [client 173.239.236.160:62835] [client 173.239.236.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abdzdOimBfLmKh7zLXMCowAAAEs"]
[Mon Mar 16 11:16:00.860670 2026] [:error] [pid 62024:tid 62043] [client 202.46.68.248:55873] [client 202.46.68.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.46.68.248, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abd18Ik-5rtjYvjqC_o9HQAAAA4"]
[Mon Mar 16 11:26:31.194839 2026] [:error] [pid 62026:tid 62088] [client 202.46.68.248:60550] [client 202.46.68.248] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abd4Z-8oW52PUIYI2O4SnwAAAII"]
[Mon Mar 16 13:30:20.940038 2026] [:error] [pid 9400:tid 9435] [client 43.133.91.48:51996] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abeVbASHzD8ZM8ddLEnhZAAAAhM"]
[Mon Mar 16 13:51:14.171248 2026] [:error] [pid 62024:tid 62051] [client 217.216.89.72:47570] [client 217.216.89.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.216.89.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abeaUok-5rtjYvjqC_qI9QAAABY"]
[Mon Mar 16 13:51:16.857466 2026] [:error] [pid 9305:tid 9320] [client 217.216.89.72:47584] [client 217.216.89.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.216.89.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abeaVPRqyKiwGvzyRKytrwAAAYo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 16 13:54:20.456360 2026] [:error] [pid 62510:tid 62529] [client 147.135.213.153:33876] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "abebDCE33_T9aKpoDdgnnAAAARA"]
[Mon Mar 16 13:54:22.903950 2026] [:error] [pid 62024:tid 62031] [client 147.135.213.153:36416] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "abebDok-5rtjYvjqC_qLEQAAAAI"]
[Mon Mar 16 13:54:25.406144 2026] [:error] [pid 62026:tid 62108] [client 147.135.213.153:41762] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "abebEe8oW52PUIYI2O43HAAAAJY"]
[Mon Mar 16 13:54:27.901517 2026] [:error] [pid 62024:tid 62044] [client 147.135.213.153:41770] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "abebE4k-5rtjYvjqC_qLHAAAAA8"]
[Mon Mar 16 13:54:30.385180 2026] [:error] [pid 62024:tid 62035] [client 147.135.213.153:41780] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "abebFok-5rtjYvjqC_qLLwAAAAY"]
[Mon Mar 16 13:54:32.738826 2026] [:error] [pid 9354:tid 9386] [client 147.135.213.153:41792] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "abebGHBF0M4d8CifbJ5NOQAAAdc"]
[Mon Mar 16 13:54:35.238402 2026] [:error] [pid 9400:tid 9429] [client 147.135.213.153:38834] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "abebGwSHzD8ZM8ddLEnl6gAAAg0"]
[Mon Mar 16 13:54:37.746543 2026] [:error] [pid 62024:tid 62050] [client 147.135.213.153:38848] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "abebHYk-5rtjYvjqC_qLMgAAABU"]
[Mon Mar 16 13:54:40.243322 2026] [:error] [pid 62026:tid 62093] [client 147.135.213.153:38862] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "abebIO8oW52PUIYI2O43NAAAAIc"]
[Mon Mar 16 13:54:42.771941 2026] [:error] [pid 62024:tid 62037] [client 147.135.213.153:38870] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "abebIok-5rtjYvjqC_qLPwAAAAg"]
[Mon Mar 16 13:54:45.103494 2026] [:error] [pid 62510:tid 62525] [client 147.135.213.153:39408] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "abebJSE33_T9aKpoDdgnzAAAAQw"]
[Mon Mar 16 13:54:47.423113 2026] [:error] [pid 62510:tid 62527] [client 147.135.213.153:39416] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "abebJyE33_T9aKpoDdgn0QAAAQ4"]
[Mon Mar 16 13:54:49.926425 2026] [:error] [pid 62510:tid 62514] [client 147.135.213.153:39432] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abebKSE33_T9aKpoDdgn2AAAAQE"]
[Mon Mar 16 13:54:52.434692 2026] [:error] [pid 9249:tid 9259] [client 147.135.213.153:39440] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "abebLAsX15dONR9F2wzHIgAAAUU"]
[Mon Mar 16 13:54:54.911007 2026] [:error] [pid 62510:tid 62523] [client 147.135.213.153:52160] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "abebLiE33_T9aKpoDdgn3wAAAQo"]
[Mon Mar 16 13:54:57.421910 2026] [:error] [pid 62510:tid 62519] [client 147.135.213.153:52166] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abebMSE33_T9aKpoDdgn4QAAAQY"]
[Mon Mar 16 13:54:59.930189 2026] [:error] [pid 62510:tid 62522] [client 147.135.213.153:52174] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abebMyE33_T9aKpoDdgn5wAAAQk"]
[Mon Mar 16 13:55:02.430337 2026] [:error] [pid 62024:tid 62040] [client 147.135.213.153:52176] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abebNok-5rtjYvjqC_qLkwAAAAs"]
[Mon Mar 16 13:55:04.933928 2026] [:error] [pid 62024:tid 62039] [client 147.135.213.153:37994] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "abebOIk-5rtjYvjqC_qLmwAAAAo"]
[Mon Mar 16 13:55:07.426657 2026] [:error] [pid 62025:tid 62079] [client 147.135.213.153:38010] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "abebO-imBfLmKh7zLXNaOQAAAFQ"]
[Mon Mar 16 13:55:09.939112 2026] [:error] [pid 9305:tid 9315] [client 147.135.213.153:38012] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "abebPfRqyKiwGvzyRKyuOQAAAYU"]
[Mon Mar 16 13:55:12.468395 2026] [:error] [pid 62510:tid 62532] [client 147.135.213.153:38022] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "abebQCE33_T9aKpoDdgoBAAAARM"]
[Mon Mar 16 13:55:14.938426 2026] [:error] [pid 62510:tid 62519] [client 147.135.213.153:41818] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abebQiE33_T9aKpoDdgoDgAAAQY"]
[Mon Mar 16 13:55:45.855050 2026] [:error] [pid 62024:tid 62039] [client 147.135.213.153:41828] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "abebYYk-5rtjYvjqC_qMDgAAAAo"]
[Mon Mar 16 13:55:48.302628 2026] [:error] [pid 62024:tid 62032] [client 147.135.213.153:45200] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abebZIk-5rtjYvjqC_qMHQAAAAM"]
[Mon Mar 16 13:55:50.811900 2026] [:error] [pid 9400:tid 9437] [client 147.135.213.153:45216] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abebZgSHzD8ZM8ddLEnmIwAAAhU"]
[Mon Mar 16 13:55:53.283170 2026] [:error] [pid 62024:tid 62037] [client 147.135.213.153:45228] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abebaYk-5rtjYvjqC_qMTAAAAAg"]
[Mon Mar 16 13:55:55.610704 2026] [:error] [pid 62119:tid 62138] [client 147.135.213.153:45202] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abebaz-Co-Fir-PyAwfeMAAAANA"]
[Mon Mar 16 13:55:58.118917 2026] [:error] [pid 9305:tid 9331] [client 147.135.213.153:45204] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abebbvRqyKiwGvzyRKyuVwAAAZU"]
[Mon Mar 16 13:56:00.632408 2026] [:error] [pid 62025:tid 62067] [client 147.135.213.153:45220] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abebcOimBfLmKh7zLXNahgAAAEg"]
[Mon Mar 16 13:56:03.112385 2026] [:error] [pid 62025:tid 62070] [client 147.135.213.153:45236] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abebc-imBfLmKh7zLXNajwAAAEs"]
[Mon Mar 16 13:56:05.624803 2026] [:error] [pid 62026:tid 62089] [client 147.135.213.153:48580] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "abebde8oW52PUIYI2O43vAAAAIM"]
[Mon Mar 16 13:56:08.151700 2026] [:error] [pid 62025:tid 62068] [client 147.135.213.153:48596] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "abebeOimBfLmKh7zLXNalwAAAEk"]
[Mon Mar 16 13:56:10.655195 2026] [:error] [pid 9354:tid 9384] [client 147.135.213.153:48602] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "abebenBF0M4d8CifbJ5NhwAAAdU"]
[Mon Mar 16 13:56:13.161931 2026] [:error] [pid 62026:tid 62090] [client 147.135.213.153:48606] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "abebfe8oW52PUIYI2O43xwAAAIQ"]
[Mon Mar 16 13:56:15.674530 2026] [:error] [pid 9400:tid 9431] [client 147.135.213.153:43908] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "abebfwSHzD8ZM8ddLEnmMgAAAg8"]
[Mon Mar 16 13:56:18.012035 2026] [:error] [pid 62510:tid 62519] [client 147.135.213.153:43920] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abebgiE33_T9aKpoDdgoSwAAAQY"]
[Mon Mar 16 13:56:20.527364 2026] [:error] [pid 9305:tid 9327] [client 147.135.213.153:43928] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "abebhPRqyKiwGvzyRKyuYwAAAZE"]
[Mon Mar 16 13:56:23.031729 2026] [:error] [pid 62024:tid 62039] [client 147.135.213.153:43930] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "abebh4k-5rtjYvjqC_qMnQAAAAo"]
[Mon Mar 16 13:56:25.522728 2026] [:error] [pid 62025:tid 62073] [client 147.135.213.153:33804] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "abebieimBfLmKh7zLXNbdQAAAE4"]
[Mon Mar 16 13:56:28.053699 2026] [:error] [pid 9305:tid 9326] [client 147.135.213.153:33808] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "abebjPRqyKiwGvzyRKyuZgAAAZA"]
[Mon Mar 16 13:56:30.564622 2026] [:error] [pid 62025:tid 62063] [client 147.135.213.153:33818] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "abebjuimBfLmKh7zLXNbegAAAEQ"]
[Mon Mar 16 13:56:32.936886 2026] [:error] [pid 62024:tid 62043] [client 147.135.213.153:33834] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "abebkIk-5rtjYvjqC_qMsgAAAA4"]
[Mon Mar 16 13:56:35.435527 2026] [:error] [pid 62024:tid 62051] [client 147.135.213.153:53198] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abebk4k-5rtjYvjqC_qMtgAAABY"]
[Mon Mar 16 13:56:37.947710 2026] [:error] [pid 62025:tid 62073] [client 147.135.213.153:53210] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "abebleimBfLmKh7zLXNbgAAAAE4"]
[Mon Mar 16 13:56:40.444588 2026] [:error] [pid 62025:tid 62069] [client 147.135.213.153:53224] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "abebmOimBfLmKh7zLXNbiAAAAEo"]
[Mon Mar 16 13:56:42.966067 2026] [:error] [pid 62025:tid 62077] [client 147.135.213.153:53226] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abebmuimBfLmKh7zLXNbjQAAAFI"]
[Mon Mar 16 13:57:13.967272 2026] [:error] [pid 9400:tid 9436] [client 147.135.213.153:58118] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "abebuQSHzD8ZM8ddLEnmYQAAAhQ"]
[Mon Mar 16 13:57:16.396187 2026] [:error] [pid 9400:tid 9420] [client 147.135.213.153:41828] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "abebvASHzD8ZM8ddLEnmaAAAAgQ"]
[Mon Mar 16 13:57:18.686360 2026] [:error] [pid 9354:tid 9374] [client 147.135.213.153:41844] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "abebvnBF0M4d8CifbJ5NmgAAAcs"]
[Mon Mar 16 13:57:20.982377 2026] [:error] [pid 62510:tid 62525] [client 147.135.213.153:41856] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abebwCE33_T9aKpoDdgomQAAAQw"]
[Mon Mar 16 13:57:23.278743 2026] [:error] [pid 62025:tid 62064] [client 147.135.213.153:41864] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abebw-imBfLmKh7zLXNbtgAAAEU"]
[Mon Mar 16 13:57:25.583343 2026] [:error] [pid 62026:tid 62095] [client 147.135.213.153:39700] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "abebxe8oW52PUIYI2O44IgAAAIk"]
[Mon Mar 16 13:57:27.898915 2026] [:error] [pid 62024:tid 62044] [client 147.135.213.153:39714] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abebx4k-5rtjYvjqC_qNPQAAAA8"]
[Mon Mar 16 13:57:30.343989 2026] [:error] [pid 9249:tid 9260] [client 147.135.213.153:39716] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abebygsX15dONR9F2wzHXQAAAUY"]
[Mon Mar 16 13:57:32.787816 2026] [:error] [pid 62119:tid 62135] [client 147.135.213.153:39724] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "abebzD-Co-Fir-PyAwfeUAAAAM0"]
[Mon Mar 16 13:57:35.221884 2026] [:error] [pid 62024:tid 62038] [client 147.135.213.153:57388] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "abebz4k-5rtjYvjqC_qNTgAAAAk"]
[Mon Mar 16 13:57:37.674996 2026] [:error] [pid 62025:tid 62071] [client 147.135.213.153:57400] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "abeb0eimBfLmKh7zLXNbvgAAAEw"]
[Mon Mar 16 13:57:40.110296 2026] [:error] [pid 62024:tid 62042] [client 147.135.213.153:57410] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abeb1Ik-5rtjYvjqC_qNVQAAAA0"]
[Mon Mar 16 13:57:42.409808 2026] [:error] [pid 62026:tid 62101] [client 147.135.213.153:57422] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "abeb1u8oW52PUIYI2O44NwAAAI8"]
[Mon Mar 16 13:57:44.709073 2026] [:error] [pid 62024:tid 62032] [client 147.135.213.153:57432] [client 147.135.213.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abeb2Ik-5rtjYvjqC_qNXgAAAAM"]
[Mon Mar 16 19:38:12.084953 2026] [:error] [pid 35838:tid 35854] [client 103.216.117.118:56810] [client 103.216.117.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.216.117.118, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abfrpBroTe-x3JLtmo6K9gAAAAw"]
[Mon Mar 16 19:38:14.821388 2026] [:error] [pid 35838:tid 35859] [client 103.216.117.118:56824] [client 103.216.117.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.216.117.118, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abfrphroTe-x3JLtmo6LAAAAABE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 16 19:40:04.995729 2026] [:error] [pid 36198:tid 36224] [client 43.166.224.244:57652] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abfsFOlL1GNckmsdWlMv3QAAARc"]
[Mon Mar 16 19:54:35.026756 2026] [:error] [pid 35838:tid 35861] [client 64.89.163.113:49645] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abfvexroTe-x3JLtmo6WRwAAABM"]
[Mon Mar 16 19:54:35.568676 2026] [:error] [pid 35839:tid 35875] [client 64.89.163.113:49588] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abfve6xyv6h8-aZrncsJAAAAAEU"]
[Mon Mar 16 19:54:36.070381 2026] [:error] [pid 35929:tid 35952] [client 64.89.163.113:54035] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abfvfNW47dGpmA63hwSK3AAAANU"]
[Mon Mar 16 19:54:36.595547 2026] [:error] [pid 36198:tid 36225] [client 64.89.163.113:50918] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abfvfOlL1GNckmsdWlM0DwAAARg"]
[Mon Mar 16 19:54:37.115067 2026] [:error] [pid 1871:tid 1889] [client 64.89.163.113:54025] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abfvfTinTnZ8uiUPekE7PAAAAZA"]
[Mon Mar 16 20:19:55.227794 2026] [:error] [pid 35838:tid 35858] [client 185.173.205.146:58193] [client 185.173.205.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.173.205.146, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abf1axroTe-x3JLtmo6k6AAAABA"]
[Mon Mar 16 20:31:08.953050 2026] [:error] [pid 36198:tid 36208] [client 77.68.26.87:32920] [client 77.68.26.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.68.26.87, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abf4DOlL1GNckmsdWlM9OAAAAQc"]
[Mon Mar 16 20:31:11.031825 2026] [:error] [pid 1871:tid 1892] [client 77.68.26.87:35064] [client 77.68.26.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.68.26.87, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abf4DzinTnZ8uiUPekFJRgAAAZM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 16 21:13:24.924706 2026] [:error] [pid 1871:tid 1896] [client 49.207.144.236:56251] [client 49.207.144.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.207.144.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abgB9DinTnZ8uiUPekFaIgAAAZc"]
[Mon Mar 16 21:18:53.685975 2026] [:error] [pid 35838:tid 35851] [client 20.120.91.203:54313] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "abgDPRroTe-x3JLtmo7GjwAAAAk"]
[Mon Mar 16 21:18:56.301786 2026] [:error] [pid 36198:tid 36217] [client 20.120.91.203:50509] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "abgDQOlL1GNckmsdWlNJ6gAAARA"]
[Mon Mar 16 21:18:57.718207 2026] [:error] [pid 1871:tid 1881] [client 20.120.91.203:54329] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "abgDQTinTnZ8uiUPekFccAAAAYg"]
[Mon Mar 16 21:18:58.998016 2026] [:error] [pid 1871:tid 1888] [client 20.120.91.203:54284] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "abgDQjinTnZ8uiUPekFccgAAAY8"]
[Mon Mar 16 21:23:27.297839 2026] [:error] [pid 1871:tid 1887] [client 49.207.144.236:56336] [client 49.207.144.236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abgETzinTnZ8uiUPekFeagAAAY4"]
[Mon Mar 16 21:31:45.032978 2026] [:error] [pid 1871:tid 1884] [client 122.51.236.174:59352] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abgGQTinTnZ8uiUPekFhYwAAAYs"]
[Mon Mar 16 22:11:47.890100 2026] [:error] [pid 1871:tid 1888] [client 103.145.50.90:38530] [client 103.145.50.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.145.50.90, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abgPozinTnZ8uiUPekF2ewAAAY8"]
[Mon Mar 16 22:11:49.106539 2026] [:error] [pid 1871:tid 1882] [client 103.145.50.90:38530] [client 103.145.50.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.145.50.90, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abgPpTinTnZ8uiUPekF2fAAAAYk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 16 22:40:51.464035 2026] [:error] [pid 35929:tid 35951] [client 43.157.52.37:54456] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abgWc9W47dGpmA63hwS5uwAAANQ"]
[Tue Mar 17 01:39:52.649481 2026] [:error] [pid 45450:tid 45584] [client 40.89.166.179:12002] [client 40.89.166.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.89.166.179, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abhAaL164tBAS29wdMgfAwAAAI0"]
[Tue Mar 17 01:39:54.624194 2026] [:error] [pid 45450:tid 45575] [client 40.89.166.179:37654] [client 40.89.166.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.89.166.179, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abhAar164tBAS29wdMgfBgAAAIQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 01:42:36.907368 2026] [:error] [pid 9635:tid 9640] [client 43.153.122.30:38856] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abhBDHsAHChuwZxGaSjdxAAAAUM"]
[Tue Mar 17 03:23:11.664033 2026] [:error] [pid 15344:tid 15347] [client 20.120.91.203:11486] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "abhYn9Wu0iDOMwP1So5W3gAAAME"]
[Tue Mar 17 03:23:12.957074 2026] [:error] [pid 15251:tid 15332] [client 20.120.91.203:11547] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "abhYoBR6dhTRHD_jjkiflAAAAJE"]
[Tue Mar 17 03:23:14.243928 2026] [:error] [pid 15251:tid 15334] [client 20.120.91.203:11492] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "abhYohR6dhTRHD_jjkifnAAAAJM"]
[Tue Mar 17 03:23:17.944335 2026] [:error] [pid 15344:tid 15369] [client 20.120.91.203:11457] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "abhYpdWu0iDOMwP1So5W8QAAANc"]
[Tue Mar 17 03:41:18.781108 2026] [:error] [pid 46020:tid 46034] [client 217.71.203.152:52612] [client 217.71.203.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.71.203.152, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abhc3n-nCcd9BdzGdLefBgAAAMw"]
[Tue Mar 17 03:41:21.259911 2026] [:error] [pid 45915:tid 45942] [client 217.71.203.152:52626] [client 217.71.203.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.71.203.152, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abhc4Zh7U84ydzcrcnff1AAAAA0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 04:24:48.676029 2026] [:error] [pid 22541:tid 22564] [client 103.57.220.209:40340] [client 103.57.220.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.57.220.209, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abhnEKS6JNY1-CTsTA-5JwAAARI"]
[Tue Mar 17 04:24:51.281753 2026] [:error] [pid 22541:tid 22550] [client 103.57.220.209:40350] [client 103.57.220.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.57.220.209, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abhnE6S6JNY1-CTsTA-5KwAAAQQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 04:48:49.205460 2026] [:error] [pid 45917:tid 45993] [client 118.139.178.26:32554] [client 118.139.178.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.139.178.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abhssRMMhmeqL5fT_hdyNAAAAIQ"]
[Tue Mar 17 04:48:50.453392 2026] [:error] [pid 45917:tid 46010] [client 118.139.178.26:32554] [client 118.139.178.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.139.178.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abhsshMMhmeqL5fT_hdyNgAAAJU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 06:19:29.747461 2026] [:error] [pid 46020:tid 46036] [client 23.111.15.53:40432] [client 23.111.15.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.111.15.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abiB8X-nCcd9BdzGdLf_EQAAAM4"]
[Tue Mar 17 06:19:30.946073 2026] [:error] [pid 46020:tid 46031] [client 23.111.15.53:40432] [client 23.111.15.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.111.15.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abiB8n-nCcd9BdzGdLf_GQAAAMk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 06:53:25.301406 2026] [:error] [pid 46020:tid 46041] [client 103.57.220.209:39846] [client 103.57.220.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.57.220.209, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abiJ5X-nCcd9BdzGdLcQsQAAANM"]
[Tue Mar 17 06:53:27.874505 2026] [:error] [pid 46020:tid 46040] [client 103.57.220.209:39846] [client 103.57.220.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.57.220.209, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abiJ53-nCcd9BdzGdLcQtAAAANI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 07:10:31.702291 2026] [:error] [pid 22541:tid 22555] [client 95.91.110.210:48434] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "abiN56S6JNY1-CTsTA8HSAAAAQk"]
[Tue Mar 17 07:10:34.330690 2026] [:error] [pid 22541:tid 22556] [client 95.91.110.210:3176] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "abiN6qS6JNY1-CTsTA8HSgAAAQo"]
[Tue Mar 17 07:10:36.860422 2026] [:error] [pid 22541:tid 22570] [client 95.91.110.210:55070] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "abiN7KS6JNY1-CTsTA8HTgAAARg"]
[Tue Mar 17 07:10:39.458315 2026] [:error] [pid 45916:tid 45970] [client 95.91.110.210:55078] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "abiN77iS53PnClk_C9AEKgAAAEg"]
[Tue Mar 17 07:10:41.870573 2026] [:error] [pid 45917:tid 46001] [client 95.91.110.210:55088] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "abiN8RMMhmeqL5fT_hefBgAAAIw"]
[Tue Mar 17 07:10:44.374865 2026] [:error] [pid 45917:tid 45990] [client 95.91.110.210:55102] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "abiN9BMMhmeqL5fT_hefDAAAAIE"]
[Tue Mar 17 07:10:46.860311 2026] [:error] [pid 46020:tid 46043] [client 95.91.110.210:41174] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "abiN9n-nCcd9BdzGdLcceQAAANU"]
[Tue Mar 17 07:10:49.251791 2026] [:error] [pid 46020:tid 46026] [client 95.91.110.210:41186] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "abiN-X-nCcd9BdzGdLccjAAAAMQ"]
[Tue Mar 17 07:10:51.816209 2026] [:error] [pid 46020:tid 46038] [client 95.91.110.210:41192] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "abiN-3-nCcd9BdzGdLccoAAAANA"]
[Tue Mar 17 07:10:54.279724 2026] [:error] [pid 46020:tid 46025] [client 95.91.110.210:41198] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "abiN_n-nCcd9BdzGdLccswAAAMM"]
[Tue Mar 17 07:10:56.822979 2026] [:error] [pid 22541:tid 22566] [client 95.91.110.210:19840] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "abiOAKS6JNY1-CTsTA8HeQAAARQ"]
[Tue Mar 17 07:10:59.315593 2026] [:error] [pid 46020:tid 46045] [client 95.91.110.210:19854] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "abiOA3-nCcd9BdzGdLccyAAAANc"]
[Tue Mar 17 07:11:01.673575 2026] [:error] [pid 45917:tid 46008] [client 95.91.110.210:19864] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abiOBRMMhmeqL5fT_hefHAAAAJM"]
[Tue Mar 17 07:11:04.102017 2026] [:error] [pid 22541:tid 22552] [client 95.91.110.210:19866] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "abiOCKS6JNY1-CTsTA8HiAAAAQY"]
[Tue Mar 17 07:11:06.599348 2026] [:error] [pid 22541:tid 22560] [client 95.91.110.210:26428] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "abiOCqS6JNY1-CTsTA8HkwAAAQ4"]
[Tue Mar 17 07:11:09.142657 2026] [:error] [pid 22541:tid 22562] [client 95.91.110.210:26438] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abiODaS6JNY1-CTsTA8HowAAARA"]
[Tue Mar 17 07:11:11.664130 2026] [:error] [pid 45916:tid 45962] [client 95.91.110.210:26450] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abiOD7iS53PnClk_C9AEWgAAAEA"]
[Tue Mar 17 07:11:14.063393 2026] [:error] [pid 46020:tid 46037] [client 95.91.110.210:26462] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abiOEn-nCcd9BdzGdLcdAgAAAM8"]
[Tue Mar 17 07:11:16.553453 2026] [:error] [pid 22541:tid 22551] [client 95.91.110.210:47824] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "abiOFKS6JNY1-CTsTA8HxAAAAQU"]
[Tue Mar 17 07:11:19.082411 2026] [:error] [pid 45916:tid 45974] [client 95.91.110.210:47832] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "abiOF7iS53PnClk_C9AEbwAAAEw"]
[Tue Mar 17 07:11:21.589965 2026] [:error] [pid 45917:tid 46003] [client 95.91.110.210:47846] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "abiOGRMMhmeqL5fT_hefPQAAAI4"]
[Tue Mar 17 07:11:24.005692 2026] [:error] [pid 45915:tid 45952] [client 95.91.110.210:47852] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "abiOHJh7U84ydzcrcncQTAAAABc"]
[Tue Mar 17 07:11:26.479182 2026] [:error] [pid 46020:tid 46025] [client 95.91.110.210:10524] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abiOHn-nCcd9BdzGdLcdLAAAAMM"]
[Tue Mar 17 07:11:58.170560 2026] [:error] [pid 22541:tid 22557] [client 95.91.110.210:10528] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "abiOPqS6JNY1-CTsTA8IMwAAAQs"]
[Tue Mar 17 07:12:00.676282 2026] [:error] [pid 45917:tid 45992] [client 95.91.110.210:27556] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abiOQBMMhmeqL5fT_hefjwAAAIM"]
[Tue Mar 17 07:12:03.045864 2026] [:error] [pid 45916:tid 45967] [client 95.91.110.210:27562] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abiOQ7iS53PnClk_C9AEmgAAAEU"]
[Tue Mar 17 07:12:05.556170 2026] [:error] [pid 46020:tid 46036] [client 95.91.110.210:27570] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abiORX-nCcd9BdzGdLcdqAAAAM4"]
[Tue Mar 17 07:12:08.061558 2026] [:error] [pid 46020:tid 46031] [client 95.91.110.210:38188] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abiOSH-nCcd9BdzGdLcduAAAAMk"]
[Tue Mar 17 07:12:10.575379 2026] [:error] [pid 45916:tid 45967] [client 95.91.110.210:38200] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abiOSriS53PnClk_C9AEpgAAAEU"]
[Tue Mar 17 07:12:13.087431 2026] [:error] [pid 45917:tid 46004] [client 95.91.110.210:38206] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abiOTRMMhmeqL5fT_hefoQAAAI8"]
[Tue Mar 17 07:12:15.584778 2026] [:error] [pid 22541:tid 22562] [client 95.91.110.210:38218] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abiOT6S6JNY1-CTsTA8IUAAAARA"]
[Tue Mar 17 07:12:18.090199 2026] [:error] [pid 46020:tid 46033] [client 95.91.110.210:61160] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "abiOUn-nCcd9BdzGdLcd3wAAAMs"]
[Tue Mar 17 07:12:20.606834 2026] [:error] [pid 45916:tid 45965] [client 95.91.110.210:61164] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "abiOVLiS53PnClk_C9AErgAAAEM"]
[Tue Mar 17 07:12:23.122658 2026] [:error] [pid 46020:tid 46026] [client 95.91.110.210:61178] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "abiOV3-nCcd9BdzGdLcd7wAAAMQ"]
[Tue Mar 17 07:12:25.618607 2026] [:error] [pid 22541:tid 22559] [client 95.91.110.210:61184] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "abiOWaS6JNY1-CTsTA8IXQAAAQ0"]
[Tue Mar 17 07:12:28.114909 2026] [:error] [pid 45915:tid 45942] [client 95.91.110.210:44758] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "abiOXJh7U84ydzcrcncQkQAAAA0"]
[Tue Mar 17 07:12:30.478978 2026] [:error] [pid 46020:tid 46045] [client 95.91.110.210:44764] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abiOXn-nCcd9BdzGdLceCwAAANc"]
[Tue Mar 17 07:12:32.973688 2026] [:error] [pid 45917:tid 46010] [client 95.91.110.210:44776] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "abiOYBMMhmeqL5fT_hefugAAAJU"]
[Tue Mar 17 07:12:35.379031 2026] [:error] [pid 46020:tid 46028] [client 95.91.110.210:44790] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "abiOY3-nCcd9BdzGdLceGQAAAMY"]
[Tue Mar 17 07:12:37.879251 2026] [:error] [pid 45917:tid 46009] [client 95.91.110.210:43032] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "abiOZRMMhmeqL5fT_hefxQAAAJQ"]
[Tue Mar 17 07:12:40.422973 2026] [:error] [pid 46020:tid 46038] [client 95.91.110.210:43034] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "abiOaH-nCcd9BdzGdLceKwAAANA"]
[Tue Mar 17 07:12:42.914591 2026] [:error] [pid 22541:tid 22564] [client 95.91.110.210:43040] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "abiOaqS6JNY1-CTsTA8IfQAAARI"]
[Tue Mar 17 07:12:45.414539 2026] [:error] [pid 22541:tid 22548] [client 95.91.110.210:43048] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "abiObaS6JNY1-CTsTA8IhQAAAQI"]
[Tue Mar 17 07:12:47.945499 2026] [:error] [pid 22541:tid 22551] [client 95.91.110.210:46308] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abiOb6S6JNY1-CTsTA8IiwAAAQU"]
[Tue Mar 17 07:12:50.438346 2026] [:error] [pid 45915:tid 45934] [client 95.91.110.210:46320] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "abiOcph7U84ydzcrcncQrAAAAAU"]
[Tue Mar 17 07:12:52.949188 2026] [:error] [pid 22541:tid 22563] [client 95.91.110.210:46332] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "abiOdKS6JNY1-CTsTA8IlQAAARE"]
[Tue Mar 17 07:13:24.176676 2026] [:error] [pid 22541:tid 22552] [client 95.91.110.210:46336] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abiOlKS6JNY1-CTsTA8I9AAAAQY"]
[Tue Mar 17 07:13:26.679201 2026] [:error] [pid 46020:tid 46024] [client 95.91.110.210:6864] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "abiOln-nCcd9BdzGdLcefwAAAMI"]
[Tue Mar 17 07:13:29.208772 2026] [:error] [pid 46020:tid 46045] [client 95.91.110.210:6876] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "abiOmX-nCcd9BdzGdLceggAAANc"]
[Tue Mar 17 07:13:31.707272 2026] [:error] [pid 45916:tid 45974] [client 95.91.110.210:6878] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "abiOm7iS53PnClk_C9AE6wAAAEw"]
[Tue Mar 17 07:13:34.192065 2026] [:error] [pid 46020:tid 46024] [client 95.91.110.210:6882] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abiOnn-nCcd9BdzGdLceiQAAAMI"]
[Tue Mar 17 07:13:36.703481 2026] [:error] [pid 46020:tid 46042] [client 95.91.110.210:46092] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abiOoH-nCcd9BdzGdLcelAAAANQ"]
[Tue Mar 17 07:13:39.194703 2026] [:error] [pid 22541:tid 22570] [client 95.91.110.210:46102] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "abiOo6S6JNY1-CTsTA8JEgAAARg"]
[Tue Mar 17 07:13:41.690849 2026] [:error] [pid 46020:tid 46041] [client 95.91.110.210:46110] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abiOpX-nCcd9BdzGdLcepgAAANM"]
[Tue Mar 17 07:13:44.166068 2026] [:error] [pid 45917:tid 46012] [client 95.91.110.210:46120] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abiOqBMMhmeqL5fT_hegFAAAAJc"]
[Tue Mar 17 07:13:46.683597 2026] [:error] [pid 46020:tid 46022] [client 95.91.110.210:4940] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "abiOqn-nCcd9BdzGdLceswAAAMA"]
[Tue Mar 17 07:13:49.009063 2026] [:error] [pid 46020:tid 46026] [client 95.91.110.210:4952] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "abiOrX-nCcd9BdzGdLceugAAAMQ"]
[Tue Mar 17 07:13:51.519534 2026] [:error] [pid 22541:tid 22554] [client 95.91.110.210:4958] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "abiOr6S6JNY1-CTsTA8JIgAAAQg"]
[Tue Mar 17 07:13:54.014639 2026] [:error] [pid 22541:tid 22564] [client 95.91.110.210:4972] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abiOsqS6JNY1-CTsTA8JLwAAARI"]
[Tue Mar 17 07:13:56.510452 2026] [:error] [pid 46020:tid 46041] [client 95.91.110.210:60088] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "abiOtH-nCcd9BdzGdLce1wAAANM"]
[Tue Mar 17 07:13:58.985493 2026] [:error] [pid 45915:tid 45930] [client 95.91.110.210:60090] [client 95.91.110.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abiOtph7U84ydzcrcncQ8wAAAAE"]
[Tue Mar 17 07:56:16.600758 2026] [:error] [pid 45915:tid 45932] [client 185.223.152.141:24735] [client 185.223.152.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.141, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abiYoJh7U84ydzcrcncbKgAAAAM"]
[Tue Mar 17 08:03:15.225385 2026] [:error] [pid 15162:tid 15188] [client 45.130.203.187:56933] [client 45.130.203.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "abiaQ7kCW4399PnBfYSTLAAAAlU"]
[Tue Mar 17 08:13:35.037513 2026] [:error] [pid 45915:tid 45952] [client 43.130.67.33:37828] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abicr5h7U84ydzcrcncgsAAAABc"]
[Tue Mar 17 08:38:30.565598 2026] [:error] [pid 22541:tid 22562] [client 154.0.170.230:49144] [client 154.0.170.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.0.170.230, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abiihqS6JNY1-CTsTA80JwAAARA"]
[Tue Mar 17 08:38:32.113838 2026] [:error] [pid 22541:tid 22554] [client 154.0.170.230:49144] [client 154.0.170.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.0.170.230, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abiiiKS6JNY1-CTsTA80KgAAAQg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 09:02:02.849928 2026] [:error] [pid 14929:tid 14945] [client 185.59.44.60:54818] [client 185.59.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.59.44.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abioCvTUDuLSLjNnyauo3QAAAYk"]
[Tue Mar 17 09:02:04.673371 2026] [:error] [pid 14817:tid 14836] [client 195.201.133.39:59776] [client 195.201.133.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.201.133.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abioDOBWVgTpR3dKOgaxygAAAUo"]
[Tue Mar 17 09:02:05.447924 2026] [:error] [pid 14929:tid 14960] [client 185.59.44.60:55318] [client 185.59.44.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.59.44.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abioDfTUDuLSLjNnyauo4QAAAZg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 09:02:06.728379 2026] [:error] [pid 15013:tid 15094] [client 195.201.133.39:59790] [client 195.201.133.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.201.133.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abioDlZc-p7DonmJmm2kqwAAAhE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 10:38:06.026812 2026] [:error] [pid 45916:tid 45981] [client 141.98.11.117:60822] [client 141.98.11.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.117, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abi-jriS53PnClk_C9BpwwAAAFM"]
[Tue Mar 17 10:38:08.794969 2026] [:error] [pid 22541:tid 22556] [client 141.98.11.117:60830] [client 141.98.11.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.117, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abi-kKS6JNY1-CTsTA9eVwAAAQo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 10:40:44.446411 2026] [:error] [pid 45916:tid 45969] [client 45.55.241.92:58769] [client 45.55.241.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.55.241.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abi_LLiS53PnClk_C9BqqwAAAEc"]
[Tue Mar 17 10:40:47.072926 2026] [:error] [pid 15011:tid 15073] [client 45.55.241.92:55705] [client 45.55.241.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.55.241.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abi_L8NtgHlAHiPlDyodMgAAAdg"]
[Tue Mar 17 10:49:33.153174 2026] [:error] [pid 22541:tid 22552] [client 141.98.11.117:44898] [client 141.98.11.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.117, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abjBPaS6JNY1-CTsTA9hiQAAAQY"]
[Tue Mar 17 10:49:35.497027 2026] [:error] [pid 22541:tid 22553] [client 141.98.11.117:44900] [client 141.98.11.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.117, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abjBP6S6JNY1-CTsTA9hmAAAAQc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 10:51:54.377354 2026] [:error] [pid 45916:tid 45984] [client 185.223.152.123:61563] [client 185.223.152.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.123, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abjByriS53PnClk_C9Bx9QAAAFY"]
[Tue Mar 17 11:12:08.973295 2026] [:error] [pid 45916:tid 45972] [client 198.20.177.178:59532] [client 198.20.177.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.20.177.178, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abjGiLiS53PnClk_C9B-HQAAAEo"]
[Tue Mar 17 11:12:11.281280 2026] [:error] [pid 45916:tid 45985] [client 198.20.177.178:36520] [client 198.20.177.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.20.177.178, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abjGi7iS53PnClk_C9B-LAAAAFc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 11:29:58.310079 2026] [:error] [pid 22541:tid 22569] [client 103.255.134.61:57584] [client 103.255.134.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.255.134.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abjKtqS6JNY1-CTsTA9ugAAAARc"]
[Tue Mar 17 11:29:59.647694 2026] [:error] [pid 22541:tid 22547] [client 103.255.134.61:57584] [client 103.255.134.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.255.134.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abjKt6S6JNY1-CTsTA9uhQAAAQE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 17 13:18:58.866521 2026] [:error] [pid 45917:tid 45991] [client 45.177.223.65:53326] [client 45.177.223.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.177.223.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abjkQhMMhmeqL5fT_hfElAAAAII"]
[Tue Mar 17 13:21:46.526661 2026] [:error] [pid 45915:tid 45949] [client 223.228.254.6:50094] [client 223.228.254.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.254.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abjk6ph7U84ydzcrcney3gAAABQ"]
[Tue Mar 17 13:25:48.728764 2026] [:error] [pid 45916:tid 45981] [client 223.228.254.6:52634] [client 223.228.254.6] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abjl3LiS53PnClk_C9DXqQAAAFM"]
[Tue Mar 17 17:23:41.668468 2026] [:error] [pid 45915:tid 45930] [client 125.94.144.102:35791] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abkdnZh7U84ydzcrcncucgAAAAE"]
[Tue Mar 17 17:43:42.637961 2026] [:error] [pid 22541:tid 22561] [client 43.166.136.202:43168] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abkiTqS6JNY1-CTsTA_qmgAAAQ8"]
[Tue Mar 17 18:37:04.915121 2026] [:error] [pid 22541:tid 22551] [client 45.177.223.65:53369] [client 45.177.223.65] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abku0KS6JNY1-CTsTA_9pgAAAQU"]
[Tue Mar 17 18:38:43.518607 2026] [:error] [pid 22541:tid 22561] [client 45.177.223.65:52967] [client 45.177.223.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.177.223.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abkvM6S6JNY1-CTsTA_-KQAAAQ8"]
[Tue Mar 17 20:30:44.413341 2026] [:error] [pid 15013:tid 15081] [client 43.165.65.75:59336] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ablJdFZc-p7DonmJmm1DsgAAAgQ"]
[Tue Mar 17 22:24:20.305822 2026] [:error] [pid 14929:tid 14945] [client 187.62.156.204:30946] [client 187.62.156.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.62.156.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ablkFPTUDuLSLjNnyavpxQAAAYk"]
[Tue Mar 17 22:28:22.714868 2026] [:error] [pid 14817:tid 14832] [client 200.152.97.192:50611] [client 200.152.97.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.152.97.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abllBuBWVgTpR3dKOgZ9ywAAAUY"]
[Tue Mar 17 22:42:57.422449 2026] [:error] [pid 14817:tid 14828] [client 200.152.97.192:55475] [client 200.152.97.192] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abloceBWVgTpR3dKOgaCawAAAUI"]
[Tue Mar 17 22:44:03.910667 2026] [:error] [pid 45915:tid 45949] [client 187.62.156.204:29028] [client 187.62.156.204] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ablos5h7U84ydzcrcnfF9wAAABQ"]
[Tue Mar 17 22:44:16.052720 2026] [:error] [pid 46020:tid 46026] [client 200.152.97.192:56484] [client 200.152.97.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.152.97.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ablowH-nCcd9BdzGdLemOgAAAMQ"]
[Wed Mar 18 00:18:05.543824 2026] [autoindex:error] [pid 45916:tid 45971] [client 142.93.208.146:56589] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 18 00:35:22.171509 2026] [:error] [pid 41165:tid 41179] [client 54.38.38.130:58398] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1234%20superslot.aspx"] [unique_id "abmCynEHb7dujURQaRbNbAAAAQw"]
[Wed Mar 18 00:35:23.768964 2026] [:error] [pid 41165:tid 41185] [client 54.38.38.130:54462] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abmCy3EHb7dujURQaRbNcgAAARI"]
[Wed Mar 18 00:35:24.761901 2026] [:error] [pid 40715:tid 40959] [client 54.38.38.130:58400] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/168%20slot.aspx"] [unique_id "abmCzGcms0rUPgdkLiH4ywAAABU"]
[Wed Mar 18 00:35:26.286561 2026] [:error] [pid 40716:tid 41026] [client 54.38.38.130:55644] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "abmCzhR6i4ByUuhUBARi7AAAAEU"]
[Wed Mar 18 00:35:27.318416 2026] [:error] [pid 41165:tid 41171] [client 54.38.38.130:55654] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24th%20slot.aspx"] [unique_id "abmCz3EHb7dujURQaRbNewAAAQQ"]
[Wed Mar 18 00:35:28.805288 2026] [:error] [pid 40717:tid 41063] [client 54.38.38.130:55660] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "abmC0MR22EbC70ICesgDzwAAAIs"]
[Wed Mar 18 00:35:29.789007 2026] [:error] [pid 41165:tid 41189] [client 54.38.38.130:55670] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2xl%20slot.aspx"] [unique_id "abmC0XEHb7dujURQaRbNgwAAARY"]
[Wed Mar 18 00:35:31.208268 2026] [:error] [pid 41165:tid 41186] [client 54.38.38.130:55682] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "abmC03EHb7dujURQaRbNigAAARM"]
[Wed Mar 18 00:35:32.180384 2026] [:error] [pid 41165:tid 41181] [client 54.38.38.130:55698] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "abmC1HEHb7dujURQaRbNjAAAAQ4"]
[Wed Mar 18 00:35:33.662867 2026] [:error] [pid 41165:tid 41191] [client 54.38.38.130:55714] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "abmC1XEHb7dujURQaRbNkQAAARg"]
[Wed Mar 18 00:35:34.664887 2026] [:error] [pid 41165:tid 41187] [client 54.38.38.130:55716] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/888%20slot.aspx"] [unique_id "abmC1nEHb7dujURQaRbNkgAAARQ"]
[Wed Mar 18 00:35:36.226110 2026] [:error] [pid 41165:tid 41189] [client 54.38.38.130:47820] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "abmC2HEHb7dujURQaRbNmAAAARY"]
[Wed Mar 18 00:35:37.184977 2026] [:error] [pid 40717:tid 41071] [client 54.38.38.130:47828] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "abmC2cR22EbC70ICesgD4gAAAJM"]
[Wed Mar 18 00:35:38.723889 2026] [:error] [pid 40715:tid 40945] [client 54.38.38.130:47838] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "abmC2mcms0rUPgdkLiH49wAAAAc"]
[Wed Mar 18 00:35:39.679418 2026] [:error] [pid 41165:tid 41168] [client 54.38.38.130:47850] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "abmC23EHb7dujURQaRbNogAAAQE"]
[Wed Mar 18 00:35:41.261721 2026] [:error] [pid 40715:tid 40961] [client 54.38.38.130:47866] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "abmC3Wcms0rUPgdkLiH5AQAAABc"]
[Wed Mar 18 00:35:42.186790 2026] [:error] [pid 40715:tid 40944] [client 54.38.38.130:47878] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "abmC3mcms0rUPgdkLiH5AgAAAAY"]
[Wed Mar 18 00:35:43.782111 2026] [:error] [pid 40716:tid 41026] [client 54.38.38.130:47886] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "abmC3xR6i4ByUuhUBARjAgAAAEU"]
[Wed Mar 18 00:35:44.575825 2026] [:error] [pid 41165:tid 41170] [client 54.38.38.130:47892] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "abmC4HEHb7dujURQaRbNwgAAAQM"]
[Wed Mar 18 00:35:46.494125 2026] [:error] [pid 41165:tid 41174] [client 54.38.38.130:43368] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "abmC4nEHb7dujURQaRbNzgAAAQc"]
[Wed Mar 18 00:35:47.115216 2026] [:error] [pid 41165:tid 41170] [client 54.38.38.130:43384] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "abmC43EHb7dujURQaRbN0QAAAQM"]
[Wed Mar 18 00:35:49.077645 2026] [:error] [pid 41165:tid 41172] [client 54.38.38.130:43390] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "abmC5XEHb7dujURQaRbN3AAAAQU"]
[Wed Mar 18 00:35:49.551401 2026] [:error] [pid 41165:tid 41174] [client 54.38.38.130:43402] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "abmC5XEHb7dujURQaRbN3wAAAQc"]
[Wed Mar 18 00:35:51.438072 2026] [:error] [pid 41165:tid 41190] [client 54.38.38.130:43418] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "abmC53EHb7dujURQaRbN5gAAARc"]
[Wed Mar 18 00:35:52.038742 2026] [:error] [pid 41165:tid 41174] [client 54.38.38.130:43432] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "abmC6HEHb7dujURQaRbN6gAAAQc"]
[Wed Mar 18 00:35:53.894862 2026] [:error] [pid 41165:tid 41167] [client 54.38.38.130:43438] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "abmC6XEHb7dujURQaRbN9gAAAQA"]
[Wed Mar 18 00:35:54.450711 2026] [:error] [pid 41165:tid 41172] [client 54.38.38.130:43450] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "abmC6nEHb7dujURQaRbN-gAAAQU"]
[Wed Mar 18 00:35:56.311995 2026] [:error] [pid 41165:tid 41189] [client 54.38.38.130:54548] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abmC7HEHb7dujURQaRbOAwAAARY"]
[Wed Mar 18 00:35:56.800525 2026] [:error] [pid 40715:tid 40958] [client 54.38.38.130:54560] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "abmC7Gcms0rUPgdkLiH5HwAAABQ"]
[Wed Mar 18 00:35:58.825677 2026] [:error] [pid 41165:tid 41168] [client 54.38.38.130:54566] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "abmC7nEHb7dujURQaRbODAAAAQE"]
[Wed Mar 18 00:35:59.246554 2026] [:error] [pid 40717:tid 41072] [client 54.38.38.130:54570] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "abmC78R22EbC70ICesgEAwAAAJQ"]
[Wed Mar 18 00:36:01.199499 2026] [:error] [pid 40716:tid 41026] [client 54.38.38.130:54586] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "abmC8RR6i4ByUuhUBARjHQAAAEU"]
[Wed Mar 18 00:36:01.736439 2026] [:error] [pid 40717:tid 41065] [client 54.38.38.130:54588] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "abmC8cR22EbC70ICesgECgAAAI0"]
[Wed Mar 18 00:36:03.579845 2026] [:error] [pid 41165:tid 41174] [client 54.38.38.130:54598] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abmC83EHb7dujURQaRbOHgAAAQc"]
[Wed Mar 18 00:36:04.100400 2026] [:error] [pid 40715:tid 40954] [client 54.38.38.130:54602] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "abmC9Gcms0rUPgdkLiH5KgAAABA"]
[Wed Mar 18 00:36:05.942488 2026] [:error] [pid 40715:tid 40948] [client 54.38.38.130:50328] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abmC9Wcms0rUPgdkLiH5MAAAAAo"]
[Wed Mar 18 00:36:06.564018 2026] [:error] [pid 41165:tid 41177] [client 54.38.38.130:50330] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "abmC9nEHb7dujURQaRbOIwAAAQo"]
[Wed Mar 18 00:36:08.347979 2026] [:error] [pid 41165:tid 41187] [client 54.38.38.130:50338] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abmC-HEHb7dujURQaRbOMgAAARQ"]
[Wed Mar 18 00:36:09.184401 2026] [:error] [pid 41165:tid 41190] [client 54.38.38.130:50352] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "abmC-XEHb7dujURQaRbONQAAARc"]
[Wed Mar 18 00:36:10.922040 2026] [:error] [pid 40715:tid 40955] [client 54.38.38.130:50358] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "abmC-mcms0rUPgdkLiH5PwAAABE"]
[Wed Mar 18 00:36:11.596466 2026] [:error] [pid 40717:tid 41052] [client 54.38.38.130:50368] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "abmC-8R22EbC70ICesgEJAAAAIE"]
[Wed Mar 18 00:36:13.373281 2026] [:error] [pid 40717:tid 41061] [client 54.38.38.130:50382] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "abmC_cR22EbC70ICesgEKAAAAIk"]
[Wed Mar 18 00:36:14.191351 2026] [:error] [pid 40717:tid 41064] [client 54.38.38.130:50398] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "abmC_sR22EbC70ICesgEKgAAAIw"]
[Wed Mar 18 00:36:15.856050 2026] [:error] [pid 41165:tid 41170] [client 54.38.38.130:40946] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "abmC_3EHb7dujURQaRbOTgAAAQM"]
[Wed Mar 18 00:36:16.731938 2026] [:error] [pid 41165:tid 41171] [client 54.38.38.130:40948] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abmDAHEHb7dujURQaRbOVgAAAQQ"]
[Wed Mar 18 00:36:18.458533 2026] [:error] [pid 40715:tid 40946] [client 54.38.38.130:40954] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "abmDAmcms0rUPgdkLiH5VwAAAAg"]
[Wed Mar 18 00:36:19.169038 2026] [:error] [pid 40715:tid 40941] [client 54.38.38.130:40966] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "abmDA2cms0rUPgdkLiH5WgAAAAM"]
[Wed Mar 18 00:36:20.938554 2026] [:error] [pid 40716:tid 41045] [client 54.38.38.130:40978] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abmDBBR6i4ByUuhUBARjQAAAAFg"]
[Wed Mar 18 00:36:37.017078 2026] [:error] [pid 40716:tid 41045] [client 54.38.38.130:40992] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "abmDFRR6i4ByUuhUBARjYAAAAFg"]
[Wed Mar 18 00:36:38.473475 2026] [:error] [pid 41165:tid 41179] [client 54.38.38.130:40982] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "abmDFnEHb7dujURQaRbOqgAAAQw"]
[Wed Mar 18 00:36:39.384027 2026] [:error] [pid 41165:tid 41186] [client 54.38.38.130:40828] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abmDF3EHb7dujURQaRbOrwAAARM"]
[Wed Mar 18 00:36:41.071890 2026] [:error] [pid 40716:tid 41033] [client 54.38.38.130:40832] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "abmDGRR6i4ByUuhUBARjZwAAAEw"]
[Wed Mar 18 00:36:41.838449 2026] [:error] [pid 40716:tid 41025] [client 54.38.38.130:40842] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "abmDGRR6i4ByUuhUBARjaQAAAEQ"]
[Wed Mar 18 00:36:43.622861 2026] [:error] [pid 40717:tid 41063] [client 54.38.38.130:40854] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abmDG8R22EbC70ICesgEaQAAAIs"]
[Wed Mar 18 00:36:44.257569 2026] [:error] [pid 41165:tid 41188] [client 54.38.38.130:40868] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abmDHHEHb7dujURQaRbOvgAAARU"]
[Wed Mar 18 00:36:46.090094 2026] [:error] [pid 40717:tid 41066] [client 54.38.38.130:55254] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "abmDHsR22EbC70ICesgEcwAAAI4"]
[Wed Mar 18 00:36:46.799696 2026] [:error] [pid 40715:tid 40939] [client 54.38.38.130:55266] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "abmDHmcms0rUPgdkLiH5uwAAAAE"]
[Wed Mar 18 00:36:48.698354 2026] [:error] [pid 40715:tid 40962] [client 54.38.38.130:55282] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "abmDIGcms0rUPgdkLiH5vwAAABg"]
[Wed Mar 18 00:36:49.139406 2026] [:error] [pid 41165:tid 41176] [client 54.38.38.130:55298] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "abmDIXEHb7dujURQaRbOzQAAAQk"]
[Wed Mar 18 00:36:51.262142 2026] [:error] [pid 41165:tid 41190] [client 54.38.38.130:55312] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "abmDI3EHb7dujURQaRbO2wAAARc"]
[Wed Mar 18 00:36:51.676376 2026] [:error] [pid 40716:tid 41030] [client 54.38.38.130:55314] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "abmDIxR6i4ByUuhUBARjhAAAAEk"]
[Wed Mar 18 00:36:53.864472 2026] [:error] [pid 41165:tid 41167] [client 54.38.38.130:55326] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "abmDJXEHb7dujURQaRbO3wAAAQA"]
[Wed Mar 18 00:36:54.235205 2026] [:error] [pid 41165:tid 41183] [client 54.38.38.130:55336] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abmDJnEHb7dujURQaRbO5AAAARA"]
[Wed Mar 18 00:36:56.244390 2026] [:error] [pid 40715:tid 40959] [client 54.38.38.130:38832] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "abmDKGcms0rUPgdkLiH5zgAAABU"]
[Wed Mar 18 00:36:56.582862 2026] [:error] [pid 41165:tid 41188] [client 54.38.38.130:38840] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abmDKHEHb7dujURQaRbO9wAAARU"]
[Wed Mar 18 00:36:58.858117 2026] [:error] [pid 40717:tid 41069] [client 54.38.38.130:38852] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "abmDKsR22EbC70ICesgEnAAAAJE"]
[Wed Mar 18 00:36:59.124919 2026] [:error] [pid 41165:tid 41185] [client 54.38.38.130:38860] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abmDK3EHb7dujURQaRbO_wAAARI"]
[Wed Mar 18 00:37:01.354255 2026] [:error] [pid 40715:tid 40945] [client 54.38.38.130:38876] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "abmDLWcms0rUPgdkLiH54QAAAAc"]
[Wed Mar 18 00:37:01.643534 2026] [:error] [pid 40715:tid 40940] [client 54.38.38.130:38886] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abmDLWcms0rUPgdkLiH54wAAAAI"]
[Wed Mar 18 00:37:03.833050 2026] [:error] [pid 40716:tid 41026] [client 54.38.38.130:38898] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "abmDLxR6i4ByUuhUBARjjwAAAEU"]
[Wed Mar 18 00:37:04.081093 2026] [:error] [pid 40715:tid 40948] [client 54.38.38.130:38902] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abmDMGcms0rUPgdkLiH57AAAAAo"]
[Wed Mar 18 00:37:06.424515 2026] [:error] [pid 41165:tid 41182] [client 54.38.38.130:40268] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abmDMnEHb7dujURQaRbPJQAAAQ8"]
[Wed Mar 18 00:37:06.469773 2026] [:error] [pid 40715:tid 40952] [client 54.38.38.130:40252] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abmDMmcms0rUPgdkLiH58gAAAA4"]
[Wed Mar 18 00:37:08.953978 2026] [:error] [pid 41165:tid 41177] [client 54.38.38.130:40274] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abmDNHEHb7dujURQaRbPMQAAAQo"]
[Wed Mar 18 00:37:09.026360 2026] [:error] [pid 40717:tid 41055] [client 54.38.38.130:40278] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "abmDNcR22EbC70ICesgEvQAAAIQ"]
[Wed Mar 18 00:37:11.471523 2026] [:error] [pid 41165:tid 41184] [client 54.38.38.130:40280] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "abmDN3EHb7dujURQaRbPOgAAARE"]
[Wed Mar 18 00:37:11.528337 2026] [:error] [pid 40716:tid 41026] [client 54.38.38.130:40288] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "abmDNxR6i4ByUuhUBARjnwAAAEU"]
[Wed Mar 18 00:37:13.879504 2026] [:error] [pid 41165:tid 41172] [client 54.38.38.130:40290] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "abmDOXEHb7dujURQaRbPRQAAAQU"]
[Wed Mar 18 00:37:14.069116 2026] [:error] [pid 40715:tid 40940] [client 54.38.38.130:40296] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "abmDOmcms0rUPgdkLiH59AAAAAI"]
[Wed Mar 18 00:37:16.428557 2026] [:error] [pid 40715:tid 40957] [client 54.38.38.130:37650] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abmDPGcms0rUPgdkLiH5-gAAABM"]
[Wed Mar 18 00:37:16.472133 2026] [:error] [pid 40715:tid 40952] [client 54.38.38.130:37662] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "abmDPGcms0rUPgdkLiH5_QAAAA4"]
[Wed Mar 18 00:37:18.946019 2026] [:error] [pid 40717:tid 41055] [client 54.38.38.130:37672] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "abmDPsR22EbC70ICesgE4AAAAIQ"]
[Wed Mar 18 00:37:19.028861 2026] [:error] [pid 40717:tid 41075] [client 54.38.38.130:37688] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abmDP8R22EbC70ICesgE4gAAAJc"]
[Wed Mar 18 00:37:21.430935 2026] [:error] [pid 40717:tid 41053] [client 54.38.38.130:37704] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "abmDQcR22EbC70ICesgE7QAAAII"]
[Wed Mar 18 00:37:21.593606 2026] [:error] [pid 41165:tid 41186] [client 54.38.38.130:37714] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abmDQXEHb7dujURQaRbPYAAAARM"]
[Wed Mar 18 00:37:23.939319 2026] [:error] [pid 41165:tid 41174] [client 54.38.38.130:37730] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abmDQ3EHb7dujURQaRbPbQAAAQc"]
[Wed Mar 18 00:37:24.085113 2026] [:error] [pid 41165:tid 41186] [client 54.38.38.130:37746] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abmDRHEHb7dujURQaRbPbgAAARM"]
[Wed Mar 18 00:37:26.333820 2026] [:error] [pid 40715:tid 40959] [client 54.38.38.130:48828] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "abmDRmcms0rUPgdkLiH6IAAAABU"]
[Wed Mar 18 00:37:26.590155 2026] [:error] [pid 41165:tid 41190] [client 54.38.38.130:48838] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abmDRnEHb7dujURQaRbPcwAAARc"]
[Wed Mar 18 00:37:28.854580 2026] [:error] [pid 41165:tid 41173] [client 54.38.38.130:48850] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "abmDSHEHb7dujURQaRbPegAAAQY"]
[Wed Mar 18 00:37:28.991997 2026] [:error] [pid 41165:tid 41183] [client 54.38.38.130:48852] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abmDSHEHb7dujURQaRbPfQAAARA"]
[Wed Mar 18 00:37:31.197845 2026] [:error] [pid 41165:tid 41185] [client 54.38.38.130:48862] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "abmDS3EHb7dujURQaRbPjQAAARI"]
[Wed Mar 18 00:37:31.594098 2026] [:error] [pid 40716:tid 41028] [client 54.38.38.130:48868] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abmDSxR6i4ByUuhUBARjwgAAAEc"]
[Wed Mar 18 00:37:33.741764 2026] [:error] [pid 41165:tid 41178] [client 54.38.38.130:48870] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "abmDTXEHb7dujURQaRbPngAAAQs"]
[Wed Mar 18 00:37:33.994854 2026] [:error] [pid 40717:tid 41054] [client 54.38.38.130:48878] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "abmDTcR22EbC70ICesgFCgAAAIM"]
[Wed Mar 18 00:37:52.926976 2026] [:error] [pid 40715:tid 40954] [client 54.38.38.130:46944] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "abmDYGcms0rUPgdkLiH6ewAAABA"]
[Wed Mar 18 00:37:53.262719 2026] [:error] [pid 40715:tid 40941] [client 54.38.38.130:46928] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abmDYWcms0rUPgdkLiH6fQAAAAM"]
[Wed Mar 18 00:37:55.277443 2026] [:error] [pid 40715:tid 40943] [client 54.38.38.130:59732] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "abmDY2cms0rUPgdkLiH6fwAAAAU"]
[Wed Mar 18 00:37:55.738713 2026] [:error] [pid 40715:tid 40954] [client 54.38.38.130:59744] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abmDY2cms0rUPgdkLiH6ggAAABA"]
[Wed Mar 18 00:37:56.027589 2026] [:error] [pid 40715:tid 40955] [client 54.38.38.130:46430] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "abmDZGcms0rUPgdkLiH6hAAAABE"]
[Wed Mar 18 00:37:57.688979 2026] [:error] [pid 41165:tid 41187] [client 54.38.38.130:46444] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "abmDZXEHb7dujURQaRbQMQAAARQ"]
[Wed Mar 18 00:37:58.061504 2026] [:error] [pid 40716:tid 41026] [client 54.38.38.130:46456] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abmDZhR6i4ByUuhUBARj8AAAAEU"]
[Wed Mar 18 00:38:00.262814 2026] [:error] [pid 40717:tid 41053] [client 54.38.38.130:46462] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "abmDaMR22EbC70ICesgFSgAAAII"]
[Wed Mar 18 00:38:00.417743 2026] [:error] [pid 40717:tid 41075] [client 54.38.38.130:46458] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "abmDaMR22EbC70ICesgFSwAAAJc"]
[Wed Mar 18 00:38:00.586290 2026] [:error] [pid 40715:tid 40959] [client 54.38.38.130:46472] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abmDaGcms0rUPgdkLiH6kAAAABU"]
[Wed Mar 18 00:38:02.760801 2026] [:error] [pid 40715:tid 40951] [client 54.38.38.130:46486] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "abmDamcms0rUPgdkLiH6mwAAAA0"]
[Wed Mar 18 00:38:03.100915 2026] [:error] [pid 41165:tid 41178] [client 54.38.38.130:46498] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abmDa3EHb7dujURQaRbQPgAAAQs"]
[Wed Mar 18 00:38:05.299631 2026] [:error] [pid 40715:tid 40943] [client 54.38.38.130:46504] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abmDbWcms0rUPgdkLiH6ngAAAAU"]
[Wed Mar 18 00:38:05.477103 2026] [:error] [pid 40716:tid 41022] [client 54.38.38.130:46506] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abmDbRR6i4ByUuhUBARj9wAAAEE"]
[Wed Mar 18 00:38:07.774878 2026] [:error] [pid 40715:tid 40958] [client 54.38.38.130:56668] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "abmDb2cms0rUPgdkLiH6nwAAABQ"]
[Wed Mar 18 00:38:08.019006 2026] [:error] [pid 40717:tid 41076] [client 54.38.38.130:56676] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abmDcMR22EbC70ICesgFWgAAAJg"]
[Wed Mar 18 00:38:10.177283 2026] [:error] [pid 40717:tid 41073] [client 54.38.38.130:56690] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "abmDcsR22EbC70ICesgFXwAAAJU"]
[Wed Mar 18 00:38:10.336840 2026] [:error] [pid 41165:tid 41181] [client 54.38.38.130:56694] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abmDcnEHb7dujURQaRbQWAAAAQ4"]
[Wed Mar 18 00:38:12.695291 2026] [:error] [pid 40717:tid 41062] [client 54.38.38.130:56702] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abmDdMR22EbC70ICesgFaQAAAIo"]
[Wed Mar 18 00:38:12.935306 2026] [:error] [pid 41165:tid 41179] [client 54.38.38.130:56704] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "abmDdHEHb7dujURQaRbQXwAAAQw"]
[Wed Mar 18 00:38:15.238912 2026] [:error] [pid 40716:tid 41028] [client 54.38.38.130:56716] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abmDdxR6i4ByUuhUBARkAwAAAEc"]
[Wed Mar 18 00:38:15.250484 2026] [:error] [pid 40717:tid 41063] [client 54.38.38.130:56732] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abmDd8R22EbC70ICesgFbAAAAIs"]
[Wed Mar 18 00:38:17.639099 2026] [:error] [pid 40716:tid 41040] [client 54.38.38.130:59250] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "abmDeRR6i4ByUuhUBARkBgAAAFM"]
[Wed Mar 18 00:38:17.779364 2026] [:error] [pid 40716:tid 41042] [client 54.38.38.130:59264] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abmDeRR6i4ByUuhUBARkBwAAAFU"]
[Wed Mar 18 00:38:19.965221 2026] [:error] [pid 40715:tid 40958] [client 54.38.38.130:59280] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abmDe2cms0rUPgdkLiH6rQAAABQ"]
[Wed Mar 18 00:38:20.126996 2026] [:error] [pid 40715:tid 40942] [client 54.38.38.130:59294] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "abmDfGcms0rUPgdkLiH6rgAAAAQ"]
[Wed Mar 18 00:38:22.468908 2026] [:error] [pid 40717:tid 41052] [client 54.38.38.130:59308] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abmDfsR22EbC70ICesgFfQAAAIE"]
[Wed Mar 18 00:38:22.676888 2026] [:error] [pid 40716:tid 41045] [client 54.38.38.130:59312] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "abmDfhR6i4ByUuhUBARkDAAAAFg"]
[Wed Mar 18 00:38:25.018140 2026] [:error] [pid 40716:tid 41042] [client 54.38.38.130:59318] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abmDgRR6i4ByUuhUBARkEgAAAFU"]
[Wed Mar 18 00:38:25.208419 2026] [:error] [pid 40716:tid 41030] [client 54.38.38.130:59332] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "abmDgRR6i4ByUuhUBARkFgAAAEk"]
[Wed Mar 18 00:38:27.505250 2026] [:error] [pid 40717:tid 41075] [client 54.38.38.130:51988] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abmDg8R22EbC70ICesgFhQAAAJc"]
[Wed Mar 18 00:38:27.731490 2026] [:error] [pid 40717:tid 41064] [client 54.38.38.130:52004] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abmDg8R22EbC70ICesgFhgAAAIw"]
[Wed Mar 18 00:38:30.075029 2026] [:error] [pid 41165:tid 41168] [client 54.38.38.130:52012] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abmDhnEHb7dujURQaRbQkgAAAQE"]
[Wed Mar 18 00:38:30.232023 2026] [:error] [pid 41165:tid 41188] [client 54.38.38.130:52024] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abmDhnEHb7dujURQaRbQlAAAARU"]
[Wed Mar 18 00:38:32.426896 2026] [:error] [pid 40715:tid 40959] [client 54.38.38.130:52026] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abmDiGcms0rUPgdkLiH61QAAABU"]
[Wed Mar 18 00:38:32.736007 2026] [:error] [pid 41165:tid 41186] [client 54.38.38.130:52032] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "abmDiHEHb7dujURQaRbQmwAAARM"]
[Wed Mar 18 00:38:34.873980 2026] [:error] [pid 40717:tid 41057] [client 54.38.38.130:52048] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "abmDisR22EbC70ICesgFlAAAAIY"]
[Wed Mar 18 00:38:35.261174 2026] [:error] [pid 40715:tid 40955] [client 54.38.38.130:52052] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abmDi2cms0rUPgdkLiH63AAAABE"]
[Wed Mar 18 00:38:37.350411 2026] [:error] [pid 40717:tid 41062] [client 54.38.38.130:41526] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "abmDjcR22EbC70ICesgFoAAAAIo"]
[Wed Mar 18 00:38:37.748223 2026] [:error] [pid 41165:tid 41187] [client 54.38.38.130:41530] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abmDjXEHb7dujURQaRbQrgAAARQ"]
[Wed Mar 18 00:38:39.835073 2026] [:error] [pid 40717:tid 41053] [client 54.38.38.130:41536] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "abmDj8R22EbC70ICesgFpAAAAII"]
[Wed Mar 18 00:38:40.072837 2026] [:error] [pid 41165:tid 41177] [client 54.38.38.130:41550] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "abmDkHEHb7dujURQaRbQtwAAAQo"]
[Wed Mar 18 00:38:42.403077 2026] [:error] [pid 41165:tid 41189] [client 54.38.38.130:41564] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "abmDknEHb7dujURQaRbQwgAAARY"]
[Wed Mar 18 00:38:42.503334 2026] [:error] [pid 41165:tid 41172] [client 54.38.38.130:41572] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "abmDknEHb7dujURQaRbQyAAAAQU"]
[Wed Mar 18 00:38:44.903157 2026] [:error] [pid 40717:tid 41064] [client 54.38.38.130:41586] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "abmDlMR22EbC70ICesgFsAAAAIw"]
[Wed Mar 18 00:38:45.025250 2026] [:error] [pid 40716:tid 41030] [client 54.38.38.130:41600] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "abmDlRR6i4ByUuhUBARkOgAAAEk"]
[Wed Mar 18 00:38:47.377786 2026] [:error] [pid 40717:tid 41074] [client 54.38.38.130:47566] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abmDl8R22EbC70ICesgFvgAAAJY"]
[Wed Mar 18 00:38:47.509275 2026] [:error] [pid 40717:tid 41065] [client 54.38.38.130:47574] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "abmDl8R22EbC70ICesgFvwAAAI0"]
[Wed Mar 18 00:38:49.799134 2026] [:error] [pid 41165:tid 41180] [client 54.38.38.130:47588] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "abmDmXEHb7dujURQaRbQ2QAAAQ0"]
[Wed Mar 18 00:38:49.808382 2026] [:error] [pid 41165:tid 41189] [client 54.38.38.130:47598] [client 54.38.38.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abmDmXEHb7dujURQaRbQ2gAAARY"]
[Wed Mar 18 02:38:06.624530 2026] [:error] [pid 63612:tid 63637] [client 43.155.140.157:46480] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abmfju7vPBSR8vo387NNegAAAZc"]
[Wed Mar 18 04:35:29.949600 2026] [autoindex:error] [pid 13676:tid 13693] [client 20.78.145.167:18827] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/thickbox/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 04:35:31.065815 2026] [:error] [pid 13676:tid 13696] [client 20.78.145.167:18827] [client 20.78.145.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "abm7E2xDEHR5lvAEVIjMMAAAARI"]
[Wed Mar 18 04:35:31.549279 2026] [:error] [pid 44965:tid 45013] [client 20.78.145.167:19868] [client 20.78.145.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "abm7E6NZys-oG-hM22hrrwAAAEM"]
[Wed Mar 18 04:35:32.047053 2026] [:error] [pid 44966:tid 45043] [client 20.78.145.167:1448] [client 20.78.145.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "abm7FLHml2_01Zq4-12kfQAAAIY"]
[Wed Mar 18 04:35:32.531189 2026] [:error] [pid 44966:tid 45042] [client 20.78.145.167:19876] [client 20.78.145.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "abm7FLHml2_01Zq4-12kfwAAAIU"]
[Wed Mar 18 05:07:13.397816 2026] [autoindex:error] [pid 13716:tid 13720] [client 193.37.32.41:47307] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:07:13.503584 2026] [:error] [pid 13716:tid 13737] [client 193.37.32.41:47307] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/config.php"] [unique_id "abnCgWWKzQVHkZkUHaTWKQAAAVM"]
[Wed Mar 18 05:07:14.805516 2026] [:error] [pid 45069:tid 45082] [client 193.37.32.42:24965] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/header.php"] [unique_id "abnCgjNzUMBULZVa94zLZgAAAMs"]
[Wed Mar 18 05:07:14.992384 2026] [:error] [pid 13716:tid 13728] [client 193.37.32.16:52961] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/system_core.php"] [unique_id "abnCgmWKzQVHkZkUHaTWLQAAAUo"]
[Wed Mar 18 05:07:18.334177 2026] [:error] [pid 13716:tid 13726] [client 193.37.32.53:54341] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abnChmWKzQVHkZkUHaTWOAAAAUg"]
[Wed Mar 18 05:07:20.718222 2026] [:error] [pid 13716:tid 13722] [client 193.37.32.52:35227] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "abnCiGWKzQVHkZkUHaTWSwAAAUQ"]
[Wed Mar 18 05:07:24.297192 2026] [:error] [pid 44965:tid 45017] [client 193.37.32.32:51567] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/speculative8.php"] [unique_id "abnCjKNZys-oG-hM22hyYAAAAEc"]
[Wed Mar 18 05:07:34.225355 2026] [:error] [pid 44965:tid 45018] [client 193.37.32.6:65379] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "abnClqNZys-oG-hM22hyYgAAAEg"]
[Wed Mar 18 05:07:34.405547 2026] [access_compat:error] [pid 44965:tid 45024] [client 193.37.32.48:43459] AH01797: client denied by server configuration: /home/hbtwocom/public_html/wp-content/updraft/plugins-old
[Wed Mar 18 05:07:34.596087 2026] [autoindex:error] [pid 44965:tid 45020] [client 193.37.32.48:43459] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:07:35.773921 2026] [autoindex:error] [pid 44965:tid 45011] [client 193.37.32.48:43459] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:07:35.873386 2026] [autoindex:error] [pid 44965:tid 45016] [client 193.37.32.48:43459] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:07:50.110327 2026] [:error] [pid 44965:tid 45026] [client 193.37.32.48:43459] [client 193.37.32.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "abnCpqNZys-oG-hM22hyewAAAFA"]
[Wed Mar 18 05:07:51.415593 2026] [autoindex:error] [pid 44964:tid 44984] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:07:51.509217 2026] [autoindex:error] [pid 44964:tid 45002] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:07:51.705680 2026] [autoindex:error] [pid 44964:tid 44990] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/block-library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:07:52.830251 2026] [autoindex:error] [pid 44964:tid 44997] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:07:54.956404 2026] [autoindex:error] [pid 44964:tid 44982] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:07:57.035682 2026] [autoindex:error] [pid 44964:tid 44993] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:07:57.130354 2026] [autoindex:error] [pid 44964:tid 44990] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:02.919679 2026] [autoindex:error] [pid 44964:tid 45001] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:03.017052 2026] [autoindex:error] [pid 44964:tid 44989] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/mediaelement/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:03.115108 2026] [autoindex:error] [pid 44964:tid 44999] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:03.208967 2026] [autoindex:error] [pid 44964:tid 44985] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:03.308057 2026] [autoindex:error] [pid 44964:tid 45002] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:03.405478 2026] [autoindex:error] [pid 44964:tid 44996] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:03.508723 2026] [autoindex:error] [pid 44964:tid 44993] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:03.608968 2026] [autoindex:error] [pid 44964:tid 44990] [client 193.37.32.34:35543] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:04.792149 2026] [:error] [pid 44964:tid 44998] [client 193.37.32.34:35543] [client 193.37.32.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/private/"] [unique_id "abnCtMvMufm4ayzOOhBHgQAAABQ"]
[Wed Mar 18 05:08:10.808722 2026] [:error] [pid 44964:tid 44996] [client 193.37.32.26:43573] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "abnCusvMufm4ayzOOhBHjAAAABI"]
[Wed Mar 18 05:08:10.990686 2026] [autoindex:error] [pid 44965:tid 45018] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:14.927397 2026] [autoindex:error] [pid 44965:tid 45027] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:16.099109 2026] [autoindex:error] [pid 44965:tid 45010] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:16.193576 2026] [autoindex:error] [pid 44965:tid 45013] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comment-content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:19.907756 2026] [autoindex:error] [pid 44965:tid 45010] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:20.006049 2026] [autoindex:error] [pid 44965:tid 45022] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/nextpage/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:22.387019 2026] [autoindex:error] [pid 44965:tid 45017] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:22.497215 2026] [autoindex:error] [pid 44965:tid 45029] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:23.597345 2026] [autoindex:error] [pid 44965:tid 45025] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:23.691861 2026] [autoindex:error] [pid 44965:tid 45028] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/image/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:24.799674 2026] [autoindex:error] [pid 44965:tid 45033] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:24.894189 2026] [autoindex:error] [pid 44965:tid 45026] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:26.020873 2026] [autoindex:error] [pid 44965:tid 45031] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:27.103559 2026] [autoindex:error] [pid 44965:tid 45014] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:28.202193 2026] [autoindex:error] [pid 44965:tid 45013] [client 193.37.32.42:59387] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-comments-form/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:30.422287 2026] [:error] [pid 44965:tid 45011] [client 193.37.32.42:59387] [client 193.37.32.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/404.php"] [unique_id "abnCzqNZys-oG-hM22hytgAAAEE"]
[Wed Mar 18 05:08:34.895563 2026] [autoindex:error] [pid 45069:tid 45081] [client 193.37.32.17:51797] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:34.987642 2026] [:error] [pid 45069:tid 45077] [client 193.37.32.17:51797] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "abnC0jNzUMBULZVa94zL8gAAAMY"]
[Wed Mar 18 05:08:35.193612 2026] [:error] [pid 13676:tid 13695] [client 193.37.32.20:30679] [client 193.37.32.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah/function.php"] [unique_id "abnC02xDEHR5lvAEVIjWQgAAARE"]
[Wed Mar 18 05:08:35.391730 2026] [:error] [pid 13716:tid 13739] [client 193.37.32.34:45041] [client 193.37.32.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "abnC02WKzQVHkZkUHaTXNgAAAVU"]
[Wed Mar 18 05:08:35.591923 2026] [autoindex:error] [pid 44964:tid 44989] [client 193.37.32.18:27917] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/column/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:36.754104 2026] [autoindex:error] [pid 44964:tid 44991] [client 193.37.32.18:27917] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:36.848215 2026] [autoindex:error] [pid 44964:tid 44984] [client 193.37.32.18:27917] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:36.943629 2026] [autoindex:error] [pid 44964:tid 44994] [client 193.37.32.18:27917] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:40.891103 2026] [:error] [pid 44964:tid 45000] [client 193.37.32.18:27917] [client 193.37.32.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "abnC2MvMufm4ayzOOhBHqAAAABY"]
[Wed Mar 18 05:08:42.201338 2026] [autoindex:error] [pid 44964:tid 44999] [client 193.37.32.38:28131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:49.448725 2026] [autoindex:error] [pid 44964:tid 44990] [client 193.37.32.38:28131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:49.544839 2026] [autoindex:error] [pid 44964:tid 44984] [client 193.37.32.38:28131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyone/template-parts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:52.237605 2026] [autoindex:error] [pid 44964:tid 44992] [client 193.37.32.38:28131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:53.318626 2026] [autoindex:error] [pid 44964:tid 44998] [client 193.37.32.38:28131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/navigation-submenu/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:53.415252 2026] [autoindex:error] [pid 44964:tid 44978] [client 193.37.32.38:28131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:54.502411 2026] [autoindex:error] [pid 44964:tid 44980] [client 193.37.32.38:28131] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/video/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:55.593493 2026] [:error] [pid 44964:tid 44999] [client 193.37.32.38:28131] [client 193.37.32.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "abnC58vMufm4ayzOOhBHyAAAABU"]
[Wed Mar 18 05:08:56.839998 2026] [autoindex:error] [pid 45069:tid 45093] [client 193.37.32.10:26039] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:56.934042 2026] [autoindex:error] [pid 45069:tid 45076] [client 193.37.32.10:26039] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:57.028123 2026] [autoindex:error] [pid 45069:tid 45095] [client 193.37.32.10:26039] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:08:59.963399 2026] [autoindex:error] [pid 45069:tid 45085] [client 193.37.32.10:26039] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:00.078630 2026] [autoindex:error] [pid 45069:tid 45083] [client 193.37.32.10:26039] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:00.200272 2026] [:error] [pid 45069:tid 45086] [client 193.37.32.10:26039] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/k.php"] [unique_id "abnC7DNzUMBULZVa94zMIQAAAM8"]
[Wed Mar 18 05:09:01.571889 2026] [autoindex:error] [pid 45069:tid 45080] [client 193.37.32.12:39915] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:01.665302 2026] [autoindex:error] [pid 45069:tid 45078] [client 193.37.32.12:39915] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:02.754658 2026] [autoindex:error] [pid 45069:tid 45093] [client 193.37.32.12:39915] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:02.940028 2026] [autoindex:error] [pid 45069:tid 45085] [client 193.37.32.12:39915] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://hotbooksbookeeping2.com/wp-includes/js/dist
[Wed Mar 18 05:09:03.037631 2026] [autoindex:error] [pid 45069:tid 45083] [client 193.37.32.12:39915] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:07.415333 2026] [:error] [pid 45069:tid 45085] [client 193.37.32.12:39915] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "abnC8zNzUMBULZVa94zMVwAAAM4"]
[Wed Mar 18 05:09:07.596139 2026] [:error] [pid 44965:tid 45033] [client 193.37.32.22:33729] [client 193.37.32.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "abnC86NZys-oG-hM22hzBgAAAFc"]
[Wed Mar 18 05:09:08.927629 2026] [:error] [pid 13676:tid 13690] [client 193.37.32.35:33107] [client 193.37.32.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.37.32.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abnC9GxDEHR5lvAEVIjWcAAAAQw"]
[Wed Mar 18 05:09:11.932604 2026] [autoindex:error] [pid 13676:tid 13702] [client 193.37.32.35:33107] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:17.255610 2026] [autoindex:error] [pid 13676:tid 13688] [client 193.37.32.35:33107] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:17.353731 2026] [autoindex:error] [pid 13676:tid 13699] [client 193.37.32.35:33107] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/customize-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:17.448360 2026] [autoindex:error] [pid 13676:tid 13679] [client 193.37.32.35:33107] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:17.542951 2026] [autoindex:error] [pid 13676:tid 13696] [client 193.37.32.35:33107] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:21.421859 2026] [:error] [pid 13676:tid 13700] [client 193.37.32.35:33107] [client 193.37.32.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/block-bindings/"] [unique_id "abnDAWxDEHR5lvAEVIjWvAAAARY"]
[Wed Mar 18 05:09:29.640031 2026] [autoindex:error] [pid 13676:tid 13696] [client 193.37.32.26:34351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:38.294029 2026] [:error] [pid 13676:tid 13701] [client 193.37.32.26:34351] [client 193.37.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-signin.php"] [unique_id "abnDEmxDEHR5lvAEVIjW3AAAARc"]
[Wed Mar 18 05:09:48.385816 2026] [autoindex:error] [pid 13676:tid 13678] [client 193.37.32.49:45569] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:48.503271 2026] [autoindex:error] [pid 13676:tid 13693] [client 193.37.32.49:45569] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:49.775911 2026] [autoindex:error] [pid 13676:tid 13691] [client 193.37.32.49:45569] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/page-list/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:56.003718 2026] [autoindex:error] [pid 13676:tid 13686] [client 193.37.32.49:45569] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:59.821488 2026] [autoindex:error] [pid 13676:tid 13684] [client 193.37.32.49:45569] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:09:59.916081 2026] [autoindex:error] [pid 13676:tid 13693] [client 193.37.32.49:45569] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/commands/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:00.009461 2026] [autoindex:error] [pid 13676:tid 13688] [client 193.37.32.49:45569] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:00.105740 2026] [autoindex:error] [pid 13676:tid 13699] [client 193.37.32.49:45569] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query-pagination/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:00.201159 2026] [autoindex:error] [pid 13676:tid 13701] [client 193.37.32.49:45569] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/separator/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:01.309114 2026] [autoindex:error] [pid 13676:tid 13702] [client 193.37.32.49:45569] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:02.425773 2026] [:error] [pid 13676:tid 13681] [client 193.37.32.49:45569] [client 193.37.32.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/search/images/"] [unique_id "abnDKmxDEHR5lvAEVIjXGwAAAQM"]
[Wed Mar 18 05:10:02.606325 2026] [:error] [pid 44965:tid 45031] [client 193.37.32.19:37277] [client 193.37.32.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/search/images/"] [unique_id "abnDKqNZys-oG-hM22hzRwAAAFU"]
[Wed Mar 18 05:10:02.783939 2026] [:error] [pid 13716:tid 13733] [client 193.37.32.26:25951] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/themes.php"] [unique_id "abnDKmWKzQVHkZkUHaTYCQAAAU8"]
[Wed Mar 18 05:10:02.983960 2026] [autoindex:error] [pid 13716:tid 13738] [client 193.37.32.22:64665] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/freeform/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:03.076889 2026] [:error] [pid 13716:tid 13740] [client 193.37.32.22:64665] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abnDK2WKzQVHkZkUHaTYDQAAAVY"]
[Wed Mar 18 05:10:03.255374 2026] [:error] [pid 45069:tid 45095] [client 193.37.32.31:23809] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "abnDKzNzUMBULZVa94zMogAAANg"]
[Wed Mar 18 05:10:08.414495 2026] [autoindex:error] [pid 45069:tid 45078] [client 193.37.32.20:44697] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:10.537977 2026] [:error] [pid 45069:tid 45091] [client 193.37.32.20:44697] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "abnDMjNzUMBULZVa94zMrAAAANQ"]
[Wed Mar 18 05:10:10.726157 2026] [autoindex:error] [pid 45069:tid 45071] [client 193.37.32.40:54529] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:12.968615 2026] [autoindex:error] [pid 45069:tid 45076] [client 193.37.32.40:54529] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:13.062603 2026] [autoindex:error] [pid 45069:tid 45083] [client 193.37.32.40:54529] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:13.156488 2026] [autoindex:error] [pid 45069:tid 45078] [client 193.37.32.40:54529] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/script-modules/block-library/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:13.250004 2026] [autoindex:error] [pid 45069:tid 45095] [client 193.37.32.40:54529] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/tag-cloud/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:14.393462 2026] [:error] [pid 45069:tid 45084] [client 193.37.32.40:54529] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/about.php"] [unique_id "abnDNjNzUMBULZVa94zMvQAAAM0"]
[Wed Mar 18 05:10:14.585973 2026] [:error] [pid 44964:tid 44985] [client 193.37.32.38:38081] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "abnDNsvMufm4ayzOOhBIAgAAAAc"]
[Wed Mar 18 05:10:14.786451 2026] [:error] [pid 44965:tid 45021] [client 193.37.32.129:59419] [client 193.37.32.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abnDNqNZys-oG-hM22hzTgAAAEs"]
[Wed Mar 18 05:10:14.978860 2026] [access_compat:error] [pid 44966:tid 45049] [client 193.37.32.24:21371] AH01797: client denied by server configuration: /home/hbtwocom/public_html/wp-content/updraft/emptydir/
[Wed Mar 18 05:10:18.629007 2026] [autoindex:error] [pid 44966:tid 45060] [client 193.37.32.24:21371] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwenty/assets/fonts/inter/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:19.834209 2026] [autoindex:error] [pid 44966:tid 45045] [client 193.37.32.24:21371] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:19.923671 2026] [:error] [pid 44966:tid 45042] [client 193.37.32.24:21371] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "abnDO7Hml2_01Zq4-12t6wAAAIU"]
[Wed Mar 18 05:10:21.310883 2026] [autoindex:error] [pid 44964:tid 44987] [client 193.37.32.22:31291] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:23.611282 2026] [autoindex:error] [pid 44964:tid 44989] [client 193.37.32.22:31291] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:24.814281 2026] [:error] [pid 44964:tid 44993] [client 193.37.32.22:31291] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "abnDQMvMufm4ayzOOhBIDwAAAA8"]
[Wed Mar 18 05:10:26.135093 2026] [:error] [pid 45069:tid 45083] [client 193.37.32.17:55279] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "abnDQjNzUMBULZVa94zM5AAAAMw"]
[Wed Mar 18 05:10:26.325637 2026] [autoindex:error] [pid 13716:tid 13722] [client 193.37.32.43:61903] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:28.651394 2026] [:error] [pid 13716:tid 13733] [client 193.37.32.43:61903] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/chosen.php"] [unique_id "abnDRGWKzQVHkZkUHaTYVwAAAU8"]
[Wed Mar 18 05:10:30.978507 2026] [autoindex:error] [pid 45069:tid 45072] [client 193.37.32.10:38939] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:33.115395 2026] [autoindex:error] [pid 45069:tid 45074] [client 193.37.32.10:38939] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:36.346712 2026] [:error] [pid 45069:tid 45084] [client 193.37.32.10:38939] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/joker.php"] [unique_id "abnDTDNzUMBULZVa94zNAQAAAM0"]
[Wed Mar 18 05:10:47.597677 2026] [autoindex:error] [pid 45069:tid 45075] [client 193.37.32.25:29983] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comment-date/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:10:47.688295 2026] [:error] [pid 45069:tid 45080] [client 193.37.32.25:29983] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/joker.php"] [unique_id "abnDVzNzUMBULZVa94zNDQAAAMk"]
[Wed Mar 18 05:10:57.351399 2026] [:error] [pid 45069:tid 45095] [client 193.37.32.129:51289] [client 193.37.32.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/text.php"] [unique_id "abnDYTNzUMBULZVa94zNIgAAANg"]
[Wed Mar 18 05:10:58.617158 2026] [:error] [pid 45069:tid 45083] [client 193.37.32.6:21937] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "abnDYjNzUMBULZVa94zNJgAAAMw"]
[Wed Mar 18 05:10:58.794031 2026] [:error] [pid 44965:tid 45017] [client 193.37.32.32:46523] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mer_gagal.php"] [unique_id "abnDYqNZys-oG-hM22hzigAAAEc"]
[Wed Mar 18 05:11:02.392664 2026] [:error] [pid 45069:tid 45085] [client 193.37.32.36:63623] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "abnDZjNzUMBULZVa94zNMgAAAM4"]
[Wed Mar 18 05:11:02.597040 2026] [autoindex:error] [pid 44965:tid 45022] [client 193.37.32.16:41133] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/accordion/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:11:02.696550 2026] [autoindex:error] [pid 44965:tid 45029] [client 193.37.32.16:41133] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/table/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:11:02.796106 2026] [autoindex:error] [pid 44965:tid 45031] [client 193.37.32.16:41133] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/parts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:11:05.058662 2026] [autoindex:error] [pid 44965:tid 45014] [client 193.37.32.16:41133] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-post/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:11:10.230690 2026] [:error] [pid 44965:tid 45012] [client 193.37.32.16:41133] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-text-cron.php"] [unique_id "abnDbqNZys-oG-hM22hzrwAAAEI"]
[Wed Mar 18 05:11:11.516786 2026] [autoindex:error] [pid 44965:tid 45022] [client 193.37.32.17:33359] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:11:11.608522 2026] [autoindex:error] [pid 44965:tid 45010] [client 193.37.32.17:33359] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/home-link/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:11:13.813015 2026] [:error] [pid 44965:tid 45023] [client 193.37.32.17:33359] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/post-template-path.php"] [unique_id "abnDcaNZys-oG-hM22hzvQAAAE0"]
[Wed Mar 18 05:11:18.990109 2026] [:error] [pid 44964:tid 44992] [client 193.37.32.24:39297] [client 193.37.32.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/widgets-form-blocks-interface.php"] [unique_id "abnDdsvMufm4ayzOOhBILAAAAA4"]
[Wed Mar 18 05:11:19.181344 2026] [autoindex:error] [pid 44966:tid 45050] [client 193.37.32.6:36649] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-template/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:11:23.450722 2026] [:error] [pid 44966:tid 45043] [client 193.37.32.6:36649] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "abnDe7Hml2_01Zq4-12uSgAAAIY"]
[Wed Mar 18 05:11:27.787250 2026] [:error] [pid 44965:tid 45020] [client 193.37.32.48:25743] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/button/admiin.php"] [unique_id "abnDf6NZys-oG-hM22hz1AAAAEo"]
[Wed Mar 18 05:11:27.985747 2026] [autoindex:error] [pid 44965:tid 45030] [client 193.37.32.18:24825] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/src/Content/Type/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:11:38.532463 2026] [:error] [pid 44965:tid 45020] [client 193.37.32.18:24825] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/users.php"] [unique_id "abnDiqNZys-oG-hM22hz4wAAAEo"]
[Wed Mar 18 05:11:45.005251 2026] [autoindex:error] [pid 13716:tid 13724] [client 193.37.32.19:50771] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-next/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:11:45.107710 2026] [autoindex:error] [pid 13716:tid 13728] [client 193.37.32.19:50771] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:11:54.412310 2026] [:error] [pid 13716:tid 13729] [client 193.37.32.19:50771] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-cron.php"] [unique_id "abnDmmWKzQVHkZkUHaTZqwAAAUs"]
[Wed Mar 18 05:11:54.586957 2026] [:error] [pid 45069:tid 45085] [client 193.37.32.13:31517] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/api.php"] [unique_id "abnDmjNzUMBULZVa94zNkQAAAM4"]
[Wed Mar 18 05:11:54.781807 2026] [:error] [pid 13716:tid 13720] [client 193.37.32.38:30105] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/panel.php"] [unique_id "abnDmmWKzQVHkZkUHaTZrgAAAUI"]
[Wed Mar 18 05:11:56.106947 2026] [:error] [pid 45069:tid 45092] [client 193.37.32.25:55467] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/tx1.php"] [unique_id "abnDnDNzUMBULZVa94zNkwAAANU"]
[Wed Mar 18 05:11:57.419280 2026] [:error] [pid 13716:tid 13722] [client 193.37.32.52:56147] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "abnDnWWKzQVHkZkUHaTZvAAAAUQ"]
[Wed Mar 18 05:12:05.941731 2026] [:error] [pid 13716:tid 13726] [client 193.37.32.38:44281] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "abnDpWWKzQVHkZkUHaTZ7AAAAUg"]
[Wed Mar 18 05:12:14.456680 2026] [:error] [pid 13676:tid 13684] [client 193.37.32.40:42593] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/author-template-object.php"] [unique_id "abnDrmxDEHR5lvAEVIjYDgAAAQY"]
[Wed Mar 18 05:12:19.640021 2026] [:error] [pid 13716:tid 13723] [client 193.37.32.21:31589] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "abnDs2WKzQVHkZkUHaTaHgAAAUU"]
[Wed Mar 18 05:12:24.821371 2026] [:error] [pid 13716:tid 13733] [client 193.37.32.30:20499] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/site-title-restful.php"] [unique_id "abnDuGWKzQVHkZkUHaTaMAAAAU8"]
[Wed Mar 18 05:12:24.996377 2026] [:error] [pid 44966:tid 45040] [client 193.37.32.6:59807] [client 193.37.32.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.6, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/fonts/poppins/wp-login.php"] [unique_id "abnDuLHml2_01Zq4-12uggAAAIM"]
[Wed Mar 18 05:12:26.133423 2026] [:error] [pid 44966:tid 45049] [client 193.37.32.6:59807] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/goods.php"] [unique_id "abnDurHml2_01Zq4-12uhAAAAIw"]
[Wed Mar 18 05:12:33.443725 2026] [autoindex:error] [pid 13716:tid 13731] [client 193.37.32.48:61835] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comment-reply-link/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:12:33.537301 2026] [autoindex:error] [pid 13716:tid 13730] [client 193.37.32.48:61835] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pattern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:12:33.634024 2026] [autoindex:error] [pid 13716:tid 13732] [client 193.37.32.48:61835] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:12:33.728033 2026] [autoindex:error] [pid 13716:tid 13741] [client 193.37.32.48:61835] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/script-modules/block-library/navigation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:12:33.820774 2026] [autoindex:error] [pid 13716:tid 13737] [client 193.37.32.48:61835] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:12:34.959820 2026] [autoindex:error] [pid 13716:tid 13731] [client 193.37.32.48:61835] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/legacy-widget/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:12:36.992058 2026] [:error] [pid 13716:tid 13735] [client 193.37.32.48:61835] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "abnDxGWKzQVHkZkUHaTacgAAAVE"], referer: http://hotbooksbookeeping2.com/wp-includes/customize/wp-conflg.php?p=
[Wed Mar 18 05:12:37.217615 2026] [autoindex:error] [pid 13676:tid 13685] [client 193.37.32.46:29699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Mar 18 05:12:44.621831 2026] [:error] [pid 13676:tid 13680] [client 193.37.32.46:29699] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "abnDzGxDEHR5lvAEVIjYMAAAAQI"]
[Wed Mar 18 05:12:46.755909 2026] [proxy_fcgi:error] [pid 13676:tid 13679] [client 193.37.32.46:29699] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/hbtwocom/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/hbtwocom/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/hbtwocom/public_html/wp-settings.php on line 34PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHwp-includes/version.php' (include_path='.:') in /home/hbtwocom/public_html/wp-settings.php on line 34'
[Wed Mar 18 05:12:50.095156 2026] [:error] [pid 13676:tid 13688] [client 193.37.32.40:37331] [client 193.37.32.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/advanced-cache.php"] [unique_id "abnD0mxDEHR5lvAEVIjYOgAAAQo"]
[Wed Mar 18 05:12:51.425523 2026] [:error] [pid 44964:tid 44990] [client 193.37.32.7:35955] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-posts.php"] [unique_id "abnD08vMufm4ayzOOhBIbAAAAAw"]
[Wed Mar 18 05:12:51.606461 2026] [:error] [pid 13716:tid 13725] [client 193.37.32.40:32133] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/rss.php"] [unique_id "abnD02WKzQVHkZkUHaTaxAAAAUc"]
[Wed Mar 18 05:12:51.792370 2026] [:error] [pid 13716:tid 13733] [client 193.37.32.29:65097] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/search.php"] [unique_id "abnD02WKzQVHkZkUHaTaxQAAAU8"]
[Wed Mar 18 05:12:51.986379 2026] [:error] [pid 13676:tid 13678] [client 193.37.32.35:61233] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments.php"] [unique_id "abnD02xDEHR5lvAEVIjYPgAAAQA"]
[Wed Mar 18 05:12:55.278482 2026] [:error] [pid 44965:tid 45029] [client 193.37.32.17:43587] [client 193.37.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_login/tmpl/default.php"] [unique_id "abnD16NZys-oG-hM22h0KAAAAFM"]
[Wed Mar 18 05:13:06.846849 2026] [:error] [pid 45069:tid 45084] [client 193.37.32.9:53361] [client 193.37.32.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/configuration.php"] [unique_id "abnD4jNzUMBULZVa94zOUwAAAM0"]
[Wed Mar 18 05:13:18.606292 2026] [:error] [pid 44965:tid 45032] [client 193.37.32.11:52577] [client 193.37.32.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/storage/framework/cache/data/core.php"] [unique_id "abnD7qNZys-oG-hM22h0XQAAAFY"]
[Wed Mar 18 05:13:23.714395 2026] [:error] [pid 44966:tid 45052] [client 193.37.32.9:21879] [client 193.37.32.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/core.php"] [unique_id "abnD87Hml2_01Zq4-12u6QAAAI8"]
[Wed Mar 18 06:02:54.387147 2026] [:error] [pid 13716:tid 13738] [client 43.135.135.57:40812] [client 43.135.135.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abnPjmWKzQVHkZkUHaT7ZwAAAVQ"]
[Wed Mar 18 06:44:34.771626 2026] [:error] [pid 44966:tid 45058] [client 175.6.217.4:49924] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abnZUrHml2_01Zq4-13GsQAAAJU"]
[Wed Mar 18 07:33:33.681472 2026] [autoindex:error] [pid 44964:tid 44979] [client 20.2.141.62:56646] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 18 08:13:19.952275 2026] [:error] [pid 45069:tid 45091] [client 20.2.90.103:40922] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "abnuHzNzUMBULZVa94wfGwAAANQ"]
[Wed Mar 18 09:52:06.831780 2026] [:error] [pid 42871:tid 42938] [client 20.104.208.128:56323] [client 20.104.208.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aboFRmPUS0lM1M9nUaKMIgAAAJg"]
[Wed Mar 18 10:12:32.491185 2026] [:error] [pid 42970:tid 42975] [client 129.222.187.185:41626] [client 129.222.187.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.187.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aboKEI5YFUj4vBJI0KS8mAAAAMM"]
[Wed Mar 18 12:38:18.345383 2026] [:error] [pid 53755:tid 53775] [client 43.166.244.66:47144] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abosOqqw5ZSRshmIhWlw8wAAAVI"]
[Wed Mar 18 12:48:56.379867 2026] [:error] [pid 42871:tid 42915] [client 49.249.23.170:2212] [client 49.249.23.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.249.23.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abouuGPUS0lM1M9nUaKlUQAAAIE"]
[Wed Mar 18 12:57:23.259792 2026] [:error] [pid 31232:tid 31247] [client 49.249.23.170:18947] [client 49.249.23.170] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abows2X6HV7dqh3BQD3FNwAAAEw"]
[Wed Mar 18 12:58:36.042357 2026] [:error] [pid 42870:tid 42902] [client 49.249.23.170:35843] [client 49.249.23.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.249.23.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abow_J6axlAooiuYyUyttwAAABE"]
[Wed Mar 18 15:42:52.187820 2026] [:error] [pid 43009:tid 43017] [client 43.131.36.84:48826] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abpXfH8aUp4Sm6m3nmMPBAAAAQY"]
[Wed Mar 18 17:35:21.623847 2026] [:error] [pid 42870:tid 42887] [client 5.135.131.86:45166] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "abpx2Z6axlAooiuYyUwHQwAAAAI"]
[Wed Mar 18 17:35:23.942127 2026] [:error] [pid 53755:tid 53766] [client 5.135.131.86:52434] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "abpx26qw5ZSRshmIhWnehwAAAUk"]
[Wed Mar 18 17:35:26.465794 2026] [:error] [pid 53755:tid 53775] [client 5.135.131.86:52446] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "abpx3qqw5ZSRshmIhWnelQAAAVI"]
[Wed Mar 18 17:35:28.842883 2026] [:error] [pid 20667:tid 20688] [client 5.135.131.86:52462] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "abpx4JgyfQyvBhzza_1izAAAAZM"]
[Wed Mar 18 17:35:31.360026 2026] [:error] [pid 43009:tid 43034] [client 5.135.131.86:52472] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "abpx438aUp4Sm6m3nmMeaAAAARc"]
[Wed Mar 18 17:35:33.887900 2026] [:error] [pid 31232:tid 31239] [client 5.135.131.86:44862] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "abpx5WX6HV7dqh3BQD2bgAAAAEQ"]
[Wed Mar 18 17:35:36.404125 2026] [:error] [pid 53755:tid 53759] [client 5.135.131.86:44874] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "abpx6Kqw5ZSRshmIhWneoQAAAUI"]
[Wed Mar 18 17:35:38.904875 2026] [:error] [pid 42871:tid 42931] [client 5.135.131.86:44878] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "abpx6mPUS0lM1M9nUaIn5gAAAJE"]
[Wed Mar 18 17:35:41.413775 2026] [:error] [pid 31232:tid 31246] [client 5.135.131.86:44882] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "abpx7WX6HV7dqh3BQD2boAAAAEs"]
[Wed Mar 18 17:35:43.913548 2026] [:error] [pid 53755:tid 53758] [client 5.135.131.86:60524] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "abpx76qw5ZSRshmIhWnesAAAAUE"]
[Wed Mar 18 17:35:46.384846 2026] [:error] [pid 42871:tid 42927] [client 5.135.131.86:60540] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "abpx8mPUS0lM1M9nUaIn-QAAAI0"]
[Wed Mar 18 17:35:48.885744 2026] [:error] [pid 43009:tid 43030] [client 5.135.131.86:60542] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "abpx9H8aUp4Sm6m3nmMecwAAARM"]
[Wed Mar 18 17:35:51.372202 2026] [:error] [pid 31232:tid 31246] [client 5.135.131.86:60554] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "abpx92X6HV7dqh3BQD2buAAAAEs"]
[Wed Mar 18 17:35:53.743852 2026] [:error] [pid 42870:tid 42908] [client 5.135.131.86:47888] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "abpx-Z6axlAooiuYyUwHWQAAABc"]
[Wed Mar 18 17:35:56.226271 2026] [:error] [pid 31232:tid 31250] [client 5.135.131.86:47898] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "abpx_GX6HV7dqh3BQD2b2gAAAE8"]
[Wed Mar 18 17:35:58.708113 2026] [:error] [pid 53755:tid 53772] [client 5.135.131.86:47910] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abpx_qqw5ZSRshmIhWnewgAAAU8"]
[Wed Mar 18 17:36:01.191704 2026] [:error] [pid 20667:tid 20673] [client 5.135.131.86:47918] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abpyAZgyfQyvBhzza_1i8wAAAYQ"]
[Wed Mar 18 17:36:03.702993 2026] [:error] [pid 42870:tid 42906] [client 5.135.131.86:45844] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abpyA56axlAooiuYyUwHawAAABU"]
[Wed Mar 18 17:36:06.016730 2026] [:error] [pid 42871:tid 42925] [client 5.135.131.86:45848] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "abpyBmPUS0lM1M9nUaIoPQAAAIs"]
[Wed Mar 18 17:36:08.517639 2026] [:error] [pid 31232:tid 31250] [client 5.135.131.86:45852] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "abpyCGX6HV7dqh3BQD2b9gAAAE8"]
[Wed Mar 18 17:36:11.019723 2026] [:error] [pid 42871:tid 42917] [client 5.135.131.86:45868] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "abpyC2PUS0lM1M9nUaIoWQAAAIM"]
[Wed Mar 18 17:36:13.507004 2026] [:error] [pid 20667:tid 20692] [client 5.135.131.86:57858] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "abpyDZgyfQyvBhzza_1jAAAAAZc"]
[Wed Mar 18 17:36:15.830487 2026] [:error] [pid 53755:tid 53761] [client 5.135.131.86:57862] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "abpyD6qw5ZSRshmIhWne7wAAAUQ"]
[Wed Mar 18 17:36:18.326472 2026] [:error] [pid 42870:tid 42894] [client 5.135.131.86:57868] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "abpyEp6axlAooiuYyUwHiQAAAAk"]
[Wed Mar 18 17:36:49.332445 2026] [:error] [pid 42871:tid 42920] [client 5.135.131.86:57884] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "abpyMWPUS0lM1M9nUaIouAAAAIY"]
[Wed Mar 18 17:36:51.773351 2026] [:error] [pid 20667:tid 20671] [client 5.135.131.86:44970] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "abpyM5gyfQyvBhzza_1jNwAAAYI"]
[Wed Mar 18 17:36:54.237794 2026] [:error] [pid 42870:tid 42888] [client 5.135.131.86:58174] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "abpyNp6axlAooiuYyUwHvQAAAAM"]
[Wed Mar 18 17:36:56.706081 2026] [:error] [pid 43009:tid 43026] [client 5.135.131.86:58180] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "abpyOH8aUp4Sm6m3nmMeqAAAAQ8"]
[Wed Mar 18 17:36:59.167468 2026] [:error] [pid 53755:tid 53772] [client 5.135.131.86:58188] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "abpyO6qw5ZSRshmIhWnfLwAAAU8"]
[Wed Mar 18 17:37:01.612595 2026] [:error] [pid 20667:tid 20683] [client 5.135.131.86:58202] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "abpyPZgyfQyvBhzza_1jSAAAAY4"]
[Wed Mar 18 17:37:04.097673 2026] [:error] [pid 31232:tid 31240] [client 5.135.131.86:47234] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "abpyQGX6HV7dqh3BQD2cvQAAAEU"]
[Wed Mar 18 17:37:06.388907 2026] [:error] [pid 31232:tid 31243] [client 5.135.131.86:47250] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "abpyQmX6HV7dqh3BQD2czQAAAEg"]
[Wed Mar 18 17:37:08.693879 2026] [:error] [pid 31232:tid 31249] [client 5.135.131.86:47256] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "abpyRGX6HV7dqh3BQD2c2gAAAE4"]
[Wed Mar 18 17:37:10.985301 2026] [:error] [pid 42871:tid 42935] [client 5.135.131.86:47262] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "abpyRmPUS0lM1M9nUaIoyAAAAJU"]
[Wed Mar 18 17:37:13.289404 2026] [:error] [pid 53755:tid 53764] [client 5.135.131.86:50534] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "abpySaqw5ZSRshmIhWnfZAAAAUc"]
[Wed Mar 18 17:37:15.592944 2026] [:error] [pid 42872:tid 42951] [client 5.135.131.86:50538] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "abpySzchM8PQMaMEWJmy5gAAAco"]
[Wed Mar 18 17:37:17.899710 2026] [:error] [pid 42872:tid 42957] [client 5.135.131.86:50542] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abpyTTchM8PQMaMEWJmy5wAAAc8"]
[Wed Mar 18 17:37:20.196455 2026] [:error] [pid 31232:tid 31247] [client 5.135.131.86:50548] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "abpyUGX6HV7dqh3BQD2dBAAAAEw"]
[Wed Mar 18 17:37:22.496661 2026] [:error] [pid 53755:tid 53772] [client 5.135.131.86:50564] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "abpyUqqw5ZSRshmIhWnfbgAAAU8"]
[Wed Mar 18 17:37:24.799042 2026] [:error] [pid 42970:tid 42996] [client 5.135.131.86:51022] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "abpyVI5YFUj4vBJI0KQjQQAAANg"]
[Wed Mar 18 17:37:27.257748 2026] [:error] [pid 42870:tid 42891] [client 5.135.131.86:51026] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "abpyV56axlAooiuYyUwH3gAAAAY"]
[Wed Mar 18 17:37:29.698857 2026] [:error] [pid 42871:tid 42916] [client 5.135.131.86:51042] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "abpyWWPUS0lM1M9nUaIo3gAAAII"]
[Wed Mar 18 17:37:31.997907 2026] [:error] [pid 31232:tid 31244] [client 5.135.131.86:51050] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "abpyW2X6HV7dqh3BQD2dEAAAAEk"]
[Wed Mar 18 17:37:34.455203 2026] [:error] [pid 20667:tid 20691] [client 5.135.131.86:55784] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "abpyXpgyfQyvBhzza_1jYQAAAZY"]
[Wed Mar 18 17:37:36.896715 2026] [:error] [pid 31232:tid 31258] [client 5.135.131.86:55794] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "abpyYGX6HV7dqh3BQD2dGQAAAFc"]
[Wed Mar 18 17:37:39.197919 2026] [:error] [pid 31232:tid 31244] [client 5.135.131.86:55808] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "abpyY2X6HV7dqh3BQD2dJgAAAEk"]
[Wed Mar 18 17:37:41.501192 2026] [:error] [pid 31232:tid 31250] [client 5.135.131.86:55818] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "abpyZWX6HV7dqh3BQD2dLQAAAE8"]
[Wed Mar 18 17:37:43.960720 2026] [:error] [pid 31232:tid 31235] [client 5.135.131.86:53368] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "abpyZ2X6HV7dqh3BQD2dOgAAAEA"]
[Wed Mar 18 17:38:15.741452 2026] [:error] [pid 20667:tid 20691] [client 5.135.131.86:53382] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "abpyh5gyfQyvBhzza_1jfQAAAZY"]
[Wed Mar 18 17:38:18.171996 2026] [:error] [pid 53755:tid 53767] [client 5.135.131.86:42440] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "abpyiqqw5ZSRshmIhWnfrAAAAUo"]
[Wed Mar 18 17:38:20.648068 2026] [:error] [pid 42871:tid 42931] [client 5.135.131.86:42446] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "abpyjGPUS0lM1M9nUaIpIAAAAJE"]
[Wed Mar 18 17:38:22.955250 2026] [:error] [pid 31232:tid 31236] [client 5.135.131.86:58754] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "abpyjmX6HV7dqh3BQD2digAAAEE"]
[Wed Mar 18 17:38:25.264914 2026] [:error] [pid 53755:tid 53776] [client 5.135.131.86:58768] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "abpykaqw5ZSRshmIhWnftQAAAVM"]
[Wed Mar 18 17:38:27.558111 2026] [:error] [pid 31232:tid 31256] [client 5.135.131.86:58772] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "abpyk2X6HV7dqh3BQD2dlwAAAFU"]
[Wed Mar 18 17:38:30.027315 2026] [:error] [pid 42871:tid 42936] [client 5.135.131.86:58788] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "abpylmPUS0lM1M9nUaIpKwAAAJY"]
[Wed Mar 18 17:38:32.497511 2026] [:error] [pid 42871:tid 42914] [client 5.135.131.86:58796] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "abpymGPUS0lM1M9nUaIpMwAAAIA"]
[Wed Mar 18 17:38:34.961684 2026] [:error] [pid 31232:tid 31246] [client 5.135.131.86:49874] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "abpymmX6HV7dqh3BQD2dsQAAAEs"]
[Wed Mar 18 17:38:37.407050 2026] [:error] [pid 20667:tid 20686] [client 5.135.131.86:49882] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "abpynZgyfQyvBhzza_1jjQAAAZE"]
[Wed Mar 18 17:38:39.898103 2026] [:error] [pid 42871:tid 42919] [client 5.135.131.86:49892] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abpyn2PUS0lM1M9nUaIpRQAAAIU"]
[Wed Mar 18 17:38:42.354167 2026] [:error] [pid 31232:tid 31257] [client 5.135.131.86:49896] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "abpyomX6HV7dqh3BQD2dugAAAFY"]
[Wed Mar 18 17:38:44.799486 2026] [:error] [pid 20667:tid 20680] [client 5.135.131.86:56804] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abpypJgyfQyvBhzza_1jnAAAAYs"]
[Wed Mar 18 19:09:48.991045 2026] [:error] [pid 42870:tid 42908] [client 223.181.120.234:29421] [client 223.181.120.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.120.234, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abqH_J6axlAooiuYyUwcUAAAABc"]
[Wed Mar 18 19:18:00.977495 2026] [:error] [pid 53755:tid 53778] [client 223.181.120.234:8318] [client 223.181.120.234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abqJ6Kqw5ZSRshmIhWkK2QAAAVU"]
[Wed Mar 18 20:03:14.557478 2026] [:error] [pid 42872:tid 42951] [client 129.222.187.185:31939] [client 129.222.187.185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abqUgjchM8PQMaMEWJm_rwAAAco"]
[Wed Mar 18 20:05:17.443436 2026] [:error] [pid 42870:tid 42900] [client 129.222.187.185:34588] [client 129.222.187.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.187.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abqU_Z6axlAooiuYyUwpwgAAAA8"]
[Wed Mar 18 20:10:25.428106 2026] [:error] [pid 53755:tid 53780] [client 182.44.2.148:50491] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abqWMaqw5ZSRshmIhWkqdwAAAVc"]
[Wed Mar 18 20:22:18.386656 2026] [:error] [pid 31232:tid 31257] [client 23.20.245.74:60126] [client 23.20.245.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.20.245.74, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abqY-mX6HV7dqh3BQD3vTwAAAFY"]
[Wed Mar 18 21:24:24.031817 2026] [:error] [pid 53755:tid 53766] [client 20.120.18.145:18388] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wk/index.php"] [unique_id "abqniKqw5ZSRshmIhWlTOgAAAUk"]
[Wed Mar 18 21:24:25.254075 2026] [:error] [pid 53755:tid 53768] [client 20.120.18.145:17677] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wk/index.php"] [unique_id "abqniaqw5ZSRshmIhWlTPQAAAUs"]
[Thu Mar 19 03:07:41.249407 2026] [:error] [pid 19224:tid 19392] [client 125.75.66.97:34805] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abr3_TxUIaHQ6Y3ff518JAAAAdY"]
[Thu Mar 19 04:02:06.941408 2026] [:error] [pid 23988:tid 23992] [client 185.223.152.140:48825] [client 185.223.152.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.140, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "absEvmnlkSPXj2matr3QzAAAAME"]
[Thu Mar 19 04:59:45.506864 2026] [:error] [pid 23882:tid 23905] [client 43.135.183.82:49480] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "absSQbWnClbtbN12M7_2dAAAAAM"]
[Thu Mar 19 06:31:05.432563 2026] [:error] [pid 31205:tid 31222] [client 31.171.130.48:48777] [client 31.171.130.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "absnqVu5gZKGrGz5P1H5WwAAAUY"]
[Thu Mar 19 08:32:33.883130 2026] [:error] [pid 31447:tid 31470] [client 31.171.130.29:45275] [client 31.171.130.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abtEIRmVNRDSLnGvghhcdAAAAg8"]
[Thu Mar 19 08:45:00.359140 2026] [:error] [pid 32226:tid 32232] [client 91.99.188.14:51998] [client 91.99.188.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abtHDLBb58lgPwqxC6qhtAAAAwQ"]
[Thu Mar 19 09:15:48.955814 2026] [:error] [pid 31447:tid 31465] [client 91.99.189.217:58874] [client 91.99.189.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abtORBmVNRDSLnGvghh6qgAAAgo"]
[Thu Mar 19 09:22:45.505472 2026] [:error] [pid 31735:tid 31753] [client 49.233.45.47:47308] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abtP5X-gyQbRQWJYccw17wAAAo4"]
[Thu Mar 19 09:57:41.542530 2026] [autoindex:error] [pid 25044:tid 25049] [client 209.87.169.246:39215] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:41.794398 2026] [autoindex:error] [pid 25044:tid 25068] [client 209.87.169.246:39215] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:42.072208 2026] [autoindex:error] [pid 25044:tid 25068] [client 209.87.169.246:39215] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:43.204169 2026] [autoindex:error] [pid 23883:tid 23937] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:52.168180 2026] [autoindex:error] [pid 23883:tid 23946] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:52.466065 2026] [autoindex:error] [pid 23883:tid 23950] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:52.761100 2026] [autoindex:error] [pid 23883:tid 23947] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:53.018591 2026] [autoindex:error] [pid 23883:tid 23946] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:53.267444 2026] [autoindex:error] [pid 23883:tid 23950] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:53.501975 2026] [autoindex:error] [pid 23883:tid 23943] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:57:55.375130 2026] [autoindex:error] [pid 23883:tid 23943] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:01.804955 2026] [autoindex:error] [pid 23883:tid 23936] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:02.049774 2026] [autoindex:error] [pid 23883:tid 23936] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:14.257454 2026] [autoindex:error] [pid 23883:tid 23951] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:14.523445 2026] [autoindex:error] [pid 23883:tid 23951] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:14.805627 2026] [autoindex:error] [pid 23883:tid 23951] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:15.056059 2026] [autoindex:error] [pid 23883:tid 23951] [client 209.87.169.41:49111] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:20.116011 2026] [autoindex:error] [pid 25135:tid 25152] [client 209.87.169.209:26945] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:20.390874 2026] [autoindex:error] [pid 25135:tid 25141] [client 209.87.169.209:26945] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:26.040424 2026] [autoindex:error] [pid 25135:tid 25140] [client 209.87.169.209:26945] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:40.527131 2026] [autoindex:error] [pid 25135:tid 25138] [client 209.87.169.209:26945] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:46.691263 2026] [autoindex:error] [pid 25135:tid 25146] [client 209.87.169.209:26945] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:58:46.986673 2026] [autoindex:error] [pid 25135:tid 25143] [client 209.87.169.209:26945] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:59:26.696004 2026] [autoindex:error] [pid 23883:tid 23950] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:59:29.312725 2026] [autoindex:error] [pid 23883:tid 23936] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:59:29.601638 2026] [autoindex:error] [pid 23883:tid 23942] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:59:29.888593 2026] [autoindex:error] [pid 23883:tid 23932] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:59:30.540987 2026] [autoindex:error] [pid 23883:tid 23951] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:59:30.980300 2026] [autoindex:error] [pid 23883:tid 23945] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:59:31.243653 2026] [autoindex:error] [pid 23883:tid 23940] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:59:43.627077 2026] [autoindex:error] [pid 23883:tid 23940] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 09:59:49.178035 2026] [autoindex:error] [pid 23883:tid 23932] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:00:47.922909 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:00:48.149826 2026] [autoindex:error] [pid 23883:tid 23945] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:00:48.394364 2026] [autoindex:error] [pid 23883:tid 23945] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:00:48.755073 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:00:49.021714 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:00:49.282673 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:00:49.518705 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:00:49.802011 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:00:59.285995 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:00:59.542325 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:00:59.792989 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:01:04.255709 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:01:04.506573 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:01:04.768895 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:01:05.308376 2026] [autoindex:error] [pid 23883:tid 23931] [client 209.87.169.71:55183] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 11:41:47.952121 2026] [:error] [pid 23883:tid 23948] [client 92.97.235.70:62815] [client 92.97.235.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.97.235.70, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abtwe9Ni-EnEAH4abz2n9wAAAFM"]
[Thu Mar 19 12:34:11.284004 2026] [:error] [pid 31205:tid 31239] [client 92.97.235.70:63472] [client 92.97.235.70] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abt8w1u5gZKGrGz5P1Gg8wAAAVY"]
[Thu Mar 19 12:54:14.960708 2026] [:error] [pid 25135:tid 25148] [client 154.16.49.101:7173] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abuBdqKtE0dzgMctjFXtowAAA0s"]
[Thu Mar 19 12:54:15.455947 2026] [:error] [pid 23882:tid 23922] [client 154.16.49.101:7423] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBd7WnClbtbN12M7-UOQAAABQ"]
[Thu Mar 19 12:54:15.952347 2026] [:error] [pid 31205:tid 31238] [client 154.16.49.101:7663] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feed/"] [unique_id "abuBd1u5gZKGrGz5P1Gn8AAAAVU"]
[Thu Mar 19 21:13:50.107191 2026] [:error] [pid 11015:tid 11070] [client 101.32.208.70:56994] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abv2jvPcMwFQZAVfzLSADwAAAJg"]
[Thu Mar 19 21:34:23.674456 2026] [:error] [pid 51091:tid 51135] [client 108.179.253.225:59686] [client 108.179.253.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.253.225, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abv7X77LZKhdJPD9CBvdZgAAAVg"]
[Thu Mar 19 21:34:24.895805 2026] [:error] [pid 51091:tid 51121] [client 108.179.253.225:59686] [client 108.179.253.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.253.225, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abv7YL7LZKhdJPD9CBvdZwAAAUo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Mar 19 21:43:14.672987 2026] [:error] [pid 11016:tid 11076] [client 91.90.142.7:10402] [client 91.90.142.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.90.142.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abv9chPK94J9G19C6uVZTgAAAQM"]
[Thu Mar 19 21:44:12.442446 2026] [:error] [pid 1285:tid 1304] [client 188.4.31.54:55186] [client 188.4.31.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.4.31.54, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abv9rFE95r3zR75X1HpJXAAAAhE"]
[Thu Mar 19 21:50:43.449961 2026] [:error] [pid 11110:tid 11126] [client 91.90.142.7:10402] [client 91.90.142.7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abv_MwSNPqGfikw7k8LH3wAAAAs"]
[Thu Mar 19 21:50:49.696408 2026] [:error] [pid 1247:tid 1253] [client 188.4.31.54:59833] [client 188.4.31.54] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abv_OQ5tmeOr-yI4XNH2gQAAAcQ"]
[Thu Mar 19 21:51:50.779824 2026] [:error] [pid 1247:tid 1264] [client 91.90.142.7:10406] [client 91.90.142.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.90.142.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "abv_dg5tmeOr-yI4XNH3EwAAAc8"]
[Thu Mar 19 21:59:27.383120 2026] [:error] [pid 1247:tid 1262] [client 162.241.2.158:22088] [client 162.241.2.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.158, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwBPw5tmeOr-yI4XNH78wAAAc0"]
[Thu Mar 19 21:59:28.797505 2026] [:error] [pid 1247:tid 1264] [client 162.241.2.158:22088] [client 162.241.2.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.158, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwBQA5tmeOr-yI4XNH7-QAAAc8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Mar 19 22:02:33.880594 2026] [:error] [pid 11015:tid 11054] [client 148.72.125.189:63852] [client 148.72.125.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.125.189, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwB-fPcMwFQZAVfzLSN5AAAAIg"]
[Thu Mar 19 22:02:35.098862 2026] [:error] [pid 11015:tid 11059] [client 148.72.125.189:63852] [client 148.72.125.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.125.189, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwB-_PcMwFQZAVfzLSN6AAAAI0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Mar 19 22:05:48.115326 2026] [:error] [pid 1247:tid 1249] [client 108.179.252.70:47114] [client 108.179.252.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.252.70, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwCvA5tmeOr-yI4XNH-7AAAAcA"]
[Thu Mar 19 22:05:50.581800 2026] [:error] [pid 1247:tid 1261] [client 108.179.252.70:47126] [client 108.179.252.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.252.70, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwCvg5tmeOr-yI4XNH-8wAAAcw"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Mar 19 22:20:59.264569 2026] [:error] [pid 1285:tid 1287] [client 50.87.248.35:44728] [client 50.87.248.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.248.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwGS1E95r3zR75X1HpZ4wAAAgA"]
[Thu Mar 19 22:21:00.545963 2026] [:error] [pid 1285:tid 1289] [client 50.87.248.35:44728] [client 50.87.248.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.248.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwGTFE95r3zR75X1HpZ6QAAAgI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Mar 19 22:29:55.166455 2026] [:error] [pid 11015:tid 11065] [client 162.241.120.138:57244] [client 162.241.120.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.120.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwIY_PcMwFQZAVfzLSV6wAAAJM"]
[Thu Mar 19 22:29:56.387045 2026] [:error] [pid 11015:tid 11066] [client 162.241.120.138:57244] [client 162.241.120.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.120.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwIZPPcMwFQZAVfzLSV7AAAAJQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Mar 19 22:45:36.102590 2026] [:error] [pid 48106:tid 48136] [client 18.136.78.124:35478] [client 18.136.78.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.136.78.124, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwMEMVZaUGvkz29lZEiuwAAANY"]
[Thu Mar 19 22:45:37.329215 2026] [:error] [pid 48106:tid 48119] [client 18.136.78.124:35478] [client 18.136.78.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.136.78.124, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwMEcVZaUGvkz29lZEivAAAAMU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Mar 19 23:16:12.165819 2026] [:error] [pid 1247:tid 1251] [client 117.33.163.216:59580] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abwTPA5tmeOr-yI4XNEgRgAAAcI"]
[Fri Mar 20 00:25:10.137071 2026] [:error] [pid 46126:tid 46231] [client 179.108.84.136:57522] [client 179.108.84.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.108.84.136, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwjZqQ44YePbsZz3j67ZAAAAQo"]
[Fri Mar 20 00:25:11.649997 2026] [:error] [pid 46126:tid 46214] [client 179.108.84.136:57522] [client 179.108.84.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 179.108.84.136, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwjZ6Q44YePbsZz3j67ZwAAAQI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 00:42:47.982486 2026] [autoindex:error] [pid 46124:tid 46203] [client 4.205.31.173:64539] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 00:42:48.290957 2026] [:error] [pid 46124:tid 46195] [client 4.205.31.173:64539] [client 4.205.31.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.205.31.173, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abwniEzMrlLOY6zyCjJnMQAAAE8"]
[Fri Mar 20 00:42:53.880347 2026] [autoindex:error] [pid 46124:tid 46185] [client 4.205.31.173:64539] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 00:42:54.092954 2026] [autoindex:error] [pid 46124:tid 46183] [client 4.205.31.173:64539] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 00:42:55.479181 2026] [autoindex:error] [pid 46124:tid 46193] [client 4.205.31.173:64539] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 00:43:01.611213 2026] [autoindex:error] [pid 46124:tid 46187] [client 4.205.31.173:64539] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 00:43:02.968384 2026] [:error] [pid 46124:tid 46202] [client 4.205.31.173:64539] [client 4.205.31.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abwnlkzMrlLOY6zyCjJnWQAAAFY"]
[Fri Mar 20 00:43:06.538275 2026] [:error] [pid 46126:tid 46224] [client 4.205.31.173:63102] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abwnmqQ44YePbsZz3j7A_AAAAQc"]
[Fri Mar 20 00:43:08.139420 2026] [:error] [pid 46264:tid 46290] [client 4.205.31.173:63082] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abwnnIp3TruHFmWOt5G__wAAAAc"]
[Fri Mar 20 00:43:09.931056 2026] [:error] [pid 46264:tid 46305] [client 4.205.31.173:64535] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abwnnYp3TruHFmWOt5HACgAAABY"]
[Fri Mar 20 00:43:13.375458 2026] [:error] [pid 46126:tid 46224] [client 4.205.31.173:63096] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abwnoaQ44YePbsZz3j7BCAAAAQc"]
[Fri Mar 20 00:44:20.198571 2026] [:error] [pid 46264:tid 46302] [client 122.129.218.5:45952] [client 122.129.218.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 122.129.218.5, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwn5Ip3TruHFmWOt5HBNgAAABM"]
[Fri Mar 20 00:44:22.400018 2026] [:error] [pid 46126:tid 46248] [client 122.129.218.5:45966] [client 122.129.218.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 122.129.218.5, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwn5qQ44YePbsZz3j7BYwAAARM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 00:49:33.350085 2026] [:error] [pid 46124:tid 46180] [client 46.224.209.60:41332] [client 46.224.209.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.224.209.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwpHUzMrlLOY6zyCjJqXAAAAEA"]
[Fri Mar 20 00:49:35.687715 2026] [:error] [pid 46264:tid 46292] [client 46.224.209.60:49302] [client 46.224.209.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.224.209.60, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abwpH4p3TruHFmWOt5HFGgAAAAk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 01:14:30.550390 2026] [:error] [pid 46124:tid 46201] [client 209.97.171.56:59530] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abwu9kzMrlLOY6zyCjJ2WwAAAFU"]
[Fri Mar 20 01:14:30.551829 2026] [:error] [pid 11258:tid 11278] [client 209.97.171.56:58390] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abwu9pPHb95f6xzHJOcPdAAAANI"]
[Fri Mar 20 01:14:30.925987 2026] [:error] [pid 11258:tid 11284] [client 209.97.171.56:64757] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abwu9pPHb95f6xzHJOcPggAAANg"]
[Fri Mar 20 01:14:30.926574 2026] [:error] [pid 11258:tid 11276] [client 209.97.171.56:64768] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abwu9pPHb95f6xzHJOcPgwAAANA"]
[Fri Mar 20 01:14:31.122328 2026] [:error] [pid 46264:tid 46283] [client 209.97.171.56:62757] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "abwu94p3TruHFmWOt5HWtgAAAAA"]
[Fri Mar 20 01:14:31.405351 2026] [:error] [pid 11258:tid 11282] [client 209.97.171.56:49998] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "abwu95PHb95f6xzHJOcPjgAAANY"]
[Fri Mar 20 01:54:24.725000 2026] [:error] [pid 46124:tid 46197] [client 136.144.35.92:41271] [client 136.144.35.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abw4UEzMrlLOY6zyCjKF8AAAAFE"]
[Fri Mar 20 02:34:41.706245 2026] [:error] [pid 46126:tid 46238] [client 51.158.126.65:57914] [client 51.158.126.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.158.126.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abxBwaQ44YePbsZz3j7iXQAAAQ4"]
[Fri Mar 20 02:34:42.911309 2026] [:error] [pid 46126:tid 46256] [client 51.158.126.65:57914] [client 51.158.126.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.158.126.65, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abxBwqQ44YePbsZz3j7iXwAAARc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 03:35:55.279423 2026] [:error] [pid 53588:tid 53615] [client 192.250.232.26:55646] [client 192.250.232.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.232.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abxQG0W-isgnULYClZunhwAAABc"]
[Fri Mar 20 03:35:56.585881 2026] [:error] [pid 53588:tid 53604] [client 192.250.232.26:55646] [client 192.250.232.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.232.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abxQHEW-isgnULYClZuniAAAAAw"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 03:53:42.557736 2026] [:error] [pid 27446:tid 27465] [client 4.205.31.173:11745] [client 4.205.31.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.205.31.173, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abxURnnugr0KUt5_4erFVgAAAM8"]
[Fri Mar 20 03:53:44.863298 2026] [:error] [pid 27446:tid 27463] [client 4.205.31.173:11745] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "abxUSHnugr0KUt5_4erFWwAAAM0"]
[Fri Mar 20 03:53:47.027099 2026] [:error] [pid 27446:tid 27473] [client 4.205.31.173:12186] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "abxUS3nugr0KUt5_4erFagAAANc"]
[Fri Mar 20 03:53:48.716807 2026] [:error] [pid 27446:tid 27459] [client 4.205.31.173:12208] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "abxUTHnugr0KUt5_4erFbwAAAMk"]
[Fri Mar 20 03:53:58.718205 2026] [:error] [pid 27353:tid 27427] [client 4.205.31.173:61211] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "abxUVmalyWjNUOVnKauo9QAAAIg"]
[Fri Mar 20 04:20:43.323865 2026] [:error] [pid 58126:tid 58180] [client 47.99.186.219:58890] [client 47.99.186.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.99.186.219, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abxam6KAmdXQSS0Y5KA8iwAAAEg"]
[Fri Mar 20 04:20:46.505420 2026] [:error] [pid 58126:tid 58191] [client 47.99.186.219:58890] [client 47.99.186.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.99.186.219, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abxanqKAmdXQSS0Y5KA8jQAAAFM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 04:41:37.382782 2026] [:error] [pid 58230:tid 58242] [client 132.148.182.129:28158] [client 132.148.182.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 132.148.182.129, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abxfgfeBObYxbmHTzfqlRgAAAMk"]
[Fri Mar 20 04:41:38.677671 2026] [:error] [pid 58230:tid 58238] [client 132.148.182.129:28158] [client 132.148.182.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 132.148.182.129, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abxfgveBObYxbmHTzfqlTQAAAMU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 04:43:22.378814 2026] [:error] [pid 58230:tid 58257] [client 93.218.123.18:60566] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "abxf6veBObYxbmHTzfqmhAAAANg"]
[Fri Mar 20 04:43:23.738163 2026] [:error] [pid 58125:tid 58148] [client 93.218.123.18:60671] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "abxf6_KqkvJQoqsQGeVU0gAAAAQ"]
[Fri Mar 20 04:43:31.543567 2026] [:error] [pid 58127:tid 58219] [client 93.218.123.18:60750] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "abxf87Q_HbYy8C6I_EHcRwAAAJQ"]
[Fri Mar 20 04:43:33.032467 2026] [:error] [pid 58230:tid 58246] [client 93.218.123.18:60776] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "abxf9feBObYxbmHTzfqm6AAAAM0"]
[Fri Mar 20 04:43:40.369213 2026] [:error] [pid 58230:tid 58247] [client 93.218.123.18:60832] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "abxf_PeBObYxbmHTzfqnHwAAAM4"]
[Fri Mar 20 04:43:41.777096 2026] [:error] [pid 58126:tid 58196] [client 93.218.123.18:60855] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "abxf_aKAmdXQSS0Y5KBG9AAAAFg"]
[Fri Mar 20 04:43:50.436041 2026] [:error] [pid 58126:tid 58196] [client 93.218.123.18:60926] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "abxgBqKAmdXQSS0Y5KBHBwAAAFg"]
[Fri Mar 20 04:43:51.943482 2026] [:error] [pid 58230:tid 58236] [client 93.218.123.18:60932] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "abxgB_eBObYxbmHTzfqnRgAAAMM"]
[Fri Mar 20 04:45:36.532671 2026] [:error] [pid 58127:tid 58216] [client 93.218.123.18:62133] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abxgcLQ_HbYy8C6I_EHdfgAAAJE"]
[Fri Mar 20 04:45:38.272856 2026] [:error] [pid 58127:tid 58223] [client 93.218.123.18:62154] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "abxgcrQ_HbYy8C6I_EHdfwAAAJg"]
[Fri Mar 20 04:45:53.914357 2026] [:error] [pid 58125:tid 58149] [client 93.218.123.18:63091] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abxggfKqkvJQoqsQGeVVrQAAAAU"]
[Fri Mar 20 04:45:55.394358 2026] [:error] [pid 58230:tid 58246] [client 93.218.123.18:63125] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "abxgg_eBObYxbmHTzfqo9wAAAM0"]
[Fri Mar 20 04:46:04.838657 2026] [:error] [pid 58127:tid 58204] [client 93.218.123.18:63326] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abxgjLQ_HbYy8C6I_EHd2AAAAIU"]
[Fri Mar 20 04:46:07.599310 2026] [:error] [pid 58230:tid 58254] [client 93.218.123.18:63385] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "abxgj_eBObYxbmHTzfqpPwAAANU"]
[Fri Mar 20 04:46:14.912537 2026] [:error] [pid 58127:tid 58203] [client 93.218.123.18:63526] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "abxglrQ_HbYy8C6I_EHd6gAAAIQ"]
[Fri Mar 20 04:46:18.697336 2026] [:error] [pid 58127:tid 58199] [client 93.218.123.18:63577] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "abxgmrQ_HbYy8C6I_EHd8wAAAIA"]
[Fri Mar 20 04:48:18.637935 2026] [:error] [pid 58127:tid 58212] [client 93.218.123.18:63919] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "abxhErQ_HbYy8C6I_EHfEgAAAI0"]
[Fri Mar 20 04:48:21.516673 2026] [:error] [pid 58126:tid 58184] [client 93.218.123.18:63963] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "abxhFaKAmdXQSS0Y5KBJKgAAAEw"]
[Fri Mar 20 04:48:38.380550 2026] [:error] [pid 58230:tid 58256] [client 93.218.123.18:64148] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abxhJveBObYxbmHTzfqrFAAAANc"]
[Fri Mar 20 04:48:40.604034 2026] [:error] [pid 58127:tid 58221] [client 93.218.123.18:64188] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "abxhKLQ_HbYy8C6I_EHfRgAAAJY"]
[Fri Mar 20 04:48:46.316896 2026] [:error] [pid 58127:tid 58206] [client 93.218.123.18:63229] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "abxhLrQ_HbYy8C6I_EHfVwAAAIc"]
[Fri Mar 20 04:48:52.467718 2026] [:error] [pid 58230:tid 58234] [client 93.218.123.18:63368] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "abxhNPeBObYxbmHTzfqrOgAAAME"]
[Fri Mar 20 04:51:04.271202 2026] [:error] [pid 58125:tid 58145] [client 93.218.123.18:65020] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "abxhuPKqkvJQoqsQGeVXfAAAAAE"]
[Fri Mar 20 04:51:06.867619 2026] [:error] [pid 58127:tid 58223] [client 93.218.123.18:49190] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "abxhurQ_HbYy8C6I_EHgzwAAAJg"]
[Fri Mar 20 04:51:16.916212 2026] [:error] [pid 58127:tid 58200] [client 93.218.123.18:49290] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "abxhxLQ_HbYy8C6I_EHg-wAAAIE"]
[Fri Mar 20 04:51:19.522804 2026] [:error] [pid 58126:tid 58172] [client 93.218.123.18:49316] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "abxhx6KAmdXQSS0Y5KBKgwAAAEA"]
[Fri Mar 20 04:51:29.317412 2026] [:error] [pid 58230:tid 58237] [client 93.218.123.18:49390] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "abxh0feBObYxbmHTzfqt7wAAAMQ"]
[Fri Mar 20 04:51:32.654916 2026] [:error] [pid 58230:tid 58241] [client 93.218.123.18:49451] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "abxh1PeBObYxbmHTzfqt_QAAAMg"]
[Fri Mar 20 04:51:37.490172 2026] [:error] [pid 58125:tid 58144] [client 93.218.123.18:49531] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abxh2fKqkvJQoqsQGeVXowAAAAA"]
[Fri Mar 20 04:51:39.093703 2026] [:error] [pid 58126:tid 58177] [client 93.218.123.18:49565] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "abxh26KAmdXQSS0Y5KBKvgAAAEU"]
[Fri Mar 20 04:51:45.248894 2026] [:error] [pid 58230:tid 58248] [client 93.218.123.18:49645] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "abxh4feBObYxbmHTzfquHQAAAM8"]
[Fri Mar 20 04:51:47.816835 2026] [:error] [pid 58125:tid 58158] [client 93.218.123.18:49673] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "abxh4_KqkvJQoqsQGeVXtgAAAA4"]
[Fri Mar 20 04:53:46.806785 2026] [:error] [pid 58125:tid 58164] [client 93.218.123.18:51418] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abxiWvKqkvJQoqsQGeVYZgAAABQ"]
[Fri Mar 20 04:53:48.691277 2026] [:error] [pid 58127:tid 58208] [client 93.218.123.18:65023] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "abxiXLQ_HbYy8C6I_EHiqQAAAIk"]
[Fri Mar 20 04:53:54.918450 2026] [:error] [pid 58127:tid 58209] [client 93.218.123.18:51520] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abxiYrQ_HbYy8C6I_EHitQAAAIo"]
[Fri Mar 20 04:53:56.497777 2026] [:error] [pid 58125:tid 58154] [client 93.218.123.18:51529] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "abxiZPKqkvJQoqsQGeVYcAAAAAo"]
[Fri Mar 20 04:54:04.932298 2026] [:error] [pid 58126:tid 58176] [client 93.218.123.18:51603] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abxibKKAmdXQSS0Y5KBL2AAAAEQ"]
[Fri Mar 20 04:54:06.397609 2026] [:error] [pid 58126:tid 58190] [client 93.218.123.18:51607] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "abxibqKAmdXQSS0Y5KBL4AAAAFI"]
[Fri Mar 20 04:54:12.023970 2026] [:error] [pid 58125:tid 58165] [client 93.218.123.18:51714] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abxidPKqkvJQoqsQGeVYigAAABU"]
[Fri Mar 20 04:54:13.499471 2026] [:error] [pid 58126:tid 58196] [client 93.218.123.18:51718] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "abxidaKAmdXQSS0Y5KBL8QAAAFg"]
[Fri Mar 20 04:54:18.515843 2026] [:error] [pid 58125:tid 58147] [client 93.218.123.18:51787] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abxievKqkvJQoqsQGeVYjgAAAAM"]
[Fri Mar 20 04:54:21.092728 2026] [:error] [pid 58125:tid 58162] [client 93.218.123.18:51826] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "abxiffKqkvJQoqsQGeVYkQAAABI"]
[Fri Mar 20 04:54:24.741790 2026] [:error] [pid 58230:tid 58239] [client 93.218.123.18:52190] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abxigPeBObYxbmHTzfqwTAAAAMY"]
[Fri Mar 20 04:54:27.070766 2026] [:error] [pid 58230:tid 58243] [client 93.218.123.18:52200] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "abxig_eBObYxbmHTzfqwXwAAAMo"]
[Fri Mar 20 04:54:33.708045 2026] [:error] [pid 58127:tid 58209] [client 93.218.123.18:52300] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "abxiibQ_HbYy8C6I_EHi4AAAAIo"]
[Fri Mar 20 04:55:58.071182 2026] [:error] [pid 58127:tid 58205] [client 93.218.123.18:52918] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "abxi3rQ_HbYy8C6I_EHj9gAAAIY"]
[Fri Mar 20 04:55:59.524601 2026] [:error] [pid 58126:tid 58174] [client 93.218.123.18:53157] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "abxi36KAmdXQSS0Y5KBMxwAAAEI"]
[Fri Mar 20 04:56:00.881425 2026] [:error] [pid 58126:tid 58172] [client 93.218.123.18:53169] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "abxi4KKAmdXQSS0Y5KBMzQAAAEA"]
[Fri Mar 20 04:56:04.383344 2026] [:error] [pid 58230:tid 58243] [client 93.218.123.18:53197] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "abxi5PeBObYxbmHTzfqxWwAAAMo"]
[Fri Mar 20 04:56:05.985488 2026] [:error] [pid 58126:tid 58183] [client 93.218.123.18:53209] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "abxi5aKAmdXQSS0Y5KBM2gAAAEs"]
[Fri Mar 20 04:56:09.859203 2026] [:error] [pid 58230:tid 58255] [client 93.218.123.18:53244] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "abxi6feBObYxbmHTzfqxawAAANY"]
[Fri Mar 20 04:56:11.217171 2026] [:error] [pid 58230:tid 58248] [client 93.218.123.18:53260] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "abxi6_eBObYxbmHTzfqxbgAAAM8"]
[Fri Mar 20 04:56:14.326408 2026] [:error] [pid 58230:tid 58238] [client 93.218.123.18:53278] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abxi7veBObYxbmHTzfqxdwAAAMU"]
[Fri Mar 20 04:56:16.164977 2026] [:error] [pid 58126:tid 58187] [client 93.218.123.18:53291] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "abxi8KKAmdXQSS0Y5KBM9QAAAE8"]
[Fri Mar 20 04:56:19.450724 2026] [:error] [pid 58230:tid 58251] [client 93.218.123.18:53318] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "abxi8_eBObYxbmHTzfqxhwAAANI"]
[Fri Mar 20 04:56:20.975730 2026] [:error] [pid 58127:tid 58219] [client 93.218.123.18:53335] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "abxi9LQ_HbYy8C6I_EHkHwAAAJQ"]
[Fri Mar 20 04:56:26.408057 2026] [:error] [pid 58230:tid 58237] [client 93.218.123.18:53360] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abxi-veBObYxbmHTzfqxoQAAAMQ"]
[Fri Mar 20 04:56:27.850306 2026] [:error] [pid 58126:tid 58185] [client 93.218.123.18:53379] [client 93.218.123.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "abxi-6KAmdXQSS0Y5KBNBQAAAE0"]
[Fri Mar 20 05:55:18.393103 2026] [:error] [pid 43163:tid 43172] [client 114.80.36.40:34848] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "abxwxp_n4JP_ko9XUswJPAAAAQU"]
[Fri Mar 20 06:51:58.314826 2026] [:error] [pid 55299:tid 55316] [client 170.106.107.87:57716] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abx-DvoGhbNgkNIkZwl5DQAAAgs"]
[Fri Mar 20 07:08:17.207697 2026] [:error] [pid 55239:tid 55290] [client 1.55.92.39:60086] [client 1.55.92.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 1.55.92.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abyB4aycM6mGWSmcyoLzRwAAAdE"]
[Fri Mar 20 07:08:19.750960 2026] [:error] [pid 55239:tid 55294] [client 1.55.92.39:60086] [client 1.55.92.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 1.55.92.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abyB46ycM6mGWSmcyoLzewAAAdU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 07:28:09.404141 2026] [:error] [pid 58126:tid 58195] [client 103.56.163.133:43184] [client 103.56.163.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.56.163.133, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abyGiaKAmdXQSS0Y5KBr5wAAAFc"]
[Fri Mar 20 07:28:10.969944 2026] [:error] [pid 58126:tid 58179] [client 103.56.163.133:43184] [client 103.56.163.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.56.163.133, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abyGiqKAmdXQSS0Y5KBr6AAAAEc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 07:53:57.195999 2026] [:error] [pid 55301:tid 55364] [client 208.109.188.137:57218] [client 208.109.188.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.188.137, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abyMlcKP1x4sgmjd3xSDGgAAAoI"]
[Fri Mar 20 07:53:59.765243 2026] [:error] [pid 43163:tid 43169] [client 208.109.188.137:57222] [client 208.109.188.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.188.137, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abyMl5_n4JP_ko9XUsweYwAAAQI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 09:59:12.087163 2026] [:error] [pid 49080:tid 49102] [client 103.213.38.172:60102] [client 103.213.38.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.213.38.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abyp8Ik5CHi4V0A3ttjkSgAAAFA"]
[Fri Mar 20 09:59:13.642688 2026] [:error] [pid 49080:tid 49088] [client 103.213.38.172:60102] [client 103.213.38.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.213.38.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abyp8Yk5CHi4V0A3ttjkUQAAAEI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 10:01:05.985416 2026] [:error] [pid 49170:tid 49193] [client 50.116.87.95:18156] [client 50.116.87.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.116.87.95, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abyqYc-c8ctLVDCqUJWqogAAABM"]
[Fri Mar 20 10:01:07.635863 2026] [:error] [pid 49170:tid 49185] [client 50.116.87.95:18156] [client 50.116.87.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.116.87.95, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abyqY8-c8ctLVDCqUJWqpAAAAAs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 11:30:18.865638 2026] [:error] [pid 49080:tid 49094] [client 69.49.241.101:45800] [client 69.49.241.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.241.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aby_Sok5CHi4V0A3ttgMqAAAAEg"]
[Fri Mar 20 11:30:20.190887 2026] [:error] [pid 49080:tid 49087] [client 69.49.241.101:45800] [client 69.49.241.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.241.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aby_TIk5CHi4V0A3ttgMrAAAAEE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 11:51:48.749430 2026] [:error] [pid 49170:tid 49197] [client 162.215.11.230:33354] [client 162.215.11.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.215.11.230, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abzEVM-c8ctLVDCqUJXtVAAAABc"]
[Fri Mar 20 11:51:49.968328 2026] [:error] [pid 49170:tid 49190] [client 162.215.11.230:33354] [client 162.215.11.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.215.11.230, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abzEVc-c8ctLVDCqUJXtWAAAABA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 12:45:35.943746 2026] [:error] [pid 49170:tid 49179] [client 49.234.192.248:40542] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abzQ78-c8ctLVDCqUJX_XQAAAAU"]
[Fri Mar 20 12:54:43.005890 2026] [:error] [pid 27302:tid 27325] [client 93.127.134.135:42656] [client 93.127.134.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.127.134.135, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abzTE7DKiUve17xv6yHjiwAAANU"]
[Fri Mar 20 12:54:45.893404 2026] [:error] [pid 27302:tid 27307] [client 93.127.134.135:42656] [client 93.127.134.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 93.127.134.135, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abzTFbDKiUve17xv6yHjjwAAAMM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 13:14:51.331319 2026] [:error] [pid 27302:tid 27310] [client 170.106.165.186:44260] [client 170.106.165.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "abzXy7DKiUve17xv6yHrQwAAAMY"]
[Fri Mar 20 13:35:53.889094 2026] [:error] [pid 49081:tid 49121] [client 162.241.2.99:14226] [client 162.241.2.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.99, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abzcuRo1LBAUhfhYPR2dIQAAAQY"]
[Fri Mar 20 13:35:55.303253 2026] [:error] [pid 49081:tid 49137] [client 162.241.2.99:14226] [client 162.241.2.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.2.99, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "abzcuxo1LBAUhfhYPR2dLAAAARY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 17:03:43.951136 2026] [:error] [pid 49081:tid 49119] [client 108.179.243.13:58842] [client 108.179.243.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.243.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab0Nbxo1LBAUhfhYPR0msQAAAQQ"]
[Fri Mar 20 17:03:45.199333 2026] [:error] [pid 49081:tid 49131] [client 108.179.243.13:58842] [client 108.179.243.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.243.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab0NcRo1LBAUhfhYPR0mtAAAARA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 17:13:22.489318 2026] [:error] [pid 49170:tid 49184] [client 43.128.67.187:53312] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab0Pss-c8ctLVDCqUJVLQAAAAAo"]
[Fri Mar 20 19:30:44.444632 2026] [:error] [pid 49170:tid 49178] [client 108.179.193.35:33974] [client 108.179.193.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.193.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab0v5M-c8ctLVDCqUJVuZgAAAAQ"]
[Fri Mar 20 19:30:45.835104 2026] [:error] [pid 49170:tid 49179] [client 108.179.193.35:33974] [client 108.179.193.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.193.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab0v5c-c8ctLVDCqUJVuagAAAAU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 19:56:27.442925 2026] [:error] [pid 49170:tid 49174] [client 117.33.163.216:59352] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab0168-c8ctLVDCqUJV36QAAAAA"]
[Fri Mar 20 20:12:25.206037 2026] [:error] [pid 49081:tid 49119] [client 43.166.255.122:60086] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab05qRo1LBAUhfhYPR2MigAAAQQ"]
[Fri Mar 20 20:13:33.601209 2026] [:error] [pid 49170:tid 49193] [client 216.24.212.46:60547] [client 216.24.212.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab057c-c8ctLVDCqUJV_UwAAABM"]
[Fri Mar 20 20:15:46.599885 2026] [:error] [pid 49082:tid 49148] [client 50.87.144.31:16404] [client 50.87.144.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.31, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab06cqpllYJI1LUIdL-5fAAAAUY"]
[Fri Mar 20 20:15:47.946440 2026] [:error] [pid 49082:tid 49142] [client 50.87.144.31:16404] [client 50.87.144.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.31, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab06c6pllYJI1LUIdL-5fwAAAUA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 21:05:08.458085 2026] [:error] [pid 38305:tid 38336] [client 192.185.4.92:39686] [client 192.185.4.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab1GBHguiB3cZkKG6iI8WgAAAdg"]
[Fri Mar 20 21:05:09.690700 2026] [:error] [pid 38305:tid 38312] [client 192.185.4.92:39686] [client 192.185.4.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.4.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab1GBXguiB3cZkKG6iI8XAAAAcA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 21:14:30.610297 2026] [autoindex:error] [pid 49081:tid 49139] [client 141.98.11.17:61661] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Mar 20 22:12:10.270851 2026] [:error] [pid 49082:tid 49158] [client 162.241.203.102:32138] [client 162.241.203.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.203.102, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab1VuqpllYJI1LUIdL_n_AAAAVA"]
[Fri Mar 20 22:12:13.738067 2026] [:error] [pid 49170:tid 49190] [client 162.241.203.102:32144] [client 162.241.203.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.203.102, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab1Vvc-c8ctLVDCqUJWlpQAAABA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 22:51:21.726975 2026] [:error] [pid 49082:tid 49145] [client 139.59.227.48:63927] [client 139.59.227.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.227.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab1e6apllYJI1LUIdL_4JwAAAUM"]
[Fri Mar 20 22:51:31.075093 2026] [:error] [pid 49082:tid 49162] [client 139.59.227.48:63927] [client 139.59.227.48] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab1e86pllYJI1LUIdL_4UQAAAVQ"], referer: https://www.google.com/search?q=wordpress
[Fri Mar 20 22:51:31.829613 2026] [:error] [pid 49082:tid 49154] [client 139.59.227.48:63927] [client 139.59.227.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.227.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab1e86pllYJI1LUIdL_4UgAAAUw"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 22:51:57.436069 2026] [:error] [pid 38378:tid 38402] [client 139.59.227.48:53358] [client 139.59.227.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.227.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab1fDVKb3npPsu9Iib2MegAAAhQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 22:58:59.530118 2026] [:error] [pid 51714:tid 51730] [client 198.57.247.212:59528] [client 198.57.247.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.212, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab1gszWI82pxvQ0gksvsvQAAAI4"]
[Fri Mar 20 22:59:02.439161 2026] [:error] [pid 49170:tid 49190] [client 198.57.247.212:59538] [client 198.57.247.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.212, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab1gts-c8ctLVDCqUJWzGAAAABA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 20 23:12:31.331118 2026] [autoindex:error] [pid 27302:tid 27311] [client 141.98.11.17:53445] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Mar 20 23:31:12.542593 2026] [:error] [pid 49082:tid 49161] [client 162.62.231.139:36472] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab1oQKpllYJI1LUIdL8KogAAAVM"]
[Sat Mar 21 00:07:45.635481 2026] [:error] [pid 49170:tid 49176] [client 75.119.155.172:55860] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "ab1w0c-c8ctLVDCqUJXI2QAAAAI"]
[Sat Mar 21 00:07:48.186350 2026] [:error] [pid 49170:tid 49177] [client 75.119.155.172:59846] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "ab1w1M-c8ctLVDCqUJXI4gAAAAM"]
[Sat Mar 21 00:07:50.904931 2026] [:error] [pid 49170:tid 49182] [client 75.119.155.172:59854] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "ab1w1s-c8ctLVDCqUJXI7gAAAAg"]
[Sat Mar 21 00:07:53.487050 2026] [:error] [pid 49082:tid 49151] [client 75.119.155.172:59856] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "ab1w2apllYJI1LUIdL8aPQAAAUk"]
[Sat Mar 21 00:07:56.093190 2026] [:error] [pid 49082:tid 49159] [client 75.119.155.172:59860] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "ab1w3KpllYJI1LUIdL8aTAAAAVE"]
[Sat Mar 21 00:07:58.693903 2026] [:error] [pid 49082:tid 49159] [client 75.119.155.172:38362] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "ab1w3qpllYJI1LUIdL8aWAAAAVE"]
[Sat Mar 21 00:08:01.303561 2026] [:error] [pid 49170:tid 49176] [client 75.119.155.172:38376] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "ab1w4c-c8ctLVDCqUJXI8QAAAAI"]
[Sat Mar 21 00:08:04.006635 2026] [:error] [pid 49082:tid 49162] [client 75.119.155.172:38384] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "ab1w5KpllYJI1LUIdL8aYQAAAVQ"]
[Sat Mar 21 00:08:06.622393 2026] [:error] [pid 49082:tid 49147] [client 75.119.155.172:34392] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ab1w5qpllYJI1LUIdL8abgAAAUU"]
[Sat Mar 21 00:08:09.180186 2026] [:error] [pid 49082:tid 49162] [client 75.119.155.172:34398] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ab1w6apllYJI1LUIdL8ahAAAAVQ"]
[Sat Mar 21 00:08:11.793558 2026] [:error] [pid 49170:tid 49181] [client 75.119.155.172:34402] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ab1w68-c8ctLVDCqUJXJBQAAAAc"]
[Sat Mar 21 00:08:14.393662 2026] [:error] [pid 49170:tid 49183] [client 75.119.155.172:34404] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ab1w7s-c8ctLVDCqUJXJDgAAAAk"]
[Sat Mar 21 00:08:16.956567 2026] [:error] [pid 38305:tid 38333] [client 75.119.155.172:41574] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ab1w8HguiB3cZkKG6iJX4wAAAdU"]
[Sat Mar 21 00:08:19.574680 2026] [:error] [pid 27302:tid 27304] [client 75.119.155.172:41576] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ab1w87DKiUve17xv6yGPywAAAMA"]
[Sat Mar 21 00:08:22.061980 2026] [:error] [pid 51714:tid 51724] [client 75.119.155.172:41586] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ab1w9jWI82pxvQ0gksvxDAAAAIg"]
[Sat Mar 21 00:08:24.670949 2026] [:error] [pid 38219:tid 38235] [client 75.119.155.172:41596] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ab1w-HLdNs2F_zXG7H8WvgAAAYU"]
[Sat Mar 21 00:08:27.331841 2026] [:error] [pid 49082:tid 49157] [client 75.119.155.172:24892] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ab1w-6pllYJI1LUIdL8apAAAAU8"]
[Sat Mar 21 00:08:29.971896 2026] [:error] [pid 49080:tid 49104] [client 75.119.155.172:24900] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ab1w_Yk5CHi4V0A3ttg74QAAAFI"]
[Sat Mar 21 00:08:32.571488 2026] [:error] [pid 49082:tid 49155] [client 75.119.155.172:24904] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ab1xAKpllYJI1LUIdL8awQAAAU0"]
[Sat Mar 21 00:08:35.180599 2026] [:error] [pid 49170:tid 49190] [client 75.119.155.172:24920] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ab1xA8-c8ctLVDCqUJXJKwAAABA"]
[Sat Mar 21 00:08:37.752543 2026] [:error] [pid 49170:tid 49175] [client 75.119.155.172:42702] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ab1xBc-c8ctLVDCqUJXJMAAAAAE"]
[Sat Mar 21 00:08:40.314425 2026] [:error] [pid 38219:tid 38235] [client 75.119.155.172:42704] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "ab1xCHLdNs2F_zXG7H8WyAAAAYU"]
[Sat Mar 21 00:09:25.044218 2026] [:error] [pid 51714:tid 51734] [client 75.119.155.172:20346] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ab1xNTWI82pxvQ0gksvxHgAAAJI"]
[Sat Mar 21 00:09:27.586920 2026] [:error] [pid 49082:tid 49154] [client 75.119.155.172:22520] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "ab1xN6pllYJI1LUIdL8bLgAAAUw"]
[Sat Mar 21 00:09:30.193987 2026] [:error] [pid 38378:tid 38392] [client 75.119.155.172:22530] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "ab1xOlKb3npPsu9Iib2aTgAAAgo"]
[Sat Mar 21 00:09:32.787340 2026] [:error] [pid 49170:tid 49198] [client 75.119.155.172:22542] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "ab1xPM-c8ctLVDCqUJXJkAAAABg"]
[Sat Mar 21 00:09:35.464296 2026] [:error] [pid 51714:tid 51737] [client 75.119.155.172:22548] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ab1xPzWI82pxvQ0gksvxIwAAAJU"]
[Sat Mar 21 00:09:38.138435 2026] [:error] [pid 38378:tid 38406] [client 75.119.155.172:10672] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ab1xQlKb3npPsu9Iib2aWAAAAhg"]
[Sat Mar 21 00:09:40.717460 2026] [:error] [pid 49082:tid 49154] [client 75.119.155.172:10688] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ab1xRKpllYJI1LUIdL8bUgAAAUw"]
[Sat Mar 21 00:09:43.280208 2026] [:error] [pid 49082:tid 49163] [client 75.119.155.172:10704] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ab1xR6pllYJI1LUIdL8baQAAAVU"]
[Sat Mar 21 00:09:45.928918 2026] [:error] [pid 49170:tid 49178] [client 75.119.155.172:10712] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ab1xSc-c8ctLVDCqUJXJlQAAAAQ"]
[Sat Mar 21 00:09:48.479054 2026] [:error] [pid 49080:tid 49108] [client 75.119.155.172:8800] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ab1xTIk5CHi4V0A3ttg8MwAAAFY"]
[Sat Mar 21 00:09:51.129048 2026] [:error] [pid 49170:tid 49186] [client 75.119.155.172:8802] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ab1xT8-c8ctLVDCqUJXJowAAAAw"]
[Sat Mar 21 00:09:53.733958 2026] [:error] [pid 38219:tid 38248] [client 75.119.155.172:8814] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ab1xUXLdNs2F_zXG7H8W5AAAAZI"]
[Sat Mar 21 00:09:56.398297 2026] [:error] [pid 49080:tid 49102] [client 75.119.155.172:8826] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ab1xVIk5CHi4V0A3ttg8SgAAAFA"]
[Sat Mar 21 00:09:59.017179 2026] [:error] [pid 49082:tid 49150] [client 75.119.155.172:35008] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ab1xV6pllYJI1LUIdL8bgAAAAUg"]
[Sat Mar 21 00:10:01.530154 2026] [:error] [pid 49170:tid 49194] [client 75.119.155.172:35018] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ab1xWc-c8ctLVDCqUJXJrgAAABQ"]
[Sat Mar 21 00:10:04.207338 2026] [:error] [pid 49170:tid 49192] [client 75.119.155.172:35020] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ab1xXM-c8ctLVDCqUJXJuQAAABI"]
[Sat Mar 21 00:10:06.620095 2026] [:error] [pid 49080:tid 49091] [client 75.119.155.172:24710] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ab1xXok5CHi4V0A3ttg8WwAAAEU"]
[Sat Mar 21 00:10:09.330875 2026] [:error] [pid 49082:tid 49150] [client 75.119.155.172:24720] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ab1xYapllYJI1LUIdL8bhQAAAUg"]
[Sat Mar 21 00:10:11.850380 2026] [:error] [pid 49170:tid 49178] [client 75.119.155.172:24722] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ab1xY8-c8ctLVDCqUJXJ0QAAAAQ"]
[Sat Mar 21 00:10:14.464113 2026] [:error] [pid 38378:tid 38397] [client 75.119.155.172:24726] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ab1xZlKb3npPsu9Iib2adwAAAg8"]
[Sat Mar 21 00:10:17.042823 2026] [:error] [pid 49080:tid 49089] [client 75.119.155.172:41314] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "ab1xaYk5CHi4V0A3ttg8bQAAAEM"]
[Sat Mar 21 00:10:19.521547 2026] [:error] [pid 38378:tid 38406] [client 75.119.155.172:41328] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "ab1xa1Kb3npPsu9Iib2afAAAAhg"]
[Sat Mar 21 00:11:04.732310 2026] [:error] [pid 49080:tid 49110] [client 75.119.155.172:47688] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ab1xmIk5CHi4V0A3ttg8nAAAAFg"]
[Sat Mar 21 00:11:07.397967 2026] [:error] [pid 38219:tid 38251] [client 75.119.155.172:3004] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ab1xm3LdNs2F_zXG7H8W_gAAAZU"]
[Sat Mar 21 00:11:10.011440 2026] [:error] [pid 49081:tid 49137] [client 75.119.155.172:3016] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ab1xnho1LBAUhfhYPR2gJgAAARY"]
[Sat Mar 21 00:11:12.620005 2026] [:error] [pid 49081:tid 49124] [client 75.119.155.172:3028] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ab1xoBo1LBAUhfhYPR2gJwAAAQk"]
[Sat Mar 21 00:11:15.206814 2026] [:error] [pid 49082:tid 49160] [client 75.119.155.172:3044] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ab1xo6pllYJI1LUIdL8b-gAAAVI"]
[Sat Mar 21 00:11:17.804482 2026] [:error] [pid 51714:tid 51720] [client 75.119.155.172:5652] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ab1xpTWI82pxvQ0gksvxPgAAAIQ"]
[Sat Mar 21 00:11:20.479221 2026] [:error] [pid 49170:tid 49189] [client 75.119.155.172:5668] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ab1xqM-c8ctLVDCqUJXKLQAAAA8"]
[Sat Mar 21 00:11:23.114745 2026] [:error] [pid 49080:tid 49105] [client 75.119.155.172:5670] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ab1xq4k5CHi4V0A3ttg8pgAAAFM"]
[Sat Mar 21 00:11:25.707098 2026] [:error] [pid 38378:tid 38382] [client 75.119.155.172:5686] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ab1xrVKb3npPsu9Iib2aogAAAgA"]
[Sat Mar 21 00:11:28.300860 2026] [:error] [pid 38378:tid 38399] [client 75.119.155.172:14156] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ab1xsFKb3npPsu9Iib2apAAAAhE"]
[Sat Mar 21 00:11:30.920302 2026] [:error] [pid 49080:tid 49108] [client 75.119.155.172:14160] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ab1xsok5CHi4V0A3ttg8sgAAAFY"]
[Sat Mar 21 00:11:53.841982 2026] [:error] [pid 38305:tid 38320] [client 75.119.155.172:60410] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ab1xyXguiB3cZkKG6iJYSgAAAcg"]
[Sat Mar 21 00:11:56.457654 2026] [:error] [pid 49082:tid 49145] [client 75.119.155.172:60416] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ab1xzKpllYJI1LUIdL8cMQAAAUM"]
[Sat Mar 21 00:11:59.123517 2026] [:error] [pid 49080:tid 49102] [client 75.119.155.172:5950] [client 75.119.155.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ab1xz4k5CHi4V0A3ttg8xQAAAFA"]
[Sat Mar 21 01:28:07.153374 2026] [:error] [pid 62754:tid 62817] [client 162.241.61.70:46052] [client 162.241.61.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.61.70, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab2DpxwXN_jHGJ5L7yFjFwAAAAI"]
[Sat Mar 21 01:28:08.632713 2026] [:error] [pid 62754:tid 62821] [client 162.241.61.70:46052] [client 162.241.61.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.61.70, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab2DqBwXN_jHGJ5L7yFjIQAAAAY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 21 02:54:25.068976 2026] [:error] [pid 62754:tid 62826] [client 162.241.63.78:53776] [client 162.241.63.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.63.78, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab2X4RwXN_jHGJ5L7yGPYAAAAAs"]
[Sat Mar 21 02:54:26.713191 2026] [:error] [pid 62754:tid 62832] [client 162.241.63.78:53776] [client 162.241.63.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.63.78, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab2X4hwXN_jHGJ5L7yGPZgAAABE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 21 03:26:34.250595 2026] [:error] [pid 36112:tid 36127] [client 180.110.203.108:60682] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab2fahjfNC6ZAaih0DsoYQAAAAo"]
[Sat Mar 21 07:17:27.597010 2026] [:error] [pid 1491:tid 1566] [client 186.235.174.175:24712] [client 186.235.174.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.235.174.175, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab3Vh63VfHftzE9w9t7kjwAAAIM"]
[Sat Mar 21 07:47:33.507035 2026] [:error] [pid 1601:tid 1606] [client 186.235.174.66:36411] [client 186.235.174.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab3cladDBYVcyITq-IFgTwAAAME"]
[Sat Mar 21 07:48:53.506820 2026] [:error] [pid 1491:tid 1567] [client 186.235.174.66:37471] [client 186.235.174.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.235.174.66, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab3c5a3VfHftzE9w9t75OwAAAIQ"]
[Sat Mar 21 07:50:10.351539 2026] [:error] [pid 1489:tid 1508] [client 186.235.174.66:37150] [client 186.235.174.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.235.174.66, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab3dMlRvnvBO_DG9kxsS5QAAAAU"]
[Sat Mar 21 10:17:07.141188 2026] [:error] [pid 1490:tid 1550] [client 106.54.62.156:40532] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab3_o2SWhIPTatyxDeC5sQAAAE8"]
[Sat Mar 21 11:11:12.629831 2026] [:error] [pid 1489:tid 1520] [client 170.106.180.246:38752] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab4MUFRvnvBO_DG9kxtN1gAAABA"]
[Sat Mar 21 15:05:32.069371 2026] [:error] [pid 33678:tid 33689] [client 43.167.232.38:46762] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab5DPDuClB_om73sXhdJKAAAAgk"]
[Sat Mar 21 15:37:43.941783 2026] [:error] [pid 1489:tid 1503] [client 173.239.214.82:40893] [client 173.239.214.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.82, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab5Kx1RvnvBO_DG9kxusagAAAAA"]
[Sat Mar 21 15:45:49.925414 2026] [:error] [pid 33584:tid 33609] [client 223.190.84.82:1749] [client 223.190.84.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.190.84.82, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab5MreATEQBBo5z2HklzbgAAAdc"]
[Sat Mar 21 16:06:24.033986 2026] [:error] [pid 43052:tid 43061] [client 93.159.241.90:60554] [client 93.159.241.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.159.241.90, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab5RgF5fjm-AiInC1hKvlAAAA4c"]
[Sat Mar 21 17:21:11.522486 2026] [:error] [pid 1490:tid 1545] [client 173.239.214.120:42079] [client 173.239.214.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.120, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab5jB2SWhIPTatyxDeAvFgAAAEo"]
[Sat Mar 21 19:15:25.642260 2026] [:error] [pid 49170:tid 49186] [client 173.239.214.79:26439] [client 173.239.214.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.79, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab59zb1KUC-QISS0eWrMNgAAAQ4"]
[Sat Mar 21 21:12:10.656127 2026] [:error] [pid 49170:tid 49188] [client 173.239.214.105:56501] [client 173.239.214.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.105, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab6ZKr1KUC-QISS0eWoJNgAAARA"]
[Sat Mar 21 21:43:18.760836 2026] [:error] [pid 33678:tid 33696] [client 94.249.50.75:43822] [client 94.249.50.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.50.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab6gdjuClB_om73sXhdthgAAAhA"]
[Sat Mar 21 21:50:32.492703 2026] [:error] [pid 43052:tid 43058] [client 94.249.50.75:49623] [client 94.249.50.75] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab6iKF5fjm-AiInC1hI7-AAAA4Q"]
[Sat Mar 21 21:51:44.765769 2026] [:error] [pid 49170:tid 49178] [client 94.249.50.75:43965] [client 94.249.50.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.50.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab6icL1KUC-QISS0eWoZvgAAAQY"]
[Sun Mar 22 00:43:54.657251 2026] [:error] [pid 40782:tid 41035] [client 193.19.109.153:63941] [client 193.19.109.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.153, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab7KyuaE0aGWZHNA90ttwQAAAII"]
[Sun Mar 22 01:05:23.008934 2026] [:error] [pid 40782:tid 41040] [client 173.239.214.103:25335] [client 173.239.214.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab7P0-aE0aGWZHNA90t0pgAAAIc"]
[Sun Mar 22 01:08:25.415550 2026] [:error] [pid 40780:tid 40963] [client 170.106.35.187:34372] [client 170.106.35.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab7QiSZDsmYIjKpJe4NIEwAAAA8"]
[Sun Mar 22 01:13:38.228766 2026] [:error] [pid 40782:tid 41042] [client 60.188.57.0:43483] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab7RwuaE0aGWZHNA90t3swAAAIk"]
[Sun Mar 22 02:59:20.053340 2026] [:error] [pid 40781:tid 41024] [client 173.239.214.116:40779] [client 173.239.214.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.116, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab7qiDJQuCgg1YvEGBL5uwAAAFI"]
[Sun Mar 22 04:12:52.696600 2026] [:error] [pid 51362:tid 51410] [client 144.48.0.98:60480] [client 144.48.0.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.0.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab77xMOwPm3DXzTDjUeO_AAAAEk"]
[Sun Mar 22 04:53:40.069409 2026] [:error] [pid 51468:tid 51477] [client 173.239.214.120:51407] [client 173.239.214.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.120, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab8FVE2TppSvA8W5CBRxGAAAAME"]
[Sun Mar 22 06:47:59.471444 2026] [:error] [pid 51363:tid 51438] [client 173.239.214.92:46775] [client 173.239.214.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab8gH1wa9x6OCTRkhl1hxAAAAIk"]
[Sun Mar 22 07:54:25.837340 2026] [:error] [pid 40039:tid 40056] [client 43.138.68.113:57728] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab8vsR3aDgUJfBYishlK-QAAAQ8"]
[Sun Mar 22 08:54:31.239844 2026] [:error] [pid 40039:tid 40061] [client 65.108.78.33:13254] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "ab89xx3aDgUJfBYishlwnQAAARQ"]
[Sun Mar 22 08:55:35.674356 2026] [:error] [pid 51468:tid 51479] [client 65.108.78.33:29692] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "ab8-B02TppSvA8W5CBTocwAAAMM"]
[Sun Mar 22 08:55:38.297036 2026] [:error] [pid 51468:tid 51500] [client 65.108.78.33:29700] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "ab8-Ck2TppSvA8W5CBTodwAAANg"]
[Sun Mar 22 08:55:40.804787 2026] [:error] [pid 51361:tid 51379] [client 65.108.78.33:29712] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ab8-DBXYUsdvKC9YWpVSlwAAAAg"]
[Sun Mar 22 08:55:43.357933 2026] [:error] [pid 40039:tid 40055] [client 65.108.78.33:63682] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ab8-Dx3aDgUJfBYishlxNgAAAQ4"]
[Sun Mar 22 08:55:46.097774 2026] [:error] [pid 51361:tid 51389] [client 65.108.78.33:63686] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ab8-EhXYUsdvKC9YWpVSowAAABE"]
[Sun Mar 22 08:55:48.696571 2026] [:error] [pid 51468:tid 51483] [client 65.108.78.33:63702] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ab8-FE2TppSvA8W5CBTogwAAAMc"]
[Sun Mar 22 08:55:51.399888 2026] [:error] [pid 51468:tid 51485] [client 65.108.78.33:63716] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ab8-F02TppSvA8W5CBToiAAAAMk"]
[Sun Mar 22 08:55:53.953928 2026] [:error] [pid 40039:tid 40045] [client 65.108.78.33:47552] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ab8-GR3aDgUJfBYishlxRAAAAQQ"]
[Sun Mar 22 08:55:56.459628 2026] [:error] [pid 40039:tid 40046] [client 65.108.78.33:47576] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ab8-HB3aDgUJfBYishlxSQAAAQU"]
[Sun Mar 22 08:55:59.014860 2026] [:error] [pid 51468:tid 51497] [client 65.108.78.33:47602] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ab8-H02TppSvA8W5CBTongAAANU"]
[Sun Mar 22 08:56:01.724943 2026] [:error] [pid 40039:tid 40060] [client 65.108.78.33:47608] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ab8-IR3aDgUJfBYishlxWwAAARM"]
[Sun Mar 22 08:56:04.357812 2026] [:error] [pid 40039:tid 40065] [client 65.108.78.33:10688] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ab8-JB3aDgUJfBYishlxYQAAARg"]
[Sun Mar 22 08:56:06.899293 2026] [:error] [pid 40039:tid 40063] [client 65.108.78.33:10704] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ab8-Jh3aDgUJfBYishlxbQAAARY"]
[Sun Mar 22 08:56:09.461732 2026] [:error] [pid 51468:tid 51494] [client 65.108.78.33:10718] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ab8-KU2TppSvA8W5CBToqQAAANI"]
[Sun Mar 22 08:56:12.060885 2026] [:error] [pid 51361:tid 51380] [client 65.108.78.33:10720] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ab8-LBXYUsdvKC9YWpVS1AAAAAk"]
[Sun Mar 22 08:56:14.711124 2026] [:error] [pid 51361:tid 51374] [client 65.108.78.33:42856] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "ab8-LhXYUsdvKC9YWpVS1wAAAAM"]
[Sun Mar 22 08:56:17.386993 2026] [:error] [pid 51362:tid 51405] [client 65.108.78.33:42860] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "ab8-McOwPm3DXzTDjUfeRAAAAEQ"]
[Sun Mar 22 08:56:20.110527 2026] [:error] [pid 51362:tid 51416] [client 65.108.78.33:42866] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "ab8-NMOwPm3DXzTDjUfeSQAAAE8"]
[Sun Mar 22 08:56:22.718751 2026] [:error] [pid 51468:tid 51497] [client 65.108.78.33:54804] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "ab8-Nk2TppSvA8W5CBTouwAAANU"]
[Sun Mar 22 08:57:07.094733 2026] [:error] [pid 51363:tid 51433] [client 65.108.78.33:50456] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "ab8-Y1wa9x6OCTRkhl2KcwAAAIU"]
[Sun Mar 22 08:57:09.888430 2026] [:error] [pid 40039:tid 40050] [client 65.108.78.33:50464] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ab8-ZR3aDgUJfBYishlx2QAAAQk"]
[Sun Mar 22 08:57:12.598085 2026] [:error] [pid 40039:tid 40045] [client 65.108.78.33:8806] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ab8-aB3aDgUJfBYishlx5gAAAQQ"]
[Sun Mar 22 08:57:15.105091 2026] [:error] [pid 51363:tid 51449] [client 65.108.78.33:8810] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ab8-a1wa9x6OCTRkhl2KfgAAAJM"]
[Sun Mar 22 08:57:17.841127 2026] [:error] [pid 51468:tid 51492] [client 65.108.78.33:8812] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ab8-bU2TppSvA8W5CBTo-QAAANA"]
[Sun Mar 22 08:57:20.453382 2026] [:error] [pid 51362:tid 51409] [client 65.108.78.33:8816] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ab8-cMOwPm3DXzTDjUfehgAAAEg"]
[Sun Mar 22 08:57:23.123323 2026] [:error] [pid 40039:tid 40055] [client 65.108.78.33:28754] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ab8-cx3aDgUJfBYishlyBQAAAQ4"]
[Sun Mar 22 08:57:25.796429 2026] [:error] [pid 51363:tid 51447] [client 65.108.78.33:28756] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ab8-dVwa9x6OCTRkhl2KhgAAAJE"]
[Sun Mar 22 08:57:28.368227 2026] [:error] [pid 51362:tid 51411] [client 65.108.78.33:28772] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ab8-eMOwPm3DXzTDjUfejwAAAEo"]
[Sun Mar 22 08:57:30.957022 2026] [:error] [pid 51363:tid 51448] [client 65.108.78.33:28788] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ab8-elwa9x6OCTRkhl2KkwAAAJI"]
[Sun Mar 22 08:57:33.574445 2026] [:error] [pid 51361:tid 51379] [client 65.108.78.33:42718] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ab8-fRXYUsdvKC9YWpVTJgAAAAg"]
[Sun Mar 22 08:57:36.209484 2026] [:error] [pid 51468:tid 51485] [client 65.108.78.33:42720] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ab8-gE2TppSvA8W5CBTpBQAAAMk"]
[Sun Mar 22 08:57:38.800143 2026] [:error] [pid 51363:tid 51442] [client 65.108.78.33:42726] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ab8-glwa9x6OCTRkhl2KnAAAAI0"]
[Sun Mar 22 08:57:41.497523 2026] [:error] [pid 51363:tid 51438] [client 65.108.78.33:42740] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ab8-hVwa9x6OCTRkhl2KoAAAAIk"]
[Sun Mar 22 08:57:44.142200 2026] [:error] [pid 51361:tid 51373] [client 65.108.78.33:32092] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ab8-iBXYUsdvKC9YWpVTLQAAAAI"]
[Sun Mar 22 08:57:46.749333 2026] [:error] [pid 51361:tid 51381] [client 65.108.78.33:32094] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ab8-ihXYUsdvKC9YWpVTMgAAAAo"]
[Sun Mar 22 08:57:49.300792 2026] [:error] [pid 51468:tid 51497] [client 65.108.78.33:32100] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ab8-jU2TppSvA8W5CBTpGQAAANU"]
[Sun Mar 22 08:57:51.811677 2026] [:error] [pid 40039:tid 40041] [client 65.108.78.33:32112] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "ab8-jx3aDgUJfBYishlyPQAAAQA"]
[Sun Mar 22 08:57:54.517736 2026] [:error] [pid 51468:tid 51499] [client 65.108.78.33:64340] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "ab8-kk2TppSvA8W5CBTpJAAAANc"]
[Sun Mar 22 08:57:57.287304 2026] [:error] [pid 51363:tid 51439] [client 65.108.78.33:64352] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "ab8-lVwa9x6OCTRkhl2KsAAAAIo"]
[Sun Mar 22 08:57:59.887006 2026] [:error] [pid 51363:tid 51438] [client 65.108.78.33:64358] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "ab8-l1wa9x6OCTRkhl2KsgAAAIk"]
[Sun Mar 22 08:58:02.539067 2026] [:error] [pid 51361:tid 51380] [client 65.108.78.33:26760] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ab8-mhXYUsdvKC9YWpVTOwAAAAk"]
[Sun Mar 22 08:58:44.130833 2026] [:error] [pid 51468:tid 51495] [client 173.239.214.113:48847] [client 173.239.214.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.113, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab8-xE2TppSvA8W5CBTplQAAANM"]
[Sun Mar 22 08:58:50.615268 2026] [:error] [pid 51363:tid 51431] [client 65.108.78.33:2786] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ab8-ylwa9x6OCTRkhl2K2gAAAIM"]
[Sun Mar 22 08:58:53.174888 2026] [:error] [pid 51361:tid 51383] [client 65.108.78.33:19422] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ab8-zRXYUsdvKC9YWpVTeQAAAAw"]
[Sun Mar 22 08:58:55.876330 2026] [:error] [pid 51361:tid 51388] [client 65.108.78.33:19432] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ab8-zxXYUsdvKC9YWpVThgAAABA"]
[Sun Mar 22 08:58:58.564963 2026] [:error] [pid 51468:tid 51493] [client 65.108.78.33:19434] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ab8-0k2TppSvA8W5CBTpqwAAANE"]
[Sun Mar 22 08:59:01.244879 2026] [:error] [pid 40039:tid 40051] [client 65.108.78.33:19446] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ab8-1R3aDgUJfBYishlyqgAAAQo"]
[Sun Mar 22 08:59:03.971467 2026] [:error] [pid 51468:tid 51485] [client 65.108.78.33:54194] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ab8-102TppSvA8W5CBTptQAAAMk"]
[Sun Mar 22 08:59:06.648087 2026] [:error] [pid 51468:tid 51488] [client 65.108.78.33:54200] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ab8-2k2TppSvA8W5CBTpvwAAAMw"]
[Sun Mar 22 08:59:09.159801 2026] [:error] [pid 51363:tid 51430] [client 65.108.78.33:54202] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ab8-3Vwa9x6OCTRkhl2K7QAAAII"]
[Sun Mar 22 08:59:11.796210 2026] [:error] [pid 51363:tid 51428] [client 65.108.78.33:54210] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ab8-31wa9x6OCTRkhl2K8gAAAIA"]
[Sun Mar 22 08:59:14.520378 2026] [:error] [pid 51363:tid 51443] [client 65.108.78.33:41024] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ab8-4lwa9x6OCTRkhl2K9gAAAI4"]
[Sun Mar 22 08:59:17.321249 2026] [:error] [pid 40039:tid 40057] [client 65.108.78.33:41030] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ab8-5R3aDgUJfBYishly0gAAARA"]
[Sun Mar 22 08:59:19.977334 2026] [:error] [pid 40039:tid 40065] [client 65.108.78.33:41042] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ab8-5x3aDgUJfBYishly2AAAARg"]
[Sun Mar 22 08:59:22.676151 2026] [:error] [pid 51363:tid 51428] [client 65.108.78.33:1762] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ab8-6lwa9x6OCTRkhl2K_QAAAIA"]
[Sun Mar 22 09:09:21.240374 2026] [autoindex:error] [pid 51362:tid 51418] [client 62.171.191.117:59728] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 22 10:27:35.820120 2026] [:error] [pid 51362:tid 51411] [client 103.167.68.254:64182] [client 103.167.68.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.167.68.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab9Tl8OwPm3DXzTDjUfzuAAAAEo"]
[Sun Mar 22 10:50:58.142249 2026] [:error] [pid 51468:tid 51476] [client 173.239.214.124:53797] [client 173.239.214.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.124, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab9ZEk2TppSvA8W5CBQccAAAAMA"]
[Sun Mar 22 10:59:40.204361 2026] [:error] [pid 40039:tid 40052] [client 103.167.68.254:51672] [client 103.167.68.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab9bHB3aDgUJfBYishnCLQAAAQs"]
[Sun Mar 22 11:01:08.141617 2026] [:error] [pid 51468:tid 51487] [client 103.167.68.254:53135] [client 103.167.68.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.167.68.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab9bdE2TppSvA8W5CBQhAQAAAMs"]
[Sun Mar 22 11:35:14.738292 2026] [autoindex:error] [pid 51363:tid 51446] [client 52.138.39.105:58341] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 22 11:35:14.949914 2026] [autoindex:error] [pid 51363:tid 51434] [client 52.138.39.105:58341] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 22 11:35:15.160350 2026] [autoindex:error] [pid 51363:tid 51447] [client 52.138.39.105:58341] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 22 11:35:16.452662 2026] [autoindex:error] [pid 51363:tid 51452] [client 52.138.39.105:58341] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 22 11:35:20.235775 2026] [:error] [pid 51363:tid 51439] [client 52.138.39.105:58341] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "ab9jeFwa9x6OCTRkhl28RAAAAIo"]
[Sun Mar 22 11:35:21.063612 2026] [:error] [pid 40039:tid 40060] [client 52.138.39.105:55607] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "ab9jeR3aDgUJfBYishndIgAAARM"]
[Sun Mar 22 11:35:21.888300 2026] [:error] [pid 51363:tid 51449] [client 52.138.39.105:53573] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "ab9jeVwa9x6OCTRkhl28RwAAAJM"]
[Sun Mar 22 11:35:22.715679 2026] [:error] [pid 51363:tid 51448] [client 52.138.39.105:54236] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/autoload_classmap.php"] [unique_id "ab9jelwa9x6OCTRkhl28SwAAAJI"]
[Sun Mar 22 12:45:58.743232 2026] [:error] [pid 51362:tid 51425] [client 45.131.195.68:42537] [client 45.131.195.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.68, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab90BsOwPm3DXzTDjUcWzgAAAFg"]
[Sun Mar 22 14:40:59.049853 2026] [:error] [pid 51363:tid 51454] [client 173.239.214.81:42459] [client 173.239.214.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab-O-1wa9x6OCTRkhl0DrQAAAJg"]
[Sun Mar 22 18:12:51.995526 2026] [:error] [pid 51468:tid 51486] [client 43.166.255.102:49096] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab_Ao02TppSvA8W5CBQv7gAAAMo"]
[Sun Mar 22 18:30:01.480151 2026] [:error] [pid 51361:tid 51387] [client 173.239.214.84:38903] [client 173.239.214.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.84, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab_EqRXYUsdvKC9YWpXNRQAAAA8"]
[Sun Mar 22 21:11:42.209783 2026] [:error] [pid 51362:tid 51411] [client 49.51.243.95:46344] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ab_qjsOwPm3DXzTDjUfWngAAAEo"]
[Sun Mar 22 22:12:49.321653 2026] [:error] [pid 51361:tid 51389] [client 52.139.36.109:11960] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ab_44RXYUsdvKC9YWpUjnwAAABE"]
[Sun Mar 22 22:12:50.144903 2026] [:error] [pid 51468:tid 51480] [client 52.139.36.109:11962] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ab_44k2TppSvA8W5CBSQOQAAAMQ"]
[Sun Mar 22 22:12:50.976731 2026] [:error] [pid 51361:tid 51383] [client 52.139.36.109:11950] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ab_44hXYUsdvKC9YWpUjowAAAAw"]
[Sun Mar 22 22:12:51.800334 2026] [:error] [pid 30166:tid 30183] [client 52.139.36.109:11923] [client 52.139.36.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ab_447m4_26jKMD0zy0qMwAAAUg"]
[Sun Mar 22 22:21:00.425483 2026] [:error] [pid 51361:tid 51383] [client 173.239.214.123:21443] [client 173.239.214.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.123, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ab_6zBXYUsdvKC9YWpUnygAAAAw"]
[Sun Mar 22 22:21:50.560693 2026] [:error] [pid 51361:tid 51375] [client 182.185.174.42:50515] [client 182.185.174.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.185.174.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab_6_hXYUsdvKC9YWpUoGwAAAAQ"]
[Sun Mar 22 22:34:16.607366 2026] [:error] [pid 51362:tid 51421] [client 144.48.0.98:54330] [client 144.48.0.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab_96MOwPm3DXzTDjUft0AAAAFQ"]
[Sun Mar 22 22:35:56.046956 2026] [:error] [pid 51361:tid 51382] [client 144.48.0.98:51691] [client 144.48.0.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.0.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ab_-TBXYUsdvKC9YWpUsuAAAAAs"]
[Sun Mar 22 23:28:50.000369 2026] [:error] [pid 51361:tid 51392] [client 182.185.174.42:58661] [client 182.185.174.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.185.174.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acAKsRXYUsdvKC9YWpU8kAAAABQ"]
[Mon Mar 23 00:15:56.905044 2026] [:error] [pid 30166:tid 30200] [client 173.239.214.85:37609] [client 173.239.214.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acAVvLm4_26jKMD0zy1KVAAAAVc"]
[Mon Mar 23 00:24:31.090691 2026] [:error] [pid 20856:tid 20935] [client 119.28.140.106:47058] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acAXv8xFtXFVNE-X2-J1mwAAANA"]
[Mon Mar 23 00:32:04.387204 2026] [:error] [pid 20587:tid 20650] [client 193.36.225.237:45599] [client 193.36.225.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.237, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acAZhIByf8r3QAk4VXPdswAAAIc"]
[Mon Mar 23 01:34:03.952464 2026] [:error] [pid 20587:tid 20658] [client 5.32.247.130:33105] [client 5.32.247.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.32.247.130, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acAoC4Byf8r3QAk4VXPr3AAAAI8"]
[Mon Mar 23 02:08:24.074924 2026] [:error] [pid 20587:tid 20650] [client 5.135.131.86:60506] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acAwGIByf8r3QAk4VXPyVAAAAIc"]
[Mon Mar 23 02:08:26.552560 2026] [:error] [pid 20856:tid 20921] [client 5.135.131.86:59160] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acAwGsxFtXFVNE-X2-Kd6gAAAMI"]
[Mon Mar 23 02:08:28.942396 2026] [:error] [pid 20574:tid 20594] [client 5.135.131.86:59162] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acAwHNdMXEnEZrwyzJkNPAAAAAU"]
[Mon Mar 23 02:08:31.444449 2026] [:error] [pid 20574:tid 20589] [client 5.135.131.86:59170] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acAwH9dMXEnEZrwyzJkNRwAAAAA"]
[Mon Mar 23 02:08:33.815130 2026] [:error] [pid 20856:tid 20933] [client 5.135.131.86:33850] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acAwIcxFtXFVNE-X2-Kd9wAAAM4"]
[Mon Mar 23 02:08:36.342281 2026] [:error] [pid 20856:tid 20922] [client 5.135.131.86:33862] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acAwJMxFtXFVNE-X2-Kd_gAAAMM"]
[Mon Mar 23 02:08:38.833952 2026] [:error] [pid 20856:tid 20942] [client 5.135.131.86:33876] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acAwJsxFtXFVNE-X2-KeCQAAANc"]
[Mon Mar 23 02:08:41.369275 2026] [:error] [pid 20856:tid 20924] [client 5.135.131.86:33880] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acAwKcxFtXFVNE-X2-KeFAAAAMU"]
[Mon Mar 23 02:08:43.893606 2026] [:error] [pid 27776:tid 27866] [client 5.135.131.86:41146] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acAwK43Eaq7IZ5L-4XVaZwAAARM"]
[Mon Mar 23 02:08:46.392515 2026] [:error] [pid 20856:tid 20930] [client 5.135.131.86:41156] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "acAwLsxFtXFVNE-X2-KeGgAAAMs"]
[Mon Mar 23 02:08:48.867380 2026] [:error] [pid 20584:tid 20623] [client 5.135.131.86:41172] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acAwMCWzr-bD_t6AP_TOUQAAAEc"]
[Mon Mar 23 02:08:51.373764 2026] [:error] [pid 20574:tid 20603] [client 5.135.131.86:41176] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acAwM9dMXEnEZrwyzJkNbAAAAA4"]
[Mon Mar 23 02:08:53.888649 2026] [:error] [pid 20856:tid 20936] [client 5.135.131.86:58962] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acAwNcxFtXFVNE-X2-KeIwAAANE"]
[Mon Mar 23 02:08:56.372153 2026] [:error] [pid 27776:tid 27853] [client 5.135.131.86:58972] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "acAwOI3Eaq7IZ5L-4XVaigAAAQc"]
[Mon Mar 23 02:08:58.721298 2026] [:error] [pid 20587:tid 20666] [client 5.135.131.86:58988] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "acAwOoByf8r3QAk4VXPyeQAAAJc"]
[Mon Mar 23 02:09:01.192970 2026] [:error] [pid 20574:tid 20597] [client 5.135.131.86:58996] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "acAwPddMXEnEZrwyzJkNfgAAAAg"]
[Mon Mar 23 02:09:03.551106 2026] [:error] [pid 20856:tid 20926] [client 5.135.131.86:59034] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "acAwP8xFtXFVNE-X2-KeLQAAAMc"]
[Mon Mar 23 02:09:06.020689 2026] [:error] [pid 27776:tid 27870] [client 5.135.131.86:59050] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acAwQo3Eaq7IZ5L-4XVasQAAARY"]
[Mon Mar 23 02:09:08.374053 2026] [:error] [pid 20856:tid 20926] [client 5.135.131.86:59064] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "acAwRMxFtXFVNE-X2-KeOwAAAMc"]
[Mon Mar 23 02:09:10.847798 2026] [:error] [pid 20584:tid 20629] [client 5.135.131.86:59078] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "acAwRiWzr-bD_t6AP_TOaQAAAE0"]
[Mon Mar 23 02:09:13.349948 2026] [:error] [pid 27776:tid 27858] [client 5.135.131.86:51312] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acAwSY3Eaq7IZ5L-4XVavgAAAQs"]
[Mon Mar 23 02:09:15.671076 2026] [:error] [pid 27776:tid 27849] [client 5.135.131.86:51318] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acAwS43Eaq7IZ5L-4XVa0QAAAQM"]
[Mon Mar 23 02:09:18.154064 2026] [:error] [pid 20856:tid 20919] [client 5.135.131.86:51324] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acAwTsxFtXFVNE-X2-KeTwAAAMA"]
[Mon Mar 23 02:09:20.481639 2026] [:error] [pid 20574:tid 20602] [client 5.135.131.86:51328] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "acAwUNdMXEnEZrwyzJkNoQAAAA0"]
[Mon Mar 23 02:09:51.727179 2026] [:error] [pid 20856:tid 20926] [client 5.135.131.86:51074] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acAwb8xFtXFVNE-X2-KeiAAAAMc"]
[Mon Mar 23 02:09:54.175640 2026] [:error] [pid 20574:tid 20612] [client 5.135.131.86:55076] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acAwctdMXEnEZrwyzJkN5wAAABc"]
[Mon Mar 23 02:09:56.637853 2026] [:error] [pid 20587:tid 20665] [client 5.135.131.86:55090] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "acAwdIByf8r3QAk4VXPyrgAAAJY"]
[Mon Mar 23 02:09:59.100847 2026] [:error] [pid 20584:tid 20639] [client 5.135.131.86:55100] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "acAwdyWzr-bD_t6AP_TOsAAAAFc"]
[Mon Mar 23 02:10:01.627498 2026] [:error] [pid 20856:tid 20930] [client 5.135.131.86:55114] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "acAwecxFtXFVNE-X2-KeoQAAAMs"]
[Mon Mar 23 02:10:04.110993 2026] [:error] [pid 20574:tid 20610] [client 5.135.131.86:54362] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "acAwfNdMXEnEZrwyzJkN-gAAABU"]
[Mon Mar 23 02:10:06.594873 2026] [:error] [pid 20574:tid 20596] [client 5.135.131.86:54366] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "acAwftdMXEnEZrwyzJkOAwAAAAc"]
[Mon Mar 23 02:10:09.072539 2026] [:error] [pid 20587:tid 20643] [client 5.135.131.86:54372] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acAwgYByf8r3QAk4VXPyuwAAAIA"]
[Mon Mar 23 02:10:11.532034 2026] [:error] [pid 20587:tid 20665] [client 5.135.131.86:54386] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "acAwg4Byf8r3QAk4VXPyvwAAAJY"]
[Mon Mar 23 02:10:14.035969 2026] [:error] [pid 20587:tid 20647] [client 5.135.131.86:59906] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "acAwhoByf8r3QAk4VXPyxAAAAIQ"]
[Mon Mar 23 02:10:16.538175 2026] [:error] [pid 27776:tid 27867] [client 5.135.131.86:59918] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "acAwiI3Eaq7IZ5L-4XVbXAAAARQ"]
[Mon Mar 23 02:10:19.019589 2026] [:error] [pid 27776:tid 27852] [client 5.135.131.86:59930] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "acAwi43Eaq7IZ5L-4XVbaAAAAQY"]
[Mon Mar 23 02:10:21.504109 2026] [:error] [pid 20856:tid 20943] [client 5.135.131.86:59944] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "acAwjcxFtXFVNE-X2-KeuQAAANg"]
[Mon Mar 23 02:10:23.955694 2026] [:error] [pid 20574:tid 20601] [client 5.135.131.86:56180] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "acAwj9dMXEnEZrwyzJkOGgAAAAw"]
[Mon Mar 23 02:10:26.415562 2026] [:error] [pid 20584:tid 20636] [client 5.135.131.86:56194] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acAwkiWzr-bD_t6AP_TO1AAAAFQ"]
[Mon Mar 23 02:10:28.730947 2026] [:error] [pid 27776:tid 27870] [client 5.135.131.86:56200] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "acAwlI3Eaq7IZ5L-4XVbhAAAARY"]
[Mon Mar 23 02:10:31.048139 2026] [:error] [pid 20574:tid 20602] [client 5.135.131.86:56204] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "acAwl9dMXEnEZrwyzJkOLAAAAA0"]
[Mon Mar 23 02:10:33.530945 2026] [:error] [pid 27776:tid 27852] [client 5.135.131.86:60720] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acAwmY3Eaq7IZ5L-4XVbjwAAAQY"]
[Mon Mar 23 02:10:35.986990 2026] [:error] [pid 20574:tid 20590] [client 5.135.131.86:60736] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acAwm9dMXEnEZrwyzJkOMQAAAAE"]
[Mon Mar 23 02:10:38.462359 2026] [:error] [pid 20587:tid 20644] [client 5.135.131.86:60740] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acAwnoByf8r3QAk4VXPy2AAAAIE"]
[Mon Mar 23 02:10:40.942684 2026] [:error] [pid 20584:tid 20617] [client 5.135.131.86:60754] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acAwoCWzr-bD_t6AP_TO2AAAAEE"]
[Mon Mar 23 02:10:43.266750 2026] [:error] [pid 20584:tid 20640] [client 5.135.131.86:34054] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acAwoyWzr-bD_t6AP_TO2wAAAFg"]
[Mon Mar 23 02:10:45.741693 2026] [:error] [pid 20587:tid 20647] [client 5.135.131.86:34068] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "acAwpYByf8r3QAk4VXPy4QAAAIQ"]
[Mon Mar 23 02:10:48.206433 2026] [:error] [pid 20587:tid 20648] [client 5.135.131.86:34078] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "acAwqIByf8r3QAk4VXPy5AAAAIU"]
[Mon Mar 23 02:11:14.568984 2026] [:error] [pid 20856:tid 20943] [client 173.239.214.89:48833] [client 173.239.214.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.89, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acAwwsxFtXFVNE-X2-KfLwAAANg"]
[Mon Mar 23 02:11:19.305147 2026] [:error] [pid 27776:tid 27849] [client 5.135.131.86:34086] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acAwx43Eaq7IZ5L-4XVcFQAAAQM"]
[Mon Mar 23 02:11:21.745959 2026] [:error] [pid 27776:tid 27862] [client 5.135.131.86:48878] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "acAwyY3Eaq7IZ5L-4XVcIwAAAQ8"]
[Mon Mar 23 02:11:24.194441 2026] [:error] [pid 20856:tid 20924] [client 5.135.131.86:47618] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "acAwzMxFtXFVNE-X2-KfOwAAAMU"]
[Mon Mar 23 02:11:26.661696 2026] [:error] [pid 20856:tid 20924] [client 5.135.131.86:47630] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "acAwzsxFtXFVNE-X2-KfRQAAAMU"]
[Mon Mar 23 02:11:29.097572 2026] [:error] [pid 27776:tid 27859] [client 5.135.131.86:47646] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acAw0Y3Eaq7IZ5L-4XVcLwAAAQw"]
[Mon Mar 23 02:11:31.564319 2026] [:error] [pid 20856:tid 20932] [client 5.135.131.86:47648] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "acAw08xFtXFVNE-X2-KfTQAAAM0"]
[Mon Mar 23 02:11:34.047735 2026] [:error] [pid 20584:tid 20636] [client 5.135.131.86:33484] [client 5.135.131.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acAw1iWzr-bD_t6AP_TPEwAAAFQ"]
[Mon Mar 23 03:08:27.219920 2026] [autoindex:error] [pid 27776:tid 27862] [client 20.220.145.74:49650] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 03:08:27.425769 2026] [:error] [pid 27776:tid 27849] [client 20.220.145.74:49650] [client 20.220.145.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.145.74, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acA-K43Eaq7IZ5L-4XV6RgAAAQM"]
[Mon Mar 23 03:08:33.225445 2026] [autoindex:error] [pid 27776:tid 27855] [client 20.220.145.74:49650] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 03:08:33.436502 2026] [autoindex:error] [pid 27776:tid 27870] [client 20.220.145.74:49650] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 03:08:34.779473 2026] [autoindex:error] [pid 27776:tid 27847] [client 20.220.145.74:49650] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 03:08:42.372376 2026] [autoindex:error] [pid 27776:tid 27859] [client 20.220.145.74:49650] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Mar 23 03:08:43.677495 2026] [:error] [pid 27776:tid 27854] [client 20.220.145.74:49650] [client 20.220.145.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acA-O43Eaq7IZ5L-4XV6fQAAAQg"]
[Mon Mar 23 03:08:45.834867 2026] [:error] [pid 20856:tid 20931] [client 20.220.145.74:49217] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "acA-PcxFtXFVNE-X2-K4KwAAAMw"]
[Mon Mar 23 03:08:46.656496 2026] [:error] [pid 20587:tid 20646] [client 20.220.145.74:49663] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "acA-PoByf8r3QAk4VXMB0QAAAIM"]
[Mon Mar 23 03:08:47.477223 2026] [:error] [pid 20584:tid 20636] [client 20.220.145.74:49655] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "acA-PyWzr-bD_t6AP_TaFgAAAFQ"]
[Mon Mar 23 03:08:48.309075 2026] [:error] [pid 20856:tid 20943] [client 20.220.145.74:49637] [client 20.220.145.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "acA-QMxFtXFVNE-X2-K4MQAAANg"]
[Mon Mar 23 03:50:57.261318 2026] [:error] [pid 23539:tid 23552] [client 43.135.142.7:43914] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acBIIX7Dh3qWGSpIAZUPGwAAAMQ"]
[Mon Mar 23 04:06:59.431319 2026] [:error] [pid 23439:tid 23450] [client 173.239.214.93:47953] [client 173.239.214.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.93, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acBL46Zv8XIzUKdgaMcqIwAAAAE"]
[Mon Mar 23 06:02:10.574465 2026] [:error] [pid 14573:tid 14578] [client 173.239.214.98:43505] [client 173.239.214.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.98, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acBm4u-oSmHn3q4_J1G1pgAAAUM"]
[Mon Mar 23 07:02:28.197596 2026] [:error] [pid 23539:tid 23558] [client 39.37.187.42:57456] [client 39.37.187.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.37.187.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acB1BH7Dh3qWGSpIAZVl7wAAAMo"]
[Mon Mar 23 07:23:53.093719 2026] [:error] [pid 23439:tid 23459] [client 43.153.86.78:52932] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acB6CaZv8XIzUKdgaMdJTgAAAAo"]
[Mon Mar 23 09:51:36.399922 2026] [:error] [pid 23440:tid 23486] [client 173.239.214.103:33145] [client 173.239.214.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acCcqD49_8n8h_ttcUrtZwAAAEo"]
[Mon Mar 23 11:25:18.141162 2026] [:error] [pid 23441:tid 23524] [client 27.34.64.232:14379] [client 27.34.64.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.64.232, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acCynhq7S-oOqSXZEr6UCQAAAJU"]
[Mon Mar 23 11:25:19.817429 2026] [:error] [pid 14573:tid 14596] [client 59.96.3.202:43359] [client 59.96.3.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.96.3.202, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acCyn--oSmHn3q4_J1Ev9wAAAVU"]
[Mon Mar 23 11:30:54.566623 2026] [:error] [pid 57265:tid 57279] [client 27.34.64.232:54283] [client 27.34.64.232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acCz7mNLjPJJkhuqCshNCgAAAQw"]
[Mon Mar 23 11:45:48.179022 2026] [:error] [pid 35165:tid 35189] [client 173.239.214.108:64419] [client 173.239.214.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.108, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acC3bM6udpN6Esk7JKswawAAAZU"]
[Mon Mar 23 11:51:32.868862 2026] [:error] [pid 57265:tid 57272] [client 59.96.3.202:25598] [client 59.96.3.202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acC4xGNLjPJJkhuqCshbcQAAAQU"]
[Mon Mar 23 11:53:04.843533 2026] [:error] [pid 23441:tid 23505] [client 59.96.3.202:26849] [client 59.96.3.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.96.3.202, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acC5IBq7S-oOqSXZEr6YewAAAII"]
[Mon Mar 23 13:39:46.475358 2026] [:error] [pid 23539:tid 23553] [client 173.239.214.84:39205] [client 173.239.214.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.84, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acDSIn7Dh3qWGSpIAZXcZQAAAMU"]
[Mon Mar 23 14:11:46.374811 2026] [:error] [pid 57265:tid 57276] [client 43.166.253.94:48714] [client 43.166.253.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acDZomNLjPJJkhuqCsimsgAAAQk"]
[Mon Mar 23 15:06:13.461439 2026] [:error] [pid 23539:tid 23552] [client 103.93.219.6:17895] [client 103.93.219.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.93.219.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acDmZX7Dh3qWGSpIAZXuDwAAAMQ"]
[Mon Mar 23 15:34:11.201703 2026] [:error] [pid 57265:tid 57282] [client 173.239.214.115:21653] [client 173.239.214.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.115, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acDs82NLjPJJkhuqCsjSIAAAAQ8"]
[Mon Mar 23 17:01:21.092784 2026] [:error] [pid 23539:tid 23556] [client 20.102.82.167:17979] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acEBYX7Dh3qWGSpIAZUJIAAAAMg"]
[Mon Mar 23 17:01:21.970922 2026] [:error] [pid 35165:tid 35174] [client 20.102.82.167:17935] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acEBYc6udpN6Esk7JKucpwAAAYY"]
[Mon Mar 23 17:01:22.812417 2026] [:error] [pid 14573:tid 14584] [client 20.102.82.167:18194] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acEBYu-oSmHn3q4_J1Gc6wAAAUk"]
[Mon Mar 23 17:01:23.635146 2026] [:error] [pid 35165:tid 35171] [client 20.102.82.167:17956] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acEBY86udpN6Esk7JKucrQAAAYM"]
[Mon Mar 23 17:34:41.570845 2026] [:error] [pid 57265:tid 57283] [client 49.37.233.1:52622] [client 49.37.233.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.233.1, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acEJMWNLjPJJkhuqCsgZZwAAARA"]
[Mon Mar 23 17:47:45.081972 2026] [:error] [pid 14573:tid 14582] [client 49.37.233.1:63081] [client 49.37.233.1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acEMQe-oSmHn3q4_J1GxkwAAAUc"]
[Mon Mar 23 19:33:22.023197 2026] [:error] [pid 23439:tid 23455] [client 147.135.213.172:59422] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acElAqZv8XIzUKdgaMeZYwAAAAY"]
[Mon Mar 23 19:33:24.463309 2026] [:error] [pid 57265:tid 57289] [client 147.135.213.172:38574] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acElBGNLjPJJkhuqCshnEwAAARY"]
[Mon Mar 23 19:33:26.937225 2026] [:error] [pid 57265:tid 57288] [client 147.135.213.172:38586] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acElBmNLjPJJkhuqCshnJwAAARU"]
[Mon Mar 23 19:33:29.253928 2026] [:error] [pid 23539:tid 23560] [client 147.135.213.172:38590] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acElCX7Dh3qWGSpIAZUw6AAAAMw"]
[Mon Mar 23 19:33:31.573923 2026] [:error] [pid 35165:tid 35175] [client 147.135.213.172:38602] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acElC86udpN6Esk7JKvObQAAAYc"]
[Mon Mar 23 19:33:34.046216 2026] [:error] [pid 57265:tid 57267] [client 147.135.213.172:40068] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acElDmNLjPJJkhuqCshnNQAAAQA"]
[Mon Mar 23 19:33:36.494339 2026] [:error] [pid 23539:tid 23561] [client 147.135.213.172:40080] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acElEH7Dh3qWGSpIAZUw8QAAAM0"]
[Mon Mar 23 19:33:38.974408 2026] [:error] [pid 57265:tid 57271] [client 147.135.213.172:40094] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acElEmNLjPJJkhuqCshnPAAAAQQ"]
[Mon Mar 23 19:33:41.467601 2026] [:error] [pid 23441:tid 23511] [client 147.135.213.172:40106] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acElFRq7S-oOqSXZEr7pMgAAAIg"]
[Mon Mar 23 19:33:43.934219 2026] [:error] [pid 23441:tid 23525] [client 147.135.213.172:49120] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "acElFxq7S-oOqSXZEr7pPAAAAJY"]
[Mon Mar 23 19:33:46.401097 2026] [:error] [pid 57265:tid 57278] [client 147.135.213.172:49130] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acElGmNLjPJJkhuqCshnYwAAAQs"]
[Mon Mar 23 19:33:48.851214 2026] [:error] [pid 35165:tid 35188] [client 147.135.213.172:49138] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acElHM6udpN6Esk7JKvOgwAAAZQ"]
[Mon Mar 23 19:33:51.322647 2026] [:error] [pid 23440:tid 23499] [client 147.135.213.172:49154] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acElHz49_8n8h_ttcUo-DgAAAFc"]
[Mon Mar 23 19:33:53.804185 2026] [:error] [pid 23440:tid 23482] [client 147.135.213.172:39964] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "acElIT49_8n8h_ttcUo-FwAAAEY"]
[Mon Mar 23 19:33:56.098657 2026] [:error] [pid 57265:tid 57267] [client 147.135.213.172:39970] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "acElJGNLjPJJkhuqCshnewAAAQA"]
[Mon Mar 23 19:33:58.573914 2026] [:error] [pid 23439:tid 23469] [client 147.135.213.172:39974] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "acElJqZv8XIzUKdgaMeZbQAAABQ"]
[Mon Mar 23 19:34:01.038173 2026] [:error] [pid 23539:tid 23551] [client 147.135.213.172:39982] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "acElKX7Dh3qWGSpIAZUxDgAAAMM"]
[Mon Mar 23 19:34:03.499064 2026] [:error] [pid 23441:tid 23506] [client 147.135.213.172:60198] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acElKxq7S-oOqSXZEr7pSwAAAIM"]
[Mon Mar 23 19:34:05.810512 2026] [:error] [pid 35165:tid 35176] [client 147.135.213.172:60210] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "acElLc6udpN6Esk7JKvOmwAAAYg"]
[Mon Mar 23 19:34:08.279423 2026] [:error] [pid 14573:tid 14585] [client 147.135.213.172:60218] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "acElMO-oSmHn3q4_J1Hl5QAAAUo"]
[Mon Mar 23 19:34:10.766520 2026] [:error] [pid 14573:tid 14583] [client 147.135.213.172:60228] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acElMu-oSmHn3q4_J1Hl9AAAAUg"]
[Mon Mar 23 19:34:13.209252 2026] [:error] [pid 23539:tid 23572] [client 147.135.213.172:60276] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acElNX7Dh3qWGSpIAZUxJAAAANg"]
[Mon Mar 23 19:34:15.537617 2026] [:error] [pid 23439:tid 23462] [client 147.135.213.172:60286] [client 147.135.213.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acElN6Zv8XIzUKdgaMeZfwAAAA0"]
[Mon Mar 23 19:38:27.932728 2026] [:error] [pid 57265:tid 57289] [client 125.94.144.102:49884] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acEmM2NLjPJJkhuqCshpfQAAARY"]
[Mon Mar 23 20:28:17.062878 2026] [:error] [pid 38178:tid 38249] [client 43.159.145.149:39986] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acEx4Q0axWfXsVvR9uczEwAAAIc"]
[Mon Mar 23 23:02:06.511589 2026] [:error] [pid 38176:tid 38204] [client 165.22.48.196:58415] [client 165.22.48.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.48.196, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acFV7ktG4qlh1gvNjuJavQAAABE"], referer: https://duckduckgo.com/
[Mon Mar 23 23:02:14.764214 2026] [:error] [pid 38176:tid 38208] [client 165.22.48.196:58415] [client 165.22.48.196] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acFV9ktG4qlh1gvNjuJazQAAABU"], referer: https://www.bing.com/
[Mon Mar 23 23:02:15.187477 2026] [:error] [pid 38176:tid 38204] [client 165.22.48.196:58415] [client 165.22.48.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.48.196, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acFV90tG4qlh1gvNjuJazgAAABE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Mar 23 23:02:44.112842 2026] [:error] [pid 38306:tid 38320] [client 165.22.48.196:62565] [client 165.22.48.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.48.196, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acFWFDkL8qwu-hHc6BjIHgAAAQw"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 24 00:38:23.922678 2026] [:error] [pid 56435:tid 56501] [client 20.215.56.86:19945] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acFsf8rwr-l5A-s9ryBUxgAAAQI"]
[Tue Mar 24 00:38:24.999818 2026] [:error] [pid 56435:tid 56523] [client 20.215.56.86:24166] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acFsgMrwr-l5A-s9ryBUzQAAARY"]
[Tue Mar 24 00:38:26.377910 2026] [:error] [pid 56237:tid 56328] [client 20.215.56.86:19456] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acFsggymO0MnzQb90MMR2gAAAIc"]
[Tue Mar 24 00:38:27.350076 2026] [:error] [pid 56435:tid 56505] [client 20.215.56.86:13945] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acFsg8rwr-l5A-s9ryBU1wAAAQY"]
[Tue Mar 24 00:38:28.157824 2026] [:error] [pid 56237:tid 56344] [client 20.215.56.86:62909] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "acFshAymO0MnzQb90MMR4AAAAJc"]
[Tue Mar 24 00:38:29.286132 2026] [:error] [pid 56238:tid 56371] [client 20.215.56.86:9591] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "acFshVSqceFAZRgPDq6FgwAAANc"]
[Tue Mar 24 00:38:30.160605 2026] [:error] [pid 56435:tid 56519] [client 20.215.56.86:19483] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "acFshsrwr-l5A-s9ryBU3wAAARI"]
[Tue Mar 24 00:38:31.305128 2026] [:error] [pid 56435:tid 56511] [client 20.215.56.86:26936] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "acFsh8rwr-l5A-s9ryBU5gAAAQs"]
[Tue Mar 24 00:38:32.288910 2026] [:error] [pid 56435:tid 56514] [client 20.215.56.86:8974] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "acFsiMrwr-l5A-s9ryBU7AAAAQ0"]
[Tue Mar 24 00:38:33.713953 2026] [:error] [pid 56435:tid 56519] [client 20.215.56.86:26884] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "acFsicrwr-l5A-s9ryBU8AAAARI"]
[Tue Mar 24 00:38:34.884582 2026] [:error] [pid 56237:tid 56332] [client 20.215.56.86:13627] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "acFsigymO0MnzQb90MMR8QAAAIs"]
[Tue Mar 24 00:38:37.170784 2026] [:error] [pid 56236:tid 56297] [client 20.215.56.86:32585] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "acFsjXapFgYp0uZ8twATpAAAAEQ"]
[Tue Mar 24 00:38:38.631065 2026] [:error] [pid 56238:tid 56371] [client 20.215.56.86:8992] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "acFsjlSqceFAZRgPDq6FkgAAANc"]
[Tue Mar 24 00:38:39.512074 2026] [:error] [pid 56238:tid 56348] [client 20.215.56.86:1711] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "acFsj1SqceFAZRgPDq6FlwAAAMA"]
[Tue Mar 24 00:38:40.259093 2026] [:error] [pid 56238:tid 56355] [client 20.215.56.86:8210] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "acFskFSqceFAZRgPDq6FmgAAAMc"]
[Tue Mar 24 00:38:41.986717 2026] [:error] [pid 56237:tid 56345] [client 20.215.56.86:39449] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "acFskQymO0MnzQb90MMR-wAAAJg"]
[Tue Mar 24 00:38:43.200510 2026] [:error] [pid 56238:tid 56359] [client 20.215.56.86:17616] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acFsk1SqceFAZRgPDq6FnwAAAMs"]
[Tue Mar 24 00:38:44.209889 2026] [:error] [pid 56435:tid 56499] [client 20.215.56.86:10761] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acFslMrwr-l5A-s9ryBVBgAAAQA"]
[Tue Mar 24 00:38:45.793498 2026] [:error] [pid 56435:tid 56510] [client 20.215.56.86:13630] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acFslcrwr-l5A-s9ryBVCQAAAQo"]
[Tue Mar 24 00:38:47.198110 2026] [:error] [pid 56435:tid 56523] [client 20.215.56.86:13607] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acFsl8rwr-l5A-s9ryBVEAAAARY"]
[Tue Mar 24 00:38:48.166567 2026] [:error] [pid 56435:tid 56499] [client 20.215.56.86:26921] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.php"] [unique_id "acFsmMrwr-l5A-s9ryBVFQAAAQA"]
[Tue Mar 24 00:38:49.765065 2026] [:error] [pid 56435:tid 56521] [client 20.215.56.86:13951] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.php"] [unique_id "acFsmcrwr-l5A-s9ryBVHwAAARQ"]
[Tue Mar 24 00:38:50.713668 2026] [:error] [pid 56238:tid 56348] [client 20.215.56.86:19461] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.php"] [unique_id "acFsmlSqceFAZRgPDq6FsQAAAMA"]
[Tue Mar 24 00:38:51.718398 2026] [:error] [pid 56238:tid 56354] [client 20.215.56.86:10767] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.php"] [unique_id "acFsm1SqceFAZRgPDq6FtQAAAMY"]
[Tue Mar 24 00:38:52.603636 2026] [:error] [pid 56435:tid 56525] [client 20.215.56.86:48852] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "acFsnMrwr-l5A-s9ryBVLQAAARg"]
[Tue Mar 24 00:38:53.844722 2026] [:error] [pid 56435:tid 56515] [client 20.215.56.86:35298] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "acFsncrwr-l5A-s9ryBVMQAAAQ4"]
[Tue Mar 24 00:38:55.189875 2026] [:error] [pid 56238:tid 56351] [client 20.215.56.86:7210] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "acFsn1SqceFAZRgPDq6FvQAAAMM"]
[Tue Mar 24 00:38:56.023000 2026] [:error] [pid 56238:tid 56353] [client 20.215.56.86:17628] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "acFsoFSqceFAZRgPDq6FwwAAAMU"]
[Tue Mar 24 00:38:56.813054 2026] [:error] [pid 56435:tid 56499] [client 20.215.56.86:25944] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acFsoMrwr-l5A-s9ryBVOQAAAQA"]
[Tue Mar 24 00:38:58.044430 2026] [:error] [pid 56238:tid 56349] [client 20.215.56.86:7179] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acFsolSqceFAZRgPDq6FxwAAAME"]
[Tue Mar 24 00:38:59.745926 2026] [:error] [pid 56435:tid 56507] [client 20.215.56.86:32639] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acFso8rwr-l5A-s9ryBVQAAAAQc"]
[Tue Mar 24 00:39:00.831670 2026] [:error] [pid 56238:tid 56356] [client 20.215.56.86:32608] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acFspFSqceFAZRgPDq6FzwAAAMg"]
[Tue Mar 24 00:39:02.448591 2026] [:error] [pid 56238:tid 56352] [client 20.215.56.86:14593] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "acFsplSqceFAZRgPDq6F0wAAAMQ"]
[Tue Mar 24 00:39:03.369071 2026] [:error] [pid 56236:tid 56315] [client 20.215.56.86:46273] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "acFsp3apFgYp0uZ8twATywAAAFY"]
[Tue Mar 24 00:39:04.898539 2026] [:error] [pid 56238:tid 56357] [client 20.215.56.86:29000] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "acFsqFSqceFAZRgPDq6F2gAAAMk"]
[Tue Mar 24 00:39:05.791097 2026] [:error] [pid 56435:tid 56499] [client 20.215.56.86:46881] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "acFsqcrwr-l5A-s9ryBVTgAAAQA"]
[Tue Mar 24 00:39:06.529513 2026] [:error] [pid 56238:tid 56368] [client 20.215.56.86:13137] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "acFsqlSqceFAZRgPDq6F3wAAANQ"]
[Tue Mar 24 00:39:07.422764 2026] [:error] [pid 56238:tid 56363] [client 20.215.56.86:16829] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "acFsq1SqceFAZRgPDq6F5gAAAM8"]
[Tue Mar 24 00:39:08.263440 2026] [:error] [pid 56435:tid 56499] [client 20.215.56.86:46319] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "acFsrMrwr-l5A-s9ryBVWAAAAQA"]
[Tue Mar 24 00:39:09.182539 2026] [:error] [pid 56435:tid 56508] [client 20.215.56.86:13160] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "acFsrcrwr-l5A-s9ryBVXgAAAQg"]
[Tue Mar 24 00:39:10.088487 2026] [:error] [pid 56237:tid 56341] [client 20.215.56.86:16817] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "acFsrgymO0MnzQb90MMSCQAAAJQ"]
[Tue Mar 24 00:39:11.109785 2026] [:error] [pid 56238:tid 56372] [client 20.215.56.86:13165] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "acFsr1SqceFAZRgPDq6F7AAAANg"]
[Tue Mar 24 00:39:12.026858 2026] [:error] [pid 56238:tid 56359] [client 20.215.56.86:46875] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "acFssFSqceFAZRgPDq6F8wAAAMs"]
[Tue Mar 24 00:39:12.912449 2026] [:error] [pid 56238:tid 56371] [client 20.215.56.86:16815] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "acFssFSqceFAZRgPDq6F-QAAANc"]
[Tue Mar 24 00:39:13.991061 2026] [:error] [pid 56435:tid 56510] [client 20.215.56.86:14951] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "acFsscrwr-l5A-s9ryBVbAAAAQo"]
[Tue Mar 24 00:39:14.888526 2026] [:error] [pid 56435:tid 56499] [client 20.215.56.86:9056] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "acFsssrwr-l5A-s9ryBVbgAAAQA"]
[Tue Mar 24 00:39:15.911982 2026] [:error] [pid 56237:tid 56336] [client 20.215.56.86:49449] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "acFsswymO0MnzQb90MMSDgAAAI8"]
[Tue Mar 24 00:39:16.851755 2026] [:error] [pid 56435:tid 56502] [client 20.215.56.86:1799] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "acFstMrwr-l5A-s9ryBVeAAAAQM"]
[Tue Mar 24 00:39:17.777628 2026] [:error] [pid 56237:tid 56339] [client 20.215.56.86:11873] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acFstQymO0MnzQb90MMSEAAAAJI"]
[Tue Mar 24 00:39:19.238742 2026] [:error] [pid 56435:tid 56501] [client 20.215.56.86:16813] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acFst8rwr-l5A-s9ryBVfgAAAQI"]
[Tue Mar 24 00:39:19.874302 2026] [:error] [pid 56237:tid 56341] [client 20.215.56.86:48146] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acFstwymO0MnzQb90MMSFQAAAJQ"]
[Tue Mar 24 00:39:20.651105 2026] [:error] [pid 56435:tid 56511] [client 20.215.56.86:9314] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acFsuMrwr-l5A-s9ryBVgQAAAQs"]
[Tue Mar 24 00:39:21.508411 2026] [:error] [pid 56435:tid 56510] [client 20.215.56.86:1825] [client 20.215.56.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "acFsucrwr-l5A-s9ryBVhwAAAQo"]
[Tue Mar 24 00:39:32.302744 2026] [:error] [pid 56237:tid 56329] [client 20.215.56.86:23362] [client 20.215.56.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.215.56.86, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acFsxAymO0MnzQb90MMSMQAAAIg"]
[Tue Mar 24 02:15:00.139649 2026] [:error] [pid 56238:tid 56348] [client 74.58.176.108:58366] [client 74.58.176.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.58.176.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acGDJFSqceFAZRgPDq65pQAAAMA"]
[Tue Mar 24 05:19:35.336573 2026] [:error] [pid 3137:tid 3155] [client 5.32.247.130:64056] [client 5.32.247.130] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acGuZ5dZesutm6dfYM_X5QAAANA"]
[Tue Mar 24 05:20:54.592680 2026] [:error] [pid 3137:tid 3152] [client 5.32.247.130:55185] [client 5.32.247.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.32.247.130, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acGutpdZesutm6dfYM_YpwAAAM0"]
[Tue Mar 24 06:05:45.065582 2026] [:error] [pid 38767:tid 38786] [client 43.135.140.225:53596] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acG5OfwkUqN4GJAI5oWCqAAAARA"]
[Tue Mar 24 09:02:46.673217 2026] [:error] [pid 3032:tid 3127] [client 185.223.152.126:30525] [client 185.223.152.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.126, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acHitia_-JXXD03-JNz4DwAAAJc"]
[Tue Mar 24 09:37:35.919117 2026] [:error] [pid 48219:tid 48305] [client 154.205.10.241:53691] [client 154.205.10.241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "acHq3yhf3b4R_lAIyv_lNAAAAhg"]
[Tue Mar 24 09:58:42.471204 2026] [autoindex:error] [pid 48214:tid 48259] [client 45.151.122.139:61477] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 24 11:34:53.154162 2026] [:error] [pid 64198:tid 64211] [client 117.222.93.163:62450] [client 117.222.93.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.222.93.163, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acIGXXVzJqf6OS_oSZ2qcwAAAUs"]
[Tue Mar 24 11:46:43.469520 2026] [:error] [pid 64198:tid 64219] [client 117.222.93.163:65057] [client 117.222.93.163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acIJI3VzJqf6OS_oSZ2zcgAAAVM"]
[Tue Mar 24 12:51:33.957874 2026] [:error] [pid 38767:tid 38788] [client 49.51.195.195:40462] [client 49.51.195.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acIYVfwkUqN4GJAI5oVCsAAAARI"]
[Tue Mar 24 13:26:13.785901 2026] [:error] [pid 38767:tid 38780] [client 217.182.195.126:52764] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acIgdfwkUqN4GJAI5oVSegAAAQo"]
[Tue Mar 24 13:26:16.141728 2026] [:error] [pid 64198:tid 64203] [client 217.182.195.126:41178] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acIgeHVzJqf6OS_oSZ30WwAAAUM"]
[Tue Mar 24 13:26:18.718759 2026] [:error] [pid 3032:tid 3128] [client 217.182.195.126:41184] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acIgeia_-JXXD03-JNwcwgAAAJg"]
[Tue Mar 24 13:26:21.105399 2026] [:error] [pid 3031:tid 3098] [client 217.182.195.126:41196] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acIgfaJBKytnG47nuiYW4AAAAFY"]
[Tue Mar 24 13:26:23.600376 2026] [:error] [pid 38767:tid 38793] [client 217.182.195.126:41204] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acIgf_wkUqN4GJAI5oVSigAAARc"]
[Tue Mar 24 13:26:26.009782 2026] [:error] [pid 38767:tid 38773] [client 217.182.195.126:55194] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acIggvwkUqN4GJAI5oVSlwAAAQM"]
[Tue Mar 24 13:26:28.504674 2026] [:error] [pid 48128:tid 48162] [client 217.182.195.126:55202] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acIghMvR4LIMFLbM5VkUZAAAAYo"]
[Tue Mar 24 13:26:30.959846 2026] [:error] [pid 48214:tid 48259] [client 217.182.195.126:55214] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acIghreshLWZ3uUDHKkp_AAAAcc"]
[Tue Mar 24 13:26:33.370915 2026] [:error] [pid 38767:tid 38784] [client 217.182.195.126:55216] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acIgifwkUqN4GJAI5oVSsgAAAQ4"]
[Tue Mar 24 13:26:35.856167 2026] [:error] [pid 64198:tid 64222] [client 217.182.195.126:47290] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "acIgi3VzJqf6OS_oSZ301AAAAVY"]
[Tue Mar 24 13:26:38.212671 2026] [:error] [pid 48219:tid 48291] [client 217.182.195.126:47298] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acIgjihf3b4R_lAIyv8gpgAAAgo"]
[Tue Mar 24 13:26:40.732431 2026] [:error] [pid 38767:tid 38789] [client 217.182.195.126:47302] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acIgkPwkUqN4GJAI5oVSzQAAARM"]
[Tue Mar 24 13:26:43.259297 2026] [:error] [pid 64198:tid 64219] [client 217.182.195.126:47310] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acIgk3VzJqf6OS_oSZ306gAAAVM"]
[Tue Mar 24 13:26:45.703670 2026] [:error] [pid 64198:tid 64220] [client 217.182.195.126:57958] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "acIglXVzJqf6OS_oSZ30-AAAAVQ"]
[Tue Mar 24 13:26:48.218018 2026] [:error] [pid 3031:tid 3094] [client 217.182.195.126:57972] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "acIgmKJBKytnG47nuiYW5QAAAFI"]
[Tue Mar 24 13:26:50.716245 2026] [:error] [pid 3030:tid 3062] [client 217.182.195.126:57988] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "acIgmgyOuILyynfcqfkydQAAAA0"]
[Tue Mar 24 13:26:53.222250 2026] [:error] [pid 3032:tid 3107] [client 217.182.195.126:57998] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "acIgnSa_-JXXD03-JNwc1AAAAIQ"]
[Tue Mar 24 13:26:55.672082 2026] [:error] [pid 64198:tid 64208] [client 217.182.195.126:58070] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acIgn3VzJqf6OS_oSZ31HQAAAUg"]
[Tue Mar 24 13:26:58.072949 2026] [:error] [pid 48219:tid 48298] [client 217.182.195.126:58082] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "acIgoihf3b4R_lAIyv8gzAAAAhE"]
[Tue Mar 24 13:27:00.404854 2026] [:error] [pid 64198:tid 64204] [client 217.182.195.126:58088] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "acIgpHVzJqf6OS_oSZ31LwAAAUQ"]
[Tue Mar 24 13:27:02.889805 2026] [:error] [pid 3137:tid 3161] [client 217.182.195.126:58102] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acIgppdZesutm6dfYM-1vwAAANY"]
[Tue Mar 24 13:27:05.397508 2026] [:error] [pid 38767:tid 38784] [client 217.182.195.126:58108] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acIgqfwkUqN4GJAI5oVS7QAAAQ4"]
[Tue Mar 24 13:27:07.876564 2026] [:error] [pid 64198:tid 64212] [client 217.182.195.126:43622] [client 217.182.195.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acIgq3VzJqf6OS_oSZ31QgAAAUw"]
[Tue Mar 24 14:48:46.910554 2026] [:error] [pid 48219:tid 48303] [client 43.166.7.113:53680] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acIzzihf3b4R_lAIyv8w6wAAAhY"]
[Tue Mar 24 15:26:37.169479 2026] [:error] [pid 3137:tid 3143] [client 45.131.195.50:28877] [client 45.131.195.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acI8rZdZesutm6dfYM_TAAAAAMQ"]
[Tue Mar 24 16:27:32.048287 2026] [autoindex:error] [pid 38767:tid 38771] [client 213.199.63.167:58144] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 24 16:33:58.909362 2026] [:error] [pid 64198:tid 64218] [client 188.71.207.96:43730] [client 188.71.207.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.71.207.96, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acJMdnVzJqf6OS_oSZ1I-gAAAVI"]
[Tue Mar 24 16:39:32.651490 2026] [:error] [pid 38767:tid 38779] [client 188.71.207.96:43734] [client 188.71.207.96] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acJNxPwkUqN4GJAI5oWrsgAAAQk"]
[Tue Mar 24 20:55:36.700183 2026] [:error] [pid 64198:tid 64222] [client 50.87.144.36:45416] [client 50.87.144.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acKJyHVzJqf6OS_oSZ3CaAAAAVY"]
[Tue Mar 24 20:55:38.711682 2026] [:error] [pid 64198:tid 64202] [client 50.87.144.36:45416] [client 50.87.144.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acKJynVzJqf6OS_oSZ3CaQAAAUI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Mar 24 21:45:46.968914 2026] [:error] [pid 64198:tid 64221] [client 5.36.92.137:54398] [client 5.36.92.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.36.92.137, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acKVinVzJqf6OS_oSZ3TJQAAAVU"]
[Wed Mar 25 01:25:22.569900 2026] [:error] [pid 57702:tid 57908] [client 182.44.2.148:43884] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acLJAqS8TU_xcQFvlnYHYAAAAAU"]
[Wed Mar 25 01:53:58.615339 2026] [:error] [pid 57711:tid 58059] [client 50.6.160.242:33862] [client 50.6.160.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.160.242, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acLPtqLdPFdeRRktTdNjZgAAAIc"]
[Wed Mar 25 01:54:00.925856 2026] [:error] [pid 20371:tid 20386] [client 50.6.160.242:33872] [client 50.6.160.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.160.242, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acLPuOb25OL4yTv2fF-YZAAAAQ0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Wed Mar 25 02:50:04.052635 2026] [:error] [pid 57703:tid 58036] [client 43.130.111.40:34738] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acLc3PIVQxDtjkklWGZuQQAAAFE"]
[Wed Mar 25 06:42:56.113922 2026] [:error] [pid 47989:tid 48006] [client 145.239.69.40:43270] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acMTcCWKdJMhIccROjmFtwAAAU8"]
[Wed Mar 25 06:42:58.576965 2026] [:error] [pid 755:tid 839] [client 145.239.69.40:33974] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acMTcqS6bdaeEwgCGwpAcAAAAFA"]
[Wed Mar 25 06:43:00.893942 2026] [:error] [pid 756:tid 875] [client 145.239.69.40:36958] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acMTdDOaW6oylMIDBCSePQAAAJc"]
[Wed Mar 25 06:43:03.367468 2026] [:error] [pid 756:tid 858] [client 145.239.69.40:36962] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acMTdzOaW6oylMIDBCSeTAAAAIY"]
[Wed Mar 25 06:43:05.684126 2026] [:error] [pid 755:tid 822] [client 145.239.69.40:36978] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acMTeaS6bdaeEwgCGwpAcwAAAEc"]
[Wed Mar 25 06:43:07.998152 2026] [:error] [pid 892:tid 899] [client 145.239.69.40:36986] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acMTeyT_G8WMU3T3yxpBhAAAAMM"]
[Wed Mar 25 06:43:10.310038 2026] [:error] [pid 47946:tid 47971] [client 145.239.69.40:36304] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acMTfjipQTqBMSeKYhcFBAAAARc"]
[Wed Mar 25 06:43:12.792608 2026] [:error] [pid 892:tid 908] [client 145.239.69.40:36308] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acMTgCT_G8WMU3T3yxpBiAAAAMo"]
[Wed Mar 25 06:43:15.107047 2026] [:error] [pid 756:tid 852] [client 145.239.69.40:36324] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acMTgzOaW6oylMIDBCSedwAAAII"]
[Wed Mar 25 06:43:17.587860 2026] [:error] [pid 47946:tid 47961] [client 145.239.69.40:36340] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "acMThTipQTqBMSeKYhcFDAAAAQ0"]
[Wed Mar 25 06:43:20.046335 2026] [:error] [pid 47946:tid 47962] [client 145.239.69.40:32822] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acMTiDipQTqBMSeKYhcFDwAAAQ4"]
[Wed Mar 25 06:43:22.505606 2026] [:error] [pid 756:tid 875] [client 145.239.69.40:32834] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acMTijOaW6oylMIDBCSejQAAAJc"]
[Wed Mar 25 06:43:24.815049 2026] [:error] [pid 754:tid 765] [client 145.239.69.40:32838] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acMTjDisL3asPbA3CtjDWAAAAAA"]
[Wed Mar 25 06:43:27.137817 2026] [:error] [pid 754:tid 779] [client 145.239.69.40:32852] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "acMTjzisL3asPbA3CtjDWgAAAA4"]
[Wed Mar 25 06:43:29.581708 2026] [:error] [pid 47989:tid 48012] [client 145.239.69.40:32854] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "acMTkSWKdJMhIccROjmF4AAAAVU"]
[Wed Mar 25 06:43:32.035474 2026] [:error] [pid 47946:tid 47966] [client 145.239.69.40:54658] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "acMTlDipQTqBMSeKYhcFGwAAARI"]
[Wed Mar 25 06:43:34.499401 2026] [:error] [pid 755:tid 821] [client 145.239.69.40:54666] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "acMTlqS6bdaeEwgCGwpAfgAAAEY"]
[Wed Mar 25 06:43:36.963641 2026] [:error] [pid 47946:tid 47962] [client 145.239.69.40:54670] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acMTmDipQTqBMSeKYhcFIAAAAQ4"]
[Wed Mar 25 06:43:39.426086 2026] [:error] [pid 47989:tid 48003] [client 145.239.69.40:54680] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "acMTmyWKdJMhIccROjmF4gAAAUw"]
[Wed Mar 25 06:43:41.903283 2026] [:error] [pid 47989:tid 48006] [client 145.239.69.40:46516] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "acMTnSWKdJMhIccROjmF5gAAAU8"]
[Wed Mar 25 06:43:44.366750 2026] [:error] [pid 756:tid 858] [client 145.239.69.40:46532] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acMToDOaW6oylMIDBCSeqwAAAIY"]
[Wed Mar 25 06:43:46.823148 2026] [:error] [pid 756:tid 874] [client 145.239.69.40:46534] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acMTojOaW6oylMIDBCSesgAAAJY"]
[Wed Mar 25 06:43:49.259618 2026] [:error] [pid 755:tid 824] [client 145.239.69.40:46540] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acMTpaS6bdaeEwgCGwpAiQAAAEk"]
[Wed Mar 25 07:38:44.819295 2026] [:error] [pid 892:tid 920] [client 45.94.31.15:57971] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghCT_G8WMU3T3yxpO5gAAANU"], referer: www.google.com
[Wed Mar 25 07:38:44.819621 2026] [:error] [pid 892:tid 908] [client 45.94.31.15:57987] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghCT_G8WMU3T3yxpO5wAAAMo"]
[Wed Mar 25 07:38:44.821735 2026] [:error] [pid 754:tid 768] [client 45.94.31.15:57939] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acMghDisL3asPbA3CtjO7AAAAAM"]
[Wed Mar 25 07:38:44.829345 2026] [:error] [pid 892:tid 913] [client 45.94.31.15:58024] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghCT_G8WMU3T3yxpO6QAAAM8"], referer: www.google.com
[Wed Mar 25 07:38:44.829487 2026] [:error] [pid 892:tid 922] [client 45.94.31.15:58015] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "acMghCT_G8WMU3T3yxpO6wAAANc"], referer: www.google.com
[Wed Mar 25 07:38:45.309653 2026] [:error] [pid 26321:tid 26350] [client 45.94.31.15:54009] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghfKO65qqGZCSPZqxBwAAAgk"]
[Wed Mar 25 07:38:45.314947 2026] [:error] [pid 26269:tid 26278] [client 45.94.31.15:54126] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acMghUn7e-ZQbaIs7qx_ugAAAYI"]
[Wed Mar 25 07:38:45.315888 2026] [:error] [pid 892:tid 919] [client 45.94.31.15:54004] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghST_G8WMU3T3yxpO_gAAANQ"], referer: www.google.com
[Wed Mar 25 07:38:45.327734 2026] [:error] [pid 892:tid 919] [client 45.94.31.15:54142] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghST_G8WMU3T3yxpPBAAAANQ"], referer: www.google.com
[Wed Mar 25 07:38:45.334696 2026] [:error] [pid 892:tid 919] [client 45.94.31.15:54223] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "acMghST_G8WMU3T3yxpPBwAAANQ"], referer: www.google.com
[Wed Mar 25 07:38:45.820611 2026] [:error] [pid 47946:tid 47953] [client 45.94.31.15:51757] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghTipQTqBMSeKYhcX_wAAAQU"]
[Wed Mar 25 07:38:45.824602 2026] [:error] [pid 755:tid 839] [client 45.94.31.15:51768] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acMghaS6bdaeEwgCGwpMkAAAAFA"]
[Wed Mar 25 07:38:45.837085 2026] [:error] [pid 892:tid 908] [client 45.94.31.15:51938] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghST_G8WMU3T3yxpPKAAAAMo"], referer: www.google.com
[Wed Mar 25 07:38:45.838082 2026] [:error] [pid 754:tid 785] [client 45.94.31.15:52213] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "acMghTisL3asPbA3CtjPDgAAABQ"], referer: www.google.com
[Wed Mar 25 07:38:45.850305 2026] [:error] [pid 755:tid 808] [client 45.94.31.15:51866] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghaS6bdaeEwgCGwpMkQAAAEM"], referer: www.google.com
[Wed Mar 25 07:38:46.341514 2026] [:error] [pid 892:tid 909] [client 45.94.31.15:50330] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghiT_G8WMU3T3yxpPTAAAAMs"]
[Wed Mar 25 07:38:46.342381 2026] [:error] [pid 756:tid 876] [client 45.94.31.15:50356] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acMghjOaW6oylMIDBCTF6AAAAJg"]
[Wed Mar 25 07:38:46.362349 2026] [:error] [pid 26320:tid 26370] [client 45.94.31.15:50429] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghjkUgS2mHAojGnl5EQAAAc4"], referer: www.google.com
[Wed Mar 25 07:38:46.362368 2026] [:error] [pid 26320:tid 26379] [client 45.94.31.15:50442] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "acMghjkUgS2mHAojGnl5EgAAAdc"], referer: www.google.com
[Wed Mar 25 07:38:46.384098 2026] [:error] [pid 892:tid 902] [client 45.94.31.15:50563] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghiT_G8WMU3T3yxpPUAAAAMU"], referer: www.google.com
[Wed Mar 25 07:38:46.832371 2026] [:error] [pid 26269:tid 26288] [client 45.94.31.15:59689] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acMghkn7e-ZQbaIs7qx_9AAAAYw"]
[Wed Mar 25 07:38:46.842183 2026] [:error] [pid 26320:tid 26347] [client 45.94.31.15:59686] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "acMghjkUgS2mHAojGnl5KQAAAco"]
[Wed Mar 25 07:38:46.852203 2026] [:error] [pid 26320:tid 26377] [client 45.94.31.15:60962] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghjkUgS2mHAojGnl5KwAAAdU"], referer: www.google.com
[Wed Mar 25 07:38:46.860683 2026] [:error] [pid 26320:tid 26368] [client 45.94.31.15:60961] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "acMghjkUgS2mHAojGnl5LAAAAcw"], referer: www.google.com
[Wed Mar 25 07:38:46.882899 2026] [:error] [pid 756:tid 859] [client 45.94.31.15:61939] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghjOaW6oylMIDBCTGBwAAAIc"], referer: www.google.com
[Wed Mar 25 07:38:47.844477 2026] [:error] [pid 754:tid 772] [client 45.94.31.15:53538] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghzisL3asPbA3CtjPMgAAAAc"], referer: www.google.com
[Wed Mar 25 07:38:47.871059 2026] [:error] [pid 754:tid 770] [client 45.94.31.15:53845] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMghzisL3asPbA3CtjPNQAAAAU"], referer: www.google.com
[Wed Mar 25 07:38:48.837072 2026] [:error] [pid 754:tid 768] [client 45.94.31.15:50019] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgiDisL3asPbA3CtjPOwAAAAM"], referer: www.google.com
[Wed Mar 25 07:38:48.870428 2026] [:error] [pid 755:tid 843] [client 45.94.31.15:50330] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgiKS6bdaeEwgCGwpMxAAAAFQ"], referer: www.google.com
[Wed Mar 25 07:38:49.839313 2026] [:error] [pid 756:tid 875] [client 45.94.31.15:57006] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgiTOaW6oylMIDBCTGNgAAAJc"], referer: www.google.com
[Wed Mar 25 07:38:49.868753 2026] [:error] [pid 26320:tid 26372] [client 45.94.31.15:57456] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgiTkUgS2mHAojGnl5XAAAAdA"], referer: www.google.com
[Wed Mar 25 07:38:50.857180 2026] [:error] [pid 26269:tid 26298] [client 45.94.31.15:54404] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgikn7e-ZQbaIs7qyAPgAAAZY"], referer: www.google.com
[Wed Mar 25 07:38:50.858438 2026] [:error] [pid 26449:tid 26466] [client 45.94.31.15:54162] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgitpZ2T15NDqzAjGdUwAAAk0"], referer: www.google.com
[Wed Mar 25 07:38:51.842826 2026] [:error] [pid 47989:tid 48012] [client 45.94.31.15:53306] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgiyWKdJMhIccROjmfKAAAAVU"], referer: www.google.com
[Wed Mar 25 07:38:51.846836 2026] [:error] [pid 26449:tid 26470] [client 45.94.31.15:53312] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgi9pZ2T15NDqzAjGdcAAAAlE"], referer: www.google.com
[Wed Mar 25 08:25:14.188983 2026] [:error] [pid 47946:tid 47960] [client 223.244.35.77:57227] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acMrajipQTqBMSeKYhclEwAAAQw"]
[Wed Mar 25 08:42:12.085211 2026] [:error] [pid 26449:tid 26460] [client 50.87.144.183:41530] [client 50.87.144.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.183, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acMvZNpZ2T15NDqzAjG8ggAAAkc"]
[Wed Mar 25 08:42:13.623501 2026] [:error] [pid 26449:tid 26472] [client 50.87.144.183:41530] [client 50.87.144.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.183, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acMvZdpZ2T15NDqzAjG8hAAAAlM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Wed Mar 25 09:21:52.241673 2026] [:error] [pid 47989:tid 47995] [client 49.51.253.83:60760] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acM4sCWKdJMhIccROjnILgAAAUQ"]
[Wed Mar 25 10:44:53.360475 2026] [:error] [pid 26449:tid 26477] [client 173.239.240.12:21751] [client 173.239.240.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.12, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acNMJdpZ2T15NDqzAjEJDAAAAlg"]
[Wed Mar 25 12:13:01.439277 2026] [:error] [pid 47989:tid 48012] [client 43.159.132.207:37238] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acNgzSWKdJMhIccROjkKpwAAAVU"]
[Wed Mar 25 12:46:59.647827 2026] [:error] [pid 25875:tid 25883] [client 88.246.76.159:38877] [client 88.246.76.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.246.76.159, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acNowxJ38QkS3Nyfshx-ngAAAoI"]
[Wed Mar 25 12:47:55.214790 2026] [:error] [pid 25875:tid 25902] [client 118.99.73.126:11900] [client 118.99.73.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.99.73.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acNo-xJ38QkS3Nyfshx-xAAAApU"]
[Wed Mar 25 13:00:22.796421 2026] [:error] [pid 47989:tid 47994] [client 118.99.73.126:11843] [client 118.99.73.126] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acNr5iWKdJMhIccROjkXNAAAAUM"]
[Wed Mar 25 13:01:43.018684 2026] [:error] [pid 25967:tid 25979] [client 202.175.241.171:56214] [client 202.175.241.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.175.241.171, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acNsN_g8Qtq7ZM4mSFmkuwAAA0c"]
[Wed Mar 25 13:08:24.691732 2026] [:error] [pid 26269:tid 26300] [client 202.175.241.171:64328] [client 202.175.241.171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acNtyEn7e-ZQbaIs7qyYuwAAAZg"]
[Wed Mar 25 13:09:57.636489 2026] [:error] [pid 25967:tid 25988] [client 202.175.241.171:64948] [client 202.175.241.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.175.241.171, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acNuJfg8Qtq7ZM4mSFmrUQAAA1A"]
[Wed Mar 25 13:12:03.986867 2026] [:error] [pid 25875:tid 25898] [client 158.158.72.125:42979] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acNuoxJ38QkS3NyfshyG6AAAApE"]
[Wed Mar 25 13:12:04.661446 2026] [:error] [pid 47989:tid 47992] [client 158.158.72.125:58667] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acNupCWKdJMhIccROjkdggAAAUE"]
[Wed Mar 25 13:12:05.330207 2026] [:error] [pid 25875:tid 25895] [client 158.158.72.125:47900] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acNupRJ38QkS3NyfshyG7AAAAo4"]
[Wed Mar 25 13:12:06.777944 2026] [:error] [pid 25967:tid 25981] [client 158.158.72.125:30518] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acNupvg8Qtq7ZM4mSFmslQAAA0k"]
[Wed Mar 25 13:12:07.718320 2026] [:error] [pid 25875:tid 25893] [client 158.158.72.125:58679] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acNupxJ38QkS3NyfshyG7wAAAow"]
[Wed Mar 25 13:12:08.726843 2026] [:error] [pid 25967:tid 25984] [client 158.158.72.125:34872] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acNuqPg8Qtq7ZM4mSFmsogAAA0w"]
[Wed Mar 25 13:12:09.417223 2026] [:error] [pid 47989:tid 48015] [client 158.158.72.125:62340] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acNuqSWKdJMhIccROjkdhgAAAVg"]
[Wed Mar 25 13:12:11.533463 2026] [:error] [pid 25967:tid 25996] [client 158.158.72.125:51725] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acNuq_g8Qtq7ZM4mSFmsrwAAA1g"]
[Wed Mar 25 13:12:15.161994 2026] [:error] [pid 25875:tid 25892] [client 158.158.72.125:51764] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "acNurxJ38QkS3NyfshyG9QAAAos"]
[Wed Mar 25 13:12:16.112696 2026] [:error] [pid 47989:tid 48002] [client 158.158.72.125:59858] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "acNusCWKdJMhIccROjkdmQAAAUs"]
[Wed Mar 25 13:12:17.806408 2026] [:error] [pid 25875:tid 25883] [client 158.158.72.125:30488] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "acNusRJ38QkS3NyfshyG-AAAAoI"]
[Wed Mar 25 13:12:18.482389 2026] [:error] [pid 756:tid 865] [client 158.158.72.125:49440] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "acNusjOaW6oylMIDBCQF6wAAAI0"]
[Wed Mar 25 13:12:19.326600 2026] [:error] [pid 25967:tid 25996] [client 158.158.72.125:54446] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "acNus_g8Qtq7ZM4mSFmsyQAAA1g"]
[Wed Mar 25 13:12:20.036842 2026] [:error] [pid 26321:tid 26365] [client 158.158.72.125:62363] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "acNutPKO65qqGZCSPZry9gAAAhg"]
[Wed Mar 25 13:12:20.818581 2026] [:error] [pid 47989:tid 48001] [client 158.158.72.125:49423] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "acNutCWKdJMhIccROjkdoAAAAUo"]
[Wed Mar 25 13:12:21.816682 2026] [:error] [pid 47989:tid 48009] [client 158.158.72.125:54400] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "acNutSWKdJMhIccROjkdoQAAAVI"]
[Wed Mar 25 13:12:22.440600 2026] [:error] [pid 25875:tid 25884] [client 158.158.72.125:52860] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "acNuthJ38QkS3NyfshyG_QAAAoM"]
[Wed Mar 25 13:12:24.985738 2026] [:error] [pid 756:tid 869] [client 158.158.72.125:63900] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "acNuuDOaW6oylMIDBCQF7AAAAJE"]
[Wed Mar 25 13:12:25.814147 2026] [:error] [pid 25875:tid 25904] [client 158.158.72.125:63888] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "acNuuRJ38QkS3NyfshyHBAAAApc"]
[Wed Mar 25 13:12:26.450159 2026] [:error] [pid 25969:tid 26036] [client 158.158.72.125:33719] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "acNuuhd3aEUmOfdKja_hvQAAA8o"]
[Wed Mar 25 13:12:27.413607 2026] [:error] [pid 25969:tid 26035] [client 158.158.72.125:32436] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acNuuxd3aEUmOfdKja_hwAAAA8k"]
[Wed Mar 25 13:12:28.155016 2026] [:error] [pid 25875:tid 25899] [client 158.158.72.125:52335] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acNuvBJ38QkS3NyfshyHDQAAApI"]
[Wed Mar 25 13:12:29.057298 2026] [:error] [pid 26321:tid 26348] [client 158.158.72.125:51757] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acNuvfKO65qqGZCSPZrzBwAAAgc"]
[Wed Mar 25 13:12:30.058931 2026] [:error] [pid 26449:tid 26474] [client 158.158.72.125:63934] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acNuvtpZ2T15NDqzAjE-BgAAAlU"]
[Wed Mar 25 13:12:32.213757 2026] [:error] [pid 25967:tid 25996] [client 158.158.72.125:52813] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "acNuwPg8Qtq7ZM4mSFms5QAAA1g"]
[Wed Mar 25 13:12:41.413785 2026] [:error] [pid 756:tid 870] [client 158.158.72.125:2388] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "acNuyTOaW6oylMIDBCQF8AAAAJI"]
[Wed Mar 25 13:12:43.602361 2026] [:error] [pid 26269:tid 26284] [client 158.158.72.125:61640] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "acNuy0n7e-ZQbaIs7qyZDAAAAYg"]
[Wed Mar 25 13:12:48.647918 2026] [:error] [pid 25967:tid 25992] [client 158.158.72.125:39485] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "acNu0Pg8Qtq7ZM4mSFms-gAAA1Q"]
[Wed Mar 25 13:12:52.241735 2026] [:error] [pid 25967:tid 25993] [client 158.158.72.125:33114] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "acNu1Pg8Qtq7ZM4mSFmtDwAAA1U"]
[Wed Mar 25 13:12:53.057381 2026] [:error] [pid 25875:tid 25904] [client 158.158.72.125:26674] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "acNu1RJ38QkS3NyfshyHGgAAApc"]
[Wed Mar 25 13:12:55.486887 2026] [:error] [pid 26321:tid 26363] [client 158.158.72.125:40146] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "acNu1_KO65qqGZCSPZrzKgAAAhY"]
[Wed Mar 25 13:12:56.918695 2026] [:error] [pid 26449:tid 26461] [client 158.158.72.125:52255] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "acNu2NpZ2T15NDqzAjE-IAAAAkg"]
[Wed Mar 25 13:12:57.732051 2026] [:error] [pid 26449:tid 26474] [client 158.158.72.125:52278] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "acNu2dpZ2T15NDqzAjE-IQAAAlU"]
[Wed Mar 25 13:12:58.383311 2026] [:error] [pid 25875:tid 25885] [client 158.158.72.125:40167] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "acNu2hJ38QkS3NyfshyHHQAAAoQ"]
[Wed Mar 25 13:12:59.232875 2026] [:error] [pid 25967:tid 25980] [client 158.158.72.125:38931] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "acNu2_g8Qtq7ZM4mSFmtJQAAA0g"]
[Wed Mar 25 13:12:59.971910 2026] [:error] [pid 25967:tid 25987] [client 158.158.72.125:29294] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "acNu2_g8Qtq7ZM4mSFmtLQAAA08"]
[Wed Mar 25 13:13:00.993794 2026] [:error] [pid 47989:tid 48013] [client 158.158.72.125:2684] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "acNu3CWKdJMhIccROjkdxgAAAVY"]
[Wed Mar 25 13:13:16.475268 2026] [:error] [pid 25875:tid 25899] [client 158.158.72.125:63615] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "acNu7BJ38QkS3NyfshyHPwAAApI"]
[Wed Mar 25 13:13:17.157731 2026] [:error] [pid 25875:tid 25897] [client 158.158.72.125:51795] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "acNu7RJ38QkS3NyfshyHQwAAApA"]
[Wed Mar 25 13:13:17.967460 2026] [:error] [pid 26449:tid 26464] [client 158.158.72.125:2900] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "acNu7dpZ2T15NDqzAjE-PAAAAks"]
[Wed Mar 25 13:13:18.559066 2026] [:error] [pid 25967:tid 25973] [client 158.158.72.125:36106] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "acNu7vg8Qtq7ZM4mSFmtVwAAA0E"]
[Wed Mar 25 13:13:19.208799 2026] [:error] [pid 25967:tid 25977] [client 158.158.72.125:22928] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "acNu7_g8Qtq7ZM4mSFmtWQAAA0U"]
[Wed Mar 25 13:13:19.990315 2026] [:error] [pid 26321:tid 26363] [client 158.158.72.125:51825] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "acNu7_KO65qqGZCSPZrzXwAAAhY"]
[Wed Mar 25 13:13:21.227571 2026] [:error] [pid 47989:tid 48005] [client 158.158.72.125:56057] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "acNu8SWKdJMhIccROjkd1wAAAU4"]
[Wed Mar 25 13:13:22.477888 2026] [:error] [pid 26321:tid 26354] [client 158.158.72.125:40107] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "acNu8vKO65qqGZCSPZrzZwAAAg0"]
[Wed Mar 25 13:13:25.069215 2026] [:error] [pid 25875:tid 25883] [client 158.158.72.125:51780] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "acNu9RJ38QkS3NyfshyHUAAAAoI"]
[Wed Mar 25 13:13:26.419157 2026] [:error] [pid 47989:tid 48013] [client 158.158.72.125:41351] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "acNu9iWKdJMhIccROjkd4AAAAVY"]
[Wed Mar 25 13:13:27.004650 2026] [:error] [pid 26321:tid 26342] [client 158.158.72.125:38585] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "acNu9_KO65qqGZCSPZrzbgAAAgM"]
[Wed Mar 25 13:13:27.848609 2026] [:error] [pid 25875:tid 25903] [client 158.158.72.125:41346] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "acNu9xJ38QkS3NyfshyHWAAAApY"]
[Wed Mar 25 13:13:30.058196 2026] [:error] [pid 26321:tid 26360] [client 158.158.72.125:33069] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "acNu-vKO65qqGZCSPZrzcQAAAhM"]
[Wed Mar 25 13:13:31.444421 2026] [:error] [pid 47946:tid 47968] [client 158.158.72.125:35459] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "acNu-zipQTqBMSeKYhdoXgAAARQ"]
[Wed Mar 25 13:13:32.561605 2026] [:error] [pid 26269:tid 26296] [client 158.158.72.125:50313] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "acNu_En7e-ZQbaIs7qyZFAAAAZQ"]
[Wed Mar 25 13:13:34.226126 2026] [:error] [pid 25967:tid 25972] [client 158.158.72.125:58694] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "acNu_vg8Qtq7ZM4mSFmtlQAAA0A"]
[Wed Mar 25 13:13:35.390112 2026] [:error] [pid 26449:tid 26455] [client 158.158.72.125:45901] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acNu_9pZ2T15NDqzAjE-SwAAAkI"]
[Wed Mar 25 13:13:37.234707 2026] [:error] [pid 25875:tid 25898] [client 158.158.72.125:64613] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acNvARJ38QkS3NyfshyHZgAAApE"]
[Wed Mar 25 13:13:37.923312 2026] [:error] [pid 25967:tid 25989] [client 158.158.72.125:63072] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acNvAfg8Qtq7ZM4mSFmtogAAA1E"]
[Wed Mar 25 13:13:39.158995 2026] [:error] [pid 892:tid 906] [client 158.158.72.125:21050] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acNvAyT_G8WMU3T3yxqg-wAAAMg"]
[Wed Mar 25 13:13:40.396488 2026] [:error] [pid 26449:tid 26453] [client 158.158.72.125:27322] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "acNvBNpZ2T15NDqzAjE-UwAAAkA"]
[Wed Mar 25 13:13:41.872194 2026] [:error] [pid 25967:tid 25979] [client 158.158.72.125:58923] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "acNvBfg8Qtq7ZM4mSFmtqgAAA0c"]
[Wed Mar 25 13:13:43.650099 2026] [:error] [pid 26449:tid 26456] [client 158.158.72.125:32463] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "acNvB9pZ2T15NDqzAjE-XgAAAkM"]
[Wed Mar 25 13:13:46.019439 2026] [:error] [pid 25875:tid 25884] [client 158.158.72.125:32466] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "acNvChJ38QkS3NyfshyHowAAAoM"]
[Wed Mar 25 13:13:47.267807 2026] [:error] [pid 26321:tid 26364] [client 158.158.72.125:19946] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acNvC_KO65qqGZCSPZrzsAAAAhc"]
[Wed Mar 25 13:13:48.183600 2026] [:error] [pid 47946:tid 47971] [client 158.158.72.125:19947] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acNvDDipQTqBMSeKYhdobAAAARc"]
[Wed Mar 25 13:13:49.095929 2026] [:error] [pid 25875:tid 25904] [client 158.158.72.125:45890] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acNvDRJ38QkS3NyfshyHuQAAApc"]
[Wed Mar 25 13:13:49.795153 2026] [:error] [pid 756:tid 863] [client 158.158.72.125:45931] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acNvDTOaW6oylMIDBCQGFwAAAIs"]
[Wed Mar 25 13:13:50.468264 2026] [:error] [pid 25967:tid 25987] [client 158.158.72.125:32482] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "acNvDvg8Qtq7ZM4mSFmtsgAAA08"]
[Wed Mar 25 13:13:51.504457 2026] [:error] [pid 26449:tid 26455] [client 158.158.72.125:56680] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "acNvD9pZ2T15NDqzAjE-hAAAAkI"]
[Wed Mar 25 13:13:52.160332 2026] [:error] [pid 25875:tid 25893] [client 158.158.72.125:19845] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "acNvEBJ38QkS3NyfshyHvQAAAow"]
[Wed Mar 25 13:13:52.928941 2026] [:error] [pid 47989:tid 47997] [client 158.158.72.125:21004] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "acNvECWKdJMhIccROjkeigAAAUY"]
[Wed Mar 25 13:13:53.815649 2026] [:error] [pid 25875:tid 25884] [client 158.158.72.125:2528] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "acNvERJ38QkS3NyfshyHwAAAAoM"]
[Wed Mar 25 13:13:54.652458 2026] [:error] [pid 47989:tid 47991] [client 158.158.72.125:21046] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "acNvEiWKdJMhIccROjkejgAAAUA"]
[Wed Mar 25 13:13:55.454708 2026] [:error] [pid 25875:tid 25892] [client 158.158.72.125:36804] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "acNvExJ38QkS3NyfshyHwwAAAos"]
[Wed Mar 25 13:13:56.105739 2026] [:error] [pid 25875:tid 25891] [client 158.158.72.125:2527] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "acNvFBJ38QkS3NyfshyHxgAAAoo"]
[Wed Mar 25 13:13:56.738980 2026] [:error] [pid 25967:tid 25991] [client 158.158.72.125:19966] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "acNvFPg8Qtq7ZM4mSFmttwAAA1M"]
[Wed Mar 25 13:13:57.499699 2026] [:error] [pid 26449:tid 26471] [client 158.158.72.125:40863] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "acNvFdpZ2T15NDqzAjE-hwAAAlI"]
[Wed Mar 25 13:13:58.508752 2026] [:error] [pid 25967:tid 25974] [client 158.158.72.125:25985] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "acNvFvg8Qtq7ZM4mSFmtuwAAA0I"]
[Wed Mar 25 13:13:59.101005 2026] [:error] [pid 25967:tid 25976] [client 158.158.72.125:2540] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "acNvF_g8Qtq7ZM4mSFmtvQAAA0Q"]
[Wed Mar 25 13:13:59.956200 2026] [:error] [pid 756:tid 871] [client 158.158.72.125:19933] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "acNvFzOaW6oylMIDBCQGGAAAAJM"]
[Wed Mar 25 13:14:00.644887 2026] [:error] [pid 756:tid 866] [client 158.158.72.125:21744] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "acNvGDOaW6oylMIDBCQGGQAAAI4"]
[Wed Mar 25 13:14:01.243564 2026] [:error] [pid 25875:tid 25893] [client 158.158.72.125:56687] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "acNvGRJ38QkS3NyfshyHyAAAAow"]
[Wed Mar 25 13:14:01.930677 2026] [:error] [pid 25875:tid 25884] [client 158.158.72.125:36824] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "acNvGRJ38QkS3NyfshyHzQAAAoM"]
[Wed Mar 25 13:14:03.096878 2026] [:error] [pid 26321:tid 26340] [client 158.158.72.125:56064] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "acNvG_KO65qqGZCSPZrzxQAAAgE"]
[Wed Mar 25 13:14:04.240050 2026] [:error] [pid 26269:tid 26297] [client 158.158.72.125:56690] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "acNvHEn7e-ZQbaIs7qyZIQAAAZU"]
[Wed Mar 25 13:14:04.891675 2026] [:error] [pid 756:tid 872] [client 158.158.72.125:36846] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "acNvHDOaW6oylMIDBCQGGgAAAJQ"]
[Wed Mar 25 13:14:05.789073 2026] [:error] [pid 47989:tid 47998] [client 158.158.72.125:56689] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "acNvHSWKdJMhIccROjkemAAAAUc"]
[Wed Mar 25 13:14:06.482535 2026] [:error] [pid 47989:tid 48001] [client 158.158.72.125:26028] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "acNvHiWKdJMhIccROjkemwAAAUo"]
[Wed Mar 25 13:14:07.188131 2026] [:error] [pid 47989:tid 48004] [client 158.158.72.125:56072] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "acNvHyWKdJMhIccROjkengAAAU0"]
[Wed Mar 25 13:14:07.834392 2026] [:error] [pid 892:tid 899] [client 158.158.72.125:25471] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "acNvHyT_G8WMU3T3yxqhCgAAAMM"]
[Wed Mar 25 13:14:08.443278 2026] [:error] [pid 25969:tid 26048] [client 158.158.72.125:38632] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "acNvIBd3aEUmOfdKja_h3gAAA9Y"]
[Wed Mar 25 13:14:09.247807 2026] [:error] [pid 25875:tid 25881] [client 158.158.72.125:38594] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "acNvIRJ38QkS3NyfshyH1AAAAoA"]
[Wed Mar 25 13:14:10.004731 2026] [:error] [pid 25967:tid 25981] [client 158.158.72.125:24882] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "acNvIvg8Qtq7ZM4mSFmt0gAAA0k"]
[Wed Mar 25 13:14:10.617090 2026] [:error] [pid 47989:tid 47998] [client 158.158.72.125:59922] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "acNvIiWKdJMhIccROjkeowAAAUc"]
[Wed Mar 25 13:14:11.346649 2026] [:error] [pid 47989:tid 47994] [client 158.158.72.125:59954] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms.php"] [unique_id "acNvIyWKdJMhIccROjkepgAAAUM"]
[Wed Mar 25 13:14:12.304441 2026] [:error] [pid 756:tid 852] [client 158.158.72.125:37417] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "acNvJDOaW6oylMIDBCQGHQAAAII"]
[Wed Mar 25 13:14:13.461371 2026] [:error] [pid 47989:tid 48006] [client 158.158.72.125:60175] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "acNvJSWKdJMhIccROjkerQAAAU8"]
[Wed Mar 25 13:14:14.465580 2026] [:error] [pid 47946:tid 47954] [client 158.158.72.125:38062] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "acNvJjipQTqBMSeKYhdofQAAAQY"]
[Wed Mar 25 13:14:46.312177 2026] [:error] [pid 25967:tid 25974] [client 158.158.72.125:31744] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "acNvRvg8Qtq7ZM4mSFmuUwAAA0I"]
[Wed Mar 25 13:14:47.111562 2026] [:error] [pid 26321:tid 26351] [client 158.158.72.125:59323] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "acNvR_KO65qqGZCSPZrz-gAAAgo"]
[Wed Mar 25 13:14:47.998860 2026] [:error] [pid 25967:tid 25988] [client 158.158.72.125:52753] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "acNvR_g8Qtq7ZM4mSFmuVwAAA1A"]
[Wed Mar 25 13:14:49.069035 2026] [:error] [pid 26321:tid 26344] [client 158.158.72.125:52773] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "acNvSfKO65qqGZCSPZrz_AAAAgU"]
[Wed Mar 25 13:14:49.829352 2026] [:error] [pid 25967:tid 25992] [client 158.158.72.125:64673] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/file.php"] [unique_id "acNvSfg8Qtq7ZM4mSFmuWwAAA1Q"]
[Wed Mar 25 13:14:50.791958 2026] [:error] [pid 25967:tid 25979] [client 158.158.72.125:49104] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/file.php"] [unique_id "acNvSvg8Qtq7ZM4mSFmuXwAAA0c"]
[Wed Mar 25 13:14:51.527301 2026] [:error] [pid 25967:tid 25988] [client 158.158.72.125:52767] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/file.php"] [unique_id "acNvS_g8Qtq7ZM4mSFmuYgAAA1A"]
[Wed Mar 25 13:14:52.264622 2026] [:error] [pid 26449:tid 26469] [client 158.158.72.125:3020] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/file.php"] [unique_id "acNvTNpZ2T15NDqzAjE-qAAAAlA"]
[Wed Mar 25 13:14:53.124138 2026] [:error] [pid 25967:tid 25978] [client 158.158.72.125:54248] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buc.php"] [unique_id "acNvTfg8Qtq7ZM4mSFmubAAAA0Y"]
[Wed Mar 25 13:14:53.985915 2026] [:error] [pid 47989:tid 48015] [client 158.158.72.125:41434] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buc.php"] [unique_id "acNvTSWKdJMhIccROjkfRAAAAVg"]
[Wed Mar 25 13:14:54.514533 2026] [:error] [pid 26449:tid 26454] [client 158.158.72.125:64687] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buc.php"] [unique_id "acNvTtpZ2T15NDqzAjE-qQAAAkE"]
[Wed Mar 25 13:14:55.124270 2026] [:error] [pid 47989:tid 48008] [client 158.158.72.125:41444] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buc.php"] [unique_id "acNvTyWKdJMhIccROjkfSAAAAVE"]
[Wed Mar 25 13:14:55.655889 2026] [:error] [pid 47989:tid 48012] [client 158.158.72.125:3042] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "acNvTyWKdJMhIccROjkfSwAAAVU"]
[Wed Mar 25 13:14:56.154558 2026] [:error] [pid 26321:tid 26358] [client 158.158.72.125:31155] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "acNvUPKO65qqGZCSPZrz_wAAAhE"]
[Wed Mar 25 13:14:56.809525 2026] [:error] [pid 25967:tid 25994] [client 158.158.72.125:36164] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "acNvUPg8Qtq7ZM4mSFmucwAAA1Y"]
[Wed Mar 25 13:14:57.430915 2026] [:error] [pid 26321:tid 26364] [client 158.158.72.125:62734] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "acNvUfKO65qqGZCSPZr0AAAAAhc"]
[Wed Mar 25 13:14:58.067481 2026] [:error] [pid 25875:tid 25902] [client 158.158.72.125:64699] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "acNvUhJ38QkS3NyfshyIQQAAApU"]
[Wed Mar 25 13:14:58.887006 2026] [:error] [pid 25875:tid 25890] [client 158.158.72.125:59324] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "acNvUhJ38QkS3NyfshyIRAAAAok"]
[Wed Mar 25 13:14:59.538769 2026] [:error] [pid 25875:tid 25891] [client 158.158.72.125:60640] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "acNvUxJ38QkS3NyfshyITAAAAoo"]
[Wed Mar 25 13:15:00.209430 2026] [:error] [pid 47989:tid 48005] [client 158.158.72.125:2315] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "acNvVCWKdJMhIccROjkfVQAAAU4"]
[Wed Mar 25 13:15:01.068382 2026] [:error] [pid 47946:tid 47970] [client 158.158.72.125:2351] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acNvVTipQTqBMSeKYhdoigAAARY"]
[Wed Mar 25 13:15:01.703845 2026] [:error] [pid 25969:tid 26041] [client 158.158.72.125:52791] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acNvVRd3aEUmOfdKja_h5QAAA88"]
[Wed Mar 25 13:15:02.344028 2026] [:error] [pid 892:tid 896] [client 158.158.72.125:58281] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acNvViT_G8WMU3T3yxqheQAAAMI"]
[Wed Mar 25 13:15:02.971320 2026] [:error] [pid 25969:tid 26049] [client 158.158.72.125:42042] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acNvVhd3aEUmOfdKja_h5gAAA9c"]
[Wed Mar 25 13:15:03.522103 2026] [:error] [pid 25969:tid 26037] [client 158.158.72.125:3043] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "acNvVxd3aEUmOfdKja_h5wAAA8s"]
[Wed Mar 25 13:15:04.281324 2026] [:error] [pid 25875:tid 25889] [client 158.158.72.125:2238] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "acNvWBJ38QkS3NyfshyIhQAAAog"]
[Wed Mar 25 13:15:04.870826 2026] [:error] [pid 47989:tid 47993] [client 158.158.72.125:2331] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "acNvWCWKdJMhIccROjkfYAAAAUI"]
[Wed Mar 25 13:15:05.709559 2026] [:error] [pid 25967:tid 25981] [client 158.158.72.125:41439] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "acNvWfg8Qtq7ZM4mSFmugAAAA0k"]
[Wed Mar 25 13:15:06.440509 2026] [:error] [pid 756:tid 850] [client 158.158.72.125:27356] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw.php"] [unique_id "acNvWjOaW6oylMIDBCQGTgAAAIA"]
[Wed Mar 25 13:15:07.250126 2026] [:error] [pid 26449:tid 26476] [client 158.158.72.125:2339] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw.php"] [unique_id "acNvW9pZ2T15NDqzAjE-rAAAAlc"]
[Wed Mar 25 13:15:08.201342 2026] [:error] [pid 25967:tid 25996] [client 158.158.72.125:22337] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw.php"] [unique_id "acNvXPg8Qtq7ZM4mSFmuhwAAA1g"]
[Wed Mar 25 13:15:09.357536 2026] [:error] [pid 26269:tid 26278] [client 158.158.72.125:56680] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw.php"] [unique_id "acNvXUn7e-ZQbaIs7qyZOAAAAYI"]
[Wed Mar 25 13:15:10.577280 2026] [:error] [pid 25967:tid 25992] [client 158.158.72.125:58277] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/44.php"] [unique_id "acNvXvg8Qtq7ZM4mSFmujwAAA1Q"]
[Wed Mar 25 13:15:12.079251 2026] [:error] [pid 25967:tid 25978] [client 158.158.72.125:31770] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/44.php"] [unique_id "acNvYPg8Qtq7ZM4mSFmulAAAA0Y"]
[Wed Mar 25 13:15:16.172050 2026] [:error] [pid 25875:tid 25895] [client 158.158.72.125:60639] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/44.php"] [unique_id "acNvZBJ38QkS3NyfshyIlwAAAo4"]
[Wed Mar 25 13:15:19.109453 2026] [:error] [pid 25875:tid 25900] [client 158.158.72.125:17795] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/44.php"] [unique_id "acNvZxJ38QkS3NyfshyIoQAAApM"]
[Wed Mar 25 13:15:21.992034 2026] [:error] [pid 47989:tid 48007] [client 158.158.72.125:43427] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "acNvaSWKdJMhIccROjkfkwAAAVA"]
[Wed Mar 25 13:15:23.265920 2026] [:error] [pid 47989:tid 47998] [client 158.158.72.125:54513] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "acNvayWKdJMhIccROjkfmQAAAUc"]
[Wed Mar 25 13:15:26.938803 2026] [:error] [pid 47989:tid 48000] [client 158.158.72.125:27970] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "acNvbiWKdJMhIccROjkfogAAAUk"]
[Wed Mar 25 13:15:29.408392 2026] [:error] [pid 892:tid 912] [client 158.158.72.125:58297] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "acNvcST_G8WMU3T3yxqhigAAAM4"]
[Wed Mar 25 13:15:30.686636 2026] [:error] [pid 25967:tid 25986] [client 158.158.72.125:63865] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amp.php"] [unique_id "acNvcvg8Qtq7ZM4mSFmu0wAAA04"]
[Wed Mar 25 13:15:33.325495 2026] [:error] [pid 892:tid 901] [client 158.158.72.125:26100] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amp.php"] [unique_id "acNvdST_G8WMU3T3yxqhiwAAAMQ"]
[Wed Mar 25 13:15:34.788157 2026] [:error] [pid 25969:tid 26035] [client 158.158.72.125:27977] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amp.php"] [unique_id "acNvdhd3aEUmOfdKja_h8wAAA8k"]
[Wed Mar 25 13:15:35.877611 2026] [:error] [pid 25967:tid 25975] [client 158.158.72.125:43438] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amp.php"] [unique_id "acNvd_g8Qtq7ZM4mSFmu4AAAA0M"]
[Wed Mar 25 13:15:37.510026 2026] [:error] [pid 47946:tid 47948] [client 158.158.72.125:30557] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "acNveTipQTqBMSeKYhdojwAAAQA"]
[Wed Mar 25 13:15:38.317462 2026] [:error] [pid 26449:tid 26459] [client 158.158.72.125:30544] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "acNvetpZ2T15NDqzAjE-0QAAAkY"]
[Wed Mar 25 13:15:39.360644 2026] [:error] [pid 47946:tid 47960] [client 158.158.72.125:29294] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "acNvezipQTqBMSeKYhdokwAAAQw"]
[Wed Mar 25 13:15:40.184500 2026] [:error] [pid 47989:tid 48007] [client 158.158.72.125:27968] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "acNvfCWKdJMhIccROjkfuQAAAVA"]
[Wed Mar 25 13:15:41.167465 2026] [:error] [pid 47989:tid 48004] [client 158.158.72.125:54188] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "acNvfSWKdJMhIccROjkfvAAAAU0"]
[Wed Mar 25 13:15:41.907811 2026] [:error] [pid 25875:tid 25905] [client 158.158.72.125:19024] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "acNvfRJ38QkS3NyfshyIygAAApg"]
[Wed Mar 25 13:15:43.795420 2026] [:error] [pid 47946:tid 47952] [client 158.158.72.125:56627] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "acNvfzipQTqBMSeKYhdomQAAAQQ"]
[Wed Mar 25 13:15:44.746131 2026] [:error] [pid 25967:tid 25987] [client 158.158.72.125:28030] [client 158.158.72.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "acNvgPg8Qtq7ZM4mSFmvDAAAA08"]
[Wed Mar 25 13:30:51.761674 2026] [:error] [pid 25969:tid 26030] [client 88.246.76.159:38417] [client 88.246.76.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acNzCxd3aEUmOfdKja_jGQAAA8Q"]
[Wed Mar 25 13:32:19.702116 2026] [:error] [pid 25875:tid 25887] [client 88.246.76.159:38015] [client 88.246.76.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.246.76.159, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acNzYxJ38QkS3NyfshyNnwAAAoY"]
[Wed Mar 25 13:53:59.804303 2026] [:error] [pid 47989:tid 48009] [client 147.135.212.217:60546] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acN4dyWKdJMhIccROjktlwAAAVI"]
[Wed Mar 25 13:54:02.123485 2026] [:error] [pid 25875:tid 25897] [client 147.135.212.217:60576] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acN4ehJ38QkS3NyfshyUOgAAApA"]
[Wed Mar 25 13:54:04.639836 2026] [:error] [pid 25967:tid 25980] [client 147.135.212.217:60584] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acN4fPg8Qtq7ZM4mSFnEQgAAA0g"]
[Wed Mar 25 13:54:07.155458 2026] [:error] [pid 47946:tid 47951] [client 147.135.212.217:60598] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acN4fzipQTqBMSeKYhdrsQAAAQM"]
[Wed Mar 25 13:54:09.654343 2026] [:error] [pid 25967:tid 25992] [client 147.135.212.217:46346] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "acN4gfg8Qtq7ZM4mSFnEZAAAA1Q"]
[Wed Mar 25 13:54:12.173989 2026] [:error] [pid 25875:tid 25889] [client 147.135.212.217:46360] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "acN4hBJ38QkS3NyfshyUQAAAAog"]
[Wed Mar 25 13:54:14.672717 2026] [:error] [pid 25967:tid 25981] [client 147.135.212.217:46362] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "acN4hvg8Qtq7ZM4mSFnEewAAA0k"]
[Wed Mar 25 13:54:17.136742 2026] [:error] [pid 892:tid 901] [client 147.135.212.217:46370] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "acN4iST_G8WMU3T3yxqlDAAAAMQ"]
[Wed Mar 25 13:54:19.647934 2026] [:error] [pid 26321:tid 26343] [client 147.135.212.217:47820] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "acN4i_KO65qqGZCSPZr7YwAAAgQ"]
[Wed Mar 25 13:54:21.956208 2026] [:error] [pid 26449:tid 26455] [client 147.135.212.217:47836] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acN4jdpZ2T15NDqzAjFE8QAAAkI"]
[Wed Mar 25 13:54:24.452321 2026] [:error] [pid 26321:tid 26362] [client 147.135.212.217:47852] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "acN4kPKO65qqGZCSPZr7ZQAAAhU"]
[Wed Mar 25 13:54:26.938084 2026] [:error] [pid 47989:tid 48009] [client 147.135.212.217:47854] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "acN4kiWKdJMhIccROjkt0wAAAVI"]
[Wed Mar 25 13:54:29.402072 2026] [:error] [pid 25875:tid 25896] [client 147.135.212.217:51330] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "acN4lRJ38QkS3NyfshyUTQAAAo8"]
[Wed Mar 25 13:54:31.870439 2026] [:error] [pid 26321:tid 26340] [client 147.135.212.217:51340] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "acN4l_KO65qqGZCSPZr7bgAAAgE"]
[Wed Mar 25 13:54:34.359662 2026] [:error] [pid 47946:tid 47948] [client 147.135.212.217:51346] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "acN4mjipQTqBMSeKYhdrvAAAAQA"]
[Wed Mar 25 13:54:36.677209 2026] [:error] [pid 47989:tid 48000] [client 147.135.212.217:51348] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "acN4nCWKdJMhIccROjkt5QAAAUk"]
[Wed Mar 25 13:54:38.975613 2026] [:error] [pid 25967:tid 25977] [client 147.135.212.217:52464] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acN4nvg8Qtq7ZM4mSFnEqQAAA0U"]
[Wed Mar 25 13:54:41.459111 2026] [:error] [pid 25967:tid 25975] [client 147.135.212.217:52478] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "acN4ofg8Qtq7ZM4mSFnErwAAA0M"]
[Wed Mar 25 13:54:43.780340 2026] [:error] [pid 25967:tid 25982] [client 147.135.212.217:52486] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "acN4o_g8Qtq7ZM4mSFnEuQAAA0o"]
[Wed Mar 25 13:54:46.096269 2026] [:error] [pid 47989:tid 48008] [client 147.135.212.217:52492] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acN4piWKdJMhIccROjkt9AAAAVE"]
[Wed Mar 25 13:54:48.553604 2026] [:error] [pid 756:tid 852] [client 147.135.212.217:34964] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acN4qDOaW6oylMIDBCQIxAAAAII"]
[Wed Mar 25 13:54:51.013706 2026] [:error] [pid 47989:tid 47997] [client 147.135.212.217:34972] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acN4qyWKdJMhIccROjkuAgAAAUY"]
[Wed Mar 25 13:54:53.485247 2026] [:error] [pid 47989:tid 48008] [client 147.135.212.217:34986] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acN4rSWKdJMhIccROjkuCwAAAVE"]
[Wed Mar 25 13:54:55.785325 2026] [:error] [pid 47989:tid 47992] [client 147.135.212.217:34998] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acN4ryWKdJMhIccROjkuFAAAAUE"]
[Wed Mar 25 13:55:27.290394 2026] [:error] [pid 25967:tid 25982] [client 147.135.212.217:33728] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "acN4z_g8Qtq7ZM4mSFnFDgAAA0o"]
[Wed Mar 25 13:55:29.705862 2026] [:error] [pid 25969:tid 26036] [client 147.135.212.217:59482] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acN40Rd3aEUmOfdKja_lawAAA8o"]
[Wed Mar 25 13:55:32.172916 2026] [:error] [pid 47989:tid 48001] [client 147.135.212.217:59494] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acN41CWKdJMhIccROjkuXQAAAUo"]
[Wed Mar 25 13:55:34.469841 2026] [:error] [pid 26321:tid 26348] [client 147.135.212.217:59502] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "acN41vKO65qqGZCSPZr7uQAAAgc"]
[Wed Mar 25 13:55:36.746660 2026] [:error] [pid 25967:tid 25985] [client 147.135.212.217:59512] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "acN42Pg8Qtq7ZM4mSFnFIwAAA00"]
[Wed Mar 25 13:55:39.199665 2026] [:error] [pid 25967:tid 25981] [client 147.135.212.217:56244] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "acN42_g8Qtq7ZM4mSFnFLAAAA0k"]
[Wed Mar 25 13:55:41.649294 2026] [:error] [pid 26449:tid 26466] [client 147.135.212.217:56254] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acN43dpZ2T15NDqzAjFFIQAAAk0"]
[Wed Mar 25 13:55:44.112338 2026] [:error] [pid 47989:tid 48015] [client 147.135.212.217:56260] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "acN44CWKdJMhIccROjkufgAAAVg"]
[Wed Mar 25 13:55:46.565635 2026] [:error] [pid 47946:tid 47949] [client 147.135.212.217:56270] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acN44jipQTqBMSeKYhdr2QAAAQE"]
[Wed Mar 25 14:03:39.539351 2026] [:error] [pid 25875:tid 25897] [client 45.131.195.164:50611] [client 45.131.195.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.164, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acN6uxJ38QkS3NyfshyWqwAAApA"]
[Wed Mar 25 15:45:02.235149 2026] [:error] [pid 25967:tid 25992] [client 101.42.46.71:48356] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acOSfvg8Qtq7ZM4mSFn5GwAAA1Q"]
[Wed Mar 25 15:50:19.814407 2026] [:error] [pid 892:tid 894] [client 43.159.145.149:58118] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acOTuyT_G8WMU3T3yxq0uwAAAMA"]
[Wed Mar 25 16:11:33.482750 2026] [:error] [pid 47989:tid 48014] [client 20.215.64.103:17721] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zcsu.php"] [unique_id "acOYtSWKdJMhIccROjlopgAAAVc"]
[Wed Mar 25 16:11:34.059603 2026] [:error] [pid 26449:tid 26465] [client 20.215.64.103:25548] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zcsu.php"] [unique_id "acOYttpZ2T15NDqzAjFaFgAAAkw"]
[Wed Mar 25 16:11:34.613049 2026] [:error] [pid 26449:tid 26470] [client 20.215.64.103:3785] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zcsu.php"] [unique_id "acOYttpZ2T15NDqzAjFaGgAAAlE"]
[Wed Mar 25 16:11:35.331096 2026] [:error] [pid 25875:tid 25892] [client 20.215.64.103:17717] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zcsu.php"] [unique_id "acOYtxJ38QkS3Nyfshy6eAAAAos"]
[Wed Mar 25 16:11:35.857616 2026] [:error] [pid 47989:tid 47992] [client 20.215.64.103:25568] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acOYtyWKdJMhIccROjloqwAAAUE"]
[Wed Mar 25 16:11:36.524536 2026] [:error] [pid 47989:tid 47998] [client 20.215.64.103:62656] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acOYuCWKdJMhIccROjlorQAAAUc"]
[Wed Mar 25 16:11:37.144276 2026] [:error] [pid 26321:tid 26341] [client 20.215.64.103:30450] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acOYufKO65qqGZCSPZoY4wAAAgI"]
[Wed Mar 25 16:11:37.723390 2026] [:error] [pid 47989:tid 47994] [client 20.215.64.103:45626] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acOYuSWKdJMhIccROjlosAAAAUM"]
[Wed Mar 25 16:11:38.340821 2026] [:error] [pid 25967:tid 25981] [client 20.215.64.103:43739] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acOYuvg8Qtq7ZM4mSFkERQAAA0k"]
[Wed Mar 25 16:11:38.898012 2026] [:error] [pid 25967:tid 25985] [client 20.215.64.103:32687] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acOYuvg8Qtq7ZM4mSFkESAAAA00"]
[Wed Mar 25 16:11:39.542850 2026] [:error] [pid 25967:tid 25989] [client 20.215.64.103:39733] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acOYu_g8Qtq7ZM4mSFkETQAAA1E"]
[Wed Mar 25 16:11:40.168289 2026] [:error] [pid 25875:tid 25895] [client 20.215.64.103:62709] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acOYvBJ38QkS3Nyfshy6fwAAAo4"]
[Wed Mar 25 16:11:40.709819 2026] [:error] [pid 25967:tid 25991] [client 20.215.64.103:51690] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acOYvPg8Qtq7ZM4mSFkEVAAAA1M"]
[Wed Mar 25 16:11:41.287453 2026] [:error] [pid 25875:tid 25891] [client 20.215.64.103:43718] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acOYvRJ38QkS3Nyfshy6ggAAAoo"]
[Wed Mar 25 16:11:41.859321 2026] [:error] [pid 47989:tid 48007] [client 20.215.64.103:35477] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acOYvSWKdJMhIccROjlovQAAAVA"]
[Wed Mar 25 16:11:42.481169 2026] [:error] [pid 25967:tid 25973] [client 20.215.64.103:45630] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acOYvvg8Qtq7ZM4mSFkEWAAAA0E"]
[Wed Mar 25 16:11:43.048481 2026] [:error] [pid 47989:tid 48005] [client 20.215.64.103:25577] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acOYvyWKdJMhIccROjlowQAAAU4"]
[Wed Mar 25 16:11:43.627097 2026] [:error] [pid 25967:tid 25994] [client 20.215.64.103:35499] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acOYv_g8Qtq7ZM4mSFkEYgAAA1Y"]
[Wed Mar 25 16:11:44.157041 2026] [:error] [pid 25875:tid 25882] [client 20.215.64.103:51669] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acOYwBJ38QkS3Nyfshy6hwAAAoE"]
[Wed Mar 25 16:11:44.675904 2026] [:error] [pid 25875:tid 25881] [client 20.215.64.103:35504] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acOYwBJ38QkS3Nyfshy6iAAAAoA"]
[Wed Mar 25 16:11:45.233104 2026] [:error] [pid 25967:tid 25990] [client 20.215.64.103:39729] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acOYwfg8Qtq7ZM4mSFkEZwAAA1I"]
[Wed Mar 25 16:11:45.770979 2026] [:error] [pid 25967:tid 25985] [client 20.215.64.103:52243] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acOYwfg8Qtq7ZM4mSFkEaQAAA00"]
[Wed Mar 25 16:11:46.302042 2026] [:error] [pid 25875:tid 25903] [client 20.215.64.103:39728] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acOYwhJ38QkS3Nyfshy6igAAApY"]
[Wed Mar 25 16:11:46.862738 2026] [:error] [pid 26269:tid 26296] [client 20.215.64.103:51701] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acOYwkn7e-ZQbaIs7qyoJgAAAZQ"]
[Wed Mar 25 16:11:47.407572 2026] [:error] [pid 25967:tid 25972] [client 20.215.64.103:39708] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOYw_g8Qtq7ZM4mSFkEbAAAA0A"]
[Wed Mar 25 16:11:47.948640 2026] [:error] [pid 25967:tid 25982] [client 20.215.64.103:25593] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOYw_g8Qtq7ZM4mSFkEbgAAA0o"]
[Wed Mar 25 16:11:48.497877 2026] [:error] [pid 25967:tid 25980] [client 20.215.64.103:30415] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOYxPg8Qtq7ZM4mSFkEcwAAA0g"]
[Wed Mar 25 16:11:49.084606 2026] [:error] [pid 25967:tid 25994] [client 20.215.64.103:25578] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOYxfg8Qtq7ZM4mSFkEdQAAA1Y"]
[Wed Mar 25 16:11:49.632931 2026] [:error] [pid 26269:tid 26294] [client 20.215.64.103:43730] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "acOYxUn7e-ZQbaIs7qyoJwAAAZI"]
[Wed Mar 25 16:11:50.174767 2026] [:error] [pid 25875:tid 25897] [client 20.215.64.103:62682] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "acOYxhJ38QkS3Nyfshy6jQAAApA"]
[Wed Mar 25 16:11:50.723409 2026] [:error] [pid 47946:tid 47961] [client 20.215.64.103:51671] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "acOYxjipQTqBMSeKYhd2EAAAAQ0"]
[Wed Mar 25 16:11:51.244910 2026] [:error] [pid 25969:tid 26029] [client 20.215.64.103:39687] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "acOYxxd3aEUmOfdKja_z6AAAA8M"]
[Wed Mar 25 16:11:51.900284 2026] [:error] [pid 26269:tid 26297] [client 20.215.64.103:45599] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "acOYx0n7e-ZQbaIs7qyoKQAAAZU"]
[Wed Mar 25 16:11:52.441444 2026] [:error] [pid 25969:tid 26035] [client 20.215.64.103:30427] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "acOYyBd3aEUmOfdKja_z7AAAA8k"]
[Wed Mar 25 16:11:53.002154 2026] [:error] [pid 756:tid 872] [client 20.215.64.103:25581] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "acOYyTOaW6oylMIDBCQRugAAAJQ"]
[Wed Mar 25 16:11:53.589394 2026] [:error] [pid 26449:tid 26462] [client 20.215.64.103:25551] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "acOYydpZ2T15NDqzAjFaOQAAAkk"]
[Wed Mar 25 16:11:54.104337 2026] [:error] [pid 25875:tid 25888] [client 20.215.64.103:3791] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtiiy.php"] [unique_id "acOYyhJ38QkS3Nyfshy6kAAAAoc"]
[Wed Mar 25 16:11:54.619217 2026] [:error] [pid 26449:tid 26466] [client 20.215.64.103:25550] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtiiy.php"] [unique_id "acOYytpZ2T15NDqzAjFaOgAAAk0"]
[Wed Mar 25 16:11:55.180311 2026] [:error] [pid 26269:tid 26283] [client 20.215.64.103:51665] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtiiy.php"] [unique_id "acOYy0n7e-ZQbaIs7qyoLAAAAYc"]
[Wed Mar 25 16:11:55.718911 2026] [:error] [pid 25967:tid 25989] [client 20.215.64.103:43761] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtiiy.php"] [unique_id "acOYy_g8Qtq7ZM4mSFkEgwAAA1E"]
[Wed Mar 25 16:11:56.313517 2026] [:error] [pid 25969:tid 26039] [client 20.215.64.103:3825] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvs.php"] [unique_id "acOYzBd3aEUmOfdKja_z7gAAA80"]
[Wed Mar 25 16:11:56.861085 2026] [:error] [pid 25875:tid 25895] [client 20.215.64.103:43717] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvs.php"] [unique_id "acOYzBJ38QkS3Nyfshy6mgAAAo4"]
[Wed Mar 25 16:11:57.451764 2026] [:error] [pid 25875:tid 25883] [client 20.215.64.103:32692] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvs.php"] [unique_id "acOYzRJ38QkS3Nyfshy6mwAAAoI"]
[Wed Mar 25 16:11:58.059817 2026] [:error] [pid 892:tid 913] [client 20.215.64.103:59848] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xvs.php"] [unique_id "acOYziT_G8WMU3T3yxq3EAAAAM8"]
[Wed Mar 25 16:11:58.583740 2026] [:error] [pid 47946:tid 47970] [client 20.215.64.103:25563] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "acOYzjipQTqBMSeKYhd2FAAAARY"]
[Wed Mar 25 16:11:59.153045 2026] [:error] [pid 892:tid 921] [client 20.215.64.103:32643] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "acOYzyT_G8WMU3T3yxq3EQAAANY"]
[Wed Mar 25 16:11:59.746490 2026] [:error] [pid 47946:tid 47969] [client 20.215.64.103:30431] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "acOYzzipQTqBMSeKYhd2FwAAARU"]
[Wed Mar 25 16:12:00.712937 2026] [:error] [pid 25967:tid 25973] [client 20.215.64.103:3833] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "acOY0Pg8Qtq7ZM4mSFkEhQAAA0E"]
[Wed Mar 25 16:12:01.236022 2026] [:error] [pid 25875:tid 25887] [client 20.215.64.103:35514] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "acOY0RJ38QkS3Nyfshy6pAAAAoY"]
[Wed Mar 25 16:12:01.781976 2026] [:error] [pid 26449:tid 26455] [client 20.215.64.103:30435] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "acOY0dpZ2T15NDqzAjFaPgAAAkI"]
[Wed Mar 25 16:12:02.315836 2026] [:error] [pid 25875:tid 25895] [client 20.215.64.103:43742] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "acOY0hJ38QkS3Nyfshy6qQAAAo4"]
[Wed Mar 25 16:12:02.896625 2026] [:error] [pid 892:tid 901] [client 20.215.64.103:52281] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "acOY0iT_G8WMU3T3yxq3FwAAAMQ"]
[Wed Mar 25 16:12:03.511142 2026] [:error] [pid 25969:tid 26033] [client 20.215.64.103:35511] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acOY0xd3aEUmOfdKja_z9AAAA8c"]
[Wed Mar 25 16:12:04.085052 2026] [:error] [pid 26321:tid 26350] [client 20.215.64.103:32696] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acOY1PKO65qqGZCSPZoY-QAAAgk"]
[Wed Mar 25 16:12:04.703916 2026] [:error] [pid 26269:tid 26279] [client 20.215.64.103:62715] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acOY1En7e-ZQbaIs7qyoMwAAAYM"]
[Wed Mar 25 16:12:05.260852 2026] [:error] [pid 25969:tid 26038] [client 20.215.64.103:62718] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acOY1Rd3aEUmOfdKja_z-gAAA8w"]
[Wed Mar 25 16:12:05.848509 2026] [:error] [pid 25967:tid 25993] [client 20.215.64.103:51014] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acOY1fg8Qtq7ZM4mSFkEjAAAA1U"]
[Wed Mar 25 16:12:06.384416 2026] [:error] [pid 26269:tid 26295] [client 20.215.64.103:52237] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acOY1kn7e-ZQbaIs7qyoNQAAAZM"]
[Wed Mar 25 16:12:07.006111 2026] [:error] [pid 892:tid 902] [client 20.215.64.103:17690] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acOY1yT_G8WMU3T3yxq3HAAAAMU"]
[Wed Mar 25 16:12:07.637634 2026] [:error] [pid 25969:tid 26049] [client 20.215.64.103:43774] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acOY1xd3aEUmOfdKja_z_gAAA9c"]
[Wed Mar 25 16:12:08.159825 2026] [:error] [pid 26269:tid 26282] [client 20.215.64.103:39738] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "acOY2En7e-ZQbaIs7qyoNgAAAYY"]
[Wed Mar 25 16:12:08.791915 2026] [:error] [pid 26269:tid 26289] [client 20.215.64.103:3777] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "acOY2En7e-ZQbaIs7qyoOQAAAY0"]
[Wed Mar 25 16:12:09.372413 2026] [:error] [pid 25967:tid 25987] [client 20.215.64.103:24505] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "acOY2fg8Qtq7ZM4mSFkEkwAAA08"]
[Wed Mar 25 16:12:09.962516 2026] [:error] [pid 25875:tid 25890] [client 20.215.64.103:62706] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "acOY2RJ38QkS3Nyfshy6rAAAAok"]
[Wed Mar 25 16:12:10.665203 2026] [:error] [pid 25967:tid 25973] [client 20.215.64.103:27565] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "acOY2vg8Qtq7ZM4mSFkElQAAA0E"]
[Wed Mar 25 16:12:11.337332 2026] [:error] [pid 25969:tid 26033] [client 20.215.64.103:25543] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "acOY2xd3aEUmOfdKja_0AAAAA8c"]
[Wed Mar 25 16:12:11.896139 2026] [:error] [pid 26269:tid 26280] [client 20.215.64.103:3928] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "acOY20n7e-ZQbaIs7qyoPAAAAYQ"]
[Wed Mar 25 16:12:12.423490 2026] [:error] [pid 47989:tid 47992] [client 20.215.64.103:25554] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "acOY3CWKdJMhIccROjlo1QAAAUE"]
[Wed Mar 25 16:12:13.000471 2026] [:error] [pid 756:tid 859] [client 20.215.64.103:43743] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "acOY3DOaW6oylMIDBCQRwAAAAIc"]
[Wed Mar 25 16:12:13.838323 2026] [:error] [pid 756:tid 858] [client 20.215.64.103:3823] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "acOY3TOaW6oylMIDBCQRwgAAAIY"]
[Wed Mar 25 16:12:14.747655 2026] [:error] [pid 47946:tid 47971] [client 20.215.64.103:35483] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "acOY3jipQTqBMSeKYhd2HwAAARc"]
[Wed Mar 25 16:12:15.653905 2026] [:error] [pid 25969:tid 26043] [client 20.215.64.103:32656] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "acOY3xd3aEUmOfdKja_0BAAAA9E"]
[Wed Mar 25 16:12:16.401212 2026] [:error] [pid 47946:tid 47964] [client 20.215.64.103:3790] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "acOY4DipQTqBMSeKYhd2IwAAARA"]
[Wed Mar 25 16:12:17.013056 2026] [:error] [pid 25875:tid 25897] [client 20.215.64.103:25561] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "acOY4RJ38QkS3Nyfshy6tQAAApA"]
[Wed Mar 25 16:12:17.854445 2026] [:error] [pid 47989:tid 48003] [client 20.215.64.103:24453] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "acOY4SWKdJMhIccROjlo1wAAAUw"]
[Wed Mar 25 16:12:18.494719 2026] [:error] [pid 47989:tid 47993] [client 20.215.64.103:51698] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "acOY4iWKdJMhIccROjlo2QAAAUI"]
[Wed Mar 25 16:12:19.155420 2026] [:error] [pid 26321:tid 26363] [client 20.215.64.103:3789] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "acOY4_KO65qqGZCSPZoZAAAAAhY"]
[Wed Mar 25 16:12:19.775520 2026] [:error] [pid 26269:tid 26296] [client 20.215.64.103:24502] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "acOY40n7e-ZQbaIs7qyoQwAAAZQ"]
[Wed Mar 25 16:12:20.426871 2026] [:error] [pid 26449:tid 26462] [client 20.215.64.103:28110] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "acOY5NpZ2T15NDqzAjFaQgAAAkk"]
[Wed Mar 25 16:12:20.971848 2026] [:error] [pid 25875:tid 25882] [client 20.215.64.103:45575] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "acOY5BJ38QkS3Nyfshy6ugAAAoE"]
[Wed Mar 25 16:12:21.577777 2026] [:error] [pid 47989:tid 48014] [client 20.215.64.103:39739] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin.php"] [unique_id "acOY5SWKdJMhIccROjlo3QAAAVc"]
[Wed Mar 25 16:12:22.151013 2026] [:error] [pid 756:tid 868] [client 20.215.64.103:3801] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin.php"] [unique_id "acOY5jOaW6oylMIDBCQRyAAAAJA"]
[Wed Mar 25 16:12:22.662469 2026] [:error] [pid 25969:tid 26046] [client 20.215.64.103:3467] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin.php"] [unique_id "acOY5hd3aEUmOfdKja_0BwAAA9Q"]
[Wed Mar 25 16:12:23.198070 2026] [:error] [pid 756:tid 861] [client 20.215.64.103:30459] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin.php"] [unique_id "acOY5zOaW6oylMIDBCQRyQAAAIk"]
[Wed Mar 25 16:12:23.709643 2026] [:error] [pid 756:tid 873] [client 20.215.64.103:28156] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "acOY5zOaW6oylMIDBCQRygAAAJU"]
[Wed Mar 25 16:12:24.230505 2026] [:error] [pid 47946:tid 47965] [client 20.215.64.103:44928] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "acOY6DipQTqBMSeKYhd2KgAAARE"]
[Wed Mar 25 16:12:24.767280 2026] [:error] [pid 25969:tid 26042] [client 20.215.64.103:24494] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "acOY6Bd3aEUmOfdKja_0DAAAA9A"]
[Wed Mar 25 16:12:25.294570 2026] [:error] [pid 25969:tid 26029] [client 20.215.64.103:39159] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "acOY6Rd3aEUmOfdKja_0DQAAA8M"]
[Wed Mar 25 16:12:25.827521 2026] [:error] [pid 47989:tid 48000] [client 20.215.64.103:28126] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acOY6SWKdJMhIccROjlo5AAAAUk"]
[Wed Mar 25 16:12:26.446285 2026] [:error] [pid 47989:tid 48012] [client 20.215.64.103:3994] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acOY6iWKdJMhIccROjlo6QAAAVU"]
[Wed Mar 25 16:12:26.993998 2026] [:error] [pid 47989:tid 47991] [client 20.215.64.103:40489] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acOY6iWKdJMhIccROjlo7AAAAUA"]
[Wed Mar 25 16:12:27.572161 2026] [:error] [pid 47946:tid 47962] [client 20.215.64.103:51600] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acOY6zipQTqBMSeKYhd2LQAAAQ4"]
[Wed Mar 25 16:12:28.142940 2026] [:error] [pid 47989:tid 48011] [client 20.215.64.103:53751] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "acOY7CWKdJMhIccROjlo8wAAAVQ"]
[Wed Mar 25 16:12:28.677740 2026] [:error] [pid 47989:tid 47999] [client 20.215.64.103:61227] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "acOY7CWKdJMhIccROjlo9gAAAUg"]
[Wed Mar 25 16:12:29.209700 2026] [:error] [pid 892:tid 894] [client 20.215.64.103:40457] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "acOY7ST_G8WMU3T3yxq3IQAAAMA"]
[Wed Mar 25 16:12:29.740924 2026] [:error] [pid 25969:tid 26041] [client 20.215.64.103:29648] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "acOY7Rd3aEUmOfdKja_0EAAAA88"]
[Wed Mar 25 16:12:30.332475 2026] [:error] [pid 25969:tid 26031] [client 20.215.64.103:45690] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aifa.php"] [unique_id "acOY7hd3aEUmOfdKja_0EgAAA8U"]
[Wed Mar 25 16:12:30.934520 2026] [:error] [pid 756:tid 866] [client 20.215.64.103:44948] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aifa.php"] [unique_id "acOY7jOaW6oylMIDBCQRywAAAI4"]
[Wed Mar 25 16:12:31.511864 2026] [:error] [pid 26321:tid 26359] [client 20.215.64.103:54335] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aifa.php"] [unique_id "acOY7_KO65qqGZCSPZoZCQAAAhI"]
[Wed Mar 25 16:12:34.752942 2026] [:error] [pid 25969:tid 26049] [client 20.215.64.103:53741] [client 20.215.64.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/app.php"] [unique_id "acOY8hd3aEUmOfdKja_0FwAAA9c"]
[Wed Mar 25 16:12:45.820258 2026] [:error] [pid 26449:tid 26454] [client 20.215.64.103:43125] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wander.php"] [unique_id "acOY_dpZ2T15NDqzAjFaVwAAAkE"]
[Wed Mar 25 16:12:46.462207 2026] [:error] [pid 26321:tid 26358] [client 20.215.64.103:52990] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wander.php"] [unique_id "acOY_vKO65qqGZCSPZoZGQAAAhE"]
[Wed Mar 25 16:12:47.037814 2026] [:error] [pid 26321:tid 26344] [client 20.215.64.103:20635] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wander.php"] [unique_id "acOY__KO65qqGZCSPZoZGwAAAgU"]
[Wed Mar 25 16:12:47.795638 2026] [:error] [pid 25969:tid 26027] [client 20.215.64.103:52936] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wander.php"] [unique_id "acOY_xd3aEUmOfdKja_0HgAAA8E"]
[Wed Mar 25 16:12:48.452125 2026] [:error] [pid 47946:tid 47958] [client 20.215.64.103:55287] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "acOZADipQTqBMSeKYhd2OgAAAQo"]
[Wed Mar 25 16:12:49.042245 2026] [:error] [pid 26269:tid 26300] [client 20.215.64.103:47660] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "acOZAUn7e-ZQbaIs7qyoTAAAAZg"]
[Wed Mar 25 16:12:49.580764 2026] [:error] [pid 26321:tid 26339] [client 20.215.64.103:63562] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "acOZAfKO65qqGZCSPZoZHwAAAgA"]
[Wed Mar 25 16:12:50.565735 2026] [:error] [pid 47946:tid 47966] [client 20.215.64.103:44374] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "acOZAjipQTqBMSeKYhd2PgAAARI"]
[Wed Mar 25 16:12:51.155854 2026] [:error] [pid 25967:tid 25972] [client 20.215.64.103:26548] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "acOZA_g8Qtq7ZM4mSFkEmwAAA0A"]
[Wed Mar 25 16:12:52.092372 2026] [:error] [pid 47989:tid 48010] [client 20.215.64.103:3402] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "acOZBCWKdJMhIccROjlpEwAAAVM"]
[Wed Mar 25 16:12:52.711952 2026] [:error] [pid 26321:tid 26349] [client 20.215.64.103:26028] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "acOZBPKO65qqGZCSPZoZIwAAAgg"]
[Wed Mar 25 16:12:53.352695 2026] [:error] [pid 892:tid 921] [client 20.215.64.103:25486] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "acOZBST_G8WMU3T3yxq3JwAAANY"]
[Wed Mar 25 16:12:54.160644 2026] [:error] [pid 47946:tid 47954] [client 20.215.64.103:3603] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "acOZBjipQTqBMSeKYhd2PwAAAQY"]
[Wed Mar 25 16:12:55.309761 2026] [:error] [pid 25875:tid 25894] [client 20.215.64.103:41194] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "acOZBxJ38QkS3Nyfshy6vgAAAo0"]
[Wed Mar 25 16:12:56.760643 2026] [:error] [pid 26321:tid 26344] [client 20.215.64.103:41149] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "acOZCPKO65qqGZCSPZoZJQAAAgU"]
[Wed Mar 25 16:12:57.492940 2026] [:error] [pid 892:tid 894] [client 20.215.64.103:61277] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "acOZCST_G8WMU3T3yxq3LQAAAMA"]
[Wed Mar 25 16:12:58.198136 2026] [:error] [pid 26321:tid 26350] [client 20.215.64.103:55873] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "acOZCvKO65qqGZCSPZoZKQAAAgk"]
[Wed Mar 25 16:12:59.202848 2026] [:error] [pid 25875:tid 25892] [client 20.215.64.103:61256] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "acOZCxJ38QkS3Nyfshy6xQAAAos"]
[Wed Mar 25 16:13:00.078874 2026] [:error] [pid 756:tid 875] [client 20.215.64.103:24032] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "acOZDDOaW6oylMIDBCQR0gAAAJc"]
[Wed Mar 25 16:13:01.173209 2026] [:error] [pid 47946:tid 47958] [client 20.215.64.103:19895] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "acOZDTipQTqBMSeKYhd2SAAAAQo"]
[Wed Mar 25 16:13:01.985948 2026] [:error] [pid 25969:tid 26042] [client 20.215.64.103:52869] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "acOZDRd3aEUmOfdKja_0KQAAA9A"]
[Wed Mar 25 16:13:02.711965 2026] [:error] [pid 47946:tid 47954] [client 20.215.64.103:52907] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "acOZDjipQTqBMSeKYhd2SwAAAQY"]
[Wed Mar 25 16:13:03.387561 2026] [:error] [pid 47946:tid 47952] [client 20.215.64.103:43685] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "acOZDzipQTqBMSeKYhd2TQAAAQQ"]
[Wed Mar 25 16:13:04.043083 2026] [:error] [pid 26449:tid 26463] [client 20.215.64.103:33209] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "acOZENpZ2T15NDqzAjFaYAAAAko"]
[Wed Mar 25 16:13:04.603153 2026] [:error] [pid 26269:tid 26291] [client 20.215.64.103:28570] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "acOZEEn7e-ZQbaIs7qyoUwAAAY8"]
[Wed Mar 25 16:13:05.290497 2026] [:error] [pid 892:tid 910] [client 20.215.64.103:56472] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "acOZEST_G8WMU3T3yxq3OAAAAMw"]
[Wed Mar 25 16:13:05.800641 2026] [:error] [pid 47989:tid 48015] [client 20.215.64.103:24038] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "acOZESWKdJMhIccROjlpMAAAAVg"]
[Wed Mar 25 16:13:06.375682 2026] [:error] [pid 47989:tid 47993] [client 20.215.64.103:24055] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "acOZEiWKdJMhIccROjlpMwAAAUI"]
[Wed Mar 25 16:13:07.020353 2026] [:error] [pid 47989:tid 47996] [client 20.215.64.103:41186] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acOZEyWKdJMhIccROjlpNgAAAUU"]
[Wed Mar 25 16:13:07.761983 2026] [:error] [pid 47989:tid 48014] [client 20.215.64.103:28577] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acOZEyWKdJMhIccROjlpOgAAAVc"]
[Wed Mar 25 16:13:08.345499 2026] [:error] [pid 47989:tid 47995] [client 20.215.64.103:21314] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acOZFCWKdJMhIccROjlpPQAAAUQ"]
[Wed Mar 25 16:13:08.893547 2026] [:error] [pid 47989:tid 48011] [client 20.215.64.103:52878] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acOZFCWKdJMhIccROjlpQAAAAVQ"]
[Wed Mar 25 16:13:09.519203 2026] [:error] [pid 25967:tid 25988] [client 20.215.64.103:52927] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd.php"] [unique_id "acOZFfg8Qtq7ZM4mSFkErQAAA1A"]
[Wed Mar 25 16:13:10.142736 2026] [:error] [pid 26321:tid 26352] [client 20.215.64.103:44292] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd.php"] [unique_id "acOZFvKO65qqGZCSPZoZMgAAAgs"]
[Wed Mar 25 16:13:10.848554 2026] [:error] [pid 47946:tid 47963] [client 20.215.64.103:52916] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd.php"] [unique_id "acOZFjipQTqBMSeKYhd2VAAAAQ8"]
[Wed Mar 25 16:13:11.541657 2026] [:error] [pid 892:tid 917] [client 20.215.64.103:43059] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd.php"] [unique_id "acOZFyT_G8WMU3T3yxq3PAAAANI"]
[Wed Mar 25 16:13:12.362965 2026] [:error] [pid 756:tid 871] [client 20.215.64.103:18827] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acOZGDOaW6oylMIDBCQR2wAAAJM"]
[Wed Mar 25 16:13:13.026818 2026] [:error] [pid 25967:tid 25992] [client 20.215.64.103:29648] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acOZGfg8Qtq7ZM4mSFkErwAAA1Q"]
[Wed Mar 25 16:13:13.774032 2026] [:error] [pid 25967:tid 25986] [client 20.215.64.103:28565] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acOZGfg8Qtq7ZM4mSFkEtAAAA04"]
[Wed Mar 25 16:13:14.482027 2026] [:error] [pid 47946:tid 47956] [client 20.215.64.103:19364] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acOZGjipQTqBMSeKYhd2WAAAAQg"]
[Wed Mar 25 16:13:15.192584 2026] [:error] [pid 892:tid 913] [client 20.215.64.103:33626] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelio1.php"] [unique_id "acOZGyT_G8WMU3T3yxq3QQAAAM8"]
[Wed Mar 25 16:13:16.243210 2026] [:error] [pid 756:tid 873] [client 20.215.64.103:44341] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelio1.php"] [unique_id "acOZHDOaW6oylMIDBCQR4AAAAJU"]
[Wed Mar 25 16:13:16.874655 2026] [:error] [pid 756:tid 864] [client 20.215.64.103:58552] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelio1.php"] [unique_id "acOZHDOaW6oylMIDBCQR4wAAAIw"]
[Wed Mar 25 16:13:17.610380 2026] [:error] [pid 26269:tid 26277] [client 20.215.64.103:58510] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelio1.php"] [unique_id "acOZHUn7e-ZQbaIs7qyoWgAAAYE"]
[Wed Mar 25 16:13:18.295707 2026] [:error] [pid 26321:tid 26348] [client 20.215.64.103:55178] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "acOZHvKO65qqGZCSPZoZNQAAAgc"]
[Wed Mar 25 16:13:18.915556 2026] [:error] [pid 25967:tid 25995] [client 20.215.64.103:30376] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "acOZHvg8Qtq7ZM4mSFkEuwAAA1c"]
[Wed Mar 25 16:13:19.831971 2026] [:error] [pid 25967:tid 25973] [client 20.215.64.103:56495] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "acOZH_g8Qtq7ZM4mSFkEvAAAA0E"]
[Wed Mar 25 16:13:20.511791 2026] [:error] [pid 26321:tid 26361] [client 20.215.64.103:55180] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "acOZIPKO65qqGZCSPZoZNgAAAhQ"]
[Wed Mar 25 16:13:21.136090 2026] [:error] [pid 25969:tid 26037] [client 20.215.64.103:55205] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bo.php"] [unique_id "acOZIRd3aEUmOfdKja_0MwAAA8s"]
[Wed Mar 25 16:13:21.943619 2026] [:error] [pid 47989:tid 47999] [client 20.215.64.103:43016] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bo.php"] [unique_id "acOZISWKdJMhIccROjlpTAAAAUg"]
[Wed Mar 25 16:13:22.518172 2026] [:error] [pid 892:tid 921] [client 20.215.64.103:43067] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bo.php"] [unique_id "acOZIiT_G8WMU3T3yxq3SgAAANY"]
[Wed Mar 25 16:13:23.233332 2026] [:error] [pid 25967:tid 25983] [client 20.215.64.103:21354] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bo.php"] [unique_id "acOZI_g8Qtq7ZM4mSFkEwQAAA0s"]
[Wed Mar 25 16:13:24.665135 2026] [:error] [pid 25875:tid 25884] [client 20.215.64.103:43049] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "acOZJBJ38QkS3Nyfshy6zgAAAoM"]
[Wed Mar 25 16:13:25.376749 2026] [:error] [pid 26321:tid 26353] [client 20.215.64.103:25084] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "acOZJfKO65qqGZCSPZoZOAAAAgw"]
[Wed Mar 25 16:13:26.092744 2026] [:error] [pid 25875:tid 25896] [client 20.215.64.103:58547] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "acOZJhJ38QkS3Nyfshy60gAAAo8"]
[Wed Mar 25 16:13:26.706088 2026] [:error] [pid 47989:tid 48015] [client 20.215.64.103:58505] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "acOZJiWKdJMhIccROjlpVAAAAVg"]
[Wed Mar 25 16:13:27.275298 2026] [:error] [pid 47989:tid 47996] [client 20.215.64.103:25057] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/privacy.php"] [unique_id "acOZJyWKdJMhIccROjlpVwAAAUU"]
[Wed Mar 25 16:13:28.136119 2026] [:error] [pid 26269:tid 26294] [client 20.215.64.103:25042] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/privacy.php"] [unique_id "acOZKEn7e-ZQbaIs7qyoXAAAAZI"]
[Wed Mar 25 16:13:28.828013 2026] [:error] [pid 25967:tid 25985] [client 20.215.64.103:22422] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/privacy.php"] [unique_id "acOZKPg8Qtq7ZM4mSFkE0AAAA00"]
[Wed Mar 25 16:13:29.404222 2026] [:error] [pid 26269:tid 26293] [client 20.215.64.103:22409] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/privacy.php"] [unique_id "acOZKUn7e-ZQbaIs7qyoXQAAAZE"]
[Wed Mar 25 16:13:30.109867 2026] [:error] [pid 26269:tid 26285] [client 20.215.64.103:19348] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "acOZKkn7e-ZQbaIs7qyoYAAAAYk"]
[Wed Mar 25 16:13:30.772306 2026] [:error] [pid 25969:tid 26044] [client 20.215.64.103:23494] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "acOZKhd3aEUmOfdKja_0OgAAA9I"]
[Wed Mar 25 16:13:31.599765 2026] [:error] [pid 25875:tid 25893] [client 20.215.64.103:22426] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "acOZKxJ38QkS3Nyfshy62QAAAow"]
[Wed Mar 25 16:13:32.246522 2026] [:error] [pid 25875:tid 25898] [client 20.215.64.103:27588] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "acOZLBJ38QkS3Nyfshy63gAAApE"]
[Wed Mar 25 16:13:32.841787 2026] [:error] [pid 756:tid 868] [client 20.215.64.103:58526] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "acOZLDOaW6oylMIDBCQR6gAAAJA"]
[Wed Mar 25 16:13:33.576003 2026] [:error] [pid 756:tid 850] [client 20.215.64.103:22521] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "acOZLTOaW6oylMIDBCQR6wAAAIA"]
[Wed Mar 25 16:13:34.140962 2026] [:error] [pid 25969:tid 26047] [client 20.215.64.103:27587] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "acOZLhd3aEUmOfdKja_0PgAAA9U"]
[Wed Mar 25 16:13:34.745218 2026] [:error] [pid 26449:tid 26470] [client 20.215.64.103:30369] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "acOZLtpZ2T15NDqzAjFagQAAAlE"]
[Wed Mar 25 16:13:35.449458 2026] [:error] [pid 26449:tid 26475] [client 20.215.64.103:25031] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acOZL9pZ2T15NDqzAjFagwAAAlY"]
[Wed Mar 25 16:13:36.109009 2026] [:error] [pid 25875:tid 25881] [client 20.215.64.103:18919] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acOZMBJ38QkS3Nyfshy65AAAAoA"]
[Wed Mar 25 16:13:36.675663 2026] [:error] [pid 26321:tid 26350] [client 20.215.64.103:23528] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acOZMPKO65qqGZCSPZoZQwAAAgk"]
[Wed Mar 25 16:13:37.354574 2026] [:error] [pid 26449:tid 26459] [client 20.215.64.103:18829] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acOZMdpZ2T15NDqzAjFaiAAAAkY"]
[Wed Mar 25 16:13:37.919784 2026] [:error] [pid 26321:tid 26355] [client 20.215.64.103:23526] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "acOZMfKO65qqGZCSPZoZRgAAAg4"]
[Wed Mar 25 16:13:38.510428 2026] [:error] [pid 47946:tid 47952] [client 20.215.64.103:58514] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "acOZMjipQTqBMSeKYhd2YgAAAQQ"]
[Wed Mar 25 16:13:39.163404 2026] [:error] [pid 25969:tid 26028] [client 20.215.64.103:38405] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "acOZMxd3aEUmOfdKja_0QAAAA8I"]
[Wed Mar 25 16:13:39.878826 2026] [:error] [pid 26321:tid 26343] [client 20.215.64.103:22454] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "acOZM_KO65qqGZCSPZoZSwAAAgQ"]
[Wed Mar 25 16:13:40.419779 2026] [:error] [pid 47946:tid 47968] [client 20.215.64.103:55844] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acOZNDipQTqBMSeKYhd2ZgAAARQ"]
[Wed Mar 25 16:13:41.116694 2026] [:error] [pid 26321:tid 26357] [client 20.215.64.103:23518] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acOZNfKO65qqGZCSPZoZTAAAAhA"]
[Wed Mar 25 16:13:42.016124 2026] [:error] [pid 26321:tid 26360] [client 20.215.64.103:55841] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acOZNvKO65qqGZCSPZoZTQAAAhM"]
[Wed Mar 25 16:13:42.672199 2026] [:error] [pid 26449:tid 26466] [client 20.215.64.103:59183] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acOZNtpZ2T15NDqzAjFajQAAAk0"]
[Wed Mar 25 16:13:43.490614 2026] [:error] [pid 47989:tid 48000] [client 20.215.64.103:25025] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byypas.php"] [unique_id "acOZNyWKdJMhIccROjlpZgAAAUk"]
[Wed Mar 25 16:13:57.290595 2026] [:error] [pid 47989:tid 47991] [client 20.215.64.103:62592] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acOZRSWKdJMhIccROjlpmAAAAUA"]
[Wed Mar 25 16:13:57.887490 2026] [:error] [pid 47989:tid 47992] [client 20.215.64.103:18908] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acOZRSWKdJMhIccROjlpngAAAUE"]
[Wed Mar 25 16:13:58.459998 2026] [:error] [pid 47989:tid 48000] [client 20.215.64.103:18910] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acOZRiWKdJMhIccROjlppgAAAUk"]
[Wed Mar 25 16:13:59.003022 2026] [:error] [pid 25875:tid 25898] [client 20.215.64.103:18898] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acOZRxJ38QkS3Nyfshy68gAAApE"]
[Wed Mar 25 16:13:59.598889 2026] [:error] [pid 25967:tid 25976] [client 20.215.64.103:22475] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "acOZR_g8Qtq7ZM4mSFkE4QAAA0Q"]
[Wed Mar 25 16:14:00.130623 2026] [:error] [pid 25875:tid 25889] [client 20.215.64.103:35556] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "acOZSBJ38QkS3Nyfshy6-QAAAog"]
[Wed Mar 25 16:14:00.744908 2026] [:error] [pid 26449:tid 26461] [client 20.215.64.103:37134] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "acOZSNpZ2T15NDqzAjFajwAAAkg"]
[Wed Mar 25 16:14:01.319262 2026] [:error] [pid 25875:tid 25894] [client 20.215.64.103:38423] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "acOZSRJ38QkS3Nyfshy6_AAAAo0"]
[Wed Mar 25 16:14:01.843272 2026] [:error] [pid 47989:tid 48011] [client 20.215.64.103:50966] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "acOZSSWKdJMhIccROjlpwAAAAVQ"]
[Wed Mar 25 16:14:02.464143 2026] [:error] [pid 47989:tid 47995] [client 20.215.64.103:23545] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "acOZSiWKdJMhIccROjlpxQAAAUQ"]
[Wed Mar 25 16:14:03.049536 2026] [:error] [pid 47989:tid 47998] [client 20.215.64.103:21864] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "acOZSyWKdJMhIccROjlpzQAAAUc"]
[Wed Mar 25 16:14:03.732519 2026] [:error] [pid 47989:tid 48003] [client 20.215.64.103:37141] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "acOZSyWKdJMhIccROjlp0wAAAUw"]
[Wed Mar 25 16:14:04.339387 2026] [:error] [pid 47989:tid 48014] [client 20.215.64.103:59196] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "acOZTCWKdJMhIccROjlp1gAAAVc"]
[Wed Mar 25 16:14:05.019243 2026] [:error] [pid 47989:tid 48005] [client 20.215.64.103:32328] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "acOZTSWKdJMhIccROjlp2wAAAU4"]
[Wed Mar 25 16:14:05.614123 2026] [:error] [pid 25875:tid 25898] [client 20.215.64.103:50998] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "acOZTRJ38QkS3Nyfshy6_wAAApE"]
[Wed Mar 25 16:14:06.310335 2026] [:error] [pid 25967:tid 25974] [client 20.215.64.103:31905] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "acOZTvg8Qtq7ZM4mSFkE6QAAA0I"]
[Wed Mar 25 16:14:06.901185 2026] [:error] [pid 26321:tid 26362] [client 20.215.64.103:32325] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acOZTvKO65qqGZCSPZoZXAAAAhU"]
[Wed Mar 25 16:14:07.468228 2026] [:error] [pid 25967:tid 25996] [client 20.215.64.103:50969] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acOZT_g8Qtq7ZM4mSFkE7QAAA1g"]
[Wed Mar 25 16:14:08.049959 2026] [:error] [pid 26321:tid 26355] [client 20.215.64.103:31931] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acOZUPKO65qqGZCSPZoZXgAAAg4"]
[Wed Mar 25 16:14:08.678851 2026] [:error] [pid 25875:tid 25883] [client 20.215.64.103:38453] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acOZUBJ38QkS3Nyfshy7AQAAAoI"]
[Wed Mar 25 16:14:09.201801 2026] [:error] [pid 25875:tid 25882] [client 20.215.64.103:28094] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "acOZURJ38QkS3Nyfshy7BAAAAoE"]
[Wed Mar 25 16:14:09.793396 2026] [:error] [pid 25875:tid 25890] [client 20.215.64.103:38440] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "acOZURJ38QkS3Nyfshy7BwAAAok"]
[Wed Mar 25 16:14:10.329205 2026] [:error] [pid 25969:tid 26031] [client 20.215.64.103:32347] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "acOZUhd3aEUmOfdKja_0SwAAA8U"]
[Wed Mar 25 16:14:11.029453 2026] [:error] [pid 47989:tid 47997] [client 20.215.64.103:55819] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filesss.php"] [unique_id "acOZUyWKdJMhIccROjlp6AAAAUY"]
[Wed Mar 25 16:14:11.603307 2026] [:error] [pid 25875:tid 25883] [client 20.215.64.103:31873] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "acOZUxJ38QkS3Nyfshy7DgAAAoI"]
[Wed Mar 25 16:14:12.227162 2026] [:error] [pid 25967:tid 25987] [client 20.215.64.103:21868] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "acOZVPg8Qtq7ZM4mSFkE9QAAA08"]
[Wed Mar 25 16:14:12.865324 2026] [:error] [pid 25875:tid 25887] [client 20.215.64.103:37131] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "acOZVBJ38QkS3Nyfshy7EAAAAoY"]
[Wed Mar 25 16:14:13.578934 2026] [:error] [pid 25967:tid 25988] [client 20.215.64.103:28034] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "acOZVfg8Qtq7ZM4mSFkE-wAAA1A"]
[Wed Mar 25 16:14:14.125466 2026] [:error] [pid 25967:tid 25979] [client 20.215.64.103:55835] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-freya.php"] [unique_id "acOZVvg8Qtq7ZM4mSFkE_gAAA0c"]
[Wed Mar 25 16:14:14.655415 2026] [:error] [pid 47989:tid 48000] [client 20.215.64.103:35555] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-freya.php"] [unique_id "acOZViWKdJMhIccROjlp6gAAAUk"]
[Wed Mar 25 16:14:15.216830 2026] [:error] [pid 47989:tid 48001] [client 20.215.64.103:55830] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-freya.php"] [unique_id "acOZVyWKdJMhIccROjlp7AAAAUo"]
[Wed Mar 25 16:14:15.726844 2026] [:error] [pid 26321:tid 26340] [client 20.215.64.103:55840] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-freya.php"] [unique_id "acOZV_KO65qqGZCSPZoZZgAAAgE"]
[Wed Mar 25 16:14:16.308634 2026] [:error] [pid 25967:tid 25990] [client 20.215.64.103:48968] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "acOZWPg8Qtq7ZM4mSFkFBAAAA1I"]
[Wed Mar 25 16:14:16.889765 2026] [:error] [pid 25967:tid 25991] [client 20.215.64.103:31993] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "acOZWPg8Qtq7ZM4mSFkFCQAAA1M"]
[Wed Mar 25 16:14:17.441311 2026] [:error] [pid 26321:tid 26362] [client 20.215.64.103:18938] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "acOZWfKO65qqGZCSPZoZZwAAAhU"]
[Wed Mar 25 16:14:18.109850 2026] [:error] [pid 25969:tid 26035] [client 20.215.64.103:31986] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X7x.php"] [unique_id "acOZWhd3aEUmOfdKja_0TgAAA8k"]
[Wed Mar 25 16:14:18.715781 2026] [:error] [pid 26269:tid 26285] [client 20.215.64.103:35582] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "acOZWkn7e-ZQbaIs7qyofQAAAYk"]
[Wed Mar 25 16:14:19.337098 2026] [:error] [pid 756:tid 850] [client 20.215.64.103:55845] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "acOZWzOaW6oylMIDBCQR-QAAAIA"]
[Wed Mar 25 16:14:19.898912 2026] [:error] [pid 47946:tid 47956] [client 20.215.64.103:55850] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "acOZWzipQTqBMSeKYhd2agAAAQg"]
[Wed Mar 25 16:14:20.430356 2026] [:error] [pid 25875:tid 25883] [client 20.215.64.103:28089] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "acOZXBJ38QkS3Nyfshy7FAAAAoI"]
[Wed Mar 25 16:14:21.053858 2026] [:error] [pid 756:tid 853] [client 20.215.64.103:32365] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filer.php"] [unique_id "acOZXTOaW6oylMIDBCQR-wAAAIM"]
[Wed Mar 25 16:14:21.621138 2026] [:error] [pid 26321:tid 26351] [client 20.215.64.103:59179] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filer.php"] [unique_id "acOZXfKO65qqGZCSPZoZaQAAAgo"]
[Wed Mar 25 16:14:22.228339 2026] [:error] [pid 26321:tid 26342] [client 20.215.64.103:48984] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filer.php"] [unique_id "acOZXvKO65qqGZCSPZoZbwAAAgM"]
[Wed Mar 25 16:14:22.742201 2026] [:error] [pid 26321:tid 26346] [client 20.215.64.103:37148] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filer.php"] [unique_id "acOZXvKO65qqGZCSPZoZcQAAAgY"]
[Wed Mar 25 16:14:23.319320 2026] [:error] [pid 26269:tid 26296] [client 20.215.64.103:25060] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lites.php"] [unique_id "acOZX0n7e-ZQbaIs7qyogwAAAZQ"]
[Wed Mar 25 16:14:23.899127 2026] [:error] [pid 25875:tid 25896] [client 20.215.64.103:59199] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lites.php"] [unique_id "acOZXxJ38QkS3Nyfshy7GQAAAo8"]
[Wed Mar 25 16:14:24.529830 2026] [:error] [pid 25967:tid 25980] [client 20.215.64.103:31921] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lites.php"] [unique_id "acOZYPg8Qtq7ZM4mSFkFFQAAA0g"]
[Wed Mar 25 16:14:25.063662 2026] [:error] [pid 25967:tid 25985] [client 20.215.64.103:21824] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lites.php"] [unique_id "acOZYfg8Qtq7ZM4mSFkFGQAAA00"]
[Wed Mar 25 16:14:25.693810 2026] [:error] [pid 25875:tid 25889] [client 20.215.64.103:32341] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "acOZYRJ38QkS3Nyfshy7HQAAAog"]
[Wed Mar 25 16:14:26.243352 2026] [:error] [pid 25967:tid 25975] [client 20.215.64.103:50984] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "acOZYvg8Qtq7ZM4mSFkFJAAAA0M"]
[Wed Mar 25 16:14:26.867250 2026] [:error] [pid 25967:tid 25995] [client 20.215.64.103:31975] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "acOZYvg8Qtq7ZM4mSFkFKQAAA1c"]
[Wed Mar 25 16:14:27.423569 2026] [:error] [pid 25875:tid 25894] [client 20.215.64.103:32382] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "acOZYxJ38QkS3Nyfshy7HwAAAo0"]
[Wed Mar 25 16:14:27.961710 2026] [:error] [pid 25967:tid 25990] [client 20.215.64.103:55838] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "acOZY_g8Qtq7ZM4mSFkFLQAAA1I"]
[Wed Mar 25 16:14:28.581764 2026] [:error] [pid 25967:tid 25980] [client 20.215.64.103:21831] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "acOZZPg8Qtq7ZM4mSFkFMAAAA0g"]
[Wed Mar 25 16:14:29.180585 2026] [:error] [pid 26321:tid 26342] [client 20.215.64.103:31910] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "acOZZfKO65qqGZCSPZoZeQAAAgM"]
[Wed Mar 25 16:14:29.747057 2026] [:error] [pid 25969:tid 26045] [client 20.215.64.103:48998] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "acOZZRd3aEUmOfdKja_0UwAAA9M"]
[Wed Mar 25 16:14:30.320905 2026] [:error] [pid 25875:tid 25885] [client 20.215.64.103:50983] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "acOZZhJ38QkS3Nyfshy7JgAAAoQ"]
[Wed Mar 25 16:14:30.886962 2026] [:error] [pid 47989:tid 48000] [client 20.215.64.103:55819] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "acOZZiWKdJMhIccROjlp9gAAAUk"]
[Wed Mar 25 16:14:31.444048 2026] [:error] [pid 25875:tid 25904] [client 20.215.64.103:46947] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "acOZZxJ38QkS3Nyfshy7LQAAApc"]
[Wed Mar 25 16:14:31.969193 2026] [:error] [pid 25875:tid 25897] [client 20.215.64.103:32362] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "acOZZxJ38QkS3Nyfshy7LwAAApA"]
[Wed Mar 25 16:14:32.498482 2026] [:error] [pid 47989:tid 47997] [client 20.215.64.103:21851] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "acOZaCWKdJMhIccROjlqAAAAAUY"]
[Wed Mar 25 16:14:33.046088 2026] [:error] [pid 47989:tid 47995] [client 20.215.64.103:55858] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "acOZaSWKdJMhIccROjlqBwAAAUQ"]
[Wed Mar 25 16:14:33.646704 2026] [:error] [pid 47989:tid 48013] [client 20.215.64.103:48994] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "acOZaSWKdJMhIccROjlqDAAAAVY"]
[Wed Mar 25 16:14:34.293490 2026] [:error] [pid 47989:tid 48011] [client 20.215.64.103:48975] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "acOZaiWKdJMhIccROjlqEwAAAVQ"]
[Wed Mar 25 16:14:34.910470 2026] [:error] [pid 25967:tid 25980] [client 20.215.64.103:31904] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "acOZavg8Qtq7ZM4mSFkFNAAAA0g"]
[Wed Mar 25 16:14:35.518570 2026] [:error] [pid 47989:tid 48014] [client 20.215.64.103:21838] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "acOZayWKdJMhIccROjlqGgAAAVc"]
[Wed Mar 25 16:14:36.149753 2026] [:error] [pid 47989:tid 47994] [client 20.215.64.103:48999] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "acOZbCWKdJMhIccROjlqHgAAAUM"]
[Wed Mar 25 16:14:36.735588 2026] [:error] [pid 47989:tid 48008] [client 20.215.64.103:55828] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "acOZbCWKdJMhIccROjlqJAAAAVE"]
[Wed Mar 25 16:14:37.295128 2026] [:error] [pid 25875:tid 25885] [client 20.215.64.103:37128] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "acOZbRJ38QkS3Nyfshy7MAAAAoQ"]
[Wed Mar 25 16:14:37.938010 2026] [:error] [pid 25875:tid 25895] [client 20.215.64.103:38460] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "acOZbRJ38QkS3Nyfshy7MgAAAo4"]
[Wed Mar 25 16:14:38.462714 2026] [:error] [pid 25875:tid 25904] [client 20.215.64.103:48982] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "acOZbhJ38QkS3Nyfshy7NAAAApc"]
[Wed Mar 25 16:14:39.061494 2026] [:error] [pid 25875:tid 25894] [client 20.215.64.103:28080] [client 20.215.64.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "acOZbxJ38QkS3Nyfshy7NQAAAo0"]
[Wed Mar 25 17:53:09.062054 2026] [:error] [pid 25967:tid 25996] [client 162.241.62.60:52924] [client 162.241.62.60] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acOwhfg8Qtq7ZM4mSFkq7AAAA1g"]
[Wed Mar 25 17:53:47.623108 2026] [:error] [pid 47989:tid 47994] [client 20.166.31.118:8969] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/AAAA.php"] [unique_id "acOwqyWKdJMhIccROjmbHwAAAUM"]
[Wed Mar 25 17:53:48.160589 2026] [:error] [pid 892:tid 917] [client 20.166.31.118:21684] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/AAAA.php"] [unique_id "acOwrCT_G8WMU3T3yxrEOAAAANI"]
[Wed Mar 25 17:53:48.684662 2026] [:error] [pid 26321:tid 26343] [client 20.166.31.118:38817] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjde.php"] [unique_id "acOwrPKO65qqGZCSPZouRgAAAgQ"]
[Wed Mar 25 17:53:49.272721 2026] [:error] [pid 25969:tid 26040] [client 20.166.31.118:31287] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjde.php"] [unique_id "acOwrRd3aEUmOfdKja_-XQAAA84"]
[Wed Mar 25 17:53:49.773465 2026] [:error] [pid 47989:tid 47998] [client 20.166.31.118:14807] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjde.php"] [unique_id "acOwrSWKdJMhIccROjmbIgAAAUc"]
[Wed Mar 25 17:53:50.290499 2026] [:error] [pid 47989:tid 47992] [client 20.166.31.118:38361] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjde.php"] [unique_id "acOwriWKdJMhIccROjmbJAAAAUE"]
[Wed Mar 25 17:53:50.850775 2026] [:error] [pid 25967:tid 25974] [client 20.166.31.118:24419] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gin.php"] [unique_id "acOwrvg8Qtq7ZM4mSFkrAwAAA0I"]
[Wed Mar 25 17:53:51.391066 2026] [:error] [pid 25967:tid 25992] [client 20.166.31.118:15274] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gin.php"] [unique_id "acOwr_g8Qtq7ZM4mSFkrBAAAA1Q"]
[Wed Mar 25 17:53:51.939895 2026] [:error] [pid 26269:tid 26284] [client 20.166.31.118:32840] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gin.php"] [unique_id "acOwr0n7e-ZQbaIs7qyw0gAAAYg"]
[Wed Mar 25 17:53:52.447386 2026] [:error] [pid 47989:tid 47996] [client 20.166.31.118:8620] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta.php"] [unique_id "acOwsCWKdJMhIccROjmbKQAAAUU"]
[Wed Mar 25 17:53:53.006655 2026] [:error] [pid 25967:tid 25972] [client 20.166.31.118:8257] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta.php"] [unique_id "acOwsfg8Qtq7ZM4mSFkrCAAAA0A"]
[Wed Mar 25 17:53:53.606072 2026] [:error] [pid 47989:tid 48002] [client 20.166.31.118:4916] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acOwsSWKdJMhIccROjmbKwAAAUs"]
[Wed Mar 25 17:53:54.163547 2026] [:error] [pid 756:tid 874] [client 20.166.31.118:38382] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acOwsjOaW6oylMIDBCQYTAAAAJY"]
[Wed Mar 25 17:53:54.660666 2026] [:error] [pid 47989:tid 47992] [client 20.166.31.118:23984] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acOwsiWKdJMhIccROjmbMQAAAUE"]
[Wed Mar 25 17:53:55.281518 2026] [:error] [pid 47989:tid 48000] [client 20.166.31.118:31273] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acOwsyWKdJMhIccROjmbNgAAAUk"]
[Wed Mar 25 17:53:55.813160 2026] [:error] [pid 47989:tid 48015] [client 20.166.31.118:4652] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acOwsyWKdJMhIccROjmbOgAAAVg"]
[Wed Mar 25 17:53:56.616019 2026] [:error] [pid 25875:tid 25892] [client 20.166.31.118:39521] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acOwtBJ38QkS3NyfshzXIAAAAos"]
[Wed Mar 25 17:53:57.140540 2026] [:error] [pid 47989:tid 48000] [client 20.166.31.118:19158] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acOwtSWKdJMhIccROjmbPwAAAUk"]
[Wed Mar 25 17:53:57.642156 2026] [:error] [pid 47989:tid 48012] [client 20.166.31.118:25107] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acOwtSWKdJMhIccROjmbQgAAAVU"]
[Wed Mar 25 17:53:58.264453 2026] [:error] [pid 47989:tid 47992] [client 20.166.31.118:25857] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acOwtiWKdJMhIccROjmbRgAAAUE"]
[Wed Mar 25 17:53:58.802184 2026] [:error] [pid 26321:tid 26350] [client 20.166.31.118:4636] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acOwtvKO65qqGZCSPZouTQAAAgk"]
[Wed Mar 25 17:53:59.297571 2026] [:error] [pid 25969:tid 26045] [client 20.166.31.118:38819] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acOwtxd3aEUmOfdKja_-YgAAA9M"]
[Wed Mar 25 17:53:59.843432 2026] [:error] [pid 25969:tid 26044] [client 20.166.31.118:20778] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acOwtxd3aEUmOfdKja_-YwAAA9I"]
[Wed Mar 25 17:54:25.538868 2026] [:error] [pid 756:tid 853] [client 20.250.9.161:65186] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acOw0TOaW6oylMIDBCQYYgAAAIM"]
[Wed Mar 25 17:54:26.060958 2026] [:error] [pid 26269:tid 26299] [client 20.250.9.161:65153] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acOw0kn7e-ZQbaIs7qyw3gAAAZc"]
[Wed Mar 25 17:54:26.586031 2026] [:error] [pid 25875:tid 25891] [client 20.250.9.161:65196] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acOw0hJ38QkS3NyfshzXNQAAAoo"]
[Wed Mar 25 17:54:27.129766 2026] [:error] [pid 25875:tid 25892] [client 20.250.9.161:65174] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acOw0xJ38QkS3NyfshzXOQAAAos"]
[Wed Mar 25 17:54:27.647451 2026] [:error] [pid 47946:tid 47950] [client 20.250.9.161:65221] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "acOw0zipQTqBMSeKYhd9QgAAAQI"]
[Wed Mar 25 17:54:28.234023 2026] [:error] [pid 25875:tid 25881] [client 20.250.9.161:65164] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "acOw1BJ38QkS3NyfshzXPAAAAoA"]
[Wed Mar 25 17:54:28.884851 2026] [:error] [pid 26321:tid 26339] [client 20.250.9.161:65226] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "acOw1PKO65qqGZCSPZouWwAAAgA"]
[Wed Mar 25 17:54:29.414568 2026] [:error] [pid 25969:tid 26048] [client 20.250.9.161:62180] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "acOw1Rd3aEUmOfdKja_-bQAAA9Y"]
[Wed Mar 25 17:54:29.971069 2026] [:error] [pid 47989:tid 48011] [client 20.250.9.161:65219] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "acOw1SWKdJMhIccROjmbcQAAAVQ"]
[Wed Mar 25 17:54:30.465386 2026] [:error] [pid 26321:tid 26357] [client 20.250.9.161:65212] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "acOw1vKO65qqGZCSPZouXgAAAhA"]
[Wed Mar 25 17:54:31.028602 2026] [:error] [pid 47989:tid 48003] [client 20.250.9.161:62151] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "acOw1yWKdJMhIccROjmbdAAAAUw"]
[Wed Mar 25 17:54:31.605098 2026] [:error] [pid 25875:tid 25899] [client 20.250.9.161:65209] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "acOw1xJ38QkS3NyfshzXPgAAApI"]
[Wed Mar 25 17:54:32.156688 2026] [:error] [pid 47989:tid 48006] [client 20.250.9.161:62156] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "acOw2CWKdJMhIccROjmbegAAAU8"]
[Wed Mar 25 17:54:32.655490 2026] [:error] [pid 47989:tid 47996] [client 20.250.9.161:62154] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "acOw2CWKdJMhIccROjmbgAAAAUU"]
[Wed Mar 25 17:54:33.166392 2026] [:error] [pid 47989:tid 48012] [client 20.250.9.161:65253] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "acOw2SWKdJMhIccROjmbhAAAAVU"]
[Wed Mar 25 17:54:33.743928 2026] [:error] [pid 25875:tid 25888] [client 20.250.9.161:62181] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "acOw2RJ38QkS3NyfshzXQwAAAoc"]
[Wed Mar 25 17:54:34.625711 2026] [:error] [pid 25875:tid 25887] [client 20.250.9.161:65274] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless13.php"] [unique_id "acOw2hJ38QkS3NyfshzXSAAAAoY"]
[Wed Mar 25 17:54:35.239314 2026] [:error] [pid 47946:tid 47957] [client 20.250.9.161:65163] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless13.php"] [unique_id "acOw2zipQTqBMSeKYhd9RQAAAQk"]
[Wed Mar 25 17:54:35.795151 2026] [:error] [pid 26449:tid 26470] [client 20.250.9.161:65256] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless13.php"] [unique_id "acOw29pZ2T15NDqzAjFp6wAAAlE"]
[Wed Mar 25 17:54:36.297000 2026] [:error] [pid 26449:tid 26471] [client 20.250.9.161:62196] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless13.php"] [unique_id "acOw3NpZ2T15NDqzAjFp8AAAAlI"]
[Wed Mar 25 17:54:37.017212 2026] [:error] [pid 26449:tid 26467] [client 20.250.9.161:65218] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "acOw3dpZ2T15NDqzAjFp-wAAAk4"]
[Wed Mar 25 17:54:37.623793 2026] [:error] [pid 25875:tid 25900] [client 20.250.9.161:62169] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "acOw3RJ38QkS3NyfshzXSwAAApM"]
[Wed Mar 25 17:54:38.104457 2026] [:error] [pid 25967:tid 25996] [client 20.250.9.161:65179] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "acOw3vg8Qtq7ZM4mSFkrJgAAA1g"]
[Wed Mar 25 17:54:38.694768 2026] [:error] [pid 25967:tid 25980] [client 20.250.9.161:62155] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "acOw3vg8Qtq7ZM4mSFkrLAAAA0g"]
[Wed Mar 25 17:54:39.665178 2026] [:error] [pid 26321:tid 26356] [client 20.250.9.161:65203] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acOw3_KO65qqGZCSPZouZgAAAg8"]
[Wed Mar 25 17:54:40.334305 2026] [:error] [pid 26321:tid 26343] [client 20.250.9.161:65158] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acOw4PKO65qqGZCSPZouaAAAAgQ"]
[Wed Mar 25 17:54:40.840147 2026] [:error] [pid 47989:tid 48014] [client 20.250.9.161:65246] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acOw4CWKdJMhIccROjmbmQAAAVc"]
[Wed Mar 25 17:54:42.318302 2026] [:error] [pid 47989:tid 48000] [client 20.250.9.161:65254] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "acOw4iWKdJMhIccROjmbnwAAAUk"]
[Wed Mar 25 17:54:42.873938 2026] [:error] [pid 26321:tid 26360] [client 20.250.9.161:62185] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "acOw4vKO65qqGZCSPZoucwAAAhM"]
[Wed Mar 25 17:54:43.573150 2026] [:error] [pid 47989:tid 48009] [client 20.250.9.161:65260] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "acOw4yWKdJMhIccROjmbowAAAVI"]
[Wed Mar 25 17:54:44.196885 2026] [:error] [pid 25875:tid 25892] [client 20.250.9.161:65210] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "acOw5BJ38QkS3NyfshzXUgAAAos"]
[Wed Mar 25 17:54:44.804180 2026] [:error] [pid 25875:tid 25884] [client 20.250.9.161:65198] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "acOw5BJ38QkS3NyfshzXVQAAAoM"]
[Wed Mar 25 17:54:45.357536 2026] [:error] [pid 25875:tid 25883] [client 20.250.9.161:62197] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "acOw5RJ38QkS3NyfshzXVwAAAoI"]
[Wed Mar 25 17:54:45.846901 2026] [:error] [pid 25969:tid 26048] [client 20.250.9.161:65162] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "acOw5Rd3aEUmOfdKja_-dwAAA9Y"]
[Wed Mar 25 17:54:46.319691 2026] [:error] [pid 26321:tid 26339] [client 20.250.9.161:65180] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "acOw5vKO65qqGZCSPZoueQAAAgA"]
[Wed Mar 25 17:54:46.824731 2026] [:error] [pid 25969:tid 26042] [client 20.250.9.161:65181] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "acOw5hd3aEUmOfdKja_-eQAAA9A"]
[Wed Mar 25 17:54:47.380319 2026] [:error] [pid 26321:tid 26343] [client 20.250.9.161:65178] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "acOw5_KO65qqGZCSPZoufgAAAgQ"]
[Wed Mar 25 17:54:47.884988 2026] [:error] [pid 25875:tid 25903] [client 20.250.9.161:65236] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "acOw5xJ38QkS3NyfshzXWQAAApY"]
[Wed Mar 25 17:54:48.483367 2026] [:error] [pid 26449:tid 26457] [client 20.250.9.161:65225] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "acOw6NpZ2T15NDqzAjFqFwAAAkQ"]
[Wed Mar 25 17:54:49.069192 2026] [:error] [pid 47989:tid 48007] [client 20.250.9.161:65195] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "acOw6SWKdJMhIccROjmbqAAAAVA"]
[Wed Mar 25 17:54:49.633005 2026] [:error] [pid 892:tid 907] [client 20.250.9.161:65237] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acOw6ST_G8WMU3T3yxrERAAAAMk"]
[Wed Mar 25 17:54:50.111011 2026] [:error] [pid 47989:tid 48005] [client 20.250.9.161:62184] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acOw6iWKdJMhIccROjmbrQAAAU4"]
[Wed Mar 25 17:54:50.733561 2026] [:error] [pid 47989:tid 48009] [client 20.250.9.161:65154] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acOw6iWKdJMhIccROjmbrwAAAVI"]
[Wed Mar 25 17:54:51.244155 2026] [:error] [pid 47989:tid 47992] [client 20.250.9.161:62094] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acOw6yWKdJMhIccROjmbswAAAUE"]
[Wed Mar 25 17:54:51.818083 2026] [:error] [pid 47989:tid 47996] [client 20.250.9.161:65191] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.php"] [unique_id "acOw6yWKdJMhIccROjmbtQAAAUU"]
[Wed Mar 25 17:54:52.354548 2026] [:error] [pid 47989:tid 48015] [client 20.250.9.161:65234] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.php"] [unique_id "acOw7CWKdJMhIccROjmbtgAAAVg"]
[Wed Mar 25 17:54:53.154310 2026] [:error] [pid 47989:tid 48000] [client 20.250.9.161:65271] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.php"] [unique_id "acOw7SWKdJMhIccROjmbugAAAUk"]
[Wed Mar 25 17:54:53.690963 2026] [:error] [pid 47989:tid 48001] [client 20.250.9.161:65192] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/settings.php"] [unique_id "acOw7SWKdJMhIccROjmbuwAAAUo"]
[Wed Mar 25 17:54:54.174506 2026] [:error] [pid 26449:tid 26454] [client 20.250.9.161:65248] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "acOw7tpZ2T15NDqzAjFqGAAAAkE"]
[Wed Mar 25 17:54:54.661742 2026] [:error] [pid 47989:tid 47991] [client 20.250.9.161:62110] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "acOw7iWKdJMhIccROjmbwAAAAUA"]
[Wed Mar 25 17:54:55.238419 2026] [:error] [pid 25969:tid 26039] [client 20.250.9.161:62170] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "acOw7xd3aEUmOfdKja_-fQAAA80"]
[Wed Mar 25 17:54:55.800681 2026] [:error] [pid 25967:tid 25992] [client 20.250.9.161:65223] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "acOw7_g8Qtq7ZM4mSFkrMwAAA1Q"]
[Wed Mar 25 17:54:56.334866 2026] [:error] [pid 47989:tid 48007] [client 20.250.9.161:61508] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acOw8CWKdJMhIccROjmbxAAAAVA"]
[Wed Mar 25 17:54:56.844387 2026] [:error] [pid 25875:tid 25902] [client 20.250.9.161:65265] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acOw8BJ38QkS3NyfshzXXQAAApU"]
[Wed Mar 25 17:54:57.563818 2026] [:error] [pid 25875:tid 25889] [client 20.250.9.161:62161] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acOw8RJ38QkS3NyfshzXXgAAAog"]
[Wed Mar 25 17:54:58.053196 2026] [:error] [pid 26449:tid 26475] [client 20.250.9.161:62193] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acOw8tpZ2T15NDqzAjFqGQAAAlY"]
[Wed Mar 25 17:54:58.534140 2026] [:error] [pid 25967:tid 25980] [client 20.250.9.161:65194] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "acOw8vg8Qtq7ZM4mSFkrOAAAA0g"]
[Wed Mar 25 17:54:59.142436 2026] [:error] [pid 25875:tid 25890] [client 20.250.9.161:62164] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "acOw8xJ38QkS3NyfshzXXwAAAok"]
[Wed Mar 25 17:54:59.671695 2026] [:error] [pid 25875:tid 25896] [client 20.250.9.161:65173] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "acOw8xJ38QkS3NyfshzXYgAAAo8"]
[Wed Mar 25 17:55:00.318298 2026] [:error] [pid 26449:tid 26473] [client 20.250.9.161:62139] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "acOw9NpZ2T15NDqzAjFqGwAAAlQ"]
[Wed Mar 25 17:55:00.880697 2026] [:error] [pid 892:tid 920] [client 20.250.9.161:62163] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "acOw9CT_G8WMU3T3yxrESAAAANU"]
[Wed Mar 25 17:55:01.382723 2026] [:error] [pid 47989:tid 48012] [client 20.250.9.161:61526] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "acOw9SWKdJMhIccROjmbxwAAAVU"]
[Wed Mar 25 17:55:01.866754 2026] [:error] [pid 892:tid 895] [client 20.250.9.161:62189] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "acOw9ST_G8WMU3T3yxrESQAAAME"]
[Wed Mar 25 17:55:02.412443 2026] [:error] [pid 47946:tid 47968] [client 20.250.9.161:62167] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "acOw9jipQTqBMSeKYhd9TQAAARQ"]
[Wed Mar 25 17:55:03.066870 2026] [:error] [pid 756:tid 858] [client 20.250.9.161:65171] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "acOw9zOaW6oylMIDBCQYZgAAAIY"]
[Wed Mar 25 17:55:03.601624 2026] [:error] [pid 25875:tid 25900] [client 20.250.9.161:65211] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "acOw9xJ38QkS3NyfshzXZwAAApM"]
[Wed Mar 25 17:55:04.247543 2026] [:error] [pid 26269:tid 26283] [client 20.250.9.161:65187] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "acOw-En7e-ZQbaIs7qyw5gAAAYc"]
[Wed Mar 25 17:55:04.791470 2026] [:error] [pid 26321:tid 26360] [client 20.250.9.161:62179] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "acOw-PKO65qqGZCSPZougQAAAhM"]
[Wed Mar 25 17:55:05.381409 2026] [:error] [pid 25969:tid 26031] [client 20.250.9.161:62171] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "acOw-Rd3aEUmOfdKja_-gwAAA8U"]
[Wed Mar 25 17:55:06.148539 2026] [:error] [pid 892:tid 922] [client 20.250.9.161:62150] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "acOw-iT_G8WMU3T3yxrETQAAANc"]
[Wed Mar 25 17:55:06.710304 2026] [:error] [pid 892:tid 918] [client 20.250.9.161:65261] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "acOw-iT_G8WMU3T3yxrETgAAANM"]
[Wed Mar 25 17:55:07.344046 2026] [:error] [pid 892:tid 913] [client 20.250.9.161:65240] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "acOw-yT_G8WMU3T3yxrEUAAAAM8"]
[Wed Mar 25 17:55:07.861160 2026] [:error] [pid 25967:tid 25979] [client 20.250.9.161:65244] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acOw-_g8Qtq7ZM4mSFkrQAAAA0c"]
[Wed Mar 25 17:55:08.611332 2026] [:error] [pid 25967:tid 25984] [client 20.250.9.161:65247] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acOw_Pg8Qtq7ZM4mSFkrQQAAA0w"]
[Wed Mar 25 17:55:09.186769 2026] [:error] [pid 25967:tid 25973] [client 20.250.9.161:65206] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acOw_fg8Qtq7ZM4mSFkrQwAAA0E"]
[Wed Mar 25 17:55:10.087875 2026] [:error] [pid 892:tid 902] [client 20.250.9.161:61525] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acOw_iT_G8WMU3T3yxrEVQAAAMU"]
[Wed Mar 25 17:55:10.623148 2026] [:error] [pid 25969:tid 26030] [client 20.250.9.161:65269] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "acOw_hd3aEUmOfdKja_-hwAAA8Q"]
[Wed Mar 25 17:55:11.265831 2026] [:error] [pid 47989:tid 47996] [client 20.250.9.161:65270] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "acOw_yWKdJMhIccROjmbzgAAAUU"]
[Wed Mar 25 17:55:11.922376 2026] [:error] [pid 47989:tid 48000] [client 20.250.9.161:62188] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "acOw_yWKdJMhIccROjmb0gAAAUk"]
[Wed Mar 25 17:55:12.456587 2026] [:error] [pid 756:tid 852] [client 20.250.9.161:65200] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "acOxADOaW6oylMIDBCQYaQAAAII"]
[Wed Mar 25 17:55:13.042428 2026] [:error] [pid 47989:tid 47991] [client 20.250.9.161:61517] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "acOxASWKdJMhIccROjmb0wAAAUA"]
[Wed Mar 25 17:55:13.716164 2026] [:error] [pid 892:tid 902] [client 20.250.9.161:62158] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "acOxAST_G8WMU3T3yxrEXgAAAMU"]
[Wed Mar 25 17:55:14.306660 2026] [:error] [pid 25967:tid 25986] [client 20.250.9.161:65216] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "acOxAvg8Qtq7ZM4mSFkrSAAAA04"]
[Wed Mar 25 17:55:15.121069 2026] [:error] [pid 26449:tid 26457] [client 20.250.9.161:65235] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "acOxA9pZ2T15NDqzAjFqJAAAAkQ"]
[Wed Mar 25 17:55:15.659306 2026] [:error] [pid 756:tid 862] [client 20.250.9.161:62100] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acOxAzOaW6oylMIDBCQYagAAAIo"]
[Wed Mar 25 17:55:16.271651 2026] [:error] [pid 47946:tid 47955] [client 20.250.9.161:65278] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acOxBDipQTqBMSeKYhd9VQAAAQc"]
[Wed Mar 25 17:55:16.772881 2026] [:error] [pid 892:tid 920] [client 20.250.9.161:65276] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acOxBCT_G8WMU3T3yxrEYAAAANU"]
[Wed Mar 25 17:55:17.431495 2026] [:error] [pid 25967:tid 25975] [client 20.250.9.161:62174] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acOxBfg8Qtq7ZM4mSFkrTAAAA0M"]
[Wed Mar 25 17:55:17.989057 2026] [:error] [pid 25875:tid 25888] [client 20.250.9.161:62115] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acOxBRJ38QkS3NyfshzXegAAAoc"]
[Wed Mar 25 17:55:18.625939 2026] [:error] [pid 47989:tid 48015] [client 20.250.9.161:65239] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acOxBiWKdJMhIccROjmb2AAAAVg"]
[Wed Mar 25 17:55:19.220541 2026] [:error] [pid 47989:tid 48003] [client 20.250.9.161:65250] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acOxByWKdJMhIccROjmb2wAAAUw"]
[Wed Mar 25 17:55:19.768882 2026] [:error] [pid 47989:tid 47998] [client 20.250.9.161:65264] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acOxByWKdJMhIccROjmb3QAAAUc"]
[Wed Mar 25 17:55:20.282522 2026] [:error] [pid 47989:tid 48000] [client 20.250.9.161:65172] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "acOxCCWKdJMhIccROjmb4AAAAUk"]
[Wed Mar 25 17:55:20.770003 2026] [:error] [pid 26321:tid 26351] [client 20.250.9.161:62127] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "acOxCPKO65qqGZCSPZoukQAAAgo"]
[Wed Mar 25 17:55:21.306097 2026] [:error] [pid 25875:tid 25886] [client 20.250.9.161:62117] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "acOxCRJ38QkS3NyfshzXfgAAAoU"]
[Wed Mar 25 17:55:21.915171 2026] [:error] [pid 892:tid 895] [client 20.250.9.161:65165] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "acOxCST_G8WMU3T3yxrEZAAAAME"]
[Wed Mar 25 17:55:22.408673 2026] [:error] [pid 26449:tid 26455] [client 20.250.9.161:65228] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acOxCtpZ2T15NDqzAjFqJwAAAkI"]
[Wed Mar 25 17:55:22.968028 2026] [:error] [pid 25967:tid 25983] [client 20.250.9.161:65259] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acOxCvg8Qtq7ZM4mSFkrUwAAA0s"]
[Wed Mar 25 17:55:23.491953 2026] [:error] [pid 26321:tid 26344] [client 20.250.9.161:62085] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acOxC_KO65qqGZCSPZoulQAAAgU"]
[Wed Mar 25 17:55:23.976189 2026] [:error] [pid 47989:tid 48007] [client 20.250.9.161:65263] [client 20.250.9.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acOxCyWKdJMhIccROjmb5QAAAVA"]
[Wed Mar 25 17:55:26.003639 2026] [:error] [pid 47989:tid 48001] [client 20.250.9.161:65152] [client 20.250.9.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.250.9.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acOxDiWKdJMhIccROjmb6gAAAUo"]
[Wed Mar 25 18:31:22.130306 2026] [:error] [pid 26269:tid 26297] [client 20.220.197.73:18738] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acO5ekn7e-ZQbaIs7qy0jAAAAZU"]
[Wed Mar 25 18:31:22.964295 2026] [:error] [pid 25967:tid 25988] [client 20.220.197.73:18960] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acO5evg8Qtq7ZM4mSFk8NQAAA1A"]
[Wed Mar 25 18:31:23.798772 2026] [:error] [pid 26321:tid 26357] [client 20.220.197.73:18727] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acO5e_KO65qqGZCSPZo2OQAAAhA"]
[Wed Mar 25 18:31:24.639910 2026] [:error] [pid 26269:tid 26289] [client 20.220.197.73:18712] [client 20.220.197.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acO5fEn7e-ZQbaIs7qy0jQAAAY0"]
[Wed Mar 25 19:34:04.892758 2026] [:error] [pid 47989:tid 48004] [client 20.251.61.72:51503] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fw/34.php"] [unique_id "acPILCWKdJMhIccROjnazAAAAU0"]
[Wed Mar 25 19:34:05.413938 2026] [:error] [pid 25875:tid 25890] [client 20.251.61.72:51463] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fw/34.php"] [unique_id "acPILRJ38QkS3Nyfshz13QAAAok"]
[Wed Mar 25 19:34:05.933064 2026] [:error] [pid 25967:tid 25975] [client 20.251.61.72:42051] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fw/34.php"] [unique_id "acPILfg8Qtq7ZM4mSFlXpAAAA0M"]
[Wed Mar 25 19:34:06.479136 2026] [:error] [pid 47989:tid 48008] [client 20.251.61.72:57712] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fw/34.php"] [unique_id "acPILiWKdJMhIccROjna0gAAAVE"]
[Wed Mar 25 19:34:07.004778 2026] [:error] [pid 25967:tid 25995] [client 20.251.61.72:51515] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fw/faiyy.php"] [unique_id "acPIL_g8Qtq7ZM4mSFlXsAAAA1c"]
[Wed Mar 25 19:34:07.570278 2026] [:error] [pid 25967:tid 25982] [client 20.251.61.72:1864] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fw/faiyy.php"] [unique_id "acPIL_g8Qtq7ZM4mSFlXtAAAA0o"]
[Wed Mar 25 19:34:08.091851 2026] [:error] [pid 25967:tid 25990] [client 20.251.61.72:63664] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fw/faiyy.php"] [unique_id "acPIMPg8Qtq7ZM4mSFlXuQAAA1I"]
[Wed Mar 25 19:34:08.611352 2026] [:error] [pid 25967:tid 25977] [client 20.251.61.72:59666] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fw/faiyy.php"] [unique_id "acPIMPg8Qtq7ZM4mSFlXvgAAA0U"]
[Wed Mar 25 19:34:09.133975 2026] [:error] [pid 25967:tid 25975] [client 20.251.61.72:63616] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "acPIMfg8Qtq7ZM4mSFlXwgAAA0M"]
[Wed Mar 25 19:34:09.651897 2026] [:error] [pid 26449:tid 26475] [client 20.251.61.72:42590] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "acPIMdpZ2T15NDqzAjF6xgAAAlY"]
[Wed Mar 25 19:34:10.203983 2026] [:error] [pid 892:tid 896] [client 20.251.61.72:57719] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "acPIMiT_G8WMU3T3yxrSUAAAAMI"]
[Wed Mar 25 19:34:10.723905 2026] [:error] [pid 47989:tid 48001] [client 20.251.61.72:54479] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "acPIMiWKdJMhIccROjna2wAAAUo"]
[Wed Mar 25 19:34:11.283758 2026] [:error] [pid 47989:tid 47995] [client 20.251.61.72:46816] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl2024.php"] [unique_id "acPIMyWKdJMhIccROjna4QAAAUQ"]
[Wed Mar 25 19:34:12.031991 2026] [:error] [pid 47989:tid 48012] [client 20.251.61.72:42090] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fde.php"] [unique_id "acPINCWKdJMhIccROjna5QAAAVU"]
[Wed Mar 25 19:34:12.601893 2026] [:error] [pid 47989:tid 48013] [client 20.251.61.72:43080] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fde.php"] [unique_id "acPINCWKdJMhIccROjna6wAAAVY"]
[Wed Mar 25 19:34:13.123708 2026] [:error] [pid 25967:tid 25977] [client 20.251.61.72:49670] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fde.php"] [unique_id "acPINfg8Qtq7ZM4mSFlXxwAAA0U"]
[Wed Mar 25 19:34:13.646366 2026] [:error] [pid 47989:tid 48001] [client 20.251.61.72:54489] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fde.php"] [unique_id "acPINSWKdJMhIccROjna9wAAAUo"]
[Wed Mar 25 19:34:14.175097 2026] [:error] [pid 25875:tid 25889] [client 20.251.61.72:48604] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bays.php"] [unique_id "acPINhJ38QkS3Nyfshz19wAAAog"]
[Wed Mar 25 19:34:14.696679 2026] [:error] [pid 25875:tid 25894] [client 20.251.61.72:48597] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bays.php"] [unique_id "acPINhJ38QkS3Nyfshz1-gAAAo0"]
[Wed Mar 25 19:34:15.223091 2026] [:error] [pid 892:tid 912] [client 20.251.61.72:55323] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bays.php"] [unique_id "acPINyT_G8WMU3T3yxrSVwAAAM4"]
[Wed Mar 25 19:34:15.772590 2026] [:error] [pid 26269:tid 26276] [client 20.251.61.72:42566] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bays.php"] [unique_id "acPIN0n7e-ZQbaIs7qy6AwAAAYA"]
[Wed Mar 25 19:34:16.303763 2026] [:error] [pid 47946:tid 47966] [client 20.251.61.72:42075] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acPIODipQTqBMSeKYheEFQAAARI"]
[Wed Mar 25 19:34:16.822622 2026] [:error] [pid 26269:tid 26286] [client 20.251.61.72:63673] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acPIOEn7e-ZQbaIs7qy6BwAAAYo"]
[Wed Mar 25 19:34:17.396166 2026] [:error] [pid 47946:tid 47960] [client 20.251.61.72:51785] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acPIOTipQTqBMSeKYheEGAAAAQw"]
[Wed Mar 25 19:34:18.432734 2026] [:error] [pid 26269:tid 26288] [client 20.251.61.72:48615] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acPIOkn7e-ZQbaIs7qy6DAAAAYw"]
[Wed Mar 25 19:34:19.243295 2026] [:error] [pid 47946:tid 47965] [client 20.251.61.72:54477] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acPIOzipQTqBMSeKYheEGgAAARE"]
[Wed Mar 25 19:34:19.877164 2026] [:error] [pid 25969:tid 26038] [client 20.251.61.72:56057] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acPIOxd3aEUmOfdKja8JPQAAA8w"]
[Wed Mar 25 19:34:20.421069 2026] [:error] [pid 26449:tid 26470] [client 20.251.61.72:57683] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acPIPNpZ2T15NDqzAjF6ywAAAlE"]
[Wed Mar 25 19:34:20.979591 2026] [:error] [pid 47989:tid 48007] [client 20.251.61.72:51506] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acPIPCWKdJMhIccROjnbBAAAAVA"]
[Wed Mar 25 19:34:21.580593 2026] [:error] [pid 25967:tid 25978] [client 20.251.61.72:41454] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acPIPfg8Qtq7ZM4mSFlXzAAAA0Y"]
[Wed Mar 25 19:34:22.139872 2026] [:error] [pid 26449:tid 26477] [client 20.251.61.72:43036] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acPIPtpZ2T15NDqzAjF6zQAAAlg"]
[Wed Mar 25 19:44:16.974626 2026] [:error] [pid 47989:tid 47993] [client 4.223.157.191:32047] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/AAAA.php"] [unique_id "acPKkCWKdJMhIccROjneowAAAUI"]
[Wed Mar 25 19:44:17.501312 2026] [:error] [pid 25875:tid 25891] [client 4.223.157.191:53056] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/AAAA.php"] [unique_id "acPKkRJ38QkS3Nyfshz5VwAAAoo"]
[Wed Mar 25 19:44:18.031732 2026] [:error] [pid 26321:tid 26349] [client 4.223.157.191:3268] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/AAAA.php"] [unique_id "acPKkvKO65qqGZCSPZpJAgAAAgg"]
[Wed Mar 25 19:44:18.559447 2026] [:error] [pid 26269:tid 26293] [client 4.223.157.191:39378] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/AAAA.php"] [unique_id "acPKkkn7e-ZQbaIs7qy6nAAAAZE"]
[Wed Mar 25 19:44:19.088955 2026] [:error] [pid 25875:tid 25883] [client 4.223.157.191:46112] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fde.php"] [unique_id "acPKkxJ38QkS3Nyfshz5WQAAAoI"]
[Wed Mar 25 19:44:19.613958 2026] [:error] [pid 47989:tid 48007] [client 4.223.157.191:47168] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fde.php"] [unique_id "acPKkyWKdJMhIccROjnepwAAAVA"]
[Wed Mar 25 19:44:20.139886 2026] [:error] [pid 47989:tid 47992] [client 4.223.157.191:29677] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fde.php"] [unique_id "acPKlCWKdJMhIccROjneqgAAAUE"]
[Wed Mar 25 19:44:20.664731 2026] [:error] [pid 47989:tid 48012] [client 4.223.157.191:46140] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fde.php"] [unique_id "acPKlCWKdJMhIccROjnerAAAAVU"]
[Wed Mar 25 19:44:21.224112 2026] [:error] [pid 25875:tid 25902] [client 4.223.157.191:3300] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjde.php"] [unique_id "acPKlRJ38QkS3Nyfshz5YQAAApU"]
[Wed Mar 25 19:44:21.759299 2026] [:error] [pid 25967:tid 25986] [client 4.223.157.191:40620] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjde.php"] [unique_id "acPKlfg8Qtq7ZM4mSFlaLwAAA04"]
[Wed Mar 25 19:44:22.328677 2026] [:error] [pid 25875:tid 25898] [client 4.223.157.191:47225] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjde.php"] [unique_id "acPKlhJ38QkS3Nyfshz5ZQAAApE"]
[Wed Mar 25 19:44:22.857308 2026] [:error] [pid 25875:tid 25896] [client 4.223.157.191:50587] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjde.php"] [unique_id "acPKlhJ38QkS3Nyfshz5aAAAAo8"]
[Wed Mar 25 19:44:23.382697 2026] [:error] [pid 26269:tid 26292] [client 4.223.157.191:62667] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta.php"] [unique_id "acPKl0n7e-ZQbaIs7qy6nwAAAZA"]
[Wed Mar 25 19:44:23.908143 2026] [:error] [pid 26269:tid 26298] [client 4.223.157.191:26299] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta.php"] [unique_id "acPKl0n7e-ZQbaIs7qy6oAAAAZY"]
[Wed Mar 25 19:44:24.440020 2026] [:error] [pid 47989:tid 47993] [client 4.223.157.191:47216] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acPKmCWKdJMhIccROjneswAAAUI"]
[Wed Mar 25 19:44:24.966318 2026] [:error] [pid 25875:tid 25900] [client 4.223.157.191:62703] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acPKmBJ38QkS3Nyfshz5bwAAApM"]
[Wed Mar 25 19:44:25.491040 2026] [:error] [pid 25875:tid 25883] [client 4.223.157.191:51788] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acPKmRJ38QkS3Nyfshz5dAAAAoI"]
[Wed Mar 25 19:44:26.017496 2026] [:error] [pid 26449:tid 26459] [client 4.223.157.191:53103] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acPKmtpZ2T15NDqzAjF7xgAAAkY"]
[Wed Mar 25 19:44:26.553317 2026] [:error] [pid 25875:tid 25895] [client 4.223.157.191:47219] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acPKmhJ38QkS3Nyfshz5dwAAAo4"]
[Wed Mar 25 19:44:27.086214 2026] [:error] [pid 25967:tid 25994] [client 4.223.157.191:61161] [client 4.223.157.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acPKm_g8Qtq7ZM4mSFlaMQAAA1Y"]
[Wed Mar 25 21:46:36.588862 2026] [:error] [pid 26449:tid 26477] [client 103.149.16.48:9906] [client 103.149.16.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.149.16.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acPnPNpZ2T15NDqzAjGMAgAAAlg"]
[Wed Mar 25 22:02:56.120523 2026] [:error] [pid 26269:tid 26296] [client 43.155.162.41:34900] [client 43.155.162.41] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acPrEEn7e-ZQbaIs7qzEYQAAAZQ"]
[Wed Mar 25 22:22:57.606501 2026] [:error] [pid 47946:tid 47954] [client 51.103.36.25:50450] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPvwTipQTqBMSeKYheM6AAAAQY"]
[Wed Mar 25 22:23:01.897156 2026] [:error] [pid 26321:tid 26343] [client 51.103.36.25:51143] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPvxfKO65qqGZCSPZpk7gAAAgQ"]
[Wed Mar 25 22:23:02.706352 2026] [:error] [pid 756:tid 864] [client 51.103.36.25:63742] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPvxjOaW6oylMIDBCQnhgAAAIw"]
[Wed Mar 25 22:31:32.828697 2026] [:error] [pid 892:tid 894] [client 103.149.16.48:9833] [client 103.149.16.48] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acPxxCT_G8WMU3T3yxrkbQAAAMA"]
[Wed Mar 25 22:37:59.410305 2026] [:error] [pid 26449:tid 26464] [client 63.33.173.238:58014] [client 63.33.173.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.33.173.238, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acPzR9pZ2T15NDqzAjGSzAAAAks"]
[Wed Mar 25 22:38:02.512292 2026] [:error] [pid 25967:tid 25995] [client 63.33.173.238:58018] [client 63.33.173.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.33.173.238, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acPzSvg8Qtq7ZM4mSFmIYAAAA1c"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Wed Mar 25 22:41:30.140705 2026] [:error] [pid 25967:tid 25977] [client 91.134.81.68:51289] [client 91.134.81.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.134.81.68, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acP0Gvg8Qtq7ZM4mSFmJRAAAA0U"]
[Wed Mar 25 22:41:40.405990 2026] [:error] [pid 25969:tid 26040] [client 91.134.81.68:62841] [client 91.134.81.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.134.81.68, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acP0JBd3aEUmOfdKja8YqgAAA84"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Wed Mar 25 22:52:47.285894 2026] [:error] [pid 26449:tid 26464] [client 74.248.130.23:37026] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fw/34.php"] [unique_id "acP2v9pZ2T15NDqzAjGVFwAAAks"]
[Wed Mar 25 22:52:47.916123 2026] [:error] [pid 25875:tid 25896] [client 74.248.130.23:37416] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lfm.php"] [unique_id "acP2vxJ38QkS3NyfshxPCwAAAo8"]
[Wed Mar 25 22:52:48.448339 2026] [:error] [pid 892:tid 917] [client 74.248.130.23:34429] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lfm.php"] [unique_id "acP2wCT_G8WMU3T3yxrm4QAAANI"]
[Wed Mar 25 22:52:48.994660 2026] [:error] [pid 26321:tid 26359] [client 74.248.130.23:58486] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lfm.php"] [unique_id "acP2wPKO65qqGZCSPZprKQAAAhI"]
[Wed Mar 25 22:52:49.536440 2026] [:error] [pid 25967:tid 25990] [client 74.248.130.23:56837] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lfm.php"] [unique_id "acP2wfg8Qtq7ZM4mSFmNWAAAA1I"]
[Wed Mar 25 22:52:50.057586 2026] [:error] [pid 25967:tid 25992] [client 74.248.130.23:36786] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abca.php"] [unique_id "acP2wvg8Qtq7ZM4mSFmNXAAAA1Q"]
[Wed Mar 25 22:52:50.572284 2026] [:error] [pid 892:tid 921] [client 74.248.130.23:40370] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abca.php"] [unique_id "acP2wiT_G8WMU3T3yxrm4gAAANY"]
[Wed Mar 25 22:52:51.083980 2026] [:error] [pid 892:tid 918] [client 74.248.130.23:47262] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abca.php"] [unique_id "acP2wyT_G8WMU3T3yxrm4wAAANM"]
[Wed Mar 25 22:52:51.592321 2026] [:error] [pid 25969:tid 26027] [client 74.248.130.23:29702] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abca.php"] [unique_id "acP2wxd3aEUmOfdKja8ZmwAAA8E"]
[Wed Mar 25 22:52:52.106423 2026] [:error] [pid 25875:tid 25883] [client 74.248.130.23:48062] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2.php"] [unique_id "acP2xBJ38QkS3NyfshxPGgAAAoI"]
[Wed Mar 25 22:52:52.627536 2026] [:error] [pid 25875:tid 25885] [client 74.248.130.23:63467] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2.php"] [unique_id "acP2xBJ38QkS3NyfshxPHgAAAoQ"]
[Wed Mar 25 22:52:53.138142 2026] [:error] [pid 47989:tid 48012] [client 74.248.130.23:48012] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2.php"] [unique_id "acP2xSWKdJMhIccROjkS2wAAAVU"]
[Wed Mar 25 22:52:53.649461 2026] [:error] [pid 25967:tid 25994] [client 74.248.130.23:41109] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2.php"] [unique_id "acP2xfg8Qtq7ZM4mSFmNYwAAA1Y"]
[Wed Mar 25 22:52:54.171603 2026] [:error] [pid 25875:tid 25892] [client 74.248.130.23:48037] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddd.php"] [unique_id "acP2xhJ38QkS3NyfshxPKgAAAos"]
[Wed Mar 25 22:52:54.700707 2026] [:error] [pid 25969:tid 26040] [client 74.248.130.23:28876] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "acP2xhd3aEUmOfdKja8ZnQAAA84"]
[Wed Mar 25 22:52:55.224709 2026] [:error] [pid 25875:tid 25899] [client 74.248.130.23:51920] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "acP2xxJ38QkS3NyfshxPLwAAApI"]
[Wed Mar 25 22:52:55.734970 2026] [:error] [pid 25967:tid 25992] [client 74.248.130.23:61426] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "acP2x_g8Qtq7ZM4mSFmNZgAAA1Q"]
[Wed Mar 25 22:52:56.253824 2026] [:error] [pid 47989:tid 48015] [client 74.248.130.23:31705] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta.php"] [unique_id "acP2yCWKdJMhIccROjkS5AAAAVg"]
[Wed Mar 25 22:52:56.767749 2026] [:error] [pid 25875:tid 25896] [client 74.248.130.23:32543] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta.php"] [unique_id "acP2yBJ38QkS3NyfshxPNAAAAo8"]
[Wed Mar 25 22:52:57.280987 2026] [:error] [pid 25875:tid 25885] [client 74.248.130.23:61446] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta.php"] [unique_id "acP2yRJ38QkS3NyfshxPOAAAAoQ"]
[Wed Mar 25 22:52:57.793165 2026] [:error] [pid 25875:tid 25902] [client 74.248.130.23:51686] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta.php"] [unique_id "acP2yRJ38QkS3NyfshxPPAAAApU"]
[Wed Mar 25 22:52:58.304215 2026] [:error] [pid 47989:tid 47997] [client 74.248.130.23:44820] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yawa.php"] [unique_id "acP2yiWKdJMhIccROjkS7gAAAUY"]
[Wed Mar 25 22:52:58.815422 2026] [:error] [pid 47989:tid 48003] [client 74.248.130.23:54622] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yawa.php"] [unique_id "acP2yiWKdJMhIccROjkS8AAAAUw"]
[Wed Mar 25 22:52:59.340712 2026] [:error] [pid 25967:tid 25975] [client 74.248.130.23:40796] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acP2y_g8Qtq7ZM4mSFmNbgAAA0M"]
[Wed Mar 25 22:52:59.850345 2026] [:error] [pid 25875:tid 25905] [client 74.248.130.23:51687] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acP2yxJ38QkS3NyfshxPRQAAApg"]
[Wed Mar 25 22:53:00.364597 2026] [:error] [pid 25967:tid 25981] [client 74.248.130.23:41750] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acP2zPg8Qtq7ZM4mSFmNdgAAA0k"]
[Wed Mar 25 22:53:00.878369 2026] [:error] [pid 25967:tid 25972] [client 74.248.130.23:28869] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0rg.php"] [unique_id "acP2zPg8Qtq7ZM4mSFmNegAAA0A"]
[Wed Mar 25 22:53:01.395017 2026] [:error] [pid 25967:tid 25990] [client 74.248.130.23:51926] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acP2zfg8Qtq7ZM4mSFmNgAAAA1I"]
[Wed Mar 25 22:53:01.904681 2026] [:error] [pid 47989:tid 48001] [client 74.248.130.23:3486] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acP2zSWKdJMhIccROjkS9wAAAUo"]
[Wed Mar 25 22:53:02.414317 2026] [:error] [pid 47989:tid 47992] [client 74.248.130.23:63978] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acP2ziWKdJMhIccROjkS-gAAAUE"]
[Wed Mar 25 22:53:02.996571 2026] [:error] [pid 47989:tid 48011] [client 74.248.130.23:31731] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dk.php"] [unique_id "acP2ziWKdJMhIccROjkTAAAAAVQ"]
[Wed Mar 25 22:53:03.515805 2026] [:error] [pid 47989:tid 48002] [client 74.248.130.23:51959] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acP2zyWKdJMhIccROjkTBAAAAUs"]
[Wed Mar 25 22:53:04.026399 2026] [:error] [pid 47989:tid 48013] [client 74.248.130.23:58442] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acP20CWKdJMhIccROjkTCgAAAVY"]
[Wed Mar 25 22:53:04.541485 2026] [:error] [pid 47989:tid 48010] [client 74.248.130.23:55138] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acP20CWKdJMhIccROjkTEgAAAVM"]
[Wed Mar 25 22:53:05.076110 2026] [:error] [pid 25875:tid 25882] [client 74.248.130.23:60248] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acP20RJ38QkS3NyfshxPTAAAAoE"]
[Wed Mar 25 22:56:31.836011 2026] [:error] [pid 25967:tid 25993] [client 198.57.247.141:45440] [client 198.57.247.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.141, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acP3n_g8Qtq7ZM4mSFmOZQAAA1U"]
[Wed Mar 25 23:58:51.617277 2026] [:error] [pid 26321:tid 26344] [client 51.75.128.89:58996] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acQGO_KO65qqGZCSPZp0lwAAAgU"]
[Wed Mar 25 23:58:54.060623 2026] [:error] [pid 25875:tid 25887] [client 51.75.128.89:59352] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acQGPhJ38QkS3NyfshxmJQAAAoY"]
[Wed Mar 25 23:58:56.523159 2026] [:error] [pid 25967:tid 25980] [client 51.75.128.89:59354] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acQGQPg8Qtq7ZM4mSFmdXwAAA0g"]
[Wed Mar 25 23:58:58.932451 2026] [:error] [pid 25875:tid 25894] [client 51.75.128.89:38948] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acQGQhJ38QkS3NyfshxmSwAAAo0"]
[Wed Mar 25 23:59:01.414410 2026] [:error] [pid 25969:tid 26047] [client 51.75.128.89:38958] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acQGRRd3aEUmOfdKja8e1QAAA9U"]
[Wed Mar 25 23:59:03.879421 2026] [:error] [pid 892:tid 922] [client 51.75.128.89:38960] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acQGRyT_G8WMU3T3yxrtFwAAANc"]
[Wed Mar 25 23:59:06.333035 2026] [:error] [pid 47989:tid 48006] [client 51.75.128.89:38976] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acQGSiWKdJMhIccROjke3wAAAU8"]
[Wed Mar 25 23:59:08.808020 2026] [:error] [pid 26269:tid 26289] [client 51.75.128.89:59454] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acQGTEn7e-ZQbaIs7qzMAgAAAY0"]
[Wed Mar 25 23:59:11.405435 2026] [:error] [pid 25967:tid 25973] [client 51.75.128.89:59456] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acQGT_g8Qtq7ZM4mSFmdbQAAA0E"]
[Wed Mar 25 23:59:14.098874 2026] [:error] [pid 25875:tid 25881] [client 51.75.128.89:59472] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "acQGUhJ38QkS3NyfshxmfwAAAoA"]
[Wed Mar 25 23:59:16.496365 2026] [:error] [pid 25875:tid 25902] [client 51.75.128.89:59488] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acQGVBJ38QkS3NyfshxmiAAAApU"]
[Wed Mar 25 23:59:18.974155 2026] [:error] [pid 25969:tid 26029] [client 51.75.128.89:40364] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acQGVhd3aEUmOfdKja8e3gAAA8M"]
[Wed Mar 25 23:59:21.411555 2026] [:error] [pid 47989:tid 48015] [client 51.75.128.89:40366] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acQGWSWKdJMhIccROjke7AAAAVg"]
[Wed Mar 25 23:59:23.841340 2026] [:error] [pid 26449:tid 26474] [client 51.75.128.89:40376] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "acQGW9pZ2T15NDqzAjGdJwAAAlU"]
[Wed Mar 25 23:59:26.244553 2026] [:error] [pid 26321:tid 26351] [client 51.75.128.89:40384] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "acQGXvKO65qqGZCSPZp0tgAAAgo"]
[Wed Mar 25 23:59:28.818528 2026] [:error] [pid 25875:tid 25899] [client 51.75.128.89:34096] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "acQGYBJ38QkS3NyfshxmnQAAApI"]
[Wed Mar 25 23:59:31.258495 2026] [:error] [pid 26321:tid 26348] [client 51.75.128.89:34102] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "acQGY_KO65qqGZCSPZp0yAAAAgc"]
[Wed Mar 25 23:59:33.715461 2026] [:error] [pid 47989:tid 48007] [client 51.75.128.89:34110] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acQGZSWKdJMhIccROjke9wAAAVA"]
[Wed Mar 25 23:59:36.113368 2026] [:error] [pid 26269:tid 26296] [client 51.75.128.89:34120] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "acQGaEn7e-ZQbaIs7qzMDQAAAZQ"]
[Wed Mar 25 23:59:38.679306 2026] [:error] [pid 892:tid 915] [client 51.75.128.89:49758] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "acQGaiT_G8WMU3T3yxrtLQAAANE"]
[Wed Mar 25 23:59:41.108884 2026] [:error] [pid 26269:tid 26300] [client 51.75.128.89:49766] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acQGbUn7e-ZQbaIs7qzMDgAAAZg"]
[Wed Mar 25 23:59:43.661275 2026] [:error] [pid 25875:tid 25900] [client 51.75.128.89:49778] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acQGbxJ38QkS3Nyfshxm3QAAApM"]
[Wed Mar 25 23:59:45.962956 2026] [:error] [pid 756:tid 866] [client 51.75.128.89:49784] [client 51.75.128.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acQGcTOaW6oylMIDBCQs_QAAAI4"]
[Thu Mar 26 02:06:07.072628 2026] [:error] [pid 55733:tid 55768] [client 113.22.174.185:60097] [client 113.22.174.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.22.174.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acQkD6MzUauzYCgMHcnkWAAAAJM"]
[Thu Mar 26 04:59:20.262858 2026] [:error] [pid 60829:tid 60852] [client 85.203.36.33:61843] [client 85.203.36.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acRMqPTdjHKeZokybaSo4QAAARU"]
[Thu Mar 26 04:59:20.972339 2026] [:error] [pid 19710:tid 19722] [client 85.203.36.10:29147] [client 85.203.36.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acRMqAVEWP8Ar68Njk5_GwAAAAA"]
[Thu Mar 26 04:59:22.376307 2026] [:error] [pid 60829:tid 60835] [client 85.203.36.20:29629] [client 85.203.36.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acRMqvTdjHKeZokybaSo7wAAAQQ"]
[Thu Mar 26 04:59:24.052333 2026] [:error] [pid 19710:tid 19724] [client 85.203.36.23:30185] [client 85.203.36.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acRMrAVEWP8Ar68Njk5_IQAAAAI"]
[Thu Mar 26 05:13:04.875584 2026] [:error] [pid 60829:tid 60839] [client 43.130.40.120:36280] [client 43.130.40.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acRP4PTdjHKeZokybaSwyAAAAQg"]
[Thu Mar 26 06:01:00.553850 2026] [:error] [pid 19712:tid 19781] [client 31.171.130.161:43339] [client 31.171.130.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.161, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acRbHNWhKhRNqm23vFO1RAAAAIU"]
[Thu Mar 26 06:35:38.928826 2026] [:error] [pid 60829:tid 60847] [client 49.233.45.47:39022] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acRjOvTdjHKeZokybaT_wgAAARA"]
[Thu Mar 26 07:12:53.276443 2026] [:error] [pid 19710:tid 19742] [client 192.3.207.218:57351] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/artisan"] [unique_id "acRr9QVEWP8Ar68Njk6owQAAABQ"]
[Thu Mar 26 07:12:53.699256 2026] [:error] [pid 60829:tid 60855] [client 192.3.207.218:57925] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/artisan"] [unique_id "acRr9fTdjHKeZokybaQppgAAARg"]
[Thu Mar 26 07:12:54.838018 2026] [:error] [pid 19710:tid 19733] [client 192.3.207.218:58479] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/artisan"] [unique_id "acRr9gVEWP8Ar68Njk6pLQAAAAs"]
[Thu Mar 26 07:12:55.276356 2026] [:error] [pid 19711:tid 19771] [client 192.3.207.218:59187] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/artisan"] [unique_id "acRr92j3l1y81GYfluRJrgAAAFY"]
[Thu Mar 26 07:12:56.126655 2026] [:error] [pid 31670:tid 31690] [client 192.3.207.218:59672] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "acRr-DXVthXxCnWjOTQx3QAAAVI"]
[Thu Mar 26 07:12:56.546789 2026] [:error] [pid 19712:tid 19782] [client 192.3.207.218:60511] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "acRr-NWhKhRNqm23vFPehAAAAIY"]
[Thu Mar 26 07:16:50.835751 2026] [:error] [pid 31778:tid 31794] [client 51.77.218.189:56052] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acRs4g3kybI2o-xasmA5GAAAAcE"]
[Thu Mar 26 07:16:53.336349 2026] [:error] [pid 31780:tid 31833] [client 51.77.218.189:36692] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acRs5ZJDwZsy5O4ZXEiYMQAAAgw"]
[Thu Mar 26 07:16:55.927275 2026] [:error] [pid 31780:tid 31844] [client 51.77.218.189:45394] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acRs55JDwZsy5O4ZXEiYPQAAAhc"]
[Thu Mar 26 07:16:58.333098 2026] [:error] [pid 60829:tid 60832] [client 51.77.218.189:45408] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acRs6vTdjHKeZokybaQrGwAAAQE"]
[Thu Mar 26 07:17:00.735201 2026] [:error] [pid 31670:tid 31683] [client 51.77.218.189:45414] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "acRs7DXVthXxCnWjOTQ1fwAAAUs"]
[Thu Mar 26 07:17:03.169119 2026] [:error] [pid 31717:tid 31736] [client 51.77.218.189:45430] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "acRs77-SCF7YDISDX49xSQAAAY4"]
[Thu Mar 26 07:17:05.558702 2026] [:error] [pid 31670:tid 31693] [client 51.77.218.189:42020] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "acRs8TXVthXxCnWjOTQ1ggAAAVU"]
[Thu Mar 26 07:17:07.929708 2026] [:error] [pid 31717:tid 31742] [client 51.77.218.189:42026] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "acRs87-SCF7YDISDX49xTgAAAZQ"]
[Thu Mar 26 07:17:10.397351 2026] [:error] [pid 31778:tid 31816] [client 51.77.218.189:42034] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "acRs9g3kybI2o-xasmA5QQAAAdc"]
[Thu Mar 26 07:17:12.821892 2026] [:error] [pid 31780:tid 31822] [client 51.77.218.189:42038] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acRs-JJDwZsy5O4ZXEiYbgAAAgI"]
[Thu Mar 26 07:17:15.195741 2026] [:error] [pid 31670:tid 31674] [client 51.77.218.189:60144] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "acRs-zXVthXxCnWjOTQ1rAAAAUI"]
[Thu Mar 26 07:17:17.618624 2026] [:error] [pid 31780:tid 31827] [client 51.77.218.189:60152] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "acRs_ZJDwZsy5O4ZXEiYeAAAAgc"]
[Thu Mar 26 07:17:20.059628 2026] [:error] [pid 31670:tid 31677] [client 51.77.218.189:60158] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "acRtADXVthXxCnWjOTQ1wQAAAUU"]
[Thu Mar 26 07:17:22.434322 2026] [:error] [pid 31670:tid 31690] [client 51.77.218.189:60160] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "acRtAjXVthXxCnWjOTQ1zQAAAVI"]
[Thu Mar 26 07:17:24.971559 2026] [:error] [pid 31780:tid 31830] [client 51.77.218.189:41298] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "acRtBJJDwZsy5O4ZXEiYjgAAAgk"]
[Thu Mar 26 07:17:27.510437 2026] [:error] [pid 31780:tid 31838] [client 51.77.218.189:41310] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "acRtB5JDwZsy5O4ZXEiYlwAAAhE"]
[Thu Mar 26 07:17:29.869218 2026] [:error] [pid 31778:tid 31814] [client 51.77.218.189:41326] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acRtCQ3kybI2o-xasmA5WwAAAdU"]
[Thu Mar 26 07:17:32.292897 2026] [:error] [pid 60829:tid 60855] [client 51.77.218.189:41330] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "acRtDPTdjHKeZokybaQrWAAAARg"]
[Thu Mar 26 07:17:34.684922 2026] [:error] [pid 19712:tid 19786] [client 51.77.218.189:32918] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "acRtDtWhKhRNqm23vFPfNgAAAIo"]
[Thu Mar 26 07:17:37.108166 2026] [:error] [pid 31670:tid 31677] [client 51.77.218.189:32932] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acRtETXVthXxCnWjOTQ18wAAAUU"]
[Thu Mar 26 07:17:39.453618 2026] [:error] [pid 31778:tid 31804] [client 51.77.218.189:32946] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acRtEw3kybI2o-xasmA5aAAAAcs"]
[Thu Mar 26 07:17:41.864680 2026] [:error] [pid 31670:tid 31677] [client 51.77.218.189:32958] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acRtFTXVthXxCnWjOTQ2FAAAAUU"]
[Thu Mar 26 07:17:44.377562 2026] [:error] [pid 19710:tid 19744] [client 51.77.218.189:39908] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "acRtGAVEWP8Ar68Njk6qIwAAABY"]
[Thu Mar 26 07:17:46.814793 2026] [:error] [pid 31670:tid 31680] [client 51.77.218.189:39922] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "acRtGjXVthXxCnWjOTQ2HgAAAUg"]
[Thu Mar 26 07:18:18.607699 2026] [:error] [pid 31780:tid 31839] [client 51.77.218.189:39926] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "acRtOpJDwZsy5O4ZXEiZUgAAAhI"]
[Thu Mar 26 07:18:21.066059 2026] [:error] [pid 31670:tid 31673] [client 51.77.218.189:54618] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acRtPTXVthXxCnWjOTQ2bQAAAUE"]
[Thu Mar 26 07:18:23.575498 2026] [:error] [pid 31778:tid 31809] [client 51.77.218.189:54620] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acRtPw3kybI2o-xasmA5vgAAAdA"]
[Thu Mar 26 07:18:26.105706 2026] [:error] [pid 31670:tid 31695] [client 51.77.218.189:52306] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "acRtQjXVthXxCnWjOTQ2fAAAAVc"]
[Thu Mar 26 07:18:28.632047 2026] [:error] [pid 31780:tid 31827] [client 51.77.218.189:52316] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "acRtRJJDwZsy5O4ZXEiZjgAAAgc"]
[Thu Mar 26 07:18:30.973008 2026] [:error] [pid 31780:tid 31822] [client 51.77.218.189:52330] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "acRtRpJDwZsy5O4ZXEiZnwAAAgI"]
[Thu Mar 26 07:18:33.475898 2026] [:error] [pid 19818:tid 19834] [client 51.77.218.189:52332] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acRtSczaSnm3d1BeM5WPHwAAAM4"]
[Thu Mar 26 07:18:35.993557 2026] [:error] [pid 31670:tid 31676] [client 51.77.218.189:49982] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "acRtSzXVthXxCnWjOTQ2igAAAUQ"]
[Thu Mar 26 07:18:38.517844 2026] [:error] [pid 60829:tid 60854] [client 51.77.218.189:49992] [client 51.77.218.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acRtTvTdjHKeZokybaQrswAAARc"]
[Thu Mar 26 07:21:25.039514 2026] [:error] [pid 31780:tid 31844] [client 104.28.159.109:63158] [client 104.28.159.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "acRt9ZJDwZsy5O4ZXEibzAAAAhc"]
[Thu Mar 26 08:31:58.248101 2026] [:error] [pid 31780:tid 31822] [client 31.171.130.141:64877] [client 31.171.130.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.141, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acR-fpJDwZsy5O4ZXEjCLAAAAgI"]
[Thu Mar 26 08:45:11.903958 2026] [:error] [pid 31670:tid 31674] [client 31.171.130.158:57275] [client 31.171.130.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.158, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acSBlzXVthXxCnWjOTRk0wAAAUI"]
[Thu Mar 26 08:58:38.334494 2026] [:error] [pid 31717:tid 31735] [client 31.171.130.146:34425] [client 31.171.130.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acSEvr-SCF7YDISDX4-EYwAAAY0"]
[Thu Mar 26 09:22:21.205023 2026] [:error] [pid 19818:tid 19838] [client 31.171.130.152:42885] [client 31.171.130.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.152, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acSKTczaSnm3d1BeM5WtoAAAANI"]
[Thu Mar 26 09:46:45.877172 2026] [:error] [pid 31780:tid 31839] [client 31.171.130.150:58459] [client 31.171.130.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acSQBZJDwZsy5O4ZXEjjGAAAAhI"]
[Thu Mar 26 10:11:17.486662 2026] [:error] [pid 31778:tid 31799] [client 31.171.130.118:20455] [client 31.171.130.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.118, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acSVxQ3kybI2o-xasmB03wAAAcY"]
[Thu Mar 26 10:35:42.840114 2026] [:error] [pid 19818:tid 19823] [client 31.171.130.149:64291] [client 31.171.130.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acSbfszaSnm3d1BeM5Xc0wAAAMM"]
[Thu Mar 26 11:24:17.276006 2026] [:error] [pid 19818:tid 19825] [client 31.171.130.149:65455] [client 31.171.130.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acSm4czaSnm3d1BeM5X8vwAAAMU"]
[Thu Mar 26 12:02:26.232159 2026] [:error] [pid 31670:tid 31692] [client 31.171.130.146:49037] [client 31.171.130.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.146, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acSv0jXVthXxCnWjOTTCfwAAAVQ"]
[Thu Mar 26 12:25:18.053689 2026] [:error] [pid 19818:tid 19840] [client 113.22.174.185:41574] [client 113.22.174.185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acS1LszaSnm3d1BeM5UlyQAAANQ"]
[Thu Mar 26 12:26:30.178314 2026] [:error] [pid 19818:tid 19837] [client 113.22.174.185:59940] [client 113.22.174.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.22.174.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acS1dszaSnm3d1BeM5UmegAAANE"]
[Thu Mar 26 12:27:42.821918 2026] [:error] [pid 19818:tid 19832] [client 31.171.130.136:32511] [client 31.171.130.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.136, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acS1vszaSnm3d1BeM5UnzgAAAMw"]
[Thu Mar 26 12:53:13.524626 2026] [:error] [pid 19710:tid 19739] [client 110.225.227.99:24256] [client 110.225.227.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.225.227.99, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acS7uQVEWP8Ar68Njk7SdgAAABE"]
[Thu Mar 26 12:53:21.067629 2026] [:error] [pid 31670:tid 31695] [client 117.251.22.119:56089] [client 117.251.22.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.251.22.119, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acS7wTXVthXxCnWjOTTb-QAAAVc"]
[Thu Mar 26 12:58:19.893120 2026] [:error] [pid 31717:tid 31734] [client 110.225.227.99:29193] [client 110.225.227.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acS867-SCF7YDISDX4-q9AAAAYw"]
[Thu Mar 26 13:16:19.958805 2026] [:error] [pid 19710:tid 19724] [client 31.171.130.152:39553] [client 31.171.130.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.152, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acTBIwVEWP8Ar68Njk7VBQAAAAI"]
[Thu Mar 26 13:17:07.107274 2026] [:error] [pid 60829:tid 60848] [client 117.251.22.119:52055] [client 117.251.22.119] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acTBU_TdjHKeZokybaR7ZAAAARE"]
[Thu Mar 26 14:45:17.068938 2026] [:error] [pid 31780:tid 31824] [client 43.155.140.157:42242] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acTV_ZJDwZsy5O4ZXEhLZwAAAgQ"]
[Thu Mar 26 15:05:16.978797 2026] [:error] [pid 31717:tid 31737] [client 20.250.3.85:17794] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "acTarL-SCF7YDISDX4--vwAAAY8"]
[Thu Mar 26 15:05:18.387473 2026] [:error] [pid 19710:tid 19731] [client 20.250.3.85:14835] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "acTargVEWP8Ar68Njk7iUgAAAAk"]
[Thu Mar 26 15:05:19.966864 2026] [:error] [pid 31780:tid 31830] [client 20.250.3.85:27462] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "acTar5JDwZsy5O4ZXEhUCwAAAgk"]
[Thu Mar 26 15:05:22.338768 2026] [:error] [pid 31780:tid 31822] [client 20.250.3.85:35099] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "acTaspJDwZsy5O4ZXEhUEAAAAgI"]
[Thu Mar 26 15:05:23.688945 2026] [:error] [pid 19818:tid 19841] [client 20.250.3.85:17807] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xs.php"] [unique_id "acTas8zaSnm3d1BeM5WOxgAAANU"]
[Thu Mar 26 15:05:24.837346 2026] [:error] [pid 31670:tid 31676] [client 20.250.3.85:33150] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xs.php"] [unique_id "acTatDXVthXxCnWjOTQZ8QAAAUQ"]
[Thu Mar 26 15:05:25.753033 2026] [:error] [pid 19818:tid 19830] [client 20.250.3.85:15081] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xs.php"] [unique_id "acTatczaSnm3d1BeM5WOxwAAAMo"]
[Thu Mar 26 15:05:26.767577 2026] [:error] [pid 19818:tid 19825] [client 20.250.3.85:15052] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xs.php"] [unique_id "acTatszaSnm3d1BeM5WOyQAAAMU"]
[Thu Mar 26 15:05:27.672643 2026] [:error] [pid 31717:tid 31735] [client 20.250.3.85:11570] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws47.php"] [unique_id "acTat7-SCF7YDISDX4--wAAAAY0"]
[Thu Mar 26 15:05:28.507857 2026] [:error] [pid 31717:tid 31743] [client 20.250.3.85:23841] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws47.php"] [unique_id "acTauL-SCF7YDISDX4--wQAAAZU"]
[Thu Mar 26 15:05:29.617447 2026] [:error] [pid 31670:tid 31676] [client 20.250.3.85:14805] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws47.php"] [unique_id "acTauTXVthXxCnWjOTQZ9wAAAUQ"]
[Thu Mar 26 15:05:30.666979 2026] [:error] [pid 31670:tid 31675] [client 20.250.3.85:33106] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws47.php"] [unique_id "acTaujXVthXxCnWjOTQaAwAAAUM"]
[Thu Mar 26 15:05:31.417457 2026] [:error] [pid 19818:tid 19829] [client 20.250.3.85:16552] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vvvb.php"] [unique_id "acTau8zaSnm3d1BeM5WO1QAAAMk"]
[Thu Mar 26 15:05:32.357389 2026] [:error] [pid 31670:tid 31695] [client 20.250.3.85:21338] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vvvb.php"] [unique_id "acTavDXVthXxCnWjOTQaFgAAAVc"]
[Thu Mar 26 15:05:34.792413 2026] [:error] [pid 31670:tid 31680] [client 20.250.3.85:17846] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vvvb.php"] [unique_id "acTavjXVthXxCnWjOTQaKAAAAUg"]
[Thu Mar 26 15:05:35.472737 2026] [:error] [pid 31778:tid 31812] [client 20.250.3.85:35129] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vvvb.php"] [unique_id "acTavw3kybI2o-xasmDD5QAAAdM"]
[Thu Mar 26 15:05:37.027270 2026] [:error] [pid 19710:tid 19728] [client 20.250.3.85:38784] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x12.php"] [unique_id "acTawQVEWP8Ar68Njk7iZAAAAAY"]
[Thu Mar 26 15:05:37.982121 2026] [:error] [pid 19818:tid 19836] [client 20.250.3.85:35084] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x12.php"] [unique_id "acTawczaSnm3d1BeM5WO2gAAANA"]
[Thu Mar 26 15:05:39.421307 2026] [:error] [pid 31780:tid 31835] [client 20.250.3.85:35114] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x12.php"] [unique_id "acTaw5JDwZsy5O4ZXEhUKgAAAg4"]
[Thu Mar 26 15:05:40.783171 2026] [:error] [pid 31778:tid 31812] [client 20.250.3.85:9265] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x12.php"] [unique_id "acTaxA3kybI2o-xasmDD8gAAAdM"]
[Thu Mar 26 15:05:41.730611 2026] [:error] [pid 31778:tid 31816] [client 20.250.3.85:9252] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zcsu.php"] [unique_id "acTaxQ3kybI2o-xasmDD9AAAAdc"]
[Thu Mar 26 15:05:42.611494 2026] [:error] [pid 31778:tid 31797] [client 20.250.3.85:15095] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zcsu.php"] [unique_id "acTaxg3kybI2o-xasmDD9gAAAcQ"]
[Thu Mar 26 15:05:43.418917 2026] [:error] [pid 31717:tid 31728] [client 20.250.3.85:16543] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zcsu.php"] [unique_id "acTax7-SCF7YDISDX4--zQAAAYY"]
[Thu Mar 26 15:05:44.125970 2026] [:error] [pid 31717:tid 31735] [client 20.250.3.85:23840] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zcsu.php"] [unique_id "acTayL-SCF7YDISDX4--zwAAAY0"]
[Thu Mar 26 15:05:45.165316 2026] [:error] [pid 31717:tid 31731] [client 20.250.3.85:14322] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acTayb-SCF7YDISDX4--1QAAAYk"]
[Thu Mar 26 15:05:51.864569 2026] [:error] [pid 31778:tid 31803] [client 20.250.3.85:14789] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acTazw3kybI2o-xasmDD_wAAAco"]
[Thu Mar 26 15:05:52.938766 2026] [:error] [pid 19818:tid 19820] [client 20.250.3.85:35649] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acTa0MzaSnm3d1BeM5WPDgAAAMA"]
[Thu Mar 26 15:05:57.473106 2026] [:error] [pid 31780:tid 31831] [client 20.250.3.85:11580] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acTa1ZJDwZsy5O4ZXEhUPAAAAgo"]
[Thu Mar 26 15:05:58.777318 2026] [:error] [pid 19818:tid 19824] [client 20.250.3.85:11562] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acTa1szaSnm3d1BeM5WPKQAAAMQ"]
[Thu Mar 26 15:06:01.441557 2026] [:error] [pid 31780:tid 31841] [client 20.250.3.85:18056] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acTa2ZJDwZsy5O4ZXEhUPwAAAhQ"]
[Thu Mar 26 15:06:02.240686 2026] [:error] [pid 31670:tid 31676] [client 20.250.3.85:35093] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acTa2jXVthXxCnWjOTQaPwAAAUQ"]
[Thu Mar 26 15:06:04.052196 2026] [:error] [pid 19818:tid 19829] [client 20.250.3.85:15090] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acTa3MzaSnm3d1BeM5WPRwAAAMk"]
[Thu Mar 26 15:06:04.746340 2026] [:error] [pid 19818:tid 19827] [client 20.250.3.85:14823] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acTa3MzaSnm3d1BeM5WPTQAAAMc"]
[Thu Mar 26 15:06:06.061671 2026] [:error] [pid 31670:tid 31679] [client 20.250.3.85:11888] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acTa3jXVthXxCnWjOTQaZQAAAUc"]
[Thu Mar 26 15:06:06.917213 2026] [:error] [pid 19818:tid 19821] [client 20.250.3.85:41092] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acTa3szaSnm3d1BeM5WPagAAAME"]
[Thu Mar 26 15:06:08.324421 2026] [:error] [pid 19818:tid 19833] [client 20.250.3.85:27482] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acTa4MzaSnm3d1BeM5WPcgAAAM0"]
[Thu Mar 26 15:06:09.165065 2026] [:error] [pid 31717:tid 31733] [client 20.250.3.85:35108] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acTa4b-SCF7YDISDX4--3wAAAYs"]
[Thu Mar 26 15:06:10.406205 2026] [:error] [pid 31670:tid 31689] [client 20.250.3.85:14834] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acTa4jXVthXxCnWjOTQadAAAAVE"]
[Thu Mar 26 15:06:11.161749 2026] [:error] [pid 31670:tid 31678] [client 20.250.3.85:26864] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acTa4zXVthXxCnWjOTQadwAAAUY"]
[Thu Mar 26 15:06:11.822330 2026] [:error] [pid 19711:tid 19773] [client 20.250.3.85:15812] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acTa42j3l1y81GYfluR5IgAAAFg"]
[Thu Mar 26 15:06:12.768031 2026] [:error] [pid 31670:tid 31682] [client 20.250.3.85:35592] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acTa5DXVthXxCnWjOTQaggAAAUo"]
[Thu Mar 26 15:06:13.948021 2026] [:error] [pid 19711:tid 19749] [client 20.250.3.85:15075] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acTa5Wj3l1y81GYfluR5JgAAAEA"]
[Thu Mar 26 15:06:14.882770 2026] [:error] [pid 31778:tid 31812] [client 20.250.3.85:8259] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "acTa5g3kybI2o-xasmDEDQAAAdM"]
[Thu Mar 26 15:06:28.600649 2026] [:error] [pid 19818:tid 19843] [client 20.250.3.85:40028] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acTa9MzaSnm3d1BeM5WPtgAAANc"]
[Thu Mar 26 15:06:29.181559 2026] [:error] [pid 31778:tid 31815] [client 20.250.3.85:14826] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acTa9Q3kybI2o-xasmDEIAAAAdY"]
[Thu Mar 26 15:06:30.452270 2026] [:error] [pid 31670:tid 31674] [client 20.250.3.85:9259] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acTa9jXVthXxCnWjOTQangAAAUI"]
[Thu Mar 26 15:06:32.924069 2026] [:error] [pid 31780:tid 31825] [client 20.250.3.85:8315] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acTa-JJDwZsy5O4ZXEhUewAAAgU"]
[Thu Mar 26 15:06:34.358705 2026] [:error] [pid 19818:tid 19821] [client 20.250.3.85:11275] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acTa-szaSnm3d1BeM5WPwAAAAME"]
[Thu Mar 26 15:06:35.551421 2026] [:error] [pid 31670:tid 31688] [client 20.250.3.85:26835] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acTa-zXVthXxCnWjOTQatAAAAVA"]
[Thu Mar 26 15:06:36.653694 2026] [:error] [pid 31670:tid 31680] [client 20.250.3.85:13525] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acTa_DXVthXxCnWjOTQauwAAAUg"]
[Thu Mar 26 15:06:37.399292 2026] [:error] [pid 19710:tid 19736] [client 20.250.3.85:33646] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "acTa_QVEWP8Ar68Njk7iiwAAAA4"]
[Thu Mar 26 15:06:38.951748 2026] [:error] [pid 31778:tid 31811] [client 20.250.3.85:11281] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "acTa_g3kybI2o-xasmDENAAAAdI"]
[Thu Mar 26 15:06:41.645973 2026] [:error] [pid 19710:tid 19741] [client 20.250.3.85:13789] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "acTbAQVEWP8Ar68Njk7ijAAAABM"]
[Thu Mar 26 15:06:50.349614 2026] [:error] [pid 31717:tid 31746] [client 20.250.3.85:23897] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "acTbCr-SCF7YDISDX4-_AAAAAZg"]
[Thu Mar 26 15:07:49.268363 2026] [:error] [pid 31670:tid 31688] [client 20.250.3.85:20396] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "acTbRTXVthXxCnWjOTQbZQAAAVA"]
[Thu Mar 26 15:07:50.249649 2026] [:error] [pid 31670:tid 31692] [client 20.250.3.85:20364] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "acTbRjXVthXxCnWjOTQbagAAAVQ"]
[Thu Mar 26 15:07:52.995518 2026] [:error] [pid 31780:tid 31836] [client 20.250.3.85:8217] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "acTbSJJDwZsy5O4ZXEhU6gAAAg8"]
[Thu Mar 26 15:07:54.351421 2026] [:error] [pid 31778:tid 31817] [client 20.250.3.85:16271] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "acTbSg3kybI2o-xasmDEfwAAAdg"]
[Thu Mar 26 15:07:55.578631 2026] [:error] [pid 31670:tid 31688] [client 20.250.3.85:58525] [client 20.250.3.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/app.php"] [unique_id "acTbSzXVthXxCnWjOTQbfwAAAVA"]
[Thu Mar 26 15:07:56.546673 2026] [:error] [pid 31670:tid 31676] [client 20.250.3.85:21800] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aee.php"] [unique_id "acTbTDXVthXxCnWjOTQbhAAAAUQ"]
[Thu Mar 26 15:07:57.981638 2026] [:error] [pid 19710:tid 19733] [client 20.250.3.85:19419] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aee.php"] [unique_id "acTbTQVEWP8Ar68Njk7ixwAAAAs"]
[Thu Mar 26 15:07:58.968299 2026] [:error] [pid 31778:tid 31801] [client 20.250.3.85:8210] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aee.php"] [unique_id "acTbTg3kybI2o-xasmDEgAAAAcg"]
[Thu Mar 26 15:08:00.958802 2026] [:error] [pid 31670:tid 31688] [client 20.250.3.85:23935] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aee.php"] [unique_id "acTbUDXVthXxCnWjOTQblQAAAVA"]
[Thu Mar 26 15:08:01.789886 2026] [:error] [pid 31670:tid 31689] [client 20.250.3.85:13550] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "acTbUTXVthXxCnWjOTQbnAAAAVE"]
[Thu Mar 26 15:08:02.688491 2026] [:error] [pid 19710:tid 19732] [client 20.250.3.85:15593] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "acTbUgVEWP8Ar68Njk7iygAAAAo"]
[Thu Mar 26 15:08:04.018135 2026] [:error] [pid 31670:tid 31675] [client 20.250.3.85:1273] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "acTbVDXVthXxCnWjOTQbrgAAAUM"]
[Thu Mar 26 15:08:06.703761 2026] [:error] [pid 19712:tid 19793] [client 20.250.3.85:8738] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "acTbVtWhKhRNqm23vFMHaQAAAJE"]
[Thu Mar 26 15:08:07.833016 2026] [:error] [pid 19818:tid 19823] [client 20.250.3.85:16333] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "acTbV8zaSnm3d1BeM5WQTAAAAMM"]
[Thu Mar 26 15:08:08.993113 2026] [:error] [pid 31670:tid 31694] [client 20.250.3.85:37728] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "acTbWDXVthXxCnWjOTQbtgAAAVY"]
[Thu Mar 26 15:08:11.055660 2026] [:error] [pid 31780:tid 31824] [client 20.250.3.85:37747] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "acTbW5JDwZsy5O4ZXEhU-gAAAgQ"]
[Thu Mar 26 15:08:12.438021 2026] [:error] [pid 19818:tid 19839] [client 20.250.3.85:31489] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "acTbXMzaSnm3d1BeM5WQVwAAANM"]
[Thu Mar 26 15:08:13.634563 2026] [:error] [pid 19818:tid 19841] [client 20.250.3.85:58531] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "acTbXczaSnm3d1BeM5WQYAAAANU"]
[Thu Mar 26 15:08:14.391750 2026] [:error] [pid 19818:tid 19831] [client 20.250.3.85:23909] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "acTbXszaSnm3d1BeM5WQaAAAAMs"]
[Thu Mar 26 15:08:17.110961 2026] [:error] [pid 19712:tid 19794] [client 20.250.3.85:11313] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "acTbYdWhKhRNqm23vFMHbgAAAJI"]
[Thu Mar 26 15:08:18.179922 2026] [:error] [pid 19818:tid 19833] [client 20.250.3.85:34656] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "acTbYszaSnm3d1BeM5WQdAAAAM0"]
[Thu Mar 26 15:08:19.450895 2026] [:error] [pid 31778:tid 31800] [client 20.250.3.85:8261] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aapig.php"] [unique_id "acTbYw3kybI2o-xasmDEjgAAAcc"]
[Thu Mar 26 15:08:21.965215 2026] [:error] [pid 31670:tid 31688] [client 20.250.3.85:17312] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aapig.php"] [unique_id "acTbZTXVthXxCnWjOTQb3AAAAVA"]
[Thu Mar 26 15:08:26.509083 2026] [:error] [pid 19818:tid 19825] [client 20.250.3.85:18084] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aapig.php"] [unique_id "acTbaszaSnm3d1BeM5WQigAAAMU"]
[Thu Mar 26 15:08:28.584874 2026] [:error] [pid 19818:tid 19826] [client 20.250.3.85:17845] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aapig.php"] [unique_id "acTbbMzaSnm3d1BeM5WQmQAAAMY"]
[Thu Mar 26 15:08:31.710132 2026] [:error] [pid 31778:tid 31799] [client 20.250.3.85:38791] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/com.php"] [unique_id "acTbbw3kybI2o-xasmDElQAAAcY"]
[Thu Mar 26 15:08:32.701459 2026] [:error] [pid 31780:tid 31827] [client 20.250.3.85:15346] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/com.php"] [unique_id "acTbcJJDwZsy5O4ZXEhVEQAAAgc"]
[Thu Mar 26 15:08:36.150032 2026] [:error] [pid 19818:tid 19828] [client 20.250.3.85:12860] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/com.php"] [unique_id "acTbdMzaSnm3d1BeM5WQqgAAAMg"]
[Thu Mar 26 15:08:39.509465 2026] [:error] [pid 31780:tid 31836] [client 20.250.3.85:12820] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/com.php"] [unique_id "acTbd5JDwZsy5O4ZXEhVGgAAAg8"]
[Thu Mar 26 15:08:41.359821 2026] [:error] [pid 31778:tid 31808] [client 20.250.3.85:8562] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta0ol.php"] [unique_id "acTbeQ3kybI2o-xasmDEpAAAAc8"]
[Thu Mar 26 15:08:43.439390 2026] [:error] [pid 19711:tid 19752] [client 20.250.3.85:30529] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta0ol.php"] [unique_id "acTbe2j3l1y81GYfluR5bwAAAEM"]
[Thu Mar 26 15:08:45.781953 2026] [:error] [pid 31780:tid 31840] [client 20.250.3.85:13177] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta0ol.php"] [unique_id "acTbfZJDwZsy5O4ZXEhVIwAAAhM"]
[Thu Mar 26 15:08:58.131821 2026] [:error] [pid 31778:tid 31799] [client 20.250.3.85:30565] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "acTbig3kybI2o-xasmDEwgAAAcY"]
[Thu Mar 26 15:09:01.176174 2026] [:error] [pid 31670:tid 31685] [client 20.250.3.85:41898] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "acTbjTXVthXxCnWjOTQcJQAAAU0"]
[Thu Mar 26 15:09:02.162907 2026] [:error] [pid 19710:tid 19735] [client 20.250.3.85:41863] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "acTbjgVEWP8Ar68Njk7i5AAAAA0"]
[Thu Mar 26 15:09:02.951845 2026] [:error] [pid 31780:tid 31831] [client 20.250.3.85:34605] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web.php"] [unique_id "acTbjpJDwZsy5O4ZXEhVOQAAAgo"]
[Thu Mar 26 15:09:04.114374 2026] [:error] [pid 19818:tid 19822] [client 20.250.3.85:47724] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acTbkMzaSnm3d1BeM5WQyQAAAMI"]
[Thu Mar 26 15:09:05.458708 2026] [:error] [pid 19818:tid 19833] [client 20.250.3.85:47801] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acTbkczaSnm3d1BeM5WQ2AAAAM0"]
[Thu Mar 26 15:09:07.483823 2026] [:error] [pid 19818:tid 19826] [client 20.250.3.85:1767] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acTbk8zaSnm3d1BeM5WQ5AAAAMY"]
[Thu Mar 26 15:09:08.548658 2026] [:error] [pid 31778:tid 31817] [client 20.250.3.85:1288] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acTblA3kybI2o-xasmDEywAAAdg"]
[Thu Mar 26 15:09:10.065788 2026] [:error] [pid 31778:tid 31813] [client 20.250.3.85:1436] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd.php"] [unique_id "acTblg3kybI2o-xasmDEzgAAAdQ"]
[Thu Mar 26 15:09:12.618835 2026] [:error] [pid 60829:tid 60843] [client 20.250.3.85:37098] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd.php"] [unique_id "acTbmPTdjHKeZokybaSQkwAAAQw"]
[Thu Mar 26 15:09:15.073359 2026] [:error] [pid 31670:tid 31692] [client 20.250.3.85:22879] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd.php"] [unique_id "acTbmzXVthXxCnWjOTQcQgAAAVQ"]
[Thu Mar 26 15:09:18.375804 2026] [:error] [pid 31670:tid 31689] [client 20.250.3.85:9042] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd.php"] [unique_id "acTbnjXVthXxCnWjOTQcUAAAAVE"]
[Thu Mar 26 15:09:20.788725 2026] [:error] [pid 31778:tid 31802] [client 20.250.3.85:1728] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acTboA3kybI2o-xasmDE0wAAAck"]
[Thu Mar 26 15:09:22.079810 2026] [:error] [pid 31670:tid 31693] [client 20.250.3.85:34602] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acTbojXVthXxCnWjOTQcYgAAAVU"]
[Thu Mar 26 15:09:23.506540 2026] [:error] [pid 19818:tid 19829] [client 20.250.3.85:19178] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acTbo8zaSnm3d1BeM5WQ-AAAAMk"]
[Thu Mar 26 15:09:24.352405 2026] [:error] [pid 31717:tid 31732] [client 20.250.3.85:7784] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acTbpL-SCF7YDISDX4-_bwAAAYo"]
[Thu Mar 26 15:09:25.201808 2026] [:error] [pid 19818:tid 19832] [client 20.250.3.85:1462] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelio1.php"] [unique_id "acTbpczaSnm3d1BeM5WQ_wAAAMw"]
[Thu Mar 26 15:09:25.978375 2026] [:error] [pid 19818:tid 19823] [client 20.250.3.85:1315] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelio1.php"] [unique_id "acTbpczaSnm3d1BeM5WRBAAAAMM"]
[Thu Mar 26 15:09:26.671611 2026] [:error] [pid 19711:tid 19762] [client 20.250.3.85:20469] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelio1.php"] [unique_id "acTbpmj3l1y81GYfluR5lQAAAE0"]
[Thu Mar 26 15:09:27.693518 2026] [:error] [pid 60829:tid 60838] [client 20.250.3.85:38630] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelio1.php"] [unique_id "acTbp_TdjHKeZokybaSQuQAAAQc"]
[Thu Mar 26 15:09:29.975600 2026] [:error] [pid 31670:tid 31676] [client 20.250.3.85:1337] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "acTbqTXVthXxCnWjOTQcdgAAAUQ"]
[Thu Mar 26 15:09:54.820628 2026] [:error] [pid 31670:tid 31688] [client 20.250.3.85:32006] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bo.php"] [unique_id "acTbwjXVthXxCnWjOTQclAAAAVA"]
[Thu Mar 26 15:10:18.436914 2026] [:error] [pid 31670:tid 31678] [client 20.250.3.85:39212] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acTb2jXVthXxCnWjOTQc3AAAAUY"]
[Thu Mar 26 15:10:19.631437 2026] [:error] [pid 31778:tid 31794] [client 20.250.3.85:24835] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acTb2w3kybI2o-xasmDFAwAAAcE"]
[Thu Mar 26 15:10:20.231817 2026] [:error] [pid 19818:tid 19837] [client 20.250.3.85:27917] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acTb3MzaSnm3d1BeM5WR2QAAANE"]
[Thu Mar 26 15:10:20.970226 2026] [:error] [pid 31717:tid 31725] [client 20.250.3.85:28472] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/az.php"] [unique_id "acTb3L-SCF7YDISDX4-_rAAAAYM"]
[Thu Mar 26 15:10:21.903522 2026] [:error] [pid 31717:tid 31740] [client 20.250.3.85:36132] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwq13.php"] [unique_id "acTb3b-SCF7YDISDX4-_rQAAAZI"]
[Thu Mar 26 15:10:22.931383 2026] [:error] [pid 19818:tid 19840] [client 20.250.3.85:24862] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwq13.php"] [unique_id "acTb3szaSnm3d1BeM5WR3AAAANQ"]
[Thu Mar 26 15:10:23.912192 2026] [:error] [pid 19818:tid 19843] [client 20.250.3.85:28423] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwq13.php"] [unique_id "acTb38zaSnm3d1BeM5WR4AAAANc"]
[Thu Mar 26 15:10:25.395679 2026] [:error] [pid 31778:tid 31813] [client 20.250.3.85:14299] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwq13.php"] [unique_id "acTb4Q3kybI2o-xasmDFDAAAAdQ"]
[Thu Mar 26 15:10:26.624579 2026] [:error] [pid 31780:tid 31831] [client 20.250.3.85:24840] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acTb4pJDwZsy5O4ZXEhVvwAAAgo"]
[Thu Mar 26 15:10:27.431647 2026] [:error] [pid 31780:tid 31827] [client 20.250.3.85:11093] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acTb45JDwZsy5O4ZXEhVwAAAAgc"]
[Thu Mar 26 15:10:28.404366 2026] [:error] [pid 31780:tid 31832] [client 20.250.3.85:24930] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acTb5JJDwZsy5O4ZXEhVwwAAAgs"]
[Thu Mar 26 15:10:30.403878 2026] [:error] [pid 31670:tid 31696] [client 20.250.3.85:15833] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acTb5jXVthXxCnWjOTQc5wAAAVg"]
[Thu Mar 26 15:10:32.627921 2026] [:error] [pid 19818:tid 19836] [client 20.250.3.85:26321] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "acTb6MzaSnm3d1BeM5WSAwAAANA"]
[Thu Mar 26 15:10:33.692172 2026] [:error] [pid 31778:tid 31802] [client 20.250.3.85:11592] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "acTb6Q3kybI2o-xasmDFHQAAAck"]
[Thu Mar 26 15:10:34.585859 2026] [:error] [pid 60829:tid 60838] [client 20.250.3.85:44119] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "acTb6vTdjHKeZokybaSQ5wAAAQc"]
[Thu Mar 26 15:10:35.334979 2026] [:error] [pid 60829:tid 60850] [client 20.250.3.85:39191] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "acTb6_TdjHKeZokybaSQ6gAAARM"]
[Thu Mar 26 15:10:36.288335 2026] [:error] [pid 31778:tid 31804] [client 20.250.3.85:24870] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/acxx.php"] [unique_id "acTb7A3kybI2o-xasmDFHwAAAcs"]
[Thu Mar 26 15:10:36.932974 2026] [:error] [pid 31778:tid 31798] [client 20.250.3.85:11597] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/acxx.php"] [unique_id "acTb7A3kybI2o-xasmDFIgAAAcU"]
[Thu Mar 26 15:10:38.180961 2026] [:error] [pid 31780:tid 31820] [client 20.250.3.85:11599] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/acxx.php"] [unique_id "acTb7pJDwZsy5O4ZXEhVyQAAAgA"]
[Thu Mar 26 15:10:39.857162 2026] [:error] [pid 31670:tid 31693] [client 20.250.3.85:22844] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/acxx.php"] [unique_id "acTb7zXVthXxCnWjOTQc-AAAAVU"]
[Thu Mar 26 15:10:40.705253 2026] [:error] [pid 31670:tid 31684] [client 20.250.3.85:10871] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyiiz.php"] [unique_id "acTb8DXVthXxCnWjOTQc_AAAAUw"]
[Thu Mar 26 15:10:41.582496 2026] [:error] [pid 60829:tid 60842] [client 20.250.3.85:26325] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyiiz.php"] [unique_id "acTb8fTdjHKeZokybaSQ9AAAAQs"]
[Thu Mar 26 15:10:43.132886 2026] [:error] [pid 19818:tid 19834] [client 20.250.3.85:20189] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyiiz.php"] [unique_id "acTb88zaSnm3d1BeM5WSFAAAAM4"]
[Thu Mar 26 15:10:44.087657 2026] [:error] [pid 19818:tid 19829] [client 20.250.3.85:26305] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyiiz.php"] [unique_id "acTb9MzaSnm3d1BeM5WSGQAAAMk"]
[Thu Mar 26 15:10:45.570976 2026] [:error] [pid 31778:tid 31798] [client 20.250.3.85:20197] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acTb9Q3kybI2o-xasmDFKwAAAcU"]
[Thu Mar 26 15:10:46.540704 2026] [:error] [pid 31780:tid 31824] [client 20.250.3.85:23864] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acTb9pJDwZsy5O4ZXEhVzQAAAgQ"]
[Thu Mar 26 15:10:47.655941 2026] [:error] [pid 31780:tid 31831] [client 20.250.3.85:19606] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acTb95JDwZsy5O4ZXEhV1AAAAgo"]
[Thu Mar 26 15:10:49.233682 2026] [:error] [pid 31780:tid 31837] [client 20.250.3.85:27940] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acTb-ZJDwZsy5O4ZXEhV2wAAAhA"]
[Thu Mar 26 15:10:50.319792 2026] [:error] [pid 31780:tid 31826] [client 20.250.3.85:36153] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "acTb-pJDwZsy5O4ZXEhV3gAAAgY"]
[Thu Mar 26 15:10:51.878865 2026] [:error] [pid 19818:tid 19828] [client 20.250.3.85:12050] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "acTb-8zaSnm3d1BeM5WSKQAAAMg"]
[Thu Mar 26 15:10:53.450455 2026] [:error] [pid 31778:tid 31793] [client 20.250.3.85:1851] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "acTb_Q3kybI2o-xasmDFLwAAAcA"]
[Thu Mar 26 15:10:54.412432 2026] [:error] [pid 31780:tid 31841] [client 20.250.3.85:24851] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "acTb_pJDwZsy5O4ZXEhV4gAAAhQ"]
[Thu Mar 26 15:10:55.440006 2026] [:error] [pid 31717:tid 31737] [client 20.250.3.85:33659] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shellerr.php"] [unique_id "acTb_7-SCF7YDISDX4-_vQAAAY8"]
[Thu Mar 26 15:10:56.316998 2026] [:error] [pid 31670:tid 31676] [client 20.250.3.85:23833] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shellerr.php"] [unique_id "acTcADXVthXxCnWjOTQdEQAAAUQ"]
[Thu Mar 26 15:10:57.688697 2026] [:error] [pid 19818:tid 19842] [client 20.250.3.85:1809] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shellerr.php"] [unique_id "acTcAczaSnm3d1BeM5WSNQAAANY"]
[Thu Mar 26 15:11:01.467225 2026] [:error] [pid 31778:tid 31808] [client 20.250.3.85:22847] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shellerr.php"] [unique_id "acTcBQ3kybI2o-xasmDFPwAAAc8"]
[Thu Mar 26 15:11:03.156137 2026] [:error] [pid 31778:tid 31801] [client 20.250.3.85:35187] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acTcBw3kybI2o-xasmDFQQAAAcg"]
[Thu Mar 26 15:11:04.096758 2026] [:error] [pid 31670:tid 31691] [client 20.250.3.85:27942] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acTcCDXVthXxCnWjOTQdIAAAAVM"]
[Thu Mar 26 15:11:05.029977 2026] [:error] [pid 60829:tid 60852] [client 20.250.3.85:36127] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acTcCfTdjHKeZokybaSQ_wAAARU"]
[Thu Mar 26 15:11:06.318077 2026] [:error] [pid 31717:tid 31743] [client 20.250.3.85:39206] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acTcCr-SCF7YDISDX4-_ygAAAZU"]
[Thu Mar 26 15:11:07.141718 2026] [:error] [pid 31778:tid 31809] [client 20.250.3.85:24885] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "acTcCw3kybI2o-xasmDFRAAAAdA"]
[Thu Mar 26 15:11:08.157179 2026] [:error] [pid 60829:tid 60838] [client 20.250.3.85:24917] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "acTcDPTdjHKeZokybaSRAgAAAQc"]
[Thu Mar 26 15:11:09.373644 2026] [:error] [pid 31670:tid 31696] [client 20.250.3.85:27927] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "acTcDTXVthXxCnWjOTQdKgAAAVg"]
[Thu Mar 26 15:11:10.648497 2026] [:error] [pid 60829:tid 60849] [client 20.250.3.85:35168] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "acTcDvTdjHKeZokybaSRBgAAARI"]
[Thu Mar 26 15:11:11.469676 2026] [:error] [pid 31778:tid 31817] [client 20.250.3.85:10868] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "acTcDw3kybI2o-xasmDFUwAAAdg"]
[Thu Mar 26 15:11:13.397810 2026] [:error] [pid 31778:tid 31801] [client 20.250.3.85:19864] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "acTcEQ3kybI2o-xasmDFVQAAAcg"]
[Thu Mar 26 15:11:14.303254 2026] [:error] [pid 19712:tid 19781] [client 20.250.3.85:24917] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "acTcEtWhKhRNqm23vFMHtQAAAIU"]
[Thu Mar 26 15:11:15.738202 2026] [:error] [pid 31670:tid 31682] [client 20.250.3.85:10606] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "acTcEzXVthXxCnWjOTQdOAAAAUo"]
[Thu Mar 26 15:11:16.376080 2026] [:error] [pid 31780:tid 31825] [client 20.250.3.85:20790] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "acTcFJJDwZsy5O4ZXEhWEgAAAgU"]
[Thu Mar 26 15:11:31.097841 2026] [:error] [pid 31780:tid 31833] [client 20.250.3.85:19857] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "acTcI5JDwZsy5O4ZXEhWKQAAAgw"]
[Thu Mar 26 15:11:31.780926 2026] [:error] [pid 31670:tid 31678] [client 20.250.3.85:10810] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "acTcIzXVthXxCnWjOTQdSwAAAUY"]
[Thu Mar 26 15:11:33.461004 2026] [:error] [pid 31670:tid 31688] [client 20.250.3.85:1315] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "acTcJTXVthXxCnWjOTQdVgAAAVA"]
[Thu Mar 26 15:11:34.253093 2026] [:error] [pid 31778:tid 31816] [client 20.250.3.85:36219] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "acTcJg3kybI2o-xasmDFZwAAAdc"]
[Thu Mar 26 15:11:35.113772 2026] [:error] [pid 31717:tid 31726] [client 20.250.3.85:24935] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "acTcJ7-SCF7YDISDX4-_4wAAAYQ"]
[Thu Mar 26 15:11:35.699729 2026] [:error] [pid 31780:tid 31836] [client 20.250.3.85:25357] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "acTcJ5JDwZsy5O4ZXEhWLQAAAg8"]
[Thu Mar 26 15:11:36.500423 2026] [:error] [pid 31670:tid 31680] [client 20.250.3.85:20787] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "acTcKDXVthXxCnWjOTQdWwAAAUg"]
[Thu Mar 26 15:11:38.017196 2026] [:error] [pid 19818:tid 19842] [client 20.250.3.85:19879] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "acTcKszaSnm3d1BeM5WSmQAAANY"]
[Thu Mar 26 15:11:38.694856 2026] [:error] [pid 19818:tid 19820] [client 20.250.3.85:12091] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "acTcKszaSnm3d1BeM5WSnwAAAMA"]
[Thu Mar 26 15:11:39.278267 2026] [:error] [pid 19818:tid 19838] [client 20.250.3.85:1364] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "acTcK8zaSnm3d1BeM5WSpAAAANI"]
[Thu Mar 26 15:11:40.260193 2026] [:error] [pid 19818:tid 19820] [client 20.250.3.85:34670] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "acTcLMzaSnm3d1BeM5WSqwAAAMA"]
[Thu Mar 26 15:11:41.587799 2026] [:error] [pid 19710:tid 19744] [client 20.250.3.85:23857] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/juuuu.php"] [unique_id "acTcLQVEWP8Ar68Njk7jGQAAABY"]
[Thu Mar 26 15:11:43.282398 2026] [:error] [pid 31670:tid 31684] [client 20.250.3.85:24912] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "acTcLzXVthXxCnWjOTQdYQAAAUw"]
[Thu Mar 26 15:11:44.261159 2026] [:error] [pid 60829:tid 60840] [client 20.250.3.85:17082] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "acTcMPTdjHKeZokybaSRGAAAAQk"]
[Thu Mar 26 15:11:47.230042 2026] [:error] [pid 31670:tid 31696] [client 20.250.3.85:38053] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "acTcMzXVthXxCnWjOTQdZwAAAVg"]
[Thu Mar 26 15:11:48.437709 2026] [:error] [pid 31780:tid 31835] [client 20.250.3.85:9868] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "acTcNJJDwZsy5O4ZXEhWNQAAAg4"]
[Thu Mar 26 17:22:41.309873 2026] [:error] [pid 19818:tid 19839] [client 51.83.5.74:55642] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acT64czaSnm3d1BeM5XWtgAAANM"]
[Thu Mar 26 17:22:44.068482 2026] [:error] [pid 31670:tid 31694] [client 51.83.5.74:54748] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acT65DXVthXxCnWjOTRZRwAAAVY"]
[Thu Mar 26 17:22:48.010942 2026] [:error] [pid 31670:tid 31673] [client 51.83.5.74:56706] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acT66DXVthXxCnWjOTRZYwAAAUE"]
[Thu Mar 26 17:22:50.831310 2026] [:error] [pid 31780:tid 31829] [client 51.83.5.74:56718] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acT66pJDwZsy5O4ZXEh_6gAAAgg"]
[Thu Mar 26 17:22:54.587957 2026] [:error] [pid 60829:tid 60841] [client 51.83.5.74:56720] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acT67vTdjHKeZokybaSqHAAAAQo"]
[Thu Mar 26 17:22:57.877119 2026] [:error] [pid 19818:tid 19842] [client 51.83.5.74:58288] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acT68czaSnm3d1BeM5XW3QAAANY"]
[Thu Mar 26 17:23:01.023658 2026] [:error] [pid 31717:tid 31725] [client 51.83.5.74:58294] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acT69b-SCF7YDISDX4_UDwAAAYM"]
[Thu Mar 26 17:23:04.353145 2026] [:error] [pid 31778:tid 31799] [client 51.83.5.74:58308] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acT6-A3kybI2o-xasmDnRAAAAcY"]
[Thu Mar 26 17:23:07.521077 2026] [:error] [pid 31670:tid 31690] [client 51.83.5.74:54506] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acT6-zXVthXxCnWjOTRZnQAAAVI"]
[Thu Mar 26 17:23:10.935441 2026] [:error] [pid 19818:tid 19843] [client 51.83.5.74:54508] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "acT6_szaSnm3d1BeM5XW9AAAANc"]
[Thu Mar 26 17:23:13.953317 2026] [:error] [pid 19818:tid 19820] [client 51.83.5.74:54524] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acT7AczaSnm3d1BeM5XXCAAAAMA"]
[Thu Mar 26 17:23:16.757123 2026] [:error] [pid 31780:tid 31827] [client 51.83.5.74:59780] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acT7BJJDwZsy5O4ZXEh_-wAAAgc"]
[Thu Mar 26 17:23:19.449642 2026] [:error] [pid 31670:tid 31686] [client 51.83.5.74:59784] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acT7BzXVthXxCnWjOTRZygAAAU4"]
[Thu Mar 26 17:23:22.123003 2026] [:error] [pid 31778:tid 31797] [client 51.83.5.74:59792] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "acT7Cg3kybI2o-xasmDnXwAAAcQ"]
[Thu Mar 26 17:23:25.112122 2026] [:error] [pid 31670:tid 31681] [client 51.83.5.74:39174] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "acT7DTXVthXxCnWjOTRZ1gAAAUk"]
[Thu Mar 26 17:23:28.137922 2026] [:error] [pid 19710:tid 19724] [client 51.83.5.74:39180] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "acT7EAVEWP8Ar68Njk70wgAAAAI"]
[Thu Mar 26 17:23:31.215720 2026] [:error] [pid 19818:tid 19826] [client 51.83.5.74:39194] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "acT7E8zaSnm3d1BeM5XXMwAAAMY"]
[Thu Mar 26 17:23:34.067046 2026] [:error] [pid 31670:tid 31678] [client 51.83.5.74:39202] [client 51.83.5.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acT7FjXVthXxCnWjOTRaAgAAAUY"]
[Thu Mar 26 17:53:56.788492 2026] [:error] [pid 31717:tid 31735] [client 43.157.82.252:57752] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acUCNL-SCF7YDISDX4_YvwAAAY0"]
[Thu Mar 26 18:55:23.062060 2026] [:error] [pid 19818:tid 19837] [client 110.226.161.160:9361] [client 110.226.161.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.226.161.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acUQm8zaSnm3d1BeM5X9ngAAANE"]
[Thu Mar 26 19:17:11.616373 2026] [:error] [pid 31670:tid 31679] [client 110.226.161.160:35291] [client 110.226.161.160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acUVtzXVthXxCnWjOTSTFgAAAUc"]
[Thu Mar 26 19:18:38.301434 2026] [:error] [pid 60829:tid 60855] [client 110.226.161.160:34804] [client 110.226.161.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.226.161.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acUWDvTdjHKeZokybaTAcAAAARg"]
[Thu Mar 26 20:40:19.249498 2026] [:error] [pid 19818:tid 19830] [client 43.166.239.145:55772] [client 43.166.239.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acUpM8zaSnm3d1BeM5UnIgAAAMo"]
[Thu Mar 26 20:59:13.452188 2026] [:error] [pid 19710:tid 19740] [client 4.206.17.96:4335] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acUtoQVEWP8Ar68Njk4QiwAAABI"]
[Thu Mar 26 20:59:14.277003 2026] [:error] [pid 19710:tid 19745] [client 4.206.17.96:4293] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acUtogVEWP8Ar68Njk4QjgAAABc"]
[Thu Mar 26 20:59:15.099807 2026] [:error] [pid 19818:tid 19831] [client 4.206.17.96:4818] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acUto8zaSnm3d1BeM5UuJgAAAMs"]
[Thu Mar 26 20:59:15.924115 2026] [:error] [pid 31670:tid 31692] [client 4.206.17.96:4351] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acUtozXVthXxCnWjOTTHxAAAAVQ"]
[Thu Mar 26 22:09:51.994043 2026] [autoindex:error] [pid 60829:tid 60834] [client 146.190.82.105:57590] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Mar 26 22:21:55.120436 2026] [:error] [pid 19711:tid 19764] [client 162.241.226.175:22222] [client 162.241.226.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.226.175, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acVBA2j3l1y81GYfluS_NQAAAE8"]
[Thu Mar 26 22:21:56.418338 2026] [:error] [pid 19711:tid 19773] [client 162.241.226.175:22222] [client 162.241.226.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.226.175, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acVBBGj3l1y81GYfluS_OAAAAFg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Mar 26 22:34:13.198282 2026] [:error] [pid 19818:tid 19839] [client 20.63.103.30:50486] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acVD5czaSnm3d1BeM5VBvAAAANM"]
[Thu Mar 26 22:34:14.025938 2026] [:error] [pid 31778:tid 31803] [client 20.63.103.30:50453] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acVD5g3kybI2o-xasmAntAAAAco"]
[Thu Mar 26 22:34:14.847940 2026] [:error] [pid 19710:tid 19746] [client 20.63.103.30:50473] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acVD5gVEWP8Ar68Njk42lAAAABg"]
[Thu Mar 26 22:34:15.670548 2026] [:error] [pid 31670:tid 31674] [client 20.63.103.30:51012] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "acVD5zXVthXxCnWjOTTh9QAAAUI"]
[Thu Mar 26 23:42:30.423144 2026] [:error] [pid 31780:tid 31821] [client 170.106.35.137:43278] [client 170.106.35.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acVT5pJDwZsy5O4ZXEjYJwAAAgE"]
[Fri Mar 27 00:30:50.608131 2026] [:error] [pid 62551:tid 62561] [client 49.149.106.54:21464] [client 49.149.106.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.149.106.54, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acVfOoQvFHgfE1g4p7B3dgAAAcc"]
[Fri Mar 27 00:43:27.746617 2026] [:error] [pid 62147:tid 62482] [client 192.254.250.160:35458] [client 192.254.250.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.254.250.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acViLxPjxn06mcLazN5oawAAABY"]
[Fri Mar 27 00:43:29.024917 2026] [:error] [pid 62147:tid 62476] [client 192.254.250.160:35458] [client 192.254.250.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.254.250.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acViMRPjxn06mcLazN5ocQAAABA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 27 00:43:33.466861 2026] [:error] [pid 62551:tid 62558] [client 49.149.106.54:18954] [client 49.149.106.54] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acViNYQvFHgfE1g4p7CAMgAAAcQ"]
[Fri Mar 27 00:52:42.947130 2026] [:error] [pid 62149:tid 62534] [client 197.159.192.39:50706] [client 197.159.192.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 197.159.192.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acVkWmHvvta9MPqU8PVZ_wAAAQo"]
[Fri Mar 27 01:36:17.149582 2026] [:error] [pid 44058:tid 44067] [client 185.169.4.152:61851] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "acVukeqp9u5CVRGdZPH-ggAAAIc"]
[Fri Mar 27 01:36:17.832642 2026] [:error] [pid 62147:tid 62461] [client 185.169.4.152:56608] [client 185.169.4.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "acVukRPjxn06mcLazN5_ewAAAAE"]
[Fri Mar 27 01:52:53.193470 2026] [:error] [pid 44058:tid 44070] [client 67.225.162.87:36182] [client 67.225.162.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.225.162.87, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acVydeqp9u5CVRGdZPEI7wAAAIo"]
[Fri Mar 27 01:52:54.642421 2026] [:error] [pid 44058:tid 44083] [client 67.225.162.87:36182] [client 67.225.162.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.225.162.87, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acVyduqp9u5CVRGdZPEI8wAAAJc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 27 03:30:35.430035 2026] [:error] [pid 62149:tid 62528] [client 162.240.29.92:58476] [client 162.240.29.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.29.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acWJW2Hvvta9MPqU8PWFjwAAAQQ"]
[Fri Mar 27 03:30:38.088362 2026] [:error] [pid 62149:tid 62525] [client 162.240.29.92:58476] [client 162.240.29.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.29.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acWJXmHvvta9MPqU8PWFkAAAAQE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 27 03:37:43.539179 2026] [:error] [pid 62147:tid 62462] [client 20.219.216.27:12365] [client 20.219.216.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Core-Econ/upH.php"] [unique_id "acWLBxPjxn06mcLazN64jgAAAAI"]
[Fri Mar 27 03:37:44.458870 2026] [:error] [pid 62147:tid 62478] [client 20.219.216.27:30114] [client 20.219.216.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Core-Econ/upH.php"] [unique_id "acWLCBPjxn06mcLazN64kAAAABI"]
[Fri Mar 27 03:37:45.137784 2026] [:error] [pid 62147:tid 62482] [client 20.219.216.27:25379] [client 20.219.216.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Core-Econ/upH.php"] [unique_id "acWLCRPjxn06mcLazN64kQAAABY"]
[Fri Mar 27 03:37:45.777101 2026] [:error] [pid 62147:tid 62460] [client 20.219.216.27:7539] [client 20.219.216.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Core-Econ/upH.php"] [unique_id "acWLCRPjxn06mcLazN64lQAAAAA"]
[Fri Mar 27 06:23:57.294441 2026] [:error] [pid 27749:tid 27812] [client 85.203.36.27:61991] [client 85.203.36.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acWx_cEqyoMni2Q6_X5iwAAAAFU"]
[Fri Mar 27 06:23:57.996586 2026] [:error] [pid 27851:tid 27877] [client 85.203.36.24:25887] [client 85.203.36.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acWx_XR2ccxe3RMCLboXlAAAANM"]
[Fri Mar 27 06:23:59.406914 2026] [:error] [pid 27749:tid 27809] [client 85.203.36.19:54333] [client 85.203.36.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acWx_8EqyoMni2Q6_X5iwgAAAFI"]
[Fri Mar 27 06:24:01.106783 2026] [:error] [pid 4293:tid 4307] [client 85.203.36.13:25773] [client 85.203.36.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acWyAZLjeJUC3OKtEx9hiQAAAUw"]
[Fri Mar 27 08:12:29.783982 2026] [:error] [pid 27750:tid 27826] [client 216.81.200.75:44222] [client 216.81.200.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "acXLbYaSil5rd17ieLxUtQAAAIg"]
[Fri Mar 27 08:20:29.929298 2026] [:error] [pid 27851:tid 27866] [client 14.187.152.212:61949] [client 14.187.152.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.187.152.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acXNTXR2ccxe3RMCLbo4TgAAAMg"]
[Fri Mar 27 08:29:45.599003 2026] [:error] [pid 27750:tid 27821] [client 185.17.41.205:40940] [client 185.17.41.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.17.41.205, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acXPeYaSil5rd17ieLxZqAAAAIM"]
[Fri Mar 27 09:48:01.263988 2026] [:error] [pid 4293:tid 4300] [client 43.155.26.193:39302] [client 43.155.26.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acXh0ZLjeJUC3OKtEx_ynAAAAUU"]
[Fri Mar 27 10:02:41.868627 2026] [:error] [pid 27749:tid 27809] [client 23.235.206.142:56454] [client 23.235.206.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.235.206.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acXlQcEqyoMni2Q6_X6LBQAAAFI"]
[Fri Mar 27 10:02:45.380308 2026] [:error] [pid 27749:tid 27811] [client 23.235.206.142:56454] [client 23.235.206.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.235.206.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acXlRcEqyoMni2Q6_X6LBwAAAFQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 27 10:24:46.684571 2026] [:error] [pid 4341:tid 4356] [client 83.137.147.73:54544] [client 83.137.147.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.137.147.73, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acXqbuKJWrNB5dMlERF47QAAAY0"]
[Fri Mar 27 10:24:49.534904 2026] [:error] [pid 4341:tid 4359] [client 83.137.147.73:54544] [client 83.137.147.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.137.147.73, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acXqceKJWrNB5dMlERF4_wAAAZA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 27 10:48:38.506580 2026] [:error] [pid 4293:tid 4300] [client 91.137.27.140:10305] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acXwBpLjeJUC3OKtEx8YhgAAAUU"]
[Fri Mar 27 10:48:41.066546 2026] [:error] [pid 63897:tid 63906] [client 91.137.27.140:56909] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acXwCWVSkmYmLu7ycYiUgAAAAQc"]
[Fri Mar 27 10:48:43.675749 2026] [:error] [pid 4341:tid 4352] [client 91.137.27.140:8134] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acXwC-KJWrNB5dMlERGD_QAAAYk"]
[Fri Mar 27 10:48:46.237846 2026] [:error] [pid 27851:tid 27866] [client 91.137.27.140:21882] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acXwDnR2ccxe3RMCLbpiPAAAAMg"]
[Fri Mar 27 10:48:48.655016 2026] [:error] [pid 4341:tid 4361] [client 91.137.27.140:20980] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acXwEOKJWrNB5dMlERGECwAAAZI"]
[Fri Mar 27 10:48:51.084348 2026] [:error] [pid 27743:tid 27786] [client 91.137.27.140:18925] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acXwEyA46UYYLqzw99ArEwAAABY"]
[Fri Mar 27 10:48:53.496604 2026] [:error] [pid 4293:tid 4300] [client 91.137.27.140:2296] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acXwFZLjeJUC3OKtEx8YtQAAAUU"]
[Fri Mar 27 10:48:56.087336 2026] [:error] [pid 4293:tid 4316] [client 91.137.27.140:8626] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acXwGJLjeJUC3OKtEx8YwAAAAVU"]
[Fri Mar 27 10:48:58.484769 2026] [:error] [pid 27750:tid 27838] [client 91.137.27.140:3771] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acXwGoaSil5rd17ieLx5vgAAAJQ"]
[Fri Mar 27 10:49:01.019947 2026] [:error] [pid 4293:tid 4299] [client 91.137.27.140:20032] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "acXwHZLjeJUC3OKtEx8Y0AAAAUQ"]
[Fri Mar 27 10:49:03.413993 2026] [:error] [pid 27743:tid 27769] [client 91.137.27.140:39195] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acXwHyA46UYYLqzw99ArGQAAAAU"]
[Fri Mar 27 10:49:05.803572 2026] [:error] [pid 4341:tid 4345] [client 91.137.27.140:7654] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acXwIeKJWrNB5dMlERGEOAAAAYI"]
[Fri Mar 27 10:49:08.205174 2026] [:error] [pid 63897:tid 63919] [client 91.137.27.140:41519] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acXwJGVSkmYmLu7ycYiUlwAAARQ"]
[Fri Mar 27 10:49:10.640800 2026] [:error] [pid 27749:tid 27794] [client 91.137.27.140:51162] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "acXwJsEqyoMni2Q6_X6TcAAAAEM"]
[Fri Mar 27 10:49:13.023634 2026] [:error] [pid 27749:tid 27799] [client 91.137.27.140:15280] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "acXwKcEqyoMni2Q6_X6TcgAAAEg"]
[Fri Mar 27 10:49:15.588716 2026] [:error] [pid 4293:tid 4312] [client 91.137.27.140:20174] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "acXwK5LjeJUC3OKtEx8Y2wAAAVE"]
[Fri Mar 27 10:49:18.165812 2026] [:error] [pid 4293:tid 4297] [client 91.137.27.140:6412] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "acXwLpLjeJUC3OKtEx8Y5gAAAUI"]
[Fri Mar 27 10:49:20.572978 2026] [:error] [pid 4293:tid 4318] [client 91.137.27.140:54340] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acXwMJLjeJUC3OKtEx8Y7QAAAVc"]
[Fri Mar 27 10:49:23.152187 2026] [:error] [pid 27851:tid 27869] [client 91.137.27.140:11604] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "acXwM3R2ccxe3RMCLbpicgAAAMs"]
[Fri Mar 27 10:49:25.537683 2026] [:error] [pid 4293:tid 4297] [client 91.137.27.140:9442] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "acXwNZLjeJUC3OKtEx8Y_wAAAUI"]
[Fri Mar 27 10:49:27.948307 2026] [:error] [pid 4293:tid 4313] [client 91.137.27.140:34275] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acXwN5LjeJUC3OKtEx8ZDAAAAVI"]
[Fri Mar 27 10:49:30.470689 2026] [:error] [pid 4293:tid 4299] [client 91.137.27.140:15714] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acXwOpLjeJUC3OKtEx8ZFQAAAUQ"]
[Fri Mar 27 10:49:32.987524 2026] [:error] [pid 4341:tid 4347] [client 91.137.27.140:20837] [client 91.137.27.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acXwPOKJWrNB5dMlERGEVwAAAYQ"]
[Fri Mar 27 13:03:49.819092 2026] [:error] [pid 4293:tid 4319] [client 20.219.216.27:27697] [client 20.219.216.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apismtp/apismtp.php"] [unique_id "acYPtZLjeJUC3OKtEx96CgAAAVg"]
[Fri Mar 27 13:03:50.407441 2026] [:error] [pid 27750:tid 27829] [client 20.219.216.27:6638] [client 20.219.216.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apismtp/apismtp.php"] [unique_id "acYPtoaSil5rd17ieLyX8gAAAIs"]
[Fri Mar 27 13:03:51.009336 2026] [:error] [pid 4341:tid 4357] [client 20.219.216.27:14299] [client 20.219.216.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apismtp/apismtp.php"] [unique_id "acYPt-KJWrNB5dMlERHM1wAAAY4"]
[Fri Mar 27 13:03:51.602005 2026] [:error] [pid 63897:tid 63908] [client 20.219.216.27:26324] [client 20.219.216.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apismtp/apismtp.php"] [unique_id "acYPt2VSkmYmLu7ycYjD0gAAAQk"]
[Fri Mar 27 13:31:05.901828 2026] [:error] [pid 4341:tid 4357] [client 41.141.150.163:51512] [client 41.141.150.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.141.150.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acYWGeKJWrNB5dMlERHZ4AAAAY4"]
[Fri Mar 27 13:31:07.269556 2026] [:error] [pid 4341:tid 4353] [client 41.141.150.163:51512] [client 41.141.150.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.141.150.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acYWG-KJWrNB5dMlERHZ6AAAAYo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 27 17:02:50.378722 2026] [:error] [pid 4341:tid 4346] [client 185.198.240.176:60589] [client 185.198.240.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.176, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acZHuuKJWrNB5dMlERFYfQAAAYM"]
[Fri Mar 27 17:14:03.008198 2026] [:error] [pid 4341:tid 4345] [client 49.51.47.100:45388] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acZKW-KJWrNB5dMlERFdvAAAAYI"]
[Fri Mar 27 19:48:47.469728 2026] [:error] [pid 4341:tid 4349] [client 51.77.216.62:41322] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acZun-KJWrNB5dMlERGavAAAAYY"]
[Fri Mar 27 19:48:47.672277 2026] [:error] [pid 27743:tid 27765] [client 51.77.216.62:48056] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "acZunyA46UYYLqzw99DX1AAAAAE"]
[Fri Mar 27 19:48:50.110944 2026] [:error] [pid 27743:tid 27772] [client 51.77.216.62:48072] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acZuoiA46UYYLqzw99DX3QAAAAg"]
[Fri Mar 27 19:48:52.416629 2026] [:error] [pid 4293:tid 4296] [client 51.77.216.62:48084] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "acZupJLjeJUC3OKtEx90ogAAAUE"]
[Fri Mar 27 19:48:52.541735 2026] [:error] [pid 4293:tid 4308] [client 51.77.216.62:48092] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acZupJLjeJUC3OKtEx90pAAAAU0"]
[Fri Mar 27 19:48:55.230136 2026] [:error] [pid 4293:tid 4296] [client 51.77.216.62:55516] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acZup5LjeJUC3OKtEx90rQAAAUE"]
[Fri Mar 27 19:48:57.742206 2026] [:error] [pid 27743:tid 27778] [client 51.77.216.62:55522] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acZuqSA46UYYLqzw99DX9wAAAA4"]
[Fri Mar 27 19:49:00.086666 2026] [:error] [pid 4293:tid 4314] [client 51.77.216.62:55530] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "acZurJLjeJUC3OKtEx90vAAAAVM"]
[Fri Mar 27 19:49:02.340908 2026] [:error] [pid 27743:tid 27782] [client 51.77.216.62:55540] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "acZuriA46UYYLqzw99DYAgAAABI"]
[Fri Mar 27 19:49:04.967404 2026] [:error] [pid 4293:tid 4303] [client 51.77.216.62:48190] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "acZusJLjeJUC3OKtEx90ywAAAUg"]
[Fri Mar 27 19:49:07.596433 2026] [:error] [pid 63897:tid 63900] [client 51.77.216.62:48198] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "acZus2VSkmYmLu7ycYhIzgAAAQE"]
[Fri Mar 27 19:49:10.394182 2026] [:error] [pid 4293:tid 4307] [client 51.77.216.62:48208] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "acZutpLjeJUC3OKtEx90zgAAAUw"]
[Fri Mar 27 19:49:12.842701 2026] [:error] [pid 4293:tid 4311] [client 51.77.216.62:48994] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acZuuJLjeJUC3OKtEx900QAAAVA"]
[Fri Mar 27 19:49:15.778306 2026] [:error] [pid 27743:tid 27774] [client 51.77.216.62:49000] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "acZuuyA46UYYLqzw99DYHQAAAAo"]
[Fri Mar 27 19:49:18.125083 2026] [:error] [pid 4293:tid 4304] [client 51.77.216.62:49014] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "acZuvpLjeJUC3OKtEx904QAAAUk"]
[Fri Mar 27 19:49:20.586948 2026] [:error] [pid 4293:tid 4308] [client 51.77.216.62:49018] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "acZuwJLjeJUC3OKtEx908gAAAU0"]
[Fri Mar 27 19:49:23.050378 2026] [:error] [pid 63897:tid 63899] [client 51.77.216.62:38520] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "acZuw2VSkmYmLu7ycYhI3wAAAQA"]
[Fri Mar 27 19:49:25.483038 2026] [:error] [pid 4293:tid 4317] [client 51.77.216.62:38536] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "acZuxZLjeJUC3OKtEx91AwAAAVY"]
[Fri Mar 27 19:49:27.908005 2026] [:error] [pid 63897:tid 63908] [client 51.77.216.62:38538] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "acZux2VSkmYmLu7ycYhI5QAAAQk"]
[Fri Mar 27 19:49:30.257025 2026] [:error] [pid 27851:tid 27858] [client 51.77.216.62:38554] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acZuynR2ccxe3RMCLbrqlgAAAMA"]
[Fri Mar 27 19:49:33.151798 2026] [:error] [pid 27851:tid 27875] [client 51.77.216.62:50186] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "acZuzXR2ccxe3RMCLbrqmQAAANE"]
[Fri Mar 27 19:49:35.664746 2026] [:error] [pid 27743:tid 27774] [client 51.77.216.62:50188] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "acZuzyA46UYYLqzw99DYMAAAAAo"]
[Fri Mar 27 19:49:37.964514 2026] [:error] [pid 4293:tid 4306] [client 51.77.216.62:50196] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acZu0ZLjeJUC3OKtEx91FwAAAUs"]
[Fri Mar 27 19:49:40.604767 2026] [:error] [pid 4341:tid 4347] [client 51.77.216.62:50204] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acZu1OKJWrNB5dMlERGa5gAAAYQ"]
[Fri Mar 27 19:49:43.143207 2026] [:error] [pid 4341:tid 4355] [client 51.77.216.62:40088] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acZu1-KJWrNB5dMlERGa6gAAAYw"]
[Fri Mar 27 19:50:16.380268 2026] [:error] [pid 27749:tid 27813] [client 51.77.216.62:40094] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "acZu-MEqyoMni2Q6_X7uowAAAFY"]
[Fri Mar 27 19:50:18.847226 2026] [:error] [pid 4341:tid 4362] [client 51.77.216.62:60510] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acZu-uKJWrNB5dMlERGbfwAAAZM"]
[Fri Mar 27 19:50:21.364786 2026] [:error] [pid 27749:tid 27805] [client 51.77.216.62:60524] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "acZu_cEqyoMni2Q6_X7urwAAAE4"]
[Fri Mar 27 19:50:23.904362 2026] [:error] [pid 27851:tid 27878] [client 51.77.216.62:48306] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "acZu_3R2ccxe3RMCLbrqxQAAANQ"]
[Fri Mar 27 19:50:26.537647 2026] [:error] [pid 4341:tid 4360] [client 51.77.216.62:48310] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acZvAuKJWrNB5dMlERGbkgAAAZE"]
[Fri Mar 27 19:50:29.031133 2026] [:error] [pid 4293:tid 4319] [client 51.77.216.62:48314] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acZvBZLjeJUC3OKtEx91cgAAAVg"]
[Fri Mar 27 19:50:31.529289 2026] [:error] [pid 4341:tid 4366] [client 51.77.216.62:48316] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "acZvB-KJWrNB5dMlERGbnAAAAZc"]
[Fri Mar 27 19:50:34.064973 2026] [:error] [pid 4341:tid 4354] [client 51.77.216.62:60400] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "acZvCuKJWrNB5dMlERGbowAAAYs"]
[Fri Mar 27 19:50:36.570320 2026] [:error] [pid 27749:tid 27796] [client 51.77.216.62:60414] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "acZvDMEqyoMni2Q6_X7uugAAAEU"]
[Fri Mar 27 19:50:39.086835 2026] [:error] [pid 27743:tid 27767] [client 51.77.216.62:60426] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acZvDyA46UYYLqzw99DYngAAAAM"]
[Fri Mar 27 19:50:41.584323 2026] [:error] [pid 63897:tid 63911] [client 51.77.216.62:60428] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "acZvEWVSkmYmLu7ycYhJMQAAAQw"]
[Fri Mar 27 19:50:44.075377 2026] [:error] [pid 4293:tid 4316] [client 51.77.216.62:41724] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acZvFJLjeJUC3OKtEx91gAAAAVU"]
[Fri Mar 27 19:52:04.122163 2026] [:error] [pid 27750:tid 27825] [client 51.77.216.62:53598] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acZvZIaSil5rd17ieLztcAAAAIc"]
[Fri Mar 27 19:52:06.581791 2026] [:error] [pid 27851:tid 27866] [client 51.77.216.62:48626] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acZvZnR2ccxe3RMCLbrrDQAAAMg"]
[Fri Mar 27 19:52:09.366727 2026] [:error] [pid 4293:tid 4304] [client 51.77.216.62:48642] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acZvaZLjeJUC3OKtEx92dgAAAUk"]
[Fri Mar 27 19:52:12.247723 2026] [:error] [pid 27743:tid 27767] [client 51.77.216.62:48644] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acZvbCA46UYYLqzw99DZFgAAAAM"]
[Fri Mar 27 19:52:15.247351 2026] [:error] [pid 4341:tid 4360] [client 51.77.216.62:59740] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acZvb-KJWrNB5dMlERGcSAAAAZE"]
[Fri Mar 27 19:52:17.835361 2026] [:error] [pid 4293:tid 4319] [client 51.77.216.62:59752] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "acZvcZLjeJUC3OKtEx92kQAAAVg"]
[Fri Mar 27 19:52:20.501516 2026] [:error] [pid 4293:tid 4309] [client 51.77.216.62:59760] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "acZvdJLjeJUC3OKtEx92mQAAAU4"]
[Fri Mar 27 19:52:23.127680 2026] [:error] [pid 63897:tid 63903] [client 51.77.216.62:48130] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "acZvd2VSkmYmLu7ycYhJewAAAQQ"]
[Fri Mar 27 19:52:25.540630 2026] [:error] [pid 4341:tid 4343] [client 51.77.216.62:48132] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "acZveeKJWrNB5dMlERGcXQAAAYA"]
[Fri Mar 27 19:52:28.104087 2026] [:error] [pid 27743:tid 27764] [client 51.77.216.62:48140] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "acZvfCA46UYYLqzw99DZRgAAAAA"]
[Fri Mar 27 19:52:31.053130 2026] [:error] [pid 63897:tid 63921] [client 51.77.216.62:48152] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acZvf2VSkmYmLu7ycYhJhQAAARY"]
[Fri Mar 27 19:52:33.960707 2026] [:error] [pid 4341:tid 4344] [client 51.77.216.62:59276] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "acZvgeKJWrNB5dMlERGcZQAAAYE"]
[Fri Mar 27 19:52:36.611508 2026] [:error] [pid 4293:tid 4295] [client 51.77.216.62:59290] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "acZvhJLjeJUC3OKtEx92wAAAAUA"]
[Fri Mar 27 19:52:39.470936 2026] [:error] [pid 4293:tid 4296] [client 51.77.216.62:59300] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "acZvh5LjeJUC3OKtEx92ygAAAUE"]
[Fri Mar 27 19:52:42.266607 2026] [:error] [pid 4293:tid 4312] [client 51.77.216.62:59310] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "acZvipLjeJUC3OKtEx921QAAAVE"]
[Fri Mar 27 19:52:44.834567 2026] [:error] [pid 4293:tid 4314] [client 51.77.216.62:59958] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "acZvjJLjeJUC3OKtEx923wAAAVM"]
[Fri Mar 27 19:52:47.584072 2026] [:error] [pid 4293:tid 4319] [client 51.77.216.62:59960] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "acZvj5LjeJUC3OKtEx93AQAAAVg"]
[Fri Mar 27 19:52:50.418524 2026] [:error] [pid 4293:tid 4315] [client 51.77.216.62:59966] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acZvkpLjeJUC3OKtEx93CgAAAVQ"]
[Fri Mar 27 19:52:53.281556 2026] [:error] [pid 27743:tid 27778] [client 51.77.216.62:55386] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "acZvlSA46UYYLqzw99DZbQAAAA4"]
[Fri Mar 27 19:52:55.910024 2026] [:error] [pid 27749:tid 27809] [client 51.77.216.62:55398] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "acZvl8EqyoMni2Q6_X7vFQAAAFI"]
[Fri Mar 27 19:52:59.155246 2026] [:error] [pid 27743:tid 27780] [client 51.77.216.62:55404] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acZvmyA46UYYLqzw99DZeQAAABA"]
[Fri Mar 27 19:53:36.583931 2026] [:error] [pid 4341:tid 4363] [client 51.77.216.62:55414] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "acZvwOKJWrNB5dMlERGcogAAAZQ"]
[Fri Mar 27 19:53:39.633738 2026] [:error] [pid 27743:tid 27776] [client 51.77.216.62:53558] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "acZvwyA46UYYLqzw99DZsgAAAAw"]
[Fri Mar 27 19:53:42.151670 2026] [:error] [pid 4293:tid 4307] [client 51.77.216.62:53570] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "acZvxpLjeJUC3OKtEx93XQAAAUw"]
[Fri Mar 27 19:53:45.023579 2026] [:error] [pid 27750:tid 27830] [client 51.77.216.62:56004] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acZvyYaSil5rd17ieLztvQAAAIw"]
[Fri Mar 27 19:53:47.493538 2026] [:error] [pid 27750:tid 27827] [client 51.77.216.62:56020] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "acZvy4aSil5rd17ieLztxQAAAIk"]
[Fri Mar 27 19:53:49.760149 2026] [:error] [pid 4293:tid 4296] [client 51.77.216.62:56032] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "acZvzZLjeJUC3OKtEx93ZQAAAUE"]
[Fri Mar 27 19:53:52.306028 2026] [:error] [pid 27749:tid 27798] [client 51.77.216.62:56036] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acZv0MEqyoMni2Q6_X7vPAAAAEc"]
[Fri Mar 27 19:53:55.197321 2026] [:error] [pid 4341:tid 4349] [client 51.77.216.62:60126] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acZv0-KJWrNB5dMlERGczgAAAYY"]
[Fri Mar 27 19:53:57.910549 2026] [:error] [pid 4341:tid 4348] [client 51.77.216.62:60132] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "acZv1eKJWrNB5dMlERGc2AAAAYU"]
[Fri Mar 27 19:54:00.535167 2026] [:error] [pid 4293:tid 4301] [client 51.77.216.62:60146] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "acZv2JLjeJUC3OKtEx93hgAAAUY"]
[Fri Mar 27 19:54:03.131842 2026] [:error] [pid 4293:tid 4313] [client 51.77.216.62:54740] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "acZv25LjeJUC3OKtEx93kQAAAVI"]
[Fri Mar 27 19:54:05.780493 2026] [:error] [pid 63897:tid 63908] [client 51.77.216.62:54742] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acZv3WVSkmYmLu7ycYhJzwAAAQk"]
[Fri Mar 27 19:54:08.299486 2026] [:error] [pid 4293:tid 4296] [client 51.77.216.62:54754] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "acZv4JLjeJUC3OKtEx93qAAAAUE"]
[Fri Mar 27 19:54:10.806055 2026] [:error] [pid 27851:tid 27873] [client 51.77.216.62:54764] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acZv4nR2ccxe3RMCLbrrqQAAAM8"]
[Fri Mar 27 19:56:56.200989 2026] [:error] [pid 63897:tid 63900] [client 50.87.144.66:18106] [client 50.87.144.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.66, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acZwiGVSkmYmLu7ycYhKtQAAAQE"]
[Fri Mar 27 19:56:57.535937 2026] [:error] [pid 63897:tid 63908] [client 50.87.144.66:18106] [client 50.87.144.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.87.144.66, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acZwiWVSkmYmLu7ycYhKuAAAAQk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 27 20:31:14.966967 2026] [:error] [pid 63897:tid 63899] [client 170.106.192.208:50362] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acZ4kmVSkmYmLu7ycYhUtAAAAQA"]
[Fri Mar 27 21:54:55.546359 2026] [:error] [pid 27749:tid 27800] [client 50.6.160.38:17988] [client 50.6.160.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.160.38, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acaML8EqyoMni2Q6_X4FvgAAAEk"]
[Fri Mar 27 21:54:56.731228 2026] [:error] [pid 27749:tid 27799] [client 50.6.160.38:17988] [client 50.6.160.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.160.38, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acaMMMEqyoMni2Q6_X4FwAAAAEg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 27 22:57:39.832337 2026] [:error] [pid 27749:tid 27813] [client 162.241.219.50:14634] [client 162.241.219.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.219.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acaa48EqyoMni2Q6_X4d5AAAAFY"]
[Fri Mar 27 22:57:41.105174 2026] [:error] [pid 27749:tid 27807] [client 162.241.219.50:14634] [client 162.241.219.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.219.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acaa5cEqyoMni2Q6_X4d5QAAAFA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Mar 27 23:07:35.131458 2026] [:error] [pid 54663:tid 54677] [client 103.240.232.193:64382] [client 103.240.232.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.240.232.193, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acadNxUtStIXFk9WHe3kuwAAAcs"]
[Fri Mar 27 23:12:59.593870 2026] [:error] [pid 27851:tid 27860] [client 103.240.232.193:64068] [client 103.240.232.193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acaee3R2ccxe3RMCLbogCgAAAMI"]
[Fri Mar 27 23:17:49.077078 2026] [:error] [pid 4293:tid 4314] [client 43.157.95.239:41346] [client 43.157.95.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acafnZLjeJUC3OKtEx_F7gAAAVM"]
[Sat Mar 28 01:35:17.800927 2026] [:error] [pid 11768:tid 11781] [client 103.18.34.247:55842] [client 103.18.34.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.18.34.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aca_1cLK0swIwlw7rFa7MQAAAQk"]
[Sat Mar 28 01:35:43.634128 2026] [:error] [pid 11325:tid 11762] [client 66.92.143.16:34006] [client 66.92.143.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.92.143.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aca_749aMci1IHcmG6L0HAAAANU"]
[Sat Mar 28 01:47:31.631417 2026] [:error] [pid 11768:tid 11783] [client 103.18.34.247:63278] [client 103.18.34.247] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acbCs8LK0swIwlw7rFbBuwAAAQs"]
[Sat Mar 28 01:48:34.690785 2026] [:error] [pid 11323:tid 11684] [client 103.18.34.247:10381] [client 103.18.34.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.18.34.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acbC8hruG7-TT-rIgF_z8AAAAAQ"]
[Sat Mar 28 03:27:33.921012 2026] [:error] [pid 11325:tid 11745] [client 221.229.106.25:36080] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acbaJY9aMci1IHcmG6IYGwAAAMQ"]
[Sat Mar 28 04:44:17.264162 2026] [:error] [pid 64966:tid 64991] [client 217.182.194.16:56848] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acbsIdfSvF5AFfSuKxXjDgAAANI"]
[Sat Mar 28 04:44:19.723678 2026] [:error] [pid 64966:tid 64987] [client 217.182.194.16:44482] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "acbsI9fSvF5AFfSuKxXjEAAAAM4"]
[Sat Mar 28 04:44:22.138165 2026] [:error] [pid 64859:tid 64895] [client 217.182.194.16:44492] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "acbsJm3qEBHXq3rHdBmMWgAAAA4"]
[Sat Mar 28 04:44:24.671473 2026] [:error] [pid 64859:tid 64896] [client 217.182.194.16:44496] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acbsKG3qEBHXq3rHdBmMbgAAAA8"]
[Sat Mar 28 04:44:27.166707 2026] [:error] [pid 64859:tid 64893] [client 217.182.194.16:44510] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acbsK23qEBHXq3rHdBmMiQAAAAw"]
[Sat Mar 28 04:44:29.697479 2026] [:error] [pid 2877:tid 2890] [client 217.182.194.16:59506] [client 217.182.194.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acbsLbgM4xL1Xj409YTIrwAAAQs"]
[Sat Mar 28 04:45:33.818985 2026] [:error] [pid 34597:tid 34620] [client 51.75.119.173:39304] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acbsbYluI7-e5s1caff8HAAAAVM"]
[Sat Mar 28 04:45:36.249854 2026] [:error] [pid 64859:tid 64893] [client 51.75.119.173:58014] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acbscG3qEBHXq3rHdBmM9AAAAAw"]
[Sat Mar 28 04:45:38.720069 2026] [:error] [pid 64859:tid 64894] [client 51.75.119.173:41640] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acbscm3qEBHXq3rHdBmM9gAAAA0"]
[Sat Mar 28 04:45:41.162908 2026] [:error] [pid 2877:tid 2879] [client 51.75.119.173:41650] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acbsdbgM4xL1Xj409YTJHwAAAQA"]
[Sat Mar 28 04:45:43.628955 2026] [:error] [pid 2877:tid 2897] [client 51.75.119.173:41654] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acbsd7gM4xL1Xj409YTJIgAAARI"]
[Sat Mar 28 04:45:45.930990 2026] [:error] [pid 64966:tid 64982] [client 51.75.119.173:41658] [client 51.75.119.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acbsedfSvF5AFfSuKxXjngAAAMk"]
[Sat Mar 28 05:09:43.544345 2026] [:error] [pid 34631:tid 34661] [client 43.153.119.119:57498] [client 43.153.119.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acbyFztzjMMS6kojpeQDcQAAAcE"]
[Sat Mar 28 05:56:10.832014 2026] [:error] [pid 64860:tid 64913] [client 68.183.235.102:56646] [client 68.183.235.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.235.102, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acb8-hkU3N0pg_4aEL-nCgAAAEU"]
[Sat Mar 28 05:56:12.056311 2026] [:error] [pid 64860:tid 64930] [client 68.183.235.102:56646] [client 68.183.235.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.235.102, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acb8_BkU3N0pg_4aEL-nFAAAAFY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 28 07:13:05.050612 2026] [:error] [pid 34631:tid 34681] [client 20.220.13.237:62864] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "accPATtzjMMS6kojpeQocgAAAdU"]
[Sat Mar 28 07:13:06.470159 2026] [:error] [pid 34597:tid 34621] [client 20.220.13.237:62866] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "accPAoluI7-e5s1cafcbqQAAAVQ"]
[Sat Mar 28 07:13:07.895986 2026] [:error] [pid 64966:tid 64987] [client 20.220.13.237:62895] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "accPA9fSvF5AFfSuKxX1NwAAAM4"]
[Sat Mar 28 07:13:09.315116 2026] [:error] [pid 43579:tid 43628] [client 20.220.13.237:62945] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "accPBSRqN4JVI8gB7AmNSgAAApQ"]
[Sat Mar 28 07:13:10.736615 2026] [:error] [pid 43578:tid 43590] [client 20.220.13.237:62938] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "accPBnNG2YdGm41aN8LdnAAAAkk"]
[Sat Mar 28 07:13:12.183854 2026] [:error] [pid 34631:tid 34673] [client 20.220.13.237:62069] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "accPCDtzjMMS6kojpeQofQAAAc0"]
[Sat Mar 28 07:13:13.618660 2026] [:error] [pid 64860:tid 64921] [client 20.220.13.237:62964] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "accPCRkU3N0pg_4aEL_M2gAAAE0"]
[Sat Mar 28 07:13:15.046091 2026] [:error] [pid 34631:tid 34680] [client 20.220.13.237:62922] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "accPCztzjMMS6kojpeQogQAAAdQ"]
[Sat Mar 28 07:13:16.489254 2026] [:error] [pid 43579:tid 43631] [client 20.220.13.237:62963] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "accPDCRqN4JVI8gB7AmNVwAAApc"]
[Sat Mar 28 07:13:17.912437 2026] [:error] [pid 43579:tid 43627] [client 20.220.13.237:62936] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "accPDSRqN4JVI8gB7AmNWQAAApM"]
[Sat Mar 28 07:13:19.339123 2026] [:error] [pid 64861:tid 64943] [client 20.220.13.237:62943] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "accPD-xK22_lUN2kvnVbeAAAAIg"]
[Sat Mar 28 07:13:20.773078 2026] [:error] [pid 64859:tid 64895] [client 20.220.13.237:62948] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "accPEG3qEBHXq3rHdBmrFgAAAA4"]
[Sat Mar 28 07:13:22.191575 2026] [:error] [pid 34631:tid 34662] [client 20.220.13.237:62969] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "accPEjtzjMMS6kojpeQolgAAAcI"]
[Sat Mar 28 07:13:23.608838 2026] [:error] [pid 64861:tid 64945] [client 20.220.13.237:62873] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "accPE-xK22_lUN2kvnVbfAAAAIo"]
[Sat Mar 28 07:13:25.058154 2026] [:error] [pid 64861:tid 64955] [client 20.220.13.237:62878] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "accPFexK22_lUN2kvnVbhAAAAJQ"]
[Sat Mar 28 07:13:26.476222 2026] [:error] [pid 64860:tid 64922] [client 20.220.13.237:62966] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "accPFhkU3N0pg_4aEL_M8gAAAE4"]
[Sat Mar 28 07:13:27.899670 2026] [:error] [pid 34631:tid 34671] [client 20.220.13.237:62853] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "accPFztzjMMS6kojpeQoqgAAAcs"]
[Sat Mar 28 07:13:29.320669 2026] [:error] [pid 43578:tid 43603] [client 20.220.13.237:62861] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "accPGXNG2YdGm41aN8LdrwAAAlY"]
[Sat Mar 28 07:13:30.742957 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:62935] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "accPGhkU3N0pg_4aEL_NAgAAAEA"]
[Sat Mar 28 07:13:32.181866 2026] [:error] [pid 34631:tid 34684] [client 20.220.13.237:62890] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "accPHDtzjMMS6kojpeQoswAAAdg"]
[Sat Mar 28 07:13:33.603420 2026] [:error] [pid 64861:tid 64950] [client 20.220.13.237:62908] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zz8.php"] [unique_id "accPHexK22_lUN2kvnVbkQAAAI8"]
[Sat Mar 28 07:13:35.024873 2026] [:error] [pid 64861:tid 64940] [client 20.220.13.237:62863] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zz8.php"] [unique_id "accPH-xK22_lUN2kvnVblAAAAIU"]
[Sat Mar 28 07:13:36.452076 2026] [:error] [pid 64861:tid 64953] [client 20.220.13.237:62885] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zz8.php"] [unique_id "accPIOxK22_lUN2kvnVblgAAAJI"]
[Sat Mar 28 07:13:37.870767 2026] [:error] [pid 34597:tid 34608] [client 20.220.13.237:62974] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zz8.php"] [unique_id "accPIYluI7-e5s1cafcbwwAAAUc"]
[Sat Mar 28 07:13:39.294324 2026] [:error] [pid 64859:tid 64886] [client 20.220.13.237:62850] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "accPI23qEBHXq3rHdBmrIQAAAAU"]
[Sat Mar 28 07:13:40.719731 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:62942] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "accPJBkU3N0pg_4aEL_NFgAAAEA"]
[Sat Mar 28 07:13:42.135418 2026] [:error] [pid 64860:tid 64913] [client 20.220.13.237:62972] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "accPJhkU3N0pg_4aEL_NHgAAAEU"]
[Sat Mar 28 07:13:43.558409 2026] [:error] [pid 43579:tid 43622] [client 20.220.13.237:62954] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "accPJyRqN4JVI8gB7AmNZwAAAo4"]
[Sat Mar 28 07:13:44.992519 2026] [:error] [pid 64861:tid 64956] [client 20.220.13.237:62871] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "accPKOxK22_lUN2kvnVbowAAAJU"]
[Sat Mar 28 07:13:46.421491 2026] [:error] [pid 34631:tid 34683] [client 20.220.13.237:62953] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "accPKjtzjMMS6kojpeQoygAAAdc"]
[Sat Mar 28 07:13:47.847943 2026] [:error] [pid 34631:tid 34671] [client 20.220.13.237:62961] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "accPKztzjMMS6kojpeQozQAAAcs"]
[Sat Mar 28 07:13:49.283864 2026] [:error] [pid 43579:tid 43611] [client 20.220.13.237:62024] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "accPLSRqN4JVI8gB7AmNcwAAAoM"]
[Sat Mar 28 07:13:50.704087 2026] [:error] [pid 64859:tid 64891] [client 20.220.13.237:62884] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpmini.php"] [unique_id "accPLm3qEBHXq3rHdBmrKAAAAAo"]
[Sat Mar 28 07:13:52.131227 2026] [:error] [pid 64861:tid 64948] [client 20.220.13.237:62962] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpmini.php"] [unique_id "accPMOxK22_lUN2kvnVbpwAAAI0"]
[Sat Mar 28 07:13:53.549472 2026] [:error] [pid 64861:tid 64935] [client 20.220.13.237:62956] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpmini.php"] [unique_id "accPMexK22_lUN2kvnVbqAAAAIA"]
[Sat Mar 28 07:13:55.000591 2026] [:error] [pid 43578:tid 43598] [client 20.220.13.237:62971] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpmini.php"] [unique_id "accPMnNG2YdGm41aN8LdtwAAAlE"]
[Sat Mar 28 07:13:56.449906 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:62894] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "accPNBkU3N0pg_4aEL_NPwAAAEA"]
[Sat Mar 28 07:13:57.881940 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:62872] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "accPNRkU3N0pg_4aEL_NSAAAAEQ"]
[Sat Mar 28 07:13:59.331008 2026] [:error] [pid 64861:tid 64942] [client 20.220.13.237:62939] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "accPN-xK22_lUN2kvnVbswAAAIc"]
[Sat Mar 28 07:14:00.759924 2026] [:error] [pid 64861:tid 64943] [client 20.220.13.237:62030] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "accPOOxK22_lUN2kvnVbtwAAAIg"]
[Sat Mar 28 07:14:02.176032 2026] [:error] [pid 64860:tid 64924] [client 20.220.13.237:62920] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tbute.php"] [unique_id "accPOhkU3N0pg_4aEL_NWQAAAFA"]
[Sat Mar 28 07:14:19.577157 2026] [:error] [pid 64860:tid 64924] [client 20.220.13.237:62930] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "accPSxkU3N0pg_4aEL_NgwAAAFA"]
[Sat Mar 28 07:14:21.003570 2026] [:error] [pid 64859:tid 64898] [client 20.220.13.237:62888] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "accPTW3qEBHXq3rHdBmrMwAAABE"]
[Sat Mar 28 07:14:22.445290 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:62952] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "accPThkU3N0pg_4aEL_NiwAAAEA"]
[Sat Mar 28 07:14:23.857539 2026] [:error] [pid 43578:tid 43592] [client 20.220.13.237:62965] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "accPT3NG2YdGm41aN8LdywAAAks"]
[Sat Mar 28 07:14:25.281874 2026] [:error] [pid 43578:tid 43588] [client 20.220.13.237:62923] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "accPUXNG2YdGm41aN8Ld0AAAAkc"]
[Sat Mar 28 07:14:26.703185 2026] [:error] [pid 43578:tid 43587] [client 20.220.13.237:62892] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "accPUnNG2YdGm41aN8Ld0wAAAkY"]
[Sat Mar 28 07:14:28.116616 2026] [:error] [pid 64860:tid 64927] [client 20.220.13.237:62879] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "accPVBkU3N0pg_4aEL_NngAAAFM"]
[Sat Mar 28 07:14:29.552567 2026] [:error] [pid 64966:tid 64979] [client 20.220.13.237:62061] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "accPVdfSvF5AFfSuKxX1XAAAAMY"]
[Sat Mar 28 07:14:30.985023 2026] [:error] [pid 43547:tid 43550] [client 20.220.13.237:62848] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "accPVj4ZEfdetXP-9aCxBwAAAgE"]
[Sat Mar 28 07:14:32.406566 2026] [:error] [pid 43579:tid 43629] [client 20.220.13.237:62865] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "accPWCRqN4JVI8gB7AmNhQAAApU"]
[Sat Mar 28 07:14:33.835649 2026] [:error] [pid 43579:tid 43626] [client 20.220.13.237:62975] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "accPWSRqN4JVI8gB7AmNhwAAApI"]
[Sat Mar 28 07:14:35.258462 2026] [:error] [pid 43579:tid 43624] [client 20.220.13.237:62051] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "accPWyRqN4JVI8gB7AmNigAAApA"]
[Sat Mar 28 07:14:36.705764 2026] [:error] [pid 64860:tid 64930] [client 20.220.13.237:62968] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws79.php"] [unique_id "accPXBkU3N0pg_4aEL_NqgAAAFY"]
[Sat Mar 28 07:14:38.134855 2026] [:error] [pid 64860:tid 64923] [client 20.220.13.237:62862] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws79.php"] [unique_id "accPXhkU3N0pg_4aEL_NsAAAAE8"]
[Sat Mar 28 07:14:39.566188 2026] [:error] [pid 34597:tid 34617] [client 20.220.13.237:62925] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws79.php"] [unique_id "accPX4luI7-e5s1cafcb_wAAAVA"]
[Sat Mar 28 07:14:40.981896 2026] [:error] [pid 2877:tid 2883] [client 20.220.13.237:62919] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws79.php"] [unique_id "accPYLgM4xL1Xj409YTbZQAAAQQ"]
[Sat Mar 28 07:14:42.396145 2026] [:error] [pid 64966:tid 64981] [client 20.220.13.237:62967] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "accPYtfSvF5AFfSuKxX1aQAAAMg"]
[Sat Mar 28 07:14:43.822155 2026] [:error] [pid 64859:tid 64888] [client 20.220.13.237:62927] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "accPY23qEBHXq3rHdBmrSAAAAAc"]
[Sat Mar 28 07:14:45.248885 2026] [:error] [pid 2877:tid 2893] [client 20.220.13.237:62078] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "accPZbgM4xL1Xj409YTbZwAAAQ4"]
[Sat Mar 28 07:14:46.686443 2026] [:error] [pid 64860:tid 64916] [client 20.220.13.237:62934] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "accPZhkU3N0pg_4aEL_NxwAAAEg"]
[Sat Mar 28 07:14:48.103687 2026] [:error] [pid 64860:tid 64910] [client 20.220.13.237:62049] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws50.php"] [unique_id "accPaBkU3N0pg_4aEL_NywAAAEI"]
[Sat Mar 28 07:14:49.523542 2026] [:error] [pid 64966:tid 64980] [client 20.220.13.237:62896] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws50.php"] [unique_id "accPadfSvF5AFfSuKxX1bgAAAMc"]
[Sat Mar 28 07:14:50.940600 2026] [:error] [pid 43579:tid 43609] [client 20.220.13.237:61957] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws50.php"] [unique_id "accPaiRqN4JVI8gB7AmNkgAAAoE"]
[Sat Mar 28 07:14:52.381372 2026] [:error] [pid 64859:tid 64884] [client 20.220.13.237:62917] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws50.php"] [unique_id "accPbG3qEBHXq3rHdBmrSwAAAAM"]
[Sat Mar 28 07:14:53.816404 2026] [:error] [pid 64861:tid 64948] [client 20.220.13.237:62038] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws44.php"] [unique_id "accPbexK22_lUN2kvnVb3wAAAI0"]
[Sat Mar 28 07:14:55.228128 2026] [:error] [pid 64860:tid 64926] [client 20.220.13.237:62858] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws44.php"] [unique_id "accPbxkU3N0pg_4aEL_N3gAAAFI"]
[Sat Mar 28 07:14:56.650780 2026] [:error] [pid 64861:tid 64959] [client 20.220.13.237:62023] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws44.php"] [unique_id "accPcOxK22_lUN2kvnVb7gAAAJg"]
[Sat Mar 28 07:14:58.089720 2026] [:error] [pid 34631:tid 34662] [client 20.220.13.237:62867] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws44.php"] [unique_id "accPcjtzjMMS6kojpeQpFgAAAcI"]
[Sat Mar 28 07:14:59.518408 2026] [:error] [pid 43579:tid 43611] [client 20.220.13.237:62870] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws43.php"] [unique_id "accPcyRqN4JVI8gB7AmNlgAAAoM"]
[Sat Mar 28 07:15:00.934392 2026] [:error] [pid 64861:tid 64951] [client 20.220.13.237:62852] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws43.php"] [unique_id "accPdOxK22_lUN2kvnVb_QAAAJA"]
[Sat Mar 28 07:15:02.361107 2026] [:error] [pid 64861:tid 64936] [client 20.220.13.237:62855] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws43.php"] [unique_id "accPduxK22_lUN2kvnVcBQAAAIE"]
[Sat Mar 28 07:15:03.778094 2026] [:error] [pid 34597:tid 34603] [client 20.220.13.237:62909] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws43.php"] [unique_id "accPd4luI7-e5s1cafccFwAAAUI"]
[Sat Mar 28 07:15:05.208162 2026] [:error] [pid 34631:tid 34679] [client 20.220.13.237:62944] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws42.php"] [unique_id "accPeTtzjMMS6kojpeQpJQAAAdM"]
[Sat Mar 28 07:15:06.632970 2026] [:error] [pid 64861:tid 64940] [client 20.220.13.237:62859] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws42.php"] [unique_id "accPeuxK22_lUN2kvnVcFgAAAIU"]
[Sat Mar 28 07:15:08.062477 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:62970] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws42.php"] [unique_id "accPfBkU3N0pg_4aEL_N7QAAAEE"]
[Sat Mar 28 07:15:09.513434 2026] [:error] [pid 64860:tid 64911] [client 20.220.13.237:62973] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws42.php"] [unique_id "accPfRkU3N0pg_4aEL_N9AAAAEM"]
[Sat Mar 28 07:15:10.943825 2026] [:error] [pid 64861:tid 64948] [client 20.220.13.237:62887] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws40.php"] [unique_id "accPfuxK22_lUN2kvnVcJgAAAI0"]
[Sat Mar 28 07:15:12.359550 2026] [:error] [pid 64860:tid 64922] [client 20.220.13.237:62931] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws40.php"] [unique_id "accPgBkU3N0pg_4aEL_N_gAAAE4"]
[Sat Mar 28 07:15:13.828786 2026] [:error] [pid 34631:tid 34662] [client 20.220.13.237:62070] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws40.php"] [unique_id "accPgTtzjMMS6kojpeQpMQAAAcI"]
[Sat Mar 28 07:15:15.246306 2026] [:error] [pid 64861:tid 64937] [client 20.220.13.237:62874] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws40.php"] [unique_id "accPg-xK22_lUN2kvnVcKwAAAII"]
[Sat Mar 28 07:15:16.668299 2026] [:error] [pid 64861:tid 64940] [client 20.220.13.237:62869] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws36.php"] [unique_id "accPhOxK22_lUN2kvnVcMgAAAIU"]
[Sat Mar 28 07:15:34.041935 2026] [:error] [pid 43579:tid 43617] [client 20.220.13.237:61968] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "accPliRqN4JVI8gB7AmNuQAAAok"]
[Sat Mar 28 07:15:35.466096 2026] [:error] [pid 64861:tid 64939] [client 20.220.13.237:62955] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "accPl-xK22_lUN2kvnVcawAAAIQ"]
[Sat Mar 28 07:15:36.886060 2026] [:error] [pid 34631:tid 34679] [client 20.220.13.237:62025] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "accPmDtzjMMS6kojpeQpRAAAAdM"]
[Sat Mar 28 07:15:38.320714 2026] [:error] [pid 43579:tid 43615] [client 20.220.13.237:62039] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "accPmiRqN4JVI8gB7AmNuwAAAoc"]
[Sat Mar 28 07:15:39.745196 2026] [:error] [pid 64861:tid 64939] [client 20.220.13.237:62875] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "accPm-xK22_lUN2kvnVccgAAAIQ"]
[Sat Mar 28 07:15:41.173881 2026] [:error] [pid 34597:tid 34606] [client 20.220.13.237:62899] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "accPnYluI7-e5s1cafccKAAAAUU"]
[Sat Mar 28 07:15:42.593542 2026] [:error] [pid 43547:tid 43561] [client 20.220.13.237:62059] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "accPnj4ZEfdetXP-9aCxIwAAAgw"]
[Sat Mar 28 07:15:44.015170 2026] [:error] [pid 64966:tid 64975] [client 20.220.13.237:61973] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "accPoNfSvF5AFfSuKxX1ewAAAMI"]
[Sat Mar 28 07:15:45.432893 2026] [:error] [pid 43547:tid 43554] [client 20.220.13.237:62052] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roter.php"] [unique_id "accPoT4ZEfdetXP-9aCxJgAAAgU"]
[Sat Mar 28 07:15:46.865240 2026] [:error] [pid 64859:tid 64904] [client 20.220.13.237:62906] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roter.php"] [unique_id "accPom3qEBHXq3rHdBmrWwAAABc"]
[Sat Mar 28 07:15:48.284344 2026] [:error] [pid 64859:tid 64888] [client 20.220.13.237:62856] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roter.php"] [unique_id "accPpG3qEBHXq3rHdBmrXgAAAAc"]
[Sat Mar 28 07:15:49.712850 2026] [:error] [pid 64860:tid 64929] [client 20.220.13.237:62907] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roter.php"] [unique_id "accPpRkU3N0pg_4aEL_OWQAAAFU"]
[Sat Mar 28 07:15:51.125178 2026] [:error] [pid 64966:tid 64980] [client 20.220.13.237:62036] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "accPp9fSvF5AFfSuKxX1ggAAAMc"]
[Sat Mar 28 07:15:52.552264 2026] [:error] [pid 43578:tid 43589] [client 20.220.13.237:62883] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "accPqHNG2YdGm41aN8LeCAAAAkg"]
[Sat Mar 28 07:15:53.969145 2026] [:error] [pid 64859:tid 64903] [client 20.220.13.237:62915] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "accPqW3qEBHXq3rHdBmrZAAAABY"]
[Sat Mar 28 07:15:55.406515 2026] [:error] [pid 64861:tid 64953] [client 20.220.13.237:62881] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "accPq-xK22_lUN2kvnVchgAAAJI"]
[Sat Mar 28 07:15:56.819532 2026] [:error] [pid 64861:tid 64940] [client 20.220.13.237:62918] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/save.php"] [unique_id "accPrOxK22_lUN2kvnVcjAAAAIU"]
[Sat Mar 28 07:15:58.239868 2026] [:error] [pid 64861:tid 64946] [client 20.220.13.237:62848] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/save.php"] [unique_id "accPruxK22_lUN2kvnVcmQAAAIs"]
[Sat Mar 28 07:15:59.679935 2026] [:error] [pid 64860:tid 64911] [client 20.220.13.237:62960] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/save.php"] [unique_id "accPrxkU3N0pg_4aEL_OXgAAAEM"]
[Sat Mar 28 07:16:01.095521 2026] [:error] [pid 64860:tid 64918] [client 20.220.13.237:62022] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/save.php"] [unique_id "accPsRkU3N0pg_4aEL_OYAAAAEo"]
[Sat Mar 28 07:16:02.527007 2026] [:error] [pid 43578:tid 43582] [client 20.220.13.237:62000] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "accPsnNG2YdGm41aN8LeCwAAAkE"]
[Sat Mar 28 07:16:03.957108 2026] [:error] [pid 2877:tid 2890] [client 20.220.13.237:62076] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "accPs7gM4xL1Xj409YTbeQAAAQs"]
[Sat Mar 28 07:16:05.370838 2026] [:error] [pid 34631:tid 34664] [client 20.220.13.237:62032] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "accPtTtzjMMS6kojpeQpYAAAAcQ"]
[Sat Mar 28 07:16:06.806455 2026] [:error] [pid 64966:tid 64977] [client 20.220.13.237:61971] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "accPttfSvF5AFfSuKxX1iAAAAMQ"]
[Sat Mar 28 07:16:08.224159 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:62058] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n1GiO.php"] [unique_id "accPuBkU3N0pg_4aEL_OdAAAAEA"]
[Sat Mar 28 07:16:09.651099 2026] [:error] [pid 64860:tid 64915] [client 20.220.13.237:62027] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n1GiO.php"] [unique_id "accPuRkU3N0pg_4aEL_OewAAAEc"]
[Sat Mar 28 07:16:11.067869 2026] [:error] [pid 64860:tid 64911] [client 20.220.13.237:62904] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n1GiO.php"] [unique_id "accPuxkU3N0pg_4aEL_OgAAAAEM"]
[Sat Mar 28 07:16:12.480546 2026] [:error] [pid 43578:tid 43586] [client 20.220.13.237:62043] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n1GiO.php"] [unique_id "accPvHNG2YdGm41aN8LeEgAAAkU"]
[Sat Mar 28 07:16:13.906263 2026] [:error] [pid 64861:tid 64936] [client 20.220.13.237:62050] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pLdK1.php"] [unique_id "accPvexK22_lUN2kvnVcpwAAAIE"]
[Sat Mar 28 07:16:15.319925 2026] [:error] [pid 64860:tid 64916] [client 20.220.13.237:62924] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pLdK1.php"] [unique_id "accPvxkU3N0pg_4aEL_OhAAAAEg"]
[Sat Mar 28 07:16:16.741307 2026] [:error] [pid 64860:tid 64913] [client 20.220.13.237:62062] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pLdK1.php"] [unique_id "accPwBkU3N0pg_4aEL_OhQAAAEU"]
[Sat Mar 28 07:16:18.165744 2026] [:error] [pid 64861:tid 64954] [client 20.220.13.237:62849] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pLdK1.php"] [unique_id "accPwuxK22_lUN2kvnVcsgAAAJM"]
[Sat Mar 28 07:16:19.579820 2026] [:error] [pid 64860:tid 64924] [client 20.220.13.237:62898] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/llb1J.php"] [unique_id "accPwxkU3N0pg_4aEL_OlQAAAFA"]
[Sat Mar 28 07:16:21.016297 2026] [:error] [pid 34631:tid 34668] [client 20.220.13.237:61984] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/llb1J.php"] [unique_id "accPxTtzjMMS6kojpeQpdwAAAcg"]
[Sat Mar 28 07:16:22.432163 2026] [:error] [pid 64861:tid 64953] [client 20.220.13.237:62002] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/llb1J.php"] [unique_id "accPxuxK22_lUN2kvnVcuwAAAJI"]
[Sat Mar 28 07:16:23.852253 2026] [:error] [pid 34597:tid 34606] [client 20.220.13.237:62868] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/llb1J.php"] [unique_id "accPx4luI7-e5s1cafccTQAAAUU"]
[Sat Mar 28 07:16:25.274734 2026] [:error] [pid 64859:tid 64885] [client 20.220.13.237:61954] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jeZDu.php"] [unique_id "accPyW3qEBHXq3rHdBmrawAAAAQ"]
[Sat Mar 28 07:16:26.727498 2026] [:error] [pid 64966:tid 64991] [client 20.220.13.237:62854] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jeZDu.php"] [unique_id "accPytfSvF5AFfSuKxX1kwAAANI"]
[Sat Mar 28 07:16:28.151919 2026] [:error] [pid 64859:tid 64881] [client 20.220.13.237:62019] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jeZDu.php"] [unique_id "accPzG3qEBHXq3rHdBmrcQAAAAA"]
[Sat Mar 28 07:16:29.577854 2026] [:error] [pid 43547:tid 43551] [client 20.220.13.237:62893] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jeZDu.php"] [unique_id "accPzT4ZEfdetXP-9aCxSQAAAgI"]
[Sat Mar 28 07:16:30.998785 2026] [:error] [pid 64860:tid 64930] [client 20.220.13.237:62031] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "accPzhkU3N0pg_4aEL_OqwAAAFY"]
[Sat Mar 28 07:16:47.663000 2026] [:error] [pid 34597:tid 34625] [client 20.220.13.237:62916] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "accP34luI7-e5s1cafcccAAAAVg"]
[Sat Mar 28 07:16:49.083051 2026] [:error] [pid 64860:tid 64915] [client 20.220.13.237:62876] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "accP4RkU3N0pg_4aEL_O2QAAAEc"]
[Sat Mar 28 07:16:50.496451 2026] [:error] [pid 64860:tid 64927] [client 20.220.13.237:62905] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "accP4hkU3N0pg_4aEL_O4wAAAFM"]
[Sat Mar 28 07:16:51.918164 2026] [:error] [pid 34631:tid 34680] [client 20.220.13.237:61974] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "accP4ztzjMMS6kojpeQprwAAAdQ"]
[Sat Mar 28 07:16:53.358080 2026] [:error] [pid 64860:tid 64910] [client 20.220.13.237:62949] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "accP5RkU3N0pg_4aEL_O7gAAAEI"]
[Sat Mar 28 07:16:54.772160 2026] [:error] [pid 64860:tid 64931] [client 20.220.13.237:62957] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "accP5hkU3N0pg_4aEL_O9QAAAFc"]
[Sat Mar 28 07:16:56.185775 2026] [:error] [pid 64860:tid 64913] [client 20.220.13.237:61956] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "accP6BkU3N0pg_4aEL_O_QAAAEU"]
[Sat Mar 28 07:16:57.602440 2026] [:error] [pid 34597:tid 34604] [client 20.220.13.237:62057] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ant.php"] [unique_id "accP6YluI7-e5s1cafcccwAAAUM"]
[Sat Mar 28 07:16:59.029106 2026] [:error] [pid 64860:tid 64913] [client 20.220.13.237:62020] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "accP6xkU3N0pg_4aEL_PDQAAAEU"]
[Sat Mar 28 07:17:00.445444 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:62857] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "accP7BkU3N0pg_4aEL_PEQAAAEQ"]
[Sat Mar 28 07:17:01.880766 2026] [:error] [pid 64861:tid 64937] [client 20.220.13.237:62017] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "accP7exK22_lUN2kvnVc3wAAAII"]
[Sat Mar 28 07:17:03.296412 2026] [:error] [pid 64860:tid 64921] [client 20.220.13.237:62034] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "accP7xkU3N0pg_4aEL_PJAAAAE0"]
[Sat Mar 28 07:17:04.717690 2026] [:error] [pid 64860:tid 64915] [client 20.220.13.237:61959] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc13.php"] [unique_id "accP8BkU3N0pg_4aEL_PMwAAAEc"]
[Sat Mar 28 07:17:06.138424 2026] [:error] [pid 64860:tid 64924] [client 20.220.13.237:62056] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc13.php"] [unique_id "accP8hkU3N0pg_4aEL_PWAAAAFA"]
[Sat Mar 28 07:17:07.547796 2026] [:error] [pid 64860:tid 64911] [client 20.220.13.237:61958] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc13.php"] [unique_id "accP8xkU3N0pg_4aEL_PXwAAAEM"]
[Sat Mar 28 07:17:08.959483 2026] [:error] [pid 64861:tid 64957] [client 20.220.13.237:61418] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc13.php"] [unique_id "accP9OxK22_lUN2kvnVdPQAAAJY"]
[Sat Mar 28 07:17:10.374546 2026] [:error] [pid 43578:tid 43598] [client 20.220.13.237:62880] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "accP9nNG2YdGm41aN8LeUgAAAlE"]
[Sat Mar 28 07:17:11.800040 2026] [:error] [pid 43579:tid 43608] [client 20.220.13.237:61990] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "accP9yRqN4JVI8gB7AmOMgAAAoA"]
[Sat Mar 28 07:17:13.221250 2026] [:error] [pid 64861:tid 64942] [client 20.220.13.237:62900] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "accP-exK22_lUN2kvnVdXQAAAIc"]
[Sat Mar 28 07:17:14.659767 2026] [:error] [pid 64861:tid 64954] [client 20.220.13.237:61969] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "accP-uxK22_lUN2kvnVdawAAAJM"]
[Sat Mar 28 07:17:16.084389 2026] [:error] [pid 64860:tid 64929] [client 20.220.13.237:61992] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "accP_BkU3N0pg_4aEL_PeQAAAFU"]
[Sat Mar 28 07:17:17.529522 2026] [:error] [pid 64859:tid 64902] [client 20.220.13.237:62946] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "accP_W3qEBHXq3rHdBmrhQAAABU"]
[Sat Mar 28 07:17:18.962920 2026] [:error] [pid 64861:tid 64937] [client 20.220.13.237:62912] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "accP_uxK22_lUN2kvnVdjgAAAII"]
[Sat Mar 28 07:17:20.402027 2026] [:error] [pid 64861:tid 64952] [client 20.220.13.237:61380] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "accQAOxK22_lUN2kvnVdlQAAAJE"]
[Sat Mar 28 07:17:21.824782 2026] [:error] [pid 34631:tid 34682] [client 20.220.13.237:62877] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "accQATtzjMMS6kojpeQp3wAAAdY"]
[Sat Mar 28 07:17:23.240152 2026] [:error] [pid 34597:tid 34607] [client 20.220.13.237:61409] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "accQA4luI7-e5s1cafccmQAAAUY"]
[Sat Mar 28 07:17:24.678115 2026] [:error] [pid 34631:tid 34672] [client 20.220.13.237:62901] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "accQBDtzjMMS6kojpeQp4gAAAcw"]
[Sat Mar 28 07:17:26.103964 2026] [:error] [pid 34631:tid 34665] [client 20.220.13.237:61998] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "accQBjtzjMMS6kojpeQp5QAAAcU"]
[Sat Mar 28 07:17:27.516779 2026] [:error] [pid 34631:tid 34675] [client 20.220.13.237:62064] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "accQBztzjMMS6kojpeQp6QAAAc8"]
[Sat Mar 28 07:17:28.935492 2026] [:error] [pid 64861:tid 64943] [client 20.220.13.237:62937] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "accQCOxK22_lUN2kvnVduwAAAIg"]
[Sat Mar 28 07:17:30.350729 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:62933] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "accQChkU3N0pg_4aEL_PnQAAAEA"]
[Sat Mar 28 07:17:31.768724 2026] [:error] [pid 34597:tid 34617] [client 20.220.13.237:62968] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "accQC4luI7-e5s1cafccoAAAAVA"]
[Sat Mar 28 07:17:33.199184 2026] [:error] [pid 34597:tid 34621] [client 20.220.13.237:61960] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/north1.php"] [unique_id "accQDYluI7-e5s1cafccqwAAAVQ"]
[Sat Mar 28 07:17:34.619624 2026] [:error] [pid 64860:tid 64913] [client 20.220.13.237:61976] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/north1.php"] [unique_id "accQDhkU3N0pg_4aEL_PswAAAEU"]
[Sat Mar 28 07:17:36.043150 2026] [:error] [pid 64860:tid 64923] [client 20.220.13.237:62958] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/north1.php"] [unique_id "accQEBkU3N0pg_4aEL_PugAAAE8"]
[Sat Mar 28 07:17:37.467320 2026] [:error] [pid 64860:tid 64922] [client 20.220.13.237:61390] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/north1.php"] [unique_id "accQERkU3N0pg_4aEL_PvwAAAE4"]
[Sat Mar 28 07:17:38.881496 2026] [:error] [pid 64861:tid 64940] [client 20.220.13.237:62928] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "accQEuxK22_lUN2kvnVd1QAAAIU"]
[Sat Mar 28 07:17:40.307751 2026] [:error] [pid 34597:tid 34625] [client 20.220.13.237:62861] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "accQFIluI7-e5s1cafcctAAAAVg"]
[Sat Mar 28 07:17:41.744594 2026] [:error] [pid 64860:tid 64920] [client 20.220.13.237:62040] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "accQFRkU3N0pg_4aEL_PzwAAAEw"]
[Sat Mar 28 07:17:43.173300 2026] [:error] [pid 34631:tid 34674] [client 20.220.13.237:62929] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "accQFztzjMMS6kojpeQqAAAAAc4"]
[Sat Mar 28 07:17:44.592388 2026] [:error] [pid 34631:tid 34679] [client 20.220.13.237:62048] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "accQGDtzjMMS6kojpeQqBwAAAdM"]
[Sat Mar 28 07:18:00.808112 2026] [:error] [pid 64861:tid 64948] [client 20.220.13.237:61988] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "accQKOxK22_lUN2kvnVeHgAAAI0"]
[Sat Mar 28 07:18:02.231571 2026] [:error] [pid 64966:tid 64982] [client 20.220.13.237:62945] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "accQKtfSvF5AFfSuKxX1rQAAAMk"]
[Sat Mar 28 07:18:03.648756 2026] [:error] [pid 43578:tid 43599] [client 20.220.13.237:61979] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "accQK3NG2YdGm41aN8LeagAAAlI"]
[Sat Mar 28 07:18:05.068882 2026] [:error] [pid 34597:tid 34617] [client 20.220.13.237:62863] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "accQLYluI7-e5s1cafccvwAAAVA"]
[Sat Mar 28 07:18:06.491543 2026] [:error] [pid 43578:tid 43590] [client 20.220.13.237:62890] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "accQLnNG2YdGm41aN8LebgAAAkk"]
[Sat Mar 28 07:18:07.921973 2026] [:error] [pid 34631:tid 34677] [client 20.220.13.237:62853] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "accQLztzjMMS6kojpeQqJwAAAdE"]
[Sat Mar 28 07:18:09.339668 2026] [:error] [pid 64860:tid 64921] [client 20.220.13.237:62864] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "accQMRkU3N0pg_4aEL_P6AAAAE0"]
[Sat Mar 28 07:18:10.757306 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:62903] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "accQMhkU3N0pg_4aEL_P9gAAAEA"]
[Sat Mar 28 07:18:12.189013 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:61424] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dtyh.php"] [unique_id "accQNBkU3N0pg_4aEL_P-wAAAEE"]
[Sat Mar 28 07:18:13.603013 2026] [:error] [pid 34631:tid 34672] [client 20.220.13.237:62913] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dtyh.php"] [unique_id "accQNTtzjMMS6kojpeQqOwAAAcw"]
[Sat Mar 28 07:18:15.029053 2026] [:error] [pid 34631:tid 34670] [client 20.220.13.237:62966] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dtyh.php"] [unique_id "accQNztzjMMS6kojpeQqSAAAAco"]
[Sat Mar 28 07:18:16.441043 2026] [:error] [pid 64860:tid 64923] [client 20.220.13.237:62054] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dtyh.php"] [unique_id "accQOBkU3N0pg_4aEL_P_wAAAE8"]
[Sat Mar 28 07:18:17.888489 2026] [:error] [pid 64861:tid 64936] [client 20.220.13.237:62891] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wta.php"] [unique_id "accQOexK22_lUN2kvnVeMwAAAIE"]
[Sat Mar 28 07:18:19.307598 2026] [:error] [pid 2877:tid 2892] [client 20.220.13.237:62851] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wta.php"] [unique_id "accQO7gM4xL1Xj409YTblgAAAQ0"]
[Sat Mar 28 07:18:20.728302 2026] [:error] [pid 43579:tid 43623] [client 20.220.13.237:62895] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wta.php"] [unique_id "accQPCRqN4JVI8gB7AmOawAAAo8"]
[Sat Mar 28 07:18:22.154905 2026] [:error] [pid 34597:tid 34602] [client 20.220.13.237:62921] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wta.php"] [unique_id "accQPoluI7-e5s1cafccyQAAAUE"]
[Sat Mar 28 07:18:23.576827 2026] [:error] [pid 34597:tid 34621] [client 20.220.13.237:62926] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "accQP4luI7-e5s1cafccywAAAVQ"]
[Sat Mar 28 07:18:24.997786 2026] [:error] [pid 34631:tid 34674] [client 20.220.13.237:62936] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "accQQDtzjMMS6kojpeQqgAAAAc4"]
[Sat Mar 28 07:18:26.424949 2026] [:error] [pid 64861:tid 64949] [client 20.220.13.237:61953] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "accQQuxK22_lUN2kvnVeQgAAAI4"]
[Sat Mar 28 07:18:27.850729 2026] [:error] [pid 64861:tid 64953] [client 20.220.13.237:62888] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "accQQ-xK22_lUN2kvnVeSwAAAJI"]
[Sat Mar 28 07:18:29.279955 2026] [:error] [pid 64861:tid 64950] [client 20.220.13.237:62930] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "accQRexK22_lUN2kvnVeUAAAAI8"]
[Sat Mar 28 07:18:30.710561 2026] [:error] [pid 43579:tid 43629] [client 20.220.13.237:61379] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "accQRiRqN4JVI8gB7AmOdAAAApU"]
[Sat Mar 28 07:18:32.128020 2026] [:error] [pid 64860:tid 64923] [client 20.220.13.237:61384] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "accQSBkU3N0pg_4aEL_QKQAAAE8"]
[Sat Mar 28 07:18:33.542850 2026] [:error] [pid 64861:tid 64943] [client 20.220.13.237:62954] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "accQSexK22_lUN2kvnVeWQAAAIg"]
[Sat Mar 28 07:18:34.975269 2026] [:error] [pid 34631:tid 34676] [client 20.220.13.237:62922] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "accQSjtzjMMS6kojpeQqswAAAdA"]
[Sat Mar 28 07:18:36.391788 2026] [:error] [pid 34597:tid 34605] [client 20.220.13.237:61423] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "accQTIluI7-e5s1cafcc2AAAAUQ"]
[Sat Mar 28 07:18:37.813992 2026] [:error] [pid 64860:tid 64932] [client 20.220.13.237:61383] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "accQTRkU3N0pg_4aEL_QSwAAAFg"]
[Sat Mar 28 07:18:39.236724 2026] [:error] [pid 64860:tid 64918] [client 20.220.13.237:62884] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "accQTxkU3N0pg_4aEL_QVwAAAEo"]
[Sat Mar 28 07:18:40.673939 2026] [:error] [pid 64861:tid 64955] [client 20.220.13.237:62956] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "accQUOxK22_lUN2kvnVeiAAAAJQ"]
[Sat Mar 28 07:18:42.097426 2026] [:error] [pid 34597:tid 34623] [client 20.220.13.237:62068] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "accQUoluI7-e5s1cafcc4wAAAVY"]
[Sat Mar 28 07:18:43.519897 2026] [:error] [pid 64861:tid 64949] [client 20.220.13.237:62860] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "accQU-xK22_lUN2kvnVenwAAAI4"]
[Sat Mar 28 07:18:44.971920 2026] [:error] [pid 64860:tid 64930] [client 20.220.13.237:62061] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "accQVBkU3N0pg_4aEL_QoAAAAFY"]
[Sat Mar 28 07:18:46.395913 2026] [:error] [pid 64860:tid 64915] [client 20.220.13.237:62041] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "accQVhkU3N0pg_4aEL_QwAAAAEc"]
[Sat Mar 28 07:18:47.814109 2026] [:error] [pid 34597:tid 34602] [client 20.220.13.237:62894] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "accQV4luI7-e5s1cafcdIAAAAUE"]
[Sat Mar 28 07:18:49.238338 2026] [:error] [pid 64860:tid 64925] [client 20.220.13.237:61980] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "accQWRkU3N0pg_4aEL_QzQAAAFE"]
[Sat Mar 28 07:18:50.669795 2026] [:error] [pid 64860:tid 64912] [client 20.220.13.237:61439] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "accQWhkU3N0pg_4aEL_Q1gAAAEQ"]
[Sat Mar 28 07:18:52.087064 2026] [:error] [pid 64860:tid 64932] [client 20.220.13.237:62943] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "accQXBkU3N0pg_4aEL_Q3gAAAFg"]
[Sat Mar 28 07:18:53.505713 2026] [:error] [pid 64966:tid 64980] [client 20.220.13.237:62053] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "accQXdfSvF5AFfSuKxX1wgAAAMc"]
[Sat Mar 28 07:18:54.937177 2026] [:error] [pid 64860:tid 64909] [client 20.220.13.237:62042] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "accQXhkU3N0pg_4aEL_Q-AAAAEE"]
[Sat Mar 28 07:18:56.363401 2026] [:error] [pid 34631:tid 34667] [client 20.220.13.237:62004] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "accQYDtzjMMS6kojpeQq1AAAAcc"]
[Sat Mar 28 07:18:57.789504 2026] [:error] [pid 64861:tid 64955] [client 20.220.13.237:62947] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gpt-sh.php"] [unique_id "accQYexK22_lUN2kvnVe3QAAAJQ"]
[Sat Mar 28 07:19:15.638693 2026] [:error] [pid 34597:tid 34621] [client 20.220.13.237:62941] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "accQc4luI7-e5s1cafcdQAAAAVQ"]
[Sat Mar 28 07:19:17.059277 2026] [:error] [pid 64860:tid 64927] [client 20.220.13.237:62870] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "accQdRkU3N0pg_4aEL_ROQAAAFM"]
[Sat Mar 28 07:19:18.474882 2026] [:error] [pid 64860:tid 64928] [client 20.220.13.237:62967] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "accQdhkU3N0pg_4aEL_RQgAAAFQ"]
[Sat Mar 28 07:19:19.914274 2026] [:error] [pid 64860:tid 64918] [client 20.220.13.237:61962] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "accQdxkU3N0pg_4aEL_RSwAAAEo"]
[Sat Mar 28 07:19:21.332330 2026] [:error] [pid 64966:tid 64984] [client 20.220.13.237:62029] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accQedfSvF5AFfSuKxX11gAAAMs"]
[Sat Mar 28 07:19:22.757870 2026] [:error] [pid 64860:tid 64926] [client 20.220.13.237:62965] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accQehkU3N0pg_4aEL_RVwAAAFI"]
[Sat Mar 28 07:19:24.184838 2026] [:error] [pid 34597:tid 34602] [client 20.220.13.237:62074] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accQfIluI7-e5s1cafcdRAAAAUE"]
[Sat Mar 28 07:19:25.603944 2026] [:error] [pid 64861:tid 64955] [client 20.220.13.237:62950] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "accQfexK22_lUN2kvnVe-QAAAJQ"]
[Sat Mar 28 07:19:27.030325 2026] [:error] [pid 64861:tid 64939] [client 20.220.13.237:62971] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "accQf-xK22_lUN2kvnVfAgAAAIQ"]
[Sat Mar 28 07:19:28.452572 2026] [:error] [pid 64860:tid 64913] [client 20.220.13.237:62970] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "accQgBkU3N0pg_4aEL_RgwAAAEU"]
[Sat Mar 28 07:19:29.886621 2026] [:error] [pid 43579:tid 43615] [client 20.220.13.237:62932] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "accQgSRqN4JVI8gB7AmOpAAAAoc"]
[Sat Mar 28 07:19:31.316176 2026] [:error] [pid 64861:tid 64952] [client 20.220.13.237:62035] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "accQg-xK22_lUN2kvnVfGAAAAJE"]
[Sat Mar 28 07:19:32.731394 2026] [:error] [pid 64861:tid 64954] [client 20.220.13.237:62940] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "accQhOxK22_lUN2kvnVfJAAAAJM"]
[Sat Mar 28 07:19:34.150369 2026] [:error] [pid 64861:tid 64935] [client 20.220.13.237:62049] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "accQhuxK22_lUN2kvnVfLgAAAIA"]
[Sat Mar 28 07:19:35.573314 2026] [:error] [pid 64861:tid 64939] [client 20.220.13.237:62902] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "accQh-xK22_lUN2kvnVfNQAAAIQ"]
[Sat Mar 28 07:19:36.997041 2026] [:error] [pid 64860:tid 64911] [client 20.220.13.237:61413] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "accQiBkU3N0pg_4aEL_RtwAAAEM"]
[Sat Mar 28 07:19:38.420933 2026] [:error] [pid 64860:tid 64927] [client 20.220.13.237:62962] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "accQihkU3N0pg_4aEL_RzAAAAFM"]
[Sat Mar 28 07:19:39.841720 2026] [:error] [pid 64860:tid 64908] [client 20.220.13.237:62911] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "accQixkU3N0pg_4aEL_R3gAAAEA"]
[Sat Mar 28 07:19:41.255437 2026] [:error] [pid 64861:tid 64955] [client 20.220.13.237:62023] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "accQjexK22_lUN2kvnVfOQAAAJQ"]
[Sat Mar 28 07:19:42.674040 2026] [:error] [pid 64861:tid 64941] [client 20.220.13.237:62964] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "accQjuxK22_lUN2kvnVfOgAAAIY"]
[Sat Mar 28 07:19:44.092347 2026] [:error] [pid 34597:tid 34605] [client 20.220.13.237:62859] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "accQkIluI7-e5s1cafcdUwAAAUQ"]
[Sat Mar 28 07:19:45.511790 2026] [:error] [pid 64861:tid 64942] [client 20.220.13.237:61966] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "accQkexK22_lUN2kvnVfRwAAAIc"]
[Sat Mar 28 07:19:46.941324 2026] [:error] [pid 64861:tid 64936] [client 20.220.13.237:62961] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "accQkuxK22_lUN2kvnVfUgAAAIE"]
[Sat Mar 28 07:19:48.360935 2026] [:error] [pid 64966:tid 64997] [client 20.220.13.237:62899] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "accQlNfSvF5AFfSuKxX13QAAANg"]
[Sat Mar 28 07:19:49.780848 2026] [:error] [pid 34631:tid 34672] [client 20.220.13.237:62938] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "accQlTtzjMMS6kojpeQrLwAAAcw"]
[Sat Mar 28 07:19:51.194585 2026] [:error] [pid 64861:tid 64956] [client 20.220.13.237:62044] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "accQl-xK22_lUN2kvnVfVgAAAJU"]
[Sat Mar 28 07:19:52.608101 2026] [:error] [pid 43578:tid 43598] [client 20.220.13.237:62874] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "accQmHNG2YdGm41aN8LemQAAAlE"]
[Sat Mar 28 07:19:54.033033 2026] [:error] [pid 43578:tid 43599] [client 20.220.13.237:62022] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "accQmnNG2YdGm41aN8LengAAAlI"]
[Sat Mar 28 07:19:55.452875 2026] [:error] [pid 34597:tid 34618] [client 20.220.13.237:62925] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpass.php"] [unique_id "accQm4luI7-e5s1cafcdagAAAVE"]
[Sat Mar 28 07:19:56.907347 2026] [:error] [pid 64861:tid 64956] [client 20.220.13.237:62896] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpass.php"] [unique_id "accQnOxK22_lUN2kvnVfaAAAAJU"]
[Sat Mar 28 07:19:58.335481 2026] [:error] [pid 34597:tid 34607] [client 20.220.13.237:62862] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpass.php"] [unique_id "accQnoluI7-e5s1cafcdbwAAAUY"]
[Sat Mar 28 07:19:59.753009 2026] [:error] [pid 43578:tid 43602] [client 20.220.13.237:62879] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpass.php"] [unique_id "accQn3NG2YdGm41aN8LerAAAAlU"]
[Sat Mar 28 07:20:01.201899 2026] [:error] [pid 43579:tid 43629] [client 20.220.13.237:62974] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad.php"] [unique_id "accQoSRqN4JVI8gB7AmOtwAAApU"]
[Sat Mar 28 07:20:02.616011 2026] [:error] [pid 43579:tid 43623] [client 20.220.13.237:62885] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad.php"] [unique_id "accQoiRqN4JVI8gB7AmOuQAAAo8"]
[Sat Mar 28 07:20:04.036002 2026] [:error] [pid 64966:tid 64976] [client 20.220.13.237:62963] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad.php"] [unique_id "accQpNfSvF5AFfSuKxX14gAAAMM"]
[Sat Mar 28 07:20:05.473421 2026] [:error] [pid 34631:tid 34684] [client 20.220.13.237:62906] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad.php"] [unique_id "accQpTtzjMMS6kojpeQrSQAAAdg"]
[Sat Mar 28 07:20:06.894023 2026] [:error] [pid 34631:tid 34669] [client 20.220.13.237:62059] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "accQpjtzjMMS6kojpeQrUQAAAck"]
[Sat Mar 28 07:20:08.320189 2026] [:error] [pid 64861:tid 64958] [client 20.220.13.237:62016] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "accQqOxK22_lUN2kvnVfgAAAAJc"]
[Sat Mar 28 07:20:09.738844 2026] [:error] [pid 64966:tid 64991] [client 20.220.13.237:62078] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "accQqdfSvF5AFfSuKxX15gAAANI"]
[Sat Mar 28 07:20:11.181802 2026] [:error] [pid 64860:tid 64910] [client 20.220.13.237:61975] [client 20.220.13.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "accQqxkU3N0pg_4aEL_SBAAAAEI"]
[Sat Mar 28 08:18:50.883149 2026] [:error] [pid 34597:tid 34623] [client 135.236.141.8:21401] [client 135.236.141.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.8, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acceaoluI7-e5s1cafcrjQAAAVY"]
[Sat Mar 28 08:18:52.281681 2026] [:error] [pid 34597:tid 34612] [client 135.236.141.8:21401] [client 135.236.141.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.8, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "accebIluI7-e5s1cafcrkwAAAUs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 28 08:23:07.035839 2026] [:error] [pid 64860:tid 64930] [client 199.204.212.22:57144] [client 199.204.212.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.204.212.22, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "accfaxkU3N0pg_4aEL_1MAAAAFY"]
[Sat Mar 28 08:23:08.628008 2026] [:error] [pid 64860:tid 64923] [client 199.204.212.22:57144] [client 199.204.212.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 199.204.212.22, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "accfbBkU3N0pg_4aEL_1NAAAAE8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 28 09:25:46.241058 2026] [:error] [pid 64860:tid 64909] [client 2.58.56.116:53087] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "accuGhkU3N0pg_4aEL8UTQAAAEE"]
[Sat Mar 28 09:25:46.268000 2026] [:error] [pid 64966:tid 64988] [client 2.58.56.116:53100] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "accuGtfSvF5AFfSuKxX_eAAAAM8"]
[Sat Mar 28 09:25:46.744024 2026] [:error] [pid 64860:tid 64916] [client 2.58.56.116:53311] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "accuGhkU3N0pg_4aEL8UaQAAAEg"]
[Sat Mar 28 09:25:46.763195 2026] [:error] [pid 43547:tid 43555] [client 2.58.56.116:53321] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "accuGj4ZEfdetXP-9aC84gAAAgY"]
[Sat Mar 28 09:25:47.243069 2026] [:error] [pid 43578:tid 43592] [client 2.58.56.116:53602] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "accuG3NG2YdGm41aN8Lw7QAAAks"]
[Sat Mar 28 09:25:47.270315 2026] [:error] [pid 43578:tid 43590] [client 2.58.56.116:53619] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "accuG3NG2YdGm41aN8Lw7wAAAkk"]
[Sat Mar 28 09:25:47.755094 2026] [:error] [pid 64966:tid 64976] [client 2.58.56.116:54252] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "accuG9fSvF5AFfSuKxX_lQAAAMM"]
[Sat Mar 28 09:25:47.771399 2026] [:error] [pid 43547:tid 43565] [client 2.58.56.116:54331] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "accuGz4ZEfdetXP-9aC89QAAAhA"]
[Sat Mar 28 09:25:48.266909 2026] [:error] [pid 43547:tid 43572] [client 2.58.56.116:54928] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "accuHD4ZEfdetXP-9aC9EAAAAhc"]
[Sat Mar 28 09:25:48.278184 2026] [:error] [pid 43547:tid 43552] [client 2.58.56.116:54955] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "accuHD4ZEfdetXP-9aC9EQAAAgM"]
[Sat Mar 28 09:31:16.732291 2026] [:error] [pid 43578:tid 43602] [client 198.57.247.176:36962] [client 198.57.247.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.57.247.176, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "accvZHNG2YdGm41aN8L1BAAAAlU"]
[Sat Mar 28 10:27:47.777658 2026] [:error] [pid 34631:tid 34670] [client 171.111.192.222:43028] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acc8oztzjMMS6kojpeRsGgAAAco"]
[Sat Mar 28 10:41:02.918094 2026] [:error] [pid 34631:tid 34680] [client 182.44.2.148:60024] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acc_vjtzjMMS6kojpeRxQAAAAdQ"]
[Sat Mar 28 12:55:31.796195 2026] [:error] [pid 43578:tid 43592] [client 91.65.123.43:61995] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acdfQ3NG2YdGm41aN8JhtwAAAks"]
[Sat Mar 28 12:55:34.577888 2026] [:error] [pid 43578:tid 43605] [client 91.65.123.43:6361] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acdfRnNG2YdGm41aN8JhuQAAAlg"]
[Sat Mar 28 12:55:37.263708 2026] [:error] [pid 34597:tid 34609] [client 91.65.123.43:27931] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acdfSYluI7-e5s1cafdfPQAAAUg"]
[Sat Mar 28 12:55:39.867345 2026] [:error] [pid 43579:tid 43631] [client 91.65.123.43:20195] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acdfSyRqN4JVI8gB7AnDEQAAApc"]
[Sat Mar 28 12:55:42.568518 2026] [:error] [pid 64859:tid 64886] [client 91.65.123.43:58652] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acdfTm3qEBHXq3rHdBnRZwAAAAU"]
[Sat Mar 28 12:55:45.256026 2026] [:error] [pid 34631:tid 34667] [client 91.65.123.43:48581] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "acdfUTtzjMMS6kojpeSmNgAAAcc"]
[Sat Mar 28 12:55:47.761151 2026] [:error] [pid 64860:tid 64922] [client 91.65.123.43:8671] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "acdfUxkU3N0pg_4aEL9RYwAAAE4"]
[Sat Mar 28 12:55:50.237697 2026] [:error] [pid 43579:tid 43609] [client 91.65.123.43:20599] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "acdfViRqN4JVI8gB7AnDGQAAAoE"]
[Sat Mar 28 12:55:53.007992 2026] [:error] [pid 64861:tid 64957] [client 91.65.123.43:52068] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "acdfWexK22_lUN2kvnXAnwAAAJY"]
[Sat Mar 28 12:55:55.562521 2026] [:error] [pid 43578:tid 43602] [client 91.65.123.43:18929] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "acdfW3NG2YdGm41aN8Jh0QAAAlU"]
[Sat Mar 28 12:55:58.134624 2026] [:error] [pid 43547:tid 43555] [client 91.65.123.43:62529] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acdfXj4ZEfdetXP-9aDR6wAAAgY"]
[Sat Mar 28 12:56:00.976408 2026] [:error] [pid 34631:tid 34661] [client 91.65.123.43:14832] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "acdfYDtzjMMS6kojpeSmSgAAAcE"]
[Sat Mar 28 12:56:03.707433 2026] [:error] [pid 43578:tid 43584] [client 91.65.123.43:53253] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "acdfY3NG2YdGm41aN8Jh6gAAAkM"]
[Sat Mar 28 12:56:06.414022 2026] [:error] [pid 64861:tid 64958] [client 91.65.123.43:31244] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "acdfZuxK22_lUN2kvnXAogAAAJc"]
[Sat Mar 28 12:56:09.151466 2026] [:error] [pid 64861:tid 64942] [client 91.65.123.43:58524] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "acdfaexK22_lUN2kvnXApAAAAIc"]
[Sat Mar 28 12:56:11.688719 2026] [:error] [pid 34631:tid 34669] [client 91.65.123.43:15050] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "acdfaztzjMMS6kojpeSmXgAAAck"]
[Sat Mar 28 12:56:14.403821 2026] [:error] [pid 34597:tid 34616] [client 91.65.123.43:59265] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "acdfboluI7-e5s1cafdfSQAAAU8"]
[Sat Mar 28 12:56:17.050790 2026] [:error] [pid 64966:tid 64979] [client 91.65.123.43:59848] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acdfcdfSvF5AFfSuKxUSTAAAAMY"]
[Sat Mar 28 12:56:19.522620 2026] [:error] [pid 34597:tid 34620] [client 91.65.123.43:51305] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "acdfc4luI7-e5s1cafdfTQAAAVM"]
[Sat Mar 28 12:56:22.009480 2026] [:error] [pid 34597:tid 34618] [client 91.65.123.43:20869] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "acdfdoluI7-e5s1cafdfTwAAAVE"]
[Sat Mar 28 12:56:24.699025 2026] [:error] [pid 64860:tid 64925] [client 91.65.123.43:16449] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acdfeBkU3N0pg_4aEL9RmQAAAFE"]
[Sat Mar 28 12:56:27.407463 2026] [:error] [pid 34597:tid 34622] [client 91.65.123.43:18281] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acdfe4luI7-e5s1cafdfWgAAAVU"]
[Sat Mar 28 12:57:03.056435 2026] [:error] [pid 64861:tid 64949] [client 91.65.123.43:58955] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "acdfn-xK22_lUN2kvnXA0wAAAI4"]
[Sat Mar 28 12:57:05.675955 2026] [:error] [pid 64860:tid 64915] [client 91.65.123.43:55886] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "acdfoRkU3N0pg_4aEL9RxAAAAEc"]
[Sat Mar 28 12:57:08.789254 2026] [:error] [pid 64860:tid 64929] [client 91.65.123.43:55984] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acdfpBkU3N0pg_4aEL9RzAAAAFU"]
[Sat Mar 28 12:57:11.509774 2026] [:error] [pid 2877:tid 2883] [client 91.65.123.43:44356] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "acdfp7gM4xL1Xj409YTz_AAAAQQ"]
[Sat Mar 28 12:57:14.346190 2026] [:error] [pid 43578:tid 43589] [client 91.65.123.43:9965] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "acdfqnNG2YdGm41aN8JiNwAAAkg"]
[Sat Mar 28 12:57:16.959821 2026] [:error] [pid 64966:tid 64986] [client 91.65.123.43:51295] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acdfrNfSvF5AFfSuKxUSYQAAAM0"]
[Sat Mar 28 12:57:19.499165 2026] [:error] [pid 43578:tid 43598] [client 91.65.123.43:14936] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acdfr3NG2YdGm41aN8JiSwAAAlE"]
[Sat Mar 28 12:57:22.122225 2026] [:error] [pid 43578:tid 43581] [client 91.65.123.43:41360] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "acdfsnNG2YdGm41aN8JiWAAAAkA"]
[Sat Mar 28 12:57:24.835319 2026] [:error] [pid 43578:tid 43587] [client 91.65.123.43:12221] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "acdftHNG2YdGm41aN8JiYwAAAkY"]
[Sat Mar 28 12:57:27.515548 2026] [:error] [pid 43578:tid 43593] [client 91.65.123.43:52948] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "acdft3NG2YdGm41aN8JiZQAAAkw"]
[Sat Mar 28 12:57:30.205788 2026] [:error] [pid 43578:tid 43584] [client 91.65.123.43:57465] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acdfunNG2YdGm41aN8JimAAAAkM"]
[Sat Mar 28 12:57:32.953732 2026] [:error] [pid 64861:tid 64935] [client 91.65.123.43:57482] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "acdfvOxK22_lUN2kvnXA8AAAAIA"]
[Sat Mar 28 12:57:35.659951 2026] [:error] [pid 34631:tid 34661] [client 91.65.123.43:47885] [client 91.65.123.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acdfvztzjMMS6kojpeSm6QAAAcE"]
[Sat Mar 28 14:52:25.920861 2026] [:error] [pid 64859:tid 64891] [client 170.106.165.186:39516] [client 170.106.165.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acd6qW3qEBHXq3rHdBkAUAAAAAo"]
[Sat Mar 28 14:55:33.400328 2026] [:error] [pid 43578:tid 43602] [client 173.254.30.77:14480] [client 173.254.30.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.254.30.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acd7ZXNG2YdGm41aN8KIQQAAAlU"]
[Sat Mar 28 14:55:36.336802 2026] [:error] [pid 43578:tid 43588] [client 173.254.30.77:14480] [client 173.254.30.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.254.30.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acd7aHNG2YdGm41aN8KISgAAAkc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 28 14:57:07.431604 2026] [:error] [pid 43578:tid 43584] [client 173.254.30.77:34556] [client 173.254.30.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.254.30.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acd7w3NG2YdGm41aN8KI1QAAAkM"]
[Sat Mar 28 14:57:09.853404 2026] [:error] [pid 43547:tid 43551] [client 173.254.30.77:41768] [client 173.254.30.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.254.30.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acd7xT4ZEfdetXP-9aDc3AAAAgI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 28 15:56:00.169327 2026] [:error] [pid 34631:tid 34675] [client 67.20.76.98:49910] [client 67.20.76.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.20.76.98, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aceJkDtzjMMS6kojpeTbZQAAAc8"]
[Sat Mar 28 15:56:02.936103 2026] [:error] [pid 34631:tid 34676] [client 67.20.76.98:49910] [client 67.20.76.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.20.76.98, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aceJkjtzjMMS6kojpeTbaAAAAdA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Mar 28 16:37:18.569711 2026] [:error] [pid 64860:tid 64908] [client 84.247.146.193:32930] [client 84.247.146.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.146.193, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aceTPhkU3N0pg_4aEL93dQAAAEA"]
[Sat Mar 28 16:43:34.027988 2026] [:error] [pid 64859:tid 64893] [client 190.8.164.110:52507] [client 190.8.164.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.8.164.110, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aceUtm3qEBHXq3rHdBke2QAAAAw"]
[Sat Mar 28 17:06:33.285933 2026] [:error] [pid 43578:tid 43597] [client 86.27.78.108:53056] [client 86.27.78.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.27.78.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aceaGXNG2YdGm41aN8K5EAAAAlA"]
[Sat Mar 28 17:06:36.975425 2026] [:error] [pid 43578:tid 43587] [client 49.36.170.182:50746] [client 49.36.170.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.170.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aceaHHNG2YdGm41aN8K5GQAAAkY"]
[Sat Mar 28 17:12:13.998994 2026] [:error] [pid 43578:tid 43587] [client 49.36.170.182:55262] [client 49.36.170.182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acebbXNG2YdGm41aN8K7EQAAAkY"]
[Sat Mar 28 18:09:07.098642 2026] [:error] [pid 64861:tid 64958] [client 43.166.1.243:39786] [client 43.166.1.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aceow-xK22_lUN2kvnUfWwAAAJc"]
[Sat Mar 28 18:28:01.013640 2026] [:error] [pid 64861:tid 64937] [client 190.8.164.110:58288] [client 190.8.164.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.8.164.110, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acetMexK22_lUN2kvnUo1QAAAII"]
[Sat Mar 28 21:17:02.739160 2026] [:error] [pid 64859:tid 64899] [client 43.155.27.244:40338] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acfUzm3qEBHXq3rHdBlZagAAABI"]
[Sat Mar 28 21:57:39.466845 2026] [:error] [pid 64861:tid 64950] [client 62.84.185.55:61030] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acfeU-xK22_lUN2kvnWJmAAAAI8"]
[Sat Mar 28 21:57:44.994318 2026] [:error] [pid 43578:tid 43601] [client 62.84.185.55:61054] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acfeWHNG2YdGm41aN8IJ5wAAAlQ"]
[Sat Mar 28 21:57:51.575079 2026] [:error] [pid 64860:tid 64924] [client 62.84.185.55:21514] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acfeXxkU3N0pg_4aEL-pdwAAAFA"]
[Sat Mar 28 21:57:56.616762 2026] [:error] [pid 64859:tid 64899] [client 62.84.185.55:21522] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acfeZG3qEBHXq3rHdBlh6AAAABI"]
[Sat Mar 28 21:58:03.190492 2026] [:error] [pid 34631:tid 34663] [client 62.84.185.55:31852] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acfeaztzjMMS6kojpeRkuwAAAcM"]
[Sat Mar 28 21:58:14.188554 2026] [:error] [pid 64861:tid 64945] [client 62.84.185.55:61884] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acfeduxK22_lUN2kvnWJxAAAAIo"]
[Sat Mar 28 21:58:20.363320 2026] [:error] [pid 43578:tid 43584] [client 62.84.185.55:33930] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acfefHNG2YdGm41aN8IKDgAAAkM"]
[Sat Mar 28 21:58:23.884696 2026] [:error] [pid 34631:tid 34672] [client 62.84.185.55:33942] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acfefztzjMMS6kojpeRk5QAAAcw"]
[Sat Mar 28 21:58:30.914297 2026] [:error] [pid 43579:tid 43626] [client 62.84.185.55:5932] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acfehiRqN4JVI8gB7An-4QAAApI"]
[Sat Mar 28 22:00:17.075519 2026] [:error] [pid 43579:tid 43614] [client 62.84.185.55:38438] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acfe8SRqN4JVI8gB7An_FAAAAoY"]
[Sat Mar 28 22:00:22.301323 2026] [:error] [pid 64861:tid 64942] [client 62.84.185.55:7432] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acfe9uxK22_lUN2kvnWK4QAAAIc"]
[Sat Mar 28 22:00:31.082469 2026] [:error] [pid 34631:tid 34680] [client 62.84.185.55:49830] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acfe_ztzjMMS6kojpeRlwQAAAdQ"]
[Sat Mar 28 22:28:27.298442 2026] [:error] [pid 43579:tid 43616] [client 86.27.78.108:49550] [client 86.27.78.108] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acfliyRqN4JVI8gB7AkCIQAAAog"]
[Sat Mar 28 22:29:43.195561 2026] [:error] [pid 64860:tid 64926] [client 86.27.78.108:49977] [client 86.27.78.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.27.78.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acfl1xkU3N0pg_4aEL-uawAAAFI"]
[Sat Mar 28 22:43:33.025848 2026] [:error] [pid 43578:tid 43600] [client 202.51.88.221:37129] [client 202.51.88.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.51.88.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acfpFXNG2YdGm41aN8IZuQAAAlM"]
[Sat Mar 28 23:36:41.497654 2026] [:error] [pid 43578:tid 43581] [client 45.94.31.49:58041] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acf1iXNG2YdGm41aN8I31AAAAkA"]
[Sat Mar 28 23:36:42.199871 2026] [:error] [pid 43578:tid 43595] [client 45.94.31.49:53777] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acf1inNG2YdGm41aN8I38gAAAk4"]
[Sat Mar 28 23:36:43.054860 2026] [:error] [pid 43579:tid 43626] [client 45.94.31.49:53988] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acf1iyRqN4JVI8gB7AkMDAAAApI"]
[Sat Mar 28 23:36:43.854940 2026] [:error] [pid 34631:tid 34671] [client 45.94.31.49:62124] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acf1iztzjMMS6kojpeSEagAAAcs"]
[Sat Mar 28 23:36:44.601550 2026] [:error] [pid 43578:tid 43594] [client 45.94.31.49:57092] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acf1jHNG2YdGm41aN8I4EAAAAk0"]
[Sun Mar 29 00:16:03.749842 2026] [:error] [pid 43578:tid 43582] [client 170.106.197.109:34454] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acf-w3NG2YdGm41aN8JVUAAAAkE"]
[Sun Mar 29 00:44:23.019371 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:21742] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acgFZ1vLf0RDUqcYq-YhcwAAAAE"]
[Sun Mar 29 00:44:23.558660 2026] [:error] [pid 39427:tid 39438] [client 158.23.144.198:21648] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acgFZ1vLf0RDUqcYq-YhdwAAAAY"]
[Sun Mar 29 00:44:24.063407 2026] [:error] [pid 39427:tid 39441] [client 158.23.144.198:21705] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acgFaFvLf0RDUqcYq-YhfQAAAAk"]
[Sun Mar 29 00:44:24.612852 2026] [:error] [pid 39429:tid 39506] [client 158.23.144.198:21758] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "acgFaE8pSj6sqgZaItnBvAAAAJQ"]
[Sun Mar 29 00:44:25.249198 2026] [:error] [pid 39427:tid 39456] [client 158.23.144.198:21719] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acgFaVvLf0RDUqcYq-YhggAAABg"]
[Sun Mar 29 00:44:25.708631 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:21720] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acgFaSkUyvlQod6qQu1j1QAAANM"]
[Sun Mar 29 00:44:26.211183 2026] [:error] [pid 39427:tid 39439] [client 158.23.144.198:21703] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acgFalvLf0RDUqcYq-YhiwAAAAc"]
[Sun Mar 29 00:44:26.713120 2026] [:error] [pid 39428:tid 39483] [client 158.23.144.198:21714] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cxs.php"] [unique_id "acgFaqXMrozFMIaP8nLlLAAAAFg"]
[Sun Mar 29 00:44:27.156103 2026] [:error] [pid 39427:tid 39434] [client 158.23.144.198:21724] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acgFa1vLf0RDUqcYq-YhjwAAAAI"]
[Sun Mar 29 00:44:27.919018 2026] [:error] [pid 39429:tid 39494] [client 158.23.144.198:21745] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acgFa08pSj6sqgZaItnBwQAAAIg"]
[Sun Mar 29 00:44:28.315949 2026] [:error] [pid 39427:tid 39453] [client 158.23.144.198:21682] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acgFbFvLf0RDUqcYq-YhkQAAABU"]
[Sun Mar 29 00:44:28.831754 2026] [:error] [pid 39427:tid 39445] [client 158.23.144.198:21641] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-scanner.php"] [unique_id "acgFbFvLf0RDUqcYq-YhlAAAAA0"]
[Sun Mar 29 00:44:29.234149 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:21737] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acgFbSkUyvlQod6qQu1j6gAAAME"]
[Sun Mar 29 00:44:29.739575 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:21646] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acgFbSkUyvlQod6qQu1j6wAAANg"]
[Sun Mar 29 00:44:30.209988 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:21740] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acgFbk8pSj6sqgZaItnBxgAAAI4"]
[Sun Mar 29 00:44:30.671185 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:21638] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "acgFbikUyvlQod6qQu1j7gAAAMk"]
[Sun Mar 29 00:44:31.067469 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:21715] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "acgFbykUyvlQod6qQu1j8wAAAMQ"]
[Sun Mar 29 00:44:31.516395 2026] [:error] [pid 39428:tid 39473] [client 158.23.144.198:21741] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "acgFb6XMrozFMIaP8nLlMQAAAE4"]
[Sun Mar 29 00:44:31.922515 2026] [:error] [pid 39428:tid 39472] [client 158.23.144.198:21704] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "acgFb6XMrozFMIaP8nLlMgAAAE0"]
[Sun Mar 29 00:44:32.432971 2026] [:error] [pid 39427:tid 39444] [client 158.23.144.198:21697] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "acgFcFvLf0RDUqcYq-YhmgAAAAw"]
[Sun Mar 29 00:44:32.866026 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:21649] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zz8.php"] [unique_id "acgFcFvLf0RDUqcYq-YhnQAAAA8"]
[Sun Mar 29 00:44:33.305375 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:21699] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zz8.php"] [unique_id "acgFcU8pSj6sqgZaItnB1AAAAI4"]
[Sun Mar 29 00:44:33.750908 2026] [:error] [pid 39514:tid 39532] [client 158.23.144.198:21712] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zz8.php"] [unique_id "acgFcSkUyvlQod6qQu1kBAAAAMc"]
[Sun Mar 29 00:44:34.162144 2026] [:error] [pid 39429:tid 39504] [client 158.23.144.198:21728] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zz8.php"] [unique_id "acgFck8pSj6sqgZaItnB2QAAAJI"]
[Sun Mar 29 00:44:34.551378 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:21730] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "acgFcikUyvlQod6qQu1kCgAAAM8"]
[Sun Mar 29 00:44:34.947294 2026] [:error] [pid 39429:tid 39498] [client 158.23.144.198:21736] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "acgFck8pSj6sqgZaItnB4AAAAIw"]
[Sun Mar 29 00:44:35.339870 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:21637] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "acgFc1vLf0RDUqcYq-YhoAAAABM"]
[Sun Mar 29 00:44:35.741187 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:21710] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "acgFcykUyvlQod6qQu1kEAAAANc"]
[Sun Mar 29 00:44:36.184303 2026] [:error] [pid 39427:tid 39442] [client 158.23.144.198:21673] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "acgFdFvLf0RDUqcYq-YhogAAAAo"]
[Sun Mar 29 00:44:36.573808 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:21651] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "acgFdCkUyvlQod6qQu1kFwAAAMA"]
[Sun Mar 29 00:44:37.138519 2026] [:error] [pid 39429:tid 39494] [client 158.23.144.198:21707] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "acgFdU8pSj6sqgZaItnB6wAAAIg"]
[Sun Mar 29 00:44:37.604889 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:21666] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "acgFdSkUyvlQod6qQu1kIQAAANE"]
[Sun Mar 29 00:44:38.308748 2026] [:error] [pid 39427:tid 39448] [client 158.23.144.198:21635] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpmini.php"] [unique_id "acgFdlvLf0RDUqcYq-YhowAAABA"]
[Sun Mar 29 00:44:39.112047 2026] [:error] [pid 39428:tid 39478] [client 158.23.144.198:21753] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpmini.php"] [unique_id "acgFd6XMrozFMIaP8nLlNAAAAFM"]
[Sun Mar 29 00:44:39.618161 2026] [:error] [pid 39428:tid 39468] [client 158.23.144.198:21668] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpmini.php"] [unique_id "acgFd6XMrozFMIaP8nLlNQAAAEk"]
[Sun Mar 29 00:44:40.001609 2026] [:error] [pid 39429:tid 39507] [client 158.23.144.198:21650] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpmini.php"] [unique_id "acgFeE8pSj6sqgZaItnB8QAAAJU"]
[Sun Mar 29 00:44:40.670385 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:21756] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "acgFeCkUyvlQod6qQu1kMQAAANM"]
[Sun Mar 29 00:44:41.087146 2026] [:error] [pid 39429:tid 39505] [client 158.23.144.198:21657] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "acgFeU8pSj6sqgZaItnB8wAAAJM"]
[Sun Mar 29 00:44:41.539518 2026] [:error] [pid 39429:tid 39494] [client 158.23.144.198:21694] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "acgFeU8pSj6sqgZaItnB9QAAAIg"]
[Sun Mar 29 00:44:42.148521 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:21708] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "acgFeikUyvlQod6qQu1kNgAAAM8"]
[Sun Mar 29 00:44:42.534435 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:21598] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tbute.php"] [unique_id "acgFek8pSj6sqgZaItnB-QAAAI4"]
[Sun Mar 29 00:44:42.940985 2026] [:error] [pid 39429:tid 39497] [client 158.23.144.198:21744] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tbute.php"] [unique_id "acgFek8pSj6sqgZaItnB_QAAAIs"]
[Sun Mar 29 00:44:43.431627 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:21718] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tbute.php"] [unique_id "acgFeykUyvlQod6qQu1kOgAAAMQ"]
[Sun Mar 29 00:44:44.003930 2026] [:error] [pid 39514:tid 39543] [client 158.23.144.198:21692] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tbute.php"] [unique_id "acgFfCkUyvlQod6qQu1kPQAAANI"]
[Sun Mar 29 00:44:44.474921 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:21746] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rovoj.php"] [unique_id "acgFfCkUyvlQod6qQu1kPwAAAME"]
[Sun Mar 29 00:44:44.953596 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:21726] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rovoj.php"] [unique_id "acgFfCkUyvlQod6qQu1kRQAAANc"]
[Sun Mar 29 00:44:45.426007 2026] [:error] [pid 39427:tid 39445] [client 158.23.144.198:21750] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rovoj.php"] [unique_id "acgFfVvLf0RDUqcYq-YhvQAAAA0"]
[Sun Mar 29 00:44:45.862970 2026] [:error] [pid 39514:tid 39532] [client 158.23.144.198:21595] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rovoj.php"] [unique_id "acgFfSkUyvlQod6qQu1kSwAAAMc"]
[Sun Mar 29 00:44:46.305791 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:21661] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r3grt7.php"] [unique_id "acgFfikUyvlQod6qQu1kUAAAAMg"]
[Sun Mar 29 00:44:46.699457 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:21653] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r3grt7.php"] [unique_id "acgFfikUyvlQod6qQu1kUwAAANg"]
[Sun Mar 29 00:44:47.117352 2026] [:error] [pid 39428:tid 39466] [client 158.23.144.198:21738] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r3grt7.php"] [unique_id "acgFf6XMrozFMIaP8nLlPQAAAEc"]
[Sun Mar 29 00:44:47.503625 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:21743] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r3grt7.php"] [unique_id "acgFfykUyvlQod6qQu1kXQAAAMo"]
[Sun Mar 29 00:44:47.936024 2026] [:error] [pid 39428:tid 39461] [client 158.23.144.198:21734] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phina.php"] [unique_id "acgFf6XMrozFMIaP8nLlPgAAAEI"]
[Sun Mar 29 00:44:48.460686 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:21721] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phina.php"] [unique_id "acgFgCkUyvlQod6qQu1kYwAAANg"]
[Sun Mar 29 00:44:48.983529 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:21636] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phina.php"] [unique_id "acgFgCkUyvlQod6qQu1kZwAAAMM"]
[Sun Mar 29 00:44:49.393369 2026] [:error] [pid 39514:tid 39545] [client 158.23.144.198:21735] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phina.php"] [unique_id "acgFgSkUyvlQod6qQu1kbAAAANQ"]
[Sun Mar 29 00:44:49.843400 2026] [:error] [pid 39428:tid 39464] [client 158.23.144.198:21725] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "acgFgaXMrozFMIaP8nLlQgAAAEU"]
[Sun Mar 29 00:44:50.261325 2026] [:error] [pid 39427:tid 39440] [client 158.23.144.198:21645] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "acgFglvLf0RDUqcYq-YhzQAAAAg"]
[Sun Mar 29 00:44:50.746721 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:21747] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "acgFglvLf0RDUqcYq-Yh0wAAABc"]
[Sun Mar 29 00:44:51.159510 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:21701] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "acgFgykUyvlQod6qQu1kdAAAAMA"]
[Sun Mar 29 00:44:51.716451 2026] [:error] [pid 39514:tid 39531] [client 158.23.144.198:21639] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs6.php"] [unique_id "acgFgykUyvlQod6qQu1kdwAAAMY"]
[Sun Mar 29 00:44:52.110887 2026] [:error] [pid 39429:tid 39499] [client 158.23.144.198:21732] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs6.php"] [unique_id "acgFhE8pSj6sqgZaItnCDQAAAI0"]
[Sun Mar 29 00:44:52.524862 2026] [:error] [pid 39514:tid 39543] [client 158.23.144.198:21727] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs6.php"] [unique_id "acgFhCkUyvlQod6qQu1kewAAANI"]
[Sun Mar 29 00:44:53.530611 2026] [:error] [pid 39427:tid 39434] [client 158.23.144.198:21577] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs6.php"] [unique_id "acgFhVvLf0RDUqcYq-Yh3wAAAAI"]
[Sun Mar 29 00:44:54.103632 2026] [:error] [pid 39429:tid 39487] [client 158.23.144.198:21634] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs7.php"] [unique_id "acgFhk8pSj6sqgZaItnCEgAAAIE"]
[Sun Mar 29 00:44:54.675283 2026] [:error] [pid 39429:tid 39503] [client 158.23.144.198:21506] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs7.php"] [unique_id "acgFhk8pSj6sqgZaItnCGAAAAJE"]
[Sun Mar 29 00:44:55.275466 2026] [:error] [pid 39429:tid 39491] [client 158.23.144.198:21723] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs7.php"] [unique_id "acgFh08pSj6sqgZaItnCHQAAAIU"]
[Sun Mar 29 00:44:55.782290 2026] [:error] [pid 39428:tid 39469] [client 158.23.144.198:21570] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs7.php"] [unique_id "acgFh6XMrozFMIaP8nLlTAAAAEo"]
[Sun Mar 29 00:44:56.428205 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:21633] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "acgFiKXMrozFMIaP8nLlTwAAAEg"]
[Sun Mar 29 00:44:57.091160 2026] [:error] [pid 39427:tid 39443] [client 158.23.144.198:21674] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "acgFiVvLf0RDUqcYq-Yh7QAAAAs"]
[Sun Mar 29 00:44:58.158998 2026] [:error] [pid 39429:tid 39509] [client 158.23.144.198:21751] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "acgFik8pSj6sqgZaItnCIAAAAJc"]
[Sun Mar 29 00:44:58.639140 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:21662] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "acgFiikUyvlQod6qQu1kiAAAAMw"]
[Sun Mar 29 00:44:59.095657 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:21759] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/595.php"] [unique_id "acgFi1vLf0RDUqcYq-Yh-QAAABc"]
[Sun Mar 29 00:44:59.766846 2026] [:error] [pid 39427:tid 39456] [client 158.23.144.198:21669] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/595.php"] [unique_id "acgFi1vLf0RDUqcYq-Yh_AAAABg"]
[Sun Mar 29 00:45:00.255095 2026] [:error] [pid 39427:tid 39435] [client 158.23.144.198:21658] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/595.php"] [unique_id "acgFjFvLf0RDUqcYq-Yh_gAAAAM"]
[Sun Mar 29 00:45:00.676978 2026] [:error] [pid 39429:tid 39505] [client 158.23.144.198:21685] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/595.php"] [unique_id "acgFjE8pSj6sqgZaItnCKAAAAJM"]
[Sun Mar 29 00:45:01.491442 2026] [:error] [pid 39428:tid 39475] [client 158.23.144.198:21587] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "acgFjaXMrozFMIaP8nLlYgAAAFA"]
[Sun Mar 29 00:45:01.988566 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:21739] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "acgFjSkUyvlQod6qQu1kkwAAAMg"]
[Sun Mar 29 00:45:02.533886 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:21709] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "acgFjikUyvlQod6qQu1kmQAAAMA"]
[Sun Mar 29 00:45:03.119343 2026] [:error] [pid 39429:tid 39488] [client 158.23.144.198:21717] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "acgFj08pSj6sqgZaItnCLQAAAII"]
[Sun Mar 29 00:45:03.590934 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:21711] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "acgFj6XMrozFMIaP8nLlZgAAAEg"]
[Sun Mar 29 00:45:04.121075 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:21671] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "acgFkCkUyvlQod6qQu1kogAAAM4"]
[Sun Mar 29 00:45:04.549599 2026] [:error] [pid 39429:tid 39496] [client 158.23.144.198:21752] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "acgFkE8pSj6sqgZaItnCMwAAAIo"]
[Sun Mar 29 00:45:05.046182 2026] [:error] [pid 39428:tid 39470] [client 158.23.144.198:21575] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "acgFkaXMrozFMIaP8nLlbAAAAEs"]
[Sun Mar 29 00:45:05.542673 2026] [:error] [pid 39427:tid 39445] [client 158.23.144.198:21670] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "acgFkVvLf0RDUqcYq-YiCwAAAA0"]
[Sun Mar 29 00:45:06.131491 2026] [:error] [pid 39429:tid 39504] [client 158.23.144.198:21663] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "acgFkk8pSj6sqgZaItnCNgAAAJI"]
[Sun Mar 29 00:45:06.546914 2026] [:error] [pid 39427:tid 39443] [client 158.23.144.198:21588] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "acgFklvLf0RDUqcYq-YiEgAAAAs"]
[Sun Mar 29 00:45:06.969947 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:21644] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "acgFkikUyvlQod6qQu1krwAAAM4"]
[Sun Mar 29 00:45:07.442197 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:21755] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "acgFk1vLf0RDUqcYq-YiGAAAAAQ"]
[Sun Mar 29 00:45:07.860198 2026] [:error] [pid 39428:tid 39479] [client 158.23.144.198:21579] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "acgFk6XMrozFMIaP8nLlcQAAAFQ"]
[Sun Mar 29 00:45:08.329660 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:21522] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "acgFlCkUyvlQod6qQu1kuAAAAMM"]
[Sun Mar 29 00:45:08.730295 2026] [:error] [pid 39428:tid 39464] [client 158.23.144.198:21713] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "acgFlKXMrozFMIaP8nLleAAAAEU"]
[Sun Mar 29 00:45:09.152138 2026] [:error] [pid 39428:tid 39468] [client 158.23.144.198:21509] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "acgFlaXMrozFMIaP8nLlfAAAAEk"]
[Sun Mar 29 00:45:09.549983 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:21665] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "acgFlSkUyvlQod6qQu1kvgAAAMk"]
[Sun Mar 29 00:45:10.094177 2026] [:error] [pid 39514:tid 39532] [client 158.23.144.198:21679] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "acgFlikUyvlQod6qQu1kwgAAAMc"]
[Sun Mar 29 00:45:10.548714 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:21626] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "acgFlikUyvlQod6qQu1kxgAAANc"]
[Sun Mar 29 00:45:11.186419 2026] [:error] [pid 39428:tid 39482] [client 158.23.144.198:21680] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws79.php"] [unique_id "acgFl6XMrozFMIaP8nLligAAAFc"]
[Sun Mar 29 00:45:11.667572 2026] [:error] [pid 39514:tid 39527] [client 158.23.144.198:21576] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws79.php"] [unique_id "acgFlykUyvlQod6qQu1kzgAAAMI"]
[Sun Mar 29 00:45:12.155540 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:21677] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws79.php"] [unique_id "acgFmCkUyvlQod6qQu1k0AAAAMk"]
[Sun Mar 29 00:45:12.994292 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:21592] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws79.php"] [unique_id "acgFmCkUyvlQod6qQu1k1AAAANc"]
[Sun Mar 29 00:45:13.654250 2026] [:error] [pid 39427:tid 39441] [client 158.23.144.198:21702] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "acgFmVvLf0RDUqcYq-YiGgAAAAk"]
[Sun Mar 29 00:45:14.403615 2026] [:error] [pid 39428:tid 39466] [client 158.23.144.198:21716] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "acgFmqXMrozFMIaP8nLlkAAAAEc"]
[Sun Mar 29 00:45:15.059487 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:21643] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "acgFmykUyvlQod6qQu1k6AAAAM4"]
[Sun Mar 29 00:45:15.689295 2026] [:error] [pid 39514:tid 39545] [client 158.23.144.198:21603] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "acgFmykUyvlQod6qQu1k6wAAANQ"]
[Sun Mar 29 00:45:16.168182 2026] [:error] [pid 39429:tid 39505] [client 158.23.144.198:21672] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws50.php"] [unique_id "acgFnE8pSj6sqgZaItnCQQAAAJM"]
[Sun Mar 29 00:45:16.561346 2026] [:error] [pid 39429:tid 39503] [client 158.23.144.198:21667] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws50.php"] [unique_id "acgFnE8pSj6sqgZaItnCRgAAAJE"]
[Sun Mar 29 00:45:17.129177 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:21693] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws50.php"] [unique_id "acgFnSkUyvlQod6qQu1k8gAAANc"]
[Sun Mar 29 00:45:17.581691 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:21698] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws50.php"] [unique_id "acgFnSkUyvlQod6qQu1k9wAAAMs"]
[Sun Mar 29 00:45:17.983293 2026] [:error] [pid 39427:tid 39437] [client 158.23.144.198:21754] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws44.php"] [unique_id "acgFnVvLf0RDUqcYq-YiIAAAAAU"]
[Sun Mar 29 00:45:19.460963 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:21659] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws44.php"] [unique_id "acgFnykUyvlQod6qQu1lAQAAAMA"]
[Sun Mar 29 00:45:19.901138 2026] [:error] [pid 39427:tid 39435] [client 158.23.144.198:21647] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws44.php"] [unique_id "acgFn1vLf0RDUqcYq-YiLwAAAAM"]
[Sun Mar 29 00:45:20.360870 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:21700] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws44.php"] [unique_id "acgFoCkUyvlQod6qQu1lCwAAANE"]
[Sun Mar 29 00:45:35.111197 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:21676] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sql.php"] [unique_id "acgFrykUyvlQod6qQu1lYAAAAMw"]
[Sun Mar 29 00:45:35.824081 2026] [:error] [pid 39427:tid 39437] [client 158.23.144.198:21574] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sql.php"] [unique_id "acgFr1vLf0RDUqcYq-YiYgAAAAU"]
[Sun Mar 29 00:45:36.249145 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:21683] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sql.php"] [unique_id "acgFsFvLf0RDUqcYq-YiZwAAABc"]
[Sun Mar 29 00:45:37.308211 2026] [:error] [pid 39429:tid 39503] [client 158.23.144.198:21602] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sql.php"] [unique_id "acgFsU8pSj6sqgZaItnCZQAAAJE"]
[Sun Mar 29 00:45:37.706785 2026] [:error] [pid 39428:tid 39479] [client 158.23.144.198:21749] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "acgFsaXMrozFMIaP8nLlugAAAFQ"]
[Sun Mar 29 00:45:38.706146 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:21696] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "acgFsikUyvlQod6qQu1lYwAAAMg"]
[Sun Mar 29 00:45:39.398744 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:21678] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "acgFs1vLf0RDUqcYq-YieQAAABM"]
[Sun Mar 29 00:45:40.815094 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:21514] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sc.php"] [unique_id "acgFtE8pSj6sqgZaItnCegAAAI4"]
[Sun Mar 29 00:45:41.385646 2026] [:error] [pid 39429:tid 39493] [client 158.23.144.198:21631] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acgFtU8pSj6sqgZaItnCewAAAIc"]
[Sun Mar 29 00:45:41.791834 2026] [:error] [pid 39428:tid 39483] [client 158.23.144.198:21613] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acgFtaXMrozFMIaP8nLlwQAAAFg"]
[Sun Mar 29 00:45:42.277385 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:21652] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acgFtk8pSj6sqgZaItnCfwAAAI8"]
[Sun Mar 29 00:45:43.002124 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:21583] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "acgFt1vLf0RDUqcYq-YihgAAAAQ"]
[Sun Mar 29 00:45:43.539662 2026] [:error] [pid 39429:tid 39499] [client 158.23.144.198:21684] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "acgFt08pSj6sqgZaItnCgwAAAI0"]
[Sun Mar 29 00:45:44.099004 2026] [:error] [pid 39429:tid 39486] [client 158.23.144.198:21583] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "acgFuE8pSj6sqgZaItnCiAAAAIA"]
[Sun Mar 29 00:45:45.020864 2026] [:error] [pid 39429:tid 39506] [client 158.23.144.198:21625] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "acgFuU8pSj6sqgZaItnCjgAAAJQ"]
[Sun Mar 29 00:45:45.761878 2026] [:error] [pid 39429:tid 39492] [client 158.23.144.198:21691] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "acgFuU8pSj6sqgZaItnCkAAAAIY"]
[Sun Mar 29 00:45:48.198647 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:21572] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "acgFvFvLf0RDUqcYq-YimQAAABc"]
[Sun Mar 29 00:46:07.691139 2026] [:error] [pid 39429:tid 39502] [client 158.23.144.198:21706] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roter.php"] [unique_id "acgFz08pSj6sqgZaItnCtAAAAJA"]
[Sun Mar 29 00:46:08.671313 2026] [:error] [pid 39429:tid 39504] [client 158.23.144.198:21599] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roter.php"] [unique_id "acgF0E8pSj6sqgZaItnCugAAAJI"]
[Sun Mar 29 00:46:09.645689 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:21675] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roter.php"] [unique_id "acgF0SkUyvlQod6qQu1lwgAAANc"]
[Sun Mar 29 00:46:10.371928 2026] [:error] [pid 39429:tid 39494] [client 158.23.144.198:21505] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roter.php"] [unique_id "acgF0k8pSj6sqgZaItnCvQAAAIg"]
[Sun Mar 29 00:46:10.905000 2026] [:error] [pid 39427:tid 39438] [client 158.23.144.198:21612] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "acgF0lvLf0RDUqcYq-Yi4QAAAAY"]
[Sun Mar 29 00:46:11.443016 2026] [:error] [pid 39428:tid 39460] [client 158.23.144.198:21686] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "acgF06XMrozFMIaP8nLl3gAAAEE"]
[Sun Mar 29 00:46:11.946105 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:21591] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "acgF0ykUyvlQod6qQu1lzwAAAMo"]
[Sun Mar 29 00:46:12.381176 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:21585] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/size.php"] [unique_id "acgF1CkUyvlQod6qQu1l0QAAAMU"]
[Sun Mar 29 00:46:12.919711 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:21568] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/save.php"] [unique_id "acgF1FvLf0RDUqcYq-Yi6wAAABM"]
[Sun Mar 29 00:46:13.519079 2026] [:error] [pid 39514:tid 39547] [client 158.23.144.198:21729] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/save.php"] [unique_id "acgF1SkUyvlQod6qQu1l2gAAANY"]
[Sun Mar 29 00:46:13.916014 2026] [:error] [pid 39427:tid 39448] [client 158.23.144.198:21569] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/save.php"] [unique_id "acgF1VvLf0RDUqcYq-Yi8gAAABA"]
[Sun Mar 29 00:46:14.441431 2026] [:error] [pid 39427:tid 39439] [client 158.23.144.198:21748] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/save.php"] [unique_id "acgF1lvLf0RDUqcYq-Yi9QAAAAc"]
[Sun Mar 29 00:46:15.071571 2026] [:error] [pid 39428:tid 39462] [client 158.23.144.198:21571] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "acgF16XMrozFMIaP8nLl4wAAAEM"]
[Sun Mar 29 00:46:15.666982 2026] [:error] [pid 39429:tid 39498] [client 158.23.144.198:21600] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "acgF108pSj6sqgZaItnCyAAAAIw"]
[Sun Mar 29 00:46:16.628550 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:21530] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "acgF2CkUyvlQod6qQu1l4gAAAMk"]
[Sun Mar 29 00:46:17.660620 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:21573] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "acgF2VvLf0RDUqcYq-Yi-wAAAAE"]
[Sun Mar 29 00:46:18.132036 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:16330] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n1GiO.php"] [unique_id "acgF2k8pSj6sqgZaItnCzQAAAI8"]
[Sun Mar 29 00:46:18.555007 2026] [:error] [pid 39429:tid 39508] [client 158.23.144.198:21517] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n1GiO.php"] [unique_id "acgF2k8pSj6sqgZaItnCzgAAAJY"]
[Sun Mar 29 00:46:19.078071 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:21532] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n1GiO.php"] [unique_id "acgF2ykUyvlQod6qQu1l5QAAAMo"]
[Sun Mar 29 00:46:19.578721 2026] [:error] [pid 39429:tid 39489] [client 158.23.144.198:21533] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n1GiO.php"] [unique_id "acgF208pSj6sqgZaItnC0wAAAIM"]
[Sun Mar 29 00:46:20.011813 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:21582] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pLdK1.php"] [unique_id "acgF3KXMrozFMIaP8nLl8gAAAEg"]
[Sun Mar 29 00:46:20.513870 2026] [:error] [pid 39428:tid 39475] [client 158.23.144.198:21597] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pLdK1.php"] [unique_id "acgF3KXMrozFMIaP8nLl9AAAAFA"]
[Sun Mar 29 00:46:21.069411 2026] [:error] [pid 39427:tid 39438] [client 158.23.144.198:21632] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pLdK1.php"] [unique_id "acgF3VvLf0RDUqcYq-YjAwAAAAY"]
[Sun Mar 29 00:46:21.530088 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:21607] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pLdK1.php"] [unique_id "acgF3SkUyvlQod6qQu1l5gAAANM"]
[Sun Mar 29 00:46:21.992992 2026] [:error] [pid 39428:tid 39466] [client 158.23.144.198:21629] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/llb1J.php"] [unique_id "acgF3aXMrozFMIaP8nLl_AAAAEc"]
[Sun Mar 29 00:46:22.414305 2026] [:error] [pid 39429:tid 39508] [client 158.23.144.198:21586] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/llb1J.php"] [unique_id "acgF3k8pSj6sqgZaItnC2QAAAJY"]
[Sun Mar 29 00:46:22.831975 2026] [:error] [pid 39427:tid 39435] [client 158.23.144.198:21687] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/llb1J.php"] [unique_id "acgF3lvLf0RDUqcYq-YjDQAAAAM"]
[Sun Mar 29 00:46:23.369899 2026] [:error] [pid 39427:tid 39432] [client 158.23.144.198:21594] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/llb1J.php"] [unique_id "acgF31vLf0RDUqcYq-YjDwAAAAA"]
[Sun Mar 29 00:46:23.835064 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:21593] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jeZDu.php"] [unique_id "acgF31vLf0RDUqcYq-YjFAAAABc"]
[Sun Mar 29 00:46:24.645665 2026] [:error] [pid 39429:tid 39504] [client 158.23.144.198:21507] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jeZDu.php"] [unique_id "acgF4E8pSj6sqgZaItnC3gAAAJI"]
[Sun Mar 29 00:46:25.046503 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:21660] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jeZDu.php"] [unique_id "acgF4SkUyvlQod6qQu1l7gAAAMo"]
[Sun Mar 29 00:46:25.508854 2026] [:error] [pid 39427:tid 39446] [client 158.23.144.198:21622] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jeZDu.php"] [unique_id "acgF4VvLf0RDUqcYq-YjHQAAAA4"]
[Sun Mar 29 00:46:25.974457 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:21589] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "acgF4SkUyvlQod6qQu1l8wAAAM8"]
[Sun Mar 29 00:46:26.373248 2026] [:error] [pid 39427:tid 39452] [client 158.23.144.198:21722] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "acgF4lvLf0RDUqcYq-YjIwAAABQ"]
[Sun Mar 29 00:46:26.986177 2026] [:error] [pid 39427:tid 39442] [client 158.23.144.198:21733] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "acgF4lvLf0RDUqcYq-YjLgAAAAo"]
[Sun Mar 29 00:46:27.447459 2026] [:error] [pid 39427:tid 39456] [client 158.23.144.198:21513] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gec.php"] [unique_id "acgF41vLf0RDUqcYq-YjMAAAABg"]
[Sun Mar 29 00:46:27.995355 2026] [:error] [pid 39427:tid 39449] [client 158.23.144.198:16355] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfuKK.php"] [unique_id "acgF41vLf0RDUqcYq-YjMwAAABE"]
[Sun Mar 29 00:46:28.525149 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:16339] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfuKK.php"] [unique_id "acgF5FvLf0RDUqcYq-YjNQAAAAQ"]
[Sun Mar 29 00:46:29.107324 2026] [:error] [pid 39428:tid 39481] [client 158.23.144.198:21690] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfuKK.php"] [unique_id "acgF5aXMrozFMIaP8nLmCgAAAFY"]
[Sun Mar 29 00:46:29.759729 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:21628] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfuKK.php"] [unique_id "acgF5VvLf0RDUqcYq-YjOAAAABc"]
[Sun Mar 29 00:46:30.162673 2026] [:error] [pid 39429:tid 39491] [client 158.23.144.198:16347] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OpVq6.php"] [unique_id "acgF5k8pSj6sqgZaItnC4gAAAIU"]
[Sun Mar 29 00:46:30.561847 2026] [:error] [pid 39429:tid 39495] [client 158.23.144.198:21515] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OpVq6.php"] [unique_id "acgF5k8pSj6sqgZaItnC4wAAAIk"]
[Sun Mar 29 00:46:31.101910 2026] [:error] [pid 39428:tid 39466] [client 158.23.144.198:21681] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OpVq6.php"] [unique_id "acgF56XMrozFMIaP8nLmEgAAAEc"]
[Sun Mar 29 00:46:31.608621 2026] [:error] [pid 39428:tid 39459] [client 158.23.144.198:21518] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/OpVq6.php"] [unique_id "acgF56XMrozFMIaP8nLmFQAAAEA"]
[Sun Mar 29 00:46:32.347207 2026] [:error] [pid 39514:tid 39547] [client 158.23.144.198:21512] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Q73BO.php"] [unique_id "acgF6CkUyvlQod6qQu1mBAAAANY"]
[Sun Mar 29 00:46:32.788505 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:21619] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Q73BO.php"] [unique_id "acgF6CkUyvlQod6qQu1mBQAAAMQ"]
[Sun Mar 29 00:46:45.679998 2026] [:error] [pid 39514:tid 39547] [client 158.23.144.198:21554] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc13.php"] [unique_id "acgF9SkUyvlQod6qQu1mMwAAANY"]
[Sun Mar 29 00:46:46.121539 2026] [:error] [pid 39429:tid 39504] [client 158.23.144.198:21566] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc13.php"] [unique_id "acgF9k8pSj6sqgZaItnC-gAAAJI"]
[Sun Mar 29 00:46:46.650879 2026] [:error] [pid 39429:tid 39505] [client 158.23.144.198:21616] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc13.php"] [unique_id "acgF9k8pSj6sqgZaItnC_QAAAJM"]
[Sun Mar 29 00:46:47.114861 2026] [:error] [pid 39429:tid 39486] [client 158.23.144.198:21547] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc13.php"] [unique_id "acgF908pSj6sqgZaItnC_wAAAIA"]
[Sun Mar 29 00:46:47.616379 2026] [:error] [pid 39429:tid 39495] [client 158.23.144.198:21620] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "acgF908pSj6sqgZaItnDAwAAAIk"]
[Sun Mar 29 00:46:48.043747 2026] [:error] [pid 39427:tid 39442] [client 158.23.144.198:21605] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "acgF-FvLf0RDUqcYq-YjZQAAAAo"]
[Sun Mar 29 00:46:48.548209 2026] [:error] [pid 39427:tid 39434] [client 158.23.144.198:21689] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "acgF-FvLf0RDUqcYq-YjaAAAAAI"]
[Sun Mar 29 00:46:49.205275 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:21615] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "acgF-SkUyvlQod6qQu1mPgAAANA"]
[Sun Mar 29 00:46:49.604676 2026] [:error] [pid 39429:tid 39504] [client 158.23.144.198:21516] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "acgF-U8pSj6sqgZaItnDCQAAAJI"]
[Sun Mar 29 00:46:50.079609 2026] [:error] [pid 39428:tid 39465] [client 158.23.144.198:21606] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "acgF-qXMrozFMIaP8nLmNwAAAEY"]
[Sun Mar 29 00:46:50.578183 2026] [:error] [pid 39428:tid 39460] [client 158.23.144.198:21731] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "acgF-qXMrozFMIaP8nLmOgAAAEE"]
[Sun Mar 29 00:46:51.157458 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:21656] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "acgF-1vLf0RDUqcYq-YjbwAAABc"]
[Sun Mar 29 00:46:51.590150 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:21617] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "acgF-1vLf0RDUqcYq-YjdQAAAAQ"]
[Sun Mar 29 00:46:52.068635 2026] [:error] [pid 39429:tid 39488] [client 158.23.144.198:21561] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "acgF_E8pSj6sqgZaItnDDQAAAII"]
[Sun Mar 29 00:46:52.532668 2026] [:error] [pid 39427:tid 39455] [client 158.23.144.198:21551] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "acgF_FvLf0RDUqcYq-YjfAAAABc"]
[Sun Mar 29 00:46:53.451387 2026] [:error] [pid 39429:tid 39508] [client 158.23.144.198:21757] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "acgF_U8pSj6sqgZaItnDDgAAAJY"]
[Sun Mar 29 00:46:53.927062 2026] [:error] [pid 39429:tid 39496] [client 158.23.144.198:21550] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acgF_U8pSj6sqgZaItnDEQAAAIo"]
[Sun Mar 29 00:46:54.339313 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:16321] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acgF_ikUyvlQod6qQu1mSQAAAMo"]
[Sun Mar 29 00:46:54.828536 2026] [:error] [pid 39514:tid 39546] [client 158.23.144.198:21664] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acgF_ikUyvlQod6qQu1mSgAAANU"]
[Sun Mar 29 00:46:55.426739 2026] [:error] [pid 39514:tid 39538] [client 158.23.144.198:21504] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acgF_ykUyvlQod6qQu1mTQAAAM0"]
[Sun Mar 29 00:46:55.973831 2026] [:error] [pid 39427:tid 39453] [client 158.23.144.198:21688] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/north1.php"] [unique_id "acgF_1vLf0RDUqcYq-YjigAAABU"]
[Sun Mar 29 00:46:56.387608 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:21540] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/north1.php"] [unique_id "acgGACkUyvlQod6qQu1mUQAAAMg"]
[Sun Mar 29 00:46:56.808103 2026] [:error] [pid 39427:tid 39439] [client 158.23.144.198:16320] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/north1.php"] [unique_id "acgGAFvLf0RDUqcYq-YjkwAAAAc"]
[Sun Mar 29 00:46:57.377820 2026] [:error] [pid 39427:tid 39449] [client 158.23.144.198:16325] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/north1.php"] [unique_id "acgGAVvLf0RDUqcYq-YjmAAAABE"]
[Sun Mar 29 00:46:57.854061 2026] [:error] [pid 39427:tid 39450] [client 158.23.144.198:21536] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "acgGAVvLf0RDUqcYq-YjnAAAABI"]
[Sun Mar 29 00:46:58.348907 2026] [:error] [pid 39427:tid 39453] [client 158.23.144.198:21642] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "acgGAlvLf0RDUqcYq-YjogAAABU"]
[Sun Mar 29 00:46:58.938280 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:21618] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "acgGAikUyvlQod6qQu1mVgAAAMs"]
[Sun Mar 29 00:46:59.429934 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:21596] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "acgGAykUyvlQod6qQu1mWgAAAMA"]
[Sun Mar 29 00:46:59.945124 2026] [:error] [pid 39428:tid 39468] [client 158.23.144.198:16360] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "acgGA6XMrozFMIaP8nLmSwAAAEk"]
[Sun Mar 29 00:47:00.364990 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:21510] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "acgGBE8pSj6sqgZaItnDHwAAAI4"]
[Sun Mar 29 00:47:00.789672 2026] [:error] [pid 39428:tid 39460] [client 158.23.144.198:21614] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "acgGBKXMrozFMIaP8nLmUQAAAEE"]
[Sun Mar 29 00:47:01.192551 2026] [:error] [pid 39428:tid 39473] [client 158.23.144.198:21558] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "acgGBaXMrozFMIaP8nLmVgAAAE4"]
[Sun Mar 29 00:47:01.671299 2026] [:error] [pid 39429:tid 39489] [client 158.23.144.198:21584] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/caiij.php"] [unique_id "acgGBU8pSj6sqgZaItnDIgAAAIM"]
[Sun Mar 29 00:47:02.123589 2026] [:error] [pid 39429:tid 39496] [client 158.23.144.198:16258] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/caiij.php"] [unique_id "acgGBk8pSj6sqgZaItnDJQAAAIo"]
[Sun Mar 29 00:47:02.681153 2026] [:error] [pid 39428:tid 39481] [client 158.23.144.198:21581] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/caiij.php"] [unique_id "acgGBqXMrozFMIaP8nLmWgAAAFY"]
[Sun Mar 29 00:47:03.098172 2026] [:error] [pid 39428:tid 39479] [client 158.23.144.198:21509] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/caiij.php"] [unique_id "acgGB6XMrozFMIaP8nLmXwAAAFQ"]
[Sun Mar 29 00:47:03.487431 2026] [:error] [pid 39428:tid 39478] [client 158.23.144.198:21601] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gel4y.php"] [unique_id "acgGB6XMrozFMIaP8nLmYQAAAFM"]
[Sun Mar 29 00:47:03.882708 2026] [:error] [pid 39428:tid 39464] [client 158.23.144.198:21535] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gel4y.php"] [unique_id "acgGB6XMrozFMIaP8nLmYwAAAEU"]
[Sun Mar 29 00:47:04.284317 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:21526] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gel4y.php"] [unique_id "acgGCCkUyvlQod6qQu1mYgAAANA"]
[Sun Mar 29 00:47:04.728928 2026] [:error] [pid 39514:tid 39536] [client 158.23.144.198:21563] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gel4y.php"] [unique_id "acgGCCkUyvlQod6qQu1mZAAAAMs"]
[Sun Mar 29 00:47:05.162779 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:21541] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxijj.php"] [unique_id "acgGCSkUyvlQod6qQu1maAAAAME"]
[Sun Mar 29 00:47:05.612690 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:16358] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxijj.php"] [unique_id "acgGCSkUyvlQod6qQu1mbAAAAMM"]
[Sun Mar 29 00:47:05.995699 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:21537] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxijj.php"] [unique_id "acgGCSkUyvlQod6qQu1mcQAAAMg"]
[Sun Mar 29 00:47:06.428295 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:21609] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxijj.php"] [unique_id "acgGCikUyvlQod6qQu1mcwAAANA"]
[Sun Mar 29 00:47:06.888761 2026] [:error] [pid 39427:tid 39450] [client 158.23.144.198:21552] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rkiea.php"] [unique_id "acgGClvLf0RDUqcYq-YjrgAAABI"]
[Sun Mar 29 00:47:07.740335 2026] [:error] [pid 39428:tid 39472] [client 158.23.144.198:16324] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rkiea.php"] [unique_id "acgGC6XMrozFMIaP8nLmaQAAAE0"]
[Sun Mar 29 00:47:08.157188 2026] [:error] [pid 39514:tid 39546] [client 158.23.144.198:21608] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rkiea.php"] [unique_id "acgGDCkUyvlQod6qQu1meAAAANU"]
[Sun Mar 29 00:47:08.862540 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:16361] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rkiea.php"] [unique_id "acgGDCkUyvlQod6qQu1mfAAAANg"]
[Sun Mar 29 00:47:09.299278 2026] [:error] [pid 39514:tid 39530] [client 158.23.144.198:21542] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/resp.php"] [unique_id "acgGDSkUyvlQod6qQu1mfwAAAMU"]
[Sun Mar 29 00:47:09.743703 2026] [:error] [pid 39428:tid 39482] [client 158.23.144.198:21521] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/resp.php"] [unique_id "acgGDaXMrozFMIaP8nLmawAAAFc"]
[Sun Mar 29 00:47:10.253110 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:16329] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/resp.php"] [unique_id "acgGDlvLf0RDUqcYq-YjuwAAAAQ"]
[Sun Mar 29 00:47:10.694581 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:21557] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/resp.php"] [unique_id "acgGDikUyvlQod6qQu1mhgAAAMM"]
[Sun Mar 29 00:47:11.087754 2026] [:error] [pid 39427:tid 39454] [client 158.23.144.198:16350] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanou.php"] [unique_id "acgGD1vLf0RDUqcYq-YjwAAAABY"]
[Sun Mar 29 00:47:11.491852 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:16272] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanou.php"] [unique_id "acgGDykUyvlQod6qQu1mhwAAANA"]
[Sun Mar 29 00:47:12.145552 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:21531] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanou.php"] [unique_id "acgGECkUyvlQod6qQu1miQAAAME"]
[Sun Mar 29 00:47:12.650222 2026] [:error] [pid 39428:tid 39482] [client 158.23.144.198:21548] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lanou.php"] [unique_id "acgGEKXMrozFMIaP8nLmdAAAAFc"]
[Sun Mar 29 00:47:13.074523 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:16326] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eursi.php"] [unique_id "acgGESkUyvlQod6qQu1mjQAAAM4"]
[Sun Mar 29 00:47:13.656194 2026] [:error] [pid 39429:tid 39510] [client 158.23.144.198:21520] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eursi.php"] [unique_id "acgGEU8pSj6sqgZaItnDMwAAAJg"]
[Sun Mar 29 00:47:14.063815 2026] [:error] [pid 39428:tid 39464] [client 158.23.144.198:21556] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eursi.php"] [unique_id "acgGEqXMrozFMIaP8nLmeAAAAEU"]
[Sun Mar 29 00:47:14.670833 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:16193] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eursi.php"] [unique_id "acgGEqXMrozFMIaP8nLmfAAAAEg"]
[Sun Mar 29 00:47:15.144355 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:21580] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pas2.php"] [unique_id "acgGEykUyvlQod6qQu1mlQAAAMA"]
[Sun Mar 29 00:47:15.842224 2026] [:error] [pid 39428:tid 39466] [client 158.23.144.198:21555] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pas2.php"] [unique_id "acgGE6XMrozFMIaP8nLmfgAAAEc"]
[Sun Mar 29 00:47:16.525551 2026] [:error] [pid 39429:tid 39503] [client 158.23.144.198:21525] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pas2.php"] [unique_id "acgGFE8pSj6sqgZaItnDNwAAAJE"]
[Sun Mar 29 00:47:16.924911 2026] [:error] [pid 39427:tid 39448] [client 158.23.144.198:16313] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pas2.php"] [unique_id "acgGFFvLf0RDUqcYq-YjyAAAABA"]
[Sun Mar 29 00:47:17.327471 2026] [:error] [pid 39429:tid 39506] [client 158.23.144.198:21654] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schal.php"] [unique_id "acgGFU8pSj6sqgZaItnDOQAAAJQ"]
[Sun Mar 29 00:47:17.979335 2026] [:error] [pid 39514:tid 39540] [client 158.23.144.198:21578] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schal.php"] [unique_id "acgGFSkUyvlQod6qQu1mpQAAAM8"]
[Sun Mar 29 00:47:18.539699 2026] [:error] [pid 39429:tid 39499] [client 158.23.144.198:16323] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schal.php"] [unique_id "acgGFk8pSj6sqgZaItnDPQAAAI0"]
[Sun Mar 29 00:47:19.241188 2026] [:error] [pid 39514:tid 39527] [client 158.23.144.198:16373] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schal.php"] [unique_id "acgGFykUyvlQod6qQu1mqgAAAMI"]
[Sun Mar 29 00:47:19.645007 2026] [:error] [pid 39429:tid 39508] [client 158.23.144.198:21559] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xex.php"] [unique_id "acgGF08pSj6sqgZaItnDQwAAAJY"]
[Sun Mar 29 00:47:20.223301 2026] [:error] [pid 39429:tid 39496] [client 158.23.144.198:16337] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xex.php"] [unique_id "acgGGE8pSj6sqgZaItnDRAAAAIo"]
[Sun Mar 29 00:47:20.716125 2026] [:error] [pid 39428:tid 39459] [client 158.23.144.198:16368] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xex.php"] [unique_id "acgGGKXMrozFMIaP8nLmgwAAAEA"]
[Sun Mar 29 00:47:21.109982 2026] [:error] [pid 39428:tid 39473] [client 158.23.144.198:16267] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xex.php"] [unique_id "acgGGaXMrozFMIaP8nLmhAAAAE4"]
[Sun Mar 29 00:47:21.737157 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:16359] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "acgGGaXMrozFMIaP8nLmiQAAAEg"]
[Sun Mar 29 00:47:22.513406 2026] [:error] [pid 39514:tid 39527] [client 158.23.144.198:16379] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "acgGGikUyvlQod6qQu1msAAAAMI"]
[Sun Mar 29 00:47:23.065254 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:21655] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "acgGGykUyvlQod6qQu1mtgAAANM"]
[Sun Mar 29 00:47:23.497545 2026] [:error] [pid 39514:tid 39534] [client 158.23.144.198:16322] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "acgGGykUyvlQod6qQu1muQAAAMk"]
[Sun Mar 29 00:47:23.930942 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:21564] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acgGG1vLf0RDUqcYq-Yj2gAAAA8"]
[Sun Mar 29 00:47:24.362165 2026] [:error] [pid 39427:tid 39436] [client 158.23.144.198:21610] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acgGHFvLf0RDUqcYq-Yj3AAAAAQ"]
[Sun Mar 29 00:47:24.778841 2026] [:error] [pid 39429:tid 39507] [client 158.23.144.198:16362] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acgGHE8pSj6sqgZaItnDTAAAAJU"]
[Sun Mar 29 00:47:25.178423 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:16352] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acgGHVvLf0RDUqcYq-Yj4gAAAAE"]
[Sun Mar 29 00:47:25.644435 2026] [:error] [pid 39514:tid 39531] [client 158.23.144.198:21524] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dtyh.php"] [unique_id "acgGHSkUyvlQod6qQu1mwgAAAMY"]
[Sun Mar 29 00:47:26.050837 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:16343] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dtyh.php"] [unique_id "acgGHikUyvlQod6qQu1mxgAAANE"]
[Sun Mar 29 00:47:26.506553 2026] [:error] [pid 39514:tid 39541] [client 158.23.144.198:21604] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dtyh.php"] [unique_id "acgGHikUyvlQod6qQu1mygAAANA"]
[Sun Mar 29 00:47:26.932175 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:16262] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dtyh.php"] [unique_id "acgGHikUyvlQod6qQu1mzgAAAMw"]
[Sun Mar 29 00:47:27.390170 2026] [:error] [pid 39429:tid 39503] [client 158.23.144.198:21538] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wta.php"] [unique_id "acgGH08pSj6sqgZaItnDTgAAAJE"]
[Sun Mar 29 00:47:27.863057 2026] [:error] [pid 39429:tid 39501] [client 158.23.144.198:16328] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wta.php"] [unique_id "acgGH08pSj6sqgZaItnDUQAAAI8"]
[Sun Mar 29 00:47:28.681530 2026] [:error] [pid 39427:tid 39448] [client 158.23.144.198:21508] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wta.php"] [unique_id "acgGIFvLf0RDUqcYq-Yj5gAAABA"]
[Sun Mar 29 00:47:29.156676 2026] [:error] [pid 39427:tid 39450] [client 158.23.144.198:16382] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wta.php"] [unique_id "acgGIVvLf0RDUqcYq-Yj6AAAABI"]
[Sun Mar 29 00:47:29.680071 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:21553] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acgGISkUyvlQod6qQu1m1gAAANM"]
[Sun Mar 29 00:47:30.155842 2026] [:error] [pid 39427:tid 39443] [client 158.23.144.198:16268] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acgGIlvLf0RDUqcYq-Yj7QAAAAs"]
[Sun Mar 29 00:47:30.598030 2026] [:error] [pid 39429:tid 39502] [client 158.23.144.198:16292] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acgGIk8pSj6sqgZaItnDWgAAAJA"]
[Sun Mar 29 00:47:31.166409 2026] [:error] [pid 39427:tid 39434] [client 158.23.144.198:16345] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "acgGI1vLf0RDUqcYq-Yj7gAAAAI"]
[Sun Mar 29 00:47:31.688856 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:21539] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "acgGI1vLf0RDUqcYq-Yj8QAAAAE"]
[Sun Mar 29 00:47:32.152625 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:16331] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "acgGJFvLf0RDUqcYq-Yj9wAAAA8"]
[Sun Mar 29 00:47:32.562611 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:21630] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "acgGJE8pSj6sqgZaItnDXwAAAI4"]
[Sun Mar 29 00:47:32.954821 2026] [:error] [pid 39428:tid 39464] [client 158.23.144.198:21560] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "acgGJKXMrozFMIaP8nLmnQAAAEU"]
[Sun Mar 29 00:47:33.438127 2026] [:error] [pid 39428:tid 39469] [client 158.23.144.198:21534] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acgGJaXMrozFMIaP8nLmnwAAAEo"]
[Sun Mar 29 00:47:33.940780 2026] [:error] [pid 39514:tid 39547] [client 158.23.144.198:21567] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acgGJSkUyvlQod6qQu1m2QAAANY"]
[Sun Mar 29 00:47:34.900994 2026] [:error] [pid 39428:tid 39465] [client 158.23.144.198:16280] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acgGJqXMrozFMIaP8nLmqQAAAEY"]
[Sun Mar 29 00:47:35.666854 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:16354] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "acgGJ1vLf0RDUqcYq-YkBQAAAAE"]
[Sun Mar 29 00:47:36.139921 2026] [:error] [pid 39427:tid 39445] [client 158.23.144.198:16283] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "acgGKFvLf0RDUqcYq-YkCAAAAA0"]
[Sun Mar 29 00:47:36.553898 2026] [:error] [pid 39428:tid 39459] [client 158.23.144.198:21623] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "acgGKKXMrozFMIaP8nLmrQAAAEA"]
[Sun Mar 29 00:47:36.947751 2026] [:error] [pid 39427:tid 39447] [client 158.23.144.198:16348] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "acgGKFvLf0RDUqcYq-YkDAAAAA8"]
[Sun Mar 29 00:47:37.464830 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:21549] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "acgGKSkUyvlQod6qQu1m3QAAAMo"]
[Sun Mar 29 00:47:37.957019 2026] [:error] [pid 39427:tid 39451] [client 158.23.144.198:16371] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acgGKVvLf0RDUqcYq-YkFAAAABM"]
[Sun Mar 29 00:47:38.393799 2026] [:error] [pid 39514:tid 39546] [client 158.23.144.198:16341] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acgGKikUyvlQod6qQu1m4gAAANU"]
[Sun Mar 29 00:47:38.797864 2026] [:error] [pid 39428:tid 39475] [client 158.23.144.198:21545] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acgGKqXMrozFMIaP8nLmsQAAAFA"]
[Sun Mar 29 00:47:39.370097 2026] [:error] [pid 39428:tid 39479] [client 158.23.144.198:21511] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "acgGK6XMrozFMIaP8nLmswAAAFQ"]
[Sun Mar 29 00:47:39.871246 2026] [:error] [pid 39428:tid 39468] [client 158.23.144.198:21544] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "acgGK6XMrozFMIaP8nLmtQAAAEk"]
[Sun Mar 29 00:47:40.702824 2026] [:error] [pid 39428:tid 39476] [client 158.23.144.198:16344] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "acgGLKXMrozFMIaP8nLmuQAAAFE"]
[Sun Mar 29 00:47:41.232300 2026] [:error] [pid 39427:tid 39448] [client 158.23.144.198:21640] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "acgGLVvLf0RDUqcYq-YkHAAAABA"]
[Sun Mar 29 00:47:41.981684 2026] [:error] [pid 39428:tid 39467] [client 158.23.144.198:21624] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "acgGLaXMrozFMIaP8nLmugAAAEg"]
[Sun Mar 29 00:47:42.500023 2026] [:error] [pid 39427:tid 39456] [client 158.23.144.198:16375] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gpt-sh.php"] [unique_id "acgGLlvLf0RDUqcYq-YkIwAAABg"]
[Sun Mar 29 00:47:43.081541 2026] [:error] [pid 39428:tid 39473] [client 158.23.144.198:16273] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gpt-sh.php"] [unique_id "acgGL6XMrozFMIaP8nLmvAAAAE4"]
[Sun Mar 29 00:47:43.473957 2026] [:error] [pid 39428:tid 39480] [client 158.23.144.198:21529] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gpt-sh.php"] [unique_id "acgGL6XMrozFMIaP8nLmvgAAAFU"]
[Sun Mar 29 00:47:58.174025 2026] [:error] [pid 39427:tid 39433] [client 158.23.144.198:16346] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acgGPlvLf0RDUqcYq-YkZwAAAAE"]
[Sun Mar 29 00:47:58.679471 2026] [:error] [pid 39427:tid 39456] [client 158.23.144.198:16356] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acgGPlvLf0RDUqcYq-YkawAAABg"]
[Sun Mar 29 00:47:59.217074 2026] [:error] [pid 39514:tid 39537] [client 158.23.144.198:21621] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acgGPykUyvlQod6qQu1nGQAAAMw"]
[Sun Mar 29 00:47:59.627416 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:16271] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "acgGP08pSj6sqgZaItnDgwAAAI4"]
[Sun Mar 29 00:48:00.815389 2026] [:error] [pid 39428:tid 39471] [client 158.23.144.198:16214] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acgGQKXMrozFMIaP8nLm2wAAAEw"]
[Sun Mar 29 00:48:01.409287 2026] [:error] [pid 39514:tid 39527] [client 158.23.144.198:16340] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acgGQSkUyvlQod6qQu1nKAAAAMI"]
[Sun Mar 29 00:48:02.231651 2026] [:error] [pid 39428:tid 39479] [client 158.23.144.198:16286] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acgGQqXMrozFMIaP8nLm3wAAAFQ"]
[Sun Mar 29 00:48:02.949219 2026] [:error] [pid 39429:tid 39500] [client 158.23.144.198:16319] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acgGQk8pSj6sqgZaItnDjwAAAI4"]
[Sun Mar 29 00:48:03.445510 2026] [:error] [pid 39428:tid 39474] [client 158.23.144.198:16357] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "acgGQ6XMrozFMIaP8nLm4wAAAE8"]
[Sun Mar 29 00:48:03.924698 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:16334] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "acgGQykUyvlQod6qQu1nNAAAANg"]
[Sun Mar 29 00:48:04.502220 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:16365] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "acgGRCkUyvlQod6qQu1nOgAAAM4"]
[Sun Mar 29 00:48:05.174374 2026] [:error] [pid 39514:tid 39533] [client 158.23.144.198:16374] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ticket.php"] [unique_id "acgGRSkUyvlQod6qQu1nPQAAAMg"]
[Sun Mar 29 00:48:05.620684 2026] [:error] [pid 39429:tid 39508] [client 158.23.144.198:21543] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "acgGRU8pSj6sqgZaItnDmQAAAJY"]
[Sun Mar 29 00:48:06.031931 2026] [:error] [pid 39427:tid 39452] [client 158.23.144.198:21523] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "acgGRlvLf0RDUqcYq-YkcgAAABQ"]
[Sun Mar 29 00:48:06.470499 2026] [:error] [pid 39428:tid 39471] [client 158.23.144.198:16278] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "acgGRqXMrozFMIaP8nLm5wAAAEw"]
[Sun Mar 29 00:48:07.327679 2026] [:error] [pid 39427:tid 39441] [client 158.23.144.198:16265] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "acgGR1vLf0RDUqcYq-YkeQAAAAk"]
[Sun Mar 29 00:48:08.140053 2026] [:error] [pid 39428:tid 39475] [client 158.23.144.198:16312] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "acgGSKXMrozFMIaP8nLm6QAAAFA"]
[Sun Mar 29 00:48:08.697217 2026] [:error] [pid 39514:tid 39542] [client 158.23.144.198:16261] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "acgGSCkUyvlQod6qQu1nSwAAANE"]
[Sun Mar 29 00:48:09.118395 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:21611] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "acgGSSkUyvlQod6qQu1nTwAAAMM"]
[Sun Mar 29 00:48:10.160321 2026] [:error] [pid 39514:tid 39527] [client 158.23.144.198:16295] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpwer1.php"] [unique_id "acgGSikUyvlQod6qQu1nVwAAAMI"]
[Sun Mar 29 00:48:10.566094 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:16299] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "acgGSikUyvlQod6qQu1nWwAAAMM"]
[Sun Mar 29 00:48:11.000193 2026] [:error] [pid 39429:tid 39510] [client 158.23.144.198:16282] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "acgGSk8pSj6sqgZaItnDoQAAAJg"]
[Sun Mar 29 00:48:11.723484 2026] [:error] [pid 39514:tid 39529] [client 158.23.144.198:16333] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "acgGSykUyvlQod6qQu1nZgAAAMQ"]
[Sun Mar 29 00:48:12.113195 2026] [:error] [pid 39514:tid 39544] [client 158.23.144.198:16335] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "acgGTCkUyvlQod6qQu1nawAAANM"]
[Sun Mar 29 00:48:12.512085 2026] [:error] [pid 39514:tid 39535] [client 158.23.144.198:21562] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "acgGTCkUyvlQod6qQu1nbgAAAMo"]
[Sun Mar 29 00:48:13.352530 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:16204] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "acgGTSkUyvlQod6qQu1ncgAAANg"]
[Sun Mar 29 00:48:13.738596 2026] [:error] [pid 39427:tid 39446] [client 158.23.144.198:16202] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "acgGTVvLf0RDUqcYq-YkgQAAAA4"]
[Sun Mar 29 00:48:14.120770 2026] [:error] [pid 39514:tid 39528] [client 158.23.144.198:16307] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "acgGTikUyvlQod6qQu1neAAAAMM"]
[Sun Mar 29 00:48:14.644159 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:16383] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpass.php"] [unique_id "acgGTikUyvlQod6qQu1nfQAAAME"]
[Sun Mar 29 00:48:15.044785 2026] [:error] [pid 39514:tid 39550] [client 158.23.144.198:16336] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpass.php"] [unique_id "acgGTykUyvlQod6qQu1nggAAANg"]
[Sun Mar 29 00:48:15.637481 2026] [:error] [pid 39514:tid 39525] [client 158.23.144.198:16235] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpass.php"] [unique_id "acgGTykUyvlQod6qQu1niAAAAME"]
[Sun Mar 29 00:48:16.247119 2026] [:error] [pid 39429:tid 39490] [client 158.23.144.198:16366] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xpass.php"] [unique_id "acgGUE8pSj6sqgZaItnDrAAAAIQ"]
[Sun Mar 29 00:48:16.714216 2026] [:error] [pid 39429:tid 39505] [client 158.23.144.198:16267] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad.php"] [unique_id "acgGUE8pSj6sqgZaItnDsAAAAJM"]
[Sun Mar 29 00:48:17.142611 2026] [:error] [pid 39514:tid 39547] [client 158.23.144.198:16377] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad.php"] [unique_id "acgGUSkUyvlQod6qQu1nlQAAANY"]
[Sun Mar 29 00:48:17.563561 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:16316] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad.php"] [unique_id "acgGUSkUyvlQod6qQu1nmgAAAM4"]
[Sun Mar 29 00:48:17.984973 2026] [:error] [pid 39514:tid 39524] [client 158.23.144.198:21565] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ad.php"] [unique_id "acgGUSkUyvlQod6qQu1nnwAAAMA"]
[Sun Mar 29 00:48:18.419880 2026] [:error] [pid 39427:tid 39450] [client 158.23.144.198:16310] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "acgGUlvLf0RDUqcYq-YkgwAAABI"]
[Sun Mar 29 00:48:18.855937 2026] [:error] [pid 39514:tid 39539] [client 158.23.144.198:21627] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "acgGUikUyvlQod6qQu1npgAAAM4"]
[Sun Mar 29 00:48:19.319513 2026] [:error] [pid 39514:tid 39549] [client 158.23.144.198:16317] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "acgGUykUyvlQod6qQu1nqwAAANc"]
[Sun Mar 29 00:48:19.775937 2026] [:error] [pid 39427:tid 39442] [client 158.23.144.198:16351] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h02ugyh.php"] [unique_id "acgGU1vLf0RDUqcYq-YkhwAAAAo"]
[Sun Mar 29 01:49:56.391419 2026] [:error] [pid 39429:tid 39505] [client 114.96.103.33:42229] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acgUxE8pSj6sqgZaItnfAQAAAJM"]
[Sun Mar 29 03:11:46.552427 2026] [:error] [pid 11588:tid 11608] [client 135.236.141.99:35691] [client 135.236.141.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.99, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acgn8ghH5525WHuzKfp04AAAAVI"]
[Sun Mar 29 03:11:49.147833 2026] [:error] [pid 11588:tid 11598] [client 135.236.141.99:35691] [client 135.236.141.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.236.141.99, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acgn9QhH5525WHuzKfp08wAAAUg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 29 05:14:15.882367 2026] [:error] [pid 32359:tid 32381] [client 104.244.79.40:42868] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "achEpwMb8G3UzfQP3WjONgAAANQ"]
[Sun Mar 29 05:14:17.077107 2026] [:error] [pid 32359:tid 32369] [client 104.244.79.40:42868] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "achEqQMb8G3UzfQP3WjONwAAAMg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 29 05:31:27.080190 2026] [:error] [pid 32254:tid 32285] [client 216.250.12.125:49882] [client 216.250.12.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.250.12.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "achIr6ug2IHuyGgCTn8R1QAAABU"]
[Sun Mar 29 05:31:28.396044 2026] [:error] [pid 32254:tid 32275] [client 216.250.12.125:49882] [client 216.250.12.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.250.12.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "achIsKug2IHuyGgCTn8R1gAAAAs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 29 06:11:40.137449 2026] [:error] [pid 32255:tid 32298] [client 197.245.211.219:53327] [client 197.245.211.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.245.211.219, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "achSHGnfn-AtRoMbquxV6wAAAEc"]
[Sun Mar 29 06:16:46.073681 2026] [:error] [pid 23284:tid 23295] [client 197.245.211.219:57272] [client 197.245.211.219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "achTTozBujdPHsq7wyRJNAAAAok"]
[Sun Mar 29 06:54:45.449472 2026] [:error] [pid 23167:tid 23173] [client 217.182.195.225:54366] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "achcNRIAHJCFaHff3_dXNwAAAcM"]
[Sun Mar 29 06:54:47.796598 2026] [:error] [pid 23168:tid 23208] [client 217.182.195.225:34518] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "achcN2P8p0yRL8ot_2__jAAAAgs"]
[Sun Mar 29 06:54:50.218938 2026] [:error] [pid 23250:tid 23276] [client 217.182.195.225:34528] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "achcOpxrpj-dQjy1cvpFwwAAAlg"]
[Sun Mar 29 06:54:52.759735 2026] [:error] [pid 23284:tid 23309] [client 217.182.195.225:34532] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "achcPIzBujdPHsq7wyRT-AAAApc"]
[Sun Mar 29 06:54:55.289686 2026] [:error] [pid 32255:tid 32310] [client 217.182.195.225:34538] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "achcP2nfn-AtRoMbquxlMAAAAFM"]
[Sun Mar 29 06:54:57.765850 2026] [:error] [pid 32255:tid 32308] [client 217.182.195.225:35224] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "achcQWnfn-AtRoMbquxlRwAAAFE"]
[Sun Mar 29 06:55:00.166857 2026] [:error] [pid 23168:tid 23220] [client 217.182.195.225:35232] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "achcRGP8p0yRL8ot_2__kgAAAhc"]
[Sun Mar 29 06:55:02.695313 2026] [:error] [pid 23137:tid 23142] [client 217.182.195.225:35242] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "achcRhaWQa7LdZ_qGFaK9wAAAYM"]
[Sun Mar 29 06:55:05.220882 2026] [:error] [pid 32255:tid 32302] [client 217.182.195.225:35244] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "achcSWnfn-AtRoMbquxlawAAAEs"]
[Sun Mar 29 06:55:07.732180 2026] [:error] [pid 32255:tid 32301] [client 217.182.195.225:60202] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "achcS2nfn-AtRoMbquxlgAAAAEo"]
[Sun Mar 29 06:55:10.241425 2026] [:error] [pid 23167:tid 23185] [client 217.182.195.225:60210] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "achcThIAHJCFaHff3_dXZQAAAc8"]
[Sun Mar 29 06:55:12.768669 2026] [:error] [pid 23250:tid 23274] [client 217.182.195.225:60216] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "achcUJxrpj-dQjy1cvpF2wAAAlY"]
[Sun Mar 29 06:55:15.124822 2026] [:error] [pid 23168:tid 23208] [client 217.182.195.225:60222] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "achcU2P8p0yRL8ot_2__mwAAAgs"]
[Sun Mar 29 06:55:17.653185 2026] [:error] [pid 32255:tid 32292] [client 217.182.195.225:33058] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "achcVWnfn-AtRoMbquxloQAAAEE"]
[Sun Mar 29 06:55:20.124179 2026] [:error] [pid 23284:tid 23288] [client 217.182.195.225:33066] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "achcWIzBujdPHsq7wyRUEQAAAoI"]
[Sun Mar 29 06:55:22.469185 2026] [:error] [pid 32255:tid 32310] [client 217.182.195.225:33080] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "achcWmnfn-AtRoMbquxlqwAAAFM"]
[Sun Mar 29 06:55:24.971066 2026] [:error] [pid 23284:tid 23307] [client 217.182.195.225:33086] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "achcXIzBujdPHsq7wyRUFQAAApU"]
[Sun Mar 29 06:55:27.488574 2026] [:error] [pid 32255:tid 32294] [client 217.182.195.225:47226] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "achcX2nfn-AtRoMbquxltQAAAEM"]
[Sun Mar 29 06:55:29.989512 2026] [:error] [pid 32257:tid 32336] [client 217.182.195.225:47240] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "achcYSE3TArOFrUtgWpOuQAAAJI"]
[Sun Mar 29 06:55:32.496719 2026] [:error] [pid 23167:tid 23187] [client 217.182.195.225:47256] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "achcZBIAHJCFaHff3_dXgQAAAdE"]
[Sun Mar 29 06:55:34.995429 2026] [:error] [pid 23250:tid 23269] [client 217.182.195.225:47270] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "achcZpxrpj-dQjy1cvpF6gAAAlE"]
[Sun Mar 29 06:55:37.493111 2026] [:error] [pid 23167:tid 23194] [client 217.182.195.225:44782] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "achcaRIAHJCFaHff3_dXkAAAAdg"]
[Sun Mar 29 06:55:39.855307 2026] [:error] [pid 23250:tid 23258] [client 217.182.195.225:44790] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "achca5xrpj-dQjy1cvpF7QAAAkY"]
[Sun Mar 29 06:56:11.247373 2026] [:error] [pid 1524:tid 1543] [client 217.182.195.225:44804] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "achci1oaWSl2asqQCh8qrAAAAQw"]
[Sun Mar 29 06:56:13.694612 2026] [:error] [pid 23137:tid 23155] [client 217.182.195.225:37828] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "achcjRaWQa7LdZ_qGFaLEAAAAZA"]
[Sun Mar 29 06:56:16.176867 2026] [:error] [pid 32359:tid 32366] [client 217.182.195.225:37832] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "achckAMb8G3UzfQP3WjfxgAAAMU"]
[Sun Mar 29 06:56:18.499764 2026] [:error] [pid 1524:tid 1532] [client 217.182.195.225:43246] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "achckloaWSl2asqQCh8qrgAAAQQ"]
[Sun Mar 29 06:56:20.826486 2026] [:error] [pid 23167:tid 23194] [client 217.182.195.225:43250] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "achclBIAHJCFaHff3_dXzwAAAdg"]
[Sun Mar 29 06:56:23.311121 2026] [:error] [pid 23284:tid 23304] [client 217.182.195.225:43260] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "achcl4zBujdPHsq7wyRUSgAAApI"]
[Sun Mar 29 06:56:25.804523 2026] [:error] [pid 23284:tid 23308] [client 217.182.195.225:43266] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "achcmYzBujdPHsq7wyRUVgAAApY"]
[Sun Mar 29 06:56:28.125384 2026] [:error] [pid 32257:tid 32325] [client 217.182.195.225:36116] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "achcnCE3TArOFrUtgWpO4QAAAIc"]
[Sun Mar 29 06:56:30.455134 2026] [:error] [pid 32255:tid 32307] [client 217.182.195.225:36128] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "achcnmnfn-AtRoMbquxmCAAAAFA"]
[Sun Mar 29 06:56:32.949526 2026] [:error] [pid 23167:tid 23184] [client 217.182.195.225:36144] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "achcoBIAHJCFaHff3_dX2AAAAc4"]
[Sun Mar 29 06:56:35.258444 2026] [:error] [pid 32254:tid 32264] [client 217.182.195.225:36154] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "achco6ug2IHuyGgCTn8b0wAAAAA"]
[Sun Mar 29 06:56:37.729133 2026] [:error] [pid 23284:tid 23296] [client 217.182.195.225:60652] [client 217.182.195.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "achcpYzBujdPHsq7wyRUbQAAAoo"]
[Sun Mar 29 08:51:42.856332 2026] [:error] [pid 32255:tid 32299] [client 45.94.31.49:62214] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ach3nmnfn-AtRoMbquyREgAAAEg"]
[Sun Mar 29 08:51:43.339288 2026] [:error] [pid 23250:tid 23264] [client 45.94.31.49:65287] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ach3n5xrpj-dQjy1cvpfzAAAAkw"]
[Sun Mar 29 08:51:43.822148 2026] [:error] [pid 23250:tid 23264] [client 45.94.31.49:52035] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ach3n5xrpj-dQjy1cvpf3AAAAkw"]
[Sun Mar 29 08:51:44.308737 2026] [:error] [pid 23284:tid 23295] [client 45.94.31.49:57264] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ach3oIzBujdPHsq7wyR6GgAAAok"]
[Sun Mar 29 08:51:44.792054 2026] [:error] [pid 23168:tid 23199] [client 45.94.31.49:63199] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ach3oGP8p0yRL8ot_28RbwAAAgI"]
[Sun Mar 29 09:18:44.052639 2026] [:error] [pid 32255:tid 32311] [client 43.153.58.28:47288] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ach99Gnfn-AtRoMbquyYzgAAAFQ"]
[Sun Mar 29 09:22:52.935341 2026] [:error] [pid 23137:tid 23151] [client 159.89.55.133:40092] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "ach-7BaWQa7LdZ_qGFac2gAAAYw"]
[Sun Mar 29 13:09:11.772013 2026] [:error] [pid 32255:tid 32310] [client 43.153.10.83:49796] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aciz92nfn-AtRoMbquz90AAAAFM"]
[Sun Mar 29 15:08:57.808521 2026] [:error] [pid 23167:tid 23171] [client 147.135.214.103:37556] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acjQCRIAHJCFaHff3_c8DAAAAcE"]
[Sun Mar 29 15:09:00.504349 2026] [:error] [pid 32359:tid 32384] [client 147.135.214.103:33418] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acjQDAMb8G3UzfQP3WgELgAAANc"]
[Sun Mar 29 15:09:02.966827 2026] [:error] [pid 32254:tid 32288] [client 147.135.214.103:33430] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acjQDqug2IHuyGgCTn86IgAAABg"]
[Sun Mar 29 15:09:05.587522 2026] [:error] [pid 23167:tid 23184] [client 147.135.214.103:59456] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acjQERIAHJCFaHff3_c8IgAAAc4"]
[Sun Mar 29 15:09:08.231893 2026] [:error] [pid 23284:tid 23305] [client 147.135.214.103:59472] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acjQFIzBujdPHsq7wyTgAwAAApM"]
[Sun Mar 29 15:09:10.813026 2026] [:error] [pid 23167:tid 23179] [client 147.135.214.103:59476] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acjQFhIAHJCFaHff3_c8LwAAAck"]
[Sun Mar 29 15:09:13.408774 2026] [:error] [pid 23168:tid 23221] [client 147.135.214.103:59492] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acjQGWP8p0yRL8ot_29CRQAAAhg"]
[Sun Mar 29 15:09:15.962632 2026] [:error] [pid 23167:tid 23179] [client 147.135.214.103:38016] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acjQGxIAHJCFaHff3_c8OQAAAck"]
[Sun Mar 29 15:09:18.470661 2026] [:error] [pid 32255:tid 32314] [client 147.135.214.103:38026] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acjQHmnfn-AtRoMbquwo7QAAAFc"]
[Sun Mar 29 15:09:21.059477 2026] [:error] [pid 23284:tid 23308] [client 147.135.214.103:38034] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "acjQIYzBujdPHsq7wyTgEwAAApY"]
[Sun Mar 29 15:09:23.360475 2026] [:error] [pid 23284:tid 23292] [client 147.135.214.103:38040] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acjQI4zBujdPHsq7wyTgHgAAAoY"]
[Sun Mar 29 15:09:25.865931 2026] [:error] [pid 23284:tid 23297] [client 147.135.214.103:42706] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acjQJYzBujdPHsq7wyTgIgAAAos"]
[Sun Mar 29 15:09:28.207036 2026] [:error] [pid 23167:tid 23188] [client 147.135.214.103:42708] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acjQKBIAHJCFaHff3_c8SAAAAdI"]
[Sun Mar 29 15:09:30.706117 2026] [:error] [pid 23137:tid 23139] [client 147.135.214.103:42720] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "acjQKhaWQa7LdZ_qGFbFcAAAAYA"]
[Sun Mar 29 15:09:33.289339 2026] [:error] [pid 32257:tid 32334] [client 147.135.214.103:42726] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "acjQLSE3TArOFrUtgWqfAgAAAJA"]
[Sun Mar 29 15:09:35.799991 2026] [:error] [pid 32257:tid 32336] [client 147.135.214.103:56266] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "acjQLyE3TArOFrUtgWqfCwAAAJI"]
[Sun Mar 29 15:09:38.108459 2026] [:error] [pid 32257:tid 32318] [client 147.135.214.103:56280] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "acjQMiE3TArOFrUtgWqfEgAAAIA"]
[Sun Mar 29 15:09:40.638115 2026] [:error] [pid 32255:tid 32306] [client 147.135.214.103:56290] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acjQNGnfn-AtRoMbquwpGQAAAE8"]
[Sun Mar 29 15:09:43.099411 2026] [:error] [pid 23250:tid 23265] [client 147.135.214.103:56298] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "acjQN5xrpj-dQjy1cvqw6wAAAk0"]
[Sun Mar 29 15:09:45.519214 2026] [:error] [pid 23250:tid 23269] [client 147.135.214.103:56858] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "acjQOZxrpj-dQjy1cvqw9AAAAlE"]
[Sun Mar 29 15:09:47.950120 2026] [:error] [pid 32359:tid 32365] [client 147.135.214.103:56864] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acjQOwMb8G3UzfQP3WgEQAAAAMQ"]
[Sun Mar 29 15:09:50.241242 2026] [:error] [pid 23137:tid 23158] [client 147.135.214.103:56872] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acjQPhaWQa7LdZ_qGFbFhAAAAZM"]
[Sun Mar 29 15:09:52.728389 2026] [:error] [pid 32254:tid 32269] [client 147.135.214.103:56880] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acjQQKug2IHuyGgCTn86KwAAAAU"]
[Sun Mar 29 16:06:03.108372 2026] [:error] [pid 23250:tid 23265] [client 116.66.195.238:8019] [client 116.66.195.238] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acjda5xrpj-dQjy1cvq9YAAAAk0"]
[Sun Mar 29 16:11:05.440743 2026] [:error] [pid 32257:tid 32325] [client 116.66.195.179:63074] [client 116.66.195.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.66.195.179, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acjemSE3TArOFrUtgWqpxAAAAIc"]
[Sun Mar 29 16:35:00.715289 2026] [:error] [pid 32255:tid 32298] [client 117.62.235.53:37736] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acjkNGnfn-AtRoMbquxS1wAAAEc"]
[Sun Mar 29 18:32:29.054700 2026] [:error] [pid 23167:tid 23185] [client 173.252.167.50:52596] [client 173.252.167.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acj_vRIAHJCFaHff3_eS_gAAAc8"]
[Sun Mar 29 18:32:31.955405 2026] [:error] [pid 23167:tid 23182] [client 173.252.167.50:52596] [client 173.252.167.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.252.167.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acj_vxIAHJCFaHff3_eS_wAAAcw"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 29 18:51:24.204511 2026] [autoindex:error] [pid 32257:tid 32334] [client 20.226.4.6:25460] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 18:51:24.513469 2026] [:error] [pid 32257:tid 32336] [client 20.226.4.6:25460] [client 20.226.4.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.226.4.6, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ackELCE3TArOFrUtgWrUtAAAAJI"]
[Sun Mar 29 18:51:30.620348 2026] [autoindex:error] [pid 32257:tid 32327] [client 20.226.4.6:25460] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 18:51:30.933744 2026] [autoindex:error] [pid 32257:tid 32325] [client 20.226.4.6:25460] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 18:51:32.458576 2026] [autoindex:error] [pid 32257:tid 32329] [client 20.226.4.6:25460] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 18:51:38.660764 2026] [autoindex:error] [pid 32257:tid 32318] [client 20.226.4.6:25460] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 18:51:40.169369 2026] [:error] [pid 32257:tid 32323] [client 20.226.4.6:25460] [client 20.226.4.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ackEPCE3TArOFrUtgWrU0QAAAIU"]
[Sun Mar 29 18:51:42.966019 2026] [:error] [pid 23284:tid 23296] [client 20.226.4.6:27473] [client 20.226.4.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ackEPozBujdPHsq7wyQt1wAAAoo"]
[Sun Mar 29 18:51:44.222801 2026] [:error] [pid 23137:tid 23161] [client 20.226.4.6:20439] [client 20.226.4.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ackEQBaWQa7LdZ_qGFbiDQAAAZY"]
[Sun Mar 29 18:51:45.456858 2026] [:error] [pid 8818:tid 8832] [client 20.226.4.6:27504] [client 20.226.4.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ackEQSCDvotZNSF0FBq8rgAAAUo"]
[Sun Mar 29 18:51:46.722894 2026] [:error] [pid 32254:tid 32286] [client 20.226.4.6:27487] [client 20.226.4.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ackEQqug2IHuyGgCTn9LGAAAABY"]
[Sun Mar 29 19:02:42.958457 2026] [:error] [pid 23284:tid 23307] [client 182.239.61.53:45506] [client 182.239.61.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 182.239.61.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ackG0ozBujdPHsq7wyQ0HAAAApU"]
[Sun Mar 29 19:02:45.094905 2026] [:error] [pid 23284:tid 23289] [client 182.239.61.53:45506] [client 182.239.61.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 182.239.61.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ackG1YzBujdPHsq7wyQ0KAAAAoM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Mar 29 19:28:02.792171 2026] [:error] [pid 32255:tid 32296] [client 172.213.218.14:22313] [client 172.213.218.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ackMwmnfn-AtRoMbquy4FQAAAEU"]
[Sun Mar 29 19:28:11.008862 2026] [:error] [pid 23167:tid 23173] [client 172.213.218.14:15099] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/031.php"] [unique_id "ackMyxIAHJCFaHff3_efeAAAAcM"]
[Sun Mar 29 19:28:12.216122 2026] [:error] [pid 32255:tid 32311] [client 172.213.218.14:57944] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/031.php"] [unique_id "ackMzGnfn-AtRoMbquy4OQAAAFQ"]
[Sun Mar 29 19:28:13.101088 2026] [:error] [pid 23167:tid 23184] [client 172.213.218.14:48915] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/031.php"] [unique_id "ackMzRIAHJCFaHff3_effAAAAc4"]
[Sun Mar 29 19:28:14.917995 2026] [:error] [pid 32257:tid 32324] [client 172.213.218.14:44290] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/031.php"] [unique_id "ackMziE3TArOFrUtgWrs1gAAAIY"]
[Sun Mar 29 19:28:15.711398 2026] [:error] [pid 23167:tid 23180] [client 172.213.218.14:34990] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "ackMzxIAHJCFaHff3_efhAAAAco"]
[Sun Mar 29 19:28:16.995305 2026] [:error] [pid 23284:tid 23307] [client 172.213.218.14:23933] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "ackM0IzBujdPHsq7wyRE1AAAApU"]
[Sun Mar 29 19:28:18.377278 2026] [:error] [pid 23284:tid 23286] [client 172.213.218.14:23925] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "ackM0ozBujdPHsq7wyRE3QAAAoA"]
[Sun Mar 29 19:28:18.954173 2026] [:error] [pid 8818:tid 8837] [client 172.213.218.14:41698] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "ackM0iCDvotZNSF0FBrD_gAAAU8"]
[Sun Mar 29 19:29:07.429190 2026] [:error] [pid 23168:tid 23212] [client 172.213.218.14:29382] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "ackNA2P8p0yRL8ot_29zewAAAg8"]
[Sun Mar 29 19:29:08.516346 2026] [:error] [pid 8818:tid 8843] [client 172.213.218.14:14266] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "ackNBCCDvotZNSF0FBrEHgAAAVU"]
[Sun Mar 29 19:29:34.709852 2026] [:error] [pid 23137:tid 23161] [client 172.213.218.14:19074] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "ackNHhaWQa7LdZ_qGFbm6wAAAZY"]
[Sun Mar 29 19:29:36.770832 2026] [:error] [pid 23284:tid 23309] [client 172.213.218.14:41615] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "ackNIIzBujdPHsq7wyRF5QAAApc"]
[Sun Mar 29 19:29:38.807335 2026] [:error] [pid 32257:tid 32329] [client 172.213.218.14:29123] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "ackNIiE3TArOFrUtgWrtrAAAAIs"]
[Sun Mar 29 19:29:40.359284 2026] [:error] [pid 32255:tid 32299] [client 172.213.218.14:57164] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "ackNJGnfn-AtRoMbquy4sQAAAEg"]
[Sun Mar 29 19:29:41.279666 2026] [:error] [pid 23284:tid 23292] [client 172.213.218.14:43225] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "ackNJYzBujdPHsq7wyRGAAAAAoY"]
[Sun Mar 29 19:29:43.084566 2026] [:error] [pid 32255:tid 32291] [client 172.213.218.14:43219] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "ackNJ2nfn-AtRoMbquy4uwAAAEA"]
[Sun Mar 29 19:29:43.855054 2026] [:error] [pid 32255:tid 32294] [client 172.213.218.14:24339] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "ackNJ2nfn-AtRoMbquy4vQAAAEM"]
[Sun Mar 29 19:29:45.134345 2026] [:error] [pid 23284:tid 23307] [client 172.213.218.14:20786] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "ackNKYzBujdPHsq7wyRGCQAAApU"]
[Sun Mar 29 19:29:46.189497 2026] [:error] [pid 32254:tid 32265] [client 172.213.218.14:41059] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "ackNKqug2IHuyGgCTn9NuAAAAAE"]
[Sun Mar 29 19:29:47.602305 2026] [:error] [pid 32254:tid 32269] [client 172.213.218.14:47337] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "ackNK6ug2IHuyGgCTn9NugAAAAU"]
[Sun Mar 29 19:29:49.188786 2026] [:error] [pid 23137:tid 23154] [client 172.213.218.14:20736] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "ackNLRaWQa7LdZ_qGFbm8gAAAY8"]
[Sun Mar 29 19:29:49.795507 2026] [:error] [pid 23284:tid 23306] [client 172.213.218.14:43223] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "ackNLYzBujdPHsq7wyRGGgAAApQ"]
[Sun Mar 29 19:29:52.018731 2026] [:error] [pid 23137:tid 23141] [client 172.213.218.14:16853] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/output.php"] [unique_id "ackNMBaWQa7LdZ_qGFbm9gAAAYI"]
[Sun Mar 29 19:29:53.671061 2026] [:error] [pid 23137:tid 23160] [client 172.213.218.14:15281] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/output.php"] [unique_id "ackNMRaWQa7LdZ_qGFbm-wAAAZU"]
[Sun Mar 29 19:29:54.980798 2026] [:error] [pid 32257:tid 32328] [client 172.213.218.14:26465] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/output.php"] [unique_id "ackNMiE3TArOFrUtgWrtzQAAAIo"]
[Sun Mar 29 19:29:55.889224 2026] [:error] [pid 23250:tid 23262] [client 172.213.218.14:24374] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/output.php"] [unique_id "ackNM5xrpj-dQjy1cvrtSQAAAko"]
[Sun Mar 29 19:29:56.701359 2026] [:error] [pid 23284:tid 23308] [client 172.213.218.14:2792] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/output.php"] [unique_id "ackNNIzBujdPHsq7wyRGNQAAApY"]
[Sun Mar 29 19:29:58.487876 2026] [:error] [pid 23167:tid 23189] [client 172.213.218.14:16004] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/output.php"] [unique_id "ackNNhIAHJCFaHff3_ef_QAAAdM"]
[Sun Mar 29 19:29:59.214015 2026] [:error] [pid 23284:tid 23301] [client 172.213.218.14:28578] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/output.php"] [unique_id "ackNN4zBujdPHsq7wyRGPwAAAo8"]
[Sun Mar 29 19:30:00.550564 2026] [:error] [pid 23284:tid 23289] [client 172.213.218.14:29147] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/output.php"] [unique_id "ackNOIzBujdPHsq7wyRGRgAAAoM"]
[Sun Mar 29 19:30:02.326752 2026] [:error] [pid 32257:tid 32333] [client 172.213.218.14:35019] [client 172.213.218.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "ackNOiE3TArOFrUtgWrt1AAAAI8"]
[Sun Mar 29 19:30:03.460940 2026] [:error] [pid 23284:tid 23290] [client 172.213.218.14:57211] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ackNO4zBujdPHsq7wyRGVgAAAoQ"]
[Sun Mar 29 19:30:04.342388 2026] [:error] [pid 23167:tid 23178] [client 172.213.218.14:26472] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ackNPBIAHJCFaHff3_egGAAAAcg"]
[Sun Mar 29 19:30:05.961846 2026] [:error] [pid 32257:tid 32326] [client 172.213.218.14:43253] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ackNPSE3TArOFrUtgWrt3AAAAIg"]
[Sun Mar 29 19:30:06.963457 2026] [:error] [pid 23167:tid 23187] [client 172.213.218.14:29135] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ackNPhIAHJCFaHff3_egHgAAAdE"]
[Sun Mar 29 19:30:08.148097 2026] [:error] [pid 32257:tid 32335] [client 172.213.218.14:39430] [client 172.213.218.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ackNQCE3TArOFrUtgWrt8gAAAJE"]
[Sun Mar 29 19:30:11.283734 2026] [:error] [pid 23168:tid 23216] [client 172.213.218.14:16843] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "ackNQ2P8p0yRL8ot_29z_QAAAhM"]
[Sun Mar 29 19:30:12.158980 2026] [:error] [pid 32257:tid 32326] [client 172.213.218.14:29155] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "ackNRCE3TArOFrUtgWruAgAAAIg"]
[Sun Mar 29 19:30:14.894193 2026] [:error] [pid 23284:tid 23308] [client 172.213.218.14:28561] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "ackNRozBujdPHsq7wyRG0wAAApY"]
[Sun Mar 29 19:30:16.452113 2026] [:error] [pid 32257:tid 32336] [client 172.213.218.14:29167] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "ackNSCE3TArOFrUtgWruDgAAAJI"]
[Sun Mar 29 19:30:18.375903 2026] [:error] [pid 32359:tid 32370] [client 172.213.218.14:16000] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "ackNSgMb8G3UzfQP3WgckAAAAMk"]
[Sun Mar 29 19:30:19.708703 2026] [:error] [pid 23284:tid 23300] [client 172.213.218.14:32741] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "ackNS4zBujdPHsq7wyRG8gAAAo4"]
[Sun Mar 29 19:30:20.764670 2026] [:error] [pid 23284:tid 23289] [client 172.213.218.14:22361] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "ackNTIzBujdPHsq7wyRG-gAAAoM"]
[Sun Mar 29 19:30:21.755093 2026] [:error] [pid 23284:tid 23301] [client 172.213.218.14:20781] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "ackNTYzBujdPHsq7wyRHAgAAAo8"]
[Sun Mar 29 19:30:22.899220 2026] [:error] [pid 32257:tid 32332] [client 172.213.218.14:32760] [client 172.213.218.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "ackNTiE3TArOFrUtgWruMgAAAI4"]
[Sun Mar 29 19:30:24.619082 2026] [:error] [pid 23284:tid 23298] [client 172.213.218.14:22375] [client 172.213.218.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "ackNUIzBujdPHsq7wyRHFAAAAow"]
[Sun Mar 29 19:30:25.271115 2026] [:error] [pid 23168:tid 23198] [client 172.213.218.14:43183] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0x.php"] [unique_id "ackNUWP8p0yRL8ot_290EgAAAgE"]
[Sun Mar 29 19:30:26.371963 2026] [:error] [pid 23167:tid 23187] [client 172.213.218.14:34241] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0x.php"] [unique_id "ackNUhIAHJCFaHff3_egOQAAAdE"]
[Sun Mar 29 19:30:28.099201 2026] [:error] [pid 23284:tid 23305] [client 172.213.218.14:32714] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0x.php"] [unique_id "ackNVIzBujdPHsq7wyRHIwAAApM"]
[Sun Mar 29 19:30:29.438602 2026] [:error] [pid 8818:tid 8836] [client 172.213.218.14:58079] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x0x.php"] [unique_id "ackNVSCDvotZNSF0FBrEUAAAAU4"]
[Sun Mar 29 19:30:30.564321 2026] [:error] [pid 23137:tid 23162] [client 172.213.218.14:42408] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "ackNVhaWQa7LdZ_qGFbnKAAAAZc"]
[Sun Mar 29 19:30:32.197654 2026] [:error] [pid 23168:tid 23199] [client 172.213.218.14:27212] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "ackNWGP8p0yRL8ot_290GgAAAgI"]
[Sun Mar 29 19:30:32.829799 2026] [:error] [pid 23167:tid 23193] [client 172.213.218.14:2166] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "ackNWBIAHJCFaHff3_egSgAAAdc"]
[Sun Mar 29 19:30:36.427609 2026] [:error] [pid 32257:tid 32339] [client 172.213.218.14:38865] [client 172.213.218.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "ackNXCE3TArOFrUtgWruVgAAAJU"]
[Sun Mar 29 19:30:48.826109 2026] [:error] [pid 23168:tid 23200] [client 172.213.218.14:16807] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/O-Simple.php"] [unique_id "ackNaGP8p0yRL8ot_290OwAAAgM"]
[Sun Mar 29 19:30:50.753888 2026] [:error] [pid 8818:tid 8840] [client 172.213.218.14:13712] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/O-Simple.php"] [unique_id "ackNaiCDvotZNSF0FBrEagAAAVI"]
[Sun Mar 29 19:30:51.821858 2026] [:error] [pid 32359:tid 32376] [client 172.213.218.14:34245] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/O-Simple.php"] [unique_id "ackNawMb8G3UzfQP3WgcoAAAAM8"]
[Sun Mar 29 19:30:52.460783 2026] [:error] [pid 32257:tid 32319] [client 172.213.218.14:30642] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/O-Simple.php"] [unique_id "ackNbCE3TArOFrUtgWruZgAAAIE"]
[Sun Mar 29 19:30:53.873390 2026] [:error] [pid 23284:tid 23290] [client 172.213.218.14:16781] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-.php"] [unique_id "ackNbYzBujdPHsq7wyRHOgAAAoQ"]
[Sun Mar 29 19:30:54.694728 2026] [:error] [pid 8818:tid 8836] [client 172.213.218.14:27223] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-.php"] [unique_id "ackNbiCDvotZNSF0FBrEcwAAAU4"]
[Sun Mar 29 19:30:56.825261 2026] [:error] [pid 23284:tid 23309] [client 172.213.218.14:19138] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-.php"] [unique_id "ackNcIzBujdPHsq7wyRHRwAAApc"]
[Sun Mar 29 19:30:58.009060 2026] [:error] [pid 32254:tid 32265] [client 172.213.218.14:30607] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-.php"] [unique_id "ackNcqug2IHuyGgCTn9N2wAAAAE"]
[Sun Mar 29 19:30:58.792539 2026] [:error] [pid 23137:tid 23146] [client 172.213.218.14:34601] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "ackNchaWQa7LdZ_qGFbnOAAAAYc"]
[Sun Mar 29 19:31:00.270119 2026] [:error] [pid 32257:tid 32326] [client 172.213.218.14:16825] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "ackNdCE3TArOFrUtgWrucgAAAIg"]
[Sun Mar 29 19:31:01.272553 2026] [:error] [pid 23137:tid 23141] [client 172.213.218.14:13508] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "ackNdRaWQa7LdZ_qGFbnPgAAAYI"]
[Sun Mar 29 19:31:02.190667 2026] [:error] [pid 32254:tid 32271] [client 172.213.218.14:39548] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "ackNdqug2IHuyGgCTn9N3wAAAAc"]
[Sun Mar 29 19:31:03.348311 2026] [:error] [pid 23284:tid 23304] [client 172.213.218.14:33991] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ee.php"] [unique_id "ackNd4zBujdPHsq7wyRHVAAAApI"]
[Sun Mar 29 19:31:04.102483 2026] [:error] [pid 23284:tid 23290] [client 172.213.218.14:39518] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ee.php"] [unique_id "ackNeIzBujdPHsq7wyRHXAAAAoQ"]
[Sun Mar 29 19:31:05.601374 2026] [:error] [pid 23284:tid 23289] [client 172.213.218.14:39901] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ee.php"] [unique_id "ackNeYzBujdPHsq7wyRHagAAAoM"]
[Sun Mar 29 19:31:09.248663 2026] [:error] [pid 8818:tid 8838] [client 172.213.218.14:34594] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ee.php"] [unique_id "ackNfSCDvotZNSF0FBrEfgAAAVA"]
[Sun Mar 29 19:31:10.277683 2026] [:error] [pid 32359:tid 32369] [client 172.213.218.14:34002] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/epinyins.php"] [unique_id "ackNfgMb8G3UzfQP3WgcqQAAAMg"]
[Sun Mar 29 19:31:10.860072 2026] [:error] [pid 32254:tid 32265] [client 172.213.218.14:25827] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/epinyins.php"] [unique_id "ackNfqug2IHuyGgCTn9N5gAAAAE"]
[Sun Mar 29 19:31:12.138154 2026] [:error] [pid 23137:tid 23156] [client 172.213.218.14:16512] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/epinyins.php"] [unique_id "ackNgBaWQa7LdZ_qGFbnSgAAAZE"]
[Sun Mar 29 19:31:13.292579 2026] [:error] [pid 32359:tid 32371] [client 172.213.218.14:18762] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/epinyins.php"] [unique_id "ackNgQMb8G3UzfQP3WgctwAAAMo"]
[Sun Mar 29 19:31:14.142479 2026] [:error] [pid 23168:tid 23200] [client 172.213.218.14:29837] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i1.php"] [unique_id "ackNgmP8p0yRL8ot_290TwAAAgM"]
[Sun Mar 29 19:31:15.171466 2026] [:error] [pid 32257:tid 32323] [client 172.213.218.14:16798] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i1.php"] [unique_id "ackNgyE3TArOFrUtgWruhgAAAIU"]
[Sun Mar 29 19:31:15.942032 2026] [:error] [pid 32255:tid 32298] [client 172.213.218.14:16791] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i1.php"] [unique_id "ackNg2nfn-AtRoMbquy5CwAAAEc"]
[Sun Mar 29 19:31:16.876397 2026] [:error] [pid 32255:tid 32300] [client 172.213.218.14:39898] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i1.php"] [unique_id "ackNhGnfn-AtRoMbquy5GQAAAEk"]
[Sun Mar 29 19:31:18.043794 2026] [:error] [pid 23284:tid 23292] [client 172.213.218.14:39167] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "ackNhozBujdPHsq7wyRHgQAAAoY"]
[Sun Mar 29 19:31:19.242880 2026] [:error] [pid 23284:tid 23287] [client 172.213.218.14:25820] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "ackNh4zBujdPHsq7wyRHhAAAAoE"]
[Sun Mar 29 19:31:20.075694 2026] [:error] [pid 23168:tid 23214] [client 172.213.218.14:27203] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "ackNiGP8p0yRL8ot_290UgAAAhE"]
[Sun Mar 29 19:31:21.061385 2026] [:error] [pid 23284:tid 23291] [client 172.213.218.14:34605] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vv.php"] [unique_id "ackNiYzBujdPHsq7wyRHjgAAAoU"]
[Sun Mar 29 19:31:21.736405 2026] [:error] [pid 23168:tid 23219] [client 172.213.218.14:19639] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oo.php"] [unique_id "ackNiWP8p0yRL8ot_290VQAAAhY"]
[Sun Mar 29 19:31:22.530554 2026] [:error] [pid 32257:tid 32342] [client 172.213.218.14:16793] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oo.php"] [unique_id "ackNiiE3TArOFrUtgWrupAAAAJg"]
[Sun Mar 29 19:31:23.312540 2026] [:error] [pid 32255:tid 32309] [client 172.213.218.14:16843] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oo.php"] [unique_id "ackNi2nfn-AtRoMbquy5KwAAAFI"]
[Sun Mar 29 19:31:24.316952 2026] [:error] [pid 32359:tid 32366] [client 172.213.218.14:17275] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oo.php"] [unique_id "ackNjAMb8G3UzfQP3WgcwAAAAMU"]
[Sun Mar 29 19:31:25.076825 2026] [:error] [pid 32255:tid 32302] [client 172.213.218.14:39878] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk.php"] [unique_id "ackNjWnfn-AtRoMbquy5LwAAAEs"]
[Sun Mar 29 19:31:26.050415 2026] [:error] [pid 32255:tid 32300] [client 172.213.218.14:34004] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk.php"] [unique_id "ackNjmnfn-AtRoMbquy5MQAAAEk"]
[Sun Mar 29 19:31:26.700015 2026] [:error] [pid 23137:tid 23147] [client 172.213.218.14:15796] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk.php"] [unique_id "ackNjhaWQa7LdZ_qGFbnUwAAAYg"]
[Sun Mar 29 19:31:27.673327 2026] [:error] [pid 23284:tid 23289] [client 172.213.218.14:19598] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk.php"] [unique_id "ackNj4zBujdPHsq7wyRHoAAAAoM"]
[Sun Mar 29 19:31:28.367434 2026] [:error] [pid 23168:tid 23204] [client 172.213.218.14:18758] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "ackNkGP8p0yRL8ot_290VwAAAgc"]
[Sun Mar 29 19:31:29.054158 2026] [:error] [pid 32257:tid 32333] [client 172.213.218.14:34595] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "ackNkSE3TArOFrUtgWrusAAAAI8"]
[Sun Mar 29 19:31:30.374779 2026] [:error] [pid 23284:tid 23296] [client 172.213.218.14:34013] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "ackNkozBujdPHsq7wyRHpgAAAoo"]
[Sun Mar 29 19:31:30.956184 2026] [:error] [pid 32359:tid 32371] [client 172.213.218.14:33956] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "ackNkgMb8G3UzfQP3WgcwgAAAMo"]
[Sun Mar 29 19:31:31.689726 2026] [:error] [pid 32257:tid 32331] [client 172.213.218.14:17240] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "ackNkyE3TArOFrUtgWruuQAAAI0"]
[Sun Mar 29 19:31:32.328395 2026] [:error] [pid 23167:tid 23173] [client 172.213.218.14:39141] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "ackNlBIAHJCFaHff3_egcQAAAcM"]
[Sun Mar 29 19:31:33.905740 2026] [:error] [pid 32257:tid 32329] [client 172.213.218.14:34589] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "ackNlSE3TArOFrUtgWruvQAAAIs"]
[Sun Mar 29 19:31:35.547407 2026] [:error] [pid 23284:tid 23308] [client 172.213.218.14:38882] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "ackNl4zBujdPHsq7wyRHuQAAApY"]
[Sun Mar 29 19:31:36.290025 2026] [:error] [pid 32359:tid 32385] [client 172.213.218.14:33990] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ackNmAMb8G3UzfQP3WgcxAAAANg"]
[Sun Mar 29 19:31:37.103483 2026] [:error] [pid 32359:tid 32369] [client 172.213.218.14:13521] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ackNmQMb8G3UzfQP3WgcxwAAAMg"]
[Sun Mar 29 19:31:38.986354 2026] [:error] [pid 23168:tid 23213] [client 172.213.218.14:25855] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ackNmmP8p0yRL8ot_290YwAAAhA"]
[Sun Mar 29 19:31:39.526466 2026] [:error] [pid 23168:tid 23205] [client 172.213.218.14:27240] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ackNm2P8p0yRL8ot_290agAAAgg"]
[Sun Mar 29 19:31:40.230675 2026] [:error] [pid 23168:tid 23217] [client 172.213.218.14:25829] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "ackNnGP8p0yRL8ot_290cAAAAhQ"]
[Sun Mar 29 19:31:41.027739 2026] [:error] [pid 32257:tid 32341] [client 172.213.218.14:29852] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "ackNnSE3TArOFrUtgWruywAAAJc"]
[Sun Mar 29 19:31:41.529543 2026] [:error] [pid 32255:tid 32315] [client 172.213.218.14:39112] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "ackNnWnfn-AtRoMbquy5UAAAAFg"]
[Sun Mar 29 19:31:42.247245 2026] [:error] [pid 32255:tid 32301] [client 172.213.218.14:39902] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "ackNnmnfn-AtRoMbquy5VQAAAEo"]
[Sun Mar 29 19:31:42.920589 2026] [:error] [pid 23168:tid 23220] [client 172.213.218.14:25853] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "ackNnmP8p0yRL8ot_290fgAAAhc"]
[Sun Mar 29 19:31:43.583412 2026] [:error] [pid 32359:tid 32377] [client 172.213.218.14:13524] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "ackNnwMb8G3UzfQP3WgcyAAAANA"]
[Sun Mar 29 19:31:44.219203 2026] [:error] [pid 8818:tid 8838] [client 172.213.218.14:34600] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "ackNoCCDvotZNSF0FBrElQAAAVA"]
[Sun Mar 29 19:31:45.152864 2026] [:error] [pid 8818:tid 8840] [client 172.213.218.14:38866] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "ackNoSCDvotZNSF0FBrEmgAAAVI"]
[Sun Mar 29 19:31:46.370348 2026] [:error] [pid 32255:tid 32307] [client 172.213.218.14:33964] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "ackNomnfn-AtRoMbquy5ZgAAAFA"]
[Sun Mar 29 19:32:02.745634 2026] [:error] [pid 23167:tid 23177] [client 172.213.218.14:30896] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "ackNshIAHJCFaHff3_eglAAAAcc"]
[Sun Mar 29 19:32:03.357496 2026] [:error] [pid 23168:tid 23213] [client 172.213.218.14:16829] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "ackNs2P8p0yRL8ot_290jAAAAhA"]
[Sun Mar 29 19:32:04.183847 2026] [:error] [pid 23284:tid 23309] [client 172.213.218.14:19635] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "ackNtIzBujdPHsq7wyRH6gAAApc"]
[Sun Mar 29 19:32:05.170875 2026] [:error] [pid 23284:tid 23288] [client 172.213.218.14:29875] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "ackNtYzBujdPHsq7wyRH7gAAAoI"]
[Sun Mar 29 19:32:06.066648 2026] [:error] [pid 23284:tid 23291] [client 172.213.218.14:13554] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ackNtozBujdPHsq7wyRH8QAAAoU"]
[Sun Mar 29 19:32:06.725041 2026] [:error] [pid 23167:tid 23178] [client 172.213.218.14:39911] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ackNthIAHJCFaHff3_eglQAAAcg"]
[Sun Mar 29 19:32:07.389104 2026] [:error] [pid 23168:tid 23197] [client 172.213.218.14:37777] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ackNt2P8p0yRL8ot_290kAAAAgA"]
[Sun Mar 29 19:32:07.980376 2026] [:error] [pid 32257:tid 32341] [client 172.213.218.14:19195] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ackNtyE3TArOFrUtgWrvAgAAAJc"]
[Sun Mar 29 19:32:09.092674 2026] [:error] [pid 32257:tid 32327] [client 172.213.218.14:14991] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "ackNuSE3TArOFrUtgWrvCgAAAIk"]
[Sun Mar 29 19:32:10.475064 2026] [:error] [pid 23168:tid 23202] [client 172.213.218.14:34593] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "ackNumP8p0yRL8ot_290lwAAAgU"]
[Sun Mar 29 19:32:12.723675 2026] [:error] [pid 8818:tid 8843] [client 172.213.218.14:39140] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "ackNvCCDvotZNSF0FBrEswAAAVU"]
[Sun Mar 29 19:32:13.362584 2026] [:error] [pid 23137:tid 23144] [client 172.213.218.14:19627] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xc.php"] [unique_id "ackNvRaWQa7LdZ_qGFbnZwAAAYU"]
[Sun Mar 29 19:32:14.216350 2026] [:error] [pid 23137:tid 23153] [client 172.213.218.14:15782] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "ackNvhaWQa7LdZ_qGFbnaAAAAY4"]
[Sun Mar 29 19:32:15.952157 2026] [:error] [pid 23137:tid 23156] [client 172.213.218.14:37780] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "ackNvxaWQa7LdZ_qGFbnaQAAAZE"]
[Sun Mar 29 19:32:16.668798 2026] [:error] [pid 23284:tid 23289] [client 172.213.218.14:33924] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "ackNwIzBujdPHsq7wyRIEAAAAoM"]
[Sun Mar 29 19:32:17.357669 2026] [:error] [pid 32257:tid 32339] [client 172.213.218.14:38869] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ar.php"] [unique_id "ackNwSE3TArOFrUtgWrvFwAAAJU"]
[Sun Mar 29 19:32:18.835651 2026] [:error] [pid 23168:tid 23217] [client 172.213.218.14:16574] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "ackNwmP8p0yRL8ot_290oAAAAhQ"]
[Sun Mar 29 19:32:19.752862 2026] [:error] [pid 23284:tid 23307] [client 172.213.218.14:33950] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "ackNw4zBujdPHsq7wyRIEgAAApU"]
[Sun Mar 29 19:32:20.553291 2026] [:error] [pid 32257:tid 32340] [client 172.213.218.14:42432] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "ackNxCE3TArOFrUtgWrvIgAAAJY"]
[Sun Mar 29 19:32:21.630726 2026] [:error] [pid 23250:tid 23268] [client 172.213.218.14:27221] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "ackNxZxrpj-dQjy1cvrt0gAAAlA"]
[Sun Mar 29 19:32:23.520965 2026] [:error] [pid 32254:tid 32277] [client 172.213.218.14:42377] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackNx6ug2IHuyGgCTn9N-gAAAA0"]
[Sun Mar 29 19:32:24.924412 2026] [:error] [pid 23168:tid 23204] [client 172.213.218.14:42455] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackNyGP8p0yRL8ot_290pgAAAgc"]
[Sun Mar 29 19:32:26.817701 2026] [:error] [pid 23284:tid 23304] [client 172.213.218.14:27217] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackNyozBujdPHsq7wyRIHAAAApI"]
[Sun Mar 29 19:32:28.926215 2026] [:error] [pid 8818:tid 8830] [client 172.213.218.14:14773] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ackNzCCDvotZNSF0FBrExAAAAUg"]
[Sun Mar 29 19:32:29.568860 2026] [:error] [pid 32255:tid 32309] [client 172.213.218.14:39528] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "ackNzWnfn-AtRoMbquy5mAAAAFI"]
[Sun Mar 29 19:32:31.077950 2026] [:error] [pid 32255:tid 32315] [client 172.213.218.14:16811] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "ackNz2nfn-AtRoMbquy5ngAAAFg"]
[Sun Mar 29 19:32:32.191282 2026] [:error] [pid 23167:tid 23194] [client 172.213.218.14:49023] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "ackN0BIAHJCFaHff3_egrAAAAdg"]
[Sun Mar 29 19:32:33.315165 2026] [:error] [pid 32257:tid 32320] [client 172.213.218.14:42495] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "ackN0SE3TArOFrUtgWrvOQAAAII"]
[Sun Mar 29 19:32:34.015187 2026] [:error] [pid 32257:tid 32335] [client 172.213.218.14:42385] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ut.php"] [unique_id "ackN0iE3TArOFrUtgWrvPQAAAJE"]
[Sun Mar 29 19:32:34.980662 2026] [:error] [pid 23167:tid 23176] [client 172.213.218.14:2630] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ut.php"] [unique_id "ackN0hIAHJCFaHff3_egsQAAAcY"]
[Sun Mar 29 19:32:35.557858 2026] [:error] [pid 23284:tid 23288] [client 172.213.218.14:2689] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ut.php"] [unique_id "ackN04zBujdPHsq7wyRISQAAAoI"]
[Sun Mar 29 19:32:36.606099 2026] [:error] [pid 32359:tid 32377] [client 172.213.218.14:2630] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ut.php"] [unique_id "ackN1AMb8G3UzfQP3Wgc6wAAANA"]
[Sun Mar 29 19:32:38.413666 2026] [:error] [pid 23284:tid 23301] [client 172.213.218.14:2867] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "ackN1ozBujdPHsq7wyRIWAAAAo8"]
[Sun Mar 29 19:32:39.510279 2026] [:error] [pid 23284:tid 23291] [client 172.213.218.14:57243] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "ackN14zBujdPHsq7wyRIXgAAAoU"]
[Sun Mar 29 19:32:40.831948 2026] [:error] [pid 32255:tid 32303] [client 172.213.218.14:38877] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "ackN2Gnfn-AtRoMbquy5pwAAAEw"]
[Sun Mar 29 19:32:42.421456 2026] [:error] [pid 8818:tid 8828] [client 172.213.218.14:57268] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "ackN2iCDvotZNSF0FBrExwAAAUY"]
[Sun Mar 29 19:32:43.273420 2026] [:error] [pid 23284:tid 23301] [client 172.213.218.14:57267] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "ackN24zBujdPHsq7wyRIdgAAAo8"]
[Sun Mar 29 19:32:44.541295 2026] [:error] [pid 23167:tid 23185] [client 172.213.218.14:44620] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "ackN3BIAHJCFaHff3_eguwAAAc8"]
[Sun Mar 29 19:32:46.821871 2026] [:error] [pid 32255:tid 32296] [client 172.213.218.14:27225] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "ackN3mnfn-AtRoMbquy5sAAAAEU"]
[Sun Mar 29 19:32:48.504964 2026] [:error] [pid 23168:tid 23201] [client 172.213.218.14:47715] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "ackN4GP8p0yRL8ot_2901gAAAgQ"]
[Sun Mar 29 19:32:49.676377 2026] [:error] [pid 23137:tid 23159] [client 172.213.218.14:2831] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admir.php"] [unique_id "ackN4RaWQa7LdZ_qGFbngQAAAZQ"]
[Sun Mar 29 19:32:54.933404 2026] [:error] [pid 32255:tid 32297] [client 172.213.218.14:27234] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admir.php"] [unique_id "ackN5mnfn-AtRoMbquy5twAAAEY"]
[Sun Mar 29 19:32:58.296032 2026] [:error] [pid 32359:tid 32370] [client 172.213.218.14:2879] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admir.php"] [unique_id "ackN6gMb8G3UzfQP3WgdJwAAAMk"]
[Sun Mar 29 19:33:00.095670 2026] [:error] [pid 23167:tid 23185] [client 172.213.218.14:27228] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admir.php"] [unique_id "ackN7BIAHJCFaHff3_eg0QAAAc8"]
[Sun Mar 29 19:34:51.447066 2026] [:error] [pid 32257:tid 32328] [client 172.213.218.14:39449] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "ackOWyE3TArOFrUtgWrwLAAAAIo"]
[Sun Mar 29 19:34:52.789630 2026] [:error] [pid 23284:tid 23298] [client 172.213.218.14:29139] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "ackOXIzBujdPHsq7wyRJPAAAAow"]
[Sun Mar 29 19:34:54.562281 2026] [:error] [pid 23168:tid 23219] [client 172.213.218.14:29416] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "ackOXmP8p0yRL8ot_291UwAAAhY"]
[Sun Mar 29 19:34:55.703165 2026] [:error] [pid 23168:tid 23220] [client 172.213.218.14:29170] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "ackOX2P8p0yRL8ot_291VAAAAhc"]
[Sun Mar 29 19:34:59.040294 2026] [:error] [pid 32257:tid 32324] [client 172.213.218.14:28594] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lite.php"] [unique_id "ackOYyE3TArOFrUtgWrwNQAAAIY"]
[Sun Mar 29 19:35:00.214939 2026] [:error] [pid 32257:tid 32328] [client 172.213.218.14:57179] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lite.php"] [unique_id "ackOZCE3TArOFrUtgWrwNwAAAIo"]
[Sun Mar 29 19:35:02.029469 2026] [:error] [pid 23284:tid 23298] [client 172.213.218.14:29338] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lite.php"] [unique_id "ackOZozBujdPHsq7wyRJVwAAAow"]
[Sun Mar 29 19:35:03.581329 2026] [:error] [pid 23284:tid 23291] [client 172.213.218.14:58457] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lite.php"] [unique_id "ackOZ4zBujdPHsq7wyRJXAAAAoU"]
[Sun Mar 29 19:35:05.482414 2026] [:error] [pid 8818:tid 8825] [client 172.213.218.14:31645] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "ackOaSCDvotZNSF0FBrFOQAAAUM"]
[Sun Mar 29 19:35:06.304984 2026] [:error] [pid 23284:tid 23302] [client 172.213.218.14:18427] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "ackOaozBujdPHsq7wyRJZwAAApA"]
[Sun Mar 29 19:35:07.074681 2026] [:error] [pid 8818:tid 8846] [client 172.213.218.14:57204] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "ackOayCDvotZNSF0FBrFOwAAAVg"]
[Sun Mar 29 19:35:08.151995 2026] [:error] [pid 32257:tid 32321] [client 172.213.218.14:17927] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "ackObCE3TArOFrUtgWrwOwAAAIM"]
[Sun Mar 29 19:35:09.471127 2026] [:error] [pid 23137:tid 23150] [client 172.213.218.14:57200] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "ackObRaWQa7LdZ_qGFbnowAAAYs"]
[Sun Mar 29 19:35:10.757659 2026] [:error] [pid 32255:tid 32294] [client 172.213.218.14:2786] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "ackObmnfn-AtRoMbquy6YwAAAEM"]
[Sun Mar 29 19:35:12.566868 2026] [:error] [pid 32257:tid 32338] [client 172.213.218.14:21592] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "ackOcCE3TArOFrUtgWrwSAAAAJQ"]
[Sun Mar 29 19:35:13.688116 2026] [:error] [pid 32359:tid 32361] [client 172.213.218.14:14267] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "ackOcQMb8G3UzfQP3WgdWwAAAMA"]
[Sun Mar 29 19:35:15.951207 2026] [:error] [pid 23284:tid 23288] [client 172.213.218.14:28168] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "ackOc4zBujdPHsq7wyRJggAAAoI"]
[Sun Mar 29 19:35:17.477040 2026] [:error] [pid 23284:tid 23306] [client 172.213.218.14:16791] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "ackOdYzBujdPHsq7wyRJiwAAApQ"]
[Sun Mar 29 19:35:18.640142 2026] [:error] [pid 23284:tid 23303] [client 172.213.218.14:24727] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "ackOdozBujdPHsq7wyRJkQAAApE"]
[Sun Mar 29 19:35:19.532096 2026] [:error] [pid 32359:tid 32365] [client 172.213.218.14:48956] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "ackOdwMb8G3UzfQP3WgdXQAAAMQ"]
[Sun Mar 29 19:35:22.056410 2026] [:error] [pid 32254:tid 32285] [client 172.213.218.14:28198] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "ackOequg2IHuyGgCTn9ONgAAABU"]
[Sun Mar 29 19:35:23.473539 2026] [:error] [pid 32254:tid 32278] [client 172.213.218.14:19116] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "ackOe6ug2IHuyGgCTn9OOQAAAA4"]
[Sun Mar 29 19:35:24.661031 2026] [:error] [pid 32255:tid 32305] [client 172.213.218.14:48934] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "ackOfGnfn-AtRoMbquy6bAAAAE4"]
[Sun Mar 29 19:35:25.846836 2026] [:error] [pid 23284:tid 23290] [client 172.213.218.14:18706] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "ackOfYzBujdPHsq7wyRJngAAAoQ"]
[Sun Mar 29 19:35:26.968865 2026] [:error] [pid 8818:tid 8840] [client 172.213.218.14:47667] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13k.php"] [unique_id "ackOfiCDvotZNSF0FBrFQQAAAVI"]
[Sun Mar 29 19:35:29.479232 2026] [:error] [pid 23168:tid 23197] [client 172.213.218.14:18737] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13k.php"] [unique_id "ackOgWP8p0yRL8ot_291ZwAAAgA"]
[Sun Mar 29 19:35:30.709786 2026] [:error] [pid 32257:tid 32341] [client 172.213.218.14:19110] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13k.php"] [unique_id "ackOgiE3TArOFrUtgWrwXQAAAJc"]
[Sun Mar 29 19:35:31.832426 2026] [:error] [pid 23168:tid 23203] [client 172.213.218.14:34234] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13k.php"] [unique_id "ackOg2P8p0yRL8ot_291bQAAAgY"]
[Sun Mar 29 19:35:32.905977 2026] [:error] [pid 32257:tid 32339] [client 172.213.218.14:18689] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ackOhCE3TArOFrUtgWrwYAAAAJU"]
[Sun Mar 29 19:35:33.653075 2026] [:error] [pid 32257:tid 32321] [client 172.213.218.14:24752] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ackOhSE3TArOFrUtgWrwZAAAAIM"]
[Sun Mar 29 19:35:34.894123 2026] [:error] [pid 32255:tid 32311] [client 172.213.218.14:17613] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ackOhmnfn-AtRoMbquy6dwAAAFQ"]
[Sun Mar 29 19:35:35.880045 2026] [:error] [pid 32257:tid 32341] [client 172.213.218.14:13965] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ackOhyE3TArOFrUtgWrwZwAAAJc"]
[Sun Mar 29 19:35:36.682521 2026] [:error] [pid 32257:tid 32324] [client 172.213.218.14:34239] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackOiCE3TArOFrUtgWrwbwAAAIY"]
[Sun Mar 29 19:35:37.886813 2026] [:error] [pid 23250:tid 23252] [client 172.213.218.14:48928] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackOiZxrpj-dQjy1cvruNwAAAkA"]
[Sun Mar 29 19:35:38.660176 2026] [:error] [pid 32255:tid 32312] [client 172.213.218.14:21590] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackOimnfn-AtRoMbquy6fgAAAFU"]
[Sun Mar 29 19:35:39.849191 2026] [:error] [pid 32257:tid 32335] [client 172.213.218.14:16090] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackOiyE3TArOFrUtgWrwdwAAAJE"]
[Sun Mar 29 19:35:40.844253 2026] [:error] [pid 23284:tid 23305] [client 172.213.218.14:17638] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "ackOjIzBujdPHsq7wyRJtAAAApM"]
[Sun Mar 29 19:35:41.977181 2026] [:error] [pid 32255:tid 32310] [client 172.213.218.14:16608] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "ackOjWnfn-AtRoMbquy6gwAAAFM"]
[Sun Mar 29 19:35:43.278536 2026] [:error] [pid 23284:tid 23299] [client 172.213.218.14:16607] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "ackOj4zBujdPHsq7wyRJuQAAAo0"]
[Sun Mar 29 19:35:45.153515 2026] [:error] [pid 23250:tid 23273] [client 172.213.218.14:16595] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xx.php"] [unique_id "ackOkZxrpj-dQjy1cvruPQAAAlU"]
[Sun Mar 29 19:35:47.904891 2026] [:error] [pid 32359:tid 32368] [client 172.213.218.14:42808] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mn.php"] [unique_id "ackOkwMb8G3UzfQP3WgdYwAAAMc"]
[Sun Mar 29 19:35:49.299158 2026] [:error] [pid 23168:tid 23208] [client 172.213.218.14:42812] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mn.php"] [unique_id "ackOlWP8p0yRL8ot_291eQAAAgs"]
[Sun Mar 29 19:35:56.386285 2026] [autoindex:error] [pid 23168:tid 23216] [client 172.213.218.14:48925] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 19:36:01.552888 2026] [:error] [pid 23168:tid 23212] [client 172.213.218.14:48925] [client 172.213.218.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.213.218.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ackOoWP8p0yRL8ot_291lgAAAg8"]
[Sun Mar 29 19:36:12.075806 2026] [:error] [pid 23168:tid 23200] [client 172.213.218.14:48925] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/waq.php"] [unique_id "ackOrGP8p0yRL8ot_291nwAAAgM"]
[Sun Mar 29 19:36:13.216232 2026] [:error] [pid 23250:tid 23261] [client 172.213.218.14:13974] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/waq.php"] [unique_id "ackOrZxrpj-dQjy1cvruRAAAAkk"]
[Sun Mar 29 19:36:14.089697 2026] [:error] [pid 32255:tid 32303] [client 172.213.218.14:24809] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/waq.php"] [unique_id "ackOrmnfn-AtRoMbquy6tgAAAEw"]
[Sun Mar 29 19:36:15.164109 2026] [:error] [pid 23168:tid 23213] [client 172.213.218.14:27560] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/waq.php"] [unique_id "ackOr2P8p0yRL8ot_291owAAAhA"]
[Sun Mar 29 19:36:16.661305 2026] [:error] [pid 32359:tid 32375] [client 172.213.218.14:48938] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wakak.php"] [unique_id "ackOsAMb8G3UzfQP3WgdbgAAAM4"]
[Sun Mar 29 19:36:17.866069 2026] [:error] [pid 32255:tid 32298] [client 172.213.218.14:13959] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wakak.php"] [unique_id "ackOsWnfn-AtRoMbquy6uQAAAEc"]
[Sun Mar 29 19:36:18.654458 2026] [:error] [pid 32257:tid 32338] [client 172.213.218.14:46401] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wakak.php"] [unique_id "ackOsiE3TArOFrUtgWrwngAAAJQ"]
[Sun Mar 29 19:36:19.523868 2026] [:error] [pid 23167:tid 23190] [client 172.213.218.14:17607] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wakak.php"] [unique_id "ackOsxIAHJCFaHff3_eh1AAAAdQ"]
[Sun Mar 29 19:36:20.478617 2026] [:error] [pid 23167:tid 23170] [client 172.213.218.14:45740] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "ackOtBIAHJCFaHff3_eh2QAAAcA"]
[Sun Mar 29 19:36:22.600952 2026] [:error] [pid 32359:tid 32385] [client 172.213.218.14:17658] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "ackOtgMb8G3UzfQP3WgdcQAAANg"]
[Sun Mar 29 19:36:23.392018 2026] [:error] [pid 23284:tid 23305] [client 172.213.218.14:16623] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "ackOt4zBujdPHsq7wyRJ8QAAApM"]
[Sun Mar 29 19:36:24.459282 2026] [:error] [pid 23284:tid 23286] [client 172.213.218.14:57930] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bipas.php"] [unique_id "ackOuIzBujdPHsq7wyRJ9AAAAoA"]
[Sun Mar 29 19:36:26.513221 2026] [:error] [pid 23284:tid 23295] [client 172.213.218.14:57628] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conte.php"] [unique_id "ackOuozBujdPHsq7wyRKAwAAAok"]
[Sun Mar 29 19:36:27.466472 2026] [:error] [pid 23284:tid 23289] [client 172.213.218.14:15072] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conte.php"] [unique_id "ackOu4zBujdPHsq7wyRKBgAAAoM"]
[Sun Mar 29 19:36:29.381367 2026] [:error] [pid 23168:tid 23210] [client 172.213.218.14:57638] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conte.php"] [unique_id "ackOvWP8p0yRL8ot_291qwAAAg0"]
[Sun Mar 29 19:36:30.385577 2026] [:error] [pid 23284:tid 23301] [client 172.213.218.14:27536] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/conte.php"] [unique_id "ackOvozBujdPHsq7wyRKCwAAAo8"]
[Sun Mar 29 19:36:31.411995 2026] [:error] [pid 23137:tid 23146] [client 172.213.218.14:23879] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class3.php"] [unique_id "ackOvxaWQa7LdZ_qGFbn9wAAAYc"]
[Sun Mar 29 19:36:32.109129 2026] [:error] [pid 8818:tid 8832] [client 172.213.218.14:57927] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class3.php"] [unique_id "ackOwCCDvotZNSF0FBrFZQAAAUo"]
[Sun Mar 29 19:36:50.147253 2026] [:error] [pid 8818:tid 8836] [client 172.213.218.14:15823] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class3.php"] [unique_id "ackO0iCDvotZNSF0FBrFbQAAAU4"]
[Sun Mar 29 19:37:30.754074 2026] [:error] [pid 32255:tid 32312] [client 172.213.218.14:14292] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "ackO-mnfn-AtRoMbquy7DgAAAFU"]
[Sun Mar 29 19:37:32.142613 2026] [:error] [pid 32254:tid 32277] [client 172.213.218.14:14332] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "ackO_Kug2IHuyGgCTn9OWgAAAA0"]
[Sun Mar 29 19:37:33.823152 2026] [:error] [pid 32255:tid 32303] [client 172.213.218.14:26450] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "ackO_Wnfn-AtRoMbquy7EwAAAEw"]
[Sun Mar 29 19:37:35.748078 2026] [:error] [pid 23284:tid 23288] [client 172.213.218.14:2606] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "ackO_4zBujdPHsq7wyRKaQAAAoI"]
[Sun Mar 29 19:37:36.751362 2026] [:error] [pid 32257:tid 32325] [client 172.213.218.14:23864] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lopst.php"] [unique_id "ackPACE3TArOFrUtgWrxCgAAAIc"]
[Sun Mar 29 19:37:38.999522 2026] [:error] [pid 32255:tid 32305] [client 172.213.218.14:41044] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lopst.php"] [unique_id "ackPAmnfn-AtRoMbquy7GwAAAE4"]
[Sun Mar 29 19:37:41.744783 2026] [:error] [pid 23168:tid 23197] [client 172.213.218.14:33958] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lopst.php"] [unique_id "ackPBWP8p0yRL8ot_2916QAAAgA"]
[Sun Mar 29 19:37:42.900520 2026] [:error] [pid 32257:tid 32341] [client 172.213.218.14:35040] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lopst.php"] [unique_id "ackPBiE3TArOFrUtgWrxGQAAAJc"]
[Sun Mar 29 19:37:43.707938 2026] [:error] [pid 32257:tid 32320] [client 172.213.218.14:15560] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wft.php"] [unique_id "ackPByE3TArOFrUtgWrxGwAAAII"]
[Sun Mar 29 19:37:44.836500 2026] [:error] [pid 32255:tid 32294] [client 172.213.218.14:46372] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wft.php"] [unique_id "ackPCGnfn-AtRoMbquy7KAAAAEM"]
[Sun Mar 29 19:37:45.891361 2026] [:error] [pid 32254:tid 32273] [client 172.213.218.14:14543] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wft.php"] [unique_id "ackPCaug2IHuyGgCTn9OXgAAAAk"]
[Sun Mar 29 19:37:47.484719 2026] [:error] [pid 23168:tid 23217] [client 172.213.218.14:26467] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wft.php"] [unique_id "ackPC2P8p0yRL8ot_2918gAAAhQ"]
[Sun Mar 29 19:37:49.128743 2026] [:error] [pid 23137:tid 23163] [client 172.213.218.14:42848] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ackPDRaWQa7LdZ_qGFboQwAAAZg"]
[Sun Mar 29 19:37:49.831849 2026] [:error] [pid 23168:tid 23200] [client 172.213.218.14:14546] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ackPDWP8p0yRL8ot_2919gAAAgM"]
[Sun Mar 29 19:37:50.655369 2026] [:error] [pid 32359:tid 32368] [client 172.213.218.14:21987] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ackPDgMb8G3UzfQP3WgdiQAAAMc"]
[Sun Mar 29 19:37:51.802785 2026] [:error] [pid 23137:tid 23154] [client 172.213.218.14:2562] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ackPDxaWQa7LdZ_qGFboRAAAAY8"]
[Sun Mar 29 19:37:52.904549 2026] [:error] [pid 23168:tid 23202] [client 172.213.218.14:42857] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "ackPEGP8p0yRL8ot_291_wAAAgU"]
[Sun Mar 29 19:37:54.292705 2026] [:error] [pid 32257:tid 32338] [client 172.213.218.14:57244] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "ackPEiE3TArOFrUtgWrxLQAAAJQ"]
[Sun Mar 29 19:37:55.508564 2026] [:error] [pid 32257:tid 32331] [client 172.213.218.14:34616] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "ackPEyE3TArOFrUtgWrxMwAAAI0"]
[Sun Mar 29 19:37:59.156160 2026] [:error] [pid 23284:tid 23305] [client 172.213.218.14:13542] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bibil.php"] [unique_id "ackPF4zBujdPHsq7wyRKdwAAApM"]
[Sun Mar 29 19:38:00.211695 2026] [:error] [pid 23167:tid 23182] [client 172.213.218.14:42853] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "ackPGBIAHJCFaHff3_eiEwAAAcw"]
[Sun Mar 29 19:38:01.959623 2026] [:error] [pid 32254:tid 32280] [client 172.213.218.14:13561] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "ackPGaug2IHuyGgCTn9OawAAABA"]
[Sun Mar 29 19:38:03.025979 2026] [:error] [pid 23168:tid 23213] [client 172.213.218.14:21967] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "ackPG2P8p0yRL8ot_292DgAAAhA"]
[Sun Mar 29 19:38:04.880296 2026] [:error] [pid 23168:tid 23221] [client 172.213.218.14:31314] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nox.php"] [unique_id "ackPHGP8p0yRL8ot_292EAAAAhg"]
[Sun Mar 29 19:38:06.972482 2026] [:error] [pid 23168:tid 23202] [client 172.213.218.14:36044] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "ackPHmP8p0yRL8ot_292FgAAAgU"]
[Sun Mar 29 19:38:09.289096 2026] [:error] [pid 23137:tid 23141] [client 172.213.218.14:32013] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "ackPIRaWQa7LdZ_qGFboVAAAAYI"]
[Sun Mar 29 19:38:10.235545 2026] [:error] [pid 23284:tid 23309] [client 172.213.218.14:48017] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "ackPIozBujdPHsq7wyRKgwAAApc"]
[Sun Mar 29 19:38:11.094911 2026] [:error] [pid 32359:tid 32361] [client 172.213.218.14:39515] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "ackPIwMb8G3UzfQP3WgdlQAAAMA"]
[Sun Mar 29 19:38:12.879670 2026] [:error] [pid 23168:tid 23197] [client 172.213.218.14:48046] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ackPJGP8p0yRL8ot_292HwAAAgA"]
[Sun Mar 29 19:38:15.250504 2026] [:error] [pid 23137:tid 23156] [client 172.213.218.14:31302] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ackPJxaWQa7LdZ_qGFboWAAAAZE"]
[Sun Mar 29 19:38:16.341099 2026] [:error] [pid 23168:tid 23200] [client 172.213.218.14:37814] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ackPKGP8p0yRL8ot_292IQAAAgM"]
[Sun Mar 29 19:38:17.186931 2026] [:error] [pid 23168:tid 23213] [client 172.213.218.14:48035] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "ackPKWP8p0yRL8ot_292JAAAAhA"]
[Sun Mar 29 19:38:18.267593 2026] [:error] [pid 32359:tid 32382] [client 172.213.218.14:37793] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "ackPKgMb8G3UzfQP3WgdoQAAANU"]
[Sun Mar 29 19:38:19.104181 2026] [:error] [pid 32257:tid 32319] [client 172.213.218.14:48057] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "ackPKyE3TArOFrUtgWrxUgAAAIE"]
[Sun Mar 29 19:38:20.367022 2026] [:error] [pid 23250:tid 23252] [client 172.213.218.14:34621] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "ackPLJxrpj-dQjy1cvrugwAAAkA"]
[Sun Mar 29 19:38:21.115752 2026] [:error] [pid 23284:tid 23295] [client 172.213.218.14:41605] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "ackPLYzBujdPHsq7wyRKiQAAAok"]
[Sun Mar 29 19:38:21.907637 2026] [:error] [pid 23250:tid 23260] [client 172.213.218.14:34587] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "ackPLZxrpj-dQjy1cvruhAAAAkg"]
[Sun Mar 29 19:38:22.773272 2026] [:error] [pid 23284:tid 23300] [client 172.213.218.14:37772] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "ackPLozBujdPHsq7wyRKjwAAAo4"]
[Sun Mar 29 19:38:23.998455 2026] [:error] [pid 23284:tid 23300] [client 172.213.218.14:13715] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "ackPL4zBujdPHsq7wyRKuQAAAo4"]
[Sun Mar 29 19:38:25.645875 2026] [:error] [pid 32257:tid 32328] [client 172.213.218.14:42841] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "ackPMSE3TArOFrUtgWrxXgAAAIo"]
[Sun Mar 29 19:38:27.423380 2026] [:error] [pid 32257:tid 32339] [client 172.213.218.14:15771] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa.php"] [unique_id "ackPMyE3TArOFrUtgWrxYQAAAJU"]
[Sun Mar 29 19:38:44.057644 2026] [:error] [pid 32255:tid 32310] [client 172.213.218.14:39836] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "ackPRGnfn-AtRoMbquy7ZwAAAFM"]
[Sun Mar 29 19:38:46.055481 2026] [:error] [pid 32255:tid 32297] [client 172.213.218.14:43633] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "ackPRmnfn-AtRoMbquy7bQAAAEY"]
[Sun Mar 29 19:38:46.923652 2026] [:error] [pid 32257:tid 32336] [client 172.213.218.14:27234] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "ackPRiE3TArOFrUtgWrxtQAAAJI"]
[Sun Mar 29 19:38:48.045665 2026] [:error] [pid 23250:tid 23267] [client 172.213.218.14:16571] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eee.php"] [unique_id "ackPSJxrpj-dQjy1cvruoAAAAk8"]
[Sun Mar 29 19:38:50.037737 2026] [:error] [pid 32255:tid 32293] [client 172.213.218.14:16572] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "ackPSmnfn-AtRoMbquy7rQAAAEI"]
[Sun Mar 29 19:38:50.844990 2026] [:error] [pid 32257:tid 32332] [client 172.213.218.14:41619] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "ackPSiE3TArOFrUtgWryCAAAAI4"]
[Sun Mar 29 19:38:51.920833 2026] [:error] [pid 23284:tid 23291] [client 172.213.218.14:31331] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "ackPS4zBujdPHsq7wyRLIgAAAoU"]
[Sun Mar 29 19:38:52.959530 2026] [:error] [pid 23284:tid 23305] [client 172.213.218.14:33585] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "ackPTIzBujdPHsq7wyRLJwAAApM"]
[Sun Mar 29 19:38:53.708016 2026] [:error] [pid 32255:tid 32295] [client 172.213.218.14:15795] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "ackPTWnfn-AtRoMbquy7ywAAAEQ"]
[Sun Mar 29 19:38:54.491167 2026] [:error] [pid 23284:tid 23286] [client 172.213.218.14:15800] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "ackPTozBujdPHsq7wyRLLAAAAoA"]
[Sun Mar 29 19:38:57.905113 2026] [:error] [pid 32255:tid 32310] [client 172.213.218.14:32036] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "ackPUWnfn-AtRoMbquy70AAAAFM"]
[Sun Mar 29 19:38:59.637515 2026] [:error] [pid 23137:tid 23161] [client 172.213.218.14:37766] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "ackPUxaWQa7LdZ_qGFboYwAAAZY"]
[Sun Mar 29 19:39:00.881546 2026] [:error] [pid 23284:tid 23295] [client 172.213.218.14:27161] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "ackPVIzBujdPHsq7wyRLNwAAAok"]
[Sun Mar 29 19:39:01.872336 2026] [:error] [pid 23284:tid 23299] [client 172.213.218.14:57223] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "ackPVYzBujdPHsq7wyRLPAAAAo0"]
[Sun Mar 29 19:39:02.668546 2026] [:error] [pid 23168:tid 23208] [client 172.213.218.14:39520] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "ackPVmP8p0yRL8ot_292SQAAAgs"]
[Sun Mar 29 19:39:03.864712 2026] [:error] [pid 23284:tid 23295] [client 172.213.218.14:39490] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "ackPV4zBujdPHsq7wyRLQQAAAok"]
[Sun Mar 29 19:39:06.240822 2026] [:error] [pid 32255:tid 32312] [client 172.213.218.14:29847] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "ackPWmnfn-AtRoMbquy74AAAAFU"]
[Sun Mar 29 19:39:06.852925 2026] [:error] [pid 32257:tid 32338] [client 172.213.218.14:27169] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "ackPWiE3TArOFrUtgWryLgAAAJQ"]
[Sun Mar 29 19:39:09.407854 2026] [:error] [pid 32257:tid 32323] [client 172.213.218.14:25758] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "ackPXSE3TArOFrUtgWryNgAAAIU"]
[Sun Mar 29 19:39:10.570442 2026] [:error] [pid 32255:tid 32293] [client 172.213.218.14:2635] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "ackPXmnfn-AtRoMbquy75wAAAEI"]
[Sun Mar 29 19:39:11.683043 2026] [:error] [pid 32359:tid 32376] [client 172.213.218.14:48024] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "ackPXwMb8G3UzfQP3WgdqwAAAM8"]
[Sun Mar 29 19:39:12.365597 2026] [:error] [pid 23167:tid 23175] [client 172.213.218.14:30646] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "ackPYBIAHJCFaHff3_eiNAAAAcU"]
[Sun Mar 29 19:39:12.951956 2026] [:error] [pid 23168:tid 23198] [client 172.213.218.14:38861] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "ackPYGP8p0yRL8ot_292TgAAAgE"]
[Sun Mar 29 19:39:13.883590 2026] [:error] [pid 23168:tid 23221] [client 172.213.218.14:33558] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "ackPYWP8p0yRL8ot_292TwAAAhg"]
[Sun Mar 29 19:39:14.698315 2026] [:error] [pid 23250:tid 23265] [client 172.213.218.14:2671] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "ackPYpxrpj-dQjy1cvrupwAAAk0"]
[Sun Mar 29 19:39:15.434130 2026] [:error] [pid 23250:tid 23274] [client 172.213.218.14:31301] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "ackPY5xrpj-dQjy1cvruqwAAAlY"]
[Sun Mar 29 19:39:23.120981 2026] [:error] [pid 32255:tid 32310] [client 172.213.218.14:38879] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "ackPa2nfn-AtRoMbquy77gAAAFM"]
[Sun Mar 29 19:39:59.720787 2026] [autoindex:error] [pid 32255:tid 32305] [client 172.213.218.14:40701] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 19:40:05.792140 2026] [:error] [pid 32255:tid 32310] [client 172.213.218.14:40701] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "ackPlWnfn-AtRoMbquy8TwAAAFM"]
[Sun Mar 29 19:40:07.398432 2026] [:error] [pid 32255:tid 32292] [client 172.213.218.14:34263] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "ackPl2nfn-AtRoMbquy8UAAAAEE"]
[Sun Mar 29 19:40:08.110319 2026] [:error] [pid 23284:tid 23295] [client 172.213.218.14:47326] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "ackPmIzBujdPHsq7wyRL6AAAAok"]
[Sun Mar 29 19:40:09.477190 2026] [:error] [pid 23284:tid 23290] [client 172.213.218.14:2147] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "ackPmYzBujdPHsq7wyRL7gAAAoQ"]
[Sun Mar 29 19:40:10.618726 2026] [:error] [pid 32359:tid 32385] [client 172.213.218.14:26837] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "ackPmgMb8G3UzfQP3WgdtQAAANg"]
[Sun Mar 29 19:40:12.592969 2026] [:error] [pid 32257:tid 32336] [client 172.213.218.14:58106] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "ackPnCE3TArOFrUtgWryjAAAAJI"]
[Sun Mar 29 19:40:14.069569 2026] [:error] [pid 8818:tid 8828] [client 172.213.218.14:43144] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "ackPniCDvotZNSF0FBrGGQAAAUY"]
[Sun Mar 29 19:40:15.889305 2026] [:error] [pid 23167:tid 23179] [client 172.213.218.14:14768] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "ackPnxIAHJCFaHff3_eiUgAAAck"]
[Sun Mar 29 19:40:17.440372 2026] [:error] [pid 23137:tid 23151] [client 172.213.218.14:57192] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fffff.php"] [unique_id "ackPoRaWQa7LdZ_qGFbokgAAAYw"]
[Sun Mar 29 19:40:18.799001 2026] [:error] [pid 32359:tid 32370] [client 172.213.218.14:16020] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fffff.php"] [unique_id "ackPogMb8G3UzfQP3WgdxAAAAMk"]
[Sun Mar 29 19:40:20.171833 2026] [:error] [pid 23250:tid 23258] [client 172.213.218.14:2164] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fffff.php"] [unique_id "ackPpJxrpj-dQjy1cvruxAAAAkY"]
[Sun Mar 29 19:40:20.926628 2026] [:error] [pid 32254:tid 32279] [client 172.213.218.14:43162] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fffff.php"] [unique_id "ackPpKug2IHuyGgCTn9OewAAAA8"]
[Sun Mar 29 19:40:21.989935 2026] [:error] [pid 23167:tid 23185] [client 172.213.218.14:21906] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "ackPpRIAHJCFaHff3_eiYAAAAc8"]
[Sun Mar 29 19:40:23.081161 2026] [:error] [pid 23284:tid 23304] [client 172.213.218.14:58063] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "ackPp4zBujdPHsq7wyRL9wAAApI"]
[Sun Mar 29 19:40:24.583112 2026] [:error] [pid 32257:tid 32326] [client 172.213.218.14:58461] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "ackPqCE3TArOFrUtgWrykgAAAIg"]
[Sun Mar 29 19:40:26.489973 2026] [:error] [pid 23168:tid 23213] [client 172.213.218.14:18732] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "ackPqmP8p0yRL8ot_292eAAAAhA"]
[Sun Mar 29 19:40:27.751503 2026] [:error] [pid 23168:tid 23211] [client 172.213.218.14:21900] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "ackPq2P8p0yRL8ot_292fgAAAg4"]
[Sun Mar 29 19:40:29.060066 2026] [:error] [pid 23137:tid 23146] [client 172.213.218.14:16832] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "ackPrRaWQa7LdZ_qGFbongAAAYc"]
[Sun Mar 29 19:40:30.402848 2026] [:error] [pid 23167:tid 23191] [client 172.213.218.14:58488] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "ackPrhIAHJCFaHff3_eibwAAAdU"]
[Sun Mar 29 19:40:31.947391 2026] [:error] [pid 23284:tid 23295] [client 172.213.218.14:58451] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "ackPr4zBujdPHsq7wyRL_QAAAok"]
[Sun Mar 29 19:40:33.358540 2026] [:error] [pid 23284:tid 23305] [client 172.213.218.14:20759] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "ackPsYzBujdPHsq7wyRMAQAAApM"]
[Sun Mar 29 19:40:34.367771 2026] [:error] [pid 23137:tid 23139] [client 172.213.218.14:20747] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "ackPshaWQa7LdZ_qGFbooQAAAYA"]
[Sun Mar 29 19:40:35.203996 2026] [:error] [pid 23284:tid 23296] [client 172.213.218.14:31659] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "ackPs4zBujdPHsq7wyRMCAAAAoo"]
[Sun Mar 29 19:40:36.728607 2026] [:error] [pid 32254:tid 32287] [client 172.213.218.14:41300] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "ackPtKug2IHuyGgCTn9OhgAAABc"]
[Sun Mar 29 19:40:37.430789 2026] [:error] [pid 23168:tid 23221] [client 172.213.218.14:2690] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "ackPtWP8p0yRL8ot_292hgAAAhg"]
[Sun Mar 29 19:40:38.572311 2026] [:error] [pid 32255:tid 32292] [client 172.213.218.14:33606] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "ackPtmnfn-AtRoMbquy8cgAAAEE"]
[Sun Mar 29 19:40:39.882123 2026] [:error] [pid 23167:tid 23170] [client 172.213.218.14:34299] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "ackPtxIAHJCFaHff3_eicgAAAcA"]
[Sun Mar 29 19:40:41.549921 2026] [:error] [pid 32255:tid 32315] [client 172.213.218.14:18691] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "ackPuWnfn-AtRoMbquy8eAAAAFg"]
[Sun Mar 29 19:40:42.430724 2026] [:error] [pid 23168:tid 23219] [client 172.213.218.14:21890] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "ackPumP8p0yRL8ot_292igAAAhY"]
[Sun Mar 29 19:40:43.141729 2026] [:error] [pid 23168:tid 23209] [client 172.213.218.14:33651] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "ackPu2P8p0yRL8ot_292iwAAAgw"]
[Sun Mar 29 19:40:44.017114 2026] [:error] [pid 32255:tid 32297] [client 172.213.218.14:16886] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "ackPvGnfn-AtRoMbquy8egAAAEY"]
[Sun Mar 29 19:40:45.133063 2026] [:error] [pid 8818:tid 8832] [client 172.213.218.14:2796] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "ackPvSCDvotZNSF0FBrGIgAAAUo"]
[Sun Mar 29 19:40:46.305637 2026] [:error] [pid 32257:tid 32334] [client 172.213.218.14:2697] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php/admin.php"] [unique_id "ackPviE3TArOFrUtgWryrAAAAJA"]
[Sun Mar 29 19:40:47.358481 2026] [:error] [pid 32254:tid 32275] [client 172.213.218.14:21163] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php/admin.php"] [unique_id "ackPv6ug2IHuyGgCTn9OiwAAAAs"]
[Sun Mar 29 19:40:48.067172 2026] [:error] [pid 8818:tid 8827] [client 172.213.218.14:21167] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php/admin.php"] [unique_id "ackPwCCDvotZNSF0FBrGJAAAAUU"]
[Sun Mar 29 19:40:49.233145 2026] [:error] [pid 23168:tid 23207] [client 172.213.218.14:21619] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php/admin.php"] [unique_id "ackPwWP8p0yRL8ot_292kgAAAgo"]
[Sun Mar 29 19:40:50.108311 2026] [:error] [pid 32255:tid 32306] [client 172.213.218.14:16055] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "ackPwmnfn-AtRoMbquy8hQAAAE8"]
[Sun Mar 29 19:40:51.329717 2026] [:error] [pid 32255:tid 32313] [client 172.213.218.14:41340] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "ackPw2nfn-AtRoMbquy8hwAAAFY"]
[Sun Mar 29 19:40:52.505560 2026] [:error] [pid 32257:tid 32323] [client 172.213.218.14:2747] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "ackPxCE3TArOFrUtgWryuAAAAIU"]
[Sun Mar 29 19:40:53.346299 2026] [:error] [pid 23284:tid 23292] [client 172.213.218.14:47332] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "ackPxYzBujdPHsq7wyRMJQAAAoY"]
[Sun Mar 29 19:40:54.047337 2026] [:error] [pid 23167:tid 23190] [client 172.213.218.14:16014] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "ackPxhIAHJCFaHff3_eieQAAAdQ"]
[Sun Mar 29 19:40:54.849674 2026] [:error] [pid 23250:tid 23271] [client 172.213.218.14:2143] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "ackPxpxrpj-dQjy1cvru0QAAAlM"]
[Sun Mar 29 19:40:57.048995 2026] [:error] [pid 32257:tid 32321] [client 172.213.218.14:42783] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "ackPySE3TArOFrUtgWrywgAAAIM"]
[Sun Mar 29 19:40:57.871070 2026] [:error] [pid 32257:tid 32333] [client 172.213.218.14:47345] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "ackPySE3TArOFrUtgWryxAAAAI8"]
[Sun Mar 29 19:40:58.823481 2026] [:error] [pid 23284:tid 23310] [client 172.213.218.14:16002] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "ackPyozBujdPHsq7wyRMNgAAApg"]
[Sun Mar 29 19:40:59.843168 2026] [:error] [pid 23284:tid 23290] [client 172.213.218.14:37457] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "ackPy4zBujdPHsq7wyRMOAAAAoQ"]
[Sun Mar 29 19:41:00.409197 2026] [:error] [pid 32255:tid 32291] [client 172.213.218.14:58462] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "ackPzGnfn-AtRoMbquy8kAAAAEA"]
[Sun Mar 29 19:41:01.573550 2026] [:error] [pid 32257:tid 32341] [client 172.213.218.14:28597] [client 172.213.218.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "ackPzSE3TArOFrUtgWryygAAAJc"]
[Sun Mar 29 21:51:18.678984 2026] [:error] [pid 32359:tid 32373] [client 104.28.156.153:28046] [client 104.28.156.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.156.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ackuVgMb8G3UzfQP3Wgu4gAAAMw"]
[Sun Mar 29 21:51:18.831633 2026] [:error] [pid 32257:tid 32333] [client 49.43.161.87:60669] [client 49.43.161.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.161.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ackuViE3TArOFrUtgWoyRwAAAI8"]
[Sun Mar 29 21:54:52.991010 2026] [:error] [pid 32255:tid 32291] [client 49.43.161.87:63635] [client 49.43.161.87] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ackvLGnfn-AtRoMbquzuGAAAAEA"]
[Sun Mar 29 22:02:32.125417 2026] [:error] [pid 23137:tid 23140] [client 20.151.111.128:60916] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ackw-BaWQa7LdZ_qGFb8NQAAAYE"]
[Sun Mar 29 22:02:32.953023 2026] [:error] [pid 23284:tid 23302] [client 20.151.111.128:48057] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ackw-IzBujdPHsq7wySlbwAAApA"]
[Sun Mar 29 22:02:33.782206 2026] [:error] [pid 23167:tid 23188] [client 20.151.111.128:6586] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ackw-RIAHJCFaHff3_fCbQAAAdI"]
[Sun Mar 29 22:02:34.606209 2026] [:error] [pid 32255:tid 32311] [client 20.151.111.128:6531] [client 20.151.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ackw-mnfn-AtRoMbquzxmQAAAFQ"]
[Sun Mar 29 23:22:46.282882 2026] [:error] [pid 32257:tid 32322] [client 62.171.179.32:37346] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aclDxiE3TArOFrUtgWpoJwAAAIQ"]
[Sun Mar 29 23:22:48.966740 2026] [:error] [pid 23167:tid 23178] [client 62.171.179.32:55770] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aclDyBIAHJCFaHff3_fW6wAAAcg"]
[Sun Mar 29 23:22:51.626905 2026] [:error] [pid 32257:tid 32324] [client 62.171.179.32:55782] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aclDyyE3TArOFrUtgWpoMgAAAIY"]
[Sun Mar 29 23:22:54.191583 2026] [:error] [pid 32257:tid 32335] [client 62.171.179.32:40908] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aclDziE3TArOFrUtgWpoNwAAAJE"]
[Sun Mar 29 23:22:56.871550 2026] [:error] [pid 32257:tid 32322] [client 62.171.179.32:40912] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aclD0CE3TArOFrUtgWpoRQAAAIQ"]
[Sun Mar 29 23:22:59.581665 2026] [:error] [pid 23250:tid 23273] [client 62.171.179.32:40914] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aclD05xrpj-dQjy1cvoVTAAAAlU"]
[Sun Mar 29 23:23:02.221979 2026] [:error] [pid 32359:tid 32380] [client 62.171.179.32:40918] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aclD1gMb8G3UzfQP3Wg7LAAAANM"]
[Sun Mar 29 23:23:05.010960 2026] [:error] [pid 32255:tid 32306] [client 62.171.179.32:37514] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aclD2Wnfn-AtRoMbquwWYQAAAE8"]
[Sun Mar 29 23:23:07.732171 2026] [:error] [pid 23284:tid 23305] [client 62.171.179.32:37516] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aclD24zBujdPHsq7wyTkTgAAApM"]
[Sun Mar 29 23:23:10.476191 2026] [:error] [pid 23168:tid 23204] [client 62.171.179.32:37528] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aclD3mP8p0yRL8ot_2-7ggAAAgc"]
[Sun Mar 29 23:23:12.992993 2026] [:error] [pid 23168:tid 23214] [client 62.171.179.32:37534] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aclD4GP8p0yRL8ot_2-7kgAAAhE"]
[Sun Mar 29 23:23:15.565957 2026] [:error] [pid 32255:tid 32308] [client 62.171.179.32:50132] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aclD42nfn-AtRoMbquwWeAAAAFE"]
[Sun Mar 29 23:23:18.176019 2026] [:error] [pid 32255:tid 32310] [client 62.171.179.32:50134] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aclD5mnfn-AtRoMbquwWiQAAAFM"]
[Sun Mar 29 23:23:20.908448 2026] [:error] [pid 32254:tid 32288] [client 62.171.179.32:50150] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aclD6Kug2IHuyGgCTn9l4AAAABg"]
[Sun Mar 29 23:23:23.637145 2026] [:error] [pid 32257:tid 32319] [client 62.171.179.32:36786] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aclD6yE3TArOFrUtgWpofwAAAIE"]
[Sun Mar 29 23:23:26.194378 2026] [:error] [pid 32255:tid 32291] [client 62.171.179.32:36790] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aclD7mnfn-AtRoMbquwWqgAAAEA"]
[Sun Mar 29 23:23:28.670972 2026] [:error] [pid 32257:tid 32332] [client 62.171.179.32:36800] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aclD8CE3TArOFrUtgWpoiAAAAI4"]
[Sun Mar 29 23:23:31.291683 2026] [:error] [pid 32257:tid 32322] [client 62.171.179.32:36808] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aclD8yE3TArOFrUtgWpolgAAAIQ"]
[Sun Mar 29 23:23:33.978769 2026] [:error] [pid 32257:tid 32324] [client 62.171.179.32:40228] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aclD9SE3TArOFrUtgWpoqwAAAIY"]
[Sun Mar 29 23:23:36.740631 2026] [:error] [pid 23284:tid 23302] [client 62.171.179.32:40240] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aclD-IzBujdPHsq7wyTknwAAApA"]
[Sun Mar 29 23:23:39.267253 2026] [:error] [pid 23137:tid 23149] [client 62.171.179.32:40242] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aclD-xaWQa7LdZ_qGFYJywAAAYo"]
[Sun Mar 29 23:23:41.915589 2026] [:error] [pid 23284:tid 23309] [client 62.171.179.32:40250] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aclD_YzBujdPHsq7wyTktgAAApc"]
[Sun Mar 29 23:24:12.680057 2026] [:error] [pid 32254:tid 32266] [client 62.171.179.32:35334] [client 62.171.179.32] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "203.206.98.76_6d6981d87b08122012feb16ae16ba7e1b6712129"): Internal error (specific information not available) [hostname "hotbooksbookeeping2.com"] [uri "/index.php"] [unique_id "aclEGaug2IHuyGgCTn9l_wAAAAI"]
[Sun Mar 29 23:24:15.155593 2026] [:error] [pid 32254:tid 32286] [client 62.171.179.32:35334] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aclEH6ug2IHuyGgCTn9mAQAAABY"]
[Sun Mar 29 23:24:17.599083 2026] [:error] [pid 23284:tid 23288] [client 62.171.179.32:44846] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aclEIYzBujdPHsq7wyTlJQAAAoI"]
[Sun Mar 29 23:24:20.357555 2026] [:error] [pid 23168:tid 23201] [client 62.171.179.32:44852] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aclEJGP8p0yRL8ot_2-76wAAAgQ"]
[Sun Mar 29 23:24:22.944940 2026] [:error] [pid 23168:tid 23212] [client 62.171.179.32:44862] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aclEJmP8p0yRL8ot_2-79gAAAg8"]
[Sun Mar 29 23:24:25.662880 2026] [:error] [pid 32255:tid 32297] [client 62.171.179.32:49116] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aclEKWnfn-AtRoMbquwXBwAAAEY"]
[Sun Mar 29 23:24:28.180111 2026] [:error] [pid 8818:tid 8827] [client 62.171.179.32:49122] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aclELCCDvotZNSF0FBrz6gAAAUU"]
[Sun Mar 29 23:24:30.895030 2026] [:error] [pid 23284:tid 23306] [client 62.171.179.32:49130] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aclELozBujdPHsq7wyTlSQAAApQ"]
[Sun Mar 29 23:24:33.550735 2026] [:error] [pid 32257:tid 32320] [client 62.171.179.32:56206] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aclEMSE3TArOFrUtgWppRQAAAII"]
[Sun Mar 29 23:24:36.210377 2026] [:error] [pid 32257:tid 32336] [client 62.171.179.32:56210] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aclENCE3TArOFrUtgWppSgAAAJI"]
[Sun Mar 29 23:24:38.806685 2026] [:error] [pid 23250:tid 23272] [client 62.171.179.32:56214] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aclENpxrpj-dQjy1cvoVvAAAAlQ"]
[Sun Mar 29 23:24:41.523779 2026] [:error] [pid 23284:tid 23301] [client 62.171.179.32:56216] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aclEOYzBujdPHsq7wyTlcQAAAo8"]
[Sun Mar 29 23:24:44.217530 2026] [:error] [pid 8818:tid 8841] [client 62.171.179.32:35690] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aclEPCCDvotZNSF0FBr0DQAAAVM"]
[Sun Mar 29 23:24:46.721973 2026] [:error] [pid 23284:tid 23297] [client 62.171.179.32:35702] [client 62.171.179.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aclEPozBujdPHsq7wyTlfwAAAos"]
[Mon Mar 30 00:30:45.357041 2026] [:error] [pid 32257:tid 32325] [client 81.227.75.89:57008] [client 81.227.75.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.227.75.89, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aclTtSE3TArOFrUtgWqXpwAAAIc"]
[Mon Mar 30 00:31:09.736465 2026] [:error] [pid 32257:tid 32320] [client 183.82.30.101:16659] [client 183.82.30.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.30.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aclTzSE3TArOFrUtgWqX-wAAAII"]
[Mon Mar 30 00:31:11.434021 2026] [:error] [pid 8818:tid 8841] [client 183.82.30.101:16702] [client 183.82.30.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aclTzyCDvotZNSF0FBoFJgAAAVM"]
[Mon Mar 30 08:28:40.696738 2026] [:error] [pid 41941:tid 41956] [client 147.135.212.217:42912] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acnDuCB2g7BNCXGBOJMgyAAAAQ0"]
[Mon Mar 30 08:28:43.056285 2026] [:error] [pid 35343:tid 35346] [client 147.135.212.217:40130] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acnDu6P5HurqmbvwN-L7CwAAAAE"]
[Mon Mar 30 08:28:45.437603 2026] [:error] [pid 35248:tid 35254] [client 147.135.212.217:40136] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acnDvb3igMCgAQPFS_9aGQAAAEA"]
[Mon Mar 30 08:28:47.825175 2026] [:error] [pid 35249:tid 35293] [client 147.135.212.217:33094] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acnDvyqCKiTq85d6rgDlmQAAAIk"]
[Mon Mar 30 08:28:50.240065 2026] [:error] [pid 35249:tid 35292] [client 147.135.212.217:33098] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acnDwiqCKiTq85d6rgDlowAAAIg"]
[Mon Mar 30 08:28:52.632095 2026] [:error] [pid 35249:tid 35298] [client 147.135.212.217:33106] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acnDxCqCKiTq85d6rgDlpQAAAI4"]
[Mon Mar 30 08:28:55.185778 2026] [:error] [pid 35249:tid 35303] [client 147.135.212.217:33110] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acnDxyqCKiTq85d6rgDlrQAAAJM"]
[Mon Mar 30 08:28:57.729382 2026] [:error] [pid 41941:tid 41948] [client 147.135.212.217:58634] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acnDySB2g7BNCXGBOJMg9wAAAQU"]
[Mon Mar 30 08:29:00.162298 2026] [:error] [pid 41941:tid 41957] [client 147.135.212.217:58640] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acnDzCB2g7BNCXGBOJMhCQAAAQ4"]
[Mon Mar 30 08:29:02.551304 2026] [:error] [pid 35250:tid 35318] [client 147.135.212.217:58656] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "acnDzoaKM1MR6zcp2YM_sQAAAMc"]
[Mon Mar 30 08:29:04.944115 2026] [:error] [pid 41941:tid 41950] [client 147.135.212.217:58660] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acnD0CB2g7BNCXGBOJMhGQAAAQc"]
[Mon Mar 30 08:29:07.479361 2026] [:error] [pid 41941:tid 41963] [client 147.135.212.217:58672] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acnD0yB2g7BNCXGBOJMhJAAAARQ"]
[Mon Mar 30 08:29:09.987420 2026] [:error] [pid 35248:tid 35262] [client 147.135.212.217:52966] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acnD1b3igMCgAQPFS_9aKgAAAEg"]
[Mon Mar 30 08:29:12.386073 2026] [:error] [pid 35249:tid 35294] [client 147.135.212.217:52982] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "acnD2CqCKiTq85d6rgDlxwAAAIo"]
[Mon Mar 30 08:29:14.774453 2026] [:error] [pid 35250:tid 35332] [client 147.135.212.217:52994] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "acnD2oaKM1MR6zcp2YM_wgAAANU"]
[Mon Mar 30 08:29:17.172691 2026] [:error] [pid 35250:tid 35325] [client 147.135.212.217:53000] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "acnD3YaKM1MR6zcp2YM_1AAAAM4"]
[Mon Mar 30 08:29:19.698796 2026] [:error] [pid 35343:tid 35350] [client 147.135.212.217:49002] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "acnD36P5HurqmbvwN-L7LgAAAAU"]
[Mon Mar 30 08:29:22.086121 2026] [:error] [pid 35343:tid 35361] [client 147.135.212.217:49014] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acnD4qP5HurqmbvwN-L7NwAAABA"]
[Mon Mar 30 08:29:24.611471 2026] [:error] [pid 35250:tid 35321] [client 147.135.212.217:49020] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "acnD5IaKM1MR6zcp2YM_5wAAAMo"]
[Mon Mar 30 08:29:27.025665 2026] [:error] [pid 35249:tid 35287] [client 147.135.212.217:49028] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "acnD5yqCKiTq85d6rgDl1AAAAIM"]
[Mon Mar 30 08:29:29.394101 2026] [:error] [pid 35250:tid 35312] [client 147.135.212.217:47442] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acnD6YaKM1MR6zcp2YM_8QAAAME"]
[Mon Mar 30 08:29:31.929478 2026] [:error] [pid 35250:tid 35330] [client 147.135.212.217:47450] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acnD64aKM1MR6zcp2YM__gAAANM"]
[Mon Mar 30 08:29:34.426253 2026] [:error] [pid 41941:tid 41961] [client 147.135.212.217:47456] [client 147.135.212.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acnD7iB2g7BNCXGBOJMhVwAAARI"]
[Mon Mar 30 08:52:26.702775 2026] [:error] [pid 35248:tid 35274] [client 43.156.228.27:47876] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acnJSr3igMCgAQPFS_9hPgAAAFQ"]
[Mon Mar 30 12:11:45.138105 2026] [:error] [pid 35343:tid 35346] [client 43.153.87.54:60152] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acn4AaP5HurqmbvwN-J-mgAAAAE"]
[Mon Mar 30 12:32:02.555653 2026] [:error] [pid 35343:tid 35361] [client 20.213.160.162:8836] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/logs233/index.php"] [unique_id "acn8wqP5HurqmbvwN-KJtAAAABA"]
[Mon Mar 30 12:32:02.621843 2026] [:error] [pid 35248:tid 35254] [client 20.213.160.162:8037] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/logs233/index.php"] [unique_id "acn8wr3igMCgAQPFS_80QwAAAEA"]
[Mon Mar 30 12:32:02.708544 2026] [:error] [pid 35248:tid 35262] [client 20.213.160.162:2132] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/logs233/index.php"] [unique_id "acn8wr3igMCgAQPFS_80RAAAAEg"]
[Mon Mar 30 12:32:02.774813 2026] [:error] [pid 64743:tid 64750] [client 20.213.160.162:2459] [client 20.213.160.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/logs233/index.php"] [unique_id "acn8wizmpVL6Ubzil4hpEQAAAUU"]
[Mon Mar 30 13:43:55.472663 2026] [:error] [pid 41941:tid 41967] [client 183.82.205.106:8032] [client 183.82.205.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.205.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acoNmyB2g7BNCXGBOJOuLwAAARg"]
[Mon Mar 30 13:44:09.296368 2026] [:error] [pid 35249:tid 35291] [client 67.203.33.169:60368] [client 67.203.33.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "acoNqSqCKiTq85d6rgAxZgAAAIc"]
[Mon Mar 30 13:47:27.897245 2026] [:error] [pid 35343:tid 35352] [client 183.82.205.106:9075] [client 183.82.205.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.205.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acoOb6P5HurqmbvwN-K8vwAAAAc"]
[Mon Mar 30 14:24:34.609793 2026] [:error] [pid 41941:tid 41967] [client 182.42.105.144:58899] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acoXIiB2g7BNCXGBOJPJSgAAARg"]
[Mon Mar 30 16:59:32.852367 2026] [:error] [pid 35250:tid 35334] [client 193.70.34.35:54410] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aco7dIaKM1MR6zcp2YMtCAAAANc"]
[Mon Mar 30 16:59:35.198738 2026] [:error] [pid 35343:tid 35367] [client 193.70.34.35:38670] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aco7d6P5HurqmbvwN-L_5AAAABY"]
[Mon Mar 30 16:59:37.778367 2026] [:error] [pid 35343:tid 35365] [client 193.70.34.35:38682] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aco7eaP5HurqmbvwN-L_6QAAABQ"]
[Mon Mar 30 16:59:40.312455 2026] [:error] [pid 50663:tid 50681] [client 193.70.34.35:49720] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aco7fG28b9DKIAMEdfD8IAAAAZA"]
[Mon Mar 30 16:59:42.728906 2026] [:error] [pid 35250:tid 35313] [client 193.70.34.35:49736] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aco7foaKM1MR6zcp2YMtHQAAAMI"]
[Mon Mar 30 16:59:45.129700 2026] [:error] [pid 35250:tid 35313] [client 193.70.34.35:49742] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aco7gYaKM1MR6zcp2YMtJAAAAMI"]
[Mon Mar 30 16:59:47.564908 2026] [:error] [pid 35343:tid 35348] [client 193.70.34.35:49744] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aco7g6P5HurqmbvwN-IAAgAAAAM"]
[Mon Mar 30 16:59:49.974160 2026] [:error] [pid 35250:tid 35319] [client 193.70.34.35:51956] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aco7hYaKM1MR6zcp2YMtJgAAAMg"]
[Mon Mar 30 16:59:52.371657 2026] [:error] [pid 51065:tid 51067] [client 193.70.34.35:51970] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aco7iHMr8wtZeHSSB7Ij1wAAAcA"]
[Mon Mar 30 16:59:54.777621 2026] [:error] [pid 41941:tid 41943] [client 193.70.34.35:51982] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aco7iiB2g7BNCXGBOJMwDQAAAQA"]
[Mon Mar 30 16:59:57.278838 2026] [:error] [pid 35250:tid 35331] [client 193.70.34.35:51992] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aco7jYaKM1MR6zcp2YMtiwAAANQ"]
[Mon Mar 30 16:59:59.778994 2026] [:error] [pid 41941:tid 41966] [client 193.70.34.35:52734] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aco7jyB2g7BNCXGBOJMwOAAAARc"]
[Mon Mar 30 17:00:02.317453 2026] [:error] [pid 35343:tid 35367] [client 193.70.34.35:52738] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aco7kqP5HurqmbvwN-IAUAAAABY"]
[Mon Mar 30 17:00:04.859163 2026] [:error] [pid 51065:tid 51084] [client 193.70.34.35:52754] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aco7lHMr8wtZeHSSB7Ij3QAAAdE"]
[Mon Mar 30 17:00:07.366001 2026] [:error] [pid 35343:tid 35364] [client 193.70.34.35:52768] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aco7l6P5HurqmbvwN-IAYQAAABM"]
[Mon Mar 30 17:00:09.748992 2026] [:error] [pid 64743:tid 64750] [client 193.70.34.35:44938] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aco7mSzmpVL6Ubzil4iNKQAAAUU"]
[Mon Mar 30 17:00:12.281249 2026] [:error] [pid 64743:tid 64759] [client 193.70.34.35:44942] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aco7nCzmpVL6Ubzil4iNLgAAAU4"]
[Mon Mar 30 17:00:14.659966 2026] [:error] [pid 41941:tid 41951] [client 193.70.34.35:44948] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aco7niB2g7BNCXGBOJMwZAAAAQg"]
[Mon Mar 30 17:00:17.185175 2026] [:error] [pid 35250:tid 35324] [client 193.70.34.35:44964] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aco7oYaKM1MR6zcp2YMtrAAAAM0"]
[Mon Mar 30 17:00:19.696493 2026] [:error] [pid 35343:tid 35348] [client 193.70.34.35:34604] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aco7o6P5HurqmbvwN-IAagAAAAM"]
[Mon Mar 30 17:00:22.223050 2026] [:error] [pid 35343:tid 35353] [client 193.70.34.35:34608] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aco7pqP5HurqmbvwN-IAdgAAAAg"]
[Mon Mar 30 17:00:24.744359 2026] [:error] [pid 35343:tid 35369] [client 193.70.34.35:34620] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aco7qKP5HurqmbvwN-IAfQAAABg"]
[Mon Mar 30 17:00:27.259122 2026] [:error] [pid 64743:tid 64745] [client 193.70.34.35:34622] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aco7qyzmpVL6Ubzil4iNMgAAAUA"]
[Mon Mar 30 17:00:29.647174 2026] [:error] [pid 41941:tid 41949] [client 193.70.34.35:37334] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aco7rSB2g7BNCXGBOJMwqAAAAQY"]
[Mon Mar 30 17:01:01.151043 2026] [:error] [pid 41941:tid 41957] [client 193.70.34.35:37346] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aco7zSB2g7BNCXGBOJMxHQAAAQ4"]
[Mon Mar 30 17:01:03.491834 2026] [:error] [pid 51065:tid 51076] [client 193.70.34.35:37780] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aco7z3Mr8wtZeHSSB7IkLwAAAck"]
[Mon Mar 30 17:01:05.815914 2026] [:error] [pid 64743:tid 64757] [client 193.70.34.35:37796] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aco70SzmpVL6Ubzil4iNOQAAAUw"]
[Mon Mar 30 17:01:08.328169 2026] [:error] [pid 41941:tid 41958] [client 193.70.34.35:34942] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aco71CB2g7BNCXGBOJMxJQAAAQ8"]
[Mon Mar 30 17:01:10.824918 2026] [:error] [pid 41941:tid 41954] [client 193.70.34.35:34958] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aco71iB2g7BNCXGBOJMxLAAAAQs"]
[Mon Mar 30 17:01:13.323602 2026] [:error] [pid 35250:tid 35315] [client 193.70.34.35:34970] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aco72YaKM1MR6zcp2YMuowAAAMQ"]
[Mon Mar 30 17:01:15.656214 2026] [:error] [pid 41941:tid 41960] [client 193.70.34.35:34974] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aco72yB2g7BNCXGBOJMxOgAAARE"]
[Mon Mar 30 17:01:18.142122 2026] [:error] [pid 35343:tid 35345] [client 193.70.34.35:35790] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aco73qP5HurqmbvwN-IA5QAAAAA"]
[Mon Mar 30 17:01:20.617154 2026] [:error] [pid 51065:tid 51075] [client 193.70.34.35:35798] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aco74HMr8wtZeHSSB7IkTwAAAcg"]
[Mon Mar 30 17:01:23.100366 2026] [:error] [pid 35249:tid 35288] [client 193.70.34.35:35806] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aco74yqCKiTq85d6rgBEowAAAIQ"]
[Mon Mar 30 17:01:25.416004 2026] [:error] [pid 41941:tid 41963] [client 193.70.34.35:35808] [client 193.70.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aco75SB2g7BNCXGBOJMxVwAAARQ"]
[Mon Mar 30 18:44:12.235804 2026] [:error] [pid 35248:tid 35269] [client 43.153.27.244:57178] [client 43.153.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acpT_L3igMCgAQPFS_-AigAAAE8"]
[Mon Mar 30 21:02:54.963208 2026] [:error] [pid 35248:tid 35268] [client 223.15.245.170:46689] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acp0fr3igMCgAQPFS_-v5QAAAE4"]
[Mon Mar 30 21:50:45.217461 2026] [:error] [pid 63557:tid 63581] [client 43.153.54.138:35696] [client 43.153.54.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acp_ta4QNVlzYgEvIjl_2QAAARY"]
[Mon Mar 30 22:07:05.471142 2026] [:error] [pid 60835:tid 60854] [client 173.239.218.188:36495] [client 173.239.218.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "acqDiQIOJ4Lc0iJVRzzVbwAAABE"]
[Tue Mar 31 00:11:59.840399 2026] [:error] [pid 31577:tid 31590] [client 20.104.195.176:19974] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "acqgz3OcPMUnrUQjB4JXTwAAAYs"]
[Tue Mar 31 00:12:00.687525 2026] [:error] [pid 31577:tid 31588] [client 20.104.195.176:19779] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "acqg0HOcPMUnrUQjB4JXUwAAAYk"]
[Tue Mar 31 00:12:01.513850 2026] [:error] [pid 60747:tid 60807] [client 20.104.195.176:20025] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "acqg0QU3IY-cCpy_-zFdAAAAAMQ"]
[Tue Mar 31 00:12:02.335923 2026] [:error] [pid 60747:tid 60815] [client 20.104.195.176:20003] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "acqg0gU3IY-cCpy_-zFdAgAAAMw"]
[Tue Mar 31 00:48:45.365764 2026] [:error] [pid 36939:tid 36957] [client 170.106.180.139:52704] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acqpbcRDKH225Jeq1jcnPQAAABA"]
[Tue Mar 31 02:01:15.639668 2026] [:error] [pid 36688:tid 36835] [client 81.167.26.57:22772] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acq6a5Ie8NBGKiiCIcIbfwAAAIA"]
[Tue Mar 31 02:01:18.081613 2026] [:error] [pid 36939:tid 36941] [client 81.167.26.57:62569] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acq6bsRDKH225Jeq1jdVawAAAAA"]
[Tue Mar 31 02:01:20.606595 2026] [:error] [pid 36939:tid 36954] [client 81.167.26.57:7222] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acq6cMRDKH225Jeq1jdVdgAAAA0"]
[Tue Mar 31 02:01:23.266066 2026] [:error] [pid 36706:tid 36877] [client 81.167.26.57:50188] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acq6c7a-eBLL1E34-UUCEgAAAM8"]
[Tue Mar 31 02:01:25.959027 2026] [:error] [pid 36706:tid 36874] [client 81.167.26.57:52160] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acq6dba-eBLL1E34-UUCFwAAAMw"]
[Tue Mar 31 02:01:28.472173 2026] [:error] [pid 39123:tid 39141] [client 81.167.26.57:61485] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acq6eCobgVY20PMQKVt49AAAARA"]
[Tue Mar 31 02:01:30.992280 2026] [:error] [pid 36706:tid 36871] [client 81.167.26.57:25068] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acq6era-eBLL1E34-UUCLwAAAMk"]
[Tue Mar 31 02:01:33.704021 2026] [:error] [pid 39123:tid 39148] [client 81.167.26.57:51864] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acq6fSobgVY20PMQKVt5FQAAARc"]
[Tue Mar 31 02:01:36.214671 2026] [:error] [pid 36706:tid 36868] [client 81.167.26.57:62063] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acq6gLa-eBLL1E34-UUCRQAAAMY"]
[Tue Mar 31 02:01:38.859784 2026] [:error] [pid 36688:tid 36855] [client 81.167.26.57:44874] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "acq6gpIe8NBGKiiCIcIbsAAAAJQ"]
[Tue Mar 31 02:01:41.528521 2026] [:error] [pid 36706:tid 36878] [client 81.167.26.57:21966] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acq6hba-eBLL1E34-UUCXwAAANA"]
[Tue Mar 31 02:01:44.060522 2026] [:error] [pid 36688:tid 36853] [client 81.167.26.57:55490] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acq6iJIe8NBGKiiCIcIbwwAAAJI"]
[Tue Mar 31 02:01:46.704858 2026] [:error] [pid 36688:tid 36849] [client 81.167.26.57:17810] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acq6ipIe8NBGKiiCIcIb0AAAAI4"]
[Tue Mar 31 02:01:49.409115 2026] [:error] [pid 36688:tid 36853] [client 81.167.26.57:15589] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "acq6jZIe8NBGKiiCIcIb8QAAAJI"]
[Tue Mar 31 02:01:52.096135 2026] [:error] [pid 36939:tid 36961] [client 81.167.26.57:52141] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "acq6kMRDKH225Jeq1jdV6AAAABQ"]
[Tue Mar 31 02:01:54.570792 2026] [:error] [pid 36706:tid 36879] [client 81.167.26.57:25941] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "acq6kra-eBLL1E34-UUCnAAAANE"]
[Tue Mar 31 02:01:57.274156 2026] [:error] [pid 36706:tid 36879] [client 81.167.26.57:9962] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "acq6lba-eBLL1E34-UUCqwAAANE"]
[Tue Mar 31 02:01:59.967211 2026] [:error] [pid 36688:tid 36849] [client 81.167.26.57:2691] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acq6l5Ie8NBGKiiCIcIcQgAAAI4"]
[Tue Mar 31 02:02:02.445081 2026] [:error] [pid 36939:tid 36943] [client 81.167.26.57:19334] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "acq6msRDKH225Jeq1jdV9gAAAAI"]
[Tue Mar 31 02:02:05.089615 2026] [:error] [pid 39123:tid 39140] [client 81.167.26.57:32025] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "acq6nSobgVY20PMQKVt5cgAAAQ8"]
[Tue Mar 31 02:02:07.747584 2026] [:error] [pid 36939:tid 36953] [client 81.167.26.57:41830] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acq6n8RDKH225Jeq1jdWFAAAAAw"]
[Tue Mar 31 02:02:10.223826 2026] [:error] [pid 36706:tid 36883] [client 81.167.26.57:41319] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acq6ora-eBLL1E34-UUCxgAAANU"]
[Tue Mar 31 02:02:12.740705 2026] [:error] [pid 36672:tid 36812] [client 81.167.26.57:58254] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acq6pLKHDzEfeL3XiLpMNQAAAEU"]
[Tue Mar 31 03:24:38.559251 2026] [:error] [pid 15567:tid 15573] [client 1.15.52.154:37362] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acrN9px4rriuHvPbfx270wAAAMI"]
[Tue Mar 31 04:20:34.241901 2026] [:error] [pid 18334:tid 18422] [client 43.135.142.7:51410] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acrbEnqQrXLbk1cg3mgeAgAAAJA"]
[Tue Mar 31 06:52:03.252571 2026] [:error] [pid 11822:tid 11845] [client 158.158.32.196:16768] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asudo.php"] [unique_id "acr-kyLLrL4a3YEM2I0RDwAAAZU"]
[Tue Mar 31 06:52:03.730686 2026] [:error] [pid 18333:tid 18395] [client 158.158.32.196:16836] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asudo.php"] [unique_id "acr-k0Sx2C5hLR0-8dIe6AAAAFA"]
[Tue Mar 31 06:52:04.208312 2026] [:error] [pid 11869:tid 11896] [client 158.158.32.196:16779] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asudo.php"] [unique_id "acr-lBvAVplg9I6KoIItKQAAAdg"]
[Tue Mar 31 06:52:04.686093 2026] [:error] [pid 18334:tid 18418] [client 158.158.32.196:16833] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asudo.php"] [unique_id "acr-lHqQrXLbk1cg3mhmrAAAAIw"]
[Tue Mar 31 06:52:05.164759 2026] [:error] [pid 18439:tid 18467] [client 158.158.32.196:16855] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "acr-lS-R9nOaA8Xqs7j4JAAAANA"]
[Tue Mar 31 06:52:05.642336 2026] [:error] [pid 11907:tid 11931] [client 158.158.32.196:16845] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "acr-lccoKGLZkBF4Ym1f-QAAAhU"]
[Tue Mar 31 06:52:06.120845 2026] [:error] [pid 11822:tid 11842] [client 158.158.32.196:16875] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "acr-liLLrL4a3YEM2I0REQAAAZI"]
[Tue Mar 31 06:52:06.602705 2026] [:error] [pid 11786:tid 11802] [client 158.158.32.196:16786] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/000.php"] [unique_id "acr-lk-ANHwuqDZumRDeHAAAAU4"]
[Tue Mar 31 06:52:07.081216 2026] [:error] [pid 11786:tid 11800] [client 158.158.32.196:16886] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/000.php"] [unique_id "acr-l0-ANHwuqDZumRDeHQAAAUw"]
[Tue Mar 31 06:52:07.564882 2026] [:error] [pid 18334:tid 18421] [client 158.158.32.196:16832] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "acr-l3qQrXLbk1cg3mhmrgAAAI8"]
[Tue Mar 31 06:52:08.042305 2026] [:error] [pid 11822:tid 11829] [client 158.158.32.196:16844] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "acr-mCLLrL4a3YEM2I0RFAAAAYU"]
[Tue Mar 31 06:52:08.520362 2026] [:error] [pid 11869:tid 11881] [client 158.158.32.196:16870] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "acr-mBvAVplg9I6KoIItLQAAAck"]
[Tue Mar 31 06:52:09.000876 2026] [:error] [pid 11786:tid 11799] [client 158.158.32.196:16872] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "acr-mE-ANHwuqDZumRDeHgAAAUs"]
[Tue Mar 31 06:52:09.478778 2026] [:error] [pid 18334:tid 18416] [client 158.158.32.196:16788] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "acr-mXqQrXLbk1cg3mhmsgAAAIo"]
[Tue Mar 31 06:52:09.956335 2026] [:error] [pid 11907:tid 11917] [client 158.158.32.196:16861] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "acr-mccoKGLZkBF4Ym1f_gAAAgc"]
[Tue Mar 31 06:52:10.435172 2026] [:error] [pid 18333:tid 18403] [client 158.158.32.196:16771] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "acr-mkSx2C5hLR0-8dIe7AAAAFg"]
[Tue Mar 31 06:52:10.914036 2026] [:error] [pid 18334:tid 18410] [client 158.158.32.196:16777] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "acr-mnqQrXLbk1cg3mhmtQAAAIQ"]
[Tue Mar 31 06:52:11.391021 2026] [:error] [pid 18333:tid 18394] [client 158.158.32.196:16785] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "acr-m0Sx2C5hLR0-8dIe7wAAAE8"]
[Tue Mar 31 06:52:11.868932 2026] [:error] [pid 18333:tid 18388] [client 158.158.32.196:16850] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "acr-m0Sx2C5hLR0-8dIe8gAAAEk"]
[Tue Mar 31 06:52:12.346031 2026] [:error] [pid 18333:tid 18381] [client 158.158.32.196:16851] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "acr-nESx2C5hLR0-8dIe9wAAAEI"]
[Tue Mar 31 06:52:12.824813 2026] [:error] [pid 18439:tid 18471] [client 158.158.32.196:16772] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "acr-nC-R9nOaA8Xqs7j4LAAAANQ"]
[Tue Mar 31 06:52:13.303157 2026] [:error] [pid 18333:tid 18383] [client 158.158.32.196:16810] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vvedr.php"] [unique_id "acr-nUSx2C5hLR0-8dIe_wAAAEQ"]
[Tue Mar 31 06:52:13.779515 2026] [:error] [pid 11907:tid 11926] [client 158.158.32.196:16797] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vvedr.php"] [unique_id "acr-nccoKGLZkBF4Ym1f_wAAAhA"]
[Tue Mar 31 06:52:14.257156 2026] [:error] [pid 18334:tid 18408] [client 158.158.32.196:16831] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vvedr.php"] [unique_id "acr-nnqQrXLbk1cg3mhmuAAAAII"]
[Tue Mar 31 06:52:14.735213 2026] [:error] [pid 11907:tid 11912] [client 158.158.32.196:16769] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vvedr.php"] [unique_id "acr-nscoKGLZkBF4Ym1gBAAAAgI"]
[Tue Mar 31 06:52:15.213680 2026] [:error] [pid 18439:tid 18455] [client 158.158.32.196:16859] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "acr-ny-R9nOaA8Xqs7j4NgAAAMQ"]
[Tue Mar 31 06:52:15.691320 2026] [:error] [pid 18439:tid 18461] [client 158.158.32.196:16863] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "acr-ny-R9nOaA8Xqs7j4OAAAAMo"]
[Tue Mar 31 06:52:16.168464 2026] [:error] [pid 18439:tid 18458] [client 158.158.32.196:16714] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "acr-oC-R9nOaA8Xqs7j4PAAAAMc"]
[Tue Mar 31 06:52:16.645640 2026] [:error] [pid 18334:tid 18426] [client 158.158.32.196:16864] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "acr-oHqQrXLbk1cg3mhmugAAAJQ"]
[Tue Mar 31 06:52:17.123379 2026] [:error] [pid 18333:tid 18379] [client 158.158.32.196:16895] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "acr-oUSx2C5hLR0-8dIfBAAAAEA"]
[Tue Mar 31 06:52:17.601898 2026] [:error] [pid 18333:tid 18395] [client 158.158.32.196:16780] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "acr-oUSx2C5hLR0-8dIfCgAAAFA"]
[Tue Mar 31 06:52:18.080295 2026] [:error] [pid 18333:tid 18379] [client 158.158.32.196:16838] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "acr-okSx2C5hLR0-8dIfDQAAAEA"]
[Tue Mar 31 06:52:18.557785 2026] [:error] [pid 18333:tid 18380] [client 158.158.32.196:16821] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "acr-okSx2C5hLR0-8dIfEAAAAEE"]
[Tue Mar 31 06:52:19.035942 2026] [:error] [pid 18439:tid 18457] [client 158.158.32.196:16843] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acr-oy-R9nOaA8Xqs7j4QQAAAMY"]
[Tue Mar 31 06:52:19.513602 2026] [:error] [pid 18333:tid 18386] [client 158.158.32.196:16776] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acr-o0Sx2C5hLR0-8dIfFAAAAEc"]
[Tue Mar 31 06:52:19.992100 2026] [:error] [pid 18439:tid 18468] [client 158.158.32.196:16881] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acr-oy-R9nOaA8Xqs7j4QgAAANE"]
[Tue Mar 31 06:52:20.468284 2026] [:error] [pid 11786:tid 11809] [client 158.158.32.196:16888] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "acr-pE-ANHwuqDZumRDeIAAAAVU"]
[Tue Mar 31 06:52:20.945846 2026] [:error] [pid 18439:tid 18469] [client 158.158.32.196:16876] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htto.php"] [unique_id "acr-pC-R9nOaA8Xqs7j4RgAAANI"]
[Tue Mar 31 06:52:21.423710 2026] [:error] [pid 11786:tid 11805] [client 158.158.32.196:16773] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htto.php"] [unique_id "acr-pU-ANHwuqDZumRDeIQAAAVE"]
[Tue Mar 31 06:52:21.901473 2026] [:error] [pid 11869:tid 11888] [client 158.158.32.196:16783] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htto.php"] [unique_id "acr-pRvAVplg9I6KoIItNgAAAdA"]
[Tue Mar 31 06:52:22.380366 2026] [:error] [pid 11907:tid 11928] [client 158.158.32.196:16796] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htto.php"] [unique_id "acr-pscoKGLZkBF4Ym1gCgAAAhI"]
[Tue Mar 31 06:52:22.858604 2026] [:error] [pid 11822:tid 11826] [client 158.158.32.196:16889] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xhejulap.php"] [unique_id "acr-piLLrL4a3YEM2I0RGQAAAYI"]
[Tue Mar 31 06:52:23.336798 2026] [:error] [pid 18439:tid 18461] [client 158.158.32.196:16852] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xhejulap.php"] [unique_id "acr-py-R9nOaA8Xqs7j4SAAAAMo"]
[Tue Mar 31 06:52:23.815040 2026] [:error] [pid 1224:tid 1226] [client 158.158.32.196:16853] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xhejulap.php"] [unique_id "acr-p8XGPQPzIHnCuJhPIgAAAQA"]
[Tue Mar 31 06:52:24.291225 2026] [:error] [pid 18334:tid 18418] [client 158.158.32.196:16869] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xhejulap.php"] [unique_id "acr-qHqQrXLbk1cg3mhmxQAAAIw"]
[Tue Mar 31 06:52:24.769023 2026] [:error] [pid 18334:tid 18425] [client 158.158.32.196:16787] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acr-qHqQrXLbk1cg3mhmyAAAAJM"]
[Tue Mar 31 06:52:25.247367 2026] [:error] [pid 18334:tid 18406] [client 158.158.32.196:16775] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acr-qXqQrXLbk1cg3mhmygAAAIA"]
[Tue Mar 31 06:52:25.726066 2026] [:error] [pid 11869:tid 11885] [client 158.158.32.196:16711] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acr-qRvAVplg9I6KoIItOQAAAc0"]
[Tue Mar 31 06:52:26.204801 2026] [:error] [pid 11869:tid 11876] [client 158.158.32.196:16825] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acr-qhvAVplg9I6KoIItOgAAAcQ"]
[Tue Mar 31 06:52:26.684297 2026] [:error] [pid 18334:tid 18419] [client 158.158.32.196:16717] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8pewqMTX.php"] [unique_id "acr-qnqQrXLbk1cg3mhmzgAAAI0"]
[Tue Mar 31 06:52:27.161510 2026] [:error] [pid 11869:tid 11893] [client 158.158.32.196:16829] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8pewqMTX.php"] [unique_id "acr-qxvAVplg9I6KoIItPQAAAdU"]
[Tue Mar 31 06:52:27.640455 2026] [:error] [pid 11869:tid 11884] [client 158.158.32.196:16862] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8pewqMTX.php"] [unique_id "acr-qxvAVplg9I6KoIItQQAAAcw"]
[Tue Mar 31 06:52:28.118431 2026] [:error] [pid 1224:tid 1239] [client 158.158.32.196:16839] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8pewqMTX.php"] [unique_id "acr-rMXGPQPzIHnCuJhPJQAAAQ0"]
[Tue Mar 31 06:52:28.595075 2026] [:error] [pid 11822:tid 11848] [client 158.158.32.196:16707] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddpxi.php"] [unique_id "acr-rCLLrL4a3YEM2I0RGwAAAZg"]
[Tue Mar 31 06:52:29.072487 2026] [:error] [pid 11822:tid 11828] [client 158.158.32.196:16793] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddpxi.php"] [unique_id "acr-rSLLrL4a3YEM2I0RHgAAAYQ"]
[Tue Mar 31 06:52:29.549833 2026] [:error] [pid 11907:tid 11928] [client 158.158.32.196:16739] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddpxi.php"] [unique_id "acr-rccoKGLZkBF4Ym1gEwAAAhI"]
[Tue Mar 31 06:52:30.027183 2026] [:error] [pid 18334:tid 18415] [client 158.158.32.196:16735] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ddpxi.php"] [unique_id "acr-rnqQrXLbk1cg3mhm0gAAAIk"]
[Tue Mar 31 06:52:30.504539 2026] [:error] [pid 18334:tid 18409] [client 158.158.32.196:16716] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdkfu.php"] [unique_id "acr-rnqQrXLbk1cg3mhm1AAAAIM"]
[Tue Mar 31 06:52:30.982750 2026] [:error] [pid 18332:tid 18351] [client 158.158.32.196:16778] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdkfu.php"] [unique_id "acr-rr4KXr1F9raS5GSqbgAAAAM"]
[Tue Mar 31 06:52:31.461913 2026] [:error] [pid 11786:tid 11794] [client 158.158.32.196:16795] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdkfu.php"] [unique_id "acr-r0-ANHwuqDZumRDeJAAAAUY"]
[Tue Mar 31 06:52:31.941091 2026] [:error] [pid 11786:tid 11791] [client 158.158.32.196:16774] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdkfu.php"] [unique_id "acr-r0-ANHwuqDZumRDeJQAAAUM"]
[Tue Mar 31 06:52:32.420286 2026] [:error] [pid 1224:tid 1248] [client 158.158.32.196:16868] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/IcC7p.php"] [unique_id "acr-sMXGPQPzIHnCuJhPJwAAARY"]
[Tue Mar 31 06:52:32.898121 2026] [:error] [pid 18333:tid 18389] [client 158.158.32.196:16857] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/IcC7p.php"] [unique_id "acr-sESx2C5hLR0-8dIfGgAAAEo"]
[Tue Mar 31 06:52:33.376622 2026] [:error] [pid 18334:tid 18409] [client 158.158.32.196:16846] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/IcC7p.php"] [unique_id "acr-sXqQrXLbk1cg3mhm2wAAAIM"]
[Tue Mar 31 06:52:33.855830 2026] [:error] [pid 18439:tid 18461] [client 158.158.32.196:16882] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/IcC7p.php"] [unique_id "acr-sS-R9nOaA8Xqs7j4UQAAAMo"]
[Tue Mar 31 06:52:34.334149 2026] [:error] [pid 11822:tid 11839] [client 158.158.32.196:16893] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "acr-siLLrL4a3YEM2I0RIwAAAY8"]
[Tue Mar 31 06:52:34.816431 2026] [:error] [pid 1224:tid 1244] [client 158.158.32.196:16715] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "acr-ssXGPQPzIHnCuJhPKQAAARI"]
[Tue Mar 31 06:52:35.295065 2026] [:error] [pid 18439:tid 18473] [client 158.158.32.196:16834] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "acr-sy-R9nOaA8Xqs7j4VwAAANY"]
[Tue Mar 31 06:52:35.772317 2026] [:error] [pid 11907:tid 11930] [client 158.158.32.196:16818] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "acr-s8coKGLZkBF4Ym1gGwAAAhQ"]
[Tue Mar 31 06:52:36.250577 2026] [:error] [pid 1224:tid 1250] [client 158.158.32.196:16801] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "acr-tMXGPQPzIHnCuJhPLQAAARg"]
[Tue Mar 31 06:52:36.729082 2026] [:error] [pid 11869:tid 11878] [client 158.158.32.196:16874] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "acr-tBvAVplg9I6KoIItRwAAAcY"]
[Tue Mar 31 06:52:37.205861 2026] [:error] [pid 18332:tid 18349] [client 158.158.32.196:16826] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "acr-tb4KXr1F9raS5GSqcwAAAAE"]
[Tue Mar 31 06:52:37.683060 2026] [:error] [pid 11869:tid 11896] [client 158.158.32.196:16877] [client 158.158.32.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "acr-tRvAVplg9I6KoIItTAAAAdg"]
[Tue Mar 31 07:19:06.149784 2026] [:error] [pid 36890:tid 36905] [client 43.156.156.96:38742] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acsE6p8FASPd_uH8z7cYqAAAAAo"]
[Tue Mar 31 07:48:17.805322 2026] [:error] [pid 36891:tid 36929] [client 15.204.12.43:59002] [client 15.204.12.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "acsLwZJhiMaJUqoqfl4g3QAAAEU"]
[Tue Mar 31 08:09:42.633809 2026] [:error] [pid 36982:tid 36988] [client 182.181.135.141:53506] [client 182.181.135.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.181.135.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acsQxvlMmeoQKN0r_GNnnQAAAMM"]
[Tue Mar 31 09:10:52.604888 2026] [:error] [pid 36890:tid 36897] [client 182.181.135.141:65151] [client 182.181.135.141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acsfHJ8FASPd_uH8z7dVIQAAAAI"]
[Tue Mar 31 09:12:33.222183 2026] [:error] [pid 6548:tid 6552] [client 182.181.135.141:50597] [client 182.181.135.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.181.135.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acsfgbgIz9HgMl9YwE6VAAAAAUI"]
[Tue Mar 31 09:14:00.827193 2026] [:error] [pid 41421:tid 41447] [client 182.181.135.141:51816] [client 182.181.135.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.181.135.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acsf2BSaDjY9kKFtUQB9HQAAARc"]
[Tue Mar 31 10:27:20.949044 2026] [:error] [pid 36982:tid 37002] [client 51.77.218.191:51442] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "acsxCPlMmeoQKN0r_GPPiQAAANE"]
[Tue Mar 31 10:27:23.514539 2026] [:error] [pid 36890:tid 36912] [client 51.77.218.191:56164] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "acsxC58FASPd_uH8z7dv0AAAABE"]
[Tue Mar 31 10:27:26.003723 2026] [:error] [pid 36982:tid 36998] [client 51.77.218.191:56166] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "acsxDvlMmeoQKN0r_GPPpgAAAM0"]
[Tue Mar 31 10:27:28.449527 2026] [:error] [pid 36982:tid 36997] [client 51.77.218.191:56170] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "acsxEPlMmeoQKN0r_GPPsAAAAMw"]
[Tue Mar 31 10:27:30.980432 2026] [:error] [pid 41421:tid 41447] [client 51.77.218.191:56180] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "acsxEhSaDjY9kKFtUQCe0QAAARc"]
[Tue Mar 31 10:27:33.482831 2026] [:error] [pid 36982:tid 36993] [client 51.77.218.191:36604] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "acsxFflMmeoQKN0r_GPPxAAAAMg"]
[Tue Mar 31 10:27:36.103654 2026] [:error] [pid 36892:tid 36952] [client 51.77.218.191:36608] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "acsxGEyj9S4G0ek3O4LtXQAAAIE"]
[Tue Mar 31 10:27:38.465119 2026] [:error] [pid 36982:tid 37007] [client 51.77.218.191:36618] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "acsxGvlMmeoQKN0r_GPP0wAAANY"]
[Tue Mar 31 10:27:40.898420 2026] [:error] [pid 41421:tid 41448] [client 51.77.218.191:36620] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "acsxHBSaDjY9kKFtUQCe5gAAARg"]
[Tue Mar 31 10:27:43.374103 2026] [:error] [pid 36982:tid 36988] [client 51.77.218.191:54678] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "acsxH_lMmeoQKN0r_GPP4AAAAMM"]
[Tue Mar 31 10:27:45.803007 2026] [:error] [pid 36890:tid 36908] [client 51.77.218.191:54694] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "acsxIZ8FASPd_uH8z7dv5QAAAA0"]
[Tue Mar 31 10:27:48.455520 2026] [:error] [pid 6548:tid 6551] [client 51.77.218.191:54704] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "acsxJLgIz9HgMl9YwE7B4QAAAUE"]
[Tue Mar 31 10:27:50.914609 2026] [:error] [pid 36982:tid 36986] [client 51.77.218.191:54708] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "acsxJvlMmeoQKN0r_GPQFwAAAME"]
[Tue Mar 31 10:27:53.517682 2026] [:error] [pid 6548:tid 6556] [client 51.77.218.191:41042] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "acsxKbgIz9HgMl9YwE7B7gAAAUY"]
[Tue Mar 31 10:27:56.092897 2026] [:error] [pid 6548:tid 6574] [client 51.77.218.191:41056] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "acsxLLgIz9HgMl9YwE7B_AAAAVg"]
[Tue Mar 31 10:27:58.531101 2026] [:error] [pid 36892:tid 36956] [client 51.77.218.191:41070] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "acsxLkyj9S4G0ek3O4LtZwAAAIU"]
[Tue Mar 31 10:28:01.144633 2026] [:error] [pid 36982:tid 37008] [client 51.77.218.191:41076] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "acsxMflMmeoQKN0r_GPQNAAAANc"]
[Tue Mar 31 10:28:03.555028 2026] [:error] [pid 36982:tid 37003] [client 51.77.218.191:44944] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "acsxM_lMmeoQKN0r_GPQRQAAANI"]
[Tue Mar 31 10:28:05.985539 2026] [:error] [pid 6548:tid 6564] [client 51.77.218.191:44954] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "acsxNbgIz9HgMl9YwE7CCQAAAU4"]
[Tue Mar 31 10:28:08.392144 2026] [:error] [pid 6548:tid 6558] [client 51.77.218.191:44968] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "acsxOLgIz9HgMl9YwE7CCwAAAUg"]
[Tue Mar 31 10:28:10.791529 2026] [:error] [pid 6548:tid 6556] [client 51.77.218.191:44978] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "acsxOrgIz9HgMl9YwE7CHAAAAUY"]
[Tue Mar 31 10:28:13.225761 2026] [:error] [pid 36890:tid 36903] [client 51.77.218.191:33024] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "acsxPZ8FASPd_uH8z7dwCQAAAAg"]
[Tue Mar 31 10:28:15.656095 2026] [:error] [pid 41421:tid 41429] [client 51.77.218.191:33034] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "acsxPxSaDjY9kKFtUQCfMQAAAQU"]
[Tue Mar 31 10:28:47.735088 2026] [:error] [pid 36982:tid 36988] [client 51.77.218.191:33050] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "acsxX_lMmeoQKN0r_GPQ0QAAAMM"]
[Tue Mar 31 10:28:50.205622 2026] [:error] [pid 6548:tid 6564] [client 51.77.218.191:50196] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "acsxYrgIz9HgMl9YwE7CmwAAAU4"]
[Tue Mar 31 10:28:52.636926 2026] [:error] [pid 36982:tid 36999] [client 51.77.218.191:41218] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "acsxZPlMmeoQKN0r_GPQ2QAAAM4"]
[Tue Mar 31 10:28:55.018652 2026] [:error] [pid 41421:tid 41435] [client 51.77.218.191:41222] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "acsxZxSaDjY9kKFtUQCfkQAAAQs"]
[Tue Mar 31 10:28:57.403291 2026] [:error] [pid 6548:tid 6564] [client 51.77.218.191:41234] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "acsxabgIz9HgMl9YwE7CpwAAAU4"]
[Tue Mar 31 10:28:59.944308 2026] [:error] [pid 6548:tid 6555] [client 51.77.218.191:41242] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "acsxa7gIz9HgMl9YwE7CrQAAAUU"]
[Tue Mar 31 10:29:02.340297 2026] [:error] [pid 41421:tid 41426] [client 51.77.218.191:37846] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "acsxbhSaDjY9kKFtUQCfmgAAAQI"]
[Tue Mar 31 10:29:04.867160 2026] [:error] [pid 36982:tid 36996] [client 51.77.218.191:37856] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "acsxcPlMmeoQKN0r_GPQ9QAAAMs"]
[Tue Mar 31 10:29:07.396514 2026] [:error] [pid 36982:tid 36985] [client 51.77.218.191:37872] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "acsxc_lMmeoQKN0r_GPQ-wAAAMA"]
[Tue Mar 31 10:29:09.905995 2026] [:error] [pid 36892:tid 36971] [client 51.77.218.191:37876] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "acsxdUyj9S4G0ek3O4LtqgAAAJQ"]
[Tue Mar 31 10:29:12.265592 2026] [:error] [pid 6548:tid 6556] [client 51.77.218.191:39160] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "acsxeLgIz9HgMl9YwE7C0QAAAUY"]
[Tue Mar 31 10:29:14.787751 2026] [:error] [pid 36890:tid 36898] [client 51.77.218.191:39162] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "acsxep8FASPd_uH8z7dwQAAAAAM"]
[Tue Mar 31 10:50:10.404209 2026] [:error] [pid 41421:tid 41440] [client 43.159.128.155:42206] [client 43.159.128.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acs2YhSaDjY9kKFtUQCotAAAARA"]
[Tue Mar 31 13:53:52.958428 2026] [:error] [pid 36982:tid 36988] [client 43.157.181.189:34326] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acthcPlMmeoQKN0r_GOUwwAAAMM"]
[Tue Mar 31 16:00:02.593997 2026] [:error] [pid 6548:tid 6573] [client 36.111.67.189:35907] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "act_ArgIz9HgMl9YwE6WIQAAAVc"]
[Tue Mar 31 19:56:36.959456 2026] [:error] [pid 6548:tid 6568] [client 43.157.150.69:60460] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acu2dLgIz9HgMl9YwE4wyQAAAVI"]
[Tue Mar 31 22:41:24.604469 2026] [:error] [pid 36892:tid 36954] [client 114.96.103.33:50391] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acvdFEyj9S4G0ek3O4Ks3gAAAIM"]
[Wed Apr 01 02:25:14.816412 2026] [:error] [pid 52592:tid 52666] [client 41.254.80.236:41782] [client 41.254.80.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.254.80.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "acwRij-61iqkPKUhqlbyPgAAABM"]
[Wed Apr 01 05:11:03.027745 2026] [:error] [pid 23714:tid 23753] [client 43.140.247.223:40110] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "acw4Z0HxDDU2ETcG9DSSBwAAABM"]
[Wed Apr 01 07:19:12.149194 2026] [:error] [pid 24348:tid 24390] [client 20.116.48.67:36826] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ca4.php"] [unique_id "acxWcG0Vs69Y5nF1HA_kqQAAAYs"]
[Wed Apr 01 07:19:13.609307 2026] [:error] [pid 23715:tid 23766] [client 20.116.48.67:36839] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ca4.php"] [unique_id "acxWca-REzOruNbiT9xc9QAAAEU"]
[Wed Apr 01 07:19:15.036663 2026] [:error] [pid 24346:tid 24353] [client 20.116.48.67:36844] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ca4.php"] [unique_id "acxWc7c1l8kg9MhGHIKTIQAAAUE"]
[Wed Apr 01 07:19:16.460489 2026] [:error] [pid 23819:tid 23839] [client 20.116.48.67:36856] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ca4.php"] [unique_id "acxWdNdfUS_37wFAM77tqwAAANE"]
[Wed Apr 01 07:19:17.908307 2026] [:error] [pid 23715:tid 23761] [client 20.116.48.67:36857] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nz.php"] [unique_id "acxWda-REzOruNbiT9xc_QAAAEA"]
[Wed Apr 01 07:19:19.335250 2026] [:error] [pid 24346:tid 24366] [client 20.116.48.67:36832] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nz.php"] [unique_id "acxWd7c1l8kg9MhGHIKTJwAAAU4"]
[Wed Apr 01 07:19:20.762852 2026] [:error] [pid 23715:tid 23784] [client 20.116.48.67:36815] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nz.php"] [unique_id "acxWeK-REzOruNbiT9xdAwAAAFc"]
[Wed Apr 01 07:19:22.193549 2026] [:error] [pid 24348:tid 24392] [client 20.116.48.67:36807] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nz.php"] [unique_id "acxWem0Vs69Y5nF1HA_krQAAAY0"]
[Wed Apr 01 07:19:23.616294 2026] [:error] [pid 24346:tid 24353] [client 20.116.48.67:36847] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "acxWe7c1l8kg9MhGHIKTMwAAAUE"]
[Wed Apr 01 07:19:25.048823 2026] [:error] [pid 23715:tid 23783] [client 20.116.48.67:36849] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "acxWfa-REzOruNbiT9xdEgAAAFY"]
[Wed Apr 01 07:19:26.484080 2026] [:error] [pid 24348:tid 24383] [client 20.116.48.67:36829] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "acxWfm0Vs69Y5nF1HA_ktAAAAYQ"]
[Wed Apr 01 07:19:27.911112 2026] [:error] [pid 23715:tid 23783] [client 20.116.48.67:36855] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnn_.php"] [unique_id "acxWf6-REzOruNbiT9xdGgAAAFY"]
[Wed Apr 01 07:19:29.362556 2026] [:error] [pid 23714:tid 23747] [client 20.116.48.67:36838] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "acxWgUHxDDU2ETcG9DTlkgAAAA0"]
[Wed Apr 01 07:19:30.780574 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:36755] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "acxWgkHxDDU2ETcG9DTllAAAAAU"]
[Wed Apr 01 07:19:32.206077 2026] [:error] [pid 24348:tid 24399] [client 20.116.48.67:36739] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "acxWhG0Vs69Y5nF1HA_kwQAAAZQ"]
[Wed Apr 01 07:19:33.638656 2026] [:error] [pid 23715:tid 23771] [client 20.116.48.67:36746] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/anz.php"] [unique_id "acxWha-REzOruNbiT9xdJwAAAEo"]
[Wed Apr 01 07:19:35.071095 2026] [:error] [pid 23714:tid 23736] [client 20.116.48.67:36738] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "acxWh0HxDDU2ETcG9DTlnQAAAAI"]
[Wed Apr 01 07:19:36.508533 2026] [:error] [pid 23715:tid 23769] [client 20.116.48.67:36754] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "acxWiK-REzOruNbiT9xdNAAAAEg"]
[Wed Apr 01 07:19:37.927910 2026] [:error] [pid 24348:tid 24386] [client 20.116.48.67:36749] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "acxWiW0Vs69Y5nF1HA_kygAAAYc"]
[Wed Apr 01 07:19:39.353758 2026] [:error] [pid 24346:tid 24374] [client 20.116.48.67:36817] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "acxWi7c1l8kg9MhGHIKTSAAAAVY"]
[Wed Apr 01 07:19:40.799342 2026] [:error] [pid 23715:tid 23776] [client 20.116.48.67:36804] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "acxWjK-REzOruNbiT9xdPAAAAE8"]
[Wed Apr 01 07:19:42.233190 2026] [:error] [pid 23715:tid 23778] [client 20.116.48.67:36843] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "acxWjq-REzOruNbiT9xdPwAAAFE"]
[Wed Apr 01 07:19:43.662113 2026] [:error] [pid 23714:tid 23748] [client 20.116.48.67:36741] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "acxWj0HxDDU2ETcG9DTlqgAAAA4"]
[Wed Apr 01 07:19:45.099994 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:36753] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file66.php"] [unique_id "acxWkUHxDDU2ETcG9DTlrgAAABM"]
[Wed Apr 01 07:19:46.556144 2026] [:error] [pid 23715:tid 23780] [client 20.116.48.67:36802] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "acxWkq-REzOruNbiT9xdQQAAAFM"]
[Wed Apr 01 07:19:47.978810 2026] [:error] [pid 24346:tid 24357] [client 20.116.48.67:36736] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "acxWk7c1l8kg9MhGHIKTUAAAAUU"]
[Wed Apr 01 07:19:49.401900 2026] [:error] [pid 23714:tid 23737] [client 20.116.48.67:36859] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "acxWlUHxDDU2ETcG9DTluQAAAAM"]
[Wed Apr 01 07:19:50.822015 2026] [:error] [pid 24346:tid 24359] [client 20.116.48.67:36841] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kure.php"] [unique_id "acxWlrc1l8kg9MhGHIKTUwAAAUc"]
[Wed Apr 01 07:19:52.256407 2026] [:error] [pid 23715:tid 23763] [client 20.116.48.67:36812] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "acxWmK-REzOruNbiT9xdRAAAAEI"]
[Wed Apr 01 07:19:53.682081 2026] [:error] [pid 23714:tid 23757] [client 20.116.48.67:36850] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "acxWmUHxDDU2ETcG9DTlyAAAABc"]
[Wed Apr 01 07:19:55.104753 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:36801] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "acxWm0HxDDU2ETcG9DTlzwAAAAw"]
[Wed Apr 01 07:19:56.530443 2026] [:error] [pid 23715:tid 23778] [client 20.116.48.67:36852] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "acxWnK-REzOruNbiT9xdUAAAAFE"]
[Wed Apr 01 07:19:57.974604 2026] [:error] [pid 24348:tid 24387] [client 20.116.48.67:36863] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "acxWnW0Vs69Y5nF1HA_k2wAAAYg"]
[Wed Apr 01 07:19:59.425569 2026] [:error] [pid 23715:tid 23772] [client 20.116.48.67:36845] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "acxWn6-REzOruNbiT9xdUwAAAEs"]
[Wed Apr 01 07:20:00.852843 2026] [:error] [pid 23715:tid 23782] [client 20.116.48.67:36825] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "acxWoK-REzOruNbiT9xdWgAAAFU"]
[Wed Apr 01 07:20:02.277711 2026] [:error] [pid 23714:tid 23755] [client 20.116.48.67:36851] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaje.php"] [unique_id "acxWokHxDDU2ETcG9DTl4gAAABU"]
[Wed Apr 01 07:20:03.710318 2026] [:error] [pid 23715:tid 23774] [client 20.116.48.67:36771] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "acxWo6-REzOruNbiT9xdYAAAAE0"]
[Wed Apr 01 07:20:05.127741 2026] [:error] [pid 23714:tid 23751] [client 20.116.48.67:36840] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "acxWpUHxDDU2ETcG9DTl7wAAABE"]
[Wed Apr 01 07:20:06.554865 2026] [:error] [pid 23714:tid 23736] [client 20.116.48.67:36775] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "acxWpkHxDDU2ETcG9DTl-AAAAAI"]
[Wed Apr 01 07:20:07.974750 2026] [:error] [pid 23714:tid 23735] [client 20.116.48.67:36846] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/msy.php"] [unique_id "acxWp0HxDDU2ETcG9DTl_gAAAAE"]
[Wed Apr 01 07:20:09.403145 2026] [:error] [pid 23715:tid 23775] [client 20.116.48.67:36830] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "acxWqa-REzOruNbiT9xdeQAAAE4"]
[Wed Apr 01 07:20:10.853373 2026] [:error] [pid 23714:tid 23744] [client 20.116.48.67:36792] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fgd.php"] [unique_id "acxWqkHxDDU2ETcG9DTmBwAAAAo"]
[Wed Apr 01 07:20:21.241751 2026] [:error] [pid 23715:tid 23778] [client 20.116.48.67:36785] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/network.php"] [unique_id "acxWta-REzOruNbiT9xdkQAAAFE"]
[Wed Apr 01 07:20:24.190220 2026] [:error] [pid 23819:tid 23839] [client 20.116.48.67:36799] [client 20.116.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.48.67, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acxWuNdfUS_37wFAM77twwAAANE"]
[Wed Apr 01 07:20:28.924524 2026] [:error] [pid 23819:tid 23833] [client 20.116.48.67:36799] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "acxWvNdfUS_37wFAM77tzAAAAMs"]
[Wed Apr 01 07:20:30.357668 2026] [:error] [pid 24348:tid 24381] [client 20.116.48.67:36758] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "acxWvm0Vs69Y5nF1HA_lTgAAAYI"]
[Wed Apr 01 07:20:31.787889 2026] [:error] [pid 24346:tid 24358] [client 20.116.48.67:36862] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "acxWv7c1l8kg9MhGHIKTZwAAAUY"]
[Wed Apr 01 07:20:33.215590 2026] [:error] [pid 23819:tid 23842] [client 20.116.48.67:36803] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "acxWwddfUS_37wFAM77t1AAAANQ"]
[Wed Apr 01 07:20:34.663502 2026] [:error] [pid 23715:tid 23779] [client 20.116.48.67:36711] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "acxWwq-REzOruNbiT9xdmwAAAFI"]
[Wed Apr 01 07:20:36.114100 2026] [:error] [pid 23715:tid 23778] [client 20.116.48.67:36793] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "acxWxK-REzOruNbiT9xdnAAAAFE"]
[Wed Apr 01 07:20:37.577583 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:36752] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "acxWxUHxDDU2ETcG9DTmLwAAABM"]
[Wed Apr 01 07:20:39.083538 2026] [:error] [pid 23714:tid 23741] [client 20.116.48.67:36794] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ty.php"] [unique_id "acxWx0HxDDU2ETcG9DTmOwAAAAc"]
[Wed Apr 01 07:20:40.525874 2026] [:error] [pid 23714:tid 23741] [client 20.116.48.67:36791] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acxWyEHxDDU2ETcG9DTmRQAAAAc"]
[Wed Apr 01 07:20:41.970286 2026] [:error] [pid 23819:tid 23831] [client 20.116.48.67:36745] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acxWyddfUS_37wFAM77t2wAAAMk"]
[Wed Apr 01 07:20:43.451524 2026] [:error] [pid 24314:tid 24329] [client 20.116.48.67:36779] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acxWy5RF3FCzjmMUX5bsnAAAAQs"]
[Wed Apr 01 07:20:44.903782 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:36710] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acxWzEHxDDU2ETcG9DTmXAAAABM"]
[Wed Apr 01 07:20:46.348109 2026] [:error] [pid 24314:tid 24334] [client 20.116.48.67:36823] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "acxWzpRF3FCzjmMUX5bsngAAARA"]
[Wed Apr 01 07:20:47.790923 2026] [:error] [pid 24314:tid 24333] [client 20.116.48.67:36858] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acxWz5RF3FCzjmMUX5bsoQAAAQ8"]
[Wed Apr 01 07:20:49.244010 2026] [:error] [pid 23715:tid 23761] [client 20.116.48.67:36854] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acxW0a-REzOruNbiT9xdngAAAEA"]
[Wed Apr 01 07:20:50.668771 2026] [:error] [pid 23714:tid 23754] [client 20.116.48.67:36769] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acxW0kHxDDU2ETcG9DTmagAAABQ"]
[Wed Apr 01 07:20:52.103658 2026] [:error] [pid 23715:tid 23780] [client 20.116.48.67:36816] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ini.php"] [unique_id "acxW1K-REzOruNbiT9xdnwAAAFM"]
[Wed Apr 01 07:20:53.534220 2026] [:error] [pid 24348:tid 24388] [client 20.116.48.67:36762] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ini.php"] [unique_id "acxW1W0Vs69Y5nF1HA_lZQAAAYk"]
[Wed Apr 01 07:20:54.956647 2026] [:error] [pid 24348:tid 24400] [client 20.116.48.67:36821] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ini.php"] [unique_id "acxW1m0Vs69Y5nF1HA_laQAAAZU"]
[Wed Apr 01 07:20:56.402728 2026] [:error] [pid 24314:tid 24321] [client 20.116.48.67:36788] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ini.php"] [unique_id "acxW2JRF3FCzjmMUX5bspgAAAQM"]
[Wed Apr 01 07:20:57.839668 2026] [:error] [pid 24346:tid 24352] [client 20.116.48.67:36810] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/libraries/legacy/info.php"] [unique_id "acxW2bc1l8kg9MhGHIKTdAAAAUA"]
[Wed Apr 01 07:20:59.257288 2026] [:error] [pid 23714:tid 23737] [client 20.116.48.67:36836] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/libraries/legacy/info.php"] [unique_id "acxW20HxDDU2ETcG9DTmggAAAAM"]
[Wed Apr 01 07:21:00.690777 2026] [:error] [pid 23714:tid 23736] [client 20.116.48.67:36860] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/libraries/legacy/info.php"] [unique_id "acxW3EHxDDU2ETcG9DTmhwAAAAI"]
[Wed Apr 01 07:21:02.143572 2026] [:error] [pid 24314:tid 24341] [client 20.116.48.67:36747] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/libraries/legacy/info.php"] [unique_id "acxW3pRF3FCzjmMUX5bsqAAAARc"]
[Wed Apr 01 07:21:03.580595 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:36715] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/include.php"] [unique_id "acxW30HxDDU2ETcG9DTmjgAAABM"]
[Wed Apr 01 07:21:05.017120 2026] [:error] [pid 24346:tid 24354] [client 20.116.48.67:36853] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/include.php"] [unique_id "acxW4bc1l8kg9MhGHIKTegAAAUI"]
[Wed Apr 01 07:21:06.451540 2026] [:error] [pid 23715:tid 23779] [client 20.116.48.67:36798] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/include.php"] [unique_id "acxW4q-REzOruNbiT9xdqQAAAFI"]
[Wed Apr 01 07:21:07.892126 2026] [:error] [pid 24314:tid 24324] [client 20.116.48.67:36789] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/include.php"] [unique_id "acxW45RF3FCzjmMUX5bsrAAAAQY"]
[Wed Apr 01 07:21:09.335392 2026] [:error] [pid 24346:tid 24370] [client 20.116.48.67:36800] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/about.php"] [unique_id "acxW5bc1l8kg9MhGHIKTfAAAAVI"]
[Wed Apr 01 07:21:10.831133 2026] [:error] [pid 24348:tid 24395] [client 20.116.48.67:36805] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/about.php"] [unique_id "acxW5m0Vs69Y5nF1HA_ldgAAAZA"]
[Wed Apr 01 07:21:12.718084 2026] [:error] [pid 23715:tid 23766] [client 20.116.48.67:36708] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/about.php"] [unique_id "acxW6K-REzOruNbiT9xdtAAAAEU"]
[Wed Apr 01 07:21:14.457367 2026] [:error] [pid 23715:tid 23767] [client 20.116.48.67:36780] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/about.php"] [unique_id "acxW6q-REzOruNbiT9xdvAAAAEY"]
[Wed Apr 01 07:21:16.039547 2026] [:error] [pid 23715:tid 23777] [client 20.116.48.67:36811] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "acxW7K-REzOruNbiT9xdwwAAAFA"]
[Wed Apr 01 07:21:17.644250 2026] [:error] [pid 23715:tid 23767] [client 20.116.48.67:36751] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "acxW7a-REzOruNbiT9xdzwAAAEY"]
[Wed Apr 01 07:21:19.067769 2026] [:error] [pid 23715:tid 23782] [client 20.116.48.67:36700] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "acxW76-REzOruNbiT9xd1gAAAFU"]
[Wed Apr 01 07:21:20.505042 2026] [:error] [pid 23819:tid 23837] [client 20.116.48.67:36756] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "acxW8NdfUS_37wFAM77t5wAAAM8"]
[Wed Apr 01 07:21:21.930399 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:36831] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acxW8UHxDDU2ETcG9DTmngAAAAs"]
[Wed Apr 01 07:21:23.356266 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:36848] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acxW80HxDDU2ETcG9DTmoAAAAAk"]
[Wed Apr 01 07:21:24.789982 2026] [:error] [pid 23716:tid 23796] [client 20.116.48.67:36835] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acxW9HVtFUg_mx-RYb5t7gAAAIg"]
[Wed Apr 01 07:21:26.207786 2026] [:error] [pid 23716:tid 23806] [client 20.116.48.67:36742] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "acxW9nVtFUg_mx-RYb5t8QAAAJI"]
[Wed Apr 01 07:21:31.343513 2026] [:error] [pid 24346:tid 24371] [client 20.116.48.67:36861] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acxW-7c1l8kg9MhGHIKTjwAAAVM"]
[Wed Apr 01 07:21:32.786093 2026] [:error] [pid 24346:tid 24374] [client 20.116.48.67:36759] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "acxW_Lc1l8kg9MhGHIKTkgAAAVY"]
[Wed Apr 01 07:21:34.214049 2026] [:error] [pid 23715:tid 23764] [client 20.116.48.67:36813] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acxW_q-REzOruNbiT9xd2gAAAEM"]
[Wed Apr 01 07:21:41.306902 2026] [autoindex:error] [pid 23714:tid 23755] [client 20.116.48.67:36686] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 01 07:21:42.605429 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:36686] [client 20.116.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.48.67, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acxXBkHxDDU2ETcG9DTmyAAAAAw"]
[Wed Apr 01 07:21:45.863542 2026] [:error] [pid 23714:tid 23752] [client 20.116.48.67:36686] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "acxXCUHxDDU2ETcG9DTmzAAAABI"]
[Wed Apr 01 07:21:49.271623 2026] [:error] [pid 23714:tid 23744] [client 20.116.48.67:36770] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acxXDUHxDDU2ETcG9DTmzwAAAAo"]
[Wed Apr 01 07:21:50.701971 2026] [:error] [pid 23716:tid 23808] [client 20.116.48.67:36822] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "acxXDnVtFUg_mx-RYb5uAAAAAJQ"]
[Wed Apr 01 07:21:52.133821 2026] [:error] [pid 23715:tid 23779] [client 20.116.48.67:36820] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acxXEK-REzOruNbiT9xd8QAAAFI"]
[Wed Apr 01 07:21:53.570779 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:36681] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acxXEUHxDDU2ETcG9DTm2gAAAAU"]
[Wed Apr 01 07:21:55.029261 2026] [:error] [pid 24348:tid 24379] [client 20.116.48.67:36790] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acxXE20Vs69Y5nF1HA_ljgAAAYA"]
[Wed Apr 01 07:21:56.448641 2026] [:error] [pid 23714:tid 23738] [client 20.116.48.67:36782] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acxXFEHxDDU2ETcG9DTm3wAAAAQ"]
[Wed Apr 01 07:21:57.864335 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:36719] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acxXFUHxDDU2ETcG9DTm4QAAAAs"]
[Wed Apr 01 07:21:59.283580 2026] [:error] [pid 23715:tid 23779] [client 20.116.48.67:36757] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acxXF6-REzOruNbiT9xd-gAAAFI"]
[Wed Apr 01 07:22:00.701929 2026] [:error] [pid 23819:tid 23825] [client 20.116.48.67:36672] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acxXGNdfUS_37wFAM77t_gAAAMM"]
[Wed Apr 01 07:22:02.160208 2026] [:error] [pid 24348:tid 24385] [client 20.116.48.67:36699] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acxXGm0Vs69Y5nF1HA_llAAAAYY"]
[Wed Apr 01 07:22:03.592453 2026] [:error] [pid 23819:tid 23843] [client 20.116.48.67:36720] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acxXG9dfUS_37wFAM77t_wAAANU"]
[Wed Apr 01 07:22:05.017834 2026] [:error] [pid 24314:tid 24342] [client 20.116.48.67:36797] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acxXHZRF3FCzjmMUX5bsygAAARg"]
[Wed Apr 01 07:22:06.442870 2026] [:error] [pid 23819:tid 23832] [client 20.116.48.67:36705] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acxXHtdfUS_37wFAM77uBQAAAMo"]
[Wed Apr 01 07:22:07.878221 2026] [:error] [pid 23716:tid 23803] [client 20.116.48.67:36697] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/images/wp-login.php"] [unique_id "acxXH3VtFUg_mx-RYb5uCQAAAI8"]
[Wed Apr 01 07:22:09.309949 2026] [:error] [pid 24348:tid 24395] [client 20.116.48.67:36765] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/images/wp-login.php"] [unique_id "acxXIW0Vs69Y5nF1HA_llwAAAZA"]
[Wed Apr 01 07:22:10.816910 2026] [:error] [pid 24346:tid 24362] [client 20.116.48.67:36730] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/images/wp-login.php"] [unique_id "acxXIrc1l8kg9MhGHIKTpwAAAUo"]
[Wed Apr 01 07:22:12.232205 2026] [:error] [pid 24348:tid 24398] [client 20.116.48.67:36776] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/images/wp-login.php"] [unique_id "acxXJG0Vs69Y5nF1HA_lnAAAAZM"]
[Wed Apr 01 07:22:13.677969 2026] [:error] [pid 23714:tid 23755] [client 20.116.48.67:36735] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/xp.php"] [unique_id "acxXJUHxDDU2ETcG9DTm8QAAABU"]
[Wed Apr 01 07:22:15.106005 2026] [:error] [pid 23715:tid 23782] [client 20.116.48.67:36824] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/xp.php"] [unique_id "acxXJ6-REzOruNbiT9xeBgAAAFU"]
[Wed Apr 01 07:22:16.551839 2026] [:error] [pid 23715:tid 23774] [client 20.116.48.67:36814] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/xp.php"] [unique_id "acxXKK-REzOruNbiT9xeCQAAAE0"]
[Wed Apr 01 07:22:17.987129 2026] [:error] [pid 23715:tid 23771] [client 20.116.48.67:36764] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/xp.php"] [unique_id "acxXKa-REzOruNbiT9xeFgAAAEo"]
[Wed Apr 01 07:22:19.414874 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:36834] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/themes.php"] [unique_id "acxXK0HxDDU2ETcG9DTm9QAAAAs"]
[Wed Apr 01 07:22:20.844644 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:36784] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "acxXLEHxDDU2ETcG9DTm-gAAABM"]
[Wed Apr 01 07:22:22.284354 2026] [:error] [pid 24314:tid 24335] [client 20.116.48.67:36744] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "acxXLpRF3FCzjmMUX5bs0gAAARE"]
[Wed Apr 01 07:22:23.709058 2026] [:error] [pid 24314:tid 24318] [client 20.116.48.67:36796] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "acxXL5RF3FCzjmMUX5bs1AAAAQA"]
[Wed Apr 01 07:22:25.157443 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:36767] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "acxXMUHxDDU2ETcG9DTm_QAAAAw"]
[Wed Apr 01 07:22:26.586822 2026] [:error] [pid 23714:tid 23748] [client 20.116.48.67:36679] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acxXMkHxDDU2ETcG9DTnAgAAAA4"]
[Wed Apr 01 07:22:28.039700 2026] [:error] [pid 24314:tid 24331] [client 20.116.48.67:36706] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acxXNJRF3FCzjmMUX5bs2wAAAQ0"]
[Wed Apr 01 07:22:29.477944 2026] [:error] [pid 23819:tid 23834] [client 20.116.48.67:36808] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acxXNddfUS_37wFAM77uDgAAAMw"]
[Wed Apr 01 07:23:39.117504 2026] [:error] [pid 24346:tid 24363] [client 20.116.48.67:36843] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "acxXe7c1l8kg9MhGHIKUPAAAAUs"]
[Wed Apr 01 07:23:40.652148 2026] [:error] [pid 23715:tid 23778] [client 20.116.48.67:36838] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "acxXfK-REzOruNbiT9xfIQAAAFE"]
[Wed Apr 01 07:23:43.428824 2026] [:error] [pid 23715:tid 23768] [client 20.116.48.67:36768] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acxXf6-REzOruNbiT9xfMAAAAEc"]
[Wed Apr 01 07:23:51.197356 2026] [:error] [pid 24346:tid 24376] [client 20.116.48.67:36773] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "acxXh7c1l8kg9MhGHIKUaQAAAVg"]
[Wed Apr 01 07:23:56.943712 2026] [:error] [pid 23714:tid 23750] [client 20.116.48.67:36748] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acxXjEHxDDU2ETcG9DTnvAAAABA"]
[Wed Apr 01 07:23:59.649606 2026] [:error] [pid 23715:tid 23782] [client 20.116.48.67:36837] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "acxXj6-REzOruNbiT9xfXAAAAFU"]
[Wed Apr 01 07:24:02.338706 2026] [:error] [pid 23714:tid 23741] [client 20.116.48.67:36707] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "acxXkkHxDDU2ETcG9DTnxQAAAAc"]
[Wed Apr 01 07:24:03.765570 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:36855] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/file.php"] [unique_id "acxXk0HxDDU2ETcG9DTnyAAAABM"]
[Wed Apr 01 07:24:05.205749 2026] [:error] [pid 23715:tid 23780] [client 20.116.48.67:36755] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/file.php"] [unique_id "acxXla-REzOruNbiT9xfagAAAFM"]
[Wed Apr 01 07:24:06.632415 2026] [:error] [pid 24314:tid 24320] [client 20.116.48.67:36806] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/file.php"] [unique_id "acxXlpRF3FCzjmMUX5btGAAAAQI"]
[Wed Apr 01 07:24:08.089020 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:36839] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/file.php"] [unique_id "acxXmEHxDDU2ETcG9DTn9QAAAAk"]
[Wed Apr 01 07:24:09.518080 2026] [:error] [pid 23714:tid 23751] [client 20.116.48.67:36643] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acxXmUHxDDU2ETcG9DToCAAAABE"]
[Wed Apr 01 07:24:10.949317 2026] [:error] [pid 23715:tid 23764] [client 20.116.48.67:36857] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acxXmq-REzOruNbiT9xffQAAAEM"]
[Wed Apr 01 07:24:12.425881 2026] [:error] [pid 24314:tid 24335] [client 20.116.48.67:36728] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acxXnJRF3FCzjmMUX5btJwAAARE"]
[Wed Apr 01 07:24:13.863997 2026] [:error] [pid 24348:tid 24393] [client 20.116.48.67:36842] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acxXnW0Vs69Y5nF1HA_mYwAAAY4"]
[Wed Apr 01 07:24:15.299484 2026] [:error] [pid 24348:tid 24399] [client 20.116.48.67:36856] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acxXn20Vs69Y5nF1HA_maQAAAZQ"]
[Wed Apr 01 07:24:16.725852 2026] [:error] [pid 24314:tid 24326] [client 20.116.48.67:36786] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/packed.php"] [unique_id "acxXoJRF3FCzjmMUX5btKgAAAQg"]
[Wed Apr 01 07:24:18.156913 2026] [:error] [pid 23714:tid 23747] [client 20.116.48.67:36826] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/packed.php"] [unique_id "acxXokHxDDU2ETcG9DToEwAAAA0"]
[Wed Apr 01 07:24:19.580720 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:36840] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/packed.php"] [unique_id "acxXo0HxDDU2ETcG9DToFwAAAAg"]
[Wed Apr 01 07:24:21.101901 2026] [:error] [pid 23714:tid 23736] [client 20.116.48.67:36691] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/user.php"] [unique_id "acxXpUHxDDU2ETcG9DToGwAAAAI"]
[Wed Apr 01 07:24:22.529108 2026] [:error] [pid 23716:tid 23792] [client 20.116.48.67:36714] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/user.php"] [unique_id "acxXpnVtFUg_mx-RYb5uUwAAAIQ"]
[Wed Apr 01 07:24:23.964960 2026] [:error] [pid 24346:tid 24357] [client 20.116.48.67:36721] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/user.php"] [unique_id "acxXp7c1l8kg9MhGHIKUggAAAUU"]
[Wed Apr 01 07:24:25.403450 2026] [:error] [pid 23716:tid 23788] [client 20.116.48.67:36852] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/user.php"] [unique_id "acxXqXVtFUg_mx-RYb5uVQAAAIA"]
[Wed Apr 01 07:24:26.939795 2026] [:error] [pid 23714:tid 23752] [client 20.116.48.67:36738] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "acxXqkHxDDU2ETcG9DToKQAAABI"]
[Wed Apr 01 07:24:28.379147 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:36739] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "acxXrEHxDDU2ETcG9DToMQAAAAs"]
[Wed Apr 01 07:24:30.060687 2026] [:error] [pid 23716:tid 23798] [client 20.116.48.67:36841] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "acxXrnVtFUg_mx-RYb5uXQAAAIo"]
[Wed Apr 01 07:24:31.486748 2026] [:error] [pid 23714:tid 23757] [client 20.116.48.67:36585] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "acxXr0HxDDU2ETcG9DToQAAAABc"]
[Wed Apr 01 07:24:32.953343 2026] [:error] [pid 24348:tid 24388] [client 20.116.48.67:36622] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "acxXsG0Vs69Y5nF1HA_mdQAAAYk"]
[Wed Apr 01 07:24:34.451979 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:36828] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "acxXskHxDDU2ETcG9DToSgAAABM"]
[Wed Apr 01 07:24:35.878338 2026] [:error] [pid 24314:tid 24335] [client 20.116.48.67:36785] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "acxXs5RF3FCzjmMUX5btPgAAARE"]
[Wed Apr 01 07:24:37.327649 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:36694] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "acxXtUHxDDU2ETcG9DToTgAAAAw"]
[Wed Apr 01 07:24:38.755086 2026] [:error] [pid 24346:tid 24356] [client 20.116.48.67:36620] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfile.php"] [unique_id "acxXtrc1l8kg9MhGHIKUhwAAAUQ"]
[Wed Apr 01 07:24:40.212553 2026] [:error] [pid 24348:tid 24387] [client 20.116.48.67:36684] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acxXuG0Vs69Y5nF1HA_mfQAAAYg"]
[Wed Apr 01 07:24:41.662729 2026] [:error] [pid 23714:tid 23750] [client 20.116.48.67:36847] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acxXuUHxDDU2ETcG9DToVwAAABA"]
[Wed Apr 01 07:24:43.096329 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:36617] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acxXu0HxDDU2ETcG9DToWwAAAAk"]
[Wed Apr 01 07:24:44.558001 2026] [:error] [pid 24346:tid 24372] [client 20.116.48.67:36792] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "acxXvLc1l8kg9MhGHIKUjAAAAVQ"]
[Wed Apr 01 07:24:45.999503 2026] [:error] [pid 23715:tid 23784] [client 20.116.48.67:36690] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "acxXva-REzOruNbiT9xflAAAAFc"]
[Wed Apr 01 07:24:47.441794 2026] [:error] [pid 23716:tid 23788] [client 20.116.48.67:36863] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "acxXv3VtFUg_mx-RYb5uZQAAAIA"]
[Wed Apr 01 07:24:48.878416 2026] [:error] [pid 23716:tid 23807] [client 20.116.48.67:36827] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "acxXwHVtFUg_mx-RYb5uZwAAAJM"]
[Wed Apr 01 07:24:50.315293 2026] [:error] [pid 24348:tid 24399] [client 20.116.48.67:36697] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sty.php"] [unique_id "acxXwm0Vs69Y5nF1HA_mjQAAAZQ"]
[Wed Apr 01 07:24:51.788414 2026] [:error] [pid 24348:tid 24389] [client 20.116.48.67:36812] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "acxXw20Vs69Y5nF1HA_mkgAAAYo"]
[Wed Apr 01 07:24:53.239060 2026] [:error] [pid 24346:tid 24367] [client 20.116.48.67:36619] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "acxXxbc1l8kg9MhGHIKUkQAAAU8"]
[Wed Apr 01 07:24:54.669472 2026] [:error] [pid 23714:tid 23736] [client 20.116.48.67:36752] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "acxXxkHxDDU2ETcG9DTofgAAAAI"]
[Wed Apr 01 07:24:56.228252 2026] [:error] [pid 23716:tid 23791] [client 20.116.48.67:36760] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxxx.php"] [unique_id "acxXyHVtFUg_mx-RYb5ucwAAAIM"]
[Wed Apr 01 07:24:58.211452 2026] [:error] [pid 23715:tid 23763] [client 20.116.48.67:36625] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h.php"] [unique_id "acxXyq-REzOruNbiT9xfpAAAAEI"]
[Wed Apr 01 07:24:59.693004 2026] [:error] [pid 24348:tid 24379] [client 20.116.48.67:36769] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h.php"] [unique_id "acxXy20Vs69Y5nF1HA_mnwAAAYA"]
[Wed Apr 01 07:25:11.780331 2026] [:error] [pid 24348:tid 24392] [client 20.116.48.67:36851] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "acxX120Vs69Y5nF1HA_muAAAAY0"]
[Wed Apr 01 07:25:13.254738 2026] [:error] [pid 23715:tid 23785] [client 20.116.48.67:36731] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "acxX2a-REzOruNbiT9xf4gAAAFg"]
[Wed Apr 01 07:25:14.742991 2026] [:error] [pid 23714:tid 23747] [client 20.116.48.67:36829] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "acxX2kHxDDU2ETcG9DTo9QAAAA0"]
[Wed Apr 01 07:25:16.258754 2026] [:error] [pid 23714:tid 23755] [client 20.116.48.67:36788] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fleen.php"] [unique_id "acxX3EHxDDU2ETcG9DTpAQAAABU"]
[Wed Apr 01 07:25:17.805497 2026] [:error] [pid 24348:tid 24379] [client 20.116.48.67:36821] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "acxX3W0Vs69Y5nF1HA_mxAAAAYA"]
[Wed Apr 01 07:25:19.817943 2026] [:error] [pid 24348:tid 24387] [client 20.116.48.67:36746] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "acxX320Vs69Y5nF1HA_myAAAAYg"]
[Wed Apr 01 07:25:21.622578 2026] [:error] [pid 23715:tid 23784] [client 20.116.48.67:36817] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "acxX4a-REzOruNbiT9xf8gAAAFc"]
[Wed Apr 01 07:25:23.077381 2026] [:error] [pid 24314:tid 24329] [client 20.116.48.67:36862] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tem.php"] [unique_id "acxX45RF3FCzjmMUX5btZAAAAQs"]
[Wed Apr 01 07:25:24.599439 2026] [:error] [pid 23714:tid 23740] [client 20.116.48.67:36860] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "acxX5EHxDDU2ETcG9DTpNQAAAAY"]
[Wed Apr 01 07:25:26.165353 2026] [:error] [pid 24348:tid 24389] [client 20.116.48.67:36836] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "acxX5m0Vs69Y5nF1HA_mzgAAAYo"]
[Wed Apr 01 07:25:27.653854 2026] [:error] [pid 24346:tid 24362] [client 20.116.48.67:36805] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "acxX57c1l8kg9MhGHIKUtwAAAUo"]
[Wed Apr 01 07:25:29.074828 2026] [:error] [pid 23714:tid 23757] [client 20.116.48.67:36745] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av6m.php"] [unique_id "acxX6UHxDDU2ETcG9DTpPgAAABc"]
[Wed Apr 01 07:25:30.521812 2026] [:error] [pid 23716:tid 23807] [client 20.116.48.67:36675] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "acxX6nVtFUg_mx-RYb5ujwAAAJM"]
[Wed Apr 01 07:25:31.977587 2026] [:error] [pid 23715:tid 23764] [client 20.116.48.67:36849] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "acxX66-REzOruNbiT9xgIwAAAEM"]
[Wed Apr 01 07:25:33.424285 2026] [:error] [pid 24348:tid 24383] [client 20.116.48.67:36819] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "acxX7W0Vs69Y5nF1HA_m0wAAAYQ"]
[Wed Apr 01 07:25:34.848246 2026] [:error] [pid 23715:tid 23768] [client 20.116.48.67:36709] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autogooey.php"] [unique_id "acxX7q-REzOruNbiT9xgLAAAAEc"]
[Wed Apr 01 07:25:36.301430 2026] [:error] [pid 23714:tid 23735] [client 20.116.48.67:36846] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "acxX8EHxDDU2ETcG9DTpTwAAAAE"]
[Wed Apr 01 07:25:37.756872 2026] [:error] [pid 23714:tid 23749] [client 20.116.48.67:36807] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "acxX8UHxDDU2ETcG9DTpUgAAAA8"]
[Wed Apr 01 07:25:39.198140 2026] [:error] [pid 24346:tid 24357] [client 20.116.48.67:36772] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "acxX87c1l8kg9MhGHIKUvAAAAUU"]
[Wed Apr 01 07:25:40.665342 2026] [:error] [pid 23715:tid 23770] [client 20.116.48.67:36823] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "acxX9K-REzOruNbiT9xgOgAAAEk"]
[Wed Apr 01 07:25:42.132881 2026] [:error] [pid 23819:tid 23829] [client 20.116.48.67:36795] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "acxX9tdfUS_37wFAM77u1wAAAMc"]
[Wed Apr 01 07:25:43.565452 2026] [:error] [pid 23716:tid 23800] [client 20.116.48.67:36741] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "acxX93VtFUg_mx-RYb5umAAAAIw"]
[Wed Apr 01 07:25:44.992976 2026] [:error] [pid 24346:tid 24371] [client 20.116.48.67:36800] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "acxX-Lc1l8kg9MhGHIKUxwAAAVM"]
[Wed Apr 01 07:25:46.431797 2026] [:error] [pid 23714:tid 23737] [client 20.116.48.67:36689] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "acxX-kHxDDU2ETcG9DTpWwAAAAM"]
[Wed Apr 01 07:25:47.877998 2026] [:error] [pid 24346:tid 24374] [client 20.116.48.67:36831] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "acxX-7c1l8kg9MhGHIKUywAAAVY"]
[Wed Apr 01 07:25:49.342713 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:36832] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "acxX_UHxDDU2ETcG9DTpYgAAAAs"]
[Wed Apr 01 07:25:50.812952 2026] [:error] [pid 23819:tid 23834] [client 20.116.48.67:36835] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "acxX_tdfUS_37wFAM77u4AAAAMw"]
[Wed Apr 01 07:25:52.247848 2026] [:error] [pid 23715:tid 23767] [client 20.116.48.67:36810] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "acxYAK-REzOruNbiT9xgQwAAAEY"]
[Wed Apr 01 07:25:53.674748 2026] [:error] [pid 23715:tid 23769] [client 20.116.48.67:36813] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "acxYAa-REzOruNbiT9xgSQAAAEg"]
[Wed Apr 01 07:25:55.098208 2026] [:error] [pid 24346:tid 24362] [client 20.116.48.67:36750] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "acxYA7c1l8kg9MhGHIKU0gAAAUo"]
[Wed Apr 01 07:25:56.526579 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:36692] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "acxYBEHxDDU2ETcG9DTpaAAAAAk"]
[Wed Apr 01 07:25:57.968542 2026] [:error] [pid 24346:tid 24366] [client 20.116.48.67:36736] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/agg.php"] [unique_id "acxYBbc1l8kg9MhGHIKU2AAAAU4"]
[Wed Apr 01 07:25:59.407203 2026] [:error] [pid 24314:tid 24320] [client 20.116.48.67:36753] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "acxYB5RF3FCzjmMUX5btfAAAAQI"]
[Wed Apr 01 07:26:00.851955 2026] [:error] [pid 23819:tid 23823] [client 20.116.48.67:36700] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "acxYCNdfUS_37wFAM77u7AAAAME"]
[Wed Apr 01 07:26:02.272932 2026] [:error] [pid 23716:tid 23802] [client 20.116.48.67:36809] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "acxYCnVtFUg_mx-RYb5uqgAAAI4"]
[Wed Apr 01 07:26:03.705483 2026] [:error] [pid 23714:tid 23744] [client 20.116.48.67:36783] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "acxYC0HxDDU2ETcG9DTpeQAAAAo"]
[Wed Apr 01 07:26:05.150948 2026] [:error] [pid 24348:tid 24381] [client 20.116.48.67:36859] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "acxYDW0Vs69Y5nF1HA_m7wAAAYI"]
[Wed Apr 01 07:26:06.582799 2026] [:error] [pid 23714:tid 23734] [client 20.116.48.67:36677] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "acxYDkHxDDU2ETcG9DTpggAAAAA"]
[Wed Apr 01 07:26:08.056191 2026] [:error] [pid 24346:tid 24359] [client 20.116.48.67:36801] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "acxYELc1l8kg9MhGHIKU6AAAAUc"]
[Wed Apr 01 07:26:09.508955 2026] [:error] [pid 24314:tid 24321] [client 20.116.48.67:36685] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsvvs.php"] [unique_id "acxYEZRF3FCzjmMUX5btggAAAQM"]
[Wed Apr 01 07:26:12.406383 2026] [:error] [pid 24346:tid 24361] [client 20.116.48.67:36756] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acxYFLc1l8kg9MhGHIKVAgAAAUk"]
[Wed Apr 01 07:26:13.895926 2026] [:error] [pid 24346:tid 24356] [client 20.116.48.67:36610] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acxYFbc1l8kg9MhGHIKVBAAAAUQ"]
[Wed Apr 01 07:26:15.334726 2026] [:error] [pid 24348:tid 24394] [client 20.116.48.67:36737] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acxYF20Vs69Y5nF1HA_m8AAAAY8"]
[Wed Apr 01 07:26:16.781885 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:36781] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "acxYGEHxDDU2ETcG9DTpmgAAAAw"]
[Wed Apr 01 07:26:18.215201 2026] [:error] [pid 24314:tid 24332] [client 20.116.48.67:36763] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acxYGpRF3FCzjmMUX5bthQAAAQ4"]
[Wed Apr 01 07:26:19.666726 2026] [:error] [pid 23715:tid 23781] [client 20.116.48.67:36673] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acxYG6-REzOruNbiT9xgcAAAAFQ"]
[Wed Apr 01 07:26:21.107940 2026] [:error] [pid 23715:tid 23779] [client 20.116.48.67:36853] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acxYHa-REzOruNbiT9xgdgAAAFI"]
[Wed Apr 01 07:26:22.542341 2026] [:error] [pid 23715:tid 23778] [client 20.116.48.67:36848] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "acxYHq-REzOruNbiT9xgewAAAFE"]
[Wed Apr 01 07:26:23.966816 2026] [:error] [pid 24314:tid 24335] [client 20.116.48.67:36790] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "acxYH5RF3FCzjmMUX5btjAAAARE"]
[Wed Apr 01 07:26:25.406106 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:36758] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "acxYIUHxDDU2ETcG9DTppgAAABM"]
[Wed Apr 01 07:26:26.837794 2026] [:error] [pid 24346:tid 24358] [client 20.116.48.67:36802] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "acxYIrc1l8kg9MhGHIKVDAAAAUY"]
[Wed Apr 01 07:26:28.280213 2026] [:error] [pid 24348:tid 24391] [client 20.116.48.67:36687] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "acxYJG0Vs69Y5nF1HA_m8gAAAYw"]
[Wed Apr 01 07:26:29.719047 2026] [:error] [pid 24314:tid 24331] [client 20.116.48.67:36798] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acxYJZRF3FCzjmMUX5btkwAAAQ0"]
[Wed Apr 01 07:26:31.159555 2026] [:error] [pid 24346:tid 24356] [client 20.116.48.67:36693] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acxYJ7c1l8kg9MhGHIKVDwAAAUQ"]
[Wed Apr 01 07:26:32.582562 2026] [:error] [pid 23714:tid 23735] [client 20.116.48.67:36771] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acxYKEHxDDU2ETcG9DTpugAAAAE"]
[Wed Apr 01 07:26:34.016934 2026] [:error] [pid 24314:tid 24319] [client 20.116.48.67:36751] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "acxYKpRF3FCzjmMUX5btlQAAAQE"]
[Wed Apr 01 07:26:35.456537 2026] [:error] [pid 24348:tid 24391] [client 20.116.48.67:36757] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acxYK20Vs69Y5nF1HA_nAQAAAYw"]
[Wed Apr 01 07:26:36.924990 2026] [:error] [pid 23715:tid 23767] [client 20.116.48.67:36704] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acxYLK-REzOruNbiT9xgjAAAAEY"]
[Wed Apr 01 07:26:38.358397 2026] [:error] [pid 24314:tid 24323] [client 20.116.48.67:36778] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acxYLpRF3FCzjmMUX5btnAAAAQU"]
[Wed Apr 01 07:26:39.815394 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:36814] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acxYL0HxDDU2ETcG9DTpyQAAAAg"]
[Wed Apr 01 07:26:41.283454 2026] [:error] [pid 24346:tid 24367] [client 20.116.48.67:36796] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "acxYMbc1l8kg9MhGHIKVEgAAAU8"]
[Wed Apr 01 07:26:42.710162 2026] [:error] [pid 23715:tid 23762] [client 20.116.48.67:36747] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "acxYMq-REzOruNbiT9xgmwAAAEE"]
[Wed Apr 01 07:26:44.155045 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:36830] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "acxYNEHxDDU2ETcG9DTp1QAAAAk"]
[Wed Apr 01 07:26:45.614940 2026] [:error] [pid 23715:tid 23774] [client 20.116.48.67:36683] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "acxYNa-REzOruNbiT9xgnwAAAE0"]
[Wed Apr 01 07:26:47.071747 2026] [:error] [pid 23714:tid 23734] [client 20.116.48.67:36770] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "acxYN0HxDDU2ETcG9DTp3QAAAAA"]
[Wed Apr 01 07:26:48.500989 2026] [:error] [pid 23714:tid 23738] [client 20.116.48.67:36782] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acxYOEHxDDU2ETcG9DTp5AAAAAQ"]
[Wed Apr 01 07:26:48.926566 2026] [:error] [pid 23714:tid 23734] [client 20.116.48.67:36683] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acxYOEHxDDU2ETcG9DTp6AAAAAA"]
[Wed Apr 01 07:26:50.343935 2026] [:error] [pid 24348:tid 24387] [client 20.116.48.67:36844] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acxYOm0Vs69Y5nF1HA_nEAAAAYg"]
[Wed Apr 01 07:26:51.786959 2026] [:error] [pid 23819:tid 23835] [client 20.116.48.67:36815] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acxYO9dfUS_37wFAM77u-gAAAM0"]
[Wed Apr 01 07:26:53.212123 2026] [:error] [pid 23715:tid 23785] [client 20.116.48.67:36808] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "acxYPa-REzOruNbiT9xgoQAAAFg"]
[Wed Apr 01 07:26:54.666559 2026] [:error] [pid 23714:tid 23741] [client 20.116.48.67:36749] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "acxYPkHxDDU2ETcG9DTp-wAAAAc"]
[Wed Apr 01 07:26:56.098865 2026] [:error] [pid 24348:tid 24388] [client 20.116.48.67:36722] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "acxYQG0Vs69Y5nF1HA_nGAAAAYk"]
[Wed Apr 01 07:26:57.522659 2026] [:error] [pid 23715:tid 23764] [client 20.116.48.67:36640] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "acxYQa-REzOruNbiT9xgrQAAAEM"]
[Wed Apr 01 07:26:58.971635 2026] [:error] [pid 24314:tid 24341] [client 20.116.48.67:36688] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "acxYQpRF3FCzjmMUX5btnwAAARc"]
[Wed Apr 01 07:27:00.404917 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:36766] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "acxYREHxDDU2ETcG9DTqBQAAAAs"]
[Wed Apr 01 07:27:01.856882 2026] [:error] [pid 23715:tid 23777] [client 20.116.48.67:36854] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "acxYRa-REzOruNbiT9xgvAAAAFA"]
[Wed Apr 01 07:27:03.290601 2026] [:error] [pid 23819:tid 23844] [client 20.116.48.67:36742] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/css/index.php"] [unique_id "acxYR9dfUS_37wFAM77u_QAAANY"]
[Wed Apr 01 11:32:27.463391 2026] [:error] [pid 23714:tid 23741] [client 147.135.253.47:56718] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "acyRy0HxDDU2ETcG9DSntwAAAAc"]
[Wed Apr 01 11:32:29.780164 2026] [:error] [pid 23716:tid 23803] [client 147.135.253.47:42378] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "acyRzXVtFUg_mx-RYb7eOQAAAI8"]
[Wed Apr 01 11:32:32.311226 2026] [:error] [pid 24348:tid 24384] [client 147.135.253.47:42394] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "acyR0G0Vs69Y5nF1HA9JSQAAAYU"]
[Wed Apr 01 11:32:34.703271 2026] [:error] [pid 24348:tid 24386] [client 147.135.253.47:54108] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "acyR0m0Vs69Y5nF1HA9JWAAAAYc"]
[Wed Apr 01 11:32:37.236864 2026] [:error] [pid 24346:tid 24371] [client 147.135.253.47:54116] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "acyR1bc1l8kg9MhGHILP7gAAAVM"]
[Wed Apr 01 11:32:39.636792 2026] [:error] [pid 24348:tid 24382] [client 147.135.253.47:54122] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "acyR120Vs69Y5nF1HA9JbwAAAYM"]
[Wed Apr 01 11:32:42.036530 2026] [:error] [pid 23714:tid 23750] [client 147.135.253.47:54126] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "acyR2kHxDDU2ETcG9DSn2AAAABA"]
[Wed Apr 01 11:32:44.279818 2026] [:error] [pid 24314:tid 24342] [client 147.135.253.47:52090] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "acyR3JRF3FCzjmMUX5YfvAAAARg"]
[Wed Apr 01 11:32:46.670452 2026] [:error] [pid 24314:tid 24331] [client 147.135.253.47:52102] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "acyR3pRF3FCzjmMUX5YfwAAAAQ0"]
[Wed Apr 01 11:32:49.079702 2026] [:error] [pid 24346:tid 24362] [client 147.135.253.47:52106] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "acyR4bc1l8kg9MhGHILQEAAAAUo"]
[Wed Apr 01 11:32:51.644339 2026] [:error] [pid 24348:tid 24383] [client 147.135.253.47:52110] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "acyR420Vs69Y5nF1HA9JegAAAYQ"]
[Wed Apr 01 11:32:54.024759 2026] [:error] [pid 24346:tid 24368] [client 147.135.253.47:33078] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "acyR5rc1l8kg9MhGHILQHQAAAVA"]
[Wed Apr 01 11:32:56.559814 2026] [:error] [pid 24314:tid 24322] [client 147.135.253.47:33082] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "acyR6JRF3FCzjmMUX5Yf1AAAAQQ"]
[Wed Apr 01 11:32:58.955869 2026] [:error] [pid 23716:tid 23803] [client 147.135.253.47:33092] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "acyR6nVtFUg_mx-RYb7eagAAAI8"]
[Wed Apr 01 11:33:01.493512 2026] [:error] [pid 23715:tid 23763] [client 147.135.253.47:33100] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "acyR7a-REzOruNbiT9y0mAAAAEI"]
[Wed Apr 01 11:33:03.867204 2026] [:error] [pid 24348:tid 24388] [client 147.135.253.47:35146] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "acyR720Vs69Y5nF1HA9JkAAAAYk"]
[Wed Apr 01 11:33:06.419881 2026] [:error] [pid 23716:tid 23811] [client 147.135.253.47:35154] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "acyR8nVtFUg_mx-RYb7efgAAAJc"]
[Wed Apr 01 11:33:08.807515 2026] [:error] [pid 23715:tid 23775] [client 147.135.253.47:35168] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "acyR9K-REzOruNbiT9y0pAAAAE4"]
[Wed Apr 01 11:33:11.355848 2026] [:error] [pid 23819:tid 23833] [client 147.135.253.47:35172] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "acyR99dfUS_37wFAM74zowAAAMs"]
[Wed Apr 01 11:33:13.903779 2026] [:error] [pid 23716:tid 23809] [client 147.135.253.47:54340] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "acyR-XVtFUg_mx-RYb7enwAAAJU"]
[Wed Apr 01 11:33:16.261146 2026] [:error] [pid 24348:tid 24381] [client 147.135.253.47:54354] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "acyR_G0Vs69Y5nF1HA9JogAAAYI"]
[Wed Apr 01 11:33:18.792951 2026] [:error] [pid 24346:tid 24376] [client 147.135.253.47:54368] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "acyR_rc1l8kg9MhGHILQMQAAAVg"]
[Wed Apr 01 11:33:21.316751 2026] [:error] [pid 23716:tid 23794] [client 147.135.253.47:54374] [client 147.135.253.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "acySAXVtFUg_mx-RYb7eqwAAAIY"]
[Wed Apr 01 11:39:17.802560 2026] [:error] [pid 23716:tid 23805] [client 182.40.104.255:60442] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "acyTZXVtFUg_mx-RYb7hlwAAAJE"]
[Wed Apr 01 12:58:12.959781 2026] [:error] [pid 36753:tid 36805] [client 45.61.188.43:53613] [client 45.61.188.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acyl5HlB4jUXc8OYIipkawAAAtI"]
[Wed Apr 01 12:58:14.173569 2026] [:error] [pid 36753:tid 36791] [client 45.61.188.43:53613] [client 45.61.188.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "acyl5nlB4jUXc8OYIipkbAAAAsQ"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Wed Apr 01 16:10:47.109045 2026] [:error] [pid 8908:tid 8937] [client 43.159.128.155:45236] [client 43.159.128.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aczTB_kmxtJXGnLdvgD57QAAAJg"]
[Wed Apr 01 17:54:29.650950 2026] [:error] [pid 8909:tid 8943] [client 106.119.167.146:41268] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aczrVTvP_a0662gDl6AhzAAAAMI"]
[Wed Apr 01 21:34:24.470718 2026] [:error] [pid 8995:tid 9004] [client 145.239.69.40:38036] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ac0e4OonaBjs3qxcRefSTwAAAAY"]
[Wed Apr 01 21:34:26.840248 2026] [:error] [pid 8910:tid 8990] [client 145.239.69.40:48192] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ac0e4qJZINUcF3tYgExo8gAAARY"]
[Wed Apr 01 21:34:29.215393 2026] [:error] [pid 62559:tid 62572] [client 145.239.69.40:48194] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ac0e5S7NKI8IaNKZFIepWQAAAUs"]
[Wed Apr 01 21:34:31.640005 2026] [:error] [pid 17856:tid 17877] [client 145.239.69.40:46624] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ac0e5z7Idlm5j9frhqRGMAAAAFM"]
[Wed Apr 01 21:34:34.068632 2026] [:error] [pid 62559:tid 62564] [client 145.239.69.40:46632] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ac0e6i7NKI8IaNKZFIepYAAAAUM"]
[Wed Apr 01 21:34:36.317662 2026] [:error] [pid 8908:tid 8918] [client 145.239.69.40:46646] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ac0e7PkmxtJXGnLdvgCW7AAAAIU"]
[Wed Apr 01 21:34:38.755841 2026] [:error] [pid 8995:tid 9020] [client 145.239.69.40:46652] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ac0e7uonaBjs3qxcRefSYAAAABY"]
[Wed Apr 01 21:34:41.178513 2026] [:error] [pid 17856:tid 17866] [client 145.239.69.40:58460] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ac0e8T7Idlm5j9frhqRGQQAAAEg"]
[Wed Apr 01 21:34:43.576548 2026] [:error] [pid 17856:tid 17877] [client 145.239.69.40:58474] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ac0e8z7Idlm5j9frhqRGRgAAAFM"]
[Wed Apr 01 21:34:45.866283 2026] [:error] [pid 8910:tid 8985] [client 145.239.69.40:58482] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ac0e9aJZINUcF3tYgExo-wAAARE"]
[Wed Apr 01 21:34:48.314009 2026] [:error] [pid 62559:tid 62581] [client 145.239.69.40:58494] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ac0e-C7NKI8IaNKZFIepeQAAAVQ"]
[Wed Apr 01 21:34:50.741521 2026] [:error] [pid 17856:tid 17866] [client 145.239.69.40:45262] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ac0e-j7Idlm5j9frhqRGeAAAAEg"]
[Wed Apr 01 21:34:53.178464 2026] [:error] [pid 8908:tid 8914] [client 145.239.69.40:45274] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ac0e_fkmxtJXGnLdvgCXCQAAAIE"]
[Wed Apr 01 21:34:55.735025 2026] [:error] [pid 8908:tid 8930] [client 145.239.69.40:45278] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ac0e__kmxtJXGnLdvgCXDAAAAJE"]
[Wed Apr 01 21:34:58.266033 2026] [:error] [pid 17856:tid 17862] [client 145.239.69.40:45288] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ac0fAj7Idlm5j9frhqRGowAAAEQ"]
[Wed Apr 01 21:35:00.659782 2026] [:error] [pid 8995:tid 9015] [client 145.239.69.40:45058] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ac0fBOonaBjs3qxcRefSbQAAABE"]
[Wed Apr 01 21:35:03.048433 2026] [:error] [pid 17856:tid 17882] [client 145.239.69.40:45062] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "ac0fBz7Idlm5j9frhqRGuQAAAFg"]
[Wed Apr 01 21:35:05.437464 2026] [:error] [pid 8908:tid 8937] [client 145.239.69.40:45068] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "ac0fCfkmxtJXGnLdvgCXFAAAAJg"]
[Wed Apr 01 21:35:07.858367 2026] [:error] [pid 17856:tid 17871] [client 145.239.69.40:45076] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "ac0fCz7Idlm5j9frhqRG5wAAAE0"]
[Wed Apr 01 21:35:10.275377 2026] [:error] [pid 62559:tid 62583] [client 145.239.69.40:58304] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "ac0fDi7NKI8IaNKZFIepiQAAAVY"]
[Wed Apr 01 21:35:12.674676 2026] [:error] [pid 62559:tid 62582] [client 145.239.69.40:58312] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ac0fEC7NKI8IaNKZFIepjAAAAVU"]
[Wed Apr 01 21:35:15.233381 2026] [:error] [pid 8909:tid 8943] [client 145.239.69.40:58318] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ac0fEzvP_a0662gDl6DeBwAAAMI"]
[Wed Apr 01 21:35:17.622279 2026] [:error] [pid 62559:tid 62574] [client 145.239.69.40:58334] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ac0fFS7NKI8IaNKZFIepkgAAAU0"]
[Wed Apr 01 21:35:20.141398 2026] [:error] [pid 8995:tid 8998] [client 145.239.69.40:47936] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ac0fGOonaBjs3qxcRefSdgAAAAA"]
[Wed Apr 01 21:35:51.003721 2026] [:error] [pid 8995:tid 9004] [client 145.239.69.40:47948] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ac0fN-onaBjs3qxcRefSpwAAAAY"]
[Wed Apr 01 21:35:53.306819 2026] [:error] [pid 8995:tid 9007] [client 145.239.69.40:49524] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ac0fOeonaBjs3qxcRefSrAAAAAk"]
[Wed Apr 01 21:35:55.797506 2026] [:error] [pid 8910:tid 8970] [client 145.239.69.40:49540] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ac0fO6JZINUcF3tYgExpPgAAAQI"]
[Wed Apr 01 21:35:58.144583 2026] [:error] [pid 62559:tid 62562] [client 145.239.69.40:49550] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ac0fPi7NKI8IaNKZFIepzQAAAUE"]
[Wed Apr 01 21:36:00.659529 2026] [:error] [pid 8995:tid 9006] [client 145.239.69.40:49364] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ac0fQOonaBjs3qxcRefSsgAAAAg"]
[Wed Apr 01 21:36:03.147558 2026] [:error] [pid 17856:tid 17876] [client 145.239.69.40:49366] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ac0fQz7Idlm5j9frhqRHiAAAAFI"]
[Wed Apr 01 21:36:05.641189 2026] [:error] [pid 8995:tid 9016] [client 145.239.69.40:49370] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ac0fReonaBjs3qxcRefSvQAAABI"]
[Wed Apr 01 21:36:08.136493 2026] [:error] [pid 8908:tid 8929] [client 145.239.69.40:49376] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ac0fSPkmxtJXGnLdvgCXUQAAAJA"]
[Wed Apr 01 21:36:10.633567 2026] [:error] [pid 8908:tid 8935] [client 145.239.69.40:50104] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ac0fSvkmxtJXGnLdvgCXWQAAAJY"]
[Wed Apr 01 21:36:12.964350 2026] [:error] [pid 8909:tid 8963] [client 145.239.69.40:50120] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ac0fTDvP_a0662gDl6DehgAAANY"]
[Wed Apr 01 21:36:15.440586 2026] [:error] [pid 8909:tid 8962] [client 145.239.69.40:50126] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ac0fTzvP_a0662gDl6DekAAAANU"]
[Wed Apr 01 21:46:02.228854 2026] [:error] [pid 8909:tid 8946] [client 3.107.57.56:42170] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "ac0hmjvP_a0662gDl6DiJQAAAMU"]
[Wed Apr 01 21:46:02.287500 2026] [:error] [pid 8909:tid 8950] [client 3.107.57.56:42226] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "ac0hmjvP_a0662gDl6DiJgAAAMk"]
[Wed Apr 01 21:46:02.343712 2026] [:error] [pid 8910:tid 8979] [client 3.107.57.56:42228] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "ac0hmqJZINUcF3tYgExrZAAAAQs"]
[Wed Apr 01 21:46:03.996016 2026] [:error] [pid 8909:tid 8947] [client 3.107.57.56:42310] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "ac0hmzvP_a0662gDl6DiPQAAAMY"]
[Wed Apr 01 21:46:04.053921 2026] [:error] [pid 62559:tid 62563] [client 3.107.57.56:42316] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.test"] [unique_id "ac0hnC7NKI8IaNKZFIestgAAAUI"]
[Wed Apr 01 21:46:04.116074 2026] [:error] [pid 8909:tid 8959] [client 3.107.57.56:42322] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.remote"] [unique_id "ac0hnDvP_a0662gDl6DiPgAAANI"]
[Wed Apr 01 21:46:04.175597 2026] [:error] [pid 8908:tid 8937] [client 3.107.57.56:42330] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "ac0hnPkmxtJXGnLdvgCbAgAAAJg"]
[Wed Apr 01 21:46:04.235072 2026] [:error] [pid 8908:tid 8915] [client 3.107.57.56:42338] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "ac0hnPkmxtJXGnLdvgCbBAAAAII"]
[Wed Apr 01 21:46:04.294102 2026] [:error] [pid 8910:tid 8974] [client 3.107.57.56:42344] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "ac0hnKJZINUcF3tYgExrbwAAAQY"]
[Wed Apr 01 21:46:04.352570 2026] [:error] [pid 8908:tid 8933] [client 3.107.57.56:42352] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.old"] [unique_id "ac0hnPkmxtJXGnLdvgCbCAAAAJQ"]
[Wed Apr 01 21:46:04.408293 2026] [:error] [pid 62559:tid 62569] [client 3.107.57.56:42358] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.sample"] [unique_id "ac0hnC7NKI8IaNKZFIesvgAAAUg"]
[Wed Apr 01 21:46:04.463680 2026] [:error] [pid 62559:tid 62582] [client 3.107.57.56:42364] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/vendor/.env"] [unique_id "ac0hnC7NKI8IaNKZFIeswgAAAVU"]
[Wed Apr 01 21:46:04.523554 2026] [:error] [pid 62559:tid 62585] [client 3.107.57.56:42368] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/lib/.env"] [unique_id "ac0hnC7NKI8IaNKZFIeswwAAAVg"]
[Wed Apr 01 21:46:04.584048 2026] [:error] [pid 62559:tid 62583] [client 3.107.57.56:42376] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/lab/.env"] [unique_id "ac0hnC7NKI8IaNKZFIesxwAAAVY"]
[Wed Apr 01 21:46:04.642749 2026] [:error] [pid 62559:tid 62568] [client 3.107.57.56:42386] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/cronlab/.env"] [unique_id "ac0hnC7NKI8IaNKZFIesyAAAAUc"]
[Wed Apr 01 21:46:04.697061 2026] [:error] [pid 8909:tid 8949] [client 3.107.57.56:42392] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/cron/.env"] [unique_id "ac0hnDvP_a0662gDl6DiQQAAAMg"]
[Wed Apr 01 21:46:04.753318 2026] [:error] [pid 8908:tid 8928] [client 3.107.57.56:42398] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/core/.env"] [unique_id "ac0hnPkmxtJXGnLdvgCbCwAAAI8"]
[Wed Apr 01 21:46:04.807511 2026] [:error] [pid 17856:tid 17874] [client 3.107.57.56:42402] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/core/app/.env"] [unique_id "ac0hnD7Idlm5j9frhqROBAAAAFA"]
[Wed Apr 01 21:46:04.864190 2026] [:error] [pid 8909:tid 8953] [client 3.107.57.56:42410] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/core/Datavase/.env"] [unique_id "ac0hnDvP_a0662gDl6DiQgAAAMw"]
[Wed Apr 01 21:46:04.916772 2026] [:error] [pid 8909:tid 8955] [client 3.107.57.56:42420] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/database/.env"] [unique_id "ac0hnDvP_a0662gDl6DiRQAAAM4"]
[Wed Apr 01 21:46:04.969342 2026] [:error] [pid 8909:tid 8952] [client 3.107.57.56:42428] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/config/.env"] [unique_id "ac0hnDvP_a0662gDl6DiRwAAAMs"]
[Wed Apr 01 21:46:05.025357 2026] [:error] [pid 8909:tid 8961] [client 3.107.57.56:42434] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/assets/.env"] [unique_id "ac0hnTvP_a0662gDl6DiSQAAANQ"]
[Wed Apr 01 21:46:05.080949 2026] [:error] [pid 8909:tid 8942] [client 3.107.57.56:42444] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "ac0hnTvP_a0662gDl6DiSwAAAME"]
[Wed Apr 01 21:46:05.137281 2026] [:error] [pid 8909:tid 8960] [client 3.107.57.56:42450] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/apps/.env"] [unique_id "ac0hnTvP_a0662gDl6DiTAAAANM"]
[Wed Apr 01 21:46:05.194312 2026] [:error] [pid 8909:tid 8944] [client 3.107.57.56:42456] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/uploads/.env"] [unique_id "ac0hnTvP_a0662gDl6DiTQAAAMM"]
[Wed Apr 01 21:46:05.249491 2026] [:error] [pid 8909:tid 8951] [client 3.107.57.56:42462] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/sitemaps/.env"] [unique_id "ac0hnTvP_a0662gDl6DiUAAAAMo"]
[Wed Apr 01 21:46:05.305689 2026] [:error] [pid 8909:tid 8955] [client 3.107.57.56:42468] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/saas/.env"] [unique_id "ac0hnTvP_a0662gDl6DiUgAAAM4"]
[Wed Apr 01 21:46:05.360038 2026] [:error] [pid 8909:tid 8946] [client 3.107.57.56:42476] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "ac0hnTvP_a0662gDl6DiVAAAAMU"]
[Wed Apr 01 21:46:07.013830 2026] [:error] [pid 8909:tid 8952] [client 3.107.57.56:42576] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/exapi/.env"] [unique_id "ac0hnzvP_a0662gDl6DiXwAAAMs"]
[Wed Apr 01 21:46:07.071744 2026] [:error] [pid 8909:tid 8959] [client 3.107.57.56:42580] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/site/.env"] [unique_id "ac0hnzvP_a0662gDl6DiYAAAANI"]
[Wed Apr 01 21:46:07.128524 2026] [:error] [pid 17856:tid 17871] [client 3.107.57.56:42584] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/admin/.env"] [unique_id "ac0hnz7Idlm5j9frhqROFAAAAE0"]
[Wed Apr 01 21:46:07.184329 2026] [:error] [pid 17856:tid 17879] [client 3.107.57.56:42588] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/web/.env"] [unique_id "ac0hnz7Idlm5j9frhqROFgAAAFU"]
[Wed Apr 01 21:46:07.238415 2026] [:error] [pid 17856:tid 17861] [client 3.107.57.56:42594] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/public/.env"] [unique_id "ac0hnz7Idlm5j9frhqROGgAAAEM"]
[Wed Apr 01 21:46:07.297134 2026] [:error] [pid 17856:tid 17882] [client 3.107.57.56:42598] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/en/.env"] [unique_id "ac0hnz7Idlm5j9frhqROGwAAAFg"]
[Wed Apr 01 21:46:07.356012 2026] [:error] [pid 17856:tid 17859] [client 3.107.57.56:42600] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tools/.env"] [unique_id "ac0hnz7Idlm5j9frhqROHAAAAEE"]
[Wed Apr 01 21:46:07.416011 2026] [:error] [pid 17856:tid 17863] [client 3.107.57.56:42606] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v1/.env"] [unique_id "ac0hnz7Idlm5j9frhqROHQAAAEU"]
[Wed Apr 01 21:46:07.473662 2026] [:error] [pid 17856:tid 17867] [client 3.107.57.56:42608] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/v2/.env"] [unique_id "ac0hnz7Idlm5j9frhqROHwAAAEk"]
[Wed Apr 01 21:46:07.532690 2026] [:error] [pid 8910:tid 8989] [client 3.107.57.56:42610] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/administrator/.env"] [unique_id "ac0hn6JZINUcF3tYgExrfAAAARU"]
[Wed Apr 01 21:46:07.596324 2026] [:error] [pid 17856:tid 17872] [client 3.107.57.56:42616] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/laravel/.env"] [unique_id "ac0hnz7Idlm5j9frhqROIAAAAE4"]
[Wed Apr 01 21:46:07.657085 2026] [:error] [pid 17856:tid 17880] [client 3.107.57.56:42622] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/storage/.env"] [unique_id "ac0hnz7Idlm5j9frhqROIQAAAFY"]
[Wed Apr 01 21:46:07.717719 2026] [:error] [pid 17856:tid 17862] [client 3.107.57.56:42624] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/backend/.env"] [unique_id "ac0hnz7Idlm5j9frhqROIgAAAEQ"]
[Wed Apr 01 21:46:07.771412 2026] [:error] [pid 17856:tid 17881] [client 3.107.57.56:42626] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server/.env"] [unique_id "ac0hnz7Idlm5j9frhqROJAAAAFc"]
[Wed Apr 01 21:46:07.827606 2026] [:error] [pid 17856:tid 17861] [client 3.107.57.56:42628] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/frontend/.env"] [unique_id "ac0hnz7Idlm5j9frhqROJQAAAEM"]
[Wed Apr 01 21:46:07.883359 2026] [:error] [pid 17856:tid 17875] [client 3.107.57.56:42632] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/current/.env"] [unique_id "ac0hnz7Idlm5j9frhqROJgAAAFE"]
[Wed Apr 01 21:46:07.944145 2026] [:error] [pid 17856:tid 17858] [client 3.107.57.56:42636] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/dist/.env"] [unique_id "ac0hnz7Idlm5j9frhqROKAAAAEA"]
[Wed Apr 01 21:46:08.001017 2026] [:error] [pid 17856:tid 17874] [client 3.107.57.56:42638] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/build/.env"] [unique_id "ac0hoD7Idlm5j9frhqROKQAAAFA"]
[Wed Apr 01 21:46:08.059896 2026] [:error] [pid 8909:tid 8945] [client 3.107.57.56:42642] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/public_html/.env"] [unique_id "ac0hoDvP_a0662gDl6DiZAAAAMQ"]
[Wed Apr 01 21:46:08.118764 2026] [:error] [pid 8909:tid 8954] [client 3.107.57.56:42644] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/live/.env"] [unique_id "ac0hoDvP_a0662gDl6DiZQAAAM0"]
[Wed Apr 01 21:46:08.175914 2026] [:error] [pid 8909:tid 8949] [client 3.107.57.56:42646] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/prod/.env"] [unique_id "ac0hoDvP_a0662gDl6DiZgAAAMg"]
[Wed Apr 01 21:46:08.237382 2026] [:error] [pid 17856:tid 17869] [client 3.107.57.56:42650] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/dev/.env"] [unique_id "ac0hoD7Idlm5j9frhqROKgAAAEs"]
[Wed Apr 01 21:46:08.300407 2026] [:error] [pid 17856:tid 17880] [client 3.107.57.56:42652] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/project/.env"] [unique_id "ac0hoD7Idlm5j9frhqROLQAAAFY"]
[Wed Apr 01 21:46:08.357072 2026] [:error] [pid 8909:tid 8956] [client 3.107.57.56:42654] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/client/.env"] [unique_id "ac0hoDvP_a0662gDl6DiZwAAAM8"]
[Wed Apr 01 21:46:08.415459 2026] [:error] [pid 8908:tid 8929] [client 3.107.57.56:42660] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/service/.env"] [unique_id "ac0hoPkmxtJXGnLdvgCbGQAAAJA"]
[Wed Apr 01 21:46:08.477171 2026] [:error] [pid 8995:tid 8998] [client 3.107.57.56:42662] [client 3.107.57.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/node/.env"] [unique_id "ac0hoOonaBjs3qxcRefVRwAAAAA"]
[Thu Apr 02 00:52:33.630495 2026] [:error] [pid 16761:tid 16782] [client 216.24.210.101:31307] [client 216.24.210.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac1NUd4bJXDGRqKZnzwOlwAAAFI"]
[Thu Apr 02 01:44:49.165944 2026] [:error] [pid 8035:tid 8060] [client 43.130.101.151:39676] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac1ZkQY2zflwGmvw_QbrqQAAAJQ"]
[Thu Apr 02 03:22:54.514037 2026] [:error] [pid 59194:tid 59214] [client 102.165.48.81:16176] [client 102.165.48.81] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 102.165.48.81 on wp-login.php, counter = 11"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac1wjhMpAeV11hcQehy7ugAAAAE"]
[Thu Apr 02 03:22:55.010659 2026] [:error] [pid 59194:tid 59237] [client 102.165.48.81:16938] [client 102.165.48.81] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 102.165.48.81 on wp-login.php, counter = 11"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ac1wjxMpAeV11hcQehy7wwAAABg"]
[Thu Apr 02 04:16:03.690363 2026] [:error] [pid 59201:tid 59278] [client 194.26.192.92:60690] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac19A8AC0Tw8eL6gzZ5cVgAAAIs"]
[Thu Apr 02 04:16:04.177043 2026] [:error] [pid 59305:tid 59330] [client 194.26.192.92:60725] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac19BKr2tV4rDwKFxKf4qAAAANU"]
[Thu Apr 02 04:16:04.662307 2026] [:error] [pid 29467:tid 29477] [client 194.26.192.92:60746] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac19BL4VUBFCJAq-WOnxgQAAAQc"]
[Thu Apr 02 04:16:06.819640 2026] [:error] [pid 59200:tid 59260] [client 194.26.192.92:60935] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/txets.php"] [unique_id "ac19BrfP26txrdLs3ErjjwAAAFQ"]
[Thu Apr 02 04:52:22.190774 2026] [:error] [pid 59305:tid 59330] [client 51.77.216.36:41920] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "ac2Fhqr2tV4rDwKFxKf_ugAAANU"]
[Thu Apr 02 04:52:24.946192 2026] [:error] [pid 59201:tid 59285] [client 51.77.216.36:33784] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "ac2FiMAC0Tw8eL6gzZ5mKAAAAJI"]
[Thu Apr 02 04:52:27.932754 2026] [:error] [pid 37543:tid 37562] [client 51.77.216.36:33798] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "ac2Fi3hdk2bEYJCvILbp-AAAAVE"]
[Thu Apr 02 04:52:31.307121 2026] [:error] [pid 37543:tid 37551] [client 51.77.216.36:42842] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ac2Fj3hdk2bEYJCvILbqAgAAAUY"]
[Thu Apr 02 04:52:34.118661 2026] [:error] [pid 29467:tid 29483] [client 51.77.216.36:42846] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ac2Fkr4VUBFCJAq-WOn_CwAAAQ0"]
[Thu Apr 02 04:52:36.686571 2026] [:error] [pid 59305:tid 59314] [client 51.77.216.36:42860] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ac2FlKr2tV4rDwKFxKf_wQAAAMU"]
[Thu Apr 02 04:52:39.509914 2026] [:error] [pid 59200:tid 59247] [client 51.77.216.36:42876] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ac2Fl7fP26txrdLs3Erp7AAAAEc"]
[Thu Apr 02 04:52:41.988982 2026] [:error] [pid 59194:tid 59236] [client 51.77.216.36:53572] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ac2FmRMpAeV11hcQehzQeQAAABc"]
[Thu Apr 02 04:52:44.629966 2026] [:error] [pid 37543:tid 37564] [client 51.77.216.36:53580] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ac2FnHhdk2bEYJCvILbqDQAAAVM"]
[Thu Apr 02 04:52:47.553414 2026] [:error] [pid 37543:tid 37557] [client 51.77.216.36:53588] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ac2Fn3hdk2bEYJCvILbqFgAAAUw"]
[Thu Apr 02 04:52:50.059007 2026] [:error] [pid 37543:tid 37567] [client 51.77.216.36:53594] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ac2Fonhdk2bEYJCvILbqGgAAAVY"]
[Thu Apr 02 04:52:52.724363 2026] [:error] [pid 59305:tid 59318] [client 51.77.216.36:54064] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ac2FpKr2tV4rDwKFxKf_zwAAAMk"]
[Thu Apr 02 04:52:55.719564 2026] [:error] [pid 37543:tid 37566] [client 51.77.216.36:54076] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ac2Fp3hdk2bEYJCvILbqJQAAAVU"]
[Thu Apr 02 04:52:58.307817 2026] [:error] [pid 59305:tid 59309] [client 51.77.216.36:54082] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ac2Fqqr2tV4rDwKFxKf_1AAAAMA"]
[Thu Apr 02 04:53:00.910776 2026] [:error] [pid 59201:tid 59278] [client 51.77.216.36:40084] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ac2FrMAC0Tw8eL6gzZ5mPQAAAIs"]
[Thu Apr 02 04:53:03.579726 2026] [:error] [pid 59201:tid 59276] [client 51.77.216.36:40086] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ac2Fr8AC0Tw8eL6gzZ5mQwAAAIk"]
[Thu Apr 02 04:53:06.108202 2026] [:error] [pid 37543:tid 37546] [client 51.77.216.36:40088] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "ac2Fsnhdk2bEYJCvILbqLQAAAUE"]
[Thu Apr 02 04:53:08.882574 2026] [:error] [pid 59305:tid 59322] [client 51.77.216.36:40104] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "ac2FtKr2tV4rDwKFxKf_4gAAAM0"]
[Thu Apr 02 04:53:11.425334 2026] [:error] [pid 59201:tid 59274] [client 51.77.216.36:46984] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "ac2Ft8AC0Tw8eL6gzZ5mSwAAAIc"]
[Thu Apr 02 04:53:13.985307 2026] [:error] [pid 29467:tid 29483] [client 51.77.216.36:46998] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "ac2Fub4VUBFCJAq-WOn_MQAAAQ0"]
[Thu Apr 02 04:53:16.391566 2026] [:error] [pid 37543:tid 37547] [client 51.77.216.36:47004] [client 51.77.216.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "ac2FvHhdk2bEYJCvILbqRAAAAUI"]
[Thu Apr 02 05:23:57.755078 2026] [autoindex:error] [pid 59194:tid 59225] [client 85.203.21.135:44893] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:23:57.854823 2026] [:error] [pid 59194:tid 59227] [client 85.203.21.135:44893] [client 85.203.21.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/config.php"] [unique_id "ac2M7RMpAeV11hcQehzUrgAAAA4"]
[Thu Apr 02 05:23:59.183495 2026] [:error] [pid 29467:tid 29486] [client 85.203.21.131:42271] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/header.php"] [unique_id "ac2M774VUBFCJAq-WOkJjgAAARA"]
[Thu Apr 02 05:23:59.384831 2026] [:error] [pid 59200:tid 59264] [client 85.203.21.85:26269] [client 85.203.21.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/system_core.php"] [unique_id "ac2M77fP26txrdLs3ErxDAAAAFg"]
[Thu Apr 02 05:24:02.895884 2026] [:error] [pid 29467:tid 29473] [client 85.203.21.96:20057] [client 85.203.21.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ac2M8r4VUBFCJAq-WOkJlwAAAQM"]
[Thu Apr 02 05:24:05.456811 2026] [:error] [pid 59201:tid 59289] [client 85.203.21.105:59839] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "ac2M9cAC0Tw8eL6gzZ5wAQAAAJY"]
[Thu Apr 02 05:24:09.064771 2026] [:error] [pid 37543:tid 37552] [client 85.203.21.71:39427] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/speculative8.php"] [unique_id "ac2M-Xhdk2bEYJCvILb81AAAAUc"]
[Thu Apr 02 05:24:19.730732 2026] [:error] [pid 59201:tid 59275] [client 85.203.21.87:39291] [client 85.203.21.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "ac2NA8AC0Tw8eL6gzZ5wGgAAAIg"]
[Thu Apr 02 05:24:19.939389 2026] [access_compat:error] [pid 29467:tid 29486] [client 85.203.21.112:54029] AH01797: client denied by server configuration: /home/hbtwocom/public_html/wp-content/updraft/plugins-old
[Thu Apr 02 05:24:20.148312 2026] [autoindex:error] [pid 29467:tid 29483] [client 85.203.21.112:54029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:21.411545 2026] [autoindex:error] [pid 29467:tid 29477] [client 85.203.21.112:54029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:21.516382 2026] [autoindex:error] [pid 29467:tid 29486] [client 85.203.21.112:54029] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:27.841447 2026] [:error] [pid 59201:tid 59283] [client 43.153.71.132:48542] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac2NC8AC0Tw8eL6gzZ5wKQAAAJA"]
[Thu Apr 02 05:24:37.387984 2026] [:error] [pid 29467:tid 29477] [client 85.203.21.112:54029] [client 85.203.21.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/archives/"] [unique_id "ac2NFb4VUBFCJAq-WOkKIwAAAQc"]
[Thu Apr 02 05:24:37.589388 2026] [autoindex:error] [pid 37543:tid 37559] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:37.695034 2026] [autoindex:error] [pid 37543:tid 37548] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:38.099048 2026] [autoindex:error] [pid 37543:tid 37551] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/block-library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:39.390461 2026] [autoindex:error] [pid 37543:tid 37556] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:41.678091 2026] [autoindex:error] [pid 37543:tid 37568] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:43.852900 2026] [autoindex:error] [pid 37543:tid 37569] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:43.959976 2026] [autoindex:error] [pid 37543:tid 37562] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:49.654517 2026] [autoindex:error] [pid 37543:tid 37552] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:49.759464 2026] [autoindex:error] [pid 37543:tid 37551] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/mediaelement/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:49.862751 2026] [autoindex:error] [pid 37543:tid 37560] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:49.966846 2026] [autoindex:error] [pid 37543:tid 37556] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:50.073540 2026] [autoindex:error] [pid 37543:tid 37567] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:50.183628 2026] [autoindex:error] [pid 37543:tid 37566] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:50.304147 2026] [autoindex:error] [pid 37543:tid 37550] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:50.409046 2026] [autoindex:error] [pid 37543:tid 37564] [client 85.203.21.77:57195] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:52.597993 2026] [:error] [pid 37543:tid 37546] [client 85.203.21.77:57195] [client 85.203.21.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "ac2NJHhdk2bEYJCvILb-DwAAAUE"]
[Thu Apr 02 05:24:52.796845 2026] [:error] [pid 37543:tid 37555] [client 85.203.21.112:44131] [client 85.203.21.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "ac2NJHhdk2bEYJCvILb-EAAAAUo"]
[Thu Apr 02 05:24:54.072138 2026] [:error] [pid 37543:tid 37557] [client 85.203.21.119:30329] [client 85.203.21.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "ac2NJnhdk2bEYJCvILb-GQAAAUw"]
[Thu Apr 02 05:24:54.290283 2026] [:error] [pid 37543:tid 37546] [client 85.203.21.97:28507] [client 85.203.21.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "ac2NJnhdk2bEYJCvILb-HAAAAUE"]
[Thu Apr 02 05:24:54.504660 2026] [:error] [pid 37543:tid 37555] [client 85.203.21.107:20869] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "ac2NJnhdk2bEYJCvILb-HgAAAUo"]
[Thu Apr 02 05:24:54.708182 2026] [autoindex:error] [pid 37543:tid 37554] [client 85.203.21.73:40553] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:58.607065 2026] [autoindex:error] [pid 37543:tid 37557] [client 85.203.21.73:40553] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:59.816369 2026] [autoindex:error] [pid 37543:tid 37548] [client 85.203.21.73:40553] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:24:59.918597 2026] [autoindex:error] [pid 37543:tid 37549] [client 85.203.21.73:40553] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comment-content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:02.163035 2026] [autoindex:error] [pid 37543:tid 37550] [client 85.203.21.73:40553] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:02.268841 2026] [autoindex:error] [pid 37543:tid 37564] [client 85.203.21.73:40553] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/nextpage/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:03.391163 2026] [autoindex:error] [pid 37543:tid 37552] [client 85.203.21.73:40553] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:03.495409 2026] [autoindex:error] [pid 37543:tid 37549] [client 85.203.21.73:40553] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:04.616374 2026] [autoindex:error] [pid 37543:tid 37569] [client 85.203.21.73:40553] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:04.725469 2026] [autoindex:error] [pid 37543:tid 37545] [client 85.203.21.73:40553] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/image/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:05.831143 2026] [:error] [pid 37543:tid 37567] [client 85.203.21.73:40553] [client 85.203.21.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/"] [unique_id "ac2NMXhdk2bEYJCvILb-XQAAAVY"]
[Thu Apr 02 05:25:10.937845 2026] [autoindex:error] [pid 59201:tid 59287] [client 85.203.21.123:30467] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:12.644456 2026] [autoindex:error] [pid 59201:tid 59282] [client 85.203.21.123:30467] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:13.750345 2026] [autoindex:error] [pid 59201:tid 59267] [client 85.203.21.123:30467] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:15.613623 2026] [autoindex:error] [pid 59201:tid 59279] [client 85.203.21.123:30467] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-comments-form/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:22.558753 2026] [autoindex:error] [pid 59201:tid 59268] [client 85.203.21.123:30467] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:22.659769 2026] [:error] [pid 59201:tid 59276] [client 85.203.21.123:30467] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "ac2NQsAC0Tw8eL6gzZ5wtwAAAIk"]
[Thu Apr 02 05:25:28.973388 2026] [autoindex:error] [pid 59201:tid 59287] [client 85.203.21.97:27229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/column/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:30.103581 2026] [autoindex:error] [pid 59201:tid 59277] [client 85.203.21.97:27229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:30.209436 2026] [autoindex:error] [pid 59201:tid 59268] [client 85.203.21.97:27229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:30.315360 2026] [autoindex:error] [pid 59201:tid 59275] [client 85.203.21.97:27229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:35.717058 2026] [autoindex:error] [pid 59201:tid 59273] [client 85.203.21.97:27229] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:40.120451 2026] [:error] [pid 59201:tid 59289] [client 85.203.21.97:27229] [client 85.203.21.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "ac2NVMAC0Tw8eL6gzZ5w7gAAAJY"]
[Thu Apr 02 05:25:43.668065 2026] [autoindex:error] [pid 37543:tid 37565] [client 85.203.21.93:45515] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:43.774421 2026] [autoindex:error] [pid 37543:tid 37554] [client 85.203.21.93:45515] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyone/template-parts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:45.166176 2026] [:error] [pid 37543:tid 37563] [client 85.203.21.93:45515] [client 85.203.21.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/social-links/"] [unique_id "ac2NWXhdk2bEYJCvILb_BAAAAVI"]
[Thu Apr 02 05:25:45.367869 2026] [autoindex:error] [pid 37543:tid 37558] [client 85.203.21.72:45571] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:46.760866 2026] [autoindex:error] [pid 37543:tid 37565] [client 85.203.21.72:45571] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/navigation-submenu/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:46.864614 2026] [autoindex:error] [pid 37543:tid 37549] [client 85.203.21.72:45571] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:47.998535 2026] [autoindex:error] [pid 37543:tid 37560] [client 85.203.21.72:45571] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/video/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:50.213962 2026] [autoindex:error] [pid 37543:tid 37555] [client 85.203.21.72:45571] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:50.321694 2026] [autoindex:error] [pid 37543:tid 37564] [client 85.203.21.72:45571] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:50.426172 2026] [autoindex:error] [pid 37543:tid 37550] [client 85.203.21.72:45571] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:54.647697 2026] [autoindex:error] [pid 37543:tid 37550] [client 85.203.21.72:45571] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:54.754524 2026] [autoindex:error] [pid 37543:tid 37561] [client 85.203.21.72:45571] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:54.860043 2026] [:error] [pid 37543:tid 37568] [client 85.203.21.72:45571] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/k.php"] [unique_id "ac2NYnhdk2bEYJCvILb_SgAAAVc"]
[Thu Apr 02 05:25:56.258203 2026] [autoindex:error] [pid 37543:tid 37568] [client 85.203.21.103:40233] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:56.366102 2026] [autoindex:error] [pid 37543:tid 37558] [client 85.203.21.103:40233] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:57.506147 2026] [autoindex:error] [pid 37543:tid 37552] [client 85.203.21.103:40233] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:25:57.717013 2026] [autoindex:error] [pid 37543:tid 37555] [client 85.203.21.103:40233] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://hotbooksbookeeping2.com/wp-includes/js/dist
[Thu Apr 02 05:25:57.822085 2026] [autoindex:error] [pid 37543:tid 37566] [client 85.203.21.103:40233] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:02.265688 2026] [:error] [pid 37543:tid 37557] [client 85.203.21.103:40233] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "ac2Nanhdk2bEYJCvILb_bwAAAUw"]
[Thu Apr 02 05:26:04.544251 2026] [:error] [pid 59200:tid 59258] [client 85.203.21.74:55907] [client 85.203.21.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.21.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ac2NbLfP26txrdLs3ErxXgAAAFI"]
[Thu Apr 02 05:26:07.605888 2026] [autoindex:error] [pid 59200:tid 59257] [client 85.203.21.74:55907] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:13.220677 2026] [autoindex:error] [pid 59200:tid 59258] [client 85.203.21.74:55907] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:13.327889 2026] [autoindex:error] [pid 59200:tid 59247] [client 85.203.21.74:55907] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/customize-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:13.432941 2026] [autoindex:error] [pid 59200:tid 59260] [client 85.203.21.74:55907] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:13.539893 2026] [autoindex:error] [pid 59200:tid 59250] [client 85.203.21.74:55907] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:15.743328 2026] [:error] [pid 59200:tid 59264] [client 85.203.21.74:55907] [client 85.203.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/colors/"] [unique_id "ac2Nd7fP26txrdLs3ErxeQAAAFg"]
[Thu Apr 02 05:26:15.945810 2026] [:error] [pid 59200:tid 59246] [client 85.203.21.101:49311] [client 85.203.21.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/colors/"] [unique_id "ac2Nd7fP26txrdLs3ErxegAAAEY"]
[Thu Apr 02 05:26:20.334000 2026] [autoindex:error] [pid 59200:tid 59251] [client 85.203.21.100:37213] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:27.535049 2026] [:error] [pid 59200:tid 59264] [client 85.203.21.100:37213] [client 85.203.21.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reception1/includes/tcpdf/examples/config/"] [unique_id "ac2Ng7fP26txrdLs3ErxjQAAAFg"]
[Thu Apr 02 05:26:29.895818 2026] [autoindex:error] [pid 29467:tid 29474] [client 85.203.21.135:23025] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:29.999932 2026] [autoindex:error] [pid 29467:tid 29476] [client 85.203.21.135:23025] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:30.103993 2026] [autoindex:error] [pid 29467:tid 29473] [client 85.203.21.135:23025] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:31.221747 2026] [autoindex:error] [pid 29467:tid 29486] [client 85.203.21.135:23025] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/page-list/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:37.584032 2026] [autoindex:error] [pid 29467:tid 29492] [client 85.203.21.135:23025] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:39.728494 2026] [:error] [pid 29467:tid 29493] [client 85.203.21.135:23025] [client 85.203.21.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/"] [unique_id "ac2Nj74VUBFCJAq-WOkK6gAAARc"]
[Thu Apr 02 05:26:44.837348 2026] [autoindex:error] [pid 59201:tid 59271] [client 85.203.21.71:22883] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/commands/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:44.941116 2026] [autoindex:error] [pid 59201:tid 59272] [client 85.203.21.71:22883] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:45.051050 2026] [autoindex:error] [pid 59201:tid 59287] [client 85.203.21.71:22883] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/query-pagination/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:45.160556 2026] [autoindex:error] [pid 59201:tid 59273] [client 85.203.21.71:22883] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/separator/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:46.443534 2026] [autoindex:error] [pid 59201:tid 59280] [client 85.203.21.71:22883] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:48.563214 2026] [:error] [pid 59201:tid 59273] [client 85.203.21.71:22883] [client 85.203.21.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/themes.php"] [unique_id "ac2NmMAC0Tw8eL6gzZ5xbgAAAIY"]
[Thu Apr 02 05:26:48.766965 2026] [autoindex:error] [pid 59200:tid 59256] [client 85.203.21.103:23421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/freeform/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:26:48.867200 2026] [:error] [pid 59200:tid 59240] [client 85.203.21.103:23421] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ac2NmLfP26txrdLs3ErxkwAAAEA"]
[Thu Apr 02 05:27:00.059442 2026] [autoindex:error] [pid 59201:tid 59277] [client 85.203.21.72:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:02.412716 2026] [:error] [pid 59201:tid 59271] [client 85.203.21.72:49951] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "ac2NpsAC0Tw8eL6gzZ5xmwAAAIQ"]
[Thu Apr 02 05:27:02.620982 2026] [autoindex:error] [pid 37543:tid 37555] [client 85.203.21.97:47923] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:04.801416 2026] [autoindex:error] [pid 37543:tid 37552] [client 85.203.21.97:47923] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:04.906510 2026] [autoindex:error] [pid 37543:tid 37568] [client 85.203.21.97:47923] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:05.012541 2026] [autoindex:error] [pid 37543:tid 37565] [client 85.203.21.97:47923] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/script-modules/block-library/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:05.116773 2026] [autoindex:error] [pid 37543:tid 37556] [client 85.203.21.97:47923] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/tag-cloud/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:06.196034 2026] [:error] [pid 37543:tid 37561] [client 85.203.21.97:47923] [client 85.203.21.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/about.php"] [unique_id "ac2Nqnhdk2bEYJCvILb_-wAAAVA"]
[Thu Apr 02 05:27:11.399393 2026] [autoindex:error] [pid 37543:tid 37562] [client 85.203.21.123:37325] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:11.496386 2026] [access_compat:error] [pid 37543:tid 37550] [client 85.203.21.123:37325] AH01797: client denied by server configuration: /home/hbtwocom/public_html/wp-content/updraft/emptydir/
[Thu Apr 02 05:27:14.689780 2026] [autoindex:error] [pid 37543:tid 37566] [client 85.203.21.123:37325] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwenty/assets/fonts/inter/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:15.847364 2026] [autoindex:error] [pid 37543:tid 37561] [client 85.203.21.123:37325] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:15.947960 2026] [:error] [pid 37543:tid 37547] [client 85.203.21.123:37325] [client 85.203.21.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "ac2Ns3hdk2bEYJCvILYAFwAAAUI"]
[Thu Apr 02 05:27:17.271147 2026] [autoindex:error] [pid 29467:tid 29472] [client 85.203.21.143:49095] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:19.442182 2026] [autoindex:error] [pid 29467:tid 29490] [client 85.203.21.143:49095] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:20.540889 2026] [:error] [pid 29467:tid 29473] [client 85.203.21.143:49095] [client 85.203.21.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "ac2NuL4VUBFCJAq-WOkLNwAAAQM"]
[Thu Apr 02 05:27:25.738632 2026] [:error] [pid 29467:tid 29494] [client 85.203.21.131:63953] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "ac2Nvb4VUBFCJAq-WOkLQwAAARg"]
[Thu Apr 02 05:27:25.939808 2026] [autoindex:error] [pid 37543:tid 37568] [client 85.203.21.153:52799] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:28.267094 2026] [:error] [pid 37543:tid 37564] [client 85.203.21.153:52799] [client 85.203.21.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/chosen.php"] [unique_id "ac2NwHhdk2bEYJCvILYAMQAAAVM"]
[Thu Apr 02 05:27:34.542199 2026] [autoindex:error] [pid 59201:tid 59277] [client 85.203.21.107:38389] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:36.641670 2026] [autoindex:error] [pid 59201:tid 59280] [client 85.203.21.107:38389] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:39.763001 2026] [:error] [pid 59201:tid 59281] [client 85.203.21.107:38389] [client 85.203.21.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/joker.php"] [unique_id "ac2Ny8AC0Tw8eL6gzZ5xugAAAI4"]
[Thu Apr 02 05:27:47.093664 2026] [autoindex:error] [pid 37543:tid 37553] [client 85.203.21.99:26969] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comment-date/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:27:47.194738 2026] [:error] [pid 37543:tid 37550] [client 85.203.21.99:26969] [client 85.203.21.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/joker.php"] [unique_id "ac2N03hdk2bEYJCvILYAXAAAAUU"]
[Thu Apr 02 05:28:01.444344 2026] [:error] [pid 59201:tid 59281] [client 85.203.21.103:62701] [client 85.203.21.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "ac2N4cAC0Tw8eL6gzZ5xzgAAAI4"]
[Thu Apr 02 05:28:01.642694 2026] [:error] [pid 29467:tid 29491] [client 85.203.21.73:40087] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mer_gagal.php"] [unique_id "ac2N4b4VUBFCJAq-WOkLjgAAARU"]
[Thu Apr 02 05:28:05.469170 2026] [:error] [pid 59194:tid 59215] [client 85.203.21.131:34837] [client 85.203.21.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "ac2N5RMpAeV11hcQehzVaQAAAAI"]
[Thu Apr 02 05:28:05.673175 2026] [autoindex:error] [pid 29467:tid 29474] [client 85.203.21.92:21413] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/accordion/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:28:05.777031 2026] [autoindex:error] [pid 29467:tid 29480] [client 85.203.21.92:21413] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/table/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:28:05.881142 2026] [autoindex:error] [pid 29467:tid 29484] [client 85.203.21.92:21413] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/parts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:28:08.112116 2026] [autoindex:error] [pid 29467:tid 29478] [client 85.203.21.92:21413] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-post/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:28:13.172134 2026] [:error] [pid 29467:tid 29488] [client 85.203.21.92:21413] [client 85.203.21.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-text-cron.php"] [unique_id "ac2N7b4VUBFCJAq-WOkLpgAAARI"]
[Thu Apr 02 05:28:18.379500 2026] [autoindex:error] [pid 59305:tid 59309] [client 85.203.21.72:41107] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:28:18.485022 2026] [autoindex:error] [pid 59305:tid 59332] [client 85.203.21.72:41107] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/home-link/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:28:20.741285 2026] [:error] [pid 59305:tid 59320] [client 85.203.21.72:41107] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/post-template-path.php"] [unique_id "ac2N9Kr2tV4rDwKFxKcHjgAAAMs"]
[Thu Apr 02 05:28:20.943535 2026] [:error] [pid 59305:tid 59318] [client 85.203.21.79:63337] [client 85.203.21.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/plex1.php"] [unique_id "ac2N9Kr2tV4rDwKFxKcHjwAAAMk"]
[Thu Apr 02 05:28:34.124901 2026] [:error] [pid 59305:tid 59318] [client 85.203.21.71:58147] [client 85.203.21.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/webp-express/webp-images-bigger-than-source/providers/"] [unique_id "ac2OAqr2tV4rDwKFxKcHmwAAAMk"]
[Thu Apr 02 05:28:36.450917 2026] [:error] [pid 59194:tid 59231] [client 85.203.21.101:54019] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/wp-cron.php"] [unique_id "ac2OBBMpAeV11hcQehzVgQAAABI"]
[Thu Apr 02 05:28:43.873508 2026] [:error] [pid 37543:tid 37548] [client 85.203.21.101:38081] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/button/admiin.php"] [unique_id "ac2OC3hdk2bEYJCvILYA4wAAAUM"]
[Thu Apr 02 05:28:59.484570 2026] [:error] [pid 59201:tid 59289] [client 85.203.21.137:57535] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/users.php"] [unique_id "ac2OG8AC0Tw8eL6gzZ5yEQAAAJY"]
[Thu Apr 02 05:29:09.716171 2026] [autoindex:error] [pid 59200:tid 59250] [client 85.203.21.105:62441] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-next/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:29:09.821095 2026] [autoindex:error] [pid 59200:tid 59247] [client 85.203.21.105:62441] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:29:19.752027 2026] [:error] [pid 59200:tid 59241] [client 85.203.21.105:62441] [client 85.203.21.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-cron.php"] [unique_id "ac2OL7fP26txrdLs3EryOAAAAEE"]
[Thu Apr 02 05:29:19.952753 2026] [:error] [pid 37543:tid 37555] [client 85.203.21.93:47069] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/api.php"] [unique_id "ac2OL3hdk2bEYJCvILYBGAAAAUo"]
[Thu Apr 02 05:29:26.255117 2026] [:error] [pid 37543:tid 37556] [client 85.203.21.95:26261] [client 85.203.21.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/tx1.php"] [unique_id "ac2ONnhdk2bEYJCvILYBKQAAAUs"]
[Thu Apr 02 05:29:27.518325 2026] [:error] [pid 59201:tid 59271] [client 85.203.21.95:40109] [client 85.203.21.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "ac2ON8AC0Tw8eL6gzZ5yKQAAAIQ"]
[Thu Apr 02 05:29:27.715505 2026] [:error] [pid 59201:tid 59290] [client 85.203.21.70:50341] [client 85.203.21.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ac2ON8AC0Tw8eL6gzZ5yKgAAAJc"]
[Thu Apr 02 05:29:31.014901 2026] [:error] [pid 59305:tid 59312] [client 85.203.21.112:49457] [client 85.203.21.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "ac2OO6r2tV4rDwKFxKcH5QAAAMM"]
[Thu Apr 02 05:29:39.909676 2026] [:error] [pid 59200:tid 59244] [client 85.203.21.132:58821] [client 85.203.21.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/author-template-object.php"] [unique_id "ac2OQ7fP26txrdLs3EryTAAAAEQ"]
[Thu Apr 02 05:29:40.106493 2026] [:error] [pid 59305:tid 59325] [client 85.203.21.101:23347] [client 85.203.21.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/doc.php"] [unique_id "ac2ORKr2tV4rDwKFxKcH9AAAANA"]
[Thu Apr 02 05:29:40.310850 2026] [:error] [pid 59194:tid 59232] [client 85.203.21.100:46545] [client 85.203.21.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "ac2ORBMpAeV11hcQehzVuAAAABM"]
[Thu Apr 02 05:29:45.510633 2026] [:error] [pid 37543:tid 37561] [client 85.203.21.100:35683] [client 85.203.21.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/site-title-restful.php"] [unique_id "ac2OSXhdk2bEYJCvILYBTwAAAVA"]
[Thu Apr 02 05:29:45.706615 2026] [:error] [pid 37543:tid 37551] [client 85.203.21.88:33399] [client 85.203.21.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.21.88, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/fonts/poppins/wp-login.php"] [unique_id "ac2OSXhdk2bEYJCvILYBUQAAAUY"]
[Thu Apr 02 05:29:46.804555 2026] [:error] [pid 37543:tid 37565] [client 85.203.21.88:33399] [client 85.203.21.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/goods.php"] [unique_id "ac2OSnhdk2bEYJCvILYBVAAAAVQ"]
[Thu Apr 02 05:30:02.819940 2026] [autoindex:error] [pid 59305:tid 59332] [client 85.203.21.135:26127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comment-reply-link/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:30:02.925029 2026] [autoindex:error] [pid 59305:tid 59315] [client 85.203.21.135:26127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pattern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:30:03.028146 2026] [autoindex:error] [pid 59305:tid 59329] [client 85.203.21.135:26127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:30:03.133606 2026] [autoindex:error] [pid 59305:tid 59330] [client 85.203.21.135:26127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/script-modules/block-library/navigation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:30:03.240186 2026] [autoindex:error] [pid 59305:tid 59318] [client 85.203.21.135:26127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:30:04.336665 2026] [autoindex:error] [pid 59305:tid 59333] [client 85.203.21.135:26127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/legacy-widget/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:30:06.411454 2026] [:error] [pid 59305:tid 59321] [client 85.203.21.135:26127] [client 85.203.21.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "ac2OXqr2tV4rDwKFxKcIGAAAAMw"], referer: http://hotbooksbookeeping2.com/wp-includes/customize/wp-conflg.php?p=
[Thu Apr 02 05:30:06.619554 2026] [autoindex:error] [pid 59200:tid 59258] [client 85.203.21.72:20005] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 02 05:30:16.630449 2026] [:error] [pid 59200:tid 59259] [client 85.203.21.72:20005] [client 85.203.21.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ac2OaLfP26txrdLs3EryZwAAAFM"]
[Thu Apr 02 05:30:18.697588 2026] [proxy_fcgi:error] [pid 59200:tid 59254] [client 85.203.21.72:20005] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/hbtwocom/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/hbtwocom/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/hbtwocom/public_html/wp-settings.php on line 34PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHwp-includes/version.php' (include_path='.:') in /home/hbtwocom/public_html/wp-settings.php on line 34'
[Thu Apr 02 05:30:24.307881 2026] [:error] [pid 59305:tid 59333] [client 85.203.21.73:51303] [client 85.203.21.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-posts.php"] [unique_id "ac2OcKr2tV4rDwKFxKcIJAAAANg"]
[Thu Apr 02 05:30:34.507075 2026] [:error] [pid 59194:tid 59222] [client 85.203.21.141:55911] [client 85.203.21.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments.php"] [unique_id "ac2OehMpAeV11hcQehzV3QAAAAk"]
[Thu Apr 02 05:30:41.780385 2026] [:error] [pid 59194:tid 59234] [client 85.203.21.72:52935] [client 85.203.21.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/modules/mod_login/tmpl/default.php"] [unique_id "ac2OgRMpAeV11hcQehzV4wAAABU"]
[Thu Apr 02 05:30:53.259834 2026] [:error] [pid 59200:tid 59262] [client 85.203.21.76:42357] [client 85.203.21.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/configuration.php"] [unique_id "ac2OjbfP26txrdLs3ErypgAAAFY"]
[Thu Apr 02 05:31:04.541790 2026] [:error] [pid 59200:tid 59262] [client 85.203.21.77:48199] [client 85.203.21.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/storage/framework/cache/data/core.php"] [unique_id "ac2OmLfP26txrdLs3EryuAAAAFY"]
[Thu Apr 02 06:47:12.854222 2026] [:error] [pid 37543:tid 37545] [client 81.162.80.35:52957] [client 81.162.80.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.162.80.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ac2gcHhdk2bEYJCvILYv0gAAAUA"]
[Thu Apr 02 06:56:21.703688 2026] [:error] [pid 29467:tid 29488] [client 60.188.57.0:55973] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac2ilb4VUBFCJAq-WOkyrwAAARI"]
[Thu Apr 02 13:46:21.483206 2026] [:error] [pid 54384:tid 54390] [client 114.96.103.33:41459] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac4CrdWWpaby3TVN7MecOwAAAcQ"]
[Thu Apr 02 15:01:48.684422 2026] [:error] [pid 59305:tid 59331] [client 194.247.173.99:55592] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ac4UXKr2tV4rDwKFxKfrqQAAANY"]
[Thu Apr 02 15:01:51.487327 2026] [:error] [pid 59305:tid 59318] [client 194.247.173.99:44342] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ac4UX6r2tV4rDwKFxKfrrgAAAMk"]
[Thu Apr 02 15:01:54.165253 2026] [:error] [pid 59194:tid 59229] [client 194.247.173.99:44346] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ac4UYhMpAeV11hcQehwVwgAAABA"]
[Thu Apr 02 15:01:56.779775 2026] [:error] [pid 54384:tid 54396] [client 194.247.173.99:44356] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ac4UZNWWpaby3TVN7Mex7wAAAco"]
[Thu Apr 02 15:01:59.508599 2026] [:error] [pid 59200:tid 59247] [client 194.247.173.99:44362] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ac4UZ7fP26txrdLs3Eo_lwAAAEc"]
[Thu Apr 02 15:02:02.291247 2026] [:error] [pid 29467:tid 29482] [client 194.247.173.99:54428] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ac4Uar4VUBFCJAq-WOmz6gAAAQw"]
[Thu Apr 02 15:02:05.123085 2026] [:error] [pid 59305:tid 59312] [client 194.247.173.99:54434] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ac4Ubar2tV4rDwKFxKfrxQAAAMM"]
[Thu Apr 02 15:02:08.097450 2026] [:error] [pid 54384:tid 54399] [client 194.247.173.99:54450] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ac4UcNWWpaby3TVN7Mex_wAAAc0"]
[Thu Apr 02 15:02:10.954693 2026] [:error] [pid 59305:tid 59328] [client 194.247.173.99:45588] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ac4Ucqr2tV4rDwKFxKfr-gAAANM"]
[Thu Apr 02 15:02:14.766913 2026] [:error] [pid 59305:tid 59326] [client 194.247.173.99:45594] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ac4Udqr2tV4rDwKFxKfsEwAAANE"]
[Thu Apr 02 15:02:17.708577 2026] [:error] [pid 23927:tid 23932] [client 194.247.173.99:45608] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ac4UeUsZwqCndhl9uKA2ZgAAAYM"]
[Thu Apr 02 15:02:20.515894 2026] [:error] [pid 54384:tid 54389] [client 194.247.173.99:49382] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ac4UfNWWpaby3TVN7MeyDQAAAcM"]
[Thu Apr 02 15:02:23.504884 2026] [:error] [pid 54384:tid 54391] [client 194.247.173.99:49384] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ac4Uf9WWpaby3TVN7MeyEQAAAcU"]
[Thu Apr 02 15:02:27.217688 2026] [:error] [pid 59305:tid 59326] [client 194.247.173.99:49396] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ac4Ug6r2tV4rDwKFxKfsXAAAANE"]
[Thu Apr 02 15:02:30.335704 2026] [:error] [pid 59201:tid 59278] [client 194.247.173.99:47282] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ac4UhsAC0Tw8eL6gzZ7bPAAAAIs"]
[Thu Apr 02 15:02:33.062504 2026] [:error] [pid 23927:tid 23941] [client 194.247.173.99:47298] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ac4UiUsZwqCndhl9uKA2hQAAAYw"]
[Thu Apr 02 15:02:36.472618 2026] [:error] [pid 23927:tid 23949] [client 194.247.173.99:47304] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "ac4UjEsZwqCndhl9uKA2igAAAZQ"]
[Thu Apr 02 15:02:41.838258 2026] [:error] [pid 23927:tid 23938] [client 194.247.173.99:42738] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "ac4UkUsZwqCndhl9uKA2kwAAAYk"]
[Thu Apr 02 15:03:30.763439 2026] [:error] [pid 37543:tid 37560] [client 194.247.173.99:41526] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ac4Uwnhdk2bEYJCvILaQmAAAAU8"]
[Thu Apr 02 15:03:33.560977 2026] [:error] [pid 59200:tid 59260] [client 194.247.173.99:39762] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ac4UxbfP26txrdLs3Eo_sAAAAFQ"]
[Thu Apr 02 15:03:36.496279 2026] [:error] [pid 29467:tid 29485] [client 194.247.173.99:39764] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ac4UyL4VUBFCJAq-WOm0RQAAAQ8"]
[Thu Apr 02 15:03:41.424891 2026] [:error] [pid 54384:tid 54398] [client 194.247.173.99:42250] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ac4UzdWWpaby3TVN7MeyXgAAAcw"]
[Thu Apr 02 15:03:44.210033 2026] [:error] [pid 59305:tid 59324] [client 194.247.173.99:42262] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ac4U0Kr2tV4rDwKFxKftRgAAAM8"]
[Thu Apr 02 15:03:47.444058 2026] [:error] [pid 59305:tid 59318] [client 194.247.173.99:42272] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ac4U06r2tV4rDwKFxKftWAAAAMk"]
[Thu Apr 02 15:03:50.369258 2026] [:error] [pid 23927:tid 23950] [client 194.247.173.99:40138] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ac4U1ksZwqCndhl9uKA3OgAAAZU"]
[Thu Apr 02 15:03:53.337455 2026] [:error] [pid 37543:tid 37562] [client 194.247.173.99:40146] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ac4U2Xhdk2bEYJCvILaQuAAAAVE"]
[Thu Apr 02 15:03:56.133051 2026] [:error] [pid 59201:tid 59286] [client 194.247.173.99:40162] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ac4U3MAC0Tw8eL6gzZ7bcAAAAJM"]
[Thu Apr 02 15:03:59.497028 2026] [:error] [pid 54384:tid 54404] [client 194.247.173.99:40170] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ac4U39WWpaby3TVN7MeycgAAAdI"]
[Thu Apr 02 15:04:02.084005 2026] [:error] [pid 59194:tid 59224] [client 194.247.173.99:54174] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ac4U4hMpAeV11hcQehwV7wAAAAs"]
[Thu Apr 02 15:04:05.156958 2026] [:error] [pid 23927:tid 23932] [client 194.247.173.99:54180] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ac4U5UsZwqCndhl9uKA3gwAAAYM"]
[Thu Apr 02 15:04:07.836389 2026] [:error] [pid 59201:tid 59277] [client 194.247.173.99:54194] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ac4U58AC0Tw8eL6gzZ7bdgAAAIo"]
[Thu Apr 02 15:04:10.466780 2026] [:error] [pid 54384:tid 54392] [client 194.247.173.99:51560] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ac4U6tWWpaby3TVN7MeyfwAAAcY"]
[Thu Apr 02 15:04:13.180943 2026] [:error] [pid 37543:tid 37558] [client 194.247.173.99:51564] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ac4U7Xhdk2bEYJCvILaQ2QAAAU0"]
[Thu Apr 02 15:04:15.855381 2026] [:error] [pid 23927:tid 23939] [client 194.247.173.99:51570] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ac4U70sZwqCndhl9uKA3nQAAAYo"]
[Thu Apr 02 15:04:18.571967 2026] [:error] [pid 59305:tid 59315] [client 194.247.173.99:51580] [client 194.247.173.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ac4U8qr2tV4rDwKFxKftfQAAAMY"]
[Thu Apr 02 15:31:34.483806 2026] [:error] [pid 23927:tid 23931] [client 49.51.243.95:41102] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac4bVksZwqCndhl9uKBGYQAAAYI"]
[Thu Apr 02 16:20:24.739997 2026] [:error] [pid 59201:tid 59283] [client 45.61.188.43:59958] [client 45.61.188.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ac4myMAC0Tw8eL6gzZ7qKAAAAJA"]
[Thu Apr 02 16:20:25.923761 2026] [:error] [pid 59201:tid 59290] [client 45.61.188.43:59958] [client 45.61.188.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ac4mycAC0Tw8eL6gzZ7qKgAAAJc"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Thu Apr 02 18:36:05.278808 2026] [:error] [pid 54384:tid 54394] [client 43.164.196.57:54622] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac5GldWWpaby3TVN7MfwcgAAAcg"]
[Thu Apr 02 20:24:13.786787 2026] [:error] [pid 54384:tid 54404] [client 182.44.9.147:53311] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac5f7dWWpaby3TVN7McWXgAAAdI"]
[Thu Apr 02 21:28:21.687250 2026] [:error] [pid 59200:tid 59259] [client 107.189.10.248:59291] [client 107.189.10.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.10.248, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ac5u9bfP26txrdLs3EqFrwAAAFM"]
[Thu Apr 02 21:28:22.906139 2026] [:error] [pid 59200:tid 59253] [client 107.189.10.248:59291] [client 107.189.10.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.10.248, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ac5u9rfP26txrdLs3EqFsAAAAE0"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Thu Apr 02 21:34:11.554899 2026] [:error] [pid 23927:tid 23950] [client 108.61.188.214:50656] [client 108.61.188.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "ac5wU0sZwqCndhl9uKDV2QAAAZU"]
[Thu Apr 02 23:38:58.214728 2026] [:error] [pid 54384:tid 54410] [client 39.39.162.221:57528] [client 39.39.162.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.39.162.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ac6NktWWpaby3TVN7MdTHwAAAdg"]
[Fri Apr 03 00:38:13.084344 2026] [:error] [pid 25470:tid 25489] [client 39.39.162.221:51286] [client 39.39.162.221] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac6bdXhROcck6_9HYyjZXgAAANE"]
[Fri Apr 03 00:39:51.736119 2026] [:error] [pid 25010:tid 25347] [client 39.39.162.221:52672] [client 39.39.162.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.39.162.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ac6b14_KcjFQF5TuqTV8JQAAAAA"]
[Fri Apr 03 01:23:01.106284 2026] [:error] [pid 25470:tid 25475] [client 216.24.210.242:62073] [client 216.24.210.242] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac6l9XhROcck6_9HYygLCgAAAMM"]
[Fri Apr 03 03:07:42.658475 2026] [:error] [pid 7029:tid 7043] [client 49.7.227.204:38858] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac6-fgXgjNoKcFYPs7jwRQAAA0o"]
[Fri Apr 03 06:51:30.202470 2026] [:error] [pid 33445:tid 33465] [client 20.240.235.228:16206] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7y8llRNZ0iDVmJWM2NIgAAAA8"]
[Fri Apr 03 06:51:30.733061 2026] [:error] [pid 35469:tid 35480] [client 20.240.235.228:16159] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7y8qGvTIc8-wY3jUQb8gAAAQk"]
[Fri Apr 03 06:51:31.852416 2026] [:error] [pid 33446:tid 33492] [client 20.240.235.228:16254] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7y89g3dCqFYIIdw0oZ4QAAAE8"]
[Fri Apr 03 06:51:32.389727 2026] [:error] [pid 35469:tid 35485] [client 20.240.235.228:16129] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7y9KGvTIc8-wY3jUQb9QAAAQ4"]
[Fri Apr 03 06:51:32.921742 2026] [:error] [pid 35469:tid 35495] [client 20.240.235.228:16247] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7y9KGvTIc8-wY3jUQb-AAAARg"]
[Fri Apr 03 06:51:33.483805 2026] [:error] [pid 35469:tid 35494] [client 20.240.235.228:16198] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7y9aGvTIc8-wY3jUQb-QAAARc"]
[Fri Apr 03 06:51:34.027951 2026] [:error] [pid 33542:tid 33568] [client 20.240.235.228:16128] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7y9nwb6uB1LaGtepYGhgAAANc"]
[Fri Apr 03 06:51:34.561647 2026] [:error] [pid 33447:tid 33509] [client 20.240.235.228:16207] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7y9kgaPmDHz92j4lOTjAAAAIU"]
[Fri Apr 03 06:51:35.116915 2026] [:error] [pid 35469:tid 35472] [client 20.240.235.228:16133] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7y96GvTIc8-wY3jUQb_QAAAQE"]
[Fri Apr 03 06:51:35.660008 2026] [:error] [pid 35469:tid 35488] [client 20.240.235.228:16194] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7y96GvTIc8-wY3jUQcAAAAARE"]
[Fri Apr 03 06:51:36.186508 2026] [:error] [pid 35469:tid 35493] [client 20.240.235.228:16154] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7y-KGvTIc8-wY3jUQcAgAAARY"]
[Fri Apr 03 06:51:36.739375 2026] [:error] [pid 35469:tid 35474] [client 20.240.235.228:16140] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7y-KGvTIc8-wY3jUQcBgAAAQM"]
[Fri Apr 03 06:51:37.266636 2026] [:error] [pid 33542:tid 33551] [client 20.240.235.228:16202] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ac7y-Xwb6uB1LaGtepYGjAAAAMY"]
[Fri Apr 03 06:51:38.388813 2026] [:error] [pid 35469:tid 35476] [client 20.240.235.228:16162] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ac7y-qGvTIc8-wY3jUQcCAAAAQU"]
[Fri Apr 03 06:51:38.943437 2026] [:error] [pid 33445:tid 33471] [client 20.240.235.228:16150] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ac7y-llRNZ0iDVmJWM2NJwAAABU"]
[Fri Apr 03 06:51:39.493349 2026] [:error] [pid 33446:tid 33484] [client 20.240.235.228:16255] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ac7y-9g3dCqFYIIdw0oZ5wAAAEc"]
[Fri Apr 03 06:51:40.049262 2026] [:error] [pid 35469:tid 35478] [client 20.240.235.228:16223] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "ac7y_KGvTIc8-wY3jUQcDQAAAQc"]
[Fri Apr 03 06:51:40.590320 2026] [:error] [pid 35469:tid 35495] [client 20.240.235.228:16130] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "ac7y_KGvTIc8-wY3jUQcDwAAARg"]
[Fri Apr 03 06:51:41.123971 2026] [:error] [pid 33445:tid 33455] [client 20.240.235.228:16220] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "ac7y_VlRNZ0iDVmJWM2NKQAAAAU"]
[Fri Apr 03 06:51:41.651659 2026] [:error] [pid 33447:tid 33504] [client 20.240.235.228:16252] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1.php"] [unique_id "ac7y_UgaPmDHz92j4lOTkQAAAIA"]
[Fri Apr 03 06:51:42.218832 2026] [:error] [pid 35469:tid 35481] [client 20.240.235.228:16197] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta0ol.php"] [unique_id "ac7y_qGvTIc8-wY3jUQcEQAAAQo"]
[Fri Apr 03 06:51:42.743339 2026] [:error] [pid 33447:tid 33523] [client 20.240.235.228:16237] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta0ol.php"] [unique_id "ac7y_kgaPmDHz92j4lOTkgAAAJM"]
[Fri Apr 03 06:51:43.288035 2026] [:error] [pid 33445:tid 33472] [client 20.240.235.228:16215] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta0ol.php"] [unique_id "ac7y_1lRNZ0iDVmJWM2NKgAAABY"]
[Fri Apr 03 06:51:43.824381 2026] [:error] [pid 35469:tid 35479] [client 20.240.235.228:16135] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta0ol.php"] [unique_id "ac7y_6GvTIc8-wY3jUQcHQAAAQg"]
[Fri Apr 03 06:51:44.374000 2026] [:error] [pid 35469:tid 35474] [client 20.240.235.228:16147] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "ac7zAKGvTIc8-wY3jUQcHwAAAQM"]
[Fri Apr 03 06:51:44.900045 2026] [:error] [pid 35469:tid 35483] [client 20.240.235.228:3016] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "ac7zAKGvTIc8-wY3jUQcIQAAAQw"]
[Fri Apr 03 06:51:45.474153 2026] [:error] [pid 33542:tid 33569] [client 20.240.235.228:16225] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "ac7zAXwb6uB1LaGtepYGkQAAANg"]
[Fri Apr 03 06:51:46.002962 2026] [:error] [pid 33542:tid 33546] [client 20.240.235.228:16236] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t00l.php"] [unique_id "ac7zAnwb6uB1LaGtepYGkgAAAME"]
[Fri Apr 03 06:51:46.606586 2026] [:error] [pid 33445:tid 33461] [client 20.240.235.228:3041] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "ac7zAllRNZ0iDVmJWM2NLAAAAAs"]
[Fri Apr 03 06:51:47.138439 2026] [:error] [pid 33447:tid 33509] [client 20.240.235.228:16157] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "ac7zA0gaPmDHz92j4lOTlAAAAIU"]
[Fri Apr 03 06:51:47.688598 2026] [:error] [pid 33445:tid 33456] [client 20.240.235.228:16226] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "ac7zA1lRNZ0iDVmJWM2NLgAAAAY"]
[Fri Apr 03 06:51:48.215933 2026] [:error] [pid 35469:tid 35481] [client 20.240.235.228:16155] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/24.php"] [unique_id "ac7zBKGvTIc8-wY3jUQcLQAAAQo"]
[Fri Apr 03 06:51:49.759671 2026] [:error] [pid 33542:tid 33562] [client 20.240.235.228:16178] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "ac7zBXwb6uB1LaGtepYGmQAAANE"]
[Fri Apr 03 06:51:50.312100 2026] [:error] [pid 35469:tid 35484] [client 20.240.235.228:16131] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "ac7zBqGvTIc8-wY3jUQcQgAAAQ0"]
[Fri Apr 03 06:51:50.837176 2026] [:error] [pid 35469:tid 35482] [client 20.240.235.228:16151] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "ac7zBqGvTIc8-wY3jUQcRgAAAQs"]
[Fri Apr 03 06:51:51.363878 2026] [:error] [pid 35469:tid 35475] [client 20.240.235.228:16143] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "ac7zB6GvTIc8-wY3jUQcTQAAAQQ"]
[Fri Apr 03 06:51:51.896368 2026] [:error] [pid 33447:tid 33508] [client 20.240.235.228:16203] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "ac7zB0gaPmDHz92j4lOTmgAAAIQ"]
[Fri Apr 03 06:51:52.424133 2026] [:error] [pid 33447:tid 33507] [client 20.240.235.228:16156] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "ac7zCEgaPmDHz92j4lOTnQAAAIM"]
[Fri Apr 03 06:51:52.957481 2026] [:error] [pid 33542:tid 33549] [client 20.240.235.228:16187] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "ac7zCHwb6uB1LaGtepYGpgAAAMQ"]
[Fri Apr 03 06:51:53.493760 2026] [:error] [pid 35469:tid 35492] [client 20.240.235.228:16222] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "ac7zCaGvTIc8-wY3jUQcXAAAARU"]
[Fri Apr 03 06:51:54.028098 2026] [:error] [pid 33445:tid 33462] [client 20.240.235.228:16205] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyiiz.php"] [unique_id "ac7zCllRNZ0iDVmJWM2NNwAAAAw"]
[Fri Apr 03 06:51:54.565837 2026] [:error] [pid 35469:tid 35478] [client 20.240.235.228:16183] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyiiz.php"] [unique_id "ac7zCqGvTIc8-wY3jUQcZwAAAQc"]
[Fri Apr 03 06:51:55.131422 2026] [:error] [pid 35469:tid 35487] [client 20.240.235.228:16209] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyiiz.php"] [unique_id "ac7zC6GvTIc8-wY3jUQccAAAARA"]
[Fri Apr 03 06:51:55.657323 2026] [:error] [pid 33542:tid 33545] [client 20.240.235.228:16244] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyiiz.php"] [unique_id "ac7zC3wb6uB1LaGtepYGrAAAAMA"]
[Fri Apr 03 06:51:56.216753 2026] [:error] [pid 33542:tid 33552] [client 20.240.235.228:3010] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/app.php"] [unique_id "ac7zDHwb6uB1LaGtepYGrwAAAMc"]
[Fri Apr 03 06:51:56.775955 2026] [:error] [pid 33542:tid 33560] [client 20.240.235.228:16201] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/max.php"] [unique_id "ac7zDHwb6uB1LaGtepYGsgAAAM8"]
[Fri Apr 03 06:51:58.311992 2026] [:error] [pid 33542:tid 33558] [client 20.240.235.228:16137] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/max.php"] [unique_id "ac7zDnwb6uB1LaGtepYGuwAAAM0"]
[Fri Apr 03 06:51:58.836884 2026] [:error] [pid 33445:tid 33468] [client 20.240.235.228:16219] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/max.php"] [unique_id "ac7zDllRNZ0iDVmJWM2NRAAAABI"]
[Fri Apr 03 06:51:59.393910 2026] [:error] [pid 33446:tid 33485] [client 20.240.235.228:3028] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "ac7zD9g3dCqFYIIdw0oZ_wAAAEg"]
[Fri Apr 03 06:51:59.928336 2026] [:error] [pid 35469:tid 35486] [client 20.240.235.228:3009] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "ac7zD6GvTIc8-wY3jUQcjgAAAQ8"]
[Fri Apr 03 06:52:00.452705 2026] [:error] [pid 35469:tid 35480] [client 20.240.235.228:16136] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "ac7zEKGvTIc8-wY3jUQcogAAAQk"]
[Fri Apr 03 06:52:00.982560 2026] [:error] [pid 35469:tid 35492] [client 20.240.235.228:16217] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "ac7zEKGvTIc8-wY3jUQc0AAAARU"]
[Fri Apr 03 06:52:01.511837 2026] [:error] [pid 33542:tid 33556] [client 20.240.235.228:16234] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7zEXwb6uB1LaGtepYG7AAAAMs"]
[Fri Apr 03 06:52:02.054408 2026] [:error] [pid 35469:tid 35474] [client 20.240.235.228:16182] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7zEqGvTIc8-wY3jUQc7wAAAQM"]
[Fri Apr 03 06:52:02.579260 2026] [:error] [pid 33445:tid 33453] [client 20.240.235.228:16238] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7zEllRNZ0iDVmJWM2NSQAAAAM"]
[Fri Apr 03 06:52:03.110667 2026] [:error] [pid 35469:tid 35490] [client 20.240.235.228:16210] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac7zE6GvTIc8-wY3jUQdAAAAARM"]
[Fri Apr 03 06:52:03.635815 2026] [:error] [pid 35469:tid 35475] [client 20.240.235.228:3061] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "ac7zE6GvTIc8-wY3jUQdDAAAAQQ"]
[Fri Apr 03 06:52:04.201958 2026] [:error] [pid 35469:tid 35476] [client 20.240.235.228:16148] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "ac7zFKGvTIc8-wY3jUQdEAAAAQU"]
[Fri Apr 03 06:52:04.751115 2026] [:error] [pid 35469:tid 35473] [client 20.240.235.228:3025] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "ac7zFKGvTIc8-wY3jUQdFgAAAQI"]
[Fri Apr 03 06:52:05.902513 2026] [:error] [pid 33542:tid 33559] [client 20.240.235.228:16193] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "ac7zFXwb6uB1LaGtepYG9AAAAM4"]
[Fri Apr 03 06:52:06.430574 2026] [:error] [pid 35469:tid 35478] [client 20.240.235.228:16251] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/index.php"] [unique_id "ac7zFqGvTIc8-wY3jUQdHgAAAQc"]
[Fri Apr 03 06:52:06.987925 2026] [:error] [pid 35469:tid 35481] [client 20.240.235.228:3060] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/index.php"] [unique_id "ac7zFqGvTIc8-wY3jUQdIAAAAQo"]
[Fri Apr 03 06:52:07.528754 2026] [:error] [pid 35469:tid 35487] [client 20.240.235.228:16145] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/index.php"] [unique_id "ac7zF6GvTIc8-wY3jUQdIQAAARA"]
[Fri Apr 03 06:52:08.083450 2026] [:error] [pid 33446:tid 33492] [client 20.240.235.228:16253] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/index.php"] [unique_id "ac7zGNg3dCqFYIIdw0oaLwAAAE8"]
[Fri Apr 03 06:52:08.621858 2026] [:error] [pid 33542:tid 33546] [client 20.240.235.228:16211] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "ac7zGHwb6uB1LaGtepYG-QAAAME"]
[Fri Apr 03 06:52:09.741035 2026] [:error] [pid 35469:tid 35477] [client 20.240.235.228:16169] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "ac7zGaGvTIc8-wY3jUQdKQAAAQY"]
[Fri Apr 03 06:52:10.268181 2026] [:error] [pid 33542:tid 33569] [client 20.240.235.228:3020] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "ac7zGnwb6uB1LaGtepYG_QAAANg"]
[Fri Apr 03 06:52:10.815486 2026] [:error] [pid 35469:tid 35492] [client 20.240.235.228:16174] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "ac7zGqGvTIc8-wY3jUQdLgAAARU"]
[Fri Apr 03 06:52:11.346974 2026] [:error] [pid 35469:tid 35476] [client 20.240.235.228:16179] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "ac7zG6GvTIc8-wY3jUQdMwAAAQU"]
[Fri Apr 03 06:52:11.884186 2026] [:error] [pid 35469:tid 35480] [client 20.240.235.228:16189] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "ac7zG6GvTIc8-wY3jUQdNwAAAQk"]
[Fri Apr 03 06:52:12.409315 2026] [:error] [pid 33445:tid 33460] [client 20.240.235.228:16227] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "ac7zHFlRNZ0iDVmJWM2NUgAAAAo"]
[Fri Apr 03 06:52:14.766122 2026] [:error] [pid 33445:tid 33466] [client 20.240.235.228:16212] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0.php"] [unique_id "ac7zHllRNZ0iDVmJWM2NVQAAABA"]
[Fri Apr 03 06:52:15.326011 2026] [:error] [pid 35469:tid 35475] [client 20.240.235.228:16204] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "ac7zH6GvTIc8-wY3jUQdQwAAAQQ"]
[Fri Apr 03 06:52:15.863893 2026] [:error] [pid 35469:tid 35483] [client 20.240.235.228:3047] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "ac7zH6GvTIc8-wY3jUQdRgAAAQw"]
[Fri Apr 03 06:52:16.397094 2026] [:error] [pid 33542:tid 33565] [client 20.240.235.228:16146] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "ac7zIHwb6uB1LaGtepYHAAAAANQ"]
[Fri Apr 03 06:52:16.948854 2026] [:error] [pid 35469:tid 35495] [client 20.240.235.228:16208] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "ac7zIKGvTIc8-wY3jUQdTgAAARg"]
[Fri Apr 03 06:52:17.480993 2026] [:error] [pid 35469:tid 35490] [client 20.240.235.228:16181] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "ac7zIaGvTIc8-wY3jUQdTwAAARM"]
[Fri Apr 03 06:52:18.021876 2026] [:error] [pid 33445:tid 33472] [client 20.240.235.228:16185] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "ac7zIllRNZ0iDVmJWM2NWQAAABY"]
[Fri Apr 03 06:52:18.554708 2026] [:error] [pid 33542:tid 33551] [client 20.240.235.228:16195] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "ac7zInwb6uB1LaGtepYHAgAAAMY"]
[Fri Apr 03 06:52:19.094279 2026] [:error] [pid 35469:tid 35475] [client 20.240.235.228:16142] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "ac7zI6GvTIc8-wY3jUQdWAAAAQQ"]
[Fri Apr 03 06:52:19.623492 2026] [:error] [pid 35469:tid 35490] [client 20.240.235.228:16163] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "ac7zI6GvTIc8-wY3jUQdWgAAARM"]
[Fri Apr 03 06:52:20.154582 2026] [:error] [pid 33542:tid 33564] [client 20.240.235.228:16229] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "ac7zJHwb6uB1LaGtepYHAwAAANM"]
[Fri Apr 03 06:52:20.686139 2026] [:error] [pid 33445:tid 33461] [client 20.240.235.228:16144] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "ac7zJFlRNZ0iDVmJWM2NWgAAAAs"]
[Fri Apr 03 06:52:21.212487 2026] [:error] [pid 35469:tid 35488] [client 20.240.235.228:3019] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "ac7zJaGvTIc8-wY3jUQdYQAAARE"]
[Fri Apr 03 06:52:21.766057 2026] [:error] [pid 35469:tid 35474] [client 20.240.235.228:16190] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ac7zJaGvTIc8-wY3jUQdZQAAAQM"]
[Fri Apr 03 06:52:22.294454 2026] [:error] [pid 35469:tid 35490] [client 20.240.235.228:2955] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ac7zJqGvTIc8-wY3jUQdZwAAARM"]
[Fri Apr 03 06:52:22.874289 2026] [:error] [pid 35469:tid 35476] [client 20.240.235.228:16221] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ac7zJqGvTIc8-wY3jUQdagAAAQU"]
[Fri Apr 03 06:52:23.414784 2026] [:error] [pid 35469:tid 35471] [client 20.240.235.228:16176] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ac7zJ6GvTIc8-wY3jUQdcAAAAQA"]
[Fri Apr 03 06:52:24.561333 2026] [:error] [pid 35469:tid 35495] [client 20.240.235.228:16141] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwq13.php"] [unique_id "ac7zKKGvTIc8-wY3jUQddwAAARg"]
[Fri Apr 03 06:52:25.112625 2026] [:error] [pid 33542:tid 33547] [client 20.240.235.228:16248] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwq13.php"] [unique_id "ac7zKXwb6uB1LaGtepYHCQAAAMI"]
[Fri Apr 03 06:52:25.643001 2026] [:error] [pid 33445:tid 33463] [client 20.240.235.228:16239] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwq13.php"] [unique_id "ac7zKVlRNZ0iDVmJWM2NWwAAAA0"]
[Fri Apr 03 06:52:26.174834 2026] [:error] [pid 35469:tid 35490] [client 20.240.235.228:16160] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwq13.php"] [unique_id "ac7zKqGvTIc8-wY3jUQdfAAAARM"]
[Fri Apr 03 06:52:27.704761 2026] [:error] [pid 33447:tid 33513] [client 20.240.235.228:16152] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aapig.php"] [unique_id "ac7zK0gaPmDHz92j4lOTtAAAAIk"]
[Fri Apr 03 06:52:28.248035 2026] [:error] [pid 35469:tid 35483] [client 20.240.235.228:16224] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aapig.php"] [unique_id "ac7zLKGvTIc8-wY3jUQdgAAAAQw"]
[Fri Apr 03 06:52:28.871106 2026] [:error] [pid 33542:tid 33564] [client 20.240.235.228:16231] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aapig.php"] [unique_id "ac7zLHwb6uB1LaGtepYHEAAAANM"]
[Fri Apr 03 06:52:42.293197 2026] [:error] [pid 33542:tid 33567] [client 20.240.235.228:3024] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7zOnwb6uB1LaGtepYHLwAAANY"]
[Fri Apr 03 06:52:42.832706 2026] [:error] [pid 33445:tid 33460] [client 20.240.235.228:16138] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7zOllRNZ0iDVmJWM2NbwAAAAo"]
[Fri Apr 03 06:52:43.367690 2026] [:error] [pid 33445:tid 33457] [client 20.240.235.228:16241] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7zO1lRNZ0iDVmJWM2NcAAAAAc"]
[Fri Apr 03 06:52:43.898031 2026] [:error] [pid 33542:tid 33555] [client 20.240.235.228:3039] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "ac7zO3wb6uB1LaGtepYHMQAAAMo"]
[Fri Apr 03 06:52:45.024217 2026] [:error] [pid 35469:tid 35488] [client 20.240.235.228:2896] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "ac7zPaGvTIc8-wY3jUQdmAAAARE"]
[Fri Apr 03 06:52:45.554801 2026] [:error] [pid 35469:tid 35482] [client 20.240.235.228:2947] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "ac7zPaGvTIc8-wY3jUQdmgAAAQs"]
[Fri Apr 03 06:52:46.081786 2026] [:error] [pid 33445:tid 33450] [client 20.240.235.228:16216] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "ac7zPllRNZ0iDVmJWM2NdgAAAAA"]
[Fri Apr 03 06:52:47.611665 2026] [:error] [pid 33447:tid 33508] [client 20.240.235.228:16172] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "ac7zP0gaPmDHz92j4lOT0gAAAIQ"]
[Fri Apr 03 06:52:48.147732 2026] [:error] [pid 35469:tid 35489] [client 20.240.235.228:16235] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/com.php"] [unique_id "ac7zQKGvTIc8-wY3jUQdpAAAARI"]
[Fri Apr 03 06:52:48.675400 2026] [:error] [pid 33542:tid 33562] [client 20.240.235.228:16213] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/com.php"] [unique_id "ac7zQHwb6uB1LaGtepYHTAAAANE"]
[Fri Apr 03 06:52:49.216136 2026] [:error] [pid 33542:tid 33560] [client 20.240.235.228:16245] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/com.php"] [unique_id "ac7zQXwb6uB1LaGtepYHUgAAAM8"]
[Fri Apr 03 06:52:49.772250 2026] [:error] [pid 33542:tid 33563] [client 20.240.235.228:3031] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/com.php"] [unique_id "ac7zQXwb6uB1LaGtepYHXQAAANI"]
[Fri Apr 03 06:52:50.303811 2026] [:error] [pid 33542:tid 33568] [client 20.240.235.228:16233] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "ac7zQnwb6uB1LaGtepYHZgAAANc"]
[Fri Apr 03 06:52:50.864016 2026] [:error] [pid 33542:tid 33561] [client 20.240.235.228:16149] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "ac7zQnwb6uB1LaGtepYHbwAAANA"]
[Fri Apr 03 06:52:51.415522 2026] [:error] [pid 33447:tid 33516] [client 20.240.235.228:3026] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "ac7zQ0gaPmDHz92j4lOT1wAAAIw"]
[Fri Apr 03 06:52:51.973500 2026] [:error] [pid 33447:tid 33513] [client 20.240.235.228:2974] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "ac7zQ0gaPmDHz92j4lOT2AAAAIk"]
[Fri Apr 03 06:52:52.503839 2026] [:error] [pid 33542:tid 33568] [client 20.240.235.228:16199] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wander.php"] [unique_id "ac7zRHwb6uB1LaGtepYHdgAAANc"]
[Fri Apr 03 06:52:53.050160 2026] [:error] [pid 33445:tid 33466] [client 20.240.235.228:3046] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wander.php"] [unique_id "ac7zRVlRNZ0iDVmJWM2OIQAAABA"]
[Fri Apr 03 06:52:53.590193 2026] [:error] [pid 35469:tid 35487] [client 20.240.235.228:16228] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wander.php"] [unique_id "ac7zRaGvTIc8-wY3jUQdsAAAARA"]
[Fri Apr 03 06:52:54.123340 2026] [:error] [pid 35469:tid 35480] [client 20.240.235.228:16232] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wander.php"] [unique_id "ac7zRqGvTIc8-wY3jUQdsgAAAQk"]
[Fri Apr 03 06:52:54.658506 2026] [:error] [pid 35469:tid 35477] [client 20.240.235.228:3022] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "ac7zRqGvTIc8-wY3jUQdtAAAAQY"]
[Fri Apr 03 06:52:55.184843 2026] [:error] [pid 33446:tid 33491] [client 20.240.235.228:2962] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "ac7zR9g3dCqFYIIdw0oaUAAAAE4"]
[Fri Apr 03 06:52:55.725967 2026] [:error] [pid 33447:tid 33511] [client 20.240.235.228:16192] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "ac7zR0gaPmDHz92j4lOT3wAAAIc"]
[Fri Apr 03 06:52:56.276499 2026] [:error] [pid 33447:tid 33508] [client 20.240.235.228:3011] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "ac7zSEgaPmDHz92j4lOT4AAAAIQ"]
[Fri Apr 03 06:52:56.834515 2026] [:error] [pid 35469:tid 35473] [client 20.240.235.228:16250] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7zSKGvTIc8-wY3jUQdwAAAAQI"]
[Fri Apr 03 06:52:57.381365 2026] [:error] [pid 35469:tid 35494] [client 20.240.235.228:16171] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7zSaGvTIc8-wY3jUQdxQAAARc"]
[Fri Apr 03 06:52:57.937677 2026] [:error] [pid 35469:tid 35483] [client 20.240.235.228:3030] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7zSaGvTIc8-wY3jUQdyQAAAQw"]
[Fri Apr 03 06:52:58.466653 2026] [:error] [pid 35469:tid 35495] [client 20.240.235.228:16134] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7zSqGvTIc8-wY3jUQdzAAAARg"]
[Fri Apr 03 06:52:59.010997 2026] [:error] [pid 33445:tid 33468] [client 20.240.235.228:3027] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "ac7zS1lRNZ0iDVmJWM2OIwAAABI"]
[Fri Apr 03 06:52:59.548436 2026] [:error] [pid 33446:tid 33478] [client 20.240.235.228:16230] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "ac7zS9g3dCqFYIIdw0oaVwAAAEE"]
[Fri Apr 03 06:53:00.116172 2026] [:error] [pid 33447:tid 33505] [client 20.240.235.228:16165] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "ac7zTEgaPmDHz92j4lOT4wAAAIE"]
[Fri Apr 03 06:53:00.653628 2026] [:error] [pid 33542:tid 33569] [client 20.240.235.228:3027] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "ac7zTHwb6uB1LaGtepYHfAAAANg"]
[Fri Apr 03 06:53:01.186348 2026] [:error] [pid 33445:tid 33463] [client 20.240.235.228:3059] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "ac7zTVlRNZ0iDVmJWM2OJgAAAA0"]
[Fri Apr 03 06:53:01.752290 2026] [:error] [pid 35469:tid 35495] [client 20.240.235.228:16177] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "ac7zTaGvTIc8-wY3jUQd1QAAARg"]
[Fri Apr 03 06:53:02.284490 2026] [:error] [pid 33447:tid 33517] [client 20.240.235.228:2960] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "ac7zTkgaPmDHz92j4lOT6AAAAI0"]
[Fri Apr 03 06:53:02.820205 2026] [:error] [pid 35469:tid 35471] [client 20.240.235.228:3051] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "ac7zTqGvTIc8-wY3jUQd2gAAAQA"]
[Fri Apr 03 06:53:03.378039 2026] [:error] [pid 35469:tid 35479] [client 20.240.235.228:16186] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "ac7zT6GvTIc8-wY3jUQd2wAAAQg"]
[Fri Apr 03 06:53:03.915450 2026] [:error] [pid 35469:tid 35477] [client 20.240.235.228:16202] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "ac7zT6GvTIc8-wY3jUQd3QAAAQY"]
[Fri Apr 03 06:53:04.455587 2026] [:error] [pid 33447:tid 33522] [client 20.240.235.228:16175] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "ac7zUEgaPmDHz92j4lOT6QAAAJI"]
[Fri Apr 03 06:53:05.004195 2026] [:error] [pid 35469:tid 35476] [client 20.240.235.228:16240] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/to.php"] [unique_id "ac7zUaGvTIc8-wY3jUQd4wAAAQU"]
[Fri Apr 03 06:53:05.543610 2026] [:error] [pid 33445:tid 33452] [client 20.240.235.228:16249] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wqqs.php"] [unique_id "ac7zUVlRNZ0iDVmJWM2OLQAAAAI"]
[Fri Apr 03 06:53:06.069928 2026] [:error] [pid 33445:tid 33451] [client 20.240.235.228:3018] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wqqs.php"] [unique_id "ac7zUllRNZ0iDVmJWM2OLgAAAAE"]
[Fri Apr 03 06:53:07.194477 2026] [:error] [pid 33447:tid 33521] [client 20.240.235.228:3044] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wqqs.php"] [unique_id "ac7zU0gaPmDHz92j4lOT7AAAAJE"]
[Fri Apr 03 06:53:07.720199 2026] [:error] [pid 33446:tid 33490] [client 20.240.235.228:2948] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wqqs.php"] [unique_id "ac7zU9g3dCqFYIIdw0oaXAAAAE0"]
[Fri Apr 03 06:53:08.261837 2026] [:error] [pid 33447:tid 33504] [client 20.240.235.228:3058] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "ac7zVEgaPmDHz92j4lOT8AAAAIA"]
[Fri Apr 03 06:53:08.804055 2026] [:error] [pid 33542:tid 33565] [client 20.240.235.228:3052] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "ac7zVHwb6uB1LaGtepYHgwAAANQ"]
[Fri Apr 03 06:53:09.331943 2026] [:error] [pid 33447:tid 33526] [client 20.240.235.228:3034] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "ac7zVUgaPmDHz92j4lOT8wAAAJY"]
[Fri Apr 03 06:53:09.876521 2026] [:error] [pid 33447:tid 33511] [client 20.240.235.228:16132] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "ac7zVUgaPmDHz92j4lOT9QAAAIc"]
[Fri Apr 03 06:53:10.408828 2026] [:error] [pid 33446:tid 33482] [client 20.240.235.228:16214] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "ac7zVtg3dCqFYIIdw0oaYAAAAEU"]
[Fri Apr 03 06:53:10.978759 2026] [:error] [pid 33447:tid 33512] [client 20.240.235.228:2984] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "ac7zVkgaPmDHz92j4lOT-AAAAIg"]
[Fri Apr 03 06:53:11.527818 2026] [:error] [pid 33446:tid 33500] [client 20.240.235.228:3021] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "ac7zV9g3dCqFYIIdw0oaYwAAAFc"]
[Fri Apr 03 06:53:12.069628 2026] [:error] [pid 35469:tid 35485] [client 20.240.235.228:3015] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "ac7zWKGvTIc8-wY3jUQd6wAAAQ4"]
[Fri Apr 03 06:53:12.609369 2026] [:error] [pid 33542:tid 33563] [client 20.240.235.228:16139] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aifa.php"] [unique_id "ac7zWHwb6uB1LaGtepYHjAAAANI"]
[Fri Apr 03 06:53:13.138661 2026] [:error] [pid 35469:tid 35481] [client 20.240.235.228:2965] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aifa.php"] [unique_id "ac7zWaGvTIc8-wY3jUQd7wAAAQo"]
[Fri Apr 03 06:53:13.676292 2026] [:error] [pid 33542:tid 33554] [client 20.240.235.228:16188] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aifa.php"] [unique_id "ac7zWXwb6uB1LaGtepYHjgAAAMk"]
[Fri Apr 03 06:53:14.234423 2026] [:error] [pid 33542:tid 33550] [client 20.240.235.228:3033] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aifa.php"] [unique_id "ac7zWnwb6uB1LaGtepYHkAAAAMU"]
[Fri Apr 03 06:53:14.769189 2026] [:error] [pid 33445:tid 33467] [client 20.240.235.228:2958] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "ac7zWllRNZ0iDVmJWM2OPAAAABE"]
[Fri Apr 03 06:53:15.337392 2026] [:error] [pid 33446:tid 33483] [client 20.240.235.228:3040] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "ac7zW9g3dCqFYIIdw0oaZgAAAEY"]
[Fri Apr 03 06:53:15.870725 2026] [:error] [pid 33447:tid 33522] [client 20.240.235.228:3049] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "ac7zW0gaPmDHz92j4lOUAQAAAJI"]
[Fri Apr 03 06:53:17.408956 2026] [:error] [pid 33445:tid 33462] [client 20.240.235.228:16166] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "ac7zXVlRNZ0iDVmJWM2OQwAAAAw"]
[Fri Apr 03 06:53:17.960687 2026] [:error] [pid 33542:tid 33567] [client 20.240.235.228:16242] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "ac7zXXwb6uB1LaGtepYHoAAAANY"]
[Fri Apr 03 06:53:18.499685 2026] [:error] [pid 33445:tid 33460] [client 20.240.235.228:3013] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "ac7zXllRNZ0iDVmJWM2ORQAAAAo"]
[Fri Apr 03 06:53:19.025487 2026] [:error] [pid 33445:tid 33467] [client 20.240.235.228:3067] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "ac7zX1lRNZ0iDVmJWM2ORgAAABE"]
[Fri Apr 03 06:53:19.565777 2026] [:error] [pid 33447:tid 33527] [client 20.240.235.228:3004] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/feokc.php"] [unique_id "ac7zX0gaPmDHz92j4lOUDAAAAJc"]
[Fri Apr 03 06:53:20.092445 2026] [:error] [pid 33447:tid 33522] [client 20.240.235.228:3054] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "ac7zYEgaPmDHz92j4lOUDgAAAJI"]
[Fri Apr 03 06:53:20.619014 2026] [:error] [pid 33447:tid 33504] [client 20.240.235.228:2991] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "ac7zYEgaPmDHz92j4lOUEAAAAIA"]
[Fri Apr 03 06:53:21.144550 2026] [:error] [pid 33542:tid 33558] [client 20.240.235.228:16158] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "ac7zYXwb6uB1LaGtepYHpAAAAM0"]
[Fri Apr 03 06:53:21.671412 2026] [:error] [pid 35469:tid 35471] [client 20.240.235.228:16167] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "ac7zYaGvTIc8-wY3jUQd9AAAAQA"]
[Fri Apr 03 06:53:22.217662 2026] [:error] [pid 33445:tid 33453] [client 20.240.235.228:2959] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "ac7zYllRNZ0iDVmJWM2OSgAAAAM"]
[Fri Apr 03 06:53:22.763862 2026] [:error] [pid 33446:tid 33487] [client 20.240.235.228:3053] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "ac7zYtg3dCqFYIIdw0oaawAAAEo"]
[Fri Apr 03 06:53:23.297611 2026] [:error] [pid 33446:tid 33486] [client 20.240.235.228:2988] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "ac7zY9g3dCqFYIIdw0oabAAAAEk"]
[Fri Apr 03 06:53:24.836654 2026] [:error] [pid 33446:tid 33492] [client 20.240.235.228:3055] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "ac7zZNg3dCqFYIIdw0oacAAAAE8"]
[Fri Apr 03 06:53:25.366154 2026] [:error] [pid 33445:tid 33468] [client 20.240.235.228:3008] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac7zZVlRNZ0iDVmJWM2OVgAAABI"]
[Fri Apr 03 06:53:25.902922 2026] [:error] [pid 33445:tid 33463] [client 20.240.235.228:2961] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac7zZVlRNZ0iDVmJWM2OWgAAAA0"]
[Fri Apr 03 06:53:26.430053 2026] [:error] [pid 33445:tid 33461] [client 20.240.235.228:16218] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac7zZllRNZ0iDVmJWM2OXQAAAAs"]
[Fri Apr 03 06:53:26.967856 2026] [:error] [pid 33542:tid 33569] [client 20.240.235.228:16184] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac7zZnwb6uB1LaGtepYHpwAAANg"]
[Fri Apr 03 06:53:27.502737 2026] [:error] [pid 33542:tid 33564] [client 20.240.235.228:3045] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ac7zZ3wb6uB1LaGtepYHqgAAANM"]
[Fri Apr 03 06:53:28.054083 2026] [:error] [pid 33542:tid 33563] [client 20.240.235.228:3037] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ac7zaHwb6uB1LaGtepYHrQAAANI"]
[Fri Apr 03 06:53:28.606714 2026] [:error] [pid 33447:tid 33526] [client 20.240.235.228:3032] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ac7zaEgaPmDHz92j4lOUGQAAAJY"]
[Fri Apr 03 06:53:29.131561 2026] [:error] [pid 33445:tid 33470] [client 20.240.235.228:2963] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ac7zaVlRNZ0iDVmJWM2OZwAAABQ"]
[Fri Apr 03 06:53:29.678128 2026] [:error] [pid 33445:tid 33460] [client 20.240.235.228:3001] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "ac7zaVlRNZ0iDVmJWM2OaQAAAAo"]
[Fri Apr 03 06:53:30.203938 2026] [:error] [pid 33542:tid 33565] [client 20.240.235.228:3038] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "ac7zanwb6uB1LaGtepYHrwAAANQ"]
[Fri Apr 03 06:53:30.736535 2026] [:error] [pid 33445:tid 33455] [client 20.240.235.228:2889] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "ac7zallRNZ0iDVmJWM2ObwAAAAU"]
[Fri Apr 03 06:53:31.276349 2026] [:error] [pid 35469:tid 35482] [client 20.240.235.228:3010] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat1.php"] [unique_id "ac7za6GvTIc8-wY3jUQeCAAAAQs"]
[Fri Apr 03 06:53:31.812489 2026] [:error] [pid 33542:tid 33548] [client 20.240.235.228:3023] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "ac7za3wb6uB1LaGtepYHuwAAAMM"]
[Fri Apr 03 06:53:32.347181 2026] [:error] [pid 35469:tid 35495] [client 20.240.235.228:2973] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "ac7zbKGvTIc8-wY3jUQeDgAAARg"]
[Fri Apr 03 06:53:32.879337 2026] [:error] [pid 35469:tid 35483] [client 20.240.235.228:3066] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "ac7zbKGvTIc8-wY3jUQeEgAAAQw"]
[Fri Apr 03 06:53:33.414545 2026] [:error] [pid 35469:tid 35479] [client 20.240.235.228:2906] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cron.php"] [unique_id "ac7zbaGvTIc8-wY3jUQeFAAAAQg"]
[Fri Apr 03 06:53:33.958995 2026] [:error] [pid 33445:tid 33465] [client 20.240.235.228:3065] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "ac7zbVlRNZ0iDVmJWM2OdwAAAA8"]
[Fri Apr 03 06:53:34.493538 2026] [:error] [pid 33447:tid 33515] [client 20.240.235.228:2957] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "ac7zbkgaPmDHz92j4lOUHgAAAIs"]
[Fri Apr 03 06:53:35.056140 2026] [:error] [pid 33542:tid 33550] [client 20.240.235.228:3070] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "ac7zb3wb6uB1LaGtepYHxQAAAMU"]
[Fri Apr 03 06:53:35.590186 2026] [:error] [pid 33446:tid 33493] [client 20.240.235.228:16246] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yanz.php"] [unique_id "ac7zb9g3dCqFYIIdw0oaegAAAFA"]
[Fri Apr 03 06:53:36.170841 2026] [:error] [pid 33542:tid 33545] [client 20.240.235.228:3057] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "ac7zcHwb6uB1LaGtepYHyQAAAMA"]
[Fri Apr 03 06:53:36.701256 2026] [:error] [pid 35469:tid 35471] [client 20.240.235.228:3068] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "ac7zcKGvTIc8-wY3jUQeGgAAAQA"]
[Fri Apr 03 06:53:37.268943 2026] [:error] [pid 35469:tid 35479] [client 20.240.235.228:3050] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "ac7zcaGvTIc8-wY3jUQeHAAAAQg"]
[Fri Apr 03 06:53:37.819747 2026] [:error] [pid 33447:tid 33510] [client 20.240.235.228:3042] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "ac7zcUgaPmDHz92j4lOUIwAAAIY"]
[Fri Apr 03 06:53:38.975142 2026] [:error] [pid 35469:tid 35487] [client 20.240.235.228:3035] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/network.php"] [unique_id "ac7zcqGvTIc8-wY3jUQeJAAAARA"]
[Fri Apr 03 06:53:39.524607 2026] [:error] [pid 33542:tid 33568] [client 20.240.235.228:2977] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/network.php"] [unique_id "ac7zc3wb6uB1LaGtepYHzAAAANc"]
[Fri Apr 03 06:53:40.053230 2026] [:error] [pid 35469:tid 35481] [client 20.240.235.228:3064] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/network.php"] [unique_id "ac7zdKGvTIc8-wY3jUQeKgAAAQo"]
[Fri Apr 03 06:53:40.628134 2026] [:error] [pid 33447:tid 33526] [client 20.240.235.228:3012] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/network.php"] [unique_id "ac7zdEgaPmDHz92j4lOUJwAAAJY"]
[Fri Apr 03 06:53:43.786883 2026] [:error] [pid 33445:tid 33454] [client 20.240.235.228:2956] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac7zd1lRNZ0iDVmJWM2OhwAAAAQ"]
[Fri Apr 03 06:53:44.328757 2026] [:error] [pid 33447:tid 33511] [client 20.240.235.228:16161] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac7zeEgaPmDHz92j4lOUKgAAAIc"]
[Fri Apr 03 06:53:46.030910 2026] [:error] [pid 35469:tid 35474] [client 20.240.235.228:2975] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "ac7zeqGvTIc8-wY3jUQePAAAAQM"]
[Fri Apr 03 06:53:56.977664 2026] [:error] [pid 33445:tid 33461] [client 20.240.235.228:2893] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj.php"] [unique_id "ac7zhFlRNZ0iDVmJWM2OqgAAAAs"]
[Fri Apr 03 06:53:57.507927 2026] [:error] [pid 33542:tid 33548] [client 20.240.235.228:2892] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj.php"] [unique_id "ac7zhXwb6uB1LaGtepYIMQAAAMM"]
[Fri Apr 03 06:53:58.071370 2026] [:error] [pid 33542:tid 33560] [client 20.240.235.228:2944] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj.php"] [unique_id "ac7zhnwb6uB1LaGtepYIOQAAAM8"]
[Fri Apr 03 06:53:58.596407 2026] [:error] [pid 33446:tid 33479] [client 20.240.235.228:2982] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj.php"] [unique_id "ac7zhtg3dCqFYIIdw0oalQAAAEI"]
[Fri Apr 03 06:53:59.134669 2026] [:error] [pid 35469:tid 35480] [client 20.240.235.228:3063] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "ac7zh6GvTIc8-wY3jUQeSQAAAQk"]
[Fri Apr 03 06:53:59.671425 2026] [:error] [pid 33447:tid 33514] [client 20.240.235.228:2899] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "ac7zh0gaPmDHz92j4lOUOQAAAIo"]
[Fri Apr 03 06:54:00.202028 2026] [:error] [pid 35469:tid 35476] [client 20.240.235.228:3043] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "ac7ziKGvTIc8-wY3jUQeTgAAAQU"]
[Fri Apr 03 06:54:00.727544 2026] [:error] [pid 35469:tid 35485] [client 20.240.235.228:2972] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "ac7ziKGvTIc8-wY3jUQeUQAAAQ4"]
[Fri Apr 03 06:54:01.257329 2026] [:error] [pid 35469:tid 35473] [client 20.240.235.228:2880] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filer.php"] [unique_id "ac7ziaGvTIc8-wY3jUQeVAAAAQI"]
[Fri Apr 03 06:54:01.807855 2026] [:error] [pid 35469:tid 35486] [client 20.240.235.228:2945] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filer.php"] [unique_id "ac7ziaGvTIc8-wY3jUQeVgAAAQ8"]
[Fri Apr 03 06:54:02.955946 2026] [:error] [pid 33447:tid 33508] [client 20.240.235.228:2932] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filer.php"] [unique_id "ac7zikgaPmDHz92j4lOUQAAAAIQ"]
[Fri Apr 03 06:54:04.548204 2026] [:error] [pid 35469:tid 35474] [client 20.240.235.228:2917] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/filer.php"] [unique_id "ac7zjKGvTIc8-wY3jUQeXgAAAQM"]
[Fri Apr 03 06:54:05.074196 2026] [:error] [pid 33542:tid 33548] [client 20.240.235.228:2954] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lites.php"] [unique_id "ac7zjXwb6uB1LaGtepYIYQAAAMM"]
[Fri Apr 03 06:54:06.610520 2026] [:error] [pid 33445:tid 33468] [client 20.240.235.228:2996] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lites.php"] [unique_id "ac7zjllRNZ0iDVmJWM2OuQAAABI"]
[Fri Apr 03 06:54:07.155795 2026] [:error] [pid 35469:tid 35476] [client 20.240.235.228:2995] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lites.php"] [unique_id "ac7zj6GvTIc8-wY3jUQeaQAAAQU"]
[Fri Apr 03 06:54:07.695863 2026] [:error] [pid 35469:tid 35479] [client 20.240.235.228:2890] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lites.php"] [unique_id "ac7zj6GvTIc8-wY3jUQebAAAAQg"]
[Fri Apr 03 06:54:08.239023 2026] [:error] [pid 33446:tid 33489] [client 20.240.235.228:3056] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "ac7zkNg3dCqFYIIdw0oaoAAAAEw"]
[Fri Apr 03 06:54:08.767493 2026] [:error] [pid 33542:tid 33568] [client 20.240.235.228:2968] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "ac7zkHwb6uB1LaGtepYIaQAAANc"]
[Fri Apr 03 06:54:09.294217 2026] [:error] [pid 33446:tid 33495] [client 20.240.235.228:2909] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "ac7zkdg3dCqFYIIdw0oaoQAAAFI"]
[Fri Apr 03 06:54:09.825654 2026] [:error] [pid 33446:tid 33499] [client 20.240.235.228:2884] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "ac7zkdg3dCqFYIIdw0oapAAAAFY"]
[Fri Apr 03 06:54:10.353094 2026] [:error] [pid 33445:tid 33458] [client 20.240.235.228:3071] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/he.php"] [unique_id "ac7zkllRNZ0iDVmJWM2OvgAAAAg"]
[Fri Apr 03 06:54:10.880950 2026] [:error] [pid 33446:tid 33498] [client 20.240.235.228:2981] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/he.php"] [unique_id "ac7zktg3dCqFYIIdw0oapQAAAFU"]
[Fri Apr 03 06:54:11.427408 2026] [:error] [pid 33445:tid 33464] [client 20.240.235.228:2900] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/he.php"] [unique_id "ac7zk1lRNZ0iDVmJWM2OwQAAAA4"]
[Fri Apr 03 06:54:11.954838 2026] [:error] [pid 35469:tid 35494] [client 20.240.235.228:16173] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/he.php"] [unique_id "ac7zk6GvTIc8-wY3jUQedgAAARc"]
[Fri Apr 03 06:54:12.489858 2026] [:error] [pid 33447:tid 33521] [client 20.240.235.228:2949] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aves.php"] [unique_id "ac7zlEgaPmDHz92j4lOUZAAAAJE"]
[Fri Apr 03 06:54:13.018619 2026] [:error] [pid 33447:tid 33517] [client 20.240.235.228:2925] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aves.php"] [unique_id "ac7zlUgaPmDHz92j4lOUaQAAAI0"]
[Fri Apr 03 06:54:13.552039 2026] [:error] [pid 33446:tid 33495] [client 20.240.235.228:2951] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aves.php"] [unique_id "ac7zldg3dCqFYIIdw0oasQAAAFI"]
[Fri Apr 03 06:54:14.082537 2026] [:error] [pid 33445:tid 33466] [client 20.240.235.228:2979] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aves.php"] [unique_id "ac7zlllRNZ0iDVmJWM2OxwAAABA"]
[Fri Apr 03 06:54:14.611204 2026] [:error] [pid 33542:tid 33554] [client 20.240.235.228:2983] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gorila.php"] [unique_id "ac7zlnwb6uB1LaGtepYIbwAAAMk"]
[Fri Apr 03 06:54:15.154883 2026] [:error] [pid 35469:tid 35489] [client 20.240.235.228:16191] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gorila.php"] [unique_id "ac7zl6GvTIc8-wY3jUQefAAAARI"]
[Fri Apr 03 06:54:15.689876 2026] [:error] [pid 33542:tid 33558] [client 20.240.235.228:2950] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gorila.php"] [unique_id "ac7zl3wb6uB1LaGtepYIdgAAAM0"]
[Fri Apr 03 06:54:16.253293 2026] [:error] [pid 33542:tid 33565] [client 20.240.235.228:2914] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gorila.php"] [unique_id "ac7zmHwb6uB1LaGtepYIdwAAANQ"]
[Fri Apr 03 06:54:16.785849 2026] [:error] [pid 33445:tid 33467] [client 20.240.235.228:2993] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vanta.php"] [unique_id "ac7zmFlRNZ0iDVmJWM2OygAAABE"]
[Fri Apr 03 06:54:17.348554 2026] [:error] [pid 35469:tid 35495] [client 20.240.235.228:3006] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vanta.php"] [unique_id "ac7zmaGvTIc8-wY3jUQefgAAARg"]
[Fri Apr 03 06:54:17.885279 2026] [:error] [pid 33445:tid 33458] [client 20.240.235.228:2976] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vanta.php"] [unique_id "ac7zmVlRNZ0iDVmJWM2OywAAAAg"]
[Fri Apr 03 06:54:19.440684 2026] [:error] [pid 33542:tid 33567] [client 20.240.235.228:2885] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vanta.php"] [unique_id "ac7zm3wb6uB1LaGtepYIfwAAANY"]
[Fri Apr 03 06:54:19.975389 2026] [:error] [pid 35469:tid 35494] [client 20.240.235.228:2967] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh3ll.php"] [unique_id "ac7zm6GvTIc8-wY3jUQeigAAARc"]
[Fri Apr 03 06:54:20.507205 2026] [:error] [pid 35469:tid 35484] [client 20.240.235.228:2953] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh3ll.php"] [unique_id "ac7znKGvTIc8-wY3jUQekAAAAQ0"]
[Fri Apr 03 06:54:21.034381 2026] [:error] [pid 33447:tid 33517] [client 20.240.235.228:3007] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh3ll.php"] [unique_id "ac7znUgaPmDHz92j4lOUhwAAAI0"]
[Fri Apr 03 06:54:21.559811 2026] [:error] [pid 35469:tid 35477] [client 20.240.235.228:3005] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh3ll.php"] [unique_id "ac7znaGvTIc8-wY3jUQekwAAAQY"]
[Fri Apr 03 06:54:22.101128 2026] [:error] [pid 33446:tid 33494] [client 20.240.235.228:3048] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "ac7zntg3dCqFYIIdw0oavwAAAFE"]
[Fri Apr 03 06:54:22.626876 2026] [:error] [pid 33445:tid 33470] [client 20.240.235.228:2832] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "ac7znllRNZ0iDVmJWM2O0gAAABQ"]
[Fri Apr 03 06:54:23.160189 2026] [:error] [pid 33447:tid 33504] [client 20.240.235.228:2946] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "ac7zn0gaPmDHz92j4lOUiQAAAIA"]
[Fri Apr 03 06:54:23.686729 2026] [:error] [pid 33542:tid 33564] [client 20.240.235.228:2990] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "ac7zn3wb6uB1LaGtepYIigAAANM"]
[Fri Apr 03 08:19:23.496965 2026] [:error] [pid 33542:tid 33546] [client 217.182.194.26:55532] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ac8Hi3wb6uB1LaGtepY9-gAAAME"]
[Fri Apr 03 08:19:26.152928 2026] [:error] [pid 40533:tid 40538] [client 217.182.194.26:53714] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ac8HjvbIAA8AViDmwssgrwAAAUM"]
[Fri Apr 03 08:19:28.895918 2026] [:error] [pid 33542:tid 33554] [client 217.182.194.26:53726] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ac8HkHwb6uB1LaGtepY-CwAAAMk"]
[Fri Apr 03 08:19:31.463970 2026] [:error] [pid 33542:tid 33562] [client 217.182.194.26:53742] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ac8Hk3wb6uB1LaGtepY-FgAAANE"]
[Fri Apr 03 08:19:33.933393 2026] [:error] [pid 33542:tid 33562] [client 217.182.194.26:36212] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ac8HlXwb6uB1LaGtepY-KgAAANE"]
[Fri Apr 03 08:19:36.778816 2026] [:error] [pid 40562:tid 40580] [client 217.182.194.26:36214] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ac8HmDfFMXuP9zvqCeqQ8QAAAY8"]
[Fri Apr 03 08:19:39.524607 2026] [:error] [pid 40562:tid 40565] [client 217.182.194.26:36224] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ac8HmzfFMXuP9zvqCeqQ_gAAAYA"]
[Fri Apr 03 08:19:42.209832 2026] [:error] [pid 40533:tid 40556] [client 217.182.194.26:36226] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ac8HnvbIAA8AViDmwssg0AAAAVU"]
[Fri Apr 03 08:19:45.008170 2026] [:error] [pid 33446:tid 33489] [client 217.182.194.26:46364] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ac8Hodg3dCqFYIIdw0ozAgAAAEw"]
[Fri Apr 03 08:19:47.530517 2026] [:error] [pid 40533:tid 40550] [client 217.182.194.26:46380] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ac8Ho_bIAA8AViDmwssg7QAAAU8"]
[Fri Apr 03 08:19:50.080615 2026] [:error] [pid 33542:tid 33566] [client 217.182.194.26:46396] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ac8Hpnwb6uB1LaGtepY-ZQAAANU"]
[Fri Apr 03 08:19:52.603325 2026] [:error] [pid 40562:tid 40565] [client 217.182.194.26:46400] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ac8HqDfFMXuP9zvqCeqRIAAAAYA"]
[Fri Apr 03 08:19:55.411116 2026] [:error] [pid 33542:tid 33554] [client 217.182.194.26:37692] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ac8Hq3wb6uB1LaGtepY-aQAAAMk"]
[Fri Apr 03 08:19:57.916224 2026] [:error] [pid 35469:tid 35471] [client 217.182.194.26:37706] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ac8HraGvTIc8-wY3jUQziAAAAQA"]
[Fri Apr 03 08:20:00.514954 2026] [:error] [pid 40533:tid 40554] [client 217.182.194.26:37712] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ac8HsPbIAA8AViDmwsshHQAAAVM"]
[Fri Apr 03 08:20:03.858594 2026] [:error] [pid 33445:tid 33455] [client 217.182.194.26:40286] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ac8Hs1lRNZ0iDVmJWM2gUwAAAAU"]
[Fri Apr 03 08:20:06.604916 2026] [:error] [pid 35469:tid 35476] [client 217.182.194.26:40296] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "ac8HtqGvTIc8-wY3jUQzlAAAAQU"]
[Fri Apr 03 08:20:09.115156 2026] [:error] [pid 33542:tid 33568] [client 217.182.194.26:40308] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "ac8HuXwb6uB1LaGtepY-dgAAANc"]
[Fri Apr 03 08:20:11.740872 2026] [:error] [pid 33542:tid 33547] [client 217.182.194.26:40314] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "ac8Hu3wb6uB1LaGtepY-iAAAAMI"]
[Fri Apr 03 08:20:14.181672 2026] [:error] [pid 40533:tid 40559] [client 217.182.194.26:55198] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "ac8HvvbIAA8AViDmwsshRwAAAVg"]
[Fri Apr 03 08:20:16.822764 2026] [:error] [pid 33446:tid 33490] [client 217.182.194.26:55204] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ac8HwNg3dCqFYIIdw0ozKgAAAE0"]
[Fri Apr 03 08:20:19.445032 2026] [:error] [pid 33447:tid 33518] [client 217.182.194.26:55216] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ac8Hw0gaPmDHz92j4lOp5wAAAI4"]
[Fri Apr 03 08:20:52.939419 2026] [:error] [pid 33542:tid 33546] [client 217.182.194.26:55228] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ac8H5Hwb6uB1LaGtepY_MQAAAME"]
[Fri Apr 03 08:20:55.683008 2026] [:error] [pid 33542:tid 33551] [client 217.182.194.26:37502] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ac8H53wb6uB1LaGtepY_QQAAAMY"]
[Fri Apr 03 08:20:58.239505 2026] [:error] [pid 40533:tid 40550] [client 217.182.194.26:37514] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ac8H6vbIAA8AViDmwsshmwAAAU8"]
[Fri Apr 03 08:21:02.626334 2026] [:error] [pid 40533:tid 40553] [client 217.182.194.26:37520] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ac8H7vbIAA8AViDmwsshoQAAAVI"]
[Fri Apr 03 08:21:05.317350 2026] [:error] [pid 40562:tid 40580] [client 217.182.194.26:43240] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ac8H8TfFMXuP9zvqCeqRcgAAAY8"]
[Fri Apr 03 08:21:08.368204 2026] [:error] [pid 33445:tid 33459] [client 217.182.194.26:43248] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ac8H9FlRNZ0iDVmJWM2gmQAAAAk"]
[Fri Apr 03 08:21:10.870212 2026] [:error] [pid 35469:tid 35485] [client 217.182.194.26:43252] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ac8H9qGvTIc8-wY3jUQzyAAAAQ4"]
[Fri Apr 03 08:21:13.408149 2026] [:error] [pid 35469:tid 35494] [client 217.182.194.26:40272] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ac8H-aGvTIc8-wY3jUQz0QAAARc"]
[Fri Apr 03 08:21:16.157282 2026] [:error] [pid 33446:tid 33483] [client 217.182.194.26:40284] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ac8H_Ng3dCqFYIIdw0ozigAAAEY"]
[Fri Apr 03 08:21:18.618894 2026] [:error] [pid 40562:tid 40572] [client 217.182.194.26:40296] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ac8H_jfFMXuP9zvqCeqRiAAAAYc"]
[Fri Apr 03 08:21:21.078476 2026] [:error] [pid 33542:tid 33556] [client 217.182.194.26:40298] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ac8IAXwb6uB1LaGtepY_YQAAAMs"]
[Fri Apr 03 08:21:23.491285 2026] [:error] [pid 35469:tid 35476] [client 217.182.194.26:35290] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ac8IA6GvTIc8-wY3jUQz3gAAAQU"]
[Fri Apr 03 08:21:26.036873 2026] [:error] [pid 40562:tid 40571] [client 217.182.194.26:35296] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ac8IBjfFMXuP9zvqCeqRmAAAAYY"]
[Fri Apr 03 08:32:07.751983 2026] [:error] [pid 40533:tid 40539] [client 43.135.115.233:42648] [client 43.135.115.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac8Kh_bIAA8AViDmwsslnwAAAUQ"]
[Fri Apr 03 09:06:52.958288 2026] [:error] [pid 40562:tid 40574] [client 209.141.46.13:57923] [client 209.141.46.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.46.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ac8SrDfFMXuP9zvqCeqkXAAAAYk"]
[Fri Apr 03 09:06:54.038584 2026] [:error] [pid 40562:tid 40565] [client 209.141.46.13:57923] [client 209.141.46.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.46.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ac8SrjfFMXuP9zvqCeqkXQAAAYA"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Fri Apr 03 16:04:14.775068 2026] [:error] [pid 33542:tid 33556] [client 125.94.144.102:34969] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac90fnwb6uB1LaGtepa-9wAAAMs"]
[Fri Apr 03 16:49:43.635337 2026] [:error] [pid 35469:tid 35485] [client 117.20.28.226:59496] [client 117.20.28.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.20.28.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ac9_J6GvTIc8-wY3jUTplQAAAQ4"]
[Fri Apr 03 17:01:30.640271 2026] [:error] [pid 33542:tid 33552] [client 117.20.28.226:59313] [client 117.20.28.226] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac-B6nwb6uB1LaGtepbH8AAAAMc"]
[Fri Apr 03 17:03:08.040435 2026] [:error] [pid 55174:tid 55193] [client 117.20.28.226:59506] [client 117.20.28.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.20.28.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ac-CTJ_WKqUonPNUHYyttQAAAdE"]
[Fri Apr 03 17:19:30.753542 2026] [:error] [pid 40562:tid 40579] [client 208.109.188.137:55192] [client 208.109.188.137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac-GIjfFMXuP9zvqCeozCQAAAY4"]
[Fri Apr 03 17:19:45.805545 2026] [:error] [pid 33445:tid 33472] [client 51.195.41.174:54440] [client 51.195.41.174] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac-GMVlRNZ0iDVmJWM2MTgAAABY"]
[Fri Apr 03 17:58:17.747519 2026] [:error] [pid 33445:tid 33463] [client 51.210.178.126:59294] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "ac-POVlRNZ0iDVmJWM2pWwAAAA0"]
[Fri Apr 03 17:58:20.307649 2026] [:error] [pid 55174:tid 55176] [client 51.210.178.126:41566] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "ac-PPJ_WKqUonPNUHYy7iAAAAcA"]
[Fri Apr 03 17:58:22.789481 2026] [:error] [pid 40562:tid 40568] [client 51.210.178.126:47296] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "ac-PPjfFMXuP9zvqCeo_-gAAAYM"]
[Fri Apr 03 17:58:25.411224 2026] [:error] [pid 35469:tid 35478] [client 51.210.178.126:47304] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ac-PQaGvTIc8-wY3jUQKbAAAAQc"]
[Fri Apr 03 17:58:27.748001 2026] [:error] [pid 35469:tid 35474] [client 51.210.178.126:47306] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ac-PQ6GvTIc8-wY3jUQKcQAAAQM"]
[Fri Apr 03 17:58:30.233045 2026] [:error] [pid 40562:tid 40582] [client 51.210.178.126:47322] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ac-PRjfFMXuP9zvqCepADQAAAZE"]
[Fri Apr 03 17:58:32.646695 2026] [:error] [pid 33446:tid 33478] [client 51.210.178.126:60182] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ac-PSNg3dCqFYIIdw0rpyAAAAEE"]
[Fri Apr 03 17:58:35.014860 2026] [:error] [pid 33447:tid 33516] [client 51.210.178.126:60192] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ac-PS0gaPmDHz92j4lMaogAAAIw"]
[Fri Apr 03 17:58:37.515804 2026] [:error] [pid 40562:tid 40577] [client 51.210.178.126:60204] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ac-PTTfFMXuP9zvqCepAFwAAAYw"]
[Fri Apr 03 17:58:39.865519 2026] [:error] [pid 40533:tid 40547] [client 51.210.178.126:60208] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ac-PT_bIAA8AViDmwsuI_gAAAUw"]
[Fri Apr 03 17:58:42.240592 2026] [:error] [pid 35469:tid 35477] [client 51.210.178.126:39100] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ac-PUqGvTIc8-wY3jUQKogAAAQY"]
[Fri Apr 03 17:58:44.579631 2026] [:error] [pid 33447:tid 33509] [client 51.210.178.126:39102] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ac-PVEgaPmDHz92j4lMapgAAAIU"]
[Fri Apr 03 17:58:46.956672 2026] [:error] [pid 33445:tid 33472] [client 51.210.178.126:39110] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ac-PVllRNZ0iDVmJWM2pwQAAABY"]
[Fri Apr 03 17:58:49.280125 2026] [:error] [pid 33542:tid 33558] [client 51.210.178.126:39126] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ac-PWXwb6uB1LaGtepbSzQAAAM0"]
[Fri Apr 03 17:58:51.610765 2026] [:error] [pid 33445:tid 33456] [client 51.210.178.126:48784] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ac-PW1lRNZ0iDVmJWM2pzwAAAAY"]
[Fri Apr 03 17:58:53.975112 2026] [:error] [pid 33446:tid 33491] [client 51.210.178.126:48788] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ac-PXdg3dCqFYIIdw0rqBAAAAE4"]
[Fri Apr 03 17:58:56.323881 2026] [:error] [pid 40562:tid 40571] [client 51.210.178.126:48802] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "ac-PYDfFMXuP9zvqCepAOQAAAYY"]
[Fri Apr 03 17:58:58.725859 2026] [:error] [pid 33542:tid 33548] [client 51.210.178.126:48812] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "ac-PYnwb6uB1LaGtepbS2QAAAMM"]
[Fri Apr 03 17:59:01.077913 2026] [:error] [pid 33445:tid 33464] [client 51.210.178.126:35332] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "ac-PZVlRNZ0iDVmJWM2qBgAAAA4"]
[Fri Apr 03 17:59:03.554224 2026] [:error] [pid 33445:tid 33464] [client 51.210.178.126:35338] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "ac-PZ1lRNZ0iDVmJWM2qEQAAAA4"]
[Fri Apr 03 17:59:05.932598 2026] [:error] [pid 40533:tid 40537] [client 51.210.178.126:35342] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "ac-PafbIAA8AViDmwsuJFgAAAUI"]
[Fri Apr 03 17:59:08.445866 2026] [:error] [pid 35469:tid 35492] [client 51.210.178.126:35356] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "ac-PbKGvTIc8-wY3jUQK6AAAARU"]
[Fri Apr 03 17:59:10.796159 2026] [:error] [pid 33445:tid 33450] [client 51.210.178.126:33244] [client 51.210.178.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "ac-PbllRNZ0iDVmJWM2qLAAAAAA"]
[Fri Apr 03 19:41:58.246135 2026] [:error] [pid 33542:tid 33548] [client 74.248.137.46:6123] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "ac-nhnwb6uB1LaGtepbmVgAAAMM"]
[Fri Apr 03 19:41:58.758207 2026] [:error] [pid 33445:tid 33452] [client 74.248.137.46:6102] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "ac-nhllRNZ0iDVmJWM3boAAAAAI"]
[Fri Apr 03 19:41:59.272083 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:6121] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "ac-nh6GvTIc8-wY3jURFjAAAAQE"]
[Fri Apr 03 19:41:59.783459 2026] [:error] [pid 35469:tid 35490] [client 74.248.137.46:6141] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "ac-nh6GvTIc8-wY3jURFkgAAARM"]
[Fri Apr 03 19:42:00.295811 2026] [:error] [pid 35469:tid 35494] [client 74.248.137.46:6116] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "ac-niKGvTIc8-wY3jURFmgAAARc"]
[Fri Apr 03 19:42:00.808134 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:6081] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "ac-niKGvTIc8-wY3jURFoQAAAQ8"]
[Fri Apr 03 19:42:01.328225 2026] [:error] [pid 33446:tid 33490] [client 74.248.137.46:6025] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "ac-nidg3dCqFYIIdw0orfgAAAE0"]
[Fri Apr 03 19:42:01.847486 2026] [:error] [pid 35469:tid 35479] [client 74.248.137.46:6135] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "ac-niaGvTIc8-wY3jURFrgAAAQg"]
[Fri Apr 03 19:42:02.360884 2026] [:error] [pid 40533:tid 40543] [client 74.248.137.46:6128] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r4f_1.php"] [unique_id "ac-nivbIAA8AViDmwsubKgAAAUg"]
[Fri Apr 03 19:42:02.876413 2026] [:error] [pid 33446:tid 33493] [client 74.248.137.46:6035] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r4f_1.php"] [unique_id "ac-nitg3dCqFYIIdw0oriQAAAFA"]
[Fri Apr 03 19:42:03.404157 2026] [:error] [pid 35469:tid 35480] [client 74.248.137.46:6080] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r4f_1.php"] [unique_id "ac-ni6GvTIc8-wY3jURFuQAAAQk"]
[Fri Apr 03 19:42:03.915712 2026] [:error] [pid 35469:tid 35485] [client 74.248.137.46:6143] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r4f_1.php"] [unique_id "ac-ni6GvTIc8-wY3jURFwgAAAQ4"]
[Fri Apr 03 19:42:04.437943 2026] [:error] [pid 33445:tid 33456] [client 74.248.137.46:6105] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-njFlRNZ0iDVmJWM3brQAAAAY"]
[Fri Apr 03 19:42:04.961829 2026] [:error] [pid 33446:tid 33480] [client 74.248.137.46:6139] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-njNg3dCqFYIIdw0orjQAAAEM"]
[Fri Apr 03 19:42:05.477396 2026] [:error] [pid 40562:tid 40568] [client 74.248.137.46:6072] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-njTfFMXuP9zvqCephgQAAAYM"]
[Fri Apr 03 19:42:05.992770 2026] [:error] [pid 35469:tid 35494] [client 74.248.137.46:6083] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-njaGvTIc8-wY3jURFyQAAARc"]
[Fri Apr 03 19:42:06.506774 2026] [:error] [pid 35469:tid 35471] [client 74.248.137.46:6032] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ac-njqGvTIc8-wY3jURFzgAAAQA"]
[Fri Apr 03 19:42:07.043347 2026] [:error] [pid 33446:tid 33491] [client 74.248.137.46:6089] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ac-nj9g3dCqFYIIdw0orlAAAAE4"]
[Fri Apr 03 19:42:07.650967 2026] [:error] [pid 33446:tid 33478] [client 74.248.137.46:6133] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ac-nj9g3dCqFYIIdw0ormgAAAEE"]
[Fri Apr 03 19:42:08.191864 2026] [:error] [pid 35469:tid 35490] [client 74.248.137.46:6129] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "ac-nkKGvTIc8-wY3jURF0wAAARM"]
[Fri Apr 03 19:42:08.705673 2026] [:error] [pid 33446:tid 33481] [client 74.248.137.46:6119] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "ac-nkNg3dCqFYIIdw0orngAAAEQ"]
[Fri Apr 03 19:42:09.232169 2026] [:error] [pid 33446:tid 33492] [client 74.248.137.46:6126] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "ac-nkdg3dCqFYIIdw0orogAAAE8"]
[Fri Apr 03 19:42:09.746334 2026] [:error] [pid 35469:tid 35474] [client 74.248.137.46:5958] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "ac-nkaGvTIc8-wY3jURF2QAAAQM"]
[Fri Apr 03 19:42:10.269438 2026] [:error] [pid 35469:tid 35475] [client 74.248.137.46:6113] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless11.php"] [unique_id "ac-nkqGvTIc8-wY3jURF3wAAAQQ"]
[Fri Apr 03 19:42:10.783955 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:6086] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/o.php"] [unique_id "ac-nkqGvTIc8-wY3jURF4QAAAQE"]
[Fri Apr 03 19:42:11.299596 2026] [:error] [pid 40533:tid 40551] [client 74.248.137.46:6114] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/o.php"] [unique_id "ac-nk_bIAA8AViDmwsubNgAAAVA"]
[Fri Apr 03 19:42:11.811911 2026] [:error] [pid 40562:tid 40587] [client 74.248.137.46:6022] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/o.php"] [unique_id "ac-nkzfFMXuP9zvqCephiQAAAZY"]
[Fri Apr 03 19:42:12.333068 2026] [:error] [pid 33445:tid 33469] [client 74.248.137.46:6085] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/o.php"] [unique_id "ac-nlFlRNZ0iDVmJWM3btQAAABM"]
[Fri Apr 03 19:42:12.849107 2026] [:error] [pid 55174:tid 55183] [client 74.248.137.46:6094] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "ac-nlJ_WKqUonPNUHYzXugAAAcc"]
[Fri Apr 03 19:42:13.361039 2026] [:error] [pid 35469:tid 35484] [client 74.248.137.46:6108] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "ac-nlaGvTIc8-wY3jURF7AAAAQ0"]
[Fri Apr 03 19:42:13.874798 2026] [:error] [pid 55174:tid 55176] [client 74.248.137.46:6117] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "ac-nlZ_WKqUonPNUHYzXvwAAAcA"]
[Fri Apr 03 19:42:14.394591 2026] [:error] [pid 40533:tid 40558] [client 74.248.137.46:6021] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "ac-nlvbIAA8AViDmwsubPwAAAVc"]
[Fri Apr 03 19:42:14.905255 2026] [:error] [pid 40533:tid 40539] [client 74.248.137.46:6033] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "ac-nlvbIAA8AViDmwsubRAAAAUQ"]
[Fri Apr 03 19:42:15.432295 2026] [:error] [pid 40562:tid 40566] [client 74.248.137.46:6019] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "ac-nlzfFMXuP9zvqCephkwAAAYE"]
[Fri Apr 03 19:42:15.946417 2026] [:error] [pid 35469:tid 35487] [client 74.248.137.46:6018] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "ac-nl6GvTIc8-wY3jURF-AAAARA"]
[Fri Apr 03 19:42:16.459095 2026] [:error] [pid 33447:tid 33505] [client 74.248.137.46:6138] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "ac-nmEgaPmDHz92j4lM0oAAAAIE"]
[Fri Apr 03 19:42:16.970484 2026] [:error] [pid 40562:tid 40574] [client 74.248.137.46:6027] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-nmDfFMXuP9zvqCephlQAAAYk"]
[Fri Apr 03 19:42:17.481900 2026] [:error] [pid 35469:tid 35491] [client 74.248.137.46:5983] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-nmaGvTIc8-wY3jURGAgAAARQ"]
[Fri Apr 03 19:42:18.004476 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:6125] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-nmqGvTIc8-wY3jURGCgAAAQ8"]
[Fri Apr 03 19:42:18.516684 2026] [:error] [pid 55174:tid 55189] [client 74.248.137.46:6107] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-nmp_WKqUonPNUHYzXyQAAAc0"]
[Fri Apr 03 19:42:19.039617 2026] [:error] [pid 33445:tid 33473] [client 74.248.137.46:6024] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "ac-nm1lRNZ0iDVmJWM3bvwAAABc"]
[Fri Apr 03 19:42:19.557782 2026] [:error] [pid 33446:tid 33479] [client 74.248.137.46:6046] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "ac-nm9g3dCqFYIIdw0orwQAAAEI"]
[Fri Apr 03 19:42:20.070116 2026] [:error] [pid 55174:tid 55187] [client 74.248.137.46:6058] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "ac-nnJ_WKqUonPNUHYzXywAAAcs"]
[Fri Apr 03 19:42:20.588325 2026] [:error] [pid 33446:tid 33489] [client 74.248.137.46:5972] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "ac-nnNg3dCqFYIIdw0orxQAAAEw"]
[Fri Apr 03 19:42:21.098015 2026] [:error] [pid 40562:tid 40581] [client 74.248.137.46:6016] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "ac-nnTfFMXuP9zvqCephqgAAAZA"]
[Fri Apr 03 19:42:21.613548 2026] [:error] [pid 40562:tid 40584] [client 74.248.137.46:6020] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "ac-nnTfFMXuP9zvqCephrwAAAZM"]
[Fri Apr 03 19:42:22.127007 2026] [:error] [pid 33446:tid 33478] [client 74.248.137.46:6096] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "ac-nntg3dCqFYIIdw0oryAAAAEE"]
[Fri Apr 03 19:42:22.637121 2026] [:error] [pid 33447:tid 33507] [client 74.248.137.46:6026] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "ac-nnkgaPmDHz92j4lM0pwAAAIM"]
[Fri Apr 03 19:42:23.146826 2026] [:error] [pid 35469:tid 35477] [client 74.248.137.46:6052] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "ac-nn6GvTIc8-wY3jURGKAAAAQY"]
[Fri Apr 03 19:42:23.663876 2026] [:error] [pid 33446:tid 33493] [client 74.248.137.46:6127] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "ac-nn9g3dCqFYIIdw0orywAAAFA"]
[Fri Apr 03 19:42:24.179095 2026] [:error] [pid 40562:tid 40579] [client 74.248.137.46:6106] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "ac-noDfFMXuP9zvqCephugAAAY4"]
[Fri Apr 03 19:42:24.692409 2026] [:error] [pid 40562:tid 40580] [client 74.248.137.46:6061] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "ac-noDfFMXuP9zvqCephvwAAAY8"]
[Fri Apr 03 19:42:25.210907 2026] [:error] [pid 35469:tid 35471] [client 74.248.137.46:6062] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "ac-noaGvTIc8-wY3jURGOgAAAQA"]
[Fri Apr 03 19:42:25.732686 2026] [:error] [pid 35469:tid 35494] [client 74.248.137.46:6051] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "ac-noaGvTIc8-wY3jURGRQAAARc"]
[Fri Apr 03 19:42:26.246900 2026] [:error] [pid 35469:tid 35476] [client 74.248.137.46:6093] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "ac-noqGvTIc8-wY3jURGTwAAAQU"]
[Fri Apr 03 19:42:26.756076 2026] [:error] [pid 35469:tid 35479] [client 74.248.137.46:6131] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "ac-noqGvTIc8-wY3jURGWwAAAQg"]
[Fri Apr 03 19:42:27.268515 2026] [:error] [pid 33447:tid 33504] [client 74.248.137.46:6137] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nope.php"] [unique_id "ac-no0gaPmDHz92j4lM0rQAAAIA"]
[Fri Apr 03 19:42:27.778361 2026] [:error] [pid 35469:tid 35480] [client 74.248.137.46:5986] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nope.php"] [unique_id "ac-no6GvTIc8-wY3jURGbQAAAQk"]
[Fri Apr 03 19:42:28.303663 2026] [:error] [pid 33445:tid 33459] [client 74.248.137.46:5965] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nope.php"] [unique_id "ac-npFlRNZ0iDVmJWM3bywAAAAk"]
[Fri Apr 03 19:42:28.813441 2026] [:error] [pid 35469:tid 35473] [client 74.248.137.46:5964] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nope.php"] [unique_id "ac-npKGvTIc8-wY3jURGgwAAAQI"]
[Fri Apr 03 19:42:29.334477 2026] [:error] [pid 33445:tid 33462] [client 74.248.137.46:6037] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js.php"] [unique_id "ac-npVlRNZ0iDVmJWM3bzgAAAAw"]
[Fri Apr 03 19:42:29.846545 2026] [:error] [pid 33447:tid 33521] [client 74.248.137.46:6066] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js.php"] [unique_id "ac-npUgaPmDHz92j4lM0sgAAAJE"]
[Fri Apr 03 19:42:30.361154 2026] [:error] [pid 33445:tid 33455] [client 74.248.137.46:6104] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js.php"] [unique_id "ac-npllRNZ0iDVmJWM3b0wAAAAU"]
[Fri Apr 03 19:42:30.879918 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:6048] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/js.php"] [unique_id "ac-npqGvTIc8-wY3jURGmwAAAQ8"]
[Fri Apr 03 19:42:31.409391 2026] [:error] [pid 40562:tid 40584] [client 74.248.137.46:6039] [client 74.248.137.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac-npzfFMXuP9zvqCephwgAAAZM"]
[Fri Apr 03 19:42:31.931228 2026] [:error] [pid 33542:tid 33562] [client 74.248.137.46:6017] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "ac-np3wb6uB1LaGtepbmnQAAANE"]
[Fri Apr 03 19:42:32.453667 2026] [:error] [pid 33446:tid 33492] [client 74.248.137.46:6134] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "ac-nqNg3dCqFYIIdw0or0wAAAE8"]
[Fri Apr 03 19:42:32.977639 2026] [:error] [pid 35469:tid 35494] [client 74.248.137.46:6090] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "ac-nqKGvTIc8-wY3jURGrQAAARc"]
[Fri Apr 03 19:42:33.490440 2026] [:error] [pid 33446:tid 33477] [client 74.248.137.46:6122] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "ac-nqdg3dCqFYIIdw0or1gAAAEA"]
[Fri Apr 03 19:42:34.016047 2026] [:error] [pid 33446:tid 33483] [client 74.248.137.46:6140] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "ac-nqtg3dCqFYIIdw0or2wAAAEY"]
[Fri Apr 03 19:42:34.535309 2026] [:error] [pid 33446:tid 33482] [client 74.248.137.46:5962] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "ac-nqtg3dCqFYIIdw0or4AAAAEU"]
[Fri Apr 03 19:42:35.068462 2026] [:error] [pid 33445:tid 33474] [client 74.248.137.46:6047] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "ac-nq1lRNZ0iDVmJWM3b6AAAABg"]
[Fri Apr 03 19:42:35.581845 2026] [:error] [pid 33445:tid 33460] [client 74.248.137.46:6059] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "ac-nq1lRNZ0iDVmJWM3b6wAAAAo"]
[Fri Apr 03 19:42:36.099052 2026] [:error] [pid 33445:tid 33473] [client 74.248.137.46:6034] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ac-nrFlRNZ0iDVmJWM3b7QAAABc"]
[Fri Apr 03 19:42:36.626759 2026] [:error] [pid 55174:tid 55198] [client 74.248.137.46:6092] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ac-nrJ_WKqUonPNUHYzX4AAAAdY"]
[Fri Apr 03 19:42:37.150700 2026] [:error] [pid 40562:tid 40565] [client 74.248.137.46:6060] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ac-nrTfFMXuP9zvqCephxgAAAYA"]
[Fri Apr 03 19:42:37.663446 2026] [:error] [pid 33446:tid 33494] [client 74.248.137.46:6038] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ac-nrdg3dCqFYIIdw0or6AAAAFE"]
[Fri Apr 03 19:42:38.176221 2026] [:error] [pid 33445:tid 33467] [client 74.248.137.46:5955] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ac-nrllRNZ0iDVmJWM3b9QAAABE"]
[Fri Apr 03 19:42:38.696067 2026] [:error] [pid 33445:tid 33452] [client 74.248.137.46:6054] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ac-nrllRNZ0iDVmJWM3b-gAAAAI"]
[Fri Apr 03 19:42:39.216188 2026] [:error] [pid 35469:tid 35492] [client 74.248.137.46:6074] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ac-nr6GvTIc8-wY3jURG5wAAARU"]
[Fri Apr 03 19:42:39.728526 2026] [:error] [pid 33445:tid 33467] [client 74.248.137.46:6111] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ac-nr1lRNZ0iDVmJWM3cAwAAABE"]
[Fri Apr 03 19:42:40.251499 2026] [:error] [pid 33445:tid 33457] [client 74.248.137.46:6142] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "ac-nsFlRNZ0iDVmJWM3cBgAAAAc"]
[Fri Apr 03 19:42:40.764986 2026] [:error] [pid 35469:tid 35476] [client 74.248.137.46:6073] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "ac-nsKGvTIc8-wY3jURG-wAAAQU"]
[Fri Apr 03 19:42:41.282019 2026] [:error] [pid 35469:tid 35475] [client 74.248.137.46:5970] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "ac-nsaGvTIc8-wY3jURHBAAAAQQ"]
[Fri Apr 03 19:42:41.792120 2026] [:error] [pid 33446:tid 33495] [client 74.248.137.46:6109] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wfile.php"] [unique_id "ac-nsdg3dCqFYIIdw0or8wAAAFI"]
[Fri Apr 03 19:42:42.314600 2026] [:error] [pid 35469:tid 35479] [client 74.248.137.46:6100] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "ac-nsqGvTIc8-wY3jURHDAAAAQg"]
[Fri Apr 03 19:42:42.829073 2026] [:error] [pid 35469:tid 35495] [client 74.248.137.46:6053] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "ac-nsqGvTIc8-wY3jURHFwAAARg"]
[Fri Apr 03 19:42:43.340699 2026] [:error] [pid 33446:tid 33485] [client 74.248.137.46:6097] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "ac-ns9g3dCqFYIIdw0or-wAAAEg"]
[Fri Apr 03 19:42:43.852191 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:6044] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "ac-ns6GvTIc8-wY3jURHHwAAAQ8"]
[Fri Apr 03 19:42:44.364567 2026] [:error] [pid 35469:tid 35473] [client 74.248.137.46:6101] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "ac-ntKGvTIc8-wY3jURHJQAAAQI"]
[Fri Apr 03 19:42:44.875848 2026] [:error] [pid 35469:tid 35488] [client 74.248.137.46:5954] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "ac-ntKGvTIc8-wY3jURHKQAAARE"]
[Fri Apr 03 19:42:45.391674 2026] [:error] [pid 33542:tid 33545] [client 74.248.137.46:5980] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "ac-ntXwb6uB1LaGtepbmtAAAAMA"]
[Fri Apr 03 19:42:45.910157 2026] [:error] [pid 55174:tid 55187] [client 74.248.137.46:6023] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "ac-ntZ_WKqUonPNUHYzX6QAAAcs"]
[Fri Apr 03 19:42:46.421603 2026] [:error] [pid 40562:tid 40570] [client 74.248.137.46:6067] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "ac-ntjfFMXuP9zvqCephzwAAAYU"]
[Fri Apr 03 19:42:46.933310 2026] [:error] [pid 33446:tid 33482] [client 74.248.137.46:6055] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "ac-nttg3dCqFYIIdw0osBgAAAEU"]
[Fri Apr 03 19:42:47.449424 2026] [:error] [pid 33446:tid 33484] [client 74.248.137.46:5968] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "ac-nt9g3dCqFYIIdw0osDAAAAEc"]
[Fri Apr 03 19:42:47.966805 2026] [:error] [pid 33446:tid 33480] [client 74.248.137.46:6057] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "ac-nt9g3dCqFYIIdw0osDwAAAEM"]
[Fri Apr 03 19:42:48.481429 2026] [:error] [pid 33447:tid 33517] [client 74.248.137.46:6063] [client 74.248.137.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "ac-nuEgaPmDHz92j4lM0vgAAAI0"]
[Fri Apr 03 19:42:49.006607 2026] [:error] [pid 55174:tid 55200] [client 74.248.137.46:6078] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/123.php"] [unique_id "ac-nuZ_WKqUonPNUHYzX8wAAAdg"]
[Fri Apr 03 19:42:49.522731 2026] [:error] [pid 55174:tid 55193] [client 74.248.137.46:6041] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/123.php"] [unique_id "ac-nuZ_WKqUonPNUHYzX-gAAAdE"]
[Fri Apr 03 19:42:50.043805 2026] [:error] [pid 33447:tid 33513] [client 74.248.137.46:5985] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/123.php"] [unique_id "ac-nukgaPmDHz92j4lM0wAAAAIk"]
[Fri Apr 03 19:42:50.555121 2026] [:error] [pid 33446:tid 33494] [client 74.248.137.46:5991] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "ac-nutg3dCqFYIIdw0osGQAAAFE"]
[Fri Apr 03 19:42:51.088700 2026] [:error] [pid 40562:tid 40578] [client 74.248.137.46:6095] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "ac-nuzfFMXuP9zvqCeph0wAAAY0"]
[Fri Apr 03 19:42:51.624752 2026] [:error] [pid 33445:tid 33469] [client 74.248.137.46:6036] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "ac-nu1lRNZ0iDVmJWM3cGgAAABM"]
[Fri Apr 03 19:42:52.164944 2026] [:error] [pid 33446:tid 33479] [client 74.248.137.46:6029] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "ac-nvNg3dCqFYIIdw0osGwAAAEI"]
[Fri Apr 03 19:42:52.681152 2026] [:error] [pid 40562:tid 40581] [client 74.248.137.46:5995] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac-nvDfFMXuP9zvqCeph4AAAAZA"]
[Fri Apr 03 19:42:53.200318 2026] [:error] [pid 33446:tid 33486] [client 74.248.137.46:5898] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac-nvdg3dCqFYIIdw0osHwAAAEk"]
[Fri Apr 03 19:42:53.714786 2026] [:error] [pid 33446:tid 33493] [client 74.248.137.46:6124] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac-nvdg3dCqFYIIdw0osIgAAAFA"]
[Fri Apr 03 19:42:54.239677 2026] [:error] [pid 33445:tid 33465] [client 74.248.137.46:5977] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac-nvllRNZ0iDVmJWM3cIQAAAA8"]
[Fri Apr 03 19:42:54.754871 2026] [:error] [pid 33447:tid 33527] [client 74.248.137.46:6120] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "ac-nvkgaPmDHz92j4lM0yAAAAJc"]
[Fri Apr 03 19:42:55.268171 2026] [:error] [pid 33447:tid 33518] [client 74.248.137.46:6002] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "ac-nv0gaPmDHz92j4lM0ygAAAI4"]
[Fri Apr 03 19:42:55.779758 2026] [:error] [pid 33446:tid 33485] [client 74.248.137.46:5928] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "ac-nv9g3dCqFYIIdw0osKwAAAEg"]
[Fri Apr 03 19:42:56.315717 2026] [:error] [pid 33447:tid 33517] [client 74.248.137.46:6110] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon.php"] [unique_id "ac-nwEgaPmDHz92j4lM0zAAAAI0"]
[Fri Apr 03 19:42:56.828091 2026] [:error] [pid 33446:tid 33489] [client 74.248.137.46:6079] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/33.php"] [unique_id "ac-nwNg3dCqFYIIdw0osLQAAAEw"]
[Fri Apr 03 19:43:10.192828 2026] [:error] [pid 40562:tid 40577] [client 74.248.137.46:5971] [client 74.248.137.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac-nzjfFMXuP9zvqCepiAgAAAYw"]
[Fri Apr 03 19:43:10.722714 2026] [:error] [pid 33445:tid 33464] [client 74.248.137.46:6136] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "ac-nzllRNZ0iDVmJWM3cUwAAAA4"]
[Fri Apr 03 19:43:11.237558 2026] [:error] [pid 35469:tid 35475] [client 74.248.137.46:5961] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "ac-nz6GvTIc8-wY3jURHYwAAAQQ"]
[Fri Apr 03 19:43:11.761409 2026] [:error] [pid 35469:tid 35489] [client 74.248.137.46:6001] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "ac-nz6GvTIc8-wY3jURHbAAAARI"]
[Fri Apr 03 19:43:12.272705 2026] [:error] [pid 33446:tid 33484] [client 74.248.137.46:6115] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "ac-n0Ng3dCqFYIIdw0osTQAAAEc"]
[Fri Apr 03 19:43:12.794512 2026] [:error] [pid 40533:tid 40559] [client 74.248.137.46:5988] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "ac-n0PbIAA8AViDmwsubaQAAAVg"]
[Fri Apr 03 19:43:13.306737 2026] [:error] [pid 40533:tid 40535] [client 74.248.137.46:6006] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "ac-n0fbIAA8AViDmwsubbgAAAUA"]
[Fri Apr 03 19:43:13.828869 2026] [:error] [pid 33446:tid 33485] [client 74.248.137.46:6015] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "ac-n0dg3dCqFYIIdw0osUwAAAEg"]
[Fri Apr 03 19:43:14.344523 2026] [:error] [pid 33445:tid 33462] [client 74.248.137.46:5974] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about3.php"] [unique_id "ac-n0llRNZ0iDVmJWM3cWgAAAAw"]
[Fri Apr 03 19:43:14.860425 2026] [:error] [pid 40562:tid 40574] [client 74.248.137.46:6045] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about3.php"] [unique_id "ac-n0jfFMXuP9zvqCepiCgAAAYk"]
[Fri Apr 03 19:43:15.374555 2026] [:error] [pid 55174:tid 55187] [client 74.248.137.46:5953] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about3.php"] [unique_id "ac-n05_WKqUonPNUHYzYGgAAAcs"]
[Fri Apr 03 19:43:15.892661 2026] [:error] [pid 33446:tid 33500] [client 74.248.137.46:6118] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about3.php"] [unique_id "ac-n09g3dCqFYIIdw0osVgAAAFc"]
[Fri Apr 03 19:43:16.409300 2026] [:error] [pid 35469:tid 35495] [client 74.248.137.46:5966] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "ac-n1KGvTIc8-wY3jURHeQAAARg"]
[Fri Apr 03 19:43:16.919079 2026] [:error] [pid 55174:tid 55190] [client 74.248.137.46:6031] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "ac-n1J_WKqUonPNUHYzYGwAAAc4"]
[Fri Apr 03 19:43:17.434078 2026] [:error] [pid 40533:tid 40550] [client 74.248.137.46:6071] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "ac-n1fbIAA8AViDmwsubdAAAAU8"]
[Fri Apr 03 19:43:17.948402 2026] [:error] [pid 35469:tid 35475] [client 74.248.137.46:6069] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "ac-n1aGvTIc8-wY3jURHgAAAAQQ"]
[Fri Apr 03 19:43:18.462474 2026] [:error] [pid 40533:tid 40537] [client 74.248.137.46:6030] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "ac-n1vbIAA8AViDmwsubdQAAAUI"]
[Fri Apr 03 19:43:18.988937 2026] [:error] [pid 33445:tid 33462] [client 74.248.137.46:5975] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "ac-n1llRNZ0iDVmJWM3cXwAAAAw"]
[Fri Apr 03 19:43:19.502649 2026] [:error] [pid 35469:tid 35495] [client 74.248.137.46:5969] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "ac-n16GvTIc8-wY3jURHgQAAARg"]
[Fri Apr 03 19:43:20.026553 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:5937] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "ac-n2KGvTIc8-wY3jURHiAAAAQs"]
[Fri Apr 03 19:43:20.537456 2026] [:error] [pid 33445:tid 33451] [client 74.248.137.46:6050] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "ac-n2FlRNZ0iDVmJWM3cZgAAAAE"]
[Fri Apr 03 19:43:21.048789 2026] [:error] [pid 33447:tid 33509] [client 74.248.137.46:5981] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "ac-n2UgaPmDHz92j4lM04gAAAIU"]
[Fri Apr 03 19:43:21.567144 2026] [:error] [pid 55174:tid 55186] [client 74.248.137.46:5992] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "ac-n2Z_WKqUonPNUHYzYJQAAAco"]
[Fri Apr 03 19:43:22.081215 2026] [:error] [pid 33446:tid 33492] [client 74.248.137.46:6068] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "ac-n2tg3dCqFYIIdw0osawAAAE8"]
[Fri Apr 03 19:43:22.596952 2026] [:error] [pid 33447:tid 33504] [client 74.248.137.46:5916] [client 74.248.137.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "ac-n2kgaPmDHz92j4lM05AAAAIA"]
[Fri Apr 03 19:43:23.110334 2026] [:error] [pid 35469:tid 35483] [client 74.248.137.46:5993] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "ac-n26GvTIc8-wY3jURHkwAAAQw"]
[Fri Apr 03 19:43:23.627437 2026] [:error] [pid 55174:tid 55189] [client 74.248.137.46:6005] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "ac-n25_WKqUonPNUHYzYKQAAAc0"]
[Fri Apr 03 19:43:24.137564 2026] [:error] [pid 55174:tid 55193] [client 74.248.137.46:6000] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "ac-n3J_WKqUonPNUHYzYKgAAAdE"]
[Fri Apr 03 19:43:24.654652 2026] [:error] [pid 35469:tid 35475] [client 74.248.137.46:6091] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "ac-n3KGvTIc8-wY3jURHmQAAAQQ"]
[Fri Apr 03 19:43:25.171546 2026] [:error] [pid 35469:tid 35488] [client 74.248.137.46:6087] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "ac-n3aGvTIc8-wY3jURHngAAARE"]
[Fri Apr 03 19:43:25.692714 2026] [:error] [pid 33542:tid 33556] [client 74.248.137.46:5956] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "ac-n3Xwb6uB1LaGtepbm3QAAAMs"]
[Fri Apr 03 19:43:26.207860 2026] [:error] [pid 33542:tid 33568] [client 74.248.137.46:5960] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "ac-n3nwb6uB1LaGtepbm3gAAANc"]
[Fri Apr 03 19:43:26.721670 2026] [:error] [pid 33542:tid 33553] [client 74.248.137.46:6070] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "ac-n3nwb6uB1LaGtepbm3wAAAMg"]
[Fri Apr 03 19:43:27.237734 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:5897] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "ac-n36GvTIc8-wY3jURHogAAAQs"]
[Fri Apr 03 19:43:27.756453 2026] [:error] [pid 33446:tid 33477] [client 74.248.137.46:5901] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "ac-n39g3dCqFYIIdw0oscAAAAEA"]
[Fri Apr 03 19:43:28.272496 2026] [:error] [pid 40533:tid 40541] [client 74.248.137.46:6003] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "ac-n4PbIAA8AViDmwsubgAAAAUY"]
[Fri Apr 03 19:43:28.788145 2026] [:error] [pid 35469:tid 35489] [client 74.248.137.46:5881] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "ac-n4KGvTIc8-wY3jURHqAAAARI"]
[Fri Apr 03 19:43:29.300571 2026] [:error] [pid 33446:tid 33482] [client 74.248.137.46:6056] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-n4dg3dCqFYIIdw0oscwAAAEU"]
[Fri Apr 03 19:43:29.810396 2026] [:error] [pid 33445:tid 33452] [client 74.248.137.46:5976] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-n4VlRNZ0iDVmJWM3cggAAAAI"]
[Fri Apr 03 19:43:30.330177 2026] [:error] [pid 35469:tid 35494] [client 74.248.137.46:5957] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-n4qGvTIc8-wY3jURHrwAAARc"]
[Fri Apr 03 19:43:30.840518 2026] [:error] [pid 35469:tid 35479] [client 74.248.137.46:5997] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-n4qGvTIc8-wY3jURHswAAAQg"]
[Fri Apr 03 19:43:31.354056 2026] [:error] [pid 35469:tid 35487] [client 74.248.137.46:5939] [client 74.248.137.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac-n46GvTIc8-wY3jURHuwAAARA"]
[Fri Apr 03 19:43:31.864333 2026] [:error] [pid 35469:tid 35480] [client 74.248.137.46:6077] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "ac-n46GvTIc8-wY3jURHwAAAAQk"]
[Fri Apr 03 19:43:32.384604 2026] [:error] [pid 33446:tid 33501] [client 74.248.137.46:6008] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "ac-n5Ng3dCqFYIIdw0osewAAAFg"]
[Fri Apr 03 19:43:32.904839 2026] [:error] [pid 33542:tid 33563] [client 74.248.137.46:5892] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "ac-n5Hwb6uB1LaGtepbm6AAAANI"]
[Fri Apr 03 19:43:33.416761 2026] [:error] [pid 33446:tid 33477] [client 74.248.137.46:6049] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "ac-n5dg3dCqFYIIdw0osgAAAAEA"]
[Fri Apr 03 19:43:33.931119 2026] [:error] [pid 40533:tid 40554] [client 74.248.137.46:5905] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "ac-n5fbIAA8AViDmwsubgwAAAVM"]
[Fri Apr 03 19:43:34.447798 2026] [:error] [pid 33445:tid 33466] [client 74.248.137.46:5979] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "ac-n5llRNZ0iDVmJWM3chwAAABA"]
[Fri Apr 03 19:43:34.957640 2026] [:error] [pid 33447:tid 33521] [client 74.248.137.46:5987] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "ac-n5kgaPmDHz92j4lM1AQAAAJE"]
[Fri Apr 03 19:43:35.471291 2026] [:error] [pid 33447:tid 33508] [client 74.248.137.46:5867] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/filemanager.php"] [unique_id "ac-n50gaPmDHz92j4lM1BgAAAIQ"]
[Fri Apr 03 19:43:35.987995 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:5890] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/filemanager.php"] [unique_id "ac-n56GvTIc8-wY3jURHyQAAAQE"]
[Fri Apr 03 19:43:36.503796 2026] [:error] [pid 55174:tid 55193] [client 74.248.137.46:5926] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/filemanager.php"] [unique_id "ac-n6J_WKqUonPNUHYzYQwAAAdE"]
[Fri Apr 03 19:43:37.019363 2026] [:error] [pid 33446:tid 33486] [client 74.248.137.46:6075] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/filemanager.php"] [unique_id "ac-n6dg3dCqFYIIdw0oshQAAAEk"]
[Fri Apr 03 19:43:37.535930 2026] [:error] [pid 33447:tid 33527] [client 74.248.137.46:6028] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-n6UgaPmDHz92j4lM1DAAAAJc"]
[Fri Apr 03 19:43:38.049615 2026] [:error] [pid 33447:tid 33516] [client 74.248.137.46:5912] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-n6kgaPmDHz92j4lM1DwAAAIw"]
[Fri Apr 03 19:43:38.563106 2026] [:error] [pid 33447:tid 33507] [client 74.248.137.46:5998] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-n6kgaPmDHz92j4lM1EwAAAIM"]
[Fri Apr 03 19:43:39.076060 2026] [:error] [pid 55174:tid 55200] [client 74.248.137.46:5894] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-n65_WKqUonPNUHYzYSQAAAdg"]
[Fri Apr 03 19:43:39.587903 2026] [:error] [pid 33446:tid 33494] [client 74.248.137.46:6076] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlu.php"] [unique_id "ac-n69g3dCqFYIIdw0osigAAAFE"]
[Fri Apr 03 19:43:40.109516 2026] [:error] [pid 33446:tid 33492] [client 74.248.137.46:6082] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlu.php"] [unique_id "ac-n7Ng3dCqFYIIdw0osiwAAAE8"]
[Fri Apr 03 19:43:40.626053 2026] [:error] [pid 35469:tid 35480] [client 74.248.137.46:5996] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlu.php"] [unique_id "ac-n7KGvTIc8-wY3jURH0gAAAQk"]
[Fri Apr 03 19:43:41.139027 2026] [:error] [pid 35469:tid 35475] [client 74.248.137.46:6043] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dlu.php"] [unique_id "ac-n7aGvTIc8-wY3jURH1QAAAQQ"]
[Fri Apr 03 19:43:41.652395 2026] [:error] [pid 40562:tid 40571] [client 74.248.137.46:5978] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "ac-n7TfFMXuP9zvqCepiNAAAAYY"]
[Fri Apr 03 19:43:42.165843 2026] [:error] [pid 35469:tid 35488] [client 74.248.137.46:5922] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "ac-n7qGvTIc8-wY3jURH3AAAARE"]
[Fri Apr 03 19:43:42.691347 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:5959] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "ac-n7qGvTIc8-wY3jURH4QAAAQE"]
[Fri Apr 03 19:43:43.211823 2026] [:error] [pid 40533:tid 40548] [client 74.248.137.46:5896] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "ac-n7_bIAA8AViDmwsubjwAAAU0"]
[Fri Apr 03 19:43:43.754997 2026] [:error] [pid 33445:tid 33458] [client 74.248.137.46:5903] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "ac-n71lRNZ0iDVmJWM3clgAAAAg"]
[Fri Apr 03 19:43:44.277209 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:6064] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "ac-n8KGvTIc8-wY3jURH8gAAAQE"]
[Fri Apr 03 19:43:44.788613 2026] [:error] [pid 35469:tid 35494] [client 74.248.137.46:5982] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "ac-n8KGvTIc8-wY3jURH-QAAARc"]
[Fri Apr 03 19:43:45.318613 2026] [:error] [pid 33446:tid 33489] [client 74.248.137.46:6007] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "ac-n8dg3dCqFYIIdw0oslwAAAEw"]
[Fri Apr 03 19:43:45.839761 2026] [:error] [pid 40562:tid 40570] [client 74.248.137.46:5951] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "ac-n8TfFMXuP9zvqCepiOgAAAYU"]
[Fri Apr 03 19:43:46.354916 2026] [:error] [pid 40533:tid 40554] [client 74.248.137.46:5938] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "ac-n8vbIAA8AViDmwsubkQAAAVM"]
[Fri Apr 03 19:43:46.867659 2026] [:error] [pid 33446:tid 33496] [client 74.248.137.46:6014] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "ac-n8tg3dCqFYIIdw0osnwAAAFM"]
[Fri Apr 03 19:43:47.379329 2026] [:error] [pid 35469:tid 35483] [client 74.248.137.46:5832] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "ac-n86GvTIc8-wY3jURIBQAAAQw"]
[Fri Apr 03 19:43:47.893028 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:6112] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "ac-n86GvTIc8-wY3jURICgAAAQ8"]
[Fri Apr 03 19:43:48.405473 2026] [:error] [pid 33447:tid 33527] [client 74.248.137.46:5949] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "ac-n9EgaPmDHz92j4lM1HgAAAJc"]
[Fri Apr 03 19:43:48.920637 2026] [:error] [pid 40533:tid 40547] [client 74.248.137.46:5824] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "ac-n9PbIAA8AViDmwsublgAAAUw"]
[Fri Apr 03 19:43:49.436489 2026] [:error] [pid 33542:tid 33562] [client 74.248.137.46:5829] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "ac-n9Xwb6uB1LaGtepbm8AAAANE"]
[Fri Apr 03 19:43:49.948515 2026] [:error] [pid 40562:tid 40575] [client 74.248.137.46:5907] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "ac-n9TfFMXuP9zvqCepiRAAAAYo"]
[Fri Apr 03 19:43:50.461134 2026] [:error] [pid 33447:tid 33514] [client 74.248.137.46:5919] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "ac-n9kgaPmDHz92j4lM1IQAAAIo"]
[Fri Apr 03 19:43:50.974491 2026] [:error] [pid 35469:tid 35474] [client 74.248.137.46:6009] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "ac-n9qGvTIc8-wY3jURIFQAAAQM"]
[Fri Apr 03 19:43:51.486063 2026] [:error] [pid 33447:tid 33509] [client 74.248.137.46:6099] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "ac-n90gaPmDHz92j4lM1JQAAAIU"]
[Fri Apr 03 19:43:52.003954 2026] [:error] [pid 33447:tid 33526] [client 74.248.137.46:6130] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hook.php"] [unique_id "ac-n-EgaPmDHz92j4lM1JwAAAJY"]
[Fri Apr 03 19:43:52.519909 2026] [:error] [pid 33447:tid 33520] [client 74.248.137.46:5914] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hook.php"] [unique_id "ac-n-EgaPmDHz92j4lM1KQAAAJA"]
[Fri Apr 03 19:43:53.034416 2026] [:error] [pid 33445:tid 33450] [client 74.248.137.46:6012] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hook.php"] [unique_id "ac-n-VlRNZ0iDVmJWM3coAAAAAA"]
[Fri Apr 03 19:43:53.550475 2026] [:error] [pid 35469:tid 35475] [client 74.248.137.46:6011] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hook.php"] [unique_id "ac-n-aGvTIc8-wY3jURIGQAAAQQ"]
[Fri Apr 03 19:43:54.063783 2026] [:error] [pid 55174:tid 55178] [client 74.248.137.46:6004] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "ac-n-p_WKqUonPNUHYzYXgAAAcI"]
[Fri Apr 03 19:43:54.577471 2026] [:error] [pid 55174:tid 55186] [client 74.248.137.46:6065] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "ac-n-p_WKqUonPNUHYzYYQAAAco"]
[Fri Apr 03 19:43:55.089730 2026] [:error] [pid 33542:tid 33560] [client 74.248.137.46:5929] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "ac-n-3wb6uB1LaGtepbm_QAAAM8"]
[Fri Apr 03 19:43:55.605329 2026] [:error] [pid 40533:tid 40544] [client 74.248.137.46:5990] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "ac-n-_bIAA8AViDmwsubnAAAAUk"]
[Fri Apr 03 19:43:56.119735 2026] [:error] [pid 35469:tid 35490] [client 74.248.137.46:5999] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "ac-n_KGvTIc8-wY3jURIHgAAARM"]
[Fri Apr 03 19:43:56.631797 2026] [:error] [pid 33447:tid 33519] [client 74.248.137.46:5902] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "ac-n_EgaPmDHz92j4lM1NQAAAI8"]
[Fri Apr 03 19:43:57.142368 2026] [:error] [pid 40533:tid 40538] [client 74.248.137.46:6040] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "ac-n_fbIAA8AViDmwsubpwAAAUM"]
[Fri Apr 03 19:43:57.661826 2026] [:error] [pid 35469:tid 35495] [client 74.248.137.46:5940] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "ac-n_aGvTIc8-wY3jURIIwAAARg"]
[Fri Apr 03 19:43:58.173939 2026] [:error] [pid 33446:tid 33479] [client 74.248.137.46:5921] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "ac-n_tg3dCqFYIIdw0ossQAAAEI"]
[Fri Apr 03 19:43:58.689458 2026] [:error] [pid 35469:tid 35474] [client 74.248.137.46:5899] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "ac-n_qGvTIc8-wY3jURIKAAAAQM"]
[Fri Apr 03 19:43:59.204012 2026] [:error] [pid 55174:tid 55182] [client 74.248.137.46:5984] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "ac-n_5_WKqUonPNUHYzYgAAAAcY"]
[Fri Apr 03 19:43:59.719832 2026] [:error] [pid 35469:tid 35490] [client 74.248.137.46:5854] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v.php"] [unique_id "ac-n_6GvTIc8-wY3jURIKgAAARM"]
[Fri Apr 03 19:44:00.240799 2026] [:error] [pid 33446:tid 33495] [client 74.248.137.46:5868] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/te.php"] [unique_id "ac-oANg3dCqFYIIdw0ostgAAAFI"]
[Fri Apr 03 19:44:00.758358 2026] [:error] [pid 35469:tid 35475] [client 74.248.137.46:5845] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/te.php"] [unique_id "ac-oAKGvTIc8-wY3jURILwAAAQQ"]
[Fri Apr 03 19:44:01.271633 2026] [:error] [pid 40562:tid 40587] [client 74.248.137.46:5904] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/te.php"] [unique_id "ac-oATfFMXuP9zvqCepiTgAAAZY"]
[Fri Apr 03 19:44:01.781120 2026] [:error] [pid 33447:tid 33527] [client 74.248.137.46:5865] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/te.php"] [unique_id "ac-oAUgaPmDHz92j4lM1OwAAAJc"]
[Fri Apr 03 19:44:02.300946 2026] [:error] [pid 33446:tid 33493] [client 74.248.137.46:5876] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "ac-oAtg3dCqFYIIdw0osuwAAAFA"]
[Fri Apr 03 19:44:02.825824 2026] [:error] [pid 33446:tid 33480] [client 74.248.137.46:5973] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "ac-oAtg3dCqFYIIdw0oswgAAAEM"]
[Fri Apr 03 19:44:03.335053 2026] [:error] [pid 33446:tid 33489] [client 74.248.137.46:5833] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "ac-oA9g3dCqFYIIdw0osyAAAAEw"]
[Fri Apr 03 19:44:03.847798 2026] [:error] [pid 33446:tid 33500] [client 74.248.137.46:5994] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "ac-oA9g3dCqFYIIdw0oszAAAAFc"]
[Fri Apr 03 19:44:04.368521 2026] [:error] [pid 35469:tid 35485] [client 74.248.137.46:5923] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "ac-oBKGvTIc8-wY3jURIOAAAAQ4"]
[Fri Apr 03 19:44:04.885049 2026] [:error] [pid 33446:tid 33495] [client 74.248.137.46:5857] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "ac-oBNg3dCqFYIIdw0os0AAAAFI"]
[Fri Apr 03 19:44:05.400916 2026] [:error] [pid 40562:tid 40577] [client 74.248.137.46:5763] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "ac-oBTfFMXuP9zvqCepiUgAAAYw"]
[Fri Apr 03 19:44:05.912501 2026] [:error] [pid 33446:tid 33498] [client 74.248.137.46:5771] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "ac-oBdg3dCqFYIIdw0os0wAAAFU"]
[Fri Apr 03 19:44:06.433981 2026] [:error] [pid 55174:tid 55198] [client 74.248.137.46:5874] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "ac-oBp_WKqUonPNUHYzYkAAAAdY"]
[Fri Apr 03 19:44:06.943377 2026] [:error] [pid 40533:tid 40552] [client 74.248.137.46:5864] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "ac-oBvbIAA8AViDmwsubzQAAAVE"]
[Fri Apr 03 19:44:07.452450 2026] [:error] [pid 35469:tid 35477] [client 74.248.137.46:5893] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "ac-oB6GvTIc8-wY3jURIRwAAAQY"]
[Fri Apr 03 19:44:07.966922 2026] [:error] [pid 33446:tid 33495] [client 74.248.137.46:5942] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "ac-oB9g3dCqFYIIdw0os3gAAAFI"]
[Fri Apr 03 19:44:08.479043 2026] [:error] [pid 35469:tid 35484] [client 74.248.137.46:5925] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "ac-oCKGvTIc8-wY3jURISQAAAQ0"]
[Fri Apr 03 19:44:08.991070 2026] [:error] [pid 35469:tid 35494] [client 74.248.137.46:5950] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "ac-oCKGvTIc8-wY3jURITgAAARc"]
[Fri Apr 03 19:44:23.533771 2026] [:error] [pid 33446:tid 33489] [client 74.248.137.46:5933] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mo.php"] [unique_id "ac-oF9g3dCqFYIIdw0otCAAAAEw"]
[Fri Apr 03 19:44:24.047270 2026] [:error] [pid 33445:tid 33473] [client 74.248.137.46:5909] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mo.php"] [unique_id "ac-oGFlRNZ0iDVmJWM3c9QAAABc"]
[Fri Apr 03 19:44:24.567624 2026] [:error] [pid 33542:tid 33568] [client 74.248.137.46:5886] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mo.php"] [unique_id "ac-oGHwb6uB1LaGtepbnEwAAANc"]
[Fri Apr 03 19:44:25.085664 2026] [:error] [pid 40533:tid 40539] [client 74.248.137.46:5917] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mo.php"] [unique_id "ac-oGfbIAA8AViDmwsub4AAAAUQ"]
[Fri Apr 03 19:44:25.614162 2026] [:error] [pid 40533:tid 40557] [client 74.248.137.46:5906] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "ac-oGfbIAA8AViDmwsub5AAAAVY"]
[Fri Apr 03 19:44:26.130694 2026] [:error] [pid 33445:tid 33467] [client 74.248.137.46:5764] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "ac-oGllRNZ0iDVmJWM3c_AAAABE"]
[Fri Apr 03 19:44:26.657654 2026] [:error] [pid 40562:tid 40571] [client 74.248.137.46:6088] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "ac-oGjfFMXuP9zvqCepiewAAAYY"]
[Fri Apr 03 19:44:27.173927 2026] [:error] [pid 33446:tid 33496] [client 74.248.137.46:5952] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "ac-oG9g3dCqFYIIdw0otEQAAAFM"]
[Fri Apr 03 19:44:27.692708 2026] [:error] [pid 33445:tid 33458] [client 74.248.137.46:5883] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "ac-oG1lRNZ0iDVmJWM3dBgAAAAg"]
[Fri Apr 03 19:44:28.207879 2026] [:error] [pid 33446:tid 33495] [client 74.248.137.46:5924] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "ac-oHNg3dCqFYIIdw0otFwAAAFI"]
[Fri Apr 03 19:44:28.727558 2026] [:error] [pid 35469:tid 35471] [client 74.248.137.46:5908] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "ac-oHKGvTIc8-wY3jURIfAAAAQA"]
[Fri Apr 03 19:44:29.249756 2026] [:error] [pid 35469:tid 35474] [client 74.248.137.46:6132] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "ac-oHaGvTIc8-wY3jURIfgAAAQM"]
[Fri Apr 03 19:44:29.765449 2026] [:error] [pid 35469:tid 35476] [client 74.248.137.46:5825] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "ac-oHaGvTIc8-wY3jURIfwAAAQU"]
[Fri Apr 03 19:44:30.278872 2026] [:error] [pid 35469:tid 35487] [client 74.248.137.46:5839] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "ac-oHqGvTIc8-wY3jURIggAAARA"]
[Fri Apr 03 19:44:30.788345 2026] [:error] [pid 33446:tid 33501] [client 74.248.137.46:6103] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "ac-oHtg3dCqFYIIdw0otHQAAAFg"]
[Fri Apr 03 19:44:31.300755 2026] [:error] [pid 33446:tid 33481] [client 74.248.137.46:5930] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "ac-oH9g3dCqFYIIdw0otIQAAAEQ"]
[Fri Apr 03 19:44:31.817453 2026] [:error] [pid 33446:tid 33498] [client 74.248.137.46:5831] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ac-oH9g3dCqFYIIdw0otJAAAAFU"]
[Fri Apr 03 19:44:32.332447 2026] [:error] [pid 33446:tid 33479] [client 74.248.137.46:5913] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ac-oINg3dCqFYIIdw0otJgAAAEI"]
[Fri Apr 03 19:44:32.848395 2026] [:error] [pid 35469:tid 35483] [client 74.248.137.46:5869] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ac-oIKGvTIc8-wY3jURIjwAAAQw"]
[Fri Apr 03 19:44:33.368489 2026] [:error] [pid 55174:tid 55190] [client 74.248.137.46:5935] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ac-oIZ_WKqUonPNUHYzYqgAAAc4"]
[Fri Apr 03 19:44:33.889212 2026] [:error] [pid 33542:tid 33554] [client 74.248.137.46:6118] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxin.php"] [unique_id "ac-oIXwb6uB1LaGtepbnHQAAAMk"]
[Fri Apr 03 19:44:34.403552 2026] [:error] [pid 33542:tid 33552] [client 74.248.137.46:5796] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxin.php"] [unique_id "ac-oInwb6uB1LaGtepbnHgAAAMc"]
[Fri Apr 03 19:44:34.918357 2026] [:error] [pid 33445:tid 33451] [client 74.248.137.46:6013] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxin.php"] [unique_id "ac-oIllRNZ0iDVmJWM3dDgAAAAE"]
[Fri Apr 03 19:44:35.437484 2026] [:error] [pid 33542:tid 33561] [client 74.248.137.46:5838] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxin.php"] [unique_id "ac-oI3wb6uB1LaGtepbnJAAAANA"]
[Fri Apr 03 19:44:35.949874 2026] [:error] [pid 55174:tid 55188] [client 74.248.137.46:5941] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "ac-oI5_WKqUonPNUHYzYswAAAcw"]
[Fri Apr 03 19:44:36.473650 2026] [:error] [pid 40533:tid 40552] [client 74.248.137.46:5799] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "ac-oJPbIAA8AViDmwsub7wAAAVE"]
[Fri Apr 03 19:44:36.998511 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:5843] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "ac-oJKGvTIc8-wY3jURImgAAAQs"]
[Fri Apr 03 19:44:37.518038 2026] [:error] [pid 33446:tid 33499] [client 74.248.137.46:5888] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "ac-oJdg3dCqFYIIdw0otKwAAAFY"]
[Fri Apr 03 19:44:38.036876 2026] [:error] [pid 33446:tid 33487] [client 74.248.137.46:5931] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "ac-oJtg3dCqFYIIdw0otLAAAAEo"]
[Fri Apr 03 19:44:38.551611 2026] [:error] [pid 35469:tid 35476] [client 74.248.137.46:5891] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "ac-oJqGvTIc8-wY3jURIowAAAQU"]
[Fri Apr 03 19:44:39.071034 2026] [:error] [pid 40562:tid 40572] [client 74.248.137.46:5885] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "ac-oJzfFMXuP9zvqCepiggAAAYc"]
[Fri Apr 03 19:44:39.604654 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:6010] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/NewFile.php"] [unique_id "ac-oJ6GvTIc8-wY3jURIqQAAAQE"]
[Fri Apr 03 19:44:40.117168 2026] [:error] [pid 35469:tid 35494] [client 74.248.137.46:5895] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ac-oKKGvTIc8-wY3jURIrwAAARc"]
[Fri Apr 03 19:44:40.645972 2026] [:error] [pid 35469:tid 35483] [client 74.248.137.46:5945] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ac-oKKGvTIc8-wY3jURIsgAAAQw"]
[Fri Apr 03 19:44:41.175840 2026] [:error] [pid 35469:tid 35491] [client 74.248.137.46:5815] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ac-oKaGvTIc8-wY3jURItwAAARQ"]
[Fri Apr 03 19:44:41.710435 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:5846] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ac-oKaGvTIc8-wY3jURIvAAAAQ8"]
[Fri Apr 03 19:44:42.226379 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:5841] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolv2.php"] [unique_id "ac-oKqGvTIc8-wY3jURIwAAAAQE"]
[Fri Apr 03 19:44:42.754130 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:5889] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolv2.php"] [unique_id "ac-oKqGvTIc8-wY3jURIxAAAAQ8"]
[Fri Apr 03 19:44:43.277704 2026] [:error] [pid 35469:tid 35490] [client 74.248.137.46:5860] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolv2.php"] [unique_id "ac-oK6GvTIc8-wY3jURIyAAAARM"]
[Fri Apr 03 19:44:43.867508 2026] [:error] [pid 33445:tid 33460] [client 74.248.137.46:5870] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolv2.php"] [unique_id "ac-oK1lRNZ0iDVmJWM3dFwAAAAo"]
[Fri Apr 03 19:44:44.389484 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:5858] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geck.php"] [unique_id "ac-oLKGvTIc8-wY3jURIzwAAAQs"]
[Fri Apr 03 19:44:44.910909 2026] [:error] [pid 33447:tid 33513] [client 74.248.137.46:5872] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geck.php"] [unique_id "ac-oLEgaPmDHz92j4lM1VAAAAIk"]
[Fri Apr 03 19:44:45.423127 2026] [:error] [pid 33446:tid 33496] [client 74.248.137.46:5851] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geck.php"] [unique_id "ac-oLdg3dCqFYIIdw0otNwAAAFM"]
[Fri Apr 03 19:44:45.957569 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:5866] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geck.php"] [unique_id "ac-oLaGvTIc8-wY3jURI2QAAAQs"]
[Fri Apr 03 19:44:46.498918 2026] [:error] [pid 33446:tid 33498] [client 74.248.137.46:6084] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtt.php"] [unique_id "ac-oLtg3dCqFYIIdw0otOgAAAFU"]
[Fri Apr 03 19:44:47.024585 2026] [:error] [pid 33446:tid 33489] [client 74.248.137.46:5762] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtt.php"] [unique_id "ac-oL9g3dCqFYIIdw0otOwAAAEw"]
[Fri Apr 03 19:44:47.567409 2026] [:error] [pid 35469:tid 35474] [client 74.248.137.46:5828] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtt.php"] [unique_id "ac-oL6GvTIc8-wY3jURI5AAAAQM"]
[Fri Apr 03 19:44:48.104276 2026] [:error] [pid 33542:tid 33555] [client 74.248.137.46:5827] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtt.php"] [unique_id "ac-oMHwb6uB1LaGtepbnKQAAAMo"]
[Fri Apr 03 19:44:48.618820 2026] [:error] [pid 33447:tid 33525] [client 74.248.137.46:5900] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "ac-oMEgaPmDHz92j4lM1VwAAAJU"]
[Fri Apr 03 19:44:49.140966 2026] [:error] [pid 35469:tid 35483] [client 74.248.137.46:5947] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "ac-oMaGvTIc8-wY3jURI7QAAAQw"]
[Fri Apr 03 19:44:49.656980 2026] [:error] [pid 33445:tid 33470] [client 74.248.137.46:5884] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "ac-oMVlRNZ0iDVmJWM3dGQAAABQ"]
[Fri Apr 03 19:44:50.170520 2026] [:error] [pid 33445:tid 33451] [client 74.248.137.46:6038] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "ac-oMllRNZ0iDVmJWM3dGwAAAAE"]
[Fri Apr 03 19:44:50.683426 2026] [:error] [pid 35469:tid 35471] [client 74.248.137.46:5770] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "ac-oMqGvTIc8-wY3jURI7wAAAQA"]
[Fri Apr 03 19:44:51.196709 2026] [:error] [pid 33445:tid 33450] [client 74.248.137.46:5837] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "ac-oM1lRNZ0iDVmJWM3dHgAAAAA"]
[Fri Apr 03 19:44:51.711688 2026] [:error] [pid 33542:tid 33565] [client 74.248.137.46:5944] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "ac-oM3wb6uB1LaGtepbnKwAAANQ"]
[Fri Apr 03 19:44:52.224063 2026] [:error] [pid 33542:tid 33559] [client 74.248.137.46:5792] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "ac-oNHwb6uB1LaGtepbnLgAAAM4"]
[Fri Apr 03 19:44:52.738511 2026] [:error] [pid 33445:tid 33473] [client 74.248.137.46:5918] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "ac-oNFlRNZ0iDVmJWM3dIgAAABc"]
[Fri Apr 03 19:44:53.248587 2026] [:error] [pid 33542:tid 33550] [client 74.248.137.46:5943] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "ac-oNXwb6uB1LaGtepbnNAAAAMU"]
[Fri Apr 03 19:44:53.759262 2026] [:error] [pid 33445:tid 33464] [client 74.248.137.46:5859] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "ac-oNVlRNZ0iDVmJWM3dJAAAAA4"]
[Fri Apr 03 19:44:54.273075 2026] [:error] [pid 33446:tid 33491] [client 74.248.137.46:5911] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/manager.php"] [unique_id "ac-oNtg3dCqFYIIdw0otVAAAAE4"]
[Fri Apr 03 19:44:54.783857 2026] [:error] [pid 33542:tid 33554] [client 74.248.137.46:5765] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "ac-oNnwb6uB1LaGtepbnNgAAAMk"]
[Fri Apr 03 19:44:55.305808 2026] [:error] [pid 33446:tid 33497] [client 74.248.137.46:5784] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "ac-oN9g3dCqFYIIdw0otWQAAAFQ"]
[Fri Apr 03 19:44:55.817785 2026] [:error] [pid 35469:tid 35485] [client 74.248.137.46:5778] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "ac-oN6GvTIc8-wY3jURI_AAAAQ4"]
[Fri Apr 03 19:44:56.338425 2026] [:error] [pid 55174:tid 55195] [client 74.248.137.46:5797] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "ac-oOJ_WKqUonPNUHYzYtgAAAdM"]
[Fri Apr 03 19:44:56.850556 2026] [:error] [pid 33447:tid 33508] [client 74.248.137.46:5871] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "ac-oOEgaPmDHz92j4lM1XQAAAIQ"]
[Fri Apr 03 19:44:57.396336 2026] [:error] [pid 33446:tid 33492] [client 74.248.137.46:5836] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "ac-oOdg3dCqFYIIdw0otXQAAAE8"]
[Fri Apr 03 19:44:57.908969 2026] [:error] [pid 33445:tid 33456] [client 74.248.137.46:6098] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "ac-oOVlRNZ0iDVmJWM3dJgAAAAY"]
[Fri Apr 03 19:44:58.423404 2026] [:error] [pid 33445:tid 33453] [client 74.248.137.46:5760] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "ac-oOllRNZ0iDVmJWM3dKQAAAAM"]
[Fri Apr 03 19:44:58.942813 2026] [:error] [pid 33446:tid 33479] [client 74.248.137.46:5826] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/media.php"] [unique_id "ac-oOtg3dCqFYIIdw0otYAAAAEI"]
[Fri Apr 03 19:44:59.480080 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:5852] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/media.php"] [unique_id "ac-oO6GvTIc8-wY3jURJAgAAAQs"]
[Fri Apr 03 19:44:59.999428 2026] [:error] [pid 33542:tid 33546] [client 74.248.137.46:5863] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/media.php"] [unique_id "ac-oO3wb6uB1LaGtepbnPgAAAME"]
[Fri Apr 03 19:45:00.512823 2026] [:error] [pid 33447:tid 33513] [client 74.248.137.46:5855] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/media.php"] [unique_id "ac-oPEgaPmDHz92j4lM1YQAAAIk"]
[Fri Apr 03 19:45:01.030668 2026] [:error] [pid 55174:tid 55182] [client 74.248.137.46:5915] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "ac-oPZ_WKqUonPNUHYzYuAAAAcY"]
[Fri Apr 03 19:45:01.541278 2026] [:error] [pid 40533:tid 40544] [client 74.248.137.46:5834] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "ac-oPfbIAA8AViDmwsub_AAAAUk"]
[Fri Apr 03 19:45:02.055397 2026] [:error] [pid 40533:tid 40546] [client 74.248.137.46:5882] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "ac-oPvbIAA8AViDmwsub_gAAAUs"]
[Fri Apr 03 19:45:02.573768 2026] [:error] [pid 35469:tid 35471] [client 74.248.137.46:5812] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "ac-oPqGvTIc8-wY3jURJCgAAAQA"]
[Fri Apr 03 19:45:03.095630 2026] [:error] [pid 40533:tid 40539] [client 74.248.137.46:5856] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admir.php"] [unique_id "ac-oP_bIAA8AViDmwsucAQAAAUQ"]
[Fri Apr 03 19:45:03.614020 2026] [:error] [pid 33445:tid 33460] [client 74.248.137.46:6042] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admir.php"] [unique_id "ac-oP1lRNZ0iDVmJWM3dMQAAAAo"]
[Fri Apr 03 19:45:04.131548 2026] [:error] [pid 33445:tid 33473] [client 74.248.137.46:5853] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admir.php"] [unique_id "ac-oQFlRNZ0iDVmJWM3dNAAAABc"]
[Fri Apr 03 19:45:04.657220 2026] [:error] [pid 33542:tid 33554] [client 74.248.137.46:5747] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admir.php"] [unique_id "ac-oQHwb6uB1LaGtepbnRAAAAMk"]
[Fri Apr 03 19:45:05.197857 2026] [:error] [pid 33445:tid 33467] [client 74.248.137.46:5788] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "ac-oQVlRNZ0iDVmJWM3dPQAAABE"]
[Fri Apr 03 19:45:05.710417 2026] [:error] [pid 33445:tid 33474] [client 74.248.137.46:5783] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "ac-oQVlRNZ0iDVmJWM3dQAAAABg"]
[Fri Apr 03 19:45:06.224106 2026] [:error] [pid 33445:tid 33451] [client 74.248.137.46:5842] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "ac-oQllRNZ0iDVmJWM3dRAAAAAE"]
[Fri Apr 03 19:45:06.743391 2026] [:error] [pid 33445:tid 33457] [client 74.248.137.46:5920] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "ac-oQllRNZ0iDVmJWM3dSAAAAAc"]
[Fri Apr 03 19:45:07.262590 2026] [:error] [pid 33447:tid 33522] [client 74.248.137.46:5934] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "ac-oQ0gaPmDHz92j4lM1cwAAAJI"]
[Fri Apr 03 19:45:07.773006 2026] [:error] [pid 33542:tid 33561] [client 74.248.137.46:5850] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "ac-oQ3wb6uB1LaGtepbnSQAAANA"]
[Fri Apr 03 19:45:08.306740 2026] [:error] [pid 55174:tid 55184] [client 74.248.137.46:5703] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "ac-oRJ_WKqUonPNUHYzYvAAAAcg"]
[Fri Apr 03 19:45:08.819176 2026] [:error] [pid 55174:tid 55181] [client 74.248.137.46:5768] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "ac-oRJ_WKqUonPNUHYzYvQAAAcU"]
[Fri Apr 03 19:45:09.354496 2026] [:error] [pid 33542:tid 33550] [client 74.248.137.46:5936] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-oRXwb6uB1LaGtepbnTQAAAMU"]
[Fri Apr 03 19:45:09.869315 2026] [:error] [pid 40533:tid 40537] [client 74.248.137.46:5989] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-oRfbIAA8AViDmwsucCgAAAUI"]
[Fri Apr 03 19:45:10.385570 2026] [:error] [pid 33542:tid 33555] [client 74.248.137.46:5813] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-oRnwb6uB1LaGtepbnUAAAAMo"]
[Fri Apr 03 19:45:10.900682 2026] [:error] [pid 33446:tid 33477] [client 74.248.137.46:5840] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-oRtg3dCqFYIIdw0otbQAAAEA"]
[Fri Apr 03 19:45:11.428145 2026] [:error] [pid 33542:tid 33568] [client 74.248.137.46:5776] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "ac-oR3wb6uB1LaGtepbnUwAAANc"]
[Fri Apr 03 19:45:11.941329 2026] [:error] [pid 33446:tid 33486] [client 74.248.137.46:5790] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "ac-oR9g3dCqFYIIdw0otcgAAAEk"]
[Fri Apr 03 19:45:12.453766 2026] [:error] [pid 33446:tid 33483] [client 74.248.137.46:5777] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "ac-oSNg3dCqFYIIdw0otdQAAAEY"]
[Fri Apr 03 19:45:12.972843 2026] [:error] [pid 55174:tid 55191] [client 74.248.137.46:5766] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cc.php"] [unique_id "ac-oSJ_WKqUonPNUHYzYxQAAAc8"]
[Fri Apr 03 19:45:13.528689 2026] [:error] [pid 33542:tid 33565] [client 74.248.137.46:5779] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bkxzo.php"] [unique_id "ac-oSXwb6uB1LaGtepbnVQAAANQ"]
[Fri Apr 03 19:45:14.055116 2026] [:error] [pid 33446:tid 33482] [client 74.248.137.46:5848] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bkxzo.php"] [unique_id "ac-oStg3dCqFYIIdw0oteQAAAEU"]
[Fri Apr 03 19:45:14.575060 2026] [:error] [pid 33446:tid 33501] [client 74.248.137.46:5798] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bkxzo.php"] [unique_id "ac-oStg3dCqFYIIdw0otfAAAAFg"]
[Fri Apr 03 19:45:15.094307 2026] [:error] [pid 33446:tid 33485] [client 74.248.137.46:5948] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bkxzo.php"] [unique_id "ac-oS9g3dCqFYIIdw0otfwAAAEg"]
[Fri Apr 03 19:45:15.610499 2026] [:error] [pid 33447:tid 33508] [client 74.248.137.46:5862] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "ac-oS0gaPmDHz92j4lM1fAAAAIQ"]
[Fri Apr 03 19:45:16.135661 2026] [:error] [pid 35469:tid 35480] [client 74.248.137.46:5835] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "ac-oTKGvTIc8-wY3jURJDwAAAQk"]
[Fri Apr 03 19:45:16.716007 2026] [:error] [pid 33542:tid 33547] [client 74.248.137.46:5718] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "ac-oTHwb6uB1LaGtepbnWwAAAMI"]
[Fri Apr 03 19:45:17.245074 2026] [:error] [pid 33446:tid 33499] [client 74.248.137.46:5847] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "ac-oTdg3dCqFYIIdw0othQAAAFY"]
[Fri Apr 03 19:45:17.775748 2026] [:error] [pid 33446:tid 33501] [client 74.248.137.46:5787] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "ac-oTdg3dCqFYIIdw0otiAAAAFg"]
[Fri Apr 03 19:45:18.292961 2026] [:error] [pid 33445:tid 33471] [client 74.248.137.46:5967] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "ac-oTllRNZ0iDVmJWM3dWwAAABU"]
[Fri Apr 03 19:45:18.803049 2026] [:error] [pid 33445:tid 33456] [client 74.248.137.46:5800] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "ac-oTllRNZ0iDVmJWM3dXQAAAAY"]
[Fri Apr 03 19:45:19.316815 2026] [:error] [pid 33446:tid 33493] [client 74.248.137.46:5809] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "ac-oT9g3dCqFYIIdw0otjQAAAFA"]
[Fri Apr 03 19:45:19.828017 2026] [:error] [pid 35469:tid 35484] [client 74.248.137.46:5780] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "ac-oT6GvTIc8-wY3jURJEwAAAQ0"]
[Fri Apr 03 19:45:20.339865 2026] [:error] [pid 33447:tid 33513] [client 74.248.137.46:5887] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "ac-oUEgaPmDHz92j4lM1fwAAAIk"]
[Fri Apr 03 19:45:20.851754 2026] [:error] [pid 33447:tid 33504] [client 74.248.137.46:5710] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "ac-oUEgaPmDHz92j4lM1gwAAAIA"]
[Fri Apr 03 19:45:21.367125 2026] [:error] [pid 40562:tid 40588] [client 74.248.137.46:5817] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "ac-oUTfFMXuP9zvqCepijAAAAZc"]
[Fri Apr 03 19:45:21.881594 2026] [:error] [pid 33446:tid 33499] [client 74.248.137.46:5767] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac-oUdg3dCqFYIIdw0otlAAAAFY"]
[Fri Apr 03 19:45:31.610814 2026] [autoindex:error] [pid 33446:tid 33484] [client 74.248.137.46:5729] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 03 19:45:33.990538 2026] [autoindex:error] [pid 33446:tid 33493] [client 74.248.137.46:5729] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 03 19:45:37.548823 2026] [:error] [pid 33446:tid 33490] [client 74.248.137.46:5729] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mds.php"] [unique_id "ac-oYdg3dCqFYIIdw0otxAAAAE0"]
[Fri Apr 03 19:45:38.066656 2026] [:error] [pid 35469:tid 35490] [client 74.248.137.46:5709] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mds.php"] [unique_id "ac-oYqGvTIc8-wY3jURJOgAAARM"]
[Fri Apr 03 19:45:38.587781 2026] [:error] [pid 40533:tid 40543] [client 74.248.137.46:5785] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mds.php"] [unique_id "ac-oYvbIAA8AViDmwsucIQAAAUg"]
[Fri Apr 03 19:45:39.098446 2026] [:error] [pid 33542:tid 33564] [client 74.248.137.46:5702] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mds.php"] [unique_id "ac-oY3wb6uB1LaGtepbnYwAAANM"]
[Fri Apr 03 19:45:39.614080 2026] [:error] [pid 55174:tid 55196] [client 74.248.137.46:5738] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "ac-oY5_WKqUonPNUHYzY5wAAAdQ"]
[Fri Apr 03 19:45:40.132889 2026] [:error] [pid 33446:tid 33498] [client 74.248.137.46:5963] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "ac-oZNg3dCqFYIIdw0otxwAAAFU"]
[Fri Apr 03 19:45:40.645574 2026] [:error] [pid 35469:tid 35490] [client 74.248.137.46:5786] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "ac-oZKGvTIc8-wY3jURJTAAAARM"]
[Fri Apr 03 19:45:41.158977 2026] [:error] [pid 35469:tid 35473] [client 74.248.137.46:5724] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "ac-oZaGvTIc8-wY3jURJUQAAAQI"]
[Fri Apr 03 19:45:41.670613 2026] [:error] [pid 35469:tid 35492] [client 74.248.137.46:5772] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "ac-oZaGvTIc8-wY3jURJUwAAARU"]
[Fri Apr 03 19:45:42.185930 2026] [:error] [pid 35469:tid 35483] [client 74.248.137.46:5789] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "ac-oZqGvTIc8-wY3jURJZgAAAQw"]
[Fri Apr 03 19:45:42.700656 2026] [:error] [pid 35469:tid 35475] [client 74.248.137.46:5808] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "ac-oZqGvTIc8-wY3jURJhwAAAQQ"]
[Fri Apr 03 19:45:43.212195 2026] [:error] [pid 33446:tid 33498] [client 74.248.137.46:5803] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "ac-oZ9g3dCqFYIIdw0ot0QAAAFU"]
[Fri Apr 03 19:45:43.722034 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:5871] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-is.php"] [unique_id "ac-oZ6GvTIc8-wY3jURJqQAAAQE"]
[Fri Apr 03 19:45:44.233718 2026] [:error] [pid 33446:tid 33486] [client 74.248.137.46:5910] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-is.php"] [unique_id "ac-oaNg3dCqFYIIdw0ot0wAAAEk"]
[Fri Apr 03 19:45:44.745598 2026] [:error] [pid 33445:tid 33470] [client 74.248.137.46:5946] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-is.php"] [unique_id "ac-oaFlRNZ0iDVmJWM3dkAAAABQ"]
[Fri Apr 03 19:45:45.257891 2026] [:error] [pid 40562:tid 40578] [client 74.248.137.46:5700] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-is.php"] [unique_id "ac-oaTfFMXuP9zvqCepipQAAAY0"]
[Fri Apr 03 19:45:45.769214 2026] [:error] [pid 40562:tid 40585] [client 74.248.137.46:5830] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "ac-oaTfFMXuP9zvqCepipwAAAZQ"]
[Fri Apr 03 19:45:46.280373 2026] [:error] [pid 33446:tid 33479] [client 74.248.137.46:5769] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "ac-oatg3dCqFYIIdw0ot2wAAAEI"]
[Fri Apr 03 19:45:46.792825 2026] [:error] [pid 33445:tid 33455] [client 74.248.137.46:5775] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "ac-oallRNZ0iDVmJWM3dlQAAAAU"]
[Fri Apr 03 19:45:47.306231 2026] [:error] [pid 33447:tid 33516] [client 74.248.137.46:5716] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file15.php"] [unique_id "ac-oa0gaPmDHz92j4lM1qAAAAIw"]
[Fri Apr 03 19:45:47.820999 2026] [:error] [pid 33542:tid 33556] [client 74.248.137.46:5802] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "ac-oa3wb6uB1LaGtepbnZQAAAMs"]
[Fri Apr 03 19:45:48.334204 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:5676] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "ac-obKGvTIc8-wY3jURJzAAAAQE"]
[Fri Apr 03 19:45:48.847738 2026] [:error] [pid 33446:tid 33486] [client 74.248.137.46:5713] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "ac-obNg3dCqFYIIdw0ot4gAAAEk"]
[Fri Apr 03 19:45:49.362328 2026] [:error] [pid 33445:tid 33458] [client 74.248.137.46:5657] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wsd.php"] [unique_id "ac-obVlRNZ0iDVmJWM3dmgAAAAg"]
[Fri Apr 03 19:45:49.873831 2026] [:error] [pid 55174:tid 55192] [client 74.248.137.46:5730] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "ac-obZ_WKqUonPNUHYzY8QAAAdA"]
[Fri Apr 03 19:45:50.388020 2026] [:error] [pid 35469:tid 35473] [client 74.248.137.46:5706] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "ac-obqGvTIc8-wY3jURJ2wAAAQI"]
[Fri Apr 03 19:45:50.899849 2026] [:error] [pid 35469:tid 35487] [client 74.248.137.46:5774] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "ac-obqGvTIc8-wY3jURJ4AAAARA"]
[Fri Apr 03 19:45:51.410918 2026] [:error] [pid 33446:tid 33482] [client 74.248.137.46:5878] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "ac-ob9g3dCqFYIIdw0ot6AAAAEU"]
[Fri Apr 03 19:45:51.925492 2026] [:error] [pid 55174:tid 55181] [client 74.248.137.46:5801] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "ac-ob5_WKqUonPNUHYzY8wAAAcU"]
[Fri Apr 03 19:45:52.435581 2026] [:error] [pid 35469:tid 35483] [client 74.248.137.46:5757] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "ac-ocKGvTIc8-wY3jURJ7gAAAQw"]
[Fri Apr 03 19:45:52.948368 2026] [:error] [pid 33447:tid 33518] [client 74.248.137.46:5927] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "ac-ocEgaPmDHz92j4lM1rQAAAI4"]
[Fri Apr 03 19:45:53.460749 2026] [:error] [pid 35469:tid 35488] [client 74.248.137.46:5811] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "ac-ocaGvTIc8-wY3jURJ9wAAARE"]
[Fri Apr 03 19:45:53.972850 2026] [:error] [pid 33447:tid 33505] [client 74.248.137.46:6030] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ac-ocUgaPmDHz92j4lM1rgAAAIE"]
[Fri Apr 03 19:45:54.484632 2026] [:error] [pid 33447:tid 33508] [client 74.248.137.46:5791] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ac-ockgaPmDHz92j4lM1rwAAAIQ"]
[Fri Apr 03 19:45:55.003270 2026] [:error] [pid 35469:tid 35480] [client 74.248.137.46:5814] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ac-oc6GvTIc8-wY3jURKAQAAAQk"]
[Fri Apr 03 19:45:55.517020 2026] [:error] [pid 33447:tid 33515] [client 74.248.137.46:5877] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ac-oc0gaPmDHz92j4lM1sAAAAIs"]
[Fri Apr 03 19:45:56.029505 2026] [:error] [pid 33447:tid 33513] [client 74.248.137.46:5810] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lol.php"] [unique_id "ac-odEgaPmDHz92j4lM1sgAAAIk"]
[Fri Apr 03 19:45:56.541488 2026] [:error] [pid 40562:tid 40577] [client 74.248.137.46:5726] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lol.php"] [unique_id "ac-odDfFMXuP9zvqCepisgAAAYw"]
[Fri Apr 03 19:45:57.054683 2026] [:error] [pid 35469:tid 35492] [client 74.248.137.46:5880] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lol.php"] [unique_id "ac-odaGvTIc8-wY3jURKCwAAARU"]
[Fri Apr 03 19:45:57.568424 2026] [:error] [pid 35469:tid 35488] [client 74.248.137.46:5723] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lol.php"] [unique_id "ac-odaGvTIc8-wY3jURKDwAAARE"]
[Fri Apr 03 19:45:58.078101 2026] [:error] [pid 33446:tid 33490] [client 74.248.137.46:5793] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "ac-odtg3dCqFYIIdw0ot9QAAAE0"]
[Fri Apr 03 19:45:58.589907 2026] [:error] [pid 33446:tid 33491] [client 74.248.137.46:5699] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "ac-odtg3dCqFYIIdw0ot9gAAAE4"]
[Fri Apr 03 19:45:59.105821 2026] [:error] [pid 40562:tid 40574] [client 74.248.137.46:5733] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "ac-odzfFMXuP9zvqCepiswAAAYk"]
[Fri Apr 03 19:45:59.621804 2026] [:error] [pid 33446:tid 33477] [client 74.248.137.46:5660] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "ac-od9g3dCqFYIIdw0ot-wAAAEA"]
[Fri Apr 03 21:22:53.384546 2026] [:error] [pid 35469:tid 35475] [client 45.92.1.144:56559] [client 45.92.1.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "ac-_LaGvTIc8-wY3jUSaDAAAAQQ"]
[Fri Apr 03 21:22:53.869933 2026] [:error] [pid 40533:tid 40547] [client 45.92.1.144:52933] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac-_LfbIAA8AViDmwsuwKAAAAUw"]
[Fri Apr 03 21:22:54.357728 2026] [:error] [pid 33446:tid 33491] [client 45.92.1.144:65190] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac-_Ltg3dCqFYIIdw0ptEQAAAE4"]
[Fri Apr 03 21:22:54.847052 2026] [:error] [pid 35469:tid 35492] [client 45.92.1.144:51143] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac-_LqGvTIc8-wY3jUSaDgAAARU"]
[Fri Apr 03 21:22:55.331064 2026] [:error] [pid 35469:tid 35484] [client 45.92.1.144:62541] [client 45.92.1.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "ac-_L6GvTIc8-wY3jUSaDwAAAQ0"]
[Fri Apr 03 21:22:55.816859 2026] [:error] [pid 35469:tid 35493] [client 45.92.1.144:52776] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/txets.php"] [unique_id "ac-_L6GvTIc8-wY3jUSaEQAAARY"]
[Fri Apr 03 21:22:56.306880 2026] [:error] [pid 40533:tid 40540] [client 45.92.1.144:50380] [client 45.92.1.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schallfuns.php"] [unique_id "ac-_MPbIAA8AViDmwsuwKQAAAUU"]
[Fri Apr 03 21:22:56.787916 2026] [:error] [pid 35469:tid 35495] [client 45.92.1.144:59982] [client 45.92.1.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "ac-_MKGvTIc8-wY3jUSaFgAAARg"]
[Fri Apr 03 21:47:55.346983 2026] [:error] [pid 33445:tid 33468] [client 43.131.23.154:40012] [client 43.131.23.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac_FC1lRNZ0iDVmJWM0XDQAAABI"]
[Fri Apr 03 22:47:07.837544 2026] [:error] [pid 40533:tid 40547] [client 114.80.36.40:34196] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac_S6_bIAA8AViDmwsvRRgAAAUw"]
[Sat Apr 04 01:34:26.578453 2026] [:error] [pid 12081:tid 12103] [client 79.137.65.139:51788] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ac_6IqMJBCYerZTQdmIDYQAAAEM"]
[Sat Apr 04 01:34:32.213739 2026] [:error] [pid 12233:tid 12247] [client 79.137.65.139:39076] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ac_6KBQDAzkmdfiSgI2uawAAAQw"]
[Sat Apr 04 01:34:38.573448 2026] [:error] [pid 12081:tid 12118] [client 79.137.65.139:60204] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ac_6LqMJBCYerZTQdmIDhwAAAFI"]
[Sat Apr 04 01:34:42.588122 2026] [:error] [pid 12081:tid 12102] [client 79.137.65.139:60220] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ac_6MqMJBCYerZTQdmIDjAAAAEI"]
[Sat Apr 04 01:34:45.653674 2026] [:error] [pid 12233:tid 12243] [client 79.137.65.139:60230] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ac_6NRQDAzkmdfiSgI2unwAAAQg"]
[Sat Apr 04 01:34:49.529970 2026] [:error] [pid 12089:tid 12141] [client 79.137.65.139:51130] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ac_6OUSCG1Z_hi7I_jJtvwAAAI4"]
[Sat Apr 04 01:34:53.053855 2026] [:error] [pid 12233:tid 12257] [client 79.137.65.139:51136] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ac_6PRQDAzkmdfiSgI2uuAAAARY"]
[Sat Apr 04 01:34:57.010499 2026] [:error] [pid 12233:tid 12235] [client 79.137.65.139:37220] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ac_6QRQDAzkmdfiSgI2uwgAAAQA"]
[Sat Apr 04 01:35:00.647912 2026] [:error] [pid 12233:tid 12258] [client 79.137.65.139:37228] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ac_6RBQDAzkmdfiSgI2u3AAAARc"]
[Sat Apr 04 01:35:04.105495 2026] [:error] [pid 12233:tid 12240] [client 79.137.65.139:37238] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ac_6SBQDAzkmdfiSgI2u7wAAAQU"]
[Sat Apr 04 01:35:06.926001 2026] [:error] [pid 12233:tid 12256] [client 79.137.65.139:56830] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ac_6ShQDAzkmdfiSgI2u_wAAARU"]
[Sat Apr 04 01:35:10.776340 2026] [:error] [pid 12089:tid 12143] [client 79.137.65.139:56846] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ac_6TkSCG1Z_hi7I_jJt2gAAAJA"]
[Sat Apr 04 01:35:13.771279 2026] [:error] [pid 12081:tid 12105] [client 79.137.65.139:56860] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ac_6UaMJBCYerZTQdmID3AAAAEU"]
[Sat Apr 04 01:35:17.303821 2026] [:error] [pid 12097:tid 12170] [client 79.137.65.139:55454] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ac_6VRnkcvJ01y2CY3m0VQAAAM8"]
[Sat Apr 04 01:35:20.039693 2026] [:error] [pid 12097:tid 12176] [client 79.137.65.139:55468] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ac_6WBnkcvJ01y2CY3m0XAAAANU"]
[Sat Apr 04 01:35:59.440154 2026] [:error] [pid 12233:tid 12257] [client 79.137.65.139:55478] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ac_6fxQDAzkmdfiSgI2vwQAAARY"]
[Sat Apr 04 01:36:02.305494 2026] [:error] [pid 12097:tid 12166] [client 79.137.65.139:57822] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ac_6ghnkcvJ01y2CY3m0pwAAAMs"]
[Sat Apr 04 01:36:05.188926 2026] [:error] [pid 12097:tid 12173] [client 79.137.65.139:57838] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ac_6hRnkcvJ01y2CY3m0uAAAANI"]
[Sat Apr 04 01:36:07.821386 2026] [:error] [pid 12233:tid 12238] [client 79.137.65.139:47034] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ac_6hxQDAzkmdfiSgI2vzQAAAQM"]
[Sat Apr 04 01:36:10.544619 2026] [:error] [pid 12097:tid 12164] [client 79.137.65.139:47050] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ac_6ihnkcvJ01y2CY3m00AAAAMk"]
[Sat Apr 04 01:36:13.376526 2026] [:error] [pid 12233:tid 12258] [client 79.137.65.139:47064] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ac_6jRQDAzkmdfiSgI2v4gAAARc"]
[Sat Apr 04 01:36:16.182262 2026] [:error] [pid 12081:tid 12109] [client 79.137.65.139:47076] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ac_6kKMJBCYerZTQdmIEeQAAAEk"]
[Sat Apr 04 01:36:18.780584 2026] [:error] [pid 12089:tid 12151] [client 79.137.65.139:41164] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ac_6kkSCG1Z_hi7I_jJuTQAAAJg"]
[Sat Apr 04 01:36:21.277009 2026] [:error] [pid 12089:tid 12149] [client 79.137.65.139:41174] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ac_6lUSCG1Z_hi7I_jJuXQAAAJY"]
[Sat Apr 04 01:36:24.143026 2026] [:error] [pid 12233:tid 12250] [client 79.137.65.139:41182] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ac_6mBQDAzkmdfiSgI2v9gAAAQ8"]
[Sat Apr 04 01:36:26.802878 2026] [:error] [pid 12233:tid 12259] [client 79.137.65.139:44774] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ac_6mhQDAzkmdfiSgI2wDgAAARg"]
[Sat Apr 04 01:36:29.296142 2026] [:error] [pid 12089:tid 12142] [client 79.137.65.139:44790] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ac_6nUSCG1Z_hi7I_jJuhQAAAI8"]
[Sat Apr 04 01:36:31.991887 2026] [:error] [pid 12097:tid 12162] [client 79.137.65.139:44806] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ac_6nxnkcvJ01y2CY3m1DQAAAMc"]
[Sat Apr 04 01:36:34.608698 2026] [:error] [pid 12089:tid 12151] [client 79.137.65.139:44810] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ac_6okSCG1Z_hi7I_jJujAAAAJg"]
[Sat Apr 04 01:36:37.135523 2026] [:error] [pid 12097:tid 12171] [client 79.137.65.139:54302] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ac_6pRnkcvJ01y2CY3m1HwAAANA"]
[Sat Apr 04 01:36:39.479913 2026] [:error] [pid 12233:tid 12253] [client 79.137.65.139:54310] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ac_6pxQDAzkmdfiSgI2wcQAAARI"]
[Sat Apr 04 01:36:41.910199 2026] [:error] [pid 12097:tid 12167] [client 79.137.65.139:54314] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ac_6qRnkcvJ01y2CY3m1MAAAAMw"]
[Sat Apr 04 01:36:44.397497 2026] [:error] [pid 12089:tid 12134] [client 79.137.65.139:54324] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ac_6rESCG1Z_hi7I_jJukAAAAIc"]
[Sat Apr 04 01:36:46.793885 2026] [:error] [pid 12081:tid 12101] [client 79.137.65.139:36012] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ac_6rqMJBCYerZTQdmIExwAAAEE"]
[Sat Apr 04 01:36:49.245408 2026] [:error] [pid 12097:tid 12170] [client 79.137.65.139:36024] [client 79.137.65.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ac_6sRnkcvJ01y2CY3m1SwAAAM8"]
[Sat Apr 04 01:43:03.113941 2026] [:error] [pid 12233:tid 12248] [client 124.156.179.141:40288] [client 124.156.179.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ac_8JxQDAzkmdfiSgI23JgAAAQ0"]
[Sat Apr 04 05:21:24.869273 2026] [:error] [pid 2457:tid 2491] [client 182.44.8.254:50093] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adAvVEmNHppaMd92ZpdQcwAAAA4"]
[Sat Apr 04 07:04:55.559533 2026] [:error] [pid 37114:tid 37138] [client 45.92.1.112:55927] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adBHl8-DnSj3fGMexeKjNwAAARY"]
[Sat Apr 04 07:04:56.048007 2026] [:error] [pid 37114:tid 37139] [client 45.92.1.112:53859] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adBHmM-DnSj3fGMexeKjPQAAARc"]
[Sat Apr 04 07:04:56.642829 2026] [:error] [pid 2459:tid 2550] [client 45.92.1.112:62555] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adBHmAefyCmu4LR_PlqJOAAAAJI"]
[Sat Apr 04 07:04:56.800035 2026] [:error] [pid 2459:tid 2541] [client 45.92.1.112:56189] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adBHmAefyCmu4LR_PlqJOQAAAIk"]
[Sat Apr 04 07:04:57.310296 2026] [:error] [pid 2567:tid 2585] [client 45.92.1.112:58976] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adBHmWJJmfRsTrAKjdSTiwAAAMs"]
[Sat Apr 04 07:04:57.347183 2026] [:error] [pid 2459:tid 2534] [client 45.92.1.112:58333] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adBHmQefyCmu4LR_PlqJQAAAAIM"]
[Sat Apr 04 07:04:57.835680 2026] [:error] [pid 2457:tid 2494] [client 45.92.1.112:51117] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adBHmUmNHppaMd92Zpdm8wAAABE"]
[Sat Apr 04 07:04:57.998657 2026] [:error] [pid 2458:tid 2505] [client 45.92.1.112:59702] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adBHmSNozic5SuWqcln0ygAAAEE"]
[Sat Apr 04 07:04:58.638268 2026] [:error] [pid 37114:tid 37134] [client 45.92.1.112:54052] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adBHms-DnSj3fGMexeKjSgAAARI"]
[Sat Apr 04 07:04:59.180963 2026] [:error] [pid 2457:tid 2495] [client 45.92.1.112:58310] [client 45.92.1.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adBHm0mNHppaMd92Zpdm-wAAABI"]
[Sat Apr 04 08:15:10.491020 2026] [:error] [pid 2567:tid 2580] [client 170.106.107.87:50110] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adBYDmJJmfRsTrAKjdTGiQAAAMY"]
[Sat Apr 04 11:12:17.221152 2026] [:error] [pid 2458:tid 2507] [client 77.223.28.34:59885] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adCBkSNozic5SuWqclk9xwAAAEM"]
[Sat Apr 04 11:12:19.671279 2026] [:error] [pid 37114:tid 37121] [client 77.223.28.34:59854] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "adCBk8-DnSj3fGMexeIdVQAAAQU"]
[Sat Apr 04 11:12:22.115671 2026] [:error] [pid 37114:tid 37133] [client 77.223.28.34:63751] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "adCBls-DnSj3fGMexeIdXQAAARE"]
[Sat Apr 04 11:12:24.385907 2026] [:error] [pid 2567:tid 2598] [client 77.223.28.34:60295] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "adCBmGJJmfRsTrAKjdRExQAAANg"]
[Sat Apr 04 11:12:26.833163 2026] [:error] [pid 2567:tid 2596] [client 77.223.28.34:59119] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "adCBmmJJmfRsTrAKjdRE0wAAANY"]
[Sat Apr 04 11:12:29.280661 2026] [:error] [pid 2458:tid 2522] [client 77.223.28.34:63596] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adCBnSNozic5SuWqclk91gAAAFI"]
[Sat Apr 04 11:12:31.707807 2026] [:error] [pid 2459:tid 2533] [client 77.223.28.34:60731] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adCBnwefyCmu4LR_Plro6wAAAII"]
[Sat Apr 04 11:12:34.343426 2026] [:error] [pid 37114:tid 37123] [client 77.223.28.34:63428] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adCBos-DnSj3fGMexeIdfQAAAQc"]
[Sat Apr 04 11:12:36.905175 2026] [:error] [pid 2567:tid 2574] [client 77.223.28.34:60157] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adCBpGJJmfRsTrAKjdRFFAAAAMA"]
[Sat Apr 04 11:12:39.469090 2026] [:error] [pid 2567:tid 2598] [client 77.223.28.34:64392] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adCBp2JJmfRsTrAKjdRFJQAAANg"]
[Sat Apr 04 11:12:41.917600 2026] [:error] [pid 2459:tid 2553] [client 77.223.28.34:62005] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adCBqQefyCmu4LR_Plro8AAAAJU"]
[Sat Apr 04 11:12:44.342672 2026] [:error] [pid 37114:tid 37118] [client 77.223.28.34:60481] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adCBrM-DnSj3fGMexeIdkgAAAQI"]
[Sat Apr 04 11:12:46.782632 2026] [:error] [pid 37114:tid 37121] [client 77.223.28.34:61331] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adCBrs-DnSj3fGMexeIdmQAAAQU"]
[Sat Apr 04 11:12:49.224317 2026] [:error] [pid 2457:tid 2497] [client 77.223.28.34:62768] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adCBsUmNHppaMd92Zpek_wAAABQ"]
[Sat Apr 04 11:12:51.651371 2026] [:error] [pid 37114:tid 37125] [client 77.223.28.34:65139] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adCBs8-DnSj3fGMexeIdpAAAAQk"]
[Sat Apr 04 11:12:53.928950 2026] [:error] [pid 2458:tid 2521] [client 77.223.28.34:60101] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adCBtSNozic5SuWqclk99wAAAFE"]
[Sat Apr 04 11:12:56.348342 2026] [:error] [pid 2457:tid 2492] [client 77.223.28.34:60189] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adCBuEmNHppaMd92ZpelBgAAAA8"]
[Sat Apr 04 11:12:58.628039 2026] [:error] [pid 2567:tid 2594] [client 77.223.28.34:64499] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adCBumJJmfRsTrAKjdRFTgAAANQ"]
[Sat Apr 04 11:13:01.065336 2026] [:error] [pid 2458:tid 2527] [client 77.223.28.34:64120] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "adCBvSNozic5SuWqclk-AQAAAFc"]
[Sat Apr 04 11:13:03.501925 2026] [:error] [pid 37114:tid 37139] [client 77.223.28.34:59874] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "adCBv8-DnSj3fGMexeId0QAAARc"]
[Sat Apr 04 11:13:05.956933 2026] [:error] [pid 2567:tid 2584] [client 77.223.28.34:59682] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "adCBwWJJmfRsTrAKjdRFcQAAAMo"]
[Sat Apr 04 11:13:08.420230 2026] [:error] [pid 2459:tid 2555] [client 77.223.28.34:61893] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "adCBxAefyCmu4LR_PlrpEQAAAJc"]
[Sat Apr 04 11:13:10.840020 2026] [:error] [pid 2457:tid 2498] [client 77.223.28.34:59422] [client 77.223.28.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "adCBxkmNHppaMd92ZpelFQAAABU"]
[Sat Apr 04 11:36:44.166163 2026] [:error] [pid 2459:tid 2542] [client 14.215.163.132:37353] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adCHTAefyCmu4LR_Plrx1AAAAIo"]
[Sat Apr 04 18:12:48.960651 2026] [:error] [pid 37114:tid 37119] [client 182.42.111.156:50698] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adDkIM-DnSj3fGMexeIPNgAAAQM"]
[Sat Apr 04 20:28:20.628179 2026] [:error] [pid 2459:tid 2553] [client 43.166.136.153:47952] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adED5AefyCmu4LR_PloL_wAAAJU"]
[Sat Apr 04 20:35:00.320028 2026] [:error] [pid 2459:tid 2544] [client 173.239.214.38:52525] [client 173.239.214.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "adEFdAefyCmu4LR_PloQAAAAAIw"]
[Sat Apr 04 22:31:55.503054 2026] [:error] [pid 63487:tid 63499] [client 209.141.34.190:55976] [client 209.141.34.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.34.190, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adEg22pqOMD5fJ8_5q0ZSgAAAUk"]
[Sat Apr 04 22:31:56.576673 2026] [:error] [pid 63487:tid 63495] [client 209.141.34.190:55976] [client 209.141.34.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.34.190, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adEg3GpqOMD5fJ8_5q0ZTwAAAUU"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Sat Apr 04 23:29:36.584882 2026] [:error] [pid 63487:tid 63511] [client 43.135.138.128:49476] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adEuYGpqOMD5fJ8_5q041wAAAVU"]
[Sun Apr 05 00:52:55.683783 2026] [:error] [pid 53821:tid 53933] [client 49.235.136.28:57658] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adFB54r_VtuiSAUdPhmASwAAAIU"]
[Sun Apr 05 04:02:45.354590 2026] [:error] [pid 45409:tid 45429] [client 170.106.110.146:60238] [client 170.106.110.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adFuZdHt_Oyw03gjCNhvpQAAANI"]
[Sun Apr 05 04:27:48.857376 2026] [:error] [pid 45304:tid 45354] [client 205.185.118.173:63529] [client 205.185.118.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.118.173, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adF0RA5jnqDKKovdRknjNwAAAEo"]
[Sun Apr 05 04:27:50.016447 2026] [:error] [pid 45304:tid 45353] [client 205.185.118.173:63529] [client 205.185.118.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.118.173, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adF0Rg5jnqDKKovdRknjOgAAAEk"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Sun Apr 05 05:53:20.291360 2026] [:error] [pid 45304:tid 45360] [client 205.185.115.18:64171] [client 205.185.115.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adGIUA5jnqDKKovdRkkGTgAAAFA"]
[Sun Apr 05 05:53:21.419571 2026] [:error] [pid 45304:tid 45367] [client 205.185.115.18:64171] [client 205.185.115.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adGIUQ5jnqDKKovdRkkGVgAAAFc"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Sun Apr 05 06:14:39.141005 2026] [:error] [pid 45305:tid 45382] [client 65.108.78.33:18522] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adGNT-jDQjr7aWhjflApeQAAAIs"]
[Sun Apr 05 06:14:41.701480 2026] [:error] [pid 45305:tid 45382] [client 65.108.78.33:18534] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adGNUejDQjr7aWhjflAphAAAAIs"]
[Sun Apr 05 06:14:44.208926 2026] [:error] [pid 45409:tid 45421] [client 65.108.78.33:21932] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adGNVNHt_Oyw03gjCNjZnwAAAMo"]
[Sun Apr 05 06:14:46.648319 2026] [:error] [pid 45305:tid 45388] [client 65.108.78.33:21940] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adGNVujDQjr7aWhjflApqAAAAJE"]
[Sun Apr 05 06:14:56.788526 2026] [:error] [pid 30921:tid 30934] [client 65.108.78.33:55724] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "adGNYGFGQVn8Q0ueB253NgAAAQs"]
[Sun Apr 05 06:14:59.433047 2026] [:error] [pid 45305:tid 45387] [client 65.108.78.33:55740] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "adGNY-jDQjr7aWhjflAp3QAAAJA"]
[Sun Apr 05 06:15:01.839562 2026] [:error] [pid 45303:tid 45320] [client 65.108.78.33:55742] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "adGNZbboQ9eViZ4hdnmL4gAAAAM"]
[Sun Apr 05 06:15:04.359345 2026] [:error] [pid 45409:tid 45435] [client 65.108.78.33:54666] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "adGNaNHt_Oyw03gjCNjZywAAANg"]
[Sun Apr 05 06:15:06.829033 2026] [:error] [pid 30921:tid 30924] [client 65.108.78.33:54672] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adGNamFGQVn8Q0ueB253TwAAAQE"]
[Sun Apr 05 06:15:15.351950 2026] [:error] [pid 45409:tid 45428] [client 65.108.78.33:49268] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adGNc9Ht_Oyw03gjCNjZ4wAAANE"]
[Sun Apr 05 06:15:17.872761 2026] [:error] [pid 45409:tid 45426] [client 65.108.78.33:49282] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adGNddHt_Oyw03gjCNjZ8QAAAM8"]
[Sun Apr 05 06:15:20.421023 2026] [:error] [pid 45305:tid 45377] [client 65.108.78.33:49294] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adGNeOjDQjr7aWhjflAqCQAAAIY"]
[Sun Apr 05 06:15:22.792265 2026] [:error] [pid 30921:tid 30942] [client 65.108.78.33:56050] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adGNemFGQVn8Q0ueB253hQAAARM"]
[Sun Apr 05 06:15:25.356201 2026] [:error] [pid 45303:tid 45335] [client 65.108.78.33:56052] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adGNfbboQ9eViZ4hdnmMBgAAABI"]
[Sun Apr 05 06:15:27.882770 2026] [:error] [pid 30921:tid 30926] [client 65.108.78.33:56058] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adGNf2FGQVn8Q0ueB253lAAAAQM"]
[Sun Apr 05 06:15:30.220265 2026] [:error] [pid 30921:tid 30926] [client 65.108.78.33:56074] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adGNgmFGQVn8Q0ueB253ogAAAQM"]
[Sun Apr 05 06:15:32.732694 2026] [:error] [pid 45305:tid 45372] [client 65.108.78.33:30310] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adGNhOjDQjr7aWhjflAqPgAAAIE"]
[Sun Apr 05 06:16:16.621539 2026] [:error] [pid 45409:tid 45420] [client 65.108.78.33:24228] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "adGNsNHt_Oyw03gjCNjaXwAAAMk"]
[Sun Apr 05 06:16:19.169507 2026] [:error] [pid 45305:tid 45379] [client 65.108.78.33:24232] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adGNs-jDQjr7aWhjflAq3AAAAIg"]
[Sun Apr 05 06:16:21.668885 2026] [:error] [pid 45409:tid 45428] [client 65.108.78.33:24248] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "adGNtdHt_Oyw03gjCNjajQAAANE"]
[Sun Apr 05 06:16:24.188893 2026] [:error] [pid 30921:tid 30928] [client 65.108.78.33:11608] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "adGNuGFGQVn8Q0ueB254LAAAAQU"]
[Sun Apr 05 06:16:26.597465 2026] [:error] [pid 45303:tid 45334] [client 65.108.78.33:11616] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "adGNurboQ9eViZ4hdnmMfwAAABE"]
[Sun Apr 05 06:16:29.191388 2026] [:error] [pid 30921:tid 30925] [client 65.108.78.33:11618] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "adGNvWFGQVn8Q0ueB254QQAAAQI"]
[Sun Apr 05 06:16:31.873640 2026] [:error] [pid 45305:tid 45372] [client 65.108.78.33:11620] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "adGNv-jDQjr7aWhjflArIgAAAIE"]
[Sun Apr 05 06:16:34.389996 2026] [:error] [pid 45409:tid 45435] [client 65.108.78.33:59808] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adGNwtHt_Oyw03gjCNjavgAAANg"]
[Sun Apr 05 06:16:36.826009 2026] [:error] [pid 45409:tid 45429] [client 65.108.78.33:59814] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adGNxNHt_Oyw03gjCNjaxQAAANI"]
[Sun Apr 05 06:16:39.243692 2026] [:error] [pid 45305:tid 45392] [client 65.108.78.33:59820] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adGNx-jDQjr7aWhjflArRwAAAJU"]
[Sun Apr 05 06:16:41.819693 2026] [:error] [pid 45305:tid 45384] [client 65.108.78.33:59828] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adGNyejDQjr7aWhjflArWwAAAI0"]
[Sun Apr 05 06:16:44.209143 2026] [:error] [pid 45409:tid 45420] [client 65.108.78.33:17996] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adGNzNHt_Oyw03gjCNja4wAAAMk"]
[Sun Apr 05 06:16:46.867701 2026] [:error] [pid 45409:tid 45435] [client 65.108.78.33:18006] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adGNztHt_Oyw03gjCNja9QAAANg"]
[Sun Apr 05 06:16:49.519981 2026] [:error] [pid 45409:tid 45415] [client 65.108.78.33:18010] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adGN0dHt_Oyw03gjCNjbBgAAAMQ"]
[Sun Apr 05 06:16:52.042623 2026] [:error] [pid 30921:tid 30928] [client 65.108.78.33:18022] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adGN1GFGQVn8Q0ueB254dAAAAQU"]
[Sun Apr 05 06:16:54.685293 2026] [:error] [pid 45409:tid 45420] [client 65.108.78.33:39736] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adGN1tHt_Oyw03gjCNjbGAAAAMk"]
[Sun Apr 05 06:16:57.278179 2026] [:error] [pid 45409:tid 45425] [client 65.108.78.33:39752] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adGN2dHt_Oyw03gjCNjbIgAAAM4"]
[Sun Apr 05 06:16:59.788419 2026] [:error] [pid 45303:tid 45322] [client 65.108.78.33:39760] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adGN27boQ9eViZ4hdnmMrAAAAAU"]
[Sun Apr 05 06:17:02.251196 2026] [:error] [pid 45305:tid 45388] [client 65.108.78.33:39764] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adGN3ujDQjr7aWhjflArmwAAAJE"]
[Sun Apr 05 06:17:04.854334 2026] [:error] [pid 45409:tid 45417] [client 65.108.78.33:38682] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adGN4NHt_Oyw03gjCNjbSwAAAMY"]
[Sun Apr 05 06:17:07.339650 2026] [:error] [pid 45409:tid 45420] [client 65.108.78.33:38692] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adGN49Ht_Oyw03gjCNjbUAAAAMk"]
[Sun Apr 05 06:17:09.968490 2026] [:error] [pid 30921:tid 30933] [client 65.108.78.33:38702] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adGN5WFGQVn8Q0ueB254nQAAAQo"]
[Sun Apr 05 06:17:12.615386 2026] [:error] [pid 45304:tid 45358] [client 65.108.78.33:50832] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adGN6A5jnqDKKovdRkkN4wAAAE4"]
[Sun Apr 05 06:18:11.162149 2026] [:error] [pid 45304:tid 45356] [client 65.108.78.33:64340] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adGOIw5jnqDKKovdRkkOJwAAAEw"]
[Sun Apr 05 06:18:13.724796 2026] [:error] [pid 45303:tid 45318] [client 65.108.78.33:46756] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "adGOJbboQ9eViZ4hdnmNFgAAAAE"]
[Sun Apr 05 06:18:16.239824 2026] [:error] [pid 45304:tid 45347] [client 65.108.78.33:46768] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "adGOKA5jnqDKKovdRkkOLwAAAEM"]
[Sun Apr 05 06:18:18.743834 2026] [:error] [pid 45409:tid 45417] [client 65.108.78.33:46778] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adGOKtHt_Oyw03gjCNjcJwAAAMY"]
[Sun Apr 05 06:18:21.323309 2026] [:error] [pid 45409:tid 45432] [client 65.108.78.33:46790] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "adGOLdHt_Oyw03gjCNjcMQAAANU"]
[Sun Apr 05 06:18:23.841525 2026] [:error] [pid 45305:tid 45376] [client 65.108.78.33:10294] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "adGOL-jDQjr7aWhjflAsuAAAAIU"]
[Sun Apr 05 06:18:26.415745 2026] [:error] [pid 45305:tid 45389] [client 65.108.78.33:10310] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "adGOMujDQjr7aWhjflAsyAAAAJI"]
[Sun Apr 05 06:18:28.896402 2026] [:error] [pid 45304:tid 45364] [client 65.108.78.33:10312] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adGONA5jnqDKKovdRkkOTgAAAFQ"]
[Sun Apr 05 06:18:31.498759 2026] [:error] [pid 30921:tid 30938] [client 65.108.78.33:10324] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "adGON2FGQVn8Q0ueB255TgAAAQ8"]
[Sun Apr 05 06:18:34.088683 2026] [:error] [pid 45305:tid 45384] [client 65.108.78.33:1352] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adGOOujDQjr7aWhjflAs9QAAAI0"]
[Sun Apr 05 06:18:36.617982 2026] [:error] [pid 45304:tid 45368] [client 65.108.78.33:1366] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adGOPA5jnqDKKovdRkkOVgAAAFg"]
[Sun Apr 05 06:18:39.235952 2026] [:error] [pid 45409:tid 45412] [client 65.108.78.33:1370] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adGOP9Ht_Oyw03gjCNjcZAAAAME"]
[Sun Apr 05 06:18:41.670472 2026] [:error] [pid 45305:tid 45390] [client 65.108.78.33:1380] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adGOQejDQjr7aWhjflAtIwAAAJM"]
[Sun Apr 05 06:18:44.204870 2026] [:error] [pid 30921:tid 30936] [client 65.108.78.33:62232] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adGORGFGQVn8Q0ueB255XwAAAQ0"]
[Sun Apr 05 06:18:46.680136 2026] [:error] [pid 30921:tid 30939] [client 65.108.78.33:62244] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "adGORmFGQVn8Q0ueB255aQAAARA"]
[Sun Apr 05 06:18:49.146795 2026] [:error] [pid 45305:tid 45381] [client 65.108.78.33:62256] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adGOSejDQjr7aWhjflAtRgAAAIo"]
[Sun Apr 05 06:18:51.651423 2026] [:error] [pid 45305:tid 45388] [client 65.108.78.33:62266] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "adGOS-jDQjr7aWhjflAtTgAAAJE"]
[Sun Apr 05 06:18:54.160707 2026] [:error] [pid 45409:tid 45416] [client 65.108.78.33:40094] [client 65.108.78.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "adGOTtHt_Oyw03gjCNjcgwAAAMU"]
[Sun Apr 05 08:27:10.498481 2026] [:error] [pid 45305:tid 45387] [client 43.153.96.79:54738] [client 43.153.96.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adGsXujDQjr7aWhjflCRKwAAAJA"]
[Sun Apr 05 10:13:36.909303 2026] [:error] [pid 45305:tid 45380] [client 217.165.172.214:55934] [client 217.165.172.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.172.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adHFUOjDQjr7aWhjflDi_AAAAIk"]
[Sun Apr 05 10:40:07.681887 2026] [:error] [pid 45409:tid 45417] [client 217.165.172.214:49178] [client 217.165.172.214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adHLh9Ht_Oyw03gjCNhuzwAAAMY"]
[Sun Apr 05 10:41:15.702956 2026] [:error] [pid 45303:tid 45327] [client 217.165.172.214:49494] [client 217.165.172.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.172.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adHLy7boQ9eViZ4hdnnjzgAAAAo"]
[Sun Apr 05 11:21:10.772679 2026] [:error] [pid 30921:tid 30938] [client 195.178.110.135:52554] [client 195.178.110.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "adHVJmFGQVn8Q0ueB275UgAAAQ8"]
[Sun Apr 05 11:21:13.513167 2026] [:error] [pid 45303:tid 45336] [client 195.178.110.135:52556] [client 195.178.110.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.svn/wc.db"] [unique_id "adHVKbboQ9eViZ4hdnnzfwAAABM"]
[Sun Apr 05 11:21:14.798956 2026] [:error] [pid 45305:tid 45394] [client 195.178.110.135:48728] [client 195.178.110.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.svn/entries"] [unique_id "adHVKujDQjr7aWhjflAf_QAAAJc"]
[Sun Apr 05 12:32:35.443630 2026] [:error] [pid 45305:tid 45375] [client 43.166.131.228:42716] [client 43.166.131.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adHl4-jDQjr7aWhjflBbagAAAIQ"]
[Sun Apr 05 13:40:50.868461 2026] [:error] [pid 45409:tid 45412] [client 217.216.37.56:64356] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adH14tHt_Oyw03gjCNjcEwAAAME"]
[Sun Apr 05 13:40:51.078666 2026] [:error] [pid 45409:tid 45427] [client 217.216.37.56:57599] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "adH149Ht_Oyw03gjCNjcFAAAANA"]
[Sun Apr 05 13:40:51.290281 2026] [:error] [pid 45409:tid 45414] [client 217.216.37.56:52088] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/media/system/js/core.js"] [unique_id "adH149Ht_Oyw03gjCNjcFQAAAMM"]
[Sun Apr 05 14:23:02.817648 2026] [autoindex:error] [pid 30921:tid 30931] [client 13.78.10.220:21203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 05 14:23:05.016842 2026] [autoindex:error] [pid 30921:tid 30935] [client 13.78.10.220:21203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 05 14:23:05.135871 2026] [autoindex:error] [pid 30921:tid 30926] [client 13.78.10.220:21203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 05 14:23:05.373018 2026] [autoindex:error] [pid 30921:tid 30931] [client 13.78.10.220:21203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 05 14:23:11.578896 2026] [autoindex:error] [pid 30921:tid 30941] [client 13.78.10.220:21203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 05 19:04:34.441615 2026] [:error] [pid 30921:tid 30930] [client 209.141.44.76:32826] [client 209.141.44.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.44.76, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adJBwmFGQVn8Q0ueB27aKAAAAQc"]
[Sun Apr 05 19:04:35.493529 2026] [:error] [pid 30921:tid 30941] [client 209.141.44.76:32826] [client 209.141.44.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.44.76, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adJBw2FGQVn8Q0ueB27aKQAAARI"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Sun Apr 05 19:34:11.457490 2026] [:error] [pid 45305:tid 45392] [client 43.135.144.126:60494] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adJIs-jDQjr7aWhjflAzwAAAAJU"]
[Sun Apr 05 21:21:08.570608 2026] [:error] [pid 30921:tid 30940] [client 140.245.43.46:56428] [client 140.245.43.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adJhxGFGQVn8Q0ueB24c1gAAARE"]
[Sun Apr 05 23:32:12.106572 2026] [:error] [pid 45304:tid 45352] [client 20.215.241.74:47770] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adKAfA5jnqDKKovdRklIhwAAAEg"]
[Sun Apr 05 23:32:13.510745 2026] [:error] [pid 45304:tid 45351] [client 20.215.241.74:35046] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adKAfQ5jnqDKKovdRklIjgAAAEc"]
[Sun Apr 05 23:32:14.553466 2026] [:error] [pid 30921:tid 30942] [client 20.215.241.74:4500] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adKAfmFGQVn8Q0ueB25eHAAAARM"]
[Sun Apr 05 23:32:15.915651 2026] [:error] [pid 45305:tid 45384] [client 20.215.241.74:4489] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adKAf-jDQjr7aWhjflCTJQAAAI0"]
[Sun Apr 05 23:32:17.267426 2026] [:error] [pid 45305:tid 45378] [client 20.215.241.74:37486] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adKAgejDQjr7aWhjflCTKAAAAIc"]
[Sun Apr 05 23:32:18.146034 2026] [:error] [pid 45304:tid 45352] [client 20.215.241.74:29192] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adKAgg5jnqDKKovdRklIogAAAEg"]
[Sun Apr 05 23:32:21.815459 2026] [:error] [pid 30921:tid 30923] [client 20.215.241.74:4842] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adKAhWFGQVn8Q0ueB25eMgAAAQA"]
[Sun Apr 05 23:32:22.882709 2026] [:error] [pid 45304:tid 45353] [client 20.215.241.74:35037] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adKAhg5jnqDKKovdRklIswAAAEk"]
[Sun Apr 05 23:32:24.762185 2026] [:error] [pid 30921:tid 30942] [client 20.215.241.74:14607] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adKAiGFGQVn8Q0ueB25eOgAAARM"]
[Sun Apr 05 23:32:25.723706 2026] [:error] [pid 30921:tid 30923] [client 20.215.241.74:15170] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adKAiWFGQVn8Q0ueB25eQQAAAQA"]
[Sun Apr 05 23:32:28.263882 2026] [:error] [pid 30921:tid 30940] [client 20.215.241.74:35011] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adKAjGFGQVn8Q0ueB25eRAAAARE"]
[Sun Apr 05 23:32:29.826300 2026] [:error] [pid 45409:tid 45427] [client 20.215.241.74:37471] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adKAjdHt_Oyw03gjCNh_bAAAANA"]
[Sun Apr 05 23:32:31.581099 2026] [:error] [pid 45409:tid 45419] [client 20.215.241.74:4536] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "adKAj9Ht_Oyw03gjCNh_dAAAAMg"]
[Sun Apr 05 23:32:33.835196 2026] [:error] [pid 45303:tid 45330] [client 20.215.241.74:21256] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "adKAkbboQ9eViZ4hdnmTiQAAAA0"]
[Sun Apr 05 23:32:35.134857 2026] [:error] [pid 45409:tid 45420] [client 20.215.241.74:37477] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "adKAk9Ht_Oyw03gjCNh_ngAAAMk"]
[Sun Apr 05 23:32:37.354455 2026] [:error] [pid 45409:tid 45417] [client 20.215.241.74:28630] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "adKAldHt_Oyw03gjCNh_vAAAAMY"]
[Sun Apr 05 23:32:38.856982 2026] [:error] [pid 45409:tid 45414] [client 20.215.241.74:37422] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "adKAltHt_Oyw03gjCNh_zgAAAMM"]
[Sun Apr 05 23:32:40.786249 2026] [:error] [pid 45409:tid 45412] [client 20.215.241.74:37465] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "adKAmNHt_Oyw03gjCNh_2AAAAME"]
[Sun Apr 05 23:32:41.802041 2026] [:error] [pid 45409:tid 45425] [client 20.215.241.74:15168] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "adKAmdHt_Oyw03gjCNh_3gAAAM4"]
[Sun Apr 05 23:32:42.828311 2026] [:error] [pid 45303:tid 45336] [client 20.215.241.74:27976] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "adKAmrboQ9eViZ4hdnmTrgAAABM"]
[Sun Apr 05 23:32:44.253906 2026] [:error] [pid 45409:tid 45411] [client 20.215.241.74:15092] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "adKAnNHt_Oyw03gjCNh_7QAAAMA"]
[Sun Apr 05 23:32:45.367494 2026] [:error] [pid 45409:tid 45421] [client 20.215.241.74:28002] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "adKAndHt_Oyw03gjCNh_9QAAAMo"]
[Sun Apr 05 23:32:46.200823 2026] [:error] [pid 45409:tid 45421] [client 20.215.241.74:4542] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "adKAntHt_Oyw03gjCNiAAwAAAMo"]
[Sun Apr 05 23:32:47.167423 2026] [:error] [pid 30921:tid 30925] [client 20.215.241.74:14727] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "adKAn2FGQVn8Q0ueB25edwAAAQI"]
[Sun Apr 05 23:32:48.441193 2026] [:error] [pid 30921:tid 30927] [client 20.215.241.74:29228] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.yuf.php"] [unique_id "adKAoGFGQVn8Q0ueB25egAAAAQQ"]
[Sun Apr 05 23:32:49.152407 2026] [:error] [pid 45409:tid 45431] [client 20.215.241.74:48388] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.yuf.php"] [unique_id "adKAodHt_Oyw03gjCNiAFgAAANQ"]
[Sun Apr 05 23:32:50.201498 2026] [:error] [pid 45303:tid 45317] [client 20.215.241.74:15059] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.yuf.php"] [unique_id "adKAorboQ9eViZ4hdnmTyAAAAAA"]
[Sun Apr 05 23:32:50.957145 2026] [:error] [pid 45303:tid 45324] [client 20.215.241.74:21719] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.yuf.php"] [unique_id "adKAorboQ9eViZ4hdnmTzQAAAAc"]
[Sun Apr 05 23:32:51.640700 2026] [:error] [pid 45303:tid 45337] [client 20.215.241.74:53944] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "adKAo7boQ9eViZ4hdnmT0QAAABQ"]
[Sun Apr 05 23:32:52.383483 2026] [:error] [pid 45304:tid 45349] [client 20.215.241.74:37395] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "adKApA5jnqDKKovdRklI2gAAAEU"]
[Sun Apr 05 23:32:53.193703 2026] [:error] [pid 30921:tid 30945] [client 20.215.241.74:14648] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "adKApWFGQVn8Q0ueB25ekgAAARY"]
[Sun Apr 05 23:32:53.853466 2026] [:error] [pid 45303:tid 45324] [client 20.215.241.74:48441] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "adKApbboQ9eViZ4hdnmT2wAAAAc"]
[Sun Apr 05 23:32:54.576926 2026] [:error] [pid 45303:tid 45328] [client 20.215.241.74:37473] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "adKAprboQ9eViZ4hdnmT3QAAAAs"]
[Sun Apr 05 23:32:55.539537 2026] [:error] [pid 30921:tid 30930] [client 20.215.241.74:15750] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "adKAp2FGQVn8Q0ueB25ekwAAAQc"]
[Sun Apr 05 23:32:56.312309 2026] [:error] [pid 45303:tid 45321] [client 20.215.241.74:22463] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "adKAqLboQ9eViZ4hdnmT5gAAAAQ"]
[Sun Apr 05 23:32:57.300333 2026] [:error] [pid 45303:tid 45324] [client 20.215.241.74:48414] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "adKAqbboQ9eViZ4hdnmT8AAAAAc"]
[Sun Apr 05 23:32:58.066789 2026] [:error] [pid 45409:tid 45418] [client 20.215.241.74:21753] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "adKAqtHt_Oyw03gjCNiAUgAAAMc"]
[Sun Apr 05 23:32:59.325009 2026] [:error] [pid 45409:tid 45422] [client 20.215.241.74:13832] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "adKAq9Ht_Oyw03gjCNiAWwAAAMs"]
[Sun Apr 05 23:33:00.189119 2026] [:error] [pid 45304:tid 45357] [client 20.215.241.74:15183] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "adKArA5jnqDKKovdRklI5gAAAE0"]
[Sun Apr 05 23:33:01.408113 2026] [:error] [pid 45303:tid 45334] [client 20.215.241.74:15192] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "adKArbboQ9eViZ4hdnmUCAAAABE"]
[Sun Apr 05 23:33:02.363511 2026] [:error] [pid 45304:tid 45353] [client 20.215.241.74:37390] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "adKArg5jnqDKKovdRklI6gAAAEk"]
[Sun Apr 05 23:33:03.129237 2026] [:error] [pid 45304:tid 45359] [client 20.215.241.74:13827] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "adKArw5jnqDKKovdRklI7QAAAE8"]
[Sun Apr 05 23:33:03.985249 2026] [:error] [pid 45409:tid 45417] [client 20.215.241.74:37444] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "adKAr9Ht_Oyw03gjCNiAgAAAAMY"]
[Sun Apr 05 23:33:05.093033 2026] [:error] [pid 30921:tid 30947] [client 20.215.241.74:15758] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "adKAsWFGQVn8Q0ueB25etgAAARg"]
[Sun Apr 05 23:33:05.950346 2026] [:error] [pid 45409:tid 45426] [client 20.215.241.74:15094] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file31.php"] [unique_id "adKAsdHt_Oyw03gjCNiAjAAAAM8"]
[Sun Apr 05 23:33:06.694978 2026] [:error] [pid 45409:tid 45415] [client 20.215.241.74:22448] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file31.php"] [unique_id "adKAstHt_Oyw03gjCNiAkgAAAMQ"]
[Sun Apr 05 23:33:07.640176 2026] [:error] [pid 45409:tid 45425] [client 20.215.241.74:33083] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file31.php"] [unique_id "adKAs9Ht_Oyw03gjCNiAmQAAAM4"]
[Sun Apr 05 23:33:08.711127 2026] [:error] [pid 45409:tid 45435] [client 20.215.241.74:22461] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file31.php"] [unique_id "adKAtNHt_Oyw03gjCNiAngAAANg"]
[Sun Apr 05 23:33:14.899090 2026] [:error] [pid 45409:tid 45432] [client 147.135.252.182:60028] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adKAutHt_Oyw03gjCNiAsAAAANU"]
[Sun Apr 05 23:33:17.249078 2026] [:error] [pid 30921:tid 30927] [client 147.135.252.182:52470] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adKAvWFGQVn8Q0ueB25e2AAAAQQ"]
[Sun Apr 05 23:33:19.630817 2026] [:error] [pid 45303:tid 45331] [client 147.135.252.182:52484] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adKAv7boQ9eViZ4hdnmUNAAAAA4"]
[Sun Apr 05 23:33:22.202542 2026] [:error] [pid 45303:tid 45323] [client 147.135.252.182:52496] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adKAwrboQ9eViZ4hdnmUPQAAAAY"]
[Sun Apr 05 23:33:24.553311 2026] [:error] [pid 30921:tid 30927] [client 147.135.252.182:52502] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "adKAxGFGQVn8Q0ueB25e8AAAAQQ"]
[Sun Apr 05 23:33:27.098768 2026] [:error] [pid 45305:tid 45390] [client 147.135.252.182:52516] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "adKAx-jDQjr7aWhjflCTswAAAJM"]
[Sun Apr 05 23:33:29.478866 2026] [:error] [pid 45305:tid 45386] [client 147.135.252.182:51570] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "adKAyejDQjr7aWhjflCTvAAAAI8"]
[Sun Apr 05 23:33:30.267763 2026] [:error] [pid 45305:tid 45388] [client 20.215.241.74:14598] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adKAyujDQjr7aWhjflCTvQAAAJE"]
[Sun Apr 05 23:33:32.019858 2026] [:error] [pid 45305:tid 45387] [client 147.135.252.182:51578] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "adKAzOjDQjr7aWhjflCTwAAAAJA"]
[Sun Apr 05 23:33:33.768046 2026] [:error] [pid 45409:tid 45427] [client 20.215.241.74:24317] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adKAzdHt_Oyw03gjCNiA0AAAANA"]
[Sun Apr 05 23:33:34.528721 2026] [:error] [pid 45303:tid 45340] [client 147.135.252.182:51590] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adKAzrboQ9eViZ4hdnmUagAAABc"]
[Sun Apr 05 23:33:34.569839 2026] [:error] [pid 30921:tid 30935] [client 20.215.241.74:4746] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adKAzmFGQVn8Q0ueB25fGAAAAQw"]
[Sun Apr 05 23:33:35.684659 2026] [:error] [pid 45304:tid 45349] [client 20.215.241.74:4739] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adKAzw5jnqDKKovdRklJKgAAAEU"]
[Sun Apr 05 23:33:36.683926 2026] [:error] [pid 45304:tid 45346] [client 20.215.241.74:24315] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "adKA0A5jnqDKKovdRklJLgAAAEI"]
[Sun Apr 05 23:33:36.913436 2026] [:error] [pid 45304:tid 45364] [client 147.135.252.182:51596] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adKA0A5jnqDKKovdRklJLwAAAFQ"]
[Sun Apr 05 23:33:37.504963 2026] [:error] [pid 45409:tid 45423] [client 20.215.241.74:16313] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "adKA0dHt_Oyw03gjCNiA1gAAAMw"]
[Sun Apr 05 23:33:38.267222 2026] [:error] [pid 45304:tid 45367] [client 20.215.241.74:19817] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "adKA0g5jnqDKKovdRklJNgAAAFc"]
[Sun Apr 05 23:33:39.219270 2026] [:error] [pid 45304:tid 45360] [client 20.215.241.74:19827] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "adKA0w5jnqDKKovdRklJOAAAAFA"]
[Sun Apr 05 23:33:39.469699 2026] [:error] [pid 30921:tid 30933] [client 147.135.252.182:49480] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adKA02FGQVn8Q0ueB25fJQAAAQo"]
[Sun Apr 05 23:33:40.022727 2026] [:error] [pid 45409:tid 45434] [client 20.215.241.74:14992] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adKA1NHt_Oyw03gjCNiA4gAAANc"]
[Sun Apr 05 23:33:40.995513 2026] [:error] [pid 45409:tid 45435] [client 20.215.241.74:18362] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adKA1NHt_Oyw03gjCNiA6gAAANg"]
[Sun Apr 05 23:33:41.828774 2026] [:error] [pid 45409:tid 45426] [client 147.135.252.182:49484] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adKA1dHt_Oyw03gjCNiA8QAAAM8"]
[Sun Apr 05 23:33:41.838271 2026] [:error] [pid 45304:tid 45354] [client 20.215.241.74:4356] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adKA1Q5jnqDKKovdRklJRgAAAEo"]
[Sun Apr 05 23:33:42.850635 2026] [:error] [pid 45409:tid 45428] [client 20.215.241.74:39350] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adKA1tHt_Oyw03gjCNiA9gAAANE"]
[Sun Apr 05 23:33:43.627899 2026] [:error] [pid 45409:tid 45421] [client 20.215.241.74:4419] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/read.php"] [unique_id "adKA19Ht_Oyw03gjCNiBAAAAAMo"]
[Sun Apr 05 23:33:44.361366 2026] [:error] [pid 45409:tid 45435] [client 147.135.252.182:49490] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adKA2NHt_Oyw03gjCNiBCgAAANg"]
[Sun Apr 05 23:33:45.346247 2026] [:error] [pid 30921:tid 30939] [client 20.215.241.74:4431] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/read.php"] [unique_id "adKA2WFGQVn8Q0ueB25fLwAAARA"]
[Sun Apr 05 23:33:46.229513 2026] [:error] [pid 45303:tid 45339] [client 20.215.241.74:19793] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/read.php"] [unique_id "adKA2rboQ9eViZ4hdnmUcgAAABY"]
[Sun Apr 05 23:33:46.766252 2026] [:error] [pid 30921:tid 30947] [client 147.135.252.182:49502] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adKA2mFGQVn8Q0ueB25fNgAAARg"]
[Sun Apr 05 23:33:46.834488 2026] [:error] [pid 45409:tid 45433] [client 20.215.241.74:39332] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/read.php"] [unique_id "adKA2tHt_Oyw03gjCNiBEwAAANY"]
[Sun Apr 05 23:33:48.012712 2026] [:error] [pid 30921:tid 30925] [client 20.215.241.74:44397] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adKA3GFGQVn8Q0ueB25fOAAAAQI"]
[Sun Apr 05 23:33:49.130361 2026] [:error] [pid 30921:tid 30942] [client 20.215.241.74:42466] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adKA3WFGQVn8Q0ueB25fOwAAARM"]
[Sun Apr 05 23:33:49.321644 2026] [:error] [pid 45303:tid 45336] [client 147.135.252.182:50086] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adKA3bboQ9eViZ4hdnmUdgAAABM"]
[Sun Apr 05 23:33:50.110755 2026] [:error] [pid 45409:tid 45430] [client 20.215.241.74:17024] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adKA3tHt_Oyw03gjCNiBJgAAANM"]
[Sun Apr 05 23:33:50.806108 2026] [:error] [pid 45409:tid 45422] [client 20.215.241.74:38024] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adKA3tHt_Oyw03gjCNiBKQAAAMs"]
[Sun Apr 05 23:33:51.619564 2026] [:error] [pid 45409:tid 45425] [client 20.215.241.74:4749] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adKA39Ht_Oyw03gjCNiBMwAAAM4"]
[Sun Apr 05 23:33:51.750762 2026] [:error] [pid 45303:tid 45337] [client 147.135.252.182:50100] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adKA37boQ9eViZ4hdnmUeQAAABQ"]
[Sun Apr 05 23:33:53.353219 2026] [:error] [pid 30921:tid 30927] [client 20.215.241.74:19194] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adKA4WFGQVn8Q0ueB25fTgAAAQQ"]
[Sun Apr 05 23:33:54.306140 2026] [:error] [pid 30921:tid 30942] [client 147.135.252.182:50114] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adKA4mFGQVn8Q0ueB25fVAAAARM"]
[Sun Apr 05 23:33:55.196295 2026] [:error] [pid 45409:tid 45411] [client 20.215.241.74:20533] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adKA49Ht_Oyw03gjCNiBTwAAAMA"]
[Sun Apr 05 23:33:56.206147 2026] [:error] [pid 45409:tid 45414] [client 20.215.241.74:22698] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adKA5NHt_Oyw03gjCNiBVAAAAMM"]
[Sun Apr 05 23:33:56.831727 2026] [:error] [pid 45409:tid 45412] [client 147.135.252.182:50128] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adKA5NHt_Oyw03gjCNiBXQAAAME"]
[Sun Apr 05 23:33:58.051534 2026] [:error] [pid 45409:tid 45411] [client 20.215.241.74:26770] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adKA5tHt_Oyw03gjCNiBZgAAAMA"]
[Sun Apr 05 23:33:58.805321 2026] [:error] [pid 45409:tid 45421] [client 20.215.241.74:18172] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adKA5tHt_Oyw03gjCNiBbAAAAMo"]
[Sun Apr 05 23:33:59.398677 2026] [:error] [pid 30921:tid 30930] [client 147.135.252.182:42164] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adKA52FGQVn8Q0ueB25fYQAAAQc"]
[Sun Apr 05 23:33:59.811735 2026] [:error] [pid 30921:tid 30936] [client 20.215.241.74:17042] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adKA52FGQVn8Q0ueB25fYwAAAQ0"]
[Sun Apr 05 23:34:00.650347 2026] [:error] [pid 45303:tid 45332] [client 20.215.241.74:13344] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adKA6LboQ9eViZ4hdnmUggAAAA8"]
[Sun Apr 05 23:34:01.662489 2026] [:error] [pid 30921:tid 30928] [client 20.215.241.74:22685] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adKA6WFGQVn8Q0ueB25fZwAAAQU"]
[Sun Apr 05 23:34:01.763884 2026] [:error] [pid 45303:tid 45324] [client 147.135.252.182:42180] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adKA6bboQ9eViZ4hdnmUiQAAAAc"]
[Sun Apr 05 23:34:02.576038 2026] [:error] [pid 30921:tid 30947] [client 20.215.241.74:26193] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adKA6mFGQVn8Q0ueB25fbAAAARg"]
[Sun Apr 05 23:34:03.677165 2026] [:error] [pid 30921:tid 30946] [client 20.215.241.74:26819] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adKA62FGQVn8Q0ueB25fdAAAARc"]
[Sun Apr 05 23:34:04.312454 2026] [:error] [pid 30921:tid 30928] [client 147.135.252.182:42188] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adKA7GFGQVn8Q0ueB25ffgAAAQU"]
[Sun Apr 05 23:34:04.604884 2026] [:error] [pid 45305:tid 45385] [client 20.215.241.74:26792] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adKA7OjDQjr7aWhjflCT-QAAAI4"]
[Sun Apr 05 23:34:05.915120 2026] [:error] [pid 45409:tid 45415] [client 20.215.241.74:20970] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adKA7dHt_Oyw03gjCNiBiAAAAMQ"]
[Sun Apr 05 23:34:06.826269 2026] [:error] [pid 45303:tid 45338] [client 147.135.252.182:42194] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "adKA7rboQ9eViZ4hdnmUmQAAABU"]
[Sun Apr 05 23:34:07.422741 2026] [:error] [pid 45305:tid 45389] [client 20.215.241.74:20959] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adKA7-jDQjr7aWhjflCT_wAAAJI"]
[Sun Apr 05 23:34:09.354304 2026] [:error] [pid 45303:tid 45321] [client 147.135.252.182:54848] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "adKA8bboQ9eViZ4hdnmUnAAAAAQ"]
[Sun Apr 05 23:34:09.486350 2026] [:error] [pid 45409:tid 45420] [client 20.215.241.74:20871] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adKA8dHt_Oyw03gjCNiBmgAAAMk"]
[Sun Apr 05 23:34:10.284564 2026] [:error] [pid 45409:tid 45411] [client 20.215.241.74:49758] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adKA8tHt_Oyw03gjCNiBoQAAAMA"]
[Sun Apr 05 23:34:10.911535 2026] [:error] [pid 45409:tid 45430] [client 20.215.241.74:26843] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "adKA8tHt_Oyw03gjCNiBowAAANM"]
[Sun Apr 05 23:34:11.823831 2026] [:error] [pid 45303:tid 45318] [client 147.135.252.182:54862] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "adKA87boQ9eViZ4hdnmUowAAAAE"]
[Sun Apr 05 23:34:11.853064 2026] [:error] [pid 45409:tid 45414] [client 20.215.241.74:18933] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "adKA89Ht_Oyw03gjCNiBqAAAAMM"]
[Sun Apr 05 23:34:12.642752 2026] [:error] [pid 45303:tid 45339] [client 20.215.241.74:12405] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "adKA9LboQ9eViZ4hdnmUpAAAABY"]
[Sun Apr 05 23:34:13.243908 2026] [:error] [pid 45409:tid 45420] [client 20.215.241.74:31870] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "adKA9dHt_Oyw03gjCNiBtAAAAMk"]
[Sun Apr 05 23:34:13.935908 2026] [:error] [pid 30921:tid 30940] [client 20.215.241.74:31860] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adKA9WFGQVn8Q0ueB25flQAAARE"]
[Sun Apr 05 23:34:14.533046 2026] [:error] [pid 45409:tid 45412] [client 20.215.241.74:14837] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adKA9tHt_Oyw03gjCNiBuQAAAME"]
[Sun Apr 05 23:34:15.331325 2026] [:error] [pid 30921:tid 30937] [client 20.215.241.74:42378] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adKA92FGQVn8Q0ueB25fmQAAAQ4"]
[Sun Apr 05 23:34:16.027782 2026] [:error] [pid 45304:tid 45361] [client 20.215.241.74:4102] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adKA-A5jnqDKKovdRklJagAAAFE"]
[Sun Apr 05 23:34:16.684770 2026] [:error] [pid 45303:tid 45330] [client 20.215.241.74:12396] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "adKA-LboQ9eViZ4hdnmUsAAAAA0"]
[Sun Apr 05 23:34:17.258501 2026] [:error] [pid 45303:tid 45337] [client 20.215.241.74:18893] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "adKA-bboQ9eViZ4hdnmUswAAABQ"]
[Sun Apr 05 23:34:17.920572 2026] [:error] [pid 45303:tid 45323] [client 20.215.241.74:20990] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "adKA-bboQ9eViZ4hdnmUugAAAAY"]
[Sun Apr 05 23:34:18.959015 2026] [:error] [pid 45409:tid 45416] [client 20.215.241.74:31185] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "adKA-tHt_Oyw03gjCNiBxwAAAMU"]
[Sun Apr 05 23:34:19.935443 2026] [:error] [pid 45305:tid 45391] [client 20.215.241.74:14797] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adKA--jDQjr7aWhjflCUFQAAAJQ"]
[Sun Apr 05 23:34:20.507158 2026] [:error] [pid 45303:tid 45330] [client 20.215.241.74:12662] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adKA_LboQ9eViZ4hdnmUwwAAAA0"]
[Sun Apr 05 23:34:21.271941 2026] [:error] [pid 45409:tid 45425] [client 20.215.241.74:29928] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adKA_dHt_Oyw03gjCNiB1gAAAM4"]
[Sun Apr 05 23:34:22.099142 2026] [:error] [pid 45409:tid 45414] [client 20.215.241.74:18628] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adKA_tHt_Oyw03gjCNiB3gAAAMM"]
[Sun Apr 05 23:34:23.344692 2026] [:error] [pid 45304:tid 45366] [client 20.215.241.74:18668] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adKA_w5jnqDKKovdRklJdwAAAFY"]
[Sun Apr 05 23:34:24.438909 2026] [:error] [pid 45304:tid 45362] [client 20.215.241.74:14841] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adKBAA5jnqDKKovdRklJfQAAAFI"]
[Sun Apr 05 23:34:25.177719 2026] [:error] [pid 45303:tid 45324] [client 20.215.241.74:49772] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adKBAbboQ9eViZ4hdnmU1AAAAAc"]
[Sun Apr 05 23:34:26.013212 2026] [:error] [pid 45303:tid 45340] [client 20.215.241.74:31178] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adKBArboQ9eViZ4hdnmU2AAAABc"]
[Sun Apr 05 23:34:27.300105 2026] [:error] [pid 45409:tid 45432] [client 20.215.241.74:25475] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adKBA9Ht_Oyw03gjCNiB8gAAANU"]
[Sun Apr 05 23:34:42.922309 2026] [:error] [pid 45409:tid 45411] [client 147.135.252.182:54876] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adKBEtHt_Oyw03gjCNiCOQAAAMA"]
[Sun Apr 05 23:34:43.325067 2026] [:error] [pid 45304:tid 45345] [client 20.215.241.74:26144] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "adKBEw5jnqDKKovdRklJxgAAAEE"]
[Sun Apr 05 23:34:43.991108 2026] [:error] [pid 45305:tid 45391] [client 20.215.241.74:14948] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "adKBE-jDQjr7aWhjflCUNgAAAJQ"]
[Sun Apr 05 23:34:44.798302 2026] [:error] [pid 45305:tid 45379] [client 20.215.241.74:5108] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "adKBFOjDQjr7aWhjflCUOAAAAIg"]
[Sun Apr 05 23:34:45.348023 2026] [:error] [pid 45409:tid 45417] [client 147.135.252.182:45196] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adKBFdHt_Oyw03gjCNiCRgAAAMY"]
[Sun Apr 05 23:34:45.703405 2026] [:error] [pid 30921:tid 30941] [client 20.215.241.74:19102] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "adKBFWFGQVn8Q0ueB25fzgAAARI"]
[Sun Apr 05 23:34:46.389759 2026] [:error] [pid 45409:tid 45433] [client 20.215.241.74:30509] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adKBFtHt_Oyw03gjCNiCTQAAANY"]
[Sun Apr 05 23:34:47.176739 2026] [:error] [pid 45303:tid 45339] [client 20.215.241.74:23580] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adKBF7boQ9eViZ4hdnmVKAAAABY"]
[Sun Apr 05 23:34:47.837143 2026] [:error] [pid 30921:tid 30925] [client 20.215.241.74:38733] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adKBF2FGQVn8Q0ueB25f0QAAAQI"]
[Sun Apr 05 23:34:47.837771 2026] [:error] [pid 45304:tid 45357] [client 147.135.252.182:54280] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adKBFw5jnqDKKovdRklJzQAAAE0"]
[Sun Apr 05 23:34:48.553174 2026] [:error] [pid 45304:tid 45345] [client 20.215.241.74:49058] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adKBGA5jnqDKKovdRklJ0AAAAEE"]
[Sun Apr 05 23:34:49.389036 2026] [:error] [pid 45409:tid 45414] [client 20.215.241.74:14947] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adKBGdHt_Oyw03gjCNiCWAAAAMM"]
[Sun Apr 05 23:34:50.160527 2026] [:error] [pid 45409:tid 45424] [client 20.215.241.74:21326] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adKBGtHt_Oyw03gjCNiCXQAAAM0"]
[Sun Apr 05 23:34:50.348848 2026] [:error] [pid 45303:tid 45332] [client 147.135.252.182:54292] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adKBGrboQ9eViZ4hdnmVMgAAAA8"]
[Sun Apr 05 23:34:51.210155 2026] [:error] [pid 45305:tid 45390] [client 20.215.241.74:36823] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adKBG-jDQjr7aWhjflCURwAAAJM"]
[Sun Apr 05 23:34:52.534662 2026] [:error] [pid 45304:tid 45345] [client 20.215.241.74:36822] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adKBHA5jnqDKKovdRklJ4wAAAEE"]
[Sun Apr 05 23:34:52.684298 2026] [:error] [pid 45409:tid 45411] [client 147.135.252.182:54302] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adKBHNHt_Oyw03gjCNiCbgAAAMA"]
[Sun Apr 05 23:34:53.647465 2026] [:error] [pid 30921:tid 30933] [client 20.215.241.74:49133] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "adKBHWFGQVn8Q0ueB25f4wAAAQo"]
[Sun Apr 05 23:34:54.514288 2026] [:error] [pid 45409:tid 45429] [client 20.215.241.74:23600] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "adKBHtHt_Oyw03gjCNiCegAAANI"]
[Sun Apr 05 23:34:55.194191 2026] [:error] [pid 45409:tid 45421] [client 147.135.252.182:54312] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adKBH9Ht_Oyw03gjCNiCgAAAAMo"]
[Sun Apr 05 23:34:55.371562 2026] [:error] [pid 45409:tid 45429] [client 20.215.241.74:36835] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "adKBH9Ht_Oyw03gjCNiChAAAANI"]
[Sun Apr 05 23:34:56.351504 2026] [:error] [pid 45303:tid 45337] [client 20.215.241.74:4188] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "adKBILboQ9eViZ4hdnmVPAAAABQ"]
[Sun Apr 05 23:34:57.088449 2026] [:error] [pid 30921:tid 30941] [client 20.215.241.74:4192] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "adKBIWFGQVn8Q0ueB25f5wAAARI"]
[Sun Apr 05 23:34:57.679744 2026] [:error] [pid 45303:tid 45318] [client 147.135.252.182:39430] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adKBIbboQ9eViZ4hdnmVQQAAAAE"]
[Sun Apr 05 23:34:57.842418 2026] [:error] [pid 30921:tid 30931] [client 20.215.241.74:50364] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "adKBIWFGQVn8Q0ueB25f8gAAAQg"]
[Sun Apr 05 23:34:58.971158 2026] [:error] [pid 45304:tid 45364] [client 20.215.241.74:36826] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "adKBIg5jnqDKKovdRklJ8QAAAFQ"]
[Sun Apr 05 23:34:59.906706 2026] [:error] [pid 45305:tid 45392] [client 20.215.241.74:14580] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "adKBI-jDQjr7aWhjflCUaAAAAJU"]
[Sun Apr 05 23:35:00.184290 2026] [:error] [pid 45303:tid 45328] [client 147.135.252.182:39438] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adKBJLboQ9eViZ4hdnmVSAAAAAs"]
[Sun Apr 05 23:35:01.087831 2026] [:error] [pid 30921:tid 30927] [client 20.215.241.74:14926] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adKBJWFGQVn8Q0ueB25f-gAAAQQ"]
[Sun Apr 05 23:35:01.877929 2026] [:error] [pid 30921:tid 30944] [client 20.215.241.74:4905] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adKBJWFGQVn8Q0ueB25f_AAAARU"]
[Sun Apr 05 23:35:02.503067 2026] [:error] [pid 30921:tid 30936] [client 147.135.252.182:39454] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adKBJmFGQVn8Q0ueB25f_gAAAQ0"]
[Sun Apr 05 23:35:02.887641 2026] [:error] [pid 45409:tid 45416] [client 20.215.241.74:43674] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adKBJtHt_Oyw03gjCNiCpAAAAMU"]
[Sun Apr 05 23:35:04.044039 2026] [:error] [pid 45303:tid 45331] [client 20.215.241.74:38749] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adKBKLboQ9eViZ4hdnmVTgAAAA4"]
[Sun Apr 05 23:35:05.011076 2026] [:error] [pid 45409:tid 45420] [client 147.135.252.182:39468] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adKBKdHt_Oyw03gjCNiCtAAAAMk"]
[Sun Apr 05 23:35:05.397934 2026] [:error] [pid 45303:tid 45328] [client 20.215.241.74:4209] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "adKBKbboQ9eViZ4hdnmVVQAAAAs"]
[Sun Apr 05 23:35:06.071432 2026] [:error] [pid 45409:tid 45424] [client 20.215.241.74:50330] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "adKBKtHt_Oyw03gjCNiCtQAAAM0"]
[Sun Apr 05 23:35:07.347170 2026] [:error] [pid 45304:tid 45356] [client 147.135.252.182:52368] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adKBKw5jnqDKKovdRklKBwAAAEw"]
[Sun Apr 05 23:35:07.359104 2026] [:error] [pid 45409:tid 45412] [client 20.215.241.74:38743] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "adKBK9Ht_Oyw03gjCNiCuAAAAME"]
[Sun Apr 05 23:35:08.398191 2026] [:error] [pid 45305:tid 45386] [client 20.215.241.74:43653] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "adKBLOjDQjr7aWhjflCUdQAAAI8"]
[Sun Apr 05 23:35:09.845173 2026] [:error] [pid 45305:tid 45391] [client 147.135.252.182:52374] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adKBLejDQjr7aWhjflCUdwAAAJQ"]
[Sun Apr 05 23:35:10.741537 2026] [:error] [pid 45303:tid 45338] [client 20.215.241.74:49066] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adKBLrboQ9eViZ4hdnmVZQAAABU"]
[Sun Apr 05 23:35:12.049692 2026] [:error] [pid 45305:tid 45376] [client 20.215.241.74:38761] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adKBMOjDQjr7aWhjflCUeAAAAIU"]
[Sun Apr 05 23:35:12.330947 2026] [:error] [pid 45409:tid 45411] [client 147.135.252.182:52382] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adKBMNHt_Oyw03gjCNiC0wAAAMA"]
[Sun Apr 05 23:35:14.523843 2026] [:error] [pid 45303:tid 45337] [client 20.215.241.74:50339] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adKBMrboQ9eViZ4hdnmVbgAAABQ"]
[Sun Apr 05 23:35:14.660140 2026] [:error] [pid 45303:tid 45326] [client 147.135.252.182:52388] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adKBMrboQ9eViZ4hdnmVbwAAAAk"]
[Sun Apr 05 23:35:15.436785 2026] [:error] [pid 45304:tid 45352] [client 20.215.241.74:30469] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adKBMw5jnqDKKovdRklKHQAAAEg"]
[Sun Apr 05 23:35:16.127467 2026] [:error] [pid 45409:tid 45428] [client 20.215.241.74:43676] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adKBNNHt_Oyw03gjCNiC2gAAANE"]
[Sun Apr 05 23:35:16.810429 2026] [:error] [pid 45409:tid 45428] [client 20.215.241.74:43730] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adKBNNHt_Oyw03gjCNiC4QAAANE"]
[Sun Apr 05 23:35:17.154532 2026] [:error] [pid 45409:tid 45414] [client 147.135.252.182:52394] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adKBNdHt_Oyw03gjCNiC6AAAAMM"]
[Sun Apr 05 23:35:17.451093 2026] [:error] [pid 45409:tid 45425] [client 20.215.241.74:43703] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adKBNdHt_Oyw03gjCNiC6QAAAM4"]
[Sun Apr 05 23:35:17.997630 2026] [:error] [pid 45303:tid 45340] [client 20.215.241.74:49034] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adKBNbboQ9eViZ4hdnmVcgAAABc"]
[Sun Apr 05 23:35:18.601456 2026] [:error] [pid 45303:tid 45320] [client 20.215.241.74:30486] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adKBNrboQ9eViZ4hdnmVdAAAAAM"]
[Sun Apr 05 23:35:19.181350 2026] [:error] [pid 45409:tid 45427] [client 20.215.241.74:16603] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adKBN9Ht_Oyw03gjCNiC_AAAANA"]
[Sun Apr 05 23:35:19.634939 2026] [:error] [pid 45409:tid 45415] [client 147.135.252.182:38102] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adKBN9Ht_Oyw03gjCNiDAgAAAMQ"]
[Sun Apr 05 23:35:19.879787 2026] [:error] [pid 45303:tid 45336] [client 20.215.241.74:49038] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adKBN7boQ9eViZ4hdnmVeQAAABM"]
[Sun Apr 05 23:35:20.529181 2026] [:error] [pid 45409:tid 45414] [client 20.215.241.74:4200] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adKBONHt_Oyw03gjCNiDDwAAAMM"]
[Sun Apr 05 23:35:21.676953 2026] [:error] [pid 45409:tid 45427] [client 20.215.241.74:50326] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adKBOdHt_Oyw03gjCNiDFQAAANA"]
[Sun Apr 05 23:35:21.963056 2026] [:error] [pid 45303:tid 45341] [client 147.135.252.182:38116] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "adKBObboQ9eViZ4hdnmVgQAAABg"]
[Sun Apr 05 23:35:22.240099 2026] [:error] [pid 45409:tid 45411] [client 20.215.241.74:16591] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adKBOtHt_Oyw03gjCNiDGQAAAMA"]
[Sun Apr 05 23:35:23.085462 2026] [:error] [pid 45303:tid 45319] [client 20.215.241.74:38771] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adKBO7boQ9eViZ4hdnmVhAAAAAI"]
[Sun Apr 05 23:35:23.930691 2026] [:error] [pid 45409:tid 45434] [client 20.215.241.74:43736] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adKBO9Ht_Oyw03gjCNiDJAAAANc"]
[Sun Apr 05 23:35:24.465362 2026] [:error] [pid 45409:tid 45416] [client 147.135.252.182:38124] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "adKBPNHt_Oyw03gjCNiDKAAAAMU"]
[Sun Apr 05 23:35:24.541513 2026] [:error] [pid 45304:tid 45362] [client 20.215.241.74:30483] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "adKBPA5jnqDKKovdRklKNAAAAFI"]
[Sun Apr 05 23:35:25.309545 2026] [:error] [pid 45304:tid 45354] [client 20.215.241.74:36770] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "adKBPQ5jnqDKKovdRklKNgAAAEo"]
[Sun Apr 05 23:35:26.099106 2026] [:error] [pid 45304:tid 45368] [client 20.215.241.74:48441] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "adKBPg5jnqDKKovdRklKOQAAAFg"]
[Sun Apr 05 23:35:26.939617 2026] [:error] [pid 45303:tid 45330] [client 147.135.252.182:38132] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "adKBPrboQ9eViZ4hdnmVigAAAA0"]
[Sun Apr 05 23:35:27.182197 2026] [:error] [pid 30921:tid 30937] [client 20.215.241.74:38735] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "adKBP2FGQVn8Q0ueB25gNgAAAQ4"]
[Sun Apr 05 23:35:28.131658 2026] [:error] [pid 45305:tid 45386] [client 20.215.241.74:16582] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "adKBQOjDQjr7aWhjflCUiwAAAI8"]
[Sun Apr 05 23:35:29.018306 2026] [:error] [pid 45303:tid 45327] [client 20.215.241.74:49128] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "adKBQbboQ9eViZ4hdnmVlwAAAAo"]
[Sun Apr 05 23:35:29.280430 2026] [:error] [pid 45304:tid 45354] [client 147.135.252.182:54386] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "adKBQQ5jnqDKKovdRklKSQAAAEo"]
[Sun Apr 05 23:35:30.594921 2026] [:error] [pid 30921:tid 30928] [client 20.215.241.74:38767] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "adKBQmFGQVn8Q0ueB25gQAAAAQU"]
[Sun Apr 05 23:35:31.419357 2026] [:error] [pid 45409:tid 45429] [client 20.215.241.74:14577] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "adKBQ9Ht_Oyw03gjCNiDSwAAANI"]
[Sun Apr 05 23:35:31.763286 2026] [:error] [pid 45304:tid 45361] [client 147.135.252.182:54394] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adKBQw5jnqDKKovdRklKUgAAAFE"]
[Sun Apr 05 23:35:32.230618 2026] [:error] [pid 30921:tid 30924] [client 20.215.241.74:14543] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "adKBRGFGQVn8Q0ueB25gQwAAAQE"]
[Sun Apr 05 23:35:33.559231 2026] [:error] [pid 45409:tid 45411] [client 20.215.241.74:4882] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "adKBRdHt_Oyw03gjCNiDWgAAAMA"]
[Sun Apr 05 23:35:34.099816 2026] [:error] [pid 30921:tid 30931] [client 147.135.252.182:54404] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adKBRmFGQVn8Q0ueB25gSQAAAQg"]
[Sun Apr 05 23:35:36.135308 2026] [:error] [pid 45305:tid 45386] [client 20.215.241.74:16577] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "adKBSOjDQjr7aWhjflCUlwAAAI8"]
[Sun Apr 05 23:35:36.427247 2026] [:error] [pid 30921:tid 30946] [client 147.135.252.182:54406] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adKBSGFGQVn8Q0ueB25gSwAAARc"]
[Sun Apr 05 23:35:37.709770 2026] [:error] [pid 45304:tid 45358] [client 20.215.241.74:15238] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "adKBSQ5jnqDKKovdRklKWwAAAE4"]
[Sun Apr 05 23:35:38.901111 2026] [:error] [pid 45409:tid 45416] [client 147.135.252.182:43478] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adKBStHt_Oyw03gjCNiDfwAAAMU"]
[Sun Apr 05 23:35:39.365112 2026] [:error] [pid 45304:tid 45356] [client 20.215.241.74:36339] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "adKBSw5jnqDKKovdRklKXwAAAEw"]
[Sun Apr 05 23:35:49.851912 2026] [:error] [pid 45409:tid 45423] [client 20.215.241.74:4916] [client 20.215.241.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "adKBVdHt_Oyw03gjCNiD3AAAAMw"]
[Sun Apr 05 23:35:54.221400 2026] [autoindex:error] [pid 30921:tid 30941] [client 20.215.241.74:39422] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 05 23:36:02.576329 2026] [:error] [pid 30921:tid 30945] [client 20.215.241.74:39422] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "adKBYmFGQVn8Q0ueB25glwAAARY"]
[Sun Apr 05 23:36:03.328701 2026] [:error] [pid 45304:tid 45366] [client 20.215.241.74:20546] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "adKBYw5jnqDKKovdRklKkgAAAFY"]
[Sun Apr 05 23:36:04.209315 2026] [:error] [pid 45304:tid 45350] [client 20.215.241.74:20595] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "adKBZA5jnqDKKovdRklKlgAAAEY"]
[Sun Apr 05 23:36:05.024294 2026] [:error] [pid 45409:tid 45434] [client 20.215.241.74:16342] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "adKBZdHt_Oyw03gjCNiEJQAAANc"]
[Sun Apr 05 23:36:06.796855 2026] [:error] [pid 45409:tid 45420] [client 20.215.241.74:27921] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "adKBZtHt_Oyw03gjCNiELgAAAMk"]
[Sun Apr 05 23:36:08.560178 2026] [:error] [pid 45304:tid 45350] [client 20.215.241.74:16822] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "adKBaA5jnqDKKovdRklKpQAAAEY"]
[Sun Apr 05 23:36:09.790127 2026] [:error] [pid 45409:tid 45418] [client 147.135.252.182:43484] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "adKBadHt_Oyw03gjCNiEPwAAAMc"]
[Sun Apr 05 23:36:11.269564 2026] [:error] [pid 45409:tid 45426] [client 20.215.241.74:15166] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "adKBa9Ht_Oyw03gjCNiERAAAAM8"]
[Sun Apr 05 23:36:12.210372 2026] [:error] [pid 45409:tid 45420] [client 147.135.252.182:60308] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adKBbNHt_Oyw03gjCNiESAAAAMk"]
[Sun Apr 05 23:36:14.692463 2026] [:error] [pid 45409:tid 45424] [client 147.135.252.182:60322] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adKBbtHt_Oyw03gjCNiEVQAAAM0"]
[Sun Apr 05 23:36:15.543706 2026] [:error] [pid 45305:tid 45388] [client 20.215.241.74:16817] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "adKBb-jDQjr7aWhjflCU7QAAAJE"]
[Sun Apr 05 23:36:16.999471 2026] [:error] [pid 45303:tid 45336] [client 147.135.252.182:60326] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adKBcLboQ9eViZ4hdnmWDQAAABM"]
[Sun Apr 05 23:36:17.777219 2026] [:error] [pid 45409:tid 45415] [client 20.215.241.74:18865] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "adKBcdHt_Oyw03gjCNiEYgAAAMQ"]
[Sun Apr 05 23:36:19.466130 2026] [:error] [pid 45409:tid 45411] [client 147.135.252.182:52426] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adKBc9Ht_Oyw03gjCNiEbAAAAMA"]
[Sun Apr 05 23:36:19.927887 2026] [:error] [pid 45409:tid 45426] [client 20.215.241.74:15120] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "adKBc9Ht_Oyw03gjCNiEbQAAAM8"]
[Sun Apr 05 23:36:21.388584 2026] [:error] [pid 30921:tid 30947] [client 20.215.241.74:27948] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "adKBdWFGQVn8Q0ueB25gwAAAARg"]
[Sun Apr 05 23:36:21.803988 2026] [:error] [pid 45409:tid 45424] [client 147.135.252.182:52438] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adKBddHt_Oyw03gjCNiEeQAAAM0"]
[Sun Apr 05 23:36:23.313634 2026] [:error] [pid 45409:tid 45430] [client 20.215.241.74:22026] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "adKBd9Ht_Oyw03gjCNiEggAAANM"]
[Sun Apr 05 23:36:24.099060 2026] [:error] [pid 45409:tid 45424] [client 147.135.252.182:52454] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "adKBeNHt_Oyw03gjCNiEiAAAAM0"]
[Sun Apr 05 23:36:25.139894 2026] [:error] [pid 45409:tid 45414] [client 20.215.241.74:55123] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adKBedHt_Oyw03gjCNiEkAAAAMM"]
[Sun Apr 05 23:36:26.413499 2026] [:error] [pid 45409:tid 45431] [client 147.135.252.182:52458] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adKBetHt_Oyw03gjCNiEnQAAANQ"]
[Sun Apr 05 23:36:27.511817 2026] [:error] [pid 45409:tid 45431] [client 20.215.241.74:4557] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adKBe9Ht_Oyw03gjCNiEqwAAANQ"]
[Sun Apr 05 23:36:28.842707 2026] [:error] [pid 30921:tid 30933] [client 20.215.241.74:55127] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adKBfGFGQVn8Q0ueB25g0AAAAQo"]
[Sun Apr 05 23:36:28.892559 2026] [:error] [pid 30921:tid 30943] [client 147.135.252.182:39170] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "adKBfGFGQVn8Q0ueB25g0QAAARQ"]
[Sun Apr 05 23:36:29.817428 2026] [:error] [pid 45409:tid 45430] [client 20.215.241.74:24958] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adKBfdHt_Oyw03gjCNiEuAAAANM"]
[Sun Apr 05 23:36:30.789569 2026] [:error] [pid 45409:tid 45430] [client 20.215.241.74:34980] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "adKBftHt_Oyw03gjCNiEwQAAANM"]
[Sun Apr 05 23:36:31.339980 2026] [:error] [pid 45409:tid 45411] [client 147.135.252.182:39184] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "adKBf9Ht_Oyw03gjCNiExQAAAMA"]
[Sun Apr 05 23:36:31.448228 2026] [:error] [pid 45409:tid 45419] [client 20.215.241.74:4578] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "adKBf9Ht_Oyw03gjCNiExgAAAMg"]
[Sun Apr 05 23:36:32.496228 2026] [:error] [pid 45304:tid 45350] [client 20.215.241.74:22023] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "adKBgA5jnqDKKovdRklKvQAAAEY"]
[Sun Apr 05 23:36:34.092848 2026] [:error] [pid 30921:tid 30938] [client 20.215.241.74:24939] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "adKBgmFGQVn8Q0ueB25g2wAAAQ8"]
[Sun Apr 05 23:36:35.119051 2026] [:error] [pid 45304:tid 45349] [client 20.215.241.74:44997] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "adKBgw5jnqDKKovdRklKvwAAAEU"]
[Sun Apr 05 23:36:36.305431 2026] [:error] [pid 45303:tid 45329] [client 20.215.241.74:19443] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "adKBhLboQ9eViZ4hdnmWOQAAAAw"]
[Sun Apr 05 23:36:38.553199 2026] [:error] [pid 45409:tid 45424] [client 20.215.241.74:44316] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "adKBhtHt_Oyw03gjCNiFAAAAAM0"]
[Sun Apr 05 23:36:40.442555 2026] [:error] [pid 45305:tid 45392] [client 20.215.241.74:16519] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "adKBiOjDQjr7aWhjflCVMAAAAJU"]
[Sun Apr 05 23:36:41.918670 2026] [:error] [pid 45305:tid 45390] [client 20.215.241.74:16551] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "adKBiejDQjr7aWhjflCVMgAAAJM"]
[Sun Apr 05 23:36:43.783224 2026] [:error] [pid 45303:tid 45341] [client 20.215.241.74:14850] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "adKBi7boQ9eViZ4hdnmWYgAAABg"]
[Sun Apr 05 23:36:45.408344 2026] [:error] [pid 45303:tid 45335] [client 20.215.241.74:16536] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "adKBjbboQ9eViZ4hdnmWbAAAABI"]
[Sun Apr 05 23:36:46.418471 2026] [:error] [pid 45409:tid 45414] [client 20.215.241.74:5048] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "adKBjtHt_Oyw03gjCNiFIAAAAMM"]
[Sun Apr 05 23:36:49.235059 2026] [:error] [pid 45409:tid 45414] [client 20.215.241.74:5055] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "adKBkdHt_Oyw03gjCNiFKgAAAMM"]
[Sun Apr 05 23:36:50.070605 2026] [:error] [pid 45409:tid 45426] [client 20.215.241.74:31128] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "adKBktHt_Oyw03gjCNiFNQAAAM8"]
[Sun Apr 05 23:36:51.974277 2026] [:error] [pid 45409:tid 45418] [client 20.215.241.74:18406] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "adKBk9Ht_Oyw03gjCNiFPQAAAMc"]
[Sun Apr 05 23:36:53.252549 2026] [:error] [pid 45305:tid 45385] [client 20.215.241.74:19408] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "adKBlejDQjr7aWhjflCVVAAAAI4"]
[Sun Apr 05 23:36:54.079757 2026] [:error] [pid 45304:tid 45358] [client 20.215.241.74:35681] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adKBlg5jnqDKKovdRklK8AAAAE4"]
[Sun Apr 05 23:36:55.458128 2026] [:error] [pid 45303:tid 45339] [client 20.215.241.74:55132] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adKBl7boQ9eViZ4hdnmWxwAAABY"]
[Sun Apr 05 23:36:56.613415 2026] [:error] [pid 45303:tid 45334] [client 20.215.241.74:19772] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adKBmLboQ9eViZ4hdnmW0wAAABE"]
[Sun Apr 05 23:36:57.784523 2026] [:error] [pid 45303:tid 45335] [client 20.215.241.74:19722] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adKBmbboQ9eViZ4hdnmW3AAAABI"]
[Sun Apr 05 23:36:58.826158 2026] [:error] [pid 45409:tid 45424] [client 20.215.241.74:34964] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "adKBmtHt_Oyw03gjCNiFbAAAAM0"]
[Sun Apr 05 23:37:00.762496 2026] [:error] [pid 45409:tid 45417] [client 20.215.241.74:33686] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "adKBnNHt_Oyw03gjCNiFewAAAMY"]
[Sun Apr 05 23:37:01.860411 2026] [autoindex:error] [pid 45305:tid 45374] [client 20.215.241.74:16524] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 05 23:37:03.608709 2026] [autoindex:error] [pid 45305:tid 45390] [client 20.215.241.74:16524] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 05 23:37:10.609912 2026] [autoindex:error] [pid 45305:tid 45386] [client 20.215.241.74:16524] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 05 23:37:17.650115 2026] [:error] [pid 45305:tid 45386] [client 20.215.241.74:16524] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "adKBrejDQjr7aWhjflCVxwAAAI8"]
[Sun Apr 05 23:37:19.558163 2026] [:error] [pid 45305:tid 45389] [client 20.215.241.74:24872] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "adKBr-jDQjr7aWhjflCV0gAAAJI"]
[Sun Apr 05 23:37:20.727500 2026] [:error] [pid 45304:tid 45368] [client 20.215.241.74:35662] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "adKBsA5jnqDKKovdRklLHgAAAFg"]
[Sun Apr 05 23:37:22.112685 2026] [:error] [pid 45409:tid 45434] [client 20.215.241.74:35682] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "adKBstHt_Oyw03gjCNiGBQAAANc"]
[Sun Apr 05 23:37:24.186987 2026] [:error] [pid 45409:tid 45421] [client 20.215.241.74:22420] [client 20.215.241.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adKBtNHt_Oyw03gjCNiGGQAAAMo"]
[Sun Apr 05 23:37:25.323462 2026] [:error] [pid 45303:tid 45327] [client 20.215.241.74:28626] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "adKBtbboQ9eViZ4hdnmXYgAAAAo"]
[Sun Apr 05 23:37:28.827189 2026] [:error] [pid 45409:tid 45416] [client 20.215.241.74:37499] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "adKBuNHt_Oyw03gjCNiGLQAAAMU"]
[Sun Apr 05 23:37:30.441688 2026] [:error] [pid 45304:tid 45358] [client 20.215.241.74:20207] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "adKBug5jnqDKKovdRklLLAAAAE4"]
[Sun Apr 05 23:37:33.700319 2026] [:error] [pid 45305:tid 45381] [client 20.215.241.74:28011] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "adKBvejDQjr7aWhjflCWBwAAAIo"]
[Sun Apr 05 23:37:35.374911 2026] [:error] [pid 45305:tid 45384] [client 20.215.241.74:24857] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "adKBv-jDQjr7aWhjflCWDQAAAI0"]
[Sun Apr 05 23:37:37.211594 2026] [:error] [pid 45304:tid 45354] [client 20.215.241.74:20175] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "adKBwQ5jnqDKKovdRklLRQAAAEo"]
[Sun Apr 05 23:37:38.454856 2026] [:error] [pid 45304:tid 45355] [client 20.215.241.74:15805] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "adKBwg5jnqDKKovdRklLSQAAAEs"]
[Sun Apr 05 23:37:39.434732 2026] [:error] [pid 45409:tid 45411] [client 20.215.241.74:53915] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adKBw9Ht_Oyw03gjCNiGZAAAAMA"]
[Sun Apr 05 23:37:41.130013 2026] [:error] [pid 45304:tid 45357] [client 20.215.241.74:22442] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adKBxQ5jnqDKKovdRklLVgAAAE0"]
[Sun Apr 05 23:37:42.950543 2026] [:error] [pid 45409:tid 45423] [client 20.215.241.74:37494] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adKBxtHt_Oyw03gjCNiGgQAAAMw"]
[Sun Apr 05 23:37:44.692704 2026] [:error] [pid 45409:tid 45426] [client 20.215.241.74:15753] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adKByNHt_Oyw03gjCNiGlgAAAM8"]
[Sun Apr 05 23:37:50.437034 2026] [:error] [pid 30921:tid 30944] [client 20.215.241.74:16057] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "adKBzmFGQVn8Q0ueB25h0gAAARU"]
[Sun Apr 05 23:37:56.964070 2026] [:error] [pid 45304:tid 45359] [client 20.215.241.74:15168] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "adKB1A5jnqDKKovdRklLdAAAAE8"]
[Sun Apr 05 23:38:04.813972 2026] [:error] [pid 30921:tid 30934] [client 20.215.241.74:24244] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "adKB3GFGQVn8Q0ueB25h-wAAAQs"]
[Sun Apr 05 23:38:07.341092 2026] [:error] [pid 45303:tid 45338] [client 20.215.241.74:36275] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "adKB37boQ9eViZ4hdnmXxQAAABU"]
[Sun Apr 05 23:38:10.294685 2026] [:error] [pid 45409:tid 45412] [client 20.215.241.74:4298] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "adKB4tHt_Oyw03gjCNiHMgAAAME"]
[Sun Apr 05 23:38:11.370232 2026] [:error] [pid 30921:tid 30941] [client 20.215.241.74:47148] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "adKB42FGQVn8Q0ueB25iHQAAARI"]
[Sun Apr 05 23:38:13.385879 2026] [:error] [pid 45409:tid 45432] [client 20.215.241.74:44366] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "adKB5dHt_Oyw03gjCNiHVAAAANU"]
[Sun Apr 05 23:38:14.384735 2026] [:error] [pid 45305:tid 45372] [client 20.215.241.74:43089] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "adKB5ujDQjr7aWhjflCWaAAAAIE"]
[Sun Apr 05 23:38:15.553557 2026] [:error] [pid 30921:tid 30941] [client 20.215.241.74:36240] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "adKB52FGQVn8Q0ueB25iKwAAARI"]
[Sun Apr 05 23:38:29.680409 2026] [:error] [pid 45303:tid 45335] [client 20.215.241.74:4328] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "adKB9bboQ9eViZ4hdnmYCwAAABI"]
[Sun Apr 05 23:38:30.903878 2026] [:error] [pid 45304:tid 45344] [client 20.215.241.74:42403] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "adKB9g5jnqDKKovdRklLuQAAAEA"]
[Sun Apr 05 23:38:32.127100 2026] [:error] [pid 45304:tid 45361] [client 20.215.241.74:4355] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "adKB-A5jnqDKKovdRklLvQAAAFE"]
[Sun Apr 05 23:38:34.863349 2026] [:error] [pid 30921:tid 30934] [client 20.215.241.74:18157] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "adKB-mFGQVn8Q0ueB25iegAAAQs"]
[Sun Apr 05 23:38:36.500773 2026] [:error] [pid 45409:tid 45424] [client 20.215.241.74:20503] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "adKB_NHt_Oyw03gjCNiHlAAAAM0"]
[Sun Apr 05 23:38:39.800035 2026] [:error] [pid 45304:tid 45357] [client 20.215.241.74:21704] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "adKB_w5jnqDKKovdRklLywAAAE0"]
[Sun Apr 05 23:38:46.405430 2026] [:error] [pid 30921:tid 30935] [client 20.215.241.74:42475] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "adKCBmFGQVn8Q0ueB25iqwAAAQw"]
[Sun Apr 05 23:38:47.736025 2026] [:error] [pid 45409:tid 45431] [client 20.215.241.74:42485] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "adKCB9Ht_Oyw03gjCNiHvgAAANQ"]
[Sun Apr 05 23:38:49.182909 2026] [:error] [pid 30921:tid 30936] [client 20.215.241.74:38086] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "adKCCWFGQVn8Q0ueB25itQAAAQ0"]
[Sun Apr 05 23:38:51.871562 2026] [:error] [pid 45305:tid 45394] [client 20.215.241.74:49738] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "adKCC-jDQjr7aWhjflCWxwAAAJc"]
[Sun Apr 05 23:38:52.752116 2026] [:error] [pid 45304:tid 45355] [client 20.215.241.74:12359] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "adKCDA5jnqDKKovdRklL4gAAAEs"]
[Sun Apr 05 23:38:56.393412 2026] [:error] [pid 45409:tid 45434] [client 20.215.241.74:20889] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "adKCENHt_Oyw03gjCNiH3gAAANc"]
[Sun Apr 05 23:38:57.190909 2026] [:error] [pid 45409:tid 45415] [client 20.215.241.74:22678] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adKCEdHt_Oyw03gjCNiH5gAAAMQ"]
[Sun Apr 05 23:38:57.933316 2026] [:error] [pid 45303:tid 45328] [client 20.215.241.74:17025] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adKCEbboQ9eViZ4hdnmYVwAAAAs"]
[Sun Apr 05 23:38:58.720171 2026] [:error] [pid 45305:tid 45379] [client 20.215.241.74:48456] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adKCEujDQjr7aWhjflCW2QAAAIg"]
[Sun Apr 05 23:38:59.962381 2026] [:error] [pid 45409:tid 45423] [client 20.215.241.74:49764] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adKCE9Ht_Oyw03gjCNiH8gAAAMw"]
[Sun Apr 05 23:39:00.520798 2026] [:error] [pid 45303:tid 45328] [client 20.215.241.74:4121] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "adKCFLboQ9eViZ4hdnmYXwAAAAs"]
[Sun Apr 05 23:39:02.191660 2026] [:error] [pid 45409:tid 45416] [client 20.215.241.74:48448] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "adKCFtHt_Oyw03gjCNiIAgAAAMU"]
[Sun Apr 05 23:39:03.330788 2026] [:error] [pid 45409:tid 45413] [client 20.215.241.74:13423] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "adKCF9Ht_Oyw03gjCNiIDQAAAMI"]
[Sun Apr 05 23:39:04.242362 2026] [:error] [pid 30921:tid 30934] [client 20.215.241.74:12649] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "adKCGGFGQVn8Q0ueB25i3wAAAQs"]
[Sun Apr 05 23:39:05.533446 2026] [:error] [pid 45304:tid 45358] [client 20.215.241.74:14388] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "adKCGQ5jnqDKKovdRklMAQAAAE4"]
[Sun Apr 05 23:39:06.503006 2026] [:error] [pid 45303:tid 45318] [client 20.215.241.74:49735] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "adKCGrboQ9eViZ4hdnmYbAAAAAE"]
[Sun Apr 05 23:39:07.452774 2026] [:error] [pid 45409:tid 45422] [client 20.215.241.74:16075] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "adKCG9Ht_Oyw03gjCNiIGQAAAMs"]
[Sun Apr 05 23:39:08.314277 2026] [:error] [pid 45305:tid 45376] [client 20.215.241.74:20924] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "adKCHOjDQjr7aWhjflCW5AAAAIU"]
[Sun Apr 05 23:39:09.277415 2026] [:error] [pid 30921:tid 30929] [client 20.215.241.74:38083] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "adKCHWFGQVn8Q0ueB25i6wAAAQY"]
[Sun Apr 05 23:39:13.490298 2026] [:error] [pid 45305:tid 45372] [client 20.215.241.74:13429] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "adKCIejDQjr7aWhjflCW6wAAAIE"]
[Sun Apr 05 23:39:14.713267 2026] [:error] [pid 45409:tid 45414] [client 20.215.241.74:17071] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "adKCItHt_Oyw03gjCNiIMQAAAMM"]
[Sun Apr 05 23:39:16.143768 2026] [:error] [pid 45305:tid 45394] [client 20.215.241.74:22732] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "adKCJOjDQjr7aWhjflCW9AAAAJc"]
[Sun Apr 05 23:39:17.718170 2026] [:error] [pid 30921:tid 30933] [client 20.215.241.74:26114] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "adKCJWFGQVn8Q0ueB25jCgAAAQo"]
[Sun Apr 05 23:39:20.106768 2026] [:error] [pid 45303:tid 45340] [client 20.215.241.74:29929] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "adKCKLboQ9eViZ4hdnmYnQAAABc"]
[Sun Apr 05 23:39:20.820964 2026] [:error] [pid 45303:tid 45338] [client 20.215.241.74:18614] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "adKCKLboQ9eViZ4hdnmYqAAAABU"]
[Sun Apr 05 23:39:22.266460 2026] [:error] [pid 45409:tid 45425] [client 20.215.241.74:18617] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class19.php"] [unique_id "adKCKtHt_Oyw03gjCNiITwAAAM4"]
[Sun Apr 05 23:39:23.243094 2026] [:error] [pid 45409:tid 45414] [client 20.215.241.74:14349] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "adKCK9Ht_Oyw03gjCNiIWQAAAMM"]
[Sun Apr 05 23:39:24.329499 2026] [:error] [pid 45303:tid 45336] [client 20.215.241.74:43052] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "adKCLLboQ9eViZ4hdnmYtQAAABM"]
[Sun Apr 05 23:39:25.933791 2026] [:error] [pid 45303:tid 45330] [client 20.215.241.74:43064] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "adKCLbboQ9eViZ4hdnmYugAAAA0"]
[Sun Apr 05 23:39:26.750744 2026] [:error] [pid 45304:tid 45366] [client 20.215.241.74:31213] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "adKCLg5jnqDKKovdRklMOgAAAFY"]
[Sun Apr 05 23:39:27.719623 2026] [:error] [pid 45305:tid 45392] [client 20.215.241.74:43009] [client 20.215.241.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "adKCL-jDQjr7aWhjflCXCgAAAJU"]
[Mon Apr 06 02:58:23.441107 2026] [:error] [pid 51753:tid 51823] [client 45.180.107.201:18260] [client 45.180.107.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.180.107.201, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adKwz63pmp1JkaicYbvcwgAAAQw"]
[Mon Apr 06 03:02:33.563633 2026] [:error] [pid 51753:tid 51829] [client 43.138.68.113:40052] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adKxya3pmp1JkaicYbvhSgAAARI"]
[Mon Apr 06 08:16:06.478806 2026] [:error] [pid 35786:tid 35810] [client 216.24.210.119:55647] [client 216.24.210.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "adL7RmgkfCKTaLhwaKRvzwAAANE"]
[Mon Apr 06 12:27:47.037071 2026] [:error] [pid 9442:tid 9462] [client 170.106.113.235:48512] [client 170.106.113.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adM2Q0PsNnAJTnmz6sbGxgAAARI"]
[Mon Apr 06 15:50:43.758763 2026] [:error] [pid 10280:tid 10305] [client 122.51.236.174:32996] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adNl018QUJkf8g-BFfN1VgAAAdY"]
[Mon Apr 06 16:38:14.927813 2026] [:error] [pid 35686:tid 35696] [client 205.185.115.18:61898] [client 205.185.115.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adNw9sMKdea6oORd2fxr-wAAAAA"]
[Mon Apr 06 16:38:16.122250 2026] [:error] [pid 35686:tid 35717] [client 205.185.115.18:61898] [client 205.185.115.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adNw-MMKdea6oORd2fxsAwAAABU"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Mon Apr 06 17:23:47.781619 2026] [:error] [pid 35687:tid 35733] [client 54.37.252.119:58214] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adN7o53LtDozV0i8BitCwwAAAEo"]
[Mon Apr 06 17:23:50.290474 2026] [:error] [pid 9442:tid 9453] [client 54.37.252.119:45896] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adN7pkPsNnAJTnmz6sZougAAAQk"]
[Mon Apr 06 17:23:52.745942 2026] [:error] [pid 35686:tid 35705] [client 54.37.252.119:45898] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adN7qMMKdea6oORd2fyWSAAAAAk"]
[Mon Apr 06 17:23:55.372086 2026] [:error] [pid 35687:tid 35723] [client 54.37.252.119:45912] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adN7q53LtDozV0i8BitCyAAAAEA"]
[Mon Apr 06 17:23:57.971344 2026] [:error] [pid 35686:tid 35714] [client 54.37.252.119:49266] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "adN7rcMKdea6oORd2fyWUAAAABI"]
[Mon Apr 06 17:24:00.420528 2026] [:error] [pid 9442:tid 9468] [client 54.37.252.119:49280] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "adN7sEPsNnAJTnmz6sZowwAAARg"]
[Mon Apr 06 17:24:02.920192 2026] [:error] [pid 35688:tid 35759] [client 54.37.252.119:49288] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "adN7suZ85qg4jLsRpQxQBwAAAIk"]
[Mon Apr 06 17:24:05.279710 2026] [:error] [pid 9442:tid 9453] [client 54.37.252.119:49290] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "adN7tUPsNnAJTnmz6sZoxgAAAQk"]
[Mon Apr 06 17:24:07.710311 2026] [:error] [pid 35688:tid 35757] [client 54.37.252.119:58890] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adN7t-Z85qg4jLsRpQxQFgAAAIc"]
[Mon Apr 06 17:24:10.248965 2026] [:error] [pid 35786:tid 35817] [client 54.37.252.119:58894] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adN7umgkfCKTaLhwaKQDDgAAANg"]
[Mon Apr 06 17:24:12.567963 2026] [:error] [pid 38562:tid 38567] [client 54.37.252.119:58898] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adN7vKeD6Ohe6wzRuy5BBgAAAUI"]
[Mon Apr 06 17:24:14.944537 2026] [:error] [pid 9442:tid 9466] [client 54.37.252.119:58904] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adN7vkPsNnAJTnmz6sZo1gAAARY"]
[Mon Apr 06 17:24:17.441162 2026] [:error] [pid 35686:tid 35707] [client 54.37.252.119:40144] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adN7wcMKdea6oORd2fyWbwAAAAs"]
[Mon Apr 06 17:24:19.756008 2026] [:error] [pid 35686:tid 35709] [client 54.37.252.119:40150] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adN7w8MKdea6oORd2fyWeAAAAA0"]
[Mon Apr 06 17:24:22.250642 2026] [:error] [pid 38562:tid 38588] [client 54.37.252.119:40152] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adN7xqeD6Ohe6wzRuy5BHgAAAVc"]
[Mon Apr 06 17:24:24.566213 2026] [:error] [pid 35687:tid 35741] [client 54.37.252.119:40156] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adN7yJ3LtDozV0i8BitC5AAAAFI"]
[Mon Apr 06 17:24:26.998740 2026] [:error] [pid 9442:tid 9447] [client 54.37.252.119:40094] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adN7ykPsNnAJTnmz6sZo5AAAAQM"]
[Mon Apr 06 17:24:29.547630 2026] [:error] [pid 10280:tid 10295] [client 54.37.252.119:40100] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adN7zV8QUJkf8g-BFfOkgwAAAcw"]
[Mon Apr 06 17:24:32.154406 2026] [:error] [pid 9442:tid 9461] [client 54.37.252.119:40110] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adN70EPsNnAJTnmz6sZo5wAAARE"]
[Mon Apr 06 17:24:34.608929 2026] [:error] [pid 9413:tid 9429] [client 54.37.252.119:40126] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adN70nllvEK3chn01wGmRAAAAY4"]
[Mon Apr 06 17:24:37.200630 2026] [:error] [pid 9442:tid 9458] [client 54.37.252.119:45650] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adN71UPsNnAJTnmz6sZo7AAAAQ4"]
[Mon Apr 06 17:24:39.476429 2026] [:error] [pid 9442:tid 9468] [client 54.37.252.119:45656] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "adN710PsNnAJTnmz6sZo7gAAARg"]
[Mon Apr 06 17:24:42.026760 2026] [:error] [pid 9413:tid 9422] [client 54.37.252.119:45662] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "adN72nllvEK3chn01wGmUQAAAYc"]
[Mon Apr 06 17:24:44.585666 2026] [:error] [pid 35686:tid 35715] [client 54.37.252.119:45676] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "adN73MMKdea6oORd2fyW3gAAABM"]
[Mon Apr 06 17:25:16.188731 2026] [:error] [pid 9442:tid 9446] [client 54.37.252.119:50904] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adN7_EPsNnAJTnmz6sZpOQAAAQI"]
[Mon Apr 06 17:25:18.788464 2026] [:error] [pid 35687:tid 35738] [client 54.37.252.119:56840] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adN7_p3LtDozV0i8BitDSwAAAE8"]
[Mon Apr 06 17:25:21.237088 2026] [:error] [pid 35686:tid 35705] [client 54.37.252.119:56848] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adN8AcMKdea6oORd2fyXigAAAAk"]
[Mon Apr 06 17:25:23.687579 2026] [:error] [pid 35687:tid 35746] [client 54.37.252.119:56864] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adN8A53LtDozV0i8BitDUQAAAFc"]
[Mon Apr 06 17:25:26.236578 2026] [:error] [pid 10280:tid 10291] [client 54.37.252.119:56874] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adN8Bl8QUJkf8g-BFfOk7QAAAcg"]
[Mon Apr 06 17:25:28.955821 2026] [:error] [pid 10280:tid 10297] [client 54.37.252.119:57324] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adN8CF8QUJkf8g-BFfOk7gAAAc4"]
[Mon Apr 06 17:25:31.472393 2026] [:error] [pid 35687:tid 35743] [client 54.37.252.119:57340] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adN8C53LtDozV0i8BitDWAAAAFQ"]
[Mon Apr 06 17:25:33.999873 2026] [:error] [pid 10280:tid 10307] [client 54.37.252.119:57352] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adN8DV8QUJkf8g-BFfOk-gAAAdg"]
[Mon Apr 06 17:25:36.382547 2026] [:error] [pid 10280:tid 10285] [client 54.37.252.119:57356] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adN8EF8QUJkf8g-BFfOlAAAAAcI"]
[Mon Apr 06 17:25:38.864895 2026] [:error] [pid 10280:tid 10291] [client 54.37.252.119:60264] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adN8El8QUJkf8g-BFfOlAgAAAcg"]
[Mon Apr 06 17:25:41.159274 2026] [:error] [pid 38562:tid 38578] [client 54.37.252.119:60280] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adN8FaeD6Ohe6wzRuy5CbAAAAU0"]
[Mon Apr 06 17:25:43.572492 2026] [:error] [pid 35686:tid 35719] [client 54.37.252.119:60284] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adN8F8MKdea6oORd2fyXxQAAABc"]
[Mon Apr 06 17:25:45.876056 2026] [:error] [pid 35686:tid 35702] [client 54.37.252.119:60292] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adN8GcMKdea6oORd2fyX1AAAAAY"]
[Mon Apr 06 17:25:48.285783 2026] [:error] [pid 9442:tid 9465] [client 54.37.252.119:45652] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adN8HEPsNnAJTnmz6sZpbAAAARU"]
[Mon Apr 06 17:25:50.613727 2026] [:error] [pid 38562:tid 38566] [client 54.37.252.119:45664] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adN8HqeD6Ohe6wzRuy5ChQAAAUE"]
[Mon Apr 06 17:25:53.158042 2026] [:error] [pid 38562:tid 38588] [client 54.37.252.119:45668] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adN8IaeD6Ohe6wzRuy5CjgAAAVc"]
[Mon Apr 06 17:25:55.526167 2026] [:error] [pid 38562:tid 38588] [client 54.37.252.119:45672] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "adN8I6eD6Ohe6wzRuy5CngAAAVc"]
[Mon Apr 06 17:25:58.103579 2026] [:error] [pid 35686:tid 35700] [client 54.37.252.119:56794] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "adN8JsMKdea6oORd2fyX7AAAAAQ"]
[Mon Apr 06 17:26:00.399318 2026] [:error] [pid 9442:tid 9459] [client 54.37.252.119:56802] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "adN8KEPsNnAJTnmz6sZpcQAAAQ8"]
[Mon Apr 06 17:26:02.861784 2026] [:error] [pid 35686:tid 35702] [client 54.37.252.119:56806] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "adN8KsMKdea6oORd2fyX_wAAAAY"]
[Mon Apr 06 17:26:05.159669 2026] [:error] [pid 35687:tid 35726] [client 54.37.252.119:56808] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adN8LZ3LtDozV0i8BitDhgAAAEM"]
[Mon Apr 06 17:26:07.551223 2026] [:error] [pid 9442:tid 9457] [client 54.37.252.119:47072] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adN8L0PsNnAJTnmz6sZpcwAAAQ0"]
[Mon Apr 06 17:26:09.996371 2026] [:error] [pid 10280:tid 10303] [client 54.37.252.119:47076] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adN8MV8QUJkf8g-BFfOlKQAAAdQ"]
[Mon Apr 06 17:26:12.403776 2026] [:error] [pid 38562:tid 38581] [client 54.37.252.119:47084] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adN8NKeD6Ohe6wzRuy5CtgAAAVA"]
[Mon Apr 06 17:26:43.737031 2026] [:error] [pid 35686:tid 35719] [client 54.37.252.119:47088] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "adN8U8MKdea6oORd2fyYgwAAABc"]
[Mon Apr 06 17:26:46.087919 2026] [:error] [pid 35686:tid 35720] [client 54.37.252.119:41216] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adN8VsMKdea6oORd2fyYjQAAABg"]
[Mon Apr 06 17:26:48.547644 2026] [:error] [pid 35687:tid 35742] [client 54.37.252.119:55892] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adN8WJ3LtDozV0i8BitDtQAAAFM"]
[Mon Apr 06 17:26:50.879564 2026] [:error] [pid 35686:tid 35697] [client 54.37.252.119:55894] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adN8WsMKdea6oORd2fyYnwAAAAE"]
[Mon Apr 06 17:26:53.400513 2026] [:error] [pid 38562:tid 38589] [client 54.37.252.119:55908] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adN8XaeD6Ohe6wzRuy5DAAAAAVg"]
[Mon Apr 06 17:26:55.820761 2026] [:error] [pid 35687:tid 35739] [client 54.37.252.119:55918] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adN8X53LtDozV0i8BitDxAAAAFA"]
[Mon Apr 06 17:26:58.288410 2026] [:error] [pid 35688:tid 35771] [client 54.37.252.119:41952] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "adN8YuZ85qg4jLsRpQxQYwAAAJU"]
[Mon Apr 06 17:27:00.816099 2026] [:error] [pid 35686:tid 35705] [client 54.37.252.119:41966] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adN8ZMMKdea6oORd2fyYvQAAAAk"]
[Mon Apr 06 17:27:03.351450 2026] [:error] [pid 35686:tid 35710] [client 54.37.252.119:41970] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "adN8Z8MKdea6oORd2fyYxQAAAA4"]
[Mon Apr 06 17:27:05.760000 2026] [:error] [pid 35688:tid 35770] [client 54.37.252.119:41974] [client 54.37.252.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "adN8aeZ85qg4jLsRpQxQagAAAJQ"]
[Mon Apr 06 19:02:34.301795 2026] [:error] [pid 38562:tid 38584] [client 43.133.69.37:50674] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adOSyqeD6Ohe6wzRuy5q-wAAAVM"]
[Mon Apr 06 21:35:03.962089 2026] [:error] [pid 35688:tid 35761] [client 154.161.161.110:33360] [client 154.161.161.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "adO2h-Z85qg4jLsRpQzZhwAAAIs"]
[Mon Apr 06 22:13:09.830683 2026] [:error] [pid 10280:tid 10303] [client 49.51.183.75:37350] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adO_dV8QUJkf8g-BFfMqegAAAdQ"]
[Mon Apr 06 22:33:14.280437 2026] [:error] [pid 35786:tid 35799] [client 205.185.115.18:60295] [client 205.185.115.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adPEKmgkfCKTaLhwaKQs_gAAAMY"]
[Mon Apr 06 22:33:15.416339 2026] [:error] [pid 35786:tid 35809] [client 205.185.115.18:60295] [client 205.185.115.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adPEK2gkfCKTaLhwaKQs_wAAANA"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Mon Apr 06 22:36:19.245112 2026] [:error] [pid 38562:tid 38578] [client 101.42.46.71:43960] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adPE46eD6Ohe6wzRuy6xeAAAAU0"]
[Tue Apr 07 01:16:31.469641 2026] [:error] [pid 39329:tid 39411] [client 43.130.3.122:47714] [client 43.130.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adPqb1b3ztKMBQDfFByfnQAAAEk"]
[Tue Apr 07 01:45:50.198850 2026] [:error] [pid 55003:tid 55018] [client 142.198.45.204:53249] [client 142.198.45.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.198.45.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adPxTgiMyAbcUkWpJeD8YwAAAQs"]
[Tue Apr 07 04:38:31.526346 2026] [:error] [pid 37719:tid 37734] [client 142.198.45.204:64598] [client 142.198.45.204] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adQZx009Xv52u2xXGLD8OgAAAMw"]
[Tue Apr 07 04:40:03.710143 2026] [:error] [pid 37596:tid 37618] [client 142.198.45.204:50359] [client 142.198.45.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.198.45.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adQaI6paAOZHEjRWjP3cMgAAAAw"]
[Tue Apr 07 05:01:58.174608 2026] [:error] [pid 37719:tid 37746] [client 43.130.57.46:50176] [client 43.130.57.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adQfRk09Xv52u2xXGLAJtgAAANg"]
[Tue Apr 07 05:07:33.810333 2026] [:error] [pid 37596:tid 37628] [client 36.41.75.167:39146] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adQglapaAOZHEjRWjP3krQAAABY"]
[Tue Apr 07 05:37:24.820530 2026] [:error] [pid 37719:tid 37743] [client 194.26.192.92:58023] [client 194.26.192.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "adQnlE09Xv52u2xXGLAeOAAAANU"]
[Tue Apr 07 05:37:25.301503 2026] [:error] [pid 37719:tid 37730] [client 194.26.192.92:58126] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/txets.php"] [unique_id "adQnlU09Xv52u2xXGLAePwAAAMg"]
[Tue Apr 07 05:37:25.794687 2026] [:error] [pid 12948:tid 12964] [client 194.26.192.92:58189] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "adQnlcbeSPAN8LvMqsYBWwAAAQ0"]
[Tue Apr 07 05:37:26.287635 2026] [:error] [pid 12948:tid 12954] [client 194.26.192.92:58257] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "adQnlsbeSPAN8LvMqsYBXwAAAQM"]
[Tue Apr 07 05:37:26.776151 2026] [:error] [pid 37719:tid 37732] [client 194.26.192.92:58329] [client 194.26.192.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "adQnlk09Xv52u2xXGLAeTQAAAMo"]
[Tue Apr 07 05:37:27.260893 2026] [:error] [pid 37598:tid 37684] [client 194.26.192.92:58443] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/txets.php"] [unique_id "adQnl-9g7q_cV2WhPax0hwAAAJc"]
[Tue Apr 07 05:37:27.755453 2026] [:error] [pid 37597:tid 37656] [client 194.26.192.92:58521] [client 194.26.192.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schallfuns.php"] [unique_id "adQnlw6uAY0QAy-8EEJATwAAAFY"]
[Tue Apr 07 05:37:28.256533 2026] [:error] [pid 37596:tid 37606] [client 194.26.192.92:58661] [client 194.26.192.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "adQnmKpaAOZHEjRWjP3udgAAAAA"]
[Tue Apr 07 10:50:36.438764 2026] [:error] [pid 12948:tid 12964] [client 97.214.198.96:62598] [client 97.214.198.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.214.198.96, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adRw_MbeSPAN8LvMqsYwfQAAAQ0"]
[Tue Apr 07 10:57:16.933269 2026] [:error] [pid 59551:tid 59571] [client 217.216.72.68:62167] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adRyjF7LN7Ubyqs-sVsgAAAAAZI"]
[Tue Apr 07 10:57:22.242582 2026] [:error] [pid 37598:tid 37676] [client 217.216.72.68:50105] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/"] [unique_id "adRyku9g7q_cV2WhPawTvwAAAI8"]
[Tue Apr 07 10:57:30.396067 2026] [:error] [pid 37598:tid 37664] [client 217.216.72.68:51354] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adRymu9g7q_cV2WhPawT8AAAAIM"]
[Tue Apr 07 10:57:30.549318 2026] [:error] [pid 37597:tid 37642] [client 217.216.72.68:58829] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adRymg6uAY0QAy-8EELATgAAAEg"]
[Tue Apr 07 10:57:46.805181 2026] [:error] [pid 59551:tid 59554] [client 217.216.72.68:63612] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/readme.html"] [unique_id "adRyql7LN7Ubyqs-sVsgWAAAAYE"]
[Tue Apr 07 11:17:29.613665 2026] [:error] [pid 12948:tid 12960] [client 147.135.212.202:34412] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adR3ScbeSPAN8LvMqsY-qwAAAQk"]
[Tue Apr 07 11:17:32.554551 2026] [:error] [pid 12948:tid 12963] [client 147.135.212.202:53352] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adR3TMbeSPAN8LvMqsY-swAAAQw"]
[Tue Apr 07 11:17:35.359056 2026] [:error] [pid 37598:tid 37684] [client 147.135.212.202:53362] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adR3T-9g7q_cV2WhPawjVgAAAJc"]
[Tue Apr 07 11:17:38.696334 2026] [:error] [pid 37597:tid 37651] [client 147.135.212.202:38654] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adR3Ug6uAY0QAy-8EELUqQAAAFE"]
[Tue Apr 07 11:17:41.833106 2026] [:error] [pid 37597:tid 37653] [client 147.135.212.202:38662] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "adR3VQ6uAY0QAy-8EELUtAAAAFM"]
[Tue Apr 07 11:17:44.933104 2026] [:error] [pid 59660:tid 59686] [client 147.135.212.202:38678] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "adR3WDp3-oiX2o5bTsy2owAAAdg"]
[Tue Apr 07 11:17:47.640794 2026] [:error] [pid 37719:tid 37733] [client 147.135.212.202:44960] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "adR3W009Xv52u2xXGLD07gAAAMs"]
[Tue Apr 07 11:17:50.344358 2026] [:error] [pid 37598:tid 37675] [client 147.135.212.202:44962] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "adR3Xu9g7q_cV2WhPawjeQAAAI4"]
[Tue Apr 07 11:17:52.950144 2026] [:error] [pid 37598:tid 37677] [client 147.135.212.202:44964] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adR3YO9g7q_cV2WhPawjfwAAAJA"]
[Tue Apr 07 11:17:55.434853 2026] [:error] [pid 59660:tid 59663] [client 147.135.212.202:44976] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adR3Yzp3-oiX2o5bTsy2pgAAAcE"]
[Tue Apr 07 11:17:58.116002 2026] [:error] [pid 59551:tid 59566] [client 147.135.212.202:48558] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adR3Zl7LN7Ubyqs-sVsrWAAAAY0"]
[Tue Apr 07 11:18:00.725656 2026] [:error] [pid 37597:tid 37655] [client 147.135.212.202:48566] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adR3aA6uAY0QAy-8EELU_gAAAFU"]
[Tue Apr 07 11:18:03.310095 2026] [:error] [pid 37598:tid 37682] [client 147.135.212.202:48568] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adR3a-9g7q_cV2WhPawjjAAAAJU"]
[Tue Apr 07 11:18:05.874374 2026] [:error] [pid 12948:tid 12967] [client 147.135.212.202:34024] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adR3bcbeSPAN8LvMqsY-zwAAARA"]
[Tue Apr 07 11:18:08.505650 2026] [:error] [pid 37597:tid 37643] [client 147.135.212.202:34028] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adR3cA6uAY0QAy-8EELVBgAAAEk"]
[Tue Apr 07 11:18:11.089843 2026] [:error] [pid 37598:tid 37665] [client 147.135.212.202:34036] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adR3c-9g7q_cV2WhPawjmQAAAIQ"]
[Tue Apr 07 11:18:13.626996 2026] [:error] [pid 37598:tid 37673] [client 147.135.212.202:34042] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adR3de9g7q_cV2WhPawjnQAAAIw"]
[Tue Apr 07 11:18:16.241960 2026] [:error] [pid 59490:tid 59503] [client 147.135.212.202:57292] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adR3eEcw8OFbiUZ7Rx0WzgAAAUs"]
[Tue Apr 07 11:18:18.788171 2026] [:error] [pid 59804:tid 59821] [client 147.135.212.202:57296] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adR3enYVIXiPh5_eJTn10wAAAg8"]
[Tue Apr 07 11:18:21.301864 2026] [:error] [pid 59551:tid 59555] [client 147.135.212.202:57306] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adR3fV7LN7Ubyqs-sVsrbAAAAYI"]
[Tue Apr 07 11:18:23.704158 2026] [:error] [pid 37597:tid 37641] [client 147.135.212.202:57308] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adR3fw6uAY0QAy-8EELVNgAAAEc"]
[Tue Apr 07 11:18:56.828900 2026] [:error] [pid 59804:tid 59816] [client 147.135.212.202:48034] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "adR3oHYVIXiPh5_eJTn2BQAAAgo"]
[Tue Apr 07 11:18:59.173152 2026] [:error] [pid 59551:tid 59574] [client 147.135.212.202:35012] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "adR3o17LN7Ubyqs-sVsrtAAAAZU"]
[Tue Apr 07 11:19:01.686889 2026] [:error] [pid 37598:tid 37673] [client 147.135.212.202:35016] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "adR3pe9g7q_cV2WhPawj7QAAAIw"]
[Tue Apr 07 11:19:04.328442 2026] [:error] [pid 59804:tid 59806] [client 147.135.212.202:35018] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adR3qHYVIXiPh5_eJTn2DQAAAgA"]
[Tue Apr 07 11:19:06.637013 2026] [:error] [pid 37719:tid 37727] [client 147.135.212.202:51320] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adR3qk09Xv52u2xXGLD1KwAAAMU"]
[Tue Apr 07 11:19:09.139725 2026] [:error] [pid 59551:tid 59560] [client 147.135.212.202:51324] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adR3rV7LN7Ubyqs-sVsrwAAAAYc"]
[Tue Apr 07 11:19:11.563603 2026] [:error] [pid 37597:tid 37648] [client 147.135.212.202:51328] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adR3rw6uAY0QAy-8EELVwwAAAE4"]
[Tue Apr 07 11:19:14.087329 2026] [:error] [pid 37598:tid 37664] [client 147.135.212.202:51342] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adR3su9g7q_cV2WhPawkDAAAAIM"]
[Tue Apr 07 11:19:16.539967 2026] [:error] [pid 12948:tid 12963] [client 147.135.212.202:47546] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adR3tMbeSPAN8LvMqsY_FgAAAQw"]
[Tue Apr 07 11:19:19.061606 2026] [:error] [pid 37598:tid 37672] [client 147.135.212.202:47552] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adR3t-9g7q_cV2WhPawkIwAAAIs"]
[Tue Apr 07 11:19:21.452709 2026] [:error] [pid 37719:tid 37732] [client 147.135.212.202:47558] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adR3uU09Xv52u2xXGLD1MQAAAMo"]
[Tue Apr 07 11:19:23.874204 2026] [:error] [pid 37598:tid 37674] [client 147.135.212.202:47570] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adR3u-9g7q_cV2WhPawkMwAAAI0"]
[Tue Apr 07 11:19:26.417569 2026] [:error] [pid 59804:tid 59815] [client 147.135.212.202:34098] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adR3vnYVIXiPh5_eJTn2GwAAAgk"]
[Tue Apr 07 11:19:28.885239 2026] [:error] [pid 37598:tid 37676] [client 147.135.212.202:34112] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adR3wO9g7q_cV2WhPawkRQAAAI8"]
[Tue Apr 07 11:19:31.220122 2026] [:error] [pid 59660:tid 59670] [client 147.135.212.202:34116] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adR3wzp3-oiX2o5bTsy3AgAAAcg"]
[Tue Apr 07 11:19:33.523213 2026] [:error] [pid 59551:tid 59571] [client 147.135.212.202:34122] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adR3xV7LN7Ubyqs-sVsrzQAAAZI"]
[Tue Apr 07 11:19:35.972686 2026] [:error] [pid 12948:tid 12965] [client 147.135.212.202:44042] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adR3x8beSPAN8LvMqsY_NAAAAQ4"]
[Tue Apr 07 11:19:38.506988 2026] [:error] [pid 37719:tid 37723] [client 147.135.212.202:44046] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adR3yk09Xv52u2xXGLD1QAAAAME"]
[Tue Apr 07 11:19:40.939214 2026] [:error] [pid 37597:tid 37634] [client 147.135.212.202:44056] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adR3zA6uAY0QAy-8EELWFQAAAEA"]
[Tue Apr 07 11:19:43.385724 2026] [:error] [pid 37598:tid 37664] [client 147.135.212.202:44068] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "adR3z-9g7q_cV2WhPawkZwAAAIM"]
[Tue Apr 07 11:19:45.836869 2026] [:error] [pid 12948:tid 12960] [client 147.135.212.202:57756] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "adR30cbeSPAN8LvMqsY_PAAAAQk"]
[Tue Apr 07 11:19:48.351252 2026] [:error] [pid 37598:tid 37672] [client 147.135.212.202:57758] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "adR31O9g7q_cV2WhPawklQAAAIs"]
[Tue Apr 07 11:19:50.779906 2026] [:error] [pid 37598:tid 37669] [client 147.135.212.202:57774] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "adR31u9g7q_cV2WhPawknQAAAIg"]
[Tue Apr 07 11:19:53.350301 2026] [:error] [pid 12948:tid 12969] [client 147.135.212.202:57782] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adR32cbeSPAN8LvMqsY_PgAAARI"]
[Tue Apr 07 11:20:25.259200 2026] [:error] [pid 59804:tid 59811] [client 147.135.212.202:33086] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "adR3-XYVIXiPh5_eJTn2YgAAAgU"]
[Tue Apr 07 11:20:27.797109 2026] [:error] [pid 37598:tid 37664] [client 147.135.212.202:53892] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "adR3--9g7q_cV2WhPawk8wAAAIM"]
[Tue Apr 07 11:20:30.231107 2026] [:error] [pid 37719:tid 37731] [client 147.135.212.202:53902] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adR3_k09Xv52u2xXGLD1WgAAAMk"]
[Tue Apr 07 11:20:32.649264 2026] [:error] [pid 37598:tid 37680] [client 147.135.212.202:53914] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "adR4AO9g7q_cV2WhPawlDAAAAJM"]
[Tue Apr 07 11:20:35.166288 2026] [:error] [pid 59804:tid 59807] [client 147.135.212.202:53924] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adR4A3YVIXiPh5_eJTn2dAAAAgE"]
[Tue Apr 07 11:20:37.695905 2026] [:error] [pid 59551:tid 59574] [client 147.135.212.202:37122] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adR4BV7LN7Ubyqs-sVssjwAAAZU"]
[Tue Apr 07 11:20:40.186045 2026] [:error] [pid 37597:tid 37642] [client 147.135.212.202:37130] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adR4CA6uAY0QAy-8EELXNwAAAEg"]
[Tue Apr 07 11:20:42.740649 2026] [:error] [pid 59551:tid 59575] [client 147.135.212.202:37142] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adR4Cl7LN7Ubyqs-sVssoAAAAZY"]
[Tue Apr 07 11:20:45.197717 2026] [:error] [pid 12948:tid 12958] [client 147.135.212.202:37152] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adR4DcbeSPAN8LvMqsY_cgAAAQc"]
[Tue Apr 07 11:20:47.697214 2026] [:error] [pid 37598:tid 37668] [client 147.135.212.202:35490] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "adR4D-9g7q_cV2WhPawlLAAAAIc"]
[Tue Apr 07 11:20:50.197406 2026] [:error] [pid 12948:tid 12974] [client 147.135.212.202:35500] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adR4EsbeSPAN8LvMqsY_gQAAARc"]
[Tue Apr 07 11:20:52.672985 2026] [:error] [pid 59804:tid 59824] [client 147.135.212.202:35514] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "adR4FHYVIXiPh5_eJTn2iwAAAhI"]
[Tue Apr 07 11:20:55.150645 2026] [:error] [pid 37598:tid 37666] [client 147.135.212.202:35516] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "adR4F-9g7q_cV2WhPawlPgAAAIU"]
[Tue Apr 07 11:28:16.572346 2026] [:error] [pid 12948:tid 12971] [client 182.42.111.156:32813] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adR50MbeSPAN8LvMqsZBAgAAARQ"]
[Tue Apr 07 11:34:06.366849 2026] [:error] [pid 59490:tid 59501] [client 43.166.7.113:41540] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adR7Lkcw8OFbiUZ7Rx0ZKQAAAUk"]
[Tue Apr 07 17:53:52.811858 2026] [:error] [pid 37598:tid 37681] [client 43.130.34.74:47404] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adTUMO9g7q_cV2WhPayJSgAAAJQ"]
[Tue Apr 07 18:03:23.342107 2026] [:error] [pid 59804:tid 59830] [client 182.42.105.85:48732] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adTWa3YVIXiPh5_eJTl0YgAAAhg"]
[Tue Apr 07 23:51:41.957466 2026] [:error] [pid 59490:tid 59495] [client 49.51.183.84:42700] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adUoDUcw8OFbiUZ7Rx2BnAAAAUM"]
[Wed Apr 08 00:41:38.791283 2026] [:error] [pid 5337:tid 5373] [client 36.111.67.189:45767] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adUzwiboIFdw6tlcN12nHQAAAQ8"]
[Wed Apr 08 03:07:16.655574 2026] [:error] [pid 5337:tid 5375] [client 170.106.148.137:43242] [client 170.106.148.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adVV5CboIFdw6tlcN112uQAAARE"]
[Wed Apr 08 03:56:59.371601 2026] [:error] [pid 16644:tid 16712] [client 142.93.116.228:44340] [client 142.93.116.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "adVhi1irUNcjkEgFsakC4QAAAIQ"]
[Wed Apr 08 03:57:01.917002 2026] [:error] [pid 16643:tid 16700] [client 142.93.116.228:51806] [client 142.93.116.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "adVhjUfokaJVN_Mu_H2eQQAAAFM"]
[Wed Apr 08 04:59:28.716123 2026] [:error] [pid 47732:tid 47754] [client 172.213.233.165:6500] [client 172.213.233.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVwMIm4N5QW9Mh7G10hlwAAANQ"]
[Wed Apr 08 04:59:29.397783 2026] [:error] [pid 16630:tid 16652] [client 172.213.233.165:7254] [client 172.213.233.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVwMSjfVAkPG-jgJEpzhAAAARQ"]
[Wed Apr 08 04:59:30.379336 2026] [:error] [pid 16630:tid 16650] [client 172.213.233.165:51527] [client 172.213.233.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVwMijfVAkPG-jgJEpziwAAARI"]
[Wed Apr 08 04:59:31.238353 2026] [:error] [pid 16630:tid 16633] [client 172.213.233.165:28160] [client 172.213.233.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVwMyjfVAkPG-jgJEpzjwAAAQE"]
[Wed Apr 08 05:26:52.758196 2026] [:error] [pid 47626:tid 47683] [client 51.83.238.207:46412] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2xl%20slot.aspx"] [unique_id "adV2nKjWI8TWtHx2sdb7mwAAAE8"]
[Wed Apr 08 05:26:53.522655 2026] [:error] [pid 47627:tid 47700] [client 51.83.238.207:53428] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2xl%20slot.aspx"] [unique_id "adV2nXOljf1Quv_kDjmSPAAAAIE"]
[Wed Apr 08 05:26:55.230096 2026] [:error] [pid 16630:tid 16642] [client 51.83.238.207:46422] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2xl%20slot.aspx"] [unique_id "adV2nyjfVAkPG-jgJEqNBQAAAQo"]
[Wed Apr 08 05:26:56.774092 2026] [:error] [pid 16630:tid 16638] [client 51.83.238.207:46434] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "adV2oCjfVAkPG-jgJEqNCwAAAQY"]
[Wed Apr 08 05:26:58.718516 2026] [:error] [pid 16630:tid 16634] [client 51.83.238.207:34542] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "adV2oijfVAkPG-jgJEqNEgAAAQI"]
[Wed Apr 08 05:26:59.918890 2026] [:error] [pid 16630:tid 16645] [client 51.83.238.207:34552] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "adV2oyjfVAkPG-jgJEqNFwAAAQ0"]
[Wed Apr 08 05:27:00.305048 2026] [:error] [pid 47626:tid 47673] [client 51.83.238.207:34560] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "adV2pKjWI8TWtHx2sdb7owAAAEU"]
[Wed Apr 08 05:27:01.000246 2026] [:error] [pid 16630:tid 16653] [client 51.83.238.207:34564] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/888%20slot.aspx"] [unique_id "adV2pCjfVAkPG-jgJEqNGgAAARU"]
[Wed Apr 08 05:27:02.551278 2026] [:error] [pid 16630:tid 16641] [client 51.83.238.207:34570] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/888%20slot.aspx"] [unique_id "adV2pijfVAkPG-jgJEqNHwAAAQk"]
[Wed Apr 08 05:27:04.103765 2026] [:error] [pid 47626:tid 47674] [client 51.83.238.207:34576] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/888%20slot.aspx"] [unique_id "adV2qKjWI8TWtHx2sdb7qQAAAEY"]
[Wed Apr 08 05:27:05.388880 2026] [:error] [pid 47732:tid 47756] [client 51.83.238.207:34584] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/888%20slot.aspx"] [unique_id "adV2qYm4N5QW9Mh7G10yyAAAANY"]
[Wed Apr 08 05:27:05.495942 2026] [:error] [pid 47732:tid 47741] [client 51.83.238.207:34592] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "adV2qYm4N5QW9Mh7G10yyQAAAMc"]
[Wed Apr 08 05:27:07.526943 2026] [:error] [pid 47626:tid 47689] [client 51.83.238.207:34600] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "adV2q6jWI8TWtHx2sdb7rQAAAFU"]
[Wed Apr 08 05:27:09.984990 2026] [:error] [pid 47627:tid 47700] [client 51.83.238.207:37368] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "adV2rXOljf1Quv_kDjmSWQAAAIE"]
[Wed Apr 08 05:27:10.093452 2026] [:error] [pid 47627:tid 47708] [client 51.83.238.207:37374] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "adV2rnOljf1Quv_kDjmSWgAAAIk"]
[Wed Apr 08 05:27:12.677793 2026] [:error] [pid 47732:tid 47735] [client 51.83.238.207:37390] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "adV2sIm4N5QW9Mh7G10y0AAAAME"]
[Wed Apr 08 05:27:12.917873 2026] [:error] [pid 47732:tid 47751] [client 51.83.238.207:37406] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "adV2sIm4N5QW9Mh7G10y0gAAANE"]
[Wed Apr 08 05:27:14.188853 2026] [:error] [pid 47626:tid 47669] [client 51.83.238.207:37420] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "adV2sqjWI8TWtHx2sdb7tgAAAEE"]
[Wed Apr 08 05:27:15.115823 2026] [:error] [pid 47732:tid 47743] [client 51.83.238.207:37426] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "adV2s4m4N5QW9Mh7G10y1gAAAMk"]
[Wed Apr 08 05:27:19.477824 2026] [:error] [pid 47627:tid 47709] [client 51.83.238.207:35440] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "adV2t3Oljf1Quv_kDjmSagAAAIo"]
[Wed Apr 08 05:27:19.918548 2026] [:error] [pid 47732:tid 47756] [client 51.83.238.207:35466] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "adV2t4m4N5QW9Mh7G10y5QAAANY"]
[Wed Apr 08 05:27:20.453496 2026] [:error] [pid 47625:tid 47646] [client 51.83.238.207:35456] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adV2uCVuHyNWzZlE8PD4YgAAAAw"]
[Wed Apr 08 05:27:20.578591 2026] [:error] [pid 47732:tid 47744] [client 51.83.238.207:35476] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "adV2uIm4N5QW9Mh7G10y6gAAAMo"]
[Wed Apr 08 05:27:22.911787 2026] [:error] [pid 16630:tid 16642] [client 51.83.238.207:35478] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "adV2uijfVAkPG-jgJEqNbQAAAQo"]
[Wed Apr 08 05:27:24.479707 2026] [:error] [pid 47625:tid 47649] [client 51.83.238.207:35490] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "adV2vCVuHyNWzZlE8PD4awAAAA8"]
[Wed Apr 08 05:27:24.733452 2026] [:error] [pid 47626:tid 47677] [client 51.83.238.207:35506] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adV2vKjWI8TWtHx2sdb7ygAAAEk"]
[Wed Apr 08 05:27:24.897647 2026] [:error] [pid 16630:tid 16636] [client 51.83.238.207:35520] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adV2vCjfVAkPG-jgJEqNdAAAAQQ"]
[Wed Apr 08 05:27:28.450038 2026] [:error] [pid 47626:tid 47690] [client 51.83.238.207:44458] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "adV2wKjWI8TWtHx2sdb7zwAAAFY"]
[Wed Apr 08 05:27:29.053171 2026] [:error] [pid 47732:tid 47734] [client 51.83.238.207:44466] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "adV2wYm4N5QW9Mh7G10y9QAAAMA"]
[Wed Apr 08 05:27:29.089725 2026] [:error] [pid 47625:tid 47655] [client 51.83.238.207:44476] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adV2wSVuHyNWzZlE8PD4dAAAABU"]
[Wed Apr 08 05:27:29.722774 2026] [:error] [pid 16630:tid 16651] [client 51.83.238.207:44480] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adV2wSjfVAkPG-jgJEqNhgAAARM"]
[Wed Apr 08 05:27:33.728475 2026] [:error] [pid 16630:tid 16655] [client 51.83.238.207:44492] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adV2xSjfVAkPG-jgJEqNlQAAARc"]
[Wed Apr 08 05:27:34.416405 2026] [:error] [pid 16630:tid 16656] [client 51.83.238.207:44494] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adV2xijfVAkPG-jgJEqNnQAAARg"]
[Wed Apr 08 05:27:34.453321 2026] [:error] [pid 16630:tid 16641] [client 51.83.238.207:44502] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adV2xijfVAkPG-jgJEqNngAAAQk"]
[Wed Apr 08 05:27:34.974966 2026] [:error] [pid 16630:tid 16640] [client 51.83.238.207:44516] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "adV2xijfVAkPG-jgJEqNpwAAAQg"]
[Wed Apr 08 05:27:38.534148 2026] [:error] [pid 47732:tid 47737] [client 51.83.238.207:44530] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adV2yom4N5QW9Mh7G10zJAAAAMM"]
[Wed Apr 08 05:27:38.895024 2026] [:error] [pid 16630:tid 16653] [client 51.83.238.207:42692] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adV2yijfVAkPG-jgJEqNuwAAARU"]
[Wed Apr 08 05:27:39.594318 2026] [:error] [pid 47625:tid 47635] [client 51.83.238.207:42704] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adV2yyVuHyNWzZlE8PD4fwAAAAE"]
[Wed Apr 08 05:27:39.841746 2026] [:error] [pid 16630:tid 16638] [client 51.83.238.207:42682] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adV2yyjfVAkPG-jgJEqNvAAAAQY"]
[Wed Apr 08 05:27:43.008884 2026] [:error] [pid 47627:tid 47707] [client 51.83.238.207:42710] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adV2z3Oljf1Quv_kDjmSmQAAAIg"]
[Wed Apr 08 05:27:43.665450 2026] [:error] [pid 47732:tid 47746] [client 51.83.238.207:42722] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adV2z4m4N5QW9Mh7G10zPAAAAMw"]
[Wed Apr 08 05:27:44.152858 2026] [:error] [pid 47627:tid 47703] [client 51.83.238.207:42736] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adV20HOljf1Quv_kDjmSnQAAAIQ"]
[Wed Apr 08 05:27:44.200553 2026] [:error] [pid 16630:tid 16643] [client 51.83.238.207:42730] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adV20CjfVAkPG-jgJEqNwAAAAQs"]
[Wed Apr 08 05:27:47.282740 2026] [:error] [pid 47732:tid 47754] [client 51.83.238.207:42740] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adV204m4N5QW9Mh7G10zUgAAANQ"]
[Wed Apr 08 05:27:47.497906 2026] [:error] [pid 47732:tid 47748] [client 51.83.238.207:42750] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adV204m4N5QW9Mh7G10zVgAAAM4"]
[Wed Apr 08 05:27:48.275845 2026] [:error] [pid 47625:tid 47639] [client 51.83.238.207:43146] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "adV21CVuHyNWzZlE8PD4lAAAAAU"]
[Wed Apr 08 05:27:49.271953 2026] [:error] [pid 47626:tid 47688] [client 51.83.238.207:43144] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adV21ajWI8TWtHx2sdb75AAAAFQ"]
[Wed Apr 08 05:28:00.708966 2026] [:error] [pid 47732:tid 47750] [client 51.83.238.207:43184] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "adV24Im4N5QW9Mh7G10zjAAAANA"]
[Wed Apr 08 05:28:02.021740 2026] [:error] [pid 47625:tid 47642] [client 51.83.238.207:43150] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "adV24iVuHyNWzZlE8PD4uQAAAAg"]
[Wed Apr 08 05:28:02.427992 2026] [:error] [pid 47626:tid 47680] [client 51.83.238.207:43174] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adV24qjWI8TWtHx2sdb8CQAAAEw"]
[Wed Apr 08 05:28:02.806328 2026] [:error] [pid 47732:tid 47740] [client 51.83.238.207:43158] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "adV24om4N5QW9Mh7G10zkwAAAMY"]
[Wed Apr 08 05:28:03.691981 2026] [:error] [pid 16630:tid 16645] [client 51.83.238.207:46402] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "adV24yjfVAkPG-jgJEqN9AAAAQ0"]
[Wed Apr 08 05:28:04.772808 2026] [:error] [pid 16630:tid 16634] [client 51.83.238.207:46406] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "adV25CjfVAkPG-jgJEqN_QAAAQI"]
[Wed Apr 08 05:28:04.893548 2026] [:error] [pid 47626:tid 47677] [client 51.83.238.207:46418] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adV25KjWI8TWtHx2sdb8CwAAAEk"]
[Wed Apr 08 05:28:05.483522 2026] [:error] [pid 16630:tid 16645] [client 51.83.238.207:46420] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adV25SjfVAkPG-jgJEqOBgAAAQ0"]
[Wed Apr 08 05:28:07.420053 2026] [:error] [pid 47625:tid 47646] [client 51.83.238.207:46446] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adV25yVuHyNWzZlE8PD4vwAAAAw"]
[Wed Apr 08 05:28:07.549185 2026] [:error] [pid 16630:tid 16633] [client 51.83.238.207:46434] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adV25yjfVAkPG-jgJEqOEAAAAQE"]
[Wed Apr 08 05:28:08.318801 2026] [:error] [pid 16630:tid 16653] [client 51.83.238.207:46456] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adV26CjfVAkPG-jgJEqOFAAAARU"]
[Wed Apr 08 05:28:09.430461 2026] [:error] [pid 47732:tid 47749] [client 51.83.238.207:38634] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adV26Ym4N5QW9Mh7G10zqAAAAM8"]
[Wed Apr 08 05:28:10.588917 2026] [:error] [pid 16630:tid 16644] [client 51.83.238.207:38646] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adV26ijfVAkPG-jgJEqOGwAAAQw"]
[Wed Apr 08 05:28:11.517644 2026] [:error] [pid 47626:tid 47683] [client 51.83.238.207:38668] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adV266jWI8TWtHx2sdb8FgAAAE8"]
[Wed Apr 08 05:28:11.717658 2026] [:error] [pid 47732:tid 47755] [client 51.83.238.207:38652] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adV264m4N5QW9Mh7G10zrwAAANU"]
[Wed Apr 08 05:28:11.977035 2026] [:error] [pid 47626:tid 47679] [client 51.83.238.207:38674] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adV266jWI8TWtHx2sdb8GQAAAEs"]
[Wed Apr 08 05:28:13.745754 2026] [:error] [pid 47732:tid 47734] [client 51.83.238.207:38678] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adV27Ym4N5QW9Mh7G10zvgAAAMA"]
[Wed Apr 08 05:28:14.017159 2026] [:error] [pid 47732:tid 47755] [client 51.83.238.207:38688] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adV27om4N5QW9Mh7G10zwgAAANU"]
[Wed Apr 08 05:28:14.441897 2026] [:error] [pid 47732:tid 47753] [client 51.83.238.207:38690] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adV27om4N5QW9Mh7G10zxQAAANM"]
[Wed Apr 08 05:28:16.930837 2026] [:error] [pid 16630:tid 16643] [client 51.83.238.207:38714] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adV28CjfVAkPG-jgJEqOOQAAAQs"]
[Wed Apr 08 05:28:17.059565 2026] [:error] [pid 16630:tid 16633] [client 51.83.238.207:38696] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adV28SjfVAkPG-jgJEqOPQAAAQE"]
[Wed Apr 08 05:28:17.097024 2026] [:error] [pid 16630:tid 16641] [client 51.83.238.207:38712] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adV28SjfVAkPG-jgJEqOPgAAAQk"]
[Wed Apr 08 05:28:18.922026 2026] [:error] [pid 47732:tid 47740] [client 51.83.238.207:48122] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adV28om4N5QW9Mh7G10zywAAAMY"]
[Wed Apr 08 05:28:19.816546 2026] [:error] [pid 47732:tid 47737] [client 51.83.238.207:48128] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adV284m4N5QW9Mh7G10z0wAAAMM"]
[Wed Apr 08 05:28:20.631002 2026] [:error] [pid 47627:tid 47716] [client 51.83.238.207:48132] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adV29HOljf1Quv_kDjmSzQAAAJE"]
[Wed Apr 08 05:28:20.740133 2026] [:error] [pid 16630:tid 16643] [client 51.83.238.207:48146] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adV29CjfVAkPG-jgJEqOVwAAAQs"]
[Wed Apr 08 05:28:21.835942 2026] [:error] [pid 16630:tid 16652] [client 51.83.238.207:48162] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adV29SjfVAkPG-jgJEqOXwAAARQ"]
[Wed Apr 08 05:28:22.658778 2026] [:error] [pid 47626:tid 47669] [client 51.83.238.207:48178] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adV29qjWI8TWtHx2sdb8JAAAAEE"]
[Wed Apr 08 05:28:23.511785 2026] [:error] [pid 47732:tid 47746] [client 51.83.238.207:48188] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adV294m4N5QW9Mh7G10z2gAAAMw"]
[Wed Apr 08 05:28:24.708194 2026] [:error] [pid 47625:tid 47636] [client 51.83.238.207:48194] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adV2-CVuHyNWzZlE8PD41gAAAAI"]
[Wed Apr 08 05:28:26.028254 2026] [:error] [pid 47732:tid 47751] [client 51.83.238.207:48200] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adV2-om4N5QW9Mh7G10z4gAAANE"]
[Wed Apr 08 05:28:26.628308 2026] [:error] [pid 47732:tid 47755] [client 51.83.238.207:48216] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adV2-om4N5QW9Mh7G10z4wAAANU"]
[Wed Apr 08 05:28:26.943833 2026] [:error] [pid 47732:tid 47735] [client 51.83.238.207:48204] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adV2-om4N5QW9Mh7G10z5AAAAME"]
[Wed Apr 08 05:28:27.572598 2026] [:error] [pid 47627:tid 47710] [client 51.83.238.207:48222] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adV2-3Oljf1Quv_kDjmS5QAAAIs"]
[Wed Apr 08 05:28:28.461588 2026] [:error] [pid 47732:tid 47738] [client 51.83.238.207:49552] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adV2_Im4N5QW9Mh7G10z6QAAAMQ"]
[Wed Apr 08 05:28:29.475180 2026] [:error] [pid 16630:tid 16656] [client 51.83.238.207:49562] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adV2_SjfVAkPG-jgJEqOfAAAARg"]
[Wed Apr 08 05:28:30.278361 2026] [:error] [pid 47627:tid 47706] [client 51.83.238.207:49574] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adV2_nOljf1Quv_kDjmS6gAAAIc"]
[Wed Apr 08 05:28:30.928703 2026] [:error] [pid 16630:tid 16645] [client 51.83.238.207:49586] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adV2_ijfVAkPG-jgJEqOhAAAAQ0"]
[Wed Apr 08 05:28:31.463112 2026] [:error] [pid 47626:tid 47691] [client 51.83.238.207:49588] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adV2_6jWI8TWtHx2sdb8OQAAAFc"]
[Wed Apr 08 05:28:32.382853 2026] [:error] [pid 47732:tid 47744] [client 51.83.238.207:49600] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adV3AIm4N5QW9Mh7G100BgAAAMo"]
[Wed Apr 08 05:28:33.163500 2026] [:error] [pid 47626:tid 47675] [client 51.83.238.207:49612] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adV3AajWI8TWtHx2sdb8PQAAAEc"]
[Wed Apr 08 05:28:33.722440 2026] [:error] [pid 47626:tid 47668] [client 51.83.238.207:49628] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adV3AajWI8TWtHx2sdb8PwAAAEA"]
[Wed Apr 08 05:28:34.956409 2026] [:error] [pid 47625:tid 47642] [client 51.83.238.207:49648] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adV3AiVuHyNWzZlE8PD46AAAAAg"]
[Wed Apr 08 05:28:35.098501 2026] [:error] [pid 47625:tid 47644] [client 51.83.238.207:49632] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adV3AyVuHyNWzZlE8PD46gAAAAo"]
[Wed Apr 08 05:28:35.621650 2026] [:error] [pid 47732:tid 47750] [client 51.83.238.207:49660] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adV3A4m4N5QW9Mh7G100FwAAANA"]
[Wed Apr 08 05:28:36.972297 2026] [:error] [pid 47732:tid 47758] [client 51.83.238.207:49670] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adV3BIm4N5QW9Mh7G100HQAAANg"]
[Wed Apr 08 05:28:38.207010 2026] [:error] [pid 47626:tid 47689] [client 51.83.238.207:41202] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adV3BqjWI8TWtHx2sdb8SwAAAFU"]
[Wed Apr 08 05:28:38.442810 2026] [:error] [pid 16630:tid 16632] [client 51.83.238.207:41216] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adV3BijfVAkPG-jgJEqOnQAAAQA"]
[Wed Apr 08 05:28:38.748430 2026] [:error] [pid 16630:tid 16651] [client 51.83.238.207:41206] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adV3BijfVAkPG-jgJEqOnwAAARM"]
[Wed Apr 08 05:28:39.543805 2026] [:error] [pid 47732:tid 47757] [client 51.83.238.207:41232] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "adV3B4m4N5QW9Mh7G100LQAAANc"]
[Wed Apr 08 05:28:41.130535 2026] [:error] [pid 47627:tid 47719] [client 51.83.238.207:41234] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adV3CXOljf1Quv_kDjmS-gAAAJQ"]
[Wed Apr 08 05:28:41.305923 2026] [:error] [pid 47732:tid 47749] [client 51.83.238.207:41248] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adV3CYm4N5QW9Mh7G100NgAAAM8"]
[Wed Apr 08 05:28:42.278940 2026] [:error] [pid 47626:tid 47686] [client 51.83.238.207:41256] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adV3CqjWI8TWtHx2sdb8VwAAAFI"]
[Wed Apr 08 05:28:42.476111 2026] [:error] [pid 47626:tid 47681] [client 51.83.238.207:41266] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "adV3CqjWI8TWtHx2sdb8WQAAAE0"]
[Wed Apr 08 05:28:44.091622 2026] [:error] [pid 47627:tid 47699] [client 51.83.238.207:41274] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adV3DHOljf1Quv_kDjmTBAAAAIA"]
[Wed Apr 08 05:28:44.128683 2026] [:error] [pid 47625:tid 47634] [client 51.83.238.207:41288] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "adV3DCVuHyNWzZlE8PD5AAAAAAA"]
[Wed Apr 08 05:28:45.288934 2026] [:error] [pid 47625:tid 47643] [client 51.83.238.207:41304] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adV3DSVuHyNWzZlE8PD5CgAAAAk"]
[Wed Apr 08 05:28:45.668001 2026] [:error] [pid 47625:tid 47644] [client 51.83.238.207:41308] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "adV3DSVuHyNWzZlE8PD5DgAAAAo"]
[Wed Apr 08 05:28:46.505881 2026] [:error] [pid 47625:tid 47637] [client 51.83.238.207:41310] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "adV3DiVuHyNWzZlE8PD5FwAAAAM"]
[Wed Apr 08 05:28:47.355125 2026] [:error] [pid 47627:tid 47708] [client 51.83.238.207:41312] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "adV3D3Oljf1Quv_kDjmTCgAAAIk"]
[Wed Apr 08 05:28:48.479714 2026] [:error] [pid 16630:tid 16656] [client 51.83.238.207:38340] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "adV3ECjfVAkPG-jgJEqOqgAAARg"]
[Wed Apr 08 05:28:48.562263 2026] [:error] [pid 16630:tid 16636] [client 51.83.238.207:41316] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adV3ECjfVAkPG-jgJEqOqwAAAQQ"]
[Wed Apr 08 05:28:49.270799 2026] [:error] [pid 47626:tid 47678] [client 51.83.238.207:38350] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "adV3EajWI8TWtHx2sdb8bwAAAEo"]
[Wed Apr 08 05:28:49.968594 2026] [:error] [pid 47626:tid 47684] [client 51.83.238.207:38356] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "adV3EajWI8TWtHx2sdb8cQAAAFA"]
[Wed Apr 08 05:28:51.705437 2026] [:error] [pid 47732:tid 47745] [client 51.83.238.207:38370] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "adV3E4m4N5QW9Mh7G100VwAAAMs"]
[Wed Apr 08 05:28:51.820484 2026] [:error] [pid 47626:tid 47677] [client 51.83.238.207:38360] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "adV3E6jWI8TWtHx2sdb8dgAAAEk"]
[Wed Apr 08 05:28:52.601590 2026] [:error] [pid 47625:tid 47644] [client 51.83.238.207:38380] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "adV3FCVuHyNWzZlE8PD5NAAAAAo"]
[Wed Apr 08 05:28:53.269173 2026] [:error] [pid 16630:tid 16656] [client 51.83.238.207:38390] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adV3FSjfVAkPG-jgJEqOvQAAARg"]
[Wed Apr 08 05:28:54.494058 2026] [:error] [pid 16630:tid 16644] [client 51.83.238.207:38400] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "adV3FijfVAkPG-jgJEqOzAAAAQw"]
[Wed Apr 08 05:28:55.261579 2026] [:error] [pid 16630:tid 16640] [client 51.83.238.207:38410] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "adV3FyjfVAkPG-jgJEqO0gAAAQg"]
[Wed Apr 08 05:28:55.585847 2026] [:error] [pid 47627:tid 47700] [client 51.83.238.207:38414] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "adV3F3Oljf1Quv_kDjmTGQAAAIE"]
[Wed Apr 08 05:28:56.165861 2026] [:error] [pid 47627:tid 47716] [client 51.83.238.207:38426] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adV3GHOljf1Quv_kDjmTHQAAAJE"]
[Wed Apr 08 05:28:57.830281 2026] [:error] [pid 47627:tid 47718] [client 51.83.238.207:38438] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "adV3GXOljf1Quv_kDjmTJQAAAJM"]
[Wed Apr 08 05:28:57.961854 2026] [:error] [pid 47732:tid 47744] [client 51.83.238.207:46062] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "adV3GYm4N5QW9Mh7G100agAAAMo"]
[Wed Apr 08 05:28:58.596868 2026] [:error] [pid 16630:tid 16641] [client 51.83.238.207:46074] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "adV3GijfVAkPG-jgJEqO2wAAAQk"]
[Wed Apr 08 05:29:09.783675 2026] [:error] [pid 47732:tid 47758] [client 51.83.238.207:46088] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "adV3JYm4N5QW9Mh7G100lgAAANg"]
[Wed Apr 08 05:29:10.124772 2026] [:error] [pid 47732:tid 47745] [client 51.83.238.207:46098] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "adV3Jom4N5QW9Mh7G100mAAAAMs"]
[Wed Apr 08 05:29:10.148763 2026] [:error] [pid 47732:tid 47747] [client 51.83.238.207:46104] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "adV3Jom4N5QW9Mh7G100mQAAAM0"]
[Wed Apr 08 05:29:10.345051 2026] [:error] [pid 47732:tid 47741] [client 51.83.238.207:46110] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adV3Jom4N5QW9Mh7G100mwAAAMc"]
[Wed Apr 08 05:29:12.777027 2026] [:error] [pid 47625:tid 47634] [client 51.83.238.207:47362] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "adV3KCVuHyNWzZlE8PD5XwAAAAA"]
[Wed Apr 08 05:29:13.011950 2026] [:error] [pid 47627:tid 47713] [client 51.83.238.207:47378] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "adV3KXOljf1Quv_kDjmTWQAAAI4"]
[Wed Apr 08 05:29:13.077499 2026] [:error] [pid 47732:tid 47743] [client 51.83.238.207:47390] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "adV3KYm4N5QW9Mh7G100ogAAAMk"]
[Wed Apr 08 05:29:13.695641 2026] [:error] [pid 47626:tid 47677] [client 51.83.238.207:47406] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "adV3KajWI8TWtHx2sdb8lAAAAEk"]
[Wed Apr 08 05:29:15.421601 2026] [:error] [pid 16630:tid 16650] [client 51.83.238.207:47412] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "adV3KyjfVAkPG-jgJEqPJQAAARI"]
[Wed Apr 08 05:29:15.605982 2026] [:error] [pid 47627:tid 47705] [client 51.83.238.207:47418] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "adV3K3Oljf1Quv_kDjmTYQAAAIY"]
[Wed Apr 08 05:29:15.614586 2026] [:error] [pid 47627:tid 47721] [client 51.83.238.207:47432] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "adV3K3Oljf1Quv_kDjmTYgAAAJY"]
[Wed Apr 08 05:29:16.403733 2026] [:error] [pid 16630:tid 16655] [client 51.83.238.207:47444] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "adV3LCjfVAkPG-jgJEqPLgAAARc"]
[Wed Apr 08 05:29:17.915461 2026] [:error] [pid 47732:tid 47735] [client 51.83.238.207:37792] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "adV3LYm4N5QW9Mh7G100tQAAAME"]
[Wed Apr 08 05:29:18.026180 2026] [:error] [pid 47732:tid 47739] [client 51.83.238.207:37800] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "adV3Lom4N5QW9Mh7G100tgAAAMU"]
[Wed Apr 08 05:29:18.740704 2026] [:error] [pid 16630:tid 16650] [client 51.83.238.207:37802] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "adV3LijfVAkPG-jgJEqPRQAAARI"]
[Wed Apr 08 05:29:18.858250 2026] [:error] [pid 47627:tid 47706] [client 51.83.238.207:37816] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "adV3LnOljf1Quv_kDjmTbAAAAIc"]
[Wed Apr 08 05:29:19.464016 2026] [:error] [pid 47732:tid 47751] [client 51.83.238.207:37820] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "adV3L4m4N5QW9Mh7G100wAAAANE"]
[Wed Apr 08 05:29:20.518992 2026] [:error] [pid 47732:tid 47734] [client 51.83.238.207:37832] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "adV3MIm4N5QW9Mh7G100yQAAAMA"]
[Wed Apr 08 05:29:20.602768 2026] [:error] [pid 47732:tid 47735] [client 51.83.238.207:37838] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adV3MIm4N5QW9Mh7G100ywAAAME"]
[Wed Apr 08 05:29:21.152348 2026] [:error] [pid 47732:tid 47741] [client 51.83.238.207:37850] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "adV3MYm4N5QW9Mh7G1000QAAAMc"]
[Wed Apr 08 05:29:22.737774 2026] [:error] [pid 47732:tid 47758] [client 51.83.238.207:37852] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "adV3Mom4N5QW9Mh7G1003wAAANg"]
[Wed Apr 08 05:29:23.241262 2026] [:error] [pid 47625:tid 47653] [client 51.83.238.207:37884] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adV3MyVuHyNWzZlE8PD5cQAAABM"]
[Wed Apr 08 05:29:23.273000 2026] [:error] [pid 47732:tid 47736] [client 51.83.238.207:37868] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "adV3M4m4N5QW9Mh7G1004gAAAMI"]
[Wed Apr 08 05:29:23.909273 2026] [:error] [pid 16630:tid 16648] [client 51.83.238.207:37886] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adV3MyjfVAkPG-jgJEqPYAAAARA"]
[Wed Apr 08 05:29:24.198072 2026] [:error] [pid 47626:tid 47691] [client 51.83.238.207:37900] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adV3NKjWI8TWtHx2sdb8pwAAAFc"]
[Wed Apr 08 05:29:25.564505 2026] [:error] [pid 47732:tid 47754] [client 51.83.238.207:37906] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "adV3NYm4N5QW9Mh7G1008AAAANQ"]
[Wed Apr 08 05:29:26.148648 2026] [:error] [pid 16630:tid 16653] [client 51.83.238.207:37910] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adV3NijfVAkPG-jgJEqPcQAAARU"]
[Wed Apr 08 05:29:26.688537 2026] [:error] [pid 47625:tid 47639] [client 51.83.238.207:37922] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adV3NiVuHyNWzZlE8PD5fgAAAAU"]
[Wed Apr 08 05:29:26.707179 2026] [:error] [pid 47625:tid 47652] [client 51.83.238.207:37932] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "adV3NiVuHyNWzZlE8PD5fwAAABI"]
[Wed Apr 08 05:29:28.055081 2026] [:error] [pid 16630:tid 16633] [client 51.83.238.207:44206] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adV3OCjfVAkPG-jgJEqPeQAAAQE"]
[Wed Apr 08 05:29:29.341747 2026] [:error] [pid 47626:tid 47670] [client 51.83.238.207:44236] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "adV3OajWI8TWtHx2sdb8rgAAAEI"]
[Wed Apr 08 05:29:29.372983 2026] [:error] [pid 47627:tid 47723] [client 51.83.238.207:44234] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adV3OXOljf1Quv_kDjmTjAAAAJg"]
[Wed Apr 08 05:29:29.594391 2026] [:error] [pid 47732:tid 47755] [client 51.83.238.207:44220] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adV3OYm4N5QW9Mh7G100_AAAANU"]
[Wed Apr 08 05:29:30.603094 2026] [:error] [pid 47627:tid 47715] [client 51.83.238.207:44250] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adV3OnOljf1Quv_kDjmTmQAAAJA"]
[Wed Apr 08 05:29:31.866766 2026] [:error] [pid 47732:tid 47737] [client 51.83.238.207:44262] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "adV3O4m4N5QW9Mh7G101BAAAAMM"]
[Wed Apr 08 05:29:31.994671 2026] [:error] [pid 47732:tid 47742] [client 51.83.238.207:44268] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adV3O4m4N5QW9Mh7G101BQAAAMg"]
[Wed Apr 08 05:29:32.209190 2026] [:error] [pid 47626:tid 47683] [client 51.83.238.207:44276] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adV3PKjWI8TWtHx2sdb8tQAAAE8"]
[Wed Apr 08 05:29:33.310321 2026] [:error] [pid 16630:tid 16656] [client 51.83.238.207:44284] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adV3PSjfVAkPG-jgJEqPjQAAARg"]
[Wed Apr 08 05:29:34.718013 2026] [:error] [pid 47627:tid 47717] [client 51.83.238.207:44290] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adV3PnOljf1Quv_kDjmTnQAAAJI"]
[Wed Apr 08 05:29:35.177908 2026] [:error] [pid 47625:tid 47657] [client 51.83.238.207:44302] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "adV3PyVuHyNWzZlE8PD5iQAAABc"]
[Wed Apr 08 05:29:35.498967 2026] [:error] [pid 47626:tid 47682] [client 51.83.238.207:44316] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adV3P6jWI8TWtHx2sdb8ugAAAE4"]
[Wed Apr 08 05:29:35.806259 2026] [:error] [pid 16630:tid 16653] [client 51.83.238.207:44328] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adV3PyjfVAkPG-jgJEqPlAAAARU"]
[Wed Apr 08 05:29:37.813489 2026] [:error] [pid 16630:tid 16647] [client 51.83.238.207:44336] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adV3QSjfVAkPG-jgJEqPpgAAAQ8"]
[Wed Apr 08 05:29:38.074650 2026] [:error] [pid 16630:tid 16634] [client 51.83.238.207:39796] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adV3QijfVAkPG-jgJEqPqgAAAQI"]
[Wed Apr 08 05:29:38.202842 2026] [:error] [pid 16630:tid 16637] [client 51.83.238.207:39788] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "adV3QijfVAkPG-jgJEqPrQAAAQU"]
[Wed Apr 08 05:29:38.353363 2026] [:error] [pid 16630:tid 16652] [client 51.83.238.207:39798] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adV3QijfVAkPG-jgJEqPrgAAARQ"]
[Wed Apr 08 05:29:40.485820 2026] [:error] [pid 47625:tid 47654] [client 51.83.238.207:39810] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adV3RCVuHyNWzZlE8PD5lAAAABQ"]
[Wed Apr 08 05:29:40.702021 2026] [:error] [pid 16630:tid 16642] [client 51.83.238.207:39824] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adV3RCjfVAkPG-jgJEqPuwAAAQo"]
[Wed Apr 08 05:29:40.895519 2026] [:error] [pid 47627:tid 47712] [client 51.83.238.207:39828] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adV3RHOljf1Quv_kDjmTuwAAAI0"]
[Wed Apr 08 05:29:41.032120 2026] [:error] [pid 16630:tid 16650] [client 51.83.238.207:39836] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adV3RSjfVAkPG-jgJEqPvgAAARI"]
[Wed Apr 08 05:29:43.089596 2026] [:error] [pid 47627:tid 47719] [client 51.83.238.207:39846] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adV3R3Oljf1Quv_kDjmT1gAAAJQ"]
[Wed Apr 08 05:29:43.383858 2026] [:error] [pid 47627:tid 47703] [client 51.83.238.207:39848] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adV3R3Oljf1Quv_kDjmT2gAAAIQ"]
[Wed Apr 08 05:29:43.433438 2026] [:error] [pid 47732:tid 47748] [client 51.83.238.207:39856] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adV3R4m4N5QW9Mh7G101IgAAAM4"]
[Wed Apr 08 05:29:43.437141 2026] [:error] [pid 47732:tid 47754] [client 51.83.238.207:39858] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adV3R4m4N5QW9Mh7G101IwAAANQ"]
[Wed Apr 08 05:29:45.578197 2026] [:error] [pid 16630:tid 16633] [client 51.83.238.207:39870] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adV3SSjfVAkPG-jgJEqP4wAAAQE"]
[Wed Apr 08 05:29:45.990478 2026] [:error] [pid 16630:tid 16651] [client 51.83.238.207:39892] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adV3SSjfVAkPG-jgJEqP5QAAARM"]
[Wed Apr 08 05:29:46.003920 2026] [:error] [pid 47625:tid 47639] [client 51.83.238.207:39908] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adV3SiVuHyNWzZlE8PD5sAAAAAU"]
[Wed Apr 08 05:29:46.005025 2026] [:error] [pid 16630:tid 16648] [client 51.83.238.207:39882] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adV3SijfVAkPG-jgJEqP5gAAARA"]
[Wed Apr 08 05:29:48.391189 2026] [:error] [pid 47627:tid 47705] [client 51.83.238.207:36056] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adV3THOljf1Quv_kDjmUAgAAAIY"]
[Wed Apr 08 05:29:48.544967 2026] [:error] [pid 47627:tid 47718] [client 51.83.238.207:36058] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adV3THOljf1Quv_kDjmUBAAAAJM"]
[Wed Apr 08 05:29:48.611912 2026] [:error] [pid 47627:tid 47709] [client 51.83.238.207:36062] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adV3THOljf1Quv_kDjmUBQAAAIo"]
[Wed Apr 08 05:29:48.811509 2026] [:error] [pid 47732:tid 47752] [client 51.83.238.207:36078] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adV3TIm4N5QW9Mh7G101RQAAANI"]
[Wed Apr 08 05:29:50.805455 2026] [:error] [pid 47627:tid 47722] [client 51.83.238.207:36084] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adV3TnOljf1Quv_kDjmUFAAAAJc"]
[Wed Apr 08 05:29:51.273202 2026] [:error] [pid 47627:tid 47719] [client 51.83.238.207:36088] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adV3T3Oljf1Quv_kDjmUGAAAAJQ"]
[Wed Apr 08 05:29:51.369912 2026] [:error] [pid 47626:tid 47686] [client 51.83.238.207:36104] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adV3T6jWI8TWtHx2sdb83AAAAFI"]
[Wed Apr 08 05:29:51.537290 2026] [:error] [pid 47625:tid 47647] [client 51.83.238.207:36108] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adV3TyVuHyNWzZlE8PD5twAAAA0"]
[Wed Apr 08 05:29:53.263191 2026] [:error] [pid 47626:tid 47672] [client 51.83.238.207:36124] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adV3UajWI8TWtHx2sdb84AAAAEQ"]
[Wed Apr 08 05:29:53.676217 2026] [:error] [pid 47627:tid 47700] [client 51.83.238.207:36132] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adV3UXOljf1Quv_kDjmUIAAAAIE"]
[Wed Apr 08 05:29:53.886871 2026] [:error] [pid 16630:tid 16653] [client 51.83.238.207:36138] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adV3USjfVAkPG-jgJEqQDgAAARU"]
[Wed Apr 08 05:29:54.075133 2026] [:error] [pid 47625:tid 47650] [client 51.83.238.207:36150] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adV3UiVuHyNWzZlE8PD5vQAAABA"]
[Wed Apr 08 05:29:55.778825 2026] [:error] [pid 16630:tid 16641] [client 51.83.238.207:36154] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adV3UyjfVAkPG-jgJEqQHAAAAQk"]
[Wed Apr 08 05:29:56.072130 2026] [:error] [pid 16630:tid 16632] [client 51.83.238.207:36162] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adV3VCjfVAkPG-jgJEqQHwAAAQA"]
[Wed Apr 08 05:29:56.948365 2026] [:error] [pid 47625:tid 47657] [client 51.83.238.207:36178] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adV3VCVuHyNWzZlE8PD5yQAAABc"]
[Wed Apr 08 05:29:57.005280 2026] [:error] [pid 47625:tid 47648] [client 51.83.238.207:36182] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adV3VSVuHyNWzZlE8PD5zAAAAA4"]
[Wed Apr 08 05:29:58.324626 2026] [:error] [pid 16630:tid 16640] [client 51.83.238.207:34936] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adV3VijfVAkPG-jgJEqQWwAAAQg"]
[Wed Apr 08 05:29:58.702585 2026] [:error] [pid 47626:tid 47675] [client 51.83.238.207:34950] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adV3VqjWI8TWtHx2sdb85gAAAEc"]
[Wed Apr 08 05:29:59.465560 2026] [:error] [pid 47732:tid 47756] [client 51.83.238.207:34962] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adV3V4m4N5QW9Mh7G101awAAANY"]
[Wed Apr 08 05:29:59.668291 2026] [:error] [pid 47732:tid 47736] [client 51.83.238.207:34956] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adV3V4m4N5QW9Mh7G101bgAAAMI"]
[Wed Apr 08 05:30:00.763447 2026] [:error] [pid 47626:tid 47684] [client 51.83.238.207:34970] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adV3WKjWI8TWtHx2sdb86AAAAFA"]
[Wed Apr 08 05:30:01.005175 2026] [:error] [pid 47626:tid 47668] [client 51.83.238.207:34972] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adV3WajWI8TWtHx2sdb86gAAAEA"]
[Wed Apr 08 05:30:02.007021 2026] [:error] [pid 47625:tid 47640] [client 51.83.238.207:34982] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adV3WiVuHyNWzZlE8PD52gAAAAY"]
[Wed Apr 08 05:30:02.043660 2026] [:error] [pid 47625:tid 47657] [client 51.83.238.207:34994] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adV3WiVuHyNWzZlE8PD52wAAABc"]
[Wed Apr 08 05:30:03.495696 2026] [:error] [pid 47732:tid 47738] [client 51.83.238.207:35008] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adV3W4m4N5QW9Mh7G101igAAAMQ"]
[Wed Apr 08 05:30:03.507852 2026] [:error] [pid 16630:tid 16633] [client 51.83.238.207:34996] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "adV3WyjfVAkPG-jgJEqQagAAAQE"]
[Wed Apr 08 05:30:04.412682 2026] [:error] [pid 16630:tid 16644] [client 51.83.238.207:35024] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adV3XCjfVAkPG-jgJEqQcAAAAQw"]
[Wed Apr 08 05:30:04.622841 2026] [:error] [pid 47627:tid 47721] [client 51.83.238.207:35032] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adV3XHOljf1Quv_kDjmUPAAAAJY"]
[Wed Apr 08 05:30:05.944860 2026] [:error] [pid 16630:tid 16650] [client 51.83.238.207:35036] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adV3XSjfVAkPG-jgJEqQdwAAARI"]
[Wed Apr 08 05:30:06.062114 2026] [:error] [pid 16630:tid 16636] [client 51.83.238.207:35052] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "adV3XijfVAkPG-jgJEqQeAAAAQQ"]
[Wed Apr 08 05:30:15.343571 2026] [:error] [pid 47627:tid 47709] [client 51.83.238.207:35064] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "adV3Z3Oljf1Quv_kDjmUaQAAAIo"]
[Wed Apr 08 05:30:16.287045 2026] [:error] [pid 47732:tid 47758] [client 51.83.238.207:35072] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "adV3aIm4N5QW9Mh7G102AQAAANg"]
[Wed Apr 08 05:30:16.792383 2026] [:error] [pid 47732:tid 47755] [client 51.83.238.207:55192] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adV3aIm4N5QW9Mh7G102BgAAANU"]
[Wed Apr 08 05:30:18.000536 2026] [:error] [pid 47627:tid 47721] [client 51.83.238.207:55176] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adV3aXOljf1Quv_kDjmUdAAAAJY"]
[Wed Apr 08 05:30:18.067709 2026] [:error] [pid 16630:tid 16649] [client 51.83.238.207:55206] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "adV3aijfVAkPG-jgJEqQvgAAARE"]
[Wed Apr 08 05:30:18.942108 2026] [:error] [pid 16630:tid 16637] [client 51.83.238.207:55438] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adV3aijfVAkPG-jgJEqQwwAAAQU"]
[Wed Apr 08 05:30:19.287342 2026] [:error] [pid 47625:tid 47654] [client 51.83.238.207:55452] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adV3ayVuHyNWzZlE8PD5-gAAABQ"]
[Wed Apr 08 05:30:20.706820 2026] [:error] [pid 47732:tid 47742] [client 51.83.238.207:55464] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adV3bIm4N5QW9Mh7G102JwAAAMg"]
[Wed Apr 08 05:30:20.795508 2026] [:error] [pid 47732:tid 47747] [client 51.83.238.207:55468] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adV3bIm4N5QW9Mh7G102KAAAAM0"]
[Wed Apr 08 05:30:21.607700 2026] [:error] [pid 47625:tid 47643] [client 51.83.238.207:55472] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adV3bSVuHyNWzZlE8PD5_AAAAAk"]
[Wed Apr 08 05:30:22.118897 2026] [:error] [pid 16630:tid 16656] [client 51.83.238.207:55488] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adV3bijfVAkPG-jgJEqQ1gAAARg"]
[Wed Apr 08 05:30:23.223176 2026] [:error] [pid 47625:tid 47656] [client 51.83.238.207:55490] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "adV3byVuHyNWzZlE8PD5_gAAABY"]
[Wed Apr 08 05:30:23.616716 2026] [:error] [pid 47732:tid 47754] [client 51.83.238.207:55492] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adV3b4m4N5QW9Mh7G102MQAAANQ"]
[Wed Apr 08 05:30:24.545994 2026] [:error] [pid 47625:tid 47651] [client 51.83.238.207:55508] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adV3cCVuHyNWzZlE8PD6AwAAABE"]
[Wed Apr 08 05:30:24.665117 2026] [:error] [pid 47625:tid 47645] [client 51.83.238.207:55512] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adV3cCVuHyNWzZlE8PD6BgAAAAs"]
[Wed Apr 08 05:30:25.994617 2026] [:error] [pid 47732:tid 47758] [client 51.83.238.207:55520] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "adV3cYm4N5QW9Mh7G102OAAAANg"]
[Wed Apr 08 05:30:26.115562 2026] [:error] [pid 47626:tid 47673] [client 51.83.238.207:55530] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adV3cqjWI8TWtHx2sdb9FgAAAEU"]
[Wed Apr 08 05:30:27.181831 2026] [:error] [pid 47627:tid 47699] [client 51.83.238.207:55544] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adV3c3Oljf1Quv_kDjmUiwAAAIA"]
[Wed Apr 08 05:30:27.232514 2026] [:error] [pid 47627:tid 47716] [client 51.83.238.207:55554] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adV3c3Oljf1Quv_kDjmUjAAAAJE"]
[Wed Apr 08 05:30:28.580735 2026] [:error] [pid 47626:tid 47681] [client 51.83.238.207:46426] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adV3dKjWI8TWtHx2sdb9JgAAAE0"]
[Wed Apr 08 05:30:28.878918 2026] [:error] [pid 16630:tid 16652] [client 51.83.238.207:46442] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "adV3dCjfVAkPG-jgJEqQ8QAAARQ"]
[Wed Apr 08 05:30:29.621178 2026] [:error] [pid 16630:tid 16649] [client 51.83.238.207:46446] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adV3dSjfVAkPG-jgJEqQ9wAAARE"]
[Wed Apr 08 05:30:30.531270 2026] [:error] [pid 47625:tid 47639] [client 51.83.238.207:46458] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "adV3diVuHyNWzZlE8PD6EAAAAAU"]
[Wed Apr 08 05:30:31.188036 2026] [:error] [pid 47627:tid 47700] [client 51.83.238.207:46474] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adV3d3Oljf1Quv_kDjmUpAAAAIE"]
[Wed Apr 08 05:30:31.727792 2026] [:error] [pid 47625:tid 47644] [client 51.83.238.207:46488] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "adV3dyVuHyNWzZlE8PD6EwAAAAo"]
[Wed Apr 08 05:30:32.236332 2026] [:error] [pid 47626:tid 47689] [client 51.83.238.207:46504] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adV3eKjWI8TWtHx2sdb9LAAAAFU"]
[Wed Apr 08 05:30:33.093712 2026] [:error] [pid 16630:tid 16650] [client 51.83.238.207:46516] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adV3eSjfVAkPG-jgJEqREwAAARI"]
[Wed Apr 08 05:30:33.690923 2026] [:error] [pid 47627:tid 47718] [client 51.83.238.207:46524] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adV3eXOljf1Quv_kDjmUsAAAAJM"]
[Wed Apr 08 05:30:34.442213 2026] [:error] [pid 47627:tid 47713] [client 51.83.238.207:46530] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adV3enOljf1Quv_kDjmUtAAAAI4"]
[Wed Apr 08 05:30:34.797228 2026] [:error] [pid 47627:tid 47709] [client 51.83.238.207:46534] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "adV3enOljf1Quv_kDjmUuAAAAIo"]
[Wed Apr 08 05:30:35.707995 2026] [:error] [pid 16630:tid 16649] [client 51.83.238.207:46544] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "adV3eyjfVAkPG-jgJEqRGwAAARE"]
[Wed Apr 08 05:30:36.325191 2026] [:error] [pid 47732:tid 47736] [client 51.83.238.207:46556] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "adV3fIm4N5QW9Mh7G102gwAAAMI"]
[Wed Apr 08 05:30:36.924567 2026] [:error] [pid 47626:tid 47673] [client 51.83.238.207:46562] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "adV3fKjWI8TWtHx2sdb9MQAAAEU"]
[Wed Apr 08 05:30:36.937977 2026] [:error] [pid 47732:tid 47743] [client 51.83.238.207:46566] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adV3fIm4N5QW9Mh7G102hwAAAMk"]
[Wed Apr 08 05:30:37.329734 2026] [:error] [pid 47732:tid 47757] [client 51.83.238.207:46570] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adV3fYm4N5QW9Mh7G102jQAAANc"]
[Wed Apr 08 05:30:38.272081 2026] [:error] [pid 47732:tid 47747] [client 51.83.238.207:43528] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "adV3fom4N5QW9Mh7G102lQAAAM0"]
[Wed Apr 08 05:30:38.892328 2026] [:error] [pid 16630:tid 16642] [client 51.83.238.207:43532] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adV3fijfVAkPG-jgJEqRHwAAAQo"]
[Wed Apr 08 05:30:39.544826 2026] [:error] [pid 16630:tid 16640] [client 51.83.238.207:43546] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adV3fyjfVAkPG-jgJEqRKQAAAQg"]
[Wed Apr 08 05:30:40.237338 2026] [:error] [pid 47627:tid 47703] [client 51.83.238.207:43550] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "adV3gHOljf1Quv_kDjmUwQAAAIQ"]
[Wed Apr 08 05:30:40.842852 2026] [:error] [pid 47732:tid 47741] [client 51.83.238.207:43562] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adV3gIm4N5QW9Mh7G102ngAAAMc"]
[Wed Apr 08 05:30:41.319659 2026] [:error] [pid 47732:tid 47745] [client 51.83.238.207:43576] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "adV3gYm4N5QW9Mh7G102oAAAAMs"]
[Wed Apr 08 05:30:42.722176 2026] [:error] [pid 47626:tid 47684] [client 51.83.238.207:43592] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adV3gqjWI8TWtHx2sdb9OgAAAFA"]
[Wed Apr 08 05:30:42.806596 2026] [:error] [pid 47627:tid 47702] [client 51.83.238.207:43598] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "adV3gnOljf1Quv_kDjmUxwAAAIM"]
[Wed Apr 08 05:30:43.012522 2026] [:error] [pid 47625:tid 47639] [client 51.83.238.207:43584] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "adV3gyVuHyNWzZlE8PD6HwAAAAU"]
[Wed Apr 08 05:30:43.530740 2026] [:error] [pid 47626:tid 47669] [client 51.83.238.207:43614] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "adV3g6jWI8TWtHx2sdb9OwAAAEE"]
[Wed Apr 08 05:30:43.856271 2026] [:error] [pid 47626:tid 47672] [client 51.83.238.207:43630] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "adV3g6jWI8TWtHx2sdb9PQAAAEQ"]
[Wed Apr 08 05:30:45.238088 2026] [:error] [pid 47625:tid 47643] [client 51.83.238.207:43638] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adV3hSVuHyNWzZlE8PD6JAAAAAk"]
[Wed Apr 08 05:30:45.286945 2026] [:error] [pid 47627:tid 47713] [client 51.83.238.207:43652] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adV3hXOljf1Quv_kDjmUzQAAAI4"]
[Wed Apr 08 05:30:45.987941 2026] [:error] [pid 47627:tid 47723] [client 51.83.238.207:43660] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "adV3hXOljf1Quv_kDjmUzgAAAJg"]
[Wed Apr 08 05:30:46.532300 2026] [:error] [pid 16630:tid 16640] [client 51.83.238.207:43668] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adV3hijfVAkPG-jgJEqRNgAAAQg"]
[Wed Apr 08 05:30:47.654364 2026] [:error] [pid 47732:tid 47746] [client 51.83.238.207:43678] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adV3h4m4N5QW9Mh7G102rwAAAMw"]
[Wed Apr 08 05:30:48.024373 2026] [:error] [pid 47625:tid 47634] [client 51.83.238.207:51760] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "adV3iCVuHyNWzZlE8PD6KQAAAAA"]
[Wed Apr 08 05:30:48.395050 2026] [:error] [pid 47627:tid 47709] [client 51.83.238.207:51768] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "adV3iHOljf1Quv_kDjmU0gAAAIo"]
[Wed Apr 08 05:30:48.916569 2026] [:error] [pid 47732:tid 47736] [client 51.83.238.207:51778] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "adV3iIm4N5QW9Mh7G102tgAAAMI"]
[Wed Apr 08 05:30:50.334690 2026] [:error] [pid 47627:tid 47710] [client 51.83.238.207:51794] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "adV3inOljf1Quv_kDjmU2AAAAIs"]
[Wed Apr 08 05:30:50.503366 2026] [:error] [pid 47627:tid 47713] [client 51.83.238.207:51806] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "adV3inOljf1Quv_kDjmU2gAAAI4"]
[Wed Apr 08 05:30:50.818287 2026] [:error] [pid 16630:tid 16653] [client 51.83.238.207:51814] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adV3iijfVAkPG-jgJEqRPwAAARU"]
[Wed Apr 08 05:30:51.726789 2026] [:error] [pid 47626:tid 47675] [client 51.83.238.207:51820] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "adV3i6jWI8TWtHx2sdb9QQAAAEc"]
[Wed Apr 08 05:30:53.200588 2026] [:error] [pid 16630:tid 16651] [client 51.83.238.207:51826] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adV3jSjfVAkPG-jgJEqRUQAAARM"]
[Wed Apr 08 05:30:53.247591 2026] [:error] [pid 16630:tid 16653] [client 51.83.238.207:51856] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "adV3jSjfVAkPG-jgJEqRUgAAARU"]
[Wed Apr 08 05:30:53.268808 2026] [:error] [pid 47627:tid 47711] [client 51.83.238.207:51842] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "adV3jXOljf1Quv_kDjmU3wAAAIw"]
[Wed Apr 08 05:30:54.297564 2026] [:error] [pid 16630:tid 16645] [client 51.83.238.207:51868] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "adV3jijfVAkPG-jgJEqRYgAAAQ0"]
[Wed Apr 08 05:30:55.643589 2026] [:error] [pid 47627:tid 47709] [client 51.83.238.207:51894] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adV3j3Oljf1Quv_kDjmU7AAAAIo"]
[Wed Apr 08 05:30:55.702583 2026] [:error] [pid 47625:tid 47651] [client 51.83.238.207:51896] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "adV3jyVuHyNWzZlE8PD6NAAAABE"]
[Wed Apr 08 05:30:55.706628 2026] [:error] [pid 47625:tid 47652] [client 51.83.238.207:51900] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adV3jyVuHyNWzZlE8PD6NQAAABI"]
[Wed Apr 08 05:30:55.856090 2026] [:error] [pid 47627:tid 47702] [client 51.83.238.207:51882] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "adV3j3Oljf1Quv_kDjmU7gAAAIM"]
[Wed Apr 08 05:30:56.668114 2026] [:error] [pid 47626:tid 47668] [client 51.83.238.207:51902] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adV3kKjWI8TWtHx2sdb9UgAAAEA"]
[Wed Apr 08 05:30:58.282848 2026] [:error] [pid 47625:tid 47644] [client 51.83.238.207:56756] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "adV3kiVuHyNWzZlE8PD6QQAAAAo"]
[Wed Apr 08 05:30:58.659352 2026] [:error] [pid 47627:tid 47719] [client 51.83.238.207:56768] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "adV3knOljf1Quv_kDjmU9QAAAJQ"]
[Wed Apr 08 05:30:58.666108 2026] [:error] [pid 47626:tid 47687] [client 51.83.238.207:56784] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adV3kqjWI8TWtHx2sdb9WAAAAFM"]
[Wed Apr 08 05:30:59.020371 2026] [:error] [pid 16630:tid 16655] [client 51.83.238.207:56788] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "adV3kyjfVAkPG-jgJEqRcgAAARc"]
[Wed Apr 08 05:31:00.836303 2026] [:error] [pid 16630:tid 16647] [client 51.83.238.207:56804] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "adV3lCjfVAkPG-jgJEqRewAAAQ8"]
[Wed Apr 08 05:31:00.836303 2026] [:error] [pid 16630:tid 16646] [client 51.83.238.207:56820] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adV3lCjfVAkPG-jgJEqRegAAAQ4"]
[Wed Apr 08 05:31:01.056708 2026] [:error] [pid 16630:tid 16650] [client 51.83.238.207:56822] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adV3lSjfVAkPG-jgJEqRfQAAARI"]
[Wed Apr 08 05:31:01.140780 2026] [:error] [pid 47732:tid 47740] [client 51.83.238.207:56826] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adV3lYm4N5QW9Mh7G1021QAAAMY"]
[Wed Apr 08 05:31:01.621820 2026] [:error] [pid 47732:tid 47750] [client 51.83.238.207:56838] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adV3lYm4N5QW9Mh7G1022AAAANA"]
[Wed Apr 08 05:31:03.468949 2026] [:error] [pid 16630:tid 16654] [client 51.83.238.207:56848] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adV3lyjfVAkPG-jgJEqRigAAARY"]
[Wed Apr 08 05:31:03.639539 2026] [:error] [pid 47625:tid 47635] [client 51.83.238.207:56852] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "adV3lyVuHyNWzZlE8PD6SAAAAAE"]
[Wed Apr 08 05:31:03.826453 2026] [:error] [pid 16630:tid 16650] [client 51.83.238.207:56864] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adV3lyjfVAkPG-jgJEqRjgAAARI"]
[Wed Apr 08 05:31:04.067747 2026] [:error] [pid 16630:tid 16639] [client 51.83.238.207:56874] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adV3mCjfVAkPG-jgJEqRjwAAAQc"]
[Wed Apr 08 05:31:06.006726 2026] [:error] [pid 47732:tid 47744] [client 51.83.238.207:56876] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "adV3mom4N5QW9Mh7G1025gAAAMo"]
[Wed Apr 08 05:31:06.330180 2026] [:error] [pid 47626:tid 47682] [client 51.83.238.207:56884] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adV3mqjWI8TWtHx2sdb9WwAAAE4"]
[Wed Apr 08 05:31:06.355626 2026] [:error] [pid 47732:tid 47746] [client 51.83.238.207:56888] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adV3mom4N5QW9Mh7G1026QAAAMw"]
[Wed Apr 08 05:31:06.564970 2026] [:error] [pid 47732:tid 47734] [client 51.83.238.207:56904] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adV3mom4N5QW9Mh7G1027AAAAMA"]
[Wed Apr 08 05:31:10.920479 2026] [:error] [pid 47732:tid 47754] [client 51.83.238.207:52138] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adV3nom4N5QW9Mh7G1029QAAANQ"]
[Wed Apr 08 05:31:13.418123 2026] [:error] [pid 47732:tid 47757] [client 51.83.238.207:52152] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adV3oYm4N5QW9Mh7G102_QAAANc"]
[Wed Apr 08 05:31:13.953100 2026] [:error] [pid 47625:tid 47637] [client 51.83.238.207:52166] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "adV3oSVuHyNWzZlE8PD6TAAAAAM"]
[Wed Apr 08 05:31:24.989058 2026] [:error] [pid 16630:tid 16656] [client 51.83.238.207:52144] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "adV3rCjfVAkPG-jgJEqR5wAAARg"]
[Wed Apr 08 05:31:25.985320 2026] [:error] [pid 16630:tid 16643] [client 51.83.238.207:40066] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1234%20superslot.aspx"] [unique_id "adV3rSjfVAkPG-jgJEqR7wAAAQs"]
[Wed Apr 08 05:31:26.309401 2026] [:error] [pid 16630:tid 16654] [client 51.83.238.207:52122] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adV3rijfVAkPG-jgJEqR8AAAARY"]
[Wed Apr 08 05:31:28.852213 2026] [:error] [pid 47626:tid 47679] [client 51.83.238.207:40050] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adV3sKjWI8TWtHx2sdb9eAAAAEs"]
[Wed Apr 08 05:31:28.928476 2026] [:error] [pid 47732:tid 47750] [client 51.83.238.207:56328] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adV3sIm4N5QW9Mh7G103CgAAANA"]
[Wed Apr 08 05:31:29.207999 2026] [:error] [pid 47627:tid 47723] [client 51.83.238.207:56324] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/168%20slot.aspx"] [unique_id "adV3sXOljf1Quv_kDjmVIgAAAJg"]
[Wed Apr 08 05:31:31.340158 2026] [:error] [pid 16630:tid 16643] [client 51.83.238.207:56332] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adV3syjfVAkPG-jgJEqR-AAAAQs"]
[Wed Apr 08 05:31:31.794351 2026] [:error] [pid 47625:tid 47651] [client 51.83.238.207:56348] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adV3syVuHyNWzZlE8PD6YAAAABE"]
[Wed Apr 08 05:31:32.445443 2026] [:error] [pid 47627:tid 47714] [client 51.83.238.207:56360] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2xl%20slot.aspx"] [unique_id "adV3tHOljf1Quv_kDjmVJwAAAI8"]
[Wed Apr 08 05:31:33.817448 2026] [:error] [pid 47732:tid 47742] [client 51.83.238.207:56366] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "adV3tYm4N5QW9Mh7G103FgAAAMg"]
[Wed Apr 08 05:31:34.394041 2026] [:error] [pid 47626:tid 47671] [client 51.83.238.207:56370] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adV3tqjWI8TWtHx2sdb9gQAAAEM"]
[Wed Apr 08 05:31:36.230413 2026] [:error] [pid 47626:tid 47690] [client 51.83.238.207:56380] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adV3uKjWI8TWtHx2sdb9hwAAAFY"]
[Wed Apr 08 05:31:36.831798 2026] [:error] [pid 47732:tid 47752] [client 51.83.238.207:56392] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adV3uIm4N5QW9Mh7G103HgAAANI"]
[Wed Apr 08 05:31:36.978323 2026] [:error] [pid 47732:tid 47758] [client 51.83.238.207:56390] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "adV3uIm4N5QW9Mh7G103HwAAANg"]
[Wed Apr 08 05:31:38.725855 2026] [:error] [pid 47625:tid 47638] [client 51.83.238.207:49286] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "adV3uiVuHyNWzZlE8PD6cwAAAAQ"]
[Wed Apr 08 05:31:39.278792 2026] [:error] [pid 16630:tid 16641] [client 51.83.238.207:49302] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "adV3uyjfVAkPG-jgJEqSBgAAAQk"]
[Wed Apr 08 05:31:41.206388 2026] [:error] [pid 47732:tid 47734] [client 51.83.238.207:49308] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/888%20slot.aspx"] [unique_id "adV3vYm4N5QW9Mh7G103JgAAAMA"]
[Wed Apr 08 05:31:41.210441 2026] [:error] [pid 16630:tid 16642] [client 51.83.238.207:49318] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "adV3vSjfVAkPG-jgJEqSDAAAAQo"]
[Wed Apr 08 05:31:41.742452 2026] [:error] [pid 16630:tid 16638] [client 51.83.238.207:49320] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adV3vSjfVAkPG-jgJEqSDwAAAQY"]
[Wed Apr 08 05:31:44.269471 2026] [:error] [pid 47732:tid 47753] [client 51.83.238.207:49344] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "adV3wIm4N5QW9Mh7G103NQAAANM"]
[Wed Apr 08 05:31:44.663554 2026] [:error] [pid 47732:tid 47754] [client 51.83.238.207:49330] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "adV3wIm4N5QW9Mh7G103NgAAANQ"]
[Wed Apr 08 05:31:46.648049 2026] [:error] [pid 47625:tid 47641] [client 51.83.238.207:49354] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "adV3wiVuHyNWzZlE8PD6dQAAAAc"]
[Wed Apr 08 05:31:49.029857 2026] [:error] [pid 16630:tid 16651] [client 51.83.238.207:47720] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "adV3xSjfVAkPG-jgJEqSIwAAARM"]
[Wed Apr 08 05:31:53.459964 2026] [:error] [pid 47732:tid 47739] [client 51.83.238.207:47734] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "adV3yYm4N5QW9Mh7G103QgAAAMU"]
[Wed Apr 08 05:31:59.637889 2026] [:error] [pid 47732:tid 47751] [client 51.83.238.207:46882] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adV3z4m4N5QW9Mh7G103RwAAANE"]
[Wed Apr 08 05:32:04.709769 2026] [:error] [pid 16630:tid 16655] [client 51.83.238.207:46888] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "adV31CjfVAkPG-jgJEqScwAAARc"]
[Wed Apr 08 05:32:10.290405 2026] [:error] [pid 47625:tid 47636] [client 51.83.238.207:42764] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adV32iVuHyNWzZlE8PD6kQAAAAI"]
[Wed Apr 08 05:32:14.177277 2026] [:error] [pid 47625:tid 47654] [client 51.83.238.207:42776] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adV33iVuHyNWzZlE8PD6mAAAABQ"]
[Wed Apr 08 05:32:17.542906 2026] [:error] [pid 47732:tid 47753] [client 51.83.238.207:42784] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adV34Ym4N5QW9Mh7G103YAAAANM"]
[Wed Apr 08 05:32:21.815115 2026] [:error] [pid 47732:tid 47743] [client 51.83.238.207:53352] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adV35Ym4N5QW9Mh7G103agAAAMk"]
[Wed Apr 08 05:33:08.678375 2026] [:error] [pid 47732:tid 47752] [client 51.83.238.207:53466] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2xl%20slot.aspx"] [unique_id "adV4FIm4N5QW9Mh7G1034gAAANI"]
[Wed Apr 08 05:33:11.507857 2026] [:error] [pid 47625:tid 47638] [client 51.83.238.207:48544] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adV4FyVuHyNWzZlE8PD6ygAAAAQ"]
[Wed Apr 08 05:33:12.255192 2026] [:error] [pid 47625:tid 47646] [client 51.83.238.207:56428] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "adV4GCVuHyNWzZlE8PD6ywAAAAw"]
[Wed Apr 08 05:33:15.331393 2026] [:error] [pid 47732:tid 47736] [client 51.83.238.207:56436] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adV4G4m4N5QW9Mh7G1038AAAAMI"]
[Wed Apr 08 05:33:16.199184 2026] [:error] [pid 16630:tid 16641] [client 51.83.238.207:56438] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/888%20slot.aspx"] [unique_id "adV4HCjfVAkPG-jgJEqTVAAAAQk"]
[Wed Apr 08 05:33:19.781353 2026] [:error] [pid 47732:tid 47744] [client 51.83.238.207:52684] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "adV4H4m4N5QW9Mh7G103-wAAAMo"]
[Wed Apr 08 05:33:21.639247 2026] [:error] [pid 16630:tid 16653] [client 51.83.238.207:52696] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adV4ISjfVAkPG-jgJEqTaQAAARU"]
[Wed Apr 08 05:33:24.163006 2026] [:error] [pid 47732:tid 47737] [client 51.83.238.207:52706] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "adV4JIm4N5QW9Mh7G104AQAAAMM"]
[Wed Apr 08 05:33:26.525839 2026] [:error] [pid 16630:tid 16640] [client 51.83.238.207:52714] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adV4JijfVAkPG-jgJEqTfQAAAQg"]
[Wed Apr 08 05:33:28.929178 2026] [:error] [pid 47732:tid 47756] [client 51.83.238.207:56824] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "adV4KIm4N5QW9Mh7G104DQAAANY"]
[Wed Apr 08 05:33:36.513360 2026] [:error] [pid 47625:tid 47655] [client 51.83.238.207:56854] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adV4MCVuHyNWzZlE8PD61wAAABU"]
[Wed Apr 08 05:33:39.959170 2026] [:error] [pid 16630:tid 16649] [client 51.83.238.207:49240] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adV4MyjfVAkPG-jgJEqTrQAAARE"]
[Wed Apr 08 05:33:42.561806 2026] [:error] [pid 47627:tid 47700] [client 51.83.238.207:56838] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "adV4NnOljf1Quv_kDjmV_QAAAIE"]
[Wed Apr 08 05:33:43.182112 2026] [:error] [pid 47732:tid 47750] [client 51.83.238.207:49252] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adV4N4m4N5QW9Mh7G104IQAAANA"]
[Wed Apr 08 05:33:46.605281 2026] [:error] [pid 47732:tid 47748] [client 51.83.238.207:49264] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "adV4Oom4N5QW9Mh7G104LAAAAM4"]
[Wed Apr 08 05:33:47.172224 2026] [:error] [pid 47626:tid 47677] [client 51.83.238.207:49274] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adV4O6jWI8TWtHx2sdb-iQAAAEk"]
[Wed Apr 08 05:33:49.397945 2026] [:error] [pid 47732:tid 47749] [client 51.83.238.207:37780] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adV4PYm4N5QW9Mh7G104NAAAAM8"]
[Wed Apr 08 05:33:50.313952 2026] [:error] [pid 47732:tid 47737] [client 51.83.238.207:37786] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "adV4Pom4N5QW9Mh7G104OgAAAMM"]
[Wed Apr 08 05:33:53.623442 2026] [:error] [pid 16630:tid 16633] [client 51.83.238.207:37802] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adV4QSjfVAkPG-jgJEqUAQAAAQE"]
[Wed Apr 08 05:33:54.409575 2026] [:error] [pid 47625:tid 47641] [client 51.83.238.207:37812] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "adV4QiVuHyNWzZlE8PD69AAAAAc"]
[Wed Apr 08 05:33:56.081702 2026] [:error] [pid 16630:tid 16654] [client 51.83.238.207:37828] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adV4RCjfVAkPG-jgJEqUEAAAARY"]
[Wed Apr 08 05:33:58.238339 2026] [:error] [pid 16630:tid 16652] [client 51.83.238.207:37834] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "adV4RijfVAkPG-jgJEqUFwAAARQ"]
[Wed Apr 08 05:33:59.483330 2026] [:error] [pid 16630:tid 16646] [client 51.83.238.207:32898] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adV4RyjfVAkPG-jgJEqUHAAAAQ4"]
[Wed Apr 08 05:34:01.806822 2026] [:error] [pid 16630:tid 16644] [client 51.83.238.207:32908] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "adV4SSjfVAkPG-jgJEqUJQAAAQw"]
[Wed Apr 08 05:34:05.353557 2026] [:error] [pid 16630:tid 16646] [client 51.83.238.207:32924] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "adV4TSjfVAkPG-jgJEqUKwAAAQ4"]
[Wed Apr 08 05:34:27.430927 2026] [:error] [pid 16630:tid 16644] [client 51.83.238.207:33336] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "adV4YyjfVAkPG-jgJEqUrwAAAQw"]
[Wed Apr 08 05:34:28.623454 2026] [:error] [pid 16630:tid 16637] [client 51.83.238.207:32938] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adV4ZCjfVAkPG-jgJEqUsQAAAQU"]
[Wed Apr 08 05:34:30.811186 2026] [:error] [pid 16630:tid 16651] [client 51.83.238.207:48656] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "adV4ZijfVAkPG-jgJEqUwgAAARM"]
[Wed Apr 08 05:34:33.236389 2026] [:error] [pid 47627:tid 47710] [client 51.83.238.207:48668] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "adV4aXOljf1Quv_kDjmWSAAAAIs"]
[Wed Apr 08 05:34:33.472401 2026] [:error] [pid 16630:tid 16642] [client 51.83.238.207:48682] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adV4aSjfVAkPG-jgJEqU2QAAAQo"]
[Wed Apr 08 05:34:36.094865 2026] [:error] [pid 47627:tid 47699] [client 51.83.238.207:48696] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adV4bHOljf1Quv_kDjmWSwAAAIA"]
[Wed Apr 08 05:34:36.384861 2026] [:error] [pid 47732:tid 47754] [client 51.83.238.207:48692] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adV4bIm4N5QW9Mh7G104owAAANQ"]
[Wed Apr 08 05:34:38.806316 2026] [:error] [pid 16630:tid 16650] [client 51.83.238.207:41934] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adV4bijfVAkPG-jgJEqU9gAAARI"]
[Wed Apr 08 05:34:41.438895 2026] [:error] [pid 47627:tid 47703] [client 51.83.238.207:41952] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adV4cXOljf1Quv_kDjmWVQAAAIQ"]
[Wed Apr 08 05:34:41.464539 2026] [:error] [pid 47627:tid 47721] [client 51.83.238.207:41940] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adV4cXOljf1Quv_kDjmWVgAAAJY"]
[Wed Apr 08 05:34:44.330801 2026] [:error] [pid 16630:tid 16656] [client 51.83.238.207:41964] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adV4dCjfVAkPG-jgJEqVGQAAARg"]
[Wed Apr 08 05:34:44.561736 2026] [:error] [pid 16630:tid 16649] [client 51.83.238.207:41976] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adV4dCjfVAkPG-jgJEqVGgAAARE"]
[Wed Apr 08 05:34:47.001799 2026] [:error] [pid 47732:tid 47734] [client 51.83.238.207:41980] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adV4d4m4N5QW9Mh7G104vwAAAMA"]
[Wed Apr 08 05:34:47.241480 2026] [:error] [pid 47732:tid 47740] [client 51.83.238.207:41984] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adV4d4m4N5QW9Mh7G104wAAAAMY"]
[Wed Apr 08 05:34:50.891679 2026] [:error] [pid 47627:tid 47712] [client 51.83.238.207:59232] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adV4enOljf1Quv_kDjmWWwAAAI0"]
[Wed Apr 08 05:34:51.492655 2026] [:error] [pid 16630:tid 16645] [client 51.83.238.207:59244] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adV4eyjfVAkPG-jgJEqVSgAAAQ0"]
[Wed Apr 08 05:34:54.512201 2026] [:error] [pid 47627:tid 47722] [client 51.83.238.207:59254] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adV4fnOljf1Quv_kDjmWXgAAAJc"]
[Wed Apr 08 05:34:54.657656 2026] [:error] [pid 16630:tid 16645] [client 51.83.238.207:59262] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adV4fijfVAkPG-jgJEqVYwAAAQ0"]
[Wed Apr 08 05:34:57.713931 2026] [:error] [pid 47732:tid 47744] [client 51.83.238.207:59270] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adV4gYm4N5QW9Mh7G1047AAAAMo"]
[Wed Apr 08 05:34:57.866815 2026] [:error] [pid 47625:tid 47646] [client 51.83.238.207:59266] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adV4gSVuHyNWzZlE8PD7WQAAAAw"]
[Wed Apr 08 05:35:01.411300 2026] [:error] [pid 47732:tid 47749] [client 51.83.238.207:33100] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adV4hYm4N5QW9Mh7G104-QAAAM8"]
[Wed Apr 08 05:35:01.628296 2026] [:error] [pid 47627:tid 47710] [client 51.83.238.207:33104] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adV4hXOljf1Quv_kDjmWewAAAIs"]
[Wed Apr 08 05:35:05.170198 2026] [:error] [pid 16630:tid 16636] [client 51.83.238.207:33110] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adV4iSjfVAkPG-jgJEqVrgAAAQQ"]
[Wed Apr 08 05:35:05.598302 2026] [:error] [pid 47626:tid 47679] [client 51.83.238.207:33118] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adV4iajWI8TWtHx2sdb_UwAAAEs"]
[Wed Apr 08 05:35:07.809400 2026] [:error] [pid 16630:tid 16637] [client 51.83.238.207:33130] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adV4iyjfVAkPG-jgJEqVyAAAAQU"]
[Wed Apr 08 05:35:10.763249 2026] [:error] [pid 47732:tid 47753] [client 51.83.238.207:37758] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adV4jom4N5QW9Mh7G105HgAAANM"]
[Wed Apr 08 05:35:11.794850 2026] [:error] [pid 47627:tid 47720] [client 51.83.238.207:37748] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "adV4j3Oljf1Quv_kDjmWlAAAAJU"]
[Wed Apr 08 05:35:13.357982 2026] [:error] [pid 16630:tid 16634] [client 51.83.238.207:37768] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adV4kSjfVAkPG-jgJEqV6wAAAQI"]
[Wed Apr 08 05:35:15.217811 2026] [:error] [pid 16630:tid 16654] [client 51.83.238.207:37778] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "adV4kyjfVAkPG-jgJEqV-AAAARY"]
[Wed Apr 08 05:35:16.124098 2026] [:error] [pid 16630:tid 16641] [client 51.83.238.207:37786] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adV4lCjfVAkPG-jgJEqWAgAAAQk"]
[Wed Apr 08 05:35:19.073436 2026] [:error] [pid 47732:tid 47751] [client 51.83.238.207:46620] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adV4l4m4N5QW9Mh7G105JgAAANE"]
[Wed Apr 08 05:35:19.152037 2026] [:error] [pid 47625:tid 47645] [client 51.83.238.207:46630] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "adV4lyVuHyNWzZlE8PD7dQAAAAs"]
[Wed Apr 08 05:35:22.389181 2026] [:error] [pid 47625:tid 47653] [client 51.83.238.207:46634] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adV4miVuHyNWzZlE8PD7fwAAABM"]
[Wed Apr 08 05:35:23.670908 2026] [:error] [pid 47625:tid 47638] [client 51.83.238.207:46642] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "adV4myVuHyNWzZlE8PD7gAAAAAQ"]
[Wed Apr 08 05:35:47.438748 2026] [:error] [pid 16630:tid 16642] [client 51.83.238.207:46648] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adV4syjfVAkPG-jgJEqWaAAAAQo"]
[Wed Apr 08 05:35:48.600131 2026] [:error] [pid 47625:tid 47647] [client 51.83.238.207:37822] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "adV4tCVuHyNWzZlE8PD7rAAAAA0"]
[Wed Apr 08 05:35:49.893392 2026] [:error] [pid 47732:tid 47753] [client 51.83.238.207:54574] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adV4tYm4N5QW9Mh7G105igAAANM"]
[Wed Apr 08 05:35:51.693526 2026] [:error] [pid 47732:tid 47754] [client 51.83.238.207:54586] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "adV4t4m4N5QW9Mh7G105mAAAANQ"]
[Wed Apr 08 05:35:52.531989 2026] [:error] [pid 16630:tid 16649] [client 51.83.238.207:54600] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adV4uCjfVAkPG-jgJEqWhgAAARE"]
[Wed Apr 08 05:35:54.615634 2026] [:error] [pid 47627:tid 47713] [client 51.83.238.207:54614] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "adV4unOljf1Quv_kDjmXDAAAAI4"]
[Wed Apr 08 05:35:55.056009 2026] [:error] [pid 47627:tid 47722] [client 51.83.238.207:54616] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "adV4u3Oljf1Quv_kDjmXDgAAAJc"]
[Wed Apr 08 05:35:57.841642 2026] [:error] [pid 47627:tid 47721] [client 51.83.238.207:54644] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adV4vXOljf1Quv_kDjmXFgAAAJY"]
[Wed Apr 08 05:35:57.851761 2026] [:error] [pid 16630:tid 16655] [client 51.83.238.207:54628] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "adV4vSjfVAkPG-jgJEqWmgAAARc"]
[Wed Apr 08 05:36:00.479124 2026] [:error] [pid 47732:tid 47752] [client 51.83.238.207:43252] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "adV4wIm4N5QW9Mh7G1050QAAANI"]
[Wed Apr 08 05:36:00.931246 2026] [:error] [pid 47732:tid 47746] [client 51.83.238.207:43262] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "adV4wIm4N5QW9Mh7G1051QAAAMw"]
[Wed Apr 08 05:36:03.107078 2026] [:error] [pid 47627:tid 47703] [client 51.83.238.207:43268] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "adV4w3Oljf1Quv_kDjmXJQAAAIQ"]
[Wed Apr 08 05:36:05.726055 2026] [:error] [pid 16630:tid 16649] [client 51.83.238.207:43294] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adV4xSjfVAkPG-jgJEqW7QAAARE"]
[Wed Apr 08 05:36:05.997631 2026] [:error] [pid 16630:tid 16646] [client 51.83.238.207:43284] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adV4xSjfVAkPG-jgJEqW8QAAAQ4"]
[Wed Apr 08 05:36:08.467550 2026] [:error] [pid 47627:tid 47711] [client 51.83.238.207:39712] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "adV4yHOljf1Quv_kDjmXNwAAAIw"]
[Wed Apr 08 05:36:09.355511 2026] [:error] [pid 16630:tid 16644] [client 51.83.238.207:39724] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adV4ySjfVAkPG-jgJEqXBAAAAQw"]
[Wed Apr 08 05:36:10.937983 2026] [:error] [pid 47627:tid 47701] [client 51.83.238.207:39740] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "adV4ynOljf1Quv_kDjmXUgAAAII"]
[Wed Apr 08 05:36:13.462703 2026] [:error] [pid 47732:tid 47735] [client 51.83.238.207:39760] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "adV4zYm4N5QW9Mh7G106RQAAAME"]
[Wed Apr 08 05:36:14.299344 2026] [:error] [pid 47626:tid 47688] [client 51.83.238.207:39744] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adV4zqjWI8TWtHx2sdb_sQAAAFQ"]
[Wed Apr 08 05:36:15.974741 2026] [:error] [pid 47732:tid 47745] [client 51.83.238.207:39768] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adV4z4m4N5QW9Mh7G106UAAAAMs"]
[Wed Apr 08 05:36:18.512122 2026] [:error] [pid 47626:tid 47688] [client 51.83.238.207:47926] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "adV40qjWI8TWtHx2sdb_zQAAAFQ"]
[Wed Apr 08 05:36:19.462419 2026] [:error] [pid 47625:tid 47640] [client 51.83.238.207:47942] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adV40yVuHyNWzZlE8PD7yAAAAAY"]
[Wed Apr 08 05:36:21.872796 2026] [:error] [pid 16630:tid 16634] [client 51.83.238.207:47958] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adV41SjfVAkPG-jgJEqXKwAAAQI"]
[Wed Apr 08 05:36:22.981505 2026] [:error] [pid 16630:tid 16644] [client 51.83.238.207:47972] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adV41ijfVAkPG-jgJEqXMAAAAQw"]
[Wed Apr 08 05:36:24.875126 2026] [:error] [pid 47732:tid 47734] [client 51.83.238.207:47978] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adV42Im4N5QW9Mh7G106dwAAAMA"]
[Wed Apr 08 05:36:26.541909 2026] [:error] [pid 47732:tid 47743] [client 51.83.238.207:47980] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adV42om4N5QW9Mh7G106ewAAAMk"]
[Wed Apr 08 05:36:27.369157 2026] [:error] [pid 47627:tid 47703] [client 51.83.238.207:47992] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adV423Oljf1Quv_kDjmXdQAAAIQ"]
[Wed Apr 08 05:36:29.734758 2026] [:error] [pid 47732:tid 47743] [client 51.83.238.207:58078] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adV43Ym4N5QW9Mh7G106iQAAAMk"]
[Wed Apr 08 05:36:31.431782 2026] [:error] [pid 16630:tid 16642] [client 51.83.238.207:58084] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adV43yjfVAkPG-jgJEqXcwAAAQo"]
[Wed Apr 08 05:36:32.285270 2026] [:error] [pid 47732:tid 47750] [client 51.83.238.207:58100] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adV44Im4N5QW9Mh7G106kgAAANA"]
[Wed Apr 08 05:37:33.477706 2026] [:error] [pid 16630:tid 16632] [client 51.83.238.207:57198] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adV5HSjfVAkPG-jgJEqYxQAAAQA"]
[Wed Apr 08 05:37:36.593869 2026] [:error] [pid 47732:tid 47734] [client 51.83.238.207:44022] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "adV5IIm4N5QW9Mh7G107MwAAAMA"]
[Wed Apr 08 05:37:39.134800 2026] [:error] [pid 47626:tid 47672] [client 51.83.238.207:39354] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "adV5I6jWI8TWtHx2sdYAbAAAAEQ"]
[Wed Apr 08 05:37:43.079466 2026] [:error] [pid 47626:tid 47681] [client 51.83.238.207:39358] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "adV5J6jWI8TWtHx2sdYAhAAAAE0"]
[Wed Apr 08 05:37:46.004827 2026] [:error] [pid 16630:tid 16644] [client 51.83.238.207:39370] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "adV5KijfVAkPG-jgJEqY9QAAAQw"]
[Wed Apr 08 05:37:48.881107 2026] [:error] [pid 16630:tid 16646] [client 51.83.238.207:36320] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adV5LCjfVAkPG-jgJEqZBAAAAQ4"]
[Wed Apr 08 05:37:51.266802 2026] [:error] [pid 16630:tid 16648] [client 51.83.238.207:36328] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adV5LyjfVAkPG-jgJEqZCwAAARA"]
[Wed Apr 08 05:37:53.920180 2026] [:error] [pid 47625:tid 47648] [client 51.83.238.207:36338] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adV5MSVuHyNWzZlE8PD8HwAAAA4"]
[Wed Apr 08 05:37:56.820152 2026] [:error] [pid 47732:tid 47738] [client 51.83.238.207:36344] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adV5NIm4N5QW9Mh7G107ZwAAAMQ"]
[Wed Apr 08 05:38:00.415462 2026] [:error] [pid 16630:tid 16643] [client 51.83.238.207:49036] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adV5OCjfVAkPG-jgJEqZKQAAAQs"]
[Wed Apr 08 05:38:02.995463 2026] [:error] [pid 47732:tid 47750] [client 51.83.238.207:49048] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adV5Oom4N5QW9Mh7G107ewAAANA"]
[Wed Apr 08 05:38:06.490481 2026] [:error] [pid 16630:tid 16639] [client 51.83.238.207:49052] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "adV5PijfVAkPG-jgJEqZPgAAAQc"]
[Wed Apr 08 05:38:09.251340 2026] [:error] [pid 47732:tid 47748] [client 51.83.238.207:41636] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adV5QYm4N5QW9Mh7G107lgAAAM4"]
[Wed Apr 08 05:38:12.308869 2026] [:error] [pid 16630:tid 16643] [client 51.83.238.207:41644] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "adV5RCjfVAkPG-jgJEqZWQAAAQs"]
[Wed Apr 08 05:38:15.114899 2026] [:error] [pid 47625:tid 47647] [client 51.83.238.207:41658] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "adV5RyVuHyNWzZlE8PD8NgAAAA0"]
[Wed Apr 08 05:38:18.818148 2026] [:error] [pid 16630:tid 16633] [client 51.83.238.207:37852] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adV5SijfVAkPG-jgJEqZbQAAAQE"]
[Wed Apr 08 05:38:22.246624 2026] [:error] [pid 16630:tid 16644] [client 51.83.238.207:37858] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "adV5TijfVAkPG-jgJEqZeAAAAQw"]
[Wed Apr 08 05:38:26.096569 2026] [:error] [pid 47732:tid 47746] [client 51.83.238.207:37872] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "adV5Uom4N5QW9Mh7G107uAAAAMw"]
[Wed Apr 08 05:38:28.960047 2026] [:error] [pid 47625:tid 47636] [client 51.83.238.207:56274] [client 51.83.238.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "adV5VCVuHyNWzZlE8PD8UQAAAAI"]
[Wed Apr 08 05:39:44.602134 2026] [:error] [pid 16630:tid 16654] [client 191.10.56.184:59948] [client 191.10.56.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.10.56.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adV5oCjfVAkPG-jgJEqcJwAAARY"]
[Wed Apr 08 06:46:35.859297 2026] [:error] [pid 47625:tid 47645] [client 43.166.136.153:41348] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adWJSyVuHyNWzZlE8PAPmgAAAAs"]
[Wed Apr 08 07:04:30.010874 2026] [:error] [pid 16630:tid 16643] [client 114.96.103.33:33590] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adWNfijfVAkPG-jgJErmJAAAAQs"]
[Wed Apr 08 07:29:51.251865 2026] [:error] [pid 47627:tid 47718] [client 191.10.56.184:51335] [client 191.10.56.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adWTb3Oljf1Quv_kDjnJmwAAAJM"]
[Wed Apr 08 07:31:47.060876 2026] [:error] [pid 16630:tid 16649] [client 191.10.56.184:50824] [client 191.10.56.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.10.56.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adWT4yjfVAkPG-jgJEr5ZgAAARE"]
[Wed Apr 08 07:53:37.710437 2026] [:error] [pid 16630:tid 16655] [client 137.220.224.39:37861] [client 137.220.224.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adWZASjfVAkPG-jgJEoJjgAAARc"], referer: https://www.reddit.com/
[Wed Apr 08 08:30:43.059777 2026] [:error] [pid 47732:tid 47747] [client 45.86.202.209:56105] [client 45.86.202.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adWhs4m4N5QW9Mh7G12gpAAAAM0"]
[Wed Apr 08 08:30:47.984468 2026] [:error] [pid 16630:tid 16650] [client 91.217.249.221:25499] [client 91.217.249.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adWhtyjfVAkPG-jgJEomhgAAARI"]
[Wed Apr 08 08:30:57.037225 2026] [:error] [pid 47626:tid 47670] [client 91.217.249.198:46437] [client 91.217.249.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "adWhwajWI8TWtHx2sdY3XQAAAEI"]
[Wed Apr 08 08:31:02.711839 2026] [:error] [pid 16630:tid 16642] [client 45.86.202.207:57025] [client 45.86.202.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "adWhxijfVAkPG-jgJEompAAAAQo"]
[Wed Apr 08 08:31:11.959244 2026] [:error] [pid 47732:tid 47758] [client 91.217.249.187:26709] [client 91.217.249.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adWhz4m4N5QW9Mh7G12g5AAAANg"]
[Wed Apr 08 08:31:14.279353 2026] [:error] [pid 47627:tid 47716] [client 45.86.202.227:27107] [client 45.86.202.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adWh0nOljf1Quv_kDjnhAwAAAJE"]
[Wed Apr 08 08:31:15.355124 2026] [:error] [pid 47626:tid 47691] [client 91.217.249.226:52417] [client 91.217.249.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adWh06jWI8TWtHx2sdY3bQAAAFc"]
[Wed Apr 08 08:31:16.096628 2026] [:error] [pid 47627:tid 47701] [client 91.217.249.183:45147] [client 91.217.249.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adWh1HOljf1Quv_kDjnhCwAAAII"]
[Wed Apr 08 08:31:17.279145 2026] [:error] [pid 47625:tid 47638] [client 91.217.249.206:30469] [client 91.217.249.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adWh1SVuHyNWzZlE8PAozAAAAAQ"]
[Wed Apr 08 08:31:18.096067 2026] [:error] [pid 47627:tid 47719] [client 91.217.249.204:63857] [client 91.217.249.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adWh1nOljf1Quv_kDjnhDwAAAJQ"]
[Wed Apr 08 08:31:20.491658 2026] [:error] [pid 47625:tid 47643] [client 91.217.249.186:46489] [client 91.217.249.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adWh2CVuHyNWzZlE8PAo4AAAAAk"]
[Wed Apr 08 08:31:23.456463 2026] [:error] [pid 16630:tid 16639] [client 91.217.249.207:34225] [client 91.217.249.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "adWh2yjfVAkPG-jgJEom0AAAAQc"]
[Wed Apr 08 08:31:27.248526 2026] [:error] [pid 47732:tid 47744] [client 91.217.249.202:28033] [client 91.217.249.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adWh34m4N5QW9Mh7G12hHAAAAMo"]
[Wed Apr 08 08:31:29.672947 2026] [:error] [pid 47627:tid 47705] [client 91.217.249.221:20307] [client 91.217.249.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adWh4XOljf1Quv_kDjnhJgAAAIY"]
[Wed Apr 08 08:31:32.494172 2026] [:error] [pid 16630:tid 16636] [client 45.86.202.207:20813] [client 45.86.202.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adWh5CjfVAkPG-jgJEom6AAAAQQ"]
[Wed Apr 08 08:31:41.423179 2026] [:error] [pid 47625:tid 47647] [client 91.217.249.188:64887] [client 91.217.249.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adWh7SVuHyNWzZlE8PAo9AAAAA0"]
[Wed Apr 08 08:31:44.204594 2026] [:error] [pid 47627:tid 47719] [client 91.217.249.200:25715] [client 91.217.249.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adWh8HOljf1Quv_kDjnhPAAAAJQ"]
[Wed Apr 08 08:31:47.970113 2026] [:error] [pid 47732:tid 47755] [client 91.217.249.220:32913] [client 91.217.249.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "adWh84m4N5QW9Mh7G12hUgAAANU"]
[Wed Apr 08 08:31:50.689568 2026] [:error] [pid 47626:tid 47681] [client 91.217.249.202:49723] [client 91.217.249.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "adWh9qjWI8TWtHx2sdY3mQAAAE0"]
[Wed Apr 08 08:31:56.745899 2026] [:error] [pid 47732:tid 47752] [client 91.217.249.205:34815] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adWh_Im4N5QW9Mh7G12hWQAAANI"]
[Wed Apr 08 08:31:59.177946 2026] [:error] [pid 16630:tid 16651] [client 45.86.202.227:29141] [client 45.86.202.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adWh_yjfVAkPG-jgJEonIgAAARM"]
[Wed Apr 08 08:32:01.806063 2026] [:error] [pid 16630:tid 16642] [client 91.217.249.202:64263] [client 91.217.249.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "adWiASjfVAkPG-jgJEonKgAAAQo"]
[Wed Apr 08 08:32:03.158065 2026] [:error] [pid 47626:tid 47669] [client 91.217.249.207:54925] [client 91.217.249.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adWiA6jWI8TWtHx2sdY3pAAAAEE"]
[Wed Apr 08 08:32:04.357999 2026] [:error] [pid 47627:tid 47722] [client 91.217.249.183:37577] [client 91.217.249.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "adWiBHOljf1Quv_kDjnhXAAAAJc"]
[Wed Apr 08 08:32:09.277308 2026] [:error] [pid 47627:tid 47723] [client 91.217.249.205:45631] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "adWiCXOljf1Quv_kDjnhZgAAAJg"]
[Wed Apr 08 08:32:10.227941 2026] [:error] [pid 47626:tid 47683] [client 91.217.249.221:21291] [client 91.217.249.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "adWiCqjWI8TWtHx2sdY3tgAAAE8"]
[Wed Apr 08 08:32:11.340982 2026] [:error] [pid 16630:tid 16651] [client 91.217.249.203:59491] [client 91.217.249.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "adWiCyjfVAkPG-jgJEonQgAAARM"]
[Wed Apr 08 08:32:22.296446 2026] [:error] [pid 47732:tid 47754] [client 91.217.249.200:36013] [client 91.217.249.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "adWiFom4N5QW9Mh7G12hwgAAANQ"]
[Wed Apr 08 08:32:27.028268 2026] [:error] [pid 47732:tid 47741] [client 91.217.249.215:60925] [client 91.217.249.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.215, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adWiG4m4N5QW9Mh7G12hywAAAMc"]
[Wed Apr 08 08:32:42.382662 2026] [:error] [pid 47732:tid 47746] [client 91.217.249.215:60925] [client 91.217.249.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adWiKom4N5QW9Mh7G12iFAAAAMw"]
[Wed Apr 08 08:32:45.786657 2026] [:error] [pid 16630:tid 16635] [client 91.217.249.209:46551] [client 91.217.249.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.209, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adWiLSjfVAkPG-jgJEon7QAAAQM"]
[Wed Apr 08 08:32:48.374500 2026] [:error] [pid 16630:tid 16649] [client 91.217.249.209:46551] [client 91.217.249.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "adWiMCjfVAkPG-jgJEon-AAAARE"]
[Wed Apr 08 08:32:59.250708 2026] [:error] [pid 47732:tid 47747] [client 91.217.249.190:58215] [client 91.217.249.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adWiO4m4N5QW9Mh7G12iSQAAAM0"]
[Wed Apr 08 08:33:11.934274 2026] [:error] [pid 16630:tid 16648] [client 91.217.249.200:42083] [client 91.217.249.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adWiRyjfVAkPG-jgJEooPAAAARA"]
[Wed Apr 08 08:33:16.578512 2026] [:error] [pid 47732:tid 47758] [client 91.217.249.199:42815] [client 91.217.249.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adWiTIm4N5QW9Mh7G12ilAAAANg"]
[Wed Apr 08 08:33:21.436225 2026] [:error] [pid 47626:tid 47681] [client 91.217.249.197:53959] [client 91.217.249.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.197, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "adWiUajWI8TWtHx2sdY4FAAAAE0"]
[Wed Apr 08 08:33:22.679807 2026] [:error] [pid 47626:tid 47686] [client 91.217.249.197:53959] [client 91.217.249.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adWiUqjWI8TWtHx2sdY4FgAAAFI"]
[Wed Apr 08 08:33:44.814664 2026] [:error] [pid 16630:tid 16640] [client 91.217.249.185:37467] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adWiaCjfVAkPG-jgJEootwAAAQg"]
[Wed Apr 08 08:33:50.099684 2026] [:error] [pid 16630:tid 16643] [client 91.217.249.227:48449] [client 91.217.249.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.227, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adWibijfVAkPG-jgJEooygAAAQs"]
[Wed Apr 08 08:33:55.383673 2026] [:error] [pid 16630:tid 16649] [client 91.217.249.227:48449] [client 91.217.249.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "adWicyjfVAkPG-jgJEoo2gAAARE"]
[Wed Apr 08 08:33:58.116094 2026] [:error] [pid 47627:tid 47701] [client 91.217.249.189:29835] [client 91.217.249.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "adWidnOljf1Quv_kDjnh_wAAAII"]
[Wed Apr 08 08:34:02.414475 2026] [:error] [pid 16630:tid 16633] [client 91.217.249.211:55043] [client 91.217.249.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "adWieijfVAkPG-jgJEoo7QAAAQE"]
[Wed Apr 08 08:34:07.864901 2026] [:error] [pid 47732:tid 47752] [client 91.217.249.189:26773] [client 91.217.249.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "adWif4m4N5QW9Mh7G12jBQAAANI"]
[Wed Apr 08 08:34:08.923264 2026] [:error] [pid 47625:tid 47648] [client 91.217.249.194:22991] [client 91.217.249.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "adWigCVuHyNWzZlE8PApfwAAAA4"]
[Wed Apr 08 08:34:16.224665 2026] [:error] [pid 47627:tid 47711] [client 45.86.202.226:64703] [client 45.86.202.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adWiiHOljf1Quv_kDjniLwAAAIw"]
[Wed Apr 08 08:34:19.219007 2026] [:error] [pid 16630:tid 16642] [client 91.217.249.205:45221] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "adWiiyjfVAkPG-jgJEopEAAAAQo"]
[Wed Apr 08 08:34:24.526688 2026] [:error] [pid 16630:tid 16640] [client 91.217.249.187:20921] [client 91.217.249.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "adWikCjfVAkPG-jgJEopJwAAAQg"]
[Wed Apr 08 08:34:29.617031 2026] [:error] [pid 47627:tid 47710] [client 91.217.249.227:63477] [client 91.217.249.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adWilXOljf1Quv_kDjniRQAAAIs"]
[Wed Apr 08 08:34:34.657825 2026] [:error] [pid 47627:tid 47723] [client 91.217.249.208:29269] [client 91.217.249.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "adWimnOljf1Quv_kDjniTwAAAJg"]
[Wed Apr 08 08:34:40.159550 2026] [:error] [pid 16630:tid 16632] [client 91.217.249.194:32213] [client 91.217.249.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adWioCjfVAkPG-jgJEopTwAAAQA"]
[Wed Apr 08 08:34:50.958678 2026] [:error] [pid 47625:tid 47652] [client 91.217.249.224:21307] [client 91.217.249.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adWiqiVuHyNWzZlE8PApqAAAABI"]
[Wed Apr 08 08:34:52.079848 2026] [:error] [pid 16630:tid 16642] [client 91.217.249.189:62553] [client 91.217.249.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "adWirCjfVAkPG-jgJEopbgAAAQo"]
[Wed Apr 08 08:34:53.569111 2026] [:error] [pid 47627:tid 47722] [client 91.217.249.211:51963] [client 91.217.249.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adWirXOljf1Quv_kDjniVAAAAJc"]
[Wed Apr 08 08:34:54.939565 2026] [:error] [pid 47627:tid 47720] [client 45.86.202.208:59375] [client 45.86.202.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adWirnOljf1Quv_kDjniWgAAAJU"]
[Wed Apr 08 08:34:57.976391 2026] [:error] [pid 16630:tid 16649] [client 91.217.249.190:29775] [client 91.217.249.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adWisSjfVAkPG-jgJEopgwAAARE"]
[Wed Apr 08 08:34:59.070328 2026] [:error] [pid 47625:tid 47658] [client 91.217.249.225:21817] [client 91.217.249.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "adWisyVuHyNWzZlE8PAprwAAABg"]
[Wed Apr 08 08:35:03.031740 2026] [:error] [pid 47627:tid 47708] [client 91.217.249.202:33579] [client 91.217.249.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "adWit3Oljf1Quv_kDjniaQAAAIk"]
[Wed Apr 08 08:35:06.381011 2026] [:error] [pid 47626:tid 47668] [client 91.217.249.223:41011] [client 91.217.249.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "adWiuqjWI8TWtHx2sdY4bAAAAEA"]
[Wed Apr 08 08:35:08.755282 2026] [:error] [pid 47626:tid 47683] [client 91.217.249.221:62125] [client 91.217.249.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adWivKjWI8TWtHx2sdY4eQAAAE8"]
[Wed Apr 08 08:35:09.807053 2026] [:error] [pid 47626:tid 47685] [client 91.217.249.219:59841] [client 91.217.249.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "adWivajWI8TWtHx2sdY4gQAAAFE"]
[Wed Apr 08 08:35:12.518811 2026] [:error] [pid 47626:tid 47692] [client 91.217.249.221:35621] [client 91.217.249.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adWiwKjWI8TWtHx2sdY4jgAAAFg"]
[Wed Apr 08 08:35:16.545793 2026] [:error] [pid 16630:tid 16653] [client 91.217.249.194:60841] [client 91.217.249.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "adWixCjfVAkPG-jgJEopnAAAARU"]
[Wed Apr 08 08:35:23.238890 2026] [:error] [pid 16630:tid 16639] [client 91.217.249.184:44575] [client 91.217.249.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adWiyyjfVAkPG-jgJEopuAAAAQc"]
[Wed Apr 08 08:35:34.924120 2026] [:error] [pid 16630:tid 16641] [client 91.217.249.187:40143] [client 91.217.249.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "adWi1ijfVAkPG-jgJEop2gAAAQk"]
[Wed Apr 08 08:35:39.474820 2026] [:error] [pid 16630:tid 16652] [client 45.86.202.226:57729] [client 45.86.202.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adWi2yjfVAkPG-jgJEop5QAAARQ"]
[Wed Apr 08 08:35:40.548618 2026] [:error] [pid 47732:tid 47738] [client 91.217.249.187:45357] [client 91.217.249.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adWi3Im4N5QW9Mh7G12jcgAAAMQ"]
[Wed Apr 08 08:35:46.937775 2026] [:error] [pid 47732:tid 47735] [client 91.217.249.186:27021] [client 91.217.249.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adWi4om4N5QW9Mh7G12jkgAAAME"]
[Wed Apr 08 08:35:51.996428 2026] [proxy_fcgi:error] [pid 16630:tid 16635] [client 91.217.249.188:46809] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:35:52.276695 2026] [proxy_fcgi:error] [pid 16630:tid 16643] [client 91.217.249.188:46809] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:35:52.557684 2026] [proxy_fcgi:error] [pid 16630:tid 16638] [client 91.217.249.188:46809] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:35:56.860485 2026] [:error] [pid 16630:tid 16644] [client 91.217.249.188:46809] [client 91.217.249.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "adWi7CjfVAkPG-jgJEoqGQAAAQw"]
[Wed Apr 08 08:35:57.800399 2026] [:error] [pid 16630:tid 16652] [client 91.217.249.197:26981] [client 91.217.249.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adWi7SjfVAkPG-jgJEoqHgAAARQ"]
[Wed Apr 08 08:35:58.866091 2026] [:error] [pid 47625:tid 47655] [client 91.217.249.190:41173] [client 91.217.249.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adWi7iVuHyNWzZlE8PAqHQAAABU"]
[Wed Apr 08 08:35:59.819319 2026] [:error] [pid 47627:tid 47710] [client 91.217.249.188:27745] [client 91.217.249.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adWi73Oljf1Quv_kDjninwAAAIs"]
[Wed Apr 08 08:36:00.450970 2026] [:error] [pid 47627:tid 47705] [client 91.217.249.201:27969] [client 91.217.249.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adWi8HOljf1Quv_kDjnioQAAAIY"]
[Wed Apr 08 08:36:01.132985 2026] [:error] [pid 47732:tid 47735] [client 91.217.249.211:36015] [client 91.217.249.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adWi8Ym4N5QW9Mh7G12jpgAAAME"]
[Wed Apr 08 08:36:03.352296 2026] [:error] [pid 47732:tid 47736] [client 45.86.202.207:58923] [client 45.86.202.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "adWi84m4N5QW9Mh7G12jsQAAAMI"]
[Wed Apr 08 08:36:04.384458 2026] [:error] [pid 47627:tid 47722] [client 91.217.249.219:64587] [client 91.217.249.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adWi9HOljf1Quv_kDjnipgAAAJc"]
[Wed Apr 08 08:36:05.503291 2026] [:error] [pid 47625:tid 47646] [client 91.217.249.212:23431] [client 91.217.249.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adWi9SVuHyNWzZlE8PAqJwAAAAw"]
[Wed Apr 08 08:36:06.978597 2026] [:error] [pid 47627:tid 47714] [client 45.86.202.226:35069] [client 45.86.202.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adWi9nOljf1Quv_kDjnisAAAAI8"]
[Wed Apr 08 08:36:10.742002 2026] [:error] [pid 16630:tid 16640] [client 91.217.249.215:29463] [client 91.217.249.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adWi-ijfVAkPG-jgJEoqOwAAAQg"]
[Wed Apr 08 08:36:13.195088 2026] [:error] [pid 16630:tid 16637] [client 91.217.249.194:32625] [client 91.217.249.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "adWi_SjfVAkPG-jgJEoqQwAAAQU"]
[Wed Apr 08 08:36:16.999875 2026] [:error] [pid 16630:tid 16632] [client 91.217.249.219:38843] [client 91.217.249.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adWjACjfVAkPG-jgJEoqUwAAAQA"]
[Wed Apr 08 08:36:20.962066 2026] [:error] [pid 47626:tid 47668] [client 91.217.249.192:21217] [client 91.217.249.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "adWjBKjWI8TWtHx2sdY40QAAAEA"]
[Wed Apr 08 08:36:26.177543 2026] [:error] [pid 47626:tid 47678] [client 91.217.249.224:59279] [client 91.217.249.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adWjCqjWI8TWtHx2sdY43AAAAEo"]
[Wed Apr 08 08:36:32.897828 2026] [:error] [pid 16630:tid 16640] [client 91.217.249.226:60479] [client 91.217.249.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "adWjECjfVAkPG-jgJEoqvAAAAQg"]
[Wed Apr 08 08:36:35.563621 2026] [:error] [pid 47732:tid 47758] [client 91.217.249.185:51989] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "adWjE4m4N5QW9Mh7G12kFQAAANg"]
[Wed Apr 08 08:36:56.069681 2026] [:error] [pid 47732:tid 47754] [client 91.217.249.187:48435] [client 91.217.249.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adWjKIm4N5QW9Mh7G12kTwAAANQ"]
[Wed Apr 08 08:36:58.359743 2026] [:error] [pid 16630:tid 16641] [client 91.217.249.207:36525] [client 91.217.249.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adWjKijfVAkPG-jgJEorCQAAAQk"]
[Wed Apr 08 08:37:01.148095 2026] [:error] [pid 47625:tid 47645] [client 91.217.249.226:20323] [client 91.217.249.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adWjLSVuHyNWzZlE8PAqZQAAAAs"]
[Wed Apr 08 08:37:04.921621 2026] [:error] [pid 47626:tid 47681] [client 91.217.249.201:50465] [client 91.217.249.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adWjMKjWI8TWtHx2sdY5HwAAAE0"]
[Wed Apr 08 08:37:06.042140 2026] [:error] [pid 16630:tid 16644] [client 91.217.249.209:50347] [client 91.217.249.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adWjMijfVAkPG-jgJEorJQAAAQw"]
[Wed Apr 08 08:37:12.552979 2026] [:error] [pid 47627:tid 47715] [client 91.217.249.202:40231] [client 91.217.249.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adWjOHOljf1Quv_kDjnjUAAAAJA"]
[Wed Apr 08 08:37:13.775292 2026] [:error] [pid 16630:tid 16645] [client 91.217.249.198:55201] [client 91.217.249.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "adWjOSjfVAkPG-jgJEorUQAAAQ0"]
[Wed Apr 08 08:37:21.271852 2026] [:error] [pid 16630:tid 16632] [client 91.217.249.205:46071] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adWjQSjfVAkPG-jgJEorfwAAAQA"]
[Wed Apr 08 08:37:23.809479 2026] [proxy_fcgi:error] [pid 47625:tid 47646] [client 45.86.202.206:38675] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:37:25.309809 2026] [:error] [pid 47625:tid 47652] [client 45.86.202.206:38675] [client 45.86.202.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "adWjRSVuHyNWzZlE8PAqhAAAABI"]
[Wed Apr 08 08:37:26.379931 2026] [:error] [pid 47626:tid 47681] [client 91.217.249.224:56293] [client 91.217.249.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "adWjRqjWI8TWtHx2sdY5OQAAAE0"]
[Wed Apr 08 08:37:30.311875 2026] [:error] [pid 47625:tid 47642] [client 91.217.249.185:31829] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "adWjSiVuHyNWzZlE8PAqkAAAAAg"]
[Wed Apr 08 08:37:31.163825 2026] [:error] [pid 47732:tid 47734] [client 45.86.202.208:61091] [client 45.86.202.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adWjS4m4N5QW9Mh7G12kkwAAAMA"]
[Wed Apr 08 08:37:41.135141 2026] [:error] [pid 47732:tid 47738] [client 91.217.249.209:32003] [client 91.217.249.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "adWjVYm4N5QW9Mh7G12kxAAAAMQ"]
[Wed Apr 08 08:37:42.103290 2026] [:error] [pid 47732:tid 47739] [client 91.217.249.208:20945] [client 91.217.249.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adWjVom4N5QW9Mh7G12kywAAAMU"]
[Wed Apr 08 08:37:48.448779 2026] [:error] [pid 16630:tid 16634] [client 91.217.249.226:28521] [client 91.217.249.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "adWjXCjfVAkPG-jgJEor_wAAAQI"]
[Wed Apr 08 08:37:49.589303 2026] [:error] [pid 47627:tid 47700] [client 91.217.249.217:61167] [client 91.217.249.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adWjXXOljf1Quv_kDjnjqgAAAIE"]
[Wed Apr 08 08:37:50.753595 2026] [:error] [pid 47625:tid 47658] [client 91.217.249.186:30725] [client 91.217.249.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adWjXiVuHyNWzZlE8PAqwAAAABg"]
[Wed Apr 08 08:37:58.682306 2026] [:error] [pid 16630:tid 16652] [client 91.217.249.191:43277] [client 91.217.249.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adWjZijfVAkPG-jgJEosIwAAARQ"]
[Wed Apr 08 08:38:01.466768 2026] [:error] [pid 47627:tid 47710] [client 91.217.249.192:46765] [client 91.217.249.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adWjaXOljf1Quv_kDjnjyQAAAIs"]
[Wed Apr 08 08:38:11.263886 2026] [:error] [pid 16630:tid 16636] [client 91.217.249.225:20731] [client 91.217.249.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.225, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "adWjcyjfVAkPG-jgJEosPAAAAQQ"]
[Wed Apr 08 08:38:18.598148 2026] [:error] [pid 16630:tid 16636] [client 91.217.249.225:20731] [client 91.217.249.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.225, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adWjeijfVAkPG-jgJEosWQAAAQQ"]
[Wed Apr 08 08:38:32.637588 2026] [proxy_fcgi:error] [pid 16630:tid 16652] [client 91.217.249.225:20731] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:38:50.163401 2026] [:error] [pid 16630:tid 16635] [client 91.217.249.225:20731] [client 91.217.249.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "adWjmijfVAkPG-jgJEos_AAAAQM"]
[Wed Apr 08 08:38:56.329471 2026] [:error] [pid 47625:tid 47639] [client 91.217.249.182:39965] [client 91.217.249.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adWjoCVuHyNWzZlE8PArJgAAAAU"]
[Wed Apr 08 08:39:00.525647 2026] [:error] [pid 47732:tid 47740] [client 91.217.249.217:24165] [client 91.217.249.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adWjpIm4N5QW9Mh7G12loQAAAMY"]
[Wed Apr 08 08:39:13.306640 2026] [:error] [pid 47732:tid 47739] [client 91.217.249.203:37451] [client 91.217.249.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adWjsYm4N5QW9Mh7G12l2gAAAMU"]
[Wed Apr 08 08:39:17.105085 2026] [:error] [pid 47627:tid 47707] [client 45.86.202.206:63283] [client 45.86.202.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adWjtXOljf1Quv_kDjnkbwAAAIg"]
[Wed Apr 08 08:39:19.780714 2026] [:error] [pid 47627:tid 47723] [client 91.217.249.195:21593] [client 91.217.249.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adWjt3Oljf1Quv_kDjnkdQAAAJg"]
[Wed Apr 08 08:39:25.997657 2026] [proxy_fcgi:error] [pid 16630:tid 16650] [client 91.217.249.189:21903] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:39:26.506005 2026] [proxy_fcgi:error] [pid 16630:tid 16637] [client 91.217.249.189:21903] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:39:26.783261 2026] [:error] [pid 16630:tid 16645] [client 91.217.249.189:21903] [client 91.217.249.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adWjvijfVAkPG-jgJEotSQAAAQ0"]
[Wed Apr 08 08:39:28.023007 2026] [:error] [pid 16630:tid 16654] [client 91.217.249.225:42539] [client 91.217.249.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adWjwCjfVAkPG-jgJEotTAAAARY"]
[Wed Apr 08 08:39:39.403181 2026] [:error] [pid 16630:tid 16632] [client 91.217.249.199:29349] [client 91.217.249.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adWjyyjfVAkPG-jgJEotiQAAAQA"]
[Wed Apr 08 08:39:43.192270 2026] [:error] [pid 47732:tid 47758] [client 91.217.249.201:25139] [client 91.217.249.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "adWjz4m4N5QW9Mh7G12mJQAAANg"]
[Wed Apr 08 08:39:49.486650 2026] [:error] [pid 16630:tid 16636] [client 91.217.249.224:41099] [client 91.217.249.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adWj1SjfVAkPG-jgJEottwAAAQQ"]
[Wed Apr 08 08:40:00.577912 2026] [:error] [pid 47627:tid 47716] [client 91.217.249.183:24971] [client 91.217.249.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adWj4HOljf1Quv_kDjnkyQAAAJE"]
[Wed Apr 08 08:40:03.668823 2026] [proxy_fcgi:error] [pid 16630:tid 16649] [client 91.217.249.209:38941] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:40:06.805092 2026] [:error] [pid 16630:tid 16634] [client 91.217.249.209:38941] [client 91.217.249.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adWj5ijfVAkPG-jgJEot3wAAAQI"]
[Wed Apr 08 08:40:15.234486 2026] [proxy_fcgi:error] [pid 47627:tid 47713] [client 91.217.249.226:29191] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:40:16.876982 2026] [:error] [pid 47627:tid 47709] [client 91.217.249.226:29191] [client 91.217.249.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.226, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adWj8HOljf1Quv_kDjnk8QAAAIo"]
[Wed Apr 08 08:40:23.236699 2026] [:error] [pid 47627:tid 47720] [client 91.217.249.226:29191] [client 91.217.249.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adWj93Oljf1Quv_kDjnk_wAAAJU"]
[Wed Apr 08 08:40:26.146514 2026] [:error] [pid 47626:tid 47680] [client 91.217.249.220:40871] [client 91.217.249.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adWj-qjWI8TWtHx2sdY6NgAAAEw"]
[Wed Apr 08 08:40:32.860566 2026] [:error] [pid 47626:tid 47676] [client 45.86.202.209:50513] [client 45.86.202.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adWkAKjWI8TWtHx2sdY6RwAAAEg"]
[Wed Apr 08 08:40:37.603770 2026] [:error] [pid 47732:tid 47742] [client 91.217.249.207:53601] [client 91.217.249.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adWkBYm4N5QW9Mh7G12mkgAAAMg"]
[Wed Apr 08 08:40:38.703610 2026] [:error] [pid 16630:tid 16652] [client 45.86.202.208:58955] [client 45.86.202.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adWkBijfVAkPG-jgJEouNgAAARQ"]
[Wed Apr 08 08:40:43.843882 2026] [:error] [pid 16630:tid 16656] [client 91.217.249.224:33067] [client 91.217.249.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adWkCyjfVAkPG-jgJEouWAAAARg"]
[Wed Apr 08 08:40:47.703336 2026] [proxy_fcgi:error] [pid 47627:tid 47715] [client 91.217.249.219:48445] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:40:49.233035 2026] [:error] [pid 47627:tid 47708] [client 91.217.249.219:48445] [client 91.217.249.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adWkEXOljf1Quv_kDjnlLQAAAIk"]
[Wed Apr 08 08:40:50.268960 2026] [proxy_fcgi:error] [pid 16630:tid 16640] [client 91.217.249.203:55459] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Wed Apr 08 08:40:51.313163 2026] [:error] [pid 47626:tid 47685] [client 91.217.249.202:28479] [client 91.217.249.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "adWkE6jWI8TWtHx2sdY6kQAAAFE"]
[Wed Apr 08 08:40:52.569636 2026] [:error] [pid 47627:tid 47704] [client 91.217.249.205:47727] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adWkFHOljf1Quv_kDjnlMQAAAIU"]
[Wed Apr 08 08:40:53.813932 2026] [:error] [pid 47625:tid 47635] [client 91.217.249.205:64775] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adWkFSVuHyNWzZlE8PArtgAAAAE"]
[Wed Apr 08 08:40:54.913267 2026] [:error] [pid 47627:tid 47700] [client 91.217.249.205:28783] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adWkFnOljf1Quv_kDjnlQAAAAIE"]
[Wed Apr 08 08:40:56.340398 2026] [:error] [pid 16630:tid 16647] [client 45.86.202.208:25041] [client 45.86.202.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adWkGCjfVAkPG-jgJEougQAAAQ8"]
[Wed Apr 08 08:40:57.537114 2026] [:error] [pid 47626:tid 47669] [client 91.217.249.209:46991] [client 91.217.249.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adWkGajWI8TWtHx2sdY6mQAAAEE"]
[Wed Apr 08 08:41:01.772133 2026] [:error] [pid 16630:tid 16633] [client 91.217.249.203:30665] [client 91.217.249.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adWkHSjfVAkPG-jgJEoukQAAAQE"]
[Wed Apr 08 08:41:03.359705 2026] [:error] [pid 47732:tid 47748] [client 91.217.249.213:54289] [client 91.217.249.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adWkH4m4N5QW9Mh7G12m9wAAAM4"]
[Wed Apr 08 08:41:05.964959 2026] [:error] [pid 47627:tid 47723] [client 91.217.249.196:20303] [client 91.217.249.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adWkIXOljf1Quv_kDjnlVgAAAJg"]
[Wed Apr 08 08:41:07.110683 2026] [:error] [pid 47732:tid 47735] [client 91.217.249.205:65367] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adWkI4m4N5QW9Mh7G12nCAAAAME"]
[Wed Apr 08 08:41:08.471625 2026] [:error] [pid 16630:tid 16638] [client 91.217.249.188:44695] [client 91.217.249.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "adWkJCjfVAkPG-jgJEoupQAAAQY"]
[Wed Apr 08 08:41:10.574599 2026] [proxy_fcgi:error] [pid 47732:tid 47741] [client 91.217.249.218:55369] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:41:14.049313 2026] [:error] [pid 47732:tid 47740] [client 91.217.249.218:55369] [client 91.217.249.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.218, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adWkKom4N5QW9Mh7G12nJAAAAMY"]
[Wed Apr 08 08:41:21.371496 2026] [:error] [pid 47732:tid 47753] [client 91.217.249.218:55369] [client 91.217.249.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adWkMYm4N5QW9Mh7G12nSQAAANM"]
[Wed Apr 08 08:41:44.832565 2026] [:error] [pid 47625:tid 47650] [client 91.217.249.185:52523] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adWkSCVuHyNWzZlE8PAr_AAAABA"]
[Wed Apr 08 08:41:46.138819 2026] [:error] [pid 47627:tid 47709] [client 91.217.249.202:34531] [client 91.217.249.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adWkSnOljf1Quv_kDjnloQAAAIo"]
[Wed Apr 08 08:41:47.502806 2026] [:error] [pid 16630:tid 16645] [client 91.217.249.184:65195] [client 91.217.249.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adWkSyjfVAkPG-jgJEovZgAAAQ0"]
[Wed Apr 08 08:41:56.644829 2026] [:error] [pid 47732:tid 47758] [client 91.217.249.182:27647] [client 91.217.249.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adWkVIm4N5QW9Mh7G12nogAAANg"]
[Wed Apr 08 08:41:57.613492 2026] [:error] [pid 47625:tid 47656] [client 91.217.249.221:31131] [client 91.217.249.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adWkVSVuHyNWzZlE8PAsDgAAABY"]
[Wed Apr 08 08:41:58.733503 2026] [:error] [pid 16630:tid 16652] [client 91.217.249.182:28059] [client 91.217.249.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adWkVijfVAkPG-jgJEovhAAAARQ"]
[Wed Apr 08 08:42:05.961438 2026] [:error] [pid 47627:tid 47723] [client 91.217.249.209:41321] [client 91.217.249.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adWkXXOljf1Quv_kDjnlygAAAJg"]
[Wed Apr 08 08:42:10.691975 2026] [:error] [pid 16630:tid 16634] [client 91.217.249.204:56965] [client 91.217.249.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adWkYijfVAkPG-jgJEovwgAAAQI"]
[Wed Apr 08 08:42:15.149259 2026] [:error] [pid 47732:tid 47745] [client 91.217.249.207:27071] [client 91.217.249.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adWkZ4m4N5QW9Mh7G12nswAAAMs"]
[Wed Apr 08 08:42:32.448866 2026] [:error] [pid 47626:tid 47688] [client 91.217.249.205:59133] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "adWkeKjWI8TWtHx2sdY7QwAAAFQ"]
[Wed Apr 08 08:42:36.210180 2026] [:error] [pid 47625:tid 47634] [client 91.217.249.208:35453] [client 91.217.249.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "adWkfCVuHyNWzZlE8PAsRgAAAAA"]
[Wed Apr 08 08:42:45.318416 2026] [:error] [pid 47627:tid 47721] [client 91.217.249.196:41685] [client 91.217.249.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "adWkhXOljf1Quv_kDjnmMQAAAJY"]
[Wed Apr 08 08:42:49.467995 2026] [:error] [pid 47626:tid 47691] [client 91.217.249.219:41777] [client 91.217.249.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adWkiajWI8TWtHx2sdY7WgAAAFc"]
[Wed Apr 08 08:42:56.015128 2026] [:error] [pid 16630:tid 16636] [client 91.217.249.214:36725] [client 91.217.249.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adWkkCjfVAkPG-jgJEowrQAAAQQ"]
[Wed Apr 08 08:43:02.307626 2026] [:error] [pid 16630:tid 16653] [client 91.217.249.203:48609] [client 91.217.249.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adWklijfVAkPG-jgJEowzQAAARU"]
[Wed Apr 08 08:43:06.861070 2026] [:error] [pid 47627:tid 47706] [client 91.217.249.204:42093] [client 91.217.249.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adWkmnOljf1Quv_kDjnmbQAAAIc"]
[Wed Apr 08 08:43:08.003759 2026] [:error] [pid 47732:tid 47749] [client 91.217.249.214:26029] [client 91.217.249.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adWknIm4N5QW9Mh7G12oJgAAAM8"]
[Wed Apr 08 08:43:15.420253 2026] [:error] [pid 47732:tid 47756] [client 45.86.202.209:36505] [client 45.86.202.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adWko4m4N5QW9Mh7G12oaAAAANY"]
[Wed Apr 08 08:43:23.107593 2026] [:error] [pid 47626:tid 47684] [client 91.217.249.198:28819] [client 91.217.249.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adWkq6jWI8TWtHx2sdY7nAAAAFA"]
[Wed Apr 08 08:43:29.488152 2026] [:error] [pid 47732:tid 47748] [client 91.217.249.206:34855] [client 91.217.249.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adWksYm4N5QW9Mh7G12onwAAAM4"]
[Wed Apr 08 08:43:30.758363 2026] [:error] [pid 47627:tid 47722] [client 91.217.249.214:57283] [client 91.217.249.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adWksnOljf1Quv_kDjnmlQAAAJc"]
[Wed Apr 08 08:43:32.954247 2026] [:error] [pid 47732:tid 47738] [client 91.217.249.190:34875] [client 91.217.249.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adWktIm4N5QW9Mh7G12opAAAAMQ"]
[Wed Apr 08 08:43:36.635611 2026] [:error] [pid 47627:tid 47701] [client 91.217.249.185:63087] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "adWkuHOljf1Quv_kDjnmpAAAAII"]
[Wed Apr 08 08:43:37.681616 2026] [:error] [pid 47732:tid 47751] [client 91.217.249.208:45193] [client 91.217.249.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adWkuYm4N5QW9Mh7G12osgAAANE"]
[Wed Apr 08 08:43:46.340167 2026] [:error] [pid 47625:tid 47639] [client 45.86.202.209:31739] [client 45.86.202.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "adWkwiVuHyNWzZlE8PAspAAAAAU"]
[Wed Apr 08 08:43:50.122774 2026] [:error] [pid 16630:tid 16634] [client 91.217.249.200:54653] [client 91.217.249.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "adWkxijfVAkPG-jgJEoxkwAAAQI"]
[Wed Apr 08 08:43:51.323619 2026] [:error] [pid 47732:tid 47756] [client 91.217.249.203:31173] [client 91.217.249.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "adWkx4m4N5QW9Mh7G12o8AAAANY"]
[Wed Apr 08 08:43:55.219055 2026] [:error] [pid 47732:tid 47758] [client 91.217.249.206:62591] [client 91.217.249.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adWky4m4N5QW9Mh7G12o_wAAANg"]
[Wed Apr 08 08:43:58.046739 2026] [:error] [pid 47732:tid 47749] [client 91.217.249.198:27289] [client 91.217.249.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adWkzom4N5QW9Mh7G12pEAAAAM8"]
[Wed Apr 08 08:44:05.580415 2026] [:error] [pid 47626:tid 47686] [client 91.217.249.207:45835] [client 91.217.249.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adWk1ajWI8TWtHx2sdY71AAAAFI"]
[Wed Apr 08 08:44:09.612780 2026] [:error] [pid 16630:tid 16633] [client 91.217.249.182:53719] [client 91.217.249.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adWk2SjfVAkPG-jgJEox0QAAAQE"]
[Wed Apr 08 08:44:13.519720 2026] [:error] [pid 47627:tid 47709] [client 91.217.249.211:34199] [client 91.217.249.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adWk3XOljf1Quv_kDjnm9wAAAIo"]
[Wed Apr 08 08:44:16.192334 2026] [:error] [pid 16630:tid 16649] [client 91.217.249.224:47991] [client 91.217.249.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "adWk4CjfVAkPG-jgJEox5gAAARE"]
[Wed Apr 08 08:44:18.848081 2026] [:error] [pid 16630:tid 16634] [client 91.217.249.199:26161] [client 91.217.249.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adWk4ijfVAkPG-jgJEox9AAAAQI"]
[Wed Apr 08 08:44:19.930165 2026] [:error] [pid 47625:tid 47635] [client 91.217.249.193:42675] [client 91.217.249.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "adWk4yVuHyNWzZlE8PAszQAAAAE"]
[Wed Apr 08 08:44:21.172322 2026] [:error] [pid 16630:tid 16641] [client 91.217.249.215:56883] [client 91.217.249.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "adWk5SjfVAkPG-jgJEox_AAAAQk"]
[Wed Apr 08 08:44:30.739429 2026] [:error] [pid 47625:tid 47642] [client 45.86.202.227:47485] [client 45.86.202.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adWk7iVuHyNWzZlE8PAs2QAAAAg"]
[Wed Apr 08 08:44:35.502060 2026] [:error] [pid 16630:tid 16647] [client 91.217.249.204:48969] [client 91.217.249.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "adWk8yjfVAkPG-jgJEoyNAAAAQ8"]
[Wed Apr 08 08:44:39.364135 2026] [:error] [pid 47627:tid 47718] [client 91.217.249.227:58097] [client 91.217.249.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "adWk93Oljf1Quv_kDjnnWQAAAJM"]
[Wed Apr 08 08:44:43.457357 2026] [:error] [pid 16630:tid 16643] [client 91.217.249.200:29557] [client 91.217.249.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "adWk-yjfVAkPG-jgJEoyVgAAAQs"]
[Wed Apr 08 08:44:51.155810 2026] [:error] [pid 16630:tid 16635] [client 91.217.249.202:40057] [client 91.217.249.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adWlAyjfVAkPG-jgJEoydwAAAQM"]
[Wed Apr 08 08:44:53.764897 2026] [:error] [pid 16630:tid 16634] [client 91.217.249.199:22053] [client 91.217.249.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adWlBSjfVAkPG-jgJEoyhwAAAQI"]
[Wed Apr 08 08:44:56.378117 2026] [:error] [pid 47732:tid 47755] [client 45.86.202.227:62983] [client 45.86.202.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adWlCIm4N5QW9Mh7G12pzgAAANU"]
[Wed Apr 08 08:44:59.820975 2026] [:error] [pid 47627:tid 47723] [client 45.86.202.226:64511] [client 45.86.202.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adWlC3Oljf1Quv_kDjnneAAAAJg"]
[Wed Apr 08 08:45:10.615485 2026] [:error] [pid 47732:tid 47741] [client 91.217.249.187:32967] [client 91.217.249.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adWlFom4N5QW9Mh7G12p8wAAAMc"]
[Wed Apr 08 08:45:11.694370 2026] [:error] [pid 16630:tid 16637] [client 91.217.249.195:35013] [client 91.217.249.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adWlFyjfVAkPG-jgJEoytgAAAQU"]
[Wed Apr 08 08:45:16.611804 2026] [:error] [pid 47627:tid 47706] [client 91.217.249.185:28967] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adWlHHOljf1Quv_kDjnnmAAAAIc"]
[Wed Apr 08 08:45:17.699322 2026] [:error] [pid 16630:tid 16653] [client 91.217.249.222:52931] [client 91.217.249.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adWlHSjfVAkPG-jgJEoyyQAAARU"]
[Wed Apr 08 08:45:21.547725 2026] [:error] [pid 16630:tid 16646] [client 91.217.249.192:56467] [client 91.217.249.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adWlISjfVAkPG-jgJEoy3AAAAQ4"]
[Wed Apr 08 08:45:22.639654 2026] [:error] [pid 47626:tid 47673] [client 91.217.249.183:34541] [client 91.217.249.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "adWlIqjWI8TWtHx2sdY8UQAAAEU"]
[Wed Apr 08 08:45:23.701890 2026] [:error] [pid 47732:tid 47752] [client 91.217.249.185:23715] [client 91.217.249.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adWlI4m4N5QW9Mh7G12p_QAAANI"]
[Wed Apr 08 08:45:23.707286 2026] [proxy_fcgi:error] [pid 47732:tid 47752] [client 91.217.249.185:23715] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:45:23.974192 2026] [:error] [pid 47732:tid 47757] [client 91.217.249.185:23715] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "adWlI4m4N5QW9Mh7G12p_gAAANc"]
[Wed Apr 08 08:45:27.673378 2026] [:error] [pid 47732:tid 47755] [client 91.217.249.223:52271] [client 91.217.249.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adWlJ4m4N5QW9Mh7G12qEgAAANU"]
[Wed Apr 08 08:45:28.926628 2026] [:error] [pid 47627:tid 47716] [client 91.217.249.218:63447] [client 91.217.249.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "adWlKHOljf1Quv_kDjnnoQAAAJE"]
[Wed Apr 08 08:45:39.295090 2026] [:error] [pid 47627:tid 47718] [client 91.217.249.217:53461] [client 91.217.249.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adWlM3Oljf1Quv_kDjnn0QAAAJM"]
[Wed Apr 08 08:45:41.663493 2026] [:error] [pid 47625:tid 47650] [client 91.217.249.205:38455] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "adWlNSVuHyNWzZlE8PAtNgAAABA"]
[Wed Apr 08 08:45:45.121835 2026] [:error] [pid 47732:tid 47757] [client 91.217.249.209:30391] [client 91.217.249.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adWlOYm4N5QW9Mh7G12qMQAAANc"]
[Wed Apr 08 08:45:46.283849 2026] [:error] [pid 16630:tid 16637] [client 91.217.249.202:50075] [client 91.217.249.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "adWlOijfVAkPG-jgJEozIAAAAQU"]
[Wed Apr 08 08:45:48.527564 2026] [proxy_fcgi:error] [pid 47732:tid 47740] [client 91.217.249.227:25671] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:45:48.805501 2026] [:error] [pid 47732:tid 47736] [client 91.217.249.227:25671] [client 91.217.249.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.227, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adWlPIm4N5QW9Mh7G12qOgAAAMI"]
[Wed Apr 08 08:45:51.657617 2026] [:error] [pid 47732:tid 47734] [client 91.217.249.227:25671] [client 91.217.249.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adWlP4m4N5QW9Mh7G12qRAAAAMA"]
[Wed Apr 08 08:45:55.981199 2026] [:error] [pid 47732:tid 47738] [client 91.217.249.185:64587] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adWlQ4m4N5QW9Mh7G12qXAAAAMQ"]
[Wed Apr 08 08:45:58.618123 2026] [:error] [pid 16630:tid 16633] [client 45.86.202.227:51867] [client 45.86.202.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adWlRijfVAkPG-jgJEozOAAAAQE"]
[Wed Apr 08 08:45:59.169183 2026] [:error] [pid 47626:tid 47676] [client 91.217.249.207:44197] [client 91.217.249.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adWlR6jWI8TWtHx2sdY8fwAAAEg"]
[Wed Apr 08 08:46:04.230462 2026] [:error] [pid 47732:tid 47746] [client 91.217.249.205:36431] [client 91.217.249.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adWlTIm4N5QW9Mh7G12qbAAAAMw"]
[Wed Apr 08 08:46:08.072849 2026] [:error] [pid 47625:tid 47655] [client 91.217.249.212:50509] [client 91.217.249.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "adWlUCVuHyNWzZlE8PAtbAAAABU"]
[Wed Apr 08 08:46:14.702104 2026] [:error] [pid 47732:tid 47734] [client 91.217.249.201:22397] [client 91.217.249.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adWlVom4N5QW9Mh7G12qgwAAAMA"]
[Wed Apr 08 08:46:15.824745 2026] [:error] [pid 47732:tid 47746] [client 91.217.249.200:64447] [client 91.217.249.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "adWlV4m4N5QW9Mh7G12qhgAAAMw"]
[Wed Apr 08 08:46:18.485639 2026] [:error] [pid 47732:tid 47738] [client 91.217.249.187:26249] [client 91.217.249.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "adWlWom4N5QW9Mh7G12qigAAAMQ"]
[Wed Apr 08 08:46:27.594592 2026] [:error] [pid 47732:tid 47741] [client 91.217.249.212:28989] [client 91.217.249.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adWlY4m4N5QW9Mh7G12qoAAAAMc"]
[Wed Apr 08 08:46:31.191112 2026] [:error] [pid 47626:tid 47689] [client 91.217.249.211:48177] [client 91.217.249.211] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "adWlZ6jWI8TWtHx2sdY8pQAAAFU"]
[Wed Apr 08 08:46:31.490147 2026] [:error] [pid 47626:tid 47669] [client 91.217.249.211:48177] [client 91.217.249.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adWlZ6jWI8TWtHx2sdY8pgAAAEE"]
[Wed Apr 08 08:46:36.148188 2026] [:error] [pid 47625:tid 47648] [client 91.217.249.213:32099] [client 91.217.249.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adWlbCVuHyNWzZlE8PAtkAAAAA4"]
[Wed Apr 08 08:46:36.851423 2026] [:error] [pid 16630:tid 16641] [client 91.217.249.222:29343] [client 91.217.249.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "adWlbCjfVAkPG-jgJEozpwAAAQk"]
[Wed Apr 08 08:46:45.763968 2026] [:error] [pid 47627:tid 47706] [client 45.86.202.209:49953] [client 45.86.202.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adWldXOljf1Quv_kDjnoJwAAAIc"]
[Wed Apr 08 08:46:50.055554 2026] [:error] [pid 47625:tid 47652] [client 45.86.202.209:42779] [client 45.86.202.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adWleiVuHyNWzZlE8PAtngAAABI"]
[Wed Apr 08 08:46:52.589152 2026] [:error] [pid 16630:tid 16651] [client 91.217.249.204:45527] [client 91.217.249.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adWlfCjfVAkPG-jgJEozzQAAARM"]
[Wed Apr 08 08:47:00.313845 2026] [:error] [pid 16630:tid 16649] [client 91.217.249.206:31297] [client 91.217.249.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adWlhCjfVAkPG-jgJEoz7wAAARE"]
[Wed Apr 08 08:47:01.060604 2026] [:error] [pid 47732:tid 47740] [client 45.86.202.209:54211] [client 45.86.202.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "adWlhYm4N5QW9Mh7G12q1gAAAMY"]
[Wed Apr 08 08:47:03.368088 2026] [:error] [pid 16630:tid 16640] [client 91.217.249.197:61163] [client 91.217.249.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "adWlhyjfVAkPG-jgJEo0AAAAAQg"]
[Wed Apr 08 08:47:04.543043 2026] [:error] [pid 47626:tid 47671] [client 91.217.249.197:22015] [client 91.217.249.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "adWliKjWI8TWtHx2sdY8wAAAAEM"]
[Wed Apr 08 08:47:08.451793 2026] [:error] [pid 47626:tid 47680] [client 91.217.249.218:27609] [client 91.217.249.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "adWljKjWI8TWtHx2sdY8yAAAAEw"]
[Wed Apr 08 08:47:11.809978 2026] [:error] [pid 47732:tid 47755] [client 91.217.249.208:20767] [client 91.217.249.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "adWlj4m4N5QW9Mh7G12q8wAAANU"]
[Wed Apr 08 08:47:13.524158 2026] [:error] [pid 16630:tid 16641] [client 91.217.249.200:26315] [client 91.217.249.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "adWlkSjfVAkPG-jgJEo0EQAAAQk"]
[Wed Apr 08 08:47:20.024671 2026] [:error] [pid 47627:tid 47704] [client 91.217.249.211:42649] [client 91.217.249.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "adWlmHOljf1Quv_kDjnoQAAAAIU"]
[Wed Apr 08 08:47:24.957762 2026] [:error] [pid 47732:tid 47756] [client 91.217.249.198:23035] [client 91.217.249.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "adWlnIm4N5QW9Mh7G12rCgAAANY"]
[Wed Apr 08 08:47:30.065508 2026] [:error] [pid 47732:tid 47737] [client 91.217.249.190:28955] [client 91.217.249.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "adWloom4N5QW9Mh7G12rGQAAAMM"]
[Wed Apr 08 08:47:31.070156 2026] [:error] [pid 16630:tid 16633] [client 91.217.249.226:24223] [client 91.217.249.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "adWloyjfVAkPG-jgJEo0KQAAAQE"]
[Wed Apr 08 08:47:31.627886 2026] [:error] [pid 16630:tid 16636] [client 91.217.249.207:30679] [client 91.217.249.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "adWloyjfVAkPG-jgJEo0LQAAAQQ"]
[Wed Apr 08 08:47:35.643659 2026] [:error] [pid 47625:tid 47641] [client 91.217.249.195:33957] [client 91.217.249.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "adWlpyVuHyNWzZlE8PAt2QAAAAc"]
[Wed Apr 08 08:47:39.092465 2026] [:error] [pid 16630:tid 16646] [client 91.217.249.220:29605] [client 91.217.249.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "adWlqyjfVAkPG-jgJEo0SgAAAQ4"]
[Wed Apr 08 08:47:39.683305 2026] [:error] [pid 16630:tid 16633] [client 45.86.202.227:43437] [client 45.86.202.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "adWlqyjfVAkPG-jgJEo0TgAAAQE"]
[Wed Apr 08 08:47:42.026371 2026] [:error] [pid 16630:tid 16633] [client 91.217.249.182:30213] [client 91.217.249.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "adWlrijfVAkPG-jgJEo0WgAAAQE"]
[Wed Apr 08 08:47:42.608351 2026] [:error] [pid 47732:tid 47755] [client 91.217.249.185:40633] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "adWlrom4N5QW9Mh7G12rLAAAANU"]
[Wed Apr 08 08:47:47.186349 2026] [:error] [pid 47626:tid 47692] [client 91.217.249.217:34879] [client 91.217.249.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "adWls6jWI8TWtHx2sdY86QAAAFg"]
[Wed Apr 08 08:47:48.978389 2026] [:error] [pid 16630:tid 16635] [client 91.217.249.217:59003] [client 91.217.249.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "adWltCjfVAkPG-jgJEo0egAAAQM"]
[Wed Apr 08 08:47:50.532944 2026] [:error] [pid 16630:tid 16635] [client 91.217.249.185:49663] [client 91.217.249.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "adWltijfVAkPG-jgJEo0gQAAAQM"]
[Wed Apr 08 08:47:51.790867 2026] [:error] [pid 47625:tid 47653] [client 91.217.249.222:32883] [client 91.217.249.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "adWltyVuHyNWzZlE8PAt4wAAABM"]
[Wed Apr 08 08:47:55.809364 2026] [:error] [pid 47732:tid 47746] [client 91.217.249.211:44107] [client 91.217.249.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "adWlu4m4N5QW9Mh7G12rQAAAAMw"]
[Wed Apr 08 08:47:59.827742 2026] [:error] [pid 47626:tid 47688] [client 91.217.249.214:35175] [client 91.217.249.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "adWlv6jWI8TWtHx2sdY89AAAAFQ"]
[Wed Apr 08 08:48:01.926513 2026] [:error] [pid 47732:tid 47749] [client 91.217.249.214:51589] [client 91.217.249.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "adWlwYm4N5QW9Mh7G12rTwAAAM8"]
[Wed Apr 08 08:48:03.111524 2026] [proxy_fcgi:error] [pid 47627:tid 47709] [client 91.217.249.207:55973] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Wed Apr 08 08:48:04.125793 2026] [:error] [pid 47732:tid 47757] [client 91.217.249.217:42401] [client 91.217.249.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "adWlxIm4N5QW9Mh7G12rUQAAANc"]
[Wed Apr 08 08:48:13.100835 2026] [:error] [pid 47732:tid 47743] [client 91.217.249.189:60305] [client 91.217.249.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "adWlzYm4N5QW9Mh7G12rYgAAAMk"]
[Wed Apr 08 08:48:13.983223 2026] [:error] [pid 16630:tid 16648] [client 45.86.202.207:47081] [client 45.86.202.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "adWlzSjfVAkPG-jgJEo0vwAAARA"]
[Wed Apr 08 08:48:17.431170 2026] [:error] [pid 16630:tid 16639] [client 91.217.249.196:37861] [client 91.217.249.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "adWl0SjfVAkPG-jgJEo00wAAAQc"]
[Wed Apr 08 08:48:23.452342 2026] [:error] [pid 47627:tid 47719] [client 91.217.249.209:32747] [client 91.217.249.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "adWl13Oljf1Quv_kDjnodQAAAJQ"]
[Wed Apr 08 08:48:27.003524 2026] [:error] [pid 16630:tid 16639] [client 91.217.249.215:23297] [client 91.217.249.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "adWl2yjfVAkPG-jgJEo1CwAAAQc"]
[Wed Apr 08 08:48:30.136711 2026] [:error] [pid 47732:tid 47746] [client 45.86.202.209:38197] [client 45.86.202.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "adWl3om4N5QW9Mh7G12rcAAAAMw"]
[Wed Apr 08 08:48:33.550188 2026] [:error] [pid 16630:tid 16642] [client 91.217.249.209:35099] [client 91.217.249.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "adWl4SjfVAkPG-jgJEo1IQAAAQo"]
[Wed Apr 08 08:48:36.083729 2026] [:error] [pid 47626:tid 47683] [client 91.217.249.201:59103] [client 91.217.249.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "adWl5KjWI8TWtHx2sdY9HQAAAE8"]
[Wed Apr 08 08:48:42.450718 2026] [:error] [pid 16630:tid 16652] [client 91.217.249.223:55935] [client 91.217.249.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "adWl6ijfVAkPG-jgJEo1RwAAARQ"]
[Wed Apr 08 08:48:47.673839 2026] [:error] [pid 47625:tid 47640] [client 91.217.249.209:21215] [client 91.217.249.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "adWl7yVuHyNWzZlE8PAuCAAAAAY"]
[Wed Apr 08 08:48:48.603834 2026] [proxy_fcgi:error] [pid 16630:tid 16642] [client 45.86.202.207:20671] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 08:48:48.911699 2026] [:error] [pid 16630:tid 16647] [client 45.86.202.207:20671] [client 45.86.202.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "adWl8CjfVAkPG-jgJEo1ZQAAAQ8"]
[Wed Apr 08 08:48:49.597425 2026] [:error] [pid 16630:tid 16650] [client 91.217.249.189:52841] [client 91.217.249.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "adWl8SjfVAkPG-jgJEo1aQAAARI"]
[Wed Apr 08 08:48:53.652415 2026] [:error] [pid 47626:tid 47688] [client 91.217.249.186:26139] [client 91.217.249.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "adWl9ajWI8TWtHx2sdY9LQAAAFQ"]
[Wed Apr 08 08:48:54.261133 2026] [:error] [pid 16630:tid 16635] [client 91.217.249.219:49381] [client 91.217.249.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "adWl9ijfVAkPG-jgJEo1jgAAAQM"]
[Wed Apr 08 08:49:02.898580 2026] [:error] [pid 16630:tid 16632] [client 91.217.249.201:23135] [client 91.217.249.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "adWl_ijfVAkPG-jgJEo1sAAAAQA"]
[Wed Apr 08 08:49:03.994155 2026] [:error] [pid 47732:tid 47752] [client 45.86.202.227:24033] [client 45.86.202.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "adWl_4m4N5QW9Mh7G12rngAAANI"]
[Wed Apr 08 08:49:06.814146 2026] [:error] [pid 16630:tid 16644] [client 91.217.249.201:34865] [client 91.217.249.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/log.php"] [unique_id "adWmAijfVAkPG-jgJEo1vAAAAQw"]
[Wed Apr 08 08:49:07.623177 2026] [:error] [pid 47732:tid 47734] [client 45.86.202.206:51253] [client 45.86.202.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "adWmA4m4N5QW9Mh7G12rogAAAMA"]
[Wed Apr 08 08:49:08.723768 2026] [:error] [pid 47732:tid 47735] [client 91.217.249.200:57313] [client 91.217.249.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "adWmBIm4N5QW9Mh7G12rpQAAAME"]
[Wed Apr 08 08:49:12.837652 2026] [:error] [pid 47626:tid 47671] [client 45.86.202.206:30619] [client 45.86.202.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/aw.php"] [unique_id "adWmCKjWI8TWtHx2sdY9RgAAAEM"]
[Wed Apr 08 08:49:18.985556 2026] [:error] [pid 47625:tid 47651] [client 91.217.249.194:55311] [client 91.217.249.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "adWmDiVuHyNWzZlE8PAuHQAAABE"]
[Wed Apr 08 08:49:20.903370 2026] [:error] [pid 47627:tid 47717] [client 45.86.202.206:20947] [client 45.86.202.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/install.php"] [unique_id "adWmEHOljf1Quv_kDjnozAAAAJI"]
[Wed Apr 08 08:49:25.915485 2026] [:error] [pid 16630:tid 16632] [client 91.217.249.183:35227] [client 91.217.249.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "adWmFSjfVAkPG-jgJEo16wAAAQA"]
[Wed Apr 08 08:49:26.573867 2026] [:error] [pid 47625:tid 47654] [client 91.217.249.212:60033] [client 91.217.249.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "adWmFiVuHyNWzZlE8PAuJAAAABQ"]
[Wed Apr 08 08:49:30.117135 2026] [:error] [pid 16630:tid 16632] [client 91.217.249.221:44095] [client 91.217.249.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/template-less.php"] [unique_id "adWmGijfVAkPG-jgJEo1-gAAAQA"]
[Wed Apr 08 08:49:30.766011 2026] [:error] [pid 47627:tid 47701] [client 91.217.249.217:55449] [client 91.217.249.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "adWmGnOljf1Quv_kDjno4gAAAII"]
[Wed Apr 08 08:49:40.631971 2026] [:error] [pid 47732:tid 47736] [client 91.217.249.196:24789] [client 91.217.249.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/min.php"] [unique_id "adWmJIm4N5QW9Mh7G12r9AAAAMI"]
[Wed Apr 08 08:49:41.203818 2026] [:error] [pid 47627:tid 47708] [client 91.217.249.197:56889] [client 91.217.249.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "adWmJXOljf1Quv_kDjnpDwAAAIk"]
[Wed Apr 08 08:49:44.519302 2026] [:error] [pid 47627:tid 47701] [client 91.217.249.198:23537] [client 91.217.249.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "adWmKHOljf1Quv_kDjnpGwAAAII"]
[Wed Apr 08 08:49:57.461868 2026] [autoindex:error] [pid 47626:tid 47691] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:00.407603 2026] [autoindex:error] [pid 47626:tid 47680] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:10.445253 2026] [autoindex:error] [pid 47626:tid 47688] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:12.267516 2026] [autoindex:error] [pid 47626:tid 47689] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:16.781087 2026] [autoindex:error] [pid 47626:tid 47671] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:17.115291 2026] [autoindex:error] [pid 47626:tid 47692] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:17.410937 2026] [autoindex:error] [pid 47626:tid 47691] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:17.698322 2026] [autoindex:error] [pid 47626:tid 47679] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:19.500759 2026] [autoindex:error] [pid 47626:tid 47681] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:19.804758 2026] [autoindex:error] [pid 47626:tid 47685] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:21.397922 2026] [autoindex:error] [pid 47626:tid 47682] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:21.696485 2026] [autoindex:error] [pid 47626:tid 47676] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:22.014050 2026] [autoindex:error] [pid 47626:tid 47674] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:23.981826 2026] [autoindex:error] [pid 47626:tid 47680] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:24.298927 2026] [autoindex:error] [pid 47626:tid 47678] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:24.652169 2026] [autoindex:error] [pid 47626:tid 47669] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:28.815064 2026] [autoindex:error] [pid 47626:tid 47688] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:29.129340 2026] [autoindex:error] [pid 47626:tid 47682] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:29.491202 2026] [autoindex:error] [pid 47626:tid 47676] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:30.962763 2026] [autoindex:error] [pid 47626:tid 47675] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:31.348556 2026] [autoindex:error] [pid 47626:tid 47690] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:31.653786 2026] [autoindex:error] [pid 47626:tid 47673] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:33.164500 2026] [autoindex:error] [pid 47626:tid 47680] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:33.567006 2026] [autoindex:error] [pid 47626:tid 47669] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:37.541609 2026] [autoindex:error] [pid 47626:tid 47687] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:40.457708 2026] [autoindex:error] [pid 47626:tid 47681] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:41.038750 2026] [autoindex:error] [pid 47626:tid 47689] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:45.656983 2026] [autoindex:error] [pid 47626:tid 47672] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:46.188431 2026] [autoindex:error] [pid 47626:tid 47685] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:50.386945 2026] [autoindex:error] [pid 47626:tid 47691] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:51.890965 2026] [autoindex:error] [pid 47626:tid 47683] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:54.634908 2026] [autoindex:error] [pid 47626:tid 47682] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:56.191909 2026] [autoindex:error] [pid 47626:tid 47687] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:56.511517 2026] [autoindex:error] [pid 47626:tid 47677] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:56.805526 2026] [autoindex:error] [pid 47626:tid 47674] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:50:57.108533 2026] [autoindex:error] [pid 47626:tid 47678] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:00.009162 2026] [autoindex:error] [pid 47626:tid 47669] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:03.072014 2026] [autoindex:error] [pid 47626:tid 47683] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:03.389795 2026] [autoindex:error] [pid 47626:tid 47687] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:07.801551 2026] [autoindex:error] [pid 47626:tid 47691] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:09.476382 2026] [autoindex:error] [pid 47626:tid 47683] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:12.214158 2026] [autoindex:error] [pid 47626:tid 47671] [client 45.86.202.206:64841] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:15.032908 2026] [autoindex:error] [pid 47626:tid 47672] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:15.315300 2026] [autoindex:error] [pid 47626:tid 47692] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:15.863807 2026] [autoindex:error] [pid 47626:tid 47691] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:16.180106 2026] [autoindex:error] [pid 47626:tid 47686] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:16.459501 2026] [autoindex:error] [pid 47626:tid 47683] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:16.745901 2026] [autoindex:error] [pid 47626:tid 47681] [client 45.86.202.206:64841] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:23.879674 2026] [autoindex:error] [pid 47627:tid 47713] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:24.183140 2026] [autoindex:error] [pid 47627:tid 47705] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:24.449470 2026] [autoindex:error] [pid 47627:tid 47721] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:24.860276 2026] [autoindex:error] [pid 47627:tid 47702] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:25.194023 2026] [autoindex:error] [pid 47627:tid 47711] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:27.076867 2026] [autoindex:error] [pid 47627:tid 47707] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:30.103445 2026] [autoindex:error] [pid 47627:tid 47699] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:31.773412 2026] [autoindex:error] [pid 47627:tid 47706] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:32.300117 2026] [autoindex:error] [pid 47627:tid 47703] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:32.578371 2026] [autoindex:error] [pid 47627:tid 47704] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:32.866995 2026] [autoindex:error] [pid 47627:tid 47710] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:33.193685 2026] [autoindex:error] [pid 47627:tid 47702] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:38.636839 2026] [autoindex:error] [pid 47627:tid 47720] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:38.967416 2026] [autoindex:error] [pid 47627:tid 47718] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:41.772401 2026] [autoindex:error] [pid 47627:tid 47702] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:42.278253 2026] [autoindex:error] [pid 47627:tid 47720] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:43.787209 2026] [autoindex:error] [pid 47627:tid 47714] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:50.648382 2026] [autoindex:error] [pid 47627:tid 47706] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:50.927079 2026] [autoindex:error] [pid 47627:tid 47713] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:51.250642 2026] [autoindex:error] [pid 47627:tid 47720] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:51.653922 2026] [autoindex:error] [pid 47627:tid 47715] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:51:57.313159 2026] [autoindex:error] [pid 47627:tid 47704] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:01.584593 2026] [autoindex:error] [pid 47627:tid 47721] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:01.868194 2026] [autoindex:error] [pid 47627:tid 47723] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:06.265108 2026] [autoindex:error] [pid 47627:tid 47702] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:12.979875 2026] [autoindex:error] [pid 47627:tid 47714] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:15.973112 2026] [autoindex:error] [pid 47627:tid 47703] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:16.258518 2026] [autoindex:error] [pid 47627:tid 47709] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:16.563947 2026] [autoindex:error] [pid 47627:tid 47717] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:18.081611 2026] [autoindex:error] [pid 47627:tid 47722] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:19.721866 2026] [autoindex:error] [pid 47627:tid 47705] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:35.963302 2026] [autoindex:error] [pid 47627:tid 47717] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:37.754413 2026] [autoindex:error] [pid 47627:tid 47711] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:40.621003 2026] [autoindex:error] [pid 47627:tid 47721] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:43.210213 2026] [autoindex:error] [pid 47627:tid 47723] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:45.954330 2026] [autoindex:error] [pid 47627:tid 47700] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:47.548140 2026] [autoindex:error] [pid 47627:tid 47699] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:47.846797 2026] [autoindex:error] [pid 47627:tid 47711] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:49.264702 2026] [autoindex:error] [pid 47627:tid 47721] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:49.650534 2026] [autoindex:error] [pid 47627:tid 47708] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:49.931539 2026] [autoindex:error] [pid 47627:tid 47722] [client 91.217.249.204:58223] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:55.368000 2026] [autoindex:error] [pid 16630:tid 16644] [client 91.217.249.190:46345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:52:57.974408 2026] [autoindex:error] [pid 16630:tid 16651] [client 91.217.249.190:46345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:53:06.762369 2026] [autoindex:error] [pid 16630:tid 16649] [client 91.217.249.190:46345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:53:07.037296 2026] [autoindex:error] [pid 16630:tid 16643] [client 91.217.249.190:46345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:53:08.498400 2026] [autoindex:error] [pid 16630:tid 16632] [client 91.217.249.190:46345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:53:10.083475 2026] [autoindex:error] [pid 16630:tid 16637] [client 91.217.249.190:46345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:53:13.938970 2026] [autoindex:error] [pid 16630:tid 16645] [client 91.217.249.190:46345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:53:18.925566 2026] [autoindex:error] [pid 16630:tid 16636] [client 91.217.249.190:46345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:53:25.317731 2026] [autoindex:error] [pid 16630:tid 16652] [client 91.217.249.190:46345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:53:29.770959 2026] [autoindex:error] [pid 16630:tid 16633] [client 91.217.249.190:46345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:53:30.044186 2026] [autoindex:error] [pid 16630:tid 16645] [client 91.217.249.190:46345] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 08:57:01.533816 2026] [:error] [pid 16630:tid 16632] [client 158.94.209.109:54252] [client 158.94.209.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "adWn3SjfVAkPG-jgJEo7nQAAAQA"]
[Wed Apr 08 09:25:34.434763 2026] [:error] [pid 47732:tid 47744] [client 103.168.67.159:3864] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adWujom4N5QW9Mh7G127-gAAAMo"]
[Wed Apr 08 09:25:35.141035 2026] [:error] [pid 49984:tid 50005] [client 103.168.67.159:4376] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adWuj-YY_Bz5lRHcJIE-cwAAAU8"]
[Wed Apr 08 09:25:35.889526 2026] [:error] [pid 47626:tid 47669] [client 103.168.67.159:4962] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adWuj6jWI8TWtHx2sdZKPgAAAEE"]
[Wed Apr 08 09:25:36.607367 2026] [:error] [pid 47732:tid 47744] [client 103.168.67.159:5522] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adWukIm4N5QW9Mh7G128JQAAAMo"]
[Wed Apr 08 09:25:37.306600 2026] [:error] [pid 47625:tid 47642] [client 103.168.67.159:6012] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dashboard"] [unique_id "adWukSVuHyNWzZlE8PA3AwAAAAg"]
[Wed Apr 08 09:25:38.006989 2026] [:error] [pid 47627:tid 47701] [client 103.168.67.159:6534] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dashboard"] [unique_id "adWuknOljf1Quv_kDjn04QAAAII"]
[Wed Apr 08 09:25:38.714219 2026] [:error] [pid 16630:tid 16648] [client 103.168.67.159:7022] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dashboard"] [unique_id "adWukijfVAkPG-jgJEpRMQAAARA"]
[Wed Apr 08 09:25:39.438544 2026] [:error] [pid 16630:tid 16640] [client 103.168.67.159:7502] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dashboard"] [unique_id "adWukyjfVAkPG-jgJEpRQwAAAQg"]
[Wed Apr 08 10:10:33.670448 2026] [:error] [pid 47625:tid 47647] [client 124.156.157.91:40380] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adW5GSVuHyNWzZlE8PBbPAAAAA0"]
[Wed Apr 08 11:26:18.678444 2026] [:error] [pid 47625:tid 47651] [client 142.93.116.228:45568] [client 142.93.116.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "adXK2iVuHyNWzZlE8PCeOgAAABE"]
[Wed Apr 08 11:26:21.565836 2026] [:error] [pid 47626:tid 47685] [client 142.93.116.228:49324] [client 142.93.116.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "adXK3ajWI8TWtHx2sdZiQAAAAFE"]
[Wed Apr 08 12:02:51.959850 2026] [:error] [pid 9027:tid 9050] [client 142.93.116.228:34348] [client 142.93.116.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "adXTaxHn0kvqjLJNd4p-TwAAANQ"]
[Wed Apr 08 12:02:56.244927 2026] [:error] [pid 9027:tid 9040] [client 142.93.116.228:46206] [client 142.93.116.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "adXTcBHn0kvqjLJNd4p-egAAAMo"]
[Wed Apr 08 12:57:44.578749 2026] [:error] [pid 12490:tid 12495] [client 137.220.224.39:64801] [client 137.220.224.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adXgSG1Fea4F4fbumr00JQAAAMM"]
[Wed Apr 08 13:27:49.149349 2026] [:error] [pid 12490:tid 12499] [client 119.96.24.54:47322] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adXnVW1Fea4F4fbumr1ZOwAAAMc"]
[Wed Apr 08 13:39:26.558407 2026] [:error] [pid 12453:tid 12473] [client 43.135.36.201:54042] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adXqDhjtW7S6XsLPvrQZ1wAAAJI"]
[Wed Apr 08 15:40:53.563147 2026] [:error] [pid 12490:tid 12501] [client 97.214.198.96:56949] [client 97.214.198.96] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adYGhW1Fea4F4fbumr0R_QAAAMk"]
[Wed Apr 08 15:41:49.325288 2026] [:error] [pid 12490:tid 12511] [client 97.214.198.96:52444] [client 97.214.198.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.214.198.96, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adYGvW1Fea4F4fbumr0S4gAAANM"]
[Wed Apr 08 15:43:26.817209 2026] [:error] [pid 12386:tid 12438] [client 205.185.118.173:54924] [client 205.185.118.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.118.173, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adYHHhLhhLtqHi2gK7WiWQAAARY"]
[Wed Apr 08 15:43:27.903496 2026] [:error] [pid 12386:tid 12422] [client 205.185.118.173:54924] [client 205.185.118.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.118.173, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adYHHxLhhLtqHi2gK7WiXAAAAQY"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Wed Apr 08 15:48:17.018306 2026] [:error] [pid 12385:tid 12398] [client 107.189.2.171:36723] [client 107.189.2.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.2.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adYIQSAjtvRQEkLosq1AOAAAAAk"]
[Wed Apr 08 15:48:18.238153 2026] [:error] [pid 12385:tid 12393] [client 107.189.2.171:36723] [client 107.189.2.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.2.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adYIQiAjtvRQEkLosq1APgAAAAQ"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Wed Apr 08 16:43:01.227829 2026] [:error] [pid 35642:tid 35648] [client 43.157.153.236:54740] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adYVFQ-CqryxdEs5DN_fwQAAAEQ"]
[Wed Apr 08 19:50:12.216560 2026] [:error] [pid 35642:tid 35662] [client 101.33.66.34:58226] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adZA9A-CqryxdEs5DN9QawAAAFI"]
[Wed Apr 08 21:22:38.154233 2026] [:error] [pid 12453:tid 12475] [client 20.251.187.46:3968] [client 20.251.187.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Ipv6.php"] [unique_id "adZWnhjtW7S6XsLPvrQ7fgAAAJQ"]
[Wed Apr 08 21:22:47.050511 2026] [:error] [pid 7189:tid 7197] [client 20.251.187.46:4070] [client 20.251.187.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "adZWpxaBqhBSu0L37lrfYAAAAcY"]
[Wed Apr 08 21:22:47.841203 2026] [:error] [pid 7189:tid 7192] [client 20.251.187.46:3980] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "adZWpxaBqhBSu0L37lrfZAAAAcE"]
[Wed Apr 08 21:22:48.472571 2026] [:error] [pid 7189:tid 7191] [client 20.251.187.46:4050] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "adZWqBaBqhBSu0L37lrfZgAAAcA"]
[Wed Apr 08 21:22:49.167067 2026] [:error] [pid 35642:tid 35650] [client 20.251.187.46:3973] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "adZWqQ-CqryxdEs5DN9gHwAAAEY"]
[Wed Apr 08 21:22:49.860621 2026] [:error] [pid 12385:tid 12412] [client 20.251.187.46:3987] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "adZWqSAjtvRQEkLosq2iMAAAABc"]
[Wed Apr 08 21:22:50.465501 2026] [:error] [pid 35642:tid 35661] [client 20.251.187.46:4091] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "adZWqg-CqryxdEs5DN9gIgAAAFE"]
[Wed Apr 08 21:22:51.096014 2026] [:error] [pid 12490:tid 12507] [client 20.251.187.46:4053] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "adZWq21Fea4F4fbumr0IJAAAAM8"]
[Wed Apr 08 21:22:51.733794 2026] [:error] [pid 7047:tid 7054] [client 20.251.187.46:3979] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "adZWq-Nh3oGO3pKiCzwp2QAAAYU"]
[Wed Apr 08 21:22:52.388420 2026] [:error] [pid 35642:tid 35662] [client 20.251.187.46:3996] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "adZWrA-CqryxdEs5DN9gKAAAAFI"]
[Wed Apr 08 21:22:52.952764 2026] [:error] [pid 7189:tid 7196] [client 20.251.187.46:4089] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "adZWrBaBqhBSu0L37lrfbQAAAcU"]
[Wed Apr 08 21:22:53.652141 2026] [:error] [pid 64066:tid 64087] [client 20.251.187.46:4044] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "adZWrVR3WucJgr2vZGZF-wAAAVI"]
[Wed Apr 08 21:22:54.190057 2026] [:error] [pid 64066:tid 64091] [client 20.251.187.46:3528] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "adZWrlR3WucJgr2vZGZF_AAAAVY"]
[Wed Apr 08 21:22:54.761848 2026] [:error] [pid 12453:tid 12472] [client 20.251.187.46:3972] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "adZWrhjtW7S6XsLPvrQ7jAAAAJE"]
[Wed Apr 08 21:22:55.350363 2026] [:error] [pid 12386:tid 12421] [client 20.251.187.46:4001] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adZWrxLhhLtqHi2gK7UdpgAAAQU"]
[Wed Apr 08 21:22:55.892664 2026] [:error] [pid 12453:tid 12456] [client 20.251.187.46:3975] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adZWrxjtW7S6XsLPvrQ7kQAAAIE"]
[Wed Apr 08 21:22:56.418124 2026] [:error] [pid 12453:tid 12473] [client 20.251.187.46:4060] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adZWsBjtW7S6XsLPvrQ7kgAAAJI"]
[Wed Apr 08 21:22:56.936619 2026] [:error] [pid 12453:tid 12458] [client 20.251.187.46:4082] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adZWsBjtW7S6XsLPvrQ7lAAAAIM"]
[Wed Apr 08 21:22:57.496611 2026] [:error] [pid 12490:tid 12506] [client 20.251.187.46:3522] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "adZWsW1Fea4F4fbumr0IKwAAAM4"]
[Wed Apr 08 21:22:58.041538 2026] [:error] [pid 7047:tid 7050] [client 20.251.187.46:4039] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "adZWsuNh3oGO3pKiCzwp4QAAAYE"]
[Wed Apr 08 21:22:58.584342 2026] [:error] [pid 12453:tid 12475] [client 20.251.187.46:4075] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "adZWshjtW7S6XsLPvrQ7lwAAAJQ"]
[Wed Apr 08 21:22:59.121131 2026] [:error] [pid 12453:tid 12471] [client 20.251.187.46:4054] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "adZWsxjtW7S6XsLPvrQ7mQAAAJA"]
[Wed Apr 08 21:22:59.684321 2026] [:error] [pid 12453:tid 12469] [client 20.251.187.46:4079] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "adZWsxjtW7S6XsLPvrQ7nAAAAI4"]
[Wed Apr 08 21:23:00.229551 2026] [:error] [pid 7047:tid 7056] [client 20.251.187.46:4094] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "adZWtONh3oGO3pKiCzwp6QAAAYc"]
[Wed Apr 08 21:23:00.815007 2026] [:error] [pid 7047:tid 7055] [client 20.251.187.46:4038] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "adZWtONh3oGO3pKiCzwp7QAAAYY"]
[Wed Apr 08 21:23:01.387128 2026] [:error] [pid 12386:tid 12425] [client 20.251.187.46:4083] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awh.php"] [unique_id "adZWtRLhhLtqHi2gK7UdsAAAAQk"]
[Wed Apr 08 21:23:01.907500 2026] [:error] [pid 7047:tid 7061] [client 20.251.187.46:4041] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aee.php"] [unique_id "adZWteNh3oGO3pKiCzwp8AAAAYw"]
[Wed Apr 08 21:23:02.454801 2026] [:error] [pid 12386:tid 12427] [client 20.251.187.46:4085] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aee.php"] [unique_id "adZWthLhhLtqHi2gK7UdtQAAAQs"]
[Wed Apr 08 21:23:02.994398 2026] [:error] [pid 7047:tid 7062] [client 20.251.187.46:3970] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aee.php"] [unique_id "adZWtuNh3oGO3pKiCzwqBAAAAY0"]
[Wed Apr 08 21:23:03.552763 2026] [:error] [pid 7047:tid 7057] [client 20.251.187.46:4040] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aee.php"] [unique_id "adZWt-Nh3oGO3pKiCzwqCgAAAYg"]
[Wed Apr 08 21:23:04.073043 2026] [:error] [pid 7189:tid 7198] [client 20.251.187.46:3977] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "adZWuBaBqhBSu0L37lrfdwAAAcc"]
[Wed Apr 08 21:23:04.627694 2026] [:error] [pid 7047:tid 7062] [client 20.251.187.46:4057] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "adZWuONh3oGO3pKiCzwqDQAAAY0"]
[Wed Apr 08 21:23:05.287938 2026] [:error] [pid 7189:tid 7213] [client 20.251.187.46:3997] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "adZWuRaBqhBSu0L37lrfewAAAdY"]
[Wed Apr 08 21:23:05.825472 2026] [:error] [pid 7047:tid 7068] [client 20.251.187.46:4037] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "adZWueNh3oGO3pKiCzwqFQAAAZM"]
[Wed Apr 08 21:23:06.505993 2026] [:error] [pid 12386:tid 12422] [client 20.251.187.46:3983] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ruabjw00.php"] [unique_id "adZWuhLhhLtqHi2gK7UdvAAAAQY"]
[Wed Apr 08 21:23:07.352416 2026] [:error] [pid 12453:tid 12466] [client 20.251.187.46:3981] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ruabjw00.php"] [unique_id "adZWuxjtW7S6XsLPvrQ7qgAAAIs"]
[Wed Apr 08 21:23:07.891616 2026] [:error] [pid 12385:tid 12408] [client 20.251.187.46:4046] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ruabjw00.php"] [unique_id "adZWuyAjtvRQEkLosq2iPwAAABM"]
[Wed Apr 08 21:23:08.428295 2026] [:error] [pid 12490:tid 12511] [client 20.251.187.46:4055] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ruabjw00.php"] [unique_id "adZWvG1Fea4F4fbumr0IMwAAANM"]
[Wed Apr 08 21:23:09.144120 2026] [:error] [pid 7047:tid 7068] [client 20.251.187.46:3523] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adZWveNh3oGO3pKiCzwqHAAAAZM"]
[Wed Apr 08 21:23:09.703813 2026] [:error] [pid 7189:tid 7199] [client 20.251.187.46:4090] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adZWvRaBqhBSu0L37lrfgwAAAcg"]
[Wed Apr 08 21:23:10.445537 2026] [:error] [pid 7047:tid 7062] [client 20.251.187.46:4092] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adZWvuNh3oGO3pKiCzwqHgAAAY0"]
[Wed Apr 08 21:23:10.967485 2026] [:error] [pid 64066:tid 64093] [client 20.251.187.46:4065] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adZWvlR3WucJgr2vZGZGEwAAAVg"]
[Wed Apr 08 21:23:11.546598 2026] [:error] [pid 12453:tid 12464] [client 20.251.187.46:3971] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/webx.php"] [unique_id "adZWvxjtW7S6XsLPvrQ72AAAAIk"]
[Wed Apr 08 21:23:12.225891 2026] [:error] [pid 7189:tid 7208] [client 20.251.187.46:4068] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/webx.php"] [unique_id "adZWwBaBqhBSu0L37lrfjgAAAdE"]
[Wed Apr 08 21:23:12.862294 2026] [:error] [pid 7189:tid 7205] [client 20.251.187.46:3982] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/webx.php"] [unique_id "adZWwBaBqhBSu0L37lrfkAAAAc4"]
[Wed Apr 08 21:23:13.565984 2026] [:error] [pid 7047:tid 7073] [client 20.251.187.46:4071] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/webx.php"] [unique_id "adZWweNh3oGO3pKiCzwqJgAAAZg"]
[Wed Apr 08 21:23:14.143368 2026] [:error] [pid 64066:tid 64076] [client 20.251.187.46:4076] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "adZWwlR3WucJgr2vZGZGGQAAAUc"]
[Wed Apr 08 21:23:14.754093 2026] [:error] [pid 7047:tid 7062] [client 20.251.187.46:3539] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "adZWwuNh3oGO3pKiCzwqKQAAAY0"]
[Wed Apr 08 21:23:15.326353 2026] [:error] [pid 64066:tid 64075] [client 20.251.187.46:4095] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "adZWw1R3WucJgr2vZGZGHAAAAUY"]
[Wed Apr 08 21:23:15.870617 2026] [:error] [pid 12490:tid 12499] [client 20.251.187.46:3991] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "adZWw21Fea4F4fbumr0IOAAAAMc"]
[Wed Apr 08 21:23:16.430167 2026] [:error] [pid 7189:tid 7192] [client 20.251.187.46:3992] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-22.php"] [unique_id "adZWxBaBqhBSu0L37lrflQAAAcE"]
[Wed Apr 08 21:23:16.952268 2026] [:error] [pid 7189:tid 7213] [client 20.251.187.46:4064] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-22.php"] [unique_id "adZWxBaBqhBSu0L37lrflgAAAdY"]
[Wed Apr 08 21:23:17.527621 2026] [:error] [pid 7189:tid 7204] [client 20.251.187.46:4002] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-22.php"] [unique_id "adZWxRaBqhBSu0L37lrfmQAAAc0"]
[Wed Apr 08 21:23:18.109923 2026] [:error] [pid 64066:tid 64083] [client 20.251.187.46:4061] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-22.php"] [unique_id "adZWxlR3WucJgr2vZGZGIQAAAU4"]
[Wed Apr 08 21:23:18.700154 2026] [:error] [pid 12453:tid 12469] [client 20.251.187.46:4087] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/villain.php"] [unique_id "adZWxhjtW7S6XsLPvrQ75gAAAI4"]
[Wed Apr 08 21:23:19.236609 2026] [:error] [pid 7047:tid 7053] [client 20.251.187.46:3526] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/villain.php"] [unique_id "adZWx-Nh3oGO3pKiCzwqTAAAAYQ"]
[Wed Apr 08 21:23:19.847136 2026] [:error] [pid 7047:tid 7055] [client 20.251.187.46:4073] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/villain.php"] [unique_id "adZWx-Nh3oGO3pKiCzwqUQAAAYY"]
[Wed Apr 08 21:23:20.416614 2026] [:error] [pid 12490:tid 12504] [client 20.251.187.46:3978] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/villain.php"] [unique_id "adZWyG1Fea4F4fbumr0ISAAAAMw"]
[Wed Apr 08 21:23:21.024688 2026] [:error] [pid 7047:tid 7057] [client 20.251.187.46:3995] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-db.php"] [unique_id "adZWyeNh3oGO3pKiCzwqXAAAAYg"]
[Wed Apr 08 21:23:21.566988 2026] [:error] [pid 12453:tid 12469] [client 20.251.187.46:3532] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-db.php"] [unique_id "adZWyRjtW7S6XsLPvrQ78QAAAI4"]
[Wed Apr 08 21:23:22.120165 2026] [:error] [pid 12385:tid 12412] [client 20.251.187.46:4066] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-db.php"] [unique_id "adZWyiAjtvRQEkLosq2iVAAAABc"]
[Wed Apr 08 21:23:22.658042 2026] [:error] [pid 12386:tid 12417] [client 20.251.187.46:4035] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-db.php"] [unique_id "adZWyhLhhLtqHi2gK7UdwwAAAQE"]
[Wed Apr 08 21:23:23.297388 2026] [:error] [pid 64066:tid 64083] [client 20.251.187.46:4072] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/red.php"] [unique_id "adZWy1R3WucJgr2vZGZGLAAAAU4"]
[Wed Apr 08 21:23:23.918487 2026] [:error] [pid 7047:tid 7068] [client 20.251.187.46:4077] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/red.php"] [unique_id "adZWy-Nh3oGO3pKiCzwqaAAAAZM"]
[Wed Apr 08 21:23:24.498974 2026] [:error] [pid 7047:tid 7049] [client 20.251.187.46:4036] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/red.php"] [unique_id "adZWzONh3oGO3pKiCzwqbQAAAYA"]
[Wed Apr 08 21:23:25.088390 2026] [:error] [pid 7047:tid 7064] [client 20.251.187.46:4059] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/red.php"] [unique_id "adZWzeNh3oGO3pKiCzwqcwAAAY8"]
[Wed Apr 08 21:23:25.733020 2026] [:error] [pid 7047:tid 7068] [client 20.251.187.46:4024] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "adZWzeNh3oGO3pKiCzwqeQAAAZM"]
[Wed Apr 08 21:23:26.314586 2026] [:error] [pid 7047:tid 7071] [client 20.251.187.46:4049] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "adZWzuNh3oGO3pKiCzwqfQAAAZY"]
[Wed Apr 08 21:23:26.920442 2026] [:error] [pid 7047:tid 7064] [client 20.251.187.46:3541] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "adZWzuNh3oGO3pKiCzwqgQAAAY8"]
[Wed Apr 08 21:23:27.641157 2026] [:error] [pid 7047:tid 7062] [client 20.251.187.46:3988] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "adZWz-Nh3oGO3pKiCzwqhgAAAY0"]
[Wed Apr 08 21:23:28.212861 2026] [:error] [pid 7047:tid 7068] [client 20.251.187.46:4084] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "adZW0ONh3oGO3pKiCzwqiQAAAZM"]
[Wed Apr 08 21:23:28.793032 2026] [:error] [pid 12453:tid 12469] [client 20.251.187.46:4004] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "adZW0BjtW7S6XsLPvrQ7_gAAAI4"]
[Wed Apr 08 21:23:29.514747 2026] [:error] [pid 35642:tid 35661] [client 20.251.187.46:3566] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "adZW0Q-CqryxdEs5DN9gSAAAAFE"]
[Wed Apr 08 21:23:30.352292 2026] [:error] [pid 7189:tid 7205] [client 20.251.187.46:4051] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ava.php"] [unique_id "adZW0haBqhBSu0L37lrfrgAAAc4"]
[Wed Apr 08 21:23:31.132903 2026] [:error] [pid 12453:tid 12465] [client 20.251.187.46:4093] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxijj.php"] [unique_id "adZW0xjtW7S6XsLPvrQ8BAAAAIo"]
[Wed Apr 08 21:23:31.839428 2026] [:error] [pid 12453:tid 12458] [client 20.251.187.46:3529] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxijj.php"] [unique_id "adZW0xjtW7S6XsLPvrQ8CQAAAIM"]
[Wed Apr 08 21:23:32.596658 2026] [:error] [pid 12453:tid 12464] [client 20.251.187.46:4013] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxijj.php"] [unique_id "adZW1BjtW7S6XsLPvrQ8DAAAAIk"]
[Wed Apr 08 21:23:33.278342 2026] [:error] [pid 12453:tid 12478] [client 20.251.187.46:3907] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxijj.php"] [unique_id "adZW1RjtW7S6XsLPvrQ8EAAAAJc"]
[Wed Apr 08 21:23:34.269582 2026] [:error] [pid 7047:tid 7051] [client 20.251.187.46:4005] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs7.php"] [unique_id "adZW1uNh3oGO3pKiCzwqnQAAAYI"]
[Wed Apr 08 21:23:35.289861 2026] [:error] [pid 12490:tid 12504] [client 20.251.187.46:4052] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs7.php"] [unique_id "adZW121Fea4F4fbumr0IVgAAAMw"]
[Wed Apr 08 21:23:36.026936 2026] [:error] [pid 12453:tid 12455] [client 20.251.187.46:4012] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs7.php"] [unique_id "adZW2BjtW7S6XsLPvrQ8EgAAAIA"]
[Wed Apr 08 21:23:36.885887 2026] [:error] [pid 7047:tid 7058] [client 20.251.187.46:4007] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs7.php"] [unique_id "adZW2ONh3oGO3pKiCzwqoQAAAYk"]
[Wed Apr 08 21:23:37.676729 2026] [:error] [pid 7047:tid 7064] [client 20.251.187.46:3569] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool2.php"] [unique_id "adZW2eNh3oGO3pKiCzwqowAAAY8"]
[Wed Apr 08 21:23:38.475204 2026] [:error] [pid 12386:tid 12427] [client 20.251.187.46:3534] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool2.php"] [unique_id "adZW2hLhhLtqHi2gK7UdzAAAAQs"]
[Wed Apr 08 21:23:39.137093 2026] [:error] [pid 64066:tid 64081] [client 20.251.187.46:3533] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool2.php"] [unique_id "adZW21R3WucJgr2vZGZGOAAAAUw"]
[Wed Apr 08 21:23:39.753215 2026] [:error] [pid 64066:tid 64092] [client 20.251.187.46:3545] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool2.php"] [unique_id "adZW21R3WucJgr2vZGZGOgAAAVc"]
[Wed Apr 08 21:23:40.736279 2026] [:error] [pid 64066:tid 64083] [client 20.251.187.46:4047] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zjllx.php"] [unique_id "adZW3FR3WucJgr2vZGZGPQAAAU4"]
[Wed Apr 08 21:23:41.347158 2026] [:error] [pid 7047:tid 7057] [client 20.251.187.46:3543] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zjllx.php"] [unique_id "adZW3eNh3oGO3pKiCzwqqQAAAYg"]
[Wed Apr 08 21:23:42.040005 2026] [:error] [pid 12386:tid 12425] [client 20.251.187.46:3542] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zjllx.php"] [unique_id "adZW3hLhhLtqHi2gK7Ud1QAAAQk"]
[Wed Apr 08 21:23:43.003002 2026] [:error] [pid 12453:tid 12476] [client 20.251.187.46:3917] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zjllx.php"] [unique_id "adZW3xjtW7S6XsLPvrQ8FgAAAJU"]
[Wed Apr 08 21:23:43.799110 2026] [:error] [pid 12453:tid 12456] [client 20.251.187.46:4063] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2.php"] [unique_id "adZW3xjtW7S6XsLPvrQ8GwAAAIE"]
[Wed Apr 08 21:23:58.263368 2026] [:error] [pid 64066:tid 64092] [client 20.251.187.46:4003] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "adZW7lR3WucJgr2vZGZGZgAAAVc"]
[Wed Apr 08 21:23:58.802601 2026] [:error] [pid 35642:tid 35666] [client 20.251.187.46:3911] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "adZW7g-CqryxdEs5DN9gZAAAAFY"]
[Wed Apr 08 21:23:59.475733 2026] [:error] [pid 7189:tid 7214] [client 20.251.187.46:4014] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "adZW7xaBqhBSu0L37lrf7QAAAdc"]
[Wed Apr 08 21:24:00.083252 2026] [:error] [pid 7189:tid 7204] [client 20.251.187.46:4078] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccs.php"] [unique_id "adZW8BaBqhBSu0L37lrf8wAAAc0"]
[Wed Apr 08 21:24:00.803743 2026] [:error] [pid 7189:tid 7207] [client 20.251.187.46:4021] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "adZW8BaBqhBSu0L37lrf_AAAAdA"]
[Wed Apr 08 21:24:01.693696 2026] [:error] [pid 12490:tid 12516] [client 20.251.187.46:3922] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "adZW8W1Fea4F4fbumr0IawAAANg"]
[Wed Apr 08 21:24:02.481183 2026] [:error] [pid 7047:tid 7054] [client 20.251.187.46:4027] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "adZW8uNh3oGO3pKiCzwqyQAAAYU"]
[Wed Apr 08 21:24:03.051084 2026] [:error] [pid 7189:tid 7213] [client 20.251.187.46:4008] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "adZW8xaBqhBSu0L37lrgBQAAAdY"]
[Wed Apr 08 21:24:03.742818 2026] [:error] [pid 7189:tid 7192] [client 20.251.187.46:4088] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "adZW8xaBqhBSu0L37lrgCQAAAcE"]
[Wed Apr 08 21:24:04.364376 2026] [:error] [pid 7189:tid 7194] [client 20.251.187.46:4062] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "adZW9BaBqhBSu0L37lrgDwAAAcM"]
[Wed Apr 08 21:24:04.922745 2026] [:error] [pid 12385:tid 12392] [client 20.251.187.46:4026] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "adZW9CAjtvRQEkLosq2iZAAAAAM"]
[Wed Apr 08 21:24:05.525687 2026] [:error] [pid 7047:tid 7073] [client 20.251.187.46:3984] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "adZW9eNh3oGO3pKiCzwq3gAAAZg"]
[Wed Apr 08 21:24:06.117172 2026] [:error] [pid 7189:tid 7211] [client 20.251.187.46:3540] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "adZW9haBqhBSu0L37lrgHQAAAdQ"]
[Wed Apr 08 21:24:06.914461 2026] [:error] [pid 64066:tid 64070] [client 20.251.187.46:3556] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "adZW9lR3WucJgr2vZGZGaQAAAUE"]
[Wed Apr 08 21:24:07.838340 2026] [:error] [pid 12453:tid 12479] [client 20.251.187.46:3575] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "adZW9xjtW7S6XsLPvrQ8KwAAAJg"]
[Wed Apr 08 21:24:08.619788 2026] [:error] [pid 12453:tid 12464] [client 20.251.187.46:3926] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "adZW-BjtW7S6XsLPvrQ8LwAAAIk"]
[Wed Apr 08 21:24:09.200153 2026] [:error] [pid 7047:tid 7050] [client 20.251.187.46:3998] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-turn.php"] [unique_id "adZW-eNh3oGO3pKiCzwq5gAAAYE"]
[Wed Apr 08 21:24:09.805353 2026] [:error] [pid 7047:tid 7073] [client 20.251.187.46:3986] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-turn.php"] [unique_id "adZW-eNh3oGO3pKiCzwq7AAAAZg"]
[Wed Apr 08 21:24:10.447919 2026] [:error] [pid 7047:tid 7071] [client 20.251.187.46:4081] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-turn.php"] [unique_id "adZW-uNh3oGO3pKiCzwq7wAAAZY"]
[Wed Apr 08 21:24:11.007713 2026] [:error] [pid 12386:tid 12433] [client 20.251.187.46:3576] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-turn.php"] [unique_id "adZW-xLhhLtqHi2gK7Ud4wAAARE"]
[Wed Apr 08 21:24:11.606346 2026] [:error] [pid 7047:tid 7066] [client 20.251.187.46:3531] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "adZW--Nh3oGO3pKiCzwq8gAAAZE"]
[Wed Apr 08 21:24:12.125155 2026] [:error] [pid 12453:tid 12461] [client 20.251.187.46:3524] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "adZW_BjtW7S6XsLPvrQ8MwAAAIY"]
[Wed Apr 08 21:24:12.787536 2026] [:error] [pid 7189:tid 7199] [client 20.251.187.46:4074] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "adZW_BaBqhBSu0L37lrgMwAAAcg"]
[Wed Apr 08 21:24:13.335000 2026] [:error] [pid 12490:tid 12514] [client 20.251.187.46:3969] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "adZW_W1Fea4F4fbumr0IdAAAANY"]
[Wed Apr 08 21:24:13.933525 2026] [:error] [pid 7189:tid 7192] [client 20.251.187.46:4058] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kolda.php"] [unique_id "adZW_RaBqhBSu0L37lrgOwAAAcE"]
[Wed Apr 08 21:24:14.548654 2026] [:error] [pid 7047:tid 7058] [client 20.251.187.46:3552] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kolda.php"] [unique_id "adZW_uNh3oGO3pKiCzwq-wAAAYk"]
[Wed Apr 08 21:24:15.074084 2026] [:error] [pid 7047:tid 7072] [client 20.251.187.46:3546] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kolda.php"] [unique_id "adZW_-Nh3oGO3pKiCzwq_AAAAZc"]
[Wed Apr 08 21:24:15.621168 2026] [:error] [pid 7189:tid 7196] [client 20.251.187.46:3538] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kolda.php"] [unique_id "adZW_xaBqhBSu0L37lrgRQAAAcU"]
[Wed Apr 08 21:24:16.420289 2026] [:error] [pid 7047:tid 7059] [client 20.251.187.46:3909] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yussef.php"] [unique_id "adZXAONh3oGO3pKiCzwrAwAAAYo"]
[Wed Apr 08 21:24:17.555231 2026] [:error] [pid 12453:tid 12468] [client 20.251.187.46:3553] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yussef.php"] [unique_id "adZXARjtW7S6XsLPvrQ8NwAAAI0"]
[Wed Apr 08 21:24:18.168701 2026] [:error] [pid 7189:tid 7206] [client 20.251.187.46:4009] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yussef.php"] [unique_id "adZXAhaBqhBSu0L37lrgUQAAAc8"]
[Wed Apr 08 21:24:19.071835 2026] [:error] [pid 7047:tid 7063] [client 20.251.187.46:3572] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yussef.php"] [unique_id "adZXA-Nh3oGO3pKiCzwrDwAAAY4"]
[Wed Apr 08 21:24:19.627633 2026] [:error] [pid 12386:tid 12435] [client 20.251.187.46:4031] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ay.php"] [unique_id "adZXAxLhhLtqHi2gK7Ud6QAAARM"]
[Wed Apr 08 21:24:20.570966 2026] [:error] [pid 7047:tid 7057] [client 20.251.187.46:3915] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ay.php"] [unique_id "adZXBONh3oGO3pKiCzwrFQAAAYg"]
[Wed Apr 08 21:24:21.333878 2026] [:error] [pid 35642:tid 35661] [client 20.251.187.46:3929] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ay.php"] [unique_id "adZXBQ-CqryxdEs5DN9geQAAAFE"]
[Wed Apr 08 21:24:22.088271 2026] [:error] [pid 7189:tid 7208] [client 20.251.187.46:3994] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ay.php"] [unique_id "adZXBhaBqhBSu0L37lrgWgAAAdE"]
[Wed Apr 08 21:24:22.721856 2026] [:error] [pid 12453:tid 12456] [client 20.251.187.46:3976] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "adZXBhjtW7S6XsLPvrQ8RQAAAIE"]
[Wed Apr 08 21:24:23.334964 2026] [:error] [pid 64066:tid 64092] [client 20.251.187.46:4016] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "adZXB1R3WucJgr2vZGZGbQAAAVc"]
[Wed Apr 08 21:24:23.975779 2026] [:error] [pid 7047:tid 7070] [client 20.251.187.46:4000] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "adZXB-Nh3oGO3pKiCzwrHgAAAZU"]
[Wed Apr 08 21:24:24.635664 2026] [:error] [pid 12490:tid 12506] [client 20.251.187.46:3560] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "adZXCG1Fea4F4fbumr0IfQAAAM4"]
[Wed Apr 08 21:24:25.180442 2026] [:error] [pid 12386:tid 12419] [client 20.251.187.46:3989] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "adZXCRLhhLtqHi2gK7Ud8AAAAQM"]
[Wed Apr 08 21:24:25.769446 2026] [:error] [pid 12490:tid 12510] [client 20.251.187.46:4033] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "adZXCW1Fea4F4fbumr0IgQAAANI"]
[Wed Apr 08 21:24:26.426060 2026] [:error] [pid 12386:tid 12433] [client 20.251.187.46:3848] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "adZXChLhhLtqHi2gK7Ud8QAAARE"]
[Wed Apr 08 21:24:27.506135 2026] [:error] [pid 12453:tid 12467] [client 20.251.187.46:3567] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "adZXCxjtW7S6XsLPvrQ8UAAAAIw"]
[Wed Apr 08 21:24:28.176165 2026] [:error] [pid 12386:tid 12435] [client 20.251.187.46:3537] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "adZXDBLhhLtqHi2gK7Ud-AAAARM"]
[Wed Apr 08 21:24:28.695491 2026] [:error] [pid 12386:tid 12424] [client 20.251.187.46:3544] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "adZXDBLhhLtqHi2gK7Ud-wAAAQg"]
[Wed Apr 08 21:24:29.361143 2026] [:error] [pid 7047:tid 7067] [client 20.251.187.46:3580] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "adZXDeNh3oGO3pKiCzwrIQAAAZI"]
[Wed Apr 08 21:24:30.205530 2026] [:error] [pid 7189:tid 7200] [client 20.251.187.46:4080] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x123x.php"] [unique_id "adZXDhaBqhBSu0L37lrgXAAAAck"]
[Wed Apr 08 21:24:30.905100 2026] [:error] [pid 7047:tid 7070] [client 20.251.187.46:3563] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "adZXDuNh3oGO3pKiCzwrKgAAAZU"]
[Wed Apr 08 21:24:31.637966 2026] [:error] [pid 12490:tid 12509] [client 20.251.187.46:4017] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "adZXD21Fea4F4fbumr0IjgAAANE"]
[Wed Apr 08 21:24:32.510993 2026] [:error] [pid 7189:tid 7195] [client 20.251.187.46:3919] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "adZXEBaBqhBSu0L37lrgYAAAAcQ"]
[Wed Apr 08 21:24:33.559423 2026] [:error] [pid 12386:tid 12439] [client 20.251.187.46:4010] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "adZXERLhhLtqHi2gK7UeAAAAARc"]
[Wed Apr 08 21:24:34.693631 2026] [:error] [pid 12453:tid 12459] [client 20.251.187.46:3521] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "adZXEhjtW7S6XsLPvrQ8XwAAAIQ"]
[Wed Apr 08 21:24:36.375442 2026] [:error] [pid 12385:tid 12412] [client 20.251.187.46:4015] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "adZXFCAjtvRQEkLosq2ifQAAABc"]
[Wed Apr 08 21:24:37.612713 2026] [:error] [pid 7047:tid 7054] [client 20.251.187.46:3525] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "adZXFeNh3oGO3pKiCzwrPgAAAYU"]
[Wed Apr 08 21:24:39.443322 2026] [:error] [pid 12385:tid 12393] [client 20.251.187.46:3577] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "adZXFyAjtvRQEkLosq2ifwAAAAQ"]
[Wed Apr 08 21:24:40.243243 2026] [:error] [pid 7047:tid 7065] [client 20.251.187.46:4086] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adZXGONh3oGO3pKiCzwrUAAAAZA"]
[Wed Apr 08 21:24:41.422022 2026] [:error] [pid 12453:tid 12460] [client 20.251.187.46:4011] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adZXGRjtW7S6XsLPvrQ8bgAAAIU"]
[Wed Apr 08 21:24:42.397410 2026] [:error] [pid 12490:tid 12508] [client 20.251.187.46:4032] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adZXGm1Fea4F4fbumr0ImAAAANA"]
[Wed Apr 08 21:24:43.078906 2026] [:error] [pid 12453:tid 12471] [client 20.251.187.46:3557] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adZXGxjtW7S6XsLPvrQ8dgAAAJA"]
[Wed Apr 08 21:24:44.002938 2026] [:error] [pid 12490:tid 12496] [client 20.251.187.46:3946] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "adZXHG1Fea4F4fbumr0ImwAAAMQ"]
[Wed Apr 08 21:24:44.580678 2026] [:error] [pid 7047:tid 7073] [client 20.251.187.46:4029] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "adZXHONh3oGO3pKiCzwragAAAZg"]
[Wed Apr 08 21:24:45.470566 2026] [:error] [pid 12453:tid 12460] [client 20.251.187.46:3985] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "adZXHRjtW7S6XsLPvrQ8fQAAAIU"]
[Wed Apr 08 21:24:46.664050 2026] [:error] [pid 7047:tid 7051] [client 20.251.187.46:3914] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "adZXHuNh3oGO3pKiCzwrdgAAAYI"]
[Wed Apr 08 21:24:47.585186 2026] [:error] [pid 7189:tid 7200] [client 20.251.187.46:4030] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss.php"] [unique_id "adZXHxaBqhBSu0L37lrgdgAAAck"]
[Wed Apr 08 21:24:49.017074 2026] [:error] [pid 7047:tid 7071] [client 20.251.187.46:4042] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss.php"] [unique_id "adZXIeNh3oGO3pKiCzwrgAAAAZY"]
[Wed Apr 08 21:24:50.432955 2026] [:error] [pid 7047:tid 7058] [client 20.251.187.46:3558] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss.php"] [unique_id "adZXIuNh3oGO3pKiCzwrgwAAAYk"]
[Wed Apr 08 21:24:51.540218 2026] [:error] [pid 12453:tid 12465] [client 20.251.187.46:3933] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss.php"] [unique_id "adZXIxjtW7S6XsLPvrQ8hAAAAIo"]
[Wed Apr 08 21:24:52.244433 2026] [:error] [pid 12453:tid 12455] [client 20.251.187.46:3554] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xdd.php"] [unique_id "adZXJBjtW7S6XsLPvrQ8iAAAAIA"]
[Wed Apr 08 21:24:53.091772 2026] [:error] [pid 12453:tid 12462] [client 20.251.187.46:3913] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xdd.php"] [unique_id "adZXJRjtW7S6XsLPvrQ8jwAAAIc"]
[Wed Apr 08 21:24:53.663726 2026] [:error] [pid 12453:tid 12456] [client 20.251.187.46:3960] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xdd.php"] [unique_id "adZXJRjtW7S6XsLPvrQ8lAAAAIE"]
[Wed Apr 08 21:24:54.226256 2026] [:error] [pid 7189:tid 7191] [client 20.251.187.46:4045] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xdd.php"] [unique_id "adZXJhaBqhBSu0L37lrgiQAAAcA"]
[Wed Apr 08 21:24:54.818886 2026] [:error] [pid 12453:tid 12468] [client 20.251.187.46:4020] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "adZXJhjtW7S6XsLPvrQ8nAAAAI0"]
[Wed Apr 08 21:24:55.445528 2026] [:error] [pid 7189:tid 7201] [client 20.251.187.46:4023] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "adZXJxaBqhBSu0L37lrgjgAAAco"]
[Wed Apr 08 21:24:56.020887 2026] [:error] [pid 12453:tid 12456] [client 20.251.187.46:3923] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "adZXKBjtW7S6XsLPvrQ8ogAAAIE"]
[Wed Apr 08 21:24:56.617495 2026] [:error] [pid 7189:tid 7193] [client 20.251.187.46:3959] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "adZXKBaBqhBSu0L37lrgkgAAAcI"]
[Wed Apr 08 21:25:11.205112 2026] [:error] [pid 12490:tid 12494] [client 20.251.187.46:4006] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/floya.php"] [unique_id "adZXN21Fea4F4fbumr0IxAAAAMI"]
[Wed Apr 08 21:25:11.900749 2026] [:error] [pid 12453:tid 12473] [client 20.251.187.46:3994] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/floya.php"] [unique_id "adZXNxjtW7S6XsLPvrQ8vAAAAJI"]
[Wed Apr 08 21:25:12.588540 2026] [:error] [pid 12386:tid 12417] [client 20.251.187.46:3843] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/floya.php"] [unique_id "adZXOBLhhLtqHi2gK7UeEAAAAQE"]
[Wed Apr 08 21:25:13.417847 2026] [:error] [pid 12386:tid 12439] [client 20.251.187.46:4025] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/floya.php"] [unique_id "adZXORLhhLtqHi2gK7UeEQAAARc"]
[Wed Apr 08 21:25:14.621045 2026] [:error] [pid 35642:tid 35650] [client 20.251.187.46:3912] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf.php"] [unique_id "adZXOg-CqryxdEs5DN9gswAAAEY"]
[Wed Apr 08 21:25:15.446268 2026] [:error] [pid 7047:tid 7056] [client 20.251.187.46:3931] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf.php"] [unique_id "adZXO-Nh3oGO3pKiCzwrqQAAAYc"]
[Wed Apr 08 21:25:16.146514 2026] [:error] [pid 7189:tid 7195] [client 20.251.187.46:3579] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf.php"] [unique_id "adZXPBaBqhBSu0L37lrgyQAAAcQ"]
[Wed Apr 08 21:25:16.907499 2026] [:error] [pid 12490:tid 12509] [client 20.251.187.46:3856] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf.php"] [unique_id "adZXPG1Fea4F4fbumr0IygAAANE"]
[Wed Apr 08 21:25:17.582614 2026] [:error] [pid 7189:tid 7204] [client 20.251.187.46:4043] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/only.php"] [unique_id "adZXPRaBqhBSu0L37lrgzQAAAc0"]
[Wed Apr 08 21:25:18.797028 2026] [:error] [pid 12453:tid 12468] [client 20.251.187.46:3928] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/only.php"] [unique_id "adZXPhjtW7S6XsLPvrQ8yAAAAI0"]
[Wed Apr 08 21:25:19.482069 2026] [:error] [pid 7047:tid 7054] [client 20.251.187.46:3582] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/only.php"] [unique_id "adZXP-Nh3oGO3pKiCzwrvAAAAYU"]
[Wed Apr 08 21:25:20.507288 2026] [:error] [pid 12386:tid 12433] [client 20.251.187.46:3949] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/only.php"] [unique_id "adZXQBLhhLtqHi2gK7UeGwAAARE"]
[Wed Apr 08 21:25:21.403144 2026] [:error] [pid 12453:tid 12456] [client 20.251.187.46:3904] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vdb.php"] [unique_id "adZXQRjtW7S6XsLPvrQ80QAAAIE"]
[Wed Apr 08 21:25:22.477610 2026] [:error] [pid 12453:tid 12459] [client 20.251.187.46:3527] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vdb.php"] [unique_id "adZXQhjtW7S6XsLPvrQ80wAAAIQ"]
[Wed Apr 08 21:25:23.652193 2026] [:error] [pid 64066:tid 64080] [client 20.251.187.46:4067] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vdb.php"] [unique_id "adZXQ1R3WucJgr2vZGZGyAAAAUs"]
[Wed Apr 08 21:25:24.412822 2026] [:error] [pid 7047:tid 7071] [client 20.251.187.46:3845] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vdb.php"] [unique_id "adZXRONh3oGO3pKiCzwr0wAAAZY"]
[Wed Apr 08 21:25:25.291885 2026] [:error] [pid 7047:tid 7073] [client 20.251.187.46:3990] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/om.php"] [unique_id "adZXReNh3oGO3pKiCzwr1gAAAZg"]
[Wed Apr 08 21:25:26.121597 2026] [:error] [pid 7189:tid 7208] [client 20.251.187.46:3920] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/om.php"] [unique_id "adZXRhaBqhBSu0L37lrg1wAAAdE"]
[Wed Apr 08 21:25:26.891611 2026] [:error] [pid 64066:tid 64073] [client 20.251.187.46:3547] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/om.php"] [unique_id "adZXRlR3WucJgr2vZGZGzwAAAUQ"]
[Wed Apr 08 21:25:27.612971 2026] [:error] [pid 12453:tid 12456] [client 20.251.187.46:3520] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/om.php"] [unique_id "adZXRxjtW7S6XsLPvrQ83wAAAIE"]
[Wed Apr 08 21:25:28.521921 2026] [:error] [pid 64066:tid 64089] [client 20.251.187.46:3573] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ox.php"] [unique_id "adZXSFR3WucJgr2vZGZG1AAAAVQ"]
[Wed Apr 08 21:25:29.225024 2026] [:error] [pid 12453:tid 12475] [client 20.251.187.46:3999] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ox.php"] [unique_id "adZXSRjtW7S6XsLPvrQ84wAAAJQ"]
[Wed Apr 08 21:25:30.476313 2026] [:error] [pid 12386:tid 12431] [client 20.251.187.46:4018] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ox.php"] [unique_id "adZXShLhhLtqHi2gK7UeJQAAAQ8"]
[Wed Apr 08 21:25:31.084439 2026] [:error] [pid 7047:tid 7056] [client 20.251.187.46:3793] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ox.php"] [unique_id "adZXS-Nh3oGO3pKiCzwr4AAAAYc"]
[Wed Apr 08 21:25:31.610850 2026] [:error] [pid 64066:tid 64076] [client 20.251.187.46:3530] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htto.php"] [unique_id "adZXS1R3WucJgr2vZGZG2gAAAUc"]
[Wed Apr 08 21:25:32.238665 2026] [:error] [pid 64066:tid 64085] [client 20.251.187.46:3937] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htto.php"] [unique_id "adZXTFR3WucJgr2vZGZG3AAAAVA"]
[Wed Apr 08 21:25:33.201771 2026] [:error] [pid 7047:tid 7064] [client 20.251.187.46:3559] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htto.php"] [unique_id "adZXTeNh3oGO3pKiCzwr5wAAAY8"]
[Wed Apr 08 21:25:34.138108 2026] [:error] [pid 7047:tid 7052] [client 20.251.187.46:3568] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htto.php"] [unique_id "adZXTuNh3oGO3pKiCzwr7wAAAYM"]
[Wed Apr 08 21:25:34.969652 2026] [:error] [pid 7189:tid 7204] [client 20.251.187.46:3570] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2h.php"] [unique_id "adZXThaBqhBSu0L37lrg8AAAAc0"]
[Wed Apr 08 21:25:35.828411 2026] [:error] [pid 12453:tid 12465] [client 20.251.187.46:4069] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2h.php"] [unique_id "adZXTxjtW7S6XsLPvrQ89wAAAIo"]
[Wed Apr 08 21:25:36.592111 2026] [:error] [pid 7047:tid 7055] [client 20.251.187.46:3551] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2h.php"] [unique_id "adZXUONh3oGO3pKiCzwr_gAAAYY"]
[Wed Apr 08 21:25:37.309865 2026] [:error] [pid 12453:tid 12474] [client 20.251.187.46:3561] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2h.php"] [unique_id "adZXURjtW7S6XsLPvrQ8_QAAAJM"]
[Wed Apr 08 21:25:38.163990 2026] [:error] [pid 7047:tid 7067] [client 20.251.187.46:3872] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "adZXUuNh3oGO3pKiCzwsBQAAAZI"]
[Wed Apr 08 21:25:39.054240 2026] [:error] [pid 12453:tid 12467] [client 20.251.187.46:3871] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "adZXUxjtW7S6XsLPvrQ9AAAAAIw"]
[Wed Apr 08 21:25:39.693039 2026] [:error] [pid 12453:tid 12478] [client 20.251.187.46:4056] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "adZXUxjtW7S6XsLPvrQ9AwAAAJc"]
[Wed Apr 08 21:25:40.264429 2026] [:error] [pid 12453:tid 12473] [client 20.251.187.46:3842] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "adZXVBjtW7S6XsLPvrQ9BAAAAJI"]
[Wed Apr 08 21:25:40.918113 2026] [:error] [pid 7047:tid 7056] [client 20.251.187.46:3930] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "adZXVONh3oGO3pKiCzwsEAAAAYc"]
[Wed Apr 08 21:25:41.476567 2026] [:error] [pid 35642:tid 35644] [client 20.251.187.46:3974] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "adZXVQ-CqryxdEs5DN9gwQAAAEA"]
[Wed Apr 08 21:25:42.166442 2026] [:error] [pid 7189:tid 7191] [client 20.251.187.46:3952] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "adZXVhaBqhBSu0L37lrg9AAAAcA"]
[Wed Apr 08 21:25:42.834568 2026] [:error] [pid 7189:tid 7197] [client 20.251.187.46:4022] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "adZXVhaBqhBSu0L37lrg-gAAAcY"]
[Wed Apr 08 21:25:43.771201 2026] [:error] [pid 12490:tid 12506] [client 20.251.187.46:3910] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "adZXV21Fea4F4fbumr0I7AAAAM4"]
[Wed Apr 08 21:25:44.705702 2026] [:error] [pid 12490:tid 12510] [client 20.251.187.46:3918] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "adZXWG1Fea4F4fbumr0I7wAAANI"]
[Wed Apr 08 21:25:45.358845 2026] [:error] [pid 12453:tid 12462] [client 20.251.187.46:3961] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "adZXWRjtW7S6XsLPvrQ9EgAAAIc"]
[Wed Apr 08 21:25:46.797150 2026] [:error] [pid 7047:tid 7053] [client 20.251.187.46:3927] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "adZXWuNh3oGO3pKiCzwsHgAAAYQ"]
[Wed Apr 08 21:25:47.364709 2026] [:error] [pid 7047:tid 7066] [client 20.251.187.46:4028] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/store.php"] [unique_id "adZXW-Nh3oGO3pKiCzwsIQAAAZE"]
[Wed Apr 08 21:25:48.300123 2026] [:error] [pid 7047:tid 7067] [client 20.251.187.46:3903] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/store.php"] [unique_id "adZXXONh3oGO3pKiCzwsJwAAAZI"]
[Wed Apr 08 21:25:49.148967 2026] [:error] [pid 64066:tid 64073] [client 20.251.187.46:3948] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/store.php"] [unique_id "adZXXVR3WucJgr2vZGZG9gAAAUQ"]
[Wed Apr 08 21:25:50.418371 2026] [:error] [pid 12453:tid 12465] [client 20.251.187.46:3583] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/store.php"] [unique_id "adZXXhjtW7S6XsLPvrQ9KQAAAIo"]
[Wed Apr 08 21:25:51.308575 2026] [:error] [pid 7047:tid 7051] [client 20.251.187.46:3550] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenium4.php"] [unique_id "adZXX-Nh3oGO3pKiCzwsNAAAAYI"]
[Wed Apr 08 21:25:52.014483 2026] [:error] [pid 12386:tid 12435] [client 20.251.187.46:3536] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenium4.php"] [unique_id "adZXYBLhhLtqHi2gK7UeLQAAARM"]
[Wed Apr 08 21:25:52.741044 2026] [:error] [pid 7189:tid 7196] [client 20.251.187.46:3925] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenium4.php"] [unique_id "adZXYBaBqhBSu0L37lrhDwAAAcU"]
[Wed Apr 08 21:25:53.492868 2026] [:error] [pid 12490:tid 12510] [client 20.251.187.46:3852] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenium4.php"] [unique_id "adZXYW1Fea4F4fbumr0I9gAAANI"]
[Wed Apr 08 21:25:54.270660 2026] [:error] [pid 12453:tid 12477] [client 20.251.187.46:3854] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "adZXYhjtW7S6XsLPvrQ9NwAAAJY"]
[Wed Apr 08 21:25:54.953264 2026] [:error] [pid 7047:tid 7060] [client 20.251.187.46:3993] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "adZXYuNh3oGO3pKiCzwsPQAAAYs"]
[Wed Apr 08 21:25:55.633948 2026] [:error] [pid 12453:tid 12456] [client 20.251.187.46:3863] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "adZXYxjtW7S6XsLPvrQ9OwAAAIE"]
[Wed Apr 08 21:25:56.323433 2026] [:error] [pid 7047:tid 7057] [client 20.251.187.46:3841] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1aa.php"] [unique_id "adZXZONh3oGO3pKiCzwsRAAAAYg"]
[Wed Apr 08 21:25:56.966838 2026] [:error] [pid 7047:tid 7064] [client 20.251.187.46:3535] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpyur.php"] [unique_id "adZXZONh3oGO3pKiCzwsSwAAAY8"]
[Wed Apr 08 21:25:57.579064 2026] [:error] [pid 7047:tid 7058] [client 20.251.187.46:3571] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpyur.php"] [unique_id "adZXZeNh3oGO3pKiCzwsTgAAAYk"]
[Wed Apr 08 21:25:58.405896 2026] [:error] [pid 7189:tid 7211] [client 20.251.187.46:3942] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpyur.php"] [unique_id "adZXZhaBqhBSu0L37lrhGwAAAdQ"]
[Wed Apr 08 21:25:59.418070 2026] [:error] [pid 12453:tid 12469] [client 20.251.187.46:3921] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpyur.php"] [unique_id "adZXZxjtW7S6XsLPvrQ9SgAAAI4"]
[Wed Apr 08 21:26:00.116879 2026] [:error] [pid 7189:tid 7214] [client 20.251.187.46:3862] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum.php"] [unique_id "adZXaBaBqhBSu0L37lrhIwAAAdc"]
[Wed Apr 08 21:26:00.687220 2026] [:error] [pid 7047:tid 7058] [client 20.251.187.46:3866] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum.php"] [unique_id "adZXaONh3oGO3pKiCzwsXAAAAYk"]
[Wed Apr 08 21:26:01.245874 2026] [:error] [pid 7047:tid 7053] [client 20.251.187.46:3565] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum.php"] [unique_id "adZXaeNh3oGO3pKiCzwsXwAAAYQ"]
[Wed Apr 08 21:26:02.242406 2026] [:error] [pid 7047:tid 7058] [client 20.251.187.46:3886] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum.php"] [unique_id "adZXauNh3oGO3pKiCzwsaAAAAYk"]
[Wed Apr 08 21:26:02.935578 2026] [:error] [pid 7047:tid 7068] [client 20.251.187.46:3574] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "adZXauNh3oGO3pKiCzwsbQAAAZM"]
[Wed Apr 08 21:26:03.655924 2026] [:error] [pid 12453:tid 12465] [client 20.251.187.46:3878] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "adZXaxjtW7S6XsLPvrQ9XQAAAIo"]
[Wed Apr 08 21:26:04.929403 2026] [:error] [pid 7047:tid 7063] [client 20.251.187.46:3784] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "adZXbONh3oGO3pKiCzwsfAAAAY4"]
[Wed Apr 08 21:26:05.888356 2026] [:error] [pid 7047:tid 7054] [client 20.251.187.46:4034] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "adZXbeNh3oGO3pKiCzwsgwAAAYU"]
[Wed Apr 08 21:26:06.916559 2026] [:error] [pid 12386:tid 12427] [client 20.251.187.46:3564] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp8.php"] [unique_id "adZXbhLhhLtqHi2gK7UeMgAAAQs"]
[Wed Apr 08 21:26:07.538852 2026] [:error] [pid 35642:tid 35649] [client 20.251.187.46:3874] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp8.php"] [unique_id "adZXbw-CqryxdEs5DN9g2wAAAEU"]
[Wed Apr 08 21:26:08.246427 2026] [:error] [pid 7047:tid 7065] [client 20.251.187.46:3956] [client 20.251.187.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp8.php"] [unique_id "adZXcONh3oGO3pKiCzwsigAAAZA"]
[Wed Apr 08 21:28:38.438670 2026] [:error] [pid 12453:tid 12462] [client 20.199.184.39:58718] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "adZYBhjtW7S6XsLPvrQ_KgAAAIc"]
[Wed Apr 08 21:28:39.042176 2026] [:error] [pid 12453:tid 12479] [client 20.199.184.39:45586] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "adZYBxjtW7S6XsLPvrQ_LgAAAJg"]
[Wed Apr 08 21:28:39.583504 2026] [:error] [pid 35642:tid 35666] [client 20.199.184.39:56543] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "adZYBw-CqryxdEs5DN9hQwAAAFY"]
[Wed Apr 08 21:28:40.125252 2026] [:error] [pid 64066:tid 64076] [client 20.199.184.39:45580] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "adZYCFR3WucJgr2vZGZHyQAAAUc"]
[Wed Apr 08 21:28:40.733081 2026] [:error] [pid 7047:tid 7051] [client 20.199.184.39:58776] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "adZYCONh3oGO3pKiCzwvOQAAAYI"]
[Wed Apr 08 21:28:41.507767 2026] [:error] [pid 7047:tid 7064] [client 20.199.184.39:58784] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "adZYCeNh3oGO3pKiCzwvQgAAAY8"]
[Wed Apr 08 21:28:42.084384 2026] [:error] [pid 7047:tid 7049] [client 20.199.184.39:56542] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "adZYCuNh3oGO3pKiCzwvSAAAAYA"]
[Wed Apr 08 21:28:42.641125 2026] [:error] [pid 7047:tid 7055] [client 20.199.184.39:60602] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "adZYCuNh3oGO3pKiCzwvTwAAAYY"]
[Wed Apr 08 21:28:43.139957 2026] [:error] [pid 7189:tid 7196] [client 20.199.184.39:58740] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oij98gy.php"] [unique_id "adZYCxaBqhBSu0L37lriTAAAAcU"]
[Wed Apr 08 21:28:43.774683 2026] [:error] [pid 12453:tid 12473] [client 20.199.184.39:60580] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oij98gy.php"] [unique_id "adZYCxjtW7S6XsLPvrQ_NwAAAJI"]
[Wed Apr 08 21:28:44.405788 2026] [:error] [pid 12385:tid 12411] [client 20.199.184.39:56471] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oij98gy.php"] [unique_id "adZYDCAjtvRQEkLosq2i7wAAABY"]
[Wed Apr 08 21:28:44.982767 2026] [:error] [pid 35642:tid 35668] [client 20.199.184.39:60648] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oij98gy.php"] [unique_id "adZYDA-CqryxdEs5DN9hRwAAAFg"]
[Wed Apr 08 21:28:45.513444 2026] [:error] [pid 64066:tid 64085] [client 20.199.184.39:44537] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lela.php"] [unique_id "adZYDVR3WucJgr2vZGZH0gAAAVA"]
[Wed Apr 08 21:28:46.053970 2026] [:error] [pid 7047:tid 7065] [client 20.199.184.39:44528] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lela.php"] [unique_id "adZYDuNh3oGO3pKiCzwvZgAAAZA"]
[Wed Apr 08 21:28:46.857505 2026] [:error] [pid 7047:tid 7058] [client 20.199.184.39:60564] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lela.php"] [unique_id "adZYDuNh3oGO3pKiCzwvagAAAYk"]
[Wed Apr 08 21:28:47.532681 2026] [:error] [pid 7047:tid 7054] [client 20.199.184.39:56513] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lela.php"] [unique_id "adZYD-Nh3oGO3pKiCzwvcQAAAYU"]
[Wed Apr 08 21:28:48.633336 2026] [:error] [pid 12453:tid 12456] [client 20.199.184.39:56479] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adZYEBjtW7S6XsLPvrQ_QgAAAIE"]
[Wed Apr 08 21:28:49.624313 2026] [:error] [pid 7047:tid 7054] [client 20.199.184.39:45591] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adZYEeNh3oGO3pKiCzwvfgAAAYU"]
[Wed Apr 08 21:28:50.553600 2026] [:error] [pid 7047:tid 7052] [client 20.199.184.39:60579] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adZYEuNh3oGO3pKiCzwvgwAAAYM"]
[Wed Apr 08 21:28:51.833772 2026] [:error] [pid 12386:tid 12419] [client 20.199.184.39:56567] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adZYExLhhLtqHi2gK7UejwAAAQM"]
[Wed Apr 08 21:28:53.280654 2026] [:error] [pid 35642:tid 35663] [client 20.199.184.39:56530] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/turkshell.php"] [unique_id "adZYFQ-CqryxdEs5DN9hSwAAAFM"]
[Wed Apr 08 21:28:54.140695 2026] [:error] [pid 7189:tid 7208] [client 20.199.184.39:60612] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/turkshell.php"] [unique_id "adZYFhaBqhBSu0L37lriWQAAAdE"]
[Wed Apr 08 21:28:54.853397 2026] [:error] [pid 7047:tid 7063] [client 20.199.184.39:58811] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/turkshell.php"] [unique_id "adZYFuNh3oGO3pKiCzwvlQAAAY4"]
[Wed Apr 08 21:28:55.733006 2026] [:error] [pid 7047:tid 7058] [client 20.199.184.39:58814] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/turkshell.php"] [unique_id "adZYF-Nh3oGO3pKiCzwvnAAAAYk"]
[Wed Apr 08 21:28:56.568695 2026] [:error] [pid 7047:tid 7072] [client 20.199.184.39:45631] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "adZYGONh3oGO3pKiCzwvogAAAZc"]
[Wed Apr 08 21:28:57.415374 2026] [:error] [pid 12453:tid 12478] [client 20.199.184.39:56455] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "adZYGRjtW7S6XsLPvrQ_SwAAAJc"]
[Wed Apr 08 21:28:58.365081 2026] [:error] [pid 7189:tid 7193] [client 20.199.184.39:58715] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "adZYGhaBqhBSu0L37lriXwAAAcI"]
[Wed Apr 08 21:28:59.418279 2026] [:error] [pid 7047:tid 7049] [client 20.199.184.39:60587] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "adZYG-Nh3oGO3pKiCzwvtwAAAYA"]
[Wed Apr 08 21:29:00.000441 2026] [:error] [pid 7047:tid 7060] [client 20.199.184.39:58787] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypltspd.php"] [unique_id "adZYG-Nh3oGO3pKiCzwvuwAAAYs"]
[Wed Apr 08 21:29:00.821730 2026] [:error] [pid 7047:tid 7072] [client 20.199.184.39:45572] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypltspd.php"] [unique_id "adZYHONh3oGO3pKiCzwvvwAAAZc"]
[Wed Apr 08 21:29:01.532763 2026] [:error] [pid 7047:tid 7061] [client 20.199.184.39:44518] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypltspd.php"] [unique_id "adZYHeNh3oGO3pKiCzwvxQAAAYw"]
[Wed Apr 08 21:29:02.221435 2026] [:error] [pid 35642:tid 35649] [client 20.199.184.39:58714] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypltspd.php"] [unique_id "adZYHg-CqryxdEs5DN9hTQAAAEU"]
[Wed Apr 08 21:29:02.837359 2026] [:error] [pid 7047:tid 7067] [client 20.199.184.39:52458] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qqa.php"] [unique_id "adZYHuNh3oGO3pKiCzwvzQAAAZI"]
[Wed Apr 08 21:29:03.368642 2026] [:error] [pid 35642:tid 35645] [client 20.199.184.39:60667] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qqa.php"] [unique_id "adZYHw-CqryxdEs5DN9hTgAAAEE"]
[Wed Apr 08 21:29:03.925286 2026] [:error] [pid 7047:tid 7058] [client 20.199.184.39:45612] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qqa.php"] [unique_id "adZYH-Nh3oGO3pKiCzwv1gAAAYk"]
[Wed Apr 08 21:29:04.704098 2026] [:error] [pid 7047:tid 7056] [client 20.199.184.39:52389] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qqa.php"] [unique_id "adZYIONh3oGO3pKiCzwv3AAAAYc"]
[Wed Apr 08 21:29:05.614705 2026] [:error] [pid 7047:tid 7061] [client 20.199.184.39:56553] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "adZYIeNh3oGO3pKiCzwv5AAAAYw"]
[Wed Apr 08 21:29:06.285992 2026] [:error] [pid 12385:tid 12401] [client 20.199.184.39:44481] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "adZYIiAjtvRQEkLosq2i_AAAAAw"]
[Wed Apr 08 21:29:07.211411 2026] [:error] [pid 12453:tid 12471] [client 20.199.184.39:60633] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "adZYIxjtW7S6XsLPvrQ_XwAAAJA"]
[Wed Apr 08 21:29:08.215152 2026] [:error] [pid 12385:tid 12389] [client 20.199.184.39:58728] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "adZYJCAjtvRQEkLosq2i_QAAAAA"]
[Wed Apr 08 21:29:09.251963 2026] [:error] [pid 7189:tid 7201] [client 20.199.184.39:44488] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "adZYJRaBqhBSu0L37lricQAAAco"]
[Wed Apr 08 21:29:10.129798 2026] [:error] [pid 64066:tid 64076] [client 20.199.184.39:60653] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "adZYJlR3WucJgr2vZGZICgAAAUc"]
[Wed Apr 08 21:29:10.882546 2026] [:error] [pid 64066:tid 64074] [client 20.199.184.39:44531] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "adZYJlR3WucJgr2vZGZIDwAAAUU"]
[Wed Apr 08 21:29:11.669856 2026] [:error] [pid 7189:tid 7200] [client 20.199.184.39:60573] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "adZYJxaBqhBSu0L37lricwAAAck"]
[Wed Apr 08 21:29:12.391008 2026] [:error] [pid 7189:tid 7209] [client 20.199.184.39:56474] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "adZYKBaBqhBSu0L37lridAAAAdI"]
[Wed Apr 08 21:29:13.220720 2026] [:error] [pid 12490:tid 12515] [client 20.199.184.39:56558] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "adZYKW1Fea4F4fbumr0JbgAAANc"]
[Wed Apr 08 21:29:14.037362 2026] [:error] [pid 12385:tid 12396] [client 20.199.184.39:44532] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "adZYKiAjtvRQEkLosq2i_wAAAAc"]
[Wed Apr 08 21:29:15.708269 2026] [:error] [pid 7047:tid 7073] [client 20.199.184.39:58742] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "adZYK-Nh3oGO3pKiCzwv_wAAAZg"]
[Wed Apr 08 21:29:16.914534 2026] [:error] [pid 7047:tid 7063] [client 20.199.184.39:60622] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "adZYLONh3oGO3pKiCzwwCAAAAY4"]
[Wed Apr 08 21:29:17.914599 2026] [:error] [pid 12490:tid 12502] [client 20.199.184.39:44534] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "adZYLW1Fea4F4fbumr0JiQAAAMo"]
[Wed Apr 08 21:29:18.553314 2026] [:error] [pid 7047:tid 7070] [client 20.199.184.39:44502] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "adZYLuNh3oGO3pKiCzwwEQAAAZU"]
[Wed Apr 08 21:29:19.814844 2026] [:error] [pid 7047:tid 7052] [client 20.199.184.39:60661] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "adZYL-Nh3oGO3pKiCzwwHgAAAYM"]
[Wed Apr 08 21:29:20.376936 2026] [:error] [pid 12490:tid 12506] [client 20.199.184.39:56535] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "adZYMG1Fea4F4fbumr0JiwAAAM4"]
[Wed Apr 08 21:29:21.147029 2026] [:error] [pid 7047:tid 7072] [client 20.199.184.39:60658] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "adZYMeNh3oGO3pKiCzwwKQAAAZc"]
[Wed Apr 08 21:29:22.119279 2026] [:error] [pid 7047:tid 7071] [client 20.199.184.39:58757] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "adZYMuNh3oGO3pKiCzwwLgAAAZY"]
[Wed Apr 08 21:29:22.767043 2026] [:error] [pid 7047:tid 7067] [client 20.199.184.39:54601] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "adZYMuNh3oGO3pKiCzwwMQAAAZI"]
[Wed Apr 08 21:29:23.394738 2026] [:error] [pid 7047:tid 7063] [client 20.199.184.39:56523] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "adZYM-Nh3oGO3pKiCzwwNwAAAY4"]
[Wed Apr 08 21:29:23.989974 2026] [:error] [pid 7047:tid 7049] [client 20.199.184.39:56557] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "adZYM-Nh3oGO3pKiCzwwPAAAAYA"]
[Wed Apr 08 21:29:24.772515 2026] [:error] [pid 7047:tid 7067] [client 20.199.184.39:58790] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "adZYNONh3oGO3pKiCzwwQwAAAZI"]
[Wed Apr 08 21:29:25.401865 2026] [:error] [pid 64066:tid 64086] [client 20.199.184.39:45603] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "adZYNVR3WucJgr2vZGZINAAAAVE"]
[Wed Apr 08 21:29:26.041472 2026] [:error] [pid 7189:tid 7200] [client 20.199.184.39:58707] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adZYNhaBqhBSu0L37lriegAAAck"]
[Wed Apr 08 21:29:26.906682 2026] [:error] [pid 7189:tid 7212] [client 20.199.184.39:58749] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adZYNhaBqhBSu0L37lriewAAAdU"]
[Wed Apr 08 21:29:27.689764 2026] [:error] [pid 7047:tid 7058] [client 20.199.184.39:58780] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adZYN-Nh3oGO3pKiCzwwUQAAAYk"]
[Wed Apr 08 21:29:28.477514 2026] [:error] [pid 7047:tid 7072] [client 20.199.184.39:58696] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adZYOONh3oGO3pKiCzwwVAAAAZc"]
[Wed Apr 08 21:29:29.118172 2026] [:error] [pid 7047:tid 7058] [client 20.199.184.39:45602] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adZYOeNh3oGO3pKiCzwwWgAAAYk"]
[Wed Apr 08 21:29:29.789644 2026] [:error] [pid 35642:tid 35668] [client 20.199.184.39:54596] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adZYOQ-CqryxdEs5DN9hfQAAAFg"]
[Wed Apr 08 21:29:31.019768 2026] [:error] [pid 64066:tid 64072] [client 20.199.184.39:58697] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adZYO1R3WucJgr2vZGZIQAAAAUM"]
[Wed Apr 08 21:29:31.707888 2026] [:error] [pid 7189:tid 7207] [client 20.199.184.39:60659] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adZYOxaBqhBSu0L37lrifgAAAdA"]
[Wed Apr 08 21:29:32.657851 2026] [:error] [pid 64066:tid 64093] [client 20.199.184.39:56477] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adZYPFR3WucJgr2vZGZIRAAAAVg"]
[Wed Apr 08 21:29:33.362569 2026] [:error] [pid 64066:tid 64091] [client 20.199.184.39:58806] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adZYPVR3WucJgr2vZGZIRwAAAVY"]
[Wed Apr 08 21:29:33.979263 2026] [:error] [pid 35642:tid 35659] [client 20.199.184.39:56517] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adZYPQ-CqryxdEs5DN9hfgAAAE8"]
[Wed Apr 08 21:29:34.761940 2026] [:error] [pid 7189:tid 7197] [client 20.199.184.39:56457] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adZYPhaBqhBSu0L37lriggAAAcY"]
[Wed Apr 08 21:29:35.336832 2026] [:error] [pid 7047:tid 7055] [client 20.199.184.39:44510] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "adZYP-Nh3oGO3pKiCzwwdwAAAYY"]
[Wed Apr 08 21:29:50.677215 2026] [:error] [pid 7047:tid 7073] [client 20.199.184.39:56450] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "adZYTuNh3oGO3pKiCzww8AAAAZg"]
[Wed Apr 08 21:29:51.318576 2026] [:error] [pid 7047:tid 7071] [client 20.199.184.39:45625] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "adZYT-Nh3oGO3pKiCzww-AAAAZY"]
[Wed Apr 08 21:29:52.014646 2026] [:error] [pid 7047:tid 7073] [client 20.199.184.39:56539] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "adZYUONh3oGO3pKiCzww_gAAAZg"]
[Wed Apr 08 21:29:52.570206 2026] [:error] [pid 7047:tid 7061] [client 20.199.184.39:56527] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "adZYUONh3oGO3pKiCzwxAwAAAYw"]
[Wed Apr 08 21:29:53.133178 2026] [:error] [pid 7047:tid 7053] [client 20.199.184.39:58727] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "adZYUeNh3oGO3pKiCzwxDAAAAYQ"]
[Wed Apr 08 21:29:54.062584 2026] [:error] [pid 7189:tid 7211] [client 20.199.184.39:58743] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "adZYUhaBqhBSu0L37lrilQAAAdQ"]
[Wed Apr 08 21:29:54.650472 2026] [:error] [pid 35642:tid 35650] [client 20.199.184.39:56448] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "adZYUg-CqryxdEs5DN9hgQAAAEY"]
[Wed Apr 08 21:29:55.542311 2026] [:error] [pid 12453:tid 12463] [client 20.199.184.39:45593] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "adZYUxjtW7S6XsLPvrQ_8AAAAIg"]
[Wed Apr 08 21:29:56.141696 2026] [:error] [pid 12386:tid 12433] [client 20.199.184.39:45618] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "adZYVBLhhLtqHi2gK7Ue3AAAARE"]
[Wed Apr 08 21:29:56.885427 2026] [:error] [pid 64066:tid 64071] [client 20.199.184.39:60650] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "adZYVFR3WucJgr2vZGZIXwAAAUI"]
[Wed Apr 08 21:29:57.746986 2026] [:error] [pid 12453:tid 12467] [client 20.199.184.39:44507] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "adZYVRjtW7S6XsLPvrQ_8wAAAIw"]
[Wed Apr 08 21:29:58.495037 2026] [:error] [pid 35642:tid 35648] [client 20.199.184.39:44543] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "adZYVg-CqryxdEs5DN9hhwAAAEQ"]
[Wed Apr 08 21:29:59.570680 2026] [:error] [pid 12453:tid 12479] [client 20.199.184.39:60582] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "adZYVxjtW7S6XsLPvrQ_9QAAAJg"]
[Wed Apr 08 21:30:00.314599 2026] [:error] [pid 12453:tid 12464] [client 20.199.184.39:58779] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "adZYWBjtW7S6XsLPvrQ_-wAAAIk"]
[Wed Apr 08 21:30:00.985966 2026] [:error] [pid 64066:tid 64077] [client 20.199.184.39:60613] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "adZYWFR3WucJgr2vZGZIYwAAAUg"]
[Wed Apr 08 21:30:02.063456 2026] [:error] [pid 7047:tid 7068] [client 20.199.184.39:60668] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "adZYWuNh3oGO3pKiCzwxLQAAAZM"]
[Wed Apr 08 21:30:02.958467 2026] [:error] [pid 7047:tid 7060] [client 20.199.184.39:58812] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "adZYWuNh3oGO3pKiCzwxMgAAAYs"]
[Wed Apr 08 21:30:03.814879 2026] [:error] [pid 64066:tid 64084] [client 20.199.184.39:58804] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "adZYW1R3WucJgr2vZGZIZAAAAU8"]
[Wed Apr 08 21:30:04.733983 2026] [:error] [pid 7047:tid 7056] [client 20.199.184.39:44520] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "adZYXONh3oGO3pKiCzwxNwAAAYc"]
[Wed Apr 08 21:30:05.330760 2026] [:error] [pid 12490:tid 12515] [client 20.199.184.39:60575] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "adZYXW1Fea4F4fbumr0JnAAAANc"]
[Wed Apr 08 21:30:05.928357 2026] [:error] [pid 64066:tid 64076] [client 20.199.184.39:60546] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "adZYXVR3WucJgr2vZGZIZgAAAUc"]
[Wed Apr 08 21:30:06.677866 2026] [:error] [pid 7189:tid 7197] [client 20.199.184.39:56522] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "adZYXhaBqhBSu0L37lripQAAAcY"]
[Wed Apr 08 21:30:07.537314 2026] [:error] [pid 35642:tid 35652] [client 20.199.184.39:58799] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "adZYXw-CqryxdEs5DN9hjgAAAEg"]
[Wed Apr 08 21:30:08.118936 2026] [:error] [pid 12386:tid 12425] [client 20.199.184.39:58713] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "adZYYBLhhLtqHi2gK7Ue7QAAAQk"]
[Wed Apr 08 21:30:08.809314 2026] [:error] [pid 12453:tid 12461] [client 20.199.184.39:58766] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adZYYBjtW7S6XsLPvrRAAgAAAIY"]
[Wed Apr 08 21:30:09.581788 2026] [:error] [pid 7189:tid 7199] [client 20.199.184.39:56463] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adZYYRaBqhBSu0L37lrirAAAAcg"]
[Wed Apr 08 21:30:10.083084 2026] [:error] [pid 12453:tid 12470] [client 20.199.184.39:54718] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adZYYhjtW7S6XsLPvrRABgAAAI8"]
[Wed Apr 08 21:30:10.618057 2026] [:error] [pid 35642:tid 35645] [client 20.199.184.39:56538] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adZYYg-CqryxdEs5DN9hkgAAAEE"]
[Wed Apr 08 21:30:11.138846 2026] [:error] [pid 12453:tid 12467] [client 20.199.184.39:60669] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "adZYYxjtW7S6XsLPvrRACwAAAIw"]
[Wed Apr 08 21:30:11.739322 2026] [:error] [pid 12490:tid 12503] [client 20.199.184.39:44519] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "adZYY21Fea4F4fbumr0JoQAAAMs"]
[Wed Apr 08 21:30:12.344549 2026] [:error] [pid 12453:tid 12455] [client 20.199.184.39:60572] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "adZYZBjtW7S6XsLPvrRADQAAAIA"]
[Wed Apr 08 21:30:12.938773 2026] [:error] [pid 7189:tid 7203] [client 20.199.184.39:44492] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "adZYZBaBqhBSu0L37lrirgAAAcw"]
[Wed Apr 08 21:30:13.689593 2026] [:error] [pid 12386:tid 12434] [client 20.199.184.39:58795] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adZYZRLhhLtqHi2gK7Ue-AAAARI"]
[Wed Apr 08 21:30:14.311950 2026] [:error] [pid 12385:tid 12395] [client 20.199.184.39:56545] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adZYZiAjtvRQEkLosq2jFgAAAAY"]
[Wed Apr 08 21:30:14.912435 2026] [:error] [pid 12385:tid 12406] [client 20.199.184.39:60619] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adZYZiAjtvRQEkLosq2jGAAAABE"]
[Wed Apr 08 21:30:15.463195 2026] [:error] [pid 12453:tid 12461] [client 20.199.184.39:44512] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adZYZxjtW7S6XsLPvrRAEgAAAIY"]
[Wed Apr 08 21:30:16.477903 2026] [:error] [pid 12453:tid 12463] [client 20.199.184.39:45598] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adZYaBjtW7S6XsLPvrRAGQAAAIg"]
[Wed Apr 08 21:30:17.444721 2026] [:error] [pid 12453:tid 12466] [client 20.199.184.39:58735] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adZYaRjtW7S6XsLPvrRAIAAAAIs"]
[Wed Apr 08 21:30:18.172194 2026] [:error] [pid 12453:tid 12469] [client 20.199.184.39:56514] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adZYahjtW7S6XsLPvrRAJgAAAI4"]
[Wed Apr 08 21:30:18.716168 2026] [:error] [pid 7189:tid 7201] [client 20.199.184.39:56520] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adZYahaBqhBSu0L37lrisAAAAco"]
[Wed Apr 08 21:30:19.261851 2026] [:error] [pid 12490:tid 12492] [client 20.199.184.39:45604] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adZYa21Fea4F4fbumr0JowAAAMA"]
[Wed Apr 08 21:30:19.934988 2026] [:error] [pid 12453:tid 12466] [client 20.199.184.39:58807] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adZYaxjtW7S6XsLPvrRALAAAAIs"]
[Wed Apr 08 21:30:20.492775 2026] [:error] [pid 12453:tid 12456] [client 20.199.184.39:44489] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adZYbBjtW7S6XsLPvrRALwAAAIE"]
[Wed Apr 08 21:30:21.807557 2026] [:error] [pid 35642:tid 35645] [client 20.199.184.39:58781] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adZYbQ-CqryxdEs5DN9hmQAAAEE"]
[Wed Apr 08 21:30:22.520161 2026] [:error] [pid 7189:tid 7207] [client 20.199.184.39:52372] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adZYbhaBqhBSu0L37lritQAAAdA"]
[Wed Apr 08 21:30:23.079256 2026] [:error] [pid 12386:tid 12427] [client 20.199.184.39:45613] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adZYbxLhhLtqHi2gK7Ue_QAAAQs"]
[Wed Apr 08 21:30:23.900595 2026] [:error] [pid 7047:tid 7070] [client 20.199.184.39:44503] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adZYb-Nh3oGO3pKiCzwxTAAAAZU"]
[Wed Apr 08 21:30:24.569991 2026] [:error] [pid 12490:tid 12497] [client 20.199.184.39:60588] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adZYcG1Fea4F4fbumr0JqwAAAMU"]
[Wed Apr 08 21:30:25.120002 2026] [:error] [pid 12490:tid 12496] [client 20.199.184.39:45601] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "adZYcW1Fea4F4fbumr0JrgAAAMQ"]
[Wed Apr 08 21:30:25.860354 2026] [:error] [pid 35642:tid 35667] [client 20.199.184.39:60576] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "adZYcQ-CqryxdEs5DN9hnAAAAFc"]
[Wed Apr 08 21:30:26.483623 2026] [:error] [pid 12490:tid 12501] [client 20.199.184.39:56516] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "adZYcm1Fea4F4fbumr0JrwAAAMk"]
[Wed Apr 08 21:30:26.986636 2026] [:error] [pid 12490:tid 12500] [client 20.199.184.39:58694] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mter.php"] [unique_id "adZYcm1Fea4F4fbumr0JsAAAAMg"]
[Wed Apr 08 21:30:27.723703 2026] [:error] [pid 12490:tid 12507] [client 20.199.184.39:60645] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adZYc21Fea4F4fbumr0JswAAAM8"]
[Wed Apr 08 21:30:28.218215 2026] [:error] [pid 7047:tid 7065] [client 20.199.184.39:56472] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adZYdONh3oGO3pKiCzwxWQAAAZA"]
[Wed Apr 08 21:30:29.114624 2026] [:error] [pid 35642:tid 35663] [client 20.199.184.39:60609] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adZYdQ-CqryxdEs5DN9hpAAAAFM"]
[Wed Apr 08 21:30:29.594842 2026] [:error] [pid 35642:tid 35653] [client 20.199.184.39:58748] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adZYdQ-CqryxdEs5DN9hpQAAAEk"]
[Wed Apr 08 21:30:30.202457 2026] [:error] [pid 12386:tid 12431] [client 20.199.184.39:56453] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "adZYdhLhhLtqHi2gK7UfAgAAAQ8"]
[Wed Apr 08 21:30:30.784054 2026] [:error] [pid 35642:tid 35645] [client 20.199.184.39:58778] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "adZYdg-CqryxdEs5DN9hqgAAAEE"]
[Wed Apr 08 21:30:31.291954 2026] [:error] [pid 12386:tid 12420] [client 20.199.184.39:56537] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "adZYdxLhhLtqHi2gK7UfCAAAAQQ"]
[Wed Apr 08 21:30:31.823128 2026] [:error] [pid 64066:tid 64080] [client 20.199.184.39:56478] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "adZYd1R3WucJgr2vZGZIcwAAAUs"]
[Wed Apr 08 21:30:32.449023 2026] [:error] [pid 64066:tid 64081] [client 20.199.184.39:56555] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adZYeFR3WucJgr2vZGZIdgAAAUw"]
[Wed Apr 08 21:30:32.992320 2026] [:error] [pid 7047:tid 7059] [client 20.199.184.39:45571] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adZYeONh3oGO3pKiCzwxYAAAAYo"]
[Wed Apr 08 21:30:33.803541 2026] [:error] [pid 7047:tid 7056] [client 20.199.184.39:58808] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adZYeeNh3oGO3pKiCzwxZAAAAYc"]
[Wed Apr 08 21:30:34.353120 2026] [:error] [pid 7047:tid 7072] [client 20.199.184.39:58738] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adZYeuNh3oGO3pKiCzwxagAAAZc"]
[Wed Apr 08 21:30:34.876064 2026] [:error] [pid 7047:tid 7049] [client 20.199.184.39:58764] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adZYeuNh3oGO3pKiCzwxbgAAAYA"]
[Wed Apr 08 21:30:35.375068 2026] [:error] [pid 7047:tid 7066] [client 20.199.184.39:45574] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adZYe-Nh3oGO3pKiCzwxcwAAAZE"]
[Wed Apr 08 21:30:35.874001 2026] [:error] [pid 7047:tid 7072] [client 20.199.184.39:56519] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adZYe-Nh3oGO3pKiCzwxdwAAAZc"]
[Wed Apr 08 21:30:36.478321 2026] [:error] [pid 7047:tid 7071] [client 20.199.184.39:44540] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adZYfONh3oGO3pKiCzwxfAAAAZY"]
[Wed Apr 08 21:30:36.976390 2026] [:error] [pid 7047:tid 7069] [client 20.199.184.39:56569] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adZYfONh3oGO3pKiCzwxfwAAAZQ"]
[Wed Apr 08 21:30:37.487935 2026] [:error] [pid 7047:tid 7050] [client 20.199.184.39:51849] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adZYfeNh3oGO3pKiCzwxgwAAAYE"]
[Wed Apr 08 21:30:38.029307 2026] [:error] [pid 7047:tid 7067] [client 20.199.184.39:60610] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adZYfuNh3oGO3pKiCzwxiAAAAZI"]
[Wed Apr 08 21:30:38.518118 2026] [:error] [pid 12453:tid 12466] [client 20.199.184.39:56461] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adZYfhjtW7S6XsLPvrRAOwAAAIs"]
[Wed Apr 08 21:30:39.006407 2026] [:error] [pid 7047:tid 7051] [client 20.199.184.39:58747] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "adZYf-Nh3oGO3pKiCzwxjwAAAYI"]
[Wed Apr 08 21:30:39.692948 2026] [:error] [pid 7047:tid 7067] [client 20.199.184.39:44494] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "adZYf-Nh3oGO3pKiCzwxlAAAAZI"]
[Wed Apr 08 21:30:40.248398 2026] [:error] [pid 7047:tid 7050] [client 20.199.184.39:60601] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "adZYgONh3oGO3pKiCzwxnAAAAYE"]
[Wed Apr 08 21:30:40.727833 2026] [:error] [pid 12386:tid 12416] [client 20.199.184.39:56470] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "adZYgBLhhLtqHi2gK7UfDgAAAQA"]
[Wed Apr 08 21:30:41.259797 2026] [:error] [pid 12385:tid 12412] [client 20.199.184.39:58771] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "adZYgSAjtvRQEkLosq2jLgAAABc"]
[Wed Apr 08 21:30:41.776508 2026] [:error] [pid 7047:tid 7065] [client 20.199.184.39:44482] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "adZYgeNh3oGO3pKiCzwxpQAAAZA"]
[Wed Apr 08 21:30:42.271620 2026] [:error] [pid 7047:tid 7062] [client 20.199.184.39:54673] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "adZYguNh3oGO3pKiCzwxqgAAAY0"]
[Wed Apr 08 21:30:42.762449 2026] [:error] [pid 7047:tid 7049] [client 20.199.184.39:58744] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "adZYguNh3oGO3pKiCzwxrAAAAYA"]
[Wed Apr 08 21:30:43.314995 2026] [:error] [pid 12453:tid 12465] [client 20.199.184.39:44516] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "adZYgxjtW7S6XsLPvrRAQwAAAIo"]
[Wed Apr 08 21:30:43.930082 2026] [:error] [pid 7047:tid 7064] [client 20.199.184.39:58770] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "adZYg-Nh3oGO3pKiCzwxsgAAAY8"]
[Wed Apr 08 21:30:44.457457 2026] [:error] [pid 12453:tid 12473] [client 20.199.184.39:50871] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "adZYhBjtW7S6XsLPvrRARwAAAJI"]
[Wed Apr 08 21:30:44.943642 2026] [:error] [pid 7189:tid 7206] [client 20.199.184.39:58745] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "adZYhBaBqhBSu0L37lrixAAAAc8"]
[Wed Apr 08 21:30:45.484530 2026] [:error] [pid 7047:tid 7057] [client 20.199.184.39:44499] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "adZYheNh3oGO3pKiCzwxuQAAAYg"]
[Wed Apr 08 21:30:45.965804 2026] [:error] [pid 7047:tid 7055] [client 20.199.184.39:58716] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "adZYheNh3oGO3pKiCzwxvwAAAYY"]
[Wed Apr 08 21:30:46.508252 2026] [:error] [pid 7047:tid 7054] [client 20.199.184.39:58754] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "adZYhuNh3oGO3pKiCzwxxAAAAYU"]
[Wed Apr 08 21:30:47.035147 2026] [:error] [pid 7047:tid 7067] [client 20.199.184.39:54612] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/swallowable.php"] [unique_id "adZYh-Nh3oGO3pKiCzwxyAAAAZI"]
[Wed Apr 08 21:30:47.623785 2026] [:error] [pid 12386:tid 12421] [client 20.199.184.39:60602] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "adZYhxLhhLtqHi2gK7UfFAAAAQU"]
[Wed Apr 08 21:30:48.192390 2026] [:error] [pid 64066:tid 64071] [client 20.199.184.39:58688] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "adZYiFR3WucJgr2vZGZIgQAAAUI"]
[Wed Apr 08 21:30:48.945103 2026] [:error] [pid 35642:tid 35651] [client 20.199.184.39:44495] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "adZYiA-CqryxdEs5DN9hrwAAAEc"]
[Wed Apr 08 21:31:06.050806 2026] [:error] [pid 7047:tid 7050] [client 20.199.184.39:60651] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adZYmuNh3oGO3pKiCzwyAQAAAYE"]
[Wed Apr 08 21:31:06.571872 2026] [:error] [pid 35642:tid 35650] [client 20.199.184.39:60597] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adZYmg-CqryxdEs5DN9hygAAAEY"]
[Wed Apr 08 21:31:07.458591 2026] [:error] [pid 12453:tid 12470] [client 20.199.184.39:44529] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adZYmxjtW7S6XsLPvrRAuQAAAI8"]
[Wed Apr 08 21:31:08.037398 2026] [:error] [pid 7189:tid 7192] [client 20.199.184.39:58703] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adZYnBaBqhBSu0L37lri4QAAAcE"]
[Wed Apr 08 21:31:09.471445 2026] [:error] [pid 7047:tid 7069] [client 20.199.184.39:60548] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adZYneNh3oGO3pKiCzwyBgAAAZQ"]
[Wed Apr 08 21:31:10.219775 2026] [:error] [pid 35642:tid 35645] [client 20.199.184.39:56521] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adZYng-CqryxdEs5DN9hzAAAAEE"]
[Wed Apr 08 21:31:11.039995 2026] [:error] [pid 12386:tid 12427] [client 20.199.184.39:60557] [client 20.199.184.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adZYnxLhhLtqHi2gK7UfKAAAAQs"]
[Wed Apr 08 22:39:55.844354 2026] [:error] [pid 12490:tid 12502] [client 43.166.132.142:51448] [client 43.166.132.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adZou21Fea4F4fbumr0psAAAAMo"]
[Wed Apr 08 22:47:51.303092 2026] [:error] [pid 12386:tid 12438] [client 116.240.149.7:62550] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adZqlxLhhLtqHi2gK7UpbwAAARY"]
[Wed Apr 08 22:47:54.386299 2026] [:error] [pid 12490:tid 12513] [client 116.240.149.7:60610] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adZqmm1Fea4F4fbumr0tTwAAANU"]
[Wed Apr 08 22:47:56.730700 2026] [:error] [pid 35642:tid 35647] [client 116.240.149.7:64365] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adZqnA-CqryxdEs5DN9u1QAAAEM"]
[Wed Apr 08 22:47:59.709042 2026] [:error] [pid 7047:tid 7062] [client 116.240.149.7:64886] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adZqn-Nh3oGO3pKiCzxFdAAAAY0"]
[Wed Apr 08 22:48:03.609148 2026] [:error] [pid 12453:tid 12469] [client 116.240.149.7:63649] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "adZqoxjtW7S6XsLPvrRaqQAAAI4"]
[Wed Apr 08 22:48:06.023410 2026] [:error] [pid 64066:tid 64093] [client 116.240.149.7:60836] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "adZqplR3WucJgr2vZGZ4_AAAAVg"]
[Wed Apr 08 22:48:08.684406 2026] [:error] [pid 12490:tid 12493] [client 116.240.149.7:64801] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "adZqqG1Fea4F4fbumr0taAAAAME"]
[Wed Apr 08 22:48:11.961004 2026] [:error] [pid 64066:tid 64078] [client 116.240.149.7:59164] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "adZqq1R3WucJgr2vZGZ5FwAAAUk"]
[Wed Apr 08 22:48:14.304500 2026] [:error] [pid 12490:tid 12502] [client 116.240.149.7:59524] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adZqrm1Fea4F4fbumr0tdQAAAMo"]
[Wed Apr 08 22:48:16.987786 2026] [:error] [pid 64066:tid 64090] [client 116.240.149.7:64035] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adZqsFR3WucJgr2vZGZ5MAAAAVU"]
[Wed Apr 08 22:48:21.110688 2026] [:error] [pid 12490:tid 12502] [client 116.240.149.7:59711] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adZqtW1Fea4F4fbumr0teAAAAMo"]
[Wed Apr 08 22:48:25.724157 2026] [:error] [pid 12490:tid 12498] [client 116.240.149.7:62596] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adZquW1Fea4F4fbumr0thAAAAMY"]
[Wed Apr 08 22:48:28.090618 2026] [:error] [pid 12385:tid 12403] [client 116.240.149.7:64510] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adZqvCAjtvRQEkLosq2tAgAAAA4"]
[Wed Apr 08 22:48:30.872502 2026] [:error] [pid 64066:tid 64072] [client 116.240.149.7:61686] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adZqvlR3WucJgr2vZGZ5WwAAAUM"]
[Wed Apr 08 22:48:33.890358 2026] [:error] [pid 12490:tid 12513] [client 116.240.149.7:64868] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adZqwW1Fea4F4fbumr0tjwAAANU"]
[Wed Apr 08 22:48:36.391651 2026] [:error] [pid 35642:tid 35649] [client 116.240.149.7:59129] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adZqxA-CqryxdEs5DN9u7QAAAEU"]
[Wed Apr 08 22:48:39.341395 2026] [:error] [pid 12490:tid 12512] [client 116.240.149.7:64631] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adZqx21Fea4F4fbumr0tngAAANQ"]
[Wed Apr 08 22:48:41.872007 2026] [:error] [pid 64066:tid 64087] [client 116.240.149.7:64611] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adZqyVR3WucJgr2vZGZ5fgAAAVI"]
[Wed Apr 08 22:48:45.073764 2026] [:error] [pid 64066:tid 64089] [client 116.240.149.7:63264] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adZqzVR3WucJgr2vZGZ5ngAAAVQ"]
[Wed Apr 08 22:49:35.721603 2026] [:error] [pid 7189:tid 7204] [client 116.240.149.7:62980] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "adZq_xaBqhBSu0L37lr0TAAAAc0"]
[Wed Apr 08 22:49:39.790331 2026] [:error] [pid 7189:tid 7193] [client 116.240.149.7:59710] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "adZrAxaBqhBSu0L37lr0UwAAAcI"]
[Wed Apr 08 22:49:42.376179 2026] [:error] [pid 12385:tid 12400] [client 116.240.149.7:62390] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "adZrBiAjtvRQEkLosq2tKwAAAAs"]
[Wed Apr 08 22:49:45.697637 2026] [:error] [pid 12453:tid 12456] [client 116.240.149.7:63073] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "adZrCRjtW7S6XsLPvrRbFgAAAIE"]
[Wed Apr 08 22:49:49.063513 2026] [:error] [pid 64066:tid 64081] [client 116.240.149.7:60470] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "adZrDVR3WucJgr2vZGZ6egAAAUw"]
[Wed Apr 08 22:49:51.492898 2026] [:error] [pid 12490:tid 12506] [client 116.240.149.7:61789] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adZrD21Fea4F4fbumr0uRgAAAM4"]
[Wed Apr 08 22:49:54.593189 2026] [:error] [pid 7189:tid 7198] [client 116.240.149.7:60430] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adZrEhaBqhBSu0L37lr0XwAAAcc"]
[Wed Apr 08 22:49:58.581652 2026] [:error] [pid 7189:tid 7196] [client 116.240.149.7:63534] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adZrFhaBqhBSu0L37lr0ZAAAAcU"]
[Wed Apr 08 22:50:00.723346 2026] [:error] [pid 12453:tid 12455] [client 116.240.149.7:59355] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adZrGBjtW7S6XsLPvrRbMwAAAIA"]
[Wed Apr 08 22:50:04.195005 2026] [:error] [pid 35642:tid 35656] [client 116.240.149.7:60316] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adZrHA-CqryxdEs5DN9vEQAAAEw"]
[Wed Apr 08 22:50:06.488783 2026] [:error] [pid 7047:tid 7073] [client 116.240.149.7:60472] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adZrHuNh3oGO3pKiCzxF-wAAAZg"]
[Wed Apr 08 22:50:10.206577 2026] [:error] [pid 12453:tid 12474] [client 116.240.149.7:61137] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adZrIhjtW7S6XsLPvrRbRQAAAJM"]
[Wed Apr 08 22:50:13.504097 2026] [:error] [pid 12453:tid 12464] [client 116.240.149.7:60005] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adZrJRjtW7S6XsLPvrRbTQAAAIk"]
[Wed Apr 08 22:50:17.417518 2026] [:error] [pid 64066:tid 64091] [client 116.240.149.7:60309] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adZrKVR3WucJgr2vZGZ6pAAAAVY"]
[Wed Apr 08 22:50:20.017746 2026] [:error] [pid 7047:tid 7065] [client 116.240.149.7:61809] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adZrLONh3oGO3pKiCzxGAgAAAZA"]
[Wed Apr 08 22:50:23.686986 2026] [:error] [pid 64066:tid 64072] [client 116.240.149.7:60078] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adZrL1R3WucJgr2vZGZ6uQAAAUM"]
[Wed Apr 08 22:50:27.295326 2026] [:error] [pid 7047:tid 7065] [client 116.240.149.7:62901] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adZrM-Nh3oGO3pKiCzxGGQAAAZA"]
[Wed Apr 08 22:50:30.082033 2026] [:error] [pid 12490:tid 12508] [client 116.240.149.7:61700] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adZrNm1Fea4F4fbumr0udgAAANA"]
[Wed Apr 08 22:51:22.162661 2026] [:error] [pid 64066:tid 64087] [client 116.240.149.7:61826] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adZralR3WucJgr2vZGZ7SAAAAVI"]
[Wed Apr 08 22:51:26.111307 2026] [:error] [pid 12490:tid 12494] [client 116.240.149.7:64868] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adZrbm1Fea4F4fbumr0u5AAAAMI"]
[Wed Apr 08 22:51:29.507696 2026] [:error] [pid 12490:tid 12514] [client 116.240.149.7:59527] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "adZrcW1Fea4F4fbumr0u9gAAANY"]
[Wed Apr 08 22:51:33.758373 2026] [:error] [pid 7189:tid 7199] [client 116.240.149.7:63376] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adZrdRaBqhBSu0L37lr0qQAAAcg"]
[Wed Apr 08 22:51:37.210618 2026] [:error] [pid 35642:tid 35660] [client 116.240.149.7:61011] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "adZreQ-CqryxdEs5DN9vUQAAAFA"]
[Wed Apr 08 22:51:40.854814 2026] [:error] [pid 7047:tid 7069] [client 116.240.149.7:64704] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "adZrfONh3oGO3pKiCzxGTQAAAZQ"]
[Wed Apr 08 22:51:44.334831 2026] [:error] [pid 7189:tid 7193] [client 116.240.149.7:60101] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adZrgBaBqhBSu0L37lr0tQAAAcI"]
[Wed Apr 08 22:51:47.403092 2026] [:error] [pid 12386:tid 12440] [client 116.240.149.7:64087] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "adZrgxLhhLtqHi2gK7Up6AAAARg"]
[Wed Apr 08 22:51:51.603926 2026] [:error] [pid 7047:tid 7069] [client 116.240.149.7:61403] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "adZrh-Nh3oGO3pKiCzxGWQAAAZQ"]
[Wed Apr 08 22:51:55.112903 2026] [:error] [pid 7047:tid 7067] [client 116.240.149.7:60325] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "adZri-Nh3oGO3pKiCzxGXQAAAZI"]
[Wed Apr 08 22:51:58.444653 2026] [:error] [pid 7047:tid 7058] [client 116.240.149.7:59061] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adZrjuNh3oGO3pKiCzxGYAAAAYk"]
[Thu Apr 09 02:37:56.208282 2026] [:error] [pid 40460:tid 40475] [client 106.54.62.156:41716] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adaghIw-4-9CKD2kKMZLGwAAAEw"]
[Thu Apr 09 08:43:42.980151 2026] [:error] [pid 20641:tid 20661] [client 20.63.32.44:64176] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shadow-bot.php"] [unique_id "adb2Pm3LksBSF-6rlka6jQAAANA"]
[Thu Apr 09 08:43:43.394997 2026] [:error] [pid 20535:tid 20555] [client 20.63.32.44:64076] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shadow-bot.php"] [unique_id "adb2PwWiD9hWnEUHWdOQngAAAAs"]
[Thu Apr 09 08:43:43.848420 2026] [:error] [pid 20535:tid 20551] [client 20.63.32.44:64174] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shadow-bot.php"] [unique_id "adb2PwWiD9hWnEUHWdOQoQAAAAc"]
[Thu Apr 09 08:43:44.302330 2026] [:error] [pid 22627:tid 22635] [client 20.63.32.44:64173] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shadow-bot.php"] [unique_id "adb2QPr8glsF_jKQpr6XeAAAAQU"]
[Thu Apr 09 08:43:44.761064 2026] [:error] [pid 20535:tid 20563] [client 20.63.32.44:64181] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxcs.php"] [unique_id "adb2QAWiD9hWnEUHWdOQpwAAABM"]
[Thu Apr 09 08:43:45.209021 2026] [:error] [pid 20535:tid 20551] [client 20.63.32.44:64073] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxcs.php"] [unique_id "adb2QQWiD9hWnEUHWdOQrQAAAAc"]
[Thu Apr 09 08:43:45.667936 2026] [:error] [pid 20535:tid 20556] [client 20.63.32.44:64179] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxcs.php"] [unique_id "adb2QQWiD9hWnEUHWdOQtQAAAAw"]
[Thu Apr 09 08:43:46.113458 2026] [:error] [pid 22627:tid 22643] [client 20.63.32.44:64166] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zxcs.php"] [unique_id "adb2Qvr8glsF_jKQpr6XfgAAAQ0"]
[Thu Apr 09 08:43:46.611655 2026] [:error] [pid 22627:tid 22630] [client 20.63.32.44:64175] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "adb2Qvr8glsF_jKQpr6XggAAAQA"]
[Thu Apr 09 08:43:47.057548 2026] [:error] [pid 20537:tid 20606] [client 20.63.32.44:64070] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "adb2Q8STjpSeyrxLmN5QBwAAAIg"]
[Thu Apr 09 08:43:47.551250 2026] [:error] [pid 22627:tid 22640] [client 20.63.32.44:64128] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "adb2Q_r8glsF_jKQpr6XigAAAQo"]
[Thu Apr 09 08:43:47.997399 2026] [:error] [pid 20535:tid 20555] [client 20.63.32.44:64155] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "adb2QwWiD9hWnEUHWdOQ5wAAAAs"]
[Thu Apr 09 08:43:48.478932 2026] [:error] [pid 20641:tid 20669] [client 20.63.32.44:64079] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ca-022.php"] [unique_id "adb2RG3LksBSF-6rlka6qAAAANg"]
[Thu Apr 09 08:43:48.927415 2026] [:error] [pid 22627:tid 22637] [client 20.63.32.44:64158] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ca-022.php"] [unique_id "adb2RPr8glsF_jKQpr6XkgAAAQc"]
[Thu Apr 09 08:43:49.391096 2026] [:error] [pid 20641:tid 20664] [client 20.63.32.44:64177] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ca-022.php"] [unique_id "adb2RW3LksBSF-6rlka6rgAAANM"]
[Thu Apr 09 08:43:49.802046 2026] [:error] [pid 22627:tid 22652] [client 20.63.32.44:64187] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ca-022.php"] [unique_id "adb2Rfr8glsF_jKQpr6XlgAAARY"]
[Thu Apr 09 08:43:50.232343 2026] [:error] [pid 20537:tid 20602] [client 20.63.32.44:64135] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rnenu.php"] [unique_id "adb2RsSTjpSeyrxLmN5QEgAAAIQ"]
[Thu Apr 09 08:43:50.654475 2026] [:error] [pid 20537:tid 20606] [client 20.63.32.44:64068] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rnenu.php"] [unique_id "adb2RsSTjpSeyrxLmN5QFgAAAIg"]
[Thu Apr 09 08:43:51.082512 2026] [:error] [pid 20537:tid 20604] [client 20.63.32.44:64087] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rnenu.php"] [unique_id "adb2R8STjpSeyrxLmN5QGwAAAIY"]
[Thu Apr 09 08:43:51.498273 2026] [:error] [pid 22627:tid 22647] [client 20.63.32.44:64183] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rnenu.php"] [unique_id "adb2R_r8glsF_jKQpr6XmQAAARE"]
[Thu Apr 09 08:43:51.911636 2026] [:error] [pid 20537:tid 20601] [client 20.63.32.44:64011] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fallbackapi.php"] [unique_id "adb2R8STjpSeyrxLmN5QIQAAAIM"]
[Thu Apr 09 08:43:52.357953 2026] [:error] [pid 20641:tid 20657] [client 20.63.32.44:64065] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fallbackapi.php"] [unique_id "adb2SG3LksBSF-6rlka6ugAAAMw"]
[Thu Apr 09 08:43:52.808037 2026] [:error] [pid 20537:tid 20600] [client 20.63.32.44:64101] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fallbackapi.php"] [unique_id "adb2SMSTjpSeyrxLmN5QIwAAAII"]
[Thu Apr 09 08:43:53.255094 2026] [:error] [pid 20641:tid 20668] [client 20.63.32.44:64109] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fallbackapi.php"] [unique_id "adb2SW3LksBSF-6rlka6wAAAANc"]
[Thu Apr 09 13:56:50.197474 2026] [:error] [pid 24517:tid 24583] [client 49.51.253.26:33106] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adc_onboYEn2ZFM_PS8_1gAAAIk"]
[Thu Apr 09 16:11:55.129491 2026] [:error] [pid 18477:tid 18486] [client 51.77.218.191:55906] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "addfS8De826HlFeoLPI-UQAAAUc"]
[Thu Apr 09 16:11:57.442371 2026] [:error] [pid 24624:tid 24633] [client 51.77.218.191:43512] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "addfTe4Jn-WvK1ZBTviWhQAAAMc"]
[Thu Apr 09 16:11:59.945137 2026] [:error] [pid 18477:tid 18481] [client 51.77.218.191:43514] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "addfT8De826HlFeoLPI-VAAAAUI"]
[Thu Apr 09 16:12:02.460057 2026] [:error] [pid 24515:tid 24527] [client 51.77.218.191:38030] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "addfUq1OMnvM2fMnB1NOkQAAAAg"]
[Thu Apr 09 16:12:04.938016 2026] [:error] [pid 20837:tid 20844] [client 51.77.218.191:38046] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "addfVPSL71FHZkjrGzOwbQAAAYU"]
[Thu Apr 09 16:12:07.291019 2026] [:error] [pid 24515:tid 24536] [client 51.77.218.191:38056] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "addfV61OMnvM2fMnB1NOmAAAABE"]
[Thu Apr 09 16:12:09.761771 2026] [:error] [pid 20837:tid 20860] [client 51.77.218.191:38068] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "addfWfSL71FHZkjrGzOwcQAAAZU"]
[Thu Apr 09 16:12:12.106147 2026] [:error] [pid 24517:tid 24594] [client 51.77.218.191:40202] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "addfXHboYEn2ZFM_PS9fzwAAAJQ"]
[Thu Apr 09 16:12:14.590331 2026] [:error] [pid 18477:tid 18503] [client 51.77.218.191:40206] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "addfXsDe826HlFeoLPI-oQAAAVg"]
[Thu Apr 09 16:12:17.110751 2026] [:error] [pid 24927:tid 24944] [client 51.77.218.191:40214] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "addfYTXObuzEuw8mNJuiXwAAAQ4"]
[Thu Apr 09 16:12:19.603283 2026] [:error] [pid 18477:tid 18480] [client 51.77.218.191:40220] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "addfY8De826HlFeoLPI-wwAAAUE"]
[Thu Apr 09 16:12:22.131884 2026] [:error] [pid 20837:tid 20851] [client 51.77.218.191:51356] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "addfZvSL71FHZkjrGzOwfgAAAYw"]
[Thu Apr 09 16:12:24.619622 2026] [:error] [pid 24516:tid 24562] [client 51.77.218.191:51370] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "addfaNhW7vSS-UkeWCUH9QAAAE8"]
[Thu Apr 09 16:12:27.109637 2026] [:error] [pid 24515:tid 24526] [client 51.77.218.191:51372] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "addfa61OMnvM2fMnB1NOsQAAAAc"]
[Thu Apr 09 16:12:29.597654 2026] [:error] [pid 18477:tid 18482] [client 51.77.218.191:51382] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "addfbcDe826HlFeoLPI-3wAAAUM"]
[Thu Apr 09 16:12:31.914032 2026] [:error] [pid 18477:tid 18492] [client 51.77.218.191:48124] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "addfb8De826HlFeoLPI-4gAAAU0"]
[Thu Apr 09 16:12:34.407702 2026] [:error] [pid 24927:tid 24946] [client 51.77.218.191:48132] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "addfcjXObuzEuw8mNJuiZAAAARA"]
[Thu Apr 09 16:12:36.748298 2026] [:error] [pid 24515:tid 24543] [client 51.77.218.191:48140] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "addfdK1OMnvM2fMnB1NOswAAABg"]
[Thu Apr 09 16:12:39.214121 2026] [:error] [pid 20837:tid 20848] [client 51.77.218.191:48142] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "addfd_SL71FHZkjrGzOw0wAAAYk"]
[Thu Apr 09 16:12:41.532352 2026] [:error] [pid 24927:tid 24933] [client 51.77.218.191:48150] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "addfeTXObuzEuw8mNJuibwAAAQM"]
[Thu Apr 09 16:12:43.853530 2026] [:error] [pid 24624:tid 24648] [client 51.77.218.191:57048] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "addfe-4Jn-WvK1ZBTviWqwAAANY"]
[Thu Apr 09 16:12:46.326693 2026] [:error] [pid 24516:tid 24558] [client 51.77.218.191:57064] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "addffthW7vSS-UkeWCUICwAAAEs"]
[Thu Apr 09 16:12:48.667683 2026] [:error] [pid 20837:tid 20840] [client 51.77.218.191:57066] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "addfgPSL71FHZkjrGzOw7gAAAYE"]
[Thu Apr 09 16:12:51.142777 2026] [:error] [pid 20837:tid 20850] [client 51.77.218.191:57074] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "addfg_SL71FHZkjrGzOw8QAAAYs"]
[Thu Apr 09 16:13:21.522545 2026] [:error] [pid 24927:tid 24945] [client 51.77.218.191:39330] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "addfoTXObuzEuw8mNJuilgAAAQ8"]
[Thu Apr 09 16:13:23.960355 2026] [:error] [pid 18477:tid 18482] [client 51.77.218.191:37604] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "addfo8De826HlFeoLPI_RQAAAUM"]
[Thu Apr 09 16:13:26.424597 2026] [:error] [pid 24515:tid 24525] [client 51.77.218.191:37614] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "addfpq1OMnvM2fMnB1NO2QAAAAY"]
[Thu Apr 09 16:13:28.894148 2026] [:error] [pid 24516:tid 24554] [client 51.77.218.191:37620] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "addfqNhW7vSS-UkeWCUIPgAAAEc"]
[Thu Apr 09 16:13:31.213285 2026] [:error] [pid 24515:tid 24528] [client 51.77.218.191:37622] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "addfq61OMnvM2fMnB1NO4wAAAAk"]
[Thu Apr 09 16:13:33.718512 2026] [:error] [pid 24927:tid 24943] [client 51.77.218.191:36392] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "addfrTXObuzEuw8mNJuimQAAAQ0"]
[Thu Apr 09 16:13:36.037845 2026] [:error] [pid 24515:tid 24519] [client 51.77.218.191:36394] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "addfsK1OMnvM2fMnB1NO5QAAAAA"]
[Thu Apr 09 16:13:38.506331 2026] [:error] [pid 24624:tid 24627] [client 51.77.218.191:36402] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "addfsu4Jn-WvK1ZBTviW0QAAAME"]
[Thu Apr 09 16:13:40.830527 2026] [:error] [pid 18477:tid 18497] [client 51.77.218.191:36404] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "addftMDe826HlFeoLPI_aAAAAVI"]
[Thu Apr 09 16:13:43.141803 2026] [:error] [pid 24927:tid 24948] [client 51.77.218.191:36190] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "addftzXObuzEuw8mNJuingAAARI"]
[Thu Apr 09 16:13:45.618915 2026] [:error] [pid 24517:tid 24593] [client 51.77.218.191:36198] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "addfuXboYEn2ZFM_PS9f8wAAAJM"]
[Thu Apr 09 16:13:48.092104 2026] [:error] [pid 24516:tid 24556] [client 51.77.218.191:36200] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "addfvNhW7vSS-UkeWCUIQgAAAEk"]
[Thu Apr 09 16:13:50.554582 2026] [:error] [pid 24927:tid 24944] [client 51.77.218.191:36210] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "addfvjXObuzEuw8mNJuiqAAAAQ4"]
[Thu Apr 09 16:13:53.028711 2026] [:error] [pid 24624:tid 24650] [client 51.77.218.191:36376] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "addfwe4Jn-WvK1ZBTviW2AAAANg"]
[Thu Apr 09 16:13:55.345220 2026] [:error] [pid 24624:tid 24635] [client 51.77.218.191:36378] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "addfw-4Jn-WvK1ZBTviW2QAAAMk"]
[Thu Apr 09 16:13:57.669163 2026] [:error] [pid 24516:tid 24560] [client 51.77.218.191:36382] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "addfxdhW7vSS-UkeWCUIRgAAAE0"]
[Thu Apr 09 16:14:00.147835 2026] [:error] [pid 24517:tid 24578] [client 51.77.218.191:36396] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "addfyHboYEn2ZFM_PS9gAgAAAIQ"]
[Thu Apr 09 16:14:02.470374 2026] [:error] [pid 24516:tid 24549] [client 51.77.218.191:42400] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "addfythW7vSS-UkeWCUISgAAAEI"]
[Thu Apr 09 16:14:04.779653 2026] [:error] [pid 18477:tid 18487] [client 51.77.218.191:42406] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "addfzMDe826HlFeoLPI_fAAAAUg"]
[Thu Apr 09 16:14:07.243673 2026] [:error] [pid 18477:tid 18488] [client 51.77.218.191:42416] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "addfz8De826HlFeoLPI_gQAAAUk"]
[Thu Apr 09 16:14:09.569732 2026] [:error] [pid 24515:tid 24527] [client 51.77.218.191:42420] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "addf0a1OMnvM2fMnB1NO9gAAAAg"]
[Thu Apr 09 16:14:11.893843 2026] [:error] [pid 20837:tid 20848] [client 51.77.218.191:37372] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "addf0_SL71FHZkjrGzOxFwAAAYk"]
[Thu Apr 09 16:14:14.361689 2026] [:error] [pid 24516:tid 24550] [client 51.77.218.191:37374] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "addf1thW7vSS-UkeWCUISwAAAEM"]
[Thu Apr 09 16:14:16.672158 2026] [:error] [pid 24517:tid 24586] [client 51.77.218.191:37388] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "addf2HboYEn2ZFM_PS9gBQAAAIw"]
[Thu Apr 09 16:14:47.285985 2026] [:error] [pid 24517:tid 24587] [client 51.77.218.191:37398] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "addf93boYEn2ZFM_PS9gGwAAAI0"]
[Thu Apr 09 16:14:49.702472 2026] [:error] [pid 24516:tid 24547] [client 51.77.218.191:52664] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "addf-dhW7vSS-UkeWCUIWAAAAEA"]
[Thu Apr 09 16:14:52.032911 2026] [:error] [pid 18477:tid 18501] [client 51.77.218.191:56000] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "addf_MDe826HlFeoLPI_vwAAAVY"]
[Thu Apr 09 16:14:54.499623 2026] [:error] [pid 18477:tid 18493] [client 51.77.218.191:56016] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "addf_sDe826HlFeoLPI_wwAAAU4"]
[Thu Apr 09 16:14:56.959747 2026] [:error] [pid 24516:tid 24548] [client 51.77.218.191:56030] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "addgANhW7vSS-UkeWCUIWwAAAEE"]
[Thu Apr 09 16:14:59.443758 2026] [:error] [pid 24927:tid 24935] [client 51.77.218.191:56032] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "addgAzXObuzEuw8mNJui0gAAAQU"]
[Thu Apr 09 16:15:01.743603 2026] [:error] [pid 24515:tid 24519] [client 51.77.218.191:49810] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "addgBa1OMnvM2fMnB1NPCAAAAAA"]
[Thu Apr 09 16:15:04.208694 2026] [:error] [pid 24927:tid 24946] [client 51.77.218.191:49822] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "addgCDXObuzEuw8mNJui3wAAARA"]
[Thu Apr 09 16:15:06.665520 2026] [:error] [pid 24927:tid 24948] [client 51.77.218.191:49830] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "addgCjXObuzEuw8mNJui7gAAARI"]
[Thu Apr 09 16:15:09.117362 2026] [:error] [pid 18477:tid 18497] [client 51.77.218.191:49840] [client 51.77.218.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "addgDcDe826HlFeoLPI_yAAAAVI"]
[Thu Apr 09 17:17:29.789083 2026] [:error] [pid 24516:tid 24562] [client 43.153.58.28:34802] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adduqdhW7vSS-UkeWCUSeQAAAE8"]
[Thu Apr 09 20:09:53.026052 2026] [:error] [pid 63331:tid 63342] [client 43.164.197.177:39036] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adeXESbKfIYuVjWbE4VR4QAAAck"]
[Thu Apr 09 20:43:44.428995 2026] [:error] [pid 24517:tid 24598] [client 62.60.131.165:62420] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefAHboYEn2ZFM_PS9--QAAAJg"]
[Thu Apr 09 20:43:47.455891 2026] [:error] [pid 24624:tid 24637] [client 62.60.131.165:62650] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefA-4Jn-WvK1ZBTvjY6gAAAMs"]
[Thu Apr 09 20:43:50.426589 2026] [:error] [pid 24927:tid 24953] [client 62.60.131.165:62458] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefBjXObuzEuw8mNJshAAAAARc"]
[Thu Apr 09 20:43:50.740537 2026] [:error] [pid 24517:tid 24574] [client 62.60.131.165:62372] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefBnboYEn2ZFM_PS9-_wAAAIA"]
[Thu Apr 09 20:43:51.425287 2026] [:error] [pid 63331:tid 63353] [client 62.60.131.165:33814] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefBybKfIYuVjWbE4VoDwAAAdQ"]
[Thu Apr 09 20:43:52.535167 2026] [:error] [pid 24515:tid 24540] [client 62.60.131.165:33844] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefCK1OMnvM2fMnB1Or_AAAABU"]
[Thu Apr 09 20:43:53.618935 2026] [:error] [pid 24517:tid 24580] [client 62.60.131.165:33934] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefCXboYEn2ZFM_PS9_BAAAAIY"]
[Thu Apr 09 20:43:54.456881 2026] [:error] [pid 63331:tid 63334] [client 62.60.131.165:34044] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefCibKfIYuVjWbE4VoIQAAAcE"]
[Thu Apr 09 20:43:55.729550 2026] [:error] [pid 24515:tid 24535] [client 62.60.131.165:34150] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefC61OMnvM2fMnB1OsDAAAABA"]
[Thu Apr 09 20:43:55.736874 2026] [:error] [pid 24624:tid 24642] [client 62.60.131.165:34166] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adefC-4Jn-WvK1ZBTvjY_AAAANA"]
[Thu Apr 09 20:43:57.744774 2026] [:error] [pid 20837:tid 20862] [client 62.60.131.165:34222] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefDfSL71FHZkjrGzPtrAAAAZc"]
[Thu Apr 09 20:43:58.723510 2026] [:error] [pid 24515:tid 24527] [client 62.60.131.165:34298] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adefDq1OMnvM2fMnB1OsHwAAAAg"]
[Thu Apr 09 20:44:00.158989 2026] [:error] [pid 63331:tid 63355] [client 62.60.131.165:33792] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefECbKfIYuVjWbE4VoQAAAAdY"]
[Thu Apr 09 20:44:01.421503 2026] [:error] [pid 20837:tid 20851] [client 62.60.131.165:56338] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adefEfSL71FHZkjrGzPtswAAAYw"]
[Thu Apr 09 20:44:02.386454 2026] [:error] [pid 24515:tid 24523] [client 62.60.131.165:56418] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adefEq1OMnvM2fMnB1OsKgAAAAQ"]
[Thu Apr 09 20:44:04.693172 2026] [:error] [pid 24517:tid 24592] [client 62.60.131.165:62404] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "adefFHboYEn2ZFM_PS9_CgAAAJI"]
[Thu Apr 09 21:18:35.393569 2026] [:error] [pid 24515:tid 24523] [client 185.34.89.160:61370] [client 185.34.89.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.34.89.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adenK61OMnvM2fMnB1O_tgAAAAQ"]
[Thu Apr 09 22:12:08.448045 2026] [:error] [pid 63331:tid 63342] [client 103.171.92.176:49720] [client 103.171.92.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.171.92.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adezuCbKfIYuVjWbE4WK7gAAAck"]
[Thu Apr 09 22:12:20.252114 2026] [:error] [pid 24515:tid 24542] [client 103.171.92.176:36032] [client 103.171.92.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.171.92.176, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adezxK1OMnvM2fMnB1Pb6AAAABc"]
[Thu Apr 09 22:12:21.121562 2026] [proxy_fcgi:error] [pid 24515:tid 24542] [client 103.171.92.176:36032] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu Apr 09 22:14:53.245149 2026] [:error] [pid 24515:tid 24521] [client 62.60.131.165:62578] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0Xa1OMnvM2fMnB1PcwAAAAAI"]
[Thu Apr 09 22:14:53.248811 2026] [:error] [pid 24516:tid 24565] [client 62.60.131.165:62532] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0XdhW7vSS-UkeWCU6wgAAAFI"]
[Thu Apr 09 22:14:56.322445 2026] [:error] [pid 24515:tid 24526] [client 62.60.131.165:62718] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0YK1OMnvM2fMnB1Pc3wAAAAc"]
[Thu Apr 09 22:14:56.405753 2026] [:error] [pid 24515:tid 24530] [client 62.60.131.165:62720] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0YK1OMnvM2fMnB1Pc4gAAAAs"]
[Thu Apr 09 22:14:58.956431 2026] [:error] [pid 20837:tid 20846] [client 62.60.131.165:62592] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0YvSL71FHZkjrGzMGnAAAAYc"]
[Thu Apr 09 22:15:00.623800 2026] [:error] [pid 63331:tid 63336] [client 62.60.131.165:47506] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0ZCbKfIYuVjWbE4WLvgAAAcM"]
[Thu Apr 09 22:15:01.337666 2026] [:error] [pid 24517:tid 24577] [client 62.60.131.165:62548] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0ZXboYEn2ZFM_PS-GzwAAAIM"]
[Thu Apr 09 22:15:02.234571 2026] [:error] [pid 24515:tid 24538] [client 62.60.131.165:62528] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0Zq1OMnvM2fMnB1PdCAAAABM"]
[Thu Apr 09 22:15:03.933316 2026] [:error] [pid 24516:tid 24570] [client 62.60.131.165:47738] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "ade0Z9hW7vSS-UkeWCU60AAAAFc"]
[Thu Apr 09 22:15:03.934288 2026] [:error] [pid 18477:tid 18489] [client 62.60.131.165:47728] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0Z8De826HlFeoLPKm7QAAAUo"]
[Thu Apr 09 22:15:03.935723 2026] [:error] [pid 24516:tid 24556] [client 62.60.131.165:47744] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0Z9hW7vSS-UkeWCU60QAAAEk"]
[Thu Apr 09 22:15:05.466630 2026] [:error] [pid 20837:tid 20840] [client 62.60.131.165:47824] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "ade0afSL71FHZkjrGzMGrQAAAYE"]
[Thu Apr 09 22:15:06.815694 2026] [:error] [pid 24515:tid 24522] [client 62.60.131.165:47842] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0aq1OMnvM2fMnB1PdGgAAAAM"]
[Thu Apr 09 22:15:09.007975 2026] [:error] [pid 24515:tid 24529] [client 62.60.131.165:46618] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "ade0ba1OMnvM2fMnB1PdJgAAAAo"]
[Thu Apr 09 22:15:11.374750 2026] [:error] [pid 63331:tid 63342] [client 62.60.131.165:46710] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ade0bybKfIYuVjWbE4WL6QAAAck"]
[Thu Apr 09 22:15:13.293788 2026] [:error] [pid 63331:tid 63344] [client 62.60.131.165:46794] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "ade0cSbKfIYuVjWbE4WL-AAAAcs"]
[Thu Apr 09 23:23:31.772300 2026] [:error] [pid 24624:tid 24634] [client 170.106.84.136:37468] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adfEc-4Jn-WvK1ZBTvj7uAAAAMg"]
[Fri Apr 10 00:21:30.858928 2026] [:error] [pid 63331:tid 63347] [client 34.16.201.59:40688] [client 34.16.201.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "adfSCibKfIYuVjWbE4W1fQAAAc4"]
[Fri Apr 10 00:21:31.289346 2026] [:error] [pid 24927:tid 24930] [client 34.16.201.59:40772] [client 34.16.201.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "adfSCzXObuzEuw8mNJtDngAAAQA"]
[Fri Apr 10 00:26:03.458503 2026] [:error] [pid 63331:tid 63335] [client 209.87.169.179:55961] [client 209.87.169.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "adfTGybKfIYuVjWbE4W2JQAAAcI"]
[Fri Apr 10 03:15:25.532068 2026] [:error] [pid 29569:tid 29590] [client 185.34.89.160:59498] [client 185.34.89.160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adf6zbt9mkieWu8HPk5e1wAAAVE"]
[Fri Apr 10 03:16:29.388361 2026] [:error] [pid 36672:tid 36681] [client 185.34.89.160:61594] [client 185.34.89.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.34.89.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adf7DT99r9VLJsT_o8irFgAAAMc"]
[Fri Apr 10 06:34:38.326428 2026] [:error] [pid 12575:tid 12623] [client 43.153.10.13:52816] [client 43.153.10.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adgpfijFTOT5X6zsPClRNgAAAEE"]
[Fri Apr 10 09:55:41.387038 2026] [:error] [pid 13102:tid 13161] [client 147.135.212.202:40512] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adhYnf9xLvjW2guI55Yx-AAAAAE"]
[Fri Apr 10 09:55:43.975537 2026] [:error] [pid 13189:tid 13192] [client 147.135.212.202:41820] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adhYn5AxiJKPums3eBDlvgAAAEA"]
[Fri Apr 10 09:55:46.565198 2026] [:error] [pid 13189:tid 13206] [client 147.135.212.202:49250] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adhYopAxiJKPums3eBDlywAAAE4"]
[Fri Apr 10 09:55:49.008862 2026] [:error] [pid 13189:tid 13198] [client 147.135.212.202:49254] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adhYpZAxiJKPums3eBDl1wAAAEY"]
[Fri Apr 10 09:55:51.315011 2026] [:error] [pid 13189:tid 13216] [client 147.135.212.202:49268] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "adhYp5AxiJKPums3eBDl5wAAAFg"]
[Fri Apr 10 09:55:53.650091 2026] [:error] [pid 13189:tid 13213] [client 147.135.212.202:49272] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "adhYqZAxiJKPums3eBDl8QAAAFU"]
[Fri Apr 10 09:55:56.165731 2026] [:error] [pid 13102:tid 13169] [client 147.135.212.202:46150] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "adhYrP9xLvjW2guI55YyDAAAAAk"]
[Fri Apr 10 09:55:58.616712 2026] [:error] [pid 13101:tid 13152] [client 147.135.212.202:46156] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "adhYrt8Ldw85818pj2q6TAAAAJM"]
[Fri Apr 10 09:56:01.019622 2026] [:error] [pid 13102:tid 13168] [client 147.135.212.202:46170] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "adhYsf9xLvjW2guI55YyGAAAAAg"]
[Fri Apr 10 09:56:03.457472 2026] [:error] [pid 13189:tid 13200] [client 147.135.212.202:46184] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "adhYs5AxiJKPums3eBDmBQAAAEg"]
[Fri Apr 10 09:56:05.962601 2026] [:error] [pid 13101:tid 13154] [client 147.135.212.202:35450] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adhYtd8Ldw85818pj2q6UgAAAJU"]
[Fri Apr 10 09:56:08.258076 2026] [:error] [pid 13102:tid 13183] [client 147.135.212.202:35452] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adhYuP9xLvjW2guI55YyKwAAABc"]
[Fri Apr 10 09:56:10.693435 2026] [:error] [pid 13101:tid 13146] [client 147.135.212.202:35456] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adhYut8Ldw85818pj2q6WgAAAI0"]
[Fri Apr 10 09:56:12.980393 2026] [:error] [pid 13102:tid 13161] [client 147.135.212.202:35462] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adhYvP9xLvjW2guI55YyOAAAAAE"]
[Fri Apr 10 09:56:15.256649 2026] [:error] [pid 13102:tid 13178] [client 147.135.212.202:35470] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adhYv_9xLvjW2guI55YyPgAAABI"]
[Fri Apr 10 09:56:17.833182 2026] [:error] [pid 13189:tid 13205] [client 147.135.212.202:51200] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adhYwZAxiJKPums3eBDmDwAAAE0"]
[Fri Apr 10 09:56:20.264015 2026] [:error] [pid 13102:tid 13173] [client 147.135.212.202:51210] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adhYxP9xLvjW2guI55YyUAAAAA0"]
[Fri Apr 10 09:56:22.676103 2026] [:error] [pid 13102:tid 13181] [client 147.135.212.202:51220] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adhYxv9xLvjW2guI55YyWwAAABU"]
[Fri Apr 10 09:56:25.249934 2026] [:error] [pid 13101:tid 13139] [client 147.135.212.202:51228] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adhYyd8Ldw85818pj2q6dAAAAIY"]
[Fri Apr 10 09:56:27.813871 2026] [:error] [pid 13189:tid 13211] [client 147.135.212.202:36232] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adhYy5AxiJKPums3eBDmFwAAAFM"]
[Fri Apr 10 09:56:30.066442 2026] [:error] [pid 13189:tid 13197] [client 147.135.212.202:36240] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adhYzpAxiJKPums3eBDmJQAAAEU"]
[Fri Apr 10 09:56:32.497049 2026] [:error] [pid 13100:tid 13113] [client 147.135.212.202:36254] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adhY0Fzg-ZkZ0InWIP3KVwAAAQg"]
[Fri Apr 10 09:56:34.893970 2026] [:error] [pid 13100:tid 13110] [client 147.135.212.202:36262] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adhY0lzg-ZkZ0InWIP3KXQAAAQU"]
[Fri Apr 10 09:56:37.142627 2026] [:error] [pid 13189:tid 13211] [client 147.135.212.202:43866] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "adhY1ZAxiJKPums3eBDmMwAAAFM"]
[Fri Apr 10 09:57:08.879867 2026] [:error] [pid 13102:tid 13177] [client 147.135.212.202:43882] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "adhY9P9xLvjW2guI55Yy9AAAABE"]
[Fri Apr 10 09:57:11.203618 2026] [:error] [pid 13189:tid 13194] [client 147.135.212.202:46172] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "adhY95AxiJKPums3eBDmqgAAAEI"]
[Fri Apr 10 09:57:13.632310 2026] [:error] [pid 13102:tid 13163] [client 147.135.212.202:46186] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adhY-f9xLvjW2guI55Yy_gAAAAM"]
[Fri Apr 10 09:57:16.144154 2026] [:error] [pid 13189:tid 13211] [client 147.135.212.202:33262] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adhY_JAxiJKPums3eBDmtQAAAFM"]
[Fri Apr 10 09:57:18.548219 2026] [:error] [pid 13101:tid 13136] [client 147.135.212.202:33278] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adhY_t8Ldw85818pj2q6wwAAAIM"]
[Fri Apr 10 09:57:21.068565 2026] [:error] [pid 13100:tid 13129] [client 147.135.212.202:33286] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adhZAVzg-ZkZ0InWIP3KoQAAARg"]
[Fri Apr 10 09:57:23.587986 2026] [:error] [pid 13102:tid 13168] [client 147.135.212.202:33300] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adhZA_9xLvjW2guI55YzGwAAAAg"]
[Fri Apr 10 09:57:26.109064 2026] [:error] [pid 13189:tid 13214] [client 147.135.212.202:40166] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adhZBpAxiJKPums3eBDm2wAAAFY"]
[Fri Apr 10 09:57:28.499573 2026] [:error] [pid 13101:tid 13153] [client 147.135.212.202:40174] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adhZCN8Ldw85818pj2q6ywAAAJQ"]
[Fri Apr 10 09:57:31.019195 2026] [:error] [pid 13102:tid 13183] [client 147.135.212.202:40178] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adhZC_9xLvjW2guI55YzNwAAABc"]
[Fri Apr 10 09:57:33.532867 2026] [:error] [pid 13102:tid 13180] [client 147.135.212.202:40186] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adhZDf9xLvjW2guI55YzPwAAABQ"]
[Fri Apr 10 09:57:36.061250 2026] [:error] [pid 13189:tid 13206] [client 147.135.212.202:36736] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adhZEJAxiJKPums3eBDm_gAAAE4"]
[Fri Apr 10 09:57:38.571715 2026] [:error] [pid 13102:tid 13164] [client 147.135.212.202:36744] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adhZEv9xLvjW2guI55YzSQAAAAQ"]
[Fri Apr 10 09:57:41.088899 2026] [:error] [pid 13189:tid 13198] [client 147.135.212.202:36754] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adhZFZAxiJKPums3eBDnDgAAAEY"]
[Fri Apr 10 09:57:43.445930 2026] [:error] [pid 13101:tid 13149] [client 147.135.212.202:36762] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adhZF98Ldw85818pj2q61wAAAJA"]
[Fri Apr 10 09:57:45.992644 2026] [:error] [pid 13101:tid 13148] [client 147.135.212.202:60270] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adhZGd8Ldw85818pj2q64QAAAI8"]
[Fri Apr 10 09:57:48.527727 2026] [:error] [pid 13189:tid 13203] [client 147.135.212.202:60282] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adhZHJAxiJKPums3eBDnJAAAAEs"]
[Fri Apr 10 09:57:50.913757 2026] [:error] [pid 13101:tid 13145] [client 147.135.212.202:60284] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adhZHt8Ldw85818pj2q65AAAAIw"]
[Fri Apr 10 09:57:53.423062 2026] [:error] [pid 13101:tid 13151] [client 147.135.212.202:60292] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "adhZId8Ldw85818pj2q66QAAAJI"]
[Fri Apr 10 09:57:55.963904 2026] [:error] [pid 13102:tid 13170] [client 147.135.212.202:44228] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "adhZI_9xLvjW2guI55YzbwAAAAo"]
[Fri Apr 10 09:57:58.461733 2026] [:error] [pid 13101:tid 13142] [client 147.135.212.202:44240] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "adhZJt8Ldw85818pj2q69wAAAIk"]
[Fri Apr 10 09:58:00.970460 2026] [:error] [pid 13189:tid 13203] [client 147.135.212.202:44242] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "adhZKJAxiJKPums3eBDnRAAAAEs"]
[Fri Apr 10 09:58:03.474929 2026] [:error] [pid 13102:tid 13167] [client 147.135.212.202:44244] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adhZK_9xLvjW2guI55YzlAAAAAc"]
[Fri Apr 10 09:58:05.821062 2026] [:error] [pid 13189:tid 13197] [client 147.135.212.202:50856] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adhZLZAxiJKPums3eBDnTwAAAEU"]
[Fri Apr 10 09:58:37.543948 2026] [:error] [pid 13100:tid 13117] [client 147.135.212.202:50870] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "adhZTVzg-ZkZ0InWIP3K6wAAAQw"]
[Fri Apr 10 09:58:39.829422 2026] [:error] [pid 13189:tid 13201] [client 147.135.212.202:50874] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adhZT5AxiJKPums3eBDn3QAAAEk"]
[Fri Apr 10 09:58:42.316548 2026] [:error] [pid 13189:tid 13196] [client 147.135.212.202:50890] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "adhZUpAxiJKPums3eBDn5wAAAEQ"]
[Fri Apr 10 09:58:44.784770 2026] [:error] [pid 13102:tid 13173] [client 147.135.212.202:50892] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adhZVP9xLvjW2guI55Yz4QAAAA0"]
[Fri Apr 10 09:58:47.136475 2026] [:error] [pid 13100:tid 13122] [client 147.135.212.202:53486] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adhZV1zg-ZkZ0InWIP3K7wAAARE"]
[Fri Apr 10 09:58:49.600030 2026] [:error] [pid 13102:tid 13169] [client 147.135.212.202:53490] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adhZWf9xLvjW2guI55Yz8gAAAAk"]
[Fri Apr 10 09:58:51.919904 2026] [:error] [pid 13189:tid 13216] [client 147.135.212.202:53494] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adhZW5AxiJKPums3eBDoAgAAAFg"]
[Fri Apr 10 09:58:54.394436 2026] [:error] [pid 13100:tid 13120] [client 147.135.212.202:53502] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adhZXlzg-ZkZ0InWIP3K-AAAAQ8"]
[Fri Apr 10 09:58:56.740637 2026] [:error] [pid 13101:tid 13138] [client 147.135.212.202:34708] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "adhZYN8Ldw85818pj2q7UgAAAIU"]
[Fri Apr 10 09:58:59.298740 2026] [:error] [pid 13102:tid 13161] [client 147.135.212.202:34712] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adhZY_9xLvjW2guI55Y0BgAAAAE"]
[Fri Apr 10 09:59:01.763825 2026] [:error] [pid 13189:tid 13206] [client 147.135.212.202:34720] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "adhZZZAxiJKPums3eBDoMAAAAE4"]
[Fri Apr 10 09:59:04.297925 2026] [:error] [pid 13189:tid 13199] [client 147.135.212.202:34724] [client 147.135.212.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "adhZaJAxiJKPums3eBDoPwAAAEc"]
[Fri Apr 10 10:12:21.482986 2026] [:error] [pid 13189:tid 13192] [client 43.130.34.74:39060] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adhchZAxiJKPums3eBDy6gAAAEA"]
[Fri Apr 10 11:16:38.712094 2026] [:error] [pid 13100:tid 13105] [client 36.111.67.189:50272] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adhrllzg-ZkZ0InWIP3p_wAAAQA"]
[Fri Apr 10 15:36:13.494825 2026] [autoindex:error] [pid 3934:tid 3959] [client 212.47.78.23:52644] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 10 16:45:45.551347 2026] [:error] [pid 13101:tid 13147] [client 103.158.53.26:51738] [client 103.158.53.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.158.53.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adi4ud8Ldw85818pj2ptyQAAAI4"]
[Fri Apr 10 16:46:24.212869 2026] [:error] [pid 13100:tid 13118] [client 100.42.176.42:49338] [client 100.42.176.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 100.42.176.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adi44Fzg-ZkZ0InWIP1fHgAAAQ0"]
[Fri Apr 10 16:46:25.015193 2026] [proxy_fcgi:error] [pid 13100:tid 13118] [client 100.42.176.42:49338] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 10 16:46:25.812143 2026] [:error] [pid 13100:tid 13122] [client 100.42.176.42:49338] [client 100.42.176.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 100.42.176.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adi44Vzg-ZkZ0InWIP1fIwAAARE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 16:46:26.823312 2026] [proxy_fcgi:error] [pid 13100:tid 13122] [client 100.42.176.42:49338] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 16:59:47.858803 2026] [:error] [pid 13101:tid 13147] [client 74.91.224.220:47444] [client 74.91.224.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.91.224.220, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adi8A98Ldw85818pj2pz5QAAAI4"]
[Fri Apr 10 16:59:48.717990 2026] [proxy_fcgi:error] [pid 13101:tid 13147] [client 74.91.224.220:47444] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 10 16:59:49.256851 2026] [:error] [pid 13101:tid 13142] [client 74.91.224.220:47444] [client 74.91.224.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.91.224.220, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adi8Bd8Ldw85818pj2pz5gAAAIk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 16:59:50.512790 2026] [proxy_fcgi:error] [pid 13101:tid 13142] [client 74.91.224.220:47444] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 17:03:12.783796 2026] [:error] [pid 3934:tid 3950] [client 77.87.125.135:46842] [client 77.87.125.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.87.125.135, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adi80Ia41m-BS8mg82c0EwAAAMs"]
[Fri Apr 10 17:03:13.573255 2026] [proxy_fcgi:error] [pid 3934:tid 3950] [client 77.87.125.135:46842] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 10 17:03:14.433489 2026] [:error] [pid 3934:tid 3947] [client 77.87.125.135:46842] [client 77.87.125.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.87.125.135, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adi80oa41m-BS8mg82c0HgAAAMg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 17:03:15.450532 2026] [proxy_fcgi:error] [pid 3934:tid 3947] [client 77.87.125.135:46842] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 17:03:47.982028 2026] [:error] [pid 13189:tid 13192] [client 43.130.111.40:46416] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adi885AxiJKPums3eBAySwAAAEA"]
[Fri Apr 10 17:36:30.127707 2026] [:error] [pid 13189:tid 13214] [client 121.200.216.9:51846] [client 121.200.216.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.200.216.9, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adjEnpAxiJKPums3eBBPTAAAAFY"]
[Fri Apr 10 17:36:30.976682 2026] [proxy_fcgi:error] [pid 13189:tid 13214] [client 121.200.216.9:51846] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 10 17:36:33.916459 2026] [:error] [pid 13189:tid 13213] [client 121.200.216.9:51846] [client 121.200.216.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.200.216.9, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adjEoZAxiJKPums3eBBPVgAAAFU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 17:36:34.954380 2026] [proxy_fcgi:error] [pid 13189:tid 13213] [client 121.200.216.9:51846] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 17:50:54.723186 2026] [:error] [pid 13101:tid 13133] [client 98.159.37.18:28933] [client 98.159.37.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "adjH_t8Ldw85818pj2qOFgAAAIA"]
[Fri Apr 10 18:05:41.604726 2026] [:error] [pid 3934:tid 3940] [client 114.80.36.40:34522] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adjLdYa41m-BS8mg82d74wAAAME"]
[Fri Apr 10 20:14:09.547318 2026] [:error] [pid 25984:tid 25991] [client 43.130.32.245:53612] [client 43.130.32.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adjpkbsdbY_MC14OH17n8AAAAUI"]
[Fri Apr 10 21:33:44.093462 2026] [:error] [pid 13189:tid 13194] [client 65.254.225.211:56688] [client 65.254.225.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.211, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adj8OJAxiJKPums3eBC-qQAAAEI"]
[Fri Apr 10 21:33:44.971359 2026] [proxy_fcgi:error] [pid 13189:tid 13194] [client 65.254.225.211:56688] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 10 21:33:45.516687 2026] [:error] [pid 13189:tid 13193] [client 65.254.225.211:56688] [client 65.254.225.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.211, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adj8OZAxiJKPums3eBC-rgAAAEE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 21:33:46.527074 2026] [proxy_fcgi:error] [pid 13189:tid 13193] [client 65.254.225.211:56688] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 23:12:23.745643 2026] [:error] [pid 62769:tid 62782] [client 43.153.204.189:38850] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adkTV8WsSnfLoB8ifjCr4QAAAks"]
[Fri Apr 10 23:54:48.775987 2026] [:error] [pid 63134:tid 63156] [client 20.240.45.10:21691] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-104.php"] [unique_id "adkdSNFALqPDwWi6eJLSYwAAA9M"]
[Fri Apr 10 23:54:49.718028 2026] [:error] [pid 13189:tid 13213] [client 20.240.45.10:21740] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-104.php"] [unique_id "adkdSZAxiJKPums3eBAdNgAAAFU"]
[Fri Apr 10 23:54:50.549413 2026] [:error] [pid 62769:tid 62789] [client 20.240.45.10:41893] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-104.php"] [unique_id "adkdSsWsSnfLoB8ifjDaXwAAAlI"]
[Fri Apr 10 23:54:51.292076 2026] [:error] [pid 13101:tid 13157] [client 20.240.45.10:41020] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-104.php"] [unique_id "adkdS98Ldw85818pj2otYAAAAJg"]
[Fri Apr 10 23:54:51.988817 2026] [:error] [pid 13101:tid 13155] [client 20.240.45.10:24608] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rzki.php"] [unique_id "adkdS98Ldw85818pj2otZQAAAJY"]
[Fri Apr 10 23:54:52.752179 2026] [:error] [pid 62769:tid 62773] [client 20.240.45.10:40295] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rzki.php"] [unique_id "adkdTMWsSnfLoB8ifjDaagAAAkI"]
[Fri Apr 10 23:54:57.893532 2026] [:error] [pid 63134:tid 63145] [client 20.240.45.10:30182] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rzki.php"] [unique_id "adkdUdFALqPDwWi6eJLSbgAAA8g"]
[Fri Apr 10 23:54:59.058215 2026] [:error] [pid 13100:tid 13121] [client 20.240.45.10:40961] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rzki.php"] [unique_id "adkdU1zg-ZkZ0InWIP3WHgAAARA"]
[Fri Apr 10 23:55:00.256849 2026] [:error] [pid 62710:tid 62729] [client 20.240.45.10:18541] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "adkdVOME7qrf5xEWWJtQ3wAAAhA"]
[Fri Apr 10 23:55:01.253346 2026] [:error] [pid 62710:tid 62730] [client 20.240.45.10:21697] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "adkdVeME7qrf5xEWWJtQ4AAAAhE"]
[Fri Apr 10 23:55:02.359361 2026] [:error] [pid 63062:tid 63068] [client 20.240.45.10:41908] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "adkdVp2HtsmV85NqkMcYUAAAA4Q"]
[Fri Apr 10 23:55:03.228825 2026] [:error] [pid 63062:tid 63083] [client 20.240.45.10:30525] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "adkdV52HtsmV85NqkMcYUwAAA5M"]
[Fri Apr 10 23:55:04.167535 2026] [:error] [pid 63062:tid 63077] [client 20.240.45.10:41906] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d12.php"] [unique_id "adkdWJ2HtsmV85NqkMcYWAAAA40"]
[Fri Apr 10 23:55:04.724372 2026] [:error] [pid 62651:tid 62675] [client 20.240.45.10:30513] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d12.php"] [unique_id "adkdWDbAH0le57SIaqw97gAAAdY"]
[Fri Apr 10 23:55:05.471537 2026] [:error] [pid 63134:tid 63139] [client 20.240.45.10:18504] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d12.php"] [unique_id "adkdWdFALqPDwWi6eJLSeAAAA8I"]
[Fri Apr 10 23:55:06.477139 2026] [:error] [pid 62819:tid 62827] [client 20.240.45.10:30186] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d12.php"] [unique_id "adkdWvU20EyPf7NlsleLFgAAAoU"]
[Fri Apr 10 23:55:07.310877 2026] [:error] [pid 13189:tid 13198] [client 20.240.45.10:41031] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/okxh.php"] [unique_id "adkdW5AxiJKPums3eBAdXgAAAEY"]
[Fri Apr 10 23:55:07.863707 2026] [:error] [pid 63134:tid 63148] [client 20.240.45.10:41876] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/okxh.php"] [unique_id "adkdW9FALqPDwWi6eJLSgQAAA8s"]
[Fri Apr 10 23:55:08.440366 2026] [:error] [pid 62819:tid 62822] [client 20.240.45.10:64160] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/okxh.php"] [unique_id "adkdXPU20EyPf7NlsleLGQAAAoA"]
[Fri Apr 10 23:55:09.145098 2026] [:error] [pid 13189:tid 13205] [client 20.240.45.10:30203] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/okxh.php"] [unique_id "adkdXZAxiJKPums3eBAdcQAAAE0"]
[Fri Apr 10 23:55:09.782533 2026] [:error] [pid 13101:tid 13155] [client 20.240.45.10:18509] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/55b76.php"] [unique_id "adkdXd8Ldw85818pj2othgAAAJY"]
[Fri Apr 10 23:55:10.809576 2026] [:error] [pid 62710:tid 62733] [client 20.240.45.10:18529] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/55b76.php"] [unique_id "adkdXuME7qrf5xEWWJtQ8AAAAhQ"]
[Fri Apr 10 23:55:11.437975 2026] [:error] [pid 13101:tid 13155] [client 20.240.45.10:40311] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/55b76.php"] [unique_id "adkdX98Ldw85818pj2otlQAAAJY"]
[Fri Apr 10 23:55:12.198330 2026] [:error] [pid 13101:tid 13142] [client 20.240.45.10:41891] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/55b76.php"] [unique_id "adkdYN8Ldw85818pj2otnwAAAIk"]
[Fri Apr 10 23:55:12.754145 2026] [:error] [pid 63134:tid 63143] [client 20.240.45.10:24620] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "adkdYNFALqPDwWi6eJLSiAAAA8Y"]
[Fri Apr 10 23:55:13.498683 2026] [:error] [pid 63134:tid 63151] [client 20.240.45.10:41008] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "adkdYdFALqPDwWi6eJLSiwAAA84"]
[Fri Apr 10 23:55:14.120316 2026] [:error] [pid 63134:tid 63150] [client 20.240.45.10:40979] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "adkdYtFALqPDwWi6eJLSkAAAA80"]
[Fri Apr 10 23:55:15.266081 2026] [:error] [pid 62819:tid 62840] [client 20.240.45.10:40997] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "adkdY_U20EyPf7NlsleLHAAAApI"]
[Fri Apr 10 23:55:16.691626 2026] [:error] [pid 62819:tid 62843] [client 20.240.45.10:64130] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maul.php"] [unique_id "adkdZPU20EyPf7NlsleLJQAAApU"]
[Fri Apr 10 23:55:17.905942 2026] [:error] [pid 62819:tid 62826] [client 20.240.45.10:24625] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maul.php"] [unique_id "adkdZfU20EyPf7NlsleLKwAAAoQ"]
[Fri Apr 10 23:55:18.898057 2026] [:error] [pid 62819:tid 62835] [client 20.240.45.10:30160] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maul.php"] [unique_id "adkdZvU20EyPf7NlsleLLwAAAo0"]
[Fri Apr 10 23:55:19.670044 2026] [:error] [pid 62819:tid 62830] [client 20.240.45.10:21713] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maul.php"] [unique_id "adkdZ_U20EyPf7NlsleLMQAAAog"]
[Fri Apr 10 23:55:20.275414 2026] [:error] [pid 13101:tid 13141] [client 20.240.45.10:41059] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5b9ac.php"] [unique_id "adkdaN8Ldw85818pj2otsQAAAIg"]
[Fri Apr 10 23:55:21.398728 2026] [:error] [pid 62651:tid 62666] [client 20.240.45.10:24136] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5b9ac.php"] [unique_id "adkdaTbAH0le57SIaqw9-wAAAc0"]
[Fri Apr 10 23:55:21.992918 2026] [:error] [pid 13101:tid 13149] [client 20.240.45.10:24600] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5b9ac.php"] [unique_id "adkdad8Ldw85818pj2otswAAAJA"]
[Fri Apr 10 23:55:23.320635 2026] [:error] [pid 13101:tid 13138] [client 20.240.45.10:30200] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5b9ac.php"] [unique_id "adkda98Ldw85818pj2otuwAAAIU"]
[Fri Apr 10 23:55:24.120747 2026] [:error] [pid 13101:tid 13145] [client 20.240.45.10:21646] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hehe.php"] [unique_id "adkdbN8Ldw85818pj2otwAAAAIw"]
[Fri Apr 10 23:55:24.765932 2026] [:error] [pid 62819:tid 62823] [client 20.240.45.10:64171] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hehe.php"] [unique_id "adkdbPU20EyPf7NlsleLRAAAAoE"]
[Fri Apr 10 23:55:25.369873 2026] [:error] [pid 62819:tid 62844] [client 20.240.45.10:62259] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hehe.php"] [unique_id "adkdbfU20EyPf7NlsleLSQAAApY"]
[Fri Apr 10 23:55:27.838358 2026] [:error] [pid 62769:tid 62795] [client 20.240.45.10:21664] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hehe.php"] [unique_id "adkdb8WsSnfLoB8ifjDaswAAAlg"]
[Fri Apr 10 23:55:28.604355 2026] [:error] [pid 63134:tid 63159] [client 20.240.45.10:21757] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "adkdcNFALqPDwWi6eJLSpAAAA9Y"]
[Fri Apr 10 23:55:29.468704 2026] [:error] [pid 62819:tid 62836] [client 20.240.45.10:41028] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "adkdcfU20EyPf7NlsleLVAAAAo4"]
[Fri Apr 10 23:55:30.117398 2026] [:error] [pid 13101:tid 13152] [client 20.240.45.10:21658] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "adkdct8Ldw85818pj2ot0wAAAJM"]
[Fri Apr 10 23:55:30.930430 2026] [:error] [pid 13189:tid 13200] [client 20.240.45.10:18525] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "adkdcpAxiJKPums3eBAdlQAAAEg"]
[Fri Apr 10 23:55:31.755154 2026] [:error] [pid 62769:tid 62778] [client 20.240.45.10:21747] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/varb.php"] [unique_id "adkdc8WsSnfLoB8ifjDatgAAAkc"]
[Fri Apr 10 23:55:33.025289 2026] [:error] [pid 13101:tid 13138] [client 20.240.45.10:62220] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/varb.php"] [unique_id "adkddd8Ldw85818pj2ot1wAAAIU"]
[Fri Apr 10 23:55:33.879754 2026] [:error] [pid 63134:tid 63137] [client 20.240.45.10:24140] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/varb.php"] [unique_id "adkdddFALqPDwWi6eJLSqAAAA8A"]
[Fri Apr 10 23:55:34.862723 2026] [:error] [pid 62710:tid 62717] [client 20.240.45.10:41879] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/varb.php"] [unique_id "adkdduME7qrf5xEWWJtRFgAAAgQ"]
[Fri Apr 10 23:55:35.880869 2026] [:error] [pid 13101:tid 13151] [client 20.240.45.10:24128] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lm15.php"] [unique_id "adkdd98Ldw85818pj2ot5QAAAJI"]
[Fri Apr 10 23:55:36.957415 2026] [:error] [pid 63062:tid 63088] [client 20.240.45.10:41033] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lm15.php"] [unique_id "adkdeJ2HtsmV85NqkMcYfwAAA5g"]
[Fri Apr 10 23:55:37.721505 2026] [:error] [pid 62769:tid 62782] [client 20.240.45.10:41892] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lm15.php"] [unique_id "adkdecWsSnfLoB8ifjDaxQAAAks"]
[Fri Apr 10 23:55:38.360956 2026] [:error] [pid 13100:tid 13110] [client 20.240.45.10:64144] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lm15.php"] [unique_id "adkdelzg-ZkZ0InWIP3WMgAAAQU"]
[Fri Apr 10 23:55:40.118122 2026] [:error] [pid 62769:tid 62780] [client 20.240.45.10:30162] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clss.php"] [unique_id "adkdfMWsSnfLoB8ifjDazAAAAkk"]
[Fri Apr 10 23:55:41.663211 2026] [:error] [pid 62710:tid 62727] [client 20.240.45.10:24149] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clss.php"] [unique_id "adkdfeME7qrf5xEWWJtRGQAAAg4"]
[Fri Apr 10 23:55:42.605877 2026] [:error] [pid 62769:tid 62795] [client 20.240.45.10:30477] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clss.php"] [unique_id "adkdfsWsSnfLoB8ifjDa3AAAAlg"]
[Fri Apr 10 23:55:43.912068 2026] [:error] [pid 62769:tid 62784] [client 20.240.45.10:21655] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clss.php"] [unique_id "adkdf8WsSnfLoB8ifjDa3wAAAk0"]
[Fri Apr 10 23:55:44.606003 2026] [:error] [pid 62769:tid 62791] [client 20.240.45.10:30190] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/44.php"] [unique_id "adkdgMWsSnfLoB8ifjDa5QAAAlQ"]
[Fri Apr 10 23:55:45.337522 2026] [:error] [pid 62884:tid 62901] [client 20.240.45.10:21643] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/44.php"] [unique_id "adkdgeUCK1xrhnnmpo2fZAAAAso"]
[Fri Apr 10 23:55:45.958424 2026] [:error] [pid 62710:tid 62720] [client 20.240.45.10:62225] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/44.php"] [unique_id "adkdgeME7qrf5xEWWJtRHgAAAgc"]
[Fri Apr 10 23:55:46.583656 2026] [:error] [pid 13189:tid 13215] [client 20.240.45.10:40985] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/44.php"] [unique_id "adkdgpAxiJKPums3eBAdtQAAAFc"]
[Fri Apr 10 23:56:01.443602 2026] [:error] [pid 62769:tid 62771] [client 20.240.45.10:21659] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adkdkcWsSnfLoB8ifjDbOAAAAkA"]
[Fri Apr 10 23:56:03.530951 2026] [:error] [pid 62710:tid 62726] [client 20.240.45.10:62248] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adkdk-ME7qrf5xEWWJtRMwAAAg0"]
[Fri Apr 10 23:56:04.103905 2026] [:error] [pid 62819:tid 62834] [client 20.240.45.10:64146] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adkdlPU20EyPf7NlsleLaQAAAow"]
[Fri Apr 10 23:56:04.984675 2026] [:error] [pid 62769:tid 62788] [client 20.240.45.10:17436] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adkdlMWsSnfLoB8ifjDbRQAAAlE"]
[Fri Apr 10 23:56:05.766342 2026] [:error] [pid 13100:tid 13129] [client 20.240.45.10:14410] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfd.php"] [unique_id "adkdlVzg-ZkZ0InWIP3WPAAAARg"]
[Fri Apr 10 23:56:06.403485 2026] [:error] [pid 62769:tid 62772] [client 20.240.45.10:24161] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfd.php"] [unique_id "adkdlsWsSnfLoB8ifjDbTQAAAkE"]
[Fri Apr 10 23:56:07.077700 2026] [:error] [pid 62884:tid 62897] [client 20.240.45.10:41913] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfd.php"] [unique_id "adkdl-UCK1xrhnnmpo2fawAAAsY"]
[Fri Apr 10 23:56:08.069451 2026] [:error] [pid 62710:tid 62719] [client 20.240.45.10:40290] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gfd.php"] [unique_id "adkdmOME7qrf5xEWWJtROAAAAgY"]
[Fri Apr 10 23:56:08.848114 2026] [:error] [pid 62884:tid 62893] [client 20.240.45.10:41042] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/callback.php"] [unique_id "adkdmOUCK1xrhnnmpo2fdwAAAsI"]
[Fri Apr 10 23:56:09.581134 2026] [:error] [pid 13100:tid 13125] [client 20.240.45.10:18538] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/callback.php"] [unique_id "adkdmVzg-ZkZ0InWIP3WPgAAARQ"]
[Fri Apr 10 23:56:10.795284 2026] [:error] [pid 13189:tid 13215] [client 20.240.45.10:12525] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/callback.php"] [unique_id "adkdmpAxiJKPums3eBAeCgAAAFc"]
[Fri Apr 10 23:56:11.386405 2026] [:error] [pid 62710:tid 62728] [client 20.240.45.10:24188] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/callback.php"] [unique_id "adkdm-ME7qrf5xEWWJtRPwAAAg8"]
[Fri Apr 10 23:56:12.052040 2026] [:error] [pid 62769:tid 62790] [client 20.240.45.10:41909] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "adkdnMWsSnfLoB8ifjDbVwAAAlM"]
[Fri Apr 10 23:56:12.741138 2026] [:error] [pid 13189:tid 13197] [client 20.240.45.10:41856] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "adkdnJAxiJKPums3eBAeEAAAAEU"]
[Fri Apr 10 23:56:13.413475 2026] [:error] [pid 62710:tid 62717] [client 20.240.45.10:21679] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "adkdneME7qrf5xEWWJtRRAAAAgQ"]
[Fri Apr 10 23:56:14.090711 2026] [:error] [pid 62769:tid 62793] [client 20.240.45.10:24587] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "adkdnsWsSnfLoB8ifjDbaAAAAlY"]
[Fri Apr 10 23:56:14.744597 2026] [:error] [pid 62710:tid 62725] [client 20.240.45.10:41040] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "adkdnuME7qrf5xEWWJtRRQAAAgw"]
[Fri Apr 10 23:56:15.538087 2026] [:error] [pid 13189:tid 13204] [client 20.240.45.10:21704] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "adkdn5AxiJKPums3eBAeEwAAAEw"]
[Fri Apr 10 23:56:16.240781 2026] [:error] [pid 62769:tid 62775] [client 20.240.45.10:30152] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "adkdoMWsSnfLoB8ifjDbdwAAAkQ"]
[Fri Apr 10 23:56:16.962226 2026] [:error] [pid 62710:tid 62735] [client 20.240.45.10:62240] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "adkdoOME7qrf5xEWWJtRSQAAAhY"]
[Fri Apr 10 23:56:17.633516 2026] [:error] [pid 13189:tid 13209] [client 20.240.45.10:21686] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "adkdoZAxiJKPums3eBAeFQAAAFE"]
[Fri Apr 10 23:56:18.437866 2026] [:error] [pid 13189:tid 13210] [client 20.240.45.10:41060] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "adkdopAxiJKPums3eBAeGQAAAFI"]
[Fri Apr 10 23:56:19.123149 2026] [:error] [pid 13189:tid 13196] [client 20.240.45.10:40257] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "adkdo5AxiJKPums3eBAeGwAAAEQ"]
[Fri Apr 10 23:56:20.300969 2026] [:error] [pid 13101:tid 13156] [client 20.240.45.10:41901] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blogs.php"] [unique_id "adkdpN8Ldw85818pj2ouFwAAAJc"]
[Fri Apr 10 23:56:20.928645 2026] [:error] [pid 63134:tid 63161] [client 20.240.45.10:64131] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zlnckdxn.php"] [unique_id "adkdpNFALqPDwWi6eJLS0QAAA9g"]
[Fri Apr 10 23:56:21.684660 2026] [:error] [pid 62769:tid 62791] [client 20.240.45.10:40974] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zlnckdxn.php"] [unique_id "adkdpcWsSnfLoB8ifjDbpAAAAlQ"]
[Fri Apr 10 23:56:23.384560 2026] [:error] [pid 62769:tid 62785] [client 20.240.45.10:41056] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zlnckdxn.php"] [unique_id "adkdp8WsSnfLoB8ifjDbtAAAAk4"]
[Fri Apr 10 23:56:23.993230 2026] [:error] [pid 62651:tid 62655] [client 20.240.45.10:62239] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zlnckdxn.php"] [unique_id "adkdpzbAH0le57SIaqw-GgAAAcI"]
[Fri Apr 10 23:56:24.638973 2026] [:error] [pid 62769:tid 62790] [client 20.240.45.10:24131] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs6.php"] [unique_id "adkdqMWsSnfLoB8ifjDbwwAAAlM"]
[Fri Apr 10 23:56:25.736464 2026] [:error] [pid 62769:tid 62772] [client 20.240.45.10:41892] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs6.php"] [unique_id "adkdqcWsSnfLoB8ifjDbygAAAkE"]
[Fri Apr 10 23:56:26.674910 2026] [:error] [pid 63062:tid 63068] [client 20.240.45.10:24583] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs6.php"] [unique_id "adkdqp2HtsmV85NqkMcYuAAAA4Q"]
[Fri Apr 10 23:56:28.913426 2026] [:error] [pid 62769:tid 62785] [client 20.240.45.10:40319] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs6.php"] [unique_id "adkdrMWsSnfLoB8ifjDb3gAAAk4"]
[Fri Apr 10 23:56:29.528177 2026] [:error] [pid 13189:tid 13208] [client 20.240.45.10:24145] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwzs.php"] [unique_id "adkdrZAxiJKPums3eBAeLwAAAFA"]
[Fri Apr 10 23:56:30.119049 2026] [:error] [pid 62769:tid 62791] [client 20.240.45.10:21696] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwzs.php"] [unique_id "adkdrsWsSnfLoB8ifjDb5gAAAlQ"]
[Fri Apr 10 23:56:30.856860 2026] [:error] [pid 62710:tid 62733] [client 20.240.45.10:30172] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwzs.php"] [unique_id "adkdruME7qrf5xEWWJtRXAAAAhQ"]
[Fri Apr 10 23:56:31.477793 2026] [:error] [pid 13100:tid 13123] [client 20.240.45.10:30518] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwzs.php"] [unique_id "adkdr1zg-ZkZ0InWIP3WdgAAARI"]
[Fri Apr 10 23:56:32.033612 2026] [:error] [pid 13101:tid 13157] [client 20.240.45.10:30156] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/users.php"] [unique_id "adkdsN8Ldw85818pj2ouHgAAAJg"]
[Fri Apr 10 23:56:32.731759 2026] [:error] [pid 13101:tid 13151] [client 20.240.45.10:24182] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/users.php"] [unique_id "adkdsN8Ldw85818pj2ouIQAAAJI"]
[Fri Apr 10 23:56:33.479408 2026] [:error] [pid 62769:tid 62776] [client 20.240.45.10:24578] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/users.php"] [unique_id "adkdscWsSnfLoB8ifjDb-QAAAkU"]
[Fri Apr 10 23:56:34.132187 2026] [:error] [pid 13101:tid 13142] [client 20.240.45.10:24134] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/users.php"] [unique_id "adkdst8Ldw85818pj2ouJAAAAIk"]
[Fri Apr 10 23:56:34.747883 2026] [:error] [pid 13101:tid 13146] [client 20.240.45.10:24605] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "adkdst8Ldw85818pj2ouJgAAAI0"]
[Fri Apr 10 23:56:35.819087 2026] [:error] [pid 13101:tid 13134] [client 20.240.45.10:24588] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "adkds98Ldw85818pj2ouLAAAAIE"]
[Fri Apr 10 23:56:36.513660 2026] [:error] [pid 62884:tid 62895] [client 20.240.45.10:12800] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "adkdtOUCK1xrhnnmpo2figAAAsQ"]
[Fri Apr 10 23:56:37.309502 2026] [:error] [pid 62651:tid 62655] [client 20.240.45.10:21639] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "adkdtTbAH0le57SIaqw-JgAAAcI"]
[Fri Apr 10 23:56:38.570266 2026] [:error] [pid 62884:tid 62892] [client 20.240.45.10:40314] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewe.php"] [unique_id "adkdtuUCK1xrhnnmpo2fiwAAAsE"]
[Fri Apr 10 23:56:39.688643 2026] [:error] [pid 13189:tid 13207] [client 20.240.45.10:12488] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewe.php"] [unique_id "adkdt5AxiJKPums3eBAeRwAAAE8"]
[Fri Apr 10 23:56:40.552457 2026] [:error] [pid 63062:tid 63080] [client 20.240.45.10:21643] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewe.php"] [unique_id "adkduJ2HtsmV85NqkMcYxAAAA5A"]
[Fri Apr 10 23:56:41.447849 2026] [:error] [pid 13189:tid 13214] [client 20.240.45.10:62930] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewe.php"] [unique_id "adkduZAxiJKPums3eBAeSwAAAFY"]
[Fri Apr 10 23:56:42.082467 2026] [:error] [pid 62884:tid 62905] [client 20.240.45.10:62257] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "adkduuUCK1xrhnnmpo2fjwAAAs4"]
[Fri Apr 10 23:56:42.710897 2026] [:error] [pid 13189:tid 13192] [client 20.240.45.10:41036] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "adkdupAxiJKPums3eBAeUAAAAEA"]
[Fri Apr 10 23:56:43.457254 2026] [:error] [pid 62819:tid 62838] [client 20.240.45.10:40283] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "adkdu_U20EyPf7NlsleLgwAAApA"]
[Fri Apr 10 23:56:44.880933 2026] [:error] [pid 13189:tid 13204] [client 20.240.45.10:64179] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "adkdvJAxiJKPums3eBAeVgAAAEw"]
[Fri Apr 10 23:56:45.624587 2026] [:error] [pid 62819:tid 62833] [client 20.240.45.10:30179] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x9.php"] [unique_id "adkdvfU20EyPf7NlsleLhwAAAos"]
[Fri Apr 10 23:56:46.265902 2026] [:error] [pid 13100:tid 13119] [client 20.240.45.10:40969] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x9.php"] [unique_id "adkdvlzg-ZkZ0InWIP3WmwAAAQ4"]
[Fri Apr 10 23:56:47.025971 2026] [:error] [pid 62884:tid 62915] [client 20.240.45.10:40299] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x9.php"] [unique_id "adkdv-UCK1xrhnnmpo2fmgAAAtg"]
[Fri Apr 10 23:56:47.775566 2026] [:error] [pid 62710:tid 62718] [client 20.240.45.10:40286] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x9.php"] [unique_id "adkdv-ME7qrf5xEWWJtRewAAAgU"]
[Fri Apr 10 23:56:48.617322 2026] [:error] [pid 62819:tid 62841] [client 20.240.45.10:21729] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "adkdwPU20EyPf7NlsleLjgAAApM"]
[Fri Apr 10 23:56:49.172230 2026] [:error] [pid 13101:tid 13138] [client 20.240.45.10:40996] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "adkdwd8Ldw85818pj2ouSAAAAIU"]
[Fri Apr 10 23:56:49.981820 2026] [:error] [pid 62651:tid 62677] [client 20.240.45.10:41039] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "adkdwTbAH0le57SIaqw-NgAAAdg"]
[Fri Apr 10 23:56:51.029404 2026] [:error] [pid 13101:tid 13140] [client 20.240.45.10:18547] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an.php"] [unique_id "adkdw98Ldw85818pj2ouSgAAAIc"]
[Fri Apr 10 23:56:51.644953 2026] [:error] [pid 62884:tid 62913] [client 20.240.45.10:41902] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboutc.php"] [unique_id "adkdw-UCK1xrhnnmpo2fnAAAAtY"]
[Fri Apr 10 23:56:52.426289 2026] [:error] [pid 13101:tid 13146] [client 20.240.45.10:24186] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboutc.php"] [unique_id "adkdxN8Ldw85818pj2ouTwAAAI0"]
[Fri Apr 10 23:56:53.030456 2026] [:error] [pid 62769:tid 62785] [client 20.240.45.10:40288] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboutc.php"] [unique_id "adkdxcWsSnfLoB8ifjDcLgAAAk4"]
[Fri Apr 10 23:56:53.896761 2026] [:error] [pid 13101:tid 13146] [client 20.240.45.10:24150] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboutc.php"] [unique_id "adkdxd8Ldw85818pj2ouXQAAAI0"]
[Fri Apr 10 23:56:54.525209 2026] [:error] [pid 62710:tid 62731] [client 20.240.45.10:21752] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "adkdxuME7qrf5xEWWJtRhgAAAhI"]
[Fri Apr 10 23:56:55.389529 2026] [:error] [pid 62651:tid 62656] [client 20.240.45.10:30478] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "adkdxzbAH0le57SIaqw-OwAAAcM"]
[Fri Apr 10 23:56:55.987231 2026] [:error] [pid 62884:tid 62902] [client 20.240.45.10:64176] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "adkdx-UCK1xrhnnmpo2foQAAAss"]
[Fri Apr 10 23:56:56.546520 2026] [:error] [pid 62769:tid 62775] [client 20.240.45.10:24614] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdn.php"] [unique_id "adkdyMWsSnfLoB8ifjDcOgAAAkQ"]
[Fri Apr 10 23:56:57.199277 2026] [:error] [pid 62651:tid 62655] [client 20.240.45.10:24611] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "adkdyTbAH0le57SIaqw-PgAAAcI"]
[Fri Apr 10 23:56:58.071199 2026] [:error] [pid 62884:tid 62904] [client 20.240.45.10:41884] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "adkdyuUCK1xrhnnmpo2fqgAAAs0"]
[Fri Apr 10 23:56:58.739738 2026] [:error] [pid 13189:tid 13205] [client 20.240.45.10:41074] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "adkdypAxiJKPums3eBAeYwAAAE0"]
[Fri Apr 10 23:56:59.359165 2026] [:error] [pid 62769:tid 62787] [client 20.240.45.10:41907] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/first.php"] [unique_id "adkdy8WsSnfLoB8ifjDcSQAAAlA"]
[Fri Apr 10 23:57:14.648456 2026] [:error] [pid 13189:tid 13214] [client 20.240.45.10:64129] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws61.php"] [unique_id "adkd2pAxiJKPums3eBAesAAAAFY"]
[Fri Apr 10 23:57:15.672966 2026] [:error] [pid 62769:tid 62790] [client 20.240.45.10:30498] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws61.php"] [unique_id "adkd28WsSnfLoB8ifjDcagAAAlM"]
[Fri Apr 10 23:57:16.766987 2026] [:error] [pid 13189:tid 13213] [client 20.240.45.10:21637] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws61.php"] [unique_id "adkd3JAxiJKPums3eBAevQAAAFU"]
[Fri Apr 10 23:57:17.543425 2026] [:error] [pid 63134:tid 63145] [client 20.240.45.10:18535] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws61.php"] [unique_id "adkd3dFALqPDwWi6eJLTJQAAA8g"]
[Fri Apr 10 23:57:18.884586 2026] [:error] [pid 13101:tid 13151] [client 20.240.45.10:64187] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iyy.php"] [unique_id "adkd3t8Ldw85818pj2ouoQAAAJI"]
[Fri Apr 10 23:57:19.626910 2026] [:error] [pid 62769:tid 62786] [client 20.240.45.10:30475] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iyy.php"] [unique_id "adkd38WsSnfLoB8ifjDcgAAAAk8"]
[Fri Apr 10 23:57:20.375365 2026] [:error] [pid 63134:tid 63138] [client 20.240.45.10:21723] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iyy.php"] [unique_id "adkd4NFALqPDwWi6eJLTLgAAA8E"]
[Fri Apr 10 23:57:20.968892 2026] [:error] [pid 62769:tid 62792] [client 20.240.45.10:12537] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iyy.php"] [unique_id "adkd4MWsSnfLoB8ifjDchwAAAlU"]
[Fri Apr 10 23:57:21.556174 2026] [:error] [pid 13189:tid 13192] [client 20.240.45.10:40262] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/900.php"] [unique_id "adkd4ZAxiJKPums3eBAeywAAAEA"]
[Fri Apr 10 23:57:23.071166 2026] [:error] [pid 13101:tid 13151] [client 20.240.45.10:41002] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/900.php"] [unique_id "adkd498Ldw85818pj2ousQAAAJI"]
[Fri Apr 10 23:57:23.722537 2026] [:error] [pid 63062:tid 63071] [client 20.240.45.10:21759] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/900.php"] [unique_id "adkd452HtsmV85NqkMcY8gAAA4c"]
[Fri Apr 10 23:57:24.253732 2026] [:error] [pid 63134:tid 63151] [client 20.240.45.10:30482] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/900.php"] [unique_id "adkd5NFALqPDwWi6eJLTOAAAA84"]
[Fri Apr 10 23:57:24.785314 2026] [:error] [pid 13101:tid 13154] [client 20.240.45.10:41872] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blsvgeyaza.php"] [unique_id "adkd5N8Ldw85818pj2ousgAAAJU"]
[Fri Apr 10 23:57:25.505805 2026] [:error] [pid 62651:tid 62666] [client 20.240.45.10:30167] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blsvgeyaza.php"] [unique_id "adkd5TbAH0le57SIaqw-SwAAAc0"]
[Fri Apr 10 23:57:26.108647 2026] [:error] [pid 62710:tid 62723] [client 20.240.45.10:24632] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blsvgeyaza.php"] [unique_id "adkd5uME7qrf5xEWWJtRlAAAAgo"]
[Fri Apr 10 23:57:26.647190 2026] [:error] [pid 13101:tid 13148] [client 20.240.45.10:40965] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blsvgeyaza.php"] [unique_id "adkd5t8Ldw85818pj2ouugAAAI8"]
[Fri Apr 10 23:57:27.250829 2026] [:error] [pid 62769:tid 62791] [client 20.240.45.10:64135] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gqhyti.php"] [unique_id "adkd58WsSnfLoB8ifjDciwAAAlQ"]
[Fri Apr 10 23:57:27.775939 2026] [:error] [pid 62884:tid 62905] [client 20.240.45.10:62209] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gqhyti.php"] [unique_id "adkd5-UCK1xrhnnmpo2fuQAAAs4"]
[Fri Apr 10 23:57:28.486879 2026] [:error] [pid 13189:tid 13216] [client 20.240.45.10:62226] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gqhyti.php"] [unique_id "adkd6JAxiJKPums3eBAe5AAAAFg"]
[Fri Apr 10 23:57:30.084730 2026] [:error] [pid 62819:tid 62829] [client 20.240.45.10:62242] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gqhyti.php"] [unique_id "adkd6vU20EyPf7NlsleLnwAAAoc"]
[Fri Apr 10 23:57:43.925879 2026] [:error] [pid 62769:tid 62791] [client 20.240.45.10:18517] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoxxi.php"] [unique_id "adkd98WsSnfLoB8ifjDcqwAAAlQ"]
[Fri Apr 10 23:57:55.265083 2026] [:error] [pid 62651:tid 62666] [client 20.240.45.10:41917] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1144452145_error_log.php"] [unique_id "adkeAzbAH0le57SIaqw-ZAAAAc0"]
[Fri Apr 10 23:57:56.285352 2026] [:error] [pid 13189:tid 13197] [client 20.240.45.10:24633] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1144452145_error_log.php"] [unique_id "adkeBJAxiJKPums3eBAfLAAAAEU"]
[Fri Apr 10 23:57:56.957765 2026] [:error] [pid 13189:tid 13207] [client 20.240.45.10:14404] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1144452145_error_log.php"] [unique_id "adkeBJAxiJKPums3eBAfNAAAAE8"]
[Fri Apr 10 23:57:57.698348 2026] [:error] [pid 62710:tid 62734] [client 20.240.45.10:41863] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1144452145_error_log.php"] [unique_id "adkeBeME7qrf5xEWWJtRsgAAAhU"]
[Fri Apr 10 23:57:58.283832 2026] [:error] [pid 62884:tid 62907] [client 20.240.45.10:64715] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws48.php"] [unique_id "adkeBuUCK1xrhnnmpo2fxQAAAtA"]
[Fri Apr 10 23:57:58.837746 2026] [:error] [pid 13189:tid 13197] [client 20.240.45.10:21707] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws48.php"] [unique_id "adkeBpAxiJKPums3eBAfOgAAAEU"]
[Fri Apr 10 23:57:59.603821 2026] [:error] [pid 62884:tid 62900] [client 20.240.45.10:64169] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws48.php"] [unique_id "adkeB-UCK1xrhnnmpo2fyAAAAsk"]
[Fri Apr 10 23:58:00.199200 2026] [:error] [pid 13101:tid 13156] [client 20.240.45.10:21722] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws48.php"] [unique_id "adkeCN8Ldw85818pj2ou7QAAAJc"]
[Fri Apr 10 23:58:00.919141 2026] [:error] [pid 13189:tid 13216] [client 20.240.45.10:24147] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asyn-upload.php"] [unique_id "adkeCJAxiJKPums3eBAfOwAAAFg"]
[Fri Apr 10 23:58:01.504035 2026] [:error] [pid 63062:tid 63083] [client 20.240.45.10:64140] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asyn-upload.php"] [unique_id "adkeCZ2HtsmV85NqkMcZAgAAA5M"]
[Fri Apr 10 23:58:02.134890 2026] [:error] [pid 62884:tid 62899] [client 20.240.45.10:40318] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asyn-upload.php"] [unique_id "adkeCuUCK1xrhnnmpo2fyQAAAsg"]
[Fri Apr 10 23:58:02.729330 2026] [:error] [pid 63062:tid 63077] [client 20.240.45.10:30165] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asyn-upload.php"] [unique_id "adkeCp2HtsmV85NqkMcZBgAAA40"]
[Fri Apr 10 23:58:03.286639 2026] [:error] [pid 62769:tid 62771] [client 20.240.45.10:21709] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schallfuns.php"] [unique_id "adkeC8WsSnfLoB8ifjDc9QAAAkA"]
[Fri Apr 10 23:58:03.836821 2026] [:error] [pid 62769:tid 62794] [client 20.240.45.10:62252] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schallfuns.php"] [unique_id "adkeC8WsSnfLoB8ifjDc9wAAAlc"]
[Fri Apr 10 23:58:04.362657 2026] [:error] [pid 62710:tid 62719] [client 20.240.45.10:40297] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schallfuns.php"] [unique_id "adkeDOME7qrf5xEWWJtRuwAAAgY"]
[Fri Apr 10 23:58:04.918924 2026] [:error] [pid 13189:tid 13213] [client 20.240.45.10:30149] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schallfuns.php"] [unique_id "adkeDJAxiJKPums3eBAfRwAAAFU"]
[Fri Apr 10 23:58:05.503411 2026] [:error] [pid 63134:tid 63160] [client 20.240.45.10:21648] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "adkeDdFALqPDwWi6eJLTZAAAA9c"]
[Fri Apr 10 23:58:06.120016 2026] [:error] [pid 13189:tid 13200] [client 20.240.45.10:24610] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "adkeDpAxiJKPums3eBAfSwAAAEg"]
[Fri Apr 10 23:58:06.731406 2026] [:error] [pid 13189:tid 13193] [client 20.240.45.10:40293] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "adkeDpAxiJKPums3eBAfUgAAAEE"]
[Fri Apr 10 23:58:07.302302 2026] [:error] [pid 13189:tid 13209] [client 20.240.45.10:30514] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "adkeD5AxiJKPums3eBAfVgAAAFE"]
[Fri Apr 10 23:58:08.025737 2026] [:error] [pid 13189:tid 13194] [client 20.240.45.10:18498] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clasa99.php"] [unique_id "adkeEJAxiJKPums3eBAfWwAAAEI"]
[Fri Apr 10 23:58:08.866111 2026] [:error] [pid 13189:tid 13201] [client 20.240.45.10:21754] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clasa99.php"] [unique_id "adkeEJAxiJKPums3eBAfZQAAAEk"]
[Fri Apr 10 23:58:09.459981 2026] [:error] [pid 13189:tid 13200] [client 20.240.45.10:21734] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clasa99.php"] [unique_id "adkeEZAxiJKPums3eBAfaQAAAEg"]
[Fri Apr 10 23:58:09.995341 2026] [:error] [pid 13189:tid 13211] [client 20.240.45.10:64180] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clasa99.php"] [unique_id "adkeEZAxiJKPums3eBAfbgAAAFM"]
[Fri Apr 10 23:58:10.690508 2026] [:error] [pid 13101:tid 13143] [client 20.240.45.10:30170] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfilexxx.php"] [unique_id "adkeEt8Ldw85818pj2ou_wAAAIo"]
[Fri Apr 10 23:58:11.281128 2026] [:error] [pid 62769:tid 62790] [client 20.240.45.10:62229] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfilexxx.php"] [unique_id "adkeE8WsSnfLoB8ifjDdAQAAAlM"]
[Fri Apr 10 23:58:11.938742 2026] [:error] [pid 62769:tid 62781] [client 20.240.45.10:18505] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfilexxx.php"] [unique_id "adkeE8WsSnfLoB8ifjDdBgAAAko"]
[Fri Apr 10 23:58:12.478695 2026] [:error] [pid 13101:tid 13147] [client 20.240.45.10:41859] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfilexxx.php"] [unique_id "adkeFN8Ldw85818pj2ovAwAAAI4"]
[Fri Apr 10 23:58:42.228187 2026] [:error] [pid 13189:tid 13197] [client 20.240.45.10:21727] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.qiodetme.php"] [unique_id "adkeMpAxiJKPums3eBAfvgAAAEU"]
[Fri Apr 10 23:58:42.872060 2026] [:error] [pid 62769:tid 62774] [client 20.240.45.10:21703] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.qiodetme.php"] [unique_id "adkeMsWsSnfLoB8ifjDdmAAAAkM"]
[Fri Apr 10 23:58:43.610470 2026] [:error] [pid 62769:tid 62793] [client 20.240.45.10:21636] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.qiodetme.php"] [unique_id "adkeM8WsSnfLoB8ifjDdngAAAlY"]
[Fri Apr 10 23:58:44.418861 2026] [:error] [pid 63062:tid 63066] [client 20.240.45.10:14735] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.qiodetme.php"] [unique_id "adkeNJ2HtsmV85NqkMcZHQAAA4I"]
[Fri Apr 10 23:58:45.109105 2026] [:error] [pid 62819:tid 62840] [client 20.240.45.10:24184] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sodas.php"] [unique_id "adkeNfU20EyPf7NlsleLvQAAApI"]
[Fri Apr 10 23:58:45.646086 2026] [:error] [pid 62884:tid 62892] [client 20.240.45.10:17414] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sodas.php"] [unique_id "adkeNeUCK1xrhnnmpo2f2QAAAsE"]
[Fri Apr 10 23:58:46.417205 2026] [:error] [pid 13189:tid 13206] [client 20.240.45.10:64807] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sodas.php"] [unique_id "adkeNpAxiJKPums3eBAfwwAAAE4"]
[Fri Apr 10 23:58:47.381739 2026] [:error] [pid 13101:tid 13147] [client 20.240.45.10:30485] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sodas.php"] [unique_id "adkeN98Ldw85818pj2ovJgAAAI4"]
[Fri Apr 10 23:58:47.943674 2026] [:error] [pid 13189:tid 13196] [client 20.240.45.10:40268] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yw5bi63u.php"] [unique_id "adkeN5AxiJKPums3eBAfyAAAAEQ"]
[Fri Apr 10 23:58:48.649603 2026] [:error] [pid 13189:tid 13214] [client 20.240.45.10:17429] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yw5bi63u.php"] [unique_id "adkeOJAxiJKPums3eBAfzgAAAFY"]
[Fri Apr 10 23:58:49.445274 2026] [:error] [pid 62769:tid 62778] [client 20.240.45.10:61501] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yw5bi63u.php"] [unique_id "adkeOcWsSnfLoB8ifjDdswAAAkc"]
[Fri Apr 10 23:58:50.153809 2026] [:error] [pid 62710:tid 62715] [client 20.240.45.10:63081] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yw5bi63u.php"] [unique_id "adkeOuME7qrf5xEWWJtR9gAAAgI"]
[Fri Apr 10 23:58:50.710474 2026] [:error] [pid 63062:tid 63082] [client 20.240.45.10:62263] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "adkeOp2HtsmV85NqkMcZIwAAA5I"]
[Fri Apr 10 23:58:51.334751 2026] [:error] [pid 62769:tid 62782] [client 20.240.45.10:12824] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "adkeO8WsSnfLoB8ifjDdvQAAAks"]
[Fri Apr 10 23:58:52.278609 2026] [:error] [pid 63134:tid 63161] [client 20.240.45.10:21672] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "adkePNFALqPDwWi6eJLTowAAA9g"]
[Fri Apr 10 23:58:53.004162 2026] [:error] [pid 62769:tid 62787] [client 20.240.45.10:40976] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "adkePcWsSnfLoB8ifjDdwAAAAlA"]
[Fri Apr 10 23:58:53.658219 2026] [:error] [pid 13189:tid 13213] [client 20.240.45.10:18516] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "adkePZAxiJKPums3eBAf2QAAAFU"]
[Fri Apr 10 23:58:54.287979 2026] [:error] [pid 13189:tid 13204] [client 20.240.45.10:41916] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "adkePpAxiJKPums3eBAf3AAAAEw"]
[Fri Apr 10 23:58:55.023186 2026] [:error] [pid 13100:tid 13108] [client 20.240.45.10:14411] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "adkeP1zg-ZkZ0InWIP3W5QAAAQM"]
[Fri Apr 10 23:58:56.175379 2026] [:error] [pid 62651:tid 62670] [client 20.240.45.10:40278] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "adkeQDbAH0le57SIaqw-jQAAAdE"]
[Fri Apr 10 23:58:56.957286 2026] [:error] [pid 13189:tid 13198] [client 20.240.45.10:64145] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "adkeQJAxiJKPums3eBAf4gAAAEY"]
[Fri Apr 10 23:58:57.585464 2026] [:error] [pid 62819:tid 62825] [client 20.240.45.10:40273] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "adkeQfU20EyPf7NlsleLyAAAAoM"]
[Fri Apr 10 23:58:58.162791 2026] [:error] [pid 13189:tid 13195] [client 20.240.45.10:62218] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "adkeQpAxiJKPums3eBAf6AAAAEM"]
[Fri Apr 10 23:58:58.882417 2026] [:error] [pid 62769:tid 62777] [client 20.240.45.10:18506] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "adkeQsWsSnfLoB8ifjDdyAAAAkY"]
[Fri Apr 10 23:58:59.599297 2026] [:error] [pid 62710:tid 62730] [client 20.240.45.10:64184] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "adkeQ-ME7qrf5xEWWJtSBQAAAhE"]
[Fri Apr 10 23:59:00.222573 2026] [:error] [pid 13189:tid 13195] [client 20.240.45.10:21633] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "adkeRJAxiJKPums3eBAf9AAAAEM"]
[Fri Apr 10 23:59:00.788361 2026] [:error] [pid 13101:tid 13152] [client 20.240.45.10:18543] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "adkeRN8Ldw85818pj2ovKwAAAJM"]
[Fri Apr 10 23:59:01.423648 2026] [:error] [pid 62769:tid 62772] [client 20.240.45.10:30179] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "adkeRcWsSnfLoB8ifjDdygAAAkE"]
[Fri Apr 10 23:59:01.985174 2026] [:error] [pid 62769:tid 62771] [client 20.240.45.10:41019] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "adkeRcWsSnfLoB8ifjDdzgAAAkA"]
[Fri Apr 10 23:59:02.586443 2026] [:error] [pid 62769:tid 62790] [client 20.240.45.10:41062] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "adkeRsWsSnfLoB8ifjDd1wAAAlM"]
[Fri Apr 10 23:59:03.130303 2026] [:error] [pid 13101:tid 13133] [client 20.240.45.10:64804] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "adkeR98Ldw85818pj2ovLgAAAIA"]
[Fri Apr 10 23:59:03.783645 2026] [:error] [pid 62769:tid 62787] [client 20.240.45.10:64762] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "adkeR8WsSnfLoB8ifjDd5QAAAlA"]
[Fri Apr 10 23:59:04.468352 2026] [:error] [pid 62769:tid 62782] [client 20.240.45.10:17462] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adkeSMWsSnfLoB8ifjDd8wAAAks"]
[Fri Apr 10 23:59:05.128316 2026] [:error] [pid 63062:tid 63075] [client 20.240.45.10:41010] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adkeSZ2HtsmV85NqkMcZLQAAA4s"]
[Fri Apr 10 23:59:05.883857 2026] [:error] [pid 62710:tid 62737] [client 20.240.45.10:41904] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adkeSeME7qrf5xEWWJtSCgAAAhg"]
[Fri Apr 10 23:59:06.864670 2026] [:error] [pid 62710:tid 62716] [client 20.240.45.10:21649] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adkeSuME7qrf5xEWWJtSEgAAAgM"]
[Fri Apr 10 23:59:07.496197 2026] [:error] [pid 62769:tid 62784] [client 20.240.45.10:41038] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "adkeS8WsSnfLoB8ifjDeFAAAAk0"]
[Fri Apr 10 23:59:08.402734 2026] [:error] [pid 62769:tid 62777] [client 20.240.45.10:21748] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "adkeTMWsSnfLoB8ifjDeGAAAAkY"]
[Fri Apr 10 23:59:08.978016 2026] [:error] [pid 62769:tid 62790] [client 20.240.45.10:30523] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "adkeTMWsSnfLoB8ifjDeHgAAAlM"]
[Fri Apr 10 23:59:09.601600 2026] [:error] [pid 62651:tid 62675] [client 20.240.45.10:30500] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s.php"] [unique_id "adkeTTbAH0le57SIaqw-mwAAAdY"]
[Fri Apr 10 23:59:10.221996 2026] [:error] [pid 13101:tid 13144] [client 20.240.45.10:40287] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "adkeTt8Ldw85818pj2ovSwAAAIs"]
[Fri Apr 10 23:59:10.823633 2026] [:error] [pid 62710:tid 62720] [client 20.240.45.10:21755] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "adkeTuME7qrf5xEWWJtSGAAAAgc"]
[Fri Apr 10 23:59:12.041373 2026] [:error] [pid 13101:tid 13155] [client 20.240.45.10:64829] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "adkeUN8Ldw85818pj2ovUQAAAJY"]
[Fri Apr 10 23:59:12.732505 2026] [:error] [pid 62819:tid 62833] [client 20.240.45.10:30202] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "adkeUPU20EyPf7NlsleL2AAAAos"]
[Fri Apr 10 23:59:13.358187 2026] [:error] [pid 63062:tid 63068] [client 20.240.45.10:41065] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws83.php"] [unique_id "adkeUZ2HtsmV85NqkMcZMwAAA4Q"]
[Fri Apr 10 23:59:14.025142 2026] [:error] [pid 62884:tid 62904] [client 20.240.45.10:30168] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws83.php"] [unique_id "adkeUuUCK1xrhnnmpo2gAgAAAs0"]
[Fri Apr 10 23:59:14.584441 2026] [:error] [pid 63134:tid 63156] [client 20.240.45.10:24610] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws83.php"] [unique_id "adkeUtFALqPDwWi6eJLTvQAAA9M"]
[Fri Apr 10 23:59:15.462855 2026] [:error] [pid 62710:tid 62727] [client 20.240.45.10:18557] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws83.php"] [unique_id "adkeU-ME7qrf5xEWWJtSLAAAAg4"]
[Fri Apr 10 23:59:16.291095 2026] [:error] [pid 62769:tid 62793] [client 20.240.45.10:30470] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws75.php"] [unique_id "adkeVMWsSnfLoB8ifjDeKwAAAlY"]
[Fri Apr 10 23:59:17.149942 2026] [:error] [pid 63134:tid 63153] [client 20.240.45.10:40982] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws75.php"] [unique_id "adkeVdFALqPDwWi6eJLTwgAAA9A"]
[Fri Apr 10 23:59:17.796998 2026] [:error] [pid 13189:tid 13192] [client 20.240.45.10:30175] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws75.php"] [unique_id "adkeVZAxiJKPums3eBAgFQAAAEA"]
[Fri Apr 10 23:59:18.378322 2026] [:error] [pid 62769:tid 62795] [client 20.240.45.10:41895] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws75.php"] [unique_id "adkeVsWsSnfLoB8ifjDeOwAAAlg"]
[Fri Apr 10 23:59:18.951700 2026] [:error] [pid 13189:tid 13205] [client 20.240.45.10:21692] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "adkeVpAxiJKPums3eBAgGAAAAE0"]
[Fri Apr 10 23:59:19.622863 2026] [:error] [pid 13189:tid 13195] [client 20.240.45.10:21742] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "adkeV5AxiJKPums3eBAgHQAAAEM"]
[Fri Apr 10 23:59:20.293284 2026] [:error] [pid 13189:tid 13204] [client 20.240.45.10:30198] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "adkeWJAxiJKPums3eBAgJQAAAEw"]
[Fri Apr 10 23:59:21.030728 2026] [:error] [pid 13101:tid 13143] [client 20.240.45.10:41915] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "adkeWd8Ldw85818pj2ovZQAAAIo"]
[Fri Apr 10 23:59:22.372035 2026] [:error] [pid 62819:tid 62832] [client 20.240.45.10:41882] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "adkeWvU20EyPf7NlsleL6AAAAoo"]
[Fri Apr 10 23:59:23.376302 2026] [:error] [pid 62819:tid 62822] [client 20.240.45.10:30160] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "adkeW_U20EyPf7NlsleL7AAAAoA"]
[Fri Apr 10 23:59:24.027676 2026] [:error] [pid 62884:tid 62909] [client 20.240.45.10:30157] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "adkeXOUCK1xrhnnmpo2gCgAAAtI"]
[Fri Apr 10 23:59:24.672564 2026] [:error] [pid 62710:tid 62722] [client 20.240.45.10:30510] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "adkeXOME7qrf5xEWWJtSMgAAAgk"]
[Fri Apr 10 23:59:25.720935 2026] [:error] [pid 63134:tid 63144] [client 20.240.45.10:40991] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adkeXdFALqPDwWi6eJLT4wAAA8c"]
[Fri Apr 10 23:59:26.719353 2026] [:error] [pid 62884:tid 62911] [client 20.240.45.10:41070] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adkeXuUCK1xrhnnmpo2gDAAAAtQ"]
[Fri Apr 10 23:59:27.416297 2026] [:error] [pid 62769:tid 62779] [client 20.240.45.10:24190] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adkeX8WsSnfLoB8ifjDeUwAAAkg"]
[Fri Apr 10 23:59:28.272509 2026] [:error] [pid 13101:tid 13138] [client 20.240.45.10:24624] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adkeYN8Ldw85818pj2ovgwAAAIU"]
[Fri Apr 10 23:59:29.212678 2026] [:error] [pid 62769:tid 62787] [client 20.240.45.10:21753] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adkeYcWsSnfLoB8ifjDeWQAAAlA"]
[Fri Apr 10 23:59:30.118631 2026] [:error] [pid 62819:tid 62842] [client 20.240.45.10:40995] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adkeYvU20EyPf7NlsleL8QAAApQ"]
[Fri Apr 10 23:59:31.518115 2026] [:error] [pid 13189:tid 13216] [client 20.240.45.10:41897] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adkeY5AxiJKPums3eBAgQwAAAFg"]
[Fri Apr 10 23:59:32.545018 2026] [:error] [pid 62769:tid 62771] [client 20.240.45.10:24156] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adkeZMWsSnfLoB8ifjDeaQAAAkA"]
[Fri Apr 10 23:59:33.260974 2026] [:error] [pid 62769:tid 62787] [client 142.44.137.218:40528] [client 142.44.137.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.44.137.218, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adkeZcWsSnfLoB8ifjDeagAAAlA"]
[Fri Apr 10 23:59:33.309082 2026] [:error] [pid 62710:tid 62727] [client 20.240.45.10:21698] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "adkeZeME7qrf5xEWWJtSQAAAAg4"]
[Fri Apr 10 23:59:33.984017 2026] [:error] [pid 13101:tid 13144] [client 20.240.45.10:14782] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "adkeZd8Ldw85818pj2ovoAAAAIs"]
[Fri Apr 10 23:59:34.153882 2026] [proxy_fcgi:error] [pid 62769:tid 62787] [client 142.44.137.218:40528] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 10 23:59:34.528591 2026] [:error] [pid 62769:tid 62773] [client 142.44.137.218:40528] [client 142.44.137.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.44.137.218, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adkeZsWsSnfLoB8ifjDebgAAAkI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 23:59:34.911836 2026] [:error] [pid 62710:tid 62717] [client 20.240.45.10:24603] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "adkeZuME7qrf5xEWWJtSSAAAAgQ"]
[Fri Apr 10 23:59:35.591391 2026] [proxy_fcgi:error] [pid 62769:tid 62773] [client 142.44.137.218:40528] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 10 23:59:36.177067 2026] [:error] [pid 13100:tid 13117] [client 20.240.45.10:41914] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "adkeaFzg-ZkZ0InWIP3XCAAAAQw"]
[Fri Apr 10 23:59:37.148855 2026] [:error] [pid 62769:tid 62778] [client 20.240.45.10:41050] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "adkeacWsSnfLoB8ifjDecgAAAkc"]
[Fri Apr 10 23:59:37.895729 2026] [:error] [pid 62884:tid 62909] [client 20.240.45.10:30158] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "adkeaeUCK1xrhnnmpo2gFQAAAtI"]
[Fri Apr 10 23:59:38.718870 2026] [:error] [pid 62884:tid 62898] [client 20.240.45.10:41037] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "adkeauUCK1xrhnnmpo2gGgAAAsc"]
[Fri Apr 10 23:59:39.529213 2026] [:error] [pid 62769:tid 62775] [client 20.240.45.10:64183] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "adkea8WsSnfLoB8ifjDedwAAAkQ"]
[Fri Apr 10 23:59:56.872126 2026] [:error] [pid 13189:tid 13195] [client 20.240.45.10:21693] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abrand.php"] [unique_id "adkefJAxiJKPums3eBAgewAAAEM"]
[Sat Apr 11 00:00:06.507269 2026] [:error] [pid 62651:tid 62656] [client 20.240.45.10:18539] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abrand.php"] [unique_id "adkehjbAH0le57SIaqw-twAAAcM"]
[Sat Apr 11 00:00:07.154385 2026] [:error] [pid 13101:tid 13148] [client 20.240.45.10:40967] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abrand.php"] [unique_id "adkeh98Ldw85818pj2ov2AAAAI8"]
[Sat Apr 11 00:00:07.686216 2026] [:error] [pid 13100:tid 13115] [client 20.240.45.10:40977] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abrand.php"] [unique_id "adkeh1zg-ZkZ0InWIP3XRgAAAQo"]
[Sat Apr 11 00:00:08.290886 2026] [:error] [pid 62710:tid 62715] [client 20.240.45.10:40980] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "adkeiOME7qrf5xEWWJtSjAAAAgI"]
[Sat Apr 11 00:00:08.927087 2026] [:error] [pid 62710:tid 62719] [client 20.240.45.10:21706] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "adkeiOME7qrf5xEWWJtSjwAAAgY"]
[Sat Apr 11 00:00:09.667659 2026] [:error] [pid 62819:tid 62840] [client 20.240.45.10:12839] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "adkeifU20EyPf7NlsleMEwAAApI"]
[Sat Apr 11 00:00:10.375612 2026] [:error] [pid 13189:tid 13204] [client 20.240.45.10:41898] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/init.php"] [unique_id "adkeipAxiJKPums3eBAgmwAAAEw"]
[Sat Apr 11 00:00:11.012061 2026] [:error] [pid 13189:tid 13216] [client 20.240.45.10:40292] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "adkei5AxiJKPums3eBAgnwAAAFg"]
[Sat Apr 11 00:00:11.697067 2026] [:error] [pid 13189:tid 13194] [client 20.240.45.10:40298] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "adkei5AxiJKPums3eBAgqgAAAEI"]
[Sat Apr 11 00:00:12.354114 2026] [:error] [pid 13101:tid 13149] [client 20.240.45.10:40979] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "adkejN8Ldw85818pj2ov3wAAAJA"]
[Sat Apr 11 00:00:12.900253 2026] [:error] [pid 13101:tid 13133] [client 20.240.45.10:64191] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "adkejN8Ldw85818pj2ov4gAAAIA"]
[Sat Apr 11 00:00:13.580193 2026] [:error] [pid 13101:tid 13140] [client 20.240.45.10:41012] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfile.php"] [unique_id "adkejd8Ldw85818pj2ov5gAAAIc"]
[Sat Apr 11 00:00:14.210249 2026] [:error] [pid 62769:tid 62783] [client 20.240.45.10:17459] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfile.php"] [unique_id "adkejsWsSnfLoB8ifjDe9gAAAkw"]
[Sat Apr 11 00:00:14.873421 2026] [:error] [pid 63062:tid 63071] [client 20.240.45.10:62259] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfile.php"] [unique_id "adkejp2HtsmV85NqkMcZVQAAA4c"]
[Sat Apr 11 00:00:15.475347 2026] [:error] [pid 63062:tid 63082] [client 20.240.45.10:41031] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfile.php"] [unique_id "adkej52HtsmV85NqkMcZWAAAA5I"]
[Sat Apr 11 00:00:16.459967 2026] [:error] [pid 13189:tid 13207] [client 20.240.45.10:40311] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "adkekJAxiJKPums3eBAgugAAAE8"]
[Sat Apr 11 00:00:17.262339 2026] [:error] [pid 63134:tid 63160] [client 20.240.45.10:64128] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "adkekdFALqPDwWi6eJLUWQAAA9c"]
[Sat Apr 11 00:00:18.051804 2026] [:error] [pid 62769:tid 62772] [client 20.240.45.10:40988] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "adkeksWsSnfLoB8ifjDe_gAAAkE"]
[Sat Apr 11 00:00:18.976892 2026] [:error] [pid 62819:tid 62841] [client 20.240.45.10:18558] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "adkekvU20EyPf7NlsleMGQAAApM"]
[Sat Apr 11 00:00:19.806775 2026] [:error] [pid 13189:tid 13214] [client 20.240.45.10:40256] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "adkek5AxiJKPums3eBAgygAAAFY"]
[Sat Apr 11 00:00:20.469757 2026] [:error] [pid 13101:tid 13138] [client 20.240.45.10:30525] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "adkelN8Ldw85818pj2ov9AAAAIU"]
[Sat Apr 11 00:00:21.072431 2026] [:error] [pid 13101:tid 13144] [client 20.240.45.10:40993] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "adkeld8Ldw85818pj2ov-gAAAIs"]
[Sat Apr 11 00:00:21.725688 2026] [:error] [pid 62819:tid 62844] [client 20.240.45.10:24172] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "adkelfU20EyPf7NlsleMGwAAApY"]
[Sat Apr 11 00:00:22.293462 2026] [:error] [pid 62769:tid 62786] [client 20.240.45.10:14736] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxw.php"] [unique_id "adkelsWsSnfLoB8ifjDfEQAAAk8"]
[Sat Apr 11 00:00:22.967429 2026] [:error] [pid 63134:tid 63145] [client 20.240.45.10:14422] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxw.php"] [unique_id "adkeltFALqPDwWi6eJLUYQAAA8g"]
[Sat Apr 11 00:00:23.544780 2026] [:error] [pid 13189:tid 13197] [client 20.240.45.10:30185] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxw.php"] [unique_id "adkel5AxiJKPums3eBAg1gAAAEU"]
[Sat Apr 11 00:00:24.139471 2026] [:error] [pid 13100:tid 13112] [client 20.240.45.10:64154] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxw.php"] [unique_id "adkemFzg-ZkZ0InWIP3XTwAAAQc"]
[Sat Apr 11 00:00:24.823608 2026] [:error] [pid 62651:tid 62665] [client 20.240.45.10:41005] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "adkemDbAH0le57SIaqw-uwAAAcw"]
[Sat Apr 11 00:00:25.468922 2026] [:error] [pid 62651:tid 62666] [client 20.240.45.10:64132] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "adkemTbAH0le57SIaqw-vgAAAc0"]
[Sat Apr 11 00:00:26.068458 2026] [:error] [pid 62884:tid 62904] [client 20.240.45.10:64142] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "adkemuUCK1xrhnnmpo2gNQAAAs0"]
[Sat Apr 11 00:00:26.717709 2026] [:error] [pid 13189:tid 13200] [client 20.240.45.10:41896] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "adkempAxiJKPums3eBAg3wAAAEg"]
[Sat Apr 11 00:00:27.293866 2026] [:error] [pid 62651:tid 62658] [client 20.240.45.10:24132] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "adkemzbAH0le57SIaqw-xAAAAcU"]
[Sat Apr 11 00:00:27.870750 2026] [:error] [pid 62769:tid 62792] [client 20.240.45.10:30207] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "adkem8WsSnfLoB8ifjDfMgAAAlU"]
[Sat Apr 11 00:00:28.538574 2026] [:error] [pid 13189:tid 13211] [client 20.240.45.10:30164] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "adkenJAxiJKPums3eBAg5wAAAFM"]
[Sat Apr 11 00:00:29.084205 2026] [:error] [pid 62710:tid 62724] [client 20.240.45.10:40310] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "adkeneME7qrf5xEWWJtSpQAAAgs"]
[Sat Apr 11 00:00:29.674780 2026] [:error] [pid 62769:tid 62776] [client 20.240.45.10:24149] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "adkencWsSnfLoB8ifjDfQgAAAkU"]
[Sat Apr 11 00:00:30.301741 2026] [:error] [pid 63062:tid 63082] [client 20.240.45.10:24606] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "adkenp2HtsmV85NqkMcZZAAAA5I"]
[Sat Apr 11 00:00:31.157062 2026] [:error] [pid 62769:tid 62795] [client 20.240.45.10:61263] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "adken8WsSnfLoB8ifjDfVAAAAlg"]
[Sat Apr 11 00:00:31.708889 2026] [:error] [pid 62769:tid 62775] [client 20.240.45.10:30505] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "adken8WsSnfLoB8ifjDfWAAAAkQ"]
[Sat Apr 11 00:00:32.398721 2026] [:error] [pid 62884:tid 62895] [client 20.240.45.10:41876] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkeoOUCK1xrhnnmpo2gPAAAAsQ"]
[Sat Apr 11 00:00:33.632495 2026] [:error] [pid 13101:tid 13133] [client 20.240.45.10:21683] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkeod8Ldw85818pj2owEAAAAIA"]
[Sat Apr 11 00:00:35.043413 2026] [:error] [pid 62769:tid 62789] [client 20.240.45.10:64178] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkeo8WsSnfLoB8ifjDfagAAAlI"]
[Sat Apr 11 00:00:35.663456 2026] [:error] [pid 13189:tid 13200] [client 20.240.45.10:41040] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adkeo5AxiJKPums3eBAg6wAAAEg"]
[Sat Apr 11 00:00:36.248626 2026] [:error] [pid 63134:tid 63139] [client 20.240.45.10:62248] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adkepNFALqPDwWi6eJLUbwAAA8I"]
[Sat Apr 11 00:00:36.934027 2026] [:error] [pid 62884:tid 62891] [client 20.240.45.10:18531] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adkepOUCK1xrhnnmpo2gQwAAAsA"]
[Sat Apr 11 00:00:37.557130 2026] [:error] [pid 62884:tid 62896] [client 20.240.45.10:24577] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adkepeUCK1xrhnnmpo2gRwAAAsU"]
[Sat Apr 11 00:00:38.309338 2026] [:error] [pid 62710:tid 62721] [client 20.240.45.10:40295] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adkepuME7qrf5xEWWJtSuwAAAgg"]
[Sat Apr 11 00:00:38.996884 2026] [:error] [pid 62710:tid 62732] [client 20.240.45.10:30516] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "adkepuME7qrf5xEWWJtSvQAAAhM"]
[Sat Apr 11 00:00:40.044202 2026] [:error] [pid 63062:tid 63071] [client 20.240.45.10:41061] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "adkeqJ2HtsmV85NqkMcZcAAAA4c"]
[Sat Apr 11 00:00:41.249116 2026] [:error] [pid 62769:tid 62772] [client 20.240.45.10:30154] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "adkeqcWsSnfLoB8ifjDfhQAAAkE"]
[Sat Apr 11 00:00:42.117448 2026] [:error] [pid 13100:tid 13111] [client 20.240.45.10:64175] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "adkeqlzg-ZkZ0InWIP3XWgAAAQY"]
[Sat Apr 11 00:00:42.739568 2026] [:error] [pid 62710:tid 62720] [client 20.240.45.10:17454] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "adkequME7qrf5xEWWJtSvwAAAgc"]
[Sat Apr 11 00:00:43.412004 2026] [:error] [pid 63062:tid 63080] [client 20.240.45.10:24613] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "adkeq52HtsmV85NqkMcZdAAAA5A"]
[Sat Apr 11 00:00:44.084985 2026] [:error] [pid 13189:tid 13192] [client 20.240.45.10:24141] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "adkerJAxiJKPums3eBAg-gAAAEA"]
[Sat Apr 11 00:00:44.731667 2026] [:error] [pid 13101:tid 13133] [client 20.240.45.10:30474] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "adkerN8Ldw85818pj2owKwAAAIA"]
[Sat Apr 11 00:00:45.314195 2026] [:error] [pid 62651:tid 62665] [client 20.240.45.10:21675] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ajax.php"] [unique_id "adkerTbAH0le57SIaqw-ygAAAcw"]
[Sat Apr 11 00:00:45.940092 2026] [:error] [pid 13100:tid 13107] [client 20.240.45.10:40299] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ajax.php"] [unique_id "adkerVzg-ZkZ0InWIP3XXQAAAQI"]
[Sat Apr 11 00:00:46.651645 2026] [:error] [pid 13100:tid 13121] [client 20.240.45.10:18519] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ajax.php"] [unique_id "adkerlzg-ZkZ0InWIP3XXwAAARA"]
[Sat Apr 11 00:00:47.276733 2026] [:error] [pid 13100:tid 13126] [client 20.240.45.10:41068] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ajax.php"] [unique_id "adker1zg-ZkZ0InWIP3XYAAAARU"]
[Sat Apr 11 00:00:48.028109 2026] [:error] [pid 62710:tid 62730] [client 20.240.45.10:21699] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "adkesOME7qrf5xEWWJtS0AAAAhE"]
[Sat Apr 11 00:00:48.950045 2026] [:error] [pid 62884:tid 62901] [client 20.240.45.10:18525] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "adkesOUCK1xrhnnmpo2gWAAAAso"]
[Sat Apr 11 00:00:49.568815 2026] [:error] [pid 62769:tid 62776] [client 20.240.45.10:30183] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "adkescWsSnfLoB8ifjDfswAAAkU"]
[Sat Apr 11 00:00:50.144727 2026] [:error] [pid 13189:tid 13200] [client 20.240.45.10:21694] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "adkespAxiJKPums3eBAhBwAAAEg"]
[Sat Apr 11 00:00:50.784051 2026] [:error] [pid 63062:tid 63083] [client 20.240.45.10:24165] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/wp-blog.php"] [unique_id "adkesp2HtsmV85NqkMcZfQAAA5M"]
[Sat Apr 11 00:00:51.450818 2026] [:error] [pid 62819:tid 62837] [client 20.240.45.10:40971] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/wp-blog.php"] [unique_id "adkes_U20EyPf7NlsleMIAAAAo8"]
[Sat Apr 11 00:00:52.621282 2026] [:error] [pid 63062:tid 63064] [client 20.240.45.10:62968] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/wp-blog.php"] [unique_id "adketJ2HtsmV85NqkMcZhQAAA4A"]
[Sat Apr 11 00:00:53.427269 2026] [:error] [pid 62651:tid 62659] [client 20.240.45.10:41064] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/wp-blog.php"] [unique_id "adketTbAH0le57SIaqw-zQAAAcY"]
[Sat Apr 11 00:00:54.199529 2026] [:error] [pid 62710:tid 62719] [client 20.240.45.10:21643] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw.php"] [unique_id "adketuME7qrf5xEWWJtS1gAAAgY"]
[Sat Apr 11 00:00:54.899773 2026] [:error] [pid 63062:tid 63086] [client 20.240.45.10:40983] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw.php"] [unique_id "adketp2HtsmV85NqkMcZigAAA5Y"]
[Sat Apr 11 00:01:18.404658 2026] [:error] [pid 62769:tid 62779] [client 20.240.45.10:30181] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "adkezsWsSnfLoB8ifjDgSwAAAkg"]
[Sat Apr 11 00:01:19.029644 2026] [:error] [pid 13189:tid 13204] [client 20.240.45.10:41077] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "adkez5AxiJKPums3eBAhRgAAAEw"]
[Sat Apr 11 00:01:19.838506 2026] [:error] [pid 13101:tid 13133] [client 20.240.45.10:21680] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "adkez98Ldw85818pj2owWgAAAIA"]
[Sat Apr 11 00:01:20.871055 2026] [:error] [pid 62769:tid 62777] [client 20.240.45.10:30507] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "adke0MWsSnfLoB8ifjDgUQAAAkY"]
[Sat Apr 11 00:01:21.838472 2026] [:error] [pid 62769:tid 62776] [client 20.240.45.10:18534] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "adke0cWsSnfLoB8ifjDgVAAAAkU"]
[Sat Apr 11 00:01:22.577819 2026] [:error] [pid 13189:tid 13200] [client 20.240.45.10:40285] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "adke0pAxiJKPums3eBAhTQAAAEg"]
[Sat Apr 11 00:01:23.133877 2026] [:error] [pid 13101:tid 13149] [client 20.240.45.10:64190] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "adke098Ldw85818pj2owXgAAAJA"]
[Sat Apr 11 00:01:24.778861 2026] [:error] [pid 13189:tid 13202] [client 20.240.45.10:30470] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/radio.php"] [unique_id "adke1JAxiJKPums3eBAhUAAAAEo"]
[Sat Apr 11 00:01:25.494827 2026] [:error] [pid 62769:tid 62778] [client 20.240.45.10:17431] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "adke1cWsSnfLoB8ifjDgZgAAAkc"]
[Sat Apr 11 00:01:26.539361 2026] [:error] [pid 63134:tid 63152] [client 20.240.45.10:24146] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "adke1tFALqPDwWi6eJLUmAAAA88"]
[Sat Apr 11 00:01:27.105699 2026] [:error] [pid 13189:tid 13206] [client 20.240.45.10:62249] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "adke15AxiJKPums3eBAhWAAAAE4"]
[Sat Apr 11 00:01:27.688293 2026] [:error] [pid 13189:tid 13199] [client 20.240.45.10:14461] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/155.php"] [unique_id "adke15AxiJKPums3eBAhWwAAAEc"]
[Sat Apr 11 00:01:28.603327 2026] [:error] [pid 13101:tid 13156] [client 20.240.45.10:24169] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adke2N8Ldw85818pj2owbgAAAJc"]
[Sat Apr 11 00:01:29.385875 2026] [:error] [pid 62769:tid 62781] [client 20.240.45.10:21744] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adke2cWsSnfLoB8ifjDgbQAAAko"]
[Sat Apr 11 00:01:30.086326 2026] [:error] [pid 63134:tid 63158] [client 20.240.45.10:41862] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adke2tFALqPDwWi6eJLUnAAAA9U"]
[Sat Apr 11 00:01:30.728043 2026] [:error] [pid 62710:tid 62720] [client 20.240.45.10:41864] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adke2uME7qrf5xEWWJtS8QAAAgc"]
[Sat Apr 11 00:01:31.409957 2026] [:error] [pid 63062:tid 63064] [client 20.240.45.10:24186] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "adke252HtsmV85NqkMcZqgAAA4A"]
[Sat Apr 11 00:01:32.214843 2026] [:error] [pid 13100:tid 13116] [client 20.240.45.10:64177] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "adke3Fzg-ZkZ0InWIP3XcAAAAQs"]
[Sat Apr 11 00:01:33.007610 2026] [:error] [pid 62884:tid 62907] [client 20.240.45.10:40970] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "adke3eUCK1xrhnnmpo2gcQAAAtA"]
[Sat Apr 11 00:01:33.782785 2026] [:error] [pid 62710:tid 62723] [client 20.240.45.10:61261] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "adke3eME7qrf5xEWWJtS9AAAAgo"]
[Sat Apr 11 00:01:34.458996 2026] [:error] [pid 13189:tid 13201] [client 20.240.45.10:21743] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "adke3pAxiJKPums3eBAhcAAAAEk"]
[Sat Apr 11 00:01:35.059848 2026] [:error] [pid 62710:tid 62731] [client 20.240.45.10:24615] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "adke3-ME7qrf5xEWWJtS9wAAAhI"]
[Sat Apr 11 00:01:35.914539 2026] [:error] [pid 13101:tid 13152] [client 20.240.45.10:61480] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "adke398Ldw85818pj2owcQAAAJM"]
[Sat Apr 11 00:01:36.801493 2026] [:error] [pid 62819:tid 62824] [client 20.240.45.10:14771] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "adke4PU20EyPf7NlsleMNgAAAoI"]
[Sat Apr 11 00:01:37.450738 2026] [:error] [pid 63134:tid 63144] [client 20.240.45.10:41857] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hots.php"] [unique_id "adke4dFALqPDwWi6eJLUowAAA8c"]
[Sat Apr 11 00:01:38.344483 2026] [:error] [pid 62819:tid 62845] [client 20.240.45.10:14741] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hots.php"] [unique_id "adke4vU20EyPf7NlsleMOQAAApc"]
[Sat Apr 11 00:01:39.278040 2026] [:error] [pid 62884:tid 62909] [client 20.240.45.10:30491] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hots.php"] [unique_id "adke4-UCK1xrhnnmpo2gdgAAAtI"]
[Sat Apr 11 00:01:39.842803 2026] [:error] [pid 62651:tid 62675] [client 20.240.45.10:41027] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hots.php"] [unique_id "adke4zbAH0le57SIaqw-6gAAAdY"]
[Sat Apr 11 00:01:40.470031 2026] [:error] [pid 63134:tid 63161] [client 20.240.45.10:18508] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin-footer.php"] [unique_id "adke5NFALqPDwWi6eJLUqgAAA9g"]
[Sat Apr 11 00:01:41.034923 2026] [:error] [pid 13189:tid 13202] [client 20.240.45.10:24604] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin-footer.php"] [unique_id "adke5ZAxiJKPums3eBAhggAAAEo"]
[Sat Apr 11 00:01:41.902561 2026] [:error] [pid 62769:tid 62776] [client 20.240.45.10:40262] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin-footer.php"] [unique_id "adke5cWsSnfLoB8ifjDgegAAAkU"]
[Sat Apr 11 00:01:42.598294 2026] [:error] [pid 13189:tid 13210] [client 20.240.45.10:24131] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin-footer.php"] [unique_id "adke5pAxiJKPums3eBAhigAAAFI"]
[Sat Apr 11 00:01:43.171532 2026] [:error] [pid 62769:tid 62792] [client 20.240.45.10:41024] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "adke58WsSnfLoB8ifjDgfAAAAlU"]
[Sat Apr 11 00:01:43.779271 2026] [:error] [pid 13100:tid 13126] [client 20.240.45.10:62266] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "adke51zg-ZkZ0InWIP3XfgAAARU"]
[Sat Apr 11 00:01:44.410961 2026] [:error] [pid 63134:tid 63160] [client 20.240.45.10:21695] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "adke6NFALqPDwWi6eJLUrQAAA9c"]
[Sat Apr 11 00:01:45.492682 2026] [:error] [pid 63062:tid 63083] [client 20.240.45.10:30511] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws84.php"] [unique_id "adke6Z2HtsmV85NqkMcZsQAAA5M"]
[Sat Apr 11 00:01:46.186943 2026] [:error] [pid 13189:tid 13201] [client 20.240.45.10:24578] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "adke6pAxiJKPums3eBAhmQAAAEk"]
[Sat Apr 11 00:01:47.084437 2026] [:error] [pid 13189:tid 13195] [client 20.240.45.10:24185] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "adke65AxiJKPums3eBAhnAAAAEM"]
[Sat Apr 11 00:01:47.729150 2026] [:error] [pid 62710:tid 62717] [client 20.240.45.10:61471] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "adke6-ME7qrf5xEWWJtTCQAAAgQ"]
[Sat Apr 11 00:01:48.399559 2026] [:error] [pid 13189:tid 13208] [client 20.240.45.10:41021] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bnm.php"] [unique_id "adke7JAxiJKPums3eBAhoAAAAFA"]
[Sat Apr 11 00:01:49.205257 2026] [:error] [pid 62710:tid 62722] [client 20.240.45.10:24587] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "adke7eME7qrf5xEWWJtTDwAAAgk"]
[Sat Apr 11 00:01:49.793178 2026] [:error] [pid 63134:tid 63152] [client 20.240.45.10:24176] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "adke7dFALqPDwWi6eJLUswAAA88"]
[Sat Apr 11 00:01:50.689381 2026] [:error] [pid 13189:tid 13212] [client 20.240.45.10:21657] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "adke7pAxiJKPums3eBAhowAAAFQ"]
[Sat Apr 11 00:01:51.335356 2026] [:error] [pid 13100:tid 13105] [client 20.240.45.10:40279] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "adke71zg-ZkZ0InWIP3XjQAAAQA"]
[Sat Apr 11 00:01:51.993317 2026] [:error] [pid 62769:tid 62790] [client 20.240.45.10:24609] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adke78WsSnfLoB8ifjDgkQAAAlM"]
[Sat Apr 11 00:01:53.090139 2026] [:error] [pid 62769:tid 62779] [client 20.240.45.10:21700] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adke8cWsSnfLoB8ifjDglwAAAkg"]
[Sat Apr 11 00:01:53.997204 2026] [:error] [pid 63062:tid 63079] [client 20.240.45.10:41008] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adke8Z2HtsmV85NqkMcZuQAAA48"]
[Sat Apr 11 00:01:54.967557 2026] [:error] [pid 62769:tid 62785] [client 20.240.45.10:41883] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adke8sWsSnfLoB8ifjDgnwAAAk4"]
[Sat Apr 11 00:01:55.577456 2026] [:error] [pid 62769:tid 62773] [client 20.240.45.10:21646] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/file.php"] [unique_id "adke88WsSnfLoB8ifjDgpAAAAkI"]
[Sat Apr 11 00:01:56.344433 2026] [:error] [pid 62710:tid 62732] [client 20.240.45.10:18520] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/file.php"] [unique_id "adke9OME7qrf5xEWWJtTKAAAAhM"]
[Sat Apr 11 00:01:57.017769 2026] [:error] [pid 62769:tid 62776] [client 20.240.45.10:17467] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/file.php"] [unique_id "adke9cWsSnfLoB8ifjDgsQAAAkU"]
[Sat Apr 11 00:01:57.747377 2026] [:error] [pid 62769:tid 62783] [client 20.240.45.10:40984] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/file.php"] [unique_id "adke9cWsSnfLoB8ifjDgtAAAAkw"]
[Sat Apr 11 00:01:58.322335 2026] [:error] [pid 62769:tid 62795] [client 20.240.45.10:40304] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "adke9sWsSnfLoB8ifjDguQAAAlg"]
[Sat Apr 11 00:01:58.907555 2026] [:error] [pid 62769:tid 62775] [client 20.240.45.10:30148] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "adke9sWsSnfLoB8ifjDguwAAAkQ"]
[Sat Apr 11 00:01:59.645684 2026] [:error] [pid 62651:tid 62675] [client 20.240.45.10:30167] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "adke9zbAH0le57SIaqw--gAAAdY"]
[Sat Apr 11 00:02:00.459850 2026] [:error] [pid 13101:tid 13144] [client 20.240.45.10:17437] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "adke-N8Ldw85818pj2owiQAAAIs"]
[Sat Apr 11 00:02:01.055075 2026] [:error] [pid 63062:tid 63081] [client 20.240.45.10:24628] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "adke-Z2HtsmV85NqkMcZxQAAA5E"]
[Sat Apr 11 00:02:01.624213 2026] [:error] [pid 62651:tid 62667] [client 20.240.45.10:21662] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "adke-TbAH0le57SIaqw-_AAAAc4"]
[Sat Apr 11 00:02:02.299393 2026] [:error] [pid 13100:tid 13129] [client 20.240.45.10:24639] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "adke-lzg-ZkZ0InWIP3XlwAAARg"]
[Sat Apr 11 00:02:02.886673 2026] [:error] [pid 62819:tid 62828] [client 20.240.45.10:18530] [client 20.240.45.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "adke-vU20EyPf7NlsleMRgAAAoY"]
[Sat Apr 11 00:21:04.935981 2026] [:error] [pid 13189:tid 13199] [client 209.141.44.76:35087] [client 209.141.44.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.44.76, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adkjcJAxiJKPums3eBAwPwAAAEc"]
[Sat Apr 11 00:21:05.822575 2026] [proxy_fcgi:error] [pid 13189:tid 13199] [client 209.141.44.76:35087] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 11 00:21:05.996037 2026] [:error] [pid 13189:tid 13206] [client 209.141.44.76:35087] [client 209.141.44.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.44.76, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adkjcZAxiJKPums3eBAwQgAAAE4"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Sat Apr 11 00:21:07.089705 2026] [proxy_fcgi:error] [pid 13189:tid 13206] [client 209.141.44.76:35087] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Sat Apr 11 01:02:27.014176 2026] [:error] [pid 21706:tid 21722] [client 45.61.186.111:56433] [client 45.61.186.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.186.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adktIyGQ1M5d8fQSsLF1TAAAAA4"]
[Sat Apr 11 01:02:29.153353 2026] [proxy_fcgi:error] [pid 21706:tid 21722] [client 45.61.186.111:56433] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 11 01:02:29.411911 2026] [:error] [pid 21706:tid 21719] [client 45.61.186.111:56433] [client 45.61.186.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.186.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adktJSGQ1M5d8fQSsLF1cAAAAAs"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Sat Apr 11 01:02:30.299257 2026] [proxy_fcgi:error] [pid 21706:tid 21719] [client 45.61.186.111:56433] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Sat Apr 11 02:08:54.645089 2026] [:error] [pid 55451:tid 55454] [client 45.61.188.43:52525] [client 45.61.188.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adk8tnApxuyB7yCS5RkVjwAAAME"]
[Sat Apr 11 02:08:55.516298 2026] [proxy_fcgi:error] [pid 55451:tid 55454] [client 45.61.188.43:52525] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 11 02:08:55.775151 2026] [:error] [pid 55451:tid 55459] [client 45.61.188.43:52525] [client 45.61.188.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adk8t3ApxuyB7yCS5RkVkQAAAMY"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Sat Apr 11 02:08:56.691749 2026] [proxy_fcgi:error] [pid 55451:tid 55459] [client 45.61.188.43:52525] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Sat Apr 11 02:28:44.340112 2026] [:error] [pid 21568:tid 21593] [client 209.141.43.33:52341] [client 209.141.43.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.43.33, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adlBXIiz5v_ljZxkpR_eCwAAARU"]
[Sat Apr 11 02:28:45.202206 2026] [proxy_fcgi:error] [pid 21568:tid 21593] [client 209.141.43.33:52341] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 11 02:28:45.382655 2026] [:error] [pid 21568:tid 21592] [client 209.141.43.33:52341] [client 209.141.43.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.43.33, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adlBXYiz5v_ljZxkpR_eFQAAARQ"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Sat Apr 11 02:28:46.401966 2026] [proxy_fcgi:error] [pid 21568:tid 21592] [client 209.141.43.33:52341] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Sat Apr 11 02:36:07.516200 2026] [:error] [pid 21568:tid 21579] [client 72.146.30.147:26825] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "adlDF4iz5v_ljZxkpR_hMAAAAQc"]
[Sat Apr 11 02:36:07.994419 2026] [:error] [pid 21570:tid 21692] [client 72.146.30.147:29976] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "adlDFzKs5t9xRSNL6cnazgAAAFI"]
[Sat Apr 11 02:36:08.540354 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:23934] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "adlDGCGQ1M5d8fQSsLHM8QAAABA"]
[Sat Apr 11 02:36:09.026892 2026] [:error] [pid 21570:tid 21689] [client 72.146.30.147:5827] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "adlDGTKs5t9xRSNL6cna0gAAAE8"]
[Sat Apr 11 02:36:09.641325 2026] [:error] [pid 21706:tid 21727] [client 72.146.30.147:18972] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdn3.php"] [unique_id "adlDGSGQ1M5d8fQSsLHM-QAAABM"]
[Sat Apr 11 02:36:10.153361 2026] [:error] [pid 21570:tid 21698] [client 72.146.30.147:23925] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdn3.php"] [unique_id "adlDGjKs5t9xRSNL6cna1gAAAFg"]
[Sat Apr 11 02:36:10.691869 2026] [:error] [pid 55451:tid 55456] [client 72.146.30.147:55565] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdn3.php"] [unique_id "adlDGnApxuyB7yCS5RkpMAAAAMM"]
[Sat Apr 11 02:36:11.180836 2026] [:error] [pid 21570:tid 21691] [client 72.146.30.147:23856] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdn3.php"] [unique_id "adlDGzKs5t9xRSNL6cna2wAAAFE"]
[Sat Apr 11 02:36:11.684041 2026] [:error] [pid 21569:tid 21667] [client 72.146.30.147:18949] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlDG3AvQTgvXJ6vHoqsuQAAAJE"]
[Sat Apr 11 02:36:12.286166 2026] [:error] [pid 55451:tid 55460] [client 72.146.30.147:29962] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlDHHApxuyB7yCS5RkpMwAAAMc"]
[Sat Apr 11 02:36:12.763403 2026] [:error] [pid 21706:tid 21731] [client 72.146.30.147:20816] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlDHCGQ1M5d8fQSsLHNAgAAABc"]
[Sat Apr 11 02:36:13.255543 2026] [:error] [pid 21570:tid 21670] [client 72.146.30.147:26856] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlDHTKs5t9xRSNL6cna3wAAAEQ"]
[Sat Apr 11 02:36:13.751560 2026] [:error] [pid 21706:tid 21726] [client 72.146.30.147:5876] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "adlDHSGQ1M5d8fQSsLHNBQAAABI"]
[Sat Apr 11 02:36:14.221083 2026] [:error] [pid 21568:tid 21581] [client 72.146.30.147:27431] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "adlDHoiz5v_ljZxkpR_hOQAAAQk"]
[Sat Apr 11 02:36:14.723153 2026] [:error] [pid 21568:tid 21582] [client 72.146.30.147:23843] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "adlDHoiz5v_ljZxkpR_hOwAAAQo"]
[Sat Apr 11 02:36:15.302180 2026] [:error] [pid 21569:tid 21676] [client 72.146.30.147:27404] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "adlDH3AvQTgvXJ6vHoqswAAAAJU"]
[Sat Apr 11 02:36:16.096164 2026] [:error] [pid 21570:tid 21675] [client 72.146.30.147:5874] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "adlDIDKs5t9xRSNL6cna6wAAAEc"]
[Sat Apr 11 02:36:16.566604 2026] [:error] [pid 21569:tid 21683] [client 72.146.30.147:20840] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "adlDIHAvQTgvXJ6vHoqswQAAAJg"]
[Sat Apr 11 02:36:17.056299 2026] [:error] [pid 21568:tid 21580] [client 72.146.30.147:20119] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "adlDIYiz5v_ljZxkpR_hSgAAAQg"]
[Sat Apr 11 02:36:17.588042 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:20804] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "adlDIXApxuyB7yCS5RkpQQAAAMs"]
[Sat Apr 11 02:36:18.081019 2026] [:error] [pid 55451:tid 55472] [client 72.146.30.147:5888] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "adlDInApxuyB7yCS5RkpRgAAANM"]
[Sat Apr 11 02:36:18.596579 2026] [:error] [pid 21706:tid 21725] [client 72.146.30.147:26845] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "adlDIiGQ1M5d8fQSsLHNCAAAABE"]
[Sat Apr 11 02:36:19.108689 2026] [:error] [pid 55451:tid 55455] [client 72.146.30.147:18990] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "adlDI3ApxuyB7yCS5RkpSQAAAMI"]
[Sat Apr 11 02:36:19.583901 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:27398] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "adlDIzKs5t9xRSNL6cna9QAAAEE"]
[Sat Apr 11 02:36:20.086873 2026] [:error] [pid 21569:tid 21649] [client 72.146.30.147:29345] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "adlDJHAvQTgvXJ6vHoqswwAAAIQ"]
[Sat Apr 11 02:36:20.569628 2026] [:error] [pid 21706:tid 21716] [client 72.146.30.147:26253] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "adlDJCGQ1M5d8fQSsLHNCwAAAAg"]
[Sat Apr 11 02:36:21.142245 2026] [:error] [pid 21570:tid 21693] [client 72.146.30.147:20844] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "adlDJTKs5t9xRSNL6cnbAQAAAFM"]
[Sat Apr 11 02:36:21.612473 2026] [:error] [pid 21570:tid 21682] [client 72.146.30.147:27428] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "adlDJTKs5t9xRSNL6cnbAwAAAEs"]
[Sat Apr 11 02:36:22.111403 2026] [:error] [pid 21569:tid 21671] [client 72.146.30.147:29347] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlDJnAvQTgvXJ6vHoqsyQAAAJM"]
[Sat Apr 11 02:36:22.592777 2026] [:error] [pid 21569:tid 21645] [client 72.146.30.147:26251] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlDJnAvQTgvXJ6vHoqsywAAAIA"]
[Sat Apr 11 02:36:23.138882 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:30011] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlDJyGQ1M5d8fQSsLHNFAAAABA"]
[Sat Apr 11 02:36:23.635891 2026] [:error] [pid 21568:tid 21581] [client 72.146.30.147:27450] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlDJ4iz5v_ljZxkpR_hYwAAAQk"]
[Sat Apr 11 02:36:24.103527 2026] [:error] [pid 21568:tid 21587] [client 72.146.30.147:23928] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/RIP.php"] [unique_id "adlDKIiz5v_ljZxkpR_hZgAAAQ8"]
[Sat Apr 11 02:36:24.651418 2026] [:error] [pid 21569:tid 21662] [client 72.146.30.147:23885] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/RIP.php"] [unique_id "adlDKHAvQTgvXJ6vHoqs0wAAAI8"]
[Sat Apr 11 02:36:25.137562 2026] [:error] [pid 21569:tid 21664] [client 72.146.30.147:20155] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/RIP.php"] [unique_id "adlDKXAvQTgvXJ6vHoqs2AAAAJA"]
[Sat Apr 11 02:36:25.773728 2026] [:error] [pid 21570:tid 21694] [client 72.146.30.147:29396] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/RIP.php"] [unique_id "adlDKTKs5t9xRSNL6cnbCwAAAFQ"]
[Sat Apr 11 02:36:26.288324 2026] [:error] [pid 21706:tid 21718] [client 72.146.30.147:29963] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adlDKiGQ1M5d8fQSsLHNFwAAAAo"]
[Sat Apr 11 02:36:26.828573 2026] [:error] [pid 21569:tid 21651] [client 72.146.30.147:23871] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adlDKnAvQTgvXJ6vHoqs6QAAAIY"]
[Sat Apr 11 02:36:27.411441 2026] [:error] [pid 21706:tid 21730] [client 72.146.30.147:5926] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adlDKyGQ1M5d8fQSsLHNHAAAABY"]
[Sat Apr 11 02:36:27.985477 2026] [:error] [pid 21706:tid 21713] [client 72.146.30.147:29956] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "adlDKyGQ1M5d8fQSsLHNHgAAAAU"]
[Sat Apr 11 02:36:28.605057 2026] [:error] [pid 21570:tid 21670] [client 72.146.30.147:30001] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blqjs.php"] [unique_id "adlDLDKs5t9xRSNL6cnbEwAAAEQ"]
[Sat Apr 11 02:36:29.128361 2026] [:error] [pid 55451:tid 55460] [client 72.146.30.147:29356] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blqjs.php"] [unique_id "adlDLXApxuyB7yCS5RkpVgAAAMc"]
[Sat Apr 11 02:36:29.745042 2026] [:error] [pid 21568:tid 21593] [client 72.146.30.147:23922] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blqjs.php"] [unique_id "adlDLYiz5v_ljZxkpR_hbAAAARU"]
[Sat Apr 11 02:36:30.233950 2026] [:error] [pid 55451:tid 55474] [client 72.146.30.147:29329] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blqjs.php"] [unique_id "adlDLnApxuyB7yCS5RkpWwAAANU"]
[Sat Apr 11 02:36:30.819855 2026] [:error] [pid 21568:tid 21586] [client 72.146.30.147:5883] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk25_1.php"] [unique_id "adlDLoiz5v_ljZxkpR_hcgAAAQ4"]
[Sat Apr 11 02:36:31.333052 2026] [:error] [pid 55451:tid 55463] [client 72.146.30.147:55576] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk25_1.php"] [unique_id "adlDL3ApxuyB7yCS5RkpXwAAAMo"]
[Sat Apr 11 02:36:31.894272 2026] [:error] [pid 21568:tid 21593] [client 72.146.30.147:5927] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk25_1.php"] [unique_id "adlDL4iz5v_ljZxkpR_hfQAAARU"]
[Sat Apr 11 02:36:32.465649 2026] [:error] [pid 21570:tid 21672] [client 72.146.30.147:29984] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk25_1.php"] [unique_id "adlDMDKs5t9xRSNL6cnbGAAAAEU"]
[Sat Apr 11 02:36:33.157061 2026] [:error] [pid 21706:tid 21719] [client 72.146.30.147:18966] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "adlDMSGQ1M5d8fQSsLHNKQAAAAs"]
[Sat Apr 11 02:36:33.720423 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:62306] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "adlDMXApxuyB7yCS5RkpagAAAMY"]
[Sat Apr 11 02:36:34.193889 2026] [:error] [pid 21570:tid 21665] [client 72.146.30.147:23878] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "adlDMjKs5t9xRSNL6cnbHgAAAEI"]
[Sat Apr 11 02:36:34.707574 2026] [:error] [pid 55451:tid 55458] [client 72.146.30.147:20118] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "adlDMnApxuyB7yCS5RkpbgAAAMU"]
[Sat Apr 11 02:36:35.313480 2026] [:error] [pid 21568:tid 21596] [client 72.146.30.147:29953] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlDM4iz5v_ljZxkpR_hhAAAARg"]
[Sat Apr 11 02:36:35.858210 2026] [:error] [pid 21706:tid 21708] [client 72.146.30.147:20150] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlDMyGQ1M5d8fQSsLHNMAAAAAA"]
[Sat Apr 11 02:36:36.508527 2026] [:error] [pid 21706:tid 21716] [client 72.146.30.147:20851] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlDNCGQ1M5d8fQSsLHNNAAAAAg"]
[Sat Apr 11 02:36:37.146401 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:32934] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlDNXApxuyB7yCS5RkpdgAAAMY"]
[Sat Apr 11 02:36:37.721712 2026] [:error] [pid 55451:tid 55454] [client 72.146.30.147:29351] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2nzyHnOkEg.php"] [unique_id "adlDNXApxuyB7yCS5RkpegAAAME"]
[Sat Apr 11 02:36:38.244028 2026] [:error] [pid 55451:tid 55468] [client 72.146.30.147:20146] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2nzyHnOkEg.php"] [unique_id "adlDNnApxuyB7yCS5RkpfgAAAM8"]
[Sat Apr 11 02:36:38.726897 2026] [:error] [pid 55451:tid 55456] [client 72.146.30.147:27440] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2nzyHnOkEg.php"] [unique_id "adlDNnApxuyB7yCS5RkpgwAAAMM"]
[Sat Apr 11 02:36:39.245206 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:54984] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2nzyHnOkEg.php"] [unique_id "adlDN3ApxuyB7yCS5RkpiAAAAMY"]
[Sat Apr 11 02:36:39.754840 2026] [:error] [pid 21569:tid 21651] [client 72.146.30.147:55593] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oircv.php"] [unique_id "adlDN3AvQTgvXJ6vHoqtAAAAAIY"]
[Sat Apr 11 02:36:40.283322 2026] [:error] [pid 21569:tid 21671] [client 72.146.30.147:5894] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oircv.php"] [unique_id "adlDOHAvQTgvXJ6vHoqtBAAAAJM"]
[Sat Apr 11 02:36:40.806299 2026] [:error] [pid 21568:tid 21587] [client 72.146.30.147:32955] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oircv.php"] [unique_id "adlDOIiz5v_ljZxkpR_hkAAAAQ8"]
[Sat Apr 11 02:36:41.277292 2026] [:error] [pid 21568:tid 21582] [client 72.146.30.147:23822] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oircv.php"] [unique_id "adlDOYiz5v_ljZxkpR_hkgAAAQo"]
[Sat Apr 11 02:36:41.785995 2026] [:error] [pid 55451:tid 55457] [client 72.146.30.147:26861] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "adlDOXApxuyB7yCS5RkpjAAAAMQ"]
[Sat Apr 11 02:36:42.292223 2026] [:error] [pid 21706:tid 21719] [client 72.146.30.147:18967] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "adlDOiGQ1M5d8fQSsLHNSgAAAAs"]
[Sat Apr 11 02:36:42.788371 2026] [:error] [pid 55451:tid 55455] [client 72.146.30.147:32905] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "adlDOnApxuyB7yCS5RkpkQAAAMI"]
[Sat Apr 11 02:36:43.884388 2026] [:error] [pid 55451:tid 55465] [client 72.146.30.147:5847] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "adlDO3ApxuyB7yCS5RkplQAAAMw"]
[Sat Apr 11 02:36:44.445032 2026] [:error] [pid 21706:tid 21708] [client 72.146.30.147:55592] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlDPCGQ1M5d8fQSsLHNTAAAAAA"]
[Sat Apr 11 02:36:44.953668 2026] [:error] [pid 21570:tid 21688] [client 72.146.30.147:29961] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlDPDKs5t9xRSNL6cnbNwAAAE4"]
[Sat Apr 11 02:36:45.542857 2026] [:error] [pid 55451:tid 55470] [client 72.146.30.147:30007] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlDPXApxuyB7yCS5RkpoAAAANE"]
[Sat Apr 11 02:36:46.137017 2026] [:error] [pid 21570:tid 21696] [client 72.146.30.147:20837] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlDPjKs5t9xRSNL6cnbOQAAAFY"]
[Sat Apr 11 02:36:46.668713 2026] [:error] [pid 21569:tid 21678] [client 72.146.30.147:55562] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "adlDPnAvQTgvXJ6vHoqtJwAAAJY"]
[Sat Apr 11 02:36:47.152981 2026] [:error] [pid 55451:tid 55457] [client 72.146.30.147:27420] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "adlDP3ApxuyB7yCS5RkpqgAAAMQ"]
[Sat Apr 11 02:36:47.675926 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:30002] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "adlDP3ApxuyB7yCS5RkprgAAAMs"]
[Sat Apr 11 02:36:48.144622 2026] [:error] [pid 21706:tid 21729] [client 72.146.30.147:29962] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "adlDQCGQ1M5d8fQSsLHNUgAAABU"]
[Sat Apr 11 02:36:48.704631 2026] [:error] [pid 21569:tid 21653] [client 72.146.30.147:26871] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "adlDQHAvQTgvXJ6vHoqtLgAAAIg"]
[Sat Apr 11 02:36:49.303572 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:33579] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "adlDQSGQ1M5d8fQSsLHNXQAAABA"]
[Sat Apr 11 02:36:49.782433 2026] [:error] [pid 21568:tid 21587] [client 72.146.30.147:23916] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "adlDQYiz5v_ljZxkpR_hpAAAAQ8"]
[Sat Apr 11 02:36:50.450284 2026] [:error] [pid 55451:tid 55477] [client 72.146.30.147:20801] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "adlDQnApxuyB7yCS5RkpugAAANg"]
[Sat Apr 11 02:36:51.000589 2026] [:error] [pid 21570:tid 21688] [client 72.146.30.147:20157] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxivicLhot.php"] [unique_id "adlDQjKs5t9xRSNL6cnbQQAAAE4"]
[Sat Apr 11 02:36:51.628082 2026] [:error] [pid 21569:tid 21667] [client 72.146.30.147:26873] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxivicLhot.php"] [unique_id "adlDQ3AvQTgvXJ6vHoqtLwAAAJE"]
[Sat Apr 11 02:36:52.205896 2026] [:error] [pid 21706:tid 21723] [client 72.146.30.147:26265] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxivicLhot.php"] [unique_id "adlDRCGQ1M5d8fQSsLHNbgAAAA8"]
[Sat Apr 11 02:36:52.923763 2026] [:error] [pid 21706:tid 21720] [client 72.146.30.147:55024] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxivicLhot.php"] [unique_id "adlDRCGQ1M5d8fQSsLHNdwAAAAw"]
[Sat Apr 11 02:36:53.427941 2026] [:error] [pid 21706:tid 21712] [client 72.146.30.147:26834] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "adlDRSGQ1M5d8fQSsLHNfQAAAAQ"]
[Sat Apr 11 02:36:54.032308 2026] [:error] [pid 21570:tid 21691] [client 72.146.30.147:55574] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "adlDRjKs5t9xRSNL6cnbTwAAAFE"]
[Sat Apr 11 02:36:54.621175 2026] [:error] [pid 21570:tid 21679] [client 72.146.30.147:23912] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "adlDRjKs5t9xRSNL6cnbUQAAAEk"]
[Sat Apr 11 02:36:55.220276 2026] [:error] [pid 21568:tid 21584] [client 72.146.30.147:23893] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "adlDR4iz5v_ljZxkpR_hqQAAAQw"]
[Sat Apr 11 02:36:55.751049 2026] [:error] [pid 21568:tid 21596] [client 72.146.30.147:26266] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acc.php"] [unique_id "adlDR4iz5v_ljZxkpR_hqgAAARg"]
[Sat Apr 11 02:36:56.311327 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:20138] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acc.php"] [unique_id "adlDSCGQ1M5d8fQSsLHNkQAAABA"]
[Sat Apr 11 02:36:56.879618 2026] [:error] [pid 55451:tid 55460] [client 72.146.30.147:26851] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acc.php"] [unique_id "adlDSHApxuyB7yCS5Rkp2AAAAMc"]
[Sat Apr 11 02:36:57.376403 2026] [:error] [pid 21706:tid 21709] [client 72.146.30.147:29995] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acc.php"] [unique_id "adlDSSGQ1M5d8fQSsLHNmgAAAAE"]
[Sat Apr 11 02:36:57.842190 2026] [:error] [pid 55451:tid 55455] [client 72.146.30.147:5853] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wxeyc.php"] [unique_id "adlDSXApxuyB7yCS5Rkp3wAAAMI"]
[Sat Apr 11 02:36:58.326743 2026] [:error] [pid 21706:tid 21722] [client 72.146.30.147:55558] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wxeyc.php"] [unique_id "adlDSiGQ1M5d8fQSsLHNoAAAAA4"]
[Sat Apr 11 02:36:58.882022 2026] [:error] [pid 21570:tid 21697] [client 72.146.30.147:27402] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wxeyc.php"] [unique_id "adlDSjKs5t9xRSNL6cnbXQAAAFc"]
[Sat Apr 11 02:36:59.376016 2026] [:error] [pid 21568:tid 21592] [client 72.146.30.147:26870] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wxeyc.php"] [unique_id "adlDS4iz5v_ljZxkpR_hswAAARQ"]
[Sat Apr 11 02:36:59.889840 2026] [:error] [pid 21570:tid 21687] [client 72.146.30.147:20853] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "adlDSzKs5t9xRSNL6cnbYgAAAE0"]
[Sat Apr 11 02:37:00.367853 2026] [:error] [pid 21570:tid 21689] [client 72.146.30.147:26859] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "adlDTDKs5t9xRSNL6cnbZQAAAE8"]
[Sat Apr 11 02:37:00.967373 2026] [:error] [pid 21570:tid 21681] [client 72.146.30.147:56781] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "adlDTDKs5t9xRSNL6cnbZwAAAEo"]
[Sat Apr 11 02:37:01.477743 2026] [:error] [pid 55451:tid 55456] [client 72.146.30.147:26301] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "adlDTXApxuyB7yCS5Rkp8AAAAMM"]
[Sat Apr 11 02:37:01.961902 2026] [:error] [pid 21706:tid 21711] [client 72.146.30.147:26827] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adlDTSGQ1M5d8fQSsLHNrAAAAAM"]
[Sat Apr 11 02:37:02.452683 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:23819] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adlDTiGQ1M5d8fQSsLHNswAAABA"]
[Sat Apr 11 02:37:03.027653 2026] [:error] [pid 55451:tid 55477] [client 72.146.30.147:18974] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adlDT3ApxuyB7yCS5Rkp9QAAANg"]
[Sat Apr 11 02:37:03.552668 2026] [:error] [pid 21570:tid 21690] [client 72.146.30.147:20153] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adlDTzKs5t9xRSNL6cnbagAAAFA"]
[Sat Apr 11 02:37:04.137042 2026] [:error] [pid 21570:tid 21681] [client 72.146.30.147:5829] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyflv.php"] [unique_id "adlDUDKs5t9xRSNL6cnbbwAAAEo"]
[Sat Apr 11 02:37:04.702366 2026] [:error] [pid 21569:tid 21657] [client 72.146.30.147:5931] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyflv.php"] [unique_id "adlDUHAvQTgvXJ6vHoqtOgAAAIw"]
[Sat Apr 11 02:37:05.198697 2026] [:error] [pid 21570:tid 21697] [client 72.146.30.147:23931] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyflv.php"] [unique_id "adlDUTKs5t9xRSNL6cnbdQAAAFc"]
[Sat Apr 11 02:37:05.754489 2026] [:error] [pid 21570:tid 21665] [client 72.146.30.147:26259] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyflv.php"] [unique_id "adlDUTKs5t9xRSNL6cnbeQAAAEI"]
[Sat Apr 11 02:37:18.611224 2026] [:error] [pid 21706:tid 21732] [client 72.146.30.147:18952] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlDXiGQ1M5d8fQSsLHODQAAABg"]
[Sat Apr 11 02:37:19.195528 2026] [:error] [pid 21568:tid 21577] [client 72.146.30.147:27396] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlDX4iz5v_ljZxkpR_h5AAAAQU"]
[Sat Apr 11 02:37:19.803357 2026] [:error] [pid 21568:tid 21578] [client 72.146.30.147:20099] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlDX4iz5v_ljZxkpR_h5gAAAQY"]
[Sat Apr 11 02:37:20.318671 2026] [:error] [pid 21569:tid 21680] [client 72.146.30.147:27399] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlDYHAvQTgvXJ6vHoqtXgAAAJc"]
[Sat Apr 11 02:37:20.831827 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:23918] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "adlDYDKs5t9xRSNL6cnbmAAAAEE"]
[Sat Apr 11 02:37:21.443972 2026] [:error] [pid 21706:tid 21729] [client 72.146.30.147:20863] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "adlDYSGQ1M5d8fQSsLHOEAAAABU"]
[Sat Apr 11 02:37:22.097535 2026] [:error] [pid 21568:tid 21592] [client 72.146.30.147:27438] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "adlDYoiz5v_ljZxkpR_h7wAAARQ"]
[Sat Apr 11 02:37:22.638654 2026] [:error] [pid 21570:tid 21681] [client 72.146.30.147:23811] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "adlDYjKs5t9xRSNL6cnbnAAAAEo"]
[Sat Apr 11 02:37:23.173986 2026] [:error] [pid 21706:tid 21732] [client 72.146.30.147:23880] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "adlDYyGQ1M5d8fQSsLHOFwAAABg"]
[Sat Apr 11 02:37:23.816132 2026] [:error] [pid 21706:tid 21711] [client 72.146.30.147:20858] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "adlDYyGQ1M5d8fQSsLHOHgAAAAM"]
[Sat Apr 11 02:37:24.461210 2026] [:error] [pid 21706:tid 21722] [client 72.146.30.147:5923] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "adlDZCGQ1M5d8fQSsLHOJQAAAA4"]
[Sat Apr 11 02:37:25.017334 2026] [:error] [pid 55451:tid 55469] [client 72.146.30.147:20843] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "adlDZXApxuyB7yCS5RkqPAAAANA"]
[Sat Apr 11 02:37:25.701968 2026] [:error] [pid 21706:tid 21710] [client 72.146.30.147:20814] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlDZSGQ1M5d8fQSsLHOLQAAAAI"]
[Sat Apr 11 02:37:26.520678 2026] [:error] [pid 21570:tid 21673] [client 72.146.30.147:5946] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlDZjKs5t9xRSNL6cnbpgAAAEY"]
[Sat Apr 11 02:37:27.153746 2026] [:error] [pid 21706:tid 21708] [client 72.146.30.147:27400] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlDZyGQ1M5d8fQSsLHOOQAAAAA"]
[Sat Apr 11 02:37:27.687754 2026] [:error] [pid 21706:tid 21720] [client 72.146.30.147:55564] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlDZyGQ1M5d8fQSsLHOPQAAAAw"]
[Sat Apr 11 02:37:28.215198 2026] [:error] [pid 21706:tid 21715] [client 72.146.30.147:29958] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlDaCGQ1M5d8fQSsLHORAAAAAc"]
[Sat Apr 11 02:37:28.798812 2026] [:error] [pid 21706:tid 21723] [client 72.146.30.147:55591] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlDaCGQ1M5d8fQSsLHORwAAAA8"]
[Sat Apr 11 02:37:29.268999 2026] [:error] [pid 21570:tid 21696] [client 72.146.30.147:26256] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlDaTKs5t9xRSNL6cnbsgAAAFY"]
[Sat Apr 11 02:37:29.888108 2026] [:error] [pid 21570:tid 21675] [client 72.146.30.147:20826] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlDaTKs5t9xRSNL6cnbtgAAAEc"]
[Sat Apr 11 02:37:30.397876 2026] [:error] [pid 21569:tid 21683] [client 72.146.30.147:23905] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-220.php"] [unique_id "adlDanAvQTgvXJ6vHoqtbwAAAJg"]
[Sat Apr 11 02:37:30.988281 2026] [:error] [pid 55451:tid 55472] [client 72.146.30.147:20850] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-220.php"] [unique_id "adlDanApxuyB7yCS5RkqRgAAANM"]
[Sat Apr 11 02:37:31.486098 2026] [:error] [pid 21570:tid 21661] [client 72.146.30.147:23859] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-220.php"] [unique_id "adlDazKs5t9xRSNL6cnbwgAAAEA"]
[Sat Apr 11 02:37:32.023113 2026] [:error] [pid 21706:tid 21727] [client 72.146.30.147:26826] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-220.php"] [unique_id "adlDbCGQ1M5d8fQSsLHOWgAAABM"]
[Sat Apr 11 02:37:32.522676 2026] [:error] [pid 21570:tid 21691] [client 72.146.30.147:29357] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlDbDKs5t9xRSNL6cnbywAAAFE"]
[Sat Apr 11 02:37:33.062334 2026] [:error] [pid 21569:tid 21645] [client 72.146.30.147:18983] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlDbXAvQTgvXJ6vHoqtdAAAAIA"]
[Sat Apr 11 02:37:33.648102 2026] [:error] [pid 21706:tid 21712] [client 72.146.30.147:30009] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlDbSGQ1M5d8fQSsLHOYgAAAAQ"]
[Sat Apr 11 02:37:34.140340 2026] [:error] [pid 21706:tid 21728] [client 72.146.30.147:23929] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlDbiGQ1M5d8fQSsLHOZgAAABQ"]
[Sat Apr 11 02:37:34.612968 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:23898] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "adlDbiGQ1M5d8fQSsLHOcQAAABA"]
[Sat Apr 11 02:37:35.251973 2026] [:error] [pid 21568:tid 21576] [client 72.146.30.147:23903] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "adlDb4iz5v_ljZxkpR_h_wAAAQQ"]
[Sat Apr 11 02:37:35.741944 2026] [:error] [pid 55451:tid 55471] [client 72.146.30.147:29348] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "adlDb3ApxuyB7yCS5RkqVwAAANI"]
[Sat Apr 11 02:37:36.246507 2026] [:error] [pid 21706:tid 21730] [client 72.146.30.147:5864] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "adlDcCGQ1M5d8fQSsLHOfQAAABY"]
[Sat Apr 11 02:37:36.832017 2026] [:error] [pid 55451:tid 55461] [client 72.146.30.147:33594] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxiviLDIot.php"] [unique_id "adlDcHApxuyB7yCS5RkqYgAAAMg"]
[Sat Apr 11 02:37:37.502905 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:26835] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxiviLDIot.php"] [unique_id "adlDcXApxuyB7yCS5RkqZAAAAMY"]
[Sat Apr 11 02:37:38.128277 2026] [:error] [pid 21706:tid 21708] [client 72.146.30.147:5838] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxiviLDIot.php"] [unique_id "adlDciGQ1M5d8fQSsLHOhQAAAAA"]
[Sat Apr 11 02:37:38.706568 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:29420] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxiviLDIot.php"] [unique_id "adlDcnApxuyB7yCS5RkqbQAAAMs"]
[Sat Apr 11 02:37:39.426585 2026] [:error] [pid 21706:tid 21718] [client 72.146.30.147:27393] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hanyatersenyum.php"] [unique_id "adlDcyGQ1M5d8fQSsLHOkgAAAAo"]
[Sat Apr 11 02:37:40.141167 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:55572] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hanyatersenyum.php"] [unique_id "adlDdCGQ1M5d8fQSsLHOlgAAABA"]
[Sat Apr 11 02:37:40.651358 2026] [:error] [pid 21568:tid 21573] [client 72.146.30.147:26262] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hanyatersenyum.php"] [unique_id "adlDdIiz5v_ljZxkpR_iDQAAAQE"]
[Sat Apr 11 02:37:41.273191 2026] [:error] [pid 21706:tid 21726] [client 72.146.30.147:20110] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hanyatersenyum.php"] [unique_id "adlDdSGQ1M5d8fQSsLHOmwAAABI"]
[Sat Apr 11 02:37:41.813301 2026] [:error] [pid 21568:tid 21590] [client 72.146.30.147:5879] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlDdYiz5v_ljZxkpR_iFwAAARI"]
[Sat Apr 11 02:37:42.299837 2026] [:error] [pid 21569:tid 21674] [client 72.146.30.147:20829] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlDdnAvQTgvXJ6vHoqtfgAAAJQ"]
[Sat Apr 11 02:37:42.853892 2026] [:error] [pid 21568:tid 21595] [client 72.146.30.147:20860] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlDdoiz5v_ljZxkpR_iHgAAARc"]
[Sat Apr 11 02:37:43.465989 2026] [:error] [pid 21706:tid 21723] [client 72.146.30.147:20137] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlDdyGQ1M5d8fQSsLHOogAAAA8"]
[Sat Apr 11 02:37:44.203132 2026] [:error] [pid 21706:tid 21718] [client 72.146.30.147:20806] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upll22.php"] [unique_id "adlDeCGQ1M5d8fQSsLHOqQAAAAo"]
[Sat Apr 11 02:37:44.757632 2026] [:error] [pid 21570:tid 21690] [client 72.146.30.147:29378] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upll22.php"] [unique_id "adlDeDKs5t9xRSNL6cnb7AAAAFA"]
[Sat Apr 11 02:37:45.299129 2026] [:error] [pid 21706:tid 21731] [client 72.146.30.147:26278] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upll22.php"] [unique_id "adlDeSGQ1M5d8fQSsLHOsAAAABc"]
[Sat Apr 11 02:37:45.939993 2026] [:error] [pid 21569:tid 21656] [client 72.146.30.147:5845] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upll22.php"] [unique_id "adlDeXAvQTgvXJ6vHoqtiQAAAIs"]
[Sat Apr 11 02:37:46.584766 2026] [:error] [pid 55451:tid 55470] [client 72.146.30.147:26260] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adlDenApxuyB7yCS5RkqkwAAANE"]
[Sat Apr 11 02:37:47.113644 2026] [:error] [pid 55451:tid 55456] [client 72.146.30.147:20103] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adlDe3ApxuyB7yCS5RkqmgAAAMM"]
[Sat Apr 11 02:37:47.702914 2026] [:error] [pid 21570:tid 21687] [client 72.146.30.147:27430] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adlDezKs5t9xRSNL6cnb8wAAAE0"]
[Sat Apr 11 02:37:48.250994 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:26860] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adlDfHApxuyB7yCS5RkqoQAAAMY"]
[Sat Apr 11 02:37:48.859219 2026] [:error] [pid 55451:tid 55468] [client 72.146.30.147:20841] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "adlDfHApxuyB7yCS5RkqpwAAAM8"]
[Sat Apr 11 02:37:49.467291 2026] [:error] [pid 21570:tid 21689] [client 72.146.30.147:26277] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "adlDfTKs5t9xRSNL6cnb-QAAAE8"]
[Sat Apr 11 02:37:49.994114 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:29344] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "adlDfSGQ1M5d8fQSsLHOuQAAABA"]
[Sat Apr 11 02:37:50.567065 2026] [:error] [pid 21569:tid 21648] [client 72.146.30.147:27437] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "adlDfnAvQTgvXJ6vHoqtjQAAAIM"]
[Sat Apr 11 02:37:51.074692 2026] [:error] [pid 21568:tid 21581] [client 72.146.30.147:23921] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-243.php"] [unique_id "adlDf4iz5v_ljZxkpR_iMQAAAQk"]
[Sat Apr 11 02:37:51.685724 2026] [:error] [pid 21569:tid 21664] [client 72.146.30.147:23832] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-243.php"] [unique_id "adlDf3AvQTgvXJ6vHoqtkwAAAJA"]
[Sat Apr 11 02:37:52.177094 2026] [:error] [pid 21706:tid 21732] [client 72.146.30.147:18995] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-243.php"] [unique_id "adlDgCGQ1M5d8fQSsLHOzAAAABg"]
[Sat Apr 11 02:37:52.896332 2026] [:error] [pid 21569:tid 21671] [client 72.146.30.147:26875] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-243.php"] [unique_id "adlDgHAvQTgvXJ6vHoqtmQAAAJM"]
[Sat Apr 11 02:37:53.546050 2026] [:error] [pid 21570:tid 21693] [client 72.146.30.147:5947] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlDgTKs5t9xRSNL6cncBAAAAFM"]
[Sat Apr 11 02:37:54.215430 2026] [:error] [pid 21568:tid 21588] [client 72.146.30.147:23846] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlDgoiz5v_ljZxkpR_iNwAAARA"]
[Sat Apr 11 02:37:54.824795 2026] [:error] [pid 21569:tid 21648] [client 72.146.30.147:5930] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlDgnAvQTgvXJ6vHoqtogAAAIM"]
[Sat Apr 11 02:37:55.354543 2026] [:error] [pid 55451:tid 55468] [client 72.146.30.147:23889] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlDg3ApxuyB7yCS5RkqvwAAAM8"]
[Sat Apr 11 02:37:56.027783 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:23837] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "adlDhHApxuyB7yCS5RkqwgAAAMs"]
[Sat Apr 11 02:37:56.807060 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:29343] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "adlDhHApxuyB7yCS5RkqyAAAAMY"]
[Sat Apr 11 02:37:57.433767 2026] [:error] [pid 21706:tid 21708] [client 72.146.30.147:27418] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "adlDhSGQ1M5d8fQSsLHO7AAAAAA"]
[Sat Apr 11 02:37:58.361793 2026] [:error] [pid 21569:tid 21659] [client 72.146.30.147:29324] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "adlDhnAvQTgvXJ6vHoqtqQAAAI0"]
[Sat Apr 11 02:37:58.983649 2026] [:error] [pid 21569:tid 21669] [client 72.146.30.147:20831] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "adlDhnAvQTgvXJ6vHoqtsQAAAJI"]
[Sat Apr 11 02:37:59.530986 2026] [:error] [pid 21568:tid 21592] [client 72.146.30.147:32926] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "adlDh4iz5v_ljZxkpR_iTAAAARQ"]
[Sat Apr 11 02:38:00.083159 2026] [:error] [pid 21706:tid 21727] [client 72.146.30.147:5893] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "adlDiCGQ1M5d8fQSsLHO-QAAABM"]
[Sat Apr 11 02:38:00.613780 2026] [:error] [pid 21570:tid 21661] [client 72.146.30.147:32952] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "adlDiDKs5t9xRSNL6cncFQAAAEA"]
[Sat Apr 11 02:38:01.226510 2026] [:error] [pid 21569:tid 21652] [client 72.146.30.147:23810] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlDiXAvQTgvXJ6vHoqtvAAAAIc"]
[Sat Apr 11 02:38:01.843929 2026] [:error] [pid 21706:tid 21728] [client 72.146.30.147:55007] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlDiSGQ1M5d8fQSsLHPCgAAABQ"]
[Sat Apr 11 02:38:02.404974 2026] [:error] [pid 21570:tid 21688] [client 72.146.30.147:26294] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlDijKs5t9xRSNL6cncGAAAAE4"]
[Sat Apr 11 02:38:03.094620 2026] [:error] [pid 55451:tid 55467] [client 72.146.30.147:23862] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlDi3ApxuyB7yCS5Rkq2gAAAM4"]
[Sat Apr 11 02:38:03.635705 2026] [:error] [pid 55451:tid 55476] [client 72.146.30.147:27450] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlDi3ApxuyB7yCS5Rkq3QAAANc"]
[Sat Apr 11 02:38:04.176554 2026] [:error] [pid 21706:tid 21719] [client 72.146.30.147:27414] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlDjCGQ1M5d8fQSsLHPHwAAAAs"]
[Sat Apr 11 02:38:05.424666 2026] [:error] [pid 21706:tid 21732] [client 72.146.30.147:20123] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlDjSGQ1M5d8fQSsLHPLQAAABg"]
[Sat Apr 11 02:38:06.109156 2026] [:error] [pid 21569:tid 21654] [client 72.146.30.147:5849] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlDjnAvQTgvXJ6vHoqtwgAAAIk"]
[Sat Apr 11 02:38:06.745716 2026] [:error] [pid 21569:tid 21664] [client 72.146.30.147:23833] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "adlDjnAvQTgvXJ6vHoqtxQAAAJA"]
[Sat Apr 11 02:38:07.347921 2026] [:error] [pid 21570:tid 21682] [client 72.146.30.147:27415] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "adlDjzKs5t9xRSNL6cncIwAAAEs"]
[Sat Apr 11 02:38:07.997674 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:23870] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "adlDj3ApxuyB7yCS5Rkq7gAAAMs"]
[Sat Apr 11 02:38:08.566348 2026] [:error] [pid 21568:tid 21579] [client 72.146.30.147:20131] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "adlDkIiz5v_ljZxkpR_iWgAAAQc"]
[Sat Apr 11 02:38:09.127599 2026] [:error] [pid 21706:tid 21728] [client 72.146.30.147:33544] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adlDkSGQ1M5d8fQSsLHPNgAAABQ"]
[Sat Apr 11 02:38:09.680289 2026] [:error] [pid 55451:tid 55467] [client 72.146.30.147:18989] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adlDkXApxuyB7yCS5Rkq-gAAAM4"]
[Sat Apr 11 02:38:10.229485 2026] [:error] [pid 21570:tid 21677] [client 72.146.30.147:56803] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adlDkjKs5t9xRSNL6cncLwAAAEg"]
[Sat Apr 11 02:38:10.789228 2026] [:error] [pid 21569:tid 21662] [client 72.146.30.147:55583] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adlDknAvQTgvXJ6vHoqtzgAAAI8"]
[Sat Apr 11 02:38:11.470197 2026] [:error] [pid 21568:tid 21584] [client 72.146.30.147:55610] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adlDk4iz5v_ljZxkpR_iXgAAAQw"]
[Sat Apr 11 02:38:11.967072 2026] [:error] [pid 21706:tid 21717] [client 72.146.30.147:5885] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adlDkyGQ1M5d8fQSsLHPSAAAAAk"]
[Sat Apr 11 02:38:12.519839 2026] [:error] [pid 21706:tid 21720] [client 72.146.30.147:23812] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adlDlCGQ1M5d8fQSsLHPTgAAAAw"]
[Sat Apr 11 02:38:13.113089 2026] [:error] [pid 21706:tid 21721] [client 72.146.30.147:20859] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adlDlSGQ1M5d8fQSsLHPVAAAAA0"]
[Sat Apr 11 02:38:13.789865 2026] [:error] [pid 21570:tid 21692] [client 72.146.30.147:33576] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "adlDlTKs5t9xRSNL6cncQwAAAFI"]
[Sat Apr 11 02:38:14.391284 2026] [:error] [pid 21706:tid 21722] [client 72.146.30.147:23824] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "adlDliGQ1M5d8fQSsLHPXgAAAA4"]
[Sat Apr 11 02:38:14.921006 2026] [:error] [pid 55451:tid 55470] [client 72.146.30.147:18975] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "adlDlnApxuyB7yCS5RkrBQAAANE"]
[Sat Apr 11 02:38:15.600170 2026] [:error] [pid 21706:tid 21711] [client 72.146.30.147:29955] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "adlDlyGQ1M5d8fQSsLHPZQAAAAM"]
[Sat Apr 11 02:38:16.191223 2026] [:error] [pid 21706:tid 21712] [client 72.146.30.147:27407] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX2.php"] [unique_id "adlDmCGQ1M5d8fQSsLHPbAAAAAQ"]
[Sat Apr 11 02:38:16.757579 2026] [:error] [pid 21569:tid 21656] [client 72.146.30.147:20106] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX2.php"] [unique_id "adlDmHAvQTgvXJ6vHoqt1gAAAIs"]
[Sat Apr 11 02:38:29.714864 2026] [:error] [pid 21706:tid 21729] [client 72.146.30.147:23923] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "adlDpSGQ1M5d8fQSsLHPywAAABU"]
[Sat Apr 11 02:38:30.305575 2026] [:error] [pid 55451:tid 55475] [client 72.146.30.147:23883] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "adlDpnApxuyB7yCS5RkrHwAAANY"]
[Sat Apr 11 02:38:30.874455 2026] [:error] [pid 21568:tid 21593] [client 72.146.30.147:29986] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "adlDpoiz5v_ljZxkpR_ijAAAARU"]
[Sat Apr 11 02:38:31.476848 2026] [:error] [pid 21706:tid 21722] [client 72.146.30.147:23853] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "adlDpyGQ1M5d8fQSsLHP0QAAAA4"]
[Sat Apr 11 02:38:32.062106 2026] [:error] [pid 21706:tid 21731] [client 72.146.30.147:55603] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ov-Simple1.php"] [unique_id "adlDqCGQ1M5d8fQSsLHP1QAAABc"]
[Sat Apr 11 02:38:32.840282 2026] [:error] [pid 21568:tid 21583] [client 72.146.30.147:29996] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ov-Simple1.php"] [unique_id "adlDqIiz5v_ljZxkpR_ilQAAAQs"]
[Sat Apr 11 02:38:33.603914 2026] [:error] [pid 21569:tid 21655] [client 72.146.30.147:30000] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ov-Simple1.php"] [unique_id "adlDqXAvQTgvXJ6vHoquAAAAAIo"]
[Sat Apr 11 02:38:34.137602 2026] [:error] [pid 21706:tid 21730] [client 72.146.30.147:27441] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ov-Simple1.php"] [unique_id "adlDqiGQ1M5d8fQSsLHP3gAAABY"]
[Sat Apr 11 02:38:34.863892 2026] [:error] [pid 21568:tid 21585] [client 72.146.30.147:27421] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adlDqoiz5v_ljZxkpR_inwAAAQ0"]
[Sat Apr 11 02:38:35.367895 2026] [:error] [pid 21570:tid 21672] [client 72.146.30.147:20807] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adlDqzKs5t9xRSNL6cncigAAAEU"]
[Sat Apr 11 02:38:36.006477 2026] [:error] [pid 55451:tid 55468] [client 72.146.30.147:55032] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adlDrHApxuyB7yCS5RkrLAAAAM8"]
[Sat Apr 11 02:38:36.544088 2026] [:error] [pid 55451:tid 55476] [client 72.146.30.147:29364] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "adlDrHApxuyB7yCS5RkrMgAAANc"]
[Sat Apr 11 02:38:37.045847 2026] [:error] [pid 55451:tid 55467] [client 72.146.30.147:5901] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "adlDrXApxuyB7yCS5RkrOgAAAM4"]
[Sat Apr 11 02:38:37.759226 2026] [:error] [pid 21568:tid 21595] [client 72.146.30.147:55566] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "adlDrYiz5v_ljZxkpR_ipwAAARc"]
[Sat Apr 11 02:38:38.463839 2026] [:error] [pid 21569:tid 21664] [client 72.146.30.147:23851] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "adlDrnAvQTgvXJ6vHoquCQAAAJA"]
[Sat Apr 11 02:38:39.500157 2026] [:error] [pid 21570:tid 21675] [client 72.146.30.147:54985] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "adlDrzKs5t9xRSNL6cnckgAAAEc"]
[Sat Apr 11 02:38:40.175200 2026] [:error] [pid 21569:tid 21650] [client 72.146.30.147:29371] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta0ol.php"] [unique_id "adlDsHAvQTgvXJ6vHoquDgAAAIU"]
[Sat Apr 11 02:38:40.858448 2026] [:error] [pid 21570:tid 21681] [client 72.146.30.147:5896] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta0ol.php"] [unique_id "adlDsDKs5t9xRSNL6cncmwAAAEo"]
[Sat Apr 11 02:38:41.825650 2026] [:error] [pid 21568:tid 21590] [client 72.146.30.147:26268] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta0ol.php"] [unique_id "adlDsYiz5v_ljZxkpR_ivQAAARI"]
[Sat Apr 11 02:38:42.437411 2026] [:error] [pid 21706:tid 21726] [client 72.146.30.147:27412] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ta0ol.php"] [unique_id "adlDsiGQ1M5d8fQSsLHQAgAAABI"]
[Sat Apr 11 02:38:43.042278 2026] [:error] [pid 55451:tid 55456] [client 72.146.30.147:27401] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "adlDs3ApxuyB7yCS5RkrSwAAAMM"]
[Sat Apr 11 02:38:43.733747 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:27412] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "adlDsyGQ1M5d8fQSsLHQEwAAABA"]
[Sat Apr 11 02:38:44.665411 2026] [:error] [pid 21569:tid 21647] [client 72.146.30.147:55580] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "adlDtHAvQTgvXJ6vHoquFAAAAII"]
[Sat Apr 11 02:38:45.367563 2026] [:error] [pid 21568:tid 21579] [client 72.146.30.147:23847] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "adlDtYiz5v_ljZxkpR_iyAAAAQc"]
[Sat Apr 11 02:38:46.246440 2026] [:error] [pid 21570:tid 21675] [client 72.146.30.147:55556] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "adlDtjKs5t9xRSNL6cncswAAAEc"]
[Sat Apr 11 02:38:47.234692 2026] [:error] [pid 21706:tid 21716] [client 72.146.30.147:29983] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "adlDtyGQ1M5d8fQSsLHQMgAAAAg"]
[Sat Apr 11 02:38:48.273873 2026] [:error] [pid 21706:tid 21718] [client 72.146.30.147:26831] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "adlDuCGQ1M5d8fQSsLHQPgAAAAo"]
[Sat Apr 11 02:38:49.099545 2026] [:error] [pid 21570:tid 21696] [client 72.146.30.147:55582] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "adlDuTKs5t9xRSNL6cncwAAAAFY"]
[Sat Apr 11 02:38:50.352553 2026] [:error] [pid 21570:tid 21689] [client 72.146.30.147:26287] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adlDujKs5t9xRSNL6cncygAAAE8"]
[Sat Apr 11 02:38:51.381155 2026] [:error] [pid 21706:tid 21719] [client 72.146.30.147:23830] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adlDuyGQ1M5d8fQSsLHQSQAAAAs"]
[Sat Apr 11 02:38:52.586059 2026] [:error] [pid 21570:tid 21670] [client 72.146.30.147:26247] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adlDvDKs5t9xRSNL6cnc1wAAAEQ"]
[Sat Apr 11 02:38:53.305905 2026] [:error] [pid 21570:tid 21673] [client 72.146.30.147:23917] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adlDvTKs5t9xRSNL6cnc2QAAAEY"]
[Sat Apr 11 02:38:54.371807 2026] [:error] [pid 55451:tid 55468] [client 72.146.30.147:55565] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "adlDvnApxuyB7yCS5RkrVgAAAM8"]
[Sat Apr 11 02:38:55.320723 2026] [:error] [pid 21569:tid 21645] [client 72.146.30.147:27452] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "adlDv3AvQTgvXJ6vHoquIAAAAIA"]
[Sat Apr 11 02:38:56.031264 2026] [:error] [pid 55451:tid 55462] [client 72.146.30.147:32948] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "adlDwHApxuyB7yCS5RkrYQAAAMk"]
[Sat Apr 11 02:38:56.534022 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:54999] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "adlDwHApxuyB7yCS5RkrZwAAAMY"]
[Sat Apr 11 02:38:57.090858 2026] [:error] [pid 21570:tid 21673] [client 72.146.30.147:29328] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "adlDwTKs5t9xRSNL6cnc4AAAAEY"]
[Sat Apr 11 02:38:57.797503 2026] [:error] [pid 21570:tid 21692] [client 72.146.30.147:30006] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "adlDwTKs5t9xRSNL6cnc5AAAAFI"]
[Sat Apr 11 02:38:58.901661 2026] [:error] [pid 21706:tid 21718] [client 72.146.30.147:29971] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "adlDwiGQ1M5d8fQSsLHQcgAAAAo"]
[Sat Apr 11 02:38:59.583033 2026] [:error] [pid 21570:tid 21681] [client 72.146.30.147:64118] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "adlDwzKs5t9xRSNL6cnc7gAAAEo"]
[Sat Apr 11 02:39:00.313114 2026] [:error] [pid 21706:tid 21719] [client 72.146.30.147:23875] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adlDxCGQ1M5d8fQSsLHQeQAAAAs"]
[Sat Apr 11 02:39:01.078577 2026] [:error] [pid 21570:tid 21687] [client 72.146.30.147:20861] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adlDxTKs5t9xRSNL6cnc9QAAAE0"]
[Sat Apr 11 02:39:01.812727 2026] [:error] [pid 21569:tid 21653] [client 72.146.30.147:5933] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adlDxXAvQTgvXJ6vHoquLAAAAIg"]
[Sat Apr 11 02:39:02.415977 2026] [:error] [pid 21568:tid 21590] [client 72.146.30.147:26252] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "adlDxoiz5v_ljZxkpR_jAQAAARI"]
[Sat Apr 11 02:39:03.043962 2026] [:error] [pid 21569:tid 21652] [client 72.146.30.147:55010] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adlDx3AvQTgvXJ6vHoquMwAAAIc"]
[Sat Apr 11 02:39:03.587762 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:5915] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adlDx3ApxuyB7yCS5RkrcwAAAMs"]
[Sat Apr 11 02:39:04.173821 2026] [:error] [pid 55451:tid 55469] [client 72.146.30.147:18993] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adlDyHApxuyB7yCS5RkrfAAAANA"]
[Sat Apr 11 02:39:04.657633 2026] [:error] [pid 21568:tid 21572] [client 72.146.30.147:23835] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "adlDyIiz5v_ljZxkpR_jCgAAAQA"]
[Sat Apr 11 02:39:05.138873 2026] [:error] [pid 21569:tid 21660] [client 72.146.30.147:20143] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "adlDyXAvQTgvXJ6vHoquNAAAAI4"]
[Sat Apr 11 02:39:05.690727 2026] [:error] [pid 21706:tid 21731] [client 72.146.30.147:33558] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "adlDySGQ1M5d8fQSsLHQiwAAABc"]
[Sat Apr 11 02:39:06.305879 2026] [:error] [pid 21568:tid 21576] [client 72.146.30.147:19004] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "adlDyoiz5v_ljZxkpR_jEwAAAQQ"]
[Sat Apr 11 02:39:07.094942 2026] [:error] [pid 21569:tid 21674] [client 72.146.30.147:32956] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "adlDy3AvQTgvXJ6vHoquPgAAAJQ"]
[Sat Apr 11 02:39:07.581862 2026] [:error] [pid 21706:tid 21713] [client 72.146.30.147:5935] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adlDyyGQ1M5d8fQSsLHQmAAAAAU"]
[Sat Apr 11 02:39:08.276388 2026] [:error] [pid 21706:tid 21731] [client 72.146.30.147:20813] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adlDzCGQ1M5d8fQSsLHQnAAAABc"]
[Sat Apr 11 02:39:09.446084 2026] [:error] [pid 21570:tid 21695] [client 72.146.30.147:20130] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adlDzTKs5t9xRSNL6cndEgAAAFU"]
[Sat Apr 11 02:39:09.995424 2026] [:error] [pid 21706:tid 21732] [client 72.146.30.147:23867] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "adlDzSGQ1M5d8fQSsLHQqgAAABg"]
[Sat Apr 11 02:39:11.732468 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:27394] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adlDz3ApxuyB7yCS5RkrkQAAAMs"]
[Sat Apr 11 02:39:12.371050 2026] [:error] [pid 55451:tid 55474] [client 72.146.30.147:20156] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adlD0HApxuyB7yCS5RkrmAAAANU"]
[Sat Apr 11 02:39:12.989715 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:23908] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adlD0HApxuyB7yCS5RkrnwAAAMs"]
[Sat Apr 11 02:39:13.459087 2026] [:error] [pid 21570:tid 21698] [client 72.146.30.147:5862] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adlD0TKs5t9xRSNL6cndMQAAAFg"]
[Sat Apr 11 02:39:13.999987 2026] [:error] [pid 21568:tid 21590] [client 72.146.30.147:26858] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "adlD0Yiz5v_ljZxkpR_jGwAAARI"]
[Sat Apr 11 02:39:14.536619 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:29359] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "adlD0jKs5t9xRSNL6cndNwAAAEE"]
[Sat Apr 11 02:39:15.170480 2026] [:error] [pid 21706:tid 21732] [client 72.146.30.147:29370] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "adlD0yGQ1M5d8fQSsLHQtAAAABg"]
[Sat Apr 11 02:39:15.698183 2026] [:error] [pid 21569:tid 21664] [client 72.146.30.147:26284] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "adlD03AvQTgvXJ6vHoquUwAAAJA"]
[Sat Apr 11 02:39:16.280411 2026] [:error] [pid 21568:tid 21576] [client 72.146.30.147:18955] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlD1Iiz5v_ljZxkpR_jHgAAAQQ"]
[Sat Apr 11 02:39:16.783064 2026] [:error] [pid 21568:tid 21593] [client 72.146.30.147:18950] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlD1Iiz5v_ljZxkpR_jIQAAARU"]
[Sat Apr 11 02:39:17.252823 2026] [:error] [pid 21568:tid 21580] [client 72.146.30.147:23894] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlD1Yiz5v_ljZxkpR_jJgAAAQg"]
[Sat Apr 11 02:39:17.908045 2026] [:error] [pid 21568:tid 21577] [client 72.146.30.147:26282] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlD1Yiz5v_ljZxkpR_jLQAAAQU"]
[Sat Apr 11 02:39:18.569617 2026] [:error] [pid 21568:tid 21591] [client 72.146.30.147:23897] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "adlD1oiz5v_ljZxkpR_jMwAAARM"]
[Sat Apr 11 02:39:19.294909 2026] [:error] [pid 55451:tid 55476] [client 72.146.30.147:23919] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "adlD13ApxuyB7yCS5RkrrgAAANc"]
[Sat Apr 11 02:39:19.863507 2026] [:error] [pid 55451:tid 55465] [client 72.146.30.147:32954] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "adlD13ApxuyB7yCS5RkrtAAAAMw"]
[Sat Apr 11 02:39:20.400495 2026] [:error] [pid 55451:tid 55475] [client 72.146.30.147:5881] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "adlD2HApxuyB7yCS5RkruwAAANY"]
[Sat Apr 11 02:39:20.960441 2026] [:error] [pid 21569:tid 21683] [client 72.146.30.147:20101] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlD2HAvQTgvXJ6vHoquZQAAAJg"]
[Sat Apr 11 02:39:21.593614 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:30005] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlD2XApxuyB7yCS5RkrvwAAAMY"]
[Sat Apr 11 02:39:22.120554 2026] [:error] [pid 55451:tid 55454] [client 72.146.30.147:5856] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlD2nApxuyB7yCS5RkrwgAAAME"]
[Sat Apr 11 02:39:22.692029 2026] [:error] [pid 55451:tid 55471] [client 72.146.30.147:5903] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlD2nApxuyB7yCS5RkrxQAAANI"]
[Sat Apr 11 02:39:23.258872 2026] [:error] [pid 21706:tid 21732] [client 72.146.30.147:55584] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "adlD2yGQ1M5d8fQSsLHQwwAAABg"]
[Sat Apr 11 02:39:23.940660 2026] [:error] [pid 21568:tid 21590] [client 72.146.30.147:23914] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "adlD24iz5v_ljZxkpR_jSQAAARI"]
[Sat Apr 11 02:39:24.417657 2026] [:error] [pid 55451:tid 55468] [client 72.146.30.147:20828] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "adlD3HApxuyB7yCS5RkrygAAAM8"]
[Sat Apr 11 02:39:24.959818 2026] [:error] [pid 21706:tid 21720] [client 72.146.30.147:55559] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "adlD3CGQ1M5d8fQSsLHQzwAAAAw"]
[Sat Apr 11 02:39:25.561828 2026] [:error] [pid 55451:tid 55469] [client 72.146.30.147:32951] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlD3XApxuyB7yCS5RkrzQAAANA"]
[Sat Apr 11 02:39:26.131323 2026] [:error] [pid 21568:tid 21584] [client 72.146.30.147:20817] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlD3oiz5v_ljZxkpR_jUwAAAQw"]
[Sat Apr 11 02:39:26.749735 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:26842] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlD3iGQ1M5d8fQSsLHQ1wAAABA"]
[Sat Apr 11 02:39:27.506741 2026] [:error] [pid 21706:tid 21720] [client 72.146.30.147:55005] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlD3yGQ1M5d8fQSsLHQ4AAAAAw"]
[Sat Apr 11 02:39:41.682801 2026] [:error] [pid 55451:tid 55474] [client 72.146.30.147:26244] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "adlD7XApxuyB7yCS5RksJAAAANU"]
[Sat Apr 11 02:39:42.242035 2026] [:error] [pid 21569:tid 21655] [client 72.146.30.147:29319] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "adlD7nAvQTgvXJ6vHoqulQAAAIo"]
[Sat Apr 11 02:39:42.766688 2026] [:error] [pid 55451:tid 55477] [client 72.146.30.147:29312] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "adlD7nApxuyB7yCS5RksMAAAANg"]
[Sat Apr 11 02:39:43.516084 2026] [:error] [pid 21706:tid 21729] [client 72.146.30.147:55587] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "adlD7yGQ1M5d8fQSsLHRIgAAABU"]
[Sat Apr 11 02:39:44.160924 2026] [:error] [pid 55451:tid 55470] [client 72.146.30.147:29377] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "adlD8HApxuyB7yCS5RksNwAAANE"]
[Sat Apr 11 02:39:44.955106 2026] [:error] [pid 21568:tid 21579] [client 72.146.30.147:29411] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "adlD8Iiz5v_ljZxkpR_jmgAAAQc"]
[Sat Apr 11 02:39:45.510190 2026] [:error] [pid 21706:tid 21728] [client 72.146.30.147:33583] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "adlD8SGQ1M5d8fQSsLHRJwAAABQ"]
[Sat Apr 11 02:39:46.066370 2026] [:error] [pid 21706:tid 21729] [client 72.146.30.147:62293] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "adlD8iGQ1M5d8fQSsLHRKwAAABU"]
[Sat Apr 11 02:39:46.693761 2026] [:error] [pid 21570:tid 21679] [client 72.146.30.147:20848] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "adlD8jKs5t9xRSNL6cndYAAAAEk"]
[Sat Apr 11 02:39:47.286557 2026] [:error] [pid 21569:tid 21659] [client 72.146.30.147:26240] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "adlD83AvQTgvXJ6vHoqumQAAAI0"]
[Sat Apr 11 02:39:47.992065 2026] [:error] [pid 21706:tid 21713] [client 72.146.30.147:26248] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "adlD8yGQ1M5d8fQSsLHRPgAAAAU"]
[Sat Apr 11 02:39:48.689606 2026] [:error] [pid 21568:tid 21581] [client 72.146.30.147:64085] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "adlD9Iiz5v_ljZxkpR_jqQAAAQk"]
[Sat Apr 11 02:39:49.263425 2026] [:error] [pid 21706:tid 21721] [client 72.146.30.147:26246] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/jp.php"] [unique_id "adlD9SGQ1M5d8fQSsLHRRwAAAA0"]
[Sat Apr 11 02:39:49.859516 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:26840] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/jp.php"] [unique_id "adlD9SGQ1M5d8fQSsLHRTgAAABA"]
[Sat Apr 11 02:39:50.457160 2026] [:error] [pid 21570:tid 21694] [client 72.146.30.147:64723] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/jp.php"] [unique_id "adlD9jKs5t9xRSNL6cndbQAAAFQ"]
[Sat Apr 11 02:39:51.164728 2026] [:error] [pid 21569:tid 21664] [client 72.146.30.147:23887] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/jp.php"] [unique_id "adlD93AvQTgvXJ6vHoqungAAAJA"]
[Sat Apr 11 02:39:51.745913 2026] [:error] [pid 55451:tid 55474] [client 72.146.30.147:18963] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "adlD93ApxuyB7yCS5RksWAAAANU"]
[Sat Apr 11 02:39:52.367941 2026] [:error] [pid 21568:tid 21588] [client 72.146.30.147:29374] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "adlD-Iiz5v_ljZxkpR_jtAAAARA"]
[Sat Apr 11 02:39:52.977891 2026] [:error] [pid 55451:tid 55472] [client 72.146.30.147:18961] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "adlD-HApxuyB7yCS5RksWgAAANM"]
[Sat Apr 11 02:39:53.550014 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:29985] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "adlD-TKs5t9xRSNL6cnddgAAAEE"]
[Sat Apr 11 02:39:54.212561 2026] [:error] [pid 21706:tid 21721] [client 72.146.30.147:20824] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "adlD-iGQ1M5d8fQSsLHRfgAAAA0"]
[Sat Apr 11 02:39:54.878238 2026] [:error] [pid 21569:tid 21655] [client 72.146.30.147:5944] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "adlD-nAvQTgvXJ6vHoquowAAAIo"]
[Sat Apr 11 02:39:55.518301 2026] [:error] [pid 55451:tid 55476] [client 72.146.30.147:5921] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "adlD-3ApxuyB7yCS5RksYgAAANc"]
[Sat Apr 11 02:39:56.159645 2026] [:error] [pid 55451:tid 55468] [client 72.146.30.147:55585] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "adlD_HApxuyB7yCS5RksZgAAAM8"]
[Sat Apr 11 02:39:56.775600 2026] [:error] [pid 21568:tid 21582] [client 72.146.30.147:5938] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "adlD_Iiz5v_ljZxkpR_j0wAAAQo"]
[Sat Apr 11 02:39:57.358963 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:26863] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "adlD_TKs5t9xRSNL6cndggAAAEE"]
[Sat Apr 11 02:39:57.991797 2026] [:error] [pid 21706:tid 21712] [client 72.146.30.147:23924] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "adlD_SGQ1M5d8fQSsLHRlAAAAAQ"]
[Sat Apr 11 02:39:58.623647 2026] [:error] [pid 21570:tid 21695] [client 72.146.30.147:29361] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "adlD_jKs5t9xRSNL6cndjQAAAFU"]
[Sat Apr 11 02:39:59.189820 2026] [:error] [pid 21706:tid 21709] [client 72.146.30.147:5878] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "adlD_yGQ1M5d8fQSsLHRmgAAAAE"]
[Sat Apr 11 02:39:59.897579 2026] [:error] [pid 21706:tid 21712] [client 72.146.30.147:29998] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "adlD_yGQ1M5d8fQSsLHRpgAAAAQ"]
[Sat Apr 11 02:40:00.466801 2026] [:error] [pid 55451:tid 55472] [client 72.146.30.147:26273] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "adlEAHApxuyB7yCS5RksdwAAANM"]
[Sat Apr 11 02:40:01.105852 2026] [:error] [pid 21569:tid 21653] [client 72.146.30.147:29988] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "adlEAXAvQTgvXJ6vHoqurQAAAIg"]
[Sat Apr 11 02:40:02.446689 2026] [:error] [pid 55451:tid 55460] [client 72.146.30.147:18984] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adlEAnApxuyB7yCS5RksiQAAAMc"]
[Sat Apr 11 02:40:03.212087 2026] [:error] [pid 55451:tid 55456] [client 72.146.30.147:62224] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adlEA3ApxuyB7yCS5RkskwAAAMM"]
[Sat Apr 11 02:40:03.824652 2026] [:error] [pid 21706:tid 21709] [client 72.146.30.147:20120] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adlEAyGQ1M5d8fQSsLHRvwAAAAE"]
[Sat Apr 11 02:40:04.620042 2026] [:error] [pid 21706:tid 21712] [client 72.146.30.147:5942] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adlEBCGQ1M5d8fQSsLHRyAAAAAQ"]
[Sat Apr 11 02:40:05.409494 2026] [:error] [pid 55451:tid 55474] [client 72.146.30.147:26291] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlEBXApxuyB7yCS5RksoAAAANU"]
[Sat Apr 11 02:40:06.700011 2026] [:error] [pid 55451:tid 55470] [client 72.146.30.147:27408] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlEBnApxuyB7yCS5RksqwAAANE"]
[Sat Apr 11 02:40:08.184085 2026] [:error] [pid 21570:tid 21685] [client 72.146.30.147:23907] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlECDKs5t9xRSNL6cndpgAAAEw"]
[Sat Apr 11 02:40:20.053402 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:5866] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlEFCGQ1M5d8fQSsLHSTQAAABA"]
[Sat Apr 11 03:29:53.685743 2026] [:error] [pid 21569:tid 21652] [client 212.227.21.19:31026] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "adlPsXAvQTgvXJ6vHorERAAAAIc"]
[Sat Apr 11 03:29:56.227623 2026] [:error] [pid 21706:tid 21714] [client 212.227.21.19:31040] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "adlPtCGQ1M5d8fQSsLELzwAAAAY"]
[Sat Apr 11 03:29:58.676448 2026] [:error] [pid 21570:tid 21675] [client 212.227.21.19:6394] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "adlPtjKs5t9xRSNL6cn3xgAAAEc"]
[Sat Apr 11 03:30:01.289769 2026] [:error] [pid 21706:tid 21717] [client 212.227.21.19:6396] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "adlPuSGQ1M5d8fQSsLEL3wAAAAk"]
[Sat Apr 11 03:30:03.727092 2026] [:error] [pid 21706:tid 21726] [client 212.227.21.19:6404] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "adlPuyGQ1M5d8fQSsLEL6wAAABI"]
[Sat Apr 11 03:30:06.203203 2026] [:error] [pid 21570:tid 21677] [client 212.227.21.19:6412] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "adlPvjKs5t9xRSNL6cn34AAAAEg"]
[Sat Apr 11 03:30:08.709812 2026] [:error] [pid 21706:tid 21713] [client 212.227.21.19:23142] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "adlPwCGQ1M5d8fQSsLEL9gAAAAU"]
[Sat Apr 11 03:30:11.026278 2026] [:error] [pid 21570:tid 21696] [client 212.227.21.19:23150] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "adlPwzKs5t9xRSNL6cn36wAAAFY"]
[Sat Apr 11 03:30:13.546669 2026] [:error] [pid 21706:tid 21716] [client 212.227.21.19:23166] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "adlPxSGQ1M5d8fQSsLEL_gAAAAg"]
[Sat Apr 11 03:30:15.872560 2026] [:error] [pid 21706:tid 21713] [client 212.227.21.19:23176] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "adlPxyGQ1M5d8fQSsLEMCwAAAAU"]
[Sat Apr 11 03:30:18.391244 2026] [:error] [pid 55451:tid 55474] [client 212.227.21.19:33188] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adlPynApxuyB7yCS5RlUygAAANU"]
[Sat Apr 11 03:30:20.744025 2026] [:error] [pid 55451:tid 55465] [client 212.227.21.19:33192] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adlPzHApxuyB7yCS5RlU1gAAAMw"]
[Sat Apr 11 03:30:23.266490 2026] [:error] [pid 21570:tid 21694] [client 212.227.21.19:33194] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adlPzzKs5t9xRSNL6cn3_AAAAFQ"]
[Sat Apr 11 03:30:25.660666 2026] [:error] [pid 21569:tid 21680] [client 212.227.21.19:33200] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adlP0XAvQTgvXJ6vHorEhAAAAJc"]
[Sat Apr 11 03:30:28.155379 2026] [:error] [pid 55451:tid 55456] [client 212.227.21.19:18622] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adlP1HApxuyB7yCS5RlU8AAAAMM"]
[Sat Apr 11 03:30:30.554350 2026] [:error] [pid 21706:tid 21710] [client 212.227.21.19:18638] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adlP1iGQ1M5d8fQSsLEMNgAAAAI"]
[Sat Apr 11 03:30:33.130613 2026] [:error] [pid 21568:tid 21591] [client 212.227.21.19:18648] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adlP2Yiz5v_ljZxkpR8CkQAAARM"]
[Sat Apr 11 03:30:35.672208 2026] [:error] [pid 55451:tid 55456] [client 212.227.21.19:18652] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adlP23ApxuyB7yCS5RlVAAAAAMM"]
[Sat Apr 11 03:30:38.102290 2026] [:error] [pid 21706:tid 21728] [client 212.227.21.19:58838] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adlP3iGQ1M5d8fQSsLEMUwAAABQ"]
[Sat Apr 11 03:30:40.576281 2026] [:error] [pid 21706:tid 21729] [client 212.227.21.19:58852] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adlP4CGQ1M5d8fQSsLEMYQAAABU"]
[Sat Apr 11 03:30:43.070817 2026] [:error] [pid 21706:tid 21720] [client 212.227.21.19:58858] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adlP4yGQ1M5d8fQSsLEMewAAAAw"]
[Sat Apr 11 03:30:45.534371 2026] [:error] [pid 21706:tid 21716] [client 212.227.21.19:58868] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adlP5SGQ1M5d8fQSsLEMlAAAAAg"]
[Sat Apr 11 03:30:48.045701 2026] [:error] [pid 55451:tid 55466] [client 212.227.21.19:15212] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adlP6HApxuyB7yCS5RlVHgAAAM0"]
[Sat Apr 11 03:31:29.493869 2026] [:error] [pid 21570:tid 21675] [client 212.227.21.19:47748] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "adlQETKs5t9xRSNL6cn4dAAAAEc"]
[Sat Apr 11 03:31:31.992708 2026] [:error] [pid 21568:tid 21594] [client 212.227.21.19:47750] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "adlQE4iz5v_ljZxkpR8C9gAAARY"]
[Sat Apr 11 03:31:34.292577 2026] [:error] [pid 21569:tid 21676] [client 212.227.21.19:47758] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "adlQFnAvQTgvXJ6vHorE8gAAAJU"]
[Sat Apr 11 03:31:36.644594 2026] [:error] [pid 55451:tid 55473] [client 212.227.21.19:47762] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "adlQGHApxuyB7yCS5RlVsgAAANQ"]
[Sat Apr 11 03:31:39.131841 2026] [:error] [pid 21569:tid 21678] [client 212.227.21.19:15186] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "adlQG3AvQTgvXJ6vHorE-AAAAJY"]
[Sat Apr 11 03:31:41.555728 2026] [:error] [pid 21568:tid 21587] [client 212.227.21.19:15200] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "adlQHYiz5v_ljZxkpR8DAQAAAQ8"]
[Sat Apr 11 03:31:44.007637 2026] [:error] [pid 21569:tid 21654] [client 212.227.21.19:15214] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "adlQIHAvQTgvXJ6vHorFBwAAAIk"]
[Sat Apr 11 03:31:46.580195 2026] [:error] [pid 21568:tid 21594] [client 212.227.21.19:15218] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "adlQIoiz5v_ljZxkpR8DDgAAARY"]
[Sat Apr 11 03:31:48.973053 2026] [:error] [pid 21570:tid 21688] [client 212.227.21.19:41224] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "adlQJDKs5t9xRSNL6cn4mgAAAE4"]
[Sat Apr 11 03:31:51.295287 2026] [:error] [pid 55451:tid 55467] [client 212.227.21.19:41232] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adlQJ3ApxuyB7yCS5RlV8AAAAM4"]
[Sat Apr 11 03:31:53.828069 2026] [:error] [pid 21569:tid 21654] [client 212.227.21.19:41240] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adlQKXAvQTgvXJ6vHorFDwAAAIk"]
[Sat Apr 11 03:31:56.332377 2026] [:error] [pid 21568:tid 21592] [client 212.227.21.19:41250] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adlQLIiz5v_ljZxkpR8DJgAAARQ"]
[Sat Apr 11 03:31:58.851685 2026] [:error] [pid 21706:tid 21716] [client 212.227.21.19:60328] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adlQLiGQ1M5d8fQSsLENiwAAAAg"]
[Sat Apr 11 03:32:01.350155 2026] [:error] [pid 21568:tid 21575] [client 212.227.21.19:60336] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adlQMYiz5v_ljZxkpR8DPQAAAQM"]
[Sat Apr 11 03:32:03.908580 2026] [:error] [pid 21568:tid 21572] [client 212.227.21.19:60344] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adlQM4iz5v_ljZxkpR8DSAAAAQA"]
[Sat Apr 11 03:32:06.429150 2026] [:error] [pid 21569:tid 21660] [client 212.227.21.19:60350] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adlQNnAvQTgvXJ6vHorFKwAAAI4"]
[Sat Apr 11 03:32:08.975321 2026] [:error] [pid 21706:tid 21711] [client 212.227.21.19:32120] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adlQOCGQ1M5d8fQSsLENpgAAAAM"]
[Sat Apr 11 03:32:11.495254 2026] [:error] [pid 21706:tid 21717] [client 212.227.21.19:32124] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adlQOyGQ1M5d8fQSsLENsgAAAAk"]
[Sat Apr 11 03:32:13.855373 2026] [:error] [pid 21706:tid 21710] [client 212.227.21.19:32136] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adlQPSGQ1M5d8fQSsLENvgAAAAI"]
[Sat Apr 11 03:32:16.213459 2026] [:error] [pid 21706:tid 21723] [client 212.227.21.19:32152] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "adlQQCGQ1M5d8fQSsLENxgAAAA8"]
[Sat Apr 11 03:32:18.708681 2026] [:error] [pid 21706:tid 21710] [client 212.227.21.19:31218] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "adlQQiGQ1M5d8fQSsLEN0AAAAAI"]
[Sat Apr 11 03:32:21.185779 2026] [:error] [pid 21706:tid 21719] [client 212.227.21.19:31234] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "adlQRSGQ1M5d8fQSsLEN0wAAAAs"]
[Sat Apr 11 03:32:23.691057 2026] [:error] [pid 21706:tid 21717] [client 212.227.21.19:31240] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "adlQRyGQ1M5d8fQSsLEN3wAAAAk"]
[Sat Apr 11 03:33:05.327857 2026] [:error] [pid 21706:tid 21711] [client 212.227.21.19:10980] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "adlQcSGQ1M5d8fQSsLEOfwAAAAM"]
[Sat Apr 11 03:33:07.710157 2026] [:error] [pid 55451:tid 55453] [client 212.227.21.19:10994] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "adlQc3ApxuyB7yCS5RlWvwAAAMA"]
[Sat Apr 11 03:33:10.028116 2026] [:error] [pid 21570:tid 21675] [client 212.227.21.19:4550] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "adlQdjKs5t9xRSNL6cn5LAAAAEc"]
[Sat Apr 11 03:33:12.442553 2026] [:error] [pid 21706:tid 21725] [client 212.227.21.19:4564] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "adlQeCGQ1M5d8fQSsLEOjAAAABE"]
[Sat Apr 11 03:33:14.793367 2026] [:error] [pid 21706:tid 21715] [client 212.227.21.19:4566] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "adlQeiGQ1M5d8fQSsLEOlQAAAAc"]
[Sat Apr 11 03:33:17.312114 2026] [:error] [pid 21706:tid 21725] [client 212.227.21.19:4580] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adlQfSGQ1M5d8fQSsLEOpQAAABE"]
[Sat Apr 11 03:33:19.855758 2026] [:error] [pid 21706:tid 21732] [client 212.227.21.19:25284] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adlQfyGQ1M5d8fQSsLEOwQAAABg"]
[Sat Apr 11 03:33:22.278840 2026] [:error] [pid 21568:tid 21573] [client 212.227.21.19:25294] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adlQgoiz5v_ljZxkpR8D2QAAAQE"]
[Sat Apr 11 03:33:24.791551 2026] [:error] [pid 55451:tid 55465] [client 212.227.21.19:25304] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adlQhHApxuyB7yCS5RlW5gAAAMw"]
[Sat Apr 11 03:33:27.301475 2026] [:error] [pid 55451:tid 55454] [client 212.227.21.19:25306] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adlQh3ApxuyB7yCS5RlW9QAAAME"]
[Sat Apr 11 03:33:29.825801 2026] [:error] [pid 21569:tid 21680] [client 212.227.21.19:61036] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "adlQiXAvQTgvXJ6vHorFogAAAJc"]
[Sat Apr 11 03:33:32.296317 2026] [:error] [pid 55451:tid 55463] [client 212.227.21.19:61052] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adlQjHApxuyB7yCS5RlXCwAAAMo"]
[Sat Apr 11 03:33:34.776436 2026] [:error] [pid 55451:tid 55458] [client 212.227.21.19:61068] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "adlQjnApxuyB7yCS5RlXEwAAAMU"]
[Sat Apr 11 03:33:37.245455 2026] [:error] [pid 21568:tid 21581] [client 212.227.21.19:61082] [client 212.227.21.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "adlQkYiz5v_ljZxkpR8EFgAAAQk"]
[Sat Apr 11 05:10:56.362560 2026] [:error] [pid 33172:tid 33241] [client 149.210.191.142:49082] [client 149.210.191.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.210.191.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adlnYDn2G0IJw5EZY9khvwAAAFc"]
[Sat Apr 11 05:10:57.342271 2026] [proxy_fcgi:error] [pid 33172:tid 33241] [client 149.210.191.142:49082] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 11 05:10:57.635782 2026] [:error] [pid 33172:tid 33230] [client 149.210.191.142:49082] [client 149.210.191.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.210.191.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adlnYTn2G0IJw5EZY9khxQAAAEw"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 11 05:10:58.727986 2026] [proxy_fcgi:error] [pid 33172:tid 33230] [client 149.210.191.142:49082] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 11 05:21:56.051954 2026] [:error] [pid 15244:tid 15266] [client 67.20.76.238:43596] [client 67.20.76.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.20.76.238, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adlp9IkdEsz5NeAq8w3uVgAAARQ"]
[Sat Apr 11 05:21:56.948422 2026] [proxy_fcgi:error] [pid 15244:tid 15266] [client 67.20.76.238:43596] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 11 05:21:57.281214 2026] [:error] [pid 15244:tid 15250] [client 67.20.76.238:43596] [client 67.20.76.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.20.76.238, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adlp9YkdEsz5NeAq8w3uXQAAAQQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 11 05:21:58.297329 2026] [proxy_fcgi:error] [pid 15244:tid 15250] [client 67.20.76.238:43596] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 11 08:38:32.369208 2026] [:error] [pid 15244:tid 15252] [client 171.76.38.26:63785] [client 171.76.38.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.76.38.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "admYCIkdEsz5NeAq8w3GaAAAAQY"]
[Sat Apr 11 09:42:48.621588 2026] [:error] [pid 34911:tid 34917] [client 157.15.40.61:60389] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/media/system/js/core.js"] [unique_id "admnGA4Dca235WG8VGLIHgAAAAQ"]
[Sat Apr 11 10:01:17.607069 2026] [:error] [pid 43273:tid 43287] [client 180.194.26.116:35083] [client 180.194.26.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.194.26.116, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "admrbWZYPtsRdEOLUbV7dwAAAYk"]
[Sat Apr 11 10:01:19.281355 2026] [:error] [pid 43273:tid 43293] [client 180.194.26.116:49588] [client 180.194.26.116] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "admrb2ZYPtsRdEOLUbV7gQAAAY8"]
[Sat Apr 11 10:01:25.593000 2026] [:error] [pid 43273:tid 43298] [client 180.194.26.116:49588] [client 180.194.26.116] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "admrdWZYPtsRdEOLUbV7nAAAAZQ"]
[Sat Apr 11 10:51:05.448943 2026] [:error] [pid 2297:tid 2305] [client 172.213.241.33:65437] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "adm3GbXJS-Jji11jZk1ubwAAAQQ"]
[Sat Apr 11 10:51:05.913347 2026] [:error] [pid 2188:tid 2265] [client 172.213.241.33:65521] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "adm3GYDhDA-Xtn2nRSe4vQAAAMk"]
[Sat Apr 11 10:51:06.384092 2026] [:error] [pid 2297:tid 2307] [client 172.213.241.33:65486] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "adm3GrXJS-Jji11jZk1ucgAAAQY"]
[Sat Apr 11 10:51:06.844500 2026] [:error] [pid 2297:tid 2324] [client 172.213.241.33:65483] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "adm3GrXJS-Jji11jZk1udAAAARc"]
[Sat Apr 11 10:51:07.309664 2026] [:error] [pid 2187:tid 2242] [client 172.213.241.33:65490] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "adm3Gw4J29_qQi0FkjhIzQAAAA4"]
[Sat Apr 11 10:51:07.771985 2026] [:error] [pid 2186:tid 2197] [client 172.213.241.33:65440] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "adm3G8ibnOEEvcO8wPLJYgAAAIc"]
[Sat Apr 11 10:51:08.250354 2026] [:error] [pid 2188:tid 2273] [client 172.213.241.33:65498] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "adm3HIDhDA-Xtn2nRSe4wQAAANE"]
[Sat Apr 11 10:51:08.711298 2026] [:error] [pid 2188:tid 2278] [client 172.213.241.33:65499] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "adm3HIDhDA-Xtn2nRSe4wgAAANY"]
[Sat Apr 11 10:51:09.173027 2026] [:error] [pid 2188:tid 2266] [client 172.213.241.33:65434] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "adm3HYDhDA-Xtn2nRSe4xAAAAMo"]
[Sat Apr 11 10:51:09.633911 2026] [:error] [pid 2188:tid 2261] [client 172.213.241.33:65439] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "adm3HYDhDA-Xtn2nRSe4xQAAAMU"]
[Sat Apr 11 10:51:10.107816 2026] [:error] [pid 2187:tid 2248] [client 172.213.241.33:65472] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "adm3Hg4J29_qQi0FkjhI1wAAABQ"]
[Sat Apr 11 10:51:10.573682 2026] [:error] [pid 2186:tid 2213] [client 172.213.241.33:65426] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "adm3HsibnOEEvcO8wPLJZgAAAJY"]
[Sat Apr 11 10:51:11.049077 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:65487] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "adm3H7XJS-Jji11jZk1uhwAAARM"]
[Sat Apr 11 10:51:11.516766 2026] [:error] [pid 2297:tid 2313] [client 172.213.241.33:65419] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "adm3H7XJS-Jji11jZk1uigAAAQw"]
[Sat Apr 11 10:51:11.990066 2026] [:error] [pid 2297:tid 2304] [client 172.213.241.33:65479] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "adm3H7XJS-Jji11jZk1ujQAAAQM"]
[Sat Apr 11 10:51:12.451556 2026] [:error] [pid 2188:tid 2271] [client 172.213.241.33:65424] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "adm3IIDhDA-Xtn2nRSe4ywAAAM8"]
[Sat Apr 11 10:51:12.923889 2026] [:error] [pid 2297:tid 2318] [client 172.213.241.33:65411] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "adm3ILXJS-Jji11jZk1ulAAAARE"]
[Sat Apr 11 10:51:13.398780 2026] [:error] [pid 2297:tid 2322] [client 172.213.241.33:65506] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "adm3IbXJS-Jji11jZk1ulQAAARU"]
[Sat Apr 11 10:51:13.886188 2026] [:error] [pid 2297:tid 2308] [client 172.213.241.33:65503] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "adm3IbXJS-Jji11jZk1ulgAAAQc"]
[Sat Apr 11 10:51:14.352716 2026] [:error] [pid 2188:tid 2280] [client 172.213.241.33:65443] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "adm3IoDhDA-Xtn2nRSe4zgAAANg"]
[Sat Apr 11 10:51:14.821632 2026] [:error] [pid 2297:tid 2325] [client 172.213.241.33:65415] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "adm3IrXJS-Jji11jZk1umAAAARg"]
[Sat Apr 11 10:51:15.313637 2026] [:error] [pid 2297:tid 2314] [client 172.213.241.33:65431] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "adm3I7XJS-Jji11jZk1unQAAAQ0"]
[Sat Apr 11 10:51:15.780070 2026] [:error] [pid 2186:tid 2210] [client 172.213.241.33:65517] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "adm3I8ibnOEEvcO8wPLJagAAAJQ"]
[Sat Apr 11 10:51:16.245560 2026] [:error] [pid 2188:tid 2263] [client 172.213.241.33:65442] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "adm3JIDhDA-Xtn2nRSe40wAAAMc"]
[Sat Apr 11 10:51:16.709693 2026] [:error] [pid 2187:tid 2227] [client 172.213.241.33:65435] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "adm3JA4J29_qQi0FkjhI6wAAAAE"]
[Sat Apr 11 10:51:17.165940 2026] [:error] [pid 2188:tid 2258] [client 172.213.241.33:65513] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "adm3JYDhDA-Xtn2nRSe41wAAAMI"]
[Sat Apr 11 10:51:17.628374 2026] [:error] [pid 2187:tid 2245] [client 172.213.241.33:65504] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "adm3JQ4J29_qQi0FkjhI8QAAABE"]
[Sat Apr 11 10:51:18.092412 2026] [:error] [pid 2188:tid 2272] [client 172.213.241.33:65514] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "adm3JoDhDA-Xtn2nRSe42QAAANA"]
[Sat Apr 11 10:51:18.558525 2026] [:error] [pid 2297:tid 2312] [client 172.213.241.33:65430] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/water.php"] [unique_id "adm3JrXJS-Jji11jZk1uowAAAQs"]
[Sat Apr 11 10:51:19.021814 2026] [:error] [pid 2187:tid 2252] [client 172.213.241.33:65418] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/water.php"] [unique_id "adm3Jw4J29_qQi0FkjhI_AAAABg"]
[Sat Apr 11 10:51:19.482555 2026] [:error] [pid 2187:tid 2251] [client 172.213.241.33:65478] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/water.php"] [unique_id "adm3Jw4J29_qQi0FkjhI_gAAABc"]
[Sat Apr 11 10:51:19.944647 2026] [:error] [pid 2188:tid 2271] [client 172.213.241.33:65482] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/water.php"] [unique_id "adm3J4DhDA-Xtn2nRSe43wAAAM8"]
[Sat Apr 11 10:51:20.404331 2026] [:error] [pid 2187:tid 2226] [client 172.213.241.33:65432] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "adm3KA4J29_qQi0FkjhJAQAAAAA"]
[Sat Apr 11 10:51:20.882104 2026] [:error] [pid 2188:tid 2276] [client 172.213.241.33:65454] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "adm3KIDhDA-Xtn2nRSe44QAAANQ"]
[Sat Apr 11 10:51:21.345967 2026] [:error] [pid 2297:tid 2311] [client 172.213.241.33:65522] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "adm3KbXJS-Jji11jZk1upwAAAQo"]
[Sat Apr 11 10:51:21.807585 2026] [:error] [pid 2187:tid 2251] [client 172.213.241.33:65524] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "adm3KQ4J29_qQi0FkjhJCwAAABc"]
[Sat Apr 11 10:51:22.290146 2026] [:error] [pid 2188:tid 2271] [client 172.213.241.33:65512] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "adm3KoDhDA-Xtn2nRSe46AAAAM8"]
[Sat Apr 11 10:51:22.757176 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:65497] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "adm3KrXJS-Jji11jZk1uqAAAARM"]
[Sat Apr 11 10:51:23.216696 2026] [:error] [pid 2187:tid 2226] [client 172.213.241.33:65468] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "adm3Kw4J29_qQi0FkjhJDwAAAAA"]
[Sat Apr 11 10:51:23.693327 2026] [:error] [pid 2188:tid 2280] [client 172.213.241.33:10215] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "adm3K4DhDA-Xtn2nRSe47AAAANg"]
[Sat Apr 11 10:51:24.151164 2026] [:error] [pid 2297:tid 2306] [client 172.213.241.33:65507] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "adm3LLXJS-Jji11jZk1urgAAAQU"]
[Sat Apr 11 10:51:24.615339 2026] [:error] [pid 2297:tid 2313] [client 172.213.241.33:65467] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "adm3LLXJS-Jji11jZk1usAAAAQw"]
[Sat Apr 11 10:51:25.087417 2026] [:error] [pid 2188:tid 2275] [client 172.213.241.33:10176] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "adm3LYDhDA-Xtn2nRSe48QAAANM"]
[Sat Apr 11 10:51:25.548742 2026] [:error] [pid 2188:tid 2260] [client 172.213.241.33:10188] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "adm3LYDhDA-Xtn2nRSe49gAAAMQ"]
[Sat Apr 11 10:51:26.010108 2026] [:error] [pid 2186:tid 2206] [client 172.213.241.33:65425] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "adm3LsibnOEEvcO8wPLJbgAAAJA"]
[Sat Apr 11 10:51:26.475964 2026] [:error] [pid 2186:tid 2207] [client 172.213.241.33:65423] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "adm3LsibnOEEvcO8wPLJcAAAAJE"]
[Sat Apr 11 10:51:26.940901 2026] [:error] [pid 2188:tid 2273] [client 172.213.241.33:65481] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "adm3LoDhDA-Xtn2nRSe4-wAAANE"]
[Sat Apr 11 10:51:27.412975 2026] [:error] [pid 2186:tid 2213] [client 172.213.241.33:65510] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "adm3L8ibnOEEvcO8wPLJcgAAAJY"]
[Sat Apr 11 10:51:27.900115 2026] [:error] [pid 2188:tid 2260] [client 172.213.241.33:10192] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "adm3L4DhDA-Xtn2nRSe5AQAAAMQ"]
[Sat Apr 11 10:51:28.359662 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:65447] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "adm3MLXJS-Jji11jZk1utgAAARM"]
[Sat Apr 11 10:51:28.823193 2026] [:error] [pid 2188:tid 2277] [client 172.213.241.33:65511] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "adm3MIDhDA-Xtn2nRSe5BgAAANU"]
[Sat Apr 11 10:51:29.293196 2026] [:error] [pid 2187:tid 2236] [client 172.213.241.33:65515] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "adm3MQ4J29_qQi0FkjhJHwAAAAg"]
[Sat Apr 11 10:51:29.754258 2026] [:error] [pid 2187:tid 2238] [client 172.213.241.33:65422] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oij98gy.php"] [unique_id "adm3MQ4J29_qQi0FkjhJIQAAAAo"]
[Sat Apr 11 10:51:30.273646 2026] [:error] [pid 2186:tid 2209] [client 172.213.241.33:10195] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oij98gy.php"] [unique_id "adm3MsibnOEEvcO8wPLJdwAAAJM"]
[Sat Apr 11 10:51:30.744918 2026] [:error] [pid 2187:tid 2234] [client 172.213.241.33:65413] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oij98gy.php"] [unique_id "adm3Mg4J29_qQi0FkjhJJgAAAAY"]
[Sat Apr 11 10:51:31.223611 2026] [:error] [pid 2187:tid 2239] [client 172.213.241.33:65409] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oij98gy.php"] [unique_id "adm3Mw4J29_qQi0FkjhJKAAAAAs"]
[Sat Apr 11 10:51:31.694953 2026] [:error] [pid 2186:tid 2197] [client 172.213.241.33:65427] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adm3M8ibnOEEvcO8wPLJewAAAIc"]
[Sat Apr 11 10:51:32.165210 2026] [:error] [pid 2297:tid 2301] [client 172.213.241.33:65465] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adm3NLXJS-Jji11jZk1uuwAAAQA"]
[Sat Apr 11 10:51:32.636038 2026] [:error] [pid 2188:tid 2270] [client 172.213.241.33:65525] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adm3NIDhDA-Xtn2nRSe5GQAAAM4"]
[Sat Apr 11 10:51:33.105066 2026] [:error] [pid 2297:tid 2323] [client 172.213.241.33:65444] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "adm3NbXJS-Jji11jZk1uvwAAARY"]
[Sat Apr 11 10:51:33.569666 2026] [:error] [pid 2188:tid 2264] [client 172.213.241.33:10181] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/turkshell.php"] [unique_id "adm3NYDhDA-Xtn2nRSe5HAAAAMg"]
[Sat Apr 11 10:51:34.028290 2026] [:error] [pid 2186:tid 2199] [client 172.213.241.33:10209] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/turkshell.php"] [unique_id "adm3NsibnOEEvcO8wPLJhAAAAIk"]
[Sat Apr 11 10:51:34.508895 2026] [:error] [pid 2186:tid 2201] [client 172.213.241.33:65436] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/turkshell.php"] [unique_id "adm3NsibnOEEvcO8wPLJhQAAAIs"]
[Sat Apr 11 10:51:34.990143 2026] [:error] [pid 2297:tid 2309] [client 172.213.241.33:65462] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/turkshell.php"] [unique_id "adm3NrXJS-Jji11jZk1uwgAAAQg"]
[Sat Apr 11 10:51:35.460998 2026] [:error] [pid 2187:tid 2247] [client 172.213.241.33:10179] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "adm3Nw4J29_qQi0FkjhJLgAAABM"]
[Sat Apr 11 10:51:35.921481 2026] [:error] [pid 2297:tid 2301] [client 172.213.241.33:65492] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "adm3N7XJS-Jji11jZk1uxgAAAQA"]
[Sat Apr 11 10:51:36.405465 2026] [:error] [pid 2188:tid 2262] [client 172.213.241.33:65502] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "adm3OIDhDA-Xtn2nRSe5JAAAAMY"]
[Sat Apr 11 10:51:36.869831 2026] [:error] [pid 2188:tid 2271] [client 172.213.241.33:65520] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "adm3OIDhDA-Xtn2nRSe5KAAAAM8"]
[Sat Apr 11 10:51:37.352698 2026] [:error] [pid 2188:tid 2266] [client 172.213.241.33:10217] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "adm3OYDhDA-Xtn2nRSe5KwAAAMo"]
[Sat Apr 11 10:51:37.814873 2026] [:error] [pid 2188:tid 2263] [client 172.213.241.33:65414] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "adm3OYDhDA-Xtn2nRSe5LwAAAMc"]
[Sat Apr 11 10:51:38.309281 2026] [:error] [pid 2297:tid 2310] [client 172.213.241.33:10139] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "adm3OrXJS-Jji11jZk1uyAAAAQk"]
[Sat Apr 11 10:51:38.796533 2026] [:error] [pid 2297:tid 2307] [client 172.213.241.33:10223] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "adm3OrXJS-Jji11jZk1uywAAAQY"]
[Sat Apr 11 10:51:39.258047 2026] [:error] [pid 2187:tid 2228] [client 172.213.241.33:65505] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "adm3Ow4J29_qQi0FkjhJOQAAAAI"]
[Sat Apr 11 10:51:39.728383 2026] [:error] [pid 2186:tid 2190] [client 172.213.241.33:65463] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "adm3O8ibnOEEvcO8wPLJjQAAAIA"]
[Sat Apr 11 10:51:40.197848 2026] [:error] [pid 2186:tid 2220] [client 172.213.241.33:10234] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "adm3PMibnOEEvcO8wPLJjgAAAJg"]
[Sat Apr 11 10:51:40.675292 2026] [:error] [pid 2186:tid 2201] [client 172.213.241.33:65438] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "adm3PMibnOEEvcO8wPLJkgAAAIs"]
[Sat Apr 11 10:51:41.144060 2026] [:error] [pid 2186:tid 2193] [client 172.213.241.33:65433] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "adm3PcibnOEEvcO8wPLJlAAAAIM"]
[Sat Apr 11 10:51:41.618811 2026] [:error] [pid 2297:tid 2301] [client 172.213.241.33:65501] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "adm3PbXJS-Jji11jZk1u0AAAAQA"]
[Sat Apr 11 10:51:42.084218 2026] [:error] [pid 2188:tid 2268] [client 172.213.241.33:65457] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "adm3PoDhDA-Xtn2nRSe5NQAAAMw"]
[Sat Apr 11 10:51:42.553321 2026] [:error] [pid 2186:tid 2220] [client 172.213.241.33:65488] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "adm3PsibnOEEvcO8wPLJnAAAAJg"]
[Sat Apr 11 10:51:43.017768 2026] [:error] [pid 2188:tid 2267] [client 172.213.241.33:65428] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "adm3P4DhDA-Xtn2nRSe5OQAAAMs"]
[Sat Apr 11 10:51:43.489813 2026] [:error] [pid 2186:tid 2193] [client 172.213.241.33:10219] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "adm3P8ibnOEEvcO8wPLJngAAAIM"]
[Sat Apr 11 10:51:43.962533 2026] [:error] [pid 2188:tid 2277] [client 172.213.241.33:65452] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "adm3P4DhDA-Xtn2nRSe5PAAAANU"]
[Sat Apr 11 10:51:44.429947 2026] [:error] [pid 2186:tid 2194] [client 172.213.241.33:65456] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "adm3QMibnOEEvcO8wPLJpAAAAIQ"]
[Sat Apr 11 10:51:44.902319 2026] [:error] [pid 2297:tid 2322] [client 172.213.241.33:10177] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "adm3QLXJS-Jji11jZk1u1QAAARU"]
[Sat Apr 11 10:51:45.360611 2026] [:error] [pid 2297:tid 2311] [client 172.213.241.33:65500] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "adm3QbXJS-Jji11jZk1u2AAAAQo"]
[Sat Apr 11 10:51:45.842400 2026] [:error] [pid 2188:tid 2266] [client 172.213.241.33:10126] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "adm3QYDhDA-Xtn2nRSe5QQAAAMo"]
[Sat Apr 11 10:51:46.376350 2026] [:error] [pid 2186:tid 2207] [client 172.213.241.33:65460] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "adm3QsibnOEEvcO8wPLJqAAAAJE"]
[Sat Apr 11 10:51:46.862486 2026] [:error] [pid 2188:tid 2264] [client 172.213.241.33:65446] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "adm3QoDhDA-Xtn2nRSe5SAAAAMg"]
[Sat Apr 11 10:51:47.329042 2026] [:error] [pid 2188:tid 2279] [client 172.213.241.33:10200] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "adm3Q4DhDA-Xtn2nRSe5SQAAANc"]
[Sat Apr 11 10:51:47.811486 2026] [:error] [pid 2186:tid 2210] [client 172.213.241.33:65410] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "adm3Q8ibnOEEvcO8wPLJrQAAAJQ"]
[Sat Apr 11 10:51:48.274540 2026] [:error] [pid 2188:tid 2272] [client 172.213.241.33:10190] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "adm3RIDhDA-Xtn2nRSe5TwAAANA"]
[Sat Apr 11 10:51:48.745785 2026] [:error] [pid 2297:tid 2303] [client 172.213.241.33:10206] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adm3RLXJS-Jji11jZk1u4AAAAQI"]
[Sat Apr 11 10:51:49.211548 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:10154] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adm3RbXJS-Jji11jZk1u4QAAARM"]
[Sat Apr 11 10:51:49.675878 2026] [:error] [pid 2297:tid 2311] [client 172.213.241.33:65429] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adm3RbXJS-Jji11jZk1u5gAAAQo"]
[Sat Apr 11 10:51:50.145156 2026] [:error] [pid 2297:tid 2325] [client 172.213.241.33:65451] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "adm3RrXJS-Jji11jZk1u6wAAARg"]
[Sat Apr 11 10:51:50.605998 2026] [:error] [pid 2297:tid 2314] [client 172.213.241.33:65526] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adm3RrXJS-Jji11jZk1u8AAAAQ0"]
[Sat Apr 11 10:51:51.071119 2026] [:error] [pid 2297:tid 2317] [client 172.213.241.33:65485] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adm3R7XJS-Jji11jZk1u8wAAARA"]
[Sat Apr 11 10:51:51.535162 2026] [:error] [pid 2188:tid 2279] [client 172.213.241.33:10202] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adm3R4DhDA-Xtn2nRSe5VQAAANc"]
[Sat Apr 11 10:51:52.000202 2026] [:error] [pid 2297:tid 2321] [client 172.213.241.33:10208] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "adm3R7XJS-Jji11jZk1u-wAAARQ"]
[Sat Apr 11 10:51:52.465311 2026] [:error] [pid 2297:tid 2303] [client 172.213.241.33:65416] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adm3SLXJS-Jji11jZk1u_AAAAQI"]
[Sat Apr 11 10:51:52.941140 2026] [:error] [pid 2297:tid 2309] [client 172.213.241.33:10182] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adm3SLXJS-Jji11jZk1vAQAAAQg"]
[Sat Apr 11 10:51:53.405299 2026] [:error] [pid 2297:tid 2307] [client 172.213.241.33:10143] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adm3SbXJS-Jji11jZk1vCAAAAQY"]
[Sat Apr 11 10:51:53.870367 2026] [:error] [pid 2297:tid 2303] [client 172.213.241.33:10191] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "adm3SbXJS-Jji11jZk1vCgAAAQI"]
[Sat Apr 11 10:51:54.329998 2026] [:error] [pid 2188:tid 2256] [client 172.213.241.33:65466] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "adm3SoDhDA-Xtn2nRSe5WgAAAMA"]
[Sat Apr 11 10:51:54.792213 2026] [:error] [pid 2188:tid 2257] [client 172.213.241.33:65476] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "adm3SoDhDA-Xtn2nRSe5XwAAAME"]
[Sat Apr 11 10:51:55.251827 2026] [:error] [pid 2186:tid 2193] [client 172.213.241.33:10112] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "adm3S8ibnOEEvcO8wPLJsQAAAIM"]
[Sat Apr 11 10:51:55.712325 2026] [:error] [pid 2188:tid 2268] [client 172.213.241.33:65420] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "adm3S4DhDA-Xtn2nRSe5ZQAAAMw"]
[Sat Apr 11 10:51:56.174491 2026] [:error] [pid 2188:tid 2277] [client 172.213.241.33:65458] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "adm3TIDhDA-Xtn2nRSe5aAAAANU"]
[Sat Apr 11 10:51:56.637053 2026] [:error] [pid 2187:tid 2248] [client 172.213.241.33:65421] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "adm3TA4J29_qQi0FkjhJQgAAABQ"]
[Sat Apr 11 10:51:57.102426 2026] [:error] [pid 2187:tid 2244] [client 172.213.241.33:10230] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "adm3TQ4J29_qQi0FkjhJRQAAABA"]
[Sat Apr 11 10:51:57.564392 2026] [:error] [pid 2187:tid 2242] [client 172.213.241.33:65491] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "adm3TQ4J29_qQi0FkjhJRwAAAA4"]
[Sat Apr 11 10:51:58.034165 2026] [:error] [pid 2187:tid 2243] [client 172.213.241.33:10226] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "adm3Tg4J29_qQi0FkjhJSQAAAA8"]
[Sat Apr 11 10:51:58.496746 2026] [:error] [pid 2297:tid 2307] [client 172.213.241.33:65494] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "adm3TrXJS-Jji11jZk1vDAAAAQY"]
[Sat Apr 11 10:51:58.959695 2026] [:error] [pid 2297:tid 2302] [client 172.213.241.33:10201] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "adm3TrXJS-Jji11jZk1vDQAAAQE"]
[Sat Apr 11 10:51:59.422389 2026] [:error] [pid 2297:tid 2313] [client 172.213.241.33:65523] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "adm3T7XJS-Jji11jZk1vEQAAAQw"]
[Sat Apr 11 10:51:59.879945 2026] [:error] [pid 2188:tid 2256] [client 172.213.241.33:65417] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adm3T4DhDA-Xtn2nRSe5dgAAAMA"]
[Sat Apr 11 10:52:00.345075 2026] [:error] [pid 2297:tid 2312] [client 172.213.241.33:10161] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adm3ULXJS-Jji11jZk1vEgAAAQs"]
[Sat Apr 11 10:52:00.807275 2026] [:error] [pid 2188:tid 2273] [client 172.213.241.33:10232] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adm3UIDhDA-Xtn2nRSe5egAAANE"]
[Sat Apr 11 10:52:01.278860 2026] [:error] [pid 2297:tid 2323] [client 172.213.241.33:65445] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "adm3UbXJS-Jji11jZk1vFwAAARY"]
[Sat Apr 11 10:52:01.739982 2026] [:error] [pid 2297:tid 2303] [client 172.213.241.33:10222] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "adm3UbXJS-Jji11jZk1vGwAAAQI"]
[Sat Apr 11 10:52:02.199312 2026] [:error] [pid 2188:tid 2259] [client 172.213.241.33:65473] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "adm3UoDhDA-Xtn2nRSe5fwAAAMM"]
[Sat Apr 11 10:52:02.663305 2026] [:error] [pid 2297:tid 2322] [client 172.213.241.33:65453] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "adm3UrXJS-Jji11jZk1vHgAAARU"]
[Sat Apr 11 10:52:03.122360 2026] [:error] [pid 2297:tid 2311] [client 172.213.241.33:65474] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "adm3U7XJS-Jji11jZk1vIgAAAQo"]
[Sat Apr 11 10:52:03.581487 2026] [:error] [pid 2187:tid 2246] [client 172.213.241.33:10123] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "adm3Uw4J29_qQi0FkjhJTgAAABI"]
[Sat Apr 11 10:52:18.304331 2026] [:error] [pid 2187:tid 2251] [client 172.213.241.33:10113] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adm3Yg4J29_qQi0FkjhJbwAAABc"]
[Sat Apr 11 10:52:18.776616 2026] [:error] [pid 2188:tid 2263] [client 172.213.241.33:10212] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adm3YoDhDA-Xtn2nRSe5uAAAAMc"]
[Sat Apr 11 10:52:19.240214 2026] [:error] [pid 2188:tid 2271] [client 172.213.241.33:10237] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adm3Y4DhDA-Xtn2nRSe5uwAAAM8"]
[Sat Apr 11 10:52:19.717062 2026] [:error] [pid 2297:tid 2321] [client 172.213.241.33:65477] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zample.php"] [unique_id "adm3Y7XJS-Jji11jZk1vWgAAARQ"]
[Sat Apr 11 10:52:20.181319 2026] [:error] [pid 2297:tid 2310] [client 172.213.241.33:10231] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adm3ZLXJS-Jji11jZk1vXAAAAQk"]
[Sat Apr 11 10:52:20.643793 2026] [:error] [pid 2297:tid 2323] [client 172.213.241.33:10207] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adm3ZLXJS-Jji11jZk1vXgAAARY"]
[Sat Apr 11 10:52:21.106669 2026] [:error] [pid 2297:tid 2319] [client 172.213.241.33:10159] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adm3ZbXJS-Jji11jZk1vYgAAARI"]
[Sat Apr 11 10:52:21.573322 2026] [:error] [pid 2297:tid 2311] [client 172.213.241.33:10194] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "adm3ZbXJS-Jji11jZk1vZgAAAQo"]
[Sat Apr 11 10:52:22.039275 2026] [:error] [pid 2297:tid 2306] [client 172.213.241.33:65449] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adm3ZrXJS-Jji11jZk1vaQAAAQU"]
[Sat Apr 11 10:52:22.516740 2026] [:error] [pid 2188:tid 2279] [client 172.213.241.33:65495] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adm3ZoDhDA-Xtn2nRSe5vwAAANc"]
[Sat Apr 11 10:52:22.977808 2026] [:error] [pid 2297:tid 2324] [client 172.213.241.33:65475] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adm3ZrXJS-Jji11jZk1vbAAAARc"]
[Sat Apr 11 10:52:23.439078 2026] [:error] [pid 2297:tid 2315] [client 172.213.241.33:10180] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "adm3Z7XJS-Jji11jZk1vbwAAAQ4"]
[Sat Apr 11 10:52:23.899847 2026] [:error] [pid 2297:tid 2309] [client 172.213.241.33:10183] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adm3Z7XJS-Jji11jZk1vdAAAAQg"]
[Sat Apr 11 10:52:24.360336 2026] [:error] [pid 2187:tid 2231] [client 172.213.241.33:10186] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adm3aA4J29_qQi0FkjhJcwAAAAM"]
[Sat Apr 11 10:52:24.821070 2026] [:error] [pid 2187:tid 2237] [client 172.213.241.33:10221] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adm3aA4J29_qQi0FkjhJdAAAAAk"]
[Sat Apr 11 10:52:25.284644 2026] [:error] [pid 2297:tid 2313] [client 172.213.241.33:10157] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "adm3abXJS-Jji11jZk1vewAAAQw"]
[Sat Apr 11 10:52:25.744790 2026] [:error] [pid 2297:tid 2309] [client 172.213.241.33:65504] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adm3abXJS-Jji11jZk1vfgAAAQg"]
[Sat Apr 11 10:52:26.205895 2026] [:error] [pid 2187:tid 2232] [client 172.213.241.33:10133] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adm3ag4J29_qQi0FkjhJeAAAAAQ"]
[Sat Apr 11 10:52:26.663749 2026] [:error] [pid 2188:tid 2277] [client 172.213.241.33:10193] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adm3aoDhDA-Xtn2nRSe5yAAAANU"]
[Sat Apr 11 10:52:27.128738 2026] [:error] [pid 2187:tid 2233] [client 172.213.241.33:10218] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "adm3aw4J29_qQi0FkjhJeQAAAAU"]
[Sat Apr 11 10:52:27.588537 2026] [:error] [pid 2297:tid 2323] [client 172.213.241.33:10216] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adm3a7XJS-Jji11jZk1vgAAAARY"]
[Sat Apr 11 10:52:28.060367 2026] [:error] [pid 2297:tid 2309] [client 172.213.241.33:65412] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adm3bLXJS-Jji11jZk1vggAAAQg"]
[Sat Apr 11 10:52:28.528186 2026] [:error] [pid 2186:tid 2199] [client 172.213.241.33:65509] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adm3bMibnOEEvcO8wPLJ9gAAAIk"]
[Sat Apr 11 10:52:28.990043 2026] [:error] [pid 2187:tid 2252] [client 172.213.241.33:10136] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adm3bA4J29_qQi0FkjhJfQAAABg"]
[Sat Apr 11 10:52:29.462762 2026] [:error] [pid 2297:tid 2316] [client 172.213.241.33:65450] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adm3bbXJS-Jji11jZk1viQAAAQ8"]
[Sat Apr 11 10:52:29.928638 2026] [:error] [pid 2297:tid 2307] [client 172.213.241.33:10124] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adm3bbXJS-Jji11jZk1vjAAAAQY"]
[Sat Apr 11 10:52:30.399197 2026] [:error] [pid 2297:tid 2309] [client 172.213.241.33:10199] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adm3brXJS-Jji11jZk1vkAAAAQg"]
[Sat Apr 11 10:52:30.860070 2026] [:error] [pid 2186:tid 2209] [client 172.213.241.33:10224] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "adm3bsibnOEEvcO8wPLJ-gAAAJM"]
[Sat Apr 11 10:52:31.349534 2026] [:error] [pid 2297:tid 2324] [client 172.213.241.33:10204] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "adm3b7XJS-Jji11jZk1vlgAAARc"]
[Sat Apr 11 10:52:31.812769 2026] [:error] [pid 2188:tid 2268] [client 172.213.241.33:10135] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "adm3b4DhDA-Xtn2nRSe50gAAAMw"]
[Sat Apr 11 10:52:32.278632 2026] [:error] [pid 2187:tid 2250] [client 172.213.241.33:10120] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "adm3cA4J29_qQi0FkjhJggAAABY"]
[Sat Apr 11 10:52:32.773995 2026] [:error] [pid 2186:tid 2208] [client 172.213.241.33:10233] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "adm3cMibnOEEvcO8wPLKAQAAAJI"]
[Sat Apr 11 10:52:33.250400 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:10185] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "adm3cbXJS-Jji11jZk1voAAAARM"]
[Sat Apr 11 10:52:33.718564 2026] [:error] [pid 2297:tid 2321] [client 172.213.241.33:65441] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "adm3cbXJS-Jji11jZk1vpAAAARQ"]
[Sat Apr 11 10:52:34.189912 2026] [:error] [pid 2186:tid 2220] [client 172.213.241.33:10220] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "adm3csibnOEEvcO8wPLKBAAAAJg"]
[Sat Apr 11 10:52:34.648028 2026] [:error] [pid 2297:tid 2308] [client 172.213.241.33:10119] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "adm3crXJS-Jji11jZk1vqwAAAQc"]
[Sat Apr 11 10:52:35.124784 2026] [:error] [pid 2297:tid 2316] [client 172.213.241.33:10196] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "adm3c7XJS-Jji11jZk1vsAAAAQ8"]
[Sat Apr 11 10:52:35.583716 2026] [:error] [pid 2188:tid 2271] [client 172.213.241.33:10134] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "adm3c4DhDA-Xtn2nRSe52QAAAM8"]
[Sat Apr 11 10:52:36.045324 2026] [:error] [pid 2187:tid 2231] [client 172.213.241.33:65484] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "adm3dA4J29_qQi0FkjhJigAAAAM"]
[Sat Apr 11 10:52:36.509224 2026] [:error] [pid 2297:tid 2310] [client 172.213.241.33:65519] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "adm3dLXJS-Jji11jZk1vtgAAAQk"]
[Sat Apr 11 10:52:36.978849 2026] [:error] [pid 2297:tid 2317] [client 172.213.241.33:10213] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "adm3dLXJS-Jji11jZk1vtwAAARA"]
[Sat Apr 11 10:52:37.449036 2026] [:error] [pid 2188:tid 2256] [client 172.213.241.33:65527] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "adm3dYDhDA-Xtn2nRSe55AAAAMA"]
[Sat Apr 11 10:52:37.928951 2026] [:error] [pid 2188:tid 2267] [client 172.213.241.33:10060] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "adm3dYDhDA-Xtn2nRSe56AAAAMs"]
[Sat Apr 11 10:52:38.395280 2026] [:error] [pid 2297:tid 2310] [client 172.213.241.33:10131] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "adm3drXJS-Jji11jZk1vvQAAAQk"]
[Sat Apr 11 10:52:38.877037 2026] [:error] [pid 2297:tid 2305] [client 172.213.241.33:10197] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "adm3drXJS-Jji11jZk1vvwAAAQQ"]
[Sat Apr 11 10:52:39.340710 2026] [:error] [pid 2187:tid 2245] [client 172.213.241.33:10117] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "adm3dw4J29_qQi0FkjhJiwAAABE"]
[Sat Apr 11 10:52:39.816822 2026] [:error] [pid 2297:tid 2314] [client 172.213.241.33:10091] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "adm3d7XJS-Jji11jZk1vwgAAAQ0"]
[Sat Apr 11 10:52:40.286705 2026] [:error] [pid 2188:tid 2261] [client 172.213.241.33:10189] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "adm3eIDhDA-Xtn2nRSe5-QAAAMU"]
[Sat Apr 11 10:52:40.748164 2026] [:error] [pid 2297:tid 2310] [client 172.213.241.33:10162] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "adm3eLXJS-Jji11jZk1vxAAAAQk"]
[Sat Apr 11 10:52:41.243793 2026] [:error] [pid 2186:tid 2212] [client 172.213.241.33:10102] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "adm3ecibnOEEvcO8wPLKCAAAAJU"]
[Sat Apr 11 10:52:41.724424 2026] [:error] [pid 2297:tid 2319] [client 172.213.241.33:10229] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "adm3ebXJS-Jji11jZk1vygAAARI"]
[Sat Apr 11 10:52:42.192124 2026] [:error] [pid 2187:tid 2242] [client 172.213.241.33:9992] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "adm3eg4J29_qQi0FkjhJjwAAAA4"]
[Sat Apr 11 10:52:42.676176 2026] [:error] [pid 2186:tid 2204] [client 172.213.241.33:10118] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "adm3esibnOEEvcO8wPLKCgAAAI4"]
[Sat Apr 11 10:52:43.143773 2026] [:error] [pid 2297:tid 2321] [client 172.213.241.33:10073] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "adm3e7XJS-Jji11jZk1v0wAAARQ"]
[Sat Apr 11 10:52:43.624253 2026] [:error] [pid 2188:tid 2267] [client 172.213.241.33:10205] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "adm3e4DhDA-Xtn2nRSe6AgAAAMs"]
[Sat Apr 11 10:52:44.104912 2026] [:error] [pid 2297:tid 2319] [client 172.213.241.33:65469] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "adm3fLXJS-Jji11jZk1v1wAAARI"]
[Sat Apr 11 10:52:44.573627 2026] [:error] [pid 2187:tid 2227] [client 172.213.241.33:10140] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "adm3fA4J29_qQi0FkjhJlAAAAAE"]
[Sat Apr 11 10:52:45.041783 2026] [:error] [pid 2297:tid 2308] [client 172.213.241.33:65408] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "adm3fbXJS-Jji11jZk1v2gAAAQc"]
[Sat Apr 11 10:52:45.522640 2026] [:error] [pid 2187:tid 2250] [client 172.213.241.33:65470] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "adm3fQ4J29_qQi0FkjhJlwAAABY"]
[Sat Apr 11 10:52:45.986598 2026] [:error] [pid 2186:tid 2203] [client 172.213.241.33:10151] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "adm3fcibnOEEvcO8wPLKDwAAAI0"]
[Sat Apr 11 10:52:46.479276 2026] [:error] [pid 2188:tid 2278] [client 172.213.241.33:65516] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adm3foDhDA-Xtn2nRSe6DgAAANY"]
[Sat Apr 11 10:52:46.952392 2026] [:error] [pid 2187:tid 2234] [client 172.213.241.33:10210] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adm3fg4J29_qQi0FkjhJmQAAAAY"]
[Sat Apr 11 10:52:47.420646 2026] [:error] [pid 2297:tid 2302] [client 172.213.241.33:10148] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adm3f7XJS-Jji11jZk1v5gAAAQE"]
[Sat Apr 11 10:52:47.884189 2026] [:error] [pid 2297:tid 2325] [client 172.213.241.33:65464] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "adm3f7XJS-Jji11jZk1v6wAAARg"]
[Sat Apr 11 10:52:48.344807 2026] [:error] [pid 2188:tid 2273] [client 172.213.241.33:10155] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adm3gIDhDA-Xtn2nRSe6EgAAANE"]
[Sat Apr 11 10:52:48.820137 2026] [:error] [pid 2188:tid 2276] [client 172.213.241.33:10169] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adm3gIDhDA-Xtn2nRSe6EwAAANQ"]
[Sat Apr 11 10:52:49.286334 2026] [:error] [pid 2297:tid 2305] [client 172.213.241.33:10056] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adm3gbXJS-Jji11jZk1v9wAAAQQ"]
[Sat Apr 11 10:52:49.759008 2026] [:error] [pid 2297:tid 2319] [client 172.213.241.33:10187] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "adm3gbXJS-Jji11jZk1v_AAAARI"]
[Sat Apr 11 10:52:50.223070 2026] [:error] [pid 2186:tid 2213] [client 172.213.241.33:10138] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "adm3gsibnOEEvcO8wPLKFQAAAJY"]
[Sat Apr 11 10:52:50.688482 2026] [:error] [pid 2188:tid 2272] [client 172.213.241.33:10227] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "adm3goDhDA-Xtn2nRSe6FQAAANA"]
[Sat Apr 11 10:52:51.152869 2026] [:error] [pid 2186:tid 2191] [client 172.213.241.33:65508] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "adm3g8ibnOEEvcO8wPLKFwAAAIE"]
[Sat Apr 11 10:52:51.643423 2026] [:error] [pid 2186:tid 2206] [client 172.213.241.33:10211] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "adm3g8ibnOEEvcO8wPLKGgAAAJA"]
[Sat Apr 11 10:52:52.112759 2026] [:error] [pid 2187:tid 2252] [client 172.213.241.33:10238] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "adm3hA4J29_qQi0FkjhJngAAABg"]
[Sat Apr 11 10:52:52.572104 2026] [:error] [pid 2186:tid 2207] [client 172.213.241.33:10156] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "adm3hMibnOEEvcO8wPLKHAAAAJE"]
[Sat Apr 11 10:52:53.040573 2026] [:error] [pid 2297:tid 2316] [client 172.213.241.33:10225] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "adm3hbXJS-Jji11jZk1wCwAAAQ8"]
[Sat Apr 11 10:52:53.528741 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:10090] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "adm3hbXJS-Jji11jZk1wDAAAARM"]
[Sat Apr 11 10:52:54.001929 2026] [:error] [pid 2187:tid 2226] [client 172.213.241.33:10115] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adm3hg4J29_qQi0FkjhJoAAAAAA"]
[Sat Apr 11 10:52:54.470829 2026] [:error] [pid 2297:tid 2316] [client 172.213.241.33:65496] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adm3hrXJS-Jji11jZk1wEgAAAQ8"]
[Sat Apr 11 10:52:54.939899 2026] [:error] [pid 2187:tid 2231] [client 172.213.241.33:65455] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adm3hg4J29_qQi0FkjhJogAAAAM"]
[Sat Apr 11 10:52:55.414873 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:10146] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "adm3h7XJS-Jji11jZk1wFwAAARM"]
[Sat Apr 11 10:52:55.885798 2026] [:error] [pid 2187:tid 2242] [client 172.213.241.33:10170] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "adm3hw4J29_qQi0FkjhJqgAAAA4"]
[Sat Apr 11 10:52:56.357076 2026] [:error] [pid 2297:tid 2315] [client 172.213.241.33:10130] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "adm3iLXJS-Jji11jZk1wGAAAAQ4"]
[Sat Apr 11 10:52:56.913297 2026] [:error] [pid 2297:tid 2318] [client 172.213.241.33:9995] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "adm3iLXJS-Jji11jZk1wGQAAARE"]
[Sat Apr 11 10:52:57.371637 2026] [:error] [pid 2297:tid 2325] [client 172.213.241.33:10150] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "adm3ibXJS-Jji11jZk1wHQAAARg"]
[Sat Apr 11 10:52:57.836416 2026] [:error] [pid 2297:tid 2313] [client 172.213.241.33:10132] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adm3ibXJS-Jji11jZk1wIgAAAQw"]
[Sat Apr 11 10:52:58.300383 2026] [:error] [pid 2297:tid 2323] [client 172.213.241.33:10147] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adm3irXJS-Jji11jZk1wJAAAARY"]
[Sat Apr 11 10:52:58.765784 2026] [:error] [pid 2188:tid 2278] [client 172.213.241.33:10054] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adm3ioDhDA-Xtn2nRSe6HwAAANY"]
[Sat Apr 11 10:52:59.227819 2026] [:error] [pid 2297:tid 2314] [client 172.213.241.33:10214] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "adm3i7XJS-Jji11jZk1wKwAAAQ0"]
[Sat Apr 11 10:52:59.695758 2026] [:error] [pid 2297:tid 2303] [client 172.213.241.33:10128] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adm3i7XJS-Jji11jZk1wLAAAAQI"]
[Sat Apr 11 10:53:00.175397 2026] [:error] [pid 2297:tid 2309] [client 172.213.241.33:10078] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adm3jLXJS-Jji11jZk1wMAAAAQg"]
[Sat Apr 11 10:53:00.643231 2026] [:error] [pid 2188:tid 2268] [client 172.213.241.33:65471] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adm3jIDhDA-Xtn2nRSe6JAAAAMw"]
[Sat Apr 11 10:53:01.119906 2026] [:error] [pid 2187:tid 2244] [client 172.213.241.33:10184] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adm3jQ4J29_qQi0FkjhJswAAABA"]
[Sat Apr 11 10:53:01.576968 2026] [:error] [pid 2187:tid 2247] [client 172.213.241.33:10129] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adm3jQ4J29_qQi0FkjhJtAAAABM"]
[Sat Apr 11 10:53:02.046533 2026] [:error] [pid 2187:tid 2248] [client 172.213.241.33:10084] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adm3jg4J29_qQi0FkjhJtgAAABQ"]
[Sat Apr 11 10:53:02.512826 2026] [:error] [pid 2186:tid 2210] [client 172.213.241.33:10121] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adm3jsibnOEEvcO8wPLKJQAAAJQ"]
[Sat Apr 11 10:53:02.975127 2026] [:error] [pid 2297:tid 2319] [client 172.213.241.33:10055] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adm3jrXJS-Jji11jZk1wOgAAARI"]
[Sat Apr 11 10:53:03.441925 2026] [:error] [pid 2188:tid 2259] [client 172.213.241.33:10093] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "adm3j4DhDA-Xtn2nRSe6JQAAAMM"]
[Sat Apr 11 10:53:03.913167 2026] [:error] [pid 2188:tid 2266] [client 172.213.241.33:10063] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "adm3j4DhDA-Xtn2nRSe6JwAAAMo"]
[Sat Apr 11 10:53:04.378574 2026] [:error] [pid 2186:tid 2195] [client 172.213.241.33:10142] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "adm3kMibnOEEvcO8wPLKLgAAAIU"]
[Sat Apr 11 10:53:04.844863 2026] [:error] [pid 2188:tid 2264] [client 172.213.241.33:10127] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless4.php"] [unique_id "adm3kIDhDA-Xtn2nRSe6KwAAAMg"]
[Sat Apr 11 10:53:05.329020 2026] [:error] [pid 2297:tid 2316] [client 172.213.241.33:10062] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "adm3kbXJS-Jji11jZk1wQQAAAQ8"]
[Sat Apr 11 10:53:05.801075 2026] [:error] [pid 2187:tid 2244] [client 172.213.241.33:10239] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "adm3kQ4J29_qQi0FkjhJuwAAABA"]
[Sat Apr 11 10:53:06.270614 2026] [:error] [pid 2297:tid 2302] [client 172.213.241.33:10114] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "adm3krXJS-Jji11jZk1wRQAAAQE"]
[Sat Apr 11 10:53:06.732312 2026] [:error] [pid 2188:tid 2262] [client 172.213.241.33:10053] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "adm3koDhDA-Xtn2nRSe6MwAAAMY"]
[Sat Apr 11 10:53:07.196803 2026] [:error] [pid 2297:tid 2321] [client 172.213.241.33:10228] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "adm3k7XJS-Jji11jZk1wRgAAARQ"]
[Sat Apr 11 10:53:07.662334 2026] [:error] [pid 2297:tid 2301] [client 172.213.241.33:9929] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "adm3k7XJS-Jji11jZk1wSAAAAQA"]
[Sat Apr 11 10:53:08.129626 2026] [:error] [pid 2187:tid 2248] [client 172.213.241.33:10074] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "adm3lA4J29_qQi0FkjhJwQAAABQ"]
[Sat Apr 11 10:53:08.589567 2026] [:error] [pid 2186:tid 2198] [client 172.213.241.33:10174] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "adm3lMibnOEEvcO8wPLKNwAAAIg"]
[Sat Apr 11 10:53:09.051432 2026] [:error] [pid 2188:tid 2274] [client 172.213.241.33:10052] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "adm3lYDhDA-Xtn2nRSe6OQAAANI"]
[Sat Apr 11 10:53:09.528561 2026] [:error] [pid 2188:tid 2265] [client 172.213.241.33:10137] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "adm3lYDhDA-Xtn2nRSe6PAAAAMk"]
[Sat Apr 11 10:53:09.998830 2026] [:error] [pid 2188:tid 2266] [client 172.213.241.33:10203] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "adm3lYDhDA-Xtn2nRSe6PgAAAMo"]
[Sat Apr 11 10:53:10.463629 2026] [:error] [pid 2297:tid 2305] [client 172.213.241.33:10003] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "adm3lrXJS-Jji11jZk1wTQAAAQQ"]
[Sat Apr 11 10:53:10.922397 2026] [:error] [pid 2188:tid 2263] [client 172.213.241.33:10107] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "adm3loDhDA-Xtn2nRSe6QwAAAMc"]
[Sat Apr 11 10:53:11.383139 2026] [:error] [pid 2297:tid 2321] [client 172.213.241.33:65489] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "adm3l7XJS-Jji11jZk1wVAAAARQ"]
[Sat Apr 11 10:53:11.848247 2026] [:error] [pid 2297:tid 2305] [client 172.213.241.33:10141] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "adm3l7XJS-Jji11jZk1wWQAAAQQ"]
[Sat Apr 11 10:53:12.311146 2026] [:error] [pid 2297:tid 2323] [client 172.213.241.33:10163] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "adm3mLXJS-Jji11jZk1wWwAAARY"]
[Sat Apr 11 10:53:12.777260 2026] [:error] [pid 2188:tid 2270] [client 172.213.241.33:10172] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "adm3mIDhDA-Xtn2nRSe6RQAAAM4"]
[Sat Apr 11 10:53:13.239396 2026] [:error] [pid 2186:tid 2205] [client 172.213.241.33:10106] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "adm3mcibnOEEvcO8wPLKOwAAAI8"]
[Sat Apr 11 10:53:13.719774 2026] [:error] [pid 2186:tid 2200] [client 172.213.241.33:10164] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "adm3mcibnOEEvcO8wPLKPAAAAIo"]
[Sat Apr 11 10:53:14.178735 2026] [:error] [pid 2186:tid 2194] [client 172.213.241.33:10050] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "adm3msibnOEEvcO8wPLKPQAAAIQ"]
[Sat Apr 11 10:53:14.645960 2026] [:error] [pid 2297:tid 2317] [client 172.213.241.33:10061] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "adm3mrXJS-Jji11jZk1wbQAAARA"]
[Sat Apr 11 10:53:15.111878 2026] [:error] [pid 2186:tid 2191] [client 172.213.241.33:10069] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "adm3m8ibnOEEvcO8wPLKQQAAAIE"]
[Sat Apr 11 10:53:15.577172 2026] [:error] [pid 2186:tid 2204] [client 172.213.241.33:10031] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "adm3m8ibnOEEvcO8wPLKQgAAAI4"]
[Sat Apr 11 10:53:16.038403 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:10075] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "adm3nLXJS-Jji11jZk1wdQAAARM"]
[Sat Apr 11 10:53:16.504014 2026] [:error] [pid 2297:tid 2317] [client 172.213.241.33:10076] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "adm3nLXJS-Jji11jZk1weQAAARA"]
[Sat Apr 11 10:53:16.966513 2026] [:error] [pid 2297:tid 2309] [client 172.213.241.33:10235] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "adm3nLXJS-Jji11jZk1wewAAAQg"]
[Sat Apr 11 10:53:18.518666 2026] [:error] [pid 2187:tid 2247] [client 172.213.241.33:10165] [client 172.213.241.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "adm3ng4J29_qQi0FkjhJzgAAABM"]
[Sat Apr 11 10:53:22.498154 2026] [autoindex:error] [pid 2297:tid 2324] [client 172.213.241.33:10082] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 11 10:53:33.650071 2026] [:error] [pid 2297:tid 2322] [client 172.213.241.33:10082] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adm3rbXJS-Jji11jZk1wwQAAARU"]
[Sat Apr 11 10:53:34.119184 2026] [:error] [pid 2297:tid 2317] [client 172.213.241.33:10116] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adm3rrXJS-Jji11jZk1wxgAAARA"]
[Sat Apr 11 10:53:34.581511 2026] [:error] [pid 2297:tid 2324] [client 172.213.241.33:10067] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adm3rrXJS-Jji11jZk1wygAAARc"]
[Sat Apr 11 10:53:35.050424 2026] [:error] [pid 2297:tid 2301] [client 172.213.241.33:10009] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "adm3r7XJS-Jji11jZk1wzQAAAQA"]
[Sat Apr 11 10:53:35.522293 2026] [:error] [pid 2297:tid 2313] [client 172.213.241.33:10085] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "adm3r7XJS-Jji11jZk1w0QAAAQw"]
[Sat Apr 11 10:53:35.986476 2026] [:error] [pid 2297:tid 2302] [client 172.213.241.33:10065] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "adm3r7XJS-Jji11jZk1w1gAAAQE"]
[Sat Apr 11 10:53:36.451639 2026] [:error] [pid 2297:tid 2325] [client 172.213.241.33:10160] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "adm3sLXJS-Jji11jZk1w3QAAARg"]
[Sat Apr 11 10:53:36.918185 2026] [:error] [pid 2188:tid 2265] [client 172.213.241.33:9988] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "adm3sIDhDA-Xtn2nRSe6kQAAAMk"]
[Sat Apr 11 10:53:37.386844 2026] [:error] [pid 2188:tid 2280] [client 172.213.241.33:65493] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "adm3sYDhDA-Xtn2nRSe6lAAAANg"]
[Sat Apr 11 10:53:37.854304 2026] [:error] [pid 2186:tid 2193] [client 172.213.241.33:10059] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "adm3scibnOEEvcO8wPLKVQAAAIM"]
[Sat Apr 11 10:53:38.326961 2026] [:error] [pid 2188:tid 2260] [client 172.213.241.33:10086] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "adm3soDhDA-Xtn2nRSe6nQAAAMQ"]
[Sat Apr 11 10:53:38.787196 2026] [:error] [pid 2188:tid 2273] [client 172.213.241.33:10049] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "adm3soDhDA-Xtn2nRSe6oAAAANE"]
[Sat Apr 11 10:53:39.261116 2026] [:error] [pid 2297:tid 2305] [client 172.213.241.33:10043] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "adm3s7XJS-Jji11jZk1w6AAAAQQ"]
[Sat Apr 11 10:53:39.727546 2026] [:error] [pid 2297:tid 2318] [client 172.213.241.33:10166] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "adm3s7XJS-Jji11jZk1w7AAAARE"]
[Sat Apr 11 10:53:40.204564 2026] [:error] [pid 2186:tid 2196] [client 172.213.241.33:10064] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "adm3tMibnOEEvcO8wPLKWQAAAIY"]
[Sat Apr 11 10:53:40.661905 2026] [:error] [pid 2188:tid 2260] [client 172.213.241.33:10072] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "adm3tIDhDA-Xtn2nRSe6pwAAAMQ"]
[Sat Apr 11 10:53:41.130210 2026] [:error] [pid 2297:tid 2308] [client 172.213.241.33:10122] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "adm3tbXJS-Jji11jZk1w8QAAAQc"]
[Sat Apr 11 10:53:41.589785 2026] [:error] [pid 2297:tid 2310] [client 172.213.241.33:10089] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "adm3tbXJS-Jji11jZk1w9AAAAQk"]
[Sat Apr 11 10:53:42.061393 2026] [:error] [pid 2187:tid 2243] [client 172.213.241.33:10235] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "adm3tg4J29_qQi0FkjhJ5gAAAA8"]
[Sat Apr 11 10:53:42.522633 2026] [:error] [pid 2186:tid 2220] [client 172.213.241.33:9971] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "adm3tsibnOEEvcO8wPLKYAAAAJg"]
[Sat Apr 11 10:53:43.004625 2026] [:error] [pid 2297:tid 2311] [client 172.213.241.33:10101] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adm3t7XJS-Jji11jZk1w-gAAAQo"]
[Sat Apr 11 10:53:43.465883 2026] [:error] [pid 2188:tid 2262] [client 172.213.241.33:10167] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adm3t4DhDA-Xtn2nRSe6qgAAAMY"]
[Sat Apr 11 10:53:43.941261 2026] [:error] [pid 2297:tid 2323] [client 172.213.241.33:10094] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adm3t7XJS-Jji11jZk1w_gAAARY"]
[Sat Apr 11 10:53:44.421394 2026] [:error] [pid 2188:tid 2278] [client 172.213.241.33:10020] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "adm3uIDhDA-Xtn2nRSe6rAAAANY"]
[Sat Apr 11 10:53:44.897056 2026] [:error] [pid 2297:tid 2308] [client 172.213.241.33:10000] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "adm3uLXJS-Jji11jZk1xAQAAAQc"]
[Sat Apr 11 10:53:45.367359 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:10125] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "adm3ubXJS-Jji11jZk1xBQAAARM"]
[Sat Apr 11 10:53:45.830563 2026] [:error] [pid 2186:tid 2208] [client 172.213.241.33:10046] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "adm3ucibnOEEvcO8wPLKbAAAAJI"]
[Sat Apr 11 10:53:46.296338 2026] [:error] [pid 2297:tid 2325] [client 172.213.241.33:10088] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "adm3urXJS-Jji11jZk1xBwAAARg"]
[Sat Apr 11 10:53:46.767855 2026] [:error] [pid 2186:tid 2220] [client 172.213.241.33:9984] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "adm3usibnOEEvcO8wPLKbwAAAJg"]
[Sat Apr 11 10:53:47.227557 2026] [:error] [pid 2186:tid 2218] [client 172.213.241.33:10027] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "adm3u8ibnOEEvcO8wPLKdwAAAJc"]
[Sat Apr 11 10:53:47.697325 2026] [:error] [pid 2186:tid 2201] [client 172.213.241.33:10173] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "adm3u8ibnOEEvcO8wPLKfgAAAIs"]
[Sat Apr 11 10:53:48.177310 2026] [:error] [pid 2187:tid 2234] [client 172.213.241.33:10149] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "adm3vA4J29_qQi0FkjhJ9wAAAAY"]
[Sat Apr 11 10:53:48.641997 2026] [:error] [pid 2187:tid 2244] [client 172.213.241.33:9991] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "adm3vA4J29_qQi0FkjhJ-AAAABA"]
[Sat Apr 11 10:53:49.108542 2026] [:error] [pid 2186:tid 2208] [client 172.213.241.33:10108] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "adm3vcibnOEEvcO8wPLKjQAAAJI"]
[Sat Apr 11 10:53:49.569974 2026] [:error] [pid 2186:tid 2197] [client 172.213.241.33:9933] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "adm3vcibnOEEvcO8wPLKjgAAAIc"]
[Sat Apr 11 10:53:50.035339 2026] [:error] [pid 2188:tid 2279] [client 172.213.241.33:10110] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "adm3voDhDA-Xtn2nRSe6sQAAANc"]
[Sat Apr 11 10:53:50.507597 2026] [:error] [pid 2187:tid 2226] [client 172.213.241.33:9985] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "adm3vg4J29_qQi0FkjhKAQAAAAA"]
[Sat Apr 11 10:53:50.968958 2026] [:error] [pid 2186:tid 2207] [client 172.213.241.33:10198] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "adm3vsibnOEEvcO8wPLKmQAAAJE"]
[Sat Apr 11 10:53:51.441621 2026] [:error] [pid 2297:tid 2321] [client 172.213.241.33:10042] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "adm3v7XJS-Jji11jZk1xFAAAARQ"]
[Sat Apr 11 10:53:51.904714 2026] [:error] [pid 2188:tid 2267] [client 172.213.241.33:10171] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wen.php"] [unique_id "adm3v4DhDA-Xtn2nRSe6tgAAAMs"]
[Sat Apr 11 10:53:52.369725 2026] [:error] [pid 2188:tid 2263] [client 172.213.241.33:9997] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "adm3wIDhDA-Xtn2nRSe6uAAAAMc"]
[Sat Apr 11 10:53:52.829735 2026] [:error] [pid 2188:tid 2260] [client 172.213.241.33:10058] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "adm3wIDhDA-Xtn2nRSe6ugAAAMQ"]
[Sat Apr 11 10:53:53.294890 2026] [:error] [pid 2297:tid 2309] [client 172.213.241.33:10236] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "adm3wbXJS-Jji11jZk1xFwAAAQg"]
[Sat Apr 11 10:53:53.759957 2026] [:error] [pid 2187:tid 2246] [client 172.213.241.33:9928] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "adm3wQ4J29_qQi0FkjhKBwAAABI"]
[Sat Apr 11 10:53:54.221209 2026] [:error] [pid 2188:tid 2272] [client 172.213.241.33:10098] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "adm3woDhDA-Xtn2nRSe6vgAAANA"]
[Sat Apr 11 10:53:54.702881 2026] [:error] [pid 2187:tid 2226] [client 172.213.241.33:10175] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "adm3wg4J29_qQi0FkjhKCgAAAAA"]
[Sat Apr 11 10:53:55.163670 2026] [:error] [pid 2187:tid 2237] [client 172.213.241.33:65461] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "adm3ww4J29_qQi0FkjhKDwAAAAk"]
[Sat Apr 11 10:53:55.624686 2026] [:error] [pid 2186:tid 2203] [client 172.213.241.33:9998] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "adm3w8ibnOEEvcO8wPLKpQAAAI0"]
[Sat Apr 11 10:53:56.091147 2026] [:error] [pid 2186:tid 2197] [client 172.213.241.33:10071] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adm3xMibnOEEvcO8wPLKpwAAAIc"]
[Sat Apr 11 10:53:56.561510 2026] [:error] [pid 2187:tid 2227] [client 172.213.241.33:9980] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adm3xA4J29_qQi0FkjhKFQAAAAE"]
[Sat Apr 11 10:53:57.026457 2026] [:error] [pid 2188:tid 2257] [client 172.213.241.33:9969] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adm3xYDhDA-Xtn2nRSe6yQAAAME"]
[Sat Apr 11 10:53:57.511351 2026] [:error] [pid 2188:tid 2279] [client 172.213.241.33:10047] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "adm3xYDhDA-Xtn2nRSe6ygAAANc"]
[Sat Apr 11 10:53:57.977343 2026] [:error] [pid 2188:tid 2274] [client 172.213.241.33:10001] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adm3xYDhDA-Xtn2nRSe6zQAAANI"]
[Sat Apr 11 10:53:58.453204 2026] [:error] [pid 2188:tid 2261] [client 172.213.241.33:10087] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adm3xoDhDA-Xtn2nRSe60AAAAMU"]
[Sat Apr 11 10:53:58.927784 2026] [:error] [pid 2188:tid 2263] [client 172.213.241.33:10021] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adm3xoDhDA-Xtn2nRSe60wAAAMc"]
[Sat Apr 11 10:53:59.393796 2026] [:error] [pid 2187:tid 2242] [client 172.213.241.33:10051] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adm3xw4J29_qQi0FkjhKHgAAAA4"]
[Sat Apr 11 10:53:59.855373 2026] [:error] [pid 2187:tid 2226] [client 172.213.241.33:10168] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adm3xw4J29_qQi0FkjhKIQAAAAA"]
[Sat Apr 11 10:54:00.326009 2026] [:error] [pid 2187:tid 2238] [client 172.213.241.33:10066] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adm3yA4J29_qQi0FkjhKIwAAAAo"]
[Sat Apr 11 10:54:00.806052 2026] [:error] [pid 2188:tid 2280] [client 172.213.241.33:9962] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adm3yIDhDA-Xtn2nRSe62wAAANg"]
[Sat Apr 11 10:54:01.271738 2026] [:error] [pid 2188:tid 2264] [client 172.213.241.33:10090] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "adm3yYDhDA-Xtn2nRSe63QAAAMg"]
[Sat Apr 11 10:54:01.736020 2026] [:error] [pid 2187:tid 2226] [client 172.213.241.33:10006] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "adm3yQ4J29_qQi0FkjhKKgAAAAA"]
[Sat Apr 11 10:54:02.206434 2026] [:error] [pid 2188:tid 2266] [client 172.213.241.33:10035] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "adm3yoDhDA-Xtn2nRSe64wAAAMo"]
[Sat Apr 11 10:54:02.676690 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:65480] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "adm3yrXJS-Jji11jZk1xIwAAARM"]
[Sat Apr 11 10:54:03.148650 2026] [:error] [pid 2186:tid 2203] [client 172.213.241.33:9993] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "adm3y8ibnOEEvcO8wPLKtwAAAI0"]
[Sat Apr 11 10:54:03.622848 2026] [:error] [pid 2297:tid 2310] [client 172.213.241.33:9930] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "adm3y7XJS-Jji11jZk1xKQAAAQk"]
[Sat Apr 11 10:54:04.085518 2026] [:error] [pid 2188:tid 2274] [client 172.213.241.33:10016] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "adm3zIDhDA-Xtn2nRSe65QAAANI"]
[Sat Apr 11 10:54:04.563163 2026] [:error] [pid 2188:tid 2278] [client 172.213.241.33:10033] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "adm3zIDhDA-Xtn2nRSe65gAAANY"]
[Sat Apr 11 10:54:05.029448 2026] [:error] [pid 2188:tid 2270] [client 172.213.241.33:10005] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "adm3zYDhDA-Xtn2nRSe66QAAAM4"]
[Sat Apr 11 10:54:05.506029 2026] [:error] [pid 2297:tid 2319] [client 172.213.241.33:65448] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "adm3zbXJS-Jji11jZk1xMAAAARI"]
[Sat Apr 11 10:54:05.978386 2026] [:error] [pid 2188:tid 2274] [client 172.213.241.33:9935] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "adm3zYDhDA-Xtn2nRSe68QAAANI"]
[Sat Apr 11 10:54:06.447158 2026] [:error] [pid 2188:tid 2265] [client 172.213.241.33:9927] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "adm3zoDhDA-Xtn2nRSe69gAAAMk"]
[Sat Apr 11 10:54:06.921737 2026] [:error] [pid 2186:tid 2195] [client 172.213.241.33:10029] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "adm3zsibnOEEvcO8wPLKuwAAAIU"]
[Sat Apr 11 10:54:07.392013 2026] [:error] [pid 2186:tid 2204] [client 172.213.241.33:9945] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "adm3z8ibnOEEvcO8wPLKvAAAAI4"]
[Sat Apr 11 10:54:07.865708 2026] [:error] [pid 2297:tid 2318] [client 172.213.241.33:10039] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "adm3z7XJS-Jji11jZk1xNAAAARE"]
[Sat Apr 11 10:54:08.337468 2026] [:error] [pid 2188:tid 2279] [client 172.213.241.33:10013] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "adm30IDhDA-Xtn2nRSe7AAAAANc"]
[Sat Apr 11 10:54:08.805928 2026] [:error] [pid 2297:tid 2314] [client 172.213.241.33:10057] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "adm30LXJS-Jji11jZk1xNgAAAQ0"]
[Sat Apr 11 10:54:09.272500 2026] [:error] [pid 2188:tid 2271] [client 172.213.241.33:9965] [client 172.213.241.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adm30YDhDA-Xtn2nRSe7AwAAAM8"]
[Sat Apr 11 10:54:09.738747 2026] [:error] [pid 2297:tid 2310] [client 172.213.241.33:9989] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "adm30bXJS-Jji11jZk1xOgAAAQk"]
[Sat Apr 11 10:54:10.208978 2026] [:error] [pid 2297:tid 2312] [client 172.213.241.33:10022] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "adm30rXJS-Jji11jZk1xPAAAAQs"]
[Sat Apr 11 10:54:10.690804 2026] [:error] [pid 2188:tid 2260] [client 172.213.241.33:10080] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "adm30oDhDA-Xtn2nRSe7CQAAAMQ"]
[Sat Apr 11 10:54:11.163039 2026] [:error] [pid 2188:tid 2275] [client 172.213.241.33:9959] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "adm304DhDA-Xtn2nRSe7DQAAANM"]
[Sat Apr 11 10:54:11.625372 2026] [:error] [pid 2186:tid 2206] [client 172.213.241.33:10153] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "adm308ibnOEEvcO8wPLKwQAAAJA"]
[Sat Apr 11 10:54:12.088218 2026] [:error] [pid 2297:tid 2325] [client 172.213.241.33:10144] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "adm31LXJS-Jji11jZk1xSAAAARg"]
[Sat Apr 11 10:54:12.561185 2026] [:error] [pid 2187:tid 2239] [client 172.213.241.33:9996] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "adm31A4J29_qQi0FkjhKPgAAAAs"]
[Sat Apr 11 10:54:13.047318 2026] [:error] [pid 2297:tid 2321] [client 172.213.241.33:10017] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adm31bXJS-Jji11jZk1xTQAAARQ"]
[Sat Apr 11 10:54:13.509146 2026] [:error] [pid 2297:tid 2319] [client 172.213.241.33:10081] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adm31bXJS-Jji11jZk1xTwAAARI"]
[Sat Apr 11 10:54:13.984212 2026] [:error] [pid 2188:tid 2279] [client 172.213.241.33:10095] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adm31YDhDA-Xtn2nRSe7EwAAANc"]
[Sat Apr 11 10:54:14.458767 2026] [:error] [pid 2297:tid 2308] [client 172.213.241.33:10192] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adm31rXJS-Jji11jZk1xVQAAAQc"]
[Sat Apr 11 10:54:14.921722 2026] [:error] [pid 2297:tid 2306] [client 172.213.241.33:10024] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "adm31rXJS-Jji11jZk1xWQAAAQU"]
[Sat Apr 11 10:54:15.387196 2026] [:error] [pid 2188:tid 2268] [client 172.213.241.33:10015] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "adm314DhDA-Xtn2nRSe7FgAAAMw"]
[Sat Apr 11 10:54:15.857982 2026] [:error] [pid 2188:tid 2276] [client 172.213.241.33:10077] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "adm314DhDA-Xtn2nRSe7GgAAANQ"]
[Sat Apr 11 10:54:16.324139 2026] [:error] [pid 2188:tid 2258] [client 172.213.241.33:10004] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "adm32IDhDA-Xtn2nRSe7HwAAAMI"]
[Sat Apr 11 10:54:16.790666 2026] [:error] [pid 2188:tid 2269] [client 172.213.241.33:10011] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "adm32IDhDA-Xtn2nRSe7IgAAAM0"]
[Sat Apr 11 10:54:17.255497 2026] [:error] [pid 2188:tid 2266] [client 172.213.241.33:9926] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "adm32YDhDA-Xtn2nRSe7JAAAAMo"]
[Sat Apr 11 10:54:17.718129 2026] [:error] [pid 2188:tid 2258] [client 172.213.241.33:10158] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "adm32YDhDA-Xtn2nRSe7KAAAAMI"]
[Sat Apr 11 10:54:18.179723 2026] [:error] [pid 2297:tid 2310] [client 172.213.241.33:9994] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "adm32rXJS-Jji11jZk1xZwAAAQk"]
[Sat Apr 11 10:54:18.643984 2026] [:error] [pid 2188:tid 2259] [client 172.213.241.33:10111] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "adm32oDhDA-Xtn2nRSe7KwAAAMM"]
[Sat Apr 11 10:54:19.105320 2026] [:error] [pid 2297:tid 2309] [client 172.213.241.33:10044] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "adm327XJS-Jji11jZk1xawAAAQg"]
[Sat Apr 11 10:54:19.563753 2026] [:error] [pid 2187:tid 2250] [client 172.213.241.33:10038] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "adm32w4J29_qQi0FkjhKSAAAABY"]
[Sat Apr 11 10:54:20.038058 2026] [:error] [pid 2187:tid 2240] [client 172.213.241.33:9941] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "adm33A4J29_qQi0FkjhKSgAAAAw"]
[Sat Apr 11 10:54:20.501664 2026] [:error] [pid 2187:tid 2236] [client 172.213.241.33:10010] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "adm33A4J29_qQi0FkjhKTAAAAAg"]
[Sat Apr 11 10:54:20.966725 2026] [:error] [pid 2187:tid 2233] [client 172.213.241.33:10034] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "adm33A4J29_qQi0FkjhKUAAAAAU"]
[Sat Apr 11 10:54:21.437822 2026] [:error] [pid 2186:tid 2197] [client 172.213.241.33:10104] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "adm33cibnOEEvcO8wPLKzQAAAIc"]
[Sat Apr 11 10:54:21.924021 2026] [:error] [pid 2186:tid 2201] [client 172.213.241.33:10096] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "adm33cibnOEEvcO8wPLKzgAAAIs"]
[Sat Apr 11 10:54:22.404293 2026] [:error] [pid 2186:tid 2213] [client 172.213.241.33:10145] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "adm33sibnOEEvcO8wPLK0AAAAJY"]
[Sat Apr 11 10:54:22.870044 2026] [:error] [pid 2188:tid 2271] [client 172.213.241.33:10079] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "adm33oDhDA-Xtn2nRSe7NQAAAM8"]
[Sat Apr 11 10:54:23.336446 2026] [:error] [pid 2188:tid 2259] [client 172.213.241.33:9987] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "adm334DhDA-Xtn2nRSe7NgAAAMM"]
[Sat Apr 11 10:54:23.811128 2026] [:error] [pid 2187:tid 2231] [client 172.213.241.33:9999] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "adm33w4J29_qQi0FkjhKXQAAAAM"]
[Sat Apr 11 10:54:24.287631 2026] [:error] [pid 2188:tid 2272] [client 172.213.241.33:9960] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "adm34IDhDA-Xtn2nRSe7OQAAANA"]
[Sat Apr 11 10:54:24.759522 2026] [:error] [pid 2187:tid 2232] [client 172.213.241.33:10026] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "adm34A4J29_qQi0FkjhKXwAAAAQ"]
[Sat Apr 11 10:54:25.235981 2026] [:error] [pid 2186:tid 2192] [client 172.213.241.33:9955] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "adm34cibnOEEvcO8wPLK1gAAAII"]
[Sat Apr 11 10:54:25.697811 2026] [:error] [pid 2188:tid 2275] [client 172.213.241.33:9931] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "adm34YDhDA-Xtn2nRSe7PgAAANM"]
[Sat Apr 11 10:54:26.158445 2026] [:error] [pid 2186:tid 2220] [client 172.213.241.33:9875] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adm34sibnOEEvcO8wPLK3QAAAJg"]
[Sat Apr 11 10:54:26.627147 2026] [:error] [pid 2186:tid 2213] [client 172.213.241.33:9944] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adm34sibnOEEvcO8wPLK3gAAAJY"]
[Sat Apr 11 10:54:27.103171 2026] [:error] [pid 2188:tid 2264] [client 172.213.241.33:9953] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adm344DhDA-Xtn2nRSe7RgAAAMg"]
[Sat Apr 11 10:54:27.568304 2026] [:error] [pid 2187:tid 2249] [client 172.213.241.33:10103] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "adm34w4J29_qQi0FkjhKZwAAABU"]
[Sat Apr 11 10:54:28.035557 2026] [:error] [pid 2188:tid 2272] [client 172.213.241.33:10048] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "adm35IDhDA-Xtn2nRSe7SAAAANA"]
[Sat Apr 11 10:54:28.534662 2026] [:error] [pid 2188:tid 2256] [client 172.213.241.33:10204] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "adm35IDhDA-Xtn2nRSe7SgAAAMA"]
[Sat Apr 11 10:54:28.995417 2026] [:error] [pid 2187:tid 2244] [client 172.213.241.33:10002] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "adm35A4J29_qQi0FkjhKaQAAABA"]
[Sat Apr 11 10:54:29.457472 2026] [:error] [pid 2297:tid 2319] [client 172.213.241.33:10014] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "adm35bXJS-Jji11jZk1xgwAAARI"]
[Sat Apr 11 10:54:29.924017 2026] [:error] [pid 2297:tid 2325] [client 172.213.241.33:10068] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "adm35bXJS-Jji11jZk1xiQAAARg"]
[Sat Apr 11 10:54:30.393253 2026] [:error] [pid 2297:tid 2312] [client 172.213.241.33:9990] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "adm35rXJS-Jji11jZk1xjgAAAQs"]
[Sat Apr 11 10:54:30.851929 2026] [:error] [pid 2297:tid 2305] [client 172.213.241.33:10152] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "adm35rXJS-Jji11jZk1xkQAAAQQ"]
[Sat Apr 11 10:54:31.313844 2026] [:error] [pid 2188:tid 2270] [client 172.213.241.33:9936] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "adm354DhDA-Xtn2nRSe7TgAAAM4"]
[Sat Apr 11 10:54:31.781011 2026] [:error] [pid 2297:tid 2313] [client 172.213.241.33:9940] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adm357XJS-Jji11jZk1xlQAAAQw"]
[Sat Apr 11 10:54:44.917915 2026] [:error] [pid 2186:tid 2196] [client 172.213.241.33:9861] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "adm39MibnOEEvcO8wPLLCQAAAIY"]
[Sat Apr 11 10:54:45.384818 2026] [:error] [pid 2186:tid 2194] [client 172.213.241.33:9909] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "adm39cibnOEEvcO8wPLLCgAAAIQ"]
[Sat Apr 11 10:54:45.854444 2026] [:error] [pid 2188:tid 2279] [client 172.213.241.33:9922] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "adm39YDhDA-Xtn2nRSe7eQAAANc"]
[Sat Apr 11 10:54:46.323797 2026] [:error] [pid 2186:tid 2220] [client 172.213.241.33:10099] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class20.php"] [unique_id "adm39sibnOEEvcO8wPLLDAAAAJg"]
[Sat Apr 11 10:54:46.794818 2026] [:error] [pid 2297:tid 2311] [client 172.213.241.33:10018] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "adm39rXJS-Jji11jZk1xygAAAQo"]
[Sat Apr 11 10:54:47.256281 2026] [:error] [pid 2297:tid 2317] [client 172.213.241.33:10023] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "adm397XJS-Jji11jZk1xywAAARA"]
[Sat Apr 11 10:54:47.723356 2026] [:error] [pid 2186:tid 2207] [client 172.213.241.33:9925] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "adm398ibnOEEvcO8wPLLDQAAAJE"]
[Sat Apr 11 10:54:48.192188 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:9973] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "adm3-LXJS-Jji11jZk1x0wAAARM"]
[Sat Apr 11 10:54:48.666150 2026] [:error] [pid 2297:tid 2307] [client 172.213.241.33:10032] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "adm3-LXJS-Jji11jZk1x1gAAAQY"]
[Sat Apr 11 10:54:49.151760 2026] [:error] [pid 2297:tid 2318] [client 172.213.241.33:9958] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "adm3-bXJS-Jji11jZk1x2AAAARE"]
[Sat Apr 11 10:54:49.609613 2026] [:error] [pid 2297:tid 2308] [client 172.213.241.33:9968] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "adm3-bXJS-Jji11jZk1x3QAAAQc"]
[Sat Apr 11 10:54:50.071084 2026] [:error] [pid 2188:tid 2278] [client 172.213.241.33:10100] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vee.php"] [unique_id "adm3-oDhDA-Xtn2nRSe7hAAAANY"]
[Sat Apr 11 10:54:50.537097 2026] [:error] [pid 2188:tid 2264] [client 172.213.241.33:10030] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "adm3-oDhDA-Xtn2nRSe7hgAAAMg"]
[Sat Apr 11 10:54:50.999278 2026] [:error] [pid 2188:tid 2271] [client 172.213.241.33:9937] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "adm3-oDhDA-Xtn2nRSe7iQAAAM8"]
[Sat Apr 11 10:54:51.464165 2026] [:error] [pid 2186:tid 2206] [client 172.213.241.33:9972] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "adm3-8ibnOEEvcO8wPLLEAAAAJA"]
[Sat Apr 11 10:54:51.938158 2026] [:error] [pid 2187:tid 2252] [client 172.213.241.33:9920] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cabs.php"] [unique_id "adm3-w4J29_qQi0FkjhKiQAAABg"]
[Sat Apr 11 10:54:52.397091 2026] [:error] [pid 2188:tid 2269] [client 172.213.241.33:9916] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adm3_IDhDA-Xtn2nRSe7jgAAAM0"]
[Sat Apr 11 10:54:52.855855 2026] [:error] [pid 2297:tid 2320] [client 172.213.241.33:9938] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adm3_LXJS-Jji11jZk1x5AAAARM"]
[Sat Apr 11 10:54:53.323058 2026] [:error] [pid 2297:tid 2317] [client 172.213.241.33:9880] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adm3_bXJS-Jji11jZk1x5gAAARA"]
[Sat Apr 11 10:54:53.785332 2026] [:error] [pid 2188:tid 2264] [client 172.213.241.33:10070] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "adm3_YDhDA-Xtn2nRSe7kwAAAMg"]
[Sat Apr 11 10:54:54.277274 2026] [:error] [pid 2188:tid 2262] [client 172.213.241.33:10040] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "adm3_oDhDA-Xtn2nRSe7lQAAAMY"]
[Sat Apr 11 10:54:54.738956 2026] [:error] [pid 2186:tid 2210] [client 172.213.241.33:9967] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "adm3_sibnOEEvcO8wPLLGQAAAJQ"]
[Sat Apr 11 10:54:55.203560 2026] [:error] [pid 2187:tid 2242] [client 172.213.241.33:9868] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "adm3_w4J29_qQi0FkjhKmgAAAA4"]
[Sat Apr 11 10:54:55.668951 2026] [:error] [pid 2187:tid 2249] [client 172.213.241.33:9950] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "adm3_w4J29_qQi0FkjhKngAAABU"]
[Sat Apr 11 10:54:56.131066 2026] [:error] [pid 2187:tid 2247] [client 172.213.241.33:10041] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "adm4AA4J29_qQi0FkjhKogAAABM"]
[Sat Apr 11 10:54:56.591011 2026] [:error] [pid 2297:tid 2317] [client 172.213.241.33:10083] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "adm4ALXJS-Jji11jZk1x6wAAARA"]
[Sat Apr 11 10:54:57.053069 2026] [:error] [pid 2297:tid 2304] [client 172.213.241.33:9806] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "adm4AbXJS-Jji11jZk1x7wAAAQM"]
[Sat Apr 11 10:54:57.520483 2026] [:error] [pid 2188:tid 2257] [client 172.213.241.33:9798] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "adm4AYDhDA-Xtn2nRSe7pQAAAME"]
[Sat Apr 11 10:54:57.983747 2026] [:error] [pid 2297:tid 2306] [client 172.213.241.33:65518] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "adm4AbXJS-Jji11jZk1x9QAAAQU"]
[Sat Apr 11 10:54:58.472552 2026] [:error] [pid 2188:tid 2263] [client 172.213.241.33:9878] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "adm4AoDhDA-Xtn2nRSe7pgAAAMc"]
[Sat Apr 11 10:54:58.941255 2026] [:error] [pid 2188:tid 2260] [client 172.213.241.33:10105] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "adm4AoDhDA-Xtn2nRSe7pwAAAMQ"]
[Sat Apr 11 10:54:59.402292 2026] [:error] [pid 2188:tid 2279] [client 172.213.241.33:9948] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "adm4A4DhDA-Xtn2nRSe7qwAAANc"]
[Sat Apr 11 11:18:38.284867 2026] [:error] [pid 2187:tid 2245] [client 43.153.35.128:51232] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adm9jg4J29_qQi0FkjhYQwAAABE"]
[Sat Apr 11 11:56:35.836796 2026] [:error] [pid 2297:tid 2319] [client 61.246.46.10:59029] [client 61.246.46.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.246.46.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adnGc7XJS-Jji11jZk2bdQAAARI"]
[Sat Apr 11 11:56:37.227552 2026] [:error] [pid 2188:tid 2279] [client 61.246.46.10:59044] [client 61.246.46.10] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adnGdYDhDA-Xtn2nRSfargAAANc"]
[Sat Apr 11 11:56:42.809735 2026] [:error] [pid 2188:tid 2267] [client 61.246.46.10:59044] [client 61.246.46.10] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adnGeoDhDA-Xtn2nRSfauAAAAMs"]
[Sat Apr 11 12:03:54.491108 2026] [:error] [pid 11067:tid 11092] [client 150.228.189.65:32487] [client 150.228.189.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.228.189.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adnIKsW3w7N67R04YCI5RAAAAFc"]
[Sat Apr 11 12:03:56.635893 2026] [:error] [pid 2297:tid 2323] [client 124.107.31.61:55338] [client 124.107.31.61] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adnILLXJS-Jji11jZk2ekgAAARY"]
[Sat Apr 11 12:04:01.102501 2026] [:error] [pid 2297:tid 2323] [client 124.107.31.61:55338] [client 124.107.31.61] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adnIMbXJS-Jji11jZk2eqgAAARY"]
[Sat Apr 11 12:43:11.261520 2026] [:error] [pid 2187:tid 2235] [client 164.90.178.220:47024] [client 164.90.178.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.178.220, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adnRXw4J29_qQi0FkjhxGAAAAAc"]
[Sat Apr 11 12:43:12.147598 2026] [proxy_fcgi:error] [pid 2187:tid 2235] [client 164.90.178.220:47024] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 11 12:43:12.435969 2026] [:error] [pid 2187:tid 2250] [client 164.90.178.220:47024] [client 164.90.178.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.90.178.220, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adnRYA4J29_qQi0FkjhxGgAAABY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 11 12:43:13.483617 2026] [proxy_fcgi:error] [pid 2187:tid 2250] [client 164.90.178.220:47024] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 11 13:42:31.565350 2026] [:error] [pid 2297:tid 2301] [client 104.28.166.10:53441] [client 104.28.166.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/"] [unique_id "adnfR7XJS-Jji11jZk3MeQAAAQA"]
[Sat Apr 11 13:42:33.033515 2026] [:error] [pid 11067:tid 11082] [client 104.28.166.11:16547] [client 104.28.166.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "adnfScW3w7N67R04YCJ-AQAAAE0"]
[Sat Apr 11 14:11:40.060808 2026] [:error] [pid 2297:tid 2312] [client 157.15.40.61:56842] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "adnmHLXJS-Jji11jZk3ZlgAAAQs"]
[Sat Apr 11 14:11:40.340563 2026] [:error] [pid 2187:tid 2241] [client 157.15.40.61:56910] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/style.php"] [unique_id "adnmHA4J29_qQi0FkjiIVwAAAA0"]
[Sat Apr 11 14:11:43.627582 2026] [:error] [pid 2297:tid 2324] [client 157.15.40.61:56947] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/style.php"] [unique_id "adnmH7XJS-Jji11jZk3Z_QAAARc"]
[Sat Apr 11 14:11:46.886395 2026] [:error] [pid 2297:tid 2301] [client 157.15.40.61:58055] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/style.php"] [unique_id "adnmIrXJS-Jji11jZk3alwAAAQA"]
[Sat Apr 11 14:11:50.321056 2026] [:error] [pid 2187:tid 2238] [client 157.15.40.61:58690] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style.php"] [unique_id "adnmJg4J29_qQi0FkjiI3AAAAAo"]
[Sat Apr 11 14:11:50.583969 2026] [:error] [pid 2186:tid 2212] [client 157.15.40.61:58763] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "adnmJsibnOEEvcO8wPL-MQAAAJU"]
[Sat Apr 11 14:11:51.857284 2026] [:error] [pid 2188:tid 2276] [client 157.15.40.61:58812] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "adnmJ4DhDA-Xtn2nRScLEQAAANQ"]
[Sat Apr 11 14:11:52.501556 2026] [:error] [pid 2297:tid 2303] [client 157.15.40.61:59161] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "adnmKLXJS-Jji11jZk3bowAAAQI"]
[Sat Apr 11 14:11:54.840379 2026] [:error] [pid 11067:tid 11085] [client 157.15.40.61:59423] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "adnmKsW3w7N67R04YCKUHAAAAFA"]
[Sat Apr 11 14:11:55.106385 2026] [:error] [pid 2186:tid 2209] [client 157.15.40.61:59630] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "adnmK8ibnOEEvcO8wPL-iQAAAJM"]
[Sat Apr 11 14:11:55.382858 2026] [:error] [pid 11067:tid 11075] [client 157.15.40.61:59693] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "adnmK8W3w7N67R04YCKURAAAAEY"]
[Sat Apr 11 14:11:55.640988 2026] [:error] [pid 2188:tid 2263] [client 157.15.40.61:59772] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs.php"] [unique_id "adnmK4DhDA-Xtn2nRScLYwAAAMc"]
[Sat Apr 11 14:11:55.892477 2026] [:error] [pid 11067:tid 11081] [client 157.15.40.61:59839] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "adnmK8W3w7N67R04YCKUiAAAAEw"]
[Sat Apr 11 14:11:56.670173 2026] [:error] [pid 11067:tid 11091] [client 157.15.40.61:60024] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "adnmLMW3w7N67R04YCKU-wAAAFY"]
[Sat Apr 11 14:11:57.441912 2026] [:error] [pid 11067:tid 11078] [client 157.15.40.61:60183] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shelp.php"] [unique_id "adnmLcW3w7N67R04YCKVNgAAAEk"]
[Sat Apr 11 14:11:57.701197 2026] [:error] [pid 2186:tid 2213] [client 157.15.40.61:60251] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cord.php"] [unique_id "adnmLcibnOEEvcO8wPL-8QAAAJY"]
[Sat Apr 11 14:11:57.975165 2026] [:error] [pid 2186:tid 2196] [client 157.15.40.61:60321] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dex.php"] [unique_id "adnmLcibnOEEvcO8wPL-_gAAAIY"]
[Sat Apr 11 14:11:58.237534 2026] [:error] [pid 11067:tid 11070] [client 157.15.40.61:60400] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmLsW3w7N67R04YCKVfgAAAEE"]
[Sat Apr 11 14:11:58.496294 2026] [:error] [pid 2187:tid 2244] [client 157.15.40.61:60490] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "adnmLg4J29_qQi0FkjiJpgAAABA"]
[Sat Apr 11 14:12:00.944888 2026] [:error] [pid 2188:tid 2274] [client 157.15.40.61:60570] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "adnmMIDhDA-Xtn2nRScL5AAAANI"]
[Sat Apr 11 14:12:04.212150 2026] [:error] [pid 2297:tid 2309] [client 157.15.40.61:62246] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/zwso.php"] [unique_id "adnmNLXJS-Jji11jZk3cgAAAAQg"]
[Sat Apr 11 14:12:04.484501 2026] [:error] [pid 2297:tid 2301] [client 157.15.40.61:62506] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmNLXJS-Jji11jZk3chAAAAQA"]
[Sat Apr 11 14:12:18.366898 2026] [:error] [pid 2188:tid 2269] [client 157.15.40.61:51513] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "adnmQoDhDA-Xtn2nRScM0QAAAM0"]
[Sat Apr 11 14:12:21.667000 2026] [:error] [pid 2297:tid 2324] [client 157.15.40.61:51924] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/shlo.php"] [unique_id "adnmRbXJS-Jji11jZk3dhwAAARc"]
[Sat Apr 11 14:12:21.932957 2026] [:error] [pid 2297:tid 2314] [client 157.15.40.61:51954] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/133.php"] [unique_id "adnmRbXJS-Jji11jZk3diwAAAQ0"]
[Sat Apr 11 14:12:23.089550 2026] [:error] [pid 11067:tid 11080] [client 157.15.40.61:52081] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "adnmR8W3w7N67R04YCKYCgAAAEs"]
[Sat Apr 11 14:12:23.351995 2026] [:error] [pid 2186:tid 2192] [client 157.15.40.61:52105] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/php8.php"] [unique_id "adnmR8ibnOEEvcO8wPL_6QAAAII"]
[Sat Apr 11 14:12:24.669704 2026] [:error] [pid 11067:tid 11079] [client 157.15.40.61:52246] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/lufix1.php"] [unique_id "adnmSMW3w7N67R04YCKYGgAAAEo"]
[Sat Apr 11 14:12:25.604786 2026] [:error] [pid 2297:tid 2324] [client 157.15.40.61:52348] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/witmm.php"] [unique_id "adnmSbXJS-Jji11jZk3dpAAAARc"]
[Sat Apr 11 14:12:26.989568 2026] [:error] [pid 11067:tid 11093] [client 157.15.40.61:52518] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/index.php"] [unique_id "adnmSsW3w7N67R04YCKYKQAAAFg"]
[Sat Apr 11 14:12:29.389877 2026] [:error] [pid 2186:tid 2206] [client 157.15.40.61:52547] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmTcibnOEEvcO8wPIACQAAAJA"]
[Sat Apr 11 14:12:31.057399 2026] [:error] [pid 2188:tid 2279] [client 157.15.40.61:52876] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "adnmT4DhDA-Xtn2nRScNBQAAANc"]
[Sat Apr 11 14:12:35.524910 2026] [:error] [pid 2188:tid 2276] [client 157.15.40.61:53206] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "adnmU4DhDA-Xtn2nRScNLwAAANQ"]
[Sat Apr 11 14:12:36.798895 2026] [:error] [pid 2186:tid 2195] [client 157.15.40.61:53729] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "adnmVMibnOEEvcO8wPIAJAAAAIU"]
[Sat Apr 11 14:12:53.117349 2026] [:error] [pid 2187:tid 2241] [client 157.15.40.61:55116] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "adnmZQ4J29_qQi0FkjiLCwAAAA0"]
[Sat Apr 11 14:12:59.384919 2026] [:error] [pid 2188:tid 2277] [client 157.15.40.61:56320] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-editor.php"] [unique_id "adnma4DhDA-Xtn2nRScNeQAAANU"]
[Sat Apr 11 15:24:55.771992 2026] [:error] [pid 2297:tid 2325] [client 52.196.153.77:39812] [client 52.196.153.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.196.153.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adn3R7XJS-Jji11jZk0AJQAAARg"]
[Sat Apr 11 15:24:56.625933 2026] [proxy_fcgi:error] [pid 2297:tid 2325] [client 52.196.153.77:39812] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 11 15:24:58.015365 2026] [:error] [pid 2297:tid 2301] [client 52.196.153.77:39812] [client 52.196.153.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.196.153.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adn3SrXJS-Jji11jZk0ALgAAAQA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 11 15:24:59.072042 2026] [proxy_fcgi:error] [pid 2297:tid 2301] [client 52.196.153.77:39812] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 11 16:03:22.665316 2026] [:error] [pid 11067:tid 11091] [client 66.154.119.233:42114] [client 66.154.119.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.154.119.233, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adoASsW3w7N67R04YCLgUQAAAFY"]
[Sat Apr 11 16:03:23.599611 2026] [proxy_fcgi:error] [pid 11067:tid 11091] [client 66.154.119.233:42114] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 11 16:03:26.440376 2026] [:error] [pid 11067:tid 11083] [client 66.154.119.233:42114] [client 66.154.119.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.154.119.233, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adoATsW3w7N67R04YCLgWgAAAE4"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 11 16:03:27.480174 2026] [proxy_fcgi:error] [pid 11067:tid 11083] [client 66.154.119.233:42114] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 11 19:40:19.539389 2026] [:error] [pid 18629:tid 18632] [client 43.157.67.70:42008] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adozI2W1jXPD9CXRfNQ_LwAAAUE"]
[Sat Apr 11 20:02:06.712727 2026] [:error] [pid 18629:tid 18645] [client 1.15.52.154:43816] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ado4PmW1jXPD9CXRfNRHDwAAAU4"]
[Sat Apr 11 21:04:25.401250 2026] [:error] [pid 18629:tid 18633] [client 51.75.128.81:38844] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adpG2WW1jXPD9CXRfNRgJwAAAUI"]
[Sat Apr 11 21:04:27.851635 2026] [:error] [pid 54610:tid 54620] [client 51.75.128.81:36872] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adpG2we-u3uFASN-RPHjiAAAAQc"]
[Sat Apr 11 21:04:30.341265 2026] [:error] [pid 65248:tid 65254] [client 51.75.128.81:36882] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adpG3jI-iGHcq-8gSqotaQAAAAQ"]
[Sat Apr 11 21:04:32.826811 2026] [:error] [pid 54610:tid 54627] [client 51.75.128.81:36898] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adpG4Ae-u3uFASN-RPHjoQAAAQ4"]
[Sat Apr 11 21:04:35.158823 2026] [:error] [pid 65248:tid 65272] [client 51.75.128.81:36902] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adpG4zI-iGHcq-8gSqotbwAAABY"]
[Sat Apr 11 21:04:37.641117 2026] [:error] [pid 18629:tid 18641] [client 51.75.128.81:36912] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adpG5WW1jXPD9CXRfNRgQgAAAUo"]
[Sat Apr 11 21:04:40.155360 2026] [:error] [pid 65248:tid 65256] [client 51.75.128.81:40484] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adpG6DI-iGHcq-8gSqotdwAAAAY"]
[Sat Apr 11 21:04:42.641814 2026] [:error] [pid 18629:tid 18643] [client 51.75.128.81:40488] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adpG6mW1jXPD9CXRfNRgUgAAAUw"]
[Sat Apr 11 21:04:45.144357 2026] [:error] [pid 54519:tid 54551] [client 51.75.128.81:40502] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adpG7R3fdONpCON3MUi4bQAAAMI"]
[Sat Apr 11 21:04:47.641050 2026] [:error] [pid 54610:tid 54624] [client 51.75.128.81:40514] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adpG7we-u3uFASN-RPHjtQAAAQs"]
[Sat Apr 11 21:04:49.986979 2026] [:error] [pid 65248:tid 65266] [client 51.75.128.81:39894] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adpG8TI-iGHcq-8gSqothwAAABA"]
[Sat Apr 11 21:04:52.484992 2026] [:error] [pid 54519:tid 54556] [client 51.75.128.81:39906] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adpG9B3fdONpCON3MUi4dwAAAMc"]
[Sat Apr 11 21:04:54.978447 2026] [:error] [pid 54610:tid 54623] [client 51.75.128.81:39922] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adpG9ge-u3uFASN-RPHjzQAAAQo"]
[Sat Apr 11 21:04:57.457102 2026] [:error] [pid 54610:tid 54616] [client 51.75.128.81:39932] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "adpG-Qe-u3uFASN-RPHj2QAAAQM"]
[Sat Apr 11 21:04:59.995849 2026] [:error] [pid 54520:tid 54589] [client 51.75.128.81:39794] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "adpG-8OfMlnGwwoJrMC1MQAAAE0"]
[Sat Apr 11 21:05:02.480101 2026] [:error] [pid 18629:tid 18649] [client 51.75.128.81:39796] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "adpG_mW1jXPD9CXRfNRgawAAAVA"]
[Sat Apr 11 21:05:04.804632 2026] [:error] [pid 54610:tid 54616] [client 51.75.128.81:39798] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "adpHAAe-u3uFASN-RPHj8AAAAQM"]
[Sat Apr 11 21:05:07.300838 2026] [:error] [pid 54610:tid 54614] [client 51.75.128.81:39814] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "adpHAwe-u3uFASN-RPHj-wAAAQE"]
[Sat Apr 11 21:05:09.775555 2026] [:error] [pid 54520:tid 54586] [client 51.75.128.81:36994] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "adpHBcOfMlnGwwoJrMC1QwAAAEo"]
[Sat Apr 11 21:05:12.267079 2026] [:error] [pid 18629:tid 18643] [client 51.75.128.81:36996] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "adpHCGW1jXPD9CXRfNRgeAAAAUw"]
[Sat Apr 11 21:05:14.797789 2026] [:error] [pid 65248:tid 65268] [client 51.75.128.81:37004] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "adpHCjI-iGHcq-8gSqotqAAAABI"]
[Sat Apr 11 21:05:17.333565 2026] [:error] [pid 54610:tid 54619] [client 51.75.128.81:37008] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adpHDQe-u3uFASN-RPHkDAAAAQY"]
[Sat Apr 11 21:05:19.767739 2026] [:error] [pid 54610:tid 54634] [client 51.75.128.81:34510] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "adpHDwe-u3uFASN-RPHkEgAAARU"]
[Sat Apr 11 21:05:50.207831 2026] [:error] [pid 54520:tid 54596] [client 51.75.128.81:34524] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adpHLsOfMlnGwwoJrMC1bgAAAFQ"]
[Sat Apr 11 21:05:52.484367 2026] [:error] [pid 65248:tid 65274] [client 51.75.128.81:53740] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adpHMDI-iGHcq-8gSqot7AAAABg"]
[Sat Apr 11 21:05:54.820672 2026] [:error] [pid 54610:tid 54615] [client 51.75.128.81:53752] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adpHMge-u3uFASN-RPHkTgAAAQI"]
[Sat Apr 11 21:05:57.308962 2026] [:error] [pid 54610:tid 54637] [client 51.75.128.81:53754] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adpHNQe-u3uFASN-RPHkUgAAARg"]
[Sat Apr 11 21:05:59.786105 2026] [:error] [pid 65248:tid 65253] [client 51.75.128.81:34698] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adpHNzI-iGHcq-8gSqot_gAAAAM"]
[Sat Apr 11 21:06:02.125727 2026] [:error] [pid 54610:tid 54627] [client 51.75.128.81:34704] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adpHOge-u3uFASN-RPHkYgAAAQ4"]
[Sat Apr 11 21:06:04.617991 2026] [:error] [pid 65248:tid 65265] [client 51.75.128.81:34718] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adpHPDI-iGHcq-8gSqouBQAAAA8"]
[Sat Apr 11 21:06:06.931865 2026] [:error] [pid 54519:tid 54573] [client 51.75.128.81:34724] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adpHPh3fdONpCON3MUi4pwAAANg"]
[Sat Apr 11 21:06:09.429736 2026] [:error] [pid 54610:tid 54622] [client 51.75.128.81:56950] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adpHQQe-u3uFASN-RPHkawAAAQk"]
[Sat Apr 11 21:06:11.916322 2026] [:error] [pid 54610:tid 54628] [client 51.75.128.81:56954] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "adpHQwe-u3uFASN-RPHkdwAAAQ8"]
[Sat Apr 11 21:06:14.239042 2026] [:error] [pid 65248:tid 65265] [client 51.75.128.81:56968] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "adpHRjI-iGHcq-8gSqouEAAAAA8"]
[Sat Apr 11 21:06:16.750159 2026] [:error] [pid 54519:tid 54570] [client 51.75.128.81:56976] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "adpHSB3fdONpCON3MUi4tgAAANU"]
[Sat Apr 11 21:06:19.036543 2026] [:error] [pid 54518:tid 54523] [client 51.75.128.81:37714] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "adpHS6Ki5dAhX05ubq1VDwAAAIE"]
[Sat Apr 11 21:06:21.533196 2026] [:error] [pid 54610:tid 54637] [client 51.75.128.81:37726] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adpHTQe-u3uFASN-RPHkkgAAARg"]
[Sat Apr 11 21:06:24.023919 2026] [:error] [pid 54610:tid 54633] [client 51.75.128.81:37728] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adpHUAe-u3uFASN-RPHkmQAAARQ"]
[Sat Apr 11 21:06:26.351315 2026] [:error] [pid 18629:tid 18640] [client 51.75.128.81:37730] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adpHUmW1jXPD9CXRfNRg_gAAAUk"]
[Sat Apr 11 21:06:28.826949 2026] [:error] [pid 18629:tid 18655] [client 51.75.128.81:53596] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adpHVGW1jXPD9CXRfNRhAwAAAVY"]
[Sat Apr 11 21:06:31.152526 2026] [:error] [pid 18629:tid 18631] [client 51.75.128.81:53608] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adpHV2W1jXPD9CXRfNRhBgAAAUA"]
[Sat Apr 11 21:06:33.618248 2026] [:error] [pid 54520:tid 54593] [client 51.75.128.81:53616] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "adpHWcOfMlnGwwoJrMC1hgAAAFE"]
[Sat Apr 11 21:06:35.952417 2026] [:error] [pid 65248:tid 65253] [client 51.75.128.81:53624] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "adpHWzI-iGHcq-8gSqouMAAAAAM"]
[Sat Apr 11 21:06:38.423723 2026] [:error] [pid 65248:tid 65267] [client 51.75.128.81:60412] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "adpHXjI-iGHcq-8gSqouNwAAABE"]
[Sat Apr 11 21:06:40.747672 2026] [:error] [pid 65248:tid 65270] [client 51.75.128.81:60420] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "adpHYDI-iGHcq-8gSqouQAAAABQ"]
[Sat Apr 11 21:06:43.221986 2026] [:error] [pid 18629:tid 18641] [client 51.75.128.81:60428] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "adpHY2W1jXPD9CXRfNRhHgAAAUo"]
[Sat Apr 11 21:06:45.680854 2026] [:error] [pid 54519:tid 54554] [client 51.75.128.81:60444] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "adpHZR3fdONpCON3MUi4xwAAAMU"]
[Sat Apr 11 21:07:16.776403 2026] [:error] [pid 54520:tid 54580] [client 51.75.128.81:36688] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adpHhMOfMlnGwwoJrMC1ugAAAEQ"]
[Sat Apr 11 21:07:19.192559 2026] [:error] [pid 18629:tid 18651] [client 51.75.128.81:54046] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "adpHh2W1jXPD9CXRfNRhYAAAAVI"]
[Sat Apr 11 21:07:21.639753 2026] [:error] [pid 54610:tid 54630] [client 51.75.128.81:54054] [client 51.75.128.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "adpHiQe-u3uFASN-RPHlVAAAARE"]
[Sun Apr 12 00:26:06.297806 2026] [:error] [pid 42219:tid 42243] [client 175.212.145.243:36885] [client 175.212.145.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.212.145.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adp2Hg-4IkVbTQx_J-2-uwAAAJQ"]
[Sun Apr 12 00:32:40.032270 2026] [:error] [pid 52608:tid 52621] [client 175.212.145.243:1970] [client 175.212.145.243] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adp3qCY5wH-BLt5QEKisbQAAAQo"]
[Sun Apr 12 00:43:44.131895 2026] [:error] [pid 44700:tid 44745] [client 65.38.77.199:56653] [client 65.38.77.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.38.77.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adp6QGryPgh_uW4QPClNcwAAAME"]
[Sun Apr 12 00:43:54.323812 2026] [:error] [pid 44701:tid 44774] [client 65.38.77.199:57350] [client 65.38.77.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.38.77.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adp6ShGZAP4MrlxEPFcakAAAAEI"]
[Sun Apr 12 00:44:04.870397 2026] [:error] [pid 44700:tid 44744] [client 65.38.77.199:58067] [client 65.38.77.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.38.77.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adp6VGryPgh_uW4QPClNqwAAAMA"]
[Sun Apr 12 00:44:28.298570 2026] [:error] [pid 45064:tid 45116] [client 202.88.254.53:65247] [client 202.88.254.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.88.254.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adp6bJcHBvLyJ6EUhUrWQQAAAVc"]
[Sun Apr 12 00:44:38.556213 2026] [:error] [pid 45064:tid 45103] [client 202.88.254.53:49577] [client 202.88.254.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.88.254.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adp6dpcHBvLyJ6EUhUrWdAAAAUo"]
[Sun Apr 12 00:44:49.078988 2026] [:error] [pid 45064:tid 45097] [client 202.88.254.53:50228] [client 202.88.254.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.88.254.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adp6gZcHBvLyJ6EUhUrWqgAAAUU"]
[Sun Apr 12 00:52:53.908325 2026] [:error] [pid 44701:tid 44795] [client 125.166.19.143:28835] [client 125.166.19.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.19.143, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adp8ZRGZAP4MrlxEPFciNwAAAFQ"]
[Sun Apr 12 01:05:13.658616 2026] [:error] [pid 44698:tid 44710] [client 95.46.69.63:54769] [client 95.46.69.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.46.69.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adp_SRgoH9UWd-U3D55XCwAAAIc"]
[Sun Apr 12 01:05:23.571164 2026] [:error] [pid 45064:tid 45113] [client 95.46.69.63:55371] [client 95.46.69.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.46.69.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adp_U5cHBvLyJ6EUhUrraQAAAVQ"]
[Sun Apr 12 01:05:34.305088 2026] [:error] [pid 45064:tid 45109] [client 95.46.69.63:55795] [client 95.46.69.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.46.69.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adp_XpcHBvLyJ6EUhUrrpgAAAVA"]
[Sun Apr 12 01:27:19.008807 2026] [:error] [pid 44701:tid 44790] [client 69.49.112.71:39784] [client 69.49.112.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.71, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adqEdxGZAP4MrlxEPFc11QAAAE8"]
[Sun Apr 12 01:27:21.237027 2026] [proxy_fcgi:error] [pid 44701:tid 44790] [client 69.49.112.71:39784] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 12 01:27:21.825612 2026] [:error] [pid 44701:tid 44781] [client 69.49.112.71:39784] [client 69.49.112.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.71, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adqEeRGZAP4MrlxEPFc11wAAAEg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 12 01:27:22.887925 2026] [proxy_fcgi:error] [pid 44701:tid 44781] [client 69.49.112.71:39784] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 12 01:31:24.516910 2026] [:error] [pid 36938:tid 36957] [client 197.231.178.154:51275] [client 197.231.178.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.231.178.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqFbISWpa_VL1JPU6zbhQAAAZE"]
[Sun Apr 12 01:31:34.639790 2026] [:error] [pid 36909:tid 36934] [client 102.222.145.94:51688] [client 102.222.145.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.222.145.94, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqFdkGk5GhxTCzHUOoV-wAAARc"]
[Sun Apr 12 01:31:45.526164 2026] [:error] [pid 44701:tid 44782] [client 197.231.178.154:51980] [client 197.231.178.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.231.178.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqFgRGZAP4MrlxEPFc4hQAAAEk"]
[Sun Apr 12 01:31:56.199410 2026] [:error] [pid 44698:tid 44707] [client 102.222.145.94:52654] [client 102.222.145.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.222.145.94, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqFjBgoH9UWd-U3D55f-QAAAIQ"]
[Sun Apr 12 01:58:33.560053 2026] [:error] [pid 45064:tid 45101] [client 209.38.77.153:57334] [client 209.38.77.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adqLyZcHBvLyJ6EUhUoD9QAAAUg"]
[Sun Apr 12 01:58:35.307547 2026] [:error] [pid 36909:tid 36934] [client 209.38.77.153:57399] [client 209.38.77.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adqLy0Gk5GhxTCzHUOoe-gAAARc"]
[Sun Apr 12 02:38:14.719581 2026] [:error] [pid 44700:tid 44748] [client 188.53.55.59:3125] [client 188.53.55.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.53.55.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqVFmryPgh_uW4QPCl8ZwAAAMQ"]
[Sun Apr 12 02:38:45.685284 2026] [:error] [pid 44698:tid 44724] [client 188.53.55.59:6942] [client 188.53.55.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.53.55.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqVNRgoH9UWd-U3D56KqAAAAJU"]
[Sun Apr 12 02:39:07.352310 2026] [:error] [pid 36909:tid 36924] [client 188.53.55.59:9625] [client 188.53.55.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.53.55.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqVS0Gk5GhxTCzHUOozWgAAAQ0"]
[Sun Apr 12 02:39:28.023704 2026] [:error] [pid 44698:tid 44706] [client 212.215.218.106:2918] [client 212.215.218.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.215.218.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqVYBgoH9UWd-U3D56LZgAAAIM"]
[Sun Apr 12 02:39:38.644312 2026] [:error] [pid 44700:tid 44767] [client 212.215.218.106:7692] [client 212.215.218.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.215.218.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqVamryPgh_uW4QPCl81wAAANc"]
[Sun Apr 12 02:39:49.435950 2026] [:error] [pid 36909:tid 36927] [client 212.215.218.106:8451] [client 212.215.218.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.215.218.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqVdUGk5GhxTCzHUOoz1gAAARA"]
[Sun Apr 12 02:40:00.279056 2026] [:error] [pid 36909:tid 36921] [client 212.215.218.106:1197] [client 212.215.218.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.215.218.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqVgEGk5GhxTCzHUOoz3gAAAQo"]
[Sun Apr 12 02:50:20.287605 2026] [:error] [pid 45064:tid 45112] [client 223.244.35.77:45549] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adqX7JcHBvLyJ6EUhUoX3QAAAVM"]
[Sun Apr 12 02:57:25.053929 2026] [:error] [pid 44701:tid 44775] [client 68.183.151.56:35030] [client 68.183.151.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "adqZlRGZAP4MrlxEPFdYHAAAAEM"]
[Sun Apr 12 03:07:17.201386 2026] [:error] [pid 44701:tid 44791] [client 180.254.224.71:3978] [client 180.254.224.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.254.224.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adqb5RGZAP4MrlxEPFddaAAAAFA"]
[Sun Apr 12 03:07:18.573564 2026] [:error] [pid 34152:tid 34160] [client 180.254.224.71:25884] [client 180.254.224.71] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adqb5oFtE4RhFslT1DrZhgAAAAY"]
[Sun Apr 12 03:07:24.345007 2026] [:error] [pid 34152:tid 34157] [client 180.254.224.71:25884] [client 180.254.224.71] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adqb7IFtE4RhFslT1DrZnAAAAAM"]
[Sun Apr 12 03:33:33.434171 2026] [autoindex:error] [pid 36909:tid 36927] [client 178.128.105.125:54128] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 05:11:25.306600 2026] [:error] [pid 26567:tid 26579] [client 103.116.12.180:7182] [client 103.116.12.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.116.12.180, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adq4_XhRpg6ptWFyFx3zDwAAAQo"]
[Sun Apr 12 05:11:37.675851 2026] [:error] [pid 26567:tid 26572] [client 103.116.12.180:44011] [client 103.116.12.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.116.12.180, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adq5CXhRpg6ptWFyFx3zXwAAAQM"]
[Sun Apr 12 05:54:56.729709 2026] [:error] [pid 25437:tid 25450] [client 62.197.152.86:50688] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "adrDMHf97wYZje1ep_NXIQAAAMs"]
[Sun Apr 12 05:54:57.358476 2026] [:error] [pid 25329:tid 25376] [client 62.197.152.86:50908] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "adrDMWdcIYsS8Iyaj101VgAAAIE"]
[Sun Apr 12 05:54:57.967390 2026] [:error] [pid 26599:tid 26614] [client 62.197.152.86:51120] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "adrDMXG89LXoQbk_rwBDxwAAAUw"]
[Sun Apr 12 05:54:58.577174 2026] [:error] [pid 26567:tid 26590] [client 62.197.152.86:51350] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "adrDMnhRpg6ptWFyFx0CdwAAARU"]
[Sun Apr 12 05:54:59.195954 2026] [:error] [pid 26567:tid 26578] [client 62.197.152.86:60470] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "adrDM3hRpg6ptWFyFx0CewAAAQk"]
[Sun Apr 12 05:54:59.829142 2026] [:error] [pid 26567:tid 26572] [client 62.197.152.86:60716] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/update/"] [unique_id "adrDM3hRpg6ptWFyFx0ChgAAAQM"]
[Sun Apr 12 05:55:00.443678 2026] [:error] [pid 26567:tid 26586] [client 62.197.152.86:60938] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/update/"] [unique_id "adrDNHhRpg6ptWFyFx0CkgAAARE"]
[Sun Apr 12 05:55:01.064649 2026] [:error] [pid 25328:tid 25398] [client 62.197.152.86:32916] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/update/"] [unique_id "adrDNcxUaQZxT-e0YsDo_AAAAFQ"]
[Sun Apr 12 05:55:01.681496 2026] [:error] [pid 25328:tid 25379] [client 62.197.152.86:33134] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/update/"] [unique_id "adrDNcxUaQZxT-e0YsDpBAAAAEs"]
[Sun Apr 12 05:55:02.299071 2026] [:error] [pid 25329:tid 25381] [client 62.197.152.86:33326] [client 62.197.152.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/update/"] [unique_id "adrDNmdcIYsS8Iyaj101egAAAIM"]
[Sun Apr 12 07:16:45.000061 2026] [:error] [pid 26600:tid 26634] [client 37.203.105.105:49979] [client 37.203.105.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.203.105.105, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adrWXO1YwAZiXhQKLYqQcwAAAYU"]
[Sun Apr 12 07:16:56.999499 2026] [:error] [pid 26600:tid 26631] [client 37.203.105.105:50507] [client 37.203.105.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.203.105.105, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adrWaO1YwAZiXhQKLYqQdgAAAYI"]
[Sun Apr 12 07:17:06.155150 2026] [:error] [pid 25437:tid 25443] [client 105.157.120.67:57934] [client 105.157.120.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.157.120.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adrWcnf97wYZje1ep_N0EQAAAMQ"]
[Sun Apr 12 07:17:16.472118 2026] [:error] [pid 25437:tid 25444] [client 105.157.120.67:58471] [client 105.157.120.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.157.120.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adrWfHf97wYZje1ep_N0GgAAAMU"]
[Sun Apr 12 07:17:23.455624 2026] [:error] [pid 60280:tid 60298] [client 105.157.120.67:58921] [client 105.157.120.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.157.120.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adrWg3BlLnDOYuIykkgDpwAAAdA"]
[Sun Apr 12 07:17:29.482319 2026] [:error] [pid 26599:tid 26624] [client 105.157.120.67:59246] [client 105.157.120.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.157.120.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adrWiXG89LXoQbk_rwBT6AAAAVY"]
[Sun Apr 12 07:39:09.562626 2026] [:error] [pid 25328:tid 25370] [client 102.0.10.84:60546] [client 102.0.10.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.0.10.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adrbncxUaQZxT-e0YsAQ2wAAAEY"]
[Sun Apr 12 08:08:38.510708 2026] [:error] [pid 25328:tid 25367] [client 36.65.204.236:50744] [client 36.65.204.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.65.204.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adrihsxUaQZxT-e0YsAbEgAAAEM"]
[Sun Apr 12 08:08:48.920395 2026] [:error] [pid 26599:tid 26604] [client 36.65.204.236:51224] [client 36.65.204.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.65.204.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adrikHG89LXoQbk_rwBqKwAAAUI"]
[Sun Apr 12 08:08:59.375668 2026] [:error] [pid 60280:tid 60285] [client 36.65.204.236:51623] [client 36.65.204.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.65.204.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adrim3BlLnDOYuIykkgYRwAAAcM"]
[Sun Apr 12 09:23:06.294510 2026] [:error] [pid 25327:tid 25353] [client 102.0.10.84:62564] [client 102.0.10.84] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adrz-i6h2tZEVJo9JFJ0AAAAABE"]
[Sun Apr 12 09:24:35.521445 2026] [:error] [pid 25327:tid 25357] [client 102.0.10.84:19981] [client 102.0.10.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.0.10.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adr0Uy6h2tZEVJo9JFJ0RwAAABU"]
[Sun Apr 12 12:53:54.831325 2026] [:error] [pid 60280:tid 60295] [client 103.56.161.36:38368] [client 103.56.161.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.56.161.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adslYnBlLnDOYuIykki3yAAAAc0"]
[Sun Apr 12 12:53:55.671939 2026] [proxy_fcgi:error] [pid 60280:tid 60295] [client 103.56.161.36:38368] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 12 12:53:56.110052 2026] [:error] [pid 60280:tid 60287] [client 103.56.161.36:38368] [client 103.56.161.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.56.161.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adslZHBlLnDOYuIykki3yQAAAcU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 12 12:53:57.102114 2026] [proxy_fcgi:error] [pid 60280:tid 60287] [client 103.56.161.36:38368] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 12 13:52:36.210739 2026] [:error] [pid 60280:tid 60282] [client 151.254.85.237:7763] [client 151.254.85.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.254.85.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adszJHBlLnDOYuIykkjU3AAAAcA"]
[Sun Apr 12 14:14:48.875157 2026] [:error] [pid 60280:tid 60293] [client 147.135.214.239:56476] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ads4WHBlLnDOYuIykkjgWQAAAcs"]
[Sun Apr 12 14:14:51.302858 2026] [:error] [pid 60280:tid 60300] [client 147.135.214.239:57036] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ads4W3BlLnDOYuIykkjgXgAAAdI"]
[Sun Apr 12 14:14:53.661437 2026] [:error] [pid 25327:tid 25357] [client 147.135.214.239:57038] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ads4XS6h2tZEVJo9JFKlgwAAABU"]
[Sun Apr 12 14:14:56.006034 2026] [:error] [pid 26567:tid 26575] [client 147.135.214.239:53634] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ads4YHhRpg6ptWFyFx1ysAAAAQY"]
[Sun Apr 12 14:14:58.491184 2026] [:error] [pid 26567:tid 26587] [client 147.135.214.239:53648] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ads4YnhRpg6ptWFyFx1yuQAAARI"]
[Sun Apr 12 14:15:00.813547 2026] [:error] [pid 25328:tid 25364] [client 147.135.214.239:53664] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ads4ZMxUaQZxT-e0YsCvmgAAAEA"]
[Sun Apr 12 14:15:03.279869 2026] [:error] [pid 60280:tid 60306] [client 147.135.214.239:53678] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ads4Z3BlLnDOYuIykkjgdgAAAdg"]
[Sun Apr 12 14:15:05.611519 2026] [:error] [pid 60280:tid 60289] [client 147.135.214.239:53684] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ads4aXBlLnDOYuIykkjgfwAAAcc"]
[Sun Apr 12 14:15:08.085191 2026] [:error] [pid 60280:tid 60303] [client 147.135.214.239:34704] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ads4bHBlLnDOYuIykkjgggAAAdU"]
[Sun Apr 12 14:15:10.416255 2026] [:error] [pid 60280:tid 60292] [client 147.135.214.239:34714] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ads4bnBlLnDOYuIykkjgjgAAAco"]
[Sun Apr 12 14:15:12.882744 2026] [:error] [pid 25328:tid 25394] [client 147.135.214.239:34720] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ads4cMxUaQZxT-e0YsCvswAAAFI"]
[Sun Apr 12 14:15:15.351133 2026] [:error] [pid 25328:tid 25383] [client 147.135.214.239:34724] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "ads4c8xUaQZxT-e0YsCvvwAAAE0"]
[Sun Apr 12 14:15:17.814578 2026] [:error] [pid 60280:tid 60306] [client 147.135.214.239:33226] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "ads4dXBlLnDOYuIykkjgogAAAdg"]
[Sun Apr 12 14:15:20.295740 2026] [:error] [pid 26567:tid 26591] [client 147.135.214.239:33228] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "ads4eHhRpg6ptWFyFx1yygAAARY"]
[Sun Apr 12 14:15:22.772409 2026] [:error] [pid 25328:tid 25369] [client 147.135.214.239:33234] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "ads4esxUaQZxT-e0YsCv1gAAAEU"]
[Sun Apr 12 14:15:25.238454 2026] [:error] [pid 25437:tid 25454] [client 147.135.214.239:33246] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "ads4fXf97wYZje1ep_PpRwAAAM8"]
[Sun Apr 12 14:15:27.721772 2026] [:error] [pid 25437:tid 25450] [client 147.135.214.239:54640] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "ads4f3f97wYZje1ep_PpTQAAAMs"]
[Sun Apr 12 14:15:30.033142 2026] [:error] [pid 25437:tid 25455] [client 147.135.214.239:54654] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "ads4gnf97wYZje1ep_PpUQAAANA"]
[Sun Apr 12 14:15:32.349647 2026] [:error] [pid 25437:tid 25440] [client 147.135.214.239:54662] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "ads4hHf97wYZje1ep_PpWwAAAME"]
[Sun Apr 12 14:15:34.833027 2026] [:error] [pid 25437:tid 25462] [client 147.135.214.239:54670] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "ads4hnf97wYZje1ep_PpZgAAANc"]
[Sun Apr 12 14:15:37.133251 2026] [:error] [pid 25437:tid 25459] [client 147.135.214.239:32810] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "ads4iXf97wYZje1ep_PpbQAAANQ"]
[Sun Apr 12 14:15:39.628474 2026] [:error] [pid 25437:tid 25447] [client 147.135.214.239:32826] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ads4i3f97wYZje1ep_PpcgAAAMg"]
[Sun Apr 12 14:15:42.095531 2026] [:error] [pid 25328:tid 25368] [client 147.135.214.239:32830] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "ads4jsxUaQZxT-e0YsCwFwAAAEQ"]
[Sun Apr 12 14:15:44.594465 2026] [:error] [pid 60280:tid 60301] [client 147.135.214.239:32834] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ads4kHBlLnDOYuIykkjgwQAAAdM"]
[Sun Apr 12 14:16:15.119992 2026] [:error] [pid 60280:tid 60294] [client 147.135.214.239:37722] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ads4r3BlLnDOYuIykkjhIgAAAcw"]
[Sun Apr 12 14:16:17.551958 2026] [:error] [pid 60280:tid 60287] [client 147.135.214.239:44084] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ads4sXBlLnDOYuIykkjhKgAAAcU"]
[Sun Apr 12 14:16:20.000539 2026] [:error] [pid 26600:tid 26650] [client 147.135.214.239:44096] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ads4s-1YwAZiXhQKLYrz1wAAAZU"]
[Sun Apr 12 14:16:22.473660 2026] [:error] [pid 25328:tid 25372] [client 147.135.214.239:44100] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ads4tsxUaQZxT-e0YsCwqwAAAEc"]
[Sun Apr 12 14:16:24.934749 2026] [:error] [pid 25328:tid 25379] [client 147.135.214.239:44114] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ads4uMxUaQZxT-e0YsCwtQAAAEs"]
[Sun Apr 12 14:16:27.415664 2026] [:error] [pid 25328:tid 25401] [client 147.135.214.239:47298] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ads4u8xUaQZxT-e0YsCwxgAAAFU"]
[Sun Apr 12 14:16:29.873502 2026] [:error] [pid 26567:tid 26580] [client 147.135.214.239:47314] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ads4vXhRpg6ptWFyFx1zHAAAAQs"]
[Sun Apr 12 14:16:32.343921 2026] [:error] [pid 25328:tid 25367] [client 147.135.214.239:47330] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ads4wMxUaQZxT-e0YsCw3gAAAEM"]
[Sun Apr 12 14:16:34.669970 2026] [:error] [pid 25329:tid 25413] [client 147.135.214.239:47338] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "ads4wmdcIYsS8Iyaj12KQgAAAJY"]
[Sun Apr 12 14:16:37.151164 2026] [:error] [pid 26567:tid 26581] [client 147.135.214.239:45232] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "ads4xXhRpg6ptWFyFx1zKAAAAQw"]
[Sun Apr 12 14:16:39.473883 2026] [:error] [pid 26600:tid 26652] [client 147.135.214.239:45242] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "ads4x-1YwAZiXhQKLYrz4AAAAZc"]
[Sun Apr 12 14:16:41.777710 2026] [:error] [pid 25328:tid 25385] [client 147.135.214.239:45252] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "ads4ycxUaQZxT-e0YsCw9wAAAE4"]
[Sun Apr 12 14:16:44.266487 2026] [:error] [pid 60280:tid 60297] [client 147.135.214.239:45268] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ads4zHBlLnDOYuIykkjhcQAAAc8"]
[Sun Apr 12 14:16:46.580771 2026] [:error] [pid 26599:tid 26604] [client 147.135.214.239:60240] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ads4znG89LXoQbk_rwCk5wAAAUI"]
[Sun Apr 12 14:16:49.045878 2026] [:error] [pid 60280:tid 60298] [client 147.135.214.239:60256] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ads40XBlLnDOYuIykkjheQAAAdA"]
[Sun Apr 12 14:16:51.513970 2026] [:error] [pid 25437:tid 25453] [client 147.135.214.239:60264] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ads403f97wYZje1ep_PpwAAAAM4"]
[Sun Apr 12 14:16:54.003393 2026] [:error] [pid 60280:tid 60295] [client 147.135.214.239:60278] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ads41nBlLnDOYuIykkjhhQAAAc0"]
[Sun Apr 12 14:16:56.471759 2026] [:error] [pid 25328:tid 25383] [client 147.135.214.239:51970] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ads42MxUaQZxT-e0YsCxEwAAAE0"]
[Sun Apr 12 14:16:58.803998 2026] [:error] [pid 60280:tid 60296] [client 147.135.214.239:51986] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ads42nBlLnDOYuIykkjhiwAAAc4"]
[Sun Apr 12 14:17:01.284017 2026] [:error] [pid 25327:tid 25353] [client 147.135.214.239:52002] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ads43S6h2tZEVJo9JFKlwAAAABE"]
[Sun Apr 12 14:17:03.599867 2026] [:error] [pid 60280:tid 60283] [client 147.135.214.239:52008] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ads433BlLnDOYuIykkjhoAAAAcE"]
[Sun Apr 12 14:17:06.089800 2026] [:error] [pid 25437:tid 25455] [client 147.135.214.239:44406] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ads44nf97wYZje1ep_PpywAAANA"]
[Sun Apr 12 14:17:08.408560 2026] [:error] [pid 25327:tid 25344] [client 147.135.214.239:44418] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ads45C6h2tZEVJo9JFKlwwAAAAg"]
[Sun Apr 12 14:17:10.902315 2026] [:error] [pid 25327:tid 25358] [client 147.135.214.239:44434] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ads45i6h2tZEVJo9JFKlxAAAABY"]
[Sun Apr 12 14:17:41.271033 2026] [:error] [pid 25327:tid 25349] [client 147.135.214.239:44442] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ads5BS6h2tZEVJo9JFKl4gAAAA0"]
[Sun Apr 12 14:17:43.694057 2026] [:error] [pid 26567:tid 26582] [client 147.135.214.239:49704] [client 147.135.214.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ads5B3hRpg6ptWFyFx1zXwAAAQ0"]
[Sun Apr 12 14:49:35.054505 2026] [:error] [pid 60280:tid 60290] [client 103.11.100.11:52006] [client 103.11.100.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.11.100.11, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adtAf3BlLnDOYuIykkj3mwAAAcg"]
[Sun Apr 12 14:49:35.825786 2026] [proxy_fcgi:error] [pid 60280:tid 60290] [client 103.11.100.11:52006] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 12 14:49:39.134642 2026] [:error] [pid 26567:tid 26575] [client 103.11.100.11:52016] [client 103.11.100.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.11.100.11, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adtAg3hRpg6ptWFyFx16fQAAAQY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 12 14:49:40.238547 2026] [proxy_fcgi:error] [pid 26567:tid 26575] [client 103.11.100.11:52016] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 12 14:49:53.971557 2026] [:error] [pid 26567:tid 26592] [client 77.68.103.59:53796] [client 77.68.103.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.68.103.59, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adtAkXhRpg6ptWFyFx16kAAAARc"]
[Sun Apr 12 14:49:54.748004 2026] [proxy_fcgi:error] [pid 26567:tid 26592] [client 77.68.103.59:53796] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 12 15:28:34.616096 2026] [:error] [pid 26600:tid 26635] [client 117.62.235.53:56154] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adtJou1YwAZiXhQKLYoCjgAAAYY"]
[Sun Apr 12 15:29:48.456959 2026] [:error] [pid 25327:tid 25357] [client 104.28.156.55:55789] [client 104.28.156.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.156.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adtJ7C6h2tZEVJo9JFKwUgAAABU"]
[Sun Apr 12 15:29:58.269458 2026] [:error] [pid 26599:tid 26602] [client 104.28.156.55:56068] [client 104.28.156.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.156.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adtJ9nG89LXoQbk_rwCssgAAAUA"]
[Sun Apr 12 15:30:19.018392 2026] [:error] [pid 25328:tid 25398] [client 104.28.156.55:57132] [client 104.28.156.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.156.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adtKC8xUaQZxT-e0YsDMnQAAAFQ"]
[Sun Apr 12 16:45:14.238248 2026] [:error] [pid 26600:tid 26650] [client 49.36.41.13:50063] [client 49.36.41.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.41.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adtbmu1YwAZiXhQKLYoPuwAAAZU"]
[Sun Apr 12 16:45:26.384292 2026] [:error] [pid 25328:tid 25379] [client 49.36.41.13:50629] [client 49.36.41.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.41.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adtbpsxUaQZxT-e0YsDhpAAAAEs"]
[Sun Apr 12 17:36:57.659530 2026] [:error] [pid 25437:tid 25454] [client 154.192.232.58:24639] [client 154.192.232.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.192.232.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adtnuXf97wYZje1ep_MgzQAAAM8"]
[Sun Apr 12 17:50:59.336692 2026] [:error] [pid 26600:tid 26629] [client 43.153.96.79:43972] [client 43.153.96.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adtrA-1YwAZiXhQKLYoh1gAAAYA"]
[Sun Apr 12 17:52:38.851134 2026] [autoindex:error] [pid 25328:tid 25375] [client 143.110.240.70:55070] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 12 18:09:54.766176 2026] [:error] [pid 25328:tid 25365] [client 72.255.13.50:12839] [client 72.255.13.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.255.13.50, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adtvcsxUaQZxT-e0YsAHNgAAAEE"]
[Sun Apr 12 18:10:16.607022 2026] [:error] [pid 25327:tid 25349] [client 72.255.13.50:13669] [client 72.255.13.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.255.13.50, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adtviC6h2tZEVJo9JFLJggAAAA0"]
[Sun Apr 12 18:20:59.567915 2026] [autoindex:error] [pid 60280:tid 60303] [client 143.110.240.70:59069] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 12 18:59:50.950141 2026] [:error] [pid 25327:tid 25352] [client 223.185.59.115:22754] [client 223.185.59.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.59.115, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adt7Ji6h2tZEVJo9JFLUPAAAABA"]
[Sun Apr 12 19:00:01.404396 2026] [:error] [pid 25437:tid 25440] [client 223.185.59.115:24589] [client 223.185.59.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.59.115, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adt7MXf97wYZje1ep_NALwAAAME"]
[Sun Apr 12 19:00:12.115889 2026] [:error] [pid 60280:tid 60303] [client 223.185.59.115:21042] [client 223.185.59.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.59.115, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adt7PHBlLnDOYuIykkh8cQAAAdU"]
[Sun Apr 12 19:17:01.373279 2026] [:error] [pid 25328:tid 25396] [client 108.179.243.221:59644] [client 108.179.243.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.243.221, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adt_LcxUaQZxT-e0YsAo7AAAAFM"]
[Sun Apr 12 19:17:02.262659 2026] [proxy_fcgi:error] [pid 25328:tid 25396] [client 108.179.243.221:59644] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 12 19:17:02.628738 2026] [:error] [pid 25328:tid 25391] [client 108.179.243.221:59644] [client 108.179.243.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.243.221, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adt_LsxUaQZxT-e0YsAo7gAAAFE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 12 19:17:03.707451 2026] [proxy_fcgi:error] [pid 25328:tid 25391] [client 108.179.243.221:59644] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 12 19:41:31.482456 2026] [:error] [pid 60280:tid 60284] [client 122.161.18.195:64067] [client 122.161.18.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.18.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aduE63BlLnDOYuIykkibsAAAAcI"]
[Sun Apr 12 19:41:34.335724 2026] [:error] [pid 25329:tid 25384] [client 122.161.18.195:64071] [client 122.161.18.195] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aduE7mdcIYsS8Iyaj120GAAAAIU"]
[Sun Apr 12 19:41:39.981398 2026] [:error] [pid 25329:tid 25402] [client 122.161.18.195:64071] [client 122.161.18.195] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aduE82dcIYsS8Iyaj120HQAAAI8"]
[Sun Apr 12 20:03:42.971872 2026] [:error] [pid 25328:tid 25377] [client 152.58.154.65:62624] [client 152.58.154.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.154.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aduKHsxUaQZxT-e0YsA-MgAAAEo"]
[Sun Apr 12 20:03:52.405988 2026] [:error] [pid 60280:tid 60302] [client 152.58.154.65:63116] [client 152.58.154.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.154.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aduKKHBlLnDOYuIykkioCAAAAdQ"]
[Sun Apr 12 20:04:03.092816 2026] [:error] [pid 60280:tid 60285] [client 152.58.154.65:63646] [client 152.58.154.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.154.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aduKM3BlLnDOYuIykkioFgAAAcM"]
[Sun Apr 12 20:40:54.469487 2026] [:error] [pid 26600:tid 26645] [client 223.224.11.250:41987] [client 223.224.11.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.224.11.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aduS1u1YwAZiXhQKLYpRBwAAAZA"]
[Sun Apr 12 20:41:04.931568 2026] [:error] [pid 60280:tid 60301] [client 223.224.11.250:41989] [client 223.224.11.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.224.11.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aduS4HBlLnDOYuIykki-WAAAAdM"]
[Sun Apr 12 20:51:57.347376 2026] [:error] [pid 60280:tid 60288] [client 109.123.253.253:50479] [client 109.123.253.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.123.253.253, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aduVbXBlLnDOYuIykkjD2wAAAcY"]
[Sun Apr 12 21:19:06.586397 2026] [:error] [pid 26600:tid 26630] [client 144.16.223.147:56591] [client 144.16.223.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.16.223.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adubyu1YwAZiXhQKLYpZ6AAAAYE"]
[Sun Apr 12 21:31:19.285434 2026] [:error] [pid 26567:tid 26569] [client 84.15.182.240:22617] [client 84.15.182.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.182.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aduep3hRpg6ptWFyFx3KqAAAAQA"]
[Sun Apr 12 21:31:29.536709 2026] [:error] [pid 60280:tid 60296] [client 84.15.182.240:38774] [client 84.15.182.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.182.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aduesXBlLnDOYuIykkjV1wAAAc4"]
[Sun Apr 12 21:31:40.146205 2026] [:error] [pid 60280:tid 60293] [client 84.15.182.240:20954] [client 84.15.182.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.182.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aduevHBlLnDOYuIykkjV2wAAAcs"]
[Sun Apr 12 22:23:04.831293 2026] [:error] [pid 25328:tid 25385] [client 182.44.8.254:56628] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aduqyMxUaQZxT-e0YsBzewAAAE4"]
[Sun Apr 12 23:49:28.270315 2026] [:error] [pid 26567:tid 26573] [client 173.239.218.69:46967] [client 173.239.218.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adu_CHhRpg6ptWFyFx3hywAAAQQ"]
[Sun Apr 12 23:49:31.879956 2026] [:error] [pid 25327:tid 25345] [client 173.239.218.35:44049] [client 173.239.218.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adu_Cy6h2tZEVJo9JFInYQAAAAk"]
[Sun Apr 12 23:49:38.385721 2026] [:error] [pid 25327:tid 25352] [client 173.239.218.74:55881] [client 173.239.218.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "adu_Ei6h2tZEVJo9JFIncgAAABA"]
[Sun Apr 12 23:49:41.811518 2026] [:error] [pid 25327:tid 25341] [client 173.239.218.32:33529] [client 173.239.218.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "adu_FS6h2tZEVJo9JFInfgAAAAU"]
[Sun Apr 12 23:49:49.855180 2026] [:error] [pid 60280:tid 60284] [client 173.239.218.74:38241] [client 173.239.218.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adu_HXBlLnDOYuIykkgn5wAAAcI"]
[Sun Apr 12 23:50:01.551614 2026] [autoindex:error] [pid 25437:tid 25455] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:03.777371 2026] [autoindex:error] [pid 25437:tid 25449] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:11.086393 2026] [autoindex:error] [pid 25437:tid 25456] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:12.233687 2026] [autoindex:error] [pid 25437:tid 25451] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:15.651626 2026] [autoindex:error] [pid 25437:tid 25462] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:15.818657 2026] [autoindex:error] [pid 25437:tid 25447] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:15.983588 2026] [autoindex:error] [pid 25437:tid 25442] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:16.147340 2026] [autoindex:error] [pid 25437:tid 25455] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:17.520044 2026] [autoindex:error] [pid 25437:tid 25439] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:17.705321 2026] [autoindex:error] [pid 25437:tid 25456] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:18.821288 2026] [autoindex:error] [pid 25437:tid 25445] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:18.987341 2026] [autoindex:error] [pid 25437:tid 25448] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:19.152625 2026] [autoindex:error] [pid 25437:tid 25459] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:20.494793 2026] [autoindex:error] [pid 25437:tid 25457] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:20.657995 2026] [autoindex:error] [pid 25437:tid 25446] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:20.820574 2026] [autoindex:error] [pid 25437:tid 25454] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:24.194163 2026] [autoindex:error] [pid 25437:tid 25445] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:24.357936 2026] [autoindex:error] [pid 25437:tid 25448] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:24.520713 2026] [autoindex:error] [pid 25437:tid 25459] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:24.683792 2026] [autoindex:error] [pid 25437:tid 25458] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:24.857546 2026] [autoindex:error] [pid 25437:tid 25453] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:25.024454 2026] [autoindex:error] [pid 25437:tid 25460] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:26.163371 2026] [autoindex:error] [pid 25437:tid 25446] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:26.327146 2026] [autoindex:error] [pid 25437:tid 25454] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:29.477533 2026] [autoindex:error] [pid 25437:tid 25459] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:31.783399 2026] [autoindex:error] [pid 25437:tid 25447] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:32.110643 2026] [autoindex:error] [pid 25437:tid 25455] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:35.407261 2026] [autoindex:error] [pid 25437:tid 25458] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:35.575195 2026] [autoindex:error] [pid 25437:tid 25444] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:40.123899 2026] [autoindex:error] [pid 25437:tid 25453] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:41.358347 2026] [autoindex:error] [pid 25437:tid 25440] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:42.546286 2026] [autoindex:error] [pid 25437:tid 25446] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:42.710619 2026] [autoindex:error] [pid 25437:tid 25439] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:42.881351 2026] [autoindex:error] [pid 25437:tid 25455] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:43.082966 2026] [autoindex:error] [pid 25437:tid 25448] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:43.251485 2026] [autoindex:error] [pid 25437:tid 25451] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:45.422341 2026] [autoindex:error] [pid 25437:tid 25441] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:47.570155 2026] [autoindex:error] [pid 25437:tid 25447] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:47.735074 2026] [autoindex:error] [pid 25437:tid 25460] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:50.913710 2026] [autoindex:error] [pid 25437:tid 25439] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:52.072812 2026] [autoindex:error] [pid 25437:tid 25450] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:54.193550 2026] [autoindex:error] [pid 25437:tid 25449] [client 173.239.218.28:30819] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:56.348630 2026] [autoindex:error] [pid 25437:tid 25457] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:56.512615 2026] [autoindex:error] [pid 25437:tid 25462] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:56.674298 2026] [autoindex:error] [pid 25437:tid 25448] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:56.835834 2026] [autoindex:error] [pid 25437:tid 25447] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:57.002523 2026] [autoindex:error] [pid 25437:tid 25459] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:50:58.632496 2026] [autoindex:error] [pid 25437:tid 25444] [client 173.239.218.28:30819] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:03.635248 2026] [autoindex:error] [pid 25329:tid 25390] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:03.797748 2026] [autoindex:error] [pid 25329:tid 25406] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:03.961909 2026] [autoindex:error] [pid 25329:tid 25392] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:04.126970 2026] [autoindex:error] [pid 25329:tid 25381] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:04.288615 2026] [autoindex:error] [pid 25329:tid 25382] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:05.448091 2026] [autoindex:error] [pid 25329:tid 25412] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:08.514657 2026] [autoindex:error] [pid 25329:tid 25402] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:09.737367 2026] [autoindex:error] [pid 25329:tid 25390] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:09.906527 2026] [autoindex:error] [pid 25329:tid 25406] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:10.070601 2026] [autoindex:error] [pid 25329:tid 25392] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:10.232882 2026] [autoindex:error] [pid 25329:tid 25381] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:10.394619 2026] [autoindex:error] [pid 25329:tid 25374] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:14.657528 2026] [autoindex:error] [pid 25329:tid 25374] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:14.822503 2026] [autoindex:error] [pid 25329:tid 25399] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:18.404734 2026] [autoindex:error] [pid 25329:tid 25407] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:18.573540 2026] [autoindex:error] [pid 25329:tid 25386] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:19.735901 2026] [autoindex:error] [pid 25329:tid 25388] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:24.968005 2026] [autoindex:error] [pid 25329:tid 25399] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:25.134915 2026] [autoindex:error] [pid 25329:tid 25414] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:25.304045 2026] [autoindex:error] [pid 25329:tid 25386] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:25.476145 2026] [autoindex:error] [pid 25329:tid 25384] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:29.723618 2026] [autoindex:error] [pid 25329:tid 25399] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:33.240323 2026] [autoindex:error] [pid 25329:tid 25400] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:33.405100 2026] [autoindex:error] [pid 25329:tid 25397] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:36.569153 2026] [autoindex:error] [pid 25329:tid 25409] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:41.664974 2026] [autoindex:error] [pid 25329:tid 25374] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:43.808306 2026] [autoindex:error] [pid 25329:tid 25404] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:43.971438 2026] [autoindex:error] [pid 25329:tid 25382] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:44.131525 2026] [autoindex:error] [pid 25329:tid 25406] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:45.293201 2026] [autoindex:error] [pid 25329:tid 25397] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:46.442182 2026] [autoindex:error] [pid 25329:tid 25388] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:59.500484 2026] [autoindex:error] [pid 25329:tid 25407] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:51:59.661450 2026] [autoindex:error] [pid 25329:tid 25414] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:01.851092 2026] [autoindex:error] [pid 25329:tid 25406] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:03.981729 2026] [autoindex:error] [pid 25329:tid 25392] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:06.181324 2026] [autoindex:error] [pid 25329:tid 25378] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:07.350922 2026] [autoindex:error] [pid 25329:tid 25412] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:07.512944 2026] [autoindex:error] [pid 25329:tid 25382] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:08.724079 2026] [autoindex:error] [pid 25329:tid 25414] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:08.885277 2026] [autoindex:error] [pid 25329:tid 25393] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:09.046499 2026] [autoindex:error] [pid 25329:tid 25413] [client 173.239.218.28:53541] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:12.477737 2026] [autoindex:error] [pid 25327:tid 25336] [client 173.239.218.54:21351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:14.645676 2026] [autoindex:error] [pid 25327:tid 25352] [client 173.239.218.54:21351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:21.860660 2026] [autoindex:error] [pid 25327:tid 25342] [client 173.239.218.54:21351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:22.024951 2026] [autoindex:error] [pid 25327:tid 25351] [client 173.239.218.54:21351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:23.188644 2026] [autoindex:error] [pid 25327:tid 25357] [client 173.239.218.54:21351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:24.329278 2026] [autoindex:error] [pid 25327:tid 25336] [client 173.239.218.54:21351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:27.977449 2026] [autoindex:error] [pid 25327:tid 25345] [client 173.239.218.54:21351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:32.296975 2026] [autoindex:error] [pid 25327:tid 25358] [client 173.239.218.54:21351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:37.827720 2026] [autoindex:error] [pid 25327:tid 25341] [client 173.239.218.54:21351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:41.267007 2026] [autoindex:error] [pid 25327:tid 25349] [client 173.239.218.54:21351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 12 23:52:41.428692 2026] [autoindex:error] [pid 25327:tid 25348] [client 173.239.218.54:21351] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:02:46.837182 2026] [:error] [pid 25437:tid 25452] [client 173.239.218.60:32243] [client 173.239.218.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "advCJnf97wYZje1ep_OX4wAAAM0"]
[Mon Apr 13 00:02:58.478742 2026] [autoindex:error] [pid 25329:tid 25413] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:00.861250 2026] [autoindex:error] [pid 25329:tid 25402] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:08.262170 2026] [autoindex:error] [pid 25329:tid 25374] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:09.432431 2026] [autoindex:error] [pid 25329:tid 25411] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:12.836112 2026] [autoindex:error] [pid 25329:tid 25415] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:13.000542 2026] [autoindex:error] [pid 25329:tid 25404] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:13.162907 2026] [autoindex:error] [pid 25329:tid 25384] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:13.326377 2026] [autoindex:error] [pid 25329:tid 25397] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:14.689620 2026] [autoindex:error] [pid 25329:tid 25406] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:14.853140 2026] [autoindex:error] [pid 25329:tid 25388] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:16.027889 2026] [autoindex:error] [pid 25329:tid 25407] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:16.192093 2026] [autoindex:error] [pid 25329:tid 25386] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:16.365071 2026] [autoindex:error] [pid 25329:tid 25393] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:17.716197 2026] [autoindex:error] [pid 25329:tid 25409] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:17.878174 2026] [autoindex:error] [pid 25329:tid 25392] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:18.044246 2026] [autoindex:error] [pid 25329:tid 25397] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:21.432155 2026] [autoindex:error] [pid 25329:tid 25390] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:21.593631 2026] [autoindex:error] [pid 25329:tid 25406] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:21.756095 2026] [autoindex:error] [pid 25329:tid 25388] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:21.921246 2026] [autoindex:error] [pid 25329:tid 25399] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:22.083319 2026] [autoindex:error] [pid 25329:tid 25378] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:22.253040 2026] [autoindex:error] [pid 25329:tid 25407] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:23.477760 2026] [autoindex:error] [pid 25329:tid 25393] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:23.649267 2026] [autoindex:error] [pid 25329:tid 25382] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:27.034121 2026] [autoindex:error] [pid 25329:tid 25397] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:29.235190 2026] [autoindex:error] [pid 25329:tid 25409] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:29.567933 2026] [autoindex:error] [pid 25329:tid 25376] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:32.936390 2026] [autoindex:error] [pid 25329:tid 25415] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:33.100036 2026] [autoindex:error] [pid 25329:tid 25376] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:36.465727 2026] [autoindex:error] [pid 25329:tid 25407] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:37.642632 2026] [autoindex:error] [pid 25329:tid 25415] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:37.995736 2026] [:error] [pid 26600:tid 26646] [client 45.131.195.147:33103] [client 45.131.195.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "advCWe1YwAZiXhQKLYp6gAAAAZE"]
[Mon Apr 13 00:03:38.868410 2026] [autoindex:error] [pid 25329:tid 25384] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:39.031428 2026] [autoindex:error] [pid 25329:tid 25381] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:39.194412 2026] [autoindex:error] [pid 25329:tid 25400] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:39.359874 2026] [autoindex:error] [pid 25329:tid 25390] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:39.523719 2026] [autoindex:error] [pid 25329:tid 25378] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:41.742567 2026] [autoindex:error] [pid 25329:tid 25388] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:43.961398 2026] [autoindex:error] [pid 25329:tid 25415] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:44.126771 2026] [autoindex:error] [pid 25329:tid 25412] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:47.294917 2026] [autoindex:error] [pid 25329:tid 25374] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:48.451065 2026] [autoindex:error] [pid 25329:tid 25411] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:50.611105 2026] [autoindex:error] [pid 25329:tid 25395] [client 173.239.218.74:56705] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:52.792131 2026] [autoindex:error] [pid 25329:tid 25397] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:52.958274 2026] [autoindex:error] [pid 25329:tid 25392] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:53.122159 2026] [autoindex:error] [pid 25329:tid 25414] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:53.288674 2026] [autoindex:error] [pid 25329:tid 25376] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:53.457927 2026] [autoindex:error] [pid 25329:tid 25402] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:53.625028 2026] [autoindex:error] [pid 25329:tid 25390] [client 173.239.218.74:56705] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:58.781443 2026] [autoindex:error] [pid 25329:tid 25399] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:58.953337 2026] [autoindex:error] [pid 25329:tid 25397] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:59.132514 2026] [autoindex:error] [pid 25329:tid 25392] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:59.297189 2026] [autoindex:error] [pid 25329:tid 25414] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:03:59.461533 2026] [autoindex:error] [pid 25329:tid 25376] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:00.754884 2026] [autoindex:error] [pid 25329:tid 25400] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:03.060982 2026] [autoindex:error] [pid 25329:tid 25407] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:04.240712 2026] [autoindex:error] [pid 25329:tid 25392] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:04.406305 2026] [autoindex:error] [pid 25329:tid 25376] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:04.569054 2026] [autoindex:error] [pid 25329:tid 25378] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:04.758925 2026] [autoindex:error] [pid 25329:tid 25404] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:04.923158 2026] [autoindex:error] [pid 25329:tid 25400] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:09.761291 2026] [autoindex:error] [pid 25329:tid 25409] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:09.925489 2026] [autoindex:error] [pid 25329:tid 25399] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:12.052232 2026] [autoindex:error] [pid 25329:tid 25386] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:12.220058 2026] [autoindex:error] [pid 25329:tid 25374] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:13.380145 2026] [autoindex:error] [pid 25329:tid 25399] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:18.490590 2026] [autoindex:error] [pid 25329:tid 25413] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:18.654873 2026] [autoindex:error] [pid 25329:tid 25381] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:18.819107 2026] [autoindex:error] [pid 25329:tid 25382] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:18.983201 2026] [autoindex:error] [pid 25329:tid 25397] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:23.200490 2026] [autoindex:error] [pid 25329:tid 25397] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:26.349938 2026] [autoindex:error] [pid 25329:tid 25407] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:26.514092 2026] [autoindex:error] [pid 25329:tid 25393] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:29.722746 2026] [autoindex:error] [pid 25329:tid 25390] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:35.028216 2026] [autoindex:error] [pid 25329:tid 25407] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:37.179427 2026] [autoindex:error] [pid 25329:tid 25414] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:37.341227 2026] [autoindex:error] [pid 25329:tid 25395] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:37.505125 2026] [autoindex:error] [pid 25329:tid 25415] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:38.680690 2026] [autoindex:error] [pid 25329:tid 25413] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:39.922358 2026] [autoindex:error] [pid 25329:tid 25388] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:55.777946 2026] [autoindex:error] [pid 25329:tid 25390] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:55.945627 2026] [autoindex:error] [pid 25329:tid 25392] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:04:58.970846 2026] [autoindex:error] [pid 25329:tid 25407] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:01.335680 2026] [autoindex:error] [pid 25329:tid 25397] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:03.601343 2026] [autoindex:error] [pid 25329:tid 25409] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:04.837977 2026] [autoindex:error] [pid 25329:tid 25390] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:05.000109 2026] [autoindex:error] [pid 25329:tid 25393] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:06.194564 2026] [autoindex:error] [pid 25329:tid 25392] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:06.357929 2026] [autoindex:error] [pid 25329:tid 25378] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:06.521081 2026] [autoindex:error] [pid 25329:tid 25413] [client 216.24.210.78:29411] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:10.282924 2026] [autoindex:error] [pid 26599:tid 26604] [client 173.239.218.35:47513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:12.506543 2026] [autoindex:error] [pid 26599:tid 26624] [client 173.239.218.35:47513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:20.040472 2026] [autoindex:error] [pid 26599:tid 26615] [client 173.239.218.35:47513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:20.203747 2026] [autoindex:error] [pid 26599:tid 26626] [client 173.239.218.35:47513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:21.412732 2026] [autoindex:error] [pid 26599:tid 26607] [client 173.239.218.35:47513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:24.027096 2026] [autoindex:error] [pid 26599:tid 26623] [client 173.239.218.35:47513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:27.240120 2026] [autoindex:error] [pid 26599:tid 26610] [client 173.239.218.35:47513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:31.452694 2026] [autoindex:error] [pid 26599:tid 26613] [client 173.239.218.35:47513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:36.570591 2026] [autoindex:error] [pid 26599:tid 26615] [client 173.239.218.35:47513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:40.064831 2026] [autoindex:error] [pid 26599:tid 26602] [client 173.239.218.35:47513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:05:40.238737 2026] [autoindex:error] [pid 26599:tid 26603] [client 173.239.218.35:47513] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 00:29:07.179619 2026] [:error] [pid 60280:tid 60303] [client 105.104.31.90:65041] [client 105.104.31.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.104.31.90, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "advIU3BlLnDOYuIykkg-jQAAAdU"]
[Mon Apr 13 00:29:17.619024 2026] [:error] [pid 25328:tid 25394] [client 105.104.31.90:49215] [client 105.104.31.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.104.31.90, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "advIXcxUaQZxT-e0YsCV_QAAAFI"]
[Mon Apr 13 00:56:04.802739 2026] [:error] [pid 31607:tid 31743] [client 43.130.16.212:44612] [client 43.130.16.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "advOpGjn_I-KYTWngjIkkQAAAIY"]
[Mon Apr 13 01:24:19.213004 2026] [:error] [pid 54671:tid 54687] [client 182.11.183.154:30502] [client 182.11.183.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.11.183.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "advVQ2yJMmaONUqF0tBlpQAAAQw"]
[Mon Apr 13 01:31:26.476548 2026] [:error] [pid 54671:tid 54690] [client 103.173.66.99:59262] [client 103.173.66.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.173.66.99, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "advW7myJMmaONUqF0tBq7QAAAQ8"]
[Mon Apr 13 01:31:27.395495 2026] [proxy_fcgi:error] [pid 54671:tid 54690] [client 103.173.66.99:59262] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 13 01:31:27.782740 2026] [:error] [pid 54671:tid 54675] [client 103.173.66.99:59262] [client 103.173.66.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.173.66.99, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "advW72yJMmaONUqF0tBq8QAAAQA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 01:31:28.776296 2026] [proxy_fcgi:error] [pid 54671:tid 54675] [client 103.173.66.99:59262] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 01:44:32.629903 2026] [:error] [pid 32010:tid 32012] [client 171.111.192.222:46190] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "advaAA0nq-t9pXyV1fyYOAAAAMA"]
[Mon Apr 13 01:44:33.469625 2026] [proxy_fcgi:error] [pid 32010:tid 32012] [client 171.111.192.222:46190] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 13 01:44:36.527611 2026] [:error] [pid 32010:tid 32036] [client 171.111.192.222:46190] [client 171.111.192.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 171.111.192.222, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "advaBA0nq-t9pXyV1fyYPwAAANg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 01:44:37.504577 2026] [proxy_fcgi:error] [pid 32010:tid 32036] [client 171.111.192.222:46190] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 01:47:44.388508 2026] [:error] [pid 32010:tid 32031] [client 106.219.71.63:29558] [client 106.219.71.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.71.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "advawA0nq-t9pXyV1fyZHgAAANM"]
[Mon Apr 13 01:47:54.795300 2026] [:error] [pid 54671:tid 54694] [client 106.219.71.63:33219] [client 106.219.71.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.71.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "advaymyJMmaONUqF0tB0lAAAARM"]
[Mon Apr 13 01:48:05.574372 2026] [:error] [pid 32010:tid 32030] [client 106.219.71.63:17141] [client 106.219.71.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.71.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adva1Q0nq-t9pXyV1fyZQgAAANI"]
[Mon Apr 13 01:55:39.768944 2026] [:error] [pid 31607:tid 31746] [client 20.151.218.28:30710] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex1.php"] [unique_id "advcm2jn_I-KYTWngjI4DQAAAIk"]
[Mon Apr 13 01:55:40.738925 2026] [:error] [pid 31606:tid 31713] [client 20.151.218.28:30677] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex1.php"] [unique_id "advcnD9vCsshNhLmCiB6_QAAAEc"]
[Mon Apr 13 01:55:41.246730 2026] [:error] [pid 32010:tid 32019] [client 20.151.218.28:30705] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex1.php"] [unique_id "advcnQ0nq-t9pXyV1fydCwAAAMc"]
[Mon Apr 13 01:55:41.730796 2026] [:error] [pid 32010:tid 32026] [client 20.151.218.28:30610] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa-rex1.php"] [unique_id "advcnQ0nq-t9pXyV1fydDQAAAM4"]
[Mon Apr 13 01:55:42.463696 2026] [:error] [pid 32010:tid 32022] [client 20.151.218.28:30711] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/suck.php"] [unique_id "advcng0nq-t9pXyV1fydDwAAAMo"]
[Mon Apr 13 01:55:43.315293 2026] [:error] [pid 31606:tid 31725] [client 20.151.218.28:30698] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/suck.php"] [unique_id "advcnz9vCsshNhLmCiB7AwAAAFM"]
[Mon Apr 13 01:55:43.899327 2026] [:error] [pid 31606:tid 31728] [client 20.151.218.28:30707] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/suck.php"] [unique_id "advcnz9vCsshNhLmCiB7BAAAAFY"]
[Mon Apr 13 01:55:44.502366 2026] [:error] [pid 32010:tid 32031] [client 20.151.218.28:30668] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/suck.php"] [unique_id "advcoA0nq-t9pXyV1fydFQAAANM"]
[Mon Apr 13 01:55:45.311575 2026] [:error] [pid 32010:tid 32029] [client 20.151.218.28:30683] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hikudpno.php"] [unique_id "advcoQ0nq-t9pXyV1fydFgAAANE"]
[Mon Apr 13 01:55:46.285387 2026] [:error] [pid 32010:tid 32026] [client 20.151.218.28:30683] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hikudpno.php"] [unique_id "advcog0nq-t9pXyV1fydHwAAAM4"]
[Mon Apr 13 01:55:46.835161 2026] [:error] [pid 32010:tid 32014] [client 20.151.218.28:30709] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hikudpno.php"] [unique_id "advcog0nq-t9pXyV1fydIgAAAMI"]
[Mon Apr 13 01:55:47.331026 2026] [:error] [pid 31607:tid 31738] [client 20.151.218.28:30715] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hikudpno.php"] [unique_id "advco2jn_I-KYTWngjI4FAAAAIE"]
[Mon Apr 13 01:55:48.429032 2026] [:error] [pid 54671:tid 54686] [client 20.151.218.28:30592] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/moon.php"] [unique_id "advcpGyJMmaONUqF0tB6bQAAAQs"]
[Mon Apr 13 01:55:49.405674 2026] [:error] [pid 54671:tid 54698] [client 20.151.218.28:30602] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/moon.php"] [unique_id "advcpWyJMmaONUqF0tB6cAAAARc"]
[Mon Apr 13 01:55:51.029989 2026] [:error] [pid 31605:tid 31647] [client 20.151.218.28:30619] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/moon.php"] [unique_id "advcp29Py-Y-9VQ02eHEGgAAAAQ"]
[Mon Apr 13 01:55:52.064161 2026] [:error] [pid 31607:tid 31746] [client 20.151.218.28:30706] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/moon.php"] [unique_id "advcqGjn_I-KYTWngjI4HQAAAIk"]
[Mon Apr 13 01:55:53.511838 2026] [:error] [pid 54671:tid 54695] [client 20.151.218.28:30704] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sure.php"] [unique_id "advcqWyJMmaONUqF0tB6fgAAARQ"]
[Mon Apr 13 01:55:54.846798 2026] [:error] [pid 31607:tid 31747] [client 20.151.218.28:30601] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sure.php"] [unique_id "advcqmjn_I-KYTWngjI4HwAAAIo"]
[Mon Apr 13 01:55:55.625754 2026] [:error] [pid 31607:tid 31737] [client 20.151.218.28:30604] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sure.php"] [unique_id "advcq2jn_I-KYTWngjI4IwAAAIA"]
[Mon Apr 13 01:55:56.535830 2026] [:error] [pid 32010:tid 32025] [client 20.151.218.28:30714] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sure.php"] [unique_id "advcrA0nq-t9pXyV1fydRwAAAM0"]
[Mon Apr 13 01:55:59.416901 2026] [:error] [pid 31605:tid 31659] [client 20.151.218.28:30687] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoo.php"] [unique_id "advcr29Py-Y-9VQ02eHEHAAAABA"]
[Mon Apr 13 01:56:00.233401 2026] [:error] [pid 32010:tid 32023] [client 20.151.218.28:30691] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoo.php"] [unique_id "advcsA0nq-t9pXyV1fydVgAAAMs"]
[Mon Apr 13 01:56:01.725027 2026] [:error] [pid 31606:tid 31718] [client 20.151.218.28:30633] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoo.php"] [unique_id "advcsT9vCsshNhLmCiB7FgAAAEw"]
[Mon Apr 13 01:56:06.263544 2026] [:error] [pid 31607:tid 31749] [client 20.151.218.28:30669] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoo.php"] [unique_id "advctmjn_I-KYTWngjI4OQAAAIw"]
[Mon Apr 13 01:56:09.459635 2026] [:error] [pid 31605:tid 31646] [client 20.151.218.28:30662] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4563.php"] [unique_id "advcuW9Py-Y-9VQ02eHEQwAAAAM"]
[Mon Apr 13 01:56:10.624351 2026] [:error] [pid 31607:tid 31741] [client 20.151.218.28:30701] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4563.php"] [unique_id "advcumjn_I-KYTWngjI4PQAAAIQ"]
[Mon Apr 13 01:56:13.547185 2026] [:error] [pid 31605:tid 31667] [client 20.151.218.28:30716] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4563.php"] [unique_id "advcvW9Py-Y-9VQ02eHESgAAABg"]
[Mon Apr 13 01:56:14.370885 2026] [:error] [pid 31605:tid 31665] [client 20.151.218.28:30600] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4563.php"] [unique_id "advcvm9Py-Y-9VQ02eHEUAAAABY"]
[Mon Apr 13 01:56:15.057579 2026] [:error] [pid 31607:tid 31746] [client 20.151.218.28:30658] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wunaivpl.php"] [unique_id "advcv2jn_I-KYTWngjI4RQAAAIk"]
[Mon Apr 13 01:56:15.734047 2026] [:error] [pid 31606:tid 31727] [client 20.151.218.28:30693] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wunaivpl.php"] [unique_id "advcvz9vCsshNhLmCiB7OQAAAFU"]
[Mon Apr 13 01:56:16.419952 2026] [:error] [pid 54671:tid 54688] [client 20.151.218.28:30663] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wunaivpl.php"] [unique_id "advcwGyJMmaONUqF0tB6qgAAAQ0"]
[Mon Apr 13 01:56:16.867025 2026] [:error] [pid 31606:tid 31726] [client 20.151.218.28:30689] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wunaivpl.php"] [unique_id "advcwD9vCsshNhLmCiB7PAAAAFQ"]
[Mon Apr 13 01:56:17.483802 2026] [:error] [pid 31606:tid 31720] [client 20.151.218.28:30671] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reune.php"] [unique_id "advcwT9vCsshNhLmCiB7PgAAAE4"]
[Mon Apr 13 01:56:18.269910 2026] [:error] [pid 31606:tid 31709] [client 20.151.218.28:30638] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reune.php"] [unique_id "advcwj9vCsshNhLmCiB7QAAAAEM"]
[Mon Apr 13 01:56:19.048086 2026] [:error] [pid 31606:tid 31727] [client 20.151.218.28:30640] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reune.php"] [unique_id "advcwz9vCsshNhLmCiB7QwAAAFU"]
[Mon Apr 13 01:56:19.725570 2026] [:error] [pid 31607:tid 31740] [client 20.151.218.28:30637] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reune.php"] [unique_id "advcw2jn_I-KYTWngjI4SgAAAIM"]
[Mon Apr 13 01:56:20.275400 2026] [:error] [pid 31607:tid 31739] [client 20.151.218.28:30684] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dw.php"] [unique_id "advcxGjn_I-KYTWngjI4SwAAAII"]
[Mon Apr 13 01:56:21.129731 2026] [:error] [pid 31606:tid 31720] [client 20.151.218.28:30606] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dw.php"] [unique_id "advcxT9vCsshNhLmCiB7SwAAAE4"]
[Mon Apr 13 01:56:21.936009 2026] [:error] [pid 31606:tid 31716] [client 20.151.218.28:30605] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dw.php"] [unique_id "advcxT9vCsshNhLmCiB7UAAAAEo"]
[Mon Apr 13 01:56:22.848812 2026] [:error] [pid 31607:tid 31749] [client 20.151.218.28:30665] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dw.php"] [unique_id "advcxmjn_I-KYTWngjI4UgAAAIw"]
[Mon Apr 13 01:56:23.360490 2026] [:error] [pid 31605:tid 31660] [client 20.151.218.28:30528] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi001.PhP7"] [unique_id "advcx29Py-Y-9VQ02eHEWgAAABE"]
[Mon Apr 13 01:56:23.919413 2026] [:error] [pid 32010:tid 32017] [client 20.151.218.28:30681] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi001.PhP7"] [unique_id "advcxw0nq-t9pXyV1fydYwAAAMU"]
[Mon Apr 13 01:56:25.499478 2026] [:error] [pid 32010:tid 32014] [client 20.151.218.28:30533] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi001.PhP7"] [unique_id "advcyQ0nq-t9pXyV1fydZQAAAMI"]
[Mon Apr 13 01:56:27.166882 2026] [:error] [pid 31605:tid 31667] [client 20.151.218.28:30613] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi001.PhP7"] [unique_id "advcy29Py-Y-9VQ02eHEZwAAABg"]
[Mon Apr 13 01:56:32.973642 2026] [:error] [pid 31606:tid 31706] [client 20.151.218.28:30655] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shellx.php"] [unique_id "advc0D9vCsshNhLmCiB7aAAAAEA"]
[Mon Apr 13 01:56:51.770344 2026] [:error] [pid 32010:tid 32034] [client 20.151.218.28:30611] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/indo.php"] [unique_id "advc4w0nq-t9pXyV1fydrAAAANY"]
[Mon Apr 13 01:57:35.288267 2026] [:error] [pid 54671:tid 54681] [client 20.151.218.28:30650] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rin.php"] [unique_id "advdD2yJMmaONUqF0tB7ewAAAQY"]
[Mon Apr 13 01:57:36.180623 2026] [:error] [pid 31607:tid 31760] [client 20.151.218.28:30629] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rin.php"] [unique_id "advdEGjn_I-KYTWngjI4vQAAAJc"]
[Mon Apr 13 01:57:37.331875 2026] [:error] [pid 54671:tid 54679] [client 20.151.218.28:30682] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rin.php"] [unique_id "advdEWyJMmaONUqF0tB7kgAAAQQ"]
[Mon Apr 13 01:57:40.047885 2026] [:error] [pid 31606:tid 31711] [client 20.151.218.28:30618] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rin.php"] [unique_id "advdFD9vCsshNhLmCiB8OQAAAEU"]
[Mon Apr 13 01:57:40.910378 2026] [:error] [pid 32010:tid 32030] [client 20.151.218.28:30673] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packages.php"] [unique_id "advdFA0nq-t9pXyV1fyeIAAAANI"]
[Mon Apr 13 01:57:41.582657 2026] [:error] [pid 54671:tid 54678] [client 20.151.218.28:30670] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packages.php"] [unique_id "advdFWyJMmaONUqF0tB7uAAAAQM"]
[Mon Apr 13 01:57:42.352657 2026] [:error] [pid 31605:tid 31643] [client 20.151.218.28:30657] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packages.php"] [unique_id "advdFm9Py-Y-9VQ02eHE6gAAAAA"]
[Mon Apr 13 01:57:42.966229 2026] [:error] [pid 32010:tid 32020] [client 20.151.218.28:30696] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packages.php"] [unique_id "advdFg0nq-t9pXyV1fyeJAAAAMg"]
[Mon Apr 13 01:57:43.530714 2026] [:error] [pid 54671:tid 54691] [client 20.151.218.28:30708] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "advdF2yJMmaONUqF0tB7xgAAARA"]
[Mon Apr 13 01:57:44.979096 2026] [:error] [pid 31605:tid 31660] [client 20.151.218.28:30562] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "advdGG9Py-Y-9VQ02eHE6wAAABE"]
[Mon Apr 13 01:57:45.676453 2026] [:error] [pid 54671:tid 54685] [client 20.151.218.28:30562] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "advdGWyJMmaONUqF0tB72wAAAQo"]
[Mon Apr 13 01:57:46.995081 2026] [:error] [pid 54671:tid 54693] [client 20.151.218.28:30713] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi.php"] [unique_id "advdGmyJMmaONUqF0tB75AAAARI"]
[Mon Apr 13 01:57:48.048865 2026] [:error] [pid 54671:tid 54683] [client 20.151.218.28:30625] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vbv.php"] [unique_id "advdHGyJMmaONUqF0tB76wAAAQg"]
[Mon Apr 13 01:57:49.153742 2026] [:error] [pid 32010:tid 32027] [client 20.151.218.28:30678] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vbv.php"] [unique_id "advdHQ0nq-t9pXyV1fyeLwAAAM8"]
[Mon Apr 13 01:57:49.916061 2026] [:error] [pid 54671:tid 54688] [client 20.151.218.28:30672] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vbv.php"] [unique_id "advdHWyJMmaONUqF0tB79AAAAQ0"]
[Mon Apr 13 01:58:04.235840 2026] [:error] [pid 54671:tid 54685] [client 20.151.218.28:30699] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pomo/v2.php"] [unique_id "advdLGyJMmaONUqF0tB8LAAAAQo"]
[Mon Apr 13 01:58:05.820171 2026] [:error] [pid 31606:tid 31713] [client 20.151.218.28:30532] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pomo/v2.php"] [unique_id "advdLT9vCsshNhLmCiB8RQAAAEc"]
[Mon Apr 13 01:58:09.084668 2026] [:error] [pid 32010:tid 32024] [client 20.151.218.28:30597] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pomo/v2.php"] [unique_id "advdMQ0nq-t9pXyV1fyeVgAAAMw"]
[Mon Apr 13 01:58:11.968811 2026] [:error] [pid 31607:tid 31745] [client 20.151.218.28:30596] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pomo/v2.php"] [unique_id "advdM2jn_I-KYTWngjI47gAAAIg"]
[Mon Apr 13 01:58:14.541015 2026] [:error] [pid 54671:tid 54675] [client 20.151.218.28:30675] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nxd.php"] [unique_id "advdNmyJMmaONUqF0tB8XwAAAQA"]
[Mon Apr 13 01:58:15.762214 2026] [:error] [pid 54671:tid 54696] [client 20.151.218.28:30603] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nxd.php"] [unique_id "advdN2yJMmaONUqF0tB8ZgAAARU"]
[Mon Apr 13 01:58:16.653596 2026] [:error] [pid 32010:tid 32022] [client 20.151.218.28:30664] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nxd.php"] [unique_id "advdOA0nq-t9pXyV1fyeYgAAAMo"]
[Mon Apr 13 01:58:17.599377 2026] [:error] [pid 54671:tid 54696] [client 20.151.218.28:30674] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nxd.php"] [unique_id "advdOWyJMmaONUqF0tB8cQAAARU"]
[Mon Apr 13 01:58:18.531806 2026] [:error] [pid 32010:tid 32024] [client 20.151.218.28:30622] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/payout.php"] [unique_id "advdOg0nq-t9pXyV1fyeZgAAAMw"]
[Mon Apr 13 01:58:19.816919 2026] [:error] [pid 31606:tid 31729] [client 20.151.218.28:30697] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/payout.php"] [unique_id "advdOz9vCsshNhLmCiB8UgAAAFc"]
[Mon Apr 13 01:58:23.552984 2026] [:error] [pid 31605:tid 31665] [client 20.151.218.28:30718] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/payout.php"] [unique_id "advdP29Py-Y-9VQ02eHFEQAAABY"]
[Mon Apr 13 01:58:26.051526 2026] [:error] [pid 31606:tid 31727] [client 20.151.218.28:30688] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/payout.php"] [unique_id "advdQj9vCsshNhLmCiB8WAAAAFU"]
[Mon Apr 13 01:58:28.164263 2026] [:error] [pid 32010:tid 32012] [client 20.151.218.28:30599] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxquidwa.php"] [unique_id "advdRA0nq-t9pXyV1fyedgAAAMA"]
[Mon Apr 13 01:58:29.233161 2026] [:error] [pid 31607:tid 31748] [client 20.151.218.28:30639] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxquidwa.php"] [unique_id "advdRWjn_I-KYTWngjI4-gAAAIs"]
[Mon Apr 13 01:58:29.920698 2026] [:error] [pid 32010:tid 32024] [client 20.151.218.28:30537] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxquidwa.php"] [unique_id "advdRQ0nq-t9pXyV1fyeewAAAMw"]
[Mon Apr 13 01:58:30.542827 2026] [:error] [pid 54671:tid 54691] [client 20.151.218.28:30631] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uxquidwa.php"] [unique_id "advdRmyJMmaONUqF0tB8mwAAARA"]
[Mon Apr 13 01:58:31.159909 2026] [:error] [pid 54671:tid 54685] [client 20.151.218.28:30530] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/combined.php"] [unique_id "advdR2yJMmaONUqF0tB8oQAAAQo"]
[Mon Apr 13 01:58:31.945935 2026] [:error] [pid 54671:tid 54684] [client 20.151.218.28:30614] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/combined.php"] [unique_id "advdR2yJMmaONUqF0tB8pQAAAQk"]
[Mon Apr 13 01:58:32.901737 2026] [:error] [pid 54671:tid 54690] [client 20.151.218.28:30700] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/combined.php"] [unique_id "advdSGyJMmaONUqF0tB8rQAAAQ8"]
[Mon Apr 13 01:58:33.671722 2026] [:error] [pid 32010:tid 32030] [client 20.151.218.28:30656] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/combined.php"] [unique_id "advdSQ0nq-t9pXyV1fyeggAAANI"]
[Mon Apr 13 01:58:34.614046 2026] [:error] [pid 32010:tid 32028] [client 20.151.218.28:30636] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mari.php"] [unique_id "advdSg0nq-t9pXyV1fyehQAAANA"]
[Mon Apr 13 01:58:35.656371 2026] [:error] [pid 32010:tid 32018] [client 20.151.218.28:30595] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mari.php"] [unique_id "advdSw0nq-t9pXyV1fyeigAAAMY"]
[Mon Apr 13 01:58:36.169929 2026] [:error] [pid 31605:tid 31646] [client 20.151.218.28:30703] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mari.php"] [unique_id "advdTG9Py-Y-9VQ02eHFIwAAAAM"]
[Mon Apr 13 01:58:36.591464 2026] [:error] [pid 32010:tid 32019] [client 20.151.218.28:30494] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mari.php"] [unique_id "advdTA0nq-t9pXyV1fyejgAAAMc"]
[Mon Apr 13 01:58:37.102710 2026] [:error] [pid 31605:tid 31647] [client 20.151.218.28:30543] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kodox.php"] [unique_id "advdTW9Py-Y-9VQ02eHFJQAAAAQ"]
[Mon Apr 13 01:58:37.574646 2026] [:error] [pid 32010:tid 32028] [client 20.151.218.28:30598] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kodox.php"] [unique_id "advdTQ0nq-t9pXyV1fyelgAAANA"]
[Mon Apr 13 01:58:38.092961 2026] [:error] [pid 54671:tid 54683] [client 20.151.218.28:30626] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kodox.php"] [unique_id "advdTmyJMmaONUqF0tB8swAAAQg"]
[Mon Apr 13 01:58:38.552745 2026] [:error] [pid 54671:tid 54688] [client 20.151.218.28:30593] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kodox.php"] [unique_id "advdTmyJMmaONUqF0tB8tAAAAQ0"]
[Mon Apr 13 01:58:39.047840 2026] [:error] [pid 54671:tid 54693] [client 20.151.218.28:30648] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak47shell.php"] [unique_id "advdT2yJMmaONUqF0tB8tgAAARI"]
[Mon Apr 13 01:58:39.728779 2026] [:error] [pid 54671:tid 54694] [client 20.151.218.28:30649] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak47shell.php"] [unique_id "advdT2yJMmaONUqF0tB8ugAAARM"]
[Mon Apr 13 01:58:40.682264 2026] [:error] [pid 32010:tid 32016] [client 20.151.218.28:30617] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak47shell.php"] [unique_id "advdUA0nq-t9pXyV1fyeoQAAAMQ"]
[Mon Apr 13 01:58:41.474719 2026] [:error] [pid 31605:tid 31649] [client 20.151.218.28:30717] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ak47shell.php"] [unique_id "advdUW9Py-Y-9VQ02eHFLAAAAAY"]
[Mon Apr 13 01:58:42.330733 2026] [:error] [pid 32010:tid 32016] [client 20.151.218.28:30712] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "advdUg0nq-t9pXyV1fyergAAAMQ"]
[Mon Apr 13 01:58:42.857191 2026] [:error] [pid 31606:tid 31721] [client 20.151.218.28:30702] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "advdUj9vCsshNhLmCiB8ZgAAAE8"]
[Mon Apr 13 01:58:43.594163 2026] [:error] [pid 31605:tid 31654] [client 20.151.218.28:30719] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "advdU29Py-Y-9VQ02eHFMwAAAAs"]
[Mon Apr 13 01:58:44.318947 2026] [:error] [pid 31605:tid 31647] [client 20.151.218.28:30686] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "advdVG9Py-Y-9VQ02eHFNwAAAAQ"]
[Mon Apr 13 01:58:45.964698 2026] [:error] [pid 31606:tid 31713] [client 20.151.218.28:30594] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log404.php"] [unique_id "advdVT9vCsshNhLmCiB8bgAAAEc"]
[Mon Apr 13 01:58:49.047192 2026] [:error] [pid 31605:tid 31646] [client 20.151.218.28:30550] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log404.php"] [unique_id "advdWW9Py-Y-9VQ02eHFRAAAAAM"]
[Mon Apr 13 01:58:51.792327 2026] [:error] [pid 31607:tid 31760] [client 20.151.218.28:30627] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log404.php"] [unique_id "advdW2jn_I-KYTWngjI5AQAAAJc"]
[Mon Apr 13 01:58:53.634282 2026] [:error] [pid 31607:tid 31753] [client 20.151.218.28:30544] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log404.php"] [unique_id "advdXWjn_I-KYTWngjI5AwAAAJA"]
[Mon Apr 13 01:58:54.583598 2026] [:error] [pid 31605:tid 31662] [client 20.151.218.28:30565] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wh.php"] [unique_id "advdXm9Py-Y-9VQ02eHFWQAAABM"]
[Mon Apr 13 01:58:55.496411 2026] [:error] [pid 31607:tid 31737] [client 20.151.218.28:30529] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wh.php"] [unique_id "advdX2jn_I-KYTWngjI5DwAAAIA"]
[Mon Apr 13 01:58:56.488760 2026] [:error] [pid 32010:tid 32023] [client 20.151.218.28:30620] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wh.php"] [unique_id "advdYA0nq-t9pXyV1fyeyQAAAMs"]
[Mon Apr 13 01:58:57.037723 2026] [:error] [pid 54671:tid 54694] [client 20.151.218.28:30566] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wh.php"] [unique_id "advdYWyJMmaONUqF0tB8wwAAARM"]
[Mon Apr 13 01:58:58.122533 2026] [:error] [pid 54671:tid 54682] [client 20.151.218.28:30476] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/luf.php"] [unique_id "advdYmyJMmaONUqF0tB8yAAAAQc"]
[Mon Apr 13 01:58:58.606947 2026] [:error] [pid 54671:tid 54689] [client 20.151.218.28:30587] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/luf.php"] [unique_id "advdYmyJMmaONUqF0tB8ygAAAQ4"]
[Mon Apr 13 01:58:59.530966 2026] [:error] [pid 54671:tid 54678] [client 20.151.218.28:30685] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/luf.php"] [unique_id "advdY2yJMmaONUqF0tB81wAAAQM"]
[Mon Apr 13 01:59:00.882821 2026] [:error] [pid 32010:tid 32016] [client 20.151.218.28:30646] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/luf.php"] [unique_id "advdZA0nq-t9pXyV1fye1gAAAMQ"]
[Mon Apr 13 01:59:15.605563 2026] [:error] [pid 54671:tid 54692] [client 20.151.218.28:30553] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/XX.php"] [unique_id "advdc2yJMmaONUqF0tB9CwAAARE"]
[Mon Apr 13 01:59:16.672543 2026] [:error] [pid 32010:tid 32020] [client 20.151.218.28:30652] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/XX.php"] [unique_id "advddA0nq-t9pXyV1fyfBgAAAMg"]
[Mon Apr 13 01:59:18.295890 2026] [:error] [pid 31607:tid 31744] [client 20.151.218.28:30628] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/XX.php"] [unique_id "advddmjn_I-KYTWngjI5JwAAAIc"]
[Mon Apr 13 01:59:20.404095 2026] [:error] [pid 32010:tid 32033] [client 20.151.218.28:30659] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/XX.php"] [unique_id "advdeA0nq-t9pXyV1fyfDAAAANU"]
[Mon Apr 13 01:59:23.445876 2026] [:error] [pid 54671:tid 54686] [client 20.151.218.28:30474] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php/sts.php"] [unique_id "advde2yJMmaONUqF0tB9GgAAAQs"]
[Mon Apr 13 01:59:34.802550 2026] [:error] [pid 31606:tid 31729] [client 20.151.218.28:30563] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php/sts.php"] [unique_id "advdhj9vCsshNhLmCiB8rgAAAFc"]
[Mon Apr 13 01:59:35.317070 2026] [:error] [pid 31606:tid 31714] [client 20.151.218.28:30546] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php/sts.php"] [unique_id "advdhz9vCsshNhLmCiB8rwAAAEg"]
[Mon Apr 13 01:59:36.703443 2026] [:error] [pid 31605:tid 31650] [client 20.151.218.28:30549] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/cloud.php"] [unique_id "advdiG9Py-Y-9VQ02eHFkwAAAAc"]
[Mon Apr 13 01:59:37.158794 2026] [:error] [pid 54671:tid 54681] [client 20.151.218.28:30654] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/cloud.php"] [unique_id "advdiWyJMmaONUqF0tB9VQAAAQY"]
[Mon Apr 13 01:59:37.570681 2026] [:error] [pid 31607:tid 31756] [client 20.151.218.28:30623] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/cloud.php"] [unique_id "advdiWjn_I-KYTWngjI5RQAAAJM"]
[Mon Apr 13 01:59:37.994443 2026] [:error] [pid 32010:tid 32021] [client 20.151.218.28:30690] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/cloud.php"] [unique_id "advdiQ0nq-t9pXyV1fyfVAAAAMk"]
[Mon Apr 13 01:59:38.476723 2026] [:error] [pid 54671:tid 54693] [client 20.151.218.28:30572] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owlmailer.php"] [unique_id "advdimyJMmaONUqF0tB9XAAAARI"]
[Mon Apr 13 01:59:39.090822 2026] [:error] [pid 54671:tid 54699] [client 20.151.218.28:30667] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owlmailer.php"] [unique_id "advdi2yJMmaONUqF0tB9aQAAARg"]
[Mon Apr 13 01:59:39.853137 2026] [:error] [pid 54671:tid 54699] [client 20.151.218.28:30583] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owlmailer.php"] [unique_id "advdi2yJMmaONUqF0tB9cgAAARg"]
[Mon Apr 13 01:59:40.297369 2026] [:error] [pid 54671:tid 54683] [client 20.151.218.28:30679] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owlmailer.php"] [unique_id "advdjGyJMmaONUqF0tB9eAAAAQg"]
[Mon Apr 13 01:59:40.866175 2026] [:error] [pid 54671:tid 54690] [client 20.151.218.28:30624] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F0x.php"] [unique_id "advdjGyJMmaONUqF0tB9fwAAAQ8"]
[Mon Apr 13 01:59:41.321862 2026] [:error] [pid 54671:tid 54689] [client 20.151.218.28:30644] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F0x.php"] [unique_id "advdjWyJMmaONUqF0tB9gwAAAQ4"]
[Mon Apr 13 01:59:41.829106 2026] [:error] [pid 31607:tid 31746] [client 20.151.218.28:30541] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F0x.php"] [unique_id "advdjWjn_I-KYTWngjI5SQAAAIk"]
[Mon Apr 13 01:59:42.302387 2026] [:error] [pid 31605:tid 31662] [client 20.151.218.28:30635] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/F0x.php"] [unique_id "advdjm9Py-Y-9VQ02eHFngAAABM"]
[Mon Apr 13 01:59:42.871464 2026] [:error] [pid 32010:tid 32033] [client 20.151.218.28:30535] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rlpc.php"] [unique_id "advdjg0nq-t9pXyV1fyfXgAAANU"]
[Mon Apr 13 01:59:43.320287 2026] [:error] [pid 31607:tid 31739] [client 20.151.218.28:30557] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rlpc.php"] [unique_id "advdj2jn_I-KYTWngjI5UAAAAII"]
[Mon Apr 13 01:59:43.997868 2026] [:error] [pid 32010:tid 32028] [client 20.151.218.28:30552] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rlpc.php"] [unique_id "advdjw0nq-t9pXyV1fyfYAAAANA"]
[Mon Apr 13 01:59:44.560624 2026] [:error] [pid 31607:tid 31749] [client 20.151.218.28:30641] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rlpc.php"] [unique_id "advdkGjn_I-KYTWngjI5VAAAAIw"]
[Mon Apr 13 01:59:45.124706 2026] [:error] [pid 31605:tid 31662] [client 20.151.218.28:30477] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-p.php7"] [unique_id "advdkW9Py-Y-9VQ02eHFrAAAABM"]
[Mon Apr 13 01:59:45.541867 2026] [:error] [pid 31605:tid 31646] [client 20.151.218.28:30547] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-p.php7"] [unique_id "advdkW9Py-Y-9VQ02eHFrgAAAAM"]
[Mon Apr 13 01:59:46.153568 2026] [:error] [pid 31605:tid 31648] [client 20.151.218.28:30561] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-p.php7"] [unique_id "advdkm9Py-Y-9VQ02eHFsQAAAAU"]
[Mon Apr 13 01:59:47.029992 2026] [:error] [pid 31607:tid 31740] [client 20.151.218.28:30560] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-p.php7"] [unique_id "advdk2jn_I-KYTWngjI5XgAAAIM"]
[Mon Apr 13 01:59:47.600543 2026] [:error] [pid 31606:tid 31720] [client 20.151.218.28:30573] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sale.php"] [unique_id "advdkz9vCsshNhLmCiB8wAAAAE4"]
[Mon Apr 13 01:59:48.140871 2026] [:error] [pid 32010:tid 32031] [client 20.151.218.28:30589] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sale.php"] [unique_id "advdlA0nq-t9pXyV1fyfawAAANM"]
[Mon Apr 13 01:59:48.652180 2026] [:error] [pid 32010:tid 32020] [client 20.151.218.28:30694] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sale.php"] [unique_id "advdlA0nq-t9pXyV1fyfbgAAAMg"]
[Mon Apr 13 01:59:49.199710 2026] [:error] [pid 32010:tid 32013] [client 20.151.218.28:30483] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sale.php"] [unique_id "advdlQ0nq-t9pXyV1fyfcgAAAME"]
[Mon Apr 13 01:59:49.849299 2026] [:error] [pid 32010:tid 32030] [client 20.151.218.28:30571] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ran.php"] [unique_id "advdlQ0nq-t9pXyV1fyfeQAAANI"]
[Mon Apr 13 01:59:52.207385 2026] [:error] [pid 31605:tid 31654] [client 20.151.218.28:30472] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ran.php"] [unique_id "advdmG9Py-Y-9VQ02eHFuwAAAAs"]
[Mon Apr 13 01:59:53.989812 2026] [:error] [pid 32010:tid 32024] [client 20.151.218.28:30615] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ran.php"] [unique_id "advdmQ0nq-t9pXyV1fyfkQAAAMw"]
[Mon Apr 13 01:59:55.471689 2026] [:error] [pid 32010:tid 32017] [client 20.151.218.28:30692] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ran.php"] [unique_id "advdmw0nq-t9pXyV1fyfnQAAAMU"]
[Mon Apr 13 01:59:57.622606 2026] [:error] [pid 32010:tid 32020] [client 20.151.218.28:30542] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k90.php"] [unique_id "advdnQ0nq-t9pXyV1fyfqwAAAMg"]
[Mon Apr 13 01:59:58.837660 2026] [:error] [pid 31607:tid 31739] [client 20.151.218.28:30577] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k90.php"] [unique_id "advdnmjn_I-KYTWngjI5fAAAAII"]
[Mon Apr 13 01:59:59.741800 2026] [:error] [pid 31605:tid 31666] [client 20.151.218.28:30705] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k90.php"] [unique_id "advdn29Py-Y-9VQ02eHFyAAAABc"]
[Mon Apr 13 02:00:00.829103 2026] [:error] [pid 32010:tid 32025] [client 20.151.218.28:30503] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k90.php"] [unique_id "advdoA0nq-t9pXyV1fyftAAAAM0"]
[Mon Apr 13 02:00:01.426682 2026] [:error] [pid 31607:tid 31744] [client 20.151.218.28:30645] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/taff.php"] [unique_id "advdoWjn_I-KYTWngjI5gAAAAIc"]
[Mon Apr 13 02:00:01.933370 2026] [:error] [pid 32010:tid 32026] [client 20.151.218.28:30508] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/taff.php"] [unique_id "advdoQ0nq-t9pXyV1fyfvAAAAM4"]
[Mon Apr 13 02:00:02.405153 2026] [:error] [pid 31606:tid 31716] [client 20.151.218.28:30468] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/taff.php"] [unique_id "advdoj9vCsshNhLmCiB83wAAAEo"]
[Mon Apr 13 02:00:02.975400 2026] [:error] [pid 31605:tid 31665] [client 20.151.218.28:30510] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/taff.php"] [unique_id "advdom9Py-Y-9VQ02eHFywAAABY"]
[Mon Apr 13 02:00:03.460387 2026] [:error] [pid 31605:tid 31653] [client 20.151.218.28:30585] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/set.php"] [unique_id "advdo29Py-Y-9VQ02eHFzwAAAAo"]
[Mon Apr 13 02:00:03.904818 2026] [:error] [pid 31605:tid 31667] [client 20.151.218.28:30473] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/set.php"] [unique_id "advdo29Py-Y-9VQ02eHF0QAAABg"]
[Mon Apr 13 02:00:04.350539 2026] [:error] [pid 54671:tid 54683] [client 20.151.218.28:30531] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/set.php"] [unique_id "advdpGyJMmaONUqF0tB9lgAAAQg"]
[Mon Apr 13 02:00:04.894798 2026] [:error] [pid 54671:tid 54687] [client 20.151.218.28:30607] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/set.php"] [unique_id "advdpGyJMmaONUqF0tB9mAAAAQw"]
[Mon Apr 13 02:00:05.416495 2026] [:error] [pid 54671:tid 54688] [client 20.151.218.28:30580] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/133.php"] [unique_id "advdpWyJMmaONUqF0tB9mwAAAQ0"]
[Mon Apr 13 02:00:06.024897 2026] [:error] [pid 54671:tid 54680] [client 20.151.218.28:30668] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/133.php"] [unique_id "advdpmyJMmaONUqF0tB9nwAAAQU"]
[Mon Apr 13 02:00:06.524859 2026] [:error] [pid 54671:tid 54677] [client 20.151.218.28:30707] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/133.php"] [unique_id "advdpmyJMmaONUqF0tB9owAAAQI"]
[Mon Apr 13 02:00:07.750747 2026] [:error] [pid 54671:tid 54679] [client 20.151.218.28:30540] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/133.php"] [unique_id "advdp2yJMmaONUqF0tB9qwAAAQQ"]
[Mon Apr 13 02:00:08.885013 2026] [:error] [pid 54671:tid 54699] [client 20.151.218.28:30698] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ssxsl.php"] [unique_id "advdqGyJMmaONUqF0tB9swAAARg"]
[Mon Apr 13 02:00:11.321620 2026] [:error] [pid 54671:tid 54688] [client 20.151.218.28:30632] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ssxsl.php"] [unique_id "advdq2yJMmaONUqF0tB9uwAAAQ0"]
[Mon Apr 13 02:00:13.389865 2026] [:error] [pid 32010:tid 32026] [client 20.151.218.28:30513] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ssxsl.php"] [unique_id "advdrQ0nq-t9pXyV1fyf2wAAAM4"]
[Mon Apr 13 02:00:28.021153 2026] [:error] [pid 32010:tid 32029] [client 20.151.218.28:30534] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktgob.php"] [unique_id "advdvA0nq-t9pXyV1fygCgAAANE"]
[Mon Apr 13 02:00:28.948912 2026] [:error] [pid 31606:tid 31720] [client 20.151.218.28:30684] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktgob.php"] [unique_id "advdvD9vCsshNhLmCiB9AQAAAE4"]
[Mon Apr 13 02:00:29.455300 2026] [:error] [pid 31607:tid 31744] [client 20.151.218.28:30710] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktgob.php"] [unique_id "advdvWjn_I-KYTWngjI5uAAAAIc"]
[Mon Apr 13 02:00:30.067312 2026] [:error] [pid 31607:tid 31742] [client 20.151.218.28:30558] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktgob.php"] [unique_id "advdvmjn_I-KYTWngjI5vQAAAIU"]
[Mon Apr 13 02:00:30.781988 2026] [:error] [pid 31607:tid 31760] [client 20.151.218.28:30467] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "advdvmjn_I-KYTWngjI5wwAAAJc"]
[Mon Apr 13 02:00:31.476957 2026] [:error] [pid 31607:tid 31740] [client 20.151.218.28:30610] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "advdv2jn_I-KYTWngjI5ygAAAIM"]
[Mon Apr 13 02:00:31.963940 2026] [:error] [pid 54671:tid 54676] [client 20.151.218.28:30600] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "advdv2yJMmaONUqF0tB-BAAAAQE"]
[Mon Apr 13 02:00:32.888214 2026] [:error] [pid 31606:tid 31717] [client 20.151.218.28:30601] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "advdwD9vCsshNhLmCiB9CAAAAEs"]
[Mon Apr 13 02:00:33.448769 2026] [:error] [pid 31606:tid 31725] [client 20.151.218.28:30651] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afile.php"] [unique_id "advdwT9vCsshNhLmCiB9CgAAAFM"]
[Mon Apr 13 02:00:34.420774 2026] [:error] [pid 54671:tid 54689] [client 20.151.218.28:30704] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afile.php"] [unique_id "advdwmyJMmaONUqF0tB-DwAAAQ4"]
[Mon Apr 13 02:00:35.024610 2026] [:error] [pid 31605:tid 31655] [client 20.151.218.28:30569] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afile.php"] [unique_id "advdw29Py-Y-9VQ02eHF-AAAAAw"]
[Mon Apr 13 02:00:35.658527 2026] [:error] [pid 31606:tid 31712] [client 20.151.218.28:30465] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afile.php"] [unique_id "advdwz9vCsshNhLmCiB9EQAAAEY"]
[Mon Apr 13 02:00:36.173164 2026] [:error] [pid 31606:tid 31724] [client 20.151.218.28:30416] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xBrain.php"] [unique_id "advdxD9vCsshNhLmCiB9EgAAAFI"]
[Mon Apr 13 02:00:36.821176 2026] [:error] [pid 31605:tid 31657] [client 20.151.218.28:30536] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xBrain.php"] [unique_id "advdxG9Py-Y-9VQ02eHF_QAAAA4"]
[Mon Apr 13 02:00:37.328049 2026] [:error] [pid 54671:tid 54687] [client 20.151.218.28:30579] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xBrain.php"] [unique_id "advdxWyJMmaONUqF0tB-IAAAAQw"]
[Mon Apr 13 02:00:37.797830 2026] [:error] [pid 54671:tid 54689] [client 20.151.218.28:30551] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xBrain.php"] [unique_id "advdxWyJMmaONUqF0tB-IwAAAQ4"]
[Mon Apr 13 02:00:38.327423 2026] [:error] [pid 31605:tid 31667] [client 20.151.218.28:30568] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yunu.php"] [unique_id "advdxm9Py-Y-9VQ02eHGBgAAABg"]
[Mon Apr 13 02:00:39.015386 2026] [:error] [pid 31605:tid 31666] [client 20.151.218.28:30604] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yunu.php"] [unique_id "advdx29Py-Y-9VQ02eHGBwAAABc"]
[Mon Apr 13 02:00:39.597841 2026] [:error] [pid 54671:tid 54675] [client 20.151.218.28:30499] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yunu.php"] [unique_id "advdx2yJMmaONUqF0tB-MgAAAQA"]
[Mon Apr 13 02:00:40.073790 2026] [:error] [pid 31605:tid 31655] [client 20.151.218.28:30661] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yunu.php"] [unique_id "advdyG9Py-Y-9VQ02eHGCgAAAAw"]
[Mon Apr 13 02:00:41.133466 2026] [:error] [pid 54671:tid 54682] [client 20.151.218.28:30612] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lexy.php"] [unique_id "advdyWyJMmaONUqF0tB-OQAAAQc"]
[Mon Apr 13 02:00:41.876629 2026] [:error] [pid 31606:tid 31729] [client 20.151.218.28:30588] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lexy.php"] [unique_id "advdyT9vCsshNhLmCiB9GAAAAFc"]
[Mon Apr 13 02:00:42.672990 2026] [:error] [pid 54671:tid 54687] [client 20.151.218.28:30683] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lexy.php"] [unique_id "advdymyJMmaONUqF0tB-QwAAAQw"]
[Mon Apr 13 02:00:43.346897 2026] [:error] [pid 31606:tid 31720] [client 20.151.218.28:30716] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lexy.php"] [unique_id "advdyz9vCsshNhLmCiB9HAAAAE4"]
[Mon Apr 13 03:00:35.170039 2026] [:error] [pid 54671:tid 54697] [client 176.100.43.60:9470] [client 176.100.43.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.100.43.60, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "advr02yJMmaONUqF0tCj-wAAARY"]
[Mon Apr 13 03:06:09.059597 2026] [:error] [pid 32010:tid 32019] [client 45.190.159.202:9208] [client 45.190.159.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.190.159.202, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "advtIQ0nq-t9pXyV1fy77gAAAMc"]
[Mon Apr 13 03:06:19.348601 2026] [:error] [pid 32010:tid 32018] [client 45.190.159.202:38789] [client 45.190.159.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.190.159.202, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "advtKw0nq-t9pXyV1fy8GQAAAMY"]
[Mon Apr 13 03:06:41.659108 2026] [:error] [pid 32010:tid 32030] [client 45.190.159.202:47205] [client 45.190.159.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.190.159.202, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "advtQQ0nq-t9pXyV1fy8NAAAANI"]
[Mon Apr 13 03:29:04.725612 2026] [:error] [pid 30432:tid 30511] [client 201.21.152.3:62702] [client 201.21.152.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.21.152.3, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "advygPv_BOY8son7cLmUAAAAAIo"]
[Mon Apr 13 04:03:55.035045 2026] [:error] [pid 33941:tid 33975] [client 91.147.92.98:56456] [client 91.147.92.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/staff/.env"] [unique_id "adv6q2_NKERAxgG-rYME8wAAABg"]
[Mon Apr 13 04:03:55.036761 2026] [:error] [pid 33941:tid 33974] [client 91.147.92.98:56450] [client 91.147.92.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/client/.env"] [unique_id "adv6q2_NKERAxgG-rYME9AAAABc"]
[Mon Apr 13 04:03:55.045937 2026] [:error] [pid 33941:tid 33960] [client 91.147.92.98:56448] [client 91.147.92.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/campaign/.env"] [unique_id "adv6q2_NKERAxgG-rYME9QAAAAk"]
[Mon Apr 13 04:03:55.046530 2026] [:error] [pid 33941:tid 33950] [client 91.147.92.98:56462] [client 91.147.92.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/portal/.env"] [unique_id "adv6q2_NKERAxgG-rYME9gAAAAA"]
[Mon Apr 13 04:03:55.046592 2026] [:error] [pid 33941:tid 33967] [client 91.147.92.98:56458] [client 91.147.92.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "adv6q2_NKERAxgG-rYME9wAAABA"]
[Mon Apr 13 04:29:27.060416 2026] [:error] [pid 33943:tid 34016] [client 86.120.190.93:27365] [client 86.120.190.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.190.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adwAp6yoXuZjocnxM5FA-wAAAIo"]
[Mon Apr 13 04:29:37.274006 2026] [:error] [pid 34048:tid 34068] [client 86.120.190.93:27243] [client 86.120.190.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.190.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adwAsfSiQ_PJjlY5EhzXvgAAANI"]
[Mon Apr 13 04:29:47.792969 2026] [:error] [pid 33943:tid 34029] [client 86.120.190.93:27262] [client 86.120.190.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.190.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adwAu6yoXuZjocnxM5FBMgAAAJc"]
[Mon Apr 13 04:53:59.675509 2026] [:error] [pid 33942:tid 33983] [client 60.188.57.0:36232] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adwGZxNHe8geO_lMeFaF2gAAAEQ"]
[Mon Apr 13 05:12:30.418028 2026] [:error] [pid 33943:tid 34015] [client 20.151.248.149:24549] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwKvqyoXuZjocnxM5FY0QAAAIk"]
[Mon Apr 13 05:12:30.827023 2026] [:error] [pid 11325:tid 11327] [client 20.151.248.149:24451] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwKvuCGj3EEJtCwa0N1WgAAAQA"]
[Mon Apr 13 05:12:31.238986 2026] [:error] [pid 33943:tid 34008] [client 20.151.248.149:24572] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwKv6yoXuZjocnxM5FY1AAAAII"]
[Mon Apr 13 05:12:31.647770 2026] [:error] [pid 33943:tid 34010] [client 20.151.248.149:24548] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adwKv6yoXuZjocnxM5FY1QAAAIQ"]
[Mon Apr 13 07:52:24.161565 2026] [:error] [pid 63406:tid 63433] [client 141.94.101.142:45736] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "adwwOLHZEIkQ0Zmgp5rt0QAAANY"]
[Mon Apr 13 07:52:26.819848 2026] [:error] [pid 63311:tid 63377] [client 141.94.101.142:54594] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "adwwOqHjrGN1MqBCVFkXlwAAAIY"]
[Mon Apr 13 07:52:29.249324 2026] [:error] [pid 63310:tid 63353] [client 141.94.101.142:53316] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "adwwPXoXpRU5ztmwPjKdvwAAAEk"]
[Mon Apr 13 07:52:31.762357 2026] [:error] [pid 63310:tid 63358] [client 141.94.101.142:53328] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "adwwP3oXpRU5ztmwPjKdygAAAE4"]
[Mon Apr 13 07:52:34.327963 2026] [:error] [pid 63406:tid 63432] [client 141.94.101.142:53342] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "adwwQrHZEIkQ0Zmgp5rt5gAAANU"]
[Mon Apr 13 07:52:36.841494 2026] [:error] [pid 63309:tid 63331] [client 141.94.101.142:53358] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "adwwREpIKZ10weXpf0WLcgAAABI"]
[Mon Apr 13 07:52:39.512184 2026] [:error] [pid 63309:tid 63316] [client 141.94.101.142:52274] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "adwwR0pIKZ10weXpf0WLegAAAAM"]
[Mon Apr 13 07:52:42.042474 2026] [:error] [pid 63309:tid 63313] [client 141.94.101.142:52288] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "adwwSkpIKZ10weXpf0WLfgAAAAA"]
[Mon Apr 13 07:52:44.692902 2026] [:error] [pid 63310:tid 63367] [client 141.94.101.142:52300] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "adwwTHoXpRU5ztmwPjKd3wAAAFc"]
[Mon Apr 13 07:52:47.221350 2026] [:error] [pid 63406:tid 63419] [client 141.94.101.142:52314] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "adwwT7HZEIkQ0Zmgp5ruAQAAAMg"]
[Mon Apr 13 07:52:49.584711 2026] [:error] [pid 63406:tid 63415] [client 141.94.101.142:34566] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "adwwUbHZEIkQ0Zmgp5ruCgAAAMQ"]
[Mon Apr 13 07:52:52.385332 2026] [:error] [pid 63311:tid 63382] [client 141.94.101.142:34574] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "adwwVKHjrGN1MqBCVFkXygAAAIs"]
[Mon Apr 13 07:52:54.815975 2026] [:error] [pid 63309:tid 63329] [client 141.94.101.142:34584] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "adwwVkpIKZ10weXpf0WLlQAAABA"]
[Mon Apr 13 07:52:57.264999 2026] [:error] [pid 63406:tid 63412] [client 141.94.101.142:34594] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "adwwWbHZEIkQ0Zmgp5ruKQAAAME"]
[Mon Apr 13 07:52:59.784125 2026] [:error] [pid 63311:tid 63388] [client 141.94.101.142:37652] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "adwwW6HjrGN1MqBCVFkX4wAAAJE"]
[Mon Apr 13 07:53:02.738170 2026] [:error] [pid 63310:tid 63368] [client 141.94.101.142:37666] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "adwwXnoXpRU5ztmwPjKd7gAAAFg"]
[Mon Apr 13 07:53:05.337665 2026] [:error] [pid 63310:tid 63355] [client 141.94.101.142:37676] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "adwwYXoXpRU5ztmwPjKd8QAAAEs"]
[Mon Apr 13 07:53:07.971650 2026] [:error] [pid 63406:tid 63433] [client 141.94.101.142:37686] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "adwwY7HZEIkQ0Zmgp5ruSAAAANY"]
[Mon Apr 13 07:53:10.766203 2026] [:error] [pid 63309:tid 63324] [client 141.94.101.142:34796] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "adwwZkpIKZ10weXpf0WLswAAAAs"]
[Mon Apr 13 07:53:13.329187 2026] [:error] [pid 63406:tid 63415] [client 141.94.101.142:34810] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "adwwabHZEIkQ0Zmgp5ruVwAAAMQ"]
[Mon Apr 13 07:53:15.677631 2026] [:error] [pid 63309:tid 63317] [client 141.94.101.142:34820] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "adwwa0pIKZ10weXpf0WLvgAAAAQ"]
[Mon Apr 13 07:53:18.471263 2026] [:error] [pid 63311:tid 63387] [client 141.94.101.142:45492] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "adwwbqHjrGN1MqBCVFkYCAAAAJA"]
[Mon Apr 13 07:53:53.939667 2026] [:error] [pid 63406:tid 63425] [client 141.94.101.142:45494] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "adwwkbHZEIkQ0Zmgp5ruugAAAM4"]
[Mon Apr 13 07:53:56.875908 2026] [:error] [pid 63311:tid 63393] [client 141.94.101.142:54708] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "adwwlKHjrGN1MqBCVFkYXwAAAJY"]
[Mon Apr 13 07:54:00.193655 2026] [:error] [pid 63311:tid 63381] [client 141.94.101.142:51958] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "adwwmKHjrGN1MqBCVFkYZwAAAIo"]
[Mon Apr 13 07:54:03.243625 2026] [:error] [pid 63309:tid 63323] [client 141.94.101.142:51974] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "adwwm0pIKZ10weXpf0WMFAAAAAo"]
[Mon Apr 13 07:54:06.625093 2026] [:error] [pid 63309:tid 63328] [client 141.94.101.142:51990] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "adwwnkpIKZ10weXpf0WMIAAAAA8"]
[Mon Apr 13 07:54:09.032883 2026] [:error] [pid 63309:tid 63313] [client 141.94.101.142:60188] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "adwwoUpIKZ10weXpf0WMKAAAAAA"]
[Mon Apr 13 07:54:11.991259 2026] [:error] [pid 63406:tid 63412] [client 141.94.101.142:60202] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "adwwo7HZEIkQ0Zmgp5ru4AAAAME"]
[Mon Apr 13 07:54:14.652284 2026] [:error] [pid 63309:tid 63321] [client 141.94.101.142:60208] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "adwwpkpIKZ10weXpf0WMNQAAAAg"]
[Mon Apr 13 07:54:17.719380 2026] [:error] [pid 63406:tid 63434] [client 141.94.101.142:60214] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "adwwqbHZEIkQ0Zmgp5ru5AAAANc"]
[Mon Apr 13 07:54:20.195869 2026] [:error] [pid 63406:tid 63424] [client 141.94.101.142:47548] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "adwwrLHZEIkQ0Zmgp5ru5wAAAM0"]
[Mon Apr 13 07:54:23.409880 2026] [:error] [pid 63311:tid 63393] [client 141.94.101.142:47556] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "adwwr6HjrGN1MqBCVFkYnwAAAJY"]
[Mon Apr 13 07:54:26.165583 2026] [:error] [pid 63311:tid 63387] [client 141.94.101.142:47564] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "adwwsqHjrGN1MqBCVFkYpAAAAJA"]
[Mon Apr 13 07:54:29.143458 2026] [:error] [pid 63406:tid 63428] [client 141.94.101.142:55766] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "adwwtbHZEIkQ0Zmgp5rvBgAAANE"]
[Mon Apr 13 07:54:32.075015 2026] [:error] [pid 63311:tid 63373] [client 141.94.101.142:55774] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "adwwuKHjrGN1MqBCVFkYsQAAAII"]
[Mon Apr 13 07:54:35.879505 2026] [:error] [pid 63310:tid 63367] [client 141.94.101.142:55786] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "adwwu3oXpRU5ztmwPjKesgAAAFc"]
[Mon Apr 13 07:54:38.714185 2026] [:error] [pid 63311:tid 63386] [client 141.94.101.142:32986] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "adwwvqHjrGN1MqBCVFkYvgAAAI8"]
[Mon Apr 13 07:54:41.488068 2026] [:error] [pid 63406:tid 63417] [client 141.94.101.142:32990] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "adwwwbHZEIkQ0Zmgp5rvJQAAAMY"]
[Mon Apr 13 07:54:44.130833 2026] [:error] [pid 63309:tid 63321] [client 141.94.101.142:33006] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "adwwxEpIKZ10weXpf0WMXAAAAAg"]
[Mon Apr 13 07:54:47.322079 2026] [:error] [pid 63309:tid 63319] [client 141.94.101.142:33014] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "adwwx0pIKZ10weXpf0WMZgAAAAY"]
[Mon Apr 13 07:55:29.333511 2026] [:error] [pid 63406:tid 63424] [client 141.94.101.142:54612] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "adww8bHZEIkQ0Zmgp5rv8wAAAM0"]
[Mon Apr 13 07:55:32.333934 2026] [:error] [pid 63311:tid 63389] [client 141.94.101.142:48228] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "adww9KHjrGN1MqBCVFkZbwAAAJI"]
[Mon Apr 13 07:55:34.847987 2026] [:error] [pid 63406:tid 63411] [client 141.94.101.142:48244] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "adww9rHZEIkQ0Zmgp5rwAwAAAMA"]
[Mon Apr 13 07:55:38.472809 2026] [:error] [pid 63311:tid 63392] [client 141.94.101.142:44522] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "adww-qHjrGN1MqBCVFkZhwAAAJU"]
[Mon Apr 13 07:55:41.498323 2026] [:error] [pid 63406:tid 63417] [client 141.94.101.142:44530] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "adww_bHZEIkQ0Zmgp5rwEQAAAMY"]
[Mon Apr 13 07:55:44.445327 2026] [:error] [pid 63406:tid 63435] [client 141.94.101.142:44544] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "adwxALHZEIkQ0Zmgp5rwEgAAANg"]
[Mon Apr 13 07:55:47.875736 2026] [:error] [pid 63310:tid 63347] [client 141.94.101.142:44548] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "adwxA3oXpRU5ztmwPjKe9gAAAEM"]
[Mon Apr 13 07:55:51.406063 2026] [:error] [pid 63406:tid 63414] [client 141.94.101.142:44176] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "adwxB7HZEIkQ0Zmgp5rwHAAAAMM"]
[Mon Apr 13 07:55:53.997868 2026] [:error] [pid 63406:tid 63419] [client 141.94.101.142:44190] [client 141.94.101.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "adwxCbHZEIkQ0Zmgp5rwIwAAAMg"]
[Mon Apr 13 08:51:53.748703 2026] [:error] [pid 7228:tid 7242] [client 43.135.182.43:54478] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adw-KQEnn1dQrOSHHNUE_QAAAQw"]
[Mon Apr 13 09:25:40.616360 2026] [:error] [pid 7228:tid 7243] [client 176.100.43.60:55562] [client 176.100.43.60] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adxGFAEnn1dQrOSHHNUkjgAAAQ0"]
[Mon Apr 13 09:27:00.647911 2026] [:error] [pid 63310:tid 63355] [client 176.100.43.60:22082] [client 176.100.43.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.100.43.60, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxGZHoXpRU5ztmwPjLA-QAAAEs"]
[Mon Apr 13 09:34:53.806522 2026] [:error] [pid 7228:tid 7246] [client 102.64.60.6:2880] [client 102.64.60.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.64.60.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxIPQEnn1dQrOSHHNUsjwAAARA"]
[Mon Apr 13 09:40:20.221649 2026] [:error] [pid 63309:tid 63324] [client 188.6.209.231:54161] [client 188.6.209.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.6.209.231, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxJhEpIKZ10weXpf0WqgQAAAAs"]
[Mon Apr 13 09:40:29.797074 2026] [:error] [pid 63310:tid 63366] [client 188.6.209.231:54705] [client 188.6.209.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.6.209.231, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxJjXoXpRU5ztmwPjLFVwAAAFY"]
[Mon Apr 13 09:40:40.341385 2026] [:error] [pid 63310:tid 63350] [client 188.6.209.231:55454] [client 188.6.209.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.6.209.231, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxJmHoXpRU5ztmwPjLFfwAAAEY"]
[Mon Apr 13 09:42:56.123968 2026] [:error] [pid 63310:tid 63358] [client 202.154.15.121:58390] [client 202.154.15.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.154.15.121, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxKIHoXpRU5ztmwPjLGoQAAAE4"]
[Mon Apr 13 09:43:06.671644 2026] [:error] [pid 63406:tid 63413] [client 202.154.15.121:58920] [client 202.154.15.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.154.15.121, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxKKrHZEIkQ0Zmgp5o3LwAAAMI"]
[Mon Apr 13 09:50:36.003041 2026] [:error] [pid 7228:tid 7254] [client 103.90.232.170:34310] [client 103.90.232.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.90.232.170, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adxL7AEnn1dQrOSHHNU50wAAARg"]
[Mon Apr 13 09:50:38.209994 2026] [proxy_fcgi:error] [pid 7228:tid 7254] [client 103.90.232.170:34310] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 13 09:50:40.816176 2026] [:error] [pid 7228:tid 7248] [client 103.90.232.170:34310] [client 103.90.232.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.90.232.170, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adxL8AEnn1dQrOSHHNU56AAAARI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 09:50:41.845545 2026] [proxy_fcgi:error] [pid 7228:tid 7248] [client 103.90.232.170:34310] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 10:14:46.439577 2026] [:error] [pid 63311:tid 63378] [client 5.192.6.14:52864] [client 5.192.6.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.192.6.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxRlqHjrGN1MqBCVFlYGgAAAIc"]
[Mon Apr 13 10:14:56.953731 2026] [:error] [pid 63406:tid 63415] [client 5.192.6.14:53322] [client 5.192.6.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.192.6.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxRoLHZEIkQ0Zmgp5pHPgAAAMQ"]
[Mon Apr 13 10:15:07.828939 2026] [:error] [pid 63406:tid 63413] [client 5.192.6.14:54170] [client 5.192.6.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.192.6.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxRq7HZEIkQ0Zmgp5pHSQAAAMI"]
[Mon Apr 13 11:21:00.238442 2026] [:error] [pid 57183:tid 57191] [client 180.110.203.108:38741] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adxhHDDO3t8R5NaxzYQRmgAAAUY"]
[Mon Apr 13 11:53:49.797041 2026] [:error] [pid 63406:tid 63412] [client 122.105.226.141:40191] [client 122.105.226.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.105.226.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxozbHZEIkQ0Zmgp5pwsQAAAME"]
[Mon Apr 13 11:54:00.097004 2026] [:error] [pid 63406:tid 63411] [client 122.105.226.141:43529] [client 122.105.226.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.105.226.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxo2LHZEIkQ0Zmgp5pwwgAAAMA"]
[Mon Apr 13 11:58:12.234959 2026] [:error] [pid 63311:tid 63394] [client 157.50.154.246:57333] [client 157.50.154.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.50.154.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxp1KHjrGN1MqBCVFl5FwAAAJc"]
[Mon Apr 13 11:58:33.933780 2026] [:error] [pid 63311:tid 63393] [client 157.50.154.246:58028] [client 157.50.154.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.50.154.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxp6aHjrGN1MqBCVFl5JQAAAJY"]
[Mon Apr 13 12:06:07.240829 2026] [:error] [pid 63311:tid 63390] [client 103.141.5.7:63916] [client 103.141.5.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.5.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxrr6HjrGN1MqBCVFl7HQAAAJM"]
[Mon Apr 13 12:06:16.978059 2026] [:error] [pid 7228:tid 7235] [client 103.141.5.7:64408] [client 103.141.5.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.5.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxruAEnn1dQrOSHHNWXXQAAAQU"]
[Mon Apr 13 12:06:27.981711 2026] [:error] [pid 7228:tid 7232] [client 103.141.5.7:29373] [client 103.141.5.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.5.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxrwwEnn1dQrOSHHNWXnQAAAQI"]
[Mon Apr 13 12:32:58.131769 2026] [:error] [pid 7228:tid 7243] [client 49.51.243.156:41728] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "adxx-gEnn1dQrOSHHNWr5gAAAQ0"]
[Mon Apr 13 12:35:12.228721 2026] [:error] [pid 57183:tid 57195] [client 182.190.221.26:19691] [client 182.190.221.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.190.221.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxygDDO3t8R5NaxzYQy2wAAAUo"]
[Mon Apr 13 12:36:18.249353 2026] [:error] [pid 63310:tid 63360] [client 182.190.221.26:18116] [client 182.190.221.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.190.221.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxywnoXpRU5ztmwPjLzCwAAAFA"]
[Mon Apr 13 12:36:31.657721 2026] [:error] [pid 63309:tid 63332] [client 182.190.221.26:18209] [client 182.190.221.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.190.221.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adxyz0pIKZ10weXpf0XSLwAAABM"]
[Mon Apr 13 13:17:28.917361 2026] [:error] [pid 57183:tid 57201] [client 176.236.199.121:55115] [client 176.236.199.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.236.199.121, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adx8aDDO3t8R5NaxzYRGRgAAAVA"]
[Mon Apr 13 13:17:39.653477 2026] [:error] [pid 7228:tid 7236] [client 176.236.199.121:54657] [client 176.236.199.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.236.199.121, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adx8cwEnn1dQrOSHHNXLswAAAQY"]
[Mon Apr 13 13:20:22.045719 2026] [:error] [pid 63311:tid 63372] [client 176.236.199.121:54761] [client 176.236.199.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.236.199.121, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adx9FqHjrGN1MqBCVFmPXgAAAIE"]
[Mon Apr 13 13:24:22.223123 2026] [:error] [pid 63310:tid 63352] [client 41.76.214.94:50910] [client 41.76.214.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.76.214.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adx-BnoXpRU5ztmwPjL91wAAAEg"]
[Mon Apr 13 13:24:23.205739 2026] [proxy_fcgi:error] [pid 63310:tid 63352] [client 41.76.214.94:50910] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 13 13:24:23.902570 2026] [:error] [pid 63310:tid 63345] [client 41.76.214.94:50910] [client 41.76.214.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.76.214.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adx-B3oXpRU5ztmwPjL92AAAAEE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 13:24:24.929599 2026] [proxy_fcgi:error] [pid 63310:tid 63345] [client 41.76.214.94:50910] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 13:25:17.746673 2026] [:error] [pid 7228:tid 7236] [client 122.160.151.11:58718] [client 122.160.151.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.160.151.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adx-PQEnn1dQrOSHHNXRCwAAAQY"]
[Mon Apr 13 13:25:26.548484 2026] [:error] [pid 7228:tid 7248] [client 122.160.151.11:59334] [client 122.160.151.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.160.151.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adx-RgEnn1dQrOSHHNXRPwAAARI"]
[Mon Apr 13 13:58:42.919054 2026] [:error] [pid 7228:tid 7233] [client 49.37.100.17:50580] [client 49.37.100.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.100.17, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyGEgEnn1dQrOSHHNXttAAAAQM"]
[Mon Apr 13 13:58:53.761524 2026] [:error] [pid 57183:tid 57193] [client 49.37.100.17:51186] [client 49.37.100.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.100.17, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyGHTDO3t8R5NaxzYRe_QAAAUg"]
[Mon Apr 13 14:09:45.837469 2026] [:error] [pid 63311:tid 63390] [client 152.58.188.10:56011] [client 152.58.188.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.188.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyIqaHjrGN1MqBCVFmejAAAAJM"]
[Mon Apr 13 14:09:55.481885 2026] [:error] [pid 57183:tid 57200] [client 152.58.188.10:56513] [client 152.58.188.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.188.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyIszDO3t8R5NaxzYRjywAAAU8"]
[Mon Apr 13 14:10:06.036711 2026] [:error] [pid 63310:tid 63344] [client 152.58.188.10:57156] [client 152.58.188.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.188.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyIvnoXpRU5ztmwPjIKJgAAAEA"]
[Mon Apr 13 14:35:53.586374 2026] [:error] [pid 57183:tid 57194] [client 223.228.177.152:56767] [client 223.228.177.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.177.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyOyTDO3t8R5NaxzYR1PwAAAUk"]
[Mon Apr 13 14:36:15.299541 2026] [:error] [pid 57183:tid 57199] [client 223.228.177.152:4591] [client 223.228.177.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.177.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyO3zDO3t8R5NaxzYR1nAAAAU4"]
[Mon Apr 13 14:36:26.259771 2026] [:error] [pid 7228:tid 7251] [client 223.228.177.152:16133] [client 223.228.177.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.177.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyO6gEnn1dQrOSHHNULowAAARU"]
[Mon Apr 13 14:42:06.113153 2026] [:error] [pid 7228:tid 7244] [client 106.51.150.58:9170] [client 106.51.150.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.51.150.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyQPgEnn1dQrOSHHNURfQAAAQ4"]
[Mon Apr 13 14:42:16.333738 2026] [:error] [pid 63311:tid 63391] [client 106.51.150.58:8652] [client 106.51.150.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.51.150.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyQSKHjrGN1MqBCVFmpuQAAAJQ"]
[Mon Apr 13 14:46:23.719046 2026] [:error] [pid 57183:tid 57196] [client 106.206.202.157:59732] [client 106.206.202.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.206.202.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyRPzDO3t8R5NaxzYR7XQAAAUs"]
[Mon Apr 13 15:47:29.884698 2026] [:error] [pid 63406:tid 63429] [client 119.92.3.125:12004] [client 119.92.3.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.92.3.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyfkbHZEIkQ0Zmgp5rSogAAANI"]
[Mon Apr 13 15:47:39.947522 2026] [:error] [pid 63406:tid 63430] [client 119.92.3.125:9332] [client 119.92.3.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.92.3.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyfm7HZEIkQ0Zmgp5rSuwAAANM"]
[Mon Apr 13 15:47:50.522096 2026] [:error] [pid 9314:tid 9332] [client 119.92.3.125:10516] [client 119.92.3.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.92.3.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adyfpm_r4W8fX2GWyGSiRQAAAZA"]
[Mon Apr 13 16:30:23.441279 2026] [:error] [pid 7228:tid 7244] [client 43.135.135.57:37092] [client 43.135.135.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adypnwEnn1dQrOSHHNVMLgAAAQ4"]
[Mon Apr 13 17:03:03.701737 2026] [:error] [pid 7228:tid 7232] [client 104.244.79.40:51904] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adyxRwEnn1dQrOSHHNVWPwAAAQI"]
[Mon Apr 13 17:03:04.595577 2026] [proxy_fcgi:error] [pid 7228:tid 7232] [client 104.244.79.40:51904] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 13 17:03:06.767507 2026] [:error] [pid 63406:tid 63415] [client 104.244.79.40:51932] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adyxSrHZEIkQ0Zmgp5oUCQAAAMQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 17:03:07.831565 2026] [proxy_fcgi:error] [pid 63406:tid 63415] [client 104.244.79.40:51932] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 17:41:25.549893 2026] [:error] [pid 57183:tid 57204] [client 103.157.48.11:11896] [client 103.157.48.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.157.48.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ady6RTDO3t8R5NaxzYTiCgAAAVM"]
[Mon Apr 13 17:41:38.738422 2026] [:error] [pid 7228:tid 7233] [client 103.157.48.11:33783] [client 103.157.48.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.157.48.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ady6UgEnn1dQrOSHHNVjIQAAAQM"]
[Mon Apr 13 17:41:47.016312 2026] [:error] [pid 63406:tid 63421] [client 103.157.48.11:55905] [client 103.157.48.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.157.48.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ady6W7HZEIkQ0Zmgp5oy3QAAAMo"]
[Mon Apr 13 17:45:41.131077 2026] [:error] [pid 63406:tid 63416] [client 45.61.184.125:54568] [client 45.61.184.125] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||hotbooksbookeeping2.com|F|2"] [data "TX:0=application/qwik-json"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ady7RbHZEIkQ0Zmgp5o19gAAAMU"]
[Mon Apr 13 17:57:07.125372 2026] [:error] [pid 63309:tid 63322] [client 111.172.249.49:51275] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ady980pIKZ10weXpf0ULIgAAAAk"]
[Mon Apr 13 19:09:02.099995 2026] [:error] [pid 63311:tid 63386] [client 203.192.252.20:62013] [client 203.192.252.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.192.252.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adzOzqHjrGN1MqBCVFnr0AAAAI8"]
[Mon Apr 13 19:09:12.705326 2026] [:error] [pid 63311:tid 63371] [client 203.192.252.20:62683] [client 203.192.252.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.192.252.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adzO2KHjrGN1MqBCVFnr1QAAAIA"]
[Mon Apr 13 19:58:28.192089 2026] [:error] [pid 63309:tid 63323] [client 212.47.78.119:52023] [client 212.47.78.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "adzaZEpIKZ10weXpf0UhcwAAAAo"]
[Mon Apr 13 20:26:48.713211 2026] [:error] [pid 9314:tid 9325] [client 5.45.137.65:63325] [client 5.45.137.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.45.137.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adzhCG_r4W8fX2GWyGQUfwAAAYk"]
[Mon Apr 13 20:29:08.805123 2026] [:error] [pid 63311:tid 63391] [client 5.45.137.65:63060] [client 5.45.137.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.45.137.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adzhlKHjrGN1MqBCVFn_DgAAAJQ"]
[Mon Apr 13 20:29:22.337893 2026] [:error] [pid 63406:tid 63412] [client 5.45.137.65:61338] [client 5.45.137.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.45.137.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adzhorHZEIkQ0Zmgp5qk3gAAAME"]
[Mon Apr 13 20:39:21.977069 2026] [:error] [pid 63309:tid 63325] [client 103.77.107.178:57912] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "adzj-UpIKZ10weXpf0UoBgAAAAw"]
[Mon Apr 13 20:39:22.232139 2026] [:error] [pid 63310:tid 63353] [client 103.77.107.178:57928] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "adzj-noXpRU5ztmwPjJYBwAAAEk"]
[Mon Apr 13 21:01:07.108896 2026] [:error] [pid 63311:tid 63381] [client 122.161.48.110:2378] [client 122.161.48.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.48.110, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adzpE6HjrGN1MqBCVFkGcgAAAIo"]
[Mon Apr 13 21:03:58.705512 2026] [:error] [pid 63406:tid 63423] [client 171.76.38.26:52674] [client 171.76.38.26] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adzpvrHZEIkQ0Zmgp5q5JAAAAMw"]
[Mon Apr 13 21:05:21.349542 2026] [:error] [pid 63406:tid 63428] [client 171.76.38.26:53423] [client 171.76.38.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.76.38.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "adzqEbHZEIkQ0Zmgp5q6SAAAANE"]
[Mon Apr 13 21:16:14.814544 2026] [:error] [pid 9314:tid 9334] [client 122.161.48.110:12967] [client 122.161.48.110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adzsnm_r4W8fX2GWyGQo4QAAAZI"]
[Mon Apr 13 22:07:01.683725 2026] [:error] [pid 63406:tid 63427] [client 103.56.161.36:35674] [client 103.56.161.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.56.161.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adz4hbHZEIkQ0Zmgp5rowAAAANA"]
[Mon Apr 13 22:07:02.563129 2026] [proxy_fcgi:error] [pid 63406:tid 63427] [client 103.56.161.36:35674] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 13 22:07:04.009633 2026] [:error] [pid 63406:tid 63418] [client 103.56.161.36:35674] [client 103.56.161.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.56.161.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "adz4iLHZEIkQ0Zmgp5rowgAAAMc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 22:07:05.038418 2026] [proxy_fcgi:error] [pid 63406:tid 63418] [client 103.56.161.36:35674] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 22:42:21.073044 2026] [:error] [pid 7228:tid 7254] [client 183.82.29.64:29634] [client 183.82.29.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.29.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0AzQEnn1dQrOSHHNW9-QAAARg"]
[Mon Apr 13 22:42:31.351086 2026] [:error] [pid 9314:tid 9338] [client 183.82.29.64:28275] [client 183.82.29.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.29.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0A12_r4W8fX2GWyGRNxwAAAZY"]
[Mon Apr 13 22:42:42.182164 2026] [:error] [pid 7228:tid 7232] [client 183.82.29.64:29140] [client 183.82.29.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.29.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0A4gEnn1dQrOSHHNW9_AAAAQI"]
[Mon Apr 13 23:00:54.279568 2026] [:error] [pid 57183:tid 57190] [client 162.241.218.238:44264] [client 162.241.218.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.218.238, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad0FJjDO3t8R5NaxzYSLWwAAAUU"]
[Mon Apr 13 23:00:55.175665 2026] [proxy_fcgi:error] [pid 57183:tid 57190] [client 162.241.218.238:44264] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 13 23:00:55.530644 2026] [:error] [pid 57183:tid 57204] [client 162.241.218.238:44264] [client 162.241.218.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.218.238, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad0FJzDO3t8R5NaxzYSLXQAAAVM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 23:00:56.515406 2026] [proxy_fcgi:error] [pid 57183:tid 57204] [client 162.241.218.238:44264] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 23:28:15.455951 2026] [:error] [pid 63406:tid 63411] [client 162.144.3.190:13124] [client 162.144.3.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.3.190, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad0Lj7HZEIkQ0Zmgp5osdQAAAMA"]
[Mon Apr 13 23:28:16.524357 2026] [proxy_fcgi:error] [pid 63406:tid 63411] [client 162.144.3.190:13124] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 13 23:28:16.908032 2026] [:error] [pid 63406:tid 63425] [client 162.144.3.190:13124] [client 162.144.3.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.3.190, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad0LkLHZEIkQ0Zmgp5oseQAAAM4"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 23:28:17.980044 2026] [proxy_fcgi:error] [pid 63406:tid 63425] [client 162.144.3.190:13124] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 13 23:38:41.371357 2026] [:error] [pid 63406:tid 63425] [client 43.135.134.127:42636] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad0OAbHZEIkQ0Zmgp5ozzwAAAM4"]
[Tue Apr 14 00:11:45.724879 2026] [:error] [pid 57183:tid 57192] [client 122.168.88.10:26215] [client 122.168.88.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.168.88.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0VwTDO3t8R5NaxzYSvVgAAAUc"]
[Tue Apr 14 00:11:53.528478 2026] [:error] [pid 63406:tid 63433] [client 122.168.88.10:26519] [client 122.168.88.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.168.88.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0VybHZEIkQ0Zmgp5pH3gAAANY"]
[Tue Apr 14 00:12:03.639583 2026] [:error] [pid 9314:tid 9329] [client 122.168.88.10:28458] [client 122.168.88.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.168.88.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0V02_r4W8fX2GWyGRxpQAAAY0"]
[Tue Apr 14 00:37:02.739584 2026] [:error] [pid 63406:tid 63414] [client 152.58.185.103:64644] [client 152.58.185.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.185.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0brrHZEIkQ0Zmgp5pV8QAAAMM"]
[Tue Apr 14 00:37:12.874648 2026] [:error] [pid 9314:tid 9319] [client 152.58.185.103:65099] [client 152.58.185.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.185.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0buG_r4W8fX2GWyGR69AAAAYM"]
[Tue Apr 14 00:37:23.530849 2026] [:error] [pid 7228:tid 7238] [client 152.58.185.103:49305] [client 152.58.185.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.185.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0bwwEnn1dQrOSHHNXgBgAAAQg"]
[Tue Apr 14 00:56:54.726564 2026] [:error] [pid 60317:tid 60341] [client 39.48.89.102:50907] [client 39.48.89.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.48.89.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0gVrBo7Bc8I7P_P-9urwAAAME"]
[Tue Apr 14 00:57:04.899711 2026] [:error] [pid 59915:tid 59987] [client 39.48.89.102:51502] [client 39.48.89.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.48.89.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0gYIeTNdEemByf99gglQAAAJA"]
[Tue Apr 14 00:57:15.481274 2026] [:error] [pid 59915:tid 59980] [client 39.48.89.102:51958] [client 39.48.89.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.48.89.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad0ga4eTNdEemByf99ggwQAAAIk"]
[Tue Apr 14 01:29:01.379179 2026] [:error] [pid 59913:tid 59926] [client 5.161.84.165:52928] [client 5.161.84.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.84.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad0n3a5XvQ9C-gZtr2ymRwAAAAk"]
[Tue Apr 14 01:29:03.536688 2026] [proxy_fcgi:error] [pid 59913:tid 59926] [client 5.161.84.165:52928] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 14 01:29:03.895047 2026] [:error] [pid 59913:tid 59930] [client 5.161.84.165:52928] [client 5.161.84.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.161.84.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad0n365XvQ9C-gZtr2ymSgAAAA0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 14 01:29:04.898613 2026] [proxy_fcgi:error] [pid 59913:tid 59930] [client 5.161.84.165:52928] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 14 02:41:05.109573 2026] [:error] [pid 60317:tid 60360] [client 35.223.235.219:47982] [client 35.223.235.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.223.235.219, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad04wbBo7Bc8I7P_P--_gQAAANQ"]
[Tue Apr 14 02:41:05.993169 2026] [proxy_fcgi:error] [pid 60317:tid 60360] [client 35.223.235.219:47982] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 14 02:41:06.589079 2026] [:error] [pid 60317:tid 60358] [client 35.223.235.219:47982] [client 35.223.235.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.223.235.219, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad04wrBo7Bc8I7P_P--_hQAAANI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 14 02:41:07.590076 2026] [proxy_fcgi:error] [pid 60317:tid 60358] [client 35.223.235.219:47982] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 14 04:12:18.261392 2026] [:error] [pid 19689:tid 19773] [client 138.36.4.171:33766] [client 138.36.4.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.36.4.171, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad1OIpWU15arjG3aJyRAKQAAAJI"]
[Tue Apr 14 04:12:27.502350 2026] [:error] [pid 19689:tid 19772] [client 138.36.4.171:39891] [client 138.36.4.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.36.4.171, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad1OK5WU15arjG3aJyRAMAAAAJE"]
[Tue Apr 14 04:12:38.027137 2026] [:error] [pid 19688:tid 19737] [client 138.36.4.171:45418] [client 138.36.4.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.36.4.171, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad1ONoHoi57o76xPstKrvQAAAEk"]
[Tue Apr 14 04:35:42.438141 2026] [:error] [pid 19689:tid 19755] [client 154.0.171.161:33428] [client 154.0.171.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.0.171.161, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad1TnpWU15arjG3aJyRI8AAAAIA"]
[Tue Apr 14 04:35:44.704274 2026] [proxy_fcgi:error] [pid 19689:tid 19755] [client 154.0.171.161:33428] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 14 04:35:45.458907 2026] [:error] [pid 19689:tid 19763] [client 154.0.171.161:33428] [client 154.0.171.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.0.171.161, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad1ToZWU15arjG3aJyRI8gAAAIg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 14 04:35:46.484498 2026] [proxy_fcgi:error] [pid 19689:tid 19763] [client 154.0.171.161:33428] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 14 04:46:32.305346 2026] [:error] [pid 64393:tid 64401] [client 192.185.2.84:43426] [client 192.185.2.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.2.84, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad1WKOClKltJhW50hKO0aAAAAQY"]
[Tue Apr 14 04:46:33.143944 2026] [proxy_fcgi:error] [pid 64393:tid 64401] [client 192.185.2.84:43426] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 14 04:46:34.319659 2026] [:error] [pid 64393:tid 64402] [client 192.185.2.84:43426] [client 192.185.2.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.2.84, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad1WKuClKltJhW50hKO0agAAAQc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 14 04:46:35.328519 2026] [proxy_fcgi:error] [pid 64393:tid 64402] [client 192.185.2.84:43426] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 14 05:23:38.769162 2026] [:error] [pid 19689:tid 19769] [client 162.144.4.34:23626] [client 162.144.4.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.4.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad1e2pWU15arjG3aJyRYcAAAAI4"]
[Tue Apr 14 05:23:39.597692 2026] [proxy_fcgi:error] [pid 19689:tid 19769] [client 162.144.4.34:23626] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 14 05:23:40.651472 2026] [:error] [pid 19689:tid 19765] [client 162.144.4.34:23626] [client 162.144.4.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.4.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad1e3JWU15arjG3aJyRYcQAAAIo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 14 05:23:41.606761 2026] [proxy_fcgi:error] [pid 19689:tid 19765] [client 162.144.4.34:23626] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 14 05:34:57.531865 2026] [:error] [pid 64393:tid 64413] [client 181.118.35.196:47543] [client 181.118.35.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.118.35.196, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad1hgeClKltJhW50hKPPoAAAARI"]
[Tue Apr 14 05:35:07.220379 2026] [:error] [pid 19687:tid 19698] [client 181.118.35.196:47779] [client 181.118.35.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.118.35.196, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad1hi2BZImnR12CCWFo3zgAAAAI"]
[Tue Apr 14 05:44:16.458043 2026] [:error] [pid 19689:tid 19766] [client 190.80.51.186:58681] [client 190.80.51.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.80.51.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad1jsJWU15arjG3aJyRekgAAAIs"]
[Tue Apr 14 05:44:26.865081 2026] [:error] [pid 19688:tid 19735] [client 190.80.51.186:48464] [client 190.80.51.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.80.51.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad1juoHoi57o76xPstLCYgAAAEc"]
[Tue Apr 14 07:10:02.879925 2026] [:error] [pid 35629:tid 35679] [client 216.73.216.11:11037] [client 216.73.216.11] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.hotbooksbookeeping2.com|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "ad13yjY8VahzC1YJBSiragAAAFQ"]
[Tue Apr 14 08:52:46.521292 2026] [:error] [pid 35630:tid 35706] [client 43.157.180.116:59476] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad2P3jer0pVFxOiOauXGbQAAAJQ"]
[Tue Apr 14 09:24:36.197081 2026] [:error] [pid 37048:tid 37075] [client 216.73.216.11:52456] [client 216.73.216.11] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||hotbooksbookeeping2.com|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "ad2XVJ52Bo1OyzeXo_yhoQAAARg"]
[Tue Apr 14 09:37:40.519139 2026] [:error] [pid 35713:tid 35730] [client 186.212.205.37:57469] [client 186.212.205.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.212.205.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad2aZK6-hhx6ZepqOSnrjwAAAM4"]
[Tue Apr 14 09:37:49.256132 2026] [:error] [pid 37226:tid 37235] [client 186.212.205.37:58052] [client 186.212.205.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.212.205.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad2abZOA5-IQ0IVmQCrb4QAAAUc"]
[Tue Apr 14 09:38:00.775315 2026] [:error] [pid 4902:tid 4923] [client 186.212.205.37:58557] [client 186.212.205.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.212.205.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad2aeIv8vJvl9lGy39gurwAAAZM"]
[Tue Apr 14 10:40:09.010725 2026] [:error] [pid 4902:tid 4919] [client 103.174.122.72:58177] [client 103.174.122.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.122.72, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad2pCYv8vJvl9lGy39g7jQAAAY8"]
[Tue Apr 14 10:40:19.212759 2026] [:error] [pid 37226:tid 37240] [client 103.174.122.72:58767] [client 103.174.122.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.122.72, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad2pE5OA5-IQ0IVmQCrxvQAAAUw"]
[Tue Apr 14 10:40:29.960340 2026] [:error] [pid 35713:tid 35723] [client 103.174.122.72:59178] [client 103.174.122.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.122.72, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad2pHa6-hhx6ZepqOSkMJQAAAMc"]
[Tue Apr 14 11:46:57.329882 2026] [:error] [pid 35630:tid 35704] [client 179.189.65.255:5932] [client 179.189.65.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.189.65.255, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad24sTer0pVFxOiOauXkGAAAAJI"]
[Tue Apr 14 11:47:07.583623 2026] [:error] [pid 35713:tid 35716] [client 179.189.65.255:6951] [client 179.189.65.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.189.65.255, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad24u66-hhx6ZepqOSkqRAAAAMA"]
[Tue Apr 14 12:19:49.869580 2026] [:error] [pid 37226:tid 37246] [client 36.92.85.179:52303] [client 36.92.85.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.92.85.179, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad3AZZOA5-IQ0IVmQCoTtAAAAVI"]
[Tue Apr 14 12:35:44.699087 2026] [:error] [pid 37226:tid 37246] [client 43.130.34.74:47512] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad3EIJOA5-IQ0IVmQCoY5gAAAVI"]
[Tue Apr 14 13:33:33.762941 2026] [:error] [pid 35630:tid 35689] [client 13.202.89.72:37180] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "ad3RrTer0pVFxOiOauX_fgAAAIM"]
[Tue Apr 14 13:33:35.463821 2026] [:error] [pid 37048:tid 37056] [client 13.202.89.72:35994] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "ad3Rr552Bo1OyzeXo_ze-AAAAQY"]
[Tue Apr 14 13:33:36.099282 2026] [:error] [pid 35629:tid 35670] [client 13.202.89.72:36046] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "ad3RsDY8VahzC1YJBSjsqAAAAEs"]
[Tue Apr 14 13:33:36.750834 2026] [:error] [pid 35629:tid 35677] [client 13.202.89.72:36058] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "ad3RsDY8VahzC1YJBSjsqgAAAFI"]
[Tue Apr 14 13:33:37.383403 2026] [:error] [pid 35630:tid 35704] [client 13.202.89.72:36078] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging"] [unique_id "ad3RsTer0pVFxOiOauX_fwAAAJI"]
[Tue Apr 14 13:33:38.019345 2026] [:error] [pid 4902:tid 4919] [client 13.202.89.72:36092] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "ad3Rsov8vJvl9lGy39hdQgAAAY8"]
[Tue Apr 14 13:33:38.661543 2026] [:error] [pid 35629:tid 35683] [client 13.202.89.72:36104] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test"] [unique_id "ad3RsjY8VahzC1YJBSjsrQAAAFg"]
[Tue Apr 14 13:33:39.312008 2026] [:error] [pid 35630:tid 35710] [client 13.202.89.72:36108] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.remote"] [unique_id "ad3Rszer0pVFxOiOauX_hAAAAJg"]
[Tue Apr 14 13:33:39.945698 2026] [:error] [pid 37226:tid 37251] [client 13.202.89.72:36138] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "ad3Rs5OA5-IQ0IVmQConzwAAAVc"]
[Tue Apr 14 13:33:40.588067 2026] [:error] [pid 35630:tid 35703] [client 13.202.89.72:48948] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "ad3RtDer0pVFxOiOauX_iAAAAJE"]
[Tue Apr 14 13:33:41.220244 2026] [:error] [pid 35630:tid 35689] [client 13.202.89.72:48976] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "ad3RtTer0pVFxOiOauX_igAAAIM"]
[Tue Apr 14 13:33:41.869560 2026] [:error] [pid 35629:tid 35674] [client 13.202.89.72:48986] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old"] [unique_id "ad3RtTY8VahzC1YJBSjstgAAAE8"]
[Tue Apr 14 13:33:42.513129 2026] [:error] [pid 35630:tid 35700] [client 13.202.89.72:48998] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample"] [unique_id "ad3Rtjer0pVFxOiOauX_kQAAAI4"]
[Tue Apr 14 13:33:43.152470 2026] [:error] [pid 35713:tid 35738] [client 13.202.89.72:49012] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "ad3Rt66-hhx6ZepqOSlUkQAAANY"]
[Tue Apr 14 13:33:43.795068 2026] [:error] [pid 35629:tid 35670] [client 13.202.89.72:49034] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev"] [unique_id "ad3RtzY8VahzC1YJBSjsuQAAAEs"]
[Tue Apr 14 13:33:44.468573 2026] [:error] [pid 35630:tid 35687] [client 13.202.89.72:49044] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.prod"] [unique_id "ad3RuDer0pVFxOiOauX_lAAAAIE"]
[Tue Apr 14 13:33:45.183535 2026] [:error] [pid 35629:tid 35660] [client 13.202.89.72:49060] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.stage"] [unique_id "ad3RuTY8VahzC1YJBSjswQAAAEE"]
[Tue Apr 14 13:33:45.859353 2026] [:error] [pid 35629:tid 35662] [client 13.202.89.72:49076] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.ci"] [unique_id "ad3RuTY8VahzC1YJBSjsxQAAAEM"]
[Tue Apr 14 13:33:46.535290 2026] [:error] [pid 35629:tid 35664] [client 13.202.89.72:49090] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.docker"] [unique_id "ad3RujY8VahzC1YJBSjsywAAAEU"]
[Tue Apr 14 13:33:47.204906 2026] [:error] [pid 18776:tid 18792] [client 13.202.89.72:49106] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.live"] [unique_id "ad3Ru8IjIcAYZxezzAWgtgAAAc4"]
[Tue Apr 14 13:33:47.867778 2026] [:error] [pid 35629:tid 35679] [client 13.202.89.72:49122] [client 13.202.89.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.preprod"] [unique_id "ad3RuzY8VahzC1YJBSjs0gAAAFQ"]
[Tue Apr 14 13:43:28.052120 2026] [:error] [pid 37048:tid 37065] [client 39.49.172.40:56277] [client 39.49.172.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.49.172.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad3UAJ52Bo1OyzeXo_zfuwAAAQ8"]
[Tue Apr 14 13:43:29.742459 2026] [:error] [pid 18776:tid 18789] [client 39.49.172.40:56294] [client 39.49.172.40] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad3UAcIjIcAYZxezzAWjTgAAAcs"]
[Tue Apr 14 13:43:37.086940 2026] [:error] [pid 18776:tid 18798] [client 39.49.172.40:56294] [client 39.49.172.40] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad3UCcIjIcAYZxezzAWjVwAAAdQ"]
[Tue Apr 14 14:50:51.599078 2026] [:error] [pid 35629:tid 35683] [client 103.99.201.147:56153] [client 103.99.201.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.99.201.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad3jyzY8VahzC1YJBSgMyQAAAFg"]
[Tue Apr 14 14:55:17.716877 2026] [:error] [pid 35630:tid 35705] [client 103.99.201.147:57893] [client 103.99.201.147] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad3k1Ter0pVFxOiOauUqGQAAAJM"]
[Tue Apr 14 14:55:28.740461 2026] [:error] [pid 18776:tid 18780] [client 220.158.156.150:31922] [client 220.158.156.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.156.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad3k4MIjIcAYZxezzAWzEQAAAcI"]
[Tue Apr 14 14:55:39.423903 2026] [:error] [pid 35628:tid 35633] [client 220.158.156.150:24476] [client 220.158.156.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 220.158.156.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad3k6-fPm-ozGuwCWXLzAQAAAAE"]
[Tue Apr 14 15:31:12.819932 2026] [:error] [pid 59985:tid 59995] [client 122.182.179.54:59034] [client 122.182.179.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.182.179.54, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad3tQOgHaxkvLE6V1kkTrQAAAAI"]
[Tue Apr 14 15:31:23.447963 2026] [:error] [pid 60074:tid 60085] [client 122.182.179.54:59712] [client 122.182.179.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.182.179.54, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad3tS-tqnEmNU9vpHCnpdgAAAMk"]
[Tue Apr 14 15:31:33.866674 2026] [:error] [pid 60074:tid 60091] [client 122.182.179.54:60177] [client 122.182.179.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.182.179.54, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad3tVetqnEmNU9vpHCnpmAAAAM8"]
[Tue Apr 14 15:44:18.696634 2026] [:error] [pid 59985:tid 60001] [client 192.144.148.122:38902] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad3wUugHaxkvLE6V1kkWYwAAAAg"]
[Tue Apr 14 15:56:03.328208 2026] [:error] [pid 59987:tid 60064] [client 205.185.118.243:53763] [client 205.185.118.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.118.243, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad3zE1Wpk-Tfi6_vLKq2ngAAAJE"]
[Tue Apr 14 15:56:04.172785 2026] [proxy_fcgi:error] [pid 59987:tid 60064] [client 205.185.118.243:53763] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 14 15:56:05.755547 2026] [:error] [pid 59987:tid 60057] [client 205.185.118.243:53763] [client 205.185.118.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.118.243, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad3zFVWpk-Tfi6_vLKq2pAAAAIo"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Tue Apr 14 15:56:06.757610 2026] [proxy_fcgi:error] [pid 59987:tid 60057] [client 205.185.118.243:53763] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Tue Apr 14 16:14:10.662347 2026] [:error] [pid 59985:tid 59997] [client 43.159.152.4:39510] [client 43.159.152.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad33UugHaxkvLE6V1kkd6QAAAAQ"]
[Tue Apr 14 16:33:39.035904 2026] [:error] [pid 60074:tid 60080] [client 104.28.165.219:57195] [client 104.28.165.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.165.219, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad374-tqnEmNU9vpHCkRzwAAAMQ"]
[Tue Apr 14 16:33:54.364614 2026] [:error] [pid 59986:tid 60040] [client 104.28.165.219:55908] [client 104.28.165.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.165.219, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad378p6axKeW6bX4H7cGpwAAAFQ"]
[Tue Apr 14 16:34:07.698046 2026] [:error] [pid 60074:tid 60092] [client 104.28.165.219:56972] [client 104.28.165.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.165.219, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad37_-tqnEmNU9vpHCkSSwAAANA"]
[Tue Apr 14 16:41:05.405739 2026] [:error] [pid 59987:tid 60053] [client 107.189.12.178:62086] [client 107.189.12.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.12.178, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad39oVWpk-Tfi6_vLKrNYAAAAIY"]
[Tue Apr 14 16:41:06.295165 2026] [proxy_fcgi:error] [pid 59987:tid 60053] [client 107.189.12.178:62086] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 14 16:41:06.546627 2026] [:error] [pid 59987:tid 60067] [client 107.189.12.178:62086] [client 107.189.12.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.12.178, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad39olWpk-Tfi6_vLKrNYgAAAJQ"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Tue Apr 14 16:41:07.401706 2026] [proxy_fcgi:error] [pid 59987:tid 60067] [client 107.189.12.178:62086] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Tue Apr 14 17:32:28.810585 2026] [:error] [pid 60074:tid 60097] [client 67.144.16.170:52831] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ad4JrOtqnEmNU9vpHCk7PQAAANU"]
[Tue Apr 14 17:32:29.729512 2026] [:error] [pid 22177:tid 22179] [client 67.144.16.170:53217] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ad4JrYTVeJSXHDIlEDs0gAAAAQA"]
[Tue Apr 14 17:32:30.651142 2026] [:error] [pid 60074:tid 60088] [client 67.144.16.170:53229] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ad4JrutqnEmNU9vpHCk7QQAAAMw"]
[Tue Apr 14 17:32:33.508822 2026] [:error] [pid 22177:tid 22203] [client 67.144.16.170:53266] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ad4JsYTVeJSXHDIlEDs0iQAAARg"]
[Tue Apr 14 17:32:34.429871 2026] [:error] [pid 59986:tid 60024] [client 67.144.16.170:53280] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ad4Jsp6axKeW6bX4H7ccQAAAAEQ"]
[Tue Apr 14 17:32:36.914798 2026] [:error] [pid 22177:tid 22190] [client 67.144.16.170:53325] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ad4JtITVeJSXHDIlEDs0jgAAAQs"]
[Tue Apr 14 17:32:37.835344 2026] [:error] [pid 22177:tid 22192] [client 67.144.16.170:53349] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ad4JtYTVeJSXHDIlEDs0kQAAAQ0"]
[Tue Apr 14 17:32:40.144801 2026] [:error] [pid 22177:tid 22202] [client 67.144.16.170:53396] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ad4JuITVeJSXHDIlEDs0ngAAARc"]
[Tue Apr 14 17:32:41.080298 2026] [:error] [pid 22177:tid 22189] [client 67.144.16.170:53418] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ad4JuYTVeJSXHDIlEDs0nwAAAQo"]
[Tue Apr 14 17:32:43.640687 2026] [:error] [pid 59987:tid 60057] [client 67.144.16.170:53452] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ad4Ju1Wpk-Tfi6_vLKrjUQAAAIo"]
[Tue Apr 14 17:32:44.569600 2026] [:error] [pid 59987:tid 60051] [client 67.144.16.170:53468] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ad4JvFWpk-Tfi6_vLKrjVAAAAIQ"]
[Tue Apr 14 17:32:47.156644 2026] [:error] [pid 60074:tid 60091] [client 67.144.16.170:53506] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ad4Jv-tqnEmNU9vpHCk7XQAAAM8"]
[Tue Apr 14 17:32:48.134211 2026] [:error] [pid 22177:tid 22179] [client 67.144.16.170:53521] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ad4JwITVeJSXHDIlEDs0rQAAAQA"]
[Tue Apr 14 17:32:50.717428 2026] [:error] [pid 22177:tid 22196] [client 67.144.16.170:53557] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ad4JwoTVeJSXHDIlEDs0zAAAARE"]
[Tue Apr 14 17:32:51.698519 2026] [:error] [pid 60074:tid 60077] [client 67.144.16.170:53576] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ad4Jw-tqnEmNU9vpHCk7iAAAAME"]
[Tue Apr 14 17:32:54.633938 2026] [:error] [pid 22177:tid 22188] [client 67.144.16.170:53617] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ad4JxoTVeJSXHDIlEDs0zgAAAQk"]
[Tue Apr 14 17:32:55.581254 2026] [:error] [pid 59986:tid 60021] [client 67.144.16.170:53643] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ad4Jx56axKeW6bX4H7ccRwAAAEE"]
[Tue Apr 14 17:32:58.061707 2026] [:error] [pid 59986:tid 60022] [client 67.144.16.170:53692] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ad4Jyp6axKeW6bX4H7ccSAAAAEI"]
[Tue Apr 14 17:32:58.978056 2026] [:error] [pid 59987:tid 60059] [client 67.144.16.170:53721] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ad4JylWpk-Tfi6_vLKrjXQAAAIw"]
[Tue Apr 14 17:33:01.603184 2026] [:error] [pid 59987:tid 60066] [client 67.144.16.170:53797] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ad4JzVWpk-Tfi6_vLKrjYwAAAJM"]
[Tue Apr 14 17:33:02.524252 2026] [:error] [pid 59987:tid 60049] [client 67.144.16.170:53821] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ad4JzlWpk-Tfi6_vLKrjZgAAAII"]
[Tue Apr 14 17:33:05.242857 2026] [:error] [pid 59986:tid 60032] [client 67.144.16.170:53892] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ad4J0Z6axKeW6bX4H7ccUQAAAEw"]
[Tue Apr 14 17:33:06.159842 2026] [:error] [pid 22177:tid 22200] [client 67.144.16.170:53905] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ad4J0oTVeJSXHDIlEDs00gAAARU"]
[Tue Apr 14 17:33:08.797680 2026] [:error] [pid 60074:tid 60097] [client 67.144.16.170:53961] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "ad4J1OtqnEmNU9vpHCk7mQAAANU"]
[Tue Apr 14 17:33:09.779595 2026] [:error] [pid 60074:tid 60076] [client 67.144.16.170:53977] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "ad4J1etqnEmNU9vpHCk7nAAAAMA"]
[Tue Apr 14 17:33:12.244214 2026] [:error] [pid 60074:tid 60080] [client 67.144.16.170:54032] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "ad4J2OtqnEmNU9vpHCk7nwAAAMQ"]
[Tue Apr 14 17:33:13.181404 2026] [:error] [pid 60074:tid 60087] [client 67.144.16.170:54048] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "ad4J2etqnEmNU9vpHCk7oQAAAMs"]
[Tue Apr 14 17:33:15.680861 2026] [:error] [pid 22177:tid 22185] [client 67.144.16.170:54092] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "ad4J24TVeJSXHDIlEDs02AAAAQY"]
[Tue Apr 14 17:33:16.598024 2026] [:error] [pid 59987:tid 60069] [client 67.144.16.170:54117] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "ad4J3FWpk-Tfi6_vLKrjegAAAJY"]
[Tue Apr 14 17:33:20.637724 2026] [:error] [pid 22177:tid 22188] [client 67.144.16.170:54155] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "ad4J4ITVeJSXHDIlEDs04gAAAQk"]
[Tue Apr 14 17:33:21.555323 2026] [:error] [pid 60074:tid 60085] [client 67.144.16.170:54186] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "ad4J4etqnEmNU9vpHCk7sQAAAMk"]
[Tue Apr 14 17:33:24.110599 2026] [:error] [pid 59985:tid 60012] [client 67.144.16.170:54226] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "ad4J5OgHaxkvLE6V1kk2YQAAABM"]
[Tue Apr 14 17:33:25.045243 2026] [:error] [pid 22177:tid 22183] [client 67.144.16.170:54247] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "ad4J5YTVeJSXHDIlEDs05gAAAQQ"]
[Tue Apr 14 17:33:58.635292 2026] [:error] [pid 59985:tid 60007] [client 67.144.16.170:54369] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ad4KBugHaxkvLE6V1kk2hQAAAA4"]
[Tue Apr 14 17:33:59.553171 2026] [:error] [pid 60074:tid 60077] [client 67.144.16.170:50222] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ad4KB-tqnEmNU9vpHCk8AwAAAME"]
[Tue Apr 14 17:34:00.476523 2026] [:error] [pid 22177:tid 22199] [client 67.144.16.170:50231] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ad4KCITVeJSXHDIlEDs1QgAAARQ"]
[Tue Apr 14 17:34:02.898393 2026] [:error] [pid 22177:tid 22181] [client 67.144.16.170:50256] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ad4KCoTVeJSXHDIlEDs1RwAAAQI"]
[Tue Apr 14 17:34:03.817237 2026] [:error] [pid 60074:tid 60091] [client 67.144.16.170:50264] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ad4KC-tqnEmNU9vpHCk8BwAAAM8"]
[Tue Apr 14 17:34:06.315381 2026] [:error] [pid 22177:tid 22198] [client 67.144.16.170:50283] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ad4KDoTVeJSXHDIlEDs1TQAAARM"]
[Tue Apr 14 17:34:07.239683 2026] [:error] [pid 59987:tid 60068] [client 67.144.16.170:50295] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ad4KD1Wpk-Tfi6_vLKrjtQAAAJU"]
[Tue Apr 14 17:34:09.823904 2026] [:error] [pid 60074:tid 60084] [client 67.144.16.170:50316] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ad4KEetqnEmNU9vpHCk8CQAAAMg"]
[Tue Apr 14 17:34:10.751649 2026] [:error] [pid 59987:tid 60054] [client 67.144.16.170:50327] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ad4KElWpk-Tfi6_vLKrjtwAAAIc"]
[Tue Apr 14 17:34:13.397859 2026] [:error] [pid 60074:tid 60095] [client 67.144.16.170:50349] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ad4KFetqnEmNU9vpHCk8EwAAANM"]
[Tue Apr 14 17:34:14.331601 2026] [:error] [pid 59986:tid 60036] [client 67.144.16.170:50356] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ad4KFp6axKeW6bX4H7ccZgAAAFA"]
[Tue Apr 14 17:34:16.959069 2026] [:error] [pid 60074:tid 60096] [client 67.144.16.170:50375] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ad4KGOtqnEmNU9vpHCk8HAAAANQ"]
[Tue Apr 14 17:34:17.880399 2026] [:error] [pid 59987:tid 60049] [client 67.144.16.170:50382] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ad4KGVWpk-Tfi6_vLKrjvQAAAII"]
[Tue Apr 14 17:34:20.356495 2026] [:error] [pid 60074:tid 60095] [client 67.144.16.170:50397] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ad4KHOtqnEmNU9vpHCk8JwAAANM"]
[Tue Apr 14 17:34:21.282901 2026] [:error] [pid 22177:tid 22199] [client 67.144.16.170:50402] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ad4KHYTVeJSXHDIlEDs1XwAAARQ"]
[Tue Apr 14 17:34:23.815512 2026] [:error] [pid 22177:tid 22185] [client 67.144.16.170:50419] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ad4KH4TVeJSXHDIlEDs1aAAAAQY"]
[Tue Apr 14 17:34:24.735320 2026] [:error] [pid 22177:tid 22196] [client 67.144.16.170:50427] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ad4KIITVeJSXHDIlEDs1agAAARE"]
[Tue Apr 14 17:34:27.461557 2026] [:error] [pid 59987:tid 60070] [client 67.144.16.170:50445] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ad4KI1Wpk-Tfi6_vLKrj0gAAAJc"]
[Tue Apr 14 17:34:28.379344 2026] [:error] [pid 22177:tid 22202] [client 67.144.16.170:50451] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ad4KJITVeJSXHDIlEDs1cwAAARc"]
[Tue Apr 14 17:34:30.754136 2026] [:error] [pid 22177:tid 22194] [client 67.144.16.170:50463] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ad4KJoTVeJSXHDIlEDs1egAAAQ8"]
[Tue Apr 14 17:34:31.673643 2026] [:error] [pid 22177:tid 22199] [client 67.144.16.170:50471] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ad4KJ4TVeJSXHDIlEDs1fAAAARQ"]
[Tue Apr 14 17:34:34.138568 2026] [:error] [pid 59986:tid 60044] [client 67.144.16.170:50482] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ad4KKp6axKeW6bX4H7cccwAAAFg"]
[Tue Apr 14 17:34:35.060714 2026] [:error] [pid 59986:tid 60028] [client 67.144.16.170:50488] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ad4KK56axKeW6bX4H7ccdgAAAEg"]
[Tue Apr 14 17:34:37.666183 2026] [:error] [pid 60074:tid 60088] [client 67.144.16.170:50505] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ad4KLetqnEmNU9vpHCk8iAAAAMw"]
[Tue Apr 14 17:34:38.594704 2026] [:error] [pid 59986:tid 60036] [client 67.144.16.170:50517] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ad4KLp6axKeW6bX4H7ccwAAAAFA"]
[Tue Apr 14 17:34:40.983361 2026] [:error] [pid 22177:tid 22183] [client 67.144.16.170:50527] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ad4KMITVeJSXHDIlEDs10QAAAQQ"]
[Tue Apr 14 17:34:41.903804 2026] [:error] [pid 60074:tid 60097] [client 67.144.16.170:50538] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ad4KMetqnEmNU9vpHCk8tQAAANU"]
[Tue Apr 14 17:34:44.305163 2026] [:error] [pid 22177:tid 22199] [client 67.144.16.170:50555] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ad4KNITVeJSXHDIlEDs11wAAARQ"]
[Tue Apr 14 17:34:45.226809 2026] [:error] [pid 60074:tid 60099] [client 67.144.16.170:50560] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ad4KNetqnEmNU9vpHCk8uwAAANc"]
[Tue Apr 14 17:34:47.729140 2026] [:error] [pid 22177:tid 22184] [client 67.144.16.170:50579] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ad4KN4TVeJSXHDIlEDs13wAAAQU"]
[Tue Apr 14 17:34:48.662735 2026] [:error] [pid 22177:tid 22187] [client 67.144.16.170:50585] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ad4KOITVeJSXHDIlEDs14gAAAQg"]
[Tue Apr 14 17:34:51.675459 2026] [:error] [pid 59986:tid 60034] [client 67.144.16.170:50608] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ad4KO56axKeW6bX4H7cc1wAAAE4"]
[Tue Apr 14 17:34:52.591320 2026] [:error] [pid 59986:tid 60030] [client 67.144.16.170:50618] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ad4KPJ6axKeW6bX4H7cc2gAAAEo"]
[Tue Apr 14 17:34:55.084199 2026] [:error] [pid 22177:tid 22196] [client 67.144.16.170:50644] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "ad4KP4TVeJSXHDIlEDs16QAAARE"]
[Tue Apr 14 17:35:28.160493 2026] [:error] [pid 22177:tid 22188] [client 67.144.16.170:50759] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ad4KYITVeJSXHDIlEDs2GQAAAQk"]
[Tue Apr 14 17:35:29.076335 2026] [:error] [pid 59987:tid 60048] [client 67.144.16.170:51147] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ad4KYVWpk-Tfi6_vLKrkSwAAAIE"]
[Tue Apr 14 17:35:29.995389 2026] [:error] [pid 60074:tid 60086] [client 67.144.16.170:51155] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ad4KYetqnEmNU9vpHCk9WgAAAMo"]
[Tue Apr 14 17:35:32.466979 2026] [:error] [pid 59986:tid 60031] [client 67.144.16.170:51179] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ad4KZJ6axKeW6bX4H7cc7QAAAEs"]
[Tue Apr 14 17:35:33.383386 2026] [:error] [pid 59985:tid 59997] [client 67.144.16.170:51191] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ad4KZegHaxkvLE6V1kk23wAAAAQ"]
[Tue Apr 14 17:35:35.979308 2026] [:error] [pid 22177:tid 22179] [client 67.144.16.170:51216] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ad4KZ4TVeJSXHDIlEDs2IAAAAQA"]
[Tue Apr 14 17:35:36.907549 2026] [:error] [pid 22177:tid 22193] [client 67.144.16.170:51222] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ad4KaITVeJSXHDIlEDs2JAAAAQ4"]
[Tue Apr 14 17:35:39.593027 2026] [:error] [pid 59985:tid 60001] [client 67.144.16.170:51258] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ad4Ka-gHaxkvLE6V1kk26AAAAAg"]
[Tue Apr 14 17:35:40.509915 2026] [:error] [pid 59987:tid 60066] [client 67.144.16.170:51273] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ad4KbFWpk-Tfi6_vLKrkWgAAAJM"]
[Tue Apr 14 17:35:43.013423 2026] [:error] [pid 60074:tid 60080] [client 67.144.16.170:51313] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ad4Kb-tqnEmNU9vpHCk9kwAAAMQ"]
[Tue Apr 14 17:35:43.933270 2026] [:error] [pid 59985:tid 59997] [client 67.144.16.170:51329] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ad4Kb-gHaxkvLE6V1kk27AAAAAQ"]
[Tue Apr 14 17:35:46.432956 2026] [:error] [pid 22177:tid 22180] [client 67.144.16.170:51365] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ad4KcoTVeJSXHDIlEDs2OQAAAQE"]
[Tue Apr 14 17:35:47.355571 2026] [:error] [pid 22177:tid 22191] [client 67.144.16.170:51385] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ad4Kc4TVeJSXHDIlEDs2PgAAAQw"]
[Tue Apr 14 17:35:49.911175 2026] [:error] [pid 59986:tid 60020] [client 67.144.16.170:51418] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ad4KdZ6axKeW6bX4H7cc9AAAAEA"]
[Tue Apr 14 17:35:50.831976 2026] [:error] [pid 22177:tid 22202] [client 67.144.16.170:51436] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ad4KdoTVeJSXHDIlEDs2SQAAARc"]
[Tue Apr 14 17:35:53.575894 2026] [:error] [pid 60074:tid 60097] [client 67.144.16.170:51487] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ad4KeetqnEmNU9vpHCk9zQAAANU"]
[Tue Apr 14 17:35:54.496289 2026] [:error] [pid 22177:tid 22194] [client 67.144.16.170:51507] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ad4KeoTVeJSXHDIlEDs2UgAAAQ8"]
[Tue Apr 14 17:35:57.156840 2026] [:error] [pid 59985:tid 60000] [client 67.144.16.170:51563] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ad4KfegHaxkvLE6V1kk28gAAAAc"]
[Tue Apr 14 17:35:58.072847 2026] [:error] [pid 59985:tid 60007] [client 67.144.16.170:51583] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ad4KfugHaxkvLE6V1kk29AAAAA4"]
[Tue Apr 14 17:36:00.904041 2026] [:error] [pid 59986:tid 60023] [client 67.144.16.170:51628] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ad4KgJ6axKeW6bX4H7cdqAAAAEM"]
[Tue Apr 14 17:36:01.825316 2026] [:error] [pid 22177:tid 22190] [client 67.144.16.170:51653] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ad4KgYTVeJSXHDIlEDs2gwAAAQs"]
[Tue Apr 14 17:36:04.432930 2026] [:error] [pid 60074:tid 60095] [client 67.144.16.170:51703] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ad4KhOtqnEmNU9vpHCk-BgAAANM"]
[Tue Apr 14 17:36:05.359423 2026] [:error] [pid 22177:tid 22179] [client 67.144.16.170:51722] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ad4KhYTVeJSXHDIlEDs2iQAAAQA"]
[Tue Apr 14 17:36:07.965176 2026] [:error] [pid 22177:tid 22196] [client 67.144.16.170:51781] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ad4Kh4TVeJSXHDIlEDs2lAAAARE"]
[Tue Apr 14 17:36:08.890072 2026] [:error] [pid 22177:tid 22197] [client 67.144.16.170:51795] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ad4KiITVeJSXHDIlEDs2mQAAARI"]
[Tue Apr 14 17:36:11.372350 2026] [:error] [pid 60074:tid 60083] [client 67.144.16.170:51841] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ad4Ki-tqnEmNU9vpHCk-IAAAAMc"]
[Tue Apr 14 17:36:12.303791 2026] [:error] [pid 60074:tid 60076] [client 67.144.16.170:51865] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ad4KjOtqnEmNU9vpHCk-JQAAAMA"]
[Tue Apr 14 17:36:14.849439 2026] [:error] [pid 22177:tid 22197] [client 67.144.16.170:51909] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ad4KjoTVeJSXHDIlEDs2qQAAARI"]
[Tue Apr 14 17:36:15.772153 2026] [:error] [pid 60074:tid 60082] [client 67.144.16.170:51928] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ad4Kj-tqnEmNU9vpHCk-KQAAAMY"]
[Tue Apr 14 17:36:18.175169 2026] [:error] [pid 22177:tid 22199] [client 67.144.16.170:51972] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ad4KkoTVeJSXHDIlEDs2sAAAARQ"]
[Tue Apr 14 17:36:19.096364 2026] [:error] [pid 22177:tid 22190] [client 67.144.16.170:51989] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ad4Kk4TVeJSXHDIlEDs2sgAAAQs"]
[Tue Apr 14 17:36:22.175258 2026] [:error] [pid 60074:tid 60089] [client 67.144.16.170:52037] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ad4KlutqnEmNU9vpHCk-OQAAAM0"]
[Tue Apr 14 17:36:23.097478 2026] [:error] [pid 22177:tid 22196] [client 67.144.16.170:52065] [client 67.144.16.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ad4Kl4TVeJSXHDIlEDs2uwAAARE"]
[Tue Apr 14 18:19:18.100108 2026] [:error] [pid 22177:tid 22201] [client 205.185.115.18:52087] [client 205.185.115.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad4UpoTVeJSXHDIlEDtLfwAAARY"]
[Tue Apr 14 18:19:18.960322 2026] [proxy_fcgi:error] [pid 22177:tid 22201] [client 205.185.115.18:52087] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 14 18:19:19.328498 2026] [:error] [pid 22177:tid 22199] [client 205.185.115.18:52087] [client 205.185.115.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad4Up4TVeJSXHDIlEDtLiAAAARQ"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Tue Apr 14 18:19:20.192605 2026] [proxy_fcgi:error] [pid 22177:tid 22199] [client 205.185.115.18:52087] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Tue Apr 14 18:22:25.393701 2026] [:error] [pid 59985:tid 59993] [client 45.61.188.43:59137] [client 45.61.188.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad4VYegHaxkvLE6V1klBQwAAAAA"]
[Tue Apr 14 18:22:26.238466 2026] [proxy_fcgi:error] [pid 59985:tid 59993] [client 45.61.188.43:59137] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 14 18:22:26.503055 2026] [:error] [pid 59985:tid 60005] [client 45.61.188.43:59137] [client 45.61.188.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.188.43, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad4VYugHaxkvLE6V1klBRgAAAAw"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Tue Apr 14 18:22:27.526772 2026] [proxy_fcgi:error] [pid 59985:tid 60005] [client 45.61.188.43:59137] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Tue Apr 14 18:29:02.424524 2026] [:error] [pid 60074:tid 60092] [client 43.225.193.85:55793] [client 43.225.193.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.225.193.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad4W7utqnEmNU9vpHClhagAAANA"]
[Tue Apr 14 18:29:10.165791 2026] [:error] [pid 59986:tid 60030] [client 43.225.193.85:57045] [client 43.225.193.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.225.193.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad4W9p6axKeW6bX4H7crhQAAAEo"]
[Tue Apr 14 18:29:21.749979 2026] [:error] [pid 59987:tid 60057] [client 43.225.193.85:58375] [client 43.225.193.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.225.193.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad4XAVWpk-Tfi6_vLKr2zwAAAIo"]
[Tue Apr 14 19:10:55.144424 2026] [:error] [pid 59986:tid 60044] [client 202.51.88.140:44948] [client 202.51.88.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.51.88.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad4gv56axKeW6bX4H7c3IgAAAFg"]
[Tue Apr 14 19:26:05.432568 2026] [:error] [pid 59987:tid 60062] [client 181.214.250.104:43739] [client 181.214.250.104] ModSecurity: Access denied with code 403 (phase 2). Found 4 byte(s) in REQUEST_HEADERS:Cookie outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||hotbooksbookeeping2.com|F|3"] [data "REQUEST_HEADERS:Cookie=thimpress_hotel_booking_1=O:11:\\x22WPHB_Logger\\x22:1:{s:21:\\x22\\x00WPHB_Logger\\x00_handles\\x22;C:33:\\x22Requests_Utility_FilteredIterator\\x22:67:{x:i:0;a:1:{i:0;s:2:\\x22-1\\x22;};m:a:1:{s:11:\\x22\\x00*\\x00callback\\x22;s:7:\\x22phpinfo\\x22;}}}"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad4kTVWpk-Tfi6_vLKoSJAAAAI8"]
[Tue Apr 14 19:26:07.209555 2026] [:error] [pid 59986:tid 60021] [client 103.219.193.2:40095] [client 103.219.193.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\*.{0,399}\\\\*\\\\/)?select)" at ARGS:idProv. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||hotbooksbookeeping2.com|F|2"] [data "1unionselect1,(selectuser_loginfromwp_userswhereid=1),(selectuser_passfromwp_userswhereid=1)fromwp_users#"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ad4kT56axKeW6bX4H7c9HAAAAEE"]
[Tue Apr 14 19:26:09.246698 2026] [:error] [pid 22177:tid 22190] [client 82.26.82.157:35731] [client 82.26.82.157] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/admin-post.php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6482"] [id "232920"] [rev "1"] [msg "COMODO WAF: RFI vulnerability in social warfare plugin before 3.5.3 for WordPress(CVE-2019-9978)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-post.php"] [unique_id "ad4kUYTVeJSXHDIlEDtqPwAAAQs"]
[Tue Apr 14 19:26:11.106042 2026] [:error] [pid 59986:tid 60028] [client 64.118.133.85:41919] [client 64.118.133.85] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:lib_path. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||hotbooksbookeeping2.com|F|2"] [data "Matched Data: etc/passwd found within ARGS:lib_path: /etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ad4kU56axKeW6bX4H7c9KgAAAEg"]
[Tue Apr 14 19:26:13.851363 2026] [:error] [pid 59987:tid 60047] [client 82.152.91.252:43265] [client 82.152.91.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ad4kVVWpk-Tfi6_vLKoSYwAAAIA"]
[Tue Apr 14 19:26:14.043398 2026] [:error] [pid 59987:tid 60054] [client 195.86.192.225:43181] [client 195.86.192.225] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:field. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||hotbooksbookeeping2.com|F|2"] [data "Matched Data: etc/passwd found within ARGS:field: field:exec:head -1 /etc/passwd:null:null"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ad4kVlWpk-Tfi6_vLKoSZgAAAIc"]
[Tue Apr 14 19:40:16.615714 2026] [:error] [pid 59986:tid 60042] [client 157.85.102.167:38757] [client 157.85.102.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:[\\\\x22'`](?:;? ?\\\\b(?:having|select|union)\\\\b ?[^\\\\s]| ?! ?[\\\\x22'`\\\\w])|\\\\b(?:c(?:onnection_id|urrent_user)|database)\\\\b ?\\\\(|\\\\bunion\\\\b[\\\\w(\\\\s]*?select\\\\b|\\\\buser ?\\\\(|\\\\bschema ?\\\\(|\\\\bselect.{0,399}?\\\\w?\\\\buser ?\\\\(|\\\\binto[\\\\s+]+(?:dump|o ..." at MATCHED_VAR. [file "/usr/local/apache/modsecurity-cwaf/rules/22_SQL_SQLi.conf"] [line "27"] [id "211650"] [rev "12"] [msg "COMODO WAF: Detects MSSQL code execution and information gathering attempts||hotbooksbookeeping2.com|F|2"] [data "Matched Data: 0 union select sleep(7)  found within MATCHED_VAR: 0 union select sleep(7) "] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad4noJ6axKeW6bX4H7dCfAAAAFY"]
[Tue Apr 14 19:40:17.488289 2026] [:error] [pid 60074:tid 60076] [client 195.86.192.225:43823] [client 195.86.192.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\*.{0,399}\\\\*\\\\/)?select)" at ARGS:term. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||hotbooksbookeeping2.com|F|2"] [data "aaa'unionselect1,sleep(6),3---"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ad4noetqnEmNU9vpHCmEDQAAAMA"]
[Tue Apr 14 20:08:31.442213 2026] [:error] [pid 60074:tid 60086] [client 149.102.93.227:51279] [client 149.102.93.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.93.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad4uP-tqnEmNU9vpHCmKhwAAAMo"]
[Tue Apr 14 20:08:41.406089 2026] [:error] [pid 59986:tid 60038] [client 149.102.93.227:52522] [client 149.102.93.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.93.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad4uSZ6axKeW6bX4H7dOigAAAFI"]
[Tue Apr 14 21:03:28.450474 2026] [:error] [pid 60074:tid 60080] [client 102.223.18.46:57546] [client 102.223.18.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.223.18.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad47IOtqnEmNU9vpHCmfCAAAAMQ"]
[Tue Apr 14 21:06:58.511903 2026] [:error] [pid 60074:tid 60093] [client 223.233.83.140:17885] [client 223.233.83.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.233.83.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad478utqnEmNU9vpHCmg5QAAANE"]
[Tue Apr 14 21:07:00.084687 2026] [:error] [pid 59987:tid 60056] [client 223.233.83.140:4280] [client 223.233.83.140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad479FWpk-Tfi6_vLKozqwAAAIk"]
[Tue Apr 14 21:07:06.064972 2026] [:error] [pid 59987:tid 60070] [client 223.233.83.140:4280] [client 223.233.83.140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad47-lWpk-Tfi6_vLKozvQAAAJc"]
[Tue Apr 14 23:57:38.225428 2026] [:error] [pid 60074:tid 60087] [client 154.54.100.171:52146] [client 154.54.100.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "ad5j8utqnEmNU9vpHCnefAAAAMs"]
[Wed Apr 15 00:40:44.469221 2026] [:error] [pid 59986:tid 60028] [client 197.185.149.141:42798] [client 197.185.149.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.149.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad5uDJ6axKeW6bX4H7fxBQAAAEg"]
[Wed Apr 15 00:40:53.316156 2026] [:error] [pid 3810:tid 3819] [client 197.185.149.141:42801] [client 197.185.149.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.149.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad5uFcqc5XaYZhFXVGcA3gAAAYY"]
[Wed Apr 15 01:55:01.820471 2026] [:error] [pid 62432:tid 62435] [client 145.239.69.106:53362] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "ad5_dbPtNET7V_vfTPfeDwAAAUA"]
[Wed Apr 15 01:55:01.968348 2026] [:error] [pid 17804:tid 17833] [client 145.239.69.106:53350] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "ad5_dQAZKYxfpamecKeE5wAAANc"]
[Wed Apr 15 01:55:04.372468 2026] [:error] [pid 17734:tid 17749] [client 145.239.69.106:42076] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "ad5_eNN3xsztF3DFLWwPCgAAAIo"]
[Wed Apr 15 01:55:04.394052 2026] [:error] [pid 17804:tid 17822] [client 145.239.69.106:42062] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "ad5_eAAZKYxfpamecKeE6AAAAMw"]
[Wed Apr 15 01:55:06.764527 2026] [:error] [pid 62295:tid 62319] [client 145.239.69.106:42086] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "ad5_ehng-JDNFCa0BniIUwAAABQ"]
[Wed Apr 15 01:55:06.963072 2026] [:error] [pid 17866:tid 17890] [client 145.239.69.106:42092] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "ad5_erx_17kv70EUVIlMtQAAAZY"]
[Wed Apr 15 01:55:09.149567 2026] [:error] [pid 17804:tid 17810] [client 145.239.69.106:42108] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ad5_fQAZKYxfpamecKeE6wAAAMA"]
[Wed Apr 15 01:55:09.554009 2026] [:error] [pid 17804:tid 17827] [client 145.239.69.106:42118] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "ad5_fQAZKYxfpamecKeE7AAAANE"]
[Wed Apr 15 03:35:26.771141 2026] [:error] [pid 62296:tid 62327] [client 110.93.236.162:50101] [client 110.93.236.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.93.236.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad6W_sTNd04nWM2DK4TGPAAAAEA"]
[Wed Apr 15 03:35:36.408124 2026] [:error] [pid 62296:tid 62348] [client 110.93.236.162:62899] [client 110.93.236.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.93.236.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad6XCMTNd04nWM2DK4TGTwAAAFU"]
[Wed Apr 15 03:35:46.905117 2026] [:error] [pid 62432:tid 62442] [client 110.93.236.162:51018] [client 110.93.236.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.93.236.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad6XErPtNET7V_vfTPfxSQAAAUc"]
[Wed Apr 15 05:18:49.212686 2026] [:error] [pid 4067:tid 4148] [client 45.131.195.195:56211] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ad6vOe5XHBJU8ZrRxZ0tTwAAAJE"]
[Wed Apr 15 05:18:53.648529 2026] [:error] [pid 4065:tid 4088] [client 45.131.195.204:65043] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ad6vPQWArgJTHu2_6Oy-fgAAAAw"]
[Wed Apr 15 05:19:01.377028 2026] [:error] [pid 4066:tid 4116] [client 45.131.195.126:60301] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "ad6vRYC2YXfSPsC9O_BfeQAAAEw"]
[Wed Apr 15 05:19:05.704352 2026] [:error] [pid 4066:tid 4105] [client 45.131.195.191:42685] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "ad6vSYC2YXfSPsC9O_BfigAAAEE"]
[Wed Apr 15 05:19:13.347766 2026] [:error] [pid 45504:tid 45516] [client 45.131.195.195:28963] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ad6vUa3iO9_fE_IQEMkejgAAAQo"]
[Wed Apr 15 05:19:15.427449 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.170:27123] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ad6vU63iO9_fE_IQEMkelgAAAQs"]
[Wed Apr 15 05:19:16.330152 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.124:61935] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ad6vVB15U5D-N99n_jJvbAAAAMI"]
[Wed Apr 15 05:19:17.693053 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.251:26041] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ad6vVa3iO9_fE_IQEMkepQAAAQU"]
[Wed Apr 15 05:19:18.612253 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.204:36933] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ad6vVq3iO9_fE_IQEMkeqQAAAQg"]
[Wed Apr 15 05:19:19.629516 2026] [:error] [pid 4066:tid 4121] [client 45.131.195.150:60905] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ad6vV4C2YXfSPsC9O_BfvAAAAFE"]
[Wed Apr 15 05:19:21.634986 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.250:61659] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ad6vWa3iO9_fE_IQEMkewgAAAQ8"]
[Wed Apr 15 05:19:24.236985 2026] [:error] [pid 4065:tid 4078] [client 45.131.195.166:65093] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "ad6vXAWArgJTHu2_6Oy-mQAAAAI"]
[Wed Apr 15 05:19:27.544316 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.204:34743] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ad6vX63iO9_fE_IQEMke3wAAAQc"]
[Wed Apr 15 05:19:29.584852 2026] [:error] [pid 4169:tid 4195] [client 45.131.195.141:26775] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ad6vYR15U5D-N99n_jJvkAAAANQ"]
[Wed Apr 15 05:19:31.920515 2026] [:error] [pid 4065:tid 4090] [client 45.131.195.154:45029] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ad6vYwWArgJTHu2_6Oy-nAAAAA4"]
[Wed Apr 15 05:19:38.861103 2026] [:error] [pid 4066:tid 4120] [client 45.131.195.159:27959] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ad6vaoC2YXfSPsC9O_Bf-wAAAFA"]
[Wed Apr 15 05:19:41.240497 2026] [:error] [pid 45504:tid 45528] [client 45.131.195.120:45461] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ad6vba3iO9_fE_IQEMkfEAAAARY"]
[Wed Apr 15 05:19:44.950016 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.141:63603] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "ad6vcB15U5D-N99n_jJvqQAAAMM"]
[Wed Apr 15 05:19:47.188631 2026] [:error] [pid 4066:tid 4125] [client 45.131.195.190:47477] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "ad6vc4C2YXfSPsC9O_BgDgAAAFU"]
[Wed Apr 15 05:19:52.785916 2026] [:error] [pid 4065:tid 4086] [client 45.131.195.184:26751] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ad6veAWArgJTHu2_6Oy-tAAAAAo"]
[Wed Apr 15 05:19:55.308764 2026] [:error] [pid 4169:tid 4198] [client 45.131.195.161:28067] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ad6vex15U5D-N99n_jJvwgAAANc"]
[Wed Apr 15 05:19:57.431163 2026] [:error] [pid 4065:tid 4087] [client 45.131.195.190:32927] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "ad6vfQWArgJTHu2_6Oy-tgAAAAs"]
[Wed Apr 15 05:19:58.612153 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.136:40263] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ad6vfq3iO9_fE_IQEMkfOgAAARI"]
[Wed Apr 15 05:19:59.720528 2026] [:error] [pid 4067:tid 4132] [client 45.131.195.156:64471] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ad6vf-5XHBJU8ZrRxZ0tsAAAAIE"]
[Wed Apr 15 05:20:04.365152 2026] [:error] [pid 4067:tid 4147] [client 45.131.195.161:62795] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "ad6vhO5XHBJU8ZrRxZ0tuQAAAJA"]
[Wed Apr 15 05:20:05.675952 2026] [:error] [pid 4066:tid 4118] [client 45.131.195.195:31159] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "ad6vhYC2YXfSPsC9O_BgNQAAAE4"]
[Wed Apr 15 05:20:06.701680 2026] [:error] [pid 4065:tid 4082] [client 45.131.195.144:57509] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "ad6vhgWArgJTHu2_6Oy-zQAAAAY"]
[Wed Apr 15 05:20:18.411734 2026] [:error] [pid 45504:tid 45525] [client 45.131.195.250:30003] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "ad6vkq3iO9_fE_IQEMkfXwAAARM"]
[Wed Apr 15 05:20:24.101625 2026] [:error] [pid 4067:tid 4154] [client 45.131.195.184:23877] [client 45.131.195.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.184, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ad6vmO5XHBJU8ZrRxZ0t4wAAAJc"]
[Wed Apr 15 05:20:37.608340 2026] [:error] [pid 4067:tid 4139] [client 45.131.195.184:23877] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ad6vpe5XHBJU8ZrRxZ0uFwAAAIg"]
[Wed Apr 15 05:20:41.682930 2026] [:error] [pid 4067:tid 4142] [client 45.131.195.130:31933] [client 45.131.195.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.130, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ad6vqe5XHBJU8ZrRxZ0uJAAAAIs"]
[Wed Apr 15 05:20:43.922852 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.130:31933] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "ad6vq-5XHBJU8ZrRxZ0uKwAAAI4"]
[Wed Apr 15 05:20:54.965117 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.140:57997] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ad6vth15U5D-N99n_jJwBQAAAMQ"]
[Wed Apr 15 05:21:05.024966 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.116:24851] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ad6vwa3iO9_fE_IQEMkfsgAAAQQ"]
[Wed Apr 15 05:21:08.429806 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.174:20843] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ad6vxB15U5D-N99n_jJwQAAAAMg"]
[Wed Apr 15 05:21:12.901209 2026] [:error] [pid 4067:tid 4131] [client 45.131.195.170:33213] [client 45.131.195.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.170, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "ad6vyO5XHBJU8ZrRxZ0uVgAAAIA"]
[Wed Apr 15 05:21:13.985036 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.170:33213] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ad6vye5XHBJU8ZrRxZ0uVwAAAI4"]
[Wed Apr 15 05:21:33.361051 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.180:64609] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ad6v3a3iO9_fE_IQEMkgFgAAARQ"]
[Wed Apr 15 05:21:37.964976 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.251:36499] [client 45.131.195.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.251, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ad6v4a3iO9_fE_IQEMkgKgAAAQs"]
[Wed Apr 15 05:21:42.332080 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.251:36499] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "ad6v5q3iO9_fE_IQEMkgMgAAARI"]
[Wed Apr 15 05:21:44.588330 2026] [:error] [pid 4066:tid 4123] [client 45.131.195.195:27043] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "ad6v6IC2YXfSPsC9O_BgnQAAAFM"]
[Wed Apr 15 05:21:48.360781 2026] [:error] [pid 4169:tid 4195] [client 45.131.195.171:63725] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "ad6v7B15U5D-N99n_jJwiwAAANQ"]
[Wed Apr 15 05:21:52.747058 2026] [:error] [pid 4066:tid 4124] [client 45.131.195.204:64091] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "ad6v8IC2YXfSPsC9O_BgpgAAAFQ"]
[Wed Apr 15 05:21:53.654812 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.184:46805] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "ad6v8a3iO9_fE_IQEMkgXgAAAQM"]
[Wed Apr 15 05:22:00.349371 2026] [:error] [pid 4169:tid 4181] [client 45.131.195.165:27819] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ad6v-B15U5D-N99n_jJwmgAAAMk"]
[Wed Apr 15 05:22:02.466959 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.151:55377] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "ad6v-q3iO9_fE_IQEMkghAAAARc"]
[Wed Apr 15 05:22:06.480655 2026] [:error] [pid 4169:tid 4195] [client 45.131.195.139:31183] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "ad6v_h15U5D-N99n_jJwswAAANQ"]
[Wed Apr 15 05:22:11.419916 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.150:24371] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ad6wAx15U5D-N99n_jJw0QAAANU"]
[Wed Apr 15 05:22:14.847578 2026] [:error] [pid 4065:tid 4100] [client 45.131.195.145:53687] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "ad6wBgWArgJTHu2_6Oy_KQAAABg"]
[Wed Apr 15 05:22:19.456496 2026] [:error] [pid 4065:tid 4080] [client 45.131.195.150:25007] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ad6wCwWArgJTHu2_6Oy_NgAAAAQ"]
[Wed Apr 15 05:22:29.529884 2026] [:error] [pid 4065:tid 4079] [client 45.131.195.185:21229] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ad6wFQWArgJTHu2_6Oy_SQAAAAM"]
[Wed Apr 15 05:22:30.606080 2026] [:error] [pid 4066:tid 4114] [client 45.131.195.170:50855] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "ad6wFoC2YXfSPsC9O_BguwAAAEo"]
[Wed Apr 15 05:22:31.248879 2026] [:error] [pid 4067:tid 4149] [client 45.131.195.151:52009] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ad6wF-5XHBJU8ZrRxZ0uwAAAAJI"]
[Wed Apr 15 05:22:31.889437 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.204:46185] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ad6wF63iO9_fE_IQEMkgvgAAARQ"]
[Wed Apr 15 05:22:33.856604 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.144:20289] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ad6wGa3iO9_fE_IQEMkgxwAAAQA"]
[Wed Apr 15 05:22:34.882149 2026] [:error] [pid 45504:tid 45525] [client 45.131.195.124:42903] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "ad6wGq3iO9_fE_IQEMkgywAAARM"]
[Wed Apr 15 05:22:38.990299 2026] [:error] [pid 45504:tid 45516] [client 45.131.195.115:58637] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "ad6wHq3iO9_fE_IQEMkg3QAAAQo"]
[Wed Apr 15 05:22:39.998444 2026] [:error] [pid 4067:tid 4139] [client 45.131.195.146:58039] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "ad6wH-5XHBJU8ZrRxZ0uzwAAAIg"]
[Wed Apr 15 05:22:40.566008 2026] [:error] [pid 4067:tid 4131] [client 45.131.195.251:56229] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ad6wIO5XHBJU8ZrRxZ0u0gAAAIA"]
[Wed Apr 15 05:22:41.116452 2026] [:error] [pid 4169:tid 4183] [client 45.131.195.151:46955] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "ad6wIR15U5D-N99n_jJxIwAAAMs"]
[Wed Apr 15 05:22:43.079129 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.179:32647] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ad6wIx15U5D-N99n_jJxMQAAAMM"]
[Wed Apr 15 05:22:46.583476 2026] [:error] [pid 4066:tid 4111] [client 45.131.195.129:62181] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "ad6wJoC2YXfSPsC9O_Bg3QAAAEc"]
[Wed Apr 15 05:22:52.107964 2026] [:error] [pid 4067:tid 4132] [client 45.131.195.144:49911] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ad6wLO5XHBJU8ZrRxZ0u7wAAAIE"]
[Wed Apr 15 05:23:01.558116 2026] [:error] [pid 4067:tid 4155] [client 45.131.195.145:21849] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "ad6wNe5XHBJU8ZrRxZ0vAAAAAJg"]
[Wed Apr 15 05:23:05.369939 2026] [:error] [pid 4067:tid 4137] [client 45.131.195.161:42289] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ad6wOe5XHBJU8ZrRxZ0vBQAAAIY"]
[Wed Apr 15 05:23:07.535591 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.146:24581] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ad6wO63iO9_fE_IQEMkhMgAAAQQ"]
[Wed Apr 15 05:23:13.186284 2026] [:error] [pid 4066:tid 4107] [client 45.131.195.124:25207] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ad6wQYC2YXfSPsC9O_Bg-gAAAEM"]
[Wed Apr 15 05:23:18.108920 2026] [proxy_fcgi:error] [pid 4066:tid 4114] [client 45.131.195.161:25953] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:23:18.338838 2026] [proxy_fcgi:error] [pid 4066:tid 4106] [client 45.131.195.161:25953] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:23:18.563000 2026] [proxy_fcgi:error] [pid 4066:tid 4125] [client 45.131.195.161:25953] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:23:22.716844 2026] [:error] [pid 4066:tid 4123] [client 45.131.195.161:25953] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "ad6wSoC2YXfSPsC9O_BhGwAAAFM"]
[Wed Apr 15 05:23:23.145520 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.160:60989] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ad6wS-5XHBJU8ZrRxZ0vIwAAAI4"]
[Wed Apr 15 05:23:23.671371 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.166:42369] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ad6wS63iO9_fE_IQEMkhVQAAAQI"]
[Wed Apr 15 05:23:24.177726 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.180:53009] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ad6wTK3iO9_fE_IQEMkhVgAAARA"]
[Wed Apr 15 05:23:24.677379 2026] [:error] [pid 4065:tid 4093] [client 45.131.195.146:26599] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ad6wTAWArgJTHu2_6Oy_hQAAABE"]
[Wed Apr 15 05:23:25.215368 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.130:30481] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ad6wTa3iO9_fE_IQEMkhWgAAAQ4"]
[Wed Apr 15 05:23:26.807499 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.185:49675] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "ad6wTh15U5D-N99n_jJxgwAAAMQ"]
[Wed Apr 15 05:23:27.684620 2026] [:error] [pid 4066:tid 4123] [client 45.131.195.119:42595] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ad6wT4C2YXfSPsC9O_BhJQAAAFM"]
[Wed Apr 15 05:23:29.327365 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.161:49853] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ad6wUa3iO9_fE_IQEMkhaQAAARQ"]
[Wed Apr 15 05:23:30.581875 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.195:25673] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ad6wUq3iO9_fE_IQEMkhcwAAAQ8"]
[Wed Apr 15 05:23:33.555796 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.160:41737] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ad6wVa3iO9_fE_IQEMkhhQAAAQQ"]
[Wed Apr 15 05:23:36.805493 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.197:61881] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "ad6wWO5XHBJU8ZrRxZ0vMQAAAI4"]
[Wed Apr 15 05:23:40.709838 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.120:29645] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ad6wXK3iO9_fE_IQEMkhrgAAAQE"]
[Wed Apr 15 05:23:44.314347 2026] [:error] [pid 4169:tid 4200] [client 45.131.195.170:21071] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "ad6wYB15U5D-N99n_jJxngAAANg"]
[Wed Apr 15 05:23:49.035692 2026] [:error] [pid 4066:tid 4105] [client 45.131.195.115:55229] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ad6wZYC2YXfSPsC9O_BhSAAAAEE"]
[Wed Apr 15 05:23:55.262961 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.115:24397] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "ad6wa63iO9_fE_IQEMkh7gAAARc"]
[Wed Apr 15 05:23:57.736606 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.116:63965] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "ad6wba3iO9_fE_IQEMkh-QAAAQg"]
[Wed Apr 15 05:24:24.907328 2026] [:error] [pid 45504:tid 45519] [client 45.131.195.136:38905] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ad6wiK3iO9_fE_IQEMkiTAAAAQ0"]
[Wed Apr 15 05:24:26.031389 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.151:60745] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ad6wiq3iO9_fE_IQEMkiUwAAAQg"]
[Wed Apr 15 05:24:28.454585 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.159:20029] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ad6wjB15U5D-N99n_jJx9gAAAMc"]
[Wed Apr 15 05:24:31.938978 2026] [:error] [pid 4066:tid 4122] [client 45.131.195.189:34159] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ad6wj4C2YXfSPsC9O_BhrQAAAFI"]
[Wed Apr 15 05:24:33.109803 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.197:30077] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ad6wkR15U5D-N99n_jJyBAAAAMM"]
[Wed Apr 15 05:24:38.516970 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.175:44445] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad6wlq3iO9_fE_IQEMkivAAAAQM"]
[Wed Apr 15 05:24:39.641952 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.154:50505] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "ad6wlx15U5D-N99n_jJyEgAAAMI"]
[Wed Apr 15 05:24:46.160388 2026] [:error] [pid 4065:tid 4094] [client 45.131.195.180:35471] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ad6wngWArgJTHu2_6Oy_ywAAABI"]
[Wed Apr 15 05:24:47.868782 2026] [proxy_fcgi:error] [pid 45504:tid 45521] [client 45.131.195.154:56287] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:24:49.332061 2026] [:error] [pid 45504:tid 45515] [client 45.131.195.154:56287] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "ad6woa3iO9_fE_IQEMki3AAAAQk"]
[Wed Apr 15 05:24:50.324953 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.176:54799] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "ad6woq3iO9_fE_IQEMki3wAAAQQ"]
[Wed Apr 15 05:24:53.763608 2026] [:error] [pid 4065:tid 4094] [client 45.131.195.140:44133] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "ad6wpQWArgJTHu2_6Oy_0wAAABI"]
[Wed Apr 15 05:24:54.971316 2026] [:error] [pid 4066:tid 4104] [client 45.131.195.146:52013] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ad6wpoC2YXfSPsC9O_Bh1QAAAEA"]
[Wed Apr 15 05:25:05.483481 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.154:39581] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "ad6wsa3iO9_fE_IQEMkjGgAAAQY"]
[Wed Apr 15 05:25:06.981161 2026] [:error] [pid 45504:tid 45527] [client 45.131.195.141:57481] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ad6wsq3iO9_fE_IQEMkjHgAAARU"]
[Wed Apr 15 05:25:12.592615 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.124:21221] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "ad6wuK3iO9_fE_IQEMkjNAAAARc"]
[Wed Apr 15 05:25:13.580731 2026] [:error] [pid 45504:tid 45515] [client 45.131.195.176:59713] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ad6wua3iO9_fE_IQEMkjOQAAAQk"]
[Wed Apr 15 05:25:14.561753 2026] [:error] [pid 4067:tid 4142] [client 45.131.195.165:31333] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ad6wuu5XHBJU8ZrRxZ0vlwAAAIs"]
[Wed Apr 15 05:25:21.389531 2026] [:error] [pid 4067:tid 4154] [client 45.131.195.160:53909] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ad6wwe5XHBJU8ZrRxZ0vpwAAAJc"]
[Wed Apr 15 05:25:23.659910 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.251:46105] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ad6ww63iO9_fE_IQEMkjbAAAAQM"]
[Wed Apr 15 05:25:32.591447 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.160:64217] [client 45.131.195.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "ad6wzB15U5D-N99n_jJymwAAAMI"]
[Wed Apr 15 05:25:39.159019 2026] [:error] [pid 4169:tid 4181] [client 45.131.195.160:64217] [client 45.131.195.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.160, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ad6w0x15U5D-N99n_jJypAAAAMk"]
[Wed Apr 15 05:25:51.313752 2026] [proxy_fcgi:error] [pid 4169:tid 4196] [client 45.131.195.160:64217] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:26:09.534713 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.160:64217] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "ad6w8R15U5D-N99n_jJy6AAAAMM"]
[Wed Apr 15 05:26:15.404444 2026] [:error] [pid 45504:tid 45518] [client 45.131.195.190:20003] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ad6w963iO9_fE_IQEMkj2wAAAQw"]
[Wed Apr 15 05:26:19.098451 2026] [:error] [pid 4066:tid 4115] [client 45.131.195.140:47919] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ad6w-4C2YXfSPsC9O_BiNgAAAEs"]
[Wed Apr 15 05:26:30.525721 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.179:34961] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ad6xBq3iO9_fE_IQEMkj9QAAAQc"]
[Wed Apr 15 05:26:33.662541 2026] [:error] [pid 4169:tid 4186] [client 45.131.195.140:20537] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ad6xCR15U5D-N99n_jJzJAAAAM0"]
[Wed Apr 15 05:26:35.987673 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.135:59853] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ad6xC-5XHBJU8ZrRxZ0v-wAAAI4"]
[Wed Apr 15 05:26:42.031646 2026] [proxy_fcgi:error] [pid 4169:tid 4178] [client 45.131.195.151:25399] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:26:42.284800 2026] [proxy_fcgi:error] [pid 4169:tid 4177] [client 45.131.195.151:25399] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:26:42.621782 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.151:25399] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ad6xEh15U5D-N99n_jJzNwAAAMg"]
[Wed Apr 15 05:26:43.777955 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.151:23261] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ad6xE63iO9_fE_IQEMkkCwAAAQU"]
[Wed Apr 15 05:26:52.742580 2026] [:error] [pid 4169:tid 4198] [client 45.131.195.250:50337] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ad6xHB15U5D-N99n_jJzWgAAANc"]
[Wed Apr 15 05:26:55.307070 2026] [:error] [pid 4067:tid 4140] [client 45.131.195.170:47463] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "ad6xH-5XHBJU8ZrRxZ0wIAAAAIk"]
[Wed Apr 15 05:27:00.758669 2026] [:error] [pid 4067:tid 4155] [client 45.131.195.155:49259] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ad6xJO5XHBJU8ZrRxZ0wRQAAAJg"]
[Wed Apr 15 05:27:10.140035 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.174:36701] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ad6xLq3iO9_fE_IQEMkkbwAAAQY"]
[Wed Apr 15 05:27:11.083095 2026] [proxy_fcgi:error] [pid 4065:tid 4090] [client 45.131.195.151:54337] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:27:13.725193 2026] [:error] [pid 4065:tid 4084] [client 45.131.195.151:54337] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ad6xMQWArgJTHu2_6OzAZQAAAAg"]
[Wed Apr 15 05:27:20.857310 2026] [proxy_fcgi:error] [pid 45504:tid 45512] [client 45.131.195.169:42397] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:27:22.266090 2026] [:error] [pid 45504:tid 45515] [client 45.131.195.169:42397] [client 45.131.195.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.169, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "ad6xOq3iO9_fE_IQEMkkpAAAAQk"]
[Wed Apr 15 05:27:28.217452 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.169:42397] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "ad6xQK3iO9_fE_IQEMkkwQAAARc"]
[Wed Apr 15 05:27:30.732624 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.125:51985] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "ad6xQh15U5D-N99n_jJzrAAAANU"]
[Wed Apr 15 05:27:35.411896 2026] [:error] [pid 45504:tid 45518] [client 45.131.195.175:53987] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "ad6xR63iO9_fE_IQEMkk1gAAAQw"]
[Wed Apr 15 05:27:39.884015 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.149:40631] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "ad6xS63iO9_fE_IQEMkk5QAAAQs"]
[Wed Apr 15 05:27:42.034795 2026] [:error] [pid 4066:tid 4107] [client 45.131.195.119:46165] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ad6xToC2YXfSPsC9O_BijQAAAEM"]
[Wed Apr 15 05:27:46.516993 2026] [:error] [pid 4066:tid 4123] [client 45.131.195.124:30461] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "ad6xUoC2YXfSPsC9O_BipgAAAFM"]
[Wed Apr 15 05:27:51.485486 2026] [proxy_fcgi:error] [pid 45504:tid 45516] [client 45.131.195.169:57981] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:27:51.730350 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.169:57981] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "ad6xV63iO9_fE_IQEMklBgAAAQU"]
[Wed Apr 15 05:27:52.856803 2026] [proxy_fcgi:error] [pid 4066:tid 4105] [client 45.131.195.176:26491] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Wed Apr 15 05:27:54.093217 2026] [:error] [pid 4067:tid 4132] [client 45.131.195.149:55949] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "ad6xWu5XHBJU8ZrRxZ0wdQAAAIE"]
[Wed Apr 15 05:27:55.253608 2026] [:error] [pid 4067:tid 4145] [client 45.131.195.155:43483] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "ad6xW-5XHBJU8ZrRxZ0wdwAAAI4"]
[Wed Apr 15 05:27:56.057330 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.171:29345] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ad6xXK3iO9_fE_IQEMklDAAAAQA"]
[Wed Apr 15 05:27:57.374142 2026] [:error] [pid 4066:tid 4115] [client 45.131.195.170:42607] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "ad6xXYC2YXfSPsC9O_BiuwAAAEs"]
[Wed Apr 15 05:27:58.455009 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.131:51513] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "ad6xXh15U5D-N99n_jJz4AAAANU"]
[Wed Apr 15 05:27:59.517711 2026] [:error] [pid 4169:tid 4173] [client 45.131.195.146:59917] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "ad6xXx15U5D-N99n_jJz5gAAAME"]
[Wed Apr 15 05:28:03.167158 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.185:52389] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "ad6xYx15U5D-N99n_jJz9AAAAMQ"]
[Wed Apr 15 05:28:04.765436 2026] [:error] [pid 4066:tid 4114] [client 45.131.195.189:30783] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "ad6xZIC2YXfSPsC9O_BizAAAAEo"]
[Wed Apr 15 05:28:06.265924 2026] [:error] [pid 45504:tid 45519] [client 45.131.195.160:29423] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "ad6xZq3iO9_fE_IQEMklFgAAAQ0"]
[Wed Apr 15 05:28:08.000600 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.190:44933] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "ad6xZ63iO9_fE_IQEMklGAAAAQU"]
[Wed Apr 15 05:28:09.653965 2026] [:error] [pid 45504:tid 45527] [client 45.131.195.134:50821] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "ad6xaa3iO9_fE_IQEMklHgAAARU"]
[Wed Apr 15 05:28:11.175454 2026] [proxy_fcgi:error] [pid 4067:tid 4142] [client 45.131.195.190:61575] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:28:13.731384 2026] [:error] [pid 4067:tid 4136] [client 45.131.195.190:61575] [client 45.131.195.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.190, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "ad6xbe5XHBJU8ZrRxZ0wmwAAAIU"]
[Wed Apr 15 05:28:19.726523 2026] [:error] [pid 4067:tid 4132] [client 45.131.195.190:61575] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "ad6xc-5XHBJU8ZrRxZ0wtAAAAIE"]
[Wed Apr 15 05:28:41.436423 2026] [:error] [pid 4067:tid 4151] [client 45.131.195.125:47137] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ad6xie5XHBJU8ZrRxZ0w5gAAAJQ"]
[Wed Apr 15 05:28:43.539118 2026] [:error] [pid 4067:tid 4135] [client 45.131.195.165:24927] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "ad6xi-5XHBJU8ZrRxZ0w6gAAAIQ"]
[Wed Apr 15 05:28:45.676845 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.190:37381] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "ad6xja3iO9_fE_IQEMkljQAAAQA"]
[Wed Apr 15 05:28:54.683105 2026] [:error] [pid 4169:tid 4187] [client 45.131.195.251:59229] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "ad6xlh15U5D-N99n_jJ0WQAAAM4"]
[Wed Apr 15 05:28:56.344325 2026] [:error] [pid 4066:tid 4115] [client 45.131.195.161:49565] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "ad6xmIC2YXfSPsC9O_Bi8gAAAEs"]
[Wed Apr 15 05:28:57.847855 2026] [:error] [pid 4067:tid 4133] [client 45.131.195.174:58767] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "ad6xme5XHBJU8ZrRxZ0w9gAAAII"]
[Wed Apr 15 05:29:04.366162 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.125:46019] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "ad6xoK3iO9_fE_IQEMkl3QAAAQg"]
[Wed Apr 15 05:29:06.808022 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.135:26295] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "ad6xoh15U5D-N99n_jJ0cAAAAMQ"]
[Wed Apr 15 05:29:10.947717 2026] [:error] [pid 4169:tid 4186] [client 45.131.195.131:53047] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "ad6xph15U5D-N99n_jJ0fwAAAM0"]
[Wed Apr 15 05:29:25.097447 2026] [:error] [pid 4066:tid 4121] [client 45.131.195.131:50545] [client 45.131.195.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "ad6xtYC2YXfSPsC9O_BjIQAAAFE"]
[Wed Apr 15 05:29:27.868677 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.251:58313] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "ad6xt63iO9_fE_IQEMkmTQAAARI"]
[Wed Apr 15 05:29:37.111106 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.134:23595] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "ad6xwa3iO9_fE_IQEMkmggAAAQM"]
[Wed Apr 15 05:29:42.115123 2026] [:error] [pid 45504:tid 45530] [client 45.131.195.154:20979] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "ad6xxq3iO9_fE_IQEMkmlAAAARg"]
[Wed Apr 15 05:29:49.512640 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.184:25561] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "ad6xza3iO9_fE_IQEMkmwQAAAQI"]
[Wed Apr 15 05:29:55.331862 2026] [:error] [pid 4067:tid 4139] [client 45.131.195.146:26275] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "ad6x0-5XHBJU8ZrRxZ0xRAAAAIg"]
[Wed Apr 15 05:29:59.360290 2026] [:error] [pid 4169:tid 4178] [client 45.131.195.189:64613] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "ad6x1x15U5D-N99n_jJ0zAAAAMY"]
[Wed Apr 15 05:30:00.378626 2026] [:error] [pid 4067:tid 4147] [client 45.131.195.124:50721] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "ad6x2O5XHBJU8ZrRxZ0xSQAAAJA"]
[Wed Apr 15 05:30:07.650342 2026] [:error] [pid 4066:tid 4116] [client 45.131.195.121:58265] [client 45.131.195.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "ad6x34C2YXfSPsC9O_BjXwAAAEw"]
[Wed Apr 15 05:30:14.482740 2026] [:error] [pid 4169:tid 4192] [client 45.131.195.204:44795] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "ad6x5h15U5D-N99n_jJ05gAAANI"]
[Wed Apr 15 05:30:20.049185 2026] [:error] [pid 4169:tid 4177] [client 45.131.195.174:43541] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ad6x7B15U5D-N99n_jJ0_QAAAMU"]
[Wed Apr 15 05:30:20.995151 2026] [:error] [pid 4065:tid 4077] [client 45.131.195.169:62605] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "ad6x7AWArgJTHu2_6OzBEQAAAAE"]
[Wed Apr 15 05:30:23.570226 2026] [:error] [pid 4065:tid 4098] [client 45.131.195.250:48059] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "ad6x7wWArgJTHu2_6OzBFAAAABY"]
[Wed Apr 15 05:30:27.827386 2026] [:error] [pid 4065:tid 4082] [client 45.131.195.150:61379] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "ad6x8wWArgJTHu2_6OzBGgAAAAY"]
[Wed Apr 15 05:30:28.843673 2026] [:error] [pid 4067:tid 4149] [client 45.131.195.150:20127] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "ad6x9O5XHBJU8ZrRxZ0xewAAAJI"]
[Wed Apr 15 05:30:37.962960 2026] [:error] [pid 4067:tid 4143] [client 45.131.195.251:37021] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "ad6x_e5XHBJU8ZrRxZ0xlgAAAIw"]
[Wed Apr 15 05:30:41.451562 2026] [:error] [pid 4065:tid 4095] [client 45.131.195.251:62585] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "ad6yAQWArgJTHu2_6OzBKgAAABM"]
[Wed Apr 15 05:30:42.644074 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.141:47825] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "ad6yAh15U5D-N99n_jJ1XQAAANU"]
[Wed Apr 15 05:30:47.223686 2026] [:error] [pid 4067:tid 4153] [client 45.131.195.170:50201] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "ad6yB-5XHBJU8ZrRxZ0xwgAAAJY"]
[Wed Apr 15 05:30:49.628294 2026] [:error] [pid 4067:tid 4155] [client 45.131.195.125:45073] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "ad6yCe5XHBJU8ZrRxZ0xyAAAAJg"]
[Wed Apr 15 05:30:56.235861 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.141:58205] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "ad6yEK3iO9_fE_IQEMknIwAAAQs"]
[Wed Apr 15 05:31:00.119284 2026] [:error] [pid 4065:tid 4084] [client 45.131.195.156:57897] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "ad6yFAWArgJTHu2_6OzBPwAAAAg"]
[Wed Apr 15 05:31:03.835420 2026] [:error] [pid 45504:tid 45519] [client 45.131.195.186:31655] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "ad6yF63iO9_fE_IQEMknMgAAAQ0"]
[Wed Apr 15 05:31:06.280849 2026] [:error] [pid 4169:tid 4188] [client 45.131.195.125:48839] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "ad6yGh15U5D-N99n_jJ1lQAAAM8"]
[Wed Apr 15 05:31:08.611918 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.141:50343] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "ad6yHK3iO9_fE_IQEMknPwAAAQg"]
[Wed Apr 15 05:31:09.769707 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.144:40903] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "ad6yHa3iO9_fE_IQEMknQgAAAQI"]
[Wed Apr 15 05:31:10.968568 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.124:38183] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "ad6yHq3iO9_fE_IQEMknRwAAAQQ"]
[Wed Apr 15 05:31:19.872609 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.181:45939] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "ad6yJ63iO9_fE_IQEMknYgAAAQg"]
[Wed Apr 15 05:31:24.923985 2026] [:error] [pid 4065:tid 4095] [client 45.131.195.170:44993] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "ad6yLAWArgJTHu2_6OzBXQAAABM"]
[Wed Apr 15 05:31:28.522345 2026] [:error] [pid 4066:tid 4104] [client 45.131.195.204:23633] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "ad6yMIC2YXfSPsC9O_BjwAAAAEA"]
[Wed Apr 15 05:31:32.210132 2026] [:error] [pid 4066:tid 4117] [client 45.131.195.191:52155] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "ad6yNIC2YXfSPsC9O_BjygAAAE0"]
[Wed Apr 15 05:31:39.106274 2026] [:error] [pid 4066:tid 4104] [client 45.131.195.129:27255] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "ad6yO4C2YXfSPsC9O_Bj4wAAAEA"]
[Wed Apr 15 05:31:41.450741 2026] [:error] [pid 4065:tid 4079] [client 45.131.195.250:44417] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "ad6yPQWArgJTHu2_6OzBdgAAAAM"]
[Wed Apr 15 05:31:44.234419 2026] [:error] [pid 4066:tid 4118] [client 45.131.195.130:32505] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "ad6yQIC2YXfSPsC9O_Bj6AAAAE4"]
[Wed Apr 15 05:31:47.564748 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.191:51727] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "ad6yQ63iO9_fE_IQEMknpgAAARI"]
[Wed Apr 15 05:31:57.552376 2026] [:error] [pid 4067:tid 4146] [client 45.131.195.191:56097] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "ad6yTe5XHBJU8ZrRxZ0ymgAAAI8"]
[Wed Apr 15 05:31:58.612715 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.174:60631] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "ad6yTq3iO9_fE_IQEMknsQAAAQU"]
[Wed Apr 15 05:32:03.139723 2026] [:error] [pid 4169:tid 4177] [client 45.131.195.155:44459] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "ad6yUx15U5D-N99n_jJ2BgAAAMU"]
[Wed Apr 15 05:32:04.359470 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.130:53575] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ad6yVB15U5D-N99n_jJ2CAAAAMA"]
[Wed Apr 15 05:32:09.747140 2026] [:error] [pid 4065:tid 4083] [client 45.131.195.185:25273] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "ad6yWQWArgJTHu2_6OzBnwAAAAc"]
[Wed Apr 15 05:32:10.720042 2026] [:error] [pid 4169:tid 4200] [client 45.131.195.125:22593] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "ad6yWh15U5D-N99n_jJ2FgAAANg"]
[Wed Apr 15 05:32:11.768673 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.129:36337] [client 45.131.195.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.129, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "ad6yW63iO9_fE_IQEMkn2gAAAQg"]
[Wed Apr 15 05:32:11.772744 2026] [proxy_fcgi:error] [pid 45504:tid 45514] [client 45.131.195.129:36337] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:32:12.190527 2026] [:error] [pid 45504:tid 45519] [client 45.131.195.129:36337] [client 45.131.195.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "ad6yXK3iO9_fE_IQEMkn2wAAAQ0"]
[Wed Apr 15 05:32:16.632255 2026] [:error] [pid 45504:tid 45523] [client 45.131.195.154:51705] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ad6yYK3iO9_fE_IQEMkn9QAAARE"]
[Wed Apr 15 05:32:17.801371 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.160:50001] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "ad6yYa3iO9_fE_IQEMkn9wAAAQg"]
[Wed Apr 15 05:32:26.528427 2026] [:error] [pid 4065:tid 4079] [client 45.131.195.176:21065] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "ad6yagWArgJTHu2_6OzBwgAAAAM"]
[Wed Apr 15 05:32:27.662754 2026] [:error] [pid 4066:tid 4105] [client 45.131.195.171:44557] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "ad6ya4C2YXfSPsC9O_BkFAAAAEE"]
[Wed Apr 15 05:32:31.115208 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.190:27489] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "ad6yb63iO9_fE_IQEMkoiAAAAQI"]
[Wed Apr 15 05:32:38.984908 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.125:64131] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "ad6ydq3iO9_fE_IQEMkopgAAAQM"]
[Wed Apr 15 05:32:40.107407 2026] [proxy_fcgi:error] [pid 45504:tid 45528] [client 45.131.195.150:22995] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:32:40.399330 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.150:22995] [client 45.131.195.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "ad6yeK3iO9_fE_IQEMkosAAAAQE"]
[Wed Apr 15 05:32:42.978811 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.150:22995] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "ad6yeq3iO9_fE_IQEMkowAAAARc"]
[Wed Apr 15 05:32:48.605178 2026] [:error] [pid 4067:tid 4138] [client 45.131.195.190:50317] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "ad6ygO5XHBJU8ZrRxZ0zGQAAAIc"]
[Wed Apr 15 05:32:52.068086 2026] [:error] [pid 4067:tid 4140] [client 45.131.195.125:22849] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "ad6yhO5XHBJU8ZrRxZ0zIwAAAIk"]
[Wed Apr 15 05:32:54.303288 2026] [:error] [pid 4067:tid 4134] [client 45.131.195.166:40345] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "ad6yhu5XHBJU8ZrRxZ0zKwAAAIM"]
[Wed Apr 15 05:32:59.096254 2026] [:error] [pid 4065:tid 4096] [client 45.131.195.185:52997] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "ad6yiwWArgJTHu2_6OzB2gAAABQ"]
[Wed Apr 15 05:33:03.199792 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.165:25423] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "ad6yjx15U5D-N99n_jJ2gAAAAMA"]
[Wed Apr 15 05:33:09.052585 2026] [:error] [pid 4169:tid 4176] [client 45.131.195.171:20217] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "ad6ylR15U5D-N99n_jJ2lgAAAMQ"]
[Wed Apr 15 05:33:10.146137 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.160:49261] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "ad6ylh15U5D-N99n_jJ2mgAAAMM"]
[Wed Apr 15 05:33:12.488511 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.175:28267] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "ad6ymB15U5D-N99n_jJ2oQAAAMc"]
[Wed Apr 15 05:33:21.049915 2026] [:error] [pid 4065:tid 4092] [client 45.131.195.185:55047] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "ad6yoQWArgJTHu2_6OzB8AAAABA"]
[Wed Apr 15 05:33:25.597007 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.175:36443] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "ad6ypa3iO9_fE_IQEMkpaAAAAQc"]
[Wed Apr 15 05:33:25.841037 2026] [:error] [pid 45504:tid 45525] [client 45.131.195.175:36443] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "ad6ypa3iO9_fE_IQEMkpagAAARM"]
[Wed Apr 15 05:33:29.512508 2026] [:error] [pid 4065:tid 4080] [client 45.131.195.150:64567] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "ad6yqQWArgJTHu2_6OzB-wAAAAQ"]
[Wed Apr 15 05:33:30.685875 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.116:32565] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "ad6yqq3iO9_fE_IQEMkpgwAAAQ8"]
[Wed Apr 15 05:33:38.240092 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.166:36985] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "ad6ysq3iO9_fE_IQEMkppgAAARQ"]
[Wed Apr 15 05:33:42.031373 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.115:36127] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "ad6yth15U5D-N99n_jJ3GQAAAMA"]
[Wed Apr 15 05:33:44.450068 2026] [:error] [pid 4169:tid 4177] [client 45.131.195.155:36727] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "ad6yuB15U5D-N99n_jJ3IAAAAMU"]
[Wed Apr 15 05:33:51.369215 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.175:22383] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "ad6yv63iO9_fE_IQEMkpyAAAARA"]
[Wed Apr 15 05:33:52.353645 2026] [:error] [pid 4169:tid 4198] [client 45.131.195.119:29475] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "ad6ywB15U5D-N99n_jJ3LQAAANc"]
[Wed Apr 15 05:33:54.468101 2026] [:error] [pid 4067:tid 4143] [client 45.131.195.155:31537] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "ad6ywu5XHBJU8ZrRxZ0zqAAAAIw"]
[Wed Apr 15 05:33:55.516665 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.169:23447] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "ad6ywx15U5D-N99n_jJ3NwAAAMA"]
[Wed Apr 15 05:34:00.528128 2026] [:error] [pid 4067:tid 4150] [client 45.131.195.189:38909] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "ad6yyO5XHBJU8ZrRxZ0zxAAAAJM"]
[Wed Apr 15 05:34:03.887535 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.181:28331] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "ad6yy63iO9_fE_IQEMkp3wAAAQE"]
[Wed Apr 15 05:34:05.163753 2026] [:error] [pid 4067:tid 4149] [client 45.131.195.146:26653] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "ad6yze5XHBJU8ZrRxZ0zywAAAJI"]
[Wed Apr 15 05:34:11.320744 2026] [:error] [pid 4067:tid 4140] [client 45.131.195.186:33245] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "ad6y0-5XHBJU8ZrRxZ0z3QAAAIk"]
[Wed Apr 15 05:34:15.113353 2026] [:error] [pid 4169:tid 4195] [client 45.131.195.251:65429] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "ad6y1x15U5D-N99n_jJ3XwAAANQ"]
[Wed Apr 15 05:34:19.898864 2026] [:error] [pid 45504:tid 45530] [client 45.131.195.126:21661] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "ad6y263iO9_fE_IQEMkqDAAAARg"]
[Wed Apr 15 05:34:20.952918 2026] [:error] [pid 4066:tid 4123] [client 45.131.195.197:40497] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "ad6y3IC2YXfSPsC9O_BkwwAAAFM"]
[Wed Apr 15 05:34:22.033324 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.250:45601] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "ad6y3q3iO9_fE_IQEMkqFwAAARI"]
[Wed Apr 15 05:34:25.463560 2026] [:error] [pid 4065:tid 4087] [client 45.131.195.139:30567] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "ad6y4QWArgJTHu2_6OzCOgAAAAs"]
[Wed Apr 15 05:34:29.290724 2026] [:error] [pid 4066:tid 4118] [client 45.131.195.149:22819] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "ad6y5YC2YXfSPsC9O_BkywAAAE4"]
[Wed Apr 15 05:34:31.021026 2026] [:error] [pid 4066:tid 4127] [client 45.131.195.140:43339] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "ad6y54C2YXfSPsC9O_BkzAAAAFc"]
[Wed Apr 15 05:34:33.987959 2026] [:error] [pid 4066:tid 4111] [client 45.131.195.150:35291] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "ad6y6YC2YXfSPsC9O_Bk0AAAAEc"]
[Wed Apr 15 05:34:34.956099 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.179:24289] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "ad6y6q3iO9_fE_IQEMkqTAAAAQs"]
[Wed Apr 15 05:34:38.664415 2026] [:error] [pid 4067:tid 4134] [client 45.131.195.171:24245] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "ad6y7u5XHBJU8ZrRxZ00EAAAAIM"]
[Wed Apr 15 05:34:40.885160 2026] [:error] [pid 4169:tid 4181] [client 45.131.195.124:62811] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "ad6y8B15U5D-N99n_jJ3nwAAAMk"]
[Wed Apr 15 05:34:41.901547 2026] [:error] [pid 4169:tid 4183] [client 45.131.195.115:41593] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "ad6y8R15U5D-N99n_jJ3oQAAAMs"]
[Wed Apr 15 05:34:42.815316 2026] [:error] [pid 4169:tid 4178] [client 45.131.195.161:33539] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "ad6y8h15U5D-N99n_jJ3pwAAAMY"]
[Wed Apr 15 05:34:46.505799 2026] [:error] [pid 4065:tid 4083] [client 45.131.195.195:65375] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "ad6y9gWArgJTHu2_6OzCQwAAAAc"]
[Wed Apr 15 05:34:50.308714 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.119:62707] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "ad6y-h15U5D-N99n_jJ32QAAAMA"]
[Wed Apr 15 05:34:52.844371 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.169:63587] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "ad6y_K3iO9_fE_IQEMkqfQAAAQI"]
[Wed Apr 15 05:34:54.124899 2026] [proxy_fcgi:error] [pid 45504:tid 45510] [client 45.131.195.179:56703] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Wed Apr 15 05:34:55.107510 2026] [:error] [pid 4067:tid 4153] [client 45.131.195.134:35907] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "ad6y_-5XHBJU8ZrRxZ00JQAAAJY"]
[Wed Apr 15 05:35:03.614589 2026] [:error] [pid 4067:tid 4138] [client 45.131.195.149:40309] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "ad6zB-5XHBJU8ZrRxZ00MwAAAIc"]
[Wed Apr 15 05:35:04.751392 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.164:27523] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "ad6zCB15U5D-N99n_jJ4DwAAAMA"]
[Wed Apr 15 05:35:08.259033 2026] [:error] [pid 4169:tid 4191] [client 45.131.195.186:52779] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "ad6zDB15U5D-N99n_jJ4JAAAANE"]
[Wed Apr 15 05:35:14.719050 2026] [:error] [pid 4169:tid 4183] [client 45.131.195.169:48045] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "ad6zEh15U5D-N99n_jJ4PAAAAMs"]
[Wed Apr 15 05:35:18.309966 2026] [:error] [pid 45504:tid 45527] [client 45.131.195.164:59485] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "ad6zFq3iO9_fE_IQEMkqxgAAARU"]
[Wed Apr 15 05:35:22.151774 2026] [:error] [pid 4169:tid 4198] [client 45.131.195.161:20211] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "ad6zGh15U5D-N99n_jJ4VQAAANc"]
[Wed Apr 15 05:35:24.870376 2026] [:error] [pid 4067:tid 4154] [client 45.131.195.181:49875] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "ad6zHO5XHBJU8ZrRxZ00XQAAAJc"]
[Wed Apr 15 05:35:27.388759 2026] [:error] [pid 4067:tid 4138] [client 45.131.195.170:22435] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "ad6zH-5XHBJU8ZrRxZ00agAAAIc"]
[Wed Apr 15 05:35:33.173071 2026] [:error] [pid 4169:tid 4188] [client 45.131.195.120:50695] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "ad6zJR15U5D-N99n_jJ4eQAAAM8"]
[Wed Apr 15 05:35:38.544059 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.116:49433] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "ad6zKq3iO9_fE_IQEMkrBAAAAQM"]
[Wed Apr 15 05:35:39.893048 2026] [proxy_fcgi:error] [pid 4065:tid 4091] [client 45.131.195.139:46019] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:35:40.116553 2026] [:error] [pid 4065:tid 4097] [client 45.131.195.139:46019] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "ad6zLAWArgJTHu2_6OzCegAAABU"]
[Wed Apr 15 05:35:41.239790 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.156:50221] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "ad6zLa3iO9_fE_IQEMkrDgAAARI"]
[Wed Apr 15 05:35:45.750674 2026] [:error] [pid 4065:tid 4084] [client 45.131.195.164:40281] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "ad6zMQWArgJTHu2_6OzCjQAAAAg"]
[Wed Apr 15 05:35:46.765085 2026] [:error] [pid 4066:tid 4118] [client 45.131.195.190:56769] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "ad6zMoC2YXfSPsC9O_BlFwAAAE4"]
[Wed Apr 15 05:35:55.677485 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.119:39823] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "ad6zO63iO9_fE_IQEMkrSQAAARA"]
[Wed Apr 15 05:35:57.786795 2026] [:error] [pid 4066:tid 4110] [client 45.131.195.191:36093] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "ad6zPYC2YXfSPsC9O_BlJwAAAEY"]
[Wed Apr 15 05:36:00.250171 2026] [:error] [pid 4067:tid 4135] [client 45.131.195.125:61711] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/log.php"] [unique_id "ad6zQO5XHBJU8ZrRxZ00qAAAAIQ"]
[Wed Apr 15 05:36:01.644998 2026] [:error] [pid 4067:tid 4136] [client 45.131.195.180:37959] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "ad6zQe5XHBJU8ZrRxZ00rAAAAIU"]
[Wed Apr 15 05:36:02.636696 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.179:25153] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "ad6zQh15U5D-N99n_jJ4xAAAAMA"]
[Wed Apr 15 05:36:03.835712 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.130:24505] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/aw.php"] [unique_id "ad6zQ63iO9_fE_IQEMkrbAAAAQY"]
[Wed Apr 15 05:36:10.063584 2026] [:error] [pid 4169:tid 4197] [client 45.131.195.184:63561] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "ad6zSh15U5D-N99n_jJ46wAAANY"]
[Wed Apr 15 05:36:11.131689 2026] [:error] [pid 4169:tid 4192] [client 45.131.195.155:35661] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/install.php"] [unique_id "ad6zSx15U5D-N99n_jJ47QAAANI"]
[Wed Apr 15 05:36:14.497433 2026] [:error] [pid 4067:tid 4142] [client 45.131.195.159:20619] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "ad6zTu5XHBJU8ZrRxZ00wAAAAIs"]
[Wed Apr 15 05:36:15.503522 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.155:51075] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "ad6zTx15U5D-N99n_jJ5AgAAAMg"]
[Wed Apr 15 05:36:20.270033 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.190:56115] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/template-less.php"] [unique_id "ad6zVK3iO9_fE_IQEMkrggAAAQI"]
[Wed Apr 15 05:36:21.333005 2026] [:error] [pid 4067:tid 4139] [client 45.131.195.197:55599] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "ad6zVe5XHBJU8ZrRxZ00xQAAAIg"]
[Wed Apr 15 05:36:29.861130 2026] [:error] [pid 45504:tid 45527] [client 45.131.195.181:53727] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/min.php"] [unique_id "ad6zXa3iO9_fE_IQEMkroQAAARU"]
[Wed Apr 15 05:36:31.004591 2026] [:error] [pid 45504:tid 45516] [client 45.131.195.170:23243] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "ad6zX63iO9_fE_IQEMkrpAAAAQo"]
[Wed Apr 15 05:36:33.882892 2026] [:error] [pid 45504:tid 45518] [client 45.131.195.134:43053] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "ad6zYa3iO9_fE_IQEMkrrgAAAQw"]
[Wed Apr 15 05:36:36.397542 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.116:32057] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "ad6zZK3iO9_fE_IQEMkrvgAAAQc"]
[Wed Apr 15 05:36:38.716795 2026] [:error] [pid 4065:tid 4098] [client 45.131.195.175:30853] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/load.php"] [unique_id "ad6zZgWArgJTHu2_6OzC7QAAABY"]
[Wed Apr 15 05:36:39.878348 2026] [:error] [pid 4067:tid 4150] [client 45.131.195.121:58649] [client 45.131.195.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "ad6zZ-5XHBJU8ZrRxZ002QAAAJM"]
[Wed Apr 15 05:36:41.075127 2026] [:error] [pid 4066:tid 4126] [client 45.131.195.176:42421] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "ad6zaYC2YXfSPsC9O_BlUgAAAFY"]
[Wed Apr 15 05:36:45.560484 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.189:44917] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "ad6zba3iO9_fE_IQEMkr-AAAAQI"]
[Wed Apr 15 05:36:48.040513 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.139:39553] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "ad6zcK3iO9_fE_IQEMksDgAAAQE"]
[Wed Apr 15 05:36:51.545635 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.156:57343] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "ad6zc63iO9_fE_IQEMksKQAAAQs"]
[Wed Apr 15 05:36:52.752683 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.115:33535] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "ad6zdK3iO9_fE_IQEMksNQAAAQY"]
[Wed Apr 15 05:36:53.843832 2026] [:error] [pid 45504:tid 45515] [client 45.131.195.130:28091] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "ad6zda3iO9_fE_IQEMksPgAAAQk"]
[Wed Apr 15 05:37:04.436585 2026] [:error] [pid 4066:tid 4117] [client 45.131.195.176:65171] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/system.php"] [unique_id "ad6zgIC2YXfSPsC9O_BlbwAAAE0"]
[Wed Apr 15 05:37:06.731761 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.170:34323] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "ad6zgq3iO9_fE_IQEMksjQAAAQA"]
[Wed Apr 15 05:37:10.979993 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.166:53959] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "ad6zhq3iO9_fE_IQEMksrgAAAQ4"]
[Wed Apr 15 05:37:11.876662 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.176:46703] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "ad6zh63iO9_fE_IQEMkstQAAAQY"]
[Wed Apr 15 05:37:13.149879 2026] [:error] [pid 4066:tid 4128] [client 45.131.195.195:41939] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "ad6ziYC2YXfSPsC9O_BlewAAAFg"]
[Wed Apr 15 05:37:16.702291 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.135:58855] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "ad6zjK3iO9_fE_IQEMks0QAAAQg"]
[Wed Apr 15 05:37:26.146484 2026] [:error] [pid 4065:tid 4087] [client 45.131.195.179:24821] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-pie.php"] [unique_id "ad6zlgWArgJTHu2_6OzDQQAAAAs"]
[Wed Apr 15 05:37:32.179725 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.141:38085] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ad6znK3iO9_fE_IQEMktHwAAAQE"]
[Wed Apr 15 05:37:32.654879 2026] [:error] [pid 4067:tid 4142] [client 45.131.195.185:54345] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "ad6znO5XHBJU8ZrRxZ01MQAAAIs"]
[Wed Apr 15 05:37:36.270739 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.135:35485] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/nav-menu.php"] [unique_id "ad6zoK3iO9_fE_IQEMktNAAAAQI"]
[Wed Apr 15 05:37:36.974603 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.139:34397] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ad6zoB15U5D-N99n_jJ5ygAAAMg"]
[Wed Apr 15 05:37:38.239698 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.126:33227] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/user.php"] [unique_id "ad6zoq3iO9_fE_IQEMktPwAAARQ"]
[Wed Apr 15 05:37:46.264996 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.119:49099] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "ad6zqh15U5D-N99n_jJ54gAAAMg"]
[Wed Apr 15 05:37:51.412057 2026] [:error] [pid 45504:tid 45525] [client 45.131.195.141:47305] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "ad6zr63iO9_fE_IQEMktdAAAARM"]
[Wed Apr 15 05:37:53.167268 2026] [:error] [pid 45504:tid 45516] [client 45.131.195.144:59033] [client 45.131.195.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "ad6zsa3iO9_fE_IQEMktfwAAAQo"]
[Wed Apr 15 05:37:55.976014 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.251:29523] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "ad6zs63iO9_fE_IQEMktiQAAARI"]
[Wed Apr 15 05:37:57.484062 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.175:25757] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "ad6zta3iO9_fE_IQEMktkQAAAQA"]
[Wed Apr 15 05:37:59.893053 2026] [:error] [pid 4067:tid 4149] [client 45.131.195.184:25321] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ad6zt-5XHBJU8ZrRxZ01fwAAAJI"]
[Wed Apr 15 05:38:00.594720 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.130:36129] [client 45.131.195.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.130, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "ad6zuK3iO9_fE_IQEMktrwAAARc"]
[Wed Apr 15 05:38:02.557095 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.179:48157] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ad6zuq3iO9_fE_IQEMktwAAAAQU"]
[Wed Apr 15 05:38:03.029246 2026] [:error] [pid 45504:tid 45516] [client 45.131.195.130:36129] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "ad6zu63iO9_fE_IQEMktxgAAAQo"]
[Wed Apr 15 05:38:03.746983 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.141:21659] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ad6zux15U5D-N99n_jJ5_gAAAMg"]
[Wed Apr 15 05:38:04.079581 2026] [:error] [pid 4169:tid 4193] [client 45.131.195.204:42969] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "ad6zvB15U5D-N99n_jJ6AAAAANM"]
[Wed Apr 15 05:38:05.115009 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.156:24087] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ad6zva3iO9_fE_IQEMkt0wAAAQg"]
[Wed Apr 15 05:38:05.190577 2026] [:error] [pid 4066:tid 4104] [client 45.131.195.164:46883] [client 45.131.195.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "ad6zvYC2YXfSPsC9O_BlqwAAAEA"]
[Wed Apr 15 05:38:07.157029 2026] [:error] [pid 4066:tid 4124] [client 45.131.195.160:51397] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ad6zv4C2YXfSPsC9O_BlrwAAAFQ"]
[Wed Apr 15 05:38:08.085615 2026] [:error] [pid 4067:tid 4136] [client 45.131.195.151:32371] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ad6zwO5XHBJU8ZrRxZ01igAAAIU"]
[Wed Apr 15 05:38:10.747287 2026] [:error] [pid 4066:tid 4127] [client 45.131.195.180:35561] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ad6zwoC2YXfSPsC9O_BltgAAAFc"]
[Wed Apr 15 05:38:14.631896 2026] [:error] [pid 45504:tid 45519] [client 45.131.195.185:64011] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "ad6zxq3iO9_fE_IQEMkuDAAAAQ0"]
[Wed Apr 15 05:38:15.105000 2026] [:error] [pid 45504:tid 45518] [client 45.131.195.165:43115] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "ad6zx63iO9_fE_IQEMkuDgAAAQw"]
[Wed Apr 15 05:38:18.745434 2026] [:error] [pid 45504:tid 45529] [client 45.131.195.124:59383] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ad6zyq3iO9_fE_IQEMkuIgAAARc"]
[Wed Apr 15 05:38:21.152344 2026] [:error] [pid 4066:tid 4106] [client 45.131.195.160:30533] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ad6zzYC2YXfSPsC9O_BlxQAAAEI"]
[Wed Apr 15 05:38:23.756509 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.161:46319] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ad6zz63iO9_fE_IQEMkuNQAAAQ8"]
[Wed Apr 15 05:38:23.813213 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.186:43363] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "ad6zzx15U5D-N99n_jJ6LgAAANU"]
[Wed Apr 15 05:38:24.895665 2026] [authz_core:error] [pid 4169:tid 4191] [client 45.131.195.154:22441] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/views/cmd.php
[Wed Apr 15 05:38:26.785125 2026] [:error] [pid 4169:tid 4189] [client 45.131.195.154:22441] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "ad6z0h15U5D-N99n_jJ6MgAAANA"]
[Wed Apr 15 05:38:31.824758 2026] [:error] [pid 4067:tid 4153] [client 45.131.195.130:42389] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ad6z1-5XHBJU8ZrRxZ01sQAAAJY"]
[Wed Apr 15 05:38:35.212022 2026] [:error] [pid 45504:tid 45518] [client 45.131.195.174:44567] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ad6z263iO9_fE_IQEMkubQAAAQw"]
[Wed Apr 15 05:38:38.996160 2026] [:error] [pid 4067:tid 4151] [client 45.131.195.179:28235] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "ad6z3u5XHBJU8ZrRxZ01tgAAAJQ"]
[Wed Apr 15 05:38:41.418406 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.251:33687] [client 45.131.195.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "ad6z4R15U5D-N99n_jJ6TAAAAMc"]
[Wed Apr 15 05:38:44.028644 2026] [:error] [pid 4065:tid 4083] [client 45.131.195.146:55441] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "ad6z5AWArgJTHu2_6OzDmQAAAAc"]
[Wed Apr 15 05:38:45.141006 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.136:30891] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "ad6z5a3iO9_fE_IQEMkupAAAAQM"]
[Wed Apr 15 05:38:46.257177 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.141:47823] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mer_gagal.php"] [unique_id "ad6z5q3iO9_fE_IQEMkurgAAAQE"]
[Wed Apr 15 05:38:47.060285 2026] [:error] [pid 4067:tid 4131] [client 45.131.195.161:55093] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ad6z5-5XHBJU8ZrRxZ01vwAAAIA"]
[Wed Apr 15 05:38:47.336103 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.184:27785] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "ad6z563iO9_fE_IQEMkusgAAAQY"]
[Wed Apr 15 05:38:49.406265 2026] [:error] [pid 4066:tid 4108] [client 45.131.195.250:39669] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ad6z6YC2YXfSPsC9O_BmBgAAAEQ"]
[Wed Apr 15 05:38:51.792808 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.197:42251] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "ad6z663iO9_fE_IQEMku3gAAAQE"]
[Wed Apr 15 05:38:51.800571 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.135:37499] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "ad6z663iO9_fE_IQEMku4AAAAQ4"]
[Wed Apr 15 05:38:52.826761 2026] [:error] [pid 4065:tid 4080] [client 45.131.195.179:54321] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ad6z7AWArgJTHu2_6OzDnAAAAAQ"]
[Wed Apr 15 05:38:52.849601 2026] [:error] [pid 45504:tid 45508] [client 45.131.195.151:41411] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "ad6z7K3iO9_fE_IQEMku5gAAAQI"]
[Wed Apr 15 05:38:53.918321 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.121:61393] [client 45.131.195.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ad6z7a3iO9_fE_IQEMku7wAAAQ8"]
[Wed Apr 15 05:38:58.493640 2026] [:error] [pid 4067:tid 4150] [client 45.131.195.121:32661] [client 45.131.195.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "ad6z8u5XHBJU8ZrRxZ01xwAAAJM"]
[Wed Apr 15 05:38:59.535808 2026] [:error] [pid 4066:tid 4108] [client 45.131.195.160:45915] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "ad6z84C2YXfSPsC9O_BmFwAAAEQ"]
[Wed Apr 15 05:38:59.606038 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.119:23549] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "ad6z863iO9_fE_IQEMkvBgAAAQE"]
[Wed Apr 15 05:39:00.594750 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.179:39587] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "ad6z9B15U5D-N99n_jJ6YgAAAMI"]
[Wed Apr 15 05:39:05.481379 2026] [:error] [pid 4065:tid 4083] [client 45.131.195.160:54807] [client 45.131.195.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "ad6z-QWArgJTHu2_6OzDqgAAAAc"]
[Wed Apr 15 05:39:06.535763 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.165:58585] [client 45.131.195.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "ad6z-h15U5D-N99n_jJ6bwAAANU"]
[Wed Apr 15 05:39:09.138966 2026] [autoindex:error] [pid 4067:tid 4152] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:10.213036 2026] [:error] [pid 4169:tid 4178] [client 45.131.195.180:57979] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "ad6z_h15U5D-N99n_jJ6fgAAAMY"]
[Wed Apr 15 05:39:11.685002 2026] [autoindex:error] [pid 4067:tid 4135] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:14.743112 2026] [:error] [pid 4065:tid 4084] [client 45.131.195.195:41109] [client 45.131.195.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.195, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ad60AgWArgJTHu2_6OzDvAAAAAg"]
[Wed Apr 15 05:39:18.490957 2026] [autoindex:error] [pid 4067:tid 4147] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:19.809459 2026] [autoindex:error] [pid 4067:tid 4134] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:23.486848 2026] [autoindex:error] [pid 4067:tid 4150] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:23.803438 2026] [autoindex:error] [pid 4067:tid 4144] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:24.093710 2026] [autoindex:error] [pid 4067:tid 4135] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:25.550898 2026] [autoindex:error] [pid 4067:tid 4146] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:27.099354 2026] [autoindex:error] [pid 4067:tid 4144] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:27.626218 2026] [autoindex:error] [pid 4067:tid 4134] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:27.957454 2026] [:error] [pid 4065:tid 4077] [client 45.131.195.195:41109] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ad60DwWArgJTHu2_6OzD1AAAAAE"]
[Wed Apr 15 05:39:28.859390 2026] [autoindex:error] [pid 4067:tid 4141] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:29.116346 2026] [autoindex:error] [pid 4067:tid 4139] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:29.361177 2026] [autoindex:error] [pid 4067:tid 4137] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:29.840489 2026] [autoindex:error] [pid 4067:tid 4140] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:30.073206 2026] [autoindex:error] [pid 4067:tid 4133] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:30.313410 2026] [autoindex:error] [pid 4067:tid 4143] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:31.376373 2026] [:error] [pid 45504:tid 45515] [client 45.131.195.169:59209] [client 45.131.195.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.169, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ad60E63iO9_fE_IQEMkvPAAAAQk"]
[Wed Apr 15 05:39:33.559061 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.169:59209] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "ad60Fa3iO9_fE_IQEMkvSAAAARA"]
[Wed Apr 15 05:39:33.876164 2026] [autoindex:error] [pid 4067:tid 4155] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:34.114983 2026] [autoindex:error] [pid 4067:tid 4144] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:34.344908 2026] [autoindex:error] [pid 4067:tid 4138] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:34.827409 2026] [autoindex:error] [pid 4067:tid 4152] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:35.067080 2026] [autoindex:error] [pid 4067:tid 4141] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:35.306577 2026] [autoindex:error] [pid 4067:tid 4142] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:36.789882 2026] [autoindex:error] [pid 4067:tid 4131] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:37.058469 2026] [autoindex:error] [pid 4067:tid 4133] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:41.109637 2026] [autoindex:error] [pid 4067:tid 4134] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:43.689830 2026] [autoindex:error] [pid 4067:tid 4153] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:43.693472 2026] [:error] [pid 4065:tid 4082] [client 45.131.195.190:21697] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ad60HwWArgJTHu2_6OzD4QAAAAY"]
[Wed Apr 15 05:39:44.201848 2026] [autoindex:error] [pid 4067:tid 4150] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:47.740383 2026] [autoindex:error] [pid 4067:tid 4153] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:48.042232 2026] [autoindex:error] [pid 4067:tid 4151] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:51.530991 2026] [autoindex:error] [pid 4067:tid 4133] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:52.804853 2026] [autoindex:error] [pid 4067:tid 4136] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:54.064875 2026] [autoindex:error] [pid 4067:tid 4146] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:54.282232 2026] [autoindex:error] [pid 4067:tid 4148] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:54.382514 2026] [:error] [pid 4065:tid 4082] [client 45.131.195.170:38547] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ad60KgWArgJTHu2_6OzD8QAAAAY"]
[Wed Apr 15 05:39:54.711829 2026] [autoindex:error] [pid 4067:tid 4134] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:54.962924 2026] [autoindex:error] [pid 4067:tid 4137] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:55.202817 2026] [autoindex:error] [pid 4067:tid 4133] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:57.658606 2026] [autoindex:error] [pid 4067:tid 4138] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:39:57.967038 2026] [:error] [pid 4169:tid 4187] [client 45.131.195.197:50647] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ad60LR15U5D-N99n_jJ64gAAAM4"]
[Wed Apr 15 05:40:00.063505 2026] [autoindex:error] [pid 4067:tid 4141] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:00.299970 2026] [autoindex:error] [pid 4067:tid 4151] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:03.340353 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.150:51035] [client 45.131.195.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.150, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "ad60Mx15U5D-N99n_jJ68gAAAMA"]
[Wed Apr 15 05:40:04.233348 2026] [autoindex:error] [pid 4067:tid 4151] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:04.470389 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.150:51035] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ad60NB15U5D-N99n_jJ69gAAAMI"]
[Wed Apr 15 05:40:05.589659 2026] [autoindex:error] [pid 4067:tid 4142] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:07.975554 2026] [autoindex:error] [pid 4067:tid 4149] [client 45.131.195.139:59313] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:10.497562 2026] [autoindex:error] [pid 4067:tid 4148] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:10.711383 2026] [autoindex:error] [pid 4067:tid 4152] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:10.933678 2026] [autoindex:error] [pid 4067:tid 4154] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:11.193360 2026] [autoindex:error] [pid 4067:tid 4146] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:11.419487 2026] [autoindex:error] [pid 4067:tid 4147] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:11.716299 2026] [autoindex:error] [pid 4067:tid 4143] [client 45.131.195.139:59313] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:18.256796 2026] [autoindex:error] [pid 4067:tid 4141] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:18.561818 2026] [autoindex:error] [pid 4067:tid 4147] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:18.784603 2026] [autoindex:error] [pid 4067:tid 4140] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:19.141785 2026] [autoindex:error] [pid 4067:tid 4137] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:19.354792 2026] [autoindex:error] [pid 4067:tid 4143] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:20.649003 2026] [autoindex:error] [pid 4067:tid 4142] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:23.178274 2026] [autoindex:error] [pid 4067:tid 4148] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:24.482735 2026] [autoindex:error] [pid 4067:tid 4132] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:24.502737 2026] [:error] [pid 45504:tid 45519] [client 45.131.195.115:51031] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ad60SK3iO9_fE_IQEMkwAwAAAQ0"]
[Wed Apr 15 05:40:24.731945 2026] [autoindex:error] [pid 4067:tid 4146] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:24.988489 2026] [autoindex:error] [pid 4067:tid 4139] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:25.221227 2026] [autoindex:error] [pid 4067:tid 4147] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:25.445969 2026] [autoindex:error] [pid 4067:tid 4137] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:29.170893 2026] [:error] [pid 4169:tid 4173] [client 45.131.195.135:35555] [client 45.131.195.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.135, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ad60TR15U5D-N99n_jJ7LAAAAME"]
[Wed Apr 15 05:40:30.142200 2026] [autoindex:error] [pid 4067:tid 4144] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:30.423905 2026] [autoindex:error] [pid 4067:tid 4132] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:32.922921 2026] [autoindex:error] [pid 4067:tid 4142] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:33.499582 2026] [:error] [pid 4169:tid 4186] [client 45.131.195.135:35555] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "ad60UR15U5D-N99n_jJ7OQAAAM0"]
[Wed Apr 15 05:40:34.426459 2026] [autoindex:error] [pid 4067:tid 4150] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:35.724825 2026] [autoindex:error] [pid 4067:tid 4155] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:35.888163 2026] [:error] [pid 4169:tid 4172] [client 45.131.195.171:36515] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "ad60Ux15U5D-N99n_jJ7QwAAAMA"]
[Wed Apr 15 05:40:39.467700 2026] [:error] [pid 4065:tid 4095] [client 45.131.195.120:24765] [client 45.131.195.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "ad60VwWArgJTHu2_6OzEEgAAABM"]
[Wed Apr 15 05:40:41.987813 2026] [autoindex:error] [pid 4067:tid 4153] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:42.207399 2026] [autoindex:error] [pid 4067:tid 4138] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:42.440854 2026] [autoindex:error] [pid 4067:tid 4131] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:42.658766 2026] [autoindex:error] [pid 4067:tid 4133] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:44.142961 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.146:39063] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "ad60XK3iO9_fE_IQEMkwNAAAAQQ"]
[Wed Apr 15 05:40:45.786745 2026] [:error] [pid 4066:tid 4128] [client 45.131.195.180:38497] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "ad60XYC2YXfSPsC9O_BmqQAAAFg"]
[Wed Apr 15 05:40:47.629618 2026] [autoindex:error] [pid 4067:tid 4151] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:51.641473 2026] [autoindex:error] [pid 4067:tid 4155] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:51.870810 2026] [autoindex:error] [pid 4067:tid 4152] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:53.483141 2026] [:error] [pid 4066:tid 4113] [client 45.131.195.130:38873] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ad60ZYC2YXfSPsC9O_BmsgAAAEk"]
[Wed Apr 15 05:40:55.741582 2026] [autoindex:error] [pid 4067:tid 4145] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:40:56.511275 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.190:27431] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "ad60aK3iO9_fE_IQEMkwaQAAARI"]
[Wed Apr 15 05:41:01.600556 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.121:64053] [client 45.131.195.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "ad60bR15U5D-N99n_jJ7dgAAAMI"]
[Wed Apr 15 05:41:02.242719 2026] [autoindex:error] [pid 4067:tid 4148] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:04.988200 2026] [autoindex:error] [pid 4067:tid 4151] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:05.214761 2026] [autoindex:error] [pid 4067:tid 4139] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:05.455714 2026] [autoindex:error] [pid 4067:tid 4147] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:06.456842 2026] [:error] [pid 45504:tid 45518] [client 45.131.195.115:52335] [client 45.131.195.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ad60cq3iO9_fE_IQEMkwkQAAAQw"]
[Wed Apr 15 05:41:06.824733 2026] [autoindex:error] [pid 4067:tid 4133] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:08.140923 2026] [autoindex:error] [pid 4067:tid 4149] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:10.174796 2026] [:error] [pid 4169:tid 4181] [client 45.131.195.136:45515] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "ad60dh15U5D-N99n_jJ7jgAAAMk"]
[Wed Apr 15 05:41:14.982732 2026] [:error] [pid 4065:tid 4080] [client 45.131.195.125:58291] [client 45.131.195.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ad60egWArgJTHu2_6OzEHQAAAAQ"]
[Wed Apr 15 05:41:23.440360 2026] [autoindex:error] [pid 4067:tid 4143] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:23.790246 2026] [autoindex:error] [pid 4067:tid 4155] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:24.344253 2026] [:error] [pid 4067:tid 4141] [client 45.131.195.141:32165] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ad60hO5XHBJU8ZrRxZ03MgAAAIo"]
[Wed Apr 15 05:41:25.379121 2026] [:error] [pid 4065:tid 4078] [client 45.131.195.140:46049] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "ad60hQWArgJTHu2_6OzEKQAAAAI"]
[Wed Apr 15 05:41:26.134798 2026] [autoindex:error] [pid 4067:tid 4149] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:26.442773 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.197:31479] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ad60hq3iO9_fE_IQEMkwvwAAAQY"]
[Wed Apr 15 05:41:27.730593 2026] [:error] [pid 4065:tid 4090] [client 45.131.195.179:53927] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ad60hwWArgJTHu2_6OzELwAAAA4"]
[Wed Apr 15 05:41:28.790636 2026] [autoindex:error] [pid 4067:tid 4139] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:31.397098 2026] [:error] [pid 45504:tid 45519] [client 45.131.195.191:36927] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ad60i63iO9_fE_IQEMkwywAAAQ0"]
[Wed Apr 15 05:41:31.447927 2026] [autoindex:error] [pid 4067:tid 4142] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:31.921726 2026] [:error] [pid 4066:tid 4114] [client 45.131.195.141:48631] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "ad60i4C2YXfSPsC9O_Bm1gAAAEo"]
[Wed Apr 15 05:41:32.967955 2026] [autoindex:error] [pid 4067:tid 4148] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:33.249182 2026] [autoindex:error] [pid 4067:tid 4147] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:34.839051 2026] [autoindex:error] [pid 4067:tid 4153] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:34.937206 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.204:42589] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "ad60jq3iO9_fE_IQEMkw2AAAARA"]
[Wed Apr 15 05:41:35.090498 2026] [autoindex:error] [pid 4067:tid 4137] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:35.344491 2026] [autoindex:error] [pid 4067:tid 4142] [client 45.131.195.156:56999] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:35.451618 2026] [:error] [pid 45504:tid 45511] [client 45.131.195.181:38189] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "ad60j63iO9_fE_IQEMkw2wAAAQU"]
[Wed Apr 15 05:41:36.283161 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.119:25751] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ad60kK3iO9_fE_IQEMkw4AAAAQ8"]
[Wed Apr 15 05:41:37.563669 2026] [:error] [pid 4169:tid 4200] [client 45.131.195.191:24815] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "ad60kR15U5D-N99n_jJ7uQAAANg"]
[Wed Apr 15 05:41:39.931448 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.250:26711] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ad60kx15U5D-N99n_jJ7xQAAAMc"]
[Wed Apr 15 05:41:40.524316 2026] [autoindex:error] [pid 4065:tid 4083] [client 45.131.195.159:30007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:43.112215 2026] [autoindex:error] [pid 4065:tid 4082] [client 45.131.195.159:30007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:43.628189 2026] [:error] [pid 4067:tid 4137] [client 45.131.195.186:50485] [client 45.131.195.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "ad60l-5XHBJU8ZrRxZ03VQAAAIY"]
[Wed Apr 15 05:41:49.449228 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.140:44989] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ad60na3iO9_fE_IQEMkxBQAAAQY"]
[Wed Apr 15 05:41:51.167732 2026] [autoindex:error] [pid 4065:tid 4076] [client 45.131.195.159:30007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:51.462000 2026] [autoindex:error] [pid 4065:tid 4090] [client 45.131.195.159:30007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:52.857170 2026] [autoindex:error] [pid 4065:tid 4097] [client 45.131.195.159:30007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:54.163955 2026] [autoindex:error] [pid 4065:tid 4079] [client 45.131.195.159:30007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:57.656025 2026] [autoindex:error] [pid 4065:tid 4099] [client 45.131.195.159:30007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:41:58.633408 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.139:55839] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "ad60pq3iO9_fE_IQEMkxOwAAAQg"]
[Wed Apr 15 05:42:02.440009 2026] [autoindex:error] [pid 4065:tid 4076] [client 45.131.195.159:30007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:42:04.682155 2026] [:error] [pid 4169:tid 4186] [client 45.131.195.184:48417] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ad60rB15U5D-N99n_jJ8DwAAAM0"]
[Wed Apr 15 05:42:05.827999 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.166:59307] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ad60rR15U5D-N99n_jJ8FQAAAMc"]
[Wed Apr 15 05:42:08.563724 2026] [autoindex:error] [pid 4065:tid 4094] [client 45.131.195.159:30007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:42:11.677605 2026] [:error] [pid 4169:tid 4198] [client 45.131.195.136:57043] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ad60sx15U5D-N99n_jJ8MAAAANc"]
[Wed Apr 15 05:42:12.740635 2026] [autoindex:error] [pid 4065:tid 4084] [client 45.131.195.159:30007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:42:12.954426 2026] [autoindex:error] [pid 4065:tid 4098] [client 45.131.195.159:30007] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:42:16.476077 2026] [proxy_fcgi:error] [pid 4067:tid 4148] [client 45.131.195.166:31289] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:42:16.792432 2026] [proxy_fcgi:error] [pid 4067:tid 4145] [client 45.131.195.166:31289] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:42:17.319818 2026] [proxy_fcgi:error] [pid 4067:tid 4149] [client 45.131.195.166:31289] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:42:21.340843 2026] [:error] [pid 4067:tid 4136] [client 45.131.195.166:31289] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "ad60ve5XHBJU8ZrRxZ03gwAAAIU"]
[Wed Apr 15 05:42:22.752734 2026] [:error] [pid 4169:tid 4195] [client 45.131.195.161:33459] [client 45.131.195.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ad60vh15U5D-N99n_jJ8PAAAANQ"]
[Wed Apr 15 05:42:24.186737 2026] [:error] [pid 4065:tid 4083] [client 45.131.195.185:62661] [client 45.131.195.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ad60wAWArgJTHu2_6OzEpAAAAAc"]
[Wed Apr 15 05:42:25.213780 2026] [:error] [pid 45504:tid 45517] [client 45.131.195.141:55275] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ad60wa3iO9_fE_IQEMkxeQAAAQs"]
[Wed Apr 15 05:42:26.353411 2026] [:error] [pid 4067:tid 4153] [client 45.131.195.119:63671] [client 45.131.195.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ad60wu5XHBJU8ZrRxZ03jQAAAJY"]
[Wed Apr 15 05:42:27.382855 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.174:33417] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ad60w63iO9_fE_IQEMkxfgAAAQY"]
[Wed Apr 15 05:42:29.233230 2026] [:error] [pid 45504:tid 45519] [client 45.131.195.145:37371] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "ad60xa3iO9_fE_IQEMkxiwAAAQ0"]
[Wed Apr 15 05:42:30.212855 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.169:51751] [client 45.131.195.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ad60xq3iO9_fE_IQEMkxjwAAARQ"]
[Wed Apr 15 05:42:31.063823 2026] [:error] [pid 4065:tid 4098] [client 45.131.195.154:21143] [client 45.131.195.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ad60xwWArgJTHu2_6OzErwAAABY"]
[Wed Apr 15 05:42:31.614996 2026] [:error] [pid 4066:tid 4116] [client 45.131.195.175:27525] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ad60x4C2YXfSPsC9O_BnCAAAAEw"]
[Wed Apr 15 05:42:34.320148 2026] [:error] [pid 4067:tid 4153] [client 45.131.195.149:34871] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ad60yu5XHBJU8ZrRxZ03lwAAAJY"]
[Wed Apr 15 05:42:36.297483 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.191:55603] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "ad60zK3iO9_fE_IQEMkxmgAAAQA"]
[Wed Apr 15 05:42:40.004901 2026] [:error] [pid 4067:tid 4140] [client 45.131.195.124:64753] [client 45.131.195.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ad600O5XHBJU8ZrRxZ03nQAAAIk"]
[Wed Apr 15 05:42:43.759357 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.250:44049] [client 45.131.195.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "ad60063iO9_fE_IQEMkxqAAAAQY"]
[Wed Apr 15 05:42:49.382713 2026] [:error] [pid 45504:tid 45507] [client 45.131.195.121:40855] [client 45.131.195.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ad602a3iO9_fE_IQEMkxtgAAAQE"]
[Wed Apr 15 05:42:57.039430 2026] [:error] [pid 45504:tid 45516] [client 45.131.195.166:44087] [client 45.131.195.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "ad604a3iO9_fE_IQEMkxxwAAAQo"]
[Wed Apr 15 05:43:00.239329 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.135:57343] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "ad605K3iO9_fE_IQEMkx0wAAAQA"]
[Wed Apr 15 05:43:18.805877 2026] [:error] [pid 45504:tid 45524] [client 45.131.195.181:24033] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ad609q3iO9_fE_IQEMkyCQAAARI"]
[Wed Apr 15 05:43:20.162257 2026] [:error] [pid 4067:tid 4146] [client 45.131.195.170:37173] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ad60-O5XHBJU8ZrRxZ03yAAAAI8"]
[Wed Apr 15 05:43:22.502477 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.116:55277] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ad60-q3iO9_fE_IQEMkyFQAAAQ4"]
[Wed Apr 15 05:43:25.890634 2026] [:error] [pid 4066:tid 4115] [client 45.131.195.195:21887] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ad60_YC2YXfSPsC9O_BnOQAAAEs"]
[Wed Apr 15 05:43:26.888130 2026] [:error] [pid 45504:tid 45521] [client 45.131.195.174:43661] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ad60_q3iO9_fE_IQEMkyJQAAAQ8"]
[Wed Apr 15 05:43:32.540476 2026] [:error] [pid 45504:tid 45514] [client 45.131.195.190:62465] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad61BK3iO9_fE_IQEMkyPQAAAQg"]
[Wed Apr 15 05:43:33.673965 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.116:39087] [client 45.131.195.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "ad61BR15U5D-N99n_jJ8pgAAAMI"]
[Wed Apr 15 05:43:40.629091 2026] [:error] [pid 4066:tid 4118] [client 45.131.195.195:40755] [client 45.131.195.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ad61DIC2YXfSPsC9O_BnVgAAAE4"]
[Wed Apr 15 05:43:42.970632 2026] [proxy_fcgi:error] [pid 45504:tid 45519] [client 45.131.195.179:31107] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:43:44.278985 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.179:31107] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "ad61EK3iO9_fE_IQEMkyYAAAAQA"]
[Wed Apr 15 05:43:45.303318 2026] [:error] [pid 4169:tid 4191] [client 45.131.195.141:33575] [client 45.131.195.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "ad61ER15U5D-N99n_jJ8vAAAANE"]
[Wed Apr 15 05:43:48.597370 2026] [:error] [pid 4067:tid 4144] [client 45.131.195.140:22335] [client 45.131.195.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "ad61FO5XHBJU8ZrRxZ035gAAAI0"]
[Wed Apr 15 05:43:49.555750 2026] [:error] [pid 4065:tid 4100] [client 45.131.195.156:55485] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ad61FQWArgJTHu2_6OzFQAAAABg"]
[Wed Apr 15 05:43:58.848732 2026] [:error] [pid 4169:tid 4174] [client 45.131.195.174:59447] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "ad61Hh15U5D-N99n_jJ83QAAAMI"]
[Wed Apr 15 05:43:59.814050 2026] [:error] [pid 4067:tid 4134] [client 45.131.195.189:55915] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ad61H-5XHBJU8ZrRxZ038QAAAIM"]
[Wed Apr 15 05:44:05.581758 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.179:28877] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "ad61Ja3iO9_fE_IQEMkyqAAAAQ4"]
[Wed Apr 15 05:44:06.409642 2026] [:error] [pid 4169:tid 4178] [client 45.131.195.174:28783] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ad61Jh15U5D-N99n_jJ89AAAAMY"]
[Wed Apr 15 05:44:07.556684 2026] [:error] [pid 4169:tid 4191] [client 45.131.195.175:23735] [client 45.131.195.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ad61Jx15U5D-N99n_jJ8-AAAANE"]
[Wed Apr 15 05:44:14.585843 2026] [:error] [pid 4067:tid 4155] [client 45.131.195.145:35939] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ad61Lu5XHBJU8ZrRxZ04BwAAAJg"]
[Wed Apr 15 05:44:16.890437 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.176:51629] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ad61MK3iO9_fE_IQEMkyzwAAAQ4"]
[Wed Apr 15 05:44:25.066229 2026] [:error] [pid 4066:tid 4128] [client 45.131.195.176:63353] [client 45.131.195.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.176, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "ad61OYC2YXfSPsC9O_BnhAAAAFg"]
[Wed Apr 15 05:44:31.835035 2026] [:error] [pid 4066:tid 4109] [client 45.131.195.176:63353] [client 45.131.195.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.176, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ad61P4C2YXfSPsC9O_BnkQAAAEU"]
[Wed Apr 15 05:44:43.825996 2026] [proxy_fcgi:error] [pid 4066:tid 4107] [client 45.131.195.176:63353] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:44:59.219730 2026] [:error] [pid 4066:tid 4115] [client 45.131.195.176:63353] [client 45.131.195.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "ad61W4C2YXfSPsC9O_BnxQAAAEs"]
[Wed Apr 15 05:45:03.991942 2026] [:error] [pid 4065:tid 4093] [client 45.131.195.135:21515] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ad61XwWArgJTHu2_6OzFggAAABE"]
[Wed Apr 15 05:45:07.192753 2026] [:error] [pid 4066:tid 4109] [client 45.131.195.189:44983] [client 45.131.195.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ad61Y4C2YXfSPsC9O_BnzAAAAEU"]
[Wed Apr 15 05:45:17.940954 2026] [:error] [pid 4067:tid 4135] [client 45.131.195.145:40833] [client 45.131.195.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ad61be5XHBJU8ZrRxZ04PgAAAIQ"]
[Wed Apr 15 05:45:21.161309 2026] [:error] [pid 4169:tid 4184] [client 45.131.195.171:42721] [client 45.131.195.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ad61cR15U5D-N99n_jJ9XAAAAMw"]
[Wed Apr 15 05:45:23.519656 2026] [:error] [pid 4065:tid 4085] [client 45.131.195.150:26645] [client 45.131.195.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ad61cwWArgJTHu2_6OzFmQAAAAk"]
[Wed Apr 15 05:45:28.701093 2026] [proxy_fcgi:error] [pid 45504:tid 45513] [client 45.131.195.155:25689] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:45:29.095645 2026] [proxy_fcgi:error] [pid 45504:tid 45529] [client 45.131.195.155:25689] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:45:29.327974 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.155:25689] [client 45.131.195.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ad61ea3iO9_fE_IQEMkznQAAAQQ"]
[Wed Apr 15 05:45:30.111244 2026] [:error] [pid 4066:tid 4115] [client 45.131.195.190:58455] [client 45.131.195.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ad61eoC2YXfSPsC9O_Bn5QAAAEs"]
[Wed Apr 15 05:45:38.796459 2026] [:error] [pid 45504:tid 45506] [client 45.131.195.135:50903] [client 45.131.195.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ad61gq3iO9_fE_IQEMkz1wAAAQA"]
[Wed Apr 15 05:45:40.858818 2026] [:error] [pid 45504:tid 45512] [client 45.131.195.197:21069] [client 45.131.195.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "ad61hK3iO9_fE_IQEMkz3gAAAQY"]
[Wed Apr 15 05:45:44.937101 2026] [:error] [pid 45504:tid 45509] [client 45.131.195.126:21437] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ad61iK3iO9_fE_IQEMk0BgAAAQM"]
[Wed Apr 15 05:45:53.094146 2026] [:error] [pid 4169:tid 4198] [client 45.131.195.191:47281] [client 45.131.195.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ad61kR15U5D-N99n_jJ9nAAAANc"]
[Wed Apr 15 05:45:53.546287 2026] [proxy_fcgi:error] [pid 45504:tid 45514] [client 45.131.195.174:53909] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:45:56.154186 2026] [:error] [pid 45504:tid 45526] [client 45.131.195.174:53909] [client 45.131.195.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ad61lK3iO9_fE_IQEMk0IAAAARQ"]
[Wed Apr 15 05:46:03.345904 2026] [proxy_fcgi:error] [pid 4065:tid 4091] [client 45.131.195.121:38975] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:46:05.368169 2026] [:error] [pid 4065:tid 4092] [client 45.131.195.121:38975] [client 45.131.195.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.121, incrementing brute counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "ad61nQWArgJTHu2_6OzFugAAABA"]
[Wed Apr 15 05:46:10.695722 2026] [:error] [pid 4065:tid 4091] [client 45.131.195.121:38975] [client 45.131.195.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "ad61ogWArgJTHu2_6OzFxQAAAA8"]
[Wed Apr 15 05:46:12.884977 2026] [:error] [pid 4169:tid 4179] [client 45.131.195.146:45141] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "ad61pB15U5D-N99n_jJ9yAAAAMc"]
[Wed Apr 15 05:46:17.302838 2026] [:error] [pid 45504:tid 45528] [client 45.131.195.181:53385] [client 45.131.195.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "ad61qa3iO9_fE_IQEMk0ZAAAARY"]
[Wed Apr 15 05:46:21.420884 2026] [:error] [pid 4066:tid 4105] [client 45.131.195.159:47795] [client 45.131.195.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "ad61rYC2YXfSPsC9O_BoLQAAAEE"]
[Wed Apr 15 05:46:22.365874 2026] [:error] [pid 4065:tid 4086] [client 45.131.195.126:48067] [client 45.131.195.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ad61rgWArgJTHu2_6OzF0AAAAAo"]
[Wed Apr 15 05:46:26.650271 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.170:26403] [client 45.131.195.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "ad61sq3iO9_fE_IQEMk0eAAAAQc"]
[Wed Apr 15 05:46:29.902674 2026] [proxy_fcgi:error] [pid 4169:tid 4193] [client 45.131.195.134:52119] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 05:46:30.114876 2026] [:error] [pid 4169:tid 4196] [client 45.131.195.134:52119] [client 45.131.195.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "ad61th15U5D-N99n_jJ92wAAANU"]
[Wed Apr 15 05:46:30.539742 2026] [proxy_fcgi:error] [pid 4067:tid 4133] [client 45.131.195.195:45021] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Wed Apr 15 05:46:30.985983 2026] [:error] [pid 45504:tid 45520] [client 45.131.195.184:36535] [client 45.131.195.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "ad61tq3iO9_fE_IQEMk0ewAAAQ4"]
[Wed Apr 15 05:46:31.406786 2026] [:error] [pid 4169:tid 4175] [client 45.131.195.151:48817] [client 45.131.195.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "ad61tx15U5D-N99n_jJ93wAAAMM"]
[Wed Apr 15 05:46:31.883019 2026] [:error] [pid 4169:tid 4180] [client 45.131.195.204:30599] [client 45.131.195.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ad61tx15U5D-N99n_jJ94AAAAMg"]
[Wed Apr 15 05:46:32.313647 2026] [:error] [pid 45504:tid 45530] [client 45.131.195.179:36825] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "ad61uK3iO9_fE_IQEMk0fgAAARg"]
[Wed Apr 15 05:46:32.730879 2026] [:error] [pid 45504:tid 45513] [client 45.131.195.149:32297] [client 45.131.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "ad61uK3iO9_fE_IQEMk0gAAAAQc"]
[Wed Apr 15 05:46:33.155951 2026] [:error] [pid 4169:tid 4193] [client 45.131.195.139:53407] [client 45.131.195.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "ad61uR15U5D-N99n_jJ95gAAANM"]
[Wed Apr 15 05:46:36.075002 2026] [:error] [pid 4065:tid 4085] [client 45.131.195.179:53807] [client 45.131.195.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "ad61vAWArgJTHu2_6OzF4AAAAAk"]
[Wed Apr 15 05:46:37.774378 2026] [:error] [pid 45504:tid 45510] [client 45.131.195.130:50751] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "ad61va3iO9_fE_IQEMk0jwAAAQQ"]
[Wed Apr 15 05:46:38.244691 2026] [:error] [pid 4169:tid 4192] [client 45.131.195.130:55223] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "ad61vh15U5D-N99n_jJ97QAAANI"]
[Wed Apr 15 05:46:38.673572 2026] [:error] [pid 4067:tid 4154] [client 45.131.195.130:29685] [client 45.131.195.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "ad61vu5XHBJU8ZrRxZ04sQAAAJc"]
[Wed Apr 15 05:46:39.124746 2026] [:error] [pid 45504:tid 45522] [client 45.131.195.156:48739] [client 45.131.195.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "ad61v63iO9_fE_IQEMk0kgAAARA"]
[Wed Apr 15 05:46:51.101989 2026] [autoindex:error] [pid 4169:tid 4189] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:46:54.268603 2026] [autoindex:error] [pid 4169:tid 4197] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:00.901105 2026] [autoindex:error] [pid 4169:tid 4189] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:02.213616 2026] [autoindex:error] [pid 4169:tid 4184] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:06.047796 2026] [autoindex:error] [pid 4169:tid 4181] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:06.265269 2026] [autoindex:error] [pid 4169:tid 4178] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:07.805475 2026] [autoindex:error] [pid 4169:tid 4186] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:08.166948 2026] [autoindex:error] [pid 4169:tid 4181] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:09.778894 2026] [autoindex:error] [pid 4169:tid 4191] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:10.016184 2026] [autoindex:error] [pid 4169:tid 4179] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:11.328994 2026] [autoindex:error] [pid 4169:tid 4182] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:11.630752 2026] [autoindex:error] [pid 4169:tid 4172] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:11.880915 2026] [autoindex:error] [pid 4169:tid 4195] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:13.287749 2026] [autoindex:error] [pid 4169:tid 4186] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:13.515474 2026] [autoindex:error] [pid 4169:tid 4180] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:13.755312 2026] [autoindex:error] [pid 4169:tid 4192] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:17.489296 2026] [autoindex:error] [pid 4169:tid 4193] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:17.742187 2026] [autoindex:error] [pid 4169:tid 4197] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:18.049678 2026] [autoindex:error] [pid 4169:tid 4172] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:18.261425 2026] [autoindex:error] [pid 4169:tid 4184] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:18.479498 2026] [autoindex:error] [pid 4169:tid 4200] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:18.733840 2026] [autoindex:error] [pid 4169:tid 4178] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:20.030709 2026] [autoindex:error] [pid 4169:tid 4174] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:20.264171 2026] [autoindex:error] [pid 4169:tid 4180] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:23.683538 2026] [autoindex:error] [pid 4169:tid 4181] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:26.047872 2026] [autoindex:error] [pid 4169:tid 4189] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:26.567382 2026] [autoindex:error] [pid 4169:tid 4181] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:30.296100 2026] [autoindex:error] [pid 4169:tid 4196] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:30.523428 2026] [autoindex:error] [pid 4169:tid 4177] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:34.229450 2026] [autoindex:error] [pid 4169:tid 4191] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:35.818832 2026] [autoindex:error] [pid 4169:tid 4200] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:37.163001 2026] [autoindex:error] [pid 4169:tid 4177] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:37.411355 2026] [autoindex:error] [pid 4169:tid 4184] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:37.751911 2026] [autoindex:error] [pid 4169:tid 4189] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:37.969611 2026] [autoindex:error] [pid 4169:tid 4181] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:38.190997 2026] [autoindex:error] [pid 4169:tid 4174] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:41.481575 2026] [autoindex:error] [pid 4169:tid 4200] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:45.900495 2026] [autoindex:error] [pid 4169:tid 4176] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:46.590421 2026] [autoindex:error] [pid 4169:tid 4178] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:52.827786 2026] [autoindex:error] [pid 4169:tid 4197] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:54.268808 2026] [autoindex:error] [pid 4169:tid 4195] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:56.716479 2026] [autoindex:error] [pid 4169:tid 4196] [client 45.131.195.139:55699] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:59.140322 2026] [autoindex:error] [pid 4169:tid 4176] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:59.361380 2026] [autoindex:error] [pid 4169:tid 4192] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:59.727016 2026] [autoindex:error] [pid 4169:tid 4177] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:47:59.956591 2026] [autoindex:error] [pid 4169:tid 4187] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:00.186773 2026] [autoindex:error] [pid 4169:tid 4198] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:00.778197 2026] [autoindex:error] [pid 4169:tid 4175] [client 45.131.195.139:55699] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:06.602704 2026] [autoindex:error] [pid 45504:tid 45526] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:06.877782 2026] [autoindex:error] [pid 45504:tid 45508] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:07.115705 2026] [autoindex:error] [pid 45504:tid 45524] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:07.367195 2026] [autoindex:error] [pid 45504:tid 45511] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:07.594979 2026] [autoindex:error] [pid 45504:tid 45507] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:10.184689 2026] [autoindex:error] [pid 45504:tid 45511] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:12.586325 2026] [autoindex:error] [pid 45504:tid 45522] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:14.015489 2026] [autoindex:error] [pid 45504:tid 45513] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:14.367281 2026] [autoindex:error] [pid 45504:tid 45509] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:14.649517 2026] [autoindex:error] [pid 45504:tid 45528] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:15.079204 2026] [autoindex:error] [pid 45504:tid 45524] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:15.324179 2026] [autoindex:error] [pid 45504:tid 45522] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:20.219392 2026] [autoindex:error] [pid 45504:tid 45514] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:20.570104 2026] [autoindex:error] [pid 45504:tid 45520] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:22.899934 2026] [autoindex:error] [pid 45504:tid 45507] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:23.186926 2026] [autoindex:error] [pid 45504:tid 45511] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:24.504102 2026] [autoindex:error] [pid 45504:tid 45519] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:30.482669 2026] [autoindex:error] [pid 45504:tid 45514] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:30.807976 2026] [autoindex:error] [pid 45504:tid 45523] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:31.142015 2026] [autoindex:error] [pid 45504:tid 45530] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:31.368531 2026] [autoindex:error] [pid 45504:tid 45527] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:36.232581 2026] [autoindex:error] [pid 45504:tid 45530] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:40.180868 2026] [autoindex:error] [pid 45504:tid 45521] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:40.578444 2026] [autoindex:error] [pid 45504:tid 45510] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:44.318349 2026] [autoindex:error] [pid 45504:tid 45511] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:50.060609 2026] [autoindex:error] [pid 45504:tid 45507] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:52.481156 2026] [autoindex:error] [pid 45504:tid 45515] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:52.699097 2026] [autoindex:error] [pid 45504:tid 45507] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:52.990384 2026] [autoindex:error] [pid 45504:tid 45523] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:54.275332 2026] [autoindex:error] [pid 45504:tid 45524] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:48:55.633036 2026] [autoindex:error] [pid 45504:tid 45512] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:10.349212 2026] [autoindex:error] [pid 45504:tid 45521] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:10.593538 2026] [autoindex:error] [pid 45504:tid 45529] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:12.958468 2026] [autoindex:error] [pid 45504:tid 45506] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:15.521029 2026] [autoindex:error] [pid 45504:tid 45508] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:17.971927 2026] [autoindex:error] [pid 45504:tid 45522] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:19.446139 2026] [autoindex:error] [pid 45504:tid 45529] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:19.678092 2026] [autoindex:error] [pid 45504:tid 45530] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:20.954883 2026] [autoindex:error] [pid 45504:tid 45506] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:21.184891 2026] [autoindex:error] [pid 45504:tid 45523] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:21.403982 2026] [autoindex:error] [pid 45504:tid 45530] [client 45.131.195.195:39803] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:25.418439 2026] [autoindex:error] [pid 4066:tid 4109] [client 45.131.195.180:34369] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:27.959502 2026] [autoindex:error] [pid 4066:tid 4118] [client 45.131.195.180:34369] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:36.300367 2026] [autoindex:error] [pid 4066:tid 4118] [client 45.131.195.180:34369] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:36.673876 2026] [autoindex:error] [pid 4066:tid 4120] [client 45.131.195.180:34369] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:38.000276 2026] [autoindex:error] [pid 4066:tid 4122] [client 45.131.195.180:34369] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:39.492570 2026] [autoindex:error] [pid 4066:tid 4119] [client 45.131.195.180:34369] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:43.211150 2026] [autoindex:error] [pid 4066:tid 4126] [client 45.131.195.180:34369] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:47.769828 2026] [autoindex:error] [pid 4066:tid 4122] [client 45.131.195.180:34369] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:53.841260 2026] [autoindex:error] [pid 4066:tid 4104] [client 45.131.195.180:34369] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:57.801197 2026] [autoindex:error] [pid 4066:tid 4118] [client 45.131.195.180:34369] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:49:58.053705 2026] [autoindex:error] [pid 4066:tid 4110] [client 45.131.195.180:34369] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 15 05:54:37.063261 2026] [:error] [pid 45504:tid 45519] [client 104.28.202.178:36359] [client 104.28.202.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/web/.env"] [unique_id "ad63na3iO9_fE_IQEMk4WwAAAQ0"]
[Wed Apr 15 05:56:45.949997 2026] [:error] [pid 45504:tid 45514] [client 172.56.116.184:21463] [client 172.56.116.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.56.116.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad64Ha3iO9_fE_IQEMk5gAAAAQg"]
[Wed Apr 15 06:15:23.454477 2026] [:error] [pid 4067:tid 4144] [client 172.56.116.184:7908] [client 172.56.116.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad68e-5XHBJU8ZrRxZ1BcQAAAI0"]
[Wed Apr 15 06:16:28.564862 2026] [:error] [pid 45504:tid 45529] [client 172.56.116.184:21486] [client 172.56.116.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.56.116.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad68vK3iO9_fE_IQEMlFWwAAARc"]
[Wed Apr 15 06:32:08.261557 2026] [:error] [pid 4067:tid 4147] [client 175.158.43.36:25357] [client 175.158.43.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.158.43.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad7AaO5XHBJU8ZrRxZ1HfAAAAJA"]
[Wed Apr 15 06:32:17.804391 2026] [:error] [pid 4065:tid 4091] [client 175.158.43.36:25561] [client 175.158.43.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.158.43.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad7AcQWArgJTHu2_6OzPjgAAAA8"]
[Wed Apr 15 06:32:27.946906 2026] [:error] [pid 45504:tid 45512] [client 175.158.43.36:25746] [client 175.158.43.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.158.43.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad7Ae63iO9_fE_IQEMlQAQAAAQY"]
[Wed Apr 15 06:32:38.420870 2026] [:error] [pid 4067:tid 4152] [client 175.158.43.36:25921] [client 175.158.43.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.158.43.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad7Ahu5XHBJU8ZrRxZ1HrgAAAJU"]
[Wed Apr 15 06:32:48.972483 2026] [:error] [pid 45504:tid 45524] [client 175.158.43.36:26076] [client 175.158.43.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.158.43.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad7AkK3iO9_fE_IQEMlQNgAAARI"]
[Wed Apr 15 07:51:46.590753 2026] [:error] [pid 30555:tid 30620] [client 209.141.46.13:50109] [client 209.141.46.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.46.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad7TElTZEITMpQMsOniYegAAAIY"]
[Wed Apr 15 07:51:48.877645 2026] [proxy_fcgi:error] [pid 30555:tid 30620] [client 209.141.46.13:50109] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 15 07:51:49.150110 2026] [:error] [pid 30555:tid 30631] [client 209.141.46.13:50109] [client 209.141.46.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.46.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad7TFVTZEITMpQMsOniYfgAAAJE"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Wed Apr 15 07:51:50.169597 2026] [proxy_fcgi:error] [pid 30555:tid 30631] [client 209.141.46.13:50109] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Wed Apr 15 10:19:52.291510 2026] [:error] [pid 51186:tid 51203] [client 39.45.9.218:57322] [client 39.45.9.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.45.9.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad71yFfx1CjK_ZPfY1RdBAAAAU8"]
[Wed Apr 15 10:20:02.260763 2026] [:error] [pid 30555:tid 30618] [client 39.45.9.218:57666] [client 39.45.9.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.45.9.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad710lTZEITMpQMsOnjHMgAAAIQ"]
[Wed Apr 15 10:20:12.966697 2026] [:error] [pid 30554:tid 30588] [client 39.45.9.218:58012] [client 39.45.9.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.45.9.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad713F6Jrdy3caXvUku1FQAAAEE"]
[Wed Apr 15 10:20:23.601714 2026] [:error] [pid 51186:tid 51189] [client 39.45.9.218:58266] [client 39.45.9.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.45.9.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad7151fx1CjK_ZPfY1RdSAAAAUE"]
[Wed Apr 15 10:20:34.432640 2026] [:error] [pid 50234:tid 50241] [client 39.45.9.218:58528] [client 39.45.9.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.45.9.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad718tr0cDjH19-BoGy2fgAAAQU"]
[Wed Apr 15 10:37:34.751306 2026] [:error] [pid 51186:tid 51212] [client 145.239.65.175:39662] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ad757lfx1CjK_ZPfY1RmKQAAAVg"]
[Wed Apr 15 10:37:37.237253 2026] [:error] [pid 30555:tid 30622] [client 145.239.65.175:35644] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ad758VTZEITMpQMsOnjKrAAAAIg"]
[Wed Apr 15 10:37:39.685938 2026] [:error] [pid 51186:tid 51210] [client 145.239.65.175:35656] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ad7581fx1CjK_ZPfY1RmMwAAAVY"]
[Wed Apr 15 10:37:42.082924 2026] [:error] [pid 30554:tid 30589] [client 145.239.65.175:35668] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ad759l6Jrdy3caXvUku3cgAAAEI"]
[Wed Apr 15 10:37:44.394518 2026] [:error] [pid 50234:tid 50249] [client 145.239.65.175:35680] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ad75-Nr0cDjH19-BoGy7DgAAAQ0"]
[Wed Apr 15 10:37:46.816761 2026] [:error] [pid 50234:tid 50236] [client 145.239.65.175:44984] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ad75-tr0cDjH19-BoGy7FwAAAQA"]
[Wed Apr 15 10:37:49.246678 2026] [:error] [pid 50234:tid 50259] [client 145.239.65.175:44994] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ad75_dr0cDjH19-BoGy7HAAAARc"]
[Wed Apr 15 10:37:51.708287 2026] [:error] [pid 30644:tid 30666] [client 145.239.65.175:44996] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ad75_68vuyJ0N41zsM8QdwAAANA"]
[Wed Apr 15 10:37:54.214595 2026] [:error] [pid 50234:tid 50256] [client 145.239.65.175:45000] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ad76Atr0cDjH19-BoGy7IQAAARQ"]
[Wed Apr 15 10:37:56.699191 2026] [:error] [pid 30555:tid 30615] [client 145.239.65.175:58828] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ad76BFTZEITMpQMsOnjKugAAAIE"]
[Wed Apr 15 10:37:59.220448 2026] [:error] [pid 30644:tid 30674] [client 145.239.65.175:58834] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ad76B68vuyJ0N41zsM8QggAAANg"]
[Wed Apr 15 10:38:01.601449 2026] [:error] [pid 30644:tid 30655] [client 145.239.65.175:58838] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "ad76Ca8vuyJ0N41zsM8QhAAAAMU"]
[Wed Apr 15 10:38:03.875910 2026] [:error] [pid 30555:tid 30631] [client 145.239.65.175:58848] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "ad76C1TZEITMpQMsOnjKxQAAAJE"]
[Wed Apr 15 10:38:06.228578 2026] [:error] [pid 51186:tid 51195] [client 145.239.65.175:43810] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "ad76Dlfx1CjK_ZPfY1RmYQAAAUc"]
[Wed Apr 15 10:38:08.784645 2026] [:error] [pid 51186:tid 51208] [client 145.239.65.175:43818] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "ad76EFfx1CjK_ZPfY1RmawAAAVQ"]
[Wed Apr 15 10:38:11.178783 2026] [:error] [pid 51186:tid 51212] [client 145.239.65.175:43832] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "ad76E1fx1CjK_ZPfY1RmdgAAAVg"]
[Wed Apr 15 10:38:13.585158 2026] [:error] [pid 30644:tid 30669] [client 145.239.65.175:43848] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "ad76Fa8vuyJ0N41zsM8QkgAAANM"]
[Wed Apr 15 10:38:16.150405 2026] [:error] [pid 50234:tid 50259] [client 145.239.65.175:57932] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "ad76GNr0cDjH19-BoGy7MQAAARc"]
[Wed Apr 15 10:38:18.646181 2026] [:error] [pid 30555:tid 30631] [client 145.239.65.175:57946] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "ad76GlTZEITMpQMsOnjK0wAAAJE"]
[Wed Apr 15 10:38:21.029509 2026] [:error] [pid 50234:tid 50238] [client 145.239.65.175:57952] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "ad76Hdr0cDjH19-BoGy7QAAAAQI"]
[Wed Apr 15 10:38:23.387735 2026] [:error] [pid 51186:tid 51203] [client 145.239.65.175:57968] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "ad76H1fx1CjK_ZPfY1RmhAAAAU8"]
[Wed Apr 15 10:38:25.916713 2026] [:error] [pid 51186:tid 51206] [client 145.239.65.175:40960] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ad76IVfx1CjK_ZPfY1RmiAAAAVI"]
[Wed Apr 15 10:38:28.320384 2026] [:error] [pid 50234:tid 50248] [client 145.239.65.175:40966] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "ad76JNr0cDjH19-BoGy7TwAAAQw"]
[Wed Apr 15 10:38:30.722300 2026] [:error] [pid 51186:tid 51191] [client 145.239.65.175:40982] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ad76Jlfx1CjK_ZPfY1RmlgAAAUM"]
[Wed Apr 15 10:39:01.951620 2026] [:error] [pid 30555:tid 30637] [client 145.239.65.175:40986] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ad76RVTZEITMpQMsOnjLHQAAAJc"]
[Wed Apr 15 10:39:04.396885 2026] [:error] [pid 51186:tid 51192] [client 145.239.65.175:59498] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ad76SFfx1CjK_ZPfY1Rm1QAAAUQ"]
[Wed Apr 15 10:39:06.897354 2026] [:error] [pid 30644:tid 30660] [client 145.239.65.175:59240] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ad76Sq8vuyJ0N41zsM8Q1QAAAMo"]
[Wed Apr 15 10:39:09.442418 2026] [:error] [pid 50234:tid 50256] [client 145.239.65.175:59242] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ad76Tdr0cDjH19-BoGy7dgAAARQ"]
[Wed Apr 15 10:39:11.780419 2026] [:error] [pid 51186:tid 51194] [client 145.239.65.175:59252] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ad76T1fx1CjK_ZPfY1Rm4AAAAUY"]
[Wed Apr 15 10:39:14.291772 2026] [:error] [pid 51186:tid 51208] [client 145.239.65.175:59262] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ad76Ulfx1CjK_ZPfY1Rm6AAAAVQ"]
[Wed Apr 15 10:39:16.808801 2026] [:error] [pid 51186:tid 51206] [client 145.239.65.175:51232] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ad76VFfx1CjK_ZPfY1Rm8QAAAVI"]
[Wed Apr 15 10:39:19.333817 2026] [:error] [pid 50234:tid 50251] [client 145.239.65.175:51234] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ad76V9r0cDjH19-BoGy7ggAAAQ8"]
[Wed Apr 15 10:39:21.823344 2026] [:error] [pid 30553:tid 30566] [client 145.239.65.175:51248] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "ad76WaWezn1lK_o0BrrzTgAAAAc"]
[Wed Apr 15 10:39:24.339283 2026] [:error] [pid 50234:tid 50249] [client 145.239.65.175:51256] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "ad76XNr0cDjH19-BoGy7hQAAAQ0"]
[Wed Apr 15 10:39:26.828400 2026] [:error] [pid 30555:tid 30627] [client 145.239.65.175:52526] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "ad76XlTZEITMpQMsOnjLJQAAAI0"]
[Wed Apr 15 10:39:29.316543 2026] [:error] [pid 30555:tid 30616] [client 145.239.65.175:52540] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "ad76YVTZEITMpQMsOnjLKgAAAII"]
[Wed Apr 15 10:39:31.667060 2026] [:error] [pid 30555:tid 30629] [client 145.239.65.175:52546] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ad76Y1TZEITMpQMsOnjLLQAAAI8"]
[Wed Apr 15 10:39:34.169327 2026] [:error] [pid 30555:tid 30625] [client 145.239.65.175:52548] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ad76ZlTZEITMpQMsOnjLMAAAAIs"]
[Wed Apr 15 10:39:36.658439 2026] [:error] [pid 30644:tid 30669] [client 145.239.65.175:56036] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ad76aK8vuyJ0N41zsM8Q6wAAANM"]
[Wed Apr 15 10:39:39.156370 2026] [:error] [pid 50234:tid 50258] [client 145.239.65.175:56038] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ad76a9r0cDjH19-BoGy7kwAAARY"]
[Wed Apr 15 10:39:41.662955 2026] [:error] [pid 50234:tid 50254] [client 145.239.65.175:56052] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ad76bdr0cDjH19-BoGy7lwAAARI"]
[Wed Apr 15 10:39:43.985799 2026] [:error] [pid 30644:tid 30651] [client 145.239.65.175:56054] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ad76b68vuyJ0N41zsM8Q9QAAAME"]
[Wed Apr 15 10:39:46.503960 2026] [:error] [pid 30644:tid 30665] [client 145.239.65.175:42318] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ad76cq8vuyJ0N41zsM8Q9wAAAM8"]
[Wed Apr 15 10:39:48.978789 2026] [:error] [pid 30644:tid 30671] [client 145.239.65.175:42330] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ad76dK8vuyJ0N41zsM8Q_QAAANU"]
[Wed Apr 15 10:39:51.314696 2026] [:error] [pid 50234:tid 50252] [client 145.239.65.175:42338] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ad76d9r0cDjH19-BoGy7rgAAARA"]
[Wed Apr 15 10:39:53.796793 2026] [:error] [pid 30553:tid 30567] [client 145.239.65.175:42344] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ad76eaWezn1lK_o0BrrzWAAAAAg"]
[Wed Apr 15 10:39:56.120682 2026] [:error] [pid 30554:tid 30610] [client 145.239.65.175:33364] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ad76fF6Jrdy3caXvUku3wQAAAFc"]
[Wed Apr 15 10:39:58.599453 2026] [:error] [pid 51186:tid 51208] [client 145.239.65.175:33374] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ad76flfx1CjK_ZPfY1RnGAAAAVQ"]
[Wed Apr 15 10:40:29.228087 2026] [:error] [pid 30644:tid 30673] [client 145.239.65.175:33386] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ad76na8vuyJ0N41zsM8RJgAAANc"]
[Wed Apr 15 10:40:31.641213 2026] [:error] [pid 50234:tid 50249] [client 145.239.65.175:43550] [client 145.239.65.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ad76n9r0cDjH19-BoGy76QAAAQ0"]
[Wed Apr 15 10:52:44.673699 2026] [:error] [pid 30555:tid 30623] [client 43.153.204.189:48432] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad79fFTZEITMpQMsOnjNeQAAAIk"]
[Wed Apr 15 11:02:20.110636 2026] [:error] [pid 30553:tid 30560] [client 203.2.64.59:48616] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad7_vKWezn1lK_o0Brr23gAAAAE"]
[Wed Apr 15 13:22:53.115377 2026] [:error] [pid 12433:tid 12453] [client 36.65.204.236:57822] [client 36.65.204.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.65.204.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad8grbwxDHWF005pP_5VtQAAARI"]
[Wed Apr 15 13:23:53.820191 2026] [:error] [pid 11385:tid 11447] [client 36.65.204.236:58945] [client 36.65.204.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.65.204.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad8g6R_mZoXMMCiUoKUPXwAAAME"]
[Wed Apr 15 13:23:53.822783 2026] [:error] [pid 11385:tid 11461] [client 36.65.204.236:58946] [client 36.65.204.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.65.204.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad8g6R_mZoXMMCiUoKUPYAAAAMw"]
[Wed Apr 15 13:23:53.828048 2026] [:error] [pid 11475:tid 11479] [client 36.65.204.236:58947] [client 36.65.204.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.65.204.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad8g6Z7upE98bj816HOlnwAAAUI"]
[Wed Apr 15 13:24:54.299371 2026] [:error] [pid 11384:tid 11425] [client 36.65.204.236:60035] [client 36.65.204.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.65.204.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad8hJnOhpt4MrQIXF7BQDAAAAEM"]
[Wed Apr 15 14:14:56.143965 2026] [:error] [pid 12433:tid 12450] [client 209.141.45.41:57965] [client 209.141.45.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.45.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad8s4LwxDHWF005pP_53oAAAAQ8"]
[Wed Apr 15 14:14:57.059998 2026] [proxy_fcgi:error] [pid 12433:tid 12450] [client 209.141.45.41:57965] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 15 14:14:57.236228 2026] [:error] [pid 12433:tid 12446] [client 209.141.45.41:57965] [client 209.141.45.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.45.41, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad8s4bwxDHWF005pP_53pgAAAQs"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Wed Apr 15 14:14:58.186475 2026] [proxy_fcgi:error] [pid 12433:tid 12446] [client 209.141.45.41:57965] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Wed Apr 15 14:49:38.012946 2026] [:error] [pid 11385:tid 11465] [client 150.109.46.88:46156] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad81Ah_mZoXMMCiUoKUrBAAAANA"]
[Wed Apr 15 15:21:11.246557 2026] [:error] [pid 12433:tid 12441] [client 118.107.44.120:62155] [client 118.107.44.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad88Z7wxDHWF005pP_6aeAAAAQY"], referer: https://twitter.com/
[Wed Apr 15 15:21:26.535042 2026] [:error] [pid 12433:tid 12451] [client 118.107.44.120:18925] [client 118.107.44.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.107.44.120, incrementing ddos counter"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad88drwxDHWF005pP_6aigAAARA"], referer: https://twitter.com/
[Wed Apr 15 15:21:26.536993 2026] [:error] [pid 12433:tid 12451] [client 118.107.44.120:18925] [client 118.107.44.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad88drwxDHWF005pP_6aigAAARA"], referer: https://twitter.com/
[Wed Apr 15 17:10:21.136387 2026] [:error] [pid 12396:tid 12417] [client 185.223.152.5:48509] [client 185.223.152.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9V_cCQWGYUWgxc5kgDvgAAAJM"]
[Wed Apr 15 17:10:31.336762 2026] [:error] [pid 11475:tid 11487] [client 185.223.152.213:34195] [client 185.223.152.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WB57upE98bj816HPjMgAAAUo"]
[Wed Apr 15 17:10:42.435146 2026] [:error] [pid 12396:tid 12420] [client 185.223.152.218:34227] [client 185.223.152.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WEsCQWGYUWgxc5kgD2gAAAJY"]
[Wed Apr 15 17:10:52.658794 2026] [:error] [pid 11383:tid 11399] [client 185.223.152.225:30523] [client 185.223.152.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.225, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WHDOMRk2pAgm2-j7aXwAAAAQ"]
[Wed Apr 15 17:11:03.093488 2026] [:error] [pid 65412:tid 65427] [client 185.223.152.219:32083] [client 185.223.152.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.219, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WJ_EYT61VHfhVE5fyxAAAAY0"]
[Wed Apr 15 17:11:13.788600 2026] [:error] [pid 11475:tid 11499] [client 185.223.152.222:34299] [client 185.223.152.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WMZ7upE98bj816HPjdwAAAVY"]
[Wed Apr 15 17:11:24.414284 2026] [:error] [pid 12396:tid 12402] [client 185.223.152.225:36819] [client 185.223.152.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.225, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WPMCQWGYUWgxc5kgEEAAAAIQ"]
[Wed Apr 15 17:11:35.231607 2026] [:error] [pid 65412:tid 65421] [client 185.223.152.215:46033] [client 185.223.152.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WR_EYT61VHfhVE5fy2QAAAYc"]
[Wed Apr 15 17:11:45.540906 2026] [:error] [pid 11383:tid 11410] [client 185.223.152.213:22949] [client 185.223.152.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WUTOMRk2pAgm2-j7afwAAAA8"]
[Wed Apr 15 17:11:56.370248 2026] [:error] [pid 12433:tid 12436] [client 185.223.152.225:61297] [client 185.223.152.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.225, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WXLwxDHWF005pP_6_nwAAAQE"]
[Wed Apr 15 17:12:07.365435 2026] [:error] [pid 11475:tid 11491] [client 185.223.152.216:30777] [client 185.223.152.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.216, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WZ57upE98bj816HPj-QAAAU4"]
[Wed Apr 15 17:12:17.331751 2026] [:error] [pid 11383:tid 11416] [client 185.223.152.214:51483] [client 185.223.152.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WcTOMRk2pAgm2-j7akAAAABU"]
[Wed Apr 15 17:12:27.961512 2026] [:error] [pid 11475:tid 11493] [client 185.223.152.220:25333] [client 185.223.152.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9We57upE98bj816HPkDAAAAVA"]
[Wed Apr 15 17:12:38.946461 2026] [:error] [pid 12396:tid 12402] [client 185.223.152.206:47405] [client 185.223.152.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WhsCQWGYUWgxc5kgEYQAAAIQ"]
[Wed Apr 15 17:12:49.286349 2026] [:error] [pid 12433:tid 12437] [client 185.223.152.218:26601] [client 185.223.152.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WkbwxDHWF005pP_6_8gAAAQI"]
[Wed Apr 15 17:12:59.969507 2026] [:error] [pid 12433:tid 12454] [client 185.223.152.227:46067] [client 185.223.152.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9Wm7wxDHWF005pP_6__QAAARM"]
[Wed Apr 15 17:13:10.666218 2026] [:error] [pid 11383:tid 11410] [client 185.223.152.210:54087] [client 185.223.152.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WpjOMRk2pAgm2-j7azAAAAA8"]
[Wed Apr 15 17:13:21.324473 2026] [:error] [pid 12433:tid 12437] [client 185.223.152.223:35123] [client 185.223.152.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WsbwxDHWF005pP_7AAwAAAQI"]
[Wed Apr 15 17:13:31.969573 2026] [:error] [pid 11384:tid 11441] [client 185.223.152.6:28409] [client 185.223.152.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9Wu3Ohpt4MrQIXF7CggQAAAFM"]
[Wed Apr 15 17:13:42.723467 2026] [:error] [pid 12396:tid 12400] [client 185.223.152.227:31781] [client 185.223.152.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9WxsCQWGYUWgxc5kgEogAAAII"]
[Wed Apr 15 17:13:53.169034 2026] [:error] [pid 12396:tid 12417] [client 185.223.152.8:40941] [client 185.223.152.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.8, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9W0cCQWGYUWgxc5kgFAAAAAJM"]
[Wed Apr 15 17:14:04.204063 2026] [:error] [pid 11383:tid 11395] [client 185.223.152.248:60931] [client 185.223.152.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.248, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9W3DOMRk2pAgm2-j7bJgAAAAA"]
[Wed Apr 15 17:14:14.369934 2026] [:error] [pid 11475:tid 11490] [client 185.223.152.212:30541] [client 185.223.152.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9W5p7upE98bj816HPlBgAAAU0"]
[Wed Apr 15 17:14:25.007065 2026] [:error] [pid 11475:tid 11489] [client 185.223.152.7:34401] [client 185.223.152.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9W8Z7upE98bj816HPlFQAAAUw"]
[Wed Apr 15 17:14:35.588111 2026] [:error] [pid 12433:tid 12439] [client 185.223.152.210:61975] [client 185.223.152.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9W-7wxDHWF005pP_7AdQAAAQQ"]
[Wed Apr 15 17:14:46.225280 2026] [:error] [pid 11384:tid 11437] [client 185.223.152.207:27625] [client 185.223.152.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XBnOhpt4MrQIXF7CgyAAAAE8"]
[Wed Apr 15 17:14:56.835922 2026] [:error] [pid 12396:tid 12408] [client 185.223.152.7:36061] [client 185.223.152.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XEMCQWGYUWgxc5kgFQgAAAIo"]
[Wed Apr 15 17:15:07.453864 2026] [:error] [pid 12396:tid 12415] [client 185.223.152.218:26419] [client 185.223.152.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XG8CQWGYUWgxc5kgFSwAAAJE"]
[Wed Apr 15 17:15:18.373316 2026] [:error] [pid 12396:tid 12411] [client 185.223.152.212:36365] [client 185.223.152.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XJsCQWGYUWgxc5kgFUQAAAI0"]
[Wed Apr 15 17:15:29.011386 2026] [:error] [pid 11383:tid 11398] [client 185.223.152.7:32967] [client 185.223.152.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XMTOMRk2pAgm2-j7bhQAAAAM"]
[Wed Apr 15 17:15:39.980053 2026] [:error] [pid 11383:tid 11401] [client 185.223.152.226:46757] [client 185.223.152.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XOzOMRk2pAgm2-j7bhwAAAAY"]
[Wed Apr 15 17:15:50.539791 2026] [:error] [pid 12433:tid 12441] [client 185.223.152.213:56477] [client 185.223.152.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XRrwxDHWF005pP_7AvAAAAQY"]
[Wed Apr 15 17:16:02.579330 2026] [:error] [pid 12396:tid 12399] [client 185.223.152.209:28151] [client 185.223.152.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.209, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XUsCQWGYUWgxc5kgFegAAAIE"]
[Wed Apr 15 17:16:13.091195 2026] [:error] [pid 11475:tid 11487] [client 185.223.152.207:36561] [client 185.223.152.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XXZ7upE98bj816HPl6gAAAUo"]
[Wed Apr 15 17:16:27.439407 2026] [:error] [pid 11383:tid 11406] [client 185.223.152.223:42313] [client 185.223.152.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XazOMRk2pAgm2-j7buwAAAAs"]
[Wed Apr 15 17:16:37.288678 2026] [:error] [pid 11384:tid 11451] [client 185.223.152.223:51325] [client 185.223.152.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XdXOhpt4MrQIXF7ChIQAAAFg"]
[Wed Apr 15 17:16:47.749911 2026] [:error] [pid 11475:tid 11487] [client 185.223.152.223:37429] [client 185.223.152.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9Xf57upE98bj816HPmhQAAAUo"]
[Wed Apr 15 17:16:57.954351 2026] [:error] [pid 12433:tid 12459] [client 185.223.152.212:41083] [client 185.223.152.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XibwxDHWF005pP_7A0wAAARg"]
[Wed Apr 15 17:17:08.636174 2026] [:error] [pid 11475:tid 11495] [client 185.223.152.209:63259] [client 185.223.152.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.209, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XlJ7upE98bj816HPmnwAAAVI"]
[Wed Apr 15 17:17:23.914901 2026] [:error] [pid 65412:tid 65414] [client 185.223.152.215:56981] [client 185.223.152.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9Xo_EYT61VHfhVE5fziQAAAYA"]
[Wed Apr 15 17:17:33.693325 2026] [:error] [pid 12433:tid 12452] [client 185.223.152.220:51133] [client 185.223.152.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XrbwxDHWF005pP_7A5QAAARE"]
[Wed Apr 15 17:17:41.873701 2026] [:error] [pid 11475:tid 11497] [client 185.223.152.212:49603] [client 185.223.152.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XtZ7upE98bj816HPmxAAAAVQ"]
[Wed Apr 15 17:17:52.529808 2026] [:error] [pid 65412:tid 65414] [client 185.223.152.222:20585] [client 185.223.152.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XwPEYT61VHfhVE5fzlAAAAYA"]
[Wed Apr 15 17:18:06.832627 2026] [:error] [pid 65412:tid 65419] [client 185.223.152.5:65007] [client 185.223.152.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9XzvEYT61VHfhVE5fznAAAAYU"]
[Wed Apr 15 17:18:14.091686 2026] [:error] [pid 11475:tid 11500] [client 185.223.152.5:62577] [client 185.223.152.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9X1p7upE98bj816HPnCQAAAVc"]
[Wed Apr 15 17:18:24.653965 2026] [:error] [pid 65412:tid 65422] [client 185.223.152.8:51773] [client 185.223.152.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.8, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9X4PEYT61VHfhVE5fzogAAAYg"]
[Wed Apr 15 17:18:35.414166 2026] [:error] [pid 65412:tid 65419] [client 185.223.152.217:37273] [client 185.223.152.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9X6_EYT61VHfhVE5fzpQAAAYU"]
[Wed Apr 15 17:18:46.118095 2026] [:error] [pid 12396:tid 12401] [client 185.223.152.224:44277] [client 185.223.152.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.224, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9X9sCQWGYUWgxc5kgGBwAAAIM"]
[Wed Apr 15 17:18:57.096468 2026] [:error] [pid 11383:tid 11409] [client 185.223.152.227:23941] [client 185.223.152.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9YATOMRk2pAgm2-j7cXQAAAA4"]
[Wed Apr 15 17:19:07.951339 2026] [:error] [pid 11475:tid 11487] [client 185.223.152.219:22819] [client 185.223.152.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.223.152.219, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad9YC57upE98bj816HPncAAAAUo"]
[Wed Apr 15 17:40:34.811668 2026] [:error] [pid 11475:tid 11497] [client 216.73.216.42:54439] [client 216.73.216.42] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.hotbooksbookeeping2.com|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "ad9dEp7upE98bj816HPx0QAAAVQ"]
[Wed Apr 15 18:19:26.655704 2026] [:error] [pid 30958:tid 31026] [client 43.163.95.253:44416] [client 43.163.95.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad9mLseG3wSKTO7NWFF3fQAAAMo"]
[Wed Apr 15 21:31:09.252334 2026] [:error] [pid 30957:tid 30990] [client 181.176.72.226:18742] [client 181.176.72.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.176.72.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-THX5gwVEVXHfVSiqgfwAAAEE"]
[Wed Apr 15 21:58:29.853200 2026] [:error] [pid 30957:tid 31008] [client 177.23.224.36:56722] [client 177.23.224.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.23.224.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-ZhX5gwVEVXHfVSiqt8QAAAFM"]
[Wed Apr 15 21:58:40.366437 2026] [:error] [pid 23913:tid 23928] [client 177.23.224.36:56947] [client 177.23.224.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.23.224.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-ZkFUaK3MLdSaLOyi3jAAAAU0"]
[Wed Apr 15 21:58:50.962448 2026] [:error] [pid 31053:tid 31070] [client 177.23.224.36:57185] [client 177.23.224.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.23.224.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-ZmhcEkLCmvF0fjDcXEAAAAI4"]
[Wed Apr 15 21:59:01.483118 2026] [:error] [pid 31053:tid 31062] [client 177.23.224.36:57426] [client 177.23.224.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.23.224.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-ZpRcEkLCmvF0fjDcXMQAAAIY"]
[Wed Apr 15 21:59:12.035416 2026] [:error] [pid 30957:tid 30995] [client 177.23.224.36:57687] [client 177.23.224.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.23.224.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-ZsH5gwVEVXHfVSiquMQAAAEY"]
[Wed Apr 15 22:04:50.834788 2026] [:error] [pid 30956:tid 30971] [client 85.149.212.121:35587] [client 85.149.212.121] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ad-bAkBGUpjaWntNYq2XgQAAAAs"]
[Wed Apr 15 22:05:17.939474 2026] [:error] [pid 30956:tid 30972] [client 85.149.212.121:34621] [client 85.149.212.121] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ad-bHUBGUpjaWntNYq2XoQAAAAw"]
[Wed Apr 15 22:05:21.902380 2026] [:error] [pid 23913:tid 23916] [client 85.149.212.121:42353] [client 85.149.212.121] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "hotbooksbookeeping2.com"] [uri "/index.php"] [unique_id "ad-bIVUaK3MLdSaLOyi8JwAAAUE"]
[Wed Apr 15 22:05:24.071670 2026] [:error] [pid 23913:tid 23932] [client 85.149.212.121:44651] [client 85.149.212.121] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/slider-future/v1/upload-image/"] [unique_id "ad-bJFUaK3MLdSaLOyi8MAAAAVE"]
[Wed Apr 15 22:05:24.086027 2026] [:error] [pid 30958:tid 31035] [client 85.149.212.121:45845] [client 85.149.212.121] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/am-member/license"] [unique_id "ad-bJMeG3wSKTO7NWFHXhAAAANM"]
[Wed Apr 15 22:05:26.947472 2026] [:error] [pid 23913:tid 23919] [client 85.149.212.121:43077] [client 85.149.212.121] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ad-bJlUaK3MLdSaLOyi8OQAAAUQ"]
[Wed Apr 15 22:05:26.953078 2026] [:error] [pid 30957:tid 30990] [client 85.149.212.121:44437] [client 85.149.212.121] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/slider-future/v1/upload-image/"] [unique_id "ad-bJn5gwVEVXHfVSiqwgQAAAEE"]
[Wed Apr 15 22:08:50.339220 2026] [:error] [pid 31053:tid 31064] [client 115.73.208.73:64690] [client 115.73.208.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.73.208.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-b8hcEkLCmvF0fjDcewgAAAIg"]
[Wed Apr 15 22:09:09.650797 2026] [:error] [pid 30958:tid 31023] [client 82.26.82.157:36757] [client 82.26.82.157] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/woo-aliexpress/v1/product-sku"] [unique_id "ad-cBceG3wSKTO7NWFHY3gAAAMc"]
[Wed Apr 15 22:10:04.652199 2026] [:error] [pid 30956:tid 30969] [client 115.73.208.73:65332] [client 115.73.208.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.73.208.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-cPEBGUpjaWntNYq2YVwAAAAk"]
[Wed Apr 15 22:10:26.812469 2026] [:error] [pid 30956:tid 30972] [client 115.73.208.73:49254] [client 115.73.208.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.73.208.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-cUkBGUpjaWntNYq2YYQAAAAw"]
[Wed Apr 15 22:10:58.185457 2026] [:error] [pid 31053:tid 31065] [client 115.73.208.73:49673] [client 115.73.208.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.73.208.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-cchcEkLCmvF0fjDcftgAAAIk"]
[Wed Apr 15 22:11:50.863883 2026] [:error] [pid 31053:tid 31058] [client 115.73.208.73:50238] [client 115.73.208.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.73.208.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-cphcEkLCmvF0fjDcgSwAAAII"]
[Wed Apr 15 22:34:28.842687 2026] [:error] [pid 37370:tid 37395] [client 64.118.133.85:42485] [client 64.118.133.85] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ad-h9Hg-gnM2Ga0cGACYQQAAARc"]
[Wed Apr 15 22:35:18.100935 2026] [:error] [pid 31053:tid 31065] [client 64.118.133.85:44861] [client 64.118.133.85] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ad-iJhcEkLCmvF0fjDcwEgAAAIk"]
[Wed Apr 15 22:35:22.406568 2026] [:error] [pid 37370:tid 37387] [client 64.118.133.85:36887] [client 64.118.133.85] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ad-iKng-gnM2Ga0cGACYYwAAAQ8"]
[Wed Apr 15 23:09:00.067319 2026] [:error] [pid 23913:tid 23933] [client 181.176.72.226:10251] [client 181.176.72.226] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad-qDFUaK3MLdSaLOyjVKQAAAVI"]
[Wed Apr 15 23:10:16.822068 2026] [:error] [pid 23913:tid 23938] [client 181.176.72.226:21986] [client 181.176.72.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.176.72.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad-qWFUaK3MLdSaLOyjVdgAAAVc"]
[Wed Apr 15 23:17:13.837674 2026] [:error] [pid 31053:tid 31069] [client 64.118.133.85:39399] [client 64.118.133.85] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ad-r-RcEkLCmvF0fjDdHgwAAAI0"]
[Wed Apr 15 23:17:55.475472 2026] [:error] [pid 30958:tid 31037] [client 64.118.133.85:44633] [client 64.118.133.85] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ad-sI8eG3wSKTO7NWFHpoAAAANU"]
[Wed Apr 15 23:29:28.174450 2026] [:error] [pid 31053:tid 31063] [client 64.118.133.85:41595] [client 64.118.133.85] ModSecurity: Error reading request body: Partial results are valid but processing is incomplete [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-json/woo-aliexpress/v1/product-sku"] [unique_id "ad-u2BcEkLCmvF0fjDdQNQAAAIc"]
[Thu Apr 16 00:06:11.843648 2026] [:error] [pid 31053:tid 31069] [client 216.24.210.77:57167] [client 216.24.210.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ad-3cxcEkLCmvF0fjDdmJgAAAI0"]
[Thu Apr 16 00:06:14.056313 2026] [proxy_fcgi:error] [pid 31053:tid 31069] [client 216.24.210.77:57167] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu Apr 16 00:10:05.015694 2026] [:error] [pid 30958:tid 31016] [client 59.126.168.24:54215] [client 59.126.168.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/go.php"] [unique_id "ad-4XceG3wSKTO7NWFH3ZgAAAMA"]
[Thu Apr 16 00:58:43.509854 2026] [:error] [pid 16664:tid 16742] [client 103.148.93.6:64391] [client 103.148.93.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.148.93.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad_Dwzdzt684awDJwRTYtAAAAZc"]
[Thu Apr 16 00:58:53.904156 2026] [:error] [pid 23913:tid 23931] [client 103.148.93.6:64721] [client 103.148.93.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.148.93.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad_DzVUaK3MLdSaLOygMLAAAAVA"]
[Thu Apr 16 00:59:19.282734 2026] [:error] [pid 23913:tid 23928] [client 103.148.93.6:65334] [client 103.148.93.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.148.93.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad_D51UaK3MLdSaLOygMXwAAAU0"]
[Thu Apr 16 00:59:32.024139 2026] [:error] [pid 30958:tid 31020] [client 103.148.93.6:49290] [client 103.148.93.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.148.93.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad_D9MeG3wSKTO7NWFEK0wAAAMQ"]
[Thu Apr 16 00:59:44.431889 2026] [:error] [pid 31053:tid 31069] [client 103.148.93.6:49552] [client 103.148.93.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.148.93.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ad_EABcEkLCmvF0fjDeArgAAAI0"]
[Thu Apr 16 02:02:57.920800 2026] [:error] [pid 20548:tid 20575] [client 43.157.172.39:57338] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ad_S0akpqgnqCHq6bJa5IgAAAJg"]
[Thu Apr 16 02:54:17.767369 2026] [authz_core:error] [pid 792:tid 888] [client 151.158.1.202:38083] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/readme.txt
[Thu Apr 16 02:54:18.587328 2026] [authz_core:error] [pid 34542:tid 34566] [client 151.158.1.202:35013] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/Readme.txt
[Thu Apr 16 02:54:19.782386 2026] [authz_core:error] [pid 34542:tid 34561] [client 151.158.1.202:37385] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/README.txt
[Thu Apr 16 04:07:31.006738 2026] [:error] [pid 57536:tid 57552] [client 178.151.245.162:36224] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ad_wAyQU4faGja6jpDti4AAAAAQ"]
[Thu Apr 16 04:07:33.553479 2026] [:error] [pid 57538:tid 57603] [client 178.151.245.162:59132] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ad_wBcuMaiEF5SVR2Bf0rwAAAIE"]
[Thu Apr 16 04:07:36.158520 2026] [:error] [pid 57639:tid 57651] [client 178.151.245.162:59146] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ad_wCKMCQoTw7TsxWumQsAAAAMU"]
[Thu Apr 16 04:07:38.794713 2026] [:error] [pid 57639:tid 57658] [client 178.151.245.162:59154] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ad_wCqMCQoTw7TsxWumQxgAAAMw"]
[Thu Apr 16 04:07:41.425458 2026] [:error] [pid 57538:tid 57604] [client 178.151.245.162:59156] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ad_wDcuMaiEF5SVR2Bf0wAAAAII"]
[Thu Apr 16 04:07:43.880979 2026] [:error] [pid 57639:tid 57657] [client 178.151.245.162:47034] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ad_wD6MCQoTw7TsxWumQ2AAAAMs"]
[Thu Apr 16 04:07:46.494898 2026] [:error] [pid 57538:tid 57609] [client 178.151.245.162:47038] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ad_wEsuMaiEF5SVR2Bf0zAAAAIc"]
[Thu Apr 16 04:07:49.126777 2026] [:error] [pid 57538:tid 57618] [client 178.151.245.162:47050] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ad_wFcuMaiEF5SVR2Bf02AAAAJA"]
[Thu Apr 16 04:07:51.750842 2026] [:error] [pid 57536:tid 57556] [client 178.151.245.162:47052] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ad_wFyQU4faGja6jpDti-AAAAAg"]
[Thu Apr 16 04:07:54.353196 2026] [:error] [pid 57538:tid 57620] [client 178.151.245.162:54142] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ad_wGsuMaiEF5SVR2Bf1BAAAAJI"]
[Thu Apr 16 04:07:56.965012 2026] [:error] [pid 57538:tid 57611] [client 178.151.245.162:54156] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ad_wHMuMaiEF5SVR2Bf1NAAAAIk"]
[Thu Apr 16 04:07:59.451718 2026] [:error] [pid 57538:tid 57616] [client 178.151.245.162:54158] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "ad_wH8uMaiEF5SVR2Bf1OwAAAI4"]
[Thu Apr 16 04:08:02.049014 2026] [:error] [pid 57639:tid 57651] [client 178.151.245.162:54170] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "ad_wIqMCQoTw7TsxWumRXAAAAMU"]
[Thu Apr 16 04:08:04.524155 2026] [:error] [pid 57538:tid 57617] [client 178.151.245.162:59298] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "ad_wJMuMaiEF5SVR2Bf1QgAAAI8"]
[Thu Apr 16 04:08:07.147170 2026] [:error] [pid 57537:tid 57576] [client 178.151.245.162:59310] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "ad_wJ1VQRS8nm73ENAkMkQAAAEE"]
[Thu Apr 16 04:08:09.760567 2026] [:error] [pid 57639:tid 57659] [client 178.151.245.162:59314] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "ad_wKaMCQoTw7TsxWumRewAAAM0"]
[Thu Apr 16 04:08:12.407201 2026] [:error] [pid 57538:tid 57606] [client 178.151.245.162:36780] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "ad_wLMuMaiEF5SVR2Bf1WQAAAIQ"]
[Thu Apr 16 04:08:15.069544 2026] [:error] [pid 57538:tid 57621] [client 178.151.245.162:36788] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "ad_wL8uMaiEF5SVR2Bf1aAAAAJM"]
[Thu Apr 16 04:08:17.708655 2026] [:error] [pid 57639:tid 57666] [client 178.151.245.162:36794] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "ad_wMaMCQoTw7TsxWumRjwAAANQ"]
[Thu Apr 16 04:08:20.291588 2026] [:error] [pid 57639:tid 57665] [client 178.151.245.162:36804] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "ad_wNKMCQoTw7TsxWumRnQAAANM"]
[Thu Apr 16 04:08:22.879716 2026] [:error] [pid 57639:tid 57660] [client 178.151.245.162:47996] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "ad_wNqMCQoTw7TsxWumRqgAAAM4"]
[Thu Apr 16 04:08:25.460394 2026] [:error] [pid 57639:tid 57663] [client 178.151.245.162:48010] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ad_wOaMCQoTw7TsxWumRsQAAANE"]
[Thu Apr 16 04:08:57.145355 2026] [:error] [pid 57538:tid 57621] [client 178.151.245.162:48022] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ad_wWcuMaiEF5SVR2Bf1vgAAAJM"]
[Thu Apr 16 04:08:59.668977 2026] [:error] [pid 57639:tid 57656] [client 178.151.245.162:47776] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ad_wW6MCQoTw7TsxWumSOAAAAMo"]
[Thu Apr 16 04:09:02.289648 2026] [:error] [pid 57639:tid 57653] [client 178.151.245.162:47778] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ad_wXqMCQoTw7TsxWumSPwAAAMc"]
[Thu Apr 16 04:09:04.918418 2026] [:error] [pid 57537:tid 57578] [client 178.151.245.162:47356] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ad_wYFVQRS8nm73ENAkMzgAAAEM"]
[Thu Apr 16 04:09:07.402103 2026] [:error] [pid 57536:tid 57569] [client 178.151.245.162:47358] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ad_wYyQU4faGja6jpDtjZQAAABU"]
[Thu Apr 16 04:09:10.046095 2026] [:error] [pid 57537:tid 57575] [client 178.151.245.162:47368] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ad_wZlVQRS8nm73ENAkM2wAAAEA"]
[Thu Apr 16 04:09:12.652483 2026] [:error] [pid 57639:tid 57658] [client 178.151.245.162:52090] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ad_waKMCQoTw7TsxWumScQAAAMw"]
[Thu Apr 16 04:09:15.280807 2026] [:error] [pid 57639:tid 57660] [client 178.151.245.162:52102] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ad_wa6MCQoTw7TsxWumSeAAAAM4"]
[Thu Apr 16 04:09:17.915619 2026] [:error] [pid 57536:tid 57570] [client 178.151.245.162:52114] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ad_wbSQU4faGja6jpDtjawAAABY"]
[Thu Apr 16 04:09:20.567530 2026] [:error] [pid 57538:tid 57613] [client 178.151.245.162:52130] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ad_wcMuMaiEF5SVR2Bf2SwAAAIs"]
[Thu Apr 16 04:09:23.181779 2026] [:error] [pid 57639:tid 57654] [client 178.151.245.162:51430] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "ad_wc6MCQoTw7TsxWumSkAAAAMg"]
[Thu Apr 16 04:09:25.784649 2026] [:error] [pid 57639:tid 57646] [client 178.151.245.162:51444] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "ad_wdaMCQoTw7TsxWumSowAAAMA"]
[Thu Apr 16 04:09:28.240821 2026] [:error] [pid 57536:tid 57562] [client 178.151.245.162:51450] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "ad_weCQU4faGja6jpDtjdAAAAA4"]
[Thu Apr 16 04:09:30.884729 2026] [:error] [pid 57639:tid 57663] [client 178.151.245.162:51452] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "ad_weqMCQoTw7TsxWumSyAAAANE"]
[Thu Apr 16 04:09:33.385966 2026] [:error] [pid 57536:tid 57555] [client 178.151.245.162:43112] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ad_wfSQU4faGja6jpDtjggAAAAc"]
[Thu Apr 16 04:09:35.957105 2026] [:error] [pid 57537:tid 57597] [client 178.151.245.162:43128] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ad_wf1VQRS8nm73ENAkM9AAAAFY"]
[Thu Apr 16 04:09:38.527030 2026] [:error] [pid 57537:tid 57584] [client 178.151.245.162:43136] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ad_wglVQRS8nm73ENAkM-gAAAEk"]
[Thu Apr 16 04:09:41.104687 2026] [:error] [pid 57537:tid 57593] [client 178.151.245.162:43144] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ad_whVVQRS8nm73ENAkM_gAAAFI"]
[Thu Apr 16 04:09:43.706472 2026] [:error] [pid 57538:tid 57626] [client 178.151.245.162:45334] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ad_wh8uMaiEF5SVR2Bf2fQAAAJg"]
[Thu Apr 16 04:09:46.278179 2026] [:error] [pid 57537:tid 57575] [client 178.151.245.162:45350] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ad_wilVQRS8nm73ENAkNCwAAAEA"]
[Thu Apr 16 04:09:48.910352 2026] [:error] [pid 57538:tid 57624] [client 178.151.245.162:45362] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ad_wjMuMaiEF5SVR2Bf2iAAAAJY"]
[Thu Apr 16 04:09:51.411576 2026] [:error] [pid 57639:tid 57666] [client 178.151.245.162:45372] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ad_wj6MCQoTw7TsxWumS7QAAANQ"]
[Thu Apr 16 04:10:22.706661 2026] [:error] [pid 57538:tid 57621] [client 178.151.245.162:53146] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ad_wrsuMaiEF5SVR2Bf27AAAAJM"]
[Thu Apr 16 04:10:25.200579 2026] [:error] [pid 57538:tid 57610] [client 178.151.245.162:58518] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ad_wscuMaiEF5SVR2Bf29gAAAIg"]
[Thu Apr 16 04:10:27.759402 2026] [:error] [pid 57537:tid 57593] [client 178.151.245.162:58526] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ad_ws1VQRS8nm73ENAkNZAAAAFI"]
[Thu Apr 16 04:10:30.344478 2026] [:error] [pid 57639:tid 57661] [client 178.151.245.162:58532] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ad_wtqMCQoTw7TsxWumTagAAAM8"]
[Thu Apr 16 04:10:32.899871 2026] [:error] [pid 57639:tid 57654] [client 178.151.245.162:37930] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ad_wuKMCQoTw7TsxWumTeAAAAMg"]
[Thu Apr 16 04:10:35.325128 2026] [:error] [pid 57639:tid 57650] [client 178.151.245.162:37934] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ad_wu6MCQoTw7TsxWumTggAAAMQ"]
[Thu Apr 16 05:38:31.398115 2026] [authz_core:error] [pid 29603:tid 29611] [client 151.158.1.202:42241] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/readme.txt
[Thu Apr 16 05:38:32.910623 2026] [authz_core:error] [pid 49094:tid 49115] [client 151.158.1.202:32837] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/Readme.txt
[Thu Apr 16 05:38:33.606476 2026] [authz_core:error] [pid 49094:tid 49119] [client 151.158.1.202:41181] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/README.txt
[Thu Apr 16 06:29:24.167128 2026] [:error] [pid 49094:tid 49117] [client 170.106.181.163:45170] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeARRDbDwvcXorHR_MyPKgAAAVU"]
[Thu Apr 16 06:46:19.098660 2026] [:error] [pid 57639:tid 57669] [client 192.144.148.122:45972] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeAVO6MCQoTw7TsxWunOuQAAANc"]
[Thu Apr 16 07:45:35.508855 2026] [authz_core:error] [pid 57537:tid 57587] [client 151.158.1.202:36633] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/readme.txt
[Thu Apr 16 07:45:37.278848 2026] [authz_core:error] [pid 49094:tid 49099] [client 151.158.1.202:34943] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/Readme.txt
[Thu Apr 16 07:45:39.247409 2026] [authz_core:error] [pid 57537:tid 57591] [client 151.158.1.202:34823] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/README.txt
[Thu Apr 16 08:21:45.637747 2026] [autoindex:error] [pid 29603:tid 29617] [client 212.47.78.23:50514] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Apr 16 08:52:09.217404 2026] [:error] [pid 57639:tid 57651] [client 98.93.160.221:47230] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aeAyuaMCQoTw7TsxWukNygAAAMU"]
[Thu Apr 16 09:23:23.347287 2026] [:error] [pid 57537:tid 57577] [client 98.93.160.221:47868] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aeA6C1VQRS8nm73ENAlYkQAAAEI"]
[Thu Apr 16 10:05:53.958447 2026] [authz_core:error] [pid 57639:tid 57667] [client 82.26.82.157:46133] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/readme.txt
[Thu Apr 16 10:05:55.379456 2026] [authz_core:error] [pid 57536:tid 57568] [client 82.26.82.157:38893] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/Readme.txt
[Thu Apr 16 10:05:56.711618 2026] [authz_core:error] [pid 57639:tid 57664] [client 82.26.82.157:38459] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/README.txt
[Thu Apr 16 10:22:41.432005 2026] [:error] [pid 49094:tid 49101] [client 4.193.204.157:3783] [client 4.193.204.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeBH8TbDwvcXorHR_Mz9MgAAAUU"]
[Thu Apr 16 10:22:41.821071 2026] [:error] [pid 57538:tid 57607] [client 4.193.204.157:5292] [client 4.193.204.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeBH8cuMaiEF5SVR2BdzvgAAAIU"]
[Thu Apr 16 10:22:42.212638 2026] [:error] [pid 57536:tid 57572] [client 4.193.204.157:3787] [client 4.193.204.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeBH8iQU4faGja6jpDunkQAAABg"]
[Thu Apr 16 10:22:42.596765 2026] [:error] [pid 29603:tid 29624] [client 4.193.204.157:5258] [client 4.193.204.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeBH8lfGOR6fpTWUAzoaDQAAARM"]
[Thu Apr 16 12:26:22.978381 2026] [:error] [pid 57536:tid 57571] [client 161.178.132.46:50465] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeBk7iQU4faGja6jpDu8iwAAABc"], referer: https://www.techcrunch.com
[Thu Apr 16 12:26:23.635640 2026] [:error] [pid 49094:tid 49109] [client 161.178.132.46:65369] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeBk7zbDwvcXorHR_MwdfgAAAU0"], referer: https://www.reddit.com/r/music
[Thu Apr 16 12:26:25.325823 2026] [:error] [pid 57639:tid 57657] [client 161.178.132.46:55496] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeBk8aMCQoTw7TsxWuls1AAAAMs"], referer: https://www.reddit.com/r/sports
[Thu Apr 16 12:26:25.981595 2026] [:error] [pid 57639:tid 57663] [client 161.178.132.46:52981] [client 161.178.132.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeBk8aMCQoTw7TsxWuls2gAAANE"], referer: https://www.reddit.com/r/lifeprotips
[Thu Apr 16 13:48:10.042564 2026] [:error] [pid 49094:tid 49107] [client 43.130.100.35:47940] [client 43.130.100.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeB4GjbDwvcXorHR_MwtdwAAAUs"]
[Thu Apr 16 17:43:31.175750 2026] [:error] [pid 49094:tid 49101] [client 159.203.3.27:56939] [client 159.203.3.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.3.27, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeCvQzbDwvcXorHR_Mxn3wAAAUU"]
[Thu Apr 16 17:43:32.954883 2026] [:error] [pid 57538:tid 57603] [client 159.203.3.27:57280] [client 159.203.3.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.3.27, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeCvRMuMaiEF5SVR2Bew9gAAAIE"]
[Thu Apr 16 17:43:33.791938 2026] [proxy_fcgi:error] [pid 57538:tid 57603] [client 159.203.3.27:57280] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu Apr 16 17:53:55.803840 2026] [:error] [pid 49094:tid 49112] [client 216.73.216.42:17243] [client 216.73.216.42] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||hotbooksbookeeping2.com|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aeCxszbDwvcXorHR_MxrIgAAAVA"]
[Thu Apr 16 20:19:43.395652 2026] [:error] [pid 29603:tid 29621] [client 103.73.101.153:1393] [client 103.73.101.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.73.101.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeDT31fGOR6fpTWUAzqG6AAAARA"]
[Thu Apr 16 20:19:55.001787 2026] [:error] [pid 49094:tid 49103] [client 103.73.101.153:50516] [client 103.73.101.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.73.101.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeDT6zbDwvcXorHR_My6EQAAAUc"]
[Thu Apr 16 20:22:13.227643 2026] [:error] [pid 57639:tid 57653] [client 103.73.101.153:60180] [client 103.73.101.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.73.101.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeDUdaMCQoTw7TsxWul6KAAAAMc"]
[Thu Apr 16 20:22:20.904814 2026] [:error] [pid 57639:tid 57646] [client 103.73.101.153:60500] [client 103.73.101.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.73.101.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeDUfKMCQoTw7TsxWul6RQAAAMA"]
[Thu Apr 16 20:22:33.176780 2026] [:error] [pid 57538:tid 57606] [client 103.73.101.153:60710] [client 103.73.101.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.73.101.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeDUicuMaiEF5SVR2BfWngAAAIQ"]
[Thu Apr 16 20:43:47.259542 2026] [:error] [pid 57536:tid 57557] [client 165.22.227.125:55708] [client 165.22.227.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.227.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeDZgyQU4faGja6jpDttlAAAAAk"]
[Thu Apr 16 20:43:48.966393 2026] [:error] [pid 57538:tid 57619] [client 165.22.227.125:60104] [client 165.22.227.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.227.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeDZhMuMaiEF5SVR2BfawQAAAJE"]
[Thu Apr 16 20:43:49.801545 2026] [proxy_fcgi:error] [pid 57538:tid 57619] [client 165.22.227.125:60104] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu Apr 16 21:25:34.756576 2026] [:error] [pid 57639:tid 57658] [client 217.182.194.26:38604] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aeDjTqMCQoTw7TsxWum0TQAAAMw"]
[Thu Apr 16 21:25:37.509879 2026] [:error] [pid 29603:tid 29608] [client 217.182.194.26:54026] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aeDjUVfGOR6fpTWUAzqaXQAAAQM"]
[Thu Apr 16 21:25:40.015212 2026] [:error] [pid 57639:tid 57658] [client 217.182.194.26:54034] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeDjVKMCQoTw7TsxWum0bAAAAMw"]
[Thu Apr 16 21:25:42.591438 2026] [:error] [pid 57536:tid 57553] [client 217.182.194.26:54040] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aeDjViQU4faGja6jpDuD8gAAAAU"]
[Thu Apr 16 21:25:45.164977 2026] [:error] [pid 49094:tid 49119] [client 217.182.194.26:57538] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aeDjWTbDwvcXorHR_MzlZQAAAVc"]
[Thu Apr 16 21:25:47.851742 2026] [:error] [pid 57639:tid 57653] [client 217.182.194.26:57544] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeDjW6MCQoTw7TsxWum0lAAAAMc"]
[Thu Apr 16 21:25:51.173842 2026] [:error] [pid 57639:tid 57663] [client 217.182.194.26:57548] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeDjX6MCQoTw7TsxWum0qwAAANE"]
[Thu Apr 16 21:25:53.811986 2026] [:error] [pid 57536:tid 57554] [client 217.182.194.26:57514] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aeDjYSQU4faGja6jpDuEDgAAAAY"]
[Thu Apr 16 21:25:56.705063 2026] [:error] [pid 57639:tid 57651] [client 217.182.194.26:57530] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aeDjZKMCQoTw7TsxWum02QAAAMU"]
[Thu Apr 16 21:25:59.269613 2026] [:error] [pid 57639:tid 57667] [client 217.182.194.26:57536] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aeDjZ6MCQoTw7TsxWum07wAAANU"]
[Thu Apr 16 21:26:01.863920 2026] [:error] [pid 29603:tid 29627] [client 217.182.194.26:57542] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aeDjaVfGOR6fpTWUAzqacQAAARY"]
[Thu Apr 16 21:26:04.347931 2026] [:error] [pid 57536:tid 57548] [client 217.182.194.26:60570] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aeDjbCQU4faGja6jpDuENQAAAAA"]
[Thu Apr 16 21:26:07.126130 2026] [:error] [pid 7880:tid 7896] [client 217.182.194.26:60574] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aeDjb6aezm4fSGc0yUKu8gAAAYs"]
[Thu Apr 16 21:26:10.328772 2026] [:error] [pid 7880:tid 7890] [client 217.182.194.26:60590] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aeDjcqaezm4fSGc0yUKvBQAAAYU"]
[Thu Apr 16 21:26:13.003154 2026] [:error] [pid 57537:tid 57595] [client 217.182.194.26:60598] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aeDjdVVQRS8nm73ENAm6uwAAAFQ"]
[Thu Apr 16 21:26:15.643931 2026] [:error] [pid 57639:tid 57670] [client 217.182.194.26:35238] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aeDjd6MCQoTw7TsxWum1SAAAANg"]
[Thu Apr 16 21:26:18.497505 2026] [:error] [pid 57639:tid 57669] [client 217.182.194.26:35242] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aeDjeqMCQoTw7TsxWum1ZwAAANc"]
[Thu Apr 16 21:26:21.092004 2026] [:error] [pid 57536:tid 57552] [client 217.182.194.26:35252] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aeDjfSQU4faGja6jpDuEVQAAAAQ"]
[Thu Apr 16 21:26:23.588559 2026] [:error] [pid 57639:tid 57658] [client 217.182.194.26:43762] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aeDjf6MCQoTw7TsxWum1dAAAAMw"]
[Thu Apr 16 21:26:26.542128 2026] [:error] [pid 57537:tid 57597] [client 217.182.194.26:43774] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeDjglVQRS8nm73ENAm60QAAAFY"]
[Thu Apr 16 21:26:29.272046 2026] [:error] [pid 7880:tid 7905] [client 217.182.194.26:43780] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aeDjhaaezm4fSGc0yUKvMQAAAZQ"]
[Thu Apr 16 21:27:05.172914 2026] [:error] [pid 57538:tid 57625] [client 217.182.194.26:43784] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aeDjqcuMaiEF5SVR2BfmFQAAAJc"]
[Thu Apr 16 21:27:07.742134 2026] [:error] [pid 7880:tid 7896] [client 217.182.194.26:45012] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aeDjq6aezm4fSGc0yUKvXwAAAYs"]
[Thu Apr 16 21:27:10.108399 2026] [:error] [pid 57538:tid 57621] [client 217.182.194.26:45022] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aeDjrsuMaiEF5SVR2BfmHwAAAJM"]
[Thu Apr 16 21:27:12.956071 2026] [:error] [pid 7880:tid 7898] [client 217.182.194.26:45026] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aeDjsKaezm4fSGc0yUKvagAAAY0"]
[Thu Apr 16 21:27:15.555737 2026] [:error] [pid 57639:tid 57659] [client 217.182.194.26:53064] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aeDjs6MCQoTw7TsxWum2bQAAAM0"]
[Thu Apr 16 21:27:18.362502 2026] [:error] [pid 57536:tid 57555] [client 217.182.194.26:53078] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aeDjtiQU4faGja6jpDuEwwAAAAc"]
[Thu Apr 16 21:27:21.199539 2026] [:error] [pid 57538:tid 57620] [client 217.182.194.26:53088] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aeDjucuMaiEF5SVR2BfmLAAAAJI"]
[Thu Apr 16 21:27:23.751208 2026] [:error] [pid 57538:tid 57622] [client 217.182.194.26:45138] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aeDju8uMaiEF5SVR2BfmOQAAAJQ"]
[Thu Apr 16 21:27:26.467511 2026] [:error] [pid 7880:tid 7901] [client 217.182.194.26:45142] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aeDjvqaezm4fSGc0yUKvlAAAAZA"]
[Thu Apr 16 21:27:29.039445 2026] [:error] [pid 57536:tid 57554] [client 217.182.194.26:45144] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aeDjwSQU4faGja6jpDuE1QAAAAY"]
[Thu Apr 16 21:27:31.506744 2026] [:error] [pid 7880:tid 7903] [client 217.182.194.26:45150] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aeDjw6aezm4fSGc0yUKvswAAAZI"]
[Thu Apr 16 21:27:34.030109 2026] [:error] [pid 57639:tid 57649] [client 217.182.194.26:32966] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aeDjxqMCQoTw7TsxWum2pAAAAMM"]
[Thu Apr 16 21:27:36.910722 2026] [:error] [pid 49094:tid 49114] [client 217.182.194.26:32970] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aeDjyDbDwvcXorHR_MzmtAAAAVI"]
[Thu Apr 16 21:27:39.411513 2026] [:error] [pid 7880:tid 7908] [client 217.182.194.26:32976] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aeDjy6aezm4fSGc0yUKvzgAAAZc"]
[Thu Apr 16 21:27:41.779499 2026] [:error] [pid 57639:tid 57664] [client 217.182.194.26:32990] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aeDjzaMCQoTw7TsxWum2vAAAANI"]
[Thu Apr 16 21:27:44.297627 2026] [:error] [pid 57538:tid 57607] [client 217.182.194.26:39744] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeDj0MuMaiEF5SVR2BfmaAAAAIU"]
[Thu Apr 16 21:27:46.707293 2026] [:error] [pid 57536:tid 57554] [client 217.182.194.26:39756] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeDj0iQU4faGja6jpDuE7AAAAAY"]
[Thu Apr 16 21:27:49.210498 2026] [:error] [pid 57639:tid 57661] [client 217.182.194.26:39768] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeDj1aMCQoTw7TsxWum21AAAAM8"]
[Thu Apr 16 21:27:51.677324 2026] [:error] [pid 7880:tid 7901] [client 217.182.194.26:39770] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeDj16aezm4fSGc0yUKv4gAAAZA"]
[Thu Apr 16 21:27:54.203878 2026] [:error] [pid 49094:tid 49118] [client 217.182.194.26:50836] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeDj2jbDwvcXorHR_MzmzQAAAVY"]
[Thu Apr 16 21:27:56.897093 2026] [:error] [pid 49094:tid 49105] [client 217.182.194.26:50848] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeDj3DbDwvcXorHR_Mzm2AAAAUk"]
[Thu Apr 16 21:27:59.400276 2026] [:error] [pid 57538:tid 57608] [client 217.182.194.26:50856] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aeDj38uMaiEF5SVR2BfmgAAAAIY"]
[Thu Apr 16 21:28:01.937156 2026] [:error] [pid 57639:tid 57667] [client 217.182.194.26:50858] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeDj4aMCQoTw7TsxWum3IAAAANU"]
[Thu Apr 16 21:28:33.633510 2026] [:error] [pid 57639:tid 57669] [client 217.182.194.26:53148] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aeDkAaMCQoTw7TsxWum3wgAAANc"]
[Thu Apr 16 21:28:36.163149 2026] [:error] [pid 7880:tid 7885] [client 217.182.194.26:41764] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aeDkBKaezm4fSGc0yUKwGQAAAYA"]
[Thu Apr 16 21:28:38.718663 2026] [:error] [pid 57537:tid 57597] [client 217.182.194.26:41772] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aeDkBlVQRS8nm73ENAm7QAAAAFY"]
[Thu Apr 16 21:28:41.130525 2026] [:error] [pid 57639:tid 57663] [client 217.182.194.26:41778] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeDkCaMCQoTw7TsxWum3zAAAANE"]
[Thu Apr 16 21:28:43.578577 2026] [:error] [pid 57536:tid 57567] [client 217.182.194.26:51164] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aeDkCyQU4faGja6jpDuFSwAAABM"]
[Thu Apr 16 21:28:45.927691 2026] [:error] [pid 49094:tid 49120] [client 217.182.194.26:51176] [client 217.182.194.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aeDkDTbDwvcXorHR_MznTgAAAVg"]
[Thu Apr 16 21:29:21.934464 2026] [autoindex:error] [pid 49094:tid 49101] [client 20.166.31.184:2611] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 21:29:24.624666 2026] [:error] [pid 49094:tid 49118] [client 20.166.31.184:2611] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/huya.php"] [unique_id "aeDkNDbDwvcXorHR_MznwgAAAVY"]
[Thu Apr 16 21:29:25.553392 2026] [:error] [pid 49094:tid 49117] [client 20.166.31.184:28509] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/huya.php"] [unique_id "aeDkNTbDwvcXorHR_MznzwAAAVU"]
[Thu Apr 16 21:29:26.376975 2026] [:error] [pid 29603:tid 29610] [client 20.166.31.184:22149] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/huya.php"] [unique_id "aeDkNlfGOR6fpTWUAzqbWgAAAQU"]
[Thu Apr 16 21:29:27.351499 2026] [:error] [pid 57536:tid 57562] [client 20.166.31.184:22188] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/huya.php"] [unique_id "aeDkNyQU4faGja6jpDuFtwAAAA4"]
[Thu Apr 16 21:29:28.485123 2026] [:error] [pid 57536:tid 57559] [client 20.166.31.184:27420] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeDkOCQU4faGja6jpDuFugAAAAs"]
[Thu Apr 16 21:29:29.670298 2026] [:error] [pid 57536:tid 57570] [client 20.166.31.184:31038] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeDkOSQU4faGja6jpDuFvQAAABY"]
[Thu Apr 16 21:29:30.569045 2026] [:error] [pid 29603:tid 29606] [client 20.166.31.184:2598] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeDkOlfGOR6fpTWUAzqbYQAAAQE"]
[Thu Apr 16 21:29:31.976836 2026] [:error] [pid 7880:tid 7887] [client 20.166.31.184:2614] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeDkO6aezm4fSGc0yUKwVgAAAYI"]
[Thu Apr 16 21:29:33.660666 2026] [:error] [pid 57639:tid 57662] [client 20.166.31.184:54176] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeDkPaMCQoTw7TsxWum4OAAAANA"]
[Thu Apr 16 21:29:34.490576 2026] [:error] [pid 57639:tid 57665] [client 20.166.31.184:54178] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeDkPqMCQoTw7TsxWum4PgAAANM"]
[Thu Apr 16 21:29:35.366557 2026] [:error] [pid 57639:tid 57661] [client 20.166.31.184:28755] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeDkP6MCQoTw7TsxWum4QgAAAM8"]
[Thu Apr 16 21:29:37.130594 2026] [:error] [pid 49094:tid 49110] [client 20.166.31.184:2457] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeDkQTbDwvcXorHR_Mzn8QAAAU4"]
[Thu Apr 16 21:29:37.835455 2026] [:error] [pid 57639:tid 57653] [client 20.166.31.184:2581] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeDkQaMCQoTw7TsxWum4SQAAAMc"]
[Thu Apr 16 21:29:39.106286 2026] [:error] [pid 49094:tid 49102] [client 20.166.31.184:2478] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeDkQzbDwvcXorHR_Mzn9QAAAUY"]
[Thu Apr 16 21:29:40.054079 2026] [:error] [pid 57639:tid 57648] [client 20.166.31.184:27404] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeDkRKMCQoTw7TsxWum4XgAAAMI"]
[Thu Apr 16 21:29:40.849218 2026] [:error] [pid 49094:tid 49096] [client 20.166.31.184:31031] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeDkRDbDwvcXorHR_Mzn_wAAAUA"]
[Thu Apr 16 21:29:41.944205 2026] [:error] [pid 57639:tid 57651] [client 20.166.31.184:30321] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeDkRaMCQoTw7TsxWum4aQAAAMU"]
[Thu Apr 16 21:29:43.458948 2026] [:error] [pid 57538:tid 57624] [client 20.166.31.184:16330] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeDkR8uMaiEF5SVR2Bfm3gAAAJY"]
[Thu Apr 16 21:29:45.017442 2026] [:error] [pid 57538:tid 57607] [client 20.166.31.184:50896] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeDkScuMaiEF5SVR2Bfm4AAAAIU"]
[Thu Apr 16 21:29:47.850571 2026] [:error] [pid 29603:tid 29618] [client 20.166.31.184:31025] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeDkS1fGOR6fpTWUAzqbdgAAAQ0"]
[Thu Apr 16 21:29:50.571830 2026] [:error] [pid 29603:tid 29619] [client 20.166.31.184:28217] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "aeDkTlfGOR6fpTWUAzqbeQAAAQ4"]
[Thu Apr 16 21:29:51.647098 2026] [:error] [pid 57538:tid 57626] [client 20.166.31.184:16368] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "aeDkT8uMaiEF5SVR2Bfm7AAAAJg"]
[Thu Apr 16 21:29:52.931648 2026] [:error] [pid 49094:tid 49098] [client 20.166.31.184:16338] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "aeDkUDbDwvcXorHR_MzoFQAAAUI"]
[Thu Apr 16 21:29:53.684098 2026] [:error] [pid 49094:tid 49116] [client 20.166.31.184:33593] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "aeDkUTbDwvcXorHR_MzoFgAAAVQ"]
[Thu Apr 16 21:29:54.868969 2026] [:error] [pid 57639:tid 57646] [client 20.166.31.184:2599] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeDkUqMCQoTw7TsxWum4fgAAAMA"]
[Thu Apr 16 21:29:56.255448 2026] [:error] [pid 57639:tid 57650] [client 20.166.31.184:28177] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeDkVKMCQoTw7TsxWum4gAAAAMQ"]
[Thu Apr 16 21:29:57.367243 2026] [:error] [pid 49094:tid 49117] [client 20.166.31.184:28202] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeDkVTbDwvcXorHR_MzoIgAAAVU"]
[Thu Apr 16 21:29:58.362792 2026] [:error] [pid 57639:tid 57666] [client 20.166.31.184:2603] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeDkVqMCQoTw7TsxWum4hgAAANQ"]
[Thu Apr 16 21:29:59.429808 2026] [:error] [pid 7880:tid 7896] [client 20.166.31.184:33588] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeDkV6aezm4fSGc0yUKwZgAAAYs"]
[Thu Apr 16 21:30:00.240958 2026] [:error] [pid 57639:tid 57658] [client 20.166.31.184:41411] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeDkWKMCQoTw7TsxWum4jgAAAMw"]
[Thu Apr 16 21:30:01.049988 2026] [:error] [pid 49094:tid 49110] [client 20.166.31.184:33554] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeDkWTbDwvcXorHR_MzoJgAAAU4"]
[Thu Apr 16 21:30:01.969231 2026] [:error] [pid 57639:tid 57669] [client 20.166.31.184:41412] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeDkWaMCQoTw7TsxWum4kgAAANc"]
[Thu Apr 16 21:30:03.695148 2026] [:error] [pid 57639:tid 57656] [client 20.166.31.184:38081] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeDkW6MCQoTw7TsxWum4lwAAAMo"]
[Thu Apr 16 21:30:04.961889 2026] [:error] [pid 57639:tid 57650] [client 20.166.31.184:50921] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeDkXKMCQoTw7TsxWum4mwAAAMQ"]
[Thu Apr 16 21:30:06.231697 2026] [:error] [pid 57639:tid 57654] [client 20.166.31.184:21476] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeDkXqMCQoTw7TsxWum4ogAAAMg"]
[Thu Apr 16 21:30:07.697301 2026] [:error] [pid 7880:tid 7897] [client 20.166.31.184:33585] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeDkX6aezm4fSGc0yUKwaAAAAYw"]
[Thu Apr 16 21:30:09.136123 2026] [:error] [pid 57537:tid 57593] [client 20.166.31.184:16322] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeDkYVVQRS8nm73ENAm7hAAAAFI"]
[Thu Apr 16 21:30:10.936965 2026] [:error] [pid 29603:tid 29629] [client 20.166.31.184:13967] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeDkYlfGOR6fpTWUAzqbfwAAARg"]
[Thu Apr 16 21:30:13.009815 2026] [:error] [pid 57639:tid 57653] [client 20.166.31.184:16344] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeDkZaMCQoTw7TsxWum4vQAAAMc"]
[Thu Apr 16 21:30:13.832695 2026] [:error] [pid 57639:tid 57670] [client 20.166.31.184:47581] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeDkZaMCQoTw7TsxWum4wQAAANg"]
[Thu Apr 16 21:30:14.630727 2026] [:error] [pid 57639:tid 57649] [client 20.166.31.184:41434] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeDkZqMCQoTw7TsxWum4xAAAAMM"]
[Thu Apr 16 21:30:15.418396 2026] [:error] [pid 57639:tid 57665] [client 20.166.31.184:47560] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeDkZ6MCQoTw7TsxWum4ygAAANM"]
[Thu Apr 16 21:30:16.201164 2026] [:error] [pid 57639:tid 57647] [client 20.166.31.184:10425] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeDkaKMCQoTw7TsxWum40AAAAME"]
[Thu Apr 16 21:30:17.345280 2026] [:error] [pid 57639:tid 57649] [client 20.166.31.184:24844] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeDkaaMCQoTw7TsxWum42QAAAMM"]
[Thu Apr 16 21:30:18.809328 2026] [:error] [pid 57639:tid 57667] [client 20.166.31.184:41451] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeDkaqMCQoTw7TsxWum45AAAANU"]
[Thu Apr 16 21:30:19.760313 2026] [:error] [pid 57639:tid 57665] [client 20.166.31.184:24865] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeDka6MCQoTw7TsxWum47QAAANM"]
[Thu Apr 16 21:30:20.541284 2026] [:error] [pid 57536:tid 57549] [client 20.166.31.184:24856] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeDkbCQU4faGja6jpDuGNQAAAAE"]
[Thu Apr 16 21:30:21.750829 2026] [:error] [pid 49094:tid 49105] [client 20.166.31.184:33588] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeDkbTbDwvcXorHR_MzoTQAAAUk"]
[Thu Apr 16 21:30:22.569582 2026] [:error] [pid 49094:tid 49098] [client 20.166.31.184:3038] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aeDkbjbDwvcXorHR_MzoUgAAAUI"]
[Thu Apr 16 21:30:30.522407 2026] [autoindex:error] [pid 57639:tid 57662] [client 20.166.31.184:24849] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 21:30:41.969642 2026] [:error] [pid 57639:tid 57656] [client 20.166.31.184:24849] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeDkgaMCQoTw7TsxWum5ZwAAAMo"]
[Thu Apr 16 21:30:43.176801 2026] [:error] [pid 7880:tid 7904] [client 20.166.31.184:47524] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeDkg6aezm4fSGc0yUKwqgAAAZM"]
[Thu Apr 16 21:30:44.476164 2026] [:error] [pid 57639:tid 57663] [client 20.166.31.184:38006] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeDkhKMCQoTw7TsxWum5fgAAANE"]
[Thu Apr 16 21:30:45.346830 2026] [:error] [pid 7880:tid 7889] [client 20.166.31.184:44976] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeDkhaaezm4fSGc0yUKwsQAAAYQ"]
[Thu Apr 16 21:30:50.081606 2026] [:error] [pid 7880:tid 7907] [client 20.166.31.184:41350] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeDkiqaezm4fSGc0yUKwtwAAAZY"]
[Thu Apr 16 21:30:50.914035 2026] [:error] [pid 49094:tid 49111] [client 20.166.31.184:27523] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeDkijbDwvcXorHR_MzovAAAAU8"]
[Thu Apr 16 21:30:51.801826 2026] [:error] [pid 57639:tid 57665] [client 20.166.31.184:30714] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeDki6MCQoTw7TsxWum5lAAAANM"]
[Thu Apr 16 21:30:52.738608 2026] [:error] [pid 57639:tid 57667] [client 20.166.31.184:2496] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeDkjKMCQoTw7TsxWum5lgAAANU"]
[Thu Apr 16 21:30:53.754751 2026] [:error] [pid 49094:tid 49101] [client 20.166.31.184:11293] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeDkjTbDwvcXorHR_MzoxgAAAUU"]
[Thu Apr 16 21:30:54.684774 2026] [:error] [pid 29603:tid 29615] [client 20.166.31.184:19122] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeDkjlfGOR6fpTWUAzqbrwAAAQo"]
[Thu Apr 16 21:30:55.274812 2026] [:error] [pid 57639:tid 57651] [client 20.166.31.184:47492] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeDkj6MCQoTw7TsxWum5qQAAAMU"]
[Thu Apr 16 21:30:55.911157 2026] [:error] [pid 7880:tid 7904] [client 20.166.31.184:12409] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeDkj6aezm4fSGc0yUKwvQAAAZM"]
[Thu Apr 16 21:30:57.696759 2026] [:error] [pid 57536:tid 57564] [client 20.166.31.184:14088] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeDkkSQU4faGja6jpDuGXwAAABA"]
[Thu Apr 16 21:30:58.454214 2026] [:error] [pid 7880:tid 7886] [client 20.166.31.184:46358] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeDkkqaezm4fSGc0yUKwwwAAAYE"]
[Thu Apr 16 21:30:59.203158 2026] [:error] [pid 57537:tid 57582] [client 20.166.31.184:11303] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeDkk1VQRS8nm73ENAm7mwAAAEc"]
[Thu Apr 16 21:31:00.440786 2026] [:error] [pid 57536:tid 57551] [client 20.166.31.184:37993] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeDklCQU4faGja6jpDuGYQAAAAM"]
[Thu Apr 16 21:31:01.624200 2026] [:error] [pid 57639:tid 57665] [client 20.166.31.184:49726] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeDklaMCQoTw7TsxWum5rgAAANM"]
[Thu Apr 16 21:31:02.488799 2026] [:error] [pid 49094:tid 49105] [client 20.166.31.184:2541] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeDkljbDwvcXorHR_Mzo0gAAAUk"]
[Thu Apr 16 21:31:03.473903 2026] [:error] [pid 57639:tid 57651] [client 20.166.31.184:49722] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeDkl6MCQoTw7TsxWum5sQAAAMU"]
[Thu Apr 16 21:31:04.798886 2026] [:error] [pid 57639:tid 57657] [client 20.166.31.184:11305] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeDkmKMCQoTw7TsxWum5uQAAAMs"]
[Thu Apr 16 21:31:05.499017 2026] [:error] [pid 49094:tid 49117] [client 20.166.31.184:19084] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeDkmTbDwvcXorHR_Mzo2wAAAVU"]
[Thu Apr 16 21:31:06.238618 2026] [:error] [pid 29603:tid 29629] [client 20.166.31.184:45875] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeDkmlfGOR6fpTWUAzqbswAAARg"]
[Thu Apr 16 21:31:06.891469 2026] [:error] [pid 29603:tid 29612] [client 20.166.31.184:41394] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeDkmlfGOR6fpTWUAzqbtAAAAQc"]
[Thu Apr 16 21:31:09.223073 2026] [:error] [pid 57639:tid 57660] [client 20.166.31.184:27561] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeDknaMCQoTw7TsxWum5xwAAAM4"]
[Thu Apr 16 21:31:09.938568 2026] [:error] [pid 57538:tid 57619] [client 20.166.31.184:30681] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeDkncuMaiEF5SVR2BfnHAAAAJE"]
[Thu Apr 16 21:31:11.000278 2026] [:error] [pid 57639:tid 57659] [client 20.166.31.184:31135] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeDknqMCQoTw7TsxWum5zAAAAM0"]
[Thu Apr 16 21:31:12.963886 2026] [:error] [pid 57639:tid 57665] [client 20.166.31.184:54273] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeDkoKMCQoTw7TsxWum5zwAAANM"]
[Thu Apr 16 21:31:15.060102 2026] [:error] [pid 57536:tid 57570] [client 20.166.31.184:2598] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeDkoyQU4faGja6jpDuGbQAAABY"]
[Thu Apr 16 21:31:16.361756 2026] [:error] [pid 57536:tid 57569] [client 20.166.31.184:46399] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeDkpCQU4faGja6jpDuGcAAAABU"]
[Thu Apr 16 21:31:18.009249 2026] [:error] [pid 57536:tid 57562] [client 20.166.31.184:27541] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeDkpiQU4faGja6jpDuGdgAAAA4"]
[Thu Apr 16 21:31:19.036149 2026] [:error] [pid 49094:tid 49112] [client 20.166.31.184:2124] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeDkpzbDwvcXorHR_Mzo6AAAAVA"]
[Thu Apr 16 21:31:19.678388 2026] [:error] [pid 57537:tid 57588] [client 20.166.31.184:47535] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeDkp1VQRS8nm73ENAm7rwAAAE0"]
[Thu Apr 16 21:31:20.327594 2026] [:error] [pid 49094:tid 49117] [client 20.166.31.184:2075] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeDkqDbDwvcXorHR_Mzo6QAAAVU"]
[Thu Apr 16 21:31:21.103181 2026] [:error] [pid 57536:tid 57563] [client 20.166.31.184:40127] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeDkqSQU4faGja6jpDuGfQAAAA8"]
[Thu Apr 16 21:31:22.334640 2026] [:error] [pid 7880:tid 7888] [client 20.166.31.184:31118] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeDkqqaezm4fSGc0yUKwywAAAYM"]
[Thu Apr 16 21:31:23.275735 2026] [:error] [pid 57639:tid 57665] [client 20.166.31.184:43158] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeDkq6MCQoTw7TsxWum51wAAANM"]
[Thu Apr 16 21:31:24.313676 2026] [:error] [pid 57639:tid 57654] [client 20.166.31.184:32065] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeDkrKMCQoTw7TsxWum52QAAAMg"]
[Thu Apr 16 21:31:25.382327 2026] [:error] [pid 49094:tid 49118] [client 20.166.31.184:32105] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeDkrTbDwvcXorHR_Mzo9AAAAVY"]
[Thu Apr 16 21:31:27.102989 2026] [:error] [pid 49094:tid 49119] [client 20.166.31.184:40068] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeDkrzbDwvcXorHR_Mzo-wAAAVc"]
[Thu Apr 16 21:31:28.193855 2026] [:error] [pid 29603:tid 29607] [client 20.166.31.184:10643] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeDksFfGOR6fpTWUAzqbwgAAAQI"]
[Thu Apr 16 21:31:29.971827 2026] [:error] [pid 29603:tid 29623] [client 20.166.31.184:22004] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeDksVfGOR6fpTWUAzqbxAAAARI"]
[Thu Apr 16 21:31:31.880430 2026] [:error] [pid 7880:tid 7888] [client 20.166.31.184:21274] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeDks6aezm4fSGc0yUKw1QAAAYM"]
[Thu Apr 16 21:31:33.153421 2026] [:error] [pid 57536:tid 57561] [client 20.166.31.184:48292] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeDktSQU4faGja6jpDuGiAAAAA0"]
[Thu Apr 16 21:31:34.261315 2026] [:error] [pid 57536:tid 57568] [client 20.166.31.184:40471] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeDktiQU4faGja6jpDuGlgAAABQ"]
[Thu Apr 16 21:31:35.042998 2026] [:error] [pid 7880:tid 7885] [client 20.166.31.184:2371] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeDkt6aezm4fSGc0yUKw2gAAAYA"]
[Thu Apr 16 21:31:35.766732 2026] [:error] [pid 57536:tid 57572] [client 20.166.31.184:43137] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeDktyQU4faGja6jpDuGpQAAABg"]
[Thu Apr 16 21:31:36.730825 2026] [:error] [pid 57536:tid 57557] [client 20.166.31.184:54304] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeDkuCQU4faGja6jpDuGsQAAAAk"]
[Thu Apr 16 21:31:39.245008 2026] [:error] [pid 57538:tid 57613] [client 20.166.31.184:36934] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeDku8uMaiEF5SVR2BfnKwAAAIs"]
[Thu Apr 16 21:31:56.772280 2026] [:error] [pid 57537:tid 57584] [client 20.166.31.184:21983] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeDkzFVQRS8nm73ENAm72gAAAEk"]
[Thu Apr 16 21:31:58.360860 2026] [:error] [pid 7880:tid 7906] [client 20.166.31.184:40178] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeDkzqaezm4fSGc0yUKxGwAAAZU"]
[Thu Apr 16 21:31:59.467838 2026] [:error] [pid 57536:tid 57566] [client 20.166.31.184:46831] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeDkzyQU4faGja6jpDuHGAAAABI"]
[Thu Apr 16 21:32:00.809272 2026] [:error] [pid 49094:tid 49109] [client 20.166.31.184:50401] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeDk0DbDwvcXorHR_MzpOAAAAU0"]
[Thu Apr 16 21:32:01.809492 2026] [:error] [pid 57639:tid 57659] [client 20.166.31.184:20866] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeDk0aMCQoTw7TsxWum6UwAAAM0"]
[Thu Apr 16 21:32:02.947266 2026] [:error] [pid 57536:tid 57562] [client 20.166.31.184:52507] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeDk0iQU4faGja6jpDuHHwAAAA4"]
[Thu Apr 16 21:32:03.785130 2026] [:error] [pid 7880:tid 7887] [client 20.166.31.184:46840] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeDk06aezm4fSGc0yUKxIQAAAYI"]
[Thu Apr 16 21:32:04.669923 2026] [:error] [pid 57639:tid 57647] [client 20.166.31.184:17851] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeDk1KMCQoTw7TsxWum6YAAAAME"]
[Thu Apr 16 21:32:05.543572 2026] [:error] [pid 57537:tid 57589] [client 20.166.31.184:27603] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aeDk1VVQRS8nm73ENAm73AAAAE4"]
[Thu Apr 16 21:32:07.518891 2026] [:error] [pid 49094:tid 49102] [client 20.166.31.184:17836] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aeDk1zbDwvcXorHR_MzpRgAAAUY"]
[Thu Apr 16 21:32:09.641574 2026] [:error] [pid 57536:tid 57563] [client 20.166.31.184:27642] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aeDk2SQU4faGja6jpDuHJgAAAA8"]
[Thu Apr 16 21:32:11.480769 2026] [:error] [pid 49094:tid 49112] [client 20.166.31.184:50409] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aeDk2zbDwvcXorHR_MzpTgAAAVA"]
[Thu Apr 16 21:32:14.093401 2026] [:error] [pid 57639:tid 57654] [client 20.166.31.184:20869] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aeDk3qMCQoTw7TsxWum6egAAAMg"]
[Thu Apr 16 21:32:15.201904 2026] [:error] [pid 7880:tid 7885] [client 20.166.31.184:50404] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aeDk36aezm4fSGc0yUKxJgAAAYA"]
[Thu Apr 16 21:32:16.192944 2026] [:error] [pid 57639:tid 57649] [client 20.166.31.184:28006] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aeDk4KMCQoTw7TsxWum6gAAAAMM"]
[Thu Apr 16 21:32:17.067251 2026] [:error] [pid 57639:tid 57658] [client 20.166.31.184:50370] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aeDk4aMCQoTw7TsxWum6hQAAAMw"]
[Thu Apr 16 21:32:17.992943 2026] [:error] [pid 57536:tid 57548] [client 20.166.31.184:2366] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aeDk4SQU4faGja6jpDuHKgAAAAA"]
[Thu Apr 16 21:32:18.982736 2026] [:error] [pid 57639:tid 57651] [client 20.166.31.184:27994] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aeDk4qMCQoTw7TsxWum6jgAAAMU"]
[Thu Apr 16 21:32:20.852699 2026] [:error] [pid 49094:tid 49099] [client 20.166.31.184:23336] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aeDk5DbDwvcXorHR_MzpWAAAAUM"]
[Thu Apr 16 21:32:21.898450 2026] [:error] [pid 49094:tid 49112] [client 20.166.31.184:50380] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aeDk5TbDwvcXorHR_MzpWwAAAVA"]
[Thu Apr 16 21:32:22.904513 2026] [:error] [pid 57639:tid 57648] [client 20.166.31.184:25321] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeDk5qMCQoTw7TsxWum6nAAAAMI"]
[Thu Apr 16 21:32:23.883870 2026] [:error] [pid 57639:tid 57647] [client 20.166.31.184:2925] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeDk56MCQoTw7TsxWum6ogAAAME"]
[Thu Apr 16 21:32:26.241593 2026] [:error] [pid 57639:tid 57660] [client 20.166.31.184:2917] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeDk6qMCQoTw7TsxWum6rQAAAM4"]
[Thu Apr 16 21:32:27.368514 2026] [:error] [pid 57639:tid 57657] [client 20.166.31.184:2892] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeDk66MCQoTw7TsxWum6swAAAMs"]
[Thu Apr 16 21:32:28.501326 2026] [:error] [pid 57536:tid 57561] [client 20.166.31.184:35773] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aeDk7CQU4faGja6jpDuHNQAAAA0"]
[Thu Apr 16 21:32:30.375086 2026] [:error] [pid 49094:tid 49110] [client 20.166.31.184:23961] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aeDk7jbDwvcXorHR_MzpaQAAAU4"]
[Thu Apr 16 21:32:33.460679 2026] [:error] [pid 57538:tid 57606] [client 20.166.31.184:27980] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aeDk8cuMaiEF5SVR2BfnWgAAAIQ"]
[Thu Apr 16 21:32:35.621522 2026] [:error] [pid 57639:tid 57660] [client 20.166.31.184:35760] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aeDk86MCQoTw7TsxWum6zAAAAM4"]
[Thu Apr 16 21:32:38.553547 2026] [:error] [pid 57537:tid 57599] [client 20.166.31.184:19182] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeDk9lVQRS8nm73ENAm74wAAAFg"]
[Thu Apr 16 21:32:41.474389 2026] [:error] [pid 49094:tid 49111] [client 20.166.31.184:55966] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeDk-TbDwvcXorHR_MzpeQAAAU8"]
[Thu Apr 16 21:32:46.211244 2026] [:error] [pid 57639:tid 57651] [client 20.166.31.184:23335] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeDk_qMCQoTw7TsxWum66gAAAMU"]
[Thu Apr 16 21:32:47.184841 2026] [:error] [pid 29603:tid 29625] [client 20.166.31.184:52521] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeDk_1fGOR6fpTWUAzqb9QAAARQ"]
[Thu Apr 16 21:32:48.346784 2026] [:error] [pid 57639:tid 57647] [client 20.166.31.184:23979] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeDlAKMCQoTw7TsxWum68gAAAME"]
[Thu Apr 16 21:32:49.719019 2026] [:error] [pid 57537:tid 57579] [client 20.166.31.184:21157] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeDlAVVQRS8nm73ENAm75AAAAEQ"]
[Thu Apr 16 21:32:50.334432 2026] [:error] [pid 57639:tid 57657] [client 20.166.31.184:27600] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeDlAqMCQoTw7TsxWum6-QAAAMs"]
[Thu Apr 16 21:32:51.895563 2026] [:error] [pid 7880:tid 7899] [client 20.166.31.184:36930] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeDlA6aezm4fSGc0yUKxKwAAAY4"]
[Thu Apr 16 21:32:53.011672 2026] [:error] [pid 7880:tid 7893] [client 20.166.31.184:46809] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeDlBaaezm4fSGc0yUKxMwAAAYg"]
[Thu Apr 16 21:32:53.828803 2026] [:error] [pid 57639:tid 57650] [client 20.166.31.184:32996] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeDlBaMCQoTw7TsxWum7AgAAAMQ"]
[Thu Apr 16 21:32:54.613748 2026] [:error] [pid 57639:tid 57653] [client 20.166.31.184:50385] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeDlBqMCQoTw7TsxWum7BAAAAMc"]
[Thu Apr 16 21:33:12.410350 2026] [:error] [pid 57639:tid 57660] [client 20.166.31.184:14449] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeDlGKMCQoTw7TsxWum7SAAAAM4"]
[Thu Apr 16 21:33:13.362181 2026] [:error] [pid 49094:tid 49118] [client 20.166.31.184:10636] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeDlGTbDwvcXorHR_Mzp3wAAAVY"]
[Thu Apr 16 21:33:15.252053 2026] [:error] [pid 57538:tid 57609] [client 20.166.31.184:30239] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeDlG8uMaiEF5SVR2BfoFAAAAIc"]
[Thu Apr 16 21:33:16.656779 2026] [:error] [pid 57536:tid 57552] [client 20.166.31.184:25211] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeDlHCQU4faGja6jpDuHZgAAAAQ"]
[Thu Apr 16 21:33:17.350649 2026] [:error] [pid 57536:tid 57554] [client 20.166.31.184:2154] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeDlHSQU4faGja6jpDuHbQAAAAY"]
[Thu Apr 16 21:33:18.135564 2026] [:error] [pid 7880:tid 7903] [client 20.166.31.184:50995] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeDlHqaezm4fSGc0yUKxRwAAAZI"]
[Thu Apr 16 21:33:18.842320 2026] [:error] [pid 57538:tid 57614] [client 20.166.31.184:31126] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeDlHsuMaiEF5SVR2BfoFwAAAIw"]
[Thu Apr 16 21:33:20.040815 2026] [:error] [pid 29603:tid 29624] [client 20.166.31.184:21308] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeDlIFfGOR6fpTWUAzqcDwAAARM"]
[Thu Apr 16 21:33:21.146182 2026] [:error] [pid 57639:tid 57648] [client 20.166.31.184:31115] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeDlIaMCQoTw7TsxWum7XQAAAMI"]
[Thu Apr 16 21:33:22.359451 2026] [:error] [pid 29603:tid 29614] [client 20.166.31.184:44423] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeDlIlfGOR6fpTWUAzqcFAAAAQk"]
[Thu Apr 16 21:33:23.042056 2026] [:error] [pid 49094:tid 49112] [client 20.166.31.184:50980] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeDlIzbDwvcXorHR_MzqOQAAAVA"]
[Thu Apr 16 21:33:23.646697 2026] [:error] [pid 49094:tid 49103] [client 20.166.31.184:46268] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeDlIzbDwvcXorHR_MzqRAAAAUc"]
[Thu Apr 16 21:33:24.488231 2026] [:error] [pid 49094:tid 49111] [client 20.166.31.184:46261] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aeDlJDbDwvcXorHR_MzqSgAAAU8"]
[Thu Apr 16 21:33:25.661657 2026] [:error] [pid 57536:tid 57558] [client 20.166.31.184:21311] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aeDlJSQU4faGja6jpDuHdQAAAAo"]
[Thu Apr 16 21:33:26.493372 2026] [:error] [pid 57536:tid 57561] [client 20.166.31.184:2397] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aeDlJiQU4faGja6jpDuHeAAAAA0"]
[Thu Apr 16 21:33:27.408008 2026] [:error] [pid 49094:tid 49115] [client 20.166.31.184:31120] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aeDlJzbDwvcXorHR_MzqUAAAAVM"]
[Thu Apr 16 21:33:28.386065 2026] [:error] [pid 57536:tid 57560] [client 20.166.31.184:20267] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aeDlKCQU4faGja6jpDuHeQAAAAw"]
[Thu Apr 16 21:33:29.117764 2026] [:error] [pid 57536:tid 57553] [client 20.166.31.184:44429] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aeDlKSQU4faGja6jpDuHewAAAAU"]
[Thu Apr 16 21:33:30.085386 2026] [:error] [pid 29603:tid 29606] [client 20.166.31.184:31136] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aeDlKlfGOR6fpTWUAzqcGQAAAQE"]
[Thu Apr 16 21:33:30.767705 2026] [:error] [pid 57538:tid 57619] [client 20.166.31.184:31138] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aeDlKsuMaiEF5SVR2BfoHgAAAJE"]
[Thu Apr 16 21:33:31.556105 2026] [:error] [pid 57639:tid 57656] [client 20.166.31.184:44456] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aeDlK6MCQoTw7TsxWum7fwAAAMo"]
[Thu Apr 16 21:33:32.429203 2026] [:error] [pid 57639:tid 57647] [client 20.166.31.184:2142] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aeDlLKMCQoTw7TsxWum7hAAAAME"]
[Thu Apr 16 21:33:33.109645 2026] [:error] [pid 57639:tid 57660] [client 20.166.31.184:25212] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aeDlLaMCQoTw7TsxWum7hwAAAM4"]
[Thu Apr 16 21:33:34.417505 2026] [:error] [pid 57538:tid 57623] [client 20.166.31.184:2132] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "aeDlLsuMaiEF5SVR2BfoIQAAAJU"]
[Thu Apr 16 21:33:35.160185 2026] [:error] [pid 49094:tid 49097] [client 20.166.31.184:20278] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aeDlLzbDwvcXorHR_MzqYwAAAUE"]
[Thu Apr 16 21:33:36.125357 2026] [:error] [pid 49094:tid 49104] [client 20.166.31.184:54283] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aeDlMDbDwvcXorHR_MzqZgAAAUg"]
[Thu Apr 16 21:33:36.995465 2026] [:error] [pid 49094:tid 49105] [client 20.166.31.184:54317] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aeDlMDbDwvcXorHR_MzqagAAAUk"]
[Thu Apr 16 21:33:37.752695 2026] [:error] [pid 49094:tid 49106] [client 20.166.31.184:33377] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aeDlMTbDwvcXorHR_MzqbgAAAUo"]
[Thu Apr 16 21:33:38.463306 2026] [:error] [pid 57536:tid 57566] [client 20.166.31.184:54308] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aeDlMiQU4faGja6jpDuHgwAAABI"]
[Thu Apr 16 21:33:39.324143 2026] [:error] [pid 7880:tid 7900] [client 20.166.31.184:30236] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aeDlM6aezm4fSGc0yUKxUAAAAY8"]
[Thu Apr 16 21:33:40.003345 2026] [:error] [pid 49094:tid 49117] [client 20.166.31.184:36602] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aeDlNDbDwvcXorHR_MzqcgAAAVU"]
[Thu Apr 16 21:33:40.839638 2026] [:error] [pid 57536:tid 57558] [client 20.166.31.184:46253] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aeDlNCQU4faGja6jpDuHiAAAAAo"]
[Thu Apr 16 21:33:41.571798 2026] [:error] [pid 29603:tid 29622] [client 20.166.31.184:30256] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aeDlNVfGOR6fpTWUAzqcIQAAARE"]
[Thu Apr 16 21:33:42.272269 2026] [:error] [pid 49094:tid 49099] [client 20.166.31.184:20230] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aeDlNjbDwvcXorHR_MzqdgAAAUM"]
[Thu Apr 16 21:33:43.595293 2026] [:error] [pid 57537:tid 57581] [client 20.166.31.184:31163] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aeDlN1VQRS8nm73ENAm76gAAAEY"]
[Thu Apr 16 21:33:44.380388 2026] [:error] [pid 57538:tid 57624] [client 20.166.31.184:2412] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aeDlOMuMaiEF5SVR2BfoJQAAAJY"]
[Thu Apr 16 21:33:45.279608 2026] [:error] [pid 29603:tid 29628] [client 20.166.31.184:31133] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeDlOVfGOR6fpTWUAzqcJAAAARc"]
[Thu Apr 16 21:33:46.579621 2026] [:error] [pid 57536:tid 57571] [client 20.166.31.184:54305] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeDlOiQU4faGja6jpDuHjwAAABc"]
[Thu Apr 16 21:33:47.803015 2026] [:error] [pid 7880:tid 7891] [client 20.166.31.184:33361] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeDlO6aezm4fSGc0yUKxWwAAAYY"]
[Thu Apr 16 21:33:48.498435 2026] [:error] [pid 29603:tid 29615] [client 20.166.31.184:33392] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeDlPFfGOR6fpTWUAzqcJwAAAQo"]
[Thu Apr 16 21:33:49.280688 2026] [:error] [pid 49094:tid 49102] [client 20.166.31.184:31112] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeDlPTbDwvcXorHR_MzqfwAAAUY"]
[Thu Apr 16 21:33:50.037668 2026] [:error] [pid 57536:tid 57559] [client 20.166.31.184:36561] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeDlPiQU4faGja6jpDuHlAAAAAs"]
[Thu Apr 16 21:33:51.561632 2026] [:error] [pid 7880:tid 7900] [client 20.166.31.184:2392] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeDlP6aezm4fSGc0yUKxYQAAAY8"]
[Thu Apr 16 21:33:53.180974 2026] [:error] [pid 57537:tid 57589] [client 20.166.31.184:2428] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeDlQVVQRS8nm73ENAm76wAAAE4"]
[Thu Apr 16 21:33:53.926567 2026] [:error] [pid 57536:tid 57554] [client 20.166.31.184:46216] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeDlQSQU4faGja6jpDuHmwAAAAY"]
[Thu Apr 16 21:33:54.955674 2026] [:error] [pid 57536:tid 57570] [client 20.166.31.184:2406] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeDlQiQU4faGja6jpDuHogAAABY"]
[Thu Apr 16 21:33:56.103302 2026] [:error] [pid 7880:tid 7899] [client 20.166.31.184:24068] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeDlRKaezm4fSGc0yUKxZgAAAY4"]
[Thu Apr 16 21:33:57.001315 2026] [:error] [pid 49094:tid 49108] [client 20.166.31.184:24118] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeDlRTbDwvcXorHR_MzqhQAAAUw"]
[Thu Apr 16 21:33:57.600085 2026] [:error] [pid 57538:tid 57610] [client 20.166.31.184:36546] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aeDlRcuMaiEF5SVR2BfoLwAAAIg"]
[Thu Apr 16 21:33:58.350915 2026] [:error] [pid 57538:tid 57613] [client 20.166.31.184:2119] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aeDlRsuMaiEF5SVR2BfoMQAAAIs"]
[Thu Apr 16 21:33:59.072268 2026] [:error] [pid 57537:tid 57591] [client 20.166.31.184:54321] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aeDlR1VQRS8nm73ENAm77QAAAFA"]
[Thu Apr 16 21:34:00.220364 2026] [:error] [pid 49094:tid 49096] [client 20.166.31.184:24107] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aeDlSDbDwvcXorHR_MzqiAAAAUA"]
[Thu Apr 16 21:34:00.964449 2026] [:error] [pid 57639:tid 57659] [client 20.166.31.184:2395] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeDlSKMCQoTw7TsxWum7lAAAAM0"]
[Thu Apr 16 21:34:02.216824 2026] [:error] [pid 57639:tid 57655] [client 20.166.31.184:31667] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeDlSqMCQoTw7TsxWum7mQAAAMk"]
[Thu Apr 16 21:34:02.818940 2026] [:error] [pid 57639:tid 57666] [client 20.166.31.184:20254] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeDlSqMCQoTw7TsxWum7mwAAANQ"]
[Thu Apr 16 21:34:03.497251 2026] [:error] [pid 7880:tid 7905] [client 20.166.31.184:19323] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeDlS6aezm4fSGc0yUKxawAAAZQ"]
[Thu Apr 16 21:34:04.433589 2026] [:error] [pid 29603:tid 29626] [client 20.166.31.184:33357] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aeDlTFfGOR6fpTWUAzqcKwAAARU"]
[Thu Apr 16 21:34:05.483711 2026] [:error] [pid 57537:tid 57576] [client 20.166.31.184:20234] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aeDlTVVQRS8nm73ENAm77wAAAEE"]
[Thu Apr 16 21:34:06.294418 2026] [:error] [pid 49094:tid 49106] [client 20.166.31.184:24407] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aeDlTjbDwvcXorHR_MzqiwAAAUo"]
[Thu Apr 16 21:34:07.070242 2026] [:error] [pid 57639:tid 57664] [client 20.166.31.184:54306] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aeDlT6MCQoTw7TsxWum7nwAAANI"]
[Thu Apr 16 21:34:07.981751 2026] [:error] [pid 57639:tid 57670] [client 20.166.31.184:19314] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aeDlT6MCQoTw7TsxWum7pQAAANg"]
[Thu Apr 16 21:34:08.882279 2026] [:error] [pid 57639:tid 57646] [client 20.166.31.184:24395] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aeDlUKMCQoTw7TsxWum7qAAAAMA"]
[Thu Apr 16 21:34:23.402249 2026] [autoindex:error] [pid 57639:tid 57651] [client 20.166.31.184:36550] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 21:34:24.804296 2026] [autoindex:error] [pid 57639:tid 57656] [client 20.166.31.184:36550] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 16 21:34:28.552348 2026] [:error] [pid 57639:tid 57665] [client 20.166.31.184:36550] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeDlZKMCQoTw7TsxWum72wAAANM"]
[Thu Apr 16 21:34:29.380321 2026] [:error] [pid 49094:tid 49105] [client 20.166.31.184:36597] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeDlZTbDwvcXorHR_MzqqQAAAUk"]
[Thu Apr 16 21:34:30.335946 2026] [:error] [pid 57537:tid 57585] [client 20.166.31.184:2369] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeDlZlVQRS8nm73ENAm79QAAAEo"]
[Thu Apr 16 21:34:31.127842 2026] [:error] [pid 29603:tid 29623] [client 20.166.31.184:2114] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeDlZ1fGOR6fpTWUAzqcQwAAARI"]
[Thu Apr 16 21:34:31.998695 2026] [:error] [pid 57536:tid 57551] [client 20.166.31.184:24112] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeDlZyQU4faGja6jpDuHzQAAAAM"]
[Thu Apr 16 21:34:32.650842 2026] [:error] [pid 29603:tid 29611] [client 20.166.31.184:24108] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeDlaFfGOR6fpTWUAzqcRQAAAQY"]
[Thu Apr 16 21:34:33.391910 2026] [:error] [pid 57639:tid 57647] [client 20.166.31.184:24083] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeDlaaMCQoTw7TsxWum73gAAAME"]
[Thu Apr 16 21:34:34.695968 2026] [:error] [pid 57639:tid 57668] [client 20.166.31.184:24072] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeDlaqMCQoTw7TsxWum74AAAANY"]
[Thu Apr 16 21:34:35.639470 2026] [:error] [pid 57538:tid 57615] [client 20.166.31.184:14354] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeDla8uMaiEF5SVR2BfoQQAAAI0"]
[Thu Apr 16 21:34:36.495216 2026] [:error] [pid 49094:tid 49114] [client 20.166.31.184:30239] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeDlbDbDwvcXorHR_MzqugAAAVI"]
[Thu Apr 16 21:34:37.343139 2026] [:error] [pid 49094:tid 49113] [client 20.166.31.184:54298] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeDlbTbDwvcXorHR_MzqwAAAAVE"]
[Thu Apr 16 21:34:38.384667 2026] [:error] [pid 57537:tid 57586] [client 20.166.31.184:31651] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeDlblVQRS8nm73ENAm7-wAAAEs"]
[Thu Apr 16 21:34:39.329042 2026] [:error] [pid 49094:tid 49120] [client 20.166.31.184:54272] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aeDlbzbDwvcXorHR_MzqwwAAAVg"]
[Thu Apr 16 21:34:40.525718 2026] [:error] [pid 57536:tid 57549] [client 20.166.31.184:30270] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aeDlcCQU4faGja6jpDuH0gAAAAE"]
[Thu Apr 16 21:34:41.412439 2026] [:error] [pid 49094:tid 49117] [client 20.166.31.184:24114] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aeDlcTbDwvcXorHR_MzqygAAAVU"]
[Thu Apr 16 21:34:42.456258 2026] [:error] [pid 57639:tid 57662] [client 20.166.31.184:44472] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aeDlcqMCQoTw7TsxWum76wAAANA"]
[Thu Apr 16 21:34:43.133208 2026] [:error] [pid 57639:tid 57663] [client 20.166.31.184:14340] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aeDlc6MCQoTw7TsxWum77gAAANE"]
[Thu Apr 16 21:34:44.657335 2026] [:error] [pid 57639:tid 57659] [client 20.166.31.184:46237] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aeDldKMCQoTw7TsxWum78AAAAM0"]
[Thu Apr 16 21:34:45.507847 2026] [:error] [pid 57536:tid 57550] [client 20.166.31.184:27870] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aeDldSQU4faGja6jpDuH1QAAAAI"]
[Thu Apr 16 21:34:48.702463 2026] [:error] [pid 57639:tid 57649] [client 20.166.31.184:30604] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aeDleKMCQoTw7TsxWum7-AAAAMM"]
[Thu Apr 16 21:34:51.824633 2026] [:error] [pid 29603:tid 29618] [client 20.166.31.184:54293] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aeDle1fGOR6fpTWUAzqcUwAAAQ0"]
[Thu Apr 16 21:34:54.193454 2026] [:error] [pid 7880:tid 7909] [client 20.166.31.184:37150] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aeDlfqaezm4fSGc0yUKxkwAAAZg"]
[Thu Apr 16 21:34:57.432337 2026] [:error] [pid 57639:tid 57666] [client 20.166.31.184:27874] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aeDlgaMCQoTw7TsxWum8AwAAANQ"]
[Thu Apr 16 21:34:58.768543 2026] [:error] [pid 57639:tid 57658] [client 20.166.31.184:2815] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aeDlgqMCQoTw7TsxWum8CgAAAMw"]
[Thu Apr 16 21:35:02.321499 2026] [:error] [pid 49094:tid 49116] [client 20.166.31.184:43200] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aeDlhjbDwvcXorHR_Mzq2gAAAVQ"]
[Thu Apr 16 21:35:02.958826 2026] [:error] [pid 57639:tid 57646] [client 20.166.31.184:52583] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aeDlhqMCQoTw7TsxWum8KAAAAMA"]
[Thu Apr 16 21:35:03.880631 2026] [:error] [pid 57639:tid 57654] [client 20.166.31.184:23423] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aeDlh6MCQoTw7TsxWum8LgAAAMg"]
[Thu Apr 16 21:35:05.041342 2026] [:error] [pid 29603:tid 29627] [client 20.166.31.184:14871] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aeDliVfGOR6fpTWUAzqcXgAAARY"]
[Thu Apr 16 21:35:06.095841 2026] [:error] [pid 57639:tid 57653] [client 20.166.31.184:36078] [client 20.166.31.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeDliqMCQoTw7TsxWum8OwAAAMc"]
[Thu Apr 16 21:35:06.925483 2026] [:error] [pid 29603:tid 29609] [client 20.166.31.184:23362] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeDlilfGOR6fpTWUAzqcYQAAAQQ"]
[Thu Apr 16 21:35:08.036509 2026] [:error] [pid 7880:tid 7895] [client 20.166.31.184:28719] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeDljKaezm4fSGc0yUKxngAAAYo"]
[Thu Apr 16 21:35:08.835035 2026] [:error] [pid 29603:tid 29626] [client 20.166.31.184:14375] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeDljFfGOR6fpTWUAzqcZgAAARU"]
[Thu Apr 16 21:35:09.861027 2026] [:error] [pid 49094:tid 49109] [client 20.166.31.184:30650] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeDljTbDwvcXorHR_Mzq3gAAAU0"]
[Thu Apr 16 21:35:10.746080 2026] [:error] [pid 57536:tid 57562] [client 20.166.31.184:14901] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeDljiQU4faGja6jpDuH2gAAAA4"]
[Thu Apr 16 21:35:12.084442 2026] [:error] [pid 57536:tid 57560] [client 20.166.31.184:24711] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeDlkCQU4faGja6jpDuH3AAAAAw"]
[Thu Apr 16 21:35:13.061371 2026] [:error] [pid 57639:tid 57659] [client 20.166.31.184:2984] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeDlkaMCQoTw7TsxWum8VAAAAM0"]
[Thu Apr 16 21:35:14.730641 2026] [:error] [pid 49094:tid 49096] [client 20.166.31.184:30622] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeDlkjbDwvcXorHR_Mzq5gAAAUA"]
[Thu Apr 16 21:35:16.523679 2026] [:error] [pid 57538:tid 57612] [client 20.166.31.184:14857] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeDllMuMaiEF5SVR2BfoVQAAAIo"]
[Thu Apr 16 21:35:17.734597 2026] [:error] [pid 57538:tid 57609] [client 20.166.31.184:2785] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeDllcuMaiEF5SVR2BfoWQAAAIc"]
[Thu Apr 16 21:35:18.546463 2026] [:error] [pid 57639:tid 57647] [client 20.166.31.184:28730] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeDllqMCQoTw7TsxWum8ZQAAAME"]
[Thu Apr 16 21:35:19.724384 2026] [:error] [pid 57639:tid 57666] [client 20.166.31.184:14886] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeDll6MCQoTw7TsxWum8bwAAANQ"]
[Thu Apr 16 21:35:21.444521 2026] [:error] [pid 49094:tid 49105] [client 20.166.31.184:37169] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeDlmTbDwvcXorHR_Mzq8QAAAUk"]
[Thu Apr 16 21:35:22.350898 2026] [:error] [pid 49094:tid 49120] [client 20.166.31.184:33579] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeDlmjbDwvcXorHR_Mzq9AAAAVg"]
[Thu Apr 16 21:35:23.399875 2026] [:error] [pid 29603:tid 29613] [client 20.166.31.184:28712] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeDlm1fGOR6fpTWUAzqcbQAAAQg"]
[Thu Apr 16 21:35:24.321468 2026] [:error] [pid 57536:tid 57570] [client 20.166.31.184:34927] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeDlnCQU4faGja6jpDuH5QAAABY"]
[Thu Apr 16 21:35:25.365532 2026] [:error] [pid 57536:tid 57559] [client 20.166.31.184:41915] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeDlnSQU4faGja6jpDuH6QAAAAs"]
[Thu Apr 16 21:35:26.565321 2026] [:error] [pid 57537:tid 57582] [client 20.166.31.184:22163] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeDlnlVQRS8nm73ENAm8EwAAAEc"]
[Thu Apr 16 21:35:41.713441 2026] [:error] [pid 49094:tid 49115] [client 20.166.31.184:24130] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeDlrTbDwvcXorHR_MzrIAAAAVM"]
[Thu Apr 16 21:35:42.522738 2026] [:error] [pid 49094:tid 49109] [client 20.166.31.184:24734] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeDlrjbDwvcXorHR_MzrIQAAAU0"]
[Thu Apr 16 21:35:44.661281 2026] [:error] [pid 7880:tid 7901] [client 20.166.31.184:34928] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeDlsKaezm4fSGc0yUKxtgAAAZA"]
[Thu Apr 16 21:35:47.354880 2026] [:error] [pid 29603:tid 29608] [client 20.166.31.184:34901] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeDls1fGOR6fpTWUAzqccAAAAQM"]
[Thu Apr 16 21:35:49.381718 2026] [:error] [pid 29603:tid 29615] [client 20.166.31.184:44731] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeDltVfGOR6fpTWUAzqccQAAAQo"]
[Thu Apr 16 21:35:51.228408 2026] [:error] [pid 57639:tid 57655] [client 20.166.31.184:26155] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeDlt6MCQoTw7TsxWum8rAAAAMk"]
[Thu Apr 16 21:35:52.452988 2026] [:error] [pid 57639:tid 57654] [client 20.166.31.184:24180] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeDluKMCQoTw7TsxWum8rQAAAMg"]
[Thu Apr 16 21:35:53.868456 2026] [:error] [pid 57538:tid 57626] [client 20.166.31.184:26138] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeDlucuMaiEF5SVR2BfoZAAAAJg"]
[Thu Apr 16 21:35:54.768194 2026] [:error] [pid 57639:tid 57661] [client 20.166.31.184:26151] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeDluqMCQoTw7TsxWum8rgAAAM8"]
[Thu Apr 16 21:36:03.274194 2026] [:error] [pid 57538:tid 57622] [client 20.166.31.184:24151] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeDlw8uMaiEF5SVR2BfoZwAAAJQ"]
[Thu Apr 16 21:36:04.943741 2026] [:error] [pid 49094:tid 49114] [client 20.166.31.184:41867] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeDlxDbDwvcXorHR_MzrMQAAAVI"]
[Thu Apr 16 21:36:06.713409 2026] [:error] [pid 49094:tid 49112] [client 20.166.31.184:36430] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeDlxjbDwvcXorHR_MzrNgAAAVA"]
[Thu Apr 16 21:36:09.438355 2026] [:error] [pid 57538:tid 57615] [client 20.166.31.184:25374] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeDlycuMaiEF5SVR2BfoaQAAAI0"]
[Thu Apr 16 21:36:13.340513 2026] [:error] [pid 29603:tid 29626] [client 20.166.31.184:22190] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeDlzVfGOR6fpTWUAzqcfwAAARU"]
[Thu Apr 16 21:36:17.920884 2026] [:error] [pid 49094:tid 49098] [client 20.166.31.184:26174] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeDl0TbDwvcXorHR_MzrWwAAAUI"]
[Thu Apr 16 21:36:19.876548 2026] [:error] [pid 57538:tid 57618] [client 20.166.31.184:19471] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeDl08uMaiEF5SVR2BfocQAAAJA"]
[Thu Apr 16 21:36:20.909896 2026] [:error] [pid 57538:tid 57619] [client 20.166.31.184:44690] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeDl1MuMaiEF5SVR2BfodAAAAJE"]
[Thu Apr 16 21:36:21.930183 2026] [:error] [pid 57538:tid 57624] [client 20.166.31.184:25377] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeDl1cuMaiEF5SVR2BfodgAAAJY"]
[Thu Apr 16 21:36:23.638853 2026] [:error] [pid 57538:tid 57607] [client 20.166.31.184:19483] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeDl18uMaiEF5SVR2BfofwAAAIU"]
[Thu Apr 16 21:36:24.646485 2026] [:error] [pid 7880:tid 7892] [client 20.166.31.184:31225] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeDl2Kaezm4fSGc0yUKx1AAAAYc"]
[Thu Apr 16 21:36:28.056501 2026] [:error] [pid 57639:tid 57665] [client 20.166.31.184:21452] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeDl3KMCQoTw7TsxWum82QAAANM"]
[Thu Apr 16 21:36:28.675846 2026] [:error] [pid 57538:tid 57608] [client 20.166.31.184:44967] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeDl3MuMaiEF5SVR2BfokQAAAIY"]
[Thu Apr 16 21:36:30.557772 2026] [:error] [pid 7880:tid 7901] [client 20.166.31.184:11299] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeDl3qaezm4fSGc0yUKx1gAAAZA"]
[Thu Apr 16 21:36:31.782012 2026] [:error] [pid 57639:tid 57661] [client 20.166.31.184:11313] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeDl36MCQoTw7TsxWum83AAAAM8"]
[Thu Apr 16 21:36:33.156518 2026] [:error] [pid 7880:tid 7907] [client 20.166.31.184:28163] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeDl4aaezm4fSGc0yUKx2AAAAZY"]
[Thu Apr 16 21:36:35.701685 2026] [:error] [pid 57639:tid 57660] [client 20.166.31.184:28769] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeDl46MCQoTw7TsxWum87wAAAM4"]
[Thu Apr 16 21:36:36.718318 2026] [:error] [pid 57639:tid 57654] [client 20.166.31.184:26122] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeDl5KMCQoTw7TsxWum88gAAAMg"]
[Thu Apr 16 21:36:39.678690 2026] [:error] [pid 7880:tid 7888] [client 20.166.31.184:30980] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeDl56aezm4fSGc0yUKx5AAAAYM"]
[Thu Apr 16 22:36:38.216461 2026] [:error] [pid 57537:tid 57592] [client 49.51.72.76:50146] [client 49.51.72.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeDz9lVQRS8nm73ENAnGZgAAAFE"]
[Thu Apr 16 23:44:57.135103 2026] [:error] [pid 57536:tid 57556] [client 45.130.203.158:20803] [client 45.130.203.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aeED-SQU4faGja6jpDu_HgAAAAg"]
[Fri Apr 17 01:21:34.814466 2026] [:error] [pid 11854:tid 11876] [client 20.215.69.226:64680] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEantxJCSIaqP1XSdaUwQAAAlM"]
[Fri Apr 17 01:21:36.468354 2026] [:error] [pid 11854:tid 11864] [client 20.215.69.226:65224] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEaoNxJCSIaqP1XSdaUxgAAAkc"]
[Fri Apr 17 01:21:40.075727 2026] [:error] [pid 43386:tid 43420] [client 20.215.69.226:64676] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEapO91GAVgUfhPVDHAYwAAAEA"]
[Fri Apr 17 01:21:46.804148 2026] [:error] [pid 4086:tid 4090] [client 20.215.69.226:64670] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeEaqllz7gxl_exM0FpG9wAAAUI"]
[Fri Apr 17 01:21:49.813919 2026] [:error] [pid 43386:tid 43436] [client 20.215.69.226:64698] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdn3.php"] [unique_id "aeEare91GAVgUfhPVDHAkgAAAFA"]
[Fri Apr 17 01:21:50.913769 2026] [:error] [pid 43385:tid 43394] [client 20.215.69.226:65232] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdn3.php"] [unique_id "aeEarsnIxkJaUI8KNs4WggAAAAU"]
[Fri Apr 17 01:21:52.011227 2026] [:error] [pid 26480:tid 26496] [client 20.215.69.226:65260] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdn3.php"] [unique_id "aeEasAwLDJKTQNfarA103wAAAc4"]
[Fri Apr 17 01:21:53.017425 2026] [:error] [pid 43386:tid 43431] [client 20.215.69.226:65340] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdn3.php"] [unique_id "aeEase91GAVgUfhPVDHApAAAAEs"]
[Fri Apr 17 01:21:54.528577 2026] [:error] [pid 43385:tid 43390] [client 20.215.69.226:64647] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEassnIxkJaUI8KNs4WtwAAAAE"]
[Fri Apr 17 01:21:55.488109 2026] [:error] [pid 11692:tid 11711] [client 20.215.69.226:64611] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEas81AYuhm4BZwKNoVeQAAAg4"]
[Fri Apr 17 01:21:56.380394 2026] [:error] [pid 3245:tid 3268] [client 20.215.69.226:64652] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEatKESOMTHVLs-uFDVLgAAAQY"]
[Fri Apr 17 01:21:57.684827 2026] [:error] [pid 11692:tid 11720] [client 20.215.69.226:64656] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeEatc1AYuhm4BZwKNoVjQAAAhc"]
[Fri Apr 17 01:22:01.930274 2026] [:error] [pid 43386:tid 43444] [client 20.215.69.226:64674] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "aeEaue91GAVgUfhPVDHAxQAAAFc"]
[Fri Apr 17 01:22:02.758587 2026] [:error] [pid 43385:tid 43389] [client 20.215.69.226:65259] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "aeEausnIxkJaUI8KNs4W-wAAAAA"]
[Fri Apr 17 01:22:04.329155 2026] [:error] [pid 43386:tid 43438] [client 20.215.69.226:65306] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "aeEavO91GAVgUfhPVDHA0gAAAFI"]
[Fri Apr 17 01:22:05.358930 2026] [:error] [pid 43385:tid 43399] [client 20.215.69.226:65303] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "aeEavcnIxkJaUI8KNs4XEAAAAAo"]
[Fri Apr 17 01:22:07.077370 2026] [:error] [pid 43387:tid 43476] [client 20.215.69.226:65331] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "aeEavyBNsONqHxWTakU8hQAAAJc"]
[Fri Apr 17 01:22:08.452224 2026] [:error] [pid 11854:tid 11864] [client 20.215.69.226:65239] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "aeEawNxJCSIaqP1XSdaVIQAAAkc"]
[Fri Apr 17 01:22:10.025475 2026] [:error] [pid 4086:tid 4113] [client 20.215.69.226:65254] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "aeEawllz7gxl_exM0FpHDwAAAVg"]
[Fri Apr 17 01:22:10.920494 2026] [:error] [pid 26102:tid 26119] [client 20.215.69.226:64642] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "aeEawv127aFqw6ALdngVFAAAAY4"]
[Fri Apr 17 01:22:11.962622 2026] [:error] [pid 11692:tid 11717] [client 20.215.69.226:65313] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "aeEaw81AYuhm4BZwKNoV0wAAAhQ"]
[Fri Apr 17 01:22:13.120325 2026] [:error] [pid 43385:tid 43403] [client 20.215.69.226:65314] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "aeEaxcnIxkJaUI8KNs4XRAAAAA4"]
[Fri Apr 17 01:22:14.174649 2026] [:error] [pid 43482:tid 43505] [client 20.215.69.226:65283] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "aeEaxj9SZnuKxlHrct2fcwAAANU"]
[Fri Apr 17 01:22:15.535127 2026] [:error] [pid 11692:tid 11709] [client 20.215.69.226:64612] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "aeEax81AYuhm4BZwKNoV3QAAAgw"]
[Fri Apr 17 01:22:17.315911 2026] [:error] [pid 43386:tid 43423] [client 20.215.69.226:65275] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeEaye91GAVgUfhPVDHBCgAAAEM"]
[Fri Apr 17 01:22:22.501362 2026] [:error] [pid 11854:tid 11867] [client 20.215.69.226:65297] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeEaztxJCSIaqP1XSdaVUQAAAko"]
[Fri Apr 17 01:22:27.170287 2026] [:error] [pid 11854:tid 11864] [client 20.215.69.226:64699] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeEa09xJCSIaqP1XSdaVYwAAAkc"]
[Fri Apr 17 01:22:57.496019 2026] [:error] [pid 43482:tid 43491] [client 20.215.69.226:65290] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "aeEa8T9SZnuKxlHrct2f4gAAAMc"]
[Fri Apr 17 01:22:59.771704 2026] [:error] [pid 43386:tid 43429] [client 20.215.69.226:65302] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "aeEa8-91GAVgUfhPVDHB2wAAAEk"]
[Fri Apr 17 01:23:01.189424 2026] [:error] [pid 43386:tid 43433] [client 20.215.69.226:64175] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "aeEa9e91GAVgUfhPVDHB7QAAAE0"]
[Fri Apr 17 01:23:02.621597 2026] [:error] [pid 43386:tid 43439] [client 20.215.69.226:64681] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "aeEa9u91GAVgUfhPVDHB9wAAAFM"]
[Fri Apr 17 01:23:05.972692 2026] [:error] [pid 11854:tid 11876] [client 20.215.69.226:64682] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "aeEa-dxJCSIaqP1XSdaV-QAAAlM"]
[Fri Apr 17 01:23:07.039546 2026] [:error] [pid 43386:tid 43429] [client 20.215.69.226:64584] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "aeEa--91GAVgUfhPVDHCLgAAAEk"]
[Fri Apr 17 01:23:10.906622 2026] [:error] [pid 26102:tid 26121] [client 20.215.69.226:64096] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "aeEa_v127aFqw6ALdngVbwAAAZA"]
[Fri Apr 17 01:23:14.526012 2026] [:error] [pid 43386:tid 43427] [client 20.215.69.226:65244] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "aeEbAu91GAVgUfhPVDHCXgAAAEc"]
[Fri Apr 17 01:23:19.242296 2026] [:error] [pid 11854:tid 11879] [client 20.215.69.226:65312] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxivicLhot.php"] [unique_id "aeEbB9xJCSIaqP1XSdaWHgAAAlY"]
[Fri Apr 17 01:23:25.398466 2026] [:error] [pid 43385:tid 43413] [client 20.215.69.226:65333] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxivicLhot.php"] [unique_id "aeEbDcnIxkJaUI8KNs4ZLwAAABc"]
[Fri Apr 17 01:23:28.203484 2026] [:error] [pid 43386:tid 43426] [client 20.215.69.226:64693] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxivicLhot.php"] [unique_id "aeEbEO91GAVgUfhPVDHClwAAAEY"]
[Fri Apr 17 01:23:31.057367 2026] [:error] [pid 43385:tid 43407] [client 20.215.69.226:64677] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "aeEbE8nIxkJaUI8KNs4ZcgAAABI"]
[Fri Apr 17 01:23:32.372063 2026] [:error] [pid 43385:tid 43408] [client 20.215.69.226:64648] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "aeEbFMnIxkJaUI8KNs4ZiQAAABM"]
[Fri Apr 17 01:23:37.823718 2026] [:error] [pid 43386:tid 43438] [client 20.215.69.226:64701] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "aeEbGe91GAVgUfhPVDHCvwAAAFI"]
[Fri Apr 17 01:23:48.393027 2026] [:error] [pid 26480:tid 26492] [client 20.215.69.226:65338] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acc.php"] [unique_id "aeEbJAwLDJKTQNfarA13BAAAAco"]
[Fri Apr 17 01:23:50.544721 2026] [:error] [pid 43385:tid 43415] [client 20.215.69.226:64087] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acc.php"] [unique_id "aeEbJsnIxkJaUI8KNs4Z-AAAABg"]
[Fri Apr 17 01:23:51.725850 2026] [:error] [pid 11692:tid 11707] [client 20.215.69.226:64609] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acc.php"] [unique_id "aeEbJ81AYuhm4BZwKNoXJwAAAgo"]
[Fri Apr 17 01:23:55.186574 2026] [:error] [pid 43386:tid 43431] [client 20.215.69.226:64577] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acc.php"] [unique_id "aeEbK-91GAVgUfhPVDHC7gAAAEs"]
[Fri Apr 17 01:24:16.486587 2026] [:error] [pid 43385:tid 43401] [client 20.215.69.226:65334] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfil.php"] [unique_id "aeEbQMnIxkJaUI8KNs4a1AAAAAw"]
[Fri Apr 17 01:24:18.480704 2026] [:error] [pid 43385:tid 43412] [client 20.215.69.226:65253] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfil.php"] [unique_id "aeEbQsnIxkJaUI8KNs4a9wAAABY"]
[Fri Apr 17 01:24:19.943430 2026] [:error] [pid 11692:tid 11705] [client 20.215.69.226:65229] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfil.php"] [unique_id "aeEbQ81AYuhm4BZwKNoXkgAAAgg"]
[Fri Apr 17 01:24:22.047701 2026] [:error] [pid 26480:tid 26494] [client 20.215.69.226:65292] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfil.php"] [unique_id "aeEbRgwLDJKTQNfarA13VwAAAcw"]
[Fri Apr 17 01:24:23.331921 2026] [:error] [pid 11854:tid 11878] [client 20.215.69.226:64579] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aeEbR9xJCSIaqP1XSdaWpwAAAlU"]
[Fri Apr 17 01:24:25.395922 2026] [:error] [pid 26480:tid 26484] [client 20.215.69.226:65281] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aeEbSQwLDJKTQNfarA13aQAAAcI"]
[Fri Apr 17 01:24:26.895909 2026] [:error] [pid 43386:tid 43422] [client 20.215.69.226:65265] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aeEbSu91GAVgUfhPVDHDugAAAEI"]
[Fri Apr 17 01:24:29.531130 2026] [:error] [pid 43482:tid 43488] [client 20.215.69.226:65225] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aeEbTT9SZnuKxlHrct2gfQAAAMQ"]
[Fri Apr 17 01:24:32.956202 2026] [:error] [pid 3245:tid 3265] [client 20.215.69.226:65271] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeEbUKESOMTHVLs-uFDWAAAAAQM"]
[Fri Apr 17 01:24:35.292087 2026] [:error] [pid 11854:tid 11858] [client 20.215.69.226:64643] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeEbU9xJCSIaqP1XSdaWwQAAAkE"]
[Fri Apr 17 01:24:37.595160 2026] [:error] [pid 4086:tid 4089] [client 20.215.69.226:65233] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeEbVVlz7gxl_exM0FpH2gAAAUE"]
[Fri Apr 17 01:24:38.805679 2026] [:error] [pid 43385:tid 43412] [client 20.215.69.226:64607] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeEbVsnIxkJaUI8KNs4bZwAAABY"]
[Fri Apr 17 01:24:40.265094 2026] [:error] [pid 43386:tid 43443] [client 20.215.69.226:64654] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "aeEbWO91GAVgUfhPVDHD9wAAAFY"]
[Fri Apr 17 01:24:41.847378 2026] [:error] [pid 26480:tid 26497] [client 20.215.69.226:64167] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "aeEbWQwLDJKTQNfarA13qAAAAc8"]
[Fri Apr 17 01:24:43.629031 2026] [:error] [pid 11854:tid 11861] [client 20.215.69.226:65270] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "aeEbW9xJCSIaqP1XSdaW4AAAAkQ"]
[Fri Apr 17 01:24:45.569061 2026] [:error] [pid 11692:tid 11712] [client 20.215.69.226:65240] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/menu.php"] [unique_id "aeEbXc1AYuhm4BZwKNoX3AAAAg8"]
[Fri Apr 17 01:24:47.719468 2026] [:error] [pid 43482:tid 43508] [client 20.215.69.226:64651] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeEbXz9SZnuKxlHrct2gqwAAANg"]
[Fri Apr 17 01:24:49.019938 2026] [:error] [pid 26102:tid 26124] [client 20.215.69.226:65223] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeEbYf127aFqw6ALdngWAQAAAZM"]
[Fri Apr 17 01:24:49.872083 2026] [:error] [pid 11692:tid 11720] [client 20.215.69.226:65285] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeEbYc1AYuhm4BZwKNoX7gAAAhc"]
[Fri Apr 17 01:24:52.408477 2026] [:error] [pid 26480:tid 26498] [client 20.215.69.226:64685] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeEbZAwLDJKTQNfarA13tgAAAdA"]
[Fri Apr 17 01:24:55.658607 2026] [:error] [pid 4086:tid 4095] [client 20.215.69.226:64645] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "aeEbZ1lz7gxl_exM0FpICgAAAUc"]
[Fri Apr 17 01:24:59.123824 2026] [:error] [pid 43385:tid 43410] [client 20.215.69.226:64644] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "aeEba8nIxkJaUI8KNs4bwwAAABQ"]
[Fri Apr 17 01:25:00.604363 2026] [:error] [pid 26102:tid 26128] [client 20.215.69.226:65230] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "aeEbbP127aFqw6ALdngWKwAAAZc"]
[Fri Apr 17 01:25:01.726930 2026] [:error] [pid 26102:tid 26119] [client 20.215.69.226:64077] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "aeEbbf127aFqw6ALdngWLgAAAY4"]
[Fri Apr 17 01:25:03.152057 2026] [:error] [pid 11692:tid 11712] [client 20.215.69.226:64675] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "aeEbb81AYuhm4BZwKNoYKwAAAg8"]
[Fri Apr 17 01:25:05.093517 2026] [:error] [pid 11692:tid 11720] [client 20.215.69.226:64157] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "aeEbcc1AYuhm4BZwKNoYQAAAAhc"]
[Fri Apr 17 01:25:06.885069 2026] [:error] [pid 26102:tid 26106] [client 20.215.69.226:65235] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "aeEbcv127aFqw6ALdngWSgAAAYE"]
[Fri Apr 17 01:25:08.329308 2026] [:error] [pid 43386:tid 43432] [client 20.215.69.226:65323] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "aeEbdO91GAVgUfhPVDHEMAAAAEw"]
[Fri Apr 17 01:25:10.477482 2026] [:error] [pid 43482:tid 43493] [client 20.215.69.226:65343] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeEbdj9SZnuKxlHrct2g6wAAAMk"]
[Fri Apr 17 01:25:11.830485 2026] [:error] [pid 11692:tid 11709] [client 20.215.69.226:65342] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeEbd81AYuhm4BZwKNoYVwAAAgw"]
[Fri Apr 17 01:25:12.966016 2026] [:error] [pid 43385:tid 43390] [client 20.215.69.226:64641] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeEbeMnIxkJaUI8KNs4b4wAAAAE"]
[Fri Apr 17 01:25:14.228454 2026] [:error] [pid 26480:tid 26500] [client 20.215.69.226:64587] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeEbegwLDJKTQNfarA130AAAAdI"]
[Fri Apr 17 01:25:29.545916 2026] [:error] [pid 26480:tid 26500] [client 20.215.69.226:65296] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeEbiQwLDJKTQNfarA14GAAAAdI"]
[Fri Apr 17 01:25:31.586061 2026] [:error] [pid 43386:tid 43428] [client 20.215.69.226:65326] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeEbi-91GAVgUfhPVDHEeQAAAEg"]
[Fri Apr 17 01:25:32.448072 2026] [:error] [pid 43385:tid 43407] [client 20.215.69.226:64131] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeEbjMnIxkJaUI8KNs4cWwAAABI"]
[Fri Apr 17 01:25:36.376233 2026] [:error] [pid 43386:tid 43426] [client 20.215.69.226:64632] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeEbkO91GAVgUfhPVDHEmwAAAEY"]
[Fri Apr 17 01:25:39.364976 2026] [:error] [pid 43386:tid 43437] [client 20.215.69.226:64658] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "aeEbk-91GAVgUfhPVDHEpAAAAFE"]
[Fri Apr 17 01:25:41.989654 2026] [:error] [pid 43385:tid 43402] [client 20.215.69.226:64183] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "aeEblcnIxkJaUI8KNs4cpQAAAA0"]
[Fri Apr 17 01:25:43.992863 2026] [:error] [pid 26102:tid 26120] [client 20.215.69.226:64596] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "aeEbl_127aFqw6ALdngWmgAAAY8"]
[Fri Apr 17 01:25:50.482067 2026] [:error] [pid 11692:tid 11721] [client 20.215.69.226:64582] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "aeEbns1AYuhm4BZwKNoYsQAAAhg"]
[Fri Apr 17 01:25:54.545560 2026] [:error] [pid 3245:tid 3275] [client 20.215.69.226:64608] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeEboqESOMTHVLs-uFDWewAAAQ0"]
[Fri Apr 17 01:25:57.128428 2026] [:error] [pid 11854:tid 11864] [client 20.215.69.226:65329] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeEbpdxJCSIaqP1XSdaX7QAAAkc"]
[Fri Apr 17 01:25:59.869710 2026] [:error] [pid 43385:tid 43397] [client 20.215.69.226:64589] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeEbp8nIxkJaUI8KNs4dBQAAAAg"]
[Fri Apr 17 01:26:09.593304 2026] [:error] [pid 43387:tid 43473] [client 20.215.69.226:65336] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeEbsSBNsONqHxWTakU9owAAAJQ"]
[Fri Apr 17 01:26:12.661797 2026] [:error] [pid 3245:tid 3285] [client 20.215.69.226:64680] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeEbtKESOMTHVLs-uFDWnQAAARc"]
[Fri Apr 17 01:26:16.006628 2026] [:error] [pid 43386:tid 43437] [client 20.215.69.226:65300] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeEbuO91GAVgUfhPVDHFLQAAAFE"]
[Fri Apr 17 01:26:16.905575 2026] [:error] [pid 3245:tid 3265] [client 20.215.69.226:64686] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeEbuKESOMTHVLs-uFDWoAAAAQM"]
[Fri Apr 17 01:26:18.390219 2026] [:error] [pid 43386:tid 43443] [client 20.215.69.226:64656] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeEbuu91GAVgUfhPVDHFOQAAAFY"]
[Fri Apr 17 01:26:20.795590 2026] [:error] [pid 43385:tid 43401] [client 20.215.69.226:65316] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeEbvMnIxkJaUI8KNs4dJwAAAAw"]
[Fri Apr 17 01:26:22.649145 2026] [:error] [pid 11692:tid 11716] [client 20.215.69.226:64698] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeEbvs1AYuhm4BZwKNoY9AAAAhM"]
[Fri Apr 17 01:26:23.808119 2026] [:error] [pid 43386:tid 43429] [client 20.215.69.226:65238] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeEbv-91GAVgUfhPVDHFaAAAAEk"]
[Fri Apr 17 01:26:41.361996 2026] [:error] [pid 43386:tid 43420] [client 20.215.69.226:64638] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aeEb0e91GAVgUfhPVDHFwwAAAEA"]
[Fri Apr 17 01:26:44.502983 2026] [:error] [pid 43482:tid 43485] [client 20.215.69.226:65327] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aeEb1D9SZnuKxlHrct2hZwAAAME"]
[Fri Apr 17 01:26:45.925626 2026] [:error] [pid 43482:tid 43491] [client 20.215.69.226:65218] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aeEb1T9SZnuKxlHrct2hdAAAAMc"]
[Fri Apr 17 01:26:49.139138 2026] [:error] [pid 43385:tid 43412] [client 20.215.69.226:65227] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aeEb2cnIxkJaUI8KNs4duwAAABY"]
[Fri Apr 17 01:26:50.888359 2026] [:error] [pid 43385:tid 43391] [client 20.215.69.226:64672] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aeEb2snIxkJaUI8KNs4dwAAAAAI"]
[Fri Apr 17 01:26:51.763692 2026] [:error] [pid 43385:tid 43408] [client 20.215.69.226:65220] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aeEb28nIxkJaUI8KNs4dygAAABM"]
[Fri Apr 17 01:26:52.905809 2026] [:error] [pid 26480:tid 26485] [client 20.215.69.226:65232] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aeEb3AwLDJKTQNfarA147QAAAcM"]
[Fri Apr 17 01:26:54.518957 2026] [:error] [pid 43482:tid 43490] [client 20.215.69.226:64621] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aeEb3j9SZnuKxlHrct2hfAAAAMY"]
[Fri Apr 17 01:26:55.746644 2026] [:error] [pid 43386:tid 43426] [client 20.215.69.226:65251] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "aeEb3-91GAVgUfhPVDHF4QAAAEY"]
[Fri Apr 17 01:26:59.948036 2026] [:error] [pid 43385:tid 43396] [client 20.215.69.226:65283] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "aeEb48nIxkJaUI8KNs4eMwAAAAc"]
[Fri Apr 17 01:27:06.063159 2026] [:error] [pid 26480:tid 26503] [client 20.215.69.226:65294] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "aeEb6gwLDJKTQNfarA15AQAAAdU"]
[Fri Apr 17 01:27:06.995955 2026] [:error] [pid 11854:tid 11870] [client 20.215.69.226:64692] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "aeEb6txJCSIaqP1XSdaYjgAAAk0"]
[Fri Apr 17 01:27:08.840340 2026] [:error] [pid 43385:tid 43403] [client 20.215.69.226:65250] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aeEb7MnIxkJaUI8KNs4eWAAAAA4"]
[Fri Apr 17 01:27:12.601250 2026] [:error] [pid 43385:tid 43398] [client 20.215.69.226:64604] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aeEb8MnIxkJaUI8KNs4eaAAAAAk"]
[Fri Apr 17 01:27:14.929081 2026] [:error] [pid 43482:tid 43502] [client 20.215.69.226:65310] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aeEb8j9SZnuKxlHrct2hjQAAANI"]
[Fri Apr 17 01:27:16.328061 2026] [:error] [pid 11692:tid 11705] [client 20.215.69.226:65219] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aeEb9M1AYuhm4BZwKNoZaAAAAgg"]
[Fri Apr 17 01:27:18.420407 2026] [:error] [pid 43386:tid 43445] [client 20.215.69.226:64687] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ov-Simple1.php"] [unique_id "aeEb9u91GAVgUfhPVDHGGAAAAFg"]
[Fri Apr 17 01:27:20.888738 2026] [:error] [pid 43387:tid 43462] [client 20.215.69.226:64702] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ov-Simple1.php"] [unique_id "aeEb-CBNsONqHxWTakU92wAAAIs"]
[Fri Apr 17 01:27:25.015765 2026] [:error] [pid 43385:tid 43397] [client 20.215.69.226:64666] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ov-Simple1.php"] [unique_id "aeEb_cnIxkJaUI8KNs4e5AAAAAg"]
[Fri Apr 17 01:27:27.774937 2026] [:error] [pid 43482:tid 43492] [client 20.215.69.226:64666] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ov-Simple1.php"] [unique_id "aeEb_z9SZnuKxlHrct2hqQAAAMg"]
[Fri Apr 17 01:27:29.259804 2026] [:error] [pid 11854:tid 11870] [client 20.215.69.226:65322] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "aeEcAdxJCSIaqP1XSdaYowAAAk0"]
[Fri Apr 17 01:27:32.165687 2026] [:error] [pid 4086:tid 4104] [client 20.215.69.226:65301] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "aeEcBFlz7gxl_exM0FpIiAAAAVA"]
[Fri Apr 17 01:27:37.703660 2026] [:error] [pid 11692:tid 11698] [client 20.215.69.226:65333] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "aeEcCc1AYuhm4BZwKNoZmQAAAgE"]
[Fri Apr 17 01:27:50.778701 2026] [:error] [pid 43385:tid 43405] [client 20.215.69.226:65305] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aeEcFsnIxkJaUI8KNs4fVAAAABA"]
[Fri Apr 17 01:27:52.931850 2026] [:error] [pid 11692:tid 11699] [client 20.215.69.226:64690] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aeEcGM1AYuhm4BZwKNoZtgAAAgI"]
[Fri Apr 17 01:28:00.164878 2026] [:error] [pid 43385:tid 43399] [client 20.215.69.226:64146] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aeEcIMnIxkJaUI8KNs4ffQAAAAo"]
[Fri Apr 17 01:28:01.984618 2026] [:error] [pid 11854:tid 11861] [client 20.215.69.226:64667] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aeEcIdxJCSIaqP1XSdaY2AAAAkQ"]
[Fri Apr 17 01:28:19.605080 2026] [:error] [pid 11692:tid 11714] [client 20.215.69.226:64089] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aeEcM81AYuhm4BZwKNoZ6gAAAhE"]
[Fri Apr 17 01:28:20.760103 2026] [:error] [pid 11854:tid 11873] [client 20.215.69.226:64182] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aeEcNNxJCSIaqP1XSdaY9wAAAlA"]
[Fri Apr 17 01:28:23.085670 2026] [:error] [pid 43386:tid 43420] [client 20.215.69.226:65263] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aeEcN-91GAVgUfhPVDHG6gAAAEA"]
[Fri Apr 17 01:28:24.389818 2026] [:error] [pid 43385:tid 43407] [client 20.215.69.226:64576] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aeEcOMnIxkJaUI8KNs4f2wAAABI"]
[Fri Apr 17 01:28:26.030767 2026] [:error] [pid 43385:tid 43413] [client 20.215.69.226:64064] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "aeEcOsnIxkJaUI8KNs4f5AAAABc"]
[Fri Apr 17 01:28:27.052231 2026] [:error] [pid 43385:tid 43403] [client 20.215.69.226:65217] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "aeEcO8nIxkJaUI8KNs4f6gAAAA4"]
[Fri Apr 17 01:28:28.968732 2026] [:error] [pid 43385:tid 43412] [client 20.215.69.226:64676] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "aeEcPMnIxkJaUI8KNs4gDgAAABY"]
[Fri Apr 17 01:28:35.497755 2026] [:error] [pid 26102:tid 26106] [client 20.215.69.226:63621] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "aeEcQ_127aFqw6ALdngXngAAAYE"]
[Fri Apr 17 01:28:40.389874 2026] [:error] [pid 43385:tid 43408] [client 20.215.69.226:65315] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeEcSMnIxkJaUI8KNs4gawAAABM"]
[Fri Apr 17 01:28:44.818650 2026] [:error] [pid 26480:tid 26486] [client 20.215.69.226:65248] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeEcTAwLDJKTQNfarA16IAAAAcQ"]
[Fri Apr 17 01:28:48.354426 2026] [:error] [pid 26480:tid 26498] [client 20.215.69.226:65328] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeEcUAwLDJKTQNfarA16KwAAAdA"]
[Fri Apr 17 01:28:54.222175 2026] [:error] [pid 26480:tid 26490] [client 20.215.69.226:65262] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeEcVgwLDJKTQNfarA16XQAAAcg"]
[Fri Apr 17 01:28:55.136781 2026] [:error] [pid 11854:tid 11872] [client 20.215.69.226:65280] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeEcV9xJCSIaqP1XSdaZJgAAAk8"]
[Fri Apr 17 01:28:56.859616 2026] [:error] [pid 43386:tid 43438] [client 20.215.69.226:64590] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeEcWO91GAVgUfhPVDHHbwAAAFI"]
[Fri Apr 17 01:28:57.490409 2026] [:error] [pid 43385:tid 43411] [client 20.215.69.226:64683] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeEcWcnIxkJaUI8KNs4grwAAABU"]
[Fri Apr 17 01:28:58.248503 2026] [:error] [pid 43385:tid 43412] [client 20.215.69.226:64594] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEcWsnIxkJaUI8KNs4gugAAABY"]
[Fri Apr 17 01:28:59.469601 2026] [:error] [pid 43386:tid 43441] [client 20.215.69.226:64153] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEcW-91GAVgUfhPVDHHggAAAFQ"]
[Fri Apr 17 01:29:00.612408 2026] [:error] [pid 26480:tid 26499] [client 20.215.69.226:65311] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEcXAwLDJKTQNfarA16hQAAAdE"]
[Fri Apr 17 01:29:01.665471 2026] [:error] [pid 26480:tid 26499] [client 20.215.69.226:65335] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeEcXQwLDJKTQNfarA16kgAAAdE"]
[Fri Apr 17 01:29:02.623284 2026] [:error] [pid 26480:tid 26500] [client 20.215.69.226:65338] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "aeEcXgwLDJKTQNfarA16nAAAAdI"]
[Fri Apr 17 01:29:03.712526 2026] [:error] [pid 11692:tid 11700] [client 20.215.69.226:64595] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "aeEcX81AYuhm4BZwKNoabAAAAgM"]
[Fri Apr 17 01:29:07.707095 2026] [:error] [pid 43385:tid 43399] [client 20.215.69.226:65216] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "aeEcY8nIxkJaUI8KNs4hDgAAAAo"]
[Fri Apr 17 01:29:15.274786 2026] [:error] [pid 43385:tid 43402] [client 20.215.69.226:65267] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "aeEca8nIxkJaUI8KNs4hLgAAAA0"]
[Fri Apr 17 01:29:16.399131 2026] [:error] [pid 43385:tid 43401] [client 20.215.69.226:65271] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeEcbMnIxkJaUI8KNs4hOQAAAAw"]
[Fri Apr 17 01:29:17.598334 2026] [:error] [pid 26480:tid 26489] [client 20.215.69.226:64674] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeEcbQwLDJKTQNfarA169AAAAcc"]
[Fri Apr 17 01:29:19.238995 2026] [:error] [pid 43385:tid 43395] [client 20.215.69.226:65332] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeEcb8nIxkJaUI8KNs4hXQAAAAY"]
[Fri Apr 17 01:29:21.263016 2026] [:error] [pid 26480:tid 26505] [client 20.215.69.226:64639] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeEccQwLDJKTQNfarA17BQAAAdc"]
[Fri Apr 17 01:29:21.952318 2026] [:error] [pid 26480:tid 26486] [client 20.215.69.226:65270] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "aeEccQwLDJKTQNfarA17CAAAAcQ"]
[Fri Apr 17 01:29:27.500495 2026] [:error] [pid 26102:tid 26123] [client 20.215.69.226:64587] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "aeEcd_127aFqw6ALdngXyAAAAZI"]
[Fri Apr 17 01:29:33.857707 2026] [:error] [pid 43386:tid 43424] [client 20.215.69.226:64684] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "aeEcfe91GAVgUfhPVDHIEQAAAEQ"]
[Fri Apr 17 01:29:37.133117 2026] [:error] [pid 43386:tid 43426] [client 20.215.69.226:65325] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEcge91GAVgUfhPVDHIPAAAAEY"]
[Fri Apr 17 01:29:39.123691 2026] [:error] [pid 43386:tid 43436] [client 20.215.69.226:65247] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEcg-91GAVgUfhPVDHIRQAAAFA"]
[Fri Apr 17 01:29:41.986072 2026] [:error] [pid 43482:tid 43496] [client 20.215.69.226:65299] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEchT9SZnuKxlHrct2imQAAAMw"]
[Fri Apr 17 01:29:42.859895 2026] [:error] [pid 26102:tid 26105] [client 20.215.69.226:65236] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEchv127aFqw6ALdngX2AAAAYA"]
[Fri Apr 17 01:29:43.817267 2026] [:error] [pid 43386:tid 43432] [client 20.215.69.226:64678] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "aeEch-91GAVgUfhPVDHIYgAAAEw"]
[Fri Apr 17 01:29:44.733930 2026] [:error] [pid 43385:tid 43415] [client 20.215.69.226:64688] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "aeEciMnIxkJaUI8KNs4hvQAAABg"]
[Fri Apr 17 01:29:45.540559 2026] [:error] [pid 3245:tid 3283] [client 20.215.69.226:65230] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "aeEciaESOMTHVLs-uFDXcAAAARU"]
[Fri Apr 17 01:29:47.122025 2026] [:error] [pid 43386:tid 43437] [client 20.215.69.226:65264] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/torsa1.php"] [unique_id "aeEci-91GAVgUfhPVDHIggAAAFE"]
[Fri Apr 17 01:29:49.505908 2026] [:error] [pid 26480:tid 26484] [client 20.215.69.226:64697] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aeEcjQwLDJKTQNfarA17WgAAAcI"]
[Fri Apr 17 01:29:55.239782 2026] [:error] [pid 43386:tid 43441] [client 20.215.69.226:65298] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aeEck-91GAVgUfhPVDHIsgAAAFQ"]
[Fri Apr 17 01:29:56.165611 2026] [:error] [pid 26102:tid 26120] [client 20.215.69.226:64591] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aeEclP127aFqw6ALdngX3wAAAY8"]
[Fri Apr 17 01:29:57.623953 2026] [:error] [pid 26480:tid 26495] [client 20.215.69.226:64154] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aeEclQwLDJKTQNfarA17XgAAAc0"]
[Fri Apr 17 01:29:58.829086 2026] [:error] [pid 43482:tid 43490] [client 20.215.69.226:65223] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aeEclj9SZnuKxlHrct2iswAAAMY"]
[Fri Apr 17 01:29:59.721523 2026] [:error] [pid 43387:tid 43450] [client 20.215.69.226:64651] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aeEclyBNsONqHxWTakU-SgAAAII"]
[Fri Apr 17 01:30:02.473802 2026] [:error] [pid 43385:tid 43405] [client 20.215.69.226:65243] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aeEcmsnIxkJaUI8KNs4iDwAAABA"]
[Fri Apr 17 01:30:03.355474 2026] [:error] [pid 11854:tid 11874] [client 20.215.69.226:65276] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aeEcm9xJCSIaqP1XSdaZiwAAAlE"]
[Fri Apr 17 01:30:04.144868 2026] [:error] [pid 43482:tid 43502] [client 20.215.69.226:64583] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aeEcnD9SZnuKxlHrct2iuAAAANI"]
[Fri Apr 17 01:30:05.121892 2026] [:error] [pid 26480:tid 26484] [client 20.215.69.226:64633] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aeEcnQwLDJKTQNfarA17agAAAcI"]
[Fri Apr 17 01:30:06.694334 2026] [:error] [pid 43386:tid 43436] [client 20.215.69.226:64685] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aeEcnu91GAVgUfhPVDHIygAAAFA"]
[Fri Apr 17 01:30:07.604383 2026] [:error] [pid 26102:tid 26113] [client 20.215.69.226:64150] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aeEcn_127aFqw6ALdngX_gAAAYg"]
[Fri Apr 17 01:30:08.386033 2026] [:error] [pid 43385:tid 43412] [client 20.215.69.226:65331] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aeEcoMnIxkJaUI8KNs4iGAAAABY"]
[Fri Apr 17 01:30:09.488280 2026] [:error] [pid 43385:tid 43402] [client 20.215.69.226:65337] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aeEcocnIxkJaUI8KNs4iIAAAAA0"]
[Fri Apr 17 01:30:15.087103 2026] [:error] [pid 4086:tid 4113] [client 20.215.69.226:64177] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "aeEcp1lz7gxl_exM0FpJIQAAAVg"]
[Fri Apr 17 01:30:25.077653 2026] [:error] [pid 11854:tid 11877] [client 20.215.69.226:64138] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeEcsdxJCSIaqP1XSdaZoAAAAlQ"]
[Fri Apr 17 01:30:26.869153 2026] [:error] [pid 11854:tid 11875] [client 20.215.69.226:65249] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeEcstxJCSIaqP1XSdaZpQAAAlI"]
[Fri Apr 17 01:30:27.777561 2026] [:error] [pid 26480:tid 26488] [client 20.215.69.226:65279] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeEcswwLDJKTQNfarA17hAAAAcY"]
[Fri Apr 17 01:30:28.968042 2026] [:error] [pid 43387:tid 43465] [client 20.215.69.226:65316] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeEctCBNsONqHxWTakU-TgAAAIw"]
[Fri Apr 17 01:30:30.068844 2026] [:error] [pid 43386:tid 43422] [client 20.215.69.226:64151] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "aeEctu91GAVgUfhPVDHJAwAAAEI"]
[Fri Apr 17 01:30:31.418734 2026] [:error] [pid 43387:tid 43472] [client 20.215.69.226:65285] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "aeEctyBNsONqHxWTakU-UAAAAJM"]
[Fri Apr 17 01:30:32.590727 2026] [:error] [pid 43482:tid 43499] [client 20.215.69.226:64162] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "aeEcuD9SZnuKxlHrct2ixQAAAM8"]
[Fri Apr 17 01:30:33.788896 2026] [:error] [pid 11692:tid 11707] [client 20.215.69.226:64671] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "aeEcuc1AYuhm4BZwKNoa3gAAAgo"]
[Fri Apr 17 01:30:35.446415 2026] [:error] [pid 43386:tid 43435] [client 20.215.69.226:64653] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw.php"] [unique_id "aeEcu-91GAVgUfhPVDHJEQAAAE8"]
[Fri Apr 17 01:30:36.416721 2026] [:error] [pid 43482:tid 43498] [client 20.215.69.226:65334] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw.php"] [unique_id "aeEcvD9SZnuKxlHrct2ixwAAAM4"]
[Fri Apr 17 01:30:40.218797 2026] [:error] [pid 11854:tid 11878] [client 20.215.69.226:64090] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw.php"] [unique_id "aeEcwNxJCSIaqP1XSdaZvQAAAlU"]
[Fri Apr 17 01:30:44.852254 2026] [:error] [pid 43385:tid 43396] [client 20.215.69.226:64695] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nw.php"] [unique_id "aeEcxMnIxkJaUI8KNs4iPwAAAAc"]
[Fri Apr 17 01:30:46.873803 2026] [:error] [pid 26102:tid 26129] [client 20.215.69.226:64659] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byypas.php"] [unique_id "aeEcxv127aFqw6ALdngYDgAAAZg"]
[Fri Apr 17 01:30:50.703992 2026] [:error] [pid 11692:tid 11714] [client 20.215.69.226:64134] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byypas.php"] [unique_id "aeEcys1AYuhm4BZwKNoa7QAAAhE"]
[Fri Apr 17 01:30:53.315261 2026] [:error] [pid 26480:tid 26482] [client 20.215.69.226:64649] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byypas.php"] [unique_id "aeEczQwLDJKTQNfarA17lwAAAcA"]
[Fri Apr 17 01:30:58.186818 2026] [:error] [pid 26102:tid 26126] [client 20.215.69.226:65307] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "aeEc0v127aFqw6ALdngYIAAAAZU"]
[Fri Apr 17 01:31:01.647339 2026] [:error] [pid 43385:tid 43392] [client 20.215.69.226:64611] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "aeEc1cnIxkJaUI8KNs4iUgAAAAM"]
[Fri Apr 17 01:31:11.394414 2026] [:error] [pid 26480:tid 26499] [client 20.215.69.226:65286] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "aeEc3wwLDJKTQNfarA18BQAAAdE"]
[Fri Apr 17 01:31:14.270419 2026] [:error] [pid 43385:tid 43404] [client 20.215.69.226:64660] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aeEc4snIxkJaUI8KNs4iZAAAAA8"]
[Fri Apr 17 01:31:15.990350 2026] [:error] [pid 43385:tid 43402] [client 20.215.69.226:65274] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aeEc48nIxkJaUI8KNs4ibQAAAA0"]
[Fri Apr 17 01:31:16.767293 2026] [:error] [pid 43385:tid 43390] [client 20.215.69.226:65288] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aeEc5MnIxkJaUI8KNs4ibwAAAAE"]
[Fri Apr 17 01:31:19.923606 2026] [:error] [pid 11692:tid 11709] [client 20.215.69.226:64665] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aeEc581AYuhm4BZwKNobJgAAAgw"]
[Fri Apr 17 01:31:21.740464 2026] [:error] [pid 43482:tid 43490] [client 20.215.69.226:64700] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "aeEc6T9SZnuKxlHrct2jEgAAAMY"]
[Fri Apr 17 01:31:24.592376 2026] [:error] [pid 26102:tid 26114] [client 20.215.69.226:64642] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "aeEc7P127aFqw6ALdngYMwAAAYk"]
[Fri Apr 17 01:31:26.246439 2026] [:error] [pid 11854:tid 11863] [client 20.215.69.226:65339] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "aeEc7txJCSIaqP1XSdaZ8AAAAkY"]
[Fri Apr 17 01:31:27.525413 2026] [:error] [pid 43385:tid 43394] [client 20.215.69.226:64613] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xsas.php"] [unique_id "aeEc78nIxkJaUI8KNs4ifwAAAAU"]
[Fri Apr 17 01:31:29.333573 2026] [:error] [pid 43385:tid 43405] [client 20.215.69.226:64702] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/jp.php"] [unique_id "aeEc8cnIxkJaUI8KNs4iiwAAABA"]
[Fri Apr 17 01:31:30.647608 2026] [:error] [pid 43385:tid 43406] [client 20.215.69.226:64616] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/jp.php"] [unique_id "aeEc8snIxkJaUI8KNs4ikgAAABE"]
[Fri Apr 17 01:31:32.523321 2026] [:error] [pid 11854:tid 11866] [client 20.215.69.226:65235] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/jp.php"] [unique_id "aeEc9NxJCSIaqP1XSdaZ_QAAAkk"]
[Fri Apr 17 01:31:33.183146 2026] [:error] [pid 43482:tid 43506] [client 20.215.69.226:65228] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/jp.php"] [unique_id "aeEc9T9SZnuKxlHrct2jHwAAANY"]
[Fri Apr 17 01:31:34.370623 2026] [:error] [pid 11692:tid 11701] [client 20.215.69.226:65326] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aeEc9s1AYuhm4BZwKNobNQAAAgQ"]
[Fri Apr 17 01:31:36.855893 2026] [:error] [pid 26102:tid 26112] [client 20.215.69.226:64165] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aeEc-P127aFqw6ALdngYOgAAAYc"]
[Fri Apr 17 01:31:38.085781 2026] [:error] [pid 43387:tid 43473] [client 20.215.69.226:65320] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aeEc-iBNsONqHxWTakU-ZAAAAJQ"]
[Fri Apr 17 01:31:39.730438 2026] [:error] [pid 26480:tid 26499] [client 20.215.69.226:64132] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aeEc-wwLDJKTQNfarA18EAAAAdE"]
[Fri Apr 17 01:31:41.930254 2026] [:error] [pid 4086:tid 4088] [client 20.215.69.226:65313] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aeEc_Vlz7gxl_exM0FpJaQAAAUA"]
[Fri Apr 17 01:31:43.292734 2026] [:error] [pid 43387:tid 43471] [client 20.215.69.226:65255] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aeEc_yBNsONqHxWTakU-bQAAAJI"]
[Fri Apr 17 01:31:47.177689 2026] [:error] [pid 26480:tid 26487] [client 20.215.69.226:65260] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aeEdAwwLDJKTQNfarA18FwAAAcU"]
[Fri Apr 17 01:31:52.709646 2026] [:error] [pid 43386:tid 43421] [client 20.215.69.226:64584] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aeEdCO91GAVgUfhPVDHJXwAAAEE"]
[Fri Apr 17 01:31:55.816385 2026] [:error] [pid 43482:tid 43486] [client 20.215.69.226:65289] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aeEdCz9SZnuKxlHrct2jMwAAAMI"]
[Fri Apr 17 01:32:00.587021 2026] [:error] [pid 43385:tid 43402] [client 20.215.69.226:65293] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "aeEdEMnIxkJaUI8KNs4izgAAAA0"]
[Fri Apr 17 01:32:02.191411 2026] [:error] [pid 4086:tid 4099] [client 20.215.69.226:61127] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "aeEdEllz7gxl_exM0FpJbwAAAUs"]
[Fri Apr 17 01:32:03.919346 2026] [:error] [pid 43482:tid 43488] [client 20.215.69.226:65296] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "aeEdEz9SZnuKxlHrct2jQwAAAMQ"]
[Fri Apr 17 01:32:06.295207 2026] [:error] [pid 4086:tid 4113] [client 20.215.69.226:65317] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "aeEdFllz7gxl_exM0FpJcwAAAVg"]
[Fri Apr 17 01:32:08.230451 2026] [:error] [pid 43385:tid 43401] [client 20.215.69.226:65304] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aeEdGMnIxkJaUI8KNs4i4QAAAAw"]
[Fri Apr 17 01:32:09.433880 2026] [:error] [pid 26480:tid 26491] [client 20.215.69.226:64609] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aeEdGQwLDJKTQNfarA18IwAAAck"]
[Fri Apr 17 01:32:10.336680 2026] [:error] [pid 26102:tid 26126] [client 20.215.69.226:64689] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aeEdGv127aFqw6ALdngYWwAAAZU"]
[Fri Apr 17 01:32:12.667252 2026] [:error] [pid 26480:tid 26500] [client 20.215.69.226:65265] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aeEdHAwLDJKTQNfarA18NgAAAdI"]
[Fri Apr 17 01:32:14.030424 2026] [:error] [pid 11692:tid 11701] [client 20.215.69.226:64593] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeEdHs1AYuhm4BZwKNobUwAAAgQ"]
[Fri Apr 17 01:32:15.559160 2026] [:error] [pid 26480:tid 26504] [client 20.215.69.226:64628] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeEdHwwLDJKTQNfarA18PQAAAdY"]
[Fri Apr 17 01:32:17.110509 2026] [:error] [pid 26480:tid 26488] [client 20.215.69.226:65253] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeEdIQwLDJKTQNfarA18RAAAAcY"]
[Fri Apr 17 01:32:18.631062 2026] [:error] [pid 43482:tid 43489] [client 20.215.69.226:65239] [client 20.215.69.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeEdIj9SZnuKxlHrct2jTwAAAMU"]
[Fri Apr 17 02:05:36.012344 2026] [:error] [pid 43482:tid 43498] [client 182.44.2.148:40808] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeEk8D9SZnuKxlHrct2wFAAAAM4"]
[Fri Apr 17 03:11:44.356866 2026] [:error] [pid 26102:tid 26118] [client 84.254.128.64:27480] [client 84.254.128.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.254.128.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeE0cP127aFqw6ALdnglhAAAAY0"]
[Fri Apr 17 04:14:34.734186 2026] [:error] [pid 9153:tid 9236] [client 209.38.89.62:59350] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/install.php"] [unique_id "aeFDKuMHGxkTZX3c45e1MQAAAJI"]
[Fri Apr 17 04:14:34.972588 2026] [:error] [pid 9151:tid 9183] [client 209.38.89.62:59356] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFDKshTVuRPkua22vRnbAAAABY"]
[Fri Apr 17 04:14:35.023518 2026] [:error] [pid 9263:tid 9271] [client 209.38.89.62:59360] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new/wp-admin/install.php"] [unique_id "aeFDKxP68VyHNvj1e56XkAAAAMY"]
[Fri Apr 17 04:14:35.183380 2026] [:error] [pid 9151:tid 9168] [client 209.38.89.62:59376] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/old/wp-admin/install.php"] [unique_id "aeFDK8hTVuRPkua22vRnbgAAAAc"]
[Fri Apr 17 04:14:35.322468 2026] [:error] [pid 9153:tid 9223] [client 209.38.89.62:59384] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFDK-MHGxkTZX3c45e1MgAAAIU"]
[Fri Apr 17 04:14:35.353492 2026] [:error] [pid 9152:tid 9193] [client 209.38.89.62:59400] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test/wp-admin/install.php"] [unique_id "aeFDK5JYca8I3TNCwIfUgQAAAEM"]
[Fri Apr 17 04:14:35.498672 2026] [:error] [pid 9152:tid 9210] [client 209.38.89.62:59410] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFDK5JYca8I3TNCwIfUggAAAFQ"]
[Fri Apr 17 04:14:35.553912 2026] [:error] [pid 9153:tid 9227] [client 209.38.89.62:59420] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFDK-MHGxkTZX3c45e1NAAAAIk"]
[Fri Apr 17 04:14:35.588446 2026] [:error] [pid 9153:tid 9218] [client 209.38.89.62:59432] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/web/wp-admin/install.php"] [unique_id "aeFDK-MHGxkTZX3c45e1NQAAAIA"]
[Fri Apr 17 04:14:35.633669 2026] [:error] [pid 9153:tid 9232] [client 209.38.89.62:59438] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFDK-MHGxkTZX3c45e1NgAAAI4"]
[Fri Apr 17 04:14:35.670095 2026] [:error] [pid 9153:tid 9240] [client 209.38.89.62:59448] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/site/wp-admin/install.php"] [unique_id "aeFDK-MHGxkTZX3c45e1NwAAAJY"]
[Fri Apr 17 04:14:35.705495 2026] [:error] [pid 9153:tid 9225] [client 209.38.89.62:59464] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFDK-MHGxkTZX3c45e1OAAAAIc"]
[Fri Apr 17 04:14:35.765055 2026] [:error] [pid 9151:tid 9167] [client 209.38.89.62:59466] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFDK8hTVuRPkua22vRnbwAAAAY"]
[Fri Apr 17 05:08:22.783749 2026] [:error] [pid 51878:tid 51880] [client 209.141.46.13:59723] [client 209.141.46.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.46.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeFPxknQhUtMbw9EsgZL1gAAAQA"]
[Fri Apr 17 05:08:23.563617 2026] [proxy_fcgi:error] [pid 51878:tid 51880] [client 209.141.46.13:59723] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 17 05:08:23.737202 2026] [:error] [pid 51878:tid 51889] [client 209.141.46.13:59723] [client 209.141.46.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.46.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeFPx0nQhUtMbw9EsgZL4AAAAQk"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Fri Apr 17 05:08:24.702928 2026] [proxy_fcgi:error] [pid 51878:tid 51889] [client 209.141.46.13:59723] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Fri Apr 17 05:24:57.087045 2026] [:error] [pid 9152:tid 9211] [client 172.213.155.173:6913] [client 172.213.155.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeFTqZJYca8I3TNCwIcG7wAAAFU"]
[Fri Apr 17 05:25:01.447087 2026] [:error] [pid 9153:tid 9224] [client 172.213.155.173:6665] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "aeFTreMHGxkTZX3c45f0dwAAAIY"]
[Fri Apr 17 05:25:03.797874 2026] [:error] [pid 9153:tid 9234] [client 172.213.155.173:6674] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "aeFTr-MHGxkTZX3c45f0gwAAAJA"]
[Fri Apr 17 05:25:05.127335 2026] [:error] [pid 9152:tid 9197] [client 172.213.155.173:60092] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "aeFTsZJYca8I3TNCwIcG-wAAAEc"]
[Fri Apr 17 05:25:06.216371 2026] [:error] [pid 9151:tid 9171] [client 172.213.155.173:6815] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "aeFTsshTVuRPkua22vSUbQAAAAo"]
[Fri Apr 17 05:25:07.993276 2026] [:error] [pid 9153:tid 9232] [client 172.213.155.173:28698] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "aeFTs-MHGxkTZX3c45f0jwAAAI4"]
[Fri Apr 17 05:25:10.455666 2026] [:error] [pid 9263:tid 9289] [client 172.213.155.173:6798] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "aeFTthP68VyHNvj1e57szgAAANg"]
[Fri Apr 17 05:25:11.129002 2026] [:error] [pid 51878:tid 51904] [client 172.213.155.173:6793] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "aeFTt0nQhUtMbw9EsgZZoQAAARg"]
[Fri Apr 17 05:25:11.886884 2026] [:error] [pid 9152:tid 9192] [client 172.213.155.173:45069] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "aeFTt5JYca8I3TNCwIcHDQAAAEI"]
[Fri Apr 17 05:25:13.008934 2026] [:error] [pid 9263:tid 9277] [client 172.213.155.173:6928] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/state.php"] [unique_id "aeFTuRP68VyHNvj1e57s0QAAAMw"]
[Fri Apr 17 05:25:14.051811 2026] [:error] [pid 9152:tid 9214] [client 172.213.155.173:45076] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/state.php"] [unique_id "aeFTupJYca8I3TNCwIcHFgAAAFg"]
[Fri Apr 17 05:25:14.862522 2026] [:error] [pid 9152:tid 9190] [client 172.213.155.173:28685] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/state.php"] [unique_id "aeFTupJYca8I3TNCwIcHIAAAAEA"]
[Fri Apr 17 05:25:15.562199 2026] [:error] [pid 51878:tid 51901] [client 172.213.155.173:45109] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/state.php"] [unique_id "aeFTu0nQhUtMbw9EsgZZqwAAARU"]
[Fri Apr 17 05:25:16.133688 2026] [:error] [pid 9153:tid 9230] [client 172.213.155.173:6174] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aeFTvOMHGxkTZX3c45f0nAAAAIw"]
[Fri Apr 17 05:25:17.435160 2026] [:error] [pid 51878:tid 51892] [client 172.213.155.173:6685] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aeFTvUnQhUtMbw9EsgZZtQAAAQw"]
[Fri Apr 17 05:25:19.933679 2026] [:error] [pid 51878:tid 51890] [client 172.213.155.173:6704] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aeFTv0nQhUtMbw9EsgZZwAAAAQo"]
[Fri Apr 17 05:25:22.228494 2026] [:error] [pid 51878:tid 51880] [client 172.213.155.173:6786] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aeFTwknQhUtMbw9EsgZZxQAAAQA"]
[Fri Apr 17 05:25:23.735660 2026] [:error] [pid 9263:tid 9269] [client 172.213.155.173:6658] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "aeFTwxP68VyHNvj1e57s8wAAAMQ"]
[Fri Apr 17 05:25:25.288406 2026] [:error] [pid 9153:tid 9227] [client 172.213.155.173:60320] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "aeFTxeMHGxkTZX3c45f0swAAAIk"]
[Fri Apr 17 05:25:28.550378 2026] [:error] [pid 51878:tid 51896] [client 172.213.155.173:6712] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "aeFTyEnQhUtMbw9EsgZZ0gAAARA"]
[Fri Apr 17 05:25:29.440423 2026] [:error] [pid 9151:tid 9183] [client 172.213.155.173:6691] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wps.php"] [unique_id "aeFTychTVuRPkua22vSUlQAAABY"]
[Fri Apr 17 05:25:32.839859 2026] [:error] [pid 51878:tid 51886] [client 172.213.155.173:64432] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "aeFTzEnQhUtMbw9EsgZZ3wAAAQY"]
[Fri Apr 17 05:25:41.245465 2026] [:error] [pid 9152:tid 9202] [client 172.213.155.173:6806] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "aeFT1ZJYca8I3TNCwIcHSQAAAEw"]
[Fri Apr 17 05:25:42.659168 2026] [:error] [pid 51878:tid 51886] [client 172.213.155.173:28724] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "aeFT1knQhUtMbw9EsgZaBgAAAQY"]
[Fri Apr 17 05:25:44.244279 2026] [:error] [pid 9153:tid 9232] [client 172.213.155.173:6812] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "aeFT2OMHGxkTZX3c45f02AAAAI4"]
[Fri Apr 17 05:25:56.522724 2026] [:error] [pid 9151:tid 9164] [client 172.213.155.173:28689] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "aeFT5MhTVuRPkua22vSUrgAAAAM"]
[Fri Apr 17 05:26:20.087729 2026] [:error] [pid 51878:tid 51892] [client 172.213.155.173:63865] [client 172.213.155.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aeFT_EnQhUtMbw9EsgZaqwAAAQw"]
[Fri Apr 17 05:26:26.880920 2026] [:error] [pid 9153:tid 9241] [client 172.213.155.173:32970] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/footer.php"] [unique_id "aeFUAuMHGxkTZX3c45f1HgAAAJc"]
[Fri Apr 17 05:26:28.073477 2026] [:error] [pid 9151:tid 9164] [client 172.213.155.173:58857] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/footer.php"] [unique_id "aeFUBMhTVuRPkua22vSU3wAAAAM"]
[Fri Apr 17 05:26:29.368390 2026] [:error] [pid 9153:tid 9230] [client 172.213.155.173:55146] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/footer.php"] [unique_id "aeFUBeMHGxkTZX3c45f1IwAAAIw"]
[Fri Apr 17 05:26:30.564701 2026] [:error] [pid 9151:tid 9170] [client 172.213.155.173:58868] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/footer.php"] [unique_id "aeFUBshTVuRPkua22vSU6AAAAAk"]
[Fri Apr 17 05:26:32.730124 2026] [:error] [pid 9263:tid 9276] [client 172.213.155.173:63177] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "aeFUCBP68VyHNvj1e57tcgAAAMs"]
[Fri Apr 17 05:26:33.952797 2026] [:error] [pid 9151:tid 9184] [client 172.213.155.173:60247] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "aeFUCchTVuRPkua22vSU7gAAABc"]
[Fri Apr 17 05:26:34.984885 2026] [:error] [pid 9151:tid 9176] [client 172.213.155.173:60270] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "aeFUCshTVuRPkua22vSU8QAAAA8"]
[Fri Apr 17 05:26:37.543457 2026] [:error] [pid 51878:tid 51889] [client 172.213.155.173:32985] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "aeFUDUnQhUtMbw9EsgZaugAAAQk"]
[Fri Apr 17 05:26:38.288190 2026] [:error] [pid 9152:tid 9198] [client 172.213.155.173:58832] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "aeFUDpJYca8I3TNCwIcHlwAAAEg"]
[Fri Apr 17 05:26:39.550988 2026] [:error] [pid 51878:tid 51895] [client 172.213.155.173:60229] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "aeFUD0nQhUtMbw9EsgZavQAAAQ8"]
[Fri Apr 17 05:26:41.435893 2026] [:error] [pid 51878:tid 51903] [client 172.213.155.173:55123] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "aeFUEUnQhUtMbw9EsgZawwAAARc"]
[Fri Apr 17 05:26:42.608196 2026] [:error] [pid 9151:tid 9164] [client 172.213.155.173:60265] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/12.php"] [unique_id "aeFUEshTVuRPkua22vSU9wAAAAM"]
[Fri Apr 17 05:27:00.511682 2026] [:error] [pid 9263:tid 9266] [client 172.213.155.173:63195] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeFUJBP68VyHNvj1e57toQAAAME"]
[Fri Apr 17 05:27:02.081658 2026] [:error] [pid 9153:tid 9236] [client 172.213.155.173:63194] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeFUJuMHGxkTZX3c45f1VQAAAJI"]
[Fri Apr 17 05:27:07.362694 2026] [:error] [pid 9263:tid 9285] [client 172.213.155.173:33410] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeFUKxP68VyHNvj1e57t4wAAANQ"]
[Fri Apr 17 05:27:08.214409 2026] [:error] [pid 9151:tid 9167] [client 172.213.155.173:6563] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeFULMhTVuRPkua22vSVIAAAAAY"]
[Fri Apr 17 05:27:10.605188 2026] [:error] [pid 9263:tid 9285] [client 172.213.155.173:60279] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aeFULhP68VyHNvj1e57t7QAAANQ"]
[Fri Apr 17 05:27:12.802871 2026] [:error] [pid 9263:tid 9285] [client 172.213.155.173:63205] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aeFUMBP68VyHNvj1e57t-gAAANQ"]
[Fri Apr 17 05:27:14.592767 2026] [:error] [pid 51878:tid 51890] [client 172.213.155.173:33438] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aeFUMknQhUtMbw9EsgZbSQAAAQo"]
[Fri Apr 17 05:27:15.883846 2026] [:error] [pid 9151:tid 9161] [client 172.213.155.173:55161] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aeFUM8hTVuRPkua22vSVPgAAAAA"]
[Fri Apr 17 05:27:17.590255 2026] [:error] [pid 9152:tid 9193] [client 172.213.155.173:55152] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roksad1.php"] [unique_id "aeFUNZJYca8I3TNCwIcHwQAAAEM"]
[Fri Apr 17 05:27:22.317744 2026] [:error] [pid 9263:tid 9288] [client 172.213.155.173:55143] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roksad1.php"] [unique_id "aeFUOhP68VyHNvj1e57uNwAAANc"]
[Fri Apr 17 05:27:24.667580 2026] [:error] [pid 9263:tid 9278] [client 172.213.155.173:60277] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roksad1.php"] [unique_id "aeFUPBP68VyHNvj1e57uSwAAAM0"]
[Fri Apr 17 05:27:38.322389 2026] [:error] [pid 51878:tid 51884] [client 172.213.155.173:60286] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bdktk.php"] [unique_id "aeFUSknQhUtMbw9EsgZbvAAAAQQ"]
[Fri Apr 17 05:27:40.695622 2026] [:error] [pid 9263:tid 9266] [client 172.213.155.173:63174] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bdktk.php"] [unique_id "aeFUTBP68VyHNvj1e57ulwAAAME"]
[Fri Apr 17 05:27:41.946892 2026] [:error] [pid 9151:tid 9165] [client 172.213.155.173:63196] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bdktk.php"] [unique_id "aeFUTchTVuRPkua22vSVjAAAAAQ"]
[Fri Apr 17 05:27:44.470054 2026] [:error] [pid 9263:tid 9270] [client 172.213.155.173:60236] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bdktk.php"] [unique_id "aeFUUBP68VyHNvj1e57upgAAAMU"]
[Fri Apr 17 05:27:45.352738 2026] [:error] [pid 9152:tid 9201] [client 172.213.155.173:63202] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v5.php"] [unique_id "aeFUUZJYca8I3TNCwIcIAwAAAEs"]
[Fri Apr 17 05:27:46.187658 2026] [:error] [pid 51878:tid 51881] [client 172.213.155.173:6210] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v5.php"] [unique_id "aeFUUknQhUtMbw9EsgZb2QAAAQE"]
[Fri Apr 17 05:27:46.983779 2026] [:error] [pid 9263:tid 9273] [client 172.213.155.173:63201] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v5.php"] [unique_id "aeFUUhP68VyHNvj1e57usQAAAMg"]
[Fri Apr 17 05:27:48.608472 2026] [:error] [pid 9153:tid 9224] [client 172.213.155.173:33461] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v5.php"] [unique_id "aeFUVOMHGxkTZX3c45f1mAAAAIY"]
[Fri Apr 17 05:27:51.604296 2026] [:error] [pid 9153:tid 9237] [client 172.213.155.173:60287] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "aeFUV-MHGxkTZX3c45f1nQAAAJM"]
[Fri Apr 17 05:27:52.576384 2026] [:error] [pid 9153:tid 9234] [client 172.213.155.173:60242] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "aeFUWOMHGxkTZX3c45f1oQAAAJA"]
[Fri Apr 17 05:27:53.980765 2026] [:error] [pid 9152:tid 9212] [client 172.213.155.173:60278] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "aeFUWZJYca8I3TNCwIcIIQAAAFY"]
[Fri Apr 17 05:27:55.081848 2026] [:error] [pid 9263:tid 9282] [client 172.213.155.173:33460] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws85.php"] [unique_id "aeFUWxP68VyHNvj1e57u1wAAANE"]
[Fri Apr 17 05:27:56.354495 2026] [:error] [pid 9153:tid 9220] [client 172.213.155.173:60233] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws87.php"] [unique_id "aeFUXOMHGxkTZX3c45f1pwAAAII"]
[Fri Apr 17 05:27:57.150620 2026] [:error] [pid 51878:tid 51904] [client 172.213.155.173:60226] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws87.php"] [unique_id "aeFUXUnQhUtMbw9EsgZcAQAAARg"]
[Fri Apr 17 05:27:58.651755 2026] [:error] [pid 51878:tid 51884] [client 172.213.155.173:58873] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws87.php"] [unique_id "aeFUXknQhUtMbw9EsgZcDgAAAQQ"]
[Fri Apr 17 05:27:59.513465 2026] [:error] [pid 51878:tid 51902] [client 172.213.155.173:55122] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws87.php"] [unique_id "aeFUX0nQhUtMbw9EsgZcFAAAARY"]
[Fri Apr 17 05:28:00.848545 2026] [:error] [pid 9152:tid 9192] [client 172.213.155.173:58862] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "aeFUYJJYca8I3TNCwIcIJAAAAEI"]
[Fri Apr 17 05:28:01.498836 2026] [:error] [pid 9263:tid 9270] [client 172.213.155.173:55116] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "aeFUYRP68VyHNvj1e57u3wAAAMU"]
[Fri Apr 17 05:28:03.106532 2026] [:error] [pid 9151:tid 9183] [client 172.213.155.173:32999] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "aeFUY8hTVuRPkua22vSVqgAAABY"]
[Fri Apr 17 05:28:05.373306 2026] [:error] [pid 9152:tid 9198] [client 172.213.155.173:55105] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "aeFUZZJYca8I3TNCwIcILQAAAEg"]
[Fri Apr 17 05:28:08.410949 2026] [:error] [pid 9263:tid 9288] [client 172.213.155.173:33462] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r2.php"] [unique_id "aeFUaBP68VyHNvj1e57vDAAAANc"]
[Fri Apr 17 05:28:09.439151 2026] [:error] [pid 9263:tid 9277] [client 172.213.155.173:32987] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r2.php"] [unique_id "aeFUaRP68VyHNvj1e57vFQAAAMw"]
[Fri Apr 17 05:28:10.173698 2026] [:error] [pid 9153:tid 9222] [client 172.213.155.173:33470] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r2.php"] [unique_id "aeFUauMHGxkTZX3c45f1xAAAAIQ"]
[Fri Apr 17 05:28:12.005667 2026] [:error] [pid 51878:tid 51888] [client 172.213.155.173:33417] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r2.php"] [unique_id "aeFUbEnQhUtMbw9EsgZcOQAAAQg"]
[Fri Apr 17 05:28:12.964093 2026] [:error] [pid 51878:tid 51903] [client 172.213.155.173:58846] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah25.php"] [unique_id "aeFUbEnQhUtMbw9EsgZcPQAAARc"]
[Fri Apr 17 05:28:14.278299 2026] [:error] [pid 9152:tid 9208] [client 172.213.155.173:63229] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah25.php"] [unique_id "aeFUbpJYca8I3TNCwIcINwAAAFI"]
[Fri Apr 17 05:28:15.167397 2026] [:error] [pid 9151:tid 9175] [client 172.213.155.173:32981] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah25.php"] [unique_id "aeFUb8hTVuRPkua22vSVtAAAAA4"]
[Fri Apr 17 05:28:17.360348 2026] [:error] [pid 9153:tid 9227] [client 172.213.155.173:63170] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah25.php"] [unique_id "aeFUceMHGxkTZX3c45f11AAAAIk"]
[Fri Apr 17 05:28:18.951015 2026] [:error] [pid 51878:tid 51887] [client 172.213.155.173:32986] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/006.php"] [unique_id "aeFUcknQhUtMbw9EsgZcYAAAAQc"]
[Fri Apr 17 05:28:19.740286 2026] [:error] [pid 51878:tid 51888] [client 172.213.155.173:33424] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/006.php"] [unique_id "aeFUc0nQhUtMbw9EsgZcYwAAAQg"]
[Fri Apr 17 05:28:20.939064 2026] [:error] [pid 9151:tid 9167] [client 172.213.155.173:32977] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/006.php"] [unique_id "aeFUdMhTVuRPkua22vSVugAAAAY"]
[Fri Apr 17 05:28:21.644289 2026] [:error] [pid 9151:tid 9173] [client 172.213.155.173:63213] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/006.php"] [unique_id "aeFUdchTVuRPkua22vSVuwAAAAw"]
[Fri Apr 17 05:28:22.467708 2026] [:error] [pid 9152:tid 9203] [client 172.213.155.173:33023] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "aeFUdpJYca8I3TNCwIcISwAAAE0"]
[Fri Apr 17 05:28:23.228734 2026] [:error] [pid 9153:tid 9233] [client 172.213.155.173:60232] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "aeFUd-MHGxkTZX3c45f14QAAAI8"]
[Fri Apr 17 05:28:25.664032 2026] [:error] [pid 51878:tid 51893] [client 172.213.155.173:58879] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "aeFUeUnQhUtMbw9EsgZceQAAAQ0"]
[Fri Apr 17 05:28:27.641994 2026] [:error] [pid 9263:tid 9269] [client 172.213.155.173:63226] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "aeFUexP68VyHNvj1e57vVAAAAMQ"]
[Fri Apr 17 05:28:31.080267 2026] [:error] [pid 9153:tid 9226] [client 172.213.155.173:32971] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "aeFUf-MHGxkTZX3c45f19wAAAIg"]
[Fri Apr 17 05:28:33.320572 2026] [:error] [pid 51878:tid 51886] [client 172.213.155.173:45550] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "aeFUgUnQhUtMbw9EsgZcqQAAAQY"]
[Fri Apr 17 05:28:34.449689 2026] [:error] [pid 9151:tid 9165] [client 172.213.155.173:32983] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "aeFUgshTVuRPkua22vSV2gAAAAQ"]
[Fri Apr 17 05:28:35.426081 2026] [:error] [pid 9153:tid 9228] [client 172.213.155.173:32962] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "aeFUg-MHGxkTZX3c45f2AgAAAIo"]
[Fri Apr 17 05:28:54.873958 2026] [:error] [pid 9263:tid 9277] [client 172.213.155.173:63210] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeFUlhP68VyHNvj1e57vrgAAAMw"]
[Fri Apr 17 05:28:56.044863 2026] [:error] [pid 51878:tid 51889] [client 172.213.155.173:60231] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeFUmEnQhUtMbw9EsgZdBQAAAQk"]
[Fri Apr 17 05:29:00.511220 2026] [:error] [pid 51878:tid 51900] [client 172.213.155.173:6268] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeFUnEnQhUtMbw9EsgZdDQAAARQ"]
[Fri Apr 17 05:29:05.682795 2026] [:error] [pid 51878:tid 51901] [client 172.213.155.173:45542] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeFUoUnQhUtMbw9EsgZdGgAAARU"]
[Fri Apr 17 05:29:12.016677 2026] [:error] [pid 9153:tid 9238] [client 172.213.155.173:6765] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kz.php"] [unique_id "aeFUqOMHGxkTZX3c45f2WQAAAJQ"]
[Fri Apr 17 05:29:12.835413 2026] [:error] [pid 51878:tid 51891] [client 172.213.155.173:6391] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kz.php"] [unique_id "aeFUqEnQhUtMbw9EsgZdMQAAAQs"]
[Fri Apr 17 05:29:13.847802 2026] [:error] [pid 9263:tid 9274] [client 172.213.155.173:45552] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kz.php"] [unique_id "aeFUqRP68VyHNvj1e57vvQAAAMk"]
[Fri Apr 17 05:29:15.694846 2026] [:error] [pid 9263:tid 9267] [client 172.213.155.173:6227] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kz.php"] [unique_id "aeFUqxP68VyHNvj1e57vvwAAAMI"]
[Fri Apr 17 05:29:16.515650 2026] [:error] [pid 51878:tid 51897] [client 172.213.155.173:6212] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-lo.php"] [unique_id "aeFUrEnQhUtMbw9EsgZdNwAAARE"]
[Fri Apr 17 05:29:17.880089 2026] [:error] [pid 51878:tid 51899] [client 172.213.155.173:6336] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-lo.php"] [unique_id "aeFUrUnQhUtMbw9EsgZdOwAAARM"]
[Fri Apr 17 05:29:19.002965 2026] [:error] [pid 9263:tid 9283] [client 172.213.155.173:54668] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-lo.php"] [unique_id "aeFUrxP68VyHNvj1e57vxAAAANI"]
[Fri Apr 17 05:29:19.993153 2026] [:error] [pid 51878:tid 51889] [client 172.213.155.173:54685] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-lo.php"] [unique_id "aeFUr0nQhUtMbw9EsgZdQQAAAQk"]
[Fri Apr 17 05:29:20.865631 2026] [:error] [pid 51878:tid 51888] [client 172.213.155.173:6875] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aeFUsEnQhUtMbw9EsgZdQwAAAQg"]
[Fri Apr 17 05:29:21.744113 2026] [:error] [pid 9153:tid 9240] [client 172.213.155.173:54698] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aeFUseMHGxkTZX3c45f2cgAAAJY"]
[Fri Apr 17 05:29:22.446310 2026] [:error] [pid 9151:tid 9161] [client 172.213.155.173:6297] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aeFUsshTVuRPkua22vSWIQAAAAA"]
[Fri Apr 17 05:29:23.433593 2026] [:error] [pid 9153:tid 9229] [client 172.213.155.173:54692] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aeFUs-MHGxkTZX3c45f2fQAAAIs"]
[Fri Apr 17 05:29:24.235755 2026] [:error] [pid 51878:tid 51893] [client 172.213.155.173:6399] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ipv6.php"] [unique_id "aeFUtEnQhUtMbw9EsgZdTwAAAQ0"]
[Fri Apr 17 05:29:25.087923 2026] [:error] [pid 51878:tid 51895] [client 172.213.155.173:54682] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ipv6.php"] [unique_id "aeFUtUnQhUtMbw9EsgZdUwAAAQ8"]
[Fri Apr 17 05:29:26.023178 2026] [:error] [pid 51878:tid 51901] [client 172.213.155.173:6339] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ipv6.php"] [unique_id "aeFUtknQhUtMbw9EsgZdWgAAARU"]
[Fri Apr 17 05:29:26.578606 2026] [:error] [pid 9152:tid 9205] [client 172.213.155.173:54672] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Ipv6.php"] [unique_id "aeFUtpJYca8I3TNCwIcIvQAAAE8"]
[Fri Apr 17 05:29:27.205567 2026] [:error] [pid 9152:tid 9191] [client 172.213.155.173:54689] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-gertdxz.php"] [unique_id "aeFUt5JYca8I3TNCwIcIwQAAAEE"]
[Fri Apr 17 05:29:28.415297 2026] [:error] [pid 51878:tid 51891] [client 172.213.155.173:54656] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-gertdxz.php"] [unique_id "aeFUuEnQhUtMbw9EsgZdWwAAAQs"]
[Fri Apr 17 05:29:29.303083 2026] [:error] [pid 51878:tid 51887] [client 172.213.155.173:6856] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-gertdxz.php"] [unique_id "aeFUuUnQhUtMbw9EsgZdXwAAAQc"]
[Fri Apr 17 05:29:29.990280 2026] [:error] [pid 9151:tid 9169] [client 172.213.155.173:6866] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-gertdxz.php"] [unique_id "aeFUuchTVuRPkua22vSWKQAAAAg"]
[Fri Apr 17 05:29:30.976058 2026] [:error] [pid 9153:tid 9233] [client 172.213.155.173:63268] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "aeFUuuMHGxkTZX3c45f2iwAAAI8"]
[Fri Apr 17 05:29:31.911284 2026] [:error] [pid 9151:tid 9163] [client 172.213.155.173:6293] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "aeFUu8hTVuRPkua22vSWKwAAAAI"]
[Fri Apr 17 05:29:32.812735 2026] [:error] [pid 9151:tid 9175] [client 172.213.155.173:6294] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "aeFUvMhTVuRPkua22vSWLQAAAA4"]
[Fri Apr 17 05:29:34.590858 2026] [:error] [pid 9263:tid 9276] [client 172.213.155.173:54686] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "aeFUvhP68VyHNvj1e57v1wAAAMs"]
[Fri Apr 17 05:29:35.689512 2026] [:error] [pid 9263:tid 9265] [client 172.213.155.173:54688] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeFUvxP68VyHNvj1e57v3AAAAMA"]
[Fri Apr 17 05:29:36.556352 2026] [:error] [pid 9263:tid 9278] [client 172.213.155.173:6771] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeFUwBP68VyHNvj1e57v4QAAAM0"]
[Fri Apr 17 05:29:39.078075 2026] [:error] [pid 9263:tid 9281] [client 172.213.155.173:6873] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeFUwxP68VyHNvj1e57v5wAAANA"]
[Fri Apr 17 05:29:45.465571 2026] [:error] [pid 9152:tid 9198] [client 172.213.155.173:7165] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeFUyZJYca8I3TNCwIcI2AAAAEg"]
[Fri Apr 17 05:29:46.355226 2026] [:error] [pid 9153:tid 9233] [client 172.213.155.173:6286] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "aeFUyuMHGxkTZX3c45f2pQAAAI8"]
[Fri Apr 17 05:29:49.008579 2026] [:error] [pid 9263:tid 9283] [client 172.213.155.173:28655] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "aeFUzRP68VyHNvj1e57wAAAAANI"]
[Fri Apr 17 05:29:51.514219 2026] [:error] [pid 9263:tid 9278] [client 172.213.155.173:28639] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "aeFUzxP68VyHNvj1e57wBQAAAM0"]
[Fri Apr 17 05:29:52.495927 2026] [:error] [pid 51878:tid 51904] [client 172.213.155.173:63933] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "aeFU0EnQhUtMbw9EsgZdhQAAARg"]
[Fri Apr 17 05:30:08.654457 2026] [:error] [pid 9263:tid 9267] [client 172.213.155.173:62772] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "aeFU4BP68VyHNvj1e57wKAAAAMI"]
[Fri Apr 17 05:30:15.345962 2026] [:error] [pid 9263:tid 9277] [client 172.213.155.173:42552] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "aeFU5xP68VyHNvj1e57wNgAAAMw"]
[Fri Apr 17 05:30:17.173185 2026] [:error] [pid 51878:tid 51880] [client 172.213.155.173:64566] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "aeFU6UnQhUtMbw9EsgZeJAAAAQA"]
[Fri Apr 17 05:30:19.913729 2026] [:error] [pid 9263:tid 9289] [client 172.213.155.173:58882] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "aeFU6xP68VyHNvj1e57wTQAAANg"]
[Fri Apr 17 05:30:20.956927 2026] [:error] [pid 9153:tid 9234] [client 172.213.155.173:64537] [client 172.213.155.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wincust.php"] [unique_id "aeFU7OMHGxkTZX3c45f2-wAAAJA"]
[Fri Apr 17 05:30:21.837932 2026] [:error] [pid 9152:tid 9211] [client 172.213.155.173:64549] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeFU7ZJYca8I3TNCwIcJIQAAAFU"]
[Fri Apr 17 05:30:23.601677 2026] [:error] [pid 9263:tid 9266] [client 172.213.155.173:58917] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeFU7xP68VyHNvj1e57wVAAAAME"]
[Fri Apr 17 05:30:24.973395 2026] [:error] [pid 51878:tid 51897] [client 172.213.155.173:58936] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeFU8EnQhUtMbw9EsgZeKgAAARE"]
[Fri Apr 17 05:30:26.052995 2026] [:error] [pid 51878:tid 51892] [client 172.213.155.173:64518] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeFU8knQhUtMbw9EsgZeLgAAAQw"]
[Fri Apr 17 05:30:27.155730 2026] [:error] [pid 9153:tid 9223] [client 172.213.155.173:7032] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeFU8-MHGxkTZX3c45f3AgAAAIU"]
[Fri Apr 17 05:30:28.325511 2026] [:error] [pid 9153:tid 9240] [client 172.213.155.173:6600] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeFU9OMHGxkTZX3c45f3CAAAAJY"]
[Fri Apr 17 05:30:29.901570 2026] [:error] [pid 9263:tid 9284] [client 172.213.155.173:7006] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeFU9RP68VyHNvj1e57wYAAAANM"]
[Fri Apr 17 05:30:30.786424 2026] [:error] [pid 9152:tid 9207] [client 172.213.155.173:42511] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "aeFU9pJYca8I3TNCwIcJQAAAAFE"]
[Fri Apr 17 05:30:31.559027 2026] [:error] [pid 9151:tid 9166] [client 172.213.155.173:6596] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "aeFU98hTVuRPkua22vSW5wAAAAU"]
[Fri Apr 17 05:30:33.241354 2026] [:error] [pid 9263:tid 9275] [client 172.213.155.173:16725] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "aeFU-RP68VyHNvj1e57waAAAAMo"]
[Fri Apr 17 05:30:34.833959 2026] [:error] [pid 51878:tid 51891] [client 172.213.155.173:64553] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "aeFU-knQhUtMbw9EsgZeMQAAAQs"]
[Fri Apr 17 05:30:35.717605 2026] [:error] [pid 51878:tid 51883] [client 172.213.155.173:6653] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws57.php"] [unique_id "aeFU-0nQhUtMbw9EsgZeNAAAAQM"]
[Fri Apr 17 05:30:41.503197 2026] [:error] [pid 9153:tid 9227] [client 172.213.155.173:16708] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws57.php"] [unique_id "aeFVAeMHGxkTZX3c45f3JAAAAIk"]
[Fri Apr 17 05:30:43.627366 2026] [:error] [pid 9153:tid 9224] [client 172.213.155.173:7010] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws57.php"] [unique_id "aeFVA-MHGxkTZX3c45f3KQAAAIY"]
[Fri Apr 17 05:30:44.889365 2026] [:error] [pid 9263:tid 9271] [client 172.213.155.173:23020] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws57.php"] [unique_id "aeFVBBP68VyHNvj1e57wiwAAAMY"]
[Fri Apr 17 05:30:45.702163 2026] [:error] [pid 9151:tid 9172] [client 172.213.155.173:58909] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws61.php"] [unique_id "aeFVBchTVuRPkua22vSW-wAAAAs"]
[Fri Apr 17 05:30:46.952057 2026] [:error] [pid 9153:tid 9218] [client 172.213.155.173:16750] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws61.php"] [unique_id "aeFVBuMHGxkTZX3c45f3MQAAAIA"]
[Fri Apr 17 05:30:48.048414 2026] [:error] [pid 9153:tid 9233] [client 172.213.155.173:32649] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws61.php"] [unique_id "aeFVCOMHGxkTZX3c45f3NAAAAI8"]
[Fri Apr 17 05:30:49.909842 2026] [:error] [pid 9263:tid 9269] [client 172.213.155.173:23022] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws61.php"] [unique_id "aeFVCRP68VyHNvj1e57wmAAAAMQ"]
[Fri Apr 17 05:30:50.872611 2026] [:error] [pid 51878:tid 51902] [client 172.213.155.173:23025] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "aeFVCknQhUtMbw9EsgZeTwAAARY"]
[Fri Apr 17 05:30:51.718603 2026] [:error] [pid 9151:tid 9184] [client 172.213.155.173:16752] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "aeFVC8hTVuRPkua22vSXCgAAABc"]
[Fri Apr 17 05:30:52.598384 2026] [:error] [pid 9152:tid 9201] [client 172.213.155.173:23006] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "aeFVDJJYca8I3TNCwIcJYwAAAEs"]
[Fri Apr 17 05:30:53.377314 2026] [:error] [pid 9263:tid 9271] [client 172.213.155.173:16724] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "aeFVDRP68VyHNvj1e57woAAAAMY"]
[Fri Apr 17 05:30:55.199949 2026] [:error] [pid 51878:tid 51889] [client 172.213.155.173:6978] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeFVD0nQhUtMbw9EsgZeZgAAAQk"]
[Fri Apr 17 05:30:59.482716 2026] [:error] [pid 9151:tid 9181] [client 172.213.155.173:7034] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeFVE8hTVuRPkua22vSXIAAAABQ"]
[Fri Apr 17 05:31:01.191125 2026] [:error] [pid 9263:tid 9284] [client 172.213.155.173:6977] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeFVFRP68VyHNvj1e57wqAAAANM"]
[Fri Apr 17 05:31:04.667182 2026] [:error] [pid 51878:tid 51889] [client 172.213.155.173:6628] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeFVGEnQhUtMbw9EsgZegQAAAQk"]
[Fri Apr 17 05:31:05.797678 2026] [:error] [pid 9151:tid 9181] [client 172.213.155.173:16766] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xynz.php"] [unique_id "aeFVGchTVuRPkua22vSXJgAAABQ"]
[Fri Apr 17 05:31:20.960000 2026] [:error] [pid 51878:tid 51898] [client 172.213.155.173:6986] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/curl.php"] [unique_id "aeFVKEnQhUtMbw9EsgZeywAAARI"]
[Fri Apr 17 05:31:21.798305 2026] [:error] [pid 9263:tid 9275] [client 172.213.155.173:16726] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/curl.php"] [unique_id "aeFVKRP68VyHNvj1e57w8QAAAMo"]
[Fri Apr 17 05:31:22.414928 2026] [:error] [pid 9263:tid 9287] [client 172.213.155.173:32660] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/curl.php"] [unique_id "aeFVKhP68VyHNvj1e57w9AAAANY"]
[Fri Apr 17 05:31:23.390504 2026] [:error] [pid 51878:tid 51896] [client 172.213.155.173:42544] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/curl.php"] [unique_id "aeFVK0nQhUtMbw9EsgZe4QAAARA"]
[Fri Apr 17 05:31:24.505572 2026] [:error] [pid 51878:tid 51888] [client 172.213.155.173:6606] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sallu.php"] [unique_id "aeFVLEnQhUtMbw9EsgZe6wAAAQg"]
[Fri Apr 17 05:31:25.182812 2026] [:error] [pid 51878:tid 51882] [client 172.213.155.173:42504] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sallu.php"] [unique_id "aeFVLUnQhUtMbw9EsgZe8AAAAQI"]
[Fri Apr 17 05:31:26.093876 2026] [:error] [pid 51878:tid 51889] [client 172.213.155.173:42501] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sallu.php"] [unique_id "aeFVLknQhUtMbw9EsgZe-wAAAQk"]
[Fri Apr 17 05:31:27.019114 2026] [:error] [pid 51878:tid 51903] [client 172.213.155.173:16743] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sallu.php"] [unique_id "aeFVL0nQhUtMbw9EsgZfBQAAARc"]
[Fri Apr 17 05:31:27.891754 2026] [:error] [pid 9263:tid 9289] [client 172.213.155.173:22986] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeFVLxP68VyHNvj1e57w9wAAANg"]
[Fri Apr 17 05:31:28.912887 2026] [:error] [pid 9153:tid 9222] [client 172.213.155.173:6997] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeFVMOMHGxkTZX3c45f3bgAAAIQ"]
[Fri Apr 17 05:31:29.654453 2026] [:error] [pid 9263:tid 9288] [client 172.213.155.173:23038] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeFVMRP68VyHNvj1e57w-gAAANc"]
[Fri Apr 17 05:31:30.598930 2026] [:error] [pid 9263:tid 9275] [client 172.213.155.173:6999] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeFVMhP68VyHNvj1e57w-wAAAMo"]
[Fri Apr 17 05:31:31.754955 2026] [:error] [pid 51878:tid 51897] [client 172.213.155.173:42554] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeFVM0nQhUtMbw9EsgZfIQAAARE"]
[Fri Apr 17 05:31:32.287721 2026] [:error] [pid 51878:tid 51899] [client 172.213.155.173:64518] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeFVNEnQhUtMbw9EsgZfJQAAARM"]
[Fri Apr 17 05:31:32.882846 2026] [:error] [pid 9153:tid 9227] [client 172.213.155.173:7011] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeFVNOMHGxkTZX3c45f3dAAAAIk"]
[Fri Apr 17 05:31:33.774881 2026] [:error] [pid 51878:tid 51897] [client 172.213.155.173:7011] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeFVNUnQhUtMbw9EsgZfLgAAARE"]
[Fri Apr 17 05:31:35.103186 2026] [:error] [pid 9152:tid 9206] [client 172.213.155.173:28322] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeFVN5JYca8I3TNCwIcJlAAAAFA"]
[Fri Apr 17 05:31:35.891466 2026] [:error] [pid 9152:tid 9207] [client 172.213.155.173:42525] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeFVN5JYca8I3TNCwIcJlwAAAFE"]
[Fri Apr 17 05:31:36.733558 2026] [:error] [pid 51878:tid 51892] [client 172.213.155.173:32667] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeFVOEnQhUtMbw9EsgZfNgAAAQw"]
[Fri Apr 17 05:31:37.564292 2026] [:error] [pid 9153:tid 9237] [client 172.213.155.173:16758] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeFVOeMHGxkTZX3c45f3dwAAAJM"]
[Fri Apr 17 05:31:38.236381 2026] [:error] [pid 51878:tid 51903] [client 172.213.155.173:64558] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods_260325043000.php"] [unique_id "aeFVOknQhUtMbw9EsgZfPQAAARc"]
[Fri Apr 17 05:31:39.258945 2026] [:error] [pid 9153:tid 9223] [client 172.213.155.173:32654] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods_260325043000.php"] [unique_id "aeFVO-MHGxkTZX3c45f3ewAAAIU"]
[Fri Apr 17 05:31:41.149895 2026] [:error] [pid 51878:tid 51891] [client 172.213.155.173:22995] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods_260325043000.php"] [unique_id "aeFVPUnQhUtMbw9EsgZfSwAAAQs"]
[Fri Apr 17 05:31:44.251139 2026] [:error] [pid 9152:tid 9211] [client 172.213.155.173:64564] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods_260325043000.php"] [unique_id "aeFVQJJYca8I3TNCwIcJowAAAFU"]
[Fri Apr 17 05:31:45.706042 2026] [:error] [pid 9152:tid 9202] [client 172.213.155.173:28329] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods_260401065719.php"] [unique_id "aeFVQZJYca8I3TNCwIcJpgAAAEw"]
[Fri Apr 17 05:31:46.787058 2026] [:error] [pid 9263:tid 9265] [client 172.213.155.173:6598] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods_260401065719.php"] [unique_id "aeFVQhP68VyHNvj1e57xCwAAAMA"]
[Fri Apr 17 05:31:48.417479 2026] [:error] [pid 51878:tid 51887] [client 172.213.155.173:22994] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods_260401065719.php"] [unique_id "aeFVREnQhUtMbw9EsgZfYAAAAQc"]
[Fri Apr 17 05:31:50.782441 2026] [:error] [pid 9153:tid 9218] [client 172.213.155.173:62720] [client 172.213.155.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods_260401065719.php"] [unique_id "aeFVRuMHGxkTZX3c45f3jwAAAIA"]
[Fri Apr 17 07:41:32.082521 2026] [:error] [pid 9151:tid 9176] [client 41.249.125.164:53253] [client 41.249.125.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aeFzrMhTVuRPkua22vTNMgAAAA8"]
[Fri Apr 17 08:39:20.703305 2026] [:error] [pid 25010:tid 25015] [client 62.60.131.169:25082] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBOI-7kkf42RarqQ0C-wAAAUI"]
[Fri Apr 17 08:39:23.212120 2026] [:error] [pid 34273:tid 34290] [client 62.60.131.169:25102] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBO2uQDW686mK3dgFMOwAAAY8"]
[Fri Apr 17 08:39:24.997965 2026] [:error] [pid 9152:tid 9207] [client 62.60.131.169:25164] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBPJJYca8I3TNCwIdwdwAAAFE"]
[Fri Apr 17 08:39:25.472394 2026] [:error] [pid 9153:tid 9242] [client 62.60.131.169:25138] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBPeMHGxkTZX3c45d8LgAAAJg"]
[Fri Apr 17 08:39:27.530971 2026] [:error] [pid 25010:tid 25028] [client 62.60.131.169:1242] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBP4-7kkf42RarqQ0DMQAAAU8"]
[Fri Apr 17 08:39:29.528535 2026] [:error] [pid 51878:tid 51888] [client 62.60.131.169:1264] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBQUnQhUtMbw9EsgbfCAAAAQg"]
[Fri Apr 17 08:39:30.397565 2026] [:error] [pid 9152:tid 9207] [client 62.60.131.169:1290] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBQpJYca8I3TNCwIdwtQAAAFE"]
[Fri Apr 17 08:39:30.555139 2026] [:error] [pid 9152:tid 9209] [client 62.60.131.169:1292] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGBQpJYca8I3TNCwIdwuwAAAFM"]
[Fri Apr 17 08:39:30.559248 2026] [:error] [pid 9152:tid 9205] [client 62.60.131.169:1296] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBQpJYca8I3TNCwIdwvAAAAE8"]
[Fri Apr 17 08:39:32.267154 2026] [:error] [pid 25010:tid 25030] [client 62.60.131.169:1308] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBRI-7kkf42RarqQ0DTAAAAVE"]
[Fri Apr 17 08:39:32.669276 2026] [:error] [pid 51878:tid 51891] [client 62.60.131.169:1326] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGBREnQhUtMbw9EsgbfEwAAAQs"]
[Fri Apr 17 08:39:33.816821 2026] [:error] [pid 51878:tid 51896] [client 62.60.131.169:1336] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBRUnQhUtMbw9EsgbfGgAAARA"]
[Fri Apr 17 08:39:35.293393 2026] [:error] [pid 25010:tid 25018] [client 62.60.131.169:1356] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBR4-7kkf42RarqQ0DWgAAAUU"]
[Fri Apr 17 08:39:35.305150 2026] [:error] [pid 25010:tid 25015] [client 62.60.131.169:1372] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGBR4-7kkf42RarqQ0DXAAAAUI"]
[Fri Apr 17 08:39:38.554249 2026] [:error] [pid 9152:tid 9211] [client 62.60.131.169:37852] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGBSpJYca8I3TNCwIdxAQAAAFU"]
[Fri Apr 17 08:39:39.596028 2026] [:error] [pid 25010:tid 25037] [client 62.60.131.169:37884] [client 62.60.131.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGBS4-7kkf42RarqQ0DdQAAAVg"]
[Fri Apr 17 08:55:01.243311 2026] [:error] [pid 9151:tid 9176] [client 62.60.131.165:7084] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE5chTVuRPkua22vTmrAAAAA8"]
[Fri Apr 17 08:55:03.421304 2026] [:error] [pid 9263:tid 9286] [client 62.60.131.165:7102] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE5xP68VyHNvj1e55bPQAAANU"]
[Fri Apr 17 08:55:05.068097 2026] [:error] [pid 9151:tid 9171] [client 62.60.131.165:7160] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE6chTVuRPkua22vTmtAAAAAo"]
[Fri Apr 17 08:55:05.681993 2026] [:error] [pid 9152:tid 9208] [client 62.60.131.165:7170] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE6ZJYca8I3TNCwIeLqAAAAFI"]
[Fri Apr 17 08:55:07.630251 2026] [:error] [pid 34273:tid 34293] [client 62.60.131.165:7178] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE62uQDW686mK3dgFeYwAAAZI"]
[Fri Apr 17 08:55:10.390179 2026] [:error] [pid 9152:tid 9197] [client 62.60.131.165:64928] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE7pJYca8I3TNCwIeLxgAAAEc"]
[Fri Apr 17 08:55:11.675639 2026] [:error] [pid 25010:tid 25027] [client 62.60.131.165:64934] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE74-7kkf42RarqQ0OfwAAAU4"]
[Fri Apr 17 08:55:13.840217 2026] [:error] [pid 34273:tid 34286] [client 62.60.131.165:64962] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE8WuQDW686mK3dgFeegAAAYs"]
[Fri Apr 17 08:55:14.933262 2026] [:error] [pid 9263:tid 9272] [client 62.60.131.165:65006] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE8hP68VyHNvj1e55bUQAAAMc"]
[Fri Apr 17 08:55:15.097777 2026] [:error] [pid 9151:tid 9166] [client 62.60.131.165:64994] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE88hTVuRPkua22vTmygAAAAU"]
[Fri Apr 17 08:55:16.220578 2026] [:error] [pid 9152:tid 9207] [client 62.60.131.165:65034] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGE9JJYca8I3TNCwIeL7AAAAFE"]
[Fri Apr 17 08:55:18.133713 2026] [:error] [pid 34273:tid 34283] [client 62.60.131.165:65056] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE9muQDW686mK3dgFejwAAAYg"]
[Fri Apr 17 08:55:18.153447 2026] [:error] [pid 34273:tid 34292] [client 62.60.131.165:65038] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGE9muQDW686mK3dgFekAAAAZE"]
[Fri Apr 17 08:55:21.710180 2026] [:error] [pid 9152:tid 9198] [client 62.60.131.165:58670] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGE-ZJYca8I3TNCwIeMEAAAAEg"]
[Fri Apr 17 08:55:22.160309 2026] [:error] [pid 34273:tid 34297] [client 62.60.131.165:58686] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeGE-muQDW686mK3dgFenQAAAZY"]
[Fri Apr 17 08:55:24.970541 2026] [:error] [pid 51878:tid 51885] [client 62.60.131.165:58734] [client 62.60.131.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeGE_EnQhUtMbw9EsgboNAAAAQU"]
[Fri Apr 17 09:07:56.886000 2026] [:error] [pid 34273:tid 34286] [client 165.22.227.125:53809] [client 165.22.227.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.227.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeGH7GuQDW686mK3dgFomwAAAYs"]
[Fri Apr 17 09:07:57.235706 2026] [proxy_fcgi:error] [pid 34273:tid 34286] [client 165.22.227.125:53809] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 17 09:15:43.044722 2026] [:error] [pid 34273:tid 34289] [client 165.22.227.125:58142] [client 165.22.227.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.227.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeGJv2uQDW686mK3dgFrwgAAAY4"]
[Fri Apr 17 09:15:44.729326 2026] [proxy_fcgi:error] [pid 34273:tid 34289] [client 165.22.227.125:58142] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 17 09:26:03.727526 2026] [:error] [pid 51878:tid 51900] [client 165.22.227.125:58090] [client 165.22.227.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.227.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeGMK0nQhUtMbw9Esgbv0wAAARQ"]
[Fri Apr 17 09:26:04.043067 2026] [proxy_fcgi:error] [pid 51878:tid 51900] [client 165.22.227.125:58090] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 17 09:55:54.800841 2026] [ssl:error] [pid 51878:tid 51884] [client 185.156.46.161:62613] AH02032: Hostname hbtwo.com.au provided via SNI and hostname hotbooksbookeeping2.com provided via HTTP have no compatible SSL setup, referer: http://hotbooksbookeeping2.com/
[Fri Apr 17 10:17:07.368068 2026] [:error] [pid 9152:tid 9208] [client 178.128.55.165:62277] [client 178.128.55.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aeGYI5JYca8I3TNCwIetQQAAAFI"]
[Fri Apr 17 12:20:49.252623 2026] [:error] [pid 9153:tid 9231] [client 62.60.131.158:47984] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1IeMHGxkTZX3c45e8QwAAAI0"]
[Fri Apr 17 12:20:50.514775 2026] [:error] [pid 9153:tid 9235] [client 62.60.131.158:47992] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1IuMHGxkTZX3c45e8SAAAAJE"]
[Fri Apr 17 12:20:52.776835 2026] [:error] [pid 34273:tid 34281] [client 62.60.131.158:48062] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1JGuQDW686mK3dgGrtAAAAYY"]
[Fri Apr 17 12:20:56.717843 2026] [:error] [pid 9151:tid 9177] [client 62.60.131.158:58444] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1KMhTVuRPkua22vQHXwAAABA"]
[Fri Apr 17 12:21:01.898142 2026] [:error] [pid 34273:tid 34286] [client 62.60.131.158:58518] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1LWuQDW686mK3dgGrywAAAYs"]
[Fri Apr 17 12:21:03.172811 2026] [:error] [pid 34273:tid 34293] [client 62.60.131.158:58522] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1L2uQDW686mK3dgGr0AAAAZI"]
[Fri Apr 17 12:21:06.315101 2026] [:error] [pid 25010:tid 25016] [client 62.60.131.158:58548] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1Mo-7kkf42RarqQ02MQAAAUM"]
[Fri Apr 17 12:21:08.471198 2026] [:error] [pid 51878:tid 51888] [client 62.60.131.158:58532] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1NEnQhUtMbw9EsgYDlQAAAQg"]
[Fri Apr 17 12:21:10.590633 2026] [:error] [pid 9152:tid 9192] [client 62.60.131.158:27056] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1NpJYca8I3TNCwIfcugAAAEI"]
[Fri Apr 17 12:21:10.593870 2026] [:error] [pid 34273:tid 34288] [client 62.60.131.158:27062] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1NmuQDW686mK3dgGr0wAAAY0"]
[Fri Apr 17 12:21:11.635879 2026] [:error] [pid 25010:tid 25028] [client 62.60.131.158:27082] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeG1N4-7kkf42RarqQ02NAAAAU8"]
[Fri Apr 17 12:21:12.852593 2026] [:error] [pid 9152:tid 9194] [client 62.60.131.158:27074] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1OJJYca8I3TNCwIfcwQAAAEQ"]
[Fri Apr 17 12:21:13.670398 2026] [:error] [pid 25010:tid 25029] [client 62.60.131.158:27102] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeG1OY-7kkf42RarqQ02NQAAAVA"]
[Fri Apr 17 12:21:16.957411 2026] [:error] [pid 25010:tid 25021] [client 62.60.131.158:11124] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeG1PI-7kkf42RarqQ02OQAAAUg"]
[Fri Apr 17 12:21:16.962321 2026] [:error] [pid 34273:tid 34297] [client 62.60.131.158:11136] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeG1PGuQDW686mK3dgGr5wAAAZY"]
[Fri Apr 17 12:21:21.232475 2026] [:error] [pid 51878:tid 51880] [client 62.60.131.158:11160] [client 62.60.131.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/..;/"] [unique_id "aeG1QUnQhUtMbw9EsgYDqAAAAQA"]
[Fri Apr 17 14:50:27.925835 2026] [:error] [pid 9263:tid 9287] [client 43.140.247.223:60264] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeHYMxP68VyHNvj1e56qfQAAANY"]
[Fri Apr 17 14:58:27.016322 2026] [:error] [pid 9263:tid 9267] [client 217.182.194.25:57174] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aeHaExP68VyHNvj1e56txwAAAMI"]
[Fri Apr 17 14:58:29.532356 2026] [:error] [pid 9153:tid 9221] [client 217.182.194.25:54266] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aeHaFeMHGxkTZX3c45fSnAAAAIM"]
[Fri Apr 17 14:58:32.084063 2026] [:error] [pid 9151:tid 9161] [client 217.182.194.25:54280] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeHaGMhTVuRPkua22vQXYQAAAAA"]
[Fri Apr 17 14:58:34.454646 2026] [:error] [pid 9263:tid 9273] [client 217.182.194.25:54288] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aeHaGhP68VyHNvj1e56tzgAAAMg"]
[Fri Apr 17 14:58:36.994306 2026] [:error] [pid 9263:tid 9284] [client 217.182.194.25:54302] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aeHaHBP68VyHNvj1e56t1gAAANM"]
[Fri Apr 17 14:58:39.536960 2026] [:error] [pid 34273:tid 34298] [client 217.182.194.25:59038] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeHaH2uQDW686mK3dgHHDwAAAZc"]
[Fri Apr 17 14:58:41.862287 2026] [:error] [pid 9263:tid 9270] [client 217.182.194.25:59050] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeHaIRP68VyHNvj1e56t4AAAAMU"]
[Fri Apr 17 14:58:44.435069 2026] [:error] [pid 9263:tid 9275] [client 217.182.194.25:59064] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aeHaJBP68VyHNvj1e56t5AAAAMo"]
[Fri Apr 17 14:58:46.853437 2026] [:error] [pid 9152:tid 9197] [client 217.182.194.25:59076] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aeHaJpJYca8I3TNCwIcEwgAAAEc"]
[Fri Apr 17 14:58:49.313810 2026] [:error] [pid 9263:tid 9266] [client 217.182.194.25:44116] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aeHaKRP68VyHNvj1e56t6gAAAME"]
[Fri Apr 17 14:58:51.879593 2026] [:error] [pid 9263:tid 9267] [client 217.182.194.25:44118] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aeHaKxP68VyHNvj1e56t8QAAAMI"]
[Fri Apr 17 14:58:54.315066 2026] [:error] [pid 61523:tid 61543] [client 217.182.194.25:44132] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aeHaLsOaH-Pgc7WEf4NOBAAAAcE"]
[Fri Apr 17 14:58:56.593695 2026] [:error] [pid 9263:tid 9273] [client 217.182.194.25:44140] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aeHaMBP68VyHNvj1e56t-AAAAMg"]
[Fri Apr 17 14:58:59.039739 2026] [:error] [pid 9152:tid 9212] [client 217.182.194.25:48872] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aeHaM5JYca8I3TNCwIcEyAAAAFY"]
[Fri Apr 17 14:59:01.486280 2026] [:error] [pid 9263:tid 9269] [client 217.182.194.25:48874] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aeHaNRP68VyHNvj1e56uAQAAAMQ"]
[Fri Apr 17 14:59:03.949544 2026] [:error] [pid 9263:tid 9281] [client 217.182.194.25:48880] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aeHaNxP68VyHNvj1e56uBAAAANA"]
[Fri Apr 17 14:59:06.519598 2026] [:error] [pid 51878:tid 51904] [client 217.182.194.25:48890] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aeHaOknQhUtMbw9EsgYgTQAAARg"]
[Fri Apr 17 14:59:08.921687 2026] [:error] [pid 25010:tid 25027] [client 217.182.194.25:33364] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aeHaPI-7kkf42RarqQ1IPAAAAU4"]
[Fri Apr 17 14:59:11.339285 2026] [:error] [pid 9151:tid 9163] [client 217.182.194.25:33372] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aeHaP8hTVuRPkua22vQXcQAAAAI"]
[Fri Apr 17 14:59:13.749396 2026] [:error] [pid 51878:tid 51883] [client 217.182.194.25:33374] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeHaQUnQhUtMbw9EsgYgUAAAAQM"]
[Fri Apr 17 14:59:16.232848 2026] [:error] [pid 9263:tid 9269] [client 217.182.194.25:33380] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aeHaRBP68VyHNvj1e56uEQAAAMQ"]
[Fri Apr 17 14:59:18.790876 2026] [:error] [pid 61523:tid 61562] [client 217.182.194.25:55812] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeHaRsOaH-Pgc7WEf4NOHAAAAdQ"]
[Fri Apr 17 14:59:21.167621 2026] [:error] [pid 61523:tid 61555] [client 217.182.194.25:55814] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aeHaScOaH-Pgc7WEf4NOIgAAAc0"]
[Fri Apr 17 14:59:23.636730 2026] [:error] [pid 61523:tid 61547] [client 217.182.194.25:55824] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "aeHaS8OaH-Pgc7WEf4NONQAAAcU"]
[Fri Apr 17 14:59:54.378781 2026] [:error] [pid 9263:tid 9289] [client 217.182.194.25:55826] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aeHaahP68VyHNvj1e56uYAAAANg"]
[Fri Apr 17 14:59:56.725316 2026] [:error] [pid 51878:tid 51894] [client 217.182.194.25:57046] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aeHabEnQhUtMbw9EsgYgegAAAQ4"]
[Fri Apr 17 14:59:59.282649 2026] [:error] [pid 61523:tid 61554] [client 217.182.194.25:36856] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aeHab8OaH-Pgc7WEf4NOjAAAAcw"]
[Fri Apr 17 15:00:01.784428 2026] [:error] [pid 9263:tid 9284] [client 217.182.194.25:36858] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aeHacRP68VyHNvj1e56uZAAAANM"]
[Fri Apr 17 15:00:04.322608 2026] [:error] [pid 9152:tid 9201] [client 217.182.194.25:36860] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aeHadJJYca8I3TNCwIcE-AAAAEs"]
[Fri Apr 17 15:00:06.696809 2026] [:error] [pid 9263:tid 9275] [client 217.182.194.25:36874] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aeHadhP68VyHNvj1e56uawAAAMo"]
[Fri Apr 17 15:00:09.248422 2026] [:error] [pid 9263:tid 9267] [client 217.182.194.25:45848] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aeHaeRP68VyHNvj1e56ucAAAAMI"]
[Fri Apr 17 15:00:11.618156 2026] [:error] [pid 9151:tid 9171] [client 217.182.194.25:45852] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aeHae8hTVuRPkua22vQXkAAAAAo"]
[Fri Apr 17 15:00:14.142042 2026] [:error] [pid 9263:tid 9286] [client 217.182.194.25:45862] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aeHafhP68VyHNvj1e56udQAAANU"]
[Fri Apr 17 15:00:16.685337 2026] [:error] [pid 9152:tid 9192] [client 217.182.194.25:45872] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aeHagJJYca8I3TNCwIcFAQAAAEI"]
[Fri Apr 17 15:00:18.907875 2026] [:error] [pid 9263:tid 9268] [client 217.182.194.25:53714] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aeHaghP68VyHNvj1e56uggAAAMM"]
[Fri Apr 17 15:00:21.305001 2026] [:error] [pid 9263:tid 9275] [client 217.182.194.25:53718] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aeHahRP68VyHNvj1e56uiQAAAMo"]
[Fri Apr 17 15:00:23.812250 2026] [:error] [pid 9153:tid 9236] [client 217.182.194.25:53720] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeHah-MHGxkTZX3c45fS8wAAAJI"]
[Fri Apr 17 15:00:26.347358 2026] [:error] [pid 61523:tid 61552] [client 217.182.194.25:53722] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeHaisOaH-Pgc7WEf4NOuwAAAco"]
[Fri Apr 17 15:00:28.880572 2026] [:error] [pid 51878:tid 51887] [client 217.182.194.25:38618] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeHajEnQhUtMbw9EsgYgkAAAAQc"]
[Fri Apr 17 15:00:31.397589 2026] [:error] [pid 9263:tid 9283] [client 217.182.194.25:38620] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeHajxP68VyHNvj1e56ulwAAANI"]
[Fri Apr 17 15:00:33.848603 2026] [:error] [pid 61523:tid 61561] [client 217.182.194.25:38634] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeHakcOaH-Pgc7WEf4NOvgAAAdM"]
[Fri Apr 17 15:00:36.148800 2026] [:error] [pid 51878:tid 51903] [client 217.182.194.25:38640] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeHalEnQhUtMbw9EsgYgmgAAARc"]
[Fri Apr 17 15:00:38.653336 2026] [:error] [pid 9263:tid 9271] [client 217.182.194.25:36206] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aeHalhP68VyHNvj1e56usgAAAMY"]
[Fri Apr 17 15:00:41.195428 2026] [:error] [pid 51878:tid 51881] [client 217.182.194.25:36218] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeHamUnQhUtMbw9EsgYgswAAAQE"]
[Fri Apr 17 15:00:43.710006 2026] [:error] [pid 9152:tid 9207] [client 217.182.194.25:36232] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aeHam5JYca8I3TNCwIcFIgAAAFE"]
[Fri Apr 17 15:00:46.212956 2026] [:error] [pid 61523:tid 61552] [client 217.182.194.25:36238] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeHansOaH-Pgc7WEf4NO1QAAAco"]
[Fri Apr 17 15:00:48.712395 2026] [:error] [pid 61523:tid 61554] [client 217.182.194.25:41030] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeHaoMOaH-Pgc7WEf4NO6QAAAcw"]
[Fri Apr 17 15:01:19.447460 2026] [:error] [pid 9263:tid 9280] [client 217.182.194.25:41044] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeHavxP68VyHNvj1e56u1wAAAM8"]
[Fri Apr 17 15:01:21.903911 2026] [:error] [pid 9152:tid 9214] [client 217.182.194.25:58716] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aeHawZJYca8I3TNCwIcFRAAAAFg"]
[Fri Apr 17 15:01:24.406663 2026] [:error] [pid 51878:tid 51895] [client 217.182.194.25:58720] [client 217.182.194.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aeHaxEnQhUtMbw9EsgYgzgAAAQ8"]
[Fri Apr 17 16:20:09.004374 2026] [:error] [pid 9151:tid 9167] [client 117.214.196.131:49202] [client 117.214.196.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.214.196.131, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeHtOchTVuRPkua22vQfawAAAAY"]
[Fri Apr 17 16:20:19.035523 2026] [:error] [pid 34273:tid 34296] [client 117.214.196.131:49504] [client 117.214.196.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.214.196.131, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeHtQ2uQDW686mK3dgHVoQAAAZU"]
[Fri Apr 17 16:20:29.597244 2026] [:error] [pid 9153:tid 9237] [client 117.214.196.131:49810] [client 117.214.196.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.214.196.131, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeHtTeMHGxkTZX3c45fefQAAAJM"]
[Fri Apr 17 16:20:40.028130 2026] [:error] [pid 9263:tid 9268] [client 117.214.196.131:50084] [client 117.214.196.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.214.196.131, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeHtWBP68VyHNvj1e57YwAAAAMM"]
[Fri Apr 17 16:20:50.527834 2026] [:error] [pid 61523:tid 61564] [client 117.214.196.131:50311] [client 117.214.196.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.214.196.131, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeHtYsOaH-Pgc7WEf4NrNgAAAdY"]
[Fri Apr 17 16:21:00.991714 2026] [:error] [pid 61523:tid 61566] [client 117.214.196.131:50531] [client 117.214.196.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.214.196.131, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeHtbMOaH-Pgc7WEf4NrQQAAAdg"]
[Fri Apr 17 16:23:59.994544 2026] [:error] [pid 51878:tid 51881] [client 115.245.68.134:51457] [client 115.245.68.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.245.68.134, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeHuH0nQhUtMbw9EsgY09QAAAQE"]
[Fri Apr 17 16:24:02.199010 2026] [proxy_fcgi:error] [pid 51878:tid 51881] [client 115.245.68.134:51457] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 17 16:24:02.648525 2026] [:error] [pid 51878:tid 51901] [client 115.245.68.134:51457] [client 115.245.68.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 115.245.68.134, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeHuIknQhUtMbw9EsgY0-QAAARU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 17 16:24:03.658451 2026] [proxy_fcgi:error] [pid 51878:tid 51901] [client 115.245.68.134:51457] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 17 17:17:01.291508 2026] [:error] [pid 34273:tid 34298] [client 51.195.41.174:39946] [client 51.195.41.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.195.41.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeH6jWuQDW686mK3dgHengAAAZc"]
[Fri Apr 17 17:20:51.344482 2026] [:error] [pid 9263:tid 9284] [client 100.29.50.249:39510] [client 100.29.50.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 100.29.50.249, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeH7cxP68VyHNvj1e570OwAAANM"]
[Fri Apr 17 17:20:52.189564 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 100.29.50.249:39510] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 17 17:20:53.956858 2026] [:error] [pid 9263:tid 9272] [client 100.29.50.249:39510] [client 100.29.50.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 100.29.50.249, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeH7dRP68VyHNvj1e570PgAAAMc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 17 17:20:54.945139 2026] [proxy_fcgi:error] [pid 9263:tid 9272] [client 100.29.50.249:39510] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 17 17:24:55.790266 2026] [:error] [pid 9263:tid 9278] [client 162.241.219.101:14650] [client 162.241.219.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.219.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeH8ZxP68VyHNvj1e571hwAAAM0"]
[Fri Apr 17 17:24:56.611281 2026] [proxy_fcgi:error] [pid 9263:tid 9278] [client 162.241.219.101:14650] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 17 17:24:59.470497 2026] [:error] [pid 9153:tid 9218] [client 162.241.219.101:54796] [client 162.241.219.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.219.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeH8a-MHGxkTZX3c45fn6gAAAIA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 17 17:25:00.484995 2026] [proxy_fcgi:error] [pid 9153:tid 9218] [client 162.241.219.101:54796] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 17 17:58:47.454495 2026] [:error] [pid 51878:tid 51897] [client 51.79.254.190:40564] [client 51.79.254.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.254.190, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeIEV0nQhUtMbw9EsgZIJgAAARE"]
[Fri Apr 17 17:58:48.298616 2026] [proxy_fcgi:error] [pid 51878:tid 51897] [client 51.79.254.190:40564] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 17 18:48:52.501944 2026] [:error] [pid 61523:tid 61566] [client 43.153.54.138:38514] [client 43.153.54.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeIQFMOaH-Pgc7WEf4OY6gAAAdg"]
[Fri Apr 17 19:14:49.134845 2026] [:error] [pid 25010:tid 25032] [client 49.37.110.230:53490] [client 49.37.110.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.110.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeIWKY-7kkf42RarqQ1lrQAAAVM"]
[Fri Apr 17 19:14:57.680361 2026] [:error] [pid 34273:tid 34275] [client 49.37.110.230:53719] [client 49.37.110.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.110.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeIWMWuQDW686mK3dgHv-gAAAYA"]
[Fri Apr 17 19:15:08.178368 2026] [:error] [pid 61523:tid 61546] [client 49.37.110.230:53970] [client 49.37.110.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.110.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeIWPMOaH-Pgc7WEf4OgngAAAcQ"]
[Fri Apr 17 19:15:18.798369 2026] [:error] [pid 61523:tid 61554] [client 49.37.110.230:54214] [client 49.37.110.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.110.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeIWRsOaH-Pgc7WEf4OgrgAAAcw"]
[Fri Apr 17 19:15:29.385803 2026] [:error] [pid 9153:tid 9234] [client 49.37.110.230:54447] [client 49.37.110.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.110.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeIWUeMHGxkTZX3c45f2CwAAAJA"]
[Fri Apr 17 19:29:10.323986 2026] [:error] [pid 34273:tid 34298] [client 104.244.79.40:39752] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeIZhmuQDW686mK3dgHzMgAAAZc"]
[Fri Apr 17 19:29:11.165709 2026] [proxy_fcgi:error] [pid 34273:tid 34298] [client 104.244.79.40:39752] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 17 19:29:13.430960 2026] [:error] [pid 9153:tid 9223] [client 104.244.79.40:40946] [client 104.244.79.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.79.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeIZieMHGxkTZX3c45f47gAAAIU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 17 19:29:14.415056 2026] [proxy_fcgi:error] [pid 9153:tid 9223] [client 104.244.79.40:40946] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 17 19:42:25.964383 2026] [:error] [pid 51878:tid 51891] [client 194.164.198.148:60790] [client 194.164.198.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.164.198.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeIcoUnQhUtMbw9EsgZqZAAAAQs"]
[Fri Apr 17 19:42:26.883927 2026] [proxy_fcgi:error] [pid 51878:tid 51891] [client 194.164.198.148:60790] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 17 19:42:27.254095 2026] [:error] [pid 51878:tid 51883] [client 194.164.198.148:60790] [client 194.164.198.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.164.198.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeIco0nQhUtMbw9EsgZqagAAAQM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 17 19:42:28.384710 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 194.164.198.148:60790] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 17 20:39:05.508542 2026] [:error] [pid 25010:tid 25027] [client 45.79.147.155:43200] [client 45.79.147.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.79.147.155, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeIp6Y-7kkf42RarqQ1zQQAAAU4"]
[Fri Apr 17 21:27:51.594292 2026] [:error] [pid 9151:tid 9164] [client 122.51.236.174:50726] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeI1V8hTVuRPkua22vRD8AAAAAM"]
[Fri Apr 17 23:33:08.325392 2026] [:error] [pid 51878:tid 51900] [client 37.157.193.125:39868] [client 37.157.193.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.157.193.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJStEnQhUtMbw9EsgbfqgAAARQ"]
[Sat Apr 18 00:19:30.966458 2026] [:error] [pid 59042:tid 59053] [client 179.157.115.71:51999] [client 179.157.115.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.157.115.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJdkp6p5oql0UklEBIl2QAAAAY"]
[Sat Apr 18 00:19:40.885587 2026] [:error] [pid 59044:tid 59111] [client 179.157.115.71:58275] [client 179.157.115.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.157.115.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJdnAFamkFyEtD_SMGoqQAAAIo"]
[Sat Apr 18 00:19:51.476809 2026] [:error] [pid 59042:tid 59060] [client 179.157.115.71:58536] [client 179.157.115.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.157.115.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJdp56p5oql0UklEBImewAAAA0"]
[Sat Apr 18 00:20:02.202491 2026] [:error] [pid 59043:tid 59081] [client 179.157.115.71:58786] [client 179.157.115.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.157.115.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJdsoRtUGE9SfUh2wwCLQAAAEc"]
[Sat Apr 18 00:20:13.785839 2026] [:error] [pid 59044:tid 59108] [client 179.157.115.71:58105] [client 179.157.115.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.157.115.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJdvQFamkFyEtD_SMGpDwAAAIc"]
[Sat Apr 18 00:30:39.626523 2026] [:error] [pid 59043:tid 59098] [client 139.180.131.18:39012] [client 139.180.131.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.180.131.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeJgL4RtUGE9SfUh2wwF0wAAAFg"]
[Sat Apr 18 00:30:40.488306 2026] [proxy_fcgi:error] [pid 59043:tid 59098] [client 139.180.131.18:39012] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 18 00:30:42.572003 2026] [:error] [pid 59043:tid 59081] [client 139.180.131.18:39012] [client 139.180.131.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.180.131.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeJgMoRtUGE9SfUh2wwF1wAAAEc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 00:30:43.589087 2026] [proxy_fcgi:error] [pid 59043:tid 59081] [client 139.180.131.18:39012] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 00:37:14.609891 2026] [:error] [pid 59043:tid 59074] [client 45.112.71.89:65367] [client 45.112.71.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.112.71.89, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJhuoRtUGE9SfUh2wwHNgAAAEA"]
[Sat Apr 18 00:37:26.436186 2026] [:error] [pid 42442:tid 42445] [client 45.112.71.89:49352] [client 45.112.71.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.112.71.89, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJhxj4PBGqL_yqPJ8kOVgAAAQE"]
[Sat Apr 18 00:37:36.877048 2026] [:error] [pid 59042:tid 59052] [client 45.112.71.89:49642] [client 45.112.71.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.112.71.89, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJh0J6p5oql0UklEBI0PQAAAAU"]
[Sat Apr 18 00:37:47.609787 2026] [:error] [pid 42442:tid 42453] [client 45.112.71.89:49936] [client 45.112.71.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.112.71.89, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJh2z4PBGqL_yqPJ8kOeQAAAQk"]
[Sat Apr 18 00:37:58.459377 2026] [:error] [pid 59042:tid 59065] [client 45.112.71.89:50237] [client 45.112.71.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.112.71.89, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJh5p6p5oql0UklEBI0gQAAABI"]
[Sat Apr 18 01:06:07.990463 2026] [:error] [pid 59136:tid 59160] [client 43.153.215.224:59774] [client 43.153.215.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeJofyaoiUyiIR3EhLW1HwAAANU"]
[Sat Apr 18 01:17:05.685869 2026] [:error] [pid 63702:tid 63765] [client 159.89.94.245:48378] [client 159.89.94.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.94.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJrEcTL05PWYsKqTEYMgAAAAVg"]
[Sat Apr 18 01:21:24.276496 2026] [:error] [pid 42442:tid 42461] [client 84.15.188.94:38660] [client 84.15.188.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.188.94, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJsFD4PBGqL_yqPJ8kqxwAAARE"]
[Sat Apr 18 01:21:33.379277 2026] [:error] [pid 63702:tid 63765] [client 84.15.188.94:47008] [client 84.15.188.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.188.94, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJsHcTL05PWYsKqTEYOtwAAAVg"]
[Sat Apr 18 01:21:43.862095 2026] [:error] [pid 59136:tid 59156] [client 84.15.188.94:59602] [client 84.15.188.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.188.94, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJsJyaoiUyiIR3EhLW6OAAAANE"]
[Sat Apr 18 01:21:54.429253 2026] [:error] [pid 59136:tid 59148] [client 84.15.188.94:44544] [client 84.15.188.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.188.94, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJsMiaoiUyiIR3EhLW6PQAAAMk"]
[Sat Apr 18 01:22:05.091535 2026] [:error] [pid 42442:tid 42456] [client 84.15.188.94:52675] [client 84.15.188.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.188.94, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeJsPT4PBGqL_yqPJ8krPAAAAQw"]
[Sat Apr 18 01:56:38.282584 2026] [:error] [pid 42442:tid 42460] [client 146.196.32.142:38237] [client 146.196.32.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.196.32.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeJ0Vj4PBGqL_yqPJ8k8FQAAARA"]
[Sat Apr 18 01:56:40.366829 2026] [proxy_fcgi:error] [pid 42442:tid 42460] [client 146.196.32.142:38237] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 18 01:56:41.149219 2026] [:error] [pid 42442:tid 42453] [client 146.196.32.142:38237] [client 146.196.32.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.196.32.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeJ0WT4PBGqL_yqPJ8k8FgAAAQk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 01:56:42.108825 2026] [proxy_fcgi:error] [pid 42442:tid 42453] [client 146.196.32.142:38237] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 02:08:13.258835 2026] [:error] [pid 42442:tid 42450] [client 16.112.38.126:52448] [client 16.112.38.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.112.38.126, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeJ3DT4PBGqL_yqPJ8lCagAAAQY"]
[Sat Apr 18 02:08:14.119424 2026] [proxy_fcgi:error] [pid 42442:tid 42450] [client 16.112.38.126:52448] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 18 02:08:14.651169 2026] [:error] [pid 42442:tid 42464] [client 16.112.38.126:52448] [client 16.112.38.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 16.112.38.126, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeJ3Dj4PBGqL_yqPJ8lCcgAAARQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 02:08:15.654825 2026] [proxy_fcgi:error] [pid 42442:tid 42464] [client 16.112.38.126:52448] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 02:51:19.777987 2026] [:error] [pid 59042:tid 59053] [client 51.79.189.83:36298] [client 51.79.189.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.189.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeKBJ56p5oql0UklEBJt9wAAAAY"]
[Sat Apr 18 02:51:53.818990 2026] [:error] [pid 42442:tid 42468] [client 123.30.184.84:59508] [client 123.30.184.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.30.184.84, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeKBST4PBGqL_yqPJ8lfRQAAARg"]
[Sat Apr 18 02:51:54.591710 2026] [proxy_fcgi:error] [pid 42442:tid 42468] [client 123.30.184.84:59508] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 18 02:51:55.354433 2026] [:error] [pid 42442:tid 42464] [client 123.30.184.84:59508] [client 123.30.184.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.30.184.84, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeKBSz4PBGqL_yqPJ8lfSQAAARQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 02:51:56.317436 2026] [proxy_fcgi:error] [pid 42442:tid 42464] [client 123.30.184.84:59508] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 03:22:25.655929 2026] [:error] [pid 7181:tid 7188] [client 65.1.210.243:50794] [client 65.1.210.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.1.210.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeKIcYEOj_oGYqvsyOL5mgAAAAI"]
[Sat Apr 18 03:42:34.247410 2026] [:error] [pid 9970:tid 9981] [client 46.62.148.244:39578] [client 46.62.148.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.62.148.244, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeKNKiYdRLRhVmaIMx1isgAAAMc"]
[Sat Apr 18 03:42:35.120726 2026] [proxy_fcgi:error] [pid 9970:tid 9981] [client 46.62.148.244:39578] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 18 03:42:36.939532 2026] [:error] [pid 9970:tid 9989] [client 46.62.148.244:39578] [client 46.62.148.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.62.148.244, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeKNLCYdRLRhVmaIMx1iwgAAAM8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 03:42:37.965076 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 46.62.148.244:39578] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 04:08:20.789311 2026] [:error] [pid 9970:tid 9982] [client 192.144.148.122:59670] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeKTNCYdRLRhVmaIMx16pwAAAMg"]
[Sat Apr 18 04:32:43.358074 2026] [:error] [pid 9865:tid 9955] [client 172.202.75.66:1335] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aeKY66zb5knECIY-C-h_5wAAAJI"]
[Sat Apr 18 04:32:45.214374 2026] [:error] [pid 9970:tid 9997] [client 172.202.75.66:58906] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aeKY7SYdRLRhVmaIMx2ODgAAANc"]
[Sat Apr 18 04:32:46.513674 2026] [:error] [pid 9970:tid 9981] [client 172.202.75.66:60925] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aeKY7iYdRLRhVmaIMx2OHQAAAMc"]
[Sat Apr 18 04:32:48.415808 2026] [:error] [pid 9863:tid 9886] [client 172.202.75.66:51973] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aeKY8DjjiypiFrTucbLzNwAAAA0"]
[Sat Apr 18 04:32:50.459672 2026] [:error] [pid 9865:tid 9947] [client 172.202.75.66:56393] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aeKY8qzb5knECIY-C-h_8gAAAIo"]
[Sat Apr 18 04:32:52.109443 2026] [:error] [pid 9865:tid 9953] [client 172.202.75.66:53254] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeKY9Kzb5knECIY-C-h_-QAAAJA"]
[Sat Apr 18 04:32:59.917402 2026] [:error] [pid 9970:tid 9979] [client 172.202.75.66:48309] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeKY-yYdRLRhVmaIMx2OYwAAAMU"]
[Sat Apr 18 04:33:17.763441 2026] [:error] [pid 9970:tid 9990] [client 172.202.75.66:56554] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aeKZDSYdRLRhVmaIMx2OewAAANA"]
[Sat Apr 18 04:34:46.605746 2026] [:error] [pid 9865:tid 9952] [client 172.202.75.66:53936] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aeKZZqzb5knECIY-C-iAawAAAI8"]
[Sat Apr 18 04:34:57.504971 2026] [:error] [pid 9864:tid 9908] [client 172.202.75.66:60492] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeKZcYCFeowknfXHM7kW5QAAAEM"]
[Sat Apr 18 04:35:02.292604 2026] [:error] [pid 9864:tid 9925] [client 172.202.75.66:54155] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeKZdoCFeowknfXHM7kW7AAAAFM"]
[Sat Apr 18 04:35:05.862580 2026] [:error] [pid 9970:tid 9990] [client 172.202.75.66:54522] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aeKZeSYdRLRhVmaIMx2PSwAAANA"]
[Sat Apr 18 04:35:08.572633 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:54470] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aeKZfCYdRLRhVmaIMx2PXwAAANU"]
[Sat Apr 18 04:35:10.950798 2026] [:error] [pid 9864:tid 9925] [client 172.202.75.66:54174] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aeKZfoCFeowknfXHM7kW_gAAAFM"]
[Sat Apr 18 04:35:12.568189 2026] [:error] [pid 9863:tid 9879] [client 172.202.75.66:1526] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/403.php"] [unique_id "aeKZgDjjiypiFrTucbLzrgAAAAY"]
[Sat Apr 18 04:35:13.432579 2026] [:error] [pid 9865:tid 9955] [client 172.202.75.66:33889] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "aeKZgazb5knECIY-C-iAugAAAJI"]
[Sat Apr 18 04:35:14.134330 2026] [:error] [pid 9863:tid 9889] [client 172.202.75.66:54167] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "aeKZgjjjiypiFrTucbLzswAAABA"]
[Sat Apr 18 04:35:15.065477 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:1525] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "aeKZgyYdRLRhVmaIMx2PawAAAMw"]
[Sat Apr 18 04:35:15.901335 2026] [:error] [pid 9970:tid 9981] [client 172.202.75.66:51182] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "aeKZgyYdRLRhVmaIMx2PcAAAAMc"]
[Sat Apr 18 04:35:16.725035 2026] [:error] [pid 9865:tid 9944] [client 172.202.75.66:51031] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "aeKZhKzb5knECIY-C-iAvwAAAIc"]
[Sat Apr 18 04:35:17.467279 2026] [:error] [pid 9864:tid 9908] [client 172.202.75.66:60535] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "aeKZhYCFeowknfXHM7kXBwAAAEM"]
[Sat Apr 18 04:35:21.278980 2026] [:error] [pid 9970:tid 9978] [client 172.202.75.66:1608] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aeKZiSYdRLRhVmaIMx2PfgAAAMQ"]
[Sat Apr 18 04:35:22.064084 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:54503] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aeKZiiYdRLRhVmaIMx2PfwAAAM0"]
[Sat Apr 18 04:35:22.736005 2026] [:error] [pid 9865:tid 9953] [client 172.202.75.66:54481] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aeKZiqzb5knECIY-C-iA0QAAAJA"]
[Sat Apr 18 04:35:23.553923 2026] [:error] [pid 9864:tid 9928] [client 172.202.75.66:60470] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "aeKZi4CFeowknfXHM7kXFQAAAFY"]
[Sat Apr 18 04:35:24.068445 2026] [:error] [pid 9865:tid 9946] [client 172.202.75.66:56792] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aeKZjKzb5knECIY-C-iA1wAAAIk"]
[Sat Apr 18 04:35:24.710826 2026] [:error] [pid 9970:tid 9983] [client 172.202.75.66:33865] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aeKZjCYdRLRhVmaIMx2PgAAAAMk"]
[Sat Apr 18 04:35:25.561154 2026] [:error] [pid 9865:tid 9944] [client 172.202.75.66:54492] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aeKZjazb5knECIY-C-iA3QAAAIc"]
[Sat Apr 18 04:35:26.080647 2026] [:error] [pid 9865:tid 9953] [client 172.202.75.66:48525] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "aeKZjqzb5knECIY-C-iA4AAAAJA"]
[Sat Apr 18 04:35:26.722635 2026] [:error] [pid 9865:tid 9949] [client 172.202.75.66:55087] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "aeKZjqzb5knECIY-C-iA5QAAAIw"]
[Sat Apr 18 04:35:27.710411 2026] [:error] [pid 9863:tid 9875] [client 172.202.75.66:56811] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "aeKZjzjjiypiFrTucbLzyAAAAAI"]
[Sat Apr 18 04:35:28.338330 2026] [:error] [pid 9863:tid 9874] [client 172.202.75.66:33898] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "aeKZkDjjiypiFrTucbLzygAAAAE"]
[Sat Apr 18 04:35:29.244229 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:65182] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "aeKZkSYdRLRhVmaIMx2PiAAAAMM"]
[Sat Apr 18 04:35:30.358044 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:33891] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeKZkiYdRLRhVmaIMx2PjgAAAMw"]
[Sat Apr 18 04:35:31.301068 2026] [:error] [pid 9863:tid 9896] [client 172.202.75.66:1663] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeKZkzjjiypiFrTucbLz0AAAABc"]
[Sat Apr 18 04:35:32.278616 2026] [:error] [pid 9863:tid 9879] [client 172.202.75.66:1630] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeKZlDjjiypiFrTucbLz0gAAAAY"]
[Sat Apr 18 04:35:33.139545 2026] [:error] [pid 9865:tid 9947] [client 172.202.75.66:33912] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeKZlazb5knECIY-C-iA7gAAAIo"]
[Sat Apr 18 04:35:34.894095 2026] [:error] [pid 9865:tid 9940] [client 172.202.75.66:57843] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aeKZlqzb5knECIY-C-iA7wAAAIM"]
[Sat Apr 18 04:35:36.446294 2026] [:error] [pid 9865:tid 9942] [client 172.202.75.66:1615] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeKZmKzb5knECIY-C-iA8QAAAIU"]
[Sat Apr 18 04:35:37.573629 2026] [:error] [pid 9970:tid 9993] [client 172.202.75.66:54827] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z.php"] [unique_id "aeKZmSYdRLRhVmaIMx2PoQAAANM"]
[Sat Apr 18 04:35:38.558804 2026] [:error] [pid 9864:tid 9908] [client 172.202.75.66:54488] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z.php"] [unique_id "aeKZmoCFeowknfXHM7kXJwAAAEM"]
[Sat Apr 18 04:35:39.185182 2026] [:error] [pid 9865:tid 9960] [client 172.202.75.66:52141] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z.php"] [unique_id "aeKZm6zb5knECIY-C-iA9QAAAJc"]
[Sat Apr 18 04:35:40.357068 2026] [:error] [pid 9864:tid 9915] [client 172.202.75.66:65170] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aeKZnICFeowknfXHM7kXKgAAAEk"]
[Sat Apr 18 04:35:41.106447 2026] [:error] [pid 9865:tid 9949] [client 172.202.75.66:52108] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aeKZnazb5knECIY-C-iA-wAAAIw"]
[Sat Apr 18 04:35:41.724863 2026] [:error] [pid 9970:tid 9994] [client 172.202.75.66:33796] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aeKZnSYdRLRhVmaIMx2PqAAAANQ"]
[Sat Apr 18 04:35:42.226509 2026] [:error] [pid 9863:tid 9896] [client 172.202.75.66:56775] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "aeKZnjjjiypiFrTucbLz4AAAABc"]
[Sat Apr 18 04:35:42.814412 2026] [:error] [pid 9970:tid 9990] [client 172.202.75.66:54845] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeKZniYdRLRhVmaIMx2PrAAAANA"]
[Sat Apr 18 04:35:43.243898 2026] [:error] [pid 9864:tid 9918] [client 172.202.75.66:52150] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeKZn4CFeowknfXHM7kXMAAAAEw"]
[Sat Apr 18 04:35:43.775508 2026] [:error] [pid 9864:tid 9914] [client 172.202.75.66:55554] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeKZn4CFeowknfXHM7kXMgAAAEg"]
[Sat Apr 18 04:35:44.357992 2026] [:error] [pid 9970:tid 9993] [client 172.202.75.66:54838] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeKZoCYdRLRhVmaIMx2PsQAAANM"]
[Sat Apr 18 04:35:45.070087 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:52144] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aeKZoSYdRLRhVmaIMx2PtAAAAMA"]
[Sat Apr 18 04:35:46.494790 2026] [:error] [pid 9970:tid 9989] [client 172.202.75.66:52110] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aeKZoiYdRLRhVmaIMx2PugAAAM8"]
[Sat Apr 18 04:35:46.976092 2026] [:error] [pid 9865:tid 9951] [client 172.202.75.66:65190] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aeKZoqzb5knECIY-C-iBBgAAAI4"]
[Sat Apr 18 04:35:48.755885 2026] [:error] [pid 9863:tid 9874] [client 172.202.75.66:55588] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock.php"] [unique_id "aeKZpDjjiypiFrTucbLz7QAAAAE"]
[Sat Apr 18 04:35:51.863758 2026] [:error] [pid 9863:tid 9886] [client 172.202.75.66:52490] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aeKZpzjjiypiFrTucbLz8QAAAA0"]
[Sat Apr 18 04:35:54.558730 2026] [:error] [pid 9864:tid 9921] [client 172.202.75.66:52143] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aeKZqoCFeowknfXHM7kXPwAAAE8"]
[Sat Apr 18 04:35:56.789295 2026] [:error] [pid 9970:tid 9975] [client 172.202.75.66:1465] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aeKZrCYdRLRhVmaIMx2P6gAAAME"]
[Sat Apr 18 04:35:57.893007 2026] [:error] [pid 9970:tid 9980] [client 172.202.75.66:57482] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "aeKZrSYdRLRhVmaIMx2P7gAAAMY"]
[Sat Apr 18 04:35:58.385715 2026] [:error] [pid 9865:tid 9961] [client 172.202.75.66:57823] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aeKZrqzb5knECIY-C-iBFgAAAJg"]
[Sat Apr 18 04:35:59.486913 2026] [:error] [pid 9970:tid 9998] [client 172.202.75.66:57830] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aeKZryYdRLRhVmaIMx2P8gAAANg"]
[Sat Apr 18 04:36:00.632507 2026] [:error] [pid 9970:tid 9985] [client 172.202.75.66:51214] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aeKZsCYdRLRhVmaIMx2P-AAAAMs"]
[Sat Apr 18 04:36:01.951328 2026] [:error] [pid 9864:tid 9923] [client 172.202.75.66:48618] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "aeKZsYCFeowknfXHM7kXSQAAAFE"]
[Sat Apr 18 04:36:02.819157 2026] [:error] [pid 9863:tid 9886] [client 172.202.75.66:48628] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aeKZsjjjiypiFrTucbL0EwAAAA0"]
[Sat Apr 18 04:36:03.611744 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:48469] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aeKZsyYdRLRhVmaIMx2P-wAAAM0"]
[Sat Apr 18 04:36:05.276106 2026] [:error] [pid 9970:tid 9990] [client 172.202.75.66:57081] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aeKZtSYdRLRhVmaIMx2P_QAAANA"]
[Sat Apr 18 04:36:06.619388 2026] [:error] [pid 9970:tid 9996] [client 172.202.75.66:59726] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aeKZtiYdRLRhVmaIMx2QAAAAANY"]
[Sat Apr 18 04:36:08.202370 2026] [:error] [pid 9863:tid 9881] [client 172.202.75.66:58610] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeKZuDjjiypiFrTucbL0HwAAAAg"]
[Sat Apr 18 04:36:09.158480 2026] [:error] [pid 9970:tid 9991] [client 172.202.75.66:51941] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aeKZuSYdRLRhVmaIMx2QBwAAANE"]
[Sat Apr 18 04:36:09.882493 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:59724] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aeKZuSYdRLRhVmaIMx2QDAAAAMw"]
[Sat Apr 18 04:36:10.834027 2026] [:error] [pid 9970:tid 9998] [client 172.202.75.66:54538] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "aeKZuiYdRLRhVmaIMx2QEQAAANg"]
[Sat Apr 18 04:36:12.352861 2026] [:error] [pid 9863:tid 9883] [client 172.202.75.66:58560] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "aeKZvDjjiypiFrTucbL0LgAAAAo"]
[Sat Apr 18 04:36:13.511662 2026] [:error] [pid 9970:tid 9975] [client 172.202.75.66:1865] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "aeKZvSYdRLRhVmaIMx2QGQAAAME"]
[Sat Apr 18 04:36:14.739895 2026] [:error] [pid 9970:tid 9998] [client 172.202.75.66:54565] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "aeKZviYdRLRhVmaIMx2QHgAAANg"]
[Sat Apr 18 04:36:17.293631 2026] [:error] [pid 9970:tid 9991] [client 172.202.75.66:52710] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws49.php"] [unique_id "aeKZwSYdRLRhVmaIMx2QJQAAANE"]
[Sat Apr 18 04:36:19.312617 2026] [:error] [pid 9970:tid 9980] [client 172.202.75.66:56725] [client 172.202.75.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.202.75.66, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeKZwyYdRLRhVmaIMx2QLQAAAMY"]
[Sat Apr 18 04:36:23.833853 2026] [:error] [pid 9970:tid 9981] [client 172.202.75.66:56725] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aeKZxyYdRLRhVmaIMx2QSwAAAMc"]
[Sat Apr 18 04:36:27.301808 2026] [:error] [pid 9970:tid 9981] [client 172.202.75.66:59359] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aeKZyyYdRLRhVmaIMx2QWAAAAMc"]
[Sat Apr 18 04:36:30.851558 2026] [:error] [pid 9863:tid 9896] [client 172.202.75.66:1897] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aeKZzjjjiypiFrTucbL0QwAAABc"]
[Sat Apr 18 04:36:33.733285 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:60157] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "aeKZ0SYdRLRhVmaIMx2QaAAAAMI"]
[Sat Apr 18 04:36:36.353453 2026] [:error] [pid 9864:tid 9920] [client 172.202.75.66:53214] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeKZ1ICFeowknfXHM7kXYwAAAE4"]
[Sat Apr 18 04:36:46.083410 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:59325] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeKZ3iYdRLRhVmaIMx2QhQAAAMI"]
[Sat Apr 18 04:36:47.051268 2026] [:error] [pid 9865:tid 9937] [client 172.202.75.66:59269] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeKZ36zb5knECIY-C-iBSQAAAIA"]
[Sat Apr 18 04:36:47.873627 2026] [:error] [pid 9970:tid 9980] [client 172.202.75.66:53223] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeKZ3yYdRLRhVmaIMx2QiAAAAMY"]
[Sat Apr 18 04:36:48.492377 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:60116] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aeKZ4CYdRLRhVmaIMx2QjQAAAMA"]
[Sat Apr 18 04:36:49.723925 2026] [:error] [pid 9865:tid 9957] [client 172.202.75.66:1796] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aeKZ4azb5knECIY-C-iBTAAAAJQ"]
[Sat Apr 18 04:36:52.755483 2026] [:error] [pid 9970:tid 9980] [client 172.202.75.66:65120] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aeKZ5CYdRLRhVmaIMx2QmwAAAMY"]
[Sat Apr 18 04:36:54.832971 2026] [:error] [pid 9865:tid 9941] [client 172.202.75.66:59387] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/index.php"] [unique_id "aeKZ5qzb5knECIY-C-iBWAAAAIQ"]
[Sat Apr 18 04:36:58.987661 2026] [:error] [pid 9970:tid 9980] [client 172.202.75.66:51663] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aeKZ6iYdRLRhVmaIMx2QpwAAAMY"]
[Sat Apr 18 04:37:08.206976 2026] [:error] [pid 9865:tid 9946] [client 172.202.75.66:65112] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aeKZ9Kzb5knECIY-C-iBcQAAAIk"]
[Sat Apr 18 04:37:14.209939 2026] [:error] [pid 9864:tid 9921] [client 172.202.75.66:59295] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aeKZ-oCFeowknfXHM7kXgwAAAE8"]
[Sat Apr 18 04:37:17.127841 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:1294] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aeKZ_SYdRLRhVmaIMx2Q3AAAAMI"]
[Sat Apr 18 04:37:19.135816 2026] [:error] [pid 9865:tid 9940] [client 172.202.75.66:52183] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aeKZ_6zb5knECIY-C-iBhQAAAIM"]
[Sat Apr 18 04:37:21.724714 2026] [:error] [pid 9864:tid 9923] [client 172.202.75.66:52736] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/num.php"] [unique_id "aeKaAYCFeowknfXHM7kXjQAAAFE"]
[Sat Apr 18 04:37:27.715975 2026] [:error] [pid 9970:tid 9982] [client 172.202.75.66:58210] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/archive.php"] [unique_id "aeKaByYdRLRhVmaIMx2Q7wAAAMg"]
[Sat Apr 18 04:37:29.653170 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:56560] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/archive.php"] [unique_id "aeKaCSYdRLRhVmaIMx2Q9gAAAMA"]
[Sat Apr 18 04:37:30.299572 2026] [:error] [pid 9970:tid 9990] [client 172.202.75.66:50958] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/archive.php"] [unique_id "aeKaCiYdRLRhVmaIMx2Q-gAAANA"]
[Sat Apr 18 04:37:31.902017 2026] [:error] [pid 9970:tid 9983] [client 172.202.75.66:57337] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/archive.php"] [unique_id "aeKaCyYdRLRhVmaIMx2RAAAAAMk"]
[Sat Apr 18 04:37:33.644250 2026] [:error] [pid 9970:tid 9997] [client 172.202.75.66:52993] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aeKaDSYdRLRhVmaIMx2RCgAAANc"]
[Sat Apr 18 04:37:34.874133 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:52835] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aeKaDiYdRLRhVmaIMx2RDgAAAM0"]
[Sat Apr 18 04:37:37.287188 2026] [:error] [pid 9970:tid 9988] [client 172.202.75.66:58915] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aeKaESYdRLRhVmaIMx2RFgAAAM4"]
[Sat Apr 18 04:37:38.524853 2026] [:error] [pid 9970:tid 9991] [client 172.202.75.66:58936] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aeKaEiYdRLRhVmaIMx2RFwAAANE"]
[Sat Apr 18 04:37:39.516403 2026] [:error] [pid 9865:tid 9961] [client 172.202.75.66:58137] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aeKaE6zb5knECIY-C-iBqwAAAJg"]
[Sat Apr 18 04:37:40.475194 2026] [:error] [pid 9970:tid 9989] [client 172.202.75.66:52864] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aeKaFCYdRLRhVmaIMx2RGgAAAM8"]
[Sat Apr 18 04:37:41.735445 2026] [:error] [pid 9865:tid 9957] [client 172.202.75.66:53017] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aeKaFazb5knECIY-C-iBsAAAAJQ"]
[Sat Apr 18 04:37:42.792665 2026] [:error] [pid 9865:tid 9960] [client 172.202.75.66:57318] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aeKaFqzb5knECIY-C-iBsQAAAJc"]
[Sat Apr 18 04:37:43.708756 2026] [:error] [pid 9970:tid 9992] [client 172.202.75.66:57342] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "aeKaFyYdRLRhVmaIMx2RIQAAANI"]
[Sat Apr 18 04:37:44.366366 2026] [:error] [pid 9865:tid 9948] [client 172.202.75.66:54114] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "aeKaGKzb5knECIY-C-iBtAAAAIs"]
[Sat Apr 18 04:37:45.056516 2026] [:error] [pid 9863:tid 9882] [client 172.202.75.66:57291] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "aeKaGTjjiypiFrTucbL0fwAAAAk"]
[Sat Apr 18 04:37:45.779846 2026] [:error] [pid 9865:tid 9937] [client 172.202.75.66:50985] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "aeKaGazb5knECIY-C-iBtwAAAIA"]
[Sat Apr 18 04:37:47.274762 2026] [:error] [pid 9863:tid 9891] [client 172.202.75.66:60891] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aeKaGzjjiypiFrTucbL0gwAAABI"]
[Sat Apr 18 04:37:48.504592 2026] [:error] [pid 9863:tid 9881] [client 172.202.75.66:57334] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aeKaHDjjiypiFrTucbL0iQAAAAg"]
[Sat Apr 18 04:37:50.153601 2026] [:error] [pid 9863:tid 9886] [client 172.202.75.66:54082] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aeKaHjjjiypiFrTucbL0jgAAAA0"]
[Sat Apr 18 04:37:51.641782 2026] [:error] [pid 9970:tid 9985] [client 172.202.75.66:60873] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aeKaHyYdRLRhVmaIMx2RMgAAAMs"]
[Sat Apr 18 04:37:52.349783 2026] [:error] [pid 9970:tid 9989] [client 172.202.75.66:50972] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aeKaICYdRLRhVmaIMx2ROQAAAM8"]
[Sat Apr 18 04:37:53.457769 2026] [:error] [pid 9865:tid 9953] [client 172.202.75.66:51587] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aeKaIazb5knECIY-C-iBwQAAAJA"]
[Sat Apr 18 04:37:54.220657 2026] [:error] [pid 9863:tid 9892] [client 172.202.75.66:53170] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aeKaIjjjiypiFrTucbL0kgAAABM"]
[Sat Apr 18 04:37:55.114402 2026] [:error] [pid 9863:tid 9873] [client 172.202.75.66:60922] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog-header.php"] [unique_id "aeKaIzjjiypiFrTucbL0kwAAAAA"]
[Sat Apr 18 04:37:55.859620 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:58932] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKaIyYdRLRhVmaIMx2RQAAAAMI"]
[Sat Apr 18 04:37:57.024262 2026] [:error] [pid 9970:tid 9994] [client 172.202.75.66:52856] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKaJSYdRLRhVmaIMx2RRAAAANQ"]
[Sat Apr 18 04:37:58.255137 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:60923] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKaJiYdRLRhVmaIMx2RSQAAAMA"]
[Sat Apr 18 04:37:59.124216 2026] [:error] [pid 9970:tid 9990] [client 172.202.75.66:53273] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKaJyYdRLRhVmaIMx2RTAAAANA"]
[Sat Apr 18 04:38:00.496440 2026] [:error] [pid 9970:tid 9979] [client 172.202.75.66:64171] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-http-client.php"] [unique_id "aeKaKCYdRLRhVmaIMx2RUwAAAMU"]
[Sat Apr 18 04:38:01.409583 2026] [:error] [pid 9865:tid 9954] [client 172.202.75.66:53183] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/configuration.php"] [unique_id "aeKaKazb5knECIY-C-iB2AAAAJE"]
[Sat Apr 18 04:38:02.546470 2026] [:error] [pid 9865:tid 9952] [client 172.202.75.66:54083] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aeKaKqzb5knECIY-C-iB3gAAAI8"]
[Sat Apr 18 04:38:04.064782 2026] [:error] [pid 9863:tid 9894] [client 172.202.75.66:52788] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aeKaLDjjiypiFrTucbL0nQAAABU"]
[Sat Apr 18 04:38:04.980413 2026] [:error] [pid 9970:tid 9981] [client 172.202.75.66:51968] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aeKaLCYdRLRhVmaIMx2RZAAAAMc"]
[Sat Apr 18 04:38:05.606536 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:54120] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aeKaLSYdRLRhVmaIMx2RaAAAAMw"]
[Sat Apr 18 04:38:06.270399 2026] [:error] [pid 9970:tid 9994] [client 172.202.75.66:63398] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeKaLiYdRLRhVmaIMx2RagAAANQ"]
[Sat Apr 18 04:38:06.976508 2026] [:error] [pid 9970:tid 9996] [client 172.202.75.66:51979] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeKaLiYdRLRhVmaIMx2RawAAANY"]
[Sat Apr 18 04:38:08.551458 2026] [:error] [pid 9970:tid 9988] [client 172.202.75.66:64148] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeKaMCYdRLRhVmaIMx2RcQAAAM4"]
[Sat Apr 18 04:38:09.597792 2026] [:error] [pid 9865:tid 9949] [client 172.202.75.66:63418] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeKaMazb5knECIY-C-iB9QAAAIw"]
[Sat Apr 18 04:38:10.502149 2026] [:error] [pid 9864:tid 9920] [client 172.202.75.66:58917] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aeKaMoCFeowknfXHM7kXqAAAAE4"]
[Sat Apr 18 04:38:11.418367 2026] [:error] [pid 9970:tid 9996] [client 172.202.75.66:57749] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aeKaMyYdRLRhVmaIMx2RewAAANY"]
[Sat Apr 18 04:38:12.129916 2026] [:error] [pid 9865:tid 9941] [client 172.202.75.66:53291] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aeKaNKzb5knECIY-C-iB9gAAAIQ"]
[Sat Apr 18 04:38:12.891183 2026] [:error] [pid 9865:tid 9945] [client 172.202.75.66:63403] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byp.php"] [unique_id "aeKaNKzb5knECIY-C-iB-AAAAIg"]
[Sat Apr 18 04:38:13.884901 2026] [:error] [pid 9863:tid 9884] [client 172.202.75.66:52000] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aeKaNTjjiypiFrTucbL0pQAAAAs"]
[Sat Apr 18 04:38:15.014164 2026] [:error] [pid 9864:tid 9929] [client 172.202.75.66:57747] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aeKaN4CFeowknfXHM7kXvgAAAFc"]
[Sat Apr 18 04:38:16.961499 2026] [:error] [pid 9863:tid 9894] [client 172.202.75.66:50978] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aeKaODjjiypiFrTucbL0qAAAABU"]
[Sat Apr 18 04:38:18.012379 2026] [:error] [pid 9865:tid 9950] [client 172.202.75.66:57788] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "aeKaOqzb5knECIY-C-iCAgAAAI0"]
[Sat Apr 18 04:38:19.490506 2026] [:error] [pid 9864:tid 9923] [client 172.202.75.66:48204] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aeKaO4CFeowknfXHM7kXzAAAAFE"]
[Sat Apr 18 04:38:20.259868 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:60883] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aeKaPCYdRLRhVmaIMx2RhQAAANU"]
[Sat Apr 18 04:38:20.860105 2026] [:error] [pid 9865:tid 9954] [client 172.202.75.66:53256] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aeKaPKzb5knECIY-C-iCBgAAAJE"]
[Sat Apr 18 04:38:21.629336 2026] [:error] [pid 9863:tid 9890] [client 172.202.75.66:60911] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aeKaPTjjiypiFrTucbL0qQAAABE"]
[Sat Apr 18 04:38:22.265403 2026] [:error] [pid 9864:tid 9928] [client 172.202.75.66:53810] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aeKaPoCFeowknfXHM7kX1AAAAFY"]
[Sat Apr 18 04:38:23.228115 2026] [:error] [pid 9863:tid 9897] [client 172.202.75.66:51995] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aeKaPzjjiypiFrTucbL0rAAAABg"]
[Sat Apr 18 04:38:24.096011 2026] [:error] [pid 9864:tid 9908] [client 172.202.75.66:55621] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aeKaQICFeowknfXHM7kX2QAAAEM"]
[Sat Apr 18 04:38:24.688479 2026] [:error] [pid 9863:tid 9885] [client 172.202.75.66:63405] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aeKaQDjjiypiFrTucbL0sQAAAAw"]
[Sat Apr 18 04:38:25.177395 2026] [:error] [pid 9863:tid 9891] [client 172.202.75.66:2019] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/option.php"] [unique_id "aeKaQTjjiypiFrTucbL0swAAABI"]
[Sat Apr 18 04:38:32.902830 2026] [:error] [pid 9863:tid 9876] [client 172.202.75.66:63378] [client 172.202.75.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeKaSDjjiypiFrTucbL0xgAAAAM"]
[Sat Apr 18 04:38:40.122460 2026] [:error] [pid 9863:tid 9885] [client 172.202.75.66:53987] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "aeKaUDjjiypiFrTucbL01wAAAAw"]
[Sat Apr 18 04:38:41.390098 2026] [:error] [pid 9864:tid 9916] [client 172.202.75.66:52053] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "aeKaUYCFeowknfXHM7kX7wAAAEo"]
[Sat Apr 18 04:38:42.015015 2026] [:error] [pid 9865:tid 9942] [client 172.202.75.66:1051] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "aeKaUqzb5knECIY-C-iCEwAAAIU"]
[Sat Apr 18 04:38:42.522555 2026] [:error] [pid 9865:tid 9958] [client 172.202.75.66:57001] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dragonshell.php"] [unique_id "aeKaUqzb5knECIY-C-iCFAAAAJU"]
[Sat Apr 18 04:38:43.072201 2026] [:error] [pid 9865:tid 9953] [client 172.202.75.66:1106] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeKaU6zb5knECIY-C-iCFwAAAJA"]
[Sat Apr 18 04:38:43.539429 2026] [:error] [pid 9863:tid 9878] [client 172.202.75.66:53317] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeKaUzjjiypiFrTucbL04AAAAAU"]
[Sat Apr 18 04:38:44.239058 2026] [:error] [pid 9863:tid 9884] [client 172.202.75.66:52033] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeKaVDjjiypiFrTucbL04QAAAAs"]
[Sat Apr 18 04:38:45.019030 2026] [:error] [pid 9863:tid 9889] [client 172.202.75.66:1043] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeKaVTjjiypiFrTucbL04gAAABA"]
[Sat Apr 18 04:38:45.462859 2026] [:error] [pid 9970:tid 9992] [client 172.202.75.66:51339] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aeKaVSYdRLRhVmaIMx2RngAAANI"]
[Sat Apr 18 04:38:46.094623 2026] [:error] [pid 9864:tid 9908] [client 172.202.75.66:53342] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aeKaVoCFeowknfXHM7kX8gAAAEM"]
[Sat Apr 18 04:38:46.830063 2026] [:error] [pid 9863:tid 9886] [client 172.202.75.66:58505] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aeKaVjjjiypiFrTucbL05AAAAA0"]
[Sat Apr 18 04:38:47.331010 2026] [:error] [pid 9865:tid 9948] [client 172.202.75.66:56985] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gg.php"] [unique_id "aeKaV6zb5knECIY-C-iCHwAAAIs"]
[Sat Apr 18 04:38:49.703711 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:53375] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aeKaWSYdRLRhVmaIMx2RpQAAANU"]
[Sat Apr 18 04:38:52.695186 2026] [:error] [pid 9970:tid 9980] [client 172.202.75.66:53833] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aeKaXCYdRLRhVmaIMx2RsAAAAMY"]
[Sat Apr 18 04:38:57.596051 2026] [:error] [pid 9865:tid 9954] [client 172.202.75.66:54881] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aeKaYazb5knECIY-C-iCMAAAAJE"]
[Sat Apr 18 04:39:04.665171 2026] [:error] [pid 9865:tid 9958] [client 172.202.75.66:1748] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sql.php"] [unique_id "aeKaaKzb5knECIY-C-iCOwAAAJU"]
[Sat Apr 18 04:39:09.544629 2026] [:error] [pid 9865:tid 9938] [client 172.202.75.66:60470] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sql.php"] [unique_id "aeKabazb5knECIY-C-iCRAAAAIE"]
[Sat Apr 18 04:39:14.869680 2026] [:error] [pid 9864:tid 9928] [client 172.202.75.66:53109] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sql.php"] [unique_id "aeKacoCFeowknfXHM7kYXgAAAFY"]
[Sat Apr 18 04:40:00.078996 2026] [autoindex:error] [pid 9970:tid 9985] [client 172.202.75.66:50826] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 18 04:40:12.310221 2026] [:error] [pid 9970:tid 9996] [client 172.202.75.66:50826] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aeKarCYdRLRhVmaIMx2SkQAAANY"]
[Sat Apr 18 04:40:14.052873 2026] [:error] [pid 9863:tid 9896] [client 172.202.75.66:53938] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aeKarjjjiypiFrTucbL1zgAAABc"]
[Sat Apr 18 04:40:16.483857 2026] [:error] [pid 9864:tid 9918] [client 172.202.75.66:48538] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aeKasICFeowknfXHM7kYxwAAAEw"]
[Sat Apr 18 04:40:19.324775 2026] [:error] [pid 9865:tid 9951] [client 172.202.75.66:48556] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "aeKas6zb5knECIY-C-iCmAAAAI4"]
[Sat Apr 18 04:40:20.421580 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:51203] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeKatCYdRLRhVmaIMx2SowAAAMI"]
[Sat Apr 18 04:40:22.713833 2026] [:error] [pid 9970:tid 9991] [client 172.202.75.66:56809] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeKatiYdRLRhVmaIMx2SsQAAANE"]
[Sat Apr 18 04:40:23.905685 2026] [:error] [pid 9863:tid 9875] [client 172.202.75.66:65199] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeKatzjjiypiFrTucbL11AAAAAI"]
[Sat Apr 18 04:40:25.647169 2026] [:error] [pid 9970:tid 9996] [client 172.202.75.66:65164] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeKauSYdRLRhVmaIMx2SvAAAANY"]
[Sat Apr 18 04:40:27.229285 2026] [:error] [pid 9970:tid 9990] [client 172.202.75.66:54303] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeKauyYdRLRhVmaIMx2SxQAAANA"]
[Sat Apr 18 04:40:28.840812 2026] [:error] [pid 9970:tid 9993] [client 172.202.75.66:55599] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeKavCYdRLRhVmaIMx2SxgAAANM"]
[Sat Apr 18 04:40:29.482838 2026] [:error] [pid 9863:tid 9891] [client 172.202.75.66:48620] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeKavTjjiypiFrTucbL11QAAABI"]
[Sat Apr 18 04:40:31.409945 2026] [:error] [pid 9863:tid 9895] [client 172.202.75.66:57534] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeKavzjjiypiFrTucbL13AAAABY"]
[Sat Apr 18 04:40:33.003906 2026] [:error] [pid 9863:tid 9884] [client 172.202.75.66:65191] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeKawTjjiypiFrTucbL14gAAAAs"]
[Sat Apr 18 04:40:35.258312 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:48579] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeKawyYdRLRhVmaIMx2S3AAAAMA"]
[Sat Apr 18 04:40:40.112977 2026] [:error] [pid 9865:tid 9951] [client 172.202.75.66:52113] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeKayKzb5knECIY-C-iCwAAAAI4"]
[Sat Apr 18 04:40:43.126131 2026] [:error] [pid 9863:tid 9886] [client 172.202.75.66:54609] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeKayzjjiypiFrTucbL15wAAAA0"]
[Sat Apr 18 04:40:45.998101 2026] [:error] [pid 9863:tid 9881] [client 172.202.75.66:60479] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeKazTjjiypiFrTucbL18wAAAAg"]
[Sat Apr 18 04:40:50.017494 2026] [:error] [pid 9970:tid 9998] [client 172.202.75.66:1430] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeKa0iYdRLRhVmaIMx2TCAAAANg"]
[Sat Apr 18 04:40:52.989737 2026] [:error] [pid 9865:tid 9958] [client 172.202.75.66:54604] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeKa1Kzb5knECIY-C-iC4AAAAJU"]
[Sat Apr 18 04:40:57.625284 2026] [:error] [pid 9865:tid 9960] [client 172.202.75.66:50910] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeKa2azb5knECIY-C-iC6wAAAJc"]
[Sat Apr 18 04:41:00.788501 2026] [:error] [pid 9865:tid 9953] [client 172.202.75.66:53667] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php8.php"] [unique_id "aeKa3Kzb5knECIY-C-iC8gAAAJA"]
[Sat Apr 18 04:41:05.632964 2026] [:error] [pid 9865:tid 9955] [client 172.202.75.66:1463] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php8.php"] [unique_id "aeKa4azb5knECIY-C-iC-AAAAJI"]
[Sat Apr 18 04:41:09.175508 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:48159] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php8.php"] [unique_id "aeKa5SYdRLRhVmaIMx2TSgAAANU"]
[Sat Apr 18 04:41:25.635592 2026] [:error] [pid 9865:tid 9940] [client 172.202.75.66:56743] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aeKa9azb5knECIY-C-iDHgAAAIM"]
[Sat Apr 18 04:41:27.609386 2026] [:error] [pid 9970:tid 9984] [client 172.202.75.66:52524] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aeKa9yYdRLRhVmaIMx2TcgAAAMo"]
[Sat Apr 18 04:41:30.518887 2026] [:error] [pid 9865:tid 9942] [client 172.202.75.66:33885] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aeKa-qzb5knECIY-C-iDJgAAAIU"]
[Sat Apr 18 04:41:32.170204 2026] [:error] [pid 9970:tid 9995] [client 172.202.75.66:1634] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aeKa_CYdRLRhVmaIMx2TfAAAANU"]
[Sat Apr 18 04:41:34.012841 2026] [:error] [pid 9863:tid 9894] [client 172.202.75.66:53693] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeKa_jjjiypiFrTucbL2NwAAABU"]
[Sat Apr 18 04:41:34.740718 2026] [:error] [pid 9863:tid 9892] [client 172.202.75.66:52674] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeKa_jjjiypiFrTucbL2OwAAABM"]
[Sat Apr 18 04:41:36.200643 2026] [:error] [pid 9970:tid 9985] [client 172.202.75.66:1206] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeKbACYdRLRhVmaIMx2TfQAAAMs"]
[Sat Apr 18 04:41:37.555754 2026] [:error] [pid 9865:tid 9938] [client 172.202.75.66:52334] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeKbAazb5knECIY-C-iDNgAAAIE"]
[Sat Apr 18 04:41:39.197999 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:52294] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws38.php"] [unique_id "aeKbAyYdRLRhVmaIMx2ThgAAAM0"]
[Sat Apr 18 04:41:40.078157 2026] [:error] [pid 9970:tid 9983] [client 172.202.75.66:52523] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws38.php"] [unique_id "aeKbBCYdRLRhVmaIMx2TiQAAAMk"]
[Sat Apr 18 04:41:40.959869 2026] [:error] [pid 9970:tid 9984] [client 172.202.75.66:60144] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws38.php"] [unique_id "aeKbBCYdRLRhVmaIMx2TiwAAAMo"]
[Sat Apr 18 04:41:41.970255 2026] [:error] [pid 9970:tid 9985] [client 172.202.75.66:33895] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws38.php"] [unique_id "aeKbBSYdRLRhVmaIMx2TjwAAAMs"]
[Sat Apr 18 04:41:42.430103 2026] [:error] [pid 9970:tid 9994] [client 172.202.75.66:52683] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "aeKbBiYdRLRhVmaIMx2TkQAAANQ"]
[Sat Apr 18 04:41:42.903340 2026] [:error] [pid 9863:tid 9885] [client 172.202.75.66:52686] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "aeKbBjjjiypiFrTucbL2QAAAAAw"]
[Sat Apr 18 04:41:43.458990 2026] [:error] [pid 9863:tid 9878] [client 172.202.75.66:48152] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "aeKbBzjjiypiFrTucbL2QwAAAAU"]
[Sat Apr 18 04:41:44.141600 2026] [:error] [pid 9865:tid 9938] [client 172.202.75.66:52514] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "aeKbCKzb5knECIY-C-iDPgAAAIE"]
[Sat Apr 18 04:41:44.791898 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:65138] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classsmtps.php"] [unique_id "aeKbCCYdRLRhVmaIMx2TlAAAAM0"]
[Sat Apr 18 04:41:45.283340 2026] [:error] [pid 9970:tid 9978] [client 172.202.75.66:1663] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classsmtps.php"] [unique_id "aeKbCSYdRLRhVmaIMx2TlwAAAMQ"]
[Sat Apr 18 04:41:45.858156 2026] [:error] [pid 9970:tid 9997] [client 172.202.75.66:1639] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classsmtps.php"] [unique_id "aeKbCSYdRLRhVmaIMx2TnQAAANc"]
[Sat Apr 18 04:41:46.357024 2026] [:error] [pid 9970:tid 9989] [client 172.202.75.66:65132] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classsmtps.php"] [unique_id "aeKbCiYdRLRhVmaIMx2TnwAAAM8"]
[Sat Apr 18 04:41:46.963564 2026] [:error] [pid 9863:tid 9880] [client 172.202.75.66:1911] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aeKbCjjjiypiFrTucbL2SAAAAAc"]
[Sat Apr 18 04:41:47.450933 2026] [:error] [pid 9863:tid 9889] [client 172.202.75.66:59733] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aeKbCzjjiypiFrTucbL2SQAAABA"]
[Sat Apr 18 04:41:48.437079 2026] [:error] [pid 9865:tid 9950] [client 172.202.75.66:65105] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aeKbDKzb5knECIY-C-iDRgAAAI0"]
[Sat Apr 18 04:41:49.119144 2026] [:error] [pid 9970:tid 9997] [client 172.202.75.66:65119] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aeKbDSYdRLRhVmaIMx2TpwAAANc"]
[Sat Apr 18 04:41:49.785484 2026] [:error] [pid 9864:tid 9915] [client 172.202.75.66:59754] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "aeKbDYCFeowknfXHM7kZUQAAAEk"]
[Sat Apr 18 04:41:50.723039 2026] [:error] [pid 9970:tid 9982] [client 172.202.75.66:60131] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "aeKbDiYdRLRhVmaIMx2TqwAAAMg"]
[Sat Apr 18 04:41:51.928726 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:1623] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "aeKbDyYdRLRhVmaIMx2TsQAAAMA"]
[Sat Apr 18 04:41:53.075341 2026] [:error] [pid 9863:tid 9877] [client 172.202.75.66:60116] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX1.php"] [unique_id "aeKbETjjiypiFrTucbL2TAAAAAQ"]
[Sat Apr 18 04:41:54.206134 2026] [:error] [pid 9865:tid 9944] [client 172.202.75.66:53710] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aeKbEqzb5knECIY-C-iDWgAAAIc"]
[Sat Apr 18 04:41:55.273811 2026] [:error] [pid 9865:tid 9959] [client 172.202.75.66:53718] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aeKbE6zb5knECIY-C-iDXgAAAJY"]
[Sat Apr 18 04:41:56.319161 2026] [:error] [pid 9970:tid 9992] [client 172.202.75.66:59719] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aeKbFCYdRLRhVmaIMx2TuQAAANI"]
[Sat Apr 18 04:41:57.035879 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:1279] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aeKbFSYdRLRhVmaIMx2TvQAAAMM"]
[Sat Apr 18 04:41:57.875565 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:56455] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aeKbFSYdRLRhVmaIMx2TvwAAAMw"]
[Sat Apr 18 04:41:58.545910 2026] [:error] [pid 9970:tid 9978] [client 172.202.75.66:56504] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aeKbFiYdRLRhVmaIMx2TwQAAAMQ"]
[Sat Apr 18 04:41:59.808692 2026] [:error] [pid 9970:tid 9979] [client 172.202.75.66:53194] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aeKbFyYdRLRhVmaIMx2TxAAAAMU"]
[Sat Apr 18 04:42:00.785193 2026] [:error] [pid 9970:tid 9984] [client 172.202.75.66:53407] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aeKbGCYdRLRhVmaIMx2TyQAAAMo"]
[Sat Apr 18 04:42:01.603463 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:52182] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeKbGSYdRLRhVmaIMx2TzAAAAMM"]
[Sat Apr 18 04:42:02.782443 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:1830] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeKbGiYdRLRhVmaIMx2T0gAAAMw"]
[Sat Apr 18 04:42:04.025383 2026] [:error] [pid 9970:tid 9981] [client 172.202.75.66:59729] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeKbHCYdRLRhVmaIMx2T2AAAAMc"]
[Sat Apr 18 04:42:05.030009 2026] [:error] [pid 9864:tid 9907] [client 172.202.75.66:53244] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeKbHYCFeowknfXHM7kZgAAAAEI"]
[Sat Apr 18 04:42:05.620712 2026] [:error] [pid 9970:tid 9993] [client 172.202.75.66:65097] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aeKbHSYdRLRhVmaIMx2T3QAAANM"]
[Sat Apr 18 04:42:06.635726 2026] [:error] [pid 9970:tid 9979] [client 172.202.75.66:1638] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aeKbHiYdRLRhVmaIMx2T4QAAAMU"]
[Sat Apr 18 04:42:07.516097 2026] [:error] [pid 9863:tid 9875] [client 172.202.75.66:1219] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aeKbHzjjiypiFrTucbL2UwAAAAI"]
[Sat Apr 18 04:42:09.136282 2026] [:error] [pid 9864:tid 9910] [client 172.202.75.66:60114] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "aeKbIYCFeowknfXHM7kZkAAAAEU"]
[Sat Apr 18 04:42:10.980481 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:51653] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php.php"] [unique_id "aeKbIiYdRLRhVmaIMx2T5wAAAMM"]
[Sat Apr 18 04:42:12.185968 2026] [:error] [pid 9970:tid 9990] [client 172.202.75.66:56465] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php.php"] [unique_id "aeKbJCYdRLRhVmaIMx2T7AAAANA"]
[Sat Apr 18 04:42:13.319149 2026] [:error] [pid 9865:tid 9955] [client 172.202.75.66:51695] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php.php"] [unique_id "aeKbJazb5knECIY-C-iDaQAAAJI"]
[Sat Apr 18 04:42:14.680177 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:53410] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php.php"] [unique_id "aeKbJiYdRLRhVmaIMx2T9QAAAMA"]
[Sat Apr 18 04:42:15.469922 2026] [:error] [pid 9970:tid 9987] [client 172.202.75.66:59287] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "aeKbJyYdRLRhVmaIMx2T-gAAAM0"]
[Sat Apr 18 04:42:16.709283 2026] [:error] [pid 9864:tid 9918] [client 172.202.75.66:53191] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "aeKbKICFeowknfXHM7kZsAAAAEw"]
[Sat Apr 18 04:42:17.755456 2026] [:error] [pid 9864:tid 9910] [client 172.202.75.66:65114] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "aeKbKYCFeowknfXHM7kZuQAAAEU"]
[Sat Apr 18 04:42:18.245147 2026] [:error] [pid 9970:tid 9998] [client 172.202.75.66:65091] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "aeKbKiYdRLRhVmaIMx2UAAAAANg"]
[Sat Apr 18 04:42:18.947116 2026] [:error] [pid 9863:tid 9887] [client 172.202.75.66:56513] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aeKbKjjjiypiFrTucbL2XAAAAA4"]
[Sat Apr 18 04:42:20.076441 2026] [:error] [pid 9865:tid 9961] [client 172.202.75.66:56572] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aeKbLKzb5knECIY-C-iDdAAAAJg"]
[Sat Apr 18 04:42:20.693930 2026] [:error] [pid 9864:tid 9923] [client 172.202.75.66:1832] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aeKbLICFeowknfXHM7kZxAAAAFE"]
[Sat Apr 18 04:42:21.837364 2026] [:error] [pid 9865:tid 9940] [client 172.202.75.66:58128] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/index.php"] [unique_id "aeKbLazb5knECIY-C-iDdQAAAIM"]
[Sat Apr 18 04:42:23.040485 2026] [:error] [pid 9865:tid 9952] [client 172.202.75.66:58173] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/beteng88/ws83.php"] [unique_id "aeKbL6zb5knECIY-C-iDeQAAAI8"]
[Sat Apr 18 04:42:36.818754 2026] [:error] [pid 9865:tid 9944] [client 172.202.75.66:52206] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config-sample.php"] [unique_id "aeKbPKzb5knECIY-C-iDqAAAAIc"]
[Sat Apr 18 04:42:38.713488 2026] [:error] [pid 9865:tid 9939] [client 172.202.75.66:59368] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config-sample.php"] [unique_id "aeKbPqzb5knECIY-C-iDsAAAAII"]
[Sat Apr 18 04:42:40.583282 2026] [:error] [pid 9970:tid 9983] [client 172.202.75.66:52184] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config-sample.php"] [unique_id "aeKbQCYdRLRhVmaIMx2UKAAAAMk"]
[Sat Apr 18 04:42:42.776964 2026] [:error] [pid 9864:tid 9926] [client 172.202.75.66:1378] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config-sample.php"] [unique_id "aeKbQoCFeowknfXHM7kaNwAAAFQ"]
[Sat Apr 18 04:42:44.028264 2026] [:error] [pid 9864:tid 9928] [client 172.202.75.66:50992] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aeKbRICFeowknfXHM7kaOQAAAFY"]
[Sat Apr 18 04:42:49.027956 2026] [:error] [pid 9865:tid 9953] [client 172.202.75.66:50955] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aeKbSazb5knECIY-C-iDywAAAJA"]
[Sat Apr 18 04:42:51.038774 2026] [:error] [pid 9970:tid 9986] [client 172.202.75.66:53967] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aeKbSyYdRLRhVmaIMx2U1wAAAMw"]
[Sat Apr 18 04:42:51.811473 2026] [:error] [pid 9970:tid 9993] [client 172.202.75.66:51392] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "aeKbSyYdRLRhVmaIMx2U3wAAANM"]
[Sat Apr 18 04:42:53.977982 2026] [:error] [pid 9863:tid 9896] [client 172.202.75.66:62935] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeKbTTjjiypiFrTucbL2lwAAABc"]
[Sat Apr 18 04:42:55.079699 2026] [:error] [pid 9970:tid 9984] [client 172.202.75.66:64596] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeKbTyYdRLRhVmaIMx2U-wAAAMo"]
[Sat Apr 18 04:42:56.123811 2026] [:error] [pid 9865:tid 9958] [client 172.202.75.66:51968] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeKbUKzb5knECIY-C-iD1wAAAJU"]
[Sat Apr 18 04:42:57.696044 2026] [:error] [pid 9970:tid 9981] [client 172.202.75.66:62960] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeKbUSYdRLRhVmaIMx2VEQAAAMc"]
[Sat Apr 18 04:42:59.282808 2026] [:error] [pid 9864:tid 9920] [client 172.202.75.66:51996] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeKbU4CFeowknfXHM7kaTQAAAE4"]
[Sat Apr 18 04:43:00.621662 2026] [:error] [pid 9970:tid 9981] [client 172.202.75.66:1141] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeKbVCYdRLRhVmaIMx2VIwAAAMc"]
[Sat Apr 18 04:43:02.484089 2026] [:error] [pid 9865:tid 9958] [client 172.202.75.66:1026] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeKbVqzb5knECIY-C-iD4gAAAJU"]
[Sat Apr 18 04:43:04.732410 2026] [:error] [pid 9970:tid 9985] [client 172.202.75.66:63364] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeKbWCYdRLRhVmaIMx2VQwAAAMs"]
[Sat Apr 18 04:43:07.564310 2026] [:error] [pid 9864:tid 9928] [client 172.202.75.66:51983] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aeKbW4CFeowknfXHM7kaVAAAAFY"]
[Sat Apr 18 04:43:08.582709 2026] [:error] [pid 9864:tid 9927] [client 172.202.75.66:59665] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aeKbXICFeowknfXHM7kaWgAAAFU"]
[Sat Apr 18 04:43:11.872006 2026] [:error] [pid 9863:tid 9874] [client 172.202.75.66:57567] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aeKbXzjjiypiFrTucbL2uwAAAAE"]
[Sat Apr 18 04:43:12.989007 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:60828] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aeKbYCYdRLRhVmaIMx2VeQAAAMM"]
[Sat Apr 18 04:43:13.814047 2026] [:error] [pid 9970:tid 9981] [client 172.202.75.66:1944] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aeKbYSYdRLRhVmaIMx2VhQAAAMc"]
[Sat Apr 18 04:43:14.873550 2026] [:error] [pid 9970:tid 9993] [client 172.202.75.66:64666] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aeKbYiYdRLRhVmaIMx2VjgAAANM"]
[Sat Apr 18 04:43:15.834919 2026] [:error] [pid 9865:tid 9958] [client 172.202.75.66:63397] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aeKbY6zb5knECIY-C-iEBQAAAJU"]
[Sat Apr 18 04:43:16.803612 2026] [:error] [pid 9865:tid 9937] [client 172.202.75.66:56977] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "aeKbZKzb5knECIY-C-iEDQAAAIA"]
[Sat Apr 18 04:43:18.672535 2026] [:error] [pid 9864:tid 9907] [client 172.202.75.66:60841] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aeKbZoCFeowknfXHM7kaZQAAAEI"]
[Sat Apr 18 04:43:19.647085 2026] [:error] [pid 9864:tid 9929] [client 172.202.75.66:56971] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aeKbZ4CFeowknfXHM7kaaQAAAFc"]
[Sat Apr 18 04:43:21.211810 2026] [:error] [pid 9864:tid 9907] [client 172.202.75.66:51372] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aeKbaYCFeowknfXHM7kacQAAAEI"]
[Sat Apr 18 04:43:22.278147 2026] [:error] [pid 9865:tid 9944] [client 172.202.75.66:48384] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aeKbaqzb5knECIY-C-iENQAAAIc"]
[Sat Apr 18 04:43:23.401378 2026] [:error] [pid 9865:tid 9958] [client 172.202.75.66:57557] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeKba6zb5knECIY-C-iEOQAAAJU"]
[Sat Apr 18 04:43:24.212148 2026] [:error] [pid 9864:tid 9909] [client 172.202.75.66:56992] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeKbbICFeowknfXHM7kafgAAAEQ"]
[Sat Apr 18 04:43:24.937542 2026] [:error] [pid 9865:tid 9959] [client 172.202.75.66:52812] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeKbbKzb5knECIY-C-iEQAAAAJY"]
[Sat Apr 18 04:43:25.690363 2026] [:error] [pid 9865:tid 9943] [client 172.202.75.66:48402] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeKbbazb5knECIY-C-iERQAAAIY"]
[Sat Apr 18 04:43:26.511837 2026] [:error] [pid 9865:tid 9957] [client 172.202.75.66:57586] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aeKbbqzb5knECIY-C-iESQAAAJQ"]
[Sat Apr 18 04:43:27.253118 2026] [:error] [pid 9865:tid 9955] [client 172.202.75.66:56996] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aeKbb6zb5knECIY-C-iETAAAAJI"]
[Sat Apr 18 04:43:27.741689 2026] [:error] [pid 9865:tid 9951] [client 172.202.75.66:51381] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aeKbb6zb5knECIY-C-iEUQAAAI4"]
[Sat Apr 18 04:43:28.291396 2026] [:error] [pid 9865:tid 9952] [client 172.202.75.66:51555] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "aeKbcKzb5knECIY-C-iEVQAAAI8"]
[Sat Apr 18 04:43:29.126098 2026] [:error] [pid 9863:tid 9873] [client 172.202.75.66:51531] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "aeKbcTjjiypiFrTucbL23gAAAAA"]
[Sat Apr 18 04:43:29.679374 2026] [:error] [pid 9865:tid 9943] [client 172.202.75.66:54876] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "aeKbcazb5knECIY-C-iEVgAAAIY"]
[Sat Apr 18 04:43:31.191327 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:57585] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "aeKbcyYdRLRhVmaIMx2VsgAAAMM"]
[Sat Apr 18 04:43:32.594897 2026] [:error] [pid 9865:tid 9939] [client 172.202.75.66:57552] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws77.php"] [unique_id "aeKbdKzb5knECIY-C-iEYQAAAII"]
[Sat Apr 18 04:43:40.020143 2026] [:error] [pid 9864:tid 9912] [client 172.202.75.66:53830] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aeKbfICFeowknfXHM7kaiQAAAEY"]
[Sat Apr 18 04:43:41.308708 2026] [:error] [pid 9863:tid 9895] [client 172.202.75.66:51797] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aeKbfTjjiypiFrTucbL27AAAABY"]
[Sat Apr 18 04:43:42.121149 2026] [:error] [pid 9970:tid 9976] [client 172.202.75.66:53358] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aeKbfiYdRLRhVmaIMx2V5AAAAMI"]
[Sat Apr 18 04:43:43.241240 2026] [:error] [pid 9863:tid 9884] [client 172.202.75.66:51568] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "aeKbfzjjiypiFrTucbL27wAAAAs"]
[Sat Apr 18 04:43:45.122850 2026] [:error] [pid 9970:tid 9996] [client 172.202.75.66:64649] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeKbgSYdRLRhVmaIMx2V6wAAANY"]
[Sat Apr 18 04:43:46.302493 2026] [:error] [pid 9865:tid 9943] [client 172.202.75.66:54878] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeKbgqzb5knECIY-C-iEhAAAAIY"]
[Sat Apr 18 04:43:47.325925 2026] [:error] [pid 9970:tid 9994] [client 172.202.75.66:51353] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeKbgyYdRLRhVmaIMx2V8AAAANQ"]
[Sat Apr 18 04:43:48.392833 2026] [:error] [pid 9865:tid 9960] [client 172.202.75.66:48445] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeKbhKzb5knECIY-C-iEiwAAAJc"]
[Sat Apr 18 04:43:49.371411 2026] [:error] [pid 9863:tid 9896] [client 172.202.75.66:51813] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aeKbhTjjiypiFrTucbL2_wAAABc"]
[Sat Apr 18 04:43:51.208729 2026] [:error] [pid 9863:tid 9893] [client 172.202.75.66:58939] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aeKbhzjjiypiFrTucbL3CwAAABQ"]
[Sat Apr 18 04:43:53.669576 2026] [:error] [pid 9970:tid 9975] [client 172.202.75.66:51537] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aeKbiSYdRLRhVmaIMx2WFAAAAME"]
[Sat Apr 18 04:43:54.911923 2026] [:error] [pid 9970:tid 9983] [client 172.202.75.66:54869] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "aeKbiiYdRLRhVmaIMx2WIQAAAMk"]
[Sat Apr 18 04:43:56.232912 2026] [:error] [pid 9970:tid 9993] [client 172.202.75.66:48386] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aeKbjCYdRLRhVmaIMx2WJwAAANM"]
[Sat Apr 18 04:43:57.568092 2026] [:error] [pid 9970:tid 9974] [client 172.202.75.66:53329] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aeKbjSYdRLRhVmaIMx2WMAAAAMA"]
[Sat Apr 18 04:43:58.536073 2026] [:error] [pid 9970:tid 9997] [client 172.202.75.66:54892] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aeKbjiYdRLRhVmaIMx2WPAAAANc"]
[Sat Apr 18 04:43:59.737847 2026] [:error] [pid 9863:tid 9884] [client 172.202.75.66:51542] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aeKbjzjjiypiFrTucbL3GAAAAAs"]
[Sat Apr 18 04:44:07.478707 2026] [:error] [pid 9863:tid 9893] [client 172.202.75.66:48395] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "aeKblzjjiypiFrTucbL3IwAAABQ"]
[Sat Apr 18 04:45:18.484444 2026] [:error] [pid 9864:tid 9917] [client 172.202.75.66:48526] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aeKb3oCFeowknfXHM7kbTQAAAEs"]
[Sat Apr 18 04:45:28.112408 2026] [:error] [pid 9865:tid 9956] [client 172.202.75.66:56391] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "aeKb6Kzb5knECIY-C-iFvAAAAJM"]
[Sat Apr 18 04:46:59.639449 2026] [:error] [pid 9970:tid 9977] [client 172.202.75.66:56460] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aeKcQyYdRLRhVmaIMx2Y5wAAAMM"]
[Sat Apr 18 04:47:07.297846 2026] [:error] [pid 9863:tid 9897] [client 172.202.75.66:51731] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aeKcSzjjiypiFrTucbL4KgAAABg"]
[Sat Apr 18 04:47:13.826288 2026] [:error] [pid 9863:tid 9890] [client 172.202.75.66:52884] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/onclickfuns.php"] [unique_id "aeKcUTjjiypiFrTucbL4LwAAABE"]
[Sat Apr 18 04:47:21.554129 2026] [:error] [pid 9863:tid 9888] [client 172.202.75.66:55629] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/onclickfuns.php"] [unique_id "aeKcWTjjiypiFrTucbL4RQAAAA8"]
[Sat Apr 18 04:47:24.883544 2026] [:error] [pid 9865:tid 9944] [client 172.202.75.66:60867] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/onclickfuns.php"] [unique_id "aeKcXKzb5knECIY-C-iGXwAAAIc"]
[Sat Apr 18 04:47:26.723903 2026] [:error] [pid 9970:tid 9996] [client 172.202.75.66:54093] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/onclickfuns.php"] [unique_id "aeKcXiYdRLRhVmaIMx2ZIAAAANY"]
[Sat Apr 18 04:47:30.174214 2026] [:error] [pid 9865:tid 9955] [client 172.202.75.66:53468] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aeKcYqzb5knECIY-C-iGawAAAJI"]
[Sat Apr 18 04:47:34.848086 2026] [:error] [pid 9864:tid 9924] [client 172.202.75.66:1978] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aeKcZoCFeowknfXHM7kb_AAAAFI"]
[Sat Apr 18 04:47:36.363245 2026] [:error] [pid 9970:tid 9996] [client 172.202.75.66:51984] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aeKcaCYdRLRhVmaIMx2ZPwAAANY"]
[Sat Apr 18 04:47:40.400259 2026] [:error] [pid 9864:tid 9912] [client 172.202.75.66:57784] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w.php"] [unique_id "aeKcbICFeowknfXHM7kcCwAAAEY"]
[Sat Apr 18 04:47:42.036440 2026] [:error] [pid 9970:tid 9979] [client 172.202.75.66:54265] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aeKcbiYdRLRhVmaIMx2ZSgAAAMU"]
[Sat Apr 18 04:47:43.237428 2026] [:error] [pid 9863:tid 9877] [client 172.202.75.66:1844] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aeKcbzjjiypiFrTucbL4aQAAAAQ"]
[Sat Apr 18 04:47:44.241362 2026] [:error] [pid 9970:tid 9982] [client 172.202.75.66:51656] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aeKccCYdRLRhVmaIMx2ZUQAAAMg"]
[Sat Apr 18 04:47:45.545408 2026] [:error] [pid 9865:tid 9952] [client 172.202.75.66:51969] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aeKccazb5knECIY-C-iGfAAAAI8"]
[Sat Apr 18 04:47:46.645138 2026] [:error] [pid 9864:tid 9905] [client 172.202.75.66:60894] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aeKccoCFeowknfXHM7kcFgAAAEA"]
[Sat Apr 18 04:47:47.508361 2026] [:error] [pid 9864:tid 9913] [client 172.202.75.66:54245] [client 172.202.75.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aeKcc4CFeowknfXHM7kcGAAAAEc"]
[Sat Apr 18 04:50:54.986622 2026] [:error] [pid 9865:tid 9956] [client 167.99.74.72:49888] [client 167.99.74.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.74.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeKdLqzb5knECIY-C-iIeAAAAJM"]
[Sat Apr 18 04:50:55.876765 2026] [proxy_fcgi:error] [pid 9865:tid 9956] [client 167.99.74.72:49888] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 18 04:50:57.109319 2026] [:error] [pid 9865:tid 9954] [client 167.99.74.72:49888] [client 167.99.74.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.74.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeKdMazb5knECIY-C-iIeQAAAJE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 04:50:58.108071 2026] [proxy_fcgi:error] [pid 9865:tid 9954] [client 167.99.74.72:49888] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 04:57:26.755751 2026] [:error] [pid 9863:tid 9884] [client 14.194.98.252:55067] [client 14.194.98.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.194.98.252, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeKetjjjiypiFrTucbL7SAAAAAs"]
[Sat Apr 18 05:14:40.287895 2026] [:error] [pid 9863:tid 9880] [client 47.251.82.1:45224] [client 47.251.82.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.251.82.1, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeKiwDjjiypiFrTucbL_pwAAAAc"]
[Sat Apr 18 05:14:41.069923 2026] [proxy_fcgi:error] [pid 9863:tid 9880] [client 47.251.82.1:45224] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 18 05:14:42.371027 2026] [:error] [pid 9863:tid 9890] [client 47.251.82.1:45224] [client 47.251.82.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.251.82.1, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeKiwjjjiypiFrTucbL_qgAAABE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 05:14:43.342726 2026] [proxy_fcgi:error] [pid 9863:tid 9890] [client 47.251.82.1:45224] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 05:26:43.001380 2026] [:error] [pid 9863:tid 9873] [client 84.38.134.203:54816] [client 84.38.134.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.38.134.203, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeKlkzjjiypiFrTucbIDSwAAAAA"]
[Sat Apr 18 05:26:43.859541 2026] [proxy_fcgi:error] [pid 9863:tid 9873] [client 84.38.134.203:54816] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 18 07:56:00.519560 2026] [:error] [pid 34237:tid 34251] [client 149.210.191.142:43730] [client 149.210.191.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.210.191.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeLIkBBmX4Wq5a6rxfbeKAAAAUw"]
[Sat Apr 18 07:56:01.492919 2026] [proxy_fcgi:error] [pid 34237:tid 34251] [client 149.210.191.142:43730] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 18 07:56:02.015372 2026] [:error] [pid 34237:tid 34239] [client 149.210.191.142:43730] [client 149.210.191.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.210.191.142, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeLIkhBmX4Wq5a6rxfbeKQAAAUA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 07:56:03.067490 2026] [proxy_fcgi:error] [pid 34237:tid 34239] [client 149.210.191.142:43730] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 18 08:04:54.088563 2026] [:error] [pid 34288:tid 34299] [client 147.135.252.182:52848] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aeLKpuTIiy__PtiLmpk8SAAAAYc"]
[Sat Apr 18 08:04:56.424843 2026] [:error] [pid 34237:tid 34262] [client 147.135.252.182:58574] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aeLKqBBmX4Wq5a6rxfbgCQAAAVc"]
[Sat Apr 18 08:04:58.823059 2026] [:error] [pid 9970:tid 9986] [client 147.135.252.182:46104] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeLKqiYdRLRhVmaIMx0BUwAAAMw"]
[Sat Apr 18 08:05:01.233170 2026] [:error] [pid 34237:tid 34241] [client 147.135.252.182:46110] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aeLKrRBmX4Wq5a6rxfbgDwAAAUI"]
[Sat Apr 18 08:05:03.788105 2026] [:error] [pid 34288:tid 34294] [client 147.135.252.182:46120] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aeLKr-TIiy__PtiLmpk8hAAAAYI"]
[Sat Apr 18 08:05:06.166654 2026] [:error] [pid 13023:tid 13040] [client 147.135.252.182:46132] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeLKsv1e7hG8DAeABB8_TQAAAQ8"]
[Sat Apr 18 08:05:08.574278 2026] [:error] [pid 13023:tid 13030] [client 147.135.252.182:56960] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeLKtP1e7hG8DAeABB8_UgAAAQU"]
[Sat Apr 18 08:05:11.004462 2026] [:error] [pid 34290:tid 34333] [client 147.135.252.182:56964] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aeLKtxqX6WpmmAXOBi9ujAAAAc4"]
[Sat Apr 18 08:05:13.380000 2026] [:error] [pid 34290:tid 34323] [client 147.135.252.182:56970] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aeLKuRqX6WpmmAXOBi9umAAAAcQ"]
[Sat Apr 18 08:05:15.649932 2026] [:error] [pid 34290:tid 34341] [client 147.135.252.182:56980] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aeLKuxqX6WpmmAXOBi9uoQAAAdY"]
[Sat Apr 18 08:05:18.030870 2026] [:error] [pid 34237:tid 34241] [client 147.135.252.182:43406] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aeLKvhBmX4Wq5a6rxfbgFgAAAUI"]
[Sat Apr 18 08:05:20.551037 2026] [:error] [pid 34237:tid 34244] [client 147.135.252.182:43418] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aeLKwBBmX4Wq5a6rxfbgHwAAAUU"]
[Sat Apr 18 08:05:22.944097 2026] [:error] [pid 34237:tid 34241] [client 147.135.252.182:43434] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aeLKwhBmX4Wq5a6rxfbgKAAAAUI"]
[Sat Apr 18 08:05:25.508965 2026] [:error] [pid 34288:tid 34302] [client 147.135.252.182:43438] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aeLKxeTIiy__PtiLmpk83AAAAYo"]
[Sat Apr 18 08:05:27.880869 2026] [:error] [pid 34288:tid 34310] [client 147.135.252.182:53422] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aeLKx-TIiy__PtiLmpk86gAAAZI"]
[Sat Apr 18 08:05:30.284852 2026] [:error] [pid 34288:tid 34299] [client 147.135.252.182:53432] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aeLKyuTIiy__PtiLmpk88QAAAYc"]
[Sat Apr 18 08:05:32.798216 2026] [:error] [pid 9865:tid 9939] [client 147.135.252.182:53444] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aeLKzKzb5knECIY-C-jRRwAAAII"]
[Sat Apr 18 08:05:35.355405 2026] [:error] [pid 34288:tid 34310] [client 147.135.252.182:53452] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aeLKz-TIiy__PtiLmpk9AQAAAZI"]
[Sat Apr 18 08:05:37.711697 2026] [:error] [pid 13023:tid 13025] [client 147.135.252.182:40372] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aeLK0f1e7hG8DAeABB8_iwAAAQA"]
[Sat Apr 18 08:05:40.239813 2026] [:error] [pid 13023:tid 13048] [client 147.135.252.182:40376] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeLK1P1e7hG8DAeABB8_mQAAARc"]
[Sat Apr 18 08:05:42.780582 2026] [:error] [pid 13023:tid 13048] [client 147.135.252.182:40392] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aeLK1v1e7hG8DAeABB8_pAAAARc"]
[Sat Apr 18 08:05:45.168008 2026] [:error] [pid 34237:tid 34257] [client 147.135.252.182:40396] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeLK2RBmX4Wq5a6rxfbgRgAAAVI"]
[Sat Apr 18 08:05:47.675380 2026] [:error] [pid 34290:tid 34339] [client 147.135.252.182:40950] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aeLK2xqX6WpmmAXOBi9usAAAAdQ"]
[Sat Apr 18 08:05:50.213129 2026] [:error] [pid 34288:tid 34299] [client 147.135.252.182:40964] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "aeLK3uTIiy__PtiLmpk9DQAAAYc"]
[Sat Apr 18 08:06:20.451530 2026] [:error] [pid 34237:tid 34247] [client 147.135.252.182:40978] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aeLK_BBmX4Wq5a6rxfbgbwAAAUg"]
[Sat Apr 18 08:06:22.905383 2026] [:error] [pid 9970:tid 9979] [client 147.135.252.182:55730] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aeLK_iYdRLRhVmaIMx0BwgAAAMU"]
[Sat Apr 18 08:06:25.405155 2026] [:error] [pid 34288:tid 34308] [client 147.135.252.182:55742] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aeLLAeTIiy__PtiLmpk9MgAAAZA"]
[Sat Apr 18 08:06:27.934983 2026] [:error] [pid 9865:tid 9946] [client 147.135.252.182:40848] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aeLLA6zb5knECIY-C-jRaAAAAIk"]
[Sat Apr 18 08:06:30.423631 2026] [:error] [pid 34237:tid 34242] [client 147.135.252.182:40854] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aeLLBhBmX4Wq5a6rxfbgeAAAAUM"]
[Sat Apr 18 08:06:32.914839 2026] [:error] [pid 13023:tid 13047] [client 147.135.252.182:40870] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aeLLCP1e7hG8DAeABB9AEQAAARY"]
[Sat Apr 18 08:06:35.270171 2026] [:error] [pid 34288:tid 34293] [client 147.135.252.182:40882] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aeLLC-TIiy__PtiLmpk9QgAAAYE"]
[Sat Apr 18 08:06:37.799883 2026] [:error] [pid 9865:tid 9949] [client 147.135.252.182:34078] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aeLLDazb5knECIY-C-jRawAAAIw"]
[Sat Apr 18 08:06:40.277164 2026] [:error] [pid 13023:tid 13039] [client 147.135.252.182:34092] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aeLLEP1e7hG8DAeABB9AFQAAAQ4"]
[Sat Apr 18 08:06:42.829746 2026] [:error] [pid 9865:tid 9959] [client 147.135.252.182:34102] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aeLLEqzb5knECIY-C-jRdwAAAJY"]
[Sat Apr 18 08:06:45.306621 2026] [:error] [pid 13023:tid 13032] [client 147.135.252.182:34106] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aeLLFf1e7hG8DAeABB9AGQAAAQc"]
[Sat Apr 18 08:06:47.934873 2026] [:error] [pid 9970:tid 9987] [client 147.135.252.182:51426] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aeLLFyYdRLRhVmaIMx0BzAAAAM0"]
[Sat Apr 18 08:06:50.387189 2026] [:error] [pid 13023:tid 13046] [client 147.135.252.182:51442] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeLLGv1e7hG8DAeABB9ALgAAARU"]
[Sat Apr 18 08:06:52.929625 2026] [:error] [pid 13023:tid 13044] [client 147.135.252.182:51458] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeLLHP1e7hG8DAeABB9AMQAAARM"]
[Sat Apr 18 08:06:55.459736 2026] [:error] [pid 13023:tid 13048] [client 147.135.252.182:51460] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeLLH_1e7hG8DAeABB9ANwAAARc"]
[Sat Apr 18 08:06:57.980407 2026] [:error] [pid 34288:tid 34307] [client 147.135.252.182:59056] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeLLIeTIiy__PtiLmpk9WQAAAY8"]
[Sat Apr 18 08:07:00.359056 2026] [:error] [pid 34237:tid 34254] [client 147.135.252.182:59064] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeLLJBBmX4Wq5a6rxfbgjwAAAU8"]
[Sat Apr 18 08:07:02.874175 2026] [:error] [pid 34290:tid 34334] [client 147.135.252.182:59080] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeLLJhqX6WpmmAXOBi9vAQAAAc8"]
[Sat Apr 18 08:07:05.387997 2026] [:error] [pid 34290:tid 34322] [client 147.135.252.182:59096] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aeLLKRqX6WpmmAXOBi9vBwAAAcM"]
[Sat Apr 18 08:07:07.903313 2026] [:error] [pid 34288:tid 34293] [client 147.135.252.182:35154] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeLLK-TIiy__PtiLmpk9YQAAAYE"]
[Sat Apr 18 08:07:10.398182 2026] [:error] [pid 34290:tid 34341] [client 147.135.252.182:35160] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aeLLLhqX6WpmmAXOBi9vCgAAAdY"]
[Sat Apr 18 08:07:12.890551 2026] [:error] [pid 34290:tid 34328] [client 147.135.252.182:35174] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeLLMBqX6WpmmAXOBi9vEAAAAck"]
[Sat Apr 18 08:07:15.215165 2026] [:error] [pid 13023:tid 13027] [client 147.135.252.182:35188] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeLLM_1e7hG8DAeABB9AVwAAAQI"]
[Sat Apr 18 08:07:45.044646 2026] [:error] [pid 9865:tid 9939] [client 147.135.252.182:35104] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeLLUazb5knECIY-C-jRrgAAAII"]
[Sat Apr 18 08:07:47.300122 2026] [:error] [pid 9970:tid 9976] [client 147.135.252.182:39902] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aeLLUyYdRLRhVmaIMx0CHQAAAMI"]
[Sat Apr 18 08:07:49.790436 2026] [:error] [pid 9970:tid 9989] [client 147.135.252.182:39908] [client 147.135.252.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aeLLVSYdRLRhVmaIMx0CHgAAAM8"]
[Sat Apr 18 09:55:02.777883 2026] [:error] [pid 9865:tid 9956] [client 219.98.129.7:54355] [client 219.98.129.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 219.98.129.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeLkdqzb5knECIY-C-jzLAAAAJM"]
[Sat Apr 18 12:32:01.429222 2026] [:error] [pid 9863:tid 9896] [client 142.93.215.41:55506] [client 142.93.215.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.93.215.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeMJQTjjiypiFrTucbKINwAAABc"]
[Sat Apr 18 12:34:45.967739 2026] [:error] [pid 9970:tid 9974] [client 43.153.58.28:45920] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeMJ5SYdRLRhVmaIMx1RsgAAAMA"]
[Sat Apr 18 12:37:24.679857 2026] [:error] [pid 9970:tid 9989] [client 51.103.130.144:30938] [client 51.103.130.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeMKhCYdRLRhVmaIMx1SPAAAAM8"]
[Sat Apr 18 12:37:29.007713 2026] [:error] [pid 9865:tid 9953] [client 51.103.130.144:35277] [client 51.103.130.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeMKiazb5knECIY-C-gcWgAAAJA"]
[Sat Apr 18 12:37:33.312168 2026] [:error] [pid 9865:tid 9939] [client 51.103.130.144:41962] [client 51.103.130.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeMKjazb5knECIY-C-gcYwAAAII"]
[Sat Apr 18 12:38:43.280384 2026] [:error] [pid 9864:tid 9910] [client 209.141.49.119:57926] [client 209.141.49.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.49.119, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeMK04CFeowknfXHM7mYGwAAAEU"]
[Sat Apr 18 12:38:44.124292 2026] [proxy_fcgi:error] [pid 9864:tid 9910] [client 209.141.49.119:57926] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 18 12:38:44.297916 2026] [:error] [pid 9864:tid 9912] [client 209.141.49.119:57926] [client 209.141.49.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.49.119, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeMK1ICFeowknfXHM7mYHQAAAEY"], referer: https://hotbooksbookeeping2.com/wp-admin/
[Sat Apr 18 12:38:45.136144 2026] [proxy_fcgi:error] [pid 9864:tid 9912] [client 209.141.49.119:57926] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-admin/
[Sat Apr 18 13:59:07.852477 2026] [:error] [pid 9864:tid 9910] [client 100.29.50.249:53926] [client 100.29.50.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 100.29.50.249, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeMdq4CFeowknfXHM7mpKAAAAEU"]
[Sat Apr 18 16:24:24.380290 2026] [:error] [pid 34237:tid 34262] [client 176.42.132.84:16226] [client 176.42.132.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.42.132.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeM_uBBmX4Wq5a6rxfZKiwAAAVc"]
[Sat Apr 18 16:24:34.078697 2026] [:error] [pid 9864:tid 9924] [client 176.42.132.84:15326] [client 176.42.132.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.42.132.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeM_woCFeowknfXHM7nLugAAAFI"]
[Sat Apr 18 16:28:35.522170 2026] [:error] [pid 9865:tid 9942] [client 43.135.130.202:52878] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeNAs6zb5knECIY-C-hYAgAAAIU"]
[Sat Apr 18 16:35:35.181026 2026] [:error] [pid 9865:tid 9937] [client 176.42.132.84:15365] [client 176.42.132.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.42.132.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNCV6zb5knECIY-C-hZgwAAAIA"]
[Sat Apr 18 16:35:45.596099 2026] [:error] [pid 34290:tid 34320] [client 176.42.132.84:15615] [client 176.42.132.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.42.132.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNCYRqX6WpmmAXOBi_cmQAAAcE"]
[Sat Apr 18 16:35:56.075452 2026] [:error] [pid 34288:tid 34292] [client 176.42.132.84:15597] [client 176.42.132.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.42.132.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNCbOTIiy__PtiLmpm4MgAAAYA"]
[Sat Apr 18 16:45:06.877285 2026] [:error] [pid 13023:tid 13044] [client 182.42.104.32:49390] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeNEkv1e7hG8DAeABB_PIwAAARM"]
[Sat Apr 18 16:54:58.154363 2026] [:error] [pid 9970:tid 9980] [client 103.154.63.3:40728] [client 103.154.63.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.154.63.3, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNG4iYdRLRhVmaIMx2GwwAAAMY"]
[Sat Apr 18 17:41:20.623228 2026] [:error] [pid 9865:tid 9942] [client 195.229.62.8:53312] [client 195.229.62.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.229.62.8, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNRwKzb5knECIY-C-hn7AAAAIU"]
[Sat Apr 18 19:03:19.016438 2026] [:error] [pid 9863:tid 9893] [client 103.187.95.58:55879] [client 103.187.95.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.95.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNk9zjjiypiFrTucbLChgAAABQ"]
[Sat Apr 18 19:03:29.420295 2026] [:error] [pid 9970:tid 9976] [client 103.187.95.58:56274] [client 103.187.95.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.95.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNlASYdRLRhVmaIMx2llAAAAMI"]
[Sat Apr 18 19:03:40.016096 2026] [:error] [pid 9865:tid 9941] [client 103.187.95.58:56490] [client 103.187.95.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.95.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNlDKzb5knECIY-C-h19QAAAIQ"]
[Sat Apr 18 19:03:50.615398 2026] [:error] [pid 9864:tid 9925] [client 103.187.95.58:56716] [client 103.187.95.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.95.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNlFoCFeowknfXHM7n-qQAAAFM"]
[Sat Apr 18 19:04:01.165464 2026] [:error] [pid 9863:tid 9878] [client 103.187.95.58:56941] [client 103.187.95.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.95.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNlITjjiypiFrTucbLCoQAAAAU"]
[Sat Apr 18 19:17:15.191144 2026] [:error] [pid 9970:tid 9995] [client 103.217.108.42:62150] [client 103.217.108.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.217.108.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNoOyYdRLRhVmaIMx2n0QAAANU"]
[Sat Apr 18 19:18:08.115615 2026] [:error] [pid 9970:tid 9993] [client 103.217.108.44:62258] [client 103.217.108.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.217.108.44, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNocCYdRLRhVmaIMx2n8gAAANM"]
[Sat Apr 18 19:18:18.794499 2026] [:error] [pid 34237:tid 34246] [client 103.217.108.33:62591] [client 103.217.108.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.217.108.33, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNoehBmX4Wq5a6rxfaLFAAAAUc"]
[Sat Apr 18 19:18:29.334371 2026] [:error] [pid 34288:tid 34315] [client 103.217.108.42:62822] [client 103.217.108.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.217.108.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNoheTIiy__PtiLmpnL8AAAAZc"]
[Sat Apr 18 19:18:39.919399 2026] [:error] [pid 9864:tid 9917] [client 103.217.108.42:63028] [client 103.217.108.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.217.108.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNoj4CFeowknfXHM7kEKQAAAEs"]
[Sat Apr 18 19:18:50.438472 2026] [:error] [pid 34290:tid 34341] [client 103.217.108.42:63241] [client 103.217.108.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.217.108.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNomhqX6WpmmAXOBi8J9AAAAdY"]
[Sat Apr 18 19:19:01.052529 2026] [:error] [pid 9864:tid 9926] [client 103.217.108.40:63456] [client 103.217.108.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.217.108.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNopYCFeowknfXHM7kEQQAAAFQ"]
[Sat Apr 18 19:19:12.669306 2026] [:error] [pid 13023:tid 13025] [client 103.217.108.42:63676] [client 103.217.108.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.217.108.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeNosP1e7hG8DAeABB_3XwAAAQA"]
[Sat Apr 18 20:59:29.895196 2026] [:error] [pid 9970:tid 9978] [client 211.23.42.84:46266] [client 211.23.42.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.23.42.84, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeOAMSYdRLRhVmaIMx28QwAAAMQ"]
[Sat Apr 18 20:59:30.771758 2026] [proxy_fcgi:error] [pid 9970:tid 9978] [client 211.23.42.84:46266] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 18 21:13:19.962751 2026] [:error] [pid 32677:tid 32685] [client 203.86.122.1:47640] [client 203.86.122.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.86.122.1, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeODbxngmUE3LdC-wP7hFQAAAkU"]
[Sat Apr 18 21:13:20.801856 2026] [proxy_fcgi:error] [pid 32677:tid 32685] [client 203.86.122.1:47640] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 19 01:42:25.991608 2026] [:error] [pid 32166:tid 32205] [client 43.166.136.153:55350] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aePCgZCHNkWwdiZnafLMBwAAAEc"]
[Sun Apr 19 02:24:32.187943 2026] [:error] [pid 32166:tid 32199] [client 178.151.245.162:33870] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aePMYJCHNkWwdiZnafLTnQAAAEE"]
[Sun Apr 19 02:24:34.705338 2026] [:error] [pid 41277:tid 41303] [client 178.151.245.162:36934] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aePMYkH3ayszMLZYflv_2AAAAZg"]
[Sun Apr 19 02:24:37.252419 2026] [:error] [pid 60910:tid 60932] [client 178.151.245.162:36940] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aePMZXFWunkyacYqsD1FHQAAAVQ"]
[Sun Apr 19 02:24:39.814977 2026] [:error] [pid 32166:tid 32207] [client 178.151.245.162:36952] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aePMZ5CHNkWwdiZnafLTqgAAAEk"]
[Sun Apr 19 02:24:42.328360 2026] [:error] [pid 32166:tid 32204] [client 178.151.245.162:36962] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aePMapCHNkWwdiZnafLTsgAAAEY"]
[Sun Apr 19 02:24:44.893585 2026] [:error] [pid 41277:tid 41283] [client 178.151.245.162:54486] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aePMbEH3ayszMLZYflv_7AAAAYQ"]
[Sun Apr 19 02:24:47.466216 2026] [:error] [pid 32167:tid 32234] [client 178.151.245.162:54492] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aePMb0yD4Jm27Mb3NJiMaAAAAIk"]
[Sun Apr 19 02:24:49.984782 2026] [:error] [pid 60910:tid 60914] [client 178.151.245.162:54506] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aePMcXFWunkyacYqsD1FMQAAAUI"]
[Sun Apr 19 02:24:52.651415 2026] [:error] [pid 32165:tid 32191] [client 178.151.245.162:33864] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aePMdKe2vKwEk_N0Brb8NAAAABY"]
[Sun Apr 19 02:24:55.083253 2026] [:error] [pid 32167:tid 32242] [client 178.151.245.162:33866] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aePMd0yD4Jm27Mb3NJiMhgAAAJE"]
[Sun Apr 19 02:24:57.650398 2026] [:error] [pid 41277:tid 41297] [client 178.151.245.162:33874] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aePMeUH3ayszMLZYflsAAAAAAZI"]
[Sun Apr 19 02:25:00.267035 2026] [:error] [pid 32252:tid 32270] [client 178.151.245.162:33888] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aePMfOXl4Yc-Lt5fJ9intAAAARA"]
[Sun Apr 19 02:25:02.854804 2026] [:error] [pid 41277:tid 41296] [client 178.151.245.162:34296] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aePMfkH3ayszMLZYflsADQAAAZE"]
[Sun Apr 19 02:25:05.417594 2026] [:error] [pid 32252:tid 32276] [client 178.151.245.162:34306] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aePMgeXl4Yc-Lt5fJ9invQAAARY"]
[Sun Apr 19 02:25:07.934952 2026] [:error] [pid 41277:tid 41299] [client 178.151.245.162:34316] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aePMg0H3ayszMLZYflsAHgAAAZQ"]
[Sun Apr 19 02:25:10.362866 2026] [:error] [pid 32167:tid 32232] [client 178.151.245.162:34330] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aePMhkyD4Jm27Mb3NJiMxAAAAIc"]
[Sun Apr 19 02:25:12.964914 2026] [:error] [pid 33517:tid 33529] [client 178.151.245.162:38020] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aePMiH4Zz-rubR1wiZ-22gAAAMo"]
[Sun Apr 19 02:25:15.416271 2026] [:error] [pid 60910:tid 60936] [client 178.151.245.162:38024] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aePMi3FWunkyacYqsD1FSQAAAVg"]
[Sun Apr 19 02:25:18.025503 2026] [:error] [pid 32252:tid 32256] [client 178.151.245.162:38036] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aePMjuXl4Yc-Lt5fJ9in1wAAAQI"]
[Sun Apr 19 02:25:20.604963 2026] [:error] [pid 32166:tid 32222] [client 178.151.245.162:38042] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aePMkJCHNkWwdiZnafLT2AAAAFg"]
[Sun Apr 19 02:25:23.041180 2026] [:error] [pid 60910:tid 60916] [client 178.151.245.162:37768] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aePMk3FWunkyacYqsD1FWQAAAUQ"]
[Sun Apr 19 02:25:25.434037 2026] [:error] [pid 41277:tid 41286] [client 178.151.245.162:37774] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aePMlUH3ayszMLZYflsAMwAAAYc"]
[Sun Apr 19 02:25:27.857826 2026] [:error] [pid 60910:tid 60922] [client 178.151.245.162:37784] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aePMl3FWunkyacYqsD1FZwAAAUo"]
[Sun Apr 19 02:25:58.448963 2026] [:error] [pid 32167:tid 32229] [client 178.151.245.162:37794] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aePMtkyD4Jm27Mb3NJiNQQAAAIQ"]
[Sun Apr 19 02:26:00.970852 2026] [:error] [pid 41277:tid 41300] [client 178.151.245.162:34238] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aePMuEH3ayszMLZYflsAVAAAAZU"]
[Sun Apr 19 02:26:03.452115 2026] [:error] [pid 32166:tid 32221] [client 178.151.245.162:40360] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aePMu5CHNkWwdiZnafLT8gAAAFc"]
[Sun Apr 19 02:26:06.054340 2026] [:error] [pid 32167:tid 32249] [client 178.151.245.162:40364] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aePMvkyD4Jm27Mb3NJiNUAAAAJg"]
[Sun Apr 19 02:26:08.665586 2026] [:error] [pid 60910:tid 60914] [client 178.151.245.162:40378] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aePMwHFWunkyacYqsD1FvgAAAUI"]
[Sun Apr 19 02:26:11.283573 2026] [:error] [pid 32165:tid 32189] [client 178.151.245.162:40384] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aePMw6e2vKwEk_N0Brb8sAAAABQ"]
[Sun Apr 19 02:26:13.889596 2026] [:error] [pid 41277:tid 41298] [client 178.151.245.162:49530] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aePMxUH3ayszMLZYflsAbgAAAZM"]
[Sun Apr 19 02:26:16.498568 2026] [:error] [pid 41277:tid 41294] [client 178.151.245.162:49534] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aePMyEH3ayszMLZYflsAegAAAY8"]
[Sun Apr 19 02:26:19.117505 2026] [:error] [pid 32167:tid 32232] [client 178.151.245.162:49546] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aePMy0yD4Jm27Mb3NJiNcQAAAIc"]
[Sun Apr 19 02:26:21.592034 2026] [:error] [pid 32167:tid 32248] [client 178.151.245.162:49548] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aePMzUyD4Jm27Mb3NJiNgwAAAJc"]
[Sun Apr 19 02:26:24.201979 2026] [:error] [pid 33517:tid 33527] [client 178.151.245.162:48178] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aePM0H4Zz-rubR1wiZ-3QgAAAMg"]
[Sun Apr 19 02:26:26.804878 2026] [:error] [pid 32167:tid 32238] [client 178.151.245.162:48182] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aePM0kyD4Jm27Mb3NJiNoAAAAI0"]
[Sun Apr 19 02:26:29.286797 2026] [:error] [pid 32167:tid 32227] [client 178.151.245.162:48196] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aePM1UyD4Jm27Mb3NJiNqQAAAII"]
[Sun Apr 19 02:26:31.884472 2026] [:error] [pid 41277:tid 41302] [client 178.151.245.162:48210] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aePM10H3ayszMLZYflsAjAAAAZc"]
[Sun Apr 19 02:26:34.504430 2026] [:error] [pid 60910:tid 60917] [client 178.151.245.162:49096] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aePM2nFWunkyacYqsD1F0QAAAUU"]
[Sun Apr 19 02:26:37.122971 2026] [:error] [pid 60910:tid 60921] [client 178.151.245.162:49106] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aePM3XFWunkyacYqsD1F1wAAAUk"]
[Sun Apr 19 02:26:39.728928 2026] [:error] [pid 41277:tid 41301] [client 178.151.245.162:49112] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aePM30H3ayszMLZYflsAkAAAAZY"]
[Sun Apr 19 02:26:42.333090 2026] [:error] [pid 60910:tid 60934] [client 178.151.245.162:46432] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aePM4nFWunkyacYqsD1F9AAAAVY"]
[Sun Apr 19 02:26:44.937421 2026] [:error] [pid 33517:tid 33540] [client 178.151.245.162:46434] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aePM5H4Zz-rubR1wiZ-3XwAAANU"]
[Sun Apr 19 02:26:47.535633 2026] [:error] [pid 41277:tid 41291] [client 178.151.245.162:36167] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aePM50H3ayszMLZYflsAnAAAAYw"]
[Sun Apr 19 02:26:49.993991 2026] [:error] [pid 32252:tid 32270] [client 178.151.245.162:46460] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aePM6eXl4Yc-Lt5fJ9ioUAAAARA"]
[Sun Apr 19 02:26:52.606591 2026] [:error] [pid 41277:tid 41287] [client 178.151.245.162:36198] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aePM7EH3ayszMLZYflsAogAAAYg"]
[Sun Apr 19 02:27:23.826230 2026] [:error] [pid 41277:tid 41295] [client 178.151.245.162:36200] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aePNC0H3ayszMLZYflsA-AAAAZA"]
[Sun Apr 19 02:27:26.332782 2026] [:error] [pid 32165:tid 32186] [client 178.151.245.162:39310] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aePNDqe2vKwEk_N0Brb9CwAAABE"]
[Sun Apr 19 02:27:28.947719 2026] [:error] [pid 32165:tid 32170] [client 178.151.245.162:39318] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aePNEKe2vKwEk_N0Brb9HAAAAAE"]
[Sun Apr 19 02:27:31.561120 2026] [:error] [pid 41277:tid 41290] [client 178.151.245.162:39324] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aePNE0H3ayszMLZYflsBFgAAAYs"]
[Sun Apr 19 02:27:34.169085 2026] [:error] [pid 32165:tid 32173] [client 178.151.245.162:52580] [client 178.151.245.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aePNFqe2vKwEk_N0Brb9KAAAAAQ"]
[Sun Apr 19 03:17:00.765763 2026] [:error] [pid 60910:tid 60927] [client 172.98.33.66:61957] [client 172.98.33.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.33.66, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aePYrHFWunkyacYqsD1ZeQAAAU8"]
[Sun Apr 19 03:17:09.148974 2026] [proxy_fcgi:error] [pid 60910:tid 60927] [client 172.98.33.66:61957] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 19 05:21:49.145045 2026] [:error] [pid 47773:tid 47839] [client 35.179.179.245:58014] [client 35.179.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aeP17eiBHdnCJDuPq9BLpAAAAFc"]
[Sun Apr 19 05:21:51.226634 2026] [:error] [pid 47773:tid 47827] [client 35.179.179.245:58088] [client 35.179.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aeP17-iBHdnCJDuPq9BLrAAAAEs"]
[Sun Apr 19 05:21:52.208842 2026] [:error] [pid 47775:tid 47862] [client 35.179.179.245:42754] [client 35.179.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aeP18Lmztjlk9tsmoexsAwAAAJM"]
[Sun Apr 19 05:21:53.178927 2026] [:error] [pid 47772:tid 47800] [client 35.179.179.245:42812] [client 35.179.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "aeP18Yc0L16cb4smAz-Z_wAAAAs"]
[Sun Apr 19 05:21:55.746615 2026] [:error] [pid 47886:tid 47888] [client 35.179.179.245:42902] [client 35.179.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "aeP180Se8yiyuPrD7yPoqgAAAMA"]
[Sun Apr 19 05:21:56.719283 2026] [:error] [pid 47775:tid 47849] [client 35.179.179.245:42926] [client 35.179.179.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test"] [unique_id "aeP19Lmztjlk9tsmoexsDAAAAIY"]
[Sun Apr 19 05:52:57.849058 2026] [:error] [pid 15765:tid 15873] [client 182.44.12.37:48180] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeP9OfRqinw-W5EwQ76GbQAAApQ"]
[Sun Apr 19 06:16:41.049849 2026] [:error] [pid 47772:tid 47798] [client 43.159.128.155:52446] [client 43.159.128.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeQCyYc0L16cb4smAz-z6wAAAAk"]
[Sun Apr 19 07:41:34.076116 2026] [:error] [pid 15764:tid 15837] [client 119.159.164.203:56292] [client 119.159.164.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.159.164.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeQWrmLL_sqdSHoVp-QDggAAAks"]
[Sun Apr 19 08:07:31.394199 2026] [:error] [pid 47886:tid 47889] [client 190.92.174.21:34868] [client 190.92.174.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeQcw0Se8yiyuPrD7yMO5gAAAME"]
[Sun Apr 19 08:07:32.234429 2026] [proxy_fcgi:error] [pid 47886:tid 47889] [client 190.92.174.21:34868] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 19 08:07:32.537374 2026] [:error] [pid 47886:tid 47910] [client 190.92.174.21:34868] [client 190.92.174.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.21, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeQcxESe8yiyuPrD7yMO5wAAANY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 19 08:07:33.574302 2026] [proxy_fcgi:error] [pid 47886:tid 47910] [client 190.92.174.21:34868] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 19 08:55:22.317887 2026] [:error] [pid 15763:tid 15812] [client 45.132.115.90:46257] [client 45.132.115.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.90, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeQn-rMXv1Y1THOoxaBC3gAAAhA"]
[Sun Apr 19 08:55:23.216114 2026] [proxy_fcgi:error] [pid 15763:tid 15812] [client 45.132.115.90:46257] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 19 09:05:19.551000 2026] [:error] [pid 47772:tid 47808] [client 172.98.33.34:30329] [client 172.98.33.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.33.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeQqT4c0L16cb4smAz_rjQAAABM"]
[Sun Apr 19 09:05:20.450310 2026] [proxy_fcgi:error] [pid 47772:tid 47808] [client 172.98.33.34:30329] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 19 09:13:50.047027 2026] [:error] [pid 47775:tid 47858] [client 72.167.46.126:51934] [client 72.167.46.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.167.46.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeQsTrmztjlk9tsmoeymogAAAI8"]
[Sun Apr 19 09:29:49.748429 2026] [:error] [pid 15760:tid 15768] [client 38.7.152.34:56472] [client 38.7.152.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.7.152.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeQwDfSdD_XHQMJ_ISsyOQAAAcA"]
[Sun Apr 19 09:29:50.587424 2026] [proxy_fcgi:error] [pid 15760:tid 15768] [client 38.7.152.34:56472] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 19 10:46:27.050726 2026] [:error] [pid 15693:tid 15699] [client 202.10.45.93:47640] [client 202.10.45.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.10.45.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeRCA8NMD-ccazQlTsksjwAAAUM"]
[Sun Apr 19 11:25:44.692542 2026] [:error] [pid 47886:tid 47889] [client 103.101.163.204:37300] [client 103.101.163.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.101.163.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeRLOESe8yiyuPrD7yMsUAAAAME"]
[Sun Apr 19 11:32:10.818019 2026] [:error] [pid 15693:tid 15714] [client 165.22.136.47:42710] [client 165.22.136.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.136.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeRMusNMD-ccazQlTskv0AAAAVI"]
[Sun Apr 19 12:11:27.562749 2026] [:error] [pid 15764:tid 15850] [client 35.197.116.95:43504] [client 35.197.116.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aeRV72LL_sqdSHoVp-Re4gAAAlc"]
[Sun Apr 19 13:56:09.362839 2026] [:error] [pid 15764:tid 15831] [client 43.155.140.157:56384] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeRueWLL_sqdSHoVp-SEwwAAAkU"]
[Sun Apr 19 17:06:39.097453 2026] [:error] [pid 47772:tid 47789] [client 49.51.52.250:55542] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeSbH4c0L16cb4smAz9z5QAAAAA"]
[Sun Apr 19 17:56:15.718442 2026] [:error] [pid 15764:tid 15838] [client 188.166.236.36:50324] [client 188.166.236.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aeSmv2LL_sqdSHoVp-TJzwAAAkw"]
[Sun Apr 19 18:24:09.372678 2026] [:error] [pid 15760:tid 15780] [client 185.145.58.11:64106] [client 185.145.58.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.145.58.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeStSfSdD_XHQMJ_ISvSlAAAAcw"]
[Sun Apr 19 18:24:20.265773 2026] [:error] [pid 47772:tid 47804] [client 185.145.58.11:64470] [client 185.145.58.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.145.58.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeStVIc0L16cb4smAz-FZwAAAA8"]
[Sun Apr 19 18:24:41.487489 2026] [:error] [pid 47772:tid 47792] [client 185.145.58.11:64802] [client 185.145.58.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.145.58.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeStaYc0L16cb4smAz-FdgAAAAM"]
[Sun Apr 19 18:24:52.035963 2026] [:error] [pid 15765:tid 15865] [client 185.145.58.11:65063] [client 185.145.58.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.145.58.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeStdPRqinw-W5EwQ77lFQAAAow"]
[Sun Apr 19 18:25:02.734467 2026] [:error] [pid 47772:tid 47801] [client 185.145.58.11:65311] [client 185.145.58.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.145.58.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeStfoc0L16cb4smAz-FkAAAAAw"]
[Sun Apr 19 18:28:25.453214 2026] [:error] [pid 15764:tid 15833] [client 182.44.9.147:47788] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeSuSWLL_sqdSHoVp-TSywAAAkc"]
[Sun Apr 19 19:13:51.919421 2026] [:error] [pid 15693:tid 15705] [client 213.35.109.170:58991] [client 213.35.109.170] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:auth outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||hotbooksbookeeping2.com|F|3"] [data "ARGS:auth=\\x00"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "aeS478NMD-ccazQlTslOCwAAAUk"]
[Sun Apr 19 19:26:48.687865 2026] [:error] [pid 47886:tid 47900] [client 1.245.134.185:65118] [client 1.245.134.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.245.134.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeS7-ESe8yiyuPrD7yNm1QAAAMw"]
[Sun Apr 19 19:26:59.124249 2026] [:error] [pid 15764:tid 15835] [client 1.245.134.185:65419] [client 1.245.134.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.245.134.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeS8A2LL_sqdSHoVp-TlTQAAAkk"]
[Sun Apr 19 19:27:09.706967 2026] [:error] [pid 47773:tid 47829] [client 1.245.134.185:49245] [client 1.245.134.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.245.134.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeS8DeiBHdnCJDuPq9Ap_AAAAE0"]
[Sun Apr 19 19:27:20.245556 2026] [:error] [pid 47772:tid 47808] [client 1.245.134.185:49449] [client 1.245.134.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.245.134.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeS8GIc0L16cb4smAz-XOwAAABM"]
[Sun Apr 19 19:27:30.847619 2026] [:error] [pid 47772:tid 47800] [client 1.245.134.185:49657] [client 1.245.134.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.245.134.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeS8Ioc0L16cb4smAz-XRgAAAAs"]
[Sun Apr 19 20:07:23.028029 2026] [:error] [pid 15764:tid 15850] [client 43.159.138.217:35000] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeTFe2LL_sqdSHoVp-T07QAAAlc"]
[Sun Apr 19 20:46:56.295992 2026] [:error] [pid 15763:tid 15820] [client 172.213.152.234:11147] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "aeTOwLMXv1Y1THOoxaDtMQAAAhg"]
[Sun Apr 19 20:46:57.612998 2026] [:error] [pid 47772:tid 47797] [client 172.213.152.234:11149] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "aeTOwYc0L16cb4smAz-u0QAAAAg"]
[Sun Apr 19 20:46:58.504871 2026] [:error] [pid 47772:tid 47799] [client 172.213.152.234:11233] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "aeTOwoc0L16cb4smAz-u1AAAAAo"]
[Sun Apr 19 20:47:00.370092 2026] [:error] [pid 47773:tid 47823] [client 172.213.152.234:11142] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nwflm.php"] [unique_id "aeTOxOiBHdnCJDuPq9A4tAAAAEc"]
[Sun Apr 19 20:47:01.592132 2026] [:error] [pid 47773:tid 47819] [client 172.213.152.234:11237] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeTOxeiBHdnCJDuPq9A4uQAAAEM"]
[Sun Apr 19 20:47:02.876408 2026] [:error] [pid 15764:tid 15843] [client 172.213.152.234:11243] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeTOxmLL_sqdSHoVp-QDwgAAAlE"]
[Sun Apr 19 20:47:04.566956 2026] [:error] [pid 15764:tid 15843] [client 172.213.152.234:11155] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeTOyGLL_sqdSHoVp-QDzwAAAlE"]
[Sun Apr 19 20:47:06.017267 2026] [:error] [pid 15760:tid 15774] [client 172.213.152.234:11231] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeTOyvSdD_XHQMJ_ISsWKgAAAcY"]
[Sun Apr 19 20:47:06.566514 2026] [:error] [pid 15694:tid 15723] [client 172.213.152.234:11239] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeTOyrimB-jol1fwqAoIowAAAYA"]
[Sun Apr 19 20:47:07.180608 2026] [:error] [pid 15764:tid 15834] [client 172.213.152.234:11228] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeTOy2LL_sqdSHoVp-QD1gAAAkg"]
[Sun Apr 19 20:47:08.893472 2026] [:error] [pid 15764:tid 15842] [client 172.213.152.234:11207] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeTOzGLL_sqdSHoVp-QD2gAAAlA"]
[Sun Apr 19 20:47:09.866169 2026] [:error] [pid 15764:tid 15836] [client 172.213.152.234:11250] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeTOzWLL_sqdSHoVp-QD3QAAAko"]
[Sun Apr 19 20:47:10.891250 2026] [:error] [pid 15760:tid 15787] [client 172.213.152.234:11255] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeTOzvSdD_XHQMJ_ISsWQwAAAdM"]
[Sun Apr 19 20:47:11.476288 2026] [:error] [pid 15764:tid 15832] [client 172.213.152.234:11235] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeTOz2LL_sqdSHoVp-QD4AAAAkY"]
[Sun Apr 19 20:47:11.988380 2026] [:error] [pid 15763:tid 15807] [client 172.213.152.234:11249] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeTOz7MXv1Y1THOoxaDtVAAAAgs"]
[Sun Apr 19 20:47:12.647792 2026] [:error] [pid 15760:tid 15787] [client 172.213.152.234:11143] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeTO0PSdD_XHQMJ_ISsWTgAAAdM"]
[Sun Apr 19 20:47:13.181728 2026] [:error] [pid 15760:tid 15773] [client 172.213.152.234:11138] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeTO0fSdD_XHQMJ_ISsWUgAAAcU"]
[Sun Apr 19 20:47:13.709713 2026] [:error] [pid 15760:tid 15769] [client 172.213.152.234:11213] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeTO0fSdD_XHQMJ_ISsWVgAAAcE"]
[Sun Apr 19 20:47:14.365323 2026] [:error] [pid 15760:tid 15787] [client 172.213.152.234:11172] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeTO0vSdD_XHQMJ_ISsWXAAAAdM"]
[Sun Apr 19 20:47:15.006325 2026] [:error] [pid 15760:tid 15777] [client 172.213.152.234:11168] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeTO0_SdD_XHQMJ_ISsWaQAAAck"]
[Sun Apr 19 20:47:15.702029 2026] [:error] [pid 15764:tid 15839] [client 172.213.152.234:11075] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aeTO02LL_sqdSHoVp-QD4wAAAk0"]
[Sun Apr 19 20:47:19.826383 2026] [:error] [pid 15765:tid 15857] [client 172.213.152.234:11145] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aeTO1_Rqinw-W5EwQ772QgAAAoQ"]
[Sun Apr 19 20:47:20.881185 2026] [:error] [pid 15694:tid 15740] [client 172.213.152.234:11137] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aeTO2LimB-jol1fwqAoIqAAAAY4"]
[Sun Apr 19 20:47:22.913969 2026] [:error] [pid 47773:tid 47833] [client 172.213.152.234:11219] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aeTO2uiBHdnCJDuPq9A48QAAAFE"]
[Sun Apr 19 20:47:24.119269 2026] [:error] [pid 15764:tid 15846] [client 172.213.152.234:11103] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeTO3GLL_sqdSHoVp-QD6gAAAlQ"]
[Sun Apr 19 20:47:25.786464 2026] [:error] [pid 47775:tid 47852] [client 172.213.152.234:11156] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeTO3bmztjlk9tsmoewN9AAAAIk"]
[Sun Apr 19 20:47:27.135556 2026] [:error] [pid 15763:tid 15817] [client 172.213.152.234:11164] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeTO37MXv1Y1THOoxaDtXQAAAhU"]
[Sun Apr 19 20:47:28.987718 2026] [:error] [pid 47773:tid 47822] [client 172.213.152.234:11226] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeTO4OiBHdnCJDuPq9A5AAAAAEY"]
[Sun Apr 19 20:47:29.948517 2026] [:error] [pid 15763:tid 15805] [client 172.213.152.234:11204] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/water.php"] [unique_id "aeTO4bMXv1Y1THOoxaDtZAAAAgk"]
[Sun Apr 19 20:47:30.875068 2026] [:error] [pid 15763:tid 15806] [client 172.213.152.234:11202] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/water.php"] [unique_id "aeTO4rMXv1Y1THOoxaDtZwAAAgo"]
[Sun Apr 19 20:47:32.152566 2026] [:error] [pid 15760:tid 15791] [client 172.213.152.234:11256] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/water.php"] [unique_id "aeTO5PSdD_XHQMJ_ISsWggAAAdc"]
[Sun Apr 19 20:47:32.840629 2026] [:error] [pid 15760:tid 15769] [client 172.213.152.234:11220] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/water.php"] [unique_id "aeTO5PSdD_XHQMJ_ISsWhwAAAcE"]
[Sun Apr 19 20:47:33.362903 2026] [:error] [pid 15760:tid 15778] [client 172.213.152.234:11246] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "aeTO5fSdD_XHQMJ_ISsWjAAAAco"]
[Sun Apr 19 20:47:33.909919 2026] [:error] [pid 15760:tid 15782] [client 172.213.152.234:11257] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "aeTO5fSdD_XHQMJ_ISsWlAAAAc4"]
[Sun Apr 19 20:47:34.511895 2026] [:error] [pid 15760:tid 15769] [client 172.213.152.234:11254] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "aeTO5vSdD_XHQMJ_ISsWlgAAAcE"]
[Sun Apr 19 20:47:35.098934 2026] [:error] [pid 15765:tid 15860] [client 172.213.152.234:11258] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "aeTO5_Rqinw-W5EwQ772SQAAAoc"]
[Sun Apr 19 20:47:35.635171 2026] [:error] [pid 15763:tid 15810] [client 172.213.152.234:11094] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeTO57MXv1Y1THOoxaDtdAAAAg4"]
[Sun Apr 19 20:47:36.263794 2026] [:error] [pid 15760:tid 15772] [client 172.213.152.234:11230] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeTO6PSdD_XHQMJ_ISsWnAAAAcQ"]
[Sun Apr 19 20:47:36.881471 2026] [:error] [pid 15763:tid 15796] [client 172.213.152.234:11153] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeTO6LMXv1Y1THOoxaDteAAAAgA"]
[Sun Apr 19 20:47:37.473649 2026] [:error] [pid 15764:tid 15844] [client 172.213.152.234:11260] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeTO6WLL_sqdSHoVp-QD_AAAAlI"]
[Sun Apr 19 20:47:38.077597 2026] [:error] [pid 15764:tid 15830] [client 172.213.152.234:11263] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "aeTO6mLL_sqdSHoVp-QD_wAAAkQ"]
[Sun Apr 19 20:47:38.691214 2026] [:error] [pid 15760:tid 15772] [client 172.213.152.234:11224] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "aeTO6vSdD_XHQMJ_ISsWqQAAAcQ"]
[Sun Apr 19 20:47:39.236460 2026] [:error] [pid 15694:tid 15744] [client 172.213.152.234:11201] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "aeTO67imB-jol1fwqAoIvAAAAZI"]
[Sun Apr 19 20:47:39.977378 2026] [:error] [pid 15760:tid 15778] [client 172.213.152.234:11169] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "aeTO6_SdD_XHQMJ_ISsWswAAAco"]
[Sun Apr 19 20:47:40.705791 2026] [:error] [pid 15764:tid 15838] [client 172.213.152.234:11208] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aeTO7GLL_sqdSHoVp-QEDgAAAkw"]
[Sun Apr 19 20:47:41.330871 2026] [:error] [pid 15760:tid 15790] [client 172.213.152.234:11152] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aeTO7fSdD_XHQMJ_ISsWuwAAAdY"]
[Sun Apr 19 20:47:42.167906 2026] [:error] [pid 15763:tid 15816] [client 172.213.152.234:11136] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aeTO7rMXv1Y1THOoxaDtfQAAAhQ"]
[Sun Apr 19 20:47:43.291767 2026] [:error] [pid 15760:tid 15777] [client 172.213.152.234:11073] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aeTO7_SdD_XHQMJ_ISsWxAAAAck"]
[Sun Apr 19 20:47:44.477666 2026] [:error] [pid 15764:tid 15839] [client 172.213.152.234:11217] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeTO8GLL_sqdSHoVp-QEHQAAAk0"]
[Sun Apr 19 20:47:45.808573 2026] [:error] [pid 15764:tid 15838] [client 172.213.152.234:11245] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeTO8WLL_sqdSHoVp-QEJgAAAkw"]
[Sun Apr 19 20:47:47.235063 2026] [:error] [pid 47775:tid 47859] [client 172.213.152.234:11162] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeTO87mztjlk9tsmoewOBAAAAJA"]
[Sun Apr 19 20:47:49.502863 2026] [:error] [pid 47886:tid 47903] [client 172.213.152.234:11210] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeTO9USe8yiyuPrD7yNxMQAAAM8"]
[Sun Apr 19 20:47:54.094946 2026] [:error] [pid 15760:tid 15782] [client 172.213.152.234:11240] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oij98gy.php"] [unique_id "aeTO-vSdD_XHQMJ_ISsW6wAAAc4"]
[Sun Apr 19 20:48:15.307526 2026] [:error] [pid 47773:tid 47837] [client 172.213.152.234:11151] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeTPD-iBHdnCJDuPq9A5TgAAAFU"]
[Sun Apr 19 20:48:16.693758 2026] [:error] [pid 47773:tid 47817] [client 172.213.152.234:11182] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeTPEOiBHdnCJDuPq9A5UAAAAEE"]
[Sun Apr 19 20:48:17.420539 2026] [:error] [pid 15764:tid 15847] [client 172.213.152.234:11146] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeTPEWLL_sqdSHoVp-QEfQAAAlU"]
[Sun Apr 19 20:48:18.337409 2026] [:error] [pid 15760:tid 15786] [client 172.213.152.234:11200] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeTPEvSdD_XHQMJ_ISsXMAAAAdI"]
[Sun Apr 19 20:48:18.848994 2026] [:error] [pid 47773:tid 47836] [client 172.213.152.234:11157] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeTPEuiBHdnCJDuPq9A5UQAAAFQ"]
[Sun Apr 19 20:48:19.401901 2026] [:error] [pid 15764:tid 15840] [client 172.213.152.234:11154] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeTPE2LL_sqdSHoVp-QEgAAAAk4"]
[Sun Apr 19 20:48:20.001557 2026] [:error] [pid 15694:tid 15726] [client 172.213.152.234:11082] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeTPFLimB-jol1fwqAoIzgAAAYM"]
[Sun Apr 19 20:48:20.819014 2026] [:error] [pid 47773:tid 47831] [client 172.213.152.234:11225] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeTPFOiBHdnCJDuPq9A5UgAAAE8"]
[Sun Apr 19 20:48:22.046726 2026] [:error] [pid 15763:tid 15819] [client 172.213.152.234:11209] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeTPFrMXv1Y1THOoxaDt2wAAAhc"]
[Sun Apr 19 20:48:22.758300 2026] [:error] [pid 15694:tid 15751] [client 172.213.152.234:11176] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeTPFrimB-jol1fwqAoI0QAAAZg"]
[Sun Apr 19 20:48:23.273280 2026] [:error] [pid 47773:tid 47840] [client 172.213.152.234:11212] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeTPF-iBHdnCJDuPq9A5VAAAAFg"]
[Sun Apr 19 20:48:24.123735 2026] [:error] [pid 15760:tid 15777] [client 172.213.152.234:11072] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeTPGPSdD_XHQMJ_ISsXNwAAAck"]
[Sun Apr 19 20:48:24.809949 2026] [:error] [pid 15764:tid 15850] [client 172.213.152.234:11159] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeTPGGLL_sqdSHoVp-QElwAAAlc"]
[Sun Apr 19 20:48:25.453883 2026] [:error] [pid 47773:tid 47830] [client 172.213.152.234:11144] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeTPGeiBHdnCJDuPq9A5VgAAAE4"]
[Sun Apr 19 20:48:26.077740 2026] [:error] [pid 47775:tid 47852] [client 172.213.152.234:11113] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeTPGrmztjlk9tsmoewOKwAAAIk"]
[Sun Apr 19 20:48:26.714213 2026] [:error] [pid 47772:tid 47797] [client 172.213.152.234:11245] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeTPGoc0L16cb4smAz-vlwAAAAg"]
[Sun Apr 19 20:48:27.446423 2026] [:error] [pid 15763:tid 15800] [client 172.213.152.234:11139] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "aeTPG7MXv1Y1THOoxaDt4QAAAgQ"]
[Sun Apr 19 20:48:27.985897 2026] [:error] [pid 15694:tid 15748] [client 172.213.152.234:11211] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "aeTPG7imB-jol1fwqAoI2AAAAZY"]
[Sun Apr 19 20:48:28.605825 2026] [:error] [pid 15764:tid 15839] [client 172.213.152.234:11173] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "aeTPHGLL_sqdSHoVp-QEqwAAAk0"]
[Sun Apr 19 20:48:29.205348 2026] [:error] [pid 47775:tid 47853] [client 172.213.152.234:11178] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.mopj.php"] [unique_id "aeTPHbmztjlk9tsmoewOMwAAAIo"]
[Sun Apr 19 20:48:29.763890 2026] [:error] [pid 47886:tid 47890] [client 172.213.152.234:11141] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeTPHUSe8yiyuPrD7yNxdQAAAMI"]
[Sun Apr 19 20:48:30.345883 2026] [:error] [pid 15763:tid 15818] [client 172.213.152.234:11214] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeTPHrMXv1Y1THOoxaDt4gAAAhY"]
[Sun Apr 19 20:48:30.966289 2026] [:error] [pid 15763:tid 15805] [client 172.213.152.234:11197] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeTPHrMXv1Y1THOoxaDt5QAAAgk"]
[Sun Apr 19 20:48:31.519579 2026] [:error] [pid 47772:tid 47792] [client 172.213.152.234:11185] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeTPH4c0L16cb4smAz-vtQAAAAM"]
[Sun Apr 19 20:48:32.027018 2026] [:error] [pid 15764:tid 15832] [client 172.213.152.234:11232] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "aeTPIGLL_sqdSHoVp-QErwAAAkY"]
[Sun Apr 19 20:48:32.609624 2026] [:error] [pid 15763:tid 15800] [client 172.213.152.234:11171] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "aeTPILMXv1Y1THOoxaDt7gAAAgQ"]
[Sun Apr 19 20:48:33.307672 2026] [:error] [pid 15764:tid 15836] [client 172.213.152.234:11188] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "aeTPIWLL_sqdSHoVp-QEsAAAAko"]
[Sun Apr 19 20:48:34.103645 2026] [:error] [pid 15764:tid 15830] [client 172.213.152.234:11148] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nano.php"] [unique_id "aeTPImLL_sqdSHoVp-QEtwAAAkQ"]
[Sun Apr 19 20:48:35.237603 2026] [:error] [pid 47773:tid 47840] [client 172.213.152.234:11259] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeTPI-iBHdnCJDuPq9A5XwAAAFg"]
[Sun Apr 19 20:48:36.757917 2026] [:error] [pid 47773:tid 47824] [client 172.213.152.234:11227] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeTPJOiBHdnCJDuPq9A5YgAAAEg"]
[Sun Apr 19 20:48:38.634745 2026] [:error] [pid 47772:tid 47794] [client 172.213.152.234:11247] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeTPJoc0L16cb4smAz-vzwAAAAU"]
[Sun Apr 19 20:48:40.871162 2026] [:error] [pid 15764:tid 15826] [client 172.213.152.234:11196] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeTPKGLL_sqdSHoVp-QEzQAAAkA"]
[Sun Apr 19 20:48:43.746538 2026] [:error] [pid 15763:tid 15799] [client 172.213.152.234:11104] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeTPK7MXv1Y1THOoxaDt9wAAAgM"]
[Sun Apr 19 20:48:45.973227 2026] [:error] [pid 15760:tid 15783] [client 172.213.152.234:11116] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeTPLfSdD_XHQMJ_ISsXVwAAAc8"]
[Sun Apr 19 20:48:46.915931 2026] [:error] [pid 15760:tid 15778] [client 172.213.152.234:11167] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeTPLvSdD_XHQMJ_ISsXXgAAAco"]
[Sun Apr 19 20:48:47.748840 2026] [:error] [pid 15760:tid 15789] [client 172.213.152.234:11086] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeTPL_SdD_XHQMJ_ISsXaAAAAdU"]
[Sun Apr 19 20:48:48.371070 2026] [:error] [pid 15764:tid 15844] [client 172.213.152.234:11192] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeTPMGLL_sqdSHoVp-QE3gAAAlI"]
[Sun Apr 19 20:48:49.302910 2026] [:error] [pid 15764:tid 15836] [client 172.213.152.234:11183] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeTPMWLL_sqdSHoVp-QE4QAAAko"]
[Sun Apr 19 20:48:50.343550 2026] [:error] [pid 15760:tid 15787] [client 172.213.152.234:11184] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeTPMvSdD_XHQMJ_ISsXegAAAdM"]
[Sun Apr 19 20:48:52.977057 2026] [:error] [pid 15763:tid 15802] [client 172.213.152.234:11105] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeTPNLMXv1Y1THOoxaDt-QAAAgY"]
[Sun Apr 19 20:48:55.631260 2026] [:error] [pid 47773:tid 47831] [client 172.213.152.234:11252] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeTPN-iBHdnCJDuPq9A5bgAAAE8"]
[Sun Apr 19 20:48:58.726355 2026] [:error] [pid 15763:tid 15820] [client 172.213.152.234:11161] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeTPOrMXv1Y1THOoxaDt_gAAAhg"]
[Sun Apr 19 20:49:02.653768 2026] [:error] [pid 47773:tid 47830] [client 172.213.152.234:11253] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeTPPuiBHdnCJDuPq9A5fQAAAE4"]
[Sun Apr 19 20:49:04.290159 2026] [:error] [pid 15764:tid 15839] [client 172.213.152.234:11205] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeTPQGLL_sqdSHoVp-QE-wAAAk0"]
[Sun Apr 19 20:49:07.326439 2026] [:error] [pid 15763:tid 15820] [client 172.213.152.234:11150] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeTPQ7MXv1Y1THOoxaDuEQAAAhg"]
[Sun Apr 19 20:49:10.289341 2026] [:error] [pid 15760:tid 15780] [client 172.213.152.234:11160] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeTPRvSdD_XHQMJ_ISsXkwAAAcw"]
[Sun Apr 19 20:49:11.365651 2026] [:error] [pid 47775:tid 47845] [client 172.213.152.234:11095] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeTPR7mztjlk9tsmoewOUgAAAII"]
[Sun Apr 19 20:49:12.035542 2026] [:error] [pid 15760:tid 15784] [client 172.213.152.234:11012] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeTPSPSdD_XHQMJ_ISsXmgAAAdA"]
[Sun Apr 19 20:49:13.746680 2026] [:error] [pid 15764:tid 15843] [client 172.213.152.234:11107] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeTPSWLL_sqdSHoVp-QFDAAAAlE"]
[Sun Apr 19 20:49:32.574488 2026] [:error] [pid 15760:tid 15776] [client 172.213.152.234:11128] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeTPXPSdD_XHQMJ_ISsX4QAAAcg"]
[Sun Apr 19 20:49:35.517628 2026] [:error] [pid 47886:tid 47902] [client 172.213.152.234:11087] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeTPX0Se8yiyuPrD7yNxkwAAAM4"]
[Sun Apr 19 20:49:37.048152 2026] [:error] [pid 47886:tid 47910] [client 172.213.152.234:11222] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeTPYUSe8yiyuPrD7yNxlgAAANY"]
[Sun Apr 19 20:49:37.914675 2026] [:error] [pid 15764:tid 15829] [client 172.213.152.234:11050] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeTPYWLL_sqdSHoVp-QFLwAAAkM"]
[Sun Apr 19 20:49:38.896968 2026] [:error] [pid 15764:tid 15838] [client 172.213.152.234:11223] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeTPYmLL_sqdSHoVp-QFNAAAAkw"]
[Sun Apr 19 20:49:39.503534 2026] [:error] [pid 15694:tid 15742] [client 172.213.152.234:11140] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeTPY7imB-jol1fwqAoI9gAAAZA"]
[Sun Apr 19 20:49:40.204216 2026] [:error] [pid 15764:tid 15848] [client 172.213.152.234:11242] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeTPZGLL_sqdSHoVp-QFOgAAAlY"]
[Sun Apr 19 20:49:40.892320 2026] [:error] [pid 15763:tid 15805] [client 172.213.152.234:11129] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeTPZLMXv1Y1THOoxaDuMAAAAgk"]
[Sun Apr 19 20:49:41.458281 2026] [:error] [pid 15694:tid 15736] [client 172.213.152.234:11114] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "aeTPZbimB-jol1fwqAoI-AAAAYo"]
[Sun Apr 19 20:49:42.470672 2026] [:error] [pid 15763:tid 15799] [client 172.213.152.234:11165] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "aeTPZrMXv1Y1THOoxaDuMQAAAgM"]
[Sun Apr 19 20:49:43.316328 2026] [:error] [pid 15763:tid 15808] [client 172.213.152.234:11174] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "aeTPZ7MXv1Y1THOoxaDuMwAAAgw"]
[Sun Apr 19 20:49:43.835584 2026] [:error] [pid 47773:tid 47830] [client 172.213.152.234:11090] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "aeTPZ-iBHdnCJDuPq9A5nQAAAE4"]
[Sun Apr 19 20:49:44.385525 2026] [:error] [pid 15763:tid 15797] [client 172.213.152.234:11234] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeTPaLMXv1Y1THOoxaDuOAAAAgE"]
[Sun Apr 19 20:49:45.389244 2026] [:error] [pid 47773:tid 47820] [client 172.213.152.234:11093] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeTPaeiBHdnCJDuPq9A5oAAAAEQ"]
[Sun Apr 19 20:49:46.156516 2026] [:error] [pid 15694:tid 15751] [client 172.213.152.234:11127] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeTParimB-jol1fwqAoI_gAAAZg"]
[Sun Apr 19 20:49:46.640917 2026] [:error] [pid 15694:tid 15733] [client 172.213.152.234:11158] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeTParimB-jol1fwqAoJAAAAAYc"]
[Sun Apr 19 20:49:47.323706 2026] [:error] [pid 15693:tid 15716] [client 172.213.152.234:11120] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aeTPa8NMD-ccazQlTslXPwAAAVQ"]
[Sun Apr 19 20:49:48.204187 2026] [:error] [pid 15760:tid 15768] [client 172.213.152.234:11029] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aeTPbPSdD_XHQMJ_ISsX-gAAAcA"]
[Sun Apr 19 20:49:49.051560 2026] [:error] [pid 47773:tid 47828] [client 172.213.152.234:11088] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aeTPbeiBHdnCJDuPq9A5pAAAAEw"]
[Sun Apr 19 20:49:50.191447 2026] [:error] [pid 47773:tid 47840] [client 172.213.152.234:11080] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aeTPbuiBHdnCJDuPq9A5qwAAAFg"]
[Sun Apr 19 20:49:50.989684 2026] [:error] [pid 47886:tid 47910] [client 172.213.152.234:11036] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aeTPbkSe8yiyuPrD7yNxnwAAANY"]
[Sun Apr 19 20:49:51.797514 2026] [:error] [pid 47772:tid 47804] [client 172.213.152.234:11083] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aeTPb4c0L16cb4smAz-wEQAAAA8"]
[Sun Apr 19 20:49:52.499187 2026] [:error] [pid 15765:tid 15867] [client 172.213.152.234:11166] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aeTPcPRqinw-W5EwQ772eAAAAo4"]
[Sun Apr 19 20:49:53.827616 2026] [:error] [pid 47773:tid 47828] [client 172.213.152.234:11180] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aeTPceiBHdnCJDuPq9A5tAAAAEw"]
[Sun Apr 19 20:49:55.306900 2026] [:error] [pid 47772:tid 47789] [client 172.213.152.234:11099] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aeTPc4c0L16cb4smAz-wGgAAAAA"]
[Sun Apr 19 20:49:58.049437 2026] [:error] [pid 47775:tid 47864] [client 172.213.152.234:11079] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aeTPdrmztjlk9tsmoewOYwAAAJU"]
[Sun Apr 19 20:49:59.821934 2026] [:error] [pid 47775:tid 47846] [client 172.213.152.234:11135] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aeTPd7mztjlk9tsmoewOaAAAAIM"]
[Sun Apr 19 20:50:01.207668 2026] [:error] [pid 15763:tid 15802] [client 172.213.152.234:11110] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aeTPebMXv1Y1THOoxaDuUQAAAgY"]
[Sun Apr 19 20:50:02.054203 2026] [:error] [pid 15693:tid 15698] [client 172.213.152.234:11035] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeTPesNMD-ccazQlTslXRQAAAUI"]
[Sun Apr 19 20:50:03.414838 2026] [:error] [pid 15764:tid 15848] [client 172.213.152.234:11218] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeTPe2LL_sqdSHoVp-QFSQAAAlY"]
[Sun Apr 19 20:50:04.228844 2026] [:error] [pid 15763:tid 15811] [client 172.213.152.234:11241] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeTPfLMXv1Y1THOoxaDuVgAAAg8"]
[Sun Apr 19 20:50:05.048552 2026] [:error] [pid 47886:tid 47898] [client 172.213.152.234:11163] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeTPfUSe8yiyuPrD7yNxtAAAAMo"]
[Sun Apr 19 20:50:05.713743 2026] [:error] [pid 15764:tid 15843] [client 172.213.152.234:11177] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aeTPfWLL_sqdSHoVp-QFTgAAAlE"]
[Sun Apr 19 20:50:06.296764 2026] [:error] [pid 15764:tid 15827] [client 172.213.152.234:11040] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aeTPfmLL_sqdSHoVp-QFUAAAAkE"]
[Sun Apr 19 20:50:07.087518 2026] [:error] [pid 15765:tid 15862] [client 172.213.152.234:11175] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aeTPf_Rqinw-W5EwQ772hgAAAok"]
[Sun Apr 19 20:50:07.646214 2026] [:error] [pid 15763:tid 15810] [client 172.213.152.234:11215] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aeTPf7MXv1Y1THOoxaDuWAAAAg4"]
[Sun Apr 19 20:50:08.414425 2026] [:error] [pid 47775:tid 47855] [client 172.213.152.234:11091] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeTPgLmztjlk9tsmoewOdgAAAIw"]
[Sun Apr 19 20:50:09.189768 2026] [:error] [pid 15763:tid 15807] [client 172.213.152.234:11016] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeTPgbMXv1Y1THOoxaDuYAAAAgs"]
[Sun Apr 19 20:50:09.885355 2026] [:error] [pid 47775:tid 47863] [client 172.213.152.234:11089] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeTPgbmztjlk9tsmoewOeQAAAJQ"]
[Sun Apr 19 20:50:10.659645 2026] [:error] [pid 15763:tid 15804] [client 172.213.152.234:11078] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeTPgrMXv1Y1THOoxaDuYwAAAgg"]
[Sun Apr 19 20:50:12.098935 2026] [:error] [pid 15763:tid 15813] [client 172.213.152.234:11020] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeTPhLMXv1Y1THOoxaDuZgAAAhE"]
[Sun Apr 19 20:50:12.901062 2026] [:error] [pid 15763:tid 15810] [client 172.213.152.234:11198] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeTPhLMXv1Y1THOoxaDuaQAAAg4"]
[Sun Apr 19 20:50:14.258648 2026] [:error] [pid 15764:tid 15827] [client 172.213.152.234:11117] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeTPhmLL_sqdSHoVp-QFXAAAAkE"]
[Sun Apr 19 20:50:15.317505 2026] [:error] [pid 15764:tid 15831] [client 172.213.152.234:11121] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeTPh2LL_sqdSHoVp-QFZAAAAkU"]
[Sun Apr 19 20:50:16.303557 2026] [:error] [pid 15760:tid 15790] [client 172.213.152.234:11187] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeTPiPSdD_XHQMJ_ISsYFAAAAdY"]
[Sun Apr 19 20:50:17.265766 2026] [:error] [pid 15760:tid 15780] [client 172.213.152.234:11119] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeTPifSdD_XHQMJ_ISsYGQAAAcw"]
[Sun Apr 19 20:50:17.853124 2026] [:error] [pid 15764:tid 15851] [client 172.213.152.234:11238] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeTPiWLL_sqdSHoVp-QFbAAAAlg"]
[Sun Apr 19 20:50:19.314939 2026] [:error] [pid 47772:tid 47798] [client 172.213.152.234:11191] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeTPi4c0L16cb4smAz-wOAAAAAk"]
[Sun Apr 19 20:50:20.155734 2026] [:error] [pid 47772:tid 47807] [client 172.213.152.234:11179] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aeTPjIc0L16cb4smAz-wPQAAABI"]
[Sun Apr 19 20:50:20.923117 2026] [:error] [pid 47772:tid 47790] [client 172.213.152.234:11118] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aeTPjIc0L16cb4smAz-wPwAAAAE"]
[Sun Apr 19 20:50:21.664151 2026] [:error] [pid 15763:tid 15820] [client 172.213.152.234:11065] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aeTPjbMXv1Y1THOoxaDucAAAAhg"]
[Sun Apr 19 20:50:22.522314 2026] [:error] [pid 15764:tid 15830] [client 172.213.152.234:11026] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aeTPjmLL_sqdSHoVp-QFdwAAAkQ"]
[Sun Apr 19 20:50:23.075966 2026] [:error] [pid 15764:tid 15839] [client 172.213.152.234:11216] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeTPj2LL_sqdSHoVp-QFeQAAAk0"]
[Sun Apr 19 20:50:23.861360 2026] [:error] [pid 15765:tid 15865] [client 172.213.152.234:11077] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeTPj_Rqinw-W5EwQ772jwAAAow"]
[Sun Apr 19 20:50:24.986787 2026] [:error] [pid 15763:tid 15819] [client 172.213.152.234:11077] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeTPkLMXv1Y1THOoxaDudQAAAhc"]
[Sun Apr 19 20:50:25.697519 2026] [:error] [pid 47772:tid 47813] [client 172.213.152.234:11070] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeTPkYc0L16cb4smAz-wQwAAABg"]
[Sun Apr 19 20:50:26.202309 2026] [:error] [pid 15764:tid 15832] [client 172.213.152.234:11031] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aeTPkmLL_sqdSHoVp-QFfgAAAkY"]
[Sun Apr 19 20:50:26.743981 2026] [:error] [pid 15764:tid 15843] [client 172.213.152.234:11123] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aeTPkmLL_sqdSHoVp-QFgwAAAlE"]
[Sun Apr 19 20:50:27.213312 2026] [:error] [pid 47772:tid 47809] [client 172.213.152.234:11052] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aeTPk4c0L16cb4smAz-wRAAAABQ"]
[Sun Apr 19 20:50:27.734326 2026] [:error] [pid 15764:tid 15842] [client 172.213.152.234:10945] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aeTPk2LL_sqdSHoVp-QFjQAAAlA"]
[Sun Apr 19 20:50:28.721477 2026] [:error] [pid 15764:tid 15835] [client 172.213.152.234:11134] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeTPlGLL_sqdSHoVp-QFlQAAAkk"]
[Sun Apr 19 20:50:29.756204 2026] [:error] [pid 15765:tid 15853] [client 172.213.152.234:11248] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeTPlfRqinw-W5EwQ772lAAAAoE"]
[Sun Apr 19 20:50:30.336341 2026] [:error] [pid 15760:tid 15777] [client 172.213.152.234:11106] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeTPlvSdD_XHQMJ_ISsYKwAAAck"]
[Sun Apr 19 20:50:30.808269 2026] [:error] [pid 15760:tid 15778] [client 172.213.152.234:11193] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeTPlvSdD_XHQMJ_ISsYLgAAAco"]
[Sun Apr 19 20:50:47.716715 2026] [:error] [pid 15694:tid 15739] [client 172.213.152.234:11251] [client 172.213.152.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aeTPp7imB-jol1fwqAoJHwAAAY0"]
[Sun Apr 19 20:50:50.677598 2026] [:error] [pid 47772:tid 47808] [client 172.213.152.234:10972] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aeTPqoc0L16cb4smAz-wcQAAABM"]
[Sun Apr 19 20:50:51.535485 2026] [:error] [pid 15763:tid 15797] [client 172.213.152.234:11190] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aeTPq7MXv1Y1THOoxaDuiwAAAgE"]
[Sun Apr 19 20:50:52.621367 2026] [:error] [pid 15763:tid 15817] [client 172.213.152.234:11111] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aeTPrLMXv1Y1THOoxaDujQAAAhU"]
[Sun Apr 19 20:50:53.170753 2026] [:error] [pid 47772:tid 47805] [client 172.213.152.234:11262] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aeTPrYc0L16cb4smAz-wdQAAABA"]
[Sun Apr 19 20:50:53.697548 2026] [:error] [pid 15760:tid 15769] [client 172.213.152.234:11195] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTPrfSdD_XHQMJ_ISsYaQAAAcE"]
[Sun Apr 19 20:50:54.451326 2026] [:error] [pid 15760:tid 15779] [client 172.213.152.234:11108] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTPrvSdD_XHQMJ_ISsYbQAAAcs"]
[Sun Apr 19 20:50:55.064320 2026] [:error] [pid 15763:tid 15799] [client 172.213.152.234:10961] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTPr7MXv1Y1THOoxaDulAAAAgM"]
[Sun Apr 19 20:50:55.625933 2026] [:error] [pid 15764:tid 15840] [client 172.213.152.234:11047] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTPr2LL_sqdSHoVp-QFoQAAAk4"]
[Sun Apr 19 20:50:56.220918 2026] [:error] [pid 47772:tid 47796] [client 172.213.152.234:11055] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeTPsIc0L16cb4smAz-wggAAAAc"]
[Sun Apr 19 20:50:56.830758 2026] [:error] [pid 15764:tid 15839] [client 172.213.152.234:11221] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeTPsGLL_sqdSHoVp-QFpAAAAk0"]
[Sun Apr 19 20:50:57.540187 2026] [:error] [pid 15693:tid 15719] [client 172.213.152.234:11100] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeTPscNMD-ccazQlTslXTwAAAVc"]
[Sun Apr 19 20:50:58.815715 2026] [:error] [pid 15760:tid 15785] [client 172.213.152.234:11022] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aeTPsvSdD_XHQMJ_ISsYdAAAAdE"]
[Sun Apr 19 20:51:00.401211 2026] [:error] [pid 15764:tid 15830] [client 172.213.152.234:11125] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeTPtGLL_sqdSHoVp-QFrQAAAkQ"]
[Sun Apr 19 20:51:01.663565 2026] [:error] [pid 15760:tid 15779] [client 172.213.152.234:11067] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeTPtfSdD_XHQMJ_ISsYeAAAAcs"]
[Sun Apr 19 20:51:02.691824 2026] [:error] [pid 15764:tid 15851] [client 172.213.152.234:10944] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeTPtmLL_sqdSHoVp-QFtwAAAlg"]
[Sun Apr 19 20:51:03.326135 2026] [:error] [pid 15764:tid 15829] [client 172.213.152.234:11069] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeTPt2LL_sqdSHoVp-QFuwAAAkM"]
[Sun Apr 19 20:51:03.880465 2026] [:error] [pid 15764:tid 15836] [client 172.213.152.234:10977] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeTPt2LL_sqdSHoVp-QFvwAAAko"]
[Sun Apr 19 20:51:04.675188 2026] [:error] [pid 15760:tid 15792] [client 172.213.152.234:11025] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeTPuPSdD_XHQMJ_ISsYfQAAAdg"]
[Sun Apr 19 20:51:05.210186 2026] [:error] [pid 15760:tid 15772] [client 172.213.152.234:10957] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeTPufSdD_XHQMJ_ISsYgAAAAcQ"]
[Sun Apr 19 20:51:05.699973 2026] [:error] [pid 15760:tid 15771] [client 172.213.152.234:11039] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeTPufSdD_XHQMJ_ISsYggAAAcM"]
[Sun Apr 19 20:51:06.252022 2026] [:error] [pid 47772:tid 47813] [client 172.213.152.234:11092] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aeTPuoc0L16cb4smAz-wlgAAABg"]
[Sun Apr 19 20:51:06.973796 2026] [:error] [pid 15764:tid 15843] [client 172.213.152.234:11170] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aeTPumLL_sqdSHoVp-QFyAAAAlE"]
[Sun Apr 19 20:51:07.594083 2026] [:error] [pid 15764:tid 15847] [client 172.213.152.234:11007] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aeTPu2LL_sqdSHoVp-QFzAAAAlU"]
[Sun Apr 19 20:51:08.074263 2026] [:error] [pid 15764:tid 15845] [client 172.213.152.234:11149] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aeTPvGLL_sqdSHoVp-QF0AAAAlM"]
[Sun Apr 19 20:51:08.687684 2026] [:error] [pid 15760:tid 15781] [client 172.213.152.234:11194] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeTPvPSdD_XHQMJ_ISsYjAAAAc0"]
[Sun Apr 19 20:51:09.706084 2026] [:error] [pid 15764:tid 15850] [client 172.213.152.234:11044] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeTPvWLL_sqdSHoVp-QF3QAAAlc"]
[Sun Apr 19 20:51:10.554703 2026] [:error] [pid 15760:tid 15778] [client 172.213.152.234:11199] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeTPvvSdD_XHQMJ_ISsYswAAAco"]
[Sun Apr 19 20:51:11.218220 2026] [:error] [pid 47772:tid 47794] [client 172.213.152.234:11061] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aeTPv4c0L16cb4smAz-wnQAAAAU"]
[Sun Apr 19 20:51:12.217022 2026] [:error] [pid 15760:tid 15787] [client 172.213.152.234:11131] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aeTPwPSdD_XHQMJ_ISsYtwAAAdM"]
[Sun Apr 19 20:51:16.175431 2026] [:error] [pid 15760:tid 15769] [client 172.213.152.234:11102] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aeTPxPSdD_XHQMJ_ISsYwgAAAcE"]
[Sun Apr 19 20:51:18.536245 2026] [:error] [pid 15760:tid 15777] [client 172.213.152.234:11009] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aeTPxvSdD_XHQMJ_ISsYyQAAAck"]
[Sun Apr 19 20:51:20.532040 2026] [:error] [pid 15763:tid 15799] [client 172.213.152.234:11074] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aeTPyLMXv1Y1THOoxaDuowAAAgM"]
[Sun Apr 19 20:51:23.027079 2026] [:error] [pid 47775:tid 47848] [client 172.213.152.234:11249] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aeTPy7mztjlk9tsmoewOpAAAAIU"]
[Sun Apr 19 20:51:28.914957 2026] [:error] [pid 15763:tid 15798] [client 172.213.152.234:11207] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aeTP0LMXv1Y1THOoxaDuqQAAAgI"]
[Sun Apr 19 20:51:29.583654 2026] [:error] [pid 15763:tid 15820] [client 172.213.152.234:11189] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aeTP0bMXv1Y1THOoxaDurwAAAhg"]
[Sun Apr 19 20:51:30.833199 2026] [:error] [pid 15763:tid 15800] [client 172.213.152.234:11229] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aeTP0rMXv1Y1THOoxaDusgAAAgQ"]
[Sun Apr 19 20:51:31.665900 2026] [:error] [pid 15763:tid 15811] [client 172.213.152.234:10962] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aeTP07MXv1Y1THOoxaDuvQAAAg8"]
[Sun Apr 19 20:51:32.185413 2026] [:error] [pid 47772:tid 47793] [client 172.213.152.234:11147] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aeTP1Ic0L16cb4smAz-wvAAAAAQ"]
[Sun Apr 19 20:51:33.066532 2026] [:error] [pid 15763:tid 15811] [client 172.213.152.234:11138] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aeTP1bMXv1Y1THOoxaDuzQAAAg8"]
[Sun Apr 19 20:51:33.557781 2026] [:error] [pid 47772:tid 47797] [client 172.213.152.234:10976] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aeTP1Yc0L16cb4smAz-wxgAAAAg"]
[Sun Apr 19 20:51:34.088080 2026] [:error] [pid 15763:tid 15815] [client 172.213.152.234:11237] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeTP1rMXv1Y1THOoxaDuzwAAAhM"]
[Sun Apr 19 20:51:34.572974 2026] [:error] [pid 15760:tid 15780] [client 172.213.152.234:11261] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeTP1vSdD_XHQMJ_ISsY1wAAAcw"]
[Sun Apr 19 20:51:35.162770 2026] [:error] [pid 15760:tid 15783] [client 172.213.152.234:11219] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeTP1_SdD_XHQMJ_ISsY2wAAAc8"]
[Sun Apr 19 20:51:35.689463 2026] [:error] [pid 15760:tid 15770] [client 172.213.152.234:11071] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeTP1_SdD_XHQMJ_ISsY3QAAAcI"]
[Sun Apr 19 20:51:36.210445 2026] [:error] [pid 15760:tid 15787] [client 172.213.152.234:11042] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeTP2PSdD_XHQMJ_ISsY3wAAAdM"]
[Sun Apr 19 20:51:37.344129 2026] [:error] [pid 15763:tid 15812] [client 172.213.152.234:11231] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeTP2bMXv1Y1THOoxaDu0gAAAhA"]
[Sun Apr 19 20:51:38.325213 2026] [:error] [pid 47886:tid 47906] [client 172.213.152.234:11142] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeTP2kSe8yiyuPrD7yNx8AAAANI"]
[Sun Apr 19 20:51:38.953835 2026] [:error] [pid 15763:tid 15805] [client 172.213.152.234:11027] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeTP2rMXv1Y1THOoxaDu2gAAAgk"]
[Sun Apr 19 20:51:39.642101 2026] [:error] [pid 15764:tid 15847] [client 172.213.152.234:11164] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeTP22LL_sqdSHoVp-QF-wAAAlU"]
[Sun Apr 19 20:51:40.349343 2026] [:error] [pid 15764:tid 15841] [client 172.213.152.234:11204] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeTP3GLL_sqdSHoVp-QF_AAAAk8"]
[Sun Apr 19 20:51:41.266253 2026] [:error] [pid 15760:tid 15786] [client 172.213.152.234:11126] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeTP3fSdD_XHQMJ_ISsY6wAAAdI"]
[Sun Apr 19 20:51:41.778718 2026] [:error] [pid 15764:tid 15850] [client 172.213.152.234:11021] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeTP3WLL_sqdSHoVp-QF_wAAAlc"]
[Sun Apr 19 20:51:42.376821 2026] [:error] [pid 15760:tid 15789] [client 172.213.152.234:10960] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeTP3vSdD_XHQMJ_ISsY8QAAAdU"]
[Sun Apr 19 20:51:42.937829 2026] [:error] [pid 15760:tid 15769] [client 172.213.152.234:11228] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeTP3vSdD_XHQMJ_ISsY9gAAAcE"]
[Sun Apr 19 20:51:43.770485 2026] [:error] [pid 15760:tid 15779] [client 172.213.152.234:11060] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeTP3_SdD_XHQMJ_ISsY-QAAAcs"]
[Sun Apr 19 20:51:44.950246 2026] [:error] [pid 15764:tid 15836] [client 172.213.152.234:11258] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeTP4GLL_sqdSHoVp-QGBgAAAko"]
[Sun Apr 19 20:51:45.763382 2026] [:error] [pid 15760:tid 15773] [client 172.213.152.234:11254] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeTP4fSdD_XHQMJ_ISsZBAAAAcU"]
[Sun Apr 19 20:51:46.546680 2026] [:error] [pid 15764:tid 15844] [client 172.213.152.234:11224] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeTP4mLL_sqdSHoVp-QGDAAAAlI"]
[Sun Apr 19 20:51:47.342026 2026] [:error] [pid 15760:tid 15791] [client 172.213.152.234:11255] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeTP4_SdD_XHQMJ_ISsZCQAAAdc"]
[Sun Apr 19 20:51:47.879008 2026] [:error] [pid 15764:tid 15837] [client 172.213.152.234:11103] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeTP42LL_sqdSHoVp-QGEAAAAks"]
[Sun Apr 19 20:51:48.488713 2026] [:error] [pid 15760:tid 15768] [client 172.213.152.234:11168] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aeTP5PSdD_XHQMJ_ISsZDAAAAcA"]
[Sun Apr 19 20:51:50.621909 2026] [autoindex:error] [pid 15763:tid 15817] [client 172.213.152.234:11109] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 20:51:52.136861 2026] [autoindex:error] [pid 15763:tid 15796] [client 172.213.152.234:11109] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 20:51:58.850066 2026] [autoindex:error] [pid 15763:tid 15812] [client 172.213.152.234:11109] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 19 20:52:05.665106 2026] [:error] [pid 15763:tid 15807] [client 172.213.152.234:11109] [client 172.213.152.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeTP9bMXv1Y1THOoxaDvAQAAAgs"]
[Sun Apr 19 20:52:06.205535 2026] [:error] [pid 15694:tid 15741] [client 172.213.152.234:11169] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeTP9rimB-jol1fwqAoJMQAAAY8"]
[Sun Apr 19 20:52:06.740973 2026] [:error] [pid 15760:tid 15768] [client 172.213.152.234:11230] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeTP9vSdD_XHQMJ_ISsZMgAAAcA"]
[Sun Apr 19 20:52:07.439372 2026] [:error] [pid 15760:tid 15789] [client 172.213.152.234:11203] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeTP9_SdD_XHQMJ_ISsZOAAAAdU"]
[Sun Apr 19 20:52:08.273267 2026] [:error] [pid 15760:tid 15773] [client 172.213.152.234:11048] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeTP-PSdD_XHQMJ_ISsZPQAAAcU"]
[Sun Apr 19 20:52:08.980181 2026] [:error] [pid 15760:tid 15785] [client 172.213.152.234:11256] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeTP-PSdD_XHQMJ_ISsZPwAAAdE"]
[Sun Apr 19 20:52:09.533902 2026] [:error] [pid 47886:tid 47911] [client 172.213.152.234:11246] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeTP-USe8yiyuPrD7yNyAAAAANc"]
[Sun Apr 19 20:52:10.093321 2026] [:error] [pid 15760:tid 15771] [client 172.213.152.234:11143] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeTP-vSdD_XHQMJ_ISsZRgAAAcM"]
[Sun Apr 19 20:52:10.752138 2026] [:error] [pid 15693:tid 15718] [client 172.213.152.234:11053] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeTP-sNMD-ccazQlTslXYAAAAVY"]
[Sun Apr 19 20:52:11.718127 2026] [:error] [pid 15760:tid 15790] [client 172.213.152.234:11073] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeTP-_SdD_XHQMJ_ISsZTAAAAdY"]
[Sun Apr 19 20:52:12.261196 2026] [:error] [pid 15763:tid 15796] [client 172.213.152.234:11112] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeTP_LMXv1Y1THOoxaDvBwAAAgA"]
[Sun Apr 19 20:52:13.001149 2026] [:error] [pid 15760:tid 15791] [client 172.213.152.234:11043] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeTP_fSdD_XHQMJ_ISsZUwAAAdc"]
[Sun Apr 19 20:52:13.589169 2026] [:error] [pid 15763:tid 15806] [client 172.213.152.234:11220] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aeTP_bMXv1Y1THOoxaDvCwAAAgo"]
[Sun Apr 19 20:52:14.116927 2026] [:error] [pid 15693:tid 15713] [client 172.213.152.234:11028] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aeTP_sNMD-ccazQlTslXYgAAAVE"]
[Sun Apr 19 20:52:15.008006 2026] [:error] [pid 15765:tid 15857] [client 172.213.152.234:11057] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aeTP__Rqinw-W5EwQ772ywAAAoQ"]
[Sun Apr 19 20:52:15.559049 2026] [:error] [pid 47773:tid 47826] [client 172.213.152.234:11008] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prv8.php"] [unique_id "aeTP_-iBHdnCJDuPq9A5_gAAAEo"]
[Sun Apr 19 20:52:16.070382 2026] [:error] [pid 47772:tid 47802] [client 172.213.152.234:11049] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeTQAIc0L16cb4smAz-xAQAAAA0"]
[Sun Apr 19 20:52:16.709631 2026] [:error] [pid 15760:tid 15771] [client 172.213.152.234:11013] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeTQAPSdD_XHQMJ_ISsZXAAAAcM"]
[Sun Apr 19 20:52:17.351535 2026] [:error] [pid 47772:tid 47795] [client 172.213.152.234:11075] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeTQAYc0L16cb4smAz-xBgAAAAY"]
[Sun Apr 19 20:52:18.130072 2026] [:error] [pid 15763:tid 15801] [client 172.213.152.234:10997] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeTQArMXv1Y1THOoxaDvHQAAAgU"]
[Sun Apr 19 20:52:19.186460 2026] [:error] [pid 15763:tid 15812] [client 172.213.152.234:11059] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aeTQA7MXv1Y1THOoxaDvJQAAAhA"]
[Sun Apr 19 20:52:20.460761 2026] [:error] [pid 15764:tid 15844] [client 172.213.152.234:11097] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aeTQBGLL_sqdSHoVp-QGYwAAAlI"]
[Sun Apr 19 20:52:21.676779 2026] [:error] [pid 15763:tid 15799] [client 172.213.152.234:11208] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aeTQBbMXv1Y1THOoxaDvLAAAAgM"]
[Sun Apr 19 20:52:23.002648 2026] [:error] [pid 15763:tid 15796] [client 172.213.152.234:11151] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aeTQB7MXv1Y1THOoxaDvLgAAAgA"]
[Sun Apr 19 20:52:24.095209 2026] [:error] [pid 47772:tid 47809] [client 172.213.152.234:11243] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aeTQCIc0L16cb4smAz-xKAAAABQ"]
[Sun Apr 19 20:52:24.697380 2026] [:error] [pid 47772:tid 47792] [client 172.213.152.234:11145] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aeTQCIc0L16cb4smAz-xLQAAAAM"]
[Sun Apr 19 20:52:25.298151 2026] [:error] [pid 15763:tid 15809] [client 172.213.152.234:11155] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aeTQCbMXv1Y1THOoxaDvNAAAAg0"]
[Sun Apr 19 20:52:25.830057 2026] [:error] [pid 15760:tid 15771] [client 172.213.152.234:11056] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "aeTQCfSdD_XHQMJ_ISsZcwAAAcM"]
[Sun Apr 19 20:52:26.532615 2026] [:error] [pid 15760:tid 15790] [client 172.213.152.234:11225] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aeTQCvSdD_XHQMJ_ISsZfAAAAdY"]
[Sun Apr 19 20:52:27.101361 2026] [:error] [pid 15760:tid 15782] [client 172.213.152.234:11031] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aeTQC_SdD_XHQMJ_ISsZgQAAAc4"]
[Sun Apr 19 20:52:27.764432 2026] [:error] [pid 15760:tid 15782] [client 172.213.152.234:11096] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aeTQC_SdD_XHQMJ_ISsZigAAAc4"]
[Sun Apr 19 20:52:28.303232 2026] [:error] [pid 15760:tid 15777] [client 172.213.152.234:11018] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aeTQDPSdD_XHQMJ_ISsZkAAAAck"]
[Sun Apr 19 20:52:28.846410 2026] [:error] [pid 47773:tid 47827] [client 172.213.152.234:11240] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aeTQDOiBHdnCJDuPq9A6EgAAAEs"]
[Sun Apr 19 20:52:29.385440 2026] [:error] [pid 47772:tid 47804] [client 172.213.152.234:11200] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aeTQDYc0L16cb4smAz-xNAAAAA8"]
[Sun Apr 19 20:52:29.983447 2026] [:error] [pid 15694:tid 15747] [client 172.213.152.234:11176] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aeTQDbimB-jol1fwqAoJRAAAAZU"]
[Sun Apr 19 20:52:30.544876 2026] [:error] [pid 15763:tid 15819] [client 172.213.152.234:11146] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aeTQDrMXv1Y1THOoxaDvOQAAAhc"]
[Sun Apr 19 20:52:31.011155 2026] [:error] [pid 15763:tid 15820] [client 172.213.152.234:11063] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aeTQD7MXv1Y1THOoxaDvPAAAAhg"]
[Sun Apr 19 20:52:31.968434 2026] [:error] [pid 15764:tid 15845] [client 172.213.152.234:10967] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aeTQD2LL_sqdSHoVp-QGkQAAAlM"]
[Sun Apr 19 20:52:32.789476 2026] [:error] [pid 15764:tid 15844] [client 172.213.152.234:11152] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aeTQEGLL_sqdSHoVp-QGlwAAAlI"]
[Sun Apr 19 20:52:33.977315 2026] [:error] [pid 47772:tid 47789] [client 172.213.152.234:11239] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/motu.php"] [unique_id "aeTQEYc0L16cb4smAz-xOQAAAAA"]
[Sun Apr 19 20:52:35.725973 2026] [:error] [pid 47772:tid 47800] [client 172.213.152.234:11226] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aeTQE4c0L16cb4smAz-xQAAAAAs"]
[Sun Apr 19 20:52:36.495433 2026] [:error] [pid 15764:tid 15840] [client 172.213.152.234:11226] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aeTQFGLL_sqdSHoVp-QGpwAAAk4"]
[Sun Apr 19 20:52:37.486465 2026] [:error] [pid 15764:tid 15832] [client 172.213.152.234:11019] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aeTQFWLL_sqdSHoVp-QGrAAAAkY"]
[Sun Apr 19 20:52:38.366406 2026] [:error] [pid 15764:tid 15831] [client 172.213.152.234:11064] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aeTQFmLL_sqdSHoVp-QGsgAAAkU"]
[Sun Apr 19 20:52:39.232911 2026] [:error] [pid 15760:tid 15785] [client 172.213.152.234:10995] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "aeTQF_SdD_XHQMJ_ISsZqAAAAdE"]
[Sun Apr 19 20:52:40.676700 2026] [:error] [pid 47886:tid 47895] [client 172.213.152.234:11130] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "aeTQGESe8yiyuPrD7yNyCAAAAMc"]
[Sun Apr 19 20:52:41.761334 2026] [:error] [pid 47772:tid 47803] [client 172.213.152.234:11081] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "aeTQGYc0L16cb4smAz-xXwAAAA4"]
[Sun Apr 19 20:52:42.807476 2026] [:error] [pid 47772:tid 47807] [client 172.213.152.234:11250] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bengi.php"] [unique_id "aeTQGoc0L16cb4smAz-xawAAABI"]
[Sun Apr 19 20:52:43.754910 2026] [:error] [pid 15763:tid 15803] [client 172.213.152.234:11257] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTQG7MXv1Y1THOoxaDvVgAAAgc"]
[Sun Apr 19 20:52:44.833042 2026] [:error] [pid 47772:tid 47809] [client 172.213.152.234:10881] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTQHIc0L16cb4smAz-xdwAAABQ"]
[Sun Apr 19 20:52:46.268676 2026] [:error] [pid 15765:tid 15865] [client 172.213.152.234:11232] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTQHvRqinw-W5EwQ7721wAAAow"]
[Sun Apr 19 20:52:48.504509 2026] [:error] [pid 15693:tid 15712] [client 172.213.152.234:11156] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTQIMNMD-ccazQlTslXZgAAAVA"]
[Sun Apr 19 20:52:52.025157 2026] [:error] [pid 15760:tid 15783] [client 172.213.152.234:11066] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aeTQJPSdD_XHQMJ_ISsZzAAAAc8"]
[Sun Apr 19 20:52:53.606016 2026] [:error] [pid 15694:tid 15725] [client 172.213.152.234:11202] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aeTQJbimB-jol1fwqAoJWAAAAYI"]
[Sun Apr 19 20:52:54.936334 2026] [:error] [pid 47775:tid 47857] [client 172.213.152.234:11167] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aeTQJrmztjlk9tsmoewO5AAAAI4"]
[Sun Apr 19 20:52:55.718923 2026] [:error] [pid 15760:tid 15772] [client 172.213.152.234:11141] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aeTQJ_SdD_XHQMJ_ISsZ1QAAAcQ"]
[Sun Apr 19 20:52:56.399886 2026] [:error] [pid 15763:tid 15804] [client 172.213.152.234:11188] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aeTQKLMXv1Y1THOoxaDvbgAAAgg"]
[Sun Apr 19 20:52:57.433355 2026] [:error] [pid 47886:tid 47911] [client 172.213.152.234:11010] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aeTQKUSe8yiyuPrD7yNyGwAAANc"]
[Sun Apr 19 20:52:58.250393 2026] [:error] [pid 15760:tid 15787] [client 172.213.152.234:11076] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aeTQKvSdD_XHQMJ_ISsZ4AAAAdM"]
[Sun Apr 19 20:52:58.866166 2026] [:error] [pid 15693:tid 15706] [client 172.213.152.234:11201] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aeTQKsNMD-ccazQlTslXhAAAAUo"]
[Sun Apr 19 20:52:59.447851 2026] [:error] [pid 15763:tid 15802] [client 172.213.152.234:10987] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeTQK7MXv1Y1THOoxaDvdgAAAgY"]
[Sun Apr 19 20:53:00.053908 2026] [:error] [pid 15763:tid 15809] [client 172.213.152.234:11058] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeTQLLMXv1Y1THOoxaDvewAAAg0"]
[Sun Apr 19 20:53:00.718405 2026] [:error] [pid 47775:tid 47856] [client 172.213.152.234:11136] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeTQLLmztjlk9tsmoewO6gAAAI0"]
[Sun Apr 19 20:53:01.596542 2026] [:error] [pid 47773:tid 47822] [client 172.213.152.234:11054] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeTQLeiBHdnCJDuPq9A6MgAAAEY"]
[Sun Apr 19 20:53:02.163323 2026] [:error] [pid 47775:tid 47861] [client 172.213.152.234:11058] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeTQLrmztjlk9tsmoewO8AAAAJI"]
[Sun Apr 19 20:53:02.859964 2026] [:error] [pid 15693:tid 15700] [client 172.213.152.234:11104] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeTQLsNMD-ccazQlTslXmAAAAUQ"]
[Sun Apr 19 20:53:03.870521 2026] [:error] [pid 15694:tid 15743] [client 172.213.152.234:10949] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeTQL7imB-jol1fwqAoJZgAAAZE"]
[Sun Apr 19 20:53:18.865658 2026] [:error] [pid 15763:tid 15803] [client 172.213.152.234:11173] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeTQPrMXv1Y1THOoxaDvvQAAAgc"]
[Sun Apr 19 20:53:21.033289 2026] [:error] [pid 15764:tid 15846] [client 172.213.152.234:11209] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeTQQWLL_sqdSHoVp-QHLQAAAlQ"]
[Sun Apr 19 20:53:22.337847 2026] [:error] [pid 47772:tid 47789] [client 172.213.152.234:11253] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeTQQoc0L16cb4smAz-x2wAAAAA"]
[Sun Apr 19 20:53:23.531642 2026] [:error] [pid 15764:tid 15851] [client 172.213.152.234:11030] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeTQQ2LL_sqdSHoVp-QHNAAAAlg"]
[Sun Apr 19 20:53:24.423484 2026] [:error] [pid 15763:tid 15819] [client 172.213.152.234:11154] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "aeTQRLMXv1Y1THOoxaDvvwAAAhc"]
[Sun Apr 19 20:53:25.340968 2026] [:error] [pid 15760:tid 15779] [client 172.213.152.234:11181] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "aeTQRfSdD_XHQMJ_ISsZ8wAAAcs"]
[Sun Apr 19 20:53:26.110501 2026] [:error] [pid 15764:tid 15833] [client 172.213.152.234:11107] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "aeTQRmLL_sqdSHoVp-QHPgAAAkc"]
[Sun Apr 19 20:53:26.848844 2026] [:error] [pid 47775:tid 47854] [client 172.213.152.234:11082] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x1da.php"] [unique_id "aeTQRrmztjlk9tsmoewPEwAAAIs"]
[Sun Apr 19 20:53:27.553477 2026] [:error] [pid 47775:tid 47849] [client 172.213.152.234:10993] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aeTQR7mztjlk9tsmoewPFwAAAIY"]
[Sun Apr 19 20:53:28.172467 2026] [:error] [pid 15764:tid 15838] [client 172.213.152.234:11086] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aeTQSGLL_sqdSHoVp-QHQAAAAkw"]
[Sun Apr 19 20:53:29.373816 2026] [:error] [pid 15764:tid 15833] [client 172.213.152.234:11150] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aeTQSWLL_sqdSHoVp-QHRQAAAkc"]
[Sun Apr 19 20:53:35.260730 2026] [:error] [pid 47773:tid 47823] [client 172.213.152.234:11062] [client 172.213.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jp.php"] [unique_id "aeTQT-iBHdnCJDuPq9A6WgAAAEc"]
[Sun Apr 19 22:04:09.332910 2026] [:error] [pid 47772:tid 47809] [client 138.68.5.226:50303] [client 138.68.5.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeTg2Yc0L16cb4smAz_K3gAAABQ"]
[Sun Apr 19 22:50:49.810052 2026] [:error] [pid 15760:tid 15790] [client 146.70.194.222:45484] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeTryfSdD_XHQMJ_IStfogAAAdY"]
[Sun Apr 19 22:50:50.328331 2026] [:error] [pid 15764:tid 15838] [client 146.70.194.222:46254] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeTrymLL_sqdSHoVp-Q6WgAAAkw"]
[Sun Apr 19 22:50:50.846786 2026] [:error] [pid 15764:tid 15837] [client 146.70.194.222:47128] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aeTrymLL_sqdSHoVp-Q6ZAAAAks"]
[Sun Apr 19 23:35:27.243617 2026] [:error] [pid 15764:tid 15851] [client 20.251.192.228:8162] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oti.php"] [unique_id "aeT2P2LL_sqdSHoVp-RI-QAAAlg"]
[Sun Apr 19 23:35:27.957321 2026] [:error] [pid 15764:tid 15837] [client 20.251.192.228:8182] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oti.php"] [unique_id "aeT2P2LL_sqdSHoVp-RI-gAAAks"]
[Sun Apr 19 23:35:28.597489 2026] [:error] [pid 15760:tid 15782] [client 20.251.192.228:8158] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oti.php"] [unique_id "aeT2QPSdD_XHQMJ_ISt1dwAAAc4"]
[Sun Apr 19 23:35:29.498022 2026] [:error] [pid 15764:tid 15834] [client 20.251.192.228:8180] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oti.php"] [unique_id "aeT2QWLL_sqdSHoVp-RI-wAAAkg"]
[Sun Apr 19 23:35:30.182607 2026] [:error] [pid 47773:tid 47825] [client 20.251.192.228:8134] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b7cdb465.php"] [unique_id "aeT2QuiBHdnCJDuPq9BfzQAAAEk"]
[Sun Apr 19 23:35:30.975553 2026] [:error] [pid 47775:tid 47848] [client 20.251.192.228:8133] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b7cdb465.php"] [unique_id "aeT2Qrmztjlk9tsmoewviwAAAIU"]
[Sun Apr 19 23:35:31.652133 2026] [:error] [pid 47773:tid 47816] [client 20.251.192.228:8065] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b7cdb465.php"] [unique_id "aeT2Q-iBHdnCJDuPq9Bf0AAAAEA"]
[Sun Apr 19 23:35:32.407502 2026] [:error] [pid 15760:tid 15773] [client 20.251.192.228:8178] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b7cdb465.php"] [unique_id "aeT2RPSdD_XHQMJ_ISt1fQAAAcU"]
[Sun Apr 19 23:35:32.949562 2026] [:error] [pid 15693:tid 15720] [client 20.251.192.228:8082] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxiviLDIot.php"] [unique_id "aeT2RMNMD-ccazQlTsln4AAAAVg"]
[Sun Apr 19 23:35:33.559442 2026] [:error] [pid 15765:tid 15862] [client 20.251.192.228:8169] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxiviLDIot.php"] [unique_id "aeT2RfRqinw-W5EwQ74OSwAAAok"]
[Sun Apr 19 23:35:34.187116 2026] [:error] [pid 15764:tid 15838] [client 20.251.192.228:8069] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxiviLDIot.php"] [unique_id "aeT2RmLL_sqdSHoVp-RI_gAAAkw"]
[Sun Apr 19 23:35:34.871987 2026] [:error] [pid 15764:tid 15836] [client 20.251.192.228:8067] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxiviLDIot.php"] [unique_id "aeT2RmLL_sqdSHoVp-RJAAAAAko"]
[Sun Apr 19 23:35:35.551643 2026] [:error] [pid 47772:tid 47794] [client 20.251.192.228:8151] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upll22.php"] [unique_id "aeT2R4c0L16cb4smAz_mpAAAAAU"]
[Sun Apr 19 23:35:36.194788 2026] [:error] [pid 15760:tid 15778] [client 20.251.192.228:8152] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upll22.php"] [unique_id "aeT2SPSdD_XHQMJ_ISt1hQAAAco"]
[Sun Apr 19 23:35:36.935004 2026] [:error] [pid 47773:tid 47832] [client 20.251.192.228:8156] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upll22.php"] [unique_id "aeT2SOiBHdnCJDuPq9Bf2gAAAFA"]
[Sun Apr 19 23:35:37.781848 2026] [:error] [pid 47773:tid 47833] [client 20.251.192.228:8191] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upll22.php"] [unique_id "aeT2SeiBHdnCJDuPq9Bf3QAAAFE"]
[Sun Apr 19 23:35:38.542657 2026] [:error] [pid 15760:tid 15772] [client 20.251.192.228:8025] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeT2SvSdD_XHQMJ_ISt1iQAAAcQ"]
[Sun Apr 19 23:35:39.672932 2026] [:error] [pid 15760:tid 15779] [client 20.251.192.228:8143] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeT2S_SdD_XHQMJ_ISt1igAAAcs"]
[Sun Apr 19 23:35:40.909036 2026] [:error] [pid 15760:tid 15768] [client 20.251.192.228:8154] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeT2TPSdD_XHQMJ_ISt1jQAAAcA"]
[Sun Apr 19 23:35:41.899563 2026] [:error] [pid 15760:tid 15771] [client 20.251.192.228:8095] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeT2TfSdD_XHQMJ_ISt1kAAAAcM"]
[Sun Apr 19 23:35:42.866284 2026] [:error] [pid 15760:tid 15782] [client 20.251.192.228:8150] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yee.php"] [unique_id "aeT2TvSdD_XHQMJ_ISt1mAAAAc4"]
[Sun Apr 19 23:35:43.690933 2026] [:error] [pid 15760:tid 15786] [client 20.251.192.228:8070] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yee.php"] [unique_id "aeT2T_SdD_XHQMJ_ISt1mwAAAdI"]
[Sun Apr 19 23:35:44.601640 2026] [:error] [pid 15760:tid 15774] [client 20.251.192.228:8098] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yee.php"] [unique_id "aeT2UPSdD_XHQMJ_ISt1pAAAAcY"]
[Sun Apr 19 23:35:45.269979 2026] [:error] [pid 15694:tid 15751] [client 20.251.192.228:8039] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yee.php"] [unique_id "aeT2UbimB-jol1fwqAodlAAAAZg"]
[Sun Apr 19 23:35:46.092303 2026] [:error] [pid 15760:tid 15770] [client 20.251.192.228:8123] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php.php"] [unique_id "aeT2UvSdD_XHQMJ_ISt1rQAAAcI"]
[Sun Apr 19 23:35:46.935060 2026] [:error] [pid 15760:tid 15789] [client 20.251.192.228:8068] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php.php"] [unique_id "aeT2UvSdD_XHQMJ_ISt1sQAAAdU"]
[Sun Apr 19 23:35:47.660250 2026] [:error] [pid 15760:tid 15780] [client 20.251.192.228:8079] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php.php"] [unique_id "aeT2U_SdD_XHQMJ_ISt1uwAAAcw"]
[Sun Apr 19 23:35:48.488024 2026] [:error] [pid 15764:tid 15835] [client 20.251.192.228:8132] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php.php"] [unique_id "aeT2VGLL_sqdSHoVp-RJDgAAAkk"]
[Sun Apr 19 23:35:49.116338 2026] [:error] [pid 15765:tid 15873] [client 20.251.192.228:8138] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aeT2VfRqinw-W5EwQ74OVAAAApQ"]
[Sun Apr 19 23:35:49.743216 2026] [:error] [pid 15760:tid 15787] [client 20.251.192.228:8113] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aeT2VfSdD_XHQMJ_ISt1yAAAAdM"]
[Sun Apr 19 23:35:50.407119 2026] [:error] [pid 15760:tid 15779] [client 20.251.192.228:8083] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aeT2VvSdD_XHQMJ_ISt1zAAAAcs"]
[Sun Apr 19 23:35:51.133164 2026] [:error] [pid 47775:tid 47850] [client 20.251.192.228:8135] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "aeT2V7mztjlk9tsmoewvlgAAAIc"]
[Sun Apr 19 23:35:52.010442 2026] [:error] [pid 15760:tid 15769] [client 20.251.192.228:8163] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dgmry.php"] [unique_id "aeT2WPSdD_XHQMJ_ISt11wAAAcE"]
[Sun Apr 19 23:35:52.770301 2026] [:error] [pid 15694:tid 15734] [client 20.251.192.228:8189] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dgmry.php"] [unique_id "aeT2WLimB-jol1fwqAodmAAAAYg"]
[Sun Apr 19 23:35:53.561350 2026] [:error] [pid 15765:tid 15874] [client 20.251.192.228:8096] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dgmry.php"] [unique_id "aeT2WfRqinw-W5EwQ74OVwAAApU"]
[Sun Apr 19 23:35:54.400686 2026] [:error] [pid 47886:tid 47909] [client 20.251.192.228:8130] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dgmry.php"] [unique_id "aeT2WkSe8yiyuPrD7yOLbAAAANU"]
[Sun Apr 19 23:35:55.545955 2026] [:error] [pid 47886:tid 47898] [client 20.251.192.228:8144] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/itlvk.php"] [unique_id "aeT2W0Se8yiyuPrD7yOLbwAAAMo"]
[Sun Apr 19 23:35:56.249508 2026] [:error] [pid 15765:tid 15864] [client 20.251.192.228:8171] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/itlvk.php"] [unique_id "aeT2XPRqinw-W5EwQ74OXAAAAos"]
[Sun Apr 19 23:35:56.858675 2026] [:error] [pid 15764:tid 15843] [client 20.251.192.228:8007] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/itlvk.php"] [unique_id "aeT2XGLL_sqdSHoVp-RJFQAAAlE"]
[Sun Apr 19 23:35:57.567495 2026] [:error] [pid 15693:tid 15705] [client 20.251.192.228:8145] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/itlvk.php"] [unique_id "aeT2XcNMD-ccazQlTsln5gAAAUk"]
[Sun Apr 19 23:35:58.110790 2026] [:error] [pid 15764:tid 15828] [client 20.251.192.228:8131] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ai.php"] [unique_id "aeT2XmLL_sqdSHoVp-RJGAAAAkI"]
[Sun Apr 19 23:35:58.856793 2026] [:error] [pid 47775:tid 47865] [client 20.251.192.228:8129] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ai.php"] [unique_id "aeT2Xrmztjlk9tsmoewvmwAAAJY"]
[Sun Apr 19 23:35:59.644517 2026] [:error] [pid 47775:tid 47849] [client 20.251.192.228:8186] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ai.php"] [unique_id "aeT2X7mztjlk9tsmoewvngAAAIY"]
[Sun Apr 19 23:36:00.283700 2026] [:error] [pid 15763:tid 15801] [client 20.251.192.228:8086] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ai.php"] [unique_id "aeT2YLMXv1Y1THOoxaAdFQAAAgU"]
[Sun Apr 19 23:36:00.926088 2026] [:error] [pid 15763:tid 15799] [client 20.251.192.228:8073] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ovajelmxf.php"] [unique_id "aeT2YLMXv1Y1THOoxaAdFgAAAgM"]
[Sun Apr 19 23:36:01.644938 2026] [:error] [pid 47773:tid 47823] [client 20.251.192.228:8188] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ovajelmxf.php"] [unique_id "aeT2YeiBHdnCJDuPq9Bf6QAAAEc"]
[Sun Apr 19 23:36:02.295590 2026] [:error] [pid 15763:tid 15806] [client 20.251.192.228:8155] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ovajelmxf.php"] [unique_id "aeT2YrMXv1Y1THOoxaAdGgAAAgo"]
[Sun Apr 19 23:36:02.980644 2026] [:error] [pid 47773:tid 47835] [client 20.251.192.228:8076] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ovajelmxf.php"] [unique_id "aeT2YuiBHdnCJDuPq9Bf7AAAAFM"]
[Sun Apr 19 23:36:03.575333 2026] [:error] [pid 15763:tid 15811] [client 20.251.192.228:8072] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aeT2Y7MXv1Y1THOoxaAdGwAAAg8"]
[Sun Apr 19 23:36:06.922615 2026] [:error] [pid 15693:tid 15696] [client 20.251.192.228:8164] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aeT2ZsNMD-ccazQlTsln7QAAAUA"]
[Sun Apr 19 23:36:07.587811 2026] [:error] [pid 15760:tid 15780] [client 20.251.192.228:8009] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aeT2Z_SdD_XHQMJ_ISt14QAAAcw"]
[Sun Apr 19 23:36:08.198761 2026] [:error] [pid 15760:tid 15782] [client 20.251.192.228:8183] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/erty.php"] [unique_id "aeT2aPSdD_XHQMJ_ISt14gAAAc4"]
[Sun Apr 19 23:36:09.036826 2026] [:error] [pid 15763:tid 15804] [client 20.251.192.228:8166] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aeT2abMXv1Y1THOoxaAdIgAAAgg"]
[Sun Apr 19 23:36:09.730354 2026] [:error] [pid 15764:tid 15834] [client 20.251.192.228:8088] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aeT2aWLL_sqdSHoVp-RJJAAAAkg"]
[Sun Apr 19 23:36:10.439280 2026] [:error] [pid 47886:tid 47891] [client 20.251.192.228:8118] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aeT2akSe8yiyuPrD7yOLegAAAMM"]
[Sun Apr 19 23:36:10.999344 2026] [:error] [pid 47886:tid 47894] [client 20.251.192.228:8185] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/nc4.php"] [unique_id "aeT2akSe8yiyuPrD7yOLfAAAAMY"]
[Sun Apr 19 23:36:11.740722 2026] [:error] [pid 15760:tid 15769] [client 20.251.192.228:8080] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clcdu.php"] [unique_id "aeT2a_SdD_XHQMJ_ISt15gAAAcE"]
[Sun Apr 19 23:36:12.487414 2026] [:error] [pid 47773:tid 47821] [client 20.251.192.228:8177] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clcdu.php"] [unique_id "aeT2bOiBHdnCJDuPq9Bf9AAAAEU"]
[Sun Apr 19 23:36:13.222979 2026] [:error] [pid 47773:tid 47828] [client 20.251.192.228:8159] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clcdu.php"] [unique_id "aeT2beiBHdnCJDuPq9Bf9gAAAEw"]
[Sun Apr 19 23:36:14.018488 2026] [:error] [pid 47886:tid 47905] [client 20.251.192.228:8167] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clcdu.php"] [unique_id "aeT2bkSe8yiyuPrD7yOLfQAAANE"]
[Sun Apr 19 23:36:14.721162 2026] [:error] [pid 47772:tid 47798] [client 20.251.192.228:8066] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kandw.php"] [unique_id "aeT2boc0L16cb4smAz_msAAAAAk"]
[Sun Apr 19 23:36:15.492110 2026] [:error] [pid 15764:tid 15848] [client 20.251.192.228:8075] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kandw.php"] [unique_id "aeT2b2LL_sqdSHoVp-RJKwAAAlY"]
[Sun Apr 19 23:36:16.324697 2026] [:error] [pid 15693:tid 15699] [client 20.251.192.228:8064] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kandw.php"] [unique_id "aeT2cMNMD-ccazQlTsln9AAAAUM"]
[Sun Apr 19 23:36:17.020874 2026] [:error] [pid 15764:tid 15850] [client 20.251.192.228:8090] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kandw.php"] [unique_id "aeT2cWLL_sqdSHoVp-RJLgAAAlc"]
[Sun Apr 19 23:36:17.628590 2026] [:error] [pid 15765:tid 15868] [client 20.251.192.228:8176] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wcvejtpr.php"] [unique_id "aeT2cfRqinw-W5EwQ74OZQAAAo8"]
[Sun Apr 19 23:36:18.335156 2026] [:error] [pid 15694:tid 15749] [client 20.251.192.228:8026] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wcvejtpr.php"] [unique_id "aeT2crimB-jol1fwqAodpAAAAZc"]
[Sun Apr 19 23:36:19.220201 2026] [:error] [pid 15763:tid 15800] [client 20.251.192.228:8102] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wcvejtpr.php"] [unique_id "aeT2c7MXv1Y1THOoxaAdLwAAAgQ"]
[Sun Apr 19 23:36:19.838405 2026] [:error] [pid 15763:tid 15819] [client 20.251.192.228:8024] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wcvejtpr.php"] [unique_id "aeT2c7MXv1Y1THOoxaAdMgAAAhc"]
[Sun Apr 19 23:36:20.920939 2026] [:error] [pid 15764:tid 15828] [client 20.251.192.228:8097] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/callback.php"] [unique_id "aeT2dGLL_sqdSHoVp-RJOQAAAkI"]
[Sun Apr 19 23:36:21.662757 2026] [:error] [pid 15694:tid 15732] [client 20.251.192.228:8153] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/callback.php"] [unique_id "aeT2dbimB-jol1fwqAodpwAAAYY"]
[Sun Apr 19 23:36:22.386414 2026] [:error] [pid 15765:tid 15855] [client 20.251.192.228:8165] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/callback.php"] [unique_id "aeT2dvRqinw-W5EwQ74OZwAAAoI"]
[Sun Apr 19 23:36:22.939821 2026] [:error] [pid 15760:tid 15784] [client 20.251.192.228:8087] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/callback.php"] [unique_id "aeT2dvSdD_XHQMJ_ISt19gAAAdA"]
[Sun Apr 19 23:36:23.477325 2026] [:error] [pid 15760:tid 15789] [client 20.251.192.228:8184] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ppxhp.php"] [unique_id "aeT2d_SdD_XHQMJ_ISt1-QAAAdU"]
[Sun Apr 19 23:36:24.022358 2026] [:error] [pid 15763:tid 15797] [client 20.251.192.228:8122] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ppxhp.php"] [unique_id "aeT2eLMXv1Y1THOoxaAdNgAAAgE"]
[Sun Apr 19 23:36:24.605743 2026] [:error] [pid 15694:tid 15731] [client 20.251.192.228:8142] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ppxhp.php"] [unique_id "aeT2eLimB-jol1fwqAodqAAAAYU"]
[Sun Apr 19 23:36:25.285442 2026] [:error] [pid 15760:tid 15783] [client 20.251.192.228:8019] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ppxhp.php"] [unique_id "aeT2efSdD_XHQMJ_ISt1_AAAAc8"]
[Sun Apr 19 23:36:25.991119 2026] [:error] [pid 15760:tid 15791] [client 20.251.192.228:8170] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dichku.php"] [unique_id "aeT2efSdD_XHQMJ_ISt1_wAAAdc"]
[Sun Apr 19 23:36:40.360216 2026] [:error] [pid 47775:tid 47844] [client 20.251.192.228:8111] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jvtsa.php"] [unique_id "aeT2iLmztjlk9tsmoewvyQAAAIE"]
[Sun Apr 19 23:36:41.076636 2026] [:error] [pid 15760:tid 15775] [client 20.251.192.228:8139] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jvtsa.php"] [unique_id "aeT2ifSdD_XHQMJ_ISt2EwAAAcc"]
[Sun Apr 19 23:36:41.862734 2026] [:error] [pid 47775:tid 47846] [client 20.251.192.228:8077] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jvtsa.php"] [unique_id "aeT2ibmztjlk9tsmoewvygAAAIM"]
[Sun Apr 19 23:36:42.741464 2026] [:error] [pid 47886:tid 47910] [client 20.251.192.228:8125] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jvtsa.php"] [unique_id "aeT2ikSe8yiyuPrD7yOLjAAAANY"]
[Sun Apr 19 23:36:44.074412 2026] [:error] [pid 15763:tid 15811] [client 20.251.192.228:8190] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rkiea.php"] [unique_id "aeT2jLMXv1Y1THOoxaAdTQAAAg8"]
[Sun Apr 19 23:36:44.961053 2026] [:error] [pid 15765:tid 15875] [client 20.251.192.228:8160] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rkiea.php"] [unique_id "aeT2jPRqinw-W5EwQ74OcAAAApY"]
[Sun Apr 19 23:36:45.837832 2026] [:error] [pid 15765:tid 15865] [client 20.251.192.228:8108] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rkiea.php"] [unique_id "aeT2jfRqinw-W5EwQ74OdwAAAow"]
[Sun Apr 19 23:36:46.642105 2026] [:error] [pid 15765:tid 15859] [client 20.251.192.228:8141] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rkiea.php"] [unique_id "aeT2jvRqinw-W5EwQ74OeQAAAoY"]
[Sun Apr 19 23:36:47.371898 2026] [:error] [pid 15760:tid 15780] [client 20.251.192.228:8075] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtsr.php"] [unique_id "aeT2j_SdD_XHQMJ_ISt2GgAAAcw"]
[Sun Apr 19 23:36:48.176746 2026] [:error] [pid 47775:tid 47859] [client 20.251.192.228:8114] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtsr.php"] [unique_id "aeT2kLmztjlk9tsmoewv1AAAAJA"]
[Sun Apr 19 23:36:48.873110 2026] [:error] [pid 47775:tid 47849] [client 20.251.192.228:8179] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtsr.php"] [unique_id "aeT2kLmztjlk9tsmoewv1QAAAIY"]
[Sun Apr 19 23:36:49.746127 2026] [:error] [pid 15763:tid 15820] [client 20.251.192.228:8187] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtsr.php"] [unique_id "aeT2kbMXv1Y1THOoxaAdVQAAAhg"]
[Sun Apr 19 23:36:50.718585 2026] [:error] [pid 15763:tid 15796] [client 20.251.192.228:7946] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp5.php"] [unique_id "aeT2krMXv1Y1THOoxaAdWQAAAgA"]
[Sun Apr 19 23:36:51.624700 2026] [:error] [pid 15764:tid 15842] [client 20.251.192.228:7940] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp5.php"] [unique_id "aeT2k2LL_sqdSHoVp-RJaQAAAlA"]
[Sun Apr 19 23:36:53.003367 2026] [:error] [pid 15693:tid 15712] [client 20.251.192.228:8048] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp5.php"] [unique_id "aeT2lcNMD-ccazQlTsloAwAAAVA"]
[Sun Apr 19 23:36:54.047666 2026] [:error] [pid 15760:tid 15779] [client 20.251.192.228:8119] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp5.php"] [unique_id "aeT2lvSdD_XHQMJ_ISt2IgAAAcs"]
[Sun Apr 19 23:36:55.035543 2026] [:error] [pid 15763:tid 15803] [client 20.251.192.228:8058] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "aeT2l7MXv1Y1THOoxaAdXgAAAgc"]
[Sun Apr 19 23:36:55.999332 2026] [:error] [pid 47773:tid 47821] [client 20.251.192.228:8008] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "aeT2l-iBHdnCJDuPq9BgCwAAAEU"]
[Sun Apr 19 23:36:57.809848 2026] [:error] [pid 47886:tid 47904] [client 20.251.192.228:8146] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "aeT2mUSe8yiyuPrD7yOLkQAAANA"]
[Sun Apr 19 23:36:59.656009 2026] [:error] [pid 47772:tid 47791] [client 20.251.192.228:8103] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beerd.php"] [unique_id "aeT2m4c0L16cb4smAz_mtgAAAAI"]
[Sun Apr 19 23:37:00.581609 2026] [:error] [pid 15763:tid 15799] [client 20.251.192.228:8172] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aeT2nLMXv1Y1THOoxaAdawAAAgM"]
[Sun Apr 19 23:37:01.390269 2026] [:error] [pid 47772:tid 47793] [client 20.251.192.228:8078] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aeT2nYc0L16cb4smAz_muQAAAAQ"]
[Sun Apr 19 23:37:02.274763 2026] [:error] [pid 47775:tid 47853] [client 20.251.192.228:8115] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aeT2nrmztjlk9tsmoewv4AAAAIo"]
[Sun Apr 19 23:37:03.083531 2026] [:error] [pid 47772:tid 47813] [client 20.251.192.228:8110] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aeT2n4c0L16cb4smAz_mvgAAABg"]
[Sun Apr 19 23:37:03.916825 2026] [:error] [pid 47775:tid 47855] [client 20.251.192.228:8003] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeT2n7mztjlk9tsmoewv5AAAAIw"]
[Sun Apr 19 23:37:04.713976 2026] [:error] [pid 15764:tid 15843] [client 20.251.192.228:8035] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeT2oGLL_sqdSHoVp-RJgwAAAlE"]
[Sun Apr 19 23:37:05.433281 2026] [:error] [pid 47772:tid 47807] [client 20.251.192.228:8174] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeT2oYc0L16cb4smAz_mxAAAABI"]
[Sun Apr 19 23:37:06.043489 2026] [:error] [pid 47775:tid 47866] [client 20.251.192.228:8107] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeT2ormztjlk9tsmoewv5gAAAJc"]
[Sun Apr 19 23:37:06.809775 2026] [:error] [pid 15765:tid 15870] [client 20.251.192.228:8001] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ccv.php"] [unique_id "aeT2ovRqinw-W5EwQ74OgwAAApE"]
[Sun Apr 19 23:37:07.596508 2026] [:error] [pid 47775:tid 47862] [client 20.251.192.228:8084] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ccv.php"] [unique_id "aeT2o7mztjlk9tsmoewv6QAAAJM"]
[Sun Apr 19 23:37:08.322125 2026] [:error] [pid 15764:tid 15850] [client 20.251.192.228:8031] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ccv.php"] [unique_id "aeT2pGLL_sqdSHoVp-RJhgAAAlc"]
[Sun Apr 19 23:37:09.302910 2026] [:error] [pid 15764:tid 15832] [client 20.251.192.228:8105] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ccv.php"] [unique_id "aeT2pWLL_sqdSHoVp-RJhwAAAkY"]
[Sun Apr 19 23:37:10.186478 2026] [:error] [pid 15760:tid 15771] [client 20.251.192.228:8104] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dqagu.php"] [unique_id "aeT2pvSdD_XHQMJ_ISt2LQAAAcM"]
[Sun Apr 19 23:37:11.129146 2026] [:error] [pid 15763:tid 15799] [client 20.251.192.228:8081] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dqagu.php"] [unique_id "aeT2p7MXv1Y1THOoxaAdcQAAAgM"]
[Sun Apr 19 23:37:12.237093 2026] [:error] [pid 15764:tid 15837] [client 20.251.192.228:8023] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dqagu.php"] [unique_id "aeT2qGLL_sqdSHoVp-RJjQAAAks"]
[Sun Apr 19 23:37:13.362551 2026] [:error] [pid 15763:tid 15797] [client 20.251.192.228:8063] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dqagu.php"] [unique_id "aeT2qbMXv1Y1THOoxaAddQAAAgE"]
[Sun Apr 19 23:37:14.753886 2026] [:error] [pid 15764:tid 15842] [client 20.251.192.228:8000] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ckk.php"] [unique_id "aeT2qmLL_sqdSHoVp-RJkgAAAlA"]
[Sun Apr 19 23:37:15.898968 2026] [:error] [pid 15763:tid 15800] [client 20.251.192.228:7939] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ckk.php"] [unique_id "aeT2q7MXv1Y1THOoxaAdeQAAAgQ"]
[Sun Apr 19 23:37:17.057126 2026] [:error] [pid 15764:tid 15846] [client 20.251.192.228:8109] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ckk.php"] [unique_id "aeT2rWLL_sqdSHoVp-RJlwAAAlQ"]
[Sun Apr 19 23:37:17.978379 2026] [:error] [pid 15764:tid 15833] [client 20.251.192.228:8011] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ckk.php"] [unique_id "aeT2rWLL_sqdSHoVp-RJmAAAAkc"]
[Sun Apr 19 23:37:19.157109 2026] [:error] [pid 15765:tid 15852] [client 20.251.192.228:7952] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws58.php"] [unique_id "aeT2r_Rqinw-W5EwQ74OhQAAAoA"]
[Sun Apr 19 23:37:20.117529 2026] [:error] [pid 15765:tid 15868] [client 20.251.192.228:8093] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws58.php"] [unique_id "aeT2sPRqinw-W5EwQ74OhgAAAo8"]
[Sun Apr 19 23:37:21.088853 2026] [:error] [pid 15763:tid 15804] [client 20.251.192.228:8157] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws58.php"] [unique_id "aeT2sbMXv1Y1THOoxaAdfgAAAgg"]
[Sun Apr 19 23:37:22.140519 2026] [:error] [pid 47886:tid 47894] [client 20.251.192.228:8056] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws58.php"] [unique_id "aeT2skSe8yiyuPrD7yOLnAAAAMY"]
[Sun Apr 19 23:37:22.948330 2026] [:error] [pid 15764:tid 15831] [client 20.251.192.228:8027] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eapjf.php"] [unique_id "aeT2smLL_sqdSHoVp-RJnwAAAkU"]
[Sun Apr 19 23:37:23.738325 2026] [:error] [pid 47886:tid 47902] [client 20.251.192.228:8030] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eapjf.php"] [unique_id "aeT2s0Se8yiyuPrD7yOLnwAAAM4"]
[Sun Apr 19 23:37:24.461683 2026] [:error] [pid 47773:tid 47819] [client 20.251.192.228:8042] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eapjf.php"] [unique_id "aeT2tOiBHdnCJDuPq9BgEAAAAEM"]
[Sun Apr 19 23:37:25.207121 2026] [:error] [pid 47886:tid 47897] [client 20.251.192.228:8013] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eapjf.php"] [unique_id "aeT2tUSe8yiyuPrD7yOLogAAAMk"]
[Sun Apr 19 23:37:25.927995 2026] [:error] [pid 15763:tid 15814] [client 20.251.192.228:8124] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buc.php"] [unique_id "aeT2tbMXv1Y1THOoxaAdggAAAhI"]
[Sun Apr 19 23:37:26.762545 2026] [:error] [pid 47886:tid 47888] [client 20.251.192.228:8040] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buc.php"] [unique_id "aeT2tkSe8yiyuPrD7yOLpgAAAMA"]
[Sun Apr 19 23:37:27.837920 2026] [:error] [pid 47775:tid 47859] [client 20.251.192.228:8085] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buc.php"] [unique_id "aeT2t7mztjlk9tsmoewv9wAAAJA"]
[Sun Apr 19 23:37:28.805286 2026] [:error] [pid 15760:tid 15781] [client 20.251.192.228:8149] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buc.php"] [unique_id "aeT2uPSdD_XHQMJ_ISt2OwAAAc0"]
[Sun Apr 19 23:37:29.735491 2026] [:error] [pid 15760:tid 15768] [client 20.251.192.228:8136] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kagug.php"] [unique_id "aeT2ufSdD_XHQMJ_ISt2QAAAAcA"]
[Sun Apr 19 23:37:30.529507 2026] [:error] [pid 47773:tid 47828] [client 20.251.192.228:8021] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kagug.php"] [unique_id "aeT2uuiBHdnCJDuPq9BgFQAAAEw"]
[Sun Apr 19 23:37:31.254770 2026] [:error] [pid 15765:tid 15859] [client 20.251.192.228:8005] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kagug.php"] [unique_id "aeT2u_Rqinw-W5EwQ74OiQAAAoY"]
[Sun Apr 19 23:37:32.030537 2026] [:error] [pid 15694:tid 15748] [client 20.251.192.228:8033] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kagug.php"] [unique_id "aeT2vLimB-jol1fwqAodtQAAAZY"]
[Sun Apr 19 23:37:32.902285 2026] [:error] [pid 15765:tid 15855] [client 20.251.192.228:8053] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byueb.php"] [unique_id "aeT2vPRqinw-W5EwQ74OigAAAoI"]
[Sun Apr 19 23:37:33.623179 2026] [:error] [pid 47886:tid 47911] [client 20.251.192.228:8022] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byueb.php"] [unique_id "aeT2vUSe8yiyuPrD7yOLqwAAANc"]
[Sun Apr 19 23:37:34.337937 2026] [:error] [pid 15760:tid 15774] [client 20.251.192.228:8038] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byueb.php"] [unique_id "aeT2vvSdD_XHQMJ_ISt2RgAAAcY"]
[Sun Apr 19 23:37:35.412623 2026] [:error] [pid 47886:tid 47912] [client 20.251.192.228:8173] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byueb.php"] [unique_id "aeT2v0Se8yiyuPrD7yOLrQAAANg"]
[Sun Apr 19 23:37:36.729052 2026] [:error] [pid 47772:tid 47811] [client 20.251.192.228:8126] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abalqdol.php"] [unique_id "aeT2wIc0L16cb4smAz_m0gAAABY"]
[Sun Apr 19 23:37:37.550448 2026] [:error] [pid 47773:tid 47836] [client 20.251.192.228:7965] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abalqdol.php"] [unique_id "aeT2weiBHdnCJDuPq9BgHQAAAFQ"]
[Sun Apr 19 23:37:38.420876 2026] [:error] [pid 47886:tid 47888] [client 20.251.192.228:8006] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abalqdol.php"] [unique_id "aeT2wkSe8yiyuPrD7yOLsgAAAMA"]
[Sun Apr 19 23:37:52.520583 2026] [:error] [pid 47775:tid 47853] [client 20.251.192.228:8121] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hots.php"] [unique_id "aeT20Lmztjlk9tsmoewwGAAAAIo"]
[Sun Apr 19 23:37:53.317062 2026] [:error] [pid 15763:tid 15799] [client 20.251.192.228:8050] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hots.php"] [unique_id "aeT20bMXv1Y1THOoxaAdmAAAAgM"]
[Sun Apr 19 23:37:54.190584 2026] [:error] [pid 15765:tid 15873] [client 20.251.192.228:7979] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hots.php"] [unique_id "aeT20vRqinw-W5EwQ74OnQAAApQ"]
[Sun Apr 19 23:37:54.928857 2026] [:error] [pid 47775:tid 47856] [client 20.251.192.228:8059] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hots.php"] [unique_id "aeT20rmztjlk9tsmoewwJAAAAI0"]
[Sun Apr 19 23:37:55.654523 2026] [:error] [pid 47772:tid 47812] [client 20.251.192.228:8092] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oircv.php"] [unique_id "aeT204c0L16cb4smAz_m5AAAABc"]
[Sun Apr 19 23:37:56.418944 2026] [:error] [pid 15763:tid 15801] [client 20.251.192.228:8128] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oircv.php"] [unique_id "aeT21LMXv1Y1THOoxaAdpAAAAgU"]
[Sun Apr 19 23:37:57.243641 2026] [:error] [pid 47772:tid 47805] [client 20.251.192.228:8112] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oircv.php"] [unique_id "aeT21Yc0L16cb4smAz_m5QAAABA"]
[Sun Apr 19 23:37:58.273061 2026] [:error] [pid 15760:tid 15773] [client 20.251.192.228:8091] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oircv.php"] [unique_id "aeT21vSdD_XHQMJ_ISt2UgAAAcU"]
[Sun Apr 19 23:37:59.111210 2026] [:error] [pid 15763:tid 15797] [client 20.251.192.228:7960] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awdld.php"] [unique_id "aeT217MXv1Y1THOoxaAdqQAAAgE"]
[Sun Apr 19 23:38:00.153215 2026] [:error] [pid 47772:tid 47811] [client 20.251.192.228:8071] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awdld.php"] [unique_id "aeT22Ic0L16cb4smAz_m5wAAABY"]
[Sun Apr 19 23:38:01.415045 2026] [:error] [pid 15763:tid 15818] [client 20.251.192.228:8016] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awdld.php"] [unique_id "aeT22bMXv1Y1THOoxaAdrwAAAhY"]
[Sun Apr 19 23:38:02.192712 2026] [:error] [pid 47773:tid 47833] [client 20.251.192.228:7943] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awdld.php"] [unique_id "aeT22uiBHdnCJDuPq9BgMwAAAFE"]
[Sun Apr 19 23:38:02.903055 2026] [:error] [pid 15763:tid 15804] [client 20.251.192.228:8161] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Geforce.php"] [unique_id "aeT22rMXv1Y1THOoxaAdsQAAAgg"]
[Sun Apr 19 23:38:03.644531 2026] [:error] [pid 15693:tid 15713] [client 20.251.192.228:7897] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Geforce.php"] [unique_id "aeT228NMD-ccazQlTsloBwAAAVE"]
[Sun Apr 19 23:38:04.502513 2026] [:error] [pid 15763:tid 15810] [client 20.251.192.228:8043] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Geforce.php"] [unique_id "aeT23LMXv1Y1THOoxaAdtQAAAg4"]
[Sun Apr 19 23:38:05.663710 2026] [:error] [pid 47773:tid 47830] [client 20.251.192.228:7945] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Geforce.php"] [unique_id "aeT23eiBHdnCJDuPq9BgOQAAAE4"]
[Sun Apr 19 23:38:10.367474 2026] [:error] [pid 15763:tid 15810] [client 20.251.192.228:8049] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wkogn.php"] [unique_id "aeT24rMXv1Y1THOoxaAdvQAAAg4"]
[Sun Apr 19 23:38:11.246050 2026] [:error] [pid 47772:tid 47806] [client 20.251.192.228:8046] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wkogn.php"] [unique_id "aeT244c0L16cb4smAz_m_wAAABE"]
[Sun Apr 19 23:38:12.242702 2026] [:error] [pid 47772:tid 47811] [client 20.251.192.228:8148] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wkogn.php"] [unique_id "aeT25Ic0L16cb4smAz_nAgAAABY"]
[Sun Apr 19 23:38:13.045076 2026] [:error] [pid 15765:tid 15874] [client 20.251.192.228:8181] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wkogn.php"] [unique_id "aeT25fRqinw-W5EwQ74OqAAAApU"]
[Sun Apr 19 23:38:13.915693 2026] [:error] [pid 47773:tid 47825] [client 20.251.192.228:8137] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xfun.php"] [unique_id "aeT25eiBHdnCJDuPq9BgSQAAAEk"]
[Sun Apr 19 23:38:14.782829 2026] [:error] [pid 47773:tid 47834] [client 20.251.192.228:8089] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xfun.php"] [unique_id "aeT25uiBHdnCJDuPq9BgUAAAAFI"]
[Sun Apr 19 23:38:16.050887 2026] [:error] [pid 15694:tid 15733] [client 20.251.192.228:8010] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xfun.php"] [unique_id "aeT26LimB-jol1fwqAod0gAAAYc"]
[Sun Apr 19 23:38:17.260003 2026] [:error] [pid 47772:tid 47795] [client 20.251.192.228:8094] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xfun.php"] [unique_id "aeT26Yc0L16cb4smAz_nCAAAAAY"]
[Sun Apr 19 23:38:18.099207 2026] [:error] [pid 47886:tid 47903] [client 20.251.192.228:7921] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "aeT26kSe8yiyuPrD7yOLvwAAAM8"]
[Sun Apr 19 23:38:18.900845 2026] [:error] [pid 47773:tid 47826] [client 20.251.192.228:7971] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "aeT26uiBHdnCJDuPq9BgYQAAAEo"]
[Sun Apr 19 23:38:19.559179 2026] [:error] [pid 47773:tid 47818] [client 20.251.192.228:7951] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "aeT26-iBHdnCJDuPq9BgZAAAAEI"]
[Sun Apr 19 23:38:20.286317 2026] [:error] [pid 15764:tid 15832] [client 20.251.192.228:8020] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/trx24.php"] [unique_id "aeT27GLL_sqdSHoVp-RJ2QAAAkY"]
[Sun Apr 19 23:38:21.324830 2026] [:error] [pid 47772:tid 47807] [client 20.251.192.228:8060] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3akp.php"] [unique_id "aeT27Yc0L16cb4smAz_nDQAAABI"]
[Sun Apr 19 23:38:22.187534 2026] [:error] [pid 15764:tid 15841] [client 20.251.192.228:8014] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3akp.php"] [unique_id "aeT27mLL_sqdSHoVp-RJ3QAAAk8"]
[Sun Apr 19 23:38:23.138627 2026] [:error] [pid 47886:tid 47893] [client 20.251.192.228:7962] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3akp.php"] [unique_id "aeT270Se8yiyuPrD7yOLwwAAAMU"]
[Sun Apr 19 23:38:24.015459 2026] [:error] [pid 47775:tid 47862] [client 20.251.192.228:8140] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3akp.php"] [unique_id "aeT28Lmztjlk9tsmoewwPwAAAJM"]
[Sun Apr 19 23:38:24.814032 2026] [:error] [pid 15763:tid 15809] [client 20.251.192.228:8054] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctjpseby.php"] [unique_id "aeT28LMXv1Y1THOoxaAdygAAAg0"]
[Sun Apr 19 23:38:25.634111 2026] [:error] [pid 15760:tid 15773] [client 20.251.192.228:7957] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctjpseby.php"] [unique_id "aeT28fSdD_XHQMJ_ISt2cwAAAcU"]
[Sun Apr 19 23:38:26.365858 2026] [:error] [pid 47773:tid 47828] [client 20.251.192.228:7973] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctjpseby.php"] [unique_id "aeT28uiBHdnCJDuPq9BgZwAAAEw"]
[Sun Apr 19 23:38:27.197713 2026] [:error] [pid 15760:tid 15792] [client 20.251.192.228:7969] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctjpseby.php"] [unique_id "aeT28_SdD_XHQMJ_ISt2eAAAAdg"]
[Sun Apr 19 23:38:27.962065 2026] [:error] [pid 15760:tid 15789] [client 20.251.192.228:8018] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fss.php"] [unique_id "aeT28_SdD_XHQMJ_ISt2fgAAAdU"]
[Sun Apr 19 23:38:28.678691 2026] [:error] [pid 15760:tid 15787] [client 20.251.192.228:8052] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fss.php"] [unique_id "aeT29PSdD_XHQMJ_ISt2ggAAAdM"]
[Sun Apr 19 23:38:29.452958 2026] [:error] [pid 15763:tid 15804] [client 20.251.192.228:7875] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fss.php"] [unique_id "aeT29bMXv1Y1THOoxaAd7wAAAgg"]
[Sun Apr 19 23:38:30.172489 2026] [:error] [pid 15764:tid 15851] [client 20.251.192.228:8029] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fss.php"] [unique_id "aeT29mLL_sqdSHoVp-RJ-QAAAlg"]
[Sun Apr 19 23:38:31.078749 2026] [:error] [pid 15760:tid 15781] [client 20.251.192.228:8083] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sts.php"] [unique_id "aeT29_SdD_XHQMJ_ISt2hwAAAc0"]
[Sun Apr 19 23:38:32.487510 2026] [:error] [pid 15763:tid 15798] [client 20.251.192.228:7982] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sts.php"] [unique_id "aeT2-LMXv1Y1THOoxaAd9gAAAgI"]
[Sun Apr 19 23:38:33.303980 2026] [:error] [pid 15764:tid 15839] [client 20.251.192.228:7950] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sts.php"] [unique_id "aeT2-WLL_sqdSHoVp-RJ_AAAAk0"]
[Sun Apr 19 23:38:34.153307 2026] [:error] [pid 15764:tid 15834] [client 20.251.192.228:8061] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sts.php"] [unique_id "aeT2-mLL_sqdSHoVp-RKAgAAAkg"]
[Sun Apr 19 23:38:34.936582 2026] [:error] [pid 15764:tid 15827] [client 20.251.192.228:8074] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abpxrnwe.php"] [unique_id "aeT2-mLL_sqdSHoVp-RKBgAAAkE"]
[Sun Apr 19 23:38:35.742389 2026] [:error] [pid 15763:tid 15813] [client 20.251.192.228:7959] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abpxrnwe.php"] [unique_id "aeT2-7MXv1Y1THOoxaAd-wAAAhE"]
[Sun Apr 19 23:38:36.574438 2026] [:error] [pid 15764:tid 15833] [client 20.251.192.228:7947] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abpxrnwe.php"] [unique_id "aeT2_GLL_sqdSHoVp-RKLQAAAkc"]
[Sun Apr 19 23:38:37.357478 2026] [:error] [pid 15764:tid 15830] [client 20.251.192.228:7977] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abpxrnwe.php"] [unique_id "aeT2_WLL_sqdSHoVp-RKMwAAAkQ"]
[Sun Apr 19 23:38:38.040690 2026] [:error] [pid 15764:tid 15850] [client 20.251.192.228:8045] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ynjli.php"] [unique_id "aeT2_mLL_sqdSHoVp-RKPQAAAlc"]
[Sun Apr 19 23:38:38.757996 2026] [:error] [pid 15760:tid 15782] [client 20.251.192.228:7958] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ynjli.php"] [unique_id "aeT2_vSdD_XHQMJ_ISt2nQAAAc4"]
[Sun Apr 19 23:38:39.387155 2026] [:error] [pid 15760:tid 15785] [client 20.251.192.228:8017] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ynjli.php"] [unique_id "aeT2__SdD_XHQMJ_ISt2oAAAAdE"]
[Sun Apr 19 23:38:40.084804 2026] [:error] [pid 47772:tid 47811] [client 20.251.192.228:8083] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ynjli.php"] [unique_id "aeT3AIc0L16cb4smAz_nFAAAABY"]
[Sun Apr 19 23:38:40.837720 2026] [:error] [pid 15765:tid 15863] [client 20.251.192.228:8036] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lowpr.php"] [unique_id "aeT3APRqinw-W5EwQ74OqwAAAoo"]
[Sun Apr 19 23:38:41.705683 2026] [:error] [pid 47773:tid 47820] [client 20.251.192.228:8004] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lowpr.php"] [unique_id "aeT3AeiBHdnCJDuPq9BgawAAAEQ"]
[Sun Apr 19 23:38:42.466465 2026] [:error] [pid 47772:tid 47807] [client 20.251.192.228:7992] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lowpr.php"] [unique_id "aeT3Aoc0L16cb4smAz_nFgAAABI"]
[Sun Apr 19 23:38:43.371496 2026] [:error] [pid 47772:tid 47802] [client 20.251.192.228:8002] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lowpr.php"] [unique_id "aeT3A4c0L16cb4smAz_nGwAAAA0"]
[Sun Apr 19 23:38:44.143526 2026] [:error] [pid 15760:tid 15781] [client 20.251.192.228:7991] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aeT3BPSdD_XHQMJ_ISt2qwAAAc0"]
[Sun Apr 19 23:38:44.831517 2026] [:error] [pid 15760:tid 15789] [client 20.251.192.228:7938] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aeT3BPSdD_XHQMJ_ISt2rQAAAdU"]
[Sun Apr 19 23:38:45.741922 2026] [:error] [pid 47773:tid 47830] [client 20.251.192.228:8117] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aeT3BeiBHdnCJDuPq9BgbwAAAE4"]
[Sun Apr 19 23:38:46.755700 2026] [:error] [pid 47773:tid 47837] [client 20.251.192.228:8147] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8xyz.php"] [unique_id "aeT3BuiBHdnCJDuPq9BgdgAAAFU"]
[Sun Apr 19 23:38:47.615570 2026] [:error] [pid 47772:tid 47796] [client 20.251.192.228:7941] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeT3B4c0L16cb4smAz_nIwAAAAc"]
[Sun Apr 19 23:38:48.372321 2026] [:error] [pid 15763:tid 15812] [client 20.251.192.228:7966] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeT3CLMXv1Y1THOoxaAeBQAAAhA"]
[Sun Apr 19 23:38:49.054915 2026] [:error] [pid 47772:tid 47794] [client 20.251.192.228:8044] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeT3CYc0L16cb4smAz_nKQAAAAU"]
[Sun Apr 19 23:38:49.637602 2026] [:error] [pid 15763:tid 15819] [client 20.251.192.228:8032] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeT3CbMXv1Y1THOoxaAeBgAAAhc"]
[Sun Apr 19 23:38:50.340143 2026] [:error] [pid 15760:tid 15789] [client 20.251.192.228:7995] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-moonka.php"] [unique_id "aeT3CvSdD_XHQMJ_ISt2twAAAdU"]
[Sun Apr 19 23:39:04.347113 2026] [:error] [pid 15760:tid 15775] [client 20.251.192.228:8057] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aeT3GPSdD_XHQMJ_ISt23gAAAcc"]
[Sun Apr 19 23:39:05.143507 2026] [:error] [pid 47886:tid 47900] [client 20.251.192.228:8051] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aeT3GUSe8yiyuPrD7yOLzgAAAMw"]
[Sun Apr 19 23:39:05.909348 2026] [:error] [pid 15765:tid 15852] [client 20.251.192.228:7936] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aeT3GfRqinw-W5EwQ74OsgAAAoA"]
[Sun Apr 19 23:39:06.791337 2026] [:error] [pid 47772:tid 47794] [client 20.251.192.228:8100] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aeT3Goc0L16cb4smAz_nQgAAAAU"]
[Sun Apr 19 23:39:07.804800 2026] [:error] [pid 47773:tid 47816] [client 20.251.192.228:7838] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aeT3G-iBHdnCJDuPq9BgiQAAAEA"]
[Sun Apr 19 23:39:08.761101 2026] [:error] [pid 15765:tid 15868] [client 20.251.192.228:7908] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aeT3HPRqinw-W5EwQ74OswAAAo8"]
[Sun Apr 19 23:39:09.798694 2026] [:error] [pid 47886:tid 47889] [client 20.251.192.228:8120] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aeT3HUSe8yiyuPrD7yOL0AAAAME"]
[Sun Apr 19 23:39:10.625044 2026] [:error] [pid 15765:tid 15858] [client 20.251.192.228:8047] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "aeT3HvRqinw-W5EwQ74OuQAAAoU"]
[Sun Apr 19 23:39:11.406790 2026] [:error] [pid 47772:tid 47792] [client 20.251.192.228:7976] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeT3H4c0L16cb4smAz_nTwAAAAM"]
[Sun Apr 19 23:39:12.180942 2026] [:error] [pid 47772:tid 47813] [client 20.251.192.228:7970] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeT3IIc0L16cb4smAz_nUAAAABg"]
[Sun Apr 19 23:39:13.035339 2026] [:error] [pid 15760:tid 15779] [client 20.251.192.228:7881] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeT3IfSdD_XHQMJ_ISt26wAAAcs"]
[Sun Apr 19 23:39:13.711466 2026] [:error] [pid 47886:tid 47910] [client 20.251.192.228:8015] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeT3IUSe8yiyuPrD7yOL2QAAANY"]
[Sun Apr 19 23:39:14.439344 2026] [:error] [pid 47772:tid 47804] [client 20.251.192.228:8116] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccrheegr.php"] [unique_id "aeT3Ioc0L16cb4smAz_nVgAAAA8"]
[Sun Apr 19 23:39:15.234083 2026] [:error] [pid 15764:tid 15827] [client 20.251.192.228:7878] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccrheegr.php"] [unique_id "aeT3I2LL_sqdSHoVp-RKbAAAAkE"]
[Sun Apr 19 23:39:16.188657 2026] [:error] [pid 15765:tid 15868] [client 20.251.192.228:7889] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccrheegr.php"] [unique_id "aeT3JPRqinw-W5EwQ74OvgAAAo8"]
[Sun Apr 19 23:39:17.338517 2026] [:error] [pid 47772:tid 47803] [client 20.251.192.228:7987] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccrheegr.php"] [unique_id "aeT3JYc0L16cb4smAz_nXAAAAA4"]
[Sun Apr 19 23:39:18.460461 2026] [:error] [pid 15764:tid 15850] [client 20.251.192.228:8037] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws73.php"] [unique_id "aeT3JmLL_sqdSHoVp-RKegAAAlc"]
[Sun Apr 19 23:39:19.772466 2026] [:error] [pid 15760:tid 15772] [client 20.251.192.228:7942] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws73.php"] [unique_id "aeT3J_SdD_XHQMJ_ISt28QAAAcQ"]
[Sun Apr 19 23:39:20.798116 2026] [:error] [pid 15764:tid 15838] [client 20.251.192.228:7877] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws73.php"] [unique_id "aeT3KGLL_sqdSHoVp-RKgAAAAkw"]
[Sun Apr 19 23:39:21.574220 2026] [:error] [pid 47773:tid 47840] [client 20.251.192.228:7948] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws73.php"] [unique_id "aeT3KeiBHdnCJDuPq9BgkgAAAFg"]
[Sun Apr 19 23:39:22.339232 2026] [:error] [pid 15764:tid 15840] [client 20.251.192.228:7993] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh.php"] [unique_id "aeT3KmLL_sqdSHoVp-RKiQAAAk4"]
[Sun Apr 19 23:39:23.289029 2026] [:error] [pid 47772:tid 47793] [client 20.251.192.228:7949] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh.php"] [unique_id "aeT3K4c0L16cb4smAz_nXwAAAAQ"]
[Sun Apr 19 23:39:24.628802 2026] [:error] [pid 15764:tid 15841] [client 20.251.192.228:7810] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh.php"] [unique_id "aeT3LGLL_sqdSHoVp-RKkgAAAk8"]
[Sun Apr 19 23:39:26.026874 2026] [:error] [pid 47772:tid 47790] [client 20.251.192.228:7886] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sh.php"] [unique_id "aeT3Loc0L16cb4smAz_nZQAAAAE"]
[Sun Apr 19 23:39:27.278536 2026] [:error] [pid 15760:tid 15786] [client 20.251.192.228:7896] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wcoiw.php"] [unique_id "aeT3L_SdD_XHQMJ_ISt28wAAAdI"]
[Sun Apr 19 23:39:28.369105 2026] [:error] [pid 15763:tid 15820] [client 20.251.192.228:8168] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wcoiw.php"] [unique_id "aeT3MLMXv1Y1THOoxaAeHAAAAhg"]
[Sun Apr 19 23:39:29.073854 2026] [:error] [pid 47772:tid 47798] [client 20.251.192.228:8028] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wcoiw.php"] [unique_id "aeT3MYc0L16cb4smAz_ngAAAAAk"]
[Sun Apr 19 23:39:29.774182 2026] [:error] [pid 47772:tid 47802] [client 20.251.192.228:8175] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wcoiw.php"] [unique_id "aeT3MYc0L16cb4smAz_nhAAAAA0"]
[Sun Apr 19 23:39:30.600504 2026] [:error] [pid 15760:tid 15771] [client 20.251.192.228:7954] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/defeg.php"] [unique_id "aeT3MvSdD_XHQMJ_ISt3AgAAAcM"]
[Sun Apr 19 23:39:31.556074 2026] [:error] [pid 15760:tid 15776] [client 20.251.192.228:8055] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/defeg.php"] [unique_id "aeT3M_SdD_XHQMJ_ISt3AwAAAcg"]
[Sun Apr 19 23:39:32.297877 2026] [:error] [pid 15765:tid 15877] [client 20.251.192.228:7967] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/defeg.php"] [unique_id "aeT3NPRqinw-W5EwQ74OxAAAApg"]
[Sun Apr 19 23:39:33.255608 2026] [:error] [pid 15764:tid 15831] [client 20.251.192.228:7974] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/defeg.php"] [unique_id "aeT3NWLL_sqdSHoVp-RKoAAAAkU"]
[Sun Apr 19 23:39:34.063269 2026] [:error] [pid 15764:tid 15848] [client 20.251.192.228:7968] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aeT3NmLL_sqdSHoVp-RKqAAAAlY"]
[Sun Apr 19 23:39:34.861626 2026] [:error] [pid 15763:tid 15796] [client 20.251.192.228:8099] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aeT3NrMXv1Y1THOoxaAeJQAAAgA"]
[Sun Apr 19 23:39:35.584722 2026] [:error] [pid 15763:tid 15809] [client 20.251.192.228:7955] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aeT3N7MXv1Y1THOoxaAeKAAAAg0"]
[Sun Apr 19 23:39:36.197907 2026] [:error] [pid 15765:tid 15870] [client 20.251.192.228:7980] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "aeT3OPRqinw-W5EwQ74OxgAAApE"]
[Sun Apr 19 23:39:36.904311 2026] [:error] [pid 15760:tid 15770] [client 20.251.192.228:7901] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aeT3OPSdD_XHQMJ_ISt3CwAAAcI"]
[Sun Apr 19 23:39:37.593903 2026] [:error] [pid 15763:tid 15799] [client 20.251.192.228:7893] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aeT3ObMXv1Y1THOoxaAeLgAAAgM"]
[Sun Apr 19 23:39:38.408337 2026] [:error] [pid 15763:tid 15806] [client 20.251.192.228:7885] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aeT3OrMXv1Y1THOoxaAeMgAAAgo"]
[Sun Apr 19 23:39:39.225346 2026] [:error] [pid 15764:tid 15827] [client 20.251.192.228:7981] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aeT3O2LL_sqdSHoVp-RKsQAAAkE"]
[Sun Apr 19 23:39:40.152250 2026] [:error] [pid 15764:tid 15840] [client 20.251.192.228:8062] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws56.php"] [unique_id "aeT3PGLL_sqdSHoVp-RKtwAAAk4"]
[Sun Apr 19 23:39:40.788539 2026] [:error] [pid 47773:tid 47828] [client 20.251.192.228:7931] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws56.php"] [unique_id "aeT3POiBHdnCJDuPq9BglwAAAEw"]
[Sun Apr 19 23:39:41.695383 2026] [:error] [pid 47773:tid 47821] [client 20.251.192.228:7924] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws56.php"] [unique_id "aeT3PeiBHdnCJDuPq9BgmQAAAEU"]
[Sun Apr 19 23:39:42.622750 2026] [:error] [pid 15760:tid 15792] [client 20.251.192.228:7880] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws56.php"] [unique_id "aeT3PvSdD_XHQMJ_ISt3DwAAAdg"]
[Sun Apr 19 23:39:43.410591 2026] [:error] [pid 15765:tid 15861] [client 20.251.192.228:7983] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aeT3P_Rqinw-W5EwQ74OywAAAog"]
[Sun Apr 19 23:39:44.201710 2026] [:error] [pid 15760:tid 15786] [client 20.251.192.228:8134] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aeT3QPSdD_XHQMJ_ISt3EwAAAdI"]
[Sun Apr 19 23:39:44.898842 2026] [:error] [pid 47772:tid 47804] [client 20.251.192.228:7814] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aeT3QIc0L16cb4smAz_nnwAAAA8"]
[Sun Apr 19 23:39:45.602455 2026] [:error] [pid 15760:tid 15774] [client 20.251.192.228:8158] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blnux.php"] [unique_id "aeT3QfSdD_XHQMJ_ISt3FgAAAcY"]
[Sun Apr 19 23:39:46.603407 2026] [:error] [pid 47772:tid 47792] [client 20.251.192.228:7985] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zu.php"] [unique_id "aeT3Qoc0L16cb4smAz_noAAAAAM"]
[Sun Apr 19 23:39:47.421621 2026] [:error] [pid 15694:tid 15737] [client 20.251.192.228:7914] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zu.php"] [unique_id "aeT3Q7imB-jol1fwqAod6gAAAYs"]
[Sun Apr 19 23:39:48.167512 2026] [:error] [pid 47886:tid 47900] [client 20.251.192.228:7964] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zu.php"] [unique_id "aeT3RESe8yiyuPrD7yOL7gAAAMw"]
[Sun Apr 19 23:39:48.885521 2026] [:error] [pid 15764:tid 15839] [client 20.251.192.228:8151] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zu.php"] [unique_id "aeT3RGLL_sqdSHoVp-RKzAAAAk0"]
[Sun Apr 19 23:39:49.545266 2026] [:error] [pid 15763:tid 15818] [client 20.251.192.228:7887] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gedim.php"] [unique_id "aeT3RbMXv1Y1THOoxaAePAAAAhY"]
[Sun Apr 19 23:39:50.260016 2026] [:error] [pid 15763:tid 15796] [client 20.251.192.228:8191] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gedim.php"] [unique_id "aeT3RrMXv1Y1THOoxaAePgAAAgA"]
[Sun Apr 19 23:39:50.947712 2026] [:error] [pid 15764:tid 15828] [client 20.251.192.228:7937] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gedim.php"] [unique_id "aeT3RmLL_sqdSHoVp-RK0QAAAkI"]
[Sun Apr 19 23:39:51.561473 2026] [:error] [pid 15764:tid 15844] [client 20.251.192.228:7956] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gedim.php"] [unique_id "aeT3R2LL_sqdSHoVp-RK0wAAAlI"]
[Sun Apr 19 23:39:52.319420 2026] [:error] [pid 47772:tid 47808] [client 20.251.192.228:7932] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ardsw.php"] [unique_id "aeT3SIc0L16cb4smAz_nogAAABM"]
[Sun Apr 19 23:39:53.012506 2026] [:error] [pid 15764:tid 15842] [client 20.251.192.228:7884] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ardsw.php"] [unique_id "aeT3SWLL_sqdSHoVp-RK3gAAAlA"]
[Sun Apr 19 23:39:53.585460 2026] [:error] [pid 15764:tid 15847] [client 20.251.192.228:7876] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ardsw.php"] [unique_id "aeT3SWLL_sqdSHoVp-RK4wAAAlU"]
[Sun Apr 19 23:39:54.351057 2026] [:error] [pid 15765:tid 15858] [client 20.251.192.228:8067] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ardsw.php"] [unique_id "aeT3SvRqinw-W5EwQ74O0AAAAoU"]
[Sun Apr 19 23:39:55.254195 2026] [:error] [pid 47886:tid 47896] [client 20.251.192.228:7913] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/coiuz.php"] [unique_id "aeT3S0Se8yiyuPrD7yOL9AAAAMg"]
[Sun Apr 19 23:39:56.193300 2026] [:error] [pid 47886:tid 47906] [client 20.251.192.228:8127] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/coiuz.php"] [unique_id "aeT3TESe8yiyuPrD7yOL9wAAANI"]
[Sun Apr 19 23:39:56.873683 2026] [:error] [pid 47886:tid 47904] [client 20.251.192.228:8069] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/coiuz.php"] [unique_id "aeT3TESe8yiyuPrD7yOL-AAAANA"]
[Sun Apr 19 23:39:57.647175 2026] [:error] [pid 15694:tid 15747] [client 20.251.192.228:7998] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/coiuz.php"] [unique_id "aeT3TbimB-jol1fwqAod7wAAAZU"]
[Sun Apr 19 23:39:58.193784 2026] [:error] [pid 15763:tid 15817] [client 20.251.192.228:7986] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogr.php"] [unique_id "aeT3TrMXv1Y1THOoxaAeRAAAAhU"]
[Sun Apr 19 23:39:58.807100 2026] [:error] [pid 47886:tid 47892] [client 20.251.192.228:7857] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogr.php"] [unique_id "aeT3TkSe8yiyuPrD7yOL-gAAAMQ"]
[Sun Apr 19 23:39:59.676114 2026] [:error] [pid 47886:tid 47893] [client 20.251.192.228:7858] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogr.php"] [unique_id "aeT3T0Se8yiyuPrD7yOMAQAAAMU"]
[Sun Apr 19 23:40:00.564601 2026] [:error] [pid 15763:tid 15820] [client 20.251.192.228:8034] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ogr.php"] [unique_id "aeT3ULMXv1Y1THOoxaAeRwAAAhg"]
[Sun Apr 19 23:40:01.493897 2026] [:error] [pid 47886:tid 47904] [client 20.251.192.228:8156] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aeT3UUSe8yiyuPrD7yOMBwAAANA"]
[Sun Apr 19 23:40:02.355616 2026] [:error] [pid 15694:tid 15740] [client 20.251.192.228:8025] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aeT3UrimB-jol1fwqAod9AAAAY4"]
[Sun Apr 19 23:41:32.215899 2026] [:error] [pid 47775:tid 47857] [client 20.251.192.228:8187] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bjfl.php"] [unique_id "aeT3rLmztjlk9tsmoewwngAAAI4"]
[Sun Apr 19 23:42:09.792943 2026] [:error] [pid 15764:tid 15847] [client 20.251.192.228:8128] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abhjr.php"] [unique_id "aeT30WLL_sqdSHoVp-RL2QAAAlU"]
[Sun Apr 19 23:42:16.793116 2026] [:error] [pid 47772:tid 47803] [client 20.251.192.228:8161] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assacc.php"] [unique_id "aeT32Ic0L16cb4smAz_n_QAAAA4"]
[Sun Apr 19 23:42:19.275523 2026] [:error] [pid 47773:tid 47837] [client 20.251.192.228:8136] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assacc.php"] [unique_id "aeT32-iBHdnCJDuPq9Bg8gAAAFU"]
[Sun Apr 19 23:42:20.306269 2026] [:error] [pid 15764:tid 15833] [client 20.251.192.228:8163] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assacc.php"] [unique_id "aeT33GLL_sqdSHoVp-RMBwAAAkc"]
[Sun Apr 19 23:42:21.851065 2026] [:error] [pid 15764:tid 15838] [client 20.251.192.228:8162] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/assacc.php"] [unique_id "aeT33WLL_sqdSHoVp-RMEAAAAkw"]
[Sun Apr 19 23:42:23.012474 2026] [:error] [pid 15693:tid 15717] [client 20.251.192.228:8189] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "aeT338NMD-ccazQlTsloQgAAAVU"]
[Sun Apr 19 23:42:24.047036 2026] [:error] [pid 15763:tid 15805] [client 20.251.192.228:8076] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "aeT34LMXv1Y1THOoxaAe1gAAAgk"]
[Sun Apr 19 23:42:24.780475 2026] [:error] [pid 15760:tid 15778] [client 20.251.192.228:8173] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "aeT34PSdD_XHQMJ_ISt4kAAAAco"]
[Sun Apr 19 23:42:25.505321 2026] [:error] [pid 15763:tid 15803] [client 20.251.192.228:8188] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "aeT34bMXv1Y1THOoxaAe3gAAAgc"]
[Sun Apr 19 23:42:26.199342 2026] [:error] [pid 15760:tid 15774] [client 20.251.192.228:8178] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "aeT34vSdD_XHQMJ_ISt4mAAAAcY"]
[Sun Apr 19 23:42:27.048554 2026] [:error] [pid 47886:tid 47898] [client 20.251.192.228:8160] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "aeT340Se8yiyuPrD7yOMNAAAAMo"]
[Sun Apr 19 23:42:27.950989 2026] [:error] [pid 15760:tid 15787] [client 20.251.192.228:8077] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "aeT34_SdD_XHQMJ_ISt4nwAAAdM"]
[Sun Apr 19 23:42:28.635978 2026] [:error] [pid 15765:tid 15860] [client 20.251.192.228:8133] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gk.php"] [unique_id "aeT35PRqinw-W5EwQ74O-gAAAoc"]
[Sun Apr 19 23:42:29.227974 2026] [:error] [pid 47772:tid 47798] [client 20.251.192.228:8080] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bootstrap.php"] [unique_id "aeT35Yc0L16cb4smAz_oJgAAAAk"]
[Sun Apr 19 23:42:30.012842 2026] [:error] [pid 47772:tid 47792] [client 20.251.192.228:8177] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bootstrap.php"] [unique_id "aeT35oc0L16cb4smAz_oLQAAAAM"]
[Sun Apr 19 23:42:30.867420 2026] [:error] [pid 47772:tid 47804] [client 20.251.192.228:8082] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bootstrap.php"] [unique_id "aeT35oc0L16cb4smAz_oLwAAAA8"]
[Sun Apr 19 23:42:44.819942 2026] [:error] [pid 15760:tid 15777] [client 20.251.192.228:8038] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "aeT39PSdD_XHQMJ_ISt48gAAAck"]
[Sun Apr 19 23:42:45.894132 2026] [:error] [pid 47772:tid 47799] [client 20.251.192.228:8065] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "aeT39Yc0L16cb4smAz_oNgAAAAo"]
[Sun Apr 19 23:42:47.663544 2026] [:error] [pid 15764:tid 15830] [client 20.251.192.228:8174] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "aeT392LL_sqdSHoVp-RMYAAAAkQ"]
[Sun Apr 19 23:42:49.402453 2026] [:error] [pid 47775:tid 47850] [client 20.251.192.228:8148] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dass.php"] [unique_id "aeT3-bmztjlk9tsmoeww0AAAAIc"]
[Sun Apr 19 23:42:50.493605 2026] [:error] [pid 15763:tid 15797] [client 20.251.192.228:8079] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxivicLhot.php"] [unique_id "aeT3-rMXv1Y1THOoxaAe7QAAAgE"]
[Sun Apr 19 23:42:51.990051 2026] [:error] [pid 47772:tid 47790] [client 20.251.192.228:8085] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxivicLhot.php"] [unique_id "aeT3-4c0L16cb4smAz_oQgAAAAE"]
[Sun Apr 19 23:42:53.314453 2026] [:error] [pid 15760:tid 15780] [client 20.251.192.228:8130] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxivicLhot.php"] [unique_id "aeT3_fSdD_XHQMJ_ISt5CgAAAcw"]
[Sun Apr 19 23:42:54.545772 2026] [:error] [pid 15763:tid 15798] [client 20.251.192.228:8091] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxivicLhot.php"] [unique_id "aeT3_rMXv1Y1THOoxaAe7gAAAgI"]
[Sun Apr 19 23:42:55.618958 2026] [:error] [pid 15764:tid 15848] [client 20.251.192.228:8164] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/junvh.php"] [unique_id "aeT3_2LL_sqdSHoVp-RMagAAAlY"]
[Sun Apr 19 23:42:56.832699 2026] [:error] [pid 47775:tid 47863] [client 20.251.192.228:8176] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/junvh.php"] [unique_id "aeT4ALmztjlk9tsmoeww1gAAAJQ"]
[Sun Apr 19 23:42:57.746878 2026] [:error] [pid 47773:tid 47826] [client 20.251.192.228:8190] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/junvh.php"] [unique_id "aeT4AeiBHdnCJDuPq9BhGgAAAEo"]
[Sun Apr 19 23:42:58.359171 2026] [:error] [pid 15760:tid 15779] [client 20.251.192.228:8107] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/junvh.php"] [unique_id "aeT4AvSdD_XHQMJ_ISt5HgAAAcs"]
[Sun Apr 19 23:42:59.254965 2026] [:error] [pid 15760:tid 15773] [client 20.251.192.228:8186] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aeT4A_SdD_XHQMJ_ISt5JQAAAcU"]
[Sun Apr 19 23:42:59.956622 2026] [:error] [pid 15765:tid 15874] [client 20.251.192.228:8179] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aeT4A_Rqinw-W5EwQ74PDgAAApU"]
[Sun Apr 19 23:43:00.739613 2026] [:error] [pid 15763:tid 15807] [client 20.251.192.228:8150] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aeT4BLMXv1Y1THOoxaAe-AAAAgs"]
[Sun Apr 19 23:43:01.814267 2026] [:error] [pid 15763:tid 15815] [client 20.251.192.228:8052] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aeT4BbMXv1Y1THOoxaAe-gAAAhM"]
[Sun Apr 19 23:43:02.777647 2026] [:error] [pid 47772:tid 47812] [client 20.251.192.228:8149] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "aeT4Boc0L16cb4smAz_oTwAAABc"]
[Sun Apr 19 23:43:03.619281 2026] [:error] [pid 47772:tid 47790] [client 20.251.192.228:8066] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "aeT4B4c0L16cb4smAz_oUQAAAAE"]
[Sun Apr 19 23:43:04.505554 2026] [:error] [pid 47775:tid 47856] [client 20.251.192.228:8165] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "aeT4CLmztjlk9tsmoeww4gAAAI0"]
[Sun Apr 19 23:43:05.442392 2026] [:error] [pid 47773:tid 47831] [client 20.251.192.228:8172] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "aeT4CeiBHdnCJDuPq9BhIAAAAE8"]
[Sun Apr 19 23:43:06.111444 2026] [:error] [pid 15763:tid 15801] [client 20.251.192.228:8143] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "aeT4CrMXv1Y1THOoxaAe_QAAAgU"]
[Sun Apr 19 23:43:07.343788 2026] [:error] [pid 15693:tid 15706] [client 20.251.192.228:8153] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "aeT4C8NMD-ccazQlTsloTQAAAUo"]
[Sun Apr 19 23:43:08.629283 2026] [:error] [pid 47775:tid 47854] [client 20.251.192.228:8109] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "aeT4DLmztjlk9tsmoeww5wAAAIs"]
[Sun Apr 19 23:43:09.545826 2026] [:error] [pid 15763:tid 15807] [client 20.251.192.228:8098] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fetch.php"] [unique_id "aeT4DbMXv1Y1THOoxaAfAQAAAgs"]
[Sun Apr 19 23:43:10.429472 2026] [:error] [pid 15760:tid 15770] [client 20.251.192.228:8184] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "aeT4DvSdD_XHQMJ_ISt5RAAAAcI"]
[Sun Apr 19 23:43:11.417101 2026] [:error] [pid 15693:tid 15711] [client 20.251.192.228:8180] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "aeT4D8NMD-ccazQlTsloUQAAAU8"]
[Sun Apr 19 23:43:12.355800 2026] [:error] [pid 15694:tid 15745] [client 20.251.192.228:8084] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "aeT4ELimB-jol1fwqAoeQQAAAZM"]
[Sun Apr 19 23:43:13.253161 2026] [:error] [pid 47886:tid 47893] [client 20.251.192.228:8171] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kbfr.php"] [unique_id "aeT4EUSe8yiyuPrD7yOMUQAAAMU"]
[Sun Apr 19 23:43:14.014783 2026] [:error] [pid 47773:tid 47818] [client 20.251.192.228:8166] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oco.php"] [unique_id "aeT4EuiBHdnCJDuPq9BhKgAAAEI"]
[Sun Apr 19 23:43:14.780137 2026] [:error] [pid 15694:tid 15737] [client 20.251.192.228:8144] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oco.php"] [unique_id "aeT4ErimB-jol1fwqAoeQwAAAYs"]
[Sun Apr 19 23:43:15.474841 2026] [:error] [pid 15694:tid 15735] [client 20.251.192.228:8064] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oco.php"] [unique_id "aeT4E7imB-jol1fwqAoeRAAAAYk"]
[Sun Apr 19 23:43:16.514354 2026] [:error] [pid 47773:tid 47834] [client 20.251.192.228:7819] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oco.php"] [unique_id "aeT4FOiBHdnCJDuPq9BhMAAAAFI"]
[Sun Apr 19 23:43:17.661467 2026] [:error] [pid 15760:tid 15785] [client 20.251.192.228:8073] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aeT4FfSdD_XHQMJ_ISt5XgAAAdE"]
[Sun Apr 19 23:43:18.665401 2026] [:error] [pid 47773:tid 47840] [client 20.251.192.228:8132] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aeT4FuiBHdnCJDuPq9BhPQAAAFg"]
[Sun Apr 19 23:43:19.564227 2026] [:error] [pid 47772:tid 47803] [client 20.251.192.228:8183] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aeT4F4c0L16cb4smAz_oaQAAAA4"]
[Sun Apr 19 23:43:20.892066 2026] [:error] [pid 15694:tid 15743] [client 20.251.192.228:8008] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "aeT4GLimB-jol1fwqAoeSgAAAZE"]
[Sun Apr 19 23:43:22.104023 2026] [:error] [pid 15764:tid 15829] [client 20.251.192.228:8087] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/azpaq.php"] [unique_id "aeT4GmLL_sqdSHoVp-RMhAAAAkM"]
[Sun Apr 19 23:43:23.068534 2026] [:error] [pid 47772:tid 47797] [client 20.251.192.228:8040] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/azpaq.php"] [unique_id "aeT4G4c0L16cb4smAz_oeAAAAAg"]
[Sun Apr 19 23:43:24.049604 2026] [:error] [pid 15763:tid 15812] [client 20.251.192.228:8170] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/azpaq.php"] [unique_id "aeT4HLMXv1Y1THOoxaAfCgAAAhA"]
[Sun Apr 19 23:43:25.369783 2026] [:error] [pid 15760:tid 15768] [client 20.251.192.228:8026] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/azpaq.php"] [unique_id "aeT4HfSdD_XHQMJ_ISt5gAAAAcA"]
[Sun Apr 19 23:43:26.448764 2026] [:error] [pid 15760:tid 15779] [client 20.251.192.228:8090] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fssxwoyh.php"] [unique_id "aeT4HvSdD_XHQMJ_ISt5hwAAAcs"]
[Sun Apr 19 23:43:27.547651 2026] [:error] [pid 15760:tid 15773] [client 20.251.192.228:8169] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fssxwoyh.php"] [unique_id "aeT4H_SdD_XHQMJ_ISt5jgAAAcU"]
[Sun Apr 19 23:43:28.544942 2026] [:error] [pid 15764:tid 15837] [client 20.251.192.228:8017] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fssxwoyh.php"] [unique_id "aeT4IGLL_sqdSHoVp-RM0gAAAks"]
[Sun Apr 19 23:43:29.290818 2026] [:error] [pid 15760:tid 15772] [client 20.251.192.228:8118] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fssxwoyh.php"] [unique_id "aeT4IfSdD_XHQMJ_ISt5lQAAAcQ"]
[Sun Apr 19 23:43:30.042289 2026] [:error] [pid 47775:tid 47846] [client 20.251.192.228:8117] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bivvw.php"] [unique_id "aeT4Irmztjlk9tsmoeww8AAAAIM"]
[Sun Apr 19 23:43:31.278640 2026] [:error] [pid 15760:tid 15772] [client 20.251.192.228:8094] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bivvw.php"] [unique_id "aeT4I_SdD_XHQMJ_ISt5oQAAAcQ"]
[Sun Apr 19 23:43:32.221503 2026] [:error] [pid 15760:tid 15780] [client 20.251.192.228:8131] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bivvw.php"] [unique_id "aeT4JPSdD_XHQMJ_ISt5qQAAAcw"]
[Sun Apr 19 23:43:32.961957 2026] [:error] [pid 15760:tid 15772] [client 20.251.192.228:8101] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bivvw.php"] [unique_id "aeT4JPSdD_XHQMJ_ISt5sAAAAcQ"]
[Sun Apr 19 23:43:33.791780 2026] [:error] [pid 15760:tid 15777] [client 20.251.192.228:8078] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bxhnfdgd.php"] [unique_id "aeT4JfSdD_XHQMJ_ISt5tAAAAck"]
[Sun Apr 19 23:43:34.455367 2026] [:error] [pid 15760:tid 15776] [client 20.251.192.228:8083] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bxhnfdgd.php"] [unique_id "aeT4JvSdD_XHQMJ_ISt5uwAAAcg"]
[Sun Apr 19 23:43:35.414658 2026] [:error] [pid 15764:tid 15851] [client 20.251.192.228:8074] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bxhnfdgd.php"] [unique_id "aeT4J2LL_sqdSHoVp-RM7gAAAlg"]
[Sun Apr 19 23:43:36.152521 2026] [:error] [pid 15764:tid 15850] [client 20.251.192.228:8070] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bxhnfdgd.php"] [unique_id "aeT4KGLL_sqdSHoVp-RM8gAAAlc"]
[Sun Apr 19 23:43:36.811873 2026] [:error] [pid 47772:tid 47803] [client 20.251.192.228:8081] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeT4KIc0L16cb4smAz_ouAAAAA4"]
[Sun Apr 19 23:43:37.675980 2026] [:error] [pid 15764:tid 15851] [client 20.251.192.228:8092] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeT4KWLL_sqdSHoVp-RM_gAAAlg"]
[Sun Apr 19 23:43:38.592460 2026] [:error] [pid 15763:tid 15798] [client 20.251.192.228:8015] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeT4KrMXv1Y1THOoxaAfDwAAAgI"]
[Sun Apr 19 23:43:39.521111 2026] [:error] [pid 15694:tid 15734] [client 20.251.192.228:8106] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeT4K7imB-jol1fwqAoeUgAAAYg"]
[Sun Apr 19 23:43:40.311627 2026] [:error] [pid 47772:tid 47798] [client 20.251.192.228:8103] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aeT4LIc0L16cb4smAz_ougAAAAk"]
[Sun Apr 19 23:43:41.101082 2026] [:error] [pid 15760:tid 15781] [client 20.251.192.228:8145] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aeT4LfSdD_XHQMJ_ISt54gAAAc0"]
[Sun Apr 19 23:43:41.822881 2026] [:error] [pid 15763:tid 15818] [client 20.251.192.228:8003] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aeT4LbMXv1Y1THOoxaAfEwAAAhY"]
[Sun Apr 19 23:43:42.693707 2026] [:error] [pid 15763:tid 15812] [client 20.251.192.228:8121] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goat.php"] [unique_id "aeT4LrMXv1Y1THOoxaAfGgAAAhA"]
[Sun Apr 19 23:43:56.554124 2026] [:error] [pid 15693:tid 15716] [client 20.251.192.228:8111] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "aeT4PMNMD-ccazQlTsloagAAAVQ"]
[Sun Apr 19 23:43:57.501527 2026] [:error] [pid 47772:tid 47795] [client 20.251.192.228:8142] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "aeT4PYc0L16cb4smAz_oywAAAAY"]
[Sun Apr 19 23:43:58.336684 2026] [:error] [pid 47772:tid 47811] [client 20.251.192.228:8097] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "aeT4Poc0L16cb4smAz_ozAAAABY"]
[Sun Apr 19 23:43:59.014744 2026] [:error] [pid 47772:tid 47799] [client 20.251.192.228:8182] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "aeT4P4c0L16cb4smAz_ozwAAAAo"]
[Sun Apr 19 23:43:59.921359 2026] [:error] [pid 15764:tid 15827] [client 20.251.192.228:8138] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/repurify.php"] [unique_id "aeT4P2LL_sqdSHoVp-RNHAAAAkE"]
[Sun Apr 19 23:44:00.930617 2026] [:error] [pid 47772:tid 47800] [client 20.251.192.228:8001] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/repurify.php"] [unique_id "aeT4QIc0L16cb4smAz_o1QAAAAs"]
[Sun Apr 19 23:44:02.244283 2026] [:error] [pid 15764:tid 15841] [client 20.251.192.228:8135] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/repurify.php"] [unique_id "aeT4QmLL_sqdSHoVp-RNJgAAAk8"]
[Sun Apr 19 23:44:02.974927 2026] [:error] [pid 47772:tid 47791] [client 20.251.192.228:8060] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/repurify.php"] [unique_id "aeT4Qoc0L16cb4smAz_o1wAAAAI"]
[Sun Apr 19 23:44:03.786090 2026] [:error] [pid 47772:tid 47808] [client 20.251.192.228:7942] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uujuu.php"] [unique_id "aeT4Q4c0L16cb4smAz_o3QAAABM"]
[Sun Apr 19 23:44:04.627876 2026] [:error] [pid 15764:tid 15832] [client 20.251.192.228:8069] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uujuu.php"] [unique_id "aeT4RGLL_sqdSHoVp-RNLQAAAkY"]
[Sun Apr 19 23:44:05.230631 2026] [:error] [pid 15694:tid 15743] [client 20.251.192.228:8093] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uujuu.php"] [unique_id "aeT4RbimB-jol1fwqAoeXgAAAZE"]
[Sun Apr 19 23:44:05.978399 2026] [:error] [pid 15763:tid 15796] [client 20.251.192.228:8152] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uujuu.php"] [unique_id "aeT4RbMXv1Y1THOoxaAfPgAAAgA"]
[Sun Apr 19 23:44:06.676924 2026] [:error] [pid 15763:tid 15816] [client 20.251.192.228:8175] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad.php"] [unique_id "aeT4RrMXv1Y1THOoxaAfQAAAAhQ"]
[Sun Apr 19 23:44:07.472465 2026] [:error] [pid 47773:tid 47838] [client 20.251.192.228:8009] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad.php"] [unique_id "aeT4R-iBHdnCJDuPq9BhUwAAAFY"]
[Sun Apr 19 23:44:08.141899 2026] [:error] [pid 15763:tid 15812] [client 20.251.192.228:8156] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad.php"] [unique_id "aeT4SLMXv1Y1THOoxaAfRQAAAhA"]
[Sun Apr 19 23:44:08.951573 2026] [:error] [pid 15760:tid 15768] [client 20.251.192.228:8129] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad.php"] [unique_id "aeT4SPSdD_XHQMJ_ISt6DQAAAcA"]
[Sun Apr 19 23:44:09.871275 2026] [:error] [pid 15760:tid 15777] [client 20.251.192.228:8030] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sde.php"] [unique_id "aeT4SfSdD_XHQMJ_ISt6EAAAAck"]
[Sun Apr 19 23:44:10.506246 2026] [:error] [pid 15760:tid 15792] [client 20.251.192.228:7963] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sde.php"] [unique_id "aeT4SvSdD_XHQMJ_ISt6EwAAAdg"]
[Sun Apr 19 23:44:11.164033 2026] [:error] [pid 15694:tid 15742] [client 20.251.192.228:8112] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sde.php"] [unique_id "aeT4S7imB-jol1fwqAoeYAAAAZA"]
[Sun Apr 19 23:44:11.730335 2026] [:error] [pid 15693:tid 15699] [client 20.251.192.228:8089] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sde.php"] [unique_id "aeT4S8NMD-ccazQlTslofwAAAUM"]
[Sun Apr 19 23:44:12.335416 2026] [:error] [pid 15765:tid 15873] [client 20.251.192.228:8006] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "aeT4TPRqinw-W5EwQ74PKAAAApQ"]
[Sun Apr 19 23:44:13.010874 2026] [:error] [pid 47886:tid 47908] [client 20.251.192.228:8155] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "aeT4TUSe8yiyuPrD7yOMXwAAANQ"]
[Sun Apr 19 23:44:13.747781 2026] [:error] [pid 15765:tid 15868] [client 20.251.192.228:8012] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "aeT4TfRqinw-W5EwQ74PLQAAAo8"]
[Sun Apr 19 23:44:14.382306 2026] [:error] [pid 15764:tid 15831] [client 20.251.192.228:8067] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "aeT4TmLL_sqdSHoVp-RNPAAAAkU"]
[Sun Apr 19 23:44:15.695119 2026] [:error] [pid 15693:tid 15715] [client 20.251.192.228:8108] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtiiy.php"] [unique_id "aeT4T8NMD-ccazQlTsloggAAAVM"]
[Sun Apr 19 23:44:16.908887 2026] [:error] [pid 47773:tid 47829] [client 20.251.192.228:8023] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtiiy.php"] [unique_id "aeT4UOiBHdnCJDuPq9BhXwAAAE0"]
[Sun Apr 19 23:44:17.494605 2026] [:error] [pid 47773:tid 47818] [client 20.251.192.228:8039] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtiiy.php"] [unique_id "aeT4UeiBHdnCJDuPq9BhYQAAAEI"]
[Sun Apr 19 23:44:18.110290 2026] [:error] [pid 47772:tid 47796] [client 20.251.192.228:8146] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtiiy.php"] [unique_id "aeT4Uoc0L16cb4smAz_o7QAAAAc"]
[Sun Apr 19 23:44:18.698802 2026] [:error] [pid 47775:tid 47856] [client 20.251.192.228:8042] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeT4Urmztjlk9tsmoewxAgAAAI0"]
[Sun Apr 19 23:44:19.288490 2026] [:error] [pid 15764:tid 15851] [client 20.251.192.228:8072] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeT4U2LL_sqdSHoVp-RNQQAAAlg"]
[Sun Apr 19 23:44:19.923702 2026] [:error] [pid 15764:tid 15846] [client 20.251.192.228:8086] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeT4U2LL_sqdSHoVp-RNRQAAAlQ"]
[Sun Apr 19 23:44:20.525792 2026] [:error] [pid 47772:tid 47789] [client 20.251.192.228:8002] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeT4VIc0L16cb4smAz_o8AAAAAA"]
[Sun Apr 19 23:44:21.204277 2026] [:error] [pid 47773:tid 47822] [client 20.251.192.228:8020] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "aeT4VeiBHdnCJDuPq9BhawAAAEY"]
[Sun Apr 19 23:44:21.865656 2026] [:error] [pid 47772:tid 47805] [client 20.251.192.228:8024] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "aeT4VYc0L16cb4smAz_o9QAAABA"]
[Sun Apr 19 23:44:22.455295 2026] [:error] [pid 15760:tid 15790] [client 20.251.192.228:8004] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "aeT4VvSdD_XHQMJ_ISt6HwAAAdY"]
[Sun Apr 19 23:44:23.161667 2026] [:error] [pid 15764:tid 15834] [client 20.251.192.228:8028] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new3.php"] [unique_id "aeT4V2LL_sqdSHoVp-RNUQAAAkg"]
[Sun Apr 19 23:44:23.246631 2026] [:error] [pid 15764:tid 15843] [client 4.219.8.165:30541] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeT4V2LL_sqdSHoVp-RNUgAAAlE"]
[Sun Apr 19 23:44:23.800400 2026] [:error] [pid 47886:tid 47912] [client 20.251.192.228:8095] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tdsaz.php"] [unique_id "aeT4V0Se8yiyuPrD7yOMZgAAANg"]
[Sun Apr 19 23:44:24.402664 2026] [:error] [pid 47886:tid 47897] [client 20.251.192.228:8011] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tdsaz.php"] [unique_id "aeT4WESe8yiyuPrD7yOMZwAAAMk"]
[Sun Apr 19 23:44:25.046280 2026] [:error] [pid 15760:tid 15789] [client 20.251.192.228:8141] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tdsaz.php"] [unique_id "aeT4WfSdD_XHQMJ_ISt6JQAAAdU"]
[Sun Apr 19 23:44:25.681363 2026] [:error] [pid 15694:tid 15745] [client 20.251.192.228:8167] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tdsaz.php"] [unique_id "aeT4WbimB-jol1fwqAoeZwAAAZM"]
[Sun Apr 19 23:44:26.264190 2026] [:error] [pid 15765:tid 15866] [client 20.251.192.228:8068] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/SS72_kKKjT.php"] [unique_id "aeT4WvRqinw-W5EwQ74PNAAAAo0"]
[Sun Apr 19 23:44:26.874813 2026] [:error] [pid 47775:tid 47863] [client 20.251.192.228:8154] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/SS72_kKKjT.php"] [unique_id "aeT4Wrmztjlk9tsmoewxBgAAAJQ"]
[Sun Apr 19 23:44:26.970682 2026] [:error] [pid 47886:tid 47888] [client 4.219.8.165:34808] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeT4WkSe8yiyuPrD7yOMaAAAAMA"]
[Sun Apr 19 23:44:27.553456 2026] [:error] [pid 15764:tid 15845] [client 20.251.192.228:8071] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/SS72_kKKjT.php"] [unique_id "aeT4W2LL_sqdSHoVp-RNWQAAAlM"]
[Sun Apr 19 23:44:28.354788 2026] [:error] [pid 47772:tid 47796] [client 20.251.192.228:8116] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/SS72_kKKjT.php"] [unique_id "aeT4XIc0L16cb4smAz_o-gAAAAc"]
[Sun Apr 19 23:44:28.962505 2026] [:error] [pid 15764:tid 15832] [client 20.251.192.228:8016] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aeT4XGLL_sqdSHoVp-RNXAAAAkY"]
[Sun Apr 19 23:44:29.654975 2026] [:error] [pid 15764:tid 15840] [client 4.219.8.165:3605] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeT4XWLL_sqdSHoVp-RNXwAAAk4"]
[Sun Apr 19 23:44:29.792209 2026] [:error] [pid 47772:tid 47799] [client 20.251.192.228:8139] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aeT4XYc0L16cb4smAz_pBAAAAAo"]
[Sun Apr 19 23:44:30.468674 2026] [:error] [pid 15760:tid 15788] [client 20.251.192.228:8048] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aeT4XvSdD_XHQMJ_ISt6UwAAAdQ"]
[Sun Apr 19 23:44:31.138134 2026] [:error] [pid 15764:tid 15844] [client 20.251.192.228:8157] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aeT4X2LL_sqdSHoVp-RNZgAAAlI"]
[Sun Apr 19 23:44:31.871911 2026] [:error] [pid 47886:tid 47907] [client 20.251.192.228:8056] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kaduu.php"] [unique_id "aeT4X0Se8yiyuPrD7yOMawAAANM"]
[Sun Apr 19 23:44:32.100418 2026] [:error] [pid 47775:tid 47857] [client 4.219.8.165:35756] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeT4YLmztjlk9tsmoewxFwAAAI4"]
[Sun Apr 19 23:44:32.584541 2026] [:error] [pid 47773:tid 47832] [client 20.251.192.228:8031] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kaduu.php"] [unique_id "aeT4YOiBHdnCJDuPq9BhegAAAFA"]
[Sun Apr 19 23:44:33.475884 2026] [:error] [pid 15694:tid 15742] [client 20.251.192.228:8051] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kaduu.php"] [unique_id "aeT4YbimB-jol1fwqAoecwAAAZA"]
[Sun Apr 19 23:44:34.169574 2026] [:error] [pid 47772:tid 47809] [client 20.251.192.228:8159] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kaduu.php"] [unique_id "aeT4Yoc0L16cb4smAz_pBwAAABQ"]
[Sun Apr 19 23:44:34.917017 2026] [:error] [pid 47886:tid 47910] [client 20.251.192.228:8124] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-124.php"] [unique_id "aeT4YkSe8yiyuPrD7yOMbwAAANY"]
[Sun Apr 19 23:44:35.915470 2026] [:error] [pid 15763:tid 15800] [client 20.251.192.228:8045] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-124.php"] [unique_id "aeT4Y7MXv1Y1THOoxaAfcwAAAgQ"]
[Sun Apr 19 23:44:36.645177 2026] [:error] [pid 15760:tid 15772] [client 20.251.192.228:7969] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-124.php"] [unique_id "aeT4ZPSdD_XHQMJ_ISt6YAAAAcQ"]
[Sun Apr 19 23:44:37.555591 2026] [:error] [pid 47775:tid 47858] [client 20.251.192.228:8185] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zc-124.php"] [unique_id "aeT4Zbmztjlk9tsmoewxHwAAAI8"]
[Sun Apr 19 23:44:38.531046 2026] [:error] [pid 47772:tid 47810] [client 20.251.192.228:8018] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggddssvl.php"] [unique_id "aeT4Zoc0L16cb4smAz_pDQAAABU"]
[Sun Apr 19 23:44:39.348047 2026] [:error] [pid 15764:tid 15835] [client 20.251.192.228:8120] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggddssvl.php"] [unique_id "aeT4Z2LL_sqdSHoVp-RNdgAAAkk"]
[Sun Apr 19 23:44:40.172920 2026] [:error] [pid 15764:tid 15838] [client 20.251.192.228:8127] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggddssvl.php"] [unique_id "aeT4aGLL_sqdSHoVp-RNegAAAkw"]
[Sun Apr 19 23:44:41.101592 2026] [:error] [pid 47773:tid 47826] [client 20.251.192.228:8075] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggddssvl.php"] [unique_id "aeT4aeiBHdnCJDuPq9BhiAAAAEo"]
[Sun Apr 19 23:44:42.534380 2026] [:error] [pid 15760:tid 15774] [client 20.251.192.228:7978] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aqotrjkg.php"] [unique_id "aeT4avSdD_XHQMJ_ISt6ZwAAAcY"]
[Sun Apr 19 23:44:43.933400 2026] [:error] [pid 47886:tid 47897] [client 20.251.192.228:8140] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aqotrjkg.php"] [unique_id "aeT4a0Se8yiyuPrD7yOMcwAAAMk"]
[Sun Apr 19 23:44:45.248585 2026] [:error] [pid 47772:tid 47791] [client 20.251.192.228:8062] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aqotrjkg.php"] [unique_id "aeT4bYc0L16cb4smAz_pGwAAAAI"]
[Sun Apr 19 23:44:46.401976 2026] [:error] [pid 15764:tid 15846] [client 20.251.192.228:8029] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aqotrjkg.php"] [unique_id "aeT4bmLL_sqdSHoVp-RNkAAAAlQ"]
[Sun Apr 19 23:44:47.531518 2026] [:error] [pid 47772:tid 47801] [client 20.251.192.228:7991] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "aeT4b4c0L16cb4smAz_pLgAAAAw"]
[Sun Apr 19 23:44:48.425939 2026] [:error] [pid 15760:tid 15791] [client 20.251.192.228:8134] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "aeT4cPSdD_XHQMJ_ISt6awAAAdc"]
[Sun Apr 19 23:44:49.331490 2026] [:error] [pid 47772:tid 47803] [client 20.251.192.228:8137] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "aeT4cYc0L16cb4smAz_pMwAAAA4"]
[Sun Apr 19 23:44:50.068298 2026] [:error] [pid 15763:tid 15807] [client 20.251.192.228:8141] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "aeT4crMXv1Y1THOoxaAffgAAAgs"]
[Sun Apr 19 23:44:50.839546 2026] [:error] [pid 47773:tid 47831] [client 20.251.192.228:7941] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jodohghi.php"] [unique_id "aeT4cuiBHdnCJDuPq9BhnQAAAE8"]
[Sun Apr 19 23:44:51.503389 2026] [:error] [pid 15763:tid 15797] [client 20.251.192.228:7965] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jodohghi.php"] [unique_id "aeT4c7MXv1Y1THOoxaAfgwAAAgE"]
[Sun Apr 19 23:44:52.242404 2026] [:error] [pid 47772:tid 47797] [client 20.251.192.228:8181] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jodohghi.php"] [unique_id "aeT4dIc0L16cb4smAz_pQgAAAAg"]
[Sun Apr 19 23:44:53.375734 2026] [:error] [pid 47772:tid 47806] [client 20.251.192.228:8104] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jodohghi.php"] [unique_id "aeT4dYc0L16cb4smAz_pRQAAABE"]
[Sun Apr 19 23:44:54.747167 2026] [:error] [pid 15764:tid 15839] [client 20.251.192.228:8063] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/intall.php"] [unique_id "aeT4dmLL_sqdSHoVp-RNmwAAAk0"]
[Sun Apr 19 23:45:08.427273 2026] [:error] [pid 15763:tid 15800] [client 20.251.192.228:8158] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2ksm17n.php"] [unique_id "aeT4hLMXv1Y1THOoxaAfsgAAAgQ"]
[Sun Apr 19 23:45:09.132384 2026] [:error] [pid 15764:tid 15826] [client 20.251.192.228:8033] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2ksm17n.php"] [unique_id "aeT4hWLL_sqdSHoVp-RNxQAAAkA"]
[Sun Apr 19 23:45:09.879662 2026] [:error] [pid 15764:tid 15840] [client 20.251.192.228:7951] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2ksm17n.php"] [unique_id "aeT4hWLL_sqdSHoVp-RNzAAAAk4"]
[Sun Apr 19 23:45:10.614229 2026] [:error] [pid 15763:tid 15815] [client 20.251.192.228:7945] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2ksm17n.php"] [unique_id "aeT4hrMXv1Y1THOoxaAfswAAAhM"]
[Sun Apr 19 23:45:11.414181 2026] [:error] [pid 15764:tid 15846] [client 20.251.192.228:8047] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeT4h2LL_sqdSHoVp-RN0QAAAlQ"]
[Sun Apr 19 23:45:12.146996 2026] [:error] [pid 15693:tid 15701] [client 20.251.192.228:8061] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeT4iMNMD-ccazQlTslopQAAAUU"]
[Sun Apr 19 23:45:13.086427 2026] [:error] [pid 15763:tid 15820] [client 20.251.192.228:7988] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeT4ibMXv1Y1THOoxaAftgAAAhg"]
[Sun Apr 19 23:45:14.081655 2026] [:error] [pid 47772:tid 47809] [client 20.251.192.228:8057] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeT4ioc0L16cb4smAz_pUgAAABQ"]
[Sun Apr 19 23:45:14.750765 2026] [:error] [pid 47775:tid 47846] [client 20.251.192.228:8059] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeT4irmztjlk9tsmoewxQQAAAIM"]
[Sun Apr 19 23:45:15.572485 2026] [:error] [pid 15760:tid 15788] [client 20.251.192.228:8191] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeT4i_SdD_XHQMJ_ISt6fwAAAdQ"]
[Sun Apr 19 23:45:16.249458 2026] [:error] [pid 15760:tid 15782] [client 20.251.192.228:7970] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeT4jPSdD_XHQMJ_ISt6gwAAAc4"]
[Sun Apr 19 23:45:17.308160 2026] [:error] [pid 15693:tid 15705] [client 20.251.192.228:8147] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeT4jcNMD-ccazQlTslopwAAAUk"]
[Sun Apr 19 23:45:17.979645 2026] [:error] [pid 15763:tid 15806] [client 20.251.192.228:8114] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "aeT4jbMXv1Y1THOoxaAfuAAAAgo"]
[Sun Apr 19 23:45:18.582584 2026] [:error] [pid 47775:tid 47849] [client 20.251.192.228:8025] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "aeT4jrmztjlk9tsmoewxSwAAAIY"]
[Sun Apr 19 23:45:19.347719 2026] [:error] [pid 15763:tid 15797] [client 20.251.192.228:7962] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "aeT4j7MXv1Y1THOoxaAfvgAAAgE"]
[Sun Apr 19 23:45:20.048888 2026] [:error] [pid 15763:tid 15808] [client 20.251.192.228:7995] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wglum1.php"] [unique_id "aeT4kLMXv1Y1THOoxaAfwQAAAgw"]
[Sun Apr 19 23:45:20.904063 2026] [:error] [pid 15693:tid 15703] [client 20.251.192.228:8122] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "aeT4kMNMD-ccazQlTslorAAAAUc"]
[Sun Apr 19 23:45:21.549010 2026] [:error] [pid 15763:tid 15815] [client 20.251.192.228:7944] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "aeT4kbMXv1Y1THOoxaAfxAAAAhM"]
[Sun Apr 19 23:45:22.139108 2026] [:error] [pid 15763:tid 15805] [client 20.251.192.228:8027] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "aeT4krMXv1Y1THOoxaAfxgAAAgk"]
[Sun Apr 19 23:45:22.788903 2026] [:error] [pid 47775:tid 47865] [client 20.251.192.228:8021] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/vx.php"] [unique_id "aeT4krmztjlk9tsmoewxWgAAAJY"]
[Sun Apr 19 23:45:23.455651 2026] [:error] [pid 15760:tid 15792] [client 20.251.192.228:8007] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13ede.php"] [unique_id "aeT4k_SdD_XHQMJ_ISt6hgAAAdg"]
[Sun Apr 19 23:45:24.514193 2026] [:error] [pid 15763:tid 15809] [client 20.251.192.228:7974] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13ede.php"] [unique_id "aeT4lLMXv1Y1THOoxaAfzAAAAg0"]
[Sun Apr 19 23:45:25.380483 2026] [:error] [pid 47772:tid 47790] [client 20.251.192.228:7972] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13ede.php"] [unique_id "aeT4lYc0L16cb4smAz_pWQAAAAE"]
[Sun Apr 19 23:45:26.073702 2026] [:error] [pid 47775:tid 47864] [client 20.251.192.228:8010] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13ede.php"] [unique_id "aeT4lrmztjlk9tsmoewxZAAAAJU"]
[Sun Apr 19 23:45:26.715473 2026] [:error] [pid 47775:tid 47863] [client 20.251.192.228:7981] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/baixy.php"] [unique_id "aeT4lrmztjlk9tsmoewxZgAAAJQ"]
[Sun Apr 19 23:45:27.506640 2026] [:error] [pid 15765:tid 15868] [client 20.251.192.228:7975] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/baixy.php"] [unique_id "aeT4l_Rqinw-W5EwQ74PQgAAAo8"]
[Sun Apr 19 23:45:28.163753 2026] [:error] [pid 15693:tid 15698] [client 20.251.192.228:7902] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/baixy.php"] [unique_id "aeT4mMNMD-ccazQlTslorwAAAUI"]
[Sun Apr 19 23:45:28.876104 2026] [:error] [pid 47886:tid 47912] [client 20.251.192.228:7939] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/baixy.php"] [unique_id "aeT4mESe8yiyuPrD7yOMmAAAANg"]
[Sun Apr 19 23:45:29.619410 2026] [:error] [pid 47772:tid 47798] [client 20.251.192.228:8123] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hnphq.php"] [unique_id "aeT4mYc0L16cb4smAz_pYgAAAAk"]
[Sun Apr 19 23:45:30.289950 2026] [:error] [pid 47775:tid 47852] [client 20.251.192.228:8110] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hnphq.php"] [unique_id "aeT4mrmztjlk9tsmoewxbgAAAIk"]
[Sun Apr 19 23:45:30.958006 2026] [:error] [pid 47775:tid 47849] [client 20.251.192.228:7929] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hnphq.php"] [unique_id "aeT4mrmztjlk9tsmoewxbwAAAIY"]
[Sun Apr 19 23:45:31.697645 2026] [:error] [pid 15763:tid 15807] [client 20.251.192.228:8100] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hnphq.php"] [unique_id "aeT4m7MXv1Y1THOoxaAf1AAAAgs"]
[Sun Apr 19 23:45:32.490065 2026] [:error] [pid 15763:tid 15817] [client 20.251.192.228:8055] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aeT4nLMXv1Y1THOoxaAf1wAAAhU"]
[Sun Apr 19 23:45:33.294290 2026] [:error] [pid 15760:tid 15774] [client 20.251.192.228:8046] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aeT4nfSdD_XHQMJ_ISt6lQAAAcY"]
[Sun Apr 19 23:45:34.010943 2026] [:error] [pid 15763:tid 15813] [client 20.251.192.228:8113] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aeT4nrMXv1Y1THOoxaAf2QAAAhE"]
[Sun Apr 19 23:45:34.888488 2026] [:error] [pid 47772:tid 47790] [client 20.251.192.228:7993] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdf.php"] [unique_id "aeT4noc0L16cb4smAz_pdAAAAAE"]
[Sun Apr 19 23:45:35.835450 2026] [:error] [pid 15763:tid 15814] [client 20.251.192.228:8034] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ifrea.php"] [unique_id "aeT4n7MXv1Y1THOoxaAf2wAAAhI"]
[Sun Apr 19 23:45:36.982488 2026] [:error] [pid 15764:tid 15829] [client 20.251.192.228:7960] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ifrea.php"] [unique_id "aeT4oGLL_sqdSHoVp-RN9gAAAkM"]
[Sun Apr 19 23:45:37.708184 2026] [:error] [pid 15764:tid 15843] [client 20.251.192.228:8102] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ifrea.php"] [unique_id "aeT4oWLL_sqdSHoVp-RN-wAAAlE"]
[Sun Apr 19 23:45:38.693837 2026] [:error] [pid 15760:tid 15780] [client 20.251.192.228:8041] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ifrea.php"] [unique_id "aeT4ovSdD_XHQMJ_ISt6mQAAAcw"]
[Sun Apr 19 23:45:39.272473 2026] [:error] [pid 47773:tid 47833] [client 20.251.192.228:8096] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfil.php"] [unique_id "aeT4o-iBHdnCJDuPq9BhsQAAAFE"]
[Sun Apr 19 23:45:40.089074 2026] [:error] [pid 47772:tid 47791] [client 20.251.192.228:8032] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfil.php"] [unique_id "aeT4pIc0L16cb4smAz_pegAAAAI"]
[Sun Apr 19 23:45:40.863444 2026] [:error] [pid 47772:tid 47795] [client 20.251.192.228:8036] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfil.php"] [unique_id "aeT4pIc0L16cb4smAz_pfAAAAAY"]
[Sun Apr 19 23:45:41.503595 2026] [:error] [pid 15760:tid 15779] [client 20.251.192.228:8099] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfil.php"] [unique_id "aeT4pfSdD_XHQMJ_ISt6ngAAAcs"]
[Sun Apr 19 23:45:42.245478 2026] [:error] [pid 15760:tid 15790] [client 20.251.192.228:7983] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX2.php"] [unique_id "aeT4pvSdD_XHQMJ_ISt6oAAAAdY"]
[Sun Apr 19 23:45:42.992591 2026] [:error] [pid 15760:tid 15769] [client 20.251.192.228:8053] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX2.php"] [unique_id "aeT4pvSdD_XHQMJ_ISt6pAAAAcE"]
[Sun Apr 19 23:45:43.757896 2026] [:error] [pid 15760:tid 15785] [client 20.251.192.228:8125] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX2.php"] [unique_id "aeT4p_SdD_XHQMJ_ISt6qQAAAdE"]
[Sun Apr 19 23:45:44.775018 2026] [:error] [pid 15760:tid 15775] [client 20.251.192.228:7937] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/CDX2.php"] [unique_id "aeT4qPSdD_XHQMJ_ISt6sAAAAcc"]
[Sun Apr 19 23:45:45.524439 2026] [:error] [pid 15763:tid 15796] [client 20.251.192.228:7958] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "aeT4qbMXv1Y1THOoxaAf4gAAAgA"]
[Sun Apr 19 23:45:46.442045 2026] [:error] [pid 47773:tid 47818] [client 20.251.192.228:7881] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "aeT4quiBHdnCJDuPq9BhuAAAAEI"]
[Sun Apr 19 23:45:47.848126 2026] [:error] [pid 15760:tid 15775] [client 20.251.192.228:7985] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "aeT4q_SdD_XHQMJ_ISt6twAAAcc"]
[Sun Apr 19 23:45:48.939901 2026] [:error] [pid 47773:tid 47821] [client 20.251.192.228:7938] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hhxc.php"] [unique_id "aeT4rOiBHdnCJDuPq9BhxAAAAEU"]
[Sun Apr 19 23:45:49.805445 2026] [:error] [pid 15760:tid 15788] [client 20.251.192.228:8105] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vrhiw.php"] [unique_id "aeT4rfSdD_XHQMJ_ISt6wAAAAdQ"]
[Sun Apr 19 23:45:50.977059 2026] [:error] [pid 15760:tid 15787] [client 20.251.192.228:7895] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vrhiw.php"] [unique_id "aeT4rvSdD_XHQMJ_ISt6xAAAAdM"]
[Sun Apr 19 23:45:52.679769 2026] [:error] [pid 15760:tid 15769] [client 20.251.192.228:7878] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vrhiw.php"] [unique_id "aeT4sPSdD_XHQMJ_ISt6yAAAAcE"]
[Sun Apr 19 23:45:54.723535 2026] [:error] [pid 15760:tid 15772] [client 20.251.192.228:7982] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vrhiw.php"] [unique_id "aeT4svSdD_XHQMJ_ISt60AAAAcQ"]
[Sun Apr 19 23:45:56.737211 2026] [:error] [pid 15760:tid 15776] [client 20.251.192.228:7966] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9EaklzMysJ.php"] [unique_id "aeT4tPSdD_XHQMJ_ISt62AAAAcg"]
[Sun Apr 19 23:45:57.862281 2026] [:error] [pid 15760:tid 15770] [client 20.251.192.228:7882] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9EaklzMysJ.php"] [unique_id "aeT4tfSdD_XHQMJ_ISt63QAAAcI"]
[Sun Apr 19 23:45:59.379472 2026] [:error] [pid 15760:tid 15779] [client 20.251.192.228:8044] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9EaklzMysJ.php"] [unique_id "aeT4t_SdD_XHQMJ_ISt65AAAAcs"]
[Sun Apr 19 23:46:00.742578 2026] [:error] [pid 47772:tid 47813] [client 20.251.192.228:7880] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9EaklzMysJ.php"] [unique_id "aeT4uIc0L16cb4smAz_pjQAAABg"]
[Sun Apr 19 23:46:01.725190 2026] [:error] [pid 47886:tid 47900] [client 20.251.192.228:7989] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws87.php"] [unique_id "aeT4uUSe8yiyuPrD7yOMnwAAAMw"]
[Sun Apr 19 23:46:03.100462 2026] [:error] [pid 47773:tid 47829] [client 20.251.192.228:7976] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws87.php"] [unique_id "aeT4u-iBHdnCJDuPq9BhzQAAAE0"]
[Sun Apr 19 23:46:03.999632 2026] [:error] [pid 47772:tid 47791] [client 20.251.192.228:7999] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws87.php"] [unique_id "aeT4u4c0L16cb4smAz_plAAAAAI"]
[Sun Apr 19 23:46:04.966103 2026] [:error] [pid 47772:tid 47794] [client 20.251.192.228:8115] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws87.php"] [unique_id "aeT4vIc0L16cb4smAz_pmQAAAAU"]
[Sun Apr 19 23:46:05.646577 2026] [:error] [pid 47772:tid 47792] [client 20.251.192.228:7911] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2.php"] [unique_id "aeT4vYc0L16cb4smAz_pngAAAAM"]
[Sun Apr 19 23:46:06.492427 2026] [:error] [pid 47772:tid 47806] [client 20.251.192.228:7899] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h2.php"] [unique_id "aeT4voc0L16cb4smAz_powAAABE"]
[Sun Apr 19 23:46:21.597475 2026] [:error] [pid 15764:tid 15830] [client 20.251.192.228:7947] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeT4zWLL_sqdSHoVp-ROYgAAAkQ"]
[Sun Apr 19 23:46:22.331502 2026] [:error] [pid 15760:tid 15784] [client 20.251.192.228:7836] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeT4zvSdD_XHQMJ_ISt7FQAAAdA"]
[Sun Apr 19 23:46:23.077843 2026] [:error] [pid 15694:tid 15730] [client 20.251.192.228:7910] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeT4z7imB-jol1fwqAoelAAAAYQ"]
[Sun Apr 19 23:46:24.032639 2026] [:error] [pid 15763:tid 15820] [client 20.251.192.228:8043] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeT40LMXv1Y1THOoxaAgBAAAAhg"]
[Sun Apr 19 23:46:24.909095 2026] [:error] [pid 15763:tid 15814] [client 20.251.192.228:7949] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aeT40LMXv1Y1THOoxaAgCAAAAhI"]
[Sun Apr 19 23:46:25.729605 2026] [:error] [pid 15760:tid 15791] [client 20.251.192.228:8000] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aeT40fSdD_XHQMJ_ISt7FgAAAdc"]
[Sun Apr 19 23:46:26.698045 2026] [:error] [pid 47772:tid 47804] [client 20.251.192.228:8058] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aeT40oc0L16cb4smAz_pyQAAAA8"]
[Sun Apr 19 23:46:27.450207 2026] [:error] [pid 47772:tid 47810] [client 20.251.192.228:7873] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aeT404c0L16cb4smAz_pywAAABU"]
[Sun Apr 19 23:46:28.202019 2026] [:error] [pid 15763:tid 15807] [client 20.251.192.228:7997] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeT41LMXv1Y1THOoxaAgDgAAAgs"]
[Sun Apr 19 23:46:28.891674 2026] [:error] [pid 47772:tid 47794] [client 20.251.192.228:7990] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeT41Ic0L16cb4smAz_p0QAAAAU"]
[Sun Apr 19 23:46:29.531407 2026] [:error] [pid 15763:tid 15819] [client 20.251.192.228:7887] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeT41bMXv1Y1THOoxaAgEgAAAhc"]
[Sun Apr 19 23:46:30.177913 2026] [:error] [pid 15694:tid 15743] [client 20.251.192.228:8035] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeT41rimB-jol1fwqAoemAAAAZE"]
[Sun Apr 19 23:46:30.778058 2026] [:error] [pid 15763:tid 15813] [client 20.251.192.228:7896] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "aeT41rMXv1Y1THOoxaAgFAAAAhE"]
[Sun Apr 19 23:46:31.522606 2026] [:error] [pid 47772:tid 47797] [client 20.251.192.228:8037] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "aeT414c0L16cb4smAz_p3QAAAAg"]
[Sun Apr 19 23:46:32.189498 2026] [:error] [pid 15693:tid 15710] [client 20.251.192.228:7961] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "aeT42MNMD-ccazQlTslouQAAAU4"]
[Sun Apr 19 23:46:33.100473 2026] [:error] [pid 15764:tid 15836] [client 20.251.192.228:7998] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/161dfd072f.php"] [unique_id "aeT42WLL_sqdSHoVp-RObQAAAko"]
[Sun Apr 19 23:46:33.708205 2026] [:error] [pid 15764:tid 15840] [client 20.251.192.228:8187] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "aeT42WLL_sqdSHoVp-RObgAAAk4"]
[Sun Apr 19 23:46:34.330130 2026] [:error] [pid 15693:tid 15697] [client 20.251.192.228:7959] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "aeT42sNMD-ccazQlTslouwAAAUE"]
[Sun Apr 19 23:46:34.896359 2026] [:error] [pid 47772:tid 47800] [client 20.251.192.228:7909] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "aeT42oc0L16cb4smAz_p5QAAAAs"]
[Sun Apr 19 23:46:35.592981 2026] [:error] [pid 47772:tid 47797] [client 20.251.192.228:8022] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iindv.php"] [unique_id "aeT424c0L16cb4smAz_p5wAAAAg"]
[Sun Apr 19 23:46:36.396382 2026] [:error] [pid 47772:tid 47811] [client 20.251.192.228:7933] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ovajckrrj.php"] [unique_id "aeT43Ic0L16cb4smAz_p6gAAABY"]
[Sun Apr 19 23:46:37.094981 2026] [:error] [pid 15765:tid 15869] [client 20.251.192.228:8082] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ovajckrrj.php"] [unique_id "aeT43fRqinw-W5EwQ74PVgAAApA"]
[Sun Apr 19 23:46:37.691142 2026] [:error] [pid 15765:tid 15873] [client 20.251.192.228:7877] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ovajckrrj.php"] [unique_id "aeT43fRqinw-W5EwQ74PWQAAApQ"]
[Sun Apr 19 23:46:38.295786 2026] [:error] [pid 15764:tid 15831] [client 20.251.192.228:8128] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ovajckrrj.php"] [unique_id "aeT43mLL_sqdSHoVp-ROcgAAAkU"]
[Sun Apr 19 23:46:39.025503 2026] [:error] [pid 47886:tid 47902] [client 20.251.192.228:8188] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/106.php"] [unique_id "aeT430Se8yiyuPrD7yOMtQAAAM4"]
[Sun Apr 19 23:46:39.859091 2026] [:error] [pid 47772:tid 47791] [client 20.251.192.228:8126] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/106.php"] [unique_id "aeT434c0L16cb4smAz_p8AAAAAI"]
[Sun Apr 19 23:46:40.640617 2026] [:error] [pid 15693:tid 15707] [client 20.251.192.228:8151] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/106.php"] [unique_id "aeT44MNMD-ccazQlTslovQAAAUs"]
[Sun Apr 19 23:46:41.296553 2026] [:error] [pid 15763:tid 15812] [client 20.251.192.228:8050] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/106.php"] [unique_id "aeT44bMXv1Y1THOoxaAgIgAAAhA"]
[Sun Apr 19 23:46:42.049588 2026] [:error] [pid 15765:tid 15865] [client 20.251.192.228:7943] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xcakx.php"] [unique_id "aeT44vRqinw-W5EwQ74PXwAAAow"]
[Sun Apr 19 23:46:42.889271 2026] [:error] [pid 47773:tid 47840] [client 20.251.192.228:7950] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xcakx.php"] [unique_id "aeT44uiBHdnCJDuPq9Bh6AAAAFg"]
[Sun Apr 19 23:46:43.508996 2026] [:error] [pid 15693:tid 15705] [client 20.251.192.228:7875] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xcakx.php"] [unique_id "aeT448NMD-ccazQlTslowAAAAUk"]
[Sun Apr 19 23:46:44.321596 2026] [:error] [pid 15765:tid 15860] [client 20.251.192.228:7903] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xcakx.php"] [unique_id "aeT45PRqinw-W5EwQ74PYQAAAoc"]
[Sun Apr 19 23:46:44.959216 2026] [:error] [pid 15760:tid 15786] [client 20.251.192.228:7876] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "aeT45PSdD_XHQMJ_ISt7GwAAAdI"]
[Sun Apr 19 23:46:45.789196 2026] [:error] [pid 15694:tid 15749] [client 20.251.192.228:7926] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "aeT45bimB-jol1fwqAoergAAAZc"]
[Sun Apr 19 23:46:46.590120 2026] [:error] [pid 47773:tid 47824] [client 20.251.192.228:7971] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "aeT45uiBHdnCJDuPq9Bh6wAAAEg"]
[Sun Apr 19 23:46:47.991132 2026] [:error] [pid 47772:tid 47795] [client 20.251.192.228:7953] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Spow_SRw.php"] [unique_id "aeT454c0L16cb4smAz_p9QAAAAY"]
[Sun Apr 19 23:46:49.034106 2026] [:error] [pid 47772:tid 47812] [client 20.251.192.228:8013] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhigtouj.php"] [unique_id "aeT46Yc0L16cb4smAz_p-wAAABc"]
[Sun Apr 19 23:46:50.313060 2026] [:error] [pid 15760:tid 15775] [client 20.251.192.228:7893] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhigtouj.php"] [unique_id "aeT46vSdD_XHQMJ_ISt7IwAAAcc"]
[Sun Apr 19 23:46:51.178557 2026] [:error] [pid 15760:tid 15778] [client 20.251.192.228:7884] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhigtouj.php"] [unique_id "aeT46_SdD_XHQMJ_ISt7KgAAAco"]
[Sun Apr 19 23:46:51.916117 2026] [:error] [pid 15760:tid 15786] [client 20.251.192.228:7905] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhigtouj.php"] [unique_id "aeT46_SdD_XHQMJ_ISt7LwAAAdI"]
[Sun Apr 19 23:46:52.557900 2026] [:error] [pid 15694:tid 15740] [client 20.251.192.228:7912] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zyjhr.php"] [unique_id "aeT47LimB-jol1fwqAoesAAAAY4"]
[Sun Apr 19 23:46:53.254187 2026] [:error] [pid 15764:tid 15832] [client 20.251.192.228:7940] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zyjhr.php"] [unique_id "aeT47WLL_sqdSHoVp-ROfwAAAkY"]
[Sun Apr 19 23:46:53.975198 2026] [:error] [pid 15764:tid 15826] [client 20.251.192.228:7883] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zyjhr.php"] [unique_id "aeT47WLL_sqdSHoVp-ROgQAAAkA"]
[Sun Apr 19 23:46:54.691814 2026] [:error] [pid 15763:tid 15803] [client 20.251.192.228:7890] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zyjhr.php"] [unique_id "aeT47rMXv1Y1THOoxaAgLAAAAgc"]
[Sun Apr 19 23:46:55.492182 2026] [:error] [pid 47775:tid 47848] [client 20.251.192.228:8161] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vhwwnrnmqc.php"] [unique_id "aeT477mztjlk9tsmoewxuQAAAIU"]
[Sun Apr 19 23:46:56.106363 2026] [:error] [pid 47775:tid 47859] [client 20.251.192.228:8077] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vhwwnrnmqc.php"] [unique_id "aeT48Lmztjlk9tsmoewxugAAAJA"]
[Sun Apr 19 23:46:56.828643 2026] [:error] [pid 15763:tid 15802] [client 20.251.192.228:8038] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vhwwnrnmqc.php"] [unique_id "aeT48LMXv1Y1THOoxaAgLwAAAgY"]
[Sun Apr 19 23:46:57.509668 2026] [:error] [pid 15763:tid 15816] [client 20.251.192.228:7854] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vhwwnrnmqc.php"] [unique_id "aeT48bMXv1Y1THOoxaAgMQAAAhQ"]
[Sun Apr 19 23:46:58.310578 2026] [:error] [pid 47886:tid 47902] [client 20.251.192.228:7957] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtogs.php"] [unique_id "aeT48kSe8yiyuPrD7yOMwQAAAM4"]
[Sun Apr 19 23:46:59.014585 2026] [:error] [pid 47886:tid 47908] [client 20.251.192.228:8032] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtogs.php"] [unique_id "aeT480Se8yiyuPrD7yOMxAAAANQ"]
[Sun Apr 19 23:46:59.713902 2026] [:error] [pid 15760:tid 15784] [client 20.251.192.228:7973] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtogs.php"] [unique_id "aeT48_SdD_XHQMJ_ISt7PwAAAdA"]
[Sun Apr 19 23:47:00.386917 2026] [:error] [pid 15763:tid 15811] [client 20.251.192.228:7813] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wtogs.php"] [unique_id "aeT49LMXv1Y1THOoxaAgMwAAAg8"]
[Sun Apr 19 23:47:01.030710 2026] [:error] [pid 15765:tid 15877] [client 20.251.192.228:8133] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blqjs.php"] [unique_id "aeT49fRqinw-W5EwQ74PbAAAApg"]
[Sun Apr 19 23:47:01.838894 2026] [:error] [pid 15763:tid 15804] [client 20.251.192.228:8119] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blqjs.php"] [unique_id "aeT49bMXv1Y1THOoxaAgNgAAAgg"]
[Sun Apr 19 23:47:02.585089 2026] [:error] [pid 47886:tid 47910] [client 20.251.192.228:7986] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blqjs.php"] [unique_id "aeT49kSe8yiyuPrD7yOMxwAAANY"]
[Sun Apr 19 23:47:03.352096 2026] [:error] [pid 15763:tid 15815] [client 20.251.192.228:7897] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blqjs.php"] [unique_id "aeT497MXv1Y1THOoxaAgOQAAAhM"]
[Sun Apr 19 23:47:04.151047 2026] [:error] [pid 15763:tid 15799] [client 20.251.192.228:8189] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aeT4-LMXv1Y1THOoxaAgOwAAAgM"]
[Sun Apr 19 23:47:04.724451 2026] [:error] [pid 15763:tid 15803] [client 20.251.192.228:8079] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aeT4-LMXv1Y1THOoxaAgPAAAAgc"]
[Sun Apr 19 23:47:05.477433 2026] [:error] [pid 15764:tid 15842] [client 20.251.192.228:7952] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aeT4-WLL_sqdSHoVp-ROmQAAAlA"]
[Sun Apr 19 23:47:06.112154 2026] [:error] [pid 15763:tid 15809] [client 20.251.192.228:7977] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aeT4-rMXv1Y1THOoxaAgQgAAAg0"]
[Sun Apr 19 23:47:06.788102 2026] [:error] [pid 15765:tid 15864] [client 20.251.192.228:8176] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyflv.php"] [unique_id "aeT4-vRqinw-W5EwQ74PcAAAAos"]
[Sun Apr 19 23:47:07.431867 2026] [:error] [pid 15765:tid 15862] [client 20.251.192.228:8019] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyflv.php"] [unique_id "aeT4-_Rqinw-W5EwQ74PcgAAAok"]
[Sun Apr 19 23:47:08.100559 2026] [:error] [pid 15760:tid 15788] [client 20.251.192.228:8148] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyflv.php"] [unique_id "aeT4_PSdD_XHQMJ_ISt7SgAAAdQ"]
[Sun Apr 19 23:47:08.778870 2026] [:error] [pid 15764:tid 15827] [client 20.251.192.228:8107] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fyflv.php"] [unique_id "aeT4_GLL_sqdSHoVp-ROoAAAAkE"]
[Sun Apr 19 23:47:09.570654 2026] [:error] [pid 47772:tid 47798] [client 20.251.192.228:7914] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zvinn.php"] [unique_id "aeT4_Yc0L16cb4smAz_qAgAAAAk"]
[Sun Apr 19 23:47:10.513127 2026] [:error] [pid 15760:tid 15782] [client 20.251.192.228:7892] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zvinn.php"] [unique_id "aeT4_vSdD_XHQMJ_ISt7UQAAAc4"]
[Sun Apr 19 23:47:11.183672 2026] [:error] [pid 47772:tid 47791] [client 20.251.192.228:8162] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zvinn.php"] [unique_id "aeT4_4c0L16cb4smAz_qBQAAAAI"]
[Sun Apr 19 23:47:11.969955 2026] [:error] [pid 15765:tid 15875] [client 20.251.192.228:8088] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zvinn.php"] [unique_id "aeT4__Rqinw-W5EwQ74PfgAAApY"]
[Sun Apr 19 23:47:12.624091 2026] [:error] [pid 15764:tid 15851] [client 20.251.192.228:7889] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sale.php"] [unique_id "aeT5AGLL_sqdSHoVp-ROpwAAAlg"]
[Sun Apr 19 23:47:13.596032 2026] [:error] [pid 47772:tid 47792] [client 20.251.192.228:7994] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sale.php"] [unique_id "aeT5AYc0L16cb4smAz_qCAAAAAM"]
[Sun Apr 19 23:47:14.337561 2026] [:error] [pid 15760:tid 15786] [client 20.251.192.228:8160] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sale.php"] [unique_id "aeT5AvSdD_XHQMJ_ISt7VAAAAdI"]
[Sun Apr 19 23:47:14.993802 2026] [:error] [pid 15760:tid 15780] [client 20.251.192.228:8065] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sale.php"] [unique_id "aeT5AvSdD_XHQMJ_ISt7WgAAAcw"]
[Sun Apr 19 23:47:15.669579 2026] [:error] [pid 15760:tid 15775] [client 20.251.192.228:7935] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ne2026.php"] [unique_id "aeT5A_SdD_XHQMJ_ISt7XwAAAcc"]
[Sun Apr 19 23:47:16.517544 2026] [:error] [pid 15760:tid 15780] [client 20.251.192.228:8143] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ne2026.php"] [unique_id "aeT5BPSdD_XHQMJ_ISt7ZgAAAcw"]
[Sun Apr 19 23:47:17.404067 2026] [:error] [pid 15760:tid 15790] [client 20.251.192.228:8091] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ne2026.php"] [unique_id "aeT5BfSdD_XHQMJ_ISt7awAAAdY"]
[Sun Apr 19 23:47:18.094139 2026] [:error] [pid 47773:tid 47818] [client 20.251.192.228:8098] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ne2026.php"] [unique_id "aeT5BuiBHdnCJDuPq9Bh8QAAAEI"]
[Sun Apr 19 23:47:18.945512 2026] [:error] [pid 47773:tid 47833] [client 20.251.192.228:8054] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/l10n.php"] [unique_id "aeT5BuiBHdnCJDuPq9Bh8wAAAFE"]
[Sun Apr 19 23:47:19.900053 2026] [:error] [pid 15760:tid 15778] [client 20.251.192.228:8165] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/l10n.php"] [unique_id "aeT5B_SdD_XHQMJ_ISt7dQAAAco"]
[Sun Apr 19 23:47:33.458123 2026] [:error] [pid 47775:tid 47860] [client 20.251.192.228:7754] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dhjqs.php"] [unique_id "aeT5Fbmztjlk9tsmoewx5AAAAJE"]
[Sun Apr 19 23:47:34.328164 2026] [:error] [pid 15693:tid 15706] [client 20.251.192.228:8090] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dhjqs.php"] [unique_id "aeT5FsNMD-ccazQlTslo0gAAAUo"]
[Sun Apr 19 23:47:34.965755 2026] [:error] [pid 15693:tid 15718] [client 20.251.192.228:7823] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dhjqs.php"] [unique_id "aeT5FsNMD-ccazQlTslo1QAAAVY"]
[Sun Apr 19 23:47:35.658143 2026] [:error] [pid 47886:tid 47912] [client 20.251.192.228:7955] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dhjqs.php"] [unique_id "aeT5F0Se8yiyuPrD7yOM1AAAANg"]
[Sun Apr 19 23:47:36.293319 2026] [:error] [pid 15760:tid 15780] [client 20.251.192.228:8166] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/41.php"] [unique_id "aeT5GPSdD_XHQMJ_ISt7sQAAAcw"]
[Sun Apr 19 23:47:36.898820 2026] [:error] [pid 15760:tid 15775] [client 20.251.192.228:8164] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/41.php"] [unique_id "aeT5GPSdD_XHQMJ_ISt7swAAAcc"]
[Sun Apr 19 23:47:37.592979 2026] [:error] [pid 15760:tid 15776] [client 20.251.192.228:8084] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/41.php"] [unique_id "aeT5GfSdD_XHQMJ_ISt7tQAAAcg"]
[Sun Apr 19 23:47:38.224362 2026] [:error] [pid 15760:tid 15789] [client 20.251.192.228:8073] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/41.php"] [unique_id "aeT5GvSdD_XHQMJ_ISt7uAAAAdU"]
[Sun Apr 19 23:47:38.892501 2026] [:error] [pid 15693:tid 15711] [client 20.251.192.228:8153] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/green.php"] [unique_id "aeT5GsNMD-ccazQlTslo1wAAAU8"]
[Sun Apr 19 23:47:39.543117 2026] [:error] [pid 15763:tid 15816] [client 20.251.192.228:8172] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/green.php"] [unique_id "aeT5G7MXv1Y1THOoxaAgVgAAAhQ"]
[Sun Apr 19 23:47:40.197368 2026] [:error] [pid 15765:tid 15852] [client 20.251.192.228:7948] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/green.php"] [unique_id "aeT5HPRqinw-W5EwQ74PigAAAoA"]
[Sun Apr 19 23:47:40.914884 2026] [:error] [pid 15760:tid 15772] [client 20.251.192.228:8017] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/green.php"] [unique_id "aeT5HPSdD_XHQMJ_ISt7wgAAAcQ"]
[Sun Apr 19 23:47:41.680901 2026] [:error] [pid 15760:tid 15785] [client 20.251.192.228:8168] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenium4.php"] [unique_id "aeT5HfSdD_XHQMJ_ISt7xQAAAdE"]
[Sun Apr 19 23:47:42.245466 2026] [:error] [pid 47772:tid 47802] [client 20.251.192.228:7967] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenium4.php"] [unique_id "aeT5Hoc0L16cb4smAz_qJQAAAA0"]
[Sun Apr 19 23:47:43.310650 2026] [:error] [pid 47772:tid 47796] [client 20.251.192.228:8052] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenium4.php"] [unique_id "aeT5H4c0L16cb4smAz_qKAAAAAc"]
[Sun Apr 19 23:47:44.050569 2026] [:error] [pid 47772:tid 47795] [client 20.251.192.228:8173] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenium4.php"] [unique_id "aeT5IIc0L16cb4smAz_qKgAAAAY"]
[Sun Apr 19 23:47:44.678332 2026] [:error] [pid 15760:tid 15772] [client 20.251.192.228:7948] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws59.php"] [unique_id "aeT5IPSdD_XHQMJ_ISt7ygAAAcQ"]
[Sun Apr 19 23:47:45.414109 2026] [:error] [pid 15760:tid 15773] [client 20.251.192.228:8171] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws59.php"] [unique_id "aeT5IfSdD_XHQMJ_ISt7zAAAAcU"]
[Sun Apr 19 23:47:46.411782 2026] [:error] [pid 15763:tid 15798] [client 20.251.192.228:8098] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws59.php"] [unique_id "aeT5IrMXv1Y1THOoxaAgXgAAAgI"]
[Sun Apr 19 23:47:47.264920 2026] [:error] [pid 15760:tid 15785] [client 20.251.192.228:8136] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws59.php"] [unique_id "aeT5I_SdD_XHQMJ_ISt71gAAAdE"]
[Sun Apr 19 23:47:48.176818 2026] [:error] [pid 15760:tid 15786] [client 20.251.192.228:8170] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpc2.php"] [unique_id "aeT5JPSdD_XHQMJ_ISt73gAAAdI"]
[Sun Apr 19 23:47:48.926148 2026] [:error] [pid 15760:tid 15773] [client 20.251.192.228:8130] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpc2.php"] [unique_id "aeT5JPSdD_XHQMJ_ISt74QAAAcU"]
[Sun Apr 19 23:47:49.771907 2026] [:error] [pid 15760:tid 15792] [client 20.251.192.228:7979] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpc2.php"] [unique_id "aeT5JfSdD_XHQMJ_ISt75gAAAdg"]
[Sun Apr 19 23:47:50.519354 2026] [:error] [pid 15765:tid 15864] [client 20.251.192.228:7917] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpc2.php"] [unique_id "aeT5JvRqinw-W5EwQ74PkgAAAos"]
[Sun Apr 19 23:47:51.881589 2026] [:error] [pid 47773:tid 47820] [client 20.251.192.228:8131] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aeT5J-iBHdnCJDuPq9Bh-wAAAEQ"]
[Sun Apr 19 23:47:52.656504 2026] [:error] [pid 15763:tid 15806] [client 20.251.192.228:8008] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aeT5KLMXv1Y1THOoxaAgYgAAAgo"]
[Sun Apr 19 23:47:53.300201 2026] [:error] [pid 47773:tid 47826] [client 20.251.192.228:8064] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aeT5KeiBHdnCJDuPq9BiAgAAAEo"]
[Sun Apr 19 23:47:53.990702 2026] [:error] [pid 47775:tid 47845] [client 20.251.192.228:7898] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mga.php"] [unique_id "aeT5Kbmztjlk9tsmoewx7AAAAII"]
[Sun Apr 19 23:47:54.885095 2026] [:error] [pid 47886:tid 47897] [client 20.251.192.228:8070] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeT5KkSe8yiyuPrD7yOM4QAAAMk"]
[Sun Apr 19 23:47:55.628465 2026] [:error] [pid 15760:tid 15790] [client 20.251.192.228:7992] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeT5K_SdD_XHQMJ_ISt76gAAAdY"]
[Sun Apr 19 23:47:56.261891 2026] [:error] [pid 15760:tid 15784] [client 20.251.192.228:7920] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeT5LPSdD_XHQMJ_ISt77QAAAdA"]
[Sun Apr 19 23:47:56.961538 2026] [:error] [pid 15760:tid 15769] [client 20.251.192.228:7971] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeT5LPSdD_XHQMJ_ISt78QAAAcE"]
[Sun Apr 19 23:47:57.613558 2026] [:error] [pid 15760:tid 15783] [client 20.251.192.228:7915] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "aeT5LfSdD_XHQMJ_ISt79QAAAc8"]
[Sun Apr 19 23:47:58.284442 2026] [:error] [pid 47773:tid 47838] [client 20.251.192.228:8174] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "aeT5LuiBHdnCJDuPq9BiBwAAAFY"]
[Sun Apr 19 23:47:59.008245 2026] [:error] [pid 15764:tid 15836] [client 20.251.192.228:7919] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "aeT5L2LL_sqdSHoVp-ROwwAAAko"]
[Sun Apr 19 23:47:59.703534 2026] [:error] [pid 47772:tid 47805] [client 20.251.192.228:8015] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/maintura.php"] [unique_id "aeT5L4c0L16cb4smAz_qMQAAABA"]
[Sun Apr 19 23:48:00.353298 2026] [:error] [pid 47886:tid 47911] [client 20.251.192.228:7867] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lclnqiii.php"] [unique_id "aeT5MESe8yiyuPrD7yOM5gAAANc"]
[Sun Apr 19 23:48:01.161704 2026] [:error] [pid 15760:tid 15788] [client 20.251.192.228:8121] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lclnqiii.php"] [unique_id "aeT5MfSdD_XHQMJ_ISt8AgAAAdQ"]
[Sun Apr 19 23:48:02.000808 2026] [:error] [pid 47772:tid 47800] [client 20.251.192.228:7984] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lclnqiii.php"] [unique_id "aeT5MYc0L16cb4smAz_qNgAAAAs"]
[Sun Apr 19 23:48:02.751807 2026] [:error] [pid 47772:tid 47813] [client 20.251.192.228:7894] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lclnqiii.php"] [unique_id "aeT5Moc0L16cb4smAz_qOQAAABg"]
[Sun Apr 19 23:48:03.342928 2026] [:error] [pid 15764:tid 15838] [client 20.251.192.228:7855] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aeT5M2LL_sqdSHoVp-ROxgAAAkw"]
[Sun Apr 19 23:48:04.006668 2026] [:error] [pid 47772:tid 47797] [client 20.251.192.228:8080] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aeT5NIc0L16cb4smAz_qPQAAAAg"]
[Sun Apr 19 23:48:04.678808 2026] [:error] [pid 15764:tid 15837] [client 20.251.192.228:8149] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aeT5NGLL_sqdSHoVp-ROyQAAAks"]
[Sun Apr 19 23:48:05.251325 2026] [:error] [pid 15764:tid 15846] [client 20.251.192.228:8118] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lp6.php"] [unique_id "aeT5NWLL_sqdSHoVp-ROzQAAAlQ"]
[Sun Apr 19 23:48:05.828574 2026] [:error] [pid 15764:tid 15851] [client 20.251.192.228:7821] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeT5NWLL_sqdSHoVp-RO0AAAAlg"]
[Sun Apr 19 23:48:06.520665 2026] [:error] [pid 15763:tid 15819] [client 20.251.192.228:7908] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeT5NrMXv1Y1THOoxaAgcgAAAhc"]
[Sun Apr 19 23:48:07.308833 2026] [:error] [pid 15764:tid 15826] [client 20.251.192.228:7901] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeT5N2LL_sqdSHoVp-RO1QAAAkA"]
[Sun Apr 19 23:48:08.135143 2026] [:error] [pid 47886:tid 47897] [client 20.251.192.228:7859] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeT5OESe8yiyuPrD7yOM6QAAAMk"]
[Sun Apr 19 23:48:08.951874 2026] [:error] [pid 15760:tid 15792] [client 20.251.192.228:8001] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uazsl.php"] [unique_id "aeT5OPSdD_XHQMJ_ISt8LgAAAdg"]
[Sun Apr 19 23:48:09.559861 2026] [:error] [pid 15760:tid 15769] [client 20.251.192.228:7835] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uazsl.php"] [unique_id "aeT5OfSdD_XHQMJ_ISt8NAAAAcE"]
[Sun Apr 19 23:48:10.230466 2026] [:error] [pid 15760:tid 15792] [client 20.251.192.228:7838] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uazsl.php"] [unique_id "aeT5OvSdD_XHQMJ_ISt8OwAAAdg"]
[Sun Apr 19 23:48:10.868976 2026] [:error] [pid 15764:tid 15851] [client 20.251.192.228:7964] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uazsl.php"] [unique_id "aeT5OmLL_sqdSHoVp-RO3gAAAlg"]
[Sun Apr 19 23:48:11.531091 2026] [:error] [pid 15764:tid 15836] [client 20.251.192.228:8180] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjq.php"] [unique_id "aeT5O2LL_sqdSHoVp-RO4QAAAko"]
[Sun Apr 19 23:48:12.185638 2026] [:error] [pid 15764:tid 15846] [client 20.251.192.228:7857] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjq.php"] [unique_id "aeT5PGLL_sqdSHoVp-RO5QAAAlQ"]
[Sun Apr 19 23:48:13.093410 2026] [:error] [pid 15760:tid 15788] [client 20.251.192.228:8190] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjq.php"] [unique_id "aeT5PfSdD_XHQMJ_ISt8SAAAAdQ"]
[Sun Apr 19 23:48:14.027816 2026] [:error] [pid 15760:tid 15791] [client 20.251.192.228:8097] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mjq.php"] [unique_id "aeT5PvSdD_XHQMJ_ISt8TgAAAdc"]
[Sun Apr 19 23:48:15.080586 2026] [:error] [pid 47773:tid 47816] [client 20.251.192.228:8186] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypltspd.php"] [unique_id "aeT5P-iBHdnCJDuPq9BiCwAAAEA"]
[Sun Apr 19 23:48:15.825189 2026] [:error] [pid 15760:tid 15789] [client 20.251.192.228:8081] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypltspd.php"] [unique_id "aeT5P_SdD_XHQMJ_ISt8UQAAAdU"]
[Sun Apr 19 23:48:16.446202 2026] [:error] [pid 15763:tid 15819] [client 20.251.192.228:8040] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypltspd.php"] [unique_id "aeT5QLMXv1Y1THOoxaAgfQAAAhc"]
[Sun Apr 19 23:48:17.310993 2026] [:error] [pid 15760:tid 15777] [client 20.251.192.228:8144] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bypltspd.php"] [unique_id "aeT5QfSdD_XHQMJ_ISt8UgAAAck"]
[Sun Apr 19 23:48:18.250836 2026] [:error] [pid 15760:tid 15778] [client 20.251.192.228:8106] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wxfyf.php"] [unique_id "aeT5QvSdD_XHQMJ_ISt8WAAAAco"]
[Sun Apr 19 23:48:18.980994 2026] [:error] [pid 47773:tid 47827] [client 20.251.192.228:8083] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wxfyf.php"] [unique_id "aeT5QuiBHdnCJDuPq9BiEAAAAEs"]
[Sun Apr 19 23:48:19.755344 2026] [:error] [pid 15765:tid 15864] [client 20.251.192.228:8014] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wxfyf.php"] [unique_id "aeT5Q_Rqinw-W5EwQ74PnAAAAos"]
[Sun Apr 19 23:48:21.002697 2026] [:error] [pid 15764:tid 15837] [client 20.251.192.228:8182] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wxfyf.php"] [unique_id "aeT5RWLL_sqdSHoVp-RO7gAAAks"]
[Sun Apr 19 23:48:23.018940 2026] [:error] [pid 15763:tid 15800] [client 20.251.192.228:7904] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctex1.php"] [unique_id "aeT5R7MXv1Y1THOoxaAghwAAAgQ"]
[Sun Apr 19 23:48:23.913351 2026] [:error] [pid 47886:tid 47888] [client 20.251.192.228:8067] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctex1.php"] [unique_id "aeT5R0Se8yiyuPrD7yOM7QAAAMA"]
[Sun Apr 19 23:48:24.684453 2026] [:error] [pid 15693:tid 15704] [client 20.251.192.228:8138] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctex1.php"] [unique_id "aeT5SMNMD-ccazQlTslo4gAAAUg"]
[Sun Apr 19 23:48:25.927141 2026] [:error] [pid 47886:tid 47908] [client 20.251.192.228:8142] [client 20.251.192.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctex1.php"] [unique_id "aeT5SUSe8yiyuPrD7yOM8QAAANQ"]
[Mon Apr 20 00:52:01.193442 2026] [:error] [pid 15760:tid 15779] [client 186.0.149.167:2119] [client 186.0.149.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.0.149.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeUIMfSdD_XHQMJ_ISuYwgAAAcs"]
[Mon Apr 20 00:52:10.863349 2026] [:error] [pid 47772:tid 47807] [client 186.0.149.167:15606] [client 186.0.149.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.0.149.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeUIOoc0L16cb4smAz_8jgAAABI"]
[Mon Apr 20 00:52:21.485401 2026] [:error] [pid 47886:tid 47891] [client 186.0.149.167:25911] [client 186.0.149.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.0.149.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeUIRUSe8yiyuPrD7yOV5gAAAMM"]
[Mon Apr 20 00:52:32.084929 2026] [:error] [pid 15765:tid 15877] [client 186.0.149.167:36097] [client 186.0.149.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.0.149.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeUIUPRqinw-W5EwQ74WtQAAApg"]
[Mon Apr 20 00:52:42.663956 2026] [:error] [pid 15760:tid 15783] [client 186.0.149.167:47212] [client 186.0.149.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.0.149.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeUIWvSdD_XHQMJ_ISuY2QAAAc8"]
[Mon Apr 20 00:59:37.181284 2026] [:error] [pid 47886:tid 47904] [client 186.0.149.144:3841] [client 186.0.149.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.0.149.144, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeUJ-USe8yiyuPrD7yOWqQAAANA"]
[Mon Apr 20 01:03:53.014831 2026] [:error] [pid 15763:tid 15813] [client 186.0.149.187:6369] [client 186.0.149.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.0.149.187, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeUK-bMXv1Y1THOoxaAwywAAAhE"]
[Mon Apr 20 01:09:33.177136 2026] [:error] [pid 15760:tid 15783] [client 182.42.105.144:53152] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeUMTfSdD_XHQMJ_ISuhEwAAAc8"]
[Mon Apr 20 05:19:20.273349 2026] [:error] [pid 64334:tid 64423] [client 43.166.255.102:57914] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeVG2MNh9IxxDqsrPyOODgAAAJQ"]
[Mon Apr 20 05:55:13.154268 2026] [:error] [pid 47779:tid 47800] [client 40.69.66.178:9768] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aeVPQYahGl1n9UkmcNjt_gAAAVM"]
[Mon Apr 20 05:55:13.657047 2026] [:error] [pid 64334:tid 64416] [client 40.69.66.178:10409] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aeVPQcNh9IxxDqsrPyOZIAAAAI0"]
[Mon Apr 20 05:55:14.181426 2026] [:error] [pid 60072:tid 60096] [client 40.69.66.178:2288] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aeVPQvuj5dzu2v3Qr6GaMQAAAdY"]
[Mon Apr 20 05:55:14.683692 2026] [:error] [pid 64334:tid 64426] [client 40.69.66.178:10382] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aeVPQsNh9IxxDqsrPyOZIwAAAJc"]
[Mon Apr 20 05:55:15.225812 2026] [:error] [pid 64440:tid 64451] [client 40.69.66.178:8968] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeVPQ9kVUvTgp8p7mrPoggAAAMg"]
[Mon Apr 20 05:55:15.789924 2026] [:error] [pid 47779:tid 47797] [client 40.69.66.178:6201] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeVPQ4ahGl1n9UkmcNjuAQAAAVA"]
[Mon Apr 20 05:55:16.323093 2026] [:error] [pid 64332:tid 64363] [client 40.69.66.178:13055] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeVPRMAQ57uMKAVSYEn45wAAABU"]
[Mon Apr 20 05:55:16.822145 2026] [:error] [pid 64440:tid 64464] [client 40.69.66.178:8997] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeVPRNkVUvTgp8p7mrPoiAAAANU"]
[Mon Apr 20 05:55:17.324302 2026] [:error] [pid 64440:tid 64445] [client 40.69.66.178:3879] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ihodcrk.php"] [unique_id "aeVPRdkVUvTgp8p7mrPoiQAAAMI"]
[Mon Apr 20 05:55:17.860739 2026] [:error] [pid 47731:tid 47746] [client 40.69.66.178:10419] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ihodcrk.php"] [unique_id "aeVPRVOwpc-h7Nzn-iOaPwAAAQ0"]
[Mon Apr 20 05:55:18.385314 2026] [:error] [pid 64333:tid 64387] [client 40.69.66.178:7410] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ihodcrk.php"] [unique_id "aeVPRnZav9wH8wxMd_tCDgAAAEs"]
[Mon Apr 20 05:55:18.886671 2026] [:error] [pid 64333:tid 64392] [client 40.69.66.178:3694] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ihodcrk.php"] [unique_id "aeVPRnZav9wH8wxMd_tCEgAAAFA"]
[Mon Apr 20 05:55:19.425427 2026] [:error] [pid 47731:tid 47741] [client 40.69.66.178:13286] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aeVPR1Owpc-h7Nzn-iOaQgAAAQg"]
[Mon Apr 20 05:55:19.958370 2026] [:error] [pid 47731:tid 47750] [client 40.69.66.178:9020] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aeVPR1Owpc-h7Nzn-iOaRQAAARE"]
[Mon Apr 20 05:55:20.460695 2026] [:error] [pid 64333:tid 64397] [client 40.69.66.178:4663] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aeVPSHZav9wH8wxMd_tCGQAAAFU"]
[Mon Apr 20 05:55:20.963834 2026] [:error] [pid 64333:tid 64396] [client 40.69.66.178:14307] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aeVPSHZav9wH8wxMd_tCHAAAAFQ"]
[Mon Apr 20 05:55:21.464148 2026] [:error] [pid 64333:tid 64380] [client 40.69.66.178:1048] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owrlfoa.php"] [unique_id "aeVPSXZav9wH8wxMd_tCHwAAAEQ"]
[Mon Apr 20 05:55:21.998150 2026] [:error] [pid 64333:tid 64379] [client 40.69.66.178:8057] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owrlfoa.php"] [unique_id "aeVPSXZav9wH8wxMd_tCJAAAAEM"]
[Mon Apr 20 05:55:22.496858 2026] [:error] [pid 64333:tid 64382] [client 40.69.66.178:2349] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owrlfoa.php"] [unique_id "aeVPSnZav9wH8wxMd_tCJwAAAEY"]
[Mon Apr 20 05:55:23.036269 2026] [:error] [pid 47731:tid 47744] [client 40.69.66.178:2337] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owrlfoa.php"] [unique_id "aeVPS1Owpc-h7Nzn-iOaSQAAAQs"]
[Mon Apr 20 05:55:23.568458 2026] [:error] [pid 64332:tid 64358] [client 40.69.66.178:10370] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeVPS8AQ57uMKAVSYEn49QAAABA"]
[Mon Apr 20 05:55:24.068294 2026] [:error] [pid 64333:tid 64384] [client 40.69.66.178:8004] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeVPTHZav9wH8wxMd_tCKQAAAEg"]
[Mon Apr 20 05:55:24.605243 2026] [:error] [pid 60072:tid 60096] [client 40.69.66.178:4641] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeVPTPuj5dzu2v3Qr6GaOQAAAdY"]
[Mon Apr 20 05:55:25.109197 2026] [:error] [pid 64333:tid 64396] [client 40.69.66.178:8993] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeVPTXZav9wH8wxMd_tCLAAAAFQ"]
[Mon Apr 20 05:55:25.642073 2026] [:error] [pid 47731:tid 47741] [client 40.69.66.178:2264] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sim.php"] [unique_id "aeVPTVOwpc-h7Nzn-iOaTgAAAQg"]
[Mon Apr 20 05:55:26.175968 2026] [:error] [pid 64333:tid 64383] [client 40.69.66.178:11931] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sim.php"] [unique_id "aeVPTnZav9wH8wxMd_tCOQAAAEc"]
[Mon Apr 20 05:55:26.716440 2026] [:error] [pid 64334:tid 64425] [client 40.69.66.178:2862] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sim.php"] [unique_id "aeVPTsNh9IxxDqsrPyOZJQAAAJY"]
[Mon Apr 20 05:55:27.249125 2026] [:error] [pid 60072:tid 60085] [client 40.69.66.178:3584] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sim.php"] [unique_id "aeVPT_uj5dzu2v3Qr6GaOwAAAcs"]
[Mon Apr 20 05:55:27.803041 2026] [:error] [pid 47731:tid 47754] [client 40.69.66.178:8992] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bx.php"] [unique_id "aeVPT1Owpc-h7Nzn-iOaZgAAARU"]
[Mon Apr 20 05:55:28.319934 2026] [:error] [pid 64334:tid 64417] [client 40.69.66.178:9022] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bx.php"] [unique_id "aeVPUMNh9IxxDqsrPyOZMQAAAI4"]
[Mon Apr 20 05:55:28.819968 2026] [:error] [pid 47779:tid 47801] [client 40.69.66.178:2276] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bx.php"] [unique_id "aeVPUIahGl1n9UkmcNjuEwAAAVQ"]
[Mon Apr 20 05:55:29.352331 2026] [:error] [pid 64332:tid 64347] [client 40.69.66.178:6207] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bx.php"] [unique_id "aeVPUcAQ57uMKAVSYEn5EwAAAAU"]
[Mon Apr 20 05:55:29.887165 2026] [:error] [pid 64440:tid 64448] [client 40.69.66.178:12601] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeVPUdkVUvTgp8p7mrPojwAAAMU"]
[Mon Apr 20 05:55:30.390618 2026] [:error] [pid 60072:tid 60089] [client 40.69.66.178:3669] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeVPUvuj5dzu2v3Qr6GaTwAAAc8"]
[Mon Apr 20 05:55:30.913572 2026] [:error] [pid 64333:tid 64385] [client 40.69.66.178:5253] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeVPUnZav9wH8wxMd_tCVAAAAEk"]
[Mon Apr 20 05:55:31.413097 2026] [:error] [pid 64333:tid 64376] [client 40.69.66.178:7692] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeVPU3Zav9wH8wxMd_tCVwAAAEA"]
[Mon Apr 20 05:55:31.946351 2026] [:error] [pid 64332:tid 64359] [client 40.69.66.178:9333] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aeVPU8AQ57uMKAVSYEn5FwAAABE"]
[Mon Apr 20 05:55:32.446483 2026] [:error] [pid 60072:tid 60096] [client 40.69.66.178:3901] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aeVPVPuj5dzu2v3Qr6GaUQAAAdY"]
[Mon Apr 20 05:55:32.981087 2026] [:error] [pid 64333:tid 64390] [client 40.69.66.178:2268] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aeVPVHZav9wH8wxMd_tCYwAAAE4"]
[Mon Apr 20 05:55:33.498799 2026] [:error] [pid 47731:tid 47733] [client 40.69.66.178:11947] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ext.php"] [unique_id "aeVPVVOwpc-h7Nzn-iOakgAAAQA"]
[Mon Apr 20 05:55:34.016574 2026] [:error] [pid 64332:tid 64366] [client 40.69.66.178:8020] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afggdg.php"] [unique_id "aeVPVsAQ57uMKAVSYEn5HAAAABg"]
[Mon Apr 20 05:55:34.517833 2026] [:error] [pid 64333:tid 64384] [client 40.69.66.178:5302] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afggdg.php"] [unique_id "aeVPVnZav9wH8wxMd_tCZgAAAEg"]
[Mon Apr 20 05:55:35.050658 2026] [:error] [pid 64440:tid 64464] [client 40.69.66.178:4610] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afggdg.php"] [unique_id "aeVPV9kVUvTgp8p7mrPokwAAANU"]
[Mon Apr 20 05:55:35.584724 2026] [:error] [pid 60072:tid 60084] [client 40.69.66.178:12567] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afggdg.php"] [unique_id "aeVPV_uj5dzu2v3Qr6GaUgAAAco"]
[Mon Apr 20 05:55:36.084639 2026] [:error] [pid 48101:tid 48109] [client 40.69.66.178:13284] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aeVPWPIgenNbs2bVQGsVUAAAAYU"]
[Mon Apr 20 05:55:36.586518 2026] [:error] [pid 47779:tid 47781] [client 40.69.66.178:3854] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aeVPWIahGl1n9UkmcNjuFQAAAUA"]
[Mon Apr 20 05:55:37.089479 2026] [:error] [pid 48101:tid 48105] [client 40.69.66.178:14274] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aeVPWfIgenNbs2bVQGsVVgAAAYE"]
[Mon Apr 20 05:55:37.625311 2026] [:error] [pid 64333:tid 64377] [client 40.69.66.178:2831] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aeVPWXZav9wH8wxMd_tCawAAAEE"]
[Mon Apr 20 05:55:38.159378 2026] [:error] [pid 48101:tid 48123] [client 40.69.66.178:8974] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the1.php"] [unique_id "aeVPWvIgenNbs2bVQGsVWwAAAZM"]
[Mon Apr 20 05:55:38.666729 2026] [:error] [pid 48101:tid 48117] [client 40.69.66.178:3886] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the1.php"] [unique_id "aeVPWvIgenNbs2bVQGsVXgAAAY0"]
[Mon Apr 20 05:55:39.167510 2026] [:error] [pid 47731:tid 47754] [client 40.69.66.178:10380] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the1.php"] [unique_id "aeVPW1Owpc-h7Nzn-iOalgAAARU"]
[Mon Apr 20 05:55:39.707516 2026] [:error] [pid 47731:tid 47734] [client 40.69.66.178:9009] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the1.php"] [unique_id "aeVPW1Owpc-h7Nzn-iOamAAAAQE"]
[Mon Apr 20 05:55:40.212226 2026] [:error] [pid 64440:tid 64452] [client 40.69.66.178:2338] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeVPXNkVUvTgp8p7mrPolwAAAMk"]
[Mon Apr 20 05:55:40.712776 2026] [:error] [pid 47779:tid 47796] [client 40.69.66.178:6149] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeVPXIahGl1n9UkmcNjuFwAAAU8"]
[Mon Apr 20 05:55:41.212506 2026] [:error] [pid 60072:tid 60074] [client 40.69.66.178:4769] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeVPXfuj5dzu2v3Qr6GaVQAAAcA"]
[Mon Apr 20 05:55:41.713114 2026] [:error] [pid 64440:tid 64463] [client 40.69.66.178:1056] [client 40.69.66.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aeVPXdkVUvTgp8p7mrPomgAAANQ"]
[Mon Apr 20 07:40:47.512612 2026] [:error] [pid 64333:tid 64400] [client 185.165.242.69:48634] [client 185.165.242.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.165.242.69, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeVn_3Zav9wH8wxMd_t5QAAAAFg"]
[Mon Apr 20 07:42:59.694677 2026] [:error] [pid 47731:tid 47753] [client 185.165.242.69:1215] [client 185.165.242.69] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeVog1Owpc-h7Nzn-iO2xgAAARQ"]
[Mon Apr 20 08:35:32.839919 2026] [:error] [pid 64334:tid 64418] [client 49.51.233.95:51846] [client 49.51.233.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeV01MNh9IxxDqsrPyO-qwAAAI8"]
[Mon Apr 20 11:27:30.399899 2026] [:error] [pid 11352:tid 11422] [client 195.175.55.34:56569] [client 195.175.55.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.175.55.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeWdIml10mhMSfJ7ir9G-AAAAIg"]
[Mon Apr 20 11:27:40.512308 2026] [:error] [pid 11350:tid 11359] [client 195.175.55.34:56821] [client 195.175.55.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.175.55.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeWdLP4EoMBgOJuJnT0TNAAAAAA"]
[Mon Apr 20 11:27:50.884418 2026] [:error] [pid 11352:tid 11434] [client 195.175.55.34:57067] [client 195.175.55.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.175.55.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeWdNml10mhMSfJ7ir9HDQAAAJQ"]
[Mon Apr 20 11:28:01.394386 2026] [:error] [pid 11351:tid 11411] [client 195.175.55.34:57312] [client 195.175.55.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.175.55.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeWdQQN8Z1-vktaI_tNlrgAAAFg"]
[Mon Apr 20 11:28:11.827429 2026] [:error] [pid 11352:tid 11429] [client 195.175.55.34:57562] [client 195.175.55.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.175.55.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeWdS2l10mhMSfJ7ir9HOgAAAI8"]
[Mon Apr 20 11:42:43.906779 2026] [:error] [pid 11350:tid 11367] [client 150.109.119.38:58566] [client 150.109.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeWgs_4EoMBgOJuJnT0XNAAAAAg"]
[Mon Apr 20 12:24:29.334015 2026] [:error] [pid 42014:tid 42020] [client 20.203.128.233:31633] [client 20.203.128.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/hex.php"] [unique_id "aeWqfcek-00-ZI0f1NrLiAAAAQQ"]
[Mon Apr 20 12:24:31.544737 2026] [:error] [pid 11351:tid 11402] [client 20.203.128.233:31994] [client 20.203.128.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/hex.php"] [unique_id "aeWqfwN8Z1-vktaI_tN2WwAAAE8"]
[Mon Apr 20 12:24:51.712368 2026] [:error] [pid 11350:tid 11374] [client 20.203.128.233:7134] [client 20.203.128.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gezdjgie.php"] [unique_id "aeWqk_4EoMBgOJuJnT0hMQAAAA8"]
[Mon Apr 20 12:24:53.294064 2026] [:error] [pid 11352:tid 11427] [client 20.203.128.233:4655] [client 20.203.128.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gezdjgie.php"] [unique_id "aeWqlWl10mhMSfJ7ir9fTwAAAI0"]
[Mon Apr 20 12:25:21.277351 2026] [:error] [pid 11441:tid 11457] [client 20.203.128.233:31021] [client 20.203.128.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aeWqscixByFUvmh319DSNgAAAM4"]
[Mon Apr 20 12:25:24.063064 2026] [:error] [pid 42014:tid 42032] [client 20.203.128.233:31672] [client 20.203.128.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aeWqtMek-00-ZI0f1NrMIQAAARA"]
[Mon Apr 20 12:25:46.717314 2026] [:error] [pid 11441:tid 11445] [client 20.203.128.233:14940] [client 20.203.128.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeWqysixByFUvmh319DScAAAAMI"]
[Mon Apr 20 12:25:58.076999 2026] [:error] [pid 11441:tid 11464] [client 20.203.128.233:11632] [client 20.203.128.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeWq1sixByFUvmh319DSoQAAANU"]
[Mon Apr 20 12:26:24.644227 2026] [:error] [pid 11351:tid 11397] [client 20.203.128.233:4071] [client 20.203.128.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afggdg.php"] [unique_id "aeWq8AN8Z1-vktaI_tN2qAAAAEo"]
[Mon Apr 20 12:26:25.432915 2026] [:error] [pid 42014:tid 42021] [client 20.203.128.233:27635] [client 20.203.128.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afggdg.php"] [unique_id "aeWq8cek-00-ZI0f1NrMewAAAQU"]
[Mon Apr 20 12:26:29.673173 2026] [:error] [pid 11351:tid 11400] [client 20.203.128.233:3644] [client 20.203.128.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/afggdg.php"] [unique_id "aeWq9QN8Z1-vktaI_tN2qgAAAE0"]
[Mon Apr 20 13:15:55.915062 2026] [:error] [pid 11352:tid 11416] [client 103.30.72.102:41634] [client 103.30.72.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.30.72.102, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeW2i2l10mhMSfJ7ir9uhgAAAII"]
[Mon Apr 20 13:15:56.730877 2026] [proxy_fcgi:error] [pid 11352:tid 11416] [client 103.30.72.102:41634] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 20 13:34:04.832346 2026] [:error] [pid 11352:tid 11418] [client 103.65.237.216:61831] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "aeW6zGl10mhMSfJ7ir9zwgAAAIQ"]
[Mon Apr 20 13:34:05.129604 2026] [:error] [pid 11352:tid 11437] [client 103.65.237.216:61861] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "aeW6zWl10mhMSfJ7ir9zwwAAAJc"]
[Mon Apr 20 13:59:19.491144 2026] [:error] [pid 11352:tid 11437] [client 147.135.252.148:35926] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aeXAt2l10mhMSfJ7ir98zAAAAJc"]
[Mon Apr 20 13:59:22.008900 2026] [:error] [pid 11351:tid 11387] [client 147.135.252.148:53254] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aeXAugN8Z1-vktaI_tOMWgAAAEA"]
[Mon Apr 20 13:59:24.635945 2026] [:error] [pid 11350:tid 11369] [client 147.135.252.148:53268] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeXAvP4EoMBgOJuJnT0yawAAAAo"]
[Mon Apr 20 13:59:27.164482 2026] [:error] [pid 11441:tid 11449] [client 147.135.252.148:45588] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aeXAv8ixByFUvmh319AEmAAAAMY"]
[Mon Apr 20 13:59:29.719943 2026] [:error] [pid 42014:tid 42016] [client 147.135.252.148:45598] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aeXAwcek-00-ZI0f1NoAVwAAAQA"]
[Mon Apr 20 13:59:32.581651 2026] [:error] [pid 42014:tid 42019] [client 147.135.252.148:45604] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeXAxMek-00-ZI0f1NoAZgAAAQM"]
[Mon Apr 20 13:59:35.010286 2026] [:error] [pid 11441:tid 11458] [client 147.135.252.148:45618] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeXAx8ixByFUvmh319AEqgAAAM8"]
[Mon Apr 20 13:59:37.467997 2026] [:error] [pid 11352:tid 11414] [client 147.135.252.148:37158] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aeXAyWl10mhMSfJ7ir989QAAAIA"]
[Mon Apr 20 13:59:39.985813 2026] [:error] [pid 11352:tid 11437] [client 147.135.252.148:37162] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aeXAy2l10mhMSfJ7ir989wAAAJc"]
[Mon Apr 20 13:59:42.449751 2026] [:error] [pid 11441:tid 11464] [client 147.135.252.148:37166] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aeXAzsixByFUvmh319AEtwAAANU"]
[Mon Apr 20 13:59:44.948844 2026] [:error] [pid 11351:tid 11406] [client 147.135.252.148:37168] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aeXA0AN8Z1-vktaI_tOMdwAAAFM"]
[Mon Apr 20 13:59:47.557296 2026] [:error] [pid 11352:tid 11429] [client 147.135.252.148:33686] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aeXA02l10mhMSfJ7ir98_gAAAI8"]
[Mon Apr 20 13:59:50.008145 2026] [:error] [pid 42014:tid 42028] [client 147.135.252.148:33700] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aeXA1sek-00-ZI0f1NoAdQAAAQw"]
[Mon Apr 20 13:59:52.545137 2026] [:error] [pid 11350:tid 11369] [client 147.135.252.148:33704] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aeXA2P4EoMBgOJuJnT0yigAAAAo"]
[Mon Apr 20 13:59:54.838722 2026] [:error] [pid 11352:tid 11435] [client 147.135.252.148:33708] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aeXA2ml10mhMSfJ7ir99BgAAAJU"]
[Mon Apr 20 13:59:57.193174 2026] [:error] [pid 11350:tid 11381] [client 147.135.252.148:44134] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aeXA3f4EoMBgOJuJnT0ykAAAABY"]
[Mon Apr 20 13:59:59.628943 2026] [:error] [pid 42014:tid 42037] [client 147.135.252.148:44148] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aeXA38ek-00-ZI0f1NoAfwAAARU"]
[Mon Apr 20 14:00:02.095473 2026] [:error] [pid 42014:tid 42022] [client 147.135.252.148:44150] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aeXA4sek-00-ZI0f1NoAggAAAQY"]
[Mon Apr 20 14:00:02.921774 2026] [:error] [pid 11350:tid 11360] [client 199.180.129.6:32914] [client 199.180.129.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 199.180.129.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeXA4v4EoMBgOJuJnT0ylAAAAAE"]
[Mon Apr 20 14:00:04.606772 2026] [:error] [pid 42014:tid 42020] [client 147.135.252.148:44154] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aeXA5Mek-00-ZI0f1NoAgwAAAQQ"]
[Mon Apr 20 14:00:06.985058 2026] [:error] [pid 11352:tid 11422] [client 147.135.252.148:50262] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeXA5ml10mhMSfJ7ir99EQAAAIg"]
[Mon Apr 20 14:00:09.358598 2026] [:error] [pid 42014:tid 42031] [client 147.135.252.148:50272] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aeXA6cek-00-ZI0f1NoAhgAAAQ8"]
[Mon Apr 20 14:00:11.635060 2026] [:error] [pid 42014:tid 42036] [client 147.135.252.148:50288] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeXA68ek-00-ZI0f1NoAiAAAARQ"]
[Mon Apr 20 14:00:14.057513 2026] [:error] [pid 11351:tid 11409] [client 147.135.252.148:50304] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aeXA7gN8Z1-vktaI_tOMiwAAAFY"]
[Mon Apr 20 14:00:46.490830 2026] [:error] [pid 42014:tid 42018] [client 147.135.252.148:50314] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aeXBDsek-00-ZI0f1NoAzwAAAQI"]
[Mon Apr 20 14:00:48.831941 2026] [:error] [pid 11351:tid 11403] [client 147.135.252.148:33918] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aeXBEAN8Z1-vktaI_tOMmwAAAFA"]
[Mon Apr 20 14:00:51.525960 2026] [:error] [pid 11351:tid 11402] [client 147.135.252.148:33932] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aeXBEwN8Z1-vktaI_tOMoAAAAE8"]
[Mon Apr 20 14:00:54.130695 2026] [:error] [pid 11351:tid 11410] [client 147.135.252.148:33948] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aeXBFgN8Z1-vktaI_tOMogAAAFc"]
[Mon Apr 20 14:00:56.593145 2026] [:error] [pid 11351:tid 11404] [client 147.135.252.148:33960] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aeXBGAN8Z1-vktaI_tOMqQAAAFE"]
[Mon Apr 20 14:00:59.141488 2026] [:error] [pid 11352:tid 11425] [client 147.135.252.148:33906] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aeXBG2l10mhMSfJ7ir99QgAAAIs"]
[Mon Apr 20 14:01:01.571351 2026] [:error] [pid 11350:tid 11367] [client 147.135.252.148:33922] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aeXBHf4EoMBgOJuJnT0ywQAAAAg"]
[Mon Apr 20 14:01:04.090194 2026] [:error] [pid 11351:tid 11393] [client 147.135.252.148:33934] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aeXBIAN8Z1-vktaI_tOMsAAAAEY"]
[Mon Apr 20 14:01:06.512986 2026] [:error] [pid 11350:tid 11382] [client 147.135.252.148:33940] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aeXBIv4EoMBgOJuJnT0yyQAAABc"]
[Mon Apr 20 14:01:08.888652 2026] [:error] [pid 42014:tid 42035] [client 147.135.252.148:34320] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aeXBJMek-00-ZI0f1NoA3AAAARM"]
[Mon Apr 20 14:01:11.442636 2026] [:error] [pid 42014:tid 42017] [client 147.135.252.148:34330] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aeXBJ8ek-00-ZI0f1NoA3gAAAQE"]
[Mon Apr 20 14:01:14.042885 2026] [:error] [pid 11352:tid 11427] [client 147.135.252.148:34334] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aeXBKml10mhMSfJ7ir99SAAAAI0"]
[Mon Apr 20 14:01:16.642365 2026] [:error] [pid 11351:tid 11403] [client 147.135.252.148:34346] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aeXBLAN8Z1-vktaI_tOMxgAAAFA"]
[Mon Apr 20 14:01:19.068313 2026] [:error] [pid 42014:tid 42017] [client 147.135.252.148:53874] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeXBL8ek-00-ZI0f1NoA9AAAAQE"]
[Mon Apr 20 14:01:21.496147 2026] [:error] [pid 42014:tid 42036] [client 147.135.252.148:53882] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeXBMcek-00-ZI0f1NoBAwAAARQ"]
[Mon Apr 20 14:01:24.052763 2026] [:error] [pid 11350:tid 11365] [client 147.135.252.148:53894] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeXBNP4EoMBgOJuJnT0y0QAAAAY"]
[Mon Apr 20 14:01:26.508880 2026] [:error] [pid 11350:tid 11362] [client 147.135.252.148:53910] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeXBNv4EoMBgOJuJnT0y0wAAAAM"]
[Mon Apr 20 14:01:29.061732 2026] [:error] [pid 11352:tid 11426] [client 147.135.252.148:53442] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeXBOWl10mhMSfJ7ir99UQAAAIw"]
[Mon Apr 20 14:01:31.562460 2026] [:error] [pid 11352:tid 11414] [client 147.135.252.148:53458] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeXBO2l10mhMSfJ7ir99UwAAAIA"]
[Mon Apr 20 14:01:34.020871 2026] [:error] [pid 42014:tid 42028] [client 147.135.252.148:53462] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aeXBPsek-00-ZI0f1NoBHAAAAQw"]
[Mon Apr 20 14:01:36.428454 2026] [:error] [pid 11441:tid 11465] [client 147.135.252.148:53476] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeXBQMixByFUvmh319AFFgAAANY"]
[Mon Apr 20 14:01:38.974419 2026] [:error] [pid 11441:tid 11457] [client 147.135.252.148:47370] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aeXBQsixByFUvmh319AFFwAAAM4"]
[Mon Apr 20 14:01:41.401616 2026] [:error] [pid 11351:tid 11399] [client 147.135.252.148:47382] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeXBRQN8Z1-vktaI_tOM8AAAAEw"]
[Mon Apr 20 14:02:13.689399 2026] [:error] [pid 11351:tid 11396] [client 147.135.252.148:47386] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aeXBZQN8Z1-vktaI_tONMQAAAEk"]
[Mon Apr 20 14:02:16.144547 2026] [:error] [pid 6928:tid 6945] [client 147.135.252.148:34326] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aeXBaB3y7MHq1iB0qYoANAAAAU8"]
[Mon Apr 20 14:02:18.596828 2026] [:error] [pid 6928:tid 6954] [client 147.135.252.148:37916] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aeXBah3y7MHq1iB0qYoAPgAAAVg"]
[Mon Apr 20 14:02:21.017636 2026] [:error] [pid 6928:tid 6943] [client 147.135.252.148:37924] [client 147.135.252.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aeXBbR3y7MHq1iB0qYoAQQAAAU0"]
[Mon Apr 20 14:03:21.495325 2026] [:error] [pid 11441:tid 11464] [client 122.183.50.194:8725] [client 122.183.50.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.50.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeXBqcixByFUvmh319AFtAAAANU"]
[Mon Apr 20 14:03:27.421139 2026] [:error] [pid 42014:tid 42036] [client 122.183.50.194:16821] [client 122.183.50.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.50.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeXBr8ek-00-ZI0f1NoCEgAAARQ"]
[Mon Apr 20 14:03:46.818076 2026] [:error] [pid 11441:tid 11460] [client 122.183.50.194:30540] [client 122.183.50.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.50.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeXBwsixByFUvmh319AFvwAAANE"]
[Mon Apr 20 14:03:58.604616 2026] [:error] [pid 11352:tid 11433] [client 122.183.50.194:3261] [client 122.183.50.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.50.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeXBzml10mhMSfJ7ir99xgAAAJM"]
[Mon Apr 20 14:04:17.960472 2026] [:error] [pid 11350:tid 11361] [client 122.183.50.194:15006] [client 122.183.50.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.50.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeXB4f4EoMBgOJuJnT0zEAAAAAI"]
[Mon Apr 20 14:24:38.175179 2026] [:error] [pid 11351:tid 11399] [client 36.50.26.140:59024] [client 36.50.26.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.26.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeXGpgN8Z1-vktaI_tORFgAAAEw"]
[Mon Apr 20 17:51:36.320775 2026] [:error] [pid 11441:tid 11458] [client 14.96.134.82:55289] [client 14.96.134.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.96.134.82, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeX3KMixByFUvmh319BbUwAAAM8"]
[Mon Apr 20 17:51:46.707321 2026] [:error] [pid 11352:tid 11437] [client 14.96.134.82:55692] [client 14.96.134.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.96.134.82, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeX3Mml10mhMSfJ7ir-23wAAAJc"]
[Mon Apr 20 17:51:57.413284 2026] [:error] [pid 11352:tid 11432] [client 14.96.134.82:55942] [client 14.96.134.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.96.134.82, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeX3PWl10mhMSfJ7ir-2-gAAAJI"]
[Mon Apr 20 17:52:07.995213 2026] [:error] [pid 11441:tid 11449] [client 14.96.134.82:56175] [client 14.96.134.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.96.134.82, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeX3R8ixByFUvmh319BbhgAAAMY"]
[Mon Apr 20 17:52:18.439516 2026] [:error] [pid 6928:tid 6934] [client 14.96.134.82:56408] [client 14.96.134.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.96.134.82, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeX3Uh3y7MHq1iB0qYqAzAAAAUQ"]
[Mon Apr 20 17:55:47.168482 2026] [:error] [pid 42014:tid 42028] [client 162.62.213.165:42338] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeX4I8ek-00-ZI0f1NpcQQAAAQw"]
[Mon Apr 20 19:00:08.690445 2026] [:error] [pid 42014:tid 42039] [client 64.226.92.6:43240] [client 64.226.92.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.226.92.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeYHOMek-00-ZI0f1Npt1wAAARc"]
[Mon Apr 20 19:28:15.282348 2026] [:error] [pid 11351:tid 11401] [client 45.131.195.136:25953] [client 45.131.195.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aeYNzwN8Z1-vktaI_tPdUwAAAE4"]
[Mon Apr 20 19:41:02.630125 2026] [:error] [pid 11494:tid 11497] [client 89.251.0.68:26907] [client 89.251.0.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeYQzsgko5iFiE8YoyTNKgAAAYE"]
[Mon Apr 20 19:41:14.999367 2026] [autoindex:error] [pid 11350:tid 11359] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:18.209121 2026] [autoindex:error] [pid 11350:tid 11382] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:26.377829 2026] [autoindex:error] [pid 11350:tid 11359] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:28.011804 2026] [autoindex:error] [pid 11350:tid 11381] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:32.600568 2026] [autoindex:error] [pid 11350:tid 11376] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:32.873834 2026] [autoindex:error] [pid 11350:tid 11377] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:33.088004 2026] [autoindex:error] [pid 11350:tid 11381] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:33.321083 2026] [autoindex:error] [pid 11350:tid 11360] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:35.102911 2026] [autoindex:error] [pid 11350:tid 11365] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:35.337127 2026] [autoindex:error] [pid 11350:tid 11367] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:36.574258 2026] [autoindex:error] [pid 11350:tid 11361] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:36.836079 2026] [autoindex:error] [pid 11350:tid 11362] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:37.066056 2026] [autoindex:error] [pid 11350:tid 11376] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:37.576752 2026] [autoindex:error] [pid 11350:tid 11366] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:37.865654 2026] [autoindex:error] [pid 11350:tid 11371] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:39.525269 2026] [autoindex:error] [pid 11350:tid 11378] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:44.046042 2026] [autoindex:error] [pid 11350:tid 11382] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:44.301516 2026] [autoindex:error] [pid 11350:tid 11368] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:44.522576 2026] [autoindex:error] [pid 11350:tid 11365] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:44.744349 2026] [autoindex:error] [pid 11350:tid 11380] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:44.984042 2026] [autoindex:error] [pid 11350:tid 11372] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:45.199964 2026] [autoindex:error] [pid 11350:tid 11377] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:46.697525 2026] [autoindex:error] [pid 11350:tid 11366] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:47.036198 2026] [autoindex:error] [pid 11350:tid 11373] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:51.134597 2026] [autoindex:error] [pid 11350:tid 11368] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:53.993000 2026] [autoindex:error] [pid 11350:tid 11375] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:54.459283 2026] [autoindex:error] [pid 11350:tid 11369] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:41:59.765589 2026] [autoindex:error] [pid 11350:tid 11380] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:00.016738 2026] [autoindex:error] [pid 11350:tid 11369] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:04.352608 2026] [autoindex:error] [pid 11350:tid 11377] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:05.942643 2026] [autoindex:error] [pid 11350:tid 11360] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:07.574783 2026] [autoindex:error] [pid 11350:tid 11373] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:07.812315 2026] [autoindex:error] [pid 11350:tid 11376] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:08.033322 2026] [autoindex:error] [pid 11350:tid 11374] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:08.260392 2026] [autoindex:error] [pid 11350:tid 11380] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:08.561899 2026] [autoindex:error] [pid 11350:tid 11369] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:11.449933 2026] [autoindex:error] [pid 11350:tid 11368] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:14.330788 2026] [autoindex:error] [pid 11350:tid 11377] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:14.551100 2026] [autoindex:error] [pid 11350:tid 11369] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:19.401093 2026] [autoindex:error] [pid 11350:tid 11365] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:20.967932 2026] [autoindex:error] [pid 11350:tid 11369] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:23.841991 2026] [autoindex:error] [pid 11350:tid 11361] [client 89.251.0.53:53243] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:26.739327 2026] [autoindex:error] [pid 11350:tid 11380] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:27.005096 2026] [autoindex:error] [pid 11350:tid 11378] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:27.247151 2026] [autoindex:error] [pid 11350:tid 11382] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:27.470521 2026] [autoindex:error] [pid 11350:tid 11361] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:27.689533 2026] [autoindex:error] [pid 11350:tid 11375] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:27.920159 2026] [autoindex:error] [pid 11350:tid 11362] [client 89.251.0.53:53243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:34.382365 2026] [autoindex:error] [pid 11351:tid 11389] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:34.626430 2026] [autoindex:error] [pid 11351:tid 11394] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:34.841979 2026] [autoindex:error] [pid 11351:tid 11388] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:35.092496 2026] [autoindex:error] [pid 11351:tid 11409] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:35.340375 2026] [autoindex:error] [pid 11351:tid 11391] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:36.742330 2026] [autoindex:error] [pid 11351:tid 11408] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:39.235055 2026] [autoindex:error] [pid 11351:tid 11395] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:40.560046 2026] [autoindex:error] [pid 11351:tid 11401] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:40.796397 2026] [autoindex:error] [pid 11351:tid 11411] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:41.070318 2026] [autoindex:error] [pid 11351:tid 11391] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:41.289266 2026] [autoindex:error] [pid 11351:tid 11387] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:41.522338 2026] [autoindex:error] [pid 11351:tid 11390] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:46.261406 2026] [autoindex:error] [pid 11351:tid 11411] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:46.497908 2026] [autoindex:error] [pid 11351:tid 11402] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:49.032326 2026] [autoindex:error] [pid 11351:tid 11389] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:49.277104 2026] [autoindex:error] [pid 11351:tid 11387] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:50.697225 2026] [autoindex:error] [pid 11351:tid 11403] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:56.857183 2026] [autoindex:error] [pid 11351:tid 11389] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:57.104017 2026] [autoindex:error] [pid 11351:tid 11394] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:57.347773 2026] [autoindex:error] [pid 11351:tid 11398] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:42:57.568029 2026] [autoindex:error] [pid 11351:tid 11399] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:02.978882 2026] [autoindex:error] [pid 11351:tid 11395] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:08.253701 2026] [autoindex:error] [pid 11351:tid 11402] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:08.495584 2026] [autoindex:error] [pid 11351:tid 11408] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:12.650923 2026] [autoindex:error] [pid 11351:tid 11396] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:19.386879 2026] [autoindex:error] [pid 11351:tid 11394] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:23.009566 2026] [autoindex:error] [pid 11351:tid 11397] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:23.248273 2026] [autoindex:error] [pid 11351:tid 11403] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:23.526368 2026] [autoindex:error] [pid 11351:tid 11406] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:25.280264 2026] [autoindex:error] [pid 11351:tid 11389] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:26.825737 2026] [autoindex:error] [pid 11351:tid 11398] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:44.414648 2026] [autoindex:error] [pid 11351:tid 11404] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:44.638964 2026] [autoindex:error] [pid 11351:tid 11389] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:47.190985 2026] [autoindex:error] [pid 11351:tid 11387] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:49.702103 2026] [autoindex:error] [pid 11351:tid 11407] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:53.908648 2026] [autoindex:error] [pid 11351:tid 11402] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:55.479156 2026] [autoindex:error] [pid 11351:tid 11399] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:55.730893 2026] [autoindex:error] [pid 11351:tid 11411] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:57.331402 2026] [autoindex:error] [pid 11351:tid 11407] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:57.552023 2026] [autoindex:error] [pid 11351:tid 11388] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:43:57.774957 2026] [autoindex:error] [pid 11351:tid 11403] [client 89.251.0.63:61627] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:44:02.808586 2026] [autoindex:error] [pid 11350:tid 11362] [client 89.251.0.72:53421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:44:06.498374 2026] [autoindex:error] [pid 11350:tid 11375] [client 89.251.0.72:53421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:44:16.141979 2026] [autoindex:error] [pid 11350:tid 11375] [client 89.251.0.72:53421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:44:16.417508 2026] [autoindex:error] [pid 11350:tid 11372] [client 89.251.0.72:53421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:44:18.119314 2026] [autoindex:error] [pid 11350:tid 11364] [client 89.251.0.72:53421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:44:19.704191 2026] [autoindex:error] [pid 11350:tid 11362] [client 89.251.0.72:53421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:44:24.065913 2026] [autoindex:error] [pid 11350:tid 11363] [client 89.251.0.72:53421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:44:29.180226 2026] [autoindex:error] [pid 11350:tid 11376] [client 89.251.0.72:53421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:44:35.486763 2026] [autoindex:error] [pid 11350:tid 11376] [client 89.251.0.72:53421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:44:41.250372 2026] [autoindex:error] [pid 11350:tid 11374] [client 89.251.0.72:53421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:44:41.481685 2026] [autoindex:error] [pid 11350:tid 11363] [client 89.251.0.72:53421] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:05.522554 2026] [:error] [pid 11350:tid 11366] [client 89.251.0.50:32731] [client 89.251.0.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeYSdf4EoMBgOJuJnT2Q2AAAAAc"]
[Mon Apr 20 19:48:17.505853 2026] [autoindex:error] [pid 6928:tid 6933] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:19.958206 2026] [autoindex:error] [pid 6928:tid 6934] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:27.112433 2026] [autoindex:error] [pid 6928:tid 6940] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:28.410778 2026] [autoindex:error] [pid 6928:tid 6938] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:32.167963 2026] [autoindex:error] [pid 6928:tid 6944] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:32.795755 2026] [autoindex:error] [pid 6928:tid 6932] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:33.031991 2026] [autoindex:error] [pid 6928:tid 6947] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:33.316648 2026] [autoindex:error] [pid 6928:tid 6935] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:34.885178 2026] [autoindex:error] [pid 6928:tid 6950] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:35.145384 2026] [autoindex:error] [pid 6928:tid 6954] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:36.399830 2026] [autoindex:error] [pid 6928:tid 6934] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:36.627448 2026] [autoindex:error] [pid 6928:tid 6943] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:36.845171 2026] [autoindex:error] [pid 6928:tid 6930] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:37.283089 2026] [autoindex:error] [pid 6928:tid 6951] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:38.930274 2026] [autoindex:error] [pid 6928:tid 6951] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:39.149926 2026] [autoindex:error] [pid 6928:tid 6937] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:42.925002 2026] [autoindex:error] [pid 6928:tid 6939] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:43.144455 2026] [autoindex:error] [pid 6928:tid 6946] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:43.370019 2026] [autoindex:error] [pid 6928:tid 6951] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:43.634612 2026] [autoindex:error] [pid 6928:tid 6932] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:43.850640 2026] [autoindex:error] [pid 6928:tid 6947] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:44.068337 2026] [autoindex:error] [pid 6928:tid 6933] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:45.553275 2026] [autoindex:error] [pid 6928:tid 6941] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:45.785621 2026] [autoindex:error] [pid 6928:tid 6939] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:49.420187 2026] [autoindex:error] [pid 6928:tid 6952] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:52.005563 2026] [autoindex:error] [pid 6928:tid 6931] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:52.484745 2026] [autoindex:error] [pid 6928:tid 6944] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:57.868033 2026] [autoindex:error] [pid 6928:tid 6950] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:48:58.097965 2026] [autoindex:error] [pid 6928:tid 6931] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:02.716268 2026] [autoindex:error] [pid 6928:tid 6954] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:04.556294 2026] [autoindex:error] [pid 6928:tid 6949] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:06.223971 2026] [autoindex:error] [pid 6928:tid 6952] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:06.455940 2026] [autoindex:error] [pid 6928:tid 6943] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:06.684975 2026] [autoindex:error] [pid 6928:tid 6941] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:06.902596 2026] [autoindex:error] [pid 6928:tid 6931] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:07.128375 2026] [autoindex:error] [pid 6928:tid 6936] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:10.082344 2026] [autoindex:error] [pid 6928:tid 6935] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:13.030441 2026] [autoindex:error] [pid 6928:tid 6942] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:14.823613 2026] [autoindex:error] [pid 6928:tid 6947] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:19.267975 2026] [autoindex:error] [pid 6928:tid 6931] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:20.865514 2026] [autoindex:error] [pid 6928:tid 6944] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:23.846884 2026] [autoindex:error] [pid 6928:tid 6954] [client 89.251.0.67:38219] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:26.740025 2026] [autoindex:error] [pid 6928:tid 6943] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:26.965377 2026] [autoindex:error] [pid 6928:tid 6941] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:27.210133 2026] [autoindex:error] [pid 6928:tid 6931] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:27.434643 2026] [autoindex:error] [pid 6928:tid 6936] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:27.655778 2026] [autoindex:error] [pid 6928:tid 6939] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:27.878096 2026] [autoindex:error] [pid 6928:tid 6944] [client 89.251.0.67:38219] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:34.613431 2026] [autoindex:error] [pid 11352:tid 11417] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:34.874211 2026] [autoindex:error] [pid 11352:tid 11426] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:35.105856 2026] [autoindex:error] [pid 11352:tid 11416] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:35.358449 2026] [autoindex:error] [pid 11352:tid 11437] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:35.577354 2026] [autoindex:error] [pid 11352:tid 11432] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:37.583530 2026] [autoindex:error] [pid 11352:tid 11429] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:41.044247 2026] [autoindex:error] [pid 11352:tid 11425] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:42.846042 2026] [autoindex:error] [pid 11352:tid 11435] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:43.103970 2026] [autoindex:error] [pid 11352:tid 11433] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:43.335252 2026] [autoindex:error] [pid 11352:tid 11419] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:45.042744 2026] [autoindex:error] [pid 11352:tid 11431] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:45.256278 2026] [autoindex:error] [pid 11352:tid 11434] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:51.122245 2026] [autoindex:error] [pid 11352:tid 11429] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:51.343762 2026] [autoindex:error] [pid 11352:tid 11435] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:54.199863 2026] [autoindex:error] [pid 11352:tid 11438] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:54.423422 2026] [autoindex:error] [pid 11352:tid 11425] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:49:56.003574 2026] [autoindex:error] [pid 11352:tid 11429] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:03.445184 2026] [autoindex:error] [pid 11352:tid 11416] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:03.693768 2026] [autoindex:error] [pid 11352:tid 11429] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:03.932009 2026] [autoindex:error] [pid 11352:tid 11433] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:04.159253 2026] [autoindex:error] [pid 11352:tid 11418] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:10.874445 2026] [autoindex:error] [pid 11352:tid 11422] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:15.525713 2026] [autoindex:error] [pid 11352:tid 11424] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:15.766163 2026] [autoindex:error] [pid 11352:tid 11414] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:20.217717 2026] [autoindex:error] [pid 11352:tid 11426] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:28.870567 2026] [autoindex:error] [pid 11352:tid 11424] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:31.899530 2026] [autoindex:error] [pid 11352:tid 11432] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:32.121635 2026] [autoindex:error] [pid 11352:tid 11428] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:32.345655 2026] [autoindex:error] [pid 11352:tid 11425] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:33.825694 2026] [autoindex:error] [pid 11352:tid 11433] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:35.779463 2026] [autoindex:error] [pid 11352:tid 11436] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:56.834450 2026] [autoindex:error] [pid 11352:tid 11426] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:50:57.193393 2026] [autoindex:error] [pid 11352:tid 11433] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:00.467086 2026] [autoindex:error] [pid 11352:tid 11436] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:03.262409 2026] [autoindex:error] [pid 11352:tid 11427] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:07.199852 2026] [autoindex:error] [pid 11352:tid 11416] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:08.851554 2026] [autoindex:error] [pid 11352:tid 11435] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:09.483430 2026] [autoindex:error] [pid 11352:tid 11419] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:11.180187 2026] [autoindex:error] [pid 11352:tid 11420] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:11.431322 2026] [autoindex:error] [pid 11352:tid 11427] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:11.666152 2026] [autoindex:error] [pid 11352:tid 11430] [client 89.251.0.58:32287] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:16.346140 2026] [autoindex:error] [pid 42014:tid 42023] [client 89.251.0.58:35147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:19.141512 2026] [autoindex:error] [pid 42014:tid 42020] [client 89.251.0.58:35147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:28.560533 2026] [autoindex:error] [pid 42014:tid 42039] [client 89.251.0.58:35147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:28.788566 2026] [autoindex:error] [pid 42014:tid 42037] [client 89.251.0.58:35147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:30.349314 2026] [autoindex:error] [pid 42014:tid 42020] [client 89.251.0.58:35147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:32.043694 2026] [autoindex:error] [pid 42014:tid 42027] [client 89.251.0.58:35147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:36.073709 2026] [autoindex:error] [pid 42014:tid 42022] [client 89.251.0.58:35147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:41.256023 2026] [autoindex:error] [pid 42014:tid 42027] [client 89.251.0.58:35147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:48.112056 2026] [autoindex:error] [pid 42014:tid 42036] [client 89.251.0.58:35147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:54.609465 2026] [autoindex:error] [pid 42014:tid 42034] [client 89.251.0.58:35147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 19:51:54.882489 2026] [autoindex:error] [pid 42014:tid 42031] [client 89.251.0.58:35147] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 20:24:23.755544 2026] [:error] [pid 11350:tid 11366] [client 40.89.157.86:29940] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kz.php"] [unique_id "aeYa9_4EoMBgOJuJnT2nbAAAAAc"]
[Mon Apr 20 20:24:24.376385 2026] [:error] [pid 11351:tid 11387] [client 40.89.157.86:61158] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kz.php"] [unique_id "aeYa-AN8Z1-vktaI_tP3uQAAAEA"]
[Mon Apr 20 20:24:26.511672 2026] [:error] [pid 11350:tid 11382] [client 40.89.157.86:38173] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kz.php"] [unique_id "aeYa-v4EoMBgOJuJnT2ncgAAABc"]
[Mon Apr 20 20:24:27.847561 2026] [:error] [pid 11350:tid 11374] [client 40.89.157.86:42805] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kz.php"] [unique_id "aeYa-_4EoMBgOJuJnT2ndgAAAA8"]
[Mon Apr 20 20:24:29.278688 2026] [:error] [pid 11350:tid 11383] [client 40.89.157.86:46706] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeYa_f4EoMBgOJuJnT2ngAAAABg"]
[Mon Apr 20 20:24:30.541296 2026] [:error] [pid 11351:tid 11411] [client 40.89.157.86:58718] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeYa_gN8Z1-vktaI_tP3vwAAAFg"]
[Mon Apr 20 20:24:33.783276 2026] [:error] [pid 11351:tid 11394] [client 40.89.157.86:29884] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeYbAQN8Z1-vktaI_tP3yQAAAEc"]
[Mon Apr 20 20:24:34.746641 2026] [:error] [pid 6928:tid 6934] [client 40.89.157.86:27612] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "aeYbAh3y7MHq1iB0qYqpvwAAAUQ"]
[Mon Apr 20 20:24:35.505464 2026] [:error] [pid 11350:tid 11382] [client 40.89.157.86:42761] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "aeYbA_4EoMBgOJuJnT2nhAAAABc"]
[Mon Apr 20 20:24:36.292925 2026] [:error] [pid 11350:tid 11364] [client 40.89.157.86:42800] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "aeYbBP4EoMBgOJuJnT2niAAAAAU"]
[Mon Apr 20 20:24:37.466834 2026] [:error] [pid 11494:tid 11497] [client 40.89.157.86:29853] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "aeYbBcgko5iFiE8YoyTZ3AAAAYE"]
[Mon Apr 20 20:24:40.020252 2026] [:error] [pid 11351:tid 11406] [client 40.89.157.86:29842] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/saorix1.php"] [unique_id "aeYbCAN8Z1-vktaI_tP32AAAAFM"]
[Mon Apr 20 20:24:40.605654 2026] [:error] [pid 11494:tid 11502] [client 40.89.157.86:27641] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeYbCMgko5iFiE8YoyTZ4wAAAYY"]
[Mon Apr 20 20:24:42.741504 2026] [:error] [pid 11351:tid 11393] [client 40.89.157.86:43996] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeYbCgN8Z1-vktaI_tP33wAAAEY"]
[Mon Apr 20 20:24:43.327819 2026] [:error] [pid 6928:tid 6951] [client 40.89.157.86:47094] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeYbCx3y7MHq1iB0qYqpwgAAAVU"]
[Mon Apr 20 20:24:44.148307 2026] [:error] [pid 11351:tid 11398] [client 40.89.157.86:35405] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeYbDAN8Z1-vktaI_tP35gAAAEs"]
[Mon Apr 20 20:24:45.286950 2026] [:error] [pid 11441:tid 11456] [client 40.89.157.86:27635] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aeYbDcixByFUvmh319CXEwAAAM0"]
[Mon Apr 20 20:24:46.869345 2026] [:error] [pid 42014:tid 42019] [client 40.89.157.86:46066] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aeYbDsek-00-ZI0f1Np8NAAAAQM"]
[Mon Apr 20 20:24:47.922035 2026] [:error] [pid 6928:tid 6944] [client 40.89.157.86:50893] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aeYbDx3y7MHq1iB0qYqpxAAAAU4"]
[Mon Apr 20 20:24:48.769909 2026] [:error] [pid 11351:tid 11387] [client 40.89.157.86:42792] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "aeYbEAN8Z1-vktaI_tP38gAAAEA"]
[Mon Apr 20 20:24:50.025311 2026] [:error] [pid 11352:tid 11421] [client 40.89.157.86:46028] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-kikikoko.php"] [unique_id "aeYbEml10mhMSfJ7ir_TFwAAAIc"]
[Mon Apr 20 20:24:51.268506 2026] [:error] [pid 11441:tid 11452] [client 40.89.157.86:46681] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-kikikoko.php"] [unique_id "aeYbE8ixByFUvmh319CXGgAAAMk"]
[Mon Apr 20 20:24:52.398866 2026] [:error] [pid 11351:tid 11391] [client 40.89.157.86:4050] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-kikikoko.php"] [unique_id "aeYbFAN8Z1-vktaI_tP3_AAAAEQ"]
[Mon Apr 20 20:24:54.056115 2026] [:error] [pid 11351:tid 11388] [client 40.89.157.86:3649] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-kikikoko.php"] [unique_id "aeYbFgN8Z1-vktaI_tP3_gAAAEE"]
[Mon Apr 20 20:24:54.997150 2026] [:error] [pid 11494:tid 11505] [client 40.89.157.86:46757] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kikikoko.php"] [unique_id "aeYbFsgko5iFiE8YoyTZ8gAAAYk"]
[Mon Apr 20 20:24:56.331482 2026] [:error] [pid 11350:tid 11364] [client 40.89.157.86:37421] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kikikoko.php"] [unique_id "aeYbGP4EoMBgOJuJnT2ntQAAAAU"]
[Mon Apr 20 20:24:57.754910 2026] [:error] [pid 42014:tid 42033] [client 40.89.157.86:27583] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kikikoko.php"] [unique_id "aeYbGcek-00-ZI0f1Np8PQAAARE"]
[Mon Apr 20 20:25:00.961789 2026] [:error] [pid 11350:tid 11375] [client 40.89.157.86:50915] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kikikoko.php"] [unique_id "aeYbHP4EoMBgOJuJnT2nwgAAABA"]
[Mon Apr 20 20:25:02.032782 2026] [:error] [pid 11351:tid 11408] [client 40.89.157.86:37494] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ganja.php"] [unique_id "aeYbHgN8Z1-vktaI_tP4AwAAAFU"]
[Mon Apr 20 20:25:02.847564 2026] [:error] [pid 11350:tid 11365] [client 40.89.157.86:48151] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ganja.php"] [unique_id "aeYbHv4EoMBgOJuJnT2nyQAAAAY"]
[Mon Apr 20 20:25:05.148728 2026] [:error] [pid 11350:tid 11369] [client 40.89.157.86:4070] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ganja.php"] [unique_id "aeYbIf4EoMBgOJuJnT2n0wAAAAo"]
[Mon Apr 20 20:25:06.720010 2026] [:error] [pid 11350:tid 11370] [client 40.89.157.86:34312] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ganja.php"] [unique_id "aeYbIv4EoMBgOJuJnT2n4AAAAAs"]
[Mon Apr 20 20:25:10.648374 2026] [:error] [pid 6928:tid 6946] [client 40.89.157.86:48135] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeYbJh3y7MHq1iB0qYqp1gAAAVA"]
[Mon Apr 20 20:25:13.078351 2026] [:error] [pid 11350:tid 11383] [client 40.89.157.86:36317] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeYbKf4EoMBgOJuJnT2n-QAAABg"]
[Mon Apr 20 20:25:14.334793 2026] [:error] [pid 11494:tid 11504] [client 40.89.157.86:44318] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeYbKsgko5iFiE8YoyTaHQAAAYg"]
[Mon Apr 20 20:25:15.922167 2026] [:error] [pid 11351:tid 11398] [client 40.89.157.86:59515] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeYbKwN8Z1-vktaI_tP4GAAAAEs"]
[Mon Apr 20 20:25:17.232793 2026] [:error] [pid 11350:tid 11369] [client 40.89.157.86:55964] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad821.php"] [unique_id "aeYbLf4EoMBgOJuJnT2oCQAAAAo"]
[Mon Apr 20 20:25:18.777379 2026] [:error] [pid 11494:tid 11515] [client 40.89.157.86:31715] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad821.php"] [unique_id "aeYbLsgko5iFiE8YoyTaKAAAAZM"]
[Mon Apr 20 20:25:20.374667 2026] [:error] [pid 42014:tid 42021] [client 40.89.157.86:55010] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad821.php"] [unique_id "aeYbMMek-00-ZI0f1Np8TgAAAQU"]
[Mon Apr 20 20:25:21.797408 2026] [:error] [pid 11350:tid 11371] [client 40.89.157.86:40718] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad821.php"] [unique_id "aeYbMf4EoMBgOJuJnT2oEQAAAAw"]
[Mon Apr 20 20:25:38.968799 2026] [:error] [pid 11350:tid 11369] [client 40.89.157.86:55974] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "aeYbQv4EoMBgOJuJnT2oMQAAAAo"]
[Mon Apr 20 20:25:40.450969 2026] [:error] [pid 11351:tid 11393] [client 40.89.157.86:31206] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "aeYbRAN8Z1-vktaI_tP4LQAAAEY"]
[Mon Apr 20 20:25:41.549568 2026] [:error] [pid 11441:tid 11444] [client 40.89.157.86:48517] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "aeYbRcixByFUvmh319CXUwAAAME"]
[Mon Apr 20 20:25:42.756921 2026] [:error] [pid 11352:tid 11432] [client 40.89.157.86:50447] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws66.php"] [unique_id "aeYbRml10mhMSfJ7ir_TMQAAAJI"]
[Mon Apr 20 20:25:45.180777 2026] [:error] [pid 11351:tid 11407] [client 40.89.157.86:64029] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aeYbSQN8Z1-vktaI_tP4OgAAAFQ"]
[Mon Apr 20 20:25:48.529291 2026] [:error] [pid 42014:tid 42025] [client 40.89.157.86:37041] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aeYbTMek-00-ZI0f1Np8WwAAAQk"]
[Mon Apr 20 20:25:49.551843 2026] [:error] [pid 6928:tid 6949] [client 40.89.157.86:60665] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aeYbTR3y7MHq1iB0qYqp5gAAAVM"]
[Mon Apr 20 20:25:51.255346 2026] [:error] [pid 11350:tid 11381] [client 40.89.157.86:64049] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "aeYbT_4EoMBgOJuJnT2oOgAAABY"]
[Mon Apr 20 20:25:52.351613 2026] [:error] [pid 11494:tid 11513] [client 40.89.157.86:64020] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "aeYbUMgko5iFiE8YoyTaSAAAAZE"]
[Mon Apr 20 20:25:53.061188 2026] [:error] [pid 11494:tid 11515] [client 40.89.157.86:45803] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "aeYbUcgko5iFiE8YoyTaSwAAAZM"]
[Mon Apr 20 20:25:54.257871 2026] [:error] [pid 11351:tid 11387] [client 40.89.157.86:3332] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "aeYbUgN8Z1-vktaI_tP4RAAAAEA"]
[Mon Apr 20 20:25:55.480482 2026] [:error] [pid 11494:tid 11506] [client 40.89.157.86:29318] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "aeYbU8gko5iFiE8YoyTaUQAAAYo"]
[Mon Apr 20 20:25:56.505202 2026] [:error] [pid 11351:tid 11404] [client 40.89.157.86:48537] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r2.php"] [unique_id "aeYbVAN8Z1-vktaI_tP4RwAAAFE"]
[Mon Apr 20 20:25:58.130959 2026] [:error] [pid 11350:tid 11376] [client 40.89.157.86:60618] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r2.php"] [unique_id "aeYbVv4EoMBgOJuJnT2oRAAAABE"]
[Mon Apr 20 20:25:59.607273 2026] [:error] [pid 11350:tid 11371] [client 40.89.157.86:52126] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r2.php"] [unique_id "aeYbV_4EoMBgOJuJnT2oTgAAAAw"]
[Mon Apr 20 20:26:00.837473 2026] [:error] [pid 11351:tid 11399] [client 40.89.157.86:41799] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r2.php"] [unique_id "aeYbWAN8Z1-vktaI_tP4TwAAAEw"]
[Mon Apr 20 20:26:02.373957 2026] [:error] [pid 11494:tid 11520] [client 40.89.157.86:37032] [client 40.89.157.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aeYbWsgko5iFiE8YoyTaXgAAAZg"]
[Mon Apr 20 20:26:03.522072 2026] [:error] [pid 11494:tid 11500] [client 40.89.157.86:3876] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeYbW8gko5iFiE8YoyTaYgAAAYQ"]
[Mon Apr 20 20:26:05.418631 2026] [:error] [pid 11441:tid 11463] [client 40.89.157.86:28630] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeYbXcixByFUvmh319CXZgAAANQ"]
[Mon Apr 20 20:26:06.837988 2026] [:error] [pid 11351:tid 11399] [client 40.89.157.86:43545] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aeYbXgN8Z1-vktaI_tP4VQAAAEw"]
[Mon Apr 20 20:26:08.492318 2026] [:error] [pid 11351:tid 11398] [client 40.89.157.86:45761] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeYbYAN8Z1-vktaI_tP4VwAAAEs"]
[Mon Apr 20 20:26:09.418915 2026] [:error] [pid 6928:tid 6944] [client 40.89.157.86:41837] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeYbYR3y7MHq1iB0qYqp-QAAAU4"]
[Mon Apr 20 20:26:10.144985 2026] [:error] [pid 11441:tid 11467] [client 40.89.157.86:45805] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeYbYsixByFUvmh319CXaQAAANg"]
[Mon Apr 20 20:26:11.358518 2026] [:error] [pid 11441:tid 11451] [client 40.89.157.86:41829] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeYbY8ixByFUvmh319CXbAAAAMg"]
[Mon Apr 20 20:26:14.535619 2026] [:error] [pid 11350:tid 11380] [client 40.89.157.86:45514] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeYbZv4EoMBgOJuJnT2oeAAAABU"]
[Mon Apr 20 20:26:17.031571 2026] [:error] [pid 11350:tid 11370] [client 40.89.157.86:31132] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeYbaf4EoMBgOJuJnT2oigAAAAs"]
[Mon Apr 20 20:26:17.904907 2026] [:error] [pid 11350:tid 11377] [client 40.89.157.86:3365] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeYbaf4EoMBgOJuJnT2okQAAABI"]
[Mon Apr 20 20:26:19.476809 2026] [:error] [pid 11494:tid 11502] [client 40.89.157.86:60565] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeYba8gko5iFiE8YoyTacAAAAYY"]
[Mon Apr 20 20:26:22.781106 2026] [:error] [pid 6928:tid 6954] [client 40.89.157.86:60551] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roksad1.php"] [unique_id "aeYbbh3y7MHq1iB0qYqqBQAAAVg"]
[Mon Apr 20 20:26:24.670676 2026] [:error] [pid 11350:tid 11368] [client 40.89.157.86:57081] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roksad1.php"] [unique_id "aeYbcP4EoMBgOJuJnT2opwAAAAk"]
[Mon Apr 20 20:26:26.684814 2026] [:error] [pid 11352:tid 11429] [client 40.89.157.86:57071] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roksad1.php"] [unique_id "aeYbcml10mhMSfJ7ir_TSQAAAI8"]
[Mon Apr 20 20:26:27.748142 2026] [:error] [pid 11351:tid 11405] [client 40.89.157.86:3898] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roksad1.php"] [unique_id "aeYbcwN8Z1-vktaI_tP4aQAAAFI"]
[Mon Apr 20 20:26:28.651155 2026] [:error] [pid 42014:tid 42019] [client 40.89.157.86:57055] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aeYbdMek-00-ZI0f1Np8bwAAAQM"]
[Mon Apr 20 20:26:29.581567 2026] [:error] [pid 11350:tid 11373] [client 40.89.157.86:43565] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aeYbdf4EoMBgOJuJnT2oqQAAAA4"]
[Mon Apr 20 20:26:30.234151 2026] [:error] [pid 6928:tid 6949] [client 40.89.157.86:41260] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aeYbdh3y7MHq1iB0qYqqFAAAAVM"]
[Mon Apr 20 20:26:34.539860 2026] [:error] [pid 42014:tid 42018] [client 40.89.157.86:41246] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aeYbesek-00-ZI0f1Np8ewAAAQI"]
[Mon Apr 20 20:26:36.160001 2026] [:error] [pid 11351:tid 11399] [client 40.89.157.86:57872] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "aeYbfAN8Z1-vktaI_tP4dgAAAEw"]
[Mon Apr 20 20:26:52.345538 2026] [:error] [pid 11494:tid 11497] [client 40.89.157.86:41273] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeYbjMgko5iFiE8YoyTalAAAAYE"]
[Mon Apr 20 20:26:53.554286 2026] [:error] [pid 11350:tid 11373] [client 40.89.157.86:34390] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeYbjf4EoMBgOJuJnT2osQAAAA4"]
[Mon Apr 20 20:26:55.541385 2026] [:error] [pid 11494:tid 11498] [client 40.89.157.86:50002] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeYbj8gko5iFiE8YoyTamAAAAYI"]
[Mon Apr 20 20:26:57.031358 2026] [:error] [pid 6928:tid 6934] [client 40.89.157.86:47744] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeYbkR3y7MHq1iB0qYqqPwAAAUQ"]
[Mon Apr 20 20:26:58.128664 2026] [:error] [pid 11351:tid 11407] [client 40.89.157.86:3646] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aeYbkgN8Z1-vktaI_tP4mAAAAFQ"]
[Mon Apr 20 20:27:00.188310 2026] [:error] [pid 11350:tid 11363] [client 40.89.157.86:34418] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aeYblP4EoMBgOJuJnT2ouQAAAAQ"]
[Mon Apr 20 20:27:02.388380 2026] [:error] [pid 6928:tid 6937] [client 40.89.157.86:29586] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aeYblh3y7MHq1iB0qYqqRgAAAUc"]
[Mon Apr 20 20:27:06.683316 2026] [:error] [pid 11494:tid 11505] [client 40.89.157.86:31136] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "aeYbmsgko5iFiE8YoyTaqgAAAYk"]
[Mon Apr 20 20:27:09.457916 2026] [:error] [pid 11350:tid 11378] [client 40.89.157.86:3896] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aeYbnf4EoMBgOJuJnT2o0wAAABM"]
[Mon Apr 20 20:27:10.391280 2026] [:error] [pid 11351:tid 11388] [client 40.89.157.86:60580] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aeYbngN8Z1-vktaI_tP4qAAAAEE"]
[Mon Apr 20 20:27:11.366349 2026] [:error] [pid 11351:tid 11393] [client 40.89.157.86:3900] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aeYbnwN8Z1-vktaI_tP4qgAAAEY"]
[Mon Apr 20 20:27:13.670056 2026] [:error] [pid 11351:tid 11397] [client 40.89.157.86:57061] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "aeYboQN8Z1-vktaI_tP4tgAAAEo"]
[Mon Apr 20 20:27:19.037309 2026] [:error] [pid 11350:tid 11366] [client 40.89.157.86:33983] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeYbp_4EoMBgOJuJnT2o4wAAAAc"]
[Mon Apr 20 20:27:20.157588 2026] [:error] [pid 42014:tid 42032] [client 40.89.157.86:41801] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeYbqMek-00-ZI0f1Np8rgAAARA"]
[Mon Apr 20 20:27:20.991232 2026] [:error] [pid 11351:tid 11391] [client 40.89.157.86:41803] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeYbqAN8Z1-vktaI_tP4wQAAAEQ"]
[Mon Apr 20 20:27:21.758548 2026] [:error] [pid 6928:tid 6942] [client 40.89.157.86:64014] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeYbqR3y7MHq1iB0qYqqUgAAAUw"]
[Mon Apr 20 20:27:23.591128 2026] [:error] [pid 11351:tid 11407] [client 40.89.157.86:46493] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/view.php"] [unique_id "aeYbqwN8Z1-vktaI_tP4xgAAAFQ"]
[Mon Apr 20 20:27:24.490575 2026] [:error] [pid 11350:tid 11362] [client 40.89.157.86:41273] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/view.php"] [unique_id "aeYbrP4EoMBgOJuJnT2o-AAAAAM"]
[Mon Apr 20 20:27:25.696687 2026] [:error] [pid 11350:tid 11374] [client 40.89.157.86:48516] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/view.php"] [unique_id "aeYbrf4EoMBgOJuJnT2pBQAAAA8"]
[Mon Apr 20 20:27:28.682129 2026] [:error] [pid 11441:tid 11461] [client 40.89.157.86:55012] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/view.php"] [unique_id "aeYbsMixByFUvmh319CXpQAAANI"]
[Mon Apr 20 20:27:30.076446 2026] [:error] [pid 11441:tid 11457] [client 40.89.157.86:29142] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aeYbssixByFUvmh319CXpwAAAM4"]
[Mon Apr 20 20:27:31.385500 2026] [:error] [pid 11351:tid 11393] [client 40.89.157.86:54991] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aeYbswN8Z1-vktaI_tP4ywAAAEY"]
[Mon Apr 20 20:27:32.047509 2026] [:error] [pid 6928:tid 6945] [client 40.89.157.86:35837] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aeYbtB3y7MHq1iB0qYqqWAAAAU8"]
[Mon Apr 20 20:27:33.120140 2026] [:error] [pid 11351:tid 11400] [client 40.89.157.86:40730] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aeYbtQN8Z1-vktaI_tP4zQAAAE0"]
[Mon Apr 20 20:27:34.352093 2026] [:error] [pid 11351:tid 11390] [client 40.89.157.86:64818] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeYbtgN8Z1-vktaI_tP41AAAAEM"]
[Mon Apr 20 20:27:35.845855 2026] [:error] [pid 11350:tid 11363] [client 40.89.157.86:49408] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeYbt_4EoMBgOJuJnT2pHgAAAAQ"]
[Mon Apr 20 20:27:37.477381 2026] [:error] [pid 11350:tid 11365] [client 40.89.157.86:57376] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeYbuf4EoMBgOJuJnT2pIgAAAAY"]
[Mon Apr 20 20:27:39.453464 2026] [:error] [pid 11441:tid 11445] [client 40.89.157.86:50885] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aeYbu8ixByFUvmh319CXrAAAAMI"]
[Mon Apr 20 20:27:40.545376 2026] [:error] [pid 11352:tid 11431] [client 40.89.157.86:38617] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeYbvGl10mhMSfJ7ir_TYQAAAJE"]
[Mon Apr 20 20:27:41.445567 2026] [:error] [pid 11350:tid 11378] [client 40.89.157.86:47870] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeYbvf4EoMBgOJuJnT2pKgAAABM"]
[Mon Apr 20 20:27:42.736456 2026] [:error] [pid 11352:tid 11416] [client 40.89.157.86:51510] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeYbvml10mhMSfJ7ir_TZwAAAII"]
[Mon Apr 20 20:27:43.410445 2026] [:error] [pid 11494:tid 11497] [client 40.89.157.86:61122] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "aeYbv8gko5iFiE8YoyTa1gAAAYE"]
[Mon Apr 20 20:27:44.717780 2026] [:error] [pid 11352:tid 11415] [client 40.89.157.86:26502] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "aeYbwGl10mhMSfJ7ir_TaAAAAIE"]
[Mon Apr 20 20:27:46.843670 2026] [:error] [pid 11350:tid 11367] [client 40.89.157.86:39789] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "aeYbwv4EoMBgOJuJnT2pPQAAAAg"]
[Mon Apr 20 20:27:47.874116 2026] [:error] [pid 11494:tid 11498] [client 40.89.157.86:27051] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "aeYbw8gko5iFiE8YoyTa3gAAAYI"]
[Mon Apr 20 20:27:48.822204 2026] [:error] [pid 11441:tid 11449] [client 40.89.157.86:36242] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "aeYbxMixByFUvmh319CXuAAAAMY"]
[Mon Apr 20 20:27:56.377961 2026] [:error] [pid 11351:tid 11401] [client 40.89.157.86:35006] [client 40.89.157.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeYbzAN8Z1-vktaI_tP5BQAAAE4"]
[Mon Apr 20 20:28:08.145420 2026] [:error] [pid 11352:tid 11438] [client 40.89.157.86:56052] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws57.php"] [unique_id "aeYb2Gl10mhMSfJ7ir_TfAAAAJg"]
[Mon Apr 20 20:28:09.493462 2026] [:error] [pid 11350:tid 11362] [client 40.89.157.86:55424] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws57.php"] [unique_id "aeYb2f4EoMBgOJuJnT2pXAAAAAM"]
[Mon Apr 20 20:28:10.673003 2026] [:error] [pid 42014:tid 42024] [client 40.89.157.86:39014] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws57.php"] [unique_id "aeYb2sek-00-ZI0f1Np87gAAAQg"]
[Mon Apr 20 20:28:11.667723 2026] [:error] [pid 11350:tid 11365] [client 40.89.157.86:3089] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws57.php"] [unique_id "aeYb2_4EoMBgOJuJnT2pYgAAAAY"]
[Mon Apr 20 20:28:13.024874 2026] [:error] [pid 6928:tid 6931] [client 40.89.157.86:59810] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "aeYb3R3y7MHq1iB0qYqqgAAAAUE"]
[Mon Apr 20 20:28:14.458613 2026] [:error] [pid 6928:tid 6950] [client 40.89.157.86:46452] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "aeYb3h3y7MHq1iB0qYqqhQAAAVQ"]
[Mon Apr 20 20:28:16.274480 2026] [:error] [pid 6928:tid 6935] [client 40.89.157.86:32087] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "aeYb4B3y7MHq1iB0qYqqiQAAAUU"]
[Mon Apr 20 20:28:20.504690 2026] [:error] [pid 11494:tid 11504] [client 40.89.157.86:32085] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws86.php"] [unique_id "aeYb5Mgko5iFiE8YoyTbDgAAAYg"]
[Mon Apr 20 20:28:26.161725 2026] [:error] [pid 11350:tid 11367] [client 40.89.157.86:59780] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeYb6v4EoMBgOJuJnT2pagAAAAg"]
[Mon Apr 20 20:28:27.886110 2026] [:error] [pid 11494:tid 11501] [client 40.89.157.86:59815] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeYb68gko5iFiE8YoyTbFgAAAYU"]
[Mon Apr 20 20:28:29.402680 2026] [:error] [pid 11441:tid 11466] [client 40.89.157.86:33621] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeYb7cixByFUvmh319CX0QAAANc"]
[Mon Apr 20 20:28:32.274579 2026] [:error] [pid 11441:tid 11447] [client 40.89.157.86:61107] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aeYb8MixByFUvmh319CX1AAAAMQ"]
[Mon Apr 20 20:28:33.711254 2026] [:error] [pid 11350:tid 11372] [client 40.89.157.86:32495] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packsin1.php"] [unique_id "aeYb8f4EoMBgOJuJnT2pfQAAAA0"]
[Mon Apr 20 20:28:35.230046 2026] [:error] [pid 11350:tid 11362] [client 40.89.157.86:39369] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packsin1.php"] [unique_id "aeYb8_4EoMBgOJuJnT2pfwAAAAM"]
[Mon Apr 20 20:28:38.204858 2026] [:error] [pid 11350:tid 11370] [client 40.89.157.86:61113] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packsin1.php"] [unique_id "aeYb9v4EoMBgOJuJnT2phwAAAAs"]
[Mon Apr 20 20:28:41.409891 2026] [:error] [pid 11350:tid 11363] [client 40.89.157.86:33604] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packsin1.php"] [unique_id "aeYb-f4EoMBgOJuJnT2pkAAAAAQ"]
[Mon Apr 20 20:28:43.310229 2026] [:error] [pid 11350:tid 11378] [client 40.89.157.86:54942] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xs.php"] [unique_id "aeYb-_4EoMBgOJuJnT2plQAAABM"]
[Mon Apr 20 20:28:44.876086 2026] [:error] [pid 11350:tid 11375] [client 40.89.157.86:44391] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xs.php"] [unique_id "aeYb_P4EoMBgOJuJnT2pmQAAABA"]
[Mon Apr 20 20:28:49.117755 2026] [:error] [pid 6928:tid 6945] [client 40.89.157.86:45356] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xs.php"] [unique_id "aeYcAR3y7MHq1iB0qYqqmwAAAU8"]
[Mon Apr 20 20:28:50.889569 2026] [:error] [pid 11350:tid 11361] [client 40.89.157.86:49483] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xs.php"] [unique_id "aeYcAv4EoMBgOJuJnT2ppQAAAAI"]
[Mon Apr 20 20:28:53.611739 2026] [:error] [pid 11350:tid 11368] [client 40.89.157.86:44404] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "aeYcBf4EoMBgOJuJnT2pqwAAAAk"]
[Mon Apr 20 20:28:54.930015 2026] [:error] [pid 11350:tid 11362] [client 40.89.157.86:43307] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "aeYcBv4EoMBgOJuJnT2prwAAAAM"]
[Mon Apr 20 20:28:55.830633 2026] [:error] [pid 11441:tid 11458] [client 40.89.157.86:32087] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "aeYcB8ixByFUvmh319CX7gAAAM8"]
[Mon Apr 20 20:28:57.215956 2026] [:error] [pid 11350:tid 11372] [client 40.89.157.86:56475] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "aeYcCf4EoMBgOJuJnT2pswAAAA0"]
[Mon Apr 20 20:28:59.561952 2026] [:error] [pid 11351:tid 11394] [client 40.89.157.86:48201] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeYcCwN8Z1-vktaI_tP5KgAAAEc"]
[Mon Apr 20 20:29:01.479116 2026] [:error] [pid 11350:tid 11366] [client 40.89.157.86:27070] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeYcDf4EoMBgOJuJnT2pvwAAAAc"]
[Mon Apr 20 20:29:02.877462 2026] [:error] [pid 11350:tid 11364] [client 40.89.157.86:58690] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeYcDv4EoMBgOJuJnT2pxQAAAAU"]
[Mon Apr 20 20:29:05.579058 2026] [:error] [pid 11494:tid 11503] [client 40.89.157.86:47813] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeYcEcgko5iFiE8YoyTbJQAAAYc"]
[Mon Apr 20 20:29:18.872641 2026] [:error] [pid 11350:tid 11371] [client 40.89.157.86:3249] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "aeYcHv4EoMBgOJuJnT2p8AAAAAw"]
[Mon Apr 20 20:29:19.986342 2026] [:error] [pid 11350:tid 11376] [client 40.89.157.86:46673] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "aeYcH_4EoMBgOJuJnT2p9QAAABE"]
[Mon Apr 20 20:29:22.569348 2026] [:error] [pid 42014:tid 42039] [client 40.89.157.86:26511] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "aeYcIsek-00-ZI0f1Np9DQAAARc"]
[Mon Apr 20 20:29:23.789517 2026] [:error] [pid 11352:tid 11435] [client 40.89.157.86:41743] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "aeYcI2l10mhMSfJ7ir_TmgAAAJU"]
[Mon Apr 20 20:29:24.935284 2026] [:error] [pid 11350:tid 11376] [client 40.89.157.86:29691] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws68.php"] [unique_id "aeYcJP4EoMBgOJuJnT2qAQAAABE"]
[Mon Apr 20 20:29:25.998271 2026] [:error] [pid 11441:tid 11452] [client 40.89.157.86:3989] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws68.php"] [unique_id "aeYcJcixByFUvmh319CX_AAAAMk"]
[Mon Apr 20 20:29:26.673645 2026] [:error] [pid 11350:tid 11360] [client 40.89.157.86:3140] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws68.php"] [unique_id "aeYcJv4EoMBgOJuJnT2qAgAAAAE"]
[Mon Apr 20 20:29:28.982802 2026] [:error] [pid 11494:tid 11505] [client 40.89.157.86:47425] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws68.php"] [unique_id "aeYcKMgko5iFiE8YoyTbTgAAAYk"]
[Mon Apr 20 20:29:29.790106 2026] [:error] [pid 11351:tid 11388] [client 40.89.157.86:63638] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aeYcKQN8Z1-vktaI_tP5QwAAAEE"]
[Mon Apr 20 20:29:30.447797 2026] [:error] [pid 11351:tid 11391] [client 40.89.157.86:64076] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aeYcKgN8Z1-vktaI_tP5RAAAAEQ"]
[Mon Apr 20 20:29:33.094592 2026] [:error] [pid 11350:tid 11370] [client 40.89.157.86:30745] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aeYcLf4EoMBgOJuJnT2qEAAAAAs"]
[Mon Apr 20 20:29:34.165056 2026] [:error] [pid 11352:tid 11438] [client 40.89.157.86:64119] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "aeYcLml10mhMSfJ7ir_TngAAAJg"]
[Mon Apr 20 20:29:36.162718 2026] [:error] [pid 11441:tid 11453] [client 40.89.157.86:63636] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeYcMMixByFUvmh319CYBgAAAMo"]
[Mon Apr 20 20:29:37.766178 2026] [:error] [pid 11494:tid 11510] [client 40.89.157.86:3568] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeYcMcgko5iFiE8YoyTbVgAAAY4"]
[Mon Apr 20 20:29:39.334767 2026] [:error] [pid 11494:tid 11508] [client 40.89.157.86:63654] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeYcM8gko5iFiE8YoyTbXAAAAYw"]
[Mon Apr 20 20:29:40.289333 2026] [:error] [pid 11494:tid 11509] [client 40.89.157.86:37073] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aeYcNMgko5iFiE8YoyTbYgAAAY0"]
[Mon Apr 20 20:29:43.957553 2026] [:error] [pid 11350:tid 11372] [client 40.89.157.86:37111] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son1.php"] [unique_id "aeYcN_4EoMBgOJuJnT2qJgAAAA0"]
[Mon Apr 20 20:29:46.949600 2026] [:error] [pid 11351:tid 11402] [client 40.89.157.86:59850] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son1.php"] [unique_id "aeYcOgN8Z1-vktaI_tP5UgAAAE8"]
[Mon Apr 20 20:29:47.633224 2026] [:error] [pid 11441:tid 11448] [client 40.89.157.86:28063] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son1.php"] [unique_id "aeYcO8ixByFUvmh319CYEgAAAMU"]
[Mon Apr 20 20:29:48.931328 2026] [:error] [pid 11351:tid 11387] [client 40.89.157.86:47395] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son1.php"] [unique_id "aeYcPAN8Z1-vktaI_tP5VwAAAEA"]
[Mon Apr 20 20:29:50.634163 2026] [:error] [pid 11350:tid 11365] [client 40.89.157.86:59039] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aeYcPv4EoMBgOJuJnT2qNAAAAAY"]
[Mon Apr 20 20:29:51.659645 2026] [:error] [pid 11494:tid 11509] [client 40.89.157.86:47362] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aeYcP8gko5iFiE8YoyTbjwAAAY0"]
[Mon Apr 20 20:29:54.011549 2026] [:error] [pid 11494:tid 11514] [client 40.89.157.86:28077] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aeYcQsgko5iFiE8YoyTbkQAAAZI"]
[Mon Apr 20 20:29:56.634837 2026] [:error] [pid 11350:tid 11375] [client 40.89.157.86:47103] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aeYcRP4EoMBgOJuJnT2qRgAAABA"]
[Mon Apr 20 20:29:58.068486 2026] [:error] [pid 11441:tid 11464] [client 40.89.157.86:64778] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeYcRsixByFUvmh319CYFQAAANU"]
[Mon Apr 20 20:29:59.477422 2026] [:error] [pid 6928:tid 6947] [client 40.89.157.86:32832] [client 40.89.157.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aeYcRx3y7MHq1iB0qYqqygAAAVE"]
[Mon Apr 20 20:42:31.120461 2026] [:error] [pid 42014:tid 42026] [client 45.79.147.155:40484] [client 45.79.147.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.79.147.155, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeYfN8ek-00-ZI0f1Np--gAAAQo"]
[Mon Apr 20 20:42:32.027373 2026] [proxy_fcgi:error] [pid 42014:tid 42026] [client 45.79.147.155:40484] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 20 20:42:32.380282 2026] [:error] [pid 42014:tid 42016] [client 45.79.147.155:40484] [client 45.79.147.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.79.147.155, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeYfOMek-00-ZI0f1Np-_gAAAQA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 20 20:42:33.401801 2026] [proxy_fcgi:error] [pid 42014:tid 42016] [client 45.79.147.155:40484] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 20 20:53:11.195214 2026] [:error] [pid 11350:tid 11364] [client 167.99.74.72:36412] [client 167.99.74.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.74.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeYht_4EoMBgOJuJnT21kwAAAAU"]
[Mon Apr 20 20:53:12.183723 2026] [proxy_fcgi:error] [pid 11350:tid 11364] [client 167.99.74.72:36412] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 20 20:53:19.692388 2026] [:error] [pid 11352:tid 11418] [client 167.99.74.72:36424] [client 167.99.74.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.74.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeYhv2l10mhMSfJ7ir_W7wAAAIQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon Apr 20 20:53:20.765857 2026] [proxy_fcgi:error] [pid 11352:tid 11418] [client 167.99.74.72:36424] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 21 00:39:08.167327 2026] [:error] [pid 11350:tid 11364] [client 122.180.183.101:12964] [client 122.180.183.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.180.183.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeZWrP4EoMBgOJuJnT0LmAAAAAU"]
[Tue Apr 21 00:39:19.555029 2026] [:error] [pid 11351:tid 11404] [client 122.180.183.101:7268] [client 122.180.183.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.180.183.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeZWtwN8Z1-vktaI_tNxaQAAAFE"]
[Tue Apr 21 00:39:30.891693 2026] [:error] [pid 11351:tid 11392] [client 122.180.183.101:26531] [client 122.180.183.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.180.183.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeZWwgN8Z1-vktaI_tNxiQAAAEU"]
[Tue Apr 21 00:39:41.838616 2026] [:error] [pid 11494:tid 11516] [client 122.180.183.101:11067] [client 122.180.183.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.180.183.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeZWzcgko5iFiE8YoyQjEAAAAZQ"]
[Tue Apr 21 00:39:52.726738 2026] [:error] [pid 42014:tid 42031] [client 122.180.183.101:17879] [client 122.180.183.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.180.183.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeZW2Mek-00-ZI0f1NqiagAAAQ8"]
[Tue Apr 21 00:57:07.589325 2026] [:error] [pid 11350:tid 11377] [client 172.223.25.8:61698] [client 172.223.25.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.223.25.8, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeZa4_4EoMBgOJuJnT0VUgAAABI"]
[Tue Apr 21 01:29:00.287118 2026] [autoindex:error] [pid 11351:tid 11391] [client 20.215.190.134:52031] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 01:29:02.751714 2026] [autoindex:error] [pid 11351:tid 11407] [client 20.215.190.134:52031] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/audio/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 01:29:11.530954 2026] [autoindex:error] [pid 11351:tid 11401] [client 20.215.190.134:52031] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfive/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 01:29:11.792871 2026] [autoindex:error] [pid 11351:tid 11407] [client 20.215.190.134:52031] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/buttons/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 01:29:13.144399 2026] [:error] [pid 11351:tid 11389] [client 20.215.190.134:52031] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhm.php"] [unique_id "aeZiaQN8Z1-vktaI_tOWcQAAAEI"]
[Tue Apr 21 01:29:13.682836 2026] [:error] [pid 11494:tid 11514] [client 20.215.190.134:29188] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhm.php"] [unique_id "aeZiacgko5iFiE8YoyQ3RwAAAZI"]
[Tue Apr 21 01:29:14.228606 2026] [:error] [pid 6928:tid 6939] [client 20.215.190.134:30577] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhm.php"] [unique_id "aeZiah3y7MHq1iB0qYrp1wAAAUk"]
[Tue Apr 21 01:29:14.759225 2026] [:error] [pid 11494:tid 11507] [client 20.215.190.134:42184] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhm.php"] [unique_id "aeZiasgko5iFiE8YoyQ3SQAAAYs"]
[Tue Apr 21 01:29:15.393160 2026] [:error] [pid 11352:tid 11437] [client 20.215.190.134:31226] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xozx.php"] [unique_id "aeZia2l10mhMSfJ7ir8BOQAAAJc"]
[Tue Apr 21 01:29:15.906012 2026] [:error] [pid 11441:tid 11453] [client 20.215.190.134:29222] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xozx.php"] [unique_id "aeZia8ixByFUvmh319DfWgAAAMo"]
[Tue Apr 21 01:29:16.542732 2026] [:error] [pid 11352:tid 11423] [client 20.215.190.134:33538] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xozx.php"] [unique_id "aeZibGl10mhMSfJ7ir8BOgAAAIk"]
[Tue Apr 21 01:29:17.075491 2026] [:error] [pid 11351:tid 11399] [client 20.215.190.134:39648] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xozx.php"] [unique_id "aeZibQN8Z1-vktaI_tOWgwAAAEw"]
[Tue Apr 21 01:29:17.626900 2026] [:error] [pid 11494:tid 11513] [client 20.215.190.134:31183] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "aeZibcgko5iFiE8YoyQ3SwAAAZE"]
[Tue Apr 21 01:29:18.153100 2026] [:error] [pid 11494:tid 11517] [client 20.215.190.134:33598] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "aeZibsgko5iFiE8YoyQ3TAAAAZU"]
[Tue Apr 21 01:29:18.675622 2026] [:error] [pid 11441:tid 11457] [client 20.215.190.134:28801] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "aeZibsixByFUvmh319DfXQAAAM4"]
[Tue Apr 21 01:29:19.188437 2026] [:error] [pid 11441:tid 11445] [client 20.215.190.134:28839] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "aeZib8ixByFUvmh319DfXgAAAMI"]
[Tue Apr 21 01:29:19.733868 2026] [:error] [pid 11352:tid 11429] [client 20.215.190.134:65376] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "aeZib2l10mhMSfJ7ir8BOwAAAI8"]
[Tue Apr 21 01:29:20.310203 2026] [:error] [pid 6928:tid 6942] [client 20.215.190.134:33631] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "aeZicB3y7MHq1iB0qYrp2AAAAUw"]
[Tue Apr 21 01:29:21.040346 2026] [:error] [pid 6928:tid 6935] [client 20.215.190.134:42176] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "aeZicR3y7MHq1iB0qYrp2QAAAUU"]
[Tue Apr 21 01:29:21.668454 2026] [:error] [pid 11351:tid 11395] [client 20.215.190.134:39618] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "aeZicQN8Z1-vktaI_tOWhAAAAEg"]
[Tue Apr 21 01:29:22.307092 2026] [:error] [pid 11441:tid 11455] [client 20.215.190.134:33601] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ref.php"] [unique_id "aeZicsixByFUvmh319DfZQAAAMw"]
[Tue Apr 21 01:29:22.849691 2026] [:error] [pid 11352:tid 11422] [client 20.215.190.134:42912] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ref.php"] [unique_id "aeZicml10mhMSfJ7ir8BPgAAAIg"]
[Tue Apr 21 01:29:23.387467 2026] [:error] [pid 11441:tid 11447] [client 20.215.190.134:31217] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ref.php"] [unique_id "aeZic8ixByFUvmh319DfZwAAAMQ"]
[Tue Apr 21 01:29:23.933507 2026] [:error] [pid 11441:tid 11444] [client 20.215.190.134:31185] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ref.php"] [unique_id "aeZic8ixByFUvmh319DfaAAAAME"]
[Tue Apr 21 01:29:24.609038 2026] [:error] [pid 11352:tid 11433] [client 20.215.190.134:5915] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xme.php"] [unique_id "aeZidGl10mhMSfJ7ir8BQgAAAJM"]
[Tue Apr 21 01:29:25.342300 2026] [:error] [pid 11350:tid 11359] [client 20.215.190.134:61786] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xme.php"] [unique_id "aeZidf4EoMBgOJuJnT0mIQAAAAA"]
[Tue Apr 21 01:29:26.031176 2026] [:error] [pid 11351:tid 11398] [client 20.215.190.134:61761] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xme.php"] [unique_id "aeZidgN8Z1-vktaI_tOWiQAAAEs"]
[Tue Apr 21 01:29:26.653853 2026] [:error] [pid 11351:tid 11387] [client 20.215.190.134:28840] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xme.php"] [unique_id "aeZidgN8Z1-vktaI_tOWiwAAAEA"]
[Tue Apr 21 01:29:27.450271 2026] [:error] [pid 11350:tid 11372] [client 20.215.190.134:33634] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aeZid_4EoMBgOJuJnT0mIwAAAA0"]
[Tue Apr 21 01:29:28.074704 2026] [:error] [pid 11350:tid 11375] [client 20.215.190.134:42926] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aeZieP4EoMBgOJuJnT0mJAAAABA"]
[Tue Apr 21 01:29:29.017372 2026] [:error] [pid 11441:tid 11449] [client 20.215.190.134:33578] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aeZiecixByFUvmh319DfcgAAAMY"]
[Tue Apr 21 01:29:29.624435 2026] [:error] [pid 11350:tid 11360] [client 20.215.190.134:31131] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aeZief4EoMBgOJuJnT0mJwAAAAE"]
[Tue Apr 21 01:29:30.202078 2026] [:error] [pid 11352:tid 11423] [client 20.215.190.134:35361] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktfow.php"] [unique_id "aeZieml10mhMSfJ7ir8BRgAAAIk"]
[Tue Apr 21 01:29:30.909629 2026] [:error] [pid 11350:tid 11381] [client 20.215.190.134:29185] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktfow.php"] [unique_id "aeZiev4EoMBgOJuJnT0mKAAAABY"]
[Tue Apr 21 01:29:31.620108 2026] [:error] [pid 11350:tid 11363] [client 20.215.190.134:42911] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktfow.php"] [unique_id "aeZie_4EoMBgOJuJnT0mKgAAAAQ"]
[Tue Apr 21 01:29:32.251275 2026] [:error] [pid 42014:tid 42032] [client 20.215.190.134:61782] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktfow.php"] [unique_id "aeZifMek-00-ZI0f1NqtnAAAARA"]
[Tue Apr 21 01:29:32.820791 2026] [:error] [pid 42014:tid 42019] [client 20.215.190.134:5913] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "aeZifMek-00-ZI0f1NqtnQAAAQM"]
[Tue Apr 21 01:29:33.416031 2026] [:error] [pid 11352:tid 11422] [client 20.215.190.134:33556] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "aeZifWl10mhMSfJ7ir8BRwAAAIg"]
[Tue Apr 21 01:29:34.073637 2026] [:error] [pid 11351:tid 11406] [client 20.215.190.134:5926] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "aeZifgN8Z1-vktaI_tOWlQAAAFM"]
[Tue Apr 21 01:29:34.839694 2026] [:error] [pid 11351:tid 11396] [client 20.215.190.134:5948] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "aeZifgN8Z1-vktaI_tOWlwAAAEk"]
[Tue Apr 21 01:29:35.362032 2026] [:error] [pid 11351:tid 11389] [client 20.215.190.134:61797] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xx.php"] [unique_id "aeZifwN8Z1-vktaI_tOWmAAAAEI"]
[Tue Apr 21 01:29:35.919797 2026] [:error] [pid 11350:tid 11381] [client 20.215.190.134:33630] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xx.php"] [unique_id "aeZif_4EoMBgOJuJnT0mNgAAABY"]
[Tue Apr 21 01:29:36.440841 2026] [:error] [pid 11441:tid 11450] [client 20.215.190.134:34855] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xx.php"] [unique_id "aeZigMixByFUvmh319DffgAAAMc"]
[Tue Apr 21 01:29:37.114859 2026] [:error] [pid 11352:tid 11417] [client 20.215.190.134:42925] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xx.php"] [unique_id "aeZigWl10mhMSfJ7ir8BSQAAAIM"]
[Tue Apr 21 01:29:37.676184 2026] [:error] [pid 11350:tid 11383] [client 20.215.190.134:44116] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmini.php"] [unique_id "aeZigf4EoMBgOJuJnT0mOQAAABg"]
[Tue Apr 21 01:29:38.286056 2026] [:error] [pid 11351:tid 11397] [client 20.215.190.134:61800] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmini.php"] [unique_id "aeZiggN8Z1-vktaI_tOWogAAAEo"]
[Tue Apr 21 01:29:38.812388 2026] [:error] [pid 11352:tid 11416] [client 20.215.190.134:35356] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmini.php"] [unique_id "aeZigml10mhMSfJ7ir8BSwAAAII"]
[Tue Apr 21 01:29:39.357304 2026] [:error] [pid 11494:tid 11517] [client 20.215.190.134:33616] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmini.php"] [unique_id "aeZig8gko5iFiE8YoyQ3VAAAAZU"]
[Tue Apr 21 01:29:40.055217 2026] [:error] [pid 11351:tid 11394] [client 20.215.190.134:31157] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2468.php"] [unique_id "aeZihAN8Z1-vktaI_tOWqQAAAEc"]
[Tue Apr 21 01:29:40.706719 2026] [:error] [pid 11351:tid 11398] [client 20.215.190.134:33648] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2468.php"] [unique_id "aeZihAN8Z1-vktaI_tOWrgAAAEs"]
[Tue Apr 21 01:29:41.268955 2026] [:error] [pid 11351:tid 11393] [client 20.215.190.134:5349] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2468.php"] [unique_id "aeZihQN8Z1-vktaI_tOWsQAAAEY"]
[Tue Apr 21 01:29:41.987793 2026] [:error] [pid 6928:tid 6951] [client 20.215.190.134:44118] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2468.php"] [unique_id "aeZihR3y7MHq1iB0qYrp7gAAAVU"]
[Tue Apr 21 01:29:42.691083 2026] [:error] [pid 11350:tid 11376] [client 20.215.190.134:5889] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeZihv4EoMBgOJuJnT0mPgAAABE"]
[Tue Apr 21 01:29:43.228479 2026] [:error] [pid 11351:tid 11399] [client 20.215.190.134:43351] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeZihwN8Z1-vktaI_tOWtgAAAEw"]
[Tue Apr 21 01:29:43.765351 2026] [:error] [pid 11351:tid 11397] [client 20.215.190.134:33611] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeZihwN8Z1-vktaI_tOWuQAAAEo"]
[Tue Apr 21 01:29:44.307638 2026] [:error] [pid 11352:tid 11434] [client 20.215.190.134:61769] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeZiiGl10mhMSfJ7ir8BTgAAAJQ"]
[Tue Apr 21 01:29:44.858602 2026] [:error] [pid 11350:tid 11372] [client 20.215.190.134:61796] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeZiiP4EoMBgOJuJnT0mQgAAAA0"]
[Tue Apr 21 01:29:45.389078 2026] [:error] [pid 11351:tid 11404] [client 20.215.190.134:42887] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeZiiQN8Z1-vktaI_tOWwAAAAFE"]
[Tue Apr 21 01:29:45.920800 2026] [:error] [pid 11441:tid 11467] [client 20.215.190.134:44098] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeZiicixByFUvmh319DfiAAAANg"]
[Tue Apr 21 01:29:46.436405 2026] [:error] [pid 11441:tid 11453] [client 20.215.190.134:61778] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeZiisixByFUvmh319DfiwAAAMo"]
[Tue Apr 21 01:29:46.951568 2026] [:error] [pid 11351:tid 11406] [client 20.215.190.134:44154] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amdin.php"] [unique_id "aeZiigN8Z1-vktaI_tOWxgAAAFM"]
[Tue Apr 21 01:29:47.525354 2026] [:error] [pid 11351:tid 11407] [client 20.215.190.134:31161] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amdin.php"] [unique_id "aeZiiwN8Z1-vktaI_tOWyAAAAFQ"]
[Tue Apr 21 01:29:48.057927 2026] [:error] [pid 11441:tid 11450] [client 20.215.190.134:44158] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amdin.php"] [unique_id "aeZijMixByFUvmh319DfjAAAAMc"]
[Tue Apr 21 01:29:48.576564 2026] [:error] [pid 11441:tid 11462] [client 20.215.190.134:35365] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amdin.php"] [unique_id "aeZijMixByFUvmh319DfjgAAANM"]
[Tue Apr 21 01:29:49.087775 2026] [:error] [pid 11351:tid 11407] [client 20.215.190.134:50289] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/huya.php"] [unique_id "aeZijQN8Z1-vktaI_tOW0wAAAFQ"]
[Tue Apr 21 01:29:49.645293 2026] [:error] [pid 11351:tid 11398] [client 20.215.190.134:38323] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/huya.php"] [unique_id "aeZijQN8Z1-vktaI_tOW1wAAAEs"]
[Tue Apr 21 01:29:50.174942 2026] [:error] [pid 11351:tid 11395] [client 20.215.190.134:43364] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/huya.php"] [unique_id "aeZijgN8Z1-vktaI_tOW3AAAAEg"]
[Tue Apr 21 01:29:50.768023 2026] [:error] [pid 11352:tid 11420] [client 20.215.190.134:5316] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/huya.php"] [unique_id "aeZijml10mhMSfJ7ir8BTwAAAIY"]
[Tue Apr 21 01:29:51.297109 2026] [:error] [pid 11350:tid 11364] [client 20.215.190.134:34843] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeZij_4EoMBgOJuJnT0mSQAAAAU"]
[Tue Apr 21 01:29:51.829525 2026] [:error] [pid 11351:tid 11395] [client 20.215.190.134:35426] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeZijwN8Z1-vktaI_tOW5QAAAEg"]
[Tue Apr 21 01:29:52.354515 2026] [:error] [pid 11351:tid 11392] [client 20.215.190.134:61771] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeZikAN8Z1-vktaI_tOW6QAAAEU"]
[Tue Apr 21 01:29:52.875272 2026] [:error] [pid 11351:tid 11411] [client 20.215.190.134:40992] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeZikAN8Z1-vktaI_tOW7gAAAFg"]
[Tue Apr 21 01:29:53.403355 2026] [:error] [pid 11351:tid 11395] [client 20.215.190.134:5494] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeZikQN8Z1-vktaI_tOW8AAAAEg"]
[Tue Apr 21 01:29:54.000471 2026] [:error] [pid 11351:tid 11407] [client 20.215.190.134:38284] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeZikQN8Z1-vktaI_tOW9QAAAFQ"]
[Tue Apr 21 01:29:54.531045 2026] [:error] [pid 11351:tid 11390] [client 20.215.190.134:35444] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeZikgN8Z1-vktaI_tOW-QAAAEM"]
[Tue Apr 21 01:29:55.064312 2026] [:error] [pid 11351:tid 11397] [client 20.215.190.134:38306] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeZikwN8Z1-vktaI_tOW_wAAAEo"]
[Tue Apr 21 01:29:55.590939 2026] [:error] [pid 11351:tid 11395] [client 20.215.190.134:44129] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeZikwN8Z1-vktaI_tOXAgAAAEg"]
[Tue Apr 21 01:29:56.104754 2026] [:error] [pid 11351:tid 11390] [client 20.215.190.134:42936] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeZilAN8Z1-vktaI_tOXBAAAAEM"]
[Tue Apr 21 01:29:56.626194 2026] [:error] [pid 11350:tid 11361] [client 20.215.190.134:5965] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeZilP4EoMBgOJuJnT0mTgAAAAI"]
[Tue Apr 21 01:29:57.138524 2026] [:error] [pid 11441:tid 11465] [client 20.215.190.134:38312] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeZilcixByFUvmh319DfkQAAANY"]
[Tue Apr 21 01:29:57.685495 2026] [:error] [pid 6928:tid 6939] [client 20.215.190.134:31206] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeZilR3y7MHq1iB0qYrp-gAAAUk"]
[Tue Apr 21 01:29:58.204726 2026] [:error] [pid 11350:tid 11370] [client 20.215.190.134:44108] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeZilv4EoMBgOJuJnT0mUwAAAAs"]
[Tue Apr 21 01:29:58.716811 2026] [:error] [pid 42014:tid 42026] [client 20.215.190.134:5967] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeZilsek-00-ZI0f1NqtowAAAQo"]
[Tue Apr 21 01:29:59.231906 2026] [:error] [pid 11350:tid 11362] [client 20.215.190.134:43391] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeZil_4EoMBgOJuJnT0mWQAAAAM"]
[Tue Apr 21 01:29:59.759049 2026] [:error] [pid 11352:tid 11431] [client 20.215.190.134:31206] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeZil2l10mhMSfJ7ir8BUQAAAJE"]
[Tue Apr 21 01:30:00.360472 2026] [:error] [pid 6928:tid 6949] [client 20.215.190.134:35398] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeZimB3y7MHq1iB0qYrp_AAAAVM"]
[Tue Apr 21 01:30:01.014299 2026] [:error] [pid 11441:tid 11458] [client 20.215.190.134:33663] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeZimcixByFUvmh319DflwAAAM8"]
[Tue Apr 21 01:30:01.553067 2026] [:error] [pid 11441:tid 11446] [client 20.215.190.134:35450] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeZimcixByFUvmh319DfmQAAAMM"]
[Tue Apr 21 01:30:02.118960 2026] [:error] [pid 6928:tid 6934] [client 20.215.190.134:5999] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeZimh3y7MHq1iB0qYrp_gAAAUQ"]
[Tue Apr 21 01:30:02.683151 2026] [:error] [pid 6928:tid 6932] [client 20.215.190.134:5450] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeZimh3y7MHq1iB0qYrqAAAAAUI"]
[Tue Apr 21 01:30:03.196698 2026] [:error] [pid 11350:tid 11381] [client 20.215.190.134:5455] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeZim_4EoMBgOJuJnT0mXgAAABY"]
[Tue Apr 21 01:30:03.725373 2026] [:error] [pid 6928:tid 6953] [client 20.215.190.134:47707] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeZimx3y7MHq1iB0qYrqAgAAAVc"]
[Tue Apr 21 01:30:04.258525 2026] [:error] [pid 6928:tid 6937] [client 20.215.190.134:38987] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeZinB3y7MHq1iB0qYrqBAAAAUc"]
[Tue Apr 21 01:30:04.805023 2026] [:error] [pid 6928:tid 6951] [client 20.215.190.134:5485] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeZinB3y7MHq1iB0qYrqBgAAAVU"]
[Tue Apr 21 01:30:05.358358 2026] [:error] [pid 6928:tid 6950] [client 20.215.190.134:47722] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeZinR3y7MHq1iB0qYrqCAAAAVQ"]
[Tue Apr 21 01:30:06.109178 2026] [:error] [pid 6928:tid 6940] [client 20.215.190.134:50259] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeZinh3y7MHq1iB0qYrqCgAAAUo"]
[Tue Apr 21 01:30:06.647201 2026] [:error] [pid 11351:tid 11389] [client 20.215.190.134:47726] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeZingN8Z1-vktaI_tOXCQAAAEI"]
[Tue Apr 21 01:30:07.302362 2026] [:error] [pid 11351:tid 11399] [client 20.215.190.134:42880] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeZinwN8Z1-vktaI_tOXCgAAAEw"]
[Tue Apr 21 01:30:07.857795 2026] [:error] [pid 11351:tid 11390] [client 20.215.190.134:6075] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeZinwN8Z1-vktaI_tOXDAAAAEM"]
[Tue Apr 21 01:30:08.386952 2026] [:error] [pid 11350:tid 11369] [client 20.215.190.134:35438] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeZioP4EoMBgOJuJnT0mYgAAAAo"]
[Tue Apr 21 01:30:08.928115 2026] [:error] [pid 11352:tid 11422] [client 20.215.190.134:34834] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeZioGl10mhMSfJ7ir8BVwAAAIg"]
[Tue Apr 21 01:30:09.598316 2026] [:error] [pid 42014:tid 42031] [client 20.215.190.134:39026] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeZiocek-00-ZI0f1NqtsAAAAQ8"]
[Tue Apr 21 01:30:10.244840 2026] [:error] [pid 6928:tid 6945] [client 20.215.190.134:50286] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeZioh3y7MHq1iB0qYrqEQAAAU8"]
[Tue Apr 21 01:30:10.788373 2026] [:error] [pid 11494:tid 11518] [client 20.215.190.134:38298] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeZiosgko5iFiE8YoyQ3bgAAAZY"]
[Tue Apr 21 01:30:11.298226 2026] [:error] [pid 6928:tid 6951] [client 20.215.190.134:53359] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeZiox3y7MHq1iB0qYrqEgAAAVU"]
[Tue Apr 21 01:30:11.836436 2026] [:error] [pid 6928:tid 6933] [client 20.215.190.134:39025] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeZiox3y7MHq1iB0qYrqFAAAAUM"]
[Tue Apr 21 01:30:16.063605 2026] [autoindex:error] [pid 11441:tid 11457] [client 20.215.190.134:5464] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 01:30:26.611974 2026] [:error] [pid 11441:tid 11461] [client 20.215.190.134:5464] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aeZissixByFUvmh319DfuAAAANI"]
[Tue Apr 21 01:30:27.175200 2026] [:error] [pid 11351:tid 11408] [client 20.215.190.134:6057] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aeZiswN8Z1-vktaI_tOXIAAAAFU"]
[Tue Apr 21 01:30:27.860622 2026] [:error] [pid 11350:tid 11377] [client 20.215.190.134:53331] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aeZis_4EoMBgOJuJnT0meAAAABI"]
[Tue Apr 21 01:30:28.597824 2026] [:error] [pid 11494:tid 11498] [client 20.215.190.134:6049] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aeZitMgko5iFiE8YoyQ3hAAAAYI"]
[Tue Apr 21 01:30:29.117672 2026] [:error] [pid 6928:tid 6952] [client 20.215.190.134:40973] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeZitR3y7MHq1iB0qYrqHgAAAVY"]
[Tue Apr 21 01:30:29.646784 2026] [:error] [pid 11494:tid 11511] [client 20.215.190.134:5954] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeZitcgko5iFiE8YoyQ3hgAAAY8"]
[Tue Apr 21 01:30:30.177938 2026] [:error] [pid 11494:tid 11519] [client 20.215.190.134:53341] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeZitsgko5iFiE8YoyQ3hwAAAZc"]
[Tue Apr 21 01:30:30.688042 2026] [:error] [pid 11352:tid 11425] [client 20.215.190.134:46439] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeZitml10mhMSfJ7ir8BbAAAAIs"]
[Tue Apr 21 01:30:31.291401 2026] [:error] [pid 11494:tid 11515] [client 20.215.190.134:5954] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeZit8gko5iFiE8YoyQ3igAAAZM"]
[Tue Apr 21 01:30:31.811539 2026] [:error] [pid 11351:tid 11407] [client 20.215.190.134:52646] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeZitwN8Z1-vktaI_tOXIwAAAFQ"]
[Tue Apr 21 01:30:32.368627 2026] [:error] [pid 11494:tid 11501] [client 20.215.190.134:6041] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeZiuMgko5iFiE8YoyQ3jwAAAYU"]
[Tue Apr 21 01:30:32.891523 2026] [:error] [pid 11350:tid 11363] [client 20.215.190.134:52666] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeZiuP4EoMBgOJuJnT0mhQAAAAQ"]
[Tue Apr 21 01:30:33.457500 2026] [:error] [pid 11351:tid 11396] [client 20.215.190.134:35876] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeZiuQN8Z1-vktaI_tOXJQAAAEk"]
[Tue Apr 21 01:30:34.012138 2026] [:error] [pid 11350:tid 11370] [client 20.215.190.134:47718] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeZiuv4EoMBgOJuJnT0miAAAAAs"]
[Tue Apr 21 01:30:34.529966 2026] [:error] [pid 11441:tid 11453] [client 20.215.190.134:6061] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeZiusixByFUvmh319DfvQAAAMo"]
[Tue Apr 21 01:30:35.068301 2026] [:error] [pid 11441:tid 11465] [client 20.215.190.134:46421] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/6.php"] [unique_id "aeZiu8ixByFUvmh319DfwAAAANY"]
[Tue Apr 21 01:30:35.581844 2026] [:error] [pid 11351:tid 11395] [client 20.215.190.134:30029] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeZiuwN8Z1-vktaI_tOXLAAAAEg"]
[Tue Apr 21 01:30:36.109630 2026] [:error] [pid 11441:tid 11458] [client 20.215.190.134:52719] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeZivMixByFUvmh319DfwwAAAM8"]
[Tue Apr 21 01:30:36.632029 2026] [:error] [pid 11494:tid 11520] [client 20.215.190.134:38998] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeZivMgko5iFiE8YoyQ3lAAAAZg"]
[Tue Apr 21 01:30:37.175090 2026] [:error] [pid 11494:tid 11496] [client 20.215.190.134:6029] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/9.php"] [unique_id "aeZivcgko5iFiE8YoyQ3lQAAAYA"]
[Tue Apr 21 01:30:37.687370 2026] [:error] [pid 11350:tid 11379] [client 20.215.190.134:52679] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeZivf4EoMBgOJuJnT0mjwAAABQ"]
[Tue Apr 21 01:30:38.205613 2026] [:error] [pid 11352:tid 11427] [client 20.215.190.134:47715] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeZivml10mhMSfJ7ir8BcgAAAI0"]
[Tue Apr 21 01:30:38.735312 2026] [:error] [pid 6928:tid 6946] [client 20.215.190.134:30037] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeZivh3y7MHq1iB0qYrqIgAAAVA"]
[Tue Apr 21 01:30:39.246839 2026] [:error] [pid 11494:tid 11503] [client 20.215.190.134:52630] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeZiv8gko5iFiE8YoyQ3mQAAAYc"]
[Tue Apr 21 01:30:39.770075 2026] [:error] [pid 11441:tid 11448] [client 20.215.190.134:53371] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeZiv8ixByFUvmh319DfyQAAAMU"]
[Tue Apr 21 01:30:40.332992 2026] [:error] [pid 11441:tid 11453] [client 20.215.190.134:30034] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeZiwMixByFUvmh319DfywAAAMo"]
[Tue Apr 21 01:30:40.869169 2026] [:error] [pid 11441:tid 11451] [client 20.215.190.134:45083] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeZiwMixByFUvmh319DfzgAAAMg"]
[Tue Apr 21 01:30:41.457562 2026] [:error] [pid 11350:tid 11378] [client 20.215.190.134:6062] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeZiwf4EoMBgOJuJnT0mkgAAABM"]
[Tue Apr 21 01:30:42.057267 2026] [:error] [pid 11351:tid 11400] [client 20.215.190.134:53336] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeZiwgN8Z1-vktaI_tOXNQAAAE0"]
[Tue Apr 21 01:30:42.617854 2026] [:error] [pid 11352:tid 11436] [client 20.215.190.134:47742] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeZiwml10mhMSfJ7ir8BdQAAAJY"]
[Tue Apr 21 01:30:43.200079 2026] [:error] [pid 11351:tid 11407] [client 20.215.190.134:43339] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeZiwwN8Z1-vktaI_tOXOQAAAFQ"]
[Tue Apr 21 01:30:43.777876 2026] [:error] [pid 11494:tid 11516] [client 20.215.190.134:52618] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeZiw8gko5iFiE8YoyQ3oAAAAZQ"]
[Tue Apr 21 01:30:44.329392 2026] [:error] [pid 11351:tid 11389] [client 20.215.190.134:35865] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeZixAN8Z1-vktaI_tOXPAAAAEI"]
[Tue Apr 21 01:30:44.865126 2026] [:error] [pid 11441:tid 11443] [client 20.215.190.134:52695] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeZixMixByFUvmh319Df2QAAAMA"]
[Tue Apr 21 01:30:45.384622 2026] [:error] [pid 11351:tid 11399] [client 20.215.190.134:39003] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeZixQN8Z1-vktaI_tOXQAAAAEw"]
[Tue Apr 21 01:30:45.921494 2026] [:error] [pid 11350:tid 11359] [client 20.215.190.134:50250] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeZixf4EoMBgOJuJnT0mlQAAAAA"]
[Tue Apr 21 01:30:46.553006 2026] [:error] [pid 11351:tid 11402] [client 20.215.190.134:46411] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeZixgN8Z1-vktaI_tOXQQAAAE8"]
[Tue Apr 21 01:30:47.098253 2026] [:error] [pid 11351:tid 11407] [client 20.215.190.134:35844] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeZixwN8Z1-vktaI_tOXQgAAAFQ"]
[Tue Apr 21 01:30:47.726144 2026] [:error] [pid 42014:tid 42040] [client 20.215.190.134:35874] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeZix8ek-00-ZI0f1NqtyQAAARg"]
[Tue Apr 21 01:30:48.384024 2026] [:error] [pid 42014:tid 42032] [client 20.215.190.134:30047] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeZiyMek-00-ZI0f1NqtygAAARA"]
[Tue Apr 21 01:30:48.901738 2026] [:error] [pid 11351:tid 11397] [client 20.215.190.134:43349] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeZiyAN8Z1-vktaI_tOXSgAAAEo"]
[Tue Apr 21 01:30:49.475417 2026] [:error] [pid 6928:tid 6947] [client 20.215.190.134:31828] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeZiyR3y7MHq1iB0qYrqMgAAAVE"]
[Tue Apr 21 01:30:49.998686 2026] [:error] [pid 6928:tid 6950] [client 20.215.190.134:52644] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeZiyR3y7MHq1iB0qYrqMwAAAVQ"]
[Tue Apr 21 01:30:50.532957 2026] [:error] [pid 11350:tid 11361] [client 20.215.190.134:6003] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeZiyv4EoMBgOJuJnT0mlwAAAAI"]
[Tue Apr 21 01:30:51.048496 2026] [:error] [pid 11441:tid 11444] [client 20.215.190.134:41031] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeZiy8ixByFUvmh319Df4AAAAME"]
[Tue Apr 21 01:30:51.595385 2026] [:error] [pid 11350:tid 11368] [client 20.215.190.134:35840] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeZiy_4EoMBgOJuJnT0mmQAAAAk"]
[Tue Apr 21 01:30:52.147068 2026] [:error] [pid 11350:tid 11365] [client 20.215.190.134:45058] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeZizP4EoMBgOJuJnT0mnQAAAAY"]
[Tue Apr 21 01:30:52.744887 2026] [:error] [pid 11351:tid 11402] [client 20.215.190.134:30019] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeZizAN8Z1-vktaI_tOXUgAAAE8"]
[Tue Apr 21 01:30:53.286799 2026] [:error] [pid 11441:tid 11455] [client 20.215.190.134:31853] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeZizcixByFUvmh319Df5gAAAMw"]
[Tue Apr 21 01:30:53.798670 2026] [:error] [pid 6928:tid 6940] [client 20.215.190.134:52625] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeZizR3y7MHq1iB0qYrqNgAAAUo"]
[Tue Apr 21 01:30:54.433976 2026] [:error] [pid 11350:tid 11378] [client 20.215.190.134:31820] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeZizv4EoMBgOJuJnT0mnwAAABM"]
[Tue Apr 21 01:30:54.995211 2026] [:error] [pid 11350:tid 11374] [client 20.215.190.134:46402] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeZizv4EoMBgOJuJnT0moQAAAA8"]
[Tue Apr 21 01:30:55.541873 2026] [:error] [pid 11351:tid 11408] [client 20.215.190.134:35892] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeZizwN8Z1-vktaI_tOXWAAAAFU"]
[Tue Apr 21 01:30:56.061783 2026] [:error] [pid 6928:tid 6933] [client 20.215.190.134:52715] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeZi0B3y7MHq1iB0qYrqNwAAAUM"]
[Tue Apr 21 01:30:56.595307 2026] [:error] [pid 11494:tid 11503] [client 20.215.190.134:50290] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeZi0Mgko5iFiE8YoyQ3qQAAAYc"]
[Tue Apr 21 01:30:57.108127 2026] [:error] [pid 6928:tid 6951] [client 20.215.190.134:52667] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeZi0R3y7MHq1iB0qYrqOAAAAVU"]
[Tue Apr 21 01:30:57.717219 2026] [:error] [pid 11350:tid 11365] [client 20.215.190.134:47685] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aeZi0f4EoMBgOJuJnT0mrAAAAAY"]
[Tue Apr 21 01:30:58.244884 2026] [:error] [pid 11494:tid 11497] [client 20.215.190.134:31843] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aeZi0sgko5iFiE8YoyQ3tQAAAYE"]
[Tue Apr 21 01:30:58.760397 2026] [:error] [pid 11351:tid 11394] [client 20.215.190.134:41036] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aeZi0gN8Z1-vktaI_tOXhgAAAEc"]
[Tue Apr 21 01:30:59.294057 2026] [:error] [pid 42014:tid 42017] [client 20.215.190.134:52691] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aeZi08ek-00-ZI0f1NqtzwAAAQE"]
[Tue Apr 21 01:30:59.835183 2026] [:error] [pid 6928:tid 6931] [client 20.215.190.134:46459] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aeZi0x3y7MHq1iB0qYrqRgAAAUE"]
[Tue Apr 21 01:31:00.379702 2026] [:error] [pid 11352:tid 11433] [client 20.215.190.134:54574] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aeZi1Gl10mhMSfJ7ir8BewAAAJM"]
[Tue Apr 21 01:31:00.939807 2026] [:error] [pid 11441:tid 11466] [client 20.215.190.134:52624] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aeZi1MixByFUvmh319Df6wAAANc"]
[Tue Apr 21 01:31:01.485499 2026] [:error] [pid 6928:tid 6947] [client 20.215.190.134:38306] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aeZi1R3y7MHq1iB0qYrqRwAAAVE"]
[Tue Apr 21 01:31:02.031518 2026] [:error] [pid 11351:tid 11391] [client 20.215.190.134:52641] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeZi1gN8Z1-vktaI_tOXjgAAAEQ"]
[Tue Apr 21 01:31:02.624609 2026] [:error] [pid 6928:tid 6938] [client 20.215.190.134:45096] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeZi1h3y7MHq1iB0qYrqSAAAAUg"]
[Tue Apr 21 01:31:03.147202 2026] [:error] [pid 11494:tid 11498] [client 20.215.190.134:45082] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeZi18gko5iFiE8YoyQ3uAAAAYI"]
[Tue Apr 21 01:31:03.675581 2026] [:error] [pid 11350:tid 11377] [client 20.215.190.134:52616] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeZi1_4EoMBgOJuJnT0muwAAABI"]
[Tue Apr 21 01:31:04.208717 2026] [:error] [pid 11494:tid 11496] [client 20.215.190.134:48176] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aeZi2Mgko5iFiE8YoyQ3uQAAAYA"]
[Tue Apr 21 01:31:04.758339 2026] [:error] [pid 11351:tid 11391] [client 20.215.190.134:52702] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aeZi2AN8Z1-vktaI_tOXmQAAAEQ"]
[Tue Apr 21 01:31:05.272368 2026] [:error] [pid 11351:tid 11410] [client 20.215.190.134:41062] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aeZi2QN8Z1-vktaI_tOXmwAAAFc"]
[Tue Apr 21 01:31:05.789827 2026] [:error] [pid 11351:tid 11389] [client 20.215.190.134:30067] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aeZi2QN8Z1-vktaI_tOXngAAAEI"]
[Tue Apr 21 01:31:06.328922 2026] [:error] [pid 11351:tid 11405] [client 20.215.190.134:54567] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aeZi2gN8Z1-vktaI_tOXnwAAAFI"]
[Tue Apr 21 01:31:06.926717 2026] [:error] [pid 11351:tid 11390] [client 20.215.190.134:61115] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aeZi2gN8Z1-vktaI_tOXoAAAAEM"]
[Tue Apr 21 01:31:07.459843 2026] [:error] [pid 11351:tid 11399] [client 20.215.190.134:35849] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aeZi2wN8Z1-vktaI_tOXpQAAAEw"]
[Tue Apr 21 01:31:07.978158 2026] [:error] [pid 11351:tid 11389] [client 20.215.190.134:30021] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aeZi2wN8Z1-vktaI_tOXqQAAAEI"]
[Tue Apr 21 01:31:08.600697 2026] [:error] [pid 11351:tid 11395] [client 20.215.190.134:54534] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeZi3AN8Z1-vktaI_tOXqwAAAEg"]
[Tue Apr 21 01:31:09.117727 2026] [:error] [pid 11351:tid 11401] [client 20.215.190.134:45112] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeZi3QN8Z1-vktaI_tOXrAAAAE4"]
[Tue Apr 21 01:31:09.656678 2026] [:error] [pid 11351:tid 11410] [client 20.215.190.134:35853] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeZi3QN8Z1-vktaI_tOXrwAAAFc"]
[Tue Apr 21 01:31:10.253652 2026] [:error] [pid 11350:tid 11380] [client 20.215.190.134:52729] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeZi3v4EoMBgOJuJnT0mvAAAABU"]
[Tue Apr 21 01:31:10.784334 2026] [:error] [pid 11351:tid 11406] [client 20.215.190.134:35886] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeZi3gN8Z1-vktaI_tOXswAAAFM"]
[Tue Apr 21 01:31:11.323148 2026] [:error] [pid 11441:tid 11448] [client 20.215.190.134:41032] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeZi38ixByFUvmh319Df7gAAAMU"]
[Tue Apr 21 01:31:11.857545 2026] [:error] [pid 11350:tid 11371] [client 20.215.190.134:54536] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeZi3_4EoMBgOJuJnT0mwQAAAAw"]
[Tue Apr 21 01:31:12.433794 2026] [:error] [pid 11350:tid 11363] [client 20.215.190.134:35902] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeZi4P4EoMBgOJuJnT0mwwAAAAQ"]
[Tue Apr 21 01:31:12.981198 2026] [:error] [pid 6928:tid 6933] [client 20.215.190.134:30062] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aeZi4B3y7MHq1iB0qYrqSwAAAUM"]
[Tue Apr 21 01:31:13.576124 2026] [:error] [pid 11441:tid 11455] [client 20.215.190.134:41063] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aeZi4cixByFUvmh319Df8gAAAMw"]
[Tue Apr 21 01:31:14.149022 2026] [:error] [pid 11494:tid 11505] [client 20.215.190.134:6019] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aeZi4sgko5iFiE8YoyQ3vAAAAYk"]
[Tue Apr 21 01:31:14.706900 2026] [:error] [pid 6928:tid 6941] [client 20.215.190.134:30025] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aeZi4h3y7MHq1iB0qYrqTgAAAUs"]
[Tue Apr 21 01:31:15.261906 2026] [:error] [pid 6928:tid 6949] [client 20.215.190.134:52672] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aeZi4x3y7MHq1iB0qYrqTwAAAVM"]
[Tue Apr 21 01:31:15.817033 2026] [:error] [pid 42014:tid 42027] [client 20.215.190.134:53366] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aeZi48ek-00-ZI0f1Nqt1wAAAQs"]
[Tue Apr 21 01:31:16.330616 2026] [:error] [pid 6928:tid 6942] [client 20.215.190.134:30071] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aeZi5B3y7MHq1iB0qYrqUQAAAUw"]
[Tue Apr 21 01:31:16.863442 2026] [:error] [pid 11494:tid 11501] [client 20.215.190.134:41028] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aeZi5Mgko5iFiE8YoyQ3wAAAAYU"]
[Tue Apr 21 01:31:17.435776 2026] [:error] [pid 11441:tid 11464] [client 20.215.190.134:63004] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeZi5cixByFUvmh319Df-wAAANU"]
[Tue Apr 21 01:31:17.977865 2026] [:error] [pid 11351:tid 11392] [client 20.215.190.134:63027] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeZi5QN8Z1-vktaI_tOXvQAAAEU"]
[Tue Apr 21 01:31:18.541210 2026] [:error] [pid 11441:tid 11448] [client 20.215.190.134:61075] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeZi5sixByFUvmh319DgAwAAAMU"]
[Tue Apr 21 01:31:19.063558 2026] [:error] [pid 11351:tid 11398] [client 20.215.190.134:35878] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeZi5wN8Z1-vktaI_tOXwwAAAEs"]
[Tue Apr 21 01:31:19.629559 2026] [:error] [pid 6928:tid 6953] [client 20.215.190.134:41055] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeZi5x3y7MHq1iB0qYrqXwAAAVc"]
[Tue Apr 21 01:31:20.157359 2026] [:error] [pid 11351:tid 11387] [client 20.215.190.134:52722] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeZi6AN8Z1-vktaI_tOXxgAAAEA"]
[Tue Apr 21 01:31:20.698018 2026] [:error] [pid 11351:tid 11390] [client 20.215.190.134:52701] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeZi6AN8Z1-vktaI_tOXxwAAAEM"]
[Tue Apr 21 01:31:21.235813 2026] [:error] [pid 11352:tid 11433] [client 20.215.190.134:41080] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aeZi6Wl10mhMSfJ7ir8BhgAAAJM"]
[Tue Apr 21 01:31:22.014404 2026] [:error] [pid 11350:tid 11361] [client 20.215.190.134:30022] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeZi6v4EoMBgOJuJnT0m0AAAAAI"]
[Tue Apr 21 01:31:22.715081 2026] [:error] [pid 42014:tid 42017] [client 20.215.190.134:52626] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeZi6sek-00-ZI0f1Nqt2AAAAQE"]
[Tue Apr 21 01:31:23.365484 2026] [:error] [pid 11351:tid 11388] [client 20.215.190.134:32441] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeZi6wN8Z1-vktaI_tOX0wAAAEE"]
[Tue Apr 21 01:31:23.925753 2026] [:error] [pid 11351:tid 11395] [client 20.215.190.134:32414] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aeZi6wN8Z1-vktaI_tOX1wAAAEg"]
[Tue Apr 21 01:31:24.620665 2026] [:error] [pid 6928:tid 6946] [client 20.215.190.134:63014] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aeZi7B3y7MHq1iB0qYrqaAAAAVA"]
[Tue Apr 21 01:31:42.414388 2026] [:error] [pid 11351:tid 11396] [client 20.215.190.134:42992] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeZi_gN8Z1-vktaI_tOYGwAAAEk"]
[Tue Apr 21 01:31:44.038962 2026] [:error] [pid 42014:tid 42040] [client 20.215.190.134:37034] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeZjAMek-00-ZI0f1Nqt5gAAARg"]
[Tue Apr 21 01:31:44.981845 2026] [:error] [pid 11494:tid 11508] [client 20.215.190.134:63575] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeZjAMgko5iFiE8YoyQ36wAAAYw"]
[Tue Apr 21 01:31:45.867338 2026] [:error] [pid 11350:tid 11371] [client 20.215.190.134:60494] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeZjAf4EoMBgOJuJnT0m7QAAAAw"]
[Tue Apr 21 01:31:46.863361 2026] [:error] [pid 11494:tid 11497] [client 20.215.190.134:31768] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeZjAsgko5iFiE8YoyQ38QAAAYE"]
[Tue Apr 21 01:31:48.165764 2026] [:error] [pid 11441:tid 11467] [client 20.215.190.134:34177] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeZjBMixByFUvmh319DgLAAAANg"]
[Tue Apr 21 01:31:49.529444 2026] [:error] [pid 11351:tid 11394] [client 20.215.190.134:63606] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeZjBQN8Z1-vktaI_tOYIAAAAEc"]
[Tue Apr 21 01:31:51.979586 2026] [:error] [pid 11494:tid 11517] [client 20.215.190.134:5133] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeZjB8gko5iFiE8YoyQ3_gAAAZU"]
[Tue Apr 21 01:31:53.746293 2026] [:error] [pid 11350:tid 11370] [client 20.215.190.134:30006] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeZjCf4EoMBgOJuJnT0m9gAAAAs"]
[Tue Apr 21 01:31:54.369618 2026] [:error] [pid 11350:tid 11373] [client 20.215.190.134:60451] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeZjCv4EoMBgOJuJnT0m-QAAAA4"]
[Tue Apr 21 01:31:58.287864 2026] [:error] [pid 11350:tid 11373] [client 20.215.190.134:59146] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeZjDv4EoMBgOJuJnT0nCwAAAA4"]
[Tue Apr 21 01:31:59.624114 2026] [:error] [pid 11350:tid 11368] [client 20.215.190.134:62227] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeZjD_4EoMBgOJuJnT0nGQAAAAk"]
[Tue Apr 21 01:32:00.643495 2026] [:error] [pid 11350:tid 11365] [client 20.215.190.134:53986] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjEP4EoMBgOJuJnT0nGwAAAAY"]
[Tue Apr 21 01:32:03.630938 2026] [:error] [pid 11350:tid 11375] [client 20.215.190.134:30500] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjE_4EoMBgOJuJnT0nJgAAABA"]
[Tue Apr 21 01:32:05.112291 2026] [:error] [pid 11350:tid 11365] [client 20.215.190.134:41718] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjFf4EoMBgOJuJnT0nMQAAAAY"]
[Tue Apr 21 01:32:06.177083 2026] [:error] [pid 11350:tid 11382] [client 20.215.190.134:46975] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjFv4EoMBgOJuJnT0nOgAAABc"]
[Tue Apr 21 01:32:07.136644 2026] [:error] [pid 6928:tid 6948] [client 20.215.190.134:57005] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aeZjFx3y7MHq1iB0qYrqmgAAAVI"]
[Tue Apr 21 01:32:08.074048 2026] [:error] [pid 11352:tid 11420] [client 20.215.190.134:41688] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aeZjGGl10mhMSfJ7ir8BngAAAIY"]
[Tue Apr 21 01:32:09.612826 2026] [:error] [pid 11351:tid 11399] [client 20.215.190.134:59240] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aeZjGQN8Z1-vktaI_tOYNQAAAEw"]
[Tue Apr 21 01:32:11.485213 2026] [:error] [pid 42014:tid 42021] [client 20.215.190.134:46911] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aeZjG8ek-00-ZI0f1NquBgAAAQU"]
[Tue Apr 21 01:32:13.137535 2026] [:error] [pid 6928:tid 6951] [client 20.215.190.134:46338] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aeZjHR3y7MHq1iB0qYrqqwAAAVU"]
[Tue Apr 21 01:32:13.924087 2026] [:error] [pid 11351:tid 11399] [client 20.215.190.134:53305] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aeZjHQN8Z1-vktaI_tOYSAAAAEw"]
[Tue Apr 21 01:32:14.876617 2026] [:error] [pid 11350:tid 11363] [client 20.215.190.134:37670] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aeZjHv4EoMBgOJuJnT0nXQAAAAQ"]
[Tue Apr 21 01:32:16.312762 2026] [:error] [pid 11351:tid 11395] [client 20.215.190.134:53924] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aeZjIAN8Z1-vktaI_tOYTgAAAEg"]
[Tue Apr 21 01:32:17.315240 2026] [:error] [pid 11351:tid 11399] [client 20.215.190.134:5522] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeZjIQN8Z1-vktaI_tOYUgAAAEw"]
[Tue Apr 21 01:32:20.071767 2026] [:error] [pid 42014:tid 42034] [client 20.215.190.134:42160] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeZjJMek-00-ZI0f1NquDgAAARI"]
[Tue Apr 21 01:32:21.148065 2026] [:error] [pid 6928:tid 6940] [client 20.215.190.134:5543] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeZjJR3y7MHq1iB0qYrquQAAAUo"]
[Tue Apr 21 01:32:21.978683 2026] [:error] [pid 11494:tid 11507] [client 20.215.190.134:55098] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeZjJcgko5iFiE8YoyQ4CQAAAYs"]
[Tue Apr 21 01:32:23.161891 2026] [:error] [pid 11350:tid 11381] [client 20.215.190.134:42150] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeZjJ_4EoMBgOJuJnT0ndgAAABY"]
[Tue Apr 21 01:32:27.275730 2026] [:error] [pid 6928:tid 6932] [client 20.215.190.134:65342] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeZjKx3y7MHq1iB0qYrqyQAAAUI"]
[Tue Apr 21 01:32:29.569985 2026] [:error] [pid 11351:tid 11395] [client 20.215.190.134:56447] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeZjLQN8Z1-vktaI_tOYYwAAAEg"]
[Tue Apr 21 01:32:30.366963 2026] [:error] [pid 11494:tid 11505] [client 20.215.190.134:55048] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeZjLsgko5iFiE8YoyQ4EwAAAYk"]
[Tue Apr 21 01:32:31.211040 2026] [:error] [pid 11441:tid 11459] [client 20.215.190.134:43305] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeZjL8ixByFUvmh319DgUQAAANA"]
[Tue Apr 21 01:32:32.241378 2026] [:error] [pid 11351:tid 11387] [client 20.215.190.134:38388] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeZjMAN8Z1-vktaI_tOYcAAAAEA"]
[Tue Apr 21 01:32:33.554731 2026] [:error] [pid 11494:tid 11516] [client 20.215.190.134:44596] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeZjMcgko5iFiE8YoyQ4FAAAAZQ"]
[Tue Apr 21 01:32:34.389618 2026] [:error] [pid 11351:tid 11400] [client 20.215.190.134:44552] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aeZjMgN8Z1-vktaI_tOYdAAAAE0"]
[Tue Apr 21 01:32:35.659587 2026] [:error] [pid 11352:tid 11418] [client 20.215.190.134:53298] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjM2l10mhMSfJ7ir8BwQAAAIQ"]
[Tue Apr 21 01:32:37.555378 2026] [:error] [pid 11350:tid 11368] [client 20.215.190.134:57010] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjNf4EoMBgOJuJnT0noAAAAAk"]
[Tue Apr 21 01:32:38.240793 2026] [:error] [pid 11441:tid 11451] [client 20.215.190.134:62221] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjNsixByFUvmh319DgVAAAAMg"]
[Tue Apr 21 01:32:40.134531 2026] [:error] [pid 11350:tid 11360] [client 20.215.190.134:34215] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjOP4EoMBgOJuJnT0ntQAAAAE"]
[Tue Apr 21 01:32:42.477835 2026] [:error] [pid 11350:tid 11359] [client 20.215.190.134:59870] [client 20.215.190.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aeZjOv4EoMBgOJuJnT0nzgAAAAA"]
[Tue Apr 21 01:32:47.002408 2026] [autoindex:error] [pid 11351:tid 11394] [client 20.215.190.134:5203] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 01:32:58.571557 2026] [:error] [pid 11351:tid 11401] [client 20.215.190.134:5203] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeZjSgN8Z1-vktaI_tOYyAAAAE4"]
[Tue Apr 21 01:32:59.148100 2026] [:error] [pid 11350:tid 11361] [client 20.215.190.134:62253] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeZjS_4EoMBgOJuJnT0oBQAAAAI"]
[Tue Apr 21 01:32:59.680053 2026] [:error] [pid 11494:tid 11503] [client 20.215.190.134:53992] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeZjS8gko5iFiE8YoyQ4YAAAAYc"]
[Tue Apr 21 01:33:00.225948 2026] [:error] [pid 11350:tid 11375] [client 20.215.190.134:63554] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeZjTP4EoMBgOJuJnT0oCAAAABA"]
[Tue Apr 21 01:33:00.902641 2026] [:error] [pid 11350:tid 11363] [client 20.215.190.134:51431] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeZjTP4EoMBgOJuJnT0oCgAAAAQ"]
[Tue Apr 21 01:33:01.440557 2026] [:error] [pid 11352:tid 11427] [client 20.215.190.134:59154] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeZjTWl10mhMSfJ7ir8BywAAAI0"]
[Tue Apr 21 01:33:02.144486 2026] [:error] [pid 11350:tid 11381] [client 20.215.190.134:5231] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeZjTv4EoMBgOJuJnT0oEAAAABY"]
[Tue Apr 21 01:33:02.786975 2026] [:error] [pid 11350:tid 11367] [client 20.215.190.134:34208] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeZjTv4EoMBgOJuJnT0oEwAAAAg"]
[Tue Apr 21 01:33:03.468860 2026] [:error] [pid 11350:tid 11361] [client 20.215.190.134:59187] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeZjT_4EoMBgOJuJnT0oFQAAAAI"]
[Tue Apr 21 01:33:04.024826 2026] [:error] [pid 11441:tid 11467] [client 20.215.190.134:51432] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeZjUMixByFUvmh319DgcQAAANg"]
[Tue Apr 21 01:33:04.837638 2026] [:error] [pid 11441:tid 11451] [client 20.215.190.134:53956] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeZjUMixByFUvmh319DgdwAAAMg"]
[Tue Apr 21 01:33:05.535118 2026] [:error] [pid 11350:tid 11376] [client 20.215.190.134:5245] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeZjUf4EoMBgOJuJnT0oHwAAABE"]
[Tue Apr 21 01:33:06.129105 2026] [:error] [pid 11441:tid 11448] [client 20.215.190.134:5210] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeZjUsixByFUvmh319DgeQAAAMU"]
[Tue Apr 21 01:33:06.656600 2026] [:error] [pid 11441:tid 11456] [client 20.215.190.134:5217] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeZjUsixByFUvmh319DgegAAAM0"]
[Tue Apr 21 01:33:07.287913 2026] [:error] [pid 6928:tid 6954] [client 20.215.190.134:34180] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeZjUx3y7MHq1iB0qYrrEgAAAVg"]
[Tue Apr 21 01:33:07.805447 2026] [:error] [pid 11494:tid 11511] [client 20.215.190.134:5205] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeZjU8gko5iFiE8YoyQ4agAAAY8"]
[Tue Apr 21 01:33:08.326524 2026] [:error] [pid 11351:tid 11401] [client 20.215.190.134:63599] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeZjVAN8Z1-vktaI_tOY1QAAAE4"]
[Tue Apr 21 01:33:08.874741 2026] [:error] [pid 11441:tid 11465] [client 20.215.190.134:62220] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeZjVMixByFUvmh319DgfAAAANY"]
[Tue Apr 21 01:33:09.387711 2026] [:error] [pid 11351:tid 11388] [client 20.215.190.134:5131] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeZjVQN8Z1-vktaI_tOY3AAAAEE"]
[Tue Apr 21 01:33:09.931923 2026] [:error] [pid 11351:tid 11396] [client 20.215.190.134:63605] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeZjVQN8Z1-vktaI_tOY4QAAAEk"]
[Tue Apr 21 01:33:10.489313 2026] [:error] [pid 11351:tid 11397] [client 20.215.190.134:59861] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aeZjVgN8Z1-vktaI_tOY5AAAAEo"]
[Tue Apr 21 01:33:11.044541 2026] [:error] [pid 11350:tid 11381] [client 20.215.190.134:5247] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aeZjV_4EoMBgOJuJnT0oLQAAABY"]
[Tue Apr 21 01:33:11.600815 2026] [:error] [pid 11494:tid 11498] [client 20.215.190.134:63562] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aeZjV8gko5iFiE8YoyQ4dAAAAYI"]
[Tue Apr 21 01:33:12.290273 2026] [:error] [pid 6928:tid 6933] [client 20.215.190.134:62227] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aeZjWB3y7MHq1iB0qYrrGwAAAUM"]
[Tue Apr 21 01:33:12.894081 2026] [:error] [pid 11494:tid 11496] [client 20.215.190.134:5224] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjWMgko5iFiE8YoyQ4hAAAAYA"]
[Tue Apr 21 01:33:13.470858 2026] [:error] [pid 6928:tid 6947] [client 20.215.190.134:41726] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjWR3y7MHq1iB0qYrrIgAAAVE"]
[Tue Apr 21 01:33:14.102454 2026] [:error] [pid 11351:tid 11406] [client 20.215.190.134:53997] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjWgN8Z1-vktaI_tOY8AAAAFM"]
[Tue Apr 21 01:33:14.627973 2026] [:error] [pid 11351:tid 11394] [client 20.215.190.134:5181] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjWgN8Z1-vktaI_tOY8wAAAEc"]
[Tue Apr 21 01:33:15.154588 2026] [:error] [pid 11494:tid 11516] [client 20.215.190.134:5216] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "aeZjW8gko5iFiE8YoyQ4nAAAAZQ"]
[Tue Apr 21 01:33:16.024825 2026] [:error] [pid 11352:tid 11430] [client 20.215.190.134:54014] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "aeZjXGl10mhMSfJ7ir8B3gAAAJA"]
[Tue Apr 21 01:33:17.167152 2026] [:error] [pid 11441:tid 11466] [client 20.215.190.134:60450] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "aeZjXcixByFUvmh319DgiQAAANc"]
[Tue Apr 21 01:33:17.858299 2026] [:error] [pid 6928:tid 6940] [client 20.215.190.134:60457] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "aeZjXR3y7MHq1iB0qYrrKAAAAUo"]
[Tue Apr 21 01:33:18.501594 2026] [:error] [pid 6928:tid 6951] [client 20.215.190.134:59874] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "aeZjXh3y7MHq1iB0qYrrKwAAAVU"]
[Tue Apr 21 01:33:19.736188 2026] [:error] [pid 42014:tid 42027] [client 20.215.190.134:62208] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "aeZjX8ek-00-ZI0f1NquNwAAAQs"]
[Tue Apr 21 01:33:20.386533 2026] [:error] [pid 6928:tid 6954] [client 20.215.190.134:59901] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "aeZjYB3y7MHq1iB0qYrrMwAAAVg"]
[Tue Apr 21 01:33:20.965368 2026] [:error] [pid 11494:tid 11501] [client 20.215.190.134:50771] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "aeZjYMgko5iFiE8YoyQ4pwAAAYU"]
[Tue Apr 21 01:33:21.510568 2026] [:error] [pid 11441:tid 11445] [client 20.215.190.134:34191] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aeZjYcixByFUvmh319DgjgAAAMI"]
[Tue Apr 21 01:33:22.048932 2026] [:error] [pid 42014:tid 42020] [client 20.215.190.134:63612] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aeZjYsek-00-ZI0f1NquPAAAAQQ"]
[Tue Apr 21 01:33:22.623974 2026] [:error] [pid 11352:tid 11415] [client 20.215.190.134:59881] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aeZjYml10mhMSfJ7ir8B6QAAAIE"]
[Tue Apr 21 01:33:23.161497 2026] [:error] [pid 11350:tid 11382] [client 20.215.190.134:5229] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aeZjY_4EoMBgOJuJnT0oNAAAABc"]
[Tue Apr 21 01:33:23.690486 2026] [:error] [pid 11351:tid 11398] [client 20.215.190.134:51419] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeZjYwN8Z1-vktaI_tOZDgAAAEs"]
[Tue Apr 21 01:33:24.245374 2026] [:error] [pid 11351:tid 11387] [client 20.215.190.134:5246] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeZjZAN8Z1-vktaI_tOZEAAAAEA"]
[Tue Apr 21 01:33:24.836556 2026] [:error] [pid 11494:tid 11512] [client 20.215.190.134:63578] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeZjZMgko5iFiE8YoyQ4rAAAAZA"]
[Tue Apr 21 01:33:25.374528 2026] [:error] [pid 11351:tid 11391] [client 20.215.190.134:63587] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeZjZQN8Z1-vktaI_tOZEgAAAEQ"]
[Tue Apr 21 01:33:25.903455 2026] [:error] [pid 11494:tid 11504] [client 20.215.190.134:51410] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjZcgko5iFiE8YoyQ4tQAAAYg"]
[Tue Apr 21 01:33:26.441060 2026] [:error] [pid 11441:tid 11453] [client 20.215.190.134:51448] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjZsixByFUvmh319DglQAAAMo"]
[Tue Apr 21 01:33:26.961625 2026] [:error] [pid 11351:tid 11394] [client 20.215.190.134:51426] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjZgN8Z1-vktaI_tOZGgAAAEc"]
[Tue Apr 21 01:33:27.645783 2026] [:error] [pid 11351:tid 11407] [client 20.215.190.134:51412] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjZwN8Z1-vktaI_tOZHAAAAFQ"]
[Tue Apr 21 01:33:28.220542 2026] [:error] [pid 6928:tid 6948] [client 20.215.190.134:5230] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeZjaB3y7MHq1iB0qYrrPAAAAVI"]
[Tue Apr 21 01:33:28.764144 2026] [:error] [pid 6928:tid 6947] [client 20.215.190.134:5185] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeZjaB3y7MHq1iB0qYrrPwAAAVE"]
[Tue Apr 21 01:33:29.385782 2026] [:error] [pid 42014:tid 42021] [client 20.215.190.134:53964] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeZjacek-00-ZI0f1NquTgAAAQU"]
[Tue Apr 21 01:33:30.072038 2026] [:error] [pid 11351:tid 11391] [client 20.215.190.134:34198] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeZjagN8Z1-vktaI_tOZJwAAAEQ"]
[Tue Apr 21 01:33:30.773832 2026] [:error] [pid 6928:tid 6943] [client 20.215.190.134:59896] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZjah3y7MHq1iB0qYrrRAAAAU0"]
[Tue Apr 21 01:33:31.412697 2026] [:error] [pid 6928:tid 6950] [client 20.215.190.134:60424] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZjax3y7MHq1iB0qYrrRgAAAVQ"]
[Tue Apr 21 01:33:32.023027 2026] [:error] [pid 11352:tid 11414] [client 20.215.190.134:34227] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZjbGl10mhMSfJ7ir8B8gAAAIA"]
[Tue Apr 21 01:33:32.612770 2026] [:error] [pid 6928:tid 6935] [client 20.215.190.134:50789] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZjbB3y7MHq1iB0qYrrRwAAAUU"]
[Tue Apr 21 01:33:33.207744 2026] [:error] [pid 11351:tid 11408] [client 20.215.190.134:63565] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeZjbQN8Z1-vktaI_tOZNgAAAFU"]
[Tue Apr 21 01:33:33.789106 2026] [:error] [pid 11351:tid 11411] [client 20.215.190.134:5130] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeZjbQN8Z1-vktaI_tOZOwAAAFg"]
[Tue Apr 21 01:33:34.436921 2026] [:error] [pid 11441:tid 11467] [client 20.215.190.134:41715] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeZjbsixByFUvmh319DgoAAAANg"]
[Tue Apr 21 01:33:35.057125 2026] [:error] [pid 11351:tid 11405] [client 20.215.190.134:63590] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeZjbwN8Z1-vktaI_tOZSQAAAFI"]
[Tue Apr 21 01:33:35.681921 2026] [:error] [pid 42014:tid 42036] [client 20.215.190.134:63561] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aeZjb8ek-00-ZI0f1NquVwAAARQ"]
[Tue Apr 21 01:33:36.463085 2026] [:error] [pid 11352:tid 11434] [client 20.215.190.134:5135] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aeZjcGl10mhMSfJ7ir8B-gAAAJQ"]
[Tue Apr 21 01:33:37.086858 2026] [:error] [pid 11441:tid 11455] [client 20.215.190.134:30021] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aeZjccixByFUvmh319DgpwAAAMw"]
[Tue Apr 21 01:33:37.643064 2026] [:error] [pid 11351:tid 11400] [client 20.215.190.134:60475] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "aeZjcQN8Z1-vktaI_tOZXAAAAE0"]
[Tue Apr 21 01:33:38.226386 2026] [:error] [pid 11350:tid 11382] [client 20.215.190.134:62241] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aeZjcv4EoMBgOJuJnT0oSAAAABc"]
[Tue Apr 21 01:33:38.838138 2026] [:error] [pid 11350:tid 11372] [client 20.215.190.134:5123] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aeZjcv4EoMBgOJuJnT0oTAAAAA0"]
[Tue Apr 21 01:33:39.478780 2026] [:error] [pid 11352:tid 11422] [client 20.215.190.134:60416] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aeZjc2l10mhMSfJ7ir8B_QAAAIg"]
[Tue Apr 21 01:33:40.107818 2026] [:error] [pid 11352:tid 11419] [client 20.215.190.134:63601] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aeZjdGl10mhMSfJ7ir8CAAAAAIU"]
[Tue Apr 21 01:33:40.672946 2026] [:error] [pid 11352:tid 11425] [client 20.215.190.134:5188] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aeZjdGl10mhMSfJ7ir8CAgAAAIs"]
[Tue Apr 21 01:33:41.196720 2026] [:error] [pid 11351:tid 11398] [client 20.215.190.134:59194] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aeZjdQN8Z1-vktaI_tOZegAAAEs"]
[Tue Apr 21 01:33:41.875977 2026] [:error] [pid 11441:tid 11454] [client 20.215.190.134:62267] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aeZjdcixByFUvmh319DgsAAAAMs"]
[Tue Apr 21 01:33:42.399870 2026] [:error] [pid 11351:tid 11392] [client 20.215.190.134:33102] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aeZjdgN8Z1-vktaI_tOZhwAAAEU"]
[Tue Apr 21 01:33:42.920937 2026] [:error] [pid 11351:tid 11405] [client 20.215.190.134:60432] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aeZjdgN8Z1-vktaI_tOZjAAAAFI"]
[Tue Apr 21 01:33:43.500726 2026] [:error] [pid 11352:tid 11418] [client 20.215.190.134:34190] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aeZjd2l10mhMSfJ7ir8CCQAAAIQ"]
[Tue Apr 21 01:33:44.091142 2026] [:error] [pid 11351:tid 11408] [client 20.215.190.134:53960] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aeZjeAN8Z1-vktaI_tOZkwAAAFU"]
[Tue Apr 21 01:33:44.623616 2026] [:error] [pid 11441:tid 11461] [client 20.215.190.134:53970] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/update/f35.php"] [unique_id "aeZjeMixByFUvmh319DgtQAAANI"]
[Tue Apr 21 01:33:45.193734 2026] [:error] [pid 42014:tid 42023] [client 20.215.190.134:33141] [client 20.215.190.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeZjecek-00-ZI0f1NquXwAAAQc"]
[Tue Apr 21 01:33:45.714041 2026] [:error] [pid 11441:tid 11458] [client 20.215.190.134:59853] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeZjecixByFUvmh319DgugAAAM8"]
[Tue Apr 21 01:33:46.226787 2026] [:error] [pid 11494:tid 11519] [client 20.215.190.134:53993] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeZjesgko5iFiE8YoyQ4wgAAAZc"]
[Tue Apr 21 01:33:46.761980 2026] [:error] [pid 42014:tid 42025] [client 20.215.190.134:62269] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeZjesek-00-ZI0f1NquYQAAAQk"]
[Tue Apr 21 01:33:47.330898 2026] [:error] [pid 42014:tid 42031] [client 20.215.190.134:62241] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "aeZje8ek-00-ZI0f1NquYgAAAQ8"]
[Tue Apr 21 01:33:47.984561 2026] [:error] [pid 11441:tid 11467] [client 20.215.190.134:60433] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeZje8ixByFUvmh319DgwQAAANg"]
[Tue Apr 21 01:33:48.679038 2026] [:error] [pid 11350:tid 11373] [client 20.215.190.134:62215] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeZjfP4EoMBgOJuJnT0oWAAAAA4"]
[Tue Apr 21 01:33:49.370062 2026] [:error] [pid 11441:tid 11454] [client 20.215.190.134:50805] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeZjfcixByFUvmh319DgwwAAAMs"]
[Tue Apr 21 01:33:50.073326 2026] [:error] [pid 11441:tid 11445] [client 20.215.190.134:41686] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeZjfsixByFUvmh319DgxgAAAMI"]
[Tue Apr 21 01:33:50.612495 2026] [:error] [pid 11441:tid 11443] [client 20.215.190.134:5141] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZjfsixByFUvmh319DgyAAAAMA"]
[Tue Apr 21 01:33:51.170136 2026] [:error] [pid 11351:tid 11390] [client 20.215.190.134:60420] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZjfwN8Z1-vktaI_tOZrwAAAEM"]
[Tue Apr 21 01:33:51.736914 2026] [:error] [pid 6928:tid 6944] [client 20.215.190.134:63592] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZjfx3y7MHq1iB0qYrrYAAAAU4"]
[Tue Apr 21 01:33:52.329487 2026] [:error] [pid 6928:tid 6931] [client 20.215.190.134:34207] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZjgB3y7MHq1iB0qYrrYwAAAUE"]
[Tue Apr 21 01:33:52.936073 2026] [:error] [pid 11352:tid 11416] [client 20.215.190.134:51395] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeZjgGl10mhMSfJ7ir8CJQAAAII"]
[Tue Apr 21 01:33:53.546445 2026] [:error] [pid 11351:tid 11399] [client 20.215.190.134:5242] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeZjgQN8Z1-vktaI_tOZtQAAAEw"]
[Tue Apr 21 01:33:54.204927 2026] [:error] [pid 11352:tid 11426] [client 20.215.190.134:34228] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeZjgml10mhMSfJ7ir8CJwAAAIw"]
[Tue Apr 21 01:33:54.822044 2026] [:error] [pid 42014:tid 42017] [client 20.215.190.134:59162] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "aeZjgsek-00-ZI0f1NqucgAAAQE"]
[Tue Apr 21 01:33:55.387113 2026] [:error] [pid 11351:tid 11406] [client 20.215.190.134:62233] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aeZjgwN8Z1-vktaI_tOZvAAAAFM"]
[Tue Apr 21 01:33:55.964109 2026] [:error] [pid 42014:tid 42021] [client 20.215.190.134:5128] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aeZjg8ek-00-ZI0f1NqudwAAAQU"]
[Tue Apr 21 01:33:56.576732 2026] [:error] [pid 11350:tid 11376] [client 20.215.190.134:5244] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aeZjhP4EoMBgOJuJnT0oZgAAABE"]
[Tue Apr 21 01:34:11.295234 2026] [:error] [pid 11351:tid 11410] [client 20.215.190.134:5202] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeZjkwN8Z1-vktaI_tOaJAAAAFc"]
[Tue Apr 21 01:34:12.014333 2026] [:error] [pid 42014:tid 42030] [client 20.215.190.134:34183] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeZjlMek-00-ZI0f1NquhgAAAQ4"]
[Tue Apr 21 01:34:12.666326 2026] [:error] [pid 11494:tid 11501] [client 20.215.190.134:62264] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeZjlMgko5iFiE8YoyQ4_QAAAYU"]
[Tue Apr 21 01:34:13.338798 2026] [:error] [pid 11351:tid 11398] [client 20.215.190.134:51455] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeZjlQN8Z1-vktaI_tOaLQAAAEs"]
[Tue Apr 21 01:34:13.912510 2026] [:error] [pid 42014:tid 42020] [client 20.215.190.134:63563] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeZjlcek-00-ZI0f1NqujQAAAQQ"]
[Tue Apr 21 01:34:14.547772 2026] [:error] [pid 11494:tid 11509] [client 20.215.190.134:34203] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeZjlsgko5iFiE8YoyQ5CgAAAY0"]
[Tue Apr 21 01:34:15.115520 2026] [:error] [pid 11351:tid 11394] [client 20.215.190.134:54000] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeZjlwN8Z1-vktaI_tOaMwAAAEc"]
[Tue Apr 21 01:34:15.693036 2026] [:error] [pid 11350:tid 11380] [client 20.215.190.134:60474] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeZjl_4EoMBgOJuJnT0ooAAAABU"]
[Tue Apr 21 01:34:16.257113 2026] [:error] [pid 11350:tid 11371] [client 20.215.190.134:51397] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeZjmP4EoMBgOJuJnT0oqAAAAAw"]
[Tue Apr 21 01:34:16.952679 2026] [:error] [pid 6928:tid 6944] [client 20.215.190.134:50753] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeZjmB3y7MHq1iB0qYrrmQAAAU4"]
[Tue Apr 21 01:34:17.489985 2026] [:error] [pid 6928:tid 6932] [client 20.215.190.134:5191] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeZjmR3y7MHq1iB0qYrrmgAAAUI"]
[Tue Apr 21 01:34:18.028997 2026] [:error] [pid 11494:tid 11511] [client 20.215.190.134:50761] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeZjmsgko5iFiE8YoyQ5EQAAAY8"]
[Tue Apr 21 01:34:18.689602 2026] [:error] [pid 11441:tid 11462] [client 20.215.190.134:53996] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeZjmsixByFUvmh319Dg3QAAANM"]
[Tue Apr 21 01:34:19.243937 2026] [:error] [pid 42014:tid 42022] [client 20.215.190.134:59857] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeZjm8ek-00-ZI0f1NqukQAAAQY"]
[Tue Apr 21 01:34:19.791314 2026] [:error] [pid 6928:tid 6950] [client 20.215.190.134:53985] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeZjmx3y7MHq1iB0qYrrowAAAVQ"]
[Tue Apr 21 01:34:20.336855 2026] [:error] [pid 11351:tid 11400] [client 20.215.190.134:59151] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeZjnAN8Z1-vktaI_tOaNwAAAE0"]
[Tue Apr 21 01:34:20.866921 2026] [:error] [pid 11351:tid 11403] [client 20.215.190.134:50804] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeZjnAN8Z1-vktaI_tOaOgAAAFA"]
[Tue Apr 21 01:34:21.508483 2026] [:error] [pid 11441:tid 11448] [client 20.215.190.134:41666] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeZjncixByFUvmh319Dg5gAAAMU"]
[Tue Apr 21 01:34:22.045328 2026] [:error] [pid 11441:tid 11455] [client 20.215.190.134:62260] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeZjnsixByFUvmh319Dg6wAAAMw"]
[Tue Apr 21 01:34:22.632245 2026] [:error] [pid 11350:tid 11363] [client 20.215.190.134:50759] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeZjnv4EoMBgOJuJnT0oygAAAAQ"]
[Tue Apr 21 01:34:23.235681 2026] [:error] [pid 11494:tid 11513] [client 20.215.190.134:50758] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aeZjn8gko5iFiE8YoyQ5JQAAAZE"]
[Tue Apr 21 01:34:23.775046 2026] [:error] [pid 11494:tid 11510] [client 20.215.190.134:33116] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aeZjn8gko5iFiE8YoyQ5KAAAAY4"]
[Tue Apr 21 01:34:24.290845 2026] [:error] [pid 42014:tid 42021] [client 20.215.190.134:51430] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aeZjoMek-00-ZI0f1NqunQAAAQU"]
[Tue Apr 21 01:34:24.838945 2026] [:error] [pid 6928:tid 6949] [client 20.215.190.134:34222] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aeZjoB3y7MHq1iB0qYrrrAAAAVM"]
[Tue Apr 21 01:34:25.400060 2026] [:error] [pid 11351:tid 11391] [client 20.215.190.134:34239] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "aeZjoQN8Z1-vktaI_tOaQAAAAEQ"]
[Tue Apr 21 01:34:25.925480 2026] [:error] [pid 11441:tid 11443] [client 20.215.190.134:59138] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "aeZjocixByFUvmh319Dg8gAAAMA"]
[Tue Apr 21 01:34:26.542213 2026] [:error] [pid 11352:tid 11424] [client 20.215.190.134:53998] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "aeZjoml10mhMSfJ7ir8CSgAAAIo"]
[Tue Apr 21 01:34:27.119380 2026] [:error] [pid 11352:tid 11427] [client 20.215.190.134:62259] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "aeZjo2l10mhMSfJ7ir8CTgAAAI0"]
[Tue Apr 21 01:34:27.651430 2026] [:error] [pid 11351:tid 11407] [client 20.215.190.134:63552] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aeZjowN8Z1-vktaI_tOaRAAAAFQ"]
[Tue Apr 21 01:34:28.204564 2026] [:error] [pid 42014:tid 42020] [client 20.215.190.134:60454] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aeZjpMek-00-ZI0f1NqutAAAAQQ"]
[Tue Apr 21 01:34:28.813359 2026] [:error] [pid 11441:tid 11460] [client 20.215.190.134:48230] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aeZjpMixByFUvmh319Dg-AAAANE"]
[Tue Apr 21 01:34:29.324055 2026] [:error] [pid 6928:tid 6939] [client 20.215.190.134:59883] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aeZjpR3y7MHq1iB0qYrrugAAAUk"]
[Tue Apr 21 01:34:29.897015 2026] [:error] [pid 11441:tid 11454] [client 20.215.190.134:33107] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeZjpcixByFUvmh319Dg_AAAAMs"]
[Tue Apr 21 01:34:30.417446 2026] [:error] [pid 11352:tid 11431] [client 20.215.190.134:59855] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeZjpml10mhMSfJ7ir8CVAAAAJE"]
[Tue Apr 21 01:34:31.095586 2026] [:error] [pid 11352:tid 11432] [client 20.215.190.134:5156] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeZjp2l10mhMSfJ7ir8CVwAAAJI"]
[Tue Apr 21 01:34:31.758585 2026] [:error] [pid 11351:tid 11402] [client 20.215.190.134:60470] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aeZjpwN8Z1-vktaI_tOaWAAAAE8"]
[Tue Apr 21 01:34:32.292453 2026] [:error] [pid 11441:tid 11459] [client 20.215.190.134:33117] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZjqMixByFUvmh319DhAQAAANA"]
[Tue Apr 21 01:34:32.821633 2026] [:error] [pid 11441:tid 11456] [client 20.215.190.134:50793] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZjqMixByFUvmh319DhAgAAAM0"]
[Tue Apr 21 01:34:33.413101 2026] [:error] [pid 11352:tid 11434] [client 20.215.190.134:59136] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZjqWl10mhMSfJ7ir8CYgAAAJQ"]
[Tue Apr 21 01:34:33.968323 2026] [:error] [pid 6928:tid 6943] [client 20.215.190.134:5221] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZjqR3y7MHq1iB0qYrrzwAAAU0"]
[Tue Apr 21 01:34:34.660015 2026] [:error] [pid 6928:tid 6936] [client 20.215.190.134:53989] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeZjqh3y7MHq1iB0qYrr1gAAAUY"]
[Tue Apr 21 01:34:35.296325 2026] [:error] [pid 6928:tid 6950] [client 20.215.190.134:60467] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeZjqx3y7MHq1iB0qYrr3wAAAVQ"]
[Tue Apr 21 01:34:35.860802 2026] [:error] [pid 6928:tid 6943] [client 20.215.190.134:53977] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeZjqx3y7MHq1iB0qYrr5gAAAU0"]
[Tue Apr 21 01:34:36.444232 2026] [:error] [pid 42014:tid 42027] [client 20.215.190.134:63610] [client 20.215.190.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aeZjrMek-00-ZI0f1NquyAAAAQs"]
[Tue Apr 21 01:50:59.363330 2026] [:error] [pid 11441:tid 11448] [client 172.223.25.8:51484] [client 172.223.25.8] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeZng8ixByFUvmh319DklwAAAMU"]
[Tue Apr 21 02:32:28.403069 2026] [:error] [pid 11351:tid 11404] [client 182.44.12.37:41115] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeZxPAN8Z1-vktaI_tPBGwAAAFE"]
[Tue Apr 21 03:36:48.223028 2026] [:error] [pid 35415:tid 35428] [client 43.167.236.228:43718] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeaAUEiqDinI4_22zzjKAwAAAME"]
[Tue Apr 21 03:41:39.435555 2026] [:error] [pid 35320:tid 35350] [client 4.225.201.254:16059] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "aeaBc4JW6fdXWO6agMFRvAAAABQ"]
[Tue Apr 21 03:41:40.156353 2026] [:error] [pid 35320:tid 35346] [client 4.225.201.254:57609] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "aeaBdIJW6fdXWO6agMFRvgAAABA"]
[Tue Apr 21 03:41:41.124174 2026] [:error] [pid 35322:tid 35358] [client 4.225.201.254:16423] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "aeaBdaPoAfV40BTfVKxdXgAAAIE"]
[Tue Apr 21 03:41:42.280812 2026] [:error] [pid 35321:tid 35388] [client 4.225.201.254:32113] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "aeaBdjeHLhVUuu8cVXwrywAAAEQ"]
[Tue Apr 21 03:41:43.153130 2026] [:error] [pid 35321:tid 35384] [client 4.225.201.254:16428] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "aeaBdzeHLhVUuu8cVXwr0QAAAEA"]
[Tue Apr 21 03:41:44.098703 2026] [:error] [pid 35415:tid 35445] [client 4.225.201.254:13312] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "aeaBeEiqDinI4_22zzjSgQAAANI"]
[Tue Apr 21 03:41:45.103553 2026] [:error] [pid 35321:tid 35400] [client 4.225.201.254:35141] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "aeaBeTeHLhVUuu8cVXwr2QAAAFA"]
[Tue Apr 21 03:41:46.202885 2026] [:error] [pid 35321:tid 35386] [client 4.225.201.254:33978] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "aeaBejeHLhVUuu8cVXwr3gAAAEI"]
[Tue Apr 21 03:41:46.994206 2026] [:error] [pid 35320:tid 35336] [client 4.225.201.254:16397] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeaBeoJW6fdXWO6agMFRxAAAAAY"]
[Tue Apr 21 03:41:47.627901 2026] [:error] [pid 35321:tid 35402] [client 4.225.201.254:30786] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeaBezeHLhVUuu8cVXwr3wAAAFI"]
[Tue Apr 21 03:41:48.375343 2026] [:error] [pid 35320:tid 35350] [client 4.225.201.254:33938] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeaBfIJW6fdXWO6agMFRyAAAABQ"]
[Tue Apr 21 03:41:49.307348 2026] [:error] [pid 35320:tid 35346] [client 4.225.201.254:16410] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aeaBfYJW6fdXWO6agMFRzAAAABA"]
[Tue Apr 21 03:41:50.017481 2026] [:error] [pid 35321:tid 35401] [client 4.225.201.254:16023] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeaBfjeHLhVUuu8cVXwr5gAAAFE"]
[Tue Apr 21 03:41:50.956329 2026] [:error] [pid 35322:tid 35370] [client 4.225.201.254:33931] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeaBfqPoAfV40BTfVKxdcgAAAI0"]
[Tue Apr 21 03:41:52.780368 2026] [:error] [pid 35322:tid 35381] [client 4.225.201.254:24591] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeaBgKPoAfV40BTfVKxdewAAAJg"]
[Tue Apr 21 03:41:53.538074 2026] [:error] [pid 35415:tid 35442] [client 4.225.201.254:57625] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeaBgUiqDinI4_22zzjSmQAAAM8"]
[Tue Apr 21 03:41:54.454774 2026] [:error] [pid 35415:tid 35439] [client 4.225.201.254:30847] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "aeaBgkiqDinI4_22zzjSngAAAMw"]
[Tue Apr 21 03:41:55.554640 2026] [:error] [pid 35322:tid 35379] [client 4.225.201.254:37057] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "aeaBg6PoAfV40BTfVKxdggAAAJY"]
[Tue Apr 21 03:41:56.367991 2026] [:error] [pid 35320:tid 35350] [client 4.225.201.254:16011] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "aeaBhIJW6fdXWO6agMFR1gAAABQ"]
[Tue Apr 21 03:41:57.556844 2026] [:error] [pid 35321:tid 35391] [client 4.225.201.254:35185] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "aeaBhTeHLhVUuu8cVXwr-QAAAEc"]
[Tue Apr 21 03:41:58.534492 2026] [:error] [pid 35321:tid 35399] [client 4.225.201.254:25291] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m57.php"] [unique_id "aeaBhjeHLhVUuu8cVXwr_gAAAE8"]
[Tue Apr 21 03:41:59.767322 2026] [:error] [pid 35321:tid 35398] [client 4.225.201.254:32106] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m57.php"] [unique_id "aeaBhzeHLhVUuu8cVXwsAwAAAE4"]
[Tue Apr 21 03:42:00.588988 2026] [:error] [pid 35415:tid 35446] [client 4.225.201.254:16055] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m57.php"] [unique_id "aeaBiEiqDinI4_22zzjSqAAAANM"]
[Tue Apr 21 03:42:01.276773 2026] [:error] [pid 35321:tid 35392] [client 4.225.201.254:13324] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/m57.php"] [unique_id "aeaBiTeHLhVUuu8cVXwsCQAAAEg"]
[Tue Apr 21 03:42:02.109338 2026] [:error] [pid 35320:tid 35338] [client 4.225.201.254:37088] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sw.php"] [unique_id "aeaBioJW6fdXWO6agMFR5gAAAAg"]
[Tue Apr 21 03:42:02.859517 2026] [:error] [pid 35321:tid 35402] [client 4.225.201.254:27224] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sw.php"] [unique_id "aeaBijeHLhVUuu8cVXwsDgAAAFI"]
[Tue Apr 21 03:42:03.639930 2026] [:error] [pid 35321:tid 35391] [client 4.225.201.254:25289] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sw.php"] [unique_id "aeaBizeHLhVUuu8cVXwsFgAAAEc"]
[Tue Apr 21 03:42:04.557527 2026] [:error] [pid 35415:tid 35429] [client 4.225.201.254:57641] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sw.php"] [unique_id "aeaBjEiqDinI4_22zzjSrwAAAMI"]
[Tue Apr 21 03:42:05.177569 2026] [:error] [pid 35321:tid 35391] [client 4.225.201.254:24619] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-m57.php"] [unique_id "aeaBjTeHLhVUuu8cVXwsJAAAAEc"]
[Tue Apr 21 03:42:05.897729 2026] [:error] [pid 35322:tid 35365] [client 4.225.201.254:13340] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-m57.php"] [unique_id "aeaBjaPoAfV40BTfVKxdowAAAIg"]
[Tue Apr 21 03:42:06.736621 2026] [:error] [pid 35321:tid 35407] [client 4.225.201.254:57621] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-m57.php"] [unique_id "aeaBjjeHLhVUuu8cVXwsLQAAAFc"]
[Tue Apr 21 03:42:08.101146 2026] [:error] [pid 35321:tid 35403] [client 4.225.201.254:35159] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-m57.php"] [unique_id "aeaBkDeHLhVUuu8cVXwsMQAAAFM"]
[Tue Apr 21 03:42:08.738818 2026] [:error] [pid 35321:tid 35395] [client 4.225.201.254:24605] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vuln.php"] [unique_id "aeaBkDeHLhVUuu8cVXwsOAAAAEs"]
[Tue Apr 21 03:42:09.678745 2026] [:error] [pid 35415:tid 35441] [client 4.225.201.254:30784] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vuln.php"] [unique_id "aeaBkUiqDinI4_22zzjStgAAAM4"]
[Tue Apr 21 03:42:10.420781 2026] [:error] [pid 35321:tid 35387] [client 4.225.201.254:33949] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vuln.php"] [unique_id "aeaBkjeHLhVUuu8cVXwsPwAAAEM"]
[Tue Apr 21 03:42:11.290545 2026] [:error] [pid 35321:tid 35404] [client 4.225.201.254:30802] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vuln.php"] [unique_id "aeaBkzeHLhVUuu8cVXwsQQAAAFQ"]
[Tue Apr 21 03:42:12.091392 2026] [:error] [pid 35415:tid 35442] [client 4.225.201.254:16442] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "aeaBlEiqDinI4_22zzjSvgAAAM8"]
[Tue Apr 21 03:42:13.164806 2026] [:error] [pid 35321:tid 35389] [client 4.225.201.254:37101] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "aeaBlTeHLhVUuu8cVXwsSgAAAEU"]
[Tue Apr 21 03:42:13.825315 2026] [:error] [pid 35415:tid 35439] [client 4.225.201.254:16403] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "aeaBlUiqDinI4_22zzjSwgAAAMw"]
[Tue Apr 21 03:42:14.942369 2026] [:error] [pid 35415:tid 35430] [client 4.225.201.254:24626] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "aeaBlkiqDinI4_22zzjSxgAAAMM"]
[Tue Apr 21 03:42:15.769346 2026] [:error] [pid 35321:tid 35384] [client 4.225.201.254:32098] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sxdfrt.php"] [unique_id "aeaBlzeHLhVUuu8cVXwsVAAAAEA"]
[Tue Apr 21 03:42:16.613050 2026] [:error] [pid 35415:tid 35437] [client 4.225.201.254:30791] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sxdfrt.php"] [unique_id "aeaBmEiqDinI4_22zzjSzgAAAMo"]
[Tue Apr 21 03:42:18.109839 2026] [:error] [pid 35321:tid 35385] [client 4.225.201.254:30826] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sxdfrt.php"] [unique_id "aeaBmjeHLhVUuu8cVXwsWgAAAEE"]
[Tue Apr 21 03:42:18.843907 2026] [:error] [pid 35415:tid 35427] [client 4.225.201.254:57607] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sxdfrt.php"] [unique_id "aeaBmkiqDinI4_22zzjS1QAAAMA"]
[Tue Apr 21 03:42:19.545917 2026] [:error] [pid 35415:tid 35442] [client 4.225.201.254:30803] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeaBm0iqDinI4_22zzjS2gAAAM8"]
[Tue Apr 21 03:42:20.230773 2026] [:error] [pid 35415:tid 35448] [client 4.225.201.254:57646] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeaBnEiqDinI4_22zzjS4QAAANU"]
[Tue Apr 21 03:42:21.154341 2026] [:error] [pid 35322:tid 35362] [client 4.225.201.254:16047] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeaBnaPoAfV40BTfVKxdtQAAAIU"]
[Tue Apr 21 03:42:21.981449 2026] [:error] [pid 35321:tid 35401] [client 4.225.201.254:14353] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeaBnTeHLhVUuu8cVXwsZAAAAFE"]
[Tue Apr 21 03:42:22.719058 2026] [:error] [pid 35321:tid 35391] [client 4.225.201.254:32070] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeaBnjeHLhVUuu8cVXwsaQAAAEc"]
[Tue Apr 21 03:42:23.711854 2026] [:error] [pid 35322:tid 35368] [client 4.225.201.254:24608] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeaBn6PoAfV40BTfVKxdvQAAAIs"]
[Tue Apr 21 03:42:24.431495 2026] [:error] [pid 35415:tid 35450] [client 4.225.201.254:30825] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeaBoEiqDinI4_22zzjS7QAAANc"]
[Tue Apr 21 03:42:25.529656 2026] [:error] [pid 35415:tid 35438] [client 4.225.201.254:16010] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeaBoUiqDinI4_22zzjS8wAAAMs"]
[Tue Apr 21 03:42:26.345216 2026] [:error] [pid 35322:tid 35381] [client 4.225.201.254:16051] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-bda.php"] [unique_id "aeaBoqPoAfV40BTfVKxdwQAAAJg"]
[Tue Apr 21 03:42:28.500465 2026] [:error] [pid 35322:tid 35378] [client 4.225.201.254:24611] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-bda.php"] [unique_id "aeaBpKPoAfV40BTfVKxdwgAAAJU"]
[Tue Apr 21 03:42:31.095538 2026] [:error] [pid 35415:tid 35441] [client 4.225.201.254:30795] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-bda.php"] [unique_id "aeaBp0iqDinI4_22zzjTAwAAAM4"]
[Tue Apr 21 03:42:31.965001 2026] [:error] [pid 35415:tid 35451] [client 4.225.201.254:32079] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-bda.php"] [unique_id "aeaBp0iqDinI4_22zzjTDAAAANg"]
[Tue Apr 21 03:42:33.246691 2026] [:error] [pid 35415:tid 35451] [client 4.225.201.254:33939] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhm.php"] [unique_id "aeaBqUiqDinI4_22zzjTGQAAANg"]
[Tue Apr 21 03:42:34.705978 2026] [:error] [pid 35415:tid 35437] [client 4.225.201.254:13339] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhm.php"] [unique_id "aeaBqkiqDinI4_22zzjTLQAAAMo"]
[Tue Apr 21 03:42:36.387313 2026] [:error] [pid 35320:tid 35345] [client 4.225.201.254:16044] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhm.php"] [unique_id "aeaBrIJW6fdXWO6agMFSKAAAAA8"]
[Tue Apr 21 03:42:37.594776 2026] [:error] [pid 35415:tid 35447] [client 4.225.201.254:57654] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bhm.php"] [unique_id "aeaBrUiqDinI4_22zzjTPQAAANQ"]
[Tue Apr 21 03:42:41.543660 2026] [:error] [pid 35320:tid 35332] [client 4.225.201.254:35178] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "aeaBsYJW6fdXWO6agMFSLwAAAAI"]
[Tue Apr 21 03:42:42.368123 2026] [:error] [pid 35321:tid 35389] [client 4.225.201.254:57660] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "aeaBsjeHLhVUuu8cVXwslQAAAEU"]
[Tue Apr 21 03:42:44.298763 2026] [:error] [pid 35321:tid 35389] [client 4.225.201.254:37074] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "aeaBtDeHLhVUuu8cVXwsnwAAAEU"]
[Tue Apr 21 03:42:45.277464 2026] [:error] [pid 35322:tid 35374] [client 4.225.201.254:57643] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "aeaBtaPoAfV40BTfVKxd4gAAAJE"]
[Tue Apr 21 03:42:46.247102 2026] [:error] [pid 35415:tid 35430] [client 4.225.201.254:13314] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ref.php"] [unique_id "aeaBtkiqDinI4_22zzjTfgAAAMM"]
[Tue Apr 21 03:42:47.935041 2026] [:error] [pid 35415:tid 35448] [client 4.225.201.254:25310] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ref.php"] [unique_id "aeaBt0iqDinI4_22zzjTiQAAANU"]
[Tue Apr 21 03:42:49.991927 2026] [:error] [pid 35415:tid 35432] [client 4.225.201.254:33955] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ref.php"] [unique_id "aeaBuUiqDinI4_22zzjTmQAAAMU"]
[Tue Apr 21 03:42:51.344615 2026] [:error] [pid 35415:tid 35429] [client 4.225.201.254:33946] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ref.php"] [unique_id "aeaBu0iqDinI4_22zzjTogAAAMI"]
[Tue Apr 21 03:42:52.757352 2026] [:error] [pid 35415:tid 35449] [client 4.225.201.254:33950] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xme.php"] [unique_id "aeaBvEiqDinI4_22zzjTqQAAANY"]
[Tue Apr 21 03:42:53.688413 2026] [:error] [pid 35320:tid 35332] [client 4.225.201.254:33961] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xme.php"] [unique_id "aeaBvYJW6fdXWO6agMFSPQAAAAI"]
[Tue Apr 21 03:42:55.480382 2026] [:error] [pid 35321:tid 35399] [client 4.225.201.254:37081] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xme.php"] [unique_id "aeaBvzeHLhVUuu8cVXwsyQAAAE8"]
[Tue Apr 21 03:42:56.443336 2026] [:error] [pid 35321:tid 35408] [client 4.225.201.254:16427] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xme.php"] [unique_id "aeaBwDeHLhVUuu8cVXwszQAAAFg"]
[Tue Apr 21 03:42:57.329503 2026] [:error] [pid 35320:tid 35333] [client 4.225.201.254:37066] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aeaBwYJW6fdXWO6agMFSQQAAAAM"]
[Tue Apr 21 03:42:58.061750 2026] [:error] [pid 35322:tid 35371] [client 4.225.201.254:16407] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aeaBwqPoAfV40BTfVKxeAwAAAI4"]
[Tue Apr 21 03:42:59.181137 2026] [:error] [pid 35322:tid 35380] [client 4.225.201.254:57652] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aeaBw6PoAfV40BTfVKxeCwAAAJc"]
[Tue Apr 21 03:42:59.909716 2026] [:error] [pid 35320:tid 35350] [client 4.225.201.254:32091] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminer.php"] [unique_id "aeaBw4JW6fdXWO6agMFSSAAAABQ"]
[Tue Apr 21 03:43:00.635042 2026] [:error] [pid 35415:tid 35441] [client 4.225.201.254:37076] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktfow.php"] [unique_id "aeaBxEiqDinI4_22zzjTuQAAAM4"]
[Tue Apr 21 03:43:01.624175 2026] [:error] [pid 35415:tid 35444] [client 4.225.201.254:32117] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktfow.php"] [unique_id "aeaBxUiqDinI4_22zzjTwAAAANE"]
[Tue Apr 21 03:43:02.771114 2026] [:error] [pid 35415:tid 35430] [client 4.225.201.254:32083] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktfow.php"] [unique_id "aeaBxkiqDinI4_22zzjTxQAAAMM"]
[Tue Apr 21 03:43:03.748087 2026] [:error] [pid 35321:tid 35399] [client 4.225.201.254:57635] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ktfow.php"] [unique_id "aeaBxzeHLhVUuu8cVXws6AAAAE8"]
[Tue Apr 21 03:43:04.938043 2026] [:error] [pid 35320:tid 35337] [client 4.225.201.254:57618] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "aeaByIJW6fdXWO6agMFSVgAAAAc"]
[Tue Apr 21 03:43:06.402045 2026] [:error] [pid 35320:tid 35352] [client 4.225.201.254:13338] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "aeaByoJW6fdXWO6agMFSYQAAABY"]
[Tue Apr 21 03:43:07.232275 2026] [:error] [pid 35415:tid 35448] [client 4.225.201.254:37078] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "aeaBy0iqDinI4_22zzjT1QAAANU"]
[Tue Apr 21 03:43:07.883973 2026] [:error] [pid 35321:tid 35399] [client 4.225.201.254:32115] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "aeaByzeHLhVUuu8cVXws-AAAAE8"]
[Tue Apr 21 03:43:08.686407 2026] [:error] [pid 35415:tid 35450] [client 4.225.201.254:24599] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xx.php"] [unique_id "aeaBzEiqDinI4_22zzjT3AAAANc"]
[Tue Apr 21 03:43:09.503700 2026] [:error] [pid 35415:tid 35448] [client 4.225.201.254:37082] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xx.php"] [unique_id "aeaBzUiqDinI4_22zzjT3wAAANU"]
[Tue Apr 21 03:43:10.494885 2026] [:error] [pid 35415:tid 35450] [client 4.225.201.254:30817] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xx.php"] [unique_id "aeaBzkiqDinI4_22zzjT5wAAANc"]
[Tue Apr 21 03:43:11.666959 2026] [:error] [pid 35321:tid 35404] [client 4.225.201.254:19508] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Xx.php"] [unique_id "aeaBzzeHLhVUuu8cVXws_gAAAFQ"]
[Tue Apr 21 03:43:13.112297 2026] [:error] [pid 35320:tid 35345] [client 4.225.201.254:8167] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmini.php"] [unique_id "aeaB0YJW6fdXWO6agMFSdwAAAA8"]
[Tue Apr 21 03:43:14.472994 2026] [:error] [pid 35415:tid 35451] [client 4.225.201.254:25249] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmini.php"] [unique_id "aeaB0kiqDinI4_22zzjUAQAAANg"]
[Tue Apr 21 03:43:15.169091 2026] [:error] [pid 35322:tid 35359] [client 4.225.201.254:8152] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmini.php"] [unique_id "aeaB06PoAfV40BTfVKxeOQAAAII"]
[Tue Apr 21 03:43:16.005942 2026] [:error] [pid 35415:tid 35449] [client 4.225.201.254:23342] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmini.php"] [unique_id "aeaB1EiqDinI4_22zzjUCAAAANY"]
[Tue Apr 21 03:43:16.882602 2026] [:error] [pid 35321:tid 35387] [client 4.225.201.254:7841] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2468.php"] [unique_id "aeaB1DeHLhVUuu8cVXwtFQAAAEM"]
[Tue Apr 21 03:43:18.122340 2026] [:error] [pid 35320:tid 35354] [client 4.225.201.254:19466] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2468.php"] [unique_id "aeaB1oJW6fdXWO6agMFSggAAABg"]
[Tue Apr 21 03:43:18.975706 2026] [:error] [pid 35321:tid 35402] [client 4.225.201.254:40194] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2468.php"] [unique_id "aeaB1jeHLhVUuu8cVXwtFwAAAFI"]
[Tue Apr 21 03:43:20.128954 2026] [:error] [pid 35415:tid 35443] [client 4.225.201.254:40194] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2468.php"] [unique_id "aeaB2EiqDinI4_22zzjUIAAAANA"]
[Tue Apr 21 03:43:21.791611 2026] [:error] [pid 35322:tid 35373] [client 4.225.201.254:35751] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeaB2aPoAfV40BTfVKxeRgAAAJA"]
[Tue Apr 21 03:43:22.561026 2026] [:error] [pid 35322:tid 35369] [client 4.225.201.254:16085] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeaB2qPoAfV40BTfVKxeSgAAAIw"]
[Tue Apr 21 03:43:23.856407 2026] [:error] [pid 35320:tid 35347] [client 4.225.201.254:23339] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeaB24JW6fdXWO6agMFSmAAAABE"]
[Tue Apr 21 03:43:25.642319 2026] [:error] [pid 35415:tid 35449] [client 4.225.201.254:7866] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeaB3UiqDinI4_22zzjUNwAAANY"]
[Tue Apr 21 03:43:28.288496 2026] [:error] [pid 35320:tid 35339] [client 4.225.201.254:17625] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeaB4IJW6fdXWO6agMFSpAAAAAk"]
[Tue Apr 21 03:43:29.462006 2026] [:error] [pid 35415:tid 35428] [client 4.225.201.254:7801] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeaB4UiqDinI4_22zzjUVAAAAME"]
[Tue Apr 21 03:43:30.950629 2026] [:error] [pid 35415:tid 35445] [client 4.225.201.254:7751] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeaB4kiqDinI4_22zzjUVQAAANI"]
[Tue Apr 21 03:43:32.873014 2026] [:error] [pid 35415:tid 35451] [client 4.225.201.254:38353] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeaB5EiqDinI4_22zzjUWwAAANg"]
[Tue Apr 21 03:43:37.415522 2026] [:error] [pid 35322:tid 35359] [client 4.225.201.254:7747] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amdin.php"] [unique_id "aeaB6aPoAfV40BTfVKxebwAAAII"]
[Tue Apr 21 03:43:38.673503 2026] [:error] [pid 35321:tid 35406] [client 4.225.201.254:32748] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amdin.php"] [unique_id "aeaB6jeHLhVUuu8cVXwtVwAAAFY"]
[Tue Apr 21 03:43:39.814857 2026] [:error] [pid 35321:tid 35396] [client 4.225.201.254:7447] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amdin.php"] [unique_id "aeaB6zeHLhVUuu8cVXwtWwAAAEw"]
[Tue Apr 21 03:43:44.001288 2026] [:error] [pid 35320:tid 35352] [client 4.225.201.254:58140] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeaB8IJW6fdXWO6agMFS3AAAABY"]
[Tue Apr 21 03:43:44.743027 2026] [:error] [pid 35321:tid 35403] [client 4.225.201.254:45992] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeaB8DeHLhVUuu8cVXwtgQAAAFM"]
[Tue Apr 21 03:43:46.319941 2026] [:error] [pid 35415:tid 35430] [client 4.225.201.254:26523] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeaB8kiqDinI4_22zzjUvQAAAMM"]
[Tue Apr 21 03:43:47.789951 2026] [:error] [pid 35320:tid 35339] [client 4.225.201.254:27143] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aeaB84JW6fdXWO6agMFS9gAAAAk"]
[Tue Apr 21 03:43:50.596198 2026] [:error] [pid 35415:tid 35439] [client 4.225.201.254:37709] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeaB9kiqDinI4_22zzjU4gAAAMw"]
[Tue Apr 21 03:43:53.089712 2026] [:error] [pid 35415:tid 35431] [client 4.225.201.254:37661] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeaB-UiqDinI4_22zzjU7QAAAMQ"]
[Tue Apr 21 03:43:55.084835 2026] [:error] [pid 35321:tid 35408] [client 4.225.201.254:38938] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeaB-zeHLhVUuu8cVXwtrQAAAFg"]
[Tue Apr 21 03:43:55.932503 2026] [:error] [pid 35320:tid 35343] [client 4.225.201.254:39501] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aeaB-4JW6fdXWO6agMFTBgAAAA0"]
[Tue Apr 21 03:43:58.573109 2026] [:error] [pid 35320:tid 35341] [client 4.225.201.254:37672] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeaB_oJW6fdXWO6agMFTCQAAAAs"]
[Tue Apr 21 03:44:00.053299 2026] [:error] [pid 35415:tid 35435] [client 4.225.201.254:25889] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeaCAEiqDinI4_22zzjVGgAAAMg"]
[Tue Apr 21 03:44:01.004500 2026] [:error] [pid 35415:tid 35436] [client 4.225.201.254:44889] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeaCAUiqDinI4_22zzjVHwAAAMk"]
[Tue Apr 21 03:44:01.814550 2026] [:error] [pid 35320:tid 35343] [client 4.225.201.254:25914] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aeaCAYJW6fdXWO6agMFTEQAAAA0"]
[Tue Apr 21 03:44:02.581944 2026] [:error] [pid 35322:tid 35362] [client 4.225.201.254:25905] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeaCAqPoAfV40BTfVKxewAAAAIU"]
[Tue Apr 21 03:44:03.757210 2026] [:error] [pid 35415:tid 35438] [client 4.225.201.254:17278] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeaCA0iqDinI4_22zzjVJwAAAMs"]
[Tue Apr 21 03:44:06.124576 2026] [:error] [pid 35320:tid 35340] [client 4.225.201.254:40707] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeaCBoJW6fdXWO6agMFTFQAAAAo"]
[Tue Apr 21 03:44:07.325360 2026] [:error] [pid 35415:tid 35448] [client 4.225.201.254:25917] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aeaCB0iqDinI4_22zzjVMwAAANU"]
[Tue Apr 21 03:44:08.455709 2026] [:error] [pid 35322:tid 35379] [client 4.225.201.254:25963] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeaCCKPoAfV40BTfVKxeyAAAAJY"]
[Tue Apr 21 03:44:09.309366 2026] [:error] [pid 35321:tid 35396] [client 4.225.201.254:44902] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeaCCTeHLhVUuu8cVXwt5wAAAEw"]
[Tue Apr 21 03:44:11.561683 2026] [:error] [pid 35322:tid 35359] [client 4.225.201.254:58093] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeaCC6PoAfV40BTfVKxeygAAAII"]
[Tue Apr 21 03:44:13.615244 2026] [:error] [pid 35415:tid 35447] [client 4.225.201.254:42878] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aeaCDUiqDinI4_22zzjVVgAAANQ"]
[Tue Apr 21 03:44:15.355754 2026] [:error] [pid 35415:tid 35444] [client 4.225.201.254:63412] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeaCD0iqDinI4_22zzjVZAAAANE"]
[Tue Apr 21 03:44:18.001225 2026] [:error] [pid 35322:tid 35378] [client 4.225.201.254:57026] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeaCEqPoAfV40BTfVKxe1AAAAJU"]
[Tue Apr 21 03:44:19.043555 2026] [:error] [pid 35322:tid 35367] [client 4.225.201.254:7519] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeaCE6PoAfV40BTfVKxe1wAAAIo"]
[Tue Apr 21 03:44:20.751951 2026] [:error] [pid 35415:tid 35433] [client 4.225.201.254:22081] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aeaCFEiqDinI4_22zzjVkQAAAMY"]
[Tue Apr 21 03:44:21.648048 2026] [:error] [pid 35415:tid 35433] [client 4.225.201.254:63401] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeaCFUiqDinI4_22zzjVngAAAMY"]
[Tue Apr 21 03:44:22.289887 2026] [:error] [pid 35321:tid 35406] [client 4.225.201.254:27882] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeaCFjeHLhVUuu8cVXwuBAAAAFY"]
[Tue Apr 21 03:44:23.198577 2026] [:error] [pid 35320:tid 35342] [client 4.225.201.254:63396] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeaCF4JW6fdXWO6agMFTJgAAAAw"]
[Tue Apr 21 03:44:23.977656 2026] [:error] [pid 35322:tid 35377] [client 4.225.201.254:22710] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aeaCF6PoAfV40BTfVKxe5AAAAJQ"]
[Tue Apr 21 03:44:25.267935 2026] [:error] [pid 35320:tid 35345] [client 4.225.201.254:22083] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeaCGYJW6fdXWO6agMFTLwAAAA8"]
[Tue Apr 21 03:44:26.613300 2026] [:error] [pid 35322:tid 35364] [client 4.225.201.254:42766] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeaCGqPoAfV40BTfVKxe7AAAAIc"]
[Tue Apr 21 03:44:27.774143 2026] [:error] [pid 35415:tid 35443] [client 4.225.201.254:23971] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeaCG0iqDinI4_22zzjVvwAAANA"]
[Tue Apr 21 03:44:28.788601 2026] [:error] [pid 35415:tid 35447] [client 4.225.201.254:57054] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aeaCHEiqDinI4_22zzjVyQAAANQ"]
[Tue Apr 21 03:44:30.877651 2026] [:error] [pid 35320:tid 35335] [client 4.225.201.254:28539] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeaCHoJW6fdXWO6agMFTNgAAAAU"]
[Tue Apr 21 03:44:32.145405 2026] [:error] [pid 35321:tid 35401] [client 4.225.201.254:42777] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeaCIDeHLhVUuu8cVXwuFgAAAFE"]
[Tue Apr 21 03:44:32.979463 2026] [:error] [pid 35415:tid 35445] [client 4.225.201.254:42800] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeaCIEiqDinI4_22zzjV4wAAANI"]
[Tue Apr 21 03:44:33.887454 2026] [:error] [pid 35320:tid 35348] [client 4.225.201.254:28503] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aeaCIYJW6fdXWO6agMFTPAAAABI"]
[Tue Apr 21 03:44:34.798468 2026] [:error] [pid 35321:tid 35407] [client 4.225.201.254:61519] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeaCIjeHLhVUuu8cVXwuJgAAAFc"]
[Tue Apr 21 03:44:35.798449 2026] [:error] [pid 35322:tid 35379] [client 4.225.201.254:22114] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeaCI6PoAfV40BTfVKxe9wAAAJY"]
[Tue Apr 21 03:44:36.643605 2026] [:error] [pid 35321:tid 35389] [client 4.225.201.254:57044] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeaCJDeHLhVUuu8cVXwuLwAAAEU"]
[Tue Apr 21 03:44:37.621490 2026] [:error] [pid 35320:tid 35330] [client 4.225.201.254:42805] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aeaCJYJW6fdXWO6agMFTQAAAAAA"]
[Tue Apr 21 03:44:39.447380 2026] [:error] [pid 35320:tid 35340] [client 4.225.201.254:7502] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aeaCJ4JW6fdXWO6agMFTUAAAAAo"]
[Tue Apr 21 03:44:40.352443 2026] [:error] [pid 35322:tid 35357] [client 4.225.201.254:43601] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aeaCKKPoAfV40BTfVKxe_gAAAIA"]
[Tue Apr 21 03:44:41.549719 2026] [:error] [pid 35415:tid 35434] [client 4.225.201.254:7504] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aeaCKUiqDinI4_22zzjWBAAAAMc"]
[Tue Apr 21 03:44:45.200606 2026] [:error] [pid 35415:tid 35428] [client 4.225.201.254:22707] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeaCLUiqDinI4_22zzjWGwAAAME"]
[Tue Apr 21 03:44:45.910976 2026] [:error] [pid 35321:tid 35402] [client 4.225.201.254:20174] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeaCLTeHLhVUuu8cVXwuTQAAAFI"]
[Tue Apr 21 03:44:46.625487 2026] [:error] [pid 35321:tid 35400] [client 4.225.201.254:22083] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeaCLjeHLhVUuu8cVXwuUAAAAFA"]
[Tue Apr 21 03:44:47.718108 2026] [:error] [pid 35321:tid 35389] [client 4.225.201.254:23939] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aeaCLzeHLhVUuu8cVXwuUwAAAEU"]
[Tue Apr 21 03:44:49.122892 2026] [:error] [pid 35320:tid 35345] [client 4.225.201.254:13984] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aeaCMYJW6fdXWO6agMFTiwAAAA8"]
[Tue Apr 21 03:44:49.990782 2026] [:error] [pid 35321:tid 35398] [client 4.225.201.254:22109] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aeaCMTeHLhVUuu8cVXwuXAAAAE4"]
[Tue Apr 21 03:44:50.743952 2026] [:error] [pid 35320:tid 35353] [client 4.225.201.254:61552] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aeaCMoJW6fdXWO6agMFTlQAAABc"]
[Tue Apr 21 03:44:51.438734 2026] [:error] [pid 35415:tid 35435] [client 4.225.201.254:23985] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aeaCM0iqDinI4_22zzjWKQAAAMg"]
[Tue Apr 21 03:44:52.375246 2026] [:error] [pid 35415:tid 35443] [client 4.225.201.254:13964] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aeaCNEiqDinI4_22zzjWMwAAANA"]
[Tue Apr 21 03:44:53.286387 2026] [:error] [pid 35321:tid 35392] [client 4.225.201.254:22704] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aeaCNTeHLhVUuu8cVXwuYAAAAEg"]
[Tue Apr 21 03:44:54.193166 2026] [:error] [pid 35415:tid 35451] [client 4.225.201.254:61522] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aeaCNkiqDinI4_22zzjWOgAAANg"]
[Tue Apr 21 03:44:54.782041 2026] [:error] [pid 35322:tid 35380] [client 4.225.201.254:42786] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aeaCNqPoAfV40BTfVKxfGQAAAJc"]
[Tue Apr 21 03:44:55.560583 2026] [:error] [pid 35415:tid 35449] [client 4.225.201.254:22673] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aeaCN0iqDinI4_22zzjWQwAAANY"]
[Tue Apr 21 03:44:56.229146 2026] [:error] [pid 35415:tid 35429] [client 4.225.201.254:61514] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aeaCOEiqDinI4_22zzjWSgAAAMI"]
[Tue Apr 21 03:44:57.265783 2026] [:error] [pid 35415:tid 35434] [client 4.225.201.254:29534] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aeaCOUiqDinI4_22zzjWUgAAAMc"]
[Tue Apr 21 03:44:58.150157 2026] [:error] [pid 35321:tid 35396] [client 4.225.201.254:13955] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aeaCOjeHLhVUuu8cVXwuaAAAAEw"]
[Tue Apr 21 03:44:59.125719 2026] [:error] [pid 35415:tid 35431] [client 4.225.201.254:22664] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "aeaCO0iqDinI4_22zzjWXAAAAMQ"]
[Tue Apr 21 03:45:00.500846 2026] [:error] [pid 35321:tid 35404] [client 4.225.201.254:43626] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "aeaCPDeHLhVUuu8cVXwucgAAAFQ"]
[Tue Apr 21 03:45:01.689699 2026] [:error] [pid 35320:tid 35353] [client 4.225.201.254:23952] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "aeaCPYJW6fdXWO6agMFTowAAABc"]
[Tue Apr 21 03:45:02.624073 2026] [:error] [pid 35320:tid 35348] [client 4.225.201.254:13982] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "aeaCPoJW6fdXWO6agMFTpgAAABI"]
[Tue Apr 21 03:45:04.021810 2026] [:error] [pid 35320:tid 35343] [client 4.225.201.254:28488] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "aeaCQIJW6fdXWO6agMFTpwAAAA0"]
[Tue Apr 21 03:45:05.280661 2026] [:error] [pid 35320:tid 35339] [client 4.225.201.254:26594] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "aeaCQYJW6fdXWO6agMFTqQAAAAk"]
[Tue Apr 21 03:45:06.354549 2026] [:error] [pid 35322:tid 35377] [client 4.225.201.254:13992] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "aeaCQqPoAfV40BTfVKxfMgAAAJQ"]
[Tue Apr 21 03:45:09.628727 2026] [:error] [pid 35322:tid 35375] [client 4.225.201.254:14009] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "aeaCRaPoAfV40BTfVKxfQQAAAJI"]
[Tue Apr 21 03:45:10.866020 2026] [:error] [pid 35322:tid 35365] [client 4.225.201.254:29516] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "aeaCRqPoAfV40BTfVKxfTAAAAIg"]
[Tue Apr 21 03:45:15.659094 2026] [:error] [pid 35415:tid 35443] [client 4.225.201.254:13971] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "aeaCS0iqDinI4_22zzjWpAAAANA"]
[Tue Apr 21 03:45:17.752294 2026] [:error] [pid 35322:tid 35381] [client 4.225.201.254:13979] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "aeaCTaPoAfV40BTfVKxfZwAAAJg"]
[Tue Apr 21 03:45:18.802425 2026] [:error] [pid 35321:tid 35387] [client 4.225.201.254:13998] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "aeaCTjeHLhVUuu8cVXwupAAAAEM"]
[Tue Apr 21 03:45:20.719309 2026] [:error] [pid 35415:tid 35427] [client 4.225.201.254:35120] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aeaCUEiqDinI4_22zzjWywAAAMA"]
[Tue Apr 21 03:45:21.296388 2026] [:error] [pid 35321:tid 35384] [client 4.225.201.254:26582] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aeaCUTeHLhVUuu8cVXwusQAAAEA"]
[Tue Apr 21 03:45:22.116420 2026] [:error] [pid 35321:tid 35397] [client 4.225.201.254:22659] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aeaCUjeHLhVUuu8cVXwuswAAAE0"]
[Tue Apr 21 03:45:22.970214 2026] [:error] [pid 35322:tid 35380] [client 4.225.201.254:23964] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aeaCUqPoAfV40BTfVKxfcQAAAJc"]
[Tue Apr 21 03:45:23.815472 2026] [:error] [pid 35415:tid 35442] [client 4.225.201.254:35132] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aeaCU0iqDinI4_22zzjW5gAAAM8"]
[Tue Apr 21 03:45:24.484040 2026] [:error] [pid 35320:tid 35334] [client 4.225.201.254:7927] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aeaCVIJW6fdXWO6agMFTwgAAAAQ"]
[Tue Apr 21 03:45:25.306545 2026] [:error] [pid 35321:tid 35394] [client 4.225.201.254:22782] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aeaCVTeHLhVUuu8cVXwuxgAAAEo"]
[Tue Apr 21 03:45:26.267349 2026] [:error] [pid 35321:tid 35403] [client 4.225.201.254:14767] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "aeaCVjeHLhVUuu8cVXwuzQAAAFM"]
[Tue Apr 21 03:45:26.938969 2026] [:error] [pid 35320:tid 35340] [client 4.225.201.254:26572] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aeaCVoJW6fdXWO6agMFTxQAAAAo"]
[Tue Apr 21 03:45:27.655428 2026] [:error] [pid 35415:tid 35444] [client 4.225.201.254:18229] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aeaCV0iqDinI4_22zzjXJwAAANE"]
[Tue Apr 21 03:45:28.918854 2026] [:error] [pid 35321:tid 35396] [client 4.225.201.254:7892] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aeaCWDeHLhVUuu8cVXwu7AAAAEw"]
[Tue Apr 21 03:45:30.224620 2026] [:error] [pid 35322:tid 35369] [client 4.225.201.254:18203] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "aeaCWqPoAfV40BTfVKxfjgAAAIw"]
[Tue Apr 21 03:45:31.929806 2026] [:error] [pid 35320:tid 35336] [client 4.225.201.254:7895] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aeaCW4JW6fdXWO6agMFTzQAAAAY"]
[Tue Apr 21 03:45:32.812953 2026] [:error] [pid 35320:tid 35347] [client 4.225.201.254:22766] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aeaCXIJW6fdXWO6agMFT0QAAABE"]
[Tue Apr 21 03:45:33.787895 2026] [:error] [pid 35320:tid 35345] [client 4.225.201.254:18188] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aeaCXYJW6fdXWO6agMFT1gAAAA8"]
[Tue Apr 21 03:45:37.190619 2026] [:error] [pid 35415:tid 35444] [client 4.225.201.254:37037] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/3.php"] [unique_id "aeaCYUiqDinI4_22zzjXUgAAANE"]
[Tue Apr 21 03:45:39.871585 2026] [:error] [pid 35321:tid 35399] [client 4.225.201.254:14762] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeaCYzeHLhVUuu8cVXwvOQAAAE8"]
[Tue Apr 21 03:45:41.304455 2026] [:error] [pid 35320:tid 35350] [client 4.225.201.254:35073] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeaCZYJW6fdXWO6agMFT5QAAABQ"]
[Tue Apr 21 03:45:42.312931 2026] [:error] [pid 35415:tid 35446] [client 4.225.201.254:35122] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeaCZkiqDinI4_22zzjXZwAAANM"]
[Tue Apr 21 03:45:43.413810 2026] [:error] [pid 35321:tid 35392] [client 4.225.201.254:37054] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4.php"] [unique_id "aeaCZzeHLhVUuu8cVXwvTAAAAEg"]
[Tue Apr 21 03:45:44.198526 2026] [:error] [pid 35320:tid 35346] [client 4.225.201.254:7185] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeaCaIJW6fdXWO6agMFT7gAAABA"]
[Tue Apr 21 03:45:44.870328 2026] [:error] [pid 35415:tid 35433] [client 4.225.201.254:28429] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/5.php"] [unique_id "aeaCaEiqDinI4_22zzjXeAAAAMY"]
[Tue Apr 21 03:45:49.447807 2026] [:error] [pid 35320:tid 35344] [client 4.225.201.254:59450] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeaCbYJW6fdXWO6agMFUGwAAAA4"]
[Tue Apr 21 03:45:50.351138 2026] [:error] [pid 35415:tid 35434] [client 4.225.201.254:26603] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeaCbkiqDinI4_22zzjXhgAAAMc"]
[Tue Apr 21 03:45:51.259687 2026] [:error] [pid 35320:tid 35333] [client 4.225.201.254:59392] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeaCb4JW6fdXWO6agMFULQAAAAM"]
[Tue Apr 21 03:45:51.971271 2026] [:error] [pid 35415:tid 35447] [client 4.225.201.254:35128] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/10.php"] [unique_id "aeaCb0iqDinI4_22zzjXjAAAANQ"]
[Tue Apr 21 03:45:52.691882 2026] [:error] [pid 35322:tid 35374] [client 4.225.201.254:22761] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeaCcKPoAfV40BTfVKxfxwAAAJE"]
[Tue Apr 21 03:45:53.870192 2026] [:error] [pid 35321:tid 35385] [client 4.225.201.254:26592] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeaCcTeHLhVUuu8cVXwvcgAAAEE"]
[Tue Apr 21 03:45:54.553879 2026] [:error] [pid 35322:tid 35359] [client 4.225.201.254:14742] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeaCcqPoAfV40BTfVKxfyQAAAII"]
[Tue Apr 21 03:45:55.494191 2026] [:error] [pid 35320:tid 35336] [client 4.225.201.254:22756] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aeaCc4JW6fdXWO6agMFUQwAAAAY"]
[Tue Apr 21 03:45:56.566787 2026] [:error] [pid 35321:tid 35389] [client 4.225.201.254:20850] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeaCdDeHLhVUuu8cVXwvdgAAAEU"]
[Tue Apr 21 03:45:57.511463 2026] [:error] [pid 35322:tid 35379] [client 4.225.201.254:22739] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeaCdaPoAfV40BTfVKxfzQAAAJY"]
[Tue Apr 21 03:45:58.376270 2026] [:error] [pid 35322:tid 35371] [client 4.225.201.254:19567] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeaCdqPoAfV40BTfVKxf0AAAAI4"]
[Tue Apr 21 03:45:59.389721 2026] [:error] [pid 35415:tid 35447] [client 4.225.201.254:14783] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aeaCd0iqDinI4_22zzjXwgAAANQ"]
[Tue Apr 21 03:46:00.483720 2026] [:error] [pid 35320:tid 35353] [client 4.225.201.254:35109] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeaCeIJW6fdXWO6agMFUXgAAABc"]
[Tue Apr 21 03:46:01.665078 2026] [:error] [pid 35321:tid 35393] [client 4.225.201.254:35090] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeaCeTeHLhVUuu8cVXwvgAAAAEk"]
[Tue Apr 21 03:46:02.705114 2026] [:error] [pid 35321:tid 35406] [client 4.225.201.254:19577] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeaCejeHLhVUuu8cVXwvhQAAAFY"]
[Tue Apr 21 03:46:03.515452 2026] [:error] [pid 35415:tid 35442] [client 4.225.201.254:37012] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35_S.php"] [unique_id "aeaCe0iqDinI4_22zzjX4gAAAM8"]
[Tue Apr 21 03:46:04.372152 2026] [:error] [pid 35415:tid 35447] [client 4.225.201.254:59404] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeaCfEiqDinI4_22zzjX7AAAANQ"]
[Tue Apr 21 03:46:05.312636 2026] [:error] [pid 35415:tid 35442] [client 4.225.201.254:19555] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeaCfUiqDinI4_22zzjX8wAAAM8"]
[Tue Apr 21 03:46:06.572076 2026] [:error] [pid 35320:tid 35350] [client 4.225.201.254:26567] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeaCfoJW6fdXWO6agMFUfwAAABQ"]
[Tue Apr 21 03:46:07.441049 2026] [:error] [pid 35320:tid 35342] [client 4.225.201.254:37049] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aeaCf4JW6fdXWO6agMFUhgAAAAw"]
[Tue Apr 21 03:46:08.243101 2026] [:error] [pid 35320:tid 35349] [client 4.225.201.254:19574] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeaCgIJW6fdXWO6agMFUjQAAABM"]
[Tue Apr 21 03:46:08.921722 2026] [:error] [pid 35320:tid 35341] [client 4.225.201.254:59431] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeaCgIJW6fdXWO6agMFUkwAAAAs"]
[Tue Apr 21 03:46:09.868897 2026] [:error] [pid 35322:tid 35379] [client 4.225.201.254:19520] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeaCgaPoAfV40BTfVKxf5AAAAJY"]
[Tue Apr 21 03:46:10.819037 2026] [:error] [pid 35415:tid 35444] [client 4.225.201.254:37007] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/111.php"] [unique_id "aeaCgkiqDinI4_22zzjYBgAAANE"]
[Tue Apr 21 03:46:11.718991 2026] [:error] [pid 35320:tid 35340] [client 4.225.201.254:36998] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeaCg4JW6fdXWO6agMFUpwAAAAo"]
[Tue Apr 21 03:46:12.571272 2026] [:error] [pid 35320:tid 35330] [client 4.225.201.254:14772] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeaChIJW6fdXWO6agMFUrAAAAAA"]
[Tue Apr 21 03:46:13.156293 2026] [:error] [pid 35415:tid 35436] [client 4.225.201.254:59418] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeaChUiqDinI4_22zzjYDQAAAMk"]
[Tue Apr 21 03:46:13.993289 2026] [:error] [pid 35320:tid 35339] [client 4.225.201.254:26619] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "aeaChYJW6fdXWO6agMFUtAAAAAk"]
[Tue Apr 21 03:46:14.670300 2026] [:error] [pid 35320:tid 35336] [client 4.225.201.254:57099] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeaChoJW6fdXWO6agMFUtwAAAAY"]
[Tue Apr 21 03:46:15.483091 2026] [:error] [pid 35320:tid 35349] [client 4.225.201.254:26598] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeaCh4JW6fdXWO6agMFUvQAAABM"]
[Tue Apr 21 03:46:16.224622 2026] [:error] [pid 35320:tid 35353] [client 4.225.201.254:58865] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeaCiIJW6fdXWO6agMFUwAAAABc"]
[Tue Apr 21 03:46:16.883524 2026] [:error] [pid 35322:tid 35372] [client 4.225.201.254:35082] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aligk.php"] [unique_id "aeaCiKPoAfV40BTfVKxgCwAAAI8"]
[Tue Apr 21 03:46:17.750790 2026] [:error] [pid 35322:tid 35378] [client 4.225.201.254:28441] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeaCiaPoAfV40BTfVKxgFgAAAJU"]
[Tue Apr 21 03:46:18.764504 2026] [:error] [pid 35321:tid 35394] [client 4.225.201.254:14724] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeaCijeHLhVUuu8cVXwvvwAAAEo"]
[Tue Apr 21 03:46:19.557356 2026] [:error] [pid 35321:tid 35391] [client 4.225.201.254:20857] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeaCizeHLhVUuu8cVXwvwgAAAEc"]
[Tue Apr 21 03:46:20.277180 2026] [:error] [pid 35415:tid 35429] [client 4.225.201.254:35101] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/byrgo.php"] [unique_id "aeaCjEiqDinI4_22zzjYJQAAAMI"]
[Tue Apr 21 03:46:21.187905 2026] [:error] [pid 35415:tid 35443] [client 4.225.201.254:15551] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aeaCjUiqDinI4_22zzjYLgAAANA"]
[Tue Apr 21 03:46:22.035149 2026] [:error] [pid 35415:tid 35431] [client 4.225.201.254:15506] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aeaCjkiqDinI4_22zzjYNAAAAMQ"]
[Tue Apr 21 03:46:23.295152 2026] [:error] [pid 35322:tid 35371] [client 4.225.201.254:58873] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aeaCj6PoAfV40BTfVKxgOQAAAI4"]
[Tue Apr 21 03:46:24.337096 2026] [:error] [pid 35321:tid 35386] [client 4.225.201.254:7200] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aeaCkDeHLhVUuu8cVXwv0QAAAEI"]
[Tue Apr 21 03:46:25.994164 2026] [:error] [pid 35415:tid 35427] [client 4.225.201.254:19554] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aeaCkUiqDinI4_22zzjYSQAAAMA"]
[Tue Apr 21 03:46:27.112125 2026] [:error] [pid 35321:tid 35386] [client 4.225.201.254:28436] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aeaCkzeHLhVUuu8cVXwv2wAAAEI"]
[Tue Apr 21 03:46:28.063554 2026] [:error] [pid 35320:tid 35348] [client 4.225.201.254:28439] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aeaClIJW6fdXWO6agMFU6AAAABI"]
[Tue Apr 21 03:46:28.733543 2026] [:error] [pid 35415:tid 35435] [client 4.225.201.254:7214] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aeaClEiqDinI4_22zzjYUgAAAMg"]
[Tue Apr 21 03:46:29.504995 2026] [:error] [pid 35321:tid 35388] [client 4.225.201.254:57133] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeaClTeHLhVUuu8cVXwv5gAAAEQ"]
[Tue Apr 21 03:46:30.224678 2026] [:error] [pid 35320:tid 35334] [client 4.225.201.254:14730] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeaCloJW6fdXWO6agMFU8AAAAAQ"]
[Tue Apr 21 03:46:30.890709 2026] [:error] [pid 35320:tid 35338] [client 4.225.201.254:31471] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeaCloJW6fdXWO6agMFU9AAAAAg"]
[Tue Apr 21 03:46:31.549700 2026] [:error] [pid 35320:tid 35332] [client 4.225.201.254:59417] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aeaCl4JW6fdXWO6agMFU9QAAAAI"]
[Tue Apr 21 03:46:32.541207 2026] [:error] [pid 35415:tid 35435] [client 4.225.201.254:20823] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aeaCmEiqDinI4_22zzjYVwAAAMg"]
[Tue Apr 21 03:46:33.319175 2026] [:error] [pid 35415:tid 35429] [client 4.225.201.254:28423] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aeaCmUiqDinI4_22zzjYWgAAAMI"]
[Tue Apr 21 03:46:34.045806 2026] [:error] [pid 35321:tid 35388] [client 4.225.201.254:37027] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aeaCmjeHLhVUuu8cVXwv8AAAAEQ"]
[Tue Apr 21 03:46:34.803570 2026] [:error] [pid 35320:tid 35342] [client 4.225.201.254:8167] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aeaCmoJW6fdXWO6agMFU_gAAAAw"]
[Tue Apr 21 03:46:36.017479 2026] [:error] [pid 35320:tid 35341] [client 4.225.201.254:15489] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aeaCnIJW6fdXWO6agMFVAwAAAAs"]
[Tue Apr 21 03:46:36.750164 2026] [:error] [pid 35322:tid 35377] [client 4.225.201.254:37041] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aeaCnKPoAfV40BTfVKxgXQAAAJQ"]
[Tue Apr 21 03:46:37.639767 2026] [:error] [pid 35415:tid 35442] [client 4.225.201.254:58817] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aeaCnUiqDinI4_22zzjYYgAAAM8"]
[Tue Apr 21 03:46:38.383063 2026] [:error] [pid 35320:tid 35353] [client 4.225.201.254:28465] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aeaCnoJW6fdXWO6agMFVCgAAABc"]
[Tue Apr 21 03:46:39.219761 2026] [:error] [pid 35415:tid 35435] [client 4.225.201.254:7180] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeaCn0iqDinI4_22zzjYaAAAAMg"]
[Tue Apr 21 03:46:39.888336 2026] [:error] [pid 35322:tid 35371] [client 4.225.201.254:57108] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeaCn6PoAfV40BTfVKxgYwAAAI4"]
[Tue Apr 21 03:46:41.343592 2026] [:error] [pid 35320:tid 35345] [client 4.225.201.254:7193] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeaCoYJW6fdXWO6agMFVFAAAAA8"]
[Tue Apr 21 03:46:42.339215 2026] [:error] [pid 35320:tid 35349] [client 4.225.201.254:58832] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aeaCooJW6fdXWO6agMFVFgAAABM"]
[Tue Apr 21 03:46:43.191159 2026] [:error] [pid 35415:tid 35431] [client 4.225.201.254:57141] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeaCo0iqDinI4_22zzjYcwAAAMQ"]
[Tue Apr 21 03:46:44.271102 2026] [:error] [pid 35321:tid 35405] [client 4.225.201.254:15541] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeaCpDeHLhVUuu8cVXwwAwAAAFU"]
[Tue Apr 21 03:46:45.591587 2026] [:error] [pid 35322:tid 35372] [client 4.225.201.254:19566] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeaCpaPoAfV40BTfVKxgaAAAAI8"]
[Tue Apr 21 03:46:46.888783 2026] [:error] [pid 35321:tid 35400] [client 4.225.201.254:59425] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aeaCpjeHLhVUuu8cVXwwCAAAAFA"]
[Tue Apr 21 03:46:47.699369 2026] [:error] [pid 35322:tid 35369] [client 4.225.201.254:15498] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aeaCp6PoAfV40BTfVKxgbwAAAIw"]
[Tue Apr 21 03:47:05.843502 2026] [:error] [pid 35320:tid 35340] [client 4.225.201.254:19528] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeaCuYJW6fdXWO6agMFVVwAAAAo"]
[Tue Apr 21 03:47:07.329420 2026] [:error] [pid 35415:tid 35430] [client 4.225.201.254:15503] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeaCu0iqDinI4_22zzjYugAAAMM"]
[Tue Apr 21 03:47:09.900336 2026] [:error] [pid 35320:tid 35351] [client 4.225.201.254:58847] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeaCvYJW6fdXWO6agMFVYQAAABU"]
[Tue Apr 21 03:47:11.089561 2026] [:error] [pid 35322:tid 35374] [client 4.225.201.254:15515] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/66.php"] [unique_id "aeaCv6PoAfV40BTfVKxgpwAAAJE"]
[Tue Apr 21 03:47:14.261753 2026] [:error] [pid 35321:tid 35392] [client 4.225.201.254:19563] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeaCwjeHLhVUuu8cVXwwIgAAAEg"]
[Tue Apr 21 03:47:17.482615 2026] [:error] [pid 35321:tid 35396] [client 4.225.201.254:58836] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeaCxTeHLhVUuu8cVXwwPgAAAEw"]
[Tue Apr 21 03:47:18.516640 2026] [:error] [pid 35321:tid 35408] [client 4.225.201.254:31432] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeaCxjeHLhVUuu8cVXwwTQAAAFg"]
[Tue Apr 21 03:47:19.546629 2026] [:error] [pid 35415:tid 35437] [client 4.225.201.254:19525] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aeaCx0iqDinI4_22zzjY2AAAAMo"]
[Tue Apr 21 03:47:20.450543 2026] [:error] [pid 35320:tid 35339] [client 4.225.201.254:19557] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aeaCyIJW6fdXWO6agMFVcQAAAAk"]
[Tue Apr 21 03:47:21.456797 2026] [:error] [pid 35322:tid 35366] [client 4.225.201.254:57104] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aeaCyaPoAfV40BTfVKxgywAAAIk"]
[Tue Apr 21 03:47:22.094283 2026] [:error] [pid 35415:tid 35432] [client 4.225.201.254:31428] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aeaCykiqDinI4_22zzjY4QAAAMU"]
[Tue Apr 21 03:47:22.864047 2026] [:error] [pid 35415:tid 35441] [client 4.225.201.254:27240] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ol.php"] [unique_id "aeaCykiqDinI4_22zzjY5wAAAM4"]
[Tue Apr 21 03:47:23.588698 2026] [:error] [pid 35320:tid 35334] [client 4.225.201.254:15546] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeaCy4JW6fdXWO6agMFVcgAAAAQ"]
[Tue Apr 21 03:47:24.316023 2026] [:error] [pid 35415:tid 35444] [client 4.225.201.254:45328] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeaCzEiqDinI4_22zzjY7wAAANE"]
[Tue Apr 21 03:47:25.012932 2026] [:error] [pid 35322:tid 35376] [client 4.225.201.254:36445] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeaCzaPoAfV40BTfVKxg2QAAAJM"]
[Tue Apr 21 03:47:25.721449 2026] [:error] [pid 35321:tid 35402] [client 4.225.201.254:36413] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "aeaCzTeHLhVUuu8cVXwwWwAAAFI"]
[Tue Apr 21 03:47:26.287665 2026] [:error] [pid 35321:tid 35387] [client 4.225.201.254:7407] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aeaCzjeHLhVUuu8cVXwwXgAAAEM"]
[Tue Apr 21 03:47:27.029713 2026] [:error] [pid 35320:tid 35345] [client 4.225.201.254:7941] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aeaCz4JW6fdXWO6agMFVfwAAAA8"]
[Tue Apr 21 03:47:27.796777 2026] [:error] [pid 35320:tid 35351] [client 4.225.201.254:7619] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aeaCz4JW6fdXWO6agMFVgwAAABU"]
[Tue Apr 21 03:47:28.491180 2026] [:error] [pid 35322:tid 35369] [client 4.225.201.254:27839] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aeaC0KPoAfV40BTfVKxg4wAAAIw"]
[Tue Apr 21 03:47:29.192643 2026] [:error] [pid 35321:tid 35401] [client 4.225.201.254:18836] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeaC0TeHLhVUuu8cVXwwZgAAAFE"]
[Tue Apr 21 03:47:29.769729 2026] [:error] [pid 35322:tid 35361] [client 4.225.201.254:36408] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeaC0aPoAfV40BTfVKxg6QAAAIQ"]
[Tue Apr 21 03:47:30.491336 2026] [:error] [pid 35320:tid 35349] [client 4.225.201.254:37110] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeaC0oJW6fdXWO6agMFViQAAABM"]
[Tue Apr 21 03:47:32.013710 2026] [:error] [pid 35321:tid 35406] [client 4.225.201.254:57552] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "aeaC1DeHLhVUuu8cVXwwbQAAAFY"]
[Tue Apr 21 03:47:34.252140 2026] [:error] [pid 35321:tid 35401] [client 4.225.201.254:17205] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeaC1jeHLhVUuu8cVXwwcgAAAFE"]
[Tue Apr 21 03:47:35.746100 2026] [:error] [pid 35321:tid 35395] [client 4.225.201.254:40240] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeaC1zeHLhVUuu8cVXwwdgAAAEs"]
[Tue Apr 21 03:47:36.928690 2026] [:error] [pid 35415:tid 35444] [client 4.225.201.254:23390] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeaC2EiqDinI4_22zzjZNwAAANE"]
[Tue Apr 21 03:47:38.875519 2026] [:error] [pid 35322:tid 35357] [client 4.225.201.254:15165] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aeaC2qPoAfV40BTfVKxg_AAAAIA"]
[Tue Apr 21 03:47:40.048956 2026] [:error] [pid 35322:tid 35380] [client 4.225.201.254:20133] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeaC3KPoAfV40BTfVKxhBwAAAJc"]
[Tue Apr 21 03:47:41.649624 2026] [:error] [pid 35321:tid 35400] [client 4.225.201.254:45412] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeaC3TeHLhVUuu8cVXwwhQAAAFA"]
[Tue Apr 21 03:47:44.293801 2026] [:error] [pid 35415:tid 35433] [client 4.225.201.254:38346] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeaC4EiqDinI4_22zzjZXwAAAMY"]
[Tue Apr 21 03:47:45.102947 2026] [:error] [pid 35320:tid 35342] [client 4.225.201.254:35755] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "aeaC4YJW6fdXWO6agMFVtQAAAAw"]
[Tue Apr 21 03:47:46.340604 2026] [:error] [pid 35415:tid 35446] [client 4.225.201.254:38380] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeaC4kiqDinI4_22zzjZaQAAANM"]
[Tue Apr 21 03:47:47.138542 2026] [:error] [pid 35415:tid 35442] [client 4.225.201.254:33941] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeaC40iqDinI4_22zzjZcAAAAM8"]
[Tue Apr 21 03:47:48.106185 2026] [:error] [pid 35415:tid 35436] [client 4.225.201.254:8159] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeaC5EiqDinI4_22zzjZdAAAAMk"]
[Tue Apr 21 03:47:49.055058 2026] [:error] [pid 35321:tid 35400] [client 4.225.201.254:32658] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeaC5TeHLhVUuu8cVXwwmgAAAFA"]
[Tue Apr 21 03:47:50.061312 2026] [:error] [pid 35322:tid 35366] [client 4.225.201.254:7791] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aeaC5qPoAfV40BTfVKxhIAAAAIk"]
[Tue Apr 21 03:47:51.119691 2026] [:error] [pid 35322:tid 35367] [client 4.225.201.254:63575] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aeaC56PoAfV40BTfVKxhJAAAAIo"]
[Tue Apr 21 03:47:51.868715 2026] [:error] [pid 35322:tid 35372] [client 4.225.201.254:24049] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aeaC56PoAfV40BTfVKxhKAAAAI8"]
[Tue Apr 21 03:47:52.532091 2026] [:error] [pid 35320:tid 35337] [client 4.225.201.254:38308] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "aeaC6IJW6fdXWO6agMFVvgAAAAc"]
[Tue Apr 21 03:47:53.165502 2026] [:error] [pid 35321:tid 35386] [client 4.225.201.254:44814] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aeaC6TeHLhVUuu8cVXwwqwAAAEI"]
[Tue Apr 21 03:47:53.847560 2026] [:error] [pid 35320:tid 35348] [client 4.225.201.254:24702] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aeaC6YJW6fdXWO6agMFVwwAAABI"]
[Tue Apr 21 03:47:54.620079 2026] [:error] [pid 35322:tid 35370] [client 4.225.201.254:7443] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aeaC6qPoAfV40BTfVKxhLQAAAI0"]
[Tue Apr 21 03:47:55.202683 2026] [:error] [pid 35415:tid 35450] [client 4.225.201.254:64052] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "aeaC60iqDinI4_22zzjZmAAAANc"]
[Tue Apr 21 03:47:56.097267 2026] [:error] [pid 35415:tid 35450] [client 4.225.201.254:38291] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeaC7EiqDinI4_22zzjZpwAAANc"]
[Tue Apr 21 03:47:56.793051 2026] [:error] [pid 35415:tid 35430] [client 4.225.201.254:45974] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeaC7EiqDinI4_22zzjZtAAAAMM"]
[Tue Apr 21 03:47:57.749182 2026] [:error] [pid 35322:tid 35376] [client 4.225.201.254:64055] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeaC7aPoAfV40BTfVKxhMgAAAJM"]
[Tue Apr 21 03:47:58.389426 2026] [:error] [pid 35322:tid 35370] [client 4.225.201.254:45976] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plss3.php"] [unique_id "aeaC7qPoAfV40BTfVKxhNQAAAI0"]
[Tue Apr 21 03:47:59.011244 2026] [:error] [pid 35321:tid 35398] [client 4.225.201.254:26498] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeaC7zeHLhVUuu8cVXwwuAAAAE4"]
[Tue Apr 21 03:48:01.091163 2026] [:error] [pid 35415:tid 35438] [client 4.225.201.254:58171] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeaC8UiqDinI4_22zzjZ1QAAAMs"]
[Tue Apr 21 03:48:03.367266 2026] [:error] [pid 35321:tid 35388] [client 4.225.201.254:29183] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "aeaC8zeHLhVUuu8cVXwwxAAAAEQ"]
[Tue Apr 21 03:48:11.754598 2026] [:error] [pid 35320:tid 35354] [client 4.225.201.254:39427] [client 4.225.201.254] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aeaC-4JW6fdXWO6agMFWBwAAABg"]
[Tue Apr 21 03:48:17.134832 2026] [autoindex:error] [pid 35415:tid 35437] [client 4.225.201.254:16005] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 03:48:28.231012 2026] [:error] [pid 35415:tid 35444] [client 4.225.201.254:16005] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aeaDDEiqDinI4_22zzjaOwAAANE"]
[Tue Apr 21 03:48:28.980902 2026] [:error] [pid 35321:tid 35401] [client 4.225.201.254:25314] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aeaDDDeHLhVUuu8cVXwxEAAAAFE"]
[Tue Apr 21 03:48:30.147064 2026] [:error] [pid 35415:tid 35433] [client 4.225.201.254:57628] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aeaDDkiqDinI4_22zzjaPAAAAMY"]
[Tue Apr 21 03:48:31.238511 2026] [:error] [pid 35321:tid 35408] [client 4.225.201.254:27145] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aeaDDzeHLhVUuu8cVXwxGQAAAFg"]
[Tue Apr 21 03:48:31.922405 2026] [:error] [pid 35415:tid 35430] [client 4.225.201.254:7572] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aeaDD0iqDinI4_22zzjaQwAAAMM"]
[Tue Apr 21 03:48:32.680704 2026] [:error] [pid 35415:tid 35448] [client 4.225.201.254:35139] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aeaDEEiqDinI4_22zzjaRwAAANU"]
[Tue Apr 21 03:48:33.911562 2026] [:error] [pid 35321:tid 35408] [client 4.225.201.254:35194] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aeaDETeHLhVUuu8cVXwxLgAAAFg"]
[Tue Apr 21 03:48:34.542039 2026] [:error] [pid 35321:tid 35403] [client 4.225.201.254:57610] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aeaDEjeHLhVUuu8cVXwxLwAAAFM"]
[Tue Apr 21 03:48:35.207560 2026] [:error] [pid 35320:tid 35340] [client 4.225.201.254:35805] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeaDE4JW6fdXWO6agMFWTAAAAAo"]
[Tue Apr 21 03:48:36.219564 2026] [:error] [pid 35415:tid 35443] [client 4.225.201.254:8055] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeaDFEiqDinI4_22zzjaWQAAANA"]
[Tue Apr 21 03:48:36.892685 2026] [:error] [pid 35322:tid 35366] [client 4.225.201.254:24619] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeaDFKPoAfV40BTfVKxhcwAAAIk"]
[Tue Apr 21 03:48:37.708173 2026] [:error] [pid 35320:tid 35348] [client 4.225.201.254:34671] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeaDFYJW6fdXWO6agMFWUwAAABI"]
[Tue Apr 21 03:48:38.538830 2026] [:error] [pid 35321:tid 35389] [client 4.225.201.254:13337] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeaDFjeHLhVUuu8cVXwxOQAAAEU"]
[Tue Apr 21 03:48:39.386864 2026] [:error] [pid 35415:tid 35447] [client 4.225.201.254:8031] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeaDF0iqDinI4_22zzjaZAAAANQ"]
[Tue Apr 21 03:48:40.333098 2026] [:error] [pid 35415:tid 35427] [client 4.225.201.254:15579] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeaDGEiqDinI4_22zzjaagAAAMA"]
[Tue Apr 21 03:48:41.075756 2026] [:error] [pid 35415:tid 35448] [client 4.225.201.254:35199] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "aeaDGUiqDinI4_22zzjacAAAANU"]
[Tue Apr 21 03:48:41.795081 2026] [:error] [pid 35322:tid 35361] [client 4.225.201.254:13373] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeaDGaPoAfV40BTfVKxhdQAAAIQ"]
[Tue Apr 21 03:48:42.431786 2026] [:error] [pid 35415:tid 35451] [client 4.225.201.254:7615] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeaDGkiqDinI4_22zzjaeAAAANg"]
[Tue Apr 21 03:48:43.095797 2026] [:error] [pid 35320:tid 35352] [client 4.225.201.254:15589] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeaDG4JW6fdXWO6agMFWXQAAABY"]
[Tue Apr 21 03:48:43.804910 2026] [:error] [pid 35415:tid 35444] [client 4.225.201.254:24600] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "aeaDG0iqDinI4_22zzjafgAAANE"]
[Tue Apr 21 03:48:44.489140 2026] [:error] [pid 35415:tid 35443] [client 4.225.201.254:13347] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeaDHEiqDinI4_22zzjagAAAANA"]
[Tue Apr 21 03:48:45.577264 2026] [:error] [pid 35320:tid 35351] [client 4.225.201.254:7577] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeaDHYJW6fdXWO6agMFWbAAAABU"]
[Tue Apr 21 03:48:46.295535 2026] [:error] [pid 35415:tid 35430] [client 4.225.201.254:35147] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeaDHkiqDinI4_22zzjaiAAAAMM"]
[Tue Apr 21 03:48:47.106988 2026] [:error] [pid 35321:tid 35398] [client 4.225.201.254:17273] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aeaDHzeHLhVUuu8cVXwxQwAAAE4"]
[Tue Apr 21 03:48:47.767976 2026] [:error] [pid 35322:tid 35374] [client 4.225.201.254:35196] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeaDH6PoAfV40BTfVKxhewAAAJE"]
[Tue Apr 21 03:48:48.500525 2026] [:error] [pid 35320:tid 35334] [client 4.225.201.254:17257] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeaDIIJW6fdXWO6agMFWcgAAAAQ"]
[Tue Apr 21 03:48:49.043946 2026] [:error] [pid 35320:tid 35345] [client 4.225.201.254:33988] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeaDIYJW6fdXWO6agMFWcwAAAA8"]
[Tue Apr 21 03:48:49.753431 2026] [:error] [pid 35415:tid 35433] [client 4.225.201.254:35839] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-michan.php"] [unique_id "aeaDIUiqDinI4_22zzjamQAAAMY"]
[Tue Apr 21 03:48:50.374367 2026] [:error] [pid 35415:tid 35448] [client 4.225.201.254:34675] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aeaDIkiqDinI4_22zzjanwAAANU"]
[Tue Apr 21 03:48:50.997409 2026] [:error] [pid 35321:tid 35384] [client 4.225.201.254:34037] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aeaDIjeHLhVUuu8cVXwxYQAAAEA"]
[Tue Apr 21 03:48:51.719305 2026] [:error] [pid 35322:tid 35369] [client 4.225.201.254:35179] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aeaDI6PoAfV40BTfVKxhkgAAAIw"]
[Tue Apr 21 03:48:52.927076 2026] [:error] [pid 35321:tid 35394] [client 4.225.201.254:17265] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aeaDJDeHLhVUuu8cVXwxcAAAAEo"]
[Tue Apr 21 03:48:54.503770 2026] [:error] [pid 35415:tid 35428] [client 4.225.201.254:8050] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeaDJkiqDinI4_22zzjatAAAAME"]
[Tue Apr 21 03:48:56.632751 2026] [:error] [pid 35320:tid 35337] [client 4.225.201.254:25972] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeaDKIJW6fdXWO6agMFWewAAAAc"]
[Tue Apr 21 03:48:59.266586 2026] [:error] [pid 35415:tid 35431] [client 4.225.201.254:35145] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeaDK0iqDinI4_22zzjawgAAAMQ"]
[Tue Apr 21 03:49:01.361947 2026] [:error] [pid 35415:tid 35428] [client 4.225.201.254:17200] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeaDLUiqDinI4_22zzjayAAAAME"]
[Tue Apr 21 03:49:02.974832 2026] [:error] [pid 35322:tid 35368] [client 4.225.201.254:34039] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "aeaDLqPoAfV40BTfVKxhqwAAAIs"]
[Tue Apr 21 03:49:03.804786 2026] [:error] [pid 35322:tid 35377] [client 4.225.201.254:25962] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "aeaDL6PoAfV40BTfVKxhrQAAAJQ"]
[Tue Apr 21 03:49:04.701620 2026] [:error] [pid 35322:tid 35373] [client 4.225.201.254:8014] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "aeaDMKPoAfV40BTfVKxhsgAAAJA"]
[Tue Apr 21 03:49:05.517861 2026] [:error] [pid 35322:tid 35361] [client 4.225.201.254:7591] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "aeaDMaPoAfV40BTfVKxhuAAAAIQ"]
[Tue Apr 21 03:49:06.492549 2026] [:error] [pid 35322:tid 35359] [client 4.225.201.254:17184] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "aeaDMqPoAfV40BTfVKxhvwAAAII"]
[Tue Apr 21 03:49:07.234329 2026] [:error] [pid 35415:tid 35429] [client 4.225.201.254:34013] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "aeaDM0iqDinI4_22zzja1QAAAMI"]
[Tue Apr 21 03:49:07.968002 2026] [:error] [pid 35322:tid 35365] [client 4.225.201.254:35798] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "aeaDM6PoAfV40BTfVKxhxAAAAIg"]
[Tue Apr 21 03:49:09.014361 2026] [:error] [pid 35322:tid 35358] [client 4.225.201.254:30827] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "aeaDNaPoAfV40BTfVKxhywAAAIE"]
[Tue Apr 21 03:49:09.885633 2026] [:error] [pid 35321:tid 35405] [client 4.225.201.254:7599] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aeaDNTeHLhVUuu8cVXwxpAAAAFU"]
[Tue Apr 21 03:49:10.941384 2026] [:error] [pid 35415:tid 35445] [client 4.225.201.254:63589] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aeaDNkiqDinI4_22zzja3gAAANI"]
[Tue Apr 21 03:49:12.051896 2026] [:error] [pid 35415:tid 35433] [client 4.225.201.254:17279] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aeaDOEiqDinI4_22zzja4wAAAMY"]
[Tue Apr 21 03:49:12.868220 2026] [:error] [pid 35415:tid 35429] [client 4.225.201.254:7612] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "aeaDOEiqDinI4_22zzja5gAAAMI"]
[Tue Apr 21 03:49:13.537165 2026] [:error] [pid 35415:tid 35450] [client 4.225.201.254:25981] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeaDOUiqDinI4_22zzja6AAAANc"]
[Tue Apr 21 03:49:14.723496 2026] [:error] [pid 35320:tid 35350] [client 4.225.201.254:30823] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeaDOoJW6fdXWO6agMFWlQAAABQ"]
[Tue Apr 21 03:49:15.614870 2026] [:error] [pid 35321:tid 35388] [client 4.225.201.254:16440] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeaDOzeHLhVUuu8cVXwxsQAAAEQ"]
[Tue Apr 21 03:49:16.486666 2026] [:error] [pid 35321:tid 35401] [client 4.225.201.254:7583] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "aeaDPDeHLhVUuu8cVXwxuAAAAFE"]
[Tue Apr 21 03:49:17.421764 2026] [:error] [pid 35322:tid 35365] [client 4.225.201.254:30785] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeaDPaPoAfV40BTfVKxh5wAAAIg"]
[Tue Apr 21 03:49:18.554422 2026] [:error] [pid 35415:tid 35427] [client 4.225.201.254:35792] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeaDPkiqDinI4_22zzja8gAAAMA"]
[Tue Apr 21 03:49:19.608181 2026] [:error] [pid 35415:tid 35442] [client 4.225.201.254:17254] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeaDP0iqDinI4_22zzja_AAAAM8"]
[Tue Apr 21 03:49:20.931441 2026] [:error] [pid 35415:tid 35438] [client 4.225.201.254:7581] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeaDQEiqDinI4_22zzjbAwAAAMs"]
[Tue Apr 21 03:49:21.915492 2026] [:error] [pid 35415:tid 35448] [client 4.225.201.254:7603] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeaDQUiqDinI4_22zzjbCAAAANU"]
[Tue Apr 21 03:49:23.066392 2026] [:error] [pid 35320:tid 35345] [client 4.225.201.254:20759] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeaDQ4JW6fdXWO6agMFWpgAAAA8"]
[Tue Apr 21 03:49:25.115720 2026] [:error] [pid 35320:tid 35347] [client 4.225.201.254:38915] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeaDRYJW6fdXWO6agMFWrQAAABE"]
[Tue Apr 21 03:49:26.563923 2026] [:error] [pid 35322:tid 35357] [client 4.225.201.254:7814] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "aeaDRqPoAfV40BTfVKxh_AAAAIA"]
[Tue Apr 21 03:49:30.738586 2026] [autoindex:error] [pid 35322:tid 35359] [client 4.225.201.254:7564] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 03:49:38.621718 2026] [:error] [pid 35322:tid 35367] [client 4.225.201.254:7564] [client 4.225.201.254] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeaDUqPoAfV40BTfVKxiGgAAAIo"]
[Tue Apr 21 03:49:42.803556 2026] [autoindex:error] [pid 35321:tid 35397] [client 4.225.201.254:38936] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 03:49:43.201904 2026] [autoindex:error] [pid 35321:tid 35403] [client 4.225.201.254:38936] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 03:49:49.926925 2026] [:error] [pid 35321:tid 35408] [client 4.225.201.254:38936] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/admin.php"] [unique_id "aeaDXTeHLhVUuu8cVXwyJwAAAFg"]
[Tue Apr 21 03:49:50.984591 2026] [:error] [pid 35321:tid 35406] [client 4.225.201.254:37723] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/admin.php"] [unique_id "aeaDXjeHLhVUuu8cVXwyLQAAAFY"]
[Tue Apr 21 03:49:51.719658 2026] [:error] [pid 35415:tid 35443] [client 4.225.201.254:17574] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/admin.php"] [unique_id "aeaDX0iqDinI4_22zzjbbgAAANA"]
[Tue Apr 21 03:49:53.073714 2026] [:error] [pid 35415:tid 35437] [client 4.225.201.254:40749] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/admin.php"] [unique_id "aeaDYUiqDinI4_22zzjbdQAAAMo"]
[Tue Apr 21 03:49:54.300717 2026] [:error] [pid 35415:tid 35428] [client 4.225.201.254:17575] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aeaDYkiqDinI4_22zzjbfAAAAME"]
[Tue Apr 21 03:49:55.614851 2026] [:error] [pid 35321:tid 35396] [client 4.225.201.254:44870] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aeaDYzeHLhVUuu8cVXwyNgAAAEw"]
[Tue Apr 21 03:49:56.461984 2026] [:error] [pid 35322:tid 35375] [client 4.225.201.254:28513] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aeaDZKPoAfV40BTfVKxiawAAAJI"]
[Tue Apr 21 03:49:57.258312 2026] [:error] [pid 35415:tid 35444] [client 4.225.201.254:42850] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aeaDZUiqDinI4_22zzjblgAAANE"]
[Tue Apr 21 03:49:58.239959 2026] [:error] [pid 35321:tid 35408] [client 4.225.201.254:58103] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeaDZjeHLhVUuu8cVXwyQQAAAFg"]
[Tue Apr 21 03:49:59.319335 2026] [:error] [pid 35321:tid 35407] [client 4.225.201.254:28496] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeaDZzeHLhVUuu8cVXwyRAAAAFc"]
[Tue Apr 21 03:50:00.224360 2026] [:error] [pid 35320:tid 35341] [client 4.225.201.254:57070] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeaDaIJW6fdXWO6agMFXHwAAAAs"]
[Tue Apr 21 03:50:01.066323 2026] [:error] [pid 35321:tid 35403] [client 4.225.201.254:63275] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeaDaTeHLhVUuu8cVXwySQAAAFM"]
[Tue Apr 21 03:50:01.787805 2026] [:error] [pid 35321:tid 35401] [client 4.225.201.254:28496] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aeaDaTeHLhVUuu8cVXwyTgAAAFE"]
[Tue Apr 21 03:50:02.618766 2026] [:error] [pid 35415:tid 35430] [client 4.225.201.254:27871] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aeaDakiqDinI4_22zzjbogAAAMM"]
[Tue Apr 21 03:50:03.891779 2026] [:error] [pid 35322:tid 35379] [client 4.225.201.254:27865] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aeaDa6PoAfV40BTfVKxicQAAAJY"]
[Tue Apr 21 03:50:04.672079 2026] [:error] [pid 35415:tid 35430] [client 4.225.201.254:57056] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aeaDbEiqDinI4_22zzjbrQAAAMM"]
[Tue Apr 21 03:50:05.257321 2026] [:error] [pid 35320:tid 35336] [client 4.225.201.254:27870] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aeaDbYJW6fdXWO6agMFXLAAAAAY"]
[Tue Apr 21 03:50:06.090349 2026] [:error] [pid 35320:tid 35338] [client 4.225.201.254:57026] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aeaDboJW6fdXWO6agMFXMAAAAAg"]
[Tue Apr 21 03:50:06.871302 2026] [:error] [pid 35320:tid 35330] [client 4.225.201.254:20167] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aeaDboJW6fdXWO6agMFXMgAAAAA"]
[Tue Apr 21 03:50:07.860861 2026] [:error] [pid 35321:tid 35396] [client 4.225.201.254:37740] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfashell.php"] [unique_id "aeaDbzeHLhVUuu8cVXwyVAAAAEw"]
[Tue Apr 21 03:50:09.112488 2026] [:error] [pid 35322:tid 35375] [client 4.225.201.254:20217] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeaDcaPoAfV40BTfVKxigQAAAJI"]
[Tue Apr 21 03:50:09.779206 2026] [:error] [pid 35415:tid 35451] [client 4.225.201.254:42841] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeaDcUiqDinI4_22zzjbwAAAANg"]
[Tue Apr 21 03:50:11.354594 2026] [:error] [pid 35321:tid 35393] [client 4.225.201.254:17548] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeaDczeHLhVUuu8cVXwyWQAAAEk"]
[Tue Apr 21 03:50:12.286939 2026] [:error] [pid 35322:tid 35368] [client 4.225.201.254:7504] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aeaDdKPoAfV40BTfVKxihAAAAIs"]
[Tue Apr 21 03:50:13.077071 2026] [:error] [pid 35322:tid 35357] [client 4.225.201.254:29533] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeaDdaPoAfV40BTfVKxihQAAAIA"]
[Tue Apr 21 03:50:14.431570 2026] [:error] [pid 35320:tid 35333] [client 4.225.201.254:28499] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeaDdoJW6fdXWO6agMFXWgAAAAM"]
[Tue Apr 21 03:50:16.909334 2026] [:error] [pid 35321:tid 35404] [client 4.225.201.254:44887] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeaDeDeHLhVUuu8cVXwyjQAAAFQ"]
[Tue Apr 21 03:50:19.218275 2026] [:error] [pid 35320:tid 35345] [client 4.225.201.254:23982] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aeaDe4JW6fdXWO6agMFXYQAAAA8"]
[Tue Apr 21 03:50:21.121004 2026] [:error] [pid 35415:tid 35446] [client 4.225.201.254:20209] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeaDfUiqDinI4_22zzjb8wAAANM"]
[Tue Apr 21 03:50:22.315842 2026] [:error] [pid 35321:tid 35399] [client 4.225.201.254:23997] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeaDfjeHLhVUuu8cVXwyngAAAE8"]
[Tue Apr 21 03:50:23.377010 2026] [:error] [pid 35415:tid 35444] [client 4.225.201.254:23953] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeaDf0iqDinI4_22zzjb_QAAANE"]
[Tue Apr 21 03:50:24.568095 2026] [:error] [pid 35415:tid 35446] [client 4.225.201.254:63410] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aeaDgEiqDinI4_22zzjcAgAAANM"]
[Tue Apr 21 03:50:25.385273 2026] [:error] [pid 35415:tid 35427] [client 4.225.201.254:22097] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeaDgUiqDinI4_22zzjcBQAAAMA"]
[Tue Apr 21 03:50:27.484439 2026] [:error] [pid 35415:tid 35440] [client 4.225.201.254:44873] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeaDg0iqDinI4_22zzjcEQAAAM0"]
[Tue Apr 21 03:50:28.691596 2026] [:error] [pid 35321:tid 35406] [client 4.225.201.254:22137] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeaDhDeHLhVUuu8cVXwywQAAAFY"]
[Tue Apr 21 03:50:30.418687 2026] [:error] [pid 35321:tid 35407] [client 4.225.201.254:25883] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g.php"] [unique_id "aeaDhjeHLhVUuu8cVXwyygAAAFc"]
[Tue Apr 21 03:50:32.190780 2026] [:error] [pid 35321:tid 35397] [client 4.225.201.254:22080] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeaDiDeHLhVUuu8cVXwy1AAAAE0"]
[Tue Apr 21 03:50:33.103774 2026] [:error] [pid 35321:tid 35392] [client 4.225.201.254:63362] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeaDiTeHLhVUuu8cVXwy2gAAAEg"]
[Tue Apr 21 03:50:34.065668 2026] [:error] [pid 35415:tid 35440] [client 4.225.201.254:25871] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeaDikiqDinI4_22zzjcJQAAAM0"]
[Tue Apr 21 03:50:34.864028 2026] [:error] [pid 35321:tid 35406] [client 4.225.201.254:22118] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aeaDijeHLhVUuu8cVXwy4QAAAFY"]
[Tue Apr 21 03:50:36.857609 2026] [:error] [pid 35322:tid 35363] [client 4.225.201.254:58076] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeaDjKPoAfV40BTfVKxinwAAAIY"]
[Tue Apr 21 03:50:38.374988 2026] [:error] [pid 35415:tid 35427] [client 4.225.201.254:20753] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeaDjkiqDinI4_22zzjcOwAAAMA"]
[Tue Apr 21 03:50:39.873049 2026] [:error] [pid 35321:tid 35404] [client 4.225.201.254:63398] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeaDjzeHLhVUuu8cVXwy9AAAAFQ"]
[Tue Apr 21 03:50:41.425687 2026] [:error] [pid 35321:tid 35404] [client 4.225.201.254:63395] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aeaDkTeHLhVUuu8cVXwzBwAAAFQ"]
[Tue Apr 21 03:50:42.195195 2026] [:error] [pid 35321:tid 35387] [client 4.225.201.254:63367] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeaDkjeHLhVUuu8cVXwzDQAAAEM"]
[Tue Apr 21 03:50:43.330490 2026] [:error] [pid 35322:tid 35358] [client 4.225.201.254:35125] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeaDk6PoAfV40BTfVKxitwAAAIE"]
[Tue Apr 21 03:50:44.114817 2026] [:error] [pid 35322:tid 35374] [client 4.225.201.254:63418] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeaDlKPoAfV40BTfVKxiuwAAAJE"]
[Tue Apr 21 03:50:44.908034 2026] [:error] [pid 35415:tid 35443] [client 4.225.201.254:14003] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ew.php"] [unique_id "aeaDlEiqDinI4_22zzjcdAAAANA"]
[Tue Apr 21 03:50:45.650273 2026] [:error] [pid 35415:tid 35449] [client 4.225.201.254:42780] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aeaDlUiqDinI4_22zzjceQAAANY"]
[Tue Apr 21 03:50:46.699253 2026] [:error] [pid 35415:tid 35450] [client 4.225.201.254:13995] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aeaDlkiqDinI4_22zzjcfgAAANc"]
[Tue Apr 21 03:50:47.329523 2026] [:error] [pid 35415:tid 35438] [client 4.225.201.254:22119] [client 4.225.201.254] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file21.php"] [unique_id "aeaDl0iqDinI4_22zzjcgwAAAMs"]
[Tue Apr 21 03:50:53.173886 2026] [autoindex:error] [pid 35320:tid 35335] [client 4.225.201.254:23964] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 04:00:26.475768 2026] [:error] [pid 35322:tid 35362] [client 185.194.178.15:59975] [client 185.194.178.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeaF2qPoAfV40BTfVKxolwAAAIU"]
[Tue Apr 21 04:00:35.623311 2026] [proxy_fcgi:error] [pid 35322:tid 35362] [client 185.194.178.15:59975] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 21 07:28:19.001315 2026] [:error] [pid 35322:tid 35378] [client 65.108.2.171:61142] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aea2k6PoAfV40BTfVKx_zAAAAJU"]
[Tue Apr 21 07:28:21.546009 2026] [:error] [pid 4823:tid 4874] [client 65.108.2.171:61156] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aea2lfc8mke3PfHqsxGy0QAAAZU"]
[Tue Apr 21 07:28:24.122365 2026] [:error] [pid 35320:tid 35339] [client 65.108.2.171:61158] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aea2mIJW6fdXWO6agMGWyQAAAAk"]
[Tue Apr 21 07:28:26.806756 2026] [:error] [pid 4823:tid 4860] [client 65.108.2.171:26844] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aea2mvc8mke3PfHqsxGy1QAAAYc"]
[Tue Apr 21 07:28:29.515155 2026] [:error] [pid 4823:tid 4854] [client 65.108.2.171:26850] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aea2nfc8mke3PfHqsxGy2gAAAYE"]
[Tue Apr 21 07:28:32.163034 2026] [:error] [pid 35415:tid 35438] [client 65.108.2.171:26856] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aea2oEiqDinI4_22zzgDwQAAAMs"]
[Tue Apr 21 07:28:34.712427 2026] [:error] [pid 35415:tid 35428] [client 65.108.2.171:26862] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aea2okiqDinI4_22zzgDyQAAAME"]
[Tue Apr 21 07:28:37.255802 2026] [:error] [pid 4822:tid 4841] [client 65.108.2.171:47442] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aea2pSAteFQFwS_23JmsFAAAAU8"]
[Tue Apr 21 07:28:39.707024 2026] [:error] [pid 4822:tid 4843] [client 65.108.2.171:47456] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aea2pyAteFQFwS_23JmsFQAAAVE"]
[Tue Apr 21 07:28:42.291494 2026] [:error] [pid 4823:tid 4874] [client 65.108.2.171:47460] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aea2qvc8mke3PfHqsxGzEgAAAZU"]
[Tue Apr 21 07:28:44.730006 2026] [:error] [pid 4777:tid 4802] [client 65.108.2.171:47486] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aea2rKxXur6bykKyLZQhSwAAAQ4"]
[Tue Apr 21 07:28:47.442794 2026] [:error] [pid 35321:tid 35396] [client 65.108.2.171:48140] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aea2rzeHLhVUuu8cVXxTPgAAAEw"]
[Tue Apr 21 07:28:50.163183 2026] [:error] [pid 4823:tid 4858] [client 65.108.2.171:48148] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aea2svc8mke3PfHqsxGzHgAAAYU"]
[Tue Apr 21 07:28:52.758776 2026] [:error] [pid 5377:tid 5397] [client 65.108.2.171:48154] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aea2tLBKychFlrHBdvssPwAAAcs"]
[Tue Apr 21 07:28:55.225294 2026] [:error] [pid 4777:tid 4796] [client 65.108.2.171:26366] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aea2t6xXur6bykKyLZQhTwAAAQg"]
[Tue Apr 21 07:28:57.845106 2026] [:error] [pid 4823:tid 4855] [client 65.108.2.171:26378] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aea2ufc8mke3PfHqsxGzKgAAAYI"]
[Tue Apr 21 07:29:00.413364 2026] [:error] [pid 4777:tid 4802] [client 65.108.2.171:26392] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aea2vKxXur6bykKyLZQhUQAAAQ4"]
[Tue Apr 21 07:29:02.850931 2026] [:error] [pid 35320:tid 35340] [client 65.108.2.171:26402] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aea2voJW6fdXWO6agMGW3gAAAAo"]
[Tue Apr 21 07:29:05.465697 2026] [:error] [pid 4823:tid 4868] [client 65.108.2.171:28640] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aea2wfc8mke3PfHqsxGzTAAAAY8"]
[Tue Apr 21 07:29:08.154198 2026] [:error] [pid 5377:tid 5386] [client 65.108.2.171:28646] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aea2xLBKychFlrHBdvssRwAAAcA"]
[Tue Apr 21 07:29:10.843212 2026] [:error] [pid 35320:tid 35335] [client 65.108.2.171:28654] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aea2xoJW6fdXWO6agMGW6wAAAAU"]
[Tue Apr 21 07:29:13.406479 2026] [:error] [pid 4823:tid 4864] [client 65.108.2.171:28658] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aea2yfc8mke3PfHqsxGzXgAAAYs"]
[Tue Apr 21 07:29:57.249627 2026] [:error] [pid 35320:tid 35345] [client 65.108.2.171:63546] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aea29YJW6fdXWO6agMGXLgAAAA8"]
[Tue Apr 21 07:29:59.766120 2026] [:error] [pid 4823:tid 4861] [client 65.108.2.171:63562] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aea29_c8mke3PfHqsxGzvQAAAYg"]
[Tue Apr 21 07:30:02.150472 2026] [:error] [pid 4823:tid 4855] [client 65.108.2.171:63564] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aea2-vc8mke3PfHqsxGzwQAAAYI"]
[Tue Apr 21 07:30:04.564989 2026] [:error] [pid 4823:tid 4862] [client 65.108.2.171:63570] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aea2_Pc8mke3PfHqsxGzxwAAAYk"]
[Tue Apr 21 07:30:07.128169 2026] [:error] [pid 35320:tid 35345] [client 65.108.2.171:49072] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aea2_4JW6fdXWO6agMGXOwAAAA8"]
[Tue Apr 21 07:30:09.544930 2026] [:error] [pid 4777:tid 4797] [client 65.108.2.171:49084] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aea3AaxXur6bykKyLZQhawAAAQk"]
[Tue Apr 21 07:30:12.004186 2026] [:error] [pid 4777:tid 4800] [client 65.108.2.171:49086] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aea3BKxXur6bykKyLZQhbQAAAQw"]
[Tue Apr 21 07:30:14.440599 2026] [:error] [pid 5377:tid 5407] [client 65.108.2.171:49098] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aea3BrBKychFlrHBdvss3gAAAdU"]
[Tue Apr 21 07:30:17.049469 2026] [:error] [pid 35415:tid 35439] [client 65.108.2.171:62618] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aea3CUiqDinI4_22zzgD4QAAAMw"]
[Tue Apr 21 07:30:19.446687 2026] [:error] [pid 4823:tid 4860] [client 65.108.2.171:62624] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aea3C_c8mke3PfHqsxGz1gAAAYc"]
[Tue Apr 21 07:30:21.992889 2026] [:error] [pid 4777:tid 4796] [client 65.108.2.171:62626] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aea3DaxXur6bykKyLZQhcQAAAQg"]
[Tue Apr 21 07:30:24.584626 2026] [:error] [pid 4777:tid 4794] [client 65.108.2.171:62628] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aea3EKxXur6bykKyLZQhcwAAAQY"]
[Tue Apr 21 07:30:26.992071 2026] [:error] [pid 4823:tid 4877] [client 65.108.2.171:64938] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aea3Evc8mke3PfHqsxGz4AAAAZg"]
[Tue Apr 21 07:30:29.640405 2026] [:error] [pid 5377:tid 5388] [client 65.108.2.171:64952] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aea3FbBKychFlrHBdvss5QAAAcI"]
[Tue Apr 21 07:30:32.145738 2026] [:error] [pid 35415:tid 35443] [client 65.108.2.171:64960] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aea3GEiqDinI4_22zzgD5gAAANA"]
[Tue Apr 21 07:30:34.720604 2026] [:error] [pid 4777:tid 4807] [client 65.108.2.171:64964] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aea3GqxXur6bykKyLZQhfAAAARM"]
[Tue Apr 21 07:30:37.072372 2026] [:error] [pid 35321:tid 35396] [client 65.108.2.171:35666] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aea3HTeHLhVUuu8cVXxTYwAAAEw"]
[Tue Apr 21 07:30:39.602569 2026] [:error] [pid 35322:tid 35357] [client 65.108.2.171:35678] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aea3H6PoAfV40BTfVKyAIwAAAIA"]
[Tue Apr 21 07:30:42.147284 2026] [:error] [pid 35321:tid 35399] [client 65.108.2.171:35684] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aea3IjeHLhVUuu8cVXxTbAAAAE8"]
[Tue Apr 21 07:30:44.576883 2026] [:error] [pid 35415:tid 35429] [client 65.108.2.171:35694] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aea3JEiqDinI4_22zzgD7QAAAMI"]
[Tue Apr 21 07:30:46.942707 2026] [:error] [pid 4823:tid 4876] [client 65.108.2.171:2950] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aea3Jvc8mke3PfHqsxGz9gAAAZc"]
[Tue Apr 21 07:30:49.402160 2026] [:error] [pid 5377:tid 5406] [client 65.108.2.171:2960] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aea3KbBKychFlrHBdvss7gAAAdQ"]
[Tue Apr 21 07:30:51.945411 2026] [:error] [pid 35320:tid 35349] [client 65.108.2.171:2974] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aea3K4JW6fdXWO6agMGXWQAAABM"]
[Tue Apr 21 07:31:36.584322 2026] [:error] [pid 35320:tid 35354] [client 65.108.2.171:29912] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aea3WIJW6fdXWO6agMGXdQAAABg"]
[Tue Apr 21 07:31:39.227986 2026] [:error] [pid 35321:tid 35392] [client 65.108.2.171:29914] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aea3WzeHLhVUuu8cVXxThwAAAEg"]
[Tue Apr 21 07:31:41.880920 2026] [:error] [pid 4777:tid 4805] [client 65.108.2.171:29920] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aea3XaxXur6bykKyLZQhmwAAARE"]
[Tue Apr 21 07:31:44.385194 2026] [:error] [pid 5377:tid 5410] [client 65.108.2.171:29930] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aea3YLBKychFlrHBdvstIwAAAdg"]
[Tue Apr 21 07:31:46.884279 2026] [:error] [pid 35415:tid 35440] [client 65.108.2.171:60162] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aea3YkiqDinI4_22zzgD_wAAAM0"]
[Tue Apr 21 08:36:49.705865 2026] [:error] [pid 35320:tid 35334] [client 182.44.8.254:36578] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aebGoYJW6fdXWO6agMGpswAAAAQ"]
[Tue Apr 21 11:32:07.286425 2026] [:error] [pid 4822:tid 4840] [client 43.167.236.228:48872] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aebvtyAteFQFwS_23JkCtQAAAU4"]
[Tue Apr 21 11:39:18.468649 2026] [:error] [pid 35321:tid 35403] [client 185.194.178.33:63715] [client 185.194.178.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.33, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aebxZjeHLhVUuu8cVXxuDAAAAFM"]
[Tue Apr 21 11:39:19.466776 2026] [proxy_fcgi:error] [pid 35321:tid 35403] [client 185.194.178.33:63715] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 21 12:05:38.479639 2026] [:error] [pid 5377:tid 5393] [client 185.194.178.2:39817] [client 185.194.178.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.2, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeb3krBKychFlrHBdvuDUwAAAcc"]
[Tue Apr 21 12:05:39.616759 2026] [proxy_fcgi:error] [pid 5377:tid 5393] [client 185.194.178.2:39817] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 21 13:25:16.906203 2026] [:error] [pid 4822:tid 4836] [client 185.194.178.49:50573] [client 185.194.178.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.49, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aecKPCAteFQFwS_23JlBlwAAAUo"]
[Tue Apr 21 13:25:18.000958 2026] [proxy_fcgi:error] [pid 4822:tid 4836] [client 185.194.178.49:50573] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 21 14:02:14.819440 2026] [:error] [pid 4777:tid 4807] [client 185.194.178.6:54685] [client 185.194.178.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.6, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aecS5qxXur6bykKyLZRiGAAAARM"]
[Tue Apr 21 14:02:15.828913 2026] [proxy_fcgi:error] [pid 4777:tid 4807] [client 185.194.178.6:54685] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 21 14:56:22.083891 2026] [:error] [pid 4822:tid 4844] [client 182.44.12.37:40425] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aecfliAteFQFwS_23JmR1gAAAVI"]
[Tue Apr 21 15:14:42.978954 2026] [:error] [pid 5377:tid 5390] [client 43.157.168.43:46388] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aecj4rBKychFlrHBdvvOqAAAAcQ"]
[Tue Apr 21 15:37:35.972985 2026] [:error] [pid 54080:tid 54106] [client 213.35.109.170:57002] [client 213.35.109.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-manager/initialize"] [unique_id "aecpP4zEbQHHxtmWbaZUJAAAAtg"]
[Tue Apr 21 15:37:36.169551 2026] [:error] [pid 5377:tid 5390] [client 213.35.109.170:53474] [client 213.35.109.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-manager/initialize"] [unique_id "aecpQLBKychFlrHBdvvlKQAAAcQ"]
[Tue Apr 21 16:22:49.069877 2026] [:error] [pid 35321:tid 35401] [client 185.194.178.36:47849] [client 185.194.178.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aecz2TeHLhVUuu8cVXzazAAAAFE"]
[Tue Apr 21 16:22:50.117645 2026] [proxy_fcgi:error] [pid 35321:tid 35401] [client 185.194.178.36:47849] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 21 17:21:01.231011 2026] [:error] [pid 35321:tid 35404] [client 103.8.114.42:39812] [client 103.8.114.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.8.114.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aedBfTeHLhVUuu8cVXz19QAAAFQ"]
[Tue Apr 21 17:21:10.475152 2026] [:error] [pid 53731:tid 53759] [client 103.8.114.42:56676] [client 103.8.114.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.8.114.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aedBhl2I9THUR-bRVGwIzQAAAhc"]
[Tue Apr 21 17:21:20.930250 2026] [:error] [pid 4777:tid 4801] [client 103.8.114.42:57530] [client 103.8.114.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.8.114.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aedBkKxXur6bykKyLZSU_QAAAQ0"]
[Tue Apr 21 17:21:31.343799 2026] [:error] [pid 54080:tid 54083] [client 103.8.114.42:61442] [client 103.8.114.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.8.114.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aedBm4zEbQHHxtmWbaaDlgAAAsE"]
[Tue Apr 21 17:21:41.865068 2026] [:error] [pid 54080:tid 54091] [client 103.8.114.42:60755] [client 103.8.114.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.8.114.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aedBpYzEbQHHxtmWbaaDtQAAAsk"]
[Tue Apr 21 17:21:52.443295 2026] [:error] [pid 53731:tid 53735] [client 103.8.114.42:4067] [client 103.8.114.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.8.114.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aedBsF2I9THUR-bRVGwJgQAAAgA"]
[Tue Apr 21 17:25:58.286447 2026] [:error] [pid 35321:tid 35403] [client 185.194.178.9:59939] [client 185.194.178.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.9, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aedCpjeHLhVUuu8cVXz4AwAAAFM"]
[Tue Apr 21 17:25:59.332717 2026] [proxy_fcgi:error] [pid 35321:tid 35403] [client 185.194.178.9:59939] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 21 18:52:49.623313 2026] [:error] [pid 53731:tid 53746] [client 106.192.34.162:58694] [client 106.192.34.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.34.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aedXAV2I9THUR-bRVGwzBwAAAgs"]
[Tue Apr 21 19:16:37.755897 2026] [:error] [pid 35320:tid 35350] [client 106.192.34.162:51841] [client 106.192.34.162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aedclYJW6fdXWO6agMGPQgAAABQ"]
[Tue Apr 21 22:21:16.846869 2026] [:error] [pid 53978:tid 53983] [client 43.135.115.233:59542] [client 43.135.115.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeeH3J1ivsR4hcOSQbY3ygAAAoM"]
[Wed Apr 22 00:39:38.075685 2026] [:error] [pid 53731:tid 53752] [client 81.167.26.57:13728] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aeeoSl2I9THUR-bRVGy-0wAAAhA"]
[Wed Apr 22 00:39:42.626244 2026] [:error] [pid 35321:tid 35389] [client 81.167.26.57:13447] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aeeoTjeHLhVUuu8cVXw2zQAAAEU"]
[Wed Apr 22 01:45:35.813275 2026] [:error] [pid 53731:tid 53736] [client 43.130.49.80:50992] [client 43.130.49.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aee3v12I9THUR-bRVGzZrgAAAgE"]
[Wed Apr 22 03:57:29.677288 2026] [:error] [pid 21682:tid 21737] [client 43.140.247.223:33300] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aefWqZlXWQZUlmPHS3rMkQAAAE4"]
[Wed Apr 22 05:08:10.725531 2026] [:error] [pid 21788:tid 21790] [client 43.135.167.33:37658] [client 43.135.167.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aefnOn7OM27rzVpef25legAAAMA"]
[Wed Apr 22 07:19:11.432115 2026] [:error] [pid 21683:tid 21767] [client 45.137.126.34:37423] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aegF71ZBWT-0diZyYyablQAAAJE"]
[Wed Apr 22 07:19:17.761561 2026] [:error] [pid 31755:tid 31768] [client 45.137.126.20:43091] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aegF9Qz2mYMkg3X8q1tsJQAAAgU"]
[Wed Apr 22 07:19:28.638358 2026] [:error] [pid 31755:tid 31766] [client 45.137.126.24:37313] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aegGAAz2mYMkg3X8q1tsRQAAAgM"]
[Wed Apr 22 07:19:34.919755 2026] [:error] [pid 23041:tid 23063] [client 45.137.126.5:29685] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aegGBkTXx_lUa7xwAb7xLAAAARM"]
[Wed Apr 22 07:19:46.278475 2026] [:error] [pid 21683:tid 21766] [client 45.137.126.18:42769] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aegGElZBWT-0diZyYyabsQAAAJA"]
[Wed Apr 22 07:19:49.390260 2026] [:error] [pid 31949:tid 31954] [client 45.137.126.46:32445] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aegGFX2WtGZh5JfbMUdAjwAAAwI"]
[Wed Apr 22 07:19:50.383464 2026] [:error] [pid 31706:tid 31712] [client 45.137.126.24:39531] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aegGFrGSe9Rnd4Q_z1ihHAAAAcM"]
[Wed Apr 22 07:19:51.371365 2026] [:error] [pid 21683:tid 21763] [client 45.137.126.7:22361] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aegGF1ZBWT-0diZyYyabtAAAAI0"]
[Wed Apr 22 07:19:52.351481 2026] [:error] [pid 23041:tid 23046] [client 45.137.126.48:39619] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aegGGETXx_lUa7xwAb7xQQAAAQI"]
[Wed Apr 22 07:19:53.340038 2026] [:error] [pid 23041:tid 23057] [client 45.137.126.44:36475] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aegGGUTXx_lUa7xwAb7xRQAAAQ0"]
[Wed Apr 22 07:19:55.837710 2026] [:error] [pid 31844:tid 31864] [client 45.137.126.4:53469] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aegGG2tAU9CprTB4b3IyyAAAApI"]
[Wed Apr 22 07:19:59.326081 2026] [:error] [pid 32095:tid 32118] [client 45.137.126.49:43121] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aegGH9fu5Cv628YPe594agAAA5Q"]
[Wed Apr 22 07:20:04.026391 2026] [:error] [pid 31706:tid 31717] [client 45.137.126.15:53737] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aegGJLGSe9Rnd4Q_z1ihIgAAAcg"]
[Wed Apr 22 07:20:06.432921 2026] [:error] [pid 21683:tid 21752] [client 45.137.126.18:56963] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aegGJlZBWT-0diZyYyabwwAAAII"]
[Wed Apr 22 07:20:09.443117 2026] [:error] [pid 31755:tid 31769] [client 45.137.126.49:30649] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aegGKQz2mYMkg3X8q1tsvQAAAgY"]
[Wed Apr 22 07:20:20.456559 2026] [:error] [pid 31756:tid 31809] [client 45.137.126.23:34081] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aegGNN_WbkXbHaEfhd3etgAAAlE"]
[Wed Apr 22 07:20:25.432194 2026] [:error] [pid 31949:tid 31963] [client 45.137.126.5:28953] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aegGOX2WtGZh5JfbMUdAtwAAAws"]
[Wed Apr 22 07:20:30.006890 2026] [:error] [pid 21682:tid 21730] [client 45.137.126.29:33497] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aegGPplXWQZUlmPHS3oLhQAAAEc"]
[Wed Apr 22 07:20:32.972607 2026] [:error] [pid 31755:tid 31766] [client 45.137.126.18:44365] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aegGQAz2mYMkg3X8q1tszQAAAgM"]
[Wed Apr 22 07:20:40.657603 2026] [:error] [pid 31755:tid 31769] [client 45.137.126.26:46579] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aegGSAz2mYMkg3X8q1ts6AAAAgY"]
[Wed Apr 22 07:20:43.715367 2026] [:error] [pid 31755:tid 31767] [client 45.137.126.43:52051] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aegGSwz2mYMkg3X8q1ts9wAAAgQ"]
[Wed Apr 22 07:20:46.639111 2026] [:error] [pid 23041:tid 23057] [client 45.137.126.46:54615] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aegGTkTXx_lUa7xwAb7xtQAAAQ0"]
[Wed Apr 22 07:20:47.618739 2026] [:error] [pid 31949:tid 31968] [client 45.137.126.51:60949] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aegGT32WtGZh5JfbMUdAwAAAAxA"]
[Wed Apr 22 07:20:48.600450 2026] [:error] [pid 21682:tid 21744] [client 45.137.126.53:38979] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aegGUJlXWQZUlmPHS3oLjAAAAFU"]
[Wed Apr 22 07:20:54.914041 2026] [:error] [pid 21682:tid 21734] [client 45.137.126.18:57019] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aegGVplXWQZUlmPHS3oLmQAAAEs"]
[Wed Apr 22 07:20:55.895927 2026] [:error] [pid 31949:tid 31966] [client 45.137.126.53:60579] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aegGV32WtGZh5JfbMUdAxQAAAw4"]
[Wed Apr 22 07:20:56.880969 2026] [:error] [pid 31755:tid 31776] [client 45.137.126.31:45125] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aegGWAz2mYMkg3X8q1ttAgAAAg0"]
[Wed Apr 22 07:21:11.809124 2026] [:error] [pid 31755:tid 31772] [client 45.137.126.35:62809] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aegGZwz2mYMkg3X8q1ttHwAAAgk"]
[Wed Apr 22 07:21:18.088457 2026] [:error] [pid 23041:tid 23044] [client 45.137.126.8:62345] [client 45.137.126.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.8, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aegGbkTXx_lUa7xwAb7yHAAAAQA"]
[Wed Apr 22 07:21:37.466933 2026] [:error] [pid 23041:tid 23064] [client 45.137.126.8:62345] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aegGgUTXx_lUa7xwAb7yZgAAARQ"]
[Wed Apr 22 07:21:42.001974 2026] [:error] [pid 23041:tid 23059] [client 45.137.126.42:43109] [client 45.137.126.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aegGhkTXx_lUa7xwAb7ydQAAAQ8"]
[Wed Apr 22 07:21:45.342736 2026] [:error] [pid 23041:tid 23051] [client 45.137.126.42:43109] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aegGiUTXx_lUa7xwAb7yfAAAAQc"]
[Wed Apr 22 07:21:59.121591 2026] [:error] [pid 31755:tid 31767] [client 45.137.126.3:32187] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aegGlwz2mYMkg3X8q1ttggAAAgQ"]
[Wed Apr 22 07:22:13.397096 2026] [:error] [pid 31949:tid 31967] [client 45.137.126.22:64131] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aegGpX2WtGZh5JfbMUdA8QAAAw8"]
[Wed Apr 22 07:22:17.877476 2026] [:error] [pid 31755:tid 31770] [client 45.137.126.30:27995] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aegGqQz2mYMkg3X8q1ttzgAAAgc"]
[Wed Apr 22 07:22:24.127332 2026] [:error] [pid 31755:tid 31772] [client 45.137.126.50:50883] [client 45.137.126.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.50, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aegGsAz2mYMkg3X8q1tt2gAAAgk"]
[Wed Apr 22 07:22:25.745527 2026] [:error] [pid 31755:tid 31773] [client 45.137.126.50:50883] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aegGsQz2mYMkg3X8q1tt4wAAAgo"]
[Wed Apr 22 07:22:53.897791 2026] [:error] [pid 21683:tid 21760] [client 45.137.126.5:30231] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aegGzVZBWT-0diZyYyacJgAAAIo"]
[Wed Apr 22 07:23:00.094424 2026] [:error] [pid 31756:tid 31797] [client 45.137.126.46:39221] [client 45.137.126.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aegG1N_WbkXbHaEfhd3fNAAAAkU"]
[Wed Apr 22 07:23:06.970212 2026] [:error] [pid 31756:tid 31809] [client 45.137.126.46:39221] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aegG2t_WbkXbHaEfhd3fPQAAAlE"]
[Wed Apr 22 07:23:10.015999 2026] [:error] [pid 21682:tid 21730] [client 45.137.126.19:23639] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aegG3plXWQZUlmPHS3oMZAAAAEc"]
[Wed Apr 22 07:23:14.597408 2026] [:error] [pid 31755:tid 31764] [client 45.137.126.30:37889] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aegG4gz2mYMkg3X8q1tuOQAAAgE"]
[Wed Apr 22 07:23:20.528624 2026] [:error] [pid 23041:tid 23047] [client 45.137.126.5:20969] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aegG6ETXx_lUa7xwAb7zgwAAAQM"]
[Wed Apr 22 07:23:21.515868 2026] [:error] [pid 31756:tid 31797] [client 45.137.126.45:41607] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aegG6d_WbkXbHaEfhd3fSgAAAkU"]
[Wed Apr 22 07:23:31.025254 2026] [:error] [pid 23041:tid 23047] [client 45.137.126.8:30791] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aegG80TXx_lUa7xwAb7zoQAAAQM"]
[Wed Apr 22 07:23:33.941285 2026] [:error] [pid 21683:tid 21761] [client 45.137.126.49:48263] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aegG9VZBWT-0diZyYyacOwAAAIs"]
[Wed Apr 22 07:23:39.944165 2026] [:error] [pid 31949:tid 31973] [client 45.137.126.23:31315] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aegG-32WtGZh5JfbMUdBIgAAAxU"]
[Wed Apr 22 07:23:46.549616 2026] [:error] [pid 23041:tid 23068] [client 45.137.126.5:55679] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aegHAkTXx_lUa7xwAb7z1wAAARg"]
[Wed Apr 22 07:23:51.231581 2026] [:error] [pid 31755:tid 31763] [client 45.137.126.23:43501] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aegHBwz2mYMkg3X8q1tufQAAAgA"]
[Wed Apr 22 07:23:58.100547 2026] [:error] [pid 31755:tid 31770] [client 45.137.126.45:48851] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aegHDgz2mYMkg3X8q1tujQAAAgc"]
[Wed Apr 22 07:24:11.042437 2026] [:error] [pid 31949:tid 31971] [client 45.137.126.9:47089] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aegHG32WtGZh5JfbMUdBMwAAAxM"]
[Wed Apr 22 07:24:12.024680 2026] [:error] [pid 23041:tid 23046] [client 45.137.126.26:46667] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aegHHETXx_lUa7xwAb70GwAAAQI"]
[Wed Apr 22 07:24:13.010908 2026] [:error] [pid 21682:tid 21742] [client 45.137.126.8:24281] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aegHHZlXWQZUlmPHS3oMxwAAAFM"]
[Wed Apr 22 07:24:13.993749 2026] [:error] [pid 32095:tid 32112] [client 45.137.126.19:65027] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aegHHdfu5Cv628YPe594qAAAA44"]
[Wed Apr 22 07:24:17.039705 2026] [:error] [pid 31755:tid 31784] [client 45.137.126.46:52575] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aegHIQz2mYMkg3X8q1tutgAAAhU"]
[Wed Apr 22 07:24:18.031355 2026] [:error] [pid 23041:tid 23054] [client 45.137.126.12:49201] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aegHIkTXx_lUa7xwAb70IAAAAQo"]
[Wed Apr 22 07:24:22.598654 2026] [:error] [pid 32095:tid 32109] [client 45.137.126.13:42271] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aegHJtfu5Cv628YPe594sQAAA4s"]
[Wed Apr 22 07:24:23.581947 2026] [:error] [pid 23041:tid 23063] [client 45.137.126.11:48301] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aegHJ0TXx_lUa7xwAb70NQAAARM"]
[Wed Apr 22 07:24:24.573187 2026] [:error] [pid 23041:tid 23053] [client 45.137.126.43:33373] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aegHKETXx_lUa7xwAb70PQAAAQk"]
[Wed Apr 22 07:24:25.560252 2026] [:error] [pid 31756:tid 31799] [client 45.137.126.45:46365] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aegHKd_WbkXbHaEfhd3fywAAAkc"]
[Wed Apr 22 07:24:28.567927 2026] [:error] [pid 21682:tid 21731] [client 45.137.126.20:46183] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aegHLJlXWQZUlmPHS3oM3AAAAEg"]
[Wed Apr 22 07:24:33.367938 2026] [:error] [pid 23041:tid 23066] [client 45.137.126.36:26963] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aegHMUTXx_lUa7xwAb70VgAAARY"]
[Wed Apr 22 07:24:41.038178 2026] [:error] [pid 23041:tid 23058] [client 45.137.126.35:30961] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aegHOUTXx_lUa7xwAb70bgAAAQ4"]
[Wed Apr 22 07:24:53.820804 2026] [:error] [pid 31844:tid 31856] [client 45.137.126.40:38813] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aegHRWtAU9CprTB4b3Iy-AAAAoo"]
[Wed Apr 22 07:25:00.059926 2026] [:error] [pid 31755:tid 31765] [client 45.137.126.37:45969] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aegHTAz2mYMkg3X8q1tvBAAAAgI"]
[Wed Apr 22 07:25:01.173438 2026] [:error] [pid 31756:tid 31805] [client 45.137.126.24:20619] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aegHTd_WbkXbHaEfhd3gAgAAAk0"]
[Wed Apr 22 07:25:09.269283 2026] [:error] [pid 31756:tid 31806] [client 45.137.126.41:58261] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aegHVd_WbkXbHaEfhd3gFAAAAk4"]
[Wed Apr 22 07:25:15.759550 2026] [proxy_fcgi:error] [pid 23041:tid 23053] [client 45.137.126.9:27795] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:25:16.256323 2026] [proxy_fcgi:error] [pid 23041:tid 23068] [client 45.137.126.9:27795] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:25:16.754760 2026] [proxy_fcgi:error] [pid 23041:tid 23052] [client 45.137.126.9:27795] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:25:22.936275 2026] [:error] [pid 23041:tid 23044] [client 45.137.126.9:27795] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aegHYkTXx_lUa7xwAb71IgAAAQA"]
[Wed Apr 22 07:25:23.922312 2026] [:error] [pid 31949:tid 31966] [client 45.137.126.52:20243] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aegHY32WtGZh5JfbMUdBRAAAAw4"]
[Wed Apr 22 07:25:24.907467 2026] [:error] [pid 31756:tid 31791] [client 45.137.126.41:54927] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aegHZN_WbkXbHaEfhd3gPAAAAkE"]
[Wed Apr 22 07:25:25.888063 2026] [:error] [pid 31756:tid 31806] [client 45.137.126.48:35073] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aegHZd_WbkXbHaEfhd3gQwAAAk4"]
[Wed Apr 22 07:25:26.874187 2026] [:error] [pid 31755:tid 31771] [client 45.137.126.4:38795] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aegHZgz2mYMkg3X8q1tvVwAAAgg"]
[Wed Apr 22 07:25:27.859531 2026] [:error] [pid 31755:tid 31783] [client 45.137.126.52:52485] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aegHZwz2mYMkg3X8q1tvWgAAAhQ"]
[Wed Apr 22 07:25:30.372027 2026] [:error] [pid 31755:tid 31763] [client 45.137.126.13:48181] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aegHagz2mYMkg3X8q1tvZgAAAgA"]
[Wed Apr 22 07:25:31.366607 2026] [:error] [pid 23041:tid 23057] [client 45.137.126.20:55547] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aegHa0TXx_lUa7xwAb71NAAAAQ0"]
[Wed Apr 22 07:25:32.346112 2026] [:error] [pid 31755:tid 31783] [client 45.137.126.43:26421] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aegHbAz2mYMkg3X8q1tvaAAAAhQ"]
[Wed Apr 22 07:25:33.325687 2026] [:error] [pid 21682:tid 21737] [client 45.137.126.52:36125] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aegHbZlXWQZUlmPHS3oNPwAAAE4"]
[Wed Apr 22 07:25:37.730900 2026] [:error] [pid 32095:tid 32111] [client 45.137.126.37:62023] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aegHcdfu5Cv628YPe594vwAAA40"]
[Wed Apr 22 07:25:40.091738 2026] [:error] [pid 32053:tid 32077] [client 45.137.126.53:29043] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aegHdAzPjXx_ocfbYhs5OwAAA1Y"]
[Wed Apr 22 07:25:44.779405 2026] [:error] [pid 32053:tid 32070] [client 45.137.126.10:23627] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aegHeAzPjXx_ocfbYhs5PwAAA08"]
[Wed Apr 22 07:25:49.455909 2026] [:error] [pid 31756:tid 31813] [client 45.137.126.19:50791] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aegHfd_WbkXbHaEfhd3gYwAAAlU"]
[Wed Apr 22 07:25:55.795467 2026] [:error] [pid 31755:tid 31763] [client 45.137.126.43:23213] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aegHgwz2mYMkg3X8q1tvggAAAgA"]
[Wed Apr 22 07:26:04.037161 2026] [:error] [pid 32095:tid 32118] [client 45.137.126.50:39629] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aegHjNfu5Cv628YPe594xgAAA5Q"]
[Wed Apr 22 07:26:07.061934 2026] [:error] [pid 23041:tid 23062] [client 45.137.126.11:54111] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aegHj0TXx_lUa7xwAb71uAAAARI"]
[Wed Apr 22 07:26:33.592767 2026] [:error] [pid 23041:tid 23044] [client 45.137.126.32:61361] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aegHqUTXx_lUa7xwAb72LwAAAQA"]
[Wed Apr 22 07:26:34.573121 2026] [:error] [pid 31949:tid 31965] [client 45.137.126.45:46851] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aegHqn2WtGZh5JfbMUdBegAAAw0"]
[Wed Apr 22 07:26:37.555834 2026] [:error] [pid 31755:tid 31778] [client 45.137.126.35:53883] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aegHrQz2mYMkg3X8q1tvuAAAAg8"]
[Wed Apr 22 07:26:42.732653 2026] [:error] [pid 31755:tid 31773] [client 45.137.126.5:61623] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aegHsgz2mYMkg3X8q1tvxAAAAgo"]
[Wed Apr 22 07:26:43.715604 2026] [:error] [pid 23041:tid 23049] [client 45.137.126.21:32661] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aegHs0TXx_lUa7xwAb72WAAAAQU"]
[Wed Apr 22 07:26:51.781872 2026] [:error] [pid 23041:tid 23048] [client 45.137.126.41:28775] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aegHu0TXx_lUa7xwAb72iwAAAQQ"]
[Wed Apr 22 07:26:52.768972 2026] [:error] [pid 23041:tid 23055] [client 45.137.126.20:20301] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aegHvETXx_lUa7xwAb72jgAAAQs"]
[Wed Apr 22 07:27:02.760074 2026] [:error] [pid 31756:tid 31801] [client 45.137.126.37:33807] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aegHxt_WbkXbHaEfhd3g2gAAAkk"]
[Wed Apr 22 07:27:05.838025 2026] [proxy_fcgi:error] [pid 23041:tid 23062] [client 45.137.126.50:49625] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:27:08.052348 2026] [:error] [pid 23041:tid 23046] [client 45.137.126.50:49625] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "aegHzETXx_lUa7xwAb720wAAAQI"]
[Wed Apr 22 07:27:09.046420 2026] [:error] [pid 31949:tid 31972] [client 45.137.126.16:31641] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "aegHzX2WtGZh5JfbMUdBgAAAAxQ"]
[Wed Apr 22 07:27:13.637538 2026] [:error] [pid 32053:tid 32065] [client 45.137.126.16:39607] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aegH0QzPjXx_ocfbYhs5bAAAA0o"]
[Wed Apr 22 07:27:14.623417 2026] [:error] [pid 31756:tid 31800] [client 45.137.126.47:36915] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aegH0t_WbkXbHaEfhd3g4gAAAkg"]
[Wed Apr 22 07:27:28.642855 2026] [:error] [pid 31756:tid 31813] [client 45.137.126.34:26677] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aegH4N_WbkXbHaEfhd3hBwAAAlU"]
[Wed Apr 22 07:27:29.637737 2026] [:error] [pid 23041:tid 23051] [client 45.137.126.34:53585] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aegH4UTXx_lUa7xwAb73ewAAAQc"]
[Wed Apr 22 07:27:37.853897 2026] [:error] [pid 21682:tid 21728] [client 45.137.126.19:25401] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aegH6ZlXWQZUlmPHS3oNqgAAAEU"]
[Wed Apr 22 07:27:38.843682 2026] [:error] [pid 31755:tid 31778] [client 45.137.126.50:57537] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aegH6gz2mYMkg3X8q1twZgAAAg8"]
[Wed Apr 22 07:27:39.825733 2026] [:error] [pid 31755:tid 31763] [client 45.137.126.20:58151] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aegH6wz2mYMkg3X8q1twaQAAAgA"]
[Wed Apr 22 07:27:49.440107 2026] [:error] [pid 31756:tid 31805] [client 45.137.126.27:52663] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aegH9d_WbkXbHaEfhd3hNwAAAk0"]
[Wed Apr 22 07:27:52.362669 2026] [:error] [pid 23041:tid 23059] [client 45.137.126.17:49567] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aegH-ETXx_lUa7xwAb73xAAAAQ8"]
[Wed Apr 22 07:28:04.065827 2026] [:error] [pid 21683:tid 21765] [client 45.137.126.34:43063] [client 45.137.126.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "aegIBFZBWT-0diZyYyadBAAAAI8"]
[Wed Apr 22 07:28:13.875253 2026] [:error] [pid 21683:tid 21756] [client 45.137.126.34:43063] [client 45.137.126.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.34, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aegIDVZBWT-0diZyYyadEwAAAIY"]
[Wed Apr 22 07:28:31.405168 2026] [proxy_fcgi:error] [pid 21683:tid 21769] [client 45.137.126.34:43063] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:28:54.575142 2026] [:error] [pid 21683:tid 21762] [client 45.137.126.34:43063] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aegINlZBWT-0diZyYyadZQAAAIw"]
[Wed Apr 22 07:29:00.720421 2026] [:error] [pid 31755:tid 31782] [client 45.137.126.25:33507] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aegIPAz2mYMkg3X8q1tw_AAAAhM"]
[Wed Apr 22 07:29:05.206173 2026] [:error] [pid 23041:tid 23046] [client 45.137.126.22:34041] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aegIQUTXx_lUa7xwAb74rAAAAQI"]
[Wed Apr 22 07:29:21.714997 2026] [:error] [pid 23041:tid 23059] [client 45.137.126.25:47577] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aegIUUTXx_lUa7xwAb74yQAAAQ8"]
[Wed Apr 22 07:29:26.327172 2026] [:error] [pid 31755:tid 31781] [client 45.137.126.24:62057] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aegIVgz2mYMkg3X8q1txNgAAAhI"]
[Wed Apr 22 07:29:29.444854 2026] [:error] [pid 23041:tid 23052] [client 45.137.126.17:65091] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aegIWUTXx_lUa7xwAb741QAAAQg"]
[Wed Apr 22 07:29:37.425306 2026] [proxy_fcgi:error] [pid 31755:tid 31778] [client 45.137.126.51:36669] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:29:37.928497 2026] [proxy_fcgi:error] [pid 31755:tid 31767] [client 45.137.126.51:36669] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:29:38.422722 2026] [:error] [pid 31755:tid 31781] [client 45.137.126.51:36669] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aegIYgz2mYMkg3X8q1txUgAAAhI"]
[Wed Apr 22 07:29:39.404873 2026] [:error] [pid 21682:tid 21744] [client 45.137.126.24:23891] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aegIY5lXWQZUlmPHS3oOWAAAAFU"]
[Wed Apr 22 07:29:51.863145 2026] [:error] [pid 31844:tid 31851] [client 45.137.126.41:64163] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aegIb2tAU9CprTB4b3IzOAAAAoU"]
[Wed Apr 22 07:29:54.842865 2026] [:error] [pid 23041:tid 23057] [client 45.137.126.25:27745] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aegIckTXx_lUa7xwAb75NgAAAQ0"]
[Wed Apr 22 07:30:01.090565 2026] [:error] [pid 23041:tid 23065] [client 45.137.126.22:46727] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aegIeUTXx_lUa7xwAb75XgAAARU"]
[Wed Apr 22 07:30:13.880959 2026] [:error] [pid 23041:tid 23056] [client 45.137.126.22:62161] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aegIhUTXx_lUa7xwAb75mwAAAQw"]
[Wed Apr 22 07:30:14.869901 2026] [proxy_fcgi:error] [pid 21682:tid 21745] [client 45.137.126.31:22495] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:30:19.018156 2026] [:error] [pid 21682:tid 21728] [client 45.137.126.31:22495] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aegIi5lXWQZUlmPHS3oOhAAAAEU"]
[Wed Apr 22 07:30:28.330879 2026] [proxy_fcgi:error] [pid 32095:tid 32103] [client 45.137.126.26:43393] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:30:30.443310 2026] [:error] [pid 32095:tid 32117] [client 45.137.126.26:43393] [client 45.137.126.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.26, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aegIltfu5Cv628YPe595KwAAA5M"]
[Wed Apr 22 07:30:38.113491 2026] [:error] [pid 32095:tid 32119] [client 45.137.126.26:43393] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aegIntfu5Cv628YPe595NgAAA5U"]
[Wed Apr 22 07:30:41.060134 2026] [:error] [pid 21683:tid 21752] [client 45.137.126.35:61035] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aegIoVZBWT-0diZyYyadlAAAAII"]
[Wed Apr 22 07:30:49.148942 2026] [:error] [pid 21682:tid 21742] [client 45.137.126.3:48277] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aegIqZlXWQZUlmPHS3oO-QAAAFM"]
[Wed Apr 22 07:30:54.875359 2026] [:error] [pid 31949:tid 31958] [client 45.137.126.5:35325] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aegIrn2WtGZh5JfbMUdCbAAAAwY"]
[Wed Apr 22 07:30:55.858842 2026] [:error] [pid 31755:tid 31765] [client 45.137.126.11:43221] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aegIrwz2mYMkg3X8q1tx5QAAAgI"]
[Wed Apr 22 07:31:02.058449 2026] [:error] [pid 23041:tid 23067] [client 45.137.126.16:54109] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aegItkTXx_lUa7xwAb76XgAAARc"]
[Wed Apr 22 07:31:06.593021 2026] [proxy_fcgi:error] [pid 23041:tid 23051] [client 45.137.126.39:47631] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:31:07.084080 2026] [:error] [pid 23041:tid 23045] [client 45.137.126.39:47631] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aegIu0TXx_lUa7xwAb76cQAAAQE"]
[Wed Apr 22 07:31:08.068804 2026] [proxy_fcgi:error] [pid 21682:tid 21729] [client 45.137.126.41:63935] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Wed Apr 22 07:31:09.054749 2026] [:error] [pid 31756:tid 31801] [client 45.137.126.51:39269] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "aegIvd_WbkXbHaEfhd3i0wAAAkk"]
[Wed Apr 22 07:31:10.041602 2026] [:error] [pid 21682:tid 21747] [client 45.137.126.7:21523] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aegIvplXWQZUlmPHS3oPNgAAAFg"]
[Wed Apr 22 07:31:11.043550 2026] [:error] [pid 32053:tid 32069] [client 45.137.126.28:43607] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aegIvwzPjXx_ocfbYhs5pgAAA04"]
[Wed Apr 22 07:31:12.025023 2026] [:error] [pid 23041:tid 23049] [client 45.137.126.35:60599] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aegIwETXx_lUa7xwAb76dAAAAQU"]
[Wed Apr 22 07:31:13.004811 2026] [:error] [pid 31844:tid 31850] [client 45.137.126.40:36705] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aegIwWtAU9CprTB4b3IzRgAAAoQ"]
[Wed Apr 22 07:31:15.765741 2026] [:error] [pid 21682:tid 21730] [client 45.137.126.11:33923] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aegIw5lXWQZUlmPHS3oPPwAAAEc"]
[Wed Apr 22 07:31:20.295681 2026] [:error] [pid 31755:tid 31765] [client 45.137.126.11:27209] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aegIyAz2mYMkg3X8q1tyDwAAAgI"]
[Wed Apr 22 07:31:21.280523 2026] [:error] [pid 23041:tid 23048] [client 45.137.126.24:45659] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aegIyUTXx_lUa7xwAb76gAAAAQQ"]
[Wed Apr 22 07:31:22.262523 2026] [:error] [pid 23041:tid 23068] [client 45.137.126.49:40063] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aegIykTXx_lUa7xwAb76hwAAARg"]
[Wed Apr 22 07:31:23.248854 2026] [:error] [pid 23041:tid 23056] [client 45.137.126.50:63299] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aegIy0TXx_lUa7xwAb76jQAAAQw"]
[Wed Apr 22 07:31:24.233116 2026] [:error] [pid 31755:tid 31785] [client 45.137.126.9:26299] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aegIzAz2mYMkg3X8q1tyGwAAAhY"]
[Wed Apr 22 07:31:25.218106 2026] [proxy_fcgi:error] [pid 23041:tid 23060] [client 45.137.126.24:46421] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:31:29.207571 2026] [:error] [pid 23041:tid 23051] [client 45.137.126.24:46421] [client 45.137.126.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.24, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aegI0UTXx_lUa7xwAb76qgAAAQc"]
[Wed Apr 22 07:31:36.938096 2026] [:error] [pid 23041:tid 23064] [client 45.137.126.24:46421] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aegI2ETXx_lUa7xwAb76zQAAARQ"]
[Wed Apr 22 07:32:03.981536 2026] [:error] [pid 31756:tid 31796] [client 45.137.126.7:54257] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aegI89_WbkXbHaEfhd3jEgAAAkQ"]
[Wed Apr 22 07:32:04.974458 2026] [:error] [pid 31755:tid 31772] [client 45.137.126.52:36515] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aegI9Az2mYMkg3X8q1tyRwAAAgk"]
[Wed Apr 22 07:32:05.964580 2026] [:error] [pid 32053:tid 32055] [client 45.137.126.25:62143] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aegI9QzPjXx_ocfbYhs5sgAAA0A"]
[Wed Apr 22 07:32:17.368430 2026] [:error] [pid 31844:tid 31853] [client 45.137.126.42:38177] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aegJAWtAU9CprTB4b3IzZQAAAoc"]
[Wed Apr 22 07:32:18.350045 2026] [:error] [pid 31949:tid 31958] [client 45.137.126.15:59259] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aegJAn2WtGZh5JfbMUdCiAAAAwY"]
[Wed Apr 22 07:32:19.341090 2026] [:error] [pid 23041:tid 23048] [client 45.137.126.26:27581] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aegJA0TXx_lUa7xwAb77JAAAAQQ"]
[Wed Apr 22 07:32:26.970628 2026] [:error] [pid 32095:tid 32121] [client 45.137.126.9:35755] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aegJCtfu5Cv628YPe595YgAAA5c"]
[Wed Apr 22 07:32:29.901400 2026] [:error] [pid 31756:tid 31799] [client 45.137.126.2:21957] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aegJDd_WbkXbHaEfhd3jIQAAAkc"]
[Wed Apr 22 07:32:34.519377 2026] [:error] [pid 23041:tid 23045] [client 45.137.126.2:47951] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aegJEkTXx_lUa7xwAb77UAAAAQE"]
[Wed Apr 22 07:32:56.278740 2026] [:error] [pid 23041:tid 23066] [client 45.137.126.34:46537] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aegJKETXx_lUa7xwAb77mwAAARY"]
[Wed Apr 22 07:32:59.201368 2026] [:error] [pid 23041:tid 23056] [client 45.137.126.38:39203] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "aegJK0TXx_lUa7xwAb77sAAAAQw"]
[Wed Apr 22 07:33:10.310825 2026] [:error] [pid 31755:tid 31771] [client 45.137.126.7:30215] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aegJNgz2mYMkg3X8q1tzKAAAAgg"]
[Wed Apr 22 07:33:14.893270 2026] [:error] [pid 23041:tid 23055] [client 45.137.126.27:47443] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aegJOkTXx_lUa7xwAb770QAAAQs"]
[Wed Apr 22 07:33:22.386846 2026] [:error] [pid 31756:tid 31801] [client 45.137.126.40:46059] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aegJQt_WbkXbHaEfhd3jVAAAAkk"]
[Wed Apr 22 07:33:29.893606 2026] [:error] [pid 31706:tid 31710] [client 45.137.126.35:39981] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aegJSbGSe9Rnd4Q_z1ih0QAAAcE"]
[Wed Apr 22 07:33:34.373561 2026] [:error] [pid 31755:tid 31773] [client 45.137.126.27:47659] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aegJTgz2mYMkg3X8q1tzawAAAgo"]
[Wed Apr 22 07:33:35.361101 2026] [:error] [pid 32095:tid 32122] [client 45.137.126.15:38131] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aegJT9fu5Cv628YPe595gAAAA5g"]
[Wed Apr 22 07:33:44.799338 2026] [:error] [pid 23041:tid 23044] [client 45.137.126.21:24329] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aegJWETXx_lUa7xwAb779AAAAQA"]
[Wed Apr 22 07:33:53.766168 2026] [:error] [pid 31844:tid 31851] [client 45.137.126.48:21713] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aegJYWtAU9CprTB4b3IzfgAAAoU"]
[Wed Apr 22 07:34:02.011132 2026] [:error] [pid 31755:tid 31786] [client 45.137.126.45:60893] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aegJagz2mYMkg3X8q1tzvAAAAhc"]
[Wed Apr 22 07:34:03.010126 2026] [:error] [pid 31755:tid 31766] [client 45.137.126.9:50535] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aegJawz2mYMkg3X8q1tzwQAAAgM"]
[Wed Apr 22 07:34:05.977908 2026] [:error] [pid 23041:tid 23051] [client 45.137.126.42:49063] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aegJbUTXx_lUa7xwAb78GAAAAQc"]
[Wed Apr 22 07:34:10.770356 2026] [:error] [pid 31949:tid 31976] [client 45.137.126.53:22633] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "aegJcn2WtGZh5JfbMUdCxgAAAxg"]
[Wed Apr 22 07:34:11.768200 2026] [:error] [pid 31755:tid 31764] [client 45.137.126.47:38007] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aegJcwz2mYMkg3X8q1tz1wAAAgE"]
[Wed Apr 22 07:34:22.695996 2026] [:error] [pid 31755:tid 31763] [client 45.137.126.34:36687] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "aegJfgz2mYMkg3X8q1tz9wAAAgA"]
[Wed Apr 22 07:34:27.331963 2026] [:error] [pid 23041:tid 23067] [client 45.137.126.26:24579] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aegJg0TXx_lUa7xwAb78NgAAARc"]
[Wed Apr 22 07:34:28.315303 2026] [:error] [pid 21682:tid 21729] [client 45.137.126.17:52063] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aegJhJlXWQZUlmPHS3oQvAAAAEY"]
[Wed Apr 22 07:34:33.007830 2026] [:error] [pid 21682:tid 21725] [client 45.137.126.43:57601] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aegJiZlXWQZUlmPHS3oQwAAAAEI"]
[Wed Apr 22 07:34:35.987083 2026] [:error] [pid 31756:tid 31801] [client 45.137.126.40:63901] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aegJi9_WbkXbHaEfhd3jyQAAAkk"]
[Wed Apr 22 07:34:45.344318 2026] [:error] [pid 31755:tid 31783] [client 45.137.126.8:48649] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aegJlQz2mYMkg3X8q1t0QAAAAhQ"]
[Wed Apr 22 07:34:49.809450 2026] [:error] [pid 31755:tid 31766] [client 45.137.126.43:50991] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aegJmQz2mYMkg3X8q1t0UAAAAgM"]
[Wed Apr 22 07:34:54.423808 2026] [:error] [pid 21682:tid 21742] [client 45.137.126.27:53575] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aegJnplXWQZUlmPHS3oQ8gAAAFM"]
[Wed Apr 22 07:34:57.424156 2026] [:error] [pid 31756:tid 31793] [client 45.137.126.51:33567] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "aegJod_WbkXbHaEfhd3j4gAAAkM"]
[Wed Apr 22 07:35:00.391693 2026] [:error] [pid 21683:tid 21757] [client 45.137.126.39:57761] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aegJpFZBWT-0diZyYyaeagAAAIc"]
[Wed Apr 22 07:35:01.380007 2026] [:error] [pid 31755:tid 31768] [client 45.137.126.7:29919] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "aegJpQz2mYMkg3X8q1t0aQAAAgU"]
[Wed Apr 22 07:35:02.366751 2026] [:error] [pid 31756:tid 31814] [client 45.137.126.9:37209] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aegJpt_WbkXbHaEfhd3j5gAAAlY"]
[Wed Apr 22 07:35:13.696458 2026] [:error] [pid 23041:tid 23065] [client 45.137.126.34:45509] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aegJsUTXx_lUa7xwAb78ngAAARU"]
[Wed Apr 22 07:35:19.991244 2026] [:error] [pid 21682:tid 21730] [client 45.137.126.44:44993] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "aegJt5lXWQZUlmPHS3oRLwAAAEc"]
[Wed Apr 22 07:35:24.970456 2026] [:error] [pid 23041:tid 23047] [client 45.137.126.6:27559] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aegJvETXx_lUa7xwAb78qgAAAQM"]
[Wed Apr 22 07:35:29.743778 2026] [:error] [pid 21682:tid 21726] [client 45.137.126.52:30321] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aegJwZlXWQZUlmPHS3oRRQAAAEM"]
[Wed Apr 22 07:35:39.236623 2026] [:error] [pid 31755:tid 31786] [client 45.137.126.23:38059] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aegJywz2mYMkg3X8q1t0tgAAAhc"]
[Wed Apr 22 07:35:42.232044 2026] [:error] [pid 23041:tid 23060] [client 45.137.126.6:27985] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aegJzkTXx_lUa7xwAb78xAAAARA"]
[Wed Apr 22 07:35:45.169962 2026] [:error] [pid 31844:tid 31864] [client 45.137.126.48:42247] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aegJ0WtAU9CprTB4b3IzlgAAApI"]
[Wed Apr 22 07:35:49.868060 2026] [:error] [pid 31756:tid 31804] [client 45.137.126.48:61569] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aegJ1d_WbkXbHaEfhd3kOwAAAkw"]
[Wed Apr 22 07:36:06.535450 2026] [:error] [pid 31755:tid 31784] [client 45.137.126.42:61211] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aegJ5gz2mYMkg3X8q1t1EgAAAhU"]
[Wed Apr 22 07:36:07.514754 2026] [:error] [pid 23041:tid 23059] [client 45.137.126.18:21333] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aegJ50TXx_lUa7xwAb79SgAAAQ8"]
[Wed Apr 22 07:36:13.870161 2026] [:error] [pid 31755:tid 31767] [client 45.137.126.31:27661] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aegJ7Qz2mYMkg3X8q1t1NQAAAgQ"]
[Wed Apr 22 07:36:14.878567 2026] [:error] [pid 23041:tid 23054] [client 45.137.126.9:51533] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aegJ7kTXx_lUa7xwAb79WAAAAQo"]
[Wed Apr 22 07:36:20.750250 2026] [:error] [pid 21682:tid 21743] [client 45.137.126.6:41087] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aegJ9JlXWQZUlmPHS3oRhgAAAFQ"]
[Wed Apr 22 07:36:21.731470 2026] [:error] [pid 31755:tid 31781] [client 45.137.126.40:61359] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aegJ9Qz2mYMkg3X8q1t1SAAAAhI"]
[Wed Apr 22 07:36:22.716379 2026] [:error] [pid 31755:tid 31785] [client 45.137.126.18:27515] [client 45.137.126.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aegJ9gz2mYMkg3X8q1t1SgAAAhY"]
[Wed Apr 22 07:36:22.721988 2026] [proxy_fcgi:error] [pid 31755:tid 31785] [client 45.137.126.18:27515] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:36:23.212598 2026] [:error] [pid 31755:tid 31775] [client 45.137.126.18:27515] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aegJ9wz2mYMkg3X8q1t1TQAAAgw"]
[Wed Apr 22 07:36:27.985076 2026] [:error] [pid 21682:tid 21730] [client 45.137.126.51:40565] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aegJ-5lXWQZUlmPHS3oRlAAAAEc"]
[Wed Apr 22 07:36:28.966571 2026] [:error] [pid 31755:tid 31769] [client 45.137.126.25:53619] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "aegJ_Az2mYMkg3X8q1t1WgAAAgY"]
[Wed Apr 22 07:36:41.542661 2026] [:error] [pid 31755:tid 31771] [client 45.137.126.4:48533] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aegKCQz2mYMkg3X8q1t1hQAAAgg"]
[Wed Apr 22 07:36:42.524633 2026] [:error] [pid 23041:tid 23050] [client 45.137.126.28:54403] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aegKCkTXx_lUa7xwAb79lAAAAQY"]
[Wed Apr 22 07:36:46.391019 2026] [:error] [pid 31755:tid 31776] [client 45.137.126.7:27763] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aegKDgz2mYMkg3X8q1t1pgAAAg0"]
[Wed Apr 22 07:36:47.376513 2026] [:error] [pid 21683:tid 21768] [client 45.137.126.35:26619] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aegKD1ZBWT-0diZyYyaevAAAAJI"]
[Wed Apr 22 07:36:48.361292 2026] [proxy_fcgi:error] [pid 31755:tid 31779] [client 45.137.126.47:29073] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:36:48.851128 2026] [:error] [pid 31755:tid 31780] [client 45.137.126.47:29073] [client 45.137.126.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.47, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aegKEAz2mYMkg3X8q1t1swAAAhE"]
[Wed Apr 22 07:36:52.553838 2026] [:error] [pid 31755:tid 31787] [client 45.137.126.47:29073] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aegKFAz2mYMkg3X8q1t1zwAAAhg"]
[Wed Apr 22 07:36:57.893665 2026] [:error] [pid 31756:tid 31815] [client 45.137.126.37:58749] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aegKGd_WbkXbHaEfhd3klQAAAlc"]
[Wed Apr 22 07:37:00.905685 2026] [:error] [pid 32095:tid 32109] [client 45.137.126.40:48977] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aegKHNfu5Cv628YPe595xQAAA4s"]
[Wed Apr 22 07:37:01.891769 2026] [:error] [pid 31755:tid 31785] [client 45.137.126.39:40513] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aegKHQz2mYMkg3X8q1t17AAAAhY"]
[Wed Apr 22 07:37:08.377555 2026] [:error] [pid 32095:tid 32114] [client 45.137.126.35:59547] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aegKJNfu5Cv628YPe595ywAAA5A"]
[Wed Apr 22 07:37:13.072274 2026] [:error] [pid 31755:tid 31776] [client 45.137.126.20:22123] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aegKKQz2mYMkg3X8q1t2KAAAAg0"]
[Wed Apr 22 07:37:20.970060 2026] [:error] [pid 21683:tid 21759] [client 45.137.126.46:40011] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aegKMFZBWT-0diZyYyae0wAAAIk"]
[Wed Apr 22 07:37:21.953036 2026] [:error] [pid 31756:tid 31804] [client 45.137.126.28:34649] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "aegKMd_WbkXbHaEfhd3kvAAAAkw"]
[Wed Apr 22 07:37:25.015574 2026] [:error] [pid 21683:tid 21757] [client 45.137.126.30:40989] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "aegKNVZBWT-0diZyYyae2AAAAIc"]
[Wed Apr 22 07:37:36.093619 2026] [:error] [pid 31755:tid 31781] [client 45.137.126.21:38713] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aegKQAz2mYMkg3X8q1t2WQAAAhI"]
[Wed Apr 22 07:37:40.609768 2026] [:error] [pid 31949:tid 31973] [client 45.137.126.46:59635] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "aegKRH2WtGZh5JfbMUdDrgAAAxU"]
[Wed Apr 22 07:37:41.100587 2026] [:error] [pid 31949:tid 31969] [client 45.137.126.46:59635] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aegKRX2WtGZh5JfbMUdDsAAAAxE"]
[Wed Apr 22 07:37:45.569982 2026] [:error] [pid 21682:tid 21736] [client 45.137.126.44:63303] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aegKSZlXWQZUlmPHS3oSQgAAAE0"]
[Wed Apr 22 07:37:46.550568 2026] [:error] [pid 31755:tid 31775] [client 45.137.126.45:34677] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aegKSgz2mYMkg3X8q1t2ZgAAAgw"]
[Wed Apr 22 07:37:57.497988 2026] [:error] [pid 31755:tid 31775] [client 45.137.126.51:23837] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aegKVQz2mYMkg3X8q1t2lAAAAgw"]
[Wed Apr 22 07:38:02.338415 2026] [:error] [pid 23041:tid 23065] [client 45.137.126.13:64573] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aegKWkTXx_lUa7xwAb7-KgAAARU"]
[Wed Apr 22 07:38:05.434050 2026] [:error] [pid 31755:tid 31776] [client 45.137.126.31:42545] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aegKXQz2mYMkg3X8q1t2pAAAAg0"]
[Wed Apr 22 07:38:15.022641 2026] [:error] [pid 31706:tid 31727] [client 45.137.126.9:48877] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aegKZ7GSe9Rnd4Q_z1iiGQAAAdI"]
[Wed Apr 22 07:38:16.008103 2026] [:error] [pid 21682:tid 21734] [client 45.137.126.23:30219] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "aegKaJlXWQZUlmPHS3oScwAAAEs"]
[Wed Apr 22 07:38:19.033381 2026] [:error] [pid 21683:tid 21767] [client 45.137.126.33:43539] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aegKa1ZBWT-0diZyYyafDAAAAJE"]
[Wed Apr 22 07:38:20.014508 2026] [:error] [pid 32053:tid 32067] [client 45.137.126.15:58083] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "aegKbAzPjXx_ocfbYhs6IQAAA0w"]
[Wed Apr 22 07:38:24.710822 2026] [:error] [pid 21683:tid 21765] [client 45.137.126.36:47043] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aegKcFZBWT-0diZyYyafEQAAAI8"]
[Wed Apr 22 07:38:29.372298 2026] [:error] [pid 31755:tid 31764] [client 45.137.126.5:20323] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aegKdQz2mYMkg3X8q1t24QAAAgE"]
[Wed Apr 22 07:38:30.355249 2026] [:error] [pid 31756:tid 31790] [client 45.137.126.45:45605] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aegKdt_WbkXbHaEfhd3lGAAAAkA"]
[Wed Apr 22 07:38:38.182897 2026] [:error] [pid 31756:tid 31803] [client 45.137.126.26:29241] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aegKft_WbkXbHaEfhd3lJwAAAks"]
[Wed Apr 22 07:38:42.698545 2026] [:error] [pid 23041:tid 23046] [client 45.137.126.26:60965] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aegKgkTXx_lUa7xwAb7-eQAAAQI"]
[Wed Apr 22 07:38:48.795485 2026] [:error] [pid 23041:tid 23059] [client 45.137.126.35:40255] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aegKiETXx_lUa7xwAb7-gQAAAQ8"]
[Wed Apr 22 07:38:49.781083 2026] [:error] [pid 31756:tid 31801] [client 45.137.126.14:35161] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aegKid_WbkXbHaEfhd3lKwAAAkk"]
[Wed Apr 22 07:38:50.772442 2026] [:error] [pid 31755:tid 31776] [client 45.137.126.7:56259] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aegKigz2mYMkg3X8q1t3NQAAAg0"]
[Wed Apr 22 07:38:55.243667 2026] [:error] [pid 21683:tid 21761] [client 45.137.126.40:30495] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aegKj1ZBWT-0diZyYyafLwAAAIs"]
[Wed Apr 22 07:38:59.720319 2026] [:error] [pid 23041:tid 23045] [client 45.137.126.33:23381] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aegKk0TXx_lUa7xwAb7-tAAAAQE"]
[Wed Apr 22 07:39:00.703812 2026] [:error] [pid 21682:tid 21730] [client 45.137.126.43:63807] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aegKlJlXWQZUlmPHS3oSxwAAAEc"]
[Wed Apr 22 07:39:03.737993 2026] [:error] [pid 31756:tid 31803] [client 45.137.126.15:62559] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aegKl9_WbkXbHaEfhd3lNQAAAks"]
[Wed Apr 22 07:39:04.720339 2026] [:error] [pid 31756:tid 31813] [client 45.137.126.43:39067] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aegKmN_WbkXbHaEfhd3lNgAAAlU"]
[Wed Apr 22 07:39:09.232606 2026] [:error] [pid 31844:tid 31857] [client 45.137.126.28:31575] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aegKnWtAU9CprTB4b3Iz1AAAAos"]
[Wed Apr 22 07:39:11.751598 2026] [:error] [pid 23041:tid 23046] [client 45.137.126.36:64343] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aegKn0TXx_lUa7xwAb7_FwAAAQI"]
[Wed Apr 22 07:39:12.733813 2026] [:error] [pid 21682:tid 21744] [client 45.137.126.47:63881] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aegKoJlXWQZUlmPHS3oS4AAAAFU"]
[Wed Apr 22 07:39:13.729682 2026] [:error] [pid 31949:tid 31957] [client 45.137.126.39:24587] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aegKoX2WtGZh5JfbMUdEJwAAAwU"]
[Wed Apr 22 07:39:18.330173 2026] [:error] [pid 23041:tid 23059] [client 45.137.126.39:57957] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aegKpkTXx_lUa7xwAb7_PwAAAQ8"]
[Wed Apr 22 07:39:22.940441 2026] [:error] [pid 31755:tid 31768] [client 45.137.126.11:52955] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aegKqgz2mYMkg3X8q1t3aQAAAgU"]
[Wed Apr 22 07:39:25.860372 2026] [:error] [pid 23041:tid 23053] [client 45.137.126.17:36471] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aegKrUTXx_lUa7xwAb7_dwAAAQk"]
[Wed Apr 22 07:39:26.852291 2026] [proxy_fcgi:error] [pid 31755:tid 31772] [client 45.137.126.10:63763] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Wed Apr 22 07:39:27.839063 2026] [:error] [pid 31755:tid 31770] [client 45.137.126.28:27151] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aegKrwz2mYMkg3X8q1t3dQAAAgc"]
[Wed Apr 22 07:39:38.932203 2026] [:error] [pid 31756:tid 31800] [client 45.137.126.18:20401] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "aegKut_WbkXbHaEfhd3lcgAAAkg"]
[Wed Apr 22 07:39:39.911640 2026] [:error] [pid 31755:tid 31782] [client 45.137.126.33:43919] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aegKuwz2mYMkg3X8q1t3lwAAAhM"]
[Wed Apr 22 07:39:44.610206 2026] [:error] [pid 31755:tid 31787] [client 45.137.126.47:48245] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aegKwAz2mYMkg3X8q1t3owAAAhg"]
[Wed Apr 22 07:39:52.367673 2026] [:error] [pid 31755:tid 31781] [client 45.137.126.42:60835] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aegKyAz2mYMkg3X8q1t3zQAAAhI"]
[Wed Apr 22 07:39:57.025916 2026] [:error] [pid 31756:tid 31814] [client 45.137.126.19:54631] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aegKzd_WbkXbHaEfhd3lhAAAAlY"]
[Wed Apr 22 07:40:02.852274 2026] [:error] [pid 31755:tid 31787] [client 45.137.126.38:42453] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aegK0gz2mYMkg3X8q1t38wAAAhg"]
[Wed Apr 22 07:40:05.852917 2026] [:error] [pid 31755:tid 31780] [client 45.137.126.7:54837] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aegK1Qz2mYMkg3X8q1t4AwAAAhE"]
[Wed Apr 22 07:40:08.787049 2026] [:error] [pid 31755:tid 31768] [client 45.137.126.9:37863] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aegK2Az2mYMkg3X8q1t4FQAAAgU"]
[Wed Apr 22 07:40:16.702755 2026] [:error] [pid 31756:tid 31812] [client 45.137.126.24:58985] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aegK4N_WbkXbHaEfhd3lkQAAAlQ"]
[Wed Apr 22 07:40:22.890389 2026] [:error] [pid 31755:tid 31776] [client 45.137.126.34:51659] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aegK5gz2mYMkg3X8q1t4PgAAAg0"]
[Wed Apr 22 07:40:23.877457 2026] [proxy_fcgi:error] [pid 23041:tid 23054] [client 45.137.126.16:28823] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 07:40:25.833776 2026] [:error] [pid 23041:tid 23052] [client 45.137.126.16:28823] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aegK6UTXx_lUa7xwAb7_pwAAAQg"]
[Wed Apr 22 07:40:26.816013 2026] [:error] [pid 31949:tid 31967] [client 45.137.126.32:41485] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aegK6n2WtGZh5JfbMUdEMAAAAw8"]
[Wed Apr 22 07:40:31.440018 2026] [:error] [pid 31755:tid 31773] [client 45.137.126.26:60317] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aegK7wz2mYMkg3X8q1t4XgAAAgo"]
[Wed Apr 22 07:40:32.429731 2026] [:error] [pid 31755:tid 31786] [client 45.137.126.10:47727] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aegK8Az2mYMkg3X8q1t4YQAAAhc"]
[Wed Apr 22 07:40:43.339960 2026] [:error] [pid 31756:tid 31808] [client 45.137.126.14:53389] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aegK-9_WbkXbHaEfhd3logAAAlA"]
[Wed Apr 22 07:40:44.325480 2026] [:error] [pid 31755:tid 31785] [client 45.137.126.13:48505] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aegK_Az2mYMkg3X8q1t4jgAAAhY"]
[Wed Apr 22 07:40:47.305772 2026] [:error] [pid 23041:tid 23063] [client 45.137.126.22:38697] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/log.php"] [unique_id "aegK_0TXx_lUa7xwAb7_7QAAARM"]
[Wed Apr 22 07:40:48.297422 2026] [:error] [pid 23041:tid 23068] [client 45.137.126.10:34881] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aegLAETXx_lUa7xwAb7_9AAAARg"]
[Wed Apr 22 07:40:49.277418 2026] [:error] [pid 23041:tid 23063] [client 45.137.126.41:58279] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aegLAUTXx_lUa7xwAb7_-gAAARM"]
[Wed Apr 22 07:40:50.257993 2026] [:error] [pid 31755:tid 31767] [client 45.137.126.8:59465] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/aw.php"] [unique_id "aegLAgz2mYMkg3X8q1t4ngAAAgQ"]
[Wed Apr 22 07:40:57.926732 2026] [:error] [pid 21683:tid 21753] [client 45.137.126.25:64871] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aegLCVZBWT-0diZyYyafXQAAAIM"]
[Wed Apr 22 07:40:58.915496 2026] [:error] [pid 21682:tid 21725] [client 45.137.126.44:39723] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/install.php"] [unique_id "aegLCplXWQZUlmPHS3oTQAAAAEI"]
[Wed Apr 22 07:41:04.056700 2026] [:error] [pid 23041:tid 23059] [client 45.137.126.36:63079] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aegLEETXx_lUa7xwAb4AEQAAAQ8"]
[Wed Apr 22 07:41:05.040736 2026] [:error] [pid 32053:tid 32066] [client 45.137.126.47:42165] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aegLEQzPjXx_ocfbYhs6MwAAA0s"]
[Wed Apr 22 07:41:09.493322 2026] [:error] [pid 31756:tid 31796] [client 45.137.126.46:28699] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/template-less.php"] [unique_id "aegLFd_WbkXbHaEfhd3luQAAAkQ"]
[Wed Apr 22 07:41:10.477001 2026] [:error] [pid 31755:tid 31764] [client 45.137.126.18:31857] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aegLFgz2mYMkg3X8q1t4wwAAAgE"]
[Wed Apr 22 07:41:22.975477 2026] [:error] [pid 23041:tid 23059] [client 45.137.126.26:48709] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aegLIkTXx_lUa7xwAb4AKQAAAQ8"]
[Wed Apr 22 07:41:23.958031 2026] [:error] [pid 23041:tid 23058] [client 45.137.126.30:48777] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aegLI0TXx_lUa7xwAb4ALAAAAQ4"]
[Wed Apr 22 07:41:28.466715 2026] [:error] [pid 23041:tid 23063] [client 45.137.126.41:32527] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "aegLKETXx_lUa7xwAb4AMQAAARM"]
[Wed Apr 22 07:41:31.369783 2026] [:error] [pid 23041:tid 23060] [client 45.137.126.40:51763] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aegLK0TXx_lUa7xwAb4AMwAAARA"]
[Wed Apr 22 07:41:34.273800 2026] [:error] [pid 31755:tid 31777] [client 45.137.126.9:59091] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/load.php"] [unique_id "aegLLgz2mYMkg3X8q1t5JAAAAg4"]
[Wed Apr 22 07:41:35.257378 2026] [:error] [pid 31756:tid 31807] [client 45.137.126.27:46753] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aegLL9_WbkXbHaEfhd3lyAAAAk8"]
[Wed Apr 22 07:41:36.240214 2026] [:error] [pid 31706:tid 31725] [client 45.137.126.15:49355] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aegLMLGSe9Rnd4Q_z1iiNwAAAdA"]
[Wed Apr 22 07:41:43.953794 2026] [:error] [pid 31756:tid 31813] [client 45.137.126.47:38867] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aegLN9_WbkXbHaEfhd3l2wAAAlU"]
[Wed Apr 22 07:41:46.972845 2026] [:error] [pid 31755:tid 31764] [client 45.137.126.24:65039] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aegLOgz2mYMkg3X8q1t5UgAAAgE"]
[Wed Apr 22 07:41:51.602579 2026] [:error] [pid 23041:tid 23050] [client 45.137.126.18:34583] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aegLP0TXx_lUa7xwAb4ASAAAAQY"]
[Wed Apr 22 07:41:52.585682 2026] [:error] [pid 31755:tid 31782] [client 45.137.126.49:49513] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aegLQAz2mYMkg3X8q1t5ZgAAAhM"]
[Wed Apr 22 07:41:53.566510 2026] [:error] [pid 21682:tid 21746] [client 45.137.126.46:48773] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aegLQZlXWQZUlmPHS3oTXwAAAFc"]
[Wed Apr 22 07:42:08.121469 2026] [:error] [pid 21682:tid 21727] [client 45.137.126.42:51075] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aegLUJlXWQZUlmPHS3oTiAAAAEQ"]
[Wed Apr 22 07:42:10.508174 2026] [:error] [pid 23041:tid 23057] [client 45.137.126.33:59183] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aegLUkTXx_lUa7xwAb4AdgAAAQ0"]
[Wed Apr 22 07:42:15.051782 2026] [:error] [pid 31755:tid 31779] [client 45.137.126.34:40715] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aegLVwz2mYMkg3X8q1t5yAAAAhA"]
[Wed Apr 22 07:42:16.032177 2026] [:error] [pid 31755:tid 31774] [client 45.137.126.41:37065] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aegLWAz2mYMkg3X8q1t5zAAAAgs"]
[Wed Apr 22 07:42:17.016590 2026] [:error] [pid 31755:tid 31777] [client 45.137.126.33:51935] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aegLWQz2mYMkg3X8q1t50QAAAg4"]
[Wed Apr 22 07:42:21.234282 2026] [:error] [pid 31755:tid 31777] [client 45.137.126.4:34499] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aegLXQz2mYMkg3X8q1t54wAAAg4"]
[Wed Apr 22 07:42:33.539887 2026] [:error] [pid 23041:tid 23046] [client 45.137.126.7:36373] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-pie.php"] [unique_id "aegLaUTXx_lUa7xwAb4AoAAAAQI"]
[Wed Apr 22 07:42:41.118984 2026] [:error] [pid 21683:tid 21771] [client 45.137.126.5:60199] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aegLcVZBWT-0diZyYyafpgAAAJU"]
[Wed Apr 22 07:42:45.548048 2026] [:error] [pid 23041:tid 23058] [client 45.137.126.27:57117] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/nav-menu.php"] [unique_id "aegLdUTXx_lUa7xwAb4AsAAAAQ4"]
[Wed Apr 22 07:42:46.529064 2026] [:error] [pid 21682:tid 21737] [client 45.137.126.33:41951] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aegLdplXWQZUlmPHS3oTrwAAAE4"]
[Wed Apr 22 07:43:05.156767 2026] [:error] [pid 21682:tid 21724] [client 45.137.126.16:63099] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aegLiZlXWQZUlmPHS3oT0gAAAEE"]
[Wed Apr 22 07:43:06.135775 2026] [:error] [pid 31755:tid 31764] [client 45.137.126.15:23777] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aegLigz2mYMkg3X8q1t6TAAAAgE"]
[Wed Apr 22 07:43:07.117969 2026] [:error] [pid 31755:tid 31775] [client 45.137.126.14:21439] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aegLiwz2mYMkg3X8q1t6UQAAAgw"]
[Wed Apr 22 07:43:10.053520 2026] [:error] [pid 31755:tid 31767] [client 45.137.126.13:36895] [client 45.137.126.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aegLjgz2mYMkg3X8q1t6XQAAAgQ"]
[Wed Apr 22 07:43:13.278094 2026] [:error] [pid 31755:tid 31779] [client 45.137.126.13:36895] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aegLkQz2mYMkg3X8q1t6bgAAAhA"]
[Wed Apr 22 07:43:14.259342 2026] [:error] [pid 21683:tid 21759] [client 45.137.126.12:57031] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aegLklZBWT-0diZyYyaftgAAAIk"]
[Wed Apr 22 07:43:15.242511 2026] [:error] [pid 31755:tid 31774] [client 45.137.126.15:47497] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aegLkwz2mYMkg3X8q1t6cgAAAgs"]
[Wed Apr 22 07:43:25.749928 2026] [:error] [pid 31756:tid 31797] [client 45.137.126.50:25301] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aegLnd_WbkXbHaEfhd3mPgAAAkU"]
[Wed Apr 22 07:43:39.171411 2026] [:error] [pid 31755:tid 31774] [client 45.137.126.5:58591] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aegLqwz2mYMkg3X8q1t6ngAAAgs"]
[Wed Apr 22 07:43:40.157632 2026] [authz_core:error] [pid 23041:tid 23053] [client 45.137.126.48:39283] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/views/cmd.php
[Wed Apr 22 07:43:42.531433 2026] [:error] [pid 23041:tid 23068] [client 45.137.126.48:39283] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aegLrkTXx_lUa7xwAb4A_QAAARg"]
[Wed Apr 22 07:44:03.049762 2026] [:error] [pid 21682:tid 21741] [client 45.137.126.23:20805] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aegLw5lXWQZUlmPHS3oUHQAAAFI"]
[Wed Apr 22 07:44:04.034372 2026] [:error] [pid 31755:tid 31772] [client 45.137.126.15:29539] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aegLxAz2mYMkg3X8q1t7CAAAAgk"]
[Wed Apr 22 07:44:05.025632 2026] [:error] [pid 23041:tid 23052] [client 45.137.126.19:31821] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aegLxUTXx_lUa7xwAb4BJgAAAQg"]
[Wed Apr 22 07:44:06.007588 2026] [:error] [pid 21682:tid 21724] [client 45.137.126.32:39369] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aegLxplXWQZUlmPHS3oUHgAAAEE"]
[Wed Apr 22 07:44:12.118932 2026] [:error] [pid 32053:tid 32068] [client 45.137.126.49:49389] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aegLzAzPjXx_ocfbYhs6VwAAA00"]
[Wed Apr 22 07:44:13.104066 2026] [:error] [pid 31755:tid 31782] [client 45.137.126.51:25477] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aegLzQz2mYMkg3X8q1t7JQAAAhM"]
[Wed Apr 22 07:44:22.767204 2026] [:error] [pid 31755:tid 31780] [client 45.137.126.29:48139] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aegL1gz2mYMkg3X8q1t7QAAAAhE"]
[Wed Apr 22 07:44:30.837690 2026] [:error] [pid 31756:tid 31796] [client 45.137.126.51:53045] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aegL3t_WbkXbHaEfhd3mhAAAAkQ"]
[Wed Apr 22 07:44:31.819318 2026] [:error] [pid 21682:tid 21725] [client 45.137.126.15:40715] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aegL35lXWQZUlmPHS3oULwAAAEI"]
[Wed Apr 22 07:44:35.350014 2026] [autoindex:error] [pid 23041:tid 23053] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:44:39.172442 2026] [autoindex:error] [pid 23041:tid 23060] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:44:49.477323 2026] [autoindex:error] [pid 23041:tid 23053] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:44:51.610178 2026] [autoindex:error] [pid 23041:tid 23068] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:44:57.507192 2026] [autoindex:error] [pid 23041:tid 23047] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:44:58.005201 2026] [autoindex:error] [pid 23041:tid 23054] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:44:58.501689 2026] [autoindex:error] [pid 23041:tid 23048] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:44:58.997901 2026] [autoindex:error] [pid 23041:tid 23046] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:01.799129 2026] [autoindex:error] [pid 23041:tid 23064] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:02.296080 2026] [autoindex:error] [pid 23041:tid 23059] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:04.285966 2026] [autoindex:error] [pid 23041:tid 23063] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:04.784326 2026] [autoindex:error] [pid 23041:tid 23068] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:06.862256 2026] [autoindex:error] [pid 23041:tid 23065] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:07.864988 2026] [autoindex:error] [pid 23041:tid 23052] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:08.362676 2026] [autoindex:error] [pid 23041:tid 23047] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:08.859095 2026] [autoindex:error] [pid 23041:tid 23044] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:14.676328 2026] [autoindex:error] [pid 23041:tid 23056] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:15.171781 2026] [autoindex:error] [pid 23041:tid 23058] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:15.669338 2026] [autoindex:error] [pid 23041:tid 23045] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:16.167416 2026] [autoindex:error] [pid 23041:tid 23044] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:16.663287 2026] [autoindex:error] [pid 23041:tid 23048] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:17.159047 2026] [autoindex:error] [pid 23041:tid 23052] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:19.291112 2026] [autoindex:error] [pid 23041:tid 23044] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:19.790543 2026] [autoindex:error] [pid 23041:tid 23058] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:25.189387 2026] [autoindex:error] [pid 23041:tid 23064] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:28.873595 2026] [autoindex:error] [pid 23041:tid 23050] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:29.867563 2026] [autoindex:error] [pid 23041:tid 23067] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:35.437229 2026] [autoindex:error] [pid 23041:tid 23068] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:35.957832 2026] [autoindex:error] [pid 23041:tid 23052] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:41.381072 2026] [autoindex:error] [pid 23041:tid 23063] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:43.628548 2026] [autoindex:error] [pid 23041:tid 23048] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:45.747280 2026] [autoindex:error] [pid 23041:tid 23060] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:46.247303 2026] [autoindex:error] [pid 23041:tid 23052] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:46.744768 2026] [autoindex:error] [pid 23041:tid 23057] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:47.241772 2026] [autoindex:error] [pid 23041:tid 23059] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:47.739574 2026] [autoindex:error] [pid 23041:tid 23067] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:51.526977 2026] [autoindex:error] [pid 23041:tid 23063] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:55.362872 2026] [autoindex:error] [pid 23041:tid 23065] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:45:55.861388 2026] [autoindex:error] [pid 23041:tid 23049] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:01.478983 2026] [autoindex:error] [pid 23041:tid 23055] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:03.599356 2026] [autoindex:error] [pid 23041:tid 23048] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:07.397393 2026] [autoindex:error] [pid 23041:tid 23058] [client 45.137.126.38:49951] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:11.127287 2026] [autoindex:error] [pid 23041:tid 23068] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:11.623038 2026] [autoindex:error] [pid 23041:tid 23056] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:12.121376 2026] [autoindex:error] [pid 23041:tid 23066] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:12.619872 2026] [autoindex:error] [pid 23041:tid 23047] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:13.116310 2026] [autoindex:error] [pid 23041:tid 23055] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:13.617902 2026] [autoindex:error] [pid 23041:tid 23053] [client 45.137.126.38:49951] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:22.705542 2026] [autoindex:error] [pid 32053:tid 32064] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:23.202555 2026] [autoindex:error] [pid 32053:tid 32063] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:23.699443 2026] [autoindex:error] [pid 32053:tid 32060] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:24.194744 2026] [autoindex:error] [pid 32053:tid 32068] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:24.695768 2026] [autoindex:error] [pid 32053:tid 32055] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:26.835829 2026] [autoindex:error] [pid 32053:tid 32059] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:30.850762 2026] [autoindex:error] [pid 32053:tid 32061] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:32.985264 2026] [autoindex:error] [pid 32053:tid 32062] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:33.482552 2026] [autoindex:error] [pid 32053:tid 32058] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:33.978454 2026] [autoindex:error] [pid 32053:tid 32077] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:34.476038 2026] [autoindex:error] [pid 32053:tid 32076] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:34.971020 2026] [autoindex:error] [pid 32053:tid 32065] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:42.206786 2026] [autoindex:error] [pid 32053:tid 32078] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:42.703043 2026] [autoindex:error] [pid 32053:tid 32064] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:46.494422 2026] [autoindex:error] [pid 32053:tid 32068] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:46.991025 2026] [autoindex:error] [pid 32053:tid 32055] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:49.136163 2026] [autoindex:error] [pid 32053:tid 32075] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:57.752173 2026] [autoindex:error] [pid 32053:tid 32056] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:58.249589 2026] [autoindex:error] [pid 32053:tid 32061] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:58.744542 2026] [autoindex:error] [pid 32053:tid 32074] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:46:59.241923 2026] [autoindex:error] [pid 32053:tid 32062] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:06.340272 2026] [autoindex:error] [pid 32053:tid 32064] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:11.692333 2026] [autoindex:error] [pid 32053:tid 32057] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:12.188414 2026] [autoindex:error] [pid 32053:tid 32069] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:17.758041 2026] [autoindex:error] [pid 32053:tid 32074] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:26.330935 2026] [autoindex:error] [pid 32053:tid 32065] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:29.973133 2026] [autoindex:error] [pid 32053:tid 32064] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:30.469364 2026] [autoindex:error] [pid 32053:tid 32063] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:30.978346 2026] [autoindex:error] [pid 32053:tid 32068] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:33.076693 2026] [autoindex:error] [pid 32053:tid 32055] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:35.147169 2026] [autoindex:error] [pid 32053:tid 32075] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:57.781988 2026] [autoindex:error] [pid 32053:tid 32073] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:47:58.276730 2026] [autoindex:error] [pid 32053:tid 32069] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:01.986469 2026] [autoindex:error] [pid 32053:tid 32061] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:05.466196 2026] [autoindex:error] [pid 32053:tid 32076] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:08.980523 2026] [autoindex:error] [pid 32053:tid 32072] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:11.040186 2026] [autoindex:error] [pid 32053:tid 32070] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:11.535384 2026] [autoindex:error] [pid 32053:tid 32078] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:13.620771 2026] [autoindex:error] [pid 32053:tid 32064] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:14.122134 2026] [autoindex:error] [pid 32053:tid 32063] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:14.617644 2026] [autoindex:error] [pid 32053:tid 32068] [client 45.137.126.23:51677] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:20.845471 2026] [autoindex:error] [pid 21683:tid 21770] [client 45.137.126.19:34243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:24.437678 2026] [autoindex:error] [pid 21683:tid 21765] [client 45.137.126.19:34243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:35.651070 2026] [autoindex:error] [pid 21683:tid 21752] [client 45.137.126.19:34243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:36.146836 2026] [autoindex:error] [pid 21683:tid 21753] [client 45.137.126.19:34243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:38.146046 2026] [autoindex:error] [pid 21683:tid 21759] [client 45.137.126.19:34243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:40.247015 2026] [autoindex:error] [pid 21683:tid 21766] [client 45.137.126.19:34243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:47.348875 2026] [autoindex:error] [pid 21683:tid 21761] [client 45.137.126.19:34243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:48:54.816771 2026] [autoindex:error] [pid 21683:tid 21753] [client 45.137.126.19:34243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:49:03.653983 2026] [autoindex:error] [pid 21683:tid 21773] [client 45.137.126.19:34243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:49:10.936340 2026] [autoindex:error] [pid 21683:tid 21767] [client 45.137.126.19:34243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 07:49:11.434881 2026] [autoindex:error] [pid 21683:tid 21761] [client 45.137.126.19:34243] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 10:10:13.081184 2026] [:error] [pid 23041:tid 23050] [client 49.7.227.204:34268] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeguBUTXx_lUa7xwAb4_bgAAAQY"]
[Wed Apr 22 12:35:12.119700 2026] [:error] [pid 21683:tid 21765] [client 201.76.188.122:38467] [client 201.76.188.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.76.188.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aehQAFZBWT-0diZyYybSOwAAAI8"]
[Wed Apr 22 12:57:46.654316 2026] [:error] [pid 32053:tid 32069] [client 201.76.188.122:53298] [client 201.76.188.122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aehVSgzPjXx_ocfbYht6bgAAA04"]
[Wed Apr 22 13:21:20.151277 2026] [:error] [pid 21683:tid 21768] [client 20.111.37.69:49233] [client 20.111.37.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeha0FZBWT-0diZyYybYwwAAAJI"]
[Wed Apr 22 13:21:21.372746 2026] [:error] [pid 21682:tid 21747] [client 20.111.37.69:49248] [client 20.111.37.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeha0ZlXWQZUlmPHS3pw-gAAAFg"]
[Wed Apr 22 13:21:22.285885 2026] [:error] [pid 32053:tid 32078] [client 20.111.37.69:54388] [client 20.111.37.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeha0gzPjXx_ocfbYhuDRgAAA1c"]
[Wed Apr 22 13:21:22.974130 2026] [:error] [pid 32053:tid 32069] [client 20.111.37.69:60219] [client 20.111.37.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeha0gzPjXx_ocfbYhuDTAAAA04"]
[Wed Apr 22 15:35:34.314550 2026] [:error] [pid 9085:tid 9100] [client 43.134.49.216:48526] [client 43.134.49.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeh6Rt-_-or9vQnlWnqojQAAAU0"]
[Wed Apr 22 18:16:05.210165 2026] [:error] [pid 6384:tid 6401] [client 103.218.106.42:59043] [client 103.218.106.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.106.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeif5T58M3t15ICeWHXqqAAAAM4"]
[Wed Apr 22 18:16:15.693862 2026] [:error] [pid 6250:tid 6277] [client 103.218.106.42:59394] [client 103.218.106.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.106.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeif7w-iZeQkqmQVfj7poAAAAFc"]
[Wed Apr 22 18:16:26.266969 2026] [:error] [pid 9085:tid 9087] [client 103.218.106.42:59653] [client 103.218.106.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.106.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeif-t-_-or9vQnlWnoF4AAAAUA"]
[Wed Apr 22 18:16:36.939493 2026] [:error] [pid 9085:tid 9102] [client 103.218.106.42:59907] [client 103.218.106.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.106.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeigBN-_-or9vQnlWnoGEAAAAU8"]
[Wed Apr 22 18:16:47.594500 2026] [:error] [pid 6384:tid 6397] [client 103.218.106.42:60165] [client 103.218.106.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.218.106.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeigDz58M3t15ICeWHXrjQAAAMo"]
[Wed Apr 22 18:29:14.762157 2026] [:error] [pid 6250:tid 6255] [client 117.53.155.42:33204] [client 117.53.155.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.53.155.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeii-g-iZeQkqmQVfj7uigAAAEE"]
[Wed Apr 22 18:29:15.693069 2026] [proxy_fcgi:error] [pid 6250:tid 6255] [client 117.53.155.42:33204] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 22 18:29:18.256458 2026] [:error] [pid 6252:tid 6331] [client 117.53.155.42:33216] [client 117.53.155.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.53.155.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeii_utGYuiYb1nWBpQyiAAAARM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Wed Apr 22 18:29:19.388701 2026] [proxy_fcgi:error] [pid 6252:tid 6331] [client 117.53.155.42:33216] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Wed Apr 22 18:37:23.548141 2026] [:error] [pid 6250:tid 6263] [client 15.235.186.61:53670] [client 15.235.186.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.186.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeik4w-iZeQkqmQVfj7wLgAAAEk"]
[Wed Apr 22 18:37:24.410458 2026] [proxy_fcgi:error] [pid 6250:tid 6263] [client 15.235.186.61:53670] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 22 18:37:24.676313 2026] [:error] [pid 6250:tid 6262] [client 15.235.186.61:53670] [client 15.235.186.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 15.235.186.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeik5A-iZeQkqmQVfj7wNgAAAEg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Wed Apr 22 18:37:25.734672 2026] [proxy_fcgi:error] [pid 6250:tid 6262] [client 15.235.186.61:53670] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Wed Apr 22 18:45:28.248717 2026] [:error] [pid 9085:tid 9101] [client 54.37.252.36:53440] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aeimyN-_-or9vQnlWnoeDAAAAU4"]
[Wed Apr 22 18:45:30.792041 2026] [:error] [pid 6250:tid 6254] [client 54.37.252.36:60252] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aeimyg-iZeQkqmQVfj7y2gAAAEA"]
[Wed Apr 22 18:45:33.183592 2026] [:error] [pid 6384:tid 6397] [client 54.37.252.36:60268] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aeimzT58M3t15ICeWHX8EQAAAMo"]
[Wed Apr 22 18:45:35.524547 2026] [:error] [pid 9085:tid 9097] [client 54.37.252.36:60272] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aeimz9-_-or9vQnlWnoeGAAAAUo"]
[Wed Apr 22 18:45:37.966123 2026] [:error] [pid 6250:tid 6267] [client 54.37.252.36:60276] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aeim0Q-iZeQkqmQVfj7y4AAAAE0"]
[Wed Apr 22 18:45:40.331393 2026] [:error] [pid 6252:tid 6319] [client 54.37.252.36:54142] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aeim1OtGYuiYb1nWBpQ2JwAAAQc"]
[Wed Apr 22 18:45:42.643316 2026] [:error] [pid 6252:tid 6335] [client 54.37.252.36:54158] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aeim1utGYuiYb1nWBpQ2KwAAARc"]
[Wed Apr 22 18:45:45.085019 2026] [:error] [pid 9085:tid 9095] [client 54.37.252.36:54178] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aeim2d-_-or9vQnlWnoeNgAAAUg"]
[Wed Apr 22 18:45:47.572355 2026] [:error] [pid 6384:tid 6406] [client 54.37.252.36:54202] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aeim2z58M3t15ICeWHX8MQAAANM"]
[Wed Apr 22 18:45:49.997280 2026] [:error] [pid 6250:tid 6255] [client 54.37.252.36:38070] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aeim3Q-iZeQkqmQVfj7y6AAAAEE"]
[Wed Apr 22 18:45:52.460370 2026] [:error] [pid 9085:tid 9110] [client 54.37.252.36:38080] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aeim4N-_-or9vQnlWnoeOwAAAVc"]
[Wed Apr 22 18:45:55.084642 2026] [:error] [pid 9085:tid 9103] [client 54.37.252.36:38092] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aeim49-_-or9vQnlWnoePwAAAVA"]
[Wed Apr 22 18:45:57.438968 2026] [:error] [pid 6251:tid 6303] [client 54.37.252.36:38108] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aeim5SsFAzbyObL-SQ5oygAAAJI"]
[Wed Apr 22 18:45:59.832751 2026] [:error] [pid 6252:tid 6322] [client 54.37.252.36:44436] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aeim5-tGYuiYb1nWBpQ2NwAAAQo"]
[Wed Apr 22 18:46:02.312014 2026] [:error] [pid 6384:tid 6401] [client 54.37.252.36:44452] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aeim6j58M3t15ICeWHX8TAAAAM4"]
[Wed Apr 22 18:46:04.680200 2026] [:error] [pid 6344:tid 6364] [client 54.37.252.36:44456] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aeim7EDOTF-pkQnDeUnOQgAAAA8"]
[Wed Apr 22 18:46:07.037526 2026] [:error] [pid 9085:tid 9103] [client 54.37.252.36:44458] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aeim79-_-or9vQnlWnoeSwAAAVA"]
[Wed Apr 22 18:46:09.503017 2026] [:error] [pid 6250:tid 6266] [client 54.37.252.36:44346] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aeim8Q-iZeQkqmQVfj7y8QAAAEw"]
[Wed Apr 22 18:46:12.054006 2026] [:error] [pid 6252:tid 6314] [client 54.37.252.36:44348] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aeim9OtGYuiYb1nWBpQ2QgAAAQI"]
[Wed Apr 22 18:46:14.443923 2026] [:error] [pid 6344:tid 6360] [client 54.37.252.36:44352] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aeim9kDOTF-pkQnDeUnOUgAAAAs"]
[Wed Apr 22 18:46:16.914532 2026] [:error] [pid 6344:tid 6357] [client 54.37.252.36:44356] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aeim-EDOTF-pkQnDeUnOWwAAAAg"]
[Wed Apr 22 18:46:19.481513 2026] [:error] [pid 6384:tid 6406] [client 54.37.252.36:56306] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aeim-z58M3t15ICeWHX8dwAAANM"]
[Wed Apr 22 18:46:21.862121 2026] [:error] [pid 6252:tid 6324] [client 54.37.252.36:56310] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aeim_etGYuiYb1nWBpQ2SAAAAQw"]
[Wed Apr 22 18:46:24.249019 2026] [:error] [pid 9085:tid 9111] [client 54.37.252.36:56316] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "aeinAN-_-or9vQnlWnoeWAAAAVg"]
[Wed Apr 22 18:46:55.479990 2026] [:error] [pid 9085:tid 9093] [client 54.37.252.36:56322] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aeinH9-_-or9vQnlWnoejAAAAUY"]
[Wed Apr 22 18:46:57.865771 2026] [:error] [pid 6252:tid 6323] [client 54.37.252.36:45332] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aeinIetGYuiYb1nWBpQ2ewAAAQs"]
[Wed Apr 22 18:47:00.189825 2026] [:error] [pid 6252:tid 6332] [client 54.37.252.36:38964] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aeinJOtGYuiYb1nWBpQ2gwAAARQ"]
[Wed Apr 22 18:47:02.506544 2026] [:error] [pid 6250:tid 6278] [client 54.37.252.36:38968] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aeinJg-iZeQkqmQVfj7zNgAAAFg"]
[Wed Apr 22 18:47:04.995054 2026] [:error] [pid 6384:tid 6404] [client 54.37.252.36:38974] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aeinKD58M3t15ICeWHX8ywAAANE"]
[Wed Apr 22 18:47:07.376767 2026] [:error] [pid 9085:tid 9096] [client 54.37.252.36:38990] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aeinK9-_-or9vQnlWnoemwAAAUk"]
[Wed Apr 22 18:47:09.699100 2026] [:error] [pid 9085:tid 9100] [client 54.37.252.36:60058] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aeinLd-_-or9vQnlWnoeogAAAU0"]
[Wed Apr 22 18:47:12.126189 2026] [:error] [pid 6250:tid 6259] [client 54.37.252.36:60062] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aeinMA-iZeQkqmQVfj7zOgAAAEU"]
[Wed Apr 22 18:47:14.533751 2026] [:error] [pid 6250:tid 6263] [client 54.37.252.36:60072] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aeinMg-iZeQkqmQVfj7zPwAAAEk"]
[Wed Apr 22 18:47:16.979471 2026] [:error] [pid 6252:tid 6320] [client 54.37.252.36:60074] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aeinNOtGYuiYb1nWBpQ2hgAAAQg"]
[Wed Apr 22 18:47:19.323049 2026] [:error] [pid 9085:tid 9099] [client 54.37.252.36:54980] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aeinN9-_-or9vQnlWnoevAAAAUw"]
[Wed Apr 22 18:47:21.611640 2026] [:error] [pid 6344:tid 6359] [client 54.37.252.36:54984] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aeinOUDOTF-pkQnDeUnOxAAAAAo"]
[Wed Apr 22 18:47:23.896514 2026] [:error] [pid 6252:tid 6324] [client 54.37.252.36:54990] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aeinO-tGYuiYb1nWBpQ2kQAAAQw"]
[Wed Apr 22 18:47:26.333491 2026] [:error] [pid 6384:tid 6403] [client 54.37.252.36:55002] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aeinPj58M3t15ICeWHX83AAAANA"]
[Wed Apr 22 18:47:28.640172 2026] [:error] [pid 6344:tid 6364] [client 54.37.252.36:55016] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aeinQEDOTF-pkQnDeUnOzgAAAA8"]
[Wed Apr 22 18:47:31.079307 2026] [:error] [pid 6344:tid 6370] [client 54.37.252.36:38236] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aeinQ0DOTF-pkQnDeUnO0AAAABU"]
[Wed Apr 22 18:47:33.548249 2026] [:error] [pid 6344:tid 6353] [client 54.37.252.36:38252] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aeinRUDOTF-pkQnDeUnO1AAAAAQ"]
[Wed Apr 22 18:47:35.848908 2026] [:error] [pid 6252:tid 6335] [client 54.37.252.36:38262] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aeinR-tGYuiYb1nWBpQ2rwAAARc"]
[Wed Apr 22 18:47:38.144011 2026] [:error] [pid 6250:tid 6266] [client 54.37.252.36:38266] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aeinSg-iZeQkqmQVfj7zXwAAAEw"]
[Wed Apr 22 18:47:40.462640 2026] [:error] [pid 6252:tid 6313] [client 54.37.252.36:43366] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aeinTOtGYuiYb1nWBpQ2tQAAAQE"]
[Wed Apr 22 18:47:42.764672 2026] [:error] [pid 6384:tid 6393] [client 54.37.252.36:43368] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aeinTj58M3t15ICeWHX86wAAAMY"]
[Wed Apr 22 18:47:45.204770 2026] [:error] [pid 6384:tid 6401] [client 54.37.252.36:43370] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aeinUT58M3t15ICeWHX88QAAAM4"]
[Wed Apr 22 18:47:47.489111 2026] [:error] [pid 6252:tid 6314] [client 54.37.252.36:43384] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aeinU-tGYuiYb1nWBpQ2xAAAAQI"]
[Wed Apr 22 18:47:49.804799 2026] [:error] [pid 6384:tid 6398] [client 54.37.252.36:45152] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aeinVT58M3t15ICeWHX8_AAAAMs"]
[Wed Apr 22 18:48:20.711341 2026] [:error] [pid 6251:tid 6296] [client 54.37.252.36:45166] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aeindCsFAzbyObL-SQ5pUgAAAIs"]
[Wed Apr 22 18:48:23.072447 2026] [:error] [pid 9085:tid 9096] [client 54.37.252.36:55022] [client 54.37.252.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aeind9-_-or9vQnlWnofCwAAAUk"]
[Wed Apr 22 18:57:31.890865 2026] [:error] [pid 6344:tid 6367] [client 43.157.153.236:46528] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeipm0DOTF-pkQnDeUnRbwAAABI"]
[Wed Apr 22 20:42:44.554410 2026] [:error] [pid 6384:tid 6395] [client 108.167.132.74:53108] [client 108.167.132.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.167.132.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aejCRD58M3t15ICeWHUx-gAAAMg"]
[Wed Apr 22 20:43:06.302138 2026] [:error] [pid 23776:tid 23789] [client 45.86.202.12:20123] [client 45.86.202.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aejCWrRExf-1pAbSeJvrFAAAAYs"]
[Wed Apr 22 20:43:11.821596 2026] [:error] [pid 6252:tid 6327] [client 45.86.202.22:35011] [client 45.86.202.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aejCX-tGYuiYb1nWBpRMRgAAAQ8"]
[Wed Apr 22 20:43:19.605293 2026] [:error] [pid 6384:tid 6391] [client 45.86.202.219:40301] [client 45.86.202.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aejCZz58M3t15ICeWHUyRAAAAMQ"]
[Wed Apr 22 20:43:24.071282 2026] [:error] [pid 6252:tid 6329] [client 45.86.202.8:20665] [client 45.86.202.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aejCbOtGYuiYb1nWBpRMUQAAARE"]
[Wed Apr 22 20:43:34.178741 2026] [:error] [pid 9085:tid 9093] [client 45.86.202.24:49465] [client 45.86.202.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aejCdt-_-or9vQnlWnpj0QAAAUY"]
[Wed Apr 22 20:43:36.661699 2026] [:error] [pid 6251:tid 6300] [client 45.86.202.9:46289] [client 45.86.202.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aejCeCsFAzbyObL-SQ58BwAAAI8"]
[Wed Apr 22 20:43:37.777699 2026] [:error] [pid 9085:tid 9092] [client 45.86.202.27:35721] [client 45.86.202.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aejCed-_-or9vQnlWnpj2gAAAUU"]
[Wed Apr 22 20:43:38.933630 2026] [:error] [pid 6384:tid 6399] [client 45.86.202.22:61503] [client 45.86.202.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aejCej58M3t15ICeWHUyWgAAAMw"]
[Wed Apr 22 20:43:40.177881 2026] [:error] [pid 6384:tid 6404] [client 45.86.202.14:55057] [client 45.86.202.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aejCfD58M3t15ICeWHUyYAAAANE"]
[Wed Apr 22 20:43:41.354757 2026] [:error] [pid 6384:tid 6396] [client 45.86.202.26:60525] [client 45.86.202.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aejCfT58M3t15ICeWHUyZwAAAMk"]
[Wed Apr 22 20:43:43.575854 2026] [:error] [pid 6344:tid 6367] [client 45.86.202.16:37293] [client 45.86.202.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aejCf0DOTF-pkQnDeUntCwAAABI"]
[Wed Apr 22 20:43:46.365228 2026] [:error] [pid 9085:tid 9095] [client 45.86.202.42:47695] [client 45.86.202.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aejCgt-_-or9vQnlWnpj6wAAAUg"]
[Wed Apr 22 20:43:50.181233 2026] [:error] [pid 6344:tid 6358] [client 45.86.202.29:52095] [client 45.86.202.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aejChkDOTF-pkQnDeUntDwAAAAk"]
[Wed Apr 22 20:43:52.454596 2026] [:error] [pid 9085:tid 9097] [client 45.86.202.34:44977] [client 45.86.202.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aejCiN-_-or9vQnlWnpkAAAAAUo"]
[Wed Apr 22 20:43:56.099910 2026] [:error] [pid 23776:tid 23790] [client 45.86.202.28:55671] [client 45.86.202.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aejCjLRExf-1pAbSeJvrQAAAAYw"]
[Wed Apr 22 20:44:04.698940 2026] [:error] [pid 9085:tid 9110] [client 45.86.202.23:50309] [client 45.86.202.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aejClN-_-or9vQnlWnpkLAAAAVc"]
[Wed Apr 22 20:44:06.775055 2026] [:error] [pid 6384:tid 6406] [client 45.86.202.9:49043] [client 45.86.202.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aejClj58M3t15ICeWHUyiwAAANM"]
[Wed Apr 22 20:44:10.890181 2026] [:error] [pid 23776:tid 23797] [client 45.86.202.9:29727] [client 45.86.202.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aejCmrRExf-1pAbSeJvrTgAAAZM"]
[Wed Apr 22 20:44:13.462855 2026] [:error] [pid 9085:tid 9100] [client 45.86.202.41:65191] [client 45.86.202.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aejCnd-_-or9vQnlWnpkTwAAAU0"]
[Wed Apr 22 20:44:19.509627 2026] [:error] [pid 6251:tid 6286] [client 45.86.202.38:62009] [client 45.86.202.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aejCoysFAzbyObL-SQ58GQAAAIE"]
[Wed Apr 22 20:44:21.966680 2026] [:error] [pid 6344:tid 6361] [client 45.86.202.33:31959] [client 45.86.202.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aejCpUDOTF-pkQnDeUntLwAAAAw"]
[Wed Apr 22 20:44:24.777379 2026] [:error] [pid 9085:tid 9110] [client 45.86.202.45:35139] [client 45.86.202.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aejCqN-_-or9vQnlWnpkcgAAAVc"]
[Wed Apr 22 20:44:25.987268 2026] [:error] [pid 6251:tid 6292] [client 45.86.202.27:64139] [client 45.86.202.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aejCqSsFAzbyObL-SQ58GgAAAIc"]
[Wed Apr 22 20:44:26.535376 2026] [:error] [pid 23776:tid 23785] [client 45.86.202.46:58873] [client 45.86.202.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aejCqrRExf-1pAbSeJvrUwAAAYc"]
[Wed Apr 22 20:44:31.782873 2026] [:error] [pid 6251:tid 6303] [client 45.86.202.48:63777] [client 45.86.202.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aejCrysFAzbyObL-SQ58JwAAAJI"]
[Wed Apr 22 20:44:33.102367 2026] [:error] [pid 9085:tid 9106] [client 45.86.202.8:53125] [client 45.86.202.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "aejCsd-_-or9vQnlWnpkeQAAAVM"]
[Wed Apr 22 20:44:33.721882 2026] [:error] [pid 9085:tid 9091] [client 45.86.202.26:64087] [client 45.86.202.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aejCsd-_-or9vQnlWnpkgAAAAUQ"]
[Wed Apr 22 20:44:44.190401 2026] [:error] [pid 23776:tid 23794] [client 45.86.202.49:27553] [client 45.86.202.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "aejCvLRExf-1pAbSeJvraQAAAZA"]
[Wed Apr 22 20:44:49.152640 2026] [:error] [pid 6344:tid 6351] [client 45.86.202.35:32993] [client 45.86.202.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.35, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aejCwUDOTF-pkQnDeUntSQAAAAI"]
[Wed Apr 22 20:45:03.727726 2026] [:error] [pid 6344:tid 6370] [client 45.86.202.35:32993] [client 45.86.202.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aejCz0DOTF-pkQnDeUntWwAAABU"]
[Wed Apr 22 20:45:07.446899 2026] [:error] [pid 6384:tid 6398] [client 45.86.202.29:44563] [client 45.86.202.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aejC0z58M3t15ICeWHUy3wAAAMs"]
[Wed Apr 22 20:45:09.886903 2026] [:error] [pid 6384:tid 6394] [client 45.86.202.29:44563] [client 45.86.202.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "aejC1T58M3t15ICeWHUy6gAAAMc"]
[Wed Apr 22 20:45:21.254963 2026] [:error] [pid 6384:tid 6400] [client 45.86.202.31:27453] [client 45.86.202.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aejC4T58M3t15ICeWHUzNgAAAM0"]
[Wed Apr 22 20:45:32.138966 2026] [:error] [pid 6252:tid 6313] [client 45.86.202.15:31173] [client 45.86.202.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aejC7OtGYuiYb1nWBpRMrwAAAQE"]
[Wed Apr 22 20:45:36.178455 2026] [:error] [pid 6344:tid 6351] [client 45.86.202.21:59617] [client 45.86.202.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aejC8EDOTF-pkQnDeUntggAAAAI"]
[Wed Apr 22 20:45:41.187085 2026] [:error] [pid 6344:tid 6372] [client 45.86.202.5:62637] [client 45.86.202.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.5, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aejC9UDOTF-pkQnDeUntlwAAABc"]
[Wed Apr 22 20:45:42.370279 2026] [:error] [pid 6344:tid 6369] [client 45.86.202.5:62637] [client 45.86.202.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aejC9kDOTF-pkQnDeUntmQAAABQ"]
[Wed Apr 22 20:46:05.607216 2026] [:error] [pid 9085:tid 9095] [client 45.86.202.21:30753] [client 45.86.202.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aejDDd-_-or9vQnlWnplswAAAUg"]
[Wed Apr 22 20:46:11.310669 2026] [:error] [pid 6252:tid 6330] [client 45.86.202.17:27171] [client 45.86.202.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.17, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aejDE-tGYuiYb1nWBpRMvwAAARI"]
[Wed Apr 22 20:46:16.267836 2026] [:error] [pid 6252:tid 6334] [client 45.86.202.17:27171] [client 45.86.202.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aejDGOtGYuiYb1nWBpRMxQAAARY"]
[Wed Apr 22 20:46:18.957287 2026] [:error] [pid 9085:tid 9110] [client 45.86.202.2:23863] [client 45.86.202.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "aejDGt-_-or9vQnlWnpl5QAAAVc"]
[Wed Apr 22 20:46:23.828339 2026] [:error] [pid 9085:tid 9101] [client 45.86.202.46:47843] [client 45.86.202.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aejDH9-_-or9vQnlWnpl7wAAAU4"]
[Wed Apr 22 20:46:28.829197 2026] [:error] [pid 9085:tid 9104] [client 45.86.202.13:30281] [client 45.86.202.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aejDJN-_-or9vQnlWnpl_gAAAVE"]
[Wed Apr 22 20:46:29.904897 2026] [:error] [pid 9085:tid 9101] [client 45.86.202.29:53529] [client 45.86.202.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aejDJd-_-or9vQnlWnpmAwAAAU4"]
[Wed Apr 22 20:46:37.383062 2026] [:error] [pid 6344:tid 6350] [client 45.86.202.27:63837] [client 45.86.202.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aejDLUDOTF-pkQnDeUnt0wAAAAE"]
[Wed Apr 22 20:46:40.392153 2026] [:error] [pid 9085:tid 9099] [client 45.86.202.38:50433] [client 45.86.202.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aejDMN-_-or9vQnlWnpmFwAAAUw"]
[Wed Apr 22 20:46:45.142816 2026] [:error] [pid 9085:tid 9095] [client 45.86.202.27:55829] [client 45.86.202.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "aejDNd-_-or9vQnlWnpmIwAAAUg"]
[Wed Apr 22 20:46:50.160639 2026] [:error] [pid 23776:tid 23800] [client 45.86.202.38:61083] [client 45.86.202.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aejDOrRExf-1pAbSeJvsLAAAAZY"]
[Wed Apr 22 20:46:53.939115 2026] [:error] [pid 9085:tid 9103] [client 45.86.202.49:59123] [client 45.86.202.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "aejDPd-_-or9vQnlWnpmOwAAAVA"]
[Wed Apr 22 20:46:59.015418 2026] [:error] [pid 6384:tid 6402] [client 45.86.202.39:50255] [client 45.86.202.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aejDQz58M3t15ICeWHUz6gAAAM8"]
[Wed Apr 22 20:47:09.022718 2026] [:error] [pid 9085:tid 9111] [client 45.86.202.29:47987] [client 45.86.202.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aejDTd-_-or9vQnlWnpmZwAAAVg"]
[Wed Apr 22 20:47:12.031590 2026] [:error] [pid 9085:tid 9105] [client 45.86.202.43:30811] [client 45.86.202.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aejDUN-_-or9vQnlWnpmcAAAAVI"]
[Wed Apr 22 20:47:13.974113 2026] [:error] [pid 9085:tid 9095] [client 45.86.202.21:61841] [client 45.86.202.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aejDUd-_-or9vQnlWnpmeAAAAUg"]
[Wed Apr 22 20:47:15.152629 2026] [:error] [pid 6384:tid 6403] [client 45.86.202.29:56921] [client 45.86.202.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aejDUz58M3t15ICeWHUz-wAAANA"]
[Wed Apr 22 20:47:18.121355 2026] [:error] [pid 6250:tid 6256] [client 45.86.202.45:43393] [client 45.86.202.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aejDVg-iZeQkqmQVfj4L_wAAAEI"]
[Wed Apr 22 20:47:19.777616 2026] [:error] [pid 6344:tid 6364] [client 45.86.202.19:47769] [client 45.86.202.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aejDV0DOTF-pkQnDeUnuBQAAAA8"]
[Wed Apr 22 20:47:23.352457 2026] [:error] [pid 9085:tid 9088] [client 45.86.202.32:21891] [client 45.86.202.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "aejDW9-_-or9vQnlWnpmiQAAAUE"]
[Wed Apr 22 20:47:24.482119 2026] [:error] [pid 6250:tid 6270] [client 45.86.202.50:33855] [client 45.86.202.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aejDXA-iZeQkqmQVfj4MAgAAAFA"]
[Wed Apr 22 20:47:26.073790 2026] [:error] [pid 23776:tid 23778] [client 45.86.202.18:33695] [client 45.86.202.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aejDXrRExf-1pAbSeJvsfwAAAYA"]
[Wed Apr 22 20:47:27.701740 2026] [:error] [pid 23776:tid 23794] [client 45.86.202.8:50405] [client 45.86.202.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aejDX7RExf-1pAbSeJvsgAAAAZA"]
[Wed Apr 22 20:47:31.177591 2026] [:error] [pid 6344:tid 6349] [client 45.86.202.43:60745] [client 45.86.202.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aejDY0DOTF-pkQnDeUnuFgAAAAA"]
[Wed Apr 22 20:47:34.657577 2026] [:error] [pid 6344:tid 6351] [client 45.86.202.27:40041] [client 45.86.202.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aejDZkDOTF-pkQnDeUnuGwAAAAI"]
[Wed Apr 22 20:47:42.216009 2026] [:error] [pid 9085:tid 9107] [client 45.86.202.43:40483] [client 45.86.202.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aejDbt-_-or9vQnlWnpmsgAAAVQ"]
[Wed Apr 22 20:47:53.230727 2026] [:error] [pid 6384:tid 6395] [client 45.86.202.43:54231] [client 45.86.202.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aejDeT58M3t15ICeWHU0SQAAAMg"]
[Wed Apr 22 20:47:58.035761 2026] [:error] [pid 23776:tid 23794] [client 45.86.202.41:25735] [client 45.86.202.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aejDfrRExf-1pAbSeJvtBQAAAZA"]
[Wed Apr 22 20:47:58.741422 2026] [:error] [pid 9085:tid 9109] [client 45.86.202.44:38551] [client 45.86.202.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aejDft-_-or9vQnlWnpm1gAAAVY"]
[Wed Apr 22 20:48:05.128290 2026] [:error] [pid 9085:tid 9109] [client 45.86.202.40:51695] [client 45.86.202.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aejDhd-_-or9vQnlWnpm6QAAAVY"]
[Wed Apr 22 20:48:10.004745 2026] [proxy_fcgi:error] [pid 23776:tid 23793] [client 45.86.202.38:21733] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 20:48:10.287456 2026] [proxy_fcgi:error] [pid 23776:tid 23799] [client 45.86.202.38:21733] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 20:48:10.581982 2026] [proxy_fcgi:error] [pid 23776:tid 23787] [client 45.86.202.38:21733] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 20:48:14.805114 2026] [:error] [pid 23776:tid 23794] [client 45.86.202.38:21733] [client 45.86.202.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aejDjrRExf-1pAbSeJvtOQAAAZA"]
[Wed Apr 22 20:48:17.303002 2026] [:error] [pid 6384:tid 6408] [client 45.86.202.15:26787] [client 45.86.202.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aejDkT58M3t15ICeWHU0YQAAANU"]
[Wed Apr 22 20:48:18.364177 2026] [:error] [pid 9085:tid 9106] [client 45.86.202.13:62403] [client 45.86.202.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aejDkt-_-or9vQnlWnpnIAAAAVM"]
[Wed Apr 22 20:48:19.580596 2026] [:error] [pid 23776:tid 23790] [client 45.86.202.22:42483] [client 45.86.202.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aejDk7RExf-1pAbSeJvtOgAAAYw"]
[Wed Apr 22 20:48:22.252677 2026] [:error] [pid 9085:tid 9101] [client 45.86.202.27:58639] [client 45.86.202.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aejDlt-_-or9vQnlWnpnKwAAAU4"]
[Wed Apr 22 20:48:24.018363 2026] [:error] [pid 6344:tid 6373] [client 45.86.202.13:59701] [client 45.86.202.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aejDmEDOTF-pkQnDeUnuQwAAABg"]
[Wed Apr 22 20:48:26.398542 2026] [:error] [pid 6252:tid 6334] [client 45.86.202.5:41733] [client 45.86.202.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aejDmutGYuiYb1nWBpRNQgAAARY"]
[Wed Apr 22 20:48:27.912702 2026] [:error] [pid 9085:tid 9102] [client 45.86.202.5:24771] [client 45.86.202.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aejDm9-_-or9vQnlWnpnPgAAAU8"]
[Wed Apr 22 20:48:29.762586 2026] [:error] [pid 9085:tid 9098] [client 45.86.202.17:30543] [client 45.86.202.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aejDnd-_-or9vQnlWnpnQgAAAUs"]
[Wed Apr 22 20:48:31.561570 2026] [:error] [pid 23776:tid 23802] [client 45.86.202.36:53859] [client 45.86.202.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aejDn7RExf-1pAbSeJvtTgAAAZg"]
[Wed Apr 22 20:48:35.405845 2026] [:error] [pid 6251:tid 6307] [client 45.86.202.42:53655] [client 45.86.202.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aejDoysFAzbyObL-SQ58_QAAAJY"]
[Wed Apr 22 20:48:37.580937 2026] [:error] [pid 6252:tid 6317] [client 45.86.202.29:46879] [client 45.86.202.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aejDpetGYuiYb1nWBpRNSgAAAQU"]
[Wed Apr 22 20:48:41.680000 2026] [:error] [pid 6250:tid 6257] [client 45.86.202.21:49113] [client 45.86.202.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aejDqQ-iZeQkqmQVfj4MSgAAAEM"]
[Wed Apr 22 20:48:45.517706 2026] [:error] [pid 9085:tid 9094] [client 45.86.202.5:54075] [client 45.86.202.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "aejDrd-_-or9vQnlWnpnYQAAAUc"]
[Wed Apr 22 20:48:50.677923 2026] [:error] [pid 9085:tid 9090] [client 45.86.202.15:55699] [client 45.86.202.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aejDst-_-or9vQnlWnpndgAAAUM"]
[Wed Apr 22 20:48:56.991092 2026] [:error] [pid 6384:tid 6395] [client 45.86.202.20:61033] [client 45.86.202.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aejDuD58M3t15ICeWHU0vwAAAMg"]
[Wed Apr 22 20:49:01.298870 2026] [:error] [pid 9085:tid 9107] [client 45.86.202.38:30725] [client 45.86.202.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aejDvd-_-or9vQnlWnpnhgAAAVQ"]
[Wed Apr 22 20:49:21.145703 2026] [:error] [pid 23776:tid 23790] [client 45.86.202.35:62543] [client 45.86.202.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aejD0bRExf-1pAbSeJvtswAAAYw"]
[Wed Apr 22 20:49:22.235896 2026] [:error] [pid 6344:tid 6352] [client 45.86.202.31:31313] [client 45.86.202.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aejD0kDOTF-pkQnDeUnu-gAAAAM"]
[Wed Apr 22 20:49:24.900995 2026] [:error] [pid 6251:tid 6309] [client 45.86.202.34:46329] [client 45.86.202.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aejD1CsFAzbyObL-SQ59DAAAAJg"]
[Wed Apr 22 20:49:28.553801 2026] [:error] [pid 23776:tid 23794] [client 45.86.202.44:39645] [client 45.86.202.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aejD2LRExf-1pAbSeJvt3AAAAZA"]
[Wed Apr 22 20:49:29.660723 2026] [:error] [pid 6252:tid 6317] [client 45.86.202.47:50979] [client 45.86.202.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aejD2etGYuiYb1nWBpRNhwAAAQU"]
[Wed Apr 22 20:49:35.715253 2026] [:error] [pid 6251:tid 6295] [client 45.86.202.13:21875] [client 45.86.202.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aejD3ysFAzbyObL-SQ59JAAAAIo"]
[Wed Apr 22 20:49:36.787450 2026] [:error] [pid 23776:tid 23794] [client 45.86.202.37:59241] [client 45.86.202.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "aejD4LRExf-1pAbSeJvt_wAAAZA"]
[Wed Apr 22 20:49:44.190650 2026] [:error] [pid 6252:tid 6313] [client 45.86.202.219:46961] [client 45.86.202.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aejD6OtGYuiYb1nWBpRNnwAAAQE"]
[Wed Apr 22 20:49:46.637804 2026] [proxy_fcgi:error] [pid 6384:tid 6394] [client 45.86.202.14:56483] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 20:49:48.087494 2026] [:error] [pid 6384:tid 6403] [client 45.86.202.14:56483] [client 45.86.202.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "aejD7D58M3t15ICeWHU1igAAANA"]
[Wed Apr 22 20:49:49.218588 2026] [:error] [pid 6250:tid 6265] [client 45.86.202.13:29127] [client 45.86.202.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "aejD7Q-iZeQkqmQVfj4MrQAAAEs"]
[Wed Apr 22 20:49:52.966451 2026] [:error] [pid 9085:tid 9106] [client 45.86.202.31:27745] [client 45.86.202.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aejD8N-_-or9vQnlWnpn0wAAAVM"]
[Wed Apr 22 20:49:54.103441 2026] [:error] [pid 6251:tid 6303] [client 45.86.202.24:27277] [client 45.86.202.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aejD8isFAzbyObL-SQ59KwAAAJI"]
[Wed Apr 22 20:50:03.988628 2026] [:error] [pid 6251:tid 6293] [client 45.86.202.24:21541] [client 45.86.202.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aejD-ysFAzbyObL-SQ59NAAAAIg"]
[Wed Apr 22 20:50:05.153420 2026] [:error] [pid 6344:tid 6351] [client 45.86.202.49:44019] [client 45.86.202.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aejD_UDOTF-pkQnDeUnvPQAAAAI"]
[Wed Apr 22 20:50:11.560705 2026] [:error] [pid 9085:tid 9095] [client 45.86.202.7:45013] [client 45.86.202.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "aejEA9-_-or9vQnlWnpn7wAAAUg"]
[Wed Apr 22 20:50:12.732601 2026] [:error] [pid 6344:tid 6359] [client 45.86.202.46:62329] [client 45.86.202.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aejEBEDOTF-pkQnDeUnvSgAAAAo"]
[Wed Apr 22 20:50:13.788063 2026] [:error] [pid 6251:tid 6291] [client 45.86.202.14:36443] [client 45.86.202.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aejEBSsFAzbyObL-SQ59SAAAAIY"]
[Wed Apr 22 20:50:21.501226 2026] [:error] [pid 6384:tid 6403] [client 45.86.202.41:46919] [client 45.86.202.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aejEDT58M3t15ICeWHU19QAAANA"]
[Wed Apr 22 20:50:24.023913 2026] [:error] [pid 9085:tid 9093] [client 45.86.202.12:46035] [client 45.86.202.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aejEEN-_-or9vQnlWnpoJwAAAUY"]
[Wed Apr 22 20:50:32.788067 2026] [:error] [pid 6384:tid 6407] [client 45.86.202.40:28821] [client 45.86.202.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "aejEGD58M3t15ICeWHU2JwAAANQ"]
[Wed Apr 22 20:50:39.874664 2026] [:error] [pid 6384:tid 6390] [client 45.86.202.40:28821] [client 45.86.202.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.40, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aejEHz58M3t15ICeWHU2MQAAAMM"]
[Wed Apr 22 20:50:52.523289 2026] [proxy_fcgi:error] [pid 6384:tid 6389] [client 45.86.202.40:28821] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 20:51:10.075825 2026] [:error] [pid 6384:tid 6391] [client 45.86.202.40:28821] [client 45.86.202.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aejEPj58M3t15ICeWHU2cwAAAMQ"]
[Wed Apr 22 20:51:14.693811 2026] [:error] [pid 6252:tid 6319] [client 45.86.202.31:22523] [client 45.86.202.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aejEQutGYuiYb1nWBpRN1wAAAQc"]
[Wed Apr 22 20:51:19.038381 2026] [:error] [pid 9085:tid 9088] [client 45.86.202.49:47231] [client 45.86.202.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aejER9-_-or9vQnlWnpoywAAAUE"]
[Wed Apr 22 20:51:30.949418 2026] [:error] [pid 6251:tid 6299] [client 45.86.202.32:48857] [client 45.86.202.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aejEUisFAzbyObL-SQ591QAAAI4"]
[Wed Apr 22 20:51:34.423982 2026] [:error] [pid 6250:tid 6262] [client 45.86.202.3:41563] [client 45.86.202.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aejEVg-iZeQkqmQVfj4M3wAAAEg"]
[Wed Apr 22 20:51:38.051683 2026] [:error] [pid 6250:tid 6276] [client 45.86.202.29:25503] [client 45.86.202.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aejEWg-iZeQkqmQVfj4M5QAAAFY"]
[Wed Apr 22 20:51:44.634847 2026] [proxy_fcgi:error] [pid 9085:tid 9108] [client 45.86.202.18:51451] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 20:51:44.921479 2026] [proxy_fcgi:error] [pid 9085:tid 9090] [client 45.86.202.18:51451] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 20:51:45.203855 2026] [:error] [pid 9085:tid 9105] [client 45.86.202.18:51451] [client 45.86.202.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aejEYd-_-or9vQnlWnppLwAAAVI"]
[Wed Apr 22 20:51:46.158509 2026] [:error] [pid 6384:tid 6394] [client 45.86.202.18:47071] [client 45.86.202.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aejEYj58M3t15ICeWHU2ogAAAMc"]
[Wed Apr 22 20:51:55.716987 2026] [:error] [pid 6384:tid 6394] [client 45.86.202.3:42581] [client 45.86.202.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aejEaz58M3t15ICeWHU2xQAAAMc"]
[Wed Apr 22 20:51:58.223586 2026] [:error] [pid 23776:tid 23785] [client 45.86.202.50:58483] [client 45.86.202.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "aejEbrRExf-1pAbSeJvu7gAAAYc"]
[Wed Apr 22 20:52:03.246736 2026] [:error] [pid 6252:tid 6318] [client 45.86.202.45:30457] [client 45.86.202.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aejEc-tGYuiYb1nWBpROAwAAAQY"]
[Wed Apr 22 20:52:13.068345 2026] [:error] [pid 6344:tid 6366] [client 45.86.202.50:31927] [client 45.86.202.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aejEfUDOTF-pkQnDeUnv1QAAABE"]
[Wed Apr 22 20:52:14.111578 2026] [proxy_fcgi:error] [pid 6384:tid 6405] [client 45.86.202.27:63763] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 20:52:16.984822 2026] [:error] [pid 6384:tid 6404] [client 45.86.202.27:63763] [client 45.86.202.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aejEgD58M3t15ICeWHU3MwAAANE"]
[Wed Apr 22 20:52:24.241860 2026] [proxy_fcgi:error] [pid 6250:tid 6254] [client 45.86.202.7:58899] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 20:52:25.679465 2026] [:error] [pid 6250:tid 6260] [client 45.86.202.7:58899] [client 45.86.202.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.202.7, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aejEiQ-iZeQkqmQVfj4NKAAAAEY"]
[Wed Apr 22 20:52:31.547847 2026] [:error] [pid 6250:tid 6258] [client 45.86.202.7:58899] [client 45.86.202.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aejEjw-iZeQkqmQVfj4NMwAAAEQ"]
[Wed Apr 22 20:52:33.891882 2026] [:error] [pid 6384:tid 6409] [client 45.86.202.18:63731] [client 45.86.202.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aejEkT58M3t15ICeWHU3TwAAANY"]
[Wed Apr 22 20:52:39.161122 2026] [:error] [pid 6384:tid 6391] [client 45.86.202.42:45999] [client 45.86.202.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aejElz58M3t15ICeWHU3aQAAAMQ"]
[Wed Apr 22 20:52:43.889018 2026] [:error] [pid 6384:tid 6406] [client 45.86.202.34:42607] [client 45.86.202.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aejEmz58M3t15ICeWHU3eQAAANM"]
[Wed Apr 22 20:52:44.798435 2026] [:error] [pid 6252:tid 6313] [client 45.86.202.34:57771] [client 45.86.202.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aejEnOtGYuiYb1nWBpROFQAAAQE"]
[Wed Apr 22 20:52:49.574378 2026] [:error] [pid 6344:tid 6366] [client 45.86.202.8:57829] [client 45.86.202.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aejEoUDOTF-pkQnDeUnwKQAAABE"]
[Wed Apr 22 20:52:53.058077 2026] [proxy_fcgi:error] [pid 6344:tid 6361] [client 45.86.202.42:65085] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 20:52:53.355588 2026] [:error] [pid 6344:tid 6364] [client 45.86.202.42:65085] [client 45.86.202.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aejEpUDOTF-pkQnDeUnwOQAAAA8"]
[Wed Apr 22 20:52:53.920681 2026] [proxy_fcgi:error] [pid 23776:tid 23784] [client 45.86.202.3:57885] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Wed Apr 22 20:52:54.466581 2026] [:error] [pid 6251:tid 6305] [client 45.86.202.33:50987] [client 45.86.202.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "aejEpisFAzbyObL-SQ5-AQAAAJQ"]
[Wed Apr 22 20:52:55.031772 2026] [:error] [pid 9085:tid 9098] [client 45.86.202.10:34701] [client 45.86.202.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aejEp9-_-or9vQnlWnpqMgAAAUs"]
[Wed Apr 22 20:52:55.616521 2026] [:error] [pid 6344:tid 6367] [client 45.86.202.23:65315] [client 45.86.202.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aejEp0DOTF-pkQnDeUnwPQAAABI"]
[Wed Apr 22 20:52:56.364920 2026] [:error] [pid 23776:tid 23795] [client 45.86.202.34:48203] [client 45.86.202.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aejEqLRExf-1pAbSeJvvUgAAAZE"]
[Wed Apr 22 20:53:09.203122 2026] [autoindex:error] [pid 9085:tid 9111] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:12.033156 2026] [autoindex:error] [pid 9085:tid 9099] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:19.633589 2026] [autoindex:error] [pid 9085:tid 9095] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:21.049460 2026] [autoindex:error] [pid 9085:tid 9091] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:25.110520 2026] [autoindex:error] [pid 9085:tid 9096] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:25.397002 2026] [autoindex:error] [pid 9085:tid 9091] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:25.676398 2026] [autoindex:error] [pid 9085:tid 9088] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:27.411717 2026] [autoindex:error] [pid 9085:tid 9092] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:29.134016 2026] [autoindex:error] [pid 9085:tid 9091] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:29.415698 2026] [autoindex:error] [pid 9085:tid 9104] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:30.802548 2026] [autoindex:error] [pid 9085:tid 9095] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:31.093573 2026] [autoindex:error] [pid 9085:tid 9097] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:31.381846 2026] [autoindex:error] [pid 9085:tid 9103] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:31.994361 2026] [autoindex:error] [pid 9085:tid 9090] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:32.287479 2026] [autoindex:error] [pid 9085:tid 9107] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:32.563051 2026] [autoindex:error] [pid 9085:tid 9093] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:36.962760 2026] [autoindex:error] [pid 9085:tid 9110] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:37.323574 2026] [autoindex:error] [pid 9085:tid 9092] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:37.604029 2026] [autoindex:error] [pid 9085:tid 9096] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:37.890723 2026] [autoindex:error] [pid 9085:tid 9089] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:38.174406 2026] [autoindex:error] [pid 9085:tid 9091] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:38.476114 2026] [autoindex:error] [pid 9085:tid 9098] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:40.020040 2026] [autoindex:error] [pid 9085:tid 9108] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:40.319500 2026] [autoindex:error] [pid 9085:tid 9088] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:44.270888 2026] [autoindex:error] [pid 9085:tid 9094] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:47.074014 2026] [autoindex:error] [pid 9085:tid 9094] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:47.630022 2026] [autoindex:error] [pid 9085:tid 9090] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:51.914438 2026] [autoindex:error] [pid 9085:tid 9111] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:52.208465 2026] [autoindex:error] [pid 9085:tid 9104] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:56.152719 2026] [autoindex:error] [pid 9085:tid 9101] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:57.844191 2026] [autoindex:error] [pid 9085:tid 9102] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:59.433124 2026] [autoindex:error] [pid 9085:tid 9110] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:59.712529 2026] [autoindex:error] [pid 9085:tid 9104] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:53:59.993475 2026] [autoindex:error] [pid 9085:tid 9091] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:00.301686 2026] [autoindex:error] [pid 9085:tid 9095] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:00.657360 2026] [autoindex:error] [pid 9085:tid 9096] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:03.384013 2026] [autoindex:error] [pid 9085:tid 9091] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:06.194431 2026] [autoindex:error] [pid 9085:tid 9097] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:06.487694 2026] [autoindex:error] [pid 9085:tid 9109] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:10.673910 2026] [autoindex:error] [pid 9085:tid 9107] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:12.245829 2026] [autoindex:error] [pid 9085:tid 9098] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:15.086338 2026] [autoindex:error] [pid 9085:tid 9098] [client 45.86.202.29:53209] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:17.945602 2026] [autoindex:error] [pid 9085:tid 9111] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:18.234558 2026] [autoindex:error] [pid 9085:tid 9108] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:18.547643 2026] [autoindex:error] [pid 9085:tid 9101] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:18.832559 2026] [autoindex:error] [pid 9085:tid 9097] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:19.124123 2026] [autoindex:error] [pid 9085:tid 9090] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:19.412245 2026] [autoindex:error] [pid 9085:tid 9107] [client 45.86.202.29:53209] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:26.437795 2026] [autoindex:error] [pid 6384:tid 6406] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:26.735830 2026] [autoindex:error] [pid 6384:tid 6404] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:27.015329 2026] [autoindex:error] [pid 6384:tid 6405] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:27.292375 2026] [autoindex:error] [pid 6384:tid 6387] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:27.568958 2026] [autoindex:error] [pid 6384:tid 6389] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:29.162166 2026] [autoindex:error] [pid 6384:tid 6391] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:32.016475 2026] [autoindex:error] [pid 6384:tid 6410] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:33.544134 2026] [autoindex:error] [pid 6384:tid 6394] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:33.850181 2026] [autoindex:error] [pid 6384:tid 6391] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:34.132326 2026] [autoindex:error] [pid 6384:tid 6393] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:34.455547 2026] [autoindex:error] [pid 6384:tid 6409] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:34.739955 2026] [autoindex:error] [pid 6384:tid 6401] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:39.941514 2026] [autoindex:error] [pid 6384:tid 6406] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:40.228307 2026] [autoindex:error] [pid 6384:tid 6392] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:43.020533 2026] [autoindex:error] [pid 6384:tid 6395] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:43.301526 2026] [autoindex:error] [pid 6384:tid 6400] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:44.836359 2026] [autoindex:error] [pid 6384:tid 6398] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:51.211285 2026] [autoindex:error] [pid 6384:tid 6411] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:51.516831 2026] [autoindex:error] [pid 6384:tid 6404] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:51.798729 2026] [autoindex:error] [pid 6384:tid 6405] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:52.069493 2026] [autoindex:error] [pid 6384:tid 6401] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:54:57.214405 2026] [autoindex:error] [pid 6384:tid 6392] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:04.148724 2026] [autoindex:error] [pid 6384:tid 6399] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:04.595018 2026] [autoindex:error] [pid 6384:tid 6398] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:08.689125 2026] [autoindex:error] [pid 6384:tid 6395] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:15.308213 2026] [autoindex:error] [pid 6384:tid 6397] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:18.141894 2026] [autoindex:error] [pid 6384:tid 6407] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:18.435726 2026] [autoindex:error] [pid 6384:tid 6392] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:18.727070 2026] [autoindex:error] [pid 6384:tid 6398] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:20.311399 2026] [autoindex:error] [pid 6384:tid 6400] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:21.843386 2026] [autoindex:error] [pid 6384:tid 6405] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:37.904484 2026] [autoindex:error] [pid 6384:tid 6397] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:38.204588 2026] [autoindex:error] [pid 6384:tid 6398] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:40.767555 2026] [autoindex:error] [pid 6384:tid 6398] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:43.396842 2026] [autoindex:error] [pid 6384:tid 6410] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:46.004914 2026] [autoindex:error] [pid 6384:tid 6398] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:47.539320 2026] [autoindex:error] [pid 6384:tid 6405] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:47.841162 2026] [autoindex:error] [pid 6384:tid 6399] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:49.389274 2026] [autoindex:error] [pid 6384:tid 6388] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:49.670744 2026] [autoindex:error] [pid 6384:tid 6395] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:50.135962 2026] [autoindex:error] [pid 6384:tid 6400] [client 45.86.202.30:35333] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:55.178141 2026] [autoindex:error] [pid 6252:tid 6321] [client 45.86.202.17:57651] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:55:58.545933 2026] [autoindex:error] [pid 6252:tid 6314] [client 45.86.202.17:57651] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:56:07.555226 2026] [autoindex:error] [pid 6252:tid 6324] [client 45.86.202.17:57651] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:56:07.847589 2026] [autoindex:error] [pid 6252:tid 6323] [client 45.86.202.17:57651] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:56:09.446386 2026] [autoindex:error] [pid 6252:tid 6329] [client 45.86.202.17:57651] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:56:11.088311 2026] [autoindex:error] [pid 6252:tid 6331] [client 45.86.202.17:57651] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:56:14.919961 2026] [autoindex:error] [pid 6252:tid 6326] [client 45.86.202.17:57651] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:56:20.036912 2026] [autoindex:error] [pid 6252:tid 6325] [client 45.86.202.17:57651] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:56:23.253385 2026] [:error] [pid 6250:tid 6265] [client 101.100.234.23:41202] [client 101.100.234.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 101.100.234.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aejFdw-iZeQkqmQVfj4OpgAAAEs"]
[Wed Apr 22 20:56:24.066727 2026] [proxy_fcgi:error] [pid 6250:tid 6265] [client 101.100.234.23:41202] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 22 20:56:25.283505 2026] [:error] [pid 6250:tid 6274] [client 101.100.234.23:41202] [client 101.100.234.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 101.100.234.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aejFeQ-iZeQkqmQVfj4OsAAAAFQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Wed Apr 22 20:56:26.349887 2026] [proxy_fcgi:error] [pid 6250:tid 6274] [client 101.100.234.23:41202] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Wed Apr 22 20:56:26.847825 2026] [autoindex:error] [pid 6252:tid 6331] [client 45.86.202.17:57651] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:56:32.615102 2026] [autoindex:error] [pid 6252:tid 6333] [client 45.86.202.17:57651] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 20:56:32.898140 2026] [autoindex:error] [pid 6252:tid 6312] [client 45.86.202.17:57651] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 21:35:43.411194 2026] [:error] [pid 9085:tid 9102] [client 65.254.225.231:32774] [client 65.254.225.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.231, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aejOr9-_-or9vQnlWnqN6gAAAU8"]
[Wed Apr 22 21:35:44.391750 2026] [proxy_fcgi:error] [pid 9085:tid 9102] [client 65.254.225.231:32774] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 22 22:19:07.522413 2026] [:error] [pid 23776:tid 23779] [client 34.16.140.55:33526] [client 34.16.140.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aejY27RExf-1pAbSeJsX4AAAAYE"]
[Wed Apr 22 22:27:17.225686 2026] [:error] [pid 6251:tid 6304] [client 43.166.226.57:42200] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aejaxSsFAzbyObL-SQ6PdAAAAJM"]
[Wed Apr 22 22:36:34.249938 2026] [:error] [pid 9085:tid 9098] [client 217.165.101.18:52043] [client 217.165.101.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.101.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aejc8t-_-or9vQnlWnrDfQAAAUs"]
[Wed Apr 22 22:36:43.710009 2026] [:error] [pid 9085:tid 9105] [client 217.165.101.18:52265] [client 217.165.101.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.101.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aejc-9-_-or9vQnlWnrDmgAAAVI"]
[Wed Apr 22 22:36:54.391762 2026] [:error] [pid 9085:tid 9107] [client 217.165.101.18:52529] [client 217.165.101.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.101.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aejdBt-_-or9vQnlWnrDwQAAAVQ"]
[Wed Apr 22 22:37:05.121923 2026] [:error] [pid 6250:tid 6261] [client 217.165.101.18:52735] [client 217.165.101.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.101.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aejdEQ-iZeQkqmQVfj4nsgAAAEc"]
[Wed Apr 22 22:37:15.810893 2026] [:error] [pid 6384:tid 6402] [client 217.165.101.18:52959] [client 217.165.101.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.101.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aejdGz58M3t15ICeWHWBCwAAAM8"]
[Wed Apr 22 23:29:53.516623 2026] [:error] [pid 23776:tid 23790] [client 115.135.147.173:55008] [client 115.135.147.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.135.147.173, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aejpcbRExf-1pAbSeJstswAAAYw"]
[Wed Apr 22 23:44:54.282718 2026] [:error] [pid 23776:tid 23802] [client 117.33.163.216:47022] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aejs9rRExf-1pAbSeJsx_wAAAZg"]
[Thu Apr 23 01:10:50.977369 2026] [:error] [pid 6344:tid 6366] [client 103.69.196.177:51690] [client 103.69.196.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.69.196.177, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aekBGkDOTF-pkQnDeUk17gAAABE"]
[Thu Apr 23 01:24:49.741178 2026] [:error] [pid 9085:tid 9098] [client 62.219.78.150:56386] [client 62.219.78.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.219.78.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aekEYd-_-or9vQnlWnokjAAAAUs"]
[Thu Apr 23 01:24:50.641697 2026] [proxy_fcgi:error] [pid 9085:tid 9098] [client 62.219.78.150:56386] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu Apr 23 01:24:51.546315 2026] [:error] [pid 9085:tid 9091] [client 62.219.78.150:56386] [client 62.219.78.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.219.78.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aekEY9-_-or9vQnlWnokkQAAAUQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 01:24:52.617300 2026] [proxy_fcgi:error] [pid 9085:tid 9091] [client 62.219.78.150:56386] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 01:44:17.337517 2026] [:error] [pid 6344:tid 6355] [client 65.108.140.104:53520] [client 65.108.140.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.140.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aekI8UDOTF-pkQnDeUk9CQAAAAY"]
[Thu Apr 23 01:44:18.212429 2026] [proxy_fcgi:error] [pid 6344:tid 6355] [client 65.108.140.104:53520] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu Apr 23 01:44:19.428941 2026] [:error] [pid 6344:tid 6363] [client 65.108.140.104:53520] [client 65.108.140.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.108.140.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aekI80DOTF-pkQnDeUk9CgAAAA4"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 01:44:20.431982 2026] [proxy_fcgi:error] [pid 6344:tid 6363] [client 65.108.140.104:53520] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 02:28:17.486266 2026] [:error] [pid 9085:tid 9102] [client 51.83.185.163:48406] [client 51.83.185.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.83.185.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aekTQd-_-or9vQnlWnpNRwAAAU8"]
[Thu Apr 23 02:28:19.683364 2026] [proxy_fcgi:error] [pid 9085:tid 9102] [client 51.83.185.163:48406] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu Apr 23 02:28:21.163871 2026] [:error] [pid 6252:tid 6335] [client 51.83.185.163:48416] [client 51.83.185.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.83.185.163, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aekTRetGYuiYb1nWBpSI-AAAARc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 02:28:22.179600 2026] [proxy_fcgi:error] [pid 6252:tid 6335] [client 51.83.185.163:48416] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 03:26:07.540178 2026] [:error] [pid 12729:tid 12745] [client 45.179.239.40:64554] [client 45.179.239.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.179.239.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aekgzxTdlDTTxbcOxL1SmQAAAAM"]
[Thu Apr 23 06:03:08.590128 2026] [:error] [pid 42973:tid 43047] [client 192.185.176.149:37514] [client 192.185.176.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.176.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aelFnG6I0QqmmmLTHE2kygAAAIQ"]
[Thu Apr 23 06:03:09.594394 2026] [proxy_fcgi:error] [pid 42973:tid 43047] [client 192.185.176.149:37514] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu Apr 23 06:03:10.281749 2026] [:error] [pid 42973:tid 43053] [client 192.185.176.149:37514] [client 192.185.176.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.185.176.149, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aelFnm6I0QqmmmLTHE2kzAAAAIo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 06:03:11.531302 2026] [proxy_fcgi:error] [pid 42973:tid 43053] [client 192.185.176.149:37514] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 06:28:44.984086 2026] [:error] [pid 42972:tid 43016] [client 43.155.188.157:56800] [client 43.155.188.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aelLnMOAb-3sOknsk4f3FQAAAEA"]
[Thu Apr 23 08:34:56.136350 2026] [:error] [pid 25635:tid 25644] [client 136.116.217.68:50220] [client 136.116.217.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.116.217.68, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aelpMMRxv6UsgRGKB3LtmAAAAQU"]
[Thu Apr 23 08:57:05.104970 2026] [:error] [pid 65000:tid 65049] [client 162.240.175.101:43242] [client 162.240.175.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.175.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeluYb6vRb9j6psK2ZbaMAAAAhA"]
[Thu Apr 23 08:57:06.130515 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 162.240.175.101:43242] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu Apr 23 08:57:06.439044 2026] [:error] [pid 65000:tid 65040] [client 162.240.175.101:43242] [client 162.240.175.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.175.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeluYr6vRb9j6psK2ZbaNAAAAgc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 08:57:07.671953 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 162.240.175.101:43242] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 09:24:42.829953 2026] [:error] [pid 65000:tid 65042] [client 111.235.150.229:59237] [client 111.235.150.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.235.150.229, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ael02r6vRb9j6psK2Zbm3AAAAgk"], referer: https://www.bing.com/
[Thu Apr 23 09:24:43.818879 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 111.235.150.229:59237] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://www.bing.com/
[Thu Apr 23 09:25:14.429783 2026] [:error] [pid 64998:tid 65008] [client 111.235.150.229:58752] [client 111.235.150.229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ael0-oV5EysYcTLjmwhYJAAAAcY"], referer: https://www.facebook.com/
[Thu Apr 23 09:25:14.787114 2026] [:error] [pid 64998:tid 65002] [client 111.235.150.229:58752] [client 111.235.150.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.235.150.229, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ael0-oV5EysYcTLjmwhYJgAAAcA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 09:25:15.738267 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 111.235.150.229:58752] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 09:25:20.660878 2026] [:error] [pid 64998:tid 65011] [client 111.235.150.229:58752] [client 111.235.150.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.235.150.229, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ael1AIV5EysYcTLjmwhYKwAAAck"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 09:25:21.582946 2026] [proxy_fcgi:error] [pid 64998:tid 65011] [client 111.235.150.229:58752] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 09:25:24.395092 2026] [:error] [pid 64998:tid 65002] [client 111.235.150.229:58752] [client 111.235.150.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.235.150.229, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ael1BIV5EysYcTLjmwhYPAAAAcA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 09:25:25.280941 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 111.235.150.229:58752] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 09:25:28.038776 2026] [:error] [pid 64998:tid 65006] [client 111.235.150.229:58752] [client 111.235.150.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 111.235.150.229, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ael1CIV5EysYcTLjmwhYTAAAAcQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 09:25:29.023170 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 111.235.150.229:58752] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu Apr 23 09:58:09.235128 2026] [:error] [pid 25635:tid 25640] [client 185.192.71.37:28245] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ael8scRxv6UsgRGKB3IBwwAAAQE"]
[Thu Apr 23 09:58:29.370442 2026] [:error] [pid 42971:tid 42994] [client 185.192.71.23:25943] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ael8xTEP2_5RswrH8bHiCQAAAAg"]
[Thu Apr 23 09:58:58.889791 2026] [:error] [pid 42973:tid 43060] [client 91.230.225.197:63991] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "ael84m6I0QqmmmLTHE37GgAAAJE"]
[Thu Apr 23 09:59:14.779100 2026] [:error] [pid 42973:tid 43061] [client 91.230.225.16:38513] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "ael88m6I0QqmmmLTHE37hAAAAJI"]
[Thu Apr 23 09:59:45.121965 2026] [:error] [pid 42972:tid 43025] [client 185.192.71.38:35179] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ael9EcOAb-3sOknsk4dPYgAAAEk"]
[Thu Apr 23 09:59:52.558198 2026] [:error] [pid 43083:tid 43098] [client 185.192.71.33:45265] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ael9GDC5hrvNXosL83IjcgAAAM0"]
[Thu Apr 23 09:59:53.090544 2026] [:error] [pid 65000:tid 65029] [client 185.192.71.34:44253] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ael9Gb6vRb9j6psK2ZYMAwAAAgA"]
[Thu Apr 23 09:59:53.622016 2026] [:error] [pid 43083:tid 43086] [client 185.192.71.23:22533] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ael9GTC5hrvNXosL83IjgAAAAME"]
[Thu Apr 23 09:59:54.158089 2026] [:error] [pid 42973:tid 43054] [client 185.192.71.39:21067] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ael9Gm6I0QqmmmLTHE38pwAAAIs"]
[Thu Apr 23 09:59:54.688432 2026] [:error] [pid 42971:tid 42988] [client 91.230.225.16:51201] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ael9GjEP2_5RswrH8bHlGQAAAAI"]
[Thu Apr 23 09:59:59.652185 2026] [:error] [pid 64967:tid 64983] [client 91.230.225.11:63549] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ael9H4AV4GfOOdX8Qzo8KgAAAY4"]
[Thu Apr 23 10:00:05.367644 2026] [:error] [pid 42973:tid 43051] [client 185.192.71.21:34729] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "ael9JW6I0QqmmmLTHE39GwAAAIg"]
[Thu Apr 23 10:00:12.349159 2026] [:error] [pid 43083:tid 43085] [client 185.192.71.25:26027] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ael9LDC5hrvNXosL83IkhgAAAMA"]
[Thu Apr 23 10:00:15.524804 2026] [:error] [pid 64998:tid 65006] [client 185.192.71.40:63599] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ael9L4V5EysYcTLjmwiM-wAAAcQ"]
[Thu Apr 23 10:00:21.193629 2026] [:error] [pid 64967:tid 64978] [client 185.192.71.28:57133] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ael9NYAV4GfOOdX8Qzo8mgAAAYk"]
[Thu Apr 23 10:00:52.106494 2026] [:error] [pid 64967:tid 64971] [client 185.192.71.34:21141] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ael9VIAV4GfOOdX8Qzo86AAAAYI"]
[Thu Apr 23 10:00:55.859778 2026] [:error] [pid 43083:tid 43085] [client 91.230.225.12:45131] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ael9VzC5hrvNXosL83IlzwAAAMA"]
[Thu Apr 23 10:01:04.031101 2026] [:error] [pid 46953:tid 46974] [client 185.192.71.38:21175] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "ael9YEnlpdHh-P6wKbrOxwAAAlI"]
[Thu Apr 23 10:01:10.180534 2026] [:error] [pid 42973:tid 43054] [client 91.230.225.205:39829] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/index.php"] [unique_id "ael9Zm6I0QqmmmLTHE3_gAAAAIs"]
[Thu Apr 23 10:01:26.573814 2026] [:error] [pid 42973:tid 43065] [client 185.192.71.36:58583] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ael9dm6I0QqmmmLTHE3_uwAAAJY"]
[Thu Apr 23 10:01:29.596474 2026] [:error] [pid 65000:tid 65031] [client 91.230.225.24:58521] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ael9eb6vRb9j6psK2ZYP9gAAAgI"]
[Thu Apr 23 10:01:34.023720 2026] [:error] [pid 46953:tid 46961] [client 185.192.71.25:27237] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "ael9fknlpdHh-P6wKbrPgAAAAkU"]
[Thu Apr 23 10:01:34.582644 2026] [:error] [pid 64967:tid 64978] [client 185.192.71.31:46351] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ael9foAV4GfOOdX8Qzo9HwAAAYk"]
[Thu Apr 23 10:01:35.151071 2026] [:error] [pid 64998:tid 65019] [client 91.230.225.15:46949] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ael9f4V5EysYcTLjmwiP9gAAAdE"]
[Thu Apr 23 10:01:47.283060 2026] [:error] [pid 64998:tid 65006] [client 91.230.225.209:43137] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/info.php"] [unique_id "ael9i4V5EysYcTLjmwiQOQAAAcQ"]
[Thu Apr 23 10:01:47.835282 2026] [:error] [pid 65000:tid 65053] [client 91.230.225.20:35155] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class.api.php"] [unique_id "ael9i76vRb9j6psK2ZYQngAAAhQ"]
[Thu Apr 23 10:01:48.392949 2026] [:error] [pid 65000:tid 65051] [client 91.230.225.205:59623] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "ael9jL6vRb9j6psK2ZYQpgAAAhI"]
[Thu Apr 23 10:02:18.517512 2026] [:error] [pid 59700:tid 59702] [client 91.230.225.20:40401] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "ael9qpXyGZJFeAIDWtmi0gAAAUA"]
[Thu Apr 23 10:02:30.549460 2026] [:error] [pid 64998:tid 65016] [client 91.230.225.15:48269] [client 91.230.225.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ael9toV5EysYcTLjmwiR9AAAAc4"]
[Thu Apr 23 10:03:05.502518 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.15:48269] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ael92YV5EysYcTLjmwiSmQAAAcY"]
[Thu Apr 23 10:03:15.958422 2026] [:error] [pid 43083:tid 43094] [client 91.230.225.13:56395] [client 91.230.225.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ael94zC5hrvNXosL83IpMAAAAMk"]
[Thu Apr 23 10:03:21.835763 2026] [:error] [pid 43083:tid 43108] [client 91.230.225.13:56395] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/item.php"] [unique_id "ael96TC5hrvNXosL83IpUwAAANc"]
[Thu Apr 23 10:03:48.958498 2026] [:error] [pid 46953:tid 46973] [client 91.230.225.13:63603] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ael-BEnlpdHh-P6wKbrSGAAAAlE"]
[Thu Apr 23 10:04:19.393872 2026] [:error] [pid 43083:tid 43091] [client 91.230.225.196:27951] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ael-IzC5hrvNXosL83Ip_AAAAMY"]
[Thu Apr 23 10:04:25.862390 2026] [:error] [pid 42973:tid 43043] [client 185.192.71.33:57953] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ael-KW6I0QqmmmLTHE0F4gAAAIA"]
[Thu Apr 23 10:04:36.692046 2026] [:error] [pid 42973:tid 43063] [client 91.230.225.202:54785] [client 91.230.225.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.202, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-login.php"] [unique_id "ael-NG6I0QqmmmLTHE0F-QAAAJQ"]
[Thu Apr 23 10:04:39.169835 2026] [:error] [pid 42973:tid 43052] [client 91.230.225.202:54785] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ael-N26I0QqmmmLTHE0F_QAAAIk"]
[Thu Apr 23 10:05:27.806464 2026] [:error] [pid 46953:tid 46979] [client 185.192.71.21:47473] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ael-Z0nlpdHh-P6wKbrTNgAAAlY"]
[Thu Apr 23 10:05:35.335448 2026] [:error] [pid 42973:tid 43067] [client 91.230.225.199:25539] [client 91.230.225.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.199, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ael-b26I0QqmmmLTHE0HMgAAAJg"]
[Thu Apr 23 10:05:45.169153 2026] [:error] [pid 42973:tid 43045] [client 91.230.225.199:25539] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about.php"] [unique_id "ael-eW6I0QqmmmLTHE0HiQAAAII"]
[Thu Apr 23 10:05:47.721604 2026] [:error] [pid 59700:tid 59704] [client 91.230.225.24:36967] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/infi.php"] [unique_id "ael-e5XyGZJFeAIDWtmmWwAAAUI"]
[Thu Apr 23 10:05:52.265289 2026] [:error] [pid 42973:tid 43049] [client 185.192.71.33:35071] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "ael-gG6I0QqmmmLTHE0H1wAAAIY"]
[Thu Apr 23 10:06:00.702372 2026] [:error] [pid 43083:tid 43088] [client 91.230.225.200:53427] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "ael-iDC5hrvNXosL83IqawAAAMM"]
[Thu Apr 23 10:06:01.245874 2026] [:error] [pid 25635:tid 25640] [client 91.230.225.20:39037] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "ael-icRxv6UsgRGKB3IHrgAAAQE"]
[Thu Apr 23 10:06:10.943025 2026] [:error] [pid 59700:tid 59716] [client 91.230.225.196:51675] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ael-kpXyGZJFeAIDWtmmogAAAU4"]
[Thu Apr 23 10:06:13.468625 2026] [:error] [pid 65000:tid 65038] [client 91.230.225.19:21141] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "ael-lb6vRb9j6psK2ZYZKwAAAgU"]
[Thu Apr 23 10:06:18.761015 2026] [:error] [pid 46953:tid 46958] [client 91.230.225.202:63585] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit.php"] [unique_id "ael-mknlpdHh-P6wKbrTwwAAAkI"]
[Thu Apr 23 10:06:24.080661 2026] [:error] [pid 65000:tid 65047] [client 185.192.71.33:27177] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ael-oL6vRb9j6psK2ZYZWQAAAg4"]
[Thu Apr 23 10:06:27.664541 2026] [:error] [pid 46953:tid 46980] [client 91.230.225.208:46255] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/click.php"] [unique_id "ael-o0nlpdHh-P6wKbrUBAAAAlc"]
[Thu Apr 23 10:06:32.678339 2026] [:error] [pid 65000:tid 65040] [client 91.230.225.199:55705] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ael-qL6vRb9j6psK2ZYZkwAAAgc"]
[Thu Apr 23 10:06:45.105605 2026] [:error] [pid 42973:tid 43055] [client 91.230.225.16:29285] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ael-tW6I0QqmmmLTHE0JegAAAIw"]
[Thu Apr 23 10:06:45.677323 2026] [:error] [pid 46953:tid 46973] [client 91.230.225.203:20693] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xl2023.php"] [unique_id "ael-tUnlpdHh-P6wKbrUUQAAAlE"]
[Thu Apr 23 10:06:46.225486 2026] [:error] [pid 46953:tid 46970] [client 91.230.225.197:59893] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ael-tknlpdHh-P6wKbrUVwAAAk4"]
[Thu Apr 23 10:06:46.756029 2026] [:error] [pid 65000:tid 65044] [client 91.230.225.198:44827] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ael-tr6vRb9j6psK2ZYZzAAAAgs"]
[Thu Apr 23 10:06:49.187397 2026] [:error] [pid 43083:tid 43095] [client 185.192.71.38:44845] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ael-uTC5hrvNXosL83IqiwAAAMo"]
[Thu Apr 23 10:06:49.721740 2026] [:error] [pid 65000:tid 65038] [client 91.230.225.13:37041] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/index.php"] [unique_id "ael-ub6vRb9j6psK2ZYZ4wAAAgU"]
[Thu Apr 23 10:06:56.460856 2026] [:error] [pid 65000:tid 65055] [client 185.192.71.31:56943] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/index.php"] [unique_id "ael-wL6vRb9j6psK2ZYaGgAAAhY"]
[Thu Apr 23 10:06:57.032653 2026] [:error] [pid 65000:tid 65032] [client 91.230.225.200:39713] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "ael-wb6vRb9j6psK2ZYaIAAAAgM"]
[Thu Apr 23 10:06:57.633969 2026] [:error] [pid 59700:tid 59725] [client 91.230.225.206:38665] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ael-wZXyGZJFeAIDWtmm9QAAAVc"]
[Thu Apr 23 10:06:58.244217 2026] [:error] [pid 65000:tid 65055] [client 91.230.225.199:39845] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "ael-wr6vRb9j6psK2ZYaLAAAAhY"]
[Thu Apr 23 10:07:00.911843 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.197:59409] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ael-xG6I0QqmmmLTHE0J4QAAAJc"]
[Thu Apr 23 10:07:04.811713 2026] [:error] [pid 42973:tid 43064] [client 91.230.225.20:37917] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "ael-yG6I0QqmmmLTHE0J7wAAAJU"]
[Thu Apr 23 10:07:11.383780 2026] [:error] [pid 65000:tid 65046] [client 185.192.71.28:29521] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ael-z76vRb9j6psK2ZYadAAAAg0"]
[Thu Apr 23 10:07:25.116910 2026] [:error] [pid 65000:tid 65029] [client 91.230.225.207:59029] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/file.php"] [unique_id "ael-3b6vRb9j6psK2ZYa-wAAAgA"]
[Thu Apr 23 10:07:30.927443 2026] [:error] [pid 65000:tid 65055] [client 185.192.71.26:45481] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ael-4r6vRb9j6psK2ZYbJAAAAhY"]
[Thu Apr 23 10:07:31.468072 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.198:64395] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ael-476vRb9j6psK2ZYbLgAAAhc"]
[Thu Apr 23 10:07:38.288171 2026] [:error] [pid 59700:tid 59722] [client 185.192.71.37:48643] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ael-6pXyGZJFeAIDWtmnVAAAAVQ"]
[Thu Apr 23 10:07:44.526135 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 91.230.225.11:21221] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:07:44.800467 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 91.230.225.11:21221] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:07:45.081416 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 91.230.225.11:21221] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:07:51.637652 2026] [:error] [pid 65000:tid 65048] [client 91.230.225.11:21221] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "ael-976vRb9j6psK2ZYb3QAAAg8"]
[Thu Apr 23 10:07:52.195488 2026] [:error] [pid 42973:tid 43047] [client 91.230.225.198:30521] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ael--G6I0QqmmmLTHE0KhgAAAIQ"]
[Thu Apr 23 10:07:52.758515 2026] [:error] [pid 42973:tid 43052] [client 185.92.25.114:28623] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ael--G6I0QqmmmLTHE0KigAAAIk"]
[Thu Apr 23 10:07:53.327579 2026] [:error] [pid 43083:tid 43107] [client 185.192.71.25:55167] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ael--TC5hrvNXosL83IqtQAAANY"]
[Thu Apr 23 10:07:53.928896 2026] [:error] [pid 65000:tid 65054] [client 185.192.71.38:21209] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ael--b6vRb9j6psK2ZYb-QAAAhU"]
[Thu Apr 23 10:07:54.479180 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.204:57523] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ael--m6I0QqmmmLTHE0KkwAAAI8"]
[Thu Apr 23 10:07:56.382770 2026] [:error] [pid 64998:tid 65009] [client 91.230.225.200:30091] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "ael-_IV5EysYcTLjmwiWlQAAAcc"]
[Thu Apr 23 10:07:57.229451 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.12:39981] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ael-_W6I0QqmmmLTHE0KoAAAAI8"]
[Thu Apr 23 10:07:58.909248 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.19:50685] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ael-_oV5EysYcTLjmwiWmwAAAck"]
[Thu Apr 23 10:07:59.575762 2026] [:error] [pid 59700:tid 59702] [client 185.192.71.31:60339] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ael-_5XyGZJFeAIDWtmnYwAAAUA"]
[Thu Apr 23 10:08:03.341064 2026] [:error] [pid 46953:tid 46971] [client 91.230.225.16:65405] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ael_A0nlpdHh-P6wKbrUtAAAAk8"]
[Thu Apr 23 10:08:05.714846 2026] [:error] [pid 46953:tid 46968] [client 185.192.71.29:52125] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "ael_BUnlpdHh-P6wKbrUuAAAAkw"]
[Thu Apr 23 10:08:10.394413 2026] [:error] [pid 65000:tid 65045] [client 91.230.225.21:34459] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ael_Cr6vRb9j6psK2ZYcqQAAAgw"]
[Thu Apr 23 10:08:14.013729 2026] [:error] [pid 43083:tid 43090] [client 185.192.71.33:44621] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/about.php"] [unique_id "ael_DjC5hrvNXosL83IqvQAAAMU"]
[Thu Apr 23 10:08:18.822587 2026] [:error] [pid 59700:tid 59722] [client 91.230.225.202:53627] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ael_EpXyGZJFeAIDWtmndAAAAVQ"]
[Thu Apr 23 10:08:25.519463 2026] [:error] [pid 42973:tid 43044] [client 91.230.225.200:51147] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "ael_GW6I0QqmmmLTHE0LIwAAAIE"]
[Thu Apr 23 10:08:27.699444 2026] [:error] [pid 43083:tid 43086] [client 91.230.225.20:44463] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-class.php"] [unique_id "ael_GzC5hrvNXosL83IqzwAAAME"]
[Thu Apr 23 10:08:50.109660 2026] [:error] [pid 25635:tid 25654] [client 91.230.225.208:53009] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ael_MsRxv6UsgRGKB3IHxAAAAQ8"]
[Thu Apr 23 10:08:50.751005 2026] [:error] [pid 42973:tid 43059] [client 185.192.71.31:51971] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ael_Mm6I0QqmmmLTHE0LcgAAAJA"]
[Thu Apr 23 10:08:53.393792 2026] [:error] [pid 65000:tid 65045] [client 185.92.25.113:31805] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ael_Nb6vRb9j6psK2ZYeDQAAAgw"]
[Thu Apr 23 10:08:57.275254 2026] [:error] [pid 42973:tid 43060] [client 185.92.25.114:46431] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ael_OW6I0QqmmmLTHE0LkAAAAJE"]
[Thu Apr 23 10:08:57.892326 2026] [:error] [pid 64998:tid 65021] [client 91.230.225.199:57155] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ael_OYV5EysYcTLjmwiXXgAAAdM"]
[Thu Apr 23 10:09:06.675221 2026] [:error] [pid 64998:tid 65007] [client 185.192.71.31:35459] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ael_QoV5EysYcTLjmwiXgAAAAcU"]
[Thu Apr 23 10:09:07.272737 2026] [:error] [pid 42973:tid 43062] [client 185.192.71.22:31573] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "ael_Q26I0QqmmmLTHE0L1QAAAJM"]
[Thu Apr 23 10:09:18.461950 2026] [:error] [pid 64998:tid 65021] [client 185.192.71.36:44249] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ael_ToV5EysYcTLjmwiXqQAAAdM"]
[Thu Apr 23 10:09:21.939726 2026] [proxy_fcgi:error] [pid 64998:tid 65002] [client 91.230.225.24:54997] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:09:24.522331 2026] [:error] [pid 64998:tid 65020] [client 91.230.225.24:54997] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/function.php"] [unique_id "ael_VIV5EysYcTLjmwiXxQAAAdI"]
[Thu Apr 23 10:09:25.257143 2026] [:error] [pid 46953:tid 46967] [client 91.230.225.197:21443] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugins.php"] [unique_id "ael_VUnlpdHh-P6wKbrVBwAAAks"]
[Thu Apr 23 10:09:30.340907 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.27:22923] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "ael_WoV5EysYcTLjmwiX7gAAAcc"]
[Thu Apr 23 10:09:30.906372 2026] [:error] [pid 42973:tid 43055] [client 91.230.225.13:58263] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ael_Wm6I0QqmmmLTHE0MLQAAAIw"]
[Thu Apr 23 10:09:46.522625 2026] [:error] [pid 42973:tid 43046] [client 91.230.225.21:35203] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/atomlib.php"] [unique_id "ael_am6I0QqmmmLTHE0MVwAAAIM"]
[Thu Apr 23 10:09:47.065936 2026] [:error] [pid 65000:tid 65052] [client 185.192.71.34:41507] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ael_a76vRb9j6psK2ZYfAAAAAhM"]
[Thu Apr 23 10:09:53.997802 2026] [:error] [pid 42973:tid 43064] [client 185.192.71.34:44123] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/index.php"] [unique_id "ael_cW6I0QqmmmLTHE0MegAAAJU"]
[Thu Apr 23 10:09:54.614884 2026] [:error] [pid 42973:tid 43060] [client 91.230.225.208:31571] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ael_cm6I0QqmmmLTHE0MfQAAAJE"]
[Thu Apr 23 10:09:55.187110 2026] [:error] [pid 46953:tid 46978] [client 91.230.225.203:31925] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ael_c0nlpdHh-P6wKbrVGAAAAlU"]
[Thu Apr 23 10:10:06.713045 2026] [:error] [pid 65000:tid 65031] [client 91.230.225.17:54549] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ael_fr6vRb9j6psK2ZYfgwAAAgI"]
[Thu Apr 23 10:10:09.539844 2026] [:error] [pid 59700:tid 59718] [client 185.192.71.37:37487] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ael_gZXyGZJFeAIDWtmoRAAAAVA"]
[Thu Apr 23 10:10:19.577387 2026] [:error] [pid 59700:tid 59708] [client 185.192.71.36:23591] [client 185.192.71.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/js/wp-login.php"] [unique_id "ael_i5XyGZJFeAIDWtmoXAAAAUY"]
[Thu Apr 23 10:10:28.837553 2026] [:error] [pid 59700:tid 59712] [client 185.192.71.36:23591] [client 185.192.71.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.36, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ael_lJXyGZJFeAIDWtmoegAAAUo"]
[Thu Apr 23 10:10:45.766461 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 185.192.71.36:23591] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:11:06.295920 2026] [:error] [pid 59700:tid 59722] [client 185.192.71.36:23591] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "ael_upXyGZJFeAIDWtmo5gAAAVQ"]
[Thu Apr 23 10:11:11.416943 2026] [:error] [pid 65000:tid 65041] [client 185.92.25.114:41557] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ael_v76vRb9j6psK2ZYhhwAAAgg"]
[Thu Apr 23 10:11:16.546167 2026] [:error] [pid 65000:tid 65057] [client 91.230.225.24:23783] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ael_xL6vRb9j6psK2ZYhqgAAAhg"]
[Thu Apr 23 10:11:30.153752 2026] [:error] [pid 42973:tid 43063] [client 185.192.71.24:25345] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ael_0m6I0QqmmmLTHE0OIAAAAJQ"]
[Thu Apr 23 10:11:33.515959 2026] [:error] [pid 59700:tid 59725] [client 185.192.71.24:62687] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ael_1ZXyGZJFeAIDWtmpGgAAAVc"]
[Thu Apr 23 10:11:35.656223 2026] [:error] [pid 65000:tid 65041] [client 91.230.225.20:51589] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ael_176vRb9j6psK2ZYiIwAAAgg"]
[Thu Apr 23 10:11:41.576358 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 185.192.71.32:54975] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:11:41.856313 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 185.192.71.32:54975] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:11:42.125254 2026] [:error] [pid 64998:tid 65008] [client 185.192.71.32:54975] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ael_3oV5EysYcTLjmwiZSQAAAcY"]
[Thu Apr 23 10:11:42.682394 2026] [:error] [pid 59700:tid 59717] [client 185.192.71.21:42095] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ael_3pXyGZJFeAIDWtmpNQAAAU8"]
[Thu Apr 23 10:11:52.722798 2026] [:error] [pid 46953:tid 46971] [client 91.230.225.209:38635] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ael_6EnlpdHh-P6wKbrVzwAAAk8"]
[Thu Apr 23 10:11:54.918581 2026] [:error] [pid 64998:tid 65021] [client 91.230.225.24:55213] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "ael_6oV5EysYcTLjmwiZcQAAAdM"]
[Thu Apr 23 10:11:59.760152 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.30:57513] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ael_776vRb9j6psK2ZYiswAAAgs"]
[Thu Apr 23 10:12:10.656994 2026] [:error] [pid 59700:tid 59711] [client 185.192.71.40:52991] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ael_-pXyGZJFeAIDWtmpmQAAAUk"]
[Thu Apr 23 10:12:11.228497 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 185.192.71.36:22545] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:12:14.643752 2026] [:error] [pid 59700:tid 59726] [client 185.192.71.36:22545] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ael__pXyGZJFeAIDWtmpswAAAVg"]
[Thu Apr 23 10:12:22.681479 2026] [proxy_fcgi:error] [pid 42973:tid 43049] [client 91.230.225.205:61307] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:12:24.316902 2026] [:error] [pid 42973:tid 43061] [client 91.230.225.205:61307] [client 91.230.225.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.205, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aemACG6I0QqmmmLTHE0O4AAAAJI"]
[Thu Apr 23 10:12:31.119403 2026] [:error] [pid 42973:tid 43059] [client 91.230.225.205:61307] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aemAD26I0QqmmmLTHE0PCgAAAJA"]
[Thu Apr 23 10:12:33.207473 2026] [:error] [pid 65000:tid 65050] [client 91.230.225.197:45859] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aemAEb6vRb9j6psK2ZYjfAAAAhE"]
[Thu Apr 23 10:12:38.036272 2026] [:error] [pid 64967:tid 64987] [client 185.192.71.24:60715] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aemAFoAV4GfOOdX8Qzo-HQAAAZI"]
[Thu Apr 23 10:12:42.821012 2026] [:error] [pid 59700:tid 59723] [client 91.230.225.206:23225] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aemAGpXyGZJFeAIDWtmqDgAAAVU"]
[Thu Apr 23 10:12:43.357462 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.197:40389] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aemAG4V5EysYcTLjmwiZqgAAAdQ"]
[Thu Apr 23 10:12:48.151404 2026] [:error] [pid 42973:tid 43065] [client 91.230.225.17:44181] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aemAIG6I0QqmmmLTHE0PXwAAAJY"]
[Thu Apr 23 10:12:51.901185 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 91.230.225.199:61901] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:12:52.181961 2026] [:error] [pid 59700:tid 59711] [client 91.230.225.199:61901] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aemAJJXyGZJFeAIDWtmqIgAAAUk"]
[Thu Apr 23 10:12:52.754643 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 91.230.225.18:23435] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php:147\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/functions.php on line 147'
[Thu Apr 23 10:12:53.302196 2026] [:error] [pid 46953:tid 46968] [client 185.192.71.37:44585] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/db.php"] [unique_id "aemAJUnlpdHh-P6wKbrWQQAAAkw"]
[Thu Apr 23 10:12:53.885796 2026] [:error] [pid 59700:tid 59725] [client 185.192.71.40:33907] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aemAJZXyGZJFeAIDWtmqJQAAAVc"]
[Thu Apr 23 10:12:54.424391 2026] [:error] [pid 46953:tid 46969] [client 185.192.71.36:64297] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aemAJknlpdHh-P6wKbrWRAAAAk0"]
[Thu Apr 23 10:12:54.990561 2026] [:error] [pid 59700:tid 59718] [client 185.92.25.113:20905] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aemAJpXyGZJFeAIDWtmqKgAAAVA"]
[Thu Apr 23 10:12:55.525321 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.22:30285] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aemAJ4V5EysYcTLjmwiZuwAAAdU"]
[Thu Apr 23 10:12:56.070296 2026] [:error] [pid 65000:tid 65029] [client 91.230.225.16:54731] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aemAKL6vRb9j6psK2ZYj9QAAAgA"]
[Thu Apr 23 10:12:59.591710 2026] [:error] [pid 65000:tid 65031] [client 185.192.71.36:53867] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aemAK76vRb9j6psK2ZYkCwAAAgI"]
[Thu Apr 23 10:13:00.137066 2026] [:error] [pid 64998:tid 65017] [client 91.230.225.18:42817] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aemALIV5EysYcTLjmwiZvgAAAc8"]
[Thu Apr 23 10:13:00.695177 2026] [:error] [pid 65000:tid 65039] [client 91.230.225.201:42553] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aemALL6vRb9j6psK2ZYkFgAAAgY"]
[Thu Apr 23 10:13:01.245203 2026] [:error] [pid 43083:tid 43093] [client 185.192.71.22:28927] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aemALTC5hrvNXosL83IruQAAAMg"]
[Thu Apr 23 10:13:01.813394 2026] [:error] [pid 65000:tid 65053] [client 185.192.71.28:34463] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aemALb6vRb9j6psK2ZYkHgAAAhQ"]
[Thu Apr 23 10:13:02.359312 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 91.230.225.195:27245] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:13:05.939772 2026] [:error] [pid 65000:tid 65048] [client 91.230.225.195:27245] [client 91.230.225.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.195, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aemAMb6vRb9j6psK2ZYkNwAAAg8"]
[Thu Apr 23 10:13:12.873834 2026] [:error] [pid 65000:tid 65057] [client 91.230.225.195:27245] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aemAOL6vRb9j6psK2ZYkUwAAAhg"]
[Thu Apr 23 10:13:36.409671 2026] [:error] [pid 43083:tid 43104] [client 91.230.225.16:32273] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aemAUDC5hrvNXosL83Ir5QAAANM"]
[Thu Apr 23 10:13:36.949838 2026] [:error] [pid 59700:tid 59724] [client 91.230.225.203:38373] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aemAUJXyGZJFeAIDWtmqVQAAAVY"]
[Thu Apr 23 10:13:37.485833 2026] [:error] [pid 64998:tid 65025] [client 91.230.225.198:27003] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aemAUYV5EysYcTLjmwiaFQAAAdc"]
[Thu Apr 23 10:13:46.267046 2026] [:error] [pid 42973:tid 43050] [client 91.230.225.19:58777] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aemAWm6I0QqmmmLTHE0QUwAAAIc"]
[Thu Apr 23 10:13:46.833551 2026] [:error] [pid 64998:tid 65016] [client 91.230.225.20:37173] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aemAWoV5EysYcTLjmwiaLwAAAc4"]
[Thu Apr 23 10:13:49.686504 2026] [:error] [pid 42973:tid 43046] [client 91.230.225.198:41301] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aemAXW6I0QqmmmLTHE0QWgAAAIM"]
[Thu Apr 23 10:13:56.389633 2026] [:error] [pid 64998:tid 65021] [client 185.92.25.114:34331] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aemAZIV5EysYcTLjmwiaXQAAAdM"]
[Thu Apr 23 10:13:58.763753 2026] [:error] [pid 43083:tid 43088] [client 185.192.71.39:59525] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aemAZjC5hrvNXosL83Ir-AAAAMM"]
[Thu Apr 23 10:14:02.736291 2026] [:error] [pid 64998:tid 65002] [client 91.230.225.201:53033] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aemAaoV5EysYcTLjmwiamQAAAcA"]
[Thu Apr 23 10:14:21.149896 2026] [:error] [pid 46953:tid 46979] [client 91.230.225.198:41501] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aemAfUnlpdHh-P6wKbrWhAAAAlY"]
[Thu Apr 23 10:14:24.344020 2026] [:error] [pid 59700:tid 59706] [client 91.230.225.201:30605] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/about.php"] [unique_id "aemAgJXyGZJFeAIDWtmqswAAAUQ"]
[Thu Apr 23 10:14:33.431897 2026] [:error] [pid 42973:tid 43043] [client 185.192.71.33:25257] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aemAiW6I0QqmmmLTHE0RTQAAAIA"]
[Thu Apr 23 10:14:37.058401 2026] [:error] [pid 65000:tid 65032] [client 91.230.225.207:22527] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aemAjb6vRb9j6psK2ZYmpQAAAgM"]
[Thu Apr 23 10:14:44.675181 2026] [:error] [pid 59700:tid 59706] [client 91.230.225.11:37631] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aemAlJXyGZJFeAIDWtmqzgAAAUQ"]
[Thu Apr 23 10:14:51.046364 2026] [:error] [pid 65000:tid 65055] [client 91.230.225.14:49585] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aemAm76vRb9j6psK2ZYm_QAAAhY"]
[Thu Apr 23 10:14:54.850250 2026] [:error] [pid 42971:tid 43006] [client 91.230.225.18:24621] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aemAnjEP2_5RswrH8bHsPAAAABQ"]
[Thu Apr 23 10:14:55.403107 2026] [:error] [pid 65000:tid 65049] [client 185.192.71.35:41549] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aemAn76vRb9j6psK2ZYnJwAAAhA"]
[Thu Apr 23 10:15:03.028281 2026] [:error] [pid 64967:tid 64974] [client 185.192.71.25:38623] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aemAp4AV4GfOOdX8Qzo-cQAAAYU"]
[Thu Apr 23 10:15:10.529429 2026] [:error] [pid 65000:tid 65043] [client 185.192.71.30:21969] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aemArr6vRb9j6psK2ZYnwQAAAgo"]
[Thu Apr 23 10:15:18.065417 2026] [:error] [pid 65000:tid 65041] [client 91.230.225.18:56707] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aemAtr6vRb9j6psK2ZYoJQAAAgg"]
[Thu Apr 23 10:15:19.221343 2026] [:error] [pid 42973:tid 43062] [client 185.192.71.35:22435] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aemAt26I0QqmmmLTHE0RrwAAAJM"]
[Thu Apr 23 10:15:22.043261 2026] [:error] [pid 42971:tid 42997] [client 91.230.225.12:43753] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aemAujEP2_5RswrH8bHsTwAAAAs"]
[Thu Apr 23 10:15:25.447747 2026] [:error] [pid 42972:tid 43023] [client 91.230.225.22:45739] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/install.php"] [unique_id "aemAvcOAb-3sOknsk4dSqQAAAEc"]
[Thu Apr 23 10:15:26.585399 2026] [:error] [pid 64998:tid 65007] [client 91.230.225.196:40079] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aemAvoV5EysYcTLjmwicIQAAAcU"]
[Thu Apr 23 10:15:36.163188 2026] [:error] [pid 65000:tid 65053] [client 91.230.225.206:35565] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/category-double.php"] [unique_id "aemAyL6vRb9j6psK2ZYo8wAAAhQ"]
[Thu Apr 23 10:15:42.201355 2026] [:error] [pid 46953:tid 46981] [client 185.192.71.28:58403] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aemAzknlpdHh-P6wKbrXYAAAAlg"]
[Thu Apr 23 10:15:42.784159 2026] [:error] [pid 65000:tid 65048] [client 91.230.225.16:41903] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aemAzr6vRb9j6psK2ZYpOgAAAg8"]
[Thu Apr 23 10:15:46.342915 2026] [:error] [pid 42973:tid 43059] [client 91.230.225.20:28507] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aemA0m6I0QqmmmLTHE0SxgAAAJA"]
[Thu Apr 23 10:15:49.180782 2026] [:error] [pid 46953:tid 46962] [client 91.230.225.204:59811] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aemA1UnlpdHh-P6wKbrXZQAAAkY"]
[Thu Apr 23 10:15:57.584924 2026] [:error] [pid 42973:tid 43046] [client 91.230.225.20:50033] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aemA3W6I0QqmmmLTHE0TFQAAAIM"]
[Thu Apr 23 10:16:01.995529 2026] [:error] [pid 65000:tid 65047] [client 91.230.225.23:50727] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aemA4b6vRb9j6psK2ZYpyQAAAg4"]
[Thu Apr 23 10:16:05.452565 2026] [:error] [pid 65000:tid 65047] [client 91.230.225.23:50727] [client 91.230.225.23] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "185.192.71.31_a55e5ff7b5a5bd370e5f2751eabd22df4ac4f3dd"): Internal error (specific information not available) [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aemA4b6vRb9j6psK2ZYpyQAAAg4"]
[Thu Apr 23 10:16:09.574026 2026] [:error] [pid 42973:tid 43043] [client 91.230.225.12:47601] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aemA6W6I0QqmmmLTHE0TkgAAAIA"]
[Thu Apr 23 10:16:12.765218 2026] [:error] [pid 65000:tid 65054] [client 91.230.225.22:63139] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/as.php"] [unique_id "aemA7L6vRb9j6psK2ZYqAwAAAhU"]
[Thu Apr 23 10:16:15.236211 2026] [:error] [pid 46953:tid 46971] [client 185.192.71.34:50353] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aemA70nlpdHh-P6wKbrXvgAAAk8"]
[Thu Apr 23 10:16:16.672462 2026] [:error] [pid 64998:tid 65019] [client 185.192.71.27:37979] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/install.php"] [unique_id "aemA8IV5EysYcTLjmwic4gAAAdE"]
[Thu Apr 23 10:16:17.464085 2026] [:error] [pid 42973:tid 43060] [client 185.192.71.33:45071] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aemA8W6I0QqmmmLTHE0T7wAAAJE"]
[Thu Apr 23 10:16:29.958487 2026] [:error] [pid 65000:tid 65047] [client 185.192.71.23:50533] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aemA_b6vRb9j6psK2ZYqPwAAAg4"]
[Thu Apr 23 10:16:34.979253 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.202:43425] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rk2.php"] [unique_id "aemBApXyGZJFeAIDWtmsqgAAAUs"]
[Thu Apr 23 10:16:39.555712 2026] [:error] [pid 42973:tid 43060] [client 91.230.225.200:22803] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aemBB26I0QqmmmLTHE0UyAAAAJE"]
[Thu Apr 23 10:16:43.727968 2026] [:error] [pid 59700:tid 59725] [client 185.192.71.39:65315] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aemBC5XyGZJFeAIDWtms4wAAAVc"]
[Thu Apr 23 10:16:53.404432 2026] [:error] [pid 65000:tid 65030] [client 185.192.71.39:36023] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aemBFb6vRb9j6psK2ZYqqQAAAgE"]
[Thu Apr 23 10:16:55.878637 2026] [:error] [pid 64998:tid 65025] [client 91.230.225.15:58981] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aemBF4V5EysYcTLjmwid2AAAAdc"]
[Thu Apr 23 10:16:58.239565 2026] [:error] [pid 42973:tid 43054] [client 185.192.71.26:40377] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aemBGm6I0QqmmmLTHE0VBQAAAIs"]
[Thu Apr 23 10:17:03.132044 2026] [:error] [pid 59700:tid 59714] [client 91.230.225.23:25053] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aemBH5XyGZJFeAIDWtmtFQAAAUw"]
[Thu Apr 23 10:17:16.210357 2026] [:error] [pid 65000:tid 65050] [client 91.230.225.21:43849] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aemBLL6vRb9j6psK2ZYrJwAAAhE"]
[Thu Apr 23 10:17:16.758959 2026] [:error] [pid 42973:tid 43059] [client 91.230.225.205:26501] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aemBLG6I0QqmmmLTHE0VWgAAAJA"]
[Thu Apr 23 10:17:22.244163 2026] [:error] [pid 42973:tid 43047] [client 91.230.225.22:59517] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aemBMm6I0QqmmmLTHE0VcQAAAIQ"]
[Thu Apr 23 10:17:22.846688 2026] [:error] [pid 59700:tid 59709] [client 185.192.71.39:20809] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aemBMpXyGZJFeAIDWtmtQQAAAUc"]
[Thu Apr 23 10:17:26.411057 2026] [:error] [pid 46953:tid 46980] [client 91.230.225.205:52815] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aemBNknlpdHh-P6wKbrYLwAAAlc"]
[Thu Apr 23 10:17:26.975250 2026] [:error] [pid 65000:tid 65054] [client 185.192.71.22:57321] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aemBNr6vRb9j6psK2ZYrXgAAAhU"]
[Thu Apr 23 10:17:28.639956 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.207:44383] [client 91.230.225.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.207, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aemBOIV5EysYcTLjmwieIgAAAdQ"]
[Thu Apr 23 10:17:28.644610 2026] [proxy_fcgi:error] [pid 64998:tid 65022] [client 91.230.225.207:44383] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:17:28.924906 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.207:44383] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aemBOIV5EysYcTLjmwieJAAAAcY"]
[Thu Apr 23 10:17:32.315661 2026] [:error] [pid 65000:tid 65054] [client 91.230.225.198:61077] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aemBPL6vRb9j6psK2ZYrigAAAhU"]
[Thu Apr 23 10:17:32.858717 2026] [:error] [pid 65000:tid 65037] [client 185.192.71.37:40295] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/network.php"] [unique_id "aemBPL6vRb9j6psK2ZYrkQAAAgQ"]
[Thu Apr 23 10:17:42.791814 2026] [:error] [pid 43083:tid 43108] [client 91.230.225.203:63625] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aemBRjC5hrvNXosL83ItpAAAANc"]
[Thu Apr 23 10:17:44.385928 2026] [:error] [pid 65000:tid 65057] [client 91.230.225.18:52471] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aemBSL6vRb9j6psK2ZYr2QAAAhg"]
[Thu Apr 23 10:17:48.654478 2026] [:error] [pid 65000:tid 65030] [client 91.230.225.199:26711] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aemBTL6vRb9j6psK2ZYr_QAAAgE"]
[Thu Apr 23 10:17:50.236633 2026] [:error] [pid 42973:tid 43054] [client 185.192.71.38:59077] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aemBTm6I0QqmmmLTHE0VrAAAAIs"]
[Thu Apr 23 10:17:50.808792 2026] [proxy_fcgi:error] [pid 46953:tid 46957] [client 91.230.225.19:27873] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:17:51.097374 2026] [:error] [pid 46953:tid 46967] [client 91.230.225.19:27873] [client 91.230.225.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.19, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aemBT0nlpdHh-P6wKbrYQQAAAks"]
[Thu Apr 23 10:17:54.602211 2026] [:error] [pid 46953:tid 46956] [client 91.230.225.19:27873] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aemBUknlpdHh-P6wKbrYSAAAAkA"]
[Thu Apr 23 10:17:58.999744 2026] [:error] [pid 59700:tid 59716] [client 185.192.71.27:50621] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aemBVpXyGZJFeAIDWtmtdQAAAU4"]
[Thu Apr 23 10:18:02.284205 2026] [:error] [pid 43083:tid 43096] [client 185.192.71.37:62037] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aemBWjC5hrvNXosL83ItvQAAAMs"]
[Thu Apr 23 10:18:02.839946 2026] [:error] [pid 46953:tid 46965] [client 91.230.225.205:45711] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aemBWknlpdHh-P6wKbrYTAAAAkk"]
[Thu Apr 23 10:18:07.910619 2026] [:error] [pid 65000:tid 65041] [client 91.230.225.198:47113] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aemBX76vRb9j6psK2ZYsIAAAAgg"]
[Thu Apr 23 10:18:11.717593 2026] [:error] [pid 42973:tid 43052] [client 91.230.225.24:33205] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aemBY26I0QqmmmLTHE0V2wAAAIk"]
[Thu Apr 23 10:18:18.153662 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.19:37913] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aemBam6I0QqmmmLTHE0V7wAAAI8"]
[Thu Apr 23 10:18:19.741443 2026] [:error] [pid 42972:tid 43024] [client 185.92.25.113:37159] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bypass.php"] [unique_id "aemBa8OAb-3sOknsk4dTAQAAAEg"]
[Thu Apr 23 10:18:22.972143 2026] [:error] [pid 42973:tid 43052] [client 91.230.225.17:59699] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/count.php"] [unique_id "aemBbm6I0QqmmmLTHE0WEQAAAIk"]
[Thu Apr 23 10:18:32.151598 2026] [:error] [pid 59700:tid 59713] [client 185.192.71.32:52861] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aemBeJXyGZJFeAIDWtmthgAAAUs"]
[Thu Apr 23 10:18:35.772704 2026] [:error] [pid 65000:tid 65043] [client 91.230.225.203:61013] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "hotbooksbookeeping2.com"] [uri "/images/stories/themes.php"] [unique_id "aemBe76vRb9j6psK2ZYsQgAAAgo"]
[Thu Apr 23 10:18:36.043019 2026] [:error] [pid 65000:tid 65041] [client 91.230.225.203:61013] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aemBfL6vRb9j6psK2ZYsQwAAAgg"]
[Thu Apr 23 10:18:41.819044 2026] [:error] [pid 42973:tid 43060] [client 91.230.225.15:28789] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aemBgW6I0QqmmmLTHE0WQQAAAJE"]
[Thu Apr 23 10:18:42.368449 2026] [:error] [pid 46953:tid 46967] [client 185.192.71.27:63245] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aemBgknlpdHh-P6wKbrYbwAAAks"]
[Thu Apr 23 10:18:52.896382 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.21:42827] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aemBjG6I0QqmmmLTHE0WUAAAAI8"]
[Thu Apr 23 10:18:57.013862 2026] [:error] [pid 65000:tid 65041] [client 91.230.225.201:60523] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aemBkb6vRb9j6psK2ZYsYgAAAgg"]
[Thu Apr 23 10:19:00.233381 2026] [:error] [pid 42973:tid 43062] [client 185.192.71.39:41629] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aemBlG6I0QqmmmLTHE0WVQAAAJM"]
[Thu Apr 23 10:19:07.845918 2026] [:error] [pid 43083:tid 43093] [client 91.230.225.205:31605] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aemBmzC5hrvNXosL83It1gAAAMg"]
[Thu Apr 23 10:19:08.395350 2026] [:error] [pid 42973:tid 43048] [client 91.230.225.10:30695] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/colour.php"] [unique_id "aemBnG6I0QqmmmLTHE0WYgAAAIU"]
[Thu Apr 23 10:19:10.453203 2026] [:error] [pid 64998:tid 65006] [client 91.230.225.23:59807] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aemBnoV5EysYcTLjmwieygAAAcQ"]
[Thu Apr 23 10:19:10.985997 2026] [:error] [pid 42971:tid 43002] [client 185.192.71.21:24585] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/include.php"] [unique_id "aemBnjEP2_5RswrH8bHtiAAAABA"]
[Thu Apr 23 10:19:14.294281 2026] [:error] [pid 65000:tid 65042] [client 185.92.25.114:29475] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aemBor6vRb9j6psK2ZYsegAAAgk"]
[Thu Apr 23 10:19:17.638110 2026] [:error] [pid 59700:tid 59708] [client 91.230.225.196:30621] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aemBpZXyGZJFeAIDWtmtowAAAUY"]
[Thu Apr 23 10:19:18.181834 2026] [:error] [pid 42972:tid 43035] [client 185.192.71.38:50837] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aemBpsOAb-3sOknsk4dTCwAAAFM"]
[Thu Apr 23 10:19:24.054066 2026] [:error] [pid 42972:tid 43024] [client 91.230.225.13:52519] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aemBrMOAb-3sOknsk4dTEwAAAEg"]
[Thu Apr 23 10:19:29.230401 2026] [:error] [pid 64998:tid 65017] [client 91.230.225.21:35685] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aemBsYV5EysYcTLjmwie4wAAAc8"]
[Thu Apr 23 10:19:33.836749 2026] [:error] [pid 46953:tid 46967] [client 91.230.225.20:58771] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aemBtUnlpdHh-P6wKbrYpwAAAks"]
[Thu Apr 23 10:19:35.417990 2026] [:error] [pid 65000:tid 65055] [client 91.230.225.209:36043] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aemBt76vRb9j6psK2ZYsjgAAAhY"]
[Thu Apr 23 10:19:35.996540 2026] [:error] [pid 43083:tid 43092] [client 91.230.225.10:29145] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aemBtzC5hrvNXosL83It6wAAAMc"]
[Thu Apr 23 10:19:40.615789 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.24:35419] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aemBvIV5EysYcTLjmwifAgAAAcc"]
[Thu Apr 23 10:19:44.121142 2026] [:error] [pid 65000:tid 65039] [client 91.230.225.206:32407] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aemBwL6vRb9j6psK2ZYsvAAAAgY"]
[Thu Apr 23 10:19:44.694692 2026] [:error] [pid 65000:tid 65048] [client 91.230.225.195:64339] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aemBwL6vRb9j6psK2ZYsvgAAAg8"]
[Thu Apr 23 10:19:46.816814 2026] [:error] [pid 65000:tid 65049] [client 185.192.71.33:27805] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aemBwr6vRb9j6psK2ZYsxwAAAhA"]
[Thu Apr 23 10:19:47.379633 2026] [:error] [pid 59700:tid 59704] [client 185.192.71.26:45081] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aemBw5XyGZJFeAIDWtmtuQAAAUI"]
[Thu Apr 23 10:19:50.825646 2026] [:error] [pid 42973:tid 43065] [client 185.192.71.25:43917] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aemBxm6I0QqmmmLTHE0WwgAAAJY"]
[Thu Apr 23 10:19:52.556166 2026] [:error] [pid 42971:tid 42988] [client 185.92.25.113:20449] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aemByDEP2_5RswrH8bHtmwAAAAI"]
[Thu Apr 23 10:19:53.106765 2026] [:error] [pid 65000:tid 65056] [client 185.192.71.24:58621] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aemByb6vRb9j6psK2ZYs0QAAAhc"]
[Thu Apr 23 10:19:53.649490 2026] [:error] [pid 64967:tid 64986] [client 91.230.225.15:34641] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aemByYAV4GfOOdX8Qzo-wgAAAZE"]
[Thu Apr 23 10:19:57.136055 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.20:58927] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aemBzYV5EysYcTLjmwifFgAAAco"]
[Thu Apr 23 10:20:01.793547 2026] [:error] [pid 64967:tid 64984] [client 91.230.225.204:64997] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aemB0YAV4GfOOdX8Qzo-yAAAAY8"]
[Thu Apr 23 10:20:05.283626 2026] [:error] [pid 64998:tid 65009] [client 91.230.225.14:61087] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aemB1YV5EysYcTLjmwifLAAAAcc"]
[Thu Apr 23 10:20:05.870362 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 91.230.225.198:61909] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/hbtwocom/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/hbtwocom/public_html/wp-admin/includes/admin.php on line 16'
[Thu Apr 23 10:20:06.407758 2026] [:error] [pid 46953:tid 46976] [client 91.230.225.208:35473] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aemB1knlpdHh-P6wKbrYtwAAAlQ"]
[Thu Apr 23 10:20:15.372247 2026] [:error] [pid 42973:tid 43061] [client 91.230.225.24:47997] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/plugin.php"] [unique_id "aemB326I0QqmmmLTHE0W8QAAAJI"]
[Thu Apr 23 10:20:15.932974 2026] [:error] [pid 59700:tid 59705] [client 185.192.71.31:21407] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aemB35XyGZJFeAIDWtmtxgAAAUM"]
[Thu Apr 23 10:20:20.377002 2026] [:error] [pid 59700:tid 59718] [client 91.230.225.16:26151] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aemB5JXyGZJFeAIDWtmtzAAAAVA"]
[Thu Apr 23 10:20:26.297907 2026] [:error] [pid 65000:tid 65050] [client 91.230.225.197:57351] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aemB6r6vRb9j6psK2ZYtKAAAAhE"]
[Thu Apr 23 10:20:29.793956 2026] [:error] [pid 65000:tid 65045] [client 185.192.71.40:36389] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aemB7b6vRb9j6psK2ZYtNQAAAgw"]
[Thu Apr 23 10:20:32.541599 2026] [:error] [pid 65000:tid 65054] [client 91.230.225.13:60551] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aemB8L6vRb9j6psK2ZYtQAAAAhU"]
[Thu Apr 23 10:20:34.656714 2026] [:error] [pid 64998:tid 65023] [client 185.192.71.30:31137] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aemB8oV5EysYcTLjmwifewAAAdU"]
[Thu Apr 23 10:20:36.765279 2026] [:error] [pid 42973:tid 43049] [client 91.230.225.203:46489] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aemB9G6I0QqmmmLTHE0XJAAAAIY"]
[Thu Apr 23 10:20:43.468906 2026] [:error] [pid 65000:tid 65037] [client 185.192.71.38:60161] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aemB-76vRb9j6psK2ZYtWwAAAgQ"]
[Thu Apr 23 10:20:48.003731 2026] [:error] [pid 65000:tid 65045] [client 185.192.71.26:34815] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aemCAL6vRb9j6psK2ZYtbAAAAgw"]
[Thu Apr 23 10:20:48.565881 2026] [proxy_fcgi:error] [pid 46953:tid 46963] [client 185.192.71.22:52143] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 10:20:48.831275 2026] [:error] [pid 46953:tid 46973] [client 185.192.71.22:52143] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aemCAEnlpdHh-P6wKbrYyQAAAlE"]
[Thu Apr 23 10:20:49.392619 2026] [:error] [pid 25635:tid 25654] [client 91.230.225.10:41401] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aemCAcRxv6UsgRGKB3IIPwAAAQ8"]
[Thu Apr 23 10:20:52.832544 2026] [:error] [pid 65000:tid 65054] [client 91.230.225.24:44735] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aemCBL6vRb9j6psK2ZYteQAAAhU"]
[Thu Apr 23 10:20:53.370590 2026] [:error] [pid 42973:tid 43046] [client 185.192.71.35:38083] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aemCBW6I0QqmmmLTHE0XLwAAAIM"]
[Thu Apr 23 10:21:01.786700 2026] [:error] [pid 42973:tid 43057] [client 185.192.71.33:49263] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aemCDW6I0QqmmmLTHE0XQwAAAI4"]
[Thu Apr 23 10:21:02.327952 2026] [:error] [pid 64998:tid 65006] [client 91.230.225.209:63415] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aemCDoV5EysYcTLjmwifswAAAcQ"]
[Thu Apr 23 10:21:04.368023 2026] [:error] [pid 46953:tid 46965] [client 185.92.25.113:56069] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/log.php"] [unique_id "aemCEEnlpdHh-P6wKbrYzgAAAkk"]
[Thu Apr 23 10:21:04.907348 2026] [:error] [pid 42971:tid 42993] [client 185.192.71.33:21985] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aemCEDEP2_5RswrH8bHtpQAAAAc"]
[Thu Apr 23 10:21:05.468052 2026] [:error] [pid 43083:tid 43099] [client 91.230.225.16:20413] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aemCETC5hrvNXosL83It9gAAAM4"]
[Thu Apr 23 10:21:05.999469 2026] [:error] [pid 42973:tid 43067] [client 91.230.225.13:26703] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/aw.php"] [unique_id "aemCEW6I0QqmmmLTHE0XSgAAAJg"]
[Thu Apr 23 10:21:14.215014 2026] [:error] [pid 43083:tid 43087] [client 91.230.225.195:53995] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aemCGjC5hrvNXosL83It_AAAAMI"]
[Thu Apr 23 10:21:14.747745 2026] [:error] [pid 65000:tid 65037] [client 185.192.71.39:40107] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/install.php"] [unique_id "aemCGr6vRb9j6psK2ZYtoAAAAgQ"]
[Thu Apr 23 10:21:16.089399 2026] [:error] [pid 65000:tid 65042] [client 43.133.187.11:53694] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aemCHL6vRb9j6psK2ZYtpwAAAgk"]
[Thu Apr 23 10:21:18.127878 2026] [:error] [pid 65000:tid 65047] [client 91.230.225.206:38715] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aemCHr6vRb9j6psK2ZYtrwAAAg4"]
[Thu Apr 23 10:21:18.665882 2026] [:error] [pid 42973:tid 43050] [client 91.230.225.21:31931] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aemCHm6I0QqmmmLTHE0XWwAAAIc"]
[Thu Apr 23 10:21:22.045127 2026] [:error] [pid 65000:tid 65037] [client 91.230.225.13:58647] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/template-less.php"] [unique_id "aemCIr6vRb9j6psK2ZYtzgAAAgQ"]
[Thu Apr 23 10:21:22.585111 2026] [:error] [pid 64998:tid 65017] [client 91.230.225.21:38475] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aemCIoV5EysYcTLjmwigBAAAAc8"]
[Thu Apr 23 10:21:34.650094 2026] [:error] [pid 43083:tid 43098] [client 185.192.71.25:29403] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aemCLjC5hrvNXosL83IuJgAAAM0"]
[Thu Apr 23 10:21:35.210886 2026] [:error] [pid 42973:tid 43049] [client 91.230.225.21:42087] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aemCL26I0QqmmmLTHE0XcQAAAIY"]
[Thu Apr 23 10:21:38.512779 2026] [:error] [pid 42973:tid 43045] [client 91.230.225.207:30995] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/file.php"] [unique_id "aemCMm6I0QqmmmLTHE0XegAAAII"]
[Thu Apr 23 10:21:40.562647 2026] [:error] [pid 42972:tid 43033] [client 185.192.71.38:45221] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aemCNMOAb-3sOknsk4dTaQAAAFE"]
[Thu Apr 23 10:21:43.711075 2026] [:error] [pid 42973:tid 43055] [client 185.192.71.27:23505] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/load.php"] [unique_id "aemCN26I0QqmmmLTHE0XfQAAAIw"]
[Thu Apr 23 10:21:44.252060 2026] [:error] [pid 42973:tid 43046] [client 91.230.225.13:44015] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aemCOG6I0QqmmmLTHE0XfgAAAIM"]
[Thu Apr 23 10:21:44.798442 2026] [:error] [pid 42973:tid 43052] [client 185.192.71.29:31485] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aemCOG6I0QqmmmLTHE0XgQAAAIk"]
[Thu Apr 23 10:21:50.595897 2026] [:error] [pid 42973:tid 43065] [client 185.192.71.27:56703] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aemCPm6I0QqmmmLTHE0XlwAAAJY"]
[Thu Apr 23 10:21:52.654306 2026] [:error] [pid 65000:tid 65052] [client 91.230.225.11:43367] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aemCQL6vRb9j6psK2ZYuGwAAAhM"]
[Thu Apr 23 10:21:56.204781 2026] [:error] [pid 59700:tid 59708] [client 185.192.71.22:21211] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aemCRJXyGZJFeAIDWtmuDQAAAUY"]
[Thu Apr 23 10:21:56.744662 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.24:40837] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aemCRG6I0QqmmmLTHE0XqQAAAJc"]
[Thu Apr 23 10:21:57.288028 2026] [:error] [pid 46953:tid 46959] [client 91.230.225.207:32001] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aemCRUnlpdHh-P6wKbrY5gAAAkM"]
[Thu Apr 23 10:22:08.278767 2026] [:error] [pid 42973:tid 43047] [client 185.192.71.36:36821] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aemCUG6I0QqmmmLTHE0XzwAAAIQ"]
[Thu Apr 23 10:22:10.001650 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.197:62685] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aemCUr6vRb9j6psK2ZYuUwAAAhc"]
[Thu Apr 23 10:22:13.477718 2026] [:error] [pid 42973:tid 43059] [client 91.230.225.10:64815] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aemCVW6I0QqmmmLTHE0X4gAAAJA"]
[Thu Apr 23 10:22:14.047617 2026] [:error] [pid 42973:tid 43060] [client 91.230.225.20:21271] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aemCVm6I0QqmmmLTHE0X5AAAAJE"]
[Thu Apr 23 10:22:14.601248 2026] [:error] [pid 42973:tid 43047] [client 185.192.71.24:50731] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aemCVm6I0QqmmmLTHE0X5wAAAIQ"]
[Thu Apr 23 10:22:17.801849 2026] [:error] [pid 64998:tid 65022] [client 185.192.71.22:41959] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aemCWYV5EysYcTLjmwigOwAAAdQ"]
[Thu Apr 23 10:22:27.596280 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.19:50971] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ms-pie.php"] [unique_id "aemCY26I0QqmmmLTHE0YBgAAAJc"]
[Thu Apr 23 10:22:34.409523 2026] [:error] [pid 42973:tid 43045] [client 91.230.225.204:61807] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aemCam6I0QqmmmLTHE0YFgAAAII"]
[Thu Apr 23 10:22:39.991245 2026] [:error] [pid 65000:tid 65046] [client 185.192.71.30:21859] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/nav-menu.php"] [unique_id "aemCb76vRb9j6psK2ZYuugAAAg0"]
[Thu Apr 23 10:22:40.525473 2026] [:error] [pid 65000:tid 65039] [client 185.192.71.33:43309] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aemCcL6vRb9j6psK2ZYuvQAAAgY"]
[Thu Apr 23 10:22:56.749051 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.209:34331] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aemCgJXyGZJFeAIDWtmuPgAAAUs"]
[Thu Apr 23 10:22:57.285734 2026] [:error] [pid 42973:tid 43049] [client 185.192.71.40:56631] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aemCgW6I0QqmmmLTHE0YRgAAAIY"]
[Thu Apr 23 10:22:57.860864 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.24:31505] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aemCgW6I0QqmmmLTHE0YSwAAAI8"]
[Thu Apr 23 10:22:59.991343 2026] [:error] [pid 42973:tid 43064] [client 91.230.225.13:60895] [client 91.230.225.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.13, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aemCg26I0QqmmmLTHE0YVwAAAJU"]
[Thu Apr 23 10:23:02.779750 2026] [:error] [pid 42973:tid 43051] [client 91.230.225.13:60895] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aemChm6I0QqmmmLTHE0YYAAAAIg"]
[Thu Apr 23 10:23:05.345469 2026] [:error] [pid 43083:tid 43093] [client 185.192.71.33:52769] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aemCiTC5hrvNXosL83IuPAAAAMg"]
[Thu Apr 23 10:23:05.893917 2026] [:error] [pid 42972:tid 43038] [client 91.230.225.20:20921] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aemCicOAb-3sOknsk4dTcwAAAFY"]
[Thu Apr 23 10:23:17.605844 2026] [:error] [pid 65000:tid 65031] [client 91.230.225.197:28635] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aemClb6vRb9j6psK2ZYvbQAAAgI"]
[Thu Apr 23 10:23:27.880161 2026] [:error] [pid 46953:tid 46965] [client 185.92.25.113:56419] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aemCn0nlpdHh-P6wKbrY_wAAAkk"]
[Thu Apr 23 10:23:28.446546 2026] [authz_core:error] [pid 42973:tid 43060] [client 91.230.225.204:36259] AH01630: client denied by server configuration: /home/hbtwocom/public_html/wp-content/plugins/akismet/views/cmd.php
[Thu Apr 23 10:23:30.215398 2026] [:error] [pid 42973:tid 43055] [client 91.230.225.204:36259] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aemCom6I0QqmmmLTHE0YmAAAAIw"]
[Thu Apr 23 10:23:46.146528 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.199:30275] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aemCsoV5EysYcTLjmwigoQAAAdQ"]
[Thu Apr 23 10:23:46.696752 2026] [:error] [pid 65000:tid 65031] [client 91.230.225.209:33321] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aemCsr6vRb9j6psK2ZYvlgAAAgI"]
[Thu Apr 23 10:23:47.242722 2026] [:error] [pid 65000:tid 65057] [client 185.192.71.37:55521] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aemCs76vRb9j6psK2ZYvlwAAAhg"]
[Thu Apr 23 10:23:47.786963 2026] [:error] [pid 65000:tid 65030] [client 185.192.71.24:28655] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aemCs76vRb9j6psK2ZYvmQAAAgE"]
[Thu Apr 23 10:23:52.330182 2026] [:error] [pid 65000:tid 65054] [client 91.230.225.205:54161] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aemCuL6vRb9j6psK2ZYvqAAAAhU"]
[Thu Apr 23 10:23:52.866931 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.28:53023] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aemCuL6vRb9j6psK2ZYvqQAAAgs"]
[Thu Apr 23 10:24:00.026755 2026] [:error] [pid 65000:tid 65037] [client 185.192.71.26:52673] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aemCwL6vRb9j6psK2ZYv2gAAAgQ"]
[Thu Apr 23 10:24:05.841880 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.206:38857] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aemCxZXyGZJFeAIDWtmucwAAAUs"]
[Thu Apr 23 10:24:06.385890 2026] [:error] [pid 64998:tid 65015] [client 91.230.225.206:52023] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aemCxoV5EysYcTLjmwigyAAAAc0"]
[Thu Apr 23 10:24:08.786368 2026] [autoindex:error] [pid 42971:tid 42995] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:11.653771 2026] [autoindex:error] [pid 42971:tid 42992] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:20.014630 2026] [autoindex:error] [pid 42971:tid 43003] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:21.621322 2026] [autoindex:error] [pid 42971:tid 42997] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:26.319928 2026] [autoindex:error] [pid 42971:tid 43004] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:26.611103 2026] [autoindex:error] [pid 42971:tid 42998] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:26.890165 2026] [autoindex:error] [pid 42971:tid 42993] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:27.186559 2026] [autoindex:error] [pid 42971:tid 43000] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:29.092212 2026] [autoindex:error] [pid 42971:tid 43010] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:29.380949 2026] [autoindex:error] [pid 42971:tid 43006] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:30.933829 2026] [autoindex:error] [pid 42971:tid 43001] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:31.209156 2026] [autoindex:error] [pid 42971:tid 42990] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:31.487508 2026] [autoindex:error] [pid 42971:tid 42988] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:32.039044 2026] [autoindex:error] [pid 42971:tid 42986] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:32.319031 2026] [autoindex:error] [pid 42971:tid 43005] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:32.592287 2026] [autoindex:error] [pid 42971:tid 42997] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:36.786855 2026] [autoindex:error] [pid 42971:tid 42999] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:37.058565 2026] [autoindex:error] [pid 42971:tid 43004] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:37.338877 2026] [autoindex:error] [pid 42971:tid 42998] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:37.611051 2026] [autoindex:error] [pid 42971:tid 42993] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:37.882216 2026] [autoindex:error] [pid 42971:tid 42987] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:38.153899 2026] [autoindex:error] [pid 42971:tid 43010] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:39.644384 2026] [autoindex:error] [pid 42971:tid 43001] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:39.920347 2026] [autoindex:error] [pid 42971:tid 43003] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:44.112307 2026] [autoindex:error] [pid 42971:tid 43008] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:46.982947 2026] [autoindex:error] [pid 42971:tid 42992] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:47.577747 2026] [autoindex:error] [pid 42971:tid 43007] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:52.205645 2026] [autoindex:error] [pid 42971:tid 42987] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:52.482216 2026] [autoindex:error] [pid 42971:tid 43010] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:56.956056 2026] [autoindex:error] [pid 42971:tid 43005] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:24:58.499405 2026] [autoindex:error] [pid 42971:tid 42991] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:00.069003 2026] [autoindex:error] [pid 42971:tid 42995] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:00.357199 2026] [autoindex:error] [pid 42971:tid 43002] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:00.652163 2026] [autoindex:error] [pid 42971:tid 43008] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:00.941733 2026] [autoindex:error] [pid 42971:tid 42994] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:01.230383 2026] [autoindex:error] [pid 42971:tid 43009] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:04.189615 2026] [autoindex:error] [pid 42971:tid 43004] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:07.174321 2026] [autoindex:error] [pid 42971:tid 43000] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:07.462265 2026] [autoindex:error] [pid 42971:tid 42996] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:12.464842 2026] [autoindex:error] [pid 42971:tid 42986] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:14.151990 2026] [autoindex:error] [pid 42971:tid 42995] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:17.723083 2026] [autoindex:error] [pid 42971:tid 42996] [client 185.192.71.38:40683] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:20.980474 2026] [autoindex:error] [pid 42971:tid 42991] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:21.265748 2026] [autoindex:error] [pid 42971:tid 42994] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:21.549640 2026] [autoindex:error] [pid 42971:tid 43009] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:21.840641 2026] [autoindex:error] [pid 42971:tid 43007] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:22.130775 2026] [autoindex:error] [pid 42971:tid 42993] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:22.619087 2026] [autoindex:error] [pid 42971:tid 42998] [client 185.192.71.38:40683] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:29.763443 2026] [autoindex:error] [pid 59700:tid 59716] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:30.053786 2026] [autoindex:error] [pid 59700:tid 59713] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:30.337944 2026] [autoindex:error] [pid 59700:tid 59726] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:30.633776 2026] [autoindex:error] [pid 59700:tid 59714] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:30.974928 2026] [autoindex:error] [pid 59700:tid 59702] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:32.795584 2026] [autoindex:error] [pid 59700:tid 59709] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:36.070661 2026] [autoindex:error] [pid 59700:tid 59706] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:37.743336 2026] [autoindex:error] [pid 59700:tid 59709] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:38.034313 2026] [autoindex:error] [pid 59700:tid 59715] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:38.322590 2026] [autoindex:error] [pid 59700:tid 59718] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:38.608927 2026] [autoindex:error] [pid 59700:tid 59710] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:38.889700 2026] [autoindex:error] [pid 59700:tid 59723] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:44.274444 2026] [autoindex:error] [pid 59700:tid 59722] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:44.566922 2026] [autoindex:error] [pid 59700:tid 59714] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:47.438448 2026] [autoindex:error] [pid 59700:tid 59711] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:47.720409 2026] [autoindex:error] [pid 59700:tid 59723] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:49.397728 2026] [autoindex:error] [pid 59700:tid 59721] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:56.456924 2026] [autoindex:error] [pid 59700:tid 59714] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:56.752181 2026] [autoindex:error] [pid 59700:tid 59725] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:57.034252 2026] [autoindex:error] [pid 59700:tid 59720] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:25:57.310461 2026] [autoindex:error] [pid 59700:tid 59717] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:03.233340 2026] [autoindex:error] [pid 59700:tid 59722] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:07.285200 2026] [autoindex:error] [pid 59700:tid 59717] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:07.566975 2026] [autoindex:error] [pid 59700:tid 59710] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:11.944402 2026] [autoindex:error] [pid 59700:tid 59719] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:18.499850 2026] [autoindex:error] [pid 59700:tid 59708] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:21.208732 2026] [autoindex:error] [pid 59700:tid 59709] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:21.531108 2026] [autoindex:error] [pid 59700:tid 59725] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:21.813841 2026] [autoindex:error] [pid 59700:tid 59717] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:23.311820 2026] [autoindex:error] [pid 59700:tid 59721] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:24.899568 2026] [autoindex:error] [pid 59700:tid 59719] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:42.448450 2026] [autoindex:error] [pid 59700:tid 59721] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:42.729115 2026] [autoindex:error] [pid 59700:tid 59724] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:45.450527 2026] [autoindex:error] [pid 59700:tid 59723] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:48.197535 2026] [autoindex:error] [pid 59700:tid 59711] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:50.959122 2026] [autoindex:error] [pid 59700:tid 59716] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:52.568281 2026] [autoindex:error] [pid 59700:tid 59708] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:52.858214 2026] [autoindex:error] [pid 59700:tid 59712] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:54.340312 2026] [autoindex:error] [pid 59700:tid 59714] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:54.647431 2026] [autoindex:error] [pid 59700:tid 59709] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:54.936481 2026] [autoindex:error] [pid 59700:tid 59725] [client 91.230.225.195:36747] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:26:59.703078 2026] [autoindex:error] [pid 46953:tid 46963] [client 91.230.225.11:40889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:27:02.493758 2026] [autoindex:error] [pid 46953:tid 46975] [client 91.230.225.11:40889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:27:11.765608 2026] [autoindex:error] [pid 46953:tid 46981] [client 91.230.225.11:40889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:27:12.093392 2026] [autoindex:error] [pid 46953:tid 46966] [client 91.230.225.11:40889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:27:13.630397 2026] [autoindex:error] [pid 46953:tid 46979] [client 91.230.225.11:40889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:27:15.270195 2026] [autoindex:error] [pid 46953:tid 46960] [client 91.230.225.11:40889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:27:19.336374 2026] [autoindex:error] [pid 46953:tid 46980] [client 91.230.225.11:40889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:27:24.470465 2026] [autoindex:error] [pid 46953:tid 46956] [client 91.230.225.11:40889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:27:31.367823 2026] [autoindex:error] [pid 46953:tid 46968] [client 91.230.225.11:40889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:27:35.934922 2026] [autoindex:error] [pid 46953:tid 46976] [client 91.230.225.11:40889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:27:36.241984 2026] [autoindex:error] [pid 46953:tid 46961] [client 91.230.225.11:40889] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 10:56:11.490381 2026] [:error] [pid 65000:tid 65056] [client 103.208.218.164:41272] [client 103.208.218.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.208.218.164, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemKS76vRb9j6psK2ZY8DQAAAhc"]
[Thu Apr 23 12:29:14.391447 2026] [:error] [pid 43083:tid 43090] [client 43.140.247.223:54988] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aemgGjC5hrvNXosL83I4OQAAAMU"]
[Thu Apr 23 13:22:22.254924 2026] [:error] [pid 65000:tid 65030] [client 212.102.61.147:34136] [client 212.102.61.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.102.61.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemsjr6vRb9j6psK2ZZ9oQAAAgE"]
[Thu Apr 23 13:22:31.800194 2026] [:error] [pid 42973:tid 43050] [client 212.102.61.147:57262] [client 212.102.61.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.102.61.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemsl26I0QqmmmLTHE1oKAAAAIc"]
[Thu Apr 23 13:22:42.098922 2026] [:error] [pid 65000:tid 65037] [client 212.102.61.147:43068] [client 212.102.61.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.102.61.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemsor6vRb9j6psK2ZZ9-QAAAgQ"]
[Thu Apr 23 13:22:52.339730 2026] [:error] [pid 42972:tid 43034] [client 212.102.61.147:53992] [client 212.102.61.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.102.61.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemsrMOAb-3sOknsk4eMggAAAFI"]
[Thu Apr 23 13:23:02.542409 2026] [:error] [pid 42973:tid 43053] [client 212.102.61.147:47088] [client 212.102.61.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.102.61.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemstm6I0QqmmmLTHE1oxwAAAIo"]
[Thu Apr 23 13:30:56.149505 2026] [:error] [pid 65000:tid 65038] [client 149.34.250.37:49678] [client 149.34.250.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.34.250.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemukL6vRb9j6psK2ZaCSQAAAgU"]
[Thu Apr 23 13:31:05.851827 2026] [:error] [pid 64998:tid 65002] [client 149.34.250.37:51980] [client 149.34.250.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.34.250.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemumYV5EysYcTLjmwjHFAAAAcA"]
[Thu Apr 23 13:31:16.088745 2026] [:error] [pid 59700:tid 59702] [client 149.34.250.37:33332] [client 149.34.250.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.34.250.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemupJXyGZJFeAIDWtnL6wAAAUA"]
[Thu Apr 23 13:31:26.327596 2026] [:error] [pid 42972:tid 43025] [client 149.34.250.37:49298] [client 149.34.250.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.34.250.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemursOAb-3sOknsk4eQmAAAAEk"]
[Thu Apr 23 13:31:36.624583 2026] [:error] [pid 59700:tid 59709] [client 149.34.250.37:57152] [client 149.34.250.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.34.250.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemuuJXyGZJFeAIDWtnMBwAAAUc"]
[Thu Apr 23 13:32:10.349360 2026] [:error] [pid 65000:tid 65038] [client 149.102.224.207:58050] [client 149.102.224.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.224.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemu2r6vRb9j6psK2ZaCaAAAAgU"]
[Thu Apr 23 13:32:17.559472 2026] [:error] [pid 42973:tid 43064] [client 149.102.224.207:55682] [client 149.102.224.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.224.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemu4W6I0QqmmmLTHE1vkQAAAJU"]
[Thu Apr 23 13:32:28.572834 2026] [:error] [pid 65000:tid 65030] [client 149.102.224.207:39802] [client 149.102.224.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.224.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemu7L6vRb9j6psK2ZaCdwAAAgE"]
[Thu Apr 23 13:32:38.175294 2026] [:error] [pid 42973:tid 43056] [client 149.102.224.207:52068] [client 149.102.224.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.224.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemu9m6I0QqmmmLTHE1vpwAAAI0"]
[Thu Apr 23 13:32:48.412839 2026] [:error] [pid 65000:tid 65029] [client 149.102.224.207:38720] [client 149.102.224.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.224.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemvAL6vRb9j6psK2ZaCiQAAAgA"]
[Thu Apr 23 13:33:39.667878 2026] [:error] [pid 42972:tid 43026] [client 146.70.183.204:40414] [client 146.70.183.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.183.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemvM8OAb-3sOknsk4eRYwAAAEo"]
[Thu Apr 23 13:33:50.688429 2026] [:error] [pid 65000:tid 65050] [client 146.70.183.204:58770] [client 146.70.183.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.183.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemvPr6vRb9j6psK2ZaCsAAAAhE"]
[Thu Apr 23 13:34:00.293590 2026] [:error] [pid 64998:tid 65021] [client 146.70.183.204:40698] [client 146.70.183.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.183.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemvSIV5EysYcTLjmwjHfgAAAdM"]
[Thu Apr 23 13:34:10.634907 2026] [:error] [pid 59700:tid 59702] [client 146.70.183.204:44254] [client 146.70.183.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.183.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemvUpXyGZJFeAIDWtnMXAAAAUA"]
[Thu Apr 23 13:34:20.910499 2026] [:error] [pid 42973:tid 43058] [client 146.70.183.204:39792] [client 146.70.183.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.183.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemvXG6I0QqmmmLTHE1wRgAAAI8"]
[Thu Apr 23 13:38:38.703967 2026] [:error] [pid 42972:tid 43038] [client 146.70.183.188:55248] [client 146.70.183.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.183.188, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemwXsOAb-3sOknsk4eSAwAAAFY"]
[Thu Apr 23 13:38:47.950805 2026] [:error] [pid 42973:tid 43055] [client 146.70.183.188:42460] [client 146.70.183.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.183.188, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemwZ26I0QqmmmLTHE1xIQAAAIw"]
[Thu Apr 23 13:38:58.310880 2026] [:error] [pid 42972:tid 43033] [client 146.70.183.188:55812] [client 146.70.183.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.183.188, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemwcsOAb-3sOknsk4eSGwAAAFE"]
[Thu Apr 23 13:39:08.634047 2026] [:error] [pid 65000:tid 65045] [client 146.70.183.188:49860] [client 146.70.183.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.183.188, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemwfL6vRb9j6psK2ZaEMwAAAgw"]
[Thu Apr 23 13:39:18.889816 2026] [:error] [pid 46953:tid 46957] [client 146.70.183.188:48228] [client 146.70.183.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.183.188, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aemwhknlpdHh-P6wKbrwuAAAAkE"]
[Thu Apr 23 13:51:18.279778 2026] [:error] [pid 65000:tid 65053] [client 145.239.69.40:40406] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aemzVr6vRb9j6psK2ZaIawAAAhQ"]
[Thu Apr 23 13:51:20.743033 2026] [:error] [pid 42971:tid 43001] [client 145.239.69.40:38338] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "aemzWDEP2_5RswrH8bH83wAAAA8"]
[Thu Apr 23 13:51:23.109852 2026] [:error] [pid 42973:tid 43062] [client 145.239.69.40:38340] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aemzW26I0QqmmmLTHE127AAAAJM"]
[Thu Apr 23 13:51:25.653378 2026] [:error] [pid 65000:tid 65040] [client 145.239.69.40:38342] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aemzXb6vRb9j6psK2ZaIegAAAgc"]
[Thu Apr 23 13:51:28.142336 2026] [:error] [pid 42972:tid 43038] [client 145.239.69.40:38354] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aemzYMOAb-3sOknsk4eVBwAAAFY"]
[Thu Apr 23 13:51:30.661259 2026] [:error] [pid 42971:tid 43006] [client 145.239.69.40:41050] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aemzYjEP2_5RswrH8bH84wAAABQ"]
[Thu Apr 23 13:51:33.026855 2026] [:error] [pid 65000:tid 65029] [client 145.239.69.40:41056] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aemzZb6vRb9j6psK2ZaIgQAAAgA"]
[Thu Apr 23 13:51:35.549578 2026] [:error] [pid 64967:tid 64970] [client 145.239.69.40:41058] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aemzZ4AV4GfOOdX8QzpLTQAAAYE"]
[Thu Apr 23 13:51:38.064200 2026] [:error] [pid 42971:tid 42994] [client 145.239.69.40:41074] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aemzajEP2_5RswrH8bH85gAAAAg"]
[Thu Apr 23 13:51:40.431552 2026] [:error] [pid 42972:tid 43024] [client 145.239.69.40:40728] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aemzbMOAb-3sOknsk4eVDAAAAEg"]
[Thu Apr 23 13:51:42.937678 2026] [:error] [pid 42971:tid 43009] [client 145.239.69.40:40742] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aemzbjEP2_5RswrH8bH86AAAABc"]
[Thu Apr 23 13:51:45.465324 2026] [:error] [pid 65000:tid 65056] [client 145.239.69.40:40750] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aemzcb6vRb9j6psK2ZaIggAAAhc"]
[Thu Apr 23 13:51:47.975621 2026] [:error] [pid 46953:tid 46974] [client 145.239.69.40:40754] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aemzc0nlpdHh-P6wKbryGAAAAlI"]
[Thu Apr 23 13:51:50.364637 2026] [:error] [pid 46953:tid 46969] [client 145.239.69.40:35020] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aemzdknlpdHh-P6wKbryHQAAAk0"]
[Thu Apr 23 13:51:52.885676 2026] [:error] [pid 42973:tid 43057] [client 145.239.69.40:35026] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aemzeG6I0QqmmmLTHE12_QAAAI4"]
[Thu Apr 23 13:51:55.389707 2026] [:error] [pid 42973:tid 43050] [client 145.239.69.40:35040] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aemze26I0QqmmmLTHE13BgAAAIc"]
[Thu Apr 23 13:51:57.897642 2026] [:error] [pid 42973:tid 43044] [client 145.239.69.40:35050] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aemzfW6I0QqmmmLTHE13CwAAAIE"]
[Thu Apr 23 13:52:00.264015 2026] [:error] [pid 42973:tid 43052] [client 145.239.69.40:54812] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aemzgG6I0QqmmmLTHE13DQAAAIk"]
[Thu Apr 23 13:52:02.750704 2026] [:error] [pid 42973:tid 43063] [client 145.239.69.40:54816] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aemzgm6I0QqmmmLTHE13EAAAAJQ"]
[Thu Apr 23 13:52:05.111182 2026] [:error] [pid 46953:tid 46965] [client 145.239.69.40:54828] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aemzhUnlpdHh-P6wKbryIAAAAkk"]
[Thu Apr 23 13:52:07.472374 2026] [:error] [pid 42972:tid 43016] [client 145.239.69.40:54830] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aemzh8OAb-3sOknsk4eVIwAAAEA"]
[Thu Apr 23 13:52:09.999310 2026] [:error] [pid 65000:tid 65056] [client 145.239.69.40:45110] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aemzib6vRb9j6psK2ZaImQAAAhc"]
[Thu Apr 23 13:52:12.505165 2026] [:error] [pid 64998:tid 65017] [client 145.239.69.40:45120] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aemzjIV5EysYcTLjmwjKnQAAAc8"]
[Thu Apr 23 13:52:14.996848 2026] [:error] [pid 42973:tid 43055] [client 145.239.69.40:45130] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aemzjm6I0QqmmmLTHE13JQAAAIw"]
[Thu Apr 23 13:52:45.668217 2026] [:error] [pid 65000:tid 65040] [client 145.239.69.40:45140] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aemzrb6vRb9j6psK2ZaIrwAAAgc"]
[Thu Apr 23 13:52:48.095931 2026] [:error] [pid 42973:tid 43047] [client 145.239.69.40:37624] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aemzsG6I0QqmmmLTHE13TgAAAIQ"]
[Thu Apr 23 13:52:50.575467 2026] [:error] [pid 64998:tid 65017] [client 145.239.69.40:57574] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aemzsoV5EysYcTLjmwjKwAAAAc8"]
[Thu Apr 23 13:52:53.073531 2026] [:error] [pid 64998:tid 65004] [client 145.239.69.40:57582] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aemztYV5EysYcTLjmwjKwgAAAcI"]
[Thu Apr 23 13:52:55.595045 2026] [:error] [pid 42973:tid 43045] [client 145.239.69.40:57592] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aemzt26I0QqmmmLTHE132gAAAII"]
[Thu Apr 23 13:52:58.083764 2026] [:error] [pid 42973:tid 43064] [client 145.239.69.40:57600] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aemzum6I0QqmmmLTHE133wAAAJU"]
[Thu Apr 23 13:53:00.572443 2026] [:error] [pid 65000:tid 65050] [client 145.239.69.40:53506] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aemzvL6vRb9j6psK2ZaIuAAAAhE"]
[Thu Apr 23 13:53:02.906252 2026] [:error] [pid 64967:tid 64977] [client 145.239.69.40:53510] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aemzvoAV4GfOOdX8QzpLbgAAAYg"]
[Thu Apr 23 13:53:05.228352 2026] [:error] [pid 42973:tid 43060] [client 145.239.69.40:53516] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aemzwW6I0QqmmmLTHE135gAAAJE"]
[Thu Apr 23 13:53:07.704370 2026] [:error] [pid 64998:tid 65011] [client 145.239.69.40:53522] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aemzw4V5EysYcTLjmwjKxwAAAck"]
[Thu Apr 23 13:53:10.025420 2026] [:error] [pid 64998:tid 65019] [client 145.239.69.40:48860] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aemzxoV5EysYcTLjmwjKzAAAAdE"]
[Thu Apr 23 13:53:12.512285 2026] [:error] [pid 25635:tid 25645] [client 145.239.69.40:48864] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aemzyMRxv6UsgRGKB3ITWQAAAQY"]
[Thu Apr 23 13:53:14.830747 2026] [:error] [pid 59700:tid 59720] [client 145.239.69.40:48880] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aemzypXyGZJFeAIDWtnOmAAAAVI"]
[Thu Apr 23 13:53:17.298200 2026] [:error] [pid 42973:tid 43057] [client 145.239.69.40:48886] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aemzzW6I0QqmmmLTHE139QAAAI4"]
[Thu Apr 23 13:53:19.777687 2026] [:error] [pid 42973:tid 43043] [client 145.239.69.40:39870] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aemzz26I0QqmmmLTHE13-wAAAIA"]
[Thu Apr 23 13:53:22.269598 2026] [:error] [pid 42972:tid 43032] [client 145.239.69.40:39872] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aemz0sOAb-3sOknsk4eVmwAAAFA"]
[Thu Apr 23 13:53:24.747590 2026] [:error] [pid 43083:tid 43108] [client 145.239.69.40:39874] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aemz1DC5hrvNXosL83JB5AAAANc"]
[Thu Apr 23 13:53:27.065738 2026] [:error] [pid 42972:tid 43019] [client 145.239.69.40:39882] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aemz18OAb-3sOknsk4eVoAAAAEM"]
[Thu Apr 23 13:53:29.523642 2026] [:error] [pid 42973:tid 43059] [client 145.239.69.40:39890] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aemz2W6I0QqmmmLTHE14BQAAAJA"]
[Thu Apr 23 13:53:31.867263 2026] [:error] [pid 42973:tid 43049] [client 145.239.69.40:48064] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aemz226I0QqmmmLTHE14BwAAAIY"]
[Thu Apr 23 13:53:34.338317 2026] [:error] [pid 46953:tid 46959] [client 145.239.69.40:48080] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aemz3knlpdHh-P6wKbryRQAAAkM"]
[Thu Apr 23 13:53:36.674643 2026] [:error] [pid 64998:tid 65014] [client 145.239.69.40:48090] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aemz4IV5EysYcTLjmwjKzwAAAcw"]
[Thu Apr 23 13:53:39.187055 2026] [:error] [pid 42971:tid 42994] [client 145.239.69.40:48102] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aemz4zEP2_5RswrH8bH8_QAAAAg"]
[Thu Apr 23 13:53:41.666421 2026] [:error] [pid 65000:tid 65043] [client 145.239.69.40:51804] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aemz5b6vRb9j6psK2ZaI0QAAAgo"]
[Thu Apr 23 13:54:12.198187 2026] [:error] [pid 65000:tid 65031] [client 145.239.69.40:51816] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aem0BL6vRb9j6psK2ZaI8AAAAgI"]
[Thu Apr 23 13:54:14.645095 2026] [:error] [pid 42973:tid 43044] [client 145.239.69.40:43208] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aem0Bm6I0QqmmmLTHE14QgAAAIE"]
[Thu Apr 23 13:54:17.161336 2026] [:error] [pid 42973:tid 43064] [client 145.239.69.40:43210] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aem0CW6I0QqmmmLTHE14RwAAAJU"]
[Thu Apr 23 13:54:19.683074 2026] [:error] [pid 42973:tid 43046] [client 145.239.69.40:43216] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aem0C26I0QqmmmLTHE14TAAAAIM"]
[Thu Apr 23 13:54:22.136612 2026] [:error] [pid 65000:tid 65037] [client 145.239.69.40:53002] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aem0Dr6vRb9j6psK2ZaI8wAAAgQ"]
[Thu Apr 23 13:54:24.435399 2026] [:error] [pid 42972:tid 43040] [client 145.239.69.40:53014] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aem0EMOAb-3sOknsk4eV5AAAAFg"]
[Thu Apr 23 13:54:26.741133 2026] [:error] [pid 64998:tid 65016] [client 145.239.69.40:53016] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aem0EoV5EysYcTLjmwjLCAAAAc4"]
[Thu Apr 23 13:54:29.045206 2026] [:error] [pid 46953:tid 46965] [client 145.239.69.40:53020] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aem0FUnlpdHh-P6wKbryTQAAAkk"]
[Thu Apr 23 13:54:31.358817 2026] [:error] [pid 42973:tid 43049] [client 145.239.69.40:40944] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aem0F26I0QqmmmLTHE14aAAAAIY"]
[Thu Apr 23 13:54:33.813667 2026] [:error] [pid 64998:tid 65010] [client 145.239.69.40:40960] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aem0GYV5EysYcTLjmwjLDQAAAcg"]
[Thu Apr 23 13:54:36.268847 2026] [:error] [pid 42973:tid 43051] [client 145.239.69.40:40968] [client 145.239.69.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aem0HG6I0QqmmmLTHE14dQAAAIg"]
[Thu Apr 23 14:11:56.884666 2026] [:error] [pid 65000:tid 65047] [client 43.131.36.84:44556] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aem4LL6vRb9j6psK2ZaP2wAAAg4"]
[Thu Apr 23 14:27:23.855816 2026] [:error] [pid 42973:tid 43045] [client 202.141.52.126:8816] [client 202.141.52.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.52.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aem7y26I0QqmmmLTHE2LzgAAAII"]
[Thu Apr 23 14:27:34.445094 2026] [:error] [pid 42972:tid 43016] [client 202.141.52.126:8744] [client 202.141.52.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.52.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aem71sOAb-3sOknsk4eeygAAAEA"]
[Thu Apr 23 14:27:44.985494 2026] [:error] [pid 46953:tid 46981] [client 202.141.52.126:8939] [client 202.141.52.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.52.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aem74EnlpdHh-P6wKbr3VwAAAlg"]
[Thu Apr 23 14:27:56.516579 2026] [:error] [pid 42972:tid 43039] [client 202.141.52.126:8763] [client 202.141.52.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.52.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aem77MOAb-3sOknsk4ee3AAAAFc"]
[Thu Apr 23 14:28:06.806211 2026] [:error] [pid 42971:tid 42994] [client 202.141.52.126:8945] [client 202.141.52.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.52.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aem79jEP2_5RswrH8bEAWQAAAAg"]
[Thu Apr 23 14:28:17.410834 2026] [:error] [pid 43083:tid 43104] [client 202.141.52.126:8796] [client 202.141.52.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.52.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aem8ATC5hrvNXosL83JF8wAAANM"]
[Thu Apr 23 17:50:53.748105 2026] [:error] [pid 42973:tid 43043] [client 45.179.239.40:49961] [client 45.179.239.40] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aenrfW6I0QqmmmLTHE3eQQAAAIA"]
[Thu Apr 23 17:50:53.748108 2026] [:error] [pid 64998:tid 65015] [client 45.179.239.40:49960] [client 45.179.239.40] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aenrfYV5EysYcTLjmwgQugAAAc0"]
[Thu Apr 23 17:51:24.979733 2026] [:error] [pid 59700:tid 59711] [client 45.179.239.40:50585] [client 45.179.239.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.179.239.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aenrnJXyGZJFeAIDWtn6dgAAAUk"]
[Thu Apr 23 17:51:25.380398 2026] [:error] [pid 65000:tid 65056] [client 45.179.239.40:50593] [client 45.179.239.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.179.239.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aenrnb6vRb9j6psK2ZbySQAAAhc"]
[Thu Apr 23 20:31:40.563884 2026] [:error] [pid 64998:tid 65005] [client 43.157.98.187:46134] [client 43.157.98.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeoRLIV5EysYcTLjmwheDAAAAcM"]
[Thu Apr 23 20:38:39.972994 2026] [:error] [pid 65000:tid 65029] [client 178.86.234.106:55059] [client 178.86.234.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.86.234.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeoSz76vRb9j6psK2ZZiUAAAAgA"]
[Thu Apr 23 20:41:26.917046 2026] [:error] [pid 42972:tid 43030] [client 178.86.234.106:62708] [client 178.86.234.106] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeoTdsOAb-3sOknsk4cpdQAAAE4"]
[Thu Apr 23 23:34:12.702655 2026] [:error] [pid 59700:tid 59709] [client 54.37.252.152:35632] [client 54.37.252.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aeo79JXyGZJFeAIDWtlErQAAAUc"]
[Thu Apr 23 23:49:41.360716 2026] [autoindex:error] [pid 46953:tid 46960] [client 216.24.210.97:53151] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 23:49:49.630288 2026] [autoindex:error] [pid 46953:tid 46975] [client 216.24.210.97:53151] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 24 00:03:48.232172 2026] [:error] [pid 43083:tid 43089] [client 202.158.244.153:48618] [client 202.158.244.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.158.244.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aepC5DC5hrvNXosL83KViAAAAMQ"]
[Fri Apr 24 00:03:49.147772 2026] [proxy_fcgi:error] [pid 43083:tid 43089] [client 202.158.244.153:48618] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "params" in /home/hbtwocom/public_html/wp-includes/IXR/class-IXR-server.php on line 203; PHP message: PHP Fatal error:  Uncaught TypeError: count(): Argument #1 ($value) must be of type Countable|array, null given in /home/hbtwocom/public_html/wp-includes/IXR/class-IXR-server.php:95\nStack trace:\n#0 /home/hbtwocom/public_html/wp-includes/IXR/class-IXR-server.php(207): IXR_Server->call()\n#1 /home/hbtwocom/public_html/wp-includes/IXR/class-IXR-server.php(109): IXR_Server->multiCall()\n#2 /home/hbtwocom/public_html/wp-includes/IXR/class-IXR-server.php(59): IXR_Server->call()\n#3 /home/hbtwocom/public_html/wp-includes/IXR/class-IXR-server.php(27): IXR_Server->serve()\n#4 /home/hbtwocom/public_html/wp-includes/IXR/class-IXR-server.php(35): IXR_Server->__construct()\n#5 /home/hbtwocom/public_html/wp-includes/class-wp-xmlrpc-server.php(246): IXR_Server->IXR_Server()\n#6 /home/hbtwocom/public_html/xmlrpc.php(85): wp_xmlrpc_server->serve_request()\n#7 {main}\n  thrown in /home/hbtwocom/public_html/wp-includes/IXR/class-IXR-server.php on line 95'
[Fri Apr 24 00:06:57.511389 2026] [:error] [pid 64998:tid 65020] [client 207.148.64.111:58634] [client 207.148.64.111] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aepDoYV5EysYcTLjmwjk2AAAAdI"]
[Fri Apr 24 00:35:03.520784 2026] [:error] [pid 42973:tid 43060] [client 195.230.109.208:50373] [client 195.230.109.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.230.109.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aepKN26I0QqmmmLTHE1kEAAAAJE"]
[Fri Apr 24 00:35:13.447976 2026] [:error] [pid 65000:tid 65031] [client 195.230.109.208:50645] [client 195.230.109.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.230.109.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aepKQb6vRb9j6psK2ZYpVAAAAgI"]
[Fri Apr 24 00:35:27.634915 2026] [:error] [pid 42972:tid 43039] [client 195.230.109.208:50849] [client 195.230.109.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.230.109.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aepKT8OAb-3sOknsk4eZmQAAAFc"]
[Fri Apr 24 00:35:35.513903 2026] [:error] [pid 42972:tid 43023] [client 195.230.109.208:51062] [client 195.230.109.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.230.109.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aepKV8OAb-3sOknsk4eZsQAAAEc"]
[Fri Apr 24 00:35:48.204319 2026] [:error] [pid 64998:tid 65021] [client 195.230.109.208:51279] [client 195.230.109.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.230.109.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aepKZIV5EysYcTLjmwj5LQAAAdM"]
[Fri Apr 24 02:22:07.477079 2026] [:error] [pid 64967:tid 64979] [client 182.44.67.97:34382] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aepjT4AV4GfOOdX8QzqccgAAAYo"]
[Fri Apr 24 03:25:51.420304 2026] [:error] [pid 43083:tid 43101] [client 158.158.109.204:62751] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wziar1.php"] [unique_id "aepyPzC5hrvNXosL83K7mwAAANA"]
[Fri Apr 24 03:25:52.103268 2026] [:error] [pid 42972:tid 43016] [client 158.158.109.204:44196] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wziar1.php"] [unique_id "aepyQMOAb-3sOknsk4fkdwAAAEA"]
[Fri Apr 24 03:25:52.670046 2026] [:error] [pid 65000:tid 65040] [client 158.158.109.204:46174] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wziar1.php"] [unique_id "aepyQL6vRb9j6psK2Za5kAAAAgc"]
[Fri Apr 24 03:25:53.249118 2026] [:error] [pid 42972:tid 43023] [client 158.158.109.204:55539] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wziar1.php"] [unique_id "aepyQcOAb-3sOknsk4fkegAAAEc"]
[Fri Apr 24 03:25:53.863849 2026] [:error] [pid 64998:tid 65007] [client 158.158.109.204:58465] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepyQYV5EysYcTLjmwhg6gAAAcU"]
[Fri Apr 24 03:25:54.534214 2026] [:error] [pid 65000:tid 65031] [client 158.158.109.204:49317] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepyQr6vRb9j6psK2Za5mQAAAgI"]
[Fri Apr 24 03:25:55.389488 2026] [:error] [pid 65000:tid 65053] [client 158.158.109.204:55498] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepyQ76vRb9j6psK2Za5ogAAAhQ"]
[Fri Apr 24 03:25:56.825665 2026] [:error] [pid 42971:tid 42992] [client 158.158.109.204:53082] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepyRDEP2_5RswrH8bFc5QAAAAY"]
[Fri Apr 24 03:25:57.796671 2026] [:error] [pid 42972:tid 43035] [client 158.158.109.204:46420] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "aepyRcOAb-3sOknsk4fkggAAAFM"]
[Fri Apr 24 03:25:59.362334 2026] [:error] [pid 64967:tid 64980] [client 158.158.109.204:44178] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "aepyR4AV4GfOOdX8QzqlGwAAAYs"]
[Fri Apr 24 03:26:00.393042 2026] [:error] [pid 64998:tid 65015] [client 158.158.109.204:46965] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "aepySIV5EysYcTLjmwhg9AAAAc0"]
[Fri Apr 24 03:26:01.073079 2026] [:error] [pid 64998:tid 65009] [client 158.158.109.204:19449] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7logs.php"] [unique_id "aepySYV5EysYcTLjmwhg-QAAAcc"]
[Fri Apr 24 03:26:01.642616 2026] [:error] [pid 25635:tid 25650] [client 158.158.109.204:46935] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepyScRxv6UsgRGKB3JaHAAAAQs"]
[Fri Apr 24 03:26:02.475419 2026] [:error] [pid 42971:tid 43009] [client 158.158.109.204:49325] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepySjEP2_5RswrH8bFc9AAAABc"]
[Fri Apr 24 03:26:03.177682 2026] [:error] [pid 25635:tid 25660] [client 158.158.109.204:56774] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepyS8Rxv6UsgRGKB3JaHgAAARU"]
[Fri Apr 24 03:26:03.975097 2026] [:error] [pid 42971:tid 43002] [client 158.158.109.204:19276] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepySzEP2_5RswrH8bFc9wAAABA"]
[Fri Apr 24 03:26:04.481316 2026] [:error] [pid 42972:tid 43030] [client 158.158.109.204:19277] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aepyTMOAb-3sOknsk4fkjAAAAE4"]
[Fri Apr 24 03:26:05.032392 2026] [:error] [pid 64967:tid 64978] [client 158.158.109.204:62024] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aepyTYAV4GfOOdX8QzqlHgAAAYk"]
[Fri Apr 24 03:26:05.771061 2026] [:error] [pid 64998:tid 65025] [client 158.158.109.204:19303] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aepyTYV5EysYcTLjmwhhAwAAAdc"]
[Fri Apr 24 03:26:06.404298 2026] [:error] [pid 42972:tid 43039] [client 158.158.109.204:50971] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "aepyTsOAb-3sOknsk4fkjwAAAFc"]
[Fri Apr 24 03:26:07.061881 2026] [:error] [pid 59700:tid 59705] [client 158.158.109.204:47366] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctex1.php"] [unique_id "aepyT5XyGZJFeAIDWtmLnAAAAUM"]
[Fri Apr 24 03:26:07.759472 2026] [:error] [pid 64998:tid 65017] [client 158.158.109.204:62078] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctex1.php"] [unique_id "aepyT4V5EysYcTLjmwhhDwAAAc8"]
[Fri Apr 24 03:26:08.615728 2026] [:error] [pid 64998:tid 65010] [client 158.158.109.204:45207] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctex1.php"] [unique_id "aepyUIV5EysYcTLjmwhhEQAAAcg"]
[Fri Apr 24 03:26:09.338717 2026] [:error] [pid 42972:tid 43032] [client 158.158.109.204:19284] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ctex1.php"] [unique_id "aepyUcOAb-3sOknsk4fklQAAAFA"]
[Fri Apr 24 03:26:10.020764 2026] [:error] [pid 42972:tid 43020] [client 158.158.109.204:45722] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aepyUsOAb-3sOknsk4fklgAAAEQ"]
[Fri Apr 24 03:26:10.748213 2026] [:error] [pid 43083:tid 43099] [client 158.158.109.204:52309] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aepyUjC5hrvNXosL83K7pgAAAM4"]
[Fri Apr 24 03:26:12.599451 2026] [:error] [pid 43083:tid 43108] [client 158.158.109.204:44225] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aepyVDC5hrvNXosL83K7qAAAANc"]
[Fri Apr 24 03:26:13.833932 2026] [:error] [pid 25635:tid 25644] [client 158.158.109.204:11379] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lb.php"] [unique_id "aepyVcRxv6UsgRGKB3JaIwAAAQU"]
[Fri Apr 24 03:26:15.553985 2026] [:error] [pid 64998:tid 65004] [client 158.158.109.204:50503] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aepyV4V5EysYcTLjmwhhFgAAAcI"]
[Fri Apr 24 03:26:17.478946 2026] [:error] [pid 43083:tid 43089] [client 158.158.109.204:44233] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aepyWTC5hrvNXosL83K7twAAAMQ"]
[Fri Apr 24 03:26:18.395543 2026] [:error] [pid 64998:tid 65022] [client 158.158.109.204:11275] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aepyWoV5EysYcTLjmwhhIgAAAdQ"]
[Fri Apr 24 03:26:19.111347 2026] [:error] [pid 59700:tid 59715] [client 158.158.109.204:49585] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aepyW5XyGZJFeAIDWtmLrwAAAU0"]
[Fri Apr 24 03:26:19.793737 2026] [:error] [pid 59700:tid 59717] [client 158.158.109.204:50100] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "aepyW5XyGZJFeAIDWtmLuAAAAU8"]
[Fri Apr 24 03:26:21.085876 2026] [:error] [pid 43083:tid 43095] [client 158.158.109.204:63316] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "aepyXTC5hrvNXosL83K7wQAAAMo"]
[Fri Apr 24 03:26:22.151169 2026] [:error] [pid 64998:tid 65017] [client 158.158.109.204:50054] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "aepyXoV5EysYcTLjmwhhJQAAAc8"]
[Fri Apr 24 03:26:22.702675 2026] [:error] [pid 43083:tid 43087] [client 158.158.109.204:53566] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "aepyXjC5hrvNXosL83K7ygAAAMI"]
[Fri Apr 24 03:26:23.423086 2026] [:error] [pid 59700:tid 59715] [client 158.158.109.204:11318] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aepyX5XyGZJFeAIDWtmLwgAAAU0"]
[Fri Apr 24 03:26:24.089672 2026] [:error] [pid 59700:tid 59719] [client 158.158.109.204:63335] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aepyYJXyGZJFeAIDWtmLxAAAAVE"]
[Fri Apr 24 03:26:24.643849 2026] [:error] [pid 42972:tid 43024] [client 158.158.109.204:49538] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aepyYMOAb-3sOknsk4fknAAAAEg"]
[Fri Apr 24 03:26:25.635044 2026] [:error] [pid 42972:tid 43027] [client 158.158.109.204:53550] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aepyYcOAb-3sOknsk4fkogAAAEs"]
[Fri Apr 24 03:26:26.589314 2026] [:error] [pid 42973:tid 43066] [client 158.158.109.204:11318] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/auth.php"] [unique_id "aepyYm6I0QqmmmLTHE2bzgAAAJc"]
[Fri Apr 24 03:26:27.310019 2026] [:error] [pid 42973:tid 43064] [client 158.158.109.204:11282] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/auth.php"] [unique_id "aepyY26I0QqmmmLTHE2b0gAAAJU"]
[Fri Apr 24 03:26:28.308772 2026] [:error] [pid 65000:tid 65039] [client 158.158.109.204:51331] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/auth.php"] [unique_id "aepyZL6vRb9j6psK2Za5ugAAAgY"]
[Fri Apr 24 03:26:29.568930 2026] [:error] [pid 25635:tid 25649] [client 158.158.109.204:52365] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/auth.php"] [unique_id "aepyZcRxv6UsgRGKB3JaPwAAAQo"]
[Fri Apr 24 03:26:30.515216 2026] [:error] [pid 65000:tid 65057] [client 158.158.109.204:45263] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aepyZr6vRb9j6psK2Za5xgAAAhg"]
[Fri Apr 24 03:26:31.537412 2026] [:error] [pid 42971:tid 42989] [client 158.158.109.204:56177] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aepyZzEP2_5RswrH8bFc_gAAAAM"]
[Fri Apr 24 03:26:32.587323 2026] [:error] [pid 42971:tid 42999] [client 158.158.109.204:52411] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aepyaDEP2_5RswrH8bFc_wAAAA0"]
[Fri Apr 24 03:26:33.296969 2026] [:error] [pid 42973:tid 43065] [client 158.158.109.204:52371] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aepyaW6I0QqmmmLTHE2b1QAAAJY"]
[Fri Apr 24 03:26:34.011340 2026] [:error] [pid 65000:tid 65039] [client 158.158.109.204:52600] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aepyar6vRb9j6psK2Za5zAAAAgY"]
[Fri Apr 24 03:26:34.673196 2026] [:error] [pid 65000:tid 65030] [client 158.158.109.204:52561] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aepyar6vRb9j6psK2Za50AAAAgE"]
[Fri Apr 24 03:26:35.335546 2026] [:error] [pid 65000:tid 65050] [client 158.158.109.204:56155] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aepya76vRb9j6psK2Za50wAAAhE"]
[Fri Apr 24 03:26:35.957179 2026] [:error] [pid 43083:tid 43089] [client 158.158.109.204:49266] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aepyazC5hrvNXosL83K73wAAAMQ"]
[Fri Apr 24 03:26:36.496038 2026] [:error] [pid 65000:tid 65038] [client 158.158.109.204:50043] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "aepybL6vRb9j6psK2Za52gAAAgU"]
[Fri Apr 24 03:26:37.130150 2026] [:error] [pid 25635:tid 25658] [client 158.158.109.204:51356] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "aepybcRxv6UsgRGKB3JaRwAAARM"]
[Fri Apr 24 03:26:37.712639 2026] [:error] [pid 42972:tid 43040] [client 158.158.109.204:56134] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "aepybcOAb-3sOknsk4fkswAAAFg"]
[Fri Apr 24 03:26:38.303816 2026] [:error] [pid 42972:tid 43030] [client 158.158.109.204:61422] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-png.php"] [unique_id "aepybsOAb-3sOknsk4fkuAAAAE4"]
[Fri Apr 24 03:26:39.032306 2026] [:error] [pid 42972:tid 43017] [client 158.158.109.204:50041] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aepyb8OAb-3sOknsk4fkvgAAAEE"]
[Fri Apr 24 03:26:39.645669 2026] [:error] [pid 25635:tid 25652] [client 158.158.109.204:49984] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aepyb8Rxv6UsgRGKB3JaSQAAAQ0"]
[Fri Apr 24 03:26:40.225334 2026] [:error] [pid 42971:tid 42994] [client 158.158.109.204:63357] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aepycDEP2_5RswrH8bFdAwAAAAg"]
[Fri Apr 24 03:26:41.060580 2026] [:error] [pid 64967:tid 64983] [client 158.158.109.204:50042] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "aepycYAV4GfOOdX8QzqlJAAAAY4"]
[Fri Apr 24 03:26:41.718539 2026] [:error] [pid 64998:tid 65006] [client 158.158.109.204:52395] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aepycYV5EysYcTLjmwhhLwAAAcQ"]
[Fri Apr 24 03:26:42.340344 2026] [:error] [pid 65000:tid 65042] [client 158.158.109.204:52601] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aepycr6vRb9j6psK2Za57AAAAgk"]
[Fri Apr 24 03:26:43.015906 2026] [:error] [pid 65000:tid 65038] [client 158.158.109.204:62107] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aepyc76vRb9j6psK2Za58gAAAgU"]
[Fri Apr 24 03:26:43.672221 2026] [:error] [pid 59700:tid 59726] [client 158.158.109.204:52357] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "aepyc5XyGZJFeAIDWtmL1gAAAVg"]
[Fri Apr 24 03:26:44.908065 2026] [:error] [pid 46953:tid 46962] [client 158.158.109.204:62096] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aepydEnlpdHh-P6wKbqLIAAAAkY"]
[Fri Apr 24 03:26:45.993077 2026] [:error] [pid 65000:tid 65044] [client 158.158.109.204:50046] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aepydb6vRb9j6psK2Za6BAAAAgs"]
[Fri Apr 24 03:26:47.111530 2026] [:error] [pid 59700:tid 59712] [client 158.158.109.204:62126] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aepyd5XyGZJFeAIDWtmL2wAAAUo"]
[Fri Apr 24 03:26:47.829552 2026] [:error] [pid 64998:tid 65009] [client 158.158.109.204:61379] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aepyd4V5EysYcTLjmwhhNQAAAcc"]
[Fri Apr 24 03:26:48.518049 2026] [:error] [pid 65000:tid 65045] [client 158.158.109.204:47349] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfil.php"] [unique_id "aepyeL6vRb9j6psK2Za6EQAAAgw"]
[Fri Apr 24 03:26:49.056625 2026] [:error] [pid 46953:tid 46958] [client 158.158.109.204:52554] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfil.php"] [unique_id "aepyeUnlpdHh-P6wKbqLJAAAAkI"]
[Fri Apr 24 03:26:49.596468 2026] [:error] [pid 25635:tid 25649] [client 158.158.109.204:49230] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bfil.php"] [unique_id "aepyecRxv6UsgRGKB3JaSwAAAQo"]
[Fri Apr 24 03:27:03.928084 2026] [:error] [pid 65000:tid 65044] [client 158.158.109.204:49992] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aepyh76vRb9j6psK2Za6WAAAAgs"]
[Fri Apr 24 03:27:04.575860 2026] [:error] [pid 42971:tid 43007] [client 158.158.109.204:61417] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aepyiDEP2_5RswrH8bFdEwAAABU"]
[Fri Apr 24 03:27:05.488726 2026] [:error] [pid 42973:tid 43066] [client 158.158.109.204:61391] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aepyiW6I0QqmmmLTHE2b4gAAAJc"]
[Fri Apr 24 03:27:06.233368 2026] [:error] [pid 64998:tid 65023] [client 158.158.109.204:62141] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "aepyioV5EysYcTLjmwhhSwAAAdU"]
[Fri Apr 24 03:27:07.241480 2026] [:error] [pid 64998:tid 65011] [client 158.158.109.204:50577] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aepyi4V5EysYcTLjmwhhUgAAAck"]
[Fri Apr 24 03:27:08.453474 2026] [:error] [pid 64998:tid 65019] [client 158.158.109.204:52552] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aepyjIV5EysYcTLjmwhhWAAAAdE"]
[Fri Apr 24 03:27:09.538104 2026] [:error] [pid 65000:tid 65050] [client 158.158.109.204:49234] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aepyjb6vRb9j6psK2Za6ZwAAAhE"]
[Fri Apr 24 03:27:10.034745 2026] [:error] [pid 64998:tid 65024] [client 158.158.109.204:49248] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gptsh.php"] [unique_id "aepyjoV5EysYcTLjmwhhXgAAAdY"]
[Fri Apr 24 03:27:10.761369 2026] [:error] [pid 46953:tid 46970] [client 158.158.109.204:62105] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aepyjknlpdHh-P6wKbqLOgAAAk4"]
[Fri Apr 24 03:27:11.526757 2026] [:error] [pid 64998:tid 65004] [client 158.158.109.204:44808] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aepyj4V5EysYcTLjmwhhYgAAAcI"]
[Fri Apr 24 03:27:13.017608 2026] [:error] [pid 42972:tid 43037] [client 158.158.109.204:52560] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aepykcOAb-3sOknsk4fkywAAAFU"]
[Fri Apr 24 03:27:14.125583 2026] [:error] [pid 64998:tid 65016] [client 158.158.109.204:47327] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/0x.php"] [unique_id "aepykoV5EysYcTLjmwhhaAAAAc4"]
[Fri Apr 24 03:27:15.354444 2026] [:error] [pid 65000:tid 65048] [client 158.158.109.204:50591] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aepyk76vRb9j6psK2Za6bQAAAg8"]
[Fri Apr 24 03:27:16.216424 2026] [:error] [pid 43083:tid 43086] [client 158.158.109.204:62138] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aepylDC5hrvNXosL83K77gAAAME"]
[Fri Apr 24 03:27:17.066174 2026] [:error] [pid 65000:tid 65051] [client 158.158.109.204:50560] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aepylb6vRb9j6psK2Za6cAAAAhI"]
[Fri Apr 24 03:27:18.439571 2026] [:error] [pid 42972:tid 43039] [client 158.158.109.204:52570] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aepylsOAb-3sOknsk4fk1wAAAFc"]
[Fri Apr 24 03:27:19.199809 2026] [:error] [pid 42972:tid 43020] [client 158.158.109.204:62095] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aepyl8OAb-3sOknsk4fk3AAAAEQ"]
[Fri Apr 24 03:27:19.867144 2026] [:error] [pid 65000:tid 65031] [client 158.158.109.204:52602] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aepyl76vRb9j6psK2Za6dAAAAgI"]
[Fri Apr 24 03:27:20.631108 2026] [:error] [pid 65000:tid 65041] [client 158.158.109.204:57427] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aepymL6vRb9j6psK2Za6dwAAAgg"]
[Fri Apr 24 03:27:21.345108 2026] [:error] [pid 42972:tid 43026] [client 158.158.109.204:62087] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "aepymcOAb-3sOknsk4fk4QAAAEo"]
[Fri Apr 24 03:27:22.796722 2026] [:error] [pid 64998:tid 65003] [client 158.158.109.204:44817] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aepymoV5EysYcTLjmwhhegAAAcE"]
[Fri Apr 24 03:27:24.758274 2026] [:error] [pid 42972:tid 43040] [client 158.158.109.204:62111] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aepynMOAb-3sOknsk4fk5AAAAFg"]
[Fri Apr 24 03:27:26.929823 2026] [:error] [pid 64998:tid 65008] [client 158.158.109.204:47353] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aepynoV5EysYcTLjmwhhfgAAAcY"]
[Fri Apr 24 03:27:28.922911 2026] [:error] [pid 59700:tid 59716] [client 158.158.109.204:50027] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "aepyoJXyGZJFeAIDWtmMDAAAAU4"]
[Fri Apr 24 03:27:30.014030 2026] [:error] [pid 64967:tid 64969] [client 158.158.109.204:50011] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/koiy.php"] [unique_id "aepyooAV4GfOOdX8QzqlNAAAAYA"]
[Fri Apr 24 03:27:30.548714 2026] [:error] [pid 65000:tid 65056] [client 158.158.109.204:61429] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/koiy.php"] [unique_id "aepyor6vRb9j6psK2Za6igAAAhc"]
[Fri Apr 24 03:27:31.038610 2026] [:error] [pid 25635:tid 25643] [client 158.158.109.204:57456] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/koiy.php"] [unique_id "aepyo8Rxv6UsgRGKB3JabQAAAQQ"]
[Fri Apr 24 03:27:31.633629 2026] [:error] [pid 64998:tid 65006] [client 158.158.109.204:47331] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/koiy.php"] [unique_id "aepyo4V5EysYcTLjmwhhhgAAAcQ"]
[Fri Apr 24 03:27:32.413442 2026] [:error] [pid 64998:tid 65003] [client 158.158.109.204:50574] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "aepypIV5EysYcTLjmwhhiwAAAcE"]
[Fri Apr 24 03:27:33.026341 2026] [:error] [pid 42971:tid 42987] [client 158.158.109.204:10888] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "aepypTEP2_5RswrH8bFdHwAAAAE"]
[Fri Apr 24 03:27:33.585766 2026] [:error] [pid 42972:tid 43021] [client 158.158.109.204:47305] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "aepypcOAb-3sOknsk4fk9gAAAEU"]
[Fri Apr 24 03:27:34.187447 2026] [:error] [pid 42972:tid 43023] [client 158.158.109.204:49251] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "aepypsOAb-3sOknsk4fk-AAAAEc"]
[Fri Apr 24 03:27:35.363433 2026] [:error] [pid 64998:tid 65025] [client 158.158.109.204:49254] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aepyp4V5EysYcTLjmwhhkAAAAdc"]
[Fri Apr 24 03:27:36.124060 2026] [:error] [pid 64967:tid 64982] [client 158.158.109.204:61388] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aepyqIAV4GfOOdX8QzqlNgAAAY0"]
[Fri Apr 24 03:27:36.720342 2026] [:error] [pid 42971:tid 42989] [client 158.158.109.204:52551] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aepyqDEP2_5RswrH8bFdJAAAAAM"]
[Fri Apr 24 03:27:37.246778 2026] [:error] [pid 65000:tid 65039] [client 158.158.109.204:49278] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "aepyqb6vRb9j6psK2Za6lAAAAgY"]
[Fri Apr 24 03:27:37.773203 2026] [:error] [pid 64998:tid 65003] [client 158.158.109.204:62121] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa.php7"] [unique_id "aepyqYV5EysYcTLjmwhhlgAAAcE"]
[Fri Apr 24 03:27:38.360824 2026] [:error] [pid 46953:tid 46963] [client 158.158.109.204:52556] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa.php7"] [unique_id "aepyqknlpdHh-P6wKbqLSgAAAkc"]
[Fri Apr 24 03:27:38.884700 2026] [:error] [pid 42973:tid 43050] [client 158.158.109.204:47354] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa.php7"] [unique_id "aepyqm6I0QqmmmLTHE2cBgAAAIc"]
[Fri Apr 24 03:27:39.401609 2026] [:error] [pid 42972:tid 43027] [client 158.158.109.204:57463] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa.php7"] [unique_id "aepyq8OAb-3sOknsk4flAgAAAEs"]
[Fri Apr 24 03:27:40.036452 2026] [:error] [pid 42972:tid 43029] [client 158.158.109.204:47308] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "aepyrMOAb-3sOknsk4flBgAAAE0"]
[Fri Apr 24 03:27:40.554280 2026] [:error] [pid 42972:tid 43023] [client 158.158.109.204:57409] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "aepyrMOAb-3sOknsk4flCgAAAEc"]
[Fri Apr 24 03:27:41.150150 2026] [:error] [pid 64967:tid 64988] [client 158.158.109.204:50582] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "aepyrYAV4GfOOdX8QzqlOQAAAZM"]
[Fri Apr 24 03:27:41.752528 2026] [:error] [pid 65000:tid 65057] [client 158.158.109.204:10933] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "aepyrb6vRb9j6psK2Za6mQAAAhg"]
[Fri Apr 24 03:27:42.251223 2026] [:error] [pid 42972:tid 43029] [client 158.158.109.204:51336] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aepyrsOAb-3sOknsk4flFAAAAE0"]
[Fri Apr 24 03:27:42.833903 2026] [:error] [pid 42973:tid 43045] [client 158.158.109.204:44862] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aepyrm6I0QqmmmLTHE2cCQAAAII"]
[Fri Apr 24 03:27:43.441108 2026] [:error] [pid 65000:tid 65043] [client 158.158.109.204:47344] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aepyr76vRb9j6psK2Za6nAAAAgo"]
[Fri Apr 24 03:27:44.038522 2026] [:error] [pid 65000:tid 65053] [client 158.158.109.204:10892] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp9.php"] [unique_id "aepysL6vRb9j6psK2Za6oAAAAhQ"]
[Fri Apr 24 03:27:44.550575 2026] [:error] [pid 64998:tid 65016] [client 158.158.109.204:44828] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aepysIV5EysYcTLjmwhhqAAAAc4"]
[Fri Apr 24 03:27:45.066053 2026] [:error] [pid 65000:tid 65052] [client 158.158.109.204:47333] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aepysb6vRb9j6psK2Za6pgAAAhM"]
[Fri Apr 24 03:27:45.642056 2026] [:error] [pid 65000:tid 65056] [client 158.158.109.204:52599] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aepysb6vRb9j6psK2Za6pwAAAhc"]
[Fri Apr 24 03:27:46.133214 2026] [:error] [pid 65000:tid 65049] [client 158.158.109.204:49265] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aepysr6vRb9j6psK2Za6qgAAAhA"]
[Fri Apr 24 03:27:46.920899 2026] [:error] [pid 64998:tid 65014] [client 158.158.109.204:47333] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aepysoV5EysYcTLjmwhhrgAAAcw"]
[Fri Apr 24 03:27:47.466515 2026] [:error] [pid 64998:tid 65023] [client 158.158.109.204:47300] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aepys4V5EysYcTLjmwhhsgAAAdU"]
[Fri Apr 24 03:27:47.976618 2026] [:error] [pid 43083:tid 43104] [client 158.158.109.204:44823] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aepyszC5hrvNXosL83K8CAAAANM"]
[Fri Apr 24 03:27:48.497008 2026] [:error] [pid 59700:tid 59723] [client 158.158.109.204:49231] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp5.php"] [unique_id "aepytJXyGZJFeAIDWtmMGQAAAVU"]
[Fri Apr 24 03:27:49.049118 2026] [:error] [pid 59700:tid 59726] [client 158.158.109.204:52553] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aepytZXyGZJFeAIDWtmMHQAAAVg"]
[Fri Apr 24 03:27:49.702373 2026] [:error] [pid 65000:tid 65039] [client 158.158.109.204:44848] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aepytb6vRb9j6psK2Za6rwAAAgY"]
[Fri Apr 24 03:27:50.208378 2026] [:error] [pid 65000:tid 65037] [client 158.158.109.204:50588] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aepytr6vRb9j6psK2Za6sAAAAgQ"]
[Fri Apr 24 03:27:50.767787 2026] [:error] [pid 25635:tid 25640] [client 158.158.109.204:47304] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yuzuru1.php"] [unique_id "aepytsRxv6UsgRGKB3JacAAAAQE"]
[Fri Apr 24 03:27:51.426195 2026] [:error] [pid 59700:tid 59719] [client 158.158.109.204:52409] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "aepyt5XyGZJFeAIDWtmMIAAAAVE"]
[Fri Apr 24 03:27:52.402915 2026] [:error] [pid 43083:tid 43097] [client 158.158.109.204:10901] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "aepyuDC5hrvNXosL83K8EQAAAMw"]
[Fri Apr 24 03:27:52.998481 2026] [:error] [pid 65000:tid 65057] [client 158.158.109.204:52572] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "aepyuL6vRb9j6psK2Za6tgAAAhg"]
[Fri Apr 24 03:27:53.797994 2026] [:error] [pid 25635:tid 25651] [client 158.158.109.204:50569] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file61.php"] [unique_id "aepyucRxv6UsgRGKB3JacwAAAQw"]
[Fri Apr 24 03:27:54.780617 2026] [:error] [pid 25635:tid 25659] [client 158.158.109.204:44825] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "aepyusRxv6UsgRGKB3JaeQAAARQ"]
[Fri Apr 24 03:27:55.314061 2026] [:error] [pid 42973:tid 43067] [client 158.158.109.204:44860] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "aepyu26I0QqmmmLTHE2cCwAAAJg"]
[Fri Apr 24 03:27:56.868209 2026] [:error] [pid 64998:tid 65012] [client 158.158.109.204:50573] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "aepyvIV5EysYcTLjmwhhyQAAAco"]
[Fri Apr 24 03:27:57.669679 2026] [:error] [pid 42972:tid 43029] [client 158.158.109.204:49250] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Cap.php"] [unique_id "aepyvcOAb-3sOknsk4flKQAAAE0"]
[Fri Apr 24 03:27:58.445613 2026] [:error] [pid 46953:tid 46958] [client 158.158.109.204:62097] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aepyvknlpdHh-P6wKbqLVAAAAkI"]
[Fri Apr 24 03:27:59.301590 2026] [:error] [pid 65000:tid 65056] [client 158.158.109.204:49259] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aepyv76vRb9j6psK2Za6vQAAAhc"]
[Fri Apr 24 03:27:59.912688 2026] [:error] [pid 25635:tid 25655] [client 158.158.109.204:57470] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aepyv8Rxv6UsgRGKB3JafAAAARA"]
[Fri Apr 24 03:28:00.768984 2026] [:error] [pid 59700:tid 59713] [client 158.158.109.204:47299] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tfm.php"] [unique_id "aepywJXyGZJFeAIDWtmMJQAAAUs"]
[Fri Apr 24 03:28:01.361646 2026] [:error] [pid 65000:tid 65031] [client 158.158.109.204:10928] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "aepywb6vRb9j6psK2Za6wAAAAgI"]
[Fri Apr 24 03:28:14.407227 2026] [:error] [pid 65000:tid 65040] [client 158.158.109.204:50594] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aepyzr6vRb9j6psK2Za67QAAAgc"]
[Fri Apr 24 03:28:15.296127 2026] [:error] [pid 64998:tid 65011] [client 158.158.109.204:57418] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aepyz4V5EysYcTLjmwhh-QAAAck"]
[Fri Apr 24 03:28:16.387806 2026] [:error] [pid 64998:tid 65010] [client 158.158.109.204:58555] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aepy0IV5EysYcTLjmwhiBAAAAcg"]
[Fri Apr 24 03:28:17.194570 2026] [:error] [pid 65000:tid 65047] [client 158.158.109.204:47343] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aepy0b6vRb9j6psK2Za67wAAAg4"]
[Fri Apr 24 03:28:17.860737 2026] [:error] [pid 59700:tid 59708] [client 158.158.109.204:50602] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aepy0ZXyGZJFeAIDWtmMNAAAAUY"]
[Fri Apr 24 03:28:18.735904 2026] [:error] [pid 42972:tid 43019] [client 158.158.109.204:63385] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aepy0sOAb-3sOknsk4flUAAAAEM"]
[Fri Apr 24 03:28:19.350920 2026] [:error] [pid 59700:tid 59703] [client 158.158.109.204:63406] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aepy05XyGZJFeAIDWtmMOAAAAUE"]
[Fri Apr 24 03:28:20.101127 2026] [:error] [pid 64998:tid 65025] [client 158.158.109.204:44859] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8573.php"] [unique_id "aepy1IV5EysYcTLjmwhiDAAAAdc"]
[Fri Apr 24 03:28:20.818959 2026] [:error] [pid 59700:tid 59704] [client 158.158.109.204:10925] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aepy1JXyGZJFeAIDWtmMOgAAAUI"]
[Fri Apr 24 03:28:21.589090 2026] [:error] [pid 65000:tid 65046] [client 158.158.109.204:50618] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aepy1b6vRb9j6psK2Za6-wAAAg0"]
[Fri Apr 24 03:28:23.394848 2026] [:error] [pid 65000:tid 65056] [client 158.158.109.204:10917] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aepy176vRb9j6psK2Za7CAAAAhc"]
[Fri Apr 24 03:28:24.652193 2026] [:error] [pid 43083:tid 43107] [client 158.158.109.204:10930] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "aepy2DC5hrvNXosL83K8HgAAANY"]
[Fri Apr 24 03:28:25.537654 2026] [:error] [pid 42972:tid 43026] [client 158.158.109.204:62106] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aepy2cOAb-3sOknsk4flWgAAAEo"]
[Fri Apr 24 03:28:26.173636 2026] [:error] [pid 42973:tid 43043] [client 158.158.109.204:44842] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aepy2m6I0QqmmmLTHE2cKAAAAIA"]
[Fri Apr 24 03:28:27.037106 2026] [:error] [pid 42972:tid 43021] [client 158.158.109.204:50598] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aepy28OAb-3sOknsk4flXQAAAEU"]
[Fri Apr 24 03:28:27.548059 2026] [:error] [pid 64998:tid 65016] [client 158.158.109.204:44832] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aepy24V5EysYcTLjmwhiEAAAAc4"]
[Fri Apr 24 03:28:28.114294 2026] [:error] [pid 42973:tid 43060] [client 158.158.109.204:19089] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aepy3G6I0QqmmmLTHE2cLAAAAJE"]
[Fri Apr 24 03:28:28.684760 2026] [:error] [pid 42973:tid 43064] [client 158.158.109.204:50607] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aepy3G6I0QqmmmLTHE2cLQAAAJU"]
[Fri Apr 24 03:28:29.177412 2026] [:error] [pid 43083:tid 43109] [client 158.158.109.204:10909] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aepy3TC5hrvNXosL83K8MAAAANg"]
[Fri Apr 24 03:28:29.842919 2026] [:error] [pid 42972:tid 43020] [client 158.158.109.204:44821] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aepy3cOAb-3sOknsk4flZAAAAEQ"]
[Fri Apr 24 03:28:30.475262 2026] [:error] [pid 59700:tid 59708] [client 158.158.109.204:52365] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prosellers8.php"] [unique_id "aepy3pXyGZJFeAIDWtmMQQAAAUY"]
[Fri Apr 24 03:28:31.378354 2026] [:error] [pid 42972:tid 43034] [client 158.158.109.204:44832] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prosellers8.php"] [unique_id "aepy38OAb-3sOknsk4flZQAAAFI"]
[Fri Apr 24 03:28:32.007742 2026] [:error] [pid 59700:tid 59705] [client 158.158.109.204:47303] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prosellers8.php"] [unique_id "aepy4JXyGZJFeAIDWtmMRgAAAUM"]
[Fri Apr 24 03:28:32.574498 2026] [:error] [pid 59700:tid 59704] [client 158.158.109.204:10922] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/prosellers8.php"] [unique_id "aepy4JXyGZJFeAIDWtmMSQAAAUI"]
[Fri Apr 24 03:28:33.266211 2026] [:error] [pid 59700:tid 59723] [client 158.158.109.204:48360] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aepy4ZXyGZJFeAIDWtmMSwAAAVU"]
[Fri Apr 24 03:28:33.790731 2026] [:error] [pid 43083:tid 43105] [client 158.158.109.204:44815] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aepy4TC5hrvNXosL83K8OQAAANQ"]
[Fri Apr 24 03:28:34.416625 2026] [:error] [pid 65000:tid 65045] [client 158.158.109.204:19096] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aepy4r6vRb9j6psK2Za7JAAAAgw"]
[Fri Apr 24 03:28:35.037290 2026] [:error] [pid 64967:tid 64989] [client 158.158.109.204:63364] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shop.php"] [unique_id "aepy44AV4GfOOdX8QzqlZQAAAZQ"]
[Fri Apr 24 03:28:35.640299 2026] [:error] [pid 64998:tid 65017] [client 158.158.109.204:48953] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww.php"] [unique_id "aepy44V5EysYcTLjmwhiIAAAAc8"]
[Fri Apr 24 03:28:36.224143 2026] [:error] [pid 64998:tid 65008] [client 158.158.109.204:58516] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww.php"] [unique_id "aepy5IV5EysYcTLjmwhiIwAAAcY"]
[Fri Apr 24 03:28:36.829775 2026] [:error] [pid 42973:tid 43056] [client 158.158.109.204:58529] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww.php"] [unique_id "aepy5G6I0QqmmmLTHE2cOwAAAI0"]
[Fri Apr 24 03:28:37.340375 2026] [:error] [pid 42972:tid 43027] [client 158.158.109.204:48914] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww.php"] [unique_id "aepy5cOAb-3sOknsk4flagAAAEs"]
[Fri Apr 24 03:28:37.943773 2026] [:error] [pid 65000:tid 65055] [client 158.158.109.204:44849] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fsjzs.php"] [unique_id "aepy5b6vRb9j6psK2Za7nAAAAhY"]
[Fri Apr 24 03:28:38.501289 2026] [:error] [pid 42973:tid 43053] [client 158.158.109.204:48907] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fsjzs.php"] [unique_id "aepy5m6I0QqmmmLTHE2cPQAAAIo"]
[Fri Apr 24 03:28:39.140918 2026] [:error] [pid 65000:tid 65052] [client 158.158.109.204:48380] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fsjzs.php"] [unique_id "aepy576vRb9j6psK2Za7oQAAAhM"]
[Fri Apr 24 03:28:39.670883 2026] [:error] [pid 65000:tid 65053] [client 158.158.109.204:47310] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fsjzs.php"] [unique_id "aepy576vRb9j6psK2Za7pgAAAhQ"]
[Fri Apr 24 03:28:40.244570 2026] [:error] [pid 65000:tid 65045] [client 158.158.109.204:10915] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cwclass.php"] [unique_id "aepy6L6vRb9j6psK2Za7qQAAAgw"]
[Fri Apr 24 03:28:40.778779 2026] [:error] [pid 64967:tid 64971] [client 158.158.109.204:57416] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cwclass.php"] [unique_id "aepy6IAV4GfOOdX8QzqlZwAAAYI"]
[Fri Apr 24 03:28:41.383576 2026] [:error] [pid 64967:tid 64992] [client 158.158.109.204:19122] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cwclass.php"] [unique_id "aepy6YAV4GfOOdX8QzqlaQAAAZc"]
[Fri Apr 24 03:28:41.909956 2026] [:error] [pid 65000:tid 65040] [client 158.158.109.204:19135] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cwclass.php"] [unique_id "aepy6b6vRb9j6psK2Za7rQAAAgc"]
[Fri Apr 24 03:28:42.481629 2026] [:error] [pid 59700:tid 59719] [client 158.158.109.204:48329] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit-tags.php"] [unique_id "aepy6pXyGZJFeAIDWtmMUwAAAVE"]
[Fri Apr 24 03:28:42.983372 2026] [:error] [pid 46953:tid 46965] [client 158.158.109.204:63388] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit-tags.php"] [unique_id "aepy6knlpdHh-P6wKbqLewAAAkk"]
[Fri Apr 24 03:28:43.529344 2026] [:error] [pid 42973:tid 43049] [client 158.158.109.204:19087] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit-tags.php"] [unique_id "aepy626I0QqmmmLTHE2cRAAAAIY"]
[Fri Apr 24 03:28:44.319203 2026] [:error] [pid 42973:tid 43064] [client 158.158.109.204:48343] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit-tags.php"] [unique_id "aepy7G6I0QqmmmLTHE2cSQAAAJU"]
[Fri Apr 24 03:28:45.346616 2026] [:error] [pid 42972:tid 43027] [client 158.158.109.204:48898] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aepy7cOAb-3sOknsk4fldwAAAEs"]
[Fri Apr 24 03:28:46.025488 2026] [:error] [pid 65000:tid 65030] [client 158.158.109.204:52579] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aepy7r6vRb9j6psK2Za7sgAAAgE"]
[Fri Apr 24 03:28:46.583342 2026] [:error] [pid 43083:tid 43097] [client 158.158.109.204:50575] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aepy7jC5hrvNXosL83K8RAAAAMw"]
[Fri Apr 24 03:28:47.791548 2026] [:error] [pid 42973:tid 43047] [client 158.158.109.204:44806] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "aepy726I0QqmmmLTHE2cVAAAAIQ"]
[Fri Apr 24 03:28:48.365540 2026] [:error] [pid 42972:tid 43020] [client 158.158.109.204:44805] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aepy8MOAb-3sOknsk4flfgAAAEQ"]
[Fri Apr 24 03:28:48.910352 2026] [:error] [pid 42972:tid 43016] [client 158.158.109.204:10918] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aepy8MOAb-3sOknsk4flfwAAAEA"]
[Fri Apr 24 03:28:49.447469 2026] [:error] [pid 43083:tid 43094] [client 158.158.109.204:62098] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aepy8TC5hrvNXosL83K8SgAAAMk"]
[Fri Apr 24 03:28:49.975599 2026] [:error] [pid 64998:tid 65013] [client 158.158.109.204:58531] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aepy8YV5EysYcTLjmwhiOgAAAcs"]
[Fri Apr 24 03:28:50.984918 2026] [:error] [pid 65000:tid 65045] [client 158.158.109.204:48348] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aepy8r6vRb9j6psK2Za7xAAAAgw"]
[Fri Apr 24 03:28:51.894065 2026] [:error] [pid 65000:tid 65044] [client 158.158.109.204:63391] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aepy876vRb9j6psK2Za7zQAAAgs"]
[Fri Apr 24 03:28:52.628646 2026] [:error] [pid 65000:tid 65029] [client 158.158.109.204:58538] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aepy9L6vRb9j6psK2Za70gAAAgA"]
[Fri Apr 24 03:28:53.174909 2026] [:error] [pid 42973:tid 43049] [client 158.158.109.204:63396] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a5.php"] [unique_id "aepy9W6I0QqmmmLTHE2cXgAAAIY"]
[Fri Apr 24 03:28:53.896533 2026] [:error] [pid 42973:tid 43045] [client 158.158.109.204:50576] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ai.php"] [unique_id "aepy9W6I0QqmmmLTHE2cYwAAAII"]
[Fri Apr 24 03:28:54.767161 2026] [:error] [pid 65000:tid 65044] [client 158.158.109.204:50611] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ai.php"] [unique_id "aepy9r6vRb9j6psK2Za72wAAAgs"]
[Fri Apr 24 03:28:55.333523 2026] [:error] [pid 46953:tid 46973] [client 158.158.109.204:10941] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ai.php"] [unique_id "aepy90nlpdHh-P6wKbqLkAAAAlE"]
[Fri Apr 24 03:28:56.042499 2026] [:error] [pid 65000:tid 65057] [client 158.158.109.204:48346] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ai.php"] [unique_id "aepy-L6vRb9j6psK2Za74AAAAhg"]
[Fri Apr 24 03:28:56.720887 2026] [:error] [pid 64998:tid 65014] [client 158.158.109.204:10943] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aepy-IV5EysYcTLjmwhiPAAAAcw"]
[Fri Apr 24 03:28:57.566016 2026] [:error] [pid 64998:tid 65011] [client 158.158.109.204:54015] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aepy-YV5EysYcTLjmwhiQQAAAck"]
[Fri Apr 24 03:28:58.443197 2026] [:error] [pid 65000:tid 65057] [client 158.158.109.204:53960] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aepy-r6vRb9j6psK2Za77AAAAhg"]
[Fri Apr 24 03:28:59.229618 2026] [:error] [pid 64967:tid 64981] [client 158.158.109.204:49514] [client 158.158.109.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jga.php"] [unique_id "aepy-4AV4GfOOdX8QzqlbwAAAYw"]
[Fri Apr 24 04:13:07.110196 2026] [:error] [pid 19200:tid 19229] [client 43.159.62.105:63941] [client 43.159.62.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aep9UzQ--M3-tsKAnhFfpwAAANU"]
[Fri Apr 24 04:16:05.982129 2026] [:error] [pid 19102:tid 19184] [client 185.198.240.120:54797] [client 185.198.240.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aep-BQDSgrbLEZbkqD6SlQAAAJQ"]
[Fri Apr 24 05:04:59.111065 2026] [:error] [pid 19102:tid 19169] [client 43.153.85.46:44220] [client 43.153.85.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aeqJewDSgrbLEZbkqD6n6AAAAIU"]
[Fri Apr 24 10:07:31.133742 2026] [:error] [pid 52129:tid 52150] [client 91.51.92.214:64314] [client 91.51.92.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.51.92.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aerQY-KCZKf8_u2LKiBhuwAAARE"]
[Fri Apr 24 10:07:33.345645 2026] [:error] [pid 19101:tid 19150] [client 91.51.92.214:60789] [client 91.51.92.214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aerQZWAHj9bEvrTgbO1BowAAAE0"]
[Fri Apr 24 10:07:43.392324 2026] [:error] [pid 19101:tid 19159] [client 91.51.92.214:60789] [client 91.51.92.214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aerQb2AHj9bEvrTgbO1BtQAAAFY"]
[Fri Apr 24 10:32:05.690571 2026] [:error] [pid 17808:tid 17827] [client 194.26.192.182:59781] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aerWJearbOEFI8qshvI8DAAAAFE"]
[Fri Apr 24 10:32:06.229580 2026] [:error] [pid 22114:tid 22132] [client 194.26.192.182:60072] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aerWJoAuWGz3WlMQjodqDwAAAQ8"]
[Fri Apr 24 10:32:06.741152 2026] [:error] [pid 17719:tid 17742] [client 194.26.192.182:60409] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aerWJsTZ9gzEyL1BkPrHZAAAAI8"]
[Fri Apr 24 10:32:07.286741 2026] [:error] [pid 17719:tid 17730] [client 194.26.192.182:60821] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aerWJ8TZ9gzEyL1BkPrHdAAAAIM"]
[Fri Apr 24 10:32:07.791835 2026] [:error] [pid 17720:tid 17757] [client 194.26.192.182:61214] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aerWJ-hlUs6BS3Ng7_WoZwAAAMM"]
[Fri Apr 24 10:43:56.863400 2026] [:error] [pid 17720:tid 17775] [client 36.78.63.10:55892] [client 36.78.63.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.78.63.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aerY7OhlUs6BS3Ng7_WviQAAANU"]
[Fri Apr 24 11:45:50.282951 2026] [:error] [pid 17720:tid 17772] [client 144.31.151.48:59591] [client 144.31.151.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new"] [unique_id "aernbuhlUs6BS3Ng7_XKwwAAANI"]
[Fri Apr 24 13:51:18.139025 2026] [:error] [pid 17719:tid 17747] [client 61.3.29.10:51791] [client 61.3.29.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.29.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesE1sTZ9gzEyL1BkPpBwQAAAJQ"]
[Fri Apr 24 13:51:28.678933 2026] [:error] [pid 17720:tid 17755] [client 61.3.29.10:52200] [client 61.3.29.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.29.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesE4OhlUs6BS3Ng7_XuTQAAAME"]
[Fri Apr 24 13:51:39.135382 2026] [:error] [pid 17719:tid 17730] [client 61.3.29.10:52789] [client 61.3.29.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.29.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesE68TZ9gzEyL1BkPpCDwAAAIM"]
[Fri Apr 24 13:51:49.693323 2026] [:error] [pid 17808:tid 17828] [client 61.3.29.10:53129] [client 61.3.29.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.29.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesE9earbOEFI8qshvKZPwAAAFI"]
[Fri Apr 24 13:52:00.237178 2026] [:error] [pid 17808:tid 17826] [client 61.3.29.10:53445] [client 61.3.29.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.29.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesFAOarbOEFI8qshvKZWgAAAFA"]
[Fri Apr 24 14:05:08.472624 2026] [:error] [pid 17720:tid 17778] [client 170.106.84.136:37628] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aesIFOhlUs6BS3Ng7_XxugAAANg"]
[Fri Apr 24 14:06:31.046877 2026] [:error] [pid 17721:tid 17786] [client 117.193.233.207:52920] [client 117.193.233.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.193.233.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesIZ-FXXkLeyDnfk__KHgAAAAU"]
[Fri Apr 24 14:06:41.378156 2026] [:error] [pid 17808:tid 17816] [client 117.193.233.207:53414] [client 117.193.233.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.193.233.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesIcearbOEFI8qshvKeNAAAAEY"]
[Fri Apr 24 14:06:51.879349 2026] [:error] [pid 17719:tid 17748] [client 117.193.233.207:53994] [client 117.193.233.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.193.233.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesIe8TZ9gzEyL1BkPpKkgAAAJU"]
[Fri Apr 24 14:07:02.374386 2026] [:error] [pid 17808:tid 17814] [client 117.193.233.207:54336] [client 117.193.233.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.193.233.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesIhuarbOEFI8qshvKebQAAAEQ"]
[Fri Apr 24 14:07:12.924935 2026] [:error] [pid 17719:tid 17730] [client 117.193.233.207:54684] [client 117.193.233.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.193.233.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesIkMTZ9gzEyL1BkPpKrgAAAIM"]
[Fri Apr 24 14:07:23.418138 2026] [:error] [pid 17719:tid 17739] [client 117.193.233.207:55038] [client 117.193.233.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.193.233.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesIm8TZ9gzEyL1BkPpK1AAAAIw"]
[Fri Apr 24 14:18:43.420790 2026] [:error] [pid 17719:tid 17743] [client 103.58.64.164:63130] [client 103.58.64.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.58.64.164, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesLQ8TZ9gzEyL1BkPpRmwAAAJA"]
[Fri Apr 24 14:24:15.098431 2026] [:error] [pid 17721:tid 17786] [client 125.166.116.198:31153] [client 125.166.116.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.116.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesMj-FXXkLeyDnfk__STAAAAAU"]
[Fri Apr 24 14:24:25.487925 2026] [:error] [pid 17808:tid 17823] [client 125.166.116.198:9151] [client 125.166.116.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.116.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesMmearbOEFI8qshvKmZgAAAE0"]
[Fri Apr 24 14:24:36.223494 2026] [:error] [pid 17719:tid 17747] [client 125.166.116.198:10944] [client 125.166.116.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.116.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesMpMTZ9gzEyL1BkPpV7gAAAJQ"]
[Fri Apr 24 14:24:46.734844 2026] [:error] [pid 17808:tid 17815] [client 125.166.116.198:9975] [client 125.166.116.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.116.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesMruarbOEFI8qshvKmqgAAAEU"]
[Fri Apr 24 14:24:58.822775 2026] [:error] [pid 17721:tid 17790] [client 125.166.116.198:7011] [client 125.166.116.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.116.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesMuuFXXkLeyDnfk__TDQAAAAk"]
[Fri Apr 24 14:25:06.013430 2026] [:error] [pid 17720:tid 17765] [client 103.58.64.164:60238] [client 103.58.64.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.58.64.164, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesMwuhlUs6BS3Ng7_X3awAAAMs"]
[Fri Apr 24 14:25:13.411009 2026] [:error] [pid 14531:tid 14536] [client 125.166.116.198:30047] [client 125.166.116.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.116.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesMyXfLU2gw-6KR-GZG_AAAAUM"]
[Fri Apr 24 14:25:16.755384 2026] [:error] [pid 17721:tid 17804] [client 103.58.64.164:60595] [client 103.58.64.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.58.64.164, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesMzOFXXkLeyDnfk__THgAAABc"]
[Fri Apr 24 14:38:00.320100 2026] [autoindex:error] [pid 14531:tid 14544] [client 207.180.233.81:56908] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 24 15:03:38.100808 2026] [:error] [pid 17720:tid 17775] [client 36.77.217.166:61090] [client 36.77.217.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.217.166, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesVyuhlUs6BS3Ng7_X-zgAAANU"]
[Fri Apr 24 15:03:48.126946 2026] [:error] [pid 17808:tid 17821] [client 36.77.217.166:61743] [client 36.77.217.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.217.166, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesV1OarbOEFI8qshvKwegAAAEs"]
[Fri Apr 24 15:03:58.952097 2026] [:error] [pid 17808:tid 17824] [client 36.77.217.166:62294] [client 36.77.217.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.217.166, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesV3uarbOEFI8qshvKwggAAAE4"]
[Fri Apr 24 15:04:09.147819 2026] [:error] [pid 17808:tid 17827] [client 36.77.217.166:62882] [client 36.77.217.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.217.166, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesV6earbOEFI8qshvKwlwAAAFE"]
[Fri Apr 24 15:04:24.004406 2026] [:error] [pid 22114:tid 22119] [client 36.77.217.166:63576] [client 36.77.217.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.217.166, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesV-IAuWGz3WlMQjoewBgAAAQI"]
[Fri Apr 24 15:04:34.718472 2026] [:error] [pid 14531:tid 14534] [client 36.77.217.166:64145] [client 36.77.217.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.217.166, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesWAnfLU2gw-6KR-GZYawAAAUE"]
[Fri Apr 24 15:33:24.906010 2026] [:error] [pid 22114:tid 22136] [client 113.193.8.186:52142] [client 113.193.8.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.193.8.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aescxIAuWGz3WlMQjoe1KgAAARM"]
[Fri Apr 24 15:33:35.063489 2026] [:error] [pid 22114:tid 22122] [client 113.193.8.186:52695] [client 113.193.8.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.193.8.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aescz4AuWGz3WlMQjoe1NgAAAQU"]
[Fri Apr 24 15:33:45.486898 2026] [:error] [pid 22114:tid 22136] [client 113.193.8.186:53204] [client 113.193.8.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.193.8.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesc2YAuWGz3WlMQjoe1RgAAARM"]
[Fri Apr 24 15:33:55.995338 2026] [:error] [pid 22114:tid 22129] [client 113.193.8.186:53698] [client 113.193.8.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.193.8.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesc44AuWGz3WlMQjoe1TwAAAQw"]
[Fri Apr 24 15:34:06.358464 2026] [:error] [pid 17719:tid 17742] [client 113.193.8.186:54200] [client 113.193.8.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.193.8.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aesc7sTZ9gzEyL1BkPpm6QAAAI8"]
[Fri Apr 24 15:38:15.398900 2026] [:error] [pid 17720:tid 17759] [client 49.235.136.28:50560] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aesd5-hlUs6BS3Ng7_UKFgAAAMU"]
[Fri Apr 24 16:42:03.476736 2026] [:error] [pid 17720:tid 17766] [client 115.242.63.75:58864] [client 115.242.63.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.242.63.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aess2-hlUs6BS3Ng7_UtugAAAMw"]
[Fri Apr 24 16:42:13.620290 2026] [:error] [pid 17721:tid 17787] [client 115.242.63.75:59628] [client 115.242.63.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.242.63.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aess5eFXXkLeyDnfk__98gAAAAY"]
[Fri Apr 24 16:42:24.575268 2026] [:error] [pid 17721:tid 17795] [client 115.242.63.75:60151] [client 115.242.63.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.242.63.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aess8OFXXkLeyDnfk__-BwAAAA4"]
[Fri Apr 24 16:42:35.148699 2026] [:error] [pid 17808:tid 17831] [client 115.242.63.75:60658] [client 115.242.63.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.242.63.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aess--arbOEFI8qshvLXOQAAAFU"]
[Fri Apr 24 16:42:45.506769 2026] [:error] [pid 14531:tid 14544] [client 115.242.63.75:61167] [client 115.242.63.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.242.63.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aestBXfLU2gw-6KR-GZ9PAAAAUs"]
[Fri Apr 24 17:29:47.981277 2026] [:error] [pid 14531:tid 14548] [client 20.215.184.103:36329] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj11.php"] [unique_id "aes4C3fLU2gw-6KR-GaQCwAAAU8"]
[Fri Apr 24 17:29:50.220187 2026] [:error] [pid 14531:tid 14547] [client 20.215.184.103:29830] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj11.php"] [unique_id "aes4DnfLU2gw-6KR-GaQEgAAAU4"]
[Fri Apr 24 17:29:58.768693 2026] [:error] [pid 17808:tid 17820] [client 20.215.184.103:29835] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj11.php"] [unique_id "aes4FuarbOEFI8qshvLvXgAAAEo"]
[Fri Apr 24 17:30:01.006080 2026] [:error] [pid 17720:tid 17770] [client 20.215.184.103:40754] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj11.php"] [unique_id "aes4GehlUs6BS3Ng7_VMZQAAANA"]
[Fri Apr 24 17:30:03.201201 2026] [:error] [pid 14531:tid 14534] [client 20.215.184.103:52759] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tires.php"] [unique_id "aes4G3fLU2gw-6KR-GaQKgAAAUE"]
[Fri Apr 24 17:30:04.488431 2026] [:error] [pid 17719:tid 17742] [client 20.215.184.103:36339] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tires.php"] [unique_id "aes4HMTZ9gzEyL1BkPqBDgAAAI8"]
[Fri Apr 24 17:30:06.320026 2026] [:error] [pid 17721:tid 17790] [client 20.215.184.103:36332] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tires.php"] [unique_id "aes4HuFXXkLeyDnfk_8MhAAAAAk"]
[Fri Apr 24 17:30:07.177219 2026] [:error] [pid 17720:tid 17766] [client 20.215.184.103:53813] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tires.php"] [unique_id "aes4H-hlUs6BS3Ng7_VMbwAAAMw"]
[Fri Apr 24 17:30:08.564478 2026] [:error] [pid 17719:tid 17729] [client 20.215.184.103:55268] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xroot.php"] [unique_id "aes4IMTZ9gzEyL1BkPqBHQAAAII"]
[Fri Apr 24 17:30:10.100835 2026] [:error] [pid 17721:tid 17789] [client 20.215.184.103:55263] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xroot.php"] [unique_id "aes4IuFXXkLeyDnfk_8MiwAAAAg"]
[Fri Apr 24 17:30:11.152204 2026] [:error] [pid 17720:tid 17774] [client 20.215.184.103:38178] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xroot.php"] [unique_id "aes4I-hlUs6BS3Ng7_VMdwAAANQ"]
[Fri Apr 24 17:30:14.924446 2026] [:error] [pid 17720:tid 17757] [client 20.215.184.103:32502] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xroot.php"] [unique_id "aes4JuhlUs6BS3Ng7_VMhgAAAMM"]
[Fri Apr 24 17:30:18.852102 2026] [:error] [pid 17808:tid 17822] [client 20.215.184.103:44594] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "aes4KuarbOEFI8qshvLvmQAAAEw"]
[Fri Apr 24 17:30:23.136889 2026] [:error] [pid 17721:tid 17784] [client 20.215.184.103:36253] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "aes4L-FXXkLeyDnfk_8M1QAAAAM"]
[Fri Apr 24 17:30:27.264133 2026] [:error] [pid 17720:tid 17770] [client 20.215.184.103:38193] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "aes4M-hlUs6BS3Ng7_VMpQAAANA"]
[Fri Apr 24 17:30:28.851627 2026] [:error] [pid 14531:tid 14536] [client 20.215.184.103:29832] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tea.php"] [unique_id "aes4NHfLU2gw-6KR-GaQbAAAAUM"]
[Fri Apr 24 17:30:32.470563 2026] [:error] [pid 17721:tid 17798] [client 20.215.184.103:35052] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uwu.php"] [unique_id "aes4OOFXXkLeyDnfk_8M4wAAABE"]
[Fri Apr 24 17:30:36.271951 2026] [:error] [pid 14531:tid 14549] [client 20.215.184.103:36321] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uwu.php"] [unique_id "aes4PHfLU2gw-6KR-GaQfAAAAVA"]
[Fri Apr 24 17:30:37.764550 2026] [:error] [pid 17720:tid 17767] [client 20.215.184.103:50150] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uwu.php"] [unique_id "aes4PehlUs6BS3Ng7_VMuAAAAM0"]
[Fri Apr 24 17:30:41.893094 2026] [:error] [pid 17721:tid 17787] [client 20.215.184.103:22211] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uwu.php"] [unique_id "aes4QeFXXkLeyDnfk_8M7QAAAAY"]
[Fri Apr 24 17:30:44.178721 2026] [:error] [pid 17808:tid 17818] [client 20.215.184.103:52783] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aios-bootstrap.php"] [unique_id "aes4ROarbOEFI8qshvLvuAAAAEg"]
[Fri Apr 24 17:30:45.900395 2026] [:error] [pid 14531:tid 14554] [client 20.215.184.103:29877] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aios-bootstrap.php"] [unique_id "aes4RXfLU2gw-6KR-GaQjQAAAVU"]
[Fri Apr 24 17:31:08.070887 2026] [:error] [pid 17720:tid 17764] [client 20.215.184.103:36295] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aes4XOhlUs6BS3Ng7_VNBAAAAMo"]
[Fri Apr 24 17:31:12.582293 2026] [:error] [pid 17720:tid 17769] [client 20.215.184.103:32480] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aes4YOhlUs6BS3Ng7_VNBgAAAM8"]
[Fri Apr 24 17:31:14.559506 2026] [:error] [pid 17808:tid 17824] [client 20.215.184.103:29201] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aes4YuarbOEFI8qshvLv2AAAAE4"]
[Fri Apr 24 17:31:17.012848 2026] [:error] [pid 17721:tid 17783] [client 20.215.184.103:28560] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "aes4ZeFXXkLeyDnfk_8NHAAAAAI"]
[Fri Apr 24 17:31:18.748673 2026] [:error] [pid 17719:tid 17743] [client 20.215.184.103:35020] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aes4ZsTZ9gzEyL1BkPqBeAAAAJA"]
[Fri Apr 24 17:31:22.417971 2026] [:error] [pid 17719:tid 17731] [client 20.215.184.103:32457] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aes4asTZ9gzEyL1BkPqBfgAAAIQ"]
[Fri Apr 24 17:31:23.556120 2026] [:error] [pid 14531:tid 14544] [client 20.215.184.103:55271] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aes4a3fLU2gw-6KR-GaQ3wAAAUs"]
[Fri Apr 24 17:31:25.993940 2026] [:error] [pid 17719:tid 17728] [client 20.215.184.103:32473] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "aes4bcTZ9gzEyL1BkPqBgAAAAIE"]
[Fri Apr 24 17:31:28.397360 2026] [:error] [pid 14531:tid 14533] [client 20.215.184.103:53774] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aes4cHfLU2gw-6KR-GaQ_wAAAUA"]
[Fri Apr 24 17:31:29.362682 2026] [:error] [pid 17720:tid 17764] [client 20.215.184.103:38181] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aes4cehlUs6BS3Ng7_VNNgAAAMo"]
[Fri Apr 24 17:31:30.617502 2026] [:error] [pid 14531:tid 14553] [client 20.215.184.103:40714] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aes4cnfLU2gw-6KR-GaRBQAAAVQ"]
[Fri Apr 24 17:31:31.358641 2026] [:error] [pid 17720:tid 17757] [client 20.215.184.103:38170] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "aes4c-hlUs6BS3Ng7_VNOgAAAMM"]
[Fri Apr 24 17:31:32.494167 2026] [:error] [pid 14531:tid 14539] [client 20.215.184.103:32458] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "aes4dHfLU2gw-6KR-GaRCAAAAUY"]
[Fri Apr 24 17:31:33.720527 2026] [:error] [pid 17808:tid 17826] [client 20.215.184.103:44583] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "aes4dearbOEFI8qshvLwSgAAAFA"]
[Fri Apr 24 17:31:35.098197 2026] [:error] [pid 14531:tid 14543] [client 20.215.184.103:36340] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "aes4d3fLU2gw-6KR-GaREgAAAUo"]
[Fri Apr 24 17:31:36.045064 2026] [:error] [pid 17808:tid 17825] [client 20.215.184.103:53785] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zogy1.php"] [unique_id "aes4eOarbOEFI8qshvLwXAAAAE8"]
[Fri Apr 24 17:31:37.973767 2026] [:error] [pid 17808:tid 17811] [client 20.215.184.103:31209] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aes4eearbOEFI8qshvLwaAAAAEE"]
[Fri Apr 24 17:31:38.775843 2026] [:error] [pid 22114:tid 22135] [client 20.215.184.103:35009] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aes4eoAuWGz3WlMQjofLkQAAARI"]
[Fri Apr 24 17:31:40.109717 2026] [:error] [pid 14531:tid 14537] [client 20.215.184.103:55240] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aes4fHfLU2gw-6KR-GaRJwAAAUQ"]
[Fri Apr 24 17:31:41.464303 2026] [:error] [pid 22114:tid 22122] [client 20.215.184.103:19471] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoper1.php"] [unique_id "aes4fYAuWGz3WlMQjofLkwAAAQU"]
[Fri Apr 24 17:31:42.817356 2026] [:error] [pid 17720:tid 17767] [client 20.215.184.103:36301] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atkno.php"] [unique_id "aes4fuhlUs6BS3Ng7_VNXgAAAM0"]
[Fri Apr 24 17:31:45.972331 2026] [:error] [pid 17720:tid 17773] [client 20.215.184.103:18010] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atkno.php"] [unique_id "aes4gehlUs6BS3Ng7_VNcQAAANM"]
[Fri Apr 24 17:31:47.016317 2026] [:error] [pid 17808:tid 17826] [client 20.215.184.103:63346] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atkno.php"] [unique_id "aes4g-arbOEFI8qshvLwlAAAAFA"]
[Fri Apr 24 17:31:51.346618 2026] [:error] [pid 22114:tid 22127] [client 20.215.184.103:40725] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atkno.php"] [unique_id "aes4h4AuWGz3WlMQjofLmwAAAQo"]
[Fri Apr 24 17:32:35.855635 2026] [:error] [pid 17808:tid 17831] [client 20.215.184.103:4734] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index0.php"] [unique_id "aes4s-arbOEFI8qshvLxOwAAAFU"]
[Fri Apr 24 17:32:39.919224 2026] [:error] [pid 14531:tid 14553] [client 20.215.184.103:29828] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index0.php"] [unique_id "aes4t3fLU2gw-6KR-GaRcAAAAVQ"]
[Fri Apr 24 17:32:40.681658 2026] [:error] [pid 17719:tid 17728] [client 20.215.184.103:33735] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index0.php"] [unique_id "aes4uMTZ9gzEyL1BkPqCCAAAAIE"]
[Fri Apr 24 17:32:41.986558 2026] [:error] [pid 22114:tid 22122] [client 20.215.184.103:53772] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index0.php"] [unique_id "aes4uYAuWGz3WlMQjofLwgAAAQU"]
[Fri Apr 24 17:32:43.301274 2026] [:error] [pid 17720:tid 17761] [client 20.215.184.103:32501] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-01ul.php"] [unique_id "aes4u-hlUs6BS3Ng7_VOHAAAAMc"]
[Fri Apr 24 17:32:45.460255 2026] [:error] [pid 17720:tid 17776] [client 20.215.184.103:53771] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-01ul.php"] [unique_id "aes4vehlUs6BS3Ng7_VOHgAAANY"]
[Fri Apr 24 17:32:46.391656 2026] [:error] [pid 17808:tid 17833] [client 20.215.184.103:32493] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-01ul.php"] [unique_id "aes4vuarbOEFI8qshvLxRwAAAFc"]
[Fri Apr 24 17:32:49.078926 2026] [:error] [pid 17720:tid 17766] [client 20.215.184.103:33732] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-01ul.php"] [unique_id "aes4wehlUs6BS3Ng7_VOOQAAAMw"]
[Fri Apr 24 17:32:50.528941 2026] [:error] [pid 17721:tid 17782] [client 20.215.184.103:33780] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e3.php"] [unique_id "aes4wuFXXkLeyDnfk_8N9QAAAAE"]
[Fri Apr 24 17:32:51.826908 2026] [:error] [pid 17720:tid 17754] [client 20.215.184.103:35048] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e3.php"] [unique_id "aes4w-hlUs6BS3Ng7_VOQgAAAMA"]
[Fri Apr 24 17:32:52.809129 2026] [:error] [pid 17719:tid 17734] [client 20.215.184.103:52767] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e3.php"] [unique_id "aes4xMTZ9gzEyL1BkPqCEwAAAIc"]
[Fri Apr 24 17:32:53.510548 2026] [:error] [pid 17808:tid 17815] [client 20.215.184.103:43599] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/e3.php"] [unique_id "aes4xearbOEFI8qshvLxVQAAAEU"]
[Fri Apr 24 17:32:54.537927 2026] [:error] [pid 17808:tid 17830] [client 20.215.184.103:29884] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fkohd.php"] [unique_id "aes4xuarbOEFI8qshvLxVwAAAFQ"]
[Fri Apr 24 17:32:55.629105 2026] [:error] [pid 22114:tid 22141] [client 20.215.184.103:31203] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fkohd.php"] [unique_id "aes4x4AuWGz3WlMQjofL4AAAARg"]
[Fri Apr 24 17:32:57.085104 2026] [:error] [pid 17808:tid 17816] [client 20.215.184.103:63296] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fkohd.php"] [unique_id "aes4yearbOEFI8qshvLxXgAAAEY"]
[Fri Apr 24 17:32:58.173140 2026] [:error] [pid 17720:tid 17762] [client 20.215.184.103:44547] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fkohd.php"] [unique_id "aes4yuhlUs6BS3Ng7_VOSAAAAMg"]
[Fri Apr 24 17:32:59.665025 2026] [:error] [pid 17808:tid 17831] [client 20.215.184.103:44579] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "aes4y-arbOEFI8qshvLxYgAAAFU"]
[Fri Apr 24 17:33:02.963249 2026] [:error] [pid 17721:tid 17789] [client 20.215.184.103:43585] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "aes4zuFXXkLeyDnfk_8OBQAAAAg"]
[Fri Apr 24 17:33:03.783724 2026] [:error] [pid 17720:tid 17764] [client 20.215.184.103:46663] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "aes4z-hlUs6BS3Ng7_VOUQAAAMo"]
[Fri Apr 24 17:33:05.584386 2026] [:error] [pid 17721:tid 17788] [client 20.215.184.103:53812] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws78.php"] [unique_id "aes40eFXXkLeyDnfk_8OBwAAAAc"]
[Fri Apr 24 17:33:07.184484 2026] [:error] [pid 17719:tid 17748] [client 20.215.184.103:28576] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aes408TZ9gzEyL1BkPqCMgAAAJU"]
[Fri Apr 24 17:33:18.536589 2026] [:error] [pid 14531:tid 14539] [client 20.215.184.103:63343] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "aes43nfLU2gw-6KR-GaRzQAAAUY"]
[Fri Apr 24 17:33:23.037826 2026] [:error] [pid 14531:tid 14539] [client 20.215.184.103:54770] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zo.php"] [unique_id "aes443fLU2gw-6KR-GaR1wAAAUY"]
[Fri Apr 24 17:33:53.519634 2026] [:error] [pid 17719:tid 17744] [client 20.215.184.103:27387] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aes5AcTZ9gzEyL1BkPqCiwAAAJE"]
[Fri Apr 24 17:33:57.990419 2026] [:error] [pid 14531:tid 14554] [client 20.215.184.103:60744] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aes5BXfLU2gw-6KR-GaSFgAAAVU"]
[Fri Apr 24 17:33:59.610979 2026] [:error] [pid 14531:tid 14547] [client 20.215.184.103:24228] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aes5B3fLU2gw-6KR-GaSHwAAAU4"]
[Fri Apr 24 17:34:01.001655 2026] [:error] [pid 17721:tid 17792] [client 20.215.184.103:20046] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "aes5CeFXXkLeyDnfk_8OWwAAAAs"]
[Fri Apr 24 17:34:09.096481 2026] [:error] [pid 17720:tid 17778] [client 20.215.184.103:19977] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iov.php"] [unique_id "aes5EehlUs6BS3Ng7_VPIQAAANg"]
[Fri Apr 24 17:34:10.731668 2026] [:error] [pid 14531:tid 14549] [client 20.215.184.103:24241] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iov.php"] [unique_id "aes5EnfLU2gw-6KR-GaSMAAAAVA"]
[Fri Apr 24 17:34:11.758867 2026] [:error] [pid 17721:tid 17785] [client 20.215.184.103:54306] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iov.php"] [unique_id "aes5E-FXXkLeyDnfk_8OaAAAAAQ"]
[Fri Apr 24 17:34:12.479895 2026] [:error] [pid 17720:tid 17774] [client 20.215.184.103:45246] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/iov.php"] [unique_id "aes5FOhlUs6BS3Ng7_VPLgAAANQ"]
[Fri Apr 24 17:34:13.926411 2026] [:error] [pid 14531:tid 14540] [client 20.215.184.103:24240] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jodohghi.php"] [unique_id "aes5FXfLU2gw-6KR-GaSMgAAAUc"]
[Fri Apr 24 17:34:16.016801 2026] [:error] [pid 17719:tid 17743] [client 20.215.184.103:54763] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jodohghi.php"] [unique_id "aes5GMTZ9gzEyL1BkPqCowAAAJA"]
[Fri Apr 24 17:34:17.775007 2026] [:error] [pid 17720:tid 17772] [client 20.215.184.103:60786] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jodohghi.php"] [unique_id "aes5GehlUs6BS3Ng7_VPOAAAANI"]
[Fri Apr 24 17:34:18.591167 2026] [:error] [pid 17720:tid 17764] [client 20.215.184.103:4843] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jodohghi.php"] [unique_id "aes5GuhlUs6BS3Ng7_VPQQAAAMo"]
[Fri Apr 24 17:34:19.552036 2026] [:error] [pid 17808:tid 17823] [client 20.215.184.103:4183] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rendi59.php"] [unique_id "aes5G-arbOEFI8qshvLyUQAAAE0"]
[Fri Apr 24 17:34:21.151817 2026] [:error] [pid 17720:tid 17769] [client 20.215.184.103:4833] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rendi59.php"] [unique_id "aes5HehlUs6BS3Ng7_VPVAAAAM8"]
[Fri Apr 24 17:34:28.196430 2026] [:error] [pid 17719:tid 17744] [client 20.215.184.103:20513] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rendi59.php"] [unique_id "aes5JMTZ9gzEyL1BkPqCqgAAAJE"]
[Fri Apr 24 17:35:33.097363 2026] [:error] [pid 17808:tid 17813] [client 20.215.184.103:45286] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lov.php"] [unique_id "aes5ZearbOEFI8qshvLzFwAAAEM"]
[Fri Apr 24 17:35:35.809918 2026] [:error] [pid 17720:tid 17765] [client 20.215.184.103:61377] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lov.php"] [unique_id "aes5Z-hlUs6BS3Ng7_VP1wAAAMs"]
[Fri Apr 24 17:35:37.357973 2026] [:error] [pid 14531:tid 14543] [client 20.215.184.103:61412] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lov.php"] [unique_id "aes5aXfLU2gw-6KR-GaSpAAAAUo"]
[Fri Apr 24 17:35:38.862059 2026] [:error] [pid 17808:tid 17813] [client 20.215.184.103:58831] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lov.php"] [unique_id "aes5auarbOEFI8qshvLzIwAAAEM"]
[Fri Apr 24 17:35:39.907551 2026] [:error] [pid 17721:tid 17782] [client 20.215.184.103:37581] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/knw.php"] [unique_id "aes5a-FXXkLeyDnfk_8O6QAAAAE"]
[Fri Apr 24 17:35:43.454732 2026] [:error] [pid 14531:tid 14540] [client 20.215.184.103:46169] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/knw.php"] [unique_id "aes5b3fLU2gw-6KR-GaSrwAAAUc"]
[Fri Apr 24 17:35:44.439651 2026] [:error] [pid 17719:tid 17729] [client 20.215.184.103:20548] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/knw.php"] [unique_id "aes5cMTZ9gzEyL1BkPqDBgAAAII"]
[Fri Apr 24 17:35:45.531426 2026] [:error] [pid 17720:tid 17756] [client 20.215.184.103:61400] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/knw.php"] [unique_id "aes5cehlUs6BS3Ng7_VP8wAAAMI"]
[Fri Apr 24 17:35:46.596042 2026] [:error] [pid 17720:tid 17765] [client 20.215.184.103:64471] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aes5cuhlUs6BS3Ng7_VP9wAAAMs"]
[Fri Apr 24 17:35:47.655502 2026] [:error] [pid 14531:tid 14552] [client 20.215.184.103:31128] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aes5c3fLU2gw-6KR-GaStAAAAVM"]
[Fri Apr 24 17:35:48.600378 2026] [:error] [pid 17808:tid 17815] [client 20.215.184.103:38849] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aes5dOarbOEFI8qshvLzKQAAAEU"]
[Fri Apr 24 17:35:49.338756 2026] [:error] [pid 17808:tid 17832] [client 20.215.184.103:23255] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fi.php"] [unique_id "aes5dearbOEFI8qshvLzLAAAAFY"]
[Fri Apr 24 17:35:50.113110 2026] [:error] [pid 14531:tid 14540] [client 20.215.184.103:46152] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aes5dnfLU2gw-6KR-GaStgAAAUc"]
[Fri Apr 24 17:35:51.228313 2026] [:error] [pid 14531:tid 14536] [client 20.215.184.103:17491] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aes5d3fLU2gw-6KR-GaSuAAAAUM"]
[Fri Apr 24 17:35:52.723315 2026] [:error] [pid 17721:tid 17783] [client 20.215.184.103:22180] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aes5eOFXXkLeyDnfk_8O9AAAAAI"]
[Fri Apr 24 17:35:54.055982 2026] [:error] [pid 17808:tid 17823] [client 20.215.184.103:4168] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jlex.php"] [unique_id "aes5euarbOEFI8qshvLzMAAAAE0"]
[Fri Apr 24 17:35:58.180713 2026] [:error] [pid 17808:tid 17825] [client 20.215.184.103:21095] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-k7djufwez2.php"] [unique_id "aes5fuarbOEFI8qshvLzOAAAAE8"]
[Fri Apr 24 17:36:00.020889 2026] [:error] [pid 17808:tid 17814] [client 20.215.184.103:18954] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-k7djufwez2.php"] [unique_id "aes5gOarbOEFI8qshvLzRAAAAEQ"]
[Fri Apr 24 17:36:02.810148 2026] [:error] [pid 17808:tid 17819] [client 20.215.184.103:38892] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-k7djufwez2.php"] [unique_id "aes5guarbOEFI8qshvLzUQAAAEk"]
[Fri Apr 24 17:36:06.267652 2026] [:error] [pid 17720:tid 17771] [client 20.215.184.103:17489] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-k7djufwez2.php"] [unique_id "aes5huhlUs6BS3Ng7_VQFQAAANE"]
[Fri Apr 24 17:36:10.887381 2026] [:error] [pid 17719:tid 17728] [client 20.215.184.103:18978] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tiroto.php"] [unique_id "aes5isTZ9gzEyL1BkPqDEwAAAIE"]
[Fri Apr 24 17:36:12.619090 2026] [:error] [pid 22114:tid 22117] [client 20.215.184.103:38873] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tiroto.php"] [unique_id "aes5jIAuWGz3WlMQjofNAgAAAQA"]
[Fri Apr 24 17:36:14.123541 2026] [:error] [pid 22114:tid 22140] [client 20.215.184.103:17482] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tiroto.php"] [unique_id "aes5joAuWGz3WlMQjofNBQAAARc"]
[Fri Apr 24 17:36:16.306953 2026] [:error] [pid 14531:tid 14533] [client 20.215.184.103:23286] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tiroto.php"] [unique_id "aes5kHfLU2gw-6KR-GaS0AAAAUA"]
[Fri Apr 24 17:36:19.821551 2026] [:error] [pid 17721:tid 17803] [client 20.215.184.103:22152] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son.php"] [unique_id "aes5k-FXXkLeyDnfk_8PCAAAABY"]
[Fri Apr 24 17:36:23.975307 2026] [:error] [pid 17808:tid 17823] [client 20.215.184.103:46147] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son.php"] [unique_id "aes5l-arbOEFI8qshvLzcgAAAE0"]
[Fri Apr 24 17:36:27.576317 2026] [:error] [pid 17808:tid 17810] [client 20.215.184.103:31151] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son.php"] [unique_id "aes5m-arbOEFI8qshvLzdgAAAEA"]
[Fri Apr 24 17:36:28.939978 2026] [:error] [pid 17808:tid 17828] [client 20.215.184.103:38859] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son.php"] [unique_id "aes5nOarbOEFI8qshvLzeQAAAFI"]
[Fri Apr 24 17:36:29.916490 2026] [:error] [pid 14531:tid 14557] [client 20.215.184.103:18991] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.php"] [unique_id "aes5nXfLU2gw-6KR-GaS4QAAAVg"]
[Fri Apr 24 17:36:39.689674 2026] [:error] [pid 14531:tid 14540] [client 20.215.184.103:47668] [client 20.215.184.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aes5p3fLU2gw-6KR-GaS7AAAAUc"]
[Fri Apr 24 17:36:47.038041 2026] [:error] [pid 17720:tid 17754] [client 20.215.184.103:23281] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tramuibs.php"] [unique_id "aes5r-hlUs6BS3Ng7_VQWAAAAMA"]
[Fri Apr 24 17:36:48.877318 2026] [:error] [pid 17721:tid 17797] [client 20.215.184.103:58199] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tramuibs.php"] [unique_id "aes5sOFXXkLeyDnfk_8PNAAAABA"]
[Fri Apr 24 17:36:50.246586 2026] [:error] [pid 14531:tid 14552] [client 20.215.184.103:19019] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tramuibs.php"] [unique_id "aes5snfLU2gw-6KR-GaS7wAAAVM"]
[Fri Apr 24 17:36:50.954914 2026] [:error] [pid 17720:tid 17768] [client 20.215.184.103:23279] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tramuibs.php"] [unique_id "aes5suhlUs6BS3Ng7_VQagAAAM4"]
[Fri Apr 24 17:36:51.923172 2026] [:error] [pid 17808:tid 17832] [client 20.215.184.103:21115] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "aes5s-arbOEFI8qshvLzjQAAAFY"]
[Fri Apr 24 17:36:52.623001 2026] [:error] [pid 22114:tid 22133] [client 20.215.184.103:17497] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "aes5tIAuWGz3WlMQjofNGAAAARA"]
[Fri Apr 24 17:36:53.833351 2026] [:error] [pid 22114:tid 22118] [client 20.215.184.103:63989] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "aes5tYAuWGz3WlMQjofNGwAAAQE"]
[Fri Apr 24 17:36:55.420824 2026] [:error] [pid 22114:tid 22120] [client 20.215.184.103:56157] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/19.php"] [unique_id "aes5t4AuWGz3WlMQjofNIAAAAQM"]
[Fri Apr 24 17:36:56.100929 2026] [:error] [pid 17720:tid 17776] [client 20.215.184.103:63993] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aes5uOhlUs6BS3Ng7_VQcAAAANY"]
[Fri Apr 24 17:36:56.992795 2026] [:error] [pid 17720:tid 17775] [client 20.215.184.103:48154] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aes5uOhlUs6BS3Ng7_VQdgAAANU"]
[Fri Apr 24 17:36:57.967522 2026] [:error] [pid 17808:tid 17834] [client 20.215.184.103:23292] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aes5uearbOEFI8qshvLzlQAAAFg"]
[Fri Apr 24 17:36:58.848505 2026] [:error] [pid 14531:tid 14546] [client 20.215.184.103:21081] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "aes5unfLU2gw-6KR-GaS8QAAAU0"]
[Fri Apr 24 17:36:59.721121 2026] [:error] [pid 17720:tid 17775] [client 20.215.184.103:38218] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bpxrn.php"] [unique_id "aes5u-hlUs6BS3Ng7_VQgwAAANU"]
[Fri Apr 24 17:37:01.399803 2026] [:error] [pid 17719:tid 17745] [client 20.215.184.103:19018] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bpxrn.php"] [unique_id "aes5vcTZ9gzEyL1BkPqDPgAAAJI"]
[Fri Apr 24 17:37:02.135081 2026] [:error] [pid 17719:tid 17750] [client 20.215.184.103:4584] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bpxrn.php"] [unique_id "aes5vsTZ9gzEyL1BkPqDQQAAAJc"]
[Fri Apr 24 17:37:03.079281 2026] [:error] [pid 17808:tid 17830] [client 20.215.184.103:26706] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bpxrn.php"] [unique_id "aes5v-arbOEFI8qshvLzmQAAAFQ"]
[Fri Apr 24 17:37:04.675174 2026] [:error] [pid 17720:tid 17775] [client 20.215.184.103:48178] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aes5wOhlUs6BS3Ng7_VQiwAAANU"]
[Fri Apr 24 17:37:05.939834 2026] [:error] [pid 17808:tid 17811] [client 20.215.184.103:26730] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aes5wearbOEFI8qshvLzpQAAAEE"]
[Fri Apr 24 17:37:07.189298 2026] [:error] [pid 22114:tid 22120] [client 20.215.184.103:26024] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "aes5w4AuWGz3WlMQjofNJwAAAQM"]
[Fri Apr 24 17:38:01.183534 2026] [:error] [pid 14531:tid 14535] [client 20.215.184.103:40817] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bkxzo.php"] [unique_id "aes5-XfLU2gw-6KR-GaTJQAAAUI"]
[Fri Apr 24 17:38:02.627804 2026] [:error] [pid 17719:tid 17737] [client 20.215.184.103:43063] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bkxzo.php"] [unique_id "aes5-sTZ9gzEyL1BkPqDmQAAAIo"]
[Fri Apr 24 17:38:03.780317 2026] [:error] [pid 17719:tid 17748] [client 20.215.184.103:43008] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bkxzo.php"] [unique_id "aes5-8TZ9gzEyL1BkPqDnQAAAJU"]
[Fri Apr 24 17:38:05.390199 2026] [:error] [pid 14531:tid 14553] [client 20.215.184.103:41950] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bkxzo.php"] [unique_id "aes5_XfLU2gw-6KR-GaTJwAAAVQ"]
[Fri Apr 24 17:38:06.615735 2026] [:error] [pid 17720:tid 17767] [client 20.215.184.103:43027] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdxadmin.php"] [unique_id "aes5_uhlUs6BS3Ng7_VQ_QAAAM0"]
[Fri Apr 24 17:38:07.544495 2026] [:error] [pid 22114:tid 22123] [client 20.215.184.103:34984] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdxadmin.php"] [unique_id "aes5_4AuWGz3WlMQjofNhgAAAQY"]
[Fri Apr 24 17:38:08.842531 2026] [:error] [pid 17720:tid 17758] [client 20.215.184.103:34989] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdxadmin.php"] [unique_id "aes6AOhlUs6BS3Ng7_VRAgAAAMQ"]
[Fri Apr 24 17:38:11.373392 2026] [:error] [pid 17808:tid 17832] [client 20.215.184.103:40802] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cdxadmin.php"] [unique_id "aes6A-arbOEFI8qshvL0GgAAAFY"]
[Fri Apr 24 17:38:14.879866 2026] [:error] [pid 17721:tid 17793] [client 20.215.184.103:43070] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dfre.php"] [unique_id "aes6BuFXXkLeyDnfk_8PqQAAAAw"]
[Fri Apr 24 17:38:15.832713 2026] [:error] [pid 17720:tid 17777] [client 20.215.184.103:28021] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dfre.php"] [unique_id "aes6B-hlUs6BS3Ng7_VRBgAAANc"]
[Fri Apr 24 17:38:17.261447 2026] [:error] [pid 17808:tid 17810] [client 20.215.184.103:30578] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dfre.php"] [unique_id "aes6CearbOEFI8qshvL0KQAAAEA"]
[Fri Apr 24 17:38:18.097478 2026] [:error] [pid 17721:tid 17784] [client 20.215.184.103:23718] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dfre.php"] [unique_id "aes6CuFXXkLeyDnfk_8PqwAAAAM"]
[Fri Apr 24 17:38:20.269282 2026] [:error] [pid 17720:tid 17759] [client 20.215.184.103:34963] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sko.php"] [unique_id "aes6DOhlUs6BS3Ng7_VRDAAAAMU"]
[Fri Apr 24 17:38:21.437806 2026] [:error] [pid 17721:tid 17783] [client 20.215.184.103:43133] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sko.php"] [unique_id "aes6DeFXXkLeyDnfk_8PsgAAAAI"]
[Fri Apr 24 17:38:23.538739 2026] [:error] [pid 17720:tid 17767] [client 20.215.184.103:27999] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sko.php"] [unique_id "aes6D-hlUs6BS3Ng7_VRDgAAAM0"]
[Fri Apr 24 17:38:24.539593 2026] [:error] [pid 17808:tid 17832] [client 20.215.184.103:60166] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sko.php"] [unique_id "aes6EOarbOEFI8qshvL0LwAAAFY"]
[Fri Apr 24 17:38:25.467802 2026] [:error] [pid 17719:tid 17749] [client 20.215.184.103:23729] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shorw.php"] [unique_id "aes6EcTZ9gzEyL1BkPqDtQAAAJY"]
[Fri Apr 24 17:38:27.614271 2026] [:error] [pid 17720:tid 17777] [client 20.215.184.103:43581] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shorw.php"] [unique_id "aes6E-hlUs6BS3Ng7_VREwAAANc"]
[Fri Apr 24 17:38:29.117422 2026] [:error] [pid 14531:tid 14534] [client 20.215.184.103:23722] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shorw.php"] [unique_id "aes6FXfLU2gw-6KR-GaTQgAAAUE"]
[Fri Apr 24 17:38:30.822160 2026] [:error] [pid 14531:tid 14542] [client 20.215.184.103:23723] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shorw.php"] [unique_id "aes6FnfLU2gw-6KR-GaTRgAAAUk"]
[Fri Apr 24 17:38:32.523039 2026] [:error] [pid 17720:tid 17754] [client 20.215.184.103:43055] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shelp.php"] [unique_id "aes6GOhlUs6BS3Ng7_VRFgAAAMA"]
[Fri Apr 24 17:38:33.274550 2026] [:error] [pid 17808:tid 17827] [client 20.215.184.103:43531] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shelp.php"] [unique_id "aes6GearbOEFI8qshvL0NQAAAFE"]
[Fri Apr 24 17:38:34.693856 2026] [:error] [pid 14531:tid 14553] [client 20.215.184.103:57683] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shelp.php"] [unique_id "aes6GnfLU2gw-6KR-GaTSQAAAVQ"]
[Fri Apr 24 17:38:46.674735 2026] [:error] [pid 17721:tid 17795] [client 20.215.184.103:57778] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seyv.php"] [unique_id "aes6JuFXXkLeyDnfk_8PuwAAAA4"]
[Fri Apr 24 17:38:47.564352 2026] [:error] [pid 17721:tid 17784] [client 20.215.184.103:19569] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seyv.php"] [unique_id "aes6J-FXXkLeyDnfk_8PvAAAAAM"]
[Fri Apr 24 17:38:49.085568 2026] [:error] [pid 17719:tid 17737] [client 20.215.184.103:55314] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seyv.php"] [unique_id "aes6KcTZ9gzEyL1BkPqDwQAAAIo"]
[Fri Apr 24 17:38:50.939711 2026] [:error] [pid 17720:tid 17756] [client 20.215.184.103:4406] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seyv.php"] [unique_id "aes6KuhlUs6BS3Ng7_VRJgAAAMI"]
[Fri Apr 24 17:38:51.861566 2026] [:error] [pid 17720:tid 17754] [client 20.215.184.103:57703] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad821.php"] [unique_id "aes6K-hlUs6BS3Ng7_VRKAAAAMA"]
[Fri Apr 24 17:38:53.158017 2026] [:error] [pid 14531:tid 14549] [client 20.215.184.103:30563] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad821.php"] [unique_id "aes6LXfLU2gw-6KR-GaTYQAAAVA"]
[Fri Apr 24 17:38:55.435837 2026] [:error] [pid 17721:tid 17799] [client 20.215.184.103:55296] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad821.php"] [unique_id "aes6L-FXXkLeyDnfk_8PwQAAABI"]
[Fri Apr 24 17:38:57.442313 2026] [:error] [pid 17721:tid 17801] [client 20.215.184.103:54261] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad821.php"] [unique_id "aes6MeFXXkLeyDnfk_8PyAAAABQ"]
[Fri Apr 24 17:38:59.150537 2026] [:error] [pid 14531:tid 14541] [client 20.215.184.103:4398] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sad8210.php"] [unique_id "aes6M3fLU2gw-6KR-GaTawAAAUg"]
[Fri Apr 24 17:39:21.282753 2026] [:error] [pid 17720:tid 17773] [client 20.215.184.103:23743] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aes6SehlUs6BS3Ng7_VRbgAAANM"]
[Fri Apr 24 17:39:22.581719 2026] [:error] [pid 17719:tid 17749] [client 20.215.184.103:58257] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aes6SsTZ9gzEyL1BkPqDzwAAAJY"]
[Fri Apr 24 17:39:24.645197 2026] [:error] [pid 17720:tid 17762] [client 20.215.184.103:57732] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aes6TOhlUs6BS3Ng7_VRcgAAAMg"]
[Fri Apr 24 17:39:25.868896 2026] [:error] [pid 17720:tid 17763] [client 20.215.184.103:4662] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ortasekerli1.php"] [unique_id "aes6TehlUs6BS3Ng7_VRdwAAAMk"]
[Fri Apr 24 17:39:27.347145 2026] [:error] [pid 17720:tid 17757] [client 20.215.184.103:58254] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxa.php"] [unique_id "aes6T-hlUs6BS3Ng7_VReAAAAMM"]
[Fri Apr 24 17:39:28.307470 2026] [:error] [pid 17721:tid 17785] [client 20.215.184.103:4389] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxa.php"] [unique_id "aes6UOFXXkLeyDnfk_8P2gAAAAQ"]
[Fri Apr 24 17:39:30.040877 2026] [:error] [pid 14531:tid 14556] [client 20.215.184.103:47281] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxa.php"] [unique_id "aes6UnfLU2gw-6KR-GaTdgAAAVc"]
[Fri Apr 24 17:39:30.937438 2026] [:error] [pid 17721:tid 17802] [client 20.215.184.103:53257] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxa.php"] [unique_id "aes6UuFXXkLeyDnfk_8P3AAAABU"]
[Fri Apr 24 17:39:32.002705 2026] [:error] [pid 22114:tid 22138] [client 20.215.184.103:4357] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file6.php"] [unique_id "aes6VIAuWGz3WlMQjofNsAAAARU"]
[Fri Apr 24 17:39:33.238569 2026] [:error] [pid 17720:tid 17755] [client 20.215.184.103:52710] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file6.php"] [unique_id "aes6VehlUs6BS3Ng7_VRfQAAAME"]
[Fri Apr 24 17:39:33.964085 2026] [:error] [pid 14531:tid 14555] [client 20.215.184.103:33118] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file6.php"] [unique_id "aes6VXfLU2gw-6KR-GaTewAAAVY"]
[Fri Apr 24 17:39:35.369730 2026] [:error] [pid 17720:tid 17764] [client 20.215.184.103:63920] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file6.php"] [unique_id "aes6V-hlUs6BS3Ng7_VRgAAAAMo"]
[Fri Apr 24 17:39:36.940786 2026] [:error] [pid 17720:tid 17777] [client 20.215.184.103:39501] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asyn-upload.php"] [unique_id "aes6WOhlUs6BS3Ng7_VRiAAAANc"]
[Fri Apr 24 17:39:39.847316 2026] [:error] [pid 17720:tid 17766] [client 20.215.184.103:61443] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asyn-upload.php"] [unique_id "aes6W-hlUs6BS3Ng7_VRlAAAAMw"]
[Fri Apr 24 17:39:40.939344 2026] [:error] [pid 14531:tid 14547] [client 20.215.184.103:4642] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asyn-upload.php"] [unique_id "aes6XHfLU2gw-6KR-GaTigAAAU4"]
[Fri Apr 24 17:39:42.697923 2026] [:error] [pid 17808:tid 17834] [client 20.215.184.103:4743] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asyn-upload.php"] [unique_id "aes6XuarbOEFI8qshvL0cgAAAFg"]
[Fri Apr 24 17:39:44.604798 2026] [:error] [pid 17720:tid 17760] [client 20.215.184.103:53253] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/redixsx.php"] [unique_id "aes6YOhlUs6BS3Ng7_VRpgAAAMY"]
[Fri Apr 24 17:39:45.849254 2026] [:error] [pid 17720:tid 17757] [client 20.215.184.103:52279] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/redixsx.php"] [unique_id "aes6YehlUs6BS3Ng7_VRrQAAAMM"]
[Fri Apr 24 17:39:46.792732 2026] [:error] [pid 17808:tid 17827] [client 20.215.184.103:39498] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/redixsx.php"] [unique_id "aes6YuarbOEFI8qshvL0dwAAAFE"]
[Fri Apr 24 17:39:48.573741 2026] [:error] [pid 17808:tid 17819] [client 20.215.184.103:61480] [client 20.215.184.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/redixsx.php"] [unique_id "aes6ZOarbOEFI8qshvL0egAAAEk"]
[Fri Apr 24 18:03:03.437103 2026] [:error] [pid 4177:tid 4208] [client 49.51.203.164:48838] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aes_132asKnvdrSe0x6pCQAAAZc"]
[Fri Apr 24 18:24:04.991248 2026] [:error] [pid 4177:tid 4206] [client 195.178.110.241:46496] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aetExH2asKnvdrSe0x61agAAAZU"]
[Fri Apr 24 19:19:06.470813 2026] [:error] [pid 4177:tid 4195] [client 178.159.208.52:43764] [client 178.159.208.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.159.208.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetRqn2asKnvdrSe0x7YzgAAAYo"]
[Fri Apr 24 19:19:16.685614 2026] [:error] [pid 17720:tid 17755] [client 178.159.208.52:14821] [client 178.159.208.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.159.208.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetRtOhlUs6BS3Ng7_WBOQAAAME"]
[Fri Apr 24 19:19:27.331994 2026] [:error] [pid 17720:tid 17773] [client 178.159.208.52:59129] [client 178.159.208.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.159.208.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetRv-hlUs6BS3Ng7_WBXQAAANM"]
[Fri Apr 24 19:19:38.031707 2026] [:error] [pid 4177:tid 4203] [client 178.159.208.52:35697] [client 178.159.208.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.159.208.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetRyn2asKnvdrSe0x7ZOgAAAZI"]
[Fri Apr 24 19:19:48.705344 2026] [:error] [pid 17720:tid 17778] [client 178.159.208.52:59374] [client 178.159.208.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.159.208.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetR1OhlUs6BS3Ng7_WBjgAAANg"]
[Fri Apr 24 19:55:10.138206 2026] [:error] [pid 17720:tid 17763] [client 122.177.243.8:26930] [client 122.177.243.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.177.243.8, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetaHuhlUs6BS3Ng7_WQsQAAAMk"]
[Fri Apr 24 19:55:20.593854 2026] [:error] [pid 17720:tid 17776] [client 122.177.243.8:6697] [client 122.177.243.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.177.243.8, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetaKOhlUs6BS3Ng7_WQygAAANY"]
[Fri Apr 24 19:55:31.205286 2026] [:error] [pid 14531:tid 14545] [client 122.177.243.8:26239] [client 122.177.243.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.177.243.8, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetaM3fLU2gw-6KR-Ga8fQAAAUw"]
[Fri Apr 24 19:55:42.036655 2026] [:error] [pid 14531:tid 14542] [client 122.177.243.8:13550] [client 122.177.243.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.177.243.8, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetaPnfLU2gw-6KR-Ga8kAAAAUk"]
[Fri Apr 24 19:55:52.687885 2026] [:error] [pid 22114:tid 22128] [client 122.177.243.8:8820] [client 122.177.243.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.177.243.8, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetaSIAuWGz3WlMQjofkCAAAAQs"]
[Fri Apr 24 20:47:40.942485 2026] [:error] [pid 17721:tid 17782] [client 168.195.27.195:3279] [client 168.195.27.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.195.27.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetmbOFXXkLeyDnfk_87vgAAAAE"]
[Fri Apr 24 20:47:50.272436 2026] [:error] [pid 4177:tid 4190] [client 168.195.27.195:32152] [client 168.195.27.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.195.27.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aetmdn2asKnvdrSe0x4OFwAAAYU"]
[Fri Apr 24 21:19:50.453415 2026] [:error] [pid 17721:tid 17801] [client 103.142.255.218:36564] [client 103.142.255.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.142.255.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aett9uFXXkLeyDnfk_9DJAAAABQ"]
[Fri Apr 24 21:33:06.995258 2026] [:error] [pid 14531:tid 14548] [client 103.28.36.205:37434] [client 103.28.36.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.205, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aetxEnfLU2gw-6KR-GbUKgAAAU8"]
[Fri Apr 24 21:33:07.936596 2026] [proxy_fcgi:error] [pid 14531:tid 14548] [client 103.28.36.205:37434] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 24 21:33:08.615412 2026] [:error] [pid 14531:tid 14546] [client 103.28.36.205:37434] [client 103.28.36.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.205, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aetxFHfLU2gw-6KR-GbUKwAAAU0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 24 21:33:09.683397 2026] [proxy_fcgi:error] [pid 14531:tid 14546] [client 103.28.36.205:37434] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 24 21:56:02.354945 2026] [:error] [pid 17808:tid 17814] [client 104.28.163.206:27529] [client 104.28.163.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.163.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aet2cuarbOEFI8qshvJOdQAAAEQ"]
[Fri Apr 24 21:56:12.147093 2026] [:error] [pid 17719:tid 17739] [client 104.28.163.206:27539] [client 104.28.163.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.163.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aet2fMTZ9gzEyL1BkPq4RwAAAIw"]
[Fri Apr 24 21:56:22.383409 2026] [:error] [pid 14531:tid 14550] [client 104.28.163.206:27603] [client 104.28.163.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.163.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aet2hnfLU2gw-6KR-GbazAAAAVE"]
[Fri Apr 24 21:56:32.911056 2026] [:error] [pid 22114:tid 22126] [client 104.28.163.206:28795] [client 104.28.163.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.163.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aet2kIAuWGz3WlMQjof4kgAAAQk"]
[Fri Apr 24 21:56:43.405949 2026] [:error] [pid 17720:tid 17756] [client 104.28.163.206:28022] [client 104.28.163.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.163.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aet2m-hlUs6BS3Ng7_XBcQAAAMI"]
[Fri Apr 24 22:07:39.821727 2026] [:error] [pid 4177:tid 4188] [client 220.158.234.125:5634] [client 220.158.234.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.234.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aet5K32asKnvdrSe0x5AeAAAAYM"]
[Fri Apr 24 22:07:40.648313 2026] [proxy_fcgi:error] [pid 4177:tid 4188] [client 220.158.234.125:5634] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 24 22:07:42.964514 2026] [:error] [pid 4177:tid 4201] [client 220.158.234.125:5634] [client 220.158.234.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 220.158.234.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aet5Ln2asKnvdrSe0x5AfAAAAZA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 24 22:07:43.992363 2026] [proxy_fcgi:error] [pid 4177:tid 4201] [client 220.158.234.125:5634] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 24 22:10:53.260328 2026] [:error] [pid 4177:tid 4207] [client 98.130.43.189:59322] [client 98.130.43.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.130.43.189, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aet57X2asKnvdrSe0x5CAAAAAZY"]
[Fri Apr 24 22:10:54.161789 2026] [proxy_fcgi:error] [pid 4177:tid 4207] [client 98.130.43.189:59322] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 24 22:10:54.459462 2026] [:error] [pid 4177:tid 4200] [client 98.130.43.189:59322] [client 98.130.43.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.130.43.189, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aet57n2asKnvdrSe0x5CCQAAAY8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 24 22:10:55.542387 2026] [proxy_fcgi:error] [pid 4177:tid 4200] [client 98.130.43.189:59322] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 24 22:44:44.864967 2026] [:error] [pid 4177:tid 4186] [client 87.106.4.225:50390] [client 87.106.4.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.106.4.225, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeuB3H2asKnvdrSe0x5S1gAAAYE"]
[Fri Apr 24 22:44:45.768416 2026] [proxy_fcgi:error] [pid 4177:tid 4186] [client 87.106.4.225:50390] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri Apr 24 22:44:46.077699 2026] [:error] [pid 4177:tid 4198] [client 87.106.4.225:50390] [client 87.106.4.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.106.4.225, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeuB3n2asKnvdrSe0x5S1wAAAY0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 24 22:44:47.151695 2026] [proxy_fcgi:error] [pid 4177:tid 4198] [client 87.106.4.225:50390] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri Apr 24 23:13:51.243590 2026] [:error] [pid 14531:tid 14552] [client 103.81.182.178:38853] [client 103.81.182.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.182.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuIr3fLU2gw-6KR-GbvhgAAAVM"]
[Fri Apr 24 23:14:01.323623 2026] [:error] [pid 17719:tid 17727] [client 103.81.182.178:37910] [client 103.81.182.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.182.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuIucTZ9gzEyL1BkPrFtwAAAIA"]
[Fri Apr 24 23:14:11.896689 2026] [:error] [pid 17808:tid 17815] [client 103.81.182.178:37964] [client 103.81.182.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.182.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuIw-arbOEFI8qshvJvwgAAAEU"]
[Fri Apr 24 23:14:22.567785 2026] [:error] [pid 17719:tid 17731] [client 103.81.182.178:37692] [client 103.81.182.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.182.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuIzsTZ9gzEyL1BkPrFxwAAAIQ"]
[Fri Apr 24 23:14:33.093545 2026] [:error] [pid 4177:tid 4208] [client 103.81.182.178:38610] [client 103.81.182.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.182.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuI2X2asKnvdrSe0x5btgAAAZc"]
[Fri Apr 24 23:16:19.794942 2026] [:error] [pid 17719:tid 17741] [client 179.93.64.103:27265] [client 179.93.64.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.93.64.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuJQ8TZ9gzEyL1BkPrF8wAAAI4"]
[Fri Apr 24 23:16:29.227327 2026] [:error] [pid 17721:tid 17795] [client 179.93.64.103:53789] [client 179.93.64.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.93.64.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuJTeFXXkLeyDnfk_9gyQAAAA4"]
[Fri Apr 24 23:16:39.736373 2026] [:error] [pid 17721:tid 17798] [client 179.93.64.103:54219] [client 179.93.64.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.93.64.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuJV-FXXkLeyDnfk_9g8AAAABE"]
[Fri Apr 24 23:16:50.222254 2026] [:error] [pid 17721:tid 17801] [client 179.93.64.103:28903] [client 179.93.64.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.93.64.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuJYuFXXkLeyDnfk_9hDwAAABQ"]
[Fri Apr 24 23:17:00.733327 2026] [:error] [pid 17720:tid 17767] [client 179.93.64.103:54793] [client 179.93.64.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.93.64.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuJbOhlUs6BS3Ng7_XpgQAAAM0"]
[Fri Apr 24 23:29:33.648485 2026] [:error] [pid 4177:tid 4193] [client 209.126.9.214:37520] [client 209.126.9.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.126.9.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuMXX2asKnvdrSe0x5d4wAAAYg"]
[Sat Apr 25 00:16:10.831489 2026] [:error] [pid 42852:tid 42855] [client 199.167.147.66:42240] [client 199.167.147.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 199.167.147.66, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuXSjMEwxhhak_EhMJpwAAAAkA"]
[Sat Apr 25 00:28:34.782388 2026] [:error] [pid 42791:tid 42799] [client 152.58.187.15:49391] [client 152.58.187.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.187.15, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuaMrKmN9doraCEWKXacwAAAcQ"]
[Sat Apr 25 00:28:45.588368 2026] [:error] [pid 42755:tid 42761] [client 152.58.187.15:21255] [client 152.58.187.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.187.15, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuaPdH7__k0j6aa6031dgAAAIQ"]
[Sat Apr 25 00:28:55.584263 2026] [:error] [pid 42792:tid 42831] [client 152.58.189.81:50041] [client 152.58.189.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.189.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuaR9Ni9qR4GtafpfHELAAAAgk"]
[Sat Apr 25 00:29:05.994838 2026] [:error] [pid 42852:tid 42872] [client 152.58.189.81:50339] [client 152.58.189.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.189.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuaUTMEwxhhak_EhMJ0EAAAAlE"]
[Sat Apr 25 00:29:16.858324 2026] [:error] [pid 42852:tid 42872] [client 152.58.189.81:50670] [client 152.58.189.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.189.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuaXDMEwxhhak_EhMJ0NwAAAlE"]
[Sat Apr 25 00:29:27.736107 2026] [:error] [pid 42791:tid 42798] [client 152.58.189.81:50988] [client 152.58.189.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.189.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuaZ7KmN9doraCEWKXaxgAAAcM"]
[Sat Apr 25 00:29:38.598472 2026] [:error] [pid 42792:tid 42841] [client 152.58.189.81:51308] [client 152.58.189.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.189.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeuactNi9qR4GtafpfHEfgAAAhM"]
[Sat Apr 25 00:47:01.952599 2026] [:error] [pid 42791:tid 42815] [client 103.152.165.165:22646] [client 103.152.165.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.152.165.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeuehbKmN9doraCEWKXhiQAAAdQ"]
[Sat Apr 25 00:47:02.866332 2026] [proxy_fcgi:error] [pid 42791:tid 42815] [client 103.152.165.165:22646] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 00:47:03.312054 2026] [:error] [pid 42791:tid 42803] [client 103.152.165.165:22646] [client 103.152.165.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.152.165.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeueh7KmN9doraCEWKXhjwAAAcg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 00:47:04.386637 2026] [proxy_fcgi:error] [pid 42791:tid 42803] [client 103.152.165.165:22646] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 01:07:36.713300 2026] [:error] [pid 42852:tid 42856] [client 105.235.4.167:51780] [client 105.235.4.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.4.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeujWDMEwxhhak_EhMKK0QAAAkE"]
[Sat Apr 25 01:07:46.916624 2026] [:error] [pid 42852:tid 42865] [client 105.235.4.167:52040] [client 105.235.4.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.4.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeujYjMEwxhhak_EhMKK_gAAAko"]
[Sat Apr 25 01:07:50.124715 2026] [:error] [pid 42791:tid 42813] [client 74.208.58.227:41764] [client 74.208.58.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.208.58.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeujZrKmN9doraCEWKXn_AAAAdI"]
[Sat Apr 25 01:07:57.796681 2026] [:error] [pid 14989:tid 14994] [client 105.235.4.167:52315] [client 105.235.4.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.4.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeujbXhRYjsAsZTO4EOPugAAAAM"]
[Sat Apr 25 01:08:08.828376 2026] [:error] [pid 42852:tid 42863] [client 105.235.4.167:52611] [client 105.235.4.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.4.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeujeDMEwxhhak_EhMKLDwAAAkg"]
[Sat Apr 25 01:08:19.995696 2026] [:error] [pid 42792:tid 42833] [client 105.235.4.167:52897] [client 105.235.4.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.4.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeujg9Ni9qR4GtafpfHVYAAAAgs"]
[Sat Apr 25 01:22:29.976504 2026] [:error] [pid 42792:tid 42824] [client 103.249.114.160:61259] [client 103.249.114.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.114.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeum1dNi9qR4GtafpfHaVgAAAgI"]
[Sat Apr 25 01:22:40.198595 2026] [:error] [pid 42852:tid 42873] [client 103.249.114.160:61819] [client 103.249.114.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.114.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeum4DMEwxhhak_EhMKTDQAAAlI"]
[Sat Apr 25 01:22:50.793290 2026] [:error] [pid 42755:tid 42778] [client 103.249.114.160:62167] [client 103.249.114.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.114.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeum6tH7__k0j6aa600EpwAAAJU"]
[Sat Apr 25 01:23:01.440811 2026] [:error] [pid 42755:tid 42762] [client 103.249.114.160:62526] [client 103.249.114.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.114.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeum9dH7__k0j6aa600EsQAAAIU"]
[Sat Apr 25 01:23:12.192035 2026] [:error] [pid 42755:tid 42761] [client 103.249.114.160:62883] [client 103.249.114.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.114.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeunANH7__k0j6aa600EuQAAAIQ"]
[Sat Apr 25 01:46:50.198544 2026] [:error] [pid 42791:tid 42800] [client 158.158.74.32:26412] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pinfo.php"] [unique_id "aeusirKmN9doraCEWKX05QAAAcU"]
[Sat Apr 25 01:46:51.528060 2026] [:error] [pid 42852:tid 42876] [client 158.158.74.32:51490] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pinfo.php"] [unique_id "aeusizMEwxhhak_EhMKeOwAAAlU"]
[Sat Apr 25 01:46:52.460122 2026] [:error] [pid 14989:tid 15003] [client 158.158.74.32:30972] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pinfo.php"] [unique_id "aeusjHhRYjsAsZTO4EOmfgAAAAw"]
[Sat Apr 25 01:46:53.537534 2026] [:error] [pid 42755:tid 42765] [client 158.158.74.32:48049] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pinfo.php"] [unique_id "aeusjdH7__k0j6aa600J1AAAAIg"]
[Sat Apr 25 01:46:55.302510 2026] [:error] [pid 42791:tid 42809] [client 158.158.74.32:4380] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/litespeed.php"] [unique_id "aeusj7KmN9doraCEWKX1CgAAAc4"]
[Sat Apr 25 01:47:01.049884 2026] [:error] [pid 42791:tid 42799] [client 158.158.74.32:40308] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/litespeed.php"] [unique_id "aeuslbKmN9doraCEWKX1MQAAAcQ"]
[Sat Apr 25 01:47:02.615732 2026] [:error] [pid 42792:tid 42824] [client 158.158.74.32:40306] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/litespeed.php"] [unique_id "aeusltNi9qR4GtafpfHhDQAAAgI"]
[Sat Apr 25 01:47:03.578011 2026] [:error] [pid 42852:tid 42879] [client 158.158.74.32:4361] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/litespeed.php"] [unique_id "aeuslzMEwxhhak_EhMKeUQAAAlg"]
[Sat Apr 25 01:47:04.813517 2026] [:error] [pid 42792:tid 42827] [client 158.158.74.32:42970] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/environments.php"] [unique_id "aeusmNNi9qR4GtafpfHhDwAAAgU"]
[Sat Apr 25 01:47:05.529306 2026] [:error] [pid 14989:tid 15007] [client 158.158.74.32:40287] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/environments.php"] [unique_id "aeusmXhRYjsAsZTO4EOmqQAAABA"]
[Sat Apr 25 01:47:06.677268 2026] [:error] [pid 42792:tid 42831] [client 158.158.74.32:47495] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/environments.php"] [unique_id "aeusmtNi9qR4GtafpfHhEQAAAgk"]
[Sat Apr 25 01:47:07.587050 2026] [:error] [pid 14989:tid 14997] [client 158.158.74.32:39592] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/environments.php"] [unique_id "aeusm3hRYjsAsZTO4EOmtgAAAAY"]
[Sat Apr 25 01:47:08.944201 2026] [:error] [pid 42852:tid 42856] [client 158.158.74.32:47498] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/raf.php"] [unique_id "aeusnDMEwxhhak_EhMKeXgAAAkE"]
[Sat Apr 25 01:47:09.803106 2026] [:error] [pid 42792:tid 42839] [client 158.158.74.32:30966] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/raf.php"] [unique_id "aeusndNi9qR4GtafpfHhGQAAAhE"]
[Sat Apr 25 01:47:10.770895 2026] [:error] [pid 42792:tid 42824] [client 158.158.74.32:58039] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/raf.php"] [unique_id "aeusntNi9qR4GtafpfHhHQAAAgI"]
[Sat Apr 25 01:47:11.984609 2026] [:error] [pid 42755:tid 42759] [client 158.158.74.32:51953] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/raf.php"] [unique_id "aeusn9H7__k0j6aa600J7AAAAII"]
[Sat Apr 25 01:47:13.351565 2026] [:error] [pid 42792:tid 42840] [client 158.158.74.32:28608] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "aeusodNi9qR4GtafpfHhIQAAAhI"]
[Sat Apr 25 01:47:14.173890 2026] [:error] [pid 42852:tid 42870] [client 158.158.74.32:42962] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "aeusojMEwxhhak_EhMKedQAAAk8"]
[Sat Apr 25 01:47:15.148525 2026] [:error] [pid 42792:tid 42824] [client 158.158.74.32:57998] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "aeuso9Ni9qR4GtafpfHhKgAAAgI"]
[Sat Apr 25 01:47:16.603692 2026] [:error] [pid 42852:tid 42867] [client 158.158.74.32:28649] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "aeuspDMEwxhhak_EhMKehAAAAkw"]
[Sat Apr 25 01:47:17.545423 2026] [:error] [pid 42792:tid 42842] [client 158.158.74.32:32398] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/infos.php"] [unique_id "aeuspdNi9qR4GtafpfHhLwAAAhQ"]
[Sat Apr 25 01:47:18.329708 2026] [:error] [pid 42852:tid 42862] [client 158.158.74.32:28667] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/infos.php"] [unique_id "aeuspjMEwxhhak_EhMKeiAAAAkc"]
[Sat Apr 25 01:47:19.051038 2026] [:error] [pid 42852:tid 42879] [client 158.158.74.32:62993] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/infos.php"] [unique_id "aeuspzMEwxhhak_EhMKeiwAAAlg"]
[Sat Apr 25 01:47:19.625874 2026] [:error] [pid 42755:tid 42769] [client 158.158.74.32:44860] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/infos.php"] [unique_id "aeusp9H7__k0j6aa600KEgAAAIw"]
[Sat Apr 25 01:47:20.311252 2026] [:error] [pid 42792:tid 42823] [client 158.158.74.32:61960] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws.php"] [unique_id "aeusqNNi9qR4GtafpfHhOAAAAgE"]
[Sat Apr 25 01:47:20.879085 2026] [:error] [pid 14989:tid 15015] [client 158.158.74.32:42979] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws.php"] [unique_id "aeusqHhRYjsAsZTO4EOm3gAAABg"]
[Sat Apr 25 01:47:21.853869 2026] [:error] [pid 14989:tid 14993] [client 158.158.74.32:61991] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws.php"] [unique_id "aeusqXhRYjsAsZTO4EOm6AAAAAI"]
[Sat Apr 25 01:47:23.096693 2026] [:error] [pid 42755:tid 42762] [client 158.158.74.32:58031] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aws.php"] [unique_id "aeusq9H7__k0j6aa600KIwAAAIU"]
[Sat Apr 25 01:47:23.910792 2026] [:error] [pid 14989:tid 15000] [client 158.158.74.32:27885] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/embed.php"] [unique_id "aeusq3hRYjsAsZTO4EOnAgAAAAk"]
[Sat Apr 25 01:47:24.521060 2026] [:error] [pid 42852:tid 42863] [client 158.158.74.32:44814] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/embed.php"] [unique_id "aeusrDMEwxhhak_EhMKekwAAAkg"]
[Sat Apr 25 01:47:25.129351 2026] [:error] [pid 42792:tid 42842] [client 158.158.74.32:46023] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/embed.php"] [unique_id "aeusrdNi9qR4GtafpfHhSAAAAhQ"]
[Sat Apr 25 01:47:25.878759 2026] [:error] [pid 42792:tid 42843] [client 158.158.74.32:44884] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/embed.php"] [unique_id "aeusrdNi9qR4GtafpfHhTAAAAhU"]
[Sat Apr 25 01:47:26.659788 2026] [:error] [pid 42792:tid 42845] [client 158.158.74.32:46021] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/stat.php"] [unique_id "aeusrtNi9qR4GtafpfHhUgAAAhc"]
[Sat Apr 25 01:47:27.573022 2026] [:error] [pid 42792:tid 42825] [client 158.158.74.32:32335] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/stat.php"] [unique_id "aeusr9Ni9qR4GtafpfHhVQAAAgM"]
[Sat Apr 25 01:47:28.544840 2026] [:error] [pid 14989:tid 15009] [client 158.158.74.32:48504] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/stat.php"] [unique_id "aeussHhRYjsAsZTO4EOnCwAAABI"]
[Sat Apr 25 01:47:29.522410 2026] [:error] [pid 42852:tid 42872] [client 158.158.74.32:52870] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/stat.php"] [unique_id "aeussTMEwxhhak_EhMKeowAAAlE"]
[Sat Apr 25 01:47:30.349492 2026] [:error] [pid 42791:tid 42806] [client 158.158.74.32:62996] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/setup.php"] [unique_id "aeussrKmN9doraCEWKX1eQAAAcs"]
[Sat Apr 25 01:47:31.193487 2026] [:error] [pid 42852:tid 42865] [client 158.158.74.32:52902] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/setup.php"] [unique_id "aeusszMEwxhhak_EhMKeqAAAAko"]
[Sat Apr 25 01:47:31.760667 2026] [:error] [pid 42852:tid 42875] [client 158.158.74.32:48449] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/setup.php"] [unique_id "aeusszMEwxhhak_EhMKeqgAAAlQ"]
[Sat Apr 25 01:47:32.432199 2026] [:error] [pid 14989:tid 15000] [client 158.158.74.32:53197] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/setup.php"] [unique_id "aeustHhRYjsAsZTO4EOnEwAAAAk"]
[Sat Apr 25 01:47:33.464736 2026] [:error] [pid 42852:tid 42869] [client 158.158.74.32:52884] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/development.php"] [unique_id "aeustTMEwxhhak_EhMKesAAAAk4"]
[Sat Apr 25 01:47:34.032813 2026] [:error] [pid 14989:tid 14993] [client 158.158.74.32:62005] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/development.php"] [unique_id "aeustnhRYjsAsZTO4EOnGAAAAAI"]
[Sat Apr 25 01:47:34.533172 2026] [:error] [pid 14989:tid 15003] [client 158.158.74.32:53247] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/development.php"] [unique_id "aeustnhRYjsAsZTO4EOnGwAAAAw"]
[Sat Apr 25 01:47:35.080147 2026] [:error] [pid 42852:tid 42875] [client 158.158.74.32:61261] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/development.php"] [unique_id "aeustzMEwxhhak_EhMKeugAAAlQ"]
[Sat Apr 25 01:47:35.698990 2026] [:error] [pid 42852:tid 42861] [client 158.158.74.32:27111] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/environment.php"] [unique_id "aeustzMEwxhhak_EhMKevgAAAkY"]
[Sat Apr 25 01:47:36.238846 2026] [:error] [pid 14989:tid 14995] [client 158.158.74.32:61258] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/environment.php"] [unique_id "aeusuHhRYjsAsZTO4EOnIAAAAAQ"]
[Sat Apr 25 01:47:37.040369 2026] [:error] [pid 14989:tid 15007] [client 158.158.74.32:50419] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/environment.php"] [unique_id "aeusuXhRYjsAsZTO4EOnIgAAABA"]
[Sat Apr 25 01:47:37.605105 2026] [:error] [pid 42792:tid 42843] [client 158.158.74.32:46000] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/environment.php"] [unique_id "aeusudNi9qR4GtafpfHhXQAAAhU"]
[Sat Apr 25 01:47:38.283730 2026] [:error] [pid 42852:tid 42874] [client 158.158.74.32:61973] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db_config.php"] [unique_id "aeusujMEwxhhak_EhMKexgAAAlM"]
[Sat Apr 25 01:47:39.160002 2026] [:error] [pid 14989:tid 14993] [client 158.158.74.32:48847] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db_config.php"] [unique_id "aeusu3hRYjsAsZTO4EOnJwAAAAI"]
[Sat Apr 25 01:47:39.975019 2026] [:error] [pid 14989:tid 15010] [client 158.158.74.32:48869] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db_config.php"] [unique_id "aeusu3hRYjsAsZTO4EOnKQAAABM"]
[Sat Apr 25 01:47:40.764195 2026] [:error] [pid 42852:tid 42859] [client 158.158.74.32:45953] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db_config.php"] [unique_id "aeusvDMEwxhhak_EhMKe0wAAAkQ"]
[Sat Apr 25 01:47:41.524044 2026] [:error] [pid 42852:tid 42856] [client 158.158.74.32:48841] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Get_Site_Info.php"] [unique_id "aeusvTMEwxhhak_EhMKe2gAAAkE"]
[Sat Apr 25 01:47:42.331948 2026] [:error] [pid 42852:tid 42870] [client 158.158.74.32:32326] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Get_Site_Info.php"] [unique_id "aeusvjMEwxhhak_EhMKe4AAAAk8"]
[Sat Apr 25 01:47:42.874485 2026] [:error] [pid 42791:tid 42804] [client 158.158.74.32:44422] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Get_Site_Info.php"] [unique_id "aeusvrKmN9doraCEWKX1hAAAAck"]
[Sat Apr 25 01:47:44.073653 2026] [:error] [pid 14989:tid 15006] [client 158.158.74.32:50371] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Get_Site_Info.php"] [unique_id "aeuswHhRYjsAsZTO4EOnQQAAAA8"]
[Sat Apr 25 01:47:44.947648 2026] [:error] [pid 42852:tid 42870] [client 158.158.74.32:53200] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/deploy.php"] [unique_id "aeuswDMEwxhhak_EhMKe6wAAAk8"]
[Sat Apr 25 01:47:45.753814 2026] [:error] [pid 42852:tid 42877] [client 158.158.74.32:4421] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/deploy.php"] [unique_id "aeuswTMEwxhhak_EhMKe7wAAAlY"]
[Sat Apr 25 01:47:46.546123 2026] [:error] [pid 14989:tid 15013] [client 158.158.74.32:50403] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/deploy.php"] [unique_id "aeuswnhRYjsAsZTO4EOnUAAAABY"]
[Sat Apr 25 01:47:47.279367 2026] [:error] [pid 42852:tid 42879] [client 158.158.74.32:46007] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/deploy.php"] [unique_id "aeuswzMEwxhhak_EhMKe8wAAAlg"]
[Sat Apr 25 01:47:47.989439 2026] [:error] [pid 42852:tid 42862] [client 158.158.74.32:55292] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apis.php"] [unique_id "aeuswzMEwxhhak_EhMKe9AAAAkc"]
[Sat Apr 25 01:48:04.137091 2026] [:error] [pid 14989:tid 15005] [client 158.158.74.32:51934] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_version.php"] [unique_id "aeus1HhRYjsAsZTO4EOneAAAAA4"]
[Sat Apr 25 01:48:05.221406 2026] [:error] [pid 14989:tid 15014] [client 158.158.74.32:4466] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_version.php"] [unique_id "aeus1XhRYjsAsZTO4EOnfAAAABc"]
[Sat Apr 25 01:48:05.957107 2026] [:error] [pid 42852:tid 42856] [client 158.158.74.32:51936] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_version.php"] [unique_id "aeus1TMEwxhhak_EhMKfHwAAAkE"]
[Sat Apr 25 01:48:06.910372 2026] [:error] [pid 14989:tid 15002] [client 158.158.74.32:4437] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php_version.php"] [unique_id "aeus1nhRYjsAsZTO4EOngQAAAAs"]
[Sat Apr 25 01:48:07.766332 2026] [:error] [pid 42791:tid 42807] [client 158.158.74.32:61607] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouts.php"] [unique_id "aeus17KmN9doraCEWKX1mQAAAcw"]
[Sat Apr 25 01:48:08.700616 2026] [:error] [pid 14989:tid 14997] [client 158.158.74.32:61591] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouts.php"] [unique_id "aeus2HhRYjsAsZTO4EOnhwAAAAY"]
[Sat Apr 25 01:48:09.300448 2026] [:error] [pid 42791:tid 42804] [client 158.158.74.32:54477] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouts.php"] [unique_id "aeus2bKmN9doraCEWKX1qAAAAck"]
[Sat Apr 25 01:48:10.036848 2026] [:error] [pid 42792:tid 42824] [client 158.158.74.32:38215] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abouts.php"] [unique_id "aeus2tNi9qR4GtafpfHhogAAAgI"]
[Sat Apr 25 01:48:10.939903 2026] [:error] [pid 42852:tid 42868] [client 158.158.74.32:48877] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/profmanage.php"] [unique_id "aeus2jMEwxhhak_EhMKfJAAAAk0"]
[Sat Apr 25 01:48:12.171876 2026] [:error] [pid 42852:tid 42862] [client 158.158.74.32:38226] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/profmanage.php"] [unique_id "aeus3DMEwxhhak_EhMKfKgAAAkc"]
[Sat Apr 25 01:48:12.881896 2026] [:error] [pid 42852:tid 42873] [client 158.158.74.32:44464] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/profmanage.php"] [unique_id "aeus3DMEwxhhak_EhMKfMQAAAlI"]
[Sat Apr 25 01:48:13.571035 2026] [:error] [pid 42792:tid 42831] [client 158.158.74.32:4463] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/profmanage.php"] [unique_id "aeus3dNi9qR4GtafpfHhqAAAAgk"]
[Sat Apr 25 01:48:14.433424 2026] [:error] [pid 42791:tid 42807] [client 158.158.74.32:50425] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makecvs.php"] [unique_id "aeus3rKmN9doraCEWKX1uAAAAcw"]
[Sat Apr 25 01:48:15.277577 2026] [:error] [pid 42755:tid 42766] [client 158.158.74.32:54520] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makecvs.php"] [unique_id "aeus39H7__k0j6aa600KdQAAAIk"]
[Sat Apr 25 01:48:16.058952 2026] [:error] [pid 42792:tid 42841] [client 158.158.74.32:44424] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makecvs.php"] [unique_id "aeus4NNi9qR4GtafpfHhrAAAAhM"]
[Sat Apr 25 01:48:17.643999 2026] [:error] [pid 14989:tid 14999] [client 158.158.74.32:58034] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makecvs.php"] [unique_id "aeus4XhRYjsAsZTO4EOnmQAAAAg"]
[Sat Apr 25 01:48:18.950290 2026] [:error] [pid 42791:tid 42814] [client 158.158.74.32:63036] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpreleaseinfo.php"] [unique_id "aeus4rKmN9doraCEWKX1yAAAAdM"]
[Sat Apr 25 01:48:20.489318 2026] [:error] [pid 42755:tid 42765] [client 158.158.74.32:61614] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpreleaseinfo.php"] [unique_id "aeus5NH7__k0j6aa600KfgAAAIg"]
[Sat Apr 25 01:48:21.566633 2026] [:error] [pid 42755:tid 42769] [client 158.158.74.32:4474] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpreleaseinfo.php"] [unique_id "aeus5dH7__k0j6aa600KgQAAAIw"]
[Sat Apr 25 01:48:22.443196 2026] [:error] [pid 42852:tid 42872] [client 158.158.74.32:44459] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpreleaseinfo.php"] [unique_id "aeus5jMEwxhhak_EhMKfPQAAAlE"]
[Sat Apr 25 01:48:23.284372 2026] [:error] [pid 42792:tid 42829] [client 158.158.74.32:45958] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/configuration.php"] [unique_id "aeus59Ni9qR4GtafpfHhzQAAAgc"]
[Sat Apr 25 01:48:24.307447 2026] [:error] [pid 42792:tid 42832] [client 158.158.74.32:25271] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/configuration.php"] [unique_id "aeus6NNi9qR4GtafpfHh0AAAAgo"]
[Sat Apr 25 01:48:25.093827 2026] [:error] [pid 14989:tid 15005] [client 158.158.74.32:44421] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/configuration.php"] [unique_id "aeus6XhRYjsAsZTO4EOnqgAAAA4"]
[Sat Apr 25 01:48:25.708914 2026] [:error] [pid 42792:tid 42822] [client 158.158.74.32:42947] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/configuration.php"] [unique_id "aeus6dNi9qR4GtafpfHh0wAAAgA"]
[Sat Apr 25 01:48:26.291551 2026] [:error] [pid 42755:tid 42765] [client 158.158.74.32:25228] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ay.php"] [unique_id "aeus6tH7__k0j6aa600KiwAAAIg"]
[Sat Apr 25 01:48:27.649729 2026] [:error] [pid 14989:tid 14995] [client 158.158.74.32:50382] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ay.php"] [unique_id "aeus63hRYjsAsZTO4EOnrwAAAAQ"]
[Sat Apr 25 01:48:28.530612 2026] [:error] [pid 14989:tid 15003] [client 158.158.74.32:48864] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ay.php"] [unique_id "aeus7HhRYjsAsZTO4EOntAAAAAw"]
[Sat Apr 25 01:48:29.703329 2026] [:error] [pid 42791:tid 42800] [client 158.158.74.32:44438] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ay.php"] [unique_id "aeus7bKmN9doraCEWKX13gAAAcU"]
[Sat Apr 25 01:48:30.779411 2026] [:error] [pid 42755:tid 42775] [client 158.158.74.32:48858] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hkvkjguw.php"] [unique_id "aeus7tH7__k0j6aa600KmwAAAJI"]
[Sat Apr 25 01:48:33.482708 2026] [:error] [pid 42852:tid 42866] [client 158.158.74.32:48838] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hkvkjguw.php"] [unique_id "aeus8TMEwxhhak_EhMKfUAAAAks"]
[Sat Apr 25 01:48:34.914570 2026] [:error] [pid 42792:tid 42828] [client 158.158.74.32:48835] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hkvkjguw.php"] [unique_id "aeus8tNi9qR4GtafpfHh3wAAAgY"]
[Sat Apr 25 01:48:35.841966 2026] [:error] [pid 42852:tid 42855] [client 158.158.74.32:4453] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hkvkjguw.php"] [unique_id "aeus8zMEwxhhak_EhMKfVgAAAkA"]
[Sat Apr 25 01:48:36.759426 2026] [:error] [pid 42792:tid 42845] [client 158.158.74.32:43004] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Black.php"] [unique_id "aeus9NNi9qR4GtafpfHh4wAAAhc"]
[Sat Apr 25 01:48:37.466249 2026] [:error] [pid 42852:tid 42878] [client 158.158.74.32:50414] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Black.php"] [unique_id "aeus9TMEwxhhak_EhMKfYwAAAlc"]
[Sat Apr 25 01:48:38.441620 2026] [:error] [pid 42852:tid 42863] [client 158.158.74.32:58002] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Black.php"] [unique_id "aeus9jMEwxhhak_EhMKfbgAAAkg"]
[Sat Apr 25 01:48:39.742863 2026] [:error] [pid 42792:tid 42833] [client 158.158.74.32:62991] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Black.php"] [unique_id "aeus99Ni9qR4GtafpfHh6gAAAgs"]
[Sat Apr 25 01:48:40.569467 2026] [:error] [pid 42792:tid 42824] [client 158.158.74.32:48854] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/infoinfo.php"] [unique_id "aeus-NNi9qR4GtafpfHh7AAAAgI"]
[Sat Apr 25 01:48:41.327980 2026] [:error] [pid 42755:tid 42780] [client 158.158.74.32:25269] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/infoinfo.php"] [unique_id "aeus-dH7__k0j6aa600KrAAAAJc"]
[Sat Apr 25 01:48:42.043399 2026] [:error] [pid 14989:tid 14992] [client 158.158.74.32:61248] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/infoinfo.php"] [unique_id "aeus-nhRYjsAsZTO4EOn4QAAAAE"]
[Sat Apr 25 01:48:42.708844 2026] [:error] [pid 14989:tid 15013] [client 158.158.74.32:38245] [client 158.158.74.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/infoinfo.php"] [unique_id "aeus-nhRYjsAsZTO4EOn5QAAABY"]
[Sat Apr 25 01:50:48.032980 2026] [:error] [pid 14989:tid 15001] [client 155.248.183.67:56709] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-manager/initialize"] [unique_id "aeuteHhRYjsAsZTO4EOprQAAAAo"]
[Sat Apr 25 01:50:49.497884 2026] [:error] [pid 14989:tid 15007] [client 155.248.183.67:63179] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-manager/initialize"] [unique_id "aeuteXhRYjsAsZTO4EOptAAAABA"]
[Sat Apr 25 01:50:50.961859 2026] [:error] [pid 14989:tid 14993] [client 155.248.183.67:54941] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-manager/initialize"] [unique_id "aeutenhRYjsAsZTO4EOpvwAAAAI"]
[Sat Apr 25 01:50:51.189151 2026] [:error] [pid 14989:tid 15000] [client 155.248.183.67:51152] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-manager/initialize"] [unique_id "aeute3hRYjsAsZTO4EOpwQAAAAk"]
[Sat Apr 25 01:50:52.415776 2026] [:error] [pid 42791:tid 42814] [client 155.248.183.67:60077] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-manager/initialize"] [unique_id "aeutfLKmN9doraCEWKX2ogAAAdM"]
[Sat Apr 25 01:50:53.643911 2026] [:error] [pid 42852:tid 42855] [client 155.248.183.67:63214] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-manager/initialize"] [unique_id "aeutfTMEwxhhak_EhMKgqQAAAkA"]
[Sat Apr 25 01:50:53.871426 2026] [:error] [pid 42852:tid 42877] [client 155.248.183.67:55103] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutfTMEwxhhak_EhMKgrAAAAlY"]
[Sat Apr 25 01:50:55.099435 2026] [:error] [pid 14989:tid 15008] [client 155.248.183.67:52568] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutf3hRYjsAsZTO4EOp2QAAABE"]
[Sat Apr 25 01:50:56.330290 2026] [:error] [pid 42791:tid 42817] [client 155.248.183.67:50735] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutgLKmN9doraCEWKX2pQAAAdY"]
[Sat Apr 25 01:50:56.557605 2026] [:error] [pid 42755:tid 42766] [client 155.248.183.67:59786] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutgNH7__k0j6aa600LtwAAAIk"]
[Sat Apr 25 01:53:02.475300 2026] [:error] [pid 42792:tid 42824] [client 103.28.36.220:49370] [client 103.28.36.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.220, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeut_tNi9qR4GtafpfHkLwAAAgI"]
[Sat Apr 25 01:53:04.656303 2026] [proxy_fcgi:error] [pid 42792:tid 42824] [client 103.28.36.220:49370] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 01:53:05.059614 2026] [:error] [pid 42792:tid 42828] [client 103.28.36.220:49370] [client 103.28.36.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.220, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeuuAdNi9qR4GtafpfHkMQAAAgY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 01:53:06.083176 2026] [proxy_fcgi:error] [pid 42792:tid 42828] [client 103.28.36.220:49370] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 02:30:29.304613 2026] [:error] [pid 42755:tid 42757] [client 66.96.183.171:59198] [client 66.96.183.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.96.183.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeu2xdH7__k0j6aa600WCQAAAIA"]
[Sat Apr 25 02:30:30.100840 2026] [proxy_fcgi:error] [pid 42755:tid 42757] [client 66.96.183.171:59198] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 02:30:30.927734 2026] [:error] [pid 42755:tid 42770] [client 66.96.183.171:59198] [client 66.96.183.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.96.183.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeu2xtH7__k0j6aa600WDAAAAI0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 02:30:31.926737 2026] [proxy_fcgi:error] [pid 42755:tid 42770] [client 66.96.183.171:59198] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 02:49:10.090563 2026] [:error] [pid 29016:tid 29056] [client 167.99.74.72:43414] [client 167.99.74.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.74.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeu7JkQMwwBEZ8EaFL9AMgAAA1M"]
[Sat Apr 25 02:49:10.942005 2026] [proxy_fcgi:error] [pid 29016:tid 29056] [client 167.99.74.72:43414] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 03:01:58.629120 2026] [:error] [pid 29016:tid 29055] [client 105.235.135.183:32760] [client 105.235.135.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.135.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeu-JkQMwwBEZ8EaFL9FVQAAA1I"]
[Sat Apr 25 03:02:09.329794 2026] [:error] [pid 42755:tid 42763] [client 105.235.135.183:35170] [client 105.235.135.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.135.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeu-MdH7__k0j6aa600eHAAAAIY"]
[Sat Apr 25 03:02:19.228915 2026] [:error] [pid 28841:tid 28871] [client 105.235.135.183:38863] [client 105.235.135.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.135.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeu-O-tkQQ-2d-KEcF-smwAAApA"]
[Sat Apr 25 03:02:29.819086 2026] [:error] [pid 42791:tid 42815] [client 105.235.135.183:42232] [client 105.235.135.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.135.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeu-RbKmN9doraCEWKUHQQAAAdQ"]
[Sat Apr 25 03:02:40.528326 2026] [:error] [pid 42755:tid 42770] [client 105.235.135.183:46018] [client 105.235.135.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.135.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeu-UNH7__k0j6aa600eSQAAAI0"]
[Sat Apr 25 03:26:12.207707 2026] [:error] [pid 40409:tid 40415] [client 154.54.100.172:38958] [client 154.54.100.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aevD1LLNdnBW3R0E1_YWbQAAAEM"]
[Sat Apr 25 03:26:12.896767 2026] [:error] [pid 40306:tid 40334] [client 167.99.74.72:36794] [client 167.99.74.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.74.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aevD1FB_-s7WCDDK3qVOHQAAABg"]
[Sat Apr 25 03:26:13.776295 2026] [proxy_fcgi:error] [pid 40306:tid 40334] [client 167.99.74.72:36794] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 03:26:14.790090 2026] [:error] [pid 40306:tid 40334] [client 167.99.74.72:36794] [client 167.99.74.72] ModSecurity: Audit log: Failed to lock global mutex: Invalid argument [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aevD1FB_-s7WCDDK3qVOHQAAABg"]
[Sat Apr 25 03:26:14.790282 2026] [:error] [pid 40306:tid 40334] [client 167.99.74.72:36794] [client 167.99.74.72] ModSecurity: Audit log: Failed to unlock global mutex: Invalid argument [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aevD1FB_-s7WCDDK3qVOHQAAABg"]
[Sat Apr 25 03:29:15.681166 2026] [:error] [pid 40919:tid 40940] [client 3.77.129.9:51022] [client 3.77.129.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.77.129.9, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aevEi0MtsB8Y96nC3cni1wAAAMY"]
[Sat Apr 25 03:29:16.554856 2026] [proxy_fcgi:error] [pid 40919:tid 40940] [client 3.77.129.9:51022] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 03:29:17.059891 2026] [:error] [pid 40919:tid 40942] [client 3.77.129.9:51022] [client 3.77.129.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.77.129.9, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aevEjUMtsB8Y96nC3cni4wAAAMg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 03:29:18.090910 2026] [proxy_fcgi:error] [pid 40919:tid 40942] [client 3.77.129.9:51022] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 03:32:21.689649 2026] [:error] [pid 40829:tid 40848] [client 20.214.230.200:1359] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aevFRX9aBLbh2KXOloORMQAAAA8"]
[Sat Apr 25 03:32:22.256050 2026] [:error] [pid 40831:tid 40903] [client 20.214.230.200:1878] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aevFRsC1ApXgo_VIxksjqgAAAI4"]
[Sat Apr 25 03:32:22.850056 2026] [:error] [pid 40831:tid 40902] [client 20.214.230.200:4024] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aevFRsC1ApXgo_VIxksjrQAAAI0"]
[Sat Apr 25 03:32:23.410559 2026] [:error] [pid 40829:tid 40849] [client 20.214.230.200:1911] [client 20.214.230.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aevFR39aBLbh2KXOloORNgAAABA"]
[Sat Apr 25 03:42:32.371840 2026] [:error] [pid 13550:tid 13602] [client 43.156.204.134:50674] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aevHqPkGWF8b7QIlunW2HgAAAFU"]
[Sat Apr 25 04:06:02.473418 2026] [:error] [pid 46083:tid 46097] [client 203.135.5.187:54229] [client 203.135.5.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.135.5.187, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aevNKjxw_Zq74vWdjmnoqQAAAQo"]
[Sat Apr 25 04:07:45.541160 2026] [:error] [pid 44425:tid 44448] [client 185.82.72.162:22827] [client 185.82.72.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aevNkSUl-VlItvY2tR_QeAAAANU"]
[Sat Apr 25 04:07:49.721436 2026] [:error] [pid 46083:tid 46089] [client 185.82.72.168:23727] [client 185.82.72.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aevNlTxw_Zq74vWdjmnqEQAAAQI"]
[Sat Apr 25 04:07:57.696652 2026] [:error] [pid 44321:tid 44391] [client 185.82.72.158:20951] [client 185.82.72.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tinyfilemanager.php"] [unique_id "aevNnY1b5lV-asWa_Y4FLAAAAIg"]
[Sat Apr 25 04:08:02.119248 2026] [:error] [pid 44425:tid 44445] [client 185.82.72.144:49623] [client 185.82.72.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/index.php"] [unique_id "aevNoiUl-VlItvY2tR_QlQAAANI"]
[Sat Apr 25 04:08:09.989533 2026] [:error] [pid 44319:tid 44351] [client 185.82.72.136:47543] [client 185.82.72.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aevNqczJPAVLUb2pWtI4AQAAABY"]
[Sat Apr 25 04:08:11.962113 2026] [:error] [pid 44320:tid 44378] [client 185.82.72.12:24269] [client 185.82.72.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aevNqzmFqSpku_dij8hWvQAAAFY"]
[Sat Apr 25 04:08:12.504032 2026] [:error] [pid 44321:tid 44399] [client 185.82.72.131:57821] [client 185.82.72.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aevNrI1b5lV-asWa_Y4FQQAAAJA"]
[Sat Apr 25 04:08:13.042700 2026] [:error] [pid 46083:tid 46101] [client 185.82.72.117:43113] [client 185.82.72.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aevNrTxw_Zq74vWdjmnqawAAAQ4"]
[Sat Apr 25 04:08:13.575966 2026] [:error] [pid 44320:tid 44360] [client 185.82.72.120:38391] [client 185.82.72.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aevNrTmFqSpku_dij8hWwAAAAEQ"]
[Sat Apr 25 04:08:14.115497 2026] [:error] [pid 44320:tid 44362] [client 185.82.72.192:45015] [client 185.82.72.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aevNrjmFqSpku_dij8hWwQAAAEY"]
[Sat Apr 25 04:08:14.800446 2026] [:error] [pid 44321:tid 44397] [client 43.246.221.41:48395] [client 43.246.221.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.246.221.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aevNro1b5lV-asWa_Y4FQwAAAI4"]
[Sat Apr 25 04:08:15.739393 2026] [:error] [pid 46083:tid 46097] [client 185.82.72.175:44853] [client 185.82.72.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aevNrzxw_Zq74vWdjmnqegAAAQo"]
[Sat Apr 25 04:08:17.982573 2026] [:error] [pid 44321:tid 44407] [client 185.82.72.121:49033] [client 185.82.72.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "aevNsY1b5lV-asWa_Y4FUgAAAJg"]
[Sat Apr 25 04:08:21.148015 2026] [:error] [pid 46083:tid 46110] [client 185.82.72.149:63583] [client 185.82.72.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aevNtTxw_Zq74vWdjmnqmQAAARY"]
[Sat Apr 25 04:08:22.812147 2026] [:error] [pid 46083:tid 46105] [client 185.82.72.154:32963] [client 185.82.72.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aevNtjxw_Zq74vWdjmnqowAAARI"]
[Sat Apr 25 04:08:24.770223 2026] [:error] [pid 44319:tid 44352] [client 185.82.72.152:41629] [client 185.82.72.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aevNuMzJPAVLUb2pWtI4CAAAABc"]
[Sat Apr 25 04:08:25.302203 2026] [:error] [pid 44321:tid 44399] [client 43.246.221.41:48954] [client 43.246.221.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.246.221.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aevNuY1b5lV-asWa_Y4FYgAAAJA"]
[Sat Apr 25 04:08:32.426173 2026] [:error] [pid 44425:tid 44440] [client 185.82.72.130:56597] [client 185.82.72.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aevNwCUl-VlItvY2tR_QuQAAAM0"]
[Sat Apr 25 04:08:34.356952 2026] [:error] [pid 44320:tid 44367] [client 185.82.72.118:28607] [client 185.82.72.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aevNwjmFqSpku_dij8hW6AAAAEs"]
[Sat Apr 25 04:08:35.863195 2026] [:error] [pid 44319:tid 44349] [client 43.246.221.41:49474] [client 43.246.221.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.246.221.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aevNw8zJPAVLUb2pWtI4FAAAABQ"]
[Sat Apr 25 04:08:37.426521 2026] [:error] [pid 46083:tid 46091] [client 185.82.72.133:30905] [client 185.82.72.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/defaults.php"] [unique_id "aevNxTxw_Zq74vWdjmnqvgAAAQQ"]
[Sat Apr 25 04:08:46.500596 2026] [:error] [pid 46083:tid 46107] [client 43.246.221.41:49836] [client 43.246.221.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.246.221.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aevNzjxw_Zq74vWdjmnq2gAAARM"]
[Sat Apr 25 04:08:49.715414 2026] [autoindex:error] [pid 46083:tid 46101] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:08:52.313893 2026] [autoindex:error] [pid 46083:tid 46112] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:08:57.216987 2026] [:error] [pid 46083:tid 46108] [client 43.246.221.41:46449] [client 43.246.221.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.246.221.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aevN2Txw_Zq74vWdjmnrGQAAARQ"]
[Sat Apr 25 04:08:59.653389 2026] [autoindex:error] [pid 46083:tid 46101] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:01.186001 2026] [autoindex:error] [pid 46083:tid 46092] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:05.291386 2026] [autoindex:error] [pid 46083:tid 46110] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:05.565396 2026] [autoindex:error] [pid 46083:tid 46105] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:05.840450 2026] [autoindex:error] [pid 46083:tid 46111] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:06.114288 2026] [autoindex:error] [pid 46083:tid 46108] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:07.867061 2026] [autoindex:error] [pid 46083:tid 46103] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:08.143955 2026] [autoindex:error] [pid 46083:tid 46100] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:10.877173 2026] [autoindex:error] [pid 46083:tid 46092] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:11.150666 2026] [autoindex:error] [pid 46083:tid 46090] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:11.423597 2026] [autoindex:error] [pid 46083:tid 46101] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:12.707977 2026] [autoindex:error] [pid 46083:tid 46102] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:12.979299 2026] [autoindex:error] [pid 46083:tid 46091] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:13.252862 2026] [autoindex:error] [pid 46083:tid 46096] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:17.364164 2026] [autoindex:error] [pid 46083:tid 46110] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:17.645721 2026] [autoindex:error] [pid 46083:tid 46104] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:17.917283 2026] [autoindex:error] [pid 46083:tid 46094] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:18.192653 2026] [autoindex:error] [pid 46083:tid 46112] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:18.469697 2026] [autoindex:error] [pid 46083:tid 46087] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:18.747766 2026] [autoindex:error] [pid 46083:tid 46108] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:20.165779 2026] [autoindex:error] [pid 46083:tid 46098] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:20.437786 2026] [autoindex:error] [pid 46083:tid 46090] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:24.213757 2026] [autoindex:error] [pid 46083:tid 46105] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:26.972537 2026] [autoindex:error] [pid 46083:tid 46107] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:27.536598 2026] [autoindex:error] [pid 46083:tid 46101] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:32.732729 2026] [autoindex:error] [pid 46083:tid 46088] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:33.009643 2026] [autoindex:error] [pid 46083:tid 46102] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:36.741005 2026] [autoindex:error] [pid 46083:tid 46096] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:38.173157 2026] [autoindex:error] [pid 46083:tid 46094] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:39.574248 2026] [autoindex:error] [pid 46083:tid 46112] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:39.846332 2026] [autoindex:error] [pid 46083:tid 46088] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:40.119633 2026] [autoindex:error] [pid 46083:tid 46101] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:40.394955 2026] [autoindex:error] [pid 46083:tid 46089] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:40.669939 2026] [autoindex:error] [pid 46083:tid 46110] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:43.239621 2026] [autoindex:error] [pid 46083:tid 46099] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:45.842512 2026] [autoindex:error] [pid 46083:tid 46108] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:46.112510 2026] [autoindex:error] [pid 46083:tid 46109] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:49.910612 2026] [autoindex:error] [pid 46083:tid 46091] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:51.315005 2026] [autoindex:error] [pid 46083:tid 46097] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:54.050149 2026] [autoindex:error] [pid 46083:tid 46096] [client 185.82.72.195:25783] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:56.666958 2026] [autoindex:error] [pid 46083:tid 46090] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:56.951813 2026] [autoindex:error] [pid 46083:tid 46112] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:57.227078 2026] [autoindex:error] [pid 46083:tid 46100] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:57.501526 2026] [autoindex:error] [pid 46083:tid 46105] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:57.784750 2026] [autoindex:error] [pid 46083:tid 46099] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:09:58.066770 2026] [autoindex:error] [pid 46083:tid 46093] [client 185.82.72.195:25783] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:04.567544 2026] [autoindex:error] [pid 44425:tid 44429] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:04.844565 2026] [autoindex:error] [pid 44425:tid 44438] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:05.120482 2026] [autoindex:error] [pid 44425:tid 44451] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:05.396243 2026] [autoindex:error] [pid 44425:tid 44441] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:05.670474 2026] [autoindex:error] [pid 44425:tid 44442] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:07.189718 2026] [autoindex:error] [pid 44425:tid 44432] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:09.873580 2026] [autoindex:error] [pid 44425:tid 44449] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:11.362176 2026] [autoindex:error] [pid 44425:tid 44439] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:11.633691 2026] [autoindex:error] [pid 44425:tid 44451] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:11.903267 2026] [autoindex:error] [pid 44425:tid 44440] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:12.176628 2026] [autoindex:error] [pid 44425:tid 44436] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:12.446724 2026] [autoindex:error] [pid 44425:tid 44445] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:17.337932 2026] [autoindex:error] [pid 44425:tid 44427] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:17.608033 2026] [autoindex:error] [pid 44425:tid 44446] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:20.181756 2026] [autoindex:error] [pid 44425:tid 44440] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:20.454329 2026] [autoindex:error] [pid 44425:tid 44432] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:21.958209 2026] [autoindex:error] [pid 44425:tid 44431] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:28.037984 2026] [autoindex:error] [pid 44425:tid 44434] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:28.308752 2026] [autoindex:error] [pid 44425:tid 44441] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:28.579590 2026] [autoindex:error] [pid 44425:tid 44433] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:28.852014 2026] [autoindex:error] [pid 44425:tid 44442] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:33.625466 2026] [autoindex:error] [pid 44425:tid 44430] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:37.300925 2026] [autoindex:error] [pid 44425:tid 44440] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:37.574079 2026] [autoindex:error] [pid 44425:tid 44438] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:41.249178 2026] [autoindex:error] [pid 44425:tid 44450] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:47.357396 2026] [autoindex:error] [pid 44425:tid 44434] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:49.918092 2026] [autoindex:error] [pid 44425:tid 44439] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:50.189858 2026] [autoindex:error] [pid 44425:tid 44428] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:50.464802 2026] [autoindex:error] [pid 44425:tid 44444] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:51.904718 2026] [autoindex:error] [pid 44425:tid 44430] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:10:53.329540 2026] [autoindex:error] [pid 44425:tid 44441] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:08.766853 2026] [autoindex:error] [pid 44425:tid 44450] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:09.040940 2026] [autoindex:error] [pid 44425:tid 44441] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:11.555713 2026] [autoindex:error] [pid 44425:tid 44444] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:14.169254 2026] [autoindex:error] [pid 44425:tid 44444] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:16.803647 2026] [autoindex:error] [pid 44425:tid 44439] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:18.322449 2026] [autoindex:error] [pid 44425:tid 44431] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:18.593140 2026] [autoindex:error] [pid 44425:tid 44444] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:19.967358 2026] [autoindex:error] [pid 44425:tid 44433] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:20.240625 2026] [autoindex:error] [pid 44425:tid 44450] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:20.512777 2026] [autoindex:error] [pid 44425:tid 44429] [client 185.82.72.164:36127] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:24.743285 2026] [autoindex:error] [pid 44321:tid 44390] [client 185.82.72.138:36667] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:27.256032 2026] [autoindex:error] [pid 44321:tid 44400] [client 185.82.72.138:36667] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:35.462791 2026] [autoindex:error] [pid 44321:tid 44389] [client 185.82.72.138:36667] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:35.736263 2026] [autoindex:error] [pid 44321:tid 44406] [client 185.82.72.138:36667] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:37.269164 2026] [autoindex:error] [pid 44321:tid 44397] [client 185.82.72.138:36667] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:38.716787 2026] [autoindex:error] [pid 44321:tid 44403] [client 185.82.72.138:36667] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:42.482111 2026] [autoindex:error] [pid 44321:tid 44396] [client 185.82.72.138:36667] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:48.950621 2026] [autoindex:error] [pid 44321:tid 44397] [client 185.82.72.138:36667] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:55.099894 2026] [autoindex:error] [pid 44321:tid 44398] [client 185.82.72.138:36667] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:59.427607 2026] [autoindex:error] [pid 44321:tid 44390] [client 185.82.72.138:36667] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:11:59.697909 2026] [autoindex:error] [pid 44321:tid 44403] [client 185.82.72.138:36667] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 04:25:13.335124 2026] [:error] [pid 46083:tid 46110] [client 203.135.5.187:57089] [client 203.135.5.187] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aevRqTxw_Zq74vWdjmn2eAAAARY"]
[Sat Apr 25 04:45:44.899915 2026] [:error] [pid 44425:tid 44451] [client 129.121.65.255:35714] [client 129.121.65.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.121.65.255, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aevWeCUl-VlItvY2tR_jbQAAANg"]
[Sat Apr 25 04:45:45.774762 2026] [proxy_fcgi:error] [pid 44425:tid 44451] [client 129.121.65.255:35714] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 04:45:46.088246 2026] [:error] [pid 44425:tid 44439] [client 129.121.65.255:35714] [client 129.121.65.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 129.121.65.255, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aevWeiUl-VlItvY2tR_jcQAAAMw"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 04:45:47.103118 2026] [proxy_fcgi:error] [pid 44425:tid 44439] [client 129.121.65.255:35714] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 05:04:18.445271 2026] [:error] [pid 44321:tid 44397] [client 4.235.104.4:3668] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aeva0o1b5lV-asWa_Y4XHgAAAI4"]
[Sat Apr 25 05:04:20.920286 2026] [:error] [pid 44320:tid 44373] [client 4.235.104.4:56417] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aeva1DmFqSpku_dij8hljAAAAFE"]
[Sat Apr 25 05:04:27.479414 2026] [:error] [pid 44321:tid 44395] [client 4.235.104.4:3532] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aeva241b5lV-asWa_Y4XKQAAAIw"]
[Sat Apr 25 05:04:30.241205 2026] [:error] [pid 44425:tid 44443] [client 4.235.104.4:56409] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/166.php"] [unique_id "aeva3iUl-VlItvY2tR_sCAAAANA"]
[Sat Apr 25 05:04:34.008352 2026] [:error] [pid 46083:tid 46097] [client 4.235.104.4:49233] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "aeva4jxw_Zq74vWdjmkPZQAAAQo"]
[Sat Apr 25 05:04:35.782933 2026] [:error] [pid 44321:tid 44405] [client 4.235.104.4:50023] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "aeva441b5lV-asWa_Y4XNwAAAJY"]
[Sat Apr 25 05:04:37.551035 2026] [:error] [pid 44320:tid 44375] [client 4.235.104.4:49275] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "aeva5TmFqSpku_dij8hlmwAAAFM"]
[Sat Apr 25 05:04:41.731586 2026] [:error] [pid 44319:tid 44351] [client 4.235.104.4:50018] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/term.php"] [unique_id "aeva6czJPAVLUb2pWtJEQAAAABY"]
[Sat Apr 25 05:04:46.087741 2026] [:error] [pid 46083:tid 46105] [client 4.235.104.4:3647] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aeva7jxw_Zq74vWdjmkPegAAARI"]
[Sat Apr 25 05:04:48.151565 2026] [:error] [pid 46083:tid 46105] [client 4.235.104.4:49237] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aeva8Dxw_Zq74vWdjmkPhwAAARI"]
[Sat Apr 25 05:04:49.970718 2026] [:error] [pid 46083:tid 46109] [client 4.235.104.4:3610] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aeva8Txw_Zq74vWdjmkPkgAAARU"]
[Sat Apr 25 05:04:51.501507 2026] [:error] [pid 44425:tid 44435] [client 4.235.104.4:3562] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "aeva8yUl-VlItvY2tR_sFgAAAMg"]
[Sat Apr 25 05:04:55.378287 2026] [:error] [pid 46083:tid 46095] [client 4.235.104.4:3638] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aeva9zxw_Zq74vWdjmkPnwAAAQg"]
[Sat Apr 25 05:04:58.664486 2026] [:error] [pid 44320:tid 44364] [client 4.235.104.4:3470] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aeva-jmFqSpku_dij8hlsgAAAEg"]
[Sat Apr 25 05:05:04.925467 2026] [:error] [pid 44425:tid 44428] [client 4.235.104.4:3743] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aevbACUl-VlItvY2tR_sKgAAAME"]
[Sat Apr 25 05:05:06.985400 2026] [:error] [pid 46083:tid 46090] [client 4.235.104.4:63389] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tt.php"] [unique_id "aevbAjxw_Zq74vWdjmkQLgAAAQM"]
[Sat Apr 25 05:05:08.689139 2026] [:error] [pid 44321:tid 44394] [client 4.235.104.4:49997] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "aevbBI1b5lV-asWa_Y4XTAAAAIs"]
[Sat Apr 25 05:05:12.308491 2026] [:error] [pid 44319:tid 44337] [client 4.235.104.4:50017] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "aevbCMzJPAVLUb2pWtJEtwAAAAg"]
[Sat Apr 25 05:05:15.182456 2026] [:error] [pid 46083:tid 46092] [client 4.235.104.4:56388] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "aevbCzxw_Zq74vWdjmkQOQAAAQU"]
[Sat Apr 25 05:05:31.277084 2026] [:error] [pid 46083:tid 46111] [client 4.235.104.4:3555] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi001.PhP7"] [unique_id "aevbGzxw_Zq74vWdjmkQXwAAARc"]
[Sat Apr 25 05:05:32.974082 2026] [:error] [pid 46083:tid 46104] [client 4.235.104.4:3557] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi001.PhP7"] [unique_id "aevbHDxw_Zq74vWdjmkQZgAAARE"]
[Sat Apr 25 05:05:34.064803 2026] [:error] [pid 44319:tid 44338] [client 4.235.104.4:50002] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi001.PhP7"] [unique_id "aevbHszJPAVLUb2pWtJEygAAAAk"]
[Sat Apr 25 05:05:35.346468 2026] [:error] [pid 44321:tid 44389] [client 4.235.104.4:56402] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi001.PhP7"] [unique_id "aevbH41b5lV-asWa_Y4XbAAAAIY"]
[Sat Apr 25 05:05:38.238110 2026] [:error] [pid 44321:tid 44383] [client 4.235.104.4:3485] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kikikoko.php"] [unique_id "aevbIo1b5lV-asWa_Y4XcwAAAIA"]
[Sat Apr 25 05:05:40.738139 2026] [:error] [pid 46083:tid 46093] [client 4.235.104.4:3759] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kikikoko.php"] [unique_id "aevbJDxw_Zq74vWdjmkQcwAAAQY"]
[Sat Apr 25 05:05:42.078127 2026] [:error] [pid 44321:tid 44390] [client 4.235.104.4:50020] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kikikoko.php"] [unique_id "aevbJo1b5lV-asWa_Y4XdwAAAIc"]
[Sat Apr 25 05:05:43.940088 2026] [:error] [pid 44320:tid 44380] [client 4.235.104.4:3487] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kikikoko.php"] [unique_id "aevbJzmFqSpku_dij8hl1gAAAFg"]
[Sat Apr 25 05:05:45.173728 2026] [:error] [pid 46083:tid 46107] [client 4.235.104.4:50003] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aevbKTxw_Zq74vWdjmkQiAAAARM"]
[Sat Apr 25 05:05:46.074684 2026] [:error] [pid 46083:tid 46091] [client 4.235.104.4:3764] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aevbKjxw_Zq74vWdjmkQjgAAAQQ"]
[Sat Apr 25 05:05:52.546468 2026] [:error] [pid 44425:tid 44448] [client 4.235.104.4:50026] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aevbMCUl-VlItvY2tR_sZQAAANU"]
[Sat Apr 25 05:05:55.774158 2026] [:error] [pid 46083:tid 46112] [client 4.235.104.4:61609] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aevbMzxw_Zq74vWdjmkQngAAARg"]
[Sat Apr 25 05:05:58.557744 2026] [:error] [pid 44321:tid 44402] [client 4.235.104.4:3457] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aevbNo1b5lV-asWa_Y4XjAAAAJM"]
[Sat Apr 25 05:05:59.827371 2026] [:error] [pid 44319:tid 44342] [client 4.235.104.4:3572] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aevbN8zJPAVLUb2pWtJE0QAAAA0"]
[Sat Apr 25 05:06:03.568513 2026] [:error] [pid 44319:tid 44344] [client 4.235.104.4:3715] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aevbO8zJPAVLUb2pWtJE0wAAAA8"]
[Sat Apr 25 05:06:06.441098 2026] [:error] [pid 44320:tid 44367] [client 4.235.104.4:63397] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aevbPjmFqSpku_dij8hl3gAAAEs"]
[Sat Apr 25 05:06:08.601493 2026] [:error] [pid 46083:tid 46110] [client 4.235.104.4:3541] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aevbQDxw_Zq74vWdjmkQsgAAARY"]
[Sat Apr 25 05:06:10.580546 2026] [:error] [pid 44319:tid 44340] [client 4.235.104.4:50034] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aevbQszJPAVLUb2pWtJE2QAAAAs"]
[Sat Apr 25 05:06:12.322201 2026] [:error] [pid 46083:tid 46099] [client 4.235.104.4:63412] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aevbRDxw_Zq74vWdjmkQvAAAAQw"]
[Sat Apr 25 05:06:14.882782 2026] [:error] [pid 46083:tid 46088] [client 4.235.104.4:49220] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "aevbRjxw_Zq74vWdjmkQwwAAAQE"]
[Sat Apr 25 05:06:16.890371 2026] [:error] [pid 44321:tid 44387] [client 4.235.104.4:49220] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aevbSI1b5lV-asWa_Y4XmwAAAIQ"]
[Sat Apr 25 05:06:19.496369 2026] [:error] [pid 46083:tid 46103] [client 4.235.104.4:3617] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aevbSzxw_Zq74vWdjmkQ2wAAARA"]
[Sat Apr 25 05:06:21.694872 2026] [:error] [pid 46083:tid 46100] [client 4.235.104.4:49268] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aevbTTxw_Zq74vWdjmkQ4AAAAQ0"]
[Sat Apr 25 05:06:24.138196 2026] [:error] [pid 46083:tid 46091] [client 4.235.104.4:3640] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aevbUDxw_Zq74vWdjmkQ4wAAAQQ"]
[Sat Apr 25 05:06:25.730546 2026] [:error] [pid 46083:tid 46098] [client 4.235.104.4:3748] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws48.php"] [unique_id "aevbUTxw_Zq74vWdjmkQ5QAAAQs"]
[Sat Apr 25 05:06:27.323763 2026] [:error] [pid 44320:tid 44366] [client 4.235.104.4:3460] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws48.php"] [unique_id "aevbUzmFqSpku_dij8hl5wAAAEo"]
[Sat Apr 25 05:06:45.092087 2026] [:error] [pid 44320:tid 44367] [client 4.235.104.4:3560] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aevbZTmFqSpku_dij8hmAwAAAEs"]
[Sat Apr 25 05:06:47.105942 2026] [:error] [pid 44320:tid 44368] [client 4.235.104.4:3742] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aevbZzmFqSpku_dij8hmCAAAAEw"]
[Sat Apr 25 05:06:48.263853 2026] [:error] [pid 44319:tid 44346] [client 4.235.104.4:56424] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aevbaMzJPAVLUb2pWtJE-wAAABE"]
[Sat Apr 25 05:06:50.148628 2026] [:error] [pid 44425:tid 44439] [client 4.235.104.4:56407] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cu.php"] [unique_id "aevbaiUl-VlItvY2tR_shwAAAMw"]
[Sat Apr 25 05:06:54.566324 2026] [:error] [pid 44425:tid 44442] [client 4.235.104.4:56434] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aevbbiUl-VlItvY2tR_spQAAAM8"]
[Sat Apr 25 05:06:55.568451 2026] [:error] [pid 44425:tid 44436] [client 4.235.104.4:63395] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aevbbyUl-VlItvY2tR_srQAAAMk"]
[Sat Apr 25 05:06:56.889748 2026] [:error] [pid 46083:tid 46102] [client 4.235.104.4:56385] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aevbcDxw_Zq74vWdjmkRCQAAAQ8"]
[Sat Apr 25 05:07:01.555954 2026] [:error] [pid 44425:tid 44447] [client 4.235.104.4:3462] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amax.php"] [unique_id "aevbdSUl-VlItvY2tR_s1AAAANQ"]
[Sat Apr 25 05:07:02.138124 2026] [:error] [pid 44425:tid 44440] [client 4.235.104.4:50044] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "aevbdiUl-VlItvY2tR_s2wAAAM0"]
[Sat Apr 25 05:07:02.926192 2026] [:error] [pid 44425:tid 44435] [client 4.235.104.4:3461] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "aevbdiUl-VlItvY2tR_s5AAAAMg"]
[Sat Apr 25 05:07:05.147215 2026] [:error] [pid 44321:tid 44396] [client 4.235.104.4:3549] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "aevbeY1b5lV-asWa_Y4XxgAAAI0"]
[Sat Apr 25 05:07:06.405372 2026] [:error] [pid 44321:tid 44407] [client 4.235.104.4:52006] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mh.php"] [unique_id "aevbeo1b5lV-asWa_Y4XygAAAJg"]
[Sat Apr 25 05:07:08.350334 2026] [:error] [pid 44319:tid 44347] [client 4.235.104.4:63360] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "aevbfMzJPAVLUb2pWtJFBQAAABI"]
[Sat Apr 25 05:07:11.468190 2026] [:error] [pid 44425:tid 44451] [client 4.235.104.4:56401] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "aevbfyUl-VlItvY2tR_tEgAAANg"]
[Sat Apr 25 05:07:14.782027 2026] [:error] [pid 46083:tid 46098] [client 4.235.104.4:50038] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "aevbgjxw_Zq74vWdjmkRIwAAAQs"]
[Sat Apr 25 05:07:18.504180 2026] [:error] [pid 44425:tid 44445] [client 4.235.104.4:58486] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Jcrop.php"] [unique_id "aevbhiUl-VlItvY2tR_tHQAAANI"]
[Sat Apr 25 05:07:21.790534 2026] [:error] [pid 46083:tid 46101] [client 4.235.104.4:49246] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "aevbiTxw_Zq74vWdjmkRLAAAAQ4"]
[Sat Apr 25 05:07:24.399761 2026] [:error] [pid 44320:tid 44361] [client 4.235.104.4:49258] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "aevbjDmFqSpku_dij8hmGwAAAEU"]
[Sat Apr 25 05:07:26.229472 2026] [:error] [pid 44425:tid 44428] [client 4.235.104.4:3497] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "aevbjiUl-VlItvY2tR_tKQAAAME"]
[Sat Apr 25 05:07:29.488853 2026] [:error] [pid 44425:tid 44427] [client 4.235.104.4:3627] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/abc.php"] [unique_id "aevbkSUl-VlItvY2tR_tLAAAAMA"]
[Sat Apr 25 05:07:31.717516 2026] [:error] [pid 44321:tid 44394] [client 4.235.104.4:3769] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aevbk41b5lV-asWa_Y4X8gAAAIs"]
[Sat Apr 25 05:07:33.694029 2026] [:error] [pid 44425:tid 44429] [client 4.235.104.4:3577] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aevblSUl-VlItvY2tR_tLwAAAMI"]
[Sat Apr 25 05:07:35.652875 2026] [:error] [pid 44425:tid 44428] [client 4.235.104.4:49260] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aevblyUl-VlItvY2tR_tNAAAAME"]
[Sat Apr 25 05:07:37.794386 2026] [:error] [pid 44319:tid 44344] [client 4.235.104.4:56391] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "aevbmczJPAVLUb2pWtJFFAAAAA8"]
[Sat Apr 25 05:08:09.524872 2026] [:error] [pid 44319:tid 44337] [client 4.235.104.4:56416] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aevbuczJPAVLUb2pWtJFKwAAAAg"]
[Sat Apr 25 05:08:11.087180 2026] [:error] [pid 44320:tid 44364] [client 4.235.104.4:3580] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aevbuzmFqSpku_dij8hmLwAAAEg"]
[Sat Apr 25 05:08:13.770205 2026] [:error] [pid 46083:tid 46097] [client 4.235.104.4:56414] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aevbvTxw_Zq74vWdjmkRWAAAAQo"]
[Sat Apr 25 05:08:17.449757 2026] [:error] [pid 46083:tid 46093] [client 4.235.104.4:3598] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "aevbwTxw_Zq74vWdjmkRYwAAAQY"]
[Sat Apr 25 05:08:19.220385 2026] [:error] [pid 44321:tid 44401] [client 4.235.104.4:49228] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jk.php"] [unique_id "aevbw41b5lV-asWa_Y4YFgAAAJI"]
[Sat Apr 25 05:08:21.600203 2026] [:error] [pid 44320:tid 44372] [client 4.235.104.4:3603] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jk.php"] [unique_id "aevbxTmFqSpku_dij8hmQAAAAFA"]
[Sat Apr 25 05:08:23.359786 2026] [:error] [pid 44320:tid 44377] [client 4.235.104.4:49262] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jk.php"] [unique_id "aevbxzmFqSpku_dij8hmRQAAAFU"]
[Sat Apr 25 05:08:24.886886 2026] [:error] [pid 46083:tid 46095] [client 4.235.104.4:3484] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jk.php"] [unique_id "aevbyDxw_Zq74vWdjmkRcAAAAQg"]
[Sat Apr 25 05:08:26.409172 2026] [:error] [pid 44321:tid 44388] [client 4.235.104.4:3436] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aevbyo1b5lV-asWa_Y4YHAAAAIU"]
[Sat Apr 25 05:08:27.978963 2026] [:error] [pid 44320:tid 44362] [client 4.235.104.4:49226] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aevbyzmFqSpku_dij8hmSQAAAEY"]
[Sat Apr 25 05:08:29.985804 2026] [:error] [pid 44425:tid 44442] [client 4.235.104.4:3624] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aevbzSUl-VlItvY2tR_tiAAAAM8"]
[Sat Apr 25 05:08:32.431217 2026] [:error] [pid 44321:tid 44400] [client 4.235.104.4:3626] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aevb0I1b5lV-asWa_Y4YJQAAAJE"]
[Sat Apr 25 05:08:34.344502 2026] [:error] [pid 46083:tid 46098] [client 4.235.104.4:53883] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aevb0jxw_Zq74vWdjmkRfgAAAQs"]
[Sat Apr 25 05:08:36.201723 2026] [:error] [pid 46083:tid 46096] [client 4.235.104.4:53874] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aevb1Dxw_Zq74vWdjmkRgwAAAQk"]
[Sat Apr 25 05:08:39.819067 2026] [:error] [pid 44320:tid 44363] [client 4.235.104.4:50041] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aevb1zmFqSpku_dij8hmUgAAAEc"]
[Sat Apr 25 05:08:42.464067 2026] [:error] [pid 44319:tid 44343] [client 4.235.104.4:3500] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "aevb2szJPAVLUb2pWtJFNAAAAA4"]
[Sat Apr 25 05:08:43.651959 2026] [:error] [pid 46083:tid 46087] [client 4.235.104.4:3480] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aevb2zxw_Zq74vWdjmkRnAAAAQA"]
[Sat Apr 25 05:08:46.856181 2026] [:error] [pid 44425:tid 44443] [client 4.235.104.4:49258] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aevb3iUl-VlItvY2tR_tlgAAANA"]
[Sat Apr 25 05:08:48.084961 2026] [:error] [pid 44320:tid 44372] [client 4.235.104.4:3414] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aevb4DmFqSpku_dij8hmXAAAAFA"]
[Sat Apr 25 05:08:51.121882 2026] [:error] [pid 44319:tid 44349] [client 4.235.104.4:3397] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "aevb48zJPAVLUb2pWtJFOgAAABQ"]
[Sat Apr 25 05:08:54.012052 2026] [:error] [pid 46083:tid 46103] [client 4.235.104.4:49231] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aevb5jxw_Zq74vWdjmkRvQAAARA"]
[Sat Apr 25 05:08:55.815407 2026] [:error] [pid 46083:tid 46105] [client 4.235.104.4:3499] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aevb5zxw_Zq74vWdjmkRxAAAARI"]
[Sat Apr 25 05:08:57.199333 2026] [:error] [pid 44425:tid 44430] [client 4.235.104.4:53847] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aevb6SUl-VlItvY2tR_togAAAMM"]
[Sat Apr 25 05:08:58.541876 2026] [:error] [pid 44425:tid 44442] [client 4.235.104.4:50011] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "aevb6iUl-VlItvY2tR_tpQAAAM8"]
[Sat Apr 25 05:09:00.579888 2026] [:error] [pid 44320:tid 44372] [client 4.235.104.4:3453] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "aevb7DmFqSpku_dij8hmZAAAAFA"]
[Sat Apr 25 05:09:03.430819 2026] [:error] [pid 44321:tid 44397] [client 4.235.104.4:3449] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "aevb741b5lV-asWa_Y4YNAAAAI4"]
[Sat Apr 25 05:09:05.409425 2026] [:error] [pid 44319:tid 44331] [client 4.235.104.4:63054] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "aevb8czJPAVLUb2pWtJFQAAAAAI"]
[Sat Apr 25 05:09:20.591053 2026] [:error] [pid 46083:tid 46101] [client 4.235.104.4:49984] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaza.php"] [unique_id "aevcADxw_Zq74vWdjmkSIgAAAQ4"]
[Sat Apr 25 05:09:22.277106 2026] [:error] [pid 44319:tid 44346] [client 4.235.104.4:49991] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaza.php"] [unique_id "aevcAszJPAVLUb2pWtJFRgAAABE"]
[Sat Apr 25 05:09:24.696459 2026] [:error] [pid 44319:tid 44349] [client 4.235.104.4:3430] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaza.php"] [unique_id "aevcBMzJPAVLUb2pWtJFSgAAABQ"]
[Sat Apr 25 05:09:28.046107 2026] [:error] [pid 44320:tid 44357] [client 4.235.104.4:50014] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gaza.php"] [unique_id "aevcCDmFqSpku_dij8hmigAAAEE"]
[Sat Apr 25 05:09:31.180200 2026] [:error] [pid 44319:tid 44345] [client 4.235.104.4:63066] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aevcC8zJPAVLUb2pWtJFTwAAABA"]
[Sat Apr 25 05:09:31.863884 2026] [:error] [pid 44319:tid 44337] [client 4.235.104.4:49996] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aevcC8zJPAVLUb2pWtJFUQAAAAg"]
[Sat Apr 25 05:09:32.469579 2026] [:error] [pid 44320:tid 44374] [client 4.235.104.4:65490] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aevcDDmFqSpku_dij8hmmAAAAFI"]
[Sat Apr 25 05:09:34.007507 2026] [:error] [pid 44425:tid 44442] [client 4.235.104.4:63082] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "aevcDiUl-VlItvY2tR_tugAAAM8"]
[Sat Apr 25 05:09:34.687332 2026] [:error] [pid 46083:tid 46103] [client 4.235.104.4:59233] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "aevcDjxw_Zq74vWdjmkSOwAAARA"]
[Sat Apr 25 05:09:37.174302 2026] [:error] [pid 44321:tid 44383] [client 4.235.104.4:3409] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "aevcEY1b5lV-asWa_Y4YYwAAAIA"]
[Sat Apr 25 05:09:39.362998 2026] [:error] [pid 46083:tid 46111] [client 4.235.104.4:65480] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "aevcEzxw_Zq74vWdjmkSQwAAARc"]
[Sat Apr 25 05:09:41.051547 2026] [:error] [pid 44319:tid 44350] [client 4.235.104.4:53920] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "aevcFczJPAVLUb2pWtJFVAAAABU"]
[Sat Apr 25 05:09:43.521521 2026] [:error] [pid 44321:tid 44394] [client 4.235.104.4:63079] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "aevcF41b5lV-asWa_Y4YcwAAAIs"]
[Sat Apr 25 05:09:45.039715 2026] [:error] [pid 44320:tid 44367] [client 4.235.104.4:15490] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "aevcGTmFqSpku_dij8hmqAAAAEs"]
[Sat Apr 25 05:09:48.102623 2026] [:error] [pid 46083:tid 46109] [client 4.235.104.4:15546] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "aevcHDxw_Zq74vWdjmkSXQAAARU"]
[Sat Apr 25 05:09:52.057519 2026] [:error] [pid 44321:tid 44395] [client 4.235.104.4:3428] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws82.php"] [unique_id "aevcII1b5lV-asWa_Y4YfQAAAIw"]
[Sat Apr 25 05:09:54.191925 2026] [:error] [pid 44319:tid 44353] [client 4.235.104.4:48998] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aevcIszJPAVLUb2pWtJFXgAAABg"]
[Sat Apr 25 05:09:55.044711 2026] [:error] [pid 44319:tid 44329] [client 4.235.104.4:3393] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aevcI8zJPAVLUb2pWtJFYwAAAAA"]
[Sat Apr 25 05:09:57.029817 2026] [:error] [pid 44425:tid 44447] [client 4.235.104.4:49325] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aevcJSUl-VlItvY2tR_t1wAAANQ"]
[Sat Apr 25 05:09:58.326288 2026] [:error] [pid 44319:tid 44348] [client 4.235.104.4:49718] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aevcJszJPAVLUb2pWtJFbQAAABM"]
[Sat Apr 25 05:10:00.606095 2026] [:error] [pid 44425:tid 44450] [client 4.235.104.4:64997] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yw5bi63u.php"] [unique_id "aevcKCUl-VlItvY2tR_t3gAAANc"]
[Sat Apr 25 05:10:02.907709 2026] [:error] [pid 44425:tid 44430] [client 4.235.104.4:54298] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yw5bi63u.php"] [unique_id "aevcKiUl-VlItvY2tR_t5AAAAMM"]
[Sat Apr 25 05:10:04.987699 2026] [:error] [pid 44320:tid 44366] [client 4.235.104.4:59254] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yw5bi63u.php"] [unique_id "aevcLDmFqSpku_dij8hmxAAAAEo"]
[Sat Apr 25 05:10:07.297740 2026] [:error] [pid 44321:tid 44399] [client 4.235.104.4:59251] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yw5bi63u.php"] [unique_id "aevcL41b5lV-asWa_Y4YiwAAAJA"]
[Sat Apr 25 05:10:09.590849 2026] [:error] [pid 46083:tid 46092] [client 4.235.104.4:49326] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "aevcMTxw_Zq74vWdjmkSeQAAAQU"]
[Sat Apr 25 05:10:13.004571 2026] [:error] [pid 46083:tid 46111] [client 4.235.104.4:54335] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "aevcNTxw_Zq74vWdjmkSgQAAARc"]
[Sat Apr 25 05:10:14.203489 2026] [:error] [pid 46083:tid 46090] [client 4.235.104.4:51921] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "aevcNjxw_Zq74vWdjmkSgwAAAQM"]
[Sat Apr 25 05:10:15.193753 2026] [:error] [pid 44321:tid 44401] [client 4.235.104.4:49685] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tool.php"] [unique_id "aevcN41b5lV-asWa_Y4YlgAAAJI"]
[Sat Apr 25 05:10:18.144405 2026] [:error] [pid 44319:tid 44350] [client 4.235.104.4:49674] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aevcOszJPAVLUb2pWtJFhQAAABU"]
[Sat Apr 25 05:10:33.411005 2026] [:error] [pid 46083:tid 46102] [client 4.235.104.4:51938] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gcqoa.php"] [unique_id "aevcSTxw_Zq74vWdjmkSwgAAAQ8"]
[Sat Apr 25 05:10:34.969833 2026] [:error] [pid 44320:tid 44376] [client 4.235.104.4:64974] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gcqoa.php"] [unique_id "aevcSjmFqSpku_dij8hm2AAAAFQ"]
[Sat Apr 25 05:10:41.641396 2026] [:error] [pid 46083:tid 46104] [client 4.235.104.4:54297] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gcqoa.php"] [unique_id "aevcUTxw_Zq74vWdjmkS1QAAARE"]
[Sat Apr 25 05:10:46.140683 2026] [:error] [pid 44425:tid 44448] [client 4.235.104.4:54284] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gcqoa.php"] [unique_id "aevcViUl-VlItvY2tR_uIwAAANU"]
[Sat Apr 25 05:10:48.304671 2026] [:error] [pid 46083:tid 46089] [client 4.235.104.4:51961] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "aevcWDxw_Zq74vWdjmkS9QAAAQI"]
[Sat Apr 25 05:10:50.633613 2026] [:error] [pid 46083:tid 46105] [client 4.235.104.4:15499] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "aevcWjxw_Zq74vWdjmkTBwAAARI"]
[Sat Apr 25 05:10:53.620004 2026] [:error] [pid 46083:tid 46104] [client 4.235.104.4:49689] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "aevcXTxw_Zq74vWdjmkTFgAAARE"]
[Sat Apr 25 05:10:57.009583 2026] [:error] [pid 46083:tid 46097] [client 4.235.104.4:48991] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "aevcYTxw_Zq74vWdjmkTKQAAAQo"]
[Sat Apr 25 05:11:00.281058 2026] [:error] [pid 46083:tid 46090] [client 4.235.104.4:49022] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aevcZDxw_Zq74vWdjmkTMQAAAQM"]
[Sat Apr 25 05:11:03.575160 2026] [:error] [pid 46083:tid 46092] [client 4.235.104.4:54299] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aevcZzxw_Zq74vWdjmkTPgAAAQU"]
[Sat Apr 25 05:11:10.170868 2026] [:error] [pid 44425:tid 44433] [client 4.235.104.4:49295] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/b.php"] [unique_id "aevcbiUl-VlItvY2tR_uOAAAAMY"]
[Sat Apr 25 05:11:13.439302 2026] [:error] [pid 44321:tid 44383] [client 4.235.104.4:54273] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aevccY1b5lV-asWa_Y4YxgAAAIA"]
[Sat Apr 25 05:11:16.308018 2026] [:error] [pid 44425:tid 44439] [client 4.235.104.4:48986] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aevcdCUl-VlItvY2tR_uSwAAAMw"]
[Sat Apr 25 05:11:18.951265 2026] [:error] [pid 44320:tid 44363] [client 4.235.104.4:51937] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aevcdjmFqSpku_dij8hnDgAAAEc"]
[Sat Apr 25 05:11:22.068775 2026] [:error] [pid 46083:tid 46103] [client 4.235.104.4:48990] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "aevcejxw_Zq74vWdjmkTdwAAARA"]
[Sat Apr 25 05:11:25.738791 2026] [:error] [pid 44320:tid 44370] [client 4.235.104.4:59235] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class-api.php"] [unique_id "aevcfTmFqSpku_dij8hnEQAAAE4"]
[Sat Apr 25 05:11:29.444100 2026] [:error] [pid 46083:tid 46094] [client 4.235.104.4:15498] [client 4.235.104.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class-api.php"] [unique_id "aevcgTxw_Zq74vWdjmkTmwAAAQc"]
[Sat Apr 25 05:13:35.923975 2026] [:error] [pid 46083:tid 46101] [client 165.22.106.78:41980] [client 165.22.106.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.106.78, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aevc_zxw_Zq74vWdjmkUVAAAAQ4"]
[Sat Apr 25 05:13:36.813542 2026] [proxy_fcgi:error] [pid 46083:tid 46101] [client 165.22.106.78:41980] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 05:13:37.105600 2026] [:error] [pid 46083:tid 46091] [client 165.22.106.78:41980] [client 165.22.106.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.106.78, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aevdATxw_Zq74vWdjmkUWgAAAQQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 05:13:38.141818 2026] [proxy_fcgi:error] [pid 46083:tid 46091] [client 165.22.106.78:41980] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 05:57:52.891866 2026] [:error] [pid 44425:tid 44443] [client 217.174.153.48:36844] [client 217.174.153.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.174.153.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aevnYCUl-VlItvY2tR8A1AAAANA"]
[Sat Apr 25 07:03:18.040963 2026] [:error] [pid 46083:tid 46107] [client 103.193.73.8:35238] [client 103.193.73.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.193.73.8, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aev2tjxw_Zq74vWdjmlG9QAAARM"]
[Sat Apr 25 07:32:36.177109 2026] [:error] [pid 44425:tid 44433] [client 198.23.48.96:57718] [client 198.23.48.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.23.48.96, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aev9lCUl-VlItvY2tR8idAAAAMY"]
[Sat Apr 25 07:49:43.384599 2026] [:error] [pid 44425:tid 44431] [client 108.179.192.230:20028] [client 108.179.192.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.179.192.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aewBlyUl-VlItvY2tR8nqwAAAMQ"]
[Sat Apr 25 07:55:06.678292 2026] [:error] [pid 44320:tid 44359] [client 172.71.148.23:11005] [client 172.71.148.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aewC2jmFqSpku_dij8iGpgAAAEM"]
[Sat Apr 25 08:46:32.642893 2026] [:error] [pid 46083:tid 46105] [client 177.194.75.114:53152] [client 177.194.75.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.194.75.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aewO6Dxw_Zq74vWdjml28AAAARI"]
[Sat Apr 25 08:46:43.246649 2026] [:error] [pid 46083:tid 46108] [client 177.194.75.114:53718] [client 177.194.75.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.194.75.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aewO8zxw_Zq74vWdjml3DgAAARQ"]
[Sat Apr 25 08:46:53.281660 2026] [:error] [pid 44425:tid 44444] [client 177.194.75.114:54056] [client 177.194.75.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.194.75.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aewO_SUl-VlItvY2tR87IAAAANE"]
[Sat Apr 25 08:47:04.032077 2026] [:error] [pid 44425:tid 44451] [client 177.194.75.114:54384] [client 177.194.75.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.194.75.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aewPCCUl-VlItvY2tR87LAAAANg"]
[Sat Apr 25 08:47:15.060529 2026] [:error] [pid 46083:tid 46103] [client 177.194.75.114:54722] [client 177.194.75.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.194.75.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aewPEzxw_Zq74vWdjml3kQAAARA"]
[Sat Apr 25 11:08:18.007125 2026] [:error] [pid 44319:tid 44343] [client 43.135.133.241:34516] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aewwIszJPAVLUb2pWtJ-gAAAAA4"]
[Sat Apr 25 12:03:10.293947 2026] [:error] [pid 44319:tid 44341] [client 182.44.8.254:48901] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aew8_szJPAVLUb2pWtKGiQAAAAw"]
[Sat Apr 25 12:22:29.629552 2026] [:error] [pid 46083:tid 46100] [client 192.185.4.120:52482] [client 192.185.4.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.185.4.120, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexBhTxw_Zq74vWdjmnPeAAAAQ0"]
[Sat Apr 25 12:53:44.975096 2026] [:error] [pid 46083:tid 46098] [client 163.227.192.154:56096] [client 163.227.192.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.227.192.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexI2Dxw_Zq74vWdjmnZawAAAQs"]
[Sat Apr 25 13:19:44.954109 2026] [:error] [pid 44425:tid 44448] [client 159.89.165.161:33914] [client 159.89.165.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.165.161, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aexO8CUl-VlItvY2tR-HGQAAANU"]
[Sat Apr 25 13:19:45.858411 2026] [proxy_fcgi:error] [pid 44425:tid 44448] [client 159.89.165.161:33914] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 13:19:46.174024 2026] [:error] [pid 44425:tid 44444] [client 159.89.165.161:33914] [client 159.89.165.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.165.161, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aexO8iUl-VlItvY2tR-HHQAAANE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 13:19:47.408210 2026] [proxy_fcgi:error] [pid 44425:tid 44444] [client 159.89.165.161:33914] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 13:38:33.312027 2026] [:error] [pid 44319:tid 44338] [client 34.32.244.138:34226] [client 34.32.244.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.32.244.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aexTWczJPAVLUb2pWtKRyAAAAAk"]
[Sat Apr 25 13:38:34.184130 2026] [proxy_fcgi:error] [pid 44319:tid 44338] [client 34.32.244.138:34226] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 13:38:34.461334 2026] [:error] [pid 44319:tid 44348] [client 34.32.244.138:34226] [client 34.32.244.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.32.244.138, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aexTWszJPAVLUb2pWtKRyQAAABM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 13:38:35.469572 2026] [proxy_fcgi:error] [pid 44319:tid 44348] [client 34.32.244.138:34226] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 14:36:01.722848 2026] [:error] [pid 44321:tid 44387] [client 172.215.231.112:8855] [client 172.215.231.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.215.231.112, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/xmlrpc.php"] [unique_id "aexg0Y1b5lV-asWa_Y6e1AAAAIQ"]
[Sat Apr 25 15:46:35.811127 2026] [:error] [pid 44319:tid 44345] [client 217.165.167.110:59924] [client 217.165.167.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.167.110, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexxW8zJPAVLUb2pWtKtrAAAABA"]
[Sat Apr 25 15:46:46.363290 2026] [:error] [pid 44321:tid 44401] [client 217.165.167.110:60780] [client 217.165.167.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.167.110, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexxZo1b5lV-asWa_Y667QAAAJI"]
[Sat Apr 25 15:46:57.001919 2026] [:error] [pid 44319:tid 44345] [client 217.165.167.110:61269] [client 217.165.167.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.167.110, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexxcczJPAVLUb2pWtKtxwAAABA"]
[Sat Apr 25 15:47:07.619403 2026] [:error] [pid 44321:tid 44403] [client 217.165.167.110:61759] [client 217.165.167.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.167.110, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexxe41b5lV-asWa_Y67CQAAAJQ"]
[Sat Apr 25 15:47:18.392666 2026] [:error] [pid 44319:tid 44339] [client 217.165.167.110:62243] [client 217.165.167.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.167.110, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexxhszJPAVLUb2pWtKt-gAAAAo"]
[Sat Apr 25 15:52:52.154909 2026] [:error] [pid 44321:tid 44389] [client 69.49.112.63:47490] [client 69.49.112.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.63, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aexy1I1b5lV-asWa_Y68GgAAAIY"]
[Sat Apr 25 15:52:54.273601 2026] [proxy_fcgi:error] [pid 44321:tid 44389] [client 69.49.112.63:47490] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 15:52:54.661060 2026] [:error] [pid 44321:tid 44393] [client 69.49.112.63:47490] [client 69.49.112.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.63, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aexy1o1b5lV-asWa_Y68HgAAAIo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 15:52:55.737669 2026] [proxy_fcgi:error] [pid 44321:tid 44393] [client 69.49.112.63:47490] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 15:55:29.607686 2026] [:error] [pid 46083:tid 46108] [client 223.178.87.73:30117] [client 223.178.87.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.87.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexzcTxw_Zq74vWdjmkAxQAAARQ"]
[Sat Apr 25 15:55:39.966764 2026] [:error] [pid 44321:tid 44394] [client 223.178.87.73:30990] [client 223.178.87.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.87.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexze41b5lV-asWa_Y68UQAAAIs"]
[Sat Apr 25 15:55:50.282984 2026] [:error] [pid 44320:tid 44379] [client 223.178.87.73:32009] [client 223.178.87.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.87.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexzhjmFqSpku_dij8jdzgAAAFc"]
[Sat Apr 25 15:56:00.758800 2026] [:error] [pid 44425:tid 44433] [client 223.178.87.73:9904] [client 223.178.87.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.87.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexzkCUl-VlItvY2tR-fPAAAAMY"]
[Sat Apr 25 15:56:11.221372 2026] [:error] [pid 44425:tid 44446] [client 223.178.87.73:23221] [client 223.178.87.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.87.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aexzmyUl-VlItvY2tR-fPgAAANM"]
[Sat Apr 25 16:15:50.359905 2026] [:error] [pid 44320:tid 44369] [client 142.154.104.34:58257] [client 142.154.104.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.154.104.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aex4NjmFqSpku_dij8jhLwAAAE0"]
[Sat Apr 25 16:15:50.600304 2026] [:error] [pid 44425:tid 44449] [client 162.62.231.139:49056] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aex4NiUl-VlItvY2tR-gzAAAANY"]
[Sat Apr 25 16:16:00.651501 2026] [:error] [pid 44320:tid 44380] [client 142.154.104.34:58699] [client 142.154.104.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.154.104.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aex4QDmFqSpku_dij8jhNgAAAFg"]
[Sat Apr 25 16:16:11.248537 2026] [:error] [pid 44320:tid 44378] [client 142.154.104.34:59084] [client 142.154.104.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.154.104.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aex4SzmFqSpku_dij8jhPAAAAFY"]
[Sat Apr 25 16:16:21.887924 2026] [:error] [pid 46083:tid 46102] [client 142.154.104.34:59478] [client 142.154.104.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.154.104.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aex4VTxw_Zq74vWdjmkIqgAAAQ8"]
[Sat Apr 25 16:16:32.596844 2026] [:error] [pid 46083:tid 46110] [client 142.154.104.34:59877] [client 142.154.104.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.154.104.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aex4YDxw_Zq74vWdjmkIwQAAARY"]
[Sat Apr 25 16:25:20.211290 2026] [:error] [pid 46083:tid 46089] [client 147.135.214.95:51852] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aex6cDxw_Zq74vWdjmkLEgAAAQI"]
[Sat Apr 25 16:25:22.708398 2026] [:error] [pid 44320:tid 44368] [client 147.135.214.95:42076] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "aex6cjmFqSpku_dij8jisAAAAEw"]
[Sat Apr 25 16:25:25.071365 2026] [:error] [pid 44425:tid 44439] [client 147.135.214.95:42092] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aex6dSUl-VlItvY2tR-h3wAAAMw"]
[Sat Apr 25 16:25:27.528367 2026] [:error] [pid 46083:tid 46092] [client 147.135.214.95:42102] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aex6dzxw_Zq74vWdjmkLGAAAAQU"]
[Sat Apr 25 16:25:30.081763 2026] [:error] [pid 44425:tid 44440] [client 147.135.214.95:54088] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aex6eiUl-VlItvY2tR-h4QAAAM0"]
[Sat Apr 25 16:25:32.439207 2026] [:error] [pid 44320:tid 44373] [client 147.135.214.95:54094] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aex6fDmFqSpku_dij8jisgAAAFE"]
[Sat Apr 25 16:25:34.861019 2026] [:error] [pid 44321:tid 44398] [client 147.135.214.95:54104] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aex6fo1b5lV-asWa_Y7A6gAAAI8"]
[Sat Apr 25 16:25:37.312783 2026] [:error] [pid 44321:tid 44386] [client 147.135.214.95:54116] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aex6gY1b5lV-asWa_Y7A7gAAAIM"]
[Sat Apr 25 16:25:39.781986 2026] [:error] [pid 44320:tid 44365] [client 147.135.214.95:60728] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aex6gzmFqSpku_dij8jitwAAAEk"]
[Sat Apr 25 16:25:42.287745 2026] [:error] [pid 44320:tid 44371] [client 147.135.214.95:60738] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aex6hjmFqSpku_dij8jiuQAAAE8"]
[Sat Apr 25 16:25:44.678105 2026] [:error] [pid 46083:tid 46091] [client 147.135.214.95:60746] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aex6iDxw_Zq74vWdjmkLKwAAAQQ"]
[Sat Apr 25 16:25:47.150618 2026] [:error] [pid 44320:tid 44379] [client 147.135.214.95:60750] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aex6izmFqSpku_dij8jiugAAAFc"]
[Sat Apr 25 16:25:49.602532 2026] [:error] [pid 44320:tid 44363] [client 147.135.214.95:54990] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aex6jTmFqSpku_dij8jivQAAAEc"]
[Sat Apr 25 16:25:51.521202 2026] [:error] [pid 44320:tid 44378] [client 147.135.214.95:54992] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aex6jzmFqSpku_dij8jivwAAAFY"]
[Sat Apr 25 16:25:52.159154 2026] [:error] [pid 44319:tid 44342] [client 147.135.214.95:55006] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aex6kMzJPAVLUb2pWtK3FgAAAA0"]
[Sat Apr 25 16:25:54.683753 2026] [:error] [pid 44321:tid 44391] [client 147.135.214.95:55014] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aex6ko1b5lV-asWa_Y7A9wAAAIg"]
[Sat Apr 25 16:25:55.752128 2026] [:error] [pid 44321:tid 44394] [client 147.135.214.95:55016] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "aex6k41b5lV-asWa_Y7A-QAAAIs"]
[Sat Apr 25 16:25:57.277492 2026] [:error] [pid 44319:tid 44341] [client 147.135.214.95:55022] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aex6lczJPAVLUb2pWtK3GwAAAAw"]
[Sat Apr 25 16:25:59.815098 2026] [:error] [pid 44319:tid 44333] [client 147.135.214.95:40220] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aex6l8zJPAVLUb2pWtK3HgAAAAQ"]
[Sat Apr 25 16:26:02.137757 2026] [:error] [pid 44319:tid 44351] [client 147.135.214.95:40222] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aex6mszJPAVLUb2pWtK3KAAAABY"]
[Sat Apr 25 16:26:04.554991 2026] [:error] [pid 44320:tid 44362] [client 147.135.214.95:40232] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aex6nDmFqSpku_dij8jixQAAAEY"]
[Sat Apr 25 16:26:07.008965 2026] [:error] [pid 46083:tid 46097] [client 147.135.214.95:40244] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aex6nzxw_Zq74vWdjmkLTQAAAQo"]
[Sat Apr 25 16:26:09.394611 2026] [:error] [pid 46083:tid 46104] [client 147.135.214.95:51256] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aex6oTxw_Zq74vWdjmkLVQAAARE"]
[Sat Apr 25 16:26:11.919532 2026] [:error] [pid 46083:tid 46105] [client 147.135.214.95:51270] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aex6ozxw_Zq74vWdjmkLXQAAARI"]
[Sat Apr 25 16:26:14.513994 2026] [:error] [pid 46083:tid 46112] [client 147.135.214.95:51278] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aex6pjxw_Zq74vWdjmkLYgAAARg"]
[Sat Apr 25 16:26:46.554251 2026] [:error] [pid 46083:tid 46109] [client 147.135.214.95:51286] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aex6xjxw_Zq74vWdjmkL7AAAARU"]
[Sat Apr 25 16:26:48.964284 2026] [:error] [pid 46083:tid 46088] [client 147.135.214.95:59702] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aex6yDxw_Zq74vWdjmkL9QAAAQE"]
[Sat Apr 25 16:26:51.429569 2026] [:error] [pid 44425:tid 44439] [client 147.135.214.95:59710] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aex6yyUl-VlItvY2tR-h_AAAAMw"]
[Sat Apr 25 16:26:53.869421 2026] [:error] [pid 44319:tid 44332] [client 147.135.214.95:59720] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aex6zczJPAVLUb2pWtK3TwAAAAM"]
[Sat Apr 25 16:26:56.356044 2026] [:error] [pid 44319:tid 44341] [client 147.135.214.95:59730] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aex60MzJPAVLUb2pWtK3UwAAAAw"]
[Sat Apr 25 16:26:58.785395 2026] [:error] [pid 44320:tid 44376] [client 147.135.214.95:32900] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aex60jmFqSpku_dij8jizwAAAFQ"]
[Sat Apr 25 16:27:01.332098 2026] [:error] [pid 44425:tid 44433] [client 147.135.214.95:32902] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aex61SUl-VlItvY2tR-iAwAAAMY"]
[Sat Apr 25 16:27:03.628436 2026] [:error] [pid 46083:tid 46090] [client 147.135.214.95:32916] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aex61zxw_Zq74vWdjmkMBgAAAQM"]
[Sat Apr 25 16:27:05.975897 2026] [:error] [pid 44425:tid 44451] [client 147.135.214.95:32918] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aex62SUl-VlItvY2tR-iBgAAANg"]
[Sat Apr 25 16:27:08.395047 2026] [:error] [pid 44320:tid 44360] [client 147.135.214.95:32924] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aex63DmFqSpku_dij8ji0gAAAEQ"]
[Sat Apr 25 16:27:10.963675 2026] [:error] [pid 44425:tid 44444] [client 147.135.214.95:54038] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aex63iUl-VlItvY2tR-iCwAAANE"]
[Sat Apr 25 16:27:13.390836 2026] [:error] [pid 44320:tid 44376] [client 147.135.214.95:54052] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aex64TmFqSpku_dij8ji5QAAAFQ"]
[Sat Apr 25 16:27:16.023286 2026] [:error] [pid 46083:tid 46112] [client 147.135.214.95:54064] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aex65Dxw_Zq74vWdjmkMCQAAARg"]
[Sat Apr 25 16:27:18.476425 2026] [:error] [pid 44319:tid 44337] [client 147.135.214.95:36010] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aex65szJPAVLUb2pWtK3jgAAAAg"]
[Sat Apr 25 16:27:20.910835 2026] [:error] [pid 44320:tid 44360] [client 147.135.214.95:36014] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aex66DmFqSpku_dij8ji6QAAAEQ"]
[Sat Apr 25 16:27:23.464713 2026] [:error] [pid 44321:tid 44399] [client 147.135.214.95:36026] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aex6641b5lV-asWa_Y7BHAAAAJA"]
[Sat Apr 25 16:27:25.871036 2026] [:error] [pid 44319:tid 44349] [client 147.135.214.95:36028] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aex67czJPAVLUb2pWtK3lgAAABQ"]
[Sat Apr 25 16:27:28.347296 2026] [:error] [pid 44319:tid 44339] [client 147.135.214.95:36036] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aex68MzJPAVLUb2pWtK3nQAAAAo"]
[Sat Apr 25 16:27:30.948588 2026] [:error] [pid 44321:tid 44407] [client 147.135.214.95:53800] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aex68o1b5lV-asWa_Y7BHgAAAJg"]
[Sat Apr 25 16:27:33.391258 2026] [:error] [pid 46083:tid 46095] [client 147.135.214.95:53812] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aex69Txw_Zq74vWdjmkMKQAAAQg"]
[Sat Apr 25 16:27:35.799413 2026] [:error] [pid 46083:tid 46108] [client 147.135.214.95:53820] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aex69zxw_Zq74vWdjmkMMQAAARQ"]
[Sat Apr 25 16:27:38.211052 2026] [:error] [pid 46083:tid 46091] [client 147.135.214.95:53832] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aex6-jxw_Zq74vWdjmkMNwAAAQQ"]
[Sat Apr 25 16:27:40.676758 2026] [:error] [pid 44321:tid 44406] [client 147.135.214.95:60282] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aex6_I1b5lV-asWa_Y7BIQAAAJc"]
[Sat Apr 25 16:28:11.396859 2026] [:error] [pid 44319:tid 44351] [client 147.135.214.95:60284] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aex7G8zJPAVLUb2pWtK3ywAAABY"]
[Sat Apr 25 16:28:13.733488 2026] [:error] [pid 44425:tid 44431] [client 147.135.214.95:40358] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aex7HSUl-VlItvY2tR-iHgAAAMQ"]
[Sat Apr 25 16:28:16.261681 2026] [:error] [pid 46083:tid 46096] [client 147.135.214.95:40360] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aex7IDxw_Zq74vWdjmkMfgAAAQk"]
[Sat Apr 25 16:28:18.760931 2026] [:error] [pid 46083:tid 46107] [client 147.135.214.95:37066] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aex7Ijxw_Zq74vWdjmkMgAAAARM"]
[Sat Apr 25 16:28:21.172746 2026] [:error] [pid 46083:tid 46110] [client 147.135.214.95:37080] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aex7JTxw_Zq74vWdjmkMhwAAARY"]
[Sat Apr 25 16:28:23.626167 2026] [:error] [pid 46083:tid 46089] [client 147.135.214.95:37090] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aex7Jzxw_Zq74vWdjmkMiwAAAQI"]
[Sat Apr 25 16:28:26.026288 2026] [:error] [pid 46083:tid 46097] [client 147.135.214.95:37102] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aex7Kjxw_Zq74vWdjmkMkAAAAQo"]
[Sat Apr 25 16:28:28.594523 2026] [:error] [pid 44321:tid 44383] [client 147.135.214.95:56832] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aex7LI1b5lV-asWa_Y7BQQAAAIA"]
[Sat Apr 25 16:28:30.996786 2026] [:error] [pid 44320:tid 44377] [client 147.135.214.95:56840] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aex7LjmFqSpku_dij8jjDQAAAFU"]
[Sat Apr 25 16:28:33.379987 2026] [:error] [pid 46083:tid 46110] [client 147.135.214.95:56848] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aex7MTxw_Zq74vWdjmkMlAAAARY"]
[Sat Apr 25 16:28:35.772222 2026] [:error] [pid 44425:tid 44438] [client 147.135.214.95:56860] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aex7MyUl-VlItvY2tR-iIAAAAMs"]
[Sat Apr 25 16:28:38.221477 2026] [:error] [pid 44319:tid 44345] [client 147.135.214.95:56864] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aex7NszJPAVLUb2pWtK30QAAABA"]
[Sat Apr 25 16:28:40.822965 2026] [:error] [pid 44320:tid 44378] [client 147.135.214.95:34364] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aex7ODmFqSpku_dij8jjHwAAAFY"]
[Sat Apr 25 16:32:09.851941 2026] [:error] [pid 44319:tid 44352] [client 147.135.214.95:42626] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "aex8CczJPAVLUb2pWtK44QAAABc"]
[Sat Apr 25 16:32:12.892601 2026] [:error] [pid 44321:tid 44390] [client 147.135.214.95:53526] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "aex8DI1b5lV-asWa_Y7CBQAAAIc"]
[Sat Apr 25 16:32:15.620412 2026] [:error] [pid 44320:tid 44360] [client 147.135.214.95:53530] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "aex8DzmFqSpku_dij8jj9wAAAEQ"]
[Sat Apr 25 16:32:18.409329 2026] [:error] [pid 44321:tid 44387] [client 147.135.214.95:53532] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "aex8Eo1b5lV-asWa_Y7CCAAAAIQ"]
[Sat Apr 25 16:32:21.273830 2026] [:error] [pid 44320:tid 44379] [client 147.135.214.95:41898] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "aex8FTmFqSpku_dij8jj_QAAAFc"]
[Sat Apr 25 16:32:24.725952 2026] [:error] [pid 44320:tid 44380] [client 147.135.214.95:41908] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aex8GDmFqSpku_dij8jkAgAAAFg"]
[Sat Apr 25 16:32:28.197507 2026] [:error] [pid 44425:tid 44435] [client 147.135.214.95:41922] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aex8HCUl-VlItvY2tR-ifQAAAMg"]
[Sat Apr 25 16:32:30.971483 2026] [:error] [pid 44320:tid 44368] [client 147.135.214.95:44864] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aex8HjmFqSpku_dij8jkCgAAAEw"]
[Sat Apr 25 16:32:34.648575 2026] [:error] [pid 46083:tid 46087] [client 147.135.214.95:44866] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aex8Ijxw_Zq74vWdjmkOTQAAAQA"]
[Sat Apr 25 16:32:38.765966 2026] [:error] [pid 44425:tid 44449] [client 147.135.214.95:45570] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aex8JiUl-VlItvY2tR-igQAAANY"]
[Sat Apr 25 16:32:41.425395 2026] [:error] [pid 44320:tid 44358] [client 147.135.214.95:45586] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aex8KTmFqSpku_dij8jkDAAAAEI"]
[Sat Apr 25 16:32:44.653429 2026] [:error] [pid 44425:tid 44451] [client 147.135.214.95:45602] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aex8LCUl-VlItvY2tR-ihgAAANg"]
[Sat Apr 25 16:32:48.150746 2026] [:error] [pid 44321:tid 44401] [client 147.135.214.95:45610] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aex8MI1b5lV-asWa_Y7CGQAAAJI"]
[Sat Apr 25 16:32:51.388670 2026] [:error] [pid 46083:tid 46096] [client 147.135.214.95:45482] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aex8Mzxw_Zq74vWdjmkOnwAAAQk"]
[Sat Apr 25 16:32:54.546121 2026] [:error] [pid 46083:tid 46100] [client 147.135.214.95:45494] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aex8Njxw_Zq74vWdjmkOqgAAAQ0"]
[Sat Apr 25 16:32:56.930940 2026] [:error] [pid 44320:tid 44364] [client 147.135.214.95:45508] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aex8ODmFqSpku_dij8jkEgAAAEg"]
[Sat Apr 25 16:32:59.438408 2026] [:error] [pid 44321:tid 44402] [client 147.135.214.95:37558] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aex8O41b5lV-asWa_Y7CIgAAAJM"]
[Sat Apr 25 16:33:01.862575 2026] [:error] [pid 44425:tid 44446] [client 147.135.214.95:37574] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aex8PSUl-VlItvY2tR-inAAAANM"]
[Sat Apr 25 16:33:04.293267 2026] [:error] [pid 46083:tid 46101] [client 147.135.214.95:37576] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aex8QDxw_Zq74vWdjmkOvAAAAQ4"]
[Sat Apr 25 16:33:36.922195 2026] [:error] [pid 44321:tid 44391] [client 147.135.214.95:37590] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aex8YI1b5lV-asWa_Y7CqAAAAIg"]
[Sat Apr 25 16:33:39.576839 2026] [:error] [pid 44320:tid 44376] [client 147.135.214.95:38160] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aex8YzmFqSpku_dij8jkIwAAAFQ"]
[Sat Apr 25 16:33:42.423205 2026] [:error] [pid 44319:tid 44334] [client 147.135.214.95:38172] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "aex8ZszJPAVLUb2pWtK6DQAAAAU"]
[Sat Apr 25 16:33:45.020847 2026] [:error] [pid 44320:tid 44358] [client 147.135.214.95:38174] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aex8aTmFqSpku_dij8jkJgAAAEI"]
[Sat Apr 25 16:33:47.541906 2026] [:error] [pid 44319:tid 44345] [client 147.135.214.95:38188] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aex8a8zJPAVLUb2pWtK6GQAAABA"]
[Sat Apr 25 16:33:49.930833 2026] [:error] [pid 44319:tid 44341] [client 147.135.214.95:36170] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aex8bczJPAVLUb2pWtK6GwAAAAw"]
[Sat Apr 25 16:33:52.493818 2026] [:error] [pid 46083:tid 46097] [client 147.135.214.95:36176] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aex8cDxw_Zq74vWdjmkPYQAAAQo"]
[Sat Apr 25 16:33:54.935333 2026] [:error] [pid 46083:tid 46093] [client 147.135.214.95:36184] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aex8cjxw_Zq74vWdjmkPZAAAAQY"]
[Sat Apr 25 16:33:57.456690 2026] [:error] [pid 44321:tid 44406] [client 147.135.214.95:36194] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aex8dY1b5lV-asWa_Y7CrgAAAJc"]
[Sat Apr 25 16:33:59.870668 2026] [:error] [pid 46083:tid 46108] [client 147.135.214.95:46780] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aex8dzxw_Zq74vWdjmkPbgAAARQ"]
[Sat Apr 25 16:34:02.424196 2026] [:error] [pid 44425:tid 44451] [client 147.135.214.95:46794] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aex8eiUl-VlItvY2tR-i4AAAANg"]
[Sat Apr 25 16:34:04.838558 2026] [:error] [pid 44425:tid 44431] [client 147.135.214.95:46808] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aex8fCUl-VlItvY2tR-i4QAAAMQ"]
[Sat Apr 25 16:34:07.332616 2026] [:error] [pid 44425:tid 44438] [client 147.135.214.95:46818] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aex8fyUl-VlItvY2tR-i4gAAAMs"]
[Sat Apr 25 16:34:09.647010 2026] [:error] [pid 44319:tid 44333] [client 147.135.214.95:38278] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aex8gczJPAVLUb2pWtK6HwAAAAQ"]
[Sat Apr 25 16:34:12.169524 2026] [:error] [pid 46083:tid 46102] [client 147.135.214.95:38284] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aex8hDxw_Zq74vWdjmkPhQAAAQ8"]
[Sat Apr 25 16:34:14.728617 2026] [:error] [pid 44425:tid 44448] [client 147.135.214.95:38288] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aex8hiUl-VlItvY2tR-i6AAAANU"]
[Sat Apr 25 16:34:17.083042 2026] [:error] [pid 44321:tid 44394] [client 147.135.214.95:38292] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aex8iY1b5lV-asWa_Y7CxAAAAIs"]
[Sat Apr 25 16:34:19.529069 2026] [:error] [pid 44320:tid 44370] [client 147.135.214.95:52552] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aex8izmFqSpku_dij8jkNQAAAE4"]
[Sat Apr 25 16:34:22.051294 2026] [:error] [pid 46083:tid 46111] [client 147.135.214.95:52566] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aex8jjxw_Zq74vWdjmkPnAAAARc"]
[Sat Apr 25 16:34:24.461151 2026] [:error] [pid 44425:tid 44434] [client 147.135.214.95:52570] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aex8kCUl-VlItvY2tR-i8wAAAMc"]
[Sat Apr 25 16:34:26.942494 2026] [:error] [pid 44319:tid 44345] [client 147.135.214.95:52580] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aex8kszJPAVLUb2pWtK6PAAAABA"]
[Sat Apr 25 16:34:29.401485 2026] [:error] [pid 46083:tid 46098] [client 147.135.214.95:40770] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aex8lTxw_Zq74vWdjmkPtQAAAQs"]
[Sat Apr 25 16:34:31.860756 2026] [:error] [pid 46083:tid 46095] [client 147.135.214.95:40784] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aex8lzxw_Zq74vWdjmkQDgAAAQg"]
[Sat Apr 25 16:35:02.915166 2026] [:error] [pid 44320:tid 44373] [client 147.135.214.95:40786] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aex8tjmFqSpku_dij8jkdwAAAFE"]
[Sat Apr 25 16:35:05.448306 2026] [:error] [pid 44425:tid 44437] [client 147.135.214.95:49092] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aex8uSUl-VlItvY2tR-jBAAAAMo"]
[Sat Apr 25 16:35:08.007183 2026] [:error] [pid 46083:tid 46101] [client 147.135.214.95:49100] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aex8vDxw_Zq74vWdjmkQRwAAAQ4"]
[Sat Apr 25 16:35:10.596649 2026] [:error] [pid 46083:tid 46094] [client 147.135.214.95:54234] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aex8vjxw_Zq74vWdjmkQTAAAAQc"]
[Sat Apr 25 16:35:12.973195 2026] [:error] [pid 44319:tid 44340] [client 147.135.214.95:54250] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aex8wMzJPAVLUb2pWtK6lQAAAAs"]
[Sat Apr 25 16:35:15.526407 2026] [:error] [pid 44319:tid 44341] [client 147.135.214.95:54264] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aex8w8zJPAVLUb2pWtK6mAAAAAw"]
[Sat Apr 25 16:35:17.979528 2026] [:error] [pid 44319:tid 44330] [client 147.135.214.95:54272] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aex8xczJPAVLUb2pWtK6mgAAAAE"]
[Sat Apr 25 16:35:20.593251 2026] [:error] [pid 44321:tid 44386] [client 147.135.214.95:52902] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aex8yI1b5lV-asWa_Y7DcAAAAIM"]
[Sat Apr 25 16:35:23.009453 2026] [:error] [pid 46083:tid 46088] [client 147.135.214.95:52914] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aex8yzxw_Zq74vWdjmkQXQAAAQE"]
[Sat Apr 25 16:35:25.487052 2026] [:error] [pid 46083:tid 46105] [client 147.135.214.95:52918] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aex8zTxw_Zq74vWdjmkQYgAAARI"]
[Sat Apr 25 16:35:27.801468 2026] [:error] [pid 44321:tid 44401] [client 147.135.214.95:52930] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aex8z41b5lV-asWa_Y7DcwAAAJI"]
[Sat Apr 25 16:35:30.193863 2026] [:error] [pid 44321:tid 44388] [client 147.135.214.95:39080] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aex80o1b5lV-asWa_Y7DdQAAAIU"]
[Sat Apr 25 16:35:32.575929 2026] [:error] [pid 44425:tid 44430] [client 147.135.214.95:39092] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aex81CUl-VlItvY2tR-jBgAAAMM"]
[Sat Apr 25 16:35:34.958979 2026] [:error] [pid 44321:tid 44395] [client 147.135.214.95:39096] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aex81o1b5lV-asWa_Y7DigAAAIw"]
[Sat Apr 25 16:35:37.475300 2026] [:error] [pid 44319:tid 44347] [client 147.135.214.95:39106] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aex82czJPAVLUb2pWtK6xQAAABI"]
[Sat Apr 25 16:35:39.894330 2026] [:error] [pid 44425:tid 44446] [client 147.135.214.95:48070] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aex82yUl-VlItvY2tR-jCgAAANM"]
[Sat Apr 25 16:35:42.484174 2026] [:error] [pid 46083:tid 46111] [client 147.135.214.95:48076] [client 147.135.214.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aex83jxw_Zq74vWdjmkQogAAARc"]
[Sat Apr 25 17:42:13.341584 2026] [:error] [pid 62630:tid 62691] [client 168.119.5.185:48728] [client 168.119.5.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.5.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeyMdXCJIizbz7HiRHTKRwAAAEk"]
[Sat Apr 25 17:42:14.212255 2026] [proxy_fcgi:error] [pid 62630:tid 62691] [client 168.119.5.185:48728] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 17:42:14.480983 2026] [:error] [pid 62630:tid 62699] [client 168.119.5.185:48728] [client 168.119.5.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.5.185, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aeyMdnCJIizbz7HiRHTKSQAAAFE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 17:42:15.530112 2026] [proxy_fcgi:error] [pid 62630:tid 62699] [client 168.119.5.185:48728] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 17:46:53.801698 2026] [:error] [pid 62632:tid 62749] [client 103.163.246.36:56360] [client 103.163.246.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.246.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyNjQo5oFy5kfJhz1ZfOgAAAMw"]
[Sat Apr 25 18:21:23.805429 2026] [:error] [pid 16108:tid 16176] [client 112.215.45.138:21032] [client 112.215.45.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.45.138, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyVo4bPF4HSQDj6WrlZPwAAAMo"]
[Sat Apr 25 18:21:33.882344 2026] [:error] [pid 16195:tid 16216] [client 112.215.152.140:52113] [client 112.215.152.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.152.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyVrTVPLvrpvXaNQOkHNgAAABI"]
[Sat Apr 25 18:22:01.416850 2026] [:error] [pid 16195:tid 16219] [client 112.215.152.206:1991] [client 112.215.152.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.152.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyVyTVPLvrpvXaNQOkIHQAAABU"]
[Sat Apr 25 18:22:06.032489 2026] [:error] [pid 16195:tid 16219] [client 112.215.45.75:25974] [client 112.215.45.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.45.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyVzjVPLvrpvXaNQOkIKwAAABU"]
[Sat Apr 25 18:22:16.527143 2026] [:error] [pid 16195:tid 16211] [client 112.215.45.203:47056] [client 112.215.45.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.45.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyV2DVPLvrpvXaNQOkIqgAAAA0"]
[Sat Apr 25 18:22:27.382662 2026] [:error] [pid 16195:tid 16213] [client 140.213.6.56:4670] [client 140.213.6.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.213.6.56, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyV4zVPLvrpvXaNQOkIygAAAA8"]
[Sat Apr 25 18:22:38.874125 2026] [:error] [pid 16195:tid 16205] [client 140.213.6.245:31797] [client 140.213.6.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.213.6.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyV7jVPLvrpvXaNQOkI9gAAAAc"]
[Sat Apr 25 18:22:48.658784 2026] [:error] [pid 16106:tid 16129] [client 140.213.14.200:38187] [client 140.213.14.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.213.14.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyV-CGjdEsrWF7e-7MX9gAAAFM"]
[Sat Apr 25 18:22:59.749021 2026] [:error] [pid 16195:tid 16209] [client 112.215.45.138:18524] [client 112.215.45.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.45.138, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWAzVPLvrpvXaNQOkJWAAAAAs"]
[Sat Apr 25 18:23:10.344009 2026] [:error] [pid 16107:tid 16161] [client 112.215.45.10:41244] [client 112.215.45.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.45.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWDtIfF7Hy3tw0sYRhNgAAAJg"]
[Sat Apr 25 18:23:20.912943 2026] [:error] [pid 16195:tid 16220] [client 140.213.6.178:10544] [client 140.213.6.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.213.6.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWGDVPLvrpvXaNQOkJrgAAABY"]
[Sat Apr 25 18:23:33.023109 2026] [:error] [pid 16195:tid 16220] [client 140.213.6.245:13060] [client 140.213.6.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.213.6.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWJTVPLvrpvXaNQOkJ9wAAABY"]
[Sat Apr 25 18:23:41.840581 2026] [:error] [pid 16106:tid 16128] [client 140.213.14.2:22923] [client 140.213.14.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.213.14.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWLSGjdEsrWF7e-7MY9AAAAFI"]
[Sat Apr 25 18:23:52.577742 2026] [:error] [pid 16195:tid 16218] [client 112.215.45.75:61437] [client 112.215.45.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.45.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWODVPLvrpvXaNQOkKWQAAABQ"]
[Sat Apr 25 18:24:02.861358 2026] [:error] [pid 16108:tid 16164] [client 112.215.152.206:4682] [client 112.215.152.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.152.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWQobPF4HSQDj6WrlcYgAAAMA"]
[Sat Apr 25 18:24:13.603794 2026] [:error] [pid 16108:tid 16176] [client 112.215.152.206:61692] [client 112.215.152.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.152.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWTYbPF4HSQDj6WrlccgAAAMo"]
[Sat Apr 25 18:24:24.180383 2026] [:error] [pid 16195:tid 16220] [client 112.215.152.140:49477] [client 112.215.152.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.152.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWWDVPLvrpvXaNQOkK2gAAABY"]
[Sat Apr 25 18:24:34.772596 2026] [:error] [pid 16195:tid 16217] [client 112.215.45.138:41738] [client 112.215.45.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.45.138, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWYjVPLvrpvXaNQOkLAAAAABM"]
[Sat Apr 25 18:24:45.531012 2026] [:error] [pid 16195:tid 16216] [client 140.213.14.124:3898] [client 140.213.14.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.213.14.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWbTVPLvrpvXaNQOkLIQAAABI"]
[Sat Apr 25 18:24:56.019603 2026] [:error] [pid 16108:tid 16182] [client 140.213.14.200:41315] [client 140.213.14.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.213.14.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWeIbPF4HSQDj6WrldDAAAANA"]
[Sat Apr 25 18:25:06.835828 2026] [:error] [pid 16107:tid 16143] [client 112.215.45.75:22004] [client 112.215.45.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.215.45.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWgtIfF7Hy3tw0sYRiVAAAAIY"]
[Sat Apr 25 18:25:22.640981 2026] [:error] [pid 16106:tid 16128] [client 223.181.51.86:32199] [client 223.181.51.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.51.86, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWkiGjdEsrWF7e-7MZwAAAAFI"]
[Sat Apr 25 18:25:31.988796 2026] [:error] [pid 16108:tid 16186] [client 223.181.51.86:27700] [client 223.181.51.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.51.86, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWm4bPF4HSQDj6WrldewAAANQ"]
[Sat Apr 25 18:25:42.471434 2026] [:error] [pid 16108:tid 16164] [client 223.181.51.86:15671] [client 223.181.51.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.51.86, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyWpobPF4HSQDj6WrldpwAAAMA"]
[Sat Apr 25 19:16:28.334805 2026] [:error] [pid 16106:tid 16121] [client 198.23.48.242:37290] [client 198.23.48.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.23.48.242, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyijCGjdEsrWF7e-7Mt7gAAAEs"]
[Sat Apr 25 19:32:54.757892 2026] [:error] [pid 16195:tid 16216] [client 139.180.131.18:54988] [client 139.180.131.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.180.131.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeymZjVPLvrpvXaNQOkiWQAAABI"]
[Sat Apr 25 19:36:39.488886 2026] [:error] [pid 16108:tid 16179] [client 103.179.104.165:54009] [client 103.179.104.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeynR4bPF4HSQDj6Wrl07QAAAM0"]
[Sat Apr 25 19:36:49.229912 2026] [:error] [pid 16195:tid 16218] [client 103.179.104.165:50640] [client 103.179.104.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeynUTVPLvrpvXaNQOkjGwAAABQ"]
[Sat Apr 25 19:36:59.840429 2026] [:error] [pid 29049:tid 29073] [client 103.179.104.165:62454] [client 103.179.104.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeynWyfsWHIvmg63qcV9FgAAARY"]
[Sat Apr 25 19:37:10.446140 2026] [:error] [pid 16107:tid 16137] [client 103.179.104.165:50987] [client 103.179.104.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeynZtIfF7Hy3tw0sYR5RQAAAIA"]
[Sat Apr 25 19:37:21.134459 2026] [:error] [pid 16108:tid 16178] [client 103.179.104.165:52765] [client 103.179.104.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyncYbPF4HSQDj6Wrl1RAAAAMw"]
[Sat Apr 25 19:44:03.844768 2026] [:error] [pid 16107:tid 16149] [client 103.179.104.150:54444] [client 103.179.104.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeypA9IfF7Hy3tw0sYR-rQAAAIw"]
[Sat Apr 25 19:59:47.044041 2026] [:error] [pid 16108:tid 16182] [client 103.179.104.176:65483] [client 103.179.104.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aeyss4bPF4HSQDj6WrmJ5QAAANA"]
[Sat Apr 25 20:31:04.115957 2026] [:error] [pid 59896:tid 59908] [client 103.191.241.228:47716] [client 103.191.241.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.191.241.228, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aey0CLLLzhtkd-OXUgDbvAAAAEg"]
[Sat Apr 25 20:31:04.986107 2026] [proxy_fcgi:error] [pid 59896:tid 59908] [client 103.191.241.228:47716] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat Apr 25 20:31:05.425395 2026] [:error] [pid 59896:tid 59903] [client 103.191.241.228:47716] [client 103.191.241.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.191.241.228, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aey0CbLLzhtkd-OXUgDbwQAAAEM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 20:31:06.467396 2026] [proxy_fcgi:error] [pid 59896:tid 59903] [client 103.191.241.228:47716] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat Apr 25 20:53:47.920249 2026] [:error] [pid 3212:tid 3224] [client 185.5.70.154:53934] [client 185.5.70.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.5.70.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aey5W_g-28TY8_YLtUchcwAAAQo"]
[Sat Apr 25 20:53:58.204297 2026] [:error] [pid 59897:tid 59944] [client 185.5.70.154:54293] [client 185.5.70.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.5.70.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aey5ZvBrrkdzpEbmK4d_HQAAAJE"]
[Sat Apr 25 20:54:08.930027 2026] [:error] [pid 59985:tid 59997] [client 185.5.70.154:54641] [client 185.5.70.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.5.70.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aey5cAF_zDvEhKvyTH6n1QAAAAo"]
[Sat Apr 25 20:54:19.659877 2026] [:error] [pid 59985:tid 60010] [client 185.5.70.154:54991] [client 185.5.70.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.5.70.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aey5ewF_zDvEhKvyTH6n3wAAABc"]
[Sat Apr 25 20:54:30.305832 2026] [:error] [pid 59896:tid 59911] [client 185.5.70.154:55343] [client 185.5.70.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.5.70.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aey5hrLLzhtkd-OXUgDmtgAAAEs"]
[Sat Apr 25 21:01:23.595480 2026] [:error] [pid 59897:tid 59950] [client 131.161.178.51:31648] [client 131.161.178.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.161.178.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aey7I_BrrkdzpEbmK4eAvgAAAJc"]
[Sat Apr 25 21:01:33.427323 2026] [:error] [pid 3212:tid 3235] [client 131.161.178.51:32055] [client 131.161.178.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.161.178.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aey7Lfg-28TY8_YLtUcmCwAAARU"]
[Sat Apr 25 21:01:43.894534 2026] [:error] [pid 59898:tid 59968] [client 131.161.178.51:31950] [client 131.161.178.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.161.178.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aey7Nx-4vImxb0kbdzeosQAAAM4"]
[Sat Apr 25 21:01:54.384039 2026] [:error] [pid 59985:tid 59996] [client 131.161.178.51:31480] [client 131.161.178.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.161.178.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aey7QgF_zDvEhKvyTH6qHQAAAAk"]
[Sat Apr 25 21:02:04.866662 2026] [:error] [pid 59985:tid 60004] [client 131.161.178.51:32453] [client 131.161.178.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.161.178.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aey7TAF_zDvEhKvyTH6qJwAAABE"]
[Sat Apr 25 21:04:55.610824 2026] [:error] [pid 59897:tid 59932] [client 20.199.101.230:34710] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/solo1.php"] [unique_id "aey79_BrrkdzpEbmK4eB8gAAAIU"]
[Sat Apr 25 21:04:56.287687 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:23056] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/solo1.php"] [unique_id "aey7-Pg-28TY8_YLtUcnuQAAAQg"]
[Sat Apr 25 21:04:57.152558 2026] [:error] [pid 59896:tid 59901] [client 20.199.101.230:34273] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/solo1.php"] [unique_id "aey7-bLLzhtkd-OXUgDqzAAAAEE"]
[Sat Apr 25 21:04:58.250882 2026] [:error] [pid 59897:tid 59945] [client 20.199.101.230:34746] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/solo1.php"] [unique_id "aey7-vBrrkdzpEbmK4eB9gAAAJI"]
[Sat Apr 25 21:04:58.974310 2026] [:error] [pid 3212:tid 3235] [client 20.199.101.230:34697] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/locales.php"] [unique_id "aey7-vg-28TY8_YLtUcnvQAAARU"]
[Sat Apr 25 21:04:59.575449 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:24636] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/locales.php"] [unique_id "aey7-_g-28TY8_YLtUcnwAAAARQ"]
[Sat Apr 25 21:05:00.188111 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:31654] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/locales.php"] [unique_id "aey7_Pg-28TY8_YLtUcnwgAAAQY"]
[Sat Apr 25 21:05:00.889863 2026] [:error] [pid 59898:tid 59961] [client 20.199.101.230:34251] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/locales.php"] [unique_id "aey7_B-4vImxb0kbdzepJgAAAMc"]
[Sat Apr 25 21:05:01.755510 2026] [:error] [pid 59896:tid 59923] [client 20.199.101.230:34731] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aey7_bLLzhtkd-OXUgDq3gAAAFc"]
[Sat Apr 25 21:05:02.715141 2026] [:error] [pid 59897:tid 59939] [client 20.199.101.230:27234] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aey7_vBrrkdzpEbmK4eB-AAAAIw"]
[Sat Apr 25 21:05:03.538100 2026] [:error] [pid 59897:tid 59930] [client 20.199.101.230:27656] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aey7__BrrkdzpEbmK4eB-QAAAIM"]
[Sat Apr 25 21:05:04.702102 2026] [:error] [pid 59897:tid 59931] [client 20.199.101.230:24589] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bgymj.php"] [unique_id "aey8APBrrkdzpEbmK4eB_QAAAIQ"]
[Sat Apr 25 21:05:05.243302 2026] [:error] [pid 59898:tid 59976] [client 20.199.101.230:27654] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pucci.php"] [unique_id "aey8AR-4vImxb0kbdzepLwAAANY"]
[Sat Apr 25 21:05:06.013280 2026] [:error] [pid 59985:tid 60003] [client 20.199.101.230:24582] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pucci.php"] [unique_id "aey8AgF_zDvEhKvyTH6rrAAAABA"]
[Sat Apr 25 21:05:06.668746 2026] [:error] [pid 59898:tid 59956] [client 20.199.101.230:23058] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pucci.php"] [unique_id "aey8Ah-4vImxb0kbdzepMQAAAMI"]
[Sat Apr 25 21:05:07.315114 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:13444] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pucci.php"] [unique_id "aey8A_g-28TY8_YLtUcnywAAARE"]
[Sat Apr 25 21:05:08.382416 2026] [:error] [pid 59898:tid 59968] [client 20.199.101.230:27248] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "aey8BB-4vImxb0kbdzepNwAAAM4"]
[Sat Apr 25 21:05:09.182073 2026] [:error] [pid 59985:tid 60010] [client 20.199.101.230:23082] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "aey8BQF_zDvEhKvyTH6ruAAAABc"]
[Sat Apr 25 21:05:10.062064 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:27683] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "aey8Bvg-28TY8_YLtUcnzwAAAQY"]
[Sat Apr 25 21:05:10.565246 2026] [:error] [pid 3212:tid 3233] [client 20.199.101.230:31621] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "aey8Bvg-28TY8_YLtUcn0AAAARM"]
[Sat Apr 25 21:05:11.111473 2026] [:error] [pid 59985:tid 60000] [client 20.199.101.230:27228] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aey8BwF_zDvEhKvyTH6rywAAAA0"]
[Sat Apr 25 21:05:11.937759 2026] [:error] [pid 59897:tid 59945] [client 20.199.101.230:27215] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aey8B_BrrkdzpEbmK4eCBgAAAJI"]
[Sat Apr 25 21:05:12.705583 2026] [:error] [pid 59898:tid 59963] [client 20.199.101.230:23088] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aey8CB-4vImxb0kbdzepPgAAAMk"]
[Sat Apr 25 21:05:13.705054 2026] [:error] [pid 59897:tid 59951] [client 20.199.101.230:34707] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "aey8CfBrrkdzpEbmK4eCCQAAAJg"]
[Sat Apr 25 21:05:15.005500 2026] [:error] [pid 59897:tid 59934] [client 20.199.101.230:34244] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aey8C_BrrkdzpEbmK4eCDQAAAIc"]
[Sat Apr 25 21:05:15.592955 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:24580] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aey8C_g-28TY8_YLtUcn2AAAAQA"]
[Sat Apr 25 21:05:16.331447 2026] [:error] [pid 59985:tid 60008] [client 20.199.101.230:27699] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aey8DAF_zDvEhKvyTH6r8gAAABU"]
[Sat Apr 25 21:05:17.015214 2026] [:error] [pid 59985:tid 60004] [client 20.199.101.230:24631] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aey8DQF_zDvEhKvyTH6r9gAAABE"]
[Sat Apr 25 21:05:17.861478 2026] [:error] [pid 59898:tid 59958] [client 20.199.101.230:27255] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "aey8DR-4vImxb0kbdzepSQAAAMQ"]
[Sat Apr 25 21:05:18.555001 2026] [:error] [pid 59898:tid 59967] [client 20.199.101.230:34713] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "aey8Dh-4vImxb0kbdzepSgAAAM0"]
[Sat Apr 25 21:05:19.229067 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:27201] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "aey8D_g-28TY8_YLtUcn5QAAAQc"]
[Sat Apr 25 21:05:20.265588 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:27240] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "aey8ELLLzhtkd-OXUgDrAQAAAEo"]
[Sat Apr 25 21:05:21.549203 2026] [:error] [pid 59898:tid 59971] [client 20.199.101.230:23062] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "aey8ER-4vImxb0kbdzepTwAAANE"]
[Sat Apr 25 21:05:22.918124 2026] [:error] [pid 59896:tid 59921] [client 20.199.101.230:34715] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "aey8ErLLzhtkd-OXUgDrBgAAAFU"]
[Sat Apr 25 21:05:24.329006 2026] [:error] [pid 59896:tid 59917] [client 20.199.101.230:27220] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "aey8FLLLzhtkd-OXUgDrDAAAAFE"]
[Sat Apr 25 21:05:25.490855 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:13449] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "aey8Ffg-28TY8_YLtUcn8gAAAQI"]
[Sat Apr 25 21:05:26.594520 2026] [:error] [pid 59985:tid 60008] [client 20.199.101.230:23097] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no20.php"] [unique_id "aey8FgF_zDvEhKvyTH6sGAAAABU"]
[Sat Apr 25 21:05:27.495897 2026] [:error] [pid 3212:tid 3218] [client 20.199.101.230:34737] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no20.php"] [unique_id "aey8F_g-28TY8_YLtUcn9AAAAQQ"]
[Sat Apr 25 21:05:28.720568 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:31629] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no20.php"] [unique_id "aey8GPg-28TY8_YLtUcn_wAAAQE"]
[Sat Apr 25 21:05:29.305188 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:24637] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no20.php"] [unique_id "aey8Gfg-28TY8_YLtUcoAwAAAQ8"]
[Sat Apr 25 21:05:30.071411 2026] [:error] [pid 59896:tid 59916] [client 20.199.101.230:24630] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-alone.php"] [unique_id "aey8GrLLzhtkd-OXUgDrGQAAAFA"]
[Sat Apr 25 21:05:30.725811 2026] [:error] [pid 59896:tid 59901] [client 20.199.101.230:31616] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-alone.php"] [unique_id "aey8GrLLzhtkd-OXUgDrGgAAAEE"]
[Sat Apr 25 21:05:31.313569 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:34712] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-alone.php"] [unique_id "aey8G7LLzhtkd-OXUgDrHQAAAEo"]
[Sat Apr 25 21:05:32.095070 2026] [:error] [pid 59898:tid 59958] [client 20.199.101.230:34736] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-alone.php"] [unique_id "aey8HB-4vImxb0kbdzepZQAAAMQ"]
[Sat Apr 25 21:05:32.939155 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:34290] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yasnu.php"] [unique_id "aey8HPg-28TY8_YLtUcoDAAAARQ"]
[Sat Apr 25 21:05:33.670809 2026] [:error] [pid 59897:tid 59947] [client 20.199.101.230:24598] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yasnu.php"] [unique_id "aey8HfBrrkdzpEbmK4eCJgAAAJQ"]
[Sat Apr 25 21:05:34.317928 2026] [:error] [pid 59896:tid 59921] [client 20.199.101.230:34699] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yasnu.php"] [unique_id "aey8HrLLzhtkd-OXUgDrIQAAAFU"]
[Sat Apr 25 21:05:35.117112 2026] [:error] [pid 59896:tid 59920] [client 20.199.101.230:31675] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yasnu.php"] [unique_id "aey8H7LLzhtkd-OXUgDrJgAAAFQ"]
[Sat Apr 25 21:05:35.780995 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:24627] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sl.php"] [unique_id "aey8H_g-28TY8_YLtUcoFAAAAQM"]
[Sat Apr 25 21:05:36.631840 2026] [:error] [pid 3212:tid 3232] [client 20.199.101.230:24629] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sl.php"] [unique_id "aey8IPg-28TY8_YLtUcoGwAAARI"]
[Sat Apr 25 21:05:37.362877 2026] [:error] [pid 59896:tid 59917] [client 20.199.101.230:23064] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sl.php"] [unique_id "aey8IbLLzhtkd-OXUgDrKQAAAFE"]
[Sat Apr 25 21:05:37.937899 2026] [:error] [pid 59896:tid 59902] [client 20.199.101.230:24595] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sl.php"] [unique_id "aey8IbLLzhtkd-OXUgDrLQAAAEI"]
[Sat Apr 25 21:05:38.617309 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:13443] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vuln.php"] [unique_id "aey8Ivg-28TY8_YLtUcoHAAAAQE"]
[Sat Apr 25 21:05:39.405450 2026] [:error] [pid 3212:tid 3227] [client 20.199.101.230:24585] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vuln.php"] [unique_id "aey8I_g-28TY8_YLtUcoHgAAAQ0"]
[Sat Apr 25 21:05:40.393040 2026] [:error] [pid 59896:tid 59917] [client 20.199.101.230:27681] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vuln.php"] [unique_id "aey8JLLLzhtkd-OXUgDrOQAAAFE"]
[Sat Apr 25 21:05:40.994738 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:27653] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vuln.php"] [unique_id "aey8JLLLzhtkd-OXUgDrOgAAAEU"]
[Sat Apr 25 21:05:41.613864 2026] [:error] [pid 59896:tid 59900] [client 20.199.101.230:23085] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "aey8JbLLzhtkd-OXUgDrPwAAAEA"]
[Sat Apr 25 21:05:42.217447 2026] [:error] [pid 59896:tid 59911] [client 20.199.101.230:34302] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "aey8JrLLzhtkd-OXUgDrQgAAAEs"]
[Sat Apr 25 21:05:42.986400 2026] [:error] [pid 3212:tid 3223] [client 20.199.101.230:31649] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "aey8Jvg-28TY8_YLtUcoIwAAAQk"]
[Sat Apr 25 21:05:43.545999 2026] [:error] [pid 59898:tid 59972] [client 20.199.101.230:34738] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "aey8Jx-4vImxb0kbdzepawAAANI"]
[Sat Apr 25 21:05:44.791450 2026] [:error] [pid 59897:tid 59944] [client 20.199.101.230:30945] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aey8KPBrrkdzpEbmK4eCKQAAAJE"]
[Sat Apr 25 21:05:45.436366 2026] [:error] [pid 59898:tid 59961] [client 20.199.101.230:27256] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aey8KR-4vImxb0kbdzepbgAAAMc"]
[Sat Apr 25 21:05:46.258696 2026] [:error] [pid 59898:tid 59977] [client 20.199.101.230:34708] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aey8Kh-4vImxb0kbdzepbwAAANc"]
[Sat Apr 25 21:05:46.973291 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:31643] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aey8Kvg-28TY8_YLtUcoKgAAAQA"]
[Sat Apr 25 21:05:47.544332 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:34704] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aey8K_g-28TY8_YLtUcoLAAAAQY"]
[Sat Apr 25 21:05:48.150838 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:30948] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aey8LLLLzhtkd-OXUgDrSgAAAEo"]
[Sat Apr 25 21:05:48.747803 2026] [:error] [pid 3212:tid 3224] [client 20.199.101.230:27658] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aey8LPg-28TY8_YLtUcoMQAAAQo"]
[Sat Apr 25 21:05:49.409946 2026] [:error] [pid 59896:tid 59906] [client 20.199.101.230:23044] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aey8LbLLzhtkd-OXUgDrTAAAAEY"]
[Sat Apr 25 21:05:50.034541 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:34696] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-bda.php"] [unique_id "aey8Lvg-28TY8_YLtUcoNQAAARA"]
[Sat Apr 25 21:05:50.580729 2026] [:error] [pid 59985:tid 59996] [client 20.199.101.230:27706] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-bda.php"] [unique_id "aey8LgF_zDvEhKvyTH6sKAAAAAk"]
[Sat Apr 25 21:05:51.121163 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:31628] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-bda.php"] [unique_id "aey8L_g-28TY8_YLtUcoOAAAAQc"]
[Sat Apr 25 21:05:51.679739 2026] [:error] [pid 3212:tid 3219] [client 20.199.101.230:27217] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-bda.php"] [unique_id "aey8L_g-28TY8_YLtUcoOgAAAQU"]
[Sat Apr 25 21:06:04.217544 2026] [autoindex:error] [pid 59985:tid 60006] [client 20.199.101.230:34242] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:06:07.875882 2026] [:error] [pid 59985:tid 60003] [client 20.199.101.230:34242] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aey8PwF_zDvEhKvyTH6sRwAAABA"]
[Sat Apr 25 21:06:08.468465 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:34724] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aey8QPg-28TY8_YLtUcoagAAAQc"]
[Sat Apr 25 21:06:09.008071 2026] [:error] [pid 59985:tid 59991] [client 20.199.101.230:24584] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aey8QQF_zDvEhKvyTH6sSQAAAAQ"]
[Sat Apr 25 21:06:09.622293 2026] [:error] [pid 59896:tid 59913] [client 20.199.101.230:24579] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/puc.php"] [unique_id "aey8QbLLzhtkd-OXUgDrWAAAAE0"]
[Sat Apr 25 21:06:10.245166 2026] [:error] [pid 59897:tid 59942] [client 20.199.101.230:31650] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aey8QvBrrkdzpEbmK4eCMgAAAI8"]
[Sat Apr 25 21:06:10.752022 2026] [:error] [pid 59985:tid 59990] [client 20.199.101.230:27252] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aey8QgF_zDvEhKvyTH6sUAAAAAM"]
[Sat Apr 25 21:06:11.335110 2026] [:error] [pid 59896:tid 59909] [client 20.199.101.230:27253] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aey8Q7LLzhtkd-OXUgDrXQAAAEk"]
[Sat Apr 25 21:06:11.828617 2026] [:error] [pid 59896:tid 59917] [client 20.199.101.230:23098] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "aey8Q7LLzhtkd-OXUgDrXgAAAFE"]
[Sat Apr 25 21:06:12.346873 2026] [:error] [pid 59896:tid 59916] [client 20.199.101.230:23069] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aey8RLLLzhtkd-OXUgDrYAAAAFA"]
[Sat Apr 25 21:06:12.877921 2026] [:error] [pid 59985:tid 59989] [client 20.199.101.230:27675] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aey8RAF_zDvEhKvyTH6sUwAAAAI"]
[Sat Apr 25 21:06:13.492496 2026] [:error] [pid 59898:tid 59968] [client 20.199.101.230:24624] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aey8RR-4vImxb0kbdzepegAAAM4"]
[Sat Apr 25 21:06:14.067426 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:24602] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ewp.php"] [unique_id "aey8Rvg-28TY8_YLtUcocgAAAQ8"]
[Sat Apr 25 21:06:14.599650 2026] [:error] [pid 59897:tid 59933] [client 20.199.101.230:24609] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aey8RvBrrkdzpEbmK4eCNQAAAIY"]
[Sat Apr 25 21:06:15.121196 2026] [:error] [pid 59985:tid 59993] [client 20.199.101.230:24617] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aey8RwF_zDvEhKvyTH6sVQAAAAY"]
[Sat Apr 25 21:06:15.776937 2026] [:error] [pid 59897:tid 59946] [client 20.199.101.230:23060] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aey8R_BrrkdzpEbmK4eCOgAAAJM"]
[Sat Apr 25 21:06:16.264825 2026] [:error] [pid 59898:tid 59964] [client 20.199.101.230:27693] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "aey8SB-4vImxb0kbdzepfQAAAMo"]
[Sat Apr 25 21:06:16.769296 2026] [:error] [pid 59896:tid 59918] [client 20.199.101.230:34595] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aey8SLLLzhtkd-OXUgDrawAAAFI"]
[Sat Apr 25 21:06:17.314620 2026] [:error] [pid 59896:tid 59914] [client 20.199.101.230:24587] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aey8SbLLzhtkd-OXUgDrbAAAAE4"]
[Sat Apr 25 21:06:18.049400 2026] [:error] [pid 59898:tid 59972] [client 20.199.101.230:23100] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aey8Sh-4vImxb0kbdzepgAAAANI"]
[Sat Apr 25 21:06:18.636164 2026] [:error] [pid 59898:tid 59971] [client 20.199.101.230:27209] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "aey8Sh-4vImxb0kbdzepgQAAANE"]
[Sat Apr 25 21:06:19.173413 2026] [:error] [pid 59985:tid 59995] [client 20.199.101.230:23043] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aey8SwF_zDvEhKvyTH6sXgAAAAg"]
[Sat Apr 25 21:06:19.718831 2026] [:error] [pid 59985:tid 59996] [client 20.199.101.230:34250] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aey8SwF_zDvEhKvyTH6sYAAAAAk"]
[Sat Apr 25 21:06:20.227400 2026] [:error] [pid 59985:tid 60004] [client 20.199.101.230:34249] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aey8TAF_zDvEhKvyTH6sYQAAABE"]
[Sat Apr 25 21:06:20.861201 2026] [:error] [pid 59897:tid 59940] [client 20.199.101.230:31633] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "aey8TPBrrkdzpEbmK4eCPgAAAI0"]
[Sat Apr 25 21:06:21.562831 2026] [:error] [pid 59896:tid 59902] [client 20.199.101.230:31623] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aey8TbLLzhtkd-OXUgDrdwAAAEI"]
[Sat Apr 25 21:06:22.240328 2026] [:error] [pid 59985:tid 59999] [client 20.199.101.230:31655] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aey8TgF_zDvEhKvyTH6sZgAAAAw"]
[Sat Apr 25 21:06:22.814094 2026] [:error] [pid 59897:tid 59945] [client 20.199.101.230:27676] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aey8TvBrrkdzpEbmK4eCQgAAAJI"]
[Sat Apr 25 21:06:23.374132 2026] [:error] [pid 3212:tid 3219] [client 20.199.101.230:34739] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lupo.php"] [unique_id "aey8T_g-28TY8_YLtUcofwAAAQU"]
[Sat Apr 25 21:06:23.925723 2026] [:error] [pid 59985:tid 60003] [client 20.199.101.230:27134] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aey8TwF_zDvEhKvyTH6sbAAAABA"]
[Sat Apr 25 21:06:24.539157 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:23068] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aey8UPg-28TY8_YLtUcogQAAAQw"]
[Sat Apr 25 21:06:25.113629 2026] [:error] [pid 59897:tid 59939] [client 20.199.101.230:34246] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aey8UfBrrkdzpEbmK4eCRQAAAIw"]
[Sat Apr 25 21:06:25.771668 2026] [:error] [pid 59897:tid 59947] [client 20.199.101.230:23099] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/awa.php"] [unique_id "aey8UfBrrkdzpEbmK4eCRgAAAJQ"]
[Sat Apr 25 21:06:26.435492 2026] [:error] [pid 59898:tid 59969] [client 20.199.101.230:34695] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aey8Uh-4vImxb0kbdzepjAAAAM8"]
[Sat Apr 25 21:06:27.101024 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:34727] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aey8U_g-28TY8_YLtUcohwAAAQA"]
[Sat Apr 25 21:06:27.816290 2026] [:error] [pid 3212:tid 3232] [client 20.199.101.230:34601] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aey8U_g-28TY8_YLtUcoiQAAARI"]
[Sat Apr 25 21:06:28.851568 2026] [:error] [pid 59896:tid 59903] [client 20.199.101.230:34259] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "aey8VLLLzhtkd-OXUgDrfwAAAEM"]
[Sat Apr 25 21:06:29.860877 2026] [:error] [pid 59896:tid 59924] [client 20.199.101.230:23050] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aey8VbLLzhtkd-OXUgDrgAAAAFg"]
[Sat Apr 25 21:06:30.675177 2026] [:error] [pid 59896:tid 59912] [client 20.199.101.230:24576] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aey8VrLLzhtkd-OXUgDrgQAAAEw"]
[Sat Apr 25 21:06:31.510969 2026] [:error] [pid 59896:tid 59919] [client 20.199.101.230:24608] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aey8V7LLzhtkd-OXUgDrgwAAAFM"]
[Sat Apr 25 21:06:32.049045 2026] [:error] [pid 59985:tid 60002] [client 20.199.101.230:23052] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/13.php"] [unique_id "aey8WAF_zDvEhKvyTH6scgAAAA8"]
[Sat Apr 25 21:06:32.726577 2026] [:error] [pid 59985:tid 59994] [client 20.199.101.230:13460] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aey8WAF_zDvEhKvyTH6scwAAAAc"]
[Sat Apr 25 21:06:33.383390 2026] [:error] [pid 59985:tid 59989] [client 20.199.101.230:34743] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aey8WQF_zDvEhKvyTH6sdQAAAAI"]
[Sat Apr 25 21:06:34.281363 2026] [:error] [pid 59898:tid 59972] [client 20.199.101.230:23066] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aey8Wh-4vImxb0kbdzepkQAAANI"]
[Sat Apr 25 21:06:34.818709 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:27665] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "aey8Wvg-28TY8_YLtUcopgAAAQY"]
[Sat Apr 25 21:06:35.446852 2026] [:error] [pid 59896:tid 59909] [client 20.199.101.230:24616] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "aey8W7LLzhtkd-OXUgDrhgAAAEk"]
[Sat Apr 25 21:06:54.896696 2026] [:error] [pid 59896:tid 59914] [client 20.199.101.230:31625] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aey8brLLzhtkd-OXUgDrngAAAE4"]
[Sat Apr 25 21:06:55.596610 2026] [:error] [pid 59985:tid 59995] [client 20.199.101.230:34719] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aey8bwF_zDvEhKvyTH6sjAAAAAg"]
[Sat Apr 25 21:06:56.136851 2026] [:error] [pid 59985:tid 59996] [client 20.199.101.230:34690] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aey8cAF_zDvEhKvyTH6sjgAAAAk"]
[Sat Apr 25 21:06:56.673080 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:27238] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/"] [unique_id "aey8cPg-28TY8_YLtUcozQAAARQ"]
[Sat Apr 25 21:06:57.261104 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:31657] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aey8cfg-28TY8_YLtUco1QAAAQI"]
[Sat Apr 25 21:06:57.739350 2026] [:error] [pid 3212:tid 3223] [client 20.199.101.230:24592] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aey8cfg-28TY8_YLtUco1wAAAQk"]
[Sat Apr 25 21:06:58.402834 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:27666] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aey8cvg-28TY8_YLtUco2gAAARA"]
[Sat Apr 25 21:06:58.978005 2026] [:error] [pid 3212:tid 3233] [client 20.199.101.230:34243] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "aey8cvg-28TY8_YLtUco3wAAARM"]
[Sat Apr 25 21:06:59.628130 2026] [:error] [pid 59896:tid 59907] [client 20.199.101.230:23055] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aey8c7LLzhtkd-OXUgDrpAAAAEc"]
[Sat Apr 25 21:07:00.616276 2026] [:error] [pid 59985:tid 59999] [client 20.199.101.230:34709] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aey8dAF_zDvEhKvyTH6smAAAAAw"]
[Sat Apr 25 21:07:01.120038 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:30913] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aey8dfg-28TY8_YLtUco6AAAAQ4"]
[Sat Apr 25 21:07:01.729328 2026] [:error] [pid 59985:tid 60003] [client 20.199.101.230:27236] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell.php"] [unique_id "aey8dQF_zDvEhKvyTH6snAAAABA"]
[Sat Apr 25 21:07:02.281090 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:23090] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "aey8dvg-28TY8_YLtUco6gAAAQ8"]
[Sat Apr 25 21:07:02.845840 2026] [:error] [pid 59985:tid 60004] [client 20.199.101.230:34291] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "aey8dgF_zDvEhKvyTH6sogAAABE"]
[Sat Apr 25 21:07:03.424317 2026] [:error] [pid 59896:tid 59909] [client 20.199.101.230:34751] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "aey8d7LLzhtkd-OXUgDrqAAAAEk"]
[Sat Apr 25 21:07:03.966481 2026] [:error] [pid 59985:tid 59999] [client 20.199.101.230:24610] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/seo.php"] [unique_id "aey8dwF_zDvEhKvyTH6spgAAAAw"]
[Sat Apr 25 21:07:04.579379 2026] [:error] [pid 59985:tid 60007] [client 20.199.101.230:34714] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "aey8eAF_zDvEhKvyTH6spwAAABQ"]
[Sat Apr 25 21:07:05.204979 2026] [:error] [pid 59985:tid 59990] [client 20.199.101.230:34689] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "aey8eQF_zDvEhKvyTH6sqgAAAAM"]
[Sat Apr 25 21:07:05.727839 2026] [:error] [pid 59898:tid 59976] [client 20.199.101.230:34257] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "aey8eR-4vImxb0kbdzep2QAAANY"]
[Sat Apr 25 21:07:21.827361 2026] [:error] [pid 3212:tid 3223] [client 20.199.101.230:31656] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aey8ifg-28TY8_YLtUcpsgAAAQk"]
[Sat Apr 25 21:07:22.399128 2026] [:error] [pid 3212:tid 3233] [client 20.199.101.230:27688] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aey8ivg-28TY8_YLtUcpywAAARM"]
[Sat Apr 25 21:07:23.018271 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:34726] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aey8i_g-28TY8_YLtUcpzQAAAQE"]
[Sat Apr 25 21:07:23.928326 2026] [:error] [pid 3212:tid 3224] [client 20.199.101.230:34608] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/nastar.php"] [unique_id "aey8i_g-28TY8_YLtUcp1QAAAQo"]
[Sat Apr 25 21:07:24.466400 2026] [:error] [pid 3212:tid 3233] [client 20.199.101.230:34292] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aey8jPg-28TY8_YLtUcp1gAAARM"]
[Sat Apr 25 21:07:25.971841 2026] [:error] [pid 59985:tid 60009] [client 20.199.101.230:34267] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aey8jQF_zDvEhKvyTH6s3gAAABY"]
[Sat Apr 25 21:07:26.611541 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:34245] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aey8jrLLzhtkd-OXUgDsFwAAAEo"]
[Sat Apr 25 21:07:27.168130 2026] [:error] [pid 59985:tid 60003] [client 20.199.101.230:34734] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "aey8jwF_zDvEhKvyTH6s5AAAABA"]
[Sat Apr 25 21:07:27.942326 2026] [:error] [pid 59898:tid 59965] [client 20.199.101.230:40596] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aey8jx-4vImxb0kbdzeqDAAAAMs"]
[Sat Apr 25 21:07:28.669856 2026] [:error] [pid 59985:tid 59990] [client 20.199.101.230:27673] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aey8kAF_zDvEhKvyTH6s5QAAAAM"]
[Sat Apr 25 21:07:29.314351 2026] [:error] [pid 59896:tid 59903] [client 20.199.101.230:29288] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aey8kbLLzhtkd-OXUgDsGwAAAEM"]
[Sat Apr 25 21:07:29.904839 2026] [:error] [pid 59897:tid 59946] [client 20.199.101.230:24578] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwpg.php"] [unique_id "aey8kfBrrkdzpEbmK4eClwAAAJM"]
[Sat Apr 25 21:07:30.508521 2026] [:error] [pid 3212:tid 3224] [client 20.199.101.230:31665] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aey8kvg-28TY8_YLtUcp5AAAAQo"]
[Sat Apr 25 21:07:31.160514 2026] [:error] [pid 3212:tid 3227] [client 20.199.101.230:27219] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aey8k_g-28TY8_YLtUcp5QAAAQ0"]
[Sat Apr 25 21:07:31.720633 2026] [:error] [pid 59985:tid 59991] [client 20.199.101.230:34271] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aey8kwF_zDvEhKvyTH6s6gAAAAQ"]
[Sat Apr 25 21:07:32.453694 2026] [:error] [pid 59985:tid 60011] [client 20.199.101.230:27239] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ass.php"] [unique_id "aey8lAF_zDvEhKvyTH6s6wAAABg"]
[Sat Apr 25 21:07:32.987051 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:27212] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aey8lPg-28TY8_YLtUcp6wAAAQA"]
[Sat Apr 25 21:07:33.511949 2026] [:error] [pid 59898:tid 59972] [client 20.199.101.230:34596] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aey8lR-4vImxb0kbdzeqDgAAANI"]
[Sat Apr 25 21:07:34.071123 2026] [:error] [pid 3212:tid 3227] [client 20.199.101.230:27087] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aey8lvg-28TY8_YLtUcp8wAAAQ0"]
[Sat Apr 25 21:07:34.718654 2026] [:error] [pid 59896:tid 59911] [client 20.199.101.230:23040] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "aey8lrLLzhtkd-OXUgDsJAAAAEs"]
[Sat Apr 25 21:07:35.269921 2026] [:error] [pid 59896:tid 59907] [client 20.199.101.230:31668] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aey8l7LLzhtkd-OXUgDsJgAAAEc"]
[Sat Apr 25 21:07:36.295863 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:34718] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aey8mPg-28TY8_YLtUcp_wAAAQE"]
[Sat Apr 25 21:07:37.625784 2026] [:error] [pid 59985:tid 60003] [client 20.199.101.230:27230] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aey8mQF_zDvEhKvyTH6s8gAAABA"]
[Sat Apr 25 21:07:38.365901 2026] [:error] [pid 59985:tid 59992] [client 20.199.101.230:30929] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no18.php"] [unique_id "aey8mgF_zDvEhKvyTH6s9AAAAAU"]
[Sat Apr 25 21:07:39.032656 2026] [:error] [pid 59897:tid 59935] [client 20.199.101.230:31659] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aey8m_BrrkdzpEbmK4eCqAAAAIg"]
[Sat Apr 25 21:07:39.780651 2026] [:error] [pid 59985:tid 59994] [client 20.199.101.230:27664] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aey8mwF_zDvEhKvyTH6s9QAAAAc"]
[Sat Apr 25 21:07:40.581784 2026] [:error] [pid 59897:tid 59940] [client 20.199.101.230:23073] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aey8nPBrrkdzpEbmK4eCqwAAAI0"]
[Sat Apr 25 21:07:42.377961 2026] [:error] [pid 59985:tid 59989] [client 20.199.101.230:23079] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fine.php"] [unique_id "aey8ngF_zDvEhKvyTH6s9wAAAAI"]
[Sat Apr 25 21:07:43.109687 2026] [:error] [pid 59896:tid 59913] [client 20.199.101.230:24620] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aey8n7LLzhtkd-OXUgDsNAAAAE0"]
[Sat Apr 25 21:07:43.796251 2026] [:error] [pid 59897:tid 59927] [client 20.199.101.230:34247] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aey8n_BrrkdzpEbmK4eCrQAAAIA"]
[Sat Apr 25 21:07:44.396202 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:34287] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aey8oPg-28TY8_YLtUcqDAAAAQ8"]
[Sat Apr 25 21:07:45.089404 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:24638] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hplfuns.php"] [unique_id "aey8ofg-28TY8_YLtUcqEAAAAQE"]
[Sat Apr 25 21:07:45.738210 2026] [:error] [pid 3212:tid 3232] [client 20.199.101.230:31674] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aey8ofg-28TY8_YLtUcqFQAAARI"]
[Sat Apr 25 21:07:46.451744 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:24619] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aey8ovg-28TY8_YLtUcqGAAAAQs"]
[Sat Apr 25 21:07:47.221882 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:34275] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aey8o_g-28TY8_YLtUcqHQAAAQA"]
[Sat Apr 25 21:07:47.858413 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:27695] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "aey8o_g-28TY8_YLtUcqHgAAAQE"]
[Sat Apr 25 21:07:48.466492 2026] [:error] [pid 59897:tid 59936] [client 20.199.101.230:13468] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aey8pPBrrkdzpEbmK4eCsQAAAIk"]
[Sat Apr 25 21:07:49.095501 2026] [:error] [pid 3212:tid 3237] [client 20.199.101.230:27242] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aey8pfg-28TY8_YLtUcqJgAAARc"]
[Sat Apr 25 21:07:50.016393 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:23054] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aey8pvg-28TY8_YLtUcqKAAAARQ"]
[Sat Apr 25 21:07:50.564123 2026] [:error] [pid 59985:tid 60006] [client 20.199.101.230:24613] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "aey8pgF_zDvEhKvyTH6tAAAAABM"]
[Sat Apr 25 21:07:51.188679 2026] [:error] [pid 59896:tid 59903] [client 20.199.101.230:34609] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aey8p7LLzhtkd-OXUgDsQwAAAEM"]
[Sat Apr 25 21:07:51.907028 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:34266] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aey8p_g-28TY8_YLtUcqTgAAARY"]
[Sat Apr 25 21:07:52.509777 2026] [:error] [pid 59896:tid 59907] [client 20.199.101.230:27694] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aey8qLLLzhtkd-OXUgDsSwAAAEc"]
[Sat Apr 25 21:07:53.318399 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:31624] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inege.php"] [unique_id "aey8qfg-28TY8_YLtUcqdAAAAQE"]
[Sat Apr 25 21:07:53.875708 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:27674] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aey8qfg-28TY8_YLtUcqiAAAAQ8"]
[Sat Apr 25 21:07:54.577250 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:31645] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aey8qvg-28TY8_YLtUcqmwAAAQA"]
[Sat Apr 25 21:07:55.187482 2026] [:error] [pid 3212:tid 3219] [client 20.199.101.230:24590] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aey8q_g-28TY8_YLtUcqrgAAAQU"]
[Sat Apr 25 21:07:56.096299 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:24591] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uuu.php"] [unique_id "aey8rPg-28TY8_YLtUcqwgAAAQE"]
[Sat Apr 25 21:07:56.804474 2026] [:error] [pid 59898:tid 59958] [client 20.199.101.230:27243] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aey8rB-4vImxb0kbdzeqKgAAAMQ"]
[Sat Apr 25 21:07:57.567967 2026] [:error] [pid 59898:tid 59962] [client 20.199.101.230:31673] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aey8rR-4vImxb0kbdzeqLwAAAMg"]
[Sat Apr 25 21:07:58.219267 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:27227] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aey8rvg-28TY8_YLtUcqygAAAQ4"]
[Sat Apr 25 21:07:59.124868 2026] [:error] [pid 59985:tid 60005] [client 20.199.101.230:34576] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/no1.php"] [unique_id "aey8rwF_zDvEhKvyTH6tBgAAABI"]
[Sat Apr 25 21:07:59.785973 2026] [:error] [pid 59896:tid 59906] [client 20.199.101.230:30953] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aey8r7LLzhtkd-OXUgDsXwAAAEY"]
[Sat Apr 25 21:08:00.429931 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:27076] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aey8sPg-28TY8_YLtUcqzgAAAQs"]
[Sat Apr 25 21:08:01.446785 2026] [:error] [pid 59896:tid 59916] [client 20.199.101.230:34688] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aey8sbLLzhtkd-OXUgDsYAAAAFA"]
[Sat Apr 25 21:08:02.458899 2026] [:error] [pid 59897:tid 59943] [client 20.199.101.230:34300] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w2025.php"] [unique_id "aey8svBrrkdzpEbmK4eCuwAAAJA"]
[Sat Apr 25 21:08:03.120020 2026] [:error] [pid 59985:tid 59987] [client 20.199.101.230:34749] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aey8swF_zDvEhKvyTH6tDQAAAAA"]
[Sat Apr 25 21:08:03.981891 2026] [:error] [pid 59896:tid 59919] [client 20.199.101.230:31678] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aey8s7LLzhtkd-OXUgDsZwAAAFM"]
[Sat Apr 25 21:08:04.749533 2026] [:error] [pid 59985:tid 59996] [client 20.199.101.230:34706] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aey8tAF_zDvEhKvyTH6tFAAAAAk"]
[Sat Apr 25 21:08:05.491211 2026] [:error] [pid 59897:tid 59933] [client 20.199.101.230:27222] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "aey8tfBrrkdzpEbmK4eCzgAAAIY"]
[Sat Apr 25 21:08:06.234601 2026] [:error] [pid 59898:tid 59969] [client 20.199.101.230:27203] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aey8th-4vImxb0kbdzeqNAAAAM8"]
[Sat Apr 25 21:08:06.940606 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:30941] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aey8tvg-28TY8_YLtUcrPAAAAQM"]
[Sat Apr 25 21:08:07.979886 2026] [:error] [pid 59897:tid 59928] [client 20.199.101.230:23096] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aey8t_BrrkdzpEbmK4eC3gAAAIE"]
[Sat Apr 25 21:08:08.551490 2026] [:error] [pid 59898:tid 59966] [client 20.199.101.230:27250] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a2.php"] [unique_id "aey8uB-4vImxb0kbdzeqNQAAAMw"]
[Sat Apr 25 21:08:09.431318 2026] [:error] [pid 3212:tid 3237] [client 20.199.101.230:23103] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aey8ufg-28TY8_YLtUcrWAAAARc"]
[Sat Apr 25 21:08:10.050591 2026] [:error] [pid 59898:tid 59954] [client 20.199.101.230:13481] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aey8uh-4vImxb0kbdzeqOgAAAMA"]
[Sat Apr 25 21:08:17.435347 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:23045] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aey8wfg-28TY8_YLtUcrZAAAARg"]
[Sat Apr 25 21:08:18.563802 2026] [:error] [pid 59896:tid 59919] [client 20.199.101.230:31636] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "aey8wrLLzhtkd-OXUgDskgAAAFM"]
[Sat Apr 25 21:08:19.492669 2026] [:error] [pid 59985:tid 59992] [client 20.199.101.230:23093] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "aey8wwF_zDvEhKvyTH6tLgAAAAU"]
[Sat Apr 25 21:08:35.836816 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:27235] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aey80_g-28TY8_YLtUcr0gAAAQg"]
[Sat Apr 25 21:08:38.398410 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:34728] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aey81vg-28TY8_YLtUcr4gAAAQ8"]
[Sat Apr 25 21:08:39.614914 2026] [:error] [pid 59985:tid 59999] [client 20.199.101.230:24625] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aey81wF_zDvEhKvyTH6tbQAAAAw"]
[Sat Apr 25 21:08:40.369565 2026] [:error] [pid 59985:tid 59992] [client 20.199.101.230:27109] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "aey82AF_zDvEhKvyTH6tcQAAAAU"]
[Sat Apr 25 21:08:41.274296 2026] [:error] [pid 59985:tid 59989] [client 20.199.101.230:23042] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aey82QF_zDvEhKvyTH6tdgAAAAI"]
[Sat Apr 25 21:08:42.298569 2026] [:error] [pid 59898:tid 59964] [client 20.199.101.230:24633] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aey82h-4vImxb0kbdzeqRwAAAMo"]
[Sat Apr 25 21:08:43.630280 2026] [:error] [pid 59898:tid 59976] [client 20.199.101.230:29283] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aey82x-4vImxb0kbdzeqSAAAANY"]
[Sat Apr 25 21:08:45.645931 2026] [:error] [pid 59896:tid 59919] [client 20.199.101.230:30962] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/index.php"] [unique_id "aey83bLLzhtkd-OXUgDs9QAAAFM"]
[Sat Apr 25 21:08:47.023271 2026] [:error] [pid 59897:tid 59949] [client 20.199.101.230:13442] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aey83_BrrkdzpEbmK4eDEgAAAJY"]
[Sat Apr 25 21:08:47.689155 2026] [:error] [pid 59897:tid 59945] [client 20.199.101.230:23080] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aey83_BrrkdzpEbmK4eDFQAAAJI"]
[Sat Apr 25 21:08:48.298579 2026] [:error] [pid 59898:tid 59974] [client 20.199.101.230:34286] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aey84B-4vImxb0kbdzeqUAAAANQ"]
[Sat Apr 25 21:08:48.949944 2026] [:error] [pid 59985:tid 60005] [client 20.199.101.230:31664] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "aey84AF_zDvEhKvyTH6thgAAABI"]
[Sat Apr 25 21:08:49.851428 2026] [:error] [pid 3212:tid 3237] [client 20.199.101.230:27114] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aey84fg-28TY8_YLtUcr7AAAARc"]
[Sat Apr 25 21:08:50.694347 2026] [:error] [pid 59898:tid 59960] [client 20.199.101.230:40582] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aey84h-4vImxb0kbdzeqVAAAAMY"]
[Sat Apr 25 21:08:51.385024 2026] [:error] [pid 3212:tid 3236] [client 20.199.101.230:34703] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aey84_g-28TY8_YLtUcr7gAAARY"]
[Sat Apr 25 21:08:52.083784 2026] [:error] [pid 3212:tid 3221] [client 20.199.101.230:23075] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "aey85Pg-28TY8_YLtUcr8QAAAQc"]
[Sat Apr 25 21:08:52.660647 2026] [:error] [pid 59985:tid 59999] [client 20.199.101.230:34288] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aey85AF_zDvEhKvyTH6tjAAAAAw"]
[Sat Apr 25 21:08:53.295011 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:27237] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aey85bLLzhtkd-OXUgDtAwAAAEU"]
[Sat Apr 25 21:08:57.938722 2026] [:error] [pid 59897:tid 59938] [client 20.199.101.230:23089] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aey86fBrrkdzpEbmK4eDJgAAAIs"]
[Sat Apr 25 21:08:59.670958 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:34264] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aey86_g-28TY8_YLtUcr_gAAAQI"]
[Sat Apr 25 21:09:00.413026 2026] [:error] [pid 59985:tid 59996] [client 20.199.101.230:13472] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aey87AF_zDvEhKvyTH6tlgAAAAk"]
[Sat Apr 25 21:09:01.574551 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:31634] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aey87fg-28TY8_YLtUcsBwAAAQs"]
[Sat Apr 25 21:09:02.526110 2026] [:error] [pid 59896:tid 59923] [client 20.199.101.230:27211] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aey87rLLzhtkd-OXUgDtFwAAAFc"]
[Sat Apr 25 21:09:03.415699 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:13477] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "aey87_g-28TY8_YLtUcsDAAAAQI"]
[Sat Apr 25 21:09:04.050339 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:31620] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aey88Pg-28TY8_YLtUcsDgAAARg"]
[Sat Apr 25 21:09:04.873433 2026] [:error] [pid 59897:tid 59939] [client 20.199.101.230:34258] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aey88PBrrkdzpEbmK4eDLgAAAIw"]
[Sat Apr 25 21:09:05.500299 2026] [:error] [pid 59897:tid 59935] [client 20.199.101.230:23061] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aey88fBrrkdzpEbmK4eDMQAAAIg"]
[Sat Apr 25 21:09:06.077133 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:34274] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aey88vg-28TY8_YLtUcsEAAAAQY"]
[Sat Apr 25 21:09:06.637618 2026] [:error] [pid 59896:tid 59923] [client 20.199.101.230:23057] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aey88rLLzhtkd-OXUgDtJQAAAFc"]
[Sat Apr 25 21:09:07.163738 2026] [:error] [pid 59896:tid 59910] [client 20.199.101.230:29250] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aey887LLzhtkd-OXUgDtJwAAAEo"]
[Sat Apr 25 21:09:07.972874 2026] [:error] [pid 59985:tid 59987] [client 20.199.101.230:27690] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aey88wF_zDvEhKvyTH6togAAAAA"]
[Sat Apr 25 21:09:08.589198 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:27226] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "aey89Pg-28TY8_YLtUcsFQAAAQs"]
[Sat Apr 25 21:09:09.124392 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:34580] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aey89fg-28TY8_YLtUcsFwAAARE"]
[Sat Apr 25 21:09:09.749019 2026] [:error] [pid 59897:tid 59944] [client 20.199.101.230:27081] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aey89fBrrkdzpEbmK4eDOQAAAJE"]
[Sat Apr 25 21:09:11.280609 2026] [:error] [pid 59897:tid 59951] [client 20.199.101.230:31674] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aey89_BrrkdzpEbmK4eDPAAAAJg"]
[Sat Apr 25 21:09:11.896817 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:27662] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "aey89_g-28TY8_YLtUcsHwAAAQ4"]
[Sat Apr 25 21:09:12.468751 2026] [:error] [pid 59985:tid 59992] [client 20.199.101.230:34730] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aey8-AF_zDvEhKvyTH6trwAAAAU"]
[Sat Apr 25 21:09:13.048677 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:34277] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aey8-fg-28TY8_YLtUcsIwAAARQ"]
[Sat Apr 25 21:09:13.540441 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:27218] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aey8-bLLzhtkd-OXUgDtOQAAAEU"]
[Sat Apr 25 21:09:14.058202 2026] [:error] [pid 59897:tid 59948] [client 20.199.101.230:31644] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-edit.php"] [unique_id "aey8-vBrrkdzpEbmK4eDQQAAAJU"]
[Sat Apr 25 21:09:14.690222 2026] [:error] [pid 3212:tid 3226] [client 20.199.101.230:23065] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aey8-vg-28TY8_YLtUcsKgAAAQw"]
[Sat Apr 25 21:09:15.300511 2026] [:error] [pid 59897:tid 59937] [client 20.199.101.230:34252] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aey8-_BrrkdzpEbmK4eDRAAAAIo"]
[Sat Apr 25 21:09:15.881194 2026] [:error] [pid 59897:tid 59927] [client 20.199.101.230:31642] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aey8-_BrrkdzpEbmK4eDRQAAAIA"]
[Sat Apr 25 21:09:16.502991 2026] [:error] [pid 3212:tid 3224] [client 20.199.101.230:27691] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "aey8_Pg-28TY8_YLtUcsNwAAAQo"]
[Sat Apr 25 21:09:17.157491 2026] [:error] [pid 59897:tid 59929] [client 20.199.101.230:27088] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aey8_fBrrkdzpEbmK4eDRwAAAII"]
[Sat Apr 25 21:09:17.755373 2026] [:error] [pid 59897:tid 59930] [client 20.199.101.230:27692] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aey8_fBrrkdzpEbmK4eDSQAAAIM"]
[Sat Apr 25 21:09:18.318950 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:31654] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aey8_vg-28TY8_YLtUcsRgAAARE"]
[Sat Apr 25 21:09:18.905476 2026] [:error] [pid 59897:tid 59928] [client 20.199.101.230:34283] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "aey8_vBrrkdzpEbmK4eDUgAAAIE"]
[Sat Apr 25 21:09:19.508434 2026] [:error] [pid 59985:tid 59989] [client 20.199.101.230:13500] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aey8_wF_zDvEhKvyTH6ttgAAAAI"]
[Sat Apr 25 21:09:20.083806 2026] [:error] [pid 3212:tid 3225] [client 20.199.101.230:24634] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aey9APg-28TY8_YLtUcsXQAAAQs"]
[Sat Apr 25 21:09:20.692037 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:40629] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aey9APg-28TY8_YLtUcsZwAAAQA"]
[Sat Apr 25 21:09:21.177356 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:34251] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fff.php"] [unique_id "aey9Afg-28TY8_YLtUcscAAAAQg"]
[Sat Apr 25 21:09:21.766595 2026] [:error] [pid 3212:tid 3214] [client 20.199.101.230:27669] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aey9Afg-28TY8_YLtUcsegAAAQA"]
[Sat Apr 25 21:09:22.923925 2026] [:error] [pid 59897:tid 59931] [client 20.199.101.230:27654] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aey9AvBrrkdzpEbmK4eDcgAAAIQ"]
[Sat Apr 25 21:09:23.618615 2026] [:error] [pid 59896:tid 59922] [client 20.199.101.230:31619] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aey9A7LLzhtkd-OXUgDtiQAAAFY"]
[Sat Apr 25 21:09:24.738328 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:31646] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aey9BPg-28TY8_YLtUcslgAAAQ4"]
[Sat Apr 25 21:09:25.472242 2026] [:error] [pid 59896:tid 59911] [client 20.199.101.230:13498] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aey9BbLLzhtkd-OXUgDtlwAAAEs"]
[Sat Apr 25 21:09:26.072258 2026] [:error] [pid 59898:tid 59962] [client 20.199.101.230:13444] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aey9Bh-4vImxb0kbdzeqkQAAAMg"]
[Sat Apr 25 21:09:26.823293 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:30937] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aey9Bvg-28TY8_YLtUcsmQAAAQE"]
[Sat Apr 25 21:09:27.583374 2026] [:error] [pid 59985:tid 59999] [client 20.199.101.230:29269] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/makeasmtp.php"] [unique_id "aey9BwF_zDvEhKvyTH6tvwAAAAw"]
[Sat Apr 25 21:09:28.343577 2026] [:error] [pid 59985:tid 60010] [client 20.199.101.230:24589] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aey9CAF_zDvEhKvyTH6twwAAABc"]
[Sat Apr 25 21:09:29.207412 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:34569] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aey9Cfg-28TY8_YLtUcsoQAAAQY"]
[Sat Apr 25 21:09:30.006044 2026] [:error] [pid 59985:tid 59991] [client 20.199.101.230:34733] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aey9CgF_zDvEhKvyTH6txwAAAAQ"]
[Sat Apr 25 21:09:31.443366 2026] [:error] [pid 59898:tid 59978] [client 20.199.101.230:27210] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin1.php"] [unique_id "aey9Cx-4vImxb0kbdzeqmgAAANg"]
[Sat Apr 25 21:09:32.089694 2026] [:error] [pid 59985:tid 59995] [client 20.199.101.230:34750] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aey9DAF_zDvEhKvyTH6tzwAAAAg"]
[Sat Apr 25 21:09:32.709646 2026] [:error] [pid 59898:tid 59956] [client 20.199.101.230:24594] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aey9DB-4vImxb0kbdzeqoQAAAMI"]
[Sat Apr 25 21:09:33.233151 2026] [:error] [pid 59898:tid 59962] [client 20.199.101.230:13446] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aey9DR-4vImxb0kbdzeqpAAAAMg"]
[Sat Apr 25 21:09:33.835417 2026] [:error] [pid 59985:tid 60011] [client 20.199.101.230:30973] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "aey9DQF_zDvEhKvyTH6t1gAAABg"]
[Sat Apr 25 21:09:36.196999 2026] [autoindex:error] [pid 3212:tid 3223] [client 20.199.101.230:13488] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:09:41.481087 2026] [autoindex:error] [pid 3212:tid 3223] [client 20.199.101.230:13488] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:09:48.117606 2026] [:error] [pid 3212:tid 3229] [client 20.199.101.230:13488] [client 20.199.101.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aey9HPg-28TY8_YLtUcs2AAAAQ8"]
[Sat Apr 25 21:09:52.448044 2026] [autoindex:error] [pid 59896:tid 59919] [client 20.199.101.230:27231] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:09:52.699635 2026] [autoindex:error] [pid 59896:tid 59923] [client 20.199.101.230:27231] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 25 21:09:55.178562 2026] [:error] [pid 59896:tid 59920] [client 20.199.101.230:27231] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aey9I7LLzhtkd-OXUgDt3wAAAFQ"]
[Sat Apr 25 21:09:56.015913 2026] [:error] [pid 59985:tid 60011] [client 20.199.101.230:24597] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aey9JAF_zDvEhKvyTH6uCgAAABg"]
[Sat Apr 25 21:09:56.800760 2026] [:error] [pid 59896:tid 59919] [client 20.199.101.230:24582] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aey9JLLLzhtkd-OXUgDt4wAAAFM"]
[Sat Apr 25 21:09:57.645358 2026] [:error] [pid 59897:tid 59933] [client 20.199.101.230:34302] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/in.php"] [unique_id "aey9JfBrrkdzpEbmK4eDnAAAAIY"]
[Sat Apr 25 21:09:58.216426 2026] [:error] [pid 59897:tid 59938] [client 20.199.101.230:27652] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aey9JvBrrkdzpEbmK4eDnwAAAIs"]
[Sat Apr 25 21:09:58.761463 2026] [:error] [pid 3212:tid 3227] [client 20.199.101.230:34290] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aey9Jvg-28TY8_YLtUcs8wAAAQ0"]
[Sat Apr 25 21:09:59.935228 2026] [:error] [pid 59898:tid 59974] [client 20.199.101.230:31649] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aey9Jx-4vImxb0kbdzeqvQAAANQ"]
[Sat Apr 25 21:10:00.601994 2026] [:error] [pid 59896:tid 59903] [client 20.199.101.230:27251] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gssdd.php"] [unique_id "aey9KLLLzhtkd-OXUgDt6wAAAEM"]
[Sat Apr 25 21:10:01.372167 2026] [:error] [pid 59985:tid 59992] [client 20.199.101.230:34705] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/admin.php"] [unique_id "aey9KQF_zDvEhKvyTH6uDgAAAAU"]
[Sat Apr 25 21:10:02.128370 2026] [:error] [pid 3212:tid 3219] [client 20.199.101.230:23044] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/admin.php"] [unique_id "aey9Kvg-28TY8_YLtUcs_gAAAQU"]
[Sat Apr 25 21:10:02.674804 2026] [:error] [pid 59985:tid 60002] [client 20.199.101.230:40590] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/admin.php"] [unique_id "aey9KgF_zDvEhKvyTH6uEAAAAA8"]
[Sat Apr 25 21:10:03.623793 2026] [:error] [pid 59898:tid 59978] [client 20.199.101.230:34699] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/admin.php"] [unique_id "aey9Kx-4vImxb0kbdzeqvgAAANg"]
[Sat Apr 25 21:10:04.250385 2026] [:error] [pid 59985:tid 59988] [client 20.199.101.230:31677] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aey9LAF_zDvEhKvyTH6uGAAAAAE"]
[Sat Apr 25 21:10:04.808197 2026] [:error] [pid 59898:tid 59972] [client 20.199.101.230:27660] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aey9LB-4vImxb0kbdzeqwAAAANI"]
[Sat Apr 25 21:10:05.457424 2026] [:error] [pid 59898:tid 59954] [client 20.199.101.230:31641] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aey9LR-4vImxb0kbdzeqxwAAAMA"]
[Sat Apr 25 21:10:06.009429 2026] [:error] [pid 59898:tid 59971] [client 20.199.101.230:24627] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bs1.php"] [unique_id "aey9Lh-4vImxb0kbdzeqyQAAANE"]
[Sat Apr 25 21:10:06.520410 2026] [:error] [pid 59985:tid 60003] [client 20.199.101.230:23086] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aey9LgF_zDvEhKvyTH6uHgAAABA"]
[Sat Apr 25 21:10:07.107712 2026] [:error] [pid 3212:tid 3238] [client 20.199.101.230:34285] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aey9L_g-28TY8_YLtUctCAAAARg"]
[Sat Apr 25 21:10:07.645690 2026] [:error] [pid 3212:tid 3233] [client 20.199.101.230:27710] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aey9L_g-28TY8_YLtUctCwAAARM"]
[Sat Apr 25 21:10:08.300771 2026] [:error] [pid 3212:tid 3237] [client 20.199.101.230:24622] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aey9MPg-28TY8_YLtUctEQAAARc"]
[Sat Apr 25 21:10:08.885304 2026] [:error] [pid 59985:tid 60004] [client 20.199.101.230:27653] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aey9MAF_zDvEhKvyTH6uJQAAABE"]
[Sat Apr 25 21:10:09.410764 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:12295] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aey9Mfg-28TY8_YLtUctGwAAARQ"]
[Sat Apr 25 21:10:09.949435 2026] [:error] [pid 3212:tid 3222] [client 20.199.101.230:31675] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aey9Mfg-28TY8_YLtUctIAAAAQg"]
[Sat Apr 25 21:10:10.484301 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:27704] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axx.php"] [unique_id "aey9Mvg-28TY8_YLtUctJwAAAQY"]
[Sat Apr 25 21:10:11.094765 2026] [:error] [pid 59896:tid 59904] [client 20.199.101.230:34623] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aey9M7LLzhtkd-OXUgDt-gAAAEQ"]
[Sat Apr 25 21:10:11.701249 2026] [:error] [pid 59985:tid 60010] [client 20.199.101.230:31628] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aey9MwF_zDvEhKvyTH6uLAAAABc"]
[Sat Apr 25 21:10:12.226012 2026] [:error] [pid 59985:tid 60007] [client 20.199.101.230:31660] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aey9NAF_zDvEhKvyTH6uLgAAABQ"]
[Sat Apr 25 21:10:12.840285 2026] [:error] [pid 59896:tid 59902] [client 20.199.101.230:23085] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "aey9NLLLzhtkd-OXUgDuBAAAAEI"]
[Sat Apr 25 21:10:13.370769 2026] [:error] [pid 59896:tid 59903] [client 20.199.101.230:24584] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aey9NbLLzhtkd-OXUgDuDwAAAEM"]
[Sat Apr 25 21:10:13.944076 2026] [:error] [pid 59985:tid 59993] [client 20.199.101.230:24579] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aey9NQF_zDvEhKvyTH6uRgAAAAY"]
[Sat Apr 25 21:10:14.516416 2026] [:error] [pid 59896:tid 59915] [client 20.199.101.230:31662] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aey9NrLLzhtkd-OXUgDuHwAAAE8"]
[Sat Apr 25 21:10:15.244365 2026] [:error] [pid 59897:tid 59935] [client 20.199.101.230:34721] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "aey9N_BrrkdzpEbmK4eDvQAAAIg"]
[Sat Apr 25 21:10:15.783737 2026] [:error] [pid 3212:tid 3215] [client 20.199.101.230:34303] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aey9N_g-28TY8_YLtUctPAAAAQE"]
[Sat Apr 25 21:10:16.303904 2026] [:error] [pid 59896:tid 59907] [client 20.199.101.230:27202] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aey9OLLLzhtkd-OXUgDuPAAAAEc"]
[Sat Apr 25 21:10:16.971985 2026] [:error] [pid 59897:tid 59938] [client 20.199.101.230:34712] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aey9OPBrrkdzpEbmK4eDxAAAAIs"]
[Sat Apr 25 21:10:17.637283 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:34583] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file48.php"] [unique_id "aey9Ofg-28TY8_YLtUctQgAAAQM"]
[Sat Apr 25 21:10:18.216936 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:27711] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aey9Ovg-28TY8_YLtUctRAAAARQ"]
[Sat Apr 25 21:10:18.919968 2026] [:error] [pid 3212:tid 3216] [client 20.199.101.230:34240] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aey9Ovg-28TY8_YLtUctRwAAAQI"]
[Sat Apr 25 21:10:19.432013 2026] [:error] [pid 59896:tid 59923] [client 20.199.101.230:24605] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aey9O7LLzhtkd-OXUgDubQAAAFc"]
[Sat Apr 25 21:10:20.046273 2026] [:error] [pid 59897:tid 59944] [client 20.199.101.230:31616] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "aey9PPBrrkdzpEbmK4eD2QAAAJE"]
[Sat Apr 25 21:10:20.611159 2026] [:error] [pid 59985:tid 59987] [client 20.199.101.230:13443] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aey9PAF_zDvEhKvyTH6ukwAAAAA"]
[Sat Apr 25 21:10:21.120044 2026] [:error] [pid 59896:tid 59909] [client 20.199.101.230:40611] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aey9PbLLzhtkd-OXUgDufAAAAEk"]
[Sat Apr 25 21:10:21.839766 2026] [:error] [pid 59985:tid 60007] [client 20.199.101.230:27223] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aey9PQF_zDvEhKvyTH6ulgAAABQ"]
[Sat Apr 25 21:10:22.455892 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:27651] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "aey9Pvg-28TY8_YLtUctVgAAAQ4"]
[Sat Apr 25 21:10:23.048597 2026] [:error] [pid 3212:tid 3233] [client 20.199.101.230:34260] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "aey9P_g-28TY8_YLtUctWQAAARM"]
[Sat Apr 25 21:10:23.524151 2026] [:error] [pid 59985:tid 59995] [client 20.199.101.230:23081] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "aey9PwF_zDvEhKvyTH6ulwAAAAg"]
[Sat Apr 25 21:10:24.056586 2026] [:error] [pid 3212:tid 3232] [client 20.199.101.230:30953] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "aey9QPg-28TY8_YLtUctXwAAARI"]
[Sat Apr 25 21:10:24.631983 2026] [:error] [pid 59985:tid 59998] [client 20.199.101.230:34284] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "aey9QAF_zDvEhKvyTH6umwAAAAs"]
[Sat Apr 25 21:10:25.250274 2026] [:error] [pid 3212:tid 3237] [client 20.199.101.230:34704] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "aey9Qfg-28TY8_YLtUctYgAAARc"]
[Sat Apr 25 21:10:25.788255 2026] [:error] [pid 3212:tid 3234] [client 20.199.101.230:23056] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "aey9Qfg-28TY8_YLtUctagAAARQ"]
[Sat Apr 25 21:10:26.371341 2026] [:error] [pid 59985:tid 60004] [client 20.199.101.230:24593] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "aey9QgF_zDvEhKvyTH6ungAAABE"]
[Sat Apr 25 21:10:26.939269 2026] [:error] [pid 59896:tid 59913] [client 20.199.101.230:30974] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "aey9QrLLzhtkd-OXUgDuiQAAAE0"]
[Sat Apr 25 21:10:27.460509 2026] [:error] [pid 59897:tid 59927] [client 20.199.101.230:34297] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "aey9Q_BrrkdzpEbmK4eD4wAAAIA"]
[Sat Apr 25 21:10:27.972201 2026] [:error] [pid 3212:tid 3220] [client 20.199.101.230:27233] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "aey9Q_g-28TY8_YLtUctcwAAAQY"]
[Sat Apr 25 21:10:28.477057 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:27232] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "aey9RPg-28TY8_YLtUctdAAAARE"]
[Sat Apr 25 21:10:29.012230 2026] [:error] [pid 59985:tid 60009] [client 20.199.101.230:31622] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "aey9RQF_zDvEhKvyTH6uoQAAABY"]
[Sat Apr 25 21:10:29.842994 2026] [:error] [pid 59896:tid 59905] [client 20.199.101.230:12359] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aey9RbLLzhtkd-OXUgDujwAAAEU"]
[Sat Apr 25 21:10:30.358626 2026] [:error] [pid 59896:tid 59907] [client 20.199.101.230:40636] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aey9RrLLzhtkd-OXUgDukQAAAEc"]
[Sat Apr 25 21:10:30.923889 2026] [:error] [pid 59985:tid 60002] [client 20.199.101.230:27679] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aey9RgF_zDvEhKvyTH6upAAAAA8"]
[Sat Apr 25 21:10:31.544667 2026] [:error] [pid 59897:tid 59937] [client 20.199.101.230:30967] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file18.php"] [unique_id "aey9R_BrrkdzpEbmK4eD5wAAAIo"]
[Sat Apr 25 21:10:32.209925 2026] [:error] [pid 59898:tid 59971] [client 20.199.101.230:34298] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aey9SB-4vImxb0kbdzeq5AAAANE"]
[Sat Apr 25 21:10:33.531798 2026] [:error] [pid 59897:tid 59930] [client 20.199.101.230:24637] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aey9SfBrrkdzpEbmK4eD6gAAAIM"]
[Sat Apr 25 21:10:35.516680 2026] [:error] [pid 3212:tid 3230] [client 20.199.101.230:27245] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aey9S_g-28TY8_YLtUctiwAAARA"]
[Sat Apr 25 21:10:36.130201 2026] [:error] [pid 59985:tid 60000] [client 20.199.101.230:31669] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "aey9TAF_zDvEhKvyTH6urgAAAA0"]
[Sat Apr 25 21:10:37.269822 2026] [:error] [pid 59897:tid 59929] [client 20.199.101.230:34269] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aey9TfBrrkdzpEbmK4eD9gAAAII"]
[Sat Apr 25 21:10:37.869390 2026] [:error] [pid 3212:tid 3232] [client 20.199.101.230:24636] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aey9Tfg-28TY8_YLtUctkQAAARI"]
[Sat Apr 25 21:10:38.359313 2026] [:error] [pid 3212:tid 3228] [client 20.199.101.230:29253] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aey9Tvg-28TY8_YLtUctkwAAAQ4"]
[Sat Apr 25 21:10:38.863153 2026] [:error] [pid 3212:tid 3217] [client 20.199.101.230:29284] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aey9Tvg-28TY8_YLtUctlgAAAQM"]
[Sat Apr 25 21:10:39.406152 2026] [:error] [pid 3212:tid 3231] [client 20.199.101.230:34696] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aey9T_g-28TY8_YLtUctmgAAARE"]
[Sat Apr 25 21:10:39.934282 2026] [:error] [pid 59897:tid 59949] [client 20.199.101.230:34743] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aey9T_BrrkdzpEbmK4eEBwAAAJY"]
[Sat Apr 25 21:10:40.894468 2026] [:error] [pid 59896:tid 59914] [client 20.199.101.230:23052] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aey9ULLLzhtkd-OXUgDvCwAAAE4"]
[Sat Apr 25 21:10:41.510566 2026] [:error] [pid 59897:tid 59935] [client 20.199.101.230:40633] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "aey9UfBrrkdzpEbmK4eECwAAAIg"]
[Sat Apr 25 22:49:57.906543 2026] [:error] [pid 3212:tid 3224] [client 103.251.53.18:8384] [client 103.251.53.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.53.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezUlfg-28TY8_YLtUdgwwAAAQo"]
[Sat Apr 25 22:50:09.117163 2026] [:error] [pid 59898:tid 59959] [client 103.251.53.18:8428] [client 103.251.53.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.53.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezUoR-4vImxb0kbdze7TgAAAMU"]
[Sat Apr 25 22:50:29.353149 2026] [:error] [pid 59896:tid 59919] [client 103.251.53.18:8182] [client 103.251.53.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.53.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezUtbLLzhtkd-OXUgAT0AAAAFM"]
[Sat Apr 25 22:50:43.127474 2026] [:error] [pid 3212:tid 3225] [client 103.251.53.18:8104] [client 103.251.53.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.53.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezUw_g-28TY8_YLtUdhFwAAAQs"]
[Sat Apr 25 22:51:01.363585 2026] [:error] [pid 3212:tid 3228] [client 103.251.53.18:8350] [client 103.251.53.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.53.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezU1fg-28TY8_YLtUdhYgAAAQ4"]
[Sat Apr 25 22:51:12.005050 2026] [:error] [pid 59897:tid 59951] [client 103.251.53.18:8213] [client 103.251.53.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.53.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezU4PBrrkdzpEbmK4eYsAAAAJg"]
[Sun Apr 26 00:12:29.905720 2026] [:error] [pid 59898:tid 59970] [client 77.78.224.29:40507] [client 77.78.224.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.78.224.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezn7R-4vImxb0kbdzfM4QAAANA"]
[Sun Apr 26 00:15:43.326105 2026] [:error] [pid 3212:tid 3228] [client 77.78.224.29:41021] [client 77.78.224.29] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aezor_g-28TY8_YLtUeRJQAAAQ4"]
[Sun Apr 26 00:39:54.738859 2026] [:error] [pid 59898:tid 59967] [client 124.217.120.150:5413] [client 124.217.120.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.120.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezuWh-4vImxb0kbdzfSbgAAAM0"]
[Sun Apr 26 00:40:05.144130 2026] [:error] [pid 59897:tid 59933] [client 124.217.120.150:6032] [client 124.217.120.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.120.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezuZfBrrkdzpEbmK4ezlwAAAIY"]
[Sun Apr 26 00:40:15.799605 2026] [:error] [pid 3212:tid 3223] [client 124.217.120.150:6462] [client 124.217.120.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.120.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezub_g-28TY8_YLtUeesAAAAQk"]
[Sun Apr 26 00:40:26.360778 2026] [:error] [pid 59897:tid 59936] [client 124.217.120.150:6813] [client 124.217.120.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.120.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezuevBrrkdzpEbmK4eztQAAAIk"]
[Sun Apr 26 00:40:37.003875 2026] [:error] [pid 59896:tid 59908] [client 124.217.120.150:7163] [client 124.217.120.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.120.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aezuhbLLzhtkd-OXUgA-wQAAAEg"]
[Sun Apr 26 02:27:35.410871 2026] [:error] [pid 3212:tid 3223] [client 110.166.71.39:48555] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae0Hl_g-28TY8_YLtUff5wAAAQk"]
[Sun Apr 26 03:16:23.109018 2026] [:error] [pid 3212:tid 3224] [client 188.27.229.74:61246] [client 188.27.229.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.27.229.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0TB_g-28TY8_YLtUf50AAAAQo"]
[Sun Apr 26 03:16:33.814286 2026] [:error] [pid 59898:tid 59968] [client 188.27.229.74:18541] [client 188.27.229.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.27.229.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0TER-4vImxb0kbdzf3jQAAAM4"]
[Sun Apr 26 03:16:44.474799 2026] [:error] [pid 59898:tid 59970] [client 188.27.229.74:62264] [client 188.27.229.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.27.229.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0THB-4vImxb0kbdzf3oQAAANA"]
[Sun Apr 26 03:16:55.077469 2026] [:error] [pid 3212:tid 3228] [client 188.27.229.74:62616] [client 188.27.229.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.27.229.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0TJ_g-28TY8_YLtUf6cQAAAQ4"]
[Sun Apr 26 03:17:05.436908 2026] [:error] [pid 59896:tid 59903] [client 188.27.229.74:62954] [client 188.27.229.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.27.229.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0TMbLLzhtkd-OXUgB9cgAAAEM"]
[Sun Apr 26 03:51:52.403447 2026] [:error] [pid 64176:tid 64307] [client 152.59.48.220:59468] [client 152.59.48.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.48.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0bWDNSdAwEv4BX4YJ_fgAAAA0"]
[Sun Apr 26 03:52:02.595897 2026] [:error] [pid 64177:tid 64361] [client 152.59.48.220:60304] [client 152.59.48.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.48.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0bYkdCiRn77Twvcom21gAAAEg"]
[Sun Apr 26 03:52:13.098373 2026] [:error] [pid 64178:tid 64383] [client 152.59.48.220:60646] [client 152.59.48.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.48.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0bbTj8Yzmn87N-mdYn4gAAAIM"]
[Sun Apr 26 03:52:23.755110 2026] [:error] [pid 64632:tid 64695] [client 152.59.48.220:60974] [client 152.59.48.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.48.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0bdwBZcErGHLTsluK62AAAANQ"]
[Sun Apr 26 03:52:34.108649 2026] [:error] [pid 64632:tid 64692] [client 152.59.48.220:61287] [client 152.59.48.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.48.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0bggBZcErGHLTsluK7BwAAANE"]
[Sun Apr 26 03:52:45.440155 2026] [:error] [pid 64632:tid 64676] [client 152.59.48.220:61645] [client 152.59.48.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.48.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0bjQBZcErGHLTsluK7NAAAAMI"]
[Sun Apr 26 05:28:34.692592 2026] [:error] [pid 31273:tid 31347] [client 176.207.161.5:51322] [client 176.207.161.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.207.161.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0yAvhcNJEGrATcuEe3rgAAAUk"]
[Sun Apr 26 05:28:44.617465 2026] [:error] [pid 8491:tid 8507] [client 176.207.161.5:51663] [client 176.207.161.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.207.161.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0yDCq7I7e6CJooQM2EmgAAAMg"]
[Sun Apr 26 05:28:55.112657 2026] [:error] [pid 8390:tid 8451] [client 176.207.161.5:52007] [client 176.207.161.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.207.161.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0yF4GPtFK_i9p5yxQI9AAAAIA"]
[Sun Apr 26 05:29:05.656676 2026] [:error] [pid 8383:tid 8405] [client 176.207.161.5:52359] [client 176.207.161.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.207.161.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0yIdFa2S3EsATMdWO3XwAAAAg"]
[Sun Apr 26 05:29:16.120550 2026] [:error] [pid 8383:tid 8403] [client 176.207.161.5:52716] [client 176.207.161.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.207.161.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae0yLNFa2S3EsATMdWO3cQAAAAY"]
[Sun Apr 26 05:40:44.422049 2026] [autoindex:error] [pid 8383:tid 8400] [client 52.253.104.46:3884] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 05:40:49.764815 2026] [:error] [pid 8383:tid 8399] [client 52.253.104.46:3884] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ae004dFa2S3EsATMdWO6GgAAAAI"]
[Sun Apr 26 05:40:50.220557 2026] [:error] [pid 10315:tid 10322] [client 52.253.104.46:7634] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ae004qJIw2vjkleLIaCM8AAAAQU"]
[Sun Apr 26 05:40:50.687614 2026] [:error] [pid 10315:tid 10330] [client 52.253.104.46:7653] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ae004qJIw2vjkleLIaCM8wAAAQ0"]
[Sun Apr 26 05:40:51.143912 2026] [:error] [pid 10315:tid 10333] [client 52.253.104.46:3714] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa.php"] [unique_id "ae0046JIw2vjkleLIaCM-AAAARA"]
[Sun Apr 26 06:59:34.322879 2026] [:error] [pid 10315:tid 10340] [client 191.5.71.87:20491] [client 191.5.71.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.5.71.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1HVqJIw2vjkleLIaC_ggAAARc"]
[Sun Apr 26 06:59:44.030540 2026] [:error] [pid 8385:tid 8428] [client 191.5.71.87:22526] [client 191.5.71.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.5.71.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1HYDOy7_J84Wx3-oxuCwAAAEQ"]
[Sun Apr 26 06:59:58.717461 2026] [:error] [pid 8385:tid 8445] [client 191.5.71.87:21237] [client 191.5.71.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.5.71.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1HbjOy7_J84Wx3-oxuDwAAAFU"]
[Sun Apr 26 07:00:27.750247 2026] [:error] [pid 15001:tid 15020] [client 191.5.71.87:22045] [client 191.5.71.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.5.71.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1Hi_W5sb7QMhwb3Gd0qwAAAVE"]
[Sun Apr 26 07:00:38.957210 2026] [:error] [pid 15001:tid 15018] [client 191.5.71.87:21561] [client 191.5.71.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.5.71.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1HlvW5sb7QMhwb3Gd0tAAAAU8"]
[Sun Apr 26 07:54:45.946010 2026] [:error] [pid 13197:tid 13248] [client 108.179.252.35:50984] [client 108.179.252.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.179.252.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1URd3kktFKdSxTrBuWUAAAAtA"]
[Sun Apr 26 08:24:55.125934 2026] [:error] [pid 22572:tid 22594] [client 152.243.250.67:54632] [client 152.243.250.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.243.250.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1bV9XOViWCFU-pZzCAVAAAAVA"]
[Sun Apr 26 08:25:04.414016 2026] [:error] [pid 22572:tid 22583] [client 152.243.250.67:55149] [client 152.243.250.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.243.250.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1bYNXOViWCFU-pZzCAZQAAAUU"]
[Sun Apr 26 08:25:15.010442 2026] [:error] [pid 8385:tid 8438] [client 152.243.250.67:55492] [client 152.243.250.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.243.250.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1bazOy7_J84Wx3-ox5jQAAAE4"]
[Sun Apr 26 08:25:25.695634 2026] [:error] [pid 22572:tid 22588] [client 152.243.250.67:55809] [client 152.243.250.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.243.250.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1bddXOViWCFU-pZzCAdQAAAUo"]
[Sun Apr 26 08:25:36.335616 2026] [:error] [pid 16574:tid 16605] [client 152.243.250.67:56128] [client 152.243.250.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.243.250.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1bgH5MsX8wRQr99nYBowAAA0E"]
[Sun Apr 26 09:36:52.218712 2026] [:error] [pid 22573:tid 22613] [client 147.135.213.27:57408] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "ae1sNHB3EmQlD4yKUt9L_AAAAYc"]
[Sun Apr 26 09:36:54.569040 2026] [:error] [pid 22573:tid 22621] [client 147.135.213.27:51844] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "ae1sNnB3EmQlD4yKUt9MAgAAAY4"]
[Sun Apr 26 09:36:56.981273 2026] [:error] [pid 8385:tid 8439] [client 147.135.213.27:51848] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "ae1sODOy7_J84Wx3-oyEpgAAAE8"]
[Sun Apr 26 09:36:59.541507 2026] [:error] [pid 16515:tid 16533] [client 147.135.213.27:51854] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "ae1sO1tDrUmgHSvpuLziOwAAAk8"]
[Sun Apr 26 09:37:11.561363 2026] [:error] [pid 8385:tid 8441] [client 147.135.213.27:47270] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "ae1sRzOy7_J84Wx3-oyEsAAAAFE"]
[Sun Apr 26 09:37:14.079272 2026] [:error] [pid 8390:tid 8453] [client 147.135.213.27:50472] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "ae1sSoGPtFK_i9p5yxRjWgAAAII"]
[Sun Apr 26 09:37:16.581375 2026] [:error] [pid 16515:tid 16540] [client 147.135.213.27:50474] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "ae1sTFtDrUmgHSvpuLziXwAAAlY"]
[Sun Apr 26 09:37:19.004957 2026] [:error] [pid 16515:tid 16535] [client 147.135.213.27:50484] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ae1sT1tDrUmgHSvpuLziYgAAAlE"]
[Sun Apr 26 09:37:21.378573 2026] [:error] [pid 8390:tid 8455] [client 147.135.213.27:50498] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ae1sUYGPtFK_i9p5yxRjdQAAAIQ"]
[Sun Apr 26 09:37:23.812602 2026] [:error] [pid 8390:tid 8471] [client 147.135.213.27:43976] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ae1sU4GPtFK_i9p5yxRjfgAAAJQ"]
[Sun Apr 26 09:37:26.193413 2026] [:error] [pid 13137:tid 13144] [client 147.135.213.27:43988] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ae1sVt0RB4J0o4h5neEDGAAAAgQ"]
[Sun Apr 26 09:37:28.587108 2026] [:error] [pid 22572:tid 22592] [client 147.135.213.27:43998] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ae1sWNXOViWCFU-pZzCWxAAAAU4"]
[Sun Apr 26 09:37:31.124690 2026] [:error] [pid 22573:tid 22609] [client 147.135.213.27:44010] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ae1sW3B3EmQlD4yKUt9MNAAAAYM"]
[Sun Apr 26 09:37:33.495538 2026] [:error] [pid 22573:tid 22631] [client 147.135.213.27:44014] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ae1sXXB3EmQlD4yKUt9MOAAAAZg"]
[Sun Apr 26 09:37:35.887306 2026] [:error] [pid 22573:tid 22611] [client 147.135.213.27:46100] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ae1sX3B3EmQlD4yKUt9MRQAAAYU"]
[Sun Apr 26 09:37:38.438685 2026] [:error] [pid 22573:tid 22623] [client 147.135.213.27:46106] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ae1sYnB3EmQlD4yKUt9MTgAAAZA"]
[Sun Apr 26 09:37:40.754043 2026] [:error] [pid 8383:tid 8406] [client 147.135.213.27:46110] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ae1sZNFa2S3EsATMdWPaEQAAAAk"]
[Sun Apr 26 09:37:43.056912 2026] [:error] [pid 16515:tid 16533] [client 147.135.213.27:46118] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ae1sZ1tDrUmgHSvpuLzidQAAAk8"]
[Sun Apr 26 09:37:45.508735 2026] [:error] [pid 8385:tid 8442] [client 147.135.213.27:36980] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ae1saTOy7_J84Wx3-oyEwwAAAFI"]
[Sun Apr 26 09:37:47.948077 2026] [:error] [pid 8491:tid 8513] [client 147.135.213.27:36988] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ae1sayq7I7e6CJooQM27vwAAAM4"]
[Sun Apr 26 09:38:18.313345 2026] [:error] [pid 16515:tid 16532] [client 147.135.213.27:36994] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "ae1siltDrUmgHSvpuLzioAAAAk4"]
[Sun Apr 26 09:38:20.830604 2026] [:error] [pid 8491:tid 8503] [client 147.135.213.27:46120] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ae1sjCq7I7e6CJooQM270gAAAMQ"]
[Sun Apr 26 09:38:23.231851 2026] [:error] [pid 13137:tid 13163] [client 147.135.213.27:46128] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "ae1sj90RB4J0o4h5neEDSQAAAhY"]
[Sun Apr 26 09:38:25.629124 2026] [:error] [pid 22573:tid 22622] [client 147.135.213.27:58838] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "ae1skXB3EmQlD4yKUt9MXgAAAY8"]
[Sun Apr 26 09:38:28.038348 2026] [:error] [pid 8390:tid 8456] [client 147.135.213.27:58846] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "ae1slIGPtFK_i9p5yxRjywAAAIU"]
[Sun Apr 26 09:38:30.457318 2026] [:error] [pid 8491:tid 8505] [client 147.135.213.27:58852] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ae1sliq7I7e6CJooQM275gAAAMY"]
[Sun Apr 26 09:38:32.834220 2026] [:error] [pid 13137:tid 13141] [client 147.135.213.27:58864] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ae1smN0RB4J0o4h5neEDUQAAAgE"]
[Sun Apr 26 09:38:37.977795 2026] [:error] [pid 8491:tid 8502] [client 147.135.213.27:42160] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ae1snSq7I7e6CJooQM278wAAAMM"]
[Sun Apr 26 09:38:40.403582 2026] [:error] [pid 22573:tid 22621] [client 147.135.213.27:42166] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ae1soHB3EmQlD4yKUt9MZQAAAY4"]
[Sun Apr 26 09:38:42.896682 2026] [:error] [pid 8383:tid 8413] [client 147.135.213.27:42182] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ae1sotFa2S3EsATMdWPaNQAAABA"]
[Sun Apr 26 09:38:45.263737 2026] [:error] [pid 8491:tid 8508] [client 147.135.213.27:50660] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ae1spSq7I7e6CJooQM28CAAAAMk"]
[Sun Apr 26 09:38:47.515593 2026] [:error] [pid 8491:tid 8514] [client 147.135.213.27:50664] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ae1spyq7I7e6CJooQM28DgAAAM8"]
[Sun Apr 26 09:38:49.902255 2026] [:error] [pid 8390:tid 8453] [client 147.135.213.27:50676] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ae1sqYGPtFK_i9p5yxRj1wAAAII"]
[Sun Apr 26 09:38:52.283872 2026] [:error] [pid 16515:tid 16530] [client 147.135.213.27:50680] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ae1srFtDrUmgHSvpuLzirQAAAkw"]
[Sun Apr 26 09:38:54.680663 2026] [:error] [pid 16574:tid 16608] [client 147.135.213.27:45888] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ae1srn5MsX8wRQr99nYI7gAAA0Q"]
[Sun Apr 26 09:38:57.215143 2026] [:error] [pid 22572:tid 22597] [client 147.135.213.27:45898] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ae1ssdXOViWCFU-pZzCW8AAAAVM"]
[Sun Apr 26 09:38:59.577577 2026] [:error] [pid 8390:tid 8465] [client 147.135.213.27:45912] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ae1ss4GPtFK_i9p5yxRj9AAAAI4"]
[Sun Apr 26 09:39:02.095220 2026] [:error] [pid 22572:tid 22584] [client 147.135.213.27:45928] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ae1sttXOViWCFU-pZzCW9gAAAUY"]
[Sun Apr 26 09:39:04.639222 2026] [:error] [pid 13197:tid 13239] [client 147.135.213.27:43294] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ae1suN3kktFKdSxTrBuhagAAAsg"]
[Sun Apr 26 09:39:07.321728 2026] [:error] [pid 8390:tid 8453] [client 147.135.213.27:43310] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ae1su4GPtFK_i9p5yxRkAwAAAII"]
[Sun Apr 26 09:39:09.994450 2026] [:error] [pid 8390:tid 8462] [client 147.135.213.27:43318] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ae1svYGPtFK_i9p5yxRkDwAAAIs"]
[Sun Apr 26 09:39:26.241729 2026] [:error] [pid 22572:tid 22589] [client 64.23.129.2:60222] [client 64.23.129.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "ae1sztXOViWCFU-pZzCXGAAAAUs"]
[Sun Apr 26 09:39:52.266279 2026] [:error] [pid 8390:tid 8455] [client 147.135.213.27:43962] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ae1s6IGPtFK_i9p5yxRkbgAAAIQ"]
[Sun Apr 26 09:39:54.584672 2026] [:error] [pid 16515:tid 16541] [client 147.135.213.27:41912] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ae1s6ltDrUmgHSvpuLzi0gAAAlc"]
[Sun Apr 26 09:39:56.986933 2026] [:error] [pid 8390:tid 8472] [client 147.135.213.27:41918] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ae1s7IGPtFK_i9p5yxRkeQAAAJU"]
[Sun Apr 26 09:39:59.395122 2026] [:error] [pid 8491:tid 8512] [client 147.135.213.27:41932] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ae1s7yq7I7e6CJooQM28OQAAAM0"]
[Sun Apr 26 09:40:01.938687 2026] [:error] [pid 16574:tid 16629] [client 147.135.213.27:41944] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ae1s8X5MsX8wRQr99nYJAAAAA1E"]
[Sun Apr 26 09:40:04.318987 2026] [:error] [pid 16574:tid 16641] [client 147.135.213.27:39310] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ae1s9H5MsX8wRQr99nYJAQAAA1c"]
[Sun Apr 26 09:40:06.764010 2026] [:error] [pid 13197:tid 13232] [client 147.135.213.27:39314] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ae1s9t3kktFKdSxTrBuhhgAAAsE"]
[Sun Apr 26 09:40:09.258337 2026] [:error] [pid 8390:tid 8463] [client 147.135.213.27:39322] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ae1s-YGPtFK_i9p5yxRknAAAAIw"]
[Sun Apr 26 09:40:11.686480 2026] [:error] [pid 8390:tid 8462] [client 147.135.213.27:39332] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ae1s-4GPtFK_i9p5yxRkpgAAAIs"]
[Sun Apr 26 09:40:14.148303 2026] [:error] [pid 22573:tid 22612] [client 147.135.213.27:53466] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ae1s_nB3EmQlD4yKUt9M2AAAAYY"]
[Sun Apr 26 09:40:17.644077 2026] [:error] [pid 22573:tid 22616] [client 147.135.213.27:53482] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ae1tAXB3EmQlD4yKUt9M4QAAAYk"]
[Sun Apr 26 09:40:20.093576 2026] [:error] [pid 8390:tid 8468] [client 147.135.213.27:53496] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ae1tBIGPtFK_i9p5yxRk3gAAAJE"]
[Sun Apr 26 09:40:22.545790 2026] [:error] [pid 13197:tid 13235] [client 147.135.213.27:53500] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ae1tBt3kktFKdSxTrBuhiwAAAsQ"]
[Sun Apr 26 09:40:24.893083 2026] [:error] [pid 8390:tid 8471] [client 147.135.213.27:48504] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ae1tCIGPtFK_i9p5yxRk_QAAAJQ"]
[Sun Apr 26 09:40:27.385764 2026] [:error] [pid 8390:tid 8472] [client 147.135.213.27:48516] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ae1tC4GPtFK_i9p5yxRlBwAAAJU"]
[Sun Apr 26 09:40:29.773728 2026] [:error] [pid 13137:tid 13163] [client 147.135.213.27:48528] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ae1tDd0RB4J0o4h5neEDmAAAAhY"]
[Sun Apr 26 09:40:32.266871 2026] [:error] [pid 22573:tid 22629] [client 147.135.213.27:48544] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ae1tEHB3EmQlD4yKUt9M6gAAAZY"]
[Sun Apr 26 09:40:34.621037 2026] [:error] [pid 22573:tid 22620] [client 147.135.213.27:59068] [client 147.135.213.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ae1tEnB3EmQlD4yKUt9M8AAAAY0"]
[Sun Apr 26 10:01:33.895702 2026] [:error] [pid 16574:tid 16605] [client 139.59.242.14:54248] [client 139.59.242.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.242.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae1x_X5MsX8wRQr99nYKcwAAA0E"]
[Sun Apr 26 10:01:34.807881 2026] [proxy_fcgi:error] [pid 16574:tid 16605] [client 139.59.242.14:54248] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 26 10:01:35.107447 2026] [:error] [pid 16574:tid 16614] [client 139.59.242.14:54248] [client 139.59.242.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.242.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae1x_35MsX8wRQr99nYKdQAAA0o"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 26 10:01:36.141767 2026] [proxy_fcgi:error] [pid 16574:tid 16614] [client 139.59.242.14:54248] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 26 10:02:52.204974 2026] [:error] [pid 8385:tid 8436] [client 41.155.46.217:3775] [client 41.155.46.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.155.46.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1yTDOy7_J84Wx3-oyI3QAAAEw"]
[Sun Apr 26 10:03:04.107873 2026] [:error] [pid 22573:tid 22616] [client 41.155.46.217:4131] [client 41.155.46.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.155.46.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1yWHB3EmQlD4yKUt9UqQAAAYk"]
[Sun Apr 26 10:03:16.482775 2026] [:error] [pid 16574:tid 16629] [client 41.155.46.217:50102] [client 41.155.46.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.155.46.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1yZH5MsX8wRQr99nYKoQAAA1E"]
[Sun Apr 26 10:03:29.364930 2026] [:error] [pid 8491:tid 8508] [client 41.155.46.217:4893] [client 41.155.46.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.155.46.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1ycSq7I7e6CJooQM2_VQAAAMk"]
[Sun Apr 26 10:03:41.862537 2026] [:error] [pid 22572:tid 22580] [client 41.155.46.217:50864] [client 41.155.46.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.155.46.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1yfdXOViWCFU-pZzCc5QAAAUI"]
[Sun Apr 26 10:43:47.576081 2026] [:error] [pid 16515:tid 16530] [client 103.221.221.121:49488] [client 103.221.221.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.221.221.121, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae1741tDrUmgHSvpuLzx0AAAAkw"]
[Sun Apr 26 11:38:06.419778 2026] [:error] [pid 22573:tid 22619] [client 170.106.165.76:54266] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae2InnB3EmQlD4yKUt97igAAAYw"]
[Sun Apr 26 11:58:15.936429 2026] [:error] [pid 8390:tid 8452] [client 52.196.153.77:46252] [client 52.196.153.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.196.153.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae2NV4GPtFK_i9p5yxSvUgAAAIE"]
[Sun Apr 26 11:58:16.843225 2026] [proxy_fcgi:error] [pid 8390:tid 8452] [client 52.196.153.77:46252] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun Apr 26 11:58:17.251421 2026] [:error] [pid 8390:tid 8455] [client 52.196.153.77:46252] [client 52.196.153.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.196.153.77, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae2NWYGPtFK_i9p5yxSvVAAAAIQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 26 11:58:18.268444 2026] [proxy_fcgi:error] [pid 8390:tid 8455] [client 52.196.153.77:46252] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun Apr 26 12:20:57.477891 2026] [:error] [pid 8390:tid 8465] [client 94.205.230.116:8726] [client 94.205.230.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.205.230.116, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae2SqYGPtFK_i9p5yxS5sAAAAI4"]
[Sun Apr 26 12:47:11.105691 2026] [:error] [pid 16515:tid 16535] [client 103.130.18.195:38374] [client 103.130.18.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.130.18.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae2Yz1tDrUmgHSvpuLwC7QAAAlE"]
[Sun Apr 26 12:47:20.822813 2026] [:error] [pid 22572:tid 22589] [client 103.130.18.195:46507] [client 103.130.18.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.130.18.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae2Y2NXOViWCFU-pZzDNJgAAAUs"]
[Sun Apr 26 12:47:32.262298 2026] [:error] [pid 8491:tid 8511] [client 103.130.18.195:55700] [client 103.130.18.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.130.18.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae2Y5Cq7I7e6CJooQM3U7AAAAMw"]
[Sun Apr 26 12:47:45.268164 2026] [:error] [pid 22573:tid 22607] [client 103.130.18.195:64374] [client 103.130.18.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.130.18.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae2Y8XB3EmQlD4yKUt-PWwAAAYE"]
[Sun Apr 26 12:47:54.406043 2026] [:error] [pid 8390:tid 8468] [client 103.130.18.195:7582] [client 103.130.18.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.130.18.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae2Y-oGPtFK_i9p5yxTBxAAAAJE"]
[Sun Apr 26 13:38:18.766215 2026] [autoindex:error] [pid 8390:tid 8470] [client 52.253.104.46:6731] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:18.885011 2026] [autoindex:error] [pid 8390:tid 8466] [client 52.253.104.46:6731] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:19.003157 2026] [autoindex:error] [pid 8390:tid 8454] [client 52.253.104.46:6731] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:20.331136 2026] [autoindex:error] [pid 8390:tid 8469] [client 52.253.104.46:6731] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:20.448931 2026] [autoindex:error] [pid 8390:tid 8461] [client 52.253.104.46:6731] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:20.685490 2026] [autoindex:error] [pid 8390:tid 8474] [client 52.253.104.46:6731] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:22.725441 2026] [autoindex:error] [pid 8390:tid 8460] [client 52.253.104.46:6731] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:22.846989 2026] [autoindex:error] [pid 8390:tid 8456] [client 52.253.104.46:6731] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:22.965352 2026] [autoindex:error] [pid 8390:tid 8455] [client 52.253.104.46:6731] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:25.907864 2026] [autoindex:error] [pid 8390:tid 8453] [client 52.253.104.46:6731] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:28.878011 2026] [:error] [pid 8390:tid 8458] [client 52.253.104.46:6731] [client 52.253.104.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "ae2k1IGPtFK_i9p5yxTU1wAAAIc"]
[Sun Apr 26 13:38:29.359925 2026] [autoindex:error] [pid 22572:tid 22579] [client 52.253.104.46:6765] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:29.478197 2026] [autoindex:error] [pid 22572:tid 22586] [client 52.253.104.46:6765] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:29.596597 2026] [autoindex:error] [pid 22572:tid 22601] [client 52.253.104.46:6765] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:29.716448 2026] [autoindex:error] [pid 22572:tid 22590] [client 52.253.104.46:6765] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:29.837643 2026] [autoindex:error] [pid 22572:tid 22596] [client 52.253.104.46:6765] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 13:38:31.966022 2026] [:error] [pid 22572:tid 22582] [client 52.253.104.46:6765] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "ae2k19XOViWCFU-pZzDZTgAAAUQ"]
[Sun Apr 26 13:38:32.422840 2026] [:error] [pid 8385:tid 8425] [client 52.253.104.46:7479] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "ae2k2DOy7_J84Wx3-oymWQAAAEE"]
[Sun Apr 26 13:38:32.877557 2026] [:error] [pid 8390:tid 8469] [client 52.253.104.46:7437] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "ae2k2IGPtFK_i9p5yxTU3AAAAJI"]
[Sun Apr 26 13:38:33.333272 2026] [:error] [pid 22573:tid 22606] [client 52.253.104.46:6771] [client 52.253.104.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "ae2k2XB3EmQlD4yKUt-ctQAAAYA"]
[Sun Apr 26 14:48:21.126517 2026] [:error] [pid 13137:tid 13153] [client 160.191.181.237:53776] [client 160.191.181.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.191.181.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae21Nd0RB4J0o4h5neFBcQAAAgw"]
[Sun Apr 26 14:48:31.057582 2026] [:error] [pid 8390:tid 8473] [client 160.191.181.237:53983] [client 160.191.181.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.191.181.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae21P4GPtFK_i9p5yxTwuAAAAJY"]
[Sun Apr 26 14:48:42.991052 2026] [:error] [pid 8385:tid 8425] [client 160.191.181.237:54294] [client 160.191.181.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.191.181.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae21SjOy7_J84Wx3-oyu1wAAAEE"]
[Sun Apr 26 14:48:52.269151 2026] [:error] [pid 8390:tid 8466] [client 160.191.181.237:54610] [client 160.191.181.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.191.181.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae21VIGPtFK_i9p5yxTw0gAAAI8"]
[Sun Apr 26 14:49:02.992964 2026] [:error] [pid 16515:tid 16528] [client 160.191.181.237:54942] [client 160.191.181.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.191.181.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae21XltDrUmgHSvpuLwU5gAAAko"]
[Sun Apr 26 20:43:32.052688 2026] [:error] [pid 16574:tid 16612] [client 136.158.58.141:44210] [client 136.158.58.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.58.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4IdH5MsX8wRQr99nY4TAAAA0g"]
[Sun Apr 26 20:43:42.472902 2026] [:error] [pid 8385:tid 8425] [client 136.158.58.141:45451] [client 136.158.58.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.58.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4IfjOy7_J84Wx3-ozVPgAAAEE"]
[Sun Apr 26 20:43:53.112690 2026] [:error] [pid 16515:tid 16524] [client 136.158.58.141:46586] [client 136.158.58.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.58.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4IiVtDrUmgHSvpuLxFfwAAAkY"]
[Sun Apr 26 20:44:03.718889 2026] [:error] [pid 22573:tid 22617] [client 136.158.58.141:47689] [client 136.158.58.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.58.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4Ik3B3EmQlD4yKUt8CmAAAAYo"]
[Sun Apr 26 20:44:14.341633 2026] [:error] [pid 16574:tid 16609] [client 136.158.58.141:48712] [client 136.158.58.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.58.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4Inn5MsX8wRQr99nY4VgAAA0U"]
[Sun Apr 26 22:09:13.372278 2026] [:error] [pid 8390:tid 8467] [client 103.196.139.50:51468] [client 103.196.139.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.196.139.50, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4ciYGPtFK_i9p5yxSQtgAAAJA"]
[Sun Apr 26 22:40:37.109823 2026] [:error] [pid 22573:tid 22625] [client 152.56.137.131:50389] [client 152.56.137.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.56.137.131, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4j5XB3EmQlD4yKUt8bvAAAAZI"]
[Sun Apr 26 22:40:48.490213 2026] [:error] [pid 22573:tid 22607] [client 152.56.137.131:50653] [client 152.56.137.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.56.137.131, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4j8HB3EmQlD4yKUt8b2gAAAYE"]
[Sun Apr 26 22:40:59.491558 2026] [:error] [pid 8491:tid 8518] [client 152.56.137.131:50949] [client 152.56.137.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.56.137.131, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4j-yq7I7e6CJooQM0OtAAAANM"]
[Sun Apr 26 22:41:10.434501 2026] [:error] [pid 8385:tid 8427] [client 152.56.137.131:51287] [client 152.56.137.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.56.137.131, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4kBjOy7_J84Wx3-ozihAAAAEM"]
[Sun Apr 26 22:41:21.081283 2026] [:error] [pid 8491:tid 8516] [client 152.56.137.131:51623] [client 152.56.137.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.56.137.131, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4kESq7I7e6CJooQM0OxgAAANE"]
[Sun Apr 26 22:52:18.946845 2026] [:error] [pid 16574:tid 16623] [client 194.233.101.208:52262] [client 194.233.101.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.233.101.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4mon5MsX8wRQr99nZCvQAAA04"]
[Sun Apr 26 22:53:33.297539 2026] [:error] [pid 13137:tid 13158] [client 194.233.101.208:55698] [client 194.233.101.208] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae4m7d0RB4J0o4h5neGQdgAAAhE"]
[Sun Apr 26 23:04:46.177275 2026] [:error] [pid 8385:tid 8444] [client 171.79.105.239:59198] [client 171.79.105.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.79.105.239, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4pjjOy7_J84Wx3-ozmkQAAAFQ"]
[Sun Apr 26 23:04:56.908097 2026] [:error] [pid 22573:tid 22621] [client 171.79.105.239:59767] [client 171.79.105.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.79.105.239, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4pmHB3EmQlD4yKUt8iDQAAAY4"]
[Sun Apr 26 23:05:07.517912 2026] [:error] [pid 16574:tid 16605] [client 171.79.105.239:60114] [client 171.79.105.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.79.105.239, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4po35MsX8wRQr99nZDkAAAA0E"]
[Sun Apr 26 23:05:18.275582 2026] [:error] [pid 8383:tid 8403] [client 171.79.105.239:60460] [client 171.79.105.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.79.105.239, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4prtFa2S3EsATMdWOGRAAAAAY"]
[Sun Apr 26 23:05:28.923669 2026] [:error] [pid 8385:tid 8427] [client 171.79.105.239:60787] [client 171.79.105.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.79.105.239, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4puDOy7_J84Wx3-ozmmwAAAEM"]
[Sun Apr 26 23:19:16.005091 2026] [:error] [pid 22572:tid 22582] [client 43.138.68.113:40686] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae4s9NXOViWCFU-pZzBLEQAAAUQ"]
[Sun Apr 26 23:28:20.789627 2026] [:error] [pid 8491:tid 8514] [client 3.65.40.162:21095] [client 3.65.40.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "ae4vFCq7I7e6CJooQM0akQAAAM8"]
[Mon Apr 27 00:19:10.866822 2026] [:error] [pid 13137:tid 13151] [client 173.239.218.23:20163] [client 173.239.218.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae46_t0RB4J0o4h5neGqHAAAAgo"]
[Mon Apr 27 00:25:10.936030 2026] [:error] [pid 8383:tid 8398] [client 150.109.119.38:38058] [client 150.109.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae48ZtFa2S3EsATMdWOd_wAAAAE"]
[Mon Apr 27 00:39:32.205119 2026] [:error] [pid 8385:tid 8437] [client 92.253.31.170:21173] [client 92.253.31.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.253.31.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4_xDOy7_J84Wx3-ozu5gAAAE0"]
[Mon Apr 27 00:39:42.436295 2026] [:error] [pid 8383:tid 8409] [client 92.253.31.170:42523] [client 92.253.31.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.253.31.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4_ztFa2S3EsATMdWOhWQAAAAw"]
[Mon Apr 27 00:39:52.797484 2026] [:error] [pid 8491:tid 8523] [client 92.253.31.170:54073] [client 92.253.31.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.253.31.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae4_2Cq7I7e6CJooQM0pzgAAANc"]
[Mon Apr 27 00:42:10.514804 2026] [:error] [pid 8390:tid 8457] [client 92.253.31.170:42492] [client 92.253.31.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.253.31.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae5AYoGPtFK_i9p5yxS6PwAAAIY"]
[Mon Apr 27 00:42:22.233745 2026] [:error] [pid 22573:tid 22615] [client 92.253.31.170:42531] [client 92.253.31.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.253.31.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae5AbnB3EmQlD4yKUt8yJAAAAYg"]
[Mon Apr 27 03:35:05.613078 2026] [:error] [pid 22573:tid 22630] [client 89.163.146.197:63895] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "ae5o6XB3EmQlD4yKUt9JwQAAAZc"], referer: www.google.com
[Mon Apr 27 03:46:50.923912 2026] [:error] [pid 20334:tid 20344] [client 20.255.80.192:2261] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ae5rqv2BrMOANWIKROWN-gAAAMY"]
[Mon Apr 27 03:46:51.398517 2026] [:error] [pid 20334:tid 20361] [client 20.255.80.192:2050] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ae5rq_2BrMOANWIKROWN_AAAANc"]
[Mon Apr 27 03:46:51.882783 2026] [:error] [pid 20334:tid 20362] [client 20.255.80.192:2271] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ae5rq_2BrMOANWIKROWN_QAAANg"]
[Mon Apr 27 03:46:52.367824 2026] [:error] [pid 20334:tid 20359] [client 20.255.80.192:2079] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ae5rrP2BrMOANWIKROWOAAAAANU"]
[Mon Apr 27 04:08:21.779439 2026] [:error] [pid 22647:tid 22719] [client 87.116.164.246:44766] [client 87.116.164.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.116.164.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae5wtWjfVULTjnk5SzNlPgAAAIk"]
[Mon Apr 27 04:08:31.992688 2026] [:error] [pid 22647:tid 22730] [client 87.116.164.246:44629] [client 87.116.164.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.116.164.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae5wv2jfVULTjnk5SzNlWgAAAJQ"]
[Mon Apr 27 04:08:42.598330 2026] [:error] [pid 22647:tid 22716] [client 87.116.164.246:44710] [client 87.116.164.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.116.164.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae5wymjfVULTjnk5SzNldgAAAIY"]
[Mon Apr 27 04:08:53.150961 2026] [:error] [pid 22647:tid 22720] [client 87.116.164.246:13085] [client 87.116.164.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.116.164.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae5w1WjfVULTjnk5SzNlpwAAAIo"]
[Mon Apr 27 04:09:03.787167 2026] [:error] [pid 22751:tid 22778] [client 87.116.164.246:13174] [client 87.116.164.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.116.164.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae5w3yc0tCpVyVdFok9edgAAANg"]
[Mon Apr 27 04:52:30.788959 2026] [:error] [pid 22751:tid 22764] [client 43.157.180.116:37938] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae57Dic0tCpVyVdFok-AsAAAAMo"]
[Mon Apr 27 06:46:35.023285 2026] [:error] [pid 22646:tid 22687] [client 5.135.131.226:51642] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "ae6Vy4k_HyZhTP6AYaepfgAAAEQ"]
[Mon Apr 27 06:46:41.141020 2026] [:error] [pid 22647:tid 22730] [client 5.135.131.226:59818] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "ae6V0WjfVULTjnk5SzO7tQAAAJQ"]
[Mon Apr 27 06:46:45.576989 2026] [:error] [pid 22751:tid 22773] [client 5.135.131.226:59822] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "ae6V1Sc0tCpVyVdFok_erAAAANM"]
[Mon Apr 27 06:46:49.837828 2026] [:error] [pid 22645:tid 22665] [client 5.135.131.226:41146] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "ae6V2X-Pq2r302zQbMa_fwAAAAo"]
[Mon Apr 27 06:46:54.635615 2026] [:error] [pid 20603:tid 20624] [client 5.135.131.226:41160] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "ae6V3g_k682XZv20MXyVngAAARA"]
[Mon Apr 27 06:46:58.274249 2026] [:error] [pid 20603:tid 20631] [client 5.135.131.226:52414] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "ae6V4g_k682XZv20MXyVrAAAARc"]
[Mon Apr 27 06:47:01.358381 2026] [:error] [pid 22646:tid 22692] [client 5.135.131.226:52430] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "ae6V5Yk_HyZhTP6AYaepiwAAAEk"]
[Mon Apr 27 06:47:05.216970 2026] [:error] [pid 22751:tid 22759] [client 5.135.131.226:52434] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ae6V6Sc0tCpVyVdFok_evQAAAMU"]
[Mon Apr 27 06:47:09.322643 2026] [:error] [pid 20603:tid 20619] [client 5.135.131.226:37880] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ae6V7Q_k682XZv20MXyVxgAAAQs"]
[Mon Apr 27 06:47:14.627302 2026] [:error] [pid 20603:tid 20623] [client 5.135.131.226:37894] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ae6V8g_k682XZv20MXyV4QAAAQ8"]
[Mon Apr 27 06:47:20.118398 2026] [:error] [pid 20603:tid 20613] [client 5.135.131.226:55776] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ae6V-A_k682XZv20MXyV8AAAAQU"]
[Mon Apr 27 06:47:24.130805 2026] [:error] [pid 20603:tid 20609] [client 5.135.131.226:55790] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ae6V_A_k682XZv20MXyV_AAAAQE"]
[Mon Apr 27 06:47:27.717551 2026] [:error] [pid 22647:tid 22726] [client 5.135.131.226:38620] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ae6V_2jfVULTjnk5SzO72AAAAJA"]
[Mon Apr 27 06:48:08.948878 2026] [:error] [pid 22647:tid 22720] [client 5.135.131.226:38626] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "ae6WKGjfVULTjnk5SzO8GwAAAIo"]
[Mon Apr 27 06:48:12.729044 2026] [:error] [pid 22646:tid 22695] [client 5.135.131.226:50532] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "ae6WLIk_HyZhTP6AYaepvQAAAEw"]
[Mon Apr 27 06:48:16.074538 2026] [:error] [pid 20603:tid 20616] [client 5.135.131.226:50538] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "ae6WMA_k682XZv20MXyWbAAAAQg"]
[Mon Apr 27 06:48:19.730325 2026] [:error] [pid 22646:tid 22698] [client 5.135.131.226:52618] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "ae6WM4k_HyZhTP6AYaepzgAAAE8"]
[Mon Apr 27 06:48:22.560656 2026] [:error] [pid 22645:tid 22665] [client 5.135.131.226:52632] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "ae6WNn-Pq2r302zQbMa_yQAAAAo"]
[Mon Apr 27 06:48:25.768949 2026] [:error] [pid 22751:tid 22759] [client 5.135.131.226:52648] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "ae6WOSc0tCpVyVdFok_fFwAAAMU"]
[Mon Apr 27 06:48:28.986694 2026] [:error] [pid 22645:tid 22660] [client 5.135.131.226:59952] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ae6WPH-Pq2r302zQbMa_4AAAAAU"]
[Mon Apr 27 06:48:31.742870 2026] [:error] [pid 20603:tid 20628] [client 5.135.131.226:59954] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "ae6WPw_k682XZv20MXyWnAAAARQ"]
[Mon Apr 27 06:48:34.720385 2026] [:error] [pid 22646:tid 22694] [client 5.135.131.226:59966] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ae6WQok_HyZhTP6AYaep5gAAAEs"]
[Mon Apr 27 06:48:37.459308 2026] [:error] [pid 22751:tid 22775] [client 5.135.131.226:60286] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "ae6WRSc0tCpVyVdFok_fOQAAANU"]
[Mon Apr 27 06:48:40.318734 2026] [:error] [pid 22751:tid 22765] [client 5.135.131.226:60300] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "ae6WSCc0tCpVyVdFok_fQAAAAMs"]
[Mon Apr 27 06:48:43.172660 2026] [:error] [pid 22646:tid 22687] [client 5.135.131.226:60316] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "ae6WS4k_HyZhTP6AYaep8AAAAEQ"]
[Mon Apr 27 06:48:46.200521 2026] [:error] [pid 22645:tid 22660] [client 5.135.131.226:60322] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ae6WTn-Pq2r302zQbMa_7QAAAAU"]
[Mon Apr 27 06:48:48.776623 2026] [:error] [pid 22645:tid 22657] [client 5.135.131.226:57286] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ae6WUH-Pq2r302zQbMa_8gAAAAI"]
[Mon Apr 27 06:48:51.937874 2026] [:error] [pid 22751:tid 22765] [client 5.135.131.226:57302] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ae6WUyc0tCpVyVdFok_fUQAAAMs"]
[Mon Apr 27 06:48:54.524021 2026] [:error] [pid 20603:tid 20629] [client 5.135.131.226:57318] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ae6WVg_k682XZv20MXyW9QAAARU"]
[Mon Apr 27 06:48:57.359953 2026] [:error] [pid 20603:tid 20617] [client 5.135.131.226:42836] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ae6WWQ_k682XZv20MXyW_QAAAQk"]
[Mon Apr 27 06:49:00.507523 2026] [:error] [pid 22646:tid 22705] [client 5.135.131.226:42846] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ae6WXIk_HyZhTP6AYaeqAgAAAFY"]
[Mon Apr 27 06:49:03.017645 2026] [:error] [pid 22751:tid 22767] [client 5.135.131.226:42854] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ae6WXyc0tCpVyVdFok_fagAAAM0"]
[Mon Apr 27 06:49:05.455746 2026] [:error] [pid 22751:tid 22763] [client 5.135.131.226:42866] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ae6WYSc0tCpVyVdFok_fcwAAAMk"]
[Mon Apr 27 06:49:38.709853 2026] [:error] [pid 22751:tid 22770] [client 5.135.131.226:36598] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "ae6Wgic0tCpVyVdFok_frgAAANA"]
[Mon Apr 27 06:49:41.361496 2026] [:error] [pid 22646:tid 22697] [client 5.135.131.226:44790] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ae6WhYk_HyZhTP6AYaeqHgAAAE4"]
[Mon Apr 27 06:49:44.045629 2026] [:error] [pid 22646:tid 22706] [client 5.135.131.226:44798] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ae6WiIk_HyZhTP6AYaeqHwAAAFc"]
[Mon Apr 27 06:49:46.648729 2026] [:error] [pid 20603:tid 20619] [client 5.135.131.226:44806] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ae6Wig_k682XZv20MXyXSQAAAQs"]
[Mon Apr 27 06:49:49.189084 2026] [:error] [pid 22751:tid 22767] [client 5.135.131.226:37856] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ae6WjSc0tCpVyVdFok_ftAAAAM0"]
[Mon Apr 27 06:49:51.708289 2026] [:error] [pid 22647:tid 22734] [client 5.135.131.226:37858] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ae6Wj2jfVULTjnk5SzO8iQAAAJg"]
[Mon Apr 27 06:49:54.177789 2026] [:error] [pid 22751:tid 22775] [client 5.135.131.226:37872] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ae6Wkic0tCpVyVdFok_fuwAAANU"]
[Mon Apr 27 06:49:56.761327 2026] [:error] [pid 22751:tid 22764] [client 5.135.131.226:56930] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ae6WlCc0tCpVyVdFok_fvgAAAMo"]
[Mon Apr 27 06:51:52.606292 2026] [:error] [pid 22647:tid 22733] [client 5.135.131.226:38842] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ae6XCGjfVULTjnk5SzO9FQAAAJc"]
[Mon Apr 27 06:51:55.144113 2026] [:error] [pid 22645:tid 22678] [client 5.135.131.226:58308] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ae6XC3-Pq2r302zQbMbAjAAAABc"]
[Mon Apr 27 06:51:57.786814 2026] [:error] [pid 22647:tid 22719] [client 5.135.131.226:34414] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ae6XDWjfVULTjnk5SzO9FwAAAIk"]
[Mon Apr 27 06:52:00.294113 2026] [:error] [pid 20603:tid 20608] [client 5.135.131.226:34430] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ae6XEA_k682XZv20MXyYpwAAAQA"]
[Mon Apr 27 06:52:02.915586 2026] [:error] [pid 22647:tid 22724] [client 5.135.131.226:34446] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ae6XEmjfVULTjnk5SzO9HwAAAI4"]
[Mon Apr 27 06:52:05.482926 2026] [:error] [pid 22647:tid 22733] [client 5.135.131.226:34452] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ae6XFWjfVULTjnk5SzO9JAAAAJc"]
[Mon Apr 27 06:52:08.003561 2026] [:error] [pid 20603:tid 20612] [client 5.135.131.226:35392] [client 5.135.131.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ae6XGA_k682XZv20MXyYtgAAAQQ"]
[Mon Apr 27 06:54:05.939411 2026] [:error] [pid 22647:tid 22725] [client 185.192.70.124:50949] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae6XjWjfVULTjnk5SzO90wAAAI8"]
[Mon Apr 27 06:54:06.755645 2026] [:error] [pid 22646:tid 22707] [client 185.192.70.5:40667] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "ae6Xjok_HyZhTP6AYaerjwAAAFg"]
[Mon Apr 27 06:54:07.572127 2026] [:error] [pid 20603:tid 20626] [client 185.192.70.107:38261] [client 185.192.70.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "ae6Xjw_k682XZv20MXyZmAAAARI"]
[Mon Apr 27 06:54:08.386544 2026] [:error] [pid 22647:tid 22730] [client 185.192.70.108:38029] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ae6XkGjfVULTjnk5SzO91wAAAJQ"]
[Mon Apr 27 06:54:09.198728 2026] [:error] [pid 22751:tid 22769] [client 185.192.70.102:50835] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/users.php"] [unique_id "ae6XkSc0tCpVyVdFok_hWQAAAM8"]
[Mon Apr 27 06:54:10.019656 2026] [:error] [pid 20603:tid 20624] [client 185.192.70.114:41559] [client 185.192.70.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "ae6Xkg_k682XZv20MXyZngAAARA"]
[Mon Apr 27 06:54:10.839609 2026] [:error] [pid 20603:tid 20618] [client 185.192.70.109:55199] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403.php"] [unique_id "ae6Xkg_k682XZv20MXyZpAAAAQo"]
[Mon Apr 27 06:54:11.648816 2026] [:error] [pid 22647:tid 22711] [client 178.239.198.202:64837] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "ae6Xk2jfVULTjnk5SzO92QAAAIE"]
[Mon Apr 27 06:54:12.458178 2026] [:error] [pid 22751:tid 22760] [client 185.192.70.107:59387] [client 185.192.70.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "ae6XlCc0tCpVyVdFok_hZQAAAMY"]
[Mon Apr 27 06:54:13.273490 2026] [:error] [pid 22647:tid 22721] [client 185.192.70.5:57543] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/3PJcpMFsD8B.php"] [unique_id "ae6XlWjfVULTjnk5SzO93AAAAIs"]
[Mon Apr 27 06:54:14.084516 2026] [:error] [pid 22751:tid 22762] [client 185.192.70.105:27343] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "ae6Xlic0tCpVyVdFok_hcAAAAMg"]
[Mon Apr 27 06:54:14.900146 2026] [:error] [pid 20603:tid 20628] [client 185.192.70.125:39683] [client 185.192.70.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "ae6Xlg_k682XZv20MXyZqQAAARQ"]
[Mon Apr 27 06:54:15.719140 2026] [:error] [pid 20603:tid 20616] [client 185.192.70.122:30983] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "ae6Xlw_k682XZv20MXyZrQAAAQg"]
[Mon Apr 27 06:54:16.534917 2026] [:error] [pid 22647:tid 22733] [client 185.192.70.134:25361] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/posts"] [unique_id "ae6XmGjfVULTjnk5SzO95gAAAJc"]
[Mon Apr 27 06:54:17.444460 2026] [:error] [pid 20603:tid 20631] [client 185.192.70.123:30035] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "ae6XmQ_k682XZv20MXyZuwAAARc"]
[Mon Apr 27 06:54:18.258293 2026] [:error] [pid 20603:tid 20630] [client 185.192.70.102:33731] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "ae6Xmg_k682XZv20MXyZyQAAARY"]
[Mon Apr 27 06:54:19.075372 2026] [:error] [pid 22751:tid 22776] [client 185.192.70.131:41177] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ae6Xmyc0tCpVyVdFok_hgQAAANY"]
[Mon Apr 27 06:54:19.880318 2026] [:error] [pid 20603:tid 20624] [client 178.239.198.202:45553] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/assets/images/selam.php"] [unique_id "ae6Xmw_k682XZv20MXyZ1QAAARA"]
[Mon Apr 27 06:54:20.691803 2026] [:error] [pid 20603:tid 20614] [client 185.192.70.109:33565] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/item.php"] [unique_id "ae6XnA_k682XZv20MXyZ2wAAAQY"]
[Mon Apr 27 06:54:21.504835 2026] [:error] [pid 22647:tid 22722] [client 185.192.70.127:33103] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "ae6XnWjfVULTjnk5SzO97wAAAIw"]
[Mon Apr 27 06:54:22.323018 2026] [:error] [pid 20603:tid 20612] [client 185.192.70.121:29003] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "ae6Xng_k682XZv20MXyZ5QAAAQQ"]
[Mon Apr 27 06:54:23.141613 2026] [:error] [pid 22647:tid 22731] [client 185.192.70.123:38603] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config-sample.php"] [unique_id "ae6Xn2jfVULTjnk5SzO99QAAAJU"]
[Mon Apr 27 06:54:23.958322 2026] [:error] [pid 22646:tid 22685] [client 185.192.70.128:27137] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/"] [unique_id "ae6Xn4k_HyZhTP6AYaerrQAAAEI"]
[Mon Apr 27 06:54:24.775573 2026] [:error] [pid 22646:tid 22705] [client 185.192.70.131:41449] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ae6XoIk_HyZhTP6AYaertwAAAFY"]
[Mon Apr 27 06:54:25.592302 2026] [:error] [pid 20603:tid 20627] [client 185.192.70.128:52583] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/edit-tags.php"] [unique_id "ae6XoQ_k682XZv20MXyZ7wAAARM"]
[Mon Apr 27 06:54:26.410311 2026] [:error] [pid 22646:tid 22695] [client 185.192.70.104:23093] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "ae6Xook_HyZhTP6AYaeruAAAAEw"]
[Mon Apr 27 06:54:27.220757 2026] [:error] [pid 22647:tid 22716] [client 185.192.70.124:24325] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "ae6Xo2jfVULTjnk5SzO9-gAAAIY"]
[Mon Apr 27 06:54:28.032856 2026] [:error] [pid 20603:tid 20622] [client 185.192.70.135:40577] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/core.php"] [unique_id "ae6XpA_k682XZv20MXyZ_AAAAQ4"]
[Mon Apr 27 06:54:28.852261 2026] [:error] [pid 20603:tid 20617] [client 185.192.70.104:59725] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-wlx.php"] [unique_id "ae6XpA_k682XZv20MXyZ_wAAAQk"]
[Mon Apr 27 06:54:29.672541 2026] [:error] [pid 22751:tid 22770] [client 185.192.70.131:45557] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/updates.php"] [unique_id "ae6XpSc0tCpVyVdFok_h1QAAANA"]
[Mon Apr 27 06:54:30.487500 2026] [:error] [pid 22751:tid 22758] [client 185.192.70.108:52943] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/speculative8.php"] [unique_id "ae6Xpic0tCpVyVdFok_h4gAAAMQ"]
[Mon Apr 27 06:54:31.308812 2026] [:error] [pid 22646:tid 22699] [client 185.192.70.114:20899] [client 185.192.70.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/classwithtostring.php"] [unique_id "ae6Xp4k_HyZhTP6AYaer5AAAAFA"]
[Mon Apr 27 06:54:33.763336 2026] [:error] [pid 22647:tid 22721] [client 185.192.70.107:39923] [client 185.192.70.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/PHPMailer/s"] [unique_id "ae6XqWjfVULTjnk5SzO-CwAAAIs"]
[Mon Apr 27 06:54:34.581286 2026] [:error] [pid 20603:tid 20621] [client 185.192.70.106:42877] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "ae6Xqg_k682XZv20MXyaBwAAAQ0"]
[Mon Apr 27 06:54:35.399193 2026] [:error] [pid 20603:tid 20632] [client 185.192.70.119:55819] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/"] [unique_id "ae6Xqw_k682XZv20MXyaCQAAARg"]
[Mon Apr 27 06:54:36.217337 2026] [:error] [pid 22647:tid 22733] [client 185.192.70.122:55031] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/shell/"] [unique_id "ae6XrGjfVULTjnk5SzO-EgAAAJc"]
[Mon Apr 27 06:54:38.578950 2026] [:error] [pid 22646:tid 22686] [client 185.192.70.116:56939] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "ae6Xrok_HyZhTP6AYaer7wAAAEM"]
[Mon Apr 27 06:54:40.951084 2026] [:error] [pid 22647:tid 22733] [client 185.192.70.116:26807] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "ae6XsGjfVULTjnk5SzO-HgAAAJc"]
[Mon Apr 27 06:54:41.764876 2026] [:error] [pid 22751:tid 22755] [client 185.192.70.105:26929] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "ae6XsSc0tCpVyVdFok_iAAAAAMI"]
[Mon Apr 27 06:54:42.580263 2026] [:error] [pid 20603:tid 20612] [client 185.192.70.106:51957] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "ae6Xsg_k682XZv20MXyaFwAAAQQ"]
[Mon Apr 27 06:54:43.395087 2026] [:error] [pid 22751:tid 22771] [client 185.192.70.112:51595] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "ae6Xsyc0tCpVyVdFok_iCQAAANE"]
[Mon Apr 27 06:54:44.211670 2026] [:error] [pid 22645:tid 22668] [client 185.192.70.122:63317] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/"] [unique_id "ae6XtH-Pq2r302zQbMbA_gAAAA0"]
[Mon Apr 27 06:54:45.029352 2026] [:error] [pid 22647:tid 22726] [client 185.192.70.133:27129] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "ae6XtWjfVULTjnk5SzO-LwAAAJA"]
[Mon Apr 27 06:54:45.833384 2026] [:error] [pid 22647:tid 22716] [client 178.239.198.202:22117] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ae6XtWjfVULTjnk5SzO-NAAAAIY"]
[Mon Apr 27 06:54:46.637049 2026] [:error] [pid 22645:tid 22661] [client 185.192.70.132:54789] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/"] [unique_id "ae6Xtn-Pq2r302zQbMbBBQAAAAY"]
[Mon Apr 27 06:54:47.452351 2026] [:error] [pid 22645:tid 22655] [client 185.192.70.107:50043] [client 185.192.70.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/"] [unique_id "ae6Xt3-Pq2r302zQbMbBCgAAAAA"]
[Mon Apr 27 06:54:48.257132 2026] [:error] [pid 20603:tid 20622] [client 178.239.198.202:60343] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "ae6XuA_k682XZv20MXyaIwAAAQ4"]
[Mon Apr 27 06:54:49.060309 2026] [:error] [pid 22647:tid 22725] [client 178.239.198.202:31773] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "ae6XuWjfVULTjnk5SzO-YQAAAI8"]
[Mon Apr 27 06:54:49.868544 2026] [:error] [pid 22645:tid 22659] [client 185.192.70.135:20745] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system_core.php"] [unique_id "ae6XuX-Pq2r302zQbMbBHAAAAAQ"]
[Mon Apr 27 06:54:50.680788 2026] [:error] [pid 22751:tid 22753] [client 185.192.70.126:35451] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "ae6Xuic0tCpVyVdFok_iSQAAAMA"]
[Mon Apr 27 06:54:51.497147 2026] [:error] [pid 22751:tid 22768] [client 185.192.70.126:51683] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/"] [unique_id "ae6Xuyc0tCpVyVdFok_iUQAAAM4"]
[Mon Apr 27 06:54:52.308507 2026] [:error] [pid 22751:tid 22772] [client 185.192.70.109:62283] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/"] [unique_id "ae6XvCc0tCpVyVdFok_iWgAAANI"]
[Mon Apr 27 06:54:53.120729 2026] [:error] [pid 22645:tid 22659] [client 185.192.70.127:23647] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "ae6XvX-Pq2r302zQbMbBLAAAAAQ"]
[Mon Apr 27 06:54:53.936142 2026] [:error] [pid 22645:tid 22657] [client 185.192.70.124:55423] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin.php"] [unique_id "ae6XvX-Pq2r302zQbMbBLQAAAAI"]
[Mon Apr 27 06:54:54.749756 2026] [:error] [pid 22751:tid 22754] [client 185.192.70.115:20655] [client 185.192.70.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/"] [unique_id "ae6Xvic0tCpVyVdFok_iXwAAAME"]
[Mon Apr 27 06:54:55.565971 2026] [:error] [pid 22647:tid 22714] [client 185.192.70.131:56111] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/components/"] [unique_id "ae6Xv2jfVULTjnk5SzO-kwAAAIQ"]
[Mon Apr 27 06:54:56.382072 2026] [:error] [pid 20603:tid 20628] [client 185.192.70.117:40171] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/images/"] [unique_id "ae6XwA_k682XZv20MXyaRAAAARQ"]
[Mon Apr 27 06:54:57.197547 2026] [:error] [pid 20603:tid 20621] [client 185.192.70.125:21281] [client 185.192.70.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "ae6XwQ_k682XZv20MXyaSAAAAQ0"]
[Mon Apr 27 06:54:58.008481 2026] [:error] [pid 22647:tid 22714] [client 185.192.70.128:41949] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/archives/"] [unique_id "ae6XwmjfVULTjnk5SzO-ngAAAIQ"]
[Mon Apr 27 06:54:58.821265 2026] [:error] [pid 22751:tid 22777] [client 185.192.70.116:63903] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "ae6Xwic0tCpVyVdFok_ibQAAANc"]
[Mon Apr 27 06:54:59.638524 2026] [:error] [pid 22751:tid 22759] [client 185.192.70.102:43011] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/php-compat/"] [unique_id "ae6Xwyc0tCpVyVdFok_idAAAAMU"]
[Mon Apr 27 06:55:00.455365 2026] [:error] [pid 22646:tid 22694] [client 185.192.70.5:48155] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/"] [unique_id "ae6XxIk_HyZhTP6AYaesLwAAAEs"]
[Mon Apr 27 06:55:01.272476 2026] [:error] [pid 20603:tid 20625] [client 185.192.70.132:25417] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae6XxQ_k682XZv20MXyaVwAAARE"]
[Mon Apr 27 06:55:02.089808 2026] [:error] [pid 22646:tid 22684] [client 185.192.70.118:22263] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "ae6Xxok_HyZhTP6AYaesNQAAAEE"]
[Mon Apr 27 06:55:02.908290 2026] [:error] [pid 22647:tid 22732] [client 185.192.70.112:22515] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "ae6XxmjfVULTjnk5SzO-owAAAJY"]
[Mon Apr 27 06:55:03.718986 2026] [:error] [pid 22646:tid 22701] [client 185.192.70.5:53277] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/modern/test2.php"] [unique_id "ae6Xx4k_HyZhTP6AYaesOAAAAFI"]
[Mon Apr 27 06:55:04.532505 2026] [:error] [pid 20603:tid 20628] [client 185.192.70.114:57021] [client 185.192.70.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "ae6XyA_k682XZv20MXyaXgAAARQ"]
[Mon Apr 27 06:55:05.345815 2026] [:error] [pid 20603:tid 20615] [client 185.192.70.116:30171] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-file.php"] [unique_id "ae6XyQ_k682XZv20MXyaYwAAAQc"]
[Mon Apr 27 06:55:06.160496 2026] [:error] [pid 20603:tid 20608] [client 185.192.70.122:42171] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/"] [unique_id "ae6Xyg_k682XZv20MXyaZwAAAQA"]
[Mon Apr 27 06:55:06.973060 2026] [:error] [pid 22646:tid 22697] [client 185.192.70.124:61353] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "ae6Xyok_HyZhTP6AYaesQAAAAE4"]
[Mon Apr 27 06:55:07.785149 2026] [:error] [pid 20603:tid 20613] [client 185.192.70.122:33211] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/light/"] [unique_id "ae6Xyw_k682XZv20MXyacgAAAQU"]
[Mon Apr 27 06:55:08.603819 2026] [:error] [pid 22645:tid 22660] [client 185.192.70.118:63321] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/about.php"] [unique_id "ae6XzH-Pq2r302zQbMbBQQAAAAU"]
[Mon Apr 27 06:55:09.417465 2026] [:error] [pid 22751:tid 22770] [client 185.192.70.102:25623] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/plugin/"] [unique_id "ae6XzSc0tCpVyVdFok_iiwAAANA"]
[Mon Apr 27 06:55:10.234070 2026] [:error] [pid 20603:tid 20619] [client 185.192.70.133:40963] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "ae6Xzg_k682XZv20MXyaeAAAAQs"]
[Mon Apr 27 06:55:11.049715 2026] [:error] [pid 22751:tid 22776] [client 185.192.70.110:57881] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/"] [unique_id "ae6Xzyc0tCpVyVdFok_ijwAAANY"]
[Mon Apr 27 06:55:11.863969 2026] [:error] [pid 22751:tid 22769] [client 185.192.70.104:36371] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ae6Xzyc0tCpVyVdFok_ikQAAAM8"]
[Mon Apr 27 06:55:12.676027 2026] [:error] [pid 20603:tid 20623] [client 185.192.70.111:57289] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "ae6X0A_k682XZv20MXyafwAAAQ8"]
[Mon Apr 27 06:55:13.491139 2026] [:error] [pid 22647:tid 22718] [client 185.192.70.115:26179] [client 185.192.70.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "ae6X0WjfVULTjnk5SzO-wQAAAIg"]
[Mon Apr 27 06:55:14.308943 2026] [:error] [pid 22751:tid 22772] [client 185.192.70.125:35239] [client 185.192.70.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "ae6X0ic0tCpVyVdFok_imQAAANI"]
[Mon Apr 27 06:55:15.125468 2026] [:error] [pid 22646:tid 22700] [client 185.192.70.110:54827] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "ae6X04k_HyZhTP6AYaesTQAAAFE"]
[Mon Apr 27 06:55:15.943032 2026] [:error] [pid 22647:tid 22715] [client 185.192.70.104:50141] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/"] [unique_id "ae6X02jfVULTjnk5SzO-xgAAAIU"]
[Mon Apr 27 06:55:16.755806 2026] [:error] [pid 22751:tid 22760] [client 185.192.70.119:41785] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/config.php"] [unique_id "ae6X1Cc0tCpVyVdFok_inQAAAMY"]
[Mon Apr 27 06:55:17.572747 2026] [:error] [pid 22647:tid 22710] [client 185.192.70.110:52581] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/header.php"] [unique_id "ae6X1WjfVULTjnk5SzO-ygAAAIA"]
[Mon Apr 27 06:55:18.387864 2026] [:error] [pid 22645:tid 22677] [client 185.192.70.103:55153] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "ae6X1n-Pq2r302zQbMbBSAAAABY"]
[Mon Apr 27 06:55:19.204406 2026] [:error] [pid 22645:tid 22673] [client 185.192.70.102:40071] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "ae6X13-Pq2r302zQbMbBTwAAABI"]
[Mon Apr 27 06:55:20.018938 2026] [:error] [pid 22645:tid 22666] [client 185.192.70.110:22027] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2024/"] [unique_id "ae6X2H-Pq2r302zQbMbBVAAAAAs"]
[Mon Apr 27 06:55:20.837836 2026] [:error] [pid 22645:tid 22679] [client 185.192.70.105:48529] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/Core/"] [unique_id "ae6X2H-Pq2r302zQbMbBWgAAABg"]
[Mon Apr 27 06:55:21.654620 2026] [:error] [pid 20603:tid 20624] [client 185.192.70.117:57757] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/"] [unique_id "ae6X2Q_k682XZv20MXyakgAAARA"]
[Mon Apr 27 06:55:22.470730 2026] [:error] [pid 22751:tid 22761] [client 185.192.70.102:47287] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/"] [unique_id "ae6X2ic0tCpVyVdFok_ioAAAAMc"]
[Mon Apr 27 06:55:23.284919 2026] [:error] [pid 22645:tid 22660] [client 185.192.70.106:41623] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "ae6X23-Pq2r302zQbMbBXQAAAAU"]
[Mon Apr 27 06:55:24.102399 2026] [:error] [pid 22751:tid 22768] [client 185.192.70.127:44513] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "ae6X3Cc0tCpVyVdFok_ipAAAAM4"]
[Mon Apr 27 06:55:24.916536 2026] [:error] [pid 22646:tid 22695] [client 185.192.70.125:36273] [client 185.192.70.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "ae6X3Ik_HyZhTP6AYaesaQAAAEw"]
[Mon Apr 27 06:55:25.728692 2026] [:error] [pid 20603:tid 20609] [client 185.192.70.119:30083] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/"] [unique_id "ae6X3Q_k682XZv20MXyamwAAAQE"]
[Mon Apr 27 06:55:26.545134 2026] [:error] [pid 20603:tid 20613] [client 185.192.70.132:32733] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "ae6X3g_k682XZv20MXyapQAAAQU"]
[Mon Apr 27 06:55:27.361032 2026] [:error] [pid 22647:tid 22715] [client 185.192.70.134:34961] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "ae6X32jfVULTjnk5SzO-2wAAAIU"]
[Mon Apr 27 06:55:28.177824 2026] [:error] [pid 22751:tid 22774] [client 185.192.70.126:34645] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/"] [unique_id "ae6X4Cc0tCpVyVdFok_ipwAAANQ"]
[Mon Apr 27 06:55:28.995415 2026] [:error] [pid 20603:tid 20611] [client 185.192.70.127:47637] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wordpress/wp-admin/maint/"] [unique_id "ae6X4A_k682XZv20MXyatQAAAQM"]
[Mon Apr 27 06:55:29.810507 2026] [:error] [pid 20603:tid 20613] [client 185.192.70.110:27861] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/themes.php"] [unique_id "ae6X4Q_k682XZv20MXyavgAAAQU"]
[Mon Apr 27 06:55:30.624996 2026] [:error] [pid 22647:tid 22732] [client 185.192.70.111:49837] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "ae6X4mjfVULTjnk5SzO-5QAAAJY"]
[Mon Apr 27 06:55:31.437970 2026] [:error] [pid 20603:tid 20623] [client 185.192.70.110:27057] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "ae6X4w_k682XZv20MXyawwAAAQ8"]
[Mon Apr 27 06:55:32.255529 2026] [:error] [pid 20603:tid 20611] [client 185.192.70.124:39693] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/"] [unique_id "ae6X5A_k682XZv20MXyayQAAAQM"]
[Mon Apr 27 06:55:33.075808 2026] [:error] [pid 20603:tid 20623] [client 185.192.70.134:39589] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wa/"] [unique_id "ae6X5Q_k682XZv20MXya0QAAAQ8"]
[Mon Apr 27 06:55:33.891729 2026] [:error] [pid 22647:tid 22728] [client 185.192.70.133:22097] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/"] [unique_id "ae6X5WjfVULTjnk5SzO-_gAAAJI"]
[Mon Apr 27 06:55:34.707889 2026] [:error] [pid 20603:tid 20631] [client 185.192.70.102:21331] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/404.php"] [unique_id "ae6X5g_k682XZv20MXya3wAAARc"]
[Mon Apr 27 06:55:35.526040 2026] [:error] [pid 20603:tid 20619] [client 185.192.70.122:20853] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "ae6X5w_k682XZv20MXya6gAAAQs"]
[Mon Apr 27 06:55:36.344501 2026] [:error] [pid 22645:tid 22672] [client 185.192.70.118:28095] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/buy.php"] [unique_id "ae6X6H-Pq2r302zQbMbBaAAAABE"]
[Mon Apr 27 06:55:37.160746 2026] [:error] [pid 22647:tid 22717] [client 185.192.70.111:35437] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "ae6X6WjfVULTjnk5SzO_EQAAAIc"]
[Mon Apr 27 06:55:37.974348 2026] [:error] [pid 22751:tid 22771] [client 185.192.70.131:55355] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "ae6X6Sc0tCpVyVdFok_iuQAAANE"]
[Mon Apr 27 06:55:38.787309 2026] [:error] [pid 20603:tid 20616] [client 185.192.70.127:30205] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "ae6X6g_k682XZv20MXya_wAAAQg"]
[Mon Apr 27 06:55:39.600404 2026] [:error] [pid 22647:tid 22730] [client 185.192.70.124:63485] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ae6X62jfVULTjnk5SzO_HgAAAJQ"]
[Mon Apr 27 06:55:40.415291 2026] [:error] [pid 20603:tid 20611] [client 185.192.70.109:47955] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "ae6X7A_k682XZv20MXybCgAAAQM"]
[Mon Apr 27 06:55:41.230026 2026] [:error] [pid 20603:tid 20629] [client 185.192.70.107:37611] [client 185.192.70.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "ae6X7Q_k682XZv20MXybFQAAARU"]
[Mon Apr 27 06:55:42.048161 2026] [:error] [pid 22647:tid 22723] [client 185.192.70.113:22345] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "ae6X7mjfVULTjnk5SzO_KAAAAI0"]
[Mon Apr 27 06:55:42.862780 2026] [:error] [pid 22645:tid 22659] [client 185.192.70.127:27277] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/"] [unique_id "ae6X7n-Pq2r302zQbMbBcAAAAAQ"]
[Mon Apr 27 06:55:43.680140 2026] [:error] [pid 22751:tid 22764] [client 185.192.70.5:46419] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "ae6X7yc0tCpVyVdFok_ixAAAAMo"]
[Mon Apr 27 06:55:44.499247 2026] [:error] [pid 20603:tid 20622] [client 185.192.70.118:41385] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "ae6X8A_k682XZv20MXybJwAAAQ4"]
[Mon Apr 27 06:55:45.320167 2026] [:error] [pid 22751:tid 22776] [client 185.192.70.122:62039] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/panel.php"] [unique_id "ae6X8Sc0tCpVyVdFok_ixQAAANY"]
[Mon Apr 27 06:55:46.138731 2026] [:error] [pid 22751:tid 22757] [client 185.192.70.123:64671] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/"] [unique_id "ae6X8ic0tCpVyVdFok_iygAAAMM"]
[Mon Apr 27 06:55:46.953504 2026] [:error] [pid 20603:tid 20609] [client 185.192.70.108:39623] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/root.php"] [unique_id "ae6X8g_k682XZv20MXybOQAAAQE"]
[Mon Apr 27 06:55:49.356724 2026] [:error] [pid 22645:tid 22660] [client 185.192.70.107:54671] [client 185.192.70.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/development/"] [unique_id "ae6X9X-Pq2r302zQbMbBfAAAAAU"]
[Mon Apr 27 06:55:50.175334 2026] [:error] [pid 22751:tid 22776] [client 185.192.70.103:56543] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "ae6X9ic0tCpVyVdFok_i4QAAANY"]
[Mon Apr 27 06:55:50.987432 2026] [:error] [pid 22645:tid 22665] [client 185.192.70.132:65229] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "ae6X9n-Pq2r302zQbMbBgAAAAAo"]
[Mon Apr 27 06:55:51.800991 2026] [:error] [pid 22751:tid 22766] [client 185.192.70.123:38265] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/function.php"] [unique_id "ae6X9yc0tCpVyVdFok_i6QAAAMw"]
[Mon Apr 27 06:55:52.616826 2026] [:error] [pid 22647:tid 22724] [client 185.192.70.133:37885] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/"] [unique_id "ae6X-GjfVULTjnk5SzO_QQAAAI4"]
[Mon Apr 27 06:55:53.432875 2026] [:error] [pid 22645:tid 22662] [client 185.192.70.106:47479] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "ae6X-X-Pq2r302zQbMbBhwAAAAc"]
[Mon Apr 27 06:55:54.244902 2026] [:error] [pid 22647:tid 22710] [client 185.192.70.105:30597] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comments-pagination-numbers/"] [unique_id "ae6X-mjfVULTjnk5SzO_SAAAAIA"]
[Mon Apr 27 06:55:55.068986 2026] [:error] [pid 20603:tid 20624] [client 185.192.70.127:43451] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "ae6X-w_k682XZv20MXybVgAAARA"]
[Mon Apr 27 06:55:55.881602 2026] [:error] [pid 20603:tid 20628] [client 185.192.70.108:44139] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/includes/"] [unique_id "ae6X-w_k682XZv20MXybWQAAARQ"]
[Mon Apr 27 06:55:56.697737 2026] [:error] [pid 22751:tid 22766] [client 185.192.70.127:31583] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/themes/"] [unique_id "ae6X_Cc0tCpVyVdFok_jAAAAAMw"]
[Mon Apr 27 06:55:57.511597 2026] [:error] [pid 22647:tid 22724] [client 185.192.70.116:65323] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/footnotes/"] [unique_id "ae6X_WjfVULTjnk5SzO_UAAAAI4"]
[Mon Apr 27 06:55:58.327761 2026] [:error] [pid 20603:tid 20615] [client 185.192.70.116:33953] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "ae6X_g_k682XZv20MXybZQAAAQc"]
[Mon Apr 27 06:55:59.144415 2026] [:error] [pid 20603:tid 20626] [client 185.192.70.112:26799] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "ae6X_w_k682XZv20MXybbwAAARI"]
[Mon Apr 27 06:55:59.955542 2026] [:error] [pid 22751:tid 22757] [client 185.192.70.131:51287] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "ae6X_yc0tCpVyVdFok_jCwAAAMM"]
[Mon Apr 27 06:56:00.765781 2026] [:error] [pid 22647:tid 22717] [client 185.192.70.126:50843] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/upload.php"] [unique_id "ae6YAGjfVULTjnk5SzO_VAAAAIc"]
[Mon Apr 27 06:56:01.579800 2026] [:error] [pid 22751:tid 22763] [client 185.192.70.123:63335] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-domain.php"] [unique_id "ae6YASc0tCpVyVdFok_jFwAAAMk"]
[Mon Apr 27 06:56:02.394153 2026] [:error] [pid 22646:tid 22684] [client 185.192.70.113:35341] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/radio.php"] [unique_id "ae6YAok_HyZhTP6AYaesmgAAAEE"]
[Mon Apr 27 06:56:03.210310 2026] [:error] [pid 22645:tid 22673] [client 185.192.70.117:35389] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/rip.php"] [unique_id "ae6YA3-Pq2r302zQbMbBlgAAABI"]
[Mon Apr 27 06:56:04.021062 2026] [:error] [pid 22647:tid 22716] [client 185.192.70.128:54705] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/fukasawa/inc/classes/403x.php"] [unique_id "ae6YBGjfVULTjnk5SzO_WwAAAIY"]
[Mon Apr 27 06:56:04.836428 2026] [:error] [pid 20603:tid 20616] [client 185.192.70.103:33851] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/options.php"] [unique_id "ae6YBA_k682XZv20MXybjgAAAQg"]
[Mon Apr 27 06:56:05.642783 2026] [:error] [pid 20603:tid 20632] [client 178.239.198.138:21467] [client 178.239.198.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/config.php"] [unique_id "ae6YBQ_k682XZv20MXybkQAAARg"]
[Mon Apr 27 06:56:06.452763 2026] [:error] [pid 20603:tid 20617] [client 185.192.70.105:58359] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/Content/Type/"] [unique_id "ae6YBg_k682XZv20MXyblgAAAQk"]
[Mon Apr 27 06:56:07.269120 2026] [:error] [pid 20603:tid 20613] [client 185.192.70.124:38361] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "ae6YBw_k682XZv20MXybnQAAAQU"]
[Mon Apr 27 06:56:08.082663 2026] [:error] [pid 22751:tid 22771] [client 185.192.70.108:59145] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/freeform/"] [unique_id "ae6YCCc0tCpVyVdFok_jKgAAANE"]
[Mon Apr 27 06:56:08.899672 2026] [:error] [pid 20603:tid 20620] [client 185.192.70.117:49357] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "ae6YCA_k682XZv20MXybpgAAAQw"]
[Mon Apr 27 06:56:09.719232 2026] [:error] [pid 20603:tid 20608] [client 185.192.70.128:26291] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "ae6YCQ_k682XZv20MXybqwAAAQA"]
[Mon Apr 27 06:56:10.536996 2026] [:error] [pid 22647:tid 22733] [client 185.192.70.110:42145] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "ae6YCmjfVULTjnk5SzO_ZwAAAJc"]
[Mon Apr 27 06:56:11.358472 2026] [:error] [pid 20603:tid 20625] [client 185.192.70.121:35771] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/"] [unique_id "ae6YCw_k682XZv20MXybsAAAARE"]
[Mon Apr 27 06:56:12.174768 2026] [:error] [pid 22645:tid 22675] [client 185.192.70.128:40049] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae6YDH-Pq2r302zQbMbBowAAABQ"]
[Mon Apr 27 06:56:12.990918 2026] [:error] [pid 22751:tid 22753] [client 185.192.70.119:48781] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "ae6YDCc0tCpVyVdFok_jOgAAAMA"]
[Mon Apr 27 06:56:13.805120 2026] [:error] [pid 22645:tid 22665] [client 185.192.70.113:55181] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/"] [unique_id "ae6YDX-Pq2r302zQbMbBrQAAAAo"]
[Mon Apr 27 06:56:14.618800 2026] [:error] [pid 20603:tid 20614] [client 185.192.70.124:49071] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "ae6YDg_k682XZv20MXybuwAAAQY"]
[Mon Apr 27 06:56:15.431157 2026] [:error] [pid 22751:tid 22773] [client 185.192.70.125:59183] [client 185.192.70.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/"] [unique_id "ae6YDyc0tCpVyVdFok_jQgAAANM"]
[Mon Apr 27 06:56:16.246898 2026] [:error] [pid 22646:tid 22692] [client 185.192.70.104:36381] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/worksec.php"] [unique_id "ae6YEIk_HyZhTP6AYaespQAAAEk"]
[Mon Apr 27 06:56:17.059950 2026] [:error] [pid 20603:tid 20612] [client 185.192.70.103:24077] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/packed.php"] [unique_id "ae6YEQ_k682XZv20MXybwAAAAQQ"]
[Mon Apr 27 06:56:17.876009 2026] [:error] [pid 22645:tid 22673] [client 185.192.70.119:37545] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/cache/"] [unique_id "ae6YEX-Pq2r302zQbMbBuAAAABI"]
[Mon Apr 27 06:56:18.697422 2026] [:error] [pid 22646:tid 22695] [client 185.192.70.118:36617] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "ae6YEok_HyZhTP6AYaesrQAAAEw"]
[Mon Apr 27 06:56:19.513745 2026] [:error] [pid 22647:tid 22715] [client 185.192.70.104:20507] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin-header.php"] [unique_id "ae6YE2jfVULTjnk5SzO_fgAAAIU"]
[Mon Apr 27 06:56:20.326626 2026] [:error] [pid 20603:tid 20626] [client 185.192.70.131:40713] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "ae6YFA_k682XZv20MXyb0QAAARI"]
[Mon Apr 27 06:56:21.140005 2026] [:error] [pid 20603:tid 20632] [client 185.192.70.127:39501] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "ae6YFQ_k682XZv20MXyb1AAAARg"]
[Mon Apr 27 06:56:21.953754 2026] [:error] [pid 22645:tid 22668] [client 185.192.70.105:64999] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/"] [unique_id "ae6YFX-Pq2r302zQbMbBxgAAAA0"]
[Mon Apr 27 06:56:22.772458 2026] [:error] [pid 22646:tid 22695] [client 185.192.70.131:33231] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah/function.php"] [unique_id "ae6YFok_HyZhTP6AYaestQAAAEw"]
[Mon Apr 27 06:56:23.588711 2026] [:error] [pid 22646:tid 22705] [client 185.192.70.109:44969] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "ae6YF4k_HyZhTP6AYaestwAAAFY"]
[Mon Apr 27 06:56:24.405807 2026] [:error] [pid 22646:tid 22696] [client 185.192.70.108:42323] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/config.php"] [unique_id "ae6YGIk_HyZhTP6AYaesuwAAAE0"]
[Mon Apr 27 06:56:25.220833 2026] [:error] [pid 20603:tid 20630] [client 185.192.70.112:22989] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/chosen.php"] [unique_id "ae6YGQ_k682XZv20MXyb3AAAARY"]
[Mon Apr 27 06:56:26.032363 2026] [:error] [pid 22646:tid 22693] [client 185.192.70.111:23133] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "ae6YGok_HyZhTP6AYaesxAAAAEo"]
[Mon Apr 27 06:56:26.849780 2026] [:error] [pid 22645:tid 22678] [client 185.192.70.126:37629] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/images/"] [unique_id "ae6YGn-Pq2r302zQbMbB1wAAABc"]
[Mon Apr 27 06:56:27.666908 2026] [:error] [pid 20603:tid 20629] [client 185.192.70.106:31551] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "ae6YGw_k682XZv20MXyb5AAAARU"]
[Mon Apr 27 06:56:28.472050 2026] [:error] [pid 20603:tid 20621] [client 178.239.198.202:52629] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "ae6YHA_k682XZv20MXyb6QAAAQ0"]
[Mon Apr 27 06:56:29.276309 2026] [:error] [pid 22646:tid 22695] [client 185.192.70.121:30393] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/maint/"] [unique_id "ae6YHYk_HyZhTP6AYaes1gAAAEw"]
[Mon Apr 27 06:56:30.096575 2026] [:error] [pid 20603:tid 20622] [client 185.192.70.105:33313] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/"] [unique_id "ae6YHg_k682XZv20MXyb7gAAAQ4"]
[Mon Apr 27 06:56:30.906816 2026] [:error] [pid 20603:tid 20613] [client 185.192.70.6:49455] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "ae6YHg_k682XZv20MXyb8QAAAQU"]
[Mon Apr 27 06:56:31.719276 2026] [:error] [pid 20603:tid 20629] [client 185.192.70.6:45633] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/separator/"] [unique_id "ae6YHw_k682XZv20MXyb-QAAARU"]
[Mon Apr 27 06:56:32.530232 2026] [:error] [pid 22751:tid 22778] [client 185.192.70.135:31469] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "ae6YICc0tCpVyVdFok_jWAAAANg"]
[Mon Apr 27 06:56:33.347797 2026] [:error] [pid 20603:tid 20628] [client 185.192.70.125:55819] [client 185.192.70.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae6YIQ_k682XZv20MXycAgAAARQ"]
[Mon Apr 27 06:56:34.162624 2026] [:error] [pid 22645:tid 22679] [client 185.192.70.127:30763] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content.php"] [unique_id "ae6YIn-Pq2r302zQbMbB6QAAABg"]
[Mon Apr 27 06:56:34.978439 2026] [:error] [pid 22751:tid 22758] [client 185.192.70.105:59481] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "ae6YIic0tCpVyVdFok_jZQAAAMQ"]
[Mon Apr 27 06:56:35.794687 2026] [:error] [pid 22645:tid 22675] [client 185.192.70.124:48931] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/acme-challenge/"] [unique_id "ae6YI3-Pq2r302zQbMbB8AAAABQ"]
[Mon Apr 27 06:56:36.608786 2026] [:error] [pid 22751:tid 22766] [client 185.192.70.110:37549] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/shell.php"] [unique_id "ae6YJCc0tCpVyVdFok_jcgAAAMw"]
[Mon Apr 27 06:56:37.423768 2026] [:error] [pid 22645:tid 22670] [client 185.192.70.135:30749] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/image/"] [unique_id "ae6YJX-Pq2r302zQbMbB9AAAAA8"]
[Mon Apr 27 06:56:38.236697 2026] [:error] [pid 22645:tid 22678] [client 185.192.70.129:62387] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/files.php"] [unique_id "ae6YJn-Pq2r302zQbMbB_AAAABc"]
[Mon Apr 27 06:56:39.052137 2026] [:error] [pid 22751:tid 22765] [client 185.192.70.135:23181] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/video/"] [unique_id "ae6YJyc0tCpVyVdFok_jeQAAAMs"]
[Mon Apr 27 06:56:39.872675 2026] [:error] [pid 22751:tid 22759] [client 185.192.70.112:54071] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/"] [unique_id "ae6YJyc0tCpVyVdFok_jfgAAAMU"]
[Mon Apr 27 06:56:40.688824 2026] [:error] [pid 22645:tid 22667] [client 185.192.70.115:57393] [client 185.192.70.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "ae6YKH-Pq2r302zQbMbB_wAAAAw"]
[Mon Apr 27 06:56:41.507472 2026] [:error] [pid 22751:tid 22770] [client 185.192.70.132:53151] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-activate.php"] [unique_id "ae6YKSc0tCpVyVdFok_jiwAAANA"]
[Mon Apr 27 06:56:42.327043 2026] [:error] [pid 20603:tid 20620] [client 185.192.70.129:20445] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/chosen.php"] [unique_id "ae6YKg_k682XZv20MXycJQAAAQw"]
[Mon Apr 27 06:56:43.147734 2026] [:error] [pid 20603:tid 20615] [client 185.192.70.122:60231] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/backup.php"] [unique_id "ae6YKw_k682XZv20MXycKwAAAQc"]
[Mon Apr 27 06:56:43.965625 2026] [:error] [pid 20603:tid 20630] [client 185.192.70.126:26081] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/"] [unique_id "ae6YKw_k682XZv20MXycMwAAARY"]
[Mon Apr 27 06:56:44.784494 2026] [:error] [pid 22647:tid 22734] [client 185.192.70.129:44641] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/login.php"] [unique_id "ae6YLGjfVULTjnk5SzO_nwAAAJg"]
[Mon Apr 27 06:56:45.595317 2026] [:error] [pid 22646:tid 22705] [client 185.192.70.129:40725] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/assets/"] [unique_id "ae6YLYk_HyZhTP6AYaes6AAAAFY"]
[Mon Apr 27 06:56:46.406946 2026] [:error] [pid 20603:tid 20632] [client 185.192.70.127:35167] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ab.php"] [unique_id "ae6YLg_k682XZv20MXycOAAAARg"]
[Mon Apr 27 06:56:47.225463 2026] [:error] [pid 20603:tid 20623] [client 185.192.70.117:45283] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/login.php"] [unique_id "ae6YLw_k682XZv20MXycOwAAAQ8"]
[Mon Apr 27 06:56:48.041830 2026] [:error] [pid 20603:tid 20620] [client 185.192.70.111:39541] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "ae6YMA_k682XZv20MXycRgAAAQw"]
[Mon Apr 27 06:56:48.858962 2026] [:error] [pid 22751:tid 22777] [client 185.192.70.108:43315] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/"] [unique_id "ae6YMCc0tCpVyVdFok_jnAAAANc"]
[Mon Apr 27 06:56:49.672023 2026] [:error] [pid 22647:tid 22731] [client 185.192.70.117:21655] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/panel.php"] [unique_id "ae6YMWjfVULTjnk5SzO_qgAAAJU"]
[Mon Apr 27 06:56:50.484174 2026] [:error] [pid 22646:tid 22706] [client 185.192.70.122:50315] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/commands/"] [unique_id "ae6YMok_HyZhTP6AYaes8wAAAFc"]
[Mon Apr 27 06:56:51.301637 2026] [:error] [pid 22647:tid 22717] [client 185.192.70.5:32559] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "ae6YM2jfVULTjnk5SzO_rwAAAIc"]
[Mon Apr 27 06:56:52.119286 2026] [:error] [pid 22645:tid 22678] [client 185.192.70.117:64607] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "ae6YNH-Pq2r302zQbMbCEQAAABc"]
[Mon Apr 27 06:56:52.934151 2026] [:error] [pid 22751:tid 22762] [client 185.192.70.126:60375] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "ae6YNCc0tCpVyVdFok_jsAAAAMg"]
[Mon Apr 27 06:56:53.740941 2026] [:error] [pid 22645:tid 22664] [client 178.239.198.138:44541] [client 178.239.198.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/"] [unique_id "ae6YNX-Pq2r302zQbMbCGAAAAAk"]
[Mon Apr 27 06:56:54.553227 2026] [:error] [pid 20603:tid 20614] [client 185.192.70.118:43339] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/"] [unique_id "ae6YNg_k682XZv20MXycUgAAAQY"]
[Mon Apr 27 06:56:55.370135 2026] [:error] [pid 20603:tid 20615] [client 185.192.70.133:41093] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/"] [unique_id "ae6YNw_k682XZv20MXycXAAAAQc"]
[Mon Apr 27 06:56:56.185089 2026] [:error] [pid 22751:tid 22772] [client 185.192.70.108:22561] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/chosen.php"] [unique_id "ae6YOCc0tCpVyVdFok_jwgAAANI"]
[Mon Apr 27 06:56:57.000805 2026] [:error] [pid 22645:tid 22659] [client 185.192.70.129:27245] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "ae6YOH-Pq2r302zQbMbCHwAAAAQ"]
[Mon Apr 27 06:56:57.816892 2026] [:error] [pid 22751:tid 22762] [client 185.192.70.122:22891] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentynineteen/sass/site/"] [unique_id "ae6YOSc0tCpVyVdFok_jywAAAMg"]
[Mon Apr 27 06:56:58.636199 2026] [:error] [pid 22646:tid 22689] [client 185.192.70.113:48207] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-config-backup.php"] [unique_id "ae6YOok_HyZhTP6AYaetBAAAAEY"]
[Mon Apr 27 06:56:59.451469 2026] [:error] [pid 22647:tid 22729] [client 185.192.70.121:26667] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "ae6YO2jfVULTjnk5SzO_twAAAJM"]
[Mon Apr 27 06:57:00.269489 2026] [:error] [pid 22751:tid 22753] [client 185.192.70.121:55397] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/about.php"] [unique_id "ae6YPCc0tCpVyVdFok_j1AAAAMA"]
[Mon Apr 27 06:57:01.081439 2026] [:error] [pid 22646:tid 22686] [client 178.239.198.138:62817] [client 178.239.198.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/widgets/"] [unique_id "ae6YPYk_HyZhTP6AYaetEAAAAEM"]
[Mon Apr 27 06:57:01.893145 2026] [:error] [pid 22647:tid 22720] [client 185.192.70.109:34323] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/000.php"] [unique_id "ae6YPWjfVULTjnk5SzO_vwAAAIo"]
[Mon Apr 27 06:57:02.708134 2026] [:error] [pid 22646:tid 22683] [client 185.192.70.121:38037] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/edit-wolf.php"] [unique_id "ae6YPok_HyZhTP6AYaetGQAAAEA"]
[Mon Apr 27 06:57:03.522150 2026] [:error] [pid 22751:tid 22759] [client 185.192.70.134:34363] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae6YPyc0tCpVyVdFok_j3wAAAMU"]
[Mon Apr 27 06:57:04.334996 2026] [:error] [pid 22646:tid 22685] [client 185.192.70.122:35279] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/system.php"] [unique_id "ae6YQIk_HyZhTP6AYaetHgAAAEI"]
[Mon Apr 27 06:57:05.149913 2026] [:error] [pid 22645:tid 22670] [client 185.192.70.110:28963] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ae6YQX-Pq2r302zQbMbCLgAAAA8"]
[Mon Apr 27 06:57:05.954726 2026] [:error] [pid 22645:tid 22660] [client 178.239.198.138:60489] [client 178.239.198.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/abcd.php"] [unique_id "ae6YQX-Pq2r302zQbMbCMAAAAAU"]
[Mon Apr 27 06:57:06.756957 2026] [:error] [pid 22647:tid 22716] [client 185.192.70.111:40987] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/adminfuns.php"] [unique_id "ae6YQmjfVULTjnk5SzO_2gAAAIY"]
[Mon Apr 27 06:57:07.569103 2026] [:error] [pid 22647:tid 22734] [client 185.192.70.108:30319] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "ae6YQ2jfVULTjnk5SzO_5QAAAJg"]
[Mon Apr 27 06:57:08.391890 2026] [:error] [pid 22751:tid 22763] [client 185.192.70.111:49215] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/files/"] [unique_id "ae6YRCc0tCpVyVdFok_j8AAAAMk"]
[Mon Apr 27 06:57:09.206907 2026] [:error] [pid 22646:tid 22707] [client 185.192.70.113:20105] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/beteng83/ws78.php"] [unique_id "ae6YRYk_HyZhTP6AYaetKAAAAFg"]
[Mon Apr 27 06:57:10.019618 2026] [:error] [pid 22751:tid 22767] [client 185.192.70.128:42005] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "ae6YRic0tCpVyVdFok_j9AAAAM0"]
[Mon Apr 27 06:57:10.836461 2026] [:error] [pid 22646:tid 22703] [client 185.192.70.104:57221] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/chosen.php"] [unique_id "ae6YRok_HyZhTP6AYaetLwAAAFQ"]
[Mon Apr 27 06:57:11.653670 2026] [:error] [pid 22645:tid 22676] [client 185.192.70.133:22787] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "ae6YR3-Pq2r302zQbMbCSwAAABU"]
[Mon Apr 27 06:57:12.470503 2026] [:error] [pid 22647:tid 22714] [client 185.192.70.118:32577] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comments-pagination-next/"] [unique_id "ae6YSGjfVULTjnk5SzPAXAAAAIQ"]
[Mon Apr 27 06:57:13.292674 2026] [:error] [pid 22645:tid 22655] [client 185.192.70.110:22937] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/html-api/"] [unique_id "ae6YSX-Pq2r302zQbMbCUwAAAAA"]
[Mon Apr 27 06:57:14.114539 2026] [:error] [pid 20603:tid 20630] [client 185.192.70.122:31479] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/class.php"] [unique_id "ae6YSg_k682XZv20MXychwAAARY"]
[Mon Apr 27 06:57:14.927181 2026] [:error] [pid 20603:tid 20610] [client 185.192.70.103:27377] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/colors/"] [unique_id "ae6YSg_k682XZv20MXycjQAAAQI"]
[Mon Apr 27 06:57:15.740729 2026] [:error] [pid 20603:tid 20629] [client 185.192.70.109:32769] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/"] [unique_id "ae6YSw_k682XZv20MXycmQAAARU"]
[Mon Apr 27 06:57:16.558446 2026] [:error] [pid 20603:tid 20627] [client 185.192.70.131:63305] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "ae6YTA_k682XZv20MXycogAAARM"]
[Mon Apr 27 06:57:17.370943 2026] [:error] [pid 22645:tid 22659] [client 185.192.70.128:50185] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/module.php"] [unique_id "ae6YTX-Pq2r302zQbMbCXQAAAAQ"]
[Mon Apr 27 06:57:18.185769 2026] [:error] [pid 22751:tid 22766] [client 185.192.70.119:36079] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/user.php"] [unique_id "ae6YTic0tCpVyVdFok_kHAAAAMw"]
[Mon Apr 27 06:57:18.999501 2026] [:error] [pid 22646:tid 22688] [client 185.192.70.112:39621] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/about.php"] [unique_id "ae6YTok_HyZhTP6AYaetZAAAAEU"]
[Mon Apr 27 06:57:19.816679 2026] [:error] [pid 22645:tid 22664] [client 185.192.70.124:52267] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/widget-group/"] [unique_id "ae6YT3-Pq2r302zQbMbCYgAAAAk"]
[Mon Apr 27 06:57:20.636672 2026] [:error] [pid 20603:tid 20610] [client 185.192.70.132:60005] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/config.php"] [unique_id "ae6YUA_k682XZv20MXycvwAAAQI"]
[Mon Apr 27 06:57:21.451467 2026] [:error] [pid 20603:tid 20620] [client 185.192.70.129:42073] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2025/"] [unique_id "ae6YUQ_k682XZv20MXycyAAAAQw"]
[Mon Apr 27 06:57:22.266624 2026] [:error] [pid 22647:tid 22710] [client 185.192.70.116:40343] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "ae6YUmjfVULTjnk5SzPAagAAAIA"]
[Mon Apr 27 06:57:23.078825 2026] [:error] [pid 20603:tid 20610] [client 185.192.70.110:60215] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-content/"] [unique_id "ae6YUw_k682XZv20MXyc2gAAAQI"]
[Mon Apr 27 06:57:23.891354 2026] [:error] [pid 20603:tid 20625] [client 185.192.70.106:30041] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "ae6YUw_k682XZv20MXyc4gAAARE"]
[Mon Apr 27 06:57:24.705812 2026] [:error] [pid 22751:tid 22763] [client 185.192.70.110:29835] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/chosen.php"] [unique_id "ae6YVCc0tCpVyVdFok_kOgAAAMk"]
[Mon Apr 27 06:57:25.519565 2026] [:error] [pid 22646:tid 22693] [client 185.192.70.110:45325] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "ae6YVYk_HyZhTP6AYaetbgAAAEo"]
[Mon Apr 27 06:57:26.332569 2026] [:error] [pid 22647:tid 22711] [client 185.192.70.131:34009] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/"] [unique_id "ae6YVmjfVULTjnk5SzPAcQAAAIE"]
[Mon Apr 27 06:57:27.146962 2026] [:error] [pid 22751:tid 22768] [client 185.192.70.122:60955] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "ae6YVyc0tCpVyVdFok_kTgAAAM4"]
[Mon Apr 27 06:57:27.963090 2026] [:error] [pid 22646:tid 22694] [client 185.192.70.118:57343] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "ae6YV4k_HyZhTP6AYaetcQAAAEs"]
[Mon Apr 27 06:57:28.781655 2026] [:error] [pid 22751:tid 22773] [client 185.192.70.117:47333] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "ae6YWCc0tCpVyVdFok_kWQAAANM"]
[Mon Apr 27 06:57:29.598025 2026] [:error] [pid 22646:tid 22698] [client 185.192.70.114:52655] [client 185.192.70.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/legacy-widget/"] [unique_id "ae6YWYk_HyZhTP6AYaetdgAAAE8"]
[Mon Apr 27 06:57:30.411776 2026] [:error] [pid 20603:tid 20620] [client 185.192.70.103:52155] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/lock360.php"] [unique_id "ae6YWg_k682XZv20MXydMgAAAQw"]
[Mon Apr 27 06:57:31.225018 2026] [:error] [pid 22751:tid 22769] [client 185.192.70.111:62019] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/"] [unique_id "ae6YWyc0tCpVyVdFok_kXgAAAM8"]
[Mon Apr 27 06:57:32.035871 2026] [:error] [pid 22646:tid 22688] [client 178.239.198.138:35283] [client 178.239.198.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/navigation-submenu/"] [unique_id "ae6YXIk_HyZhTP6AYaetfAAAAEU"]
[Mon Apr 27 06:57:32.841643 2026] [:error] [pid 20603:tid 20625] [client 185.192.70.135:57145] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/file.php"] [unique_id "ae6YXA_k682XZv20MXydUgAAARE"]
[Mon Apr 27 06:57:33.656079 2026] [:error] [pid 22646:tid 22683] [client 185.192.70.118:21101] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/users.php"] [unique_id "ae6YXYk_HyZhTP6AYaetgAAAAEA"]
[Mon Apr 27 06:57:34.471143 2026] [:error] [pid 22647:tid 22722] [client 185.192.70.134:37807] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ae6YXmjfVULTjnk5SzPAfwAAAIw"]
[Mon Apr 27 06:57:35.289483 2026] [:error] [pid 22647:tid 22717] [client 185.192.70.5:34339] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/222.php"] [unique_id "ae6YX2jfVULTjnk5SzPAgAAAAIc"]
[Mon Apr 27 06:57:36.104204 2026] [:error] [pid 22646:tid 22694] [client 185.192.70.132:23477] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "ae6YYIk_HyZhTP6AYaetiQAAAEs"]
[Mon Apr 27 06:57:36.923252 2026] [:error] [pid 20603:tid 20627] [client 185.192.70.134:32697] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "ae6YYA_k682XZv20MXyddQAAARM"]
[Mon Apr 27 06:57:37.744195 2026] [:error] [pid 20603:tid 20620] [client 185.192.70.105:59869] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/"] [unique_id "ae6YYQ_k682XZv20MXydgQAAAQw"]
[Mon Apr 27 06:57:38.563054 2026] [:error] [pid 22646:tid 22703] [client 185.192.70.119:45583] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/chosen.php"] [unique_id "ae6YYok_HyZhTP6AYaetkwAAAFQ"]
[Mon Apr 27 06:57:39.409244 2026] [:error] [pid 22646:tid 22692] [client 185.192.70.123:46723] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/network/"] [unique_id "ae6YY4k_HyZhTP6AYaetmAAAAEk"]
[Mon Apr 27 06:57:40.227666 2026] [:error] [pid 22647:tid 22711] [client 185.192.70.113:51179] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "ae6YZGjfVULTjnk5SzPAhwAAAIE"]
[Mon Apr 27 06:57:41.039586 2026] [:error] [pid 20603:tid 20625] [client 185.192.70.116:64553] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/"] [unique_id "ae6YZQ_k682XZv20MXydlAAAARE"]
[Mon Apr 27 06:57:41.844567 2026] [:error] [pid 22751:tid 22776] [client 178.239.198.202:63401] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/"] [unique_id "ae6YZSc0tCpVyVdFok_kmwAAANY"]
[Mon Apr 27 06:57:42.648662 2026] [:error] [pid 22751:tid 22758] [client 185.192.70.127:44271] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/woocommerce/includes/import/about.php"] [unique_id "ae6YZic0tCpVyVdFok_koQAAAMQ"]
[Mon Apr 27 06:57:43.458164 2026] [:error] [pid 22646:tid 22685] [client 185.192.70.127:45243] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/paragraph/"] [unique_id "ae6YZ4k_HyZhTP6AYaetpAAAAEI"]
[Mon Apr 27 06:57:44.270311 2026] [:error] [pid 22645:tid 22670] [client 185.192.70.108:42495] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-pagination/"] [unique_id "ae6YaH-Pq2r302zQbMbCkQAAAA8"]
[Mon Apr 27 06:57:45.083765 2026] [:error] [pid 22751:tid 22773] [client 185.192.70.115:38637] [client 185.192.70.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/crystal/"] [unique_id "ae6YaSc0tCpVyVdFok_krwAAANM"]
[Mon Apr 27 06:57:45.894010 2026] [:error] [pid 20603:tid 20630] [client 185.192.70.6:37309] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/mediaelement/"] [unique_id "ae6YaQ_k682XZv20MXydmQAAARY"]
[Mon Apr 27 06:57:46.712649 2026] [:error] [pid 20603:tid 20608] [client 185.192.70.108:64543] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "ae6Yag_k682XZv20MXydogAAAQA"]
[Mon Apr 27 06:57:47.527304 2026] [:error] [pid 20603:tid 20612] [client 185.192.70.106:28783] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/astra/assets/css/"] [unique_id "ae6Yaw_k682XZv20MXydrQAAAQQ"]
[Mon Apr 27 06:57:48.342808 2026] [:error] [pid 22645:tid 22666] [client 185.192.70.126:37515] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/222.php"] [unique_id "ae6YbH-Pq2r302zQbMbClwAAAAs"]
[Mon Apr 27 06:57:49.167692 2026] [:error] [pid 22751:tid 22771] [client 185.192.70.114:35495] [client 185.192.70.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/"] [unique_id "ae6YbSc0tCpVyVdFok_ksgAAANE"]
[Mon Apr 27 06:57:49.984517 2026] [:error] [pid 22647:tid 22723] [client 185.192.70.110:56035] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "ae6YbWjfVULTjnk5SzPApAAAAI0"]
[Mon Apr 27 06:57:50.798615 2026] [:error] [pid 20603:tid 20611] [client 185.192.70.132:38731] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "ae6Ybg_k682XZv20MXydvAAAAQM"]
[Mon Apr 27 06:57:51.615864 2026] [:error] [pid 22751:tid 22773] [client 185.192.70.129:29373] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/wp-conflg.php"] [unique_id "ae6Ybyc0tCpVyVdFok_kuAAAANM"]
[Mon Apr 27 06:57:52.429032 2026] [:error] [pid 22751:tid 22764] [client 185.192.70.109:54027] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/"] [unique_id "ae6YcCc0tCpVyVdFok_kvQAAAMo"]
[Mon Apr 27 06:57:53.247866 2026] [:error] [pid 22647:tid 22732] [client 185.192.70.123:23533] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/pattern/"] [unique_id "ae6YcWjfVULTjnk5SzPAqgAAAJY"]
[Mon Apr 27 06:57:54.064534 2026] [:error] [pid 22751:tid 22772] [client 185.192.70.110:30747] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-load.php"] [unique_id "ae6Ycic0tCpVyVdFok_kxgAAANI"]
[Mon Apr 27 06:57:54.877208 2026] [:error] [pid 22751:tid 22766] [client 185.192.70.133:23005] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/user-install.php"] [unique_id "ae6Ycic0tCpVyVdFok_kzQAAAMw"]
[Mon Apr 27 06:57:55.687043 2026] [:error] [pid 22645:tid 22657] [client 185.192.70.132:45113] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/table/"] [unique_id "ae6Yc3-Pq2r302zQbMbCoQAAAAI"]
[Mon Apr 27 06:57:56.501128 2026] [:error] [pid 22751:tid 22778] [client 185.192.70.128:38291] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/block-bindings/"] [unique_id "ae6YdCc0tCpVyVdFok_k2AAAANg"]
[Mon Apr 27 06:57:57.317702 2026] [:error] [pid 22645:tid 22669] [client 185.192.70.115:31225] [client 185.192.70.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-cache-sys/"] [unique_id "ae6YdX-Pq2r302zQbMbCrAAAAA4"]
[Mon Apr 27 06:57:58.132517 2026] [:error] [pid 22751:tid 22767] [client 185.192.70.133:61473] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist"] [unique_id "ae6Ydic0tCpVyVdFok_k4wAAAM0"]
[Mon Apr 27 06:57:58.947326 2026] [:error] [pid 22647:tid 22713] [client 185.192.70.123:63707] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comments-less.php"] [unique_id "ae6YdmjfVULTjnk5SzPAtAAAAIM"]
[Mon Apr 27 06:57:59.763562 2026] [:error] [pid 20603:tid 20621] [client 185.192.70.103:53809] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "ae6Ydw_k682XZv20MXydzwAAAQ0"]
[Mon Apr 27 06:58:00.580454 2026] [:error] [pid 22751:tid 22773] [client 185.192.70.131:45463] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/accordion/"] [unique_id "ae6YeCc0tCpVyVdFok_k6AAAANM"]
[Mon Apr 27 06:58:01.396841 2026] [:error] [pid 22751:tid 22771] [client 185.192.70.113:54595] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Nxploited/class-payment.php"] [unique_id "ae6YeSc0tCpVyVdFok_k6gAAANE"]
[Mon Apr 27 06:58:02.210946 2026] [:error] [pid 22645:tid 22670] [client 185.192.70.111:48779] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/home.php"] [unique_id "ae6Yen-Pq2r302zQbMbCvQAAAA8"]
[Mon Apr 27 06:58:03.028565 2026] [:error] [pid 20603:tid 20614] [client 185.192.70.135:55769] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/"] [unique_id "ae6Yew_k682XZv20MXyd3AAAAQY"]
[Mon Apr 27 06:58:03.849145 2026] [:error] [pid 22751:tid 22771] [client 185.192.70.129:43317] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/"] [unique_id "ae6Yeyc0tCpVyVdFok_k9QAAANE"]
[Mon Apr 27 06:58:04.666725 2026] [:error] [pid 22645:tid 22673] [client 185.192.70.108:54407] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "ae6YfH-Pq2r302zQbMbCywAAABI"]
[Mon Apr 27 06:58:05.486010 2026] [:error] [pid 20603:tid 20609] [client 185.192.70.103:29113] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-theme-json-resolver-sql.php"] [unique_id "ae6YfQ_k682XZv20MXyd4QAAAQE"]
[Mon Apr 27 06:58:06.302775 2026] [:error] [pid 20603:tid 20629] [client 185.192.70.116:39145] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "ae6Yfg_k682XZv20MXyd4wAAARU"]
[Mon Apr 27 06:58:07.117666 2026] [:error] [pid 22647:tid 22730] [client 185.192.70.119:23813] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/widgets/"] [unique_id "ae6Yf2jfVULTjnk5SzPAzAAAAJQ"]
[Mon Apr 27 06:58:07.938352 2026] [:error] [pid 22645:tid 22665] [client 185.192.70.113:43161] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/interactivity-api/"] [unique_id "ae6Yf3-Pq2r302zQbMbC2AAAAAo"]
[Mon Apr 27 06:58:08.758960 2026] [:error] [pid 20603:tid 20632] [client 185.192.70.118:30691] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/taxonomy-compiler.php"] [unique_id "ae6YgA_k682XZv20MXyd7wAAARg"]
[Mon Apr 27 06:58:09.578946 2026] [:error] [pid 22751:tid 22772] [client 185.192.70.108:55835] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/smilies/"] [unique_id "ae6YgSc0tCpVyVdFok_lAwAAANI"]
[Mon Apr 27 06:58:10.391185 2026] [:error] [pid 22645:tid 22679] [client 185.192.70.123:45737] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyone/assets/"] [unique_id "ae6Ygn-Pq2r302zQbMbC3QAAABg"]
[Mon Apr 27 06:58:11.208846 2026] [:error] [pid 22645:tid 22670] [client 185.192.70.112:37435] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/aboutc.php"] [unique_id "ae6Yg3-Pq2r302zQbMbC4wAAAA8"]
[Mon Apr 27 06:58:12.025193 2026] [:error] [pid 22751:tid 22753] [client 185.192.70.134:47471] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "ae6YhCc0tCpVyVdFok_lDwAAAMA"]
[Mon Apr 27 06:58:12.839645 2026] [:error] [pid 22647:tid 22720] [client 185.192.70.5:46243] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/Content/Type/Sniffer.plugin.php"] [unique_id "ae6YhGjfVULTjnk5SzPA5QAAAIo"]
[Mon Apr 27 06:58:13.658294 2026] [:error] [pid 22647:tid 22715] [client 185.192.70.118:63327] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/"] [unique_id "ae6YhWjfVULTjnk5SzPA6wAAAIU"]
[Mon Apr 27 06:58:14.481129 2026] [:error] [pid 20603:tid 20631] [client 185.192.70.119:56159] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/cgi-bin/config.php"] [unique_id "ae6Yhg_k682XZv20MXyd9AAAARc"]
[Mon Apr 27 06:58:15.299270 2026] [:error] [pid 22751:tid 22762] [client 185.192.70.133:60869] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/nbpmo.php"] [unique_id "ae6Yhyc0tCpVyVdFok_lJQAAAMg"]
[Mon Apr 27 06:58:16.119741 2026] [:error] [pid 22647:tid 22718] [client 185.192.70.119:52669] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/system.php"] [unique_id "ae6YiGjfVULTjnk5SzPBCgAAAIg"]
[Mon Apr 27 06:58:16.940208 2026] [:error] [pid 22646:tid 22705] [client 185.192.70.114:21357] [client 185.192.70.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/login.php"] [unique_id "ae6YiIk_HyZhTP6AYaet1wAAAFY"]
[Mon Apr 27 06:58:17.760167 2026] [:error] [pid 22646:tid 22685] [client 185.192.70.123:61691] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sc_1.php"] [unique_id "ae6YiYk_HyZhTP6AYaet3wAAAEI"]
[Mon Apr 27 06:58:18.573639 2026] [:error] [pid 22645:tid 22674] [client 185.192.70.111:51665] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/gk.php"] [unique_id "ae6Yin-Pq2r302zQbMbC8AAAABM"]
[Mon Apr 27 06:58:19.384428 2026] [:error] [pid 22751:tid 22768] [client 185.192.70.129:33109] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about/system_core.php"] [unique_id "ae6Yiyc0tCpVyVdFok_lMAAAAM4"]
[Mon Apr 27 06:58:20.189767 2026] [:error] [pid 20603:tid 20620] [client 178.239.198.202:48095] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/system_core.php"] [unique_id "ae6YjA_k682XZv20MXyeBgAAAQw"]
[Mon Apr 27 06:58:20.999567 2026] [:error] [pid 22646:tid 22697] [client 185.192.70.106:23659] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/system_core.php"] [unique_id "ae6YjIk_HyZhTP6AYaet5wAAAE4"]
[Mon Apr 27 06:58:21.814196 2026] [:error] [pid 22647:tid 22723] [client 185.192.70.6:30635] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/contact/system_core.php"] [unique_id "ae6YjWjfVULTjnk5SzPBTgAAAI0"]
[Mon Apr 27 06:58:22.632066 2026] [:error] [pid 20603:tid 20621] [client 185.192.70.113:35619] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/ai-builder/system_core.php"] [unique_id "ae6Yjg_k682XZv20MXyeEQAAAQ0"]
[Mon Apr 27 06:58:23.445135 2026] [:error] [pid 20603:tid 20613] [client 185.192.70.129:40813] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/ast-block-templates-json/system_core.php"] [unique_id "ae6Yjw_k682XZv20MXyeFQAAAQU"]
[Mon Apr 27 06:58:24.259637 2026] [:error] [pid 20603:tid 20622] [client 185.192.70.6:44401] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/astra-sites/json/system_core.php"] [unique_id "ae6YkA_k682XZv20MXyeGQAAAQ4"]
[Mon Apr 27 06:58:25.079120 2026] [:error] [pid 20603:tid 20609] [client 185.192.70.124:26183] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/cartflows-logs/system_core.php"] [unique_id "ae6YkQ_k682XZv20MXyeHQAAAQE"]
[Mon Apr 27 06:58:25.893689 2026] [:error] [pid 22645:tid 22670] [client 185.192.70.106:52575] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/edd/system_core.php"] [unique_id "ae6YkX-Pq2r302zQbMbC9gAAAA8"]
[Mon Apr 27 06:58:26.712116 2026] [:error] [pid 22645:tid 22674] [client 185.192.70.127:25047] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/system_core.php"] [unique_id "ae6Ykn-Pq2r302zQbMbC-QAAABM"]
[Mon Apr 27 06:58:27.528681 2026] [:error] [pid 22646:tid 22690] [client 185.192.70.110:26611] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/simply-static/temp-files/system_core.php"] [unique_id "ae6Yk4k_HyZhTP6AYaet-wAAAEc"]
[Mon Apr 27 06:58:28.345341 2026] [:error] [pid 20603:tid 20618] [client 185.192.70.115:63791] [client 185.192.70.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/st-importer/system_core.php"] [unique_id "ae6YlA_k682XZv20MXyeOwAAAQo"]
[Mon Apr 27 06:58:29.159904 2026] [:error] [pid 20603:tid 20610] [client 185.192.70.124:52185] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/system_core.php"] [unique_id "ae6YlQ_k682XZv20MXyePgAAAQI"]
[Mon Apr 27 06:58:29.975021 2026] [:error] [pid 22751:tid 22761] [client 185.192.70.118:48803] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wc-logs/system_core.php"] [unique_id "ae6YlSc0tCpVyVdFok_lQwAAAMc"]
[Mon Apr 27 06:58:30.787464 2026] [:error] [pid 20603:tid 20609] [client 185.192.70.113:32729] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/woocommerce_uploads/system_core.php"] [unique_id "ae6Ylg_k682XZv20MXyeSgAAAQE"]
[Mon Apr 27 06:58:31.604355 2026] [:error] [pid 20603:tid 20621] [client 185.192.70.129:52501] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wpforms/cache/system_core.php"] [unique_id "ae6Ylw_k682XZv20MXyeVAAAAQ0"]
[Mon Apr 27 06:58:32.422736 2026] [:error] [pid 22646:tid 22698] [client 185.192.70.116:35007] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-file-manager-pro/"] [unique_id "ae6YmIk_HyZhTP6AYaeuCwAAAE8"]
[Mon Apr 27 06:58:33.236020 2026] [:error] [pid 22646:tid 22706] [client 185.192.70.116:38833] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/db-status.php"] [unique_id "ae6YmYk_HyZhTP6AYaeuDwAAAFc"]
[Mon Apr 27 06:58:34.046923 2026] [:error] [pid 22751:tid 22773] [client 185.192.70.103:48319] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-content/uploads/"] [unique_id "ae6Ymic0tCpVyVdFok_lUgAAANM"]
[Mon Apr 27 06:58:34.860284 2026] [:error] [pid 22645:tid 22660] [client 185.192.70.115:22533] [client 185.192.70.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/css/"] [unique_id "ae6Ymn-Pq2r302zQbMbDCgAAAAU"]
[Mon Apr 27 06:58:35.672997 2026] [:error] [pid 20603:tid 20631] [client 185.192.70.118:21545] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-file-manager-pro/fm_backup/"] [unique_id "ae6Ymw_k682XZv20MXyeYgAAARc"]
[Mon Apr 27 06:58:36.487600 2026] [:error] [pid 22751:tid 22765] [client 185.192.70.131:42357] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/well-known/"] [unique_id "ae6YnCc0tCpVyVdFok_lXwAAAMs"]
[Mon Apr 27 06:58:37.298342 2026] [:error] [pid 22751:tid 22770] [client 185.192.70.110:26485] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/well-known/pki-validation/"] [unique_id "ae6YnSc0tCpVyVdFok_lZgAAANA"]
[Mon Apr 27 06:58:38.113035 2026] [:error] [pid 22645:tid 22665] [client 185.192.70.134:30309] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/system.php"] [unique_id "ae6Ynn-Pq2r302zQbMbDFgAAAAo"]
[Mon Apr 27 06:58:38.930079 2026] [:error] [pid 22646:tid 22705] [client 185.192.70.133:25729] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/panel.php"] [unique_id "ae6Ynok_HyZhTP6AYaeuHQAAAFY"]
[Mon Apr 27 06:58:39.746720 2026] [:error] [pid 22751:tid 22771] [client 185.192.70.112:26907] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/home.php"] [unique_id "ae6Ynyc0tCpVyVdFok_lewAAANE"]
[Mon Apr 27 06:58:40.568165 2026] [:error] [pid 22646:tid 22699] [client 185.192.70.134:63079] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "ae6YoIk_HyZhTP6AYaeuIgAAAFA"]
[Mon Apr 27 06:58:41.382199 2026] [:error] [pid 22645:tid 22678] [client 185.192.70.111:64839] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/login.php"] [unique_id "ae6YoX-Pq2r302zQbMbDJgAAABc"]
[Mon Apr 27 06:58:42.204070 2026] [:error] [pid 22645:tid 22676] [client 185.192.70.121:34435] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/media/system_core.php"] [unique_id "ae6Yon-Pq2r302zQbMbDKwAAABU"]
[Mon Apr 27 06:58:43.021140 2026] [:error] [pid 22646:tid 22695] [client 185.192.70.128:30089] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/system_core.php"] [unique_id "ae6Yo4k_HyZhTP6AYaeuKwAAAEw"]
[Mon Apr 27 06:58:43.840195 2026] [:error] [pid 22646:tid 22707] [client 185.192.70.119:30659] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/system_core.php"] [unique_id "ae6Yo4k_HyZhTP6AYaeuMAAAAFg"]
[Mon Apr 27 06:58:44.649502 2026] [:error] [pid 22751:tid 22773] [client 185.192.70.127:53825] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/system_core.php"] [unique_id "ae6YpCc0tCpVyVdFok_lgAAAANM"]
[Mon Apr 27 06:58:45.463141 2026] [:error] [pid 22751:tid 22777] [client 185.192.70.105:63923] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/oembed/system_core.php"] [unique_id "ae6YpSc0tCpVyVdFok_lhwAAANc"]
[Mon Apr 27 06:58:46.276149 2026] [:error] [pid 22647:tid 22710] [client 185.192.70.122:55895] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/system_core.php"] [unique_id "ae6YpmjfVULTjnk5SzPBdgAAAIA"]
[Mon Apr 27 06:58:47.096134 2026] [:error] [pid 20603:tid 20615] [client 185.192.70.126:55651] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/system_core.php"] [unique_id "ae6Ypw_k682XZv20MXyegQAAAQc"]
[Mon Apr 27 06:58:47.912656 2026] [:error] [pid 22647:tid 22713] [client 185.192.70.113:57561] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/system_core.php"] [unique_id "ae6Yp2jfVULTjnk5SzPBfAAAAIM"]
[Mon Apr 27 06:58:48.729820 2026] [:error] [pid 20603:tid 20632] [client 185.192.70.112:62437] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-content/wp-config-backup.php"] [unique_id "ae6YqA_k682XZv20MXyeiQAAARg"]
[Mon Apr 27 06:58:49.543916 2026] [:error] [pid 22751:tid 22765] [client 185.192.70.106:52919] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-config.php"] [unique_id "ae6YqSc0tCpVyVdFok_lmwAAAMs"]
[Mon Apr 27 06:58:50.360107 2026] [:error] [pid 22751:tid 22773] [client 185.192.70.107:24517] [client 185.192.70.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/js_composer/bak.php"] [unique_id "ae6Yqic0tCpVyVdFok_lowAAANM"]
[Mon Apr 27 06:58:51.173978 2026] [:error] [pid 20603:tid 20624] [client 185.192.70.122:23375] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/assets/css/conditionals/system_core.php"] [unique_id "ae6Yqw_k682XZv20MXyenQAAARA"]
[Mon Apr 27 06:58:51.989096 2026] [:error] [pid 22645:tid 22660] [client 185.192.70.123:64583] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/system_core.php"] [unique_id "ae6Yq3-Pq2r302zQbMbDQAAAAAU"]
[Mon Apr 27 06:58:52.802119 2026] [:error] [pid 22751:tid 22766] [client 185.192.70.128:56053] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wpforms-lite/assets/css/frontend/modern/system_core.php"] [unique_id "ae6YrCc0tCpVyVdFok_lugAAAMw"]
[Mon Apr 27 06:58:53.618131 2026] [:error] [pid 22751:tid 22769] [client 185.192.70.103:23647] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-content/plugins/wp-config-backup.php"] [unique_id "ae6YrSc0tCpVyVdFok_lwAAAAM8"]
[Mon Apr 27 06:58:54.436169 2026] [:error] [pid 22751:tid 22761] [client 185.192.70.124:25869] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-config-backup.php"] [unique_id "ae6Yric0tCpVyVdFok_lxQAAAMc"]
[Mon Apr 27 06:58:55.253960 2026] [:error] [pid 22751:tid 22754] [client 185.192.70.112:54473] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/cielhpn/"] [unique_id "ae6Yryc0tCpVyVdFok_lyAAAAME"]
[Mon Apr 27 06:58:56.072032 2026] [:error] [pid 20603:tid 20618] [client 185.192.70.132:47311] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor-pro/modules/loop-filter/data/endpoints/about.php"] [unique_id "ae6YsA_k682XZv20MXyetQAAAQo"]
[Mon Apr 27 06:58:56.893552 2026] [:error] [pid 22751:tid 22772] [client 185.192.70.114:60719] [client 185.192.70.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/forminator/library/field-autofill-providers/contracts/wp-login.php"] [unique_id "ae6YsCc0tCpVyVdFok_l1QAAANI"]
[Mon Apr 27 06:58:57.709341 2026] [:error] [pid 22645:tid 22676] [client 185.192.70.105:42379] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/advanced-custom-fields-pro/includes/Updater/about.php"] [unique_id "ae6YsX-Pq2r302zQbMbDRwAAABU"]
[Mon Apr 27 06:58:58.515638 2026] [:error] [pid 22646:tid 22685] [client 178.239.198.138:25175] [client 178.239.198.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/class-wp-logo.php"] [unique_id "ae6Ysok_HyZhTP6AYaeuVAAAAEI"]
[Mon Apr 27 06:58:59.329293 2026] [:error] [pid 22646:tid 22698] [client 185.192.70.131:38945] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/test.php"] [unique_id "ae6Ys4k_HyZhTP6AYaeuWQAAAE8"]
[Mon Apr 27 06:59:00.148317 2026] [:error] [pid 22751:tid 22755] [client 185.192.70.102:20833] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/revslider/admin/assets/js/plugins/maintenance.php"] [unique_id "ae6YtCc0tCpVyVdFok_l4QAAAMI"]
[Mon Apr 27 06:59:00.974741 2026] [:error] [pid 20603:tid 20619] [client 185.192.70.112:45545] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/wp-mail.php"] [unique_id "ae6YtA_k682XZv20MXyevQAAAQs"]
[Mon Apr 27 06:59:01.788669 2026] [:error] [pid 20603:tid 20632] [client 185.192.70.123:60357] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/sitepress-multilingual-cms/classes/plugins/wp-blog-header.php"] [unique_id "ae6YtQ_k682XZv20MXyewQAAARg"]
[Mon Apr 27 06:59:02.606307 2026] [:error] [pid 22646:tid 22707] [client 185.192.70.103:52145] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/updraftplus/includes/jstree/themes/wp-activate.php"] [unique_id "ae6Ytok_HyZhTP6AYaeuXAAAAFg"]
[Mon Apr 27 06:59:03.421966 2026] [:error] [pid 22645:tid 22657] [client 185.192.70.132:36543] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-file-manager/lib/themes/options.php"] [unique_id "ae6Yt3-Pq2r302zQbMbDUQAAAAI"]
[Mon Apr 27 06:59:04.241471 2026] [:error] [pid 22647:tid 22721] [client 185.192.70.119:36191] [client 185.192.70.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-blog-header.php"] [unique_id "ae6YuGjfVULTjnk5SzPBuwAAAIs"]
[Mon Apr 27 06:59:05.061929 2026] [:error] [pid 20603:tid 20616] [client 185.192.70.128:32095] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/assets/lib/pickr/themes/wp-blog-header.php"] [unique_id "ae6YuQ_k682XZv20MXyeygAAAQg"]
[Mon Apr 27 06:59:05.880000 2026] [:error] [pid 20603:tid 20623] [client 185.192.70.123:27459] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/contact-form-7/uoyaugar.php"] [unique_id "ae6YuQ_k682XZv20MXye0wAAAQ8"]
[Mon Apr 27 06:59:06.691644 2026] [:error] [pid 22751:tid 22768] [client 185.192.70.6:59603] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/check-email/config.php"] [unique_id "ae6Yuic0tCpVyVdFok_l7QAAAM4"]
[Mon Apr 27 06:59:07.504378 2026] [:error] [pid 22751:tid 22758] [client 185.192.70.108:51917] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/file-manager-advanced/config.php"] [unique_id "ae6Yuyc0tCpVyVdFok_l8gAAAMQ"]
[Mon Apr 27 06:59:08.324340 2026] [:error] [pid 22647:tid 22733] [client 185.192.70.104:23121] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "ae6YvGjfVULTjnk5SzPBwgAAAJc"]
[Mon Apr 27 06:59:09.138247 2026] [:error] [pid 20603:tid 20612] [client 185.192.70.128:34487] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elementor/lndex.php"] [unique_id "ae6YvQ_k682XZv20MXye4QAAAQQ"]
[Mon Apr 27 06:59:09.942061 2026] [:error] [pid 22751:tid 22760] [client 178.239.198.138:61669] [client 178.239.198.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wordpress-seo/wp-seo-trigger-table.php"] [unique_id "ae6YvSc0tCpVyVdFok_l_QAAAMY"]
[Mon Apr 27 06:59:10.753106 2026] [:error] [pid 22751:tid 22778] [client 185.192.70.135:29051] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-content/plugins/admin.php"] [unique_id "ae6Yvic0tCpVyVdFok_mAwAAANg"]
[Mon Apr 27 06:59:11.572860 2026] [:error] [pid 20603:tid 20613] [client 185.192.70.129:65487] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/star-addons-for-elementor/includes/class-star-addons-uploads.php"] [unique_id "ae6Yvw_k682XZv20MXye7QAAAQU"]
[Mon Apr 27 06:59:12.378462 2026] [:error] [pid 22646:tid 22684] [client 178.239.198.202:21463] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/contact-form-7-honeypot/includes/rest-api/wp-admin/config.php"] [unique_id "ae6YwIk_HyZhTP6AYaeubwAAAEE"]
[Mon Apr 27 06:59:13.188933 2026] [:error] [pid 20603:tid 20614] [client 185.192.70.5:28855] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/panel.php"] [unique_id "ae6YwQ_k682XZv20MXye8gAAAQY"]
[Mon Apr 27 06:59:14.012160 2026] [:error] [pid 22646:tid 22702] [client 185.192.70.118:33331] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/the-events-calendar/build/css/integrations/plugins/options.php"] [unique_id "ae6Ywok_HyZhTP6AYaeuewAAAFM"]
[Mon Apr 27 06:59:14.832108 2026] [:error] [pid 20603:tid 20620] [client 185.192.70.135:29895] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/updraftplus/includes/jstree/themes/config.php"] [unique_id "ae6Ywg_k682XZv20MXye-AAAAQw"]
[Mon Apr 27 06:59:15.644789 2026] [:error] [pid 22751:tid 22760] [client 185.192.70.109:41769] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/ssss/src.php"] [unique_id "ae6Ywyc0tCpVyVdFok_mFAAAAMY"]
[Mon Apr 27 06:59:16.460780 2026] [:error] [pid 22647:tid 22719] [client 185.192.70.5:56841] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/maintenance.php"] [unique_id "ae6YxGjfVULTjnk5SzPByAAAAIk"]
[Mon Apr 27 06:59:17.275517 2026] [:error] [pid 22751:tid 22768] [client 185.192.70.131:35081] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/tiktok-for-business/"] [unique_id "ae6YxSc0tCpVyVdFok_mHAAAAM4"]
[Mon Apr 27 06:59:18.090548 2026] [:error] [pid 22751:tid 22764] [client 185.192.70.131:35311] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/contact-form-7/base-theme.php"] [unique_id "ae6Yxic0tCpVyVdFok_mKwAAAMo"]
[Mon Apr 27 06:59:18.904622 2026] [:error] [pid 22645:tid 22660] [client 185.192.70.6:55323] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello-plus/classes/ehp-bes.php"] [unique_id "ae6Yxn-Pq2r302zQbMbDZgAAAAU"]
[Mon Apr 27 06:59:19.718710 2026] [:error] [pid 22646:tid 22686] [client 185.192.70.129:42095] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/mu-plugins/config.php"] [unique_id "ae6Yx4k_HyZhTP6AYaeukwAAAEM"]
[Mon Apr 27 06:59:20.530832 2026] [:error] [pid 20603:tid 20628] [client 185.192.70.104:35077] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "ae6YyA_k682XZv20MXyfBwAAARQ"]
[Mon Apr 27 06:59:21.347576 2026] [:error] [pid 22647:tid 22713] [client 185.192.70.133:57819] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/site-logo/about.php"] [unique_id "ae6YyWjfVULTjnk5SzPB2QAAAIM"]
[Mon Apr 27 06:59:22.165724 2026] [:error] [pid 20603:tid 20632] [client 185.192.70.115:50455] [client 185.192.70.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/newfold-page-cachesocial/about.php"] [unique_id "ae6Yyg_k682XZv20MXyfEgAAARg"]
[Mon Apr 27 06:59:22.986370 2026] [:error] [pid 20603:tid 20621] [client 185.192.70.5:36757] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/file61.php"] [unique_id "ae6Yyg_k682XZv20MXyfGAAAAQ0"]
[Mon Apr 27 06:59:23.799949 2026] [:error] [pid 20603:tid 20616] [client 185.192.70.102:36575] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-author-name/editers.php"] [unique_id "ae6Yyw_k682XZv20MXyfIwAAAQg"]
[Mon Apr 27 06:59:24.617912 2026] [:error] [pid 22751:tid 22753] [client 185.192.70.106:52805] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/plugin-editor-trigger.php"] [unique_id "ae6YzCc0tCpVyVdFok_mQQAAAMA"]
[Mon Apr 27 06:59:25.430092 2026] [:error] [pid 22751:tid 22767] [client 185.192.70.111:35807] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-pagination-numbers/wp-cron.php"] [unique_id "ae6YzSc0tCpVyVdFok_mRQAAAM0"]
[Mon Apr 27 06:59:26.248412 2026] [:error] [pid 22751:tid 22763] [client 185.192.70.116:23331] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ae6Yzic0tCpVyVdFok_mSAAAAMk"]
[Mon Apr 27 06:59:27.062910 2026] [:error] [pid 20603:tid 20626] [client 185.192.70.6:42743] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade-temp-backup/media/files/files/cache/ulnc/wbdo/"] [unique_id "ae6Yzw_k682XZv20MXyfMAAAARI"]
[Mon Apr 27 06:59:27.877432 2026] [:error] [pid 20603:tid 20632] [client 185.192.70.114:46831] [client 185.192.70.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/backup/js/build/kys/admin.php"] [unique_id "ae6Yzw_k682XZv20MXyfOQAAARg"]
[Mon Apr 27 06:59:28.694954 2026] [:error] [pid 22647:tid 22730] [client 185.192.70.132:52225] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/src/v1/dist/build/uols/"] [unique_id "ae6Y0GjfVULTjnk5SzPB4QAAAJQ"]
[Mon Apr 27 06:59:29.515122 2026] [:error] [pid 22646:tid 22689] [client 185.192.70.117:25501] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/css/cache/piwk/admin.php"] [unique_id "ae6Y0Yk_HyZhTP6AYaeupwAAAEY"]
[Mon Apr 27 06:59:30.330256 2026] [:error] [pid 22751:tid 22772] [client 185.192.70.121:24611] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/test.php"] [unique_id "ae6Y0ic0tCpVyVdFok_mUwAAANI"]
[Mon Apr 27 06:59:31.145613 2026] [:error] [pid 20603:tid 20631] [client 185.192.70.125:26065] [client 185.192.70.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/themes/maintenance.php"] [unique_id "ae6Y0w_k682XZv20MXyfQwAAARc"]
[Mon Apr 27 06:59:31.955851 2026] [:error] [pid 22646:tid 22693] [client 185.192.70.109:54443] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins_new/sitepress-multilingual-cms/classes/plugins/about.php"] [unique_id "ae6Y04k_HyZhTP6AYaeuqwAAAEo"]
[Mon Apr 27 06:59:32.765893 2026] [:error] [pid 20603:tid 20617] [client 178.239.198.202:35213] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins_new/wordpress-seo/admin/import/plugins/wp-blog-header.php"] [unique_id "ae6Y1A_k682XZv20MXyfUgAAAQk"]
[Mon Apr 27 06:59:33.571304 2026] [:error] [pid 22751:tid 22758] [client 185.192.70.106:55777] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/cs.php"] [unique_id "ae6Y1Sc0tCpVyVdFok_mYAAAAMQ"]
[Mon Apr 27 06:59:34.382579 2026] [:error] [pid 20603:tid 20617] [client 185.192.70.131:55725] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/IXR/met/uploads/"] [unique_id "ae6Y1g_k682XZv20MXyfWQAAAQk"]
[Mon Apr 27 06:59:35.194009 2026] [:error] [pid 22646:tid 22683] [client 185.192.70.104:59809] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wdf.php"] [unique_id "ae6Y14k_HyZhTP6AYaeusgAAAEA"]
[Mon Apr 27 06:59:36.008100 2026] [:error] [pid 22646:tid 22705] [client 185.192.70.123:62383] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/koiy.php"] [unique_id "ae6Y2Ik_HyZhTP6AYaeutwAAAFY"]
[Mon Apr 27 06:59:36.826440 2026] [:error] [pid 22751:tid 22762] [client 185.192.70.108:23673] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query/"] [unique_id "ae6Y2Cc0tCpVyVdFok_mbgAAAMg"]
[Mon Apr 27 06:59:37.642058 2026] [:error] [pid 22646:tid 22689] [client 185.192.70.105:61983] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/spacer/"] [unique_id "ae6Y2Yk_HyZhTP6AYaeuvwAAAEY"]
[Mon Apr 27 06:59:38.455334 2026] [:error] [pid 20603:tid 20619] [client 185.192.70.105:64313] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "ae6Y2g_k682XZv20MXyfXQAAAQs"]
[Mon Apr 27 06:59:39.272448 2026] [:error] [pid 20603:tid 20629] [client 185.192.70.129:38153] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/media/v3/js/build/icdxa/"] [unique_id "ae6Y2w_k682XZv20MXyfYAAAARU"]
[Mon Apr 27 06:59:40.090360 2026] [:error] [pid 22645:tid 22664] [client 185.192.70.127:54059] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/v3/data/v1/css/jmy/msl/"] [unique_id "ae6Y3H-Pq2r302zQbMbDcAAAAAk"]
[Mon Apr 27 06:59:42.395369 2026] [:error] [pid 20603:tid 20608] [client 185.192.70.127:62713] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/build/css/cache/img/src/backup/utt/admin.php"] [unique_id "ae6Y3g_k682XZv20MXyfZwAAAQA"]
[Mon Apr 27 06:59:43.217310 2026] [:error] [pid 20603:tid 20631] [client 185.192.70.121:31767] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/social-links/admin.php"] [unique_id "ae6Y3w_k682XZv20MXyfbAAAARc"]
[Mon Apr 27 06:59:44.034276 2026] [:error] [pid 22645:tid 22675] [client 185.192.70.108:23379] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-wolf.php"] [unique_id "ae6Y4H-Pq2r302zQbMbDeAAAABQ"]
[Mon Apr 27 06:59:44.853780 2026] [:error] [pid 22646:tid 22698] [client 185.192.70.128:64805] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "ae6Y4Ik_HyZhTP6AYaeuzwAAAE8"]
[Mon Apr 27 06:59:45.668862 2026] [:error] [pid 22647:tid 22714] [client 185.192.70.102:20929] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/astra/assets/css/minified/system_core.php"] [unique_id "ae6Y4WjfVULTjnk5SzPB9wAAAIQ"]
[Mon Apr 27 06:59:46.483362 2026] [:error] [pid 22645:tid 22664] [client 185.192.70.121:55879] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/system_core.php"] [unique_id "ae6Y4n-Pq2r302zQbMbDgwAAAAk"]
[Mon Apr 27 06:59:47.296901 2026] [:error] [pid 22646:tid 22691] [client 178.239.198.202:45297] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-content/themes/wp-config-backup.php"] [unique_id "ae6Y44k_HyZhTP6AYaeu1QAAAEg"]
[Mon Apr 27 06:59:48.101023 2026] [:error] [pid 22751:tid 22762] [client 185.192.70.115:36783] [client 185.192.70.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme/about.php"] [unique_id "ae6Y5Cc0tCpVyVdFok_miAAAAMg"]
[Mon Apr 27 06:59:48.914474 2026] [:error] [pid 20603:tid 20632] [client 185.192.70.127:34359] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/sinatra/inc/customizer/controls/color/about.php"] [unique_id "ae6Y5A_k682XZv20MXyfdwAAARg"]
[Mon Apr 27 06:59:49.731925 2026] [:error] [pid 22647:tid 22734] [client 185.192.70.110:50563] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/blocksy/inc/panel-builder/footer/widget-area-3/"] [unique_id "ae6Y5WjfVULTjnk5SzPB_gAAAJg"]
[Mon Apr 27 06:59:50.546869 2026] [:error] [pid 20603:tid 20626] [client 185.192.70.103:26011] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/crio/woocommerce/notices/"] [unique_id "ae6Y5g_k682XZv20MXyffAAAARI"]
[Mon Apr 27 06:59:51.363361 2026] [:error] [pid 22647:tid 22713] [client 185.192.70.104:51609] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/hestia/inc/views/blog/"] [unique_id "ae6Y52jfVULTjnk5SzPCBQAAAIM"]
[Mon Apr 27 06:59:52.180438 2026] [:error] [pid 20603:tid 20623] [client 185.192.70.133:55135] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/fortified-child/docs/js/omelv/"] [unique_id "ae6Y6A_k682XZv20MXyffwAAAQ8"]
[Mon Apr 27 06:59:52.998058 2026] [:error] [pid 20603:tid 20628] [client 185.192.70.132:55977] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/maintenance.php"] [unique_id "ae6Y6A_k682XZv20MXyfhAAAARQ"]
[Mon Apr 27 06:59:53.815758 2026] [:error] [pid 22646:tid 22700] [client 185.192.70.103:62965] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyone/content-index.php"] [unique_id "ae6Y6Yk_HyZhTP6AYaeu3gAAAFE"]
[Mon Apr 27 06:59:54.626399 2026] [:error] [pid 22751:tid 22769] [client 185.192.70.131:25567] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/proton/content-index.php"] [unique_id "ae6Y6ic0tCpVyVdFok_moAAAAM8"]
[Mon Apr 27 06:59:55.440516 2026] [:error] [pid 22751:tid 22777] [client 185.192.70.128:21397] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentythree/patterns/"] [unique_id "ae6Y6yc0tCpVyVdFok_mpgAAANc"]
[Mon Apr 27 06:59:56.255518 2026] [:error] [pid 22647:tid 22733] [client 185.192.70.131:34387] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/inter/"] [unique_id "ae6Y7GjfVULTjnk5SzPCFAAAAJc"]
[Mon Apr 27 06:59:57.071998 2026] [:error] [pid 22751:tid 22754] [client 185.192.70.133:23919] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/yootheme/content-index.php"] [unique_id "ae6Y7Sc0tCpVyVdFok_msgAAAME"]
[Mon Apr 27 06:59:57.885027 2026] [:error] [pid 22645:tid 22669] [client 185.192.70.103:62839] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/security.php"] [unique_id "ae6Y7X-Pq2r302zQbMbDpgAAAA4"]
[Mon Apr 27 06:59:58.699042 2026] [:error] [pid 22751:tid 22761] [client 185.192.70.124:61759] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobox/"] [unique_id "ae6Y7ic0tCpVyVdFok_mwgAAAMc"]
[Mon Apr 27 06:59:59.516007 2026] [:error] [pid 22647:tid 22719] [client 185.192.70.6:29031] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-signup.php"] [unique_id "ae6Y72jfVULTjnk5SzPCFwAAAIk"]
[Mon Apr 27 07:00:00.331677 2026] [:error] [pid 22646:tid 22684] [client 185.192.70.134:50709] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-config-backup.php"] [unique_id "ae6Y8Ik_HyZhTP6AYaeu4AAAAEE"]
[Mon Apr 27 07:00:01.147451 2026] [:error] [pid 22647:tid 22733] [client 185.192.70.121:50013] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/master-blog/content-none-new-compiler.php"] [unique_id "ae6Y8WjfVULTjnk5SzPCGwAAAJc"]
[Mon Apr 27 07:00:01.969389 2026] [:error] [pid 22751:tid 22760] [client 185.192.70.122:60169] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/villagio-child/admin.php"] [unique_id "ae6Y8Sc0tCpVyVdFok_m0gAAAMY"]
[Mon Apr 27 07:00:02.788550 2026] [:error] [pid 22751:tid 22773] [client 185.192.70.109:60659] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentynineteen/sass/site/primary/"] [unique_id "ae6Y8ic0tCpVyVdFok_m3QAAANM"]
[Mon Apr 27 07:00:03.605907 2026] [:error] [pid 20603:tid 20620] [client 185.192.70.127:30789] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-content/themes/admin.php"] [unique_id "ae6Y8w_k682XZv20MXyfkwAAAQw"]
[Mon Apr 27 07:00:04.423415 2026] [:error] [pid 22751:tid 22759] [client 185.192.70.131:29563] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/consultstreet/config.php"] [unique_id "ae6Y9Cc0tCpVyVdFok_m4wAAAMU"]
[Mon Apr 27 07:00:05.238604 2026] [:error] [pid 22751:tid 22775] [client 185.192.70.125:57373] [client 185.192.70.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/blogger-buzz/welcome/js/"] [unique_id "ae6Y9Sc0tCpVyVdFok_m7AAAANU"]
[Mon Apr 27 07:00:06.055767 2026] [:error] [pid 20603:tid 20630] [client 185.192.70.103:50453] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/mesmerize/page-templates/"] [unique_id "ae6Y9g_k682XZv20MXyfnwAAARY"]
[Mon Apr 27 07:00:06.871958 2026] [:error] [pid 22646:tid 22702] [client 185.192.70.103:57271] [client 185.192.70.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "ae6Y9ok_HyZhTP6AYaeu6wAAAFM"]
[Mon Apr 27 07:00:07.687606 2026] [:error] [pid 20603:tid 20619] [client 185.192.70.118:22141] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/hello-elementor/template-parts/"] [unique_id "ae6Y9w_k682XZv20MXyfqwAAAQs"]
[Mon Apr 27 07:00:08.503734 2026] [:error] [pid 22751:tid 22776] [client 185.192.70.125:61257] [client 185.192.70.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/Divi/includes/builder/post/taxonomy/"] [unique_id "ae6Y-Cc0tCpVyVdFok_m9gAAANY"]
[Mon Apr 27 07:00:09.320146 2026] [:error] [pid 22646:tid 22707] [client 185.192.70.106:20319] [client 185.192.70.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/system.php"] [unique_id "ae6Y-Yk_HyZhTP6AYaeu8AAAAFg"]
[Mon Apr 27 07:00:10.130777 2026] [:error] [pid 22751:tid 22777] [client 185.192.70.105:28647] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/module.php"] [unique_id "ae6Y-ic0tCpVyVdFok_m_QAAANc"]
[Mon Apr 27 07:00:10.946806 2026] [:error] [pid 20603:tid 20610] [client 185.192.70.122:41655] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/test.php"] [unique_id "ae6Y-g_k682XZv20MXyfwAAAAQI"]
[Mon Apr 27 07:00:11.765855 2026] [:error] [pid 22751:tid 22761] [client 185.192.70.118:26949] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/blog-kit/inc/demo/demo-content/"] [unique_id "ae6Y-yc0tCpVyVdFok_nAgAAAMc"]
[Mon Apr 27 07:00:12.577664 2026] [:error] [pid 20603:tid 20631] [client 185.192.70.127:36775] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/flatsome/inc/"] [unique_id "ae6Y_A_k682XZv20MXyfzgAAARc"]
[Mon Apr 27 07:00:13.392597 2026] [:error] [pid 22751:tid 22772] [client 185.192.70.117:35639] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/config.php"] [unique_id "ae6Y_Sc0tCpVyVdFok_nBQAAANI"]
[Mon Apr 27 07:00:14.206589 2026] [:error] [pid 20603:tid 20631] [client 185.192.70.111:44651] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/config.php"] [unique_id "ae6Y_g_k682XZv20MXyf2gAAARc"]
[Mon Apr 27 07:00:15.020586 2026] [:error] [pid 20603:tid 20624] [client 185.192.70.105:61895] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/config.php"] [unique_id "ae6Y_w_k682XZv20MXyf3AAAARA"]
[Mon Apr 27 07:00:15.835817 2026] [:error] [pid 22751:tid 22772] [client 185.192.70.123:60637] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/config.php"] [unique_id "ae6Y_yc0tCpVyVdFok_nEAAAANI"]
[Mon Apr 27 07:00:16.650161 2026] [:error] [pid 22647:tid 22734] [client 185.192.70.129:60141] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/bootstrap.php"] [unique_id "ae6ZAGjfVULTjnk5SzPCJQAAAJg"]
[Mon Apr 27 07:00:17.466697 2026] [:error] [pid 22645:tid 22674] [client 185.192.70.114:58033] [client 185.192.70.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/panel.php"] [unique_id "ae6ZAX-Pq2r302zQbMbDwQAAABM"]
[Mon Apr 27 07:00:18.283900 2026] [:error] [pid 22751:tid 22776] [client 185.192.70.104:28109] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/"] [unique_id "ae6ZAic0tCpVyVdFok_nFgAAANY"]
[Mon Apr 27 07:00:19.096640 2026] [:error] [pid 22645:tid 22669] [client 185.192.70.105:37749] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp-image.php"] [unique_id "ae6ZA3-Pq2r302zQbMbDxQAAAA4"]
[Mon Apr 27 07:00:19.915170 2026] [:error] [pid 22645:tid 22667] [client 185.192.70.105:24949] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "ae6ZA3-Pq2r302zQbMbDywAAAAw"]
[Mon Apr 27 07:00:20.737058 2026] [:error] [pid 22646:tid 22704] [client 185.192.70.128:43681] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/php-compat/shadow-bot.php"] [unique_id "ae6ZBIk_HyZhTP6AYaeu_AAAAFU"]
[Mon Apr 27 07:00:21.556917 2026] [:error] [pid 22647:tid 22719] [client 185.192.70.110:49177] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/config.php"] [unique_id "ae6ZBWjfVULTjnk5SzPCLgAAAIk"]
[Mon Apr 27 07:00:22.370195 2026] [:error] [pid 22751:tid 22766] [client 185.192.70.123:46277] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/config.php"] [unique_id "ae6ZBic0tCpVyVdFok_nKgAAAMw"]
[Mon Apr 27 07:00:23.182737 2026] [:error] [pid 22751:tid 22765] [client 185.192.70.124:53227] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/src/config.php"] [unique_id "ae6ZByc0tCpVyVdFok_nLwAAAMs"]
[Mon Apr 27 07:00:23.995118 2026] [:error] [pid 22751:tid 22778] [client 185.192.70.6:27785] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/config.php"] [unique_id "ae6ZByc0tCpVyVdFok_nNAAAANg"]
[Mon Apr 27 07:00:24.813497 2026] [:error] [pid 20603:tid 20624] [client 185.192.70.109:52597] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/style-engine/config.php"] [unique_id "ae6ZCA_k682XZv20MXyf7wAAARA"]
[Mon Apr 27 07:00:25.626619 2026] [:error] [pid 20603:tid 20616] [client 185.192.70.109:40379] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/config.php"] [unique_id "ae6ZCQ_k682XZv20MXyf9QAAAQg"]
[Mon Apr 27 07:00:26.441809 2026] [:error] [pid 22645:tid 22675] [client 185.192.70.123:35007] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/config.php"] [unique_id "ae6ZCn-Pq2r302zQbMbD4wAAABQ"]
[Mon Apr 27 07:00:27.258478 2026] [:error] [pid 22751:tid 22767] [client 185.192.70.112:29035] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/config.php"] [unique_id "ae6ZCyc0tCpVyVdFok_nOAAAAM0"]
[Mon Apr 27 07:00:28.071120 2026] [:error] [pid 22751:tid 22763] [client 185.192.70.6:40369] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/config.php"] [unique_id "ae6ZDCc0tCpVyVdFok_nOgAAAMk"]
[Mon Apr 27 07:00:28.873927 2026] [:error] [pid 22645:tid 22673] [client 178.239.198.202:38991] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/config.php"] [unique_id "ae6ZDH-Pq2r302zQbMbD8QAAABI"]
[Mon Apr 27 07:00:29.682833 2026] [:error] [pid 22751:tid 22763] [client 185.192.70.131:50831] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/config.php"] [unique_id "ae6ZDSc0tCpVyVdFok_nQgAAAMk"]
[Mon Apr 27 07:00:30.500952 2026] [:error] [pid 22647:tid 22713] [client 185.192.70.122:51203] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/cache/config.php"] [unique_id "ae6ZDmjfVULTjnk5SzPCPgAAAIM"]
[Mon Apr 27 07:00:31.318999 2026] [:error] [pid 22646:tid 22704] [client 185.192.70.115:58861] [client 185.192.70.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-cloudflare-super-page-cache/config.php"] [unique_id "ae6ZD4k_HyZhTP6AYaevBQAAAFU"]
[Mon Apr 27 07:00:32.138592 2026] [:error] [pid 20603:tid 20609] [client 185.192.70.109:62017] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/library/"] [unique_id "ae6ZEA_k682XZv20MXygDgAAAQE"]
[Mon Apr 27 07:00:32.958587 2026] [:error] [pid 20603:tid 20614] [client 185.192.70.104:22865] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/abilities-api/"] [unique_id "ae6ZEA_k682XZv20MXygGAAAAQY"]
[Mon Apr 27 07:00:33.774801 2026] [:error] [pid 20603:tid 20632] [client 185.192.70.117:64979] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/loco/"] [unique_id "ae6ZEQ_k682XZv20MXygHgAAARg"]
[Mon Apr 27 07:00:34.586063 2026] [:error] [pid 22646:tid 22689] [client 185.192.70.133:22831] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade-temp-backup/"] [unique_id "ae6ZEok_HyZhTP6AYaevBwAAAEY"]
[Mon Apr 27 07:00:35.397421 2026] [:error] [pid 22646:tid 22684] [client 185.192.70.117:37523] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/class-theme-installer-skin-client.php"] [unique_id "ae6ZE4k_HyZhTP6AYaevDAAAAEE"]
[Mon Apr 27 07:00:36.215453 2026] [:error] [pid 22646:tid 22705] [client 185.192.70.102:22335] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-recovery-mode-link-service-edit.php"] [unique_id "ae6ZFIk_HyZhTP6AYaevEAAAAFY"]
[Mon Apr 27 07:00:37.032043 2026] [:error] [pid 20603:tid 20614] [client 185.192.70.102:48491] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user-new-reference.php"] [unique_id "ae6ZFQ_k682XZv20MXygMAAAAQY"]
[Mon Apr 27 07:00:37.850292 2026] [:error] [pid 20603:tid 20621] [client 185.192.70.113:55571] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/vendor/stripe/stripe-php/lib/FinancialConnections/"] [unique_id "ae6ZFQ_k682XZv20MXygOQAAAQ0"]
[Mon Apr 27 07:00:38.664816 2026] [:error] [pid 22646:tid 22701] [client 185.192.70.121:51355] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/vendor/stripe/stripe-php/lib/Service/FinancialConnections/"] [unique_id "ae6ZFok_HyZhTP6AYaevFwAAAFI"]
[Mon Apr 27 07:00:39.483681 2026] [:error] [pid 20603:tid 20621] [client 185.192.70.107:25015] [client 185.192.70.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-excerpt-meta.php"] [unique_id "ae6ZFw_k682XZv20MXygRAAAAQ0"]
[Mon Apr 27 07:00:40.301336 2026] [:error] [pid 22646:tid 22685] [client 185.192.70.135:64309] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.audio-video.riff-http.php"] [unique_id "ae6ZGIk_HyZhTP6AYaevIQAAAEI"]
[Mon Apr 27 07:00:41.117875 2026] [:error] [pid 22646:tid 22706] [client 185.192.70.124:58573] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "ae6ZGYk_HyZhTP6AYaevIgAAAFc"]
[Mon Apr 27 07:00:41.933823 2026] [:error] [pid 22751:tid 22769] [client 185.192.70.105:61423] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin.php"] [unique_id "ae6ZGSc0tCpVyVdFok_nTgAAAM8"]
[Mon Apr 27 07:00:42.745652 2026] [:error] [pid 22646:tid 22702] [client 185.192.70.104:34703] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "ae6ZGok_HyZhTP6AYaevJwAAAFM"]
[Mon Apr 27 07:00:43.562075 2026] [:error] [pid 22751:tid 22757] [client 185.192.70.116:64545] [client 185.192.70.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/thickbox/logs1.php"] [unique_id "ae6ZGyc0tCpVyVdFok_nUQAAAMM"]
[Mon Apr 27 07:00:46.069205 2026] [:error] [pid 20603:tid 20615] [client 185.192.70.110:21173] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/admin.php"] [unique_id "ae6ZHg_k682XZv20MXygZQAAAQc"]
[Mon Apr 27 07:00:46.884753 2026] [:error] [pid 20603:tid 20626] [client 185.192.70.114:41931] [client 185.192.70.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/xy.php"] [unique_id "ae6ZHg_k682XZv20MXygZwAAARI"]
[Mon Apr 27 07:00:47.697821 2026] [:error] [pid 22646:tid 22691] [client 185.192.70.123:32499] [client 185.192.70.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/xy.php"] [unique_id "ae6ZH4k_HyZhTP6AYaevMwAAAEg"]
[Mon Apr 27 07:00:48.519885 2026] [:error] [pid 22647:tid 22721] [client 185.192.70.131:35921] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/footer-class.php"] [unique_id "ae6ZIGjfVULTjnk5SzPCXgAAAIs"]
[Mon Apr 27 07:00:49.331931 2026] [:error] [pid 22647:tid 22716] [client 185.192.70.122:57587] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/good.php"] [unique_id "ae6ZIWjfVULTjnk5SzPCXwAAAIY"]
[Mon Apr 27 07:00:50.142598 2026] [:error] [pid 20603:tid 20626] [client 178.239.198.202:31553] [client 178.239.198.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/editor/"] [unique_id "ae6ZIg_k682XZv20MXygfwAAARI"]
[Mon Apr 27 07:00:50.953477 2026] [:error] [pid 22647:tid 22718] [client 185.192.70.134:21047] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/profile/admin.php"] [unique_id "ae6ZImjfVULTjnk5SzPCYwAAAIg"]
[Mon Apr 27 07:00:51.769520 2026] [:error] [pid 20603:tid 20621] [client 185.192.70.102:63231] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/summia/"] [unique_id "ae6ZIw_k682XZv20MXygigAAAQ0"]
[Mon Apr 27 07:00:52.581517 2026] [:error] [pid 22751:tid 22766] [client 185.192.70.105:61899] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-content/languages/config.php"] [unique_id "ae6ZJCc0tCpVyVdFok_nYwAAAMw"]
[Mon Apr 27 07:00:53.400093 2026] [:error] [pid 22646:tid 22683] [client 185.192.70.110:32229] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-content/admin.php"] [unique_id "ae6ZJYk_HyZhTP6AYaevPQAAAEA"]
[Mon Apr 27 07:00:54.215471 2026] [:error] [pid 22647:tid 22717] [client 185.192.70.132:37485] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "ae6ZJmjfVULTjnk5SzPCawAAAIc"]
[Mon Apr 27 07:00:55.034328 2026] [:error] [pid 22647:tid 22719] [client 185.192.70.111:22665] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/h2.php"] [unique_id "ae6ZJ2jfVULTjnk5SzPCdQAAAIk"]
[Mon Apr 27 07:00:55.854851 2026] [:error] [pid 20603:tid 20624] [client 185.192.70.109:32035] [client 185.192.70.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/mu-plugins/chosen.php"] [unique_id "ae6ZJw_k682XZv20MXygjQAAARA"]
[Mon Apr 27 07:00:56.672758 2026] [:error] [pid 20603:tid 20612] [client 185.192.70.128:35957] [client 185.192.70.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade-temp-backup/autoload_classmap.php"] [unique_id "ae6ZKA_k682XZv20MXygkgAAAQQ"]
[Mon Apr 27 07:00:57.490387 2026] [:error] [pid 22751:tid 22778] [client 185.192.70.111:22253] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/Base.php"] [unique_id "ae6ZKSc0tCpVyVdFok_nbwAAANg"]
[Mon Apr 27 07:00:58.309444 2026] [:error] [pid 22751:tid 22759] [client 185.192.70.121:38013] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins.bk/contact-form-7/includes/js/jquery-ui/themes/admin.php"] [unique_id "ae6ZKic0tCpVyVdFok_ndgAAAMU"]
[Mon Apr 27 07:00:59.129410 2026] [:error] [pid 22647:tid 22722] [client 185.192.70.107:56289] [client 185.192.70.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins.bk/js_composer/include/classes/vendors/plugins/system.php"] [unique_id "ae6ZK2jfVULTjnk5SzPCkwAAAIw"]
[Mon Apr 27 07:00:59.949361 2026] [:error] [pid 20603:tid 20608] [client 185.192.70.102:43419] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins.bk/wordpress-seo/admin/import/plugins/maintenance.php"] [unique_id "ae6ZKw_k682XZv20MXygmAAAAQA"]
[Mon Apr 27 07:01:00.765868 2026] [:error] [pid 22646:tid 22687] [client 185.192.70.132:62607] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/wp-mail.php"] [unique_id "ae6ZLIk_HyZhTP6AYaevTAAAAEQ"]
[Mon Apr 27 07:01:01.583811 2026] [:error] [pid 20603:tid 20610] [client 185.192.70.133:55949] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-conflg.php"] [unique_id "ae6ZLQ_k682XZv20MXygnQAAAQI"]
[Mon Apr 27 07:01:02.398628 2026] [:error] [pid 22645:tid 22665] [client 185.192.70.111:49663] [client 185.192.70.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config.php"] [unique_id "ae6ZLn-Pq2r302zQbMbEUwAAAAo"]
[Mon Apr 27 07:01:03.212856 2026] [:error] [pid 22645:tid 22673] [client 185.192.70.133:50661] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/lock.php"] [unique_id "ae6ZL3-Pq2r302zQbMbEVAAAABI"]
[Mon Apr 27 07:01:04.027617 2026] [:error] [pid 22645:tid 22661] [client 185.192.70.110:36079] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/com.php"] [unique_id "ae6ZMH-Pq2r302zQbMbEVQAAAAY"]
[Mon Apr 27 07:01:04.841937 2026] [:error] [pid 22647:tid 22726] [client 185.192.70.113:26435] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "ae6ZMGjfVULTjnk5SzPCqQAAAJA"]
[Mon Apr 27 07:01:05.659979 2026] [:error] [pid 22646:tid 22692] [client 185.192.70.108:22383] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/network/uploads/system.php"] [unique_id "ae6ZMYk_HyZhTP6AYaevVAAAAEk"]
[Mon Apr 27 07:01:06.472891 2026] [:error] [pid 20603:tid 20613] [client 185.192.70.121:54087] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/colors/"] [unique_id "ae6ZMg_k682XZv20MXygqwAAAQU"]
[Mon Apr 27 07:01:07.291599 2026] [:error] [pid 22645:tid 22663] [client 185.192.70.114:34193] [client 185.192.70.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/backups-dup-pro/imports/network/"] [unique_id "ae6ZM3-Pq2r302zQbMbEWgAAAAg"]
[Mon Apr 27 07:01:08.105066 2026] [:error] [pid 22645:tid 22662] [client 185.192.70.102:27955] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/ai1wm-backups/includes/"] [unique_id "ae6ZNH-Pq2r302zQbMbEXgAAAAc"]
[Mon Apr 27 07:01:08.924985 2026] [:error] [pid 22645:tid 22672] [client 185.192.70.108:22717] [client 185.192.70.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/gettest.php"] [unique_id "ae6ZNH-Pq2r302zQbMbEYQAAABE"]
[Mon Apr 27 07:01:09.739350 2026] [:error] [pid 22645:tid 22661] [client 185.192.70.117:41299] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "ae6ZNX-Pq2r302zQbMbEZAAAAAY"]
[Mon Apr 27 07:01:10.554887 2026] [:error] [pid 22645:tid 22674] [client 185.192.70.132:51997] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/panel.php"] [unique_id "ae6ZNn-Pq2r302zQbMbEawAAABM"]
[Mon Apr 27 07:01:11.375416 2026] [:error] [pid 22751:tid 22764] [client 185.192.70.5:47411] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/wp-themes.php"] [unique_id "ae6ZNyc0tCpVyVdFok_nrgAAAMo"]
[Mon Apr 27 07:01:12.193931 2026] [:error] [pid 22647:tid 22715] [client 185.192.70.132:31291] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/maint/"] [unique_id "ae6ZOGjfVULTjnk5SzPCwAAAAIU"]
[Mon Apr 27 07:01:13.010558 2026] [:error] [pid 20603:tid 20609] [client 185.192.70.6:49297] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Transport/"] [unique_id "ae6ZOQ_k682XZv20MXygsQAAAQE"]
[Mon Apr 27 07:01:13.823789 2026] [:error] [pid 20603:tid 20616] [client 185.192.70.107:45185] [client 185.192.70.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Response/"] [unique_id "ae6ZOQ_k682XZv20MXygsgAAAQg"]
[Mon Apr 27 07:01:14.636189 2026] [:error] [pid 22645:tid 22663] [client 185.192.70.125:65151] [client 185.192.70.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/wp-sing.php"] [unique_id "ae6ZOn-Pq2r302zQbMbEdgAAAAg"]
[Mon Apr 27 07:01:15.451973 2026] [:error] [pid 20603:tid 20630] [client 185.192.70.133:61459] [client 185.192.70.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/button/"] [unique_id "ae6ZOw_k682XZv20MXyguwAAARY"]
[Mon Apr 27 07:01:16.266432 2026] [:error] [pid 22647:tid 22711] [client 185.192.70.126:30957] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/media-text/"] [unique_id "ae6ZPGjfVULTjnk5SzPC0gAAAIE"]
[Mon Apr 27 07:01:17.079823 2026] [:error] [pid 22645:tid 22675] [client 185.192.70.135:58731] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/missing/"] [unique_id "ae6ZPX-Pq2r302zQbMbEegAAABQ"]
[Mon Apr 27 07:01:17.891777 2026] [:error] [pid 22645:tid 22671] [client 185.192.70.107:39941] [client 185.192.70.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "ae6ZPX-Pq2r302zQbMbEfgAAABA"]
[Mon Apr 27 07:01:18.709816 2026] [:error] [pid 22645:tid 22658] [client 185.192.70.132:34035] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/img/content/media/lnl/"] [unique_id "ae6ZPn-Pq2r302zQbMbEgwAAAAM"]
[Mon Apr 27 07:01:19.528247 2026] [:error] [pid 20603:tid 20610] [client 185.192.70.6:39383] [client 185.192.70.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/gallery/"] [unique_id "ae6ZPw_k682XZv20MXygxQAAAQI"]
[Mon Apr 27 07:01:20.338571 2026] [:error] [pid 22751:tid 22757] [client 185.192.70.117:25541] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/includes/content/v2/uploads/docs/yat/admin.php"] [unique_id "ae6ZQCc0tCpVyVdFok_n0AAAAMM"]
[Mon Apr 27 07:01:21.148944 2026] [:error] [pid 22645:tid 22676] [client 185.192.70.117:25013] [client 185.192.70.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cache/adminkontol.php"] [unique_id "ae6ZQX-Pq2r302zQbMbEhQAAABU"]
[Mon Apr 27 07:01:21.964975 2026] [:error] [pid 22647:tid 22717] [client 185.192.70.104:27139] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/vx.php"] [unique_id "ae6ZQWjfVULTjnk5SzPC8AAAAIc"]
[Mon Apr 27 07:01:22.786099 2026] [:error] [pid 22751:tid 22772] [client 185.192.70.112:60243] [client 185.192.70.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/database/"] [unique_id "ae6ZQic0tCpVyVdFok_n2QAAANI"]
[Mon Apr 27 07:01:23.604594 2026] [:error] [pid 22646:tid 22699] [client 185.192.70.132:40309] [client 185.192.70.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/uploads/system.php"] [unique_id "ae6ZQ4k_HyZhTP6AYaevYQAAAFA"]
[Mon Apr 27 07:01:24.416042 2026] [:error] [pid 20603:tid 20619] [client 185.192.70.104:41207] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/block/img/themes/"] [unique_id "ae6ZRA_k682XZv20MXyg2wAAAQs"]
[Mon Apr 27 07:01:25.230997 2026] [:error] [pid 20603:tid 20620] [client 185.192.70.115:56957] [client 185.192.70.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/preformatted/"] [unique_id "ae6ZRQ_k682XZv20MXyg4gAAAQw"]
[Mon Apr 27 07:01:26.046011 2026] [:error] [pid 20603:tid 20619] [client 185.192.70.5:33955] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/themes/wp-load.php"] [unique_id "ae6ZRg_k682XZv20MXyg5wAAAQs"]
[Mon Apr 27 07:01:26.860527 2026] [:error] [pid 22751:tid 22767] [client 185.192.70.110:53329] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/home.php"] [unique_id "ae6ZRic0tCpVyVdFok_n3wAAAM0"]
[Mon Apr 27 07:01:27.681554 2026] [:error] [pid 22646:tid 22703] [client 185.192.70.105:44027] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/"] [unique_id "ae6ZR4k_HyZhTP6AYaevZgAAAFQ"]
[Mon Apr 27 07:01:28.493361 2026] [:error] [pid 20603:tid 20612] [client 185.192.70.113:63957] [client 185.192.70.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/system_core.php"] [unique_id "ae6ZSA_k682XZv20MXyg9gAAAQQ"]
[Mon Apr 27 07:01:31.099749 2026] [:error] [pid 20603:tid 20623] [client 185.192.70.104:34315] [client 185.192.70.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/maintenance.php"] [unique_id "ae6ZSw_k682XZv20MXyhAwAAAQ8"]
[Mon Apr 27 07:01:31.912946 2026] [:error] [pid 20603:tid 20631] [client 185.192.70.121:57057] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/edit-tags.php"] [unique_id "ae6ZSw_k682XZv20MXyhCAAAARc"]
[Mon Apr 27 07:01:32.726144 2026] [:error] [pid 20603:tid 20629] [client 185.192.70.126:28697] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/w.php"] [unique_id "ae6ZTA_k682XZv20MXyhCwAAARU"]
[Mon Apr 27 07:01:33.543401 2026] [:error] [pid 20603:tid 20610] [client 185.192.70.134:36327] [client 185.192.70.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-http-client.php"] [unique_id "ae6ZTQ_k682XZv20MXyhEAAAAQI"]
[Mon Apr 27 07:01:34.361920 2026] [:error] [pid 22751:tid 22778] [client 185.192.70.127:55623] [client 185.192.70.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp-http-client.php"] [unique_id "ae6ZTic0tCpVyVdFok_n-QAAANg"]
[Mon Apr 27 07:01:35.176825 2026] [:error] [pid 22646:tid 22686] [client 185.192.70.131:48997] [client 185.192.70.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/tag-cloud/"] [unique_id "ae6ZT4k_HyZhTP6AYaeveAAAAEM"]
[Mon Apr 27 07:01:35.997933 2026] [:error] [pid 22751:tid 22765] [client 185.192.70.124:28805] [client 185.192.70.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/nic.php"] [unique_id "ae6ZTyc0tCpVyVdFok_n_QAAAMs"]
[Mon Apr 27 07:01:36.810023 2026] [:error] [pid 22751:tid 22760] [client 185.192.70.110:65403] [client 185.192.70.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "ae6ZUCc0tCpVyVdFok_oAgAAAMY"]
[Mon Apr 27 07:01:37.626469 2026] [:error] [pid 20603:tid 20628] [client 185.192.70.121:37291] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/wp-conflg.php"] [unique_id "ae6ZUQ_k682XZv20MXyhJwAAARQ"]
[Mon Apr 27 07:01:38.444099 2026] [:error] [pid 22647:tid 22712] [client 185.192.70.121:47651] [client 185.192.70.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "ae6ZUmjfVULTjnk5SzPDEwAAAII"]
[Mon Apr 27 07:01:39.258849 2026] [:error] [pid 22646:tid 22685] [client 185.192.70.126:41691] [client 185.192.70.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/autoload_classmap.php"] [unique_id "ae6ZU4k_HyZhTP6AYaevfwAAAEI"]
[Mon Apr 27 07:01:40.081527 2026] [:error] [pid 22646:tid 22692] [client 185.192.70.135:25879] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "ae6ZVIk_HyZhTP6AYaevgwAAAEk"]
[Mon Apr 27 07:01:40.900128 2026] [:error] [pid 22647:tid 22733] [client 185.192.70.129:45343] [client 185.192.70.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/api.php"] [unique_id "ae6ZVGjfVULTjnk5SzPDFwAAAJc"]
[Mon Apr 27 07:01:41.713972 2026] [:error] [pid 20603:tid 20609] [client 185.192.70.5:46505] [client 185.192.70.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/core.php"] [unique_id "ae6ZVQ_k682XZv20MXyhMQAAAQE"]
[Mon Apr 27 07:01:42.528536 2026] [:error] [pid 22645:tid 22656] [client 185.192.70.105:39305] [client 185.192.70.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/components/wp-cron-activation.php"] [unique_id "ae6ZVn-Pq2r302zQbMbEmAAAAAE"]
[Mon Apr 27 07:01:43.341566 2026] [:error] [pid 20603:tid 20619] [client 185.192.70.135:37209] [client 185.192.70.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-library/includes/"] [unique_id "ae6ZVw_k682XZv20MXyhMwAAAQs"]
[Mon Apr 27 07:01:44.160285 2026] [:error] [pid 22647:tid 22712] [client 185.192.70.102:59851] [client 185.192.70.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/base-styles/user/"] [unique_id "ae6ZWGjfVULTjnk5SzPDHwAAAII"]
[Mon Apr 27 07:01:44.979630 2026] [:error] [pid 22751:tid 22767] [client 185.192.70.122:28055] [client 185.192.70.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/abilities-api/Parse/"] [unique_id "ae6ZWCc0tCpVyVdFok_oDQAAAM0"]
[Mon Apr 27 07:01:45.793453 2026] [:error] [pid 20603:tid 20629] [client 185.192.70.118:38335] [client 185.192.70.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/html-api/"] [unique_id "ae6ZWQ_k682XZv20MXyhQAAAARU"]
[Mon Apr 27 08:38:12.586815 2026] [:error] [pid 50951:tid 50958] [client 149.102.94.161:28873] [client 149.102.94.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.94.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae6v9F2pquA9BEfFXTg2LQAAAUU"]
[Mon Apr 27 08:38:22.317958 2026] [:error] [pid 50951:tid 50971] [client 149.102.94.161:27350] [client 149.102.94.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.94.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae6v_l2pquA9BEfFXTg2SwAAAVI"]
[Mon Apr 27 08:38:32.890964 2026] [:error] [pid 50863:tid 50929] [client 149.102.94.161:28674] [client 149.102.94.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.94.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae6wCHPaUAmshuFrBc8-PAAAAMo"]
[Mon Apr 27 08:38:43.402439 2026] [:error] [pid 50951:tid 50961] [client 149.102.94.161:27470] [client 149.102.94.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.94.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae6wE12pquA9BEfFXTg2nAAAAUg"]
[Mon Apr 27 08:38:53.909753 2026] [:error] [pid 50951:tid 50971] [client 149.102.94.161:27622] [client 149.102.94.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.94.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae6wHV2pquA9BEfFXTg2ugAAAVI"]
[Mon Apr 27 09:30:22.343729 2026] [:error] [pid 6972:tid 7028] [client 174.67.236.147:4406] [client 174.67.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pages/about-us"] [unique_id "ae68LuJniPbCiT6NuKfLyAAAAUA"]
[Mon Apr 27 09:30:22.972471 2026] [:error] [pid 10896:tid 10917] [client 174.67.236.147:62245] [client 174.67.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pages/about-us"] [unique_id "ae68Ll7aFv2GLXAkamnSPgAAAFM"]
[Mon Apr 27 09:30:23.285728 2026] [:error] [pid 7056:tid 7071] [client 174.67.236.147:5838] [client 174.67.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pages/about-us"] [unique_id "ae68LyaiHlvwyvjHbet9KwAAAQw"]
[Mon Apr 27 09:30:23.617652 2026] [:error] [pid 10867:tid 10888] [client 174.67.236.147:36903] [client 174.67.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pages/about-us"] [unique_id "ae68L7OAkozQqeaYR1tcQwAAABI"]
[Mon Apr 27 09:30:24.247779 2026] [:error] [pid 10926:tid 10940] [client 174.67.236.147:59471] [client 174.67.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contact.php"] [unique_id "ae68MM5JVz6UQRubscMMqgAAAYw"]
[Mon Apr 27 09:30:24.875151 2026] [:error] [pid 7056:tid 7075] [client 174.67.236.147:28111] [client 174.67.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contact.php"] [unique_id "ae68MCaiHlvwyvjHbet9LQAAARA"]
[Mon Apr 27 09:30:25.187625 2026] [:error] [pid 10867:tid 10881] [client 174.67.236.147:17730] [client 174.67.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contact.php"] [unique_id "ae68MbOAkozQqeaYR1tcRwAAAAs"]
[Mon Apr 27 09:30:25.500870 2026] [:error] [pid 6970:tid 6978] [client 174.67.236.147:47692] [client 174.67.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/contact.php"] [unique_id "ae68MSs_dFVzfQoHW0RFEAAAAIQ"]
[Mon Apr 27 11:53:43.297309 2026] [:error] [pid 55881:tid 55921] [client 117.253.228.203:49496] [client 117.253.228.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.228.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7dx5w4Xkh9-1_nCViexQAAAMk"]
[Mon Apr 27 11:53:53.558489 2026] [:error] [pid 55967:tid 55983] [client 117.253.228.203:49969] [client 117.253.228.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.228.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7d0ZqILaJi17iamABsiQAAAA4"]
[Mon Apr 27 11:54:04.238576 2026] [:error] [pid 55880:tid 55896] [client 117.253.228.203:50573] [client 117.253.228.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.228.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7d3KN2h-rTwcbUWTCL0AAAAIw"]
[Mon Apr 27 11:54:14.852729 2026] [:error] [pid 55967:tid 55976] [client 117.253.228.203:50904] [client 117.253.228.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.228.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7d5pqILaJi17iamABsmwAAAAc"]
[Mon Apr 27 11:54:25.166556 2026] [:error] [pid 55881:tid 55936] [client 117.253.228.203:51217] [client 117.253.228.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.228.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7d8Zw4Xkh9-1_nCVie3wAAANg"]
[Mon Apr 27 12:07:53.853649 2026] [:error] [pid 55882:tid 55955] [client 106.219.70.73:13719] [client 106.219.70.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.70.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7hGRT-oLgX4cIe87MoRgAAAVA"]
[Mon Apr 27 12:08:04.123185 2026] [:error] [pid 55881:tid 55913] [client 106.219.70.73:9834] [client 106.219.70.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.70.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7hJJw4Xkh9-1_nCVihfQAAAME"]
[Mon Apr 27 12:08:14.796104 2026] [:error] [pid 55882:tid 55950] [client 106.219.70.73:16551] [client 106.219.70.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.70.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7hLhT-oLgX4cIe87MoVQAAAUs"]
[Mon Apr 27 12:08:25.461989 2026] [:error] [pid 55881:tid 55920] [client 106.219.70.73:19827] [client 106.219.70.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.70.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7hOZw4Xkh9-1_nCVihkAAAAMg"]
[Mon Apr 27 12:08:36.065919 2026] [:error] [pid 55967:tid 55991] [client 106.219.70.73:25920] [client 106.219.70.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.70.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7hRJqILaJi17iamABymwAAABY"]
[Mon Apr 27 12:37:14.118047 2026] [:error] [pid 62509:tid 62537] [client 120.71.59.24:33484] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae7n-twtbauadMz70GF28QAAAJU"]
[Mon Apr 27 13:10:19.198432 2026] [:error] [pid 62607:tid 62631] [client 103.98.210.88:990] [client 103.98.210.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.210.88, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7vu4Xk80_zcPo33veZIgAAAFY"]
[Mon Apr 27 13:10:29.288909 2026] [:error] [pid 62511:tid 62578] [client 103.98.210.88:1417] [client 103.98.210.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.210.88, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7vxbBjE-jhU4FY4HhoIAAAAUQ"]
[Mon Apr 27 13:10:39.858064 2026] [:error] [pid 62509:tid 62524] [client 103.98.210.88:1926] [client 103.98.210.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.210.88, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7vz9wtbauadMz70GF8xAAAAIg"]
[Mon Apr 27 13:10:50.449771 2026] [:error] [pid 62607:tid 62613] [client 103.98.210.88:50402] [client 103.98.210.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.210.88, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7v2oXk80_zcPo33veZVQAAAEQ"]
[Mon Apr 27 13:11:01.172200 2026] [:error] [pid 62607:tid 62618] [client 103.98.210.88:52539] [client 103.98.210.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.210.88, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7v5YXk80_zcPo33veZbwAAAEk"]
[Mon Apr 27 13:11:11.757985 2026] [:error] [pid 62607:tid 62627] [client 103.98.210.88:53300] [client 103.98.210.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.210.88, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7v74Xk80_zcPo33veZiAAAAFI"]
[Mon Apr 27 13:11:50.005376 2026] [:error] [pid 62607:tid 62614] [client 14.139.218.147:8340] [client 14.139.218.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.139.218.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7wFoXk80_zcPo33veaGAAAAEU"]
[Mon Apr 27 13:12:00.598562 2026] [:error] [pid 62607:tid 62633] [client 14.139.218.147:16682] [client 14.139.218.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.139.218.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7wIIXk80_zcPo33veaTwAAAFg"]
[Mon Apr 27 13:12:11.243545 2026] [:error] [pid 62607:tid 62609] [client 14.139.218.147:22398] [client 14.139.218.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.139.218.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7wK4Xk80_zcPo33veagwAAAEA"]
[Mon Apr 27 13:12:21.690305 2026] [:error] [pid 62607:tid 62624] [client 14.139.218.147:18067] [client 14.139.218.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.139.218.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7wNYXk80_zcPo33veanAAAAE8"]
[Mon Apr 27 13:12:32.393358 2026] [:error] [pid 62511:tid 62584] [client 14.139.218.147:4497] [client 14.139.218.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.139.218.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7wQLBjE-jhU4FY4HhpIAAAAUo"]
[Mon Apr 27 13:19:33.316921 2026] [:error] [pid 62607:tid 62610] [client 103.98.210.40:61747] [client 103.98.210.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.210.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7x5YXk80_zcPo33vedxwAAAEE"]
[Mon Apr 27 13:19:43.757021 2026] [:error] [pid 62510:tid 62551] [client 103.98.210.40:62402] [client 103.98.210.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.210.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7x74CpoM1jGOxUMpvxnAAAAMY"]
[Mon Apr 27 13:19:53.448909 2026] [:error] [pid 62511:tid 62596] [client 103.98.210.40:63600] [client 103.98.210.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.210.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7x-bBjE-jhU4FY4Hhq_AAAAVY"]
[Mon Apr 27 13:20:04.104803 2026] [:error] [pid 62511:tid 62582] [client 103.98.210.40:64534] [client 103.98.210.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.210.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7yBLBjE-jhU4FY4HhrBAAAAUg"]
[Mon Apr 27 13:20:14.733358 2026] [:error] [pid 62509:tid 62534] [client 103.98.210.40:65086] [client 103.98.210.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.98.210.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae7yDtwtbauadMz70GF--gAAAJI"]
[Mon Apr 27 13:51:52.680335 2026] [:error] [pid 62509:tid 62521] [client 34.55.86.97:65001] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/media/system/js/core.js"] [unique_id "ae75eNwtbauadMz70GGE3wAAAIY"]
[Mon Apr 27 14:05:06.378355 2026] [:error] [pid 62607:tid 62612] [client 43.153.107.22:56750] [client 43.153.107.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae78koXk80_zcPo33ve0nAAAAEM"]
[Mon Apr 27 14:51:49.569114 2026] [autoindex:error] [pid 41098:tid 41113] [client 20.255.80.192:2508] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 14:51:49.687982 2026] [proxy_fcgi:error] [pid 41098:tid 41119] [client 20.255.80.192:2508] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 14:51:50.783292 2026] [autoindex:error] [pid 41098:tid 41123] [client 20.255.80.192:2508] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 14:52:00.842939 2026] [:error] [pid 41098:tid 41103] [client 20.255.80.192:2508] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/GOD.php"] [unique_id "ae8HkOIJ72vFwurGAAswwgAAAAM"]
[Mon Apr 27 14:52:01.333396 2026] [:error] [pid 41009:tid 41035] [client 20.255.80.192:9177] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/GOD.php"] [unique_id "ae8HkdANrlkTbZMXYE1_kQAAAZU"]
[Mon Apr 27 14:52:01.828345 2026] [:error] [pid 41011:tid 41071] [client 20.255.80.192:2525] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/GOD.php"] [unique_id "ae8HkQsl5QfsSXIdF6EAVAAAAgI"]
[Mon Apr 27 14:52:02.305404 2026] [:error] [pid 41009:tid 41023] [client 20.255.80.192:2521] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/GOD.php"] [unique_id "ae8HktANrlkTbZMXYE1_kgAAAYk"]
[Mon Apr 27 15:28:20.342941 2026] [:error] [pid 41011:tid 41073] [client 2.50.172.82:54231] [client 2.50.172.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.50.172.82, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae8QFAsl5QfsSXIdF6ENFwAAAgQ"]
[Mon Apr 27 15:28:30.793896 2026] [:error] [pid 41010:tid 41057] [client 2.50.172.82:54771] [client 2.50.172.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.50.172.82, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae8QHjc-oOrM_e97_4DlXwAAAc8"]
[Mon Apr 27 15:28:41.501186 2026] [:error] [pid 41098:tid 41112] [client 2.50.172.82:55117] [client 2.50.172.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.50.172.82, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae8QKeIJ72vFwurGAAtGIgAAAAw"]
[Mon Apr 27 18:42:46.273105 2026] [:error] [pid 61339:tid 61364] [client 209.141.56.175:5319] [client 209.141.56.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.56.175, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae89piHHVuv2RN6lIrhrSgAAAFc"]
[Mon Apr 27 18:42:47.124037 2026] [proxy_fcgi:error] [pid 61339:tid 61364] [client 209.141.56.175:5319] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 27 18:43:36.606364 2026] [:error] [pid 61339:tid 61351] [client 209.141.56.175:11571] [client 209.141.56.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.56.175, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae892CHHVuv2RN6lIrhrpwAAAEo"]
[Mon Apr 27 18:43:37.632691 2026] [proxy_fcgi:error] [pid 61339:tid 61351] [client 209.141.56.175:11571] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 27 19:00:56.255815 2026] [:error] [pid 41098:tid 41108] [client 37.98.230.245:60217] [client 37.98.230.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.98.230.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9B6OIJ72vFwurGAAt_rQAAAAg"]
[Mon Apr 27 19:00:59.189418 2026] [:error] [pid 41011:tid 41087] [client 37.98.230.245:60273] [client 37.98.230.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.98.230.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9B6wsl5QfsSXIdF6FNwAAAAhI"]
[Mon Apr 27 19:09:36.194647 2026] [:error] [pid 61339:tid 61348] [client 43.133.187.11:52960] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae9D8CHHVuv2RN6lIrh6PAAAAEc"]
[Mon Apr 27 19:40:39.226320 2026] [:error] [pid 61339:tid 61365] [client 124.29.221.226:7052] [client 124.29.221.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.29.221.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9LNyHHVuv2RN6lIriHYwAAAFg"]
[Mon Apr 27 19:40:49.763314 2026] [:error] [pid 61339:tid 61353] [client 124.29.221.226:7778] [client 124.29.221.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.29.221.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9LQSHHVuv2RN6lIriHhQAAAEw"]
[Mon Apr 27 19:55:51.973606 2026] [:error] [pid 5686:tid 5700] [client 124.29.221.226:7949] [client 124.29.221.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.29.221.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9Oxxcinw5wXX1GgKhE3wAAAYQ"]
[Mon Apr 27 19:56:41.249682 2026] [:error] [pid 5687:tid 5740] [client 124.29.221.226:8440] [client 124.29.221.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.29.221.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9O-fV0ZjE4BqstkBSuIAAAAdA"]
[Mon Apr 27 19:56:48.787929 2026] [:error] [pid 5783:tid 5804] [client 124.29.221.226:7369] [client 124.29.221.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.29.221.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9PANGYC9akv7hyhJVJLAAAAFM"]
[Mon Apr 27 20:29:00.854040 2026] [:error] [pid 13554:tid 13573] [client 68.183.17.152:56033] [client 68.183.17.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.17.152, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae9WjHJx87Dl-xMmL91ukAAAANE"]
[Mon Apr 27 20:29:02.994916 2026] [:error] [pid 13523:tid 13528] [client 68.183.17.152:52996] [client 68.183.17.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.17.152, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae9Wjueav51IXKv1ebHkrgAAAIM"]
[Mon Apr 27 20:29:05.177685 2026] [proxy_fcgi:error] [pid 13523:tid 13528] [client 68.183.17.152:52996] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon Apr 27 20:41:14.156655 2026] [:error] [pid 13465:tid 13499] [client 202.126.88.204:47436] [client 202.126.88.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.126.88.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9Zav19I-6GBJQxn_ipcwAAAEQ"]
[Mon Apr 27 20:41:24.307855 2026] [:error] [pid 13554:tid 13560] [client 202.126.88.204:22370] [client 202.126.88.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.126.88.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9ZdHJx87Dl-xMmL913awAAAMQ"]
[Mon Apr 27 20:41:34.877794 2026] [:error] [pid 13554:tid 13568] [client 202.126.88.204:22468] [client 202.126.88.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.126.88.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9ZfnJx87Dl-xMmL913ewAAAMw"]
[Mon Apr 27 20:41:45.458210 2026] [:error] [pid 13523:tid 13543] [client 202.126.88.204:48255] [client 202.126.88.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.126.88.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9Zieeav51IXKv1ebHrnAAAAJI"]
[Mon Apr 27 20:41:55.908100 2026] [:error] [pid 13464:tid 13488] [client 202.126.88.204:20925] [client 202.126.88.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.126.88.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9Zk2IEa0q6oQ95zvEfEwAAAdQ"]
[Mon Apr 27 20:42:06.386117 2026] [:error] [pid 13465:tid 13514] [client 202.126.88.204:48778] [client 202.126.88.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.126.88.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9Znv19I-6GBJQxn_ip9QAAAFM"]
[Mon Apr 27 20:46:08.757766 2026] [:error] [pid 13465:tid 13505] [client 98.97.76.127:4577] [client 98.97.76.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.97.76.127, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9akP19I-6GBJQxn_iqugAAAEo"]
[Mon Apr 27 20:46:18.931665 2026] [:error] [pid 13554:tid 13561] [client 98.97.76.127:1992] [client 98.97.76.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.97.76.127, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9amnJx87Dl-xMmL9144QAAAMU"]
[Mon Apr 27 20:46:29.485787 2026] [:error] [pid 13464:tid 13490] [client 98.97.76.127:38809] [client 98.97.76.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.97.76.127, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9apWIEa0q6oQ95zvEfrQAAAdY"]
[Mon Apr 27 20:46:40.013439 2026] [:error] [pid 13523:tid 13549] [client 98.97.76.127:15247] [client 98.97.76.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.97.76.127, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9asOeav51IXKv1ebHs4wAAAJg"]
[Mon Apr 27 21:52:59.042089 2026] [:error] [pid 31555:tid 31562] [client 122.178.166.63:56273] [client 122.178.166.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.178.166.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9qO7JDZf3DNaSMAJ1WlQAAAAU"]
[Mon Apr 27 21:53:09.634143 2026] [:error] [pid 31555:tid 31557] [client 122.178.166.63:56607] [client 122.178.166.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.178.166.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9qRbJDZf3DNaSMAJ1WpQAAAAA"]
[Mon Apr 27 21:53:20.488622 2026] [:error] [pid 13554:tid 13563] [client 122.178.166.63:56919] [client 122.178.166.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.178.166.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9qUHJx87Dl-xMmL92UwgAAAMc"]
[Mon Apr 27 21:53:31.351611 2026] [:error] [pid 31555:tid 31574] [client 122.178.166.63:57233] [client 122.178.166.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.178.166.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9qW7JDZf3DNaSMAJ1WwQAAABE"]
[Mon Apr 27 21:53:43.007280 2026] [:error] [pid 13523:tid 13537] [client 122.178.166.63:57553] [client 122.178.166.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.178.166.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9qZ-eav51IXKv1ebEDSgAAAIw"]
[Mon Apr 27 22:08:16.651018 2026] [:error] [pid 13554:tid 13574] [client 37.41.207.103:63280] [client 37.41.207.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.207.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9t0HJx87Dl-xMmL92aqAAAANI"]
[Mon Apr 27 22:08:26.836136 2026] [:error] [pid 13523:tid 13538] [client 37.41.207.103:63710] [client 37.41.207.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.207.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9t2ueav51IXKv1ebEGzwAAAI0"]
[Mon Apr 27 22:08:37.537642 2026] [:error] [pid 31555:tid 31557] [client 37.41.207.103:64069] [client 37.41.207.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.207.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9t5bJDZf3DNaSMAJ1eyQAAAAA"]
[Mon Apr 27 22:08:48.490157 2026] [:error] [pid 13554:tid 13558] [client 37.41.207.103:64433] [client 37.41.207.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.207.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9t8HJx87Dl-xMmL92bKAAAAMI"]
[Mon Apr 27 22:08:59.624463 2026] [:error] [pid 13554:tid 13562] [client 37.41.207.103:64797] [client 37.41.207.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.207.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae9t-3Jx87Dl-xMmL92bKgAAAMY"]
[Mon Apr 27 22:36:41.765002 2026] [:error] [pid 13554:tid 13567] [client 41.60.119.27:62084] [client 41.60.119.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.60.119.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae90eXJx87Dl-xMmL92l4AAAAMs"]
[Mon Apr 27 22:36:51.506948 2026] [:error] [pid 31555:tid 31570] [client 41.60.119.27:62574] [client 41.60.119.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.60.119.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae90g7JDZf3DNaSMAJ1raQAAAA0"]
[Mon Apr 27 22:37:02.123504 2026] [:error] [pid 13554:tid 13571] [client 41.60.119.27:63140] [client 41.60.119.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.60.119.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae90jnJx87Dl-xMmL92l8gAAAM8"]
[Mon Apr 27 22:37:12.825437 2026] [:error] [pid 31555:tid 31557] [client 41.60.119.27:37783] [client 41.60.119.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.60.119.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae90mLJDZf3DNaSMAJ1rfwAAAAA"]
[Mon Apr 27 22:37:23.353277 2026] [:error] [pid 13554:tid 13563] [client 41.60.119.27:31243] [client 41.60.119.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.60.119.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae90o3Jx87Dl-xMmL92mCAAAAMc"]
[Mon Apr 27 22:40:05.278903 2026] [:error] [pid 13554:tid 13558] [client 43.166.242.189:34716] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae91RXJx87Dl-xMmL92m2wAAAMI"]
[Mon Apr 27 23:01:40.601101 2026] [autoindex:error] [pid 13464:tid 13473] [client 52.141.35.48:4840] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 23:01:40.753757 2026] [:error] [pid 13464:tid 13472] [client 52.141.35.48:4840] [client 52.141.35.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.141.35.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae96VGIEa0q6oQ95zvE3ygAAAcQ"]
[Mon Apr 27 23:01:45.830906 2026] [autoindex:error] [pid 13464:tid 13469] [client 52.141.35.48:4840] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 23:01:46.003126 2026] [autoindex:error] [pid 13464:tid 13479] [client 52.141.35.48:4840] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 23:01:47.133761 2026] [autoindex:error] [pid 13464:tid 13470] [client 52.141.35.48:4840] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 23:01:52.156302 2026] [autoindex:error] [pid 13464:tid 13489] [client 52.141.35.48:4840] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 23:01:53.298499 2026] [:error] [pid 13464:tid 13477] [client 52.141.35.48:4840] [client 52.141.35.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ae96YWIEa0q6oQ95zvE36gAAAck"]
[Mon Apr 27 23:01:55.000933 2026] [:error] [pid 13554:tid 13567] [client 52.141.35.48:8832] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ae96YnJx87Dl-xMmL92vJAAAAMs"]
[Mon Apr 27 23:01:55.567898 2026] [:error] [pid 31555:tid 31559] [client 52.141.35.48:4979] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ae96Y7JDZf3DNaSMAJ14vQAAAAI"]
[Mon Apr 27 23:01:56.134210 2026] [:error] [pid 31555:tid 31581] [client 52.141.35.48:4823] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ae96ZLJDZf3DNaSMAJ14vgAAABg"]
[Mon Apr 27 23:01:56.704923 2026] [:error] [pid 31555:tid 31573] [client 52.141.35.48:17709] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ae96ZLJDZf3DNaSMAJ14wAAAABA"]
[Mon Apr 27 23:09:26.883597 2026] [:error] [pid 13465:tid 13495] [client 122.164.127.47:55611] [client 122.164.127.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.164.127.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae98Jv19I-6GBJQxn_jMsAAAAEA"]
[Mon Apr 27 23:09:37.450751 2026] [:error] [pid 13523:tid 13546] [client 122.164.127.47:56139] [client 122.164.127.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.164.127.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae98Meeav51IXKv1ebEXBgAAAJU"]
[Mon Apr 27 23:09:47.804534 2026] [:error] [pid 31555:tid 31577] [client 122.164.127.47:56713] [client 122.164.127.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.164.127.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae98O7JDZf3DNaSMAJ18iAAAABQ"]
[Mon Apr 27 23:09:58.296120 2026] [:error] [pid 13465:tid 13517] [client 122.164.127.47:57122] [client 122.164.127.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.164.127.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae98Rv19I-6GBJQxn_jMzgAAAFY"]
[Mon Apr 27 23:10:08.856492 2026] [:error] [pid 13523:tid 13542] [client 122.164.127.47:57527] [client 122.164.127.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.164.127.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae98UOeav51IXKv1ebEXKQAAAJE"]
[Mon Apr 27 23:35:26.138301 2026] [:error] [pid 13523:tid 13545] [client 138.117.222.20:2831] [client 138.117.222.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.117.222.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae-CPueav51IXKv1ebEe2QAAAJQ"]
[Mon Apr 27 23:35:35.821682 2026] [:error] [pid 13523:tid 13548] [client 138.117.222.20:2736] [client 138.117.222.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.117.222.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae-CR-eav51IXKv1ebEe3wAAAJc"]
[Mon Apr 27 23:35:46.374865 2026] [:error] [pid 13523:tid 13540] [client 138.117.222.20:2643] [client 138.117.222.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.117.222.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae-CUueav51IXKv1ebEe5gAAAI8"]
[Mon Apr 27 23:35:57.019954 2026] [:error] [pid 13554:tid 13580] [client 138.117.222.20:2671] [client 138.117.222.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.117.222.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae-CXXJx87Dl-xMmL9268wAAANg"]
[Mon Apr 27 23:36:07.918328 2026] [:error] [pid 13554:tid 13566] [client 138.117.222.20:2738] [client 138.117.222.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.117.222.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae-CZ3Jx87Dl-xMmL927GQAAAMo"]
[Mon Apr 27 23:44:20.303964 2026] [:error] [pid 13464:tid 13482] [client 211.20.143.78:48501] [client 211.20.143.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "ae-EVGIEa0q6oQ95zvE_ZQAAAc4"]
[Mon Apr 27 23:45:06.091845 2026] [:error] [pid 31555:tid 31581] [client 211.20.143.78:17747] [client 211.20.143.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "ae-EgrJDZf3DNaSMAJ2PHAAAABg"]
[Mon Apr 27 23:47:54.027044 2026] [:error] [pid 13523:tid 13544] [client 211.20.143.78:31509] [client 211.20.143.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ae-FKueav51IXKv1ebEhuAAAAJM"]
[Mon Apr 27 23:48:40.967843 2026] [:error] [pid 31555:tid 31561] [client 211.20.143.78:34621] [client 211.20.143.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ae-FWLJDZf3DNaSMAJ2RVgAAAAQ"]
[Tue Apr 28 00:33:52.553775 2026] [:error] [pid 13554:tid 13568] [client 211.20.143.78:62185] [client 211.20.143.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ae-P8HJx87Dl-xMmL93NogAAAMw"]
[Tue Apr 28 00:34:29.178217 2026] [:error] [pid 31555:tid 31570] [client 211.20.143.78:64009] [client 211.20.143.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ae-QFbJDZf3DNaSMAJ2p1AAAAA0"]
[Tue Apr 28 00:37:08.182569 2026] [:error] [pid 31555:tid 31570] [client 211.20.143.78:19657] [client 211.20.143.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ae-QtLJDZf3DNaSMAJ2qmwAAAA0"]
[Tue Apr 28 00:37:52.973623 2026] [:error] [pid 13554:tid 13575] [client 211.20.143.78:34447] [client 211.20.143.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ae-Q4HJx87Dl-xMmL93ONQAAANM"]
[Tue Apr 28 00:40:33.464507 2026] [:error] [pid 31555:tid 31571] [client 211.20.143.78:56213] [client 211.20.143.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ae-RgbJDZf3DNaSMAJ2ruQAAAA4"]
[Tue Apr 28 00:41:03.658734 2026] [:error] [pid 13554:tid 13580] [client 211.20.143.78:35823] [client 211.20.143.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ae-Rn3Jx87Dl-xMmL93OswAAANg"]
[Tue Apr 28 01:48:38.503492 2026] [:error] [pid 13464:tid 13488] [client 144.48.130.2:9293] [client 144.48.130.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.130.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae-hdmIEa0q6oQ95zvFPmgAAAdQ"]
[Tue Apr 28 01:48:48.840834 2026] [:error] [pid 31555:tid 31573] [client 144.48.130.2:9323] [client 144.48.130.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.130.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae-hgLJDZf3DNaSMAJ3ArwAAABA"]
[Tue Apr 28 01:48:59.530066 2026] [:error] [pid 48914:tid 48940] [client 144.48.130.2:8976] [client 144.48.130.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.130.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae-hi3wuHR_nwT9alH8c_wAAAVc"]
[Tue Apr 28 01:49:10.141189 2026] [:error] [pid 42612:tid 42766] [client 144.48.130.2:8837] [client 144.48.130.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.130.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae-hljCDyZvIG2oFcJ7hKAAAAQk"]
[Tue Apr 28 01:49:20.762525 2026] [:error] [pid 13465:tid 13510] [client 144.48.130.2:9920] [client 144.48.130.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.130.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae-hoP19I-6GBJQxn_jxnwAAAE8"]
[Tue Apr 28 01:49:31.349965 2026] [:error] [pid 36747:tid 36770] [client 144.48.130.2:9091] [client 144.48.130.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 144.48.130.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae-hq89QpT00aPhkIcdjPwAAAZU"]
[Tue Apr 28 02:25:08.113621 2026] [:error] [pid 48914:tid 48926] [client 182.40.104.255:41980] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae-qBHwuHR_nwT9alH8i6wAAAUk"]
[Tue Apr 28 03:06:30.088251 2026] [:error] [pid 36747:tid 36770] [client 43.153.10.13:42560] [client 43.153.10.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae-zts9QpT00aPhkIcdz0gAAAZU"]
[Tue Apr 28 03:08:01.714405 2026] [:error] [pid 13554:tid 13570] [client 185.194.178.83:58993] [client 185.194.178.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.83, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae-0EXJx87Dl-xMmL930hwAAAM4"]
[Tue Apr 28 03:08:03.321344 2026] [proxy_fcgi:error] [pid 13554:tid 13570] [client 185.194.178.83:58993] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 28 04:21:20.847347 2026] [:error] [pid 14686:tid 14709] [client 185.194.178.90:42407] [client 185.194.178.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.90, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae_FQO-YPF1Xm7uiWQ7zIgAAANQ"]
[Tue Apr 28 04:21:21.729175 2026] [proxy_fcgi:error] [pid 14686:tid 14709] [client 185.194.178.90:42407] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 28 04:29:23.918114 2026] [:error] [pid 14579:tid 14647] [client 185.194.178.94:31251] [client 185.194.178.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae_HIxrUiOG83qKKuuDHpQAAAIc"]
[Tue Apr 28 04:29:24.900835 2026] [proxy_fcgi:error] [pid 14579:tid 14647] [client 185.194.178.94:31251] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 28 04:37:38.199790 2026] [:error] [pid 14579:tid 14662] [client 185.194.178.71:59879] [client 185.194.178.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.71, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae_JEhrUiOG83qKKuuDK_AAAAJY"]
[Tue Apr 28 04:37:39.086906 2026] [proxy_fcgi:error] [pid 14579:tid 14662] [client 185.194.178.71:59879] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 28 06:01:43.366314 2026] [:error] [pid 6746:tid 6765] [client 179.43.158.3:54151] [client 179.43.158.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.43.158.3, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae_cx7uStsbXtMDpzS-UoAAAAVE"]
[Tue Apr 28 06:01:49.495198 2026] [:error] [pid 56602:tid 56625] [client 179.43.158.3:54514] [client 179.43.158.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.43.158.3, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae_czfCwhMxzNW_lZSwy7QAAARU"]
[Tue Apr 28 06:01:52.951678 2026] [:error] [pid 14578:tid 14635] [client 179.43.158.3:54687] [client 179.43.158.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.43.158.3, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae_c0Ongo3AwIJgfSHH-7wAAAFY"]
[Tue Apr 28 06:03:20.646951 2026] [:error] [pid 14686:tid 14695] [client 143.105.155.53:1829] [client 143.105.155.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.155.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae_dKO-YPF1Xm7uiWQ4tcQAAAMY"]
[Tue Apr 28 06:03:30.025782 2026] [:error] [pid 14579:tid 14663] [client 143.105.155.53:53443] [client 143.105.155.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.155.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae_dMhrUiOG83qKKuuDwWwAAAJc"]
[Tue Apr 28 06:03:40.658770 2026] [:error] [pid 14578:tid 14628] [client 143.105.155.53:6912] [client 143.105.155.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.155.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae_dPOngo3AwIJgfSHH_ZQAAAE8"]
[Tue Apr 28 06:03:51.450993 2026] [:error] [pid 14579:tid 14646] [client 143.105.155.53:58402] [client 143.105.155.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.155.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae_dRxrUiOG83qKKuuDwdwAAAIY"]
[Tue Apr 28 06:04:02.151964 2026] [:error] [pid 14578:tid 14634] [client 143.105.155.53:15349] [client 143.105.155.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.155.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ae_dUungo3AwIJgfSHH_bAAAAFU"]
[Tue Apr 28 06:15:18.788712 2026] [autoindex:error] [pid 14577:tid 14600] [client 52.141.35.48:11653] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:15:18.944310 2026] [:error] [pid 14577:tid 14605] [client 52.141.35.48:11653] [client 52.141.35.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.141.35.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae_f9izBH-jwzlgiBdG1vgAAABM"]
[Tue Apr 28 06:15:24.251247 2026] [autoindex:error] [pid 14577:tid 14610] [client 52.141.35.48:11653] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:15:24.395018 2026] [autoindex:error] [pid 14577:tid 14591] [client 52.141.35.48:11653] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:15:25.557744 2026] [autoindex:error] [pid 14577:tid 14599] [client 52.141.35.48:11653] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:15:31.894654 2026] [autoindex:error] [pid 14577:tid 14603] [client 52.141.35.48:11653] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 06:15:33.060298 2026] [:error] [pid 14577:tid 14590] [client 52.141.35.48:11653] [client 52.141.35.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ae_gBSzBH-jwzlgiBdG10gAAAAQ"]
[Tue Apr 28 06:15:34.817120 2026] [:error] [pid 14577:tid 14586] [client 52.141.35.48:10803] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ae_gBizBH-jwzlgiBdG11gAAAAA"]
[Tue Apr 28 06:15:35.380343 2026] [:error] [pid 14686:tid 14694] [client 52.141.35.48:11691] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ae_gB--YPF1Xm7uiWQ4v7gAAAMU"]
[Tue Apr 28 06:15:35.948301 2026] [:error] [pid 14578:tid 14629] [client 52.141.35.48:10780] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ae_gB-ngo3AwIJgfSHEITAAAAFA"]
[Tue Apr 28 06:15:36.524447 2026] [:error] [pid 14577:tid 14609] [client 52.141.35.48:10778] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ae_gCCzBH-jwzlgiBdG12AAAABc"]
[Tue Apr 28 06:32:24.063356 2026] [:error] [pid 56602:tid 56606] [client 185.194.178.57:31883] [client 185.194.178.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ae_j-PCwhMxzNW_lZSw72wAAAQI"]
[Tue Apr 28 06:32:25.038843 2026] [proxy_fcgi:error] [pid 56602:tid 56606] [client 185.194.178.57:31883] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 28 07:11:35.708992 2026] [:error] [pid 28675:tid 28691] [client 49.51.195.195:38506] [client 49.51.195.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ae_tJ8j4kYB-5Px4fOf2qAAAAA4"]
[Tue Apr 28 08:25:55.038481 2026] [:error] [pid 50889:tid 50896] [client 20.100.183.137:9268] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ae_-k4zszBr00txEzGh-LQAAAAQ"]
[Tue Apr 28 08:25:56.077132 2026] [:error] [pid 33777:tid 33850] [client 20.100.183.137:23483] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ae_-lLXUCFWqmordGGLT7gAAAQ8"]
[Tue Apr 28 08:25:57.135669 2026] [:error] [pid 33775:tid 33784] [client 20.100.183.137:23428] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ae_-lZsYOcoQrq88YbXV-wAAAMU"]
[Tue Apr 28 08:25:58.183500 2026] [:error] [pid 50889:tid 50910] [client 20.100.183.137:8169] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ae_-lozszBr00txEzGh-MQAAABI"]
[Tue Apr 28 08:39:41.412930 2026] [:error] [pid 50889:tid 50909] [client 114.10.39.2:6832] [client 114.10.39.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.10.39.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afABzYzszBr00txEzGiGwwAAABE"]
[Tue Apr 28 08:39:52.849358 2026] [:error] [pid 33864:tid 33873] [client 114.10.39.2:6833] [client 114.10.39.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.10.39.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAB2DXchLGZ4QggCsmX0AAAAIc"]
[Tue Apr 28 08:40:04.009736 2026] [:error] [pid 33864:tid 33867] [client 114.10.39.2:6835] [client 114.10.39.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.10.39.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAB5DXchLGZ4QggCsmX4QAAAIE"]
[Tue Apr 28 08:40:14.550396 2026] [:error] [pid 50889:tid 50908] [client 114.10.39.2:6836] [client 114.10.39.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.10.39.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAB7ozszBr00txEzGiH2gAAABA"]
[Tue Apr 28 08:41:38.907319 2026] [:error] [pid 50889:tid 50898] [client 114.10.39.2:6837] [client 114.10.39.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.10.39.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afACQozszBr00txEzGiJigAAAAY"]
[Tue Apr 28 08:41:49.415524 2026] [:error] [pid 33775:tid 33784] [client 114.10.39.2:6838] [client 114.10.39.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.10.39.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afACTZsYOcoQrq88YbXZQQAAAMU"]
[Tue Apr 28 08:57:16.450919 2026] [:error] [pid 33775:tid 33794] [client 177.133.139.218:63659] [client 177.133.139.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.133.139.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAF7JsYOcoQrq88YbXcQQAAAM8"]
[Tue Apr 28 08:57:25.506996 2026] [:error] [pid 33864:tid 33881] [client 177.133.139.218:64060] [client 177.133.139.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.133.139.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAF9TXchLGZ4QggCsmdqgAAAI8"]
[Tue Apr 28 08:57:36.007694 2026] [:error] [pid 33775:tid 33789] [client 177.133.139.218:64400] [client 177.133.139.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.133.139.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAGAJsYOcoQrq88YbXcWwAAAMo"]
[Tue Apr 28 08:57:46.677520 2026] [:error] [pid 33776:tid 33831] [client 177.133.139.218:64763] [client 177.133.139.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.133.139.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAGCl-bEJ2CKP3iKADKlwAAAFc"]
[Tue Apr 28 08:57:57.206091 2026] [:error] [pid 33776:tid 33809] [client 177.133.139.218:65114] [client 177.133.139.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.133.139.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAGFV-bEJ2CKP3iKADKoQAAAEE"]
[Tue Apr 28 11:07:54.757333 2026] [:error] [pid 50889:tid 50908] [client 124.43.5.103:48217] [client 124.43.5.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.43.5.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAkiozszBr00txEzGjCowAAABA"]
[Tue Apr 28 11:08:11.685548 2026] [:error] [pid 33864:tid 33883] [client 124.43.5.103:44035] [client 124.43.5.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.43.5.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAkmzXchLGZ4QggCsm8tAAAAJE"]
[Tue Apr 28 11:08:28.626104 2026] [:error] [pid 33775:tid 33798] [client 124.43.5.103:29503] [client 124.43.5.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.43.5.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAkrJsYOcoQrq88YbXuRAAAANM"]
[Tue Apr 28 11:08:41.589409 2026] [:error] [pid 33864:tid 33876] [client 124.43.5.103:45129] [client 124.43.5.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.43.5.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAkuTXchLGZ4QggCsm8vQAAAIo"]
[Tue Apr 28 11:08:56.793832 2026] [:error] [pid 50889:tid 50896] [client 124.43.5.103:1201] [client 124.43.5.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.43.5.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afAkyIzszBr00txEzGjDJgAAAAQ"]
[Tue Apr 28 11:45:42.032774 2026] [:error] [pid 50889:tid 50906] [client 43.157.150.69:57832] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afAtZozszBr00txEzGjVcQAAAA4"]
[Tue Apr 28 13:01:07.724148 2026] [:error] [pid 33776:tid 33816] [client 202.173.125.190:55420] [client 202.173.125.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.173.125.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afA_E1-bEJ2CKP3iKADzYAAAAEg"]
[Tue Apr 28 13:01:10.619505 2026] [:error] [pid 33777:tid 33854] [client 202.173.125.190:54760] [client 202.173.125.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.173.125.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afA_FrXUCFWqmordGGIwEgAAARM"]
[Tue Apr 28 13:01:18.255568 2026] [:error] [pid 2741:tid 2760] [client 202.173.125.190:55219] [client 202.173.125.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.173.125.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afA_Hvp92FeOz1h6ILxz4QAAAU4"]
[Tue Apr 28 13:01:21.311735 2026] [:error] [pid 33777:tid 33847] [client 202.173.125.190:54812] [client 202.173.125.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.173.125.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afA_IbXUCFWqmordGGIwHAAAAQw"]
[Tue Apr 28 13:01:28.949294 2026] [:error] [pid 33776:tid 33827] [client 202.173.125.190:54842] [client 202.173.125.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.173.125.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afA_KF-bEJ2CKP3iKADzawAAAFM"]
[Tue Apr 28 13:01:32.051393 2026] [:error] [pid 33864:tid 33867] [client 202.173.125.190:55001] [client 202.173.125.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.173.125.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afA_LDXchLGZ4QggCsnVvQAAAIE"]
[Tue Apr 28 13:11:04.144547 2026] [:error] [pid 33777:tid 33842] [client 65.111.11.83:49887] [client 65.111.11.83] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/s3cmd.ini"] [unique_id "afBBaLXUCFWqmordGGIzbQAAAQc"]
[Tue Apr 28 13:26:12.174178 2026] [:error] [pid 50889:tid 50901] [client 202.46.26.37:62479] [client 202.46.26.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.46.26.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBE9IzszBr00txEzGjtQgAAAAk"]
[Tue Apr 28 13:26:22.137292 2026] [:error] [pid 33776:tid 33816] [client 202.46.26.37:62920] [client 202.46.26.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.46.26.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBE_l-bEJ2CKP3iKAD3NwAAAEg"]
[Tue Apr 28 13:26:32.763227 2026] [:error] [pid 50889:tid 50903] [client 202.46.26.37:63235] [client 202.46.26.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.46.26.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBFCIzszBr00txEzGjtUQAAAAs"]
[Tue Apr 28 13:41:22.501222 2026] [:error] [pid 33777:tid 33844] [client 202.46.27.154:60967] [client 202.46.27.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.46.27.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBIgrXUCFWqmordGGJAzAAAAQk"]
[Tue Apr 28 13:41:33.010691 2026] [:error] [pid 33864:tid 33887] [client 202.46.27.154:61528] [client 202.46.27.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.46.27.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBIjTXchLGZ4QggCsnbuQAAAJU"]
[Tue Apr 28 13:50:49.752370 2026] [:error] [pid 33777:tid 33838] [client 94.26.106.23:59381] [client 94.26.106.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afBKubXUCFWqmordGGJEmgAAAQM"]
[Tue Apr 28 13:50:50.585016 2026] [proxy_fcgi:error] [pid 33777:tid 33838] [client 94.26.106.23:59381] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 28 13:50:57.973748 2026] [:error] [pid 33777:tid 33855] [client 94.26.106.23:59381] [client 94.26.106.23] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afBKwbXUCFWqmordGGJEtgAAARQ"]
[Tue Apr 28 13:50:58.371877 2026] [:error] [pid 33777:tid 33841] [client 94.26.106.23:59381] [client 94.26.106.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afBKwrXUCFWqmordGGJEuAAAAQY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 28 13:50:59.258299 2026] [proxy_fcgi:error] [pid 33777:tid 33841] [client 94.26.106.23:59381] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 28 13:51:03.968566 2026] [:error] [pid 33777:tid 33850] [client 94.26.106.23:59381] [client 94.26.106.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afBKx7XUCFWqmordGGJEyAAAAQ8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 28 13:51:04.907890 2026] [proxy_fcgi:error] [pid 33777:tid 33850] [client 94.26.106.23:59381] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 28 13:51:08.167296 2026] [:error] [pid 33777:tid 33845] [client 94.26.106.23:59381] [client 94.26.106.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afBKzLXUCFWqmordGGJEzwAAAQo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 28 13:51:09.144111 2026] [proxy_fcgi:error] [pid 33777:tid 33845] [client 94.26.106.23:59381] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue Apr 28 14:07:45.989865 2026] [:error] [pid 2741:tid 2753] [client 154.192.112.199:41200] [client 154.192.112.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.192.112.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBOsfp92FeOz1h6ILyHCQAAAUc"]
[Tue Apr 28 14:55:20.921413 2026] [:error] [pid 50889:tid 50902] [client 176.203.173.118:52460] [client 176.203.173.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.203.173.118, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBZ2IzszBr00txEzGgB0gAAAAo"]
[Tue Apr 28 14:55:30.986469 2026] [:error] [pid 2741:tid 2753] [client 176.203.173.118:52808] [client 176.203.173.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.203.173.118, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBZ4vp92FeOz1h6ILyYFAAAAUc"]
[Tue Apr 28 14:55:41.622467 2026] [:error] [pid 33777:tid 33850] [client 176.203.173.118:52789] [client 176.203.173.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.203.173.118, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBZ7bXUCFWqmordGGJkgQAAAQ8"]
[Tue Apr 28 14:55:52.141969 2026] [:error] [pid 33776:tid 33832] [client 176.203.173.118:52832] [client 176.203.173.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.203.173.118, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBZ-F-bEJ2CKP3iKAADrwAAAFg"]
[Tue Apr 28 14:56:02.791305 2026] [:error] [pid 33776:tid 33812] [client 176.203.173.118:52518] [client 176.203.173.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.203.173.118, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBaAl-bEJ2CKP3iKAADswAAAEQ"]
[Tue Apr 28 14:57:30.264815 2026] [:error] [pid 50889:tid 50903] [client 103.101.103.112:57279] [client 103.101.103.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.101.103.112, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBaWozszBr00txEzGgCVgAAAAs"]
[Tue Apr 28 14:57:40.291312 2026] [:error] [pid 50889:tid 50893] [client 103.101.103.112:57622] [client 103.101.103.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.101.103.112, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBaZIzszBr00txEzGgCXgAAAAE"]
[Tue Apr 28 14:57:51.004432 2026] [:error] [pid 33777:tid 33854] [client 103.101.103.112:57971] [client 103.101.103.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.101.103.112, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBab7XUCFWqmordGGJk8QAAARM"]
[Tue Apr 28 14:58:01.654934 2026] [:error] [pid 33776:tid 33823] [client 103.101.103.112:58330] [client 103.101.103.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.101.103.112, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBaeV-bEJ2CKP3iKAAD2wAAAE8"]
[Tue Apr 28 14:58:12.280328 2026] [:error] [pid 33777:tid 33840] [client 103.101.103.112:58695] [client 103.101.103.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.101.103.112, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afBahLXUCFWqmordGGJk-AAAAQU"]
[Tue Apr 28 15:21:18.282017 2026] [:error] [pid 2741:tid 2755] [client 185.194.178.103:26787] [client 185.194.178.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afBf7vp92FeOz1h6ILyhYAAAAUk"]
[Tue Apr 28 15:21:19.185820 2026] [proxy_fcgi:error] [pid 2741:tid 2755] [client 185.194.178.103:26787] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue Apr 28 15:42:47.831832 2026] [:error] [pid 2741:tid 2755] [client 43.159.143.190:58840] [client 43.159.143.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afBk9_p92FeOz1h6ILym1QAAAUk"]
[Tue Apr 28 17:01:40.983425 2026] [:error] [pid 33776:tid 33813] [client 103.120.30.62:56760] [client 103.120.30.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.120.30.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afB3dF-bEJ2CKP3iKAAWFgAAAEU"]
[Tue Apr 28 17:01:51.746649 2026] [:error] [pid 50889:tid 50893] [client 103.120.30.62:57253] [client 103.120.30.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.120.30.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afB3f4zszBr00txEzGgaUQAAAAE"]
[Tue Apr 28 17:02:01.782056 2026] [:error] [pid 33776:tid 33824] [client 103.120.30.62:57576] [client 103.120.30.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.120.30.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afB3iV-bEJ2CKP3iKAAWOgAAAFA"]
[Tue Apr 28 17:02:12.542076 2026] [:error] [pid 33776:tid 33817] [client 103.120.30.62:57936] [client 103.120.30.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.120.30.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afB3lF-bEJ2CKP3iKAAWPAAAAEk"]
[Tue Apr 28 17:02:23.143742 2026] [:error] [pid 33777:tid 33836] [client 103.120.30.62:58280] [client 103.120.30.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.120.30.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afB3n7XUCFWqmordGGKU6QAAAQE"]
[Tue Apr 28 18:32:22.452519 2026] [:error] [pid 2741:tid 2759] [client 49.36.189.235:49417] [client 49.36.189.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afCMtvp92FeOz1h6ILzUkAAAAU0"]
[Tue Apr 28 18:32:33.677758 2026] [:error] [pid 2741:tid 2753] [client 49.36.189.235:50148] [client 49.36.189.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afCMwfp92FeOz1h6ILzUkwAAAUc"]
[Tue Apr 28 18:32:47.932204 2026] [:error] [pid 33864:tid 33880] [client 49.36.189.235:50406] [client 49.36.189.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afCMzzXchLGZ4QggCskMbAAAAI4"]
[Tue Apr 28 18:34:00.500274 2026] [:error] [pid 2741:tid 2767] [client 49.36.189.235:52079] [client 49.36.189.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afCNGPp92FeOz1h6ILzU6gAAAVU"]
[Tue Apr 28 18:34:10.414290 2026] [:error] [pid 33776:tid 33816] [client 49.36.189.235:52566] [client 49.36.189.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afCNIl-bEJ2CKP3iKAAiZwAAAEg"]
[Tue Apr 28 18:50:53.140392 2026] [:error] [pid 33776:tid 33820] [client 106.196.34.128:41037] [client 106.196.34.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.196.34.128, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afCRDV-bEJ2CKP3iKAAldAAAAEw"]
[Tue Apr 28 18:51:02.485758 2026] [:error] [pid 2741:tid 2763] [client 106.196.34.128:41209] [client 106.196.34.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.196.34.128, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afCRFvp92FeOz1h6ILzZDQAAAVE"]
[Tue Apr 28 18:51:14.234980 2026] [:error] [pid 33776:tid 33808] [client 106.196.34.128:41125] [client 106.196.34.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.196.34.128, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afCRIl-bEJ2CKP3iKAAldwAAAEA"]
[Tue Apr 28 18:51:24.879117 2026] [:error] [pid 33777:tid 33836] [client 106.196.34.128:41098] [client 106.196.34.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.196.34.128, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afCRLLXUCFWqmordGGK9QQAAAQE"]
[Tue Apr 28 18:51:35.476976 2026] [:error] [pid 2741:tid 2768] [client 106.196.34.128:41114] [client 106.196.34.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.196.34.128, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afCRN_p92FeOz1h6ILzZIgAAAVY"]
[Tue Apr 28 20:01:31.181822 2026] [:error] [pid 33776:tid 33827] [client 43.131.253.14:43818] [client 43.131.253.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afChm1-bEJ2CKP3iKAAv7wAAAFM"]
[Tue Apr 28 22:13:13.887998 2026] [:error] [pid 33777:tid 33858] [client 49.7.227.204:46104] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afDAebXUCFWqmordGGIMZgAAARc"]
[Tue Apr 28 23:37:50.081041 2026] [:error] [pid 33864:tid 33882] [client 62.84.185.60:55140] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "afDUTjXchLGZ4QggCslBSQAAAJA"]
[Tue Apr 28 23:37:52.762694 2026] [:error] [pid 33775:tid 33793] [client 62.84.185.60:53458] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "afDUUJsYOcoQrq88YbVD8wAAAM4"]
[Tue Apr 28 23:37:55.409372 2026] [:error] [pid 33864:tid 33886] [client 62.84.185.60:53460] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "afDUUzXchLGZ4QggCslBUwAAAJQ"]
[Tue Apr 28 23:37:58.065715 2026] [:error] [pid 33864:tid 33877] [client 62.84.185.60:53476] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "afDUVjXchLGZ4QggCslBWAAAAIs"]
[Tue Apr 28 23:38:00.667819 2026] [:error] [pid 33777:tid 33857] [client 62.84.185.60:53492] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "afDUWLXUCFWqmordGGIpcAAAARY"]
[Tue Apr 28 23:38:03.318994 2026] [:error] [pid 33775:tid 33787] [client 62.84.185.60:1490] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afDUW5sYOcoQrq88YbVD-gAAAMg"]
[Tue Apr 28 23:38:05.860187 2026] [:error] [pid 33777:tid 33854] [client 62.84.185.60:1502] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afDUXbXUCFWqmordGGIpdgAAARM"]
[Tue Apr 28 23:38:08.693372 2026] [:error] [pid 33777:tid 33855] [client 62.84.185.60:1512] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afDUYLXUCFWqmordGGIpeQAAARQ"]
[Tue Apr 28 23:38:11.495948 2026] [:error] [pid 50889:tid 50903] [client 62.84.185.60:1520] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afDUY4zszBr00txEzGhvjAAAAAs"]
[Tue Apr 28 23:38:14.798556 2026] [:error] [pid 33777:tid 33851] [client 62.84.185.60:59270] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afDUZrXUCFWqmordGGIpkQAAARA"]
[Tue Apr 28 23:38:18.878639 2026] [:error] [pid 50889:tid 50894] [client 62.84.185.60:59284] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afDUaozszBr00txEzGhvkwAAAAI"]
[Tue Apr 28 23:38:21.868501 2026] [:error] [pid 33775:tid 33795] [client 62.84.185.60:59288] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afDUbZsYOcoQrq88YbVD_wAAANA"]
[Tue Apr 28 23:38:24.761161 2026] [:error] [pid 33776:tid 33830] [client 62.84.185.60:6302] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "afDUcF-bEJ2CKP3iKABRfQAAAFY"]
[Tue Apr 28 23:38:29.170407 2026] [:error] [pid 50889:tid 50894] [client 62.84.185.60:6314] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "afDUdYzszBr00txEzGhvowAAAAI"]
[Tue Apr 28 23:38:32.776041 2026] [:error] [pid 2741:tid 2763] [client 62.84.185.60:9468] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afDUePp92FeOz1h6ILwnggAAAVE"]
[Tue Apr 28 23:38:36.163301 2026] [:error] [pid 33864:tid 33882] [client 62.84.185.60:9470] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afDUfDXchLGZ4QggCslBfgAAAJA"]
[Tue Apr 28 23:38:39.273049 2026] [:error] [pid 2741:tid 2756] [client 62.84.185.60:9472] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "afDUf_p92FeOz1h6ILwniwAAAUo"]
[Tue Apr 28 23:38:42.883824 2026] [:error] [pid 2741:tid 2751] [client 62.84.185.60:18692] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "afDUgvp92FeOz1h6ILwnjgAAAUU"]
[Tue Apr 28 23:39:32.110157 2026] [:error] [pid 33776:tid 33828] [client 62.84.185.60:31346] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "afDUtF-bEJ2CKP3iKABRsQAAAFQ"]
[Tue Apr 28 23:39:34.859344 2026] [:error] [pid 33776:tid 33821] [client 62.84.185.60:31360] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afDUtl-bEJ2CKP3iKABRtQAAAE0"]
[Tue Apr 28 23:39:37.695847 2026] [:error] [pid 50889:tid 50912] [client 62.84.185.60:31364] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "afDUuYzszBr00txEzGhv7AAAABQ"]
[Tue Apr 28 23:39:40.671991 2026] [:error] [pid 50889:tid 50903] [client 62.84.185.60:31372] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "afDUvIzszBr00txEzGhv7QAAAAs"]
[Tue Apr 28 23:39:43.439029 2026] [:error] [pid 33777:tid 33846] [client 62.84.185.60:41720] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "afDUv7XUCFWqmordGGIqIQAAAQs"]
[Tue Apr 28 23:39:46.042359 2026] [:error] [pid 33776:tid 33820] [client 62.84.185.60:41734] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "afDUwl-bEJ2CKP3iKABRwAAAAEw"]
[Tue Apr 28 23:39:48.613323 2026] [:error] [pid 33776:tid 33828] [client 62.84.185.60:41746] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "afDUxF-bEJ2CKP3iKABRxgAAAFQ"]
[Tue Apr 28 23:39:51.145328 2026] [:error] [pid 50889:tid 50904] [client 62.84.185.60:41754] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afDUx4zszBr00txEzGhv7wAAAAw"]
[Tue Apr 28 23:39:53.740958 2026] [:error] [pid 33864:tid 33868] [client 62.84.185.60:48200] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "afDUyTXchLGZ4QggCslBwAAAAII"]
[Tue Apr 28 23:39:56.558368 2026] [:error] [pid 33775:tid 33782] [client 62.84.185.60:48202] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afDUzJsYOcoQrq88YbVERwAAAMM"]
[Tue Apr 28 23:39:59.265716 2026] [:error] [pid 50889:tid 50910] [client 62.84.185.60:48204] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afDUz4zszBr00txEzGhv8wAAABI"]
[Tue Apr 28 23:40:03.965589 2026] [:error] [pid 50889:tid 50901] [client 62.84.185.60:14776] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afDU04zszBr00txEzGhv-QAAAAk"]
[Tue Apr 28 23:40:06.802924 2026] [:error] [pid 33777:tid 33851] [client 62.84.185.60:14792] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "afDU1rXUCFWqmordGGIqVAAAARA"]
[Tue Apr 28 23:40:09.976559 2026] [:error] [pid 2741:tid 2762] [client 62.84.185.60:14794] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "afDU2fp92FeOz1h6ILwn-AAAAVA"]
[Tue Apr 28 23:40:13.156632 2026] [:error] [pid 33777:tid 33852] [client 62.84.185.60:43462] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "afDU3bXUCFWqmordGGIqYwAAARE"]
[Tue Apr 28 23:40:15.845940 2026] [:error] [pid 33776:tid 33816] [client 62.84.185.60:43468] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "afDU31-bEJ2CKP3iKABR2QAAAEg"]
[Tue Apr 28 23:40:18.673428 2026] [:error] [pid 2741:tid 2766] [client 62.84.185.60:43476] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "afDU4vp92FeOz1h6ILwn_QAAAVQ"]
[Tue Apr 28 23:40:21.363371 2026] [:error] [pid 33775:tid 33800] [client 62.84.185.60:43488] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "afDU5ZsYOcoQrq88YbVETgAAANU"]
[Tue Apr 28 23:40:23.894285 2026] [:error] [pid 2741:tid 2753] [client 62.84.185.60:54356] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "afDU5_p92FeOz1h6ILwoAQAAAUc"]
[Tue Apr 28 23:40:26.565863 2026] [:error] [pid 33776:tid 33831] [client 62.84.185.60:54362] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "afDU6l-bEJ2CKP3iKABR7QAAAFc"]
[Tue Apr 28 23:41:11.041357 2026] [:error] [pid 33777:tid 33857] [client 62.84.185.60:64500] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afDVF7XUCFWqmordGGIqrAAAARY"]
[Tue Apr 28 23:41:13.769615 2026] [:error] [pid 33775:tid 33801] [client 62.84.185.60:52260] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afDVGZsYOcoQrq88YbVEhgAAANY"]
[Tue Apr 28 23:41:16.543983 2026] [:error] [pid 33777:tid 33835] [client 62.84.185.60:52268] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "afDVHLXUCFWqmordGGIqsAAAAQA"]
[Tue Apr 28 23:41:19.148180 2026] [:error] [pid 2741:tid 2770] [client 62.84.185.60:52270] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afDVH_p92FeOz1h6ILwoMwAAAVg"]
[Tue Apr 28 23:41:22.072117 2026] [:error] [pid 2741:tid 2756] [client 62.84.185.60:57930] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "afDVIvp92FeOz1h6ILwoOQAAAUo"]
[Tue Apr 28 23:41:24.963675 2026] [:error] [pid 33777:tid 33846] [client 62.84.185.60:57938] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "afDVJLXUCFWqmordGGIqwAAAAQs"]
[Tue Apr 28 23:41:27.540881 2026] [:error] [pid 33777:tid 33845] [client 62.84.185.60:57942] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afDVJ7XUCFWqmordGGIqxQAAAQo"]
[Tue Apr 28 23:41:30.093656 2026] [:error] [pid 33777:tid 33858] [client 62.84.185.60:57950] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "afDVKrXUCFWqmordGGIqzQAAARc"]
[Tue Apr 28 23:41:32.647862 2026] [:error] [pid 50889:tid 50911] [client 62.84.185.60:23830] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "afDVLIzszBr00txEzGhwGAAAABM"]
[Tue Apr 28 23:41:35.372669 2026] [:error] [pid 50889:tid 50915] [client 62.84.185.60:23836] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "afDVL4zszBr00txEzGhwHAAAABc"]
[Tue Apr 28 23:41:38.254555 2026] [:error] [pid 50889:tid 50899] [client 62.84.185.60:23850] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afDVMozszBr00txEzGhwHgAAAAc"]
[Tue Apr 28 23:41:40.808714 2026] [:error] [pid 33776:tid 33813] [client 62.84.185.60:23852] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "afDVNF-bEJ2CKP3iKABSNwAAAEU"]
[Tue Apr 28 23:41:43.378372 2026] [:error] [pid 33775:tid 33783] [client 62.84.185.60:24436] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "afDVN5sYOcoQrq88YbVEpQAAAMQ"]
[Tue Apr 28 23:41:45.997812 2026] [:error] [pid 33775:tid 33795] [client 62.84.185.60:24442] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afDVOZsYOcoQrq88YbVEqQAAANA"]
[Tue Apr 28 23:41:48.892088 2026] [:error] [pid 33777:tid 33840] [client 62.84.185.60:24456] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "afDVPLXUCFWqmordGGIrDwAAAQU"]
[Tue Apr 28 23:41:51.466307 2026] [:error] [pid 33777:tid 33843] [client 62.84.185.60:24470] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "afDVP7XUCFWqmordGGIrGgAAAQg"]
[Tue Apr 28 23:41:54.000637 2026] [:error] [pid 33775:tid 33785] [client 62.84.185.60:37822] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "afDVQZsYOcoQrq88YbVErAAAAMY"]
[Tue Apr 28 23:41:56.644834 2026] [:error] [pid 2741:tid 2755] [client 62.84.185.60:37826] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "afDVRPp92FeOz1h6ILwoTwAAAUk"]
[Tue Apr 28 23:41:59.359154 2026] [:error] [pid 33776:tid 33811] [client 62.84.185.60:37832] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afDVR1-bEJ2CKP3iKABSPQAAAEM"]
[Tue Apr 28 23:42:02.454641 2026] [:error] [pid 33775:tid 33781] [client 62.84.185.60:30220] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "afDVSpsYOcoQrq88YbVEtQAAAMI"]
[Tue Apr 28 23:42:05.036434 2026] [:error] [pid 50889:tid 50910] [client 62.84.185.60:30232] [client 62.84.185.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "afDVTYzszBr00txEzGhwMAAAABI"]
[Tue Apr 28 23:48:42.170637 2026] [:error] [pid 33775:tid 33794] [client 43.157.174.69:45176] [client 43.157.174.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afDW2psYOcoQrq88YbVFvQAAAM8"]
[Wed Apr 29 00:38:06.815038 2026] [:error] [pid 33777:tid 33855] [client 45.131.195.220:20761] [client 45.131.195.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDibrXUCFWqmordGGJAlAAAARQ"]
[Wed Apr 29 00:38:16.888628 2026] [:error] [pid 33777:tid 33843] [client 45.131.195.247:37227] [client 45.131.195.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDieLXUCFWqmordGGJAmwAAAQg"]
[Wed Apr 29 00:38:27.609982 2026] [:error] [pid 33777:tid 33859] [client 45.131.195.102:53843] [client 45.131.195.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDig7XUCFWqmordGGJAqQAAARg"]
[Wed Apr 29 00:38:38.381926 2026] [:error] [pid 33775:tid 33799] [client 45.131.195.224:45345] [client 45.131.195.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.224, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDijpsYOcoQrq88YbVLbwAAANQ"]
[Wed Apr 29 00:38:49.020088 2026] [:error] [pid 33777:tid 33848] [client 45.131.195.92:58373] [client 45.131.195.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDimbXUCFWqmordGGJA6AAAAQ0"]
[Wed Apr 29 00:38:59.650215 2026] [:error] [pid 33777:tid 33854] [client 45.131.195.173:52303] [client 45.131.195.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.173, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDio7XUCFWqmordGGJBBQAAARM"]
[Wed Apr 29 00:39:10.960781 2026] [:error] [pid 33777:tid 33846] [client 45.131.195.211:42235] [client 45.131.195.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.211, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDirrXUCFWqmordGGJBHgAAAQs"]
[Wed Apr 29 00:39:20.907378 2026] [:error] [pid 33775:tid 33798] [client 45.131.195.188:30369] [client 45.131.195.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.188, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDiuJsYOcoQrq88YbVLegAAANM"]
[Wed Apr 29 00:39:31.662829 2026] [:error] [pid 2741:tid 2747] [client 45.131.195.177:20475] [client 45.131.195.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.177, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDiw_p92FeOz1h6ILw50gAAAUE"]
[Wed Apr 29 00:39:42.359737 2026] [:error] [pid 2741:tid 2752] [client 45.131.195.247:34333] [client 45.131.195.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDizvp92FeOz1h6ILw52AAAAUY"]
[Wed Apr 29 00:39:53.014457 2026] [:error] [pid 50889:tid 50906] [client 45.131.195.103:22269] [client 45.131.195.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDi2YzszBr00txEzGh8ygAAAA4"]
[Wed Apr 29 00:40:03.724427 2026] [:error] [pid 33775:tid 33799] [client 45.131.195.102:22005] [client 45.131.195.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDi45sYOcoQrq88YbVLiAAAANQ"]
[Wed Apr 29 00:40:14.694492 2026] [:error] [pid 33777:tid 33855] [client 45.131.195.153:52499] [client 45.131.195.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDi7rXUCFWqmordGGJBeAAAARQ"]
[Wed Apr 29 00:40:25.079555 2026] [:error] [pid 33864:tid 33867] [client 45.131.195.192:50761] [client 45.131.195.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDi-TXchLGZ4QggCslLrAAAAIE"]
[Wed Apr 29 00:40:35.702196 2026] [:error] [pid 2741:tid 2746] [client 45.131.195.162:21123] [client 45.131.195.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjA_p92FeOz1h6ILw6AAAAAUA"]
[Wed Apr 29 00:40:46.672735 2026] [:error] [pid 50889:tid 50895] [client 45.131.195.220:35831] [client 45.131.195.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjDozszBr00txEzGh84QAAAAM"]
[Wed Apr 29 00:40:57.486595 2026] [:error] [pid 33864:tid 33890] [client 45.131.195.199:34179] [client 45.131.195.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjGTXchLGZ4QggCslLvgAAAJg"]
[Wed Apr 29 00:41:08.004210 2026] [:error] [pid 33775:tid 33787] [client 45.131.195.187:34961] [client 45.131.195.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.187, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjJJsYOcoQrq88YbVLlwAAAMg"]
[Wed Apr 29 00:41:18.602654 2026] [:error] [pid 2741:tid 2753] [client 45.131.195.192:23815] [client 45.131.195.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjLvp92FeOz1h6ILw6FQAAAUc"]
[Wed Apr 29 00:41:29.229503 2026] [:error] [pid 33864:tid 33867] [client 45.131.195.199:49865] [client 45.131.195.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjOTXchLGZ4QggCslLzAAAAIE"]
[Wed Apr 29 00:41:40.155309 2026] [:error] [pid 33777:tid 33839] [client 45.131.195.173:28447] [client 45.131.195.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.173, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjRLXUCFWqmordGGJByAAAAQQ"]
[Wed Apr 29 00:41:50.479829 2026] [:error] [pid 33775:tid 33790] [client 45.131.195.178:26589] [client 45.131.195.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjTpsYOcoQrq88YbVLnAAAAMs"]
[Wed Apr 29 00:42:01.189325 2026] [:error] [pid 33775:tid 33796] [client 45.131.195.87:63443] [client 45.131.195.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjWZsYOcoQrq88YbVLnQAAANE"]
[Wed Apr 29 00:42:12.106036 2026] [:error] [pid 33775:tid 33794] [client 45.131.195.234:25857] [client 45.131.195.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.234, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjZJsYOcoQrq88YbVLnwAAAM8"]
[Wed Apr 29 00:42:22.396960 2026] [:error] [pid 33864:tid 33880] [client 45.131.195.203:57971] [client 45.131.195.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjbjXchLGZ4QggCslL7QAAAI4"]
[Wed Apr 29 00:42:33.057520 2026] [:error] [pid 33864:tid 33877] [client 45.131.195.222:45853] [client 45.131.195.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjeTXchLGZ4QggCslL9gAAAIs"]
[Wed Apr 29 00:42:43.585331 2026] [:error] [pid 2741:tid 2753] [client 45.131.195.157:44541] [client 45.131.195.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjg_p92FeOz1h6ILw6VQAAAUc"]
[Wed Apr 29 00:42:54.210913 2026] [:error] [pid 33776:tid 33814] [client 45.131.195.167:59625] [client 45.131.195.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjjl-bEJ2CKP3iKABaFgAAAEY"]
[Wed Apr 29 00:43:04.786878 2026] [:error] [pid 33777:tid 33847] [client 45.131.195.188:27309] [client 45.131.195.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.188, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjmLXUCFWqmordGGJCNAAAAQw"]
[Wed Apr 29 00:43:15.382080 2026] [:error] [pid 33777:tid 33851] [client 45.131.195.192:26819] [client 45.131.195.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjo7XUCFWqmordGGJCPQAAARA"]
[Wed Apr 29 00:43:25.935043 2026] [:error] [pid 3594:tid 3615] [client 45.131.195.153:64547] [client 45.131.195.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjrVX25ha35uHxeYkzUwAAAZI"]
[Wed Apr 29 00:43:36.640025 2026] [:error] [pid 2741:tid 2757] [client 45.131.195.102:36815] [client 45.131.195.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjuPp92FeOz1h6ILw6fAAAAUs"]
[Wed Apr 29 00:43:47.258602 2026] [:error] [pid 2741:tid 2746] [client 45.131.195.103:39071] [client 45.131.195.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjw_p92FeOz1h6ILw6igAAAUA"]
[Wed Apr 29 00:43:57.997303 2026] [:error] [pid 2741:tid 2756] [client 45.131.195.194:26069] [client 45.131.195.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDjzfp92FeOz1h6ILw6owAAAUo"]
[Wed Apr 29 00:44:08.631330 2026] [:error] [pid 2741:tid 2758] [client 45.131.195.173:49349] [client 45.131.195.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.173, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDj2Pp92FeOz1h6ILw6swAAAUw"]
[Wed Apr 29 00:44:19.243357 2026] [:error] [pid 3594:tid 3599] [client 45.131.195.92:63317] [client 45.131.195.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDj41X25ha35uHxeYkzbgAAAYI"]
[Wed Apr 29 00:44:29.864311 2026] [:error] [pid 33776:tid 33828] [client 45.131.195.167:64629] [client 45.131.195.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDj7V-bEJ2CKP3iKABaUQAAAFQ"]
[Wed Apr 29 00:44:40.551819 2026] [:error] [pid 50889:tid 50914] [client 45.131.195.211:27531] [client 45.131.195.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.211, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDj-IzszBr00txEzGh9QQAAABY"]
[Wed Apr 29 00:44:51.095747 2026] [:error] [pid 33777:tid 33853] [client 45.131.195.188:63983] [client 45.131.195.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.188, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkA7XUCFWqmordGGJCWQAAARI"]
[Wed Apr 29 00:45:01.715884 2026] [:error] [pid 2741:tid 2759] [client 45.131.195.88:57597] [client 45.131.195.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.88, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkDfp92FeOz1h6ILw60gAAAU0"]
[Wed Apr 29 00:45:12.375969 2026] [:error] [pid 33776:tid 33821] [client 45.131.195.92:25309] [client 45.131.195.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkGF-bEJ2CKP3iKABaaAAAAE0"]
[Wed Apr 29 00:45:23.043511 2026] [:error] [pid 2741:tid 2758] [client 45.131.195.207:56789] [client 45.131.195.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkI_p92FeOz1h6ILw65gAAAUw"]
[Wed Apr 29 00:45:33.701742 2026] [:error] [pid 2741:tid 2748] [client 45.131.195.201:51615] [client 45.131.195.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.201, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkLfp92FeOz1h6ILw67wAAAUI"]
[Wed Apr 29 00:45:44.279453 2026] [:error] [pid 3594:tid 3618] [client 45.131.195.172:25789] [client 45.131.195.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.172, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkOFX25ha35uHxeYkzowAAAZU"]
[Wed Apr 29 00:45:54.976258 2026] [:error] [pid 50889:tid 50903] [client 45.131.195.177:48157] [client 45.131.195.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.177, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkQozszBr00txEzGh9ZQAAAAs"]
[Wed Apr 29 00:46:06.484077 2026] [:error] [pid 33776:tid 33808] [client 45.131.195.213:44843] [client 45.131.195.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkTl-bEJ2CKP3iKABaewAAAEA"]
[Wed Apr 29 00:46:16.182953 2026] [:error] [pid 33864:tid 33887] [client 45.131.195.242:62557] [client 45.131.195.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.242, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkWDXchLGZ4QggCslMQwAAAJU"]
[Wed Apr 29 00:46:26.801597 2026] [:error] [pid 33776:tid 33829] [client 45.131.195.244:46991] [client 45.131.195.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.244, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkYl-bEJ2CKP3iKABajQAAAFU"]
[Wed Apr 29 00:46:38.121452 2026] [:error] [pid 33777:tid 33846] [client 45.131.195.231:33221] [client 45.131.195.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.231, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkbrXUCFWqmordGGJCkwAAAQs"]
[Wed Apr 29 00:46:48.193412 2026] [:error] [pid 33777:tid 33850] [client 45.131.195.88:21967] [client 45.131.195.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.88, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkeLXUCFWqmordGGJCnAAAAQ8"]
[Wed Apr 29 00:47:00.764276 2026] [:error] [pid 3594:tid 3618] [client 45.131.195.153:32637] [client 45.131.195.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkhFX25ha35uHxeYkz-QAAAZU"]
[Wed Apr 29 00:47:09.505821 2026] [:error] [pid 3594:tid 3609] [client 45.131.195.243:31295] [client 45.131.195.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkjVX25ha35uHxeYk0EAAAAYw"]
[Wed Apr 29 00:47:20.098429 2026] [:error] [pid 33777:tid 33844] [client 209.87.169.178:53723] [client 209.87.169.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.87.169.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkmLXUCFWqmordGGJCsgAAAQk"]
[Wed Apr 29 00:47:30.676942 2026] [:error] [pid 3594:tid 3606] [client 45.131.195.199:52597] [client 45.131.195.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkolX25ha35uHxeYk0LwAAAYk"]
[Wed Apr 29 00:47:41.513875 2026] [:error] [pid 33864:tid 33868] [client 45.131.195.192:60239] [client 45.131.195.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkrTXchLGZ4QggCslMeAAAAII"]
[Wed Apr 29 00:47:51.925543 2026] [:error] [pid 2741:tid 2754] [client 45.131.195.223:63215] [client 45.131.195.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkt_p92FeOz1h6ILw7rgAAAUg"]
[Wed Apr 29 00:48:03.063266 2026] [:error] [pid 33777:tid 33836] [client 45.131.195.218:51043] [client 45.131.195.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkw7XUCFWqmordGGJC3wAAAQE"]
[Wed Apr 29 00:48:13.186250 2026] [:error] [pid 33864:tid 33885] [client 45.131.195.157:60359] [client 45.131.195.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDkzTXchLGZ4QggCslMhgAAAJM"]
[Wed Apr 29 00:48:24.396449 2026] [:error] [pid 2741:tid 2748] [client 45.131.195.224:28879] [client 45.131.195.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.224, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDk2Pp92FeOz1h6ILw70QAAAUI"]
[Wed Apr 29 00:48:34.379593 2026] [:error] [pid 33777:tid 33857] [client 45.131.195.234:52083] [client 45.131.195.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.234, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDk4rXUCFWqmordGGJDBwAAARY"]
[Wed Apr 29 00:48:45.684194 2026] [:error] [pid 50889:tid 50900] [client 45.131.195.220:64137] [client 45.131.195.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDk7YzszBr00txEzGh91gAAAAg"]
[Wed Apr 29 00:48:55.596907 2026] [:error] [pid 2741:tid 2761] [client 45.131.195.196:56465] [client 45.131.195.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.196, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDk9_p92FeOz1h6ILw76gAAAU8"]
[Wed Apr 29 00:49:06.716094 2026] [:error] [pid 33775:tid 33799] [client 45.131.195.173:45181] [client 45.131.195.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.173, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlApsYOcoQrq88YbVMKAAAANQ"]
[Wed Apr 29 00:49:16.813565 2026] [:error] [pid 33777:tid 33850] [client 45.131.195.231:56047] [client 45.131.195.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.231, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlDLXUCFWqmordGGJDHQAAAQ8"]
[Wed Apr 29 00:49:38.402197 2026] [:error] [pid 33777:tid 33847] [client 45.131.195.93:48999] [client 45.131.195.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlIrXUCFWqmordGGJDKwAAAQw"]
[Wed Apr 29 00:49:48.745458 2026] [:error] [pid 33777:tid 33838] [client 45.131.195.153:30953] [client 45.131.195.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlLLXUCFWqmordGGJDTQAAAQM"]
[Wed Apr 29 00:49:59.389640 2026] [:error] [pid 33776:tid 33812] [client 45.131.195.173:53463] [client 45.131.195.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.173, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlN1-bEJ2CKP3iKABbBwAAAEQ"]
[Wed Apr 29 00:50:10.288017 2026] [:error] [pid 50889:tid 50912] [client 45.131.195.177:25191] [client 45.131.195.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.177, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlQozszBr00txEzGh-EAAAABQ"]
[Wed Apr 29 00:50:20.958126 2026] [:error] [pid 3594:tid 3600] [client 45.131.195.218:57513] [client 45.131.195.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlTFX25ha35uHxeYk0nAAAAYM"]
[Wed Apr 29 00:50:31.629056 2026] [:error] [pid 50889:tid 50894] [client 45.131.195.202:45399] [client 45.131.195.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.202, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlV4zszBr00txEzGh-FwAAAAI"]
[Wed Apr 29 00:50:42.218875 2026] [:error] [pid 33775:tid 33780] [client 45.131.195.172:30279] [client 45.131.195.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.172, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlYpsYOcoQrq88YbVMVgAAAME"]
[Wed Apr 29 00:50:52.920868 2026] [:error] [pid 3594:tid 3606] [client 45.131.195.194:44155] [client 45.131.195.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlbFX25ha35uHxeYk0ygAAAYk"]
[Wed Apr 29 00:51:03.703548 2026] [:error] [pid 33777:tid 33837] [client 45.131.195.103:29373] [client 45.131.195.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDld7XUCFWqmordGGJDpAAAAQI"]
[Wed Apr 29 00:51:14.509848 2026] [:error] [pid 33777:tid 33843] [client 45.131.195.247:52213] [client 45.131.195.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlgrXUCFWqmordGGJDtAAAAQg"]
[Wed Apr 29 00:51:25.046585 2026] [:error] [pid 2741:tid 2758] [client 45.131.195.102:30449] [client 45.131.195.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDljfp92FeOz1h6ILw8ZAAAAUw"]
[Wed Apr 29 00:51:35.574676 2026] [:error] [pid 2741:tid 2765] [client 45.131.195.178:25711] [client 45.131.195.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDll_p92FeOz1h6ILw8cAAAAVM"]
[Wed Apr 29 00:51:46.150136 2026] [:error] [pid 50889:tid 50896] [client 45.131.195.87:42623] [client 45.131.195.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDloozszBr00txEzGh-PAAAAAQ"]
[Wed Apr 29 00:51:57.010966 2026] [:error] [pid 33777:tid 33841] [client 45.131.195.222:39891] [client 45.131.195.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlrbXUCFWqmordGGJD2wAAAQY"]
[Wed Apr 29 00:52:07.539317 2026] [:error] [pid 3594:tid 3597] [client 45.131.195.199:20365] [client 45.131.195.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlt1X25ha35uHxeYk0_AAAAYA"]
[Wed Apr 29 00:52:18.162064 2026] [:error] [pid 3594:tid 3614] [client 45.131.195.201:23239] [client 45.131.195.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.201, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlwlX25ha35uHxeYk1BgAAAZE"]
[Wed Apr 29 00:52:28.701993 2026] [:error] [pid 2741:tid 2767] [client 45.131.195.200:43615] [client 45.131.195.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDlzPp92FeOz1h6ILw8ogAAAVU"]
[Wed Apr 29 00:52:39.247049 2026] [:error] [pid 33777:tid 33857] [client 45.131.195.162:22379] [client 45.131.195.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDl17XUCFWqmordGGJD8QAAARY"]
[Wed Apr 29 00:52:49.741427 2026] [:error] [pid 3594:tid 3618] [client 45.131.195.211:29979] [client 45.131.195.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.211, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDl4VX25ha35uHxeYk1EgAAAZU"]
[Wed Apr 29 00:53:00.266531 2026] [:error] [pid 33864:tid 33868] [client 45.131.195.198:47577] [client 45.131.195.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDl7DXchLGZ4QggCslNBQAAAII"]
[Wed Apr 29 00:53:10.813957 2026] [:error] [pid 2741:tid 2756] [client 45.131.195.244:50285] [client 45.131.195.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.244, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDl9vp92FeOz1h6ILw8wgAAAUo"]
[Wed Apr 29 00:53:21.342359 2026] [:error] [pid 50889:tid 50904] [client 45.131.195.198:33381] [client 45.131.195.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmAYzszBr00txEzGh-TAAAAAw"]
[Wed Apr 29 00:53:31.905098 2026] [:error] [pid 33777:tid 33849] [client 45.131.195.244:21177] [client 45.131.195.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.244, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmC7XUCFWqmordGGJEGgAAAQ4"]
[Wed Apr 29 00:53:42.386454 2026] [:error] [pid 33776:tid 33815] [client 209.87.169.178:45489] [client 209.87.169.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.87.169.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmFl-bEJ2CKP3iKABbSwAAAEc"]
[Wed Apr 29 00:53:52.903062 2026] [:error] [pid 33777:tid 33851] [client 45.131.195.242:53529] [client 45.131.195.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.242, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmILXUCFWqmordGGJEJgAAARA"]
[Wed Apr 29 00:54:03.463075 2026] [:error] [pid 33775:tid 33801] [client 45.131.195.218:34299] [client 45.131.195.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmK5sYOcoQrq88YbVMhwAAANY"]
[Wed Apr 29 00:54:13.960928 2026] [:error] [pid 33775:tid 33789] [client 45.131.195.157:53557] [client 45.131.195.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmNZsYOcoQrq88YbVMigAAAMo"]
[Wed Apr 29 00:54:24.453815 2026] [:error] [pid 2741:tid 2746] [client 45.131.195.178:50931] [client 45.131.195.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmQPp92FeOz1h6ILw9GAAAAUA"]
[Wed Apr 29 00:54:35.023630 2026] [:error] [pid 33776:tid 33809] [client 45.131.195.102:31501] [client 45.131.195.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmS1-bEJ2CKP3iKABbXwAAAEE"]
[Wed Apr 29 00:54:45.551490 2026] [:error] [pid 2741:tid 2755] [client 45.131.195.158:21155] [client 45.131.195.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmVfp92FeOz1h6ILw9NgAAAUk"]
[Wed Apr 29 00:54:56.076742 2026] [:error] [pid 33864:tid 33887] [client 45.131.195.183:64965] [client 45.131.195.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmYDXchLGZ4QggCslNOwAAAJU"]
[Wed Apr 29 00:55:06.661005 2026] [:error] [pid 33864:tid 33884] [client 45.131.195.87:27561] [client 45.131.195.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmajXchLGZ4QggCslNRgAAAJI"]
[Wed Apr 29 00:55:27.956852 2026] [:error] [pid 50889:tid 50908] [client 45.131.195.199:58349] [client 45.131.195.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmf4zszBr00txEzGh-jQAAABA"]
[Wed Apr 29 00:55:39.158576 2026] [:error] [pid 33776:tid 33831] [client 45.131.195.247:41857] [client 45.131.195.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmi1-bEJ2CKP3iKABbcAAAAFc"]
[Wed Apr 29 00:55:49.990795 2026] [:error] [pid 50889:tid 50902] [client 45.131.195.234:62305] [client 45.131.195.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.234, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmlYzszBr00txEzGh-lAAAAAo"]
[Wed Apr 29 00:56:01.398691 2026] [:error] [pid 3594:tid 3602] [client 45.131.195.207:22013] [client 45.131.195.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmoVX25ha35uHxeYk1lwAAAYU"]
[Wed Apr 29 00:56:11.760877 2026] [:error] [pid 50889:tid 50915] [client 45.131.195.188:54851] [client 45.131.195.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.188, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmq4zszBr00txEzGh-mwAAABc"]
[Wed Apr 29 00:56:22.729184 2026] [:error] [pid 3594:tid 3610] [client 45.131.195.194:60249] [client 45.131.195.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmtlX25ha35uHxeYk1rAAAAY0"]
[Wed Apr 29 00:56:32.513710 2026] [:error] [pid 2741:tid 2764] [client 45.131.195.167:34045] [client 45.131.195.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.167, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmwPp92FeOz1h6ILw9pQAAAVI"]
[Wed Apr 29 00:56:43.606392 2026] [:error] [pid 33777:tid 33842] [client 45.131.195.222:62593] [client 45.131.195.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDmy7XUCFWqmordGGJEfwAAAQc"]
[Wed Apr 29 00:56:54.107400 2026] [:error] [pid 50889:tid 50916] [client 45.131.195.234:53321] [client 45.131.195.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.234, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDm1ozszBr00txEzGh-qQAAABg"]
[Wed Apr 29 00:57:04.716137 2026] [:error] [pid 33776:tid 33817] [client 45.131.195.244:38455] [client 45.131.195.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.244, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDm4F-bEJ2CKP3iKABbfQAAAEk"]
[Wed Apr 29 00:57:15.367650 2026] [:error] [pid 33776:tid 33827] [client 45.131.195.224:57397] [client 45.131.195.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.224, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDm61-bEJ2CKP3iKABbgAAAAFM"]
[Wed Apr 29 00:57:26.044607 2026] [:error] [pid 33775:tid 33785] [client 45.131.195.247:26645] [client 45.131.195.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDm9psYOcoQrq88YbVMsQAAAMY"]
[Wed Apr 29 00:57:47.358528 2026] [:error] [pid 33864:tid 33868] [client 45.131.195.103:21051] [client 45.131.195.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.103, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnCzXchLGZ4QggCslNhgAAAII"]
[Wed Apr 29 00:57:58.044793 2026] [:error] [pid 33777:tid 33842] [client 45.131.195.243:24671] [client 45.131.195.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnFrXUCFWqmordGGJEngAAAQc"]
[Wed Apr 29 00:58:08.666139 2026] [:error] [pid 2741:tid 2768] [client 45.131.195.200:47001] [client 45.131.195.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnIPp92FeOz1h6ILw99QAAAVY"]
[Wed Apr 29 00:58:19.248759 2026] [:error] [pid 2741:tid 2768] [client 45.131.195.244:55069] [client 45.131.195.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.244, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnK_p92FeOz1h6ILw-BgAAAVY"]
[Wed Apr 29 00:58:30.100387 2026] [:error] [pid 3594:tid 3600] [client 45.131.195.201:45375] [client 45.131.195.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.201, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnNlX25ha35uHxeYk12gAAAYM"]
[Wed Apr 29 00:58:40.896712 2026] [:error] [pid 3594:tid 3613] [client 45.131.195.158:47667] [client 45.131.195.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnQFX25ha35uHxeYk14QAAAZA"]
[Wed Apr 29 00:58:51.683092 2026] [:error] [pid 2741:tid 2768] [client 45.131.195.157:51765] [client 45.131.195.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnS_p92FeOz1h6ILw-JwAAAVY"]
[Wed Apr 29 00:59:02.278411 2026] [:error] [pid 2741:tid 2756] [client 45.131.195.196:64605] [client 45.131.195.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.196, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnVvp92FeOz1h6ILw-LwAAAUo"]
[Wed Apr 29 00:59:12.917555 2026] [:error] [pid 33777:tid 33850] [client 45.131.195.87:27141] [client 45.131.195.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnYLXUCFWqmordGGJEtgAAAQ8"]
[Wed Apr 29 00:59:34.411629 2026] [:error] [pid 33777:tid 33858] [client 45.131.195.188:57161] [client 45.131.195.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.188, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDndrXUCFWqmordGGJEvgAAARc"]
[Wed Apr 29 00:59:45.307189 2026] [:error] [pid 33777:tid 33849] [client 45.131.195.230:52411] [client 45.131.195.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDngbXUCFWqmordGGJExQAAAQ4"]
[Wed Apr 29 00:59:55.942507 2026] [:error] [pid 33777:tid 33837] [client 45.131.195.93:63039] [client 45.131.195.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDni7XUCFWqmordGGJEyQAAAQI"]
[Wed Apr 29 01:00:06.531027 2026] [:error] [pid 2741:tid 2756] [client 45.131.195.223:27299] [client 45.131.195.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnlvp92FeOz1h6ILw-eAAAAUo"]
[Wed Apr 29 01:00:17.178257 2026] [:error] [pid 33864:tid 33887] [client 45.131.195.187:29945] [client 45.131.195.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.187, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnoTXchLGZ4QggCslNsQAAAJU"]
[Wed Apr 29 01:00:28.000930 2026] [:error] [pid 33777:tid 33853] [client 45.131.195.83:53483] [client 45.131.195.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnq7XUCFWqmordGGJEzwAAARI"]
[Wed Apr 29 01:00:38.585653 2026] [:error] [pid 2741:tid 2767] [client 45.131.195.178:47023] [client 45.131.195.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDntvp92FeOz1h6ILw-kwAAAVU"]
[Wed Apr 29 01:00:49.296149 2026] [:error] [pid 33777:tid 33845] [client 45.131.195.182:65413] [client 45.131.195.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDnwbXUCFWqmordGGJE2QAAAQo"]
[Wed Apr 29 01:00:59.889893 2026] [:error] [pid 33777:tid 33857] [client 45.131.195.209:35811] [client 45.131.195.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.209, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDny7XUCFWqmordGGJE4AAAARY"]
[Wed Apr 29 01:01:10.518328 2026] [:error] [pid 2741:tid 2749] [client 45.131.195.213:43055] [client 45.131.195.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDn1vp92FeOz1h6ILw-tgAAAUM"]
[Wed Apr 29 01:01:21.151091 2026] [:error] [pid 2741:tid 2750] [client 45.131.195.243:29737] [client 45.131.195.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDn4fp92FeOz1h6ILw-wwAAAUQ"]
[Wed Apr 29 01:01:31.689531 2026] [:error] [pid 33777:tid 33847] [client 45.131.195.178:20259] [client 45.131.195.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDn67XUCFWqmordGGJE7AAAAQw"]
[Wed Apr 29 01:01:42.205471 2026] [:error] [pid 33864:tid 33879] [client 45.131.195.193:30961] [client 45.131.195.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.193, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDn9jXchLGZ4QggCslNugAAAI0"]
[Wed Apr 29 01:01:52.758353 2026] [:error] [pid 2741:tid 2746] [client 45.131.195.168:49193] [client 45.131.195.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.168, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDoAPp92FeOz1h6ILw-4wAAAUA"]
[Wed Apr 29 01:02:03.436250 2026] [:error] [pid 33864:tid 33870] [client 45.131.195.97:43915] [client 45.131.195.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDoCzXchLGZ4QggCslNvgAAAIQ"]
[Wed Apr 29 01:02:14.243157 2026] [:error] [pid 2741:tid 2764] [client 45.131.195.211:35565] [client 45.131.195.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.211, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDoFvp92FeOz1h6ILw-8gAAAVI"]
[Wed Apr 29 01:02:24.923984 2026] [:error] [pid 2741:tid 2747] [client 45.131.195.158:55335] [client 45.131.195.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDoIPp92FeOz1h6ILw_BwAAAUE"]
[Wed Apr 29 01:02:35.588702 2026] [:error] [pid 33776:tid 33813] [client 45.131.195.224:24395] [client 45.131.195.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.224, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDoK1-bEJ2CKP3iKABb9gAAAEU"]
[Wed Apr 29 01:02:46.265364 2026] [:error] [pid 33776:tid 33832] [client 45.131.195.200:30971] [client 45.131.195.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDoNl-bEJ2CKP3iKABb-wAAAFg"]
[Wed Apr 29 01:03:07.656444 2026] [:error] [pid 33864:tid 33866] [client 45.131.195.182:20989] [client 45.131.195.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDoSzXchLGZ4QggCslN2wAAAIA"]
[Wed Apr 29 01:03:28.780109 2026] [:error] [pid 50889:tid 50892] [client 45.131.195.177:36345] [client 45.131.195.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.177, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDoYIzszBr00txEzGh_cwAAAAA"]
[Wed Apr 29 01:03:39.695883 2026] [:error] [pid 50889:tid 50914] [client 45.131.195.192:40505] [client 45.131.195.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDoa4zszBr00txEzGh_fgAAABY"]
[Wed Apr 29 01:03:50.194174 2026] [:error] [pid 33864:tid 33873] [client 45.131.195.157:57833] [client 45.131.195.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDodjXchLGZ4QggCslN7AAAAIc"]
[Wed Apr 29 01:04:00.861383 2026] [:error] [pid 33775:tid 33796] [client 45.131.195.229:33609] [client 45.131.195.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.229, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDogJsYOcoQrq88YbVNKAAAANE"]
[Wed Apr 29 01:04:22.322388 2026] [:error] [pid 33777:tid 33847] [client 45.131.195.207:20693] [client 45.131.195.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDolrXUCFWqmordGGJFYwAAAQw"]
[Wed Apr 29 01:04:32.912573 2026] [:error] [pid 33864:tid 33878] [client 45.131.195.194:62621] [client 45.131.195.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.131.195.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDooDXchLGZ4QggCslN-gAAAIw"]
[Wed Apr 29 01:15:19.111969 2026] [:error] [pid 33775:tid 33794] [client 216.26.251.6:61105] [client 216.26.251.6] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hotbooksbookeeping2.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hotbooksbookeeping2.com"] [uri "/s3cmd.ini"] [unique_id "afDrJ5sYOcoQrq88YbVOBgAAAM8"]
[Wed Apr 29 01:36:58.107016 2026] [:error] [pid 33777:tid 33839] [client 52.230.176.21:65083] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tmpls.php"] [unique_id "afDwOrXUCFWqmordGGJJhwAAAQQ"]
[Wed Apr 29 01:36:58.549242 2026] [:error] [pid 2741:tid 2769] [client 52.230.176.21:62035] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tmpls.php"] [unique_id "afDwOvp92FeOz1h6ILxHUgAAAVc"]
[Wed Apr 29 01:36:59.105328 2026] [:error] [pid 2741:tid 2753] [client 52.230.176.21:65122] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tmpls.php"] [unique_id "afDwO_p92FeOz1h6ILxHVAAAAUc"]
[Wed Apr 29 01:36:59.488573 2026] [:error] [pid 2741:tid 2749] [client 52.230.176.21:65113] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tmpls.php"] [unique_id "afDwO_p92FeOz1h6ILxHVgAAAUM"]
[Wed Apr 29 01:36:59.905145 2026] [:error] [pid 2741:tid 2748] [client 52.230.176.21:62017] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3.php"] [unique_id "afDwO_p92FeOz1h6ILxHVwAAAUI"]
[Wed Apr 29 01:37:00.399887 2026] [:error] [pid 50889:tid 50912] [client 52.230.176.21:65071] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3.php"] [unique_id "afDwPIzszBr00txEzGiDBAAAABQ"]
[Wed Apr 29 01:37:00.837042 2026] [:error] [pid 33777:tid 33838] [client 52.230.176.21:65098] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3.php"] [unique_id "afDwPLXUCFWqmordGGJJiAAAAQM"]
[Wed Apr 29 01:37:01.336774 2026] [:error] [pid 33776:tid 33824] [client 52.230.176.21:65128] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/n3.php"] [unique_id "afDwPV-bEJ2CKP3iKABe9wAAAFA"]
[Wed Apr 29 01:37:01.798670 2026] [:error] [pid 33777:tid 33855] [client 52.230.176.21:65062] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "afDwPbXUCFWqmordGGJJigAAARQ"]
[Wed Apr 29 01:37:02.288141 2026] [:error] [pid 33775:tid 33791] [client 52.230.176.21:65116] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "afDwPpsYOcoQrq88YbVPJQAAAMw"]
[Wed Apr 29 01:37:02.763161 2026] [:error] [pid 33775:tid 33795] [client 52.230.176.21:65033] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "afDwPpsYOcoQrq88YbVPJgAAANA"]
[Wed Apr 29 01:37:03.206866 2026] [:error] [pid 33864:tid 33870] [client 52.230.176.21:62021] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-aaa.php"] [unique_id "afDwPzXchLGZ4QggCslRIgAAAIQ"]
[Wed Apr 29 01:37:03.707848 2026] [:error] [pid 33864:tid 33881] [client 52.230.176.21:65076] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afDwPzXchLGZ4QggCslRIwAAAI8"]
[Wed Apr 29 01:37:04.285466 2026] [:error] [pid 33777:tid 33859] [client 52.230.176.21:65079] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afDwQLXUCFWqmordGGJJiwAAARg"]
[Wed Apr 29 01:37:04.801148 2026] [:error] [pid 2741:tid 2756] [client 52.230.176.21:65060] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afDwQPp92FeOz1h6ILxHWQAAAUo"]
[Wed Apr 29 01:37:05.320141 2026] [:error] [pid 2741:tid 2752] [client 52.230.176.21:65145] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afDwQfp92FeOz1h6ILxHWwAAAUY"]
[Wed Apr 29 01:37:05.828422 2026] [:error] [pid 3594:tid 3606] [client 52.230.176.21:65063] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mo.php"] [unique_id "afDwQVX25ha35uHxeYk77QAAAYk"]
[Wed Apr 29 01:37:06.347422 2026] [:error] [pid 3594:tid 3597] [client 52.230.176.21:61976] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mo.php"] [unique_id "afDwQlX25ha35uHxeYk77wAAAYA"]
[Wed Apr 29 01:37:06.756042 2026] [:error] [pid 2741:tid 2751] [client 52.230.176.21:65073] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mo.php"] [unique_id "afDwQvp92FeOz1h6ILxHXQAAAUU"]
[Wed Apr 29 01:37:07.207744 2026] [:error] [pid 33775:tid 33782] [client 52.230.176.21:62022] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mo.php"] [unique_id "afDwQ5sYOcoQrq88YbVPKQAAAMM"]
[Wed Apr 29 01:37:07.650700 2026] [:error] [pid 33775:tid 33784] [client 52.230.176.21:65046] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "afDwQ5sYOcoQrq88YbVPKgAAAMU"]
[Wed Apr 29 01:37:08.165839 2026] [:error] [pid 33777:tid 33851] [client 52.230.176.21:65045] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "afDwRLXUCFWqmordGGJJjwAAARA"]
[Wed Apr 29 01:37:08.587525 2026] [:error] [pid 33777:tid 33844] [client 52.230.176.21:65144] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "afDwRLXUCFWqmordGGJJkAAAAQk"]
[Wed Apr 29 01:37:09.027695 2026] [:error] [pid 2741:tid 2757] [client 52.230.176.21:62023] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "afDwRfp92FeOz1h6ILxHXwAAAUs"]
[Wed Apr 29 01:37:09.505768 2026] [:error] [pid 3594:tid 3599] [client 52.230.176.21:65027] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xrm.php"] [unique_id "afDwRVX25ha35uHxeYk78AAAAYI"]
[Wed Apr 29 01:37:09.976555 2026] [:error] [pid 33775:tid 33787] [client 52.230.176.21:65054] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xrm.php"] [unique_id "afDwRZsYOcoQrq88YbVPLAAAAMg"]
[Wed Apr 29 01:37:10.490072 2026] [:error] [pid 3594:tid 3607] [client 52.230.176.21:65125] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xrm.php"] [unique_id "afDwRlX25ha35uHxeYk78wAAAYo"]
[Wed Apr 29 01:37:10.950703 2026] [:error] [pid 3594:tid 3609] [client 52.230.176.21:62030] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xrm.php"] [unique_id "afDwRlX25ha35uHxeYk79AAAAYw"]
[Wed Apr 29 01:37:11.601093 2026] [:error] [pid 33775:tid 33794] [client 52.230.176.21:65057] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asudo.php"] [unique_id "afDwR5sYOcoQrq88YbVPLwAAAM8"]
[Wed Apr 29 01:37:12.077448 2026] [:error] [pid 33864:tid 33890] [client 52.230.176.21:65101] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asudo.php"] [unique_id "afDwSDXchLGZ4QggCslRJQAAAJg"]
[Wed Apr 29 01:37:12.680475 2026] [:error] [pid 3594:tid 3600] [client 52.230.176.21:65119] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asudo.php"] [unique_id "afDwSFX25ha35uHxeYk79gAAAYM"]
[Wed Apr 29 01:37:13.099640 2026] [:error] [pid 33775:tid 33795] [client 52.230.176.21:62075] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-asudo.php"] [unique_id "afDwSZsYOcoQrq88YbVPNgAAANA"]
[Wed Apr 29 01:37:13.550636 2026] [:error] [pid 33777:tid 33839] [client 52.230.176.21:65075] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "afDwSbXUCFWqmordGGJJlQAAAQQ"]
[Wed Apr 29 01:37:14.160629 2026] [:error] [pid 33775:tid 33792] [client 52.230.176.21:65067] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "afDwSpsYOcoQrq88YbVPNwAAAM0"]
[Wed Apr 29 01:37:14.666375 2026] [:error] [pid 33776:tid 33822] [client 52.230.176.21:62034] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "afDwSl-bEJ2CKP3iKABe-gAAAE4"]
[Wed Apr 29 01:37:15.177133 2026] [:error] [pid 2741:tid 2761] [client 52.230.176.21:65031] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wdone1.php"] [unique_id "afDwS_p92FeOz1h6ILxHYgAAAU8"]
[Wed Apr 29 01:37:15.851824 2026] [:error] [pid 2741:tid 2753] [client 52.230.176.21:65097] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "afDwS_p92FeOz1h6ILxHYwAAAUc"]
[Wed Apr 29 01:37:16.392182 2026] [:error] [pid 33776:tid 33817] [client 52.230.176.21:65092] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "afDwTF-bEJ2CKP3iKABe-wAAAEk"]
[Wed Apr 29 01:37:16.854776 2026] [:error] [pid 2741:tid 2748] [client 52.230.176.21:65052] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "afDwTPp92FeOz1h6ILxHZQAAAUI"]
[Wed Apr 29 01:37:17.340059 2026] [:error] [pid 33775:tid 33793] [client 52.230.176.21:65051] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file3.php"] [unique_id "afDwTZsYOcoQrq88YbVPOgAAAM4"]
[Wed Apr 29 01:37:17.988799 2026] [:error] [pid 33775:tid 33779] [client 52.230.176.21:65112] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "afDwTZsYOcoQrq88YbVPOwAAAMA"]
[Wed Apr 29 01:37:18.435620 2026] [:error] [pid 2741:tid 2770] [client 52.230.176.21:62020] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "afDwTvp92FeOz1h6ILxHZgAAAVg"]
[Wed Apr 29 01:37:19.036025 2026] [:error] [pid 2741:tid 2752] [client 52.230.176.21:65118] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "afDwT_p92FeOz1h6ILxHaAAAAUY"]
[Wed Apr 29 01:37:19.556200 2026] [:error] [pid 3594:tid 3616] [client 52.230.176.21:65141] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/G-In.php"] [unique_id "afDwT1X25ha35uHxeYk7_AAAAZM"]
[Wed Apr 29 01:37:20.172895 2026] [:error] [pid 2741:tid 2750] [client 52.230.176.21:65053] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blox.php"] [unique_id "afDwUPp92FeOz1h6ILxHaQAAAUQ"]
[Wed Apr 29 01:37:21.292855 2026] [:error] [pid 3594:tid 3603] [client 52.230.176.21:62036] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blox.php"] [unique_id "afDwUVX25ha35uHxeYk7_gAAAYY"]
[Wed Apr 29 01:37:21.872867 2026] [:error] [pid 2741:tid 2766] [client 52.230.176.21:65043] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blox.php"] [unique_id "afDwUfp92FeOz1h6ILxHbQAAAVQ"]
[Wed Apr 29 01:37:22.481980 2026] [:error] [pid 2741:tid 2757] [client 52.230.176.21:65059] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/blox.php"] [unique_id "afDwUvp92FeOz1h6ILxHbgAAAUs"]
[Wed Apr 29 01:37:23.320736 2026] [:error] [pid 33777:tid 33855] [client 52.230.176.21:65088] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "afDwU7XUCFWqmordGGJJmAAAARQ"]
[Wed Apr 29 01:37:23.972959 2026] [:error] [pid 33777:tid 33836] [client 52.230.176.21:65114] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "afDwU7XUCFWqmordGGJJmQAAAQE"]
[Wed Apr 29 01:37:24.608657 2026] [:error] [pid 2741:tid 2755] [client 52.230.176.21:65061] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "afDwVPp92FeOz1h6ILxHcgAAAUk"]
[Wed Apr 29 01:37:25.431681 2026] [:error] [pid 33776:tid 33811] [client 52.230.176.21:65026] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wgift1.php"] [unique_id "afDwVV-bEJ2CKP3iKABfAAAAAEM"]
[Wed Apr 29 01:37:26.309943 2026] [:error] [pid 50889:tid 50906] [client 52.230.176.21:65107] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "afDwVozszBr00txEzGiDCAAAAA4"]
[Wed Apr 29 01:37:27.034786 2026] [:error] [pid 33776:tid 33829] [client 52.230.176.21:61996] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "afDwV1-bEJ2CKP3iKABfAQAAAFU"]
[Wed Apr 29 01:37:27.899779 2026] [:error] [pid 33776:tid 33818] [client 52.230.176.21:65146] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "afDwV1-bEJ2CKP3iKABfAwAAAEo"]
[Wed Apr 29 01:37:28.402949 2026] [:error] [pid 33776:tid 33825] [client 52.230.176.21:62068] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "afDwWF-bEJ2CKP3iKABfBAAAAFE"]
[Wed Apr 29 01:37:28.892208 2026] [:error] [pid 33776:tid 33831] [client 52.230.176.21:65126] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelap.php"] [unique_id "afDwWF-bEJ2CKP3iKABfBQAAAFc"]
[Wed Apr 29 01:37:29.340075 2026] [:error] [pid 2741:tid 2770] [client 52.230.176.21:62027] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelap.php"] [unique_id "afDwWfp92FeOz1h6ILxHdgAAAVg"]
[Wed Apr 29 01:37:29.776363 2026] [:error] [pid 2741:tid 2765] [client 52.230.176.21:65123] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelap.php"] [unique_id "afDwWfp92FeOz1h6ILxHeAAAAVM"]
[Wed Apr 29 01:37:30.217245 2026] [:error] [pid 2741:tid 2754] [client 52.230.176.21:65038] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gelap.php"] [unique_id "afDwWvp92FeOz1h6ILxHegAAAUg"]
[Wed Apr 29 01:37:30.775659 2026] [:error] [pid 2741:tid 2759] [client 52.230.176.21:62042] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "afDwWvp92FeOz1h6ILxHewAAAU0"]
[Wed Apr 29 01:37:31.327042 2026] [:error] [pid 33776:tid 33816] [client 52.230.176.21:65120] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "afDwW1-bEJ2CKP3iKABfBwAAAEg"]
[Wed Apr 29 01:37:31.892939 2026] [:error] [pid 2741:tid 2760] [client 52.230.176.21:65056] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "afDwW_p92FeOz1h6ILxHfgAAAU4"]
[Wed Apr 29 01:37:32.383614 2026] [:error] [pid 2741:tid 2766] [client 52.230.176.21:62032] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1vx.php"] [unique_id "afDwXPp92FeOz1h6ILxHfwAAAVQ"]
[Wed Apr 29 01:37:32.838954 2026] [:error] [pid 33864:tid 33871] [client 52.230.176.21:60376] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "afDwXDXchLGZ4QggCslRLAAAAIU"]
[Wed Apr 29 01:37:33.475634 2026] [:error] [pid 33776:tid 33830] [client 52.230.176.21:65077] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "afDwXV-bEJ2CKP3iKABfEgAAAFY"]
[Wed Apr 29 01:37:33.983395 2026] [:error] [pid 2741:tid 2746] [client 52.230.176.21:62073] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "afDwXfp92FeOz1h6ILxHgAAAAUA"]
[Wed Apr 29 01:37:34.625713 2026] [:error] [pid 33777:tid 33858] [client 52.230.176.21:62079] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fe5.php"] [unique_id "afDwXrXUCFWqmordGGJJoAAAARc"]
[Wed Apr 29 01:37:35.080200 2026] [:error] [pid 33777:tid 33842] [client 52.230.176.21:65081] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "afDwX7XUCFWqmordGGJJogAAAQc"]
[Wed Apr 29 01:37:35.524315 2026] [:error] [pid 33776:tid 33813] [client 52.230.176.21:65135] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "afDwX1-bEJ2CKP3iKABfHAAAAEU"]
[Wed Apr 29 01:37:36.065495 2026] [:error] [pid 33777:tid 33848] [client 52.230.176.21:65072] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "afDwYLXUCFWqmordGGJJpAAAAQ0"]
[Wed Apr 29 01:37:36.628765 2026] [:error] [pid 33776:tid 33820] [client 52.230.176.21:65148] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lv.php"] [unique_id "afDwYF-bEJ2CKP3iKABfIwAAAEw"]
[Wed Apr 29 01:37:37.064630 2026] [:error] [pid 3594:tid 3617] [client 52.230.176.21:62018] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afDwYVX25ha35uHxeYk8AQAAAZQ"]
[Wed Apr 29 01:37:37.494461 2026] [:error] [pid 2741:tid 2764] [client 52.230.176.21:62065] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afDwYfp92FeOz1h6ILxHgQAAAVI"]
[Wed Apr 29 01:37:37.945153 2026] [:error] [pid 2741:tid 2753] [client 52.230.176.21:60369] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afDwYfp92FeOz1h6ILxHgwAAAUc"]
[Wed Apr 29 01:37:38.372735 2026] [:error] [pid 33777:tid 33838] [client 52.230.176.21:65085] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afDwYrXUCFWqmordGGJJpwAAAQM"]
[Wed Apr 29 01:37:38.866409 2026] [:error] [pid 50889:tid 50913] [client 52.230.176.21:62052] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oylki.php"] [unique_id "afDwYozszBr00txEzGiDCwAAABU"]
[Wed Apr 29 01:37:39.359966 2026] [:error] [pid 3594:tid 3621] [client 52.230.176.21:65036] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oylki.php"] [unique_id "afDwY1X25ha35uHxeYk8BQAAAZg"]
[Wed Apr 29 01:37:39.842495 2026] [:error] [pid 3594:tid 3599] [client 52.230.176.21:61969] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oylki.php"] [unique_id "afDwY1X25ha35uHxeYk8CAAAAYI"]
[Wed Apr 29 01:37:40.312054 2026] [:error] [pid 33777:tid 33855] [client 52.230.176.21:65124] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/oylki.php"] [unique_id "afDwZLXUCFWqmordGGJJqAAAARQ"]
[Wed Apr 29 01:37:40.755731 2026] [:error] [pid 2741:tid 2768] [client 52.230.176.21:65030] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about25.php"] [unique_id "afDwZPp92FeOz1h6ILxHhgAAAVY"]
[Wed Apr 29 01:37:41.250194 2026] [:error] [pid 33864:tid 33887] [client 52.230.176.21:65106] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about25.php"] [unique_id "afDwZTXchLGZ4QggCslRLgAAAJU"]
[Wed Apr 29 01:37:41.822946 2026] [:error] [pid 2741:tid 2758] [client 52.230.176.21:65024] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about25.php"] [unique_id "afDwZfp92FeOz1h6ILxHhwAAAUw"]
[Wed Apr 29 01:37:42.373426 2026] [:error] [pid 33776:tid 33828] [client 52.230.176.21:61987] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about25.php"] [unique_id "afDwZl-bEJ2CKP3iKABfRAAAAFQ"]
[Wed Apr 29 01:37:42.825607 2026] [:error] [pid 2741:tid 2763] [client 52.230.176.21:65052] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "afDwZvp92FeOz1h6ILxHiAAAAVE"]
[Wed Apr 29 01:37:43.289214 2026] [:error] [pid 33775:tid 33802] [client 52.230.176.21:61999] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "afDwZ5sYOcoQrq88YbVPRAAAANc"]
[Wed Apr 29 01:37:43.767567 2026] [:error] [pid 33777:tid 33849] [client 52.230.176.21:61963] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "afDwZ7XUCFWqmordGGJJqgAAAQ4"]
[Wed Apr 29 01:37:44.328932 2026] [:error] [pid 3594:tid 3612] [client 52.230.176.21:65137] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/path.php"] [unique_id "afDwaFX25ha35uHxeYk8CgAAAY8"]
[Wed Apr 29 01:37:44.896264 2026] [:error] [pid 33776:tid 33817] [client 52.230.176.21:65095] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r4f_1.php"] [unique_id "afDwaF-bEJ2CKP3iKABfSgAAAEk"]
[Wed Apr 29 01:37:45.414520 2026] [:error] [pid 33777:tid 33837] [client 52.230.176.21:65053] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r4f_1.php"] [unique_id "afDwabXUCFWqmordGGJJrAAAAQI"]
[Wed Apr 29 01:37:45.909693 2026] [:error] [pid 33864:tid 33884] [client 52.230.176.21:65134] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r4f_1.php"] [unique_id "afDwaTXchLGZ4QggCslRMAAAAJI"]
[Wed Apr 29 01:37:46.430787 2026] [:error] [pid 33777:tid 33858] [client 52.230.176.21:65104] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/r4f_1.php"] [unique_id "afDwarXUCFWqmordGGJJrgAAARc"]
[Wed Apr 29 01:37:47.000820 2026] [:error] [pid 2741:tid 2757] [client 52.230.176.21:62057] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "afDwavp92FeOz1h6ILxHiwAAAUs"]
[Wed Apr 29 01:37:47.697807 2026] [:error] [pid 2741:tid 2747] [client 52.230.176.21:65029] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "afDwa_p92FeOz1h6ILxHjQAAAUE"]
[Wed Apr 29 01:37:48.223018 2026] [:error] [pid 33864:tid 33882] [client 52.230.176.21:65130] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "afDwbDXchLGZ4QggCslRMgAAAJA"]
[Wed Apr 29 01:37:48.718949 2026] [:error] [pid 33776:tid 33812] [client 52.230.176.21:65111] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp1.php"] [unique_id "afDwbF-bEJ2CKP3iKABfTAAAAEQ"]
[Wed Apr 29 01:37:49.236344 2026] [:error] [pid 3594:tid 3617] [client 52.230.176.21:65115] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/33.php"] [unique_id "afDwbVX25ha35uHxeYk8DQAAAZQ"]
[Wed Apr 29 01:37:49.779736 2026] [:error] [pid 3594:tid 3597] [client 52.230.176.21:62063] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/33.php"] [unique_id "afDwbVX25ha35uHxeYk8DwAAAYA"]
[Wed Apr 29 01:37:50.388037 2026] [:error] [pid 33777:tid 33854] [client 52.230.176.21:65070] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/33.php"] [unique_id "afDwbrXUCFWqmordGGJJsQAAARM"]
[Wed Apr 29 01:37:50.865386 2026] [:error] [pid 33777:tid 33842] [client 52.230.176.21:65117] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/33.php"] [unique_id "afDwbrXUCFWqmordGGJJsgAAAQc"]
[Wed Apr 29 01:37:51.335297 2026] [:error] [pid 33777:tid 33848] [client 52.230.176.21:65058] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-gr.php"] [unique_id "afDwb7XUCFWqmordGGJJswAAAQ0"]
[Wed Apr 29 01:37:51.922158 2026] [:error] [pid 33777:tid 33843] [client 52.230.176.21:65129] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-gr.php"] [unique_id "afDwb7XUCFWqmordGGJJtQAAAQg"]
[Wed Apr 29 01:37:52.387030 2026] [:error] [pid 33775:tid 33791] [client 52.230.176.21:65132] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-gr.php"] [unique_id "afDwcJsYOcoQrq88YbVPSQAAAMw"]
[Wed Apr 29 01:37:52.927551 2026] [:error] [pid 33777:tid 33836] [client 52.230.176.21:61994] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-gr.php"] [unique_id "afDwcLXUCFWqmordGGJJuAAAAQE"]
[Wed Apr 29 01:37:53.436605 2026] [:error] [pid 33864:tid 33876] [client 52.230.176.21:65100] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mans.php"] [unique_id "afDwcTXchLGZ4QggCslRNAAAAIo"]
[Wed Apr 29 01:37:53.885001 2026] [:error] [pid 33864:tid 33872] [client 52.230.176.21:62038] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mans.php"] [unique_id "afDwcTXchLGZ4QggCslRNgAAAIY"]
[Wed Apr 29 01:37:54.582847 2026] [:error] [pid 33775:tid 33786] [client 52.230.176.21:65044] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mans.php"] [unique_id "afDwcpsYOcoQrq88YbVPTQAAAMc"]
[Wed Apr 29 01:37:55.162755 2026] [:error] [pid 2741:tid 2770] [client 52.230.176.21:65139] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mans.php"] [unique_id "afDwc_p92FeOz1h6ILxHjwAAAVg"]
[Wed Apr 29 01:37:55.703442 2026] [:error] [pid 33776:tid 33809] [client 52.230.176.21:65086] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "afDwc1-bEJ2CKP3iKABfTwAAAEE"]
[Wed Apr 29 01:37:56.246376 2026] [:error] [pid 33775:tid 33784] [client 52.230.176.21:62040] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "afDwdJsYOcoQrq88YbVPTgAAAMU"]
[Wed Apr 29 01:37:56.900926 2026] [:error] [pid 3594:tid 3620] [client 52.230.176.21:65136] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "afDwdFX25ha35uHxeYk8EQAAAZc"]
[Wed Apr 29 01:38:10.371127 2026] [:error] [pid 2741:tid 2746] [client 52.230.176.21:61986] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "afDwgvp92FeOz1h6ILxHngAAAUA"]
[Wed Apr 29 01:38:10.813801 2026] [:error] [pid 2741:tid 2767] [client 52.230.176.21:62056] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "afDwgvp92FeOz1h6ILxHnwAAAVU"]
[Wed Apr 29 01:38:11.375136 2026] [:error] [pid 3594:tid 3601] [client 52.230.176.21:65147] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "afDwg1X25ha35uHxeYk8HwAAAYQ"]
[Wed Apr 29 01:38:11.814070 2026] [:error] [pid 33777:tid 33844] [client 52.230.176.21:65037] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-2019.php"] [unique_id "afDwg7XUCFWqmordGGJJygAAAQk"]
[Wed Apr 29 01:38:12.382997 2026] [:error] [pid 33777:tid 33851] [client 52.230.176.21:65034] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "afDwhLXUCFWqmordGGJJzQAAARA"]
[Wed Apr 29 01:38:12.847280 2026] [:error] [pid 3594:tid 3607] [client 52.230.176.21:62004] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "afDwhFX25ha35uHxeYk8IQAAAYo"]
[Wed Apr 29 01:38:13.259574 2026] [:error] [pid 33864:tid 33866] [client 52.230.176.21:65068] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "afDwhTXchLGZ4QggCslROgAAAIA"]
[Wed Apr 29 01:38:13.709688 2026] [:error] [pid 33864:tid 33867] [client 52.230.176.21:61968] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/X57.php"] [unique_id "afDwhTXchLGZ4QggCslROwAAAIE"]
[Wed Apr 29 01:38:14.144128 2026] [:error] [pid 33775:tid 33802] [client 52.230.176.21:61991] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah25.php"] [unique_id "afDwhpsYOcoQrq88YbVPUQAAANc"]
[Wed Apr 29 01:38:14.624142 2026] [:error] [pid 3594:tid 3599] [client 52.230.176.21:65127] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah25.php"] [unique_id "afDwhlX25ha35uHxeYk8IgAAAYI"]
[Wed Apr 29 01:38:15.112324 2026] [:error] [pid 3594:tid 3613] [client 52.230.176.21:65109] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah25.php"] [unique_id "afDwh1X25ha35uHxeYk8IwAAAZA"]
[Wed Apr 29 01:38:15.640051 2026] [:error] [pid 33864:tid 33877] [client 52.230.176.21:65103] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ah25.php"] [unique_id "afDwhzXchLGZ4QggCslRPQAAAIs"]
[Wed Apr 29 01:38:16.108854 2026] [:error] [pid 33864:tid 33884] [client 52.230.176.21:61980] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "afDwiDXchLGZ4QggCslRPwAAAJI"]
[Wed Apr 29 01:38:16.541643 2026] [:error] [pid 33864:tid 33881] [client 52.230.176.21:60377] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "afDwiDXchLGZ4QggCslRQAAAAI8"]
[Wed Apr 29 01:38:17.140210 2026] [:error] [pid 33864:tid 33870] [client 52.230.176.21:62068] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "afDwiTXchLGZ4QggCslRQgAAAIQ"]
[Wed Apr 29 01:38:17.650181 2026] [:error] [pid 33775:tid 33793] [client 52.230.176.21:62005] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/grsiuk.php"] [unique_id "afDwiZsYOcoQrq88YbVPUgAAAM4"]
[Wed Apr 29 01:38:18.055990 2026] [:error] [pid 3594:tid 3616] [client 52.230.176.21:61982] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z.php"] [unique_id "afDwilX25ha35uHxeYk8JQAAAZM"]
[Wed Apr 29 01:38:18.524313 2026] [:error] [pid 33864:tid 33872] [client 52.230.176.21:62016] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z.php"] [unique_id "afDwijXchLGZ4QggCslRRQAAAIY"]
[Wed Apr 29 01:38:18.980978 2026] [:error] [pid 33776:tid 33817] [client 52.230.176.21:65074] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z.php"] [unique_id "afDwil-bEJ2CKP3iKABfVQAAAEk"]
[Wed Apr 29 01:38:19.432155 2026] [:error] [pid 33864:tid 33880] [client 52.230.176.21:62076] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/z.php"] [unique_id "afDwizXchLGZ4QggCslRRgAAAI4"]
[Wed Apr 29 01:38:19.916092 2026] [:error] [pid 50889:tid 50912] [client 52.230.176.21:65140] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "afDwi4zszBr00txEzGiDDwAAABQ"]
[Wed Apr 29 01:38:20.367983 2026] [:error] [pid 33864:tid 33879] [client 52.230.176.21:65080] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "afDwjDXchLGZ4QggCslRSAAAAI0"]
[Wed Apr 29 01:38:20.841729 2026] [:error] [pid 2741:tid 2762] [client 52.230.176.21:65065] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "afDwjPp92FeOz1h6ILxHoAAAAVA"]
[Wed Apr 29 01:38:21.330890 2026] [:error] [pid 50889:tid 50900] [client 52.230.176.21:65087] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "afDwjYzszBr00txEzGiDEQAAAAg"]
[Wed Apr 29 01:38:21.776292 2026] [:error] [pid 2741:tid 2769] [client 52.230.176.21:61955] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk25_1.php"] [unique_id "afDwjfp92FeOz1h6ILxHogAAAVc"]
[Wed Apr 29 01:38:22.216222 2026] [:error] [pid 50889:tid 50916] [client 52.230.176.21:62053] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk25_1.php"] [unique_id "afDwjozszBr00txEzGiDEgAAABg"]
[Wed Apr 29 01:38:22.645543 2026] [:error] [pid 3594:tid 3615] [client 52.230.176.21:62028] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk25_1.php"] [unique_id "afDwjlX25ha35uHxeYk8JwAAAZI"]
[Wed Apr 29 01:38:23.206401 2026] [:error] [pid 3594:tid 3605] [client 52.230.176.21:65143] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sk25_1.php"] [unique_id "afDwj1X25ha35uHxeYk8KQAAAYg"]
[Wed Apr 29 01:38:23.746299 2026] [:error] [pid 3594:tid 3621] [client 52.230.176.21:60357] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/usep.php"] [unique_id "afDwj1X25ha35uHxeYk8KgAAAZg"]
[Wed Apr 29 01:38:24.235980 2026] [:error] [pid 50889:tid 50898] [client 52.230.176.21:62070] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/usep.php"] [unique_id "afDwkIzszBr00txEzGiDFAAAAAY"]
[Wed Apr 29 01:38:24.705916 2026] [:error] [pid 3594:tid 3601] [client 52.230.176.21:60321] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/usep.php"] [unique_id "afDwkFX25ha35uHxeYk8LAAAAYQ"]
[Wed Apr 29 01:38:25.128981 2026] [:error] [pid 3594:tid 3604] [client 52.230.176.21:62018] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/usep.php"] [unique_id "afDwkVX25ha35uHxeYk8LQAAAYc"]
[Wed Apr 29 01:38:25.603117 2026] [:error] [pid 3594:tid 3619] [client 52.230.176.21:62037] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "afDwkVX25ha35uHxeYk8LgAAAZY"]
[Wed Apr 29 01:38:26.022702 2026] [:error] [pid 33777:tid 33857] [client 52.230.176.21:62000] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "afDwkrXUCFWqmordGGJJ0gAAARY"]
[Wed Apr 29 01:38:26.525376 2026] [:error] [pid 3594:tid 3598] [client 52.230.176.21:61965] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "afDwklX25ha35uHxeYk8MQAAAYE"]
[Wed Apr 29 01:38:26.975108 2026] [:error] [pid 33864:tid 33877] [client 52.230.176.21:62031] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "afDwkjXchLGZ4QggCslRTAAAAIs"]
[Wed Apr 29 01:38:27.381042 2026] [:error] [pid 33775:tid 33803] [client 52.230.176.21:65119] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "afDwk5sYOcoQrq88YbVPVAAAANg"]
[Wed Apr 29 01:38:27.824635 2026] [:error] [pid 33776:tid 33811] [client 52.230.176.21:61988] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "afDwk1-bEJ2CKP3iKABfXAAAAEM"]
[Wed Apr 29 01:38:28.370983 2026] [:error] [pid 33776:tid 33825] [client 52.230.176.21:62001] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "afDwlF-bEJ2CKP3iKABfXQAAAFE"]
[Wed Apr 29 01:38:28.812608 2026] [:error] [pid 33776:tid 33831] [client 52.230.176.21:62064] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v4.php"] [unique_id "afDwlF-bEJ2CKP3iKABfXwAAAFc"]
[Wed Apr 29 01:38:29.244498 2026] [:error] [pid 33775:tid 33798] [client 52.230.176.21:62029] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp4.php"] [unique_id "afDwlZsYOcoQrq88YbVPVgAAANM"]
[Wed Apr 29 01:38:29.669906 2026] [:error] [pid 33776:tid 33813] [client 52.230.176.21:61960] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp4.php"] [unique_id "afDwlV-bEJ2CKP3iKABfYAAAAEU"]
[Wed Apr 29 01:38:30.094033 2026] [:error] [pid 33776:tid 33824] [client 52.230.176.21:65150] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp4.php"] [unique_id "afDwll-bEJ2CKP3iKABfYQAAAFA"]
[Wed Apr 29 01:38:30.527142 2026] [:error] [pid 33776:tid 33820] [client 52.230.176.21:61974] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp4.php"] [unique_id "afDwll-bEJ2CKP3iKABfZAAAAEw"]
[Wed Apr 29 01:38:30.940551 2026] [:error] [pid 33776:tid 33817] [client 52.230.176.21:62060] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "afDwll-bEJ2CKP3iKABfZgAAAEk"]
[Wed Apr 29 01:38:31.360296 2026] [:error] [pid 50889:tid 50913] [client 52.230.176.21:65102] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "afDwl4zszBr00txEzGiDFwAAABU"]
[Wed Apr 29 01:38:31.812835 2026] [:error] [pid 50889:tid 50907] [client 52.230.176.21:60383] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "afDwl4zszBr00txEzGiDGAAAAA8"]
[Wed Apr 29 01:38:32.292858 2026] [:error] [pid 50889:tid 50905] [client 52.230.176.21:62058] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "afDwmIzszBr00txEzGiDGQAAAA0"]
[Wed Apr 29 01:38:32.837578 2026] [:error] [pid 3594:tid 3601] [client 52.230.176.21:65142] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mamzi.php"] [unique_id "afDwmFX25ha35uHxeYk8OgAAAYQ"]
[Wed Apr 29 01:38:33.275409 2026] [:error] [pid 50889:tid 50908] [client 52.230.176.21:60353] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mamzi.php"] [unique_id "afDwmYzszBr00txEzGiDGgAAABA"]
[Wed Apr 29 01:38:33.719800 2026] [:error] [pid 3594:tid 3614] [client 52.230.176.21:60327] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mamzi.php"] [unique_id "afDwmVX25ha35uHxeYk8PQAAAZE"]
[Wed Apr 29 01:38:34.138166 2026] [:error] [pid 50889:tid 50903] [client 52.230.176.21:65047] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mamzi.php"] [unique_id "afDwmozszBr00txEzGiDHAAAAAs"]
[Wed Apr 29 01:38:34.617172 2026] [:error] [pid 33864:tid 33886] [client 52.230.176.21:61977] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpls.php"] [unique_id "afDwmjXchLGZ4QggCslRUgAAAJQ"]
[Wed Apr 29 01:38:35.191733 2026] [:error] [pid 3594:tid 3598] [client 52.230.176.21:60396] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpls.php"] [unique_id "afDwm1X25ha35uHxeYk8PgAAAYE"]
[Wed Apr 29 01:38:35.739552 2026] [:error] [pid 3594:tid 3597] [client 52.230.176.21:65069] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpls.php"] [unique_id "afDwm1X25ha35uHxeYk8QAAAAYA"]
[Wed Apr 29 01:38:36.232986 2026] [:error] [pid 3594:tid 3618] [client 52.230.176.21:62033] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpls.php"] [unique_id "afDwnFX25ha35uHxeYk8QQAAAZU"]
[Wed Apr 29 01:38:36.727898 2026] [:error] [pid 2741:tid 2748] [client 52.230.176.21:65028] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xrp.php"] [unique_id "afDwnPp92FeOz1h6ILxHowAAAUI"]
[Wed Apr 29 01:38:37.186509 2026] [:error] [pid 3594:tid 3610] [client 52.230.176.21:65042] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xrp.php"] [unique_id "afDwnVX25ha35uHxeYk8QwAAAY0"]
[Wed Apr 29 01:38:37.642943 2026] [:error] [pid 2741:tid 2768] [client 52.230.176.21:62043] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xrp.php"] [unique_id "afDwnfp92FeOz1h6ILxHpgAAAVY"]
[Wed Apr 29 01:38:38.115269 2026] [:error] [pid 50889:tid 50900] [client 52.230.176.21:65110] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xrp.php"] [unique_id "afDwnozszBr00txEzGiDIAAAAAg"]
[Wed Apr 29 01:38:38.543316 2026] [:error] [pid 3594:tid 3615] [client 52.230.176.21:62002] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "afDwnlX25ha35uHxeYk8SAAAAZI"]
[Wed Apr 29 01:38:39.025343 2026] [:error] [pid 3594:tid 3612] [client 52.230.176.21:62061] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "afDwn1X25ha35uHxeYk8SQAAAY8"]
[Wed Apr 29 01:38:39.574787 2026] [:error] [pid 3594:tid 3604] [client 52.230.176.21:60394] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "afDwn1X25ha35uHxeYk8SgAAAYc"]
[Wed Apr 29 01:38:40.034928 2026] [:error] [pid 33777:tid 33854] [client 52.230.176.21:62048] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v2.php"] [unique_id "afDwoLXUCFWqmordGGJJ2QAAARM"]
[Wed Apr 29 01:38:40.496342 2026] [:error] [pid 33777:tid 33835] [client 52.230.176.21:62078] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-acc.php"] [unique_id "afDwoLXUCFWqmordGGJJ3QAAAQA"]
[Wed Apr 29 01:38:40.987834 2026] [:error] [pid 33777:tid 33858] [client 52.230.176.21:55746] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-acc.php"] [unique_id "afDwoLXUCFWqmordGGJJ3wAAARc"]
[Wed Apr 29 01:38:41.455878 2026] [:error] [pid 33775:tid 33788] [client 52.230.176.21:60398] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-acc.php"] [unique_id "afDwoZsYOcoQrq88YbVPWwAAAMk"]
[Wed Apr 29 01:38:41.889949 2026] [:error] [pid 33777:tid 33839] [client 52.230.176.21:61970] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-acc.php"] [unique_id "afDwobXUCFWqmordGGJJ4wAAAQQ"]
[Wed Apr 29 01:38:42.352529 2026] [:error] [pid 33777:tid 33840] [client 52.230.176.21:65138] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "afDworXUCFWqmordGGJJ5wAAAQU"]
[Wed Apr 29 01:38:42.788907 2026] [:error] [pid 33775:tid 33789] [client 52.230.176.21:62051] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "afDwopsYOcoQrq88YbVPXAAAAMo"]
[Wed Apr 29 01:38:43.273834 2026] [:error] [pid 33776:tid 33819] [client 52.230.176.21:60381] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "afDwo1-bEJ2CKP3iKABfdgAAAEs"]
[Wed Apr 29 01:38:43.795621 2026] [:error] [pid 33776:tid 33812] [client 52.230.176.21:60385] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/333.php"] [unique_id "afDwo1-bEJ2CKP3iKABfdwAAAEQ"]
[Wed Apr 29 01:38:44.337180 2026] [:error] [pid 33775:tid 33802] [client 52.230.176.21:65149] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/031.php"] [unique_id "afDwpJsYOcoQrq88YbVPXQAAANc"]
[Wed Apr 29 01:38:44.808892 2026] [:error] [pid 33777:tid 33852] [client 52.230.176.21:60368] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/031.php"] [unique_id "afDwpLXUCFWqmordGGJJ7AAAARE"]
[Wed Apr 29 01:38:45.318670 2026] [:error] [pid 33776:tid 33828] [client 52.230.176.21:65035] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/031.php"] [unique_id "afDwpV-bEJ2CKP3iKABfewAAAFQ"]
[Wed Apr 29 01:38:45.950496 2026] [:error] [pid 33776:tid 33823] [client 52.230.176.21:62003] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/031.php"] [unique_id "afDwpV-bEJ2CKP3iKABffgAAAE8"]
[Wed Apr 29 01:38:46.392301 2026] [:error] [pid 2741:tid 2754] [client 52.230.176.21:60374] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "afDwpvp92FeOz1h6ILxHqAAAAUg"]
[Wed Apr 29 01:38:47.057052 2026] [:error] [pid 33777:tid 33847] [client 52.230.176.21:61964] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "afDwp7XUCFWqmordGGJJ7gAAAQw"]
[Wed Apr 29 01:38:47.574754 2026] [:error] [pid 2741:tid 2751] [client 52.230.176.21:60382] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "afDwp_p92FeOz1h6ILxHqQAAAUU"]
[Wed Apr 29 01:38:48.023609 2026] [:error] [pid 33864:tid 33875] [client 52.230.176.21:60386] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-trackback.php"] [unique_id "afDwqDXchLGZ4QggCslRWgAAAIk"]
[Wed Apr 29 01:38:48.481194 2026] [:error] [pid 3594:tid 3617] [client 52.230.176.21:62049] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xx.php"] [unique_id "afDwqFX25ha35uHxeYk8YQAAAZQ"]
[Wed Apr 29 01:38:48.962005 2026] [:error] [pid 3594:tid 3597] [client 52.230.176.21:61956] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xx.php"] [unique_id "afDwqFX25ha35uHxeYk8ZAAAAYA"]
[Wed Apr 29 01:38:49.448698 2026] [:error] [pid 3594:tid 3610] [client 52.230.176.21:61957] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xx.php"] [unique_id "afDwqVX25ha35uHxeYk8ZgAAAY0"]
[Wed Apr 29 01:38:49.915603 2026] [:error] [pid 3594:tid 3603] [client 52.230.176.21:61981] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xx.php"] [unique_id "afDwqVX25ha35uHxeYk8aAAAAYY"]
[Wed Apr 29 01:38:50.329366 2026] [:error] [pid 33775:tid 33793] [client 52.230.176.21:62009] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/testo.php"] [unique_id "afDwqpsYOcoQrq88YbVPYAAAAM4"]
[Wed Apr 29 01:38:50.799529 2026] [:error] [pid 33864:tid 33871] [client 52.230.176.21:61993] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/testo.php"] [unique_id "afDwqjXchLGZ4QggCslRXAAAAIU"]
[Wed Apr 29 01:38:51.302761 2026] [:error] [pid 2741:tid 2760] [client 52.230.176.21:60403] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/testo.php"] [unique_id "afDwq_p92FeOz1h6ILxHqgAAAU4"]
[Wed Apr 29 01:38:51.896726 2026] [:error] [pid 2741:tid 2747] [client 52.230.176.21:62019] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/testo.php"] [unique_id "afDwq_p92FeOz1h6ILxHrQAAAUE"]
[Wed Apr 29 01:38:52.341310 2026] [:error] [pid 2741:tid 2746] [client 52.230.176.21:60324] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/row.php"] [unique_id "afDwrPp92FeOz1h6ILxHrgAAAUA"]
[Wed Apr 29 01:38:52.792374 2026] [:error] [pid 2741:tid 2767] [client 52.230.176.21:60391] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/row.php"] [unique_id "afDwrPp92FeOz1h6ILxHsQAAAVU"]
[Wed Apr 29 01:38:53.229006 2026] [:error] [pid 2741:tid 2749] [client 52.230.176.21:60392] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/row.php"] [unique_id "afDwrfp92FeOz1h6ILxHsgAAAUM"]
[Wed Apr 29 01:38:53.871056 2026] [:error] [pid 2741:tid 2769] [client 52.230.176.21:62007] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/row.php"] [unique_id "afDwrfp92FeOz1h6ILxHtAAAAVc"]
[Wed Apr 29 01:38:54.537395 2026] [:error] [pid 33777:tid 33836] [client 52.230.176.21:62050] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "afDwrrXUCFWqmordGGJKAgAAAQE"]
[Wed Apr 29 01:38:54.975887 2026] [:error] [pid 3594:tid 3605] [client 52.230.176.21:61998] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "afDwrlX25ha35uHxeYk8bAAAAYg"]
[Wed Apr 29 01:38:55.441332 2026] [:error] [pid 2741:tid 2752] [client 52.230.176.21:61967] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "afDwr_p92FeOz1h6ILxHtgAAAUY"]
[Wed Apr 29 01:38:56.117380 2026] [:error] [pid 3594:tid 3617] [client 52.230.176.21:62014] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/555.php"] [unique_id "afDwsFX25ha35uHxeYk8bQAAAZQ"]
[Wed Apr 29 01:38:56.622794 2026] [:error] [pid 50889:tid 50905] [client 52.230.176.21:61975] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "afDwsIzszBr00txEzGiDKQAAAA0"]
[Wed Apr 29 01:38:57.058884 2026] [:error] [pid 2741:tid 2763] [client 52.230.176.21:65048] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "afDwsfp92FeOz1h6ILxHuAAAAVE"]
[Wed Apr 29 01:38:57.588144 2026] [:error] [pid 33864:tid 33873] [client 52.230.176.21:60317] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "afDwsTXchLGZ4QggCslRXgAAAIc"]
[Wed Apr 29 01:38:58.005125 2026] [:error] [pid 3594:tid 3598] [client 52.230.176.21:60412] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-conflg.php"] [unique_id "afDwslX25ha35uHxeYk8cgAAAYE"]
[Wed Apr 29 01:38:58.467247 2026] [:error] [pid 50889:tid 50894] [client 52.230.176.21:60311] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "afDwsozszBr00txEzGiDKgAAAAI"]
[Wed Apr 29 01:38:58.957078 2026] [:error] [pid 50889:tid 50910] [client 52.230.176.21:55794] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "afDwsozszBr00txEzGiDLAAAABI"]
[Wed Apr 29 01:38:59.460372 2026] [:error] [pid 2741:tid 2756] [client 52.230.176.21:62067] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "afDws_p92FeOz1h6ILxHugAAAUo"]
[Wed Apr 29 01:38:59.894126 2026] [:error] [pid 2741:tid 2766] [client 52.230.176.21:60354] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xqq.php"] [unique_id "afDws_p92FeOz1h6ILxHuwAAAVQ"]
[Wed Apr 29 01:39:00.416001 2026] [:error] [pid 2741:tid 2759] [client 52.230.176.21:60319] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jmfi2.php"] [unique_id "afDwtPp92FeOz1h6ILxHvQAAAU0"]
[Wed Apr 29 01:39:00.845280 2026] [:error] [pid 2741:tid 2746] [client 52.230.176.21:60389] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jmfi2.php"] [unique_id "afDwtPp92FeOz1h6ILxHvgAAAUA"]
[Wed Apr 29 01:39:01.248943 2026] [:error] [pid 2741:tid 2755] [client 52.230.176.21:62074] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jmfi2.php"] [unique_id "afDwtfp92FeOz1h6ILxHvwAAAUk"]
[Wed Apr 29 01:39:01.775597 2026] [:error] [pid 2741:tid 2764] [client 52.230.176.21:62025] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jmfi2.php"] [unique_id "afDwtfp92FeOz1h6ILxHwQAAAVI"]
[Wed Apr 29 01:39:02.240159 2026] [:error] [pid 50889:tid 50901] [client 52.230.176.21:62008] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "afDwtozszBr00txEzGiDLQAAAAk"]
[Wed Apr 29 01:39:02.748565 2026] [:error] [pid 33864:tid 33880] [client 52.230.176.21:60365] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "afDwtjXchLGZ4QggCslRYAAAAI4"]
[Wed Apr 29 01:39:03.260053 2026] [:error] [pid 2741:tid 2750] [client 52.230.176.21:60330] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "afDwt_p92FeOz1h6ILxHwwAAAUQ"]
[Wed Apr 29 01:39:03.756819 2026] [:error] [pid 2741:tid 2762] [client 52.230.176.21:61983] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-Blogs.php"] [unique_id "afDwt_p92FeOz1h6ILxHxQAAAVA"]
[Wed Apr 29 01:39:04.264080 2026] [:error] [pid 2741:tid 2770] [client 52.230.176.21:65133] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/card.php"] [unique_id "afDwuPp92FeOz1h6ILxHxwAAAVg"]
[Wed Apr 29 01:39:04.709950 2026] [:error] [pid 50889:tid 50904] [client 52.230.176.21:65039] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/card.php"] [unique_id "afDwuIzszBr00txEzGiDLgAAAAw"]
[Wed Apr 29 01:39:05.202688 2026] [:error] [pid 33864:tid 33886] [client 52.230.176.21:60295] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/card.php"] [unique_id "afDwuTXchLGZ4QggCslRYQAAAJQ"]
[Wed Apr 29 01:39:05.663884 2026] [:error] [pid 2741:tid 2766] [client 52.230.176.21:62026] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/card.php"] [unique_id "afDwufp92FeOz1h6ILxHyQAAAVQ"]
[Wed Apr 29 01:39:06.147758 2026] [:error] [pid 2741:tid 2759] [client 52.230.176.21:55779] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mds.php"] [unique_id "afDwuvp92FeOz1h6ILxHywAAAU0"]
[Wed Apr 29 01:39:06.666198 2026] [:error] [pid 2741:tid 2764] [client 52.230.176.21:60352] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mds.php"] [unique_id "afDwuvp92FeOz1h6ILxHzQAAAVI"]
[Wed Apr 29 01:39:07.098995 2026] [:error] [pid 2741:tid 2757] [client 52.230.176.21:60364] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mds.php"] [unique_id "afDwu_p92FeOz1h6ILxH0AAAAUs"]
[Wed Apr 29 01:39:07.559365 2026] [:error] [pid 2741:tid 2765] [client 52.230.176.21:65082] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mds.php"] [unique_id "afDwu_p92FeOz1h6ILxH0wAAAVM"]
[Wed Apr 29 01:39:08.075110 2026] [:error] [pid 33777:tid 33837] [client 52.230.176.21:65099] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hey.php"] [unique_id "afDwvLXUCFWqmordGGJKDQAAAQI"]
[Wed Apr 29 01:39:08.552478 2026] [:error] [pid 33775:tid 33788] [client 52.230.176.21:62047] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hey.php"] [unique_id "afDwvJsYOcoQrq88YbVPawAAAMk"]
[Wed Apr 29 01:39:22.349035 2026] [:error] [pid 3594:tid 3608] [client 52.230.176.21:60378] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hans.php"] [unique_id "afDwylX25ha35uHxeYk8nQAAAYs"]
[Wed Apr 29 01:39:22.769112 2026] [:error] [pid 50889:tid 50893] [client 52.230.176.21:61979] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hans.php"] [unique_id "afDwyozszBr00txEzGiDNgAAAAE"]
[Wed Apr 29 01:39:23.184388 2026] [:error] [pid 50889:tid 50905] [client 52.230.176.21:65050] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hans.php"] [unique_id "afDwy4zszBr00txEzGiDNwAAAA0"]
[Wed Apr 29 01:39:23.698592 2026] [:error] [pid 50889:tid 50904] [client 52.230.176.21:61997] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hans.php"] [unique_id "afDwy4zszBr00txEzGiDPAAAAAw"]
[Wed Apr 29 01:39:24.146332 2026] [:error] [pid 50889:tid 50914] [client 52.230.176.21:61954] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lgr.php"] [unique_id "afDwzIzszBr00txEzGiDQAAAABY"]
[Wed Apr 29 01:39:24.647002 2026] [:error] [pid 33777:tid 33847] [client 52.230.176.21:60297] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lgr.php"] [unique_id "afDwzLXUCFWqmordGGJKJwAAAQw"]
[Wed Apr 29 01:39:25.086731 2026] [:error] [pid 3594:tid 3617] [client 52.230.176.21:65094] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lgr.php"] [unique_id "afDwzVX25ha35uHxeYk8ogAAAZQ"]
[Wed Apr 29 01:39:25.522179 2026] [:error] [pid 2741:tid 2757] [client 52.230.176.21:62041] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lgr.php"] [unique_id "afDwzfp92FeOz1h6ILxH8wAAAUs"]
[Wed Apr 29 01:39:25.960039 2026] [:error] [pid 50889:tid 50906] [client 52.230.176.21:60372] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "afDwzYzszBr00txEzGiDRAAAAA4"]
[Wed Apr 29 01:39:26.443522 2026] [:error] [pid 50889:tid 50915] [client 52.230.176.21:62072] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "afDwzozszBr00txEzGiDRQAAABc"]
[Wed Apr 29 01:39:26.963501 2026] [:error] [pid 33864:tid 33883] [client 52.230.176.21:60384] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "afDwzjXchLGZ4QggCslRfQAAAJE"]
[Wed Apr 29 01:39:27.439728 2026] [:error] [pid 2741:tid 2748] [client 52.230.176.21:60393] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an7.php"] [unique_id "afDwz_p92FeOz1h6ILxH-gAAAUI"]
[Wed Apr 29 01:39:28.103284 2026] [:error] [pid 2741:tid 2757] [client 52.230.176.21:61959] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "afDw0Pp92FeOz1h6ILxH_QAAAUs"]
[Wed Apr 29 01:39:28.573062 2026] [:error] [pid 2741:tid 2753] [client 52.230.176.21:60410] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "afDw0Pp92FeOz1h6ILxIAAAAAUc"]
[Wed Apr 29 01:39:28.985749 2026] [:error] [pid 2741:tid 2752] [client 52.230.176.21:65105] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "afDw0Pp92FeOz1h6ILxIBQAAAUY"]
[Wed Apr 29 01:39:29.521297 2026] [:error] [pid 2741:tid 2757] [client 52.230.176.21:61989] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file1.php"] [unique_id "afDw0fp92FeOz1h6ILxIDQAAAUs"]
[Wed Apr 29 01:39:29.954836 2026] [:error] [pid 33776:tid 33819] [client 52.230.176.21:61978] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/luxe.php"] [unique_id "afDw0V-bEJ2CKP3iKABfmQAAAEs"]
[Wed Apr 29 01:39:30.427796 2026] [:error] [pid 3594:tid 3615] [client 52.230.176.21:62033] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/luxe.php"] [unique_id "afDw0lX25ha35uHxeYk8rgAAAZI"]
[Wed Apr 29 01:39:30.928926 2026] [:error] [pid 50889:tid 50916] [client 52.230.176.21:60329] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/luxe.php"] [unique_id "afDw0ozszBr00txEzGiDTwAAABg"]
[Wed Apr 29 01:39:31.711059 2026] [:error] [pid 2741:tid 2769] [client 52.230.176.21:60399] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/luxe.php"] [unique_id "afDw0_p92FeOz1h6ILxIFgAAAVc"]
[Wed Apr 29 01:39:32.171556 2026] [:error] [pid 33777:tid 33848] [client 52.230.176.21:60366] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_ok.php"] [unique_id "afDw1LXUCFWqmordGGJKMQAAAQ0"]
[Wed Apr 29 01:39:32.827122 2026] [:error] [pid 2741:tid 2757] [client 52.230.176.21:65108] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_ok.php"] [unique_id "afDw1Pp92FeOz1h6ILxIGAAAAUs"]
[Wed Apr 29 01:39:33.347440 2026] [:error] [pid 2741:tid 2762] [client 52.230.176.21:65066] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_ok.php"] [unique_id "afDw1fp92FeOz1h6ILxIGwAAAVA"]
[Wed Apr 29 01:39:33.885683 2026] [:error] [pid 2741:tid 2747] [client 52.230.176.21:62044] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp_ok.php"] [unique_id "afDw1fp92FeOz1h6ILxIHwAAAUE"]
[Wed Apr 29 01:39:34.441854 2026] [:error] [pid 2741:tid 2750] [client 52.230.176.21:60296] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afDw1vp92FeOz1h6ILxIIgAAAUQ"]
[Wed Apr 29 01:39:35.149652 2026] [:error] [pid 2741:tid 2763] [client 52.230.176.21:60300] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afDw1_p92FeOz1h6ILxIJgAAAVE"]
[Wed Apr 29 01:39:35.691857 2026] [:error] [pid 33864:tid 33888] [client 52.230.176.21:62055] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afDw1zXchLGZ4QggCslRiAAAAJY"]
[Wed Apr 29 01:39:36.192404 2026] [:error] [pid 3594:tid 3609] [client 52.230.176.21:55748] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afDw2FX25ha35uHxeYk8swAAAYw"]
[Wed Apr 29 01:39:36.605219 2026] [:error] [pid 2741:tid 2767] [client 52.230.176.21:61953] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "afDw2Pp92FeOz1h6ILxIKgAAAVU"]
[Wed Apr 29 01:39:37.158537 2026] [:error] [pid 2741:tid 2770] [client 52.230.176.21:55775] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "afDw2fp92FeOz1h6ILxILAAAAVg"]
[Wed Apr 29 01:39:37.712816 2026] [:error] [pid 33777:tid 33846] [client 52.230.176.21:65078] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "afDw2bXUCFWqmordGGJKMgAAAQs"]
[Wed Apr 29 01:39:38.346364 2026] [:error] [pid 2741:tid 2753] [client 52.230.176.21:55744] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inde.php"] [unique_id "afDw2vp92FeOz1h6ILxIMQAAAUc"]
[Wed Apr 29 01:39:38.863495 2026] [:error] [pid 2741:tid 2760] [client 52.230.176.21:65151] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtt.php"] [unique_id "afDw2vp92FeOz1h6ILxIMgAAAU4"]
[Wed Apr 29 01:39:39.355792 2026] [:error] [pid 2741:tid 2752] [client 52.230.176.21:60341] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtt.php"] [unique_id "afDw2_p92FeOz1h6ILxIMwAAAUY"]
[Wed Apr 29 01:39:39.896147 2026] [:error] [pid 3594:tid 3602] [client 52.230.176.21:62012] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtt.php"] [unique_id "afDw21X25ha35uHxeYk8tgAAAYU"]
[Wed Apr 29 01:39:40.492500 2026] [:error] [pid 2741:tid 2756] [client 52.230.176.21:55778] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xtt.php"] [unique_id "afDw3Pp92FeOz1h6ILxINgAAAUo"]
[Wed Apr 29 01:39:40.940570 2026] [:error] [pid 2741:tid 2750] [client 52.230.176.21:60374] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "afDw3Pp92FeOz1h6ILxIOAAAAUQ"]
[Wed Apr 29 01:39:41.430695 2026] [:error] [pid 3594:tid 3620] [client 52.230.176.21:62006] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "afDw3VX25ha35uHxeYk8twAAAZc"]
[Wed Apr 29 01:39:41.915519 2026] [:error] [pid 2741:tid 2757] [client 52.230.176.21:61958] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "afDw3fp92FeOz1h6ILxIOgAAAUs"]
[Wed Apr 29 01:39:42.548294 2026] [:error] [pid 3594:tid 3614] [client 52.230.176.21:60334] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/autoload_classmap.php"] [unique_id "afDw3lX25ha35uHxeYk8uQAAAZE"]
[Wed Apr 29 01:39:42.956736 2026] [:error] [pid 3594:tid 3617] [client 52.230.176.21:62039] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "afDw3lX25ha35uHxeYk8ugAAAZQ"]
[Wed Apr 29 01:39:43.497332 2026] [:error] [pid 3594:tid 3598] [client 52.230.176.21:61972] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "afDw31X25ha35uHxeYk8uwAAAYE"]
[Wed Apr 29 01:39:43.962340 2026] [:error] [pid 2741:tid 2746] [client 52.230.176.21:55757] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "afDw3_p92FeOz1h6ILxIPAAAAUA"]
[Wed Apr 29 01:39:44.514354 2026] [:error] [pid 33777:tid 33855] [client 52.230.176.21:60288] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we2.php"] [unique_id "afDw4LXUCFWqmordGGJKNAAAARQ"]
[Wed Apr 29 01:39:45.171394 2026] [:error] [pid 50889:tid 50908] [client 52.230.176.21:55784] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zicgg.php"] [unique_id "afDw4YzszBr00txEzGiDVgAAABA"]
[Wed Apr 29 01:39:45.695692 2026] [:error] [pid 3594:tid 3604] [client 52.230.176.21:60395] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zicgg.php"] [unique_id "afDw4VX25ha35uHxeYk8vAAAAYc"]
[Wed Apr 29 01:39:46.320415 2026] [:error] [pid 2741:tid 2768] [client 52.230.176.21:60358] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zicgg.php"] [unique_id "afDw4vp92FeOz1h6ILxIPQAAAVY"]
[Wed Apr 29 01:39:46.891024 2026] [:error] [pid 2741:tid 2758] [client 52.230.176.21:60302] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zicgg.php"] [unique_id "afDw4vp92FeOz1h6ILxIPgAAAUw"]
[Wed Apr 29 01:39:47.297565 2026] [:error] [pid 33777:tid 33857] [client 52.230.176.21:54981] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pouhg.php"] [unique_id "afDw47XUCFWqmordGGJKNQAAARY"]
[Wed Apr 29 01:39:47.795364 2026] [:error] [pid 3594:tid 3618] [client 52.230.176.21:62046] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pouhg.php"] [unique_id "afDw41X25ha35uHxeYk8vQAAAZU"]
[Wed Apr 29 01:39:48.212163 2026] [:error] [pid 3594:tid 3603] [client 52.230.176.21:60397] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pouhg.php"] [unique_id "afDw5FX25ha35uHxeYk8vgAAAYY"]
[Wed Apr 29 01:39:48.735665 2026] [:error] [pid 33776:tid 33827] [client 52.230.176.21:60328] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pouhg.php"] [unique_id "afDw5F-bEJ2CKP3iKABfngAAAFM"]
[Wed Apr 29 01:39:49.187022 2026] [:error] [pid 33777:tid 33853] [client 52.230.176.21:60314] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file88.php"] [unique_id "afDw5bXUCFWqmordGGJKNgAAARI"]
[Wed Apr 29 01:39:49.618215 2026] [:error] [pid 3594:tid 3606] [client 52.230.176.21:65041] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file88.php"] [unique_id "afDw5VX25ha35uHxeYk8wAAAAYk"]
[Wed Apr 29 01:39:50.035657 2026] [:error] [pid 3594:tid 3601] [client 52.230.176.21:55702] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file88.php"] [unique_id "afDw5lX25ha35uHxeYk8wQAAAYQ"]
[Wed Apr 29 01:39:50.452734 2026] [:error] [pid 3594:tid 3605] [client 52.230.176.21:60355] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file88.php"] [unique_id "afDw5lX25ha35uHxeYk8wwAAAYg"]
[Wed Apr 29 01:39:50.952651 2026] [:error] [pid 3594:tid 3611] [client 52.230.176.21:65131] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenon1337.php"] [unique_id "afDw5lX25ha35uHxeYk8xQAAAY4"]
[Wed Apr 29 01:39:51.401738 2026] [:error] [pid 2741:tid 2760] [client 52.230.176.21:62059] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenon1337.php"] [unique_id "afDw5_p92FeOz1h6ILxIQQAAAU4"]
[Wed Apr 29 01:39:51.908262 2026] [:error] [pid 2741:tid 2749] [client 52.230.176.21:60404] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenon1337.php"] [unique_id "afDw5_p92FeOz1h6ILxIQgAAAUM"]
[Wed Apr 29 01:39:52.491910 2026] [:error] [pid 33864:tid 33877] [client 52.230.176.21:65096] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenon1337.php"] [unique_id "afDw6DXchLGZ4QggCslRigAAAIs"]
[Wed Apr 29 01:39:53.054980 2026] [:error] [pid 50889:tid 50916] [client 52.230.176.21:62024] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "afDw6YzszBr00txEzGiDVwAAABg"]
[Wed Apr 29 01:39:53.546048 2026] [:error] [pid 33864:tid 33889] [client 52.230.176.21:60360] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "afDw6TXchLGZ4QggCslRiwAAAJc"]
[Wed Apr 29 01:39:54.036022 2026] [:error] [pid 3594:tid 3602] [client 52.230.176.21:60345] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "afDw6lX25ha35uHxeYk8yQAAAYU"]
[Wed Apr 29 01:39:54.485777 2026] [:error] [pid 33864:tid 33871] [client 52.230.176.21:60406] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "afDw6jXchLGZ4QggCslRjQAAAIU"]
[Wed Apr 29 01:39:54.994352 2026] [:error] [pid 50889:tid 50901] [client 52.230.176.21:60393] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "afDw6ozszBr00txEzGiDWAAAAAk"]
[Wed Apr 29 01:39:55.560988 2026] [:error] [pid 50889:tid 50909] [client 52.230.176.21:65084] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "afDw64zszBr00txEzGiDWQAAABE"]
[Wed Apr 29 01:39:56.504724 2026] [:error] [pid 3594:tid 3601] [client 52.230.176.21:60413] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "afDw7FX25ha35uHxeYk8zgAAAYQ"]
[Wed Apr 29 01:39:56.937403 2026] [:error] [pid 33776:tid 33808] [client 52.230.176.21:60390] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "afDw7F-bEJ2CKP3iKABfnwAAAEA"]
[Wed Apr 29 01:39:57.394904 2026] [:error] [pid 2741:tid 2759] [client 52.230.176.21:55745] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "afDw7fp92FeOz1h6ILxIRAAAAU0"]
[Wed Apr 29 01:39:57.973767 2026] [:error] [pid 33777:tid 33859] [client 52.230.176.21:60339] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "afDw7bXUCFWqmordGGJKOgAAARg"]
[Wed Apr 29 01:39:58.531965 2026] [:error] [pid 33864:tid 33873] [client 52.230.176.21:62013] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "afDw7jXchLGZ4QggCslRjwAAAIc"]
[Wed Apr 29 01:39:59.109944 2026] [:error] [pid 33777:tid 33847] [client 52.230.176.21:60411] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "afDw77XUCFWqmordGGJKPAAAAQw"]
[Wed Apr 29 01:39:59.577314 2026] [:error] [pid 2741:tid 2751] [client 52.230.176.21:65089] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cache.php"] [unique_id "afDw7_p92FeOz1h6ILxIRQAAAUU"]
[Wed Apr 29 01:40:00.082853 2026] [:error] [pid 3594:tid 3613] [client 52.230.176.21:62054] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cache.php"] [unique_id "afDw8FX25ha35uHxeYk80QAAAZA"]
[Wed Apr 29 01:40:00.514478 2026] [:error] [pid 2741:tid 2746] [client 52.230.176.21:60336] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cache.php"] [unique_id "afDw8Pp92FeOz1h6ILxISQAAAUA"]
[Wed Apr 29 01:40:00.984392 2026] [:error] [pid 2741:tid 2748] [client 52.230.176.21:62015] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cache.php"] [unique_id "afDw8Pp92FeOz1h6ILxISwAAAUI"]
[Wed Apr 29 01:40:01.537786 2026] [:error] [pid 3594:tid 3610] [client 52.230.176.21:60323] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "afDw8VX25ha35uHxeYk80gAAAY0"]
[Wed Apr 29 01:40:02.162110 2026] [:error] [pid 2741:tid 2761] [client 52.230.176.21:62077] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "afDw8vp92FeOz1h6ILxITgAAAU8"]
[Wed Apr 29 01:40:02.635636 2026] [:error] [pid 33775:tid 33795] [client 52.230.176.21:60312] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "afDw8psYOcoQrq88YbVPjAAAANA"]
[Wed Apr 29 01:40:03.122747 2026] [:error] [pid 33864:tid 33869] [client 52.230.176.21:60342] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error.php"] [unique_id "afDw8zXchLGZ4QggCslRkAAAAIM"]
[Wed Apr 29 01:40:03.542059 2026] [:error] [pid 2741:tid 2749] [client 52.230.176.21:61992] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "afDw8_p92FeOz1h6ILxIUQAAAUM"]
[Wed Apr 29 01:40:03.961045 2026] [:error] [pid 2741:tid 2756] [client 52.230.176.21:55807] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "afDw8_p92FeOz1h6ILxIUwAAAUo"]
[Wed Apr 29 01:40:04.476845 2026] [:error] [pid 33777:tid 33836] [client 52.230.176.21:55693] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "afDw9LXUCFWqmordGGJKPwAAAQE"]
[Wed Apr 29 01:40:04.990203 2026] [:error] [pid 2741:tid 2752] [client 52.230.176.21:60338] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file32.php"] [unique_id "afDw9Pp92FeOz1h6ILxIVAAAAUY"]
[Wed Apr 29 01:40:05.502787 2026] [:error] [pid 2741:tid 2766] [client 52.230.176.21:55776] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cvrvk.php"] [unique_id "afDw9fp92FeOz1h6ILxIVQAAAVQ"]
[Wed Apr 29 01:40:06.020402 2026] [:error] [pid 3594:tid 3616] [client 52.230.176.21:60414] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cvrvk.php"] [unique_id "afDw9lX25ha35uHxeYk81AAAAZM"]
[Wed Apr 29 01:40:06.443438 2026] [:error] [pid 33777:tid 33849] [client 52.230.176.21:55722] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cvrvk.php"] [unique_id "afDw9rXUCFWqmordGGJKQQAAAQ4"]
[Wed Apr 29 01:40:06.894515 2026] [:error] [pid 33777:tid 33844] [client 52.230.176.21:60401] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cvrvk.php"] [unique_id "afDw9rXUCFWqmordGGJKQgAAAQk"]
[Wed Apr 29 01:40:07.405210 2026] [:error] [pid 2741:tid 2748] [client 52.230.176.21:55798] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "afDw9_p92FeOz1h6ILxIWgAAAUI"]
[Wed Apr 29 01:40:07.946012 2026] [:error] [pid 2741:tid 2749] [client 52.230.176.21:61961] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "afDw9_p92FeOz1h6ILxIWwAAAUM"]
[Wed Apr 29 01:40:08.505356 2026] [:error] [pid 33864:tid 33886] [client 52.230.176.21:60333] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "afDw-DXchLGZ4QggCslRkQAAAJQ"]
[Wed Apr 29 01:40:08.975366 2026] [:error] [pid 3594:tid 3614] [client 52.230.176.21:60305] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "afDw-FX25ha35uHxeYk81QAAAZE"]
[Wed Apr 29 01:40:09.406444 2026] [:error] [pid 2741:tid 2764] [client 52.230.176.21:55753] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "afDw-fp92FeOz1h6ILxIXQAAAVI"]
[Wed Apr 29 01:40:09.875400 2026] [:error] [pid 33864:tid 33879] [client 52.230.176.21:61952] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "afDw-TXchLGZ4QggCslRkgAAAI0"]
[Wed Apr 29 01:40:10.443400 2026] [:error] [pid 2741:tid 2770] [client 52.230.176.21:55756] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "afDw-vp92FeOz1h6ILxIXgAAAVg"]
[Wed Apr 29 01:40:10.874868 2026] [:error] [pid 2741:tid 2757] [client 52.230.176.21:60373] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "afDw-vp92FeOz1h6ILxIXwAAAUs"]
[Wed Apr 29 01:40:11.352891 2026] [:error] [pid 2741:tid 2755] [client 52.230.176.21:60405] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hello.php"] [unique_id "afDw-_p92FeOz1h6ILxIYAAAAUk"]
[Wed Apr 29 01:40:12.165052 2026] [:error] [pid 2741:tid 2747] [client 52.230.176.21:61966] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hello.php"] [unique_id "afDw_Pp92FeOz1h6ILxIYQAAAUE"]
[Wed Apr 29 01:40:12.615254 2026] [:error] [pid 33777:tid 33854] [client 52.230.176.21:55030] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hello.php"] [unique_id "afDw_LXUCFWqmordGGJKQwAAARM"]
[Wed Apr 29 01:40:13.238854 2026] [:error] [pid 33775:tid 33799] [client 52.230.176.21:62010] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hello.php"] [unique_id "afDw_ZsYOcoQrq88YbVPjwAAANQ"]
[Wed Apr 29 01:40:13.715356 2026] [:error] [pid 33777:tid 33858] [client 52.230.176.21:60380] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "afDw_bXUCFWqmordGGJKRAAAARc"]
[Wed Apr 29 01:40:14.164807 2026] [:error] [pid 33776:tid 33813] [client 52.230.176.21:55758] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "afDw_l-bEJ2CKP3iKABfoQAAAEU"]
[Wed Apr 29 01:40:14.575414 2026] [:error] [pid 2741:tid 2769] [client 52.230.176.21:55697] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "afDw_vp92FeOz1h6ILxIZAAAAVc"]
[Wed Apr 29 01:40:15.140606 2026] [:error] [pid 50889:tid 50898] [client 52.230.176.21:60400] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links-opml.php"] [unique_id "afDw_4zszBr00txEzGiDWwAAAAY"]
[Wed Apr 29 01:40:15.661592 2026] [:error] [pid 33775:tid 33793] [client 52.230.176.21:61969] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lti.php"] [unique_id "afDw_5sYOcoQrq88YbVPkwAAAM4"]
[Wed Apr 29 01:40:16.130781 2026] [:error] [pid 33776:tid 33817] [client 52.230.176.21:55770] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lti.php"] [unique_id "afDxAF-bEJ2CKP3iKABfpAAAAEk"]
[Wed Apr 29 01:40:16.579327 2026] [:error] [pid 33777:tid 33852] [client 52.230.176.21:62066] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lti.php"] [unique_id "afDxALXUCFWqmordGGJKRQAAARE"]
[Wed Apr 29 01:40:17.011716 2026] [:error] [pid 3594:tid 3599] [client 52.230.176.21:55687] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lti.php"] [unique_id "afDxAVX25ha35uHxeYk82AAAAYI"]
[Wed Apr 29 01:40:17.454467 2026] [:error] [pid 33777:tid 33859] [client 52.230.176.21:61971] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "afDxAbXUCFWqmordGGJKRgAAARg"]
[Wed Apr 29 01:40:17.892266 2026] [:error] [pid 33777:tid 33835] [client 52.230.176.21:61962] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "afDxAbXUCFWqmordGGJKRwAAAQA"]
[Wed Apr 29 01:40:18.426990 2026] [:error] [pid 50889:tid 50906] [client 52.230.176.21:60379] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "afDxAozszBr00txEzGiDXAAAAA4"]
[Wed Apr 29 01:40:18.967231 2026] [:error] [pid 33776:tid 33814] [client 52.230.176.21:60298] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "afDxAl-bEJ2CKP3iKABfpQAAAEY"]
[Wed Apr 29 01:40:19.376933 2026] [:error] [pid 33777:tid 33856] [client 52.230.176.21:60407] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shellalfa.php"] [unique_id "afDxA7XUCFWqmordGGJKSAAAARU"]
[Wed Apr 29 01:40:19.893000 2026] [:error] [pid 33864:tid 33885] [client 52.230.176.21:60290] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shellalfa.php"] [unique_id "afDxAzXchLGZ4QggCslRkwAAAJM"]
[Wed Apr 29 01:40:33.301988 2026] [:error] [pid 33775:tid 33779] [client 52.230.176.21:55774] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mws.php"] [unique_id "afDxEZsYOcoQrq88YbVPpQAAAMA"]
[Wed Apr 29 01:40:34.697995 2026] [:error] [pid 2741:tid 2765] [client 52.230.176.21:60375] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mws.php"] [unique_id "afDxEvp92FeOz1h6ILxIeQAAAVM"]
[Wed Apr 29 01:40:35.398295 2026] [:error] [pid 50889:tid 50909] [client 52.230.176.21:55750] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mws.php"] [unique_id "afDxE4zszBr00txEzGiDZgAAABE"]
[Wed Apr 29 01:40:35.922464 2026] [:error] [pid 33776:tid 33811] [client 52.230.176.21:60293] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mws.php"] [unique_id "afDxE1-bEJ2CKP3iKABfpwAAAEM"]
[Wed Apr 29 01:40:36.390437 2026] [:error] [pid 33776:tid 33828] [client 52.230.176.21:55754] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "afDxFF-bEJ2CKP3iKABfqAAAAFQ"]
[Wed Apr 29 01:40:36.857520 2026] [:error] [pid 3594:tid 3608] [client 52.230.176.21:55761] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "afDxFFX25ha35uHxeYk82wAAAYs"]
[Wed Apr 29 01:40:37.489399 2026] [:error] [pid 33777:tid 33835] [client 52.230.176.21:60308] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "afDxFbXUCFWqmordGGJKUwAAAQA"]
[Wed Apr 29 01:40:38.287768 2026] [:error] [pid 3594:tid 3597] [client 52.230.176.21:60332] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file9.php"] [unique_id "afDxFlX25ha35uHxeYk83QAAAYA"]
[Wed Apr 29 01:40:38.759499 2026] [:error] [pid 50889:tid 50902] [client 52.230.176.21:60346] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "afDxFozszBr00txEzGiDaAAAAAo"]
[Wed Apr 29 01:40:39.512169 2026] [:error] [pid 50889:tid 50910] [client 52.230.176.21:62069] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "afDxF4zszBr00txEzGiDaQAAABI"]
[Wed Apr 29 01:40:39.993707 2026] [:error] [pid 33776:tid 33825] [client 52.230.176.21:65121] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "afDxF1-bEJ2CKP3iKABfqQAAAFE"]
[Wed Apr 29 01:40:40.398741 2026] [:error] [pid 33777:tid 33841] [client 52.230.176.21:62045] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "afDxGLXUCFWqmordGGJKVgAAAQY"]
[Wed Apr 29 01:40:40.971509 2026] [:error] [pid 50889:tid 50905] [client 52.230.176.21:55805] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "afDxGIzszBr00txEzGiDawAAAA0"]
[Wed Apr 29 01:40:41.582355 2026] [:error] [pid 50889:tid 50895] [client 52.230.176.21:55708] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "afDxGYzszBr00txEzGiDbAAAAAM"]
[Wed Apr 29 01:40:42.021636 2026] [:error] [pid 3594:tid 3610] [client 52.230.176.21:60387] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "afDxGlX25ha35uHxeYk83wAAAY0"]
[Wed Apr 29 01:40:42.551695 2026] [:error] [pid 2741:tid 2753] [client 52.230.176.21:55688] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "afDxGvp92FeOz1h6ILxIegAAAUc"]
[Wed Apr 29 01:40:43.016150 2026] [:error] [pid 33776:tid 33817] [client 52.230.176.21:60304] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "afDxG1-bEJ2CKP3iKABfrgAAAEk"]
[Wed Apr 29 01:40:43.467404 2026] [:error] [pid 33777:tid 33848] [client 52.230.176.21:60370] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "afDxG7XUCFWqmordGGJKWQAAAQ0"]
[Wed Apr 29 01:40:43.926901 2026] [:error] [pid 33777:tid 33850] [client 52.230.176.21:60307] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "afDxG7XUCFWqmordGGJKWgAAAQ8"]
[Wed Apr 29 01:40:44.524020 2026] [:error] [pid 50889:tid 50903] [client 52.230.176.21:55781] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "afDxHIzszBr00txEzGiDbQAAAAs"]
[Wed Apr 29 01:40:45.105543 2026] [:error] [pid 3594:tid 3620] [client 52.230.176.21:60371] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "afDxHVX25ha35uHxeYk84AAAAZc"]
[Wed Apr 29 01:40:45.606222 2026] [:error] [pid 33777:tid 33844] [client 52.230.176.21:55719] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "afDxHbXUCFWqmordGGJKXAAAAQk"]
[Wed Apr 29 01:40:46.051995 2026] [:error] [pid 33775:tid 33790] [client 52.230.176.21:55777] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "afDxHpsYOcoQrq88YbVPpgAAAMs"]
[Wed Apr 29 01:40:46.533647 2026] [:error] [pid 33777:tid 33857] [client 52.230.176.21:65040] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/06.php"] [unique_id "afDxHrXUCFWqmordGGJKXgAAARY"]
[Wed Apr 29 01:40:47.024014 2026] [:error] [pid 33777:tid 33838] [client 52.230.176.21:55742] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "afDxH7XUCFWqmordGGJKXwAAAQM"]
[Wed Apr 29 01:40:47.561309 2026] [:error] [pid 33777:tid 33854] [client 52.230.176.21:60408] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "afDxH7XUCFWqmordGGJKYAAAARM"]
[Wed Apr 29 01:40:48.083608 2026] [:error] [pid 33777:tid 33852] [client 52.230.176.21:55705] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "afDxILXUCFWqmordGGJKYQAAARE"]
[Wed Apr 29 01:40:48.587332 2026] [:error] [pid 33776:tid 33829] [client 52.230.176.21:55000] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "afDxIF-bEJ2CKP3iKABfswAAAFU"]
[Wed Apr 29 01:40:49.175202 2026] [:error] [pid 33777:tid 33856] [client 52.230.176.21:60325] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owl.php"] [unique_id "afDxIbXUCFWqmordGGJKYgAAARU"]
[Wed Apr 29 01:40:49.811015 2026] [:error] [pid 50889:tid 50904] [client 52.230.176.21:55795] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owl.php"] [unique_id "afDxIYzszBr00txEzGiDbgAAAAw"]
[Wed Apr 29 01:40:50.241803 2026] [:error] [pid 33777:tid 33848] [client 52.230.176.21:60291] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owl.php"] [unique_id "afDxIrXUCFWqmordGGJKZQAAAQ0"]
[Wed Apr 29 01:40:50.749886 2026] [:error] [pid 33776:tid 33811] [client 52.230.176.21:65025] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/owl.php"] [unique_id "afDxIl-bEJ2CKP3iKABftAAAAEM"]
[Wed Apr 29 01:40:51.171139 2026] [:error] [pid 33776:tid 33825] [client 52.230.176.21:60313] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hook.php"] [unique_id "afDxI1-bEJ2CKP3iKABftQAAAFE"]
[Wed Apr 29 01:40:51.558511 2026] [:error] [pid 2741:tid 2750] [client 52.230.176.21:55751] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hook.php"] [unique_id "afDxI_p92FeOz1h6ILxIfQAAAUQ"]
[Wed Apr 29 01:40:52.083421 2026] [:error] [pid 2741:tid 2754] [client 52.230.176.21:62011] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hook.php"] [unique_id "afDxJPp92FeOz1h6ILxIfwAAAUg"]
[Wed Apr 29 01:40:52.541369 2026] [:error] [pid 33777:tid 33846] [client 52.230.176.21:55755] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hook.php"] [unique_id "afDxJLXUCFWqmordGGJKZgAAAQs"]
[Wed Apr 29 01:40:52.948834 2026] [:error] [pid 2741:tid 2770] [client 52.230.176.21:60349] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "afDxJPp92FeOz1h6ILxIgQAAAVg"]
[Wed Apr 29 01:40:53.396598 2026] [:error] [pid 3594:tid 3600] [client 52.230.176.21:61995] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "afDxJVX25ha35uHxeYk84QAAAYM"]
[Wed Apr 29 01:40:53.883370 2026] [:error] [pid 3594:tid 3615] [client 52.230.176.21:60316] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "afDxJVX25ha35uHxeYk84gAAAZI"]
[Wed Apr 29 01:40:54.329341 2026] [:error] [pid 33776:tid 33809] [client 52.230.176.21:60361] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "afDxJl-bEJ2CKP3iKABfugAAAEE"]
[Wed Apr 29 01:40:54.832394 2026] [:error] [pid 2741:tid 2767] [client 52.230.176.21:55706] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "afDxJvp92FeOz1h6ILxIhwAAAVU"]
[Wed Apr 29 01:40:55.223204 2026] [:error] [pid 2741:tid 2763] [client 52.230.176.21:55789] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "afDxJ_p92FeOz1h6ILxIigAAAVE"]
[Wed Apr 29 01:40:55.657535 2026] [:error] [pid 2741:tid 2764] [client 52.230.176.21:55790] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "afDxJ_p92FeOz1h6ILxIjQAAAVI"]
[Wed Apr 29 01:40:56.240684 2026] [:error] [pid 2741:tid 2759] [client 52.230.176.21:55760] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ok.php"] [unique_id "afDxKPp92FeOz1h6ILxIjgAAAU0"]
[Wed Apr 29 01:40:56.701012 2026] [:error] [pid 33777:tid 33839] [client 52.230.176.21:55797] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "afDxKLXUCFWqmordGGJKZwAAAQQ"]
[Wed Apr 29 01:40:57.134346 2026] [:error] [pid 2741:tid 2766] [client 52.230.176.21:60415] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "afDxKfp92FeOz1h6ILxIkAAAAVQ"]
[Wed Apr 29 01:40:57.609977 2026] [:error] [pid 2741:tid 2770] [client 52.230.176.21:55010] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "afDxKfp92FeOz1h6ILxIkQAAAVg"]
[Wed Apr 29 01:40:58.137761 2026] [:error] [pid 33777:tid 33849] [client 52.230.176.21:60363] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "afDxKrXUCFWqmordGGJKaAAAAQ4"]
[Wed Apr 29 01:40:58.588329 2026] [:error] [pid 50889:tid 50897] [client 52.230.176.21:55689] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clirp.php"] [unique_id "afDxKozszBr00txEzGiDbwAAAAU"]
[Wed Apr 29 01:40:59.029857 2026] [:error] [pid 33775:tid 33780] [client 52.230.176.21:60344] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clirp.php"] [unique_id "afDxK5sYOcoQrq88YbVPpwAAAME"]
[Wed Apr 29 01:40:59.575351 2026] [:error] [pid 33776:tid 33817] [client 52.230.176.21:55768] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clirp.php"] [unique_id "afDxK1-bEJ2CKP3iKABfvQAAAEk"]
[Wed Apr 29 01:41:00.080534 2026] [:error] [pid 33775:tid 33803] [client 52.230.176.21:60388] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clirp.php"] [unique_id "afDxLJsYOcoQrq88YbVPqAAAANg"]
[Wed Apr 29 01:41:00.565132 2026] [:error] [pid 3594:tid 3614] [client 52.230.176.21:60331] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/domains.php"] [unique_id "afDxLFX25ha35uHxeYk85AAAAZE"]
[Wed Apr 29 01:41:00.979094 2026] [:error] [pid 33777:tid 33844] [client 52.230.176.21:55767] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/domains.php"] [unique_id "afDxLLXUCFWqmordGGJKagAAAQk"]
[Wed Apr 29 01:41:01.403740 2026] [:error] [pid 33777:tid 33857] [client 52.230.176.21:60362] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/domains.php"] [unique_id "afDxLbXUCFWqmordGGJKbAAAARY"]
[Wed Apr 29 01:41:01.854850 2026] [:error] [pid 33777:tid 33854] [client 52.230.176.21:60402] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/domains.php"] [unique_id "afDxLbXUCFWqmordGGJKbQAAARM"]
[Wed Apr 29 01:41:02.300141 2026] [:error] [pid 33777:tid 33852] [client 52.230.176.21:60350] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wkdec.php"] [unique_id "afDxLrXUCFWqmordGGJKbgAAARE"]
[Wed Apr 29 01:41:02.761106 2026] [:error] [pid 33777:tid 33858] [client 52.230.176.21:55717] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wkdec.php"] [unique_id "afDxLrXUCFWqmordGGJKbwAAARc"]
[Wed Apr 29 01:41:03.297758 2026] [:error] [pid 2741:tid 2755] [client 52.230.176.21:62071] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wkdec.php"] [unique_id "afDxL_p92FeOz1h6ILxIkgAAAUk"]
[Wed Apr 29 01:41:03.798894 2026] [:error] [pid 33777:tid 33845] [client 52.230.176.21:60301] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wkdec.php"] [unique_id "afDxL7XUCFWqmordGGJKcgAAAQo"]
[Wed Apr 29 01:41:04.262732 2026] [:error] [pid 2741:tid 2748] [client 52.230.176.21:60315] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "afDxMPp92FeOz1h6ILxIlAAAAUI"]
[Wed Apr 29 01:41:04.879694 2026] [:error] [pid 2741:tid 2758] [client 52.230.176.21:55785] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "afDxMPp92FeOz1h6ILxIlwAAAUw"]
[Wed Apr 29 01:41:05.418103 2026] [:error] [pid 2741:tid 2763] [client 52.230.176.21:55699] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "afDxMfp92FeOz1h6ILxImQAAAVE"]
[Wed Apr 29 01:41:05.826063 2026] [:error] [pid 2741:tid 2756] [client 52.230.176.21:55715] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lo.php"] [unique_id "afDxMfp92FeOz1h6ILxImwAAAUo"]
[Wed Apr 29 01:41:06.253425 2026] [:error] [pid 2741:tid 2759] [client 52.230.176.21:55747] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "afDxMvp92FeOz1h6ILxInQAAAU0"]
[Wed Apr 29 01:41:06.669422 2026] [:error] [pid 33776:tid 33829] [client 52.230.176.21:55707] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "afDxMl-bEJ2CKP3iKABfvgAAAFU"]
[Wed Apr 29 01:41:07.165098 2026] [:error] [pid 33777:tid 33837] [client 52.230.176.21:60299] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "afDxM7XUCFWqmordGGJKdAAAAQI"]
[Wed Apr 29 01:41:07.612341 2026] [:error] [pid 33864:tid 33888] [client 52.230.176.21:65032] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "afDxMzXchLGZ4QggCslRlQAAAJY"]
[Wed Apr 29 01:41:08.173008 2026] [:error] [pid 33864:tid 33868] [client 52.230.176.21:54996] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "afDxNDXchLGZ4QggCslRlgAAAII"]
[Wed Apr 29 01:41:08.623969 2026] [:error] [pid 3594:tid 3613] [client 52.230.176.21:65090] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "afDxNFX25ha35uHxeYk86gAAAZA"]
[Wed Apr 29 01:41:09.024168 2026] [:error] [pid 3594:tid 3621] [client 52.230.176.21:55770] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "afDxNVX25ha35uHxeYk87gAAAZg"]
[Wed Apr 29 01:41:09.466166 2026] [:error] [pid 3594:tid 3615] [client 52.230.176.21:55685] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bless5.php"] [unique_id "afDxNVX25ha35uHxeYk87wAAAZI"]
[Wed Apr 29 01:41:09.964929 2026] [:error] [pid 50889:tid 50912] [client 52.230.176.21:55014] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "afDxNYzszBr00txEzGiDcAAAABQ"]
[Wed Apr 29 01:41:10.480158 2026] [:error] [pid 50889:tid 50900] [client 52.230.176.21:55686] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "afDxNozszBr00txEzGiDcQAAAAg"]
[Wed Apr 29 01:41:11.018039 2026] [:error] [pid 2741:tid 2770] [client 52.230.176.21:55759] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "afDxN_p92FeOz1h6ILxInwAAAVg"]
[Wed Apr 29 01:41:11.495755 2026] [:error] [pid 2741:tid 2762] [client 52.230.176.21:60320] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "afDxN_p92FeOz1h6ILxIoQAAAVA"]
[Wed Apr 29 01:41:11.889409 2026] [:error] [pid 33776:tid 33812] [client 52.230.176.21:65098] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "afDxN1-bEJ2CKP3iKABfwgAAAEQ"]
[Wed Apr 29 01:41:12.316866 2026] [:error] [pid 33777:tid 33840] [client 52.230.176.21:65128] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "afDxOLXUCFWqmordGGJKdgAAAQU"]
[Wed Apr 29 01:41:12.804952 2026] [:error] [pid 50889:tid 50893] [client 52.230.176.21:61990] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "afDxOIzszBr00txEzGiDcwAAAAE"]
[Wed Apr 29 01:41:13.257664 2026] [:error] [pid 50889:tid 50908] [client 52.230.176.21:55773] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "afDxOYzszBr00txEzGiDdAAAABA"]
[Wed Apr 29 01:41:13.765649 2026] [:error] [pid 50889:tid 50916] [client 52.230.176.21:55796] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "afDxOYzszBr00txEzGiDdQAAABg"]
[Wed Apr 29 01:41:14.301486 2026] [:error] [pid 33777:tid 33842] [client 52.230.176.21:60343] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "afDxOrXUCFWqmordGGJKeAAAAQc"]
[Wed Apr 29 01:41:14.742392 2026] [:error] [pid 3594:tid 3607] [client 52.230.176.21:65076] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "afDxOlX25ha35uHxeYk89AAAAYo"]
[Wed Apr 29 01:41:15.159738 2026] [:error] [pid 3594:tid 3599] [client 52.230.176.21:55729] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sid3.php"] [unique_id "afDxO1X25ha35uHxeYk89QAAAYI"]
[Wed Apr 29 01:41:15.812011 2026] [:error] [pid 33775:tid 33786] [client 52.230.176.21:62021] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cliner.php"] [unique_id "afDxO5sYOcoQrq88YbVPqQAAAMc"]
[Wed Apr 29 01:41:16.376366 2026] [:error] [pid 33777:tid 33857] [client 52.230.176.21:65063] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cliner.php"] [unique_id "afDxPLXUCFWqmordGGJKewAAARY"]
[Wed Apr 29 01:41:16.918698 2026] [:error] [pid 2741:tid 2758] [client 52.230.176.21:65073] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cliner.php"] [unique_id "afDxPPp92FeOz1h6ILxIpAAAAUw"]
[Wed Apr 29 01:41:17.460515 2026] [:error] [pid 3594:tid 3613] [client 52.230.176.21:55772] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-cliner.php"] [unique_id "afDxPVX25ha35uHxeYk8-QAAAZA"]
[Wed Apr 29 01:41:17.939091 2026] [:error] [pid 3594:tid 3597] [client 52.230.176.21:60367] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "afDxPVX25ha35uHxeYk8-gAAAYA"]
[Wed Apr 29 01:41:18.417942 2026] [:error] [pid 3594:tid 3603] [client 52.230.176.21:65027] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "afDxPlX25ha35uHxeYk8-wAAAYY"]
[Wed Apr 29 01:41:18.932974 2026] [:error] [pid 3594:tid 3610] [client 52.230.176.21:54984] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "afDxPlX25ha35uHxeYk8_AAAAY0"]
[Wed Apr 29 01:41:19.514218 2026] [:error] [pid 33775:tid 33795] [client 52.230.176.21:65083] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/v3.php"] [unique_id "afDxP5sYOcoQrq88YbVPqwAAANA"]
[Wed Apr 29 01:41:20.038641 2026] [:error] [pid 33776:tid 33821] [client 52.230.176.21:54982] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "afDxQF-bEJ2CKP3iKABfyQAAAE0"]
[Wed Apr 29 01:41:20.435384 2026] [:error] [pid 33776:tid 33814] [client 52.230.176.21:55791] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "afDxQF-bEJ2CKP3iKABfygAAAEY"]
[Wed Apr 29 01:41:21.142631 2026] [:error] [pid 2741:tid 2763] [client 52.230.176.21:65049] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "afDxQfp92FeOz1h6ILxIpQAAAVE"]
[Wed Apr 29 01:41:21.816799 2026] [:error] [pid 2741:tid 2756] [client 52.230.176.21:55701] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acp.php"] [unique_id "afDxQfp92FeOz1h6ILxIpgAAAUo"]
[Wed Apr 29 01:41:22.316129 2026] [:error] [pid 2741:tid 2757] [client 52.230.176.21:54997] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "afDxQvp92FeOz1h6ILxIqAAAAUs"]
[Wed Apr 29 01:41:22.812084 2026] [:error] [pid 2741:tid 2753] [client 52.230.176.21:55700] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "afDxQvp92FeOz1h6ILxIqQAAAUc"]
[Wed Apr 29 01:41:23.428057 2026] [:error] [pid 2741:tid 2749] [client 52.230.176.21:55710] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "afDxQ_p92FeOz1h6ILxIqgAAAUM"]
[Wed Apr 29 01:41:23.921147 2026] [:error] [pid 2741:tid 2761] [client 52.230.176.21:55731] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "afDxQ_p92FeOz1h6ILxIqwAAAU8"]
[Wed Apr 29 01:41:24.624423 2026] [:error] [pid 33776:tid 33811] [client 52.230.176.21:55737] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "afDxRF-bEJ2CKP3iKABfzAAAAEM"]
[Wed Apr 29 01:41:25.607053 2026] [:error] [pid 2741:tid 2754] [client 52.230.176.21:62034] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "afDxRfp92FeOz1h6ILxIrgAAAUg"]
[Wed Apr 29 01:41:26.216101 2026] [:error] [pid 33864:tid 33870] [client 52.230.176.21:54988] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "afDxRjXchLGZ4QggCslRmAAAAIQ"]
[Wed Apr 29 01:41:26.788427 2026] [:error] [pid 33864:tid 33889] [client 52.230.176.21:55018] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ton.php"] [unique_id "afDxRjXchLGZ4QggCslRmwAAAJc"]
[Wed Apr 29 01:41:27.573856 2026] [:error] [pid 33775:tid 33787] [client 52.230.176.21:55692] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "afDxR5sYOcoQrq88YbVPrQAAAMg"]
[Wed Apr 29 01:41:28.179742 2026] [:error] [pid 33776:tid 33828] [client 52.230.176.21:55806] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "afDxSF-bEJ2CKP3iKABfzQAAAFQ"]
[Wed Apr 29 01:41:29.004777 2026] [:error] [pid 3594:tid 3607] [client 52.230.176.21:60359] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "afDxSVX25ha35uHxeYk9AQAAAYo"]
[Wed Apr 29 01:41:29.606921 2026] [:error] [pid 50889:tid 50906] [client 52.230.176.21:55740] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/forbidals.php"] [unique_id "afDxSYzszBr00txEzGiDdwAAAA4"]
[Wed Apr 29 01:41:30.087669 2026] [:error] [pid 50889:tid 50902] [client 52.230.176.21:55006] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zzkhe.php"] [unique_id "afDxSozszBr00txEzGiDeQAAAAo"]
[Wed Apr 29 01:41:30.761447 2026] [:error] [pid 50889:tid 50915] [client 52.230.176.21:55698] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zzkhe.php"] [unique_id "afDxSozszBr00txEzGiDewAAABc"]
[Wed Apr 29 01:41:31.270545 2026] [:error] [pid 3594:tid 3604] [client 52.230.176.21:54979] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zzkhe.php"] [unique_id "afDxS1X25ha35uHxeYk9AwAAAYc"]
[Wed Apr 29 01:41:44.172661 2026] [:error] [pid 33776:tid 33810] [client 52.230.176.21:55801] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "afDxWF-bEJ2CKP3iKABf3gAAAEI"]
[Wed Apr 29 01:41:44.569538 2026] [:error] [pid 33776:tid 33811] [client 52.230.176.21:62017] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "afDxWF-bEJ2CKP3iKABf3wAAAEM"]
[Wed Apr 29 01:41:45.013559 2026] [:error] [pid 33864:tid 33869] [client 52.230.176.21:65077] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "afDxWTXchLGZ4QggCslRogAAAIM"]
[Wed Apr 29 01:41:45.516620 2026] [:error] [pid 50889:tid 50907] [client 52.230.176.21:65031] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new4.php"] [unique_id "afDxWYzszBr00txEzGiDgQAAAA8"]
[Wed Apr 29 01:41:46.068117 2026] [:error] [pid 3594:tid 3616] [client 52.230.176.21:65107] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfile.php"] [unique_id "afDxWlX25ha35uHxeYk9GAAAAZM"]
[Wed Apr 29 01:41:46.530398 2026] [:error] [pid 3594:tid 3615] [client 52.230.176.21:55786] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfile.php"] [unique_id "afDxWlX25ha35uHxeYk9GQAAAZI"]
[Wed Apr 29 01:41:46.962727 2026] [:error] [pid 50889:tid 50909] [client 52.230.176.21:65116] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfile.php"] [unique_id "afDxWozszBr00txEzGiDggAAABE"]
[Wed Apr 29 01:41:47.537906 2026] [:error] [pid 3594:tid 3603] [client 52.230.176.21:62032] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/myfile.php"] [unique_id "afDxW1X25ha35uHxeYk9GgAAAYY"]
[Wed Apr 29 01:41:48.084321 2026] [:error] [pid 3594:tid 3607] [client 52.230.176.21:65056] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fileas.php"] [unique_id "afDxXFX25ha35uHxeYk9HAAAAYo"]
[Wed Apr 29 01:41:48.579655 2026] [:error] [pid 33776:tid 33825] [client 52.230.176.21:60309] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fileas.php"] [unique_id "afDxXF-bEJ2CKP3iKABf4QAAAFE"]
[Wed Apr 29 01:41:49.028074 2026] [:error] [pid 33776:tid 33831] [client 52.230.176.21:65071] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fileas.php"] [unique_id "afDxXV-bEJ2CKP3iKABf4gAAAFc"]
[Wed Apr 29 01:41:49.507981 2026] [:error] [pid 33776:tid 33809] [client 52.230.176.21:55703] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fileas.php"] [unique_id "afDxXV-bEJ2CKP3iKABf4wAAAEE"]
[Wed Apr 29 01:41:50.055986 2026] [:error] [pid 33776:tid 33827] [client 52.230.176.21:65060] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "afDxXl-bEJ2CKP3iKABf5AAAAFM"]
[Wed Apr 29 01:41:50.562394 2026] [:error] [pid 3594:tid 3613] [client 52.230.176.21:54975] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "afDxXlX25ha35uHxeYk9HQAAAZA"]
[Wed Apr 29 01:41:51.081699 2026] [:error] [pid 50889:tid 50901] [client 52.230.176.21:65030] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "afDxX4zszBr00txEzGiDgwAAAAk"]
[Wed Apr 29 01:41:51.676962 2026] [:error] [pid 3594:tid 3610] [client 52.230.176.21:65126] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "afDxX1X25ha35uHxeYk9HgAAAY0"]
[Wed Apr 29 01:41:52.217973 2026] [:error] [pid 50889:tid 50892] [client 52.230.176.21:65033] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "afDxYIzszBr00txEzGiDhAAAAAA"]
[Wed Apr 29 01:41:52.757464 2026] [:error] [pid 50889:tid 50898] [client 52.230.176.21:55724] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "afDxYIzszBr00txEzGiDhQAAAAY"]
[Wed Apr 29 01:41:53.408920 2026] [:error] [pid 3594:tid 3597] [client 52.230.176.21:55012] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "afDxYVX25ha35uHxeYk9IAAAAYA"]
[Wed Apr 29 01:41:54.196363 2026] [:error] [pid 3594:tid 3600] [client 52.230.176.21:55690] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-update.php"] [unique_id "afDxYlX25ha35uHxeYk9IQAAAYM"]
[Wed Apr 29 01:41:54.682972 2026] [:error] [pid 3594:tid 3605] [client 52.230.176.21:61963] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolv2.php"] [unique_id "afDxYlX25ha35uHxeYk9IgAAAYg"]
[Wed Apr 29 01:41:55.262214 2026] [:error] [pid 3594:tid 3612] [client 52.230.176.21:65053] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolv2.php"] [unique_id "afDxY1X25ha35uHxeYk9IwAAAY8"]
[Wed Apr 29 01:41:55.790635 2026] [:error] [pid 33776:tid 33832] [client 52.230.176.21:65144] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolv2.php"] [unique_id "afDxY1-bEJ2CKP3iKABf5QAAAFg"]
[Wed Apr 29 01:41:56.227604 2026] [:error] [pid 50889:tid 50899] [client 52.230.176.21:65123] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wolv2.php"] [unique_id "afDxZIzszBr00txEzGiDhwAAAAc"]
[Wed Apr 29 01:41:56.725579 2026] [:error] [pid 33777:tid 33853] [client 52.230.176.21:62057] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-db.php"] [unique_id "afDxZLXUCFWqmordGGJKggAAARI"]
[Wed Apr 29 01:41:57.244088 2026] [:error] [pid 33777:tid 33842] [client 52.230.176.21:55038] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-db.php"] [unique_id "afDxZbXUCFWqmordGGJKhAAAAQc"]
[Wed Apr 29 01:41:57.750271 2026] [:error] [pid 2741:tid 2765] [client 52.230.176.21:65106] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-db.php"] [unique_id "afDxZfp92FeOz1h6ILxIrwAAAVM"]
[Wed Apr 29 01:41:58.227404 2026] [:error] [pid 33776:tid 33824] [client 52.230.176.21:65101] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-db.php"] [unique_id "afDxZl-bEJ2CKP3iKABf5gAAAFA"]
[Wed Apr 29 01:41:58.653719 2026] [:error] [pid 33776:tid 33817] [client 52.230.176.21:65038] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sx10.php"] [unique_id "afDxZl-bEJ2CKP3iKABf5wAAAEk"]
[Wed Apr 29 01:41:59.115171 2026] [:error] [pid 33776:tid 33808] [client 52.230.176.21:55787] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sx10.php"] [unique_id "afDxZ1-bEJ2CKP3iKABf6AAAAEA"]
[Wed Apr 29 01:41:59.578838 2026] [:error] [pid 33776:tid 33826] [client 52.230.176.21:65026] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sx10.php"] [unique_id "afDxZ1-bEJ2CKP3iKABf6QAAAFI"]
[Wed Apr 29 01:42:00.159058 2026] [:error] [pid 33776:tid 33816] [client 52.230.176.21:61973] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sx10.php"] [unique_id "afDxaF-bEJ2CKP3iKABf6gAAAEg"]
[Wed Apr 29 01:42:00.615173 2026] [:error] [pid 33777:tid 33839] [client 52.230.176.21:65097] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xml.php"] [unique_id "afDxaLXUCFWqmordGGJKhQAAAQQ"]
[Wed Apr 29 01:42:01.331642 2026] [:error] [pid 33864:tid 33886] [client 52.230.176.21:61987] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xml.php"] [unique_id "afDxaTXchLGZ4QggCslRowAAAJQ"]
[Wed Apr 29 01:42:01.786017 2026] [:error] [pid 33776:tid 33813] [client 52.230.176.21:54990] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xml.php"] [unique_id "afDxaV-bEJ2CKP3iKABf6wAAAEU"]
[Wed Apr 29 01:42:02.268844 2026] [:error] [pid 33864:tid 33879] [client 52.230.176.21:65044] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xml.php"] [unique_id "afDxajXchLGZ4QggCslRpAAAAI0"]
[Wed Apr 29 01:42:02.801965 2026] [:error] [pid 33776:tid 33830] [client 52.230.176.21:65043] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon3.php"] [unique_id "afDxal-bEJ2CKP3iKABf7QAAAFY"]
[Wed Apr 29 01:42:03.274502 2026] [:error] [pid 33776:tid 33829] [client 52.230.176.21:65061] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon3.php"] [unique_id "afDxa1-bEJ2CKP3iKABf7gAAAFU"]
[Wed Apr 29 01:42:03.778609 2026] [:error] [pid 33775:tid 33792] [client 52.230.176.21:55020] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon3.php"] [unique_id "afDxa5sYOcoQrq88YbVPugAAAM0"]
[Wed Apr 29 01:42:04.250334 2026] [:error] [pid 33775:tid 33794] [client 52.230.176.21:62052] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/moon3.php"] [unique_id "afDxbJsYOcoQrq88YbVPuwAAAM8"]
[Wed Apr 29 01:42:04.735555 2026] [:error] [pid 50889:tid 50911] [client 52.230.176.21:55800] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "afDxbIzszBr00txEzGiDigAAABM"]
[Wed Apr 29 01:42:05.250591 2026] [:error] [pid 50889:tid 50896] [client 52.230.176.21:55803] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "afDxbYzszBr00txEzGiDiwAAAAQ"]
[Wed Apr 29 01:42:05.672944 2026] [:error] [pid 50889:tid 50903] [client 52.230.176.21:55732] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "afDxbYzszBr00txEzGiDjAAAAAs"]
[Wed Apr 29 01:42:06.075774 2026] [:error] [pid 50889:tid 50904] [client 52.230.176.21:65141] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/db.php"] [unique_id "afDxbozszBr00txEzGiDjQAAAAw"]
[Wed Apr 29 01:42:06.562690 2026] [:error] [pid 50889:tid 50895] [client 52.230.176.21:62030] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xy.php"] [unique_id "afDxbozszBr00txEzGiDjgAAAAM"]
[Wed Apr 29 01:42:07.084204 2026] [:error] [pid 50889:tid 50912] [client 52.230.176.21:65054] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xy.php"] [unique_id "afDxb4zszBr00txEzGiDjwAAABQ"]
[Wed Apr 29 01:42:07.503742 2026] [:error] [pid 50889:tid 50908] [client 52.230.176.21:55783] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xy.php"] [unique_id "afDxb4zszBr00txEzGiDkgAAABA"]
[Wed Apr 29 01:42:07.999293 2026] [:error] [pid 2741:tid 2752] [client 52.230.176.21:65059] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xy.php"] [unique_id "afDxb_p92FeOz1h6ILxIsgAAAUY"]
[Wed Apr 29 01:42:08.639019 2026] [:error] [pid 2741:tid 2751] [client 52.230.176.21:19608] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/revealability.php"] [unique_id "afDxcPp92FeOz1h6ILxIswAAAUU"]
[Wed Apr 29 01:42:09.179124 2026] [:error] [pid 50889:tid 50916] [client 52.230.176.21:65051] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/revealability.php"] [unique_id "afDxcYzszBr00txEzGiDkwAAABg"]
[Wed Apr 29 01:42:09.692116 2026] [:error] [pid 2741:tid 2758] [client 52.230.176.21:65088] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/revealability.php"] [unique_id "afDxcfp92FeOz1h6ILxItQAAAUw"]
[Wed Apr 29 01:42:10.122068 2026] [:error] [pid 33776:tid 33822] [client 52.230.176.21:60322] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/revealability.php"] [unique_id "afDxcl-bEJ2CKP3iKABf8AAAAE4"]
[Wed Apr 29 01:42:10.566670 2026] [:error] [pid 3594:tid 3620] [client 52.230.176.21:62063] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "afDxclX25ha35uHxeYk9JAAAAZc"]
[Wed Apr 29 01:42:11.035056 2026] [:error] [pid 33776:tid 33810] [client 52.230.176.21:62042] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "afDxc1-bEJ2CKP3iKABf8gAAAEI"]
[Wed Apr 29 01:42:11.528886 2026] [:error] [pid 3594:tid 3608] [client 52.230.176.21:54921] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "afDxc1X25ha35uHxeYk9JQAAAYs"]
[Wed Apr 29 01:42:11.951730 2026] [:error] [pid 3594:tid 3616] [client 52.230.176.21:55691] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tox.php"] [unique_id "afDxc1X25ha35uHxeYk9JwAAAZM"]
[Wed Apr 29 01:42:12.449581 2026] [:error] [pid 50889:tid 50907] [client 52.230.176.21:55792] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packed.php"] [unique_id "afDxdIzszBr00txEzGiDlAAAAA8"]
[Wed Apr 29 01:42:12.971525 2026] [:error] [pid 33777:tid 33844] [client 52.230.176.21:65079] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packed.php"] [unique_id "afDxdLXUCFWqmordGGJKhwAAAQk"]
[Wed Apr 29 01:42:13.436098 2026] [:error] [pid 33864:tid 33885] [client 52.230.176.21:55696] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packed.php"] [unique_id "afDxdTXchLGZ4QggCslRpQAAAJM"]
[Wed Apr 29 01:42:14.002861 2026] [:error] [pid 33864:tid 33876] [client 52.230.176.21:65029] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/packed.php"] [unique_id "afDxdjXchLGZ4QggCslRpgAAAIo"]
[Wed Apr 29 01:42:14.598697 2026] [:error] [pid 50889:tid 50909] [client 52.230.176.21:65095] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "afDxdozszBr00txEzGiDlQAAABE"]
[Wed Apr 29 01:42:15.139270 2026] [:error] [pid 50889:tid 50901] [client 52.230.176.21:61984] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "afDxd4zszBr00txEzGiDlwAAAAk"]
[Wed Apr 29 01:42:15.653507 2026] [:error] [pid 2741:tid 2754] [client 52.230.176.21:61999] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "afDxd_p92FeOz1h6ILxIuwAAAUg"]
[Wed Apr 29 01:42:16.151182 2026] [:error] [pid 33776:tid 33814] [client 52.230.176.21:60347] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lib.php"] [unique_id "afDxeF-bEJ2CKP3iKABf9wAAAEY"]
[Wed Apr 29 01:42:16.735154 2026] [:error] [pid 33776:tid 33832] [client 52.230.176.21:54928] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "afDxeF-bEJ2CKP3iKABf-AAAAFg"]
[Wed Apr 29 01:42:17.257182 2026] [:error] [pid 33776:tid 33817] [client 52.230.176.21:62036] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "afDxeV-bEJ2CKP3iKABf-QAAAEk"]
[Wed Apr 29 01:42:17.791711 2026] [:error] [pid 33776:tid 33808] [client 52.230.176.21:65086] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "afDxeV-bEJ2CKP3iKABf-wAAAEA"]
[Wed Apr 29 01:42:18.270106 2026] [:error] [pid 33777:tid 33852] [client 52.230.176.21:65064] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccu.php"] [unique_id "afDxerXUCFWqmordGGJKigAAARE"]
[Wed Apr 29 01:42:18.719377 2026] [:error] [pid 33777:tid 33858] [client 52.230.176.21:61986] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffile.php"] [unique_id "afDxerXUCFWqmordGGJKjAAAARc"]
[Wed Apr 29 01:42:19.174341 2026] [:error] [pid 33775:tid 33800] [client 52.230.176.21:65057] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffile.php"] [unique_id "afDxe5sYOcoQrq88YbVPvQAAANU"]
[Wed Apr 29 01:42:19.579494 2026] [:error] [pid 33776:tid 33826] [client 52.230.176.21:65135] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffile.php"] [unique_id "afDxe1-bEJ2CKP3iKABf_AAAAFI"]
[Wed Apr 29 01:42:20.069742 2026] [:error] [pid 33777:tid 33845] [client 52.230.176.21:65052] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ffile.php"] [unique_id "afDxfLXUCFWqmordGGJKjQAAAQo"]
[Wed Apr 29 01:42:20.650365 2026] [:error] [pid 3594:tid 3603] [client 52.230.176.21:65124] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "afDxfFX25ha35uHxeYk9KQAAAYY"]
[Wed Apr 29 01:42:21.211225 2026] [:error] [pid 50889:tid 50911] [client 52.230.176.21:65062] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "afDxfYzszBr00txEzGiDmwAAABM"]
[Wed Apr 29 01:42:21.628265 2026] [:error] [pid 50889:tid 50905] [client 52.230.176.21:65139] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "afDxfYzszBr00txEzGiDnAAAAA0"]
[Wed Apr 29 01:42:22.044255 2026] [:error] [pid 50889:tid 50896] [client 52.230.176.21:55029] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.1.php"] [unique_id "afDxfozszBr00txEzGiDnQAAAAQ"]
[Wed Apr 29 01:42:22.465049 2026] [:error] [pid 50889:tid 50913] [client 52.230.176.21:65104] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "afDxfozszBr00txEzGiDnwAAABU"]
[Wed Apr 29 01:42:22.955285 2026] [:error] [pid 50889:tid 50903] [client 52.230.176.21:19629] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "afDxfozszBr00txEzGiDoAAAAAs"]
[Wed Apr 29 01:42:23.462119 2026] [:error] [pid 3594:tid 3599] [client 52.230.176.21:55009] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "afDxf1X25ha35uHxeYk9KwAAAYI"]
[Wed Apr 29 01:42:24.006510 2026] [:error] [pid 2741:tid 2752] [client 52.230.176.21:62079] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/popo.php"] [unique_id "afDxgPp92FeOz1h6ILxIvwAAAUY"]
[Wed Apr 29 01:42:24.420469 2026] [:error] [pid 2741:tid 2751] [client 52.230.176.21:61985] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/academy.php"] [unique_id "afDxgPp92FeOz1h6ILxIwAAAAUU"]
[Wed Apr 29 01:42:24.890689 2026] [:error] [pid 3594:tid 3600] [client 52.230.176.21:55764] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/academy.php"] [unique_id "afDxgFX25ha35uHxeYk9MQAAAYM"]
[Wed Apr 29 01:42:25.423919 2026] [:error] [pid 50889:tid 50900] [client 52.230.176.21:54966] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/academy.php"] [unique_id "afDxgYzszBr00txEzGiDogAAAAg"]
[Wed Apr 29 01:42:25.848807 2026] [:error] [pid 3594:tid 3611] [client 52.230.176.21:65132] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/academy.php"] [unique_id "afDxgVX25ha35uHxeYk9MwAAAY4"]
[Wed Apr 29 01:42:26.268102 2026] [:error] [pid 50889:tid 50914] [client 52.230.176.21:60326] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xml.php"] [unique_id "afDxgozszBr00txEzGiDowAAABY"]
[Wed Apr 29 01:42:26.757985 2026] [:error] [pid 33864:tid 33878] [client 52.230.176.21:55023] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xml.php"] [unique_id "afDxgjXchLGZ4QggCslRqQAAAIw"]
[Wed Apr 29 01:42:27.160540 2026] [:error] [pid 2741:tid 2764] [client 52.230.176.21:65148] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xml.php"] [unique_id "afDxg_p92FeOz1h6ILxIwgAAAVI"]
[Wed Apr 29 01:42:27.676413 2026] [:error] [pid 33776:tid 33828] [client 52.230.176.21:55727] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-xml.php"] [unique_id "afDxg1-bEJ2CKP3iKABgAAAAAFQ"]
[Wed Apr 29 01:42:28.079003 2026] [:error] [pid 2741:tid 2761] [client 52.230.176.21:65130] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "afDxhPp92FeOz1h6ILxIwwAAAU8"]
[Wed Apr 29 01:42:28.575840 2026] [:error] [pid 50889:tid 50901] [client 52.230.176.21:65075] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "afDxhIzszBr00txEzGiDpAAAAAk"]
[Wed Apr 29 01:42:29.115309 2026] [:error] [pid 2741:tid 2770] [client 52.230.176.21:65115] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "afDxhfp92FeOz1h6ILxIxgAAAVg"]
[Wed Apr 29 01:42:29.680524 2026] [:error] [pid 2741:tid 2749] [client 52.230.176.21:54995] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/layout.php"] [unique_id "afDxhfp92FeOz1h6ILxIxwAAAUM"]
[Wed Apr 29 01:42:30.205851 2026] [:error] [pid 3594:tid 3604] [client 52.230.176.21:65024] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "afDxhlX25ha35uHxeYk9OQAAAYc"]
[Wed Apr 29 01:42:30.690333 2026] [:error] [pid 33777:tid 33840] [client 52.230.176.21:60292] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "afDxhrXUCFWqmordGGJKkwAAAQU"]
[Wed Apr 29 01:42:31.156883 2026] [:error] [pid 33777:tid 33842] [client 52.230.176.21:65085] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "afDxh7XUCFWqmordGGJKlAAAAQc"]
[Wed Apr 29 01:42:31.660199 2026] [:error] [pid 2741:tid 2750] [client 52.230.176.21:55780] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "afDxh_p92FeOz1h6ILxIyAAAAUQ"]
[Wed Apr 29 01:42:32.257875 2026] [:error] [pid 33775:tid 33783] [client 52.230.176.21:65103] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "afDxiJsYOcoQrq88YbVPwAAAAMQ"]
[Wed Apr 29 01:42:32.744283 2026] [:error] [pid 33864:tid 33889] [client 52.230.176.21:61994] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "afDxiDXchLGZ4QggCslRqgAAAJc"]
[Wed Apr 29 01:42:33.171396 2026] [:error] [pid 50889:tid 50902] [client 52.230.176.21:60409] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "afDxiYzszBr00txEzGiDqAAAAAo"]
[Wed Apr 29 01:42:33.651624 2026] [:error] [pid 2741:tid 2747] [client 52.230.176.21:65137] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Sanskrit.php"] [unique_id "afDxifp92FeOz1h6ILxIygAAAUE"]
[Wed Apr 29 01:42:34.139558 2026] [:error] [pid 2741:tid 2760] [client 52.230.176.21:61982] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "afDxivp92FeOz1h6ILxIywAAAU4"]
[Wed Apr 29 01:42:34.594708 2026] [:error] [pid 2741:tid 2748] [client 52.230.176.21:60348] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "afDxivp92FeOz1h6ILxIzAAAAUI"]
[Wed Apr 29 01:42:35.119421 2026] [:error] [pid 2741:tid 2752] [client 52.230.176.21:62056] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "afDxi_p92FeOz1h6ILxIzgAAAUY"]
[Wed Apr 29 01:42:35.577406 2026] [:error] [pid 3594:tid 3614] [client 52.230.176.21:65065] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kikikoko.php"] [unique_id "afDxi1X25ha35uHxeYk9OwAAAZE"]
[Wed Apr 29 01:42:36.018720 2026] [:error] [pid 50889:tid 50905] [client 52.230.176.21:54980] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "afDxjIzszBr00txEzGiDrAAAAA0"]
[Wed Apr 29 01:42:36.461055 2026] [:error] [pid 2741:tid 2767] [client 52.230.176.21:62027] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "afDxjPp92FeOz1h6ILxIzwAAAVU"]
[Wed Apr 29 01:42:37.102639 2026] [:error] [pid 33775:tid 33786] [client 52.230.176.21:62053] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "afDxjZsYOcoQrq88YbVPwQAAAMc"]
[Wed Apr 29 01:42:37.675051 2026] [:error] [pid 33777:tid 33843] [client 52.230.176.21:62035] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/opts.php"] [unique_id "afDxjbXUCFWqmordGGJKlwAAAQg"]
[Wed Apr 29 01:42:38.155093 2026] [:error] [pid 33777:tid 33838] [client 52.230.176.21:54921] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ouh.php"] [unique_id "afDxjrXUCFWqmordGGJKmAAAAQM"]
[Wed Apr 29 01:42:38.615758 2026] [:error] [pid 3594:tid 3609] [client 52.230.176.21:65055] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ouh.php"] [unique_id "afDxjlX25ha35uHxeYk9PQAAAYw"]
[Wed Apr 29 01:42:39.065720 2026] [:error] [pid 33777:tid 33852] [client 52.230.176.21:62038] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ouh.php"] [unique_id "afDxj7XUCFWqmordGGJKmQAAARE"]
[Wed Apr 29 01:42:39.520517 2026] [:error] [pid 33777:tid 33858] [client 52.230.176.21:54471] [client 52.230.176.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ouh.php"] [unique_id "afDxj7XUCFWqmordGGJKmgAAARc"]
[Wed Apr 29 01:48:55.561557 2026] [:error] [pid 2741:tid 2765] [client 196.15.203.27:56198] [client 196.15.203.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.15.203.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDzB_p92FeOz1h6ILxK0QAAAVM"]
[Wed Apr 29 01:49:06.021625 2026] [:error] [pid 33864:tid 33876] [client 196.15.203.27:56630] [client 196.15.203.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.15.203.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDzEjXchLGZ4QggCslSlgAAAIo"]
[Wed Apr 29 01:49:16.384635 2026] [:error] [pid 33777:tid 33850] [client 196.15.203.27:57155] [client 196.15.203.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.15.203.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDzHLXUCFWqmordGGJLogAAAQ8"]
[Wed Apr 29 01:49:37.485994 2026] [:error] [pid 2741:tid 2755] [client 196.15.203.27:58115] [client 196.15.203.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.15.203.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDzMfp92FeOz1h6ILxK_wAAAUk"]
[Wed Apr 29 01:49:48.145162 2026] [:error] [pid 33777:tid 33841] [client 196.15.203.27:58539] [client 196.15.203.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.15.203.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afDzPLXUCFWqmordGGJLzwAAAQY"]
[Wed Apr 29 02:42:29.175442 2026] [:error] [pid 35342:tid 35357] [client 45.228.142.85:41759] [client 45.228.142.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.228.142.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afD_le7D5-OXGLQYxO7-6gAAAw0"]
[Wed Apr 29 02:42:38.002668 2026] [:error] [pid 35256:tid 35271] [client 45.228.142.85:41443] [client 45.228.142.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.228.142.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afD_nioQkR5MuN9_tM5ziwAAAo0"]
[Wed Apr 29 02:42:49.674557 2026] [:error] [pid 35135:tid 35144] [client 45.228.142.85:41228] [client 45.228.142.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.228.142.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afD_qcdMvrT08fvTcBUx9AAAAcc"]
[Wed Apr 29 02:43:00.255304 2026] [:error] [pid 35342:tid 35353] [client 45.228.142.85:41311] [client 45.228.142.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.228.142.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afD_tO7D5-OXGLQYxO7_BQAAAwk"]
[Wed Apr 29 02:43:20.799426 2026] [:error] [pid 33864:tid 33877] [client 45.228.142.85:41694] [client 45.228.142.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.228.142.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afD_yDXchLGZ4QggCslahQAAAIs"]
[Wed Apr 29 04:28:33.521214 2026] [:error] [pid 56757:tid 56821] [client 93.9.41.92:52776] [client 93.9.41.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.9.41.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEYcfj76quHaaG1miSHCwAAAII"]
[Wed Apr 29 04:28:43.505274 2026] [:error] [pid 56756:tid 56799] [client 93.9.41.92:52911] [client 93.9.41.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.9.41.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEYe3Di78vq-l2wwMwDdgAAAEc"]
[Wed Apr 29 04:28:53.953212 2026] [:error] [pid 26594:tid 26615] [client 93.9.41.92:53047] [client 93.9.41.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.9.41.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEYhds-37Kay1vO52ki_gAAARM"]
[Wed Apr 29 04:29:04.483765 2026] [:error] [pid 56757:tid 56836] [client 93.9.41.92:53179] [client 93.9.41.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.9.41.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEYkPj76quHaaG1miSHHgAAAJE"]
[Wed Apr 29 04:29:15.003921 2026] [:error] [pid 56755:tid 56781] [client 93.9.41.92:53322] [client 93.9.41.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.9.41.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEYm_dXjiwtyGfj4lxA7AAAABE"]
[Wed Apr 29 04:44:39.011925 2026] [:error] [pid 56863:tid 56885] [client 170.106.163.84:51654] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afEcN2QQTEnvYCOsiwLHnwAAANQ"]
[Wed Apr 29 05:31:14.476001 2026] [:error] [pid 40343:tid 40357] [client 138.59.122.208:56064] [client 138.59.122.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.59.122.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEnImiaWCZjSxz2ZNthLgAAAYo"]
[Wed Apr 29 05:31:24.544051 2026] [:error] [pid 40313:tid 40335] [client 138.59.122.208:56601] [client 138.59.122.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.59.122.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEnLKpx5sKFuV9bHzpN9QAAAVQ"]
[Wed Apr 29 05:31:35.007016 2026] [:error] [pid 40343:tid 40372] [client 138.59.122.208:56990] [client 138.59.122.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.59.122.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEnN2iaWCZjSxz2ZNthPgAAAZg"]
[Wed Apr 29 05:31:45.490233 2026] [:error] [pid 40343:tid 40351] [client 138.59.122.208:56714] [client 138.59.122.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.59.122.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEnQWiaWCZjSxz2ZNthQgAAAYQ"]
[Wed Apr 29 05:31:55.968775 2026] [:error] [pid 40313:tid 40339] [client 138.59.122.208:56999] [client 138.59.122.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.59.122.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEnS6px5sKFuV9bHzpOAAAAAVg"]
[Wed Apr 29 05:40:02.175852 2026] [:error] [pid 56863:tid 56877] [client 182.77.76.232:28697] [client 182.77.76.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.77.76.232, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEpMmQQTEnvYCOsiwLQoQAAAMw"]
[Wed Apr 29 05:40:12.538178 2026] [:error] [pid 40344:tid 40382] [client 182.77.76.232:8546] [client 182.77.76.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.77.76.232, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEpPJ_iiwb4cHXz-JruvAAAAcc"]
[Wed Apr 29 05:40:23.124495 2026] [:error] [pid 56755:tid 56772] [client 182.77.76.232:16834] [client 182.77.76.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.77.76.232, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEpR_dXjiwtyGfj4lxHrQAAAAg"]
[Wed Apr 29 05:40:33.756042 2026] [:error] [pid 56757:tid 56838] [client 182.77.76.232:32427] [client 182.77.76.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.77.76.232, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEpUfj76quHaaG1miSQOgAAAJM"]
[Wed Apr 29 05:40:44.504848 2026] [:error] [pid 26594:tid 26598] [client 182.77.76.232:6635] [client 182.77.76.232] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.77.76.232, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEpXNs-37Kay1vO52kwbQAAAQI"]
[Wed Apr 29 05:59:13.281618 2026] [:error] [pid 56757:tid 56834] [client 103.191.123.140:43038] [client 103.191.123.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.123.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEtsfj76quHaaG1miSSBwAAAI8"]
[Wed Apr 29 05:59:23.125726 2026] [:error] [pid 26594:tid 26611] [client 103.191.123.140:43594] [client 103.191.123.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.123.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEtu9s-37Kay1vO52kyagAAAQ8"]
[Wed Apr 29 05:59:33.745827 2026] [:error] [pid 40344:tid 40390] [client 103.191.123.140:43283] [client 103.191.123.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.123.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEtxZ_iiwb4cHXz-JrzeQAAAc8"]
[Wed Apr 29 05:59:44.504436 2026] [:error] [pid 40344:tid 40393] [client 103.191.123.140:43742] [client 103.191.123.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.123.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEt0J_iiwb4cHXz-JrziQAAAdI"]
[Wed Apr 29 05:59:55.173662 2026] [:error] [pid 40344:tid 40398] [client 103.191.123.140:43529] [client 103.191.123.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.123.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEt25_iiwb4cHXz-JrzrQAAAdc"]
[Wed Apr 29 06:00:58.778595 2026] [:error] [pid 40343:tid 40362] [client 128.127.120.145:10981] [client 128.127.120.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.127.120.145, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEuGmiaWCZjSxz2ZNtnLgAAAY4"]
[Wed Apr 29 06:01:38.115644 2026] [:error] [pid 40313:tid 40339] [client 128.127.120.145:10963] [client 128.127.120.145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afEuQqpx5sKFuV9bHzpRyQAAAVg"]
[Wed Apr 29 06:02:04.825247 2026] [:error] [pid 40344:tid 40392] [client 128.127.120.145:10878] [client 128.127.120.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.127.120.145, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afEuXJ_iiwb4cHXz-Jrz7wAAAdE"]
[Wed Apr 29 07:46:28.988163 2026] [:error] [pid 56757:tid 56839] [client 209.141.37.194:54651] [client 209.141.37.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afFG1Pj76quHaaG1miSdRwAAAJQ"]
[Wed Apr 29 07:46:31.327630 2026] [proxy_fcgi:error] [pid 56757:tid 56839] [client 209.141.37.194:54651] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 29 07:49:02.809687 2026] [:error] [pid 26594:tid 26606] [client 209.141.37.194:62658] [client 209.141.37.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afFHbts-37Kay1vO52lBOAAAAQo"]
[Wed Apr 29 07:49:03.835955 2026] [proxy_fcgi:error] [pid 26594:tid 26606] [client 209.141.37.194:62658] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 29 08:58:22.179494 2026] [:error] [pid 31660:tid 31718] [client 43.153.19.83:32884] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afFXrkGR1SnWHBHhVZY_RwAAAgE"]
[Wed Apr 29 09:02:45.579469 2026] [:error] [pid 37025:tid 37045] [client 209.141.37.194:52785] [client 209.141.37.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afFYtVs-FEY5e2vMBmz6egAAANI"]
[Wed Apr 29 09:02:46.454606 2026] [proxy_fcgi:error] [pid 37025:tid 37045] [client 209.141.37.194:52785] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 29 09:03:52.322217 2026] [:error] [pid 31658:tid 31687] [client 209.141.37.194:57013] [client 209.141.37.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afFY-IY6yiug1fCvCd85LgAAABg"]
[Wed Apr 29 09:03:53.451718 2026] [proxy_fcgi:error] [pid 31658:tid 31687] [client 209.141.37.194:57013] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 29 11:45:50.449294 2026] [:error] [pid 61541:tid 61618] [client 104.244.73.103:61407] [client 104.244.73.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.73.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afF-7loqNK1GZvjPpy5jygAAAhI"]
[Wed Apr 29 11:45:51.435587 2026] [proxy_fcgi:error] [pid 61541:tid 61618] [client 104.244.73.103:61407] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 29 11:45:51.696372 2026] [:error] [pid 61541:tid 61602] [client 104.244.73.103:61407] [client 104.244.73.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.73.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afF-71oqNK1GZvjPpy5jywAAAgI"]
[Wed Apr 29 11:45:52.743318 2026] [proxy_fcgi:error] [pid 61541:tid 61602] [client 104.244.73.103:61407] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 29 13:02:15.443553 2026] [:error] [pid 22901:tid 22906] [client 103.191.122.4:57971] [client 103.191.122.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.122.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGQ1xvfVEXI-f42iRRCrAAAAQM"]
[Wed Apr 29 13:02:23.281049 2026] [:error] [pid 22901:tid 22920] [client 103.191.122.4:57859] [client 103.191.122.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.122.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGQ3xvfVEXI-f42iRRCvAAAARE"]
[Wed Apr 29 13:02:33.648141 2026] [:error] [pid 61628:tid 61646] [client 103.191.122.4:57970] [client 103.191.122.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.122.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGQ6fXzdLVcrP-YPZgz2gAAAM0"]
[Wed Apr 29 13:02:44.005814 2026] [:error] [pid 61541:tid 61600] [client 103.191.122.4:57814] [client 103.191.122.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.122.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGQ9FoqNK1GZvjPpy5udAAAAgA"]
[Wed Apr 29 13:02:54.366280 2026] [:error] [pid 61628:tid 61645] [client 103.191.122.4:57009] [client 103.191.122.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.122.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGQ_vXzdLVcrP-YPZg0HQAAAMw"]
[Wed Apr 29 13:08:24.583762 2026] [:error] [pid 22901:tid 22918] [client 102.215.34.68:10283] [client 102.215.34.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.215.34.68, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGSSBvfVEXI-f42iRREtAAAAQ8"]
[Wed Apr 29 13:08:34.586525 2026] [:error] [pid 44860:tid 44862] [client 102.215.34.68:52138] [client 102.215.34.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.215.34.68, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGSUkQ82el2g7ESJ15xNgAAAkA"]
[Wed Apr 29 13:08:45.229147 2026] [:error] [pid 44766:tid 44783] [client 102.215.34.68:52600] [client 102.215.34.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.215.34.68, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGSXaVI9GtM_JyauAIt-AAAAY8"]
[Wed Apr 29 13:08:55.503175 2026] [:error] [pid 44766:tid 44792] [client 102.215.34.68:11683] [client 102.215.34.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.215.34.68, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGSZ6VI9GtM_JyauAIuCgAAAZg"]
[Wed Apr 29 13:09:06.179556 2026] [:error] [pid 61540:tid 61575] [client 102.215.34.68:12054] [client 102.215.34.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.215.34.68, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGScuQ8cJB7pQslzIexMQAAAII"]
[Wed Apr 29 13:14:55.010827 2026] [:error] [pid 44860:tid 44863] [client 180.191.79.179:64473] [client 180.191.79.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.79.179, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGTz0Q82el2g7ESJ15y8AAAAkE"]
[Wed Apr 29 13:15:16.472859 2026] [:error] [pid 61628:tid 61653] [client 180.191.79.179:38880] [client 180.191.79.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.79.179, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGT5PXzdLVcrP-YPZg4fwAAANQ"]
[Wed Apr 29 13:15:30.039364 2026] [:error] [pid 45054:tid 45068] [client 180.191.79.179:65027] [client 180.191.79.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.79.179, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGT8otL6SUL31r23c9-XgAAAow"]
[Wed Apr 29 13:15:38.448019 2026] [:error] [pid 45085:tid 45097] [client 180.191.79.179:38662] [client 180.191.79.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.79.179, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGT-tS7eNjgd8gD6ZzigQAAAso"]
[Wed Apr 29 13:15:48.785078 2026] [:error] [pid 44860:tid 44878] [client 180.191.79.179:38808] [client 180.191.79.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.79.179, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGUBEQ82el2g7ESJ15zFAAAAlA"]
[Wed Apr 29 14:57:19.084785 2026] [:error] [pid 45054:tid 45068] [client 117.231.167.1:59590] [client 117.231.167.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.231.167.1, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGrz4tL6SUL31r23c-bZAAAAow"]
[Wed Apr 29 14:57:29.461994 2026] [:error] [pid 2604:tid 2620] [client 117.231.167.1:60040] [client 117.231.167.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.231.167.1, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGr2Rx5WQMU1W68tTYgugAAAE4"]
[Wed Apr 29 14:57:35.308797 2026] [:error] [pid 61540:tid 61581] [client 117.231.167.1:60373] [client 117.231.167.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.231.167.1, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGr3-Q8cJB7pQslzIfPqgAAAIg"]
[Wed Apr 29 14:57:39.973138 2026] [:error] [pid 61540:tid 61592] [client 117.231.167.1:60628] [client 117.231.167.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.231.167.1, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGr4-Q8cJB7pQslzIfPrwAAAJM"]
[Wed Apr 29 14:57:45.797443 2026] [:error] [pid 61540:tid 61576] [client 117.231.167.1:60828] [client 117.231.167.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.231.167.1, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGr6eQ8cJB7pQslzIfPuAAAAIM"]
[Wed Apr 29 14:57:50.464317 2026] [:error] [pid 45119:tid 45140] [client 117.231.167.1:60977] [client 117.231.167.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.231.167.1, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGr7sgCO5XKzjdJ_HYLkwAAAxM"]
[Wed Apr 29 14:57:56.307013 2026] [:error] [pid 44860:tid 44870] [client 117.231.167.1:61157] [client 117.231.167.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.231.167.1, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGr9EQ82el2g7ESJ16DlAAAAkg"]
[Wed Apr 29 15:12:31.618339 2026] [:error] [pid 61540:tid 61579] [client 223.228.10.102:48915] [client 223.228.10.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.10.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGvX-Q8cJB7pQslzIfSHQAAAIY"]
[Wed Apr 29 15:13:26.767993 2026] [:error] [pid 44860:tid 44862] [client 223.228.10.102:38915] [client 223.228.10.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.10.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGvlkQ82el2g7ESJ16FeAAAAkA"]
[Wed Apr 29 15:13:35.048460 2026] [:error] [pid 44860:tid 44878] [client 223.228.10.102:40527] [client 223.228.10.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.10.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGvn0Q82el2g7ESJ16FfQAAAlA"]
[Wed Apr 29 15:13:46.455981 2026] [:error] [pid 61540:tid 61581] [client 223.228.10.102:44552] [client 223.228.10.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.10.102, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGvquQ8cJB7pQslzIfSLQAAAIg"]
[Wed Apr 29 15:14:47.067645 2026] [:error] [pid 45054:tid 45071] [client 203.109.66.100:11316] [client 203.109.66.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.109.66.100, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGv54tL6SUL31r23c-f7AAAAo8"]
[Wed Apr 29 15:14:57.566983 2026] [:error] [pid 61628:tid 61656] [client 203.109.66.100:12295] [client 203.109.66.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.109.66.100, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGv8fXzdLVcrP-YPZg-ngAAANc"]
[Wed Apr 29 15:15:08.063964 2026] [:error] [pid 45119:tid 45136] [client 203.109.66.100:12816] [client 203.109.66.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.109.66.100, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGv_MgCO5XKzjdJ_HYMjQAAAw8"]
[Wed Apr 29 15:27:09.661524 2026] [:error] [pid 2604:tid 2615] [client 45.119.85.39:49966] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-login.php"] [unique_id "afGyzRx5WQMU1W68tTYiiQAAAEk"], referer: https://www.google.com
[Wed Apr 29 15:27:09.661616 2026] [:error] [pid 2604:tid 2615] [client 45.119.85.39:49966] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 59"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/wp-login.php"] [unique_id "afGyzRx5WQMU1W68tTYiiQAAAEk"], referer: https://www.google.com
[Wed Apr 29 15:27:44.316990 2026] [:error] [pid 22901:tid 22921] [client 223.185.38.75:33267] [client 223.185.38.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.38.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGy8BvfVEXI-f42iRRPrQAAARI"]
[Wed Apr 29 15:27:54.575252 2026] [:error] [pid 2604:tid 2610] [client 223.185.38.75:32132] [client 223.185.38.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.38.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGy-hx5WQMU1W68tTYirwAAAEQ"]
[Wed Apr 29 15:28:05.144062 2026] [:error] [pid 45054:tid 45078] [client 223.185.38.75:17317] [client 223.185.38.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.38.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGzBYtL6SUL31r23c-hpwAAApY"]
[Wed Apr 29 15:28:15.711433 2026] [:error] [pid 44860:tid 44871] [client 223.185.38.75:11045] [client 223.185.38.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.38.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGzD0Q82el2g7ESJ16G3gAAAkk"]
[Wed Apr 29 15:28:26.508166 2026] [:error] [pid 45054:tid 45080] [client 223.185.38.75:10032] [client 223.185.38.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.38.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afGzGotL6SUL31r23c-hrAAAApg"]
[Wed Apr 29 15:31:02.888829 2026] [:error] [pid 45289:tid 45298] [client 170.106.180.246:47440] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afGztl_vGmZY7dOOIwrLfQAAA4Y"]
[Wed Apr 29 15:47:06.425813 2026] [:error] [pid 2604:tid 2617] [client 45.119.85.39:63703] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wordpress/wp-login.php"] [unique_id "afG3ehx5WQMU1W68tTYkAgAAAEs"], referer: https://www.google.com
[Wed Apr 29 15:47:06.425900 2026] [:error] [pid 2604:tid 2617] [client 45.119.85.39:63703] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 233"] [hostname "hotbooksbookeeping2.com"] [uri "/wordpress/wp-login.php"] [unique_id "afG3ehx5WQMU1W68tTYkAgAAAEs"], referer: https://www.google.com
[Wed Apr 29 16:14:20.127505 2026] [:error] [pid 45054:tid 45067] [client 119.156.95.38:57099] [client 119.156.95.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.156.95.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afG93ItL6SUL31r23c-q_wAAAos"]
[Wed Apr 29 16:14:31.388904 2026] [:error] [pid 2604:tid 2625] [client 119.156.95.38:57499] [client 119.156.95.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.156.95.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afG95xx5WQMU1W68tTYlwgAAAFM"]
[Wed Apr 29 16:14:46.705103 2026] [:error] [pid 2604:tid 2620] [client 119.156.95.38:57811] [client 119.156.95.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.156.95.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afG99hx5WQMU1W68tTYlzAAAAE4"]
[Wed Apr 29 16:15:02.870786 2026] [:error] [pid 61628:tid 61639] [client 119.156.95.38:58591] [client 119.156.95.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.156.95.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afG-BvXzdLVcrP-YPZhArQAAAMY"]
[Wed Apr 29 16:15:45.806509 2026] [:error] [pid 45085:tid 45095] [client 119.156.95.38:61031] [client 119.156.95.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.156.95.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afG-MdS7eNjgd8gD6Zz6TAAAAsg"]
[Wed Apr 29 16:50:35.281412 2026] [:error] [pid 45119:tid 45135] [client 51.77.43.178:32770] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "afHGW8gCO5XKzjdJ_HYSlAAAAw4"]
[Wed Apr 29 16:50:35.472583 2026] [:error] [pid 61628:tid 61651] [client 51.77.43.178:32782] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "afHGW_XzdLVcrP-YPZhBwwAAANI"]
[Wed Apr 29 16:50:35.608159 2026] [:error] [pid 44860:tid 44873] [client 51.77.43.178:60982] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "afHGW0Q82el2g7ESJ16PtwAAAks"]
[Wed Apr 29 16:50:35.834838 2026] [:error] [pid 44860:tid 44865] [client 51.77.43.178:60996] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/789%20slot.aspx"] [unique_id "afHGW0Q82el2g7ESJ16PuAAAAkM"]
[Wed Apr 29 16:50:37.950003 2026] [:error] [pid 61540:tid 61588] [client 51.77.43.178:43708] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/888%20slot.aspx"] [unique_id "afHGXeQ8cJB7pQslzIfdgAAAAI8"]
[Wed Apr 29 16:50:38.604203 2026] [:error] [pid 45119:tid 45125] [client 51.77.43.178:40366] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/888%20slot.aspx"] [unique_id "afHGXsgCO5XKzjdJ_HYSlQAAAwQ"]
[Wed Apr 29 16:50:38.765176 2026] [:error] [pid 61540:tid 61595] [client 51.77.43.178:40382] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/888%20slot.aspx"] [unique_id "afHGXuQ8cJB7pQslzIfdggAAAJY"]
[Wed Apr 29 16:50:38.812163 2026] [:error] [pid 45054:tid 45070] [client 51.77.43.178:40394] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/888%20slot.aspx"] [unique_id "afHGXotL6SUL31r23c-0PAAAAo4"]
[Wed Apr 29 16:50:41.168909 2026] [:error] [pid 45054:tid 45072] [client 51.77.43.178:40398] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "afHGYYtL6SUL31r23c-0PQAAApA"]
[Wed Apr 29 16:50:41.374134 2026] [:error] [pid 44766:tid 44770] [client 51.77.43.178:40400] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "afHGYaVI9GtM_JyauAI7KQAAAYI"]
[Wed Apr 29 16:50:41.524065 2026] [:error] [pid 61540:tid 61592] [client 51.77.43.178:40416] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "afHGYeQ8cJB7pQslzIfdgwAAAJM"]
[Wed Apr 29 16:50:42.584760 2026] [:error] [pid 45119:tid 45142] [client 51.77.43.178:40432] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/all%20slot.aspx"] [unique_id "afHGYsgCO5XKzjdJ_HYSlgAAAxU"]
[Wed Apr 29 16:50:44.084786 2026] [:error] [pid 45085:tid 45091] [client 51.77.43.178:40438] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "afHGZNS7eNjgd8gD6ZwBDQAAAsQ"]
[Wed Apr 29 16:50:44.136606 2026] [:error] [pid 45085:tid 45107] [client 51.77.43.178:40446] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "afHGZNS7eNjgd8gD6ZwBDgAAAtQ"]
[Wed Apr 29 16:50:44.152455 2026] [:error] [pid 45085:tid 45096] [client 51.77.43.178:40462] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "afHGZNS7eNjgd8gD6ZwBDwAAAsk"]
[Wed Apr 29 16:50:46.852450 2026] [:error] [pid 22901:tid 22921] [client 51.77.43.178:40468] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/allslot%20wallet.aspx"] [unique_id "afHGZhvfVEXI-f42iRRUhQAAARI"]
[Wed Apr 29 16:50:47.012042 2026] [:error] [pid 45054:tid 45080] [client 51.77.43.178:40480] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "afHGZ4tL6SUL31r23c-0QwAAApg"]
[Wed Apr 29 16:50:47.051170 2026] [:error] [pid 45119:tid 45127] [client 51.77.43.178:40484] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "afHGZ8gCO5XKzjdJ_HYSmQAAAwY"]
[Wed Apr 29 16:50:47.427715 2026] [:error] [pid 45119:tid 45131] [client 51.77.43.178:40500] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "afHGZ8gCO5XKzjdJ_HYSmgAAAwo"]
[Wed Apr 29 16:50:49.463937 2026] [:error] [pid 45054:tid 45066] [client 51.77.43.178:57008] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afHGaYtL6SUL31r23c-0SAAAAoo"]
[Wed Apr 29 16:50:49.521610 2026] [:error] [pid 45054:tid 45063] [client 51.77.43.178:56994] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afHGaYtL6SUL31r23c-0SQAAAoc"]
[Wed Apr 29 16:50:50.558148 2026] [:error] [pid 45054:tid 45059] [client 51.77.43.178:57016] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afHGaotL6SUL31r23c-0SwAAAoM"]
[Wed Apr 29 16:50:52.272990 2026] [:error] [pid 45054:tid 45072] [client 51.77.43.178:57032] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amb%20superslot.aspx"] [unique_id "afHGbItL6SUL31r23c-0TwAAApA"]
[Wed Apr 29 16:50:52.290184 2026] [:error] [pid 45085:tid 45099] [client 51.77.43.178:57040] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "afHGbNS7eNjgd8gD6ZwBEQAAAsw"]
[Wed Apr 29 16:50:52.797325 2026] [:error] [pid 45119:tid 45139] [client 51.77.43.178:57042] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "afHGbMgCO5XKzjdJ_HYSnQAAAxI"]
[Wed Apr 29 16:50:53.367397 2026] [:error] [pid 44860:tid 44863] [client 51.77.43.178:57046] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "afHGbUQ82el2g7ESJ16PugAAAkE"]
[Wed Apr 29 16:50:54.694922 2026] [:error] [pid 45054:tid 45073] [client 51.77.43.178:57060] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "afHGbotL6SUL31r23c-0UQAAApE"]
[Wed Apr 29 16:50:55.585882 2026] [:error] [pid 45054:tid 45071] [client 51.77.43.178:57064] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "afHGb4tL6SUL31r23c-0UwAAAo8"]
[Wed Apr 29 16:50:56.294541 2026] [:error] [pid 61540:tid 61576] [client 51.77.43.178:57068] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "afHGcOQ8cJB7pQslzIfdhQAAAIM"]
[Wed Apr 29 16:50:57.435171 2026] [:error] [pid 45054:tid 45063] [client 51.77.43.178:57094] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "afHGcYtL6SUL31r23c-0VQAAAoc"]
[Wed Apr 29 16:50:58.662492 2026] [:error] [pid 45054:tid 45064] [client 51.77.43.178:57080] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/apollo%20slot%20pg.aspx"] [unique_id "afHGcotL6SUL31r23c-0WAAAAog"]
[Wed Apr 29 16:50:58.819571 2026] [:error] [pid 44860:tid 44867] [client 51.77.43.178:50886] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "afHGckQ82el2g7ESJ16PvQAAAkU"]
[Wed Apr 29 16:50:59.102025 2026] [:error] [pid 45054:tid 45074] [client 51.77.43.178:50896] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "afHGc4tL6SUL31r23c-0WQAAApI"]
[Wed Apr 29 16:51:00.845503 2026] [:error] [pid 61540:tid 61580] [client 51.77.43.178:50900] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "afHGdOQ8cJB7pQslzIfdigAAAIc"]
[Wed Apr 29 16:51:01.662307 2026] [:error] [pid 22901:tid 22913] [client 51.77.43.178:50914] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "afHGdRvfVEXI-f42iRRUhwAAAQo"]
[Wed Apr 29 16:51:01.914650 2026] [:error] [pid 44860:tid 44881] [client 51.77.43.178:50924] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "afHGdUQ82el2g7ESJ16PvgAAAlM"]
[Wed Apr 29 16:51:04.149465 2026] [:error] [pid 45054:tid 45078] [client 51.77.43.178:50936] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "afHGeItL6SUL31r23c-0WwAAApY"]
[Wed Apr 29 16:51:04.265912 2026] [:error] [pid 45054:tid 45067] [client 51.77.43.178:50940] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "afHGeItL6SUL31r23c-0XAAAAos"]
[Wed Apr 29 16:51:04.531307 2026] [:error] [pid 45054:tid 45068] [client 51.77.43.178:50926] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20casino.aspx"] [unique_id "afHGeItL6SUL31r23c-0XgAAAow"]
[Wed Apr 29 16:51:05.846562 2026] [:error] [pid 45054:tid 45080] [client 51.77.43.178:50952] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "afHGeYtL6SUL31r23c-0YgAAApg"]
[Wed Apr 29 16:51:07.013804 2026] [:error] [pid 61540:tid 61579] [client 51.77.43.178:50960] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "afHGe-Q8cJB7pQslzIfdjwAAAIY"]
[Wed Apr 29 16:51:07.214668 2026] [:error] [pid 45054:tid 45069] [client 51.77.43.178:50968] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "afHGe4tL6SUL31r23c-0ZAAAAo0"]
[Wed Apr 29 16:51:08.922199 2026] [:error] [pid 45085:tid 45102] [client 51.77.43.178:51194] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "afHGfNS7eNjgd8gD6ZwBHwAAAs8"]
[Wed Apr 29 16:51:09.483450 2026] [:error] [pid 45085:tid 45094] [client 51.77.43.178:51210] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "afHGfdS7eNjgd8gD6ZwBIAAAAsc"]
[Wed Apr 29 16:51:10.005405 2026] [:error] [pid 61628:tid 61640] [client 51.77.43.178:51224] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "afHGfvXzdLVcrP-YPZhBxAAAAMc"]
[Wed Apr 29 16:51:11.039360 2026] [:error] [pid 45085:tid 45109] [client 51.77.43.178:51240] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "afHGf9S7eNjgd8gD6ZwBJAAAAtY"]
[Wed Apr 29 16:51:11.653946 2026] [:error] [pid 45085:tid 45100] [client 51.77.43.178:51254] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "afHGf9S7eNjgd8gD6ZwBJgAAAs0"]
[Wed Apr 29 16:51:12.530386 2026] [:error] [pid 45085:tid 45093] [client 51.77.43.178:51264] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afHGgNS7eNjgd8gD6ZwBKAAAAsY"]
[Wed Apr 29 16:51:12.799267 2026] [:error] [pid 44860:tid 44884] [client 51.77.43.178:51276] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afHGgEQ82el2g7ESJ16PwgAAAlY"]
[Wed Apr 29 16:51:14.671621 2026] [:error] [pid 44860:tid 44862] [client 51.77.43.178:51288] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afHGgkQ82el2g7ESJ16PwwAAAkA"]
[Wed Apr 29 16:51:15.147975 2026] [:error] [pid 61540:tid 61590] [client 51.77.43.178:51296] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "afHGg-Q8cJB7pQslzIfdkQAAAJE"]
[Wed Apr 29 16:51:15.728633 2026] [:error] [pid 45054:tid 45061] [client 51.77.43.178:51318] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afHGg4tL6SUL31r23c-0aQAAAoU"]
[Wed Apr 29 16:51:15.991399 2026] [:error] [pid 45054:tid 45067] [client 51.77.43.178:51300] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afHGg4tL6SUL31r23c-0agAAAos"]
[Wed Apr 29 16:51:16.535545 2026] [:error] [pid 45054:tid 45078] [client 51.77.43.178:51304] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "afHGhItL6SUL31r23c-0awAAApY"]
[Wed Apr 29 16:51:17.250772 2026] [:error] [pid 45085:tid 45104] [client 51.77.43.178:51326] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afHGhdS7eNjgd8gD6ZwBLQAAAtE"]
[Wed Apr 29 16:51:18.973079 2026] [:error] [pid 45085:tid 45100] [client 51.77.43.178:57066] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afHGhtS7eNjgd8gD6ZwBMAAAAs0"]
[Wed Apr 29 16:51:19.440085 2026] [:error] [pid 2604:tid 2623] [client 51.77.43.178:57072] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afHGhxx5WQMU1W68tTYoRwAAAFE"]
[Wed Apr 29 16:51:20.095016 2026] [:error] [pid 22901:tid 22908] [client 51.77.43.178:57080] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afHGiBvfVEXI-f42iRRUigAAAQU"]
[Wed Apr 29 16:51:21.499571 2026] [:error] [pid 45054:tid 45071] [client 51.77.43.178:57094] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "afHGiYtL6SUL31r23c-0bwAAAo8"]
[Wed Apr 29 16:51:21.998584 2026] [:error] [pid 45054:tid 45077] [client 51.77.43.178:57108] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afHGiYtL6SUL31r23c-0cQAAApU"]
[Wed Apr 29 16:51:22.343533 2026] [:error] [pid 45054:tid 45056] [client 51.77.43.178:57116] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afHGiotL6SUL31r23c-0cwAAAoA"]
[Wed Apr 29 16:51:23.318299 2026] [:error] [pid 45054:tid 45075] [client 51.77.43.178:57118] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afHGi4tL6SUL31r23c-0dQAAApM"]
[Wed Apr 29 16:51:24.925923 2026] [:error] [pid 45054:tid 45066] [client 51.77.43.178:57136] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afHGjItL6SUL31r23c-0dgAAAoo"]
[Wed Apr 29 16:51:25.631671 2026] [:error] [pid 45054:tid 45065] [client 51.77.43.178:57146] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afHGjYtL6SUL31r23c-0dwAAAok"]
[Wed Apr 29 16:51:26.694247 2026] [:error] [pid 45085:tid 45095] [client 51.77.43.178:57122] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "afHGjtS7eNjgd8gD6ZwBMQAAAsg"]
[Wed Apr 29 16:51:26.901554 2026] [:error] [pid 45054:tid 45062] [client 51.77.43.178:57160] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afHGjotL6SUL31r23c-0eQAAAoY"]
[Wed Apr 29 16:51:28.870676 2026] [:error] [pid 61540:tid 61582] [client 51.77.43.178:55200] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afHGkOQ8cJB7pQslzIfdkwAAAIk"]
[Wed Apr 29 16:51:28.994210 2026] [:error] [pid 2604:tid 2612] [client 51.77.43.178:55216] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afHGkBx5WQMU1W68tTYoTQAAAEY"]
[Wed Apr 29 16:51:29.855141 2026] [:error] [pid 45085:tid 45087] [client 51.77.43.178:55228] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afHGkdS7eNjgd8gD6ZwBMwAAAsA"]
[Wed Apr 29 16:51:31.949814 2026] [:error] [pid 45054:tid 45069] [client 51.77.43.178:55256] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afHGk4tL6SUL31r23c-0fAAAAo0"]
[Wed Apr 29 16:51:32.270142 2026] [:error] [pid 45054:tid 45073] [client 51.77.43.178:55240] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afHGlItL6SUL31r23c-0fgAAApE"]
[Wed Apr 29 16:51:32.421957 2026] [:error] [pid 45054:tid 45061] [client 51.77.43.178:55230] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "afHGlItL6SUL31r23c-0fwAAAoU"]
[Wed Apr 29 16:51:32.591297 2026] [:error] [pid 22901:tid 22914] [client 51.77.43.178:55272] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afHGlBvfVEXI-f42iRRUjAAAAQs"]
[Wed Apr 29 16:51:47.174553 2026] [:error] [pid 2604:tid 2627] [client 51.77.43.178:34882] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "afHGoxx5WQMU1W68tTYoVAAAAFU"]
[Wed Apr 29 16:51:47.571941 2026] [:error] [pid 45054:tid 45062] [client 51.77.43.178:55288] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afHGo4tL6SUL31r23c-0lQAAAoY"]
[Wed Apr 29 16:51:47.701283 2026] [:error] [pid 45054:tid 45064] [client 51.77.43.178:55304] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "afHGo4tL6SUL31r23c-0lgAAAog"]
[Wed Apr 29 16:51:50.451156 2026] [:error] [pid 61540:tid 61573] [client 51.77.43.178:37404] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "afHGpuQ8cJB7pQslzIfdmwAAAIA"]
[Wed Apr 29 16:51:50.609780 2026] [:error] [pid 61540:tid 61575] [client 51.77.43.178:37420] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "afHGpuQ8cJB7pQslzIfdnAAAAII"]
[Wed Apr 29 16:51:53.064453 2026] [:error] [pid 61540:tid 61574] [client 51.77.43.178:37422] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "afHGqeQ8cJB7pQslzIfdnwAAAIE"]
[Wed Apr 29 16:51:53.317127 2026] [:error] [pid 61540:tid 61578] [client 51.77.43.178:37426] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "afHGqeQ8cJB7pQslzIfdoQAAAIU"]
[Wed Apr 29 16:51:56.119359 2026] [:error] [pid 45289:tid 45295] [client 51.77.43.178:37452] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "afHGrF_vGmZY7dOOIwrNggAAA4M"]
[Wed Apr 29 16:51:56.768957 2026] [:error] [pid 45085:tid 45087] [client 51.77.43.178:37468] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "afHGrNS7eNjgd8gD6ZwBPgAAAsA"]
[Wed Apr 29 16:51:56.894915 2026] [:error] [pid 61540:tid 61583] [client 51.77.43.178:37436] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afHGrOQ8cJB7pQslzIfdpgAAAIo"]
[Wed Apr 29 16:51:58.232798 2026] [:error] [pid 2604:tid 2606] [client 51.77.43.178:37482] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afHGrhx5WQMU1W68tTYoVwAAAEA"]
[Wed Apr 29 16:51:58.868198 2026] [:error] [pid 45054:tid 45070] [client 51.77.43.178:40722] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "afHGrotL6SUL31r23c-0nAAAAo4"]
[Wed Apr 29 16:51:59.894655 2026] [:error] [pid 45054:tid 45062] [client 51.77.43.178:40730] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "afHGr4tL6SUL31r23c-0ngAAAoY"]
[Wed Apr 29 16:52:01.418306 2026] [:error] [pid 44860:tid 44874] [client 51.77.43.178:40732] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "afHGsUQ82el2g7ESJ16PzwAAAkw"]
[Wed Apr 29 16:52:03.099626 2026] [:error] [pid 61540:tid 61578] [client 51.77.43.178:40740] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afHGs-Q8cJB7pQslzIfdqgAAAIU"]
[Wed Apr 29 16:52:03.570353 2026] [:error] [pid 45085:tid 45110] [client 51.77.43.178:40748] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "afHGs9S7eNjgd8gD6ZwBQQAAAtc"]
[Wed Apr 29 16:52:04.381963 2026] [:error] [pid 61540:tid 61576] [client 51.77.43.178:40754] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "afHGtOQ8cJB7pQslzIfdrAAAAIM"]
[Wed Apr 29 16:52:05.331462 2026] [:error] [pid 45085:tid 45105] [client 51.77.43.178:40760] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "afHGtdS7eNjgd8gD6ZwBQgAAAtI"]
[Wed Apr 29 16:52:06.853800 2026] [:error] [pid 45054:tid 45060] [client 51.77.43.178:40766] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "afHGtotL6SUL31r23c-0oQAAAoQ"]
[Wed Apr 29 16:52:07.233652 2026] [:error] [pid 45085:tid 45109] [client 51.77.43.178:40776] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "afHGt9S7eNjgd8gD6ZwBRQAAAtY"]
[Wed Apr 29 16:52:07.689060 2026] [:error] [pid 45054:tid 45074] [client 51.77.43.178:40788] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afHGt4tL6SUL31r23c-0pAAAApI"]
[Wed Apr 29 16:52:10.006642 2026] [:error] [pid 61540:tid 61584] [client 51.77.43.178:58924] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "afHGuuQ8cJB7pQslzIfdsAAAAIs"]
[Wed Apr 29 16:52:10.324376 2026] [:error] [pid 45085:tid 45090] [client 51.77.43.178:58908] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "afHGutS7eNjgd8gD6ZwBRwAAAsM"]
[Wed Apr 29 16:52:10.605120 2026] [:error] [pid 44860:tid 44873] [client 51.77.43.178:58914] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "afHGukQ82el2g7ESJ16P0gAAAks"]
[Wed Apr 29 16:52:12.767361 2026] [:error] [pid 45054:tid 45059] [client 51.77.43.178:58926] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "afHGvItL6SUL31r23c-0qAAAAoM"]
[Wed Apr 29 16:52:14.083124 2026] [:error] [pid 44860:tid 44865] [client 51.77.43.178:58958] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "afHGvkQ82el2g7ESJ16P1AAAAkM"]
[Wed Apr 29 16:52:14.675249 2026] [:error] [pid 61540:tid 61580] [client 51.77.43.178:58942] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afHGvuQ8cJB7pQslzIfdsQAAAIc"]
[Wed Apr 29 16:52:15.476867 2026] [:error] [pid 45054:tid 45071] [client 51.77.43.178:58972] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "afHGv4tL6SUL31r23c-0qwAAAo8"]
[Wed Apr 29 16:52:17.519706 2026] [:error] [pid 44860:tid 44876] [client 51.77.43.178:59002] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "afHGwUQ82el2g7ESJ16P2AAAAk4"]
[Wed Apr 29 16:52:17.926935 2026] [:error] [pid 2604:tid 2620] [client 51.77.43.178:58988] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "afHGwRx5WQMU1W68tTYoXgAAAE4"]
[Wed Apr 29 16:52:18.635004 2026] [:error] [pid 45085:tid 45105] [client 51.77.43.178:58740] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "afHGwtS7eNjgd8gD6ZwBTwAAAtI"]
[Wed Apr 29 16:52:20.766922 2026] [:error] [pid 44860:tid 44862] [client 51.77.43.178:58754] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "afHGxEQ82el2g7ESJ16P3QAAAkA"]
[Wed Apr 29 16:52:21.827996 2026] [:error] [pid 45085:tid 45098] [client 51.77.43.178:58764] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "afHGxdS7eNjgd8gD6ZwBUwAAAss"]
[Wed Apr 29 16:52:23.715003 2026] [:error] [pid 45085:tid 45090] [client 51.77.43.178:58770] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "afHGx9S7eNjgd8gD6ZwBVQAAAsM"]
[Wed Apr 29 16:52:24.615198 2026] [:error] [pid 61540:tid 61586] [client 51.77.43.178:58776] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "afHGyOQ8cJB7pQslzIfdtAAAAI0"]
[Wed Apr 29 16:52:27.525175 2026] [:error] [pid 45289:tid 45311] [client 51.77.43.178:58788] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afHGy1_vGmZY7dOOIwrNgwAAA5M"]
[Wed Apr 29 16:52:27.872238 2026] [:error] [pid 45085:tid 45108] [client 51.77.43.178:58800] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afHGy9S7eNjgd8gD6ZwBWQAAAtU"]
[Wed Apr 29 16:52:28.858245 2026] [:error] [pid 61540:tid 61575] [client 51.77.43.178:33770] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "afHGzOQ8cJB7pQslzIfdtQAAAII"]
[Wed Apr 29 16:52:30.537905 2026] [:error] [pid 61540:tid 61592] [client 51.77.43.178:33796] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "afHGzuQ8cJB7pQslzIfdtwAAAJM"]
[Wed Apr 29 16:52:32.590953 2026] [:error] [pid 44766:tid 44783] [client 51.77.43.178:33782] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "afHG0KVI9GtM_JyauAI7MAAAAY8"]
[Wed Apr 29 16:52:32.681618 2026] [:error] [pid 61540:tid 61578] [client 51.77.43.178:33802] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "afHG0OQ8cJB7pQslzIfduwAAAIU"]
[Wed Apr 29 16:52:32.930093 2026] [:error] [pid 45085:tid 45105] [client 51.77.43.178:33816] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "afHG0NS7eNjgd8gD6ZwBWwAAAtI"]
[Wed Apr 29 16:52:35.812449 2026] [:error] [pid 22901:tid 22925] [client 51.77.43.178:33842] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "afHG0xvfVEXI-f42iRRUlgAAARY"]
[Wed Apr 29 16:52:36.054544 2026] [:error] [pid 44766:tid 44784] [client 51.77.43.178:33858] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "afHG1KVI9GtM_JyauAI7NAAAAZA"]
[Wed Apr 29 16:52:36.563828 2026] [:error] [pid 22901:tid 22918] [client 51.77.43.178:33830] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afHG1BvfVEXI-f42iRRUlwAAAQ8"]
[Wed Apr 29 16:52:38.494376 2026] [:error] [pid 22901:tid 22908] [client 51.77.43.178:54390] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "afHG1hvfVEXI-f42iRRUnAAAAQU"]
[Wed Apr 29 16:52:39.111068 2026] [:error] [pid 45085:tid 45109] [client 51.77.43.178:33874] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "afHG19S7eNjgd8gD6ZwBXgAAAtY"]
[Wed Apr 29 16:52:39.474998 2026] [:error] [pid 44860:tid 44872] [client 51.77.43.178:54404] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afHG10Q82el2g7ESJ16P5QAAAko"]
[Wed Apr 29 16:52:41.037355 2026] [:error] [pid 45054:tid 45068] [client 51.77.43.178:54412] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "afHG2YtL6SUL31r23c-0rwAAAow"]
[Wed Apr 29 16:52:42.271873 2026] [:error] [pid 45054:tid 45074] [client 51.77.43.178:54416] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "afHG2otL6SUL31r23c-0swAAApI"]
[Wed Apr 29 16:52:43.724622 2026] [:error] [pid 45054:tid 45063] [client 51.77.43.178:54428] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afHG24tL6SUL31r23c-0uwAAAoc"]
[Wed Apr 29 16:52:45.217207 2026] [:error] [pid 45054:tid 45079] [client 51.77.43.178:54430] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afHG3YtL6SUL31r23c-0vQAAApc"]
[Wed Apr 29 16:52:45.773149 2026] [:error] [pid 45054:tid 45069] [client 51.77.43.178:54442] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "afHG3YtL6SUL31r23c-0vwAAAo0"]
[Wed Apr 29 16:53:03.042557 2026] [:error] [pid 45119:tid 45134] [client 51.77.43.178:54454] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "afHG78gCO5XKzjdJ_HYStQAAAw0"]
[Wed Apr 29 16:53:03.305169 2026] [:error] [pid 44766:tid 44773] [client 51.77.43.178:52162] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "afHG76VI9GtM_JyauAI7PAAAAYU"]
[Wed Apr 29 16:53:03.498106 2026] [:error] [pid 45054:tid 45066] [client 51.77.43.178:49380] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "afHG74tL6SUL31r23c-0xQAAAoo"]
[Wed Apr 29 16:53:04.893811 2026] [:error] [pid 44860:tid 44869] [client 51.77.43.178:49394] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "afHG8EQ82el2g7ESJ16P8AAAAkc"]
[Wed Apr 29 16:53:05.682323 2026] [:error] [pid 45085:tid 45090] [client 51.77.43.178:49408] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "afHG8dS7eNjgd8gD6ZwBYQAAAsM"]
[Wed Apr 29 16:53:05.839662 2026] [:error] [pid 22901:tid 22914] [client 51.77.43.178:49422] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afHG8RvfVEXI-f42iRRUpAAAAQs"]
[Wed Apr 29 16:53:08.192102 2026] [:error] [pid 45085:tid 45101] [client 51.77.43.178:48986] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "afHG9NS7eNjgd8gD6ZwBYwAAAs4"]
[Wed Apr 29 16:53:08.355050 2026] [:error] [pid 45085:tid 45089] [client 51.77.43.178:49000] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afHG9NS7eNjgd8gD6ZwBZAAAAsI"]
[Wed Apr 29 16:53:10.856923 2026] [:error] [pid 45085:tid 45108] [client 51.77.43.178:49004] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "afHG9tS7eNjgd8gD6ZwBZgAAAtU"]
[Wed Apr 29 16:53:11.766110 2026] [:error] [pid 45085:tid 45091] [client 51.77.43.178:49020] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afHG99S7eNjgd8gD6ZwBZwAAAsQ"]
[Wed Apr 29 16:53:13.220975 2026] [:error] [pid 44766:tid 44769] [client 51.77.43.178:49026] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "afHG-aVI9GtM_JyauAI7QAAAAYE"]
[Wed Apr 29 16:53:14.411430 2026] [:error] [pid 44766:tid 44785] [client 51.77.43.178:49042] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "afHG-qVI9GtM_JyauAI7QQAAAZE"]
[Wed Apr 29 16:53:14.742645 2026] [:error] [pid 44766:tid 44778] [client 51.77.43.178:49024] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "afHG-qVI9GtM_JyauAI7QgAAAYo"]
[Wed Apr 29 16:53:15.389675 2026] [:error] [pid 61628:tid 61653] [client 51.77.43.178:49058] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afHG-_XzdLVcrP-YPZhB1AAAANQ"]
[Wed Apr 29 16:53:16.247055 2026] [:error] [pid 22901:tid 22905] [client 51.77.43.178:49072] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "afHG_BvfVEXI-f42iRRUqQAAAQI"]
[Wed Apr 29 16:53:17.222546 2026] [:error] [pid 45054:tid 45067] [client 51.77.43.178:49084] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "afHG_YtL6SUL31r23c-0ywAAAos"]
[Wed Apr 29 16:53:18.781037 2026] [:error] [pid 45119:tid 45140] [client 51.77.43.178:58662] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "afHG_sgCO5XKzjdJ_HYSugAAAxM"]
[Wed Apr 29 16:53:19.940009 2026] [:error] [pid 45085:tid 45097] [client 51.77.43.178:58686] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "afHG_9S7eNjgd8gD6ZwBaAAAAso"]
[Wed Apr 29 16:53:20.723306 2026] [:error] [pid 45054:tid 45060] [client 51.77.43.178:58676] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afHHAItL6SUL31r23c-0zgAAAoQ"]
[Wed Apr 29 16:53:21.289670 2026] [:error] [pid 45054:tid 45074] [client 51.77.43.178:58702] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "afHHAYtL6SUL31r23c-0zwAAApI"]
[Wed Apr 29 16:53:22.595185 2026] [:error] [pid 44766:tid 44770] [client 51.77.43.178:58708] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "afHHAqVI9GtM_JyauAI7RAAAAYI"]
[Wed Apr 29 16:53:23.437963 2026] [:error] [pid 44766:tid 44774] [client 51.77.43.178:58712] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "afHHA6VI9GtM_JyauAI7RQAAAYY"]
[Wed Apr 29 16:53:23.817443 2026] [:error] [pid 44860:tid 44867] [client 51.77.43.178:58716] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "afHHA0Q82el2g7ESJ16P9AAAAkU"]
[Wed Apr 29 16:53:25.338354 2026] [:error] [pid 45119:tid 45141] [client 51.77.43.178:58720] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "afHHBcgCO5XKzjdJ_HYSvQAAAxQ"]
[Wed Apr 29 16:53:26.300916 2026] [:error] [pid 22901:tid 22926] [client 51.77.43.178:58730] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "afHHBhvfVEXI-f42iRRUrgAAARc"]
[Wed Apr 29 16:53:28.162715 2026] [:error] [pid 45119:tid 45134] [client 51.77.43.178:52162] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "afHHCMgCO5XKzjdJ_HYSwAAAAw0"]
[Wed Apr 29 16:53:29.102288 2026] [:error] [pid 22901:tid 22916] [client 51.77.43.178:52192] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "afHHCRvfVEXI-f42iRRUrwAAAQ0"]
[Wed Apr 29 16:53:29.850081 2026] [:error] [pid 61540:tid 61574] [client 51.77.43.178:52176] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "afHHCeQ8cJB7pQslzIfdxAAAAIE"]
[Wed Apr 29 16:53:30.778077 2026] [:error] [pid 45119:tid 45136] [client 51.77.43.178:52212] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "afHHCsgCO5XKzjdJ_HYSwQAAAw8"]
[Wed Apr 29 16:53:31.548684 2026] [:error] [pid 22901:tid 22910] [client 51.77.43.178:52222] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "afHHCxvfVEXI-f42iRRUsAAAAQc"]
[Wed Apr 29 16:53:32.093737 2026] [:error] [pid 22901:tid 22920] [client 51.77.43.178:52196] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "afHHDBvfVEXI-f42iRRUsQAAARE"]
[Wed Apr 29 16:53:33.335422 2026] [:error] [pid 45054:tid 45067] [client 51.77.43.178:52236] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "afHHDYtL6SUL31r23c-01gAAAos"]
[Wed Apr 29 16:53:34.326661 2026] [:error] [pid 45054:tid 45068] [client 51.77.43.178:52248] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "afHHDotL6SUL31r23c-01wAAAow"]
[Wed Apr 29 16:53:36.269922 2026] [:error] [pid 22901:tid 22912] [client 51.77.43.178:52258] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "afHHEBvfVEXI-f42iRRUswAAAQk"]
[Wed Apr 29 16:53:36.688659 2026] [:error] [pid 45054:tid 45074] [client 51.77.43.178:52264] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afHHEItL6SUL31r23c-02AAAApI"]
[Wed Apr 29 16:53:36.828251 2026] [:error] [pid 45054:tid 45065] [client 51.77.43.178:52276] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "afHHEItL6SUL31r23c-02QAAAok"]
[Wed Apr 29 16:53:38.773068 2026] [:error] [pid 45054:tid 45059] [client 51.77.43.178:34132] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "afHHEotL6SUL31r23c-02wAAAoM"]
[Wed Apr 29 16:53:39.008556 2026] [:error] [pid 45119:tid 45145] [client 51.77.43.178:34148] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afHHE8gCO5XKzjdJ_HYSwgAAAxg"]
[Wed Apr 29 16:53:39.581112 2026] [:error] [pid 61628:tid 61638] [client 51.77.43.178:34152] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "afHHE_XzdLVcrP-YPZhB1gAAAMU"]
[Wed Apr 29 16:53:39.822450 2026] [:error] [pid 45054:tid 45076] [client 51.77.43.178:34116] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "afHHE4tL6SUL31r23c-03gAAApQ"]
[Wed Apr 29 16:53:41.398268 2026] [:error] [pid 45119:tid 45121] [client 51.77.43.178:34164] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "afHHFcgCO5XKzjdJ_HYSwwAAAwA"]
[Wed Apr 29 16:53:41.598850 2026] [:error] [pid 61540:tid 61582] [client 51.77.43.178:34176] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afHHFeQ8cJB7pQslzIfdyQAAAIk"]
[Wed Apr 29 16:53:42.922178 2026] [:error] [pid 45119:tid 45127] [client 51.77.43.178:34182] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "afHHFsgCO5XKzjdJ_HYSxQAAAwY"]
[Wed Apr 29 16:53:44.147228 2026] [:error] [pid 61540:tid 61583] [client 51.77.43.178:34204] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afHHGOQ8cJB7pQslzIfdzQAAAIo"]
[Wed Apr 29 16:53:44.149671 2026] [:error] [pid 45085:tid 45109] [client 51.77.43.178:34194] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "afHHGNS7eNjgd8gD6ZwBagAAAtY"]
[Wed Apr 29 16:53:46.380662 2026] [:error] [pid 2604:tid 2625] [client 51.77.43.178:34206] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "afHHGhx5WQMU1W68tTYoaQAAAFM"]
[Wed Apr 29 16:53:46.670468 2026] [:error] [pid 45085:tid 45099] [client 51.77.43.178:34220] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afHHGtS7eNjgd8gD6ZwBbAAAAsw"]
[Wed Apr 29 16:53:46.786404 2026] [:error] [pid 44766:tid 44768] [client 51.77.43.178:34228] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "afHHGqVI9GtM_JyauAI7RwAAAYA"]
[Wed Apr 29 16:53:48.378352 2026] [:error] [pid 61628:tid 61654] [client 51.77.43.178:34240] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "afHHHPXzdLVcrP-YPZhB2QAAANU"]
[Wed Apr 29 16:53:49.256144 2026] [:error] [pid 44766:tid 44776] [client 51.77.43.178:56264] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afHHHaVI9GtM_JyauAI7SAAAAYg"]
[Wed Apr 29 16:53:49.307469 2026] [:error] [pid 22901:tid 22921] [client 51.77.43.178:56256] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "afHHHRvfVEXI-f42iRRUtAAAARI"]
[Wed Apr 29 16:53:49.375768 2026] [:error] [pid 44766:tid 44790] [client 51.77.43.178:56270] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "afHHHaVI9GtM_JyauAI7SQAAAZY"]
[Wed Apr 29 16:53:51.829529 2026] [:error] [pid 61540:tid 61596] [client 51.77.43.178:56290] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "afHHH-Q8cJB7pQslzIfd0wAAAJc"]
[Wed Apr 29 16:53:51.951476 2026] [:error] [pid 61540:tid 61582] [client 51.77.43.178:56302] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "afHHH-Q8cJB7pQslzIfd1AAAAIk"]
[Wed Apr 29 16:53:52.571931 2026] [:error] [pid 61628:tid 61633] [client 51.77.43.178:56306] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "afHHIPXzdLVcrP-YPZhB3AAAAMA"]
[Wed Apr 29 16:53:52.981027 2026] [:error] [pid 44766:tid 44779] [client 51.77.43.178:56274] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "afHHIKVI9GtM_JyauAI7SgAAAYs"]
[Wed Apr 29 16:53:54.290887 2026] [:error] [pid 45119:tid 45134] [client 51.77.43.178:56320] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afHHIsgCO5XKzjdJ_HYSzQAAAw0"]
[Wed Apr 29 16:53:54.763333 2026] [:error] [pid 45119:tid 45125] [client 51.77.43.178:56324] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afHHIsgCO5XKzjdJ_HYSzgAAAwQ"]
[Wed Apr 29 16:53:55.343129 2026] [:error] [pid 45119:tid 45137] [client 51.77.43.178:56330] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "afHHI8gCO5XKzjdJ_HYSzwAAAxA"]
[Wed Apr 29 16:53:56.970898 2026] [:error] [pid 45085:tid 45093] [client 51.77.43.178:56342] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "afHHJNS7eNjgd8gD6ZwBbQAAAsY"]
[Wed Apr 29 16:53:57.465093 2026] [:error] [pid 61540:tid 61584] [client 51.77.43.178:56344] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afHHJeQ8cJB7pQslzIfd1QAAAIs"]
[Wed Apr 29 16:53:57.922643 2026] [:error] [pid 61540:tid 61580] [client 51.77.43.178:56360] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "afHHJeQ8cJB7pQslzIfd1gAAAIc"]
[Wed Apr 29 16:53:58.471050 2026] [:error] [pid 61540:tid 61573] [client 51.77.43.178:43504] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "afHHJuQ8cJB7pQslzIfd1wAAAIA"]
[Wed Apr 29 16:54:09.350104 2026] [:error] [pid 45054:tid 45078] [client 51.77.43.178:43516] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afHHMYtL6SUL31r23c-07gAAApY"]
[Wed Apr 29 16:54:10.372888 2026] [:error] [pid 45054:tid 45061] [client 51.77.43.178:43518] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "afHHMotL6SUL31r23c-07wAAAoU"]
[Wed Apr 29 16:54:10.477002 2026] [:error] [pid 61628:tid 61651] [client 51.77.43.178:43512] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "afHHMvXzdLVcrP-YPZhB5QAAANI"]
[Wed Apr 29 16:54:11.888106 2026] [:error] [pid 45085:tid 45094] [client 51.77.43.178:41086] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "afHHM9S7eNjgd8gD6ZwBcQAAAsc"]
[Wed Apr 29 16:54:12.987081 2026] [:error] [pid 45085:tid 45108] [client 51.77.43.178:41094] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afHHNNS7eNjgd8gD6ZwBdQAAAtU"]
[Wed Apr 29 16:54:13.175895 2026] [:error] [pid 45119:tid 45138] [client 51.77.43.178:41112] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "afHHNcgCO5XKzjdJ_HYS1wAAAxE"]
[Wed Apr 29 16:54:13.362912 2026] [:error] [pid 61540:tid 61576] [client 51.77.43.178:41102] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "afHHNeQ8cJB7pQslzIfd3gAAAIM"]
[Wed Apr 29 16:54:14.801453 2026] [:error] [pid 45119:tid 45125] [client 51.77.43.178:41124] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afHHNsgCO5XKzjdJ_HYS3gAAAwQ"]
[Wed Apr 29 16:54:15.824537 2026] [:error] [pid 44860:tid 44882] [client 51.77.43.178:41138] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "afHHN0Q82el2g7ESJ16QCQAAAlQ"]
[Wed Apr 29 16:54:16.705742 2026] [:error] [pid 45085:tid 45096] [client 51.77.43.178:41154] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afHHONS7eNjgd8gD6ZwBmAAAAsk"]
[Wed Apr 29 16:54:17.216473 2026] [:error] [pid 61540:tid 61586] [client 51.77.43.178:41160] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "afHHOeQ8cJB7pQslzIfeAQAAAI0"]
[Wed Apr 29 16:54:18.264735 2026] [:error] [pid 45054:tid 45076] [client 51.77.43.178:46104] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "afHHOotL6SUL31r23c-09QAAApQ"]
[Wed Apr 29 16:54:18.421681 2026] [:error] [pid 44860:tid 44876] [client 51.77.43.178:46120] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "afHHOkQ82el2g7ESJ16QIAAAAk4"]
[Wed Apr 29 16:54:19.309625 2026] [:error] [pid 61540:tid 61591] [client 51.77.43.178:46132] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "afHHO-Q8cJB7pQslzIfeBwAAAJI"]
[Wed Apr 29 16:54:19.782338 2026] [:error] [pid 45085:tid 45101] [client 51.77.43.178:46146] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "afHHO9S7eNjgd8gD6ZwBmQAAAs4"]
[Wed Apr 29 16:54:20.797484 2026] [:error] [pid 61540:tid 61593] [client 51.77.43.178:46162] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afHHPOQ8cJB7pQslzIfeCgAAAJQ"]
[Wed Apr 29 16:54:21.955606 2026] [:error] [pid 45054:tid 45075] [client 51.77.43.178:46164] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "afHHPYtL6SUL31r23c-0-QAAApM"]
[Wed Apr 29 16:54:22.300536 2026] [:error] [pid 44860:tid 44881] [client 51.77.43.178:46166] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afHHPkQ82el2g7ESJ16QIwAAAlM"]
[Wed Apr 29 16:54:23.239346 2026] [:error] [pid 45289:tid 45296] [client 51.77.43.178:46176] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "afHHP1_vGmZY7dOOIwrNlAAAA4Q"]
[Wed Apr 29 16:54:24.630135 2026] [:error] [pid 45289:tid 45307] [client 51.77.43.178:46192] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "afHHQF_vGmZY7dOOIwrNlQAAA48"]
[Wed Apr 29 16:54:24.811815 2026] [:error] [pid 61628:tid 61639] [client 51.77.43.178:46198] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "afHHQPXzdLVcrP-YPZhB5wAAAMY"]
[Wed Apr 29 16:54:25.926058 2026] [:error] [pid 45289:tid 45294] [client 51.77.43.178:46208] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "afHHQV_vGmZY7dOOIwrNlwAAA4I"]
[Wed Apr 29 16:54:27.232478 2026] [:error] [pid 44860:tid 44878] [client 51.77.43.178:46218] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "afHHQ0Q82el2g7ESJ16QJQAAAlA"]
[Wed Apr 29 16:54:27.765331 2026] [:error] [pid 45054:tid 45077] [client 51.77.43.178:46222] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "afHHQ4tL6SUL31r23c-0_QAAApU"]
[Wed Apr 29 16:54:28.286203 2026] [:error] [pid 45085:tid 45092] [client 51.77.43.178:57510] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "afHHRNS7eNjgd8gD6ZwBoAAAAsU"]
[Wed Apr 29 16:54:29.786854 2026] [:error] [pid 44766:tid 44787] [client 51.77.43.178:57528] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "afHHRaVI9GtM_JyauAI7VwAAAZM"]
[Wed Apr 29 16:54:30.203020 2026] [:error] [pid 45085:tid 45110] [client 51.77.43.178:57520] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "afHHRtS7eNjgd8gD6ZwBoQAAAtc"]
[Wed Apr 29 16:54:30.419254 2026] [:error] [pid 44860:tid 44880] [client 51.77.43.178:57544] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "afHHRkQ82el2g7ESJ16QKAAAAlI"]
[Wed Apr 29 16:54:30.913347 2026] [:error] [pid 2604:tid 2627] [client 51.77.43.178:57550] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "afHHRhx5WQMU1W68tTYoawAAAFU"]
[Wed Apr 29 16:54:32.340655 2026] [:error] [pid 2604:tid 2623] [client 51.77.43.178:57556] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afHHSBx5WQMU1W68tTYobgAAAFE"]
[Wed Apr 29 16:54:33.406151 2026] [:error] [pid 44860:tid 44873] [client 51.77.43.178:57568] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afHHSUQ82el2g7ESJ16QKgAAAks"]
[Wed Apr 29 16:54:33.481494 2026] [:error] [pid 44766:tid 44776] [client 51.77.43.178:57574] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afHHSaVI9GtM_JyauAI7WAAAAYg"]
[Wed Apr 29 16:54:33.964478 2026] [:error] [pid 44860:tid 44863] [client 51.77.43.178:57580] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "afHHSUQ82el2g7ESJ16QKwAAAkE"]
[Wed Apr 29 16:54:34.917377 2026] [:error] [pid 45054:tid 45068] [client 51.77.43.178:57582] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "afHHSotL6SUL31r23c-1AAAAAow"]
[Wed Apr 29 16:54:35.983817 2026] [:error] [pid 45085:tid 45098] [client 51.77.43.178:57594] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "afHHS9S7eNjgd8gD6ZwBqQAAAss"]
[Wed Apr 29 16:54:36.272072 2026] [:error] [pid 22901:tid 22924] [client 51.77.43.178:57608] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "afHHTBvfVEXI-f42iRRU2wAAARU"]
[Wed Apr 29 16:54:36.566036 2026] [:error] [pid 45054:tid 45059] [client 51.77.43.178:57612] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "afHHTItL6SUL31r23c-1AwAAAoM"]
[Wed Apr 29 16:54:37.601023 2026] [:error] [pid 45119:tid 45138] [client 51.77.43.178:57628] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "afHHTcgCO5XKzjdJ_HYTKAAAAxE"]
[Wed Apr 29 16:54:38.817284 2026] [:error] [pid 44860:tid 44882] [client 51.77.43.178:55266] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "afHHTkQ82el2g7ESJ16QLQAAAlQ"]
[Wed Apr 29 16:54:39.259690 2026] [:error] [pid 45119:tid 45136] [client 51.77.43.178:55272] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afHHT8gCO5XKzjdJ_HYTKQAAAw8"]
[Wed Apr 29 16:54:39.512026 2026] [:error] [pid 44860:tid 44865] [client 51.77.43.178:55286] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afHHT0Q82el2g7ESJ16QLgAAAkM"]
[Wed Apr 29 16:54:40.032910 2026] [:error] [pid 45119:tid 45135] [client 51.77.43.178:55290] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afHHUMgCO5XKzjdJ_HYTKgAAAw4"]
[Wed Apr 29 16:54:42.342624 2026] [:error] [pid 2604:tid 2629] [client 51.77.43.178:55294] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "afHHUhx5WQMU1W68tTYocwAAAFc"]
[Wed Apr 29 16:54:42.450487 2026] [:error] [pid 2604:tid 2617] [client 51.77.43.178:55296] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "afHHUhx5WQMU1W68tTYodAAAAEs"]
[Wed Apr 29 16:54:43.837463 2026] [:error] [pid 45119:tid 45130] [client 51.77.43.178:55302] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afHHU8gCO5XKzjdJ_HYTKwAAAwk"]
[Wed Apr 29 16:54:45.030937 2026] [:error] [pid 2604:tid 2621] [client 51.77.43.178:55314] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "afHHVRx5WQMU1W68tTYodwAAAE8"]
[Wed Apr 29 16:54:45.103005 2026] [:error] [pid 2604:tid 2615] [client 51.77.43.178:55330] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afHHVRx5WQMU1W68tTYoeAAAAEk"]
[Wed Apr 29 16:54:46.604440 2026] [:error] [pid 2604:tid 2616] [client 51.77.43.178:55346] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afHHVhx5WQMU1W68tTYoegAAAEo"]
[Wed Apr 29 16:54:48.090706 2026] [:error] [pid 44766:tid 44780] [client 51.77.43.178:55356] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "afHHWKVI9GtM_JyauAI7XQAAAYw"]
[Wed Apr 29 16:54:48.556101 2026] [:error] [pid 2604:tid 2628] [client 51.77.43.178:36908] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afHHWBx5WQMU1W68tTYofQAAAFY"]
[Wed Apr 29 16:54:49.815337 2026] [:error] [pid 45119:tid 45145] [client 51.77.43.178:36924] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "afHHWcgCO5XKzjdJ_HYTLQAAAxg"]
[Wed Apr 29 16:54:50.757518 2026] [:error] [pid 22901:tid 22916] [client 51.77.43.178:36936] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "afHHWhvfVEXI-f42iRRU3AAAAQ0"]
[Wed Apr 29 16:54:51.168139 2026] [:error] [pid 45054:tid 45069] [client 51.77.43.178:36948] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afHHW4tL6SUL31r23c-1CAAAAo0"]
[Wed Apr 29 16:54:52.727545 2026] [:error] [pid 45054:tid 45068] [client 51.77.43.178:36950] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "afHHXItL6SUL31r23c-1CQAAAow"]
[Wed Apr 29 16:54:53.237980 2026] [:error] [pid 22901:tid 22910] [client 51.77.43.178:36966] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afHHXRvfVEXI-f42iRRU3QAAAQc"]
[Wed Apr 29 16:54:53.917076 2026] [:error] [pid 61540:tid 61577] [client 51.77.43.178:36980] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "afHHXeQ8cJB7pQslzIfeDAAAAIQ"]
[Wed Apr 29 16:54:56.071843 2026] [:error] [pid 61540:tid 61596] [client 51.77.43.178:36984] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "afHHYOQ8cJB7pQslzIfeEQAAAJc"]
[Wed Apr 29 16:54:57.182708 2026] [:error] [pid 61540:tid 61594] [client 51.77.43.178:36998] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "afHHYeQ8cJB7pQslzIfeEwAAAJU"]
[Wed Apr 29 16:54:59.024286 2026] [:error] [pid 61540:tid 61580] [client 51.77.43.178:55658] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "afHHY-Q8cJB7pQslzIfeFwAAAIc"]
[Wed Apr 29 16:54:59.724081 2026] [:error] [pid 61540:tid 61573] [client 51.77.43.178:55670] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "afHHY-Q8cJB7pQslzIfeGAAAAIA"]
[Wed Apr 29 16:55:03.639550 2026] [:error] [pid 45085:tid 45093] [client 51.77.43.178:55684] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "afHHZ9S7eNjgd8gD6ZwBsAAAAsY"]
[Wed Apr 29 16:55:30.843311 2026] [:error] [pid 22901:tid 22904] [client 51.77.43.178:55642] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "afHHghvfVEXI-f42iRRU5gAAAQE"]
[Wed Apr 29 16:55:32.431186 2026] [:error] [pid 45054:tid 45057] [client 51.77.43.178:55630] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "afHHhItL6SUL31r23c-1LQAAAoE"]
[Wed Apr 29 16:55:36.180249 2026] [:error] [pid 2604:tid 2619] [client 51.77.43.178:59168] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "afHHiBx5WQMU1W68tTYojwAAAE0"]
[Wed Apr 29 16:55:37.657273 2026] [:error] [pid 45054:tid 45062] [client 51.77.43.178:59180] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "afHHiYtL6SUL31r23c-1NAAAAoY"]
[Wed Apr 29 16:55:41.958656 2026] [:error] [pid 45054:tid 45065] [client 51.77.43.178:35544] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "afHHjYtL6SUL31r23c-1OwAAAok"]
[Wed Apr 29 16:55:42.452511 2026] [:error] [pid 44860:tid 44864] [client 51.77.43.178:35550] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "afHHjkQ82el2g7ESJ16QVQAAAkI"]
[Wed Apr 29 16:55:45.347746 2026] [:error] [pid 45289:tid 45305] [client 51.77.43.178:35558] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "afHHkV_vGmZY7dOOIwrNowAAA40"]
[Wed Apr 29 16:55:46.579068 2026] [:error] [pid 61628:tid 61651] [client 51.77.43.178:35568] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "afHHkvXzdLVcrP-YPZhB8QAAANI"]
[Wed Apr 29 16:55:49.234478 2026] [:error] [pid 22901:tid 22924] [client 51.77.43.178:43346] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "afHHlRvfVEXI-f42iRRU6gAAARU"]
[Wed Apr 29 16:55:51.519950 2026] [:error] [pid 45085:tid 45110] [client 51.77.43.178:43360] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "afHHl9S7eNjgd8gD6ZwB2AAAAtc"]
[Wed Apr 29 16:55:52.307473 2026] [:error] [pid 45119:tid 45127] [client 51.77.43.178:43362] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "afHHmMgCO5XKzjdJ_HYTOQAAAwY"]
[Wed Apr 29 16:55:55.842142 2026] [:error] [pid 45085:tid 45111] [client 51.77.43.178:43378] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "afHHm9S7eNjgd8gD6ZwB3wAAAtg"]
[Wed Apr 29 16:55:58.148892 2026] [:error] [pid 45085:tid 45097] [client 51.77.43.178:43386] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afHHntS7eNjgd8gD6ZwB4wAAAso"]
[Wed Apr 29 16:55:58.834044 2026] [:error] [pid 22901:tid 22921] [client 51.77.43.178:43332] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "afHHnhvfVEXI-f42iRRU7wAAARI"]
[Wed Apr 29 16:56:02.091347 2026] [:error] [pid 45054:tid 45063] [client 51.77.43.178:43342] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afHHootL6SUL31r23c-1RwAAAoc"]
[Wed Apr 29 16:56:02.612736 2026] [:error] [pid 44860:tid 44868] [client 51.77.43.178:43358] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afHHokQ82el2g7ESJ16QXQAAAkY"]
[Wed Apr 29 16:56:04.997083 2026] [:error] [pid 45054:tid 45058] [client 51.77.43.178:43360] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afHHpItL6SUL31r23c-1TgAAAoI"]
[Wed Apr 29 16:56:06.148948 2026] [:error] [pid 45054:tid 45074] [client 51.77.43.178:43374] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afHHpotL6SUL31r23c-1UwAAApI"]
[Wed Apr 29 16:56:09.073928 2026] [:error] [pid 45054:tid 45075] [client 51.77.43.178:49528] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afHHqYtL6SUL31r23c-1WAAAApM"]
[Wed Apr 29 16:56:12.110811 2026] [:error] [pid 61540:tid 61590] [client 51.77.43.178:49540] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afHHrOQ8cJB7pQslzIfeIgAAAJE"]
[Wed Apr 29 16:56:13.337510 2026] [:error] [pid 61628:tid 61643] [client 51.77.43.178:49544] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afHHrfXzdLVcrP-YPZhB9AAAAMo"]
[Wed Apr 29 16:56:15.604898 2026] [:error] [pid 45085:tid 45110] [client 51.77.43.178:49550] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afHHr9S7eNjgd8gD6ZwB5QAAAtc"]
[Wed Apr 29 16:56:16.561599 2026] [:error] [pid 44860:tid 44875] [client 51.77.43.178:49564] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afHHsEQ82el2g7ESJ16QXgAAAk0"]
[Wed Apr 29 16:56:20.478960 2026] [:error] [pid 45289:tid 45302] [client 51.77.43.178:41390] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afHHtF_vGmZY7dOOIwrNpQAAA4o"]
[Wed Apr 29 16:56:21.754460 2026] [:error] [pid 22901:tid 22922] [client 51.77.43.178:41404] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afHHtRvfVEXI-f42iRRU8gAAARM"]
[Wed Apr 29 16:56:23.570507 2026] [:error] [pid 2604:tid 2621] [client 51.77.43.178:41418] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "afHHtxx5WQMU1W68tTYokwAAAE8"]
[Wed Apr 29 16:56:26.785821 2026] [:error] [pid 61540:tid 61595] [client 51.77.43.178:41430] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "afHHuuQ8cJB7pQslzIfeJgAAAJY"]
[Wed Apr 29 16:56:48.769644 2026] [:error] [pid 45085:tid 45094] [client 51.77.43.178:44868] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "afHH0NS7eNjgd8gD6ZwCAgAAAsc"]
[Wed Apr 29 16:56:49.044288 2026] [:error] [pid 44860:tid 44867] [client 51.77.43.178:44872] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "afHH0UQ82el2g7ESJ16QfwAAAkU"]
[Wed Apr 29 16:56:52.498006 2026] [:error] [pid 45085:tid 45109] [client 51.77.43.178:43682] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "afHH1NS7eNjgd8gD6ZwCCQAAAtY"]
[Wed Apr 29 16:56:52.615394 2026] [:error] [pid 45119:tid 45139] [client 51.77.43.178:43684] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afHH1MgCO5XKzjdJ_HYTQQAAAxI"]
[Wed Apr 29 16:56:55.803830 2026] [:error] [pid 2604:tid 2628] [client 51.77.43.178:43688] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afHH1xx5WQMU1W68tTYomAAAAFY"]
[Wed Apr 29 16:56:56.084693 2026] [:error] [pid 61628:tid 61655] [client 51.77.43.178:43704] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "afHH2PXzdLVcrP-YPZhB_gAAANY"]
[Wed Apr 29 16:56:59.379158 2026] [:error] [pid 61540:tid 61575] [client 51.77.43.178:53884] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "afHH2-Q8cJB7pQslzIfeVAAAAII"]
[Wed Apr 29 16:56:59.508954 2026] [:error] [pid 61540:tid 61588] [client 51.77.43.178:53896] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "afHH2-Q8cJB7pQslzIfeVQAAAI8"]
[Wed Apr 29 16:57:02.389683 2026] [:error] [pid 22901:tid 22924] [client 51.77.43.178:53902] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "afHH3hvfVEXI-f42iRRU9gAAARU"]
[Wed Apr 29 16:57:04.115025 2026] [:error] [pid 2604:tid 2618] [client 51.77.43.178:53912] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afHH4Bx5WQMU1W68tTYonAAAAEw"]
[Wed Apr 29 16:57:05.967290 2026] [:error] [pid 45054:tid 45070] [client 51.77.43.178:53920] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afHH4YtL6SUL31r23c-1hwAAAo4"]
[Wed Apr 29 16:57:07.478082 2026] [:error] [pid 45054:tid 45066] [client 51.77.43.178:53924] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "afHH44tL6SUL31r23c-1jwAAAoo"]
[Wed Apr 29 16:57:08.828302 2026] [:error] [pid 22901:tid 22907] [client 51.77.43.178:57580] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "afHH5BvfVEXI-f42iRRU_QAAAQQ"]
[Wed Apr 29 16:57:12.068753 2026] [:error] [pid 2604:tid 2614] [client 51.77.43.178:57592] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "afHH6Bx5WQMU1W68tTYovAAAAEg"]
[Wed Apr 29 16:57:12.638453 2026] [:error] [pid 44860:tid 44864] [client 51.77.43.178:57604] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "afHH6EQ82el2g7ESJ16QmQAAAkI"]
[Wed Apr 29 16:57:14.852059 2026] [:error] [pid 2604:tid 2615] [client 51.77.43.178:57614] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "afHH6hx5WQMU1W68tTYoxAAAAEk"]
[Wed Apr 29 16:57:16.004981 2026] [:error] [pid 44860:tid 44868] [client 51.77.43.178:57616] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "afHH7EQ82el2g7ESJ16QnQAAAkY"]
[Wed Apr 29 16:57:18.404332 2026] [:error] [pid 44860:tid 44883] [client 51.77.43.178:47688] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "afHH7kQ82el2g7ESJ16QpAAAAlU"]
[Wed Apr 29 16:57:20.643198 2026] [:error] [pid 2604:tid 2626] [client 51.77.43.178:47690] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "afHH8Bx5WQMU1W68tTYo0AAAAFQ"]
[Wed Apr 29 16:57:23.332960 2026] [:error] [pid 44860:tid 44873] [client 51.77.43.178:47696] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afHH80Q82el2g7ESJ16QrAAAAks"]
[Wed Apr 29 16:57:24.953960 2026] [:error] [pid 44860:tid 44862] [client 51.77.43.178:47710] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afHH9EQ82el2g7ESJ16QtQAAAkA"]
[Wed Apr 29 16:57:26.893208 2026] [:error] [pid 45085:tid 45096] [client 51.77.43.178:47716] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "afHH9tS7eNjgd8gD6ZwCKgAAAsk"]
[Wed Apr 29 16:57:28.737379 2026] [:error] [pid 45054:tid 45056] [client 51.77.43.178:50786] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "afHH-ItL6SUL31r23c-1vwAAAoA"]
[Wed Apr 29 16:57:30.035348 2026] [:error] [pid 45119:tid 45137] [client 51.77.43.178:50790] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "afHH-sgCO5XKzjdJ_HYTVQAAAxA"]
[Wed Apr 29 16:57:32.001573 2026] [:error] [pid 45054:tid 45078] [client 51.77.43.178:50792] [client 51.77.43.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "afHH_ItL6SUL31r23c-1xQAAApY"]
[Wed Apr 29 17:12:42.277278 2026] [:error] [pid 44766:tid 44780] [client 106.192.120.153:49881] [client 106.192.120.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.120.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afHLiqVI9GtM_JyauAI77wAAAYw"]
[Wed Apr 29 17:12:56.604986 2026] [:error] [pid 45054:tid 45074] [client 106.192.120.153:50273] [client 106.192.120.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.120.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afHLmItL6SUL31r23c-5CAAAApI"]
[Wed Apr 29 17:13:05.080043 2026] [:error] [pid 45054:tid 45061] [client 106.192.120.153:50765] [client 106.192.120.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.120.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afHLoYtL6SUL31r23c-5EgAAAoU"]
[Wed Apr 29 17:13:16.073372 2026] [:error] [pid 44766:tid 44772] [client 106.192.120.153:51201] [client 106.192.120.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.120.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afHLrKVI9GtM_JyauAI78wAAAYQ"]
[Wed Apr 29 17:13:27.507082 2026] [:error] [pid 22901:tid 22921] [client 106.192.120.153:51537] [client 106.192.120.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.120.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afHLtxvfVEXI-f42iRRWDQAAARI"]
[Wed Apr 29 19:00:18.787256 2026] [:error] [pid 61540:tid 61589] [client 205.185.115.28:57345] [client 205.185.115.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afHkwuQ8cJB7pQslzIft_QAAAJA"]
[Wed Apr 29 19:00:21.001248 2026] [proxy_fcgi:error] [pid 61540:tid 61589] [client 205.185.115.28:57345] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 29 19:00:21.581999 2026] [:error] [pid 61540:tid 61591] [client 205.185.115.28:57345] [client 205.185.115.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afHkxeQ8cJB7pQslzIfuAAAAAJI"]
[Wed Apr 29 19:00:22.448725 2026] [proxy_fcgi:error] [pid 61540:tid 61591] [client 205.185.115.28:57345] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed Apr 29 20:21:36.892965 2026] [:error] [pid 21136:tid 21155] [client 196.39.254.245:52852] [client 196.39.254.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.39.254.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afH30ClIfGGQdPVv8_PhWwAAAE4"]
[Wed Apr 29 20:21:47.230956 2026] [:error] [pid 21227:tid 21252] [client 196.39.254.245:61602] [client 196.39.254.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.39.254.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afH328B3c6U5AGPPsXqDtQAAANM"]
[Wed Apr 29 20:21:58.383441 2026] [:error] [pid 21536:tid 21541] [client 196.39.254.245:4245] [client 196.39.254.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.39.254.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afH35iREaVkH9P5H_LQNxAAAAIM"]
[Wed Apr 29 20:22:09.675541 2026] [:error] [pid 21536:tid 21558] [client 196.39.254.245:4749] [client 196.39.254.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.39.254.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afH38SREaVkH9P5H_LQNzwAAAJQ"]
[Wed Apr 29 20:22:20.527780 2026] [:error] [pid 21137:tid 21184] [client 196.39.254.245:52446] [client 196.39.254.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.39.254.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afH3_Pw-HnaioFPIurVT7gAAAA8"]
[Wed Apr 29 21:20:26.444826 2026] [:error] [pid 21137:tid 21180] [client 43.160.219.138:51246] [client 43.160.219.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afIFmvw-HnaioFPIurVdTQAAAAs"]
[Thu Apr 30 00:01:10.848546 2026] [:error] [pid 21137:tid 21171] [client 41.99.249.53:62641] [client 41.99.249.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.99.249.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIrRvw-HnaioFPIurWAbwAAAAI"]
[Thu Apr 30 00:01:21.210859 2026] [:error] [pid 47618:tid 47622] [client 41.99.249.53:55325] [client 41.99.249.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.99.249.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIrUXHYUSxIrhce2OA76wAAAUE"]
[Thu Apr 30 00:01:31.904773 2026] [:error] [pid 21138:tid 21204] [client 41.99.249.53:55657] [client 41.99.249.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.99.249.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIrW5uzwUiyMeUnp30WKQAAAQc"]
[Thu Apr 30 00:01:42.635412 2026] [:error] [pid 21138:tid 21206] [client 41.99.249.53:54439] [client 41.99.249.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.99.249.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIrZpuzwUiyMeUnp30WUgAAAQk"]
[Thu Apr 30 00:01:53.295325 2026] [:error] [pid 21138:tid 21219] [client 41.99.249.53:54775] [client 41.99.249.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.99.249.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIrcZuzwUiyMeUnp30WaQAAARY"]
[Thu Apr 30 00:03:44.073206 2026] [:error] [pid 21138:tid 21219] [client 179.94.192.42:64172] [client 179.94.192.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.94.192.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIr4JuzwUiyMeUnp30W6gAAARY"]
[Thu Apr 30 00:17:28.340819 2026] [:error] [pid 21137:tid 21186] [client 182.8.178.42:27762] [client 182.8.178.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.178.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIvGPw-HnaioFPIurWEDQAAABE"]
[Thu Apr 30 00:17:38.442643 2026] [:error] [pid 47618:tid 47630] [client 182.8.178.42:31493] [client 182.8.178.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.178.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIvInHYUSxIrhce2OA-rgAAAUk"]
[Thu Apr 30 00:17:49.111541 2026] [:error] [pid 21138:tid 21218] [client 182.8.178.42:2802] [client 182.8.178.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.178.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIvLZuzwUiyMeUnp30btQAAARU"]
[Thu Apr 30 00:17:59.754008 2026] [:error] [pid 21138:tid 21211] [client 182.8.178.42:5226] [client 182.8.178.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.178.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIvN5uzwUiyMeUnp30b_wAAAQ4"]
[Thu Apr 30 00:18:10.358940 2026] [:error] [pid 21138:tid 21214] [client 182.8.178.42:7941] [client 182.8.178.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.178.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIvQpuzwUiyMeUnp30cEQAAARE"]
[Thu Apr 30 00:23:39.580613 2026] [:error] [pid 21137:tid 21182] [client 49.37.243.26:55872] [client 49.37.243.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.243.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIwi_w-HnaioFPIurWFpAAAAA0"]
[Thu Apr 30 00:24:52.806991 2026] [:error] [pid 21138:tid 21211] [client 49.37.243.26:58200] [client 49.37.243.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.243.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIw1JuzwUiyMeUnp30dvQAAAQ4"]
[Thu Apr 30 00:25:13.184422 2026] [:error] [pid 21137:tid 21171] [client 49.37.243.26:58821] [client 49.37.243.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.243.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIw6fw-HnaioFPIurWGBQAAAAI"]
[Thu Apr 30 00:27:55.032492 2026] [:error] [pid 21138:tid 21209] [client 49.37.243.26:60793] [client 49.37.243.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.243.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIxi5uzwUiyMeUnp30e1gAAAQw"]
[Thu Apr 30 00:28:13.090103 2026] [:error] [pid 21536:tid 21541] [client 49.37.243.26:61220] [client 49.37.243.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.243.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afIxnSREaVkH9P5H_LQ_SwAAAIM"]
[Thu Apr 30 00:30:25.628686 2026] [:error] [pid 47618:tid 47636] [client 94.247.172.129:35130] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afIyIXHYUSxIrhce2OBAlwAAAU8"]
[Thu Apr 30 00:44:21.161633 2026] [:error] [pid 21138:tid 21204] [client 43.131.36.84:42206] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afI1ZZuzwUiyMeUnp30jWgAAAQc"]
[Thu Apr 30 00:59:30.495434 2026] [:error] [pid 21137:tid 21185] [client 84.67.226.25:55617] [client 84.67.226.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.67.226.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI48vw-HnaioFPIurWLXQAAABA"]
[Thu Apr 30 00:59:45.413556 2026] [:error] [pid 21137:tid 21185] [client 84.67.226.25:56045] [client 84.67.226.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.67.226.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI5Afw-HnaioFPIurWLaAAAABA"]
[Thu Apr 30 00:59:59.347100 2026] [:error] [pid 21138:tid 21197] [client 84.67.226.25:56348] [client 84.67.226.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.67.226.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI5D5uzwUiyMeUnp30m8AAAAQE"]
[Thu Apr 30 01:00:11.781651 2026] [:error] [pid 21138:tid 21217] [client 84.67.226.25:56673] [client 84.67.226.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.67.226.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI5G5uzwUiyMeUnp30m-QAAARQ"]
[Thu Apr 30 01:00:26.001869 2026] [:error] [pid 21138:tid 21207] [client 84.67.226.25:56980] [client 84.67.226.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.67.226.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI5KpuzwUiyMeUnp30nCQAAAQo"]
[Thu Apr 30 01:06:49.963586 2026] [:error] [pid 21137:tid 21172] [client 1.39.94.241:36605] [client 1.39.94.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.39.94.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI6qfw-HnaioFPIurWMxgAAAAM"]
[Thu Apr 30 01:06:58.742911 2026] [:error] [pid 21138:tid 21203] [client 1.39.94.241:43264] [client 1.39.94.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.39.94.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI6spuzwUiyMeUnp30pfwAAAQY"]
[Thu Apr 30 01:07:09.663400 2026] [:error] [pid 47618:tid 47645] [client 1.39.94.241:30762] [client 1.39.94.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.39.94.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI6vXHYUSxIrhce2OBF1AAAAVg"]
[Thu Apr 30 01:26:25.853522 2026] [:error] [pid 21227:tid 21256] [client 179.102.38.99:18305] [client 179.102.38.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.102.38.99, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI_QcB3c6U5AGPPsXqrIQAAANc"]
[Thu Apr 30 01:26:35.488864 2026] [:error] [pid 47618:tid 47640] [client 179.102.38.99:18318] [client 179.102.38.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.102.38.99, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI_S3HYUSxIrhce2OBIpwAAAVM"]
[Thu Apr 30 01:26:46.045088 2026] [:error] [pid 21137:tid 21171] [client 179.102.38.99:18330] [client 179.102.38.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.102.38.99, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI_Vvw-HnaioFPIurWP5wAAAAI"]
[Thu Apr 30 01:26:56.568994 2026] [:error] [pid 21138:tid 21206] [client 179.102.38.99:18339] [client 179.102.38.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.102.38.99, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI_YJuzwUiyMeUnp30uKwAAAQk"]
[Thu Apr 30 01:27:07.094097 2026] [:error] [pid 21137:tid 21190] [client 179.102.38.99:18354] [client 179.102.38.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.102.38.99, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afI_a_w-HnaioFPIurWP_QAAABU"]
[Thu Apr 30 01:31:08.489828 2026] [:error] [pid 21536:tid 21548] [client 20.215.248.255:2928] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJAXCREaVkH9P5H_LRFyAAAAIo"]
[Thu Apr 30 01:31:09.552223 2026] [:error] [pid 47618:tid 47632] [client 20.215.248.255:14995] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJAXXHYUSxIrhce2OBJQgAAAUs"]
[Thu Apr 30 01:31:10.647136 2026] [:error] [pid 47618:tid 47640] [client 20.215.248.255:18855] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJAXnHYUSxIrhce2OBJRgAAAVM"]
[Thu Apr 30 01:31:11.696861 2026] [:error] [pid 47618:tid 47630] [client 20.215.248.255:19977] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJAX3HYUSxIrhce2OBJSgAAAUk"]
[Thu Apr 30 01:49:27.737656 2026] [:error] [pid 21137:tid 21178] [client 49.204.214.63:29415] [client 49.204.214.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.214.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJEp_w-HnaioFPIurWV3gAAAAk"]
[Thu Apr 30 01:49:37.749429 2026] [:error] [pid 21137:tid 21187] [client 49.204.214.63:29515] [client 49.204.214.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.214.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJEsfw-HnaioFPIurWV9AAAABI"]
[Thu Apr 30 01:49:48.373574 2026] [:error] [pid 21536:tid 21562] [client 49.204.214.63:29521] [client 49.204.214.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.214.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJEvCREaVkH9P5H_LRIlgAAAJg"]
[Thu Apr 30 01:49:58.984754 2026] [:error] [pid 47618:tid 47624] [client 49.204.214.63:31174] [client 49.204.214.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.214.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJExnHYUSxIrhce2OBM2wAAAUM"]
[Thu Apr 30 01:50:09.497821 2026] [:error] [pid 21227:tid 21253] [client 49.204.214.63:29584] [client 49.204.214.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.214.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJE0cB3c6U5AGPPsXquhgAAANQ"]
[Thu Apr 30 02:08:13.011854 2026] [:error] [pid 21138:tid 21211] [client 158.158.98.94:41297] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJJDZuzwUiyMeUnp30-UQAAAQ4"]
[Thu Apr 30 02:08:13.975909 2026] [:error] [pid 21138:tid 21207] [client 158.158.98.94:11138] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJJDZuzwUiyMeUnp30-UwAAAQo"]
[Thu Apr 30 02:08:15.010013 2026] [:error] [pid 47618:tid 47624] [client 158.158.98.94:10312] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJJD3HYUSxIrhce2OBRUgAAAUM"]
[Thu Apr 30 02:08:16.060635 2026] [:error] [pid 21138:tid 21213] [client 158.158.98.94:11170] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJJEJuzwUiyMeUnp30-WgAAARA"]
[Thu Apr 30 03:43:29.059347 2026] [:error] [pid 14872:tid 15039] [client 158.158.98.94:43369] [client 158.158.98.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "afJfYXCEVsTqEmHR80TKqAAAAEs"]
[Thu Apr 30 03:43:35.073119 2026] [autoindex:error] [pid 14873:tid 15080] [client 158.158.98.94:41597] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 30 03:43:40.876627 2026] [:error] [pid 14873:tid 15062] [client 158.158.98.94:41597] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJfbBRfFW0IShyI53aJwwAAAIY"]
[Thu Apr 30 03:43:41.905416 2026] [:error] [pid 14873:tid 15060] [client 158.158.98.94:42290] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJfbRRfFW0IShyI53aJxwAAAIQ"]
[Thu Apr 30 03:43:42.886231 2026] [:error] [pid 14873:tid 15071] [client 158.158.98.94:44294] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJfbhRfFW0IShyI53aJ0AAAAI8"]
[Thu Apr 30 03:43:43.900761 2026] [:error] [pid 14873:tid 15072] [client 158.158.98.94:39057] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afJfbxRfFW0IShyI53aJ1QAAAJA"]
[Thu Apr 30 04:35:19.440973 2026] [:error] [pid 52350:tid 52382] [client 139.155.126.16:40330] [client 139.155.126.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afJrh_1j4GHE9hm7bfcmOAAAARg"]
[Thu Apr 30 04:44:30.778418 2026] [:error] [pid 52436:tid 52445] [client 43.165.127.225:44096] [client 43.165.127.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afJtrgLFWPk_P7AfE8fTYAAAAUY"]
[Thu Apr 30 05:19:41.982529 2026] [:error] [pid 52350:tid 52362] [client 158.158.98.94:11228] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "afJ17f1j4GHE9hm7bfcvOgAAAQQ"]
[Thu Apr 30 05:19:43.007861 2026] [:error] [pid 18220:tid 18239] [client 158.158.98.94:42339] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "afJ178yESVSfAPebmxbjjgAAANA"]
[Thu Apr 30 05:19:44.056954 2026] [:error] [pid 52350:tid 52369] [client 158.158.98.94:11220] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "afJ18P1j4GHE9hm7bfcvPgAAAQs"]
[Thu Apr 30 05:19:45.047302 2026] [:error] [pid 52350:tid 52367] [client 158.158.98.94:10390] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "afJ18f1j4GHE9hm7bfcvQgAAAQk"]
[Thu Apr 30 05:29:25.555231 2026] [:error] [pid 52350:tid 52361] [client 117.201.34.199:52385] [client 117.201.34.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.201.34.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJ4Nf1j4GHE9hm7bfcx0gAAAQM"]
[Thu Apr 30 05:29:35.693728 2026] [:error] [pid 52350:tid 52364] [client 117.201.34.199:52877] [client 117.201.34.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.201.34.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJ4P_1j4GHE9hm7bfcx6gAAAQY"]
[Thu Apr 30 05:29:46.160248 2026] [:error] [pid 52436:tid 52439] [client 117.201.34.199:53230] [client 117.201.34.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.201.34.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJ4SgLFWPk_P7AfE8feKAAAAUA"]
[Thu Apr 30 05:29:57.486060 2026] [:error] [pid 52350:tid 52368] [client 117.201.34.199:53568] [client 117.201.34.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.201.34.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJ4Vf1j4GHE9hm7bfcx_wAAAQo"]
[Thu Apr 30 05:30:07.276842 2026] [:error] [pid 52436:tid 52447] [client 117.201.34.199:53919] [client 117.201.34.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.201.34.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJ4XwLFWPk_P7AfE8fePQAAAUg"]
[Thu Apr 30 05:32:06.317072 2026] [:error] [pid 52350:tid 52382] [client 145.224.125.215:8142] [client 145.224.125.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 145.224.125.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJ41v1j4GHE9hm7bfcyhQAAARg"]
[Thu Apr 30 05:32:17.431626 2026] [:error] [pid 52350:tid 52359] [client 145.224.125.215:4202] [client 145.224.125.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 145.224.125.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJ44f1j4GHE9hm7bfcylwAAAQI"]
[Thu Apr 30 05:33:24.028192 2026] [:error] [pid 18113:tid 18183] [client 145.224.125.215:50302] [client 145.224.125.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 145.224.125.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJ5JHiIjwsVGkvz5IlQcQAAAIY"]
[Thu Apr 30 05:33:31.904008 2026] [:error] [pid 52436:tid 52449] [client 145.224.125.215:59330] [client 145.224.125.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 145.224.125.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJ5KwLFWPk_P7AfE8fe-gAAAUo"]
[Thu Apr 30 05:34:04.088781 2026] [:error] [pid 52350:tid 52362] [client 145.224.125.215:60190] [client 145.224.125.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 145.224.125.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afJ5TP1j4GHE9hm7bfcy-AAAAQQ"]
[Thu Apr 30 06:50:00.468666 2026] [:error] [pid 18113:tid 18191] [client 158.158.98.94:37122] [client 158.158.98.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "afKLGHiIjwsVGkvz5IlZIQAAAI4"]
[Thu Apr 30 06:50:08.230771 2026] [autoindex:error] [pid 52350:tid 52364] [client 158.158.98.94:40986] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 30 06:50:13.282176 2026] [:error] [pid 52350:tid 52382] [client 158.158.98.94:40986] [client 158.158.98.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "afKLJf1j4GHE9hm7bfdHOQAAARg"]
[Thu Apr 30 06:50:14.341298 2026] [:error] [pid 18112:tid 18173] [client 158.158.98.94:10553] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "afKLJiUrJv3y8j6Lm1ugtAAAAFc"]
[Thu Apr 30 06:50:15.413000 2026] [:error] [pid 18220:tid 18241] [client 158.158.98.94:11256] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "afKLJ8yESVSfAPebmxbxSAAAANI"]
[Thu Apr 30 06:50:16.459906 2026] [:error] [pid 52436:tid 52462] [client 158.158.98.94:37139] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "afKLKALFWPk_P7AfE8ft5AAAAVc"]
[Thu Apr 30 06:50:17.443412 2026] [:error] [pid 18113:tid 18181] [client 158.158.98.94:10497] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "afKLKXiIjwsVGkvz5IlZIwAAAIQ"]
[Thu Apr 30 06:58:44.260543 2026] [:error] [pid 18220:tid 18235] [client 88.238.63.3:39263] [client 88.238.63.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.238.63.3, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKNJMyESVSfAPebmxbyugAAAMw"]
[Thu Apr 30 06:58:51.846425 2026] [:error] [pid 52436:tid 52455] [client 88.238.63.3:39148] [client 88.238.63.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.238.63.3, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKNKwLFWPk_P7AfE8fwlAAAAVA"]
[Thu Apr 30 06:59:02.465881 2026] [:error] [pid 52436:tid 52463] [client 88.238.63.3:41084] [client 88.238.63.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.238.63.3, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKNNgLFWPk_P7AfE8fwnAAAAVg"]
[Thu Apr 30 06:59:12.071995 2026] [:error] [pid 52436:tid 52454] [client 88.238.63.3:37474] [client 88.238.63.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.238.63.3, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKNQALFWPk_P7AfE8fwpwAAAU8"]
[Thu Apr 30 06:59:22.657887 2026] [:error] [pid 52436:tid 52448] [client 88.238.63.3:39533] [client 88.238.63.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.238.63.3, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKNSgLFWPk_P7AfE8fwuwAAAUk"]
[Thu Apr 30 07:21:18.347332 2026] [:error] [pid 18112:tid 18153] [client 49.206.119.30:63757] [client 49.206.119.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.119.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKSbiUrJv3y8j6Lm1ukBAAAAEM"]
[Thu Apr 30 07:21:28.718480 2026] [:error] [pid 52436:tid 52445] [client 49.206.119.30:64031] [client 49.206.119.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.119.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKSeALFWPk_P7AfE8f4gwAAAUY"]
[Thu Apr 30 07:21:39.571104 2026] [:error] [pid 52436:tid 52439] [client 49.206.119.30:64435] [client 49.206.119.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.119.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKSgwLFWPk_P7AfE8f4mQAAAUA"]
[Thu Apr 30 07:21:50.178145 2026] [:error] [pid 52436:tid 52439] [client 49.206.119.30:62982] [client 49.206.119.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.119.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKSjgLFWPk_P7AfE8f4pQAAAUA"]
[Thu Apr 30 07:22:01.149073 2026] [:error] [pid 18113:tid 18191] [client 49.206.119.30:63569] [client 49.206.119.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.119.30, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKSmXiIjwsVGkvz5IldrAAAAI4"]
[Thu Apr 30 07:48:15.824420 2026] [:error] [pid 18220:tid 18235] [client 206.83.118.16:17883] [client 206.83.118.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.83.118.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKYv8yESVSfAPebmxb73gAAAMw"]
[Thu Apr 30 07:48:26.369338 2026] [:error] [pid 52350:tid 52369] [client 206.83.118.16:46694] [client 206.83.118.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.83.118.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKYyv1j4GHE9hm7bfdUxQAAAQs"]
[Thu Apr 30 07:48:36.987311 2026] [:error] [pid 52350:tid 52370] [client 206.83.118.16:7172] [client 206.83.118.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.83.118.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKY1P1j4GHE9hm7bfdU2wAAAQw"]
[Thu Apr 30 07:48:47.512572 2026] [:error] [pid 52350:tid 52365] [client 206.83.118.16:4857] [client 206.83.118.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.83.118.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKY3_1j4GHE9hm7bfdVAAAAAQc"]
[Thu Apr 30 07:48:58.266364 2026] [:error] [pid 52350:tid 52362] [client 206.83.118.16:30058] [client 206.83.118.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.83.118.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKY6v1j4GHE9hm7bfdVCAAAAQQ"]
[Thu Apr 30 08:03:25.218834 2026] [:error] [pid 18111:tid 18127] [client 206.83.118.16:62428] [client 206.83.118.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.83.118.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKcTWctLbxB7Q1_oK2RUwAAAAU"]
[Thu Apr 30 08:04:07.958549 2026] [:error] [pid 52350:tid 52358] [client 206.83.118.16:11332] [client 206.83.118.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.83.118.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKcd_1j4GHE9hm7bfdYmwAAAQE"]
[Thu Apr 30 08:04:50.646987 2026] [:error] [pid 52350:tid 52368] [client 206.83.118.16:64511] [client 206.83.118.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.83.118.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKcov1j4GHE9hm7bfdYqQAAAQo"]
[Thu Apr 30 08:06:12.254413 2026] [:error] [pid 52436:tid 52453] [client 176.29.4.208:24224] [client 176.29.4.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.29.4.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKc9ALFWPk_P7AfE8f92wAAAU4"]
[Thu Apr 30 08:06:33.241745 2026] [:error] [pid 18112:tid 18161] [client 176.29.4.208:7868] [client 176.29.4.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.29.4.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKdCSUrJv3y8j6Lm1u4JQAAAEs"]
[Thu Apr 30 08:06:54.090841 2026] [:error] [pid 18112:tid 18174] [client 176.29.4.208:7940] [client 176.29.4.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.29.4.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKdHiUrJv3y8j6Lm1u4NgAAAFg"]
[Thu Apr 30 08:07:15.100981 2026] [:error] [pid 18112:tid 18159] [client 176.29.4.208:15249] [client 176.29.4.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.29.4.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKdMyUrJv3y8j6Lm1u4TAAAAEk"]
[Thu Apr 30 08:07:36.100636 2026] [:error] [pid 18113:tid 18194] [client 176.29.4.208:15351] [client 176.29.4.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.29.4.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKdSHiIjwsVGkvz5IlijAAAAJE"]
[Thu Apr 30 08:17:03.715724 2026] [:error] [pid 18111:tid 18142] [client 20.215.248.255:23454] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/function/function.php"] [unique_id "afKff2ctLbxB7Q1_oK2UFgAAABQ"]
[Thu Apr 30 08:17:04.829852 2026] [:error] [pid 18112:tid 18153] [client 20.215.248.255:23426] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/function/function.php"] [unique_id "afKfgCUrJv3y8j6Lm1u67AAAAEM"]
[Thu Apr 30 08:17:05.863449 2026] [:error] [pid 18112:tid 18157] [client 20.215.248.255:50254] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/function/function.php"] [unique_id "afKfgSUrJv3y8j6Lm1u67gAAAEc"]
[Thu Apr 30 08:17:06.884690 2026] [:error] [pid 18220:tid 18239] [client 20.215.248.255:23469] [client 20.215.248.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/function/function.php"] [unique_id "afKfgsyESVSfAPebmxYAVwAAANA"]
[Thu Apr 30 08:23:01.697847 2026] [:error] [pid 18112:tid 18167] [client 186.151.119.42:25610] [client 186.151.119.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.151.119.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKg5SUrJv3y8j6Lm1u8ZgAAAFE"]
[Thu Apr 30 08:23:15.069153 2026] [:error] [pid 52350:tid 52363] [client 186.151.119.42:28631] [client 186.151.119.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.151.119.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKg8_1j4GHE9hm7bfdbKgAAAQU"]
[Thu Apr 30 08:23:28.156054 2026] [:error] [pid 18113:tid 18198] [client 186.151.119.42:30941] [client 186.151.119.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.151.119.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKhAHiIjwsVGkvz5IljoAAAAJU"]
[Thu Apr 30 08:26:54.438392 2026] [:error] [pid 18112:tid 18154] [client 186.151.119.42:61697] [client 186.151.119.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.151.119.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKhziUrJv3y8j6Lm1u-NQAAAEQ"]
[Thu Apr 30 08:27:07.547620 2026] [:error] [pid 52350:tid 52382] [client 186.151.119.42:64569] [client 186.151.119.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.151.119.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKh2_1j4GHE9hm7bfdbyAAAARg"]
[Thu Apr 30 08:28:23.130202 2026] [:error] [pid 18112:tid 18173] [client 158.158.98.94:41240] [client 158.158.98.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-http-client.php"] [unique_id "afKiJyUrJv3y8j6Lm1u_FgAAAFc"]
[Thu Apr 30 08:28:24.100456 2026] [:error] [pid 18220:tid 18235] [client 158.158.98.94:37157] [client 158.158.98.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/configuration.php"] [unique_id "afKiKMyESVSfAPebmxYB0QAAAMw"]
[Thu Apr 30 08:28:30.725798 2026] [:error] [pid 18111:tid 18141] [client 158.158.98.94:11226] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "afKiLmctLbxB7Q1_oK2XWQAAABM"]
[Thu Apr 30 08:28:31.711734 2026] [:error] [pid 18112:tid 18159] [client 158.158.98.94:44334] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "afKiLyUrJv3y8j6Lm1u_FwAAAEk"]
[Thu Apr 30 08:28:32.745881 2026] [:error] [pid 18113:tid 18189] [client 158.158.98.94:37139] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "afKiMHiIjwsVGkvz5IlkCgAAAIw"]
[Thu Apr 30 08:28:33.727785 2026] [:error] [pid 52350:tid 52379] [client 158.158.98.94:37165] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/new.php"] [unique_id "afKiMf1j4GHE9hm7bfdcFAAAARU"]
[Thu Apr 30 08:40:05.170401 2026] [:error] [pid 53641:tid 53663] [client 43.162.109.249:49364] [client 43.162.109.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afKk5WC119wja3QGeAF7NwAAAYs"]
[Thu Apr 30 08:56:24.623877 2026] [:error] [pid 18220:tid 18227] [client 24.80.248.212:51905] [client 24.80.248.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.80.248.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKouMyESVSfAPebmxYE6wAAAMQ"]
[Thu Apr 30 08:56:34.712718 2026] [:error] [pid 53641:tid 53667] [client 24.80.248.212:52397] [client 24.80.248.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.80.248.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKowmC119wja3QGeAF-UAAAAY8"]
[Thu Apr 30 08:56:45.225778 2026] [:error] [pid 18111:tid 18144] [client 24.80.248.212:52997] [client 24.80.248.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.80.248.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKozWctLbxB7Q1_oK2hagAAABY"]
[Thu Apr 30 08:56:55.739874 2026] [:error] [pid 53641:tid 53662] [client 24.80.248.212:53408] [client 24.80.248.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.80.248.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKo12C119wja3QGeAF-aAAAAYo"]
[Thu Apr 30 08:57:06.274630 2026] [:error] [pid 18111:tid 18138] [client 24.80.248.212:53819] [client 24.80.248.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.80.248.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afKo4mctLbxB7Q1_oK2hqgAAABA"]
[Thu Apr 30 10:13:06.595426 2026] [:error] [pid 53641:tid 53666] [client 158.158.98.94:50071] [client 158.158.98.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "afK6smC119wja3QGeAGPlwAAAY4"]
[Thu Apr 30 10:13:08.090138 2026] [:error] [pid 53641:tid 53672] [client 158.158.98.94:40035] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "afK6tGC119wja3QGeAGPmAAAAZQ"]
[Thu Apr 30 10:13:09.041047 2026] [:error] [pid 18112:tid 18174] [client 158.158.98.94:40013] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "afK6tSUrJv3y8j6Lm1vQNwAAAFg"]
[Thu Apr 30 10:13:10.063566 2026] [:error] [pid 52350:tid 52370] [client 158.158.98.94:10844] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/admin.php"] [unique_id "afK6tv1j4GHE9hm7bfdqvAAAAQw"]
[Thu Apr 30 11:24:12.156316 2026] [:error] [pid 53641:tid 53671] [client 147.135.252.145:58736] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "afLLXGC119wja3QGeAGf4QAAAZM"]
[Thu Apr 30 11:24:15.230412 2026] [:error] [pid 18220:tid 18235] [client 147.135.252.145:51804] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "afLLX8yESVSfAPebmxYULwAAAMw"]
[Thu Apr 30 11:24:17.856714 2026] [:error] [pid 18112:tid 18170] [client 147.135.252.145:51810] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "afLLYSUrJv3y8j6Lm1vc9wAAAFQ"]
[Thu Apr 30 11:24:20.701998 2026] [:error] [pid 18112:tid 18155] [client 147.135.252.145:51812] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "afLLZCUrJv3y8j6Lm1vc-AAAAEU"]
[Thu Apr 30 11:24:23.513484 2026] [:error] [pid 18111:tid 18138] [client 147.135.252.145:52630] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "afLLZ2ctLbxB7Q1_oK3VeAAAABA"]
[Thu Apr 30 11:24:26.344646 2026] [:error] [pid 18111:tid 18146] [client 147.135.252.145:52638] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "afLLamctLbxB7Q1_oK3VegAAABg"]
[Thu Apr 30 11:24:29.631871 2026] [:error] [pid 18113:tid 18188] [client 147.135.252.145:52640] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afLLbXiIjwsVGkvz5Ilx9AAAAIs"]
[Thu Apr 30 11:24:32.668460 2026] [:error] [pid 53641:tid 53670] [client 147.135.252.145:56096] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afLLcGC119wja3QGeAGf6QAAAZI"]
[Thu Apr 30 11:24:35.413189 2026] [:error] [pid 18111:tid 18122] [client 147.135.252.145:56104] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afLLc2ctLbxB7Q1_oK3VhAAAAAA"]
[Thu Apr 30 11:24:38.604230 2026] [:error] [pid 18220:tid 18247] [client 147.135.252.145:56106] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afLLdsyESVSfAPebmxYUNAAAANg"]
[Thu Apr 30 11:24:41.154875 2026] [:error] [pid 53641:tid 53669] [client 147.135.252.145:56112] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afLLeWC119wja3QGeAGf7wAAAZE"]
[Thu Apr 30 11:24:44.050882 2026] [:error] [pid 53641:tid 53674] [client 147.135.252.145:56192] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afLLfGC119wja3QGeAGf9AAAAZY"]
[Thu Apr 30 11:24:52.635062 2026] [:error] [pid 52350:tid 52369] [client 147.135.252.145:40968] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afLLhP1j4GHE9hm7bfd0XwAAAQs"]
[Thu Apr 30 11:24:55.349502 2026] [:error] [pid 18113:tid 18195] [client 147.135.252.145:40984] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "afLLh3iIjwsVGkvz5Ilx-QAAAJI"]
[Thu Apr 30 11:24:58.044844 2026] [:error] [pid 18220:tid 18228] [client 147.135.252.145:40986] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "afLLisyESVSfAPebmxYUOgAAAMU"]
[Thu Apr 30 11:25:01.035743 2026] [:error] [pid 18112:tid 18154] [client 147.135.252.145:41002] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afLLjSUrJv3y8j6Lm1vdFAAAAEQ"]
[Thu Apr 30 11:25:03.745729 2026] [:error] [pid 53641:tid 53658] [client 147.135.252.145:57662] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afLLj2C119wja3QGeAGgIgAAAYY"]
[Thu Apr 30 11:25:06.632426 2026] [:error] [pid 18111:tid 18131] [client 147.135.252.145:57664] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "afLLkmctLbxB7Q1_oK3VlgAAAAk"]
[Thu Apr 30 11:25:43.332978 2026] [:error] [pid 18111:tid 18132] [client 147.135.252.145:57678] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "afLLt2ctLbxB7Q1_oK3VyAAAAAo"]
[Thu Apr 30 11:25:47.028316 2026] [:error] [pid 52350:tid 52371] [client 147.135.252.145:45466] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "afLLu_1j4GHE9hm7bfd0ewAAAQ0"]
[Thu Apr 30 11:25:49.693517 2026] [:error] [pid 18112:tid 18163] [client 147.135.252.145:45470] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afLLvSUrJv3y8j6Lm1vdKwAAAE0"]
[Thu Apr 30 11:25:52.439368 2026] [:error] [pid 18220:tid 18236] [client 147.135.252.145:36216] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "afLLwMyESVSfAPebmxYUXgAAAM0"]
[Thu Apr 30 11:25:55.009254 2026] [:error] [pid 52350:tid 52367] [client 147.135.252.145:36226] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "afLLw_1j4GHE9hm7bfd0hAAAAQk"]
[Thu Apr 30 11:25:57.918277 2026] [:error] [pid 18111:tid 18146] [client 147.135.252.145:36228] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "afLLxWctLbxB7Q1_oK3V0gAAABg"]
[Thu Apr 30 11:26:00.428828 2026] [:error] [pid 53641:tid 53674] [client 147.135.252.145:36230] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "afLLyGC119wja3QGeAGgQQAAAZY"]
[Thu Apr 30 11:26:03.154884 2026] [:error] [pid 52350:tid 52364] [client 147.135.252.145:35210] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "afLLy_1j4GHE9hm7bfd0hgAAAQY"]
[Thu Apr 30 11:26:05.955392 2026] [:error] [pid 18111:tid 18122] [client 147.135.252.145:35212] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afLLzWctLbxB7Q1_oK3V0wAAAAA"]
[Thu Apr 30 11:26:08.664408 2026] [:error] [pid 18111:tid 18143] [client 147.135.252.145:35214] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "afLL0GctLbxB7Q1_oK3V1QAAABU"]
[Thu Apr 30 11:26:11.475973 2026] [:error] [pid 18112:tid 18164] [client 147.135.252.145:48812] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afLL0yUrJv3y8j6Lm1vdPAAAAE4"]
[Thu Apr 30 11:26:14.141826 2026] [:error] [pid 18113:tid 18201] [client 147.135.252.145:48818] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afLL1niIjwsVGkvz5IlyPAAAAJg"]
[Thu Apr 30 11:26:16.955718 2026] [:error] [pid 53641:tid 53668] [client 147.135.252.145:48822] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afLL2GC119wja3QGeAGgRQAAAZA"]
[Thu Apr 30 11:26:19.791273 2026] [:error] [pid 18220:tid 18223] [client 147.135.252.145:48832] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "afLL28yESVSfAPebmxYUYgAAAMA"]
[Thu Apr 30 11:26:22.595529 2026] [:error] [pid 18111:tid 18143] [client 147.135.252.145:56258] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "afLL3mctLbxB7Q1_oK3V4QAAABU"]
[Thu Apr 30 11:26:25.548165 2026] [:error] [pid 18220:tid 18224] [client 147.135.252.145:56260] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "afLL4cyESVSfAPebmxYUdQAAAME"]
[Thu Apr 30 11:26:28.170299 2026] [:error] [pid 18112:tid 18172] [client 147.135.252.145:56264] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "afLL5CUrJv3y8j6Lm1vdRAAAAFY"]
[Thu Apr 30 11:26:31.034719 2026] [:error] [pid 52436:tid 52450] [client 147.135.252.145:56270] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "afLL5wLFWPk_P7AfE8cQ1gAAAUs"]
[Thu Apr 30 11:26:33.660218 2026] [:error] [pid 53641:tid 53674] [client 147.135.252.145:44048] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "afLL6WC119wja3QGeAGgTgAAAZY"]
[Thu Apr 30 11:26:36.508248 2026] [:error] [pid 18111:tid 18136] [client 147.135.252.145:44052] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "afLL7GctLbxB7Q1_oK3V5AAAAA4"]
[Thu Apr 30 11:26:39.157990 2026] [:error] [pid 18111:tid 18142] [client 147.135.252.145:44066] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "afLL72ctLbxB7Q1_oK3V7AAAABQ"]
[Thu Apr 30 11:27:14.155381 2026] [:error] [pid 18113:tid 18196] [client 147.135.252.145:51714] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afLMEniIjwsVGkvz5IlySQAAAJM"]
[Thu Apr 30 11:27:16.737600 2026] [:error] [pid 18112:tid 18155] [client 147.135.252.145:57042] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afLMFCUrJv3y8j6Lm1vdaQAAAEU"]
[Thu Apr 30 11:27:19.330283 2026] [:error] [pid 18112:tid 18164] [client 147.135.252.145:57050] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afLMFyUrJv3y8j6Lm1vdbgAAAE4"]
[Thu Apr 30 11:27:22.229162 2026] [:error] [pid 18112:tid 18152] [client 147.135.252.145:59938] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "afLMGiUrJv3y8j6Lm1vdeQAAAEI"]
[Thu Apr 30 11:27:24.728691 2026] [:error] [pid 52436:tid 52460] [client 147.135.252.145:59952] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afLMHALFWPk_P7AfE8cQ9AAAAVU"]
[Thu Apr 30 11:27:27.280199 2026] [:error] [pid 52350:tid 52371] [client 147.135.252.145:59964] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "afLMH_1j4GHE9hm7bfd0qAAAAQ0"]
[Thu Apr 30 11:27:29.890715 2026] [:error] [pid 18220:tid 18234] [client 147.135.252.145:59966] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "afLMIcyESVSfAPebmxYUrQAAAMs"]
[Thu Apr 30 11:27:32.499285 2026] [:error] [pid 18111:tid 18132] [client 147.135.252.145:56032] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afLMJGctLbxB7Q1_oK3WmgAAAAo"]
[Thu Apr 30 11:27:35.191052 2026] [:error] [pid 53641:tid 53663] [client 147.135.252.145:56046] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "afLMJ2C119wja3QGeAGgmgAAAYs"]
[Thu Apr 30 11:27:37.800912 2026] [:error] [pid 53641:tid 53665] [client 147.135.252.145:56056] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "afLMKWC119wja3QGeAGgnAAAAY0"]
[Thu Apr 30 11:27:40.333930 2026] [:error] [pid 18111:tid 18131] [client 147.135.252.145:56070] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "afLMLGctLbxB7Q1_oK3WpAAAAAk"]
[Thu Apr 30 11:27:43.047151 2026] [:error] [pid 53641:tid 53654] [client 147.135.252.145:34972] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afLML2C119wja3QGeAGgoAAAAYM"]
[Thu Apr 30 11:27:45.930247 2026] [:error] [pid 18111:tid 18129] [client 147.135.252.145:34980] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "afLMMWctLbxB7Q1_oK3WrQAAAAc"]
[Thu Apr 30 11:27:48.653595 2026] [:error] [pid 53641:tid 53677] [client 147.135.252.145:34990] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "afLMNGC119wja3QGeAGg1AAAAZg"]
[Thu Apr 30 11:27:51.420979 2026] [:error] [pid 52350:tid 52378] [client 147.135.252.145:33970] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afLMN_1j4GHE9hm7bfd0sQAAARQ"]
[Thu Apr 30 11:27:54.027051 2026] [:error] [pid 18112:tid 18158] [client 147.135.252.145:33972] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "afLMOiUrJv3y8j6Lm1vdiwAAAEg"]
[Thu Apr 30 11:27:56.869279 2026] [:error] [pid 18111:tid 18142] [client 147.135.252.145:33988] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "afLMPGctLbxB7Q1_oK3W2QAAABQ"]
[Thu Apr 30 11:27:59.811334 2026] [:error] [pid 18112:tid 18174] [client 147.135.252.145:33994] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "afLMPyUrJv3y8j6Lm1vdmgAAAFg"]
[Thu Apr 30 11:28:02.724367 2026] [:error] [pid 18111:tid 18132] [client 147.135.252.145:46358] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "afLMQmctLbxB7Q1_oK3XCQAAAAo"]
[Thu Apr 30 11:28:05.626417 2026] [:error] [pid 18112:tid 18153] [client 147.135.252.145:46364] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afLMRSUrJv3y8j6Lm1vdnQAAAEM"]
[Thu Apr 30 11:28:08.587020 2026] [:error] [pid 18111:tid 18136] [client 147.135.252.145:46376] [client 147.135.252.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "afLMSGctLbxB7Q1_oK3XDQAAAA4"]
[Thu Apr 30 11:55:08.325447 2026] [:error] [pid 52350:tid 52375] [client 158.158.98.94:10694] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "afLSnP1j4GHE9hm7bfd4ZQAAARE"]
[Thu Apr 30 11:55:09.357618 2026] [:error] [pid 18112:tid 18152] [client 158.158.98.94:11106] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "afLSnSUrJv3y8j6Lm1vjPgAAAEI"]
[Thu Apr 30 11:55:10.337176 2026] [:error] [pid 52350:tid 52364] [client 158.158.98.94:10269] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "afLSnv1j4GHE9hm7bfd4ZgAAAQY"]
[Thu Apr 30 11:55:11.310586 2026] [:error] [pid 18112:tid 18158] [client 158.158.98.94:10692] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-act.php"] [unique_id "afLSnyUrJv3y8j6Lm1vjQwAAAEg"]
[Thu Apr 30 12:01:29.844011 2026] [:error] [pid 18111:tid 18136] [client 154.183.233.125:3473] [client 154.183.233.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.183.233.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afLUGWctLbxB7Q1_oK3h8AAAAA4"]
[Thu Apr 30 12:02:33.579169 2026] [:error] [pid 18111:tid 18124] [client 154.183.233.125:4298] [client 154.183.233.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.183.233.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afLUWWctLbxB7Q1_oK3i-gAAAAI"]
[Thu Apr 30 12:02:44.409181 2026] [:error] [pid 52350:tid 52375] [client 154.183.233.125:4802] [client 154.183.233.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.183.233.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afLUZP1j4GHE9hm7bfd5PgAAARE"]
[Thu Apr 30 12:02:54.829985 2026] [:error] [pid 18112:tid 18163] [client 154.183.233.125:3301] [client 154.183.233.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.183.233.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afLUbiUrJv3y8j6Lm1vkwgAAAE0"]
[Thu Apr 30 12:03:05.542364 2026] [:error] [pid 18111:tid 18122] [client 154.183.233.125:3703] [client 154.183.233.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.183.233.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afLUeWctLbxB7Q1_oK3jSwAAAAA"]
[Thu Apr 30 12:17:54.571764 2026] [:error] [pid 18112:tid 18169] [client 43.165.186.188:34026] [client 43.165.186.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afLX8iUrJv3y8j6Lm1vnDgAAAFM"]
[Thu Apr 30 13:20:38.015536 2026] [:error] [pid 53641:tid 53672] [client 158.158.98.94:42839] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "afLmpmC119wja3QGeAG65wAAAZQ"]
[Thu Apr 30 13:20:38.991284 2026] [:error] [pid 53641:tid 53657] [client 158.158.98.94:11074] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "afLmpmC119wja3QGeAG66gAAAYU"]
[Thu Apr 30 13:20:39.948814 2026] [:error] [pid 52350:tid 52369] [client 158.158.98.94:10512] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "afLmp_1j4GHE9hm7bfeCDQAAAQs"]
[Thu Apr 30 13:20:40.903724 2026] [:error] [pid 52350:tid 52380] [client 158.158.98.94:16131] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "afLmqP1j4GHE9hm7bfeCEAAAARY"]
[Thu Apr 30 14:53:35.402619 2026] [:error] [pid 52436:tid 52447] [client 158.158.98.94:42004] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "afL8bwLFWPk_P7AfE8cjWwAAAUg"]
[Thu Apr 30 14:53:36.444403 2026] [:error] [pid 18112:tid 18173] [client 158.158.98.94:38430] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "afL8cCUrJv3y8j6Lm1sBAgAAAFc"]
[Thu Apr 30 14:53:37.515314 2026] [:error] [pid 18220:tid 18226] [client 158.158.98.94:30530] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "afL8ccyESVSfAPebmxYs3AAAAMM"]
[Thu Apr 30 14:53:38.530315 2026] [:error] [pid 53641:tid 53650] [client 158.158.98.94:31046] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "afL8cmC119wja3QGeAHU3QAAAYA"]
[Thu Apr 30 15:28:01.520599 2026] [:error] [pid 52350:tid 52381] [client 49.36.189.235:55126] [client 49.36.189.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMEgf1j4GHE9hm7bfeR-gAAARc"]
[Thu Apr 30 15:28:12.422688 2026] [:error] [pid 18112:tid 18169] [client 49.36.189.235:55584] [client 49.36.189.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMEjCUrJv3y8j6Lm1sG3AAAAFM"]
[Thu Apr 30 15:28:23.079943 2026] [:error] [pid 18111:tid 18144] [client 49.36.189.235:55942] [client 49.36.189.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMEl2ctLbxB7Q1_oK0jKQAAABY"]
[Thu Apr 30 15:28:33.916117 2026] [:error] [pid 52350:tid 52375] [client 49.36.189.235:56320] [client 49.36.189.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMEof1j4GHE9hm7bfeSBQAAARE"]
[Thu Apr 30 15:28:44.734136 2026] [:error] [pid 52350:tid 52357] [client 49.36.189.235:56668] [client 49.36.189.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMErP1j4GHE9hm7bfeSDgAAAQA"]
[Thu Apr 30 15:28:55.405254 2026] [:error] [pid 18111:tid 18145] [client 49.36.189.235:57025] [client 49.36.189.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.189.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMEt2ctLbxB7Q1_oK0jPwAAABc"]
[Thu Apr 30 16:15:31.469447 2026] [:error] [pid 53641:tid 53663] [client 139.155.134.17:42194] [client 139.155.134.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afMPo2C119wja3QGeAHtkwAAAYs"]
[Thu Apr 30 16:19:10.607421 2026] [:error] [pid 18111:tid 18145] [client 43.156.202.34:52006] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afMQfmctLbxB7Q1_oK06FAAAABc"]
[Thu Apr 30 16:31:31.780142 2026] [:error] [pid 40003:tid 40016] [client 49.43.157.34:56708] [client 49.43.157.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.157.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMTYzIyJ-Orl-2KA1K9CAAAAMo"]
[Thu Apr 30 16:31:43.474990 2026] [:error] [pid 40003:tid 40009] [client 49.43.157.34:57038] [client 49.43.157.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.157.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMTbzIyJ-Orl-2KA1K9MgAAAMM"]
[Thu Apr 30 16:31:53.469833 2026] [:error] [pid 39912:tid 39987] [client 49.43.157.34:57311] [client 49.43.157.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.157.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMTea8-s8fTICYp_ct4SwAAAJA"]
[Thu Apr 30 16:32:03.659262 2026] [:error] [pid 40003:tid 40010] [client 49.43.157.34:57641] [client 49.43.157.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.157.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMTgzIyJ-Orl-2KA1K9QwAAAMQ"]
[Thu Apr 30 16:32:14.301940 2026] [:error] [pid 39910:tid 39936] [client 49.43.157.34:57944] [client 49.43.157.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.157.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMTjttf04xYDlbRUODsagAAABY"]
[Thu Apr 30 17:42:04.669028 2026] [:error] [pid 46062:tid 46080] [client 149.102.94.77:19690] [client 149.102.94.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.94.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMj7I67WLjbPQfxr6za2AAAAQ8"]
[Thu Apr 30 17:42:13.759504 2026] [:error] [pid 40003:tid 40007] [client 149.102.94.77:19469] [client 149.102.94.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.94.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMj9TIyJ-Orl-2KA1LV0gAAAME"]
[Thu Apr 30 17:42:24.447741 2026] [:error] [pid 39912:tid 39975] [client 149.102.94.77:19043] [client 149.102.94.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.94.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMkAK8-s8fTICYp_cuILgAAAIQ"]
[Thu Apr 30 17:42:35.196487 2026] [:error] [pid 40003:tid 40022] [client 149.102.94.77:19648] [client 149.102.94.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.94.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMkCzIyJ-Orl-2KA1LV4gAAANA"]
[Thu Apr 30 17:42:45.738781 2026] [:error] [pid 46062:tid 46074] [client 149.102.94.77:20133] [client 149.102.94.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.102.94.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMkFY67WLjbPQfxr6zbHgAAAQk"]
[Thu Apr 30 17:58:16.632329 2026] [:error] [pid 762:tid 788] [client 156.209.59.250:26070] [client 156.209.59.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.209.59.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMnuEJIh_EKAkiQPcOVzwAAARc"]
[Thu Apr 30 17:58:52.849437 2026] [:error] [pid 762:tid 769] [client 156.209.59.250:19708] [client 156.209.59.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.209.59.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMn3EJIh_EKAkiQPcOV7AAAAQQ"]
[Thu Apr 30 17:59:14.182690 2026] [:error] [pid 701:tid 728] [client 156.209.59.250:20352] [client 156.209.59.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.209.59.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMn8mpW0MdJ8PijKP-UAgAAABc"]
[Thu Apr 30 17:59:22.734817 2026] [:error] [pid 701:tid 726] [client 156.209.59.250:20722] [client 156.209.59.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.209.59.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMn-mpW0MdJ8PijKP-UBAAAABU"]
[Thu Apr 30 17:59:31.396854 2026] [:error] [pid 762:tid 769] [client 156.209.59.250:28071] [client 156.209.59.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.209.59.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMoA0JIh_EKAkiQPcOWHwAAAQQ"]
[Thu Apr 30 18:19:27.258126 2026] [:error] [pid 6456:tid 6478] [client 92.99.31.48:58816] [client 92.99.31.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.99.31.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMsr0OBwsDodnkJK5wo5QAAAFQ"]
[Thu Apr 30 18:19:37.946514 2026] [:error] [pid 5731:tid 5741] [client 92.99.31.48:59351] [client 92.99.31.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.99.31.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMsuQ8tX7TbSfYoUIwukQAAAIY"]
[Thu Apr 30 18:19:48.377291 2026] [:error] [pid 6456:tid 6467] [client 92.99.31.48:59750] [client 92.99.31.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.99.31.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMsxEOBwsDodnkJK5wpCQAAAEk"]
[Thu Apr 30 18:19:59.306938 2026] [:error] [pid 6456:tid 6472] [client 92.99.31.48:60165] [client 92.99.31.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.99.31.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMsz0OBwsDodnkJK5wpDwAAAE4"]
[Thu Apr 30 18:20:09.724367 2026] [:error] [pid 5732:tid 5778] [client 92.99.31.48:60552] [client 92.99.31.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.99.31.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMs2duJ3iSd5GdjqlgtWQAAAM8"]
[Thu Apr 30 18:34:02.650495 2026] [:error] [pid 5820:tid 5839] [client 103.129.238.246:61165] [client 103.129.238.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.238.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMwGgyrLh3-LgH3Xv8nBwAAABE"]
[Thu Apr 30 18:34:12.823712 2026] [:error] [pid 5733:tid 5801] [client 103.129.238.246:61706] [client 103.129.238.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.238.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMwJPT55_Ioa9J2OpLXDgAAAQs"]
[Thu Apr 30 18:34:23.348365 2026] [:error] [pid 6456:tid 6472] [client 103.129.238.246:62073] [client 103.129.238.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.238.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMwL0OBwsDodnkJK5wuqgAAAE4"]
[Thu Apr 30 18:34:33.847396 2026] [:error] [pid 6456:tid 6476] [client 103.129.238.246:62439] [client 103.129.238.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.238.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMwOUOBwsDodnkJK5wuyAAAAFI"]
[Thu Apr 30 18:45:42.063007 2026] [:error] [pid 6456:tid 6475] [client 192.228.236.254:34003] [client 192.228.236.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.228.236.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMy1kOBwsDodnkJK5wyvAAAAFE"]
[Thu Apr 30 18:45:53.088918 2026] [:error] [pid 5732:tid 5774] [client 192.228.236.254:20464] [client 192.228.236.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.228.236.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMy4duJ3iSd5GdjqlgycAAAAMs"]
[Thu Apr 30 18:46:04.195945 2026] [:error] [pid 6456:tid 6465] [client 192.228.236.254:60086] [client 192.228.236.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.228.236.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMy7EOBwsDodnkJK5wy-QAAAEc"]
[Thu Apr 30 18:46:16.359143 2026] [:error] [pid 5733:tid 5796] [client 192.228.236.254:31634] [client 192.228.236.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.228.236.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMy-PT55_Ioa9J2OpLZ4AAAAQY"]
[Thu Apr 30 18:46:26.419707 2026] [:error] [pid 5820:tid 5838] [client 192.228.236.254:30571] [client 192.228.236.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.228.236.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afMzAgyrLh3-LgH3Xv8q3AAAABA"]
[Thu Apr 30 19:22:51.647690 2026] [:error] [pid 5733:tid 5802] [client 43.161.234.148:59964] [client 43.161.234.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afM7i_T55_Ioa9J2OpLiUgAAAQw"]
[Thu Apr 30 19:25:04.069165 2026] [:error] [pid 5731:tid 5752] [client 182.190.182.194:54131] [client 182.190.182.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.190.182.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afM8EA8tX7TbSfYoUIw6IAAAAJE"]
[Thu Apr 30 20:26:24.032381 2026] [:error] [pid 5820:tid 5828] [client 156.155.15.235:34114] [client 156.155.15.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.155.15.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afNKcAyrLh3-LgH3Xv9KqQAAAAY"]
[Thu Apr 30 20:26:44.321132 2026] [:error] [pid 5820:tid 5834] [client 156.155.15.235:34539] [client 156.155.15.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.155.15.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afNKhAyrLh3-LgH3Xv9KrAAAAAw"]
[Thu Apr 30 20:26:56.044986 2026] [:error] [pid 6456:tid 6466] [client 156.155.15.235:34760] [client 156.155.15.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.155.15.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afNKkEOBwsDodnkJK5xaVgAAAEg"]
[Thu Apr 30 20:27:06.822412 2026] [:error] [pid 5733:tid 5795] [client 156.155.15.235:34973] [client 156.155.15.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.155.15.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afNKmvT55_Ioa9J2OpLsxwAAAQU"]
[Thu Apr 30 20:27:27.006374 2026] [:error] [pid 5731:tid 5746] [client 156.155.15.235:35370] [client 156.155.15.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.155.15.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afNKrw8tX7TbSfYoUIxAuwAAAIs"]
[Thu Apr 30 21:38:26.427730 2026] [autoindex:error] [pid 5733:tid 5794] [client 80.241.213.248:49450] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Apr 30 22:02:32.018146 2026] [:error] [pid 5732:tid 5768] [client 190.66.68.188:56066] [client 190.66.68.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.66.68.188, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afNg-NuJ3iSd5GdjqlhMMAAAAMU"]
[Thu Apr 30 22:53:56.985923 2026] [:error] [pid 6456:tid 6460] [client 43.159.128.155:44528] [client 43.159.128.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afNtBEOBwsDodnkJK5yDqAAAAEI"]
[Thu Apr 30 23:03:54.835139 2026] [:error] [pid 5820:tid 5836] [client 43.246.222.92:64016] [client 43.246.222.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.246.222.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afNvWgyrLh3-LgH3Xv9sOwAAAA4"]
[Thu Apr 30 23:04:05.368360 2026] [:error] [pid 5731:tid 5753] [client 43.246.222.92:64430] [client 43.246.222.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.246.222.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afNvZQ8tX7TbSfYoUIxQYwAAAJI"]
[Thu Apr 30 23:04:15.898436 2026] [:error] [pid 6456:tid 6477] [client 43.246.222.92:64783] [client 43.246.222.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.246.222.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afNvb0OBwsDodnkJK5yF3gAAAFM"]
[Thu Apr 30 23:04:26.544421 2026] [:error] [pid 5820:tid 5835] [client 43.246.222.92:61434] [client 43.246.222.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.246.222.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afNvegyrLh3-LgH3Xv9sTgAAAA0"]
[Thu Apr 30 23:04:37.273947 2026] [:error] [pid 5820:tid 5826] [client 43.246.222.92:61806] [client 43.246.222.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.246.222.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afNvhQyrLh3-LgH3Xv9sWAAAAAQ"]
[Thu Apr 30 23:54:35.658105 2026] [:error] [pid 6456:tid 6463] [client 103.141.5.27:56917] [client 103.141.5.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.141.5.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afN7O0OBwsDodnkJK5yUbAAAAEU"]
[Fri May 01 01:06:21.097934 2026] [:error] [pid 5733:tid 5801] [client 182.190.220.93:36132] [client 182.190.220.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.190.220.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afOMDfT55_Ioa9J2OpIT6gAAAQs"]
[Fri May 01 01:07:04.737837 2026] [:error] [pid 6456:tid 6482] [client 182.190.220.93:36623] [client 182.190.220.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.190.220.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afOMOEOBwsDodnkJK5ygTAAAAFg"]
[Fri May 01 01:07:49.727505 2026] [:error] [pid 21839:tid 21856] [client 182.190.220.93:36940] [client 182.190.220.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.190.220.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afOMZZ_Sh66m95WwxJ4WdwAAAU4"]
[Fri May 01 01:08:34.610597 2026] [:error] [pid 5733:tid 5795] [client 182.190.220.93:37333] [client 182.190.220.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.190.220.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afOMkvT55_Ioa9J2OpIUlAAAAQU"]
[Fri May 01 01:13:50.766671 2026] [:error] [pid 6456:tid 6461] [client 182.190.220.93:36213] [client 182.190.220.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.190.220.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afONzkOBwsDodnkJK5yhOAAAAEM"]
[Fri May 01 02:06:12.665968 2026] [:error] [pid 47620:tid 47650] [client 37.0.172.94:39829] [client 37.0.172.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.0.172.94, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afOaFL9bO-ytgFJ2lwOJvAAAAZY"]
[Fri May 01 02:13:27.080333 2026] [:error] [pid 6456:tid 6467] [client 37.0.172.94:41083] [client 37.0.172.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.0.172.94, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afObx0OBwsDodnkJK5ynfwAAAEk"]
[Fri May 01 02:20:07.913529 2026] [:error] [pid 5731:tid 5742] [client 43.135.182.43:35734] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afOdVw8tX7TbSfYoUIxm7AAAAIc"]
[Fri May 01 04:36:23.431702 2026] [:error] [pid 7664:tid 7683] [client 1.12.70.96:50702] [client 1.12.70.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afO9R0zx1NAXBnPqdssItQAAAM8"]
[Fri May 01 05:17:51.787595 2026] [:error] [pid 5976:tid 6002] [client 209.141.34.190:51107] [client 209.141.34.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.34.190, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afPG_7bCb0ye2WjKldd2qAAAARY"]
[Fri May 01 05:17:52.681079 2026] [proxy_fcgi:error] [pid 5976:tid 6002] [client 209.141.34.190:51107] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 01 05:17:52.857962 2026] [:error] [pid 5976:tid 5993] [client 209.141.34.190:51107] [client 209.141.34.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.34.190, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afPHALbCb0ye2WjKldd2qgAAAQ0"]
[Fri May 01 05:17:53.867930 2026] [proxy_fcgi:error] [pid 5976:tid 5993] [client 209.141.34.190:51107] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 01 05:30:51.653165 2026] [:error] [pid 6046:tid 6086] [client 65.108.2.171:50364] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "afPKC4yBrpmb1HMIbiTLnAAAAYI"]
[Fri May 01 05:30:55.997040 2026] [:error] [pid 5976:tid 5981] [client 65.108.2.171:53580] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "afPKD7bCb0ye2WjKldd4bAAAAQE"]
[Fri May 01 06:12:01.980489 2026] [:error] [pid 38014:tid 38038] [client 106.219.123.122:7699] [client 106.219.123.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.123.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afPTsVHplhcdzdndjk0H-QAAAA8"]
[Fri May 01 06:12:12.387517 2026] [:error] [pid 6046:tid 6099] [client 106.219.123.122:16269] [client 106.219.123.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.123.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afPTvIyBrpmb1HMIbiTYVAAAAY8"]
[Fri May 01 06:12:22.758857 2026] [:error] [pid 6046:tid 6092] [client 106.219.123.122:13891] [client 106.219.123.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.123.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afPTxoyBrpmb1HMIbiTYWwAAAYg"]
[Fri May 01 06:12:33.255393 2026] [:error] [pid 5976:tid 5991] [client 106.219.123.122:32033] [client 106.219.123.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.123.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afPT0bbCb0ye2WjKldd_3QAAAQs"]
[Fri May 01 06:12:44.815478 2026] [:error] [pid 5976:tid 6001] [client 106.219.123.122:16135] [client 106.219.123.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.123.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afPT3LbCb0ye2WjKldd_7QAAARU"]
[Fri May 01 06:17:50.540538 2026] [:error] [pid 38016:tid 38078] [client 43.130.139.177:53802] [client 43.130.139.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afPVDpFc1DCPy0LM72bl0AAAAIA"]
[Fri May 01 06:26:44.985361 2026] [:error] [pid 6045:tid 6057] [client 74.244.29.152:33981] [client 74.244.29.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.29.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afPXJD4a1vLt_qHgXBSnwAAAAUI"]
[Fri May 01 06:26:55.362514 2026] [:error] [pid 6046:tid 6108] [client 74.244.29.152:12756] [client 74.244.29.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.29.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afPXL4yBrpmb1HMIbiTd8gAAAZg"]
[Fri May 01 06:27:04.183547 2026] [:error] [pid 6045:tid 6066] [client 74.244.29.152:2063] [client 74.244.29.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.29.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afPXOD4a1vLt_qHgXBSnzAAAAUs"]
[Fri May 01 06:27:16.991992 2026] [:error] [pid 6045:tid 6074] [client 74.244.29.152:2081] [client 74.244.29.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.29.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afPXRD4a1vLt_qHgXBSn2wAAAVM"]
[Fri May 01 06:27:27.571079 2026] [:error] [pid 5976:tid 5990] [client 74.244.29.152:56581] [client 74.244.29.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.29.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afPXT7bCb0ye2WjKldeCwgAAAQo"]
[Fri May 01 06:27:38.298186 2026] [:error] [pid 38016:tid 38098] [client 74.244.29.152:36187] [client 74.244.29.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.29.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afPXWpFc1DCPy0LM72bnfQAAAJM"]
[Fri May 01 07:40:40.942422 2026] [:error] [pid 6046:tid 6093] [client 172.94.9.79:43908] [client 172.94.9.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "afPoeIyBrpmb1HMIbiT2mgAAAYk"]
[Fri May 01 10:38:27.327349 2026] [:error] [pid 24997:tid 25050] [client 79.119.240.183:54834] [client 79.119.240.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.119.240.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQSI_OkHa4ScY5oo8wUzQAAAME"]
[Fri May 01 10:38:37.678962 2026] [:error] [pid 24997:tid 25050] [client 79.119.240.183:55189] [client 79.119.240.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.119.240.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQSLfOkHa4ScY5oo8wU5QAAAME"]
[Fri May 01 10:38:48.212268 2026] [:error] [pid 24997:tid 25075] [client 79.119.240.183:55487] [client 79.119.240.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.119.240.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQSOPOkHa4ScY5oo8wU9gAAANM"]
[Fri May 01 10:38:58.947462 2026] [:error] [pid 25085:tid 25106] [client 79.119.240.183:55788] [client 79.119.240.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.119.240.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQSQvuD8fWRiE0RX0FrAQAAAU8"]
[Fri May 01 10:39:09.485769 2026] [:error] [pid 25085:tid 25092] [client 79.119.240.183:56095] [client 79.119.240.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.119.240.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQSTfuD8fWRiE0RX0FrFgAAAUE"]
[Fri May 01 11:14:25.528933 2026] [:error] [pid 33791:tid 33810] [client 35.200.139.25:40538] [client 35.200.139.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "afQakW9ixd-moLycM9AhbQAAABA"]
[Fri May 01 13:08:40.432393 2026] [:error] [pid 33791:tid 33814] [client 191.243.38.246:12585] [client 191.243.38.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.243.38.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQ1WG9ixd-moLycM9BcRAAAABQ"]
[Fri May 01 13:08:50.659957 2026] [:error] [pid 24995:tid 25000] [client 191.243.38.246:12139] [client 191.243.38.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.243.38.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQ1YudJG9WB_Q_ne0ttnQAAAEE"]
[Fri May 01 13:09:02.056299 2026] [:error] [pid 24997:tid 25076] [client 191.243.38.246:12688] [client 191.243.38.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.243.38.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQ1bvOkHa4ScY5oo8xPEAAAANQ"]
[Fri May 01 13:09:11.265658 2026] [:error] [pid 24996:tid 25057] [client 191.243.38.246:12174] [client 191.243.38.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.243.38.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQ1dyDBq9mMfUWQQeoFzgAAAJc"]
[Fri May 01 13:09:23.039123 2026] [:error] [pid 24996:tid 25035] [client 191.243.38.246:12643] [client 191.243.38.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.243.38.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQ1gyDBq9mMfUWQQeoF0wAAAIc"]
[Fri May 01 13:18:45.572898 2026] [:error] [pid 25085:tid 25093] [client 152.59.143.236:52815] [client 152.59.143.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.143.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQ3tfuD8fWRiE0RX0GibwAAAUI"]
[Fri May 01 13:18:53.690053 2026] [:error] [pid 25085:tid 25115] [client 152.59.143.236:52985] [client 152.59.143.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.143.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQ3vfuD8fWRiE0RX0GihgAAAVg"]
[Fri May 01 13:19:04.193834 2026] [:error] [pid 25085:tid 25094] [client 152.59.143.236:53254] [client 152.59.143.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.143.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQ3yPuD8fWRiE0RX0GioQAAAUM"]
[Fri May 01 13:19:14.739251 2026] [:error] [pid 25085:tid 25108] [client 152.59.143.236:53666] [client 152.59.143.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.143.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQ30vuD8fWRiE0RX0GiwAAAAVE"]
[Fri May 01 13:19:25.162937 2026] [:error] [pid 33791:tid 33806] [client 152.59.143.236:54092] [client 152.59.143.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.143.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQ33W9ixd-moLycM9Bg4QAAAAw"]
[Fri May 01 13:19:35.736813 2026] [:error] [pid 24996:tid 25034] [client 152.59.143.236:18332] [client 152.59.143.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.143.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afQ35yDBq9mMfUWQQeoH4gAAAIY"]
[Fri May 01 13:58:54.592091 2026] [:error] [pid 24995:tid 25005] [client 43.131.26.226:52776] [client 43.131.26.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afRBHudJG9WB_Q_ne0t2WgAAAEY"]
[Fri May 01 14:08:25.058149 2026] [:error] [pid 24996:tid 25030] [client 104.28.166.19:41972] [client 104.28.166.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.166.19, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afRDWSDBq9mMfUWQQeoTpAAAAII"]
[Fri May 01 14:08:35.002092 2026] [:error] [pid 25085:tid 25109] [client 104.28.166.19:41734] [client 104.28.166.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.166.19, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afRDY_uD8fWRiE0RX0GwpQAAAVI"]
[Fri May 01 14:08:45.525523 2026] [:error] [pid 25085:tid 25108] [client 104.28.166.19:40430] [client 104.28.166.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.166.19, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afRDbfuD8fWRiE0RX0GwsgAAAVE"]
[Fri May 01 14:08:56.052391 2026] [:error] [pid 24995:tid 25015] [client 104.28.166.19:41601] [client 104.28.166.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.166.19, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afRDeOdJG9WB_Q_ne0t4GwAAAFA"]
[Fri May 01 14:09:06.559451 2026] [:error] [pid 24997:tid 25078] [client 104.28.166.19:42081] [client 104.28.166.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.166.19, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afRDgvOkHa4ScY5oo8xmAgAAANY"]
[Fri May 01 16:11:53.849854 2026] [:error] [pid 24997:tid 25067] [client 103.174.28.64:58514] [client 103.174.28.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.28.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afRgSfOkHa4ScY5oo8yR2gAAAMs"]
[Fri May 01 16:12:04.106168 2026] [:error] [pid 24997:tid 25062] [client 103.174.28.64:59046] [client 103.174.28.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.28.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afRgVPOkHa4ScY5oo8yR7gAAAMY"]
[Fri May 01 16:12:14.756571 2026] [:error] [pid 24997:tid 25068] [client 103.174.28.64:59523] [client 103.174.28.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.28.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afRgXvOkHa4ScY5oo8ySGwAAAMw"]
[Fri May 01 16:12:25.135707 2026] [:error] [pid 33791:tid 33805] [client 103.174.28.64:59857] [client 103.174.28.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.28.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afRgaW9ixd-moLycM9C0WgAAAAs"]
[Fri May 01 16:12:35.694498 2026] [:error] [pid 24996:tid 25030] [client 103.174.28.64:60183] [client 103.174.28.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.28.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afRgcyDBq9mMfUWQQeovWgAAAII"]
[Fri May 01 16:28:09.995444 2026] [:error] [pid 24997:tid 25068] [client 103.42.197.219:34193] [client 103.42.197.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.42.197.219, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afRkGfOkHa4ScY5oo8yWVAAAAMw"]
[Fri May 01 16:30:23.123413 2026] [:error] [pid 24996:tid 25049] [client 103.42.197.219:56373] [client 103.42.197.219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afRknyDBq9mMfUWQQeoyTwAAAJM"]
[Fri May 01 16:40:47.781102 2026] [:error] [pid 24997:tid 25054] [client 175.178.110.121:41184] [client 175.178.110.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afRnD_OkHa4ScY5oo8yZswAAAMM"]
[Fri May 01 17:20:05.939336 2026] [:error] [pid 24996:tid 25049] [client 43.135.134.127:60354] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afRwRSDBq9mMfUWQQeo7PQAAAJM"]
[Fri May 01 18:04:01.510020 2026] [:error] [pid 25085:tid 25104] [client 202.163.81.81:9276] [client 202.163.81.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.163.81.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afR6kfuD8fWRiE0RX0HqDAAAAU0"]
[Fri May 01 18:04:22.901167 2026] [:error] [pid 33791:tid 33804] [client 202.163.81.81:8891] [client 202.163.81.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.163.81.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afR6pm9ixd-moLycM9DcYgAAAAo"]
[Fri May 01 18:04:32.860948 2026] [:error] [pid 24996:tid 25044] [client 202.163.81.81:10326] [client 202.163.81.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.163.81.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afR6sCDBq9mMfUWQQepCtQAAAI8"]
[Fri May 01 18:06:08.086590 2026] [:error] [pid 24997:tid 25072] [client 202.163.81.81:9581] [client 202.163.81.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.163.81.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afR7EPOkHa4ScY5oo8yw4wAAANA"]
[Fri May 01 18:06:29.332893 2026] [:error] [pid 24997:tid 25080] [client 202.163.81.81:10234] [client 202.163.81.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.163.81.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afR7JfOkHa4ScY5oo8yw-wAAANg"]
[Fri May 01 18:16:29.511792 2026] [:error] [pid 24996:tid 25041] [client 122.172.84.161:23825] [client 122.172.84.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.84.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afR9fSDBq9mMfUWQQepFHwAAAI0"]
[Fri May 01 18:16:39.732521 2026] [:error] [pid 33791:tid 33798] [client 122.172.84.161:13428] [client 122.172.84.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.84.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afR9h29ixd-moLycM9DgcgAAAAQ"]
[Fri May 01 18:16:50.407120 2026] [:error] [pid 24996:tid 25057] [client 122.172.84.161:25370] [client 122.172.84.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.84.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afR9kiDBq9mMfUWQQepFLwAAAJc"]
[Fri May 01 18:17:01.075944 2026] [:error] [pid 24995:tid 25021] [client 122.172.84.161:21617] [client 122.172.84.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.84.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afR9nedJG9WB_Q_ne0ugrAAAAFY"]
[Fri May 01 18:17:11.925378 2026] [:error] [pid 24996:tid 25047] [client 122.172.84.161:31213] [client 122.172.84.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.84.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afR9pyDBq9mMfUWQQepFPQAAAJE"]
[Fri May 01 20:08:47.666858 2026] [:error] [pid 33791:tid 33800] [client 45.61.187.178:55939] [client 45.61.187.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.187.178, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afSXz29ixd-moLycM9AKFQAAAAY"]
[Fri May 01 20:08:49.883913 2026] [proxy_fcgi:error] [pid 33791:tid 33800] [client 45.61.187.178:55939] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 01 20:38:12.036544 2026] [:error] [pid 33791:tid 33796] [client 49.51.50.147:55036] [client 49.51.50.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afSetG9ixd-moLycM9ARJQAAAAI"]
[Fri May 01 20:53:56.272192 2026] [:error] [pid 25320:tid 25347] [client 180.191.78.119:63081] [client 180.191.78.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.78.119, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSiZFc3wJ-3-XaXB3oNDAAAARg"]
[Fri May 01 20:54:05.566120 2026] [:error] [pid 25085:tid 25102] [client 180.191.78.119:63151] [client 180.191.78.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.78.119, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSibfuD8fWRiE0RX0EK8wAAAUs"]
[Fri May 01 20:54:16.027341 2026] [:error] [pid 25320:tid 25325] [client 180.191.78.119:52319] [client 180.191.78.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.78.119, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSieFc3wJ-3-XaXB3oNGgAAAQI"]
[Fri May 01 20:54:26.729566 2026] [:error] [pid 25085:tid 25103] [client 180.191.78.119:63102] [client 180.191.78.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.78.119, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSigvuD8fWRiE0RX0ELCQAAAUw"]
[Fri May 01 20:54:37.237610 2026] [:error] [pid 24996:tid 25049] [client 180.191.78.119:57674] [client 180.191.78.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.78.119, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSijSDBq9mMfUWQQepoxgAAAJM"]
[Fri May 01 20:54:47.492039 2026] [:error] [pid 33791:tid 33795] [client 191.121.21.208:53139] [client 191.121.21.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.121.21.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSil29ixd-moLycM9AWhgAAAAE"]
[Fri May 01 20:54:57.198400 2026] [:error] [pid 24995:tid 25019] [client 191.121.21.208:53534] [client 191.121.21.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.121.21.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSioedJG9WB_Q_ne0u2BwAAAFQ"]
[Fri May 01 20:55:07.707595 2026] [:error] [pid 25085:tid 25110] [client 191.121.21.208:53906] [client 191.121.21.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.121.21.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSiq_uD8fWRiE0RX0ELGgAAAVM"]
[Fri May 01 20:55:18.152319 2026] [:error] [pid 24995:tid 25022] [client 191.121.21.208:54268] [client 191.121.21.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.121.21.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSitudJG9WB_Q_ne0u2DgAAAFc"]
[Fri May 01 20:55:28.657481 2026] [:error] [pid 25085:tid 25114] [client 191.121.21.208:54648] [client 191.121.21.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.121.21.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSiwPuD8fWRiE0RX0ELJwAAAVc"]
[Fri May 01 21:49:51.768704 2026] [:error] [pid 24997:tid 25063] [client 115.134.9.249:57444] [client 115.134.9.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.134.9.249, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSvf_OkHa4ScY5oo8zhhQAAAMc"]
[Fri May 01 21:50:02.370913 2026] [:error] [pid 33791:tid 33808] [client 115.134.9.249:57925] [client 115.134.9.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.134.9.249, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSvim9ixd-moLycM9AkeQAAAA4"]
[Fri May 01 21:50:12.763881 2026] [:error] [pid 25085:tid 25099] [client 115.134.9.249:58386] [client 115.134.9.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.134.9.249, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSvlPuD8fWRiE0RX0ESUgAAAUg"]
[Fri May 01 21:50:23.297891 2026] [:error] [pid 24996:tid 25033] [client 115.134.9.249:58679] [client 115.134.9.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.134.9.249, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSvnyDBq9mMfUWQQep8fwAAAIU"]
[Fri May 01 21:50:33.971143 2026] [:error] [pid 24996:tid 25037] [client 115.134.9.249:58958] [client 115.134.9.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.134.9.249, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afSvqSDBq9mMfUWQQep8mAAAAIk"]
[Fri May 01 22:53:45.056090 2026] [:error] [pid 50214:tid 50235] [client 54.37.252.137:48676] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20co.aspx"] [unique_id "afS-eYs0pgrtfZkbhjN4JwAAAZE"]
[Fri May 01 22:53:47.402133 2026] [:error] [pid 33791:tid 33818] [client 54.37.252.137:41782] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20dc.aspx"] [unique_id "afS-e29ixd-moLycM9A3ewAAABg"]
[Fri May 01 22:53:49.964097 2026] [:error] [pid 50214:tid 50223] [client 54.37.252.137:41790] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20original.aspx"] [unique_id "afS-fYs0pgrtfZkbhjN4KwAAAYU"]
[Fri May 01 22:53:52.507967 2026] [:error] [pid 25320:tid 25336] [client 54.37.252.137:41798] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20slot.aspx"] [unique_id "afS-gFc3wJ-3-XaXB3ojuQAAAQ0"]
[Fri May 01 22:53:54.897702 2026] [:error] [pid 25320:tid 25345] [client 54.37.252.137:41810] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflik%20thailand.aspx"] [unique_id "afS-glc3wJ-3-XaXB3oj8AAAARY"]
[Fri May 01 22:53:57.456024 2026] [:error] [pid 24996:tid 25047] [client 54.37.252.137:33844] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "afS-hSDBq9mMfUWQQeqGKAAAAJE"]
[Fri May 01 22:53:59.972467 2026] [:error] [pid 24997:tid 25080] [client 54.37.252.137:33848] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afS-h_OkHa4ScY5oo8zobAAAANg"]
[Fri May 01 22:54:02.362995 2026] [:error] [pid 33791:tid 33798] [client 54.37.252.137:33854] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afS-im9ixd-moLycM9A3mwAAAAQ"]
[Fri May 01 22:54:04.753075 2026] [:error] [pid 24997:tid 25075] [client 54.37.252.137:33868] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afS-jPOkHa4ScY5oo8zocQAAANM"]
[Fri May 01 22:54:07.275417 2026] [:error] [pid 33791:tid 33809] [client 54.37.252.137:37372] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afS-j29ixd-moLycM9A3oQAAAA8"]
[Fri May 01 22:54:09.798194 2026] [:error] [pid 50214:tid 50229] [client 54.37.252.137:37374] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afS-kYs0pgrtfZkbhjN4PwAAAYs"]
[Fri May 01 22:54:12.301396 2026] [:error] [pid 25320:tid 25342] [client 54.37.252.137:37382] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afS-lFc3wJ-3-XaXB3oj-gAAARM"]
[Fri May 01 22:54:14.788179 2026] [:error] [pid 25320:tid 25341] [client 54.37.252.137:37388] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afS-llc3wJ-3-XaXB3oj_AAAARI"]
[Fri May 01 22:54:17.296086 2026] [:error] [pid 50214:tid 50241] [client 54.37.252.137:40298] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "afS-mYs0pgrtfZkbhjN4RgAAAZY"]
[Fri May 01 22:54:19.795222 2026] [:error] [pid 50214:tid 50219] [client 54.37.252.137:40302] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "afS-m4s0pgrtfZkbhjN4SwAAAYE"]
[Fri May 01 22:54:22.303780 2026] [:error] [pid 50214:tid 50231] [client 54.37.252.137:40316] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afS-nos0pgrtfZkbhjN4VAAAAY0"]
[Fri May 01 22:54:24.811401 2026] [:error] [pid 25085:tid 25096] [client 54.37.252.137:40318] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afS-oPuD8fWRiE0RX0EZBQAAAUU"]
[Fri May 01 22:54:27.315832 2026] [:error] [pid 24997:tid 25067] [client 54.37.252.137:36040] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "afS-o_OkHa4ScY5oo8zoegAAAMs"]
[Fri May 01 22:54:29.838646 2026] [:error] [pid 24995:tid 25012] [client 54.37.252.137:36052] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "afS-pedJG9WB_Q_ne0vCegAAAE0"]
[Fri May 01 22:54:32.219435 2026] [:error] [pid 25320:tid 25323] [client 54.37.252.137:36054] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "afS-qFc3wJ-3-XaXB3okCwAAAQA"]
[Fri May 01 22:54:34.664812 2026] [:error] [pid 24997:tid 25054] [client 54.37.252.137:36058] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "afS-qvOkHa4ScY5oo8zohAAAAMM"]
[Fri May 01 22:54:37.126464 2026] [:error] [pid 25320:tid 25337] [client 54.37.252.137:41250] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "afS-rVc3wJ-3-XaXB3okEwAAAQ4"]
[Fri May 01 22:55:48.871993 2026] [:error] [pid 25085:tid 25093] [client 54.37.252.137:43644] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "afS-9PuD8fWRiE0RX0EZLgAAAUI"]
[Fri May 01 22:55:51.275183 2026] [:error] [pid 25320:tid 25336] [client 54.37.252.137:60794] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "afS-91c3wJ-3-XaXB3oknwAAAQ0"]
[Fri May 01 22:55:53.717740 2026] [:error] [pid 50214:tid 50243] [client 54.37.252.137:60810] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "afS--Ys0pgrtfZkbhjN4xgAAAZg"]
[Fri May 01 22:55:56.148844 2026] [:error] [pid 50214:tid 50233] [client 54.37.252.137:49054] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "afS-_Is0pgrtfZkbhjN4ygAAAY8"]
[Fri May 01 22:55:58.468855 2026] [:error] [pid 50214:tid 50231] [client 54.37.252.137:49068] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afS-_os0pgrtfZkbhjN4zwAAAY0"]
[Fri May 01 22:56:00.911084 2026] [:error] [pid 33791:tid 33808] [client 54.37.252.137:49078] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "afS_AG9ixd-moLycM9A37QAAAA4"]
[Fri May 01 22:56:03.354726 2026] [:error] [pid 33791:tid 33804] [client 54.37.252.137:49082] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afS_A29ixd-moLycM9A38wAAAAo"]
[Fri May 01 22:56:05.795523 2026] [:error] [pid 24997:tid 25046] [client 54.37.252.137:52166] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afS_BfOkHa4ScY5oo8zougAAAMA"]
[Fri May 01 22:56:08.090719 2026] [:error] [pid 33791:tid 33800] [client 54.37.252.137:52172] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afS_CG9ixd-moLycM9A3_gAAAAY"]
[Fri May 01 22:56:10.538965 2026] [:error] [pid 25320:tid 25337] [client 54.37.252.137:52180] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "afS_Clc3wJ-3-XaXB3okxwAAAQ4"]
[Fri May 01 22:56:12.967396 2026] [:error] [pid 50214:tid 50223] [client 54.37.252.137:52196] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "afS_DIs0pgrtfZkbhjN42QAAAYU"]
[Fri May 01 22:56:15.396368 2026] [:error] [pid 33791:tid 33806] [client 54.37.252.137:52204] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "afS_D29ixd-moLycM9A4BQAAAAw"]
[Fri May 01 22:56:17.837394 2026] [:error] [pid 33791:tid 33802] [client 54.37.252.137:46010] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "afS_EW9ixd-moLycM9A4CQAAAAg"]
[Fri May 01 22:56:20.278819 2026] [:error] [pid 24996:tid 25038] [client 54.37.252.137:46016] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "afS_FCDBq9mMfUWQQeqGdgAAAIo"]
[Fri May 01 22:56:22.728549 2026] [:error] [pid 33791:tid 33817] [client 54.37.252.137:46022] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "afS_Fm9ixd-moLycM9A4EwAAABc"]
[Fri May 01 22:56:25.153604 2026] [:error] [pid 24996:tid 25059] [client 54.37.252.137:46034] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "afS_GSDBq9mMfUWQQeqGewAAAJg"]
[Fri May 01 22:56:27.591377 2026] [:error] [pid 25320:tid 25328] [client 54.37.252.137:33674] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "afS_G1c3wJ-3-XaXB3ok0AAAAQU"]
[Fri May 01 22:56:30.028153 2026] [:error] [pid 24997:tid 25077] [client 54.37.252.137:33688] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "afS_HvOkHa4ScY5oo8zowgAAANU"]
[Fri May 01 22:56:32.459710 2026] [:error] [pid 24996:tid 25040] [client 54.37.252.137:33704] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "afS_ICDBq9mMfUWQQeqGfgAAAIw"]
[Fri May 01 22:56:34.893584 2026] [:error] [pid 50214:tid 50239] [client 54.37.252.137:33718] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "afS_Ios0pgrtfZkbhjN45wAAAZU"]
[Fri May 01 22:56:37.426528 2026] [:error] [pid 24997:tid 25046] [client 54.37.252.137:55482] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "afS_JfOkHa4ScY5oo8zoxAAAAMA"]
[Fri May 01 22:56:39.938326 2026] [:error] [pid 33791:tid 33815] [client 54.37.252.137:55492] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "afS_J29ixd-moLycM9A4JQAAABU"]
[Fri May 01 22:56:42.338526 2026] [:error] [pid 50214:tid 50226] [client 54.37.252.137:55498] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "afS_Kos0pgrtfZkbhjN47AAAAYg"]
[Fri May 01 22:56:44.796264 2026] [:error] [pid 25320:tid 25340] [client 54.37.252.137:55502] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "afS_LFc3wJ-3-XaXB3ok3QAAARE"]
[Fri May 01 22:57:16.043341 2026] [:error] [pid 50214:tid 50229] [client 54.37.252.137:56324] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afS_TIs0pgrtfZkbhjN5DwAAAYs"]
[Fri May 01 22:57:18.464129 2026] [:error] [pid 25320:tid 25326] [client 54.37.252.137:41524] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "afS_Tlc3wJ-3-XaXB3ok9gAAAQM"]
[Fri May 01 22:57:20.927634 2026] [:error] [pid 25085:tid 25108] [client 54.37.252.137:41536] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "afS_UPuD8fWRiE0RX0EZdwAAAVE"]
[Fri May 01 22:57:23.370121 2026] [:error] [pid 50214:tid 50220] [client 54.37.252.137:41548] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "afS_U4s0pgrtfZkbhjN5FQAAAYI"]
[Fri May 01 22:57:25.821859 2026] [:error] [pid 50214:tid 50232] [client 54.37.252.137:52496] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afS_VYs0pgrtfZkbhjN5GgAAAY4"]
[Fri May 01 22:57:28.283141 2026] [:error] [pid 25320:tid 25346] [client 54.37.252.137:52506] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "afS_WFc3wJ-3-XaXB3olEQAAARc"]
[Fri May 01 22:57:30.741137 2026] [:error] [pid 50214:tid 50239] [client 54.37.252.137:52516] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "afS_Wos0pgrtfZkbhjN5KwAAAZU"]
[Fri May 01 22:57:33.151805 2026] [:error] [pid 25320:tid 25342] [client 54.37.252.137:52530] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afS_XVc3wJ-3-XaXB3olIwAAARM"]
[Fri May 01 22:57:35.600912 2026] [:error] [pid 50214:tid 50229] [client 54.37.252.137:52540] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "afS_X4s0pgrtfZkbhjN5MgAAAYs"]
[Fri May 01 22:57:38.051447 2026] [:error] [pid 25320:tid 25344] [client 54.37.252.137:52968] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "afS_Ylc3wJ-3-XaXB3olLQAAARU"]
[Fri May 01 22:57:40.478567 2026] [:error] [pid 25320:tid 25342] [client 54.37.252.137:52972] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "afS_ZFc3wJ-3-XaXB3olMgAAARM"]
[Fri May 01 22:57:42.913570 2026] [:error] [pid 24996:tid 25038] [client 54.37.252.137:52982] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "afS_ZiDBq9mMfUWQQeqGqgAAAIo"]
[Fri May 01 22:57:45.378036 2026] [:error] [pid 25320:tid 25346] [client 54.37.252.137:52992] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afS_aVc3wJ-3-XaXB3olNwAAARc"]
[Fri May 01 22:57:47.807172 2026] [:error] [pid 24997:tid 25080] [client 54.37.252.137:41610] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "afS_a_OkHa4ScY5oo8zo4AAAANg"]
[Fri May 01 22:57:50.196576 2026] [:error] [pid 25320:tid 25340] [client 54.37.252.137:41616] [client 54.37.252.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "afS_blc3wJ-3-XaXB3olQQAAARE"]
[Fri May 01 23:49:32.569782 2026] [:error] [pid 33791:tid 33816] [client 43.164.0.21:44904] [client 43.164.0.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afTLjG9ixd-moLycM9BLVQAAABY"]
[Fri May 01 23:54:02.930967 2026] [:error] [pid 24995:tid 25018] [client 49.204.164.100:24286] [client 49.204.164.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.164.100, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTMmudJG9WB_Q_ne0vIiwAAAFM"]
[Fri May 01 23:54:14.975747 2026] [:error] [pid 33791:tid 33806] [client 49.204.164.100:24235] [client 49.204.164.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.164.100, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTMpm9ixd-moLycM9BNdAAAAAw"]
[Fri May 01 23:54:27.932833 2026] [:error] [pid 25320:tid 25333] [client 49.204.164.100:24775] [client 49.204.164.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.164.100, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTMs1c3wJ-3-XaXB3o1PwAAAQo"]
[Fri May 01 23:54:41.668202 2026] [:error] [pid 24996:tid 25030] [client 49.204.164.100:25012] [client 49.204.164.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.164.100, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTMwSDBq9mMfUWQQeqPsAAAAII"]
[Fri May 01 23:54:54.179671 2026] [:error] [pid 25320:tid 25341] [client 49.204.164.100:24911] [client 49.204.164.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.164.100, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTMzlc3wJ-3-XaXB3o1YAAAARI"]
[Sat May 02 00:17:02.562707 2026] [:error] [pid 25320:tid 25342] [client 45.61.184.174:51810] [client 45.61.184.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.184.174, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afTR_lc3wJ-3-XaXB3o8pgAAARM"]
[Sat May 02 00:17:04.893188 2026] [proxy_fcgi:error] [pid 25320:tid 25342] [client 45.61.184.174:51810] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 02 00:17:08.908499 2026] [:error] [pid 25320:tid 25329] [client 45.61.184.174:51810] [client 45.61.184.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.184.174, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afTSBFc3wJ-3-XaXB3o8uwAAAQY"]
[Sat May 02 00:17:09.842330 2026] [proxy_fcgi:error] [pid 25320:tid 25329] [client 45.61.184.174:51810] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 02 01:28:09.602368 2026] [:error] [pid 33791:tid 33814] [client 179.93.4.148:54286] [client 179.93.4.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.93.4.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTiqW9ixd-moLycM9B06QAAABQ"]
[Sat May 02 01:28:42.652747 2026] [:error] [pid 24996:tid 25059] [client 179.93.4.148:53846] [client 179.93.4.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.93.4.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTiyiDBq9mMfUWQQeqfIgAAAJg"]
[Sat May 02 01:28:53.951152 2026] [:error] [pid 24997:tid 25071] [client 179.93.4.148:54964] [client 179.93.4.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.93.4.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTi1fOkHa4ScY5oo8z7-AAAAM8"]
[Sat May 02 01:29:12.251506 2026] [:error] [pid 33791:tid 33805] [client 179.93.4.148:55461] [client 179.93.4.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.93.4.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTi6G9ixd-moLycM9B1cgAAAAs"]
[Sat May 02 01:29:22.897655 2026] [:error] [pid 25320:tid 25335] [client 179.93.4.148:55418] [client 179.93.4.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.93.4.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTi8lc3wJ-3-XaXB3pRBQAAAQw"]
[Sat May 02 01:38:06.820259 2026] [:error] [pid 25085:tid 25110] [client 185.238.171.108:59121] [client 185.238.171.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.238.171.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTk_vuD8fWRiE0RX0ErHQAAAVM"]
[Sat May 02 01:38:16.472778 2026] [:error] [pid 33791:tid 33802] [client 185.238.171.108:61104] [client 185.238.171.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.238.171.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTlCG9ixd-moLycM9B4_AAAAAg"]
[Sat May 02 01:38:27.124636 2026] [:error] [pid 24997:tid 25070] [client 185.238.171.108:64730] [client 185.238.171.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.238.171.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTlE_OkHa4ScY5oo8z9HwAAAM4"]
[Sat May 02 01:38:37.658346 2026] [:error] [pid 33791:tid 33818] [client 185.238.171.108:49557] [client 185.238.171.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.238.171.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTlHW9ixd-moLycM9B5GgAAABg"]
[Sat May 02 01:38:48.278546 2026] [:error] [pid 33791:tid 33799] [client 185.238.171.108:63421] [client 185.238.171.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.238.171.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afTlKG9ixd-moLycM9B5JgAAAAU"]
[Sat May 02 02:49:28.664661 2026] [:error] [pid 24996:tid 25032] [client 205.185.115.28:61911] [client 205.185.115.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afT1uCDBq9mMfUWQQeqs5wAAAIQ"]
[Sat May 02 02:49:29.514754 2026] [proxy_fcgi:error] [pid 24996:tid 25032] [client 205.185.115.28:61911] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 02 02:49:31.007427 2026] [:error] [pid 24996:tid 25031] [client 205.185.115.28:61911] [client 205.185.115.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afT1uyDBq9mMfUWQQeqs6QAAAIM"]
[Sat May 02 02:49:31.873065 2026] [proxy_fcgi:error] [pid 24996:tid 25031] [client 205.185.115.28:61911] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 02 02:51:49.859288 2026] [:error] [pid 24997:tid 25062] [client 37.41.59.13:51442] [client 37.41.59.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.59.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afT2RfOkHa4ScY5oo8wG6wAAAMY"]
[Sat May 02 02:52:21.129212 2026] [:error] [pid 33791:tid 33818] [client 37.41.59.13:52679] [client 37.41.59.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.59.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afT2ZW9ixd-moLycM9CVAAAAABg"]
[Sat May 02 02:52:30.280895 2026] [:error] [pid 24995:tid 25017] [client 37.41.59.13:53109] [client 37.41.59.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.59.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afT2budJG9WB_Q_ne0vZSwAAAFI"]
[Sat May 02 02:52:39.430165 2026] [:error] [pid 24997:tid 25065] [client 37.41.59.13:53543] [client 37.41.59.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.59.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afT2d_OkHa4ScY5oo8wHDQAAAMk"]
[Sat May 02 02:52:56.090552 2026] [:error] [pid 50214:tid 50231] [client 37.41.59.13:53993] [client 37.41.59.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.59.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afT2iIs0pgrtfZkbhjOmBAAAAY0"]
[Sat May 02 02:53:03.150839 2026] [:error] [pid 25320:tid 25340] [client 37.41.59.13:54438] [client 37.41.59.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.59.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afT2j1c3wJ-3-XaXB3pnugAAARE"]
[Sat May 02 02:59:17.948553 2026] [:error] [pid 50214:tid 50221] [client 205.185.115.28:58074] [client 205.185.115.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afT4BYs0pgrtfZkbhjOnAAAAAYM"]
[Sat May 02 02:59:18.797823 2026] [proxy_fcgi:error] [pid 50214:tid 50221] [client 205.185.115.28:58074] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 02 04:22:25.599068 2026] [:error] [pid 53435:tid 53486] [client 152.59.155.11:53411] [client 152.59.155.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.155.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afULgYDmp7_z8QkjSzP7pQAAAE4"]
[Sat May 02 04:22:47.117752 2026] [:error] [pid 53435:tid 53479] [client 152.59.155.11:53653] [client 152.59.155.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.155.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afULl4Dmp7_z8QkjSzP7xQAAAEc"]
[Sat May 02 05:27:15.212000 2026] [:error] [pid 53434:tid 53467] [client 49.37.243.26:60353] [client 49.37.243.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.243.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afUas-9BXmRQcbfsxlzLIQAAABg"]
[Sat May 02 05:27:37.370099 2026] [:error] [pid 22846:tid 22857] [client 49.37.243.26:61086] [client 49.37.243.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.243.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afUayYm1Ms03Mfhp3aabEQAAAQk"]
[Sat May 02 05:27:49.324092 2026] [:error] [pid 53540:tid 53553] [client 49.37.243.26:61514] [client 49.37.243.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.243.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afUa1dQYV6qJFftBNymnLgAAAMs"]
[Sat May 02 05:27:57.111034 2026] [:error] [pid 53434:tid 53467] [client 49.37.243.26:61834] [client 49.37.243.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.243.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afUa3e9BXmRQcbfsxlzLSAAAABg"]
[Sat May 02 05:28:07.731050 2026] [:error] [pid 53435:tid 53489] [client 49.37.243.26:62191] [client 49.37.243.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.243.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afUa54Dmp7_z8QkjSzMYCgAAAFE"]
[Sat May 02 05:28:18.248443 2026] [:error] [pid 53436:tid 53519] [client 49.37.243.26:62558] [client 49.37.243.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.243.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afUa8q9N0xp8fccVM0BCkgAAAJQ"]
[Sat May 02 05:39:03.373498 2026] [:error] [pid 53435:tid 53490] [client 162.14.109.170:48040] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afUdd4Dmp7_z8QkjSzMdWAAAAFI"]
[Sat May 02 05:50:34.948855 2026] [:error] [pid 53436:tid 53513] [client 43.166.128.86:59366] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afUgKq9N0xp8fccVM0BQUAAAAI4"]
[Sat May 02 08:04:55.327089 2026] [:error] [pid 53436:tid 53500] [client 205.185.115.18:54578] [client 205.185.115.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afU_p69N0xp8fccVM0CFjQAAAIE"]
[Sat May 02 08:04:56.313654 2026] [proxy_fcgi:error] [pid 53436:tid 53500] [client 205.185.115.18:54578] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 02 08:05:25.057404 2026] [:error] [pid 11894:tid 11907] [client 205.185.115.18:57812] [client 205.185.115.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afU_xTHh6DQF1tkXIKx1jQAAAUo"]
[Sat May 02 08:05:26.036909 2026] [proxy_fcgi:error] [pid 11894:tid 11907] [client 205.185.115.18:57812] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 02 11:13:24.896283 2026] [:error] [pid 11894:tid 11902] [client 43.165.198.224:49552] [client 43.165.198.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afVr1DHh6DQF1tkXIKyXIgAAAUU"]
[Sat May 02 11:32:09.837354 2026] [:error] [pid 11894:tid 11915] [client 105.158.64.221:58030] [client 105.158.64.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.158.64.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afVwOTHh6DQF1tkXIKyaFgAAAVI"]
[Sat May 02 11:32:19.967771 2026] [:error] [pid 51917:tid 51939] [client 105.158.64.221:58360] [client 105.158.64.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.158.64.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afVwQ67wZviJ7BgcCi8EzQAAAdQ"]
[Sat May 02 11:32:30.519262 2026] [:error] [pid 22846:tid 22859] [client 105.158.64.221:58513] [client 105.158.64.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.158.64.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afVwTom1Ms03Mfhp3abSBwAAAQs"]
[Sat May 02 11:32:41.024760 2026] [:error] [pid 52010:tid 52067] [client 105.158.64.221:35447] [client 105.158.64.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.158.64.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afVwWQiR6wohDtdeJMCXIgAAAtg"]
[Sat May 02 11:32:51.568863 2026] [:error] [pid 11894:tid 11902] [client 105.158.64.221:35477] [client 105.158.64.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.158.64.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afVwYzHh6DQF1tkXIKyaRwAAAUU"]
[Sat May 02 14:00:29.656074 2026] [:error] [pid 52010:tid 52044] [client 176.28.169.17:21073] [client 176.28.169.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.28.169.17, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWS_QiR6wohDtdeJMC0HQAAAsE"]
[Sat May 02 14:00:29.656299 2026] [:error] [pid 52010:tid 52057] [client 176.28.169.17:20480] [client 176.28.169.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.28.169.17, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWS_QiR6wohDtdeJMC0HgAAAs4"]
[Sat May 02 15:14:19.984569 2026] [:error] [pid 11894:tid 11899] [client 45.251.230.230:56032] [client 45.251.230.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.251.230.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWkSzHh6DQF1tkXIKyy9AAAAUI"]
[Sat May 02 15:14:30.518678 2026] [:error] [pid 52010:tid 52047] [client 45.251.230.230:56625] [client 45.251.230.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.251.230.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWkVgiR6wohDtdeJMDC6gAAAsQ"]
[Sat May 02 15:14:41.025010 2026] [:error] [pid 52010:tid 52048] [client 45.251.230.230:57050] [client 45.251.230.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.251.230.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWkYQiR6wohDtdeJMDDCQAAAsU"]
[Sat May 02 15:14:51.598870 2026] [:error] [pid 52124:tid 52148] [client 45.251.230.230:57474] [client 45.251.230.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.251.230.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWkazjabaZ9NMm8eQt1YAAAA5M"]
[Sat May 02 15:15:02.128802 2026] [:error] [pid 22846:tid 22872] [client 45.251.230.230:57901] [client 45.251.230.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.251.230.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWkdom1Ms03Mfhp3abjegAAARg"]
[Sat May 02 15:18:22.782014 2026] [:error] [pid 52124:tid 52142] [client 43.161.217.205:33498] [client 43.161.217.205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afWlPjjabaZ9NMm8eQt1vAAAA40"]
[Sat May 02 15:23:29.016003 2026] [:error] [pid 51917:tid 51937] [client 45.249.165.157:50766] [client 45.249.165.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.165.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWmca7wZviJ7BgcCi8k8wAAAdI"]
[Sat May 02 15:23:39.014328 2026] [:error] [pid 51917:tid 51940] [client 45.249.165.157:51132] [client 45.249.165.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.165.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWme67wZviJ7BgcCi8lAAAAAdU"]
[Sat May 02 15:23:49.351192 2026] [:error] [pid 53435:tid 53474] [client 45.249.165.157:51449] [client 45.249.165.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.165.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWmhYDmp7_z8QkjSzOGyAAAAEI"]
[Sat May 02 15:23:59.598329 2026] [:error] [pid 52010:tid 52057] [client 45.249.165.157:51782] [client 45.249.165.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.165.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWmjwiR6wohDtdeJMDGQAAAAs4"]
[Sat May 02 15:24:09.897743 2026] [:error] [pid 53435:tid 53488] [client 45.249.165.157:52113] [client 45.249.165.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.165.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWmmYDmp7_z8QkjSzOGzwAAAFA"]
[Sat May 02 15:33:19.580829 2026] [:error] [pid 51950:tid 51994] [client 103.105.178.7:27594] [client 103.105.178.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.105.178.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWov4oBJzYZ3RKUhdgUcwAAAk4"]
[Sat May 02 15:33:45.731348 2026] [:error] [pid 51950:tid 51990] [client 103.105.178.7:27962] [client 103.105.178.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.105.178.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWo2YoBJzYZ3RKUhdgUoAAAAko"]
[Sat May 02 15:33:56.604272 2026] [:error] [pid 52010:tid 52065] [client 103.105.178.7:28165] [client 103.105.178.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.105.178.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWo5AiR6wohDtdeJMDI6QAAAtY"]
[Sat May 02 15:34:08.937691 2026] [:error] [pid 52012:tid 52088] [client 103.105.178.7:28380] [client 103.105.178.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.105.178.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWo8EzSWr-8cpS83mhgZAAAA0s"]
[Sat May 02 15:34:31.826136 2026] [:error] [pid 22846:tid 22868] [client 103.105.178.7:28785] [client 103.105.178.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.105.178.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWpB4m1Ms03Mfhp3ablPQAAARQ"]
[Sat May 02 15:40:26.095992 2026] [:error] [pid 52010:tid 52045] [client 27.59.63.59:63076] [client 27.59.63.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.59.63.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWqagiR6wohDtdeJMDKOQAAAsI"]
[Sat May 02 15:41:13.830160 2026] [:error] [pid 53434:tid 53466] [client 27.59.63.59:58405] [client 27.59.63.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.59.63.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWqme9BXmRQcbfsxlxazgAAABc"]
[Sat May 02 15:41:45.216892 2026] [:error] [pid 51950:tid 51988] [client 27.59.63.59:43508] [client 27.59.63.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.59.63.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWquYoBJzYZ3RKUhdgV4gAAAkg"]
[Sat May 02 15:42:09.685929 2026] [:error] [pid 52010:tid 52053] [client 27.59.63.59:59405] [client 27.59.63.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.59.63.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWq0QiR6wohDtdeJMDKogAAAso"]
[Sat May 02 15:42:30.788654 2026] [:error] [pid 53436:tid 53500] [client 27.59.63.59:60009] [client 27.59.63.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.59.63.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWq5q9N0xp8fccVM0C4AwAAAIE"]
[Sat May 02 15:52:54.150406 2026] [:error] [pid 53435:tid 53479] [client 223.238.82.25:3000] [client 223.238.82.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.238.82.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWtVoDmp7_z8QkjSzOIsAAAAEc"]
[Sat May 02 16:02:53.750631 2026] [:error] [pid 11894:tid 11918] [client 2.32.201.235:54842] [client 2.32.201.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.32.201.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWvrTHh6DQF1tkXIKy4MQAAAVU"]
[Sat May 02 16:03:03.957855 2026] [:error] [pid 51950:tid 51995] [client 2.32.201.235:55446] [client 2.32.201.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.32.201.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWvt4oBJzYZ3RKUhdgaNwAAAk8"]
[Sat May 02 16:03:14.504054 2026] [:error] [pid 22846:tid 22867] [client 2.32.201.235:55923] [client 2.32.201.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.32.201.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWvwom1Ms03Mfhp3abnjQAAARM"]
[Sat May 02 16:03:24.989362 2026] [:error] [pid 53434:tid 53452] [client 2.32.201.235:56328] [client 2.32.201.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.32.201.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWvzO9BXmRQcbfsxlxebQAAAAk"]
[Sat May 02 16:03:35.475958 2026] [:error] [pid 51950:tid 52004] [client 2.32.201.235:56729] [client 2.32.201.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.32.201.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWv14oBJzYZ3RKUhdgatgAAAlg"]
[Sat May 02 16:07:58.530483 2026] [:error] [pid 52010:tid 52065] [client 94.154.239.69:45346] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afWw3giR6wohDtdeJMDWJQAAAtY"]
[Sat May 02 16:08:00.951462 2026] [:error] [pid 51917:tid 51937] [client 94.154.239.69:54794] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afWw4K7wZviJ7BgcCi8q1QAAAdI"]
[Sat May 02 16:09:56.442541 2026] [:error] [pid 53434:tid 53462] [client 94.154.239.69:36600] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "afWxVO9BXmRQcbfsxlxgiAAAABM"]
[Sat May 02 16:09:58.969027 2026] [:error] [pid 52010:tid 52043] [client 94.154.239.69:33636] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "afWxVgiR6wohDtdeJMDY-wAAAsA"]
[Sat May 02 16:10:01.317042 2026] [:error] [pid 51917:tid 51941] [client 223.238.82.25:2846] [client 223.238.82.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.238.82.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWxWa7wZviJ7BgcCi8rbwAAAdY"]
[Sat May 02 16:10:01.587829 2026] [:error] [pid 53434:tid 53445] [client 94.154.239.69:33652] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "afWxWe9BXmRQcbfsxlxgjgAAAAI"]
[Sat May 02 16:10:04.059127 2026] [:error] [pid 51950:tid 52000] [client 94.154.239.69:33660] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "afWxXIoBJzYZ3RKUhdgeZAAAAlQ"]
[Sat May 02 16:10:06.669198 2026] [:error] [pid 53436:tid 53509] [client 94.154.239.69:43016] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "afWxXq9N0xp8fccVM0C7tQAAAIo"]
[Sat May 02 16:10:09.273720 2026] [:error] [pid 52010:tid 52056] [client 94.154.239.69:43030] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "afWxYQiR6wohDtdeJMDZZQAAAs0"]
[Sat May 02 16:10:10.056540 2026] [:error] [pid 53435:tid 53484] [client 223.238.82.25:2845] [client 223.238.82.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.238.82.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWxYoDmp7_z8QkjSzOKPwAAAEw"]
[Sat May 02 16:10:11.909294 2026] [:error] [pid 51950:tid 52002] [client 94.154.239.69:43042] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "afWxY4oBJzYZ3RKUhdgeawAAAlY"]
[Sat May 02 16:10:14.372482 2026] [:error] [pid 52010:tid 52067] [client 94.154.239.69:43052] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "afWxZgiR6wohDtdeJMDZrgAAAtg"]
[Sat May 02 16:10:16.973141 2026] [:error] [pid 51917:tid 51933] [client 94.154.239.69:60126] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "afWxaK7wZviJ7BgcCi8rewAAAc4"]
[Sat May 02 16:10:19.569571 2026] [:error] [pid 51917:tid 51928] [client 94.154.239.69:60138] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "afWxa67wZviJ7BgcCi8rfgAAAck"]
[Sat May 02 16:10:20.091797 2026] [:error] [pid 51950:tid 52000] [client 223.238.82.25:3195] [client 223.238.82.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.238.82.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWxbIoBJzYZ3RKUhdgeoQAAAlQ"]
[Sat May 02 16:10:22.143627 2026] [:error] [pid 52010:tid 52050] [client 94.154.239.69:60140] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "afWxbgiR6wohDtdeJMDZtwAAAsc"]
[Sat May 02 16:10:24.749428 2026] [:error] [pid 52012:tid 52084] [client 94.154.239.69:60144] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "afWxcEzSWr-8cpS83mhiiQAAA0c"]
[Sat May 02 16:10:27.338319 2026] [:error] [pid 51917:tid 51921] [client 94.154.239.69:35136] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afWxc67wZviJ7BgcCi8rgQAAAcI"]
[Sat May 02 16:10:29.941250 2026] [:error] [pid 53436:tid 53511] [client 94.154.239.69:35150] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "afWxda9N0xp8fccVM0C7zAAAAIw"]
[Sat May 02 16:10:32.554155 2026] [:error] [pid 53435:tid 53475] [client 94.154.239.69:35160] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "afWxeIDmp7_z8QkjSzOKSwAAAEM"]
[Sat May 02 16:10:33.395295 2026] [:error] [pid 51917:tid 51940] [client 223.238.82.25:2886] [client 223.238.82.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.238.82.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWxea7wZviJ7BgcCi8riQAAAdU"]
[Sat May 02 16:10:35.161956 2026] [:error] [pid 11894:tid 11904] [client 94.154.239.69:35162] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "afWxezHh6DQF1tkXIKy7dwAAAUc"]
[Sat May 02 16:10:37.747817 2026] [:error] [pid 52010:tid 52048] [client 94.154.239.69:55140] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "afWxfQiR6wohDtdeJMDZwwAAAsU"]
[Sat May 02 16:10:40.332166 2026] [:error] [pid 52010:tid 52050] [client 94.154.239.69:55150] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "afWxgAiR6wohDtdeJMDZ3wAAAsc"]
[Sat May 02 16:10:42.924506 2026] [:error] [pid 52124:tid 52132] [client 94.154.239.69:55154] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "afWxgjjabaZ9NMm8eQt4nQAAA4M"]
[Sat May 02 16:10:45.491604 2026] [:error] [pid 51917:tid 51939] [client 94.154.239.69:55166] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "afWxha7wZviJ7BgcCi8rjAAAAdQ"]
[Sat May 02 16:10:48.083980 2026] [:error] [pid 22846:tid 22865] [client 94.154.239.69:50342] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afWxiIm1Ms03Mfhp3abonAAAARE"]
[Sat May 02 16:10:50.666521 2026] [:error] [pid 53434:tid 53458] [client 94.154.239.69:50358] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afWxiu9BXmRQcbfsxlxgwAAAAA8"]
[Sat May 02 16:11:22.240286 2026] [:error] [pid 53436:tid 53504] [client 94.154.239.69:50366] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "afWxqq9N0xp8fccVM0C8MgAAAIU"]
[Sat May 02 16:11:24.751916 2026] [:error] [pid 52012:tid 52091] [client 94.154.239.69:59340] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "afWxrEzSWr-8cpS83mhioQAAA04"]
[Sat May 02 16:11:27.357913 2026] [:error] [pid 52010:tid 52048] [client 94.154.239.69:49882] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "afWxrwiR6wohDtdeJMDb8QAAAsU"]
[Sat May 02 16:11:29.840632 2026] [:error] [pid 53434:tid 53467] [client 94.154.239.69:49884] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "afWxse9BXmRQcbfsxlxhBAAAABg"]
[Sat May 02 16:11:32.453431 2026] [:error] [pid 52010:tid 52048] [client 94.154.239.69:49900] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "afWxtAiR6wohDtdeJMDcDAAAAsU"]
[Sat May 02 16:11:35.072626 2026] [:error] [pid 51917:tid 51942] [client 94.154.239.69:49916] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afWxt67wZviJ7BgcCi8sIQAAAdc"]
[Sat May 02 16:11:37.659505 2026] [:error] [pid 22846:tid 22858] [client 94.154.239.69:47490] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afWxuYm1Ms03Mfhp3aboqAAAAQo"]
[Sat May 02 16:11:40.262994 2026] [:error] [pid 53434:tid 53458] [client 94.154.239.69:47502] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afWxvO9BXmRQcbfsxlxhCQAAAA8"]
[Sat May 02 16:11:42.875162 2026] [:error] [pid 51917:tid 51940] [client 94.154.239.69:47510] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afWxvq7wZviJ7BgcCi8sJQAAAdU"]
[Sat May 02 16:11:45.477987 2026] [:error] [pid 51950:tid 51990] [client 94.154.239.69:47518] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afWxwYoBJzYZ3RKUhdgfNQAAAko"]
[Sat May 02 16:11:48.084477 2026] [:error] [pid 53434:tid 53451] [client 94.154.239.69:35154] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afWxxO9BXmRQcbfsxlxhEgAAAAg"]
[Sat May 02 16:11:50.683517 2026] [:error] [pid 52010:tid 52058] [client 94.154.239.69:35168] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afWxxgiR6wohDtdeJMDcQwAAAs8"]
[Sat May 02 16:11:53.315918 2026] [:error] [pid 52010:tid 52044] [client 94.154.239.69:35184] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "afWxyQiR6wohDtdeJMDchwAAAsE"]
[Sat May 02 16:11:55.913752 2026] [:error] [pid 51950:tid 51999] [client 94.154.239.69:35196] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afWxy4oBJzYZ3RKUhdgfTgAAAlM"]
[Sat May 02 16:11:58.519644 2026] [:error] [pid 51950:tid 51989] [client 94.154.239.69:52972] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "afWxzooBJzYZ3RKUhdgfXAAAAkk"]
[Sat May 02 16:11:59.306744 2026] [:error] [pid 52010:tid 52065] [client 152.57.145.97:56116] [client 152.57.145.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.145.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWxzwiR6wohDtdeJMDc0gAAAtY"]
[Sat May 02 16:12:01.117504 2026] [:error] [pid 52010:tid 52061] [client 94.154.239.69:52988] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "afWx0QiR6wohDtdeJMDc3QAAAtI"]
[Sat May 02 16:12:03.714606 2026] [:error] [pid 53434:tid 53446] [client 94.154.239.69:53000] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afWx0-9BXmRQcbfsxlxhHwAAAAM"]
[Sat May 02 16:12:06.293346 2026] [:error] [pid 53434:tid 53450] [client 94.154.239.69:41108] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "afWx1u9BXmRQcbfsxlxhJQAAAAc"]
[Sat May 02 16:12:08.914103 2026] [:error] [pid 53434:tid 53455] [client 94.154.239.69:41120] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "afWx2O9BXmRQcbfsxlxhKAAAAAw"]
[Sat May 02 16:12:09.722894 2026] [:error] [pid 53436:tid 53514] [client 152.57.145.97:56419] [client 152.57.145.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.145.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWx2a9N0xp8fccVM0C8PQAAAI8"]
[Sat May 02 16:12:11.497082 2026] [:error] [pid 53436:tid 53502] [client 94.154.239.69:41122] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "afWx269N0xp8fccVM0C8QgAAAIM"]
[Sat May 02 16:12:14.086208 2026] [:error] [pid 52012:tid 52084] [client 94.154.239.69:41132] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afWx3kzSWr-8cpS83mhiqQAAA0c"]
[Sat May 02 16:12:16.667422 2026] [:error] [pid 53435:tid 53489] [client 94.154.239.69:42672] [client 94.154.239.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "afWx4IDmp7_z8QkjSzOK0gAAAFE"]
[Sat May 02 16:12:19.265773 2026] [:error] [pid 52124:tid 52144] [client 152.57.145.97:56741] [client 152.57.145.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.145.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWx4zjabaZ9NMm8eQt4wgAAA48"]
[Sat May 02 16:12:29.822361 2026] [:error] [pid 11894:tid 11909] [client 152.57.145.97:57082] [client 152.57.145.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.145.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWx7THh6DQF1tkXIKy72AAAAUw"]
[Sat May 02 16:12:40.420591 2026] [:error] [pid 52010:tid 52066] [client 152.57.145.97:57412] [client 152.57.145.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.145.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afWx-AiR6wohDtdeJMDdHAAAAtc"]
[Sat May 02 16:31:57.964211 2026] [:error] [pid 51950:tid 51994] [client 125.22.67.90:57576] [client 125.22.67.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.22.67.90, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afW2fYoBJzYZ3RKUhdgrQwAAAk4"]
[Sat May 02 16:32:08.542191 2026] [:error] [pid 52012:tid 52093] [client 125.22.67.90:58147] [client 125.22.67.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.22.67.90, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afW2iEzSWr-8cpS83mhk1AAAA1A"]
[Sat May 02 16:32:19.085606 2026] [:error] [pid 52012:tid 52101] [client 125.22.67.90:58576] [client 125.22.67.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.22.67.90, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afW2k0zSWr-8cpS83mhk1gAAA1c"]
[Sat May 02 16:32:29.760358 2026] [:error] [pid 53436:tid 53503] [client 125.22.67.90:59002] [client 125.22.67.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.22.67.90, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afW2na9N0xp8fccVM0DAKwAAAIQ"]
[Sat May 02 16:32:40.281303 2026] [:error] [pid 53435:tid 53491] [client 125.22.67.90:59438] [client 125.22.67.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.22.67.90, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afW2qIDmp7_z8QkjSzONBwAAAFM"]
[Sat May 02 17:13:20.541297 2026] [:error] [pid 51950:tid 51982] [client 154.192.105.125:45508] [client 154.192.105.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.192.105.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXAMIoBJzYZ3RKUhdg0qwAAAkI"]
[Sat May 02 17:13:29.400778 2026] [:error] [pid 51950:tid 51997] [client 154.192.105.125:45954] [client 154.192.105.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.192.105.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXAOYoBJzYZ3RKUhdg0tQAAAlE"]
[Sat May 02 17:13:49.236861 2026] [:error] [pid 52010:tid 52057] [client 154.192.105.125:46857] [client 154.192.105.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.192.105.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXATQiR6wohDtdeJMD80wAAAs4"]
[Sat May 02 17:14:00.597105 2026] [:error] [pid 53434:tid 53456] [client 154.192.105.125:45549] [client 154.192.105.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.192.105.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXAWO9BXmRQcbfsxlxxXAAAAA0"]
[Sat May 02 17:14:09.568576 2026] [:error] [pid 52124:tid 52137] [client 154.192.105.125:45935] [client 154.192.105.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.192.105.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXAYTjabaZ9NMm8eQt9rQAAA4g"]
[Sat May 02 17:19:33.307880 2026] [:error] [pid 22846:tid 22871] [client 87.201.228.129:1425] [client 87.201.228.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.201.228.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXBpYm1Ms03Mfhp3abwkgAAARc"]
[Sat May 02 17:20:23.015150 2026] [:error] [pid 51950:tid 51999] [client 87.201.228.129:50044] [client 87.201.228.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.201.228.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXB14oBJzYZ3RKUhdg2VAAAAlM"]
[Sat May 02 17:20:55.582710 2026] [:error] [pid 52012:tid 52079] [client 87.201.228.129:5741] [client 87.201.228.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.201.228.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXB90zSWr-8cpS83mhnuAAAA0I"]
[Sat May 02 17:21:15.595126 2026] [:error] [pid 11894:tid 11914] [client 87.201.228.129:60025] [client 87.201.228.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.201.228.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXCCzHh6DQF1tkXIKzGhwAAAVE"]
[Sat May 02 17:21:26.983437 2026] [:error] [pid 53434:tid 53460] [client 87.201.228.129:60030] [client 87.201.228.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.201.228.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXCFu9BXmRQcbfsxlxyrQAAABE"]
[Sat May 02 17:35:26.796151 2026] [:error] [pid 53435:tid 53490] [client 154.251.104.184:53095] [client 154.251.104.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.251.104.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXFXoDmp7_z8QkjSzOR6QAAAFI"]
[Sat May 02 17:35:47.449559 2026] [:error] [pid 51950:tid 51980] [client 154.251.104.184:53910] [client 154.251.104.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.251.104.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXFc4oBJzYZ3RKUhdg5gwAAAkA"]
[Sat May 02 17:35:57.334607 2026] [:error] [pid 53435:tid 53485] [client 154.251.104.184:54225] [client 154.251.104.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.251.104.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXFfYDmp7_z8QkjSzOSCwAAAE0"]
[Sat May 02 17:36:23.117247 2026] [:error] [pid 11894:tid 11901] [client 154.251.104.184:54896] [client 154.251.104.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.251.104.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXFlzHh6DQF1tkXIKzIeAAAAUQ"]
[Sat May 02 17:36:54.180704 2026] [:error] [pid 52010:tid 52050] [client 154.251.104.184:55904] [client 154.251.104.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.251.104.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXFtgiR6wohDtdeJMACvQAAAsc"]
[Sat May 02 18:06:09.613144 2026] [:error] [pid 53435:tid 53476] [client 129.211.172.249:53952] [client 129.211.172.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afXMkYDmp7_z8QkjSzOYhgAAAEQ"]
[Sat May 02 18:17:58.938776 2026] [:error] [pid 53434:tid 53461] [client 49.43.232.220:14315] [client 49.43.232.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.232.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXPVu9BXmRQcbfsxlx5UQAAABI"]
[Sat May 02 18:18:09.340678 2026] [:error] [pid 53435:tid 53474] [client 49.43.232.220:51476] [client 49.43.232.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.232.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXPYYDmp7_z8QkjSzOa7QAAAEI"]
[Sat May 02 18:18:19.961329 2026] [:error] [pid 53436:tid 53499] [client 49.43.232.220:51781] [client 49.43.232.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.232.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXPa69N0xp8fccVM0DIsQAAAIA"]
[Sat May 02 18:18:30.597852 2026] [:error] [pid 53435:tid 53494] [client 49.43.232.220:52079] [client 49.43.232.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.232.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXPdoDmp7_z8QkjSzObBQAAAFY"]
[Sat May 02 18:18:41.232832 2026] [:error] [pid 52012:tid 52083] [client 49.43.232.220:52418] [client 49.43.232.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.232.220, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXPgUzSWr-8cpS83mh0jgAAA0Y"]
[Sat May 02 18:29:17.506265 2026] [:error] [pid 51950:tid 52001] [client 198.98.57.91:56061] [client 198.98.57.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.57.91, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afXR_YoBJzYZ3RKUhdhAmwAAAlU"]
[Sat May 02 18:29:19.718639 2026] [proxy_fcgi:error] [pid 51950:tid 52001] [client 198.98.57.91:56061] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 02 18:29:19.949367 2026] [:error] [pid 51950:tid 51997] [client 198.98.57.91:56061] [client 198.98.57.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.57.91, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afXR_4oBJzYZ3RKUhdhAngAAAlE"]
[Sat May 02 18:29:20.860850 2026] [proxy_fcgi:error] [pid 51950:tid 51997] [client 198.98.57.91:56061] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 02 18:37:26.303037 2026] [:error] [pid 52010:tid 52059] [client 103.245.17.222:60352] [client 103.245.17.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.245.17.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXT5giR6wohDtdeJMAM0AAAAtA"]
[Sat May 02 18:37:36.606906 2026] [:error] [pid 52012:tid 52085] [client 103.245.17.222:60814] [client 103.245.17.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.245.17.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXT8EzSWr-8cpS83mh8QAAAA0g"]
[Sat May 02 18:37:47.642674 2026] [:error] [pid 52012:tid 52089] [client 103.245.17.222:61260] [client 103.245.17.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.245.17.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXT-0zSWr-8cpS83mh8TgAAA0w"]
[Sat May 02 18:37:58.489068 2026] [:error] [pid 52012:tid 52085] [client 103.245.17.222:61658] [client 103.245.17.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.245.17.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXUBkzSWr-8cpS83mh8hgAAA0g"]
[Sat May 02 18:38:08.914673 2026] [:error] [pid 52010:tid 52045] [client 103.245.17.222:62041] [client 103.245.17.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.245.17.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXUEAiR6wohDtdeJMANEAAAAsI"]
[Sat May 02 18:45:09.132376 2026] [:error] [pid 53434:tid 53455] [client 209.141.37.194:52760] [client 209.141.37.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afXVte9BXmRQcbfsxlx8ggAAAAw"]
[Sat May 02 18:45:09.996214 2026] [proxy_fcgi:error] [pid 53434:tid 53455] [client 209.141.37.194:52760] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 02 18:45:10.215948 2026] [:error] [pid 53434:tid 53445] [client 209.141.37.194:52760] [client 209.141.37.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afXVtu9BXmRQcbfsxlx8hAAAAAI"]
[Sat May 02 18:45:11.242706 2026] [proxy_fcgi:error] [pid 53434:tid 53445] [client 209.141.37.194:52760] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 02 18:46:05.914434 2026] [:error] [pid 11894:tid 11906] [client 49.51.132.100:54130] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afXV7THh6DQF1tkXIKzPhQAAAUk"]
[Sat May 02 19:10:04.659075 2026] [:error] [pid 52010:tid 52052] [client 40.76.106.64:64333] [client 40.76.106.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 40.76.106.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/xmlrpc.php"] [unique_id "afXbjAiR6wohDtdeJMAS9QAAAsk"]
[Sat May 02 19:13:06.067749 2026] [:error] [pid 53435:tid 53476] [client 188.119.34.70:34354] [client 188.119.34.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.119.34.70, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXcQoDmp7_z8QkjSzOobAAAAEQ"]
[Sat May 02 19:13:16.915115 2026] [:error] [pid 52010:tid 52051] [client 188.119.34.70:34537] [client 188.119.34.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.119.34.70, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXcTAiR6wohDtdeJMATxAAAAsg"]
[Sat May 02 19:13:27.517276 2026] [:error] [pid 52012:tid 52075] [client 188.119.34.70:33445] [client 188.119.34.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.119.34.70, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXcV0zSWr-8cpS83miHxQAAA0A"]
[Sat May 02 19:13:38.140929 2026] [:error] [pid 52012:tid 52093] [client 188.119.34.70:33822] [client 188.119.34.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.119.34.70, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXcYkzSWr-8cpS83miHzAAAA1A"]
[Sat May 02 19:13:48.803793 2026] [:error] [pid 53435:tid 53478] [client 188.119.34.70:33415] [client 188.119.34.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.119.34.70, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXcbIDmp7_z8QkjSzOojgAAAEY"]
[Sat May 02 19:55:22.489164 2026] [:error] [pid 22846:tid 22868] [client 49.43.157.174:60297] [client 49.43.157.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.157.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXmKom1Ms03Mfhp3ab6DgAAARQ"]
[Sat May 02 19:55:33.100133 2026] [:error] [pid 53435:tid 53484] [client 49.43.157.174:60891] [client 49.43.157.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.157.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXmNYDmp7_z8QkjSzOzUQAAAEw"]
[Sat May 02 19:55:43.684148 2026] [:error] [pid 52010:tid 52066] [client 49.43.157.174:61314] [client 49.43.157.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.157.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXmPwiR6wohDtdeJMAbowAAAtc"]
[Sat May 02 19:55:54.033482 2026] [:error] [pid 51917:tid 51935] [client 49.43.157.174:61659] [client 49.43.157.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.157.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXmSq7wZviJ7BgcCi9I6gAAAdA"]
[Sat May 02 19:56:04.669946 2026] [:error] [pid 53434:tid 53461] [client 49.43.157.174:62010] [client 49.43.157.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.157.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afXmVO9BXmRQcbfsxlyEeQAAABI"]
[Sat May 02 23:28:48.534640 2026] [:error] [pid 52010:tid 52045] [client 177.132.183.16:56234] [client 177.132.183.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.132.183.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYYMAiR6wohDtdeJMBGfgAAAsI"]
[Sat May 02 23:28:57.730564 2026] [:error] [pid 53435:tid 53480] [client 177.132.183.16:56798] [client 177.132.183.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.132.183.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYYOYDmp7_z8QkjSzPrWQAAAEg"]
[Sat May 02 23:29:08.332208 2026] [:error] [pid 51917:tid 51939] [client 177.132.183.16:57347] [client 177.132.183.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.132.183.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYYRK7wZviJ7BgcCi9hSAAAAdQ"]
[Sat May 02 23:29:18.866934 2026] [:error] [pid 52124:tid 52153] [client 177.132.183.16:57769] [client 177.132.183.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.132.183.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYYTjjabaZ9NMm8eQuTeAAAA5g"]
[Sat May 02 23:29:29.416787 2026] [:error] [pid 52012:tid 52079] [client 177.132.183.16:58182] [client 177.132.183.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.132.183.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYYWUzSWr-8cpS83mjkLQAAA0I"]
[Sat May 02 23:45:58.102363 2026] [:error] [pid 51950:tid 51991] [client 179.110.176.151:49700] [client 179.110.176.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.110.176.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYcNooBJzYZ3RKUhdh3iwAAAks"]
[Sat May 02 23:46:07.435832 2026] [:error] [pid 53435:tid 53473] [client 179.110.176.151:50091] [client 179.110.176.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.110.176.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYcP4Dmp7_z8QkjSzPxJgAAAEE"]
[Sat May 02 23:46:18.271078 2026] [:error] [pid 52010:tid 52065] [client 179.110.176.151:50441] [client 179.110.176.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.110.176.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYcSgiR6wohDtdeJMBKoAAAAtY"]
[Sat May 02 23:46:28.679745 2026] [:error] [pid 52012:tid 52081] [client 179.110.176.151:50847] [client 179.110.176.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.110.176.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYcVEzSWr-8cpS83mjqzgAAA0Q"]
[Sat May 02 23:46:39.199170 2026] [:error] [pid 52012:tid 52084] [client 179.110.176.151:51242] [client 179.110.176.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.110.176.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYcX0zSWr-8cpS83mjq_QAAA0c"]
[Sun May 03 00:04:45.965181 2026] [:error] [pid 51950:tid 51990] [client 193.179.61.52:56608] [client 193.179.61.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.179.61.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYgnYoBJzYZ3RKUhdh6wAAAAko"]
[Sun May 03 00:04:56.310432 2026] [:error] [pid 52012:tid 52101] [client 193.179.61.52:64382] [client 193.179.61.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.179.61.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYgqEzSWr-8cpS83mjziwAAA1c"]
[Sun May 03 00:05:07.015824 2026] [:error] [pid 53435:tid 53492] [client 193.179.61.52:8137] [client 193.179.61.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.179.61.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afYgs4Dmp7_z8QkjSzP2VgAAAFQ"]
[Sun May 03 01:40:28.890436 2026] [:error] [pid 53434:tid 53463] [client 43.159.145.153:45254] [client 43.159.145.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afY3DO9BXmRQcbfsxly4fQAAABQ"]
[Sun May 03 04:09:50.185467 2026] [:error] [pid 40639:tid 40719] [client 74.249.131.171:54628] [client 74.249.131.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.249.131.171, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/xmlrpc.php"] [unique_id "afZaDq9rkyoICq7qxvFFSQAAAJI"]
[Sun May 03 06:50:38.366531 2026] [:error] [pid 37130:tid 37227] [client 162.14.66.219:59724] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afZ_vqIu7bmXKXicRk8kjAAAAI4"]
[Sun May 03 07:17:05.786387 2026] [:error] [pid 37127:tid 37203] [client 41.249.147.213:56197] [client 41.249.147.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.249.147.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afaF8f8khJXb5O5aWVXR2wAAAFI"]
[Sun May 03 07:17:15.902475 2026] [:error] [pid 37127:tid 37202] [client 41.249.147.213:56510] [client 41.249.147.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.249.147.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afaF-_8khJXb5O5aWVXR4AAAAFE"]
[Sun May 03 07:17:26.610590 2026] [:error] [pid 37246:tid 37259] [client 41.249.147.213:56730] [client 41.249.147.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.249.147.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afaGBjhvYFGNwhnPampfhAAAAQo"]
[Sun May 03 07:17:37.236342 2026] [:error] [pid 37127:tid 37200] [client 41.249.147.213:56928] [client 41.249.147.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.249.147.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afaGEf8khJXb5O5aWVXR8gAAAE8"]
[Sun May 03 07:17:47.870452 2026] [:error] [pid 37126:tid 37167] [client 41.249.147.213:57128] [client 41.249.147.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.249.147.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afaGG_R_A42N-LtDyrvYlQAAAA4"]
[Sun May 03 07:57:18.995746 2026] [:error] [pid 37246:tid 37268] [client 89.211.139.203:61278] [client 89.211.139.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.211.139.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afaPXjhvYFGNwhnPampxhwAAARI"]
[Sun May 03 07:57:28.308670 2026] [:error] [pid 40456:tid 40462] [client 89.211.139.203:52181] [client 89.211.139.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.211.139.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afaPaDSujTvwdzEkjSfVXAAAAYQ"]
[Sun May 03 07:57:38.668429 2026] [:error] [pid 37246:tid 37270] [client 89.211.139.203:49885] [client 89.211.139.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.211.139.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afaPcjhvYFGNwhnPampxjwAAARQ"]
[Sun May 03 07:57:49.050358 2026] [:error] [pid 37130:tid 37236] [client 89.211.139.203:59692] [client 89.211.139.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.211.139.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afaPfaIu7bmXKXicRk8xjQAAAJc"]
[Sun May 03 07:57:59.414350 2026] [:error] [pid 37127:tid 37188] [client 89.211.139.203:52384] [client 89.211.139.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.211.139.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afaPh_8khJXb5O5aWVXZ5QAAAEQ"]
[Sun May 03 09:23:16.118428 2026] [:error] [pid 40422:tid 40437] [client 54.36.60.82:51538] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afajhEHBbBLrXh6PBuuhiAAAAUs"]
[Sun May 03 09:23:18.513034 2026] [:error] [pid 40386:tid 40406] [client 54.36.60.82:35508] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afajhlHJDYRXUf3IbRTodwAAANI"]
[Sun May 03 09:23:20.938005 2026] [:error] [pid 40422:tid 40446] [client 54.36.60.82:35516] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afajiEHBbBLrXh6PBuuhkAAAAVQ"]
[Sun May 03 09:23:23.258295 2026] [:error] [pid 40386:tid 40407] [client 54.36.60.82:35520] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afaji1HJDYRXUf3IbRToeQAAANM"]
[Sun May 03 09:23:25.682032 2026] [:error] [pid 37126:tid 37177] [client 54.36.60.82:38398] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afajjfR_A42N-LtDyrvnigAAABg"]
[Sun May 03 09:23:28.078555 2026] [:error] [pid 37130:tid 37214] [client 54.36.60.82:38408] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afajkKIu7bmXKXicRk9AFgAAAIE"]
[Sun May 03 09:23:30.477028 2026] [:error] [pid 37130:tid 37226] [client 54.36.60.82:38420] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afajkqIu7bmXKXicRk9AFwAAAI0"]
[Sun May 03 09:23:33.053251 2026] [:error] [pid 40386:tid 40388] [client 54.36.60.82:38426] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "afajlVHJDYRXUf3IbRTofAAAAMA"]
[Sun May 03 09:23:35.353691 2026] [:error] [pid 37246:tid 37267] [client 54.36.60.82:42708] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "afajlzhvYFGNwhnPamqPCgAAARE"]
[Sun May 03 09:23:37.871197 2026] [:error] [pid 37126:tid 37169] [client 54.36.60.82:42722] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afajmfR_A42N-LtDyrvnlQAAABA"]
[Sun May 03 09:23:40.290346 2026] [:error] [pid 40386:tid 40392] [client 54.36.60.82:42726] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afajnFHJDYRXUf3IbRTohQAAAMQ"]
[Sun May 03 09:23:42.792624 2026] [:error] [pid 37246:tid 37257] [client 54.36.60.82:42734] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "afajnjhvYFGNwhnPamqPDwAAAQk"]
[Sun May 03 09:23:45.300941 2026] [:error] [pid 40422:tid 40432] [client 54.36.60.82:60230] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "afajoUHBbBLrXh6PBuuhvQAAAUY"]
[Sun May 03 09:23:47.807040 2026] [:error] [pid 40422:tid 40447] [client 54.36.60.82:60236] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "afajo0HBbBLrXh6PBuuhxQAAAVU"]
[Sun May 03 09:23:50.341569 2026] [:error] [pid 40456:tid 40461] [client 54.36.60.82:60244] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "afajpjSujTvwdzEkjSfsWwAAAYM"]
[Sun May 03 09:23:52.858820 2026] [:error] [pid 40422:tid 40450] [client 54.36.60.82:60246] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "afajqEHBbBLrXh6PBuuhzQAAAVg"]
[Sun May 03 09:23:55.361213 2026] [:error] [pid 37127:tid 37203] [client 54.36.60.82:51516] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "afajq_8khJXb5O5aWVXsIgAAAFI"]
[Sun May 03 09:23:57.879432 2026] [:error] [pid 37130:tid 37217] [client 54.36.60.82:51528] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "afajraIu7bmXKXicRk9AIwAAAIQ"]
[Sun May 03 09:24:00.380313 2026] [:error] [pid 37246:tid 37251] [client 54.36.60.82:51538] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "afajsDhvYFGNwhnPamqPHAAAAQM"]
[Sun May 03 09:24:02.887375 2026] [:error] [pid 37126:tid 37166] [client 54.36.60.82:51554] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "afajsvR_A42N-LtDyrvnmQAAAA0"]
[Sun May 03 09:24:05.405417 2026] [:error] [pid 37246:tid 37271] [client 54.36.60.82:34188] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "afajtThvYFGNwhnPamqPHwAAARU"]
[Sun May 03 09:24:07.897544 2026] [:error] [pid 40422:tid 40445] [client 54.36.60.82:34198] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "afajt0HBbBLrXh6PBuuh2AAAAVM"]
[Sun May 03 09:24:10.434126 2026] [:error] [pid 37246:tid 37267] [client 54.36.60.82:34210] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "afajujhvYFGNwhnPamqPMAAAARE"]
[Sun May 03 09:24:12.941840 2026] [:error] [pid 37127:tid 37200] [client 54.36.60.82:34224] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "afajvP8khJXb5O5aWVXsLAAAAE8"]
[Sun May 03 09:24:43.435174 2026] [:error] [pid 40422:tid 40449] [client 54.36.60.82:42044] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afaj20HBbBLrXh6PBuuiAAAAAVc"]
[Sun May 03 09:24:45.913998 2026] [:error] [pid 40386:tid 40406] [client 54.36.60.82:33480] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "afaj3VHJDYRXUf3IbRTopgAAANI"]
[Sun May 03 09:24:48.305019 2026] [:error] [pid 37127:tid 37196] [client 54.36.60.82:33488] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "afaj4P8khJXb5O5aWVXsQwAAAEw"]
[Sun May 03 09:24:50.806581 2026] [:error] [pid 37246:tid 37262] [client 54.36.60.82:33498] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "afaj4jhvYFGNwhnPamqPZwAAAQw"]
[Sun May 03 09:24:53.347923 2026] [:error] [pid 40456:tid 40466] [client 54.36.60.82:33514] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "afaj5TSujTvwdzEkjSfsewAAAYg"]
[Sun May 03 09:24:55.857831 2026] [:error] [pid 37130:tid 37216] [client 54.36.60.82:34768] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "afaj56Iu7bmXKXicRk9AOwAAAIM"]
[Sun May 03 09:24:58.366789 2026] [:error] [pid 40456:tid 40482] [client 54.36.60.82:34776] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "afaj6jSujTvwdzEkjSfsfwAAAZg"]
[Sun May 03 09:25:00.859572 2026] [:error] [pid 37130:tid 37228] [client 54.36.60.82:34790] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "afaj7KIu7bmXKXicRk9APwAAAI8"]
[Sun May 03 09:25:03.389097 2026] [:error] [pid 37126:tid 37153] [client 54.36.60.82:34804] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "afaj7_R_A42N-LtDyrvnpgAAAAI"]
[Sun May 03 09:25:05.892867 2026] [:error] [pid 40422:tid 40433] [client 54.36.60.82:45060] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "afaj8UHBbBLrXh6PBuuiCAAAAUc"]
[Sun May 03 09:25:08.372059 2026] [:error] [pid 37246:tid 37273] [client 54.36.60.82:45074] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "afaj9DhvYFGNwhnPamqPhAAAARc"]
[Sun May 03 09:25:10.879499 2026] [:error] [pid 37246:tid 37252] [client 54.36.60.82:45082] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "afaj9jhvYFGNwhnPamqPhwAAAQQ"]
[Sun May 03 09:25:13.401197 2026] [:error] [pid 40422:tid 40435] [client 54.36.60.82:45088] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "afaj-UHBbBLrXh6PBuuiDgAAAUk"]
[Sun May 03 09:25:15.884640 2026] [:error] [pid 37246:tid 37254] [client 54.36.60.82:51160] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "afaj-zhvYFGNwhnPamqPiwAAAQY"]
[Sun May 03 09:25:18.206474 2026] [:error] [pid 37130:tid 37231] [client 54.36.60.82:51164] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "afaj_qIu7bmXKXicRk9ARAAAAJI"]
[Sun May 03 09:25:20.706366 2026] [:error] [pid 40386:tid 40404] [client 54.36.60.82:51180] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "afakAFHJDYRXUf3IbRTovgAAANA"]
[Sun May 03 09:25:23.028057 2026] [:error] [pid 40386:tid 40405] [client 54.36.60.82:51192] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afakA1HJDYRXUf3IbRTowQAAANE"]
[Sun May 03 09:25:25.524125 2026] [:error] [pid 40456:tid 40471] [client 54.36.60.82:59902] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afakBTSujTvwdzEkjSfshQAAAY0"]
[Sun May 03 09:25:28.013571 2026] [:error] [pid 37126:tid 37165] [client 54.36.60.82:59910] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afakCPR_A42N-LtDyrvnqQAAAAw"]
[Sun May 03 09:25:30.340776 2026] [:error] [pid 40422:tid 40436] [client 54.36.60.82:59920] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afakCkHBbBLrXh6PBuuiFwAAAUo"]
[Sun May 03 09:25:32.822551 2026] [:error] [pid 40456:tid 40468] [client 54.36.60.82:59928] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afakDDSujTvwdzEkjSfsiAAAAYo"]
[Sun May 03 09:25:35.171203 2026] [:error] [pid 40422:tid 40435] [client 54.36.60.82:60958] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afakD0HBbBLrXh6PBuuiIwAAAUk"]
[Sun May 03 09:25:37.648844 2026] [:error] [pid 40422:tid 40431] [client 54.36.60.82:60960] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afakEUHBbBLrXh6PBuuiKgAAAUU"]
[Sun May 03 09:25:40.143966 2026] [:error] [pid 37127:tid 37199] [client 54.36.60.82:60972] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "afakFP8khJXb5O5aWVXsZgAAAE4"]
[Sun May 03 09:26:11.128170 2026] [:error] [pid 37127:tid 37202] [client 54.36.60.82:60984] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "afakM_8khJXb5O5aWVXshgAAAFE"]
[Sun May 03 09:26:13.568457 2026] [:error] [pid 40422:tid 40449] [client 54.36.60.82:37148] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "afakNUHBbBLrXh6PBuuiVgAAAVc"]
[Sun May 03 09:26:16.051725 2026] [:error] [pid 37130:tid 37237] [client 54.36.60.82:56380] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "afakOKIu7bmXKXicRk9AVwAAAJg"]
[Sun May 03 09:26:18.542555 2026] [:error] [pid 37127:tid 37209] [client 54.36.60.82:56388] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "afakOv8khJXb5O5aWVXsiQAAAFc"]
[Sun May 03 09:26:21.040075 2026] [:error] [pid 37126:tid 37170] [client 54.36.60.82:56398] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afakPfR_A42N-LtDyrvnuQAAABE"]
[Sun May 03 09:26:23.548324 2026] [:error] [pid 37246:tid 37269] [client 54.36.60.82:56404] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "afakPzhvYFGNwhnPamqP6AAAARM"]
[Sun May 03 09:26:26.038530 2026] [:error] [pid 37246:tid 37255] [client 54.36.60.82:47296] [client 54.36.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "afakQjhvYFGNwhnPamqP7AAAAQc"]
[Sun May 03 09:40:25.713499 2026] [:error] [pid 40456:tid 40460] [client 209.141.37.194:56059] [client 209.141.37.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afaniTSujTvwdzEkjSfwZQAAAYI"]
[Sun May 03 09:40:26.673703 2026] [proxy_fcgi:error] [pid 40456:tid 40460] [client 209.141.37.194:56059] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 03 09:42:17.111286 2026] [:error] [pid 40456:tid 40464] [client 209.141.37.194:62664] [client 209.141.37.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afan-TSujTvwdzEkjSfw2wAAAYY"]
[Sun May 03 09:42:18.125680 2026] [proxy_fcgi:error] [pid 40456:tid 40464] [client 209.141.37.194:62664] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 03 10:34:41.841178 2026] [:error] [pid 40422:tid 40446] [client 209.141.37.194:50953] [client 209.141.37.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afa0QUHBbBLrXh6PBuu6zAAAAVQ"]
[Sun May 03 10:34:42.735352 2026] [proxy_fcgi:error] [pid 40422:tid 40446] [client 209.141.37.194:50953] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 03 11:12:12.383673 2026] [:error] [pid 40456:tid 40470] [client 107.189.29.201:62909] [client 107.189.29.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afa9DDSujTvwdzEkjScCnwAAAYw"]
[Sun May 03 11:12:13.295561 2026] [proxy_fcgi:error] [pid 40456:tid 40470] [client 107.189.29.201:62909] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 03 11:12:13.554767 2026] [:error] [pid 40456:tid 40466] [client 107.189.29.201:62909] [client 107.189.29.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.201, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afa9DTSujTvwdzEkjScCpAAAAYg"]
[Sun May 03 11:12:14.446247 2026] [proxy_fcgi:error] [pid 40456:tid 40466] [client 107.189.29.201:62909] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 03 11:33:01.164515 2026] [:error] [pid 37246:tid 37264] [client 181.51.32.129:6069] [client 181.51.32.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.51.32.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afbB7ThvYFGNwhnPamqwXwAAAQ4"]
[Sun May 03 11:39:02.162207 2026] [:error] [pid 40422:tid 40448] [client 181.51.32.129:15338] [client 181.51.32.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afbDVkHBbBLrXh6PBuvR3AAAAVY"]
[Sun May 03 13:04:18.854921 2026] [:error] [pid 40422:tid 40431] [client 206.42.60.129:52462] [client 206.42.60.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.42.60.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afbXUkHBbBLrXh6PBuvtgAAAAUU"]
[Sun May 03 13:04:28.351050 2026] [:error] [pid 40422:tid 40427] [client 206.42.60.129:52835] [client 206.42.60.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.42.60.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afbXXEHBbBLrXh6PBuvtnQAAAUE"]
[Sun May 03 13:04:38.847158 2026] [:error] [pid 37127:tid 37184] [client 206.42.60.129:53172] [client 206.42.60.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.42.60.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afbXZv8khJXb5O5aWVUQYQAAAEA"]
[Sun May 03 13:04:49.294477 2026] [:error] [pid 37246:tid 37269] [client 206.42.60.129:53507] [client 206.42.60.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.42.60.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afbXcThvYFGNwhnPamrHpgAAARM"]
[Sun May 03 13:04:59.807596 2026] [:error] [pid 40422:tid 40426] [client 206.42.60.129:53844] [client 206.42.60.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.42.60.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afbXe0HBbBLrXh6PBuvt6wAAAUA"]
[Sun May 03 13:59:16.164031 2026] [:error] [pid 40422:tid 40436] [client 50.87.144.21:35568] [client 50.87.144.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afbkNEHBbBLrXh6PBusCwAAAAUo"]
[Sun May 03 13:59:25.554973 2026] [:error] [pid 40386:tid 40404] [client 49.213.3.151:56940] [client 49.213.3.151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afbkPVHJDYRXUf3IbRQJVAAAANA"]
[Sun May 03 14:58:22.578906 2026] [:error] [pid 37246:tid 37252] [client 103.106.232.67:52835] [client 103.106.232.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.106.232.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afbyDjhvYFGNwhnPamrq4gAAAQQ"]
[Sun May 03 14:58:32.989821 2026] [:error] [pid 37130:tid 37222] [client 103.106.232.67:53158] [client 103.106.232.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.106.232.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afbyGKIu7bmXKXicRk9viwAAAIk"]
[Sun May 03 14:58:43.600659 2026] [:error] [pid 37246:tid 37263] [client 103.106.232.67:53462] [client 103.106.232.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.106.232.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afbyIzhvYFGNwhnPamrq-wAAAQ0"]
[Sun May 03 14:58:54.218645 2026] [:error] [pid 40456:tid 40467] [client 103.106.232.67:53766] [client 103.106.232.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.106.232.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afbyLjSujTvwdzEkjScxTgAAAYk"]
[Sun May 03 14:59:04.821007 2026] [:error] [pid 37246:tid 37257] [client 103.106.232.67:54075] [client 103.106.232.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.106.232.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afbyODhvYFGNwhnPamrrTAAAAQk"]
[Sun May 03 15:18:36.963500 2026] [:error] [pid 34432:tid 34440] [client 103.106.232.59:54610] [client 103.106.232.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.106.232.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afb2zJ73JKVQ0wlof4IdBgAAAcY"]
[Sun May 03 15:18:47.216494 2026] [:error] [pid 40422:tid 40450] [client 103.106.232.59:55264] [client 103.106.232.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.106.232.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afb210HBbBLrXh6PBusd5AAAAVg"]
[Sun May 03 15:18:57.982169 2026] [:error] [pid 37246:tid 37264] [client 103.106.232.59:55566] [client 103.106.232.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.106.232.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afb24ThvYFGNwhnPamrxsQAAAQ4"]
[Sun May 03 15:19:08.617784 2026] [:error] [pid 40422:tid 40444] [client 103.106.232.59:55881] [client 103.106.232.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.106.232.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afb27EHBbBLrXh6PBuseGgAAAVI"]
[Sun May 03 15:19:19.209774 2026] [:error] [pid 40422:tid 40446] [client 103.106.232.59:56181] [client 103.106.232.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.106.232.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afb290HBbBLrXh6PBuseIwAAAVQ"]
[Sun May 03 15:35:56.138741 2026] [:error] [pid 37246:tid 37266] [client 198.98.59.125:62175] [client 198.98.59.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.59.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afb63DhvYFGNwhnPamr1ewAAARA"]
[Sun May 03 15:35:56.996581 2026] [proxy_fcgi:error] [pid 37246:tid 37266] [client 198.98.59.125:62175] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 03 15:36:37.575369 2026] [:error] [pid 37246:tid 37254] [client 198.98.59.125:65096] [client 198.98.59.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.59.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afb7BThvYFGNwhnPamr1lQAAAQY"]
[Sun May 03 15:36:38.477500 2026] [proxy_fcgi:error] [pid 37246:tid 37254] [client 198.98.59.125:65096] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 03 16:19:13.839113 2026] [:error] [pid 40386:tid 40408] [client 49.47.134.221:60539] [client 49.47.134.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.134.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afcFAVHJDYRXUf3IbRQY6gAAANQ"]
[Sun May 03 16:19:35.869982 2026] [:error] [pid 37126:tid 37168] [client 49.47.134.221:61023] [client 49.47.134.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.134.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afcFF_R_A42N-LtDyrsfuwAAAA8"]
[Sun May 03 16:19:47.345385 2026] [:error] [pid 37126:tid 37158] [client 49.47.134.221:61225] [client 49.47.134.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.134.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afcFI_R_A42N-LtDyrsgAAAAAAU"]
[Sun May 03 16:19:57.876209 2026] [:error] [pid 37126:tid 37156] [client 49.47.134.221:61458] [client 49.47.134.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.134.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afcFLfR_A42N-LtDyrsgigAAAAM"]
[Sun May 03 16:22:13.892060 2026] [:error] [pid 37127:tid 37208] [client 49.47.134.221:64608] [client 49.47.134.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.134.221, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afcFtf8khJXb5O5aWVUwjAAAAFY"]
[Sun May 03 21:05:18.737465 2026] [:error] [pid 34432:tid 34445] [client 59.93.255.107:56118] [client 59.93.255.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.93.255.107, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afdIDp73JKVQ0wlof4J-nwAAAcs"]
[Sun May 03 21:05:28.989960 2026] [:error] [pid 34432:tid 34452] [client 59.93.255.107:56538] [client 59.93.255.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.93.255.107, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afdIGJ73JKVQ0wlof4J-ugAAAdI"]
[Sun May 03 21:05:39.440013 2026] [:error] [pid 40422:tid 40441] [client 59.93.255.107:57116] [client 59.93.255.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.93.255.107, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afdII0HBbBLrXh6PButN5gAAAU8"]
[Sun May 03 21:05:49.995744 2026] [:error] [pid 54535:tid 54554] [client 59.93.255.107:57513] [client 59.93.255.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.93.255.107, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afdILfRyz79iR-ntJRL4nAAAAhE"]
[Sun May 03 21:06:00.546251 2026] [:error] [pid 37130:tid 37228] [client 59.93.255.107:57852] [client 59.93.255.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.93.255.107, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afdIOKIu7bmXKXicRk-K8wAAAI8"]
[Sun May 03 21:29:55.236349 2026] [:error] [pid 37126:tid 37161] [client 43.166.242.189:49088] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afdN0_R_A42N-LtDyrtKtgAAAAg"]
[Sun May 03 21:57:59.238151 2026] [:error] [pid 34432:tid 34455] [client 176.123.26.187:16974] [client 176.123.26.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.123.26.187, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afdUZ573JKVQ0wlof4KKHwAAAdU"]
[Sun May 03 21:58:08.793161 2026] [:error] [pid 54535:tid 54561] [client 176.123.26.187:6093] [client 176.123.26.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.123.26.187, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afdUcPRyz79iR-ntJRIAlgAAAhg"]
[Sun May 03 21:58:19.452910 2026] [:error] [pid 40422:tid 40450] [client 176.123.26.187:21082] [client 176.123.26.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.123.26.187, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afdUe0HBbBLrXh6PButShAAAAVg"]
[Sun May 03 21:58:30.163232 2026] [:error] [pid 37246:tid 37273] [client 176.123.26.187:33260] [client 176.123.26.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.123.26.187, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afdUhjhvYFGNwhnPamo23gAAARc"]
[Sun May 03 21:58:40.833453 2026] [:error] [pid 34432:tid 34453] [client 176.123.26.187:3077] [client 176.123.26.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.123.26.187, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afdUkJ73JKVQ0wlof4KKQAAAAdM"]
[Mon May 04 00:35:39.606978 2026] [:error] [pid 54535:tid 54556] [client 170.106.187.106:60446] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afd5W_Ryz79iR-ntJRIYuQAAAhM"]
[Mon May 04 01:58:40.342435 2026] [:error] [pid 54535:tid 54544] [client 45.118.69.93:29160] [client 45.118.69.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.69.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afeM0PRyz79iR-ntJRInuQAAAgc"]
[Mon May 04 01:59:13.192814 2026] [:error] [pid 54535:tid 54542] [client 45.118.69.93:34815] [client 45.118.69.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.69.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afeM8fRyz79iR-ntJRInvgAAAgU"]
[Mon May 04 02:00:15.835528 2026] [:error] [pid 40456:tid 40459] [client 45.118.69.93:45299] [client 45.118.69.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.69.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afeNLzSujTvwdzEkjSd0RAAAAYE"]
[Mon May 04 02:00:37.589541 2026] [:error] [pid 37130:tid 37225] [client 45.118.69.93:52226] [client 45.118.69.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.69.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afeNRaIu7bmXKXicRk-l2gAAAIw"]
[Mon May 04 02:00:51.553469 2026] [:error] [pid 40456:tid 40458] [client 45.118.69.93:54608] [client 45.118.69.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.118.69.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afeNUzSujTvwdzEkjSd0WQAAAYA"]
[Mon May 04 07:51:13.636988 2026] [:error] [pid 11959:tid 12009] [client 43.138.68.113:42106] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afffcQojk2nvxs7h5Ku__gAAANU"]
[Mon May 04 08:01:51.958467 2026] [:error] [pid 12051:tid 12064] [client 119.28.140.106:58216] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "affh7-rVB-w_PyOHK6kr9gAAAUs"]
[Mon May 04 09:04:00.913463 2026] [:error] [pid 12051:tid 12056] [client 99.234.135.34:49380] [client 99.234.135.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 99.234.135.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "affwgOrVB-w_PyOHK6lLSAAAAUM"]
[Mon May 04 09:04:11.262677 2026] [:error] [pid 33186:tid 33208] [client 99.234.135.34:49966] [client 99.234.135.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 99.234.135.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "affwi7qlqe0DcmBS9VzOxgAAABM"]
[Mon May 04 09:04:21.768359 2026] [:error] [pid 33186:tid 33194] [client 99.234.135.34:50454] [client 99.234.135.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 99.234.135.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "affwlbqlqe0DcmBS9VzO5wAAAAU"]
[Mon May 04 09:04:32.425681 2026] [:error] [pid 33186:tid 33210] [client 99.234.135.34:50850] [client 99.234.135.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 99.234.135.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "affwoLqlqe0DcmBS9VzPAAAAABU"]
[Mon May 04 09:04:43.016493 2026] [:error] [pid 12051:tid 12063] [client 99.234.135.34:51251] [client 99.234.135.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 99.234.135.34, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "affwq-rVB-w_PyOHK6lL2wAAAUo"]
[Mon May 04 09:13:56.722096 2026] [:error] [pid 33186:tid 33196] [client 20.48.152.116:61003] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "affy1Lqlqe0DcmBS9VzUJQAAAAc"]
[Mon May 04 09:13:57.585194 2026] [:error] [pid 11959:tid 11992] [client 20.48.152.116:53408] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "affy1Qojk2nvxs7h5KvWNgAAAMQ"]
[Mon May 04 09:13:58.417213 2026] [:error] [pid 33186:tid 33195] [client 20.48.152.116:17573] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "affy1rqlqe0DcmBS9VzUMAAAAAY"]
[Mon May 04 09:13:59.245533 2026] [:error] [pid 11959:tid 11996] [client 20.48.152.116:60995] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwso.php"] [unique_id "affy1wojk2nvxs7h5KvWRAAAAMg"]
[Mon May 04 09:49:22.349338 2026] [:error] [pid 12051:tid 12072] [client 104.244.73.103:60549] [client 104.244.73.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.73.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aff7IurVB-w_PyOHK6lblAAAAVM"]
[Mon May 04 09:49:24.636143 2026] [proxy_fcgi:error] [pid 12051:tid 12072] [client 104.244.73.103:60549] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 04 09:49:24.896826 2026] [:error] [pid 12051:tid 12071] [client 104.244.73.103:60549] [client 104.244.73.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.73.103, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aff7JOrVB-w_PyOHK6lbmgAAAVI"]
[Mon May 04 09:49:25.922250 2026] [proxy_fcgi:error] [pid 12051:tid 12071] [client 104.244.73.103:60549] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 04 11:28:25.368132 2026] [:error] [pid 33186:tid 33198] [client 203.83.45.43:53259] [client 203.83.45.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.83.45.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgSWbqlqe0DcmBS9VwbJwAAAAk"]
[Mon May 04 11:28:35.947252 2026] [:error] [pid 12022:tid 12031] [client 203.83.45.43:59204] [client 203.83.45.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.83.45.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgSY0VhgvCNKBWnaTJjrgAAAIc"]
[Mon May 04 11:28:46.578149 2026] [:error] [pid 64610:tid 64619] [client 203.83.45.43:65290] [client 203.83.45.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.83.45.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgSbmhJ7aZW62UOoWgkdAAAAQc"]
[Mon May 04 11:28:57.171929 2026] [:error] [pid 33186:tid 33213] [client 203.83.45.43:6604] [client 203.83.45.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.83.45.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgSebqlqe0DcmBS9VwbYAAAABg"]
[Mon May 04 11:29:07.866071 2026] [:error] [pid 33186:tid 33195] [client 203.83.45.43:12700] [client 203.83.45.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.83.45.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgSg7qlqe0DcmBS9VwbdgAAAAY"]
[Mon May 04 11:29:18.426068 2026] [:error] [pid 33186:tid 33207] [client 203.83.45.43:19336] [client 203.83.45.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.83.45.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgSjrqlqe0DcmBS9VwbiAAAABI"]
[Mon May 04 12:15:49.321063 2026] [:error] [pid 12022:tid 12047] [client 45.94.31.15:55493] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "afgddUVhgvCNKBWnaTJzkAAAAJc"]
[Mon May 04 12:15:49.811981 2026] [:error] [pid 12022:tid 12030] [client 45.94.31.15:55561] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "afgddUVhgvCNKBWnaTJzkwAAAIY"]
[Mon May 04 12:15:50.302816 2026] [:error] [pid 12051:tid 12077] [client 45.94.31.15:55634] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afgddurVB-w_PyOHK6mHZQAAAVg"]
[Mon May 04 12:15:50.797657 2026] [:error] [pid 33186:tid 33197] [client 45.94.31.15:55686] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afgddrqlqe0DcmBS9VwoQgAAAAg"]
[Mon May 04 12:15:51.302726 2026] [:error] [pid 12022:tid 12025] [client 45.94.31.15:55806] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afgdd0VhgvCNKBWnaTJzoQAAAIE"]
[Mon May 04 12:15:51.806891 2026] [:error] [pid 12022:tid 12027] [client 45.94.31.15:55878] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "afgdd0VhgvCNKBWnaTJzogAAAIM"]
[Mon May 04 12:15:52.291964 2026] [:error] [pid 64610:tid 64635] [client 45.94.31.15:56001] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/txets.php"] [unique_id "afgdeGhJ7aZW62UOoWg62gAAARc"]
[Mon May 04 12:15:52.777283 2026] [:error] [pid 12022:tid 12035] [client 45.94.31.15:56062] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schallfuns.php"] [unique_id "afgdeEVhgvCNKBWnaTJzpQAAAIs"]
[Mon May 04 12:15:53.267984 2026] [:error] [pid 11959:tid 12011] [client 45.94.31.15:56121] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "afgdeQojk2nvxs7h5Kv9CwAAANc"]
[Mon May 04 12:29:57.007436 2026] [:error] [pid 64610:tid 64623] [client 61.1.227.4:63058] [client 61.1.227.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.1.227.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afggxWhJ7aZW62UOoWhBDQAAAQs"]
[Mon May 04 12:30:08.188455 2026] [:error] [pid 33186:tid 33203] [client 61.1.227.4:63560] [client 61.1.227.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.1.227.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgg0Lqlqe0DcmBS9VwrswAAAA4"]
[Mon May 04 12:30:18.860651 2026] [:error] [pid 12022:tid 12046] [client 61.1.227.4:64066] [client 61.1.227.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.1.227.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgg2kVhgvCNKBWnaTJ3QAAAAJY"]
[Mon May 04 12:30:29.524377 2026] [:error] [pid 33186:tid 33190] [client 61.1.227.4:64366] [client 61.1.227.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.1.227.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgg5bqlqe0DcmBS9VwrwAAAAAE"]
[Mon May 04 12:30:40.085355 2026] [:error] [pid 12022:tid 12046] [client 61.1.227.4:64666] [client 61.1.227.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.1.227.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgg8EVhgvCNKBWnaTJ3SAAAAJY"]
[Mon May 04 13:14:54.459869 2026] [:error] [pid 33186:tid 33199] [client 2.90.215.58:55750] [client 2.90.215.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.90.215.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgrTrqlqe0DcmBS9Vw2KwAAAAo"]
[Mon May 04 13:15:03.362687 2026] [:error] [pid 11959:tid 11988] [client 2.90.215.58:27026] [client 2.90.215.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.90.215.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgrVwojk2nvxs7h5KsFsgAAAMA"]
[Mon May 04 13:15:13.853156 2026] [:error] [pid 64610:tid 64614] [client 2.90.215.58:24186] [client 2.90.215.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.90.215.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgrYWhJ7aZW62UOoWhVdgAAAQI"]
[Mon May 04 13:15:34.955774 2026] [:error] [pid 12051:tid 12067] [client 2.90.215.58:30137] [client 2.90.215.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.90.215.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgrdurVB-w_PyOHK6mR5gAAAU4"]
[Mon May 04 13:15:45.319448 2026] [:error] [pid 33186:tid 33200] [client 2.90.215.58:44419] [client 2.90.215.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.90.215.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgrgbqlqe0DcmBS9Vw2RwAAAAs"]
[Mon May 04 13:22:46.793648 2026] [:error] [pid 12022:tid 12042] [client 138.91.1.8:2824] [client 138.91.1.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afgtJkVhgvCNKBWnaTKHKQAAAJI"]
[Mon May 04 13:22:47.373736 2026] [:error] [pid 12022:tid 12047] [client 138.91.1.8:8329] [client 138.91.1.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afgtJ0VhgvCNKBWnaTKHKwAAAJc"]
[Mon May 04 13:22:47.860901 2026] [:error] [pid 64610:tid 64636] [client 138.91.1.8:8325] [client 138.91.1.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afgtJ2hJ7aZW62UOoWhYYAAAARg"]
[Mon May 04 13:22:48.381633 2026] [:error] [pid 33186:tid 33194] [client 138.91.1.8:2852] [client 138.91.1.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afgtKLqlqe0DcmBS9Vw4XQAAAAU"]
[Mon May 04 13:32:30.903963 2026] [:error] [pid 64610:tid 64626] [client 157.15.158.243:53420] [client 157.15.158.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.15.158.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgvbmhJ7aZW62UOoWhdbgAAAQ4"]
[Mon May 04 13:32:39.940307 2026] [:error] [pid 33186:tid 33211] [client 157.15.158.243:54009] [client 157.15.158.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.15.158.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgvd7qlqe0DcmBS9Vw6bAAAABY"]
[Mon May 04 13:32:50.537913 2026] [:error] [pid 64610:tid 64614] [client 157.15.158.243:54541] [client 157.15.158.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.15.158.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgvgmhJ7aZW62UOoWhdoAAAAQI"]
[Mon May 04 13:33:01.092769 2026] [:error] [pid 33186:tid 33197] [client 157.15.158.243:55032] [client 157.15.158.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.15.158.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgvjbqlqe0DcmBS9Vw6iwAAAAg"]
[Mon May 04 13:33:11.729076 2026] [:error] [pid 12051:tid 12068] [client 157.15.158.243:55564] [client 157.15.158.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.15.158.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afgvl-rVB-w_PyOHK6mVrwAAAU8"]
[Mon May 04 15:45:07.204246 2026] [:error] [pid 61150:tid 61165] [client 136.107.232.91:50668] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afhOg-8QXWVLiwIGVpc8fgAAAUw"]
[Mon May 04 15:45:07.633739 2026] [:error] [pid 61044:tid 61125] [client 136.107.232.91:52506] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afhOg0w8w2zZZXI6H1tmLAAAABc"]
[Mon May 04 15:45:08.076287 2026] [:error] [pid 61044:tid 61116] [client 136.107.232.91:55531] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOhEw8w2zZZXI6H1tmTwAAAA4"]
[Mon May 04 16:10:35.582044 2026] [:error] [pid 61042:tid 61053] [client 152.59.27.151:50402] [client 152.59.27.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.27.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhUe0nAPPS1fjubA9QwXAAAAMc"]
[Mon May 04 16:10:45.629409 2026] [:error] [pid 3341:tid 3356] [client 152.59.27.151:50716] [client 152.59.27.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.27.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhUhU9o3_LordU0wW71JQAAAIw"]
[Mon May 04 16:10:56.489565 2026] [:error] [pid 61043:tid 61075] [client 152.59.27.151:50977] [client 152.59.27.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.27.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhUkJ8-LwtfURjiAbByqQAAAEA"]
[Mon May 04 16:11:07.746751 2026] [:error] [pid 61043:tid 61090] [client 152.59.27.151:51237] [client 152.59.27.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.27.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhUm58-LwtfURjiAbByuwAAAE8"]
[Mon May 04 16:11:23.197957 2026] [:error] [pid 3341:tid 3364] [client 152.59.27.151:51509] [client 152.59.27.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.27.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhUq09o3_LordU0wW71TgAAAJQ"]
[Mon May 04 16:11:31.061828 2026] [:error] [pid 61150:tid 61172] [client 152.59.27.151:51751] [client 152.59.27.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.27.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhUs-8QXWVLiwIGVpdG2QAAAVM"]
[Mon May 04 16:25:34.203494 2026] [:error] [pid 61150:tid 61157] [client 103.152.100.213:64044] [client 103.152.100.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.152.100.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhX_u8QXWVLiwIGVpdLwQAAAUQ"]
[Mon May 04 16:25:44.018695 2026] [:error] [pid 61042:tid 61059] [client 103.152.100.213:27793] [client 103.152.100.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.152.100.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhYCEnAPPS1fjubA9QypgAAAM0"]
[Mon May 04 16:25:54.521428 2026] [:error] [pid 61044:tid 61109] [client 103.152.100.213:28125] [client 103.152.100.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.152.100.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhYEkw8w2zZZXI6H1tw4QAAAAc"]
[Mon May 04 16:26:04.823990 2026] [:error] [pid 61043:tid 61095] [client 103.152.100.213:28470] [client 103.152.100.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.152.100.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhYHJ8-LwtfURjiAbB6ZQAAAFQ"]
[Mon May 04 16:26:15.377473 2026] [:error] [pid 3341:tid 3357] [client 103.152.100.213:65430] [client 103.152.100.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.152.100.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhYJ09o3_LordU0wW75rAAAAI0"]
[Mon May 04 16:32:40.307308 2026] [:error] [pid 61044:tid 61121] [client 59.153.99.247:50922] [client 59.153.99.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.153.99.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhZqEw8w2zZZXI6H1tykgAAABM"]
[Mon May 04 16:32:48.377984 2026] [:error] [pid 61150:tid 61177] [client 59.153.99.247:51440] [client 59.153.99.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.153.99.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhZsO8QXWVLiwIGVpdOhAAAAVg"]
[Mon May 04 16:32:59.315696 2026] [:error] [pid 61043:tid 61099] [client 59.153.99.247:51782] [client 59.153.99.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.153.99.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhZu58-LwtfURjiAbB9cwAAAFg"]
[Mon May 04 16:33:10.281341 2026] [:error] [pid 3341:tid 3349] [client 59.153.99.247:52128] [client 59.153.99.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.153.99.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhZxk9o3_LordU0wW77ZQAAAIU"]
[Mon May 04 16:33:20.801150 2026] [:error] [pid 61044:tid 61125] [client 59.153.99.247:52442] [client 59.153.99.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.153.99.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhZ0Ew8w2zZZXI6H1tywQAAABc"]
[Mon May 04 16:40:22.657444 2026] [:error] [pid 61042:tid 61060] [client 198.98.59.125:50953] [client 198.98.59.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.59.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afhbdknAPPS1fjubA9Q1xwAAAM4"]
[Mon May 04 16:40:23.506865 2026] [proxy_fcgi:error] [pid 61042:tid 61060] [client 198.98.59.125:50953] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 04 16:41:35.263998 2026] [:error] [pid 61150:tid 61168] [client 198.98.59.125:56626] [client 198.98.59.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.59.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afhbv-8QXWVLiwIGVpdREAAAAU8"]
[Mon May 04 16:41:36.198069 2026] [proxy_fcgi:error] [pid 61150:tid 61168] [client 198.98.59.125:56626] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 04 16:46:30.560697 2026] [:error] [pid 61043:tid 61091] [client 103.178.79.77:29491] [client 103.178.79.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhc5p8-LwtfURjiAbCDQAAAAFA"]
[Mon May 04 16:46:40.668969 2026] [:error] [pid 3341:tid 3364] [client 103.178.79.77:29903] [client 103.178.79.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhc8E9o3_LordU0wW7-WgAAAJQ"]
[Mon May 04 16:46:51.254521 2026] [:error] [pid 61150:tid 61175] [client 103.178.79.77:30551] [client 103.178.79.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhc--8QXWVLiwIGVpdTUwAAAVY"]
[Mon May 04 16:47:01.934366 2026] [:error] [pid 61150:tid 61163] [client 103.178.79.77:30995] [client 103.178.79.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhdBe8QXWVLiwIGVpdTXgAAAUo"]
[Mon May 04 16:47:12.487989 2026] [:error] [pid 3341:tid 3362] [client 103.178.79.77:56392] [client 103.178.79.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afhdEE9o3_LordU0wW7-aQAAAJI"]
[Mon May 04 18:56:12.643536 2026] [:error] [pid 3341:tid 3361] [client 217.182.195.233:34758] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afh7TE9o3_LordU0wW4rUAAAAJE"]
[Mon May 04 18:56:14.975943 2026] [:error] [pid 61043:tid 61089] [client 217.182.195.233:39114] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afh7Tp8-LwtfURjiAbCoDQAAAE4"]
[Mon May 04 18:56:17.362454 2026] [:error] [pid 61044:tid 61106] [client 217.182.195.233:39122] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afh7UUw8w2zZZXI6H1uKLgAAAAQ"]
[Mon May 04 18:56:19.815778 2026] [:error] [pid 61043:tid 61091] [client 217.182.195.233:39130] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afh7U58-LwtfURjiAbCoEwAAAFA"]
[Mon May 04 18:56:22.234385 2026] [:error] [pid 61042:tid 61055] [client 217.182.195.233:56188] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afh7VknAPPS1fjubA9RH-QAAAMk"]
[Mon May 04 18:56:24.794801 2026] [:error] [pid 61043:tid 61092] [client 217.182.195.233:56200] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afh7WJ8-LwtfURjiAbCoGQAAAFE"]
[Mon May 04 18:56:27.229098 2026] [:error] [pid 32471:tid 32498] [client 217.182.195.233:56210] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afh7W3mjpb9EYq6AqhI5iwAAARg"]
[Mon May 04 18:56:29.759394 2026] [:error] [pid 61043:tid 61086] [client 217.182.195.233:56212] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "afh7XZ8-LwtfURjiAbCoKgAAAEs"]
[Mon May 04 18:56:32.269582 2026] [:error] [pid 3341:tid 3368] [client 217.182.195.233:47656] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "afh7YE9o3_LordU0wW4rbAAAAJg"]
[Mon May 04 18:56:34.773923 2026] [:error] [pid 61043:tid 61092] [client 217.182.195.233:47670] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afh7Yp8-LwtfURjiAbCoMwAAAFE"]
[Mon May 04 18:56:37.270988 2026] [:error] [pid 61043:tid 61090] [client 217.182.195.233:47674] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afh7ZZ8-LwtfURjiAbCoNwAAAE8"]
[Mon May 04 18:56:39.785891 2026] [:error] [pid 3341:tid 3353] [client 217.182.195.233:47686] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "afh7Z09o3_LordU0wW4rdwAAAIk"]
[Mon May 04 18:56:42.278249 2026] [:error] [pid 32471:tid 32491] [client 217.182.195.233:50640] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "afh7anmjpb9EYq6AqhI5qgAAARE"]
[Mon May 04 18:56:44.765702 2026] [:error] [pid 32471:tid 32476] [client 217.182.195.233:50654] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "afh7bHmjpb9EYq6AqhI5tAAAAQI"]
[Mon May 04 18:56:47.265773 2026] [:error] [pid 3341:tid 3360] [client 217.182.195.233:50668] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "afh7b09o3_LordU0wW4rjQAAAJA"]
[Mon May 04 18:56:49.755045 2026] [:error] [pid 61044:tid 61115] [client 217.182.195.233:50676] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "afh7cUw8w2zZZXI6H1uKVwAAAA0"]
[Mon May 04 18:56:52.267843 2026] [:error] [pid 61150:tid 61153] [client 217.182.195.233:45408] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "afh7dO8QXWVLiwIGVpdt_AAAAUA"]
[Mon May 04 18:56:54.755246 2026] [:error] [pid 32471:tid 32487] [client 217.182.195.233:45414] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "afh7dnmjpb9EYq6AqhI5yQAAAQ0"]
[Mon May 04 18:56:57.099278 2026] [:error] [pid 61042:tid 61061] [client 217.182.195.233:45428] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "afh7eUnAPPS1fjubA9RIGAAAAM8"]
[Mon May 04 18:56:59.591761 2026] [:error] [pid 32471:tid 32477] [client 217.182.195.233:45438] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "afh7e3mjpb9EYq6AqhI51gAAAQM"]
[Mon May 04 18:57:02.091168 2026] [:error] [pid 61042:tid 61057] [client 217.182.195.233:47660] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "afh7fknAPPS1fjubA9RIJAAAAMs"]
[Mon May 04 18:57:04.616093 2026] [:error] [pid 61150:tid 61170] [client 217.182.195.233:47662] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "afh7gO8QXWVLiwIGVpduAgAAAVE"]
[Mon May 04 18:57:07.093703 2026] [:error] [pid 32471:tid 32479] [client 217.182.195.233:47672] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "afh7g3mjpb9EYq6AqhI52QAAAQU"]
[Mon May 04 18:57:09.591587 2026] [:error] [pid 3341:tid 3344] [client 217.182.195.233:47674] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "afh7hU9o3_LordU0wW4rmwAAAIA"]
[Mon May 04 18:57:39.907311 2026] [:error] [pid 3341:tid 3359] [client 217.182.195.233:50134] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afh7o09o3_LordU0wW4r2gAAAI8"]
[Mon May 04 18:57:42.343913 2026] [:error] [pid 3341:tid 3365] [client 217.182.195.233:37148] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "afh7pk9o3_LordU0wW4r4gAAAJU"]
[Mon May 04 18:57:44.797312 2026] [:error] [pid 61042:tid 61064] [client 217.182.195.233:37154] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "afh7qEnAPPS1fjubA9RIRQAAANI"]
[Mon May 04 18:57:47.290630 2026] [:error] [pid 32471:tid 32491] [client 217.182.195.233:37170] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "afh7q3mjpb9EYq6AqhI6RQAAARE"]
[Mon May 04 18:57:49.757503 2026] [:error] [pid 3341:tid 3349] [client 217.182.195.233:37180] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "afh7rU9o3_LordU0wW4r5gAAAIU"]
[Mon May 04 18:57:52.226376 2026] [:error] [pid 32471:tid 32491] [client 217.182.195.233:51742] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "afh7sHmjpb9EYq6AqhI6UQAAARE"]
[Mon May 04 18:57:54.720519 2026] [:error] [pid 61043:tid 61099] [client 217.182.195.233:51748] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "afh7sp8-LwtfURjiAbCoogAAAFg"]
[Mon May 04 18:57:57.191760 2026] [:error] [pid 61043:tid 61088] [client 217.182.195.233:51764] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "afh7tZ8-LwtfURjiAbCopwAAAE0"]
[Mon May 04 18:57:59.675775 2026] [:error] [pid 61150:tid 61159] [client 217.182.195.233:51776] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "afh7t-8QXWVLiwIGVpduRAAAAUY"]
[Mon May 04 18:58:02.010051 2026] [:error] [pid 3341:tid 3366] [client 217.182.195.233:55200] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "afh7uk9o3_LordU0wW4r9AAAAJY"]
[Mon May 04 18:58:04.482762 2026] [:error] [pid 32471:tid 32490] [client 217.182.195.233:55210] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "afh7vHmjpb9EYq6AqhI6ZwAAARA"]
[Mon May 04 18:58:06.824227 2026] [:error] [pid 61042:tid 61053] [client 217.182.195.233:55214] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "afh7vknAPPS1fjubA9RITwAAAMc"]
[Mon May 04 18:58:09.342426 2026] [:error] [pid 61043:tid 61077] [client 217.182.195.233:55216] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "afh7wZ8-LwtfURjiAbCotgAAAEI"]
[Mon May 04 18:58:11.816516 2026] [:error] [pid 3341:tid 3368] [client 217.182.195.233:41598] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "afh7w09o3_LordU0wW4r_AAAAJg"]
[Mon May 04 18:58:14.127592 2026] [:error] [pid 61150:tid 61174] [client 217.182.195.233:41600] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "afh7xu8QXWVLiwIGVpduTAAAAVU"]
[Mon May 04 18:58:16.603834 2026] [:error] [pid 32471:tid 32489] [client 217.182.195.233:41612] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "afh7yHmjpb9EYq6AqhI6fAAAAQ8"]
[Mon May 04 18:58:19.074110 2026] [:error] [pid 61150:tid 61157] [client 217.182.195.233:41626] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afh7y-8QXWVLiwIGVpduVAAAAUQ"]
[Mon May 04 18:58:21.525131 2026] [:error] [pid 32471:tid 32490] [client 217.182.195.233:42560] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afh7zXmjpb9EYq6AqhI6hgAAARA"]
[Mon May 04 18:58:23.858335 2026] [:error] [pid 61043:tid 61092] [client 217.182.195.233:42572] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afh7z58-LwtfURjiAbCoxAAAAFE"]
[Mon May 04 18:58:26.327598 2026] [:error] [pid 32471:tid 32494] [client 217.182.195.233:42580] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afh70nmjpb9EYq6AqhI6kQAAARQ"]
[Mon May 04 18:58:28.649115 2026] [:error] [pid 3341:tid 3355] [client 217.182.195.233:42584] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afh71E9o3_LordU0wW4sDwAAAIs"]
[Mon May 04 18:58:30.957020 2026] [:error] [pid 61042:tid 61058] [client 217.182.195.233:59352] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afh71knAPPS1fjubA9RIZwAAAMw"]
[Mon May 04 18:58:33.430707 2026] [:error] [pid 32471:tid 32498] [client 217.182.195.233:59356] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afh72Xmjpb9EYq6AqhI6lwAAARg"]
[Mon May 04 18:58:35.886808 2026] [:error] [pid 3341:tid 3345] [client 217.182.195.233:59368] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "afh7209o3_LordU0wW4sHQAAAIE"]
[Mon May 04 18:59:06.257408 2026] [:error] [pid 32471:tid 32496] [client 217.182.195.233:59372] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "afh7-nmjpb9EYq6AqhI6ygAAARY"]
[Mon May 04 18:59:08.687678 2026] [:error] [pid 61043:tid 61096] [client 217.182.195.233:33428] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "afh7_J8-LwtfURjiAbCo8wAAAFU"]
[Mon May 04 18:59:10.996423 2026] [:error] [pid 61044:tid 61102] [client 217.182.195.233:38446] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "afh7_kw8w2zZZXI6H1uKtgAAAAA"]
[Mon May 04 18:59:13.456191 2026] [:error] [pid 61043:tid 61075] [client 217.182.195.233:38458] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "afh8AZ8-LwtfURjiAbCo_AAAAEA"]
[Mon May 04 18:59:15.914049 2026] [:error] [pid 61043:tid 61099] [client 217.182.195.233:38460] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afh8A58-LwtfURjiAbCpGwAAAFg"]
[Mon May 04 18:59:18.386559 2026] [:error] [pid 32471:tid 32496] [client 217.182.195.233:38474] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "afh8Bnmjpb9EYq6AqhI60gAAARY"]
[Mon May 04 18:59:20.689955 2026] [:error] [pid 3341:tid 3354] [client 217.182.195.233:56154] [client 217.182.195.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "afh8CE9o3_LordU0wW4sTgAAAIo"]
[Mon May 04 19:31:54.950641 2026] [:error] [pid 61150:tid 61176] [client 103.177.253.248:3812] [client 103.177.253.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.177.253.248, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afiDqu8QXWVLiwIGVpd1oQAAAVc"]
[Mon May 04 19:32:04.957778 2026] [:error] [pid 61044:tid 61121] [client 103.177.253.248:6938] [client 103.177.253.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.177.253.248, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afiDtEw8w2zZZXI6H1uQwgAAABM"]
[Mon May 04 19:32:15.435411 2026] [:error] [pid 32471:tid 32481] [client 103.177.253.248:9754] [client 103.177.253.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.177.253.248, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afiDv3mjpb9EYq6AqhJFXgAAAQc"]
[Mon May 04 19:32:25.964410 2026] [:error] [pid 61150:tid 61170] [client 103.177.253.248:13236] [client 103.177.253.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.177.253.248, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afiDye8QXWVLiwIGVpd1rwAAAVE"]
[Mon May 04 19:32:36.513284 2026] [:error] [pid 3341:tid 3358] [client 103.177.253.248:17389] [client 103.177.253.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.177.253.248, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afiD1E9o3_LordU0wW47MQAAAI4"]
[Mon May 04 19:57:35.861596 2026] [:error] [pid 61044:tid 61120] [client 165.227.111.47:42404] [client 165.227.111.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "afiJr0w8w2zZZXI6H1uUmQAAABI"]
[Mon May 04 19:57:35.864223 2026] [:error] [pid 32471:tid 32486] [client 165.227.111.47:42428] [client 165.227.111.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "afiJr3mjpb9EYq6AqhJM5gAAAQw"]
[Mon May 04 20:17:34.609830 2026] [:error] [pid 3341:tid 3363] [client 43.140.247.223:59940] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afiOXk9o3_LordU0wW5QAAAAAJM"]
[Mon May 04 20:24:08.023768 2026] [:error] [pid 61044:tid 61106] [client 34.24.211.32:56507] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afiP6Ew8w2zZZXI6H1uYngAAAAQ"]
[Mon May 04 20:24:08.573018 2026] [:error] [pid 3341:tid 3357] [client 34.24.211.32:62012] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afiP6E9o3_LordU0wW5ShwAAAI0"]
[Mon May 04 20:24:09.066449 2026] [:error] [pid 61043:tid 61078] [client 34.24.211.32:64780] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afiP6Z8-LwtfURjiAbC9RQAAAEM"]
[Mon May 04 21:14:07.626120 2026] [:error] [pid 61044:tid 61117] [client 152.237.100.79:52316] [client 152.237.100.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.237.100.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afibn0w8w2zZZXI6H1ugqgAAAA8"]
[Mon May 04 21:14:17.551520 2026] [:error] [pid 61042:tid 61063] [client 152.237.100.79:52723] [client 152.237.100.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.237.100.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afibqUnAPPS1fjubA9Rb0gAAANE"]
[Mon May 04 21:14:28.399547 2026] [:error] [pid 3341:tid 3351] [client 152.237.100.79:53101] [client 152.237.100.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.237.100.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afibtE9o3_LordU0wW5nVAAAAIc"]
[Mon May 04 21:14:39.173819 2026] [:error] [pid 61043:tid 61090] [client 152.237.100.79:49448] [client 152.237.100.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.237.100.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afibv58-LwtfURjiAbDIqwAAAE8"]
[Mon May 04 21:14:50.048930 2026] [:error] [pid 32471:tid 32477] [client 152.237.100.79:49841] [client 152.237.100.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.237.100.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afibynmjpb9EYq6AqhJk3wAAAQM"]
[Mon May 04 21:47:03.332170 2026] [:error] [pid 61043:tid 61093] [client 49.206.116.42:9847] [client 49.206.116.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.116.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afijV58-LwtfURjiAbDPxAAAAFI"]
[Mon May 04 21:47:13.646196 2026] [:error] [pid 3341:tid 3349] [client 49.206.116.42:9698] [client 49.206.116.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.116.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afijYU9o3_LordU0wW5zWAAAAIU"]
[Mon May 04 21:47:24.380971 2026] [:error] [pid 61044:tid 61104] [client 49.206.116.42:9306] [client 49.206.116.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.116.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afijbEw8w2zZZXI6H1umYgAAAAI"]
[Mon May 04 21:47:35.173771 2026] [:error] [pid 61044:tid 61109] [client 49.206.116.42:9704] [client 49.206.116.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.116.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afijd0w8w2zZZXI6H1umZQAAAAc"]
[Mon May 04 21:47:45.901172 2026] [:error] [pid 61042:tid 61048] [client 49.206.116.42:10024] [client 49.206.116.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.116.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afijgUnAPPS1fjubA9RgPAAAAMI"]
[Mon May 04 22:12:14.182136 2026] [:error] [pid 32471:tid 32474] [client 103.186.19.204:53588] [client 103.186.19.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.19.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afipPnmjpb9EYq6AqhJ2oQAAAQA"]
[Mon May 04 22:12:24.527011 2026] [:error] [pid 32471:tid 32496] [client 103.186.19.204:54076] [client 103.186.19.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.19.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afipSHmjpb9EYq6AqhJ2pgAAARY"]
[Mon May 04 22:12:35.136650 2026] [:error] [pid 61150:tid 61156] [client 103.186.19.204:54484] [client 103.186.19.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.19.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afipU-8QXWVLiwIGVpeUvAAAAUM"]
[Mon May 04 22:12:45.673961 2026] [:error] [pid 61042:tid 61054] [client 103.186.19.204:54888] [client 103.186.19.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.19.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afipXUnAPPS1fjubA9Ri9gAAAMg"]
[Mon May 04 22:12:56.363812 2026] [:error] [pid 61150:tid 61172] [client 103.186.19.204:55301] [client 103.186.19.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.19.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afipaO8QXWVLiwIGVpeU4QAAAVM"]
[Tue May 05 00:03:17.619417 2026] [:error] [pid 61044:tid 61111] [client 20.89.59.0:2232] [client 20.89.59.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "afjDRUw8w2zZZXI6H1u7fAAAAAk"]
[Tue May 05 00:03:18.160646 2026] [:error] [pid 61044:tid 61124] [client 20.89.59.0:2225] [client 20.89.59.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "afjDRkw8w2zZZXI6H1u7fQAAABY"]
[Tue May 05 00:03:18.689483 2026] [:error] [pid 61042:tid 61069] [client 20.89.59.0:2941] [client 20.89.59.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "afjDRknAPPS1fjubA9Ry0QAAANc"]
[Tue May 05 00:03:19.156486 2026] [:error] [pid 61042:tid 61054] [client 20.89.59.0:2900] [client 20.89.59.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "afjDR0nAPPS1fjubA9Ry0gAAAMg"]
[Tue May 05 00:36:54.350042 2026] [:error] [pid 3341:tid 3351] [client 209.87.169.245:51875] [client 209.87.169.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "afjLJk9o3_LordU0wW6yUwAAAIc"]
[Tue May 05 02:24:29.740353 2026] [:error] [pid 3341:tid 3357] [client 201.46.203.150:17147] [client 201.46.203.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.46.203.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afjkXU9o3_LordU0wW7avgAAAI0"]
[Tue May 05 02:24:40.208043 2026] [:error] [pid 61150:tid 61170] [client 201.46.203.150:53236] [client 201.46.203.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.46.203.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afjkaO8QXWVLiwIGVpfDVAAAAVE"]
[Tue May 05 02:24:50.696177 2026] [:error] [pid 61150:tid 61171] [client 201.46.203.150:17779] [client 201.46.203.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.46.203.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afjkcu8QXWVLiwIGVpfDWwAAAVI"]
[Tue May 05 02:25:01.230757 2026] [:error] [pid 61044:tid 61124] [client 201.46.203.150:53830] [client 201.46.203.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.46.203.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afjkfUw8w2zZZXI6H1vQywAAABY"]
[Tue May 05 02:25:11.677868 2026] [:error] [pid 61150:tid 61165] [client 201.46.203.150:54140] [client 201.46.203.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.46.203.150, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afjkh-8QXWVLiwIGVpfDgwAAAUw"]
[Tue May 05 03:36:29.154488 2026] [:error] [pid 61043:tid 61080] [client 151.25.234.21:55057] [client 151.25.234.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.25.234.21, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afj1PZ8-LwtfURjiAbAZkAAAAEU"]
[Tue May 05 03:36:40.990878 2026] [:error] [pid 61043:tid 61088] [client 151.25.234.21:55433] [client 151.25.234.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.25.234.21, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afj1SJ8-LwtfURjiAbAZmAAAAE0"]
[Tue May 05 03:36:53.264755 2026] [:error] [pid 32471:tid 32478] [client 151.25.234.21:55796] [client 151.25.234.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.25.234.21, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afj1VXmjpb9EYq6AqhLXggAAAQQ"]
[Tue May 05 03:37:05.221593 2026] [:error] [pid 3341:tid 3361] [client 151.25.234.21:56163] [client 151.25.234.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.25.234.21, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afj1YU9o3_LordU0wW7uhwAAAJE"]
[Tue May 05 03:37:16.690512 2026] [:error] [pid 32471:tid 32476] [client 151.25.234.21:56531] [client 151.25.234.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.25.234.21, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afj1bHmjpb9EYq6AqhLXtgAAAQI"]
[Tue May 05 03:42:15.597582 2026] [:error] [pid 61150:tid 61174] [client 104.28.214.113:44289] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/style.php"] [unique_id "afj2l-8QXWVLiwIGVpfP1wAAAVU"]
[Tue May 05 03:42:16.295503 2026] [:error] [pid 61043:tid 61091] [client 104.28.214.113:44294] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/style.php"] [unique_id "afj2mJ8-LwtfURjiAbAbHAAAAFA"]
[Tue May 05 04:50:59.560037 2026] [:error] [pid 39072:tid 39124] [client 43.164.196.47:39640] [client 43.164.196.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afkGs_olSHl4aAnrIovRLAAAAFE"]
[Tue May 05 06:58:53.697879 2026] [:error] [pid 41055:tid 41069] [client 158.62.90.178:60784] [client 158.62.90.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.90.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afkkrSepFwKgA_SKOHjFGwAAAQs"]
[Tue May 05 07:39:49.066806 2026] [:error] [pid 41055:tid 41072] [client 110.93.227.178:61197] [client 110.93.227.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.93.227.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afkuRSepFwKgA_SKOHjosgAAAQ4"]
[Tue May 05 07:40:01.104291 2026] [:error] [pid 39178:tid 39184] [client 110.93.227.178:62285] [client 110.93.227.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.93.227.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afkuUTaPrgTaiOD_15uF-wAAAMQ"]
[Tue May 05 07:40:14.788302 2026] [:error] [pid 41055:tid 41074] [client 110.93.227.178:62753] [client 110.93.227.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.93.227.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afkuXiepFwKgA_SKOHjsWQAAARA"]
[Tue May 05 07:40:26.565663 2026] [:error] [pid 39178:tid 39182] [client 110.93.227.178:63261] [client 110.93.227.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.93.227.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afkuajaPrgTaiOD_15uKXwAAAMI"]
[Tue May 05 07:40:39.445313 2026] [:error] [pid 39072:tid 39112] [client 110.93.227.178:63598] [client 110.93.227.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.93.227.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afkud_olSHl4aAnrIosFGwAAAEU"]
[Tue May 05 07:45:10.179262 2026] [autoindex:error] [pid 41055:tid 41072] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:45:23.340601 2026] [autoindex:error] [pid 41055:tid 41064] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:45:49.054382 2026] [autoindex:error] [pid 41055:tid 41071] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:45:52.494485 2026] [autoindex:error] [pid 41055:tid 41064] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:45:58.952017 2026] [autoindex:error] [pid 41055:tid 41064] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:45:59.242408 2026] [autoindex:error] [pid 41055:tid 41081] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:45:59.518318 2026] [autoindex:error] [pid 41055:tid 41068] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:45:59.797955 2026] [autoindex:error] [pid 41055:tid 41064] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:03.641600 2026] [autoindex:error] [pid 41055:tid 41072] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:03.917879 2026] [autoindex:error] [pid 41055:tid 41059] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:04.217989 2026] [autoindex:error] [pid 41055:tid 41064] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:04.507347 2026] [autoindex:error] [pid 41055:tid 41082] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:04.830770 2026] [autoindex:error] [pid 41055:tid 41074] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:05.408943 2026] [autoindex:error] [pid 41055:tid 41066] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:05.699269 2026] [autoindex:error] [pid 41055:tid 41080] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:05.983418 2026] [autoindex:error] [pid 41055:tid 41072] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:14.649611 2026] [autoindex:error] [pid 41055:tid 41078] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:14.952913 2026] [autoindex:error] [pid 41055:tid 41075] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:15.232971 2026] [autoindex:error] [pid 41055:tid 41065] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:15.504430 2026] [autoindex:error] [pid 41055:tid 41075] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:15.789427 2026] [autoindex:error] [pid 41055:tid 41082] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:16.059033 2026] [autoindex:error] [pid 41055:tid 41063] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:18.630077 2026] [autoindex:error] [pid 41055:tid 41077] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:18.922168 2026] [autoindex:error] [pid 41055:tid 41065] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:26.767111 2026] [autoindex:error] [pid 41055:tid 41076] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:32.186085 2026] [autoindex:error] [pid 41055:tid 41070] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:32.750787 2026] [autoindex:error] [pid 41055:tid 41071] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:43.299632 2026] [autoindex:error] [pid 41055:tid 41076] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:43.578998 2026] [autoindex:error] [pid 41055:tid 41059] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:53.181157 2026] [autoindex:error] [pid 41055:tid 41065] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:56.633395 2026] [autoindex:error] [pid 41055:tid 41070] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:59.966964 2026] [autoindex:error] [pid 41055:tid 41073] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:00.276476 2026] [autoindex:error] [pid 41055:tid 41076] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentythree/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:00.557991 2026] [autoindex:error] [pid 41055:tid 41060] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:00.875473 2026] [autoindex:error] [pid 41055:tid 41075] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:01.158959 2026] [autoindex:error] [pid 41055:tid 41061] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:05.672802 2026] [autoindex:error] [pid 41055:tid 41069] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:09.721511 2026] [autoindex:error] [pid 41055:tid 41082] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:10.006344 2026] [autoindex:error] [pid 41055:tid 41080] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:18.872979 2026] [autoindex:error] [pid 41055:tid 41072] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:21.195271 2026] [autoindex:error] [pid 41055:tid 41076] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:27.358794 2026] [autoindex:error] [pid 41055:tid 41071] [client 45.86.200.102:21927] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:33.328700 2026] [autoindex:error] [pid 41055:tid 41061] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/edit-widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:33.612353 2026] [autoindex:error] [pid 41055:tid 41074] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/src/Exception/Http/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:33.898586 2026] [autoindex:error] [pid 41055:tid 41070] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:34.174591 2026] [autoindex:error] [pid 41055:tid 41065] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:34.458986 2026] [autoindex:error] [pid 41055:tid 41080] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:34.742404 2026] [autoindex:error] [pid 41055:tid 41063] [client 45.86.200.102:21927] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentytwo/assets/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:48.945803 2026] [autoindex:error] [pid 53856:tid 53871] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:49.231501 2026] [autoindex:error] [pid 53856:tid 53881] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:49.528672 2026] [autoindex:error] [pid 53856:tid 53884] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:49.811530 2026] [autoindex:error] [pid 53856:tid 53878] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/coffee/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:50.091737 2026] [autoindex:error] [pid 53856:tid 53885] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/calendar/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:53.479509 2026] [autoindex:error] [pid 53856:tid 53868] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:59.344250 2026] [autoindex:error] [pid 53856:tid 53877] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2023/05/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:03.052245 2026] [autoindex:error] [pid 53856:tid 53872] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:03.326059 2026] [autoindex:error] [pid 53856:tid 53872] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:03.607020 2026] [autoindex:error] [pid 53856:tid 53883] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:03.894314 2026] [autoindex:error] [pid 53856:tid 53888] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:04.187877 2026] [autoindex:error] [pid 53856:tid 53884] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:17.888834 2026] [autoindex:error] [pid 53856:tid 53872] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:18.163912 2026] [autoindex:error] [pid 53856:tid 53884] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:24.779049 2026] [autoindex:error] [pid 53856:tid 53873] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:25.079829 2026] [autoindex:error] [pid 53856:tid 53886] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:28.460621 2026] [autoindex:error] [pid 53856:tid 53883] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/utils/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:50.015984 2026] [autoindex:error] [pid 53856:tid 53887] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:50.295609 2026] [autoindex:error] [pid 53856:tid 53876] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:50.588553 2026] [autoindex:error] [pid 53856:tid 53884] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:48:50.867537 2026] [autoindex:error] [pid 53856:tid 53888] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:49:08.386283 2026] [autoindex:error] [pid 53856:tid 53884] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:49:24.038748 2026] [autoindex:error] [pid 53856:tid 53872] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:49:24.317193 2026] [autoindex:error] [pid 53856:tid 53872] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:49:35.892452 2026] [autoindex:error] [pid 53856:tid 53876] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/themes/twentytwentyfour/patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:49:56.902530 2026] [autoindex:error] [pid 53856:tid 53879] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/imgareaselect/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:50:05.132553 2026] [autoindex:error] [pid 53856:tid 53875] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:50:05.442275 2026] [autoindex:error] [pid 53856:tid 53874] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:50:05.728041 2026] [autoindex:error] [pid 53856:tid 53876] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:50:08.068158 2026] [autoindex:error] [pid 53856:tid 53884] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:50:12.490990 2026] [autoindex:error] [pid 53856:tid 53874] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/library/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:51:03.717124 2026] [autoindex:error] [pid 53856:tid 53888] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/languages/plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:51:03.999061 2026] [autoindex:error] [pid 53856:tid 53885] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/skins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:51:12.143157 2026] [autoindex:error] [pid 53856:tid 53869] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/ui/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:51:18.368720 2026] [autoindex:error] [pid 53856:tid 53865] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:51:27.683026 2026] [autoindex:error] [pid 53856:tid 53874] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/themes/inlite/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:51:31.685353 2026] [autoindex:error] [pid 53856:tid 53872] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:51:31.979940 2026] [autoindex:error] [pid 53856:tid 53879] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:51:36.885868 2026] [autoindex:error] [pid 53856:tid 53882] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/code/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:51:37.175637 2026] [autoindex:error] [pid 53856:tid 53866] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/archives/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:51:37.506098 2026] [autoindex:error] [pid 53856:tid 53883] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/dist/components/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:51:53.107630 2026] [autoindex:error] [pid 53856:tid 53875] [client 45.86.200.77:63063] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/pullquote/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:52:05.371942 2026] [autoindex:error] [pid 39073:tid 39141] [client 45.86.200.97:24931] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/comments-pagination-numbers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:52:43.410018 2026] [autoindex:error] [pid 39073:tid 39152] [client 45.86.200.97:24931] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/details/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:52:43.695392 2026] [autoindex:error] [pid 39073:tid 39144] [client 45.86.200.97:24931] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/post-terms/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:52:49.055038 2026] [autoindex:error] [pid 39073:tid 39155] [client 45.86.200.97:24931] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/dist/development/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:52:54.269541 2026] [autoindex:error] [pid 39073:tid 39140] [client 45.86.200.97:24931] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/sodium_compat/namespaced/Core/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:53:13.420476 2026] [autoindex:error] [pid 39073:tid 39136] [client 45.86.200.97:24931] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:53:46.221822 2026] [autoindex:error] [pid 39073:tid 39144] [client 45.86.200.97:24931] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/blocks/site-title/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:54:11.844395 2026] [autoindex:error] [pid 39073:tid 39157] [client 45.86.200.97:24931] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:54:20.236695 2026] [autoindex:error] [pid 39073:tid 39142] [client 45.86.200.97:24931] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2025/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:54:20.530010 2026] [autoindex:error] [pid 39073:tid 39149] [client 45.86.200.97:24931] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2026/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 08:22:01.576927 2026] [:error] [pid 39072:tid 39118] [client 43.165.2.110:36970] [client 43.165.2.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afk4KfolSHl4aAnrIouHtQAAAEs"]
[Tue May 05 08:40:17.431730 2026] [:error] [pid 53856:tid 53872] [client 123.207.65.62:34074] [client 123.207.65.62] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afk8cXG_NPOxSH0O9aSWtgAAAUc"]
[Tue May 05 10:25:42.683616 2026] [:error] [pid 25743:tid 25753] [client 162.243.120.23:36712] [client 162.243.120.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aflVJm-PCMRhF5DdUnNjTgAAAAY"]
[Tue May 05 10:25:42.778946 2026] [:error] [pid 25835:tid 25841] [client 162.243.120.23:36728] [client 162.243.120.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aflVJlDT5nGJyh1439wnhwAAAQQ"]
[Tue May 05 10:45:17.035994 2026] [:error] [pid 25745:tid 25814] [client 180.245.112.230:57647] [client 180.245.112.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.245.112.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aflZvZsd7hb7vrvCNBm9egAAAM0"]
[Tue May 05 10:45:47.602385 2026] [:error] [pid 25745:tid 25814] [client 180.245.112.230:58584] [client 180.245.112.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.245.112.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aflZ25sd7hb7vrvCNBm9rQAAAM0"]
[Tue May 05 10:46:19.352019 2026] [:error] [pid 25745:tid 25814] [client 180.245.112.230:59259] [client 180.245.112.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.245.112.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aflZ-5sd7hb7vrvCNBm9zQAAAM0"]
[Tue May 05 10:46:50.638473 2026] [:error] [pid 25835:tid 25843] [client 180.245.112.230:60005] [client 180.245.112.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.245.112.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aflaGlDT5nGJyh1439wyIAAAAQY"]
[Tue May 05 10:47:22.628378 2026] [:error] [pid 25743:tid 25771] [client 180.245.112.230:60711] [client 180.245.112.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.245.112.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aflaOm-PCMRhF5DdUnNo8gAAABg"]
[Tue May 05 12:21:05.744217 2026] [:error] [pid 25743:tid 25755] [client 193.70.46.38:39646] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "aflwMW-PCMRhF5DdUnN-6wAAAAg"]
[Tue May 05 12:21:08.190938 2026] [:error] [pid 54732:tid 54750] [client 193.70.46.38:34856] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "aflwNLGgYlDOb3nfuJRmmwAAAFA"]
[Tue May 05 12:21:10.655044 2026] [:error] [pid 54732:tid 54738] [client 193.70.46.38:34866] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "aflwNrGgYlDOb3nfuJRmnwAAAEQ"]
[Tue May 05 12:21:13.162969 2026] [:error] [pid 25744:tid 25775] [client 193.70.46.38:43172] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "aflwOSR8IuyzjkW06OOJXgAAAIE"]
[Tue May 05 12:21:15.649249 2026] [:error] [pid 54732:tid 54741] [client 193.70.46.38:43176] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "aflwO7GgYlDOb3nfuJRmogAAAEc"]
[Tue May 05 12:21:18.150375 2026] [:error] [pid 25744:tid 25780] [client 193.70.46.38:43186] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "aflwPiR8IuyzjkW06OOJZAAAAIY"]
[Tue May 05 12:21:20.503420 2026] [:error] [pid 25744:tid 25784] [client 193.70.46.38:43194] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "aflwQCR8IuyzjkW06OOJZgAAAIo"]
[Tue May 05 12:21:23.002274 2026] [:error] [pid 54732:tid 54757] [client 193.70.46.38:43204] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "aflwQ7GgYlDOb3nfuJRmtQAAAFc"]
[Tue May 05 12:21:25.515789 2026] [:error] [pid 54732:tid 54736] [client 193.70.46.38:45764] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "aflwRbGgYlDOb3nfuJRmvAAAAEI"]
[Tue May 05 12:21:28.008211 2026] [:error] [pid 54732:tid 54746] [client 193.70.46.38:45778] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "aflwSLGgYlDOb3nfuJRmwgAAAEw"]
[Tue May 05 12:21:30.504917 2026] [:error] [pid 25744:tid 25787] [client 193.70.46.38:45794] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "aflwSiR8IuyzjkW06OOJbwAAAI0"]
[Tue May 05 12:21:32.999447 2026] [:error] [pid 54732:tid 54740] [client 193.70.46.38:45802] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "aflwTLGgYlDOb3nfuJRmzAAAAEY"]
[Tue May 05 12:21:35.474305 2026] [:error] [pid 25743:tid 25764] [client 193.70.46.38:52780] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "aflwT2-PCMRhF5DdUnN_BwAAABE"]
[Tue May 05 12:21:37.969750 2026] [:error] [pid 54732:tid 54738] [client 193.70.46.38:52792] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "aflwUbGgYlDOb3nfuJRm0gAAAEQ"]
[Tue May 05 12:21:40.297790 2026] [:error] [pid 25745:tid 25812] [client 193.70.46.38:52798] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "aflwVJsd7hb7vrvCNBnhTAAAAMs"]
[Tue May 05 12:21:42.770075 2026] [:error] [pid 25745:tid 25817] [client 193.70.46.38:52812] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "aflwVpsd7hb7vrvCNBnhTgAAANA"]
[Tue May 05 12:21:45.280798 2026] [:error] [pid 25745:tid 25825] [client 193.70.46.38:35918] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "aflwWZsd7hb7vrvCNBnhUgAAANg"]
[Tue May 05 12:21:47.762629 2026] [:error] [pid 25745:tid 25821] [client 193.70.46.38:35924] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "aflwW5sd7hb7vrvCNBnhVwAAANQ"]
[Tue May 05 12:21:50.231624 2026] [:error] [pid 25745:tid 25810] [client 193.70.46.38:35940] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "aflwXpsd7hb7vrvCNBnhWgAAAMk"]
[Tue May 05 12:21:52.718814 2026] [:error] [pid 54732:tid 54753] [client 193.70.46.38:35942] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "aflwYLGgYlDOb3nfuJRm9wAAAFM"]
[Tue May 05 12:21:55.210107 2026] [:error] [pid 25745:tid 25802] [client 193.70.46.38:52830] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "aflwY5sd7hb7vrvCNBnhYQAAAME"]
[Tue May 05 12:21:57.715009 2026] [:error] [pid 25835:tid 25854] [client 193.70.46.38:52836] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "aflwZVDT5nGJyh1439xj0AAAARE"]
[Tue May 05 12:22:00.198979 2026] [:error] [pid 54732:tid 54746] [client 193.70.46.38:52848] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "aflwaLGgYlDOb3nfuJRnAwAAAEw"]
[Tue May 05 12:22:02.519001 2026] [:error] [pid 54732:tid 54750] [client 193.70.46.38:52850] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aflwarGgYlDOb3nfuJRnDQAAAFA"]
[Tue May 05 12:22:32.776554 2026] [:error] [pid 54732:tid 54737] [client 193.70.46.38:36138] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aflwiLGgYlDOb3nfuJRnWAAAAEM"]
[Tue May 05 12:22:35.186151 2026] [:error] [pid 25744:tid 25796] [client 193.70.46.38:56602] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aflwiyR8IuyzjkW06OOJiQAAAJY"]
[Tue May 05 12:22:37.676724 2026] [:error] [pid 54732:tid 54740] [client 193.70.46.38:56612] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aflwjbGgYlDOb3nfuJRnbAAAAEY"]
[Tue May 05 12:22:40.145789 2026] [:error] [pid 54732:tid 54745] [client 193.70.46.38:56620] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aflwkLGgYlDOb3nfuJRndgAAAEs"]
[Tue May 05 12:22:42.465746 2026] [:error] [pid 25745:tid 25807] [client 193.70.46.38:56624] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aflwkpsd7hb7vrvCNBnhjQAAAMY"]
[Tue May 05 12:22:44.784365 2026] [:error] [pid 25835:tid 25847] [client 193.70.46.38:44302] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aflwlFDT5nGJyh1439xkCwAAAQo"]
[Tue May 05 12:22:47.077791 2026] [:error] [pid 25744:tid 25782] [client 193.70.46.38:44308] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aflwlyR8IuyzjkW06OOJoQAAAIg"]
[Tue May 05 12:22:49.563847 2026] [:error] [pid 54732:tid 54742] [client 193.70.46.38:44310] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aflwmbGgYlDOb3nfuJRnjQAAAEg"]
[Tue May 05 12:22:51.878746 2026] [:error] [pid 25835:tid 25855] [client 193.70.46.38:44312] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aflwm1DT5nGJyh1439xkFQAAARI"]
[Tue May 05 12:22:54.190986 2026] [:error] [pid 54732:tid 54740] [client 193.70.46.38:42830] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "aflwnrGgYlDOb3nfuJRnmAAAAEY"]
[Tue May 05 12:22:56.511705 2026] [:error] [pid 25745:tid 25808] [client 193.70.46.38:42846] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "aflwoJsd7hb7vrvCNBnhpgAAAMc"]
[Tue May 05 12:22:58.979496 2026] [:error] [pid 54732:tid 54741] [client 193.70.46.38:42852] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "aflworGgYlDOb3nfuJRnqAAAAEc"]
[Tue May 05 12:23:01.286944 2026] [:error] [pid 25745:tid 25810] [client 193.70.46.38:42864] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "aflwpZsd7hb7vrvCNBnhsQAAAMk"]
[Tue May 05 12:23:03.764689 2026] [:error] [pid 25743:tid 25768] [client 193.70.46.38:48856] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "aflwp2-PCMRhF5DdUnN_TwAAABU"]
[Tue May 05 12:23:06.094096 2026] [:error] [pid 25743:tid 25765] [client 193.70.46.38:48858] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "aflwqm-PCMRhF5DdUnN_VQAAABI"]
[Tue May 05 12:23:08.427233 2026] [:error] [pid 25745:tid 25806] [client 193.70.46.38:48870] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "aflwrJsd7hb7vrvCNBnhvgAAAMU"]
[Tue May 05 12:23:10.870957 2026] [:error] [pid 25745:tid 25809] [client 193.70.46.38:48886] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "aflwrpsd7hb7vrvCNBnhxQAAAMg"]
[Tue May 05 12:23:13.341475 2026] [:error] [pid 25743:tid 25767] [client 193.70.46.38:34550] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "aflwsW-PCMRhF5DdUnN_WwAAABQ"]
[Tue May 05 12:23:15.815306 2026] [:error] [pid 25744:tid 25792] [client 193.70.46.38:34556] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "aflwsyR8IuyzjkW06OOJvQAAAJI"]
[Tue May 05 12:23:18.141597 2026] [:error] [pid 25744:tid 25774] [client 193.70.46.38:34570] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "aflwtiR8IuyzjkW06OOJxgAAAIA"]
[Tue May 05 12:23:20.588765 2026] [:error] [pid 25744:tid 25779] [client 193.70.46.38:34580] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aflwuCR8IuyzjkW06OOJzAAAAIU"]
[Tue May 05 12:23:23.036523 2026] [:error] [pid 25835:tid 25842] [client 193.70.46.38:34584] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aflwu1DT5nGJyh1439xkOAAAAQU"]
[Tue May 05 12:23:25.508275 2026] [:error] [pid 25744:tid 25785] [client 193.70.46.38:53744] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aflwvSR8IuyzjkW06OOJ0wAAAIs"]
[Tue May 05 12:23:27.963111 2026] [:error] [pid 54732:tid 54744] [client 193.70.46.38:53748] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aflwv7GgYlDOb3nfuJRn2wAAAEo"]
[Tue May 05 12:23:56.854371 2026] [:error] [pid 25745:tid 25823] [client 193.70.46.38:53762] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aflw3Jsd7hb7vrvCNBniBwAAANY"]
[Tue May 05 12:23:59.274599 2026] [:error] [pid 25745:tid 25820] [client 193.70.46.38:50236] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aflw35sd7hb7vrvCNBniDQAAANM"]
[Tue May 05 12:24:01.556461 2026] [:error] [pid 25835:tid 25852] [client 193.70.46.38:50252] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aflw4VDT5nGJyh1439xkbQAAAQ8"]
[Tue May 05 12:24:03.857925 2026] [:error] [pid 54732:tid 54746] [client 193.70.46.38:60944] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aflw47GgYlDOb3nfuJRoEgAAAEw"]
[Tue May 05 12:24:06.311379 2026] [:error] [pid 25744:tid 25797] [client 193.70.46.38:60956] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aflw5iR8IuyzjkW06OOKMAAAAJc"]
[Tue May 05 12:24:08.748055 2026] [:error] [pid 25835:tid 25842] [client 193.70.46.38:60968] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aflw6FDT5nGJyh1439xkeQAAAQU"]
[Tue May 05 12:24:11.192777 2026] [:error] [pid 25835:tid 25858] [client 193.70.46.38:60972] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aflw61DT5nGJyh1439xkhgAAARU"]
[Tue May 05 14:14:13.968193 2026] [:error] [pid 25745:tid 25821] [client 171.48.96.104:56352] [client 171.48.96.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.48.96.104, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmKtZsd7hb7vrvCNBkAaQAAANQ"]
[Tue May 05 14:14:24.230216 2026] [:error] [pid 25745:tid 25808] [client 171.48.96.104:56915] [client 171.48.96.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.48.96.104, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmKwJsd7hb7vrvCNBkAbwAAAMc"]
[Tue May 05 14:14:35.373482 2026] [:error] [pid 54732:tid 54748] [client 171.48.96.104:57335] [client 171.48.96.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.48.96.104, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmKy7GgYlDOb3nfuJSgpwAAAE4"]
[Tue May 05 14:14:45.420117 2026] [:error] [pid 54732:tid 54749] [client 171.48.96.104:57683] [client 171.48.96.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.48.96.104, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmK1bGgYlDOb3nfuJSgtQAAAE8"]
[Tue May 05 14:14:55.934589 2026] [:error] [pid 25835:tid 25853] [client 171.48.96.104:58027] [client 171.48.96.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.48.96.104, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmK31DT5nGJyh1439yKuAAAARA"]
[Tue May 05 14:26:39.137875 2026] [:error] [pid 54732:tid 54739] [client 37.41.148.189:61321] [client 37.41.148.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.148.189, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmNn7GgYlDOb3nfuJSlVgAAAEU"]
[Tue May 05 14:28:55.400443 2026] [:error] [pid 25745:tid 25806] [client 37.41.148.189:52076] [client 37.41.148.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.148.189, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmOJ5sd7hb7vrvCNBkDtQAAAMU"]
[Tue May 05 14:29:06.848587 2026] [:error] [pid 25743:tid 25767] [client 37.41.148.189:52451] [client 37.41.148.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.148.189, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmOMm-PCMRhF5DdUnOVNgAAABQ"]
[Tue May 05 14:30:29.789543 2026] [:error] [pid 54732:tid 54739] [client 37.41.148.189:55523] [client 37.41.148.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.148.189, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmOhbGgYlDOb3nfuJSoDwAAAEU"]
[Tue May 05 14:30:40.246092 2026] [:error] [pid 25744:tid 25775] [client 37.41.148.189:55913] [client 37.41.148.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.41.148.189, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmOkCR8IuyzjkW06OOlhQAAAIE"]
[Tue May 05 14:50:17.453596 2026] [:error] [pid 25743:tid 25756] [client 42.107.209.135:57043] [client 42.107.209.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.107.209.135, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmTKW-PCMRhF5DdUnOZFAAAAAk"]
[Tue May 05 14:51:07.923158 2026] [:error] [pid 54732:tid 54748] [client 42.107.209.76:64464] [client 42.107.209.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.107.209.76, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmTW7GgYlDOb3nfuJSy8wAAAE4"]
[Tue May 05 14:55:46.560177 2026] [:error] [pid 25745:tid 25823] [client 122.161.170.122:9031] [client 122.161.170.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.170.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmUcpsd7hb7vrvCNBkKJwAAANY"]
[Tue May 05 14:56:36.147634 2026] [:error] [pid 54732:tid 54734] [client 122.161.170.122:23569] [client 122.161.170.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.170.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmUpLGgYlDOb3nfuJS1owAAAEA"]
[Tue May 05 14:57:09.900761 2026] [:error] [pid 25744:tid 25786] [client 122.161.170.122:30858] [client 122.161.170.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.170.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmUxSR8IuyzjkW06OOqqgAAAIw"]
[Tue May 05 14:57:21.074388 2026] [:error] [pid 54732:tid 54755] [client 122.161.170.122:2981] [client 122.161.170.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.170.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmU0bGgYlDOb3nfuJS11gAAAFU"]
[Tue May 05 14:57:59.772412 2026] [:error] [pid 25835:tid 25848] [client 122.161.170.122:10474] [client 122.161.170.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.170.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmU91DT5nGJyh1439yYYAAAAQs"]
[Tue May 05 15:16:07.650579 2026] [:error] [pid 25744:tid 25785] [client 42.107.209.254:34358] [client 42.107.209.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.107.209.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmZNyR8IuyzjkW06OOu7AAAAIs"]
[Tue May 05 15:16:21.733124 2026] [:error] [pid 25744:tid 25793] [client 42.107.209.254:58853] [client 42.107.209.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.107.209.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmZRSR8IuyzjkW06OOu_gAAAJM"]
[Tue May 05 15:16:32.167532 2026] [:error] [pid 25745:tid 25811] [client 42.107.209.254:21205] [client 42.107.209.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.107.209.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmZUJsd7hb7vrvCNBkQkAAAAMo"]
[Tue May 05 15:16:40.782472 2026] [:error] [pid 54732:tid 54736] [client 42.107.209.254:18023] [client 42.107.209.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.107.209.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmZWLGgYlDOb3nfuJS_0wAAAEI"]
[Tue May 05 15:17:02.773006 2026] [:error] [pid 25745:tid 25820] [client 42.107.209.254:18052] [client 42.107.209.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.107.209.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmZbpsd7hb7vrvCNBkQowAAANM"]
[Tue May 05 15:42:04.381458 2026] [:error] [pid 25835:tid 25852] [client 117.235.67.38:50645] [client 117.235.67.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.235.67.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmfTFDT5nGJyh1439ymaQAAAQ8"]
[Tue May 05 15:42:04.415504 2026] [:error] [pid 25835:tid 25843] [client 117.235.67.38:50646] [client 117.235.67.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.235.67.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmfTFDT5nGJyh1439ymagAAAQY"]
[Tue May 05 15:42:14.667006 2026] [:error] [pid 25745:tid 25802] [client 117.235.67.38:51006] [client 117.235.67.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.235.67.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmfVpsd7hb7vrvCNBkYBQAAAME"]
[Tue May 05 15:42:14.884560 2026] [:error] [pid 25745:tid 25821] [client 117.235.67.38:51010] [client 117.235.67.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.235.67.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmfVpsd7hb7vrvCNBkYBwAAANQ"]
[Tue May 05 15:42:25.271400 2026] [:error] [pid 25835:tid 25855] [client 117.235.67.38:51309] [client 117.235.67.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.235.67.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmfYVDT5nGJyh1439ymeAAAARI"]
[Tue May 05 15:42:25.553272 2026] [:error] [pid 25745:tid 25812] [client 117.235.67.38:51312] [client 117.235.67.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.235.67.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmfYZsd7hb7vrvCNBkYEgAAAMs"]
[Tue May 05 15:42:36.052212 2026] [:error] [pid 25835:tid 25839] [client 117.235.67.38:51622] [client 117.235.67.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.235.67.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmfbFDT5nGJyh1439ymiAAAAQI"]
[Tue May 05 15:42:36.333305 2026] [:error] [pid 25835:tid 25855] [client 117.235.67.38:51619] [client 117.235.67.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.235.67.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmfbFDT5nGJyh1439ymiQAAARI"]
[Tue May 05 16:06:52.249559 2026] [:error] [pid 54732:tid 54737] [client 37.34.246.247:60000] [client 37.34.246.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.34.246.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmlHLGgYlDOb3nfuJTYBgAAAEM"]
[Tue May 05 16:07:01.944989 2026] [:error] [pid 25745:tid 25818] [client 37.34.246.247:34061] [client 37.34.246.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.34.246.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmlJZsd7hb7vrvCNBkeZAAAANE"]
[Tue May 05 16:07:12.784513 2026] [:error] [pid 54732:tid 54745] [client 37.34.246.247:36384] [client 37.34.246.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.34.246.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmlMLGgYlDOb3nfuJTYJAAAAEs"]
[Tue May 05 16:07:25.383948 2026] [:error] [pid 54732:tid 54758] [client 37.34.246.247:7344] [client 37.34.246.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.34.246.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmlPbGgYlDOb3nfuJTYQgAAAFg"]
[Tue May 05 16:07:34.984620 2026] [:error] [pid 25744:tid 25778] [client 37.34.246.247:20644] [client 37.34.246.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.34.246.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmlRiR8IuyzjkW06OO5FAAAAIQ"]
[Tue May 05 16:35:49.135463 2026] [:error] [pid 25743:tid 25753] [client 103.229.252.74:51564] [client 103.229.252.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.229.252.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmr5W-PCMRhF5DdUnOqygAAAAY"]
[Tue May 05 16:35:59.256355 2026] [:error] [pid 25835:tid 25860] [client 103.229.252.74:52021] [client 103.229.252.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.229.252.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmr71DT5nGJyh1439y2PQAAARc"]
[Tue May 05 16:36:09.992422 2026] [:error] [pid 25744:tid 25787] [client 103.229.252.74:52420] [client 103.229.252.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.229.252.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmr-SR8IuyzjkW06OO9JgAAAI0"]
[Tue May 05 16:36:20.530707 2026] [:error] [pid 25835:tid 25853] [client 103.229.252.74:52822] [client 103.229.252.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.229.252.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmsBFDT5nGJyh1439y2VgAAARA"]
[Tue May 05 16:36:31.233755 2026] [:error] [pid 25743:tid 25748] [client 103.229.252.74:53222] [client 103.229.252.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.229.252.74, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmsD2-PCMRhF5DdUnOrDAAAAAE"]
[Tue May 05 16:52:02.928537 2026] [:error] [pid 25835:tid 25845] [client 103.229.252.75:60682] [client 103.229.252.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.229.252.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afmvslDT5nGJyh1439y6hgAAAQg"]
[Tue May 05 17:56:03.767479 2026] [:error] [pid 25743:tid 25763] [client 20.48.0.141:1809] [client 20.48.0.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php7"] [unique_id "afm-s2-PCMRhF5DdUnO4egAAABA"]
[Tue May 05 17:56:04.243284 2026] [:error] [pid 54732:tid 54736] [client 20.48.0.141:3247] [client 20.48.0.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php7"] [unique_id "afm-tLGgYlDOb3nfuJQF-gAAAEI"]
[Tue May 05 17:56:04.745817 2026] [:error] [pid 25745:tid 25810] [client 20.48.0.141:3217] [client 20.48.0.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php7"] [unique_id "afm-tJsd7hb7vrvCNBk2_QAAAMk"]
[Tue May 05 17:56:05.201726 2026] [:error] [pid 2324:tid 2329] [client 20.48.0.141:3231] [client 20.48.0.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/randkeyword.php7"] [unique_id "afm-tWqe2hrcI52A1HxDJwAAAUM"]
[Tue May 05 18:00:39.241061 2026] [:error] [pid 25745:tid 25805] [client 20.48.34.233:2200] [client 20.48.34.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afm_x5sd7hb7vrvCNBk3nAAAAMQ"]
[Tue May 05 18:00:39.700995 2026] [:error] [pid 25744:tid 25795] [client 20.48.34.233:1128] [client 20.48.34.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afm_xyR8IuyzjkW06OPOZAAAAJU"]
[Tue May 05 18:00:40.225275 2026] [:error] [pid 25744:tid 25782] [client 20.48.34.233:1105] [client 20.48.34.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afm_yCR8IuyzjkW06OPOZgAAAIg"]
[Tue May 05 18:00:42.125265 2026] [:error] [pid 25744:tid 25780] [client 20.48.34.233:1142] [client 20.48.34.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afm_yiR8IuyzjkW06OPOaQAAAIY"]
[Tue May 05 18:42:15.118402 2026] [:error] [pid 2324:tid 2348] [client 49.51.132.100:57440] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afnJh2qe2hrcI52A1HxT1gAAAVY"]
[Tue May 05 18:45:13.480387 2026] [:error] [pid 54732:tid 54743] [client 43.250.157.120:5691] [client 43.250.157.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.250.157.120, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnKObGgYlDOb3nfuJQO4gAAAEk"]
[Tue May 05 18:45:22.202488 2026] [:error] [pid 25744:tid 25796] [client 43.250.157.120:5663] [client 43.250.157.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 43.250.157.120, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnKQiR8IuyzjkW06OPYvwAAAJY"]
[Tue May 05 19:45:43.680988 2026] [:error] [pid 54732:tid 54743] [client 216.234.211.192:27177] [client 216.234.211.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.234.211.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnYZ7GgYlDOb3nfuJQZOAAAAEk"]
[Tue May 05 19:45:54.227078 2026] [:error] [pid 54732:tid 54738] [client 216.234.211.192:60468] [client 216.234.211.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.234.211.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnYcrGgYlDOb3nfuJQZRgAAAEQ"]
[Tue May 05 19:46:04.797668 2026] [:error] [pid 2324:tid 2334] [client 216.234.211.192:23857] [client 216.234.211.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.234.211.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnYfGqe2hrcI52A1HxrNAAAAUg"]
[Tue May 05 19:46:15.371300 2026] [:error] [pid 54732:tid 54750] [client 216.234.211.192:6570] [client 216.234.211.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.234.211.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnYh7GgYlDOb3nfuJQZSQAAAFA"]
[Tue May 05 19:46:24.977089 2026] [:error] [pid 2324:tid 2340] [client 216.234.211.192:51695] [client 216.234.211.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.234.211.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnYkGqe2hrcI52A1HxrUgAAAU4"]
[Tue May 05 20:37:59.270386 2026] [:error] [pid 25835:tid 25861] [client 129.222.187.29:25292] [client 129.222.187.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.187.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnkp1DT5nGJyh1439zjiQAAARg"]
[Tue May 05 20:38:09.973876 2026] [:error] [pid 54732:tid 54735] [client 129.222.187.29:15830] [client 129.222.187.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.187.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnksbGgYlDOb3nfuJQjdwAAAEE"]
[Tue May 05 20:39:44.153815 2026] [:error] [pid 25745:tid 25824] [client 129.222.187.29:60023] [client 129.222.187.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.187.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnlEJsd7hb7vrvCNBlMIwAAANc"]
[Tue May 05 20:39:54.633676 2026] [:error] [pid 25835:tid 25846] [client 129.222.187.29:25994] [client 129.222.187.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.187.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnlGlDT5nGJyh1439zjxAAAAQk"]
[Tue May 05 20:40:05.244077 2026] [:error] [pid 25835:tid 25841] [client 129.222.187.29:36297] [client 129.222.187.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.187.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnlJVDT5nGJyh1439zjyQAAAQQ"]
[Tue May 05 20:46:51.753580 2026] [:error] [pid 25743:tid 25757] [client 197.238.1.107:50023] [client 197.238.1.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.238.1.107, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnmu2-PCMRhF5DdUnPpOwAAAAo"]
[Tue May 05 20:47:02.550966 2026] [:error] [pid 25745:tid 25807] [client 197.238.1.107:50278] [client 197.238.1.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.238.1.107, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnmxpsd7hb7vrvCNBlM2gAAAMY"]
[Tue May 05 20:47:12.347756 2026] [:error] [pid 25743:tid 25764] [client 197.238.1.107:50663] [client 197.238.1.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.238.1.107, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnm0G-PCMRhF5DdUnPpXQAAABE"]
[Tue May 05 20:47:22.747419 2026] [:error] [pid 2324:tid 2339] [client 197.238.1.107:50976] [client 197.238.1.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.238.1.107, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnm2mqe2hrcI52A1HyFPQAAAU0"]
[Tue May 05 20:47:33.337070 2026] [:error] [pid 25743:tid 25766] [client 197.238.1.107:51250] [client 197.238.1.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.238.1.107, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afnm5W-PCMRhF5DdUnPpbwAAABM"]
[Tue May 05 21:14:04.896249 2026] [:error] [pid 25743:tid 25770] [client 122.51.236.174:56568] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afntHG-PCMRhF5DdUnPywgAAABc"]
[Tue May 05 21:46:55.594960 2026] [:error] [pid 54732:tid 54752] [client 154.121.101.127:8681] [client 154.121.101.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.121.101.127, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afn0z7GgYlDOb3nfuJQuNAAAAFI"]
[Tue May 05 21:47:05.796380 2026] [:error] [pid 25745:tid 25813] [client 154.121.101.127:8691] [client 154.121.101.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.121.101.127, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afn02Zsd7hb7vrvCNBlTFgAAAMw"]
[Tue May 05 21:47:16.138954 2026] [:error] [pid 25743:tid 25756] [client 154.121.101.127:8646] [client 154.121.101.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.121.101.127, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afn05G-PCMRhF5DdUnP6owAAAAk"]
[Tue May 05 21:47:26.627546 2026] [:error] [pid 2324:tid 2343] [client 154.121.101.127:8594] [client 154.121.101.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.121.101.127, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afn07mqe2hrcI52A1HyZZQAAAVE"]
[Tue May 05 21:47:37.192921 2026] [:error] [pid 25744:tid 25792] [client 154.121.101.127:8703] [client 154.121.101.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.121.101.127, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afn0-SR8IuyzjkW06OP_kQAAAJI"]
[Tue May 05 22:10:20.587345 2026] [:error] [pid 25743:tid 25751] [client 194.62.107.114:50569] [client 194.62.107.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "afn6TG-PCMRhF5DdUnMBQwAAAAQ"]
[Tue May 05 22:11:27.511924 2026] [:error] [pid 25745:tid 25814] [client 43.159.145.153:44678] [client 43.159.145.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afn6j5sd7hb7vrvCNBlWrwAAAM0"]
[Tue May 05 22:26:09.807185 2026] [:error] [pid 2324:tid 2348] [client 115.97.67.65:60936] [client 115.97.67.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.97.67.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afn-AWqe2hrcI52A1HymHAAAAVY"]
[Tue May 05 22:26:20.199976 2026] [:error] [pid 54732:tid 54739] [client 115.97.67.65:61334] [client 115.97.67.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.97.67.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afn-DLGgYlDOb3nfuJQ04wAAAEU"]
[Tue May 05 22:26:30.837361 2026] [:error] [pid 25743:tid 25757] [client 115.97.67.65:61691] [client 115.97.67.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.97.67.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afn-Fm-PCMRhF5DdUnMEsQAAAAo"]
[Tue May 05 22:26:41.541213 2026] [:error] [pid 2324:tid 2338] [client 115.97.67.65:62050] [client 115.97.67.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.97.67.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afn-IWqe2hrcI52A1HymUQAAAUw"]
[Tue May 05 22:26:52.228360 2026] [:error] [pid 2324:tid 2336] [client 115.97.67.65:62408] [client 115.97.67.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.97.67.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afn-LGqe2hrcI52A1HymXwAAAUo"]
[Tue May 05 23:02:47.477293 2026] [:error] [pid 25743:tid 25755] [client 163.61.226.5:51662] [client 163.61.226.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.226.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoGl2-PCMRhF5DdUnMNzAAAAAg"]
[Tue May 05 23:02:58.339623 2026] [:error] [pid 25743:tid 25750] [client 163.61.226.5:51978] [client 163.61.226.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.226.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoGom-PCMRhF5DdUnMN3gAAAAM"]
[Tue May 05 23:03:09.799887 2026] [:error] [pid 2324:tid 2340] [client 163.61.226.5:52324] [client 163.61.226.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.226.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoGrWqe2hrcI52A1Hyy8QAAAU4"]
[Tue May 05 23:03:21.157225 2026] [:error] [pid 2324:tid 2340] [client 163.61.226.5:52586] [client 163.61.226.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.226.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoGuWqe2hrcI52A1HyzBgAAAU4"]
[Tue May 05 23:03:31.693213 2026] [:error] [pid 2324:tid 2341] [client 163.61.226.5:52822] [client 163.61.226.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.226.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoGw2qe2hrcI52A1HyzEwAAAU8"]
[Tue May 05 23:03:42.370531 2026] [:error] [pid 25743:tid 25760] [client 163.61.226.5:11961] [client 163.61.226.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.226.5, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoGzm-PCMRhF5DdUnMOEAAAAA0"]
[Tue May 05 23:17:41.265062 2026] [:error] [pid 25744:tid 25779] [client 103.228.32.122:18992] [client 103.228.32.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.228.32.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoKFSR8IuyzjkW06OMRnQAAAIU"]
[Tue May 05 23:17:47.534971 2026] [:error] [pid 25745:tid 25808] [client 103.228.32.122:22771] [client 103.228.32.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.228.32.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoKG5sd7hb7vrvCNBleowAAAMc"]
[Tue May 05 23:17:58.055850 2026] [:error] [pid 2324:tid 2349] [client 103.228.32.122:30885] [client 103.228.32.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.228.32.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoKJmqe2hrcI52A1Hy31QAAAVc"]
[Tue May 05 23:18:08.699970 2026] [:error] [pid 54732:tid 54748] [client 103.228.32.122:38985] [client 103.228.32.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.228.32.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoKMLGgYlDOb3nfuJQ94QAAAE4"]
[Tue May 05 23:18:19.364445 2026] [:error] [pid 25743:tid 25758] [client 103.228.32.115:47289] [client 103.228.32.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.228.32.115, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoKO2-PCMRhF5DdUnMSVAAAAAs"]
[Tue May 05 23:18:29.882854 2026] [:error] [pid 54732:tid 54749] [client 103.228.32.122:56197] [client 103.228.32.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.228.32.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoKRbGgYlDOb3nfuJQ97QAAAE8"]
[Tue May 05 23:22:45.707492 2026] [:error] [pid 25744:tid 25783] [client 103.228.32.118:54549] [client 103.228.32.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.228.32.118, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoLRSR8IuyzjkW06OMSdAAAAIk"]
[Tue May 05 23:27:34.897799 2026] [:error] [pid 2324:tid 2326] [client 191.240.24.105:52976] [client 191.240.24.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.240.24.105, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoMZmqe2hrcI52A1Hy7LwAAAUA"]
[Tue May 05 23:27:59.199430 2026] [:error] [pid 54732:tid 54755] [client 191.240.24.105:53389] [client 191.240.24.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.240.24.105, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoMf7GgYlDOb3nfuJQ_RwAAAFU"]
[Tue May 05 23:28:32.802249 2026] [:error] [pid 25744:tid 25796] [client 191.240.24.105:53795] [client 191.240.24.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.240.24.105, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoMoCR8IuyzjkW06OMTtAAAAJY"]
[Tue May 05 23:28:57.177613 2026] [:error] [pid 25835:tid 25856] [client 191.240.24.105:54237] [client 191.240.24.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.240.24.105, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoMuVDT5nGJyh1439z6swAAARM"]
[Tue May 05 23:29:19.392143 2026] [:error] [pid 54732:tid 54750] [client 191.240.24.105:54640] [client 191.240.24.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.240.24.105, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoMz7GgYlDOb3nfuJQ_kwAAAFA"]
[Tue May 05 23:42:17.785347 2026] [:error] [pid 2324:tid 2342] [client 103.228.32.115:11962] [client 103.228.32.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.228.32.115, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoP2Wqe2hrcI52A1Hy_bwAAAVA"]
[Tue May 05 23:43:11.418593 2026] [:error] [pid 2324:tid 2335] [client 103.228.32.121:39937] [client 103.228.32.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.228.32.121, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoQD2qe2hrcI52A1Hy_wAAAAUk"]
[Tue May 05 23:44:30.331928 2026] [:error] [pid 25743:tid 25748] [client 163.61.226.4:51366] [client 163.61.226.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.226.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoQXm-PCMRhF5DdUnMY2gAAAAE"]
[Tue May 05 23:44:40.890922 2026] [:error] [pid 25743:tid 25761] [client 163.61.226.4:40012] [client 163.61.226.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.226.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoQaG-PCMRhF5DdUnMY6gAAAA4"]
[Tue May 05 23:44:51.966275 2026] [:error] [pid 2324:tid 2338] [client 163.61.226.4:52311] [client 163.61.226.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.226.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoQc2qe2hrcI52A1HzAGwAAAUw"]
[Tue May 05 23:48:37.854856 2026] [:error] [pid 25835:tid 25851] [client 163.61.226.4:61400] [client 163.61.226.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.226.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoRVVDT5nGJyh1439z9hgAAAQ4"]
[Tue May 05 23:49:31.906141 2026] [:error] [pid 25835:tid 25843] [client 163.61.226.4:49330] [client 163.61.226.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.61.226.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afoRi1DT5nGJyh1439z9rAAAAQY"]
[Wed May 06 00:51:23.123722 2026] [:error] [pid 25743:tid 25761] [client 106.215.149.113:12742] [client 106.215.149.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.149.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afogC2-PCMRhF5DdUnMqpQAAAA4"]
[Wed May 06 00:51:35.167290 2026] [:error] [pid 25744:tid 25778] [client 106.215.149.113:6839] [client 106.215.149.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.149.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afogFyR8IuyzjkW06OMkxgAAAIQ"]
[Wed May 06 00:51:54.975124 2026] [:error] [pid 25743:tid 25757] [client 106.215.149.113:3915] [client 106.215.149.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.149.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afogKm-PCMRhF5DdUnMrDgAAAAo"]
[Wed May 06 00:52:16.647416 2026] [:error] [pid 25744:tid 25794] [client 106.215.149.113:20614] [client 106.215.149.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.149.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afogQCR8IuyzjkW06OMk-wAAAJQ"]
[Wed May 06 00:52:28.258496 2026] [:error] [pid 2324:tid 2346] [client 106.215.149.113:24411] [client 106.215.149.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.149.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afogTGqe2hrcI52A1HzV5AAAAVQ"]
[Wed May 06 02:14:24.877175 2026] [:error] [pid 2324:tid 2348] [client 45.154.98.197:61939] [client 45.154.98.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "afozgGqe2hrcI52A1HzvDQAAAVY"]
[Wed May 06 02:14:25.381566 2026] [:error] [pid 25743:tid 25765] [client 45.154.98.197:62154] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afozgW-PCMRhF5DdUnM9wwAAABI"]
[Wed May 06 02:14:25.883916 2026] [:error] [pid 25744:tid 25798] [client 45.154.98.197:62297] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afozgSR8IuyzjkW06OMzPAAAAJg"]
[Wed May 06 02:14:26.387050 2026] [:error] [pid 25745:tid 25803] [client 45.154.98.197:62422] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afozgpsd7hb7vrvCNBlzRAAAAMI"]
[Wed May 06 02:14:26.895659 2026] [:error] [pid 2324:tid 2330] [client 45.154.98.197:62536] [client 45.154.98.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "afozgmqe2hrcI52A1HzvEwAAAUQ"]
[Wed May 06 02:14:27.401509 2026] [:error] [pid 25743:tid 25770] [client 45.154.98.197:62664] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/txets.php"] [unique_id "afozg2-PCMRhF5DdUnM9xQAAABc"]
[Wed May 06 02:14:27.902739 2026] [:error] [pid 54732:tid 54746] [client 45.154.98.197:62934] [client 45.154.98.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schallfuns.php"] [unique_id "afozg7GgYlDOb3nfuJRaggAAAEw"]
[Wed May 06 02:14:28.409870 2026] [:error] [pid 54732:tid 54736] [client 45.154.98.197:63049] [client 45.154.98.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "afozhLGgYlDOb3nfuJRagwAAAEI"]
[Wed May 06 05:04:42.627896 2026] [:error] [pid 48758:tid 48799] [client 43.131.45.213:48478] [client 43.131.45.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afpbajENoN-kMgC5tXgVYwAAAEQ"]
[Wed May 06 05:30:00.041984 2026] [:error] [pid 33660:tid 33672] [client 116.240.149.7:64518] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afphWP6jj6Ce_ERq7qNlmgAAAQo"]
[Wed May 06 05:30:07.150442 2026] [:error] [pid 48759:tid 48841] [client 116.240.149.7:64409] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afphX6mcftH9JrQl_yHKMwAAAJM"]
[Wed May 06 05:30:15.140716 2026] [:error] [pid 48758:tid 48814] [client 116.240.149.7:63182] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afphZzENoN-kMgC5tXgYuQAAAFM"]
[Wed May 06 05:30:24.293716 2026] [:error] [pid 48757:tid 48778] [client 116.240.149.7:61505] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afphcEAivC3C614LoA5kmgAAAAw"]
[Wed May 06 05:30:32.511207 2026] [:error] [pid 33660:tid 33675] [client 116.240.149.7:60955] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afpheP6jj6Ce_ERq7qNlvAAAAQ0"]
[Wed May 06 05:30:39.843764 2026] [:error] [pid 48758:tid 48812] [client 116.240.149.7:63512] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afphfzENoN-kMgC5tXgY0AAAAFE"]
[Wed May 06 05:30:42.883458 2026] [:error] [pid 33660:tid 33663] [client 116.240.149.7:60493] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afphgv6jj6Ce_ERq7qNlzAAAAQE"]
[Wed May 06 05:30:50.880998 2026] [:error] [pid 48867:tid 48876] [client 116.240.149.7:62246] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "afphilZQ-8ZcCbMZPy4EZAAAAMY"]
[Wed May 06 05:32:14.405967 2026] [:error] [pid 33660:tid 33668] [client 116.240.149.7:60832] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "afph3v6jj6Ce_ERq7qNmrgAAAQY"]
[Wed May 06 05:32:20.601788 2026] [:error] [pid 48757:tid 48785] [client 116.240.149.7:61953] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "afph5EAivC3C614LoA5k9gAAABM"]
[Wed May 06 05:32:26.624718 2026] [:error] [pid 48867:tid 48888] [client 116.240.149.7:62845] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "afph6lZQ-8ZcCbMZPy4E_QAAANI"]
[Wed May 06 05:32:32.679184 2026] [:error] [pid 48759:tid 48831] [client 116.240.149.7:59728] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "afph8KmcftH9JrQl_yHKtAAAAIk"]
[Wed May 06 05:32:39.884471 2026] [:error] [pid 48758:tid 48804] [client 116.240.149.7:64273] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "afph9zENoN-kMgC5tXgZBgAAAEk"]
[Wed May 06 05:32:46.810830 2026] [:error] [pid 48758:tid 48808] [client 116.240.149.7:60057] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "afph_jENoN-kMgC5tXgZDQAAAE0"]
[Wed May 06 05:32:52.441766 2026] [:error] [pid 48867:tid 48878] [client 116.240.149.7:59208] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "afpiBFZQ-8ZcCbMZPy4FFgAAAMg"]
[Wed May 06 05:32:56.696410 2026] [:error] [pid 48867:tid 48871] [client 116.240.149.7:61564] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "afpiCFZQ-8ZcCbMZPy4FIQAAAME"]
[Wed May 06 05:33:00.782250 2026] [:error] [pid 48759:tid 48831] [client 116.240.149.7:63613] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "afpiDKmcftH9JrQl_yHKwQAAAIk"]
[Wed May 06 05:33:07.527195 2026] [:error] [pid 48759:tid 48836] [client 116.240.149.7:63021] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "afpiE6mcftH9JrQl_yHK0wAAAI4"]
[Wed May 06 05:34:23.559902 2026] [:error] [pid 48758:tid 48819] [client 116.240.149.7:59382] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "afpiXzENoN-kMgC5tXgZngAAAFg"]
[Wed May 06 05:34:32.128968 2026] [:error] [pid 48757:tid 48774] [client 116.240.149.7:60337] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "afpiaEAivC3C614LoA5lkQAAAAg"]
[Wed May 06 05:34:38.571171 2026] [:error] [pid 48759:tid 48833] [client 116.240.149.7:59688] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "afpibqmcftH9JrQl_yHLdAAAAIs"]
[Wed May 06 05:34:44.347742 2026] [:error] [pid 48758:tid 48819] [client 116.240.149.7:59049] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "afpidDENoN-kMgC5tXgZsAAAAFg"]
[Wed May 06 05:34:50.809095 2026] [:error] [pid 48867:tid 48891] [client 116.240.149.7:62490] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "afpielZQ-8ZcCbMZPy4F6gAAANU"]
[Wed May 06 05:34:53.937539 2026] [:error] [pid 48758:tid 48799] [client 116.240.149.7:63114] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "afpifTENoN-kMgC5tXgZugAAAEQ"]
[Wed May 06 05:34:59.601437 2026] [:error] [pid 48867:tid 48871] [client 116.240.149.7:63165] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "afpig1ZQ-8ZcCbMZPy4GBgAAAME"]
[Wed May 06 05:35:05.968037 2026] [:error] [pid 48758:tid 48818] [client 116.240.149.7:63337] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "afpiiTENoN-kMgC5tXgZ9gAAAFc"]
[Wed May 06 05:35:09.874010 2026] [:error] [pid 33660:tid 33668] [client 116.240.149.7:62758] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "afpijf6jj6Ce_ERq7qNnsAAAAQY"]
[Wed May 06 05:36:18.353236 2026] [:error] [pid 48867:tid 48889] [client 116.240.149.7:60259] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "afpi0lZQ-8ZcCbMZPy4GgAAAANM"]
[Wed May 06 05:36:24.094842 2026] [:error] [pid 48758:tid 48811] [client 116.240.149.7:64944] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "afpi2DENoN-kMgC5tXgaMAAAAFA"]
[Wed May 06 05:36:28.760009 2026] [:error] [pid 33660:tid 33664] [client 116.240.149.7:60253] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afpi3P6jj6Ce_ERq7qNotgAAAQI"]
[Wed May 06 05:36:34.692847 2026] [:error] [pid 33660:tid 33676] [client 116.240.149.7:60882] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "afpi4v6jj6Ce_ERq7qNowAAAAQ4"]
[Wed May 06 05:36:40.691922 2026] [:error] [pid 33660:tid 33666] [client 116.240.149.7:63186] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "afpi6P6jj6Ce_ERq7qNoygAAAQQ"]
[Wed May 06 05:36:45.320261 2026] [:error] [pid 48759:tid 48834] [client 116.240.149.7:61723] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "afpi7amcftH9JrQl_yHL0wAAAIw"]
[Wed May 06 05:36:51.490462 2026] [:error] [pid 48867:tid 48871] [client 116.240.149.7:60920] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afpi81ZQ-8ZcCbMZPy4GlwAAAME"]
[Wed May 06 05:36:56.196691 2026] [:error] [pid 48759:tid 48838] [client 116.240.149.7:59317] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "afpi-KmcftH9JrQl_yHL2wAAAJA"]
[Wed May 06 05:37:00.904138 2026] [:error] [pid 48759:tid 48824] [client 116.240.149.7:61459] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "afpi_KmcftH9JrQl_yHL4QAAAII"]
[Wed May 06 05:37:06.337485 2026] [:error] [pid 33660:tid 33670] [client 116.240.149.7:64542] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afpjAv6jj6Ce_ERq7qNo3gAAAQg"]
[Wed May 06 08:21:45.593917 2026] [:error] [pid 13414:tid 13431] [client 49.51.72.236:58952] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afqJmUuJQpWjVpJTu_nUXAAAAQ8"]
[Wed May 06 09:32:16.422624 2026] [:error] [pid 9659:tid 9748] [client 139.155.134.17:34926] [client 139.155.134.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afqaIPwJnWjd8JHpBttIjgAAAM4"]
[Wed May 06 10:50:43.581855 2026] [:error] [pid 9789:tid 9810] [client 159.203.169.171:57843] [client 159.203.169.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.169.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afqsgz_YStPJSCHPkUUsZAAAAFM"]
[Wed May 06 10:50:45.373100 2026] [:error] [pid 9664:tid 9780] [client 159.203.169.171:65241] [client 159.203.169.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.169.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afqshQH4OZbrg1SjsBP2kgAAAJI"]
[Wed May 06 10:50:46.205465 2026] [proxy_fcgi:error] [pid 9664:tid 9780] [client 159.203.169.171:65241] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 06 10:51:35.170018 2026] [:error] [pid 482:tid 484] [client 84.67.226.25:52998] [client 84.67.226.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.67.226.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afqst8xs8HOc_nWgOW65iQAAAcA"]
[Wed May 06 10:51:49.389436 2026] [:error] [pid 9789:tid 9814] [client 84.67.226.25:53255] [client 84.67.226.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.67.226.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afqsxT_YStPJSCHPkUUs6gAAAFc"]
[Wed May 06 10:52:04.295866 2026] [:error] [pid 9659:tid 9750] [client 84.67.226.25:53558] [client 84.67.226.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.67.226.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afqs1PwJnWjd8JHpBttSxgAAANA"]
[Wed May 06 10:52:17.265609 2026] [:error] [pid 9664:tid 9784] [client 84.67.226.25:53821] [client 84.67.226.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.67.226.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afqs4QH4OZbrg1SjsBP20gAAAJY"]
[Wed May 06 10:52:31.515797 2026] [:error] [pid 9664:tid 9777] [client 84.67.226.25:54099] [client 84.67.226.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.67.226.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afqs7wH4OZbrg1SjsBP23QAAAI8"]
[Wed May 06 12:39:34.283931 2026] [:error] [pid 482:tid 498] [client 202.141.21.191:48612] [client 202.141.21.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.21.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrGBsxs8HOc_nWgOW7bLgAAAc4"]
[Wed May 06 12:39:44.402427 2026] [:error] [pid 9653:tid 9716] [client 202.141.21.191:52608] [client 202.141.21.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.21.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrGEKhJ49Xc4dqq0B6IuwAAABI"]
[Wed May 06 12:39:54.935071 2026] [:error] [pid 482:tid 489] [client 202.141.21.191:10256] [client 202.141.21.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.21.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrGGsxs8HOc_nWgOW7bSAAAAcU"]
[Wed May 06 12:40:05.422901 2026] [:error] [pid 9664:tid 9773] [client 202.141.21.191:48893] [client 202.141.21.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.21.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrGJQH4OZbrg1SjsBMCsAAAAIs"]
[Wed May 06 12:40:15.985642 2026] [:error] [pid 13414:tid 13432] [client 202.141.21.191:47931] [client 202.141.21.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.141.21.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrGL0uJQpWjVpJTu_n0MQAAARA"]
[Wed May 06 12:59:35.936863 2026] [:error] [pid 482:tid 493] [client 45.85.105.206:52258] [client 45.85.105.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.85.105.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrKt8xs8HOc_nWgOW7htQAAAck"]
[Wed May 06 12:59:46.277144 2026] [:error] [pid 592:tid 599] [client 45.85.105.206:52941] [client 45.85.105.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.85.105.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrKwpiX28mb6xLi2PyJ_AAAAoM"]
[Wed May 06 12:59:57.859684 2026] [:error] [pid 9664:tid 9780] [client 45.85.105.206:53427] [client 45.85.105.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.85.105.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrKzQH4OZbrg1SjsBMF9QAAAJI"]
[Wed May 06 13:00:06.742865 2026] [:error] [pid 13414:tid 13420] [client 45.85.105.206:53831] [client 45.85.105.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.85.105.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrK1kuJQpWjVpJTu_n2OQAAAQQ"]
[Wed May 06 13:00:18.523899 2026] [:error] [pid 9664:tid 9767] [client 45.85.105.206:54289] [client 45.85.105.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.85.105.206, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrK4gH4OZbrg1SjsBMGBQAAAIU"]
[Wed May 06 15:26:32.925162 2026] [:error] [pid 9664:tid 9782] [client 106.213.82.217:26525] [client 106.213.82.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.82.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrtKAH4OZbrg1SjsBMdIwAAAJQ"]
[Wed May 06 15:26:43.557135 2026] [:error] [pid 9789:tid 9807] [client 106.213.82.217:4347] [client 106.213.82.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.82.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrtMz_YStPJSCHPkUVegQAAAFA"]
[Wed May 06 15:26:53.889908 2026] [:error] [pid 9664:tid 9781] [client 106.213.82.217:29888] [client 106.213.82.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.82.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrtPQH4OZbrg1SjsBMdWwAAAJM"]
[Wed May 06 15:27:05.486901 2026] [:error] [pid 9653:tid 9719] [client 106.213.82.217:15312] [client 106.213.82.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.82.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrtSahJ49Xc4dqq0B62SwAAABU"]
[Wed May 06 15:27:14.718549 2026] [:error] [pid 9789:tid 9804] [client 106.213.82.217:33215] [client 106.213.82.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.82.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afrtUj_YStPJSCHPkUVelAAAAE0"]
[Wed May 06 15:53:11.745836 2026] [:error] [pid 9653:tid 9716] [client 205.185.115.28:54282] [client 205.185.115.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afrzZ6hJ49Xc4dqq0B69rQAAABI"]
[Wed May 06 15:53:12.563991 2026] [proxy_fcgi:error] [pid 9653:tid 9716] [client 205.185.115.28:54282] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 06 15:53:30.857776 2026] [:error] [pid 557:tid 562] [client 205.185.115.28:55855] [client 205.185.115.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.28, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afrzejZjFR8Vd8ce80AfYwAAAkM"]
[Wed May 06 15:53:31.735733 2026] [proxy_fcgi:error] [pid 557:tid 562] [client 205.185.115.28:55855] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 06 16:00:38.572479 2026] [:error] [pid 9653:tid 9713] [client 175.157.40.38:47427] [client 175.157.40.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.157.40.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afr1JqhJ49Xc4dqq0B6_pgAAAA8"]
[Wed May 06 16:01:00.050658 2026] [:error] [pid 63810:tid 63816] [client 175.157.40.38:47428] [client 175.157.40.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.157.40.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afr1PHpnbsN9Zf6i5IEpuAAAAYI"]
[Wed May 06 16:01:21.219171 2026] [:error] [pid 9653:tid 9705] [client 175.157.40.38:47429] [client 175.157.40.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.157.40.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afr1UahJ49Xc4dqq0B6_xwAAAAc"]
[Wed May 06 16:01:21.398909 2026] [:error] [pid 9659:tid 9752] [client 43.130.139.136:51254] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afr1UfwJnWjd8JHpBttyyQAAANI"]
[Wed May 06 16:01:42.439773 2026] [:error] [pid 482:tid 489] [client 175.157.40.38:32885] [client 175.157.40.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.157.40.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afr1Zsxs8HOc_nWgOW4VbgAAAcU"]
[Wed May 06 16:02:04.052726 2026] [:error] [pid 592:tid 606] [client 175.157.40.38:32890] [client 175.157.40.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.157.40.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afr1fJiX28mb6xLi2PyYegAAAoo"]
[Wed May 06 18:43:08.968769 2026] [:error] [pid 9789:tid 9807] [client 103.13.73.125:50669] [client 103.13.73.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.13.73.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsbPD_YStPJSCHPkUV9GQAAAFA"]
[Wed May 06 18:43:19.370286 2026] [:error] [pid 9664:tid 9778] [client 103.13.73.125:51110] [client 103.13.73.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.13.73.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsbRwH4OZbrg1SjsBM2gQAAAJA"]
[Wed May 06 18:43:29.870296 2026] [:error] [pid 9653:tid 9701] [client 103.13.73.125:51820] [client 103.13.73.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.13.73.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsbUahJ49Xc4dqq0B7qFQAAAAM"]
[Wed May 06 18:43:40.379941 2026] [:error] [pid 9664:tid 9784] [client 103.13.73.125:52247] [client 103.13.73.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.13.73.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsbXAH4OZbrg1SjsBM2kgAAAJY"]
[Wed May 06 18:43:50.836887 2026] [:error] [pid 9653:tid 9713] [client 103.13.73.125:52581] [client 103.13.73.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.13.73.125, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsbZqhJ49Xc4dqq0B7qLQAAAA8"]
[Wed May 06 19:05:47.089789 2026] [:error] [pid 592:tid 607] [client 41.104.83.47:65235] [client 41.104.83.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.104.83.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsgi5iX28mb6xLi2PymvwAAAos"]
[Wed May 06 19:05:58.341248 2026] [:error] [pid 9659:tid 9752] [client 41.104.83.47:53279] [client 41.104.83.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.104.83.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsglvwJnWjd8JHpBtuGvQAAANI"]
[Wed May 06 19:06:09.638051 2026] [:error] [pid 9659:tid 9747] [client 41.104.83.47:54648] [client 41.104.83.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.104.83.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsgofwJnWjd8JHpBtuGwgAAAM0"]
[Wed May 06 19:06:21.389785 2026] [:error] [pid 482:tid 490] [client 41.104.83.47:55761] [client 41.104.83.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.104.83.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsgrcxs8HOc_nWgOW457AAAAcY"]
[Wed May 06 19:15:20.697928 2026] [:error] [pid 9789:tid 9803] [client 171.48.25.213:55681] [client 171.48.25.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.48.25.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsiyD_YStPJSCHPkUWCDAAAAEw"]
[Wed May 06 19:15:31.990653 2026] [:error] [pid 9653:tid 9710] [client 171.48.25.213:55996] [client 171.48.25.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.48.25.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsi06hJ49Xc4dqq0B7ykQAAAAw"]
[Wed May 06 19:15:52.109533 2026] [:error] [pid 13414:tid 13438] [client 171.48.25.213:56593] [client 171.48.25.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.48.25.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsi6EuJQpWjVpJTu_kXGgAAARY"]
[Wed May 06 19:16:05.942170 2026] [:error] [pid 482:tid 510] [client 171.48.25.213:56945] [client 171.48.25.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.48.25.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsi9cxs8HOc_nWgOW47JAAAAdg"]
[Wed May 06 19:16:12.557384 2026] [:error] [pid 592:tid 604] [client 171.48.25.213:57131] [client 171.48.25.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.48.25.213, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsi_JiX28mb6xLi2PynVgAAAog"]
[Wed May 06 19:19:09.971411 2026] [:error] [pid 13414:tid 13439] [client 159.203.169.171:55641] [client 159.203.169.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.169.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afsjrUuJQpWjVpJTu_kXXQAAARc"]
[Wed May 06 19:19:12.136065 2026] [proxy_fcgi:error] [pid 13414:tid 13439] [client 159.203.169.171:55641] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 06 19:23:34.520013 2026] [:error] [pid 9653:tid 9715] [client 159.203.169.171:55541] [client 159.203.169.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.169.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afsktqhJ49Xc4dqq0B70FAAAABE"]
[Wed May 06 19:23:35.296313 2026] [proxy_fcgi:error] [pid 9653:tid 9715] [client 159.203.169.171:55541] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 06 19:25:17.290157 2026] [:error] [pid 13414:tid 13432] [client 51.102.182.165:55842] [client 51.102.182.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "afslHUuJQpWjVpJTu_kYLgAAARA"]
[Wed May 06 19:27:29.070086 2026] [:error] [pid 13414:tid 13425] [client 159.203.169.171:64051] [client 159.203.169.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.169.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afsloUuJQpWjVpJTu_kYZwAAAQk"]
[Wed May 06 19:27:30.033278 2026] [proxy_fcgi:error] [pid 13414:tid 13425] [client 159.203.169.171:64051] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 06 19:31:47.682708 2026] [:error] [pid 63810:tid 63815] [client 159.203.169.171:63095] [client 159.203.169.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.169.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afsmo3pnbsN9Zf6i5IE1rQAAAYE"]
[Wed May 06 19:31:48.654051 2026] [proxy_fcgi:error] [pid 63810:tid 63815] [client 159.203.169.171:63095] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 06 19:34:18.576061 2026] [:error] [pid 9664:tid 9784] [client 43.130.141.193:52232] [client 43.130.141.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afsnOgH4OZbrg1SjsBM8kAAAAJY"]
[Wed May 06 19:36:11.345054 2026] [:error] [pid 9664:tid 9783] [client 159.203.169.171:56380] [client 159.203.169.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.169.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afsnqwH4OZbrg1SjsBM8ugAAAJU"]
[Wed May 06 19:36:12.199442 2026] [proxy_fcgi:error] [pid 9664:tid 9783] [client 159.203.169.171:56380] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 06 20:05:19.649323 2026] [:error] [pid 13414:tid 13417] [client 51.102.182.165:59694] [client 51.102.182.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "afsuf0uJQpWjVpJTu_kbdQAAAQE"]
[Wed May 06 20:16:09.123274 2026] [:error] [pid 557:tid 573] [client 111.92.145.63:42940] [client 111.92.145.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.145.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsxCTZjFR8Vd8ce80As4QAAAk4"]
[Wed May 06 20:16:19.922270 2026] [:error] [pid 9789:tid 9800] [client 111.92.145.63:42174] [client 111.92.145.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.145.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsxEz_YStPJSCHPkUWLjwAAAEk"]
[Wed May 06 20:16:30.482346 2026] [:error] [pid 13443:tid 13447] [client 111.92.145.63:42372] [client 111.92.145.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.145.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsxHgCyfZallDmsQreY8QAAAUI"]
[Wed May 06 20:16:41.159927 2026] [:error] [pid 13414:tid 13428] [client 111.92.145.63:42966] [client 111.92.145.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.145.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsxKUuJQpWjVpJTu_kcVAAAAQw"]
[Wed May 06 20:16:43.552011 2026] [:error] [pid 9653:tid 9698] [client 107.189.29.12:22979] [client 107.189.29.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.12, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afsxK6hJ49Xc4dqq0B4BoQAAAAA"]
[Wed May 06 20:16:44.367851 2026] [proxy_fcgi:error] [pid 9653:tid 9698] [client 107.189.29.12:22979] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 06 20:16:44.626703 2026] [:error] [pid 9653:tid 9719] [client 107.189.29.12:22979] [client 107.189.29.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.29.12, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "afsxLKhJ49Xc4dqq0B4BpgAAABU"]
[Wed May 06 20:16:45.670697 2026] [proxy_fcgi:error] [pid 9653:tid 9719] [client 107.189.29.12:22979] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 06 20:16:51.744851 2026] [:error] [pid 9653:tid 9717] [client 111.92.145.63:42009] [client 111.92.145.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.145.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsxM6hJ49Xc4dqq0B4BsgAAABM"]
[Wed May 06 20:17:02.440907 2026] [:error] [pid 13414:tid 13425] [client 111.92.145.63:42894] [client 111.92.145.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.145.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afsxPkuJQpWjVpJTu_kcWQAAAQk"]
[Wed May 06 21:41:15.301566 2026] [:error] [pid 13414:tid 13438] [client 154.58.229.82:43286] [client 154.58.229.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "aftE-0uJQpWjVpJTu_kjpQAAARY"]
[Wed May 06 21:41:15.316074 2026] [:error] [pid 13414:tid 13423] [client 154.58.229.82:43266] [client 154.58.229.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "aftE-0uJQpWjVpJTu_kjpgAAAQc"]
[Wed May 06 21:42:06.391345 2026] [:error] [pid 13443:tid 13467] [client 149.22.93.147:44855] [client 149.22.93.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.22.93.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftFLgCyfZallDmsQreejwAAAVY"]
[Wed May 06 21:42:17.379306 2026] [:error] [pid 9659:tid 9740] [client 149.22.93.147:51153] [client 149.22.93.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.22.93.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftFOfwJnWjd8JHpBtuXtAAAAMY"]
[Wed May 06 21:42:27.908087 2026] [:error] [pid 9653:tid 9720] [client 149.22.93.147:61879] [client 149.22.93.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.22.93.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftFQ6hJ49Xc4dqq0B4bNgAAABY"]
[Wed May 06 21:55:07.682952 2026] [:error] [pid 9653:tid 9704] [client 96.18.174.128:58346] [client 96.18.174.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.18.174.128, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftIO6hJ49Xc4dqq0B4fYAAAAAY"]
[Wed May 06 22:07:31.955399 2026] [:error] [pid 9653:tid 9709] [client 103.85.207.184:32878] [client 103.85.207.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.85.207.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftLI6hJ49Xc4dqq0B4ioQAAAAs"]
[Wed May 06 22:07:42.611358 2026] [:error] [pid 482:tid 497] [client 103.85.207.184:32977] [client 103.85.207.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.85.207.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftLLsxs8HOc_nWgOW5hQQAAAc0"]
[Wed May 06 22:07:53.103387 2026] [:error] [pid 9789:tid 9797] [client 103.85.207.184:32399] [client 103.85.207.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.85.207.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftLOT_YStPJSCHPkUWhuQAAAEY"]
[Wed May 06 22:08:03.672843 2026] [:error] [pid 9789:tid 9809] [client 103.85.207.184:32794] [client 103.85.207.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.85.207.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftLQz_YStPJSCHPkUWhxwAAAFI"]
[Wed May 06 22:08:14.405610 2026] [:error] [pid 9653:tid 9702] [client 103.85.207.184:32831] [client 103.85.207.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.85.207.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftLTqhJ49Xc4dqq0B4iyAAAAAQ"]
[Wed May 06 22:08:24.975642 2026] [:error] [pid 592:tid 598] [client 103.85.207.184:33023] [client 103.85.207.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.85.207.184, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftLWJiX28mb6xLi2Py0BgAAAoI"]
[Wed May 06 22:16:53.930351 2026] [:error] [pid 9789:tid 9811] [client 96.18.174.128:50159] [client 96.18.174.128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aftNVT_YStPJSCHPkUWjlAAAAFQ"]
[Wed May 06 22:29:39.936740 2026] [:error] [pid 557:tid 576] [client 182.8.162.148:19369] [client 182.8.162.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.162.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftQUzZjFR8Vd8ce80Az2wAAAlE"]
[Wed May 06 22:29:50.007562 2026] [:error] [pid 13414:tid 13439] [client 182.8.162.148:28034] [client 182.8.162.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.162.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftQXkuJQpWjVpJTu_koGgAAARc"]
[Wed May 06 22:30:00.655414 2026] [:error] [pid 9789:tid 9797] [client 182.8.162.148:2486] [client 182.8.162.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.162.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftQaD_YStPJSCHPkUWmYAAAAEY"]
[Wed May 06 22:30:11.343174 2026] [:error] [pid 482:tid 503] [client 182.8.162.148:9109] [client 182.8.162.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.162.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftQc8xs8HOc_nWgOW5mZgAAAdM"]
[Wed May 06 22:30:21.887161 2026] [:error] [pid 482:tid 491] [client 182.8.162.148:15248] [client 182.8.162.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.162.148, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftQfcxs8HOc_nWgOW5mfAAAAcc"]
[Wed May 06 22:37:24.329938 2026] [:error] [pid 9659:tid 9741] [client 111.223.185.230:23251] [client 111.223.185.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.223.185.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftSJPwJnWjd8JHpBtudFAAAAMc"]
[Wed May 06 22:37:36.969825 2026] [:error] [pid 592:tid 603] [client 111.223.185.230:51101] [client 111.223.185.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.223.185.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftSMJiX28mb6xLi2Py2dQAAAoc"]
[Wed May 06 22:37:46.956753 2026] [:error] [pid 9789:tid 9809] [client 111.223.185.230:51102] [client 111.223.185.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.223.185.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftSOj_YStPJSCHPkUWoDwAAAFI"]
[Wed May 06 22:37:57.643987 2026] [:error] [pid 9659:tid 9747] [client 111.223.185.230:23780] [client 111.223.185.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.223.185.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftSRfwJnWjd8JHpBtudIQAAAM0"]
[Wed May 06 22:38:08.341533 2026] [:error] [pid 557:tid 560] [client 111.223.185.230:51103] [client 111.223.185.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.223.185.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftSUDZjFR8Vd8ce80A0OQAAAkE"]
[Thu May 07 00:21:22.521050 2026] [:error] [pid 9653:tid 9703] [client 152.57.93.111:64980] [client 152.57.93.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.93.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftqgqhJ49Xc4dqq0B5UMQAAAAU"]
[Thu May 07 00:21:33.021430 2026] [:error] [pid 9664:tid 9772] [client 152.57.93.111:65320] [client 152.57.93.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.93.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftqjQH4OZbrg1SjsBNmxwAAAIo"]
[Thu May 07 00:21:43.503593 2026] [:error] [pid 9653:tid 9704] [client 152.57.93.111:49245] [client 152.57.93.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.93.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftql6hJ49Xc4dqq0B5UVwAAAAY"]
[Thu May 07 00:21:53.983470 2026] [:error] [pid 9653:tid 9702] [client 152.57.93.111:49545] [client 152.57.93.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.93.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftqoahJ49Xc4dqq0B5UfAAAAAQ"]
[Thu May 07 00:22:04.431472 2026] [:error] [pid 9789:tid 9813] [client 152.57.93.111:49875] [client 152.57.93.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.93.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aftqrD_YStPJSCHPkUXBTgAAAFY"]
[Thu May 07 02:15:33.648886 2026] [:error] [pid 13414:tid 13419] [client 5.230.54.27:49822] [client 5.230.54.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "afuFRUuJQpWjVpJTu_lB9gAAAQM"]
[Thu May 07 02:32:57.898943 2026] [:error] [pid 9664:tid 9770] [client 43.153.123.3:60176] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afuJWQH4OZbrg1SjsBOI3gAAAIg"]
[Thu May 07 03:17:08.695519 2026] [:error] [pid 9664:tid 9775] [client 41.234.49.49:52318] [client 41.234.49.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.234.49.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afuTtAH4OZbrg1SjsBOYDwAAAI0"]
[Thu May 07 03:17:18.863816 2026] [:error] [pid 13443:tid 13446] [client 41.234.49.49:52741] [client 41.234.49.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.234.49.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afuTvgCyfZallDmsQre-MwAAAUE"]
[Thu May 07 03:17:29.613551 2026] [:error] [pid 9653:tid 9706] [client 41.234.49.49:53081] [client 41.234.49.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.234.49.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afuTyahJ49Xc4dqq0B6PIwAAAAg"]
[Thu May 07 04:08:16.599896 2026] [:error] [pid 29607:tid 29683] [client 52.138.0.210:21377] [client 52.138.0.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "afufsKbP7TJOAh7WSUNEmQAAAI8"]
[Thu May 07 04:08:17.432444 2026] [:error] [pid 29605:tid 29636] [client 52.138.0.210:1272] [client 52.138.0.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "afufsYnxrTjETioEY0TGPwAAABY"]
[Thu May 07 04:08:18.313849 2026] [:error] [pid 29710:tid 29731] [client 52.138.0.210:1238] [client 52.138.0.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "afufsv0atTQld9Y2ht-s8wAAANM"]
[Thu May 07 04:08:19.146538 2026] [:error] [pid 29606:tid 29659] [client 52.138.0.210:1274] [client 52.138.0.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "afufsxR5HjZ1PlSAiKtGBQAAAFI"]
[Thu May 07 06:27:36.231584 2026] [:error] [pid 29605:tid 29626] [client 52.140.115.251:50913] [client 52.140.115.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afvAWInxrTjETioEY0TsLQAAAAw"]
[Thu May 07 06:27:36.818647 2026] [:error] [pid 4539:tid 4561] [client 52.140.115.251:55062] [client 52.140.115.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afvAWIPEZE1565sDGnxBjQAAARQ"]
[Thu May 07 06:27:37.379331 2026] [:error] [pid 4539:tid 4550] [client 52.140.115.251:55536] [client 52.140.115.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afvAWYPEZE1565sDGnxBkgAAAQk"]
[Thu May 07 06:27:37.934870 2026] [:error] [pid 29606:tid 29652] [client 52.140.115.251:55946] [client 52.140.115.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afvAWRR5HjZ1PlSAiKtvHgAAAEs"]
[Thu May 07 08:02:50.411790 2026] [:error] [pid 4539:tid 4549] [client 145.239.69.106:44780] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afvWqoPEZE1565sDGnx7tAAAAQg"]
[Thu May 07 08:02:53.109758 2026] [:error] [pid 29710:tid 29719] [client 145.239.69.106:55458] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afvWrf0atTQld9Y2ht8XigAAAMc"]
[Thu May 07 08:02:55.353915 2026] [:error] [pid 29710:tid 29713] [client 145.239.69.106:55460] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afvWr_0atTQld9Y2ht8XkAAAAME"]
[Thu May 07 08:02:57.773665 2026] [:error] [pid 29710:tid 29727] [client 145.239.69.106:55468] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afvWsf0atTQld9Y2ht8XkgAAAM8"]
[Thu May 07 08:03:00.295457 2026] [:error] [pid 29710:tid 29715] [client 145.239.69.106:55480] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afvWtP0atTQld9Y2ht8XlwAAAMM"]
[Thu May 07 08:03:02.890299 2026] [:error] [pid 29607:tid 29689] [client 145.239.69.106:57468] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afvWtqbP7TJOAh7WSUOZTwAAAJU"]
[Thu May 07 08:03:05.398560 2026] [:error] [pid 29606:tid 29646] [client 145.239.69.106:57482] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afvWuRR5HjZ1PlSAiKuJigAAAEU"]
[Thu May 07 08:03:07.746550 2026] [:error] [pid 29607:tid 29690] [client 145.239.69.106:57496] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "afvWu6bP7TJOAh7WSUOZVAAAAJY"]
[Thu May 07 08:03:10.206046 2026] [:error] [pid 29607:tid 29671] [client 145.239.69.106:57510] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "afvWvqbP7TJOAh7WSUOZVgAAAIM"]
[Thu May 07 08:03:12.873728 2026] [:error] [pid 29606:tid 29659] [client 145.239.69.106:34980] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afvWwBR5HjZ1PlSAiKuJlAAAAFI"]
[Thu May 07 08:03:15.684185 2026] [:error] [pid 29607:tid 29686] [client 145.239.69.106:34990] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afvWw6bP7TJOAh7WSUOZWwAAAJI"]
[Thu May 07 08:03:18.056651 2026] [:error] [pid 29710:tid 29714] [client 145.239.69.106:34998] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "afvWxv0atTQld9Y2ht8XnQAAAMI"]
[Thu May 07 08:03:20.483584 2026] [:error] [pid 4539:tid 4555] [client 145.239.69.106:35014] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "afvWyIPEZE1565sDGnx7zgAAAQ4"]
[Thu May 07 08:03:23.275345 2026] [:error] [pid 29605:tid 29637] [client 145.239.69.106:34994] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "afvWy4nxrTjETioEY0QCcwAAABc"]
[Thu May 07 08:03:25.608975 2026] [:error] [pid 29710:tid 29733] [client 145.239.69.106:35008] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "afvWzf0atTQld9Y2ht8XqQAAANU"]
[Thu May 07 08:03:28.111803 2026] [:error] [pid 29607:tid 29673] [client 145.239.69.106:35024] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "afvW0KbP7TJOAh7WSUOZZgAAAIU"]
[Thu May 07 08:03:30.880520 2026] [:error] [pid 29710:tid 29735] [client 145.239.69.106:35036] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "afvW0v0atTQld9Y2ht8XrgAAANc"]
[Thu May 07 08:03:33.482005 2026] [:error] [pid 29710:tid 29728] [client 145.239.69.106:52234] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "afvW1f0atTQld9Y2ht8XsQAAANA"]
[Thu May 07 08:03:36.109984 2026] [:error] [pid 29606:tid 29657] [client 145.239.69.106:52248] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "afvW2BR5HjZ1PlSAiKuJoAAAAFA"]
[Thu May 07 08:03:38.745928 2026] [:error] [pid 29605:tid 29630] [client 145.239.69.106:52258] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "afvW2onxrTjETioEY0QCeAAAABA"]
[Thu May 07 08:03:41.310074 2026] [:error] [pid 29710:tid 29733] [client 145.239.69.106:52266] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "afvW3f0atTQld9Y2ht8XvgAAANU"]
[Thu May 07 08:03:41.661220 2026] [:error] [pid 29710:tid 29736] [client 145.239.69.106:51824] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "afvW3f0atTQld9Y2ht8XwgAAANg"]
[Thu May 07 08:03:44.109975 2026] [:error] [pid 29605:tid 29623] [client 145.239.69.106:51828] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "afvW4InxrTjETioEY0QCgAAAAAk"]
[Thu May 07 08:03:45.610983 2026] [:error] [pid 29710:tid 29712] [client 145.239.69.106:51840] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "afvW4f0atTQld9Y2ht8X1AAAAMA"]
[Thu May 07 08:03:46.859849 2026] [:error] [pid 4539:tid 4546] [client 145.239.69.106:51844] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "afvW4oPEZE1565sDGnx74wAAAQU"]
[Thu May 07 08:04:19.003083 2026] [:error] [pid 29605:tid 29622] [client 145.239.69.106:51846] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afvXA4nxrTjETioEY0QCrgAAAAg"]
[Thu May 07 08:04:21.634576 2026] [:error] [pid 4539:tid 4556] [client 145.239.69.106:58662] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afvXBYPEZE1565sDGnx8EQAAAQ8"]
[Thu May 07 08:04:24.245600 2026] [:error] [pid 4539:tid 4563] [client 145.239.69.106:34048] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "afvXCIPEZE1565sDGnx8IAAAARY"]
[Thu May 07 08:04:27.001911 2026] [:error] [pid 29710:tid 29728] [client 145.239.69.106:34058] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "afvXC_0atTQld9Y2ht8X9gAAANA"]
[Thu May 07 08:04:29.451232 2026] [:error] [pid 29607:tid 29673] [client 145.239.69.106:34066] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "afvXDabP7TJOAh7WSUOZoQAAAIU"]
[Thu May 07 08:04:32.139735 2026] [:error] [pid 29607:tid 29683] [client 145.239.69.106:46930] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "afvXEKbP7TJOAh7WSUOZpQAAAI8"]
[Thu May 07 08:04:34.538883 2026] [:error] [pid 29710:tid 29712] [client 145.239.69.106:46942] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "afvXEv0atTQld9Y2ht8YAgAAAMA"]
[Thu May 07 08:04:36.971841 2026] [:error] [pid 29710:tid 29729] [client 145.239.69.106:46956] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "afvXFP0atTQld9Y2ht8YCgAAANE"]
[Thu May 07 08:04:39.475865 2026] [:error] [pid 29607:tid 29673] [client 145.239.69.106:46972] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "afvXF6bP7TJOAh7WSUOZsgAAAIU"]
[Thu May 07 08:04:41.911107 2026] [:error] [pid 29607:tid 29688] [client 145.239.69.106:35092] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "afvXGabP7TJOAh7WSUOZuwAAAJQ"]
[Thu May 07 08:04:44.511995 2026] [:error] [pid 29606:tid 29658] [client 145.239.69.106:35106] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "afvXHBR5HjZ1PlSAiKuJ2wAAAFE"]
[Thu May 07 08:04:47.183407 2026] [:error] [pid 29605:tid 29635] [client 145.239.69.106:35116] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "afvXH4nxrTjETioEY0QCyAAAABU"]
[Thu May 07 08:04:49.798683 2026] [:error] [pid 29606:tid 29649] [client 145.239.69.106:35132] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "afvXIRR5HjZ1PlSAiKuJ3gAAAEg"]
[Thu May 07 08:04:52.402668 2026] [:error] [pid 29710:tid 29726] [client 145.239.69.106:50150] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "afvXJP0atTQld9Y2ht8YMQAAAM4"]
[Thu May 07 08:04:54.860867 2026] [:error] [pid 4539:tid 4555] [client 145.239.69.106:50152] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "afvXJoPEZE1565sDGnx8MQAAAQ4"]
[Thu May 07 08:04:57.708351 2026] [:error] [pid 29607:tid 29678] [client 145.239.69.106:50158] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "afvXKabP7TJOAh7WSUOaSQAAAIo"]
[Thu May 07 08:05:00.270892 2026] [:error] [pid 29607:tid 29671] [client 145.239.69.106:50160] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "afvXLKbP7TJOAh7WSUOaWQAAAIM"]
[Thu May 07 08:05:02.788937 2026] [:error] [pid 4539:tid 4552] [client 145.239.69.106:60344] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afvXLoPEZE1565sDGnx8TAAAAQs"]
[Thu May 07 08:05:05.281731 2026] [:error] [pid 29606:tid 29646] [client 145.239.69.106:60356] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afvXMRR5HjZ1PlSAiKuJ_AAAAEU"]
[Thu May 07 08:05:07.749479 2026] [:error] [pid 29605:tid 29634] [client 145.239.69.106:60358] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afvXM4nxrTjETioEY0QC5QAAABQ"]
[Thu May 07 08:05:10.384388 2026] [:error] [pid 29605:tid 29638] [client 145.239.69.106:60360] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afvXNonxrTjETioEY0QC6gAAABg"]
[Thu May 07 08:05:12.912826 2026] [:error] [pid 29607:tid 29690] [client 145.239.69.106:41378] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afvXOKbP7TJOAh7WSUOaYgAAAJY"]
[Thu May 07 08:05:15.424388 2026] [:error] [pid 29607:tid 29670] [client 145.239.69.106:41390] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afvXO6bP7TJOAh7WSUOaZgAAAII"]
[Thu May 07 08:05:47.208817 2026] [:error] [pid 29710:tid 29736] [client 145.239.69.106:41400] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "afvXW_0atTQld9Y2ht8YkgAAANg"]
[Thu May 07 08:05:49.699491 2026] [:error] [pid 29606:tid 29649] [client 145.239.69.106:40404] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afvXXRR5HjZ1PlSAiKuKHAAAAEg"]
[Thu May 07 08:05:52.076788 2026] [:error] [pid 29607:tid 29692] [client 145.239.69.106:52948] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "afvXYKbP7TJOAh7WSUOa0AAAAJg"]
[Thu May 07 08:05:54.648562 2026] [:error] [pid 4539:tid 4547] [client 145.239.69.106:52956] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "afvXYoPEZE1565sDGnx8zAAAAQY"]
[Thu May 07 08:05:57.058465 2026] [:error] [pid 4539:tid 4550] [client 145.239.69.106:52960] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "afvXZYPEZE1565sDGnx82QAAAQk"]
[Thu May 07 08:05:59.812121 2026] [:error] [pid 29710:tid 29723] [client 145.239.69.106:52972] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "afvXZ_0atTQld9Y2ht8Y6wAAAMs"]
[Thu May 07 08:06:02.399935 2026] [:error] [pid 4539:tid 4564] [client 145.239.69.106:46836] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "afvXaoPEZE1565sDGnx86QAAARc"]
[Thu May 07 08:06:05.164542 2026] [:error] [pid 29606:tid 29653] [client 145.239.69.106:46852] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "afvXbRR5HjZ1PlSAiKuKTQAAAEw"]
[Thu May 07 08:06:07.631682 2026] [:error] [pid 29607:tid 29680] [client 145.239.69.106:46856] [client 145.239.69.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "afvXb6bP7TJOAh7WSUObHgAAAIw"]
[Thu May 07 10:18:41.104482 2026] [:error] [pid 56066:tid 56139] [client 43.153.54.14:46964] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afv2gUYS8DGwDvklLv6XCwAAANA"]
[Thu May 07 10:58:51.088476 2026] [:error] [pid 56065:tid 56097] [client 79.186.219.199:51230] [client 79.186.219.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.186.219.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afv_63dV4hYThdnhfxDNHQAAAIE"]
[Thu May 07 10:59:01.007615 2026] [:error] [pid 56150:tid 56172] [client 79.186.219.199:51616] [client 79.186.219.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.186.219.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afv_9du4duXJJeTigXQgDAAAAFQ"]
[Thu May 07 10:59:11.811990 2026] [:error] [pid 56065:tid 56107] [client 79.186.219.199:51946] [client 79.186.219.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.186.219.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afv__3dV4hYThdnhfxDNLAAAAIs"]
[Thu May 07 10:59:22.569662 2026] [:error] [pid 56065:tid 56108] [client 79.186.219.199:52279] [client 79.186.219.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.186.219.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwACndV4hYThdnhfxDNNwAAAIw"]
[Thu May 07 10:59:33.286364 2026] [:error] [pid 56150:tid 56165] [client 79.186.219.199:52612] [client 79.186.219.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.186.219.199, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwAFdu4duXJJeTigXQgRgAAAE0"]
[Thu May 07 12:02:48.490693 2026] [:error] [pid 56065:tid 56114] [client 20.239.240.145:38041] [client 20.239.240.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/faq"] [unique_id "afwO6HdV4hYThdnhfxDXkQAAAJI"]
[Thu May 07 12:02:48.573751 2026] [:error] [pid 56066:tid 56134] [client 20.239.240.145:38035] [client 20.239.240.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/help"] [unique_id "afwO6EYS8DGwDvklLv6uawAAAMs"]
[Thu May 07 12:02:48.733549 2026] [:error] [pid 56066:tid 56128] [client 20.239.240.145:38039] [client 20.239.240.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/access"] [unique_id "afwO6EYS8DGwDvklLv6ubAAAAMU"]
[Thu May 07 13:25:30.108061 2026] [:error] [pid 56056:tid 56183] [client 150.228.11.163:14758] [client 150.228.11.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.228.11.163, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwiSgMt_VAuBmZ2nR9qvQAAAVE"]
[Thu May 07 13:25:40.308690 2026] [:error] [pid 56066:tid 56142] [client 150.228.11.163:53004] [client 150.228.11.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.228.11.163, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwiVEYS8DGwDvklLv6_CwAAANM"]
[Thu May 07 13:25:51.338377 2026] [:error] [pid 56056:tid 56067] [client 150.228.11.163:61834] [client 150.228.11.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.228.11.163, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwiXwMt_VAuBmZ2nR9q3gAAAUY"]
[Thu May 07 13:26:01.518976 2026] [:error] [pid 56066:tid 56143] [client 150.228.11.163:6155] [client 150.228.11.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.228.11.163, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwiaUYS8DGwDvklLv6_EwAAANQ"]
[Thu May 07 13:26:12.094962 2026] [:error] [pid 56066:tid 56126] [client 150.228.11.163:29843] [client 150.228.11.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.228.11.163, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwidEYS8DGwDvklLv6_GQAAAMM"]
[Thu May 07 13:48:01.086393 2026] [:error] [pid 56066:tid 56146] [client 61.3.158.98:61974] [client 61.3.158.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.158.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwnkUYS8DGwDvklLv7CsgAAANc"]
[Thu May 07 13:48:11.108389 2026] [:error] [pid 56150:tid 56154] [client 61.3.158.98:62501] [client 61.3.158.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.158.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwnm9u4duXJJeTigXRQVwAAAEI"]
[Thu May 07 13:48:21.650199 2026] [:error] [pid 56150:tid 56168] [client 61.3.158.98:62977] [client 61.3.158.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.158.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwnpdu4duXJJeTigXRQXgAAAFA"]
[Thu May 07 13:48:32.102031 2026] [:error] [pid 56056:tid 56179] [client 61.3.158.98:63309] [client 61.3.158.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.158.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwnsAMt_VAuBmZ2nR92VgAAAU0"]
[Thu May 07 13:48:42.578972 2026] [:error] [pid 56150:tid 56156] [client 61.3.158.98:63648] [client 61.3.158.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.158.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afwnutu4duXJJeTigXRQYwAAAEQ"]
[Thu May 07 14:03:13.044359 2026] [:error] [pid 56150:tid 56158] [client 49.51.203.164:48794] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afwrIdu4duXJJeTigXRU1QAAAEY"]
[Thu May 07 14:21:58.965741 2026] [:error] [pid 15715:tid 15732] [client 52.140.115.251:50188] [client 52.140.115.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "afwvhiY4dZsLOttMkcc-kAAAAQw"]
[Thu May 07 14:22:03.697228 2026] [autoindex:error] [pid 15631:tid 15699] [client 52.140.115.251:53443] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu May 07 14:22:08.566334 2026] [:error] [pid 15631:tid 15691] [client 52.140.115.251:53443] [client 52.140.115.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afwvkHvP1GkPUuuLfqX2ywAAAMQ"]
[Thu May 07 14:22:09.144507 2026] [:error] [pid 15715:tid 15733] [client 52.140.115.251:60242] [client 52.140.115.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afwvkSY4dZsLOttMkcc-mgAAAQ0"]
[Thu May 07 14:22:09.708150 2026] [:error] [pid 15715:tid 15719] [client 52.140.115.251:60707] [client 52.140.115.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afwvkSY4dZsLOttMkcc-mwAAAQI"]
[Thu May 07 14:22:10.516250 2026] [:error] [pid 15631:tid 15699] [client 52.140.115.251:61218] [client 52.140.115.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "afwvknvP1GkPUuuLfqX2zAAAAMw"]
[Thu May 07 15:58:40.733177 2026] [:error] [pid 15715:tid 15724] [client 59.103.40.186:52852] [client 59.103.40.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.103.40.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afxGMCY4dZsLOttMkcdoJAAAAQc"]
[Thu May 07 15:58:51.355800 2026] [:error] [pid 15715:tid 15741] [client 59.103.40.186:53389] [client 59.103.40.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.103.40.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afxGOyY4dZsLOttMkcdoMwAAARU"]
[Thu May 07 15:59:01.198982 2026] [:error] [pid 15715:tid 15740] [client 59.103.40.186:53816] [client 59.103.40.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.103.40.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afxGRSY4dZsLOttMkcdoSgAAARQ"]
[Thu May 07 15:59:12.074160 2026] [:error] [pid 15715:tid 15735] [client 59.103.40.186:54144] [client 59.103.40.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.103.40.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afxGUCY4dZsLOttMkcdoUQAAAQ8"]
[Thu May 07 15:59:22.808884 2026] [:error] [pid 15715:tid 15726] [client 59.103.40.186:54475] [client 59.103.40.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.103.40.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afxGWiY4dZsLOttMkcdoXAAAAQk"]
[Thu May 07 16:31:34.645649 2026] [:error] [pid 28098:tid 28107] [client 203.192.252.20:57132] [client 203.192.252.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.192.252.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afxN5svhwfljlt8trSqjlAAAAEc"]
[Thu May 07 16:31:45.107206 2026] [:error] [pid 15631:tid 15696] [client 203.192.252.20:49925] [client 203.192.252.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.192.252.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afxN8XvP1GkPUuuLfqUaOQAAAMk"]
[Thu May 07 16:31:55.829345 2026] [:error] [pid 15630:tid 15677] [client 203.192.252.20:50411] [client 203.192.252.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.192.252.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afxN-3TithRAi4821quZXwAAAJE"]
[Thu May 07 16:32:06.426185 2026] [:error] [pid 28098:tid 28106] [client 203.192.252.20:50853] [client 203.192.252.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.192.252.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afxOBsvhwfljlt8trSqjqgAAAEY"]
[Thu May 07 18:14:11.663948 2026] [:error] [pid 28098:tid 28122] [client 195.91.4.79:42067] [client 195.91.4.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.91.4.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afxl88vhwfljlt8trSrIiwAAAFY"]
[Thu May 07 18:38:51.047293 2026] [:error] [pid 15631:tid 15711] [client 195.91.4.79:24509] [client 195.91.4.79] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afxru3vP1GkPUuuLfqUuAgAAANg"]
[Thu May 07 18:39:19.501934 2026] [:error] [pid 15715:tid 15731] [client 195.91.4.79:11783] [client 195.91.4.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.91.4.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afxr1yY4dZsLOttMkceNCgAAAQs"]
[Thu May 07 21:38:29.805783 2026] [:error] [pid 28098:tid 28106] [client 177.206.153.13:62071] [client 177.206.153.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.206.153.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afyV1cvhwfljlt8trSoQZwAAAEY"]
[Thu May 07 21:38:40.684554 2026] [:error] [pid 15715:tid 15719] [client 177.206.153.13:62432] [client 177.206.153.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.206.153.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afyV4CY4dZsLOttMkce3dgAAAQI"]
[Thu May 07 21:38:51.050215 2026] [:error] [pid 15629:tid 15642] [client 177.206.153.13:62811] [client 177.206.153.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.206.153.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afyV6_rIJCALdUrO43mD2QAAAAk"]
[Thu May 07 21:39:01.685002 2026] [:error] [pid 15715:tid 15719] [client 177.206.153.13:63266] [client 177.206.153.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.206.153.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afyV9SY4dZsLOttMkce3nQAAAQI"]
[Thu May 07 21:39:12.406084 2026] [:error] [pid 28098:tid 28123] [client 177.206.153.13:63621] [client 177.206.153.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.206.153.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afyWAMvhwfljlt8trSoQtQAAAFc"]
[Thu May 07 22:48:27.538167 2026] [:error] [pid 15630:tid 15666] [client 202.66.180.240:49332] [client 202.66.180.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.66.180.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afymO3TithRAi4821qvPDwAAAIY"]
[Thu May 07 22:48:29.286219 2026] [:error] [pid 28098:tid 28103] [client 202.66.180.240:49917] [client 202.66.180.240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afymPcvhwfljlt8trSosQQAAAEM"]
[Thu May 07 22:48:35.523484 2026] [:error] [pid 28098:tid 28116] [client 202.66.180.240:49917] [client 202.66.180.240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afymQ8vhwfljlt8trSosSAAAAFA"]
[Fri May 08 00:07:09.041919 2026] [:error] [pid 12374:tid 12389] [client 49.234.192.248:45288] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afy4rRo3QnNcFDMfKt1-gQAAAYs"]
[Fri May 08 00:50:13.133962 2026] [:error] [pid 15715:tid 15720] [client 43.157.95.131:43514] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "afzCxSY4dZsLOttMkcfxEAAAAQM"]
[Fri May 08 01:18:04.895774 2026] [:error] [pid 12374:tid 12383] [client 95.217.109.26:30016] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "afzJTBo3QnNcFDMfKt2F5QAAAYU"]
[Fri May 08 01:18:07.456000 2026] [:error] [pid 28098:tid 28105] [client 95.217.109.26:10796] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "afzJT8vhwfljlt8trSpB4wAAAEU"]
[Fri May 08 01:18:09.898013 2026] [:error] [pid 15631:tid 15706] [client 95.217.109.26:10806] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "afzJUXvP1GkPUuuLfqV4ZwAAANM"]
[Fri May 08 01:18:12.562601 2026] [:error] [pid 12374:tid 12398] [client 95.217.109.26:10808] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "afzJVBo3QnNcFDMfKt2F5wAAAZQ"]
[Fri May 08 01:18:15.051970 2026] [:error] [pid 15631:tid 15701] [client 95.217.109.26:10812] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "afzJV3vP1GkPUuuLfqV4aQAAAM4"]
[Fri May 08 01:18:17.492329 2026] [:error] [pid 28098:tid 28122] [client 95.217.109.26:12140] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "afzJWcvhwfljlt8trSpB6AAAAFY"]
[Fri May 08 01:18:20.013341 2026] [:error] [pid 15630:tid 15664] [client 95.217.109.26:12152] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "afzJXHTithRAi4821qvs-gAAAIQ"]
[Fri May 08 01:18:22.450150 2026] [:error] [pid 15630:tid 15672] [client 95.217.109.26:12154] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "afzJXnTithRAi4821qvs_AAAAIw"]
[Fri May 08 01:18:25.040122 2026] [:error] [pid 15630:tid 15662] [client 95.217.109.26:12164] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "afzJYXTithRAi4821qvtAQAAAII"]
[Fri May 08 01:18:27.648690 2026] [:error] [pid 15631:tid 15709] [client 95.217.109.26:15894] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "afzJY3vP1GkPUuuLfqV4cQAAANY"]
[Fri May 08 01:18:30.166383 2026] [:error] [pid 12374:tid 12399] [client 95.217.109.26:15906] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "afzJZho3QnNcFDMfKt2F6QAAAZU"]
[Fri May 08 01:18:32.781815 2026] [:error] [pid 15630:tid 15674] [client 95.217.109.26:15912] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "afzJaHTithRAi4821qvtDAAAAI4"]
[Fri May 08 01:18:35.212792 2026] [:error] [pid 15631:tid 15703] [client 95.217.109.26:15918] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "afzJa3vP1GkPUuuLfqV4dAAAANA"]
[Fri May 08 01:18:37.819134 2026] [:error] [pid 15631:tid 15711] [client 95.217.109.26:15444] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "afzJbXvP1GkPUuuLfqV4dwAAANg"]
[Fri May 08 01:18:40.340603 2026] [:error] [pid 15630:tid 15676] [client 95.217.109.26:15454] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "afzJcHTithRAi4821qvtEwAAAJA"]
[Fri May 08 01:18:42.925862 2026] [:error] [pid 28098:tid 28106] [client 95.217.109.26:15470] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "afzJcsvhwfljlt8trSpB-AAAAEY"]
[Fri May 08 01:18:45.580739 2026] [:error] [pid 15629:tid 15639] [client 95.217.109.26:15480] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "afzJdfrIJCALdUrO43miTQAAAAY"]
[Fri May 08 01:18:50.389023 2026] [:error] [pid 15629:tid 15647] [client 95.217.109.26:11168] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "afzJevrIJCALdUrO43miTwAAAA4"]
[Fri May 08 01:18:52.917060 2026] [:error] [pid 28098:tid 28104] [client 95.217.109.26:11172] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "afzJfMvhwfljlt8trSpB_QAAAEQ"]
[Fri May 08 01:18:55.510838 2026] [:error] [pid 15631:tid 15698] [client 95.217.109.26:11178] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "afzJf3vP1GkPUuuLfqV4gAAAAMs"]
[Fri May 08 01:18:58.081688 2026] [:error] [pid 15631:tid 15689] [client 95.217.109.26:5678] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "afzJgnvP1GkPUuuLfqV4hAAAAMI"]
[Fri May 08 01:19:00.585730 2026] [:error] [pid 15631:tid 15687] [client 95.217.109.26:5694] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "afzJhHvP1GkPUuuLfqV4iQAAAMA"]
[Fri May 08 01:19:44.358011 2026] [:error] [pid 15630:tid 15661] [client 95.217.109.26:28468] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "afzJsHTithRAi4821qvtQAAAAIE"]
[Fri May 08 01:19:46.992379 2026] [:error] [pid 15631:tid 15694] [client 95.217.109.26:6414] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "afzJsnvP1GkPUuuLfqV4qQAAAMc"]
[Fri May 08 01:19:49.534628 2026] [:error] [pid 15629:tid 15641] [client 95.217.109.26:6420] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "afzJtfrIJCALdUrO43mibwAAAAg"]
[Fri May 08 01:19:52.290308 2026] [:error] [pid 15629:tid 15644] [client 95.217.109.26:6432] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "afzJuPrIJCALdUrO43micgAAAAs"]
[Fri May 08 01:19:54.877690 2026] [:error] [pid 15630:tid 15670] [client 95.217.109.26:6440] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "afzJunTithRAi4821qvtRgAAAIo"]
[Fri May 08 01:19:57.369565 2026] [:error] [pid 15630:tid 15669] [client 95.217.109.26:12456] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "afzJvXTithRAi4821qvtSQAAAIk"]
[Fri May 08 01:23:42.794869 2026] [:error] [pid 12374:tid 12397] [client 95.217.109.26:55698] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "afzKnho3QnNcFDMfKt2GOAAAAZM"]
[Fri May 08 01:23:45.761122 2026] [:error] [pid 15715:tid 15734] [client 95.217.109.26:55704] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "afzKoSY4dZsLOttMkcf63wAAAQ4"]
[Fri May 08 01:23:48.402429 2026] [:error] [pid 15631:tid 15707] [client 95.217.109.26:13844] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "afzKpHvP1GkPUuuLfqV5UQAAANQ"]
[Fri May 08 01:23:51.201088 2026] [:error] [pid 12323:tid 12327] [client 95.217.109.26:13852] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "afzKp9dhHMnGFpc7MDxINwAAAUA"]
[Fri May 08 01:23:53.883800 2026] [:error] [pid 15631:tid 15703] [client 95.217.109.26:13866] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "afzKqXvP1GkPUuuLfqV5XAAAANA"]
[Fri May 08 01:23:56.576701 2026] [:error] [pid 12374:tid 12398] [client 95.217.109.26:13874] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "afzKrBo3QnNcFDMfKt2GQgAAAZQ"]
[Fri May 08 01:23:59.150669 2026] [:error] [pid 12323:tid 12331] [client 95.217.109.26:43604] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "afzKr9dhHMnGFpc7MDxIRgAAAUQ"]
[Fri May 08 01:24:01.625707 2026] [:error] [pid 15715:tid 15737] [client 95.217.109.26:43618] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "afzKsSY4dZsLOttMkcf67gAAARE"]
[Fri May 08 01:24:04.216848 2026] [:error] [pid 28098:tid 28120] [client 95.217.109.26:43628] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "afzKtMvhwfljlt8trSpClwAAAFQ"]
[Fri May 08 01:24:06.753785 2026] [:error] [pid 28098:tid 28105] [client 95.217.109.26:43634] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "afzKtsvhwfljlt8trSpCmgAAAEU"]
[Fri May 08 01:24:09.355271 2026] [:error] [pid 15715:tid 15744] [client 95.217.109.26:32954] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "afzKuSY4dZsLOttMkcf6_QAAARg"]
[Fri May 08 01:24:12.011718 2026] [:error] [pid 15631:tid 15692] [client 95.217.109.26:32962] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "afzKvHvP1GkPUuuLfqV5bwAAAMU"]
[Fri May 08 01:24:14.422998 2026] [:error] [pid 15630:tid 15682] [client 95.217.109.26:32968] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "afzKvnTithRAi4821qvt9AAAAJY"]
[Fri May 08 01:24:17.004361 2026] [:error] [pid 15630:tid 15676] [client 95.217.109.26:57306] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "afzKwXTithRAi4821qvt9gAAAJA"]
[Fri May 08 01:24:19.628633 2026] [:error] [pid 15629:tid 15651] [client 95.217.109.26:57308] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "afzKw_rIJCALdUrO43mjPgAAABI"]
[Fri May 08 01:24:22.228925 2026] [:error] [pid 15629:tid 15637] [client 95.217.109.26:57312] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "afzKxvrIJCALdUrO43mjQQAAAAQ"]
[Fri May 08 01:24:24.960579 2026] [:error] [pid 15629:tid 15645] [client 95.217.109.26:57322] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "afzKyPrIJCALdUrO43mjRwAAAAw"]
[Fri May 08 01:24:27.429351 2026] [:error] [pid 28098:tid 28103] [client 95.217.109.26:3886] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "afzKy8vhwfljlt8trSpCqQAAAEM"]
[Fri May 08 01:24:30.082777 2026] [:error] [pid 15630:tid 15681] [client 95.217.109.26:3898] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "afzKznTithRAi4821qvt_wAAAJU"]
[Fri May 08 01:24:32.816657 2026] [:error] [pid 15715:tid 15736] [client 95.217.109.26:3902] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "afzK0CY4dZsLOttMkcf7EQAAARA"]
[Fri May 08 01:24:35.369537 2026] [:error] [pid 15715:tid 15717] [client 95.217.109.26:3912] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "afzK0yY4dZsLOttMkcf7FQAAAQA"]
[Fri May 08 01:24:37.866748 2026] [:error] [pid 12374:tid 12381] [client 95.217.109.26:64748] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "afzK1Ro3QnNcFDMfKt2GVAAAAYM"]
[Fri May 08 01:54:34.547126 2026] [:error] [pid 15630:tid 15683] [client 38.58.38.10:54858] [client 38.58.38.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.58.38.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afzR2nTithRAi4821qvyuQAAAJc"]
[Fri May 08 01:54:44.793589 2026] [:error] [pid 15630:tid 15671] [client 38.58.38.10:55333] [client 38.58.38.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.58.38.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afzR5HTithRAi4821qvyxgAAAIs"]
[Fri May 08 01:54:55.324568 2026] [:error] [pid 12323:tid 12329] [client 38.58.38.10:55700] [client 38.58.38.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.58.38.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afzR79dhHMnGFpc7MDxJzwAAAUI"]
[Fri May 08 01:55:05.857370 2026] [:error] [pid 15715:tid 15724] [client 38.58.38.10:56071] [client 38.58.38.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.58.38.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afzR-SY4dZsLOttMkccCfAAAAQc"]
[Fri May 08 01:55:16.409777 2026] [:error] [pid 15715:tid 15730] [client 38.58.38.10:56462] [client 38.58.38.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.58.38.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "afzSBCY4dZsLOttMkccCkQAAAQo"]
[Fri May 08 05:11:27.388817 2026] [:error] [pid 51008:tid 51068] [client 49.51.233.95:48836] [client 49.51.233.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "afz__3B58C2Y1tgLtuL8eQAAAFM"]
[Fri May 08 07:06:06.387282 2026] [:error] [pid 61356:tid 61390] [client 197.185.180.200:16896] [client 197.185.180.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.180.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af0a3ox3vpB8oWhUq2N9ewAAAcI"]
[Fri May 08 07:06:17.247463 2026] [:error] [pid 51007:tid 51044] [client 197.185.180.200:16897] [client 197.185.180.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.180.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af0a6VMagSGstWKyzzWKuwAAABY"]
[Fri May 08 07:06:29.392755 2026] [:error] [pid 51009:tid 51099] [client 197.185.180.200:16898] [client 197.185.180.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.180.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af0a9eB0GbUWhxgzX9W2KQAAAJc"]
[Fri May 08 07:06:43.032465 2026] [:error] [pid 51008:tid 51069] [client 197.185.180.200:16899] [client 197.185.180.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.180.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af0bA3B58C2Y1tgLtuIm6AAAAFQ"]
[Fri May 08 07:06:55.884640 2026] [:error] [pid 61317:tid 61340] [client 197.185.180.200:16900] [client 197.185.180.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.185.180.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af0bD8-fFk_CedOCOYsxJQAAAVQ"]
[Fri May 08 09:24:58.419840 2026] [:error] [pid 61356:tid 61390] [client 43.157.188.74:45132] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af07aox3vpB8oWhUq2O-GAAAAcI"]
[Fri May 08 09:36:03.883384 2026] [:error] [pid 61317:tid 61340] [client 4.193.137.131:18945] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "af0-A8-fFk_CedOCOYtWrwAAAVQ"]
[Fri May 08 09:36:04.239691 2026] [:error] [pid 61355:tid 61361] [client 4.193.137.131:18950] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "af0-BPkhJTi30CBXmMn6TwAAAYA"]
[Fri May 08 09:36:04.591081 2026] [:error] [pid 51007:tid 51028] [client 4.193.137.131:23286] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "af0-BFMagSGstWKyzzWhKQAAAAY"]
[Fri May 08 09:36:04.958548 2026] [:error] [pid 51007:tid 51030] [client 4.193.137.131:23278] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "af0-BFMagSGstWKyzzWhKgAAAAg"]
[Fri May 08 10:39:22.805999 2026] [:error] [pid 61356:tid 61392] [client 34.35.112.197:55184] [client 34.35.112.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af1M2ox3vpB8oWhUq2PXWQAAAcQ"]
[Fri May 08 10:48:49.656810 2026] [:error] [pid 51007:tid 51036] [client 4.228.184.28:15354] [client 4.228.184.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "af1PEVMagSGstWKyzzWrTAAAAA4"]
[Fri May 08 10:48:50.394353 2026] [:error] [pid 61356:tid 61410] [client 4.228.184.28:15237] [client 4.228.184.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "af1PEox3vpB8oWhUq2PZoAAAAdY"]
[Fri May 08 10:48:51.121805 2026] [:error] [pid 51008:tid 51070] [client 4.228.184.28:15235] [client 4.228.184.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "af1PE3B58C2Y1tgLtuJRXwAAAFU"]
[Fri May 08 10:48:51.860556 2026] [:error] [pid 61356:tid 61408] [client 4.228.184.28:15355] [client 4.228.184.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "af1PE4x3vpB8oWhUq2PZowAAAdQ"]
[Fri May 08 12:06:29.629658 2026] [:error] [pid 51009:tid 51100] [client 34.154.210.54:55174] [client 34.154.210.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af1hReB0GbUWhxgzX9XNsgAAAJg"]
[Fri May 08 12:19:47.331374 2026] [:error] [pid 34318:tid 34340] [client 146.56.197.150:42288] [client 146.56.197.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "af1kY8r3guirgJiKhzCq9AAAARQ"]
[Fri May 08 12:56:39.766367 2026] [:error] [pid 61355:tid 61373] [client 101.33.81.73:37540] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "af1tB_khJTi30CBXmMk3VgAAAYw"]
[Fri May 08 13:04:57.765290 2026] [:error] [pid 61356:tid 61402] [client 122.161.76.160:29127] [client 122.161.76.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.76.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af1u-Yx3vpB8oWhUq2P9BwAAAc4"]
[Fri May 08 13:05:08.115900 2026] [:error] [pid 61355:tid 61382] [client 122.161.76.160:11394] [client 122.161.76.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.76.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af1vBPkhJTi30CBXmMk40gAAAZU"]
[Fri May 08 13:05:18.659833 2026] [:error] [pid 61355:tid 61365] [client 122.161.76.160:15394] [client 122.161.76.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.76.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af1vDvkhJTi30CBXmMk45AAAAYQ"]
[Fri May 08 13:05:29.398018 2026] [:error] [pid 61355:tid 61377] [client 122.161.76.160:2730] [client 122.161.76.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.76.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af1vGfkhJTi30CBXmMk48AAAAZA"]
[Fri May 08 13:05:40.195443 2026] [:error] [pid 61356:tid 61389] [client 122.161.76.160:28034] [client 122.161.76.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.76.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af1vJIx3vpB8oWhUq2P9TgAAAcE"]
[Fri May 08 13:48:59.712880 2026] [:error] [pid 61356:tid 61396] [client 49.36.191.113:59858] [client 49.36.191.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.191.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af15S4x3vpB8oWhUq2MQbAAAAcg"]
[Fri May 08 13:49:10.401615 2026] [:error] [pid 61355:tid 61373] [client 49.36.191.113:60270] [client 49.36.191.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.191.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af15VvkhJTi30CBXmMlFtwAAAYw"]
[Fri May 08 13:49:19.148026 2026] [:error] [pid 61317:tid 61327] [client 49.36.191.113:60719] [client 49.36.191.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.191.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af15X8-fFk_CedOCOYuC_QAAAUc"]
[Fri May 08 13:49:30.277034 2026] [:error] [pid 61317:tid 61334] [client 49.36.191.113:61170] [client 49.36.191.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.191.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af15as-fFk_CedOCOYuDAQAAAU4"]
[Fri May 08 13:50:59.414053 2026] [:error] [pid 34318:tid 34320] [client 49.36.191.113:63284] [client 49.36.191.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.191.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af15w8r3guirgJiKhzCz3gAAAQA"]
[Fri May 08 13:51:07.407971 2026] [:error] [pid 61317:tid 61328] [client 49.36.191.113:63682] [client 49.36.191.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.191.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af15y8-fFk_CedOCOYuDGAAAAUg"]
[Fri May 08 14:37:50.772679 2026] [:error] [pid 61355:tid 61364] [client 192.228.157.15:42994] [client 192.228.157.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.228.157.15, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2EvvkhJTi30CBXmMlSIgAAAYM"]
[Fri May 08 15:00:27.066891 2026] [:error] [pid 61356:tid 61389] [client 192.228.157.15:14249] [client 192.228.157.15] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af2KC4x3vpB8oWhUq2Ms2AAAAcE"]
[Fri May 08 15:00:52.563848 2026] [:error] [pid 61355:tid 61368] [client 192.228.157.15:35198] [client 192.228.157.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.228.157.15, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2KJPkhJTi30CBXmMlZNQAAAYc"]
[Fri May 08 15:28:56.922867 2026] [:error] [pid 61317:tid 61337] [client 34.122.144.100:60903] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af2QuM-fFk_CedOCOYuUNwAAAVE"]
[Fri May 08 15:28:57.368289 2026] [:error] [pid 34318:tid 34333] [client 34.122.144.100:65281] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af2Qucr3guirgJiKhzC7kQAAAQ0"]
[Fri May 08 15:28:57.851044 2026] [:error] [pid 51009:tid 51086] [client 34.122.144.100:52607] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "af2QueB0GbUWhxgzX9X4tQAAAIo"]
[Fri May 08 16:09:25.180356 2026] [:error] [pid 61355:tid 61369] [client 103.179.104.152:57238] [client 103.179.104.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2aNfkhJTi30CBXmMllGgAAAYg"]
[Fri May 08 16:09:35.136299 2026] [:error] [pid 61355:tid 61364] [client 103.179.104.152:51956] [client 103.179.104.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2aP_khJTi30CBXmMllMQAAAYM"]
[Fri May 08 16:09:45.716787 2026] [:error] [pid 61317:tid 61325] [client 103.179.104.152:59705] [client 103.179.104.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2aSc-fFk_CedOCOYuZNQAAAUU"]
[Fri May 08 16:09:56.252863 2026] [:error] [pid 61356:tid 61390] [client 103.179.104.152:60912] [client 103.179.104.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2aVIx3vpB8oWhUq2NADgAAAcI"]
[Fri May 08 16:10:06.871838 2026] [:error] [pid 51009:tid 51093] [client 103.179.104.152:51828] [client 103.179.104.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2aXuB0GbUWhxgzX9X-agAAAJE"]
[Fri May 08 16:23:00.202846 2026] [:error] [pid 61317:tid 61323] [client 103.179.104.180:61164] [client 103.179.104.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.180, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2dZM-fFk_CedOCOYuaagAAAUM"]
[Fri May 08 16:32:42.274291 2026] [:error] [pid 61356:tid 61412] [client 103.179.104.189:54798] [client 103.179.104.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.189, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2fqox3vpB8oWhUq2NFWwAAAdg"]
[Fri May 08 16:35:21.368880 2026] [:error] [pid 51007:tid 51028] [client 103.179.104.179:51651] [client 103.179.104.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.179, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2gSVMagSGstWKyzzXNGQAAAAY"]
[Fri May 08 16:50:21.200035 2026] [:error] [pid 51007:tid 51032] [client 43.165.127.225:42094] [client 43.165.127.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af2jzVMagSGstWKyzzXOygAAAAo"]
[Fri May 08 18:32:16.983961 2026] [:error] [pid 61356:tid 61398] [client 147.135.213.11:41476] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "af27sIx3vpB8oWhUq2N3ewAAAco"]
[Fri May 08 18:32:19.520048 2026] [:error] [pid 61355:tid 61362] [client 147.135.213.11:39656] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "af27s_khJTi30CBXmMmOKAAAAYE"]
[Fri May 08 18:32:21.835951 2026] [:error] [pid 61355:tid 61380] [client 147.135.213.11:39664] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "af27tfkhJTi30CBXmMmOLgAAAZM"]
[Fri May 08 18:32:24.284885 2026] [:error] [pid 51009:tid 51086] [client 147.135.213.11:39672] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "af27uOB0GbUWhxgzX9UeVAAAAIo"]
[Fri May 08 18:32:26.749968 2026] [:error] [pid 61356:tid 61408] [client 147.135.213.11:56306] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "af27uox3vpB8oWhUq2N3ogAAAdQ"]
[Fri May 08 18:32:29.172245 2026] [:error] [pid 61356:tid 61406] [client 147.135.213.11:56308] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "af27vYx3vpB8oWhUq2N3rAAAAdI"]
[Fri May 08 18:32:31.605841 2026] [:error] [pid 61356:tid 61390] [client 147.135.213.11:56324] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "af27v4x3vpB8oWhUq2N3vgAAAcI"]
[Fri May 08 18:32:34.043948 2026] [:error] [pid 61355:tid 61378] [client 147.135.213.11:56328] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "af27wvkhJTi30CBXmMmOTQAAAZE"]
[Fri May 08 18:32:36.291988 2026] [:error] [pid 61356:tid 61404] [client 147.135.213.11:39260] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "af27xIx3vpB8oWhUq2N35QAAAdA"]
[Fri May 08 18:32:38.844277 2026] [:error] [pid 51009:tid 51086] [client 147.135.213.11:39276] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "af27xuB0GbUWhxgzX9UegwAAAIo"]
[Fri May 08 18:32:41.249421 2026] [:error] [pid 61356:tid 61411] [client 147.135.213.11:39288] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "af27yYx3vpB8oWhUq2N36gAAAdc"]
[Fri May 08 18:32:43.645050 2026] [:error] [pid 61356:tid 61404] [client 147.135.213.11:39292] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "af27y4x3vpB8oWhUq2N37wAAAdA"]
[Fri May 08 18:32:46.096334 2026] [:error] [pid 34318:tid 34344] [client 147.135.213.11:48160] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "af27zsr3guirgJiKhzDM9AAAARg"]
[Fri May 08 18:32:48.498708 2026] [:error] [pid 51008:tid 51059] [client 147.135.213.11:48172] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "af270HB58C2Y1tgLtuKNQAAAAEo"]
[Fri May 08 18:32:50.899629 2026] [:error] [pid 61356:tid 61392] [client 147.135.213.11:48188] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "af270ox3vpB8oWhUq2N3_gAAAcQ"]
[Fri May 08 18:32:53.305804 2026] [:error] [pid 61317:tid 61325] [client 147.135.213.11:48200] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "af271c-fFk_CedOCOYux4gAAAUU"]
[Fri May 08 18:32:55.853132 2026] [:error] [pid 61356:tid 61401] [client 147.135.213.11:39878] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "af2714x3vpB8oWhUq2N4EQAAAc0"]
[Fri May 08 18:32:58.259811 2026] [:error] [pid 51007:tid 51031] [client 147.135.213.11:39890] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "af272lMagSGstWKyzzXbyQAAAAk"]
[Fri May 08 18:33:00.800486 2026] [:error] [pid 51009:tid 51082] [client 147.135.213.11:39896] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "af273OB0GbUWhxgzX9UewgAAAIY"]
[Fri May 08 18:33:03.327504 2026] [:error] [pid 61355:tid 61369] [client 147.135.213.11:39898] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "af273_khJTi30CBXmMmOiwAAAYg"]
[Fri May 08 18:33:05.833018 2026] [:error] [pid 51113:tid 51137] [client 147.135.213.11:43542] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "af274UQfs7sWtqkpQIdreQAAANY"]
[Fri May 08 18:33:08.233386 2026] [:error] [pid 51008:tid 51057] [client 147.135.213.11:43546] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "af275HB58C2Y1tgLtuKNdgAAAEg"]
[Fri May 08 18:33:10.771065 2026] [:error] [pid 61355:tid 61383] [client 147.135.213.11:43556] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "af275vkhJTi30CBXmMmOkgAAAZY"]
[Fri May 08 18:33:13.315310 2026] [:error] [pid 61356:tid 61390] [client 147.135.213.11:43562] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "af276Yx3vpB8oWhUq2N4LwAAAcI"]
[Fri May 08 18:33:43.763785 2026] [:error] [pid 51009:tid 51096] [client 147.135.213.11:34782] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af28B-B0GbUWhxgzX9UfhgAAAJQ"]
[Fri May 08 18:33:46.203141 2026] [:error] [pid 51008:tid 51070] [client 147.135.213.11:39690] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "af28CnB58C2Y1tgLtuKOBQAAAFU"]
[Fri May 08 18:33:48.715602 2026] [:error] [pid 61356:tid 61388] [client 147.135.213.11:39704] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "af28DIx3vpB8oWhUq2N4dAAAAcA"]
[Fri May 08 18:33:51.111989 2026] [:error] [pid 61317:tid 61324] [client 147.135.213.11:39714] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "af28D8-fFk_CedOCOYuyBwAAAUQ"]
[Fri May 08 18:33:53.622779 2026] [:error] [pid 51007:tid 51043] [client 147.135.213.11:39730] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "af28EVMagSGstWKyzzXb8wAAABU"]
[Fri May 08 18:33:56.157741 2026] [:error] [pid 61317:tid 61332] [client 147.135.213.11:51876] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "af28FM-fFk_CedOCOYuyCQAAAUw"]
[Fri May 08 18:33:58.653156 2026] [:error] [pid 61356:tid 61404] [client 147.135.213.11:51884] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "af28Fox3vpB8oWhUq2N4jwAAAdA"]
[Fri May 08 18:34:01.114403 2026] [:error] [pid 51009:tid 51085] [client 147.135.213.11:51896] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "af28GeB0GbUWhxgzX9UftgAAAIk"]
[Fri May 08 18:34:03.603281 2026] [:error] [pid 51113:tid 51131] [client 147.135.213.11:51906] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "af28G0Qfs7sWtqkpQIdr8AAAANA"]
[Fri May 08 18:34:05.968458 2026] [:error] [pid 61355:tid 61370] [client 147.135.213.11:57258] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "af28HfkhJTi30CBXmMmPAwAAAYk"]
[Fri May 08 18:34:08.487797 2026] [:error] [pid 34318:tid 34344] [client 147.135.213.11:57266] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "af28IMr3guirgJiKhzDNMQAAARg"]
[Fri May 08 18:34:11.019023 2026] [:error] [pid 51009:tid 51083] [client 147.135.213.11:57270] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "af28I-B0GbUWhxgzX9Uf0gAAAIc"]
[Fri May 08 18:34:13.549328 2026] [:error] [pid 61356:tid 61393] [client 147.135.213.11:57278] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "af28JYx3vpB8oWhUq2N4sgAAAcU"]
[Fri May 08 18:34:15.915900 2026] [:error] [pid 61355:tid 61361] [client 147.135.213.11:57318] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "af28J_khJTi30CBXmMmPDAAAAYA"]
[Fri May 08 18:34:18.383919 2026] [:error] [pid 61355:tid 61383] [client 147.135.213.11:57326] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "af28KvkhJTi30CBXmMmPGAAAAZY"]
[Fri May 08 18:34:20.870791 2026] [:error] [pid 61355:tid 61364] [client 147.135.213.11:57342] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "af28LPkhJTi30CBXmMmPJgAAAYM"]
[Fri May 08 18:34:23.321182 2026] [:error] [pid 51008:tid 51061] [client 147.135.213.11:57356] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "af28L3B58C2Y1tgLtuKOJQAAAEw"]
[Fri May 08 18:34:25.648874 2026] [:error] [pid 51008:tid 51052] [client 147.135.213.11:57360] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "af28MXB58C2Y1tgLtuKOKQAAAEM"]
[Fri May 08 18:34:28.137628 2026] [:error] [pid 51007:tid 51045] [client 147.135.213.11:38028] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "af28NFMagSGstWKyzzXcCAAAABc"]
[Fri May 08 18:34:30.600568 2026] [:error] [pid 61356:tid 61412] [client 147.135.213.11:38032] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "af28Nox3vpB8oWhUq2N4xwAAAdg"]
[Fri May 08 18:34:33.108997 2026] [:error] [pid 51113:tid 51139] [client 147.135.213.11:38042] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "af28OUQfs7sWtqkpQIdr_wAAANg"]
[Fri May 08 18:34:35.598010 2026] [:error] [pid 51009:tid 51095] [client 147.135.213.11:38048] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "af28O-B0GbUWhxgzX9Uf8wAAAJM"]
[Fri May 08 18:34:38.060208 2026] [:error] [pid 34318:tid 34323] [client 147.135.213.11:35498] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "af28Psr3guirgJiKhzDNRgAAAQM"]
[Fri May 08 18:34:40.599130 2026] [:error] [pid 51009:tid 51086] [client 147.135.213.11:35504] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "af28QOB0GbUWhxgzX9Uf-gAAAIo"]
[Fri May 08 18:35:10.384466 2026] [:error] [pid 51008:tid 51063] [client 147.135.213.11:35508] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "af28XnB58C2Y1tgLtuKOYQAAAE4"]
[Fri May 08 18:35:12.682772 2026] [:error] [pid 51009:tid 51077] [client 147.135.213.11:35554] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "af28YOB0GbUWhxgzX9UgJQAAAIE"]
[Fri May 08 18:35:15.166971 2026] [:error] [pid 34318:tid 34339] [client 147.135.213.11:35562] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "af28Y8r3guirgJiKhzDNXwAAARM"]
[Fri May 08 18:35:17.679525 2026] [:error] [pid 61317:tid 61340] [client 147.135.213.11:43634] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "af28Zc-fFk_CedOCOYuyRQAAAVQ"]
[Fri May 08 18:35:20.005249 2026] [:error] [pid 61317:tid 61334] [client 147.135.213.11:43648] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "af28aM-fFk_CedOCOYuySgAAAU4"]
[Fri May 08 18:35:22.486923 2026] [:error] [pid 51009:tid 51083] [client 147.135.213.11:43658] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "af28auB0GbUWhxgzX9UgNAAAAIc"]
[Fri May 08 18:35:24.820976 2026] [:error] [pid 51007:tid 51042] [client 147.135.213.11:43674] [client 147.135.213.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "af28bFMagSGstWKyzzXcMgAAABQ"]
[Fri May 08 18:44:59.338810 2026] [:error] [pid 61356:tid 61391] [client 122.161.51.68:13361] [client 122.161.51.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.51.68, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2-q4x3vpB8oWhUq2N-OwAAAcM"]
[Fri May 08 18:45:09.850433 2026] [:error] [pid 51007:tid 51024] [client 122.161.51.68:1308] [client 122.161.51.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.51.68, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2-tVMagSGstWKyzzXeEgAAAAI"]
[Fri May 08 18:45:20.781506 2026] [:error] [pid 61355:tid 61363] [client 122.161.51.68:5995] [client 122.161.51.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.51.68, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2-wPkhJTi30CBXmMmR9AAAAYI"]
[Fri May 08 18:45:31.688170 2026] [:error] [pid 61356:tid 61409] [client 122.161.51.68:15691] [client 122.161.51.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.51.68, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2-y4x3vpB8oWhUq2N-mgAAAdU"]
[Fri May 08 18:45:42.634336 2026] [:error] [pid 61355:tid 61375] [client 122.161.51.68:27004] [client 122.161.51.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.51.68, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af2-1vkhJTi30CBXmMmSCgAAAY4"]
[Fri May 08 19:31:29.686150 2026] [:error] [pid 61356:tid 61393] [client 77.221.3.114:63569] [client 77.221.3.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.221.3.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3JkYx3vpB8oWhUq2OSggAAAcU"]
[Fri May 08 19:31:40.886393 2026] [:error] [pid 61356:tid 61408] [client 77.221.3.114:64165] [client 77.221.3.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.221.3.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3JnIx3vpB8oWhUq2OSkAAAAdQ"]
[Fri May 08 19:31:53.204922 2026] [:error] [pid 51008:tid 51059] [client 77.221.3.114:64625] [client 77.221.3.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.221.3.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3JqXB58C2Y1tgLtuKYrAAAAEo"]
[Fri May 08 20:01:27.937929 2026] [:error] [pid 34318:tid 34341] [client 43.164.129.191:35156] [client 43.164.129.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "af3Ql8r3guirgJiKhzDXewAAARU"]
[Fri May 08 20:02:45.944006 2026] [:error] [pid 61317:tid 61339] [client 162.158.87.25:13733] [client 162.158.87.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af3Q5c-fFk_CedOCOYvCxgAAAVM"]
[Fri May 08 21:17:15.352197 2026] [:error] [pid 61356:tid 61405] [client 13.74.146.113:14876] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl9.php"] [unique_id "af3iW4x3vpB8oWhUq2PBgAAAAdE"]
[Fri May 08 21:17:15.946851 2026] [:error] [pid 61355:tid 61378] [client 13.74.146.113:1326] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl9.php"] [unique_id "af3iW_khJTi30CBXmMm_yAAAAZE"]
[Fri May 08 21:17:16.492314 2026] [:error] [pid 61356:tid 61398] [client 13.74.146.113:1281] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl9.php"] [unique_id "af3iXIx3vpB8oWhUq2PBiQAAAco"]
[Fri May 08 21:17:17.044736 2026] [:error] [pid 61356:tid 61412] [client 13.74.146.113:4029] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl9.php"] [unique_id "af3iXYx3vpB8oWhUq2PBjgAAAdg"]
[Fri May 08 21:17:17.667122 2026] [:error] [pid 61317:tid 61326] [client 13.74.146.113:8776] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cibai.php"] [unique_id "af3iXc-fFk_CedOCOYvSOAAAAUY"]
[Fri May 08 21:17:18.210643 2026] [:error] [pid 61355:tid 61379] [client 13.74.146.113:16088] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cibai.php"] [unique_id "af3iXvkhJTi30CBXmMm_yQAAAZI"]
[Fri May 08 21:17:18.786985 2026] [:error] [pid 61355:tid 61368] [client 13.74.146.113:1337] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cibai.php"] [unique_id "af3iXvkhJTi30CBXmMm_ywAAAYc"]
[Fri May 08 21:17:19.409796 2026] [:error] [pid 51009:tid 51093] [client 13.74.146.113:14435] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cibai.php"] [unique_id "af3iX-B0GbUWhxgzX9VLIAAAAJE"]
[Fri May 08 21:17:19.981745 2026] [:error] [pid 61317:tid 61327] [client 13.74.146.113:18865] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mmp.php"] [unique_id "af3iX8-fFk_CedOCOYvSPQAAAUc"]
[Fri May 08 21:17:20.559822 2026] [:error] [pid 51113:tid 51128] [client 13.74.146.113:11763] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mmp.php"] [unique_id "af3iYEQfs7sWtqkpQId_CAAAAM0"]
[Fri May 08 21:17:21.109318 2026] [:error] [pid 61317:tid 61341] [client 13.74.146.113:8059] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mmp.php"] [unique_id "af3iYc-fFk_CedOCOYvSQAAAAVU"]
[Fri May 08 21:17:21.611933 2026] [:error] [pid 61355:tid 61374] [client 13.74.146.113:9111] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mmp.php"] [unique_id "af3iYfkhJTi30CBXmMm_zwAAAY0"]
[Fri May 08 21:17:22.123057 2026] [:error] [pid 61356:tid 61401] [client 13.74.146.113:11518] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doo.php"] [unique_id "af3iYox3vpB8oWhUq2PByQAAAc0"]
[Fri May 08 21:17:22.695724 2026] [:error] [pid 51008:tid 51069] [client 13.74.146.113:2652] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doo.php"] [unique_id "af3iYnB58C2Y1tgLtuKqngAAAFQ"]
[Fri May 08 21:17:23.326603 2026] [:error] [pid 61356:tid 61392] [client 13.74.146.113:9333] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doo.php"] [unique_id "af3iY4x3vpB8oWhUq2PB2AAAAcQ"]
[Fri May 08 21:17:23.872154 2026] [:error] [pid 61356:tid 61408] [client 13.74.146.113:8002] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doo.php"] [unique_id "af3iY4x3vpB8oWhUq2PB4wAAAdQ"]
[Fri May 08 21:17:24.397505 2026] [:error] [pid 51008:tid 51052] [client 13.74.146.113:1108] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "af3iZHB58C2Y1tgLtuKqnwAAAEM"]
[Fri May 08 21:17:24.892997 2026] [:error] [pid 61355:tid 61373] [client 13.74.146.113:14848] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "af3iZPkhJTi30CBXmMm_1AAAAYw"]
[Fri May 08 21:17:25.436410 2026] [:error] [pid 61317:tid 61344] [client 13.74.146.113:13108] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "af3iZc-fFk_CedOCOYvSRAAAAVg"]
[Fri May 08 21:17:26.032014 2026] [:error] [pid 61355:tid 61361] [client 13.74.146.113:18108] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "af3iZvkhJTi30CBXmMm_1wAAAYA"]
[Fri May 08 21:17:26.617867 2026] [:error] [pid 51009:tid 51100] [client 13.74.146.113:8019] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eetu.php"] [unique_id "af3iZuB0GbUWhxgzX9VLKQAAAJg"]
[Fri May 08 21:17:27.117439 2026] [:error] [pid 51009:tid 51087] [client 13.74.146.113:6429] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eetu.php"] [unique_id "af3iZ-B0GbUWhxgzX9VLKwAAAIs"]
[Fri May 08 21:17:27.663538 2026] [:error] [pid 61356:tid 61391] [client 13.74.146.113:11456] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eetu.php"] [unique_id "af3iZ4x3vpB8oWhUq2PCAgAAAcM"]
[Fri May 08 21:17:28.209437 2026] [:error] [pid 61355:tid 61384] [client 13.74.146.113:17710] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eetu.php"] [unique_id "af3iaPkhJTi30CBXmMm_2QAAAZc"]
[Fri May 08 21:17:28.789734 2026] [:error] [pid 61355:tid 61385] [client 13.74.146.113:11492] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "af3iaPkhJTi30CBXmMm_4AAAAZg"]
[Fri May 08 21:17:29.397362 2026] [:error] [pid 61355:tid 61375] [client 13.74.146.113:13097] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "af3iafkhJTi30CBXmMm_5gAAAY4"]
[Fri May 08 21:17:29.978296 2026] [:error] [pid 34318:tid 34330] [client 13.74.146.113:8016] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "af3iacr3guirgJiKhzDgnQAAAQo"]
[Fri May 08 21:17:30.481023 2026] [:error] [pid 61355:tid 61376] [client 13.74.146.113:14892] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "af3iavkhJTi30CBXmMm_7AAAAY8"]
[Fri May 08 21:17:31.055800 2026] [:error] [pid 61355:tid 61368] [client 13.74.146.113:11887] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tymanage.php"] [unique_id "af3ia_khJTi30CBXmMm_7QAAAYc"]
[Fri May 08 21:17:31.651668 2026] [:error] [pid 51009:tid 51092] [client 13.74.146.113:17684] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tymanage.php"] [unique_id "af3ia-B0GbUWhxgzX9VLNQAAAJA"]
[Fri May 08 21:17:32.246833 2026] [:error] [pid 61317:tid 61328] [client 13.74.146.113:18854] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tymanage.php"] [unique_id "af3ibM-fFk_CedOCOYvSTAAAAUg"]
[Fri May 08 21:17:32.826804 2026] [:error] [pid 61356:tid 61403] [client 13.74.146.113:8030] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tymanage.php"] [unique_id "af3ibIx3vpB8oWhUq2PCEgAAAc8"]
[Fri May 08 21:17:33.402436 2026] [:error] [pid 61356:tid 61409] [client 13.74.146.113:8020] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "af3ibYx3vpB8oWhUq2PCFwAAAdU"]
[Fri May 08 21:17:33.950161 2026] [:error] [pid 61355:tid 61381] [client 13.74.146.113:4336] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "af3ibfkhJTi30CBXmMm_9AAAAZQ"]
[Fri May 08 21:17:34.525485 2026] [:error] [pid 61356:tid 61408] [client 13.74.146.113:9280] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "af3ibox3vpB8oWhUq2PCHQAAAdQ"]
[Fri May 08 21:17:35.103933 2026] [:error] [pid 61356:tid 61403] [client 13.74.146.113:18693] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "af3ib4x3vpB8oWhUq2PCIQAAAc8"]
[Fri May 08 21:17:35.648102 2026] [:error] [pid 61317:tid 61324] [client 13.74.146.113:6440] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/r.php"] [unique_id "af3ib8-fFk_CedOCOYvSUAAAAUQ"]
[Fri May 08 21:17:36.229281 2026] [:error] [pid 51007:tid 51022] [client 13.74.146.113:8023] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/r.php"] [unique_id "af3icFMagSGstWKyzzX0VQAAAAA"]
[Fri May 08 21:17:36.763346 2026] [:error] [pid 61355:tid 61385] [client 13.74.146.113:17677] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/r.php"] [unique_id "af3icPkhJTi30CBXmMm_9gAAAZg"]
[Fri May 08 21:17:37.316984 2026] [:error] [pid 51009:tid 51079] [client 13.74.146.113:11890] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/r.php"] [unique_id "af3iceB0GbUWhxgzX9VLOAAAAIM"]
[Fri May 08 21:17:37.897489 2026] [:error] [pid 51007:tid 51034] [client 13.74.146.113:6856] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yas.php"] [unique_id "af3icVMagSGstWKyzzX0VgAAAAw"]
[Fri May 08 21:17:38.433893 2026] [:error] [pid 51009:tid 51081] [client 13.74.146.113:16174] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yas.php"] [unique_id "af3icuB0GbUWhxgzX9VLPgAAAIU"]
[Fri May 08 21:17:39.011880 2026] [:error] [pid 51008:tid 51052] [client 13.74.146.113:10511] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yas.php"] [unique_id "af3ic3B58C2Y1tgLtuKqrwAAAEM"]
[Fri May 08 21:17:39.590787 2026] [:error] [pid 61355:tid 61384] [client 13.74.146.113:8796] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yas.php"] [unique_id "af3ic_khJTi30CBXmMm_-gAAAZc"]
[Fri May 08 21:17:40.190358 2026] [:error] [pid 61355:tid 61362] [client 13.74.146.113:5872] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymi.php"] [unique_id "af3idPkhJTi30CBXmMm__QAAAYE"]
[Fri May 08 21:17:40.763944 2026] [:error] [pid 51008:tid 51063] [client 13.74.146.113:4834] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymi.php"] [unique_id "af3idHB58C2Y1tgLtuKqtgAAAE4"]
[Fri May 08 21:17:41.348538 2026] [:error] [pid 61356:tid 61389] [client 13.74.146.113:16130] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymi.php"] [unique_id "af3idYx3vpB8oWhUq2PCKAAAAcE"]
[Fri May 08 21:17:41.939280 2026] [:error] [pid 51008:tid 51054] [client 13.74.146.113:1508] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymi.php"] [unique_id "af3idXB58C2Y1tgLtuKqtwAAAEU"]
[Fri May 08 21:17:42.538764 2026] [:error] [pid 51008:tid 51067] [client 13.74.146.113:14905] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lolz.php"] [unique_id "af3idnB58C2Y1tgLtuKquAAAAFI"]
[Fri May 08 21:17:43.169456 2026] [:error] [pid 61356:tid 61388] [client 13.74.146.113:5836] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lolz.php"] [unique_id "af3id4x3vpB8oWhUq2PCMAAAAcA"]
[Fri May 08 21:17:43.791676 2026] [:error] [pid 51008:tid 51065] [client 13.74.146.113:14450] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lolz.php"] [unique_id "af3id3B58C2Y1tgLtuKqwgAAAFA"]
[Fri May 08 21:17:44.340098 2026] [:error] [pid 51008:tid 51067] [client 13.74.146.113:10554] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lolz.php"] [unique_id "af3ieHB58C2Y1tgLtuKqxgAAAFI"]
[Fri May 08 21:17:44.887278 2026] [:error] [pid 61356:tid 61406] [client 13.74.146.113:10556] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "af3ieIx3vpB8oWhUq2PCMgAAAdI"]
[Fri May 08 21:17:45.466661 2026] [:error] [pid 51009:tid 51082] [client 13.74.146.113:11482] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "af3ieeB0GbUWhxgzX9VLQwAAAIY"]
[Fri May 08 21:17:46.044352 2026] [:error] [pid 61317:tid 61344] [client 13.74.146.113:14876] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "af3ies-fFk_CedOCOYvSUwAAAVg"]
[Fri May 08 21:17:46.590031 2026] [:error] [pid 61355:tid 61373] [client 13.74.146.113:1284] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "af3ievkhJTi30CBXmMnACgAAAYw"]
[Fri May 08 21:17:47.095161 2026] [:error] [pid 61317:tid 61342] [client 13.74.146.113:13519] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i6z19N.php"] [unique_id "af3ie8-fFk_CedOCOYvSVAAAAVY"]
[Fri May 08 21:17:47.625799 2026] [:error] [pid 61355:tid 61377] [client 13.74.146.113:4294] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i6z19N.php"] [unique_id "af3ie_khJTi30CBXmMnADQAAAZA"]
[Fri May 08 21:17:48.124634 2026] [:error] [pid 61355:tid 61378] [client 13.74.146.113:14456] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i6z19N.php"] [unique_id "af3ifPkhJTi30CBXmMnAEQAAAZE"]
[Fri May 08 21:17:48.657739 2026] [:error] [pid 61356:tid 61394] [client 13.74.146.113:2670] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i6z19N.php"] [unique_id "af3ifIx3vpB8oWhUq2PCOAAAAcY"]
[Fri May 08 21:17:49.186858 2026] [:error] [pid 61317:tid 61321] [client 13.74.146.113:1092] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clque.php"] [unique_id "af3ifc-fFk_CedOCOYvSVQAAAUE"]
[Fri May 08 21:17:49.766795 2026] [:error] [pid 61317:tid 61328] [client 13.74.146.113:14908] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clque.php"] [unique_id "af3ifc-fFk_CedOCOYvSVwAAAUg"]
[Fri May 08 21:17:50.349876 2026] [:error] [pid 61356:tid 61404] [client 13.74.146.113:6367] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clque.php"] [unique_id "af3ifox3vpB8oWhUq2PCOgAAAdA"]
[Fri May 08 21:17:50.922597 2026] [:error] [pid 61317:tid 61340] [client 13.74.146.113:18876] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clque.php"] [unique_id "af3ifs-fFk_CedOCOYvSXQAAAVQ"]
[Fri May 08 21:17:51.497268 2026] [:error] [pid 34318:tid 34328] [client 13.74.146.113:16132] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "af3if8r3guirgJiKhzDgpwAAAQg"]
[Fri May 08 21:17:52.044588 2026] [:error] [pid 61317:tid 61327] [client 13.74.146.113:17703] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "af3igM-fFk_CedOCOYvSXgAAAUc"]
[Fri May 08 21:17:52.593338 2026] [:error] [pid 61355:tid 61384] [client 13.74.146.113:5864] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "af3igPkhJTi30CBXmMnAGQAAAZc"]
[Fri May 08 21:17:53.089159 2026] [:error] [pid 61356:tid 61401] [client 13.74.146.113:18859] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "af3igYx3vpB8oWhUq2PCQgAAAc0"]
[Fri May 08 21:17:53.608423 2026] [:error] [pid 61317:tid 61331] [client 13.74.146.113:15386] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "af3igc-fFk_CedOCOYvSYQAAAUs"]
[Fri May 08 21:17:54.138848 2026] [:error] [pid 61356:tid 61407] [client 13.74.146.113:11898] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "af3igox3vpB8oWhUq2PCRQAAAdM"]
[Fri May 08 21:17:54.685211 2026] [:error] [pid 61355:tid 61382] [client 13.74.146.113:16172] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "af3igvkhJTi30CBXmMnAHgAAAZU"]
[Fri May 08 21:17:55.230048 2026] [:error] [pid 61317:tid 61339] [client 13.74.146.113:11872] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "af3ig8-fFk_CedOCOYvSZQAAAVM"]
[Fri May 08 21:17:55.752797 2026] [:error] [pid 51007:tid 51027] [client 13.74.146.113:4289] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "af3ig1MagSGstWKyzzX0WgAAAAU"]
[Fri May 08 21:17:56.251633 2026] [:error] [pid 61355:tid 61366] [client 13.74.146.113:8059] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "af3ihPkhJTi30CBXmMnAIAAAAYU"]
[Fri May 08 21:17:56.796544 2026] [:error] [pid 51007:tid 51041] [client 13.74.146.113:3631] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "af3ihFMagSGstWKyzzX0XAAAABM"]
[Fri May 08 21:17:57.343423 2026] [:error] [pid 61317:tid 61320] [client 13.74.146.113:18092] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "af3ihc-fFk_CedOCOYvSagAAAUA"]
[Fri May 08 21:17:57.890094 2026] [:error] [pid 61317:tid 61332] [client 13.74.146.113:4312] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "af3ihc-fFk_CedOCOYvSbQAAAUw"]
[Fri May 08 21:17:58.468733 2026] [:error] [pid 51008:tid 51065] [client 13.74.146.113:5849] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "af3ihnB58C2Y1tgLtuKqzwAAAFA"]
[Fri May 08 21:17:59.044453 2026] [:error] [pid 61355:tid 61381] [client 13.74.146.113:4301] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "af3ih_khJTi30CBXmMnAIQAAAZQ"]
[Fri May 08 21:17:59.619084 2026] [:error] [pid 61355:tid 61364] [client 13.74.146.113:13509] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "af3ih_khJTi30CBXmMnAJAAAAYM"]
[Fri May 08 21:18:00.116793 2026] [:error] [pid 61355:tid 61375] [client 13.74.146.113:16135] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xslclbn.php"] [unique_id "af3iiPkhJTi30CBXmMnAJgAAAY4"]
[Fri May 08 21:18:00.617219 2026] [:error] [pid 51008:tid 51067] [client 13.74.146.113:18723] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xslclbn.php"] [unique_id "af3iiHB58C2Y1tgLtuKq0wAAAFI"]
[Fri May 08 21:18:01.191598 2026] [:error] [pid 51113:tid 51128] [client 13.74.146.113:7263] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xslclbn.php"] [unique_id "af3iiUQfs7sWtqkpQId_FAAAAM0"]
[Fri May 08 21:18:01.738062 2026] [:error] [pid 51113:tid 51122] [client 13.74.146.113:6862] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xslclbn.php"] [unique_id "af3iiUQfs7sWtqkpQId_FQAAAMc"]
[Fri May 08 21:18:02.283134 2026] [:error] [pid 51008:tid 51062] [client 13.74.146.113:16129] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "af3iinB58C2Y1tgLtuKq1wAAAE0"]
[Fri May 08 21:18:02.828422 2026] [:error] [pid 34318:tid 34342] [client 13.74.146.113:16450] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "af3iisr3guirgJiKhzDgqgAAARY"]
[Fri May 08 21:18:03.372919 2026] [:error] [pid 51007:tid 51033] [client 13.74.146.113:6889] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "af3ii1MagSGstWKyzzX0ZQAAAAs"]
[Fri May 08 21:18:03.952509 2026] [:error] [pid 61356:tid 61412] [client 13.74.146.113:16858] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "af3ii4x3vpB8oWhUq2PCVQAAAdg"]
[Fri May 08 21:18:04.499586 2026] [:error] [pid 61356:tid 61404] [client 13.74.146.113:11883] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "af3ijIx3vpB8oWhUq2PCWAAAAdA"]
[Fri May 08 21:18:05.130466 2026] [:error] [pid 61356:tid 61407] [client 13.74.146.113:11156] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "af3ijYx3vpB8oWhUq2PCWgAAAdM"]
[Fri May 08 21:18:05.678077 2026] [:error] [pid 61355:tid 61361] [client 13.74.146.113:13561] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "af3ijfkhJTi30CBXmMnAKgAAAYA"]
[Fri May 08 21:18:06.226527 2026] [:error] [pid 61356:tid 61399] [client 13.74.146.113:16495] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "af3ijox3vpB8oWhUq2PCXQAAAcs"]
[Fri May 08 21:18:06.773607 2026] [:error] [pid 51008:tid 51064] [client 13.74.146.113:13098] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "af3ijnB58C2Y1tgLtuKq4AAAAE8"]
[Fri May 08 21:18:07.292500 2026] [:error] [pid 51008:tid 51051] [client 13.74.146.113:7283] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "af3ij3B58C2Y1tgLtuKq4gAAAEI"]
[Fri May 08 21:18:07.791807 2026] [:error] [pid 51007:tid 51024] [client 13.74.146.113:13084] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "af3ij1MagSGstWKyzzX0ZwAAAAI"]
[Fri May 08 21:18:08.369804 2026] [:error] [pid 51008:tid 51055] [client 13.74.146.113:7263] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "af3ikHB58C2Y1tgLtuKq5AAAAEY"]
[Fri May 08 21:18:09.007253 2026] [:error] [pid 51008:tid 51050] [client 13.74.146.113:1530] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "af3ikXB58C2Y1tgLtuKq5QAAAEE"]
[Fri May 08 21:18:09.586509 2026] [:error] [pid 61355:tid 61385] [client 13.74.146.113:1288] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "af3ikfkhJTi30CBXmMnALAAAAZg"]
[Fri May 08 21:18:10.086528 2026] [:error] [pid 51008:tid 51063] [client 13.74.146.113:1479] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "af3iknB58C2Y1tgLtuKq6AAAAE4"]
[Fri May 08 21:18:10.660050 2026] [:error] [pid 61355:tid 61382] [client 13.74.146.113:18741] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "af3ikvkhJTi30CBXmMnALQAAAZU"]
[Fri May 08 21:18:11.290490 2026] [:error] [pid 61355:tid 61363] [client 13.74.146.113:6444] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww.php"] [unique_id "af3ik_khJTi30CBXmMnAMgAAAYI"]
[Fri May 08 21:18:11.835994 2026] [:error] [pid 61355:tid 61373] [client 13.74.146.113:18110] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww.php"] [unique_id "af3ik_khJTi30CBXmMnANAAAAYw"]
[Fri May 08 21:18:12.339171 2026] [:error] [pid 61355:tid 61370] [client 13.74.146.113:3626] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww.php"] [unique_id "af3ilPkhJTi30CBXmMnANQAAAYk"]
[Fri May 08 21:18:12.879449 2026] [:error] [pid 51008:tid 51052] [client 13.74.146.113:1097] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ww.php"] [unique_id "af3ilHB58C2Y1tgLtuKq6wAAAEM"]
[Fri May 08 21:18:13.426893 2026] [:error] [pid 61355:tid 61379] [client 13.74.146.113:18065] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zwq.php"] [unique_id "af3ilfkhJTi30CBXmMnAOwAAAZI"]
[Fri May 08 21:18:21.160092 2026] [:error] [pid 51009:tid 51088] [client 13.74.146.113:18700] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/co.php"] [unique_id "af3ineB0GbUWhxgzX9VLYgAAAIw"]
[Fri May 08 21:18:21.745915 2026] [:error] [pid 61356:tid 61393] [client 13.74.146.113:16490] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/co.php"] [unique_id "af3inYx3vpB8oWhUq2PCZwAAAcU"]
[Fri May 08 21:18:22.294514 2026] [:error] [pid 51009:tid 51094] [client 13.74.146.113:1090] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/co.php"] [unique_id "af3inuB0GbUWhxgzX9VLZAAAAJI"]
[Fri May 08 21:18:22.888963 2026] [:error] [pid 61356:tid 61391] [client 13.74.146.113:13100] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/co.php"] [unique_id "af3inox3vpB8oWhUq2PCbAAAAcM"]
[Fri May 08 21:18:23.404732 2026] [:error] [pid 51009:tid 51078] [client 13.74.146.113:18735] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/shlo.php"] [unique_id "af3in-B0GbUWhxgzX9VLZwAAAII"]
[Fri May 08 21:18:23.983474 2026] [:error] [pid 51009:tid 51077] [client 13.74.146.113:2662] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/shlo.php"] [unique_id "af3in-B0GbUWhxgzX9VLaAAAAIE"]
[Fri May 08 21:18:24.625542 2026] [:error] [pid 61356:tid 61388] [client 13.74.146.113:15615] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/shlo.php"] [unique_id "af3ioIx3vpB8oWhUq2PCcQAAAcA"]
[Fri May 08 21:18:25.241093 2026] [:error] [pid 61356:tid 61412] [client 13.74.146.113:4327] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/shlo.php"] [unique_id "af3ioYx3vpB8oWhUq2PCcwAAAdg"]
[Fri May 08 21:18:25.822412 2026] [:error] [pid 51113:tid 51120] [client 13.74.146.113:13078] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acip.php"] [unique_id "af3ioUQfs7sWtqkpQId_IQAAAMU"]
[Fri May 08 21:18:26.400933 2026] [:error] [pid 61317:tid 61326] [client 13.74.146.113:11855] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acip.php"] [unique_id "af3ios-fFk_CedOCOYvSeQAAAUY"]
[Fri May 08 21:18:26.969635 2026] [:error] [pid 61356:tid 61402] [client 13.74.146.113:17666] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acip.php"] [unique_id "af3ioox3vpB8oWhUq2PCfQAAAc4"]
[Fri May 08 21:18:27.717901 2026] [:error] [pid 61356:tid 61411] [client 13.74.146.113:18048] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acip.php"] [unique_id "af3io4x3vpB8oWhUq2PCgAAAAdc"]
[Fri May 08 21:18:28.286310 2026] [:error] [pid 61356:tid 61406] [client 13.74.146.113:18718] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/index.php"] [unique_id "af3ipIx3vpB8oWhUq2PChAAAAdI"]
[Fri May 08 21:18:28.848411 2026] [:error] [pid 51113:tid 51124] [client 13.74.146.113:18081] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "af3ipEQfs7sWtqkpQId_JAAAAMk"]
[Fri May 08 21:18:29.398027 2026] [:error] [pid 61356:tid 61388] [client 13.74.146.113:13107] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "af3ipYx3vpB8oWhUq2PCiQAAAcA"]
[Fri May 08 21:18:29.948590 2026] [:error] [pid 61355:tid 61381] [client 13.74.146.113:14022] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "af3ipfkhJTi30CBXmMnARQAAAZQ"]
[Fri May 08 21:18:30.522745 2026] [:error] [pid 61355:tid 61376] [client 13.74.146.113:18102] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "af3ipvkhJTi30CBXmMnARwAAAY8"]
[Fri May 08 21:18:31.056126 2026] [:error] [pid 61355:tid 61383] [client 13.74.146.113:4342] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rujgeote.php"] [unique_id "af3ip_khJTi30CBXmMnASQAAAZY"]
[Fri May 08 21:18:31.593327 2026] [:error] [pid 51008:tid 51068] [client 13.74.146.113:6380] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rujgeote.php"] [unique_id "af3ip3B58C2Y1tgLtuKq-QAAAFM"]
[Fri May 08 21:18:32.183143 2026] [:error] [pid 61356:tid 61409] [client 13.74.146.113:6677] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rujgeote.php"] [unique_id "af3iqIx3vpB8oWhUq2PCkwAAAdU"]
[Fri May 08 21:18:32.736975 2026] [:error] [pid 61356:tid 61406] [client 13.74.146.113:14053] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rujgeote.php"] [unique_id "af3iqIx3vpB8oWhUq2PClgAAAdI"]
[Fri May 08 21:18:33.236827 2026] [:error] [pid 61356:tid 61404] [client 13.74.146.113:14060] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mamzi.php"] [unique_id "af3iqYx3vpB8oWhUq2PCmwAAAdA"]
[Fri May 08 21:18:33.734275 2026] [:error] [pid 61356:tid 61398] [client 13.74.146.113:16489] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mamzi.php"] [unique_id "af3iqYx3vpB8oWhUq2PCnQAAAco"]
[Fri May 08 21:18:34.315401 2026] [:error] [pid 61356:tid 61405] [client 13.74.146.113:6366] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mamzi.php"] [unique_id "af3iqox3vpB8oWhUq2PCogAAAdE"]
[Fri May 08 21:18:34.912507 2026] [:error] [pid 61355:tid 61366] [client 13.74.146.113:3624] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mamzi.php"] [unique_id "af3iqvkhJTi30CBXmMnAVAAAAYU"]
[Fri May 08 21:18:35.492389 2026] [:error] [pid 61356:tid 61393] [client 13.74.146.113:13555] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kaza.php"] [unique_id "af3iq4x3vpB8oWhUq2PCpgAAAcU"]
[Fri May 08 21:18:36.017573 2026] [:error] [pid 61356:tid 61396] [client 13.74.146.113:4317] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kaza.php"] [unique_id "af3irIx3vpB8oWhUq2PCqQAAAcg"]
[Fri May 08 21:18:36.513781 2026] [:error] [pid 61356:tid 61402] [client 13.74.146.113:4208] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kaza.php"] [unique_id "af3irIx3vpB8oWhUq2PCrQAAAc4"]
[Fri May 08 21:18:37.040206 2026] [:error] [pid 61355:tid 61376] [client 13.74.146.113:8259] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kaza.php"] [unique_id "af3irfkhJTi30CBXmMnAWQAAAY8"]
[Fri May 08 21:18:37.616288 2026] [:error] [pid 61355:tid 61372] [client 13.74.146.113:15984] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "af3irfkhJTi30CBXmMnAWgAAAYs"]
[Fri May 08 21:18:38.193914 2026] [:error] [pid 61317:tid 61323] [client 13.74.146.113:15962] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "af3irs-fFk_CedOCOYvSegAAAUM"]
[Fri May 08 21:18:38.725683 2026] [:error] [pid 34318:tid 34322] [client 13.74.146.113:16156] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "af3irsr3guirgJiKhzDgsAAAAQI"]
[Fri May 08 21:18:39.274253 2026] [:error] [pid 61317:tid 61344] [client 13.74.146.113:4331] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "af3ir8-fFk_CedOCOYvSfAAAAVg"]
[Fri May 08 21:18:39.818072 2026] [:error] [pid 51007:tid 51023] [client 13.74.146.113:4304] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "af3ir1MagSGstWKyzzX0bAAAAAE"]
[Fri May 08 21:18:40.391170 2026] [:error] [pid 61355:tid 61365] [client 13.74.146.113:15996] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "af3isPkhJTi30CBXmMnAYQAAAYQ"]
[Fri May 08 21:18:40.987099 2026] [:error] [pid 34318:tid 34337] [client 13.74.146.113:4183] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "af3isMr3guirgJiKhzDgtAAAARE"]
[Fri May 08 21:18:41.565999 2026] [:error] [pid 61317:tid 61334] [client 13.74.146.113:3623] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "af3isc-fFk_CedOCOYvSfgAAAU4"]
[Fri May 08 21:18:42.113941 2026] [:error] [pid 61355:tid 61372] [client 13.74.146.113:18751] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "af3isvkhJTi30CBXmMnAYwAAAYs"]
[Fri May 08 21:18:42.693705 2026] [:error] [pid 34318:tid 34335] [client 13.74.146.113:6002] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "af3issr3guirgJiKhzDgtwAAAQ8"]
[Fri May 08 21:18:43.193252 2026] [:error] [pid 61356:tid 61392] [client 13.74.146.113:16159] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "af3is4x3vpB8oWhUq2PCsgAAAcQ"]
[Fri May 08 21:18:43.695434 2026] [:error] [pid 61356:tid 61405] [client 13.74.146.113:4303] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "af3is4x3vpB8oWhUq2PCswAAAdE"]
[Fri May 08 21:18:44.198573 2026] [:error] [pid 34318:tid 34336] [client 13.74.146.113:15947] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/22name.php"] [unique_id "af3itMr3guirgJiKhzDgugAAARA"]
[Fri May 08 21:18:44.728463 2026] [:error] [pid 34318:tid 34331] [client 13.74.146.113:15590] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/22name.php"] [unique_id "af3itMr3guirgJiKhzDguwAAAQs"]
[Fri May 08 21:18:45.265634 2026] [:error] [pid 51113:tid 51133] [client 13.74.146.113:14070] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/22name.php"] [unique_id "af3itUQfs7sWtqkpQId_KwAAANI"]
[Fri May 08 21:18:45.763398 2026] [:error] [pid 61317:tid 61325] [client 13.74.146.113:6890] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/22name.php"] [unique_id "af3itc-fFk_CedOCOYvSiAAAAUU"]
[Fri May 08 21:18:46.341276 2026] [:error] [pid 51009:tid 51082] [client 13.74.146.113:18077] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "af3ituB0GbUWhxgzX9VLcgAAAIY"]
[Fri May 08 21:18:46.886860 2026] [:error] [pid 51007:tid 51033] [client 13.74.146.113:14064] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "af3itlMagSGstWKyzzX0cQAAAAs"]
[Fri May 08 21:18:47.382801 2026] [:error] [pid 61355:tid 61361] [client 13.74.146.113:6678] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "af3it_khJTi30CBXmMnAZwAAAYA"]
[Fri May 08 21:18:47.927184 2026] [:error] [pid 61355:tid 61362] [client 13.74.146.113:3605] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "af3it_khJTi30CBXmMnAagAAAYE"]
[Fri May 08 21:18:48.521865 2026] [:error] [pid 51009:tid 51099] [client 13.74.146.113:6906] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xse.php"] [unique_id "af3iuOB0GbUWhxgzX9VLdAAAAJc"]
[Fri May 08 21:18:49.117467 2026] [:error] [pid 61356:tid 61394] [client 13.74.146.113:1343] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xse.php"] [unique_id "af3iuYx3vpB8oWhUq2PCtAAAAcY"]
[Fri May 08 21:18:49.691063 2026] [:error] [pid 61355:tid 61364] [client 13.74.146.113:3589] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xse.php"] [unique_id "af3iufkhJTi30CBXmMnAbAAAAYM"]
[Fri May 08 21:18:50.217398 2026] [:error] [pid 51113:tid 51130] [client 13.74.146.113:16437] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xse.php"] [unique_id "af3iukQfs7sWtqkpQId_NAAAAM8"]
[Fri May 08 21:35:23.445505 2026] [:error] [pid 51008:tid 51056] [client 13.74.146.113:11879] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bngv.php"] [unique_id "af3mm3B58C2Y1tgLtuKtiAAAAEc"]
[Fri May 08 21:35:24.020827 2026] [:error] [pid 61317:tid 61331] [client 13.74.146.113:10498] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bngv.php"] [unique_id "af3mnM-fFk_CedOCOYvVsAAAAUs"]
[Fri May 08 21:35:24.567665 2026] [:error] [pid 51113:tid 51138] [client 13.74.146.113:9171] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bngv.php"] [unique_id "af3mnEQfs7sWtqkpQIeA8QAAANc"]
[Fri May 08 21:35:25.149402 2026] [:error] [pid 61356:tid 61392] [client 13.74.146.113:3606] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bngv.php"] [unique_id "af3mnYx3vpB8oWhUq2PI9AAAAcQ"]
[Fri May 08 21:35:25.697169 2026] [:error] [pid 51009:tid 51079] [client 13.74.146.113:12877] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl9.php"] [unique_id "af3mneB0GbUWhxgzX9VPwgAAAIM"]
[Fri May 08 21:35:26.296345 2026] [:error] [pid 61355:tid 61365] [client 13.74.146.113:16086] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl9.php"] [unique_id "af3mnvkhJTi30CBXmMnFVAAAAYQ"]
[Fri May 08 21:35:26.875343 2026] [:error] [pid 34318:tid 34332] [client 13.74.146.113:13775] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl9.php"] [unique_id "af3mnsr3guirgJiKhzDjNQAAAQw"]
[Fri May 08 21:35:27.374121 2026] [:error] [pid 51007:tid 51029] [client 13.74.146.113:16450] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xl9.php"] [unique_id "af3mn1MagSGstWKyzzX20wAAAAc"]
[Fri May 08 21:35:27.949869 2026] [:error] [pid 51009:tid 51095] [client 13.74.146.113:1842] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cibai.php"] [unique_id "af3mn-B0GbUWhxgzX9VPxQAAAJM"]
[Fri May 08 21:35:28.519743 2026] [:error] [pid 51009:tid 51091] [client 13.74.146.113:1518] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cibai.php"] [unique_id "af3moOB0GbUWhxgzX9VPxgAAAI8"]
[Fri May 08 21:35:29.097487 2026] [:error] [pid 34318:tid 34323] [client 13.74.146.113:10552] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cibai.php"] [unique_id "af3mocr3guirgJiKhzDjOwAAAQM"]
[Fri May 08 21:35:29.644484 2026] [:error] [pid 61355:tid 61382] [client 13.74.146.113:16835] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cibai.php"] [unique_id "af3mofkhJTi30CBXmMnFWQAAAZU"]
[Fri May 08 21:35:30.189894 2026] [:error] [pid 51009:tid 51081] [client 13.74.146.113:16890] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mmp.php"] [unique_id "af3mouB0GbUWhxgzX9VPyAAAAIU"]
[Fri May 08 21:35:30.762880 2026] [:error] [pid 34318:tid 34322] [client 13.74.146.113:16490] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mmp.php"] [unique_id "af3mosr3guirgJiKhzDjPwAAAQI"]
[Fri May 08 21:35:31.290074 2026] [:error] [pid 51008:tid 51053] [client 13.74.146.113:1843] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mmp.php"] [unique_id "af3mo3B58C2Y1tgLtuKtigAAAEQ"]
[Fri May 08 21:35:31.786605 2026] [:error] [pid 34318:tid 34336] [client 13.74.146.113:17367] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mmp.php"] [unique_id "af3mo8r3guirgJiKhzDjQQAAARA"]
[Fri May 08 21:35:32.338179 2026] [:error] [pid 34318:tid 34341] [client 13.74.146.113:11850] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doo.php"] [unique_id "af3mpMr3guirgJiKhzDjQgAAARU"]
[Fri May 08 21:35:32.884429 2026] [:error] [pid 51008:tid 51050] [client 13.74.146.113:16149] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doo.php"] [unique_id "af3mpHB58C2Y1tgLtuKtkAAAAEE"]
[Fri May 08 21:35:33.435717 2026] [:error] [pid 51009:tid 51077] [client 13.74.146.113:3128] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doo.php"] [unique_id "af3mpeB0GbUWhxgzX9VP0wAAAIE"]
[Fri May 08 21:35:34.017058 2026] [:error] [pid 61317:tid 61321] [client 13.74.146.113:12864] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doo.php"] [unique_id "af3mps-fFk_CedOCOYvVuAAAAUE"]
[Fri May 08 21:35:34.590028 2026] [:error] [pid 61356:tid 61398] [client 13.74.146.113:16593] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "af3mpox3vpB8oWhUq2PJCQAAAco"]
[Fri May 08 21:35:35.186679 2026] [:error] [pid 61355:tid 61370] [client 13.74.146.113:16633] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "af3mp_khJTi30CBXmMnFYQAAAYk"]
[Fri May 08 21:35:35.733610 2026] [:error] [pid 61356:tid 61401] [client 13.74.146.113:5887] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "af3mp4x3vpB8oWhUq2PJDwAAAc0"]
[Fri May 08 21:35:36.234477 2026] [:error] [pid 61355:tid 61369] [client 13.74.146.113:16526] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gm.php"] [unique_id "af3mqPkhJTi30CBXmMnFYwAAAYg"]
[Fri May 08 21:35:36.791953 2026] [:error] [pid 61356:tid 61407] [client 13.74.146.113:11884] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eetu.php"] [unique_id "af3mqIx3vpB8oWhUq2PJGgAAAdM"]
[Fri May 08 21:35:37.379127 2026] [:error] [pid 61355:tid 61373] [client 13.74.146.113:16511] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eetu.php"] [unique_id "af3mqfkhJTi30CBXmMnFZgAAAYw"]
[Fri May 08 21:35:37.925385 2026] [:error] [pid 34318:tid 34334] [client 13.74.146.113:16126] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eetu.php"] [unique_id "af3mqcr3guirgJiKhzDjRQAAAQ4"]
[Fri May 08 21:35:38.520132 2026] [:error] [pid 61355:tid 61381] [client 13.74.146.113:16128] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/eetu.php"] [unique_id "af3mqvkhJTi30CBXmMnFbQAAAZQ"]
[Fri May 08 21:35:39.128759 2026] [:error] [pid 61355:tid 61366] [client 13.74.146.113:12931] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "af3mq_khJTi30CBXmMnFcAAAAYU"]
[Fri May 08 21:35:39.714684 2026] [:error] [pid 51007:tid 51046] [client 13.74.146.113:16648] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "af3mq1MagSGstWKyzzX23AAAABg"]
[Fri May 08 21:35:40.243332 2026] [:error] [pid 51009:tid 51078] [client 13.74.146.113:15628] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "af3mrOB0GbUWhxgzX9VP3wAAAII"]
[Fri May 08 21:35:40.746698 2026] [:error] [pid 61317:tid 61343] [client 13.74.146.113:1846] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "af3mrM-fFk_CedOCOYvVvwAAAVc"]
[Fri May 08 21:35:41.248989 2026] [:error] [pid 61356:tid 61396] [client 13.74.146.113:17389] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tymanage.php"] [unique_id "af3mrYx3vpB8oWhUq2PJIQAAAcg"]
[Fri May 08 21:35:41.837010 2026] [:error] [pid 61355:tid 61384] [client 13.74.146.113:16632] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tymanage.php"] [unique_id "af3mrfkhJTi30CBXmMnFcwAAAZc"]
[Fri May 08 21:35:42.438518 2026] [:error] [pid 61355:tid 61369] [client 13.74.146.113:17354] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tymanage.php"] [unique_id "af3mrvkhJTi30CBXmMnFdAAAAYg"]
[Fri May 08 21:35:42.975075 2026] [:error] [pid 51009:tid 51080] [client 13.74.146.113:1495] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-tymanage.php"] [unique_id "af3mruB0GbUWhxgzX9VP5gAAAIQ"]
[Fri May 08 21:35:43.534909 2026] [:error] [pid 51113:tid 51131] [client 13.74.146.113:2772] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "af3mr0Qfs7sWtqkpQIeA-QAAANA"]
[Fri May 08 21:35:44.049814 2026] [:error] [pid 61356:tid 61398] [client 13.74.146.113:10089] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "af3msIx3vpB8oWhUq2PJJwAAAco"]
[Fri May 08 21:35:44.626457 2026] [:error] [pid 51008:tid 51049] [client 13.74.146.113:12926] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "af3msHB58C2Y1tgLtuKtlAAAAEA"]
[Fri May 08 21:35:45.251737 2026] [:error] [pid 34318:tid 34336] [client 13.74.146.113:16082] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws88.php"] [unique_id "af3mscr3guirgJiKhzDjSgAAARA"]
[Fri May 08 21:35:45.763967 2026] [:error] [pid 34318:tid 34341] [client 13.74.146.113:17363] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/r.php"] [unique_id "af3mscr3guirgJiKhzDjTAAAARU"]
[Fri May 08 21:35:46.269315 2026] [:error] [pid 61317:tid 61321] [client 13.74.146.113:18814] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/r.php"] [unique_id "af3mss-fFk_CedOCOYvVyAAAAUE"]
[Fri May 08 21:35:46.768625 2026] [:error] [pid 61317:tid 61332] [client 13.74.146.113:10076] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/r.php"] [unique_id "af3mss-fFk_CedOCOYvVygAAAUw"]
[Fri May 08 21:35:47.295528 2026] [:error] [pid 61356:tid 61397] [client 13.74.146.113:16599] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/r.php"] [unique_id "af3ms4x3vpB8oWhUq2PJOgAAAck"]
[Fri May 08 21:35:47.842341 2026] [:error] [pid 61356:tid 61405] [client 13.74.146.113:12918] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yas.php"] [unique_id "af3ms4x3vpB8oWhUq2PJQwAAAdE"]
[Fri May 08 21:35:48.386577 2026] [:error] [pid 61356:tid 61406] [client 13.74.146.113:1513] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yas.php"] [unique_id "af3mtIx3vpB8oWhUq2PJSAAAAdI"]
[Fri May 08 21:35:48.938488 2026] [:error] [pid 61356:tid 61389] [client 13.74.146.113:1284] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yas.php"] [unique_id "af3mtIx3vpB8oWhUq2PJTQAAAcE"]
[Fri May 08 21:35:49.472857 2026] [:error] [pid 61356:tid 61410] [client 13.74.146.113:11853] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yas.php"] [unique_id "af3mtYx3vpB8oWhUq2PJTwAAAdY"]
[Fri May 08 21:35:50.016315 2026] [:error] [pid 51009:tid 51080] [client 13.74.146.113:15617] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymi.php"] [unique_id "af3mtuB0GbUWhxgzX9VP7AAAAIQ"]
[Fri May 08 21:35:50.590419 2026] [:error] [pid 61356:tid 61391] [client 13.74.146.113:12578] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymi.php"] [unique_id "af3mtox3vpB8oWhUq2PJUgAAAcM"]
[Fri May 08 21:35:51.194564 2026] [:error] [pid 61356:tid 61397] [client 13.74.146.113:12580] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymi.php"] [unique_id "af3mt4x3vpB8oWhUq2PJVgAAAck"]
[Fri May 08 21:35:51.700855 2026] [:error] [pid 51009:tid 51081] [client 13.74.146.113:16531] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tymi.php"] [unique_id "af3mt-B0GbUWhxgzX9VP8QAAAIU"]
[Fri May 08 21:35:52.198112 2026] [:error] [pid 51009:tid 51099] [client 13.74.146.113:9173] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lolz.php"] [unique_id "af3muOB0GbUWhxgzX9VP8gAAAJc"]
[Fri May 08 21:35:52.720017 2026] [:error] [pid 61356:tid 61403] [client 13.74.146.113:4304] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lolz.php"] [unique_id "af3muIx3vpB8oWhUq2PJXQAAAc8"]
[Fri May 08 21:35:53.280484 2026] [:error] [pid 51008:tid 51057] [client 13.74.146.113:12910] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lolz.php"] [unique_id "af3muXB58C2Y1tgLtuKtmQAAAEg"]
[Fri May 08 21:35:53.845858 2026] [:error] [pid 61356:tid 61408] [client 13.74.146.113:10086] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lolz.php"] [unique_id "af3muYx3vpB8oWhUq2PJZgAAAdQ"]
[Fri May 08 21:35:54.401546 2026] [:error] [pid 61356:tid 61407] [client 13.74.146.113:17361] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "af3muox3vpB8oWhUq2PJawAAAdM"]
[Fri May 08 21:35:54.956119 2026] [:error] [pid 51007:tid 51045] [client 13.74.146.113:1320] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "af3mulMagSGstWKyzzX24gAAABc"]
[Fri May 08 21:35:55.519840 2026] [:error] [pid 61355:tid 61380] [client 13.74.146.113:16140] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "af3mu_khJTi30CBXmMnFhQAAAZM"]
[Fri May 08 21:35:56.067712 2026] [:error] [pid 51008:tid 51061] [client 13.74.146.113:3639] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asd67.php"] [unique_id "af3mvHB58C2Y1tgLtuKtmwAAAEw"]
[Fri May 08 21:35:56.650107 2026] [:error] [pid 61356:tid 61396] [client 13.74.146.113:12889] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i6z19N.php"] [unique_id "af3mvIx3vpB8oWhUq2PJdQAAAcg"]
[Fri May 08 21:35:57.301647 2026] [:error] [pid 61356:tid 61409] [client 13.74.146.113:13798] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i6z19N.php"] [unique_id "af3mvYx3vpB8oWhUq2PJeAAAAdU"]
[Fri May 08 21:35:57.882752 2026] [:error] [pid 51009:tid 51094] [client 13.74.146.113:9167] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i6z19N.php"] [unique_id "af3mveB0GbUWhxgzX9VP9QAAAJI"]
[Fri May 08 21:35:58.381572 2026] [:error] [pid 51008:tid 51051] [client 13.74.146.113:6858] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i6z19N.php"] [unique_id "af3mvnB58C2Y1tgLtuKtnwAAAEI"]
[Fri May 08 21:35:58.979830 2026] [:error] [pid 61356:tid 61400] [client 13.74.146.113:4335] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clque.php"] [unique_id "af3mvox3vpB8oWhUq2PJhAAAAcw"]
[Fri May 08 21:35:59.576949 2026] [:error] [pid 61356:tid 61389] [client 13.74.146.113:3595] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clque.php"] [unique_id "af3mv4x3vpB8oWhUq2PJiAAAAcE"]
[Fri May 08 21:36:00.172252 2026] [:error] [pid 61356:tid 61399] [client 13.74.146.113:15663] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clque.php"] [unique_id "af3mwIx3vpB8oWhUq2PJjQAAAcs"]
[Fri May 08 21:36:00.795191 2026] [:error] [pid 61317:tid 61320] [client 13.74.146.113:1183] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/clque.php"] [unique_id "af3mwM-fFk_CedOCOYvV0gAAAUA"]
[Fri May 08 21:36:01.389537 2026] [:error] [pid 61356:tid 61389] [client 13.74.146.113:8823] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "af3mwYx3vpB8oWhUq2PJlAAAAcE"]
[Fri May 08 21:36:01.981122 2026] [:error] [pid 61355:tid 61376] [client 13.74.146.113:15679] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "af3mwfkhJTi30CBXmMnFiwAAAY8"]
[Fri May 08 21:36:02.551540 2026] [:error] [pid 51008:tid 51070] [client 13.74.146.113:5342] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "af3mwnB58C2Y1tgLtuKtowAAAFU"]
[Fri May 08 21:36:03.155061 2026] [:error] [pid 51008:tid 51053] [client 13.74.146.113:1323] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "af3mw3B58C2Y1tgLtuKtpwAAAEQ"]
[Fri May 08 21:36:03.704057 2026] [:error] [pid 51113:tid 51126] [client 13.74.146.113:3186] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "af3mw0Qfs7sWtqkpQIeA_wAAAMs"]
[Fri May 08 21:36:04.201156 2026] [:error] [pid 51009:tid 51091] [client 13.74.146.113:12601] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "af3mxOB0GbUWhxgzX9VP-wAAAI8"]
[Fri May 08 21:36:04.714043 2026] [:error] [pid 61317:tid 61326] [client 13.74.146.113:4339] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "af3mxM-fFk_CedOCOYvV2QAAAUY"]
[Fri May 08 21:36:05.217432 2026] [:error] [pid 51008:tid 51061] [client 13.74.146.113:16147] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wert.php"] [unique_id "af3mxXB58C2Y1tgLtuKtrAAAAEw"]
[Fri May 08 21:36:05.712824 2026] [:error] [pid 51008:tid 51066] [client 13.74.146.113:13813] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "af3mxXB58C2Y1tgLtuKtrQAAAFE"]
[Fri May 08 21:36:06.272278 2026] [:error] [pid 61356:tid 61406] [client 13.74.146.113:13782] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "af3mxox3vpB8oWhUq2PJngAAAdI"]
[Fri May 08 21:36:06.899265 2026] [:error] [pid 51009:tid 51093] [client 13.74.146.113:12585] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "af3mxuB0GbUWhxgzX9VQAAAAAJE"]
[Fri May 08 21:36:07.478593 2026] [:error] [pid 51009:tid 51087] [client 13.74.146.113:17387] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-blog.php"] [unique_id "af3mx-B0GbUWhxgzX9VQAgAAAIs"]
[Fri May 08 21:36:08.052708 2026] [:error] [pid 61356:tid 61398] [client 13.74.146.113:15660] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "af3myIx3vpB8oWhUq2PJpQAAAco"]
[Fri May 08 21:36:08.638568 2026] [:error] [pid 51009:tid 51077] [client 13.74.146.113:3633] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "af3myOB0GbUWhxgzX9VQCgAAAIE"]
[Fri May 08 21:36:09.168918 2026] [:error] [pid 61356:tid 61401] [client 13.74.146.113:12989] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "af3myYx3vpB8oWhUq2PJqwAAAc0"]
[Fri May 08 21:36:09.665563 2026] [:error] [pid 61356:tid 61407] [client 13.74.146.113:1322] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ng.php"] [unique_id "af3myYx3vpB8oWhUq2PJrwAAAdM"]
[Fri May 08 21:36:10.163321 2026] [:error] [pid 61356:tid 61389] [client 13.74.146.113:13767] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xslclbn.php"] [unique_id "af3myox3vpB8oWhUq2PJswAAAcE"]
[Fri May 08 21:36:10.695210 2026] [:error] [pid 61356:tid 61401] [client 13.74.146.113:6869] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xslclbn.php"] [unique_id "af3myox3vpB8oWhUq2PJuQAAAc0"]
[Fri May 08 21:36:11.225768 2026] [:error] [pid 61356:tid 61390] [client 13.74.146.113:12961] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xslclbn.php"] [unique_id "af3my4x3vpB8oWhUq2PJvgAAAcI"]
[Fri May 08 21:36:11.722777 2026] [:error] [pid 61355:tid 61365] [client 13.74.146.113:12809] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xslclbn.php"] [unique_id "af3my_khJTi30CBXmMnFkAAAAYQ"]
[Fri May 08 21:36:12.303373 2026] [:error] [pid 61355:tid 61371] [client 13.74.146.113:11848] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "af3mzPkhJTi30CBXmMnFkwAAAYo"]
[Fri May 08 21:36:12.933787 2026] [:error] [pid 51008:tid 51072] [client 13.74.146.113:7018] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "af3mzHB58C2Y1tgLtuKtuAAAAFc"]
[Fri May 08 21:36:13.511198 2026] [:error] [pid 61356:tid 61392] [client 13.74.146.113:16156] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "af3mzYx3vpB8oWhUq2PJxQAAAcQ"]
[Fri May 08 21:36:14.086537 2026] [:error] [pid 61356:tid 61406] [client 13.74.146.113:17407] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/less.php"] [unique_id "af3mzox3vpB8oWhUq2PJyQAAAdI"]
[Fri May 08 21:36:14.656226 2026] [:error] [pid 51113:tid 51118] [client 13.74.146.113:10069] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "af3mzkQfs7sWtqkpQIeBBAAAAMM"]
[Fri May 08 21:36:15.204774 2026] [:error] [pid 51007:tid 51031] [client 13.74.146.113:15675] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "af3mz1MagSGstWKyzzX27wAAAAk"]
[Fri May 08 21:36:15.828319 2026] [:error] [pid 34318:tid 34331] [client 13.74.146.113:16535] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "af3mz8r3guirgJiKhzDjXgAAAQs"]
[Fri May 08 21:36:16.396588 2026] [:error] [pid 51113:tid 51122] [client 13.74.146.113:16539] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albrt.php"] [unique_id "af3m0EQfs7sWtqkpQIeBCQAAAMc"]
[Fri May 08 21:36:16.893889 2026] [:error] [pid 34318:tid 34342] [client 13.74.146.113:18796] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "af3m0Mr3guirgJiKhzDjYgAAARY"]
[Fri May 08 21:36:17.387061 2026] [:error] [pid 51008:tid 51070] [client 13.74.146.113:3634] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "af3m0XB58C2Y1tgLtuKtuwAAAFU"]
[Fri May 08 21:36:17.887938 2026] [:error] [pid 61355:tid 61375] [client 13.74.146.113:10060] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "af3m0fkhJTi30CBXmMnFmAAAAY4"]
[Fri May 08 21:36:18.433634 2026] [:error] [pid 51008:tid 51062] [client 13.74.146.113:16091] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny2.php"] [unique_id "af3m0nB58C2Y1tgLtuKtvAAAAE0"]
[Fri May 08 21:36:18.996366 2026] [:error] [pid 51008:tid 51067] [client 13.74.146.113:9196] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "af3m0nB58C2Y1tgLtuKtvQAAAFI"]
[Fri May 08 21:36:19.587664 2026] [:error] [pid 51008:tid 51071] [client 13.74.146.113:1300] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "af3m03B58C2Y1tgLtuKtvgAAAFY"]
[Fri May 08 21:36:20.137512 2026] [:error] [pid 51007:tid 51025] [client 13.74.146.113:5826] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "af3m1FMagSGstWKyzzX29QAAAAM"]
[Fri May 08 21:36:20.686115 2026] [:error] [pid 51008:tid 51061] [client 13.74.146.113:9159] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/an8.php"] [unique_id "af3m1HB58C2Y1tgLtuKtwwAAAEw"]
[Fri May 08 21:36:25.956162 2026] [:error] [pid 51008:tid 51058] [client 13.74.146.113:6969] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ups.php"] [unique_id "af3m2XB58C2Y1tgLtuKt0wAAAEk"]
[Fri May 08 21:36:26.450497 2026] [:error] [pid 51008:tid 51069] [client 13.74.146.113:4296] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ups.php"] [unique_id "af3m2nB58C2Y1tgLtuKt1QAAAFQ"]
[Fri May 08 21:36:26.974677 2026] [:error] [pid 61355:tid 61376] [client 13.74.146.113:16554] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ups.php"] [unique_id "af3m2vkhJTi30CBXmMnFoQAAAY8"]
[Fri May 08 21:36:27.473081 2026] [:error] [pid 61356:tid 61404] [client 13.74.146.113:18555] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ups.php"] [unique_id "af3m24x3vpB8oWhUq2PJ4QAAAdA"]
[Fri May 08 21:36:27.971137 2026] [:error] [pid 61356:tid 61402] [client 13.74.146.113:18498] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-demomav.php"] [unique_id "af3m24x3vpB8oWhUq2PJ4gAAAc4"]
[Fri May 08 21:36:28.469796 2026] [:error] [pid 61317:tid 61321] [client 13.74.146.113:10097] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-demomav.php"] [unique_id "af3m3M-fFk_CedOCOYvV6wAAAUE"]
[Fri May 08 21:36:28.988567 2026] [:error] [pid 61317:tid 61338] [client 13.74.146.113:11999] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-demomav.php"] [unique_id "af3m3M-fFk_CedOCOYvV7AAAAVI"]
[Fri May 08 21:36:29.560083 2026] [:error] [pid 61356:tid 61407] [client 13.74.146.113:8590] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-demomav.php"] [unique_id "af3m3Yx3vpB8oWhUq2PJ6wAAAdM"]
[Fri May 08 21:36:30.134847 2026] [:error] [pid 61356:tid 61399] [client 13.74.146.113:7037] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/greateb.php"] [unique_id "af3m3ox3vpB8oWhUq2PJ7wAAAcs"]
[Fri May 08 21:36:30.663787 2026] [:error] [pid 51009:tid 51085] [client 13.74.146.113:3616] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/greateb.php"] [unique_id "af3m3uB0GbUWhxgzX9VQGQAAAIk"]
[Fri May 08 21:36:31.188318 2026] [:error] [pid 61356:tid 61408] [client 13.74.146.113:12594] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/greateb.php"] [unique_id "af3m34x3vpB8oWhUq2PJ8gAAAdQ"]
[Fri May 08 21:36:31.714137 2026] [:error] [pid 51007:tid 51039] [client 13.74.146.113:15312] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/greateb.php"] [unique_id "af3m31MagSGstWKyzzX2_wAAABE"]
[Fri May 08 21:36:32.213408 2026] [:error] [pid 51008:tid 51071] [client 13.74.146.113:12848] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/co.php"] [unique_id "af3m4HB58C2Y1tgLtuKt2gAAAFY"]
[Fri May 08 21:36:32.710740 2026] [:error] [pid 61355:tid 61384] [client 13.74.146.113:5030] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/co.php"] [unique_id "af3m4PkhJTi30CBXmMnFpgAAAZc"]
[Fri May 08 21:36:33.285723 2026] [:error] [pid 61355:tid 61364] [client 13.74.146.113:15673] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/co.php"] [unique_id "af3m4fkhJTi30CBXmMnFqQAAAYM"]
[Fri May 08 21:36:33.859090 2026] [:error] [pid 51113:tid 51118] [client 13.74.146.113:15702] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/co.php"] [unique_id "af3m4UQfs7sWtqkpQIeBEgAAAMM"]
[Fri May 08 21:36:34.385887 2026] [:error] [pid 61356:tid 61402] [client 13.74.146.113:18531] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/shlo.php"] [unique_id "af3m4ox3vpB8oWhUq2PJ-AAAAc4"]
[Fri May 08 21:36:34.879581 2026] [:error] [pid 61356:tid 61401] [client 13.74.146.113:6880] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/shlo.php"] [unique_id "af3m4ox3vpB8oWhUq2PJ-gAAAc0"]
[Fri May 08 21:36:35.391040 2026] [:error] [pid 51113:tid 51138] [client 13.74.146.113:12987] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/shlo.php"] [unique_id "af3m40Qfs7sWtqkpQIeBFAAAANc"]
[Fri May 08 21:36:35.890363 2026] [:error] [pid 61317:tid 61343] [client 13.74.146.113:3188] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/css/shlo.php"] [unique_id "af3m48-fFk_CedOCOYvV8wAAAVc"]
[Fri May 08 21:36:36.438616 2026] [:error] [pid 61356:tid 61410] [client 13.74.146.113:4322] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acip.php"] [unique_id "af3m5Ix3vpB8oWhUq2PJ_QAAAdY"]
[Fri May 08 21:36:37.066919 2026] [:error] [pid 34318:tid 34334] [client 13.74.146.113:8579] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acip.php"] [unique_id "af3m5cr3guirgJiKhzDjawAAAQ4"]
[Fri May 08 21:36:37.643868 2026] [:error] [pid 51008:tid 51060] [client 13.74.146.113:15686] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acip.php"] [unique_id "af3m5XB58C2Y1tgLtuKt3wAAAEs"]
[Fri May 08 21:36:38.172736 2026] [:error] [pid 61356:tid 61404] [client 13.74.146.113:6996] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/acip.php"] [unique_id "af3m5ox3vpB8oWhUq2PKAAAAAdA"]
[Fri May 08 21:36:38.739012 2026] [:error] [pid 51008:tid 51073] [client 13.74.146.113:13510] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/index.php"] [unique_id "af3m5nB58C2Y1tgLtuKt4gAAAFg"]
[Fri May 08 21:36:39.334778 2026] [:error] [pid 51009:tid 51097] [client 13.74.146.113:5272] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/index.php"] [unique_id "af3m5-B0GbUWhxgzX9VQHgAAAJU"]
[Fri May 08 21:36:39.892653 2026] [:error] [pid 51008:tid 51054] [client 13.74.146.113:2996] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/index.php"] [unique_id "af3m53B58C2Y1tgLtuKt4wAAAEU"]
[Fri May 08 21:36:40.388715 2026] [:error] [pid 51113:tid 51137] [client 13.74.146.113:5841] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploads/index.php"] [unique_id "af3m6EQfs7sWtqkpQIeBFgAAANY"]
[Fri May 08 21:36:40.964970 2026] [:error] [pid 61356:tid 61389] [client 13.74.146.113:15857] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "af3m6Ix3vpB8oWhUq2PKBgAAAcE"]
[Fri May 08 21:36:41.544679 2026] [:error] [pid 61356:tid 61410] [client 13.74.146.113:5854] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "af3m6Yx3vpB8oWhUq2PKCAAAAdY"]
[Fri May 08 21:36:42.111921 2026] [:error] [pid 61356:tid 61397] [client 13.74.146.113:1427] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "af3m6ox3vpB8oWhUq2PKCwAAAck"]
[Fri May 08 21:36:42.710415 2026] [:error] [pid 61356:tid 61391] [client 13.74.146.113:15698] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "af3m6ox3vpB8oWhUq2PKDgAAAcM"]
[Fri May 08 21:36:43.261012 2026] [:error] [pid 61356:tid 61406] [client 13.74.146.113:10414] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rujgeote.php"] [unique_id "af3m64x3vpB8oWhUq2PKEgAAAdI"]
[Fri May 08 21:36:43.845821 2026] [:error] [pid 61356:tid 61412] [client 13.74.146.113:10389] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rujgeote.php"] [unique_id "af3m64x3vpB8oWhUq2PKGAAAAdg"]
[Fri May 08 21:36:44.440004 2026] [:error] [pid 61356:tid 61394] [client 13.74.146.113:5046] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rujgeote.php"] [unique_id "af3m7Ix3vpB8oWhUq2PKHQAAAcY"]
[Fri May 08 21:36:44.986318 2026] [:error] [pid 51009:tid 51076] [client 13.74.146.113:12851] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rujgeote.php"] [unique_id "af3m7OB0GbUWhxgzX9VQJQAAAIA"]
[Fri May 08 21:36:45.530706 2026] [:error] [pid 51009:tid 51096] [client 13.74.146.113:2384] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mamzi.php"] [unique_id "af3m7eB0GbUWhxgzX9VQJwAAAJQ"]
[Fri May 08 21:36:46.147075 2026] [:error] [pid 51009:tid 51087] [client 13.74.146.113:18786] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "af3m7uB0GbUWhxgzX9VQKgAAAIs"]
[Fri May 08 21:36:46.695022 2026] [:error] [pid 51009:tid 51086] [client 13.74.146.113:8624] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "af3m7uB0GbUWhxgzX9VQLAAAAIo"]
[Fri May 08 21:36:47.194162 2026] [:error] [pid 51009:tid 51097] [client 13.74.146.113:10385] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "af3m7-B0GbUWhxgzX9VQLgAAAJU"]
[Fri May 08 21:36:47.691739 2026] [:error] [pid 61356:tid 61403] [client 13.74.146.113:10771] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rrr.php"] [unique_id "af3m74x3vpB8oWhUq2PKJwAAAc8"]
[Fri May 08 21:36:48.218504 2026] [:error] [pid 61356:tid 61394] [client 13.74.146.113:10393] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "af3m8Ix3vpB8oWhUq2PKKgAAAcY"]
[Fri May 08 21:36:48.745424 2026] [:error] [pid 61317:tid 61320] [client 13.74.146.113:18537] [client 13.74.146.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/img.php"] [unique_id "af3m8M-fFk_CedOCOYvV-QAAAUA"]
[Fri May 08 22:05:23.402686 2026] [:error] [pid 51009:tid 51092] [client 112.196.163.224:28489] [client 112.196.163.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.163.224, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3to-B0GbUWhxgzX9VWugAAAJA"]
[Fri May 08 22:05:33.915017 2026] [:error] [pid 61356:tid 61398] [client 112.196.163.224:28905] [client 112.196.163.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.163.224, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3trYx3vpB8oWhUq2PWAAAAAco"]
[Fri May 08 22:05:44.562567 2026] [:error] [pid 61356:tid 61409] [client 112.196.163.224:28242] [client 112.196.163.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.163.224, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3tuIx3vpB8oWhUq2PWDQAAAdU"]
[Fri May 08 22:05:55.171726 2026] [:error] [pid 61356:tid 61399] [client 112.196.163.224:27687] [client 112.196.163.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.163.224, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3tw4x3vpB8oWhUq2PWHgAAAcs"]
[Fri May 08 22:06:05.809168 2026] [:error] [pid 61356:tid 61392] [client 112.196.163.224:29418] [client 112.196.163.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.163.224, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3tzYx3vpB8oWhUq2PWNwAAAcQ"]
[Fri May 08 23:02:07.690576 2026] [:error] [pid 61356:tid 61389] [client 151.254.75.59:9651] [client 151.254.75.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.254.75.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3674x3vpB8oWhUq2PumgAAAcE"]
[Fri May 08 23:02:28.885798 2026] [:error] [pid 61317:tid 61329] [client 151.254.75.59:7229] [client 151.254.75.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.254.75.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af37BM-fFk_CedOCOYvmBAAAAUk"]
[Fri May 08 23:02:50.672111 2026] [:error] [pid 51008:tid 51061] [client 151.254.75.59:8942] [client 151.254.75.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.254.75.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af37GnB58C2Y1tgLtuK8uQAAAEw"]
[Fri May 08 23:03:01.431303 2026] [:error] [pid 61356:tid 61403] [client 151.254.75.59:8290] [client 151.254.75.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.254.75.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af37JYx3vpB8oWhUq2Pu4wAAAc8"]
[Fri May 08 23:03:12.152373 2026] [:error] [pid 51007:tid 51032] [client 151.254.75.59:8035] [client 151.254.75.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.254.75.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af37MFMagSGstWKyzzUDVAAAAAo"]
[Fri May 08 23:15:27.994004 2026] [:error] [pid 51008:tid 51049] [client 136.158.41.225:37880] [client 136.158.41.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.41.225, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3-D3B58C2Y1tgLtuK-5QAAAEA"]
[Fri May 08 23:15:38.718244 2026] [:error] [pid 51009:tid 51080] [client 136.158.41.225:38930] [client 136.158.41.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.41.225, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3-GuB0GbUWhxgzX9VoQAAAAIQ"]
[Fri May 08 23:15:49.615222 2026] [:error] [pid 51007:tid 51038] [client 136.158.41.225:40238] [client 136.158.41.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.41.225, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3-JVMagSGstWKyzzUFTwAAABA"]
[Fri May 08 23:16:01.189946 2026] [:error] [pid 61356:tid 61388] [client 136.158.41.225:41443] [client 136.158.41.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.41.225, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3-MYx3vpB8oWhUq2PztwAAAcA"]
[Fri May 08 23:16:11.997046 2026] [:error] [pid 61356:tid 61388] [client 136.158.41.225:42443] [client 136.158.41.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.41.225, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af3-O4x3vpB8oWhUq2PzxQAAAcA"]
[Fri May 08 23:52:05.925489 2026] [:error] [pid 34318:tid 34322] [client 43.162.109.249:48894] [client 43.162.109.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af4Gpcr3guirgJiKhzD0qwAAAQI"]
[Sat May 09 01:00:46.023917 2026] [:error] [pid 61356:tid 61409] [client 18.143.154.224:52464] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af4Wvox3vpB8oWhUq2MVpQAAAdU"]
[Sat May 09 01:00:47.532934 2026] [:error] [pid 61355:tid 61373] [client 18.143.154.224:33078] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4Wv_khJTi30CBXmMkVlwAAAYw"]
[Sat May 09 01:00:53.947087 2026] [:error] [pid 51009:tid 51095] [client 18.143.154.224:33136] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "af4WxeB0GbUWhxgzX9WCtQAAAJM"]
[Sat May 09 01:00:54.380893 2026] [:error] [pid 51009:tid 51094] [client 18.143.154.224:33242] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo"] [unique_id "af4WxuB0GbUWhxgzX9WCtwAAAJI"]
[Sat May 09 01:00:54.818511 2026] [:error] [pid 61317:tid 61325] [client 18.143.154.224:33260] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "af4Wxs-fFk_CedOCOYv_kAAAAUU"]
[Sat May 09 01:00:55.254969 2026] [:error] [pid 51009:tid 51077] [client 18.143.154.224:33284] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/debug.php"] [unique_id "af4Wx-B0GbUWhxgzX9WCuwAAAIE"]
[Sat May 09 01:00:55.693606 2026] [:error] [pid 61356:tid 61398] [client 18.143.154.224:33318] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/phpinfo.php"] [unique_id "af4Wx4x3vpB8oWhUq2MVqwAAAco"]
[Sat May 09 01:00:56.124361 2026] [:error] [pid 51113:tid 51119] [client 18.143.154.224:33348] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test/phpinfo.php"] [unique_id "af4WyEQfs7sWtqkpQIeWbQAAAMQ"]
[Sat May 09 01:00:56.564757 2026] [:error] [pid 61356:tid 61392] [client 18.143.154.224:40530] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dev/phpinfo.php"] [unique_id "af4WyIx3vpB8oWhUq2MVrgAAAcQ"]
[Sat May 09 01:00:56.996655 2026] [:error] [pid 61355:tid 61361] [client 18.143.154.224:40572] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/old/phpinfo.php"] [unique_id "af4WyPkhJTi30CBXmMkVuQAAAYA"]
[Sat May 09 01:00:57.432235 2026] [:error] [pid 61317:tid 61343] [client 18.143.154.224:40610] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tmp/phpinfo.php"] [unique_id "af4Wyc-fFk_CedOCOYv_lgAAAVc"]
[Sat May 09 01:00:57.874384 2026] [:error] [pid 61355:tid 61370] [client 18.143.154.224:40644] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public/phpinfo.php"] [unique_id "af4WyfkhJTi30CBXmMkVvwAAAYk"]
[Sat May 09 01:00:58.305646 2026] [:error] [pid 61355:tid 61382] [client 18.143.154.224:40686] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info"] [unique_id "af4WyvkhJTi30CBXmMkVwgAAAZU"]
[Sat May 09 01:00:58.738801 2026] [:error] [pid 61355:tid 61380] [client 18.143.154.224:40722] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/php-info.php"] [unique_id "af4WyvkhJTi30CBXmMkVyAAAAZM"]
[Sat May 09 01:00:59.187591 2026] [:error] [pid 61355:tid 61364] [client 18.143.154.224:40774] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpversion.php"] [unique_id "af4Wy_khJTi30CBXmMkVzgAAAYM"]
[Sat May 09 01:00:59.623100 2026] [:error] [pid 61355:tid 61366] [client 18.143.154.224:40802] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/_phpinfo.php"] [unique_id "af4Wy_khJTi30CBXmMkV1QAAAYU"]
[Sat May 09 01:01:00.059925 2026] [:error] [pid 61355:tid 61376] [client 18.143.154.224:40838] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/old_phpinfo.php"] [unique_id "af4WzPkhJTi30CBXmMkV2gAAAY8"]
[Sat May 09 01:01:00.491898 2026] [:error] [pid 61355:tid 61367] [client 18.143.154.224:40880] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server-info.php"] [unique_id "af4WzPkhJTi30CBXmMkV4QAAAYY"]
[Sat May 09 01:01:00.923896 2026] [:error] [pid 61355:tid 61379] [client 18.143.154.224:40926] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/server-status.php"] [unique_id "af4WzPkhJTi30CBXmMkV6AAAAZI"]
[Sat May 09 01:01:01.356664 2026] [:error] [pid 51007:tid 51036] [client 18.143.154.224:40972] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/_profiler/phpinfo"] [unique_id "af4WzVMagSGstWKyzzUT5AAAAA4"]
[Sat May 09 01:01:01.795716 2026] [:error] [pid 61317:tid 61332] [client 18.143.154.224:41022] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/_environment"] [unique_id "af4Wzc-fFk_CedOCOYv_lwAAAUw"]
[Sat May 09 01:01:02.233687 2026] [:error] [pid 61317:tid 61333] [client 18.143.154.224:41066] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/webroot/index.php/_environment"] [unique_id "af4Wzs-fFk_CedOCOYv_mwAAAU0"]
[Sat May 09 01:01:02.676863 2026] [:error] [pid 61355:tid 61365] [client 18.143.154.224:41098] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mail/phpinfo.php"] [unique_id "af4WzvkhJTi30CBXmMkV8QAAAYQ"]
[Sat May 09 01:01:03.107818 2026] [:error] [pid 61355:tid 61369] [client 18.143.154.224:41160] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cpanel/phpinfo.php"] [unique_id "af4Wz_khJTi30CBXmMkV9AAAAYg"]
[Sat May 09 01:01:03.548883 2026] [:error] [pid 61355:tid 61366] [client 18.143.154.224:41212] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hosting/phpinfo.php"] [unique_id "af4Wz_khJTi30CBXmMkV-AAAAYU"]
[Sat May 09 01:01:03.982191 2026] [:error] [pid 61355:tid 61379] [client 18.143.154.224:41244] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/webmail/phpinfo.php"] [unique_id "af4Wz_khJTi30CBXmMkV-wAAAZI"]
[Sat May 09 01:01:04.416028 2026] [:error] [pid 61355:tid 61385] [client 18.143.154.224:41288] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/smtp/phpinfo.php"] [unique_id "af4W0PkhJTi30CBXmMkV_QAAAZg"]
[Sat May 09 01:01:04.852862 2026] [:error] [pid 61355:tid 61365] [client 18.143.154.224:41318] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php.bak"] [unique_id "af4W0PkhJTi30CBXmMkWAgAAAYQ"]
[Sat May 09 01:01:05.293832 2026] [:error] [pid 61355:tid 61383] [client 18.143.154.224:41372] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php.old"] [unique_id "af4W0fkhJTi30CBXmMkWBgAAAZY"]
[Sat May 09 01:01:05.727055 2026] [:error] [pid 51009:tid 51099] [client 18.143.154.224:41422] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php~"] [unique_id "af4W0eB0GbUWhxgzX9WCywAAAJc"]
[Sat May 09 01:01:06.161454 2026] [:error] [pid 61355:tid 61361] [client 18.143.154.224:41480] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php.bak"] [unique_id "af4W0vkhJTi30CBXmMkWCgAAAYA"]
[Sat May 09 01:01:06.593256 2026] [:error] [pid 51113:tid 51134] [client 18.143.154.224:34794] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/phpinfo.php.save"] [unique_id "af4W0kQfs7sWtqkpQIeWdQAAANM"]
[Sat May 09 01:01:07.030069 2026] [:error] [pid 61356:tid 61398] [client 18.143.154.224:34838] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/staging/phpinfo.php"] [unique_id "af4W04x3vpB8oWhUq2MVuAAAAco"]
[Sat May 09 01:01:07.469463 2026] [:error] [pid 61317:tid 61329] [client 18.143.154.224:34874] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/beta/phpinfo.php"] [unique_id "af4W08-fFk_CedOCOYv_oQAAAUk"]
[Sat May 09 01:01:07.903789 2026] [:error] [pid 61356:tid 61411] [client 18.143.154.224:34910] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uat/phpinfo.php"] [unique_id "af4W04x3vpB8oWhUq2MVugAAAdc"]
[Sat May 09 01:01:08.340463 2026] [:error] [pid 61317:tid 61331] [client 18.143.154.224:34954] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/qa/phpinfo.php"] [unique_id "af4W1M-fFk_CedOCOYv_owAAAUs"]
[Sat May 09 01:01:08.778837 2026] [:error] [pid 61356:tid 61396] [client 18.143.154.224:35000] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/preview/phpinfo.php"] [unique_id "af4W1Ix3vpB8oWhUq2MVvgAAAcg"]
[Sat May 09 01:01:09.213550 2026] [:error] [pid 51009:tid 51086] [client 18.143.154.224:35046] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www/phpinfo.php"] [unique_id "af4W1eB0GbUWhxgzX9WC0wAAAIo"]
[Sat May 09 01:01:09.647648 2026] [:error] [pid 51009:tid 51097] [client 18.143.154.224:35082] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/htdocs/phpinfo.php"] [unique_id "af4W1eB0GbUWhxgzX9WC1wAAAJU"]
[Sat May 09 01:01:10.097792 2026] [:error] [pid 61356:tid 61407] [client 18.143.154.224:35128] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/public_html/phpinfo.php"] [unique_id "af4W1ox3vpB8oWhUq2MVwQAAAdM"]
[Sat May 09 01:01:10.533345 2026] [:error] [pid 61356:tid 61405] [client 18.143.154.224:35168] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/site/phpinfo.php"] [unique_id "af4W1ox3vpB8oWhUq2MVxgAAAdE"]
[Sat May 09 01:01:10.966387 2026] [:error] [pid 51113:tid 51138] [client 18.143.154.224:35206] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/docs/phpinfo.php"] [unique_id "af4W1kQfs7sWtqkpQIeWdgAAANc"]
[Sat May 09 01:01:11.402746 2026] [:error] [pid 61317:tid 61344] [client 18.143.154.224:35236] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4W18-fFk_CedOCOYv_qAAAAVg"]
[Sat May 09 01:01:11.840673 2026] [:error] [pid 61355:tid 61375] [client 18.143.154.224:35278] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/administrator/phpinfo.php"] [unique_id "af4W1_khJTi30CBXmMkWJgAAAY4"]
[Sat May 09 01:01:12.271860 2026] [:error] [pid 61356:tid 61406] [client 18.143.154.224:35316] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core/phpinfo.php"] [unique_id "af4W2Ix3vpB8oWhUq2MVzwAAAdI"]
[Sat May 09 01:01:12.712270 2026] [:error] [pid 61356:tid 61404] [client 18.143.154.224:35348] [client 18.143.154.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/includes/phpinfo.php"] [unique_id "af4W2Ix3vpB8oWhUq2MV0gAAAdA"]
[Sat May 09 01:17:23.225202 2026] [:error] [pid 51007:tid 51028] [client 129.211.172.249:55330] [client 129.211.172.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af4ao1MagSGstWKyzzUWxgAAAAY"]
[Sat May 09 01:32:29.532945 2026] [:error] [pid 61355:tid 61374] [client 108.131.31.231:47322] [client 108.131.31.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af4eLfkhJTi30CBXmMkvewAAAY0"]
[Sat May 09 01:32:31.768453 2026] [:error] [pid 51009:tid 51085] [client 108.131.31.231:47368] [client 108.131.31.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4eL-B0GbUWhxgzX9WSEgAAAIk"]
[Sat May 09 01:32:37.613537 2026] [:error] [pid 61356:tid 61401] [client 108.131.31.231:47436] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/pi.php"] [unique_id "af4eNYx3vpB8oWhUq2MoKwAAAc0"]
[Sat May 09 01:32:38.644113 2026] [:error] [pid 51113:tid 51134] [client 108.131.31.231:49816] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/pinfo.php"] [unique_id "af4eNkQfs7sWtqkpQIebNAAAANM"]
[Sat May 09 01:32:39.676690 2026] [:error] [pid 51009:tid 51088] [client 108.131.31.231:49844] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "af4eN-B0GbUWhxgzX9WSYAAAAIw"]
[Sat May 09 01:32:40.712765 2026] [:error] [pid 61355:tid 61363] [client 108.131.31.231:49882] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpinfo"] [unique_id "af4eOPkhJTi30CBXmMkv5AAAAYI"]
[Sat May 09 01:32:41.734499 2026] [:error] [pid 61355:tid 61365] [client 108.131.31.231:49928] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/p.php"] [unique_id "af4eOfkhJTi30CBXmMkv_gAAAYQ"]
[Sat May 09 01:32:42.791784 2026] [:error] [pid 61355:tid 61364] [client 108.131.31.231:49962] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/debug.php"] [unique_id "af4eOvkhJTi30CBXmMkwEgAAAYM"]
[Sat May 09 01:32:43.819619 2026] [:error] [pid 61355:tid 61372] [client 108.131.31.231:50006] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/admin/phpinfo.php"] [unique_id "af4eO_khJTi30CBXmMkwJAAAAYs"]
[Sat May 09 01:32:44.852574 2026] [:error] [pid 51113:tid 51124] [client 108.131.31.231:37198] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/test/phpinfo.php"] [unique_id "af4ePEQfs7sWtqkpQIebOgAAAMk"]
[Sat May 09 01:32:45.877036 2026] [:error] [pid 61317:tid 61320] [client 108.131.31.231:37236] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/dev/phpinfo.php"] [unique_id "af4ePc-fFk_CedOCOYsMUQAAAUA"]
[Sat May 09 01:32:46.910202 2026] [:error] [pid 61355:tid 61385] [client 108.131.31.231:37272] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/old/phpinfo.php"] [unique_id "af4ePvkhJTi30CBXmMkwOgAAAZg"]
[Sat May 09 01:32:47.964773 2026] [:error] [pid 61355:tid 61368] [client 108.131.31.231:37320] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/tmp/phpinfo.php"] [unique_id "af4eP_khJTi30CBXmMkwQwAAAYc"]
[Sat May 09 01:32:48.999760 2026] [:error] [pid 61317:tid 61339] [client 108.131.31.231:37382] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/public/phpinfo.php"] [unique_id "af4eQM-fFk_CedOCOYsMWAAAAVM"]
[Sat May 09 01:32:50.027555 2026] [:error] [pid 51009:tid 51082] [client 108.131.31.231:37434] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info"] [unique_id "af4eQuB0GbUWhxgzX9WSlQAAAIY"]
[Sat May 09 01:32:51.068483 2026] [:error] [pid 51009:tid 51079] [client 108.131.31.231:37474] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/php-info.php"] [unique_id "af4eQ-B0GbUWhxgzX9WSnQAAAIM"]
[Sat May 09 01:32:52.101399 2026] [:error] [pid 61356:tid 61399] [client 108.131.31.231:37512] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpversion.php"] [unique_id "af4eRIx3vpB8oWhUq2MoPQAAAcs"]
[Sat May 09 01:32:53.136787 2026] [:error] [pid 51113:tid 51131] [client 108.131.31.231:37562] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/_phpinfo.php"] [unique_id "af4eRUQfs7sWtqkpQIebPgAAANA"]
[Sat May 09 01:32:54.163168 2026] [:error] [pid 51113:tid 51138] [client 108.131.31.231:37602] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/old_phpinfo.php"] [unique_id "af4eRkQfs7sWtqkpQIebQAAAANc"]
[Sat May 09 01:32:55.188719 2026] [:error] [pid 61355:tid 61375] [client 108.131.31.231:55548] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server-info.php"] [unique_id "af4eR_khJTi30CBXmMkwWAAAAY4"]
[Sat May 09 01:32:56.213186 2026] [:error] [pid 61355:tid 61374] [client 108.131.31.231:55604] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/server-status.php"] [unique_id "af4eSPkhJTi30CBXmMkwYAAAAY0"]
[Sat May 09 01:32:57.243554 2026] [:error] [pid 51007:tid 51035] [client 108.131.31.231:55652] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/_profiler/phpinfo"] [unique_id "af4eSVMagSGstWKyzzUaqAAAAA0"]
[Sat May 09 01:32:58.276687 2026] [:error] [pid 61355:tid 61380] [client 108.131.31.231:55690] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/_environment"] [unique_id "af4eSvkhJTi30CBXmMkwagAAAZM"]
[Sat May 09 01:32:59.303593 2026] [:error] [pid 51113:tid 51121] [client 108.131.31.231:55720] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/webroot/index.php/_environment"] [unique_id "af4eS0Qfs7sWtqkpQIebQQAAAMY"]
[Sat May 09 01:33:00.330586 2026] [:error] [pid 51009:tid 51079] [client 108.131.31.231:55750] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/mail/phpinfo.php"] [unique_id "af4eTOB0GbUWhxgzX9WSpgAAAIM"]
[Sat May 09 01:33:01.362311 2026] [:error] [pid 51008:tid 51060] [client 108.131.31.231:55774] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/cpanel/phpinfo.php"] [unique_id "af4eTXB58C2Y1tgLtuLbcQAAAEs"]
[Sat May 09 01:33:02.395909 2026] [:error] [pid 51007:tid 51027] [client 108.131.31.231:55822] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/hosting/phpinfo.php"] [unique_id "af4eTlMagSGstWKyzzUaqgAAAAU"]
[Sat May 09 01:33:03.422188 2026] [:error] [pid 61355:tid 61377] [client 108.131.31.231:55860] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/webmail/phpinfo.php"] [unique_id "af4eT_khJTi30CBXmMkwdAAAAZA"]
[Sat May 09 01:33:04.460335 2026] [:error] [pid 51007:tid 51024] [client 108.131.31.231:55904] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/smtp/phpinfo.php"] [unique_id "af4eUFMagSGstWKyzzUasAAAAAI"]
[Sat May 09 01:33:05.494914 2026] [:error] [pid 51008:tid 51073] [client 108.131.31.231:47732] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpinfo.php.bak"] [unique_id "af4eUXB58C2Y1tgLtuLbcwAAAFg"]
[Sat May 09 01:33:06.527202 2026] [:error] [pid 61356:tid 61399] [client 108.131.31.231:47790] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpinfo.php.old"] [unique_id "af4eUox3vpB8oWhUq2MoWgAAAcs"]
[Sat May 09 01:33:07.554017 2026] [:error] [pid 61356:tid 61394] [client 108.131.31.231:47838] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpinfo.php~"] [unique_id "af4eU4x3vpB8oWhUq2MoYQAAAcY"]
[Sat May 09 01:33:08.586213 2026] [:error] [pid 61356:tid 61398] [client 108.131.31.231:47886] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/info.php.bak"] [unique_id "af4eVIx3vpB8oWhUq2MoZAAAAco"]
[Sat May 09 01:33:09.618971 2026] [:error] [pid 61356:tid 61391] [client 108.131.31.231:47938] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/phpinfo.php.save"] [unique_id "af4eVYx3vpB8oWhUq2MoagAAAcM"]
[Sat May 09 01:33:10.646443 2026] [:error] [pid 51007:tid 51042] [client 108.131.31.231:47986] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/staging/phpinfo.php"] [unique_id "af4eVlMagSGstWKyzzUatgAAABQ"]
[Sat May 09 01:33:11.672578 2026] [:error] [pid 61356:tid 61409] [client 108.131.31.231:48044] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/beta/phpinfo.php"] [unique_id "af4eV4x3vpB8oWhUq2MoegAAAdU"]
[Sat May 09 01:33:12.706944 2026] [:error] [pid 61317:tid 61340] [client 108.131.31.231:48082] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/uat/phpinfo.php"] [unique_id "af4eWM-fFk_CedOCOYsMXQAAAVQ"]
[Sat May 09 01:33:13.731379 2026] [:error] [pid 51009:tid 51096] [client 108.131.31.231:48138] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/qa/phpinfo.php"] [unique_id "af4eWeB0GbUWhxgzX9WSvwAAAJQ"]
[Sat May 09 01:33:14.756625 2026] [:error] [pid 61317:tid 61343] [client 108.131.31.231:48170] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/preview/phpinfo.php"] [unique_id "af4eWs-fFk_CedOCOYsMYAAAAVc"]
[Sat May 09 01:33:15.778052 2026] [:error] [pid 61355:tid 61385] [client 108.131.31.231:49778] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/www/phpinfo.php"] [unique_id "af4eW_khJTi30CBXmMkwoQAAAZg"]
[Sat May 09 01:33:16.809395 2026] [:error] [pid 61355:tid 61373] [client 108.131.31.231:49810] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/htdocs/phpinfo.php"] [unique_id "af4eXPkhJTi30CBXmMkwqQAAAYw"]
[Sat May 09 01:33:17.834304 2026] [:error] [pid 61355:tid 61362] [client 108.131.31.231:49864] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/public_html/phpinfo.php"] [unique_id "af4eXfkhJTi30CBXmMkwsQAAAYE"]
[Sat May 09 01:33:18.858108 2026] [:error] [pid 61355:tid 61367] [client 108.131.31.231:49900] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/site/phpinfo.php"] [unique_id "af4eXvkhJTi30CBXmMkwwAAAAYY"]
[Sat May 09 01:33:19.889289 2026] [:error] [pid 51008:tid 51066] [client 108.131.31.231:49934] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/docs/phpinfo.php"] [unique_id "af4eX3B58C2Y1tgLtuLbfQAAAFE"]
[Sat May 09 01:33:20.917267 2026] [:error] [pid 51009:tid 51086] [client 108.131.31.231:49990] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4eYOB0GbUWhxgzX9WSywAAAIo"]
[Sat May 09 01:33:21.956519 2026] [:error] [pid 61355:tid 61374] [client 108.131.31.231:50042] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/administrator/phpinfo.php"] [unique_id "af4eYfkhJTi30CBXmMkw1gAAAY0"]
[Sat May 09 01:33:22.987733 2026] [:error] [pid 61355:tid 61373] [client 108.131.31.231:50086] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/core/phpinfo.php"] [unique_id "af4eYvkhJTi30CBXmMkw4QAAAYw"]
[Sat May 09 01:33:24.023253 2026] [:error] [pid 51009:tid 51087] [client 108.131.31.231:50124] [client 108.131.31.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.hotbooksbookeeping2.com"] [uri "/includes/phpinfo.php"] [unique_id "af4eZOB0GbUWhxgzX9WS0AAAAIs"]
[Sat May 09 02:57:11.772209 2026] [:error] [pid 61356:tid 61399] [client 18.143.154.224:53450] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af4yB4x3vpB8oWhUq2NUKwAAAcs"]
[Sat May 09 02:57:13.226307 2026] [:error] [pid 34318:tid 34333] [client 18.143.154.224:53494] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "af4yCcr3guirgJiKhzATlQAAAQ0"]
[Sat May 09 02:57:13.657016 2026] [:error] [pid 34318:tid 34320] [client 18.143.154.224:53612] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "af4yCcr3guirgJiKhzATmgAAAQA"]
[Sat May 09 02:57:14.093613 2026] [:error] [pid 51113:tid 51133] [client 18.143.154.224:53640] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "af4yCkQfs7sWtqkpQIeonQAAANI"]
[Sat May 09 02:57:14.525924 2026] [:error] [pid 51007:tid 51026] [client 18.143.154.224:53688] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging"] [unique_id "af4yClMagSGstWKyzzUsWQAAAAQ"]
[Sat May 09 02:57:14.958273 2026] [:error] [pid 61356:tid 61406] [client 18.143.154.224:53728] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "af4yCox3vpB8oWhUq2NUMAAAAdI"]
[Sat May 09 02:57:15.388364 2026] [:error] [pid 61355:tid 61367] [client 18.143.154.224:53764] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test"] [unique_id "af4yC_khJTi30CBXmMlrpgAAAYY"]
[Sat May 09 02:57:15.820335 2026] [:error] [pid 51007:tid 51042] [client 18.143.154.224:53806] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.remote"] [unique_id "af4yC1MagSGstWKyzzUsYAAAABQ"]
[Sat May 09 02:57:16.252470 2026] [:error] [pid 51009:tid 51079] [client 18.143.154.224:53842] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "af4yDOB0GbUWhxgzX9WzOAAAAIM"]
[Sat May 09 02:57:16.684081 2026] [:error] [pid 61355:tid 61369] [client 18.143.154.224:34994] [client 18.143.154.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "af4yDPkhJTi30CBXmMlrqQAAAYg"]
[Sat May 09 03:00:29.896565 2026] [:error] [pid 51008:tid 51065] [client 102.129.145.141:4869] [client 102.129.145.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.129.145.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af4yzXB58C2Y1tgLtuLxcgAAAFA"]
[Sat May 09 03:00:39.914481 2026] [:error] [pid 61355:tid 61362] [client 102.129.145.141:13376] [client 102.129.145.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.129.145.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af4y1_khJTi30CBXmMlsgAAAAYE"]
[Sat May 09 03:00:50.547504 2026] [:error] [pid 51009:tid 51085] [client 102.129.145.141:35291] [client 102.129.145.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.129.145.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af4y4uB0GbUWhxgzX9W0ogAAAIk"]
[Sat May 09 03:01:01.139988 2026] [:error] [pid 51008:tid 51064] [client 102.129.145.141:24646] [client 102.129.145.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.129.145.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af4y7XB58C2Y1tgLtuLxtwAAAE8"]
[Sat May 09 03:01:11.781981 2026] [:error] [pid 51007:tid 51022] [client 102.129.145.141:60350] [client 102.129.145.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.129.145.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af4y91MagSGstWKyzzUtCwAAAAA"]
[Sat May 09 03:13:19.841626 2026] [:error] [pid 51009:tid 51093] [client 181.214.165.176:21498] [client 181.214.165.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.214.165.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af41z-B0GbUWhxgzX9W7KAAAAJE"]
[Sat May 09 03:13:29.810105 2026] [:error] [pid 51009:tid 51085] [client 181.214.165.176:41481] [client 181.214.165.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.214.165.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af412eB0GbUWhxgzX9W7NgAAAIk"]
[Sat May 09 03:13:40.408233 2026] [:error] [pid 51008:tid 51063] [client 181.214.165.176:37676] [client 181.214.165.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.214.165.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af415HB58C2Y1tgLtuL0WwAAAE4"]
[Sat May 09 03:13:51.108704 2026] [:error] [pid 61355:tid 61363] [client 181.214.165.176:52694] [client 181.214.165.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.214.165.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af417_khJTi30CBXmMlzEQAAAYI"]
[Sat May 09 03:14:01.802727 2026] [:error] [pid 61356:tid 61398] [client 181.214.165.176:40842] [client 181.214.165.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.214.165.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af41-Yx3vpB8oWhUq2NalAAAAco"]
[Sat May 09 03:15:06.734261 2026] [:error] [pid 51009:tid 51077] [client 194.62.107.27:45633] [client 194.62.107.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42OuB0GbUWhxgzX9W8JAAAAIE"]
[Sat May 09 03:15:16.854063 2026] [:error] [pid 61355:tid 61385] [client 194.62.107.54:56311] [client 194.62.107.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.54, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42RPkhJTi30CBXmMlzjQAAAZg"]
[Sat May 09 03:15:27.282901 2026] [:error] [pid 61317:tid 61328] [client 194.62.107.17:24671] [client 194.62.107.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.17, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42T8-fFk_CedOCOYsoXwAAAUg"]
[Sat May 09 03:15:37.950122 2026] [:error] [pid 51008:tid 51061] [client 194.62.107.77:24125] [client 194.62.107.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42WXB58C2Y1tgLtuL0tQAAAEw"]
[Sat May 09 03:15:48.549273 2026] [:error] [pid 61356:tid 61396] [client 194.62.107.101:37213] [client 194.62.107.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42ZIx3vpB8oWhUq2NbSAAAAcg"]
[Sat May 09 03:15:59.295609 2026] [:error] [pid 61356:tid 61409] [client 194.62.107.97:47485] [client 194.62.107.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42b4x3vpB8oWhUq2NbegAAAdU"]
[Sat May 09 03:16:09.988557 2026] [:error] [pid 61317:tid 61332] [client 194.62.107.4:41209] [client 194.62.107.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42ec-fFk_CedOCOYsomQAAAUw"]
[Sat May 09 03:16:20.619992 2026] [:error] [pid 51008:tid 51073] [client 194.62.107.63:46551] [client 194.62.107.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42hHB58C2Y1tgLtuL03AAAAFg"]
[Sat May 09 03:16:31.417169 2026] [:error] [pid 51009:tid 51090] [client 194.62.107.132:35609] [client 194.62.107.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.132, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42j-B0GbUWhxgzX9W9BgAAAI4"]
[Sat May 09 03:16:42.006563 2026] [:error] [pid 51009:tid 51083] [client 194.62.107.38:41881] [client 194.62.107.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42muB0GbUWhxgzX9W9JAAAAIc"]
[Sat May 09 03:16:52.769319 2026] [:error] [pid 61317:tid 61337] [client 194.62.107.243:45419] [client 194.62.107.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.243, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42pM-fFk_CedOCOYso3gAAAVE"]
[Sat May 09 03:17:03.437200 2026] [:error] [pid 51113:tid 51134] [client 194.62.107.53:50821] [client 194.62.107.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.62.107.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42r0Qfs7sWtqkpQIerQQAAANM"]
[Sat May 09 03:17:25.621517 2026] [:error] [pid 51009:tid 51076] [client 151.240.44.86:51611] [client 151.240.44.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.86, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42xeB0GbUWhxgzX9W9aAAAAIA"]
[Sat May 09 03:17:35.516943 2026] [:error] [pid 34318:tid 34340] [client 151.240.44.63:55757] [client 151.240.44.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42z8r3guirgJiKhzAYBQAAARQ"]
[Sat May 09 03:17:46.133813 2026] [:error] [pid 51007:tid 51031] [client 151.240.44.4:26905] [client 151.240.44.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af422lMagSGstWKyzzUvwgAAAAk"]
[Sat May 09 03:17:56.844749 2026] [:error] [pid 51008:tid 51073] [client 151.240.44.170:41751] [client 151.240.44.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af425HB58C2Y1tgLtuL1EAAAAFg"]
[Sat May 09 03:18:08.077050 2026] [:error] [pid 51009:tid 51092] [client 151.240.44.7:31635] [client 151.240.44.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af428OB0GbUWhxgzX9W9lgAAAJA"]
[Sat May 09 03:18:19.014398 2026] [:error] [pid 51009:tid 51099] [client 151.240.44.86:40317] [client 151.240.44.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.86, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af42--B0GbUWhxgzX9W9qAAAAJc"]
[Sat May 09 03:18:30.888934 2026] [:error] [pid 61317:tid 61321] [client 151.240.44.218:40079] [client 151.240.44.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43Bs-fFk_CedOCOYspKQAAAUE"]
[Sat May 09 03:18:41.552326 2026] [:error] [pid 51009:tid 51094] [client 151.240.44.77:45075] [client 151.240.44.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43EeB0GbUWhxgzX9W9vgAAAJI"]
[Sat May 09 03:18:52.269442 2026] [:error] [pid 51008:tid 51065] [client 151.240.44.7:46685] [client 151.240.44.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43HHB58C2Y1tgLtuL1KwAAAFA"]
[Sat May 09 03:19:03.101041 2026] [:error] [pid 51009:tid 51087] [client 151.240.44.4:36821] [client 151.240.44.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43J-B0GbUWhxgzX9W93gAAAIs"]
[Sat May 09 03:19:13.931805 2026] [:error] [pid 51007:tid 51036] [client 151.240.44.185:28627] [client 151.240.44.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43MVMagSGstWKyzzUv5AAAAA4"]
[Sat May 09 03:19:24.668514 2026] [:error] [pid 61355:tid 61374] [client 151.240.44.218:62421] [client 151.240.44.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43PPkhJTi30CBXmMl04wAAAY0"]
[Sat May 09 03:19:35.436642 2026] [:error] [pid 51007:tid 51023] [client 151.240.44.10:34995] [client 151.240.44.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43R1MagSGstWKyzzUv9AAAAAE"]
[Sat May 09 03:19:46.284597 2026] [:error] [pid 51007:tid 51031] [client 151.240.44.122:25395] [client 151.240.44.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43UlMagSGstWKyzzUv-AAAAAk"]
[Sat May 09 03:19:56.956694 2026] [:error] [pid 61317:tid 61326] [client 151.240.44.185:37117] [client 151.240.44.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43XM-fFk_CedOCOYspWQAAAUY"]
[Sat May 09 03:20:07.726457 2026] [:error] [pid 51008:tid 51049] [client 151.240.44.7:40183] [client 151.240.44.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43Z3B58C2Y1tgLtuL1RwAAAEA"]
[Sat May 09 03:20:18.523936 2026] [:error] [pid 51007:tid 51023] [client 151.240.44.2:20451] [client 151.240.44.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.2, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43clMagSGstWKyzzUwBwAAAAE"]
[Sat May 09 03:20:29.216055 2026] [:error] [pid 61355:tid 61380] [client 151.240.44.86:63889] [client 151.240.44.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.86, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43ffkhJTi30CBXmMl1UAAAAZM"]
[Sat May 09 03:20:39.981778 2026] [:error] [pid 51113:tid 51136] [client 151.240.44.218:61447] [client 151.240.44.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43h0Qfs7sWtqkpQIernwAAANU"]
[Sat May 09 03:20:50.716458 2026] [:error] [pid 51009:tid 51082] [client 151.240.44.42:29061] [client 151.240.44.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43kuB0GbUWhxgzX9W-ZAAAAIY"]
[Sat May 09 03:21:01.451145 2026] [:error] [pid 51007:tid 51037] [client 151.240.44.227:25509] [client 151.240.44.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43nVMagSGstWKyzzUwOQAAAA8"]
[Sat May 09 03:21:12.152742 2026] [:error] [pid 34318:tid 34328] [client 151.240.44.10:30983] [client 151.240.44.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43qMr3guirgJiKhzAYXgAAAQg"]
[Sat May 09 03:21:22.891975 2026] [:error] [pid 61356:tid 61399] [client 151.240.44.227:41335] [client 151.240.44.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43sox3vpB8oWhUq2NceAAAAcs"]
[Sat May 09 03:21:33.691931 2026] [:error] [pid 51009:tid 51089] [client 151.240.44.212:44969] [client 151.240.44.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43veB0GbUWhxgzX9W-4wAAAI0"]
[Sat May 09 03:21:44.406537 2026] [:error] [pid 61356:tid 61401] [client 151.240.44.214:41209] [client 151.240.44.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.214, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43yIx3vpB8oWhUq2NchwAAAc0"]
[Sat May 09 03:21:55.096199 2026] [:error] [pid 51007:tid 51027] [client 151.240.44.218:28105] [client 151.240.44.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af4301MagSGstWKyzzUwewAAAAU"]
[Sat May 09 03:22:05.817948 2026] [:error] [pid 51009:tid 51077] [client 151.240.44.170:54571] [client 151.240.44.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.170, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af433eB0GbUWhxgzX9W_FgAAAIE"]
[Sat May 09 03:22:16.641413 2026] [:error] [pid 51007:tid 51023] [client 151.240.44.38:50777] [client 151.240.44.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af436FMagSGstWKyzzUwfwAAAAE"]
[Sat May 09 03:22:27.425914 2026] [:error] [pid 61317:tid 61326] [client 151.240.44.4:32869] [client 151.240.44.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af4388-fFk_CedOCOYspmgAAAUY"]
[Sat May 09 03:22:38.338330 2026] [:error] [pid 61317:tid 61328] [client 151.240.44.98:58623] [client 151.240.44.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af43_s-fFk_CedOCOYspngAAAUg"]
[Sat May 09 03:22:49.100911 2026] [:error] [pid 51008:tid 51052] [client 151.240.44.186:59907] [client 151.240.44.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44CXB58C2Y1tgLtuL1tgAAAEM"]
[Sat May 09 03:22:59.735034 2026] [:error] [pid 51007:tid 51036] [client 151.240.44.227:32821] [client 151.240.44.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44E1MagSGstWKyzzUwjwAAAA4"]
[Sat May 09 03:23:10.777324 2026] [:error] [pid 51007:tid 51023] [client 151.240.44.98:40927] [client 151.240.44.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44HlMagSGstWKyzzUwkwAAAAE"]
[Sat May 09 03:23:21.500167 2026] [:error] [pid 61356:tid 61409] [client 151.240.44.126:20475] [client 151.240.44.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.126, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44KYx3vpB8oWhUq2Nc_AAAAdU"]
[Sat May 09 03:23:32.339425 2026] [:error] [pid 61356:tid 61409] [client 151.240.44.77:58991] [client 151.240.44.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44NIx3vpB8oWhUq2NdAgAAAdU"]
[Sat May 09 03:23:43.032768 2026] [:error] [pid 61355:tid 61381] [client 151.240.44.67:21023] [client 151.240.44.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.67, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44P_khJTi30CBXmMl2DQAAAZQ"]
[Sat May 09 03:23:53.747461 2026] [:error] [pid 51008:tid 51061] [client 151.240.44.218:55639] [client 151.240.44.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.218, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44SXB58C2Y1tgLtuL13QAAAEw"]
[Sat May 09 03:24:05.389987 2026] [:error] [pid 51009:tid 51096] [client 151.240.44.42:28635] [client 151.240.44.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44VeB0GbUWhxgzX9W_qQAAAJQ"]
[Sat May 09 03:24:15.157840 2026] [:error] [pid 51009:tid 51095] [client 151.240.44.98:56145] [client 151.240.44.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44X-B0GbUWhxgzX9W_xwAAAJM"]
[Sat May 09 03:24:25.892529 2026] [:error] [pid 51009:tid 51082] [client 151.240.44.77:59835] [client 151.240.44.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44aeB0GbUWhxgzX9W_3QAAAIY"]
[Sat May 09 03:24:47.691928 2026] [:error] [pid 6716:tid 6726] [client 151.240.44.64:64677] [client 151.240.44.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.64, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44f5XtNUqdqC5vkbDN1wAAAMc"]
[Sat May 09 03:25:11.371530 2026] [:error] [pid 7186:tid 7194] [client 151.240.44.4:52797] [client 151.240.44.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44l-zHe65NI8BnSQHWHgAAAMQ"]
[Sat May 09 03:25:30.727473 2026] [:error] [pid 7460:tid 7553] [client 151.240.44.77:47565] [client 151.240.44.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44qoM57Qlx1SEvllefygAAAIM"]
[Sat May 09 03:25:41.485062 2026] [:error] [pid 7460:tid 7551] [client 151.240.44.63:36317] [client 151.240.44.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.63, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44tYM57Qlx1SEvllef2wAAAIE"]
[Sat May 09 03:25:52.119477 2026] [:error] [pid 7460:tid 7560] [client 151.240.44.86:26325] [client 151.240.44.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.86, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44wIM57Qlx1SEvllef6AAAAIo"]
[Sat May 09 03:26:02.943268 2026] [:error] [pid 7459:tid 7540] [client 151.240.44.185:43171] [client 151.240.44.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af44yjMmHx_wknzWc2aGCQAAAFE"]
[Sat May 09 03:26:13.955088 2026] [:error] [pid 7460:tid 7571] [client 151.240.44.38:38273] [client 151.240.44.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af441YM57Qlx1SEvllef_gAAAJU"]
[Sat May 09 03:26:24.753937 2026] [:error] [pid 7577:tid 7589] [client 151.240.44.186:59929] [client 151.240.44.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.186, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af444ByoeQ6NE55oepPNMQAAAMo"]
[Sat May 09 03:26:35.486865 2026] [:error] [pid 7460:tid 7566] [client 151.240.44.99:29665] [client 151.240.44.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.99, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af4464M57Qlx1SEvllegJAAAAJA"]
[Sat May 09 03:26:46.277942 2026] [:error] [pid 7460:tid 7557] [client 151.240.44.20:63243] [client 151.240.44.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af449oM57Qlx1SEvllegKQAAAIc"]
[Sat May 09 03:26:57.015632 2026] [:error] [pid 7460:tid 7554] [client 151.240.44.254:21989] [client 151.240.44.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af45AYM57Qlx1SEvllegQAAAAIQ"]
[Sat May 09 03:27:07.774723 2026] [:error] [pid 7577:tid 7602] [client 151.240.44.4:36909] [client 151.240.44.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.4, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af45CxyoeQ6NE55oepPNiQAAANc"]
[Sat May 09 03:27:18.464351 2026] [:error] [pid 7577:tid 7602] [client 151.240.44.42:37005] [client 151.240.44.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.240.44.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af45FhyoeQ6NE55oepPNkgAAANc"]
[Sat May 09 03:30:53.460314 2026] [:error] [pid 7458:tid 7498] [client 45.154.98.197:58572] [client 45.154.98.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "af457YF0gkBOg9_OBdxhXwAAAAU"]
[Sat May 09 03:30:53.960431 2026] [:error] [pid 7577:tid 7603] [client 45.154.98.197:58879] [client 45.154.98.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/txets.php"] [unique_id "af457RyoeQ6NE55oepPQOwAAANg"]
[Sat May 09 03:30:54.475696 2026] [:error] [pid 7577:tid 7599] [client 45.154.98.197:59226] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/txets.php"] [unique_id "af457hyoeQ6NE55oepPQQgAAANQ"]
[Sat May 09 03:30:54.978918 2026] [:error] [pid 7459:tid 7537] [client 45.154.98.197:59467] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "af457jMmHx_wknzWc2aH_AAAAE4"]
[Sat May 09 03:30:55.478818 2026] [:error] [pid 7577:tid 7592] [client 45.154.98.197:59736] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "af457xyoeQ6NE55oepPQSAAAAM0"]
[Sat May 09 03:30:55.980778 2026] [:error] [pid 7458:tid 7508] [client 45.154.98.197:60013] [client 45.154.98.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/txets.php"] [unique_id "af4574F0gkBOg9_OBdxhaQAAAA8"]
[Sat May 09 03:30:56.482822 2026] [:error] [pid 7459:tid 7527] [client 45.154.98.197:60335] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/txets.php"] [unique_id "af458DMmHx_wknzWc2aIAAAAAEQ"]
[Sat May 09 03:30:56.994531 2026] [:error] [pid 7460:tid 7558] [client 45.154.98.197:60851] [client 45.154.98.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/schallfuns.php"] [unique_id "af458IM57Qlx1SEvlleiXAAAAIg"]
[Sat May 09 03:30:57.499081 2026] [:error] [pid 7460:tid 7569] [client 45.154.98.197:61124] [client 45.154.98.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "af458YM57Qlx1SEvlleiYQAAAJM"]
[Sat May 09 04:00:16.021259 2026] [:error] [pid 9184:tid 9214] [client 45.130.83.94:43339] [client 45.130.83.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "af5A0IjfODqb_i0Fm99KiwAAABE"]
[Sat May 09 04:00:18.850919 2026] [proxy_fcgi:error] [pid 9184:tid 9214] [client 45.130.83.94:43339] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 09 04:57:47.732190 2026] [:error] [pid 9920:tid 9946] [client 191.36.139.124:31574] [client 191.36.139.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.36.139.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af5OS0xitGYhlzgZb5ZNXwAAAdg"]
[Sat May 09 04:57:57.801514 2026] [:error] [pid 9186:tid 9232] [client 191.36.139.124:32299] [client 191.36.139.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.36.139.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af5OVRW4eFOEw1mKOgJupwAAAEY"]
[Sat May 09 04:58:08.363598 2026] [:error] [pid 9293:tid 9308] [client 191.36.139.124:31642] [client 191.36.139.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.36.139.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af5OYJR__qEzV5O6Z2OvcQAAAMs"]
[Sat May 09 04:58:18.872763 2026] [:error] [pid 9187:tid 9254] [client 191.36.139.124:32537] [client 191.36.139.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.36.139.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af5OahC7An6gkXsRsaHTVwAAAIE"]
[Sat May 09 04:58:29.324583 2026] [:error] [pid 9920:tid 9922] [client 191.36.139.124:33191] [client 191.36.139.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.36.139.124, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af5OdUxitGYhlzgZb5ZNjAAAAcA"]
[Sat May 09 05:12:22.974356 2026] [:error] [pid 9293:tid 9307] [client 20.206.86.59:46610] [client 20.206.86.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "af5RtpR__qEzV5O6Z2O13AAAAMo"]
[Sat May 09 05:12:24.223877 2026] [:error] [pid 9187:tid 9259] [client 20.206.86.59:46592] [client 20.206.86.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "af5RuBC7An6gkXsRsaHZXAAAAIY"]
[Sat May 09 05:12:25.493857 2026] [:error] [pid 9920:tid 9945] [client 20.206.86.59:50027] [client 20.206.86.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "af5RuUxitGYhlzgZb5ZRnAAAAdc"]
[Sat May 09 05:12:26.733993 2026] [:error] [pid 9920:tid 9932] [client 20.206.86.59:35583] [client 20.206.86.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "af5RukxitGYhlzgZb5ZRoQAAAco"]
[Sat May 09 05:13:44.336119 2026] [:error] [pid 9920:tid 9938] [client 20.220.146.147:43034] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "af5SCExitGYhlzgZb5ZSMQAAAdA"]
[Sat May 09 05:13:45.170937 2026] [:error] [pid 9186:tid 9239] [client 20.220.146.147:43087] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "af5SCRW4eFOEw1mKOgJxtwAAAE0"]
[Sat May 09 05:13:45.999491 2026] [:error] [pid 9663:tid 9685] [client 20.220.146.147:43009] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "af5SCZcWIu01SCxbjwvBdgAAARM"]
[Sat May 09 05:13:46.825525 2026] [:error] [pid 9663:tid 9671] [client 20.220.146.147:43130] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "af5SCpcWIu01SCxbjwvBewAAAQU"]
[Sat May 09 05:19:38.937620 2026] [:error] [pid 9186:tid 9232] [client 108.131.31.231:35214] [client 108.131.31.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af5TahW4eFOEw1mKOgJzYgAAAEY"]
[Sat May 09 05:19:41.016253 2026] [:error] [pid 9187:tid 9275] [client 108.131.31.231:35240] [client 108.131.31.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "af5TbRC7An6gkXsRsaHdcQAAAJY"]
[Sat May 09 05:19:42.051502 2026] [:error] [pid 9187:tid 9265] [client 108.131.31.231:35324] [client 108.131.31.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "af5TbhC7An6gkXsRsaHdeQAAAIw"]
[Sat May 09 05:24:03.556027 2026] [:error] [pid 9184:tid 9218] [client 217.165.57.43:49524] [client 217.165.57.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.57.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af5Uc4jfODqb_i0Fm99X0gAAABU"]
[Sat May 09 05:24:13.656384 2026] [:error] [pid 9186:tid 9245] [client 217.165.57.43:50043] [client 217.165.57.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.57.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af5UfRW4eFOEw1mKOgJ1EgAAAFM"]
[Sat May 09 05:24:24.251895 2026] [:error] [pid 9833:tid 9853] [client 217.165.57.43:50725] [client 217.165.57.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.57.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af5UiCM9JmxIS0KGZUAv4AAAAY8"]
[Sat May 09 05:24:34.882569 2026] [:error] [pid 9186:tid 9249] [client 217.165.57.43:51227] [client 217.165.57.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.57.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af5UkhW4eFOEw1mKOgJ1HgAAAFc"]
[Sat May 09 05:24:45.497500 2026] [:error] [pid 9663:tid 9684] [client 217.165.57.43:51741] [client 217.165.57.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.57.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af5UnZcWIu01SCxbjwvEpgAAARI"]
[Sat May 09 06:12:16.499154 2026] [:error] [pid 9187:tid 9264] [client 170.106.107.87:33138] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "af5fwBC7An6gkXsRsaHtnQAAAIs"]
[Sat May 09 07:01:38.950284 2026] [:error] [pid 9293:tid 9308] [client 45.92.229.122:40213] [client 45.92.229.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.122, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "af5rUpR__qEzV5O6Z2PmCAAAAMs"]
[Sat May 09 07:01:41.118248 2026] [proxy_fcgi:error] [pid 9293:tid 9308] [client 45.92.229.122:40213] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 09 07:17:00.546510 2026] [:error] [pid 9187:tid 9273] [client 45.130.83.94:53147] [client 45.130.83.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.94, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "af5u7BC7An6gkXsRsaECKgAAAJQ"]
[Sat May 09 07:17:01.464225 2026] [proxy_fcgi:error] [pid 9187:tid 9273] [client 45.130.83.94:53147] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 09 08:36:34.720357 2026] [:error] [pid 9293:tid 9313] [client 96.20.159.6:63155] [client 96.20.159.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.20.159.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6BkpR__qEzV5O6Z2MQkgAAANA"]
[Sat May 09 08:36:44.841146 2026] [:error] [pid 9186:tid 9231] [client 96.20.159.6:63603] [client 96.20.159.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.20.159.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6BnBW4eFOEw1mKOgKUIQAAAEU"]
[Sat May 09 08:36:55.423834 2026] [:error] [pid 9920:tid 9926] [client 96.20.159.6:64178] [client 96.20.159.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.20.159.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6Bp0xitGYhlzgZb5aHBgAAAcQ"]
[Sat May 09 08:37:06.034776 2026] [:error] [pid 9293:tid 9300] [client 96.20.159.6:64571] [client 96.20.159.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.20.159.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6BspR__qEzV5O6Z2MQ1QAAAMM"]
[Sat May 09 08:37:16.557096 2026] [:error] [pid 9187:tid 9265] [client 96.20.159.6:64955] [client 96.20.159.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.20.159.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6BvBC7An6gkXsRsaEYKwAAAIw"]
[Sat May 09 11:07:12.794037 2026] [:error] [pid 9187:tid 9265] [client 159.146.42.90:47570] [client 159.146.42.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.146.42.90, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6k4BC7An6gkXsRsaFEZwAAAIw"]
[Sat May 09 11:07:59.855130 2026] [:error] [pid 9293:tid 9303] [client 45.154.98.198:60563] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6lD5R__qEzV5O6Z2NOuAAAAMY"], referer: www.google.com
[Sat May 09 11:07:59.867973 2026] [:error] [pid 9293:tid 9304] [client 45.154.98.198:60566] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "af6lD5R__qEzV5O6Z2NOuQAAAMc"], referer: www.google.com
[Sat May 09 11:07:59.883162 2026] [:error] [pid 9293:tid 9315] [client 45.154.98.198:60586] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6lD5R__qEzV5O6Z2NOuwAAANI"], referer: www.google.com
[Sat May 09 11:07:59.883565 2026] [:error] [pid 9293:tid 9301] [client 45.154.98.198:60571] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af6lD5R__qEzV5O6Z2NOvAAAAMQ"]
[Sat May 09 11:08:00.352344 2026] [:error] [pid 9187:tid 9259] [client 45.154.98.198:61177] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6lEBC7An6gkXsRsaFEoAAAAIY"], referer: www.google.com
[Sat May 09 11:08:00.368795 2026] [:error] [pid 9920:tid 9927] [client 45.154.98.198:61195] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "af6lEExitGYhlzgZb5aqNgAAAcU"], referer: www.google.com
[Sat May 09 11:08:00.386971 2026] [:error] [pid 9187:tid 9261] [client 45.154.98.198:61214] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af6lEBC7An6gkXsRsaFEoQAAAIg"]
[Sat May 09 11:08:00.402711 2026] [:error] [pid 9663:tid 9680] [client 45.154.98.198:61217] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6lEJcWIu01SCxbjwsIjQAAAQ4"], referer: www.google.com
[Sat May 09 11:08:00.849270 2026] [:error] [pid 9920:tid 9944] [client 45.154.98.198:61994] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6lEExitGYhlzgZb5aqPwAAAdY"], referer: www.google.com
[Sat May 09 11:08:00.867259 2026] [:error] [pid 9920:tid 9930] [client 45.154.98.198:62033] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "af6lEExitGYhlzgZb5aqQAAAAcg"], referer: www.google.com
[Sat May 09 11:08:00.885197 2026] [:error] [pid 9920:tid 9929] [client 45.154.98.198:62073] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af6lEExitGYhlzgZb5aqQQAAAcc"]
[Sat May 09 11:08:00.906531 2026] [:error] [pid 9920:tid 9924] [client 45.154.98.198:62088] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6lEExitGYhlzgZb5aqQgAAAcI"], referer: www.google.com
[Sat May 09 11:08:01.347819 2026] [:error] [pid 9760:tid 9766] [client 45.154.98.198:62710] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6lEWIkCp-C_fh0s7Ip5QAAAUA"], referer: www.google.com
[Sat May 09 11:08:01.371324 2026] [:error] [pid 9760:tid 9779] [client 45.154.98.198:62720] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "af6lEWIkCp-C_fh0s7Ip5gAAAU0"], referer: www.google.com
[Sat May 09 11:08:01.390026 2026] [:error] [pid 9760:tid 9771] [client 45.154.98.198:62726] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af6lEWIkCp-C_fh0s7Ip6AAAAUU"]
[Sat May 09 11:08:01.405410 2026] [:error] [pid 9760:tid 9770] [client 45.154.98.198:62731] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6lEWIkCp-C_fh0s7Ip6QAAAUQ"], referer: www.google.com
[Sat May 09 11:08:01.622292 2026] [:error] [pid 9293:tid 9311] [client 45.154.98.198:60591] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-plain.php"] [unique_id "af6lEZR__qEzV5O6Z2NOygAAAM4"], referer: www.google.com
[Sat May 09 11:08:01.846093 2026] [:error] [pid 9186:tid 9246] [client 45.154.98.198:63340] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6lERW4eFOEw1mKOgKsHQAAAFQ"], referer: www.google.com
[Sat May 09 11:08:01.893855 2026] [:error] [pid 9293:tid 9307] [client 45.154.98.198:63447] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af6lEZR__qEzV5O6Z2NO0wAAAMo"]
[Sat May 09 11:08:01.907687 2026] [:error] [pid 9760:tid 9784] [client 45.154.98.198:63464] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6lEWIkCp-C_fh0s7Ip6wAAAVI"], referer: www.google.com
[Sat May 09 11:08:02.854134 2026] [:error] [pid 9186:tid 9231] [client 45.154.98.198:64384] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6lEhW4eFOEw1mKOgKsIwAAAEU"], referer: www.google.com
[Sat May 09 11:08:02.918083 2026] [:error] [pid 9186:tid 9247] [client 45.154.98.198:64444] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6lEhW4eFOEw1mKOgKsJAAAAFU"], referer: www.google.com
[Sat May 09 11:08:03.860850 2026] [:error] [pid 9186:tid 9229] [client 45.154.98.198:49986] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6lExW4eFOEw1mKOgKsKAAAAEM"], referer: www.google.com
[Sat May 09 11:08:03.916632 2026] [:error] [pid 9186:tid 9248] [client 45.154.98.198:50101] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6lExW4eFOEw1mKOgKsKgAAAFY"], referer: www.google.com
[Sat May 09 11:08:04.872564 2026] [:error] [pid 9293:tid 9301] [client 45.154.98.198:52100] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6lFJR__qEzV5O6Z2NPAQAAAMQ"], referer: www.google.com
[Sat May 09 11:08:04.911216 2026] [:error] [pid 9293:tid 9302] [client 45.154.98.198:52229] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6lFJR__qEzV5O6Z2NPAgAAAMU"], referer: www.google.com
[Sat May 09 11:08:05.879746 2026] [:error] [pid 9293:tid 9309] [client 45.154.98.198:53594] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6lFZR__qEzV5O6Z2NPDgAAAMw"], referer: www.google.com
[Sat May 09 11:08:05.912369 2026] [:error] [pid 9293:tid 9312] [client 45.154.98.198:53646] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6lFZR__qEzV5O6Z2NPDwAAAM8"], referer: www.google.com
[Sat May 09 11:08:06.882894 2026] [:error] [pid 9293:tid 9299] [client 45.154.98.198:55556] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6lFpR__qEzV5O6Z2NPGwAAAMI"], referer: www.google.com
[Sat May 09 11:08:06.917978 2026] [:error] [pid 9833:tid 9841] [client 45.154.98.198:55612] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6lFiM9JmxIS0KGZUBgBwAAAYM"], referer: www.google.com
[Sat May 09 11:32:45.250156 2026] [:error] [pid 9760:tid 9781] [client 159.146.42.90:48641] [client 159.146.42.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af6q3WIkCp-C_fh0s7ItlgAAAU8"]
[Sat May 09 11:33:05.835545 2026] [:error] [pid 9920:tid 9922] [client 159.146.42.90:48750] [client 159.146.42.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.146.42.90, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6q8UxitGYhlzgZb5awbwAAAcA"]
[Sat May 09 11:43:21.588657 2026] [:error] [pid 9663:tid 9678] [client 43.166.244.66:34344] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af6tWZcWIu01SCxbjwsQUgAAAQw"]
[Sat May 09 11:58:50.262447 2026] [:error] [pid 9187:tid 9267] [client 51.77.216.124:45282] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "af6w-hC7An6gkXsRsaFUcgAAAI4"]
[Sat May 09 11:58:52.597170 2026] [:error] [pid 9663:tid 9680] [client 51.77.216.124:49068] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "af6w_JcWIu01SCxbjwsTLQAAAQ4"]
[Sat May 09 11:58:55.104474 2026] [:error] [pid 9187:tid 9253] [client 51.77.216.124:49084] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "af6w_xC7An6gkXsRsaFUgAAAAIA"]
[Sat May 09 11:58:57.666674 2026] [:error] [pid 9760:tid 9784] [client 51.77.216.124:55340] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "af6xAWIkCp-C_fh0s7IwSQAAAVI"]
[Sat May 09 11:59:00.046634 2026] [:error] [pid 9187:tid 9260] [client 51.77.216.124:55350] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "af6xBBC7An6gkXsRsaFUkgAAAIc"]
[Sat May 09 11:59:02.442105 2026] [:error] [pid 9293:tid 9307] [client 51.77.216.124:55366] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "af6xBpR__qEzV5O6Z2NkNQAAAMo"]
[Sat May 09 11:59:04.996629 2026] [:error] [pid 9663:tid 9683] [client 51.77.216.124:55368] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "af6xCJcWIu01SCxbjwsTRwAAARE"]
[Sat May 09 11:59:07.374934 2026] [:error] [pid 9293:tid 9316] [client 51.77.216.124:50530] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "af6xC5R__qEzV5O6Z2NkQwAAANM"]
[Sat May 09 11:59:09.786044 2026] [:error] [pid 9920:tid 9925] [client 51.77.216.124:50534] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "af6xDUxitGYhlzgZb5a2AwAAAcM"]
[Sat May 09 11:59:12.330754 2026] [:error] [pid 9663:tid 9674] [client 51.77.216.124:50544] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "af6xEJcWIu01SCxbjwsTTAAAAQg"]
[Sat May 09 11:59:14.896047 2026] [:error] [pid 9187:tid 9253] [client 51.77.216.124:50558] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "af6xEhC7An6gkXsRsaFUqwAAAIA"]
[Sat May 09 11:59:17.436742 2026] [:error] [pid 9920:tid 9943] [client 51.77.216.124:42976] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "af6xFUxitGYhlzgZb5a2DAAAAdU"]
[Sat May 09 11:59:19.818413 2026] [:error] [pid 9663:tid 9685] [client 51.77.216.124:42992] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "af6xF5cWIu01SCxbjwsTVwAAARM"]
[Sat May 09 11:59:22.356930 2026] [:error] [pid 9920:tid 9926] [client 51.77.216.124:43008] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "af6xGkxitGYhlzgZb5a2DgAAAcQ"]
[Sat May 09 11:59:24.873288 2026] [:error] [pid 9293:tid 9301] [client 51.77.216.124:43022] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "af6xHJR__qEzV5O6Z2NkhAAAAMQ"]
[Sat May 09 11:59:27.392312 2026] [:error] [pid 9833:tid 9857] [client 51.77.216.124:46328] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "af6xHyM9JmxIS0KGZUBnFAAAAZM"]
[Sat May 09 11:59:29.897666 2026] [:error] [pid 9293:tid 9313] [client 51.77.216.124:46336] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "af6xIZR__qEzV5O6Z2NklgAAANA"]
[Sat May 09 11:59:32.281883 2026] [:error] [pid 9920:tid 9943] [client 51.77.216.124:46340] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "af6xJExitGYhlzgZb5a2GwAAAdU"]
[Sat May 09 11:59:34.818763 2026] [:error] [pid 9760:tid 9772] [client 51.77.216.124:46348] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "af6xJmIkCp-C_fh0s7IwVwAAAUY"]
[Sat May 09 11:59:37.347532 2026] [:error] [pid 9184:tid 9197] [client 51.77.216.124:33334] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "af6xKYjfODqb_i0Fm9-A_AAAAAA"]
[Sat May 09 11:59:39.720784 2026] [:error] [pid 9663:tid 9669] [client 51.77.216.124:33336] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "af6xK5cWIu01SCxbjwsTeAAAAQM"]
[Sat May 09 11:59:42.223766 2026] [:error] [pid 9187:tid 9261] [client 51.77.216.124:33348] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "af6xLhC7An6gkXsRsaFUxQAAAIg"]
[Sat May 09 11:59:44.725343 2026] [:error] [pid 9187:tid 9256] [client 51.77.216.124:33358] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "af6xMBC7An6gkXsRsaFUyAAAAIM"]
[Sat May 09 12:00:14.958686 2026] [:error] [pid 9293:tid 9319] [client 51.77.216.124:54474] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af6xTpR__qEzV5O6Z2Nk6wAAANY"]
[Sat May 09 12:00:17.396750 2026] [:error] [pid 9293:tid 9307] [client 51.77.216.124:45338] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af6xUZR__qEzV5O6Z2Nk7wAAAMo"]
[Sat May 09 12:00:19.907879 2026] [:error] [pid 9920:tid 9936] [client 51.77.216.124:45348] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "af6xU0xitGYhlzgZb5a2VgAAAc4"]
[Sat May 09 12:00:22.293413 2026] [:error] [pid 9663:tid 9672] [client 51.77.216.124:45354] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "af6xVpcWIu01SCxbjwsTkAAAAQY"]
[Sat May 09 12:00:24.822970 2026] [:error] [pid 9663:tid 9682] [client 51.77.216.124:45358] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "af6xWJcWIu01SCxbjwsTkgAAARA"]
[Sat May 09 12:00:27.321088 2026] [:error] [pid 9920:tid 9942] [client 51.77.216.124:55960] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "af6xW0xitGYhlzgZb5a2YQAAAdQ"]
[Sat May 09 12:00:29.842191 2026] [:error] [pid 9293:tid 9317] [client 51.77.216.124:55976] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "af6xXZR__qEzV5O6Z2NlAAAAANQ"]
[Sat May 09 12:00:32.226429 2026] [:error] [pid 9293:tid 9310] [client 51.77.216.124:55988] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "af6xYJR__qEzV5O6Z2NlBgAAAM0"]
[Sat May 09 12:00:34.754199 2026] [:error] [pid 9293:tid 9297] [client 51.77.216.124:55990] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "af6xYpR__qEzV5O6Z2NlCwAAAMA"]
[Sat May 09 12:00:37.234803 2026] [:error] [pid 9293:tid 9300] [client 51.77.216.124:53806] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "af6xZZR__qEzV5O6Z2NlEwAAAMM"]
[Sat May 09 12:00:39.742722 2026] [:error] [pid 9293:tid 9318] [client 51.77.216.124:53816] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "af6xZ5R__qEzV5O6Z2NlGwAAANU"]
[Sat May 09 12:00:42.146112 2026] [:error] [pid 9187:tid 9272] [client 51.77.216.124:53824] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "af6xahC7An6gkXsRsaFVAQAAAJM"]
[Sat May 09 12:00:44.532715 2026] [:error] [pid 9293:tid 9319] [client 51.77.216.124:53828] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "af6xbJR__qEzV5O6Z2NlHgAAANY"]
[Sat May 09 12:00:46.951593 2026] [:error] [pid 9663:tid 9681] [client 51.77.216.124:45938] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "af6xbpcWIu01SCxbjwsTowAAAQ8"]
[Sat May 09 12:00:49.491891 2026] [:error] [pid 9187:tid 9261] [client 51.77.216.124:45952] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "af6xcRC7An6gkXsRsaFVDwAAAIg"]
[Sat May 09 12:00:51.869316 2026] [:error] [pid 9293:tid 9300] [client 51.77.216.124:45960] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "af6xc5R__qEzV5O6Z2NlKAAAAMM"]
[Sat May 09 12:00:54.393961 2026] [:error] [pid 9293:tid 9321] [client 51.77.216.124:45974] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "af6xdpR__qEzV5O6Z2NlMwAAANg"]
[Sat May 09 12:00:56.901543 2026] [:error] [pid 9293:tid 9299] [client 51.77.216.124:52632] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "af6xeJR__qEzV5O6Z2NlOwAAAMI"]
[Sat May 09 12:00:59.377414 2026] [:error] [pid 9187:tid 9262] [client 51.77.216.124:52642] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "af6xexC7An6gkXsRsaFVGQAAAIk"]
[Sat May 09 12:01:01.878567 2026] [:error] [pid 9663:tid 9687] [client 51.77.216.124:52644] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "af6xfZcWIu01SCxbjwsTqgAAARU"]
[Sat May 09 12:01:04.385599 2026] [:error] [pid 9833:tid 9848] [client 51.77.216.124:52650] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "af6xgCM9JmxIS0KGZUBnNwAAAYo"]
[Sat May 09 12:01:06.917525 2026] [:error] [pid 9833:tid 9861] [client 51.77.216.124:55266] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "af6xgiM9JmxIS0KGZUBnOQAAAZc"]
[Sat May 09 12:01:09.412591 2026] [:error] [pid 9663:tid 9678] [client 51.77.216.124:55272] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "af6xhZcWIu01SCxbjwsTsQAAAQw"]
[Sat May 09 12:01:11.895495 2026] [:error] [pid 9663:tid 9677] [client 51.77.216.124:55284] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "af6xh5cWIu01SCxbjwsTswAAAQs"]
[Sat May 09 12:01:41.106729 2026] [:error] [pid 9663:tid 9683] [client 51.77.216.124:55286] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "af6xpZcWIu01SCxbjwsT2gAAARE"]
[Sat May 09 12:01:43.529846 2026] [:error] [pid 9663:tid 9671] [client 51.77.216.124:35584] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "af6xp5cWIu01SCxbjwsT2wAAAQU"]
[Sat May 09 12:01:45.866766 2026] [:error] [pid 9293:tid 9308] [client 51.77.216.124:35592] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "af6xqZR__qEzV5O6Z2NlkAAAAMs"]
[Sat May 09 12:01:48.381345 2026] [:error] [pid 9760:tid 9774] [client 51.77.216.124:34676] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "af6xrGIkCp-C_fh0s7IwiQAAAUg"]
[Sat May 09 12:01:50.691669 2026] [:error] [pid 9186:tid 9242] [client 51.77.216.124:34690] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "af6xrhW4eFOEw1mKOgK1BAAAAFA"]
[Sat May 09 12:01:53.156270 2026] [:error] [pid 9833:tid 9860] [client 51.77.216.124:34700] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "af6xsSM9JmxIS0KGZUBnUQAAAZY"]
[Sat May 09 12:01:55.467157 2026] [:error] [pid 9663:tid 9672] [client 51.77.216.124:34708] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "af6xs5cWIu01SCxbjwsT3QAAAQY"]
[Sat May 09 12:01:57.794048 2026] [:error] [pid 9293:tid 9320] [client 51.77.216.124:43296] [client 51.77.216.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "af6xtZR__qEzV5O6Z2NlpgAAANc"]
[Sat May 09 12:59:57.170165 2026] [:error] [pid 9187:tid 9277] [client 106.213.83.162:7171] [client 106.213.83.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.83.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6_TRC7An6gkXsRsaFmlQAAAJg"]
[Sat May 09 13:00:07.689648 2026] [:error] [pid 9187:tid 9272] [client 106.213.83.162:16502] [client 106.213.83.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.83.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6_VxC7An6gkXsRsaFmpwAAAJM"]
[Sat May 09 13:00:18.227301 2026] [:error] [pid 9187:tid 9274] [client 106.213.83.162:31304] [client 106.213.83.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.83.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6_YhC7An6gkXsRsaFmtAAAAJU"]
[Sat May 09 13:00:28.913367 2026] [:error] [pid 9293:tid 9303] [client 106.213.83.162:12404] [client 106.213.83.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.83.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6_bJR__qEzV5O6Z2N2sgAAAMY"]
[Sat May 09 13:00:40.461036 2026] [:error] [pid 9833:tid 9848] [client 106.213.83.162:6712] [client 106.213.83.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.83.162, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af6_eCM9JmxIS0KGZUBuRQAAAYo"]
[Sat May 09 13:33:31.291792 2026] [:error] [pid 9186:tid 9233] [client 119.91.20.139:47164] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "af7HKxW4eFOEw1mKOgLA8gAAAEc"]
[Sat May 09 14:23:46.866006 2026] [:error] [pid 9920:tid 9945] [client 103.178.79.73:57718] [client 103.178.79.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7S8kxitGYhlzgZb5bUwgAAAdc"]
[Sat May 09 14:23:52.264806 2026] [:error] [pid 9187:tid 9267] [client 103.226.202.182:36297] [client 103.226.202.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.202.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7S-BC7An6gkXsRsaGCrQAAAI4"]
[Sat May 09 14:23:56.834109 2026] [:error] [pid 9833:tid 9852] [client 103.178.79.73:45215] [client 103.178.79.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7S_CM9JmxIS0KGZUB3UAAAAY4"]
[Sat May 09 14:24:02.509895 2026] [:error] [pid 9920:tid 9936] [client 103.226.202.182:36155] [client 103.226.202.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.202.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7TAkxitGYhlzgZb5bU3QAAAc4"]
[Sat May 09 14:24:07.578330 2026] [:error] [pid 9293:tid 9309] [client 103.178.79.73:45601] [client 103.178.79.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7TB5R__qEzV5O6Z2ONewAAAMw"]
[Sat May 09 14:24:13.080600 2026] [:error] [pid 9187:tid 9263] [client 103.226.202.182:36259] [client 103.226.202.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.202.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7TDRC7An6gkXsRsaGC5AAAAIo"]
[Sat May 09 14:24:18.257071 2026] [:error] [pid 9293:tid 9319] [client 103.178.79.73:58936] [client 103.178.79.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7TEpR__qEzV5O6Z2ONhwAAANY"]
[Sat May 09 14:24:23.683281 2026] [:error] [pid 9920:tid 9930] [client 103.226.202.182:36171] [client 103.226.202.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.202.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7TF0xitGYhlzgZb5bU_wAAAcg"]
[Sat May 09 14:24:28.917216 2026] [:error] [pid 9187:tid 9253] [client 103.178.79.73:46393] [client 103.178.79.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.79.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7THBC7An6gkXsRsaGDDwAAAIA"]
[Sat May 09 14:24:34.310395 2026] [:error] [pid 9920:tid 9939] [client 103.226.202.182:34841] [client 103.226.202.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.202.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7TIkxitGYhlzgZb5bVDAAAAdE"]
[Sat May 09 16:01:03.949399 2026] [:error] [pid 9293:tid 9299] [client 156.38.87.171:57806] [client 156.38.87.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.38.87.171, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7pv5R__qEzV5O6Z2OqjAAAAMI"]
[Sat May 09 16:25:47.812923 2026] [:error] [pid 9833:tid 9840] [client 122.183.58.154:12554] [client 122.183.58.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.58.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7viyM9JmxIS0KGZUCEaAAAAYI"]
[Sat May 09 16:25:58.046752 2026] [:error] [pid 9760:tid 9776] [client 122.183.58.154:29563] [client 122.183.58.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.58.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7vlmIkCp-C_fh0s7JJ_gAAAUo"]
[Sat May 09 16:26:08.636466 2026] [:error] [pid 9184:tid 9216] [client 122.183.58.154:10617] [client 122.183.58.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.58.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7voIjfODqb_i0Fm9-XowAAABM"]
[Sat May 09 16:26:19.192292 2026] [:error] [pid 9663:tid 9690] [client 122.183.58.154:32616] [client 122.183.58.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.58.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7vq5cWIu01SCxbjws_HAAAARg"]
[Sat May 09 16:26:29.651485 2026] [:error] [pid 9187:tid 9270] [client 122.183.58.154:24577] [client 122.183.58.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.58.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af7vtRC7An6gkXsRsaGvBwAAAJE"]
[Sat May 09 17:19:29.145976 2026] [:error] [pid 9184:tid 9217] [client 66.167.90.134:6232] [client 66.167.90.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.167.90.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af78IYjfODqb_i0Fm9-bpAAAABQ"]
[Sat May 09 17:19:38.697487 2026] [:error] [pid 9184:tid 9216] [client 66.167.90.134:6706] [client 66.167.90.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.167.90.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af78KojfODqb_i0Fm9-bqgAAABM"]
[Sat May 09 17:19:49.229882 2026] [:error] [pid 9184:tid 9212] [client 66.167.90.134:5261] [client 66.167.90.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.167.90.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af78NYjfODqb_i0Fm9-bsgAAAA8"]
[Sat May 09 17:19:59.770455 2026] [:error] [pid 9187:tid 9277] [client 66.167.90.134:6007] [client 66.167.90.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.167.90.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af78PxC7An6gkXsRsaHAlQAAAJg"]
[Sat May 09 17:20:10.488507 2026] [:error] [pid 9760:tid 9775] [client 66.167.90.134:6592] [client 66.167.90.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.167.90.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af78SmIkCp-C_fh0s7JOsgAAAUk"]
[Sat May 09 17:27:07.166610 2026] [:error] [pid 9293:tid 9320] [client 45.130.83.104:30913] [client 45.130.83.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "af7965R__qEzV5O6Z2O_9QAAANc"]
[Sat May 09 17:27:09.333017 2026] [proxy_fcgi:error] [pid 9293:tid 9320] [client 45.130.83.104:30913] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 09 17:44:24.071059 2026] [:error] [pid 9293:tid 9313] [client 113.160.198.59:63837] [client 113.160.198.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.160.198.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8B-JR__qEzV5O6Z2PGXAAAANA"]
[Sat May 09 17:44:34.229445 2026] [:error] [pid 9187:tid 9264] [client 113.160.198.59:64143] [client 113.160.198.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.160.198.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8CAhC7An6gkXsRsaHKpwAAAIs"]
[Sat May 09 17:44:44.749308 2026] [:error] [pid 9187:tid 9253] [client 113.160.198.59:64586] [client 113.160.198.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.160.198.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8CDBC7An6gkXsRsaHKxQAAAIA"]
[Sat May 09 17:44:55.193175 2026] [:error] [pid 9187:tid 9262] [client 113.160.198.59:64937] [client 113.160.198.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.160.198.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8CFxC7An6gkXsRsaHK2gAAAIk"]
[Sat May 09 17:45:05.681903 2026] [:error] [pid 9186:tid 9229] [client 113.160.198.59:65268] [client 113.160.198.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.160.198.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8CIRW4eFOEw1mKOgLjrwAAAEM"]
[Sat May 09 18:47:11.158897 2026] [:error] [pid 9663:tid 9667] [client 194.62.107.31:52129] [client 194.62.107.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "af8Qr5cWIu01SCxbjwtV3wAAAQE"]
[Sat May 09 19:36:07.493824 2026] [:error] [pid 9833:tid 9851] [client 43.165.67.31:52388] [client 43.165.67.31] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af8cJyM9JmxIS0KGZUCZVQAAAY0"]
[Sat May 09 19:47:17.585250 2026] [:error] [pid 9293:tid 9302] [client 49.156.106.101:46445] [client 49.156.106.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.156.106.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8exZR__qEzV5O6Z2PmxwAAAMU"]
[Sat May 09 19:47:27.706018 2026] [:error] [pid 9920:tid 9922] [client 49.156.106.101:48023] [client 49.156.106.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.156.106.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8ez0xitGYhlzgZb5YWVwAAAcA"]
[Sat May 09 19:47:38.724642 2026] [:error] [pid 9187:tid 9274] [client 49.156.106.101:45089] [client 49.156.106.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.156.106.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8e2hC7An6gkXsRsaH6ewAAAJU"]
[Sat May 09 19:47:49.266960 2026] [:error] [pid 9760:tid 9789] [client 49.156.106.101:45788] [client 49.156.106.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.156.106.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8e5WIkCp-C_fh0s7JclAAAAVc"]
[Sat May 09 19:47:59.922227 2026] [:error] [pid 9293:tid 9315] [client 49.156.106.101:46835] [client 49.156.106.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.156.106.101, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8e75R__qEzV5O6Z2PnFwAAANI"]
[Sat May 09 20:42:41.400658 2026] [:error] [pid 55186:tid 55260] [client 103.129.135.152:14360] [client 103.129.135.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.135.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8rwZPIspqZdXg7QQumggAAAEs"]
[Sat May 09 20:42:52.038671 2026] [:error] [pid 55191:tid 55287] [client 103.129.135.152:15782] [client 103.129.135.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.135.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8rzPMcqx1kfQsw7c4A8gAAAIo"]
[Sat May 09 20:43:02.687504 2026] [:error] [pid 55191:tid 55281] [client 103.129.135.152:38468] [client 103.129.135.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.135.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8r1vMcqx1kfQsw7c4A_wAAAIQ"]
[Sat May 09 20:43:13.295532 2026] [:error] [pid 55191:tid 55295] [client 103.129.135.152:23245] [client 103.129.135.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.135.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8r4fMcqx1kfQsw7c4BEwAAAJI"]
[Sat May 09 20:43:23.974636 2026] [:error] [pid 55191:tid 55282] [client 103.129.135.152:14091] [client 103.129.135.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.135.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8r6_Mcqx1kfQsw7c4BKQAAAIU"]
[Sat May 09 20:43:34.653747 2026] [:error] [pid 55353:tid 55364] [client 103.129.135.152:28913] [client 103.129.135.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.135.152, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8r9iDuyNO3XosoIYQ7LAAAAQk"]
[Sat May 09 21:14:53.591550 2026] [:error] [pid 55186:tid 55271] [client 39.60.90.191:56523] [client 39.60.90.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.60.90.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8zTZPIspqZdXg7QQur_AAAAFY"]
[Sat May 09 21:15:03.717025 2026] [:error] [pid 55182:tid 55215] [client 39.60.90.191:56888] [client 39.60.90.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.60.90.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8zVzaxmP-S8ASrqQnZJQAAAMM"]
[Sat May 09 21:15:14.366942 2026] [:error] [pid 55186:tid 55272] [client 39.60.90.191:57288] [client 39.60.90.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.60.90.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8zYpPIspqZdXg7QQusBAAAAFc"]
[Sat May 09 21:15:25.038683 2026] [:error] [pid 55353:tid 55364] [client 39.60.90.191:57672] [client 39.60.90.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.60.90.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8zbSDuyNO3XosoIYRFHQAAAQk"]
[Sat May 09 21:15:35.777444 2026] [:error] [pid 55182:tid 55221] [client 39.60.90.191:58042] [client 39.60.90.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.60.90.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af8zdzaxmP-S8ASrqQnZMQAAAMk"]
[Sat May 09 21:42:21.354734 2026] [:error] [pid 55353:tid 55365] [client 158.181.40.134:5973] [client 158.181.40.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.181.40.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af85vSDuyNO3XosoIYRNEgAAAQo"]
[Sat May 09 21:42:31.478014 2026] [:error] [pid 55191:tid 55294] [client 158.181.40.134:3789] [client 158.181.40.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.181.40.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af85x_Mcqx1kfQsw7c4MJwAAAJE"]
[Sat May 09 21:42:41.993304 2026] [:error] [pid 55353:tid 55355] [client 158.181.40.134:3784] [client 158.181.40.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.181.40.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af850SDuyNO3XosoIYRNOQAAAQA"]
[Sat May 09 21:42:52.513133 2026] [:error] [pid 55186:tid 55248] [client 158.181.44.134:2565] [client 158.181.44.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.181.44.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af853JPIspqZdXg7QQuwEwAAAEA"]
[Sat May 09 21:43:03.052688 2026] [:error] [pid 55353:tid 55373] [client 158.181.40.134:3779] [client 158.181.40.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.181.40.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af855yDuyNO3XosoIYRNZQAAARI"]
[Sat May 09 21:43:13.614186 2026] [:error] [pid 55186:tid 55273] [client 158.181.44.134:2961] [client 158.181.44.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.181.44.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af858ZPIspqZdXg7QQuwKQAAAFg"]
[Sat May 09 21:43:24.147359 2026] [:error] [pid 55353:tid 55362] [client 158.181.40.134:1184] [client 158.181.40.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.181.40.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af85_CDuyNO3XosoIYRNgAAAAQc"]
[Sat May 09 21:43:55.715162 2026] [:error] [pid 55353:tid 55364] [client 158.181.44.134:2776] [client 158.181.44.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.181.44.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af86GyDuyNO3XosoIYRNlQAAAQk"]
[Sat May 09 21:44:06.237196 2026] [:error] [pid 55191:tid 55288] [client 158.181.44.134:2801] [client 158.181.44.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.181.44.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af86JvMcqx1kfQsw7c4MeAAAAIs"]
[Sat May 09 21:44:27.289357 2026] [:error] [pid 55191:tid 55282] [client 158.181.44.134:2799] [client 158.181.44.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.181.44.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af86O_Mcqx1kfQsw7c4MggAAAIU"]
[Sat May 09 23:10:57.966875 2026] [:error] [pid 55191:tid 55294] [client 34.97.132.86:48498] [client 34.97.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af9OgfMcqx1kfQsw7c4h9wAAAJE"]
[Sat May 09 23:10:59.155073 2026] [:error] [pid 55191:tid 55286] [client 34.97.132.86:59912] [client 34.97.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af9Og_Mcqx1kfQsw7c4h_gAAAIk"]
[Sat May 09 23:16:02.805054 2026] [:error] [pid 55182:tid 55213] [client 103.226.186.251:18341] [client 103.226.186.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.186.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af9PsjaxmP-S8ASrqQnqNgAAAME"]
[Sat May 09 23:16:13.354892 2026] [:error] [pid 55191:tid 55281] [client 103.226.186.251:18839] [client 103.226.186.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.186.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af9PvfMcqx1kfQsw7c4jjAAAAIQ"]
[Sat May 09 23:16:23.999940 2026] [:error] [pid 55186:tid 55250] [client 103.226.186.251:19188] [client 103.226.186.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.186.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af9Px5PIspqZdXg7QQvCmQAAAEE"]
[Sat May 09 23:16:34.657979 2026] [:error] [pid 55353:tid 55366] [client 103.226.186.251:18593] [client 103.226.186.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.186.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af9P0iDuyNO3XosoIYRxTQAAAQs"]
[Sat May 09 23:16:45.277977 2026] [:error] [pid 55353:tid 55365] [client 103.226.186.251:18945] [client 103.226.186.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.226.186.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af9P3SDuyNO3XosoIYRxhQAAAQo"]
[Sat May 09 23:18:59.479427 2026] [:error] [pid 55353:tid 55356] [client 43.135.144.81:56472] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "af9QYyDuyNO3XosoIYRyUgAAAQE"]
[Sun May 10 01:29:53.208084 2026] [:error] [pid 62831:tid 62846] [client 103.197.112.245:55838] [client 103.197.112.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.197.112.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af9vEeYBNqNhtZ_l7qBnrAAAAA0"]
[Sun May 10 01:30:13.632278 2026] [:error] [pid 55353:tid 55369] [client 103.197.112.245:8993] [client 103.197.112.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.197.112.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af9vJSDuyNO3XosoIYSQZgAAAQ4"]
[Sun May 10 01:30:45.459677 2026] [:error] [pid 55182:tid 55235] [client 103.197.112.245:8988] [client 103.197.112.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.197.112.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af9vRTaxmP-S8ASrqQn5bgAAANc"]
[Sun May 10 01:30:56.000590 2026] [:error] [pid 55191:tid 55282] [client 103.197.112.245:63067] [client 103.197.112.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.197.112.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af9vT_Mcqx1kfQsw7c46oQAAAIU"]
[Sun May 10 01:31:06.637871 2026] [:error] [pid 62831:tid 62850] [client 103.197.112.245:62997] [client 103.197.112.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.197.112.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af9vWuYBNqNhtZ_l7qBoYQAAABE"]
[Sun May 10 02:19:54.731155 2026] [:error] [pid 55182:tid 55228] [client 159.146.42.90:48109] [client 159.146.42.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af96yjaxmP-S8ASrqQn93QAAANA"]
[Sun May 10 02:20:21.036315 2026] [:error] [pid 62831:tid 62848] [client 159.146.42.90:48172] [client 159.146.42.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.146.42.90, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af965eYBNqNhtZ_l7qB12gAAAA8"]
[Sun May 10 02:31:31.211886 2026] [:error] [pid 62831:tid 62836] [client 182.8.161.222:13273] [client 182.8.161.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.161.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af99g-YBNqNhtZ_l7qB5gQAAAAM"]
[Sun May 10 02:31:41.634464 2026] [:error] [pid 55353:tid 55376] [client 182.8.161.222:14683] [client 182.8.161.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.161.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af99jSDuyNO3XosoIYSbdAAAARU"]
[Sun May 10 02:31:52.348418 2026] [:error] [pid 55186:tid 55272] [client 182.8.161.222:15573] [client 182.8.161.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.161.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af99mJPIspqZdXg7QQvchgAAAFc"]
[Sun May 10 02:32:02.936705 2026] [:error] [pid 62831:tid 62854] [client 182.8.161.222:16651] [client 182.8.161.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.161.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af99ouYBNqNhtZ_l7qB5kwAAABU"]
[Sun May 10 02:32:13.512196 2026] [:error] [pid 62831:tid 62849] [client 182.8.161.222:17747] [client 182.8.161.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.161.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af99reYBNqNhtZ_l7qB5ogAAABA"]
[Sun May 10 03:27:50.785949 2026] [:error] [pid 54411:tid 54423] [client 192.144.148.122:43044] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af-Ktmk83ZHCePdAyJXWdwAAAAg"]
[Sun May 10 03:29:35.779426 2026] [:error] [pid 54523:tid 54545] [client 115.133.48.144:63176] [client 115.133.48.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.133.48.144, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-LH1ag0VrOOAfRpVykCQAAANI"]
[Sun May 10 03:29:49.465120 2026] [:error] [pid 54412:tid 54467] [client 115.133.48.144:63639] [client 115.133.48.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.133.48.144, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-LLZcGutKcPMaLTbyd5gAAAFc"]
[Sun May 10 03:29:57.280032 2026] [:error] [pid 54413:tid 54487] [client 115.133.48.144:63943] [client 115.133.48.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.133.48.144, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-LNZQIWzp92c8chEJeZQAAAJA"]
[Sun May 10 03:30:10.899012 2026] [:error] [pid 54413:tid 54475] [client 115.133.48.144:64397] [client 115.133.48.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.133.48.144, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-LQpQIWzp92c8chEJebwAAAIQ"]
[Sun May 10 03:30:18.753018 2026] [:error] [pid 54412:tid 54465] [client 115.133.48.144:64677] [client 115.133.48.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.133.48.144, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-LSpcGutKcPMaLTbyd7AAAAFU"]
[Sun May 10 03:46:25.872085 2026] [:error] [pid 62802:tid 62857] [client 34.18.128.217:54886] [client 34.18.128.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af-PEat9wnaRe0v-Mka0cgAAAFQ"]
[Sun May 10 03:46:29.330813 2026] [:error] [pid 62803:tid 62874] [client 34.18.128.217:41644] [client 34.18.128.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af-PFU5oy4jU7eVtNaXdiAAAAIo"]
[Sun May 10 03:50:34.540958 2026] [:error] [pid 62910:tid 62931] [client 136.144.43.36:46547] [client 136.144.43.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QCt5YAy_h5VqgWqhFywAAANM"]
[Sun May 10 03:50:44.898416 2026] [:error] [pid 62803:tid 62873] [client 136.144.43.55:64769] [client 136.144.43.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QFE5oy4jU7eVtNaXesgAAAIk"]
[Sun May 10 03:50:55.766288 2026] [:error] [pid 62910:tid 62914] [client 136.144.43.52:35109] [client 136.144.43.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QH95YAy_h5VqgWqhF4gAAAMI"]
[Sun May 10 03:51:07.196047 2026] [:error] [pid 62801:tid 62815] [client 136.144.43.41:53595] [client 136.144.43.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QKxMFDul6kZmcchAgFQAAAAU"]
[Sun May 10 03:51:17.846124 2026] [:error] [pid 62803:tid 62868] [client 136.144.43.54:51221] [client 136.144.43.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.54, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QNU5oy4jU7eVtNaXewgAAAIQ"]
[Sun May 10 03:51:28.710478 2026] [:error] [pid 62910:tid 62917] [client 136.144.43.53:40033] [client 136.144.43.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QQN5YAy_h5VqgWqhGCQAAAMU"]
[Sun May 10 03:51:39.902685 2026] [:error] [pid 62802:tid 62854] [client 136.144.43.43:24465] [client 136.144.43.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QS6t9wnaRe0v-Mka1PAAAAFE"]
[Sun May 10 03:51:50.672784 2026] [:error] [pid 62802:tid 62848] [client 136.144.43.46:35029] [client 136.144.43.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QVqt9wnaRe0v-Mka1RgAAAEs"]
[Sun May 10 03:52:01.302071 2026] [:error] [pid 62801:tid 62833] [client 136.144.43.62:27049] [client 136.144.43.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QYRMFDul6kZmcchAgJQAAABc"]
[Sun May 10 03:52:11.978554 2026] [:error] [pid 62803:tid 62884] [client 136.144.43.37:38269] [client 136.144.43.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Qa05oy4jU7eVtNaXe1wAAAJQ"]
[Sun May 10 03:52:22.814172 2026] [:error] [pid 62910:tid 62923] [client 136.144.43.44:54805] [client 136.144.43.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.44, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Qdt5YAy_h5VqgWqhGNgAAAMs"]
[Sun May 10 03:52:33.497617 2026] [:error] [pid 62910:tid 62922] [client 136.144.43.59:36499] [client 136.144.43.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Qgd5YAy_h5VqgWqhGXAAAAMo"]
[Sun May 10 03:52:44.190606 2026] [:error] [pid 62803:tid 62888] [client 136.144.43.43:46763] [client 136.144.43.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QjE5oy4jU7eVtNaXe9AAAAJg"]
[Sun May 10 03:52:54.801844 2026] [:error] [pid 62803:tid 62887] [client 136.144.43.60:55587] [client 136.144.43.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.60, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Qlk5oy4jU7eVtNaXe-QAAAJc"]
[Sun May 10 03:53:05.619431 2026] [:error] [pid 62801:tid 62822] [client 136.144.43.60:55241] [client 136.144.43.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.60, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QoRMFDul6kZmcchAgPAAAAAw"]
[Sun May 10 03:53:16.250751 2026] [:error] [pid 62802:tid 62857] [client 136.144.43.44:52957] [client 136.144.43.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.44, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QrKt9wnaRe0v-Mka1ewAAAFQ"]
[Sun May 10 03:53:27.094424 2026] [:error] [pid 62802:tid 62860] [client 136.144.43.37:62495] [client 136.144.43.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Qt6t9wnaRe0v-Mka1gAAAAFc"]
[Sun May 10 03:53:37.887178 2026] [:error] [pid 62803:tid 62887] [client 136.144.43.45:32569] [client 136.144.43.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.45, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QwU5oy4jU7eVtNaXfDQAAAJc"]
[Sun May 10 03:53:48.829212 2026] [:error] [pid 62801:tid 62834] [client 136.144.43.35:24811] [client 136.144.43.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-QzBMFDul6kZmcchAgTwAAABg"]
[Sun May 10 03:53:59.626319 2026] [:error] [pid 62803:tid 62884] [client 136.144.43.55:22041] [client 136.144.43.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Q105oy4jU7eVtNaXfKgAAAJQ"]
[Sun May 10 03:54:10.429310 2026] [:error] [pid 62910:tid 62915] [client 136.144.43.44:23341] [client 136.144.43.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.44, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Q4t5YAy_h5VqgWqhGmwAAAMM"]
[Sun May 10 03:54:21.264686 2026] [:error] [pid 62803:tid 62887] [client 136.144.43.50:48495] [client 136.144.43.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.50, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Q7U5oy4jU7eVtNaXfQQAAAJc"]
[Sun May 10 03:54:32.117212 2026] [:error] [pid 62803:tid 62865] [client 136.144.43.62:38355] [client 136.144.43.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Q-E5oy4jU7eVtNaXfUAAAAIE"]
[Sun May 10 03:54:43.011160 2026] [:error] [pid 62910:tid 62913] [client 136.144.43.47:36957] [client 136.144.43.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RA95YAy_h5VqgWqhGxAAAAME"]
[Sun May 10 03:54:53.970772 2026] [:error] [pid 62803:tid 62888] [client 136.144.43.48:31989] [client 136.144.43.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RDU5oy4jU7eVtNaXfZAAAAJg"]
[Sun May 10 03:55:05.347586 2026] [:error] [pid 62801:tid 62818] [client 136.144.43.52:28703] [client 136.144.43.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RGRMFDul6kZmcchAghwAAAAg"]
[Sun May 10 03:55:16.044448 2026] [:error] [pid 62910:tid 62918] [client 136.144.43.42:52737] [client 136.144.43.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RJN5YAy_h5VqgWqhG8QAAAMY"]
[Sun May 10 03:55:27.053250 2026] [:error] [pid 62910:tid 62913] [client 136.144.43.56:24169] [client 136.144.43.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.56, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RL95YAy_h5VqgWqhHBAAAAME"]
[Sun May 10 03:55:37.843658 2026] [:error] [pid 62910:tid 62921] [client 136.144.43.37:65505] [client 136.144.43.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-ROd5YAy_h5VqgWqhHRwAAAMk"]
[Sun May 10 03:55:48.625958 2026] [:error] [pid 62802:tid 62844] [client 136.144.43.35:34477] [client 136.144.43.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RRKt9wnaRe0v-Mka13wAAAEc"]
[Sun May 10 03:55:59.378724 2026] [:error] [pid 62801:tid 62814] [client 136.144.43.38:28909] [client 136.144.43.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RTxMFDul6kZmcchAgtgAAAAQ"]
[Sun May 10 03:56:10.206679 2026] [:error] [pid 32915:tid 32925] [client 136.144.43.48:62133] [client 136.144.43.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RWjg8EIe76RX8AUZ0KwAAAQU"]
[Sun May 10 03:56:21.161456 2026] [:error] [pid 62910:tid 62930] [client 136.144.43.46:44657] [client 136.144.43.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RZd5YAy_h5VqgWqhH4wAAANI"]
[Sun May 10 03:56:32.069646 2026] [:error] [pid 62910:tid 62935] [client 136.144.43.51:55813] [client 136.144.43.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RcN5YAy_h5VqgWqhH9QAAANc"]
[Sun May 10 03:56:42.796800 2026] [:error] [pid 62910:tid 62917] [client 136.144.43.53:43025] [client 136.144.43.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Ret5YAy_h5VqgWqhIAAAAAMU"]
[Sun May 10 03:56:53.482140 2026] [:error] [pid 32915:tid 32932] [client 136.144.43.59:63569] [client 136.144.43.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RhTg8EIe76RX8AUZ0SQAAAQw"]
[Sun May 10 03:57:04.193847 2026] [:error] [pid 62910:tid 62920] [client 136.144.43.41:37895] [client 136.144.43.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RkN5YAy_h5VqgWqhIDAAAAMg"]
[Sun May 10 03:57:14.927570 2026] [:error] [pid 62910:tid 62913] [client 136.144.43.41:56443] [client 136.144.43.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Rmt5YAy_h5VqgWqhIFgAAAME"]
[Sun May 10 03:57:25.668840 2026] [:error] [pid 62910:tid 62934] [client 136.144.43.39:34811] [client 136.144.43.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.39, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Rpd5YAy_h5VqgWqhIJAAAANY"]
[Sun May 10 03:57:36.461793 2026] [:error] [pid 62803:tid 62867] [client 136.144.43.50:55859] [client 136.144.43.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.50, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RsE5oy4jU7eVtNaXgHQAAAIM"]
[Sun May 10 03:57:47.434745 2026] [:error] [pid 62802:tid 62857] [client 136.144.43.61:37053] [client 136.144.43.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Ru6t9wnaRe0v-Mka2EAAAAFQ"]
[Sun May 10 03:57:58.081431 2026] [:error] [pid 62801:tid 62811] [client 136.144.43.57:29723] [client 136.144.43.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.57, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-RxhMFDul6kZmcchAg0wAAAAE"]
[Sun May 10 03:58:09.032444 2026] [:error] [pid 62803:tid 62870] [client 136.144.43.41:51791] [client 136.144.43.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-R0U5oy4jU7eVtNaXgLAAAAIY"]
[Sun May 10 03:58:19.827513 2026] [:error] [pid 62802:tid 62839] [client 136.144.43.55:28929] [client 136.144.43.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-R26t9wnaRe0v-Mka2FwAAAEI"]
[Sun May 10 03:58:30.535660 2026] [:error] [pid 62803:tid 62867] [client 136.144.43.39:53871] [client 136.144.43.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.39, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-R5k5oy4jU7eVtNaXgMwAAAIM"]
[Sun May 10 03:58:41.383064 2026] [:error] [pid 62801:tid 62829] [client 136.144.43.49:58757] [client 136.144.43.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-R8RMFDul6kZmcchAg3AAAABM"]
[Sun May 10 03:58:52.230133 2026] [:error] [pid 62802:tid 62857] [client 136.144.43.59:60247] [client 136.144.43.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-R_Kt9wnaRe0v-Mka2MAAAAFQ"]
[Sun May 10 03:59:02.913614 2026] [:error] [pid 32915:tid 32943] [client 136.144.43.38:45453] [client 136.144.43.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SBjg8EIe76RX8AUZ0nwAAARc"]
[Sun May 10 03:59:13.561335 2026] [:error] [pid 62801:tid 62823] [client 136.144.43.52:41195] [client 136.144.43.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SERMFDul6kZmcchAg5QAAAA0"]
[Sun May 10 03:59:24.380992 2026] [:error] [pid 62801:tid 62812] [client 136.144.43.35:64233] [client 136.144.43.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SHBMFDul6kZmcchAg6gAAAAI"]
[Sun May 10 03:59:35.173589 2026] [:error] [pid 62803:tid 62875] [client 136.144.43.37:39093] [client 136.144.43.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SJ05oy4jU7eVtNaXgTgAAAIs"]
[Sun May 10 03:59:45.843601 2026] [:error] [pid 62910:tid 62924] [client 136.144.43.38:48881] [client 136.144.43.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SMd5YAy_h5VqgWqhIdwAAAMw"]
[Sun May 10 03:59:56.754400 2026] [:error] [pid 62803:tid 62867] [client 136.144.43.60:64357] [client 136.144.43.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.60, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SPE5oy4jU7eVtNaXgZQAAAIM"]
[Sun May 10 04:00:07.563560 2026] [:error] [pid 32915:tid 32939] [client 136.144.43.61:23311] [client 136.144.43.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SRzg8EIe76RX8AUZ07QAAARM"]
[Sun May 10 04:00:18.365941 2026] [:error] [pid 62801:tid 62825] [client 136.144.43.43:31499] [client 136.144.43.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SUhMFDul6kZmcchAg_QAAAA8"]
[Sun May 10 04:00:29.008514 2026] [:error] [pid 32915:tid 32929] [client 136.144.43.56:40099] [client 136.144.43.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.56, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SXTg8EIe76RX8AUZ1BwAAAQk"]
[Sun May 10 04:00:39.592304 2026] [:error] [pid 62803:tid 62881] [client 136.144.43.51:58089] [client 136.144.43.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SZ05oy4jU7eVtNaXgegAAAJE"]
[Sun May 10 04:00:50.101962 2026] [:error] [pid 62801:tid 62831] [client 136.144.43.40:53963] [client 136.144.43.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SchMFDul6kZmcchAhFQAAABU"]
[Sun May 10 04:01:00.830806 2026] [:error] [pid 32915:tid 32938] [client 136.144.43.43:47269] [client 136.144.43.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SfDg8EIe76RX8AUZ1IwAAARI"]
[Sun May 10 04:01:11.432164 2026] [:error] [pid 32915:tid 32934] [client 136.144.43.42:47293] [client 136.144.43.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Shzg8EIe76RX8AUZ1LgAAAQ4"]
[Sun May 10 04:01:22.029539 2026] [:error] [pid 62801:tid 62829] [client 136.144.43.37:33341] [client 136.144.43.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SkhMFDul6kZmcchAhKAAAABM"]
[Sun May 10 04:01:32.557042 2026] [:error] [pid 32915:tid 32942] [client 136.144.43.36:51707] [client 136.144.43.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SnDg8EIe76RX8AUZ1VAAAARY"]
[Sun May 10 04:01:54.471924 2026] [:error] [pid 32915:tid 32928] [client 136.144.43.56:29769] [client 136.144.43.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.56, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Ssjg8EIe76RX8AUZ1cgAAAQg"]
[Sun May 10 04:02:05.228009 2026] [:error] [pid 32915:tid 32920] [client 136.144.43.35:38895] [client 136.144.43.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-SvTg8EIe76RX8AUZ1gwAAAQA"]
[Sun May 10 04:02:15.939715 2026] [:error] [pid 62910:tid 62930] [client 136.144.43.46:62583] [client 136.144.43.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Sx95YAy_h5VqgWqhJEwAAANI"]
[Sun May 10 04:02:26.805841 2026] [:error] [pid 32915:tid 32935] [client 136.144.43.44:46493] [client 136.144.43.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.44, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-S0jg8EIe76RX8AUZ1rgAAAQ8"]
[Sun May 10 04:02:37.456095 2026] [:error] [pid 62803:tid 62887] [client 136.144.43.58:41683] [client 136.144.43.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-S3U5oy4jU7eVtNaXhAgAAAJc"]
[Sun May 10 04:02:48.126739 2026] [:error] [pid 62803:tid 62864] [client 136.144.43.36:24185] [client 136.144.43.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-S6E5oy4jU7eVtNaXhEQAAAIA"]
[Sun May 10 04:02:58.822296 2026] [:error] [pid 62802:tid 62840] [client 136.144.43.57:52451] [client 136.144.43.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.57, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-S8qt9wnaRe0v-Mka2wAAAAEM"]
[Sun May 10 04:03:09.597906 2026] [:error] [pid 32915:tid 32932] [client 136.144.43.36:24521] [client 136.144.43.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-S_Tg8EIe76RX8AUZ2KAAAAQw"]
[Sun May 10 04:03:20.485032 2026] [:error] [pid 62802:tid 62844] [client 136.144.43.49:63913] [client 136.144.43.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TCKt9wnaRe0v-Mka2-wAAAEc"]
[Sun May 10 04:03:31.076621 2026] [:error] [pid 62803:tid 62878] [client 136.144.43.62:63707] [client 136.144.43.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TE05oy4jU7eVtNaXhkgAAAI4"]
[Sun May 10 04:03:41.671679 2026] [:error] [pid 32915:tid 32937] [client 136.144.43.53:30939] [client 136.144.43.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-THTg8EIe76RX8AUZ2dQAAARE"]
[Sun May 10 04:03:52.352675 2026] [:error] [pid 62803:tid 62882] [client 136.144.43.38:51165] [client 136.144.43.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TKE5oy4jU7eVtNaXhsgAAAJI"]
[Sun May 10 04:04:03.044009 2026] [:error] [pid 32915:tid 32935] [client 136.144.43.50:64029] [client 136.144.43.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.50, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TMzg8EIe76RX8AUZ2ngAAAQ8"]
[Sun May 10 04:04:13.626010 2026] [:error] [pid 62803:tid 62880] [client 136.144.43.52:43881] [client 136.144.43.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TPU5oy4jU7eVtNaXhvwAAAJA"]
[Sun May 10 04:04:24.290889 2026] [:error] [pid 62910:tid 62936] [client 136.144.43.44:48175] [client 136.144.43.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.44, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TSN5YAy_h5VqgWqhJcAAAANg"]
[Sun May 10 04:04:34.837941 2026] [:error] [pid 32915:tid 32926] [client 136.144.43.55:49929] [client 136.144.43.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TUjg8EIe76RX8AUZ2zgAAAQY"]
[Sun May 10 04:04:45.586049 2026] [:error] [pid 62802:tid 62846] [client 136.144.43.51:46689] [client 136.144.43.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TXat9wnaRe0v-Mka3OgAAAEk"]
[Sun May 10 04:04:56.342445 2026] [:error] [pid 32915:tid 32939] [client 136.144.43.42:57809] [client 136.144.43.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TaDg8EIe76RX8AUZ28wAAARM"]
[Sun May 10 04:05:07.079169 2026] [:error] [pid 62802:tid 62857] [client 136.144.43.49:47951] [client 136.144.43.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Tc6t9wnaRe0v-Mka3RQAAAFQ"]
[Sun May 10 04:05:17.786164 2026] [:error] [pid 62801:tid 62825] [client 136.144.43.57:41273] [client 136.144.43.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.57, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TfRMFDul6kZmcchAh6wAAAA8"]
[Sun May 10 04:05:28.565758 2026] [:error] [pid 62803:tid 62871] [client 136.144.43.39:61749] [client 136.144.43.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.39, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TiE5oy4jU7eVtNaXiAgAAAIc"]
[Sun May 10 04:05:39.198318 2026] [:error] [pid 62803:tid 62875] [client 136.144.43.51:23775] [client 136.144.43.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Tk05oy4jU7eVtNaXiEgAAAIs"]
[Sun May 10 04:05:49.848140 2026] [:error] [pid 62910:tid 62916] [client 136.144.43.51:37227] [client 136.144.43.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Tnd5YAy_h5VqgWqhKDAAAAMQ"]
[Sun May 10 04:06:00.453349 2026] [:error] [pid 62801:tid 62823] [client 136.144.43.62:47355] [client 136.144.43.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TqBMFDul6kZmcchAiEwAAAA0"]
[Sun May 10 04:06:11.535054 2026] [:error] [pid 32915:tid 32941] [client 136.144.43.49:47915] [client 136.144.43.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Tszg8EIe76RX8AUZ3ewAAARU"]
[Sun May 10 04:06:32.819847 2026] [:error] [pid 32915:tid 32936] [client 136.144.43.43:25557] [client 136.144.43.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.43, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-TyDg8EIe76RX8AUZ3lgAAARA"]
[Sun May 10 04:06:43.440687 2026] [:error] [pid 32915:tid 32920] [client 136.144.43.60:26557] [client 136.144.43.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.60, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-T0zg8EIe76RX8AUZ3pAAAAQA"]
[Sun May 10 04:06:54.066216 2026] [:error] [pid 62910:tid 62914] [client 136.144.43.50:34369] [client 136.144.43.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.50, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-T3t5YAy_h5VqgWqhKJwAAAMI"]
[Sun May 10 04:07:04.694208 2026] [:error] [pid 32915:tid 32934] [client 136.144.43.58:56831] [client 136.144.43.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-T6Dg8EIe76RX8AUZ3tAAAAQ4"]
[Sun May 10 04:07:15.391761 2026] [:error] [pid 32915:tid 32943] [client 136.144.43.59:20651] [client 136.144.43.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-T8zg8EIe76RX8AUZ3vQAAARc"]
[Sun May 10 04:07:26.277082 2026] [:error] [pid 62910:tid 62919] [client 136.144.43.39:29013] [client 136.144.43.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.39, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-T_t5YAy_h5VqgWqhKOwAAAMc"]
[Sun May 10 04:07:37.066248 2026] [:error] [pid 62910:tid 62919] [client 136.144.43.49:60823] [client 136.144.43.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-UCd5YAy_h5VqgWqhKSAAAAMc"]
[Sun May 10 04:07:48.083778 2026] [:error] [pid 32915:tid 32937] [client 136.144.43.56:53183] [client 136.144.43.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.56, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-UFDg8EIe76RX8AUZ33wAAARE"]
[Sun May 10 04:07:58.730562 2026] [:error] [pid 62803:tid 62879] [client 136.144.43.54:63687] [client 136.144.43.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.54, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-UHk5oy4jU7eVtNaXiaQAAAI8"]
[Sun May 10 04:08:20.141634 2026] [:error] [pid 62801:tid 62823] [client 136.144.43.54:23331] [client 136.144.43.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.54, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-UNBMFDul6kZmcchAiZQAAAA0"]
[Sun May 10 04:08:41.418936 2026] [:error] [pid 32915:tid 32938] [client 136.144.43.45:31747] [client 136.144.43.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.45, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-USTg8EIe76RX8AUZ38gAAARI"]
[Sun May 10 04:08:52.051472 2026] [:error] [pid 62803:tid 62882] [client 136.144.43.56:34827] [client 136.144.43.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.56, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-UVE5oy4jU7eVtNaXidwAAAJI"]
[Sun May 10 04:09:02.996596 2026] [:error] [pid 32915:tid 32943] [client 136.144.43.40:56615] [client 136.144.43.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-UXjg8EIe76RX8AUZ3_wAAARc"]
[Sun May 10 04:09:13.869662 2026] [:error] [pid 62801:tid 62817] [client 136.144.43.42:21911] [client 136.144.43.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-UaRMFDul6kZmcchAibgAAAAc"]
[Sun May 10 04:09:35.514067 2026] [:error] [pid 62803:tid 62876] [client 136.144.43.39:21617] [client 136.144.43.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.39, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Uf05oy4jU7eVtNaXimwAAAIw"]
[Sun May 10 04:09:46.258673 2026] [:error] [pid 62910:tid 62918] [client 136.144.43.46:24315] [client 136.144.43.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Uit5YAy_h5VqgWqhKgAAAAMY"]
[Sun May 10 04:10:07.684279 2026] [:error] [pid 62910:tid 62931] [client 136.144.43.59:45195] [client 136.144.43.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Un95YAy_h5VqgWqhKjAAAANM"]
[Sun May 10 04:10:29.087526 2026] [:error] [pid 62802:tid 62846] [client 136.144.43.54:44783] [client 136.144.43.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.54, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Utat9wnaRe0v-Mka33gAAAEk"]
[Sun May 10 04:10:39.746767 2026] [:error] [pid 62801:tid 62810] [client 136.144.43.60:39531] [client 136.144.43.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.60, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-UvxMFDul6kZmcchAijwAAAAA"]
[Sun May 10 04:11:01.137603 2026] [:error] [pid 32915:tid 32930] [client 136.144.43.45:61097] [client 136.144.43.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.45, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-U1Tg8EIe76RX8AUZ4fwAAAQo"]
[Sun May 10 04:11:43.776174 2026] [:error] [pid 62910:tid 62928] [client 136.144.43.42:26405] [client 136.144.43.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-U_95YAy_h5VqgWqhKwwAAANA"]
[Sun May 10 04:11:54.419006 2026] [:error] [pid 32915:tid 32937] [client 136.144.43.57:30831] [client 136.144.43.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.57, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-VCjg8EIe76RX8AUZ4tgAAARE"]
[Sun May 10 04:12:05.148723 2026] [:error] [pid 62801:tid 62823] [client 136.144.43.36:47365] [client 136.144.43.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-VFRMFDul6kZmcchAirQAAAA0"]
[Sun May 10 04:12:15.824194 2026] [:error] [pid 32915:tid 32935] [client 136.144.43.35:38021] [client 136.144.43.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.35, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-VHzg8EIe76RX8AUZ4wgAAAQ8"]
[Sun May 10 04:12:48.164229 2026] [:error] [pid 62803:tid 62876] [client 136.144.43.52:34855] [client 136.144.43.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-VQE5oy4jU7eVtNaXjIQAAAIw"]
[Sun May 10 04:12:58.816121 2026] [:error] [pid 32915:tid 32944] [client 136.144.43.62:38835] [client 136.144.43.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-VSjg8EIe76RX8AUZ40QAAARg"]
[Sun May 10 04:13:09.500143 2026] [:error] [pid 62801:tid 62812] [client 136.144.43.47:54241] [client 136.144.43.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-VVRMFDul6kZmcchAiugAAAAI"]
[Sun May 10 04:13:31.389433 2026] [:error] [pid 32915:tid 32935] [client 136.144.43.53:61183] [client 136.144.43.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Vazg8EIe76RX8AUZ47gAAAQ8"]
[Sun May 10 04:13:53.193637 2026] [:error] [pid 32915:tid 32926] [client 136.144.43.58:37487] [client 136.144.43.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-VgTg8EIe76RX8AUZ4_QAAAQY"]
[Sun May 10 04:14:03.952423 2026] [:error] [pid 32915:tid 32934] [client 136.144.43.53:59977] [client 136.144.43.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.53, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Vizg8EIe76RX8AUZ5BgAAAQ4"]
[Sun May 10 04:14:14.859029 2026] [:error] [pid 32915:tid 32938] [client 136.144.43.57:29391] [client 136.144.43.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.57, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Vljg8EIe76RX8AUZ5DwAAARI"]
[Sun May 10 04:14:36.706149 2026] [:error] [pid 32915:tid 32941] [client 136.144.43.58:61191] [client 136.144.43.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-VrDg8EIe76RX8AUZ5HgAAARU"]
[Sun May 10 04:14:58.376915 2026] [:error] [pid 62910:tid 62929] [client 136.144.43.48:51171] [client 136.144.43.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-Vwt5YAy_h5VqgWqhLEAAAANE"]
[Sun May 10 04:15:30.944248 2026] [:error] [pid 62910:tid 62918] [client 136.144.43.58:61607] [client 136.144.43.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-V4t5YAy_h5VqgWqhLGwAAAMY"]
[Sun May 10 04:15:41.851714 2026] [:error] [pid 32915:tid 32931] [client 136.144.43.46:48413] [client 136.144.43.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-V7Tg8EIe76RX8AUZ5VwAAAQs"]
[Sun May 10 04:16:46.378063 2026] [:error] [pid 62910:tid 62915] [client 136.144.43.61:23657] [client 136.144.43.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-WLt5YAy_h5VqgWqhLMQAAAMM"]
[Sun May 10 04:16:57.311092 2026] [:error] [pid 32915:tid 32923] [client 136.144.43.38:25937] [client 136.144.43.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-WOTg8EIe76RX8AUZ5wQAAAQM"]
[Sun May 10 04:17:08.097325 2026] [:error] [pid 62801:tid 62831] [client 136.144.43.41:46365] [client 136.144.43.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.144.43.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af-WRBMFDul6kZmcchAjFgAAABU"]
[Sun May 10 04:31:03.060140 2026] [:error] [pid 62910:tid 62927] [client 34.58.181.104:34046] [client 34.58.181.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "af-Zh95YAy_h5VqgWqhNDQAAAM8"]
[Sun May 10 04:54:46.930715 2026] [:error] [pid 62910:tid 62915] [client 43.155.195.141:59962] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "af-fFt5YAy_h5VqgWqhRfgAAAMM"]
[Sun May 10 05:23:32.188667 2026] [:error] [pid 62803:tid 62875] [client 135.181.213.219:4404] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "af-l1E5oy4jU7eVtNaXtmAAAAIs"]
[Sun May 10 05:23:34.825001 2026] [:error] [pid 32915:tid 32944] [client 135.181.213.219:4420] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "af-l1jg8EIe76RX8AUaNMQAAARg"]
[Sun May 10 05:23:37.293631 2026] [:error] [pid 62803:tid 62877] [client 135.181.213.219:4422] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "af-l2U5oy4jU7eVtNaXtmwAAAI0"]
[Sun May 10 05:23:39.900626 2026] [:error] [pid 62910:tid 62924] [client 135.181.213.219:4438] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "af-l295YAy_h5VqgWqhW5gAAAMw"]
[Sun May 10 05:23:42.365016 2026] [:error] [pid 32915:tid 32938] [client 135.181.213.219:46774] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "af-l3jg8EIe76RX8AUaNRAAAARI"]
[Sun May 10 05:23:44.835874 2026] [:error] [pid 32915:tid 32932] [client 135.181.213.219:46790] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "af-l4Dg8EIe76RX8AUaNSwAAAQw"]
[Sun May 10 05:23:47.153588 2026] [:error] [pid 62910:tid 62927] [client 135.181.213.219:46804] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "af-l495YAy_h5VqgWqhW9wAAAM8"]
[Sun May 10 05:23:49.588540 2026] [:error] [pid 62910:tid 62914] [client 135.181.213.219:46806] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "af-l5d5YAy_h5VqgWqhW-wAAAMI"]
[Sun May 10 05:23:51.881836 2026] [:error] [pid 32915:tid 32928] [client 135.181.213.219:43688] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "af-l5zg8EIe76RX8AUaNXQAAAQg"]
[Sun May 10 05:23:54.480600 2026] [:error] [pid 62803:tid 62874] [client 135.181.213.219:43694] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "af-l6k5oy4jU7eVtNaXtqQAAAIo"]
[Sun May 10 05:23:57.089894 2026] [:error] [pid 62803:tid 62878] [client 135.181.213.219:43710] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "af-l7U5oy4jU7eVtNaXtrgAAAI4"]
[Sun May 10 05:23:59.417801 2026] [:error] [pid 32915:tid 32932] [client 135.181.213.219:43712] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "af-l7zg8EIe76RX8AUaNbQAAAQw"]
[Sun May 10 05:24:01.906413 2026] [:error] [pid 62910:tid 62917] [client 135.181.213.219:4128] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "af-l8d5YAy_h5VqgWqhXFgAAAMU"]
[Sun May 10 05:24:04.363669 2026] [:error] [pid 32915:tid 32930] [client 135.181.213.219:4134] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "af-l9Dg8EIe76RX8AUaNfAAAAQo"]
[Sun May 10 05:24:06.841524 2026] [:error] [pid 62803:tid 62883] [client 135.181.213.219:4150] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "af-l9k5oy4jU7eVtNaXtugAAAJM"]
[Sun May 10 05:24:09.475747 2026] [:error] [pid 32915:tid 32939] [client 135.181.213.219:4160] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "af-l-Tg8EIe76RX8AUaNiwAAARM"]
[Sun May 10 05:24:11.929523 2026] [:error] [pid 62910:tid 62930] [client 135.181.213.219:10616] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "af-l-95YAy_h5VqgWqhXIgAAANI"]
[Sun May 10 05:24:14.380969 2026] [:error] [pid 32915:tid 32923] [client 135.181.213.219:10618] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "af-l_jg8EIe76RX8AUaNmwAAAQM"]
[Sun May 10 05:24:16.982140 2026] [:error] [pid 62803:tid 62888] [client 135.181.213.219:10648] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "af-mAE5oy4jU7eVtNaXtzAAAAJg"]
[Sun May 10 05:24:19.309807 2026] [:error] [pid 62803:tid 62868] [client 135.181.213.219:10668] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "af-mA05oy4jU7eVtNaXtzwAAAIQ"]
[Sun May 10 05:24:21.626789 2026] [:error] [pid 62910:tid 62925] [client 135.181.213.219:53692] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "af-mBd5YAy_h5VqgWqhXNwAAAM0"]
[Sun May 10 05:24:23.955590 2026] [:error] [pid 62803:tid 62871] [client 135.181.213.219:53704] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "af-mB05oy4jU7eVtNaXt1gAAAIc"]
[Sun May 10 05:24:26.532144 2026] [:error] [pid 32915:tid 32935] [client 135.181.213.219:53708] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "af-mCjg8EIe76RX8AUaNsQAAAQ8"]
[Sun May 10 05:25:08.402976 2026] [:error] [pid 32915:tid 32937] [client 135.181.213.219:62974] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "af-mNDg8EIe76RX8AUaOAwAAARE"]
[Sun May 10 05:25:10.886540 2026] [:error] [pid 62802:tid 62852] [client 135.181.213.219:40130] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "af-mNqt9wnaRe0v-Mka_5wAAAE8"]
[Sun May 10 05:25:13.374841 2026] [:error] [pid 32915:tid 32941] [client 135.181.213.219:40138] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "af-mOTg8EIe76RX8AUaOJgAAARU"]
[Sun May 10 05:25:15.968693 2026] [:error] [pid 32915:tid 32933] [client 135.181.213.219:40148] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "af-mOzg8EIe76RX8AUaOKwAAAQ0"]
[Sun May 10 05:25:18.424585 2026] [:error] [pid 32915:tid 32937] [client 135.181.213.219:40156] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "af-mPjg8EIe76RX8AUaONQAAARE"]
[Sun May 10 05:25:21.068161 2026] [:error] [pid 32915:tid 32941] [client 135.181.213.219:43178] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "af-mQTg8EIe76RX8AUaOPAAAARU"]
[Sun May 10 05:25:23.537483 2026] [:error] [pid 32915:tid 32928] [client 135.181.213.219:43192] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "af-mQzg8EIe76RX8AUaOQQAAAQg"]
[Sun May 10 05:25:26.015031 2026] [:error] [pid 62803:tid 62886] [client 135.181.213.219:43196] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "af-mRk5oy4jU7eVtNaXuNwAAAJY"]
[Sun May 10 05:25:28.349464 2026] [:error] [pid 62802:tid 62850] [client 135.181.213.219:43210] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "af-mSKt9wnaRe0v-MkbAEgAAAE0"]
[Sun May 10 05:25:30.967011 2026] [:error] [pid 62910:tid 62919] [client 135.181.213.219:32200] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "af-mSt5YAy_h5VqgWqhXdwAAAMc"]
[Sun May 10 05:25:33.594883 2026] [:error] [pid 62801:tid 62818] [client 135.181.213.219:32216] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "af-mTRMFDul6kZmcchApdAAAAAg"]
[Sun May 10 05:25:36.043361 2026] [:error] [pid 62803:tid 62872] [client 135.181.213.219:32218] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "af-mUE5oy4jU7eVtNaXuRAAAAIg"]
[Sun May 10 05:25:38.546570 2026] [:error] [pid 62910:tid 62918] [client 135.181.213.219:32220] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "af-mUt5YAy_h5VqgWqhXeQAAAMY"]
[Sun May 10 05:25:41.024918 2026] [:error] [pid 62803:tid 62879] [client 135.181.213.219:30942] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "af-mVU5oy4jU7eVtNaXuRgAAAI8"]
[Sun May 10 05:25:43.658423 2026] [:error] [pid 32915:tid 32944] [client 135.181.213.219:30948] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "af-mVzg8EIe76RX8AUaOZwAAARg"]
[Sun May 10 05:25:46.170743 2026] [:error] [pid 62803:tid 62885] [client 135.181.213.219:30954] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "af-mWk5oy4jU7eVtNaXuTAAAAJU"]
[Sun May 10 05:25:48.790306 2026] [:error] [pid 62802:tid 62845] [client 135.181.213.219:30958] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "af-mXKt9wnaRe0v-MkbAIAAAAEg"]
[Sun May 10 05:25:51.406974 2026] [:error] [pid 62803:tid 62883] [client 135.181.213.219:37022] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "af-mX05oy4jU7eVtNaXuVQAAAJM"]
[Sun May 10 05:25:54.007134 2026] [:error] [pid 32915:tid 32935] [client 135.181.213.219:37038] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "af-mYjg8EIe76RX8AUaOkgAAAQ8"]
[Sun May 10 05:25:56.500772 2026] [:error] [pid 32915:tid 32935] [client 135.181.213.219:37048] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "af-mZDg8EIe76RX8AUaOrAAAAQ8"]
[Sun May 10 05:25:59.123129 2026] [:error] [pid 32915:tid 32929] [client 135.181.213.219:37050] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "af-mZzg8EIe76RX8AUaOtQAAAQk"]
[Sun May 10 05:26:01.583284 2026] [:error] [pid 32915:tid 32936] [client 135.181.213.219:17814] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "af-maTg8EIe76RX8AUaOuwAAARA"]
[Sun May 10 05:26:03.879726 2026] [:error] [pid 62910:tid 62929] [client 135.181.213.219:17820] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "af-ma95YAy_h5VqgWqhXkgAAANE"]
[Sun May 10 05:26:45.070011 2026] [:error] [pid 62910:tid 62927] [client 135.181.213.219:36394] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "af-mld5YAy_h5VqgWqhXxgAAAM8"]
[Sun May 10 05:26:47.670751 2026] [:error] [pid 62802:tid 62845] [client 135.181.213.219:36410] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "af-ml6t9wnaRe0v-MkbAVgAAAEg"]
[Sun May 10 05:26:50.307089 2026] [:error] [pid 32915:tid 32930] [client 135.181.213.219:36424] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "af-mmjg8EIe76RX8AUaPJgAAAQo"]
[Sun May 10 05:26:52.830238 2026] [:error] [pid 62802:tid 62853] [client 135.181.213.219:59280] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "af-mnKt9wnaRe0v-MkbAVwAAAFA"]
[Sun May 10 05:26:55.423499 2026] [:error] [pid 62801:tid 62830] [client 135.181.213.219:59282] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "af-mnxMFDul6kZmcchApsgAAABQ"]
[Sun May 10 05:26:57.917103 2026] [:error] [pid 32915:tid 32938] [client 135.181.213.219:59296] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "af-moTg8EIe76RX8AUaPLAAAARI"]
[Sun May 10 05:27:00.298030 2026] [:error] [pid 62802:tid 62838] [client 135.181.213.219:59306] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "af-mpKt9wnaRe0v-MkbAXQAAAEE"]
[Sun May 10 05:27:02.841543 2026] [:error] [pid 32915:tid 32932] [client 135.181.213.219:37292] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "af-mpjg8EIe76RX8AUaPNQAAAQw"]
[Sun May 10 05:27:05.337596 2026] [:error] [pid 32915:tid 32930] [client 135.181.213.219:37304] [client 135.181.213.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "af-mqTg8EIe76RX8AUaPOQAAAQo"]
[Sun May 10 09:33:12.208235 2026] [:error] [pid 52634:tid 52652] [client 182.8.66.157:30488] [client 182.8.66.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.66.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af_gWNwp8XoWCwFb54CjzAAAAM4"]
[Sun May 10 09:34:47.118675 2026] [:error] [pid 46331:tid 46362] [client 182.8.66.157:30478] [client 182.8.66.157] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af_gtwP02hpYETwsZpgatQAAAIE"]
[Sun May 10 09:35:23.391158 2026] [:error] [pid 46329:tid 46356] [client 182.8.66.157:30986] [client 182.8.66.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.66.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "af_g2-Fo7Z2I88d0gPJXNwAAABc"]
[Sun May 10 12:03:09.645443 2026] [:error] [pid 46417:tid 46436] [client 223.181.114.83:19964] [client 223.181.114.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.114.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agADfWInm7mhwgbe48aSgQAAARE"]
[Sun May 10 12:03:19.870901 2026] [:error] [pid 52634:tid 52646] [client 223.181.114.83:26878] [client 223.181.114.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.114.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agADh9wp8XoWCwFb54DNkQAAAMg"]
[Sun May 10 12:03:30.414498 2026] [:error] [pid 46417:tid 46433] [client 223.181.114.83:25086] [client 223.181.114.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.114.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agADkmInm7mhwgbe48aSigAAAQ4"]
[Sun May 10 12:03:40.949644 2026] [:error] [pid 52634:tid 52657] [client 223.181.114.83:21834] [client 223.181.114.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.114.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agADnNwp8XoWCwFb54DNpQAAANM"]
[Sun May 10 12:03:51.582432 2026] [:error] [pid 46329:tid 46334] [client 223.181.114.83:27856] [client 223.181.114.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.114.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agADp-Fo7Z2I88d0gPJl0gAAAAE"]
[Sun May 10 14:55:42.692860 2026] [:error] [pid 52634:tid 52660] [client 74.244.129.195:14925] [client 74.244.129.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.129.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAr7twp8XoWCwFb54D6JgAAANY"]
[Sun May 10 14:55:51.190975 2026] [:error] [pid 46417:tid 46429] [client 74.244.129.195:56886] [client 74.244.129.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.129.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAr92Inm7mhwgbe48axwQAAAQo"]
[Sun May 10 14:56:01.842622 2026] [:error] [pid 46331:tid 46365] [client 74.244.129.195:57048] [client 74.244.129.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.129.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAsAQP02hpYETwsZpg-kAAAAIM"]
[Sun May 10 14:56:14.072806 2026] [:error] [pid 52634:tid 52651] [client 74.244.129.195:11359] [client 74.244.129.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.129.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAsDtwp8XoWCwFb54D6PQAAAM0"]
[Sun May 10 14:56:43.927696 2026] [:error] [pid 52634:tid 52645] [client 74.244.129.195:23291] [client 74.244.129.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.129.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAsK9wp8XoWCwFb54D6UwAAAMc"]
[Sun May 10 14:56:54.226179 2026] [:error] [pid 46417:tid 46429] [client 74.244.129.195:46022] [client 74.244.129.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.129.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAsNmInm7mhwgbe48ax7wAAAQo"]
[Sun May 10 15:03:08.313112 2026] [:error] [pid 46330:tid 46409] [client 114.130.159.7:38026] [client 114.130.159.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.159.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAtrIztrhd3evDQvs9zSgAAAFU"]
[Sun May 10 15:04:00.545775 2026] [:error] [pid 46417:tid 46437] [client 114.130.159.7:38241] [client 114.130.159.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.159.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAt4GInm7mhwgbe48azVwAAARI"]
[Sun May 10 15:04:32.675346 2026] [:error] [pid 46329:tid 46337] [client 114.130.159.7:38315] [client 114.130.159.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.159.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAuAOFo7Z2I88d0gPJ3JAAAAAQ"]
[Sun May 10 15:04:52.536001 2026] [:error] [pid 46329:tid 46354] [client 114.130.159.7:38005] [client 114.130.159.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.159.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAuFOFo7Z2I88d0gPJ3JwAAABU"]
[Sun May 10 15:05:44.595966 2026] [:error] [pid 46417:tid 46429] [client 114.130.159.7:38299] [client 114.130.159.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.159.7, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAuSGInm7mhwgbe48az6gAAAQo"]
[Sun May 10 15:08:28.817800 2026] [:error] [pid 46331:tid 46383] [client 213.196.111.77:53976] [client 213.196.111.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.196.111.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAu7AP02hpYETwsZphAQAAAAIs"]
[Sun May 10 15:08:38.788458 2026] [:error] [pid 46329:tid 46344] [client 213.196.111.77:20983] [client 213.196.111.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.196.111.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAu9uFo7Z2I88d0gPJ3qgAAAAs"]
[Sun May 10 15:08:49.283283 2026] [:error] [pid 52634:tid 52650] [client 213.196.111.77:39406] [client 213.196.111.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.196.111.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAvAdwp8XoWCwFb54D_LAAAAMw"]
[Sun May 10 15:08:59.824151 2026] [:error] [pid 52634:tid 52638] [client 213.196.111.77:63239] [client 213.196.111.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.196.111.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAvC9wp8XoWCwFb54D_OwAAAMA"]
[Sun May 10 15:09:10.333100 2026] [:error] [pid 46330:tid 46404] [client 213.196.111.77:8189] [client 213.196.111.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.196.111.77, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agAvFoztrhd3evDQvs90IgAAAFM"]
[Sun May 10 16:03:43.112731 2026] [:error] [pid 52634:tid 52656] [client 106.54.62.156:54030] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agA739wp8XoWCwFb54AL9QAAANI"]
[Sun May 10 16:11:57.205115 2026] [:error] [pid 52634:tid 52641] [client 182.65.191.11:55070] [client 182.65.191.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.65.191.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agA9zdwp8XoWCwFb54AOUQAAAMM"]
[Sun May 10 16:12:09.177142 2026] [:error] [pid 52634:tid 52654] [client 182.65.191.11:55544] [client 182.65.191.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.65.191.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agA92dwp8XoWCwFb54AOWQAAANA"]
[Sun May 10 16:12:18.621745 2026] [:error] [pid 14779:tid 14790] [client 182.65.191.11:55929] [client 182.65.191.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.65.191.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agA94lXzPaW9Hap8yc8PpwAAAUk"]
[Sun May 10 16:12:28.729264 2026] [:error] [pid 14779:tid 14800] [client 182.65.191.11:56276] [client 182.65.191.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.65.191.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agA97FXzPaW9Hap8yc8PrQAAAVM"]
[Sun May 10 16:12:39.273364 2026] [:error] [pid 52634:tid 52651] [client 182.65.191.11:56626] [client 182.65.191.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.65.191.11, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agA999wp8XoWCwFb54AOfQAAAM0"]
[Sun May 10 16:21:18.086189 2026] [:error] [pid 46329:tid 46346] [client 136.185.130.198:61640] [client 136.185.130.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.185.130.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agA__uFo7Z2I88d0gPKDNwAAAA0"]
[Sun May 10 16:21:33.928100 2026] [:error] [pid 46417:tid 46437] [client 136.185.130.198:62581] [client 136.185.130.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.185.130.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBADWInm7mhwgbe48a7LAAAARI"]
[Sun May 10 16:21:39.048064 2026] [:error] [pid 46329:tid 46339] [client 136.185.130.198:62956] [client 136.185.130.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.185.130.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBAE-Fo7Z2I88d0gPKDUAAAAAY"]
[Sun May 10 16:21:50.586702 2026] [:error] [pid 46329:tid 46336] [client 136.185.130.198:63370] [client 136.185.130.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.185.130.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBAHuFo7Z2I88d0gPKDYwAAAAM"]
[Sun May 10 16:22:00.031761 2026] [:error] [pid 46331:tid 46367] [client 136.185.130.198:63666] [client 136.185.130.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.185.130.198, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBAKAP02hpYETwsZphGFQAAAIU"]
[Sun May 10 16:35:32.419746 2026] [:error] [pid 46329:tid 46346] [client 117.97.136.154:54945] [client 117.97.136.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.97.136.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBDVOFo7Z2I88d0gPKGSQAAAA0"]
[Sun May 10 16:35:44.047787 2026] [:error] [pid 46330:tid 46384] [client 117.97.136.154:55684] [client 117.97.136.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.97.136.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBDYIztrhd3evDQvs99VAAAAEo"]
[Sun May 10 16:35:53.947304 2026] [:error] [pid 14779:tid 14782] [client 117.97.136.154:56187] [client 117.97.136.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.97.136.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBDaVXzPaW9Hap8yc8TGAAAAUE"]
[Sun May 10 16:36:04.258385 2026] [:error] [pid 52634:tid 52660] [client 117.97.136.154:56668] [client 117.97.136.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.97.136.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBDdNwp8XoWCwFb54AS4wAAANY"]
[Sun May 10 16:36:14.710244 2026] [:error] [pid 46417:tid 46434] [client 117.97.136.154:57000] [client 117.97.136.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.97.136.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBDfmInm7mhwgbe48a74AAAAQ8"]
[Sun May 10 17:50:15.532851 2026] [:error] [pid 9305:tid 9348] [client 39.63.185.217:56569] [client 39.63.185.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.63.185.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBU16wFxtvmr6VQIhelUwAAAUs"]
[Sun May 10 17:50:26.016119 2026] [:error] [pid 9305:tid 9338] [client 39.63.185.217:16187] [client 39.63.185.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.63.185.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBU4qwFxtvmr6VQIhelWAAAAUE"]
[Sun May 10 17:50:36.795310 2026] [:error] [pid 9394:tid 9418] [client 39.63.185.217:57512] [client 39.63.185.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.63.185.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBU7EJUdgQGD7EiiFYdHAAAAdY"]
[Sun May 10 17:50:47.543705 2026] [:error] [pid 9394:tid 9402] [client 39.63.185.217:57893] [client 39.63.185.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.63.185.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBU90JUdgQGD7EiiFYdnAAAAcY"]
[Sun May 10 17:50:58.561210 2026] [:error] [pid 9394:tid 9399] [client 39.63.185.217:58281] [client 39.63.185.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.63.185.217, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agBVAkJUdgQGD7EiiFYdpAAAAcM"]
[Sun May 10 18:15:57.861496 2026] [:error] [pid 16136:tid 16141] [client 43.157.150.69:34434] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agBa3UOBGdmCMnPX0MfdUwAAAIM"]
[Sun May 10 20:44:21.517525 2026] [:error] [pid 16037:tid 16042] [client 3.140.188.14:52012] [client 3.140.188.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.140.188.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agB9pXzjLQfyYTkAdSR-sgAAAAE"]
[Sun May 10 21:02:27.013000 2026] [:error] [pid 16136:tid 16161] [client 103.149.16.79:63313] [client 103.149.16.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.149.16.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCB40OBGdmCMnPX0Mf_1AAAAJc"]
[Sun May 10 21:03:26.634072 2026] [:error] [pid 16136:tid 16151] [client 103.149.16.79:65166] [client 103.149.16.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.149.16.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCCHkOBGdmCMnPX0McAAAAAAI0"]
[Sun May 10 21:03:57.987084 2026] [:error] [pid 16136:tid 16147] [client 103.149.16.79:49650] [client 103.149.16.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.149.16.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCCPUOBGdmCMnPX0McAFgAAAIk"]
[Sun May 10 21:04:29.441327 2026] [:error] [pid 16136:tid 16149] [client 103.149.16.79:50462] [client 103.149.16.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.149.16.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCCXUOBGdmCMnPX0McAKAAAAIs"]
[Sun May 10 21:04:43.257273 2026] [:error] [pid 37030:tid 37045] [client 103.149.16.79:50726] [client 103.149.16.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.149.16.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCCa5rBzfXWwKkDkdamVwAAAM0"]
[Sun May 10 21:12:19.760394 2026] [:error] [pid 16096:tid 16119] [client 104.207.58.112:63317] [client 104.207.58.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "agCEM68wyxcrT50p9kvbpAAAAFI"]
[Sun May 10 21:32:09.563351 2026] [:error] [pid 16038:tid 16068] [client 178.153.87.106:60226] [client 178.153.87.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.153.87.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCI2U4hf5Tcsfa2scJdQQAAAYA"]
[Sun May 10 21:32:19.459896 2026] [:error] [pid 16136:tid 16141] [client 178.153.87.106:20390] [client 178.153.87.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.153.87.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCI40OBGdmCMnPX0McETAAAAIM"]
[Sun May 10 21:32:25.377288 2026] [:error] [pid 16136:tid 16156] [client 209.141.58.150:49531] [client 209.141.58.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.58.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agCI6UOBGdmCMnPX0McEVgAAAJI"]
[Sun May 10 21:32:27.281249 2026] [proxy_fcgi:error] [pid 16136:tid 16156] [client 209.141.58.150:49531] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 10 21:32:30.645786 2026] [:error] [pid 16038:tid 16075] [client 178.153.87.106:10357] [client 178.153.87.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.153.87.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCI7k4hf5Tcsfa2scJdTQAAAYc"]
[Sun May 10 21:32:42.132676 2026] [:error] [pid 16037:tid 16044] [client 178.153.87.106:27626] [client 178.153.87.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.153.87.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCI-nzjLQfyYTkAdSSCgQAAAAM"]
[Sun May 10 21:32:53.172693 2026] [:error] [pid 16037:tid 16047] [client 178.153.87.106:52958] [client 178.153.87.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.153.87.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCJBXzjLQfyYTkAdSSCiQAAAAY"]
[Sun May 10 21:34:06.203979 2026] [:error] [pid 16037:tid 16057] [client 209.141.58.150:60139] [client 209.141.58.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.58.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agCJTnzjLQfyYTkAdSSCqQAAABA"]
[Sun May 10 21:34:07.212140 2026] [proxy_fcgi:error] [pid 16037:tid 16057] [client 209.141.58.150:60139] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 10 22:17:21.129756 2026] [:error] [pid 37030:tid 37035] [client 43.132.214.228:34708] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agCTcZrBzfXWwKkDkda29wAAAMM"]
[Sun May 10 22:48:56.656949 2026] [:error] [pid 16096:tid 16102] [client 51.75.129.164:43538] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "agCa2K8wyxcrT50p9kvniAAAAEE"]
[Sun May 10 22:48:59.147296 2026] [:error] [pid 37030:tid 37044] [client 51.75.129.164:50726] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "agCa25rBzfXWwKkDkda_kQAAAMw"]
[Sun May 10 22:49:01.561028 2026] [:error] [pid 16038:tid 16086] [client 51.75.129.164:50732] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "agCa3U4hf5Tcsfa2scJktQAAAZI"]
[Sun May 10 22:49:04.004677 2026] [:error] [pid 16038:tid 16091] [client 51.75.129.164:50742] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "agCa4E4hf5Tcsfa2scJktwAAAZc"]
[Sun May 10 22:49:06.512114 2026] [:error] [pid 16096:tid 16112] [client 51.75.129.164:50754] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "agCa4q8wyxcrT50p9kvnlAAAAEs"]
[Sun May 10 22:49:08.954156 2026] [:error] [pid 37030:tid 37039] [client 51.75.129.164:41378] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "agCa5JrBzfXWwKkDkda_mAAAAMc"]
[Sun May 10 22:49:11.343109 2026] [:error] [pid 37030:tid 37050] [client 51.75.129.164:41386] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "agCa55rBzfXWwKkDkda_nQAAANI"]
[Sun May 10 22:49:13.803911 2026] [:error] [pid 16136:tid 16146] [client 51.75.129.164:41390] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "agCa6UOBGdmCMnPX0McPhAAAAIg"]
[Sun May 10 22:49:16.098959 2026] [:error] [pid 16038:tid 16080] [client 51.75.129.164:41400] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "agCa7E4hf5Tcsfa2scJkvwAAAYw"]
[Sun May 10 22:49:18.531584 2026] [:error] [pid 16037:tid 16058] [client 51.75.129.164:41412] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agCa7nzjLQfyYTkAdSSJOwAAABE"]
[Sun May 10 22:49:20.923341 2026] [:error] [pid 16037:tid 16060] [client 51.75.129.164:33820] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agCa8HzjLQfyYTkAdSSJPAAAABM"]
[Sun May 10 22:49:23.326692 2026] [:error] [pid 16136:tid 16146] [client 51.75.129.164:33832] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "agCa80OBGdmCMnPX0McPkQAAAIg"]
[Sun May 10 22:49:25.747499 2026] [:error] [pid 16037:tid 16042] [client 51.75.129.164:33848] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "agCa9XzjLQfyYTkAdSSJQAAAAAE"]
[Sun May 10 22:49:28.155386 2026] [:error] [pid 16136:tid 16148] [client 51.75.129.164:33856] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "agCa-EOBGdmCMnPX0McPnAAAAIo"]
[Sun May 10 22:49:30.446817 2026] [:error] [pid 16037:tid 16056] [client 51.75.129.164:34496] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "agCa-nzjLQfyYTkAdSSJQwAAAA8"]
[Sun May 10 22:49:32.827641 2026] [:error] [pid 16096:tid 16110] [client 51.75.129.164:34510] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "agCa_K8wyxcrT50p9kvnqQAAAEk"]
[Sun May 10 22:49:35.393616 2026] [:error] [pid 16038:tid 16079] [client 51.75.129.164:34514] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "agCa_04hf5Tcsfa2scJkzwAAAYs"]
[Sun May 10 22:49:37.769410 2026] [:error] [pid 37030:tid 37056] [client 51.75.129.164:34530] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "agCbAZrBzfXWwKkDkda_sgAAANg"]
[Sun May 10 22:49:40.311725 2026] [:error] [pid 16136:tid 16158] [client 51.75.129.164:35034] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "agCbBEOBGdmCMnPX0McPwQAAAJQ"]
[Sun May 10 22:49:42.704003 2026] [:error] [pid 16038:tid 16083] [client 51.75.129.164:35048] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "agCbBk4hf5Tcsfa2scJk2QAAAY8"]
[Sun May 10 22:49:45.226624 2026] [:error] [pid 16038:tid 16078] [client 51.75.129.164:35060] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "agCbCU4hf5Tcsfa2scJk3QAAAYo"]
[Sun May 10 22:49:47.779982 2026] [:error] [pid 37030:tid 37043] [client 51.75.129.164:35068] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "agCbC5rBzfXWwKkDkda_xwAAAMs"]
[Sun May 10 22:49:50.152635 2026] [:error] [pid 37030:tid 37056] [client 51.75.129.164:44582] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "agCbDprBzfXWwKkDkda_0gAAANg"]
[Sun May 10 22:49:52.706292 2026] [:error] [pid 16096:tid 16112] [client 51.75.129.164:44584] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "agCbEK8wyxcrT50p9kvnygAAAEs"]
[Sun May 10 22:50:22.881019 2026] [:error] [pid 16096:tid 16120] [client 51.75.129.164:44600] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agCbLq8wyxcrT50p9kvn6wAAAFM"]
[Sun May 10 22:50:25.232797 2026] [:error] [pid 37030:tid 37032] [client 51.75.129.164:43586] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "agCbMZrBzfXWwKkDkda_-wAAAMA"]
[Sun May 10 22:50:27.722160 2026] [:error] [pid 37030:tid 37040] [client 51.75.129.164:43592] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "agCbM5rBzfXWwKkDkda__wAAAMg"]
[Sun May 10 22:50:30.074758 2026] [:error] [pid 16096:tid 16106] [client 51.75.129.164:36404] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "agCbNq8wyxcrT50p9kvn7AAAAEU"]
[Sun May 10 22:50:32.578957 2026] [:error] [pid 16038:tid 16090] [client 51.75.129.164:36418] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "agCbOE4hf5Tcsfa2scJk9gAAAZY"]
[Sun May 10 22:50:35.072738 2026] [:error] [pid 16096:tid 16125] [client 51.75.129.164:36428] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "agCbO68wyxcrT50p9kvn8wAAAFg"]
[Sun May 10 22:50:37.414267 2026] [:error] [pid 37030:tid 37032] [client 51.75.129.164:36440] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "agCbPZrBzfXWwKkDkdbABgAAAMA"]
[Sun May 10 22:50:39.900270 2026] [:error] [pid 16136:tid 16147] [client 51.75.129.164:60412] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "agCbP0OBGdmCMnPX0McP6wAAAIk"]
[Sun May 10 22:50:42.382768 2026] [:error] [pid 16038:tid 16070] [client 51.75.129.164:60420] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "agCbQk4hf5Tcsfa2scJk-QAAAYI"]
[Sun May 10 22:50:44.722504 2026] [:error] [pid 16038:tid 16068] [client 51.75.129.164:60428] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "agCbRE4hf5Tcsfa2scJk-wAAAYA"]
[Sun May 10 22:50:47.181521 2026] [:error] [pid 16037:tid 16060] [client 51.75.129.164:60436] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "agCbR3zjLQfyYTkAdSSJWQAAABM"]
[Sun May 10 22:50:49.647630 2026] [:error] [pid 16038:tid 16079] [client 51.75.129.164:59672] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "agCbSU4hf5Tcsfa2scJk_gAAAYs"]
[Sun May 10 22:50:52.127060 2026] [:error] [pid 16037:tid 16046] [client 51.75.129.164:59678] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "agCbTHzjLQfyYTkAdSSJWgAAAAU"]
[Sun May 10 22:50:54.431098 2026] [:error] [pid 16096:tid 16122] [client 51.75.129.164:59684] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "agCbTq8wyxcrT50p9kvn_QAAAFU"]
[Sun May 10 22:50:56.934179 2026] [:error] [pid 16096:tid 16119] [client 51.75.129.164:59696] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "agCbUK8wyxcrT50p9kvn_wAAAFI"]
[Sun May 10 22:50:59.260444 2026] [:error] [pid 16096:tid 16113] [client 51.75.129.164:54822] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "agCbU68wyxcrT50p9kvoAAAAAEw"]
[Sun May 10 22:51:01.604457 2026] [:error] [pid 37030:tid 37044] [client 51.75.129.164:54838] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agCbVZrBzfXWwKkDkdbAGwAAAMw"]
[Sun May 10 22:51:04.088876 2026] [:error] [pid 16096:tid 16117] [client 51.75.129.164:54852] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agCbWK8wyxcrT50p9kvoAwAAAFA"]
[Sun May 10 22:51:06.568598 2026] [:error] [pid 16136:tid 16155] [client 51.75.129.164:54868] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agCbWkOBGdmCMnPX0McP8AAAAJE"]
[Sun May 10 22:51:08.920060 2026] [:error] [pid 16038:tid 16083] [client 51.75.129.164:56270] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agCbXE4hf5Tcsfa2scJlBAAAAY8"]
[Sun May 10 22:51:11.399143 2026] [:error] [pid 16136:tid 16143] [client 51.75.129.164:56278] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agCbX0OBGdmCMnPX0McP9AAAAIU"]
[Sun May 10 22:51:13.742680 2026] [:error] [pid 16038:tid 16084] [client 51.75.129.164:56284] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agCbYU4hf5Tcsfa2scJlBQAAAZA"]
[Sun May 10 22:51:16.246523 2026] [:error] [pid 37030:tid 37046] [client 51.75.129.164:56292] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agCbZJrBzfXWwKkDkdbAIgAAAM4"]
[Sun May 10 22:51:18.722983 2026] [:error] [pid 16136:tid 16141] [client 51.75.129.164:58548] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "agCbZkOBGdmCMnPX0McQAQAAAIM"]
[Sun May 10 22:51:47.879623 2026] [:error] [pid 16096:tid 16124] [client 51.75.129.164:58562] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "agCbg68wyxcrT50p9kvoLgAAAFc"]
[Sun May 10 22:51:50.323426 2026] [:error] [pid 16037:tid 16058] [client 51.75.129.164:41386] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "agCbhnzjLQfyYTkAdSSJbgAAABE"]
[Sun May 10 22:51:52.636758 2026] [:error] [pid 16136:tid 16161] [client 51.75.129.164:41392] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "agCbiEOBGdmCMnPX0McQDQAAAJc"]
[Sun May 10 22:51:55.107056 2026] [:error] [pid 16096:tid 16104] [client 51.75.129.164:41402] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "agCbi68wyxcrT50p9kvoMgAAAEM"]
[Sun May 10 22:51:57.602562 2026] [:error] [pid 16096:tid 16106] [client 51.75.129.164:41414] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agCbja8wyxcrT50p9kvoNgAAAEU"]
[Sun May 10 22:52:00.060094 2026] [:error] [pid 16038:tid 16071] [client 51.75.129.164:47782] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "agCbkE4hf5Tcsfa2scJlEAAAAYM"]
[Sun May 10 22:52:02.533887 2026] [:error] [pid 37030:tid 37044] [client 51.75.129.164:47794] [client 51.75.129.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "agCbkprBzfXWwKkDkdbAQwAAAMw"]
[Sun May 10 22:59:21.169055 2026] [autoindex:error] [pid 37030:tid 37032] [client 20.5.8.136:63921] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun May 10 23:31:51.769865 2026] [:error] [pid 16136:tid 16140] [client 122.183.57.254:17179] [client 122.183.57.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.57.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCk50OBGdmCMnPX0McVfgAAAII"]
[Sun May 10 23:32:03.862007 2026] [:error] [pid 16038:tid 16092] [client 122.183.57.254:12319] [client 122.183.57.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.57.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCk804hf5Tcsfa2scJoyAAAAZg"]
[Sun May 10 23:34:45.977711 2026] [:error] [pid 16136:tid 16154] [client 122.183.57.254:10166] [client 122.183.57.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.57.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCllUOBGdmCMnPX0McVtwAAAJA"]
[Sun May 10 23:35:19.035370 2026] [:error] [pid 16038:tid 16090] [client 122.183.57.254:28905] [client 122.183.57.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.57.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agClt04hf5Tcsfa2scJpAAAAAZY"]
[Sun May 10 23:35:44.475338 2026] [:error] [pid 16096:tid 16114] [client 122.183.57.254:4746] [client 122.183.57.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.57.254, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agCl0K8wyxcrT50p9kvtXAAAAE0"]
[Mon May 11 00:49:49.474433 2026] [:error] [pid 9842:tid 9859] [client 144.91.74.62:54084] [client 144.91.74.62] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agC3LUKCvgYKKAjiZbJnJQAAAQ4"]
[Mon May 11 01:13:08.965275 2026] [:error] [pid 9842:tid 9869] [client 36.77.252.203:63496] [client 36.77.252.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.252.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agC8pEKCvgYKKAjiZbJsmgAAARg"]
[Mon May 11 01:13:19.440887 2026] [:error] [pid 9842:tid 9860] [client 36.77.252.203:63917] [client 36.77.252.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.252.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agC8r0KCvgYKKAjiZbJsswAAAQ8"]
[Mon May 11 01:13:30.049721 2026] [:error] [pid 16136:tid 16158] [client 36.77.252.203:64306] [client 36.77.252.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.252.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agC8ukOBGdmCMnPX0McfUAAAAJQ"]
[Mon May 11 01:13:40.673600 2026] [:error] [pid 37030:tid 37056] [client 36.77.252.203:64734] [client 36.77.252.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.252.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agC8xJrBzfXWwKkDkdbUegAAANg"]
[Mon May 11 01:13:51.255025 2026] [:error] [pid 16136:tid 16162] [client 36.77.252.203:39725] [client 36.77.252.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.252.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agC8z0OBGdmCMnPX0McfaQAAAJg"]
[Mon May 11 01:14:01.889608 2026] [:error] [pid 16096:tid 16124] [client 36.77.252.203:39851] [client 36.77.252.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.252.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agC82a8wyxcrT50p9kv0XgAAAFc"]
[Mon May 11 02:16:07.103435 2026] [:error] [pid 16096:tid 16102] [client 170.106.181.163:36682] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agDLZ68wyxcrT50p9kv5eQAAAEE"]
[Mon May 11 04:31:12.739518 2026] [:error] [pid 65261:tid 65333] [client 34.154.163.2:50542] [client 34.154.163.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agDrEJu_9uQJeFrcOssntQAAAIo"]
[Mon May 11 04:48:19.300977 2026] [:error] [pid 65366:tid 65384] [client 178.152.65.222:17017] [client 178.152.65.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.152.65.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agDvE6hVGdYzapDtv-He2gAAAM8"]
[Mon May 11 04:48:28.735537 2026] [:error] [pid 65261:tid 65340] [client 178.152.65.222:16384] [client 178.152.65.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.152.65.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agDvHJu_9uQJeFrcOssrJgAAAJE"]
[Mon May 11 04:48:39.266461 2026] [:error] [pid 65261:tid 65328] [client 178.152.65.222:16432] [client 178.152.65.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.152.65.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agDvJ5u_9uQJeFrcOssrOwAAAIU"]
[Mon May 11 04:48:49.776067 2026] [:error] [pid 65260:tid 65298] [client 178.152.65.222:17197] [client 178.152.65.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.152.65.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agDvMTqbzwIHjP6Y_3FqzQAAAEI"]
[Mon May 11 04:49:00.331042 2026] [:error] [pid 65261:tid 65344] [client 178.152.65.222:16784] [client 178.152.65.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.152.65.222, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agDvPJu_9uQJeFrcOssrYAAAAJU"]
[Mon May 11 05:24:22.075471 2026] [:error] [pid 65366:tid 65391] [client 49.233.45.47:55632] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agD3hqhVGdYzapDtv-HmywAAANY"]
[Mon May 11 07:06:17.103500 2026] [:error] [pid 65366:tid 65379] [client 49.51.180.2:43628] [client 49.51.180.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agEPaahVGdYzapDtv-H50gAAAMo"]
[Mon May 11 08:52:15.201691 2026] [:error] [pid 65366:tid 65369] [client 34.175.114.38:44542] [client 34.175.114.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agEoP6hVGdYzapDtv-EHqgAAAME"]
[Mon May 11 09:07:49.252080 2026] [:error] [pid 65261:tid 65323] [client 34.165.172.99:38148] [client 34.165.172.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agEr5Zu_9uQJeFrcOstMyQAAAIA"]
[Mon May 11 09:27:16.944855 2026] [:error] [pid 65366:tid 65385] [client 125.163.152.37:60034] [client 125.163.152.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.152.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agEwdKhVGdYzapDtv-EMsAAAANA"]
[Mon May 11 09:27:27.027474 2026] [:error] [pid 65261:tid 65328] [client 125.163.152.37:60417] [client 125.163.152.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.152.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agEwf5u_9uQJeFrcOstPRgAAAIU"]
[Mon May 11 09:27:37.720536 2026] [:error] [pid 65366:tid 65373] [client 125.163.152.37:60799] [client 125.163.152.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.152.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agEwiahVGdYzapDtv-EMwwAAAMU"]
[Mon May 11 09:27:48.443887 2026] [:error] [pid 65366:tid 65375] [client 125.163.152.37:61187] [client 125.163.152.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.152.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agEwlKhVGdYzapDtv-EMxwAAAMc"]
[Mon May 11 09:27:59.195598 2026] [:error] [pid 65259:tid 65281] [client 125.163.152.37:61578] [client 125.163.152.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.152.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agEwnwPsXLnMa32ma5BjQQAAAA0"]
[Mon May 11 09:28:09.994034 2026] [:error] [pid 9335:tid 9357] [client 125.163.152.37:61979] [client 125.163.152.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.152.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agEwqXmXqumINT8bKRFDmAAAARQ"]
[Mon May 11 10:23:00.191219 2026] [:error] [pid 65260:tid 65304] [client 179.160.248.207:62665] [client 179.160.248.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.160.248.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agE9hDqbzwIHjP6Y_3GMmgAAAEg"]
[Mon May 11 10:27:21.297727 2026] [:error] [pid 35052:tid 35070] [client 179.160.248.207:52206] [client 179.160.248.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agE-ieHjpNNnFJrMXu25TgAAAU8"]
[Mon May 11 10:27:59.422484 2026] [:error] [pid 35052:tid 35079] [client 179.160.248.207:60758] [client 179.160.248.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.160.248.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agE-r-HjpNNnFJrMXu25cAAAAVg"]
[Mon May 11 11:13:18.904735 2026] [:error] [pid 35052:tid 35068] [client 43.157.142.101:33466] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agFJTuHjpNNnFJrMXu3F2AAAAU0"]
[Mon May 11 13:24:36.603020 2026] [:error] [pid 35052:tid 35074] [client 112.134.241.183:30916] [client 112.134.241.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.134.241.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agFoFOHjpNNnFJrMXu3qDQAAAVM"]
[Mon May 11 13:24:47.113479 2026] [:error] [pid 65261:tid 65331] [client 112.134.241.183:29452] [client 112.134.241.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.134.241.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agFoH5u_9uQJeFrcOstr1QAAAIg"]
[Mon May 11 14:01:47.418391 2026] [:error] [pid 65260:tid 65305] [client 27.34.110.145:61252] [client 27.34.110.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.110.145, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agFwyzqbzwIHjP6Y_3GjNgAAAEk"]
[Mon May 11 14:01:58.330072 2026] [:error] [pid 65260:tid 65318] [client 27.34.110.145:41150] [client 27.34.110.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.110.145, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agFw1jqbzwIHjP6Y_3GjQQAAAFY"]
[Mon May 11 14:02:10.218856 2026] [:error] [pid 35052:tid 35062] [client 27.34.110.145:59597] [client 27.34.110.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.110.145, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agFw4uHjpNNnFJrMXu31YAAAAUc"]
[Mon May 11 14:02:19.725006 2026] [:error] [pid 9335:tid 9347] [client 27.34.110.145:6495] [client 27.34.110.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.110.145, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agFw63mXqumINT8bKRF8XwAAAQo"]
[Mon May 11 14:02:30.612155 2026] [:error] [pid 65261:tid 65343] [client 27.34.110.145:50333] [client 27.34.110.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.110.145, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agFw9pu_9uQJeFrcOstxJwAAAJQ"]
[Mon May 11 15:46:55.692561 2026] [:error] [pid 58750:tid 58769] [client 51.68.234.139:37562] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "agGJbzBVaNG3wJtPBU-XJAAAAVE"]
[Mon May 11 15:46:58.142163 2026] [:error] [pid 58677:tid 58691] [client 51.68.234.139:48960] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "agGJchasRhyteIXf1RU_0QAAAIM"]
[Mon May 11 15:47:00.556029 2026] [:error] [pid 4685:tid 4711] [client 51.68.234.139:48970] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "agGJdHwrjbU4NZilCZ-3DQAAARc"]
[Mon May 11 15:47:02.932546 2026] [:error] [pid 4645:tid 4648] [client 51.68.234.139:48980] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "agGJdny4dxn8-Cx5vOWKogAAAEA"]
[Mon May 11 15:47:05.309174 2026] [:error] [pid 4685:tid 4689] [client 51.68.234.139:37326] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "agGJeXwrjbU4NZilCZ-3FgAAAQE"]
[Mon May 11 15:47:07.789500 2026] [:error] [pid 4645:tid 4653] [client 51.68.234.139:37332] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "agGJe3y4dxn8-Cx5vOWKowAAAEU"]
[Mon May 11 15:47:10.326988 2026] [:error] [pid 4685:tid 4712] [client 51.68.234.139:37338] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "agGJfnwrjbU4NZilCZ-3HAAAARg"]
[Mon May 11 15:47:12.693478 2026] [:error] [pid 4645:tid 4667] [client 51.68.234.139:37342] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "agGJgHy4dxn8-Cx5vOWKrQAAAFM"]
[Mon May 11 15:47:15.224195 2026] [:error] [pid 58677:tid 58695] [client 51.68.234.139:38700] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "agGJgxasRhyteIXf1RU_1gAAAIc"]
[Mon May 11 15:47:17.621605 2026] [:error] [pid 58677:tid 58696] [client 51.68.234.139:38712] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agGJhRasRhyteIXf1RU_1wAAAIg"]
[Mon May 11 15:47:20.003049 2026] [:error] [pid 4685:tid 4696] [client 51.68.234.139:38720] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agGJiHwrjbU4NZilCZ-3IwAAAQg"]
[Mon May 11 15:47:22.544937 2026] [:error] [pid 4685:tid 4693] [client 51.68.234.139:38724] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "agGJinwrjbU4NZilCZ-3JwAAAQU"]
[Mon May 11 15:47:25.062148 2026] [:error] [pid 58677:tid 58693] [client 51.68.234.139:55838] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "agGJjRasRhyteIXf1RU_3QAAAIU"]
[Mon May 11 15:47:27.536009 2026] [:error] [pid 58750:tid 58755] [client 51.68.234.139:55854] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "agGJjzBVaNG3wJtPBU-XKQAAAUM"]
[Mon May 11 15:47:30.034196 2026] [:error] [pid 58677:tid 58698] [client 51.68.234.139:55870] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "agGJkhasRhyteIXf1RU_3wAAAIo"]
[Mon May 11 15:47:32.538349 2026] [:error] [pid 4685:tid 4703] [client 51.68.234.139:55882] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "agGJlHwrjbU4NZilCZ-3MQAAAQ8"]
[Mon May 11 15:47:35.053086 2026] [:error] [pid 58677:tid 58706] [client 51.68.234.139:38128] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "agGJlxasRhyteIXf1RU_4QAAAJI"]
[Mon May 11 15:47:37.563827 2026] [:error] [pid 4685:tid 4700] [client 51.68.234.139:38134] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "agGJmXwrjbU4NZilCZ-3PgAAAQw"]
[Mon May 11 15:47:40.082698 2026] [:error] [pid 58615:tid 58641] [client 51.68.234.139:38144] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "agGJnFK28yH055J8TSrGzAAAABY"]
[Mon May 11 15:47:42.584158 2026] [:error] [pid 4685:tid 4690] [client 51.68.234.139:38150] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "agGJnnwrjbU4NZilCZ-3SwAAAQI"]
[Mon May 11 15:47:45.095753 2026] [:error] [pid 4685:tid 4700] [client 51.68.234.139:57074] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "agGJoXwrjbU4NZilCZ-3UQAAAQw"]
[Mon May 11 15:47:47.602135 2026] [:error] [pid 4685:tid 4688] [client 51.68.234.139:57082] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "agGJo3wrjbU4NZilCZ-3XAAAAQA"]
[Mon May 11 15:47:50.064432 2026] [:error] [pid 4645:tid 4671] [client 51.68.234.139:57098] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "agGJpny4dxn8-Cx5vOWKvQAAAFc"]
[Mon May 11 15:47:52.392444 2026] [:error] [pid 58615:tid 58638] [client 51.68.234.139:57106] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "agGJqFK28yH055J8TSrG1wAAABM"]
[Mon May 11 15:48:22.736073 2026] [:error] [pid 4685:tid 4689] [client 51.68.234.139:44280] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agGJxnwrjbU4NZilCZ-3wwAAAQE"]
[Mon May 11 15:48:25.180429 2026] [:error] [pid 4685:tid 4707] [client 51.68.234.139:47144] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "agGJyXwrjbU4NZilCZ-3xgAAARM"]
[Mon May 11 15:48:27.674745 2026] [:error] [pid 4645:tid 4665] [client 51.68.234.139:47148] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "agGJy3y4dxn8-Cx5vOWLBwAAAFE"]
[Mon May 11 15:48:30.186308 2026] [:error] [pid 58615:tid 58626] [client 51.68.234.139:47158] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "agGJzlK28yH055J8TSrG_AAAAAc"]
[Mon May 11 15:48:32.677043 2026] [:error] [pid 4685:tid 4697] [client 51.68.234.139:47160] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "agGJ0HwrjbU4NZilCZ-3zgAAAQk"]
[Mon May 11 15:48:35.166621 2026] [:error] [pid 58677:tid 58706] [client 51.68.234.139:37044] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "agGJ0xasRhyteIXf1RVAEQAAAJI"]
[Mon May 11 15:48:37.639087 2026] [:error] [pid 4685:tid 4696] [client 51.68.234.139:37056] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "agGJ1XwrjbU4NZilCZ-32QAAAQg"]
[Mon May 11 15:48:39.991949 2026] [:error] [pid 58615:tid 58620] [client 51.68.234.139:37062] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "agGJ11K28yH055J8TSrHAAAAAAE"]
[Mon May 11 15:48:42.481871 2026] [:error] [pid 4685:tid 4710] [client 51.68.234.139:37074] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "agGJ2nwrjbU4NZilCZ-35AAAARY"]
[Mon May 11 15:48:44.974922 2026] [:error] [pid 4645:tid 4649] [client 51.68.234.139:50470] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "agGJ3Hy4dxn8-Cx5vOWLGAAAAEE"]
[Mon May 11 15:48:47.476594 2026] [:error] [pid 4685:tid 4699] [client 51.68.234.139:50478] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "agGJ33wrjbU4NZilCZ-39QAAAQs"]
[Mon May 11 15:48:49.809553 2026] [:error] [pid 58677:tid 58708] [client 51.68.234.139:50480] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "agGJ4RasRhyteIXf1RVAFAAAAJQ"]
[Mon May 11 15:48:52.307259 2026] [:error] [pid 58750:tid 58765] [client 51.68.234.139:50486] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "agGJ5DBVaNG3wJtPBU-XWQAAAU0"]
[Mon May 11 15:48:54.780004 2026] [:error] [pid 4645:tid 4648] [client 51.68.234.139:42774] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "agGJ5ny4dxn8-Cx5vOWLJQAAAEA"]
[Mon May 11 15:48:57.276185 2026] [:error] [pid 58677:tid 58693] [client 51.68.234.139:42782] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "agGJ6RasRhyteIXf1RVAFwAAAIU"]
[Mon May 11 15:48:59.619697 2026] [:error] [pid 4685:tid 4688] [client 51.68.234.139:42786] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "agGJ63wrjbU4NZilCZ-4BgAAAQA"]
[Mon May 11 15:49:02.109925 2026] [:error] [pid 4685:tid 4697] [client 51.68.234.139:42796] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agGJ7nwrjbU4NZilCZ-4CwAAAQk"]
[Mon May 11 15:49:04.577382 2026] [:error] [pid 4685:tid 4689] [client 51.68.234.139:42812] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agGJ8HwrjbU4NZilCZ-4DwAAAQE"]
[Mon May 11 15:49:06.907101 2026] [:error] [pid 58677:tid 58709] [client 51.68.234.139:39428] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agGJ8hasRhyteIXf1RVAGgAAAJU"]
[Mon May 11 15:49:09.228177 2026] [:error] [pid 58677:tid 58704] [client 51.68.234.139:39430] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agGJ9RasRhyteIXf1RVAJAAAAJA"]
[Mon May 11 15:49:11.708802 2026] [:error] [pid 4685:tid 4710] [client 51.68.234.139:39436] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agGJ93wrjbU4NZilCZ-4FQAAARY"]
[Mon May 11 15:49:14.181588 2026] [:error] [pid 4645:tid 4660] [client 51.68.234.139:39442] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agGJ-ny4dxn8-Cx5vOWLLwAAAEw"]
[Mon May 11 15:49:16.655471 2026] [:error] [pid 4685:tid 4711] [client 51.68.234.139:45610] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agGJ_HwrjbU4NZilCZ-4SAAAARc"]
[Mon May 11 15:49:19.157862 2026] [:error] [pid 58677:tid 58693] [client 51.68.234.139:45624] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "agGJ_xasRhyteIXf1RVAQAAAAIU"]
[Mon May 11 15:49:48.605520 2026] [:error] [pid 58615:tid 58633] [client 51.68.234.139:45632] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "agGKHFK28yH055J8TSrHZAAAAA4"]
[Mon May 11 15:49:51.017600 2026] [:error] [pid 58615:tid 58627] [client 51.68.234.139:42286] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "agGKH1K28yH055J8TSrHaAAAAAg"]
[Mon May 11 15:49:53.493341 2026] [:error] [pid 58615:tid 58639] [client 51.68.234.139:42290] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "agGKIVK28yH055J8TSrHcQAAABQ"]
[Mon May 11 15:49:55.955976 2026] [:error] [pid 58615:tid 58634] [client 51.68.234.139:33902] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "agGKI1K28yH055J8TSrHdQAAAA8"]
[Mon May 11 15:49:58.439071 2026] [:error] [pid 4685:tid 4696] [client 51.68.234.139:33908] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agGKJnwrjbU4NZilCZ-4lwAAAQg"]
[Mon May 11 15:50:00.764894 2026] [:error] [pid 58616:tid 58647] [client 51.68.234.139:33920] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "agGKKNnsbeF5ioCAecjVxgAAAME"]
[Mon May 11 15:50:03.249366 2026] [:error] [pid 4685:tid 4691] [client 51.68.234.139:33934] [client 51.68.234.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "agGKK3wrjbU4NZilCZ-4nAAAAQM"]
[Mon May 11 18:07:26.016534 2026] [:error] [pid 58750:tid 58753] [client 34.32.72.214:56844] [client 34.32.72.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agGqXjBVaNG3wJtPBU-jLQAAAUE"]
[Mon May 11 18:37:43.581877 2026] [:error] [pid 4645:tid 4661] [client 106.193.248.117:7221] [client 106.193.248.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.193.248.117, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agGxd3y4dxn8-Cx5vOWmLgAAAE0"]
[Mon May 11 19:18:33.393155 2026] [:error] [pid 58616:tid 58657] [client 34.154.187.130:32772] [client 34.154.187.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agG7CdnsbeF5ioCAecjmJAAAAMs"]
[Mon May 11 19:50:50.053578 2026] [:error] [pid 58750:tid 58770] [client 49.37.73.83:58176] [client 49.37.73.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.73.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHCmjBVaNG3wJtPBU-s9QAAAVI"]
[Mon May 11 19:51:00.284427 2026] [:error] [pid 4645:tid 4664] [client 49.37.73.83:58349] [client 49.37.73.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.73.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHCpHy4dxn8-Cx5vOWz5AAAAFA"]
[Mon May 11 19:51:10.557147 2026] [:error] [pid 4685:tid 4706] [client 49.37.73.83:58831] [client 49.37.73.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.73.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHCrnwrjbU4NZilCZ_3cAAAARI"]
[Mon May 11 19:51:21.027988 2026] [:error] [pid 58616:tid 58660] [client 49.37.73.83:59366] [client 49.37.73.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.73.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHCudnsbeF5ioCAecjonQAAAM4"]
[Mon May 11 19:51:31.883212 2026] [:error] [pid 58616:tid 58652] [client 49.37.73.83:59757] [client 49.37.73.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.73.83, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHCw9nsbeF5ioCAecjooAAAAMY"]
[Mon May 11 20:18:08.662652 2026] [:error] [pid 4685:tid 4712] [client 61.3.29.73:56758] [client 61.3.29.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.29.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHJAHwrjbU4NZilCZ_93wAAARg"]
[Mon May 11 20:18:19.208640 2026] [:error] [pid 58615:tid 58638] [client 61.3.29.73:57229] [client 61.3.29.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.29.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHJC1K28yH055J8TSriCQAAABM"]
[Mon May 11 20:18:30.072704 2026] [:error] [pid 58677:tid 58702] [client 61.3.29.73:57582] [client 61.3.29.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.29.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHJFhasRhyteIXf1RVmZAAAAI4"]
[Mon May 11 20:18:40.949373 2026] [:error] [pid 4685:tid 4712] [client 61.3.29.73:57930] [client 61.3.29.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.29.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHJIHwrjbU4NZilCZ_-AQAAARg"]
[Mon May 11 20:18:51.996971 2026] [:error] [pid 58677:tid 58703] [client 61.3.29.73:58292] [client 61.3.29.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.3.29.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHJKxasRhyteIXf1RVmbwAAAI8"]
[Mon May 11 20:55:10.459148 2026] [:error] [pid 4685:tid 4697] [client 181.215.209.96:63585] [client 181.215.209.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.215.209.96, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHRrnwrjbU4NZilCZ8GkQAAAQk"]
[Mon May 11 20:55:20.170886 2026] [:error] [pid 4645:tid 4654] [client 181.215.209.96:58935] [client 181.215.209.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.215.209.96, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHRuHy4dxn8-Cx5vOW_sQAAAEY"]
[Mon May 11 20:55:30.590568 2026] [:error] [pid 58677:tid 58710] [client 181.215.209.96:43655] [client 181.215.209.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.215.209.96, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHRwhasRhyteIXf1RVsKwAAAJY"]
[Mon May 11 20:55:41.241140 2026] [:error] [pid 4685:tid 4702] [client 181.215.209.96:44745] [client 181.215.209.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.215.209.96, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHRzXwrjbU4NZilCZ8GowAAAQ4"]
[Mon May 11 20:55:52.134620 2026] [:error] [pid 58677:tid 58693] [client 181.215.209.96:53801] [client 181.215.209.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.215.209.96, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHR2BasRhyteIXf1RVsLQAAAIU"]
[Mon May 11 21:09:45.098193 2026] [:error] [pid 58677:tid 58688] [client 86.108.33.235:38305] [client 86.108.33.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.108.33.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHVGRasRhyteIXf1RVt1QAAAIA"]
[Mon May 11 21:09:54.928928 2026] [:error] [pid 4685:tid 4710] [client 86.108.33.235:10300] [client 86.108.33.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.108.33.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHVInwrjbU4NZilCZ8JGgAAARY"]
[Mon May 11 21:10:02.949508 2026] [:error] [pid 58677:tid 58695] [client 86.108.33.235:38114] [client 86.108.33.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.108.33.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHVKhasRhyteIXf1RVt3QAAAIc"]
[Mon May 11 21:10:33.382327 2026] [:error] [pid 58677:tid 58708] [client 86.108.33.235:38357] [client 86.108.33.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.108.33.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHVSRasRhyteIXf1RVt4gAAAJQ"]
[Mon May 11 21:10:56.066467 2026] [:error] [pid 4685:tid 4709] [client 86.108.33.235:10367] [client 86.108.33.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.108.33.235, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHVYHwrjbU4NZilCZ8JZAAAARU"]
[Mon May 11 21:42:00.152867 2026] [:error] [pid 4685:tid 4690] [client 43.159.61.24:57494] [client 43.159.61.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agHcqHwrjbU4NZilCZ8QCwAAAQI"]
[Mon May 11 22:02:51.305376 2026] [:error] [pid 4685:tid 4703] [client 58.10.153.95:10930] [client 58.10.153.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.10.153.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHhi3wrjbU4NZilCZ8UaQAAAQ8"]
[Mon May 11 22:03:02.184956 2026] [:error] [pid 4685:tid 4692] [client 58.10.153.95:9062] [client 58.10.153.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.10.153.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHhlnwrjbU4NZilCZ8UdgAAAQQ"]
[Mon May 11 22:03:14.301996 2026] [:error] [pid 58750:tid 58760] [client 58.10.153.95:10786] [client 58.10.153.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.10.153.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHhojBVaNG3wJtPBU-37AAAAUg"]
[Mon May 11 22:03:56.162295 2026] [:error] [pid 4685:tid 4705] [client 58.10.153.95:11978] [client 58.10.153.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.10.153.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHhzHwrjbU4NZilCZ8UzwAAARE"]
[Mon May 11 22:04:20.769052 2026] [:error] [pid 4685:tid 4702] [client 58.10.153.95:13662] [client 58.10.153.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.10.153.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agHh5HwrjbU4NZilCZ8U-QAAAQ4"]
[Mon May 11 22:37:01.184914 2026] [:error] [pid 58677:tid 58697] [client 34.138.16.65:43834] [client 34.138.16.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agHpjRasRhyteIXf1RV4GQAAAIk"]
[Mon May 11 23:29:11.613990 2026] [:error] [pid 4645:tid 4663] [client 223.181.49.157:19100] [client 223.181.49.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.49.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agH1x3y4dxn8-Cx5vOXYYgAAAE8"]
[Mon May 11 23:29:30.627489 2026] [:error] [pid 58750:tid 58765] [client 223.181.49.157:11692] [client 223.181.49.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.49.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agH12jBVaNG3wJtPBU_AhAAAAU0"]
[Mon May 11 23:29:52.363986 2026] [:error] [pid 58750:tid 58761] [client 223.181.49.157:32629] [client 223.181.49.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.49.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agH18DBVaNG3wJtPBU_AigAAAUk"]
[Mon May 11 23:30:14.321864 2026] [:error] [pid 4645:tid 4671] [client 223.181.49.157:30320] [client 223.181.49.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.49.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agH2Bny4dxn8-Cx5vOXYgQAAAFc"]
[Mon May 11 23:30:35.746312 2026] [:error] [pid 4685:tid 4694] [client 223.181.49.157:19824] [client 223.181.49.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.49.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agH2G3wrjbU4NZilCZ8o3wAAAQY"]
[Tue May 12 02:57:27.003533 2026] [:error] [pid 58615:tid 58638] [client 43.163.5.216:56594] [client 43.163.5.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agIml1K28yH055J8TSoIWQAAABM"]
[Tue May 12 03:12:02.263144 2026] [:error] [pid 36544:tid 36546] [client 14.195.21.130:56803] [client 14.195.21.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.195.21.130, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agIqAtZwJOFy5zL5d2occAAAAQA"]
[Tue May 12 03:12:17.576802 2026] [:error] [pid 36969:tid 37001] [client 14.195.21.130:57362] [client 14.195.21.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.195.21.130, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agIqEbFFNpleWxXPy4oahgAAAAE"]
[Tue May 12 03:12:22.998562 2026] [:error] [pid 36979:tid 37059] [client 14.195.21.130:57888] [client 14.195.21.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.195.21.130, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agIqFltFL3jRxlgG6lSAdgAAAIQ"]
[Tue May 12 03:12:33.554046 2026] [:error] [pid 36979:tid 37079] [client 14.195.21.130:58422] [client 14.195.21.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.195.21.130, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agIqIVtFL3jRxlgG6lSAgAAAAJc"]
[Tue May 12 03:12:44.194909 2026] [:error] [pid 37083:tid 37101] [client 14.195.21.130:58965] [client 14.195.21.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.195.21.130, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agIqLA8vBc37g0gYYtNTRgAAAM8"]
[Tue May 12 03:57:02.412069 2026] [:error] [pid 39958:tid 40027] [client 94.65.241.236:61272] [client 94.65.241.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.65.241.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agI0juVI9FVDxXB2XxgcDQAAAIg"]
[Tue May 12 03:57:12.418139 2026] [:error] [pid 55559:tid 55633] [client 94.65.241.236:61609] [client 94.65.241.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.65.241.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agI0mNj0hVMLJAOI_fwsGAAAAQ4"]
[Tue May 12 03:57:23.347505 2026] [:error] [pid 55559:tid 55626] [client 94.65.241.236:62009] [client 94.65.241.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.65.241.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agI0o9j0hVMLJAOI_fwsIwAAAQg"]
[Tue May 12 03:57:34.183597 2026] [:error] [pid 40061:tid 40074] [client 94.65.241.236:62344] [client 94.65.241.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.65.241.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agI0rrycIKt8hxHMBYtyywAAAMs"]
[Tue May 12 03:57:45.061869 2026] [:error] [pid 39956:tid 39977] [client 94.65.241.236:62679] [client 94.65.241.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.65.241.236, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agI0uY2K3wZDsNji3My7CgAAAAw"]
[Tue May 12 05:00:03.839781 2026] [:error] [pid 39958:tid 40029] [client 24.230.201.194:65316] [client 24.230.201.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.230.201.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agJDU-VI9FVDxXB2XxgjNwAAAIo"]
[Tue May 12 05:24:30.065069 2026] [:error] [pid 40061:tid 40077] [client 24.230.201.194:52275] [client 24.230.201.194] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agJJDrycIKt8hxHMBYt-7QAAAM4"]
[Tue May 12 05:36:11.722516 2026] [:error] [pid 39957:tid 40016] [client 101.32.244.128:57804] [client 101.32.244.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agJLy-AfHHyq0DBh5BL2mQAAAFg"]
[Tue May 12 07:12:08.783227 2026] [:error] [pid 40061:tid 40077] [client 162.14.66.219:59572] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agJiSLycIKt8hxHMBYuOqgAAAM4"]
[Tue May 12 08:15:03.460611 2026] [:error] [pid 39958:tid 40039] [client 43.130.141.193:60080] [client 43.130.141.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agJxB-VI9FVDxXB2Xxg6MwAAAJQ"]
[Tue May 12 09:05:05.530759 2026] [:error] [pid 40061:tid 40080] [client 193.70.46.38:51462] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "agJ8wbycIKt8hxHMBYuiuwAAANE"]
[Tue May 12 09:05:08.022307 2026] [:error] [pid 39957:tid 39994] [client 193.70.46.38:60084] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "agJ8xOAfHHyq0DBh5BIMkwAAAEI"]
[Tue May 12 09:05:10.524743 2026] [:error] [pid 55559:tid 55644] [client 193.70.46.38:60092] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "agJ8xtj0hVMLJAOI_fxtoAAAARc"]
[Tue May 12 09:05:12.864760 2026] [:error] [pid 42143:tid 42153] [client 193.70.46.38:60108] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "agJ8yES2WmK92iCO2L16IgAAAUY"]
[Tue May 12 09:05:15.370853 2026] [:error] [pid 39957:tid 40000] [client 193.70.46.38:42728] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "agJ8y-AfHHyq0DBh5BIMnQAAAEg"]
[Tue May 12 09:05:17.861887 2026] [:error] [pid 42143:tid 42159] [client 193.70.46.38:42742] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "agJ8zUS2WmK92iCO2L16KgAAAUw"]
[Tue May 12 09:05:20.204709 2026] [:error] [pid 55559:tid 55634] [client 193.70.46.38:42756] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "agJ80Nj0hVMLJAOI_fxtpQAAAQ8"]
[Tue May 12 09:05:22.551565 2026] [:error] [pid 42143:tid 42151] [client 193.70.46.38:42762] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "agJ80kS2WmK92iCO2L16NQAAAUQ"]
[Tue May 12 09:05:25.039760 2026] [:error] [pid 42143:tid 42155] [client 193.70.46.38:34776] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "agJ81US2WmK92iCO2L16QAAAAUg"]
[Tue May 12 09:05:27.368005 2026] [:error] [pid 42143:tid 42164] [client 193.70.46.38:34790] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agJ810S2WmK92iCO2L16SwAAAVE"]
[Tue May 12 09:05:29.760811 2026] [:error] [pid 55559:tid 55626] [client 193.70.46.38:34798] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agJ82dj0hVMLJAOI_fxtpwAAAQg"]
[Tue May 12 09:05:32.171610 2026] [:error] [pid 39957:tid 40015] [client 193.70.46.38:34800] [client 193.70.46.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "agJ83OAfHHyq0DBh5BIMpgAAAFc"]
[Tue May 12 09:12:23.490881 2026] [:error] [pid 39957:tid 40000] [client 95.217.109.26:41544] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "agJ-d-AfHHyq0DBh5BINgwAAAEg"]
[Tue May 12 09:12:32.730459 2026] [:error] [pid 42143:tid 42164] [client 95.217.109.26:60172] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "agJ-gES2WmK92iCO2L170AAAAVE"]
[Tue May 12 09:12:35.307881 2026] [:error] [pid 39957:tid 40006] [client 95.217.109.26:60188] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agJ-g-AfHHyq0DBh5BINjwAAAE4"]
[Tue May 12 09:12:37.867787 2026] [:error] [pid 39957:tid 40003] [client 95.217.109.26:21338] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "agJ-heAfHHyq0DBh5BINkwAAAEs"]
[Tue May 12 09:12:40.454147 2026] [:error] [pid 42143:tid 42149] [client 95.217.109.26:21340] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "agJ-iES2WmK92iCO2L172QAAAUI"]
[Tue May 12 09:12:43.130385 2026] [:error] [pid 39957:tid 39994] [client 95.217.109.26:21342] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "agJ-i-AfHHyq0DBh5BINmgAAAEI"]
[Tue May 12 09:12:45.704659 2026] [:error] [pid 40061:tid 40069] [client 95.217.109.26:21346] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "agJ-jbycIKt8hxHMBYujpgAAAMY"]
[Tue May 12 09:12:48.484201 2026] [:error] [pid 42143:tid 42159] [client 95.217.109.26:12470] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "agJ-kES2WmK92iCO2L174AAAAUw"]
[Tue May 12 09:12:51.060469 2026] [:error] [pid 42143:tid 42165] [client 95.217.109.26:12480] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agJ-k0S2WmK92iCO2L175QAAAVI"]
[Tue May 12 09:12:53.620616 2026] [:error] [pid 40061:tid 40078] [client 95.217.109.26:12494] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "agJ-lbycIKt8hxHMBYujrQAAAM8"]
[Tue May 12 09:12:56.234963 2026] [:error] [pid 39957:tid 39999] [client 95.217.109.26:12502] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agJ-mOAfHHyq0DBh5BINpQAAAEc"]
[Tue May 12 09:12:58.671457 2026] [:error] [pid 40061:tid 40077] [client 95.217.109.26:7292] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agJ-mrycIKt8hxHMBYujsAAAAM4"]
[Tue May 12 09:13:01.382586 2026] [:error] [pid 42143:tid 42164] [client 95.217.109.26:7306] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agJ-nUS2WmK92iCO2L177QAAAVE"]
[Tue May 12 09:13:04.063751 2026] [:error] [pid 42143:tid 42156] [client 95.217.109.26:7310] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "agJ-oES2WmK92iCO2L178gAAAUk"]
[Tue May 12 09:13:13.881435 2026] [:error] [pid 39957:tid 39993] [client 95.217.109.26:2138] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "agJ-qeAfHHyq0DBh5BINsQAAAEE"]
[Tue May 12 09:13:16.422843 2026] [:error] [pid 55559:tid 55640] [client 95.217.109.26:2140] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "agJ-rNj0hVMLJAOI_fxuGQAAARM"]
[Tue May 12 09:14:46.596018 2026] [:error] [pid 39958:tid 40023] [client 95.217.109.26:19522] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "agJ_BuVI9FVDxXB2XxhBKwAAAIQ"]
[Tue May 12 09:14:49.248881 2026] [:error] [pid 40061:tid 40086] [client 95.217.109.26:18080] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agJ_CbycIKt8hxHMBYukQAAAANc"]
[Tue May 12 09:14:51.834984 2026] [:error] [pid 39958:tid 40031] [client 95.217.109.26:18092] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agJ_C-VI9FVDxXB2XxhBMwAAAIw"]
[Tue May 12 09:14:54.241765 2026] [:error] [pid 39958:tid 40030] [client 95.217.109.26:18096] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agJ_DuVI9FVDxXB2XxhBNAAAAIs"]
[Tue May 12 09:14:56.828989 2026] [:error] [pid 42143:tid 42170] [client 95.217.109.26:40586] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agJ_EES2WmK92iCO2L18egAAAVc"]
[Tue May 12 09:15:02.121676 2026] [:error] [pid 39958:tid 40029] [client 95.217.109.26:40596] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agJ_FuVI9FVDxXB2XxhBOQAAAIo"]
[Tue May 12 09:15:04.709718 2026] [:error] [pid 40061:tid 40084] [client 95.217.109.26:40602] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agJ_GLycIKt8hxHMBYukSQAAANU"]
[Tue May 12 09:15:07.145995 2026] [:error] [pid 39957:tid 40011] [client 95.217.109.26:40732] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agJ_G-AfHHyq0DBh5BIOLgAAAFM"]
[Tue May 12 09:15:09.550687 2026] [:error] [pid 39957:tid 40015] [client 95.217.109.26:40742] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "agJ_HeAfHHyq0DBh5BIOLwAAAFc"]
[Tue May 12 09:15:12.190746 2026] [:error] [pid 39957:tid 40009] [client 95.217.109.26:40754] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agJ_IOAfHHyq0DBh5BIONgAAAFE"]
[Tue May 12 09:15:14.779971 2026] [:error] [pid 40061:tid 40063] [client 95.217.109.26:40758] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "agJ_IrycIKt8hxHMBYukTQAAAMA"]
[Tue May 12 09:15:17.363001 2026] [:error] [pid 39957:tid 40012] [client 95.217.109.26:33646] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "agJ_JeAfHHyq0DBh5BIOQAAAAFQ"]
[Tue May 12 09:15:19.812937 2026] [:error] [pid 42143:tid 42171] [client 95.217.109.26:33654] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agJ_J0S2WmK92iCO2L18nQAAAVg"]
[Tue May 12 09:15:22.401801 2026] [:error] [pid 42143:tid 42166] [client 95.217.109.26:33658] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "agJ_KkS2WmK92iCO2L18ogAAAVM"]
[Tue May 12 09:15:24.923232 2026] [:error] [pid 42143:tid 42163] [client 95.217.109.26:33674] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "agJ_LES2WmK92iCO2L18pwAAAVA"]
[Tue May 12 09:15:27.526695 2026] [:error] [pid 42143:tid 42152] [client 95.217.109.26:43144] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "agJ_L0S2WmK92iCO2L18rAAAAUU"]
[Tue May 12 09:15:30.220479 2026] [:error] [pid 40061:tid 40063] [client 95.217.109.26:43154] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agJ_MrycIKt8hxHMBYukVwAAAMA"]
[Tue May 12 09:15:32.921775 2026] [:error] [pid 42143:tid 42163] [client 95.217.109.26:43168] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "agJ_NES2WmK92iCO2L18sQAAAVA"]
[Tue May 12 09:15:35.386304 2026] [:error] [pid 39957:tid 40009] [client 95.217.109.26:43174] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "agJ_N-AfHHyq0DBh5BIOSwAAAFE"]
[Tue May 12 09:15:38.002603 2026] [:error] [pid 55559:tid 55626] [client 95.217.109.26:61314] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agJ_Otj0hVMLJAOI_fxulgAAAQg"]
[Tue May 12 09:15:40.537004 2026] [:error] [pid 55559:tid 55617] [client 95.217.109.26:61328] [client 95.217.109.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "agJ_PNj0hVMLJAOI_fxumAAAAQA"]
[Tue May 12 10:34:57.511792 2026] [:error] [pid 39957:tid 40007] [client 43.133.187.11:50976] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agKR0eAfHHyq0DBh5BIc9gAAAE8"]
[Tue May 12 12:07:25.569346 2026] [:error] [pid 39958:tid 40020] [client 209.141.58.150:49250] [client 209.141.58.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.58.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agKnfeVI9FVDxXB2XxhT_AAAAIE"]
[Tue May 12 12:07:26.424258 2026] [proxy_fcgi:error] [pid 39958:tid 40020] [client 209.141.58.150:49250] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 12 12:11:03.256286 2026] [:error] [pid 39956:tid 39989] [client 209.141.58.150:63286] [client 209.141.58.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.58.150, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agKoV42K3wZDsNji3MznEgAAABg"]
[Tue May 12 12:11:04.331665 2026] [proxy_fcgi:error] [pid 39956:tid 39989] [client 209.141.58.150:63286] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 12 13:01:39.738651 2026] [:error] [pid 42143:tid 42167] [client 43.134.33.236:49066] [client 43.134.33.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agK0M0S2WmK92iCO2L2_-QAAAVQ"]
[Tue May 12 13:07:42.884452 2026] [:error] [pid 40061:tid 40074] [client 162.241.243.118:35858] [client 162.241.243.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.243.118, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agK1nrycIKt8hxHMBYvK-QAAAMs"]
[Tue May 12 13:07:47.013435 2026] [:error] [pid 42143:tid 42165] [client 162.241.152.21:44198] [client 162.241.152.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agK1o0S2WmK92iCO2L3CBQAAAVI"]
[Tue May 12 13:07:57.677641 2026] [:error] [pid 40061:tid 40080] [client 103.145.5.35:37330] [client 103.145.5.35] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agK1rbycIKt8hxHMBYvLCAAAANE"]
[Tue May 12 13:07:59.326336 2026] [:error] [pid 39957:tid 40014] [client 47.242.236.143:45274] [client 47.242.236.143] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agK1r-AfHHyq0DBh5BI8BwAAAFY"]
[Tue May 12 13:08:00.436385 2026] [:error] [pid 39956:tid 39978] [client 50.6.7.129:56582] [client 50.6.7.129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agK1sI2K3wZDsNji3MztRAAAAA0"]
[Tue May 12 13:08:00.881832 2026] [:error] [pid 42143:tid 42168] [client 38.95.35.74:46422] [client 38.95.35.74] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agK1sES2WmK92iCO2L3CDgAAAVU"]
[Tue May 12 14:40:56.957971 2026] [:error] [pid 21242:tid 21250] [client 103.199.205.190:35285] [client 103.199.205.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.199.205.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agLLeMzeh8JWZob6PnKiwAAAAYQ"]
[Tue May 12 14:41:08.085406 2026] [:error] [pid 39958:tid 40019] [client 103.199.205.190:1988] [client 103.199.205.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.199.205.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agLLhOVI9FVDxXB2XxhkKwAAAIA"]
[Tue May 12 14:41:17.585461 2026] [:error] [pid 39956:tid 39965] [client 103.199.205.190:35122] [client 103.199.205.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.199.205.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agLLjY2K3wZDsNji3Mz1xwAAAAA"]
[Tue May 12 14:41:28.096643 2026] [:error] [pid 21242:tid 21260] [client 103.199.205.190:2010] [client 103.199.205.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.199.205.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agLLmMzeh8JWZob6PnKjSwAAAY4"]
[Tue May 12 14:41:38.534870 2026] [:error] [pid 21242:tid 21257] [client 103.199.205.190:1924] [client 103.199.205.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.199.205.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agLLoszeh8JWZob6PnKjYQAAAYs"]
[Tue May 12 15:23:47.415705 2026] [:error] [pid 39957:tid 39994] [client 43.166.245.120:60392] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agLVg-AfHHyq0DBh5BJVKAAAAEI"]
[Tue May 12 17:53:26.508097 2026] [:error] [pid 39956:tid 39969] [client 107.189.5.104:51890] [client 107.189.5.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.5.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agL4lo2K3wZDsNji3MwCAwAAAAQ"]
[Tue May 12 17:53:27.314652 2026] [proxy_fcgi:error] [pid 39956:tid 39969] [client 107.189.5.104:51890] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 12 17:53:27.569277 2026] [:error] [pid 39956:tid 39972] [client 107.189.5.104:51890] [client 107.189.5.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.5.104, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agL4l42K3wZDsNji3MwCBQAAAAc"]
[Tue May 12 17:53:28.508632 2026] [proxy_fcgi:error] [pid 39956:tid 39972] [client 107.189.5.104:51890] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 12 17:54:51.516920 2026] [:error] [pid 42143:tid 42154] [client 117.202.176.208:52366] [client 117.202.176.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.202.176.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agL460S2WmK92iCO2L0BYQAAAUc"]
[Tue May 12 17:55:01.899436 2026] [:error] [pid 42143:tid 42169] [client 117.202.176.208:52808] [client 117.202.176.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.202.176.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agL49US2WmK92iCO2L0BaQAAAVY"]
[Tue May 12 17:55:12.517170 2026] [:error] [pid 39957:tid 40005] [client 117.202.176.208:53185] [client 117.202.176.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.202.176.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agL5AOAfHHyq0DBh5BJonwAAAE0"]
[Tue May 12 17:55:23.556143 2026] [:error] [pid 21242:tid 21249] [client 117.202.176.208:53576] [client 117.202.176.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.202.176.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agL5C8zeh8JWZob6PnLU2wAAAYM"]
[Tue May 12 17:55:33.811578 2026] [:error] [pid 39958:tid 40042] [client 117.202.176.208:53959] [client 117.202.176.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.202.176.208, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agL5FeVI9FVDxXB2XxhySwAAAJc"]
[Tue May 12 18:11:06.935099 2026] [:error] [pid 21242:tid 21266] [client 43.130.60.195:54118] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agL8uszeh8JWZob6PnLYAAAAAZQ"]
[Tue May 12 18:49:00.914932 2026] [:error] [pid 39958:tid 40024] [client 3.70.164.132:50990] [client 3.70.164.132] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agMFnOVI9FVDxXB2Xxh15QAAAIU"]
[Tue May 12 19:41:55.708303 2026] [:error] [pid 55559:tid 55621] [client 49.234.192.248:42192] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agMSA9j0hVMLJAOI_fyxgAAAAQM"]
[Tue May 12 19:55:37.682027 2026] [:error] [pid 42143:tid 42162] [client 49.205.244.191:54151] [client 49.205.244.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.244.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMVOUS2WmK92iCO2L0ZgwAAAU8"]
[Tue May 12 19:55:47.169473 2026] [:error] [pid 21242:tid 21255] [client 49.205.244.191:54775] [client 49.205.244.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.244.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMVQ8zeh8JWZob6PnL3PQAAAYk"]
[Tue May 12 19:55:52.436956 2026] [:error] [pid 21242:tid 21246] [client 179.198.67.21:56348] [client 179.198.67.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.198.67.21, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMVSMzeh8JWZob6PnL3RgAAAYA"]
[Tue May 12 19:55:57.709547 2026] [:error] [pid 21242:tid 21250] [client 49.205.244.191:53815] [client 49.205.244.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.244.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMVTczeh8JWZob6PnL3SwAAAYQ"]
[Tue May 12 19:56:02.327590 2026] [:error] [pid 42143:tid 42161] [client 179.198.67.21:56729] [client 179.198.67.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.198.67.21, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMVUkS2WmK92iCO2L0ZiQAAAU4"]
[Tue May 12 19:56:08.260437 2026] [:error] [pid 55559:tid 55624] [client 49.205.244.191:54158] [client 49.205.244.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.244.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMVWNj0hVMLJAOI_fyy9AAAAQY"]
[Tue May 12 19:56:18.809365 2026] [:error] [pid 42143:tid 42164] [client 49.205.244.191:54673] [client 49.205.244.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.244.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMVYkS2WmK92iCO2L0ZkAAAAVE"]
[Tue May 12 19:56:23.022329 2026] [:error] [pid 21242:tid 21267] [client 179.198.67.21:57495] [client 179.198.67.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.198.67.21, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMVZ8zeh8JWZob6PnL3UgAAAZU"]
[Tue May 12 19:56:33.627308 2026] [:error] [pid 39957:tid 40013] [client 179.198.67.21:57850] [client 179.198.67.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.198.67.21, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMVceAfHHyq0DBh5BJ6tAAAAFU"]
[Tue May 12 19:56:44.221413 2026] [:error] [pid 21242:tid 21254] [client 179.198.67.21:58187] [client 179.198.67.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.198.67.21, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMVfMzeh8JWZob6PnL3aQAAAYg"]
[Tue May 12 20:30:07.742247 2026] [:error] [pid 40061:tid 40067] [client 5.38.115.38:45438] [client 5.38.115.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.38.115.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMdT7ycIKt8hxHMBYv-iAAAAMQ"]
[Tue May 12 20:30:33.058300 2026] [:error] [pid 40061:tid 40078] [client 5.38.115.38:32248] [client 5.38.115.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.38.115.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMdabycIKt8hxHMBYv-igAAAM8"]
[Tue May 12 20:31:44.133458 2026] [:error] [pid 39957:tid 40002] [client 101.32.128.113:49202] [client 101.32.128.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agMdsOAfHHyq0DBh5BJ_lgAAAEo"]
[Tue May 12 20:32:34.271849 2026] [:error] [pid 42143:tid 42168] [client 5.38.115.38:5576] [client 5.38.115.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.38.115.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMd4kS2WmK92iCO2L0fcgAAAVU"]
[Tue May 12 20:33:02.204438 2026] [:error] [pid 55559:tid 55627] [client 5.38.115.38:15472] [client 5.38.115.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.38.115.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMd_tj0hVMLJAOI_fy3PQAAAQk"]
[Tue May 12 20:33:13.962854 2026] [:error] [pid 42143:tid 42153] [client 5.38.115.38:62880] [client 5.38.115.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.38.115.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMeCUS2WmK92iCO2L0gBAAAAUY"]
[Tue May 12 21:48:30.214544 2026] [:error] [pid 39957:tid 40011] [client 202.62.75.14:55489] [client 202.62.75.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.62.75.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMvruAfHHyq0DBh5BKNrAAAAFM"]
[Tue May 12 21:48:40.626340 2026] [:error] [pid 21242:tid 21269] [client 202.62.75.14:55884] [client 202.62.75.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.62.75.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMvuMzeh8JWZob6PnIYXQAAAZc"]
[Tue May 12 21:48:51.147348 2026] [:error] [pid 40061:tid 40086] [client 202.62.75.14:56196] [client 202.62.75.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.62.75.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMvw7ycIKt8hxHMBYsKOAAAANc"]
[Tue May 12 21:49:01.621287 2026] [:error] [pid 42143:tid 42161] [client 202.62.75.14:56524] [client 202.62.75.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.62.75.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMvzUS2WmK92iCO2L0vlAAAAU4"]
[Tue May 12 21:49:12.271489 2026] [:error] [pid 21242:tid 21267] [client 202.62.75.14:56847] [client 202.62.75.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.62.75.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMv2Mzeh8JWZob6PnIYeAAAAZU"]
[Tue May 12 21:49:22.782599 2026] [:error] [pid 39956:tid 39976] [client 202.62.75.14:57164] [client 202.62.75.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.62.75.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agMv4o2K3wZDsNji3MwTSgAAAAs"]
[Tue May 12 23:10:50.612609 2026] [:error] [pid 40061:tid 40076] [client 43.153.107.22:60902] [client 43.153.107.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agNC-rycIKt8hxHMBYsSWQAAAM0"]
[Wed May 13 00:28:58.417668 2026] [:error] [pid 21242:tid 21250] [client 103.191.123.75:48918] [client 103.191.123.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.123.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNVSszeh8JWZob6PnI2sQAAAYQ"]
[Wed May 13 00:29:07.801748 2026] [:error] [pid 55559:tid 55643] [client 103.191.123.75:48235] [client 103.191.123.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.123.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNVU9j0hVMLJAOI_fzMywAAARY"]
[Wed May 13 00:29:19.091205 2026] [:error] [pid 21242:tid 21267] [client 103.191.123.75:48884] [client 103.191.123.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.123.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNVX8zeh8JWZob6PnI21AAAAZU"]
[Wed May 13 00:29:28.949711 2026] [:error] [pid 21242:tid 21262] [client 103.191.123.75:48378] [client 103.191.123.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.123.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNVaMzeh8JWZob6PnI26gAAAZA"]
[Wed May 13 00:29:39.652407 2026] [:error] [pid 39956:tid 39979] [client 103.191.123.75:48210] [client 103.191.123.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.123.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNVc42K3wZDsNji3Mwc-AAAAA4"]
[Wed May 13 00:34:01.990915 2026] [:error] [pid 42143:tid 42167] [client 62.217.151.128:8981] [client 62.217.151.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.217.151.128, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNWeUS2WmK92iCO2L1GigAAAVQ"]
[Wed May 13 00:57:56.347987 2026] [:error] [pid 40061:tid 40072] [client 217.165.167.70:62143] [client 217.165.167.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.167.70, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNcFLycIKt8hxHMBYsbZAAAAMk"]
[Wed May 13 00:58:06.578347 2026] [:error] [pid 55559:tid 55643] [client 217.165.167.70:62441] [client 217.165.167.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.167.70, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNcHtj0hVMLJAOI_fzOrAAAARY"]
[Wed May 13 00:58:16.925975 2026] [:error] [pid 55559:tid 55636] [client 217.165.167.70:62869] [client 217.165.167.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.167.70, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNcKNj0hVMLJAOI_fzOsQAAARA"]
[Wed May 13 00:58:27.296486 2026] [:error] [pid 42143:tid 42156] [client 217.165.167.70:63201] [client 217.165.167.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.167.70, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNcM0S2WmK92iCO2L1KVQAAAUk"]
[Wed May 13 00:58:37.735200 2026] [:error] [pid 55559:tid 55636] [client 217.165.167.70:63521] [client 217.165.167.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.165.167.70, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNcPdj0hVMLJAOI_fzO0AAAARA"]
[Wed May 13 01:04:56.538894 2026] [:error] [pid 42143:tid 42159] [client 50.60.236.42:54194] [client 50.60.236.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.60.236.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNduES2WmK92iCO2L1LVwAAAUw"]
[Wed May 13 01:27:36.065872 2026] [:error] [pid 42143:tid 42153] [client 50.60.236.42:62723] [client 50.60.236.42] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agNjCES2WmK92iCO2L1QOgAAAUY"]
[Wed May 13 01:28:13.147842 2026] [:error] [pid 42143:tid 42171] [client 50.60.236.42:63111] [client 50.60.236.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.60.236.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agNjLUS2WmK92iCO2L1QaQAAAVg"]
[Wed May 13 01:32:45.950577 2026] [:error] [pid 21242:tid 21254] [client 49.51.183.220:36640] [client 49.51.183.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agNkPczeh8JWZob6PnJGLAAAAYg"]
[Wed May 13 01:57:21.034248 2026] [:error] [pid 21242:tid 21269] [client 51.75.128.50:52420] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "agNqAczeh8JWZob6PnJMKQAAAZc"]
[Wed May 13 01:57:23.661998 2026] [:error] [pid 39957:tid 39997] [client 51.75.128.50:47260] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "agNqA-AfHHyq0DBh5BKsXAAAAEU"]
[Wed May 13 01:57:26.106848 2026] [:error] [pid 55559:tid 55633] [client 51.75.128.50:47266] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "agNqBtj0hVMLJAOI_fzU3wAAAQ4"]
[Wed May 13 01:57:28.434461 2026] [:error] [pid 42143:tid 42161] [client 51.75.128.50:47268] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "agNqCES2WmK92iCO2L1WAgAAAU4"]
[Wed May 13 01:57:30.974015 2026] [:error] [pid 21242:tid 21246] [client 51.75.128.50:37988] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "agNqCszeh8JWZob6PnJMOAAAAYA"]
[Wed May 13 01:57:33.407986 2026] [:error] [pid 21242:tid 21258] [client 51.75.128.50:37996] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "agNqDczeh8JWZob6PnJMQQAAAYw"]
[Wed May 13 01:57:35.860364 2026] [:error] [pid 55559:tid 55627] [client 51.75.128.50:38006] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "agNqD9j0hVMLJAOI_fzU5gAAAQk"]
[Wed May 13 01:57:38.226105 2026] [:error] [pid 21242:tid 21250] [client 51.75.128.50:38014] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "agNqEszeh8JWZob6PnJMSwAAAYQ"]
[Wed May 13 01:57:40.528307 2026] [:error] [pid 42143:tid 42154] [client 51.75.128.50:52810] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "agNqFES2WmK92iCO2L1WEAAAAUc"]
[Wed May 13 01:57:42.991687 2026] [:error] [pid 42143:tid 42151] [client 51.75.128.50:52818] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agNqFkS2WmK92iCO2L1WFQAAAUQ"]
[Wed May 13 01:57:45.564132 2026] [:error] [pid 21242:tid 21257] [client 51.75.128.50:52826] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agNqGczeh8JWZob6PnJMUAAAAYs"]
[Wed May 13 01:57:48.090393 2026] [:error] [pid 55559:tid 55632] [client 51.75.128.50:52832] [client 51.75.128.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "agNqHNj0hVMLJAOI_fzU6AAAAQ0"]
[Wed May 13 02:09:35.962667 2026] [:error] [pid 21242:tid 21259] [client 104.207.45.65:13243] [client 104.207.45.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "agNs38zeh8JWZob6PnJPuQAAAY0"]
[Wed May 13 02:09:37.073327 2026] [:error] [pid 39957:tid 40005] [client 217.181.91.70:32461] [client 217.181.91.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "agNs4eAfHHyq0DBh5BKu1AAAAE0"]
[Wed May 13 02:09:40.758724 2026] [:error] [pid 21242:tid 21267] [client 65.111.30.160:52927] [client 65.111.30.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.svn/wc.db"] [unique_id "agNs5Mzeh8JWZob6PnJPvgAAAZU"]
[Wed May 13 02:33:57.677135 2026] [:error] [pid 21242:tid 21265] [client 209.141.52.4:56204] [client 209.141.52.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.52.4, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agNylczeh8JWZob6PnJWaQAAAZM"]
[Wed May 13 02:33:59.811349 2026] [proxy_fcgi:error] [pid 21242:tid 21265] [client 209.141.52.4:56204] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 13 02:34:00.026699 2026] [:error] [pid 21242:tid 21258] [client 209.141.52.4:56204] [client 209.141.52.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.52.4, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agNymMzeh8JWZob6PnJWbQAAAYw"]
[Wed May 13 02:34:00.880989 2026] [proxy_fcgi:error] [pid 21242:tid 21258] [client 209.141.52.4:56204] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Wed May 13 02:47:12.387651 2026] [:error] [pid 21242:tid 21258] [client 93.158.213.25:60790] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "agN1sMzeh8JWZob6PnJbJQAAAYw"]
[Wed May 13 02:47:14.928799 2026] [:error] [pid 42143:tid 42155] [client 93.158.213.25:38580] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "agN1skS2WmK92iCO2L1ggwAAAUg"]
[Wed May 13 02:47:17.446171 2026] [:error] [pid 42143:tid 42154] [client 93.158.213.25:37082] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agN1tUS2WmK92iCO2L1gmQAAAUc"]
[Wed May 13 02:47:19.999360 2026] [:error] [pid 39958:tid 40023] [client 93.158.213.25:37084] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "agN1t-VI9FVDxXB2Xxib2QAAAIQ"]
[Wed May 13 02:47:22.662059 2026] [:error] [pid 55559:tid 55644] [client 93.158.213.25:37094] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "agN1utj0hVMLJAOI_fzbHQAAARc"]
[Wed May 13 02:47:25.197529 2026] [:error] [pid 39957:tid 40005] [client 93.158.213.25:37100] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "agN1veAfHHyq0DBh5BKzSwAAAE0"]
[Wed May 13 02:47:27.751609 2026] [:error] [pid 39956:tid 39985] [client 93.158.213.25:34834] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "agN1v42K3wZDsNji3MwmIwAAABQ"]
[Wed May 13 02:47:30.252186 2026] [:error] [pid 39956:tid 39988] [client 93.158.213.25:34842] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "agN1wo2K3wZDsNji3MwmJQAAABc"]
[Wed May 13 02:47:32.864765 2026] [:error] [pid 39957:tid 39999] [client 93.158.213.25:34858] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agN1xOAfHHyq0DBh5BKzUAAAAEc"]
[Wed May 13 02:47:35.309243 2026] [:error] [pid 42143:tid 42167] [client 93.158.213.25:34870] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "agN1x0S2WmK92iCO2L1gsgAAAVQ"]
[Wed May 13 02:47:37.850562 2026] [:error] [pid 39956:tid 39974] [client 93.158.213.25:40784] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agN1yY2K3wZDsNji3MwmJwAAAAk"]
[Wed May 13 02:47:40.402409 2026] [:error] [pid 21242:tid 21248] [client 93.158.213.25:40796] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agN1zMzeh8JWZob6PnJbNAAAAYI"]
[Wed May 13 02:47:42.886380 2026] [:error] [pid 55559:tid 55627] [client 93.158.213.25:40808] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agN1ztj0hVMLJAOI_fzbIwAAAQk"]
[Wed May 13 02:47:45.361084 2026] [:error] [pid 21242:tid 21246] [client 93.158.213.25:40814] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "agN10czeh8JWZob6PnJbNwAAAYA"]
[Wed May 13 02:47:47.986852 2026] [:error] [pid 42143:tid 42163] [client 93.158.213.25:32822] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "agN100S2WmK92iCO2L1gtwAAAVA"]
[Wed May 13 02:47:50.522841 2026] [:error] [pid 21242:tid 21254] [client 93.158.213.25:32838] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "agN11szeh8JWZob6PnJbOQAAAYg"]
[Wed May 13 02:47:53.052948 2026] [:error] [pid 39957:tid 40012] [client 93.158.213.25:32848] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "agN12eAfHHyq0DBh5BKzXgAAAFQ"]
[Wed May 13 02:47:55.643149 2026] [:error] [pid 42143:tid 42158] [client 93.158.213.25:32852] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "agN120S2WmK92iCO2L1guQAAAUs"]
[Wed May 13 02:47:58.160278 2026] [:error] [pid 55559:tid 55633] [client 93.158.213.25:32856] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "agN13tj0hVMLJAOI_fzbLAAAAQ4"]
[Wed May 13 02:48:00.586613 2026] [:error] [pid 39957:tid 40015] [client 93.158.213.25:32864] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "agN14OAfHHyq0DBh5BKzZAAAAFc"]
[Wed May 13 02:48:03.383032 2026] [:error] [pid 40061:tid 40077] [client 93.158.213.25:32872] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "agN147ycIKt8hxHMBYsoJgAAAM4"]
[Wed May 13 02:48:05.902568 2026] [:error] [pid 39957:tid 39993] [client 93.158.213.25:43116] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "agN15eAfHHyq0DBh5BKzaAAAAEE"]
[Wed May 13 02:48:08.384037 2026] [:error] [pid 39957:tid 40008] [client 93.158.213.25:43126] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "agN16OAfHHyq0DBh5BKzagAAAFA"]
[Wed May 13 02:48:39.284913 2026] [:error] [pid 39956:tid 39989] [client 93.158.213.25:43136] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agN2B42K3wZDsNji3MwmXQAAABg"]
[Wed May 13 02:48:41.776558 2026] [:error] [pid 40061:tid 40081] [client 93.158.213.25:45608] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "agN2CbycIKt8hxHMBYsoOwAAANI"]
[Wed May 13 02:48:44.554653 2026] [:error] [pid 42143:tid 42152] [client 93.158.213.25:45618] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agN2DES2WmK92iCO2L1g1QAAAUU"]
[Wed May 13 02:48:46.998556 2026] [:error] [pid 21242:tid 21270] [client 93.158.213.25:42136] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "agN2Dszeh8JWZob6PnJbaQAAAZg"]
[Wed May 13 02:48:49.639578 2026] [:error] [pid 21242:tid 21269] [client 93.158.213.25:42144] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "agN2Eczeh8JWZob6PnJbbQAAAZc"]
[Wed May 13 02:48:52.260175 2026] [:error] [pid 21242:tid 21258] [client 93.158.213.25:42152] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agN2FMzeh8JWZob6PnJbbgAAAYw"]
[Wed May 13 02:48:54.843348 2026] [:error] [pid 21242:tid 21257] [client 93.158.213.25:42164] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "agN2Fszeh8JWZob6PnJbcgAAAYs"]
[Wed May 13 02:48:57.240070 2026] [:error] [pid 55559:tid 55623] [client 93.158.213.25:36782] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "agN2Gdj0hVMLJAOI_fzbNwAAAQU"]
[Wed May 13 02:48:59.777922 2026] [:error] [pid 21242:tid 21248] [client 93.158.213.25:36786] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "agN2G8zeh8JWZob6PnJbeAAAAYI"]
[Wed May 13 02:49:02.459457 2026] [:error] [pid 21242:tid 21267] [client 93.158.213.25:36794] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agN2Hszeh8JWZob6PnJbfgAAAZU"]
[Wed May 13 02:49:04.890698 2026] [:error] [pid 39958:tid 40029] [client 93.158.213.25:36796] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "agN2IOVI9FVDxXB2Xxib6gAAAIo"]
[Wed May 13 02:49:07.294940 2026] [:error] [pid 42143:tid 42158] [client 93.158.213.25:42608] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "agN2I0S2WmK92iCO2L1g3gAAAUs"]
[Wed May 13 02:49:09.803768 2026] [:error] [pid 40061:tid 40071] [client 93.158.213.25:42614] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agN2JbycIKt8hxHMBYsoTQAAAMg"]
[Wed May 13 02:49:12.457354 2026] [:error] [pid 42143:tid 42156] [client 93.158.213.25:42626] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "agN2KES2WmK92iCO2L1g4QAAAUk"]
[Wed May 13 02:49:15.011090 2026] [:error] [pid 39957:tid 40014] [client 93.158.213.25:42638] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "agN2K-AfHHyq0DBh5BKzjwAAAFY"]
[Wed May 13 02:49:17.582997 2026] [:error] [pid 42143:tid 42160] [client 93.158.213.25:41540] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "agN2LUS2WmK92iCO2L1g5QAAAU0"]
[Wed May 13 02:49:19.848688 2026] [:error] [pid 55559:tid 55617] [client 93.158.213.25:41552] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "agN2L9j0hVMLJAOI_fzbTwAAAQA"]
[Wed May 13 02:49:22.431492 2026] [:error] [pid 21242:tid 21260] [client 93.158.213.25:41554] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agN2Mszeh8JWZob6PnJbmwAAAY4"]
[Wed May 13 02:49:24.813553 2026] [:error] [pid 42143:tid 42171] [client 93.158.213.25:41558] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "agN2NES2WmK92iCO2L1g5wAAAVg"]
[Wed May 13 02:49:27.288367 2026] [:error] [pid 42143:tid 42152] [client 93.158.213.25:57932] [client 93.158.213.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "agN2N0S2WmK92iCO2L1g7QAAAUU"]
[Wed May 13 03:10:56.262003 2026] [:error] [pid 39956:tid 39967] [client 185.62.91.55:9615] [client 185.62.91.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.62.91.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agN7QI2K3wZDsNji3MwobAAAAAI"]
[Wed May 13 03:11:06.692143 2026] [:error] [pid 55559:tid 55645] [client 185.62.91.55:9538] [client 185.62.91.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.62.91.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agN7Stj0hVMLJAOI_fzeOAAAARg"]
[Wed May 13 03:11:18.538349 2026] [:error] [pid 42143:tid 42169] [client 185.62.91.55:11026] [client 185.62.91.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.62.91.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agN7VkS2WmK92iCO2L1mEwAAAVY"]
[Wed May 13 03:11:29.262574 2026] [:error] [pid 42143:tid 42153] [client 185.62.91.55:11072] [client 185.62.91.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.62.91.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agN7YUS2WmK92iCO2L1mFQAAAUY"]
[Wed May 13 03:11:39.888922 2026] [:error] [pid 21242:tid 21249] [client 185.62.91.55:9707] [client 185.62.91.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.62.91.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agN7a8zeh8JWZob6PnJjtQAAAYM"]
[Wed May 13 04:34:45.004619 2026] [:error] [pid 23787:tid 23864] [client 43.153.102.138:39548] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agOO5R1cs5wE7VT6wiqN5wAAAJA"]
[Wed May 13 04:34:58.655374 2026] [:error] [pid 23782:tid 23825] [client 206.189.91.190:46860] [client 206.189.91.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "agOO8iBrKFYHXUGnR-pn2QAAAEQ"]
[Wed May 13 06:20:00.502487 2026] [:error] [pid 3259:tid 3271] [client 105.235.131.168:57368] [client 105.235.131.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.131.168, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agOnkOWJB4YwcPVLeAqD4gAAAQo"]
[Wed May 13 06:20:11.302622 2026] [:error] [pid 23887:tid 23914] [client 105.235.131.168:57937] [client 105.235.131.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.131.168, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agOnm9SKmvZJZkXBFDDxlgAAANM"]
[Wed May 13 07:07:06.157197 2026] [:error] [pid 3259:tid 3264] [client 43.157.181.189:37968] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agOymuWJB4YwcPVLeAqTUwAAAQM"]
[Wed May 13 08:10:06.259379 2026] [:error] [pid 3259:tid 3265] [client 191.96.67.111:3528] [client 191.96.67.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.96.67.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agPBXuWJB4YwcPVLeAqhKgAAAQQ"]
[Wed May 13 08:10:16.256473 2026] [:error] [pid 3259:tid 3283] [client 191.96.67.111:47504] [client 191.96.67.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.96.67.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agPBaOWJB4YwcPVLeAqhMAAAARY"]
[Wed May 13 08:10:27.195095 2026] [:error] [pid 23787:tid 23872] [client 191.96.67.111:56383] [client 191.96.67.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.96.67.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agPBcx1cs5wE7VT6wiqwxAAAAJg"]
[Wed May 13 08:10:38.177193 2026] [:error] [pid 23887:tid 23900] [client 191.96.67.111:12204] [client 191.96.67.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.96.67.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agPBftSKmvZJZkXBFDARXgAAAMU"]
[Wed May 13 08:10:49.072177 2026] [:error] [pid 23782:tid 23844] [client 191.96.67.111:17315] [client 191.96.67.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.96.67.111, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agPBiSBrKFYHXUGnR-qF3QAAAFc"]
[Wed May 13 08:42:30.092419 2026] [:error] [pid 23787:tid 23858] [client 119.91.20.139:41300] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agPI9h1cs5wE7VT6wiq2dgAAAIo"]
[Wed May 13 10:09:49.927610 2026] [:error] [pid 23787:tid 23856] [client 43.159.132.207:35856] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agPdbR1cs5wE7VT6wirIrgAAAIg"]
[Wed May 13 11:32:56.950035 2026] [:error] [pid 23887:tid 23906] [client 190.107.95.210:53910] [client 190.107.95.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.107.95.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agPw6NSKmvZJZkXBFDBbNwAAAMs"]
[Wed May 13 11:33:07.404527 2026] [:error] [pid 23782:tid 23834] [client 190.107.95.210:54405] [client 190.107.95.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.107.95.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agPw8yBrKFYHXUGnR-qnIQAAAE0"]
[Wed May 13 11:33:18.243399 2026] [:error] [pid 23780:tid 23810] [client 190.107.95.210:54966] [client 190.107.95.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.107.95.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agPw_nXgOibPjrXgeTBk2QAAABA"]
[Wed May 13 11:33:29.082864 2026] [:error] [pid 23787:tid 23853] [client 190.107.95.210:55388] [client 190.107.95.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.107.95.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agPxCR1cs5wE7VT6wiraAAAAAIU"]
[Wed May 13 11:33:40.054571 2026] [:error] [pid 23787:tid 23866] [client 190.107.95.210:55814] [client 190.107.95.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.107.95.210, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agPxFB1cs5wE7VT6wiraDAAAAJI"]
[Wed May 13 12:38:09.942116 2026] [:error] [pid 23782:tid 23826] [client 170.106.143.6:36088] [client 170.106.143.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agQAMSBrKFYHXUGnR-q3ZAAAAEU"]
[Wed May 13 15:32:03.452738 2026] [:error] [pid 3259:tid 3277] [client 101.33.66.34:57674] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agQo8-WJB4YwcPVLeAoarAAAARA"]
[Wed May 13 18:03:57.928619 2026] [:error] [pid 45289:tid 45293] [client 49.51.252.146:51228] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agRMjYOEpVhwFIe0NzgaKQAAAYA"]
[Wed May 13 18:37:38.931008 2026] [:error] [pid 55745:tid 55776] [client 203.192.252.20:56982] [client 203.192.252.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.192.252.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRUcgzqD9WDZdTELeIRcwAAAsE"]
[Wed May 13 18:37:49.649949 2026] [:error] [pid 23782:tid 23827] [client 203.192.252.20:57570] [client 203.192.252.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.192.252.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRUfSBrKFYHXUGnR-r3bAAAAEY"]
[Wed May 13 18:38:00.445246 2026] [:error] [pid 55745:tid 55792] [client 203.192.252.20:57983] [client 203.192.252.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.192.252.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRUiAzqD9WDZdTELeIRiwAAAtE"]
[Wed May 13 18:38:11.185753 2026] [:error] [pid 45289:tid 45294] [client 203.192.252.20:58392] [client 203.192.252.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.192.252.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRUk4OEpVhwFIe0NzgjYAAAAYE"]
[Wed May 13 18:38:21.955434 2026] [:error] [pid 23782:tid 23841] [client 203.192.252.20:58822] [client 203.192.252.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.192.252.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRUnSBrKFYHXUGnR-r3gAAAAFQ"]
[Wed May 13 19:17:56.290250 2026] [:error] [pid 23782:tid 23825] [client 177.7.182.119:64464] [client 177.7.182.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.7.182.119, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRd5CBrKFYHXUGnR-r9WAAAAEQ"]
[Wed May 13 19:18:07.131414 2026] [:error] [pid 27332:tid 27351] [client 177.7.182.119:65013] [client 177.7.182.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.7.182.119, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRd746Y5F_V9bmyC4bm8QAAAVE"]
[Wed May 13 19:18:17.799573 2026] [:error] [pid 55715:tid 55722] [client 177.7.182.119:65430] [client 177.7.182.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.7.182.119, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRd-XrHYVtSiFfOVKgUewAAAkU"]
[Wed May 13 19:18:28.672987 2026] [:error] [pid 55744:tid 55759] [client 177.7.182.119:49368] [client 177.7.182.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.7.182.119, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agReBAwbbCCudzl3BmmmZQAAAos"]
[Wed May 13 19:51:31.403538 2026] [:error] [pid 55644:tid 55665] [client 116.240.149.7:63073] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "agRlwyL_V0N1iPYYj0-tDwAAAdM"]
[Wed May 13 19:51:43.952633 2026] [:error] [pid 27332:tid 27344] [client 116.240.149.7:62394] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "agRlz46Y5F_V9bmyC4brcgAAAUo"]
[Wed May 13 19:51:59.503134 2026] [:error] [pid 45289:tid 45313] [client 116.240.149.7:64140] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "agRl34OEpVhwFIe0NzgtfwAAAZQ"]
[Wed May 13 19:52:10.803959 2026] [:error] [pid 23780:tid 23811] [client 116.240.149.7:60739] [client 116.240.149.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "agRl6nXgOibPjrXgeTCSHgAAABE"]
[Wed May 13 20:04:37.658220 2026] [:error] [pid 27332:tid 27338] [client 94.103.87.20:37612] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "agRo1Y6Y5F_V9bmyC4btPwAAAUQ"]
[Wed May 13 20:04:41.610298 2026] [:error] [pid 23782:tid 23842] [client 94.103.87.20:36894] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "agRo2SBrKFYHXUGnR-oI3QAAAFU"]
[Wed May 13 20:04:45.281442 2026] [:error] [pid 45289:tid 45293] [client 94.103.87.20:47856] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agRo3YOEpVhwFIe0NzgvSwAAAYA"]
[Wed May 13 20:04:48.938578 2026] [:error] [pid 55644:tid 55646] [client 94.103.87.20:47864] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "agRo4CL_V0N1iPYYj0-tjAAAAcA"]
[Wed May 13 20:04:52.819865 2026] [:error] [pid 23782:tid 23834] [client 94.103.87.20:47454] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "agRo5CBrKFYHXUGnR-oJVwAAAE0"]
[Wed May 13 20:04:56.829077 2026] [:error] [pid 55715:tid 55737] [client 94.103.87.20:47462] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "agRo6HrHYVtSiFfOVKgXqwAAAlQ"]
[Wed May 13 20:05:00.611838 2026] [:error] [pid 55679:tid 55684] [client 94.103.87.20:47478] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "agRo7KvvigowSOGkp44cLAAAAgM"]
[Wed May 13 20:05:04.306047 2026] [:error] [pid 55679:tid 55704] [client 94.103.87.20:35428] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "agRo8KvvigowSOGkp44cLgAAAhc"]
[Wed May 13 20:05:08.135891 2026] [:error] [pid 55745:tid 55782] [client 94.103.87.20:35432] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agRo9AzqD9WDZdTELeIZKQAAAsc"]
[Wed May 13 20:05:11.853166 2026] [:error] [pid 3259:tid 3283] [client 94.103.87.20:43836] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "agRo9-WJB4YwcPVLeAox_AAAARY"]
[Wed May 13 20:05:15.795218 2026] [:error] [pid 23782:tid 23830] [client 94.103.87.20:43842] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agRo-yBrKFYHXUGnR-oJZAAAAEk"]
[Wed May 13 20:05:19.692984 2026] [:error] [pid 23782:tid 23825] [client 94.103.87.20:43856] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agRo_yBrKFYHXUGnR-oJZgAAAEQ"]
[Wed May 13 20:05:23.445645 2026] [:error] [pid 55644:tid 55657] [client 94.103.87.20:44372] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agRpAyL_V0N1iPYYj0-tjwAAAcs"]
[Wed May 13 20:05:27.204303 2026] [:error] [pid 55679:tid 55703] [client 94.103.87.20:44380] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "agRpB6vvigowSOGkp44cPwAAAhY"]
[Wed May 13 20:05:31.222136 2026] [:error] [pid 23782:tid 23838] [client 94.103.87.20:44396] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "agRpCyBrKFYHXUGnR-oJbQAAAFE"]
[Wed May 13 20:06:09.850523 2026] [:error] [pid 27332:tid 27341] [client 94.103.87.20:49058] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "agRpMY6Y5F_V9bmyC4bttQAAAUc"]
[Wed May 13 20:06:13.508698 2026] [:error] [pid 55715:tid 55738] [client 94.103.87.20:47010] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "agRpNXrHYVtSiFfOVKgXwgAAAlU"]
[Wed May 13 20:06:17.391573 2026] [:error] [pid 55715:tid 55720] [client 94.103.87.20:47024] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "agRpOXrHYVtSiFfOVKgXwwAAAkM"]
[Wed May 13 20:06:21.463418 2026] [:error] [pid 45289:tid 45301] [client 94.103.87.20:47030] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "agRpPYOEpVhwFIe0NzgwJgAAAYg"]
[Wed May 13 20:06:25.334597 2026] [:error] [pid 23782:tid 23833] [client 94.103.87.20:37354] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "agRpQSBrKFYHXUGnR-oJ7AAAAEw"]
[Wed May 13 20:06:29.227722 2026] [:error] [pid 55744:tid 55768] [client 94.103.87.20:37358] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "agRpRQwbbCCudzl3Bmmq1AAAApQ"]
[Wed May 13 20:06:33.276784 2026] [:error] [pid 55744:tid 55764] [client 94.103.87.20:59896] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "agRpSQwbbCCudzl3Bmmq2AAAApA"]
[Wed May 13 20:06:37.381577 2026] [:error] [pid 45289:tid 45311] [client 94.103.87.20:59904] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agRpTYOEpVhwFIe0NzgwOgAAAZI"]
[Wed May 13 20:06:41.120712 2026] [:error] [pid 45289:tid 45299] [client 94.103.87.20:59918] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agRpUYOEpVhwFIe0NzgwOwAAAYY"]
[Wed May 13 20:06:45.188273 2026] [:error] [pid 45289:tid 45308] [client 94.103.87.20:57208] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "agRpVYOEpVhwFIe0NzgwPgAAAY8"]
[Wed May 13 20:06:49.113977 2026] [:error] [pid 45289:tid 45296] [client 94.103.87.20:57222] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agRpWYOEpVhwFIe0NzgwQwAAAYM"]
[Wed May 13 20:06:53.105391 2026] [:error] [pid 55644:tid 55663] [client 94.103.87.20:44344] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "agRpXSL_V0N1iPYYj0-trwAAAdE"]
[Wed May 13 20:06:59.731223 2026] [:error] [pid 55745:tid 55797] [client 94.103.87.20:44346] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "agRpYwzqD9WDZdTELeIZegAAAtY"]
[Wed May 13 20:07:03.809872 2026] [:error] [pid 45289:tid 45304] [client 94.103.87.20:54280] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agRpZ4OEpVhwFIe0NzgwUQAAAYs"]
[Wed May 13 20:07:44.331496 2026] [:error] [pid 27332:tid 27346] [client 94.103.87.20:54290] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agRpkI6Y5F_V9bmyC4buBwAAAUw"]
[Wed May 13 20:07:48.500432 2026] [:error] [pid 45289:tid 45310] [client 94.103.87.20:35576] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "agRplIOEpVhwFIe0NzgwZwAAAZE"]
[Wed May 13 20:07:52.491794 2026] [:error] [pid 23782:tid 23837] [client 94.103.87.20:38364] [client 94.103.87.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "agRpmCBrKFYHXUGnR-oKpwAAAFA"]
[Wed May 13 20:10:23.536700 2026] [:error] [pid 55679:tid 55684] [client 176.65.139.229:57438] [client 176.65.139.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "agRqL6vvigowSOGkp44cfgAAAgM"]
[Wed May 13 20:48:24.489735 2026] [:error] [pid 11404:tid 11410] [client 102.219.155.9:25158] [client 102.219.155.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.219.155.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRzGGkMyjAfdbWSOlIFewAAAAI"]
[Wed May 13 20:48:35.765393 2026] [:error] [pid 11491:tid 11502] [client 102.219.155.9:53125] [client 102.219.155.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.219.155.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRzI6by7ZoYcsha3ZZ4DgAAAMk"]
[Wed May 13 20:49:16.717473 2026] [:error] [pid 11491:tid 11496] [client 102.219.155.9:46025] [client 102.219.155.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.219.155.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRzTKby7ZoYcsha3ZZ4YAAAAMM"]
[Wed May 13 20:49:27.187585 2026] [:error] [pid 11405:tid 11459] [client 102.219.155.9:49452] [client 102.219.155.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.219.155.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRzV81_HASP6LwsRXRmCgAAAFg"]
[Wed May 13 20:49:38.077104 2026] [:error] [pid 11405:tid 11438] [client 102.219.155.9:53806] [client 102.219.155.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.219.155.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agRzYs1_HASP6LwsRXRmDQAAAEM"]
[Wed May 13 21:35:14.743918 2026] [:error] [pid 12426:tid 12445] [client 106.54.62.156:57344] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agR-ErPw24RslX3LIcYmKgAAANE"]
[Wed May 13 21:53:28.795698 2026] [:error] [pid 12426:tid 12446] [client 170.254.110.200:18954] [client 170.254.110.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.254.110.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agSCWLPw24RslX3LIcYsNwAAANI"]
[Wed May 13 22:14:35.774790 2026] [:error] [pid 12338:tid 12390] [client 170.254.110.200:19309] [client 170.254.110.200] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agSHS8UJ87l42ffPr4wPawAAAFU"]
[Thu May 14 01:31:41.957696 2026] [:error] [pid 12426:tid 12437] [client 40.85.229.173:28638] [client 40.85.229.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agS1fbPw24RslX3LIcZlXAAAAMk"]
[Thu May 14 01:31:42.821991 2026] [:error] [pid 12340:tid 12406] [client 40.85.229.173:26081] [client 40.85.229.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agS1fsrxSPfvmN7BQjKzNwAAAIo"]
[Thu May 14 01:31:43.718831 2026] [:error] [pid 12340:tid 12420] [client 40.85.229.173:22036] [client 40.85.229.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agS1f8rxSPfvmN7BQjKzPAAAAJg"]
[Thu May 14 01:31:44.620922 2026] [:error] [pid 17873:tid 17893] [client 40.85.229.173:26742] [client 40.85.229.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agS1gPEqBQQrkyEyu_oqggAAARI"]
[Thu May 14 01:58:25.354792 2026] [:error] [pid 12340:tid 12409] [client 201.68.77.165:50941] [client 201.68.77.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.68.77.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agS7wcrxSPfvmN7BQjK7GwAAAI0"]
[Thu May 14 01:58:34.479285 2026] [:error] [pid 17873:tid 17903] [client 201.68.77.165:51236] [client 201.68.77.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.68.77.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agS7yvEqBQQrkyEyu_oxTAAAARY"]
[Thu May 14 01:58:46.116410 2026] [:error] [pid 12340:tid 12404] [client 201.68.77.165:51574] [client 201.68.77.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.68.77.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agS71srxSPfvmN7BQjK7OQAAAIg"]
[Thu May 14 01:58:57.702283 2026] [:error] [pid 12340:tid 12418] [client 201.68.77.165:51931] [client 201.68.77.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.68.77.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agS74crxSPfvmN7BQjK7ZAAAAJY"]
[Thu May 14 01:59:07.338453 2026] [:error] [pid 12340:tid 12396] [client 201.68.77.165:52206] [client 201.68.77.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.68.77.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agS768rxSPfvmN7BQjK7dQAAAIA"]
[Thu May 14 02:12:50.159157 2026] [:error] [pid 12340:tid 12402] [client 43.157.82.252:43552] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agS_IsrxSPfvmN7BQjLACAAAAIY"]
[Thu May 14 04:43:02.267358 2026] [:error] [pid 11690:tid 11714] [client 104.28.230.246:61151] [client 104.28.230.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTiVinxWuLN8Hptw8lcfwAAAM8"]
[Thu May 14 04:43:12.265033 2026] [:error] [pid 11690:tid 11712] [client 104.28.230.246:37454] [client 104.28.230.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTiYCnxWuLN8Hptw8lclAAAAM0"]
[Thu May 14 04:43:22.560175 2026] [:error] [pid 11581:tid 11614] [client 104.28.198.245:24485] [client 104.28.198.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTiav0vF48FbzpvQMV9vwAAABE"]
[Thu May 14 04:43:33.109324 2026] [:error] [pid 63033:tid 63051] [client 104.28.198.245:19112] [client 104.28.198.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTidVMY49UWn5BpqVYyRQAAARA"]
[Thu May 14 04:43:43.669485 2026] [:error] [pid 11588:tid 11665] [client 104.28.230.245:49257] [client 104.28.230.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTif9Ur21rOixkeGKb2-QAAAI0"]
[Thu May 14 04:43:54.189477 2026] [:error] [pid 63033:tid 63036] [client 104.28.198.245:26292] [client 104.28.198.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTiilMY49UWn5BpqVYyZQAAAQE"]
[Thu May 14 04:44:04.756067 2026] [:error] [pid 11581:tid 11606] [client 104.28.198.247:64861] [client 104.28.198.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTilP0vF48FbzpvQMV92wAAAAk"]
[Thu May 14 04:44:15.294634 2026] [:error] [pid 11588:tid 11671] [client 104.28.198.245:35185] [client 104.28.198.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTin9Ur21rOixkeGKb3IQAAAJM"]
[Thu May 14 04:44:25.864262 2026] [:error] [pid 11588:tid 11665] [client 104.28.198.247:17712] [client 104.28.198.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTiqdUr21rOixkeGKb3OgAAAI0"]
[Thu May 14 04:44:36.400393 2026] [:error] [pid 63033:tid 63055] [client 104.28.198.247:22745] [client 104.28.198.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTitFMY49UWn5BpqVYyqQAAARQ"]
[Thu May 14 04:44:47.008011 2026] [:error] [pid 11588:tid 11667] [client 104.28.198.245:15323] [client 104.28.198.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTiv9Ur21rOixkeGKb3TQAAAI8"]
[Thu May 14 04:44:57.527332 2026] [:error] [pid 11690:tid 11701] [client 104.28.230.245:51738] [client 104.28.230.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTiySnxWuLN8Hptw8ldhgAAAMI"]
[Thu May 14 04:45:39.701479 2026] [:error] [pid 11588:tid 11676] [client 104.28.230.247:20099] [client 104.28.230.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTi89Ur21rOixkeGKb3hAAAAJg"]
[Thu May 14 04:45:50.271457 2026] [:error] [pid 11588:tid 11659] [client 104.28.198.247:60484] [client 104.28.198.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTi_tUr21rOixkeGKb3jAAAAIc"]
[Thu May 14 04:46:00.782332 2026] [:error] [pid 11582:tid 11649] [client 104.28.198.247:51140] [client 104.28.198.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTjCPuw2cmFDpGcKhDLFgAAAFg"]
[Thu May 14 04:46:53.423769 2026] [:error] [pid 11582:tid 11631] [client 104.28.230.247:22201] [client 104.28.230.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTjPfuw2cmFDpGcKhDLLgAAAEY"]
[Thu May 14 04:47:14.563902 2026] [:error] [pid 11582:tid 11637] [client 104.28.230.245:45839] [client 104.28.230.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTjUvuw2cmFDpGcKhDLMQAAAEw"]
[Thu May 14 04:47:25.074645 2026] [:error] [pid 11582:tid 11645] [client 104.28.198.246:51748] [client 104.28.198.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTjXfuw2cmFDpGcKhDLNAAAAFQ"]
[Thu May 14 04:47:56.738565 2026] [:error] [pid 11588:tid 11670] [client 104.28.230.245:35910] [client 104.28.230.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTjfNUr21rOixkeGKb4HgAAAJI"]
[Thu May 14 04:50:45.858186 2026] [:error] [pid 63033:tid 63042] [client 104.28.230.246:37384] [client 104.28.230.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTkJVMY49UWn5BpqVY08AAAAQc"]
[Thu May 14 04:50:56.355587 2026] [:error] [pid 11582:tid 11633] [client 104.28.230.247:58710] [client 104.28.230.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTkMPuw2cmFDpGcKhDLmQAAAEg"]
[Thu May 14 04:51:06.929338 2026] [:error] [pid 63033:tid 63053] [client 104.28.230.245:58697] [client 104.28.230.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.245, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTkOlMY49UWn5BpqVY1BwAAARI"]
[Thu May 14 04:54:59.235281 2026] [:error] [pid 63033:tid 63036] [client 104.28.230.246:59633] [client 104.28.230.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTlI1MY49UWn5BpqVY2twAAAQE"]
[Thu May 14 04:56:02.560123 2026] [:error] [pid 11581:tid 11611] [client 104.28.230.246:37974] [client 104.28.230.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTlYv0vF48FbzpvQMWARAAAAA4"]
[Thu May 14 04:56:44.578572 2026] [:error] [pid 11588:tid 11676] [client 104.28.230.247:32680] [client 104.28.230.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTljNUr21rOixkeGKb6twAAAJg"]
[Thu May 14 04:58:19.899312 2026] [:error] [pid 11588:tid 11674] [client 104.28.230.247:20513] [client 104.28.230.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.230.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTl69Ur21rOixkeGKb7BQAAAJY"]
[Thu May 14 05:01:19.007055 2026] [:error] [pid 11581:tid 11608] [client 104.28.198.246:44793] [client 104.28.198.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTmn_0vF48FbzpvQMWAtAAAAAs"]
[Thu May 14 05:02:32.843819 2026] [:error] [pid 63033:tid 63042] [client 104.28.198.246:41163] [client 104.28.198.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTm6FMY49UWn5BpqVY5yQAAAQc"]
[Thu May 14 05:02:43.415157 2026] [:error] [pid 63033:tid 63042] [client 104.28.198.246:52080] [client 104.28.198.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.198.246, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agTm81MY49UWn5BpqVY50wAAAQc"]
[Thu May 14 05:56:17.635560 2026] [:error] [pid 11690:tid 11708] [client 107.189.10.248:50854] [client 107.189.10.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.10.248, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agTzgSnxWuLN8Hptw8lx5gAAAMk"]
[Thu May 14 05:56:18.442904 2026] [proxy_fcgi:error] [pid 11690:tid 11708] [client 107.189.10.248:50854] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu May 14 06:11:22.719474 2026] [:error] [pid 63033:tid 63052] [client 43.165.64.145:50341] [client 43.165.64.145] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:_wpnonce" required. [file "/usr/local/apache/modsecurity-cwaf/rules/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "agT3CVMY49UWn5BpqVZXzQAAARE"]
[Thu May 14 06:11:22.719678 2026] [proxy_fcgi:error] [pid 63033:tid 63052] (20014)Internal error (specific information not available): [client 43.165.64.145:50341] AH01075: Error dispatching request to : (passing brigade to output filters)
[Thu May 14 08:15:59.957533 2026] [:error] [pid 11582:tid 11633] [client 43.157.62.101:46210] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agUUP_uw2cmFDpGcKhDpiQAAAEg"]
[Thu May 14 10:37:42.261357 2026] [:error] [pid 11690:tid 11711] [client 49.234.192.248:33998] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agU1dinxWuLN8Hptw8nGgQAAAMw"]
[Thu May 14 10:54:44.942058 2026] [:error] [pid 11581:tid 11600] [client 170.106.163.84:59902] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agU5dP0vF48FbzpvQMWl6AAAAAM"]
[Thu May 14 12:30:19.088406 2026] [:error] [pid 11690:tid 11704] [client 192.96.159.129:65330] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "agVP2ynxWuLN8Hptw8neagAAAMU"]
[Thu May 14 13:05:42.776658 2026] [:error] [pid 63033:tid 63040] [client 79.52.232.49:49195] [client 79.52.232.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.52.232.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agVYJlMY49UWn5BpqVa-SwAAAQU"]
[Thu May 14 13:05:52.881676 2026] [:error] [pid 11582:tid 11636] [client 79.52.232.49:49726] [client 79.52.232.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.52.232.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agVYMPuw2cmFDpGcKhAHowAAAEs"]
[Thu May 14 13:06:03.514991 2026] [:error] [pid 47673:tid 47693] [client 79.52.232.49:50059] [client 79.52.232.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.52.232.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agVYO_CGe4cIn3sh5k3zuAAAAVI"]
[Thu May 14 13:06:14.001158 2026] [:error] [pid 47673:tid 47689] [client 79.52.232.49:50392] [client 79.52.232.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.52.232.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agVYRvCGe4cIn3sh5k3zwQAAAU4"]
[Thu May 14 13:06:24.547833 2026] [:error] [pid 11588:tid 11664] [client 79.52.232.49:50715] [client 79.52.232.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.52.232.49, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agVYUNUr21rOixkeGKZKhAAAAIw"]
[Thu May 14 14:20:17.814230 2026] [:error] [pid 63033:tid 63046] [client 103.179.50.72:60624] [client 103.179.50.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.50.72, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agVpoVMY49UWn5BpqVbWXAAAAQs"]
[Thu May 14 14:20:28.261024 2026] [:error] [pid 11690:tid 11699] [client 103.179.50.72:61158] [client 103.179.50.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.50.72, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agVprCnxWuLN8Hptw8kCbwAAAMA"]
[Thu May 14 14:20:38.746157 2026] [:error] [pid 11690:tid 11700] [client 103.179.50.72:61474] [client 103.179.50.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.50.72, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agVptinxWuLN8Hptw8kCewAAAME"]
[Thu May 14 14:20:49.158888 2026] [:error] [pid 47721:tid 47732] [client 103.179.50.72:61762] [client 103.179.50.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.50.72, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agVpwXEmh7_G0hfOa6vHOgAAAYk"]
[Thu May 14 14:20:59.622865 2026] [:error] [pid 11582:tid 11635] [client 103.179.50.72:62104] [client 103.179.50.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.50.72, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agVpy_uw2cmFDpGcKhAZ5wAAAEo"]
[Thu May 14 15:30:07.992653 2026] [:error] [pid 63033:tid 63052] [client 117.254.33.161:40940] [client 117.254.33.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.254.33.161, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agV5_1MY49UWn5BpqVbfXgAAARE"]
[Thu May 14 15:38:38.259455 2026] [:error] [pid 63033:tid 63051] [client 52.139.38.158:62610] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agV7_lMY49UWn5BpqVbgPwAAARA"]
[Thu May 14 15:38:39.056656 2026] [:error] [pid 11588:tid 11676] [client 52.139.38.158:62647] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agV7_9Ur21rOixkeGKaB7AAAAJg"]
[Thu May 14 15:38:39.588372 2026] [:error] [pid 63033:tid 63050] [client 52.139.38.158:62600] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agV7_1MY49UWn5BpqVbgQQAAAQ8"]
[Thu May 14 15:38:40.157336 2026] [:error] [pid 47673:tid 47675] [client 52.139.38.158:62330] [client 52.139.38.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "agV8APCGe4cIn3sh5k0P8gAAAUA"]
[Thu May 14 16:15:05.709083 2026] [:error] [pid 11581:tid 11615] [client 117.194.98.139:52142] [client 117.194.98.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.98.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWEif0vF48FbzpvQMXQzgAAABI"]
[Thu May 14 16:15:15.660173 2026] [:error] [pid 63033:tid 63050] [client 117.194.98.139:52749] [client 117.194.98.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.98.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWEk1MY49UWn5BpqVbkIgAAAQ8"]
[Thu May 14 16:15:26.179174 2026] [:error] [pid 47673:tid 47699] [client 117.194.98.139:53142] [client 117.194.98.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.98.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWEnvCGe4cIn3sh5k0THwAAAVg"]
[Thu May 14 16:15:36.689214 2026] [:error] [pid 11582:tid 11634] [client 117.194.98.139:53541] [client 117.194.98.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.98.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWEqPuw2cmFDpGcKhAk0wAAAEk"]
[Thu May 14 16:15:47.215294 2026] [:error] [pid 11588:tid 11670] [client 117.194.98.139:53931] [client 117.194.98.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.98.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWEs9Ur21rOixkeGKaHIgAAAJI"]
[Thu May 14 16:15:57.648073 2026] [:error] [pid 11581:tid 11612] [client 117.194.98.139:54328] [client 117.194.98.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.98.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWEvf0vF48FbzpvQMXQ9QAAAA8"]
[Thu May 14 16:38:25.186054 2026] [:error] [pid 11690:tid 11721] [client 122.174.247.143:56006] [client 122.174.247.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.174.247.143, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWKASnxWuLN8Hptw8kVAwAAANY"]
[Thu May 14 16:38:35.267303 2026] [:error] [pid 47673:tid 47694] [client 122.174.247.143:56406] [client 122.174.247.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.174.247.143, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWKC_CGe4cIn3sh5k0VEQAAAVM"]
[Thu May 14 16:38:45.743515 2026] [:error] [pid 11588:tid 11675] [client 122.174.247.143:56730] [client 122.174.247.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.174.247.143, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWKFdUr21rOixkeGKaJrgAAAJc"]
[Thu May 14 16:38:56.255031 2026] [:error] [pid 11581:tid 11597] [client 122.174.247.143:57064] [client 122.174.247.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.174.247.143, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWKIP0vF48FbzpvQMXVVQAAAAA"]
[Thu May 14 16:39:06.857543 2026] [:error] [pid 11690:tid 11710] [client 122.174.247.143:57398] [client 122.174.247.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.174.247.143, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWKKinxWuLN8Hptw8kVGgAAAMs"]
[Thu May 14 16:45:49.894604 2026] [:error] [pid 47721:tid 47741] [client 69.164.206.232:49972] [client 69.164.206.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.164.206.232, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agWLvXEmh7_G0hfOa6vpvAAAAZI"]
[Thu May 14 16:45:52.030067 2026] [proxy_fcgi:error] [pid 47721:tid 47741] [client 69.164.206.232:49972] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu May 14 16:45:52.358285 2026] [:error] [pid 47721:tid 47730] [client 69.164.206.232:49972] [client 69.164.206.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.164.206.232, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agWLwHEmh7_G0hfOa6vpvwAAAYc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu May 14 16:45:53.300745 2026] [proxy_fcgi:error] [pid 47721:tid 47730] [client 69.164.206.232:49972] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu May 14 17:10:21.763794 2026] [:error] [pid 11690:tid 11714] [client 183.83.234.113:62362] [client 183.83.234.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.83.234.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWRfSnxWuLN8Hptw8kX6AAAAM8"]
[Thu May 14 17:10:32.790149 2026] [:error] [pid 63033:tid 63046] [client 183.83.234.113:62652] [client 183.83.234.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.83.234.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWRiFMY49UWn5BpqVbo1QAAAQs"]
[Thu May 14 17:10:43.866510 2026] [:error] [pid 11582:tid 11637] [client 183.83.234.113:61444] [client 183.83.234.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.83.234.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWRk_uw2cmFDpGcKhAnxAAAAEw"]
[Thu May 14 17:10:54.742475 2026] [:error] [pid 11588:tid 11663] [client 183.83.234.113:62516] [client 183.83.234.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.83.234.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWRntUr21rOixkeGKaM9gAAAIs"]
[Thu May 14 17:11:05.431419 2026] [:error] [pid 11581:tid 11621] [client 183.83.234.113:62329] [client 183.83.234.113] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.83.234.113, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWRqf0vF48FbzpvQMXb7QAAABg"]
[Thu May 14 17:52:19.229000 2026] [:error] [pid 47721:tid 47730] [client 47.251.53.97:48922] [client 47.251.53.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.251.53.97, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agWbU3Emh7_G0hfOa6v00gAAAYc"]
[Thu May 14 17:52:20.082579 2026] [proxy_fcgi:error] [pid 47721:tid 47730] [client 47.251.53.97:48922] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu May 14 17:52:20.397743 2026] [:error] [pid 47721:tid 47741] [client 47.251.53.97:48922] [client 47.251.53.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.251.53.97, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agWbVHEmh7_G0hfOa6v01AAAAZI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu May 14 17:52:21.363297 2026] [proxy_fcgi:error] [pid 47721:tid 47741] [client 47.251.53.97:48922] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu May 14 18:23:18.415149 2026] [:error] [pid 11588:tid 11660] [client 24.199.108.111:38536] [client 24.199.108.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 24.199.108.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agWiltUr21rOixkeGKaaoQAAAIg"]
[Thu May 14 18:23:19.238585 2026] [proxy_fcgi:error] [pid 11588:tid 11660] [client 24.199.108.111:38536] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Thu May 14 18:23:19.560992 2026] [:error] [pid 11588:tid 11673] [client 24.199.108.111:38536] [client 24.199.108.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 24.199.108.111, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agWil9Ur21rOixkeGKaaogAAAJU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu May 14 18:23:20.520350 2026] [proxy_fcgi:error] [pid 11588:tid 11673] [client 24.199.108.111:38536] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Thu May 14 18:24:51.426809 2026] [:error] [pid 11581:tid 11618] [client 43.153.26.165:40360] [client 43.153.26.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agWi8_0vF48FbzpvQMX3FwAAABU"]
[Thu May 14 18:47:58.127197 2026] [:error] [pid 11581:tid 11606] [client 102.89.82.209:31218] [client 102.89.82.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.89.82.209, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWoXv0vF48FbzpvQMX_mgAAAAk"]
[Thu May 14 18:48:08.703082 2026] [:error] [pid 11582:tid 11637] [client 102.89.82.209:31219] [client 102.89.82.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.89.82.209, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWoaPuw2cmFDpGcKhAvUAAAAEw"]
[Thu May 14 18:48:19.208207 2026] [:error] [pid 11588:tid 11667] [client 102.89.82.209:31220] [client 102.89.82.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.89.82.209, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWoc9Ur21rOixkeGKafngAAAI8"]
[Thu May 14 18:48:29.873500 2026] [:error] [pid 11581:tid 11609] [client 102.89.82.209:31221] [client 102.89.82.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.89.82.209, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWoff0vF48FbzpvQMX_xwAAAAw"]
[Thu May 14 18:48:40.302832 2026] [:error] [pid 11581:tid 11601] [client 102.89.82.209:31222] [client 102.89.82.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.89.82.209, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWoiP0vF48FbzpvQMX_4QAAAAQ"]
[Thu May 14 19:15:39.843622 2026] [:error] [pid 47721:tid 47727] [client 94.202.15.23:56578] [client 94.202.15.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.202.15.23, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agWu23Emh7_G0hfOa6sJwAAAAYQ"]
[Thu May 14 20:09:44.534561 2026] [:error] [pid 47721:tid 47739] [client 94.202.15.23:50565] [client 94.202.15.23] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agW7iHEmh7_G0hfOa6saQgAAAZA"]
[Thu May 14 20:10:12.997892 2026] [:error] [pid 11581:tid 11603] [client 94.202.15.23:50672] [client 94.202.15.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.202.15.23, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agW7pP0vF48FbzpvQMUc7AAAAAY"]
[Thu May 14 20:21:58.890432 2026] [:error] [pid 11581:tid 11613] [client 27.0.221.178:13052] [client 27.0.221.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.0.221.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agW-Zv0vF48FbzpvQMUewAAAABA"]
[Thu May 14 20:22:09.346838 2026] [:error] [pid 47721:tid 47726] [client 27.0.221.178:8763] [client 27.0.221.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.0.221.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agW-cXEmh7_G0hfOa6scDgAAAYM"]
[Thu May 14 20:22:19.862378 2026] [:error] [pid 47721:tid 47742] [client 27.0.221.178:60197] [client 27.0.221.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.0.221.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agW-e3Emh7_G0hfOa6scEwAAAZM"]
[Thu May 14 20:22:30.375551 2026] [:error] [pid 11588:tid 11656] [client 27.0.221.178:32789] [client 27.0.221.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.0.221.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agW-htUr21rOixkeGKavIwAAAIQ"]
[Thu May 14 20:22:40.902571 2026] [:error] [pid 63033:tid 63057] [client 27.0.221.178:3323] [client 27.0.221.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.0.221.178, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agW-kFMY49UWn5BpqVb-1wAAARY"]
[Thu May 14 21:43:55.949008 2026] [:error] [pid 11581:tid 11609] [client 103.174.152.203:33292] [client 103.174.152.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.174.152.203, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agXRm_0vF48FbzpvQMU0IwAAAAw"]
[Thu May 14 21:43:56.758287 2026] [proxy_fcgi:error] [pid 11581:tid 11609] [client 103.174.152.203:33292] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 15 01:59:10.938639 2026] [:error] [pid 63033:tid 63055] [client 43.167.157.80:32798] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agYNblMY49UWn5BpqVYZzAAAARQ"]
[Fri May 15 02:04:11.344212 2026] [:error] [pid 11581:tid 11606] [client 103.253.178.3:45042] [client 103.253.178.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.253.178.3, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agYOm_0vF48FbzpvQMVw1AAAAAk"]
[Fri May 15 02:04:13.478023 2026] [proxy_fcgi:error] [pid 11581:tid 11606] [client 103.253.178.3:45042] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 15 02:04:13.864307 2026] [:error] [pid 11581:tid 11617] [client 103.253.178.3:45042] [client 103.253.178.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.253.178.3, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agYOnf0vF48FbzpvQMVw1gAAABQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 02:04:14.832682 2026] [proxy_fcgi:error] [pid 11581:tid 11617] [client 103.253.178.3:45042] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 03:16:49.851297 2026] [:error] [pid 47673:tid 47691] [client 37.186.113.194:39298] [client 37.186.113.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.186.113.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agYfofCGe4cIn3sh5k1H-QAAAVA"]
[Fri May 15 03:16:59.891345 2026] [:error] [pid 47673:tid 47682] [client 37.186.113.194:39705] [client 37.186.113.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.186.113.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agYfq_CGe4cIn3sh5k1IBAAAAUc"]
[Fri May 15 03:17:10.461771 2026] [:error] [pid 11581:tid 11610] [client 37.186.113.194:40050] [client 37.186.113.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.186.113.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agYftv0vF48FbzpvQMV-8AAAAA0"]
[Fri May 15 03:17:21.141992 2026] [:error] [pid 11690:tid 11716] [client 37.186.113.194:40375] [client 37.186.113.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.186.113.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agYfwSnxWuLN8Hptw8lbjwAAANE"]
[Fri May 15 03:17:31.667279 2026] [:error] [pid 11581:tid 11615] [client 37.186.113.194:40694] [client 37.186.113.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.186.113.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agYfy_0vF48FbzpvQMV--QAAABI"]
[Fri May 15 05:06:28.505203 2026] [:error] [pid 1295:tid 1305] [client 175.143.90.37:57174] [client 175.143.90.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.143.90.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agY5VNmMhqLvs0GYixnPRQAAAMc"]
[Fri May 15 05:06:38.764524 2026] [:error] [pid 1189:tid 1232] [client 175.143.90.37:57742] [client 175.143.90.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.143.90.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agY5Xge36qIGegR4kclEkwAAAEc"]
[Fri May 15 05:06:49.346566 2026] [:error] [pid 1189:tid 1231] [client 175.143.90.37:58137] [client 175.143.90.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.143.90.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agY5aQe36qIGegR4kclEmwAAAEY"]
[Fri May 15 05:06:59.804090 2026] [:error] [pid 1190:tid 1252] [client 175.143.90.37:58532] [client 175.143.90.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.143.90.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agY5c9qiXrD7hne4gFaT6wAAAIA"]
[Fri May 15 05:07:10.576954 2026] [:error] [pid 50531:tid 50555] [client 175.143.90.37:58937] [client 175.143.90.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.143.90.37, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agY5fh3WbFwE6voqGzqUOwAAARY"]
[Fri May 15 07:14:31.746152 2026] [:error] [pid 50531:tid 50537] [client 52.161.74.195:37263] [client 52.161.74.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.161.74.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp/xmlrpc.php"] [unique_id "agZXVx3WbFwE6voqGzq0XwAAAQQ"]
[Fri May 15 07:23:17.070936 2026] [:error] [pid 1190:tid 1262] [client 79.137.64.41:46680] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "agZZZdqiXrD7hne4gFaoBwAAAIo"]
[Fri May 15 07:23:19.484669 2026] [:error] [pid 1295:tid 1312] [client 79.137.64.41:57964] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "agZZZ9mMhqLvs0GYixnnGgAAAM4"]
[Fri May 15 07:23:22.093480 2026] [:error] [pid 50531:tid 50535] [client 79.137.64.41:43736] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agZZah3WbFwE6voqGzq2dgAAAQI"]
[Fri May 15 07:23:24.718785 2026] [:error] [pid 50531:tid 50541] [client 79.137.64.41:43746] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "agZZbB3WbFwE6voqGzq2eQAAAQg"]
[Fri May 15 07:23:27.177907 2026] [:error] [pid 1189:tid 1241] [client 79.137.64.41:43754] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "agZZbwe36qIGegR4kclWtgAAAFA"]
[Fri May 15 07:23:29.454651 2026] [:error] [pid 1295:tid 1321] [client 79.137.64.41:43768] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "agZZcdmMhqLvs0GYixnnHAAAANc"]
[Fri May 15 07:23:31.852950 2026] [:error] [pid 1295:tid 1309] [client 79.137.64.41:33750] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "agZZc9mMhqLvs0GYixnnHgAAAMs"]
[Fri May 15 07:23:34.485013 2026] [:error] [pid 50531:tid 50542] [client 79.137.64.41:33752] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "agZZdh3WbFwE6voqGzq2fwAAAQk"]
[Fri May 15 07:23:37.144457 2026] [:error] [pid 1295:tid 1316] [client 79.137.64.41:33762] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agZZedmMhqLvs0GYixnnIAAAANI"]
[Fri May 15 07:23:39.599206 2026] [:error] [pid 1295:tid 1311] [client 79.137.64.41:33772] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "agZZe9mMhqLvs0GYixnnIgAAAM0"]
[Fri May 15 07:23:42.066996 2026] [:error] [pid 1188:tid 1203] [client 79.137.64.41:58184] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agZZftY68iW8yuNkNzPV7QAAAAY"]
[Fri May 15 07:23:44.681745 2026] [:error] [pid 50531:tid 50545] [client 79.137.64.41:58190] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agZZgB3WbFwE6voqGzq2gwAAAQw"]
[Fri May 15 07:23:46.981592 2026] [:error] [pid 1189:tid 1228] [client 79.137.64.41:58198] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agZZgge36qIGegR4kclWvwAAAEM"]
[Fri May 15 07:23:49.331517 2026] [:error] [pid 1188:tid 1201] [client 79.137.64.41:58212] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "agZZhdY68iW8yuNkNzPV-QAAAAQ"]
[Fri May 15 07:23:51.800121 2026] [:error] [pid 1188:tid 1208] [client 79.137.64.41:60386] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "agZZh9Y68iW8yuNkNzPV-gAAAAs"]
[Fri May 15 07:23:54.388097 2026] [:error] [pid 50531:tid 50548] [client 79.137.64.41:60398] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "agZZih3WbFwE6voqGzq2iQAAAQ8"]
[Fri May 15 07:23:56.790992 2026] [:error] [pid 1295:tid 1304] [client 79.137.64.41:60412] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "agZZjNmMhqLvs0GYixnnJAAAAMY"]
[Fri May 15 07:23:59.639118 2026] [:error] [pid 1189:tid 1231] [client 79.137.64.41:60426] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "agZZjwe36qIGegR4kclWwwAAAEY"]
[Fri May 15 07:24:02.210086 2026] [:error] [pid 50531:tid 50545] [client 79.137.64.41:37008] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "agZZkh3WbFwE6voqGzq2jwAAAQw"]
[Fri May 15 07:24:04.898768 2026] [:error] [pid 50531:tid 50536] [client 79.137.64.41:37022] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "agZZlB3WbFwE6voqGzq2lQAAAQM"]
[Fri May 15 07:24:07.600019 2026] [:error] [pid 1295:tid 1312] [client 79.137.64.41:37026] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "agZZl9mMhqLvs0GYixnnKgAAAM4"]
[Fri May 15 07:24:09.991608 2026] [:error] [pid 1295:tid 1311] [client 79.137.64.41:37030] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "agZZmdmMhqLvs0GYixnnMgAAAM0"]
[Fri May 15 07:24:12.645329 2026] [:error] [pid 50531:tid 50554] [client 79.137.64.41:49742] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "agZZnB3WbFwE6voqGzq21gAAARU"]
[Fri May 15 07:25:16.984775 2026] [:error] [pid 1189:tid 1243] [client 79.137.64.41:55204] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agZZ3Ae36qIGegR4kclXCgAAAFI"]
[Fri May 15 07:25:19.398118 2026] [:error] [pid 50531:tid 50539] [client 79.137.64.41:42858] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "agZZ3x3WbFwE6voqGzq3dAAAAQY"]
[Fri May 15 07:25:21.742090 2026] [:error] [pid 1189:tid 1242] [client 79.137.64.41:54404] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agZZ4Qe36qIGegR4kclXDAAAAFE"]
[Fri May 15 07:25:24.278461 2026] [:error] [pid 50531:tid 50536] [client 79.137.64.41:54412] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "agZZ5B3WbFwE6voqGzq3fAAAAQM"]
[Fri May 15 07:25:26.763249 2026] [:error] [pid 1189:tid 1228] [client 79.137.64.41:54414] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "agZZ5ge36qIGegR4kclXDgAAAEM"]
[Fri May 15 07:25:29.251216 2026] [:error] [pid 1190:tid 1258] [client 79.137.64.41:54422] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agZZ6dqiXrD7hne4gFaoWgAAAIY"]
[Fri May 15 07:25:31.715472 2026] [:error] [pid 1295:tid 1301] [client 79.137.64.41:33244] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "agZZ69mMhqLvs0GYixnnewAAAMM"]
[Fri May 15 07:25:34.164477 2026] [:error] [pid 1295:tid 1306] [client 79.137.64.41:33256] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "agZZ7tmMhqLvs0GYixnnfwAAAMg"]
[Fri May 15 07:25:36.610677 2026] [:error] [pid 1188:tid 1207] [client 79.137.64.41:33266] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "agZZ8NY68iW8yuNkNzPWKQAAAAo"]
[Fri May 15 07:25:39.077725 2026] [:error] [pid 1295:tid 1309] [client 79.137.64.41:33278] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agZZ89mMhqLvs0GYixnnhAAAAMs"]
[Fri May 15 07:25:41.367010 2026] [:error] [pid 50531:tid 50542] [client 79.137.64.41:50116] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "agZZ9R3WbFwE6voqGzq34QAAAQk"]
[Fri May 15 07:25:43.829340 2026] [:error] [pid 50531:tid 50551] [client 79.137.64.41:50124] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "agZZ9x3WbFwE6voqGzq35wAAARI"]
[Fri May 15 07:25:46.295897 2026] [:error] [pid 50531:tid 50537] [client 79.137.64.41:50134] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agZZ-h3WbFwE6voqGzq37wAAAQQ"]
[Fri May 15 07:25:48.609434 2026] [:error] [pid 50531:tid 50540] [client 79.137.64.41:50138] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "agZZ_B3WbFwE6voqGzq39gAAAQc"]
[Fri May 15 07:25:51.052964 2026] [:error] [pid 50531:tid 50550] [client 79.137.64.41:43704] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "agZZ_x3WbFwE6voqGzq3_AAAARE"]
[Fri May 15 07:26:02.276498 2026] [:error] [pid 1190:tid 1268] [client 79.137.64.41:41764] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "agZaCtqiXrD7hne4gFaoagAAAJA"]
[Fri May 15 07:26:04.730663 2026] [:error] [pid 50531:tid 50538] [client 79.137.64.41:41776] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "agZaDB3WbFwE6voqGzq4FwAAAQU"]
[Fri May 15 07:26:07.185946 2026] [:error] [pid 50531:tid 50557] [client 79.137.64.41:41790] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agZaDx3WbFwE6voqGzq4HQAAARg"]
[Fri May 15 07:26:09.480175 2026] [:error] [pid 50531:tid 50533] [client 79.137.64.41:41798] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "agZaER3WbFwE6voqGzq4IgAAAQA"]
[Fri May 15 07:26:11.918632 2026] [:error] [pid 1189:tid 1243] [client 79.137.64.41:58948] [client 79.137.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "agZaEwe36qIGegR4kclXHwAAAFI"]
[Fri May 15 07:28:44.963524 2026] [:error] [pid 1190:tid 1265] [client 34.18.97.136:53594] [client 34.18.97.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agZarNqiXrD7hne4gFao0AAAAI0"]
[Fri May 15 07:55:28.018833 2026] [:error] [pid 1189:tid 1247] [client 2.56.29.220:53886] [client 2.56.29.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.56.29.220, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agZg8Ae36qIGegR4kclaaAAAAFY"]
[Fri May 15 07:55:28.890190 2026] [proxy_fcgi:error] [pid 1189:tid 1247] [client 2.56.29.220:53886] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 15 07:55:29.261892 2026] [:error] [pid 1189:tid 1228] [client 2.56.29.220:53886] [client 2.56.29.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.56.29.220, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agZg8Qe36qIGegR4kclaawAAAEM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 07:55:30.289463 2026] [proxy_fcgi:error] [pid 1189:tid 1228] [client 2.56.29.220:53886] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 08:26:26.199252 2026] [:error] [pid 50531:tid 50544] [client 34.94.206.13:58226] [client 34.94.206.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "agZoMh3WbFwE6voqGzrHdwAAAQs"]
[Fri May 15 08:26:26.202247 2026] [:error] [pid 51234:tid 51236] [client 34.94.206.13:58256] [client 34.94.206.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.docker"] [unique_id "agZoMt72N9CbeiqcqgOfgAAAAUA"]
[Fri May 15 08:26:26.225609 2026] [:error] [pid 51234:tid 51255] [client 34.94.206.13:58242] [client 34.94.206.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "agZoMt72N9CbeiqcqgOfgQAAAVM"]
[Fri May 15 08:26:26.334297 2026] [:error] [pid 51234:tid 51238] [client 34.94.206.13:58252] [client 34.94.206.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/admin/.env"] [unique_id "agZoMt72N9CbeiqcqgOfggAAAUI"]
[Fri May 15 08:26:26.379525 2026] [:error] [pid 51234:tid 51257] [client 34.94.206.13:58270] [client 34.94.206.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "agZoMt72N9CbeiqcqgOfgwAAAVU"]
[Fri May 15 08:26:26.430049 2026] [:error] [pid 51234:tid 51237] [client 34.94.206.13:58278] [client 34.94.206.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.dev.local"] [unique_id "agZoMt72N9CbeiqcqgOfhAAAAUE"]
[Fri May 15 08:26:26.582143 2026] [:error] [pid 1190:tid 1254] [client 34.94.206.13:58290] [client 34.94.206.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.dev"] [unique_id "agZoMtqiXrD7hne4gFaxQwAAAII"]
[Fri May 15 08:26:26.699124 2026] [:error] [pid 1189:tid 1229] [client 34.94.206.13:58286] [client 34.94.206.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app/.env.local"] [unique_id "agZoMge36qIGegR4kclfTQAAAEQ"]
[Fri May 15 08:26:26.995624 2026] [:error] [pid 1190:tid 1266] [client 34.94.206.13:58304] [client 34.94.206.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.development.local"] [unique_id "agZoMtqiXrD7hne4gFaxRAAAAI4"]
[Fri May 15 08:26:27.003988 2026] [:error] [pid 51234:tid 51256] [client 34.94.206.13:58298] [client 34.94.206.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "agZoM972N9CbeiqcqgOfhwAAAVQ"]
[Fri May 15 09:02:35.884930 2026] [:error] [pid 51234:tid 51246] [client 94.6.155.13:1540] [client 94.6.155.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.6.155.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agZwq972N9CbeiqcqgPEmQAAAUo"]
[Fri May 15 09:02:46.585624 2026] [:error] [pid 51234:tid 51241] [client 94.6.155.13:1629] [client 94.6.155.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.6.155.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agZwtt72N9CbeiqcqgPEwAAAAUU"]
[Fri May 15 09:02:56.240402 2026] [:error] [pid 1295:tid 1305] [client 94.6.155.13:1596] [client 94.6.155.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.6.155.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agZwwNmMhqLvs0GYixkSNgAAAMc"]
[Fri May 15 09:03:06.440189 2026] [:error] [pid 1189:tid 1242] [client 94.6.155.13:1590] [client 94.6.155.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.6.155.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agZwyge36qIGegR4kcl1ywAAAFE"]
[Fri May 15 09:03:18.319128 2026] [:error] [pid 50531:tid 50549] [client 94.6.155.13:1655] [client 94.6.155.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.6.155.13, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agZw1h3WbFwE6voqGzrc2AAAARA"]
[Fri May 15 09:47:02.249953 2026] [:error] [pid 50531:tid 50546] [client 34.87.170.223:47572] [client 34.87.170.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agZ7Fh3WbFwE6voqGzrhtQAAAQ0"]
[Fri May 15 10:12:25.672317 2026] [:error] [pid 1295:tid 1312] [client 34.151.218.198:60290] [client 34.151.218.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app/.env.local"] [unique_id "agaBCdmMhqLvs0GYixkeQAAAAM4"]
[Fri May 15 10:12:25.672575 2026] [:error] [pid 1189:tid 1240] [client 34.151.218.198:60278] [client 34.151.218.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.docker"] [unique_id "agaBCQe36qIGegR4kcmEzQAAAE8"]
[Fri May 15 10:12:25.674123 2026] [:error] [pid 50531:tid 50541] [client 34.151.218.198:60264] [client 34.151.218.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "agaBCR3WbFwE6voqGzrlwAAAAQg"]
[Fri May 15 10:12:25.995073 2026] [:error] [pid 1295:tid 1311] [client 34.151.218.198:60300] [client 34.151.218.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/admin/.env"] [unique_id "agaBCdmMhqLvs0GYixkeQQAAAM0"]
[Fri May 15 10:12:26.041899 2026] [:error] [pid 1190:tid 1252] [client 34.151.218.198:60312] [client 34.151.218.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.dev.local"] [unique_id "agaBCtqiXrD7hne4gFbLGAAAAIA"]
[Fri May 15 10:12:26.207074 2026] [:error] [pid 1190:tid 1253] [client 34.151.218.198:60320] [client 34.151.218.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.development.local"] [unique_id "agaBCtqiXrD7hne4gFbLGQAAAIE"]
[Fri May 15 10:12:26.287923 2026] [:error] [pid 1295:tid 1315] [client 34.151.218.198:60324] [client 34.151.218.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "agaBCtmMhqLvs0GYixkeQgAAANE"]
[Fri May 15 10:12:26.307492 2026] [:error] [pid 50531:tid 50546] [client 34.151.218.198:60328] [client 34.151.218.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "agaBCh3WbFwE6voqGzrlwQAAAQ0"]
[Fri May 15 10:12:26.313395 2026] [:error] [pid 1189:tid 1226] [client 34.151.218.198:60334] [client 34.151.218.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "agaBCge36qIGegR4kcmEzgAAAEE"]
[Fri May 15 10:12:26.525531 2026] [:error] [pid 51234:tid 51237] [client 34.151.218.198:60348] [client 34.151.218.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env.dev"] [unique_id "agaBCt72N9CbeiqcqgPZtQAAAUE"]
[Fri May 15 10:14:34.295493 2026] [autoindex:error] [pid 1189:tid 1234] [client 80.241.214.49:60263] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 15 10:38:47.824904 2026] [:error] [pid 51234:tid 51244] [client 34.129.205.167:54392] [client 34.129.205.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agaHN972N9CbeiqcqgPhvAAAAUg"]
[Fri May 15 10:43:42.045477 2026] [:error] [pid 1190:tid 1272] [client 172.212.171.56:23644] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xminie.php"] [unique_id "agaIXtqiXrD7hne4gFbOUQAAAJQ"]
[Fri May 15 10:43:43.902946 2026] [:error] [pid 1189:tid 1243] [client 172.212.171.56:22917] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xminie.php"] [unique_id "agaIXwe36qIGegR4kcmKPAAAAFI"]
[Fri May 15 10:43:45.518307 2026] [:error] [pid 51234:tid 51260] [client 172.212.171.56:23616] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xminie.php"] [unique_id "agaIYd72N9CbeiqcqgPi8AAAAVg"]
[Fri May 15 10:43:48.073583 2026] [:error] [pid 1188:tid 1205] [client 172.212.171.56:23660] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xminie.php"] [unique_id "agaIZNY68iW8yuNkNzP0yAAAAAg"]
[Fri May 15 10:43:49.119114 2026] [:error] [pid 50531:tid 50549] [client 172.212.171.56:22943] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "agaIZR3WbFwE6voqGzrpKQAAARA"]
[Fri May 15 10:43:50.225374 2026] [:error] [pid 51234:tid 51247] [client 172.212.171.56:23626] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "agaIZt72N9CbeiqcqgPi9wAAAUs"]
[Fri May 15 10:43:50.911722 2026] [:error] [pid 51234:tid 51239] [client 172.212.171.56:22942] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "agaIZt72N9CbeiqcqgPi-QAAAUM"]
[Fri May 15 10:43:52.065703 2026] [:error] [pid 51234:tid 51259] [client 172.212.171.56:23652] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aaa.php"] [unique_id "agaIaN72N9CbeiqcqgPi_QAAAVc"]
[Fri May 15 10:43:53.415651 2026] [:error] [pid 51234:tid 51251] [client 172.212.171.56:23665] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "agaIad72N9CbeiqcqgPjAQAAAU8"]
[Fri May 15 10:43:56.074681 2026] [:error] [pid 1190:tid 1276] [client 172.212.171.56:23635] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "agaIbNqiXrD7hne4gFbOVAAAAJg"]
[Fri May 15 10:43:56.928055 2026] [:error] [pid 1190:tid 1265] [client 172.212.171.56:23671] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "agaIbNqiXrD7hne4gFbOVwAAAI0"]
[Fri May 15 10:43:57.849166 2026] [:error] [pid 1190:tid 1269] [client 172.212.171.56:23667] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "agaIbdqiXrD7hne4gFbOWQAAAJE"]
[Fri May 15 10:43:59.840925 2026] [:error] [pid 51234:tid 51236] [client 172.212.171.56:23630] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "agaIb972N9CbeiqcqgPjCgAAAUA"]
[Fri May 15 10:44:01.432916 2026] [:error] [pid 1295:tid 1302] [client 172.212.171.56:22915] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "agaIcdmMhqLvs0GYixkjDAAAAMQ"]
[Fri May 15 10:44:02.987811 2026] [:error] [pid 51234:tid 51258] [client 172.212.171.56:23641] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "agaIct72N9CbeiqcqgPjDAAAAVY"]
[Fri May 15 10:44:04.534385 2026] [:error] [pid 51234:tid 51251] [client 172.212.171.56:22932] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws81.php"] [unique_id "agaIdN72N9CbeiqcqgPjDgAAAU8"]
[Fri May 15 10:44:06.147387 2026] [:error] [pid 1190:tid 1271] [client 172.212.171.56:23662] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "agaIdtqiXrD7hne4gFbOXgAAAJM"]
[Fri May 15 10:44:07.756889 2026] [:error] [pid 51234:tid 51253] [client 172.212.171.56:22912] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "agaId972N9CbeiqcqgPjFwAAAVE"]
[Fri May 15 10:44:08.886853 2026] [:error] [pid 1189:tid 1233] [client 172.212.171.56:23624] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "agaIeAe36qIGegR4kcmKQwAAAEg"]
[Fri May 15 10:44:10.765552 2026] [:error] [pid 51234:tid 51256] [client 172.212.171.56:23664] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "agaIet72N9CbeiqcqgPjGwAAAVQ"]
[Fri May 15 10:44:12.337292 2026] [:error] [pid 1190:tid 1274] [client 172.212.171.56:23633] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "agaIfNqiXrD7hne4gFbOYAAAAJY"]
[Fri May 15 10:44:14.026611 2026] [:error] [pid 50531:tid 50547] [client 172.212.171.56:8502] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "agaIfh3WbFwE6voqGzrpLQAAAQ4"]
[Fri May 15 10:44:15.710883 2026] [:error] [pid 50531:tid 50556] [client 172.212.171.56:23678] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "agaIfx3WbFwE6voqGzrpMAAAARc"]
[Fri May 15 10:44:17.363949 2026] [:error] [pid 1189:tid 1237] [client 172.212.171.56:23677] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "agaIgQe36qIGegR4kcmKRgAAAEw"]
[Fri May 15 10:44:19.143304 2026] [:error] [pid 1295:tid 1317] [client 172.212.171.56:23656] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "agaIg9mMhqLvs0GYixkjEQAAANM"]
[Fri May 15 10:44:22.591781 2026] [:error] [pid 1189:tid 1226] [client 172.212.171.56:23618] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "agaIhge36qIGegR4kcmKRwAAAEE"]
[Fri May 15 10:44:25.563319 2026] [:error] [pid 1188:tid 1214] [client 172.212.171.56:8450] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "agaIidY68iW8yuNkNzP00wAAABE"]
[Fri May 15 10:44:27.254344 2026] [:error] [pid 1188:tid 1221] [client 172.212.171.56:22956] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/11.php"] [unique_id "agaIi9Y68iW8yuNkNzP01QAAABg"]
[Fri May 15 10:44:28.368196 2026] [:error] [pid 1188:tid 1220] [client 172.212.171.56:22926] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/77.php"] [unique_id "agaIjNY68iW8yuNkNzP01wAAABc"]
[Fri May 15 10:44:29.550913 2026] [:error] [pid 51234:tid 51254] [client 172.212.171.56:22934] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/77.php"] [unique_id "agaIjd72N9CbeiqcqgPjMQAAAVI"]
[Fri May 15 10:44:30.436426 2026] [:error] [pid 1189:tid 1236] [client 172.212.171.56:8499] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/77.php"] [unique_id "agaIjge36qIGegR4kcmKTAAAAEs"]
[Fri May 15 10:44:31.311110 2026] [:error] [pid 50531:tid 50548] [client 172.212.171.56:23646] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/77.php"] [unique_id "agaIjx3WbFwE6voqGzrpMwAAAQ8"]
[Fri May 15 10:44:32.708531 2026] [:error] [pid 1295:tid 1314] [client 172.212.171.56:22939] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x402.php"] [unique_id "agaIkNmMhqLvs0GYixkjEgAAANA"]
[Fri May 15 10:44:34.030133 2026] [:error] [pid 51234:tid 51250] [client 172.212.171.56:23627] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x402.php"] [unique_id "agaIkt72N9CbeiqcqgPjNgAAAU4"]
[Fri May 15 10:44:35.036332 2026] [:error] [pid 1189:tid 1242] [client 172.212.171.56:22924] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x402.php"] [unique_id "agaIkwe36qIGegR4kcmKUwAAAFE"]
[Fri May 15 10:44:35.819518 2026] [:error] [pid 50531:tid 50535] [client 172.212.171.56:22973] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/x402.php"] [unique_id "agaIkx3WbFwE6voqGzrpNQAAAQI"]
[Fri May 15 10:44:37.914929 2026] [:error] [pid 1295:tid 1315] [client 172.212.171.56:23666] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/themes.php"] [unique_id "agaIldmMhqLvs0GYixkjFQAAANE"]
[Fri May 15 10:44:44.436694 2026] [:error] [pid 1295:tid 1301] [client 172.212.171.56:23647] [client 172.212.171.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "agaInNmMhqLvs0GYixkjGwAAAMM"]
[Fri May 15 10:44:55.193781 2026] [:error] [pid 1295:tid 1309] [client 172.212.171.56:22916] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "agaIp9mMhqLvs0GYixkjKgAAAMs"]
[Fri May 15 10:44:56.904883 2026] [:error] [pid 51234:tid 51246] [client 172.212.171.56:23623] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "agaIqN72N9CbeiqcqgPjTwAAAUo"]
[Fri May 15 10:44:58.532057 2026] [:error] [pid 1189:tid 1247] [client 172.212.171.56:22935] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "agaIqge36qIGegR4kcmKWQAAAFY"]
[Fri May 15 10:45:01.430668 2026] [:error] [pid 1189:tid 1238] [client 172.212.171.56:23674] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "agaIrQe36qIGegR4kcmKWwAAAE0"]
[Fri May 15 10:45:02.765587 2026] [:error] [pid 1188:tid 1206] [client 172.212.171.56:23654] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "agaIrtY68iW8yuNkNzP05QAAAAk"]
[Fri May 15 10:45:03.531994 2026] [:error] [pid 1189:tid 1249] [client 172.212.171.56:23640] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "agaIrwe36qIGegR4kcmKXgAAAFg"]
[Fri May 15 10:45:04.579752 2026] [:error] [pid 1295:tid 1316] [client 172.212.171.56:23619] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "agaIsNmMhqLvs0GYixkjLAAAANI"]
[Fri May 15 10:45:05.415515 2026] [:error] [pid 50531:tid 50546] [client 172.212.171.56:8448] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "agaIsR3WbFwE6voqGzrpOwAAAQ0"]
[Fri May 15 10:45:06.384984 2026] [:error] [pid 51234:tid 51252] [client 172.212.171.56:23631] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "agaIst72N9CbeiqcqgPjWAAAAVA"]
[Fri May 15 10:45:07.531271 2026] [:error] [pid 51234:tid 51258] [client 172.212.171.56:23659] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "agaIs972N9CbeiqcqgPjWQAAAVY"]
[Fri May 15 10:45:08.165985 2026] [:error] [pid 51234:tid 51236] [client 172.212.171.56:22913] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "agaItN72N9CbeiqcqgPjWgAAAUA"]
[Fri May 15 10:45:09.626129 2026] [:error] [pid 51234:tid 51251] [client 172.212.171.56:22921] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "agaItd72N9CbeiqcqgPjWwAAAU8"]
[Fri May 15 10:45:10.919270 2026] [:error] [pid 51234:tid 51257] [client 172.212.171.56:23625] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "agaItt72N9CbeiqcqgPjXAAAAVU"]
[Fri May 15 10:45:11.749940 2026] [:error] [pid 51234:tid 51241] [client 172.212.171.56:22918] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "agaIt972N9CbeiqcqgPjXQAAAUU"]
[Fri May 15 10:45:12.451147 2026] [:error] [pid 1189:tid 1232] [client 172.212.171.56:23632] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "agaIuAe36qIGegR4kcmKZAAAAEc"]
[Fri May 15 10:45:13.719893 2026] [:error] [pid 51234:tid 51244] [client 172.212.171.56:23675] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "agaIud72N9CbeiqcqgPjXwAAAUg"]
[Fri May 15 10:45:14.985668 2026] [:error] [pid 1190:tid 1259] [client 172.212.171.56:23622] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "agaIutqiXrD7hne4gFbOdQAAAIc"]
[Fri May 15 10:45:16.027140 2026] [:error] [pid 51234:tid 51240] [client 172.212.171.56:22970] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "agaIvN72N9CbeiqcqgPjYAAAAUQ"]
[Fri May 15 10:45:17.009146 2026] [:error] [pid 50531:tid 50543] [client 172.212.171.56:8449] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "agaIvR3WbFwE6voqGzrpQAAAAQo"]
[Fri May 15 10:45:18.219513 2026] [:error] [pid 50531:tid 50535] [client 172.212.171.56:23629] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pp.php"] [unique_id "agaIvh3WbFwE6voqGzrpQQAAAQI"]
[Fri May 15 10:45:19.161559 2026] [:error] [pid 51234:tid 51239] [client 172.212.171.56:22953] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agaIv972N9CbeiqcqgPjYgAAAUM"]
[Fri May 15 10:45:20.574917 2026] [:error] [pid 1190:tid 1255] [client 172.212.171.56:22925] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agaIwNqiXrD7hne4gFbOegAAAIM"]
[Fri May 15 10:45:21.393484 2026] [:error] [pid 50531:tid 50551] [client 172.212.171.56:23642] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agaIwR3WbFwE6voqGzrpQgAAARI"]
[Fri May 15 10:45:22.078294 2026] [:error] [pid 51234:tid 51255] [client 172.212.171.56:22964] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agaIwt72N9CbeiqcqgPjYwAAAVM"]
[Fri May 15 10:45:23.086985 2026] [:error] [pid 51234:tid 51248] [client 172.212.171.56:22958] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "agaIw972N9CbeiqcqgPjZQAAAUw"]
[Fri May 15 10:45:24.072961 2026] [:error] [pid 51234:tid 51242] [client 172.212.171.56:22928] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "agaIxN72N9CbeiqcqgPjZgAAAUY"]
[Fri May 15 10:45:25.119734 2026] [:error] [pid 1189:tid 1236] [client 172.212.171.56:22795] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "agaIxQe36qIGegR4kcmKaAAAAEs"]
[Fri May 15 10:45:27.623943 2026] [:error] [pid 1295:tid 1317] [client 172.212.171.56:8483] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "agaIx9mMhqLvs0GYixkjNAAAANM"]
[Fri May 15 10:45:29.559883 2026] [:error] [pid 1189:tid 1238] [client 172.212.171.56:22974] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "agaIyQe36qIGegR4kcmKagAAAE0"]
[Fri May 15 10:45:30.472067 2026] [:error] [pid 51234:tid 51236] [client 172.212.171.56:22962] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "agaIyt72N9CbeiqcqgPjaQAAAUA"]
[Fri May 15 10:45:32.156743 2026] [:error] [pid 51234:tid 51251] [client 172.212.171.56:22920] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "agaIzN72N9CbeiqcqgPjawAAAU8"]
[Fri May 15 10:45:34.285926 2026] [:error] [pid 1189:tid 1233] [client 172.212.171.56:23638] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a7.php"] [unique_id "agaIzge36qIGegR4kcmKcgAAAEg"]
[Fri May 15 10:45:37.071743 2026] [:error] [pid 1189:tid 1246] [client 172.212.171.56:23669] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roksad1.php"] [unique_id "agaI0Qe36qIGegR4kcmKdgAAAFU"]
[Fri May 15 10:45:38.937504 2026] [:error] [pid 1188:tid 1204] [client 172.212.171.56:23653] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roksad1.php"] [unique_id "agaI0tY68iW8yuNkNzP06gAAAAc"]
[Fri May 15 10:45:42.360808 2026] [:error] [pid 1188:tid 1212] [client 172.212.171.56:23637] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roksad1.php"] [unique_id "agaI1tY68iW8yuNkNzP06wAAAA8"]
[Fri May 15 10:45:44.743494 2026] [:error] [pid 1189:tid 1225] [client 172.212.171.56:23628] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/roksad1.php"] [unique_id "agaI2Ae36qIGegR4kcmKgQAAAEA"]
[Fri May 15 10:45:46.436189 2026] [:error] [pid 1189:tid 1246] [client 172.212.171.56:23661] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axe.php"] [unique_id "agaI2ge36qIGegR4kcmKhAAAAFU"]
[Fri May 15 10:45:47.991313 2026] [:error] [pid 1189:tid 1227] [client 172.212.171.56:8486] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axe.php"] [unique_id "agaI2we36qIGegR4kcmKhwAAAEI"]
[Fri May 15 10:45:49.623504 2026] [:error] [pid 50531:tid 50539] [client 172.212.171.56:8462] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axe.php"] [unique_id "agaI3R3WbFwE6voqGzrpUQAAAQY"]
[Fri May 15 10:45:51.018765 2026] [:error] [pid 51234:tid 51246] [client 172.212.171.56:8475] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/axe.php"] [unique_id "agaI3972N9CbeiqcqgPjeAAAAUo"]
[Fri May 15 10:45:52.039875 2026] [:error] [pid 51234:tid 51239] [client 172.212.171.56:22950] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/de.php"] [unique_id "agaI4N72N9CbeiqcqgPjegAAAUM"]
[Fri May 15 10:45:53.392601 2026] [:error] [pid 1295:tid 1307] [client 172.212.171.56:23672] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/de.php"] [unique_id "agaI4dmMhqLvs0GYixkjOgAAAMk"]
[Fri May 15 10:46:09.549120 2026] [:error] [pid 51234:tid 51239] [client 172.212.171.56:8457] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geforce.php"] [unique_id "agaI8d72N9CbeiqcqgPjiwAAAUM"]
[Fri May 15 10:46:11.594358 2026] [:error] [pid 1295:tid 1320] [client 172.212.171.56:22961] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geforce.php"] [unique_id "agaI89mMhqLvs0GYixkjQQAAANY"]
[Fri May 15 10:46:12.911639 2026] [:error] [pid 1295:tid 1312] [client 172.212.171.56:22931] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geforce.php"] [unique_id "agaI9NmMhqLvs0GYixkjQwAAAM4"]
[Fri May 15 10:46:14.610434 2026] [:error] [pid 51234:tid 51245] [client 172.212.171.56:8476] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/geforce.php"] [unique_id "agaI9t72N9CbeiqcqgPjkQAAAUk"]
[Fri May 15 10:46:17.107698 2026] [:error] [pid 1189:tid 1248] [client 172.212.171.56:23650] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dostshell.php"] [unique_id "agaI-Qe36qIGegR4kcmKmQAAAFc"]
[Fri May 15 10:46:18.515568 2026] [:error] [pid 1190:tid 1253] [client 172.212.171.56:23636] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dostshell.php"] [unique_id "agaI-tqiXrD7hne4gFbOkQAAAIE"]
[Fri May 15 10:46:22.671636 2026] [:error] [pid 1190:tid 1268] [client 172.212.171.56:23643] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dostshell.php"] [unique_id "agaI_tqiXrD7hne4gFbOmAAAAJA"]
[Fri May 15 10:46:26.087612 2026] [:error] [pid 50531:tid 50555] [client 172.212.171.56:22954] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dostshell.php"] [unique_id "agaJAh3WbFwE6voqGzrpdwAAARY"]
[Fri May 15 10:46:28.622044 2026] [:error] [pid 50531:tid 50538] [client 172.212.171.56:23676] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "agaJBB3WbFwE6voqGzrpeQAAAQU"]
[Fri May 15 10:46:30.969050 2026] [:error] [pid 50531:tid 50553] [client 172.212.171.56:22947] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "agaJBh3WbFwE6voqGzrpgwAAARQ"]
[Fri May 15 10:46:32.682372 2026] [:error] [pid 1295:tid 1320] [client 172.212.171.56:8497] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "agaJCNmMhqLvs0GYixkjWAAAANY"]
[Fri May 15 10:46:34.814335 2026] [:error] [pid 1295:tid 1308] [client 172.212.171.56:22972] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "agaJCtmMhqLvs0GYixkjWgAAAMo"]
[Fri May 15 10:46:36.349325 2026] [:error] [pid 1295:tid 1301] [client 172.212.171.56:23648] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "agaJDNmMhqLvs0GYixkjXwAAAMM"]
[Fri May 15 10:46:37.325338 2026] [:error] [pid 1295:tid 1305] [client 172.212.171.56:8469] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "agaJDdmMhqLvs0GYixkjYQAAAMc"]
[Fri May 15 10:46:38.099100 2026] [:error] [pid 1295:tid 1314] [client 172.212.171.56:22950] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "agaJDtmMhqLvs0GYixkjZAAAANA"]
[Fri May 15 10:46:39.206726 2026] [:error] [pid 50531:tid 50556] [client 172.212.171.56:22955] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mar.php"] [unique_id "agaJDx3WbFwE6voqGzrpigAAARc"]
[Fri May 15 10:46:40.348589 2026] [:error] [pid 1189:tid 1225] [client 172.212.171.56:22959] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp1.php"] [unique_id "agaJEAe36qIGegR4kcmKqwAAAEA"]
[Fri May 15 10:46:44.293750 2026] [:error] [pid 1188:tid 1216] [client 172.212.171.56:8468] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp1.php"] [unique_id "agaJFNY68iW8yuNkNzP0_AAAABM"]
[Fri May 15 10:46:49.844951 2026] [:error] [pid 1295:tid 1298] [client 172.212.171.56:23679] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp1.php"] [unique_id "agaJGdmMhqLvs0GYixkjawAAAMA"]
[Fri May 15 10:46:54.254804 2026] [:error] [pid 1190:tid 1267] [client 172.212.171.56:23651] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp1.php"] [unique_id "agaJHtqiXrD7hne4gFbOvgAAAI8"]
[Fri May 15 10:46:59.969449 2026] [:error] [pid 1295:tid 1312] [client 172.212.171.56:22938] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "agaJI9mMhqLvs0GYixkjcAAAAM4"]
[Fri May 15 10:47:03.580715 2026] [:error] [pid 50531:tid 50543] [client 172.212.171.56:8498] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "agaJJx3WbFwE6voqGzrprAAAAQo"]
[Fri May 15 10:47:07.875951 2026] [:error] [pid 1295:tid 1318] [client 172.212.171.56:22975] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "agaJK9mMhqLvs0GYixkjdQAAANQ"]
[Fri May 15 10:47:27.399103 2026] [:error] [pid 1189:tid 1234] [client 172.212.171.56:22933] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "agaJPwe36qIGegR4kcmK-AAAAEk"]
[Fri May 15 10:47:34.294704 2026] [:error] [pid 50531:tid 50545] [client 172.212.171.56:23663] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "agaJRh3WbFwE6voqGzrpvgAAAQw"]
[Fri May 15 10:47:39.027780 2026] [:error] [pid 51234:tid 51255] [client 172.212.171.56:22812] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/7.php"] [unique_id "agaJS972N9CbeiqcqgPj7AAAAVM"]
[Fri May 15 10:47:44.558670 2026] [:error] [pid 1189:tid 1237] [client 172.212.171.56:22804] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "agaJUAe36qIGegR4kcmLEgAAAEw"]
[Fri May 15 10:47:47.220853 2026] [:error] [pid 1295:tid 1310] [client 172.212.171.56:8472] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "agaJU9mMhqLvs0GYixkjkwAAAMw"]
[Fri May 15 10:47:49.056299 2026] [:error] [pid 51234:tid 51246] [client 172.212.171.56:22840] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "agaJVd72N9CbeiqcqgPj_gAAAUo"]
[Fri May 15 10:47:51.200110 2026] [:error] [pid 51234:tid 51245] [client 172.212.171.56:23639] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "agaJV972N9CbeiqcqgPkAwAAAUk"]
[Fri May 15 10:47:52.687018 2026] [:error] [pid 1188:tid 1197] [client 172.212.171.56:8459] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxa.php"] [unique_id "agaJWNY68iW8yuNkNzP1JwAAAAA"]
[Fri May 15 10:47:54.008045 2026] [:error] [pid 1295:tid 1300] [client 172.212.171.56:22945] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxa.php"] [unique_id "agaJWtmMhqLvs0GYixkjpAAAAMI"]
[Fri May 15 10:47:55.714728 2026] [:error] [pid 1190:tid 1266] [client 172.212.171.56:23634] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxa.php"] [unique_id "agaJW9qiXrD7hne4gFbO4gAAAI4"]
[Fri May 15 10:47:57.275758 2026] [:error] [pid 1190:tid 1254] [client 172.212.171.56:22900] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxa.php"] [unique_id "agaJXdqiXrD7hne4gFbO5AAAAII"]
[Fri May 15 10:47:58.523479 2026] [:error] [pid 50531:tid 50549] [client 172.212.171.56:8453] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj11.php"] [unique_id "agaJXh3WbFwE6voqGzrp1QAAARA"]
[Fri May 15 10:47:59.954992 2026] [:error] [pid 1188:tid 1201] [client 172.212.171.56:8454] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj11.php"] [unique_id "agaJX9Y68iW8yuNkNzP1KAAAAAQ"]
[Fri May 15 10:48:01.300179 2026] [:error] [pid 1189:tid 1238] [client 172.212.171.56:22967] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj11.php"] [unique_id "agaJYQe36qIGegR4kcmLXwAAAE0"]
[Fri May 15 10:48:02.827282 2026] [:error] [pid 1190:tid 1261] [client 172.212.171.56:8455] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aj11.php"] [unique_id "agaJYtqiXrD7hne4gFbO6AAAAIk"]
[Fri May 15 10:48:06.623559 2026] [:error] [pid 1189:tid 1233] [client 172.212.171.56:8473] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "agaJZge36qIGegR4kcmLZgAAAEg"]
[Fri May 15 10:48:08.924276 2026] [:error] [pid 50531:tid 50544] [client 172.212.171.56:22941] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "agaJaB3WbFwE6voqGzrp3wAAAQs"]
[Fri May 15 10:48:10.273788 2026] [:error] [pid 1295:tid 1312] [client 172.212.171.56:22820] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "agaJatmMhqLvs0GYixkjuAAAAM4"]
[Fri May 15 10:48:14.083357 2026] [:error] [pid 51234:tid 51242] [client 172.212.171.56:8480] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "agaJbt72N9CbeiqcqgPkgAAAAUY"]
[Fri May 15 10:48:17.999203 2026] [:error] [pid 1189:tid 1233] [client 172.212.171.56:22940] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "agaJcQe36qIGegR4kcmLcQAAAEg"]
[Fri May 15 10:48:21.010997 2026] [:error] [pid 1189:tid 1232] [client 172.212.171.56:22960] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "agaJdQe36qIGegR4kcmLdwAAAEc"]
[Fri May 15 10:48:23.211792 2026] [:error] [pid 1295:tid 1322] [client 172.212.171.56:23657] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "agaJd9mMhqLvs0GYixkjwwAAANg"]
[Fri May 15 10:48:39.039612 2026] [:error] [pid 1295:tid 1311] [client 172.212.171.56:8452] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "agaJh9mMhqLvs0GYixkj5QAAAM0"]
[Fri May 15 10:48:40.163620 2026] [:error] [pid 1295:tid 1322] [client 172.212.171.56:22942] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "agaJiNmMhqLvs0GYixkj5wAAANg"]
[Fri May 15 10:48:42.957759 2026] [:error] [pid 51234:tid 51247] [client 172.212.171.56:22919] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "agaJit72N9CbeiqcqgPkmQAAAUs"]
[Fri May 15 10:48:44.953082 2026] [:error] [pid 51234:tid 51236] [client 172.212.171.56:22821] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "agaJjN72N9CbeiqcqgPknwAAAUA"]
[Fri May 15 10:48:47.431545 2026] [:error] [pid 51234:tid 51241] [client 172.212.171.56:23635] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "agaJj972N9CbeiqcqgPkpwAAAUU"]
[Fri May 15 10:48:50.649970 2026] [:error] [pid 1295:tid 1319] [client 172.212.171.56:8467] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "agaJktmMhqLvs0GYixkj9gAAANU"]
[Fri May 15 10:48:53.381935 2026] [:error] [pid 1295:tid 1299] [client 172.212.171.56:23671] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "agaJldmMhqLvs0GYixkj_AAAAME"]
[Fri May 15 10:48:54.460291 2026] [:error] [pid 50531:tid 50545] [client 172.212.171.56:23616] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f35.php"] [unique_id "agaJlh3WbFwE6voqGzrp5QAAAQw"]
[Fri May 15 10:48:56.153470 2026] [:error] [pid 1295:tid 1315] [client 172.212.171.56:8461] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "agaJmNmMhqLvs0GYixkj_gAAANE"]
[Fri May 15 10:48:56.912326 2026] [:error] [pid 1189:tid 1233] [client 172.212.171.56:8464] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "agaJmAe36qIGegR4kcmLpQAAAEg"]
[Fri May 15 10:48:58.710395 2026] [:error] [pid 1190:tid 1273] [client 172.212.171.56:23658] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "agaJmtqiXrD7hne4gFbO8AAAAJU"]
[Fri May 15 10:49:01.720506 2026] [:error] [pid 50531:tid 50547] [client 172.212.171.56:22868] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xwx1.php"] [unique_id "agaJnR3WbFwE6voqGzrp6gAAAQ4"]
[Fri May 15 10:49:03.174587 2026] [:error] [pid 51234:tid 51241] [client 172.212.171.56:22937] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "agaJn972N9CbeiqcqgPk7gAAAUU"]
[Fri May 15 10:49:05.268247 2026] [:error] [pid 1295:tid 1298] [client 172.212.171.56:22932] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "agaJodmMhqLvs0GYixkkBwAAAMA"]
[Fri May 15 10:49:06.498356 2026] [:error] [pid 1190:tid 1276] [client 172.212.171.56:22943] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "agaJotqiXrD7hne4gFbO9QAAAJg"]
[Fri May 15 10:49:08.351853 2026] [:error] [pid 1189:tid 1243] [client 172.212.171.56:22934] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "agaJpAe36qIGegR4kcmLwAAAAFI"]
[Fri May 15 10:49:09.303816 2026] [:error] [pid 51234:tid 51251] [client 172.212.171.56:22951] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "agaJpd72N9CbeiqcqgPk_AAAAU8"]
[Fri May 15 10:49:10.001309 2026] [:error] [pid 1188:tid 1209] [client 172.212.171.56:22917] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "agaJptY68iW8yuNkNzP1dAAAAAw"]
[Fri May 15 10:49:10.893499 2026] [:error] [pid 1189:tid 1237] [client 172.212.171.56:22922] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "agaJpge36qIGegR4kcmLxAAAAEw"]
[Fri May 15 10:49:12.303019 2026] [:error] [pid 1190:tid 1254] [client 172.212.171.56:23664] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "agaJqNqiXrD7hne4gFbO9wAAAII"]
[Fri May 15 10:49:14.472438 2026] [:error] [pid 1295:tid 1310] [client 172.212.171.56:23677] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "agaJqtmMhqLvs0GYixkkEAAAAMw"]
[Fri May 15 10:49:17.271930 2026] [:error] [pid 1189:tid 1236] [client 172.212.171.56:22912] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "agaJrQe36qIGegR4kcmLzwAAAEs"]
[Fri May 15 10:49:17.948250 2026] [:error] [pid 1295:tid 1312] [client 172.212.171.56:22944] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "agaJrdmMhqLvs0GYixkkFwAAAM4"]
[Fri May 15 10:49:18.883705 2026] [:error] [pid 1295:tid 1306] [client 172.212.171.56:23662] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "agaJrtmMhqLvs0GYixkkHAAAAMg"]
[Fri May 15 10:49:20.150605 2026] [:error] [pid 1189:tid 1231] [client 172.212.171.56:23670] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "agaJsAe36qIGegR4kcmL0wAAAEY"]
[Fri May 15 10:49:21.515913 2026] [:error] [pid 51234:tid 51241] [client 172.212.171.56:22926] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "agaJsd72N9CbeiqcqgPlIwAAAUU"]
[Fri May 15 10:49:22.868744 2026] [:error] [pid 1189:tid 1236] [client 172.212.171.56:23627] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "agaJsge36qIGegR4kcmL2wAAAEs"]
[Fri May 15 10:49:24.291601 2026] [:error] [pid 51234:tid 51240] [client 172.212.171.56:8460] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gecko.php"] [unique_id "agaJtN72N9CbeiqcqgPlLQAAAUQ"]
[Fri May 15 10:49:25.705606 2026] [:error] [pid 51234:tid 51259] [client 172.212.171.56:22808] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpxml.php"] [unique_id "agaJtd72N9CbeiqcqgPlMAAAAVc"]
[Fri May 15 10:49:26.486003 2026] [:error] [pid 1190:tid 1273] [client 172.212.171.56:22923] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpxml.php"] [unique_id "agaJttqiXrD7hne4gFbO-gAAAJU"]
[Fri May 15 10:49:27.950985 2026] [:error] [pid 1189:tid 1230] [client 172.212.171.56:22843] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpxml.php"] [unique_id "agaJtwe36qIGegR4kcmL4QAAAEU"]
[Fri May 15 10:49:29.989085 2026] [:error] [pid 50531:tid 50537] [client 172.212.171.56:22846] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wpxml.php"] [unique_id "agaJuR3WbFwE6voqGzrqAgAAAQQ"]
[Fri May 15 10:49:32.251877 2026] [:error] [pid 51234:tid 51246] [client 172.212.171.56:23618] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zo.php"] [unique_id "agaJvN72N9CbeiqcqgPlRwAAAUo"]
[Fri May 15 10:49:33.501158 2026] [:error] [pid 51234:tid 51239] [client 172.212.171.56:8505] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zo.php"] [unique_id "agaJvd72N9CbeiqcqgPlUgAAAUM"]
[Fri May 15 10:49:35.391738 2026] [:error] [pid 1188:tid 1218] [client 172.212.171.56:23623] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zo.php"] [unique_id "agaJv9Y68iW8yuNkNzP1ggAAABU"]
[Fri May 15 10:49:36.704325 2026] [:error] [pid 1295:tid 1319] [client 172.212.171.56:23626] [client 172.212.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zo.php"] [unique_id "agaJwNmMhqLvs0GYixkkLQAAANU"]
[Fri May 15 10:54:06.341394 2026] [:error] [pid 50531:tid 50553] [client 101.33.66.34:57826] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agaKzh3WbFwE6voqGzrq4wAAARQ"]
[Fri May 15 11:26:24.725863 2026] [:error] [pid 51234:tid 51250] [client 34.146.121.73:44298] [client 34.146.121.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agaSYN72N9CbeiqcqgPzGQAAAU4"]
[Fri May 15 11:57:56.141691 2026] [:error] [pid 1189:tid 1232] [client 34.24.216.85:43684] [client 34.24.216.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development.local"] [unique_id "agaZxAe36qIGegR4kcmbegAAAEc"]
[Fri May 15 11:57:56.590317 2026] [:error] [pid 1189:tid 1236] [client 34.24.216.85:43696] [client 34.24.216.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "agaZxAe36qIGegR4kcmbfAAAAEs"]
[Fri May 15 11:57:56.608250 2026] [:error] [pid 51234:tid 51255] [client 34.24.216.85:43702] [client 34.24.216.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev"] [unique_id "agaZxN72N9CbeiqcqgP7TgAAAVM"]
[Fri May 15 11:57:56.685598 2026] [:error] [pid 51234:tid 51248] [client 34.24.216.85:43704] [client 34.24.216.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env.local"] [unique_id "agaZxN72N9CbeiqcqgP7TwAAAUw"]
[Fri May 15 11:57:57.054698 2026] [:error] [pid 1190:tid 1253] [client 34.24.216.85:43760] [client 34.24.216.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev.local"] [unique_id "agaZxdqiXrD7hne4gFbXSgAAAIE"]
[Fri May 15 11:57:57.063223 2026] [:error] [pid 1295:tid 1318] [client 34.24.216.85:43722] [client 34.24.216.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.docker"] [unique_id "agaZxdmMhqLvs0GYixkvwQAAANQ"]
[Fri May 15 11:57:57.118365 2026] [:error] [pid 1189:tid 1237] [client 34.24.216.85:43730] [client 34.24.216.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "agaZxQe36qIGegR4kcmbfwAAAEw"]
[Fri May 15 11:57:57.119522 2026] [:error] [pid 1189:tid 1246] [client 34.24.216.85:43744] [client 34.24.216.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "agaZxQe36qIGegR4kcmbgAAAAFU"]
[Fri May 15 11:57:57.135293 2026] [:error] [pid 1189:tid 1244] [client 34.24.216.85:43718] [client 34.24.216.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "agaZxQe36qIGegR4kcmbgQAAAFM"]
[Fri May 15 11:57:57.162886 2026] [:error] [pid 1190:tid 1259] [client 34.24.216.85:43732] [client 34.24.216.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.env"] [unique_id "agaZxdqiXrD7hne4gFbXSwAAAIc"]
[Fri May 15 12:04:36.261651 2026] [:error] [pid 51234:tid 51248] [client 27.0.221.182:48669] [client 27.0.221.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.0.221.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agabVN72N9CbeiqcqgP9BAAAAUw"]
[Fri May 15 12:04:46.694872 2026] [:error] [pid 1295:tid 1305] [client 27.0.221.182:42547] [client 27.0.221.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.0.221.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agabXtmMhqLvs0GYixkwfgAAAMc"]
[Fri May 15 12:04:57.170158 2026] [:error] [pid 1190:tid 1261] [client 27.0.221.182:3524] [client 27.0.221.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.0.221.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agabadqiXrD7hne4gFbXvwAAAIk"]
[Fri May 15 12:05:07.634211 2026] [:error] [pid 1189:tid 1249] [client 27.0.221.182:4305] [client 27.0.221.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.0.221.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agabcwe36qIGegR4kcmcrAAAAFg"]
[Fri May 15 12:05:18.246220 2026] [:error] [pid 1188:tid 1221] [client 27.0.221.182:16500] [client 27.0.221.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.0.221.182, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agabftY68iW8yuNkNzP85gAAABg"]
[Fri May 15 12:36:59.237568 2026] [:error] [pid 50531:tid 50553] [client 27.34.68.14:64266] [client 27.34.68.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.68.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agai6x3WbFwE6voqGzoD9QAAARQ"]
[Fri May 15 12:56:01.367705 2026] [:error] [pid 9392:tid 9412] [client 152.42.134.236:45844] [client 152.42.134.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.134.236, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aganYdBWJIjH1U9zGfZ7SgAAARI"]
[Fri May 15 12:56:03.594173 2026] [proxy_fcgi:error] [pid 9392:tid 9412] [client 152.42.134.236:45844] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 15 12:56:04.000602 2026] [:error] [pid 9392:tid 9409] [client 152.42.134.236:45844] [client 152.42.134.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.134.236, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aganY9BWJIjH1U9zGfZ7TwAAAQ8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 12:56:05.080092 2026] [proxy_fcgi:error] [pid 9392:tid 9409] [client 152.42.134.236:45844] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 13:06:26.503430 2026] [:error] [pid 9305:tid 9354] [client 162.14.109.170:50808] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agap0t5FZyBmdCM8GsFr1QAAAFA"]
[Fri May 15 13:25:40.255034 2026] [:error] [pid 9392:tid 9418] [client 27.34.68.14:22002] [client 27.34.68.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.68.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agauVNBWJIjH1U9zGfaJ-QAAARg"]
[Fri May 15 13:25:50.919666 2026] [:error] [pid 9392:tid 9396] [client 27.34.68.14:62538] [client 27.34.68.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.68.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agauXtBWJIjH1U9zGfaKCQAAAQI"]
[Fri May 15 13:26:01.658779 2026] [:error] [pid 9392:tid 9397] [client 27.34.68.14:62453] [client 27.34.68.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.68.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agauadBWJIjH1U9zGfaKGgAAAQM"]
[Fri May 15 13:26:12.406532 2026] [:error] [pid 9305:tid 9357] [client 27.34.68.14:18810] [client 27.34.68.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.68.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agaudN5FZyBmdCM8GsFu1wAAAFM"]
[Fri May 15 14:17:13.955904 2026] [:error] [pid 30208:tid 30225] [client 34.175.81.226:40320] [client 34.175.81.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.docker"] [unique_id "aga6aZmLMCJujX-JTvgTCwAAAI8"]
[Fri May 15 14:17:13.960755 2026] [:error] [pid 9305:tid 9357] [client 34.175.81.226:40306] [client 34.175.81.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev.local"] [unique_id "aga6ad5FZyBmdCM8GsF1UAAAAFM"]
[Fri May 15 14:17:13.981194 2026] [:error] [pid 9307:tid 9386] [client 34.175.81.226:40310] [client 34.175.81.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev"] [unique_id "aga6aSC43jY1IRzK5VY6RAAAANU"]
[Fri May 15 14:17:14.165415 2026] [:error] [pid 30240:tid 30259] [client 34.175.81.226:40346] [client 34.175.81.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "aga6aq8ckHvaA6bpews56gAAAVE"]
[Fri May 15 14:17:14.165990 2026] [:error] [pid 30240:tid 30250] [client 34.175.81.226:40336] [client 34.175.81.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aga6aq8ckHvaA6bpews56wAAAUg"]
[Fri May 15 14:17:14.194846 2026] [:error] [pid 9305:tid 9347] [client 34.175.81.226:40344] [client 34.175.81.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development.local"] [unique_id "aga6at5FZyBmdCM8GsF1UQAAAEk"]
[Fri May 15 14:17:14.220226 2026] [:error] [pid 9307:tid 9371] [client 34.175.81.226:40362] [client 34.175.81.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env.local"] [unique_id "aga6aiC43jY1IRzK5VY6RQAAAMY"]
[Fri May 15 14:17:14.435689 2026] [:error] [pid 30240:tid 30252] [client 34.175.81.226:40378] [client 34.175.81.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "aga6aq8ckHvaA6bpews57AAAAUo"]
[Fri May 15 14:17:14.493060 2026] [:error] [pid 9305:tid 9345] [client 34.175.81.226:40380] [client 34.175.81.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "aga6at5FZyBmdCM8GsF1UgAAAEc"]
[Fri May 15 14:17:14.532406 2026] [:error] [pid 30240:tid 30254] [client 34.175.81.226:40386] [client 34.175.81.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.env"] [unique_id "aga6aq8ckHvaA6bpews57QAAAUw"]
[Fri May 15 14:32:23.403705 2026] [:error] [pid 30208:tid 30224] [client 117.253.193.253:62701] [client 117.253.193.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.193.253, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aga995mLMCJujX-JTvgUYwAAAI4"]
[Fri May 15 14:32:33.481444 2026] [:error] [pid 30240:tid 30246] [client 117.253.193.253:63170] [client 117.253.193.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.193.253, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aga-Aa8ckHvaA6bpews8GgAAAUQ"]
[Fri May 15 14:32:43.977775 2026] [:error] [pid 30208:tid 30232] [client 117.253.193.253:63733] [client 117.253.193.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.193.253, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aga-C5mLMCJujX-JTvgUdQAAAJY"]
[Fri May 15 14:32:54.462455 2026] [:error] [pid 30240:tid 30244] [client 117.253.193.253:64090] [client 117.253.193.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.193.253, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aga-Fq8ckHvaA6bpews8LAAAAUI"]
[Fri May 15 14:33:05.175002 2026] [:error] [pid 9307:tid 9389] [client 117.253.193.253:64457] [client 117.253.193.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.193.253, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aga-ISC43jY1IRzK5VY8gQAAANg"]
[Fri May 15 14:38:32.991930 2026] [:error] [pid 9392:tid 9417] [client 117.253.194.80:55533] [client 117.253.194.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.194.80, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aga_aNBWJIjH1U9zGfadkgAAARc"]
[Fri May 15 14:38:43.353983 2026] [:error] [pid 30272:tid 30285] [client 117.253.194.80:55934] [client 117.253.194.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.194.80, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aga_c3vc_jSFaQ_7_weefgAAAYs"]
[Fri May 15 14:38:53.941627 2026] [:error] [pid 9307:tid 9371] [client 117.253.194.80:56554] [client 117.253.194.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.194.80, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aga_fSC43jY1IRzK5VY9dAAAAMY"]
[Fri May 15 14:39:04.436795 2026] [:error] [pid 30272:tid 30281] [client 117.253.194.80:56935] [client 117.253.194.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.194.80, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aga_iHvc_jSFaQ_7_weelwAAAYc"]
[Fri May 15 14:39:14.971960 2026] [:error] [pid 30272:tid 30286] [client 117.253.194.80:57289] [client 117.253.194.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.253.194.80, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aga_knvc_jSFaQ_7_wee2AAAAYw"]
[Fri May 15 15:44:15.499672 2026] [:error] [pid 9305:tid 9345] [client 34.19.151.70:52162] [client 34.19.151.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agbOz95FZyBmdCM8GsF-MQAAAEc"]
[Fri May 15 15:51:42.785627 2026] [:error] [pid 9392:tid 9401] [client 43.159.57.144:39182] [client 43.159.57.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agbQjtBWJIjH1U9zGfauaAAAAQc"]
[Fri May 15 16:11:58.952898 2026] [autoindex:error] [pid 9304:tid 9321] [client 161.97.142.128:60145] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 15 16:54:34.816728 2026] [:error] [pid 30272:tid 30278] [client 139.135.53.136:22106] [client 139.135.53.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.53.136, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agbfSnvc_jSFaQ_7_wfDBgAAAYQ"]
[Fri May 15 16:54:45.092731 2026] [:error] [pid 30240:tid 30261] [client 139.135.53.136:22990] [client 139.135.53.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.53.136, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agbfVa8ckHvaA6bpewtR8gAAAVM"]
[Fri May 15 16:56:55.883914 2026] [:error] [pid 30272:tid 30279] [client 139.135.53.136:22679] [client 139.135.53.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.53.136, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agbf13vc_jSFaQ_7_wfDOQAAAYU"]
[Fri May 15 16:57:06.913379 2026] [:error] [pid 30272:tid 30289] [client 139.135.53.136:22236] [client 139.135.53.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.53.136, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agbf4nvc_jSFaQ_7_wfDRQAAAY8"]
[Fri May 15 16:57:17.860064 2026] [:error] [pid 9304:tid 9311] [client 139.135.53.136:23233] [client 139.135.53.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.53.136, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agbf7dzcINh7UFIbVoGP3gAAAAE"]
[Fri May 15 17:08:41.899296 2026] [:error] [pid 30240:tid 30255] [client 81.167.26.57:50817] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "agbima8ckHvaA6bpewtTSAAAAU0"]
[Fri May 15 17:08:44.468956 2026] [:error] [pid 9305:tid 9349] [client 81.167.26.57:54919] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "agbinN5FZyBmdCM8GsGDbQAAAEs"]
[Fri May 15 17:08:47.060971 2026] [:error] [pid 30240:tid 30262] [client 81.167.26.57:36252] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "agbin68ckHvaA6bpewtTUAAAAVQ"]
[Fri May 15 17:08:50.267114 2026] [:error] [pid 9304:tid 9329] [client 81.167.26.57:44050] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "agbiotzcINh7UFIbVoGQewAAABM"]
[Fri May 15 17:08:52.910712 2026] [:error] [pid 9392:tid 9410] [client 81.167.26.57:24342] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "agbipNBWJIjH1U9zGfa7VgAAARA"]
[Fri May 15 17:08:55.562025 2026] [:error] [pid 9392:tid 9418] [client 81.167.26.57:62875] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "agbip9BWJIjH1U9zGfa7XAAAARg"]
[Fri May 15 17:08:58.210843 2026] [:error] [pid 9392:tid 9414] [client 81.167.26.57:62736] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "agbiqtBWJIjH1U9zGfa7ZgAAARQ"]
[Fri May 15 17:09:00.841569 2026] [:error] [pid 30240:tid 30248] [client 81.167.26.57:49120] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "agbirK8ckHvaA6bpewtTXQAAAUY"]
[Fri May 15 17:09:03.414615 2026] [:error] [pid 30240:tid 30249] [client 81.167.26.57:10002] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "agbir68ckHvaA6bpewtTZgAAAUc"]
[Fri May 15 17:09:05.858715 2026] [:error] [pid 30208:tid 30211] [client 81.167.26.57:13337] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agbisZmLMCJujX-JTvglCQAAAIE"]
[Fri May 15 17:09:08.463680 2026] [:error] [pid 9392:tid 9397] [client 81.167.26.57:4649] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agbitNBWJIjH1U9zGfa7igAAAQM"]
[Fri May 15 17:09:10.926063 2026] [:error] [pid 30272:tid 30291] [client 81.167.26.57:25709] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "agbitnvc_jSFaQ_7_wfFPQAAAZE"]
[Fri May 15 17:13:25.393000 2026] [:error] [pid 9392:tid 9414] [client 102.91.135.241:55237] [client 102.91.135.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.91.135.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agbjtdBWJIjH1U9zGfa8ZgAAARQ"]
[Fri May 15 18:15:12.283048 2026] [:error] [pid 30240:tid 30263] [client 43.153.27.244:48818] [client 43.153.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agbyMK8ckHvaA6bpewtaLwAAAVU"]
[Fri May 15 19:38:42.769196 2026] [:error] [pid 30240:tid 30262] [client 143.105.233.85:58016] [client 143.105.233.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.233.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcFwq8ckHvaA6bpewtjZQAAAVQ"]
[Fri May 15 19:38:53.109127 2026] [:error] [pid 9304:tid 9310] [client 143.105.233.85:16017] [client 143.105.233.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.233.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcFzdzcINh7UFIbVoGY4QAAAAA"]
[Fri May 15 19:39:03.596269 2026] [:error] [pid 30272:tid 30282] [client 143.105.233.85:28649] [client 143.105.233.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.233.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcF13vc_jSFaQ_7_wflpAAAAYg"]
[Fri May 15 19:39:13.363066 2026] [:error] [pid 30240:tid 30242] [client 143.105.233.85:60253] [client 143.105.233.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.233.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcF4a8ckHvaA6bpewtjfAAAAUA"]
[Fri May 15 19:39:24.136344 2026] [:error] [pid 30240:tid 30251] [client 143.105.233.85:17201] [client 143.105.233.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.233.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcF7K8ckHvaA6bpewtjfgAAAUk"]
[Fri May 15 20:06:25.424331 2026] [:error] [pid 30240:tid 30244] [client 185.188.217.194:58889] [client 185.188.217.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcMQa8ckHvaA6bpewtmzwAAAUI"]
[Fri May 15 20:06:35.562205 2026] [:error] [pid 30208:tid 30225] [client 185.188.217.194:42822] [client 185.188.217.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcMS5mLMCJujX-JTvg1pgAAAI8"]
[Fri May 15 20:06:46.149385 2026] [:error] [pid 30240:tid 30263] [client 185.188.217.193:4915] [client 185.188.217.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.193, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcMVq8ckHvaA6bpewtm1QAAAVU"]
[Fri May 15 20:06:56.645246 2026] [:error] [pid 30272:tid 30283] [client 185.188.217.194:50709] [client 185.188.217.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcMYHvc_jSFaQ_7_wftEQAAAYk"]
[Fri May 15 20:07:07.071182 2026] [:error] [pid 9392:tid 9397] [client 185.188.217.193:53884] [client 185.188.217.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.193, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcMa9BWJIjH1U9zGfbVMQAAAQM"]
[Fri May 15 20:07:17.518725 2026] [:error] [pid 9392:tid 9408] [client 185.188.217.193:54004] [client 185.188.217.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.193, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcMddBWJIjH1U9zGfbVOgAAAQ4"]
[Fri May 15 20:07:27.927020 2026] [:error] [pid 9392:tid 9410] [client 185.188.217.193:19633] [client 185.188.217.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.193, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcMf9BWJIjH1U9zGfbVRAAAARA"]
[Fri May 15 20:07:38.441054 2026] [:error] [pid 30272:tid 30293] [client 185.188.217.193:32730] [client 185.188.217.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.193, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcMinvc_jSFaQ_7_wftOQAAAZM"]
[Fri May 15 20:07:59.508625 2026] [:error] [pid 30272:tid 30284] [client 185.188.217.192:55471] [client 185.188.217.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcMn3vc_jSFaQ_7_wftTQAAAYo"]
[Fri May 15 20:08:10.089858 2026] [:error] [pid 30272:tid 30281] [client 185.188.217.194:27102] [client 185.188.217.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcMqnvc_jSFaQ_7_wftVwAAAYc"]
[Fri May 15 20:08:31.140694 2026] [:error] [pid 9307:tid 9389] [client 185.188.217.194:59206] [client 185.188.217.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcMvyC43jY1IRzK5VZY_gAAANg"]
[Fri May 15 20:08:52.334592 2026] [:error] [pid 9305:tid 9350] [client 185.188.217.192:56981] [client 185.188.217.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcM1N5FZyBmdCM8GsGO5QAAAEw"]
[Fri May 15 20:13:05.094575 2026] [:error] [pid 30208:tid 30233] [client 185.188.217.192:64707] [client 185.188.217.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcN0ZmLMCJujX-JTvg2KgAAAJc"]
[Fri May 15 20:16:14.768407 2026] [:error] [pid 9307:tid 9382] [client 185.188.217.192:53923] [client 185.188.217.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcOjiC43jY1IRzK5VZZkQAAANE"]
[Fri May 15 20:18:10.678232 2026] [:error] [pid 30240:tid 30258] [client 185.188.217.192:57271] [client 185.188.217.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.188.217.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agcPAq8ckHvaA6bpewtnwAAAAVA"]
[Fri May 15 20:19:04.181566 2026] [:error] [pid 9392:tid 9409] [client 172.86.122.106:41542] [client 172.86.122.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "agcPONBWJIjH1U9zGfbWKQAAAQ8"]
[Fri May 15 21:52:11.173392 2026] [:error] [pid 30272:tid 30287] [client 46.20.146.46:50634] [client 46.20.146.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.20.146.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agclC3vc_jSFaQ_7_wf8fgAAAY0"]
[Fri May 15 21:52:11.965041 2026] [proxy_fcgi:error] [pid 30272:tid 30287] [client 46.20.146.46:50634] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 15 21:52:12.300245 2026] [:error] [pid 30272:tid 30276] [client 46.20.146.46:50634] [client 46.20.146.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.20.146.46, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agclDHvc_jSFaQ_7_wf8gAAAAYI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 21:52:13.242113 2026] [proxy_fcgi:error] [pid 30272:tid 30276] [client 46.20.146.46:50634] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 21:58:39.971183 2026] [:error] [pid 30272:tid 30292] [client 146.19.213.81:36664] [client 146.19.213.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.19.213.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agcmj3vc_jSFaQ_7_wf9rAAAAZI"]
[Fri May 15 21:58:40.779268 2026] [proxy_fcgi:error] [pid 30272:tid 30292] [client 146.19.213.81:36664] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 15 21:58:41.109834 2026] [:error] [pid 30272:tid 30293] [client 146.19.213.81:36664] [client 146.19.213.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.19.213.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agcmkXvc_jSFaQ_7_wf9sgAAAZM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 21:58:42.113582 2026] [proxy_fcgi:error] [pid 30272:tid 30293] [client 146.19.213.81:36664] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 22:05:04.071422 2026] [:error] [pid 30240:tid 30260] [client 31.14.97.67:56376] [client 31.14.97.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.14.97.67, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agcoEK8ckHvaA6bpewtwogAAAVI"]
[Fri May 15 22:05:04.884596 2026] [proxy_fcgi:error] [pid 30240:tid 30260] [client 31.14.97.67:56376] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 15 22:05:05.161141 2026] [:error] [pid 30240:tid 30257] [client 31.14.97.67:56376] [client 31.14.97.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.14.97.67, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agcoEa8ckHvaA6bpewtwpAAAAU8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 22:05:06.140450 2026] [proxy_fcgi:error] [pid 30240:tid 30257] [client 31.14.97.67:56376] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 22:18:19.211092 2026] [:error] [pid 30208:tid 30221] [client 80.77.146.194:59840] [client 80.77.146.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.77.146.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agcrK5mLMCJujX-JTvg--gAAAIs"]
[Fri May 15 22:18:20.038273 2026] [proxy_fcgi:error] [pid 30208:tid 30221] [client 80.77.146.194:59840] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 15 22:18:20.835168 2026] [:error] [pid 30208:tid 30218] [client 80.77.146.194:59840] [client 80.77.146.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.77.146.194, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agcrLJmLMCJujX-JTvg--wAAAIg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 22:18:21.814566 2026] [proxy_fcgi:error] [pid 30208:tid 30218] [client 80.77.146.194:59840] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 22:31:53.782226 2026] [:error] [pid 9305:tid 9347] [client 165.140.159.164:33718] [client 165.140.159.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.140.159.164, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agcuWd5FZyBmdCM8GsGWUgAAAEk"]
[Fri May 15 22:31:54.587424 2026] [proxy_fcgi:error] [pid 9305:tid 9347] [client 165.140.159.164:33718] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 15 22:31:54.935934 2026] [:error] [pid 9305:tid 9354] [client 165.140.159.164:33718] [client 165.140.159.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.140.159.164, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agcuWt5FZyBmdCM8GsGWUwAAAFA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 22:31:55.896203 2026] [proxy_fcgi:error] [pid 9305:tid 9354] [client 165.140.159.164:33718] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 22:39:02.073875 2026] [:error] [pid 30208:tid 30224] [client 5.189.136.57:54198] [client 5.189.136.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.136.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agcwBpmLMCJujX-JTvhAhwAAAI4"]
[Fri May 15 22:39:02.884496 2026] [proxy_fcgi:error] [pid 30208:tid 30224] [client 5.189.136.57:54198] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 15 22:39:07.095987 2026] [:error] [pid 30208:tid 30219] [client 5.189.136.57:54198] [client 5.189.136.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.189.136.57, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agcwC5mLMCJujX-JTvhAiAAAAIk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 22:39:08.095714 2026] [proxy_fcgi:error] [pid 30208:tid 30219] [client 5.189.136.57:54198] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 23:01:28.708201 2026] [:error] [pid 30208:tid 30231] [client 45.32.67.165:33586] [client 45.32.67.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.32.67.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agc1SJmLMCJujX-JTvhCkQAAAJU"]
[Fri May 15 23:01:29.524716 2026] [proxy_fcgi:error] [pid 30208:tid 30231] [client 45.32.67.165:33586] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Fri May 15 23:01:30.328899 2026] [:error] [pid 30208:tid 30234] [client 45.32.67.165:33586] [client 45.32.67.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.32.67.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agc1SpmLMCJujX-JTvhCkwAAAJg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 23:01:31.569287 2026] [proxy_fcgi:error] [pid 30208:tid 30234] [client 45.32.67.165:33586] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Fri May 15 23:10:10.444561 2026] [:error] [pid 9307:tid 9366] [client 43.159.139.164:32956] [client 43.159.139.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agc3UiC43jY1IRzK5VZknQAAAME"]
[Fri May 15 23:46:19.234812 2026] [:error] [pid 30272:tid 30284] [client 46.20.2.163:42530] [client 46.20.2.163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "agc_y3vc_jSFaQ_7_wcTXAAAAYo"]
[Sat May 16 00:54:41.561817 2026] [:error] [pid 30208:tid 30213] [client 65.108.2.171:39038] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "agdP0ZmLMCJujX-JTvhMngAAAIM"]
[Sat May 16 00:54:44.156373 2026] [:error] [pid 30208:tid 30220] [client 65.108.2.171:39050] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "agdP1JmLMCJujX-JTvhMoAAAAIo"]
[Sat May 16 00:54:46.707002 2026] [:error] [pid 9305:tid 9346] [client 65.108.2.171:40156] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agdP1t5FZyBmdCM8GsGf_QAAAEg"]
[Sat May 16 00:54:49.179990 2026] [:error] [pid 9307:tid 9374] [client 65.108.2.171:40164] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "agdP2SC43jY1IRzK5VZtRgAAAMk"]
[Sat May 16 00:54:51.834317 2026] [:error] [pid 9307:tid 9386] [client 65.108.2.171:40166] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "agdP2yC43jY1IRzK5VZtRwAAANU"]
[Sat May 16 00:54:54.339800 2026] [:error] [pid 9392:tid 9394] [client 65.108.2.171:40180] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "agdP3tBWJIjH1U9zGfb7ygAAAQA"]
[Sat May 16 00:54:56.875288 2026] [:error] [pid 9307:tid 9387] [client 65.108.2.171:18742] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "agdP4CC43jY1IRzK5VZtSQAAANY"]
[Sat May 16 00:54:59.653399 2026] [:error] [pid 9307:tid 9371] [client 65.108.2.171:18754] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "agdP4yC43jY1IRzK5VZtSgAAAMY"]
[Sat May 16 00:55:02.268025 2026] [:error] [pid 30240:tid 30254] [client 65.108.2.171:18760] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agdP5q8ckHvaA6bpewuEWQAAAUw"]
[Sat May 16 00:55:04.813513 2026] [:error] [pid 9304:tid 9326] [client 65.108.2.171:18768] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "agdP6NzcINh7UFIbVoGppAAAABA"]
[Sat May 16 00:55:07.466256 2026] [:error] [pid 30240:tid 30248] [client 65.108.2.171:32466] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agdP668ckHvaA6bpewuEXQAAAUY"]
[Sat May 16 00:55:09.974314 2026] [:error] [pid 9304:tid 9327] [client 65.108.2.171:32468] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agdP7dzcINh7UFIbVoGppwAAABE"]
[Sat May 16 00:55:12.516030 2026] [:error] [pid 30208:tid 30221] [client 65.108.2.171:32472] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agdP8JmLMCJujX-JTvhMpAAAAIs"]
[Sat May 16 00:55:15.125666 2026] [:error] [pid 30208:tid 30234] [client 65.108.2.171:42180] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "agdP85mLMCJujX-JTvhMpgAAAJg"]
[Sat May 16 00:55:17.574722 2026] [:error] [pid 9305:tid 9350] [client 65.108.2.171:42190] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "agdP9d5FZyBmdCM8GsGgBQAAAEw"]
[Sat May 16 00:55:20.062630 2026] [:error] [pid 30208:tid 30225] [client 65.108.2.171:42192] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "agdP-JmLMCJujX-JTvhMrAAAAI8"]
[Sat May 16 00:55:22.621960 2026] [:error] [pid 30240:tid 30248] [client 65.108.2.171:42206] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "agdP-q8ckHvaA6bpewuEagAAAUY"]
[Sat May 16 00:55:25.161952 2026] [:error] [pid 9392:tid 9399] [client 65.108.2.171:17572] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "agdP_dBWJIjH1U9zGfb7zAAAAQU"]
[Sat May 16 00:55:27.775895 2026] [:error] [pid 30272:tid 30279] [client 65.108.2.171:17588] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "agdP_3vc_jSFaQ_7_wcg0wAAAYU"]
[Sat May 16 00:55:30.295290 2026] [:error] [pid 30272:tid 30275] [client 65.108.2.171:17592] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "agdQAnvc_jSFaQ_7_wcg1gAAAYE"]
[Sat May 16 00:55:32.798093 2026] [:error] [pid 30240:tid 30256] [client 65.108.2.171:17608] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "agdQBK8ckHvaA6bpewuEeQAAAU4"]
[Sat May 16 00:55:35.400083 2026] [:error] [pid 30272:tid 30278] [client 65.108.2.171:53284] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "agdQB3vc_jSFaQ_7_wcg3AAAAYQ"]
[Sat May 16 00:56:18.477533 2026] [:error] [pid 30208:tid 30218] [client 65.108.2.171:51116] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agdQMpmLMCJujX-JTvhMtAAAAIg"]
[Sat May 16 00:56:20.998280 2026] [:error] [pid 9392:tid 9406] [client 65.108.2.171:51122] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agdQNNBWJIjH1U9zGfb78AAAAQw"]
[Sat May 16 00:56:23.565582 2026] [:error] [pid 9392:tid 9401] [client 65.108.2.171:51132] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "agdQN9BWJIjH1U9zGfb78wAAAQc"]
[Sat May 16 00:56:26.129603 2026] [:error] [pid 9307:tid 9380] [client 65.108.2.171:53116] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agdQOiC43jY1IRzK5VZtWQAAAM8"]
[Sat May 16 00:56:28.825887 2026] [:error] [pid 9392:tid 9415] [client 65.108.2.171:53118] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "agdQPNBWJIjH1U9zGfb79AAAARU"]
[Sat May 16 00:56:31.333793 2026] [:error] [pid 30272:tid 30276] [client 65.108.2.171:53132] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "agdQP3vc_jSFaQ_7_wcg_gAAAYI"]
[Sat May 16 00:56:33.805280 2026] [:error] [pid 9392:tid 9408] [client 65.108.2.171:53136] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agdQQdBWJIjH1U9zGfb7-AAAAQ4"]
[Sat May 16 00:56:36.233159 2026] [:error] [pid 30208:tid 30214] [client 65.108.2.171:47276] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "agdQRJmLMCJujX-JTvhMvAAAAIQ"]
[Sat May 16 00:56:38.705396 2026] [:error] [pid 9304:tid 9317] [client 65.108.2.171:47280] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "agdQRtzcINh7UFIbVoGptAAAAAc"]
[Sat May 16 00:56:41.333110 2026] [:error] [pid 9392:tid 9417] [client 65.108.2.171:47288] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "agdQSdBWJIjH1U9zGfb8AwAAARc"]
[Sat May 16 00:56:43.736046 2026] [:error] [pid 9304:tid 9330] [client 65.108.2.171:47298] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agdQS9zcINh7UFIbVoGptgAAABQ"]
[Sat May 16 00:56:46.414861 2026] [:error] [pid 30240:tid 30252] [client 65.108.2.171:62834] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "agdQTq8ckHvaA6bpewuE5AAAAUo"]
[Sat May 16 00:56:48.863719 2026] [:error] [pid 30208:tid 30225] [client 65.108.2.171:62842] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "agdQUJmLMCJujX-JTvhMwAAAAI8"]
[Sat May 16 00:56:51.471938 2026] [:error] [pid 30208:tid 30232] [client 65.108.2.171:62856] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agdQU5mLMCJujX-JTvhMwQAAAJY"]
[Sat May 16 00:56:54.040443 2026] [:error] [pid 9307:tid 9372] [client 65.108.2.171:62868] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "agdQViC43jY1IRzK5VZtYQAAAMc"]
[Sat May 16 00:56:56.585443 2026] [:error] [pid 9305:tid 9340] [client 65.108.2.171:45464] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "agdQWN5FZyBmdCM8GsGgCwAAAEI"]
[Sat May 16 00:56:59.050488 2026] [:error] [pid 9305:tid 9344] [client 65.108.2.171:45468] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "agdQW95FZyBmdCM8GsGgDAAAAEY"]
[Sat May 16 00:57:01.479054 2026] [:error] [pid 30272:tid 30282] [client 65.108.2.171:45474] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "agdQXXvc_jSFaQ_7_wchDgAAAYg"]
[Sat May 16 00:57:03.974801 2026] [:error] [pid 30208:tid 30215] [client 65.108.2.171:45478] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agdQX5mLMCJujX-JTvhMyAAAAIU"]
[Sat May 16 00:57:06.516990 2026] [:error] [pid 9392:tid 9408] [client 65.108.2.171:35434] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "agdQYtBWJIjH1U9zGfb8CwAAAQ4"]
[Sat May 16 00:57:09.151784 2026] [:error] [pid 30240:tid 30244] [client 65.108.2.171:35436] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "agdQZa8ckHvaA6bpewuE7gAAAUI"]
[Sat May 16 01:46:24.915171 2026] [:error] [pid 30240:tid 30250] [client 77.73.233.48:33624] [client 77.73.233.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.73.233.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agdb8K8ckHvaA6bpewuLHwAAAUg"]
[Sat May 16 01:46:25.703033 2026] [proxy_fcgi:error] [pid 30240:tid 30250] [client 77.73.233.48:33624] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 01:46:26.242178 2026] [:error] [pid 30240:tid 30247] [client 77.73.233.48:33624] [client 77.73.233.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.73.233.48, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agdb8q8ckHvaA6bpewuLIAAAAUU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 01:46:27.204801 2026] [proxy_fcgi:error] [pid 30240:tid 30247] [client 77.73.233.48:33624] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 01:59:31.126403 2026] [:error] [pid 59392:tid 59413] [client 158.173.67.185:50617] [client 158.173.67.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.185, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agdfAp3J5hQfH1d5JHoS7gAAAxI"]
[Sat May 16 02:06:49.295932 2026] [:error] [pid 59453:tid 59486] [client 89.44.121.140:46990] [client 89.44.121.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.44.121.140, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agdguXnXIIDivY9RkF0p5gAAA1c"]
[Sat May 16 02:06:50.094739 2026] [proxy_fcgi:error] [pid 59453:tid 59486] [client 89.44.121.140:46990] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 02:06:50.910626 2026] [:error] [pid 59453:tid 59480] [client 89.44.121.140:46990] [client 89.44.121.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.44.121.140, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agdgunnXIIDivY9RkF0p5wAAA1E"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 02:06:51.900294 2026] [proxy_fcgi:error] [pid 59453:tid 59480] [client 89.44.121.140:46990] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 02:20:40.340997 2026] [:error] [pid 30272:tid 30287] [client 41.111.218.240:36762] [client 41.111.218.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.111.218.240, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agdj-Hvc_jSFaQ_7_wcxjQAAAY0"]
[Sat May 16 02:20:41.122476 2026] [proxy_fcgi:error] [pid 30272:tid 30287] [client 41.111.218.240:36762] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 02:20:41.545780 2026] [:error] [pid 30272:tid 30274] [client 41.111.218.240:36762] [client 41.111.218.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.111.218.240, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agdj-Xvc_jSFaQ_7_wcxjgAAAYA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 02:20:42.486438 2026] [proxy_fcgi:error] [pid 30272:tid 30274] [client 41.111.218.240:36762] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 03:11:16.424403 2026] [:error] [pid 30272:tid 30294] [client 106.219.122.46:17474] [client 106.219.122.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.122.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agdv1Hvc_jSFaQ_7_wc44wAAAZQ"]
[Sat May 16 03:11:26.524073 2026] [:error] [pid 30208:tid 30234] [client 106.219.122.46:27563] [client 106.219.122.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.122.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agdv3pmLMCJujX-JTvheNgAAAJg"]
[Sat May 16 03:11:38.205176 2026] [:error] [pid 59311:tid 59337] [client 106.219.122.46:2610] [client 106.219.122.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.122.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agdv6rGBV7OkryAk5AOeUAAAApY"]
[Sat May 16 03:11:58.369993 2026] [:error] [pid 59517:tid 59540] [client 106.219.122.46:23575] [client 106.219.122.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.122.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agdv_sWGuSBVizA7n2P9BAAAA40"]
[Sat May 16 03:12:08.865744 2026] [:error] [pid 30208:tid 30234] [client 106.219.122.46:24728] [client 106.219.122.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.122.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agdwCJmLMCJujX-JTvheTgAAAJg"]
[Sat May 16 04:02:11.735200 2026] [:error] [pid 24979:tid 24986] [client 35.194.203.53:45028] [client 35.194.203.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.194.203.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agd7w7vSFUQiwLaOL2oPogAAAMU"]
[Sat May 16 04:02:12.538945 2026] [proxy_fcgi:error] [pid 24979:tid 24986] [client 35.194.203.53:45028] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 04:02:12.986355 2026] [:error] [pid 24979:tid 24987] [client 35.194.203.53:45028] [client 35.194.203.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.194.203.53, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agd7xLvSFUQiwLaOL2oPpQAAAMY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 04:02:14.000249 2026] [proxy_fcgi:error] [pid 24979:tid 24987] [client 35.194.203.53:45028] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 04:16:09.503487 2026] [:error] [pid 5602:tid 5611] [client 63.34.153.202:53916] [client 63.34.153.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.34.153.202, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agd_CdzTTsu77r3UIsmbWQAAAQc"]
[Sat May 16 04:16:10.369543 2026] [proxy_fcgi:error] [pid 5602:tid 5611] [client 63.34.153.202:53916] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 04:16:10.734174 2026] [:error] [pid 5602:tid 5618] [client 63.34.153.202:53916] [client 63.34.153.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.34.153.202, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agd_CtzTTsu77r3UIsmbXAAAAQ4"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 04:16:11.808391 2026] [proxy_fcgi:error] [pid 5602:tid 5618] [client 63.34.153.202:53916] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 06:44:32.070778 2026] [:error] [pid 5602:tid 5614] [client 103.169.160.106:49836] [client 103.169.160.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.169.160.106, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ageh0NzTTsu77r3UIsnIBQAAAQo"]
[Sat May 16 06:44:32.998613 2026] [proxy_fcgi:error] [pid 5602:tid 5614] [client 103.169.160.106:49836] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 06:44:33.555160 2026] [:error] [pid 5602:tid 5604] [client 103.169.160.106:49836] [client 103.169.160.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.169.160.106, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ageh0dzTTsu77r3UIsnICQAAAQA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 06:44:34.714291 2026] [proxy_fcgi:error] [pid 5602:tid 5604] [client 103.169.160.106:49836] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 06:51:43.497842 2026] [:error] [pid 24869:tid 24925] [client 43.135.172.89:52636] [client 43.135.172.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agejf-xo3FMprMltYl4EPgAAAFE"]
[Sat May 16 08:56:55.095087 2026] [:error] [pid 5602:tid 5617] [client 63.34.153.202:45068] [client 63.34.153.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.34.153.202, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfA19zTTsu77r3UIsnxpAAAAQ0"]
[Sat May 16 08:56:55.884524 2026] [proxy_fcgi:error] [pid 5602:tid 5617] [client 63.34.153.202:45068] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 08:56:56.397599 2026] [:error] [pid 5602:tid 5623] [client 63.34.153.202:45068] [client 63.34.153.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.34.153.202, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfA2NzTTsu77r3UIsnxpwAAARM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 08:56:57.374425 2026] [proxy_fcgi:error] [pid 5602:tid 5623] [client 63.34.153.202:45068] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 09:01:52.600633 2026] [:error] [pid 24874:tid 24946] [client 190.159.36.43:53424] [client 190.159.36.43] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agfCAMiii6x3XidYGHG5mgAAAIs"]
[Sat May 16 09:50:13.618341 2026] [:error] [pid 24979:tid 24981] [client 65.99.193.197:56598] [client 65.99.193.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.99.193.197, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfNVbvSFUQiwLaOL2paAwAAAMA"]
[Sat May 16 09:50:14.407115 2026] [proxy_fcgi:error] [pid 24979:tid 24981] [client 65.99.193.197:56598] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 09:50:14.748080 2026] [:error] [pid 24979:tid 25005] [client 65.99.193.197:56598] [client 65.99.193.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.99.193.197, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfNVrvSFUQiwLaOL2paBAAAANg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 09:50:15.674276 2026] [proxy_fcgi:error] [pid 24979:tid 25005] [client 65.99.193.197:56598] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 09:57:09.338809 2026] [:error] [pid 5602:tid 5625] [client 45.55.144.148:19460] [client 45.55.144.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.55.144.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfO9dzTTsu77r3UIskD2gAAARU"]
[Sat May 16 09:57:10.129987 2026] [proxy_fcgi:error] [pid 5602:tid 5625] [client 45.55.144.148:19460] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 09:57:10.438589 2026] [:error] [pid 5602:tid 5623] [client 45.55.144.148:19460] [client 45.55.144.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.55.144.148, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfO9tzTTsu77r3UIskD3AAAARM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 09:57:11.376415 2026] [proxy_fcgi:error] [pid 5602:tid 5623] [client 45.55.144.148:19460] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 10:21:09.743103 2026] [:error] [pid 24869:tid 24911] [client 43.134.236.33:55464] [client 43.134.236.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agfUlexo3FMprMltYl4g8QAAAEM"]
[Sat May 16 10:35:50.584089 2026] [:error] [pid 62341:tid 62354] [client 51.77.216.62:57890] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "agfYBqnvQ59ep-XG78iLdwAAAog"]
[Sat May 16 10:35:52.909176 2026] [:error] [pid 62341:tid 62347] [client 51.77.216.62:38736] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "agfYCKnvQ59ep-XG78iLeQAAAoE"]
[Sat May 16 10:35:55.547655 2026] [:error] [pid 24979:tid 24988] [client 51.77.216.62:38750] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "agfYC7vSFUQiwLaOL2pjLwAAAMc"]
[Sat May 16 10:35:57.958364 2026] [:error] [pid 24869:tid 24932] [client 51.77.216.62:38758] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "agfYDexo3FMprMltYl4iIAAAAFg"]
[Sat May 16 10:36:00.319420 2026] [:error] [pid 24869:tid 24913] [client 51.77.216.62:38760] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "agfYEOxo3FMprMltYl4iIQAAAEU"]
[Sat May 16 10:36:02.720151 2026] [:error] [pid 24979:tid 25004] [client 51.77.216.62:58228] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "agfYErvSFUQiwLaOL2pjNgAAANc"]
[Sat May 16 10:36:05.113557 2026] [:error] [pid 62341:tid 62359] [client 51.77.216.62:58240] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "agfYFanvQ59ep-XG78iLewAAAo0"]
[Sat May 16 10:36:07.517322 2026] [:error] [pid 61463:tid 61478] [client 51.77.216.62:58256] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "agfYFzXdL1WU7nYXPmTZUgAAAc0"]
[Sat May 16 10:36:10.106326 2026] [:error] [pid 62341:tid 62367] [client 51.77.216.62:58272] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "agfYGqnvQ59ep-XG78iLgAAAApU"]
[Sat May 16 10:36:12.590585 2026] [:error] [pid 61361:tid 61368] [client 51.77.216.62:58282] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agfYHJZojzbt3jGziNkGNQAAAUU"]
[Sat May 16 10:36:15.011130 2026] [:error] [pid 61361:tid 61371] [client 51.77.216.62:40814] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agfYH5Zojzbt3jGziNkGQwAAAUg"]
[Sat May 16 10:36:17.400305 2026] [:error] [pid 61411:tid 61418] [client 51.77.216.62:40830] [client 51.77.216.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "agfYIWVkiEwGnPL_dvHJFgAAAYU"]
[Sat May 16 10:45:34.768638 2026] [:error] [pid 62210:tid 62235] [client 20.78.160.153:2248] [client 20.78.160.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agfaTsjHonCA4ORo40GxDgAAAlc"]
[Sat May 16 10:45:35.406053 2026] [:error] [pid 61361:tid 61380] [client 20.78.160.153:2314] [client 20.78.160.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agfaT5Zojzbt3jGziNkJeQAAAVE"]
[Sat May 16 10:45:35.974343 2026] [:error] [pid 24979:tid 25001] [client 20.78.160.153:2286] [client 20.78.160.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agfaT7vSFUQiwLaOL2pkwgAAANQ"]
[Sat May 16 10:45:36.553777 2026] [:error] [pid 24979:tid 24985] [client 20.78.160.153:2642] [client 20.78.160.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agfaULvSFUQiwLaOL2pkxAAAAMQ"]
[Sat May 16 10:56:11.227503 2026] [:error] [pid 24867:tid 24886] [client 151.106.5.31:56894] [client 151.106.5.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.106.5.31, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfcyyDgFLCgyKq-zmYKpwAAAAU"]
[Sat May 16 10:56:12.058344 2026] [proxy_fcgi:error] [pid 24867:tid 24886] [client 151.106.5.31:56894] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 10:56:12.374039 2026] [:error] [pid 24867:tid 24890] [client 151.106.5.31:56894] [client 151.106.5.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.106.5.31, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfczCDgFLCgyKq-zmYKqgAAAAk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 10:56:13.369892 2026] [proxy_fcgi:error] [pid 24867:tid 24890] [client 151.106.5.31:56894] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 11:23:13.516711 2026] [:error] [pid 61361:tid 61365] [client 128.199.17.23:47194] [client 128.199.17.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.199.17.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfjIZZojzbt3jGziNkSoQAAAUI"]
[Sat May 16 11:23:15.620899 2026] [proxy_fcgi:error] [pid 61361:tid 61365] [client 128.199.17.23:47194] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 11:23:16.532165 2026] [:error] [pid 61361:tid 61384] [client 128.199.17.23:47194] [client 128.199.17.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.199.17.23, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfjJJZojzbt3jGziNkSpgAAAVU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 11:23:17.498224 2026] [proxy_fcgi:error] [pid 61361:tid 61384] [client 128.199.17.23:47194] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 12:29:32.145817 2026] [:error] [pid 61361:tid 61365] [client 168.119.38.164:56372] [client 168.119.38.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.38.164, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfyrJZojzbt3jGziNkhxgAAAUI"]
[Sat May 16 12:29:32.986298 2026] [proxy_fcgi:error] [pid 61361:tid 61365] [client 168.119.38.164:56372] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 12:29:33.697496 2026] [:error] [pid 61361:tid 61385] [client 168.119.38.164:56372] [client 168.119.38.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 168.119.38.164, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agfyrZZojzbt3jGziNkhyAAAAVY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 12:29:34.671222 2026] [proxy_fcgi:error] [pid 61361:tid 61385] [client 168.119.38.164:56372] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 14:02:59.082936 2026] [:error] [pid 61361:tid 61379] [client 129.222.147.87:41891] [client 129.222.147.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.147.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggIk5Zojzbt3jGziNk03wAAAVA"]
[Sat May 16 14:03:08.732667 2026] [:error] [pid 24867:tid 24896] [client 129.222.147.87:55554] [client 129.222.147.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.147.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggInCDgFLCgyKq-zmYRWwAAAA8"]
[Sat May 16 14:03:19.498386 2026] [:error] [pid 61361:tid 61368] [client 129.222.147.87:28574] [client 129.222.147.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.147.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggIp5Zojzbt3jGziNk1BwAAAUU"]
[Sat May 16 14:03:30.345101 2026] [:error] [pid 61411:tid 61435] [client 129.222.147.87:4284] [client 129.222.147.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.147.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggIsmVkiEwGnPL_dvHoSwAAAZY"]
[Sat May 16 14:03:41.364831 2026] [:error] [pid 62210:tid 62234] [client 129.222.147.87:56765] [client 129.222.147.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.147.87, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggIvcjHonCA4ORo40G9PQAAAlY"]
[Sat May 16 14:28:55.573726 2026] [:error] [pid 5602:tid 5617] [client 103.28.36.210:38310] [client 103.28.36.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.210, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aggOp9zTTsu77r3UIskgxAAAAQ0"]
[Sat May 16 14:28:56.338296 2026] [proxy_fcgi:error] [pid 5602:tid 5617] [client 103.28.36.210:38310] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 14:28:56.681338 2026] [:error] [pid 5602:tid 5613] [client 103.28.36.210:38310] [client 103.28.36.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.210, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aggOqNzTTsu77r3UIskgxQAAAQk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 14:28:57.657595 2026] [proxy_fcgi:error] [pid 5602:tid 5613] [client 103.28.36.210:38310] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 15:02:04.910303 2026] [:error] [pid 24979:tid 24990] [client 82.165.175.181:43476] [client 82.165.175.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.175.181, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aggWbLvSFUQiwLaOL2qIMgAAAMk"]
[Sat May 16 15:02:05.744408 2026] [proxy_fcgi:error] [pid 24979:tid 24990] [client 82.165.175.181:43476] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 15:02:06.064095 2026] [:error] [pid 24979:tid 24999] [client 82.165.175.181:43476] [client 82.165.175.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.175.181, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aggWbrvSFUQiwLaOL2qIOQAAANI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 15:02:07.082342 2026] [proxy_fcgi:error] [pid 24979:tid 24999] [client 82.165.175.181:43476] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 15:30:28.770880 2026] [:error] [pid 61411:tid 61429] [client 139.135.200.233:1703] [client 139.135.200.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.200.233, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggdFGVkiEwGnPL_dvH3OgAAAZA"]
[Sat May 16 15:30:48.652450 2026] [:error] [pid 24979:tid 25004] [client 182.8.66.157:15780] [client 182.8.66.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.66.157, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggdKLvSFUQiwLaOL2qKyAAAANc"]
[Sat May 16 15:32:54.157628 2026] [:error] [pid 62341:tid 62364] [client 139.135.200.98:1443] [client 139.135.200.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aggdpqnvQ59ep-XG78irkAAAApI"]
[Sat May 16 15:33:45.185977 2026] [:error] [pid 62341:tid 62368] [client 139.135.200.26:4899] [client 139.135.200.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.200.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggd2anvQ59ep-XG78irmAAAApY"]
[Sat May 16 15:34:37.996606 2026] [:error] [pid 24979:tid 24981] [client 139.135.200.233:32282] [client 139.135.200.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.200.233, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggeDbvSFUQiwLaOL2qLMwAAAMA"]
[Sat May 16 15:35:23.134330 2026] [:error] [pid 24979:tid 24990] [client 139.135.200.165:42086] [client 139.135.200.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.200.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggeO7vSFUQiwLaOL2qLSwAAAMk"]
[Sat May 16 15:36:59.986525 2026] [:error] [pid 61411:tid 61436] [client 43.159.139.164:33188] [client 43.159.139.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aggem2VkiEwGnPL_dvH4OwAAAZc"]
[Sat May 16 15:38:37.120160 2026] [:error] [pid 24979:tid 24983] [client 139.135.200.165:670] [client 139.135.200.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.200.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agge_bvSFUQiwLaOL2qLcwAAAMI"]
[Sat May 16 15:39:21.844378 2026] [:error] [pid 61411:tid 61431] [client 139.135.200.165:6300] [client 139.135.200.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.200.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggfKWVkiEwGnPL_dvH4RwAAAZI"]
[Sat May 16 15:49:25.467348 2026] [:error] [pid 24979:tid 24991] [client 182.8.66.157:6396] [client 182.8.66.157] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agghhbvSFUQiwLaOL2qNqQAAAMo"]
[Sat May 16 16:33:59.781050 2026] [:error] [pid 62341:tid 62361] [client 82.165.88.211:38526] [client 82.165.88.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.88.211, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aggr96nvQ59ep-XG78iv0wAAAo8"]
[Sat May 16 16:34:00.633781 2026] [proxy_fcgi:error] [pid 62341:tid 62361] [client 82.165.88.211:38526] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 16:34:01.613879 2026] [:error] [pid 62341:tid 62358] [client 82.165.88.211:38526] [client 82.165.88.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.88.211, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aggr-anvQ59ep-XG78iv1QAAAow"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 16:34:02.563101 2026] [proxy_fcgi:error] [pid 62341:tid 62358] [client 82.165.88.211:38526] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 16:53:01.154865 2026] [:error] [pid 61411:tid 61436] [client 223.181.85.228:4887] [client 223.181.85.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.85.228, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggwbWVkiEwGnPL_dvECRgAAAZc"]
[Sat May 16 16:53:11.869031 2026] [:error] [pid 24979:tid 24991] [client 223.181.85.228:14794] [client 223.181.85.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.85.228, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggwd7vSFUQiwLaOL2qVPAAAAMo"]
[Sat May 16 16:53:22.573394 2026] [:error] [pid 61361:tid 61371] [client 223.181.85.228:29929] [client 223.181.85.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.85.228, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggwgpZojzbt3jGziNlb9wAAAUg"]
[Sat May 16 16:53:33.354567 2026] [:error] [pid 61361:tid 61385] [client 223.181.85.228:23781] [client 223.181.85.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.85.228, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggwjZZojzbt3jGziNlcCAAAAVY"]
[Sat May 16 16:53:44.040605 2026] [:error] [pid 62341:tid 62366] [client 223.181.85.228:5429] [client 223.181.85.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.85.228, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aggwmKnvQ59ep-XG78ixiQAAApQ"]
[Sat May 16 17:40:18.315920 2026] [:error] [pid 24979:tid 25005] [client 47.251.53.97:44322] [client 47.251.53.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.251.53.97, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agg7grvSFUQiwLaOL2qZRwAAANg"]
[Sat May 16 17:40:19.123394 2026] [proxy_fcgi:error] [pid 24979:tid 25005] [client 47.251.53.97:44322] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 16 17:40:19.450468 2026] [:error] [pid 24979:tid 25004] [client 47.251.53.97:44322] [client 47.251.53.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.251.53.97, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agg7g7vSFUQiwLaOL2qZSAAAANc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 17:40:20.389473 2026] [proxy_fcgi:error] [pid 24979:tid 25004] [client 47.251.53.97:44322] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sat May 16 18:05:06.919969 2026] [:error] [pid 61361:tid 61365] [client 117.194.55.92:62270] [client 117.194.55.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.55.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghBUpZojzbt3jGziNloRgAAAUI"]
[Sat May 16 18:05:16.974869 2026] [:error] [pid 61361:tid 61363] [client 117.194.55.92:62653] [client 117.194.55.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.55.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghBXJZojzbt3jGziNloVwAAAUA"]
[Sat May 16 18:05:27.789137 2026] [:error] [pid 61361:tid 61373] [client 117.194.55.92:63022] [client 117.194.55.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.55.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghBZ5Zojzbt3jGziNloXgAAAUo"]
[Sat May 16 18:05:38.344365 2026] [:error] [pid 61361:tid 61383] [client 117.194.55.92:63401] [client 117.194.55.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.55.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghBcpZojzbt3jGziNlocwAAAVQ"]
[Sat May 16 18:05:49.246362 2026] [:error] [pid 61361:tid 61381] [client 117.194.55.92:63789] [client 117.194.55.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.55.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghBfZZojzbt3jGziNlofgAAAVI"]
[Sat May 16 18:05:59.882054 2026] [:error] [pid 24979:tid 24992] [client 117.194.55.92:64176] [client 117.194.55.92] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.194.55.92, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghBh7vSFUQiwLaOL2qbIwAAAMs"]
[Sat May 16 18:24:05.958369 2026] [:error] [pid 61411:tid 61415] [client 37.187.226.31:59156] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "aghFxWVkiEwGnPL_dvEMmgAAAYI"]
[Sat May 16 18:24:09.149286 2026] [:error] [pid 61361:tid 61365] [client 37.187.226.31:58498] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "aghFyZZojzbt3jGziNlrNwAAAUI"]
[Sat May 16 18:24:12.120124 2026] [:error] [pid 61411:tid 61430] [client 37.187.226.31:58512] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "aghFzGVkiEwGnPL_dvEMnAAAAZE"]
[Sat May 16 18:24:14.861528 2026] [:error] [pid 5602:tid 5612] [client 37.187.226.31:36108] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "aghFztzTTsu77r3UIskxFQAAAQg"]
[Sat May 16 18:24:17.671419 2026] [:error] [pid 61361:tid 61383] [client 37.187.226.31:36124] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "aghF0ZZojzbt3jGziNlrOwAAAVQ"]
[Sat May 16 18:24:20.389505 2026] [:error] [pid 61361:tid 61386] [client 37.187.226.31:36126] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "aghF1JZojzbt3jGziNlrPwAAAVc"]
[Sat May 16 18:24:23.553074 2026] [:error] [pid 62210:tid 62216] [client 37.187.226.31:58412] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "aghF18jHonCA4ORo40HMigAAAkQ"]
[Sat May 16 18:24:26.388482 2026] [:error] [pid 61361:tid 61366] [client 37.187.226.31:58426] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "aghF2pZojzbt3jGziNlrVwAAAUM"]
[Sat May 16 18:24:29.027040 2026] [:error] [pid 24979:tid 24988] [client 37.187.226.31:58438] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "aghF3bvSFUQiwLaOL2qcnAAAAMc"]
[Sat May 16 18:24:31.884467 2026] [:error] [pid 24979:tid 24998] [client 37.187.226.31:58442] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "aghF37vSFUQiwLaOL2qcoQAAANE"]
[Sat May 16 18:24:34.495823 2026] [:error] [pid 5602:tid 5619] [client 37.187.226.31:41858] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "aghF4tzTTsu77r3UIskxHwAAAQ8"]
[Sat May 16 18:24:37.247666 2026] [:error] [pid 61361:tid 61369] [client 37.187.226.31:41860] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "aghF5ZZojzbt3jGziNlrZwAAAUY"]
[Sat May 16 18:24:39.868758 2026] [:error] [pid 61411:tid 61428] [client 37.187.226.31:41864] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "aghF52VkiEwGnPL_dvEMrAAAAY8"]
[Sat May 16 18:24:42.589106 2026] [:error] [pid 61361:tid 61382] [client 37.187.226.31:41868] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "aghF6pZojzbt3jGziNlrcQAAAVM"]
[Sat May 16 18:24:45.235633 2026] [:error] [pid 61463:tid 61467] [client 37.187.226.31:49040] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "aghF7TXdL1WU7nYXPmTzRwAAAcI"]
[Sat May 16 18:24:48.258475 2026] [:error] [pid 62210:tid 62212] [client 37.187.226.31:49056] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "aghF8MjHonCA4ORo40HMjAAAAkA"]
[Sat May 16 18:24:50.975400 2026] [:error] [pid 24874:tid 24935] [client 37.187.226.31:49066] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "aghF8siii6x3XidYGHHc1gAAAIA"]
[Sat May 16 18:24:53.660732 2026] [:error] [pid 62341:tid 62366] [client 37.187.226.31:33348] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "aghF9anvQ59ep-XG78i4RgAAApQ"]
[Sat May 16 18:24:56.224010 2026] [:error] [pid 24869:tid 24916] [client 37.187.226.31:33354] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "aghF-Oxo3FMprMltYl41ogAAAEg"]
[Sat May 16 18:24:58.791162 2026] [:error] [pid 62341:tid 62356] [client 37.187.226.31:33364] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "aghF-qnvQ59ep-XG78i4SAAAAoo"]
[Sat May 16 18:25:02.556731 2026] [:error] [pid 24867:tid 24904] [client 37.187.226.31:33374] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "aghF_iDgFLCgyKq-zmYahAAAABc"]
[Sat May 16 18:25:34.835762 2026] [:error] [pid 24869:tid 24921] [client 37.187.226.31:33772] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "aghGHuxo3FMprMltYl41sgAAAE0"]
[Sat May 16 18:25:37.547202 2026] [:error] [pid 24869:tid 24929] [client 37.187.226.31:43548] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "aghGIexo3FMprMltYl41swAAAFU"]
[Sat May 16 18:25:40.047561 2026] [:error] [pid 24869:tid 24914] [client 37.187.226.31:43562] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "aghGJOxo3FMprMltYl41tAAAAEY"]
[Sat May 16 18:25:42.528302 2026] [:error] [pid 61411:tid 61433] [client 37.187.226.31:43572] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "aghGJmVkiEwGnPL_dvEMsgAAAZQ"]
[Sat May 16 18:25:45.110861 2026] [:error] [pid 24867:tid 24895] [client 37.187.226.31:46378] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "aghGKSDgFLCgyKq-zmYajQAAAA4"]
[Sat May 16 18:25:47.791566 2026] [:error] [pid 24867:tid 24885] [client 37.187.226.31:46382] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "aghGKyDgFLCgyKq-zmYajwAAAAQ"]
[Sat May 16 18:25:50.233720 2026] [:error] [pid 61361:tid 61367] [client 37.187.226.31:46386] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "aghGLpZojzbt3jGziNlrhwAAAUQ"]
[Sat May 16 18:25:52.724852 2026] [:error] [pid 61361:tid 61365] [client 37.187.226.31:45528] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "aghGMJZojzbt3jGziNlrigAAAUI"]
[Sat May 16 18:25:55.947172 2026] [:error] [pid 24979:tid 24985] [client 37.187.226.31:45544] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "aghGM7vSFUQiwLaOL2qcqwAAAMQ"]
[Sat May 16 18:25:58.513057 2026] [:error] [pid 61463:tid 61484] [client 37.187.226.31:45556] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "aghGNjXdL1WU7nYXPmTzTwAAAdM"]
[Sat May 16 18:26:01.024622 2026] [:error] [pid 24867:tid 24891] [client 37.187.226.31:45560] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "aghGOSDgFLCgyKq-zmYakAAAAAo"]
[Sat May 16 18:26:03.657360 2026] [:error] [pid 61361:tid 61376] [client 37.187.226.31:45776] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "aghGO5Zojzbt3jGziNlrjgAAAU0"]
[Sat May 16 18:26:06.287016 2026] [:error] [pid 61361:tid 61379] [client 37.187.226.31:45782] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "aghGPpZojzbt3jGziNlrkAAAAVA"]
[Sat May 16 18:26:08.822417 2026] [:error] [pid 5602:tid 5627] [client 37.187.226.31:45798] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "aghGQNzTTsu77r3UIskxLQAAARc"]
[Sat May 16 18:26:11.273865 2026] [:error] [pid 24979:tid 24997] [client 37.187.226.31:45802] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "aghGQ7vSFUQiwLaOL2qcrAAAANA"]
[Sat May 16 18:26:13.679438 2026] [:error] [pid 61411:tid 61432] [client 37.187.226.31:40534] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aghGRWVkiEwGnPL_dvEMtQAAAZM"]
[Sat May 16 18:26:16.120962 2026] [:error] [pid 24874:tid 24942] [client 37.187.226.31:40544] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aghGSMiii6x3XidYGHHc2wAAAIc"]
[Sat May 16 18:26:18.528414 2026] [:error] [pid 61361:tid 61370] [client 37.187.226.31:40556] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aghGSpZojzbt3jGziNlrrQAAAUc"]
[Sat May 16 18:26:20.877683 2026] [:error] [pid 24867:tid 24901] [client 37.187.226.31:40564] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aghGTCDgFLCgyKq-zmYalAAAABQ"]
[Sat May 16 18:26:23.219126 2026] [:error] [pid 24979:tid 24983] [client 37.187.226.31:56080] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aghGT7vSFUQiwLaOL2qcswAAAMI"]
[Sat May 16 18:26:25.727507 2026] [:error] [pid 61411:tid 61428] [client 37.187.226.31:56088] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aghGUWVkiEwGnPL_dvEMtgAAAY8"]
[Sat May 16 18:26:28.106814 2026] [:error] [pid 24874:tid 24935] [client 37.187.226.31:56094] [client 37.187.226.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aghGVMiii6x3XidYGHHc3gAAAIA"]
[Sat May 16 18:36:15.417949 2026] [:error] [pid 24979:tid 24992] [client 157.50.169.93:49687] [client 157.50.169.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.50.169.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghIn7vSFUQiwLaOL2qdKwAAAMs"]
[Sat May 16 18:36:30.798475 2026] [:error] [pid 62341:tid 62357] [client 157.50.169.93:49889] [client 157.50.169.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.50.169.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghIrqnvQ59ep-XG78i42wAAAos"]
[Sat May 16 18:38:04.463613 2026] [:error] [pid 24979:tid 24989] [client 157.50.169.93:54766] [client 157.50.169.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.50.169.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghJDLvSFUQiwLaOL2qdQQAAAMg"]
[Sat May 16 18:38:18.235264 2026] [:error] [pid 5602:tid 5627] [client 157.50.169.93:55509] [client 157.50.169.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.50.169.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghJGtzTTsu77r3UIskxgQAAARc"]
[Sat May 16 18:38:32.068607 2026] [:error] [pid 61361:tid 61382] [client 157.50.169.93:56249] [client 157.50.169.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.50.169.93, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghJKJZojzbt3jGziNlszQAAAVM"]
[Sat May 16 18:43:40.784910 2026] [:error] [pid 61361:tid 61379] [client 157.48.237.215:55205] [client 157.48.237.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.48.237.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghKXJZojzbt3jGziNltSwAAAVA"]
[Sat May 16 18:43:49.914797 2026] [:error] [pid 24874:tid 24955] [client 157.48.237.215:55458] [client 157.48.237.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.48.237.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghKZciii6x3XidYGHHdPAAAAJQ"]
[Sat May 16 18:44:00.496004 2026] [:error] [pid 61463:tid 61475] [client 157.48.237.215:55736] [client 157.48.237.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.48.237.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghKcDXdL1WU7nYXPmTz0AAAAco"]
[Sat May 16 18:44:11.182936 2026] [:error] [pid 24869:tid 24913] [client 157.48.237.215:56010] [client 157.48.237.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.48.237.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghKe-xo3FMprMltYl42EAAAAEU"]
[Sat May 16 18:44:21.814433 2026] [:error] [pid 61463:tid 61471] [client 157.48.237.215:56286] [client 157.48.237.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.48.237.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghKhTXdL1WU7nYXPmTz1QAAAcY"]
[Sat May 16 18:44:32.716432 2026] [:error] [pid 24979:tid 24997] [client 157.48.237.215:56557] [client 157.48.237.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.48.237.215, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghKkLvSFUQiwLaOL2qd5gAAANA"]
[Sat May 16 18:47:04.078475 2026] [:error] [pid 24867:tid 24895] [client 209.198.132.151:53712] [client 209.198.132.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.198.132.151, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghLKCDgFLCgyKq-zmYa6QAAAA4"]
[Sat May 16 18:53:52.794525 2026] [:error] [pid 5602:tid 5615] [client 157.48.103.197:50363] [client 157.48.103.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.48.103.197, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghMwNzTTsu77r3UIskyKgAAAQs"]
[Sat May 16 18:54:03.413081 2026] [:error] [pid 24869:tid 24911] [client 157.48.103.197:50825] [client 157.48.103.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.48.103.197, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghMy-xo3FMprMltYl42SQAAAEM"]
[Sat May 16 18:54:13.958929 2026] [:error] [pid 61361:tid 61384] [client 157.48.103.197:51196] [client 157.48.103.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.48.103.197, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghM1ZZojzbt3jGziNlugwAAAVU"]
[Sat May 16 18:54:24.697441 2026] [:error] [pid 24867:tid 24898] [client 157.48.103.197:51482] [client 157.48.103.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.48.103.197, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghM4CDgFLCgyKq-zmYbFAAAABE"]
[Sat May 16 18:54:37.713201 2026] [:error] [pid 61411:tid 61424] [client 157.48.103.197:51773] [client 157.48.103.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.48.103.197, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghM7WVkiEwGnPL_dvEPkAAAAYs"]
[Sat May 16 19:57:22.246180 2026] [:error] [pid 62210:tid 62215] [client 23.234.69.75:55900] [client 23.234.69.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.234.69.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghbosjHonCA4ORo40HQCgAAAkM"]
[Sat May 16 19:57:32.259368 2026] [:error] [pid 24867:tid 24891] [client 23.234.69.75:56452] [client 23.234.69.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.234.69.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghbrCDgFLCgyKq-zmYckAAAAAo"]
[Sat May 16 19:57:43.007798 2026] [:error] [pid 61361:tid 61372] [client 23.234.69.75:63161] [client 23.234.69.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.234.69.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghbt5Zojzbt3jGziNl3-AAAAUk"]
[Sat May 16 19:57:53.601559 2026] [:error] [pid 62210:tid 62221] [client 23.234.69.75:63491] [client 23.234.69.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.234.69.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghbwcjHonCA4ORo40HQDQAAAkk"]
[Sat May 16 19:58:04.188194 2026] [:error] [pid 24979:tid 24986] [client 23.234.69.75:63831] [client 23.234.69.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.234.69.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghbzLvSFUQiwLaOL2qlFgAAAMU"]
[Sat May 16 20:46:57.090287 2026] [:error] [pid 61361:tid 61383] [client 86.108.76.134:56004] [client 86.108.76.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.108.76.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghnQZZojzbt3jGziNl-iQAAAVQ"]
[Sat May 16 20:47:07.478880 2026] [:error] [pid 62341:tid 62369] [client 86.108.76.134:56378] [client 86.108.76.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.108.76.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghnS6nvQ59ep-XG78jBRgAAApc"]
[Sat May 16 20:47:18.076469 2026] [:error] [pid 61411:tid 61413] [client 86.108.76.134:56678] [client 86.108.76.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.108.76.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghnVmVkiEwGnPL_dvEaGQAAAYA"]
[Sat May 16 20:47:28.738525 2026] [:error] [pid 62341:tid 62351] [client 86.108.76.134:56979] [client 86.108.76.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.108.76.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghnYKnvQ59ep-XG78jBVAAAAoU"]
[Sat May 16 20:47:39.430929 2026] [:error] [pid 61411:tid 61432] [client 86.108.76.134:57285] [client 86.108.76.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.108.76.134, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aghna2VkiEwGnPL_dvEaPQAAAZM"]
[Sat May 16 20:50:54.534961 2026] [:error] [pid 62341:tid 62352] [client 43.162.114.69:53284] [client 43.162.114.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aghoLqnvQ59ep-XG78jBjwAAAoY"]
[Sat May 16 21:23:13.675900 2026] [:error] [pid 61463:tid 61478] [client 20.78.131.64:1900] [client 20.78.131.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aghvwTXdL1WU7nYXPmT6NwAAAc0"]
[Sat May 16 21:23:14.249788 2026] [:error] [pid 61361:tid 61379] [client 20.78.131.64:1695] [client 20.78.131.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aghvwpZojzbt3jGziNmDZQAAAVA"]
[Sat May 16 21:23:14.885699 2026] [:error] [pid 61411:tid 61414] [client 20.78.131.64:1909] [client 20.78.131.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aghvwmVkiEwGnPL_dvEdewAAAYE"]
[Sat May 16 21:23:15.476369 2026] [:error] [pid 61411:tid 61426] [client 20.78.131.64:1689] [client 20.78.131.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aghvw2VkiEwGnPL_dvEdfQAAAY0"]
[Sat May 16 21:53:49.540380 2026] [:error] [pid 24867:tid 24882] [client 85.154.146.14:55639] [client 85.154.146.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.154.146.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agh27SDgFLCgyKq-zmYfHwAAAAE"]
[Sat May 16 21:53:59.954061 2026] [:error] [pid 62210:tid 62236] [client 85.154.146.14:56207] [client 85.154.146.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.154.146.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agh298jHonCA4ORo40HUmAAAAlg"]
[Sat May 16 21:54:10.802693 2026] [:error] [pid 24979:tid 24983] [client 85.154.146.14:56611] [client 85.154.146.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.154.146.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agh3ArvSFUQiwLaOL2qurgAAAMI"]
[Sat May 16 21:54:21.501385 2026] [:error] [pid 5602:tid 5619] [client 85.154.146.14:63606] [client 85.154.146.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.154.146.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agh3DdzTTsu77r3UIsk75gAAAQ8"]
[Sat May 16 21:54:32.115030 2026] [:error] [pid 61411:tid 61436] [client 85.154.146.14:57357] [client 85.154.146.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.154.146.14, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agh3GGVkiEwGnPL_dvEgPwAAAZc"]
[Sat May 16 22:03:59.169199 2026] [:error] [pid 61411:tid 61430] [client 41.143.131.85:62849] [client 41.143.131.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.143.131.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agh5T2VkiEwGnPL_dvEheQAAAZE"]
[Sat May 16 22:04:09.602042 2026] [:error] [pid 24869:tid 24910] [client 41.143.131.85:63391] [client 41.143.131.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.143.131.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agh5Wexo3FMprMltYl482AAAAEI"]
[Sat May 16 22:04:20.159192 2026] [:error] [pid 61361:tid 61363] [client 41.143.131.85:63898] [client 41.143.131.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.143.131.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agh5ZJZojzbt3jGziNmKDgAAAUA"]
[Sat May 16 22:04:30.666888 2026] [:error] [pid 24979:tid 24985] [client 41.143.131.85:64279] [client 41.143.131.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.143.131.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agh5brvSFUQiwLaOL2qvUwAAAMQ"]
[Sat May 16 22:04:41.296276 2026] [:error] [pid 24867:tid 24890] [client 41.143.131.85:64682] [client 41.143.131.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.143.131.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agh5eSDgFLCgyKq-zmYfVgAAAAk"]
[Sat May 16 23:00:17.610648 2026] [:error] [pid 24979:tid 24985] [client 43.156.51.128:45334] [client 43.156.51.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agiGgbvSFUQiwLaOL2q0mwAAAMQ"]
[Sun May 17 00:15:07.626445 2026] [:error] [pid 62210:tid 62215] [client 20.189.203.136:4156] [client 20.189.203.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agiYC8jHonCA4ORo40HcRQAAAkM"]
[Sun May 17 00:15:08.113790 2026] [:error] [pid 61361:tid 61383] [client 20.189.203.136:3684] [client 20.189.203.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agiYDJZojzbt3jGziNmejQAAAVQ"]
[Sun May 17 00:15:08.626586 2026] [:error] [pid 24874:tid 24939] [client 20.189.203.136:4194] [client 20.189.203.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agiYDMiii6x3XidYGHHp_wAAAIQ"]
[Sun May 17 00:15:09.161022 2026] [:error] [pid 24874:tid 24949] [client 20.189.203.136:3695] [client 20.189.203.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agiYDciii6x3XidYGHHqAAAAAI4"]
[Sun May 17 00:42:31.683879 2026] [:error] [pid 61463:tid 61472] [client 173.231.249.1:39530] [client 173.231.249.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.231.249.1, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agiedzXdL1WU7nYXPmQCxgAAAcc"]
[Sun May 17 00:42:32.499285 2026] [proxy_fcgi:error] [pid 61463:tid 61472] [client 173.231.249.1:39530] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 17 00:42:33.390012 2026] [:error] [pid 61463:tid 61474] [client 173.231.249.1:39530] [client 173.231.249.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.231.249.1, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agieeTXdL1WU7nYXPmQCxwAAAck"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 00:42:34.330874 2026] [proxy_fcgi:error] [pid 61463:tid 61474] [client 173.231.249.1:39530] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 01:08:14.510148 2026] [:error] [pid 24979:tid 24993] [client 163.44.120.29:41092] [client 163.44.120.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.44.120.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agikfrvSFUQiwLaOL2rBFQAAAMw"]
[Sun May 17 01:08:15.312089 2026] [proxy_fcgi:error] [pid 24979:tid 24993] [client 163.44.120.29:41092] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 17 01:08:16.052456 2026] [:error] [pid 24979:tid 24998] [client 163.44.120.29:41092] [client 163.44.120.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.44.120.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agikgLvSFUQiwLaOL2rBFwAAANE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 01:08:17.053453 2026] [proxy_fcgi:error] [pid 24979:tid 24998] [client 163.44.120.29:41092] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 02:09:31.080521 2026] [:error] [pid 61411:tid 61427] [client 43.134.177.47:45044] [client 43.134.177.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agiy22VkiEwGnPL_dvFEXQAAAY4"]
[Sun May 17 02:14:18.449993 2026] [:error] [pid 62210:tid 62235] [client 92.118.39.29:32846] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "agiz-sjHonCA4ORo40HhjwAAAlc"]
[Sun May 17 03:34:18.574971 2026] [:error] [pid 59062:tid 59138] [client 1.12.70.96:47862] [client 1.12.70.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agjGuj4V9GkVWmCFmGajygAAAI8"]
[Sun May 17 04:02:55.098862 2026] [:error] [pid 59061:tid 59115] [client 152.53.187.237:35416] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "agjNb4YS410zAmsYkoLocwAAAFM"]
[Sun May 17 04:02:57.753917 2026] [:error] [pid 59062:tid 59130] [client 152.53.187.237:35424] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "agjNcT4V9GkVWmCFmGapwwAAAIc"]
[Sun May 17 04:03:00.460745 2026] [:error] [pid 59061:tid 59097] [client 152.53.187.237:35430] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "agjNdIYS410zAmsYkoLodgAAAEE"]
[Sun May 17 04:03:03.273649 2026] [:error] [pid 59166:tid 59172] [client 152.53.187.237:59452] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "agjNd0_puQ1I47_0Urib0wAAAMQ"]
[Sun May 17 04:03:05.971716 2026] [:error] [pid 59062:tid 59123] [client 152.53.187.237:59454] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "agjNeT4V9GkVWmCFmGapxwAAAIA"]
[Sun May 17 04:03:08.693191 2026] [:error] [pid 59062:tid 59132] [client 152.53.187.237:59458] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "agjNfD4V9GkVWmCFmGapzAAAAIk"]
[Sun May 17 04:03:11.408459 2026] [:error] [pid 59062:tid 59144] [client 152.53.187.237:46220] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "agjNfz4V9GkVWmCFmGap0AAAAJU"]
[Sun May 17 04:03:14.159102 2026] [:error] [pid 59062:tid 59128] [client 152.53.187.237:46228] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "agjNgj4V9GkVWmCFmGap0wAAAIU"]
[Sun May 17 04:03:16.670841 2026] [:error] [pid 59062:tid 59147] [client 152.53.187.237:46238] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "agjNhD4V9GkVWmCFmGap1gAAAJg"]
[Sun May 17 04:03:19.278423 2026] [:error] [pid 59166:tid 59172] [client 152.53.187.237:46246] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agjNh0_puQ1I47_0Urib4QAAAMQ"]
[Sun May 17 04:03:22.089417 2026] [:error] [pid 59062:tid 59146] [client 152.53.187.237:59592] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agjNij4V9GkVWmCFmGap2gAAAJc"]
[Sun May 17 04:03:24.656041 2026] [:error] [pid 59062:tid 59127] [client 152.53.187.237:59600] [client 152.53.187.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "agjNjD4V9GkVWmCFmGap3QAAAIQ"]
[Sun May 17 05:39:34.293490 2026] [:error] [pid 36652:tid 36669] [client 49.51.183.15:50780] [client 49.51.183.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agjkFjZrzQadnZADvj8HcAAAAQ8"]
[Sun May 17 07:34:11.679508 2026] [:error] [pid 36652:tid 36666] [client 208.122.218.181:44524] [client 208.122.218.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.122.218.181, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agj-8zZrzQadnZADvj8c9wAAAQw"]
[Sun May 17 07:34:12.497453 2026] [proxy_fcgi:error] [pid 36652:tid 36666] [client 208.122.218.181:44524] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 17 07:34:12.843359 2026] [:error] [pid 36652:tid 36671] [client 208.122.218.181:44524] [client 208.122.218.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.122.218.181, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agj-9DZrzQadnZADvj8c-QAAARE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 07:34:13.850158 2026] [proxy_fcgi:error] [pid 36652:tid 36671] [client 208.122.218.181:44524] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 09:07:21.050562 2026] [:error] [pid 36652:tid 36662] [client 200.24.116.9:55083] [client 200.24.116.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.24.116.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agkUyTZrzQadnZADvj8pwwAAAQg"]
[Sun May 17 09:07:30.525589 2026] [:error] [pid 17234:tid 17259] [client 200.24.116.9:54944] [client 200.24.116.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.24.116.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agkU0tJ4QOrYRCeDR2gPdQAAAVc"]
[Sun May 17 09:07:40.968691 2026] [:error] [pid 59060:tid 59069] [client 200.24.116.9:55008] [client 200.24.116.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.24.116.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agkU3Pvwvq3bndkPE4nPuAAAAAA"]
[Sun May 17 09:07:51.878423 2026] [:error] [pid 59060:tid 59093] [client 200.24.116.9:55007] [client 200.24.116.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.24.116.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agkU5_vwvq3bndkPE4nPuQAAABg"]
[Sun May 17 09:08:01.858906 2026] [:error] [pid 59061:tid 59116] [client 200.24.116.9:54972] [client 200.24.116.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.24.116.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agkU8YYS410zAmsYkoIB2wAAAFQ"]
[Sun May 17 11:39:03.106023 2026] [:error] [pid 59166:tid 59172] [client 43.157.174.69:44394] [client 43.157.174.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agk4V0_puQ1I47_0UrjRiQAAAMQ"]
[Sun May 17 11:49:54.375715 2026] [:error] [pid 36652:tid 36668] [client 67.20.113.139:53588] [client 67.20.113.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.20.113.139, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agk64jZrzQadnZADvj8_XwAAAQ4"]
[Sun May 17 11:49:55.196668 2026] [proxy_fcgi:error] [pid 36652:tid 36668] [client 67.20.113.139:53588] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 17 11:49:55.712998 2026] [:error] [pid 36652:tid 36674] [client 67.20.113.139:53588] [client 67.20.113.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.20.113.139, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agk64zZrzQadnZADvj8_YgAAARQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 11:49:56.683792 2026] [proxy_fcgi:error] [pid 36652:tid 36674] [client 67.20.113.139:53588] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 12:06:47.208188 2026] [:error] [pid 59062:tid 59126] [client 51.83.237.175:55844] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "agk-1z4V9GkVWmCFmGba0AAAAIM"]
[Sun May 17 12:06:49.620856 2026] [:error] [pid 59062:tid 59144] [client 51.83.237.175:60636] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "agk-2T4V9GkVWmCFmGba0gAAAJU"]
[Sun May 17 12:06:52.143554 2026] [:error] [pid 59062:tid 59130] [client 51.83.237.175:60646] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agk-3D4V9GkVWmCFmGba1QAAAIc"]
[Sun May 17 12:06:54.667934 2026] [:error] [pid 59061:tid 59099] [client 51.83.237.175:60650] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "agk-3oYS410zAmsYkoIOfgAAAEM"]
[Sun May 17 12:06:57.195296 2026] [:error] [pid 17234:tid 17238] [client 51.83.237.175:60666] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "agk-4dJ4QOrYRCeDR2gw8gAAAUI"]
[Sun May 17 12:06:59.711428 2026] [:error] [pid 17234:tid 17259] [client 51.83.237.175:58622] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "agk-49J4QOrYRCeDR2gw9AAAAVc"]
[Sun May 17 12:07:02.083068 2026] [:error] [pid 17234:tid 17248] [client 51.83.237.175:58634] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "agk-5tJ4QOrYRCeDR2gw_QAAAUw"]
[Sun May 17 12:07:04.602386 2026] [:error] [pid 36652:tid 36662] [client 51.83.237.175:58638] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "agk-6DZrzQadnZADvj9BgQAAAQg"]
[Sun May 17 12:07:07.123080 2026] [:error] [pid 59061:tid 59098] [client 51.83.237.175:58650] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agk-64YS410zAmsYkoIOhQAAAEI"]
[Sun May 17 12:07:09.645840 2026] [:error] [pid 59166:tid 59180] [client 51.83.237.175:58198] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "agk-7U_puQ1I47_0UrjUFgAAAMw"]
[Sun May 17 12:07:12.162718 2026] [:error] [pid 59166:tid 59188] [client 51.83.237.175:58204] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agk-8E_puQ1I47_0UrjULAAAANQ"]
[Sun May 17 12:07:12.829367 2026] [:error] [pid 17234:tid 17252] [client 51.83.237.175:58214] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "agk-8NJ4QOrYRCeDR2gxFQAAAVA"]
[Sun May 17 12:07:14.700136 2026] [:error] [pid 36652:tid 36660] [client 51.83.237.175:58230] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agk-8jZrzQadnZADvj9BiQAAAQY"]
[Sun May 17 12:07:17.189233 2026] [:error] [pid 17234:tid 17236] [client 51.83.237.175:58244] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agk-9dJ4QOrYRCeDR2gxGAAAAUA"]
[Sun May 17 12:07:17.282734 2026] [:error] [pid 17234:tid 17240] [client 51.83.237.175:58250] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/robots.txt"] [unique_id "agk-9dJ4QOrYRCeDR2gxGQAAAUQ"]
[Sun May 17 12:07:19.724385 2026] [:error] [pid 59060:tid 59085] [client 51.83.237.175:49226] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "agk-9_vwvq3bndkPE4nY_wAAABA"]
[Sun May 17 12:07:22.084206 2026] [:error] [pid 59062:tid 59146] [client 51.83.237.175:49234] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "agk--j4V9GkVWmCFmGba7wAAAJc"]
[Sun May 17 12:07:24.583835 2026] [:error] [pid 36652:tid 36670] [client 51.83.237.175:49248] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "agk-_DZrzQadnZADvj9BkwAAARA"]
[Sun May 17 12:07:27.086112 2026] [:error] [pid 59166:tid 59182] [client 51.83.237.175:49258] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "agk-_0_puQ1I47_0UrjUMgAAAM4"]
[Sun May 17 12:07:29.627485 2026] [:error] [pid 59166:tid 59181] [client 51.83.237.175:40426] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "agk_AU_puQ1I47_0UrjUNgAAAM0"]
[Sun May 17 12:07:32.137736 2026] [:error] [pid 17234:tid 17257] [client 51.83.237.175:40434] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "agk_BNJ4QOrYRCeDR2gxJwAAAVU"]
[Sun May 17 12:07:34.536215 2026] [:error] [pid 59166:tid 59180] [client 51.83.237.175:40438] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "agk_Bk_puQ1I47_0UrjUOAAAAMw"]
[Sun May 17 12:07:37.053613 2026] [:error] [pid 59060:tid 59091] [client 51.83.237.175:40454] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "agk_Cfvwvq3bndkPE4nZAwAAABY"]
[Sun May 17 12:07:39.568143 2026] [:error] [pid 17234:tid 17243] [client 51.83.237.175:33838] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "agk_C9J4QOrYRCeDR2gxLwAAAUc"]
[Sun May 17 12:07:41.944755 2026] [:error] [pid 59061:tid 59101] [client 51.83.237.175:33846] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "agk_DYYS410zAmsYkoIOlAAAAEU"]
[Sun May 17 12:08:12.567617 2026] [:error] [pid 59061:tid 59117] [client 51.83.237.175:33856] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agk_LIYS410zAmsYkoIOpQAAAFU"]
[Sun May 17 12:08:15.081840 2026] [:error] [pid 17234:tid 17244] [client 51.83.237.175:57144] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "agk_L9J4QOrYRCeDR2gxPQAAAUg"]
[Sun May 17 12:08:17.558939 2026] [:error] [pid 17234:tid 17237] [client 51.83.237.175:49890] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agk_MdJ4QOrYRCeDR2gxRQAAAUE"]
[Sun May 17 12:08:19.942027 2026] [:error] [pid 36652:tid 36674] [client 51.83.237.175:49904] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "agk_MzZrzQadnZADvj9BvAAAARQ"]
[Sun May 17 12:08:22.515648 2026] [:error] [pid 59061:tid 59114] [client 51.83.237.175:49920] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "agk_NoYS410zAmsYkoIOqAAAAFI"]
[Sun May 17 12:08:24.863055 2026] [:error] [pid 36652:tid 36656] [client 51.83.237.175:49932] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agk_ODZrzQadnZADvj9BwQAAAQI"]
[Sun May 17 12:08:27.413524 2026] [:error] [pid 36652:tid 36662] [client 51.83.237.175:38902] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "agk_OzZrzQadnZADvj9BwgAAAQg"]
[Sun May 17 12:08:29.964274 2026] [:error] [pid 36652:tid 36654] [client 51.83.237.175:38910] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "agk_PTZrzQadnZADvj9BwwAAAQA"]
[Sun May 17 12:08:32.488212 2026] [:error] [pid 59060:tid 59091] [client 51.83.237.175:38922] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "agk_QPvwvq3bndkPE4nZCwAAABY"]
[Sun May 17 12:08:34.979121 2026] [:error] [pid 36652:tid 36668] [client 51.83.237.175:38930] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agk_QjZrzQadnZADvj9BxwAAAQ4"]
[Sun May 17 12:08:37.497632 2026] [:error] [pid 17234:tid 17246] [client 51.83.237.175:48700] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "agk_RdJ4QOrYRCeDR2gxSgAAAUo"]
[Sun May 17 12:08:40.013725 2026] [:error] [pid 59062:tid 59145] [client 51.83.237.175:48704] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "agk_SD4V9GkVWmCFmGbbAgAAAJY"]
[Sun May 17 12:08:42.533405 2026] [:error] [pid 59061:tid 59109] [client 51.83.237.175:48710] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agk_SoYS410zAmsYkoIOrwAAAE0"]
[Sun May 17 12:08:44.995893 2026] [:error] [pid 36652:tid 36670] [client 51.83.237.175:48714] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "agk_TDZrzQadnZADvj9BygAAARA"]
[Sun May 17 12:08:47.549210 2026] [:error] [pid 17234:tid 17243] [client 51.83.237.175:48542] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "agk_T9J4QOrYRCeDR2gxZwAAAUc"]
[Sun May 17 12:08:49.940767 2026] [:error] [pid 36652:tid 36678] [client 51.83.237.175:48558] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "agk_UTZrzQadnZADvj9B0AAAARg"]
[Sun May 17 12:08:52.460839 2026] [:error] [pid 17234:tid 17245] [client 51.83.237.175:48574] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "agk_VNJ4QOrYRCeDR2gxeQAAAUk"]
[Sun May 17 12:08:54.951044 2026] [:error] [pid 17234:tid 17260] [client 51.83.237.175:48584] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agk_VtJ4QOrYRCeDR2gxggAAAVg"]
[Sun May 17 12:08:57.444287 2026] [:error] [pid 36652:tid 36667] [client 51.83.237.175:55088] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "agk_WTZrzQadnZADvj9B1QAAAQ0"]
[Sun May 17 12:08:59.948268 2026] [:error] [pid 36652:tid 36654] [client 51.83.237.175:55094] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "agk_WzZrzQadnZADvj9B2gAAAQA"]
[Sun May 17 12:09:48.052460 2026] [:error] [pid 59061:tid 59119] [client 51.83.237.175:52166] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "agk_jIYS410zAmsYkoIO5QAAAFc"]
[Sun May 17 12:09:50.443738 2026] [:error] [pid 59166:tid 59181] [client 51.83.237.175:53720] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "agk_jk_puQ1I47_0UrjUsAAAAM0"]
[Sun May 17 12:09:52.848917 2026] [:error] [pid 17234:tid 17239] [client 51.83.237.175:53736] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agk_kNJ4QOrYRCeDR2gx9gAAAUM"]
[Sun May 17 12:09:55.296886 2026] [:error] [pid 59061:tid 59116] [client 51.83.237.175:53752] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "agk_k4YS410zAmsYkoIO7AAAAFQ"]
[Sun May 17 12:09:57.803811 2026] [:error] [pid 17234:tid 17237] [client 51.83.237.175:32772] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "agk_ldJ4QOrYRCeDR2gx-AAAAUE"]
[Sun May 17 12:10:00.293220 2026] [:error] [pid 17234:tid 17241] [client 51.83.237.175:32778] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "agk_mNJ4QOrYRCeDR2gx-wAAAUU"]
[Sun May 17 12:10:02.782432 2026] [:error] [pid 17234:tid 17244] [client 51.83.237.175:32794] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "agk_mtJ4QOrYRCeDR2gx_wAAAUg"]
[Sun May 17 12:10:05.121381 2026] [:error] [pid 59062:tid 59145] [client 51.83.237.175:32810] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "agk_nT4V9GkVWmCFmGbbMgAAAJY"]
[Sun May 17 12:10:07.610819 2026] [:error] [pid 59061:tid 59115] [client 51.83.237.175:60804] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agk_n4YS410zAmsYkoIO9AAAAFM"]
[Sun May 17 12:10:09.954806 2026] [:error] [pid 59166:tid 59177] [client 51.83.237.175:60818] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "agk_oU_puQ1I47_0UrjUuQAAAMk"]
[Sun May 17 12:10:12.439451 2026] [:error] [pid 36652:tid 36659] [client 51.83.237.175:60820] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agk_pDZrzQadnZADvj9CGAAAAQU"]
[Sun May 17 12:10:14.736932 2026] [:error] [pid 59166:tid 59189] [client 51.83.237.175:60832] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agk_pk_puQ1I47_0UrjUuwAAANU"]
[Sun May 17 12:10:17.170340 2026] [:error] [pid 17234:tid 17243] [client 51.83.237.175:60838] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agk_qdJ4QOrYRCeDR2gyDQAAAUc"]
[Sun May 17 12:10:19.657700 2026] [:error] [pid 59061:tid 59111] [client 51.83.237.175:46198] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "agk_q4YS410zAmsYkoIO-wAAAE8"]
[Sun May 17 12:10:22.191656 2026] [:error] [pid 59166:tid 59173] [client 51.83.237.175:46208] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "agk_rk_puQ1I47_0UrjUvgAAAMU"]
[Sun May 17 12:10:24.700725 2026] [:error] [pid 36652:tid 36660] [client 51.83.237.175:46218] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "agk_sDZrzQadnZADvj9CGQAAAQY"]
[Sun May 17 12:10:27.257635 2026] [:error] [pid 36652:tid 36662] [client 51.83.237.175:46220] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "agk_szZrzQadnZADvj9CIAAAAQg"]
[Sun May 17 12:10:29.763337 2026] [:error] [pid 36652:tid 36661] [client 51.83.237.175:54304] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "agk_tTZrzQadnZADvj9CIQAAAQc"]
[Sun May 17 12:10:32.170756 2026] [:error] [pid 17234:tid 17254] [client 51.83.237.175:54314] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "agk_uNJ4QOrYRCeDR2gyFwAAAVI"]
[Sun May 17 12:10:34.704168 2026] [:error] [pid 59061:tid 59106] [client 51.83.237.175:54320] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "agk_uoYS410zAmsYkoIO_gAAAEo"]
[Sun May 17 12:10:37.152856 2026] [:error] [pid 36652:tid 36677] [client 51.83.237.175:54334] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "agk_vTZrzQadnZADvj9CKAAAARc"]
[Sun May 17 12:10:39.492996 2026] [:error] [pid 59061:tid 59112] [client 51.83.237.175:56374] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "agk_v4YS410zAmsYkoIO_wAAAFA"]
[Sun May 17 12:10:42.001345 2026] [:error] [pid 36652:tid 36675] [client 51.83.237.175:56386] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "agk_wjZrzQadnZADvj9CLAAAARU"]
[Sun May 17 12:10:44.538557 2026] [:error] [pid 17234:tid 17255] [client 51.83.237.175:56402] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "agk_xNJ4QOrYRCeDR2gyIAAAAVM"]
[Sun May 17 12:11:15.086605 2026] [:error] [pid 59062:tid 59142] [client 51.83.237.175:56404] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "agk_4z4V9GkVWmCFmGbbZQAAAJM"]
[Sun May 17 12:11:17.601948 2026] [:error] [pid 17234:tid 17248] [client 51.83.237.175:41018] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agk_5dJ4QOrYRCeDR2gyPgAAAUw"]
[Sun May 17 12:11:19.964463 2026] [:error] [pid 17234:tid 17251] [client 51.83.237.175:41032] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "agk_59J4QOrYRCeDR2gyQAAAAU8"]
[Sun May 17 12:11:22.515179 2026] [:error] [pid 17234:tid 17236] [client 51.83.237.175:41040] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "agk_6tJ4QOrYRCeDR2gyRgAAAUA"]
[Sun May 17 12:11:24.908229 2026] [:error] [pid 36652:tid 36677] [client 51.83.237.175:41052] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agk_7DZrzQadnZADvj9CcgAAARc"]
[Sun May 17 12:11:27.385141 2026] [:error] [pid 36652:tid 36659] [client 51.83.237.175:36582] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "agk_7zZrzQadnZADvj9CegAAAQU"]
[Sun May 17 12:11:29.888342 2026] [:error] [pid 17234:tid 17258] [client 51.83.237.175:36584] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "agk_8dJ4QOrYRCeDR2gyRwAAAVY"]
[Sun May 17 12:11:32.269303 2026] [:error] [pid 17234:tid 17251] [client 51.83.237.175:36596] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "agk_9NJ4QOrYRCeDR2gyTQAAAU8"]
[Sun May 17 12:11:34.646338 2026] [:error] [pid 17234:tid 17252] [client 51.83.237.175:36612] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agk_9tJ4QOrYRCeDR2gyUwAAAVA"]
[Sun May 17 12:11:37.024863 2026] [:error] [pid 36652:tid 36665] [client 51.83.237.175:36624] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "agk_-TZrzQadnZADvj9CkAAAAQs"]
[Sun May 17 12:11:39.522671 2026] [:error] [pid 59166:tid 59179] [client 51.83.237.175:43678] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "agk_-0_puQ1I47_0UrjU5AAAAMs"]
[Sun May 17 12:11:42.033069 2026] [:error] [pid 36652:tid 36659] [client 51.83.237.175:43692] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agk__jZrzQadnZADvj9ClQAAAQU"]
[Sun May 17 12:11:44.433204 2026] [:error] [pid 17234:tid 17239] [client 51.83.237.175:43702] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "aglAANJ4QOrYRCeDR2gyfQAAAUM"]
[Sun May 17 12:11:46.974941 2026] [:error] [pid 36652:tid 36671] [client 51.83.237.175:43716] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "aglAAjZrzQadnZADvj9ClwAAARE"]
[Sun May 17 12:11:49.471505 2026] [:error] [pid 59061:tid 59116] [client 51.83.237.175:44254] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "aglABYYS410zAmsYkoIPCgAAAFQ"]
[Sun May 17 12:11:51.957754 2026] [:error] [pid 17234:tid 17236] [client 51.83.237.175:44256] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "aglAB9J4QOrYRCeDR2gyhQAAAUA"]
[Sun May 17 12:11:54.482679 2026] [:error] [pid 17234:tid 17239] [client 51.83.237.175:44270] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "aglACtJ4QOrYRCeDR2gyhwAAAUM"]
[Sun May 17 12:11:56.852110 2026] [:error] [pid 36652:tid 36665] [client 51.83.237.175:44284] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "aglADDZrzQadnZADvj9CmgAAAQs"]
[Sun May 17 12:11:59.310000 2026] [:error] [pid 59166:tid 59174] [client 51.83.237.175:54628] [client 51.83.237.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "aglAD0_puQ1I47_0UrjU8QAAAMY"]
[Sun May 17 13:03:23.693135 2026] [:error] [pid 59060:tid 59088] [client 192.96.159.129:64105] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "aglMG_vwvq3bndkPE4ndJAAAABM"]
[Sun May 17 13:45:22.031089 2026] [:error] [pid 10784:tid 10814] [client 20.89.251.192:2564] [client 20.89.251.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aglV8mBWRlKsFkSZGxAt2QAAAY8"]
[Sun May 17 13:45:22.514820 2026] [:error] [pid 36652:tid 36659] [client 20.89.251.192:2584] [client 20.89.251.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aglV8jZrzQadnZADvj9LCAAAAQU"]
[Sun May 17 13:45:23.009099 2026] [:error] [pid 59062:tid 59138] [client 20.89.251.192:2613] [client 20.89.251.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aglV8z4V9GkVWmCFmGbkaAAAAI8"]
[Sun May 17 13:45:23.552992 2026] [:error] [pid 59062:tid 59144] [client 20.89.251.192:2562] [client 20.89.251.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "aglV8z4V9GkVWmCFmGbkaQAAAJU"]
[Sun May 17 14:29:31.458422 2026] [:error] [pid 17234:tid 17242] [client 129.226.211.69:60364] [client 129.226.211.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "aglgS9J4QOrYRCeDR2hDdgAAAUY"]
[Sun May 17 14:54:16.550814 2026] [:error] [pid 59061:tid 59110] [client 103.28.36.122:33688] [client 103.28.36.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.122, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aglmGIYS410zAmsYkoIYOQAAAE4"]
[Sun May 17 14:54:17.311144 2026] [proxy_fcgi:error] [pid 59061:tid 59110] [client 103.28.36.122:33688] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 17 14:54:19.258208 2026] [:error] [pid 59061:tid 59117] [client 103.28.36.122:33688] [client 103.28.36.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.122, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "aglmG4YS410zAmsYkoIYOgAAAFU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 14:54:20.202580 2026] [proxy_fcgi:error] [pid 59061:tid 59117] [client 103.28.36.122:33688] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 16:29:50.353742 2026] [:error] [pid 10784:tid 10816] [client 188.2.148.27:55216] [client 188.2.148.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.2.148.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agl8fmBWRlKsFkSZGxA5YQAAAZA"]
[Sun May 17 16:31:56.172078 2026] [:error] [pid 36652:tid 36659] [client 188.2.148.27:59953] [client 188.2.148.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.2.148.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agl8_DZrzQadnZADvj9RqgAAAQU"]
[Sun May 17 16:36:11.344349 2026] [:error] [pid 17234:tid 17260] [client 188.2.148.27:53005] [client 188.2.148.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.2.148.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agl9-9J4QOrYRCeDR2hM8AAAAVg"]
[Sun May 17 16:38:15.787213 2026] [:error] [pid 11079:tid 11128] [client 188.2.148.27:58318] [client 188.2.148.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.2.148.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agl-d2eR3-DrxhvUqxHI4AAAAlg"]
[Sun May 17 16:40:23.529532 2026] [:error] [pid 11079:tid 11106] [client 188.2.148.27:63314] [client 188.2.148.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.2.148.27, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agl-92eR3-DrxhvUqxHJlwAAAkY"]
[Sun May 17 17:07:22.165078 2026] [:error] [pid 10835:tid 10880] [client 170.106.160.90:48916] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agmFSkk8lW0-dtknLl8NFwAAAgc"]
[Sun May 17 18:13:30.480469 2026] [:error] [pid 59062:tid 59135] [client 49.37.213.250:26647] [client 49.37.213.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.213.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agmUyj4V9GkVWmCFmGYL0gAAAIw"]
[Sun May 17 18:14:30.111874 2026] [:error] [pid 59060:tid 59077] [client 49.37.213.250:26677] [client 49.37.213.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.213.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agmVBvvwvq3bndkPE4nsCwAAAAg"]
[Sun May 17 18:14:56.137181 2026] [:error] [pid 59166:tid 59176] [client 49.37.213.250:26611] [client 49.37.213.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.213.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agmVIE_puQ1I47_0UrjpgAAAAMg"]
[Sun May 17 18:16:01.928885 2026] [:error] [pid 59061:tid 59103] [client 223.236.99.97:6181] [client 223.236.99.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.236.99.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agmVYYYS410zAmsYkoIkSwAAAEc"]
[Sun May 17 18:16:03.686967 2026] [:error] [pid 10835:tid 10876] [client 49.37.213.250:26719] [client 49.37.213.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.213.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agmVY0k8lW0-dtknLl8VSQAAAgM"]
[Sun May 17 18:16:12.278289 2026] [:error] [pid 11079:tid 11123] [client 223.236.99.97:6000] [client 223.236.99.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.236.99.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agmVbGeR3-DrxhvUqxHcJQAAAlM"]
[Sun May 17 18:16:23.019483 2026] [:error] [pid 11079:tid 11100] [client 223.236.99.97:4084] [client 223.236.99.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.236.99.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agmVd2eR3-DrxhvUqxHcOAAAAkA"]
[Sun May 17 18:16:23.393180 2026] [:error] [pid 59061:tid 59115] [client 49.37.213.250:26590] [client 49.37.213.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.213.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agmVd4YS410zAmsYkoIkTgAAAFM"]
[Sun May 17 18:16:33.757655 2026] [:error] [pid 11079:tid 11117] [client 223.236.99.97:10752] [client 223.236.99.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.236.99.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agmVgWeR3-DrxhvUqxHcOgAAAk0"]
[Sun May 17 18:16:44.617717 2026] [:error] [pid 10835:tid 10874] [client 223.236.99.97:29225] [client 223.236.99.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.236.99.97, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agmVjEk8lW0-dtknLl8VVwAAAgE"]
[Sun May 17 18:46:07.928330 2026] [:error] [pid 59062:tid 59134] [client 108.174.148.127:39718] [client 108.174.148.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.174.148.127, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agmcbz4V9GkVWmCFmGYPkAAAAIs"]
[Sun May 17 18:46:10.064789 2026] [proxy_fcgi:error] [pid 59062:tid 59134] [client 108.174.148.127:39718] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 17 18:46:11.340650 2026] [:error] [pid 59062:tid 59140] [client 108.174.148.127:39718] [client 108.174.148.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.174.148.127, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agmccz4V9GkVWmCFmGYPlQAAAJE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 18:46:12.295405 2026] [proxy_fcgi:error] [pid 59062:tid 59140] [client 108.174.148.127:39718] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 17 19:35:26.742379 2026] [:error] [pid 59062:tid 59145] [client 43.153.102.138:54682] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agmn_j4V9GkVWmCFmGYXygAAAJY"]
[Sun May 17 20:41:14.543204 2026] [:error] [pid 59062:tid 59135] [client 182.70.180.164:13959] [client 182.70.180.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.70.180.164, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agm3aj4V9GkVWmCFmGYkQgAAAIw"]
[Sun May 17 20:41:24.612533 2026] [:error] [pid 10835:tid 10885] [client 182.70.180.164:30402] [client 182.70.180.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.70.180.164, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agm3dEk8lW0-dtknLl8oygAAAgw"]
[Sun May 17 20:41:35.383424 2026] [:error] [pid 59060:tid 59073] [client 182.70.180.164:28397] [client 182.70.180.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.70.180.164, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agm3f_vwvq3bndkPE4nz7gAAAAQ"]
[Sun May 17 20:41:46.015747 2026] [:error] [pid 10784:tid 10803] [client 182.70.180.164:14443] [client 182.70.180.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.70.180.164, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agm3imBWRlKsFkSZGxBLugAAAYQ"]
[Sun May 17 20:41:56.697398 2026] [:error] [pid 59061:tid 59117] [client 182.70.180.164:8373] [client 182.70.180.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.70.180.164, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agm3lIYS410zAmsYkoItLAAAAFU"]
[Sun May 17 21:37:05.269292 2026] [:error] [pid 10835:tid 10884] [client 85.203.21.58:20941] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agnEgUk8lW0-dtknLl8vNQAAAgs"]
[Sun May 17 21:37:10.465398 2026] [:error] [pid 11079:tid 11122] [client 85.203.21.54:49035] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/edit-tags.php"] [unique_id "agnEhmeR3-DrxhvUqxEAowAAAlI"]
[Sun May 17 21:37:10.665881 2026] [:error] [pid 11079:tid 11116] [client 85.203.21.157:55621] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "agnEhmeR3-DrxhvUqxEApAAAAkw"]
[Sun May 17 21:37:10.861075 2026] [:error] [pid 10784:tid 10808] [client 85.203.21.221:39231] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wpx/"] [unique_id "agnEhmBWRlKsFkSZGxBPYwAAAYk"]
[Sun May 17 21:37:11.060307 2026] [:error] [pid 59061:tid 59098] [client 85.203.21.157:38463] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/Nxploited/Nx.php"] [unique_id "agnEh4YS410zAmsYkoIwVAAAAEI"]
[Sun May 17 21:37:11.260648 2026] [:error] [pid 59166:tid 59188] [client 85.203.21.45:25075] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/filemanager.php"] [unique_id "agnEh0_puQ1I47_0UrjypQAAANQ"]
[Sun May 17 21:37:11.458640 2026] [:error] [pid 59060:tid 59084] [client 85.203.21.192:32333] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "agnEh_vwvq3bndkPE4n2-QAAAA8"]
[Sun May 17 21:37:11.661513 2026] [:error] [pid 10835:tid 10891] [client 85.203.21.206:64469] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "agnEh0k8lW0-dtknLl8vOwAAAhI"]
[Sun May 17 21:37:11.935869 2026] [:error] [pid 59062:tid 59128] [client 85.203.21.172:21419] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/"] [unique_id "agnEhz4V9GkVWmCFmGYu6QAAAIU"]
[Sun May 17 21:37:17.184335 2026] [:error] [pid 10784:tid 10804] [client 85.203.21.160:34565] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "agnEjWBWRlKsFkSZGxBPZQAAAYU"]
[Sun May 17 21:37:22.396821 2026] [:error] [pid 59062:tid 59146] [client 85.203.21.162:63177] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "agnEkj4V9GkVWmCFmGYu_wAAAJc"]
[Sun May 17 21:37:22.595010 2026] [:error] [pid 59062:tid 59137] [client 193.37.32.3:40509] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/speculative8.php"] [unique_id "agnEkj4V9GkVWmCFmGYvAQAAAI4"]
[Sun May 17 21:37:22.793030 2026] [:error] [pid 59062:tid 59143] [client 85.203.21.183:34913] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "agnEkj4V9GkVWmCFmGYvBAAAAJQ"]
[Sun May 17 21:37:27.992570 2026] [:error] [pid 11079:tid 11100] [client 85.203.21.160:28707] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "agnEl2eR3-DrxhvUqxEA7QAAAkA"]
[Sun May 17 21:37:43.234971 2026] [:error] [pid 11079:tid 11102] [client 85.203.21.45:24039] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/"] [unique_id "agnEp2eR3-DrxhvUqxEA9gAAAkI"]
[Sun May 17 21:37:43.432977 2026] [:error] [pid 17234:tid 17258] [client 85.203.21.54:49723] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "agnEp9J4QOrYRCeDR2hgxQAAAVY"]
[Sun May 17 21:37:43.634063 2026] [:error] [pid 11079:tid 11117] [client 85.203.21.57:32305] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/edit-tags.php"] [unique_id "agnEp2eR3-DrxhvUqxEA9wAAAk0"]
[Sun May 17 21:37:43.834672 2026] [:error] [pid 59062:tid 59133] [client 85.203.21.45:35499] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agnEpz4V9GkVWmCFmGYvVQAAAIo"]
[Sun May 17 21:37:49.035439 2026] [:error] [pid 10784:tid 10822] [client 85.203.21.221:26563] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/updates.php"] [unique_id "agnErWBWRlKsFkSZGxBPhwAAAZY"]
[Sun May 17 21:37:49.233469 2026] [:error] [pid 59062:tid 59142] [client 193.37.32.1:31139] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/"] [unique_id "agnErT4V9GkVWmCFmGYvnAAAAJM"]
[Sun May 17 21:37:49.432777 2026] [:error] [pid 10784:tid 10800] [client 85.203.21.58:40835] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "agnErWBWRlKsFkSZGxBPiQAAAYE"]
[Sun May 17 21:37:49.634958 2026] [:error] [pid 59062:tid 59145] [client 85.203.21.235:46095] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/admin.php"] [unique_id "agnErT4V9GkVWmCFmGYvpgAAAJY"]
[Sun May 17 21:37:49.835292 2026] [:error] [pid 10834:tid 10857] [client 193.37.32.3:38571] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "agnErRISNQ_Nf83-Vpq0ZAAAAcs"]
[Sun May 17 21:37:50.036327 2026] [:error] [pid 10835:tid 10892] [client 85.203.21.168:41193] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/plugins/"] [unique_id "agnErkk8lW0-dtknLl8vbgAAAhM"]
[Sun May 17 21:37:50.237686 2026] [:error] [pid 11079:tid 11109] [client 85.203.21.213:31589] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "agnErmeR3-DrxhvUqxEA_AAAAkg"]
[Sun May 17 21:37:50.437415 2026] [:error] [pid 10834:tid 10853] [client 85.203.21.192:52529] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-config-sample.php"] [unique_id "agnErhISNQ_Nf83-Vpq0ZwAAAcc"]
[Sun May 17 21:37:55.640911 2026] [:error] [pid 59062:tid 59124] [client 85.203.21.192:25309] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/"] [unique_id "agnEsz4V9GkVWmCFmGYv2QAAAIE"]
[Sun May 17 21:37:55.842707 2026] [:error] [pid 11079:tid 11119] [client 85.203.21.162:49607] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyone/content-index.php"] [unique_id "agnEs2eR3-DrxhvUqxEBAQAAAk8"]
[Sun May 17 21:37:56.037630 2026] [:error] [pid 59062:tid 59140] [client 85.203.21.167:22599] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/ssss/src.php"] [unique_id "agnEtD4V9GkVWmCFmGYv2wAAAJE"]
[Sun May 17 21:37:56.235106 2026] [:error] [pid 17234:tid 17257] [client 85.203.21.167:42079] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/admin.php"] [unique_id "agnEtNJ4QOrYRCeDR2hgyQAAAVU"]
[Sun May 17 21:37:56.434631 2026] [:error] [pid 59062:tid 59136] [client 85.203.21.202:37657] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/radio.php"] [unique_id "agnEtD4V9GkVWmCFmGYv3gAAAI0"]
[Sun May 17 21:37:56.630708 2026] [:error] [pid 59062:tid 59144] [client 85.203.21.202:22511] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "agnEtD4V9GkVWmCFmGYv4AAAAJU"]
[Sun May 17 21:37:56.827850 2026] [:error] [pid 59062:tid 59130] [client 85.203.21.206:30479] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/images/"] [unique_id "agnEtD4V9GkVWmCFmGYv4gAAAIc"]
[Sun May 17 21:37:57.028454 2026] [:error] [pid 11079:tid 11105] [client 193.37.32.1:29155] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agnEtWeR3-DrxhvUqxEBAgAAAkU"]
[Sun May 17 21:37:57.226747 2026] [:error] [pid 11079:tid 11103] [client 85.203.21.188:20175] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/files/"] [unique_id "agnEtWeR3-DrxhvUqxEBBAAAAkM"]
[Sun May 17 21:37:57.422111 2026] [:error] [pid 11079:tid 11126] [client 85.203.21.222:49267] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/"] [unique_id "agnEtWeR3-DrxhvUqxEBBgAAAlY"]
[Sun May 17 21:37:57.616986 2026] [:error] [pid 59060:tid 59070] [client 85.203.21.239:35563] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/404.php"] [unique_id "agnEtfvwvq3bndkPE4n3DQAAAAE"]
[Sun May 17 21:37:57.812963 2026] [:error] [pid 11079:tid 11118] [client 85.203.21.160:33505] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "agnEtWeR3-DrxhvUqxEBCAAAAk4"]
[Sun May 17 21:37:58.012031 2026] [:error] [pid 10784:tid 10801] [client 85.203.21.192:25167] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/"] [unique_id "agnEtmBWRlKsFkSZGxBPjwAAAYI"]
[Sun May 17 21:38:03.213156 2026] [:error] [pid 17234:tid 17255] [client 85.203.21.228:24593] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "agnEu9J4QOrYRCeDR2hg0gAAAVM"]
[Sun May 17 21:38:03.412171 2026] [:error] [pid 17234:tid 17254] [client 193.37.32.3:62073] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "agnEu9J4QOrYRCeDR2hg0wAAAVI"]
[Sun May 17 21:38:03.611667 2026] [:error] [pid 17234:tid 17251] [client 85.203.21.193:32823] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin.php"] [unique_id "agnEu9J4QOrYRCeDR2hg1AAAAU8"]
[Sun May 17 21:38:03.814810 2026] [:error] [pid 59061:tid 59110] [client 85.203.21.186:26467] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "agnEu4YS410zAmsYkoIw0wAAAE4"]
[Sun May 17 21:38:04.013332 2026] [:error] [pid 59061:tid 59096] [client 85.203.21.192:53065] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/x.php"] [unique_id "agnEvIYS410zAmsYkoIw1AAAAEA"]
[Sun May 17 21:38:04.215300 2026] [:error] [pid 10835:tid 10877] [client 85.203.21.160:39957] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/"] [unique_id "agnEvEk8lW0-dtknLl8vfQAAAgQ"]
[Sun May 17 21:38:09.416458 2026] [:error] [pid 10784:tid 10818] [client 85.203.21.156:56615] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "agnEwWBWRlKsFkSZGxBPkwAAAZI"]
[Sun May 17 21:38:09.626124 2026] [:error] [pid 10834:tid 10870] [client 85.203.21.192:27169] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/config.php"] [unique_id "agnEwRISNQ_Nf83-Vpq0dgAAAdg"]
[Sun May 17 21:38:14.832278 2026] [:error] [pid 59062:tid 59136] [client 85.203.21.164:60427] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "agnExj4V9GkVWmCFmGYv6gAAAI0"]
[Sun May 17 21:38:15.033133 2026] [:error] [pid 11079:tid 11117] [client 85.203.21.159:48307] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system.php"] [unique_id "agnEx2eR3-DrxhvUqxEBDgAAAk0"]
[Sun May 17 21:38:15.232117 2026] [:error] [pid 10784:tid 10819] [client 85.203.21.54:31909] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/"] [unique_id "agnEx2BWRlKsFkSZGxBPlwAAAZM"]
[Sun May 17 21:38:15.430177 2026] [:error] [pid 59166:tid 59181] [client 85.203.21.161:57421] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/"] [unique_id "agnEx0_puQ1I47_0UrjyzwAAAM0"]
[Sun May 17 21:38:15.628641 2026] [:error] [pid 11079:tid 11115] [client 85.203.21.160:41329] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agnEx2eR3-DrxhvUqxEBEAAAAks"]
[Sun May 17 21:38:15.826623 2026] [:error] [pid 17234:tid 17237] [client 85.203.21.162:49311] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/components/"] [unique_id "agnEx9J4QOrYRCeDR2hg2AAAAUE"]
[Sun May 17 21:38:16.024386 2026] [:error] [pid 10834:tid 10862] [client 85.203.21.186:47441] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/log.php"] [unique_id "agnEyBISNQ_Nf83-Vpq0hgAAAdA"]
[Sun May 17 21:38:16.231291 2026] [:error] [pid 11079:tid 11109] [client 85.203.21.207:41203] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/"] [unique_id "agnEyGeR3-DrxhvUqxEBEgAAAkg"]
[Sun May 17 21:38:16.431675 2026] [:error] [pid 11079:tid 11120] [client 85.203.21.168:28415] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/maint/"] [unique_id "agnEyGeR3-DrxhvUqxEBFAAAAlA"]
[Sun May 17 21:38:16.631632 2026] [:error] [pid 17234:tid 17241] [client 85.203.21.213:23693] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/simple.php"] [unique_id "agnEyNJ4QOrYRCeDR2hg2QAAAUU"]
[Sun May 17 21:38:16.826784 2026] [:error] [pid 59062:tid 59145] [client 85.203.21.188:52617] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ab.php"] [unique_id "agnEyD4V9GkVWmCFmGYv7wAAAJY"]
[Sun May 17 21:38:17.022520 2026] [:error] [pid 59062:tid 59146] [client 85.203.21.226:52261] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/admin.php"] [unique_id "agnEyT4V9GkVWmCFmGYv8AAAAJc"]
[Sun May 17 21:38:17.219023 2026] [:error] [pid 59062:tid 59124] [client 85.203.21.54:46097] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-wlx.php"] [unique_id "agnEyT4V9GkVWmCFmGYv8gAAAIE"]
[Sun May 17 21:38:17.414477 2026] [:error] [pid 59062:tid 59132] [client 85.203.21.235:40697] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "agnEyT4V9GkVWmCFmGYv8wAAAIk"]
[Sun May 17 21:38:17.610418 2026] [:error] [pid 10784:tid 10811] [client 85.203.21.172:56559] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/"] [unique_id "agnEyWBWRlKsFkSZGxBPmQAAAYw"]
[Sun May 17 21:38:22.838743 2026] [:error] [pid 59166:tid 59177] [client 85.203.21.201:38449] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/"] [unique_id "agnEzk_puQ1I47_0Urjy1QAAAMk"]
[Sun May 17 21:38:23.035148 2026] [:error] [pid 59061:tid 59102] [client 85.203.21.57:48161] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ioxi-o.php"] [unique_id "agnEz4YS410zAmsYkoIw1QAAAEY"]
[Sun May 17 21:38:23.235515 2026] [:error] [pid 11079:tid 11113] [client 85.203.21.57:51989] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/Transport/"] [unique_id "agnEz2eR3-DrxhvUqxEBFgAAAkk"]
[Sun May 17 21:38:28.434786 2026] [:error] [pid 10835:tid 10887] [client 85.203.21.52:34577] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/m.php"] [unique_id "agnE1Ek8lW0-dtknLl8vvAAAAg4"]
[Sun May 17 21:38:28.668390 2026] [:error] [pid 10835:tid 10881] [client 85.203.21.232:26673] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "agnE1Ek8lW0-dtknLl8vvQAAAgg"]
[Sun May 17 21:38:28.867116 2026] [:error] [pid 10835:tid 10896] [client 85.203.21.193:52297] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "agnE1Ek8lW0-dtknLl8vvgAAAhc"]
[Sun May 17 21:38:34.067134 2026] [:error] [pid 59060:tid 59084] [client 85.203.21.168:65055] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2024/"] [unique_id "agnE2vvwvq3bndkPE4n3GgAAAA8"]
[Sun May 17 21:38:34.266035 2026] [:error] [pid 10834:tid 10869] [client 85.203.21.206:25619] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/admin.php"] [unique_id "agnE2hISNQ_Nf83-Vpq0jgAAAdc"]
[Sun May 17 21:38:34.465649 2026] [:error] [pid 10835:tid 10894] [client 85.203.21.204:54623] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/shell/"] [unique_id "agnE2kk8lW0-dtknLl8vwwAAAhU"]
[Sun May 17 21:38:34.663568 2026] [:error] [pid 10834:tid 10856] [client 85.203.21.222:58317] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/modern/test2.php"] [unique_id "agnE2hISNQ_Nf83-Vpq0jwAAAco"]
[Sun May 17 21:38:39.866023 2026] [:error] [pid 10834:tid 10850] [client 193.37.32.1:62215] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/"] [unique_id "agnE3xISNQ_Nf83-Vpq0kwAAAcQ"]
[Sun May 17 21:38:40.157457 2026] [:error] [pid 17234:tid 17254] [client 85.203.21.226:51275] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/fukasawa/inc/classes/403x.php"] [unique_id "agnE4NJ4QOrYRCeDR2hg3wAAAVI"]
[Sun May 17 21:38:45.356717 2026] [:error] [pid 10834:tid 10846] [client 85.203.21.207:57797] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "agnE5RISNQ_Nf83-Vpq0lwAAAcA"]
[Sun May 17 21:38:45.557119 2026] [:error] [pid 10834:tid 10852] [client 85.203.21.161:42179] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/header.php"] [unique_id "agnE5RISNQ_Nf83-Vpq0mQAAAcY"]
[Sun May 17 21:38:45.755657 2026] [:error] [pid 36652:tid 36673] [client 85.203.21.172:25233] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "agnE5TZrzQadnZADvj9c0gAAARM"]
[Sun May 17 21:38:46.067451 2026] [:error] [pid 10834:tid 10869] [client 85.203.21.222:36913] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/light/"] [unique_id "agnE5hISNQ_Nf83-Vpq0mgAAAdc"]
[Sun May 17 21:38:51.268343 2026] [:error] [pid 59166:tid 59190] [client 85.203.21.45:51671] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/"] [unique_id "agnE60_puQ1I47_0Urjy3AAAANY"]
[Sun May 17 21:38:51.466415 2026] [:error] [pid 10834:tid 10847] [client 85.203.21.172:41413] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/about.php"] [unique_id "agnE6xISNQ_Nf83-Vpq0pAAAAcE"]
[Sun May 17 21:38:51.661558 2026] [:error] [pid 36652:tid 36665] [client 85.203.21.186:65049] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/"] [unique_id "agnE6zZrzQadnZADvj9c0wAAAQs"]
[Sun May 17 21:38:51.859904 2026] [:error] [pid 36652:tid 36661] [client 85.203.21.235:36281] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/themes/"] [unique_id "agnE6zZrzQadnZADvj9c1AAAAQc"]
[Sun May 17 21:38:52.062013 2026] [:error] [pid 36652:tid 36672] [client 85.203.21.170:58155] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/archives/"] [unique_id "agnE7DZrzQadnZADvj9c1QAAARI"]
[Sun May 17 21:38:52.265308 2026] [:error] [pid 36652:tid 36657] [client 85.203.21.239:48983] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "agnE7DZrzQadnZADvj9c1gAAAQM"]
[Sun May 17 21:38:52.469872 2026] [:error] [pid 10784:tid 10808] [client 85.203.21.162:42529] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agnE7GBWRlKsFkSZGxBPowAAAYk"]
[Sun May 17 21:38:52.668093 2026] [:error] [pid 59060:tid 59071] [client 85.203.21.235:28127] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content.php"] [unique_id "agnE7Pvwvq3bndkPE4n3HgAAAAI"]
[Sun May 17 21:38:52.866637 2026] [:error] [pid 36652:tid 36675] [client 85.203.21.204:39421] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/gk.php"] [unique_id "agnE7DZrzQadnZADvj9c1wAAARU"]
[Sun May 17 21:38:53.060299 2026] [:error] [pid 10784:tid 10812] [client 85.203.21.237:59237] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/"] [unique_id "agnE7WBWRlKsFkSZGxBPpQAAAY0"]
[Sun May 17 21:38:53.256877 2026] [:error] [pid 59060:tid 59092] [client 85.203.21.159:52147] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/config.php"] [unique_id "agnE7fvwvq3bndkPE4n3IAAAABc"]
[Sun May 17 21:38:53.303617 2026] [:error] [pid 10834:tid 10858] [client 129.222.187.33:5430] [client 129.222.187.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.187.33, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agnE7RISNQ_Nf83-Vpq0pwAAAcw"]
[Sun May 17 21:38:53.456427 2026] [:error] [pid 59061:tid 59102] [client 85.203.21.183:29449] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/"] [unique_id "agnE7YYS410zAmsYkoIw4gAAAEY"]
[Sun May 17 21:38:53.654512 2026] [:error] [pid 59061:tid 59104] [client 85.203.21.192:26951] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "agnE7YYS410zAmsYkoIw5QAAAEg"]
[Sun May 17 21:38:53.854374 2026] [:error] [pid 36652:tid 36670] [client 85.203.21.202:43525] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bolt.php"] [unique_id "agnE7TZrzQadnZADvj9c2QAAARA"]
[Sun May 17 21:38:59.051347 2026] [:error] [pid 59166:tid 59179] [client 85.203.21.161:43419] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/login.php"] [unique_id "agnE80_puQ1I47_0Urjy5wAAAMs"]
[Sun May 17 21:39:03.194189 2026] [:error] [pid 10835:tid 10891] [client 129.222.187.33:51103] [client 129.222.187.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.187.33, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agnE90k8lW0-dtknLl8v4AAAAhI"]
[Sun May 17 21:39:04.250307 2026] [:error] [pid 10784:tid 10813] [client 85.203.21.192:39811] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/plugin/"] [unique_id "agnE-GBWRlKsFkSZGxBPtwAAAY4"]
[Sun May 17 21:39:04.450195 2026] [:error] [pid 59060:tid 59072] [client 85.203.21.195:50633] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "agnE-Pvwvq3bndkPE4n3KwAAAAM"]
[Sun May 17 21:39:04.645294 2026] [:error] [pid 10835:tid 10890] [client 85.203.21.162:64191] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "agnE-Ek8lW0-dtknLl8v4QAAAhE"]
[Sun May 17 21:39:04.843200 2026] [:error] [pid 10834:tid 10854] [client 85.203.21.160:33399] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agnE-BISNQ_Nf83-Vpq0sQAAAcg"]
[Sun May 17 21:39:05.040520 2026] [:error] [pid 36652:tid 36660] [client 85.203.21.228:22009] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/about.php"] [unique_id "agnE-TZrzQadnZADvj9c5AAAAQY"]
[Sun May 17 21:39:10.237967 2026] [:error] [pid 10834:tid 10861] [client 85.203.21.164:49461] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/panel.php"] [unique_id "agnE_hISNQ_Nf83-Vpq0uQAAAc8"]
[Sun May 17 21:39:13.962222 2026] [:error] [pid 36652:tid 36669] [client 129.222.187.33:47301] [client 129.222.187.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.187.33, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agnFATZrzQadnZADvj9c5wAAAQ8"]
[Sun May 17 21:39:20.442108 2026] [:error] [pid 59060:tid 59092] [client 85.203.21.52:25277] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "agnFCPvwvq3bndkPE4n3OQAAABc"]
[Sun May 17 21:39:20.639112 2026] [:error] [pid 59061:tid 59112] [client 85.203.21.232:40823] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/upload.php"] [unique_id "agnFCIYS410zAmsYkoIw_gAAAFA"]
[Sun May 17 21:39:20.843521 2026] [:error] [pid 59062:tid 59142] [client 85.203.21.237:21317] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/"] [unique_id "agnFCD4V9GkVWmCFmGYwLgAAAJM"]
[Sun May 17 21:39:21.045810 2026] [:error] [pid 11079:tid 11105] [client 85.203.21.237:50137] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/class.php"] [unique_id "agnFCWeR3-DrxhvUqxEBqAAAAkU"]
[Sun May 17 21:39:21.246966 2026] [:error] [pid 59061:tid 59106] [client 85.203.21.239:30307] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hello-plus/classes/ehp-bes.php"] [unique_id "agnFCYYS410zAmsYkoIw_wAAAEo"]
[Sun May 17 21:39:26.446476 2026] [:error] [pid 11079:tid 11127] [client 85.203.21.207:48509] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/themes.php"] [unique_id "agnFDmeR3-DrxhvUqxEBrAAAAlc"]
[Sun May 17 21:39:26.641705 2026] [:error] [pid 10834:tid 10853] [client 85.203.21.190:31151] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/edit-post/"] [unique_id "agnFDhISNQ_Nf83-Vpq0zAAAAcc"]
[Sun May 17 21:39:26.836926 2026] [:error] [pid 10834:tid 10851] [client 85.203.21.178:24547] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/edit-wolf.php"] [unique_id "agnFDhISNQ_Nf83-Vpq0zgAAAcU"]
[Sun May 17 21:39:27.035834 2026] [:error] [pid 10834:tid 10863] [client 85.203.21.168:43449] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/"] [unique_id "agnFDxISNQ_Nf83-Vpq0zwAAAdE"]
[Sun May 17 21:39:27.240853 2026] [:error] [pid 59060:tid 59091] [client 85.203.21.217:53121] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "agnFD_vwvq3bndkPE4n3PwAAABY"]
[Sun May 17 21:39:27.465954 2026] [:error] [pid 17234:tid 17245] [client 85.203.21.45:27537] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/cache/"] [unique_id "agnFD9J4QOrYRCeDR2hg7gAAAUk"]
[Sun May 17 21:39:27.662477 2026] [:error] [pid 59166:tid 59171] [client 85.203.21.193:51787] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/config.php"] [unique_id "agnFD0_puQ1I47_0Urjy7QAAAMM"]
[Sun May 17 21:39:37.862000 2026] [:error] [pid 59062:tid 59135] [client 85.203.21.161:33669] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "agnFGT4V9GkVWmCFmGYwPgAAAIw"]
[Sun May 17 21:39:38.064878 2026] [:error] [pid 59062:tid 59138] [client 85.203.21.193:40133] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "agnFGj4V9GkVWmCFmGYwPwAAAI8"]
[Sun May 17 21:39:38.267774 2026] [:error] [pid 59062:tid 59147] [client 85.203.21.157:33009] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "agnFGj4V9GkVWmCFmGYwQAAAAJg"]
[Sun May 17 21:39:38.467808 2026] [:error] [pid 59062:tid 59128] [client 85.203.21.186:49833] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/"] [unique_id "agnFGj4V9GkVWmCFmGYwQQAAAIU"]
[Sun May 17 21:39:38.665065 2026] [:error] [pid 59062:tid 59133] [client 85.203.21.197:58581] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wa/"] [unique_id "agnFGj4V9GkVWmCFmGYwQgAAAIo"]
[Sun May 17 21:39:38.861639 2026] [:error] [pid 59062:tid 59137] [client 85.203.21.237:43345] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/network/"] [unique_id "agnFGj4V9GkVWmCFmGYwRwAAAI4"]
[Sun May 17 21:39:39.058741 2026] [:error] [pid 10834:tid 10858] [client 85.203.21.201:39559] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mini.php"] [unique_id "agnFGxISNQ_Nf83-Vpq02QAAAcw"]
[Sun May 17 21:39:39.254114 2026] [:error] [pid 59062:tid 59145] [client 85.203.21.186:26393] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "agnFGz4V9GkVWmCFmGYwSQAAAJY"]
[Sun May 17 21:39:39.453766 2026] [:error] [pid 59062:tid 59126] [client 85.203.21.159:21483] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/wp-conflg.php"] [unique_id "agnFGz4V9GkVWmCFmGYwSgAAAIM"]
[Sun May 17 21:39:39.649091 2026] [:error] [pid 36652:tid 36675] [client 85.203.21.190:30717] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/mah/function.php"] [unique_id "agnFGzZrzQadnZADvj9dAAAAARU"]
[Sun May 17 21:39:44.845756 2026] [:error] [pid 10784:tid 10811] [client 85.203.21.54:64401] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system_log.php"] [unique_id "agnFIGBWRlKsFkSZGxBP4QAAAYw"]
[Sun May 17 21:39:45.043823 2026] [:error] [pid 36652:tid 36659] [client 85.203.21.238:38455] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-content/"] [unique_id "agnFITZrzQadnZADvj9dAgAAAQU"]
[Sun May 17 21:39:45.239487 2026] [:error] [pid 10834:tid 10849] [client 85.203.21.213:41467] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/"] [unique_id "agnFIRISNQ_Nf83-Vpq04wAAAcM"]
[Sun May 17 21:39:45.441180 2026] [:error] [pid 59062:tid 59133] [client 85.203.21.57:36747] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/t.php"] [unique_id "agnFIT4V9GkVWmCFmGYwZgAAAIo"]
[Sun May 17 21:39:50.649503 2026] [:error] [pid 59062:tid 59136] [client 85.203.21.227:41601] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/development/"] [unique_id "agnFJj4V9GkVWmCFmGYwcwAAAI0"]
[Sun May 17 21:39:50.848968 2026] [:error] [pid 11079:tid 11101] [client 85.203.21.227:51587] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/chosen.php"] [unique_id "agnFJmeR3-DrxhvUqxEBvAAAAkE"]
[Sun May 17 21:39:51.054794 2026] [:error] [pid 36652:tid 36678] [client 85.203.21.157:58897] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/"] [unique_id "agnFJzZrzQadnZADvj9dAwAAARg"]
[Sun May 17 21:39:51.252073 2026] [:error] [pid 10784:tid 10820] [client 85.203.21.167:26549] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "agnFJ2BWRlKsFkSZGxBP5AAAAZQ"]
[Sun May 17 21:39:51.450348 2026] [:error] [pid 17234:tid 17252] [client 85.203.21.54:43829] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-date/"] [unique_id "agnFJ9J4QOrYRCeDR2hg9wAAAVA"]
[Sun May 17 21:39:51.648551 2026] [:error] [pid 10784:tid 10799] [client 85.203.21.226:54333] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/lock360.php"] [unique_id "agnFJ2BWRlKsFkSZGxBP5QAAAYA"]
[Sun May 17 21:39:56.849940 2026] [:error] [pid 17234:tid 17257] [client 85.203.21.162:21247] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "agnFLNJ4QOrYRCeDR2hg-QAAAVU"]
[Sun May 17 21:39:57.048415 2026] [:error] [pid 10834:tid 10850] [client 85.203.21.164:20973] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/chosen.php"] [unique_id "agnFLRISNQ_Nf83-Vpq07gAAAcQ"]
[Sun May 17 21:39:57.248658 2026] [:error] [pid 59060:tid 59078] [client 85.203.21.168:20209] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/"] [unique_id "agnFLfvwvq3bndkPE4n3SQAAAAk"]
[Sun May 17 21:39:57.446363 2026] [:error] [pid 17234:tid 17256] [client 85.203.21.167:61485] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "agnFLdJ4QOrYRCeDR2hg-gAAAVQ"]
[Sun May 17 21:39:57.642999 2026] [:error] [pid 59060:tid 59082] [client 85.203.21.204:53105] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "agnFLfvwvq3bndkPE4n3SgAAAA0"]
[Sun May 17 21:39:57.842720 2026] [:error] [pid 36652:tid 36663] [client 85.203.21.54:52903] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/"] [unique_id "agnFLTZrzQadnZADvj9dBQAAAQk"]
[Sun May 17 21:39:58.039325 2026] [:error] [pid 59060:tid 59079] [client 85.203.21.183:43131] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/customize-widgets/"] [unique_id "agnFLvvwvq3bndkPE4n3SwAAAAo"]
[Sun May 17 21:40:03.244813 2026] [:error] [pid 59062:tid 59124] [client 85.203.21.213:56887] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/"] [unique_id "agnFMz4V9GkVWmCFmGYwhgAAAIE"]
[Sun May 17 21:40:03.444350 2026] [:error] [pid 59062:tid 59144] [client 85.203.21.164:40063] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "agnFMz4V9GkVWmCFmGYwiQAAAJU"]
[Sun May 17 21:40:03.640609 2026] [:error] [pid 59062:tid 59143] [client 85.203.21.58:60879] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/css.php"] [unique_id "agnFMz4V9GkVWmCFmGYwigAAAJQ"]
[Sun May 17 21:40:03.836137 2026] [:error] [pid 59062:tid 59138] [client 85.203.21.227:24807] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/"] [unique_id "agnFMz4V9GkVWmCFmGYwiwAAAI8"]
[Sun May 17 21:40:04.034895 2026] [:error] [pid 11079:tid 11100] [client 85.203.21.176:55541] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/footnotes/"] [unique_id "agnFNGeR3-DrxhvUqxEBwAAAAkA"]
[Sun May 17 21:40:05.777386 2026] [:error] [pid 17234:tid 17239] [client 85.203.21.58:33817] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/"] [unique_id "agnFNdJ4QOrYRCeDR2hg_AAAAUM"]
[Sun May 17 21:40:05.982003 2026] [:error] [pid 59061:tid 59113] [client 193.37.32.3:39241] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ws.php"] [unique_id "agnFNYYS410zAmsYkoIxEwAAAFE"]
[Sun May 17 21:40:06.176533 2026] [:error] [pid 59062:tid 59129] [client 85.203.21.202:51435] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "agnFNj4V9GkVWmCFmGYwkwAAAIY"]
[Sun May 17 21:40:06.372102 2026] [:error] [pid 59061:tid 59100] [client 85.203.21.217:58255] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/"] [unique_id "agnFNoYS410zAmsYkoIxFQAAAEQ"]
[Sun May 17 21:40:06.568522 2026] [:error] [pid 59062:tid 59144] [client 85.203.21.238:33533] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/maint/includes/"] [unique_id "agnFNj4V9GkVWmCFmGYwlAAAAJU"]
[Sun May 17 21:40:06.763824 2026] [:error] [pid 59060:tid 59070] [client 85.203.21.176:53779] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/preformatted/"] [unique_id "agnFNvvwvq3bndkPE4n3TwAAAAE"]
[Sun May 17 21:40:06.962017 2026] [:error] [pid 10835:tid 10896] [client 85.203.21.204:25145] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "agnFNkk8lW0-dtknLl8v8gAAAhc"]
[Sun May 17 21:40:07.159330 2026] [:error] [pid 10835:tid 10886] [client 85.203.21.161:34175] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/user.php"] [unique_id "agnFN0k8lW0-dtknLl8v8wAAAg0"]
[Sun May 17 21:40:07.360131 2026] [:error] [pid 10835:tid 10873] [client 85.203.21.193:65095] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "agnFN0k8lW0-dtknLl8v9QAAAgA"]
[Sun May 17 21:40:07.562952 2026] [:error] [pid 11079:tid 11117] [client 85.203.21.161:42931] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/module.php"] [unique_id "agnFN2eR3-DrxhvUqxEBwgAAAk0"]
[Sun May 17 21:40:07.759471 2026] [:error] [pid 11079:tid 11118] [client 85.203.21.58:49605] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/about.php"] [unique_id "agnFN2eR3-DrxhvUqxEBwwAAAk4"]
[Sun May 17 21:40:07.957605 2026] [:error] [pid 11079:tid 11113] [client 85.203.21.178:45759] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "agnFN2eR3-DrxhvUqxEBxAAAAkk"]
[Sun May 17 21:40:08.159580 2026] [:error] [pid 11079:tid 11127] [client 85.203.21.52:53699] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/missing/"] [unique_id "agnFOGeR3-DrxhvUqxEBxQAAAlc"]
[Sun May 17 21:40:08.356703 2026] [:error] [pid 11079:tid 11121] [client 85.203.21.58:56757] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "agnFOGeR3-DrxhvUqxEBxgAAAlE"]
[Sun May 17 21:40:08.554899 2026] [:error] [pid 11079:tid 11128] [client 85.203.21.213:21267] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/buy.php"] [unique_id "agnFOGeR3-DrxhvUqxEByAAAAlg"]
[Sun May 17 21:40:08.753435 2026] [:error] [pid 11079:tid 11116] [client 85.203.21.190:43759] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "agnFOGeR3-DrxhvUqxEByQAAAkw"]
[Sun May 17 21:40:08.949525 2026] [:error] [pid 11079:tid 11122] [client 85.203.21.168:48913] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/user-install.php"] [unique_id "agnFOGeR3-DrxhvUqxEBygAAAlI"]
[Sun May 17 21:40:09.148321 2026] [:error] [pid 11079:tid 11120] [client 85.203.21.178:57511] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/system_core.php"] [unique_id "agnFOWeR3-DrxhvUqxEBywAAAlA"]
[Sun May 17 21:40:09.362913 2026] [:error] [pid 59062:tid 59139] [client 85.203.21.197:24149] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/admin.php"] [unique_id "agnFOT4V9GkVWmCFmGYwmgAAAJA"]
[Sun May 17 21:40:14.562935 2026] [:error] [pid 11079:tid 11102] [client 85.203.21.157:28923] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/"] [unique_id "agnFPmeR3-DrxhvUqxEB0AAAAkI"]
[Sun May 17 21:40:19.760828 2026] [:error] [pid 11079:tid 11103] [client 193.37.32.1:63779] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/freeform/"] [unique_id "agnFQ2eR3-DrxhvUqxEB2QAAAkM"]
[Sun May 17 21:40:19.958972 2026] [:error] [pid 59062:tid 59144] [client 85.203.21.227:47285] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/button/"] [unique_id "agnFQz4V9GkVWmCFmGYwvAAAAJU"]
[Sun May 17 21:40:20.158207 2026] [:error] [pid 59166:tid 59175] [client 85.203.21.188:49269] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/login.php"] [unique_id "agnFRE_puQ1I47_0Urjy_QAAAMc"]
[Sun May 17 21:40:20.355795 2026] [:error] [pid 59061:tid 59105] [client 85.203.21.228:65433] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "agnFRIYS410zAmsYkoIxKwAAAEk"]
[Sun May 17 21:40:20.554444 2026] [:error] [pid 36652:tid 36677] [client 85.203.21.183:51757] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "agnFRDZrzQadnZADvj9dGgAAARc"]
[Sun May 17 21:40:20.752066 2026] [:error] [pid 59166:tid 59185] [client 85.203.21.207:55407] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "agnFRE_puQ1I47_0Urjy_wAAANE"]
[Sun May 17 21:40:20.949987 2026] [:error] [pid 36652:tid 36673] [client 85.203.21.156:53743] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/gallery/"] [unique_id "agnFRDZrzQadnZADvj9dGwAAARM"]
[Sun May 17 21:40:21.146835 2026] [:error] [pid 59061:tid 59099] [client 85.203.21.168:47857] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/languages/autoload_classmap.php"] [unique_id "agnFRYYS410zAmsYkoIxLAAAAEM"]
[Sun May 17 21:40:21.349163 2026] [:error] [pid 17234:tid 17256] [client 85.203.21.162:21767] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "agnFRdJ4QOrYRCeDR2hhBwAAAVQ"]
[Sun May 17 21:40:21.552171 2026] [:error] [pid 17234:tid 17239] [client 85.203.21.195:41763] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/group/"] [unique_id "agnFRdJ4QOrYRCeDR2hhCQAAAUM"]
[Sun May 17 21:40:21.749577 2026] [:error] [pid 59062:tid 59124] [client 85.203.21.162:55793] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "agnFRT4V9GkVWmCFmGYwvQAAAIE"]
[Sun May 17 21:40:21.948267 2026] [:error] [pid 17234:tid 17253] [client 85.203.21.190:42449] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/media-text/"] [unique_id "agnFRdJ4QOrYRCeDR2hhDAAAAVE"]
[Sun May 17 21:40:22.149172 2026] [:error] [pid 17234:tid 17243] [client 85.203.21.156:63847] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/we.php"] [unique_id "agnFRtJ4QOrYRCeDR2hhDQAAAUc"]
[Sun May 17 21:40:22.349064 2026] [:error] [pid 59062:tid 59125] [client 85.203.21.58:43025] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "agnFRj4V9GkVWmCFmGYwvwAAAII"]
[Sun May 17 21:40:32.551214 2026] [:error] [pid 11079:tid 11116] [client 85.203.21.207:26337] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wmore1.php"] [unique_id "agnFUGeR3-DrxhvUqxEB5AAAAkw"]
[Sun May 17 21:40:42.748698 2026] [:error] [pid 59061:tid 59111] [client 85.203.21.204:56485] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfour/assets/"] [unique_id "agnFWoYS410zAmsYkoIxOAAAAE8"]
[Sun May 17 21:40:42.946394 2026] [:error] [pid 10835:tid 10873] [client 85.203.21.186:26823] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/file.php"] [unique_id "agnFWkk8lW0-dtknLl8wAQAAAgA"]
[Sun May 17 21:40:43.145448 2026] [:error] [pid 59060:tid 59085] [client 85.203.21.190:44017] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/Core/"] [unique_id "agnFW_vwvq3bndkPE4n3UwAAABA"]
[Sun May 17 21:40:43.343888 2026] [:error] [pid 10835:tid 10881] [client 85.203.21.168:56171] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/"] [unique_id "agnFW0k8lW0-dtknLl8wAgAAAgg"]
[Sun May 17 21:40:43.541272 2026] [:error] [pid 10834:tid 10865] [client 85.203.21.45:43913] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "agnFWxISNQ_Nf83-Vpq0-QAAAdM"]
[Sun May 17 21:40:43.736828 2026] [:error] [pid 10834:tid 10850] [client 85.203.21.184:45727] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/"] [unique_id "agnFWxISNQ_Nf83-Vpq0-gAAAcQ"]
[Sun May 17 21:40:43.935516 2026] [:error] [pid 10834:tid 10849] [client 85.203.21.170:34933] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/PHPMailer/widgets/"] [unique_id "agnFWxISNQ_Nf83-Vpq0-wAAAcM"]
[Sun May 17 21:40:44.136204 2026] [:error] [pid 36652:tid 36662] [client 85.203.21.167:35079] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/radio.php"] [unique_id "agnFXDZrzQadnZADvj9dJAAAAQg"]
[Sun May 17 21:40:44.334656 2026] [:error] [pid 10784:tid 10799] [client 85.203.21.58:43489] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wp-config-backup.php"] [unique_id "agnFXGBWRlKsFkSZGxBP_wAAAYA"]
[Sun May 17 21:40:44.531996 2026] [:error] [pid 36652:tid 36671] [client 85.203.21.201:64915] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/"] [unique_id "agnFXDZrzQadnZADvj9dJQAAARE"]
[Sun May 17 21:40:44.731443 2026] [:error] [pid 10784:tid 10813] [client 85.203.21.183:57669] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "agnFXGBWRlKsFkSZGxBQAAAAAY4"]
[Sun May 17 21:40:44.931190 2026] [:error] [pid 11079:tid 11125] [client 85.203.21.237:59179] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "agnFXGeR3-DrxhvUqxECAAAAAlU"]
[Sun May 17 21:40:45.132321 2026] [:error] [pid 59062:tid 59130] [client 85.203.21.172:29211] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme/about.php"] [unique_id "agnFXT4V9GkVWmCFmGYwwwAAAIc"]
[Sun May 17 21:40:45.331655 2026] [:error] [pid 11079:tid 11115] [client 85.203.21.207:50457] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/install.php"] [unique_id "agnFXWeR3-DrxhvUqxECAQAAAks"]
[Sun May 17 21:40:45.527949 2026] [:error] [pid 59061:tid 59107] [client 85.203.21.237:25489] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/accordion/"] [unique_id "agnFXYYS410zAmsYkoIxOQAAAEs"]
[Sun May 17 21:40:45.723417 2026] [:error] [pid 36652:tid 36654] [client 85.203.21.238:48367] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/script-loader-react-refresh.php"] [unique_id "agnFXTZrzQadnZADvj9dKAAAAQA"]
[Sun May 17 21:40:45.918504 2026] [:error] [pid 59061:tid 59098] [client 193.37.32.3:24991] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/"] [unique_id "agnFXYYS410zAmsYkoIxOwAAAEI"]
[Sun May 17 21:40:46.115262 2026] [:error] [pid 59062:tid 59136] [client 85.203.21.239:55911] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/shell.php"] [unique_id "agnFXj4V9GkVWmCFmGYwxgAAAI0"]
[Sun May 17 21:40:46.315002 2026] [:error] [pid 17234:tid 17238] [client 85.203.21.227:42927] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/css/"] [unique_id "agnFXtJ4QOrYRCeDR2hhHAAAAUI"]
[Sun May 17 21:40:46.513136 2026] [:error] [pid 59166:tid 59192] [client 193.37.32.3:33149] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist"] [unique_id "agnFXk_puQ1I47_0UrjzCQAAANg"]
[Sun May 17 21:40:46.710497 2026] [:error] [pid 11079:tid 11118] [client 85.203.21.190:62251] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/login.php"] [unique_id "agnFXmeR3-DrxhvUqxECBAAAAk4"]
[Sun May 17 21:40:46.914101 2026] [:error] [pid 36652:tid 36667] [client 85.203.21.164:42711] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/"] [unique_id "agnFXjZrzQadnZADvj9dKgAAAQ0"]
[Sun May 17 21:40:47.112132 2026] [:error] [pid 11079:tid 11127] [client 85.203.21.207:58737] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/vendor/about.php"] [unique_id "agnFX2eR3-DrxhvUqxECBQAAAlc"]
[Sun May 17 21:40:47.314714 2026] [:error] [pid 11079:tid 11124] [client 85.203.21.188:60845] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/pomo/"] [unique_id "agnFX2eR3-DrxhvUqxECBwAAAlQ"]
[Sun May 17 21:40:47.513680 2026] [:error] [pid 11079:tid 11119] [client 85.203.21.52:26535] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/php-compat/"] [unique_id "agnFX2eR3-DrxhvUqxECCgAAAk8"]
[Sun May 17 21:40:47.711607 2026] [:error] [pid 59166:tid 59176] [client 193.37.32.3:38195] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/222.php"] [unique_id "agnFX0_puQ1I47_0UrjzDgAAAMg"]
[Sun May 17 21:40:47.909854 2026] [:error] [pid 59166:tid 59190] [client 85.203.21.184:42233] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/spacer/"] [unique_id "agnFX0_puQ1I47_0UrjzEQAAANY"]
[Sun May 17 21:40:48.112275 2026] [:error] [pid 11079:tid 11100] [client 193.37.32.3:63963] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/panel.php"] [unique_id "agnFYGeR3-DrxhvUqxECEAAAAkA"]
[Sun May 17 21:40:53.311500 2026] [:error] [pid 10834:tid 10870] [client 85.203.21.235:41563] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "agnFZRISNQ_Nf83-Vpq1AAAAAdg"]
[Sun May 17 21:40:53.541306 2026] [:error] [pid 10834:tid 10848] [client 85.203.21.197:55663] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "agnFZRISNQ_Nf83-Vpq1AgAAAcI"]
[Sun May 17 21:40:53.740287 2026] [:error] [pid 17234:tid 17254] [client 85.203.21.235:38673] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/pullquote/"] [unique_id "agnFZdJ4QOrYRCeDR2hhIAAAAVI"]
[Sun May 17 21:40:53.940178 2026] [:error] [pid 59166:tid 59169] [client 85.203.21.57:65331] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Auth/"] [unique_id "agnFZU_puQ1I47_0UrjzFwAAAME"]
[Sun May 17 21:40:54.146857 2026] [:error] [pid 17234:tid 17256] [client 85.203.21.235:55639] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-file-manager-pro/"] [unique_id "agnFZtJ4QOrYRCeDR2hhIwAAAVQ"]
[Sun May 17 21:40:54.364300 2026] [:error] [pid 10834:tid 10852] [client 85.203.21.160:28127] [client 85.203.21.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-file-manager-pro/fm_backup/"] [unique_id "agnFZhISNQ_Nf83-Vpq1BgAAAcY"]
[Sun May 17 21:40:54.561541 2026] [:error] [pid 17234:tid 17251] [client 85.203.21.167:44371] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/cgi-bin/cgi-bin/config.php"] [unique_id "agnFZtJ4QOrYRCeDR2hhJAAAAU8"]
[Sun May 17 21:40:54.758581 2026] [:error] [pid 17234:tid 17241] [client 85.203.21.186:33017] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/system.php"] [unique_id "agnFZtJ4QOrYRCeDR2hhJQAAAUU"]
[Sun May 17 21:40:54.970350 2026] [:error] [pid 17234:tid 17236] [client 85.203.21.217:22099] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/fonts/lato/"] [unique_id "agnFZtJ4QOrYRCeDR2hhJwAAAUA"]
[Sun May 17 21:41:00.190767 2026] [:error] [pid 59166:tid 59173] [client 85.203.21.227:30173] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/backup.php"] [unique_id "agnFbE_puQ1I47_0UrjzGwAAAMU"]
[Sun May 17 21:41:00.396423 2026] [:error] [pid 10784:tid 10817] [client 85.203.21.186:37967] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/login.php"] [unique_id "agnFbGBWRlKsFkSZGxBQCgAAAZE"]
[Sun May 17 21:41:05.772079 2026] [:error] [pid 59062:tid 59135] [client 85.203.21.207:34983] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/system_core.php"] [unique_id "agnFcT4V9GkVWmCFmGYw1gAAAIw"]
[Sun May 17 21:41:10.967909 2026] [:error] [pid 10784:tid 10800] [client 85.203.21.188:26323] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-http-client.php"] [unique_id "agnFdmBWRlKsFkSZGxBQDgAAAYE"]
[Sun May 17 21:41:11.165644 2026] [:error] [pid 10834:tid 10865] [client 85.203.21.184:43223] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/666.php"] [unique_id "agnFdxISNQ_Nf83-Vpq1FAAAAdM"]
[Sun May 17 21:41:11.360773 2026] [:error] [pid 59062:tid 59141] [client 85.203.21.162:62333] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/nic.php"] [unique_id "agnFdz4V9GkVWmCFmGYw2wAAAJI"]
[Sun May 17 21:41:11.555968 2026] [:error] [pid 59062:tid 59146] [client 85.203.21.207:59517] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/Molla1.5.6/wp-content/users.php"] [unique_id "agnFdz4V9GkVWmCFmGYw3QAAAJc"]
[Sun May 17 21:41:11.753477 2026] [:error] [pid 59062:tid 59129] [client 85.203.21.164:46471] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/p-includes/admin.php"] [unique_id "agnFdz4V9GkVWmCFmGYw3gAAAIY"]
[Sun May 17 21:41:11.949716 2026] [:error] [pid 59062:tid 59126] [client 193.37.32.1:50559] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/mmenu.php"] [unique_id "agnFdz4V9GkVWmCFmGYw3wAAAIM"]
[Sun May 17 21:41:12.149407 2026] [:error] [pid 59062:tid 59124] [client 85.203.21.178:49479] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "agnFeD4V9GkVWmCFmGYw4AAAAIE"]
[Sun May 17 21:41:17.347898 2026] [:error] [pid 59062:tid 59135] [client 85.203.21.176:27907] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/elementor/google-fonts/fonts/"] [unique_id "agnFfT4V9GkVWmCFmGYw7QAAAIw"]
[Sun May 17 21:41:17.546494 2026] [:error] [pid 59062:tid 59134] [client 85.203.21.228:35017] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/contact-form-7/base-theme.php"] [unique_id "agnFfT4V9GkVWmCFmGYw7gAAAIs"]
[Sun May 17 21:41:17.749394 2026] [:error] [pid 59060:tid 59092] [client 85.203.21.238:62645] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/heading/"] [unique_id "agnFffvwvq3bndkPE4n3XAAAABc"]
[Sun May 17 21:41:17.946250 2026] [:error] [pid 10834:tid 10857] [client 85.203.21.226:40913] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/geck.php"] [unique_id "agnFfRISNQ_Nf83-Vpq1FgAAAcs"]
[Sun May 17 21:41:18.143864 2026] [:error] [pid 17234:tid 17239] [client 85.203.21.206:61857] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wf-logs.php"] [unique_id "agnFftJ4QOrYRCeDR2hhOQAAAUM"]
[Sun May 17 21:41:18.341244 2026] [:error] [pid 10834:tid 10861] [client 85.203.21.202:31867] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/wp-conflg.php"] [unique_id "agnFfhISNQ_Nf83-Vpq1FwAAAc8"]
[Sun May 17 21:41:18.538918 2026] [:error] [pid 10835:tid 10889] [client 85.203.21.156:31069] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/home.php"] [unique_id "agnFfkk8lW0-dtknLl8wEwAAAhA"]
[Sun May 17 21:41:18.738331 2026] [:error] [pid 36652:tid 36677] [client 85.203.21.157:42243] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/cgi-bin/cgi-bin/upload.php"] [unique_id "agnFfjZrzQadnZADvj9dMgAAARc"]
[Sun May 17 21:41:18.936014 2026] [:error] [pid 59062:tid 59125] [client 85.203.21.202:20409] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/cgi-bin/panel.php"] [unique_id "agnFfj4V9GkVWmCFmGYw8gAAAII"]
[Sun May 17 21:41:19.133621 2026] [:error] [pid 59062:tid 59132] [client 85.203.21.206:37293] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "agnFfz4V9GkVWmCFmGYw8wAAAIk"]
[Sun May 17 21:41:19.332366 2026] [:error] [pid 10835:tid 10888] [client 85.203.21.172:29685] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-date/wp-login.php"] [unique_id "agnFf0k8lW0-dtknLl8wFQAAAg8"]
[Sun May 17 21:41:19.528344 2026] [:error] [pid 59062:tid 59145] [client 85.203.21.190:61655] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/templates/wp-login.php"] [unique_id "agnFfz4V9GkVWmCFmGYw9AAAAJY"]
[Sun May 17 21:41:24.729937 2026] [:error] [pid 17234:tid 17248] [client 85.203.21.159:35723] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "agnFhNJ4QOrYRCeDR2hhOgAAAUw"]
[Sun May 17 21:41:24.932114 2026] [:error] [pid 59062:tid 59130] [client 85.203.21.238:54475] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-pagination-previous/wp-login.php"] [unique_id "agnFhD4V9GkVWmCFmGYxAQAAAIc"]
[Sun May 17 21:41:25.131136 2026] [:error] [pid 59062:tid 59131] [client 85.203.21.204:20733] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/rss/wp-login.php"] [unique_id "agnFhT4V9GkVWmCFmGYxAgAAAIg"]
[Sun May 17 21:41:25.333406 2026] [:error] [pid 59166:tid 59172] [client 85.203.21.159:24687] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/dist/script-modules/block-library/search/"] [unique_id "agnFhU_puQ1I47_0UrjzJQAAAMQ"]
[Sun May 17 21:41:25.744933 2026] [:error] [pid 59062:tid 59126] [client 85.203.21.190:33219] [client 85.203.21.190] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/assets/"] [unique_id "agnFhT4V9GkVWmCFmGYxBQAAAIM"]
[Sun May 17 21:41:25.961083 2026] [:error] [pid 59062:tid 59137] [client 85.203.21.164:64289] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/"] [unique_id "agnFhT4V9GkVWmCFmGYxBwAAAI4"]
[Sun May 17 21:41:26.160938 2026] [:error] [pid 59062:tid 59142] [client 85.203.21.235:29067] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/assets/about.php"] [unique_id "agnFhj4V9GkVWmCFmGYxCgAAAJM"]
[Sun May 17 21:41:26.359925 2026] [:error] [pid 59062:tid 59147] [client 85.203.21.206:64681] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-title/about.php"] [unique_id "agnFhj4V9GkVWmCFmGYxDQAAAJg"]
[Sun May 17 21:41:26.556664 2026] [:error] [pid 59062:tid 59144] [client 85.203.21.221:57909] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Exception/wp-login.php"] [unique_id "agnFhj4V9GkVWmCFmGYxEQAAAJU"]
[Sun May 17 21:41:26.750740 2026] [:error] [pid 59062:tid 59138] [client 85.203.21.167:49641] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/rss/about.php"] [unique_id "agnFhj4V9GkVWmCFmGYxFAAAAI8"]
[Sun May 17 21:41:26.948952 2026] [:error] [pid 59062:tid 59130] [client 85.203.21.238:59261] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/src/Core/wp-login.php"] [unique_id "agnFhj4V9GkVWmCFmGYxFwAAAIc"]
[Sun May 17 21:41:27.146829 2026] [:error] [pid 59062:tid 59131] [client 85.203.21.213:46509] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/templates/about.php"] [unique_id "agnFhz4V9GkVWmCFmGYxGQAAAIg"]
[Sun May 17 21:41:27.344566 2026] [:error] [pid 10784:tid 10804] [client 85.203.21.221:39063] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-title/"] [unique_id "agnFh2BWRlKsFkSZGxBQEwAAAYU"]
[Sun May 17 21:41:27.540152 2026] [:error] [pid 59166:tid 59190] [client 85.203.21.172:33203] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/wp-login.php"] [unique_id "agnFh0_puQ1I47_0UrjzJwAAANY"]
[Sun May 17 21:41:27.737106 2026] [:error] [pid 59166:tid 59168] [client 85.203.21.52:40625] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/rss/"] [unique_id "agnFh0_puQ1I47_0UrjzKQAAAMA"]
[Sun May 17 21:41:32.937992 2026] [:error] [pid 59060:tid 59090] [client 85.203.21.213:38065] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/pullquote/wp-login.php"] [unique_id "agnFjPvwvq3bndkPE4n3XgAAABU"]
[Sun May 17 21:41:33.135646 2026] [:error] [pid 59061:tid 59096] [client 85.203.21.170:57283] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-title/wp-login.php"] [unique_id "agnFjYYS410zAmsYkoIxTAAAAEA"]
[Sun May 17 21:41:33.336049 2026] [:error] [pid 10835:tid 10891] [client 193.37.32.1:29527] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "agnFjUk8lW0-dtknLl8wHgAAAhI"]
[Sun May 17 21:41:33.533979 2026] [:error] [pid 59060:tid 59085] [client 85.203.21.206:42413] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-pagination-previous/about.php"] [unique_id "agnFjfvwvq3bndkPE4n3YQAAABA"]
[Sun May 17 21:41:33.736908 2026] [:error] [pid 59062:tid 59143] [client 85.203.21.168:46393] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/comment-date/about.php"] [unique_id "agnFjT4V9GkVWmCFmGYxGwAAAJQ"]
[Sun May 17 21:41:33.932594 2026] [:error] [pid 59062:tid 59142] [client 85.203.21.159:33295] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Parse/wp-login.php"] [unique_id "agnFjT4V9GkVWmCFmGYxHwAAAJM"]
[Sun May 17 21:41:34.130716 2026] [:error] [pid 59062:tid 59131] [client 85.203.21.226:24929] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/pullquote/about.php"] [unique_id "agnFjj4V9GkVWmCFmGYxIgAAAIg"]
[Sun May 17 21:41:34.334057 2026] [:error] [pid 10835:tid 10888] [client 85.203.21.201:43797] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/preformatted/about.php"] [unique_id "agnFjkk8lW0-dtknLl8wHwAAAg8"]
[Sun May 17 21:41:34.548614 2026] [:error] [pid 10784:tid 10807] [client 85.203.21.213:47009] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/about.php"] [unique_id "agnFjmBWRlKsFkSZGxBQHgAAAYg"]
[Sun May 17 21:41:34.745853 2026] [:error] [pid 59061:tid 59120] [client 85.203.21.201:56769] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-title/istsgd.php"] [unique_id "agnFjoYS410zAmsYkoIxTgAAAFg"]
[Sun May 17 21:41:34.944358 2026] [:error] [pid 59062:tid 59135] [client 85.203.21.217:60045] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/code/about.php"] [unique_id "agnFjj4V9GkVWmCFmGYxJAAAAIw"]
[Sun May 17 21:41:35.139911 2026] [:error] [pid 59061:tid 59109] [client 85.203.21.176:62941] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/social-links/wp-login.php"] [unique_id "agnFj4YS410zAmsYkoIxTwAAAE0"]
[Sun May 17 21:41:35.340113 2026] [:error] [pid 36652:tid 36675] [client 85.203.21.232:22579] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Parse/about.php"] [unique_id "agnFjzZrzQadnZADvj9dOAAAARU"]
[Sun May 17 21:41:35.557104 2026] [:error] [pid 10784:tid 10812] [client 85.203.21.54:59289] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/preformatted/wp-login.php"] [unique_id "agnFj2BWRlKsFkSZGxBQIAAAAY0"]
[Sun May 17 21:41:35.753617 2026] [:error] [pid 10834:tid 10869] [client 85.203.21.167:44169] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/templates/"] [unique_id "agnFjxISNQ_Nf83-Vpq1JwAAAdc"]
[Sun May 17 21:41:35.953226 2026] [:error] [pid 59062:tid 59124] [client 85.203.21.176:44157] [client 85.203.21.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/social-links/"] [unique_id "agnFjz4V9GkVWmCFmGYxKAAAAIE"]
[Sun May 17 21:41:36.147641 2026] [:error] [pid 11079:tid 11119] [client 85.203.21.184:20791] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-pagination-previous/"] [unique_id "agnFkGeR3-DrxhvUqxECIgAAAk8"]
[Sun May 17 21:41:36.350001 2026] [:error] [pid 11079:tid 11116] [client 85.203.21.159:39069] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Parse/"] [unique_id "agnFkGeR3-DrxhvUqxECIwAAAkw"]
[Sun May 17 21:41:36.547281 2026] [:error] [pid 10834:tid 10866] [client 85.203.21.197:25937] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/social-links/about.php"] [unique_id "agnFkBISNQ_Nf83-Vpq1KQAAAdQ"]
[Sun May 17 21:41:41.747966 2026] [:error] [pid 10834:tid 10863] [client 85.203.21.227:47991] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-wp-site-edit.php"] [unique_id "agnFlRISNQ_Nf83-Vpq1LwAAAdE"]
[Sun May 17 21:41:41.945422 2026] [:error] [pid 10834:tid 10850] [client 85.203.21.239:22245] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentynineteen/sass/site/header/"] [unique_id "agnFlRISNQ_Nf83-Vpq1MQAAAcQ"]
[Sun May 17 21:41:42.140900 2026] [:error] [pid 10834:tid 10857] [client 85.203.21.201:60375] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/media-time.php"] [unique_id "agnFlhISNQ_Nf83-Vpq1MwAAAcs"]
[Sun May 17 21:41:42.341252 2026] [:error] [pid 10834:tid 10866] [client 85.203.21.213:49477] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/veq/aaa.php"] [unique_id "agnFlhISNQ_Nf83-Vpq1NQAAAdQ"]
[Sun May 17 21:41:42.537714 2026] [:error] [pid 10834:tid 10870] [client 85.203.21.159:47529] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-featured-image/"] [unique_id "agnFlhISNQ_Nf83-Vpq1OAAAAdg"]
[Sun May 17 21:41:42.749608 2026] [:error] [pid 59166:tid 59187] [client 85.203.21.186:64431] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/riode/inc/add-on/live-search/"] [unique_id "agnFlk_puQ1I47_0UrjzMAAAANM"]
[Sun May 17 21:41:42.949838 2026] [:error] [pid 36652:tid 36677] [client 193.37.32.1:59829] [client 193.37.32.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/assets/fonts/literata/"] [unique_id "agnFljZrzQadnZADvj9dPgAAARc"]
[Sun May 17 21:41:43.266829 2026] [:error] [pid 59166:tid 59176] [client 85.203.21.193:39605] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "agnFl0_puQ1I47_0UrjzMQAAAMg"]
[Sun May 17 21:41:45.013655 2026] [:error] [pid 59062:tid 59132] [client 85.203.21.168:63401] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/term-description/"] [unique_id "agnFmT4V9GkVWmCFmGYxLgAAAIk"]
[Sun May 17 21:41:45.210958 2026] [:error] [pid 11079:tid 11121] [client 193.37.32.3:37953] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/shortcode/"] [unique_id "agnFmWeR3-DrxhvUqxECMAAAAlE"]
[Sun May 17 21:41:45.418373 2026] [:error] [pid 59062:tid 59131] [client 193.37.32.3:34869] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/math/"] [unique_id "agnFmT4V9GkVWmCFmGYxLwAAAIg"]
[Sun May 17 21:41:45.632872 2026] [:error] [pid 10784:tid 10810] [client 85.203.21.206:47263] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Utility/"] [unique_id "agnFmWBWRlKsFkSZGxBQIgAAAYs"]
[Sun May 17 21:41:45.834341 2026] [:error] [pid 11079:tid 11115] [client 85.203.21.45:42251] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "agnFmWeR3-DrxhvUqxECMgAAAks"]
[Sun May 17 21:41:46.037006 2026] [:error] [pid 11079:tid 11103] [client 85.203.21.164:21999] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/"] [unique_id "agnFmmeR3-DrxhvUqxECMwAAAkM"]
[Sun May 17 21:41:46.237628 2026] [:error] [pid 10835:tid 10880] [client 85.203.21.192:48493] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/abilities-api/wp-conflg.php"] [unique_id "agnFmkk8lW0-dtknLl8wIQAAAgc"]
[Sun May 17 21:41:46.448638 2026] [:error] [pid 10784:tid 10806] [client 85.203.21.164:63841] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/class-wp-image.php"] [unique_id "agnFmmBWRlKsFkSZGxBQIwAAAYc"]
[Sun May 17 21:41:46.647634 2026] [:error] [pid 10835:tid 10896] [client 85.203.21.156:27343] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/fonts/bott.php"] [unique_id "agnFmkk8lW0-dtknLl8wIgAAAhc"]
[Sun May 17 21:41:51.849974 2026] [:error] [pid 36652:tid 36665] [client 85.203.21.195:25465] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/chosen.php"] [unique_id "agnFnzZrzQadnZADvj9dQAAAAQs"]
[Sun May 17 21:41:52.051549 2026] [:error] [pid 59060:tid 59085] [client 85.203.21.232:32667] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/admin.php"] [unique_id "agnFoPvwvq3bndkPE4n3bAAAABA"]
[Sun May 17 21:41:52.250648 2026] [:error] [pid 59166:tid 59174] [client 85.203.21.195:33757] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/zsdhb.php"] [unique_id "agnFoE_puQ1I47_0UrjzNQAAAMY"]
[Sun May 17 21:41:52.451483 2026] [:error] [pid 59060:tid 59078] [client 85.203.21.238:53237] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/revision-long.php"] [unique_id "agnFoPvwvq3bndkPE4n3bQAAAAk"]
[Sun May 17 21:41:52.650303 2026] [:error] [pid 10784:tid 10816] [client 85.203.21.52:43023] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/getid3-exception.php"] [unique_id "agnFoGBWRlKsFkSZGxBQJgAAAZA"]
[Sun May 17 21:41:52.848485 2026] [:error] [pid 10784:tid 10802] [client 85.203.21.186:60175] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/class-json-restful.php"] [unique_id "agnFoGBWRlKsFkSZGxBQJwAAAYM"]
[Sun May 17 21:41:53.045559 2026] [:error] [pid 10784:tid 10811] [client 85.203.21.193:31861] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/xml.php"] [unique_id "agnFoWBWRlKsFkSZGxBQKQAAAYw"]
[Sun May 17 21:41:53.668899 2026] [:error] [pid 17234:tid 17252] [client 85.203.21.58:50215] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/revision-path.php"] [unique_id "agnFodJ4QOrYRCeDR2hhTgAAAVA"]
[Sun May 17 21:41:53.961795 2026] [:error] [pid 36652:tid 36661] [client 85.203.21.178:45515] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/build/irys/"] [unique_id "agnFoTZrzQadnZADvj9dQwAAAQc"]
[Sun May 17 21:41:54.161491 2026] [:error] [pid 59061:tid 59097] [client 85.203.21.228:34997] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/xmu.php"] [unique_id "agnFooYS410zAmsYkoIxVQAAAEE"]
[Sun May 17 21:41:54.361974 2026] [:error] [pid 11079:tid 11128] [client 85.203.21.168:29765] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/modern/dist/resources/js/tal/admin.php"] [unique_id "agnFomeR3-DrxhvUqxECNQAAAlg"]
[Sun May 17 21:41:54.557873 2026] [:error] [pid 17234:tid 17242] [client 85.203.21.156:31179] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/build/dist/cache/cache/uploads/build/uco/"] [unique_id "agnFotJ4QOrYRCeDR2hhUwAAAUY"]
[Sun May 17 21:41:54.761594 2026] [:error] [pid 17234:tid 17243] [client 85.203.21.213:28209] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "agnFotJ4QOrYRCeDR2hhVAAAAUc"]
[Sun May 17 21:41:54.961863 2026] [:error] [pid 17234:tid 17238] [client 85.203.21.228:38285] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/images/chosen.php"] [unique_id "agnFotJ4QOrYRCeDR2hhVwAAAUI"]
[Sun May 17 21:41:55.161725 2026] [:error] [pid 10834:tid 10863] [client 85.203.21.58:24903] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/hlex/hlex2.php"] [unique_id "agnFoxISNQ_Nf83-Vpq1PAAAAdE"]
[Sun May 17 21:41:55.364546 2026] [:error] [pid 10834:tid 10850] [client 85.203.21.183:20561] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/view-source/ioxi-o2.php"] [unique_id "agnFoxISNQ_Nf83-Vpq1PQAAAcQ"]
[Sun May 17 21:41:55.564078 2026] [:error] [pid 10834:tid 10849] [client 85.203.21.183:37755] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/cache/classwithtostring.php"] [unique_id "agnFoxISNQ_Nf83-Vpq1PgAAAcM"]
[Sun May 17 21:41:55.767973 2026] [:error] [pid 10835:tid 10877] [client 85.203.21.226:50191] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elex/1.php"] [unique_id "agnFo0k8lW0-dtknLl8wJwAAAgQ"]
[Sun May 17 21:41:55.965765 2026] [:error] [pid 59061:tid 59109] [client 85.203.21.195:29139] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/elex/elex.php"] [unique_id "agnFo4YS410zAmsYkoIxWgAAAE0"]
[Sun May 17 21:41:56.165420 2026] [:error] [pid 10834:tid 10861] [client 85.203.21.172:60289] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/maintenance.php"] [unique_id "agnFpBISNQ_Nf83-Vpq1QAAAAc8"]
[Sun May 17 21:41:56.362185 2026] [:error] [pid 59061:tid 59099] [client 85.203.21.52:54395] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/database/index.php"] [unique_id "agnFpIYS410zAmsYkoIxXAAAAEM"]
[Sun May 17 21:41:56.563748 2026] [:error] [pid 10834:tid 10869] [client 85.203.21.159:57737] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/Divi/includes/builder/feature/ajax-data/"] [unique_id "agnFpBISNQ_Nf83-Vpq1QQAAAdc"]
[Sun May 17 21:41:56.762185 2026] [:error] [pid 59061:tid 59103] [client 85.203.21.238:47975] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/Divi/includes/builder/"] [unique_id "agnFpIYS410zAmsYkoIxXQAAAEc"]
[Sun May 17 21:41:56.957187 2026] [:error] [pid 59166:tid 59189] [client 85.203.21.58:49203] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/goodbarber/models/media.php"] [unique_id "agnFpE_puQ1I47_0UrjzNwAAANU"]
[Sun May 17 21:41:57.159303 2026] [:error] [pid 10834:tid 10865] [client 85.203.21.227:21637] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.ndmd.kn/wp-includes/Text/231.php"] [unique_id "agnFpRISNQ_Nf83-Vpq1QwAAAdM"]
[Sun May 17 21:41:57.354032 2026] [:error] [pid 59061:tid 59107] [client 85.203.21.222:50255] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/classwithtostring.php"] [unique_id "agnFpYYS410zAmsYkoIxXgAAAEs"]
[Sun May 17 21:42:02.551542 2026] [:error] [pid 36652:tid 36656] [client 85.203.21.201:48667] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/dev.ndmd.kn/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "agnFqjZrzQadnZADvj9dRwAAAQI"]
[Sun May 17 21:42:02.747544 2026] [:error] [pid 17234:tid 17252] [client 85.203.21.57:44911] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wppa-depot/wp-conflg.php"] [unique_id "agnFqtJ4QOrYRCeDR2hhWwAAAVA"]
[Sun May 17 21:42:02.945735 2026] [:error] [pid 59060:tid 59084] [client 85.203.21.204:41023] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/wp-conflg.php"] [unique_id "agnFqvvwvq3bndkPE4n3cQAAAA8"]
[Sun May 17 21:42:03.148392 2026] [:error] [pid 17234:tid 17259] [client 85.203.21.58:42091] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xjkuda.php"] [unique_id "agnFq9J4QOrYRCeDR2hhXAAAAVc"]
[Sun May 17 21:42:03.347507 2026] [:error] [pid 59062:tid 59135] [client 85.203.21.221:35495] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/login.php"] [unique_id "agnFqz4V9GkVWmCFmGYxPQAAAIw"]
[Sun May 17 21:42:03.546428 2026] [:error] [pid 10784:tid 10817] [client 85.203.21.184:35169] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/duplicator-pro/ctrls/class.web.services.php"] [unique_id "agnFq2BWRlKsFkSZGxBQLQAAAZE"]
[Sun May 17 21:42:03.762470 2026] [:error] [pid 10784:tid 10810] [client 85.203.21.57:46315] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/min.php"] [unique_id "agnFq2BWRlKsFkSZGxBQLgAAAYs"]
[Sun May 17 21:42:03.964145 2026] [:error] [pid 10784:tid 10806] [client 85.203.21.52:44787] [client 85.203.21.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/wordpress-6.9.1-partial-0/wordpress/wp-admin/admin.php"] [unique_id "agnFq2BWRlKsFkSZGxBQLwAAAYc"]
[Sun May 17 21:42:04.161357 2026] [:error] [pid 10784:tid 10813] [client 85.203.21.170:47561] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/wordpress-6.9.1-partial-0/wordpress/wp-includes/home.php"] [unique_id "agnFrGBWRlKsFkSZGxBQMAAAAY4"]
[Sun May 17 21:42:04.357950 2026] [:error] [pid 17234:tid 17248] [client 85.203.21.188:61037] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/enhanced-text-widget1/analyst/src/403x.php"] [unique_id "agnFrNJ4QOrYRCeDR2hhXgAAAUw"]
[Sun May 17 21:42:04.571774 2026] [:error] [pid 59061:tid 59116] [client 85.203.21.217:22367] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/backup.php"] [unique_id "agnFrIYS410zAmsYkoIxZwAAAFQ"]
[Sun May 17 21:42:04.776638 2026] [:error] [pid 10784:tid 10822] [client 85.203.21.232:54895] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "agnFrGBWRlKsFkSZGxBQMQAAAZY"]
[Sun May 17 21:42:04.976893 2026] [:error] [pid 59166:tid 59176] [client 85.203.21.178:65025] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wolf.php"] [unique_id "agnFrE_puQ1I47_0UrjzPgAAAMg"]
[Sun May 17 21:42:05.175200 2026] [:error] [pid 59166:tid 59185] [client 85.203.21.162:51791] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/postnews.php"] [unique_id "agnFrU_puQ1I47_0UrjzPwAAANE"]
[Sun May 17 21:42:05.371450 2026] [:error] [pid 59061:tid 59110] [client 85.203.21.170:22807] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/maxro.php"] [unique_id "agnFrYYS410zAmsYkoIxaAAAAE4"]
[Sun May 17 21:42:05.571619 2026] [:error] [pid 59061:tid 59107] [client 85.203.21.164:21851] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/akismet/_inc/img/PRffc.php"] [unique_id "agnFrYYS410zAmsYkoIxaQAAAEs"]
[Sun May 17 21:42:05.768915 2026] [:error] [pid 59166:tid 59188] [client 85.203.21.222:40491] [client 85.203.21.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/wpvivid_uploads/wp-conflg.php"] [unique_id "agnFrU_puQ1I47_0UrjzQAAAANQ"]
[Sun May 17 21:42:05.963952 2026] [:error] [pid 59062:tid 59140] [client 85.203.21.184:39607] [client 85.203.21.184] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/fukasawa/inc/classes/eroor.php"] [unique_id "agnFrT4V9GkVWmCFmGYxPgAAAJE"]
[Sun May 17 21:42:06.160130 2026] [:error] [pid 59061:tid 59098] [client 85.203.21.221:29933] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/btx25.php"] [unique_id "agnFroYS410zAmsYkoIxawAAAEI"]
[Sun May 17 21:42:06.366163 2026] [:error] [pid 10835:tid 10890] [client 85.203.21.157:35551] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/users.php"] [unique_id "agnFrkk8lW0-dtknLl8wKgAAAhE"]
[Sun May 17 21:42:06.565876 2026] [:error] [pid 59061:tid 59108] [client 193.37.32.3:61955] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/yosxb.php"] [unique_id "agnFroYS410zAmsYkoIxbAAAAEw"]
[Sun May 17 21:42:06.763501 2026] [:error] [pid 59061:tid 59104] [client 85.203.21.58:45075] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-cache-sys/class-payment.php"] [unique_id "agnFroYS410zAmsYkoIxbQAAAEg"]
[Sun May 17 21:42:06.962018 2026] [:error] [pid 59061:tid 59100] [client 85.203.21.45:45521] [client 85.203.21.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "agnFroYS410zAmsYkoIxbgAAAEQ"]
[Sun May 17 21:42:07.158551 2026] [:error] [pid 59061:tid 59112] [client 85.203.21.167:22493] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/column/classwithtostring.php"] [unique_id "agnFr4YS410zAmsYkoIxbwAAAFA"]
[Sun May 17 21:42:07.563863 2026] [:error] [pid 59061:tid 59106] [client 85.203.21.235:43269] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/parts/"] [unique_id "agnFr4YS410zAmsYkoIxcAAAAEo"]
[Sun May 17 21:42:07.852625 2026] [:error] [pid 17234:tid 17243] [client 85.203.21.183:48199] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp-cache-sys/file.php"] [unique_id "agnFr9J4QOrYRCeDR2hhYgAAAUc"]
[Sun May 17 21:42:13.049580 2026] [:error] [pid 59062:tid 59146] [client 85.203.21.164:25013] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/revslider/admin/assets/js/plugins/admin.php"] [unique_id "agnFtT4V9GkVWmCFmGYxUAAAAJc"]
[Sun May 17 21:42:13.246575 2026] [:error] [pid 59062:tid 59144] [client 85.203.21.204:45503] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/wp-load.php"] [unique_id "agnFtT4V9GkVWmCFmGYxUQAAAJU"]
[Sun May 17 21:42:18.445220 2026] [:error] [pid 11079:tid 11123] [client 85.203.21.202:31773] [client 85.203.21.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/js_composer/assets/lib/bower/nivoslider/themes/module.php"] [unique_id "agnFumeR3-DrxhvUqxECPAAAAlM"]
[Sun May 17 21:42:18.643720 2026] [:error] [pid 59062:tid 59138] [client 85.203.21.57:41001] [client 85.203.21.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sodium_compat/wp-conflg.php"] [unique_id "agnFuj4V9GkVWmCFmGYxVQAAAI8"]
[Sun May 17 21:42:18.841387 2026] [:error] [pid 11079:tid 11120] [client 85.203.21.183:39801] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/login.php"] [unique_id "agnFumeR3-DrxhvUqxECPQAAAlA"]
[Sun May 17 21:42:19.038124 2026] [:error] [pid 59062:tid 59125] [client 85.203.21.192:32305] [client 85.203.21.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/themes/api.php"] [unique_id "agnFuz4V9GkVWmCFmGYxVwAAAII"]
[Sun May 17 21:42:19.236523 2026] [:error] [pid 59062:tid 59141] [client 85.203.21.186:43895] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/js/tinymce/plugins/wp-load.php"] [unique_id "agnFuz4V9GkVWmCFmGYxWQAAAJI"]
[Sun May 17 21:42:19.435744 2026] [:error] [pid 59062:tid 59123] [client 85.203.21.188:25417] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/js_composer/include/classes/vendors/plugins/users.php"] [unique_id "agnFuz4V9GkVWmCFmGYxWwAAAIA"]
[Sun May 17 21:42:19.631134 2026] [:error] [pid 59062:tid 59135] [client 85.203.21.161:24491] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/js_composer/assets/js/frontend_editor/vendors/plugins/xmlrpc.php"] [unique_id "agnFuz4V9GkVWmCFmGYxXQAAAIw"]
[Sun May 17 21:42:19.831837 2026] [:error] [pid 59062:tid 59138] [client 85.203.21.207:52069] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/js_composer/assets/lib/vc_chart/"] [unique_id "agnFuz4V9GkVWmCFmGYxYAAAAI8"]
[Sun May 17 21:42:30.061793 2026] [:error] [pid 17234:tid 17248] [client 85.203.21.238:28541] [client 85.203.21.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/the-events-calendar/common/vendor/vendor-prefixed/monolog/monolog/about.php"] [unique_id "agnFxtJ4QOrYRCeDR2hhaAAAAUw"]
[Sun May 17 21:42:35.261462 2026] [:error] [pid 10834:tid 10861] [client 85.203.21.170:62199] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/yosxb.php"] [unique_id "agnFyxISNQ_Nf83-Vpq1WAAAAc8"]
[Sun May 17 21:42:35.458628 2026] [:error] [pid 11079:tid 11100] [client 85.203.21.157:40491] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/222.php"] [unique_id "agnFy2eR3-DrxhvUqxECXwAAAkA"]
[Sun May 17 21:42:35.655978 2026] [:error] [pid 11079:tid 11104] [client 85.203.21.207:49597] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "agnFy2eR3-DrxhvUqxECYAAAAkQ"]
[Sun May 17 21:42:35.854339 2026] [:error] [pid 11079:tid 11101] [client 85.203.21.228:41181] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentynineteen/sass/forms/"] [unique_id "agnFy2eR3-DrxhvUqxECYQAAAkE"]
[Sun May 17 21:42:36.054068 2026] [:error] [pid 59061:tid 59107] [client 85.203.21.206:39631] [client 85.203.21.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-patterns/mmm.php"] [unique_id "agnFzIYS410zAmsYkoIxdQAAAEs"]
[Sun May 17 21:42:36.251063 2026] [:error] [pid 59062:tid 59137] [client 85.203.21.239:45609] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/widgets-form-function.php"] [unique_id "agnFzD4V9GkVWmCFmGYxawAAAI4"]
[Sun May 17 21:42:36.446129 2026] [:error] [pid 11079:tid 11125] [client 85.203.21.168:60273] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/true.php"] [unique_id "agnFzGeR3-DrxhvUqxECYwAAAlU"]
[Sun May 17 21:42:36.643669 2026] [:error] [pid 11079:tid 11127] [client 85.203.21.164:45865] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/src/Proxy/"] [unique_id "agnFzGeR3-DrxhvUqxECZQAAAlc"]
[Sun May 17 21:42:36.838167 2026] [:error] [pid 10834:tid 10854] [client 85.203.21.183:63075] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/assets/wp-canser.php"] [unique_id "agnFzBISNQ_Nf83-Vpq1XQAAAcg"]
[Sun May 17 21:42:42.034489 2026] [:error] [pid 10835:tid 10879] [client 85.203.21.226:25207] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/certificates/doc.php"] [unique_id "agnF0kk8lW0-dtknLl8wNwAAAgY"]
[Sun May 17 21:42:47.242936 2026] [:error] [pid 59062:tid 59126] [client 85.203.21.172:46863] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/install-helper-new.php"] [unique_id "agnF1z4V9GkVWmCFmGYxiwAAAIM"]
[Sun May 17 21:42:47.443274 2026] [:error] [pid 59061:tid 59099] [client 85.203.21.159:53255] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/site-title-restful.php"] [unique_id "agnF14YS410zAmsYkoIxgAAAAEM"]
[Sun May 17 21:42:47.639201 2026] [:error] [pid 59061:tid 59118] [client 85.203.21.159:37153] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/options-discussion-statement.php"] [unique_id "agnF14YS410zAmsYkoIxgQAAAFY"]
[Sun May 17 21:42:47.835055 2026] [:error] [pid 59061:tid 59115] [client 85.203.21.226:31827] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/xmrlpc.php"] [unique_id "agnF14YS410zAmsYkoIxgwAAAFM"]
[Sun May 17 21:42:48.048751 2026] [:error] [pid 59061:tid 59119] [client 85.203.21.232:40135] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/connects.php"] [unique_id "agnF2IYS410zAmsYkoIxhQAAAFc"]
[Sun May 17 21:42:48.251523 2026] [:error] [pid 59061:tid 59097] [client 85.203.21.195:48443] [client 85.203.21.195] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/well-known/acme-challenge/g/assets/msbp/admin.php"] [unique_id "agnF2IYS410zAmsYkoIxhgAAAEE"]
[Sun May 17 21:42:48.451577 2026] [:error] [pid 59062:tid 59136] [client 85.203.21.201:23177] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/upload.php"] [unique_id "agnF2D4V9GkVWmCFmGYxjQAAAI0"]
[Sun May 17 21:42:48.651869 2026] [:error] [pid 59061:tid 59096] [client 85.203.21.239:30735] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wp/content/aswfy/admin.php"] [unique_id "agnF2IYS410zAmsYkoIxhwAAAEA"]
[Sun May 17 21:42:53.850184 2026] [:error] [pid 10834:tid 10863] [client 85.203.21.213:60479] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/htt.php"] [unique_id "agnF3RISNQ_Nf83-Vpq1aQAAAdE"]
[Sun May 17 21:42:54.047164 2026] [:error] [pid 11079:tid 11101] [client 85.203.21.157:64337] [client 85.203.21.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/query-pagination/yosxb.php"] [unique_id "agnF3meR3-DrxhvUqxECeAAAAkE"]
[Sun May 17 21:42:54.246053 2026] [:error] [pid 59060:tid 59070] [client 85.203.21.197:64557] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ezra-backup/"] [unique_id "agnF3vvwvq3bndkPE4n3jAAAAAE"]
[Sun May 17 21:42:54.448290 2026] [:error] [pid 59060:tid 59074] [client 85.203.21.186:50437] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/custom-cms/"] [unique_id "agnF3vvwvq3bndkPE4n3jQAAAAU"]
[Sun May 17 21:42:54.646590 2026] [:error] [pid 11079:tid 11116] [client 85.203.21.204:33747] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/default/"] [unique_id "agnF3meR3-DrxhvUqxECeQAAAkw"]
[Sun May 17 21:42:54.850612 2026] [:error] [pid 59060:tid 59092] [client 85.203.21.183:39417] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/joel-test123/"] [unique_id "agnF3vvwvq3bndkPE4n3jgAAABc"]
[Sun May 17 21:42:55.052783 2026] [:error] [pid 59061:tid 59105] [client 193.37.32.3:53817] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/okbkh/content-"] [unique_id "agnF34YS410zAmsYkoIxiwAAAEk"]
[Sun May 17 21:42:55.248940 2026] [:error] [pid 36652:tid 36668] [client 85.203.21.226:52689] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/simple.php"] [unique_id "agnF3zZrzQadnZADvj9dSwAAAQ4"]
[Sun May 17 21:42:55.446054 2026] [:error] [pid 36652:tid 36667] [client 193.37.32.3:27337] [client 193.37.32.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/simple.php"] [unique_id "agnF3zZrzQadnZADvj9dTAAAAQ0"]
[Sun May 17 21:42:55.644423 2026] [:error] [pid 36652:tid 36664] [client 85.203.21.239:35263] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/simple.php"] [unique_id "agnF3zZrzQadnZADvj9dTQAAAQo"]
[Sun May 17 21:42:55.841461 2026] [:error] [pid 59060:tid 59076] [client 85.203.21.204:65355] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/css/wp-conflg.php"] [unique_id "agnF3_vwvq3bndkPE4n3jwAAAAc"]
[Sun May 17 21:42:56.039322 2026] [:error] [pid 59062:tid 59129] [client 85.203.21.235:23611] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/img/bg/chosen.php"] [unique_id "agnF4D4V9GkVWmCFmGYxlgAAAIY"]
[Sun May 17 21:42:56.241044 2026] [:error] [pid 59062:tid 59139] [client 85.203.21.167:21255] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/chosen.php"] [unique_id "agnF4D4V9GkVWmCFmGYxlwAAAJA"]
[Sun May 17 21:43:01.442232 2026] [:error] [pid 59060:tid 59082] [client 85.203.21.226:31747] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/ads-txt/inc/wap1.php"] [unique_id "agnF5fvwvq3bndkPE4n3lAAAAA0"]
[Sun May 17 21:43:01.640998 2026] [:error] [pid 17234:tid 17240] [client 85.203.21.186:64211] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "agnF5dJ4QOrYRCeDR2hhcAAAAUQ"]
[Sun May 17 21:43:01.842598 2026] [:error] [pid 17234:tid 17257] [client 85.203.21.188:26233] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/about.php"] [unique_id "agnF5dJ4QOrYRCeDR2hhcQAAAVU"]
[Sun May 17 21:43:02.041962 2026] [:error] [pid 17234:tid 17246] [client 85.203.21.172:52193] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/cache/tmp/dofault.php"] [unique_id "agnF5tJ4QOrYRCeDR2hhcgAAAUo"]
[Sun May 17 21:43:02.240363 2026] [:error] [pid 17234:tid 17242] [client 85.203.21.58:62219] [client 85.203.21.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentyfive/parts/"] [unique_id "agnF5tJ4QOrYRCeDR2hhcwAAAUY"]
[Sun May 17 21:43:02.442186 2026] [:error] [pid 59062:tid 59143] [client 85.203.21.232:22479] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/sunrise/file.php"] [unique_id "agnF5j4V9GkVWmCFmGYxmAAAAJQ"]
[Sun May 17 21:43:02.638755 2026] [:error] [pid 10834:tid 10852] [client 85.203.21.178:60003] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/abilities-api/chosen.php"] [unique_id "agnF5hISNQ_Nf83-Vpq1awAAAcY"]
[Sun May 17 21:43:02.852327 2026] [:error] [pid 10834:tid 10857] [client 85.203.21.239:38629] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/database/database.php"] [unique_id "agnF5hISNQ_Nf83-Vpq1bAAAAcs"]
[Sun May 17 21:43:03.049406 2026] [:error] [pid 11079:tid 11122] [client 85.203.21.161:35591] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/images/user/"] [unique_id "agnF52eR3-DrxhvUqxECegAAAlI"]
[Sun May 17 21:43:03.246817 2026] [:error] [pid 59060:tid 59084] [client 85.203.21.217:42485] [client 85.203.21.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade-temp-backup/photo-gallery/"] [unique_id "agnF5_vwvq3bndkPE4n3lQAAAA8"]
[Sun May 17 21:43:03.447743 2026] [:error] [pid 11079:tid 11125] [client 85.203.21.156:65457] [client 85.203.21.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/images/"] [unique_id "agnF52eR3-DrxhvUqxECfAAAAlU"]
[Sun May 17 21:43:03.651125 2026] [:error] [pid 59166:tid 59170] [client 85.203.21.183:43163] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/mu-plugins/block-library/"] [unique_id "agnF50_puQ1I47_0UrjzTgAAAMI"]
[Sun May 17 21:43:03.847274 2026] [:error] [pid 59060:tid 59070] [client 85.203.21.197:59769] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/ai1wm-backups/ID3/"] [unique_id "agnF5_vwvq3bndkPE4n3mAAAAAE"]
[Sun May 17 21:43:04.046945 2026] [:error] [pid 59061:tid 59111] [client 85.203.21.168:55611] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-links.php"] [unique_id "agnF6IYS410zAmsYkoIxjwAAAE8"]
[Sun May 17 21:43:04.243974 2026] [:error] [pid 59166:tid 59181] [client 85.203.21.221:23135] [client 85.203.21.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/admin-ui/"] [unique_id "agnF6E_puQ1I47_0UrjzTwAAAM0"]
[Sun May 17 21:43:04.439760 2026] [:error] [pid 17234:tid 17237] [client 85.203.21.207:59305] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/user_data/SafetyTips/"] [unique_id "agnF6NJ4QOrYRCeDR2hhdQAAAUE"]
[Sun May 17 21:43:04.638800 2026] [:error] [pid 10834:tid 10868] [client 85.203.21.161:25263] [client 85.203.21.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/widgets/ws88.php"] [unique_id "agnF6BISNQ_Nf83-Vpq1bgAAAdY"]
[Sun May 17 21:43:04.839889 2026] [:error] [pid 59060:tid 59089] [client 85.203.21.228:37985] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/images/media/zo.php"] [unique_id "agnF6Pvwvq3bndkPE4n3mgAAABQ"]
[Sun May 17 21:43:05.045705 2026] [:error] [pid 10834:tid 10865] [client 85.203.21.164:33885] [client 85.203.21.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "agnF6RISNQ_Nf83-Vpq1bwAAAdM"]
[Sun May 17 21:43:05.246580 2026] [:error] [pid 59166:tid 59182] [client 85.203.21.197:63055] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "agnF6U_puQ1I47_0UrjzUAAAAM4"]
[Sun May 17 21:43:05.455464 2026] [:error] [pid 59061:tid 59108] [client 85.203.21.54:20273] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/users.php"] [unique_id "agnF6YYS410zAmsYkoIxkQAAAEw"]
[Sun May 17 21:43:05.655369 2026] [:error] [pid 59061:tid 59104] [client 85.203.21.237:32425] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/100.php"] [unique_id "agnF6YYS410zAmsYkoIxkgAAAEg"]
[Sun May 17 21:43:05.858563 2026] [:error] [pid 59061:tid 59100] [client 85.203.21.239:54475] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/zo.php"] [unique_id "agnF6YYS410zAmsYkoIxkwAAAEQ"]
[Sun May 17 21:43:06.058832 2026] [:error] [pid 10835:tid 10874] [client 85.203.21.201:59755] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wpxml.php"] [unique_id "agnF6kk8lW0-dtknLl8wPAAAAgE"]
[Sun May 17 21:43:06.262646 2026] [:error] [pid 59061:tid 59112] [client 85.203.21.213:63375] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/cgi-bin/upload.php"] [unique_id "agnF6oYS410zAmsYkoIxlAAAAFA"]
[Sun May 17 21:43:06.463381 2026] [:error] [pid 59060:tid 59076] [client 85.203.21.197:40957] [client 85.203.21.197] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/cgi-bin/cgi-bin/cgi-bin/users.php"] [unique_id "agnF6vvwvq3bndkPE4n3mwAAAAc"]
[Sun May 17 21:43:06.658744 2026] [:error] [pid 17234:tid 17253] [client 85.203.21.207:35151] [client 85.203.21.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/fonts/lato/wp-content/plugins/photo-gallery/admin/controllers/images/"] [unique_id "agnF6tJ4QOrYRCeDR2hhdgAAAVE"]
[Sun May 17 21:43:06.855861 2026] [:error] [pid 59061:tid 59120] [client 85.203.21.168:37487] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/sitemaps/providers/fonts/"] [unique_id "agnF6oYS410zAmsYkoIxlQAAAFg"]
[Sun May 17 21:43:07.054794 2026] [:error] [pid 11079:tid 11109] [client 85.203.21.178:46025] [client 85.203.21.178] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/theme-compat/patterns/"] [unique_id "agnF62eR3-DrxhvUqxECfQAAAkg"]
[Sun May 17 21:43:07.256425 2026] [:error] [pid 59166:tid 59171] [client 85.203.21.228:25225] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/rithin.php"] [unique_id "agnF60_puQ1I47_0UrjzUQAAAMM"]
[Sun May 17 21:43:07.457077 2026] [:error] [pid 59062:tid 59130] [client 85.203.21.226:42945] [client 85.203.21.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/zdata.php"] [unique_id "agnF6z4V9GkVWmCFmGYxmQAAAIc"]
[Sun May 17 21:43:07.654500 2026] [:error] [pid 11079:tid 11115] [client 85.203.21.239:33311] [client 85.203.21.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/upgrade/chosen.php"] [unique_id "agnF62eR3-DrxhvUqxECfgAAAks"]
[Sun May 17 21:43:07.853630 2026] [:error] [pid 59062:tid 59147] [client 85.203.21.170:48699] [client 85.203.21.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/wp-comand.php"] [unique_id "agnF6z4V9GkVWmCFmGYxmgAAAJg"]
[Sun May 17 21:43:08.052994 2026] [:error] [pid 59062:tid 59123] [client 85.203.21.186:54803] [client 85.203.21.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/wp-pages.php"] [unique_id "agnF7D4V9GkVWmCFmGYxmwAAAIA"]
[Sun May 17 21:43:08.251840 2026] [:error] [pid 59060:tid 59093] [client 85.203.21.213:23377] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-supports/wp-conflg.php"] [unique_id "agnF7Pvwvq3bndkPE4n3nQAAABg"]
[Sun May 17 21:43:08.450124 2026] [:error] [pid 11079:tid 11100] [client 85.203.21.183:47039] [client 85.203.21.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/news-portal/admins-dir.php"] [unique_id "agnF7GeR3-DrxhvUqxECfwAAAkA"]
[Sun May 17 21:43:08.685449 2026] [:error] [pid 11079:tid 11118] [client 85.203.21.232:30389] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/module.tag.lyrics3-class.php"] [unique_id "agnF7GeR3-DrxhvUqxECgAAAAk4"]
[Sun May 17 21:43:08.884743 2026] [:error] [pid 10835:tid 10876] [client 85.203.21.159:46073] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/network/theme-install-variable.php"] [unique_id "agnF7Ek8lW0-dtknLl8wPQAAAgM"]
[Sun May 17 21:43:09.087338 2026] [:error] [pid 36652:tid 36655] [client 85.203.21.201:35489] [client 85.203.21.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-excerpt/themes/"] [unique_id "agnF7TZrzQadnZADvj9dTwAAAQE"]
[Sun May 17 21:43:09.287945 2026] [:error] [pid 17234:tid 17238] [client 85.203.21.162:53401] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/dt-the7/lib/jquery-sticky/theme-compat/"] [unique_id "agnF7dJ4QOrYRCeDR2hheAAAAUI"]
[Sun May 17 21:43:09.491400 2026] [:error] [pid 10835:tid 10883] [client 85.203.21.167:59491] [client 85.203.21.167] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/user/upgrade/"] [unique_id "agnF7Uk8lW0-dtknLl8wPgAAAgo"]
[Sun May 17 21:43:09.690889 2026] [:error] [pid 10834:tid 10851] [client 85.203.21.172:25411] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/customize/pki-validation/"] [unique_id "agnF7RISNQ_Nf83-Vpq1cQAAAcU"]
[Sun May 17 21:43:09.894016 2026] [:error] [pid 10784:tid 10805] [client 85.203.21.159:50419] [client 85.203.21.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/backups/admin.php"] [unique_id "agnF7WBWRlKsFkSZGxBQOQAAAYY"]
[Sun May 17 21:43:10.092445 2026] [:error] [pid 10834:tid 10856] [client 85.203.21.228:42781] [client 85.203.21.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/admin.php"] [unique_id "agnF7hISNQ_Nf83-Vpq1cgAAAco"]
[Sun May 17 21:43:10.391801 2026] [:error] [pid 36652:tid 36660] [client 85.203.21.54:57965] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentytwentytwo/"] [unique_id "agnF7jZrzQadnZADvj9dUAAAAQY"]
[Sun May 17 21:43:15.755926 2026] [:error] [pid 10834:tid 10853] [client 85.203.21.172:65245] [client 85.203.21.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/my-custom-theme/config.php"] [unique_id "agnF8xISNQ_Nf83-Vpq1hAAAAcc"]
[Sun May 17 21:43:15.954075 2026] [:error] [pid 10835:tid 10888] [client 85.203.21.227:60075] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/theme/config.php"] [unique_id "agnF80k8lW0-dtknLl8wQQAAAg8"]
[Sun May 17 21:43:16.153327 2026] [:error] [pid 10834:tid 10857] [client 85.203.21.227:43417] [client 85.203.21.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/my-custom-theme/admin.php"] [unique_id "agnF9BISNQ_Nf83-Vpq1hgAAAcs"]
[Sun May 17 21:43:16.352900 2026] [:error] [pid 10784:tid 10799] [client 85.203.21.168:64035] [client 85.203.21.168] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/maxcoach/"] [unique_id "agnF9GBWRlKsFkSZGxBQOgAAAYA"]
[Sun May 17 21:43:16.550276 2026] [:error] [pid 59166:tid 59174] [client 85.203.21.193:28291] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/min.php"] [unique_id "agnF9E_puQ1I47_0UrjzWgAAAMY"]
[Sun May 17 21:43:16.746526 2026] [:error] [pid 59166:tid 59170] [client 85.203.21.235:45815] [client 85.203.21.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/config.php"] [unique_id "agnF9E_puQ1I47_0UrjzWwAAAMI"]
[Sun May 17 21:43:16.945877 2026] [:error] [pid 59166:tid 59192] [client 85.203.21.232:57779] [client 85.203.21.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/kqsksia/classwithtostring.php"] [unique_id "agnF9E_puQ1I47_0UrjzXAAAANg"]
[Sun May 17 21:43:17.143541 2026] [:error] [pid 10834:tid 10849] [client 85.203.21.237:54429] [client 85.203.21.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/man.php"] [unique_id "agnF9RISNQ_Nf83-Vpq1hwAAAcM"]
[Sun May 17 21:43:17.355170 2026] [:error] [pid 10834:tid 10865] [client 85.203.21.54:49945] [client 85.203.21.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/pullquote/1.php"] [unique_id "agnF9RISNQ_Nf83-Vpq1iAAAAdM"]
[Sun May 17 21:43:17.550962 2026] [:error] [pid 59166:tid 59171] [client 85.203.21.188:64463] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/oceanwp/sass/base/1.php"] [unique_id "agnF9U_puQ1I47_0UrjzXgAAAMM"]
[Sun May 17 21:43:17.748521 2026] [:error] [pid 10834:tid 10858] [client 85.203.21.188:48797] [client 85.203.21.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks-other.php"] [unique_id "agnF9RISNQ_Nf83-Vpq1iQAAAcw"]
[Sun May 17 21:43:17.944353 2026] [:error] [pid 10835:tid 10882] [client 85.203.21.193:63027] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/wp-wlx.php"] [unique_id "agnF9Uk8lW0-dtknLl8wQgAAAgk"]
[Sun May 17 21:43:18.140528 2026] [:error] [pid 10835:tid 10875] [client 85.203.21.213:26379] [client 85.203.21.213] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/media-upload-double.php"] [unique_id "agnF9kk8lW0-dtknLl8wQwAAAgI"]
[Sun May 17 21:43:18.339948 2026] [:error] [pid 10835:tid 10895] [client 85.203.21.204:48133] [client 85.203.21.204] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/includes/class-wp-filesystem-ftpsockets-more.php"] [unique_id "agnF9kk8lW0-dtknLl8wRAAAAhY"]
[Sun May 17 21:43:18.533923 2026] [:error] [pid 10834:tid 10851] [client 85.203.21.193:31603] [client 85.203.21.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/themes/twentynineteen/content-"] [unique_id "agnF9hISNQ_Nf83-Vpq1iwAAAcU"]
[Sun May 17 21:43:18.729906 2026] [:error] [pid 10835:tid 10880] [client 85.203.21.162:63361] [client 85.203.21.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "agnF9kk8lW0-dtknLl8wRgAAAgc"]
[Sun May 17 21:55:07.272401 2026] [:error] [pid 11079:tid 11125] [client 43.134.36.238:36814] [client 43.134.36.238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agnIu2eR3-DrxhvUqxEDuwAAAlU"]
[Sun May 17 22:44:08.151460 2026] [:error] [pid 59060:tid 59091] [client 177.149.167.61:60522] [client 177.149.167.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.149.167.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agnUOPvwvq3bndkPE4n6vgAAABY"]
[Sun May 17 22:44:19.131207 2026] [:error] [pid 59061:tid 59098] [client 177.149.167.61:61250] [client 177.149.167.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.149.167.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agnUQ4YS410zAmsYkoI1FAAAAEI"]
[Sun May 17 22:44:29.624983 2026] [:error] [pid 10784:tid 10804] [client 177.149.167.61:61815] [client 177.149.167.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.149.167.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agnUTWBWRlKsFkSZGxBT5QAAAYU"]
[Mon May 18 03:16:39.016171 2026] [:error] [pid 59061:tid 59106] [client 43.159.62.163:42512] [client 43.159.62.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agoUF4YS410zAmsYkoJCqQAAAEo"]
[Mon May 18 03:33:00.793457 2026] [:error] [pid 17574:tid 17597] [client 182.8.89.38:7706] [client 182.8.89.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agoX7MN0KQGHfy7eWoOk2QAAANU"]
[Mon May 18 03:33:29.018617 2026] [:error] [pid 17388:tid 17510] [client 182.8.89.38:3355] [client 182.8.89.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.89.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agoYCZKxJAZsWZBVYPA34AAAAIs"]
[Mon May 18 03:34:01.610306 2026] [:error] [pid 17388:tid 17503] [client 182.8.89.38:7738] [client 182.8.89.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.89.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agoYKZKxJAZsWZBVYPA4CQAAAIQ"]
[Mon May 18 03:34:25.093145 2026] [:error] [pid 17379:tid 17452] [client 182.8.89.38:10453] [client 182.8.89.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.89.38, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agoYQcgYt3DDO1piwpKq9wAAAAc"]
[Mon May 18 04:29:22.917867 2026] [:error] [pid 20884:tid 20888] [client 58.251.94.5:39508] [client 58.251.94.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 58.251.94.5, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agolInv9K_lRldrJG3OlNQAAAMI"]
[Mon May 18 04:29:23.750512 2026] [proxy_fcgi:error] [pid 20884:tid 20888] [client 58.251.94.5:39508] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 18 04:29:24.549163 2026] [:error] [pid 20884:tid 20896] [client 58.251.94.5:39508] [client 58.251.94.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 58.251.94.5, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agolJHv9K_lRldrJG3OlNwAAAMo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 18 04:29:25.566793 2026] [proxy_fcgi:error] [pid 20884:tid 20896] [client 58.251.94.5:39508] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 18 04:52:40.520520 2026] [:error] [pid 63115:tid 63119] [client 20.78.147.33:1335] [client 20.78.147.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agoqmOz_ApFcYdejvGfeaQAAAQI"]
[Mon May 18 04:52:41.021328 2026] [:error] [pid 20779:tid 20855] [client 20.78.147.33:4106] [client 20.78.147.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agoqmSF3Tl5ZGU-QyEDRwgAAAIk"]
[Mon May 18 04:52:41.560409 2026] [:error] [pid 20778:tid 20838] [client 20.78.147.33:1308] [client 20.78.147.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agoqmWb9K2_TPGoCpArtgAAAAFQ"]
[Mon May 18 04:52:42.041943 2026] [:error] [pid 63115:tid 63123] [client 20.78.147.33:1287] [client 20.78.147.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agoqmuz_ApFcYdejvGfebQAAAQY"]
[Mon May 18 04:59:36.950490 2026] [:error] [pid 20779:tid 20847] [client 43.140.247.223:46344] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agosOCF3Tl5ZGU-QyEDSvwAAAIE"]
[Mon May 18 05:31:53.935519 2026] [:error] [pid 63115:tid 63137] [client 51.75.119.154:51360] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "agozyez_ApFcYdejvGfoxgAAARQ"]
[Mon May 18 05:31:56.261235 2026] [:error] [pid 20778:tid 20842] [client 51.75.119.154:39882] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "agozzGb9K2_TPGoCpAryHAAAAFc"]
[Mon May 18 05:31:58.808074 2026] [:error] [pid 20779:tid 20848] [client 51.75.119.154:39892] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agozziF3Tl5ZGU-QyEDXSQAAAII"]
[Mon May 18 05:32:01.200523 2026] [:error] [pid 20884:tid 20890] [client 51.75.119.154:39898] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "agoz0Xv9K_lRldrJG3OvtgAAAMQ"]
[Mon May 18 05:32:03.585990 2026] [:error] [pid 63115:tid 63134] [client 51.75.119.154:39910] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "agoz0-z_ApFcYdejvGfoxwAAARE"]
[Mon May 18 05:32:05.974390 2026] [:error] [pid 63115:tid 63121] [client 51.75.119.154:44678] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "agoz1ez_ApFcYdejvGfozQAAAQQ"]
[Mon May 18 05:32:08.513983 2026] [:error] [pid 20779:tid 20866] [client 51.75.119.154:44688] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "agoz2CF3Tl5ZGU-QyEDXTAAAAJQ"]
[Mon May 18 05:32:10.883892 2026] [:error] [pid 63115:tid 63134] [client 51.75.119.154:44702] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "agoz2uz_ApFcYdejvGfo2AAAARE"]
[Mon May 18 05:32:13.413848 2026] [:error] [pid 20778:tid 20837] [client 51.75.119.154:44704] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agoz3Wb9K2_TPGoCpAryIgAAAFM"]
[Mon May 18 05:32:15.792402 2026] [:error] [pid 63115:tid 63118] [client 51.75.119.154:44072] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "agoz3-z_ApFcYdejvGfo3AAAAQE"]
[Mon May 18 05:32:18.187397 2026] [:error] [pid 20777:tid 20805] [client 51.75.119.154:44088] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agoz4oHClf0EYFQBeRFEMgAAABM"]
[Mon May 18 05:32:20.706932 2026] [:error] [pid 20777:tid 20802] [client 51.75.119.154:44094] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agoz5IHClf0EYFQBeRFENQAAABA"]
[Mon May 18 05:32:23.226742 2026] [:error] [pid 20779:tid 20855] [client 51.75.119.154:44110] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agoz5yF3Tl5ZGU-QyEDXUQAAAIk"]
[Mon May 18 05:32:25.744264 2026] [:error] [pid 20884:tid 20892] [client 51.75.119.154:48394] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "agoz6Xv9K_lRldrJG3OvyAAAAMY"]
[Mon May 18 05:32:28.118856 2026] [:error] [pid 63115:tid 63138] [client 51.75.119.154:48408] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "agoz7Oz_ApFcYdejvGfo3QAAARU"]
[Mon May 18 05:32:30.649430 2026] [:error] [pid 63115:tid 63134] [client 51.75.119.154:48410] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "agoz7uz_ApFcYdejvGfo3gAAARE"]
[Mon May 18 05:32:33.023482 2026] [:error] [pid 20779:tid 20847] [client 51.75.119.154:48424] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "agoz8SF3Tl5ZGU-QyEDXWAAAAIE"]
[Mon May 18 05:32:35.557116 2026] [:error] [pid 63115:tid 63133] [client 51.75.119.154:36682] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "agoz8-z_ApFcYdejvGfo5gAAARA"]
[Mon May 18 05:32:37.949632 2026] [:error] [pid 63115:tid 63122] [client 51.75.119.154:36694] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "agoz9ez_ApFcYdejvGfo6QAAAQU"]
[Mon May 18 05:32:40.309580 2026] [:error] [pid 20779:tid 20867] [client 51.75.119.154:36708] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "agoz-CF3Tl5ZGU-QyEDXWgAAAJU"]
[Mon May 18 05:32:42.836581 2026] [:error] [pid 20779:tid 20860] [client 51.75.119.154:36716] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "agoz-iF3Tl5ZGU-QyEDXXAAAAI4"]
[Mon May 18 05:32:45.234478 2026] [:error] [pid 20778:tid 20834] [client 51.75.119.154:36754] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "agoz_Wb9K2_TPGoCpAryLAAAAFA"]
[Mon May 18 05:32:47.627548 2026] [:error] [pid 20779:tid 20855] [client 51.75.119.154:36756] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "agoz_yF3Tl5ZGU-QyEDXZAAAAIk"]
[Mon May 18 05:32:50.190036 2026] [:error] [pid 20778:tid 20826] [client 51.75.119.154:36770] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ago0Amb9K2_TPGoCpAryLgAAAEg"]
[Mon May 18 05:33:20.200129 2026] [:error] [pid 20884:tid 20889] [client 51.75.119.154:36774] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ago0IHv9K_lRldrJG3Ov7QAAAMM"]
[Mon May 18 05:33:22.535197 2026] [:error] [pid 63115:tid 63126] [client 51.75.119.154:36458] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ago0Iuz_ApFcYdejvGfpDwAAAQk"]
[Mon May 18 05:33:24.905662 2026] [:error] [pid 63115:tid 63127] [client 51.75.119.154:53686] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ago0JOz_ApFcYdejvGfpEgAAAQo"]
[Mon May 18 05:33:27.300780 2026] [:error] [pid 20777:tid 20791] [client 51.75.119.154:53694] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ago0J4HClf0EYFQBeRFERAAAAAU"]
[Mon May 18 05:33:29.838424 2026] [:error] [pid 20779:tid 20868] [client 51.75.119.154:53710] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ago0KSF3Tl5ZGU-QyEDXcwAAAJY"]
[Mon May 18 05:33:32.231141 2026] [:error] [pid 20884:tid 20904] [client 51.75.119.154:53718] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ago0LHv9K_lRldrJG3Ov-gAAANI"]
[Mon May 18 05:33:34.616682 2026] [:error] [pid 20884:tid 20905] [client 51.75.119.154:53720] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ago0Lnv9K_lRldrJG3Ov_QAAANM"]
[Mon May 18 05:33:37.019154 2026] [:error] [pid 20779:tid 20854] [client 51.75.119.154:36692] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ago0MSF3Tl5ZGU-QyEDXdwAAAIg"]
[Mon May 18 05:33:39.561051 2026] [:error] [pid 20778:tid 20835] [client 51.75.119.154:36706] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ago0M2b9K2_TPGoCpAryOQAAAFE"]
[Mon May 18 05:33:41.949334 2026] [:error] [pid 20778:tid 20837] [client 51.75.119.154:36712] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ago0NWb9K2_TPGoCpAryOgAAAFM"]
[Mon May 18 05:33:44.331434 2026] [:error] [pid 20884:tid 20908] [client 51.75.119.154:36714] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ago0OHv9K_lRldrJG3OwBQAAANY"]
[Mon May 18 05:33:46.853834 2026] [:error] [pid 20778:tid 20842] [client 51.75.119.154:36754] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ago0Omb9K2_TPGoCpAryQgAAAFc"]
[Mon May 18 05:33:49.225211 2026] [:error] [pid 20778:tid 20822] [client 51.75.119.154:36766] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ago0PWb9K2_TPGoCpAryRQAAAEQ"]
[Mon May 18 05:33:51.751059 2026] [:error] [pid 63115:tid 63118] [client 51.75.119.154:36770] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ago0P-z_ApFcYdejvGfpJAAAAQE"]
[Mon May 18 05:33:54.252829 2026] [:error] [pid 63115:tid 63131] [client 51.75.119.154:36780] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ago0Quz_ApFcYdejvGfpKgAAAQ4"]
[Mon May 18 05:33:56.784569 2026] [:error] [pid 20778:tid 20834] [client 51.75.119.154:43604] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ago0RGb9K2_TPGoCpAryRwAAAFA"]
[Mon May 18 05:33:59.158960 2026] [:error] [pid 63115:tid 63118] [client 51.75.119.154:43618] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ago0R-z_ApFcYdejvGfpMgAAAQE"]
[Mon May 18 05:34:01.691056 2026] [:error] [pid 20779:tid 20850] [client 51.75.119.154:43622] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ago0SSF3Tl5ZGU-QyEDXhAAAAIQ"]
[Mon May 18 05:34:04.054376 2026] [:error] [pid 20779:tid 20854] [client 51.75.119.154:43624] [client 51.75.119.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ago0TCF3Tl5ZGU-QyEDXhwAAAIg"]
[Mon May 18 06:13:35.770007 2026] [:error] [pid 20884:tid 20887] [client 49.51.233.46:41198] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ago9j3v9K_lRldrJG3O4WwAAAME"]
[Mon May 18 07:12:15.720857 2026] [:error] [pid 20778:tid 20834] [client 206.135.183.58:14841] [client 206.135.183.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.135.183.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agpLT2b9K2_TPGoCpAr9_AAAAFA"]
[Mon May 18 07:12:26.466553 2026] [:error] [pid 20778:tid 20842] [client 206.135.183.58:15797] [client 206.135.183.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.135.183.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agpLWmb9K2_TPGoCpAr-BQAAAFc"]
[Mon May 18 07:12:48.713715 2026] [:error] [pid 20779:tid 20870] [client 206.135.183.58:14996] [client 206.135.183.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.135.183.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agpLcCF3Tl5ZGU-QyEDjKQAAAJg"]
[Mon May 18 07:12:59.657652 2026] [:error] [pid 48687:tid 48732] [client 206.135.183.58:15908] [client 206.135.183.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.135.183.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agpLezcdaF2jmdvMWAoU8AAAAc8"]
[Mon May 18 07:13:10.347742 2026] [:error] [pid 48686:tid 48707] [client 206.135.183.58:15819] [client 206.135.183.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.135.183.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agpLhsTu4V1xzKWde-S_LwAAAZE"]
[Mon May 18 08:06:14.127701 2026] [:error] [pid 63115:tid 63119] [client 43.167.17.207:34626] [client 43.167.17.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agpX9uz_ApFcYdejvGcDRAAAAQI"]
[Mon May 18 08:51:20.086717 2026] [:error] [pid 36579:tid 36602] [client 170.106.37.134:43826] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agpiiF-aoZxBfgL5vDwa1wAAAFQ"]
[Mon May 18 09:00:12.376517 2026] [:error] [pid 36579:tid 36584] [client 190.92.174.31:39540] [client 190.92.174.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.31, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agpknF-aoZxBfgL5vDweEAAAAEI"]
[Mon May 18 09:00:13.183977 2026] [proxy_fcgi:error] [pid 36579:tid 36584] [client 190.92.174.31:39540] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 18 09:00:13.486413 2026] [:error] [pid 36579:tid 36593] [client 190.92.174.31:39540] [client 190.92.174.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 190.92.174.31, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agpknV-aoZxBfgL5vDweEgAAAEs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 18 09:00:14.502041 2026] [proxy_fcgi:error] [pid 36579:tid 36593] [client 190.92.174.31:39540] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 18 10:45:52.231559 2026] [:error] [pid 44010:tid 44026] [client 20.151.141.70:1766] [client 20.151.141.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agp9YDcFUuogD3-74-ZWVgAAAM4"]
[Mon May 18 10:45:59.170605 2026] [:error] [pid 36579:tid 36601] [client 20.151.141.70:16292] [client 20.151.141.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agp9Z1-aoZxBfgL5vDwyEAAAAFM"]
[Mon May 18 10:46:01.002630 2026] [:error] [pid 36491:tid 36500] [client 20.151.141.70:7355] [client 20.151.141.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agp9aU555B9CZb6D60l0dgAAAUU"]
[Mon May 18 10:46:02.717099 2026] [:error] [pid 36579:tid 36604] [client 20.151.141.70:16214] [client 20.151.141.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agp9al-aoZxBfgL5vDwyEQAAAFY"]
[Mon May 18 11:20:26.568179 2026] [:error] [pid 36579:tid 36593] [client 43.156.102.71:34580] [client 43.156.102.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.156.102.71, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agqFel-aoZxBfgL5vDw4EAAAAEs"]
[Mon May 18 11:20:28.873223 2026] [proxy_fcgi:error] [pid 36579:tid 36593] [client 43.156.102.71:34580] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 18 11:20:29.140734 2026] [:error] [pid 36579:tid 36594] [client 43.156.102.71:34580] [client 43.156.102.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 43.156.102.71, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agqFfV-aoZxBfgL5vDw4MAAAAEw"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 18 11:20:30.210446 2026] [proxy_fcgi:error] [pid 36579:tid 36594] [client 43.156.102.71:34580] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 18 11:33:42.525496 2026] [:error] [pid 43916:tid 43947] [client 194.62.107.148:37543] [client 194.62.107.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "agqIltQC236p33zJJvmuxAAAAJc"]
[Mon May 18 12:04:24.547478 2026] [:error] [pid 36492:tid 36527] [client 43.165.67.31:40314] [client 43.165.67.31] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agqPyGCVlogrkn9m2w574QAAAAU"]
[Mon May 18 12:28:43.890778 2026] [:error] [pid 44087:tid 44099] [client 103.28.36.216:43682] [client 103.28.36.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.216, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agqVe25HPHbH9GK7l6zPXwAAAco"]
[Mon May 18 12:28:44.811166 2026] [proxy_fcgi:error] [pid 44087:tid 44099] [client 103.28.36.216:43682] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 18 12:28:45.341660 2026] [:error] [pid 44087:tid 44101] [client 103.28.36.216:43682] [client 103.28.36.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.28.36.216, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agqVfW5HPHbH9GK7l6zPYAAAAcw"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 18 12:28:46.375348 2026] [proxy_fcgi:error] [pid 44087:tid 44101] [client 103.28.36.216:43682] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 18 12:43:27.304425 2026] [:error] [pid 36491:tid 36514] [client 156.230.182.61:21943] [client 156.230.182.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.230.182.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqY70555B9CZb6D60mG8wAAAVM"]
[Mon May 18 12:43:37.851291 2026] [:error] [pid 36491:tid 36496] [client 156.230.182.61:28413] [client 156.230.182.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.230.182.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqY-U555B9CZb6D60mHHgAAAUE"]
[Mon May 18 12:43:48.532480 2026] [:error] [pid 36492:tid 36542] [client 156.230.182.61:34989] [client 156.230.182.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.230.182.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqZBGCVlogrkn9m2w6DxQAAABQ"]
[Mon May 18 12:43:59.161061 2026] [:error] [pid 44046:tid 44055] [client 156.230.182.61:41493] [client 156.230.182.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.230.182.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqZD4YF4k2jfXJBXk3a-wAAAYc"]
[Mon May 18 12:44:09.715168 2026] [:error] [pid 36579:tid 36596] [client 156.230.182.61:47460] [client 156.230.182.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.230.182.61, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqZGV-aoZxBfgL5vDxQfwAAAE4"]
[Mon May 18 12:55:56.365083 2026] [:error] [pid 36579:tid 36593] [client 202.143.223.194:53768] [client 202.143.223.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.143.223.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqb3F-aoZxBfgL5vDxUVwAAAEs"]
[Mon May 18 12:56:05.110450 2026] [:error] [pid 36491:tid 36506] [client 202.143.223.194:54296] [client 202.143.223.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.143.223.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqb5U555B9CZb6D60mJVAAAAUs"]
[Mon May 18 12:56:17.344554 2026] [:error] [pid 44046:tid 44050] [client 202.143.223.194:54664] [client 202.143.223.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.143.223.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqb8YYF4k2jfXJBXk3b-QAAAYI"]
[Mon May 18 12:56:30.345492 2026] [:error] [pid 36491:tid 36510] [client 202.143.223.194:54980] [client 202.143.223.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.143.223.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqb_k555B9CZb6D60mJXwAAAU8"]
[Mon May 18 12:56:46.527666 2026] [:error] [pid 36579:tid 36590] [client 202.143.223.194:55302] [client 202.143.223.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.143.223.194, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqcDl-aoZxBfgL5vDxUcAAAAEg"]
[Mon May 18 13:29:25.296152 2026] [:error] [pid 36491:tid 36497] [client 103.78.200.223:10401] [client 103.78.200.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.78.200.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqjtU555B9CZb6D60mNoQAAAUI"]
[Mon May 18 13:29:34.121992 2026] [:error] [pid 44046:tid 44072] [client 103.78.200.223:10403] [client 103.78.200.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.78.200.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqjvoYF4k2jfXJBXk3ebAAAAZg"]
[Mon May 18 13:29:44.020439 2026] [:error] [pid 36491:tid 36512] [client 103.78.200.223:10404] [client 103.78.200.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.78.200.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqjyE555B9CZb6D60mNpwAAAVE"]
[Mon May 18 13:29:54.542713 2026] [:error] [pid 44087:tid 44100] [client 103.78.200.223:10405] [client 103.78.200.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.78.200.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqj0m5HPHbH9GK7l6zU9wAAAcs"]
[Mon May 18 13:30:05.080300 2026] [:error] [pid 36491:tid 36518] [client 103.78.200.223:10406] [client 103.78.200.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.78.200.223, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqj3U555B9CZb6D60mNrwAAAVc"]
[Mon May 18 14:21:25.328016 2026] [:error] [pid 36491:tid 36495] [client 171.61.24.81:14091] [client 171.61.24.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.61.24.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqv5U555B9CZb6D60mWoQAAAUA"]
[Mon May 18 14:21:39.042516 2026] [:error] [pid 36493:tid 36551] [client 171.61.24.81:32238] [client 171.61.24.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.61.24.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqv8wynkzQB5nM668qmxgAAAQI"]
[Mon May 18 14:21:57.171506 2026] [:error] [pid 36493:tid 36551] [client 171.61.24.81:23384] [client 171.61.24.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.61.24.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqwBQynkzQB5nM668qm2AAAAQI"]
[Mon May 18 14:22:08.150590 2026] [:error] [pid 44087:tid 44097] [client 171.61.24.81:9740] [client 171.61.24.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.61.24.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqwEG5HPHbH9GK7l6zZ7wAAAcg"]
[Mon May 18 14:22:18.768252 2026] [:error] [pid 44046:tid 44053] [client 171.61.24.81:26924] [client 171.61.24.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.61.24.81, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agqwGoYF4k2jfXJBXk3iRwAAAYU"]
[Mon May 18 14:57:52.776407 2026] [:error] [pid 36579:tid 36605] [client 81.167.26.57:58740] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "agq4cF-aoZxBfgL5vDxsgwAAAFc"]
[Mon May 18 14:57:55.511133 2026] [:error] [pid 36492:tid 36536] [client 81.167.26.57:42308] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "agq4c2CVlogrkn9m2w6irAAAAA4"]
[Mon May 18 14:57:57.989113 2026] [:error] [pid 43916:tid 43937] [client 81.167.26.57:36675] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "agq4ddQC236p33zJJvm7TwAAAI0"]
[Mon May 18 14:58:00.485061 2026] [:error] [pid 44046:tid 44068] [client 81.167.26.57:15197] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "agq4eIYF4k2jfXJBXk3lrwAAAZQ"]
[Mon May 18 14:58:03.138440 2026] [:error] [pid 44087:tid 44096] [client 81.167.26.57:47382] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "agq4e25HPHbH9GK7l6zc6wAAAcc"]
[Mon May 18 14:58:05.741579 2026] [:error] [pid 36493:tid 36564] [client 81.167.26.57:38082] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "agq4fQynkzQB5nM668qqMwAAAQ8"]
[Mon May 18 14:58:08.374764 2026] [:error] [pid 43916:tid 43933] [client 81.167.26.57:6774] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "agq4gNQC236p33zJJvm7WgAAAIk"]
[Mon May 18 14:58:10.956119 2026] [:error] [pid 43916:tid 43946] [client 81.167.26.57:53208] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "agq4gtQC236p33zJJvm7WwAAAJY"]
[Mon May 18 14:58:13.449504 2026] [:error] [pid 44087:tid 44091] [client 81.167.26.57:33981] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "agq4hW5HPHbH9GK7l6zc7QAAAcI"]
[Mon May 18 14:58:16.092799 2026] [:error] [pid 44010:tid 44022] [client 81.167.26.57:17942] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agq4iDcFUuogD3-74-ZnbQAAAMo"]
[Mon May 18 14:58:18.822517 2026] [:error] [pid 36492:tid 36543] [client 81.167.26.57:12546] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agq4imCVlogrkn9m2w6ixQAAABU"]
[Mon May 18 14:58:21.267232 2026] [:error] [pid 36492:tid 36536] [client 81.167.26.57:16512] [client 81.167.26.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "agq4jWCVlogrkn9m2w6iyQAAAA4"]
[Mon May 18 16:10:34.818040 2026] [:error] [pid 44087:tid 44089] [client 59.88.207.190:55958] [client 59.88.207.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.88.207.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrJem5HPHbH9GK7l6zi9gAAAcA"]
[Mon May 18 16:10:45.245359 2026] [:error] [pid 36492:tid 36526] [client 59.88.207.190:56452] [client 59.88.207.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.88.207.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrJhWCVlogrkn9m2w60IQAAAAQ"]
[Mon May 18 16:10:55.844638 2026] [:error] [pid 36579:tid 36593] [client 59.88.207.190:57002] [client 59.88.207.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.88.207.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrJj1-aoZxBfgL5vDx2sAAAAEs"]
[Mon May 18 16:11:06.497623 2026] [:error] [pid 36493:tid 36560] [client 59.88.207.190:57363] [client 59.88.207.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.88.207.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrJmgynkzQB5nM668qx-QAAAQs"]
[Mon May 18 16:11:17.314966 2026] [:error] [pid 36579:tid 36595] [client 59.88.207.190:57743] [client 59.88.207.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.88.207.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrJpV-aoZxBfgL5vDx2vAAAAE0"]
[Mon May 18 16:12:55.479663 2026] [:error] [pid 44087:tid 44110] [client 117.215.96.26:54957] [client 117.215.96.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.215.96.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrKB25HPHbH9GK7l6zjQAAAAdU"]
[Mon May 18 16:13:06.026428 2026] [:error] [pid 44087:tid 44096] [client 117.215.96.26:55585] [client 117.215.96.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.215.96.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrKEm5HPHbH9GK7l6zjQgAAAcc"]
[Mon May 18 16:13:16.741414 2026] [:error] [pid 36491:tid 36514] [client 117.215.96.26:55982] [client 117.215.96.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.215.96.26, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrKHE555B9CZb6D60mp6AAAAVM"]
[Mon May 18 16:26:35.894562 2026] [:error] [pid 36492:tid 36543] [client 103.59.153.106:65031] [client 103.59.153.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.59.153.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrNO2CVlogrkn9m2w63hQAAABU"]
[Mon May 18 16:26:45.602602 2026] [:error] [pid 44087:tid 44109] [client 103.59.153.106:65443] [client 103.59.153.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.59.153.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrNRW5HPHbH9GK7l6zkDwAAAdQ"]
[Mon May 18 16:26:56.132880 2026] [:error] [pid 36493:tid 36571] [client 103.59.153.106:49708] [client 103.59.153.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.59.153.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrNUAynkzQB5nM668qzegAAARY"]
[Mon May 18 16:27:06.699089 2026] [:error] [pid 36493:tid 36566] [client 103.59.153.106:50167] [client 103.59.153.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.59.153.106, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrNWgynkzQB5nM668qzewAAARE"]
[Mon May 18 16:35:47.465606 2026] [:error] [pid 36579:tid 36600] [client 123.252.234.116:52244] [client 123.252.234.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.252.234.116, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrPY1-aoZxBfgL5vDx53AAAAFI"]
[Mon May 18 16:35:57.691856 2026] [:error] [pid 43916:tid 43943] [client 123.252.234.116:50481] [client 123.252.234.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.252.234.116, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrPbdQC236p33zJJvnApwAAAJM"]
[Mon May 18 16:36:11.084448 2026] [:error] [pid 36492:tid 36537] [client 123.252.234.116:50935] [client 123.252.234.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.252.234.116, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrPe2CVlogrkn9m2w65IAAAAA8"]
[Mon May 18 16:36:15.372545 2026] [:error] [pid 36491:tid 36496] [client 123.252.234.116:51077] [client 123.252.234.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.252.234.116, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrPf0555B9CZb6D60msvgAAAUE"]
[Mon May 18 16:36:26.676686 2026] [:error] [pid 36579:tid 36598] [client 123.252.234.116:51380] [client 123.252.234.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.252.234.116, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrPil-aoZxBfgL5vDx57QAAAFA"]
[Mon May 18 17:25:45.531596 2026] [:error] [pid 36579:tid 36599] [client 43.133.41.88:43190] [client 43.133.41.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agrbGV-aoZxBfgL5vDx-gAAAAFE"]
[Mon May 18 17:33:39.271831 2026] [:error] [pid 36493:tid 36556] [client 102.203.209.9:47996] [client 102.203.209.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.203.209.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrc8wynkzQB5nM668q5ZQAAAQc"]
[Mon May 18 17:33:49.516973 2026] [:error] [pid 44010:tid 44023] [client 102.203.209.9:47555] [client 102.203.209.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.203.209.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrc_TcFUuogD3-74-ZwkgAAAMs"]
[Mon May 18 17:34:22.643255 2026] [:error] [pid 36492:tid 36545] [client 102.203.209.9:47486] [client 102.203.209.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.203.209.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrdHmCVlogrkn9m2w7EdAAAABc"]
[Mon May 18 17:34:35.441019 2026] [:error] [pid 36493:tid 36569] [client 102.203.209.9:47900] [client 102.203.209.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.203.209.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrdKwynkzQB5nM668q5fAAAARQ"]
[Mon May 18 17:34:46.151665 2026] [:error] [pid 36491:tid 36496] [client 102.203.209.9:48241] [client 102.203.209.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.203.209.9, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrdNk555B9CZb6D60m04QAAAUE"]
[Mon May 18 17:39:28.701585 2026] [:error] [pid 36492:tid 36545] [client 162.14.81.106:45584] [client 162.14.81.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agreUGCVlogrkn9m2w7F0wAAABc"]
[Mon May 18 19:00:04.515385 2026] [:error] [pid 44087:tid 44106] [client 39.34.160.62:35305] [client 39.34.160.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.34.160.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrxNG5HPHbH9GK7l6zxKAAAAdE"]
[Mon May 18 19:00:14.631645 2026] [:error] [pid 44046:tid 44071] [client 39.34.160.62:35266] [client 39.34.160.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.34.160.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrxPoYF4k2jfXJBXk33MAAAAZc"]
[Mon May 18 19:00:25.233727 2026] [:error] [pid 44087:tid 44113] [client 39.34.160.62:35328] [client 39.34.160.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.34.160.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrxSW5HPHbH9GK7l6zxLQAAAdc"]
[Mon May 18 19:00:36.028086 2026] [:error] [pid 43916:tid 43932] [client 39.34.160.62:35380] [client 39.34.160.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.34.160.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrxVNQC236p33zJJvnI3gAAAIg"]
[Mon May 18 19:00:46.817837 2026] [:error] [pid 36579:tid 36583] [client 39.34.160.62:35403] [client 39.34.160.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.34.160.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agrxXl-aoZxBfgL5vDyJigAAAEE"]
[Mon May 18 19:17:01.320538 2026] [:error] [pid 36491:tid 36505] [client 49.248.92.6:55714] [client 49.248.92.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.248.92.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agr1LU555B9CZb6D60nDvQAAAUo"]
[Mon May 18 19:17:11.866963 2026] [:error] [pid 36579:tid 36587] [client 49.248.92.6:56333] [client 49.248.92.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.248.92.6, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agr1N1-aoZxBfgL5vDyLCgAAAEU"]
[Mon May 18 22:19:44.030167 2026] [:error] [pid 36493:tid 36564] [client 129.226.93.214:32850] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agsgAAynkzQB5nM668rQ8QAAAQ8"]
[Mon May 18 23:04:21.428070 2026] [:error] [pid 43916:tid 43936] [client 45.155.45.252:53577] [client 45.155.45.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.155.45.252, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agsqddQC236p33zJJvnUdQAAAIw"]
[Mon May 18 23:04:31.419145 2026] [:error] [pid 44087:tid 44101] [client 45.155.45.252:53846] [client 45.155.45.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.155.45.252, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agsqf25HPHbH9GK7l6wBDQAAAcw"]
[Mon May 18 23:04:43.190314 2026] [:error] [pid 36493:tid 36554] [client 45.155.45.252:54129] [client 45.155.45.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.155.45.252, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agsqiwynkzQB5nM668rT4AAAAQU"]
[Mon May 18 23:04:52.847051 2026] [:error] [pid 36579:tid 36597] [client 45.155.45.252:54419] [client 45.155.45.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.155.45.252, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agsqlF-aoZxBfgL5vDygVwAAAE8"]
[Mon May 18 23:05:03.551723 2026] [:error] [pid 36579:tid 36605] [client 45.155.45.252:54710] [client 45.155.45.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.155.45.252, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agsqn1-aoZxBfgL5vDygWQAAAFc"]
[Mon May 18 23:20:39.260835 2026] [:error] [pid 43916:tid 43933] [client 88.88.156.124:60134] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "agsuR9QC236p33zJJvnVrwAAAIk"]
[Mon May 18 23:20:41.595310 2026] [:error] [pid 43916:tid 43948] [client 88.88.156.124:47468] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "agsuSdQC236p33zJJvnVsQAAAJg"]
[Mon May 18 23:20:44.196041 2026] [:error] [pid 44087:tid 44106] [client 88.88.156.124:54304] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "agsuTG5HPHbH9GK7l6wCMgAAAdE"]
[Mon May 18 23:20:46.790250 2026] [:error] [pid 43916:tid 43940] [client 88.88.156.124:54320] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "agsuTtQC236p33zJJvnVsgAAAJA"]
[Mon May 18 23:20:49.232847 2026] [:error] [pid 36491:tid 36512] [client 88.88.156.124:54324] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "agsuUU555B9CZb6D60nkPQAAAVE"]
[Mon May 18 23:20:51.678121 2026] [:error] [pid 36493:tid 36568] [client 88.88.156.124:54328] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "agsuUwynkzQB5nM668rVdQAAARM"]
[Mon May 18 23:20:55.274546 2026] [:error] [pid 44010:tid 44013] [client 88.88.156.124:39274] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "agsuVzcFUuogD3-74-aDVgAAAME"]
[Mon May 18 23:20:57.810991 2026] [:error] [pid 36491:tid 36515] [client 88.88.156.124:39284] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "agsuWU555B9CZb6D60nkQwAAAVQ"]
[Mon May 18 23:21:00.261338 2026] [:error] [pid 44087:tid 44106] [client 88.88.156.124:39298] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "agsuXG5HPHbH9GK7l6wCOwAAAdE"]
[Mon May 18 23:21:02.858677 2026] [:error] [pid 36492:tid 36531] [client 88.88.156.124:39300] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "agsuXmCVlogrkn9m2w4JNQAAAAk"]
[Mon May 18 23:21:05.342532 2026] [:error] [pid 36492:tid 36542] [client 88.88.156.124:52640] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "agsuYWCVlogrkn9m2w4JOwAAABQ"]
[Mon May 18 23:21:07.932192 2026] [:error] [pid 44087:tid 44111] [client 88.88.156.124:52646] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "agsuY25HPHbH9GK7l6wCPAAAAdY"]
[Mon May 18 23:21:10.516845 2026] [:error] [pid 36491:tid 36502] [client 88.88.156.124:52660] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "agsuZk555B9CZb6D60nkSQAAAUc"]
[Mon May 18 23:21:12.974797 2026] [:error] [pid 44087:tid 44096] [client 88.88.156.124:52674] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "agsuaG5HPHbH9GK7l6wCPQAAAcc"]
[Mon May 18 23:21:15.430177 2026] [:error] [pid 44087:tid 44109] [client 88.88.156.124:52884] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "agsua25HPHbH9GK7l6wCQAAAAdQ"]
[Mon May 18 23:21:17.882596 2026] [:error] [pid 36492:tid 36535] [client 88.88.156.124:52892] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "agsubWCVlogrkn9m2w4JTAAAAA0"]
[Mon May 18 23:21:20.356848 2026] [:error] [pid 36491:tid 36516] [client 88.88.156.124:52896] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "agsucE555B9CZb6D60nkSgAAAVU"]
[Mon May 18 23:21:22.798900 2026] [:error] [pid 36492:tid 36539] [client 88.88.156.124:52904] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "agsucmCVlogrkn9m2w4JTwAAABE"]
[Mon May 18 23:21:25.396701 2026] [:error] [pid 44087:tid 44092] [client 88.88.156.124:55050] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "agsudW5HPHbH9GK7l6wCQwAAAcM"]
[Mon May 18 23:21:27.976600 2026] [:error] [pid 36492:tid 36529] [client 88.88.156.124:55056] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "agsud2CVlogrkn9m2w4JUwAAAAc"]
[Mon May 18 23:21:30.268784 2026] [:error] [pid 36492:tid 36533] [client 88.88.156.124:55058] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "agsuemCVlogrkn9m2w4JVQAAAAs"]
[Mon May 18 23:21:32.725852 2026] [:error] [pid 36491:tid 36510] [client 88.88.156.124:55070] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "agsufE555B9CZb6D60nkTQAAAU8"]
[Mon May 18 23:21:35.006640 2026] [:error] [pid 36491:tid 36503] [client 88.88.156.124:51214] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "agsuf0555B9CZb6D60nkTgAAAUg"]
[Mon May 18 23:22:12.145607 2026] [:error] [pid 36493:tid 36568] [client 88.88.156.124:51224] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "agsupAynkzQB5nM668rVmgAAARM"]
[Mon May 18 23:22:14.649338 2026] [:error] [pid 36493:tid 36556] [client 88.88.156.124:46060] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "agsupgynkzQB5nM668rVnwAAAQc"]
[Mon May 18 23:22:17.112791 2026] [:error] [pid 36579:tid 36589] [client 88.88.156.124:46064] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "agsuqV-aoZxBfgL5vDyh2QAAAEc"]
[Mon May 18 23:22:19.728295 2026] [:error] [pid 43916:tid 43931] [client 88.88.156.124:46070] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "agsuq9QC236p33zJJvnVwwAAAIc"]
[Mon May 18 23:22:22.338197 2026] [:error] [pid 43916:tid 43947] [client 88.88.156.124:46074] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "agsurtQC236p33zJJvnVxAAAAJc"]
[Mon May 18 23:22:24.950081 2026] [:error] [pid 44087:tid 44109] [client 88.88.156.124:33778] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "agsusG5HPHbH9GK7l6wCUwAAAdQ"]
[Mon May 18 23:22:27.427755 2026] [:error] [pid 44046:tid 44050] [client 88.88.156.124:33780] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "agsus4YF4k2jfXJBXk0GHQAAAYI"]
[Mon May 18 23:22:29.891659 2026] [:error] [pid 43916:tid 43929] [client 88.88.156.124:33790] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "agsutdQC236p33zJJvnVxQAAAIU"]
[Mon May 18 23:22:32.214413 2026] [:error] [pid 43916:tid 43924] [client 88.88.156.124:33798] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "agsuuNQC236p33zJJvnVxgAAAIA"]
[Mon May 18 23:22:34.716867 2026] [:error] [pid 44087:tid 44098] [client 88.88.156.124:48920] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "agsuum5HPHbH9GK7l6wCWQAAAck"]
[Mon May 18 23:22:37.063630 2026] [:error] [pid 44087:tid 44108] [client 88.88.156.124:48934] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "agsuvW5HPHbH9GK7l6wCWgAAAdM"]
[Mon May 18 23:22:39.541575 2026] [:error] [pid 44087:tid 44105] [client 88.88.156.124:48948] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "agsuv25HPHbH9GK7l6wCXAAAAdA"]
[Mon May 18 23:22:42.027129 2026] [:error] [pid 43916:tid 43933] [client 88.88.156.124:48954] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "agsuwtQC236p33zJJvnVyAAAAIk"]
[Mon May 18 23:22:44.522767 2026] [:error] [pid 44046:tid 44060] [client 88.88.156.124:44858] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "agsuxIYF4k2jfXJBXk0GJAAAAYw"]
[Mon May 18 23:22:47.056122 2026] [:error] [pid 44087:tid 44091] [client 88.88.156.124:44862] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "agsux25HPHbH9GK7l6wCYAAAAcI"]
[Mon May 18 23:22:49.544657 2026] [:error] [pid 36579:tid 36582] [client 88.88.156.124:44874] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "agsuyV-aoZxBfgL5vDyh3wAAAEA"]
[Mon May 18 23:22:52.883573 2026] [:error] [pid 43916:tid 43934] [client 88.88.156.124:44886] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "agsuzNQC236p33zJJvnVzgAAAIo"]
[Mon May 18 23:22:55.306184 2026] [:error] [pid 44010:tid 44013] [client 88.88.156.124:41302] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "agsuzzcFUuogD3-74-aDaQAAAME"]
[Mon May 18 23:22:57.901024 2026] [:error] [pid 43916:tid 43935] [client 88.88.156.124:41306] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "agsu0dQC236p33zJJvnV0AAAAIs"]
[Mon May 18 23:23:00.487347 2026] [:error] [pid 43916:tid 43931] [client 88.88.156.124:41310] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "agsu1NQC236p33zJJvnV0wAAAIc"]
[Mon May 18 23:23:02.949850 2026] [:error] [pid 44010:tid 44015] [client 88.88.156.124:41324] [client 88.88.156.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "agsu1jcFUuogD3-74-aDawAAAMM"]
[Tue May 19 00:35:49.910887 2026] [:error] [pid 36491:tid 36519] [client 20.63.211.172:4970] [client 20.63.211.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ags_5U555B9CZb6D60nvtwAAAVg"]
[Tue May 19 00:35:50.442041 2026] [:error] [pid 36492:tid 36543] [client 20.63.211.172:4947] [client 20.63.211.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ags_5mCVlogrkn9m2w4aEQAAABU"]
[Tue May 19 00:35:50.927411 2026] [:error] [pid 44087:tid 44108] [client 20.63.211.172:7846] [client 20.63.211.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ags_5m5HPHbH9GK7l6wImgAAAdM"]
[Tue May 19 00:35:51.432091 2026] [:error] [pid 36492:tid 36524] [client 20.63.211.172:4997] [client 20.63.211.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ags_52CVlogrkn9m2w4aEwAAAAI"]
[Tue May 19 01:59:21.007587 2026] [:error] [pid 36492:tid 36522] [client 20.151.130.201:50147] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pha.php"] [unique_id "agtTeWCVlogrkn9m2w4p1wAAAAA"]
[Tue May 19 01:59:22.462332 2026] [:error] [pid 36579:tid 36585] [client 20.151.130.201:54627] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pha.php"] [unique_id "agtTel-aoZxBfgL5vDy1nwAAAEM"]
[Tue May 19 01:59:23.628151 2026] [:error] [pid 36579:tid 36583] [client 20.151.130.201:50712] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pha.php"] [unique_id "agtTe1-aoZxBfgL5vDy1ogAAAEE"]
[Tue May 19 01:59:24.306360 2026] [:error] [pid 36579:tid 36586] [client 20.151.130.201:53254] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pha.php"] [unique_id "agtTfF-aoZxBfgL5vDy1pAAAAEQ"]
[Tue May 19 01:59:25.255394 2026] [:error] [pid 36579:tid 36593] [client 20.151.130.201:50713] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c55cdler.php"] [unique_id "agtTfV-aoZxBfgL5vDy1pgAAAEs"]
[Tue May 19 01:59:25.980883 2026] [:error] [pid 36493:tid 36560] [client 20.151.130.201:52690] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c55cdler.php"] [unique_id "agtTfQynkzQB5nM668rk8AAAAQs"]
[Tue May 19 01:59:26.635093 2026] [:error] [pid 36579:tid 36596] [client 20.151.130.201:47694] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c55cdler.php"] [unique_id "agtTfl-aoZxBfgL5vDy1pwAAAE4"]
[Tue May 19 01:59:28.042394 2026] [:error] [pid 36491:tid 36505] [client 20.151.130.201:48133] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/c55cdler.php"] [unique_id "agtTgE555B9CZb6D60n9jAAAAUo"]
[Tue May 19 01:59:28.686579 2026] [:error] [pid 36492:tid 36540] [client 20.151.130.201:48176] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/guiler.php"] [unique_id "agtTgGCVlogrkn9m2w4p2QAAABI"]
[Tue May 19 01:59:30.044071 2026] [:error] [pid 36579:tid 36587] [client 20.151.130.201:50747] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/guiler.php"] [unique_id "agtTgl-aoZxBfgL5vDy1qwAAAEU"]
[Tue May 19 01:59:30.743424 2026] [:error] [pid 43916:tid 43942] [client 20.151.130.201:59917] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/guiler.php"] [unique_id "agtTgtQC236p33zJJvneYQAAAJI"]
[Tue May 19 01:59:32.000344 2026] [:error] [pid 44010:tid 44015] [client 20.151.130.201:50130] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/guiler.php"] [unique_id "agtTgzcFUuogD3-74-aNqAAAAMM"]
[Tue May 19 01:59:33.755969 2026] [:error] [pid 36491:tid 36506] [client 20.151.130.201:57338] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doko.php"] [unique_id "agtThU555B9CZb6D60n9jwAAAUs"]
[Tue May 19 01:59:34.526385 2026] [:error] [pid 44010:tid 44020] [client 20.151.130.201:50123] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doko.php"] [unique_id "agtThjcFUuogD3-74-aNqgAAAMg"]
[Tue May 19 01:59:35.443805 2026] [:error] [pid 36579:tid 36586] [client 20.151.130.201:54609] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doko.php"] [unique_id "agtTh1-aoZxBfgL5vDy1tAAAAEQ"]
[Tue May 19 01:59:41.819296 2026] [:error] [pid 36492:tid 36539] [client 20.151.130.201:50714] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doko.php"] [unique_id "agtTjWCVlogrkn9m2w4p6AAAABE"]
[Tue May 19 02:00:03.232647 2026] [:error] [pid 36492:tid 36527] [client 20.151.130.201:55169] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "agtTo2CVlogrkn9m2w4qCgAAAAU"]
[Tue May 19 02:00:05.204162 2026] [:error] [pid 36493:tid 36559] [client 20.151.130.201:55224] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "agtTpQynkzQB5nM668rlDgAAAQo"]
[Tue May 19 02:00:05.882209 2026] [:error] [pid 36491:tid 36502] [client 20.151.130.201:47722] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "agtTpU555B9CZb6D60n9qAAAAUc"]
[Tue May 19 02:00:06.650524 2026] [:error] [pid 36492:tid 36537] [client 20.151.130.201:57328] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/error_log.php"] [unique_id "agtTpmCVlogrkn9m2w4qEQAAAA8"]
[Tue May 19 02:00:07.190940 2026] [:error] [pid 36492:tid 36534] [client 20.151.130.201:50174] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenon1337.php"] [unique_id "agtTp2CVlogrkn9m2w4qEwAAAAw"]
[Tue May 19 02:00:08.168456 2026] [:error] [pid 36492:tid 36525] [client 20.151.130.201:47730] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenon1337.php"] [unique_id "agtTqGCVlogrkn9m2w4qFwAAAAM"]
[Tue May 19 02:00:08.816017 2026] [:error] [pid 36492:tid 36535] [client 20.151.130.201:52709] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenon1337.php"] [unique_id "agtTqGCVlogrkn9m2w4qGQAAAA0"]
[Tue May 19 02:00:09.769475 2026] [:error] [pid 44046:tid 44050] [client 20.151.130.201:53293] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xenon1337.php"] [unique_id "agtTqYYF4k2jfXJBXk0RjwAAAYI"]
[Tue May 19 02:00:10.698477 2026] [:error] [pid 36491:tid 36503] [client 20.151.130.201:52731] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa403.php"] [unique_id "agtTqk555B9CZb6D60n9tgAAAUg"]
[Tue May 19 02:00:11.524506 2026] [:error] [pid 36491:tid 36498] [client 20.151.130.201:54606] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa403.php"] [unique_id "agtTq0555B9CZb6D60n9ugAAAUM"]
[Tue May 19 02:00:12.594390 2026] [:error] [pid 36491:tid 36507] [client 20.151.130.201:48144] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa403.php"] [unique_id "agtTrE555B9CZb6D60n9wwAAAUw"]
[Tue May 19 02:00:13.171386 2026] [:error] [pid 36491:tid 36513] [client 20.151.130.201:50142] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa403.php"] [unique_id "agtTrU555B9CZb6D60n9xwAAAVI"]
[Tue May 19 02:00:13.742179 2026] [:error] [pid 36491:tid 36519] [client 20.151.130.201:48186] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yenifm.php"] [unique_id "agtTrU555B9CZb6D60n9ywAAAVg"]
[Tue May 19 02:00:14.780519 2026] [:error] [pid 36491:tid 36495] [client 20.151.130.201:54652] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yenifm.php"] [unique_id "agtTrk555B9CZb6D60n91AAAAUA"]
[Tue May 19 02:00:15.523760 2026] [:error] [pid 44010:tid 44033] [client 20.151.130.201:50723] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yenifm.php"] [unique_id "agtTrzcFUuogD3-74-aNwgAAANU"]
[Tue May 19 02:00:16.687427 2026] [:error] [pid 36491:tid 36496] [client 20.151.130.201:50702] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yenifm.php"] [unique_id "agtTsE555B9CZb6D60n92gAAAUE"]
[Tue May 19 02:00:17.959753 2026] [:error] [pid 43916:tid 43948] [client 20.151.130.201:49521] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test11.php"] [unique_id "agtTsdQC236p33zJJvnedwAAAJg"]
[Tue May 19 02:00:34.157174 2026] [:error] [pid 36492:tid 36526] [client 20.151.130.201:38036] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp3.php"] [unique_id "agtTwmCVlogrkn9m2w4qMwAAAAQ"]
[Tue May 19 02:00:34.959213 2026] [:error] [pid 44010:tid 44030] [client 20.151.130.201:45144] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp3.php"] [unique_id "agtTwjcFUuogD3-74-aNzgAAANI"]
[Tue May 19 02:00:35.757213 2026] [:error] [pid 44087:tid 44100] [client 20.151.130.201:45700] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp3.php"] [unique_id "agtTw25HPHbH9GK7l6wPCwAAAcs"]
[Tue May 19 02:00:37.090089 2026] [:error] [pid 43916:tid 43929] [client 20.151.130.201:59958] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp3.php"] [unique_id "agtTxdQC236p33zJJvnefAAAAIU"]
[Tue May 19 02:00:38.250951 2026] [:error] [pid 44087:tid 44110] [client 20.151.130.201:55182] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unvouc.php"] [unique_id "agtTxm5HPHbH9GK7l6wPDgAAAdU"]
[Tue May 19 02:00:39.214676 2026] [:error] [pid 36579:tid 36586] [client 20.151.130.201:50151] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unvouc.php"] [unique_id "agtTx1-aoZxBfgL5vDy1yAAAAEQ"]
[Tue May 19 02:00:39.890803 2026] [:error] [pid 36579:tid 36597] [client 20.151.130.201:48177] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unvouc.php"] [unique_id "agtTx1-aoZxBfgL5vDy1yQAAAE8"]
[Tue May 19 02:00:40.892466 2026] [:error] [pid 44087:tid 44099] [client 20.151.130.201:47734] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/unvouc.php"] [unique_id "agtTyG5HPHbH9GK7l6wPEAAAAco"]
[Tue May 19 02:00:41.384094 2026] [:error] [pid 36579:tid 36599] [client 20.151.130.201:48163] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "agtTyV-aoZxBfgL5vDy1ygAAAFE"]
[Tue May 19 02:00:42.207608 2026] [:error] [pid 43916:tid 43942] [client 20.151.130.201:53300] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "agtTytQC236p33zJJvnegAAAAJI"]
[Tue May 19 02:00:43.265963 2026] [:error] [pid 44087:tid 44093] [client 20.151.130.201:49520] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "agtTy25HPHbH9GK7l6wPEgAAAcQ"]
[Tue May 19 02:00:43.784949 2026] [:error] [pid 44087:tid 44089] [client 20.151.130.201:49491] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "agtTy25HPHbH9GK7l6wPFAAAAcA"]
[Tue May 19 02:00:44.406744 2026] [:error] [pid 44010:tid 44025] [client 20.151.130.201:49516] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agtTzDcFUuogD3-74-aN0QAAAM0"]
[Tue May 19 02:00:45.081312 2026] [:error] [pid 44010:tid 44017] [client 20.151.130.201:52684] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agtTzTcFUuogD3-74-aN0gAAAMU"]
[Tue May 19 02:00:45.742139 2026] [:error] [pid 36491:tid 36503] [client 20.151.130.201:48170] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agtTzU555B9CZb6D60n96AAAAUg"]
[Tue May 19 02:00:46.300837 2026] [:error] [pid 36491:tid 36513] [client 20.151.130.201:59934] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agtTzk555B9CZb6D60n96gAAAVI"]
[Tue May 19 02:00:47.031183 2026] [:error] [pid 36491:tid 36495] [client 20.151.130.201:52696] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "agtTz0555B9CZb6D60n96wAAAUA"]
[Tue May 19 02:00:47.798781 2026] [:error] [pid 36491:tid 36501] [client 20.151.130.201:50166] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "agtTz0555B9CZb6D60n97gAAAUY"]
[Tue May 19 02:00:48.341688 2026] [:error] [pid 36579:tid 36600] [client 20.151.130.201:53270] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "agtT0F-aoZxBfgL5vDy1zQAAAFI"]
[Tue May 19 02:00:49.036082 2026] [:error] [pid 36491:tid 36519] [client 20.151.130.201:45127] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/"] [unique_id "agtT0U555B9CZb6D60n98AAAAVg"]
[Tue May 19 02:00:50.059951 2026] [:error] [pid 36491:tid 36511] [client 20.151.130.201:47743] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links.php"] [unique_id "agtT0k555B9CZb6D60n98wAAAVA"]
[Tue May 19 02:00:50.877002 2026] [:error] [pid 36491:tid 36507] [client 20.151.130.201:59964] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links.php"] [unique_id "agtT0k555B9CZb6D60n99wAAAUw"]
[Tue May 19 02:00:51.444607 2026] [:error] [pid 36491:tid 36513] [client 20.151.130.201:50742] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links.php"] [unique_id "agtT00555B9CZb6D60n9-AAAAVI"]
[Tue May 19 02:00:51.970376 2026] [:error] [pid 36579:tid 36605] [client 20.151.130.201:54602] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-links.php"] [unique_id "agtT01-aoZxBfgL5vDy1zwAAAFc"]
[Tue May 19 02:00:52.784656 2026] [:error] [pid 43916:tid 43927] [client 20.151.130.201:50114] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/wp-info.php"] [unique_id "agtT1NQC236p33zJJvnegwAAAIM"]
[Tue May 19 02:00:54.393580 2026] [:error] [pid 36491:tid 36515] [client 20.151.130.201:50172] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/wp-info.php"] [unique_id "agtT1k555B9CZb6D60n9_AAAAVQ"]
[Tue May 19 02:00:54.951516 2026] [:error] [pid 36493:tid 36557] [client 20.151.130.201:50693] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/wp-info.php"] [unique_id "agtT1gynkzQB5nM668rlHAAAAQg"]
[Tue May 19 02:00:55.788705 2026] [:error] [pid 36491:tid 36508] [client 20.151.130.201:54621] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/upload/wp-info.php"] [unique_id "agtT10555B9CZb6D60n-AAAAAU0"]
[Tue May 19 02:00:56.653320 2026] [:error] [pid 36491:tid 36511] [client 20.151.130.201:48128] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "agtT2E555B9CZb6D60n-AgAAAVA"]
[Tue May 19 02:00:57.356192 2026] [:error] [pid 44010:tid 44012] [client 20.151.130.201:59950] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "agtT2TcFUuogD3-74-aN1AAAAMA"]
[Tue May 19 02:00:58.348759 2026] [:error] [pid 44010:tid 44032] [client 20.151.130.201:54629] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "agtT2jcFUuogD3-74-aN1wAAANQ"]
[Tue May 19 02:00:59.153485 2026] [:error] [pid 36579:tid 36591] [client 20.151.130.201:53252] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colour.php"] [unique_id "agtT21-aoZxBfgL5vDy10wAAAEk"]
[Tue May 19 02:00:59.855543 2026] [:error] [pid 36493:tid 36570] [client 20.151.130.201:55197] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/half.php"] [unique_id "agtT2wynkzQB5nM668rlJAAAARU"]
[Tue May 19 02:01:01.485571 2026] [:error] [pid 36491:tid 36516] [client 20.151.130.201:53286] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/half.php"] [unique_id "agtT3U555B9CZb6D60n-CQAAAVU"]
[Tue May 19 02:01:02.006365 2026] [:error] [pid 36491:tid 36502] [client 20.151.130.201:47740] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/half.php"] [unique_id "agtT3k555B9CZb6D60n-CwAAAUc"]
[Tue May 19 02:01:02.679502 2026] [:error] [pid 36493:tid 36558] [client 20.151.130.201:54642] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/half.php"] [unique_id "agtT3gynkzQB5nM668rlJQAAAQk"]
[Tue May 19 02:01:03.221333 2026] [:error] [pid 36492:tid 36544] [client 20.151.130.201:55192] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2P.php"] [unique_id "agtT32CVlogrkn9m2w4qNAAAABY"]
[Tue May 19 02:01:03.766065 2026] [:error] [pid 43916:tid 43936] [client 20.151.130.201:55226] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2P.php"] [unique_id "agtT39QC236p33zJJvnehgAAAIw"]
[Tue May 19 02:01:05.352168 2026] [:error] [pid 43916:tid 43933] [client 20.151.130.201:59939] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2P.php"] [unique_id "agtT4dQC236p33zJJvnehwAAAIk"]
[Tue May 19 02:01:05.912111 2026] [:error] [pid 36491:tid 36501] [client 20.151.130.201:49515] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2P.php"] [unique_id "agtT4U555B9CZb6D60n-DgAAAUY"]
[Tue May 19 02:01:07.292657 2026] [:error] [pid 36491:tid 36497] [client 20.151.130.201:55223] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tires.php"] [unique_id "agtT40555B9CZb6D60n-EQAAAUI"]
[Tue May 19 02:01:08.894515 2026] [:error] [pid 43916:tid 43926] [client 20.151.130.201:47687] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tires.php"] [unique_id "agtT5NQC236p33zJJvneiAAAAII"]
[Tue May 19 02:01:09.730218 2026] [:error] [pid 44087:tid 44106] [client 20.151.130.201:50698] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tires.php"] [unique_id "agtT5W5HPHbH9GK7l6wPHgAAAdE"]
[Tue May 19 02:01:11.437202 2026] [:error] [pid 44046:tid 44060] [client 20.151.130.201:54596] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tires.php"] [unique_id "agtT54YF4k2jfXJBXk0RngAAAYw"]
[Tue May 19 02:01:12.471651 2026] [:error] [pid 44010:tid 44034] [client 20.151.130.201:45131] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "agtT6DcFUuogD3-74-aN4AAAANY"]
[Tue May 19 02:01:13.086334 2026] [:error] [pid 44046:tid 44067] [client 20.151.130.201:54608] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "agtT6YYF4k2jfXJBXk0RoAAAAZM"]
[Tue May 19 02:01:13.843056 2026] [:error] [pid 44087:tid 44092] [client 20.151.130.201:52699] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "agtT6W5HPHbH9GK7l6wPIQAAAcM"]
[Tue May 19 02:01:14.766822 2026] [:error] [pid 36493:tid 36559] [client 20.151.130.201:50145] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "agtT6gynkzQB5nM668rlKwAAAQo"]
[Tue May 19 02:01:15.666893 2026] [:error] [pid 44087:tid 44100] [client 20.151.130.201:57282] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agtT625HPHbH9GK7l6wPJAAAAcs"]
[Tue May 19 02:01:16.466295 2026] [:error] [pid 44087:tid 44105] [client 20.151.130.201:53277] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agtT7G5HPHbH9GK7l6wPJQAAAdA"]
[Tue May 19 02:01:17.848619 2026] [:error] [pid 44046:tid 44066] [client 20.151.130.201:52705] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agtT7YYF4k2jfXJBXk0RowAAAZI"]
[Tue May 19 02:01:18.823725 2026] [:error] [pid 36491:tid 36506] [client 20.151.130.201:59916] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agtT7k555B9CZb6D60n-GAAAAUs"]
[Tue May 19 02:01:19.714754 2026] [:error] [pid 44046:tid 44059] [client 20.151.130.201:54607] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "agtT74YF4k2jfXJBXk0RpQAAAYs"]
[Tue May 19 02:01:21.395688 2026] [:error] [pid 43916:tid 43935] [client 20.151.130.201:47732] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "agtT8dQC236p33zJJvnejwAAAIs"]
[Tue May 19 02:01:22.288929 2026] [:error] [pid 36492:tid 36534] [client 20.151.130.201:48130] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "agtT8mCVlogrkn9m2w4qOgAAAAw"]
[Tue May 19 02:01:23.802462 2026] [:error] [pid 36491:tid 36508] [client 20.151.130.201:45750] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-block.php"] [unique_id "agtT80555B9CZb6D60n-HwAAAU0"]
[Tue May 19 02:01:24.708614 2026] [:error] [pid 36491:tid 36511] [client 20.151.130.201:54600] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "agtT9E555B9CZb6D60n-IgAAAVA"]
[Tue May 19 02:01:25.543105 2026] [:error] [pid 44046:tid 44071] [client 20.151.130.201:50694] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "agtT9YYF4k2jfXJBXk0RqgAAAZc"]
[Tue May 19 02:01:26.330372 2026] [:error] [pid 36492:tid 36545] [client 20.151.130.201:45122] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "agtT9mCVlogrkn9m2w4qPQAAABc"]
[Tue May 19 02:01:26.848572 2026] [:error] [pid 36491:tid 36514] [client 20.151.130.201:57307] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "agtT9k555B9CZb6D60n-JgAAAVM"]
[Tue May 19 02:01:28.828146 2026] [:error] [pid 36493:tid 36556] [client 20.151.130.201:53276] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "agtT-AynkzQB5nM668rlMgAAAQc"]
[Tue May 19 02:01:29.759924 2026] [:error] [pid 36491:tid 36510] [client 20.151.130.201:47695] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "agtT-U555B9CZb6D60n-LAAAAU8"]
[Tue May 19 02:01:30.297807 2026] [:error] [pid 36491:tid 36512] [client 20.151.130.201:50165] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "agtT-k555B9CZb6D60n-LQAAAVE"]
[Tue May 19 02:01:31.313866 2026] [:error] [pid 36491:tid 36509] [client 20.151.130.201:55177] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kj.php"] [unique_id "agtT-0555B9CZb6D60n-MgAAAU4"]
[Tue May 19 02:01:31.853341 2026] [:error] [pid 36491:tid 36499] [client 20.151.130.201:54649] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/about.php"] [unique_id "agtT-0555B9CZb6D60n-NAAAAUQ"]
[Tue May 19 02:01:32.888291 2026] [:error] [pid 36491:tid 36496] [client 20.151.130.201:54610] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.well-known/about.php"] [unique_id "agtT_E555B9CZb6D60n-OQAAAUE"]
[Tue May 19 02:01:35.475659 2026] [:error] [pid 36491:tid 36504] [client 20.151.130.201:57291] [client 20.151.130.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "agtT_0555B9CZb6D60n-QwAAAUk"]
[Tue May 19 02:01:41.938274 2026] [autoindex:error] [pid 36491:tid 36499] [client 20.151.130.201:49473] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:01:43.312774 2026] [autoindex:error] [pid 36491:tid 36501] [client 20.151.130.201:49473] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:01:43.834066 2026] [autoindex:error] [pid 36491:tid 36510] [client 20.151.130.201:49473] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:01:50.175647 2026] [:error] [pid 36491:tid 36506] [client 20.151.130.201:49473] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/UsbXax.php"] [unique_id "agtUDk555B9CZb6D60n-dQAAAUs"]
[Tue May 19 02:01:52.227304 2026] [:error] [pid 36491:tid 36495] [client 20.151.130.201:57299] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/UsbXax.php"] [unique_id "agtUEE555B9CZb6D60n-fQAAAUA"]
[Tue May 19 02:01:52.959518 2026] [:error] [pid 36491:tid 36519] [client 20.151.130.201:50694] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/UsbXax.php"] [unique_id "agtUEE555B9CZb6D60n-ggAAAVg"]
[Tue May 19 02:01:53.692322 2026] [:error] [pid 36491:tid 36515] [client 20.151.130.201:57283] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/UsbXax.php"] [unique_id "agtUEU555B9CZb6D60n-hQAAAVQ"]
[Tue May 19 02:01:54.834989 2026] [:error] [pid 36491:tid 36502] [client 20.151.130.201:52706] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoko.php"] [unique_id "agtUEk555B9CZb6D60n-iQAAAUc"]
[Tue May 19 02:01:55.457976 2026] [:error] [pid 36493:tid 36554] [client 20.151.130.201:49494] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoko.php"] [unique_id "agtUEwynkzQB5nM668rlQwAAAQU"]
[Tue May 19 02:01:56.270320 2026] [:error] [pid 36491:tid 36509] [client 20.151.130.201:59930] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoko.php"] [unique_id "agtUFE555B9CZb6D60n-jwAAAU4"]
[Tue May 19 02:01:57.029386 2026] [:error] [pid 36491:tid 36515] [client 20.151.130.201:52719] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zoko.php"] [unique_id "agtUFU555B9CZb6D60n-lQAAAVQ"]
[Tue May 19 02:01:57.644661 2026] [:error] [pid 36491:tid 36502] [client 20.151.130.201:54605] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pucci.php"] [unique_id "agtUFU555B9CZb6D60n-lwAAAUc"]
[Tue May 19 02:01:58.307962 2026] [:error] [pid 44087:tid 44104] [client 20.151.130.201:50741] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pucci.php"] [unique_id "agtUFm5HPHbH9GK7l6wPOAAAAc8"]
[Tue May 19 02:01:58.984910 2026] [:error] [pid 36492:tid 36537] [client 20.151.130.201:50703] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pucci.php"] [unique_id "agtUFmCVlogrkn9m2w4qUwAAAA8"]
[Tue May 19 02:01:59.692773 2026] [:error] [pid 36491:tid 36509] [client 20.151.130.201:54645] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pucci.php"] [unique_id "agtUF0555B9CZb6D60n-nQAAAU4"]
[Tue May 19 02:02:00.974020 2026] [:error] [pid 43916:tid 43930] [client 20.151.130.201:57317] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "agtUGNQC236p33zJJvnenQAAAIY"]
[Tue May 19 02:02:01.633418 2026] [:error] [pid 44046:tid 44058] [client 20.151.130.201:47699] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "agtUGYYF4k2jfXJBXk0RsQAAAYo"]
[Tue May 19 02:02:03.006603 2026] [:error] [pid 44087:tid 44107] [client 20.151.130.201:53304] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "agtUG25HPHbH9GK7l6wPPAAAAdI"]
[Tue May 19 02:02:03.510348 2026] [:error] [pid 36492:tid 36524] [client 20.151.130.201:53303] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/details/"] [unique_id "agtUG2CVlogrkn9m2w4qVgAAAAI"]
[Tue May 19 02:02:04.495538 2026] [:error] [pid 36492:tid 36533] [client 20.151.130.201:57304] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "agtUHGCVlogrkn9m2w4qWAAAAAs"]
[Tue May 19 02:02:05.671812 2026] [:error] [pid 36492:tid 36522] [client 20.151.130.201:47741] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "agtUHWCVlogrkn9m2w4qXAAAAAA"]
[Tue May 19 02:02:06.252850 2026] [:error] [pid 36492:tid 36535] [client 20.151.130.201:50138] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "agtUHmCVlogrkn9m2w4qXwAAAA0"]
[Tue May 19 02:02:06.905875 2026] [:error] [pid 36491:tid 36513] [client 20.151.130.201:50168] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.dj/index.php"] [unique_id "agtUHk555B9CZb6D60n-sQAAAVI"]
[Tue May 19 02:02:07.746454 2026] [:error] [pid 44046:tid 44067] [client 20.151.130.201:49487] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "agtUH4YF4k2jfXJBXk0RsgAAAZM"]
[Tue May 19 02:02:08.647431 2026] [:error] [pid 43916:tid 43939] [client 20.151.130.201:57336] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "agtUINQC236p33zJJvnengAAAI8"]
[Tue May 19 02:02:09.764805 2026] [:error] [pid 36579:tid 36598] [client 20.151.130.201:57331] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "agtUIV-aoZxBfgL5vDy19AAAAFA"]
[Tue May 19 02:02:10.501840 2026] [:error] [pid 44087:tid 44098] [client 20.151.130.201:40622] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "agtUIm5HPHbH9GK7l6wPQAAAAck"]
[Tue May 19 02:02:11.537081 2026] [:error] [pid 36579:tid 36596] [client 20.151.130.201:50719] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "agtUI1-aoZxBfgL5vDy19gAAAE4"]
[Tue May 19 02:02:12.531305 2026] [:error] [pid 43916:tid 43942] [client 20.151.130.201:52703] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "agtUJNQC236p33zJJvneogAAAJI"]
[Tue May 19 02:02:13.366197 2026] [:error] [pid 36492:tid 36536] [client 20.151.130.201:48143] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "agtUJWCVlogrkn9m2w4qYgAAAA4"]
[Tue May 19 02:02:14.103520 2026] [:error] [pid 44010:tid 44027] [client 20.151.130.201:50148] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.tmb/"] [unique_id "agtUJjcFUuogD3-74-aN7AAAAM8"]
[Tue May 19 02:02:15.336797 2026] [:error] [pid 43916:tid 43926] [client 20.151.130.201:50167] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agtUJ9QC236p33zJJvnepAAAAII"]
[Tue May 19 02:02:16.549450 2026] [:error] [pid 44087:tid 44096] [client 20.151.130.201:38055] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agtUKG5HPHbH9GK7l6wPRgAAAcc"]
[Tue May 19 02:02:17.423252 2026] [:error] [pid 43916:tid 43944] [client 20.151.130.201:59929] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agtUKdQC236p33zJJvnepgAAAJQ"]
[Tue May 19 02:02:18.499360 2026] [:error] [pid 44046:tid 44059] [client 20.151.130.201:48136] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agtUKoYF4k2jfXJBXk0RtwAAAYs"]
[Tue May 19 02:02:19.751607 2026] [:error] [pid 36491:tid 36495] [client 20.151.130.201:59924] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sl.php"] [unique_id "agtUK0555B9CZb6D60n-ygAAAUA"]
[Tue May 19 02:02:23.096818 2026] [:error] [pid 36492:tid 36524] [client 20.151.130.201:49476] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sl.php"] [unique_id "agtUL2CVlogrkn9m2w4qZgAAAAI"]
[Tue May 19 02:02:24.821012 2026] [:error] [pid 36491:tid 36511] [client 20.151.130.201:43160] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sl.php"] [unique_id "agtUME555B9CZb6D60n-5QAAAVA"]
[Tue May 19 02:02:25.373770 2026] [:error] [pid 36491:tid 36503] [client 20.151.130.201:53274] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sl.php"] [unique_id "agtUMU555B9CZb6D60n-6QAAAUg"]
[Tue May 19 02:02:26.036088 2026] [:error] [pid 36491:tid 36499] [client 20.151.130.201:55200] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "agtUMk555B9CZb6D60n-7wAAAUQ"]
[Tue May 19 02:02:27.060460 2026] [:error] [pid 43916:tid 43927] [client 20.151.130.201:50113] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "agtUM9QC236p33zJJvnesQAAAIM"]
[Tue May 19 02:02:28.492033 2026] [:error] [pid 36492:tid 36537] [client 20.151.130.201:50709] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "agtUNGCVlogrkn9m2w4qdwAAAA8"]
[Tue May 19 02:02:29.315514 2026] [:error] [pid 36492:tid 36522] [client 20.151.130.201:59961] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-temp.php"] [unique_id "agtUNWCVlogrkn9m2w4qeQAAAAA"]
[Tue May 19 02:02:30.115718 2026] [:error] [pid 43916:tid 43928] [client 20.151.130.201:48182] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agtUNtQC236p33zJJvnetQAAAIQ"]
[Tue May 19 02:02:31.252384 2026] [:error] [pid 44010:tid 44025] [client 20.151.130.201:50689] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agtUNzcFUuogD3-74-aN8AAAAM0"]
[Tue May 19 02:02:32.523194 2026] [:error] [pid 36491:tid 36504] [client 20.151.130.201:43175] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agtUOE555B9CZb6D60n--AAAAUk"]
[Tue May 19 02:02:33.368053 2026] [:error] [pid 44087:tid 44097] [client 20.151.130.201:59936] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "agtUOW5HPHbH9GK7l6wPZAAAAcg"]
[Tue May 19 02:02:34.785197 2026] [:error] [pid 36493:tid 36561] [client 20.151.130.201:52717] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "agtUOgynkzQB5nM668rlSAAAAQw"]
[Tue May 19 02:02:35.494111 2026] [:error] [pid 44010:tid 44018] [client 20.151.130.201:45139] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "agtUOzcFUuogD3-74-aN9AAAAMY"]
[Tue May 19 02:02:36.180676 2026] [:error] [pid 44010:tid 44032] [client 20.151.130.201:54616] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "agtUPDcFUuogD3-74-aN9QAAANQ"]
[Tue May 19 02:02:37.135201 2026] [:error] [pid 36491:tid 36500] [client 20.151.130.201:50716] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xmu.php"] [unique_id "agtUPU555B9CZb6D60n--gAAAUU"]
[Tue May 19 02:02:39.236668 2026] [:error] [pid 36492:tid 36526] [client 20.151.130.201:55176] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "agtUP2CVlogrkn9m2w4qhQAAAAQ"]
[Tue May 19 02:02:40.031603 2026] [:error] [pid 36579:tid 36588] [client 20.151.130.201:50738] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "agtUQF-aoZxBfgL5vDy2CwAAAEY"]
[Tue May 19 02:02:41.111962 2026] [:error] [pid 36579:tid 36606] [client 20.151.130.201:57301] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "agtUQV-aoZxBfgL5vDy2DAAAAFg"]
[Tue May 19 02:02:41.648546 2026] [:error] [pid 44010:tid 44023] [client 20.151.130.201:45147] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mode.php"] [unique_id "agtUQTcFUuogD3-74-aN9wAAAMs"]
[Tue May 19 02:02:42.323771 2026] [:error] [pid 36579:tid 36592] [client 20.151.130.201:53297] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "agtUQl-aoZxBfgL5vDy2DwAAAEo"]
[Tue May 19 02:02:42.927818 2026] [:error] [pid 36492:tid 36535] [client 20.151.130.201:53307] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "agtUQmCVlogrkn9m2w4qhwAAAA0"]
[Tue May 19 02:02:43.603421 2026] [:error] [pid 36579:tid 36603] [client 20.151.130.201:40010] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "agtUQ1-aoZxBfgL5vDy2FQAAAFU"]
[Tue May 19 02:02:44.295138 2026] [:error] [pid 36579:tid 36593] [client 20.151.130.201:52735] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/js/index.php"] [unique_id "agtURF-aoZxBfgL5vDy2GQAAAEs"]
[Tue May 19 02:02:46.566112 2026] [:error] [pid 36492:tid 36536] [client 20.151.130.201:50149] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "agtURmCVlogrkn9m2w4qjwAAAA4"]
[Tue May 19 02:02:47.487287 2026] [:error] [pid 36579:tid 36604] [client 20.151.130.201:59918] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "agtUR1-aoZxBfgL5vDy2HgAAAFY"]
[Tue May 19 02:02:48.195426 2026] [:error] [pid 36491:tid 36496] [client 20.151.130.201:40005] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dx.php"] [unique_id "agtUSE555B9CZb6D60n_AwAAAUE"]
[Tue May 19 02:03:00.201004 2026] [autoindex:error] [pid 36491:tid 36505] [client 20.151.130.201:49489] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:03:05.150797 2026] [:error] [pid 36491:tid 36496] [client 20.151.130.201:49489] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "agtUWU555B9CZb6D60n_IwAAAUE"]
[Tue May 19 02:03:06.361587 2026] [:error] [pid 44087:tid 44103] [client 20.151.130.201:45170] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "agtUWm5HPHbH9GK7l6wPaQAAAc4"]
[Tue May 19 02:03:06.857248 2026] [:error] [pid 44046:tid 44054] [client 20.151.130.201:42585] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "agtUWoYF4k2jfXJBXk0RygAAAYY"]
[Tue May 19 02:03:07.923995 2026] [:error] [pid 36491:tid 36508] [client 20.151.130.201:57281] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1.php"] [unique_id "agtUW0555B9CZb6D60n_JwAAAU0"]
[Tue May 19 02:03:08.475310 2026] [:error] [pid 36492:tid 36524] [client 20.151.130.201:59949] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "agtUXGCVlogrkn9m2w4qpQAAAAI"]
[Tue May 19 02:03:09.108315 2026] [:error] [pid 36492:tid 36527] [client 20.151.130.201:42589] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "agtUXWCVlogrkn9m2w4qqAAAAAU"]
[Tue May 19 02:03:10.847839 2026] [:error] [pid 36579:tid 36600] [client 20.151.130.201:53271] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "agtUXl-aoZxBfgL5vDy2MAAAAFI"]
[Tue May 19 02:03:11.433730 2026] [:error] [pid 36492:tid 36526] [client 20.151.130.201:54599] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "agtUX2CVlogrkn9m2w4qrQAAAAQ"]
[Tue May 19 02:03:12.210460 2026] [:error] [pid 44087:tid 44114] [client 20.151.130.201:49522] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "agtUYG5HPHbH9GK7l6wPbAAAAdg"]
[Tue May 19 02:03:13.851975 2026] [:error] [pid 36493:tid 36557] [client 20.151.130.201:45138] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "agtUYQynkzQB5nM668rlXQAAAQg"]
[Tue May 19 02:03:14.470607 2026] [:error] [pid 36492:tid 36538] [client 20.151.130.201:48161] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "agtUYmCVlogrkn9m2w4qsAAAABA"]
[Tue May 19 02:03:15.217829 2026] [:error] [pid 44046:tid 44068] [client 20.151.130.201:35019] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/100.php"] [unique_id "agtUY4YF4k2jfXJBXk0RzgAAAZQ"]
[Tue May 19 02:03:15.758785 2026] [:error] [pid 44046:tid 44056] [client 20.151.130.201:53311] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "agtUY4YF4k2jfXJBXk0RzwAAAYg"]
[Tue May 19 02:03:16.607267 2026] [:error] [pid 36493:tid 36571] [client 20.151.130.201:53291] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "agtUZAynkzQB5nM668rlXwAAARY"]
[Tue May 19 02:03:17.718507 2026] [:error] [pid 36491:tid 36510] [client 20.151.130.201:54613] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "agtUZU555B9CZb6D60n_MAAAAU8"]
[Tue May 19 02:03:18.654315 2026] [:error] [pid 36491:tid 36496] [client 20.151.130.201:40621] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2026w.php"] [unique_id "agtUZk555B9CZb6D60n_NAAAAUE"]
[Tue May 19 02:03:19.418189 2026] [:error] [pid 44010:tid 44036] [client 20.151.130.201:59906] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "agtUZzcFUuogD3-74-aN_AAAANg"]
[Tue May 19 02:03:20.358690 2026] [:error] [pid 44010:tid 44035] [client 20.151.130.201:45151] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "agtUaDcFUuogD3-74-aN_wAAANc"]
[Tue May 19 02:03:21.710271 2026] [:error] [pid 36579:tid 36596] [client 20.151.130.201:45749] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "agtUaV-aoZxBfgL5vDy2NAAAAE4"]
[Tue May 19 02:03:22.496805 2026] [:error] [pid 36492:tid 36539] [client 20.151.130.201:59945] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "agtUamCVlogrkn9m2w4qtAAAABE"]
[Tue May 19 02:03:23.269703 2026] [:error] [pid 43916:tid 43931] [client 20.151.130.201:43160] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "agtUa9QC236p33zJJvneuwAAAIc"]
[Tue May 19 02:03:24.007840 2026] [:error] [pid 36492:tid 36533] [client 20.151.130.201:59910] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "agtUbGCVlogrkn9m2w4qtgAAAAs"]
[Tue May 19 02:03:24.554416 2026] [:error] [pid 44010:tid 44025] [client 20.151.130.201:45174] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "agtUbDcFUuogD3-74-aOAwAAAM0"]
[Tue May 19 02:03:26.027414 2026] [:error] [pid 36491:tid 36515] [client 20.151.130.201:59955] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xa.php"] [unique_id "agtUbk555B9CZb6D60n_OgAAAVQ"]
[Tue May 19 02:03:26.602970 2026] [:error] [pid 36491:tid 36497] [client 20.151.130.201:59920] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "agtUbk555B9CZb6D60n_OwAAAUI"]
[Tue May 19 02:03:29.011210 2026] [:error] [pid 36492:tid 36544] [client 20.151.130.201:49482] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "agtUcWCVlogrkn9m2w4qxQAAABY"]
[Tue May 19 02:03:30.674928 2026] [:error] [pid 43916:tid 43936] [client 20.151.130.201:53269] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "agtUctQC236p33zJJvnevAAAAIw"]
[Tue May 19 02:03:31.399794 2026] [:error] [pid 44087:tid 44095] [client 20.151.130.201:45135] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "agtUc25HPHbH9GK7l6wPcgAAAcY"]
[Tue May 19 02:03:32.492192 2026] [:error] [pid 36492:tid 36546] [client 20.151.130.201:52729] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/do.php"] [unique_id "agtUdGCVlogrkn9m2w4qyAAAABg"]
[Tue May 19 02:03:33.078885 2026] [:error] [pid 36492:tid 36541] [client 20.151.130.201:48143] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/do.php"] [unique_id "agtUdWCVlogrkn9m2w4qygAAABM"]
[Tue May 19 02:03:36.177749 2026] [:error] [pid 36579:tid 36603] [client 20.151.130.201:53294] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/do.php"] [unique_id "agtUeF-aoZxBfgL5vDy2QgAAAFU"]
[Tue May 19 02:03:37.414317 2026] [:error] [pid 36492:tid 36523] [client 20.151.130.201:49503] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/do.php"] [unique_id "agtUeWCVlogrkn9m2w4qzAAAAAE"]
[Tue May 19 02:03:38.091977 2026] [:error] [pid 44046:tid 44067] [client 20.151.130.201:47696] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "agtUeoYF4k2jfXJBXk0R0gAAAZM"]
[Tue May 19 02:03:39.347116 2026] [:error] [pid 36492:tid 36531] [client 20.151.130.201:50729] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "agtUe2CVlogrkn9m2w4qzwAAAAk"]
[Tue May 19 02:03:40.460429 2026] [:error] [pid 36491:tid 36501] [client 20.151.130.201:49484] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "agtUfE555B9CZb6D60n_SAAAAUY"]
[Tue May 19 02:03:41.433547 2026] [:error] [pid 36493:tid 36562] [client 20.151.130.201:57330] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fvvff.php"] [unique_id "agtUfQynkzQB5nM668rlYwAAAQ0"]
[Tue May 19 02:03:42.366017 2026] [:error] [pid 44087:tid 44114] [client 20.151.130.201:55179] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "agtUfm5HPHbH9GK7l6wPfAAAAdg"]
[Tue May 19 02:03:42.983152 2026] [:error] [pid 36492:tid 36544] [client 20.151.130.201:50165] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "agtUfmCVlogrkn9m2w4q0AAAABY"]
[Tue May 19 02:03:43.946118 2026] [:error] [pid 36493:tid 36565] [client 20.151.130.201:52687] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "agtUfwynkzQB5nM668rlZAAAARA"]
[Tue May 19 02:03:44.748877 2026] [:error] [pid 36579:tid 36589] [client 20.151.130.201:47700] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "agtUgF-aoZxBfgL5vDy2TQAAAEc"]
[Tue May 19 02:03:46.996292 2026] [:error] [pid 36493:tid 36561] [client 20.151.130.201:50116] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "agtUggynkzQB5nM668rlaAAAAQw"]
[Tue May 19 02:03:48.318436 2026] [:error] [pid 36492:tid 36533] [client 20.151.130.201:40637] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "agtUhGCVlogrkn9m2w4q0gAAAAs"]
[Tue May 19 02:03:49.099346 2026] [:error] [pid 36493:tid 36564] [client 20.151.130.201:53295] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "agtUhQynkzQB5nM668rlawAAAQ8"]
[Tue May 19 02:03:53.466201 2026] [:error] [pid 44046:tid 44066] [client 20.151.130.201:54592] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/admin.php"] [unique_id "agtUiYYF4k2jfXJBXk0R1AAAAZI"]
[Tue May 19 02:03:54.519483 2026] [:error] [pid 36493:tid 36566] [client 20.151.130.201:48161] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "agtUigynkzQB5nM668rlbwAAARE"]
[Tue May 19 02:03:57.244281 2026] [:error] [pid 36492:tid 36546] [client 20.151.130.201:54637] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "agtUjWCVlogrkn9m2w4q2gAAABg"]
[Tue May 19 02:03:57.908070 2026] [:error] [pid 44046:tid 44059] [client 20.151.130.201:55203] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "agtUjYYF4k2jfXJBXk0R1QAAAYs"]
[Tue May 19 02:03:58.729570 2026] [:error] [pid 36493:tid 36567] [client 20.151.130.201:55190] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/admin.php"] [unique_id "agtUjgynkzQB5nM668rlcgAAARI"]
[Tue May 19 02:04:00.494208 2026] [:error] [pid 44046:tid 44049] [client 20.151.130.201:48140] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "agtUkIYF4k2jfXJBXk0R1gAAAYE"]
[Tue May 19 02:04:01.125041 2026] [:error] [pid 44046:tid 44072] [client 20.151.130.201:50708] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "agtUkYYF4k2jfXJBXk0R1wAAAZg"]
[Tue May 19 02:04:01.717751 2026] [:error] [pid 44046:tid 44055] [client 20.151.130.201:47680] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "agtUkYYF4k2jfXJBXk0R2AAAAYc"]
[Tue May 19 02:04:02.373389 2026] [:error] [pid 36579:tid 36593] [client 20.151.130.201:50154] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f6.php"] [unique_id "agtUkl-aoZxBfgL5vDy2UAAAAEs"]
[Tue May 19 02:04:02.878450 2026] [:error] [pid 44046:tid 44054] [client 20.151.130.201:52685] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/inputs.php"] [unique_id "agtUkoYF4k2jfXJBXk0R2gAAAYY"]
[Tue May 19 02:04:15.687702 2026] [autoindex:error] [pid 36493:tid 36558] [client 20.151.130.201:49481] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:04:23.017425 2026] [:error] [pid 36493:tid 36554] [client 20.151.130.201:49481] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cgi-bin/index.php"] [unique_id "agtUpwynkzQB5nM668rlkwAAAQU"]
[Tue May 19 02:04:59.113044 2026] [:error] [pid 36579:tid 36605] [client 20.151.130.201:50114] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "agtUy1-aoZxBfgL5vDy2awAAAFc"]
[Tue May 19 02:05:02.018819 2026] [:error] [pid 36492:tid 36535] [client 20.151.130.201:50150] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "agtUzmCVlogrkn9m2w4q_wAAAA0"]
[Tue May 19 02:05:02.752283 2026] [:error] [pid 36491:tid 36511] [client 20.151.130.201:45137] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "agtUzk555B9CZb6D60n_YQAAAVA"]
[Tue May 19 02:05:04.873558 2026] [:error] [pid 43916:tid 43936] [client 20.151.130.201:50734] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/dist/"] [unique_id "agtU0NQC236p33zJJvne2QAAAIw"]
[Tue May 19 02:05:07.288115 2026] [:error] [pid 44010:tid 44027] [client 20.151.130.201:49530] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "agtU0zcFUuogD3-74-aOGQAAAM8"]
[Tue May 19 02:05:07.933538 2026] [:error] [pid 44046:tid 44057] [client 20.151.130.201:45123] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "agtU04YF4k2jfXJBXk0R7wAAAYk"]
[Tue May 19 02:05:08.749715 2026] [:error] [pid 44010:tid 44034] [client 20.151.130.201:59934] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "agtU1DcFUuogD3-74-aOHgAAANY"]
[Tue May 19 02:05:09.520661 2026] [:error] [pid 44046:tid 44063] [client 20.151.130.201:52672] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/BDKR28WP.php"] [unique_id "agtU1YYF4k2jfXJBXk0R8QAAAY8"]
[Tue May 19 02:05:10.272073 2026] [:error] [pid 36579:tid 36592] [client 20.151.130.201:54606] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "agtU1l-aoZxBfgL5vDy2cwAAAEo"]
[Tue May 19 02:05:11.355816 2026] [:error] [pid 36492:tid 36526] [client 20.151.130.201:42570] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "agtU12CVlogrkn9m2w4rEgAAAAQ"]
[Tue May 19 02:05:11.997950 2026] [:error] [pid 36493:tid 36551] [client 20.151.130.201:59958] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "agtU1wynkzQB5nM668rlowAAAQI"]
[Tue May 19 02:05:13.093131 2026] [:error] [pid 36491:tid 36496] [client 20.151.130.201:49507] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/l10n/"] [unique_id "agtU2U555B9CZb6D60n_cAAAAUE"]
[Tue May 19 02:05:14.169910 2026] [:error] [pid 36579:tid 36606] [client 20.151.130.201:54617] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "agtU2l-aoZxBfgL5vDy2mQAAAFg"]
[Tue May 19 02:05:15.062090 2026] [:error] [pid 36579:tid 36599] [client 20.151.130.201:47742] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "agtU21-aoZxBfgL5vDy2mwAAAFE"]
[Tue May 19 02:05:15.733985 2026] [:error] [pid 36493:tid 36557] [client 20.151.130.201:47730] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "agtU2wynkzQB5nM668rlpAAAAQg"]
[Tue May 19 02:05:16.290224 2026] [:error] [pid 36491:tid 36503] [client 20.151.130.201:57311] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/"] [unique_id "agtU3E555B9CZb6D60n_cgAAAUg"]
[Tue May 19 02:05:16.884172 2026] [:error] [pid 36491:tid 36511] [client 20.151.130.201:49497] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agtU3E555B9CZb6D60n_dQAAAVA"]
[Tue May 19 02:05:17.783172 2026] [:error] [pid 36491:tid 36504] [client 20.151.130.201:59966] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agtU3U555B9CZb6D60n_dwAAAUk"]
[Tue May 19 02:05:18.322473 2026] [:error] [pid 36491:tid 36510] [client 20.151.130.201:54654] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agtU3k555B9CZb6D60n_fAAAAU8"]
[Tue May 19 02:05:18.896137 2026] [:error] [pid 36491:tid 36502] [client 20.151.130.201:50147] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agtU3k555B9CZb6D60n_fwAAAUc"]
[Tue May 19 02:05:19.738185 2026] [:error] [pid 44087:tid 44099] [client 20.151.130.201:52677] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agtU325HPHbH9GK7l6wPnAAAAco"]
[Tue May 19 02:05:20.266983 2026] [:error] [pid 43916:tid 43926] [client 20.151.130.201:50744] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agtU4NQC236p33zJJvne3QAAAII"]
[Tue May 19 02:05:20.915176 2026] [:error] [pid 43916:tid 43944] [client 20.151.130.201:49531] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agtU4NQC236p33zJJvne3wAAAJQ"]
[Tue May 19 02:05:22.525163 2026] [autoindex:error] [pid 36579:tid 36597] [client 20.151.130.201:47690] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-content/uploads/2021/02/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:05:28.581635 2026] [:error] [pid 36579:tid 36602] [client 20.151.130.201:47690] [client 20.151.130.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "agtU6F-aoZxBfgL5vDy2qAAAAFQ"]
[Tue May 19 02:05:33.118851 2026] [autoindex:error] [pid 36492:tid 36540] [client 20.151.130.201:55208] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 02:05:42.339487 2026] [:error] [pid 36492:tid 36546] [client 20.151.130.201:55208] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "agtU9mCVlogrkn9m2w4rTgAAABg"]
[Tue May 19 02:05:43.115311 2026] [:error] [pid 36579:tid 36595] [client 20.151.130.201:49506] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "agtU91-aoZxBfgL5vDy2rAAAAE0"]
[Tue May 19 02:05:43.937492 2026] [:error] [pid 36492:tid 36529] [client 20.151.130.201:49506] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "agtU92CVlogrkn9m2w4rTwAAAAc"]
[Tue May 19 02:05:44.497939 2026] [:error] [pid 36492:tid 36537] [client 20.151.130.201:53258] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "agtU-GCVlogrkn9m2w4rUQAAAA8"]
[Tue May 19 02:05:45.373623 2026] [:error] [pid 36492:tid 36544] [client 20.151.130.201:52676] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "agtU-WCVlogrkn9m2w4rUgAAABY"]
[Tue May 19 02:05:46.320812 2026] [:error] [pid 36579:tid 36603] [client 20.151.130.201:48191] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "agtU-l-aoZxBfgL5vDy2sAAAAFU"]
[Tue May 19 02:05:47.269965 2026] [:error] [pid 36492:tid 36540] [client 20.151.130.201:59907] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "agtU-2CVlogrkn9m2w4rVQAAABI"]
[Tue May 19 02:05:48.525884 2026] [:error] [pid 43916:tid 43933] [client 20.151.130.201:48162] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xxx.php"] [unique_id "agtU_NQC236p33zJJvne6wAAAIk"]
[Tue May 19 02:05:49.472758 2026] [:error] [pid 36492:tid 36542] [client 20.151.130.201:54604] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "agtU_WCVlogrkn9m2w4rVgAAABQ"]
[Tue May 19 02:05:50.888755 2026] [:error] [pid 44087:tid 44094] [client 20.151.130.201:50157] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "agtU_m5HPHbH9GK7l6wPqwAAAcU"]
[Tue May 19 02:05:51.869651 2026] [:error] [pid 36492:tid 36522] [client 20.151.130.201:48150] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "agtU_2CVlogrkn9m2w4rWgAAAAA"]
[Tue May 19 02:05:52.629603 2026] [:error] [pid 44087:tid 44106] [client 20.151.130.201:55223] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/hypo.php"] [unique_id "agtVAG5HPHbH9GK7l6wPrQAAAdE"]
[Tue May 19 02:05:53.260809 2026] [:error] [pid 36491:tid 36516] [client 20.151.130.201:55199] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agtVAU555B9CZb6D60n_iAAAAVU"]
[Tue May 19 02:05:54.546140 2026] [:error] [pid 36492:tid 36526] [client 20.151.130.201:50140] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agtVAmCVlogrkn9m2w4rXAAAAAQ"]
[Tue May 19 02:05:55.090923 2026] [:error] [pid 44046:tid 44071] [client 20.151.130.201:55211] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agtVA4YF4k2jfXJBXk0SFgAAAZc"]
[Tue May 19 02:05:55.688837 2026] [:error] [pid 36491:tid 36506] [client 20.151.130.201:49474] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agtVA0555B9CZb6D60n_iwAAAUs"]
[Tue May 19 02:05:56.391275 2026] [:error] [pid 36491:tid 36515] [client 20.151.130.201:52721] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "agtVBE555B9CZb6D60n_kAAAAVQ"]
[Tue May 19 02:05:56.946676 2026] [:error] [pid 43916:tid 43946] [client 20.151.130.201:50159] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "agtVBNQC236p33zJJvne7QAAAJY"]
[Tue May 19 02:05:57.450641 2026] [:error] [pid 36491:tid 36509] [client 20.151.130.201:45122] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "agtVBU555B9CZb6D60n_kgAAAU4"]
[Tue May 19 02:05:58.156296 2026] [:error] [pid 36491:tid 36508] [client 20.151.130.201:52716] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "agtVBk555B9CZb6D60n_lQAAAU0"]
[Tue May 19 02:05:59.070646 2026] [:error] [pid 36492:tid 36546] [client 20.151.130.201:52707] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/"] [unique_id "agtVB2CVlogrkn9m2w4rXwAAABg"]
[Tue May 19 02:05:59.870415 2026] [:error] [pid 36492:tid 36530] [client 20.151.130.201:54625] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/"] [unique_id "agtVB2CVlogrkn9m2w4rYAAAAAg"]
[Tue May 19 02:06:00.501874 2026] [:error] [pid 36493:tid 36556] [client 20.151.130.201:55188] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/"] [unique_id "agtVCAynkzQB5nM668rltwAAAQc"]
[Tue May 19 02:06:01.156423 2026] [:error] [pid 36491:tid 36499] [client 20.151.130.201:49509] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/block-bindings/"] [unique_id "agtVCU555B9CZb6D60n_mAAAAUQ"]
[Tue May 19 02:06:01.860537 2026] [:error] [pid 44046:tid 44050] [client 20.151.130.201:47729] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/00.php"] [unique_id "agtVCYYF4k2jfXJBXk0SHAAAAYI"]
[Tue May 19 02:06:02.484895 2026] [:error] [pid 44046:tid 44051] [client 20.151.130.201:55215] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/00.php"] [unique_id "agtVCoYF4k2jfXJBXk0SHQAAAYM"]
[Tue May 19 02:06:03.076210 2026] [:error] [pid 44046:tid 44067] [client 20.151.130.201:50139] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/00.php"] [unique_id "agtVC4YF4k2jfXJBXk0SHgAAAZM"]
[Tue May 19 02:06:03.621097 2026] [:error] [pid 44046:tid 44064] [client 20.151.130.201:48176] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/00.php"] [unique_id "agtVC4YF4k2jfXJBXk0SHwAAAZA"]
[Tue May 19 02:06:04.189019 2026] [:error] [pid 44046:tid 44057] [client 20.151.130.201:59951] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/als.php"] [unique_id "agtVDIYF4k2jfXJBXk0SIAAAAYk"]
[Tue May 19 02:06:04.792047 2026] [:error] [pid 44046:tid 44061] [client 20.151.130.201:55217] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/als.php"] [unique_id "agtVDIYF4k2jfXJBXk0SIgAAAY0"]
[Tue May 19 02:06:05.528662 2026] [:error] [pid 44046:tid 44060] [client 20.151.130.201:50751] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/als.php"] [unique_id "agtVDYYF4k2jfXJBXk0SIwAAAYw"]
[Tue May 19 02:06:06.080323 2026] [:error] [pid 36579:tid 36591] [client 20.151.130.201:47718] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/als.php"] [unique_id "agtVDl-aoZxBfgL5vDy2sQAAAEk"]
[Tue May 19 02:06:06.641199 2026] [:error] [pid 44010:tid 44027] [client 20.151.130.201:50694] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pol.php"] [unique_id "agtVDjcFUuogD3-74-aOJgAAAM8"]
[Tue May 19 02:06:07.777211 2026] [:error] [pid 44010:tid 44030] [client 20.151.130.201:48163] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pol.php"] [unique_id "agtVDzcFUuogD3-74-aOKAAAANI"]
[Tue May 19 02:06:08.444619 2026] [:error] [pid 36491:tid 36498] [client 20.151.130.201:43182] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pol.php"] [unique_id "agtVEE555B9CZb6D60n_mwAAAUM"]
[Tue May 19 02:06:08.974100 2026] [:error] [pid 36493:tid 36561] [client 20.151.130.201:50720] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pol.php"] [unique_id "agtVEAynkzQB5nM668rluwAAAQw"]
[Tue May 19 02:06:09.654183 2026] [:error] [pid 36491:tid 36507] [client 20.151.130.201:54600] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-amdin.php"] [unique_id "agtVEU555B9CZb6D60n_nQAAAUw"]
[Tue May 19 02:06:10.309498 2026] [:error] [pid 36579:tid 36584] [client 20.151.130.201:38025] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-amdin.php"] [unique_id "agtVEl-aoZxBfgL5vDy2swAAAEI"]
[Tue May 19 02:06:10.849912 2026] [:error] [pid 36492:tid 36537] [client 20.151.130.201:49496] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-amdin.php"] [unique_id "agtVEmCVlogrkn9m2w4rYwAAAA8"]
[Tue May 19 02:06:11.516695 2026] [:error] [pid 44010:tid 44033] [client 20.151.130.201:52700] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-amdin.php"] [unique_id "agtVEzcFUuogD3-74-aOLQAAANU"]
[Tue May 19 02:06:12.040788 2026] [:error] [pid 44010:tid 44034] [client 20.151.130.201:50743] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "agtVFDcFUuogD3-74-aOLgAAANY"]
[Tue May 19 02:06:12.499172 2026] [:error] [pid 36492:tid 36542] [client 20.151.130.201:57310] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "agtVFGCVlogrkn9m2w4rZgAAABQ"]
[Tue May 19 02:06:12.985927 2026] [:error] [pid 36492:tid 36524] [client 20.151.130.201:52704] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "agtVFGCVlogrkn9m2w4raAAAAAI"]
[Tue May 19 02:06:13.536369 2026] [:error] [pid 36579:tid 36604] [client 20.151.130.201:45129] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "agtVFV-aoZxBfgL5vDy2tQAAAFY"]
[Tue May 19 02:06:14.097865 2026] [:error] [pid 36492:tid 36528] [client 20.151.130.201:48141] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "agtVFmCVlogrkn9m2w4rbAAAAAY"]
[Tue May 19 02:06:14.731011 2026] [:error] [pid 44087:tid 44105] [client 20.151.130.201:59948] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "agtVFm5HPHbH9GK7l6wPsgAAAdA"]
[Tue May 19 02:06:15.255930 2026] [:error] [pid 36579:tid 36583] [client 20.151.130.201:54630] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "agtVF1-aoZxBfgL5vDy2twAAAEE"]
[Tue May 19 02:06:16.055395 2026] [:error] [pid 44010:tid 44025] [client 20.151.130.201:53298] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file5.php"] [unique_id "agtVGDcFUuogD3-74-aOMQAAAM0"]
[Tue May 19 02:06:16.708360 2026] [:error] [pid 36579:tid 36606] [client 20.151.130.201:48187] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "agtVGF-aoZxBfgL5vDy2uAAAAFg"]
[Tue May 19 02:06:17.539887 2026] [:error] [pid 44010:tid 44016] [client 20.151.130.201:50707] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "agtVGTcFUuogD3-74-aOMwAAAMQ"]
[Tue May 19 02:06:18.184125 2026] [:error] [pid 36491:tid 36502] [client 20.151.130.201:48144] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "agtVGk555B9CZb6D60n_oAAAAUc"]
[Tue May 19 02:06:19.004121 2026] [:error] [pid 36491:tid 36508] [client 20.151.130.201:54628] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fs.php"] [unique_id "agtVG0555B9CZb6D60n_ogAAAU0"]
[Tue May 19 02:06:19.687716 2026] [:error] [pid 36491:tid 36518] [client 20.151.130.201:49486] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "agtVG0555B9CZb6D60n_pAAAAVc"]
[Tue May 19 02:06:20.243518 2026] [:error] [pid 36491:tid 36516] [client 20.151.130.201:48151] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "agtVHE555B9CZb6D60n_qQAAAVU"]
[Tue May 19 02:06:21.420981 2026] [:error] [pid 36492:tid 36546] [client 20.151.130.201:54594] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "agtVHWCVlogrkn9m2w4rcAAAABg"]
[Tue May 19 02:06:22.020885 2026] [:error] [pid 36491:tid 36498] [client 20.151.130.201:40585] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/4PJcpMFsD8B.php"] [unique_id "agtVHk555B9CZb6D60n_rwAAAUM"]
[Tue May 19 02:06:22.600448 2026] [:error] [pid 43916:tid 43944] [client 20.151.130.201:55194] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "agtVHtQC236p33zJJvne7gAAAJQ"]
[Tue May 19 02:06:23.153182 2026] [:error] [pid 44010:tid 44022] [client 20.151.130.201:57287] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "agtVHzcFUuogD3-74-aONQAAAMo"]
[Tue May 19 02:06:23.837290 2026] [:error] [pid 36579:tid 36595] [client 20.151.130.201:48132] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "agtVH1-aoZxBfgL5vDy2ugAAAE0"]
[Tue May 19 02:06:24.564131 2026] [:error] [pid 36579:tid 36601] [client 20.151.130.201:47692] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "agtVIF-aoZxBfgL5vDy2uwAAAFM"]
[Tue May 19 02:06:25.131812 2026] [:error] [pid 36491:tid 36508] [client 20.151.130.201:49494] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cfile.php"] [unique_id "agtVIU555B9CZb6D60n_uAAAAU0"]
[Tue May 19 02:06:25.656636 2026] [:error] [pid 36493:tid 36553] [client 20.151.130.201:55201] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cfile.php"] [unique_id "agtVIQynkzQB5nM668rlvAAAAQQ"]
[Tue May 19 02:06:26.213943 2026] [:error] [pid 36579:tid 36592] [client 20.151.130.201:55198] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cfile.php"] [unique_id "agtVIl-aoZxBfgL5vDy2vAAAAEo"]
[Tue May 19 02:06:26.926526 2026] [:error] [pid 36579:tid 36588] [client 20.151.130.201:50737] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cfile.php"] [unique_id "agtVIl-aoZxBfgL5vDy2vgAAAEY"]
[Tue May 19 02:06:27.505671 2026] [:error] [pid 36492:tid 36524] [client 20.151.130.201:50131] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "agtVI2CVlogrkn9m2w4rdAAAAAI"]
[Tue May 19 02:06:27.971666 2026] [:error] [pid 43916:tid 43940] [client 20.151.130.201:47717] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "agtVI9QC236p33zJJvne7wAAAJA"]
[Tue May 19 02:06:28.778848 2026] [:error] [pid 36492:tid 36533] [client 20.151.130.201:45141] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "agtVJGCVlogrkn9m2w4rdgAAAAs"]
[Tue May 19 02:06:29.577585 2026] [:error] [pid 44046:tid 44058] [client 20.151.130.201:45120] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-wp.php"] [unique_id "agtVJYYF4k2jfXJBXk0SJgAAAYo"]
[Tue May 19 02:06:30.548176 2026] [:error] [pid 36579:tid 36589] [client 20.151.130.201:52698] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "agtVJl-aoZxBfgL5vDy2vwAAAEc"]
[Tue May 19 02:06:31.376543 2026] [:error] [pid 36492:tid 36544] [client 20.151.130.201:48172] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "agtVJ2CVlogrkn9m2w4rewAAABY"]
[Tue May 19 02:06:32.178296 2026] [:error] [pid 36492:tid 36541] [client 20.151.130.201:52702] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "agtVKGCVlogrkn9m2w4rfgAAABM"]
[Tue May 19 02:06:32.778593 2026] [:error] [pid 36491:tid 36515] [client 20.151.130.201:57290] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "agtVKE555B9CZb6D60n_vAAAAVQ"]
[Tue May 19 02:06:33.370915 2026] [:error] [pid 43916:tid 43928] [client 20.151.130.201:52728] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "agtVKdQC236p33zJJvne8AAAAIQ"]
[Tue May 19 02:06:34.069378 2026] [:error] [pid 44046:tid 44068] [client 20.151.130.201:50730] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "agtVKoYF4k2jfXJBXk0SLQAAAZQ"]
[Tue May 19 02:06:34.899698 2026] [:error] [pid 36493:tid 36566] [client 20.151.130.201:55220] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "agtVKgynkzQB5nM668rlxQAAARE"]
[Tue May 19 02:06:35.457636 2026] [:error] [pid 43916:tid 43926] [client 20.151.130.201:59925] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aa2.php"] [unique_id "agtVK9QC236p33zJJvnfBQAAAII"]
[Tue May 19 02:06:36.272131 2026] [:error] [pid 44010:tid 44021] [client 20.151.130.201:53265] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "agtVLDcFUuogD3-74-aONgAAAMk"]
[Tue May 19 02:06:36.896698 2026] [:error] [pid 36579:tid 36597] [client 20.151.130.201:48181] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "agtVLF-aoZxBfgL5vDy2wQAAAE8"]
[Tue May 19 02:06:37.671229 2026] [:error] [pid 36579:tid 36591] [client 20.151.130.201:54638] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "agtVLV-aoZxBfgL5vDy2xAAAAEk"]
[Tue May 19 02:06:38.317540 2026] [:error] [pid 44010:tid 44029] [client 20.151.130.201:50697] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ccou.php"] [unique_id "agtVLjcFUuogD3-74-aONwAAANE"]
[Tue May 19 02:06:39.034052 2026] [:error] [pid 36492:tid 36538] [client 20.151.130.201:55224] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login8.php"] [unique_id "agtVL2CVlogrkn9m2w4rhQAAABA"]
[Tue May 19 02:06:39.805716 2026] [:error] [pid 36492:tid 36528] [client 20.151.130.201:55187] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login8.php"] [unique_id "agtVL2CVlogrkn9m2w4rhgAAAAY"]
[Tue May 19 02:06:40.385884 2026] [:error] [pid 36492:tid 36539] [client 20.151.130.201:48177] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login8.php"] [unique_id "agtVMGCVlogrkn9m2w4rigAAABE"]
[Tue May 19 02:06:40.940059 2026] [:error] [pid 36492:tid 36531] [client 20.151.130.201:55189] [client 20.151.130.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/login8.php"] [unique_id "agtVMGCVlogrkn9m2w4riwAAAAk"]
[Tue May 19 03:15:02.745599 2026] [:error] [pid 36493:tid 36559] [client 49.51.39.209:40338] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agtlNgynkzQB5nM668ruPgAAAQo"]
[Tue May 19 04:32:41.300539 2026] [:error] [pid 38705:tid 38780] [client 20.63.211.172:5630] [client 20.63.211.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agt3acg5dNOZ5umN9lsLdQAAAIs"]
[Tue May 19 04:32:41.799900 2026] [:error] [pid 38697:tid 38727] [client 20.63.211.172:5733] [client 20.63.211.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agt3aaXP9pP6Kgt-msSXAQAAAAw"]
[Tue May 19 04:32:42.302544 2026] [:error] [pid 38814:tid 38839] [client 20.63.211.172:5726] [client 20.63.211.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agt3agvkKuBwP0epzWdCQwAAANc"]
[Tue May 19 04:32:42.782865 2026] [:error] [pid 38697:tid 38732] [client 20.63.211.172:5613] [client 20.63.211.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "agt3aqXP9pP6Kgt-msSXAwAAABE"]
[Tue May 19 04:47:24.942779 2026] [:error] [pid 38814:tid 38835] [client 103.65.237.216:55087] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/sftp-config.json"] [unique_id "agt63AvkKuBwP0epzWdEiwAAANM"]
[Tue May 19 04:47:25.230138 2026] [:error] [pid 41573:tid 41597] [client 103.65.237.216:55103] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.vscode/sftp.json"] [unique_id "agt63S1A2bd6JDSW9RYb7wAAARY"]
[Tue May 19 05:13:53.524314 2026] [:error] [pid 38814:tid 38829] [client 93.86.49.84:21663] [client 93.86.49.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.86.49.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "aguBEQvkKuBwP0epzWdJtAAAAM0"]
[Tue May 19 05:38:56.706814 2026] [:error] [pid 38814:tid 38825] [client 150.109.12.46:60970] [client 150.109.12.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "aguG8AvkKuBwP0epzWdP5wAAAMk"]
[Tue May 19 08:20:53.540692 2026] [:error] [pid 46815:tid 46827] [client 51.83.8.179:54048] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "agus5SPnRhJOmA06LgoM4AAAAUo"]
[Tue May 19 08:20:55.887299 2026] [:error] [pid 46896:tid 46911] [client 51.83.8.179:43974] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "agus56CHyzL3Ci9LGE3xxAAAAY0"]
[Tue May 19 08:20:58.480414 2026] [:error] [pid 38697:tid 38736] [client 51.83.8.179:43986] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "agus6qXP9pP6Kgt-msTPvAAAABU"]
[Tue May 19 08:21:00.757014 2026] [:error] [pid 38697:tid 38726] [client 51.83.8.179:34432] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "agus7KXP9pP6Kgt-msTPvgAAAAs"]
[Tue May 19 08:21:03.053127 2026] [:error] [pid 46815:tid 46819] [client 51.83.8.179:34444] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "agus7yPnRhJOmA06LgoM6QAAAUI"]
[Tue May 19 08:21:05.577831 2026] [:error] [pid 46815:tid 46835] [client 51.83.8.179:34448] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "agus8SPnRhJOmA06LgoM7gAAAVI"]
[Tue May 19 08:21:07.989487 2026] [:error] [pid 46815:tid 46836] [client 51.83.8.179:34462] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "agus8yPnRhJOmA06LgoM8gAAAVM"]
[Tue May 19 08:21:10.384725 2026] [:error] [pid 38814:tid 38837] [client 51.83.8.179:50666] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "agus9gvkKuBwP0epzWdiZQAAANU"]
[Tue May 19 08:21:12.789498 2026] [:error] [pid 46815:tid 46819] [client 51.83.8.179:50678] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "agus-CPnRhJOmA06LgoM-QAAAUI"]
[Tue May 19 08:21:15.330733 2026] [:error] [pid 38814:tid 38835] [client 51.83.8.179:50684] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agus-wvkKuBwP0epzWdiaAAAANM"]
[Tue May 19 08:21:17.718044 2026] [:error] [pid 38697:tid 38729] [client 51.83.8.179:50686] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agus_aXP9pP6Kgt-msTPzAAAAA4"]
[Tue May 19 08:21:20.082205 2026] [:error] [pid 38705:tid 38777] [client 51.83.8.179:44034] [client 51.83.8.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "agutAMg5dNOZ5umN9lsqyAAAAIg"]
[Tue May 19 10:06:47.458525 2026] [:error] [pid 38699:tid 38762] [client 146.19.215.249:55153] [client 146.19.215.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/core.php"] [unique_id "agvFt7--Adsw_P-dthZaRQAAAFQ"]
[Tue May 19 10:45:42.012197 2026] [:error] [pid 38697:tid 38737] [client 196.12.128.158:64291] [client 196.12.128.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.12.128.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agvO1qXP9pP6Kgt-msTziAAAABY"]
[Tue May 19 10:45:51.669322 2026] [:error] [pid 38699:tid 38749] [client 196.12.128.158:64788] [client 196.12.128.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.12.128.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agvO37--Adsw_P-dthZf1wAAAEc"]
[Tue May 19 10:46:02.192811 2026] [:error] [pid 38705:tid 38769] [client 196.12.128.158:65203] [client 196.12.128.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.12.128.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agvO6sg5dNOZ5umN9ls55AAAAIA"]
[Tue May 19 10:46:12.710386 2026] [:error] [pid 38697:tid 38725] [client 196.12.128.158:49244] [client 196.12.128.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.12.128.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agvO9KXP9pP6Kgt-msTzvQAAAAo"]
[Tue May 19 10:46:23.271532 2026] [:error] [pid 41573:tid 41593] [client 196.12.128.158:49686] [client 196.12.128.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.12.128.158, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agvO_y1A2bd6JDSW9RZROgAAARI"]
[Tue May 19 12:56:55.906459 2026] [:error] [pid 46815:tid 46823] [client 131.100.207.240:35157] [client 131.100.207.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.100.207.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agvtlyPnRhJOmA06Lgo7NwAAAUY"]
[Tue May 19 12:57:06.188030 2026] [:error] [pid 41573:tid 41587] [client 131.100.207.240:34564] [client 131.100.207.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.100.207.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agvtoi1A2bd6JDSW9RZcqwAAAQw"]
[Tue May 19 12:57:27.898648 2026] [:error] [pid 46896:tid 46921] [client 131.100.207.240:34231] [client 131.100.207.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.100.207.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agvtt6CHyzL3Ci9LGE04MwAAAZc"]
[Tue May 19 12:57:49.162028 2026] [:error] [pid 46815:tid 46834] [client 131.100.207.240:33352] [client 131.100.207.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.100.207.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agvtzSPnRhJOmA06Lgo7hgAAAVE"]
[Tue May 19 12:58:10.253271 2026] [:error] [pid 38699:tid 38750] [client 131.100.207.240:34290] [client 131.100.207.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.100.207.240, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agvt4r--Adsw_P-dthZzPgAAAEg"]
[Tue May 19 14:22:28.248556 2026] [:error] [pid 38697:tid 38733] [client 103.168.38.18:65389] [client 103.168.38.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.168.38.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwBpKXP9pP6Kgt-msQb1QAAABI"]
[Tue May 19 14:27:01.170623 2026] [:error] [pid 46815:tid 46837] [client 115.246.110.10:63658] [client 115.246.110.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.246.110.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwCtSPnRhJOmA06LgpPlQAAAVQ"]
[Tue May 19 14:27:11.859084 2026] [:error] [pid 38814:tid 38835] [client 115.246.110.10:64248] [client 115.246.110.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.246.110.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwCvwvkKuBwP0epzWd-DAAAANM"]
[Tue May 19 14:27:21.754891 2026] [:error] [pid 46896:tid 46921] [client 115.246.110.10:64637] [client 115.246.110.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.246.110.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwCyaCHyzL3Ci9LGE1IbQAAAZc"]
[Tue May 19 14:27:32.311707 2026] [:error] [pid 46896:tid 46921] [client 115.246.110.10:50156] [client 115.246.110.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.246.110.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwC1KCHyzL3Ci9LGE1IfwAAAZc"]
[Tue May 19 14:27:42.798085 2026] [:error] [pid 46896:tid 46914] [client 115.246.110.10:50504] [client 115.246.110.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.246.110.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwC3qCHyzL3Ci9LGE1IjgAAAZA"]
[Tue May 19 14:35:07.770087 2026] [:error] [pid 29823:tid 29851] [client 103.168.38.18:52456] [client 103.168.38.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agwEm2O09C0nAz8vRk4jCAAAAcw"]
[Tue May 19 14:35:53.675022 2026] [:error] [pid 38697:tid 38738] [client 103.168.38.18:52755] [client 103.168.38.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.168.38.18, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwEyaXP9pP6Kgt-msQc_AAAABc"]
[Tue May 19 14:47:11.770808 2026] [:error] [pid 38697:tid 38719] [client 106.76.93.48:22884] [client 106.76.93.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.76.93.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwHb6XP9pP6Kgt-msQeNQAAAAQ"]
[Tue May 19 14:47:22.325621 2026] [:error] [pid 29823:tid 29835] [client 106.76.93.48:22901] [client 106.76.93.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.76.93.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwHemO09C0nAz8vRk4kLgAAAcA"]
[Tue May 19 14:47:33.162514 2026] [:error] [pid 29823:tid 29853] [client 106.76.93.48:22861] [client 106.76.93.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.76.93.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwHhWO09C0nAz8vRk4kbQAAAc4"]
[Tue May 19 14:47:43.729630 2026] [:error] [pid 46815:tid 46838] [client 106.76.93.48:22873] [client 106.76.93.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.76.93.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwHjyPnRhJOmA06LgpU-wAAAVU"]
[Tue May 19 14:47:54.440178 2026] [:error] [pid 41573:tid 41594] [client 106.76.93.48:22883] [client 106.76.93.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.76.93.48, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwHmi1A2bd6JDSW9RZivgAAARM"]
[Tue May 19 15:01:49.224948 2026] [:error] [pid 38697:tid 38721] [client 106.76.93.75:35233] [client 106.76.93.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.76.93.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwK3aXP9pP6Kgt-msQgZAAAAAY"]
[Tue May 19 15:02:00.110167 2026] [:error] [pid 29823:tid 29848] [client 106.76.93.75:35253] [client 106.76.93.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.76.93.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwK6GO09C0nAz8vRk4mWAAAAck"]
[Tue May 19 15:02:10.859534 2026] [:error] [pid 46815:tid 46827] [client 106.76.93.75:35219] [client 106.76.93.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.76.93.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwK8iPnRhJOmA06LgpZVQAAAUo"]
[Tue May 19 15:02:21.505803 2026] [:error] [pid 41573:tid 41582] [client 106.76.93.75:35234] [client 106.76.93.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.76.93.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwK_S1A2bd6JDSW9RZkHgAAAQc"]
[Tue May 19 15:02:32.263575 2026] [:error] [pid 46815:tid 46829] [client 106.76.93.75:35253] [client 106.76.93.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.76.93.75, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agwLCCPnRhJOmA06LgpZmQAAAUw"]
[Tue May 19 18:05:49.227394 2026] [:error] [pid 41573:tid 41581] [client 154.57.221.169:6707] [client 154.57.221.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.221.169, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw1_S1A2bd6JDSW9RZ7nAAAAQY"]
[Tue May 19 18:05:59.224923 2026] [:error] [pid 38699:tid 38765] [client 154.57.221.169:6516] [client 154.57.221.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.221.169, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw2B7--Adsw_P-dthaUVgAAAFc"]
[Tue May 19 18:06:09.871953 2026] [:error] [pid 41573:tid 41588] [client 154.57.221.169:6501] [client 154.57.221.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.221.169, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw2ES1A2bd6JDSW9RZ7sQAAAQ0"]
[Tue May 19 18:06:21.529463 2026] [:error] [pid 29622:tid 29627] [client 154.57.221.169:6772] [client 154.57.221.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.221.169, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw2HTkOqPKWkPs_P15NgAAAAgM"]
[Tue May 19 18:06:33.137380 2026] [:error] [pid 38697:tid 38715] [client 154.57.221.169:6410] [client 154.57.221.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.221.169, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw2KaXP9pP6Kgt-msRACgAAAAA"]
[Tue May 19 18:34:33.024032 2026] [:error] [pid 46815:tid 46838] [client 94.57.99.140:65500] [client 94.57.99.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.57.99.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw8uSPnRhJOmA06LgpsmAAAAVU"]
[Tue May 19 18:34:43.329756 2026] [:error] [pid 38699:tid 38742] [client 94.57.99.140:49917] [client 94.57.99.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.57.99.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw8w7--Adsw_P-dthaXZgAAAEA"]
[Tue May 19 18:34:54.348127 2026] [:error] [pid 41573:tid 41594] [client 94.57.99.140:50753] [client 94.57.99.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.57.99.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw8zi1A2bd6JDSW9RZ_-gAAARM"]
[Tue May 19 18:35:05.151661 2026] [:error] [pid 38705:tid 38774] [client 94.57.99.140:14404] [client 94.57.99.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.57.99.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw82cg5dNOZ5umN9ltcQAAAAIU"]
[Tue May 19 18:35:15.734112 2026] [:error] [pid 41573:tid 41591] [client 94.57.99.140:52081] [client 94.57.99.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.57.99.140, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw84y1A2bd6JDSW9RaABQAAARA"]
[Tue May 19 18:42:57.049510 2026] [:error] [pid 46896:tid 46909] [client 196.189.57.114:41354] [client 196.189.57.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.57.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw-saCHyzL3Ci9LGE1ebwAAAYs"]
[Tue May 19 18:45:44.949315 2026] [:error] [pid 29823:tid 29839] [client 43.133.91.48:40668] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agw_WGO09C0nAz8vRk4ytwAAAcQ"]
[Tue May 19 18:46:46.863057 2026] [:error] [pid 29823:tid 29859] [client 196.189.57.114:39048] [client 196.189.57.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.57.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw_lmO09C0nAz8vRk4yyAAAAdQ"]
[Tue May 19 18:47:08.754713 2026] [:error] [pid 38699:tid 38752] [client 196.189.57.114:39357] [client 196.189.57.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.57.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw_rL--Adsw_P-dthaYfQAAAEo"]
[Tue May 19 18:47:18.553373 2026] [:error] [pid 41573:tid 41586] [client 196.189.57.114:39843] [client 196.189.57.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.57.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw_ti1A2bd6JDSW9RaBmwAAAQs"]
[Tue May 19 18:47:29.482036 2026] [:error] [pid 46896:tid 46915] [client 196.189.57.114:41438] [client 196.189.57.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.57.114, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agw_waCHyzL3Ci9LGE1epAAAAZE"]
[Tue May 19 19:19:22.246728 2026] [:error] [pid 41573:tid 41592] [client 129.211.172.249:46990] [client 129.211.172.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agxHOi1A2bd6JDSW9RaFUgAAARE"]
[Tue May 19 19:28:58.492328 2026] [:error] [pid 29823:tid 29842] [client 20.226.97.125:32055] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "agxJemO09C0nAz8vRk46YQAAAcc"]
[Tue May 19 19:29:00.295135 2026] [:error] [pid 46815:tid 46827] [client 20.226.97.125:59137] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "agxJfCPnRhJOmA06LgpwJAAAAUo"]
[Tue May 19 19:29:01.929374 2026] [:error] [pid 46896:tid 46905] [client 20.226.97.125:32031] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "agxJfaCHyzL3Ci9LGE1gagAAAYc"]
[Tue May 19 19:29:02.873029 2026] [:error] [pid 29622:tid 29626] [client 20.226.97.125:40831] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class.php"] [unique_id "agxJfjkOqPKWkPs_P15P_QAAAgI"]
[Tue May 19 19:29:03.622463 2026] [:error] [pid 46896:tid 46903] [client 20.226.97.125:60095] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "agxJf6CHyzL3Ci9LGE1gawAAAYU"]
[Tue May 19 19:29:04.468335 2026] [:error] [pid 29823:tid 29857] [client 20.226.97.125:60072] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "agxJgGO09C0nAz8vRk46ZwAAAdI"]
[Tue May 19 19:29:05.182190 2026] [:error] [pid 29622:tid 29647] [client 20.226.97.125:40818] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "agxJgTkOqPKWkPs_P15P_wAAAhc"]
[Tue May 19 19:29:06.326881 2026] [:error] [pid 41573:tid 41581] [client 20.226.97.125:31544] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "agxJgi1A2bd6JDSW9RaGqwAAAQY"]
[Tue May 19 19:29:07.064396 2026] [:error] [pid 46896:tid 46920] [client 20.226.97.125:54557] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "agxJg6CHyzL3Ci9LGE1gbgAAAZY"]
[Tue May 19 19:29:07.784758 2026] [:error] [pid 29823:tid 29854] [client 20.226.97.125:54190] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "agxJg2O09C0nAz8vRk46bAAAAc8"]
[Tue May 19 19:29:08.734362 2026] [:error] [pid 46896:tid 46900] [client 20.226.97.125:38492] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "agxJhKCHyzL3Ci9LGE1gcQAAAYI"]
[Tue May 19 19:29:09.512038 2026] [:error] [pid 38705:tid 38771] [client 20.226.97.125:32002] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/info.php"] [unique_id "agxJhcg5dNOZ5umN9ltezAAAAII"]
[Tue May 19 19:29:10.271084 2026] [:error] [pid 55881:tid 55902] [client 20.226.97.125:54553] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "agxJhu-UExma0LUC7WAB6wAAAlM"]
[Tue May 19 19:29:11.158221 2026] [:error] [pid 29823:tid 29837] [client 20.226.97.125:40804] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "agxJh2O09C0nAz8vRk46cQAAAcI"]
[Tue May 19 19:29:12.192897 2026] [:error] [pid 55881:tid 55885] [client 20.226.97.125:48004] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "agxJiO-UExma0LUC7WAB7QAAAkI"]
[Tue May 19 19:29:13.521714 2026] [:error] [pid 38814:tid 38819] [client 20.226.97.125:59187] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/as.php"] [unique_id "agxJiQvkKuBwP0epzWecCAAAAMM"]
[Tue May 19 19:29:14.855589 2026] [:error] [pid 29823:tid 29835] [client 20.226.97.125:40772] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "agxJimO09C0nAz8vRk46ewAAAcA"]
[Tue May 19 19:29:16.752491 2026] [:error] [pid 38814:tid 38837] [client 20.226.97.125:37423] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "agxJjAvkKuBwP0epzWecCwAAANU"]
[Tue May 19 19:29:18.686348 2026] [:error] [pid 29622:tid 29628] [client 20.226.97.125:48001] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "agxJjjkOqPKWkPs_P15QAwAAAgQ"]
[Tue May 19 19:29:21.662889 2026] [:error] [pid 41573:tid 41595] [client 20.226.97.125:62555] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aw.php"] [unique_id "agxJkS1A2bd6JDSW9RaGrgAAARQ"]
[Tue May 19 19:29:23.203289 2026] [:error] [pid 46815:tid 46820] [client 20.226.97.125:38464] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bb.php"] [unique_id "agxJkyPnRhJOmA06LgpwMAAAAUM"]
[Tue May 19 19:29:24.978466 2026] [:error] [pid 38705:tid 38780] [client 20.226.97.125:32060] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bb.php"] [unique_id "agxJlMg5dNOZ5umN9lte0gAAAIs"]
[Tue May 19 19:29:26.268282 2026] [:error] [pid 29622:tid 29631] [client 20.226.97.125:31489] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bb.php"] [unique_id "agxJljkOqPKWkPs_P15QBgAAAgc"]
[Tue May 19 19:29:27.305733 2026] [:error] [pid 46815:tid 46827] [client 20.226.97.125:59143] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bb.php"] [unique_id "agxJlyPnRhJOmA06LgpwMwAAAUo"]
[Tue May 19 19:29:28.575158 2026] [:error] [pid 46815:tid 46838] [client 20.226.97.125:48026] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "agxJmCPnRhJOmA06LgpwNgAAAVU"]
[Tue May 19 19:29:30.517164 2026] [:error] [pid 46815:tid 46817] [client 20.226.97.125:54540] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "agxJmiPnRhJOmA06LgpwNwAAAUA"]
[Tue May 19 19:29:31.278231 2026] [:error] [pid 29622:tid 29625] [client 20.226.97.125:31550] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "agxJmzkOqPKWkPs_P15QCAAAAgE"]
[Tue May 19 19:29:32.613027 2026] [:error] [pid 46815:tid 46836] [client 20.226.97.125:38472] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/about.php"] [unique_id "agxJnCPnRhJOmA06LgpwOQAAAVM"]
[Tue May 19 19:29:33.921920 2026] [:error] [pid 46815:tid 46821] [client 20.226.97.125:37381] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "agxJnSPnRhJOmA06LgpwPAAAAUQ"]
[Tue May 19 19:29:35.987877 2026] [:error] [pid 55881:tid 55895] [client 20.226.97.125:31537] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "agxJn--UExma0LUC7WAB9wAAAkw"]
[Tue May 19 19:29:37.632435 2026] [:error] [pid 38697:tid 38721] [client 20.226.97.125:48049] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "agxJoaXP9pP6Kgt-msRKMQAAAAY"]
[Tue May 19 19:29:39.669016 2026] [:error] [pid 41573:tid 41599] [client 20.226.97.125:32032] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/222.php"] [unique_id "agxJoy1A2bd6JDSW9RaGtAAAARg"]
[Tue May 19 19:29:41.221886 2026] [:error] [pid 29823:tid 29855] [client 20.226.97.125:62590] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "agxJpWO09C0nAz8vRk46fwAAAdA"]
[Tue May 19 19:29:42.681517 2026] [:error] [pid 38699:tid 38763] [client 20.226.97.125:31529] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "agxJpr--Adsw_P-dthaccAAAAFU"]
[Tue May 19 19:29:44.862840 2026] [:error] [pid 46815:tid 46831] [client 20.226.97.125:44817] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "agxJqCPnRhJOmA06LgpwPwAAAU4"]
[Tue May 19 19:29:46.414271 2026] [:error] [pid 46815:tid 46833] [client 20.226.97.125:59160] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test1.php"] [unique_id "agxJqiPnRhJOmA06LgpwQgAAAVA"]
[Tue May 19 19:29:47.519194 2026] [:error] [pid 29823:tid 29849] [client 20.226.97.125:44832] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "agxJq2O09C0nAz8vRk46gAAAAco"]
[Tue May 19 19:29:48.773874 2026] [:error] [pid 29622:tid 29648] [client 20.226.97.125:31727] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "agxJrDkOqPKWkPs_P15QCgAAAhg"]
[Tue May 19 19:29:49.872608 2026] [:error] [pid 38697:tid 38735] [client 20.226.97.125:53752] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "agxJraXP9pP6Kgt-msRKNAAAABQ"]
[Tue May 19 19:29:51.061466 2026] [:error] [pid 46896:tid 46910] [client 20.226.97.125:37327] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-mail.php"] [unique_id "agxJr6CHyzL3Ci9LGE1gfQAAAYw"]
[Tue May 19 19:29:52.505838 2026] [:error] [pid 46815:tid 46818] [client 20.226.97.125:51432] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agxJsCPnRhJOmA06LgpwSAAAAUE"]
[Tue May 19 19:29:53.356673 2026] [:error] [pid 55881:tid 55888] [client 20.226.97.125:38924] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agxJse-UExma0LUC7WAB-QAAAkU"]
[Tue May 19 19:29:54.700548 2026] [:error] [pid 46896:tid 46913] [client 20.226.97.125:40296] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agxJsqCHyzL3Ci9LGE1gggAAAY8"]
[Tue May 19 19:29:55.872982 2026] [:error] [pid 29622:tid 29624] [client 20.226.97.125:64583] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agxJszkOqPKWkPs_P15QCwAAAgA"]
[Tue May 19 19:29:56.927900 2026] [:error] [pid 46896:tid 46919] [client 20.226.97.125:52470] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "agxJtKCHyzL3Ci9LGE1ghAAAAZU"]
[Tue May 19 19:30:11.184722 2026] [:error] [pid 46896:tid 46913] [client 20.226.97.125:56598] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/profile.php"] [unique_id "agxJw6CHyzL3Ci9LGE1gkgAAAY8"]
[Tue May 19 19:30:12.631708 2026] [:error] [pid 38699:tid 38763] [client 20.226.97.125:62103] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/profile.php"] [unique_id "agxJxL--Adsw_P-dthaceQAAAFU"]
[Tue May 19 19:30:13.627744 2026] [:error] [pid 38699:tid 38745] [client 20.226.97.125:57013] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/profile.php"] [unique_id "agxJxb--Adsw_P-dthacewAAAEM"]
[Tue May 19 19:30:15.237135 2026] [:error] [pid 38697:tid 38729] [client 20.226.97.125:51503] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/profile.php"] [unique_id "agxJx6XP9pP6Kgt-msRKRAAAAA4"]
[Tue May 19 19:30:17.040498 2026] [:error] [pid 38697:tid 38727] [client 20.226.97.125:57017] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "agxJyaXP9pP6Kgt-msRKSgAAAAw"]
[Tue May 19 19:30:18.955007 2026] [:error] [pid 38697:tid 38718] [client 20.226.97.125:31388] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "agxJyqXP9pP6Kgt-msRKTQAAAAM"]
[Tue May 19 19:30:19.983494 2026] [:error] [pid 29622:tid 29628] [client 20.226.97.125:44190] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "agxJyzkOqPKWkPs_P15QFAAAAgQ"]
[Tue May 19 19:30:21.279618 2026] [:error] [pid 38705:tid 38781] [client 20.226.97.125:32110] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ws80.php"] [unique_id "agxJzcg5dNOZ5umN9lte5QAAAIw"]
[Tue May 19 19:30:22.823909 2026] [:error] [pid 55881:tid 55894] [client 20.226.97.125:45302] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "agxJzu-UExma0LUC7WACAwAAAks"]
[Tue May 19 19:30:24.214857 2026] [:error] [pid 29622:tid 29645] [client 20.226.97.125:31395] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "agxJ0DkOqPKWkPs_P15QFwAAAhU"]
[Tue May 19 19:30:25.324041 2026] [:error] [pid 41573:tid 41583] [client 20.226.97.125:46420] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "agxJ0S1A2bd6JDSW9RaGwgAAAQg"]
[Tue May 19 19:30:26.268671 2026] [:error] [pid 55881:tid 55887] [client 20.226.97.125:31575] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a4.php"] [unique_id "agxJ0u-UExma0LUC7WACBAAAAkQ"]
[Tue May 19 19:30:27.556443 2026] [:error] [pid 38699:tid 38746] [client 20.226.97.125:31931] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "agxJ07--Adsw_P-dthacfAAAAEQ"]
[Tue May 19 19:30:28.955924 2026] [:error] [pid 55881:tid 55884] [client 20.226.97.125:58374] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "agxJ1O-UExma0LUC7WACBQAAAkE"]
[Tue May 19 19:30:29.952923 2026] [:error] [pid 55881:tid 55898] [client 20.226.97.125:41517] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "agxJ1e-UExma0LUC7WACBgAAAk8"]
[Tue May 19 19:30:31.044515 2026] [:error] [pid 38699:tid 38761] [client 20.226.97.125:31416] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "agxJ17--Adsw_P-dthacfgAAAFM"]
[Tue May 19 19:30:32.346713 2026] [:error] [pid 46896:tid 46902] [client 20.226.97.125:42999] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "agxJ2KCHyzL3Ci9LGE1glAAAAYQ"]
[Tue May 19 19:30:33.245743 2026] [:error] [pid 38699:tid 38762] [client 20.226.97.125:59655] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "agxJ2b--Adsw_P-dthacfwAAAFQ"]
[Tue May 19 19:30:34.369724 2026] [:error] [pid 46896:tid 46919] [client 20.226.97.125:31556] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "agxJ2qCHyzL3Ci9LGE1glQAAAZU"]
[Tue May 19 19:30:35.123099 2026] [:error] [pid 55881:tid 55891] [client 20.226.97.125:31408] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/buy.php"] [unique_id "agxJ2--UExma0LUC7WACCAAAAkg"]
[Tue May 19 19:30:35.920908 2026] [:error] [pid 38699:tid 38743] [client 20.226.97.125:43607] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "agxJ27--Adsw_P-dthacgQAAAEE"]
[Tue May 19 19:30:37.508391 2026] [:error] [pid 46815:tid 46822] [client 20.226.97.125:59665] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "agxJ3SPnRhJOmA06LgpwUQAAAUU"]
[Tue May 19 19:30:38.541753 2026] [:error] [pid 38814:tid 38820] [client 20.226.97.125:57730] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "agxJ3gvkKuBwP0epzWecGQAAAMQ"]
[Tue May 19 19:30:39.783859 2026] [:error] [pid 55881:tid 55892] [client 20.226.97.125:57785] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/core.php"] [unique_id "agxJ3--UExma0LUC7WACCwAAAkk"]
[Tue May 19 19:30:40.695910 2026] [:error] [pid 29622:tid 29630] [client 20.226.97.125:60736] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "agxJ4DkOqPKWkPs_P15QGAAAAgY"]
[Tue May 19 19:30:41.547399 2026] [:error] [pid 38699:tid 38748] [client 20.226.97.125:55344] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "agxJ4b--Adsw_P-dthachAAAAEY"]
[Tue May 19 19:30:42.434667 2026] [:error] [pid 29823:tid 29848] [client 20.226.97.125:55347] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "agxJ4mO09C0nAz8vRk46hQAAAck"]
[Tue May 19 19:30:43.333042 2026] [:error] [pid 38705:tid 38791] [client 20.226.97.125:62626] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lock360.php"] [unique_id "agxJ48g5dNOZ5umN9lte6gAAAJY"]
[Tue May 19 19:30:44.466692 2026] [:error] [pid 29823:tid 29860] [client 20.226.97.125:43588] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bc.php"] [unique_id "agxJ5GO09C0nAz8vRk46hgAAAdU"]
[Tue May 19 19:30:45.273739 2026] [:error] [pid 55881:tid 55895] [client 20.226.97.125:55296] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bc.php"] [unique_id "agxJ5e-UExma0LUC7WACEAAAAkw"]
[Tue May 19 19:30:46.519084 2026] [:error] [pid 55881:tid 55885] [client 20.226.97.125:54266] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bc.php"] [unique_id "agxJ5u-UExma0LUC7WACEgAAAkI"]
[Tue May 19 19:30:47.437860 2026] [:error] [pid 46896:tid 46903] [client 20.226.97.125:36853] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bc.php"] [unique_id "agxJ56CHyzL3Ci9LGE1gmwAAAYU"]
[Tue May 19 19:30:48.440564 2026] [:error] [pid 55881:tid 55887] [client 20.226.97.125:62398] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "agxJ6O-UExma0LUC7WACEwAAAkQ"]
[Tue May 19 19:30:49.320503 2026] [:error] [pid 38814:tid 38832] [client 20.226.97.125:62351] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "agxJ6QvkKuBwP0epzWecIgAAANA"]
[Tue May 19 19:30:50.082930 2026] [:error] [pid 46815:tid 46833] [client 20.226.97.125:36868] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "agxJ6iPnRhJOmA06LgpwUwAAAVA"]
[Tue May 19 19:30:50.990971 2026] [:error] [pid 46896:tid 46922] [client 20.226.97.125:43602] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/av.php"] [unique_id "agxJ6qCHyzL3Ci9LGE1gnAAAAZg"]
[Tue May 19 19:30:52.378363 2026] [:error] [pid 29823:tid 29854] [client 20.226.97.125:55318] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp1.php"] [unique_id "agxJ7GO09C0nAz8vRk46hwAAAc8"]
[Tue May 19 19:30:53.648048 2026] [:error] [pid 29823:tid 29851] [client 20.226.97.125:58738] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp1.php"] [unique_id "agxJ7WO09C0nAz8vRk46iQAAAcw"]
[Tue May 19 19:30:55.386266 2026] [:error] [pid 38814:tid 38829] [client 20.226.97.125:64643] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp1.php"] [unique_id "agxJ7wvkKuBwP0epzWecIwAAAM0"]
[Tue May 19 19:30:57.295818 2026] [:error] [pid 29823:tid 29837] [client 20.226.97.125:31341] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casp1.php"] [unique_id "agxJ8WO09C0nAz8vRk46jAAAAcI"]
[Tue May 19 19:30:59.026491 2026] [:error] [pid 38814:tid 38830] [client 20.226.97.125:36832] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file6.php"] [unique_id "agxJ8wvkKuBwP0epzWecJAAAAM4"]
[Tue May 19 19:31:00.702678 2026] [:error] [pid 38705:tid 38775] [client 20.226.97.125:31156] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file6.php"] [unique_id "agxJ9Mg5dNOZ5umN9lte8AAAAIY"]
[Tue May 19 19:31:03.074077 2026] [:error] [pid 41573:tid 41591] [client 20.226.97.125:31114] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file6.php"] [unique_id "agxJ9y1A2bd6JDSW9RaGywAAARA"]
[Tue May 19 19:31:04.704189 2026] [:error] [pid 38705:tid 38778] [client 20.226.97.125:31288] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file6.php"] [unique_id "agxJ-Mg5dNOZ5umN9lte8QAAAIk"]
[Tue May 19 19:31:06.241190 2026] [:error] [pid 38697:tid 38737] [client 20.226.97.125:31426] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xs.php"] [unique_id "agxJ-qXP9pP6Kgt-msRKUgAAABY"]
[Tue May 19 19:31:07.835822 2026] [:error] [pid 46896:tid 46898] [client 20.226.97.125:62376] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xs.php"] [unique_id "agxJ-6CHyzL3Ci9LGE1gngAAAYA"]
[Tue May 19 19:31:09.777160 2026] [:error] [pid 38699:tid 38763] [client 20.226.97.125:52386] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xs.php"] [unique_id "agxJ_b--Adsw_P-dthacmAAAAFU"]
[Tue May 19 19:31:25.285372 2026] [:error] [pid 38699:tid 38753] [client 20.226.97.125:58701] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "agxKDb--Adsw_P-dthacqAAAAEs"]
[Tue May 19 19:31:27.500542 2026] [:error] [pid 46896:tid 46907] [client 20.226.97.125:55305] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "agxKD6CHyzL3Ci9LGE1gowAAAYk"]
[Tue May 19 19:31:29.618934 2026] [:error] [pid 46896:tid 46921] [client 20.226.97.125:58751] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "agxKEaCHyzL3Ci9LGE1gpAAAAZc"]
[Tue May 19 19:31:30.928009 2026] [:error] [pid 41573:tid 41585] [client 20.226.97.125:31266] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a1.php"] [unique_id "agxKEi1A2bd6JDSW9RaGzgAAAQo"]
[Tue May 19 19:31:32.342367 2026] [:error] [pid 46896:tid 46908] [client 20.226.97.125:48524] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "agxKFKCHyzL3Ci9LGE1gpwAAAYo"]
[Tue May 19 19:31:34.436892 2026] [:error] [pid 38699:tid 38760] [client 20.226.97.125:31119] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "agxKFr--Adsw_P-dthacqwAAAFI"]
[Tue May 19 19:31:36.186247 2026] [:error] [pid 29823:tid 29841] [client 20.226.97.125:56138] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "agxKGGO09C0nAz8vRk46nQAAAcY"]
[Tue May 19 19:31:37.503357 2026] [:error] [pid 41573:tid 41592] [client 20.226.97.125:48529] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/d.php"] [unique_id "agxKGS1A2bd6JDSW9RaG0AAAARE"]
[Tue May 19 19:31:38.613355 2026] [:error] [pid 29622:tid 29626] [client 20.226.97.125:56131] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "agxKGjkOqPKWkPs_P15QHQAAAgI"]
[Tue May 19 19:31:39.455119 2026] [:error] [pid 46815:tid 46827] [client 20.226.97.125:52374] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "agxKGyPnRhJOmA06LgpwYAAAAUo"]
[Tue May 19 19:31:40.300749 2026] [:error] [pid 38699:tid 38761] [client 20.226.97.125:46475] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "agxKHL--Adsw_P-dthacrgAAAFM"]
[Tue May 19 19:31:41.590741 2026] [:error] [pid 29823:tid 29854] [client 20.226.97.125:52413] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xff.php"] [unique_id "agxKHWO09C0nAz8vRk46oQAAAc8"]
[Tue May 19 19:31:42.394055 2026] [:error] [pid 38697:tid 38719] [client 20.226.97.125:52355] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "agxKHqXP9pP6Kgt-msRKYgAAAAQ"]
[Tue May 19 19:31:43.279176 2026] [:error] [pid 38699:tid 38749] [client 20.226.97.125:56164] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "agxKH7--Adsw_P-dthacrwAAAEc"]
[Tue May 19 19:31:44.098671 2026] [:error] [pid 38699:tid 38754] [client 20.226.97.125:36835] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "agxKIL--Adsw_P-dthacsAAAAEw"]
[Tue May 19 19:31:45.206442 2026] [:error] [pid 38699:tid 38750] [client 20.226.97.125:58707] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bal.php"] [unique_id "agxKIb--Adsw_P-dthacsQAAAEg"]
[Tue May 19 19:31:46.265939 2026] [:error] [pid 55881:tid 55894] [client 20.226.97.125:56160] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "agxKIu-UExma0LUC7WACHAAAAks"]
[Tue May 19 19:31:47.690670 2026] [:error] [pid 41573:tid 41578] [client 20.226.97.125:31319] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "agxKIy1A2bd6JDSW9RaG0wAAAQM"]
[Tue May 19 19:31:49.155443 2026] [:error] [pid 29823:tid 29856] [client 20.226.97.125:52358] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "agxKJWO09C0nAz8vRk461AAAAdE"]
[Tue May 19 19:31:50.720977 2026] [:error] [pid 29823:tid 29858] [client 20.226.97.125:56175] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xltt.php"] [unique_id "agxKJmO09C0nAz8vRk462AAAAdM"]
[Tue May 19 19:31:52.945592 2026] [:error] [pid 46896:tid 46921] [client 20.226.97.125:53641] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son.php"] [unique_id "agxKKKCHyzL3Ci9LGE1gsAAAAZc"]
[Tue May 19 19:31:56.313187 2026] [:error] [pid 38814:tid 38820] [client 20.226.97.125:56143] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son.php"] [unique_id "agxKLAvkKuBwP0epzWecKAAAAMQ"]
[Tue May 19 19:31:58.442861 2026] [:error] [pid 41573:tid 41577] [client 20.226.97.125:31330] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son.php"] [unique_id "agxKLi1A2bd6JDSW9RaG1QAAAQI"]
[Tue May 19 19:31:59.377229 2026] [:error] [pid 29622:tid 29646] [client 20.226.97.125:53648] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son.php"] [unique_id "agxKLzkOqPKWkPs_P15QHgAAAhY"]
[Tue May 19 19:32:00.649969 2026] [:error] [pid 38705:tid 38791] [client 20.226.97.125:31303] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "agxKMMg5dNOZ5umN9lte-AAAAJY"]
[Tue May 19 19:32:01.974802 2026] [:error] [pid 55881:tid 55892] [client 20.226.97.125:38882] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "agxKMe-UExma0LUC7WACIgAAAkk"]
[Tue May 19 19:32:02.821787 2026] [:error] [pid 38697:tid 38739] [client 20.226.97.125:31275] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "agxKMqXP9pP6Kgt-msRKfwAAABg"]
[Tue May 19 19:32:03.596312 2026] [:error] [pid 55881:tid 55901] [client 20.226.97.125:38861] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/doc.php"] [unique_id "agxKM--UExma0LUC7WACJQAAAlI"]
[Tue May 19 19:32:04.568013 2026] [:error] [pid 38697:tid 38729] [client 20.226.97.125:31270] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zo.php"] [unique_id "agxKNKXP9pP6Kgt-msRKgQAAAA4"]
[Tue May 19 19:32:05.517001 2026] [:error] [pid 29823:tid 29850] [client 20.226.97.125:31259] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zo.php"] [unique_id "agxKNWO09C0nAz8vRk46-QAAAcs"]
[Tue May 19 19:32:06.614132 2026] [:error] [pid 29823:tid 29839] [client 20.226.97.125:54653] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zo.php"] [unique_id "agxKNmO09C0nAz8vRk46-gAAAcQ"]
[Tue May 19 19:32:07.451280 2026] [:error] [pid 38699:tid 38761] [client 20.226.97.125:52380] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/zo.php"] [unique_id "agxKN7--Adsw_P-dthacuQAAAFM"]
[Tue May 19 19:32:08.269989 2026] [:error] [pid 38814:tid 38818] [client 20.226.97.125:31137] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "agxKOAvkKuBwP0epzWecKwAAAMI"]
[Tue May 19 19:32:09.333487 2026] [:error] [pid 38705:tid 38788] [client 20.226.97.125:46943] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "agxKOcg5dNOZ5umN9lte-gAAAJM"]
[Tue May 19 19:32:10.209026 2026] [:error] [pid 29823:tid 29841] [client 20.226.97.125:54628] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "agxKOmO09C0nAz8vRk46_QAAAcY"]
[Tue May 19 19:32:11.190460 2026] [:error] [pid 29823:tid 29856] [client 20.226.97.125:46929] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xper1.php"] [unique_id "agxKO2O09C0nAz8vRk46_wAAAdE"]
[Tue May 19 19:32:12.127860 2026] [:error] [pid 29823:tid 29836] [client 20.226.97.125:52405] [client 20.226.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/tiny.php"] [unique_id "agxKPGO09C0nAz8vRk47AQAAAcE"]
[Tue May 19 19:32:12.845288 2026] [:error] [pid 38814:tid 38840] [client 20.226.97.125:46944] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s1.php"] [unique_id "agxKPAvkKuBwP0epzWecLQAAANg"]
[Tue May 19 19:32:13.754897 2026] [:error] [pid 55881:tid 55903] [client 20.226.97.125:53683] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s1.php"] [unique_id "agxKPe-UExma0LUC7WACJgAAAlQ"]
[Tue May 19 19:32:14.698569 2026] [:error] [pid 41573:tid 41593] [client 20.226.97.125:38894] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/s1.php"] [unique_id "agxKPi1A2bd6JDSW9RaHFAAAARI"]
[Tue May 19 19:32:15.794574 2026] [:error] [pid 29823:tid 29863] [client 20.226.97.125:56162] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/de.php"] [unique_id "agxKP2O09C0nAz8vRk47BQAAAdg"]
[Tue May 19 19:32:16.775604 2026] [:error] [pid 55881:tid 55895] [client 20.226.97.125:38889] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/de.php"] [unique_id "agxKQO-UExma0LUC7WACJwAAAkw"]
[Tue May 19 19:32:17.973321 2026] [:error] [pid 29823:tid 29849] [client 20.226.97.125:46975] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/de.php"] [unique_id "agxKQWO09C0nAz8vRk47CQAAAco"]
[Tue May 19 19:32:18.900620 2026] [:error] [pid 29823:tid 29852] [client 20.226.97.125:52366] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/de.php"] [unique_id "agxKQmO09C0nAz8vRk47DAAAAc0"]
[Tue May 19 19:32:19.670324 2026] [:error] [pid 29823:tid 29856] [client 20.226.97.125:58320] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1a.php"] [unique_id "agxKQ2O09C0nAz8vRk47EAAAAdE"]
[Tue May 19 19:32:20.658547 2026] [:error] [pid 29823:tid 29860] [client 20.226.97.125:54622] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1a.php"] [unique_id "agxKRGO09C0nAz8vRk47EwAAAdU"]
[Tue May 19 19:32:21.658195 2026] [:error] [pid 38697:tid 38719] [client 20.226.97.125:31152] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1a.php"] [unique_id "agxKRaXP9pP6Kgt-msRKhQAAAAQ"]
[Tue May 19 19:32:22.751168 2026] [:error] [pid 46815:tid 46836] [client 20.226.97.125:53692] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1a.php"] [unique_id "agxKRiPnRhJOmA06LgpwZQAAAVM"]
[Tue May 19 19:32:23.540632 2026] [:error] [pid 55881:tid 55899] [client 20.226.97.125:48525] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/2.php"] [unique_id "agxKR--UExma0LUC7WACKAAAAlA"]
[Tue May 19 19:32:37.499083 2026] [:error] [pid 41573:tid 41575] [client 20.226.97.125:31115] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "agxKVS1A2bd6JDSW9RaHJQAAAQA"]
[Tue May 19 19:32:38.147431 2026] [:error] [pid 46815:tid 46835] [client 20.226.97.125:46919] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "agxKViPnRhJOmA06LgpwaQAAAVI"]
[Tue May 19 19:32:38.807899 2026] [:error] [pid 29823:tid 29862] [client 20.226.97.125:53639] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "agxKVmO09C0nAz8vRk47GgAAAdc"]
[Tue May 19 19:32:39.723057 2026] [:error] [pid 29823:tid 29857] [client 20.226.97.125:38905] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/link.php"] [unique_id "agxKV2O09C0nAz8vRk47GwAAAdI"]
[Tue May 19 19:32:40.572869 2026] [:error] [pid 29823:tid 29860] [client 20.226.97.125:48573] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sallu.php"] [unique_id "agxKWGO09C0nAz8vRk47HQAAAdU"]
[Tue May 19 19:32:41.318248 2026] [:error] [pid 29823:tid 29855] [client 20.226.97.125:56151] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sallu.php"] [unique_id "agxKWWO09C0nAz8vRk47IQAAAdA"]
[Tue May 19 19:32:42.083367 2026] [:error] [pid 38699:tid 38754] [client 20.226.97.125:56180] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sallu.php"] [unique_id "agxKWr--Adsw_P-dthacxwAAAEw"]
[Tue May 19 19:32:42.743158 2026] [:error] [pid 29823:tid 29860] [client 20.226.97.125:49623] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sallu.php"] [unique_id "agxKWmO09C0nAz8vRk47LgAAAdU"]
[Tue May 19 19:32:43.498346 2026] [:error] [pid 46896:tid 46904] [client 20.226.97.125:51934] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "agxKW6CHyzL3Ci9LGE1gvAAAAYY"]
[Tue May 19 19:32:44.200119 2026] [:error] [pid 46896:tid 46914] [client 20.226.97.125:58328] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "agxKXKCHyzL3Ci9LGE1gvgAAAZA"]
[Tue May 19 19:32:44.900862 2026] [:error] [pid 29823:tid 29837] [client 20.226.97.125:51941] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "agxKXGO09C0nAz8vRk47PwAAAcI"]
[Tue May 19 19:32:45.572126 2026] [:error] [pid 38699:tid 38755] [client 20.226.97.125:54637] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aboute.php"] [unique_id "agxKXb--Adsw_P-dthacyAAAAE0"]
[Tue May 19 19:32:46.445374 2026] [:error] [pid 41573:tid 41583] [client 20.226.97.125:49630] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "agxKXi1A2bd6JDSW9RaHJwAAAQg"]
[Tue May 19 19:32:47.487341 2026] [:error] [pid 29823:tid 29838] [client 20.226.97.125:61130] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "agxKX2O09C0nAz8vRk47UgAAAcM"]
[Tue May 19 19:32:48.464589 2026] [:error] [pid 46896:tid 46911] [client 20.226.97.125:46948] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "agxKYKCHyzL3Ci9LGE1gvwAAAY0"]
[Tue May 19 19:32:49.248997 2026] [:error] [pid 29622:tid 29633] [client 20.226.97.125:58306] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ayk.php"] [unique_id "agxKYTkOqPKWkPs_P15QIgAAAgk"]
[Tue May 19 19:32:50.234053 2026] [:error] [pid 38699:tid 38758] [client 20.226.97.125:38852] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agxKYr--Adsw_P-dthacygAAAFA"]
[Tue May 19 19:32:51.064373 2026] [:error] [pid 41573:tid 41581] [client 20.226.97.125:58327] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agxKYy1A2bd6JDSW9RaHKAAAAQY"]
[Tue May 19 19:32:51.938578 2026] [:error] [pid 38697:tid 38739] [client 20.226.97.125:46484] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agxKY6XP9pP6Kgt-msRKiwAAABg"]
[Tue May 19 19:32:52.697125 2026] [:error] [pid 38697:tid 38726] [client 20.226.97.125:50123] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/one.php"] [unique_id "agxKZKXP9pP6Kgt-msRKjAAAAAs"]
[Tue May 19 19:32:53.511110 2026] [:error] [pid 38697:tid 38731] [client 20.226.97.125:61150] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "agxKZaXP9pP6Kgt-msRKjwAAABA"]
[Tue May 19 19:32:54.209082 2026] [:error] [pid 41573:tid 41598] [client 20.226.97.125:50170] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "agxKZi1A2bd6JDSW9RaHKgAAARc"]
[Tue May 19 19:32:54.878333 2026] [:error] [pid 38697:tid 38735] [client 20.226.97.125:49718] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "agxKZqXP9pP6Kgt-msRKkQAAABQ"]
[Tue May 19 19:32:55.659105 2026] [:error] [pid 55881:tid 55898] [client 20.226.97.125:49614] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/tx79.php"] [unique_id "agxKZ--UExma0LUC7WACLAAAAk8"]
[Tue May 19 19:32:56.465288 2026] [:error] [pid 55881:tid 55893] [client 20.226.97.125:51905] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "agxKaO-UExma0LUC7WACLgAAAko"]
[Tue May 19 19:32:57.621599 2026] [:error] [pid 46896:tid 46922] [client 20.226.97.125:40320] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "agxKaaCHyzL3Ci9LGE1gwQAAAZg"]
[Tue May 19 19:32:58.409444 2026] [:error] [pid 41573:tid 41576] [client 20.226.97.125:41456] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "agxKai1A2bd6JDSW9RaHKwAAAQE"]
[Tue May 19 19:32:59.297380 2026] [:error] [pid 29823:tid 29860] [client 20.226.97.125:59594] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-class.php"] [unique_id "agxKa2O09C0nAz8vRk47VgAAAdU"]
[Tue May 19 19:33:00.023176 2026] [:error] [pid 41573:tid 41579] [client 20.226.97.125:54619] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "agxKbC1A2bd6JDSW9RaHLQAAAQQ"]
[Tue May 19 19:33:00.668461 2026] [:error] [pid 46896:tid 46901] [client 20.226.97.125:49695] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "agxKbKCHyzL3Ci9LGE1gwgAAAYM"]
[Tue May 19 19:33:01.499085 2026] [:error] [pid 46815:tid 46828] [client 20.226.97.125:51907] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "agxKbSPnRhJOmA06LgpwcQAAAUs"]
[Tue May 19 19:33:02.204532 2026] [:error] [pid 38697:tid 38734] [client 20.226.97.125:59610] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/8.php"] [unique_id "agxKbqXP9pP6Kgt-msRKkwAAABM"]
[Tue May 19 19:33:03.064929 2026] [:error] [pid 46815:tid 46818] [client 20.226.97.125:49008] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/options.php"] [unique_id "agxKbyPnRhJOmA06LgpwcgAAAUE"]
[Tue May 19 19:33:04.029849 2026] [:error] [pid 29622:tid 29629] [client 20.226.97.125:61582] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/options.php"] [unique_id "agxKcDkOqPKWkPs_P15QJQAAAgU"]
[Tue May 19 19:33:04.722072 2026] [:error] [pid 46815:tid 46826] [client 20.226.97.125:41450] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/options.php"] [unique_id "agxKcCPnRhJOmA06LgpwcwAAAUk"]
[Tue May 19 19:33:06.361645 2026] [:error] [pid 38699:tid 38751] [client 20.226.97.125:51931] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/options.php"] [unique_id "agxKcr--Adsw_P-dthaczAAAAEk"]
[Tue May 19 19:33:07.458605 2026] [:error] [pid 38705:tid 38782] [client 20.226.97.125:48976] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f5.php"] [unique_id "agxKc8g5dNOZ5umN9ltfAgAAAI0"]
[Tue May 19 19:33:08.197837 2026] [:error] [pid 38814:tid 38816] [client 20.226.97.125:61584] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f5.php"] [unique_id "agxKdAvkKuBwP0epzWecMQAAAMA"]
[Tue May 19 19:33:08.950978 2026] [:error] [pid 38814:tid 38831] [client 20.226.97.125:51947] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f5.php"] [unique_id "agxKdAvkKuBwP0epzWecMgAAAM8"]
[Tue May 19 19:33:09.690744 2026] [:error] [pid 55881:tid 55901] [client 20.226.97.125:48996] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/f5.php"] [unique_id "agxKde-UExma0LUC7WACMQAAAlI"]
[Tue May 19 19:33:10.563613 2026] [:error] [pid 55881:tid 55906] [client 20.226.97.125:49697] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "agxKdu-UExma0LUC7WACMgAAAlc"]
[Tue May 19 19:33:11.393450 2026] [:error] [pid 41573:tid 41591] [client 20.226.97.125:60830] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "agxKdy1A2bd6JDSW9RaHMQAAARA"]
[Tue May 19 19:33:12.091170 2026] [:error] [pid 41573:tid 41580] [client 20.226.97.125:51932] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "agxKeC1A2bd6JDSW9RaHMwAAAQU"]
[Tue May 19 19:33:13.004546 2026] [:error] [pid 29622:tid 29630] [client 20.226.97.125:49727] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alpha.php"] [unique_id "agxKeTkOqPKWkPs_P15QKAAAAgY"]
[Tue May 19 19:33:13.836346 2026] [:error] [pid 41573:tid 41597] [client 20.226.97.125:49691] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son1.php"] [unique_id "agxKeS1A2bd6JDSW9RaHNQAAARY"]
[Tue May 19 19:33:14.537335 2026] [:error] [pid 38697:tid 38736] [client 20.226.97.125:51927] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son1.php"] [unique_id "agxKeqXP9pP6Kgt-msRKlAAAABU"]
[Tue May 19 19:33:15.372783 2026] [:error] [pid 46896:tid 46920] [client 20.226.97.125:61168] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son1.php"] [unique_id "agxKe6CHyzL3Ci9LGE1gxAAAAZY"]
[Tue May 19 19:33:16.089808 2026] [:error] [pid 38699:tid 38760] [client 20.226.97.125:40346] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/son1.php"] [unique_id "agxKfL--Adsw_P-dthaczwAAAFI"]
[Tue May 19 19:33:17.044198 2026] [:error] [pid 29823:tid 29861] [client 20.226.97.125:41417] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "agxKfWO09C0nAz8vRk47WAAAAdY"]
[Tue May 19 19:33:17.981216 2026] [:error] [pid 29823:tid 29839] [client 20.226.97.125:41471] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "agxKfWO09C0nAz8vRk47WQAAAcQ"]
[Tue May 19 19:33:18.621873 2026] [:error] [pid 38697:tid 38721] [client 20.226.97.125:49610] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "agxKfqXP9pP6Kgt-msRKlQAAAAY"]
[Tue May 19 19:33:19.326711 2026] [:error] [pid 41573:tid 41594] [client 20.226.97.125:40335] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ggb.php"] [unique_id "agxKfy1A2bd6JDSW9RaHPwAAARM"]
[Tue May 19 19:33:20.064687 2026] [:error] [pid 38814:tid 38837] [client 20.226.97.125:60861] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amxloxxr.php"] [unique_id "agxKgAvkKuBwP0epzWecNAAAANU"]
[Tue May 19 19:33:21.047038 2026] [:error] [pid 46896:tid 46902] [client 20.226.97.125:50139] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amxloxxr.php"] [unique_id "agxKgaCHyzL3Ci9LGE1gxgAAAYQ"]
[Tue May 19 19:33:21.939883 2026] [:error] [pid 46815:tid 46825] [client 20.226.97.125:49002] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amxloxxr.php"] [unique_id "agxKgSPnRhJOmA06LgpweQAAAUg"]
[Tue May 19 19:33:22.644165 2026] [:error] [pid 55881:tid 55884] [client 20.226.97.125:41424] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/amxloxxr.php"] [unique_id "agxKgu-UExma0LUC7WACOAAAAkE"]
[Tue May 19 19:33:23.309318 2026] [:error] [pid 38699:tid 38745] [client 20.226.97.125:49676] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss.php"] [unique_id "agxKg7--Adsw_P-dthac0QAAAEM"]
[Tue May 19 19:33:24.189935 2026] [:error] [pid 38697:tid 38729] [client 20.226.97.125:51961] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss.php"] [unique_id "agxKhKXP9pP6Kgt-msRKmAAAAA4"]
[Tue May 19 19:33:25.046606 2026] [:error] [pid 41573:tid 41597] [client 20.226.97.125:50778] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss.php"] [unique_id "agxKhS1A2bd6JDSW9RaHRQAAARY"]
[Tue May 19 19:33:25.718868 2026] [:error] [pid 41573:tid 41593] [client 20.226.97.125:59639] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ss.php"] [unique_id "agxKhS1A2bd6JDSW9RaHRgAAARI"]
[Tue May 19 19:33:26.430328 2026] [:error] [pid 41573:tid 41589] [client 20.226.97.125:49004] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "agxKhi1A2bd6JDSW9RaHRwAAAQ4"]
[Tue May 19 19:33:27.089999 2026] [:error] [pid 29823:tid 29837] [client 20.226.97.125:50163] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "agxKh2O09C0nAz8vRk47ZQAAAcI"]
[Tue May 19 19:33:27.773676 2026] [:error] [pid 41573:tid 41583] [client 20.226.97.125:50129] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "agxKhy1A2bd6JDSW9RaHSAAAAQg"]
[Tue May 19 19:33:28.447804 2026] [:error] [pid 41573:tid 41586] [client 20.226.97.125:49686] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sadcut1.php"] [unique_id "agxKiC1A2bd6JDSW9RaHSgAAAQs"]
[Tue May 19 19:33:29.102451 2026] [:error] [pid 41573:tid 41598] [client 20.226.97.125:61571] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "agxKiS1A2bd6JDSW9RaHSwAAARc"]
[Tue May 19 19:33:31.089714 2026] [:error] [pid 29823:tid 29862] [client 20.226.97.125:50773] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "agxKi2O09C0nAz8vRk47ZgAAAdc"]
[Tue May 19 19:33:33.140892 2026] [:error] [pid 29823:tid 29839] [client 20.226.97.125:41961] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/rh.php"] [unique_id "agxKjWO09C0nAz8vRk47agAAAcQ"]
[Tue May 19 19:33:50.622527 2026] [:error] [pid 29823:tid 29853] [client 20.226.97.125:57355] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "agxKnmO09C0nAz8vRk47fQAAAc4"]
[Tue May 19 19:33:52.566094 2026] [:error] [pid 38699:tid 38747] [client 20.226.97.125:53046] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "agxKoL--Adsw_P-dthac2gAAAEU"]
[Tue May 19 19:33:53.967777 2026] [:error] [pid 55881:tid 55899] [client 20.226.97.125:31192] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "agxKoe-UExma0LUC7WACQgAAAlA"]
[Tue May 19 19:33:55.650193 2026] [:error] [pid 41573:tid 41580] [client 20.226.97.125:59090] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file2.php"] [unique_id "agxKoy1A2bd6JDSW9RaHUgAAAQU"]
[Tue May 19 19:33:57.268691 2026] [:error] [pid 41573:tid 41591] [client 20.226.97.125:50835] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "agxKpS1A2bd6JDSW9RaHVgAAARA"]
[Tue May 19 19:33:58.090465 2026] [:error] [pid 41573:tid 41582] [client 20.226.97.125:42478] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "agxKpi1A2bd6JDSW9RaHWQAAAQc"]
[Tue May 19 19:33:59.105493 2026] [:error] [pid 41573:tid 41598] [client 20.226.97.125:62046] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "agxKpy1A2bd6JDSW9RaHWwAAARc"]
[Tue May 19 19:34:00.020833 2026] [:error] [pid 41573:tid 41592] [client 20.226.97.125:50816] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index/function.php"] [unique_id "agxKqC1A2bd6JDSW9RaHXAAAARE"]
[Tue May 19 19:34:00.914575 2026] [:error] [pid 38699:tid 38749] [client 20.226.97.125:59084] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wk/index.php"] [unique_id "agxKqL--Adsw_P-dthac3wAAAEc"]
[Tue May 19 19:34:01.731002 2026] [:error] [pid 41573:tid 41599] [client 20.226.97.125:38144] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wk/index.php"] [unique_id "agxKqS1A2bd6JDSW9RaHYgAAARg"]
[Tue May 19 19:34:02.645026 2026] [:error] [pid 38697:tid 38718] [client 20.226.97.125:50864] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wk/index.php"] [unique_id "agxKqqXP9pP6Kgt-msRKmQAAAAM"]
[Tue May 19 19:34:03.584056 2026] [:error] [pid 38705:tid 38776] [client 20.226.97.125:38207] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wk/index.php"] [unique_id "agxKq8g5dNOZ5umN9ltfCwAAAIc"]
[Tue May 19 19:34:04.649546 2026] [:error] [pid 29823:tid 29841] [client 20.226.97.125:42460] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "agxKrGO09C0nAz8vRk47kwAAAcY"]
[Tue May 19 19:34:05.806535 2026] [:error] [pid 46815:tid 46839] [client 20.226.97.125:42461] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "agxKrSPnRhJOmA06LgpwfAAAAVY"]
[Tue May 19 19:34:07.237712 2026] [:error] [pid 29622:tid 29629] [client 20.226.97.125:65490] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "agxKrzkOqPKWkPs_P15QMwAAAgU"]
[Tue May 19 19:34:08.423957 2026] [:error] [pid 38814:tid 38822] [client 20.226.97.125:39858] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/alfa.php"] [unique_id "agxKsAvkKuBwP0epzWecRwAAAMY"]
[Tue May 19 19:34:10.401170 2026] [:error] [pid 29622:tid 29645] [client 20.226.97.125:61514] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-theme.php"] [unique_id "agxKsjkOqPKWkPs_P15QNQAAAhU"]
[Tue May 19 19:34:11.529490 2026] [:error] [pid 38705:tid 38772] [client 20.226.97.125:41424] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-theme.php"] [unique_id "agxKs8g5dNOZ5umN9ltfDgAAAIM"]
[Tue May 19 19:34:12.984013 2026] [:error] [pid 38699:tid 38753] [client 20.226.97.125:55621] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-theme.php"] [unique_id "agxKtL--Adsw_P-dthac4QAAAEs"]
[Tue May 19 19:34:14.223502 2026] [:error] [pid 46815:tid 46838] [client 20.226.97.125:39135] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-theme.php"] [unique_id "agxKtiPnRhJOmA06LgpwfgAAAVU"]
[Tue May 19 19:34:15.359806 2026] [:error] [pid 38814:tid 38825] [client 20.226.97.125:61837] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-file.php"] [unique_id "agxKtwvkKuBwP0epzWecTAAAAMk"]
[Tue May 19 19:34:16.646715 2026] [:error] [pid 55881:tid 55894] [client 20.226.97.125:39792] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-file.php"] [unique_id "agxKuO-UExma0LUC7WACRQAAAks"]
[Tue May 19 19:34:17.839285 2026] [:error] [pid 29622:tid 29625] [client 20.226.97.125:61505] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-file.php"] [unique_id "agxKuTkOqPKWkPs_P15QNwAAAgE"]
[Tue May 19 19:34:19.285924 2026] [:error] [pid 38814:tid 38833] [client 20.226.97.125:59996] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-file.php"] [unique_id "agxKuwvkKuBwP0epzWecTgAAANE"]
[Tue May 19 19:34:20.677556 2026] [:error] [pid 38814:tid 38829] [client 20.226.97.125:62319] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "agxKvAvkKuBwP0epzWecUAAAAM0"]
[Tue May 19 19:34:22.063815 2026] [:error] [pid 38814:tid 38831] [client 20.226.97.125:61877] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "agxKvgvkKuBwP0epzWecUgAAAM8"]
[Tue May 19 19:34:23.299732 2026] [:error] [pid 38699:tid 38760] [client 20.226.97.125:61884] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "agxKv7--Adsw_P-dthac5QAAAFI"]
[Tue May 19 19:34:24.502275 2026] [:error] [pid 38814:tid 38820] [client 20.226.97.125:39848] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/default.php"] [unique_id "agxKwAvkKuBwP0epzWecUwAAAMQ"]
[Tue May 19 19:34:25.857335 2026] [:error] [pid 55881:tid 55884] [client 20.226.97.125:61829] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "agxKwe-UExma0LUC7WACRgAAAkE"]
[Tue May 19 19:34:27.716822 2026] [:error] [pid 46896:tid 46911] [client 20.226.97.125:55575] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "agxKw6CHyzL3Ci9LGE1gywAAAY0"]
[Tue May 19 19:34:29.880387 2026] [:error] [pid 29622:tid 29639] [client 20.226.97.125:61869] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "agxKxTkOqPKWkPs_P15QOQAAAg8"]
[Tue May 19 19:34:30.906594 2026] [:error] [pid 38697:tid 38737] [client 20.226.97.125:31846] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mah.php"] [unique_id "agxKxqXP9pP6Kgt-msRKoQAAABY"]
[Tue May 19 19:34:31.623153 2026] [:error] [pid 38697:tid 38736] [client 20.226.97.125:39755] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "agxKx6XP9pP6Kgt-msRKogAAABU"]
[Tue May 19 19:34:32.679141 2026] [:error] [pid 46896:tid 46903] [client 20.226.97.125:31869] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "agxKyKCHyzL3Ci9LGE1gzgAAAYU"]
[Tue May 19 19:34:34.364227 2026] [:error] [pid 55881:tid 55886] [client 20.226.97.125:60019] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "agxKyu-UExma0LUC7WACSgAAAkM"]
[Tue May 19 19:34:35.266089 2026] [:error] [pid 38697:tid 38726] [client 20.226.97.125:59990] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/plugins.php"] [unique_id "agxKy6XP9pP6Kgt-msRKpwAAAAs"]
[Tue May 19 19:34:35.974361 2026] [:error] [pid 46815:tid 46826] [client 20.226.97.125:39745] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "agxKyyPnRhJOmA06LgpwgQAAAUk"]
[Tue May 19 19:34:37.127934 2026] [:error] [pid 55881:tid 55897] [client 20.226.97.125:55656] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "agxKze-UExma0LUC7WACSwAAAk4"]
[Tue May 19 19:34:38.196214 2026] [:error] [pid 38699:tid 38749] [client 20.226.97.125:38973] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "agxKzr--Adsw_P-dthac6AAAAEc"]
[Tue May 19 19:34:39.163534 2026] [:error] [pid 41573:tid 41579] [client 20.226.97.125:60032] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sf.php"] [unique_id "agxKzy1A2bd6JDSW9RaHZgAAAQQ"]
[Tue May 19 19:34:39.979427 2026] [:error] [pid 38699:tid 38754] [client 20.226.97.125:55645] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "agxKz7--Adsw_P-dthac6wAAAEw"]
[Tue May 19 19:34:40.706289 2026] [:error] [pid 55881:tid 55895] [client 20.226.97.125:31857] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "agxK0O-UExma0LUC7WACTQAAAkw"]
[Tue May 19 19:34:41.540292 2026] [:error] [pid 46896:tid 46906] [client 20.226.97.125:40852] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "agxK0aCHyzL3Ci9LGE1g0QAAAYg"]
[Tue May 19 19:34:42.510572 2026] [:error] [pid 38705:tid 38787] [client 20.226.97.125:59991] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/a.php"] [unique_id "agxK0sg5dNOZ5umN9ltfEQAAAJI"]
[Tue May 19 19:34:43.158157 2026] [:error] [pid 38705:tid 38791] [client 20.226.97.125:59980] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "agxK08g5dNOZ5umN9ltfEwAAAJY"]
[Tue May 19 19:34:43.894650 2026] [:error] [pid 38705:tid 38783] [client 20.226.97.125:40837] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "agxK08g5dNOZ5umN9ltfFAAAAI4"]
[Tue May 19 19:34:44.592803 2026] [:error] [pid 55881:tid 55899] [client 20.226.97.125:43651] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "agxK1O-UExma0LUC7WACTgAAAlA"]
[Tue May 19 19:34:45.290003 2026] [:error] [pid 46815:tid 46821] [client 20.226.97.125:55570] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/k.php"] [unique_id "agxK1SPnRhJOmA06LgpwggAAAUQ"]
[Tue May 19 19:34:46.122165 2026] [:error] [pid 29622:tid 29645] [client 20.226.97.125:38924] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ini.php"] [unique_id "agxK1jkOqPKWkPs_P15QQQAAAhU"]
[Tue May 19 19:34:47.060338 2026] [:error] [pid 55881:tid 55903] [client 20.226.97.125:31828] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ini.php"] [unique_id "agxK1--UExma0LUC7WACTwAAAlQ"]
[Tue May 19 19:34:48.096075 2026] [:error] [pid 55881:tid 55888] [client 20.226.97.125:31622] [client 20.226.97.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ini.php"] [unique_id "agxK2O-UExma0LUC7WACUQAAAkU"]
[Tue May 19 19:34:52.848457 2026] [autoindex:error] [pid 38697:tid 38715] [client 20.226.97.125:60047] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 19 19:34:56.588396 2026] [:error] [pid 38697:tid 38731] [client 20.226.97.125:60047] [client 20.226.97.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "hotbooksbookeeping2.com"] [uri "/fm.php"] [unique_id "agxK4KXP9pP6Kgt-msRKtgAAABA"]
[Tue May 19 20:37:49.481075 2026] [:error] [pid 38699:tid 38755] [client 120.61.39.78:61361] [client 120.61.39.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.61.39.78, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agxZnb--Adsw_P-dthaiSAAAAE0"]
[Tue May 19 20:37:59.276539 2026] [:error] [pid 41573:tid 41596] [client 120.61.39.78:61636] [client 120.61.39.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.61.39.78, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agxZpy1A2bd6JDSW9RaRtwAAARU"]
[Tue May 19 20:38:09.717110 2026] [:error] [pid 46815:tid 46835] [client 120.61.39.78:61975] [client 120.61.39.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.61.39.78, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agxZsSPnRhJOmA06Lgp0PAAAAVI"]
[Tue May 19 20:38:20.100808 2026] [:error] [pid 38697:tid 38736] [client 120.61.39.78:62323] [client 120.61.39.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.61.39.78, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agxZvKXP9pP6Kgt-msRSJAAAABU"]
[Tue May 19 20:38:30.489249 2026] [:error] [pid 41573:tid 41588] [client 120.61.39.78:62654] [client 120.61.39.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.61.39.78, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agxZxi1A2bd6JDSW9RaRvAAAAQ0"]
[Tue May 19 23:41:28.162767 2026] [:error] [pid 41573:tid 41589] [client 43.135.145.73:51502] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agyEqC1A2bd6JDSW9Ra0pgAAAQ4"]
[Wed May 20 00:30:11.262646 2026] [:error] [pid 38814:tid 38828] [client 209.141.37.7:58614] [client 209.141.37.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.7, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agyQEwvkKuBwP0epzWerZgAAAMw"]
[Wed May 20 00:30:33.149679 2026] [:error] [pid 38697:tid 38734] [client 209.141.37.7:57888] [client 209.141.37.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.7, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agyQKaXP9pP6Kgt-msRoQgAAABM"]
[Wed May 20 00:31:10.617756 2026] [:error] [pid 46815:tid 46818] [client 209.141.37.7:50931] [client 209.141.37.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.37.7, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "agyQTiPnRhJOmA06LgqHQgAAAUE"]
[Wed May 20 00:43:50.308693 2026] [:error] [pid 41573:tid 41598] [client 177.93.67.212:3733] [client 177.93.67.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.93.67.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agyTRi1A2bd6JDSW9Ra8nwAAARc"]
[Wed May 20 00:43:59.721381 2026] [:error] [pid 29823:tid 29852] [client 177.93.67.212:3520] [client 177.93.67.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.93.67.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agyTT2O09C0nAz8vRk5qAgAAAc0"]
[Wed May 20 00:44:10.329006 2026] [:error] [pid 41573:tid 41576] [client 177.93.67.212:5025] [client 177.93.67.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.93.67.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agyTWi1A2bd6JDSW9Ra8qQAAAQE"]
[Wed May 20 00:44:20.954327 2026] [:error] [pid 38697:tid 38730] [client 177.93.67.212:5036] [client 177.93.67.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.93.67.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agyTZKXP9pP6Kgt-msRpgwAAAA8"]
[Wed May 20 00:45:38.072298 2026] [:error] [pid 29823:tid 29856] [client 177.93.67.212:4742] [client 177.93.67.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.93.67.212, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agyTsmO09C0nAz8vRk5qIAAAAdE"]
[Wed May 20 01:17:57.870563 2026] [:error] [pid 41573:tid 41583] [client 187.89.254.89:62060] [client 187.89.254.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.89.254.89, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agybRS1A2bd6JDSW9RbFtQAAAQg"]
[Wed May 20 01:18:06.391779 2026] [:error] [pid 41573:tid 41578] [client 187.89.254.89:62405] [client 187.89.254.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.89.254.89, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agybTi1A2bd6JDSW9RbFuwAAAQM"]
[Wed May 20 01:18:16.879618 2026] [:error] [pid 41573:tid 41587] [client 187.89.254.89:62782] [client 187.89.254.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.89.254.89, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agybWC1A2bd6JDSW9RbFwwAAAQw"]
[Wed May 20 01:18:27.286980 2026] [:error] [pid 38697:tid 38727] [client 187.89.254.89:63140] [client 187.89.254.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.89.254.89, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agybY6XP9pP6Kgt-msRtQwAAAAw"]
[Wed May 20 01:18:37.869021 2026] [:error] [pid 41573:tid 41579] [client 187.89.254.89:63497] [client 187.89.254.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.89.254.89, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agybbS1A2bd6JDSW9RbFyAAAAQQ"]
[Wed May 20 01:42:21.689818 2026] [:error] [pid 38699:tid 38762] [client 223.178.84.73:12888] [client 223.178.84.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.84.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agyg_b--Adsw_P-dthbUJwAAAFQ"]
[Wed May 20 01:42:32.295267 2026] [:error] [pid 38705:tid 38790] [client 223.178.84.73:30553] [client 223.178.84.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.84.73, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agyhCMg5dNOZ5umN9ltv-AAAAJU"]
[Wed May 20 01:47:44.494530 2026] [:error] [pid 46815:tid 46841] [client 51.75.118.147:33896] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "agyiQCPnRhJOmA06LgqOqAAAAVg"]
[Wed May 20 01:47:47.016733 2026] [:error] [pid 29823:tid 29863] [client 51.75.118.147:38382] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "agyiQ2O09C0nAz8vRk5zwgAAAdg"]
[Wed May 20 01:47:49.367518 2026] [:error] [pid 41573:tid 41596] [client 51.75.118.147:38396] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "agyiRS1A2bd6JDSW9RbM8wAAARU"]
[Wed May 20 01:47:51.750833 2026] [:error] [pid 41573:tid 41599] [client 51.75.118.147:60182] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "agyiRy1A2bd6JDSW9RbM9QAAARg"]
[Wed May 20 01:47:54.226574 2026] [:error] [pid 55881:tid 55898] [client 51.75.118.147:60198] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "agyiSu-UExma0LUC7WAbFwAAAk8"]
[Wed May 20 01:47:56.780758 2026] [:error] [pid 46815:tid 46821] [client 51.75.118.147:60206] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "agyiTCPnRhJOmA06LgqOrQAAAUQ"]
[Wed May 20 01:47:59.153955 2026] [:error] [pid 38697:tid 38727] [client 51.75.118.147:60218] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "agyiT6XP9pP6Kgt-msRwlgAAAAw"]
[Wed May 20 01:48:01.531931 2026] [:error] [pid 41573:tid 41579] [client 51.75.118.147:55468] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "agyiUS1A2bd6JDSW9RbM-gAAAQQ"]
[Wed May 20 01:48:04.011772 2026] [:error] [pid 41573:tid 41584] [client 51.75.118.147:55478] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "agyiVC1A2bd6JDSW9RbNAAAAAQk"]
[Wed May 20 01:48:06.593851 2026] [:error] [pid 41573:tid 41585] [client 51.75.118.147:55482] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "agyiVi1A2bd6JDSW9RbNCgAAAQo"]
[Wed May 20 01:48:09.121171 2026] [:error] [pid 46815:tid 46823] [client 51.75.118.147:55496] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "agyiWSPnRhJOmA06LgqOsAAAAUY"]
[Wed May 20 01:48:11.669849 2026] [:error] [pid 55881:tid 55896] [client 51.75.118.147:39958] [client 51.75.118.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "agyiW--UExma0LUC7WAbHwAAAk0"]
[Wed May 20 03:08:37.180406 2026] [:error] [pid 41573:tid 41576] [client 179.9.179.25:56790] [client 179.9.179.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.9.179.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agy1NS1A2bd6JDSW9Rbf3gAAAQE"]
[Wed May 20 03:08:45.978368 2026] [:error] [pid 38705:tid 38774] [client 179.9.179.25:57098] [client 179.9.179.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.9.179.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agy1Pcg5dNOZ5umN9lt0bwAAAIU"]
[Wed May 20 03:08:56.652188 2026] [:error] [pid 38699:tid 38759] [client 179.9.179.25:57408] [client 179.9.179.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.9.179.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agy1SL--Adsw_P-dthbhGgAAAFE"]
[Wed May 20 03:09:07.285811 2026] [:error] [pid 46815:tid 46832] [client 179.9.179.25:57700] [client 179.9.179.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.9.179.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agy1UyPnRhJOmA06LgqVOgAAAU8"]
[Wed May 20 03:09:18.264338 2026] [:error] [pid 46896:tid 46912] [client 179.9.179.25:58000] [client 179.9.179.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.9.179.25, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "agy1XqCHyzL3Ci9LGE12pwAAAY4"]
[Wed May 20 05:10:13.741456 2026] [:error] [pid 59246:tid 59307] [client 43.156.232.134:59376] [client 43.156.232.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "agzRtWXuF32eb0pGiHwVWgAAAIA"]
[Wed May 20 05:32:55.058067 2026] [:error] [pid 57834:tid 57898] [client 20.226.79.57:1547] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agzXB3TOfwZ09EhqoYD7gAAAAoc"]
[Wed May 20 05:32:56.328429 2026] [:error] [pid 59244:tid 59256] [client 20.226.79.57:1116] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agzXCLxU0SdQQE7pLs20aAAAAAM"]
[Wed May 20 05:32:57.587024 2026] [:error] [pid 59349:tid 59354] [client 20.226.79.57:1140] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agzXCTvvxTUy-ppKSZWLPAAAAMM"]
[Wed May 20 05:32:58.845508 2026] [:error] [pid 57832:tid 57855] [client 20.226.79.57:1819] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "agzXCkNip5HpFD8GxxX3OQAAAhI"]
[Wed May 20 07:40:15.404185 2026] [:error] [pid 57774:tid 57812] [client 43.157.98.187:50586] [client 43.157.98.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agz036zH4LWfnGU0RXC9EwAAAck"]
[Wed May 20 08:07:58.079173 2026] [:error] [pid 41278:tid 41318] [client 49.233.45.47:34974] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "agz7XvWiNKASEfiGdwZjbwAAAEk"]
[Wed May 20 09:01:59.028040 2026] [:error] [pid 44059:tid 44069] [client 147.135.214.103:52040] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "ag0IBxfFs-oSOOcyjyxa0QAAAQg"]
[Wed May 20 09:02:01.403652 2026] [:error] [pid 44059:tid 44080] [client 147.135.214.103:34104] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "ag0ICRfFs-oSOOcyjyxa3QAAARM"]
[Wed May 20 09:02:03.854021 2026] [:error] [pid 44059:tid 44073] [client 147.135.214.103:60096] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "ag0ICxfFs-oSOOcyjyxa6AAAAQw"]
[Wed May 20 09:02:06.424537 2026] [:error] [pid 41279:tid 41345] [client 147.135.214.103:60110] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ag0IDrEFyfaehGZbt4w_KwAAAMk"]
[Wed May 20 09:02:08.860028 2026] [:error] [pid 41364:tid 41386] [client 147.135.214.103:60118] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "ag0IEBKTmyvxtNXrN-hCgwAAAJQ"]
[Wed May 20 09:02:11.326585 2026] [:error] [pid 41277:tid 41300] [client 147.135.214.103:60122] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ag0IE7TTCltJmboB5ufCCwAAABI"]
[Wed May 20 09:02:13.618357 2026] [:error] [pid 44059:tid 44068] [client 147.135.214.103:60136] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "ag0IFRfFs-oSOOcyjyxbDgAAAQc"]
[Wed May 20 09:02:16.013664 2026] [:error] [pid 41364:tid 41381] [client 147.135.214.103:55506] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "ag0IGBKTmyvxtNXrN-hCkwAAAI8"]
[Wed May 20 09:02:18.582243 2026] [:error] [pid 41279:tid 41353] [client 147.135.214.103:55516] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "ag0IGrEFyfaehGZbt4w_MgAAANE"]
[Wed May 20 09:02:20.979486 2026] [:error] [pid 41277:tid 41288] [client 147.135.214.103:55522] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ag0IHLTTCltJmboB5ufCGQAAAAY"]
[Wed May 20 09:02:23.396885 2026] [:error] [pid 44059:tid 44077] [client 147.135.214.103:55534] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ag0IHxfFs-oSOOcyjyxbJwAAARA"]
[Wed May 20 09:02:25.860935 2026] [:error] [pid 41277:tid 41304] [client 147.135.214.103:51126] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ag0IIbTTCltJmboB5ufCKAAAABY"]
[Wed May 20 09:02:28.291625 2026] [:error] [pid 44059:tid 44069] [client 147.135.214.103:51140] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ag0IJBfFs-oSOOcyjyxbLQAAAQg"]
[Wed May 20 09:02:30.840409 2026] [:error] [pid 41364:tid 41369] [client 147.135.214.103:51148] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ag0IJhKTmyvxtNXrN-hCtAAAAIM"]
[Wed May 20 09:02:33.126031 2026] [:error] [pid 44059:tid 44073] [client 147.135.214.103:51164] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ag0IKRfFs-oSOOcyjyxbMgAAAQw"]
[Wed May 20 09:02:35.676073 2026] [:error] [pid 41364:tid 41383] [client 147.135.214.103:60672] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ag0IKxKTmyvxtNXrN-hCwwAAAJE"]
[Wed May 20 09:02:38.054904 2026] [:error] [pid 41277:tid 41299] [client 147.135.214.103:60684] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ag0ILrTTCltJmboB5ufCMgAAABE"]
[Wed May 20 09:02:40.583933 2026] [:error] [pid 41364:tid 41375] [client 147.135.214.103:60688] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ag0IMBKTmyvxtNXrN-hC4QAAAIk"]
[Wed May 20 09:02:42.957964 2026] [:error] [pid 44059:tid 44084] [client 147.135.214.103:60690] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ag0IMhfFs-oSOOcyjyxbOwAAARc"]
[Wed May 20 09:02:45.491793 2026] [:error] [pid 44059:tid 44076] [client 147.135.214.103:35742] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ag0INRfFs-oSOOcyjyxbQQAAAQ8"]
[Wed May 20 09:02:47.883744 2026] [:error] [pid 44059:tid 44077] [client 147.135.214.103:35754] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ag0INxfFs-oSOOcyjyxbRgAAARA"]
[Wed May 20 09:02:50.405327 2026] [:error] [pid 41278:tid 41311] [client 147.135.214.103:35768] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ag0IOvWiNKASEfiGdwZtrQAAAEI"]
[Wed May 20 09:02:52.936968 2026] [:error] [pid 41278:tid 41319] [client 147.135.214.103:35774] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ag0IPPWiNKASEfiGdwZtsQAAAEo"]
[Wed May 20 09:02:55.440356 2026] [:error] [pid 41364:tid 41380] [client 147.135.214.103:45202] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ag0IPxKTmyvxtNXrN-hC-wAAAI4"]
[Wed May 20 09:03:25.894332 2026] [:error] [pid 41277:tid 41301] [client 147.135.214.103:45208] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ag0IXbTTCltJmboB5ufCXQAAABM"]
[Wed May 20 09:03:28.327321 2026] [:error] [pid 41364:tid 41375] [client 147.135.214.103:45892] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ag0IYBKTmyvxtNXrN-hDPwAAAIk"]
[Wed May 20 09:03:30.815341 2026] [:error] [pid 44059:tid 44075] [client 147.135.214.103:45902] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ag0IYhfFs-oSOOcyjyxbjgAAAQ4"]
[Wed May 20 09:03:33.168364 2026] [:error] [pid 44059:tid 44069] [client 147.135.214.103:45908] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ag0IZRfFs-oSOOcyjyxblwAAAQg"]
[Wed May 20 09:03:35.699765 2026] [:error] [pid 41364:tid 41380] [client 147.135.214.103:59456] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ag0IZxKTmyvxtNXrN-hDRgAAAI4"]
[Wed May 20 09:03:38.135478 2026] [:error] [pid 41279:tid 41337] [client 147.135.214.103:59466] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ag0IarEFyfaehGZbt4w_bQAAAME"]
[Wed May 20 09:03:40.456655 2026] [:error] [pid 44059:tid 44069] [client 147.135.214.103:59474] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ag0IbBfFs-oSOOcyjyxbqwAAAQg"]
[Wed May 20 09:03:43.103195 2026] [:error] [pid 41278:tid 41312] [client 147.135.214.103:59488] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ag0Ib_WiNKASEfiGdwZt5gAAAEM"]
[Wed May 20 09:03:45.581640 2026] [:error] [pid 41278:tid 41321] [client 147.135.214.103:45862] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ag0IcfWiNKASEfiGdwZt8QAAAEw"]
[Wed May 20 09:03:48.050456 2026] [:error] [pid 41279:tid 41353] [client 147.135.214.103:45868] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ag0IdLEFyfaehGZbt4w_mgAAANE"]
[Wed May 20 09:03:50.378368 2026] [:error] [pid 44059:tid 44069] [client 147.135.214.103:45880] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ag0IdhfFs-oSOOcyjyxcFAAAAQg"]
[Wed May 20 09:03:52.691855 2026] [:error] [pid 41364:tid 41373] [client 147.135.214.103:45896] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ag0IeBKTmyvxtNXrN-hDWgAAAIc"]
[Wed May 20 09:03:55.177761 2026] [:error] [pid 44059:tid 44065] [client 147.135.214.103:56190] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ag0IexfFs-oSOOcyjyxcHgAAAQQ"]
[Wed May 20 09:03:57.641356 2026] [:error] [pid 41279:tid 41353] [client 147.135.214.103:56198] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ag0IfbEFyfaehGZbt4w_qgAAANE"]
[Wed May 20 09:04:00.126092 2026] [:error] [pid 44059:tid 44078] [client 147.135.214.103:56200] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ag0IgBfFs-oSOOcyjyxcKwAAARE"]
[Wed May 20 09:04:02.586006 2026] [:error] [pid 41277:tid 41284] [client 147.135.214.103:56214] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ag0IgrTTCltJmboB5ufCggAAAAI"]
[Wed May 20 09:04:05.051918 2026] [:error] [pid 41278:tid 41321] [client 147.135.214.103:50512] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ag0IhfWiNKASEfiGdwZuAQAAAEw"]
[Wed May 20 09:04:07.519517 2026] [:error] [pid 44059:tid 44083] [client 147.135.214.103:50518] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ag0IhxfFs-oSOOcyjyxcQgAAARY"]
[Wed May 20 09:04:09.814026 2026] [:error] [pid 44059:tid 44078] [client 147.135.214.103:50530] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ag0IiRfFs-oSOOcyjyxcSAAAARE"]
[Wed May 20 09:04:12.126214 2026] [:error] [pid 41279:tid 41348] [client 147.135.214.103:50540] [client 147.135.214.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ag0IjLEFyfaehGZbt4w_tgAAAMw"]
[Wed May 20 10:32:35.881052 2026] [:error] [pid 41278:tid 41318] [client 43.156.109.53:34394] [client 43.156.109.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag0dQ_WiNKASEfiGdwZ7QQAAAEk"]
[Wed May 20 11:03:39.254867 2026] [:error] [pid 41364:tid 41369] [client 129.28.84.30:58282] [client 129.28.84.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag0kixKTmyvxtNXrN-hlaQAAAIM"]
[Wed May 20 12:12:14.559053 2026] [:error] [pid 44059:tid 44080] [client 180.251.148.123:58357] [client 180.251.148.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.251.148.123, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag00nhfFs-oSOOcyjyyjZwAAARM"]
[Wed May 20 12:12:33.751776 2026] [:error] [pid 44059:tid 44067] [client 180.251.148.123:58791] [client 180.251.148.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.251.148.123, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag00sRfFs-oSOOcyjyyjdwAAAQY"]
[Wed May 20 12:12:51.038249 2026] [:error] [pid 44059:tid 44085] [client 180.251.148.123:59258] [client 180.251.148.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.251.148.123, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag00wxfFs-oSOOcyjyyjggAAARg"]
[Wed May 20 12:13:07.402158 2026] [:error] [pid 44059:tid 44071] [client 180.251.148.123:59673] [client 180.251.148.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.251.148.123, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag000xfFs-oSOOcyjyyjowAAAQo"]
[Wed May 20 12:13:24.406953 2026] [:error] [pid 41278:tid 41331] [client 180.251.148.123:60141] [client 180.251.148.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.251.148.123, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag005PWiNKASEfiGdwaKEwAAAFY"]
[Wed May 20 12:26:48.340608 2026] [:error] [pid 7731:tid 7750] [client 116.254.97.200:1754] [client 116.254.97.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.254.97.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag04CH9qQlHXbkl2nEuBYAAAAZE"]
[Wed May 20 12:26:48.340666 2026] [:error] [pid 7731:tid 7741] [client 116.254.97.200:57279] [client 116.254.97.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.254.97.200, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag04CH9qQlHXbkl2nEuBYQAAAYg"]
[Wed May 20 12:58:34.961942 2026] [:error] [pid 44059:tid 44083] [client 129.226.151.24:53126] [client 129.226.151.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag0_ehfFs-oSOOcyjyyyUAAAARY"]
[Wed May 20 13:19:10.306788 2026] [:error] [pid 41364:tid 41366] [client 202.164.132.95:23711] [client 202.164.132.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.164.132.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1EThKTmyvxtNXrN-iG_wAAAIA"]
[Wed May 20 13:19:20.481704 2026] [:error] [pid 44059:tid 44066] [client 202.164.132.95:19368] [client 202.164.132.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.164.132.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1EWBfFs-oSOOcyjyy5cwAAAQU"]
[Wed May 20 13:19:31.152432 2026] [:error] [pid 41277:tid 41291] [client 202.164.132.95:22279] [client 202.164.132.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.164.132.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1EY7TTCltJmboB5ufh2wAAAAk"]
[Wed May 20 13:19:41.572717 2026] [:error] [pid 44059:tid 44061] [client 202.164.132.95:19635] [client 202.164.132.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.164.132.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1EbRfFs-oSOOcyjyy5fAAAAQA"]
[Wed May 20 13:19:52.907292 2026] [:error] [pid 7664:tid 7667] [client 202.164.132.95:21596] [client 202.164.132.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.164.132.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1EeHZ8s7o3eiqT2kvEhQAAAUA"]
[Wed May 20 13:41:42.618966 2026] [:error] [pid 44059:tid 44065] [client 111.92.131.22:55139] [client 111.92.131.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.131.22, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1JlhfFs-oSOOcyjyzALQAAAQQ"]
[Wed May 20 13:41:52.257199 2026] [:error] [pid 41279:tid 41339] [client 111.92.131.22:55205] [client 111.92.131.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.131.22, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1JoLEFyfaehGZbt4xt7AAAAMM"]
[Wed May 20 13:42:03.060387 2026] [:error] [pid 7731:tid 7750] [client 111.92.131.22:55025] [client 111.92.131.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.131.22, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1Jq39qQlHXbkl2nEuTEgAAAZE"]
[Wed May 20 13:42:13.567731 2026] [:error] [pid 7731:tid 7734] [client 111.92.131.22:55291] [client 111.92.131.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.131.22, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1JtX9qQlHXbkl2nEuTIQAAAYE"]
[Wed May 20 13:42:24.300351 2026] [:error] [pid 41279:tid 41351] [client 111.92.131.22:55816] [client 111.92.131.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.92.131.22, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1JwLEFyfaehGZbt4xt7wAAAM8"]
[Wed May 20 14:21:08.001772 2026] [:error] [pid 41278:tid 41311] [client 196.189.154.122:10702] [client 196.189.154.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.154.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1S1PWiNKASEfiGdwaV1wAAAEI"]
[Wed May 20 14:21:32.909300 2026] [:error] [pid 7664:tid 7683] [client 196.189.154.122:10354] [client 196.189.154.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.154.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1S7HZ8s7o3eiqT2kvNDgAAAVA"]
[Wed May 20 14:21:42.284178 2026] [:error] [pid 41278:tid 41312] [client 196.189.154.122:10422] [client 196.189.154.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.154.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1S9vWiNKASEfiGdwaV6wAAAEM"]
[Wed May 20 14:21:56.445032 2026] [:error] [pid 7731:tid 7738] [client 196.189.154.122:11067] [client 196.189.154.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.154.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1TBH9qQlHXbkl2nEuauAAAAYU"]
[Wed May 20 14:22:49.156379 2026] [:error] [pid 41364:tid 41382] [client 196.189.154.122:27872] [client 196.189.154.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.189.154.122, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1TORKTmyvxtNXrN-iSYgAAAJA"]
[Wed May 20 14:33:59.704375 2026] [:error] [pid 41278:tid 41323] [client 34.46.57.55:59862] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag1V1_WiNKASEfiGdwaXJQAAAE4"]
[Wed May 20 14:34:00.093885 2026] [:error] [pid 41364:tid 41372] [client 34.46.57.55:62967] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag1V2BKTmyvxtNXrN-iUjAAAAIY"]
[Wed May 20 14:34:00.480883 2026] [:error] [pid 7731:tid 7741] [client 34.46.57.55:64242] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2H9qQlHXbkl2nEueigAAAYg"]
[Wed May 20 15:36:14.016613 2026] [:error] [pid 7731:tid 7733] [client 43.153.208.49:46448] [client 43.153.208.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag1kbn9qQlHXbkl2nEurwQAAAYA"]
[Wed May 20 16:46:37.407970 2026] [:error] [pid 41279:tid 41340] [client 45.130.203.138:24111] [client 45.130.203.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/HEAD"] [unique_id "ag107bEFyfaehGZbt4x-0gAAAMQ"]
[Wed May 20 16:49:35.349523 2026] [:error] [pid 44059:tid 44083] [client 209.50.174.67:61823] [client 209.50.174.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "ag11nxfFs-oSOOcyjyzvSAAAARY"]
[Wed May 20 16:49:37.483984 2026] [:error] [pid 7664:tid 7684] [client 209.50.174.67:55747] [client 209.50.174.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "ag11oXZ8s7o3eiqT2kvfaAAAAVE"]
[Wed May 20 16:59:31.555766 2026] [:error] [pid 41279:tid 41345] [client 103.174.28.79:62913] [client 103.174.28.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.28.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag1387EFyfaehGZbt4yAgQAAAMk"]
[Wed May 20 16:59:41.861370 2026] [:error] [pid 41279:tid 41343] [client 103.174.28.79:63438] [client 103.174.28.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.28.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag13_bEFyfaehGZbt4yAiwAAAMc"]
[Wed May 20 16:59:52.590475 2026] [:error] [pid 44059:tid 44071] [client 103.174.28.79:63953] [client 103.174.28.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.28.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag14CBfFs-oSOOcyjyzxkwAAAQo"]
[Wed May 20 17:00:03.014472 2026] [:error] [pid 7664:tid 7679] [client 103.174.28.79:64315] [client 103.174.28.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.28.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag14E3Z8s7o3eiqT2kvhEAAAAUw"]
[Wed May 20 17:00:13.451233 2026] [:error] [pid 7731:tid 7748] [client 103.174.28.79:64669] [client 103.174.28.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.28.79, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag14HX9qQlHXbkl2nEvHewAAAY8"]
[Wed May 20 17:11:43.742284 2026] [:error] [pid 44059:tid 44061] [client 36.91.75.189:64513] [client 36.91.75.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.91.75.189, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag16zxfFs-oSOOcyjyzz0QAAAQA"]
[Wed May 20 18:05:10.351773 2026] [:error] [pid 7731:tid 7736] [client 43.164.197.117:34526] [client 43.164.197.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag2HVn9qQlHXbkl2nEvakwAAAYM"]
[Wed May 20 19:23:44.512796 2026] [:error] [pid 7731:tid 7735] [client 147.135.212.200:37738] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "ag2ZwH9qQlHXbkl2nEv4XAAAAYI"]
[Wed May 20 19:23:46.960048 2026] [:error] [pid 41277:tid 41284] [client 147.135.212.200:33968] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "ag2ZwrTTCltJmboB5uf7HAAAAAI"]
[Wed May 20 19:23:49.412739 2026] [:error] [pid 41364:tid 41384] [client 147.135.212.200:33980] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ag2ZxRKTmyvxtNXrN-jElgAAAJI"]
[Wed May 20 19:23:51.734498 2026] [:error] [pid 44059:tid 44075] [client 147.135.212.200:33984] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ag2ZxxfFs-oSOOcyjywRHgAAAQ4"]
[Wed May 20 19:23:54.209947 2026] [:error] [pid 41277:tid 41291] [client 147.135.212.200:33992] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ag2ZyrTTCltJmboB5uf7KgAAAAk"]
[Wed May 20 19:23:56.527922 2026] [:error] [pid 7731:tid 7748] [client 147.135.212.200:34008] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ag2ZzH9qQlHXbkl2nEv4XQAAAY8"]
[Wed May 20 19:23:58.862975 2026] [:error] [pid 41364:tid 41387] [client 147.135.212.200:38486] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ag2ZzhKTmyvxtNXrN-jEpwAAAJU"]
[Wed May 20 19:24:01.326409 2026] [:error] [pid 41278:tid 41309] [client 147.135.212.200:38490] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ag2Z0fWiNKASEfiGdwavPgAAAEA"]
[Wed May 20 19:24:03.647643 2026] [:error] [pid 7731:tid 7750] [client 147.135.212.200:38506] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ag2Z039qQlHXbkl2nEv4ZQAAAZE"]
[Wed May 20 19:24:06.133118 2026] [:error] [pid 41279:tid 41350] [client 147.135.212.200:38518] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ag2Z1rEFyfaehGZbt4yPvAAAAM4"]
[Wed May 20 19:24:08.451952 2026] [:error] [pid 7731:tid 7734] [client 147.135.212.200:37202] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ag2Z2H9qQlHXbkl2nEv4awAAAYE"]
[Wed May 20 19:24:10.757333 2026] [:error] [pid 7731:tid 7753] [client 147.135.212.200:37212] [client 147.135.212.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ag2Z2n9qQlHXbkl2nEv4cQAAAZQ"]
[Wed May 20 20:04:21.097017 2026] [:error] [pid 7731:tid 7738] [client 103.70.197.109:7729] [client 103.70.197.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.197.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag2jRX9qQlHXbkl2nEsHcwAAAYU"]
[Wed May 20 20:04:31.501098 2026] [:error] [pid 7731:tid 7743] [client 103.70.197.109:11275] [client 103.70.197.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.197.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag2jT39qQlHXbkl2nEsHiAAAAYo"]
[Wed May 20 20:04:42.096190 2026] [:error] [pid 7664:tid 7672] [client 103.70.197.109:14340] [client 103.70.197.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.197.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag2jWnZ8s7o3eiqT2kv8jwAAAUU"]
[Wed May 20 20:04:52.987081 2026] [:error] [pid 7731:tid 7739] [client 103.70.197.109:17236] [client 103.70.197.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.197.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag2jZH9qQlHXbkl2nEsHoQAAAYY"]
[Wed May 20 20:05:03.718376 2026] [:error] [pid 44059:tid 44078] [client 103.70.197.109:19638] [client 103.70.197.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.70.197.109, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag2jbxfFs-oSOOcyjywbvQAAARE"]
[Wed May 20 20:05:09.865948 2026] [:error] [pid 41277:tid 41294] [client 94.249.91.165:48620] [client 94.249.91.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.91.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag2jdbTTCltJmboB5uf_aQAAAAw"]
[Wed May 20 20:05:18.268117 2026] [:error] [pid 41277:tid 41284] [client 94.249.91.165:50393] [client 94.249.91.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.91.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag2jfrTTCltJmboB5uf_cQAAAAI"]
[Wed May 20 20:05:20.519098 2026] [:error] [pid 44059:tid 44080] [client 94.249.91.165:50182] [client 94.249.91.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.91.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag2jgBfFs-oSOOcyjywbxAAAARM"]
[Wed May 20 20:05:29.229854 2026] [:error] [pid 41279:tid 41357] [client 94.249.91.165:7446] [client 94.249.91.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.91.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag2jibEFyfaehGZbt4yVjAAAANU"]
[Wed May 20 20:05:31.182147 2026] [:error] [pid 44059:tid 44074] [client 94.249.91.165:7577] [client 94.249.91.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.91.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag2jixfFs-oSOOcyjywb0AAAAQ0"]
[Wed May 20 20:33:45.754958 2026] [:error] [pid 41279:tid 41354] [client 162.62.213.187:49268] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag2qKbEFyfaehGZbt4yZGwAAANI"]
[Wed May 20 20:55:48.631435 2026] [:error] [pid 7664:tid 7682] [client 43.138.68.113:41032] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag2vVHZ8s7o3eiqT2ksE6QAAAU8"]
[Wed May 20 21:16:23.240640 2026] [:error] [pid 41364:tid 41370] [client 91.144.18.230:50790] [client 91.144.18.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.144.18.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag20JxKTmyvxtNXrN-jd6wAAAIQ"]
[Wed May 20 21:16:32.975858 2026] [:error] [pid 41279:tid 41338] [client 91.144.18.230:51210] [client 91.144.18.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.144.18.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag20MLEFyfaehGZbt4yfTwAAAMI"]
[Wed May 20 21:16:43.739421 2026] [:error] [pid 44059:tid 44085] [client 91.144.18.230:2791] [client 91.144.18.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.144.18.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag20OxfFs-oSOOcyjywsngAAARg"]
[Wed May 20 21:16:54.517014 2026] [:error] [pid 41279:tid 41346] [client 91.144.18.230:51935] [client 91.144.18.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.144.18.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag20RrEFyfaehGZbt4yfYQAAAMo"]
[Wed May 20 21:17:05.237034 2026] [:error] [pid 7731:tid 7739] [client 91.144.18.230:52296] [client 91.144.18.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.144.18.230, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag20UX9qQlHXbkl2nEshNAAAAYY"]
[Wed May 20 22:01:41.634926 2026] [:error] [pid 7664:tid 7674] [client 52.232.35.131:53924] [client 52.232.35.131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag2-xXZ8s7o3eiqT2ksQiAAAAUc"]
[Wed May 20 23:05:02.609938 2026] [:error] [pid 41279:tid 41346] [client 103.48.45.85:51852] [client 103.48.45.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.45.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3NnrEFyfaehGZbt4ys4QAAAMo"]
[Wed May 20 23:05:12.712324 2026] [:error] [pid 44059:tid 44072] [client 103.48.45.85:52328] [client 103.48.45.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.45.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3NqBfFs-oSOOcyjyxCNQAAAQs"]
[Wed May 20 23:05:23.291938 2026] [:error] [pid 41364:tid 41379] [client 103.48.45.85:52737] [client 103.48.45.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.45.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3NsxKTmyvxtNXrN-j8EwAAAI0"]
[Wed May 20 23:05:33.914635 2026] [:error] [pid 41364:tid 41376] [client 103.48.45.85:53142] [client 103.48.45.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.45.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3NvRKTmyvxtNXrN-j8IgAAAIo"]
[Wed May 20 23:05:44.618390 2026] [:error] [pid 41364:tid 41376] [client 103.48.45.85:53550] [client 103.48.45.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.48.45.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3NyBKTmyvxtNXrN-j8MwAAAIo"]
[Wed May 20 23:36:17.692310 2026] [:error] [pid 41279:tid 41342] [client 49.200.45.66:52713] [client 49.200.45.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.200.45.66, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3U8bEFyfaehGZbt4yxkAAAAMY"]
[Wed May 20 23:36:39.105706 2026] [:error] [pid 41364:tid 41381] [client 49.200.45.66:53177] [client 49.200.45.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.200.45.66, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3VBxKTmyvxtNXrN-gGigAAAI8"]
[Wed May 20 23:37:00.736524 2026] [:error] [pid 41277:tid 41302] [client 49.200.45.66:53655] [client 49.200.45.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.200.45.66, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3VHLTTCltJmboB5ucViAAAABQ"]
[Wed May 20 23:37:15.639765 2026] [:error] [pid 7731:tid 7755] [client 49.200.45.66:54048] [client 49.200.45.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.200.45.66, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3VK39qQlHXbkl2nEtIIQAAAZY"]
[Wed May 20 23:37:30.575370 2026] [:error] [pid 7731:tid 7744] [client 49.200.45.66:54382] [client 49.200.45.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.200.45.66, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3VOn9qQlHXbkl2nEtIPgAAAYs"]
[Thu May 21 00:27:36.954255 2026] [:error] [pid 7664:tid 7683] [client 196.131.121.193:60860] [client 196.131.121.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.131.121.193, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3g-HZ8s7o3eiqT2ksnGAAAAVA"]
[Thu May 21 00:33:41.103883 2026] [:error] [pid 41277:tid 41292] [client 223.185.203.20:48833] [client 223.185.203.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.203.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3iZbTTCltJmboB5ucangAAAAo"]
[Thu May 21 00:34:20.537524 2026] [:error] [pid 7731:tid 7755] [client 223.185.203.20:46317] [client 223.185.203.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.203.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3ijH9qQlHXbkl2nEtUngAAAZY"]
[Thu May 21 00:38:36.283199 2026] [:error] [pid 41279:tid 41338] [client 223.185.203.20:5289] [client 223.185.203.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.203.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3jjLEFyfaehGZbt4y43wAAAMI"]
[Thu May 21 00:39:47.196962 2026] [:error] [pid 44059:tid 44084] [client 223.185.203.20:13712] [client 223.185.203.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.203.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3j0xfFs-oSOOcyjyxTRQAAARc"]
[Thu May 21 00:40:02.443065 2026] [:error] [pid 44059:tid 44079] [client 223.185.203.20:55094] [client 223.185.203.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.203.20, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag3j4hfFs-oSOOcyjyxTUQAAARI"]
[Thu May 21 01:34:40.690679 2026] [:error] [pid 7664:tid 7680] [client 43.165.198.5:51268] [client 43.165.198.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag3wsHZ8s7o3eiqT2ksyZAAAAU0"]
[Thu May 21 02:55:01.473799 2026] [:error] [pid 41278:tid 41322] [client 136.113.24.184:35072] [client 136.113.24.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "ag4DhfWiNKASEfiGdwbhIQAAAE0"]
[Thu May 21 03:13:37.261863 2026] [:error] [pid 41279:tid 41338] [client 65.108.2.171:23012] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "ag4H4bEFyfaehGZbt4zNTAAAAMI"]
[Thu May 21 03:13:39.729751 2026] [:error] [pid 41277:tid 41296] [client 65.108.2.171:23014] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "ag4H47TTCltJmboB5ucqhwAAAA4"]
[Thu May 21 03:13:42.333491 2026] [:error] [pid 41279:tid 41343] [client 65.108.2.171:23026] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "ag4H5rEFyfaehGZbt4zNVgAAAMc"]
[Thu May 21 03:13:44.917467 2026] [:error] [pid 7664:tid 7688] [client 65.108.2.171:9198] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ag4H6HZ8s7o3eiqT2ktBdAAAAVU"]
[Thu May 21 03:13:47.347899 2026] [:error] [pid 41278:tid 41332] [client 65.108.2.171:9210] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "ag4H6_WiNKASEfiGdwbjZAAAAFc"]
[Thu May 21 03:13:49.953978 2026] [:error] [pid 41364:tid 41377] [client 65.108.2.171:9224] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ag4H7RKTmyvxtNXrN-hKeQAAAIs"]
[Thu May 21 03:13:52.689032 2026] [:error] [pid 41364:tid 41373] [client 65.108.2.171:9228] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "ag4H8BKTmyvxtNXrN-hKiQAAAIc"]
[Thu May 21 03:13:55.197532 2026] [:error] [pid 41364:tid 41390] [client 65.108.2.171:44756] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "ag4H8xKTmyvxtNXrN-hKkAAAAJg"]
[Thu May 21 03:13:57.851568 2026] [:error] [pid 7731:tid 7737] [client 65.108.2.171:44768] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "ag4H9X9qQlHXbkl2nEt5HQAAAYQ"]
[Thu May 21 03:14:00.444515 2026] [:error] [pid 7731:tid 7740] [client 65.108.2.171:44784] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ag4H-H9qQlHXbkl2nEt5JAAAAYc"]
[Thu May 21 03:14:03.047342 2026] [:error] [pid 41364:tid 41385] [client 65.108.2.171:44786] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ag4H-xKTmyvxtNXrN-hKsQAAAJM"]
[Thu May 21 03:14:05.566986 2026] [:error] [pid 41278:tid 41322] [client 65.108.2.171:64504] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ag4H_fWiNKASEfiGdwbjagAAAE0"]
[Thu May 21 03:14:08.098127 2026] [:error] [pid 41279:tid 41358] [client 65.108.2.171:64514] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ag4IALEFyfaehGZbt4zNXgAAANY"]
[Thu May 21 03:14:10.603743 2026] [:error] [pid 41279:tid 41357] [client 65.108.2.171:64528] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ag4IArEFyfaehGZbt4zNXwAAANU"]
[Thu May 21 03:14:13.226482 2026] [:error] [pid 41278:tid 41327] [client 65.108.2.171:64538] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ag4IBfWiNKASEfiGdwbjfQAAAFI"]
[Thu May 21 03:14:16.043149 2026] [:error] [pid 41279:tid 41345] [client 65.108.2.171:7216] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ag4ICLEFyfaehGZbt4zNZAAAAMk"]
[Thu May 21 03:14:18.496648 2026] [:error] [pid 41364:tid 41390] [client 65.108.2.171:7220] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ag4IChKTmyvxtNXrN-hKyQAAAJg"]
[Thu May 21 03:14:21.030157 2026] [:error] [pid 41279:tid 41353] [client 65.108.2.171:7234] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ag4IDbEFyfaehGZbt4zNagAAANE"]
[Thu May 21 03:14:23.541689 2026] [:error] [pid 41277:tid 41304] [client 65.108.2.171:7246] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ag4ID7TTCltJmboB5ucqkwAAABY"]
[Thu May 21 03:14:26.198761 2026] [:error] [pid 41277:tid 41293] [client 65.108.2.171:23594] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ag4IErTTCltJmboB5ucqmAAAAAs"]
[Thu May 21 03:14:28.932720 2026] [:error] [pid 41279:tid 41345] [client 65.108.2.171:23598] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ag4IFLEFyfaehGZbt4zNbQAAAMk"]
[Thu May 21 03:14:31.690963 2026] [:error] [pid 41364:tid 41372] [client 65.108.2.171:23610] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ag4IFxKTmyvxtNXrN-hK9QAAAIY"]
[Thu May 21 03:15:14.885518 2026] [:error] [pid 41279:tid 41340] [client 65.108.2.171:63906] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ag4IQrEFyfaehGZbt4zNkAAAAMQ"]
[Thu May 21 03:15:17.515322 2026] [:error] [pid 44059:tid 44071] [client 65.108.2.171:63912] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ag4IRRfFs-oSOOcyjyxucQAAAQo"]
[Thu May 21 03:15:20.008613 2026] [:error] [pid 41277:tid 41294] [client 65.108.2.171:63922] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ag4ISLTTCltJmboB5ucq1QAAAAw"]
[Thu May 21 03:15:22.586251 2026] [:error] [pid 41278:tid 41315] [client 65.108.2.171:63938] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ag4ISvWiNKASEfiGdwbjnwAAAEY"]
[Thu May 21 03:15:25.340850 2026] [:error] [pid 41277:tid 41302] [client 65.108.2.171:37052] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ag4ITbTTCltJmboB5ucq3wAAABQ"]
[Thu May 21 03:15:27.919224 2026] [:error] [pid 44059:tid 44069] [client 65.108.2.171:37064] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ag4ITxfFs-oSOOcyjyxudgAAAQg"]
[Thu May 21 03:15:30.453967 2026] [:error] [pid 7731:tid 7743] [client 65.108.2.171:37082] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ag4IUn9qQlHXbkl2nEt5bwAAAYo"]
[Thu May 21 03:15:33.056553 2026] [:error] [pid 41364:tid 41375] [client 65.108.2.171:37108] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ag4IVRKTmyvxtNXrN-hLPwAAAIk"]
[Thu May 21 03:15:35.606433 2026] [:error] [pid 41279:tid 41356] [client 65.108.2.171:42352] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ag4IV7EFyfaehGZbt4zNogAAANQ"]
[Thu May 21 03:15:38.262155 2026] [:error] [pid 41279:tid 41339] [client 65.108.2.171:42366] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ag4IWrEFyfaehGZbt4zNowAAAMM"]
[Thu May 21 03:15:40.907102 2026] [:error] [pid 44059:tid 44078] [client 65.108.2.171:42380] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ag4IXBfFs-oSOOcyjyxufAAAARE"]
[Thu May 21 03:15:43.498372 2026] [:error] [pid 41279:tid 41344] [client 65.108.2.171:42390] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ag4IX7EFyfaehGZbt4zNpwAAAMg"]
[Thu May 21 03:15:46.072420 2026] [:error] [pid 7731:tid 7745] [client 65.108.2.171:39914] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ag4IYn9qQlHXbkl2nEt5fgAAAYw"]
[Thu May 21 03:15:48.634365 2026] [:error] [pid 7664:tid 7683] [client 65.108.2.171:39924] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ag4IZHZ8s7o3eiqT2ktBqgAAAVA"]
[Thu May 21 03:15:51.315948 2026] [:error] [pid 41279:tid 41359] [client 65.108.2.171:39938] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ag4IZ7EFyfaehGZbt4zNrAAAANc"]
[Thu May 21 03:15:53.974897 2026] [:error] [pid 41278:tid 41317] [client 65.108.2.171:39944] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ag4IafWiNKASEfiGdwbjqQAAAEg"]
[Thu May 21 03:15:56.360269 2026] [:error] [pid 7731:tid 7744] [client 65.108.2.171:57410] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ag4IbH9qQlHXbkl2nEt5hwAAAYs"]
[Thu May 21 03:15:58.797972 2026] [:error] [pid 7731:tid 7757] [client 65.108.2.171:57416] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ag4Ibn9qQlHXbkl2nEt5jAAAAZg"]
[Thu May 21 03:16:01.583793 2026] [:error] [pid 41277:tid 41286] [client 65.108.2.171:57430] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ag4IcbTTCltJmboB5ucrAAAAAAQ"]
[Thu May 21 03:16:04.460628 2026] [:error] [pid 41279:tid 41340] [client 65.108.2.171:57438] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ag4IdLEFyfaehGZbt4zNtwAAAMQ"]
[Thu May 21 03:16:07.204135 2026] [:error] [pid 41364:tid 41381] [client 65.108.2.171:21454] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ag4IdxKTmyvxtNXrN-hLTQAAAI8"]
[Thu May 21 03:16:09.785580 2026] [:error] [pid 7731:tid 7740] [client 65.108.2.171:21464] [client 65.108.2.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ag4IeX9qQlHXbkl2nEt5nAAAAYc"]
[Thu May 21 03:50:44.522433 2026] [:error] [pid 46120:tid 46187] [client 195.178.110.199:35170] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "ag4QlGWTWjWGqeGCr2BBRgAAAIo"]
[Thu May 21 03:50:44.979572 2026] [:error] [pid 46120:tid 46197] [client 195.178.110.199:35170] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.docker/.env"] [unique_id "ag4QlGWTWjWGqeGCr2BBSwAAAJQ"]
[Thu May 21 03:50:45.104645 2026] [:error] [pid 46212:tid 46245] [client 195.178.110.199:35128] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.docker/laravel/app/.env"] [unique_id "ag4QlY4OmmRNcziuKmLKPAAAANE"]
[Thu May 21 03:50:46.055006 2026] [:error] [pid 46212:tid 46239] [client 195.178.110.199:35264] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "ag4Qlo4OmmRNcziuKmLKQAAAAMs"]
[Thu May 21 03:50:46.128086 2026] [:error] [pid 46120:tid 46188] [client 195.178.110.199:35250] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env-example"] [unique_id "ag4QlmWTWjWGqeGCr2BBTgAAAIs"]
[Thu May 21 03:50:46.189069 2026] [:error] [pid 46212:tid 46244] [client 195.178.110.199:35266] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env-sample"] [unique_id "ag4Qlo4OmmRNcziuKmLKQQAAANA"]
[Thu May 21 03:50:46.321714 2026] [:error] [pid 46120:tid 46201] [client 195.178.110.199:35280] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.aws"] [unique_id "ag4QlmWTWjWGqeGCr2BBTwAAAJg"]
[Thu May 21 03:50:46.330959 2026] [:error] [pid 46212:tid 46241] [client 195.178.110.199:35260] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "ag4Qlo4OmmRNcziuKmLKQgAAAM0"]
[Thu May 21 03:50:46.779974 2026] [:error] [pid 46118:tid 46140] [client 195.178.110.199:35294] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "ag4QlueVnnSZr2ErPzYXwwAAABE"]
[Thu May 21 03:50:47.156168 2026] [:error] [pid 46212:tid 46250] [client 195.178.110.199:35318] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.config"] [unique_id "ag4Ql44OmmRNcziuKmLKRQAAANY"]
[Thu May 21 03:50:47.467379 2026] [:error] [pid 46212:tid 46230] [client 195.178.110.199:35338] [client 195.178.110.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev"] [unique_id "ag4Ql44OmmRNcziuKmLKSAAAAMI"]
[Thu May 21 07:13:58.467912 2026] [:error] [pid 9114:tid 9134] [client 43.130.12.43:58630] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag5ANm8FiJqDBEoTvqwsFgAAAVI"]
[Thu May 21 09:02:34.965645 2026] [:error] [pid 9189:tid 9227] [client 1.15.52.154:47062] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag5ZqpvTDh1NbYizKVwtBAAAAgg"]
[Thu May 21 09:16:19.467164 2026] [:error] [pid 49884:tid 49966] [client 186.224.251.195:20057] [client 186.224.251.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.224.251.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag5c465MPpsTNNHWS6j75wAAAJM"]
[Thu May 21 09:30:58.264851 2026] [:error] [pid 9189:tid 9232] [client 103.81.182.241:17342] [client 103.81.182.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.182.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag5gUpvTDh1NbYizKVwx-gAAAg0"]
[Thu May 21 09:31:08.581183 2026] [:error] [pid 49884:tid 49961] [client 103.81.182.241:16719] [client 103.81.182.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.182.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag5gXK5MPpsTNNHWS6j_RAAAAI4"]
[Thu May 21 09:31:19.272036 2026] [:error] [pid 9189:tid 9227] [client 103.81.182.241:15657] [client 103.81.182.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.182.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag5gZ5vTDh1NbYizKVwyDwAAAgg"]
[Thu May 21 09:31:29.957214 2026] [:error] [pid 49877:tid 49897] [client 103.81.182.241:17081] [client 103.81.182.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.182.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag5gcRgN4MeSe4kIL9AK7QAAAAk"]
[Thu May 21 09:31:40.682007 2026] [:error] [pid 49982:tid 49995] [client 103.81.182.241:15808] [client 103.81.182.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.81.182.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag5gfGFwIDa5Tf8O4bZUegAAAMs"]
[Thu May 21 09:36:14.341430 2026] [:error] [pid 49884:tid 49957] [client 186.224.251.195:20963] [client 186.224.251.195] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag5hjq5MPpsTNNHWS6gAqgAAAIo"]
[Thu May 21 09:36:46.834578 2026] [:error] [pid 51613:tid 51622] [client 186.224.251.195:20391] [client 186.224.251.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.224.251.195, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag5hrmbP0MDvqrVnweqpQgAAAQc"]
[Thu May 21 12:36:59.877323 2026] [:error] [pid 49884:tid 49957] [client 79.137.67.90:56578] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "ag6L665MPpsTNNHWS6g-ogAAAIo"]
[Thu May 21 12:37:02.792738 2026] [:error] [pid 51613:tid 51630] [client 79.137.67.90:57658] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "ag6L7mbP0MDvqrVnwerBfwAAAQ8"]
[Thu May 21 12:37:06.305124 2026] [:error] [pid 49884:tid 49954] [client 79.137.67.90:47882] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ag6L8q5MPpsTNNHWS6g-pQAAAIc"]
[Thu May 21 12:37:09.287888 2026] [:error] [pid 9157:tid 9174] [client 79.137.67.90:47886] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ag6L9cGfHcLNqE8m88JadAAAAY8"]
[Thu May 21 12:37:12.459813 2026] [:error] [pid 51613:tid 51619] [client 79.137.67.90:47890] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ag6L-GbP0MDvqrVnwerBhwAAAQQ"]
[Thu May 21 12:37:15.662859 2026] [:error] [pid 9189:tid 9219] [client 79.137.67.90:47904] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ag6L-5vTDh1NbYizKVxZTgAAAgA"]
[Thu May 21 12:37:18.803017 2026] [:error] [pid 51613:tid 51634] [client 79.137.67.90:35314] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ag6L_mbP0MDvqrVnwerBjAAAARM"]
[Thu May 21 12:37:21.814377 2026] [:error] [pid 9114:tid 9127] [client 79.137.67.90:35326] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ag6MAW8FiJqDBEoTvqxMhAAAAUs"]
[Thu May 21 12:37:25.401523 2026] [:error] [pid 9189:tid 9234] [client 79.137.67.90:35334] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ag6MBZvTDh1NbYizKVxZXAAAAg8"]
[Thu May 21 12:37:28.528934 2026] [:error] [pid 49884:tid 49971] [client 79.137.67.90:34640] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ag6MCK5MPpsTNNHWS6g-vwAAAJg"]
[Thu May 21 12:37:31.779553 2026] [:error] [pid 9189:tid 9239] [client 79.137.67.90:34654] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ag6MC5vTDh1NbYizKVxZigAAAhQ"]
[Thu May 21 12:37:34.691330 2026] [:error] [pid 9114:tid 9140] [client 79.137.67.90:34666] [client 79.137.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ag6MDm8FiJqDBEoTvqxMigAAAVg"]
[Thu May 21 13:11:44.799099 2026] [:error] [pid 49884:tid 49955] [client 102.213.48.203:59157] [client 102.213.48.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.48.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6UEK5MPpsTNNHWS6hMRQAAAIg"]
[Thu May 21 13:11:55.052885 2026] [:error] [pid 9157:tid 9171] [client 102.213.48.203:51556] [client 102.213.48.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.48.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6UG8GfHcLNqE8m88JeaAAAAYw"]
[Thu May 21 13:12:05.886209 2026] [:error] [pid 49879:tid 49934] [client 102.213.48.203:60285] [client 102.213.48.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.48.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6UJYVqYDjFSyG2gFo6aAAAAE4"]
[Thu May 21 13:12:16.732725 2026] [:error] [pid 9188:tid 9205] [client 102.213.48.203:60749] [client 102.213.48.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.48.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6UMLGYm6q5dNSUvA-fngAAAc0"]
[Thu May 21 13:12:27.632047 2026] [:error] [pid 49884:tid 49950] [client 102.213.48.203:61197] [client 102.213.48.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.213.48.203, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6UO65MPpsTNNHWS6hMjAAAAIM"]
[Thu May 21 13:39:12.744362 2026] [:error] [pid 49884:tid 49953] [client 223.204.194.16:63382] [client 223.204.194.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.204.194.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6agK5MPpsTNNHWS6hVeQAAAIY"]
[Thu May 21 13:39:23.224480 2026] [:error] [pid 9189:tid 9243] [client 223.204.194.16:63698] [client 223.204.194.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.204.194.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6ai5vTDh1NbYizKVxlggAAAhg"]
[Thu May 21 13:39:33.521188 2026] [:error] [pid 9189:tid 9226] [client 223.204.194.16:64046] [client 223.204.194.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.204.194.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6alZvTDh1NbYizKVxlhwAAAgc"]
[Thu May 21 13:39:43.987605 2026] [:error] [pid 49884:tid 49971] [client 223.204.194.16:64300] [client 223.204.194.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.204.194.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6an65MPpsTNNHWS6hVrwAAAJg"]
[Thu May 21 13:39:54.459881 2026] [:error] [pid 9188:tid 9198] [client 223.204.194.16:64547] [client 223.204.194.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.204.194.16, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6aqrGYm6q5dNSUvA-kNgAAAcY"]
[Thu May 21 13:50:17.799399 2026] [:error] [pid 9188:tid 9206] [client 122.176.117.47:59216] [client 122.176.117.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.117.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6dGbGYm6q5dNSUvA-lvgAAAc4"]
[Thu May 21 13:50:27.671359 2026] [:error] [pid 9157:tid 9161] [client 122.176.117.47:59775] [client 122.176.117.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.117.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6dI8GfHcLNqE8m88JimgAAAYI"]
[Thu May 21 13:50:38.166521 2026] [:error] [pid 9157:tid 9179] [client 122.176.117.47:60150] [client 122.176.117.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.117.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6dLsGfHcLNqE8m88JinAAAAZQ"]
[Thu May 21 13:50:48.657697 2026] [:error] [pid 51613:tid 51638] [client 122.176.117.47:60521] [client 122.176.117.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.117.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6dOGbP0MDvqrVnwerKagAAARc"]
[Thu May 21 13:50:59.136184 2026] [:error] [pid 49877:tid 49900] [client 122.176.117.47:60895] [client 122.176.117.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.117.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6dQxgN4MeSe4kIL9AeoAAAAAw"]
[Thu May 21 13:53:58.500882 2026] [:error] [pid 49884:tid 49964] [client 37.40.237.241:37858] [client 37.40.237.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.40.237.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6d9q5MPpsTNNHWS6haqgAAAJE"]
[Thu May 21 13:54:09.666250 2026] [:error] [pid 49884:tid 49971] [client 37.40.237.241:37782] [client 37.40.237.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.40.237.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6eAa5MPpsTNNHWS6havgAAAJg"]
[Thu May 21 13:54:20.056088 2026] [:error] [pid 49879:tid 49935] [client 37.40.237.241:37915] [client 37.40.237.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.40.237.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6eDIVqYDjFSyG2gFo9-wAAAE8"]
[Thu May 21 13:54:31.096508 2026] [:error] [pid 49884:tid 49963] [client 37.40.237.241:38272] [client 37.40.237.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.40.237.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6eF65MPpsTNNHWS6ha3QAAAJA"]
[Thu May 21 13:54:42.225846 2026] [:error] [pid 51613:tid 51628] [client 37.40.237.241:37884] [client 37.40.237.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.40.237.241, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6eImbP0MDvqrVnwerK5QAAAQ0"]
[Thu May 21 15:24:14.990624 2026] [:error] [pid 51613:tid 51638] [client 182.8.225.247:35410] [client 182.8.225.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.225.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6zHmbP0MDvqrVnweraAAAAARc"]
[Thu May 21 15:24:25.324959 2026] [:error] [pid 49877:tid 49907] [client 182.8.225.247:3987] [client 182.8.225.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.225.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6zKRgN4MeSe4kIL9AnHwAAABM"]
[Thu May 21 15:24:35.967988 2026] [:error] [pid 9157:tid 9160] [client 182.8.225.247:28259] [client 182.8.225.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.225.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6zM8GfHcLNqE8m88JwAgAAAYE"]
[Thu May 21 15:24:46.666839 2026] [:error] [pid 9188:tid 9215] [client 182.8.225.247:41167] [client 182.8.225.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.225.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6zPrGYm6q5dNSUvA-5ngAAAdc"]
[Thu May 21 15:24:57.783979 2026] [:error] [pid 51613:tid 51628] [client 182.8.225.247:38247] [client 182.8.225.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.225.247, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6zSWbP0MDvqrVnweraGQAAAQ0"]
[Thu May 21 15:27:14.363582 2026] [:error] [pid 9188:tid 9193] [client 59.96.212.174:60475] [client 59.96.212.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.96.212.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6z0rGYm6q5dNSUvA-6HQAAAcE"]
[Thu May 21 15:27:24.555495 2026] [:error] [pid 49884:tid 49960] [client 59.96.212.174:60821] [client 59.96.212.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.96.212.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6z3K5MPpsTNNHWS6iDjQAAAI0"]
[Thu May 21 15:27:35.358851 2026] [:error] [pid 49982:tid 49984] [client 59.96.212.174:61166] [client 59.96.212.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.96.212.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6z52FwIDa5Tf8O4ba1NgAAAMA"]
[Thu May 21 15:27:45.834188 2026] [:error] [pid 49982:tid 50003] [client 59.96.212.174:61509] [client 59.96.212.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.96.212.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6z8WFwIDa5Tf8O4ba1QAAAANM"]
[Thu May 21 15:27:56.514022 2026] [:error] [pid 49884:tid 49954] [client 59.96.212.174:61856] [client 59.96.212.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.96.212.174, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6z_K5MPpsTNNHWS6iDmgAAAIc"]
[Thu May 21 16:13:58.404547 2026] [:error] [pid 9114:tid 9134] [client 154.57.218.135:16858] [client 154.57.218.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.218.135, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6-xm8FiJqDBEoTvqxl3wAAAVI"]
[Thu May 21 16:14:08.389720 2026] [:error] [pid 49884:tid 49951] [client 154.57.218.135:15169] [client 154.57.218.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.218.135, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6-0K5MPpsTNNHWS6iT-AAAAIQ"]
[Thu May 21 16:14:19.030439 2026] [:error] [pid 49884:tid 49947] [client 154.57.218.135:15648] [client 154.57.218.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.218.135, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6-265MPpsTNNHWS6iUDgAAAIA"]
[Thu May 21 16:14:31.895380 2026] [:error] [pid 9114:tid 9137] [client 154.57.218.135:16064] [client 154.57.218.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.218.135, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6-528FiJqDBEoTvqxl7AAAAVU"]
[Thu May 21 16:14:40.885741 2026] [:error] [pid 49884:tid 49968] [client 154.57.218.135:16420] [client 154.57.218.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.218.135, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag6-8K5MPpsTNNHWS6iUHwAAAJU"]
[Thu May 21 16:30:26.594877 2026] [:error] [pid 49877:tid 49888] [client 185.213.174.70:57962] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "ag7CohgN4MeSe4kIL9AseQAAAAA"]
[Thu May 21 16:30:26.598661 2026] [:error] [pid 49884:tid 49968] [client 185.213.174.70:58010] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging"] [unique_id "ag7Coq5MPpsTNNHWS6ia1gAAAJU"]
[Thu May 21 16:30:26.599411 2026] [:error] [pid 49884:tid 49949] [client 185.213.174.70:58004] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old"] [unique_id "ag7Coq5MPpsTNNHWS6ia1wAAAII"]
[Thu May 21 16:30:26.599424 2026] [:error] [pid 49877:tid 49901] [client 185.213.174.70:57956] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "ag7CohgN4MeSe4kIL9AsewAAAA0"]
[Thu May 21 16:30:26.699996 2026] [:error] [pid 49982:tid 49987] [client 185.213.174.70:58046] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "ag7ComFwIDa5Tf8O4bbGhgAAAMM"]
[Thu May 21 16:30:26.700078 2026] [:error] [pid 49982:tid 50002] [client 185.213.174.70:58042] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/backend/.env"] [unique_id "ag7ComFwIDa5Tf8O4bbGhwAAANI"]
[Thu May 21 16:30:26.701606 2026] [:error] [pid 49982:tid 49991] [client 185.213.174.70:58058] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/public/.env"] [unique_id "ag7ComFwIDa5Tf8O4bbGiQAAAMc"]
[Thu May 21 16:30:26.702865 2026] [:error] [pid 49982:tid 49998] [client 185.213.174.70:58024] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/api/.env"] [unique_id "ag7ComFwIDa5Tf8O4bbGiwAAAM4"]
[Thu May 21 16:30:26.702961 2026] [:error] [pid 49877:tid 49897] [client 185.213.174.70:58026] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/admin/.env"] [unique_id "ag7CohgN4MeSe4kIL9AsfwAAAAk"]
[Thu May 21 16:30:26.703769 2026] [:error] [pid 49982:tid 49984] [client 185.213.174.70:57974] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "ag7ComFwIDa5Tf8O4bbGjgAAAMA"]
[Thu May 21 16:30:26.703842 2026] [:error] [pid 49982:tid 49998] [client 185.213.174.70:57996] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "ag7ComFwIDa5Tf8O4bbGjQAAAM4"]
[Thu May 21 16:30:26.704879 2026] [:error] [pid 49877:tid 49891] [client 185.213.174.70:57944] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "ag7CohgN4MeSe4kIL9AsgAAAAAM"]
[Thu May 21 16:30:26.706404 2026] [:error] [pid 49982:tid 49992] [client 185.213.174.70:57986] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "ag7ComFwIDa5Tf8O4bbGkwAAAMg"]
[Thu May 21 16:30:26.707114 2026] [:error] [pid 49982:tid 50004] [client 185.213.174.70:57948] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "ag7ComFwIDa5Tf8O4bbGlAAAANQ"]
[Thu May 21 16:30:26.707823 2026] [:error] [pid 49982:tid 49990] [client 185.213.174.70:57912] [client 185.213.174.70] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hotbooksbookeeping2.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hotbooksbookeeping2.com"] [uri "/storage/logs/laravel.log"] [unique_id "ag7ComFwIDa5Tf8O4bbGlQAAAMY"]
[Thu May 21 16:41:23.141482 2026] [:error] [pid 49982:tid 49988] [client 5.38.59.84:4026] [client 5.38.59.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.38.59.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7FM2FwIDa5Tf8O4bbIvwAAAMQ"]
[Thu May 21 16:41:41.205392 2026] [:error] [pid 49884:tid 49959] [client 5.38.59.84:4281] [client 5.38.59.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.38.59.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7FRa5MPpsTNNHWS6id9gAAAIw"]
[Thu May 21 16:44:10.030293 2026] [:error] [pid 49982:tid 50008] [client 5.38.59.84:4318] [client 5.38.59.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.38.59.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7F2mFwIDa5Tf8O4bbJSQAAANg"]
[Thu May 21 16:44:33.768147 2026] [:error] [pid 49884:tid 49964] [client 5.38.59.84:4035] [client 5.38.59.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.38.59.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7F8a5MPpsTNNHWS6iexgAAAJE"]
[Thu May 21 16:45:34.234971 2026] [:error] [pid 49982:tid 49994] [client 5.38.59.84:4595] [client 5.38.59.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.38.59.84, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7GLmFwIDa5Tf8O4bbJegAAAMo"]
[Thu May 21 17:58:59.565470 2026] [:error] [pid 51613:tid 51634] [client 68.51.22.46:62666] [client 68.51.22.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.51.22.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7XY2bP0MDvqrVnwert4QAAARM"]
[Thu May 21 17:59:10.083169 2026] [:error] [pid 49884:tid 49954] [client 68.51.22.46:63095] [client 68.51.22.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.51.22.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7Xbq5MPpsTNNHWS6i3PwAAAIc"]
[Thu May 21 17:59:20.597648 2026] [:error] [pid 49884:tid 49970] [client 68.51.22.46:63434] [client 68.51.22.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.51.22.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7XeK5MPpsTNNHWS6i3QwAAAJc"]
[Thu May 21 17:59:31.067972 2026] [:error] [pid 9188:tid 9214] [client 68.51.22.46:63761] [client 68.51.22.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.51.22.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7Xg7GYm6q5dNSUvA_Q3wAAAdY"]
[Thu May 21 17:59:41.710850 2026] [:error] [pid 51613:tid 51635] [client 68.51.22.46:64102] [client 68.51.22.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.51.22.46, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7XjWbP0MDvqrVnwert5QAAARQ"]
[Thu May 21 19:27:36.341372 2026] [:error] [pid 9189:tid 9237] [client 94.249.90.80:54705] [client 94.249.90.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.90.80, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7sKJvTDh1NbYizKVysMgAAAhI"]
[Thu May 21 19:27:46.714765 2026] [:error] [pid 9188:tid 9198] [client 94.249.90.80:7700] [client 94.249.90.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.90.80, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7sMrGYm6q5dNSUvA_dHgAAAcY"]
[Thu May 21 19:29:55.804098 2026] [:error] [pid 49884:tid 49957] [client 94.249.90.80:22287] [client 94.249.90.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.90.80, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7ss65MPpsTNNHWS6jSWgAAAIo"]
[Thu May 21 19:30:17.233768 2026] [:error] [pid 49877:tid 49901] [client 94.249.90.80:54735] [client 94.249.90.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.90.80, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7syRgN4MeSe4kIL9A44gAAAA0"]
[Thu May 21 19:31:44.460726 2026] [:error] [pid 49982:tid 49992] [client 94.249.90.80:35872] [client 94.249.90.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.249.90.80, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag7tIGFwIDa5Tf8O4bbuDAAAAMg"]
[Thu May 21 20:05:00.658485 2026] [:error] [pid 51613:tid 51633] [client 43.134.71.232:36320] [client 43.134.71.232] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag707GbP0MDvqrVnwer9qAAAARI"]
[Thu May 21 20:34:07.285245 2026] [:error] [pid 49879:tid 49934] [client 173.239.224.150:27743] [client 173.239.224.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ahax.php"] [unique_id "ag77v4VqYDjFSyG2gFpksAAAAE4"]
[Thu May 21 20:34:07.705508 2026] [:error] [pid 51613:tid 51617] [client 173.239.224.162:54831] [client 173.239.224.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "ag77v2bP0MDvqrVnweoB6AAAAQI"]
[Thu May 21 20:34:08.118702 2026] [:error] [pid 49884:tid 49954] [client 173.239.224.161:63937] [client 173.239.224.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "ag77wK5MPpsTNNHWS6jmkgAAAIc"]
[Thu May 21 20:34:09.534870 2026] [:error] [pid 9157:tid 9177] [client 173.239.224.163:33029] [client 173.239.224.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "ag77wcGfHcLNqE8m88KTfgAAAZI"]
[Thu May 21 20:34:09.959659 2026] [:error] [pid 9114:tid 9121] [client 173.239.224.155:34943] [client 173.239.224.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "ag77wW8FiJqDBEoTvqx-nQAAAUU"]
[Thu May 21 20:34:10.361454 2026] [:error] [pid 9114:tid 9124] [client 173.239.224.160:60461] [client 173.239.224.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "ag77wm8FiJqDBEoTvqx-ngAAAUg"]
[Thu May 21 20:34:11.069170 2026] [:error] [pid 51613:tid 51625] [client 173.239.224.153:28419] [client 173.239.224.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "ag77w2bP0MDvqrVnweoB7AAAAQo"]
[Thu May 21 20:44:48.345699 2026] [:error] [pid 49982:tid 50000] [client 217.182.136.43:41308] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "ag7-QGFwIDa5Tf8O4bYAKwAAANA"]
[Thu May 21 20:44:51.069056 2026] [:error] [pid 49884:tid 49953] [client 217.182.136.43:36548] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "ag7-Q65MPpsTNNHWS6jqXQAAAIY"]
[Thu May 21 20:44:55.058458 2026] [:error] [pid 49884:tid 49968] [client 217.182.136.43:40994] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "ag7-R65MPpsTNNHWS6jqZQAAAJU"]
[Thu May 21 20:44:57.983951 2026] [:error] [pid 51613:tid 51635] [client 217.182.136.43:41006] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ag7-SWbP0MDvqrVnweoDSgAAARQ"]
[Thu May 21 20:45:01.129628 2026] [:error] [pid 49982:tid 50000] [client 217.182.136.43:41010] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "ag7-TWFwIDa5Tf8O4bYAMwAAANA"]
[Thu May 21 20:45:05.113618 2026] [:error] [pid 51613:tid 51633] [client 217.182.136.43:57914] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ag7-UWbP0MDvqrVnweoDUgAAARI"]
[Thu May 21 20:45:07.724073 2026] [:error] [pid 51613:tid 51624] [client 217.182.136.43:57920] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "ag7-U2bP0MDvqrVnweoDVgAAAQk"]
[Thu May 21 20:45:10.847213 2026] [:error] [pid 49982:tid 49992] [client 217.182.136.43:57924] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "ag7-VmFwIDa5Tf8O4bYAOAAAAMg"]
[Thu May 21 20:45:14.547559 2026] [:error] [pid 49877:tid 49895] [client 217.182.136.43:45428] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "ag7-WhgN4MeSe4kIL9A-CQAAAAc"]
[Thu May 21 20:45:18.215692 2026] [:error] [pid 9188:tid 9198] [client 217.182.136.43:45442] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ag7-XrGYm6q5dNSUvA_pnQAAAcY"]
[Thu May 21 20:45:22.949524 2026] [:error] [pid 9114:tid 9139] [client 217.182.136.43:41370] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ag7-Ym8FiJqDBEoTvqx_ngAAAVc"]
[Thu May 21 20:45:27.557035 2026] [:error] [pid 49982:tid 49994] [client 217.182.136.43:41374] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ag7-Z2FwIDa5Tf8O4bYAQQAAAMo"]
[Thu May 21 20:45:31.205383 2026] [:error] [pid 49982:tid 49990] [client 217.182.136.43:41380] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ag7-a2FwIDa5Tf8O4bYARwAAAMY"]
[Thu May 21 20:45:34.543213 2026] [:error] [pid 49879:tid 49924] [client 217.182.136.43:47790] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ag7-boVqYDjFSyG2gFplhAAAAEQ"]
[Thu May 21 20:45:37.365964 2026] [:error] [pid 9188:tid 9208] [client 217.182.136.43:47792] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ag7-cbGYm6q5dNSUvA_pqQAAAdA"]
[Thu May 21 20:45:39.891470 2026] [:error] [pid 49884:tid 49949] [client 217.182.136.43:47798] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ag7-c65MPpsTNNHWS6jqgwAAAII"]
[Thu May 21 20:45:42.872775 2026] [:error] [pid 9189:tid 9228] [client 217.182.136.43:47310] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ag7-dpvTDh1NbYizKVy7awAAAgk"]
[Thu May 21 20:46:17.996933 2026] [:error] [pid 51613:tid 51631] [client 217.182.136.43:47314] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "ag7-mWbP0MDvqrVnweoDfAAAARA"]
[Thu May 21 20:46:21.716008 2026] [:error] [pid 49982:tid 49992] [client 217.182.136.43:50592] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ag7-nWFwIDa5Tf8O4bYAbAAAAMg"]
[Thu May 21 20:46:24.776503 2026] [:error] [pid 49879:tid 49932] [client 217.182.136.43:52556] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ag7-oIVqYDjFSyG2gFploQAAAEw"]
[Thu May 21 20:46:28.158262 2026] [:error] [pid 9188:tid 9208] [client 217.182.136.43:52560] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ag7-pLGYm6q5dNSUvA_pxgAAAdA"]
[Thu May 21 20:46:31.298655 2026] [:error] [pid 9188:tid 9215] [client 217.182.136.43:52562] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ag7-p7GYm6q5dNSUvA_pxwAAAdc"]
[Thu May 21 20:46:34.304483 2026] [:error] [pid 49884:tid 49970] [client 217.182.136.43:45514] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ag7-qq5MPpsTNNHWS6jqlwAAAJc"]
[Thu May 21 20:46:37.277005 2026] [:error] [pid 9189:tid 9239] [client 217.182.136.43:45530] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ag7-rZvTDh1NbYizKVy7eAAAAhQ"]
[Thu May 21 20:46:40.878033 2026] [:error] [pid 49982:tid 50005] [client 217.182.136.43:45542] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ag7-sGFwIDa5Tf8O4bYAeQAAANU"]
[Thu May 21 20:46:43.699164 2026] [:error] [pid 49982:tid 49992] [client 217.182.136.43:38736] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ag7-s2FwIDa5Tf8O4bYAfgAAAMg"]
[Thu May 21 20:46:46.320877 2026] [:error] [pid 49884:tid 49955] [client 217.182.136.43:38746] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ag7-tq5MPpsTNNHWS6jqogAAAIg"]
[Thu May 21 20:46:49.614982 2026] [:error] [pid 9157:tid 9169] [client 217.182.136.43:38762] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ag7-ucGfHcLNqE8m88KU8gAAAYo"]
[Thu May 21 20:46:53.139083 2026] [:error] [pid 9157:tid 9181] [client 217.182.136.43:40018] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ag7-vcGfHcLNqE8m88KU9gAAAZY"]
[Thu May 21 20:46:56.542946 2026] [:error] [pid 49877:tid 49898] [client 217.182.136.43:40034] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ag7-wBgN4MeSe4kIL9A-MAAAAAo"]
[Thu May 21 20:47:00.549387 2026] [:error] [pid 49982:tid 49997] [client 217.182.136.43:40044] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ag7-xGFwIDa5Tf8O4bYAhgAAAM0"]
[Thu May 21 20:47:06.171316 2026] [:error] [pid 49879:tid 49928] [client 217.182.136.43:41582] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ag7-yoVqYDjFSyG2gFplrgAAAEg"]
[Thu May 21 20:47:09.183446 2026] [:error] [pid 9188:tid 9209] [client 217.182.136.43:41594] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ag7-zbGYm6q5dNSUvA_p1gAAAdE"]
[Thu May 21 20:47:13.828645 2026] [:error] [pid 49879:tid 49935] [client 217.182.136.43:56656] [client 217.182.136.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ag7-0YVqYDjFSyG2gFplswAAAE8"]
[Thu May 21 22:37:54.914651 2026] [:error] [pid 49884:tid 49949] [client 49.51.180.2:46974] [client 49.51.180.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag8Ywq5MPpsTNNHWS6gMRQAAAII"]
[Thu May 21 22:42:20.472143 2026] [:error] [pid 49982:tid 49984] [client 39.37.164.251:57106] [client 39.37.164.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.37.164.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag8ZzGFwIDa5Tf8O4bYZcwAAAMA"]
[Thu May 21 22:42:30.424222 2026] [:error] [pid 49884:tid 49947] [client 39.37.164.251:57411] [client 39.37.164.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.37.164.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag8Z1q5MPpsTNNHWS6gM7AAAAIA"]
[Thu May 21 22:42:40.836345 2026] [:error] [pid 49982:tid 49990] [client 39.37.164.251:57814] [client 39.37.164.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.37.164.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag8Z4GFwIDa5Tf8O4bYZeAAAAMY"]
[Thu May 21 22:42:51.298204 2026] [:error] [pid 9188:tid 9199] [client 39.37.164.251:58109] [client 39.37.164.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.37.164.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag8Z67GYm6q5dNSUvA_6IgAAAcc"]
[Thu May 21 22:43:01.767706 2026] [:error] [pid 49982:tid 50007] [client 39.37.164.251:58398] [client 39.37.164.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.37.164.251, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag8Z9WFwIDa5Tf8O4bYZkQAAANc"]
[Thu May 21 23:24:09.487054 2026] [:error] [pid 9188:tid 9199] [client 34.150.255.112:56711] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag8jmbGYm6q5dNSUvA_-5QAAAcc"]
[Thu May 21 23:24:09.941193 2026] [:error] [pid 9157:tid 9179] [client 34.150.255.112:59837] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag8jmcGfHcLNqE8m88KjagAAAZQ"]
[Thu May 21 23:24:10.369584 2026] [:error] [pid 49884:tid 49963] [client 34.150.255.112:54762] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jmq5MPpsTNNHWS6gXpAAAAJA"]
[Fri May 22 01:11:56.218520 2026] [:error] [pid 9157:tid 9178] [client 162.62.231.139:44900] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag883MGfHcLNqE8m88KxqwAAAZM"]
[Fri May 22 02:43:42.564570 2026] [:error] [pid 9157:tid 9179] [client 104.215.156.39:8988] [client 104.215.156.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "ag9SXsGfHcLNqE8m88LD2QAAAZQ"]
[Fri May 22 02:43:44.834528 2026] [:error] [pid 9114:tid 9134] [client 104.215.156.39:10322] [client 104.215.156.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ag9SYG8FiJqDBEoTvqyYhgAAAVI"]
[Fri May 22 02:43:45.206365 2026] [:error] [pid 51613:tid 51624] [client 104.215.156.39:8963] [client 104.215.156.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ag9SYWbP0MDvqrVnweoiUQAAAQk"]
[Fri May 22 02:43:45.582494 2026] [:error] [pid 51613:tid 51625] [client 104.215.156.39:10367] [client 104.215.156.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ag9SYWbP0MDvqrVnweoiUgAAAQo"]
[Fri May 22 02:43:45.951647 2026] [:error] [pid 9157:tid 9160] [client 104.215.156.39:10334] [client 104.215.156.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ag9SYcGfHcLNqE8m88LD2wAAAYE"]
[Fri May 22 02:44:11.333320 2026] [autoindex:error] [pid 9157:tid 9165] [client 62.84.183.157:51324] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 22 07:11:57.716673 2026] [:error] [pid 58782:tid 58788] [client 43.156.18.240:52758] [client 43.156.18.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag-RPYxsdTFafgO8vhS0BgAAAQQ"]
[Fri May 22 07:22:58.881262 2026] [:error] [pid 15585:tid 15657] [client 46.186.10.175:1034] [client 46.186.10.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.186.10.175, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag-T0iKb-vB41AF-LC1dnAAAAIo"]
[Fri May 22 07:38:22.895553 2026] [:error] [pid 15585:tid 15651] [client 20.104.234.28:3011] [client 20.104.234.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "ag-XbiKb-vB41AF-LC1h9gAAAIQ"]
[Fri May 22 07:38:26.766019 2026] [:error] [pid 15583:tid 15588] [client 20.104.234.28:31775] [client 20.104.234.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "ag-XcnnaOncRcIm17YWGbQAAAAA"]
[Fri May 22 07:38:31.211289 2026] [:error] [pid 15584:tid 15620] [client 20.104.234.28:65387] [client 20.104.234.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "ag-Xd99Z_TVLbNEx52iLNgAAAEA"]
[Fri May 22 07:38:34.218961 2026] [:error] [pid 15583:tid 15605] [client 20.104.234.28:30851] [client 20.104.234.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp.php"] [unique_id "ag-XennaOncRcIm17YWGeAAAABE"]
[Fri May 22 07:46:58.315256 2026] [:error] [pid 15585:tid 15649] [client 46.186.10.175:8111] [client 46.186.10.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag-ZciKb-vB41AF-LC1lXwAAAII"]
[Fri May 22 07:47:18.985560 2026] [:error] [pid 15679:tid 15705] [client 46.186.10.175:8589] [client 46.186.10.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.186.10.175, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag-Zhih8tgGc38WJ-GyFqQAAANg"]
[Fri May 22 07:55:33.750304 2026] [autoindex:error] [pid 15584:tid 15623] [client 144.91.96.80:57049] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 22 09:05:16.278604 2026] [:error] [pid 15679:tid 15682] [client 176.65.139.236:50808] [client 176.65.139.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "ag-rzCh8tgGc38WJ-Gyn5AAAAME"]
[Fri May 22 09:12:00.596247 2026] [:error] [pid 15585:tid 15671] [client 43.138.68.113:58144] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag-tYCKb-vB41AF-LC2WZAAAAJg"]
[Fri May 22 10:19:52.376849 2026] [:error] [pid 15679:tid 15682] [client 43.167.157.80:59844] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ag-9SCh8tgGc38WJ-Gy7vAAAAME"]
[Fri May 22 12:47:31.885798 2026] [:error] [pid 15679:tid 15699] [client 223.188.26.153:3003] [client 223.188.26.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.188.26.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_f4yh8tgGc38WJ-Gzk2gAAANI"]
[Fri May 22 12:47:41.209846 2026] [:error] [pid 58782:tid 58799] [client 223.188.26.153:19468] [client 223.188.26.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.188.26.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_f7YxsdTFafgO8vhTnVwAAAQ8"]
[Fri May 22 12:47:52.925652 2026] [:error] [pid 15585:tid 15657] [client 223.188.26.153:44232] [client 223.188.26.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.188.26.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_f-CKb-vB41AF-LC3mFQAAAIo"]
[Fri May 22 12:48:02.376841 2026] [:error] [pid 15585:tid 15664] [client 223.188.26.153:15254] [client 223.188.26.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.188.26.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_gAiKb-vB41AF-LC3mJAAAAJE"]
[Fri May 22 12:48:14.538493 2026] [:error] [pid 58782:tid 58787] [client 223.188.26.153:28699] [client 223.188.26.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.188.26.153, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_gDoxsdTFafgO8vhTnYgAAAQM"]
[Fri May 22 13:21:27.803042 2026] [:error] [pid 15679:tid 15696] [client 51.68.234.121:49712] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "ag_n1yh8tgGc38WJ-Gzu6gAAAM8"]
[Fri May 22 13:21:30.317713 2026] [:error] [pid 15583:tid 15597] [client 51.68.234.121:43840] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "ag_n2nnaOncRcIm17YXMtwAAAAk"]
[Fri May 22 13:21:32.728552 2026] [:error] [pid 15584:tid 15636] [client 51.68.234.121:43856] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ag_n3N9Z_TVLbNEx52jbaQAAAFA"]
[Fri May 22 13:21:35.173293 2026] [:error] [pid 58782:tid 58800] [client 51.68.234.121:53066] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ag_n34xsdTFafgO8vhTtKQAAARA"]
[Fri May 22 13:21:37.592264 2026] [:error] [pid 15584:tid 15632] [client 51.68.234.121:53070] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ag_n4d9Z_TVLbNEx52jbcQAAAEw"]
[Fri May 22 13:21:40.014080 2026] [:error] [pid 15679:tid 15684] [client 51.68.234.121:53076] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ag_n5Ch8tgGc38WJ-Gzu9QAAAMM"]
[Fri May 22 13:21:42.437661 2026] [:error] [pid 58813:tid 58819] [client 51.68.234.121:53080] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ag_n5p6yyKWDKULhxJ1FQQAAAUM"]
[Fri May 22 13:21:44.818125 2026] [:error] [pid 58782:tid 58797] [client 51.68.234.121:56348] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ag_n6IxsdTFafgO8vhTtMgAAAQ0"]
[Fri May 22 13:21:47.278004 2026] [:error] [pid 15583:tid 15589] [client 51.68.234.121:56350] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ag_n63naOncRcIm17YXMwwAAAAE"]
[Fri May 22 13:21:49.693364 2026] [:error] [pid 15584:tid 15629] [client 51.68.234.121:56366] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ag_n7d9Z_TVLbNEx52jbdgAAAEk"]
[Fri May 22 13:21:52.084901 2026] [:error] [pid 15679:tid 15685] [client 51.68.234.121:56380] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ag_n8Ch8tgGc38WJ-GzvCQAAAMQ"]
[Fri May 22 13:21:54.480831 2026] [:error] [pid 58813:tid 58827] [client 51.68.234.121:42952] [client 51.68.234.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ag_n8p6yyKWDKULhxJ1FRgAAAUs"]
[Fri May 22 14:01:59.861959 2026] [:error] [pid 58813:tid 58834] [client 88.201.122.76:53982] [client 88.201.122.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.201.122.76, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_xV56yyKWDKULhxJ1MBQAAAVI"]
[Fri May 22 14:02:09.679722 2026] [:error] [pid 58782:tid 58789] [client 88.201.122.76:37836] [client 88.201.122.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.201.122.76, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_xYYxsdTFafgO8vhTz1gAAAQU"]
[Fri May 22 14:02:20.565030 2026] [:error] [pid 15585:tid 15661] [client 88.201.122.76:30068] [client 88.201.122.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.201.122.76, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_xbCKb-vB41AF-LC0C-AAAAI4"]
[Fri May 22 14:02:31.239634 2026] [:error] [pid 15583:tid 15596] [client 88.201.122.76:33449] [client 88.201.122.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.201.122.76, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_xd3naOncRcIm17YXULAAAAAg"]
[Fri May 22 14:02:41.940094 2026] [:error] [pid 15583:tid 15596] [client 88.201.122.76:24772] [client 88.201.122.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.201.122.76, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_xgXnaOncRcIm17YXUMwAAAAg"]
[Fri May 22 14:21:11.722845 2026] [:error] [pid 15585:tid 15667] [client 51.77.217.11:35886] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "ag_11yKb-vB41AF-LC0LIAAAAJQ"]
[Fri May 22 14:21:14.026750 2026] [:error] [pid 15679:tid 15688] [client 51.77.217.11:60892] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "ag_12ih8tgGc38WJ-GwBRQAAAMc"]
[Fri May 22 14:21:16.383786 2026] [:error] [pid 15584:tid 15643] [client 51.77.217.11:60908] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "ag_13N9Z_TVLbNEx52jpIwAAAFc"]
[Fri May 22 14:21:18.750650 2026] [:error] [pid 58813:tid 58817] [client 51.77.217.11:34576] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ag_13p6yyKWDKULhxJ1QDAAAAUE"]
[Fri May 22 14:21:21.251083 2026] [:error] [pid 58782:tid 58787] [client 51.77.217.11:34586] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "ag_14YxsdTFafgO8vhT22gAAAQM"]
[Fri May 22 14:21:23.780791 2026] [:error] [pid 15679:tid 15685] [client 51.77.217.11:34592] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ag_14yh8tgGc38WJ-GwBUAAAAMQ"]
[Fri May 22 14:21:26.268417 2026] [:error] [pid 15584:tid 15632] [client 51.77.217.11:34600] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "ag_15t9Z_TVLbNEx52jpLQAAAEw"]
[Fri May 22 14:21:28.774490 2026] [:error] [pid 15583:tid 15597] [client 51.77.217.11:57040] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "ag_16HnaOncRcIm17YXXvAAAAAk"]
[Fri May 22 14:21:31.316953 2026] [:error] [pid 15585:tid 15648] [client 51.77.217.11:57050] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "ag_16yKb-vB41AF-LC0LMAAAAIE"]
[Fri May 22 14:21:33.758785 2026] [:error] [pid 15585:tid 15662] [client 51.77.217.11:57066] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ag_17SKb-vB41AF-LC0LMwAAAI8"]
[Fri May 22 14:21:36.287709 2026] [:error] [pid 15585:tid 15647] [client 51.77.217.11:57078] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ag_18CKb-vB41AF-LC0LOgAAAIA"]
[Fri May 22 14:21:38.674158 2026] [:error] [pid 15585:tid 15668] [client 51.77.217.11:47234] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ag_18iKb-vB41AF-LC0LQwAAAJU"]
[Fri May 22 14:21:41.161193 2026] [:error] [pid 15585:tid 15658] [client 51.77.217.11:47250] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ag_19SKb-vB41AF-LC0LTAAAAIs"]
[Fri May 22 14:21:43.688759 2026] [:error] [pid 15584:tid 15637] [client 51.77.217.11:47252] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ag_1999Z_TVLbNEx52jpPwAAAFE"]
[Fri May 22 14:21:46.195446 2026] [:error] [pid 58782:tid 58795] [client 51.77.217.11:47256] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ag_1-oxsdTFafgO8vhT27gAAAQs"]
[Fri May 22 14:21:48.567160 2026] [:error] [pid 15585:tid 15658] [client 51.77.217.11:47262] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ag_1_CKb-vB41AF-LC0LVAAAAIs"]
[Fri May 22 14:21:51.087819 2026] [:error] [pid 15679:tid 15704] [client 51.77.217.11:47566] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ag_1_yh8tgGc38WJ-GwBcwAAANc"]
[Fri May 22 14:21:53.458540 2026] [:error] [pid 15679:tid 15682] [client 51.77.217.11:47578] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ag_2ASh8tgGc38WJ-GwBewAAAME"]
[Fri May 22 14:21:55.965081 2026] [:error] [pid 15679:tid 15692] [client 51.77.217.11:47582] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ag_2Ayh8tgGc38WJ-GwBggAAAMs"]
[Fri May 22 14:21:58.441986 2026] [:error] [pid 15585:tid 15670] [client 51.77.217.11:47596] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ag_2BiKb-vB41AF-LC0LZAAAAJc"]
[Fri May 22 14:22:00.694045 2026] [:error] [pid 15584:tid 15633] [client 51.77.217.11:44000] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ag_2CN9Z_TVLbNEx52jpTAAAAE0"]
[Fri May 22 14:22:03.197312 2026] [:error] [pid 58813:tid 58819] [client 51.77.217.11:44008] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ag_2C56yyKWDKULhxJ1QGgAAAUM"]
[Fri May 22 14:22:05.564607 2026] [:error] [pid 15584:tid 15634] [client 51.77.217.11:44010] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ag_2Dd9Z_TVLbNEx52jpUAAAAE4"]
[Fri May 22 14:22:08.082753 2026] [:error] [pid 15583:tid 15597] [client 51.77.217.11:44016] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ag_2EHnaOncRcIm17YXX7wAAAAk"]
[Fri May 22 14:22:38.256377 2026] [:error] [pid 15585:tid 15670] [client 51.77.217.11:46738] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ag_2LiKb-vB41AF-LC0LtwAAAJc"]
[Fri May 22 14:22:40.706052 2026] [:error] [pid 15583:tid 15603] [client 51.77.217.11:35840] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ag_2MHnaOncRcIm17YXX-gAAAA8"]
[Fri May 22 14:22:43.219023 2026] [:error] [pid 58813:tid 58827] [client 51.77.217.11:35844] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ag_2M56yyKWDKULhxJ1QMAAAAUs"]
[Fri May 22 14:22:45.747966 2026] [:error] [pid 15583:tid 15598] [client 51.77.217.11:35850] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ag_2NXnaOncRcIm17YXX_wAAAAo"]
[Fri May 22 14:22:48.026088 2026] [:error] [pid 15585:tid 15649] [client 51.77.217.11:35860] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ag_2OCKb-vB41AF-LC0LwAAAAII"]
[Fri May 22 14:22:50.556221 2026] [:error] [pid 15584:tid 15634] [client 51.77.217.11:48742] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ag_2Ot9Z_TVLbNEx52jpaAAAAE4"]
[Fri May 22 14:22:53.030760 2026] [:error] [pid 15585:tid 15659] [client 51.77.217.11:48754] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ag_2PSKb-vB41AF-LC0LyQAAAIw"]
[Fri May 22 14:22:55.554303 2026] [:error] [pid 58813:tid 58840] [client 51.77.217.11:48768] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ag_2P56yyKWDKULhxJ1QNQAAAVg"]
[Fri May 22 14:22:57.939880 2026] [:error] [pid 15585:tid 15665] [client 51.77.217.11:48774] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ag_2QSKb-vB41AF-LC0L1QAAAJI"]
[Fri May 22 14:23:00.308570 2026] [:error] [pid 15584:tid 15630] [client 51.77.217.11:39158] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ag_2RN9Z_TVLbNEx52jpawAAAEo"]
[Fri May 22 14:23:02.700208 2026] [:error] [pid 58782:tid 58801] [client 51.77.217.11:39168] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ag_2RoxsdTFafgO8vhT3IwAAARE"]
[Fri May 22 14:23:05.049152 2026] [:error] [pid 15584:tid 15636] [client 51.77.217.11:39178] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ag_2Sd9Z_TVLbNEx52jpcAAAAFA"]
[Fri May 22 14:23:07.535954 2026] [:error] [pid 15679:tid 15705] [client 51.77.217.11:39184] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ag_2Syh8tgGc38WJ-GwBwAAAANg"]
[Fri May 22 14:23:10.023221 2026] [:error] [pid 15679:tid 15694] [client 51.77.217.11:39540] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ag_2Tih8tgGc38WJ-GwBxAAAAM0"]
[Fri May 22 14:23:12.527287 2026] [:error] [pid 58813:tid 58825] [client 51.77.217.11:39542] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ag_2UJ6yyKWDKULhxJ1QOwAAAUk"]
[Fri May 22 14:23:14.991845 2026] [:error] [pid 15584:tid 15633] [client 51.77.217.11:39558] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ag_2Ut9Z_TVLbNEx52jpegAAAE0"]
[Fri May 22 14:23:17.385848 2026] [:error] [pid 15679:tid 15686] [client 51.77.217.11:39564] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ag_2VSh8tgGc38WJ-GwBzwAAAMU"]
[Fri May 22 14:23:19.862337 2026] [:error] [pid 15585:tid 15662] [client 51.77.217.11:47682] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ag_2VyKb-vB41AF-LC0L7AAAAI8"]
[Fri May 22 14:23:22.348516 2026] [:error] [pid 58782:tid 58803] [client 51.77.217.11:47690] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ag_2WoxsdTFafgO8vhT3KgAAARM"]
[Fri May 22 14:23:24.991575 2026] [:error] [pid 15583:tid 15604] [client 51.77.217.11:47700] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ag_2XHnaOncRcIm17YXYFAAAABA"]
[Fri May 22 14:48:32.357220 2026] [:error] [pid 15585:tid 15667] [client 103.249.233.55:51654] [client 103.249.233.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.233.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_8QCKb-vB41AF-LC0VJwAAAJQ"]
[Fri May 22 14:48:42.681469 2026] [:error] [pid 15583:tid 15592] [client 103.249.233.55:51776] [client 103.249.233.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.233.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_8SnnaOncRcIm17YXcnAAAAAQ"]
[Fri May 22 14:48:53.109195 2026] [:error] [pid 15584:tid 15625] [client 103.249.233.55:51671] [client 103.249.233.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.233.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_8Vd9Z_TVLbNEx52juvwAAAEU"]
[Fri May 22 14:49:03.560619 2026] [:error] [pid 15585:tid 15663] [client 103.249.233.55:51702] [client 103.249.233.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.233.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_8XyKb-vB41AF-LC0VPAAAAJA"]
[Fri May 22 14:49:13.989146 2026] [:error] [pid 15679:tid 15690] [client 103.249.233.55:51631] [client 103.249.233.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.233.55, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ag_8aSh8tgGc38WJ-GwJKwAAAMk"]
[Fri May 22 16:19:25.543812 2026] [:error] [pid 15584:tid 15641] [client 92.60.28.62:50935] [client 92.60.28.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.60.28.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahARjd9Z_TVLbNEx52gB1gAAAFU"]
[Fri May 22 16:19:34.881189 2026] [:error] [pid 15585:tid 15671] [client 92.60.28.62:53108] [client 92.60.28.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.60.28.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahARliKb-vB41AF-LC021AAAAJg"]
[Fri May 22 16:19:45.400779 2026] [:error] [pid 58813:tid 58818] [client 92.60.28.62:52212] [client 92.60.28.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.60.28.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahARoZ6yyKWDKULhxJ1jaAAAAUI"]
[Fri May 22 16:19:55.928693 2026] [:error] [pid 15585:tid 15652] [client 92.60.28.62:64645] [client 92.60.28.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.60.28.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahARqyKb-vB41AF-LC028gAAAIU"]
[Fri May 22 16:20:06.442490 2026] [:error] [pid 15585:tid 15653] [client 92.60.28.62:53519] [client 92.60.28.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.60.28.62, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahARtiKb-vB41AF-LC03EAAAAIY"]
[Fri May 22 17:08:04.647086 2026] [:error] [pid 15585:tid 15671] [client 161.118.202.128:63177] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-manager/initialize"] [unique_id "ahAc9CKb-vB41AF-LC1HwgAAAJg"]
[Fri May 22 17:08:04.839923 2026] [:error] [pid 15585:tid 15652] [client 161.118.202.128:63372] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file-manager/initialize"] [unique_id "ahAc9CKb-vB41AF-LC1HxAAAAIU"]
[Fri May 22 17:29:13.327999 2026] [:error] [pid 15679:tid 15694] [client 152.59.151.176:42310] [client 152.59.151.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.151.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAh6Sh8tgGc38WJ-Gw0cgAAAM0"]
[Fri May 22 17:29:24.087324 2026] [:error] [pid 15679:tid 15695] [client 152.59.151.176:54773] [client 152.59.151.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.151.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAh9Ch8tgGc38WJ-Gw0gQAAAM4"]
[Fri May 22 17:29:35.519646 2026] [:error] [pid 58813:tid 58825] [client 152.59.151.176:55267] [client 152.59.151.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.151.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAh_56yyKWDKULhxJ1uIAAAAUk"]
[Fri May 22 17:29:46.317627 2026] [:error] [pid 15585:tid 15663] [client 152.59.151.176:55666] [client 152.59.151.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.151.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAiCiKb-vB41AF-LC1PKQAAAJA"]
[Fri May 22 17:29:57.317964 2026] [:error] [pid 58782:tid 58786] [client 152.59.151.176:56065] [client 152.59.151.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.151.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAiFYxsdTFafgO8vhQP4QAAAQI"]
[Fri May 22 17:30:08.193388 2026] [:error] [pid 15585:tid 15661] [client 152.59.151.176:56472] [client 152.59.151.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.151.176, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAiICKb-vB41AF-LC1PTAAAAI4"]
[Fri May 22 17:31:18.610490 2026] [:error] [pid 58782:tid 58790] [client 103.187.245.41:61246] [client 103.187.245.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.245.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAiZoxsdTFafgO8vhQQDgAAAQY"]
[Fri May 22 17:31:28.694688 2026] [:error] [pid 15679:tid 15693] [client 103.187.245.41:61676] [client 103.187.245.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.245.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAicCh8tgGc38WJ-Gw02wAAAMw"]
[Fri May 22 17:31:39.712660 2026] [:error] [pid 15584:tid 15635] [client 103.187.245.41:62251] [client 103.187.245.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.245.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAie99Z_TVLbNEx52gQCQAAAE8"]
[Fri May 22 17:31:50.372860 2026] [:error] [pid 15584:tid 15625] [client 103.187.245.41:62726] [client 103.187.245.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.245.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAiht9Z_TVLbNEx52gQEQAAAEU"]
[Fri May 22 17:32:01.101354 2026] [:error] [pid 15584:tid 15621] [client 103.187.245.41:63134] [client 103.187.245.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.245.41, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAikd9Z_TVLbNEx52gQGwAAAEE"]
[Fri May 22 18:31:14.690222 2026] [:error] [pid 58813:tid 58830] [client 49.42.190.71:57428] [client 49.42.190.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.190.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAwcp6yyKWDKULhxJ11mwAAAU4"]
[Fri May 22 18:31:25.921401 2026] [:error] [pid 15679:tid 15688] [client 49.42.190.71:19272] [client 49.42.190.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.190.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAwfSh8tgGc38WJ-GxCbQAAAMc"]
[Fri May 22 18:31:35.634209 2026] [:error] [pid 15585:tid 15649] [client 49.42.190.71:54791] [client 49.42.190.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.190.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAwhyKb-vB41AF-LC1g5wAAAII"]
[Fri May 22 18:31:46.142116 2026] [:error] [pid 15584:tid 15643] [client 49.42.190.71:58732] [client 49.42.190.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.190.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAwkt9Z_TVLbNEx52gbYwAAAFc"]
[Fri May 22 18:31:56.694623 2026] [:error] [pid 58782:tid 58800] [client 49.42.190.71:59056] [client 49.42.190.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.190.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAwnIxsdTFafgO8vhQXuAAAARA"]
[Fri May 22 18:32:07.249218 2026] [:error] [pid 15585:tid 15651] [client 49.42.190.71:59362] [client 49.42.190.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.190.71, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahAwpyKb-vB41AF-LC1hBQAAAIQ"]
[Fri May 22 18:47:11.114569 2026] [:error] [pid 15583:tid 15597] [client 170.83.135.108:11828] [client 170.83.135.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.83.135.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahA0L3naOncRcIm17YUEUwAAAAk"]
[Fri May 22 18:47:21.322645 2026] [:error] [pid 15585:tid 15668] [client 170.83.135.108:12126] [client 170.83.135.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.83.135.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahA0OSKb-vB41AF-LC1lVwAAAJU"]
[Fri May 22 18:47:31.852214 2026] [:error] [pid 15585:tid 15651] [client 170.83.135.108:11973] [client 170.83.135.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.83.135.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahA0QyKb-vB41AF-LC1lZgAAAIQ"]
[Fri May 22 18:47:42.336340 2026] [:error] [pid 15679:tid 15681] [client 170.83.135.108:11806] [client 170.83.135.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.83.135.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahA0Tih8tgGc38WJ-GxFuAAAAMA"]
[Fri May 22 18:47:52.869181 2026] [:error] [pid 15584:tid 15639] [client 170.83.135.108:12185] [client 170.83.135.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.83.135.108, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahA0WN9Z_TVLbNEx52gd0gAAAFM"]
[Fri May 22 18:56:56.862002 2026] [:error] [pid 15583:tid 15599] [client 43.159.138.217:46046] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahA2eHnaOncRcIm17YUG_AAAAAs"]
[Fri May 22 20:59:52.737653 2026] [:error] [pid 58813:tid 58826] [client 129.211.172.249:36310] [client 129.211.172.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahBTSJ6yyKWDKULhxJ2JOQAAAUo"]
[Fri May 22 21:49:15.800813 2026] [:error] [pid 15583:tid 15601] [client 43.162.114.69:54044] [client 43.162.114.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahBe23naOncRcIm17YUjjAAAAA0"]
[Fri May 22 22:08:52.265986 2026] [:error] [pid 15585:tid 15656] [client 103.186.151.47:20267] [client 103.186.151.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.151.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahBjdCKb-vB41AF-LC2ivgAAAIk"]
[Fri May 22 22:09:02.767752 2026] [:error] [pid 58782:tid 58807] [client 103.186.151.47:18795] [client 103.186.151.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.151.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahBjfoxsdTFafgO8vhQzbAAAARc"]
[Fri May 22 22:09:13.672386 2026] [:error] [pid 15583:tid 15595] [client 103.186.151.47:20981] [client 103.186.151.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.151.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahBjiXnaOncRcIm17YUpzAAAAAc"]
[Fri May 22 22:09:24.151510 2026] [:error] [pid 58782:tid 58795] [client 103.186.151.47:21537] [client 103.186.151.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.151.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahBjlIxsdTFafgO8vhQzeQAAAQs"]
[Fri May 22 22:09:34.803198 2026] [:error] [pid 15583:tid 15599] [client 103.186.151.47:17010] [client 103.186.151.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.186.151.47, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahBjnnnaOncRcIm17YUp4gAAAAs"]
[Fri May 22 23:09:22.294805 2026] [:error] [pid 15679:tid 15693] [client 191.37.88.78:58218] [client 191.37.88.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.37.88.78, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahBxoih8tgGc38WJ-GyDqQAAAMw"]
[Fri May 22 23:09:32.491011 2026] [:error] [pid 58782:tid 58784] [client 191.37.88.78:58792] [client 191.37.88.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.37.88.78, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahBxrIxsdTFafgO8vhQ6DwAAAQA"]
[Fri May 22 23:09:43.277805 2026] [:error] [pid 15584:tid 15635] [client 191.37.88.78:59186] [client 191.37.88.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.37.88.78, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahBxt99Z_TVLbNEx52hM8QAAAE8"]
[Fri May 22 23:09:54.090014 2026] [:error] [pid 15584:tid 15643] [client 191.37.88.78:59580] [client 191.37.88.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.37.88.78, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahBxwt9Z_TVLbNEx52hM9wAAAFc"]
[Fri May 22 23:10:05.601623 2026] [:error] [pid 15584:tid 15620] [client 191.37.88.78:59969] [client 191.37.88.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.37.88.78, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahBxzd9Z_TVLbNEx52hNAAAAAEA"]
[Sat May 23 01:08:56.974495 2026] [:error] [pid 15584:tid 15625] [client 191.23.117.144:50997] [client 191.23.117.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.23.117.144, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahCNqN9Z_TVLbNEx52hhMwAAAEU"]
[Sat May 23 01:09:05.499618 2026] [:error] [pid 58782:tid 58794] [client 191.23.117.144:51470] [client 191.23.117.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.23.117.144, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahCNsYxsdTFafgO8vhRLtAAAAQo"]
[Sat May 23 01:09:16.349808 2026] [:error] [pid 15583:tid 15594] [client 191.23.117.144:51900] [client 191.23.117.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.23.117.144, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahCNvHnaOncRcIm17YVopQAAAAY"]
[Sat May 23 01:17:44.778930 2026] [:error] [pid 15583:tid 15588] [client 170.106.143.6:38576] [client 170.106.143.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahCPuHnaOncRcIm17YVsUQAAAAA"]
[Sat May 23 05:12:51.452667 2026] [:error] [pid 31039:tid 31064] [client 46.186.10.175:50523] [client 46.186.10.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahDG06IYDYo8WvA5zLJMoQAAANc"]
[Sat May 23 05:13:16.343353 2026] [:error] [pid 31039:tid 31046] [client 46.186.10.175:50853] [client 46.186.10.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.186.10.175, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahDG7KIYDYo8WvA5zLJM7QAAAMU"]
[Sat May 23 05:13:39.234299 2026] [:error] [pid 30941:tid 30983] [client 46.186.10.175:51127] [client 46.186.10.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.186.10.175, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahDHA3TIgjSDhiZmvlUVDQAAAEc"]
[Sat May 23 06:43:45.850373 2026] [:error] [pid 30940:tid 30967] [client 54.37.252.118:46700] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "ahDcIZqUP2XZmzp7RDp_1wAAABI"]
[Sat May 23 06:43:48.332028 2026] [:error] [pid 30940:tid 30952] [client 54.37.252.118:37438] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "ahDcJJqUP2XZmzp7RDp_2gAAAAM"]
[Sat May 23 06:43:50.847453 2026] [:error] [pid 25876:tid 25890] [client 54.37.252.118:37452] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ahDcJgSpWUCKPezIBJCGSwAAAQw"]
[Sat May 23 06:43:53.253882 2026] [:error] [pid 30941:tid 30986] [client 54.37.252.118:37456] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ahDcKXTIgjSDhiZmvlUmQQAAAEo"]
[Sat May 23 06:43:55.678978 2026] [:error] [pid 31039:tid 31064] [client 54.37.252.118:47284] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ahDcK6IYDYo8WvA5zLJpngAAANc"]
[Sat May 23 06:43:58.225130 2026] [:error] [pid 31039:tid 31063] [client 54.37.252.118:47300] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ahDcLqIYDYo8WvA5zLJpoQAAANY"]
[Sat May 23 06:44:00.746490 2026] [:error] [pid 30941:tid 30998] [client 54.37.252.118:47306] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahDcMHTIgjSDhiZmvlUmTwAAAFY"]
[Sat May 23 06:44:03.258908 2026] [:error] [pid 30941:tid 30978] [client 54.37.252.118:47308] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ahDcM3TIgjSDhiZmvlUmUwAAAEI"]
[Sat May 23 06:44:05.708247 2026] [:error] [pid 31039:tid 31064] [client 54.37.252.118:49040] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ahDcNaIYDYo8WvA5zLJpqAAAANc"]
[Sat May 23 06:44:08.091021 2026] [:error] [pid 30940:tid 30953] [client 54.37.252.118:49050] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahDcOJqUP2XZmzp7RDp_7wAAAAQ"]
[Sat May 23 06:44:10.457574 2026] [:error] [pid 30940:tid 30966] [client 54.37.252.118:49060] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ahDcOpqUP2XZmzp7RDp_9AAAABE"]
[Sat May 23 06:44:12.810313 2026] [:error] [pid 30942:tid 31027] [client 54.37.252.118:49068] [client 54.37.252.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ahDcPNUosz64YFiBlG3C8gAAAJg"]
[Sat May 23 07:18:13.681926 2026] [:error] [pid 25876:tid 25889] [client 43.134.104.17:34500] [client 43.134.104.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahDkNQSpWUCKPezIBJCTKwAAAQs"]
[Sat May 23 07:20:35.454983 2026] [:error] [pid 30942:tid 31003] [client 54.37.252.212:58914] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "ahDkw9Uosz64YFiBlG3KwQAAAIA"]
[Sat May 23 07:20:37.853741 2026] [:error] [pid 25876:tid 25883] [client 54.37.252.212:36882] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "ahDkxQSpWUCKPezIBJCUGQAAAQU"]
[Sat May 23 07:20:40.325568 2026] [:error] [pid 30942:tid 31020] [client 54.37.252.212:36898] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "ahDkyNUosz64YFiBlG3KxAAAAJE"]
[Sat May 23 07:20:42.780131 2026] [:error] [pid 25876:tid 25891] [client 54.37.252.212:36900] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ahDkygSpWUCKPezIBJCUWQAAAQ0"]
[Sat May 23 07:20:45.233837 2026] [:error] [pid 25876:tid 25884] [client 54.37.252.212:36906] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "ahDkzQSpWUCKPezIBJCUXQAAAQY"]
[Sat May 23 07:20:47.699314 2026] [:error] [pid 31039:tid 31054] [client 54.37.252.212:55216] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ahDkz6IYDYo8WvA5zLJzFAAAAM0"]
[Sat May 23 07:20:50.163833 2026] [:error] [pid 31039:tid 31053] [client 54.37.252.212:55230] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "ahDk0qIYDYo8WvA5zLJzGAAAAMw"]
[Sat May 23 07:20:52.594343 2026] [:error] [pid 25876:tid 25891] [client 54.37.252.212:55236] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "ahDk1ASpWUCKPezIBJCUZQAAAQ0"]
[Sat May 23 07:20:55.067897 2026] [:error] [pid 31039:tid 31057] [client 54.37.252.212:55242] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "ahDk16IYDYo8WvA5zLJzIQAAANA"]
[Sat May 23 07:20:57.356930 2026] [:error] [pid 31039:tid 31045] [client 54.37.252.212:37850] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ahDk2aIYDYo8WvA5zLJzJwAAAMQ"]
[Sat May 23 07:20:59.688773 2026] [:error] [pid 25876:tid 25901] [client 54.37.252.212:37852] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ahDk2wSpWUCKPezIBJCUbwAAARc"]
[Sat May 23 07:21:01.989923 2026] [:error] [pid 31039:tid 31052] [client 54.37.252.212:37854] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ahDk3aIYDYo8WvA5zLJzLgAAAMs"]
[Sat May 23 07:21:04.418559 2026] [:error] [pid 25876:tid 25898] [client 54.37.252.212:37856] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahDk4ASpWUCKPezIBJCUdgAAARQ"]
[Sat May 23 07:21:06.860046 2026] [:error] [pid 31039:tid 31056] [client 54.37.252.212:46730] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahDk4qIYDYo8WvA5zLJzMgAAAM8"]
[Sat May 23 07:21:09.302971 2026] [:error] [pid 31039:tid 31059] [client 54.37.252.212:46734] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ahDk5aIYDYo8WvA5zLJzNAAAANI"]
[Sat May 23 07:21:11.770992 2026] [:error] [pid 31039:tid 31044] [client 54.37.252.212:46738] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ahDk56IYDYo8WvA5zLJzOQAAAMM"]
[Sat May 23 07:21:14.209906 2026] [:error] [pid 31039:tid 31047] [client 54.37.252.212:46740] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ahDk6qIYDYo8WvA5zLJzPwAAAMY"]
[Sat May 23 07:21:16.636359 2026] [:error] [pid 31039:tid 31045] [client 54.37.252.212:60102] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ahDk7KIYDYo8WvA5zLJzRAAAAMQ"]
[Sat May 23 07:21:19.105621 2026] [:error] [pid 30942:tid 31009] [client 54.37.252.212:60118] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ahDk79Uosz64YFiBlG3K9AAAAIY"]
[Sat May 23 07:21:21.548549 2026] [:error] [pid 30940:tid 30962] [client 54.37.252.212:60126] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahDk8ZqUP2XZmzp7RDqFrwAAAA0"]
[Sat May 23 07:21:23.980512 2026] [:error] [pid 30942:tid 31004] [client 54.37.252.212:60142] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ahDk89Uosz64YFiBlG3K-gAAAIE"]
[Sat May 23 07:21:26.427744 2026] [:error] [pid 25876:tid 25884] [client 54.37.252.212:60146] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ahDk9gSpWUCKPezIBJCUogAAAQY"]
[Sat May 23 07:21:28.883252 2026] [:error] [pid 31039:tid 31060] [client 54.37.252.212:34172] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ahDk-KIYDYo8WvA5zLJzSQAAANM"]
[Sat May 23 07:21:31.330601 2026] [:error] [pid 30941:tid 30988] [client 54.37.252.212:34180] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ahDk-3TIgjSDhiZmvlUtUgAAAEw"]
[Sat May 23 07:22:00.676867 2026] [:error] [pid 30942:tid 31014] [client 54.37.252.212:34192] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ahDlGNUosz64YFiBlG3LEgAAAIs"]
[Sat May 23 07:22:03.063427 2026] [:error] [pid 30942:tid 31013] [client 54.37.252.212:49024] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ahDlG9Uosz64YFiBlG3LEwAAAIo"]
[Sat May 23 07:22:05.542105 2026] [:error] [pid 30941:tid 30983] [client 54.37.252.212:49032] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ahDlHXTIgjSDhiZmvlUtbQAAAEc"]
[Sat May 23 07:22:08.005417 2026] [:error] [pid 25876:tid 25897] [client 54.37.252.212:35136] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ahDlIASpWUCKPezIBJCU9gAAARM"]
[Sat May 23 07:22:10.498877 2026] [:error] [pid 25876:tid 25902] [client 54.37.252.212:35150] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ahDlIgSpWUCKPezIBJCU_gAAARg"]
[Sat May 23 07:22:12.807342 2026] [:error] [pid 30942:tid 31009] [client 54.37.252.212:35158] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahDlJNUosz64YFiBlG3LHAAAAIY"]
[Sat May 23 07:22:15.295625 2026] [:error] [pid 30941:tid 31000] [client 54.37.252.212:35172] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ahDlJ3TIgjSDhiZmvlUteAAAAFg"]
[Sat May 23 07:22:17.759318 2026] [:error] [pid 31039:tid 31042] [client 54.37.252.212:60482] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ahDlKaIYDYo8WvA5zLJzhAAAAME"]
[Sat May 23 07:22:20.215689 2026] [:error] [pid 25876:tid 25879] [client 54.37.252.212:60492] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ahDlLASpWUCKPezIBJCVAwAAAQE"]
[Sat May 23 07:22:22.658805 2026] [:error] [pid 31039:tid 31046] [client 54.37.252.212:60496] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahDlLqIYDYo8WvA5zLJzjAAAAMU"]
[Sat May 23 07:22:25.123800 2026] [:error] [pid 30942:tid 31021] [client 54.37.252.212:60504] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ahDlMdUosz64YFiBlG3LKwAAAJI"]
[Sat May 23 07:22:27.587722 2026] [:error] [pid 31039:tid 31048] [client 54.37.252.212:53864] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ahDlM6IYDYo8WvA5zLJzkgAAAMc"]
[Sat May 23 07:22:30.076526 2026] [:error] [pid 30940:tid 30967] [client 54.37.252.212:53866] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahDlNpqUP2XZmzp7RDqF2gAAABI"]
[Sat May 23 07:22:32.381990 2026] [:error] [pid 31039:tid 31045] [client 54.37.252.212:53880] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahDlOKIYDYo8WvA5zLJzmQAAAMQ"]
[Sat May 23 07:22:34.871646 2026] [:error] [pid 31039:tid 31056] [client 54.37.252.212:53884] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ahDlOqIYDYo8WvA5zLJznQAAAM8"]
[Sat May 23 07:22:37.309422 2026] [:error] [pid 30941:tid 30981] [client 54.37.252.212:44286] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ahDlPXTIgjSDhiZmvlUtiAAAAEU"]
[Sat May 23 07:22:39.630848 2026] [:error] [pid 25876:tid 25896] [client 54.37.252.212:44288] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ahDlPwSpWUCKPezIBJCVFgAAARI"]
[Sat May 23 07:22:41.930858 2026] [:error] [pid 30942:tid 31025] [client 54.37.252.212:44300] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ahDlQdUosz64YFiBlG3LQQAAAJY"]
[Sat May 23 07:22:44.368052 2026] [:error] [pid 25876:tid 25894] [client 54.37.252.212:44310] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ahDlRASpWUCKPezIBJCVHQAAARA"]
[Sat May 23 07:22:46.815508 2026] [:error] [pid 30941:tid 30982] [client 54.37.252.212:46120] [client 54.37.252.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ahDlRnTIgjSDhiZmvlUtjQAAAEY"]
[Sat May 23 08:41:42.447174 2026] [:error] [pid 30942:tid 31022] [client 175.27.163.171:58156] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahD3xtUosz64YFiBlG3bngAAAJM"]
[Sat May 23 09:53:00.583943 2026] [:error] [pid 30940:tid 30971] [client 138.249.138.2:56698] [client 138.249.138.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "ahEIfJqUP2XZmzp7RDqfgAAAABY"]
[Sat May 23 11:57:55.660886 2026] [:error] [pid 30942:tid 31012] [client 43.157.82.252:46950] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahElw9Uosz64YFiBlG0KhwAAAIk"]
[Sat May 23 14:36:43.367208 2026] [:error] [pid 30940:tid 30964] [client 122.161.53.141:6075] [client 122.161.53.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.53.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahFK-5qUP2XZmzp7RDrVLAAAAA8"]
[Sat May 23 14:36:53.615068 2026] [:error] [pid 30940:tid 30956] [client 122.161.53.141:6996] [client 122.161.53.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.53.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahFLBZqUP2XZmzp7RDrVNAAAAAc"]
[Sat May 23 14:37:03.948481 2026] [:error] [pid 31039:tid 31048] [client 122.161.53.141:32366] [client 122.161.53.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.53.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahFLD6IYDYo8WvA5zLL0rAAAAMc"]
[Sat May 23 14:37:14.629368 2026] [:error] [pid 30940:tid 30953] [client 122.161.53.141:4277] [client 122.161.53.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.53.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahFLGpqUP2XZmzp7RDrVXgAAAAQ"]
[Sat May 23 14:37:25.068748 2026] [:error] [pid 25876:tid 25879] [client 122.161.53.141:15345] [client 122.161.53.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.53.141, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahFLJQSpWUCKPezIBJBFdwAAAQE"]
[Sat May 23 15:28:05.047091 2026] [:error] [pid 30942:tid 31011] [client 1.20.175.183:62192] [client 1.20.175.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.20.175.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahFXBdUosz64YFiBlG1A3QAAAIg"]
[Sat May 23 15:28:16.381765 2026] [:error] [pid 25876:tid 25878] [client 1.20.175.183:62508] [client 1.20.175.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.20.175.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahFXEASpWUCKPezIBJBhGwAAAQA"]
[Sat May 23 15:28:28.804893 2026] [:error] [pid 30940:tid 30969] [client 1.20.175.183:6923] [client 1.20.175.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.20.175.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahFXHJqUP2XZmzp7RDrgWgAAABQ"]
[Sat May 23 15:28:40.590831 2026] [:error] [pid 30942:tid 31021] [client 1.20.175.183:63360] [client 1.20.175.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.20.175.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahFXKNUosz64YFiBlG1A_QAAAJI"]
[Sat May 23 15:28:52.219888 2026] [:error] [pid 25876:tid 25893] [client 1.20.175.183:63838] [client 1.20.175.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.20.175.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahFXNASpWUCKPezIBJBhdQAAAQ8"]
[Sat May 23 15:52:25.872817 2026] [:error] [pid 30942:tid 31012] [client 43.157.20.63:43490] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahFcudUosz64YFiBlG1J3QAAAIk"]
[Sat May 23 16:21:28.124297 2026] [:error] [pid 31039:tid 31053] [client 140.245.53.172:56340] [client 140.245.53.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahFjiKIYDYo8WvA5zLIcNwAAAMw"]
[Sat May 23 16:21:28.521939 2026] [:error] [pid 31039:tid 31044] [client 140.245.53.172:49602] [client 140.245.53.172] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.53.172, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahFjiKIYDYo8WvA5zLIcOQAAAMM"]
[Sat May 23 16:21:30.619323 2026] [proxy_fcgi:error] [pid 31039:tid 31044] [client 140.245.53.172:49602] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sat May 23 17:41:16.275087 2026] [:error] [pid 30940:tid 30969] [client 147.235.221.45:46055] [client 147.235.221.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.235.221.45, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahF2PJqUP2XZmzp7RDr5kgAAABQ"]
[Sat May 23 17:41:26.170846 2026] [:error] [pid 44326:tid 44359] [client 147.235.221.45:45064] [client 147.235.221.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.235.221.45, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahF2RsyrPrcAqE-FOKJyAQAAAcQ"]
[Sat May 23 17:41:35.674408 2026] [:error] [pid 44326:tid 44378] [client 147.235.221.45:46236] [client 147.235.221.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.235.221.45, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahF2T8yrPrcAqE-FOKJyBgAAAdc"]
[Sat May 23 17:41:46.272869 2026] [:error] [pid 30941:tid 30982] [client 147.235.221.45:46075] [client 147.235.221.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.235.221.45, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahF2WnTIgjSDhiZmvlW0yQAAAEY"]
[Sat May 23 17:41:56.796975 2026] [:error] [pid 30941:tid 30980] [client 147.235.221.45:46301] [client 147.235.221.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.235.221.45, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahF2ZHTIgjSDhiZmvlW00gAAAEQ"]
[Sat May 23 18:01:46.688492 2026] [:error] [pid 31039:tid 31049] [client 183.82.105.207:56488] [client 183.82.105.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.105.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahF7CqIYDYo8WvA5zLIyYwAAAMg"]
[Sat May 23 18:01:57.053139 2026] [:error] [pid 30941:tid 30990] [client 183.82.105.207:2816] [client 183.82.105.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.105.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahF7FXTIgjSDhiZmvlW6yAAAAE4"]
[Sat May 23 18:02:07.610545 2026] [:error] [pid 31039:tid 31046] [client 183.82.105.207:15726] [client 183.82.105.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.82.105.207, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahF7H6IYDYo8WvA5zLIyjAAAAMU"]
[Sat May 23 18:47:03.498246 2026] [:error] [pid 44325:tid 44348] [client 104.28.232.204:28669] [client 104.28.232.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.232.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGFp1gUQb4puB_2yV8SEAAAAZQ"]
[Sat May 23 18:47:17.494603 2026] [:error] [pid 44325:tid 44330] [client 104.28.200.204:45854] [client 104.28.200.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.200.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGFtVgUQb4puB_2yV8SGgAAAYI"]
[Sat May 23 18:47:45.472688 2026] [:error] [pid 30941:tid 30998] [client 104.28.200.204:20543] [client 104.28.200.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.200.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGF0XTIgjSDhiZmvlXKxgAAAFY"]
[Sat May 23 18:47:56.672042 2026] [:error] [pid 44325:tid 44340] [client 104.28.200.204:36376] [client 104.28.200.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.200.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGF3FgUQb4puB_2yV8SJwAAAYw"]
[Sat May 23 18:48:08.574137 2026] [:error] [pid 30942:tid 31024] [client 104.28.200.204:50877] [client 104.28.200.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.200.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGF6NUosz64YFiBlG1pcwAAAJU"]
[Sat May 23 18:48:17.188042 2026] [:error] [pid 30940:tid 30958] [client 104.28.200.204:32132] [client 104.28.200.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.200.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGF8ZqUP2XZmzp7RDoBRAAAAAk"]
[Sat May 23 18:48:38.517523 2026] [:error] [pid 31039:tid 31045] [client 104.28.232.204:64395] [client 104.28.232.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.232.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGGBqIYDYo8WvA5zLI48QAAAMQ"]
[Sat May 23 18:49:11.279906 2026] [:error] [pid 30940:tid 30955] [client 104.28.232.204:39301] [client 104.28.232.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.232.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGGJ5qUP2XZmzp7RDoBeAAAAAY"]
[Sat May 23 18:52:21.089593 2026] [:error] [pid 25876:tid 25893] [client 104.28.232.204:29898] [client 104.28.232.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.232.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGG5QSpWUCKPezIBJCgmwAAAQ8"]
[Sat May 23 18:52:31.530232 2026] [:error] [pid 44296:tid 44304] [client 104.28.232.204:39167] [client 104.28.232.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.232.204, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGG75drUdFI6ijvMkl7ZAAAAUY"]
[Sat May 23 19:16:37.094892 2026] [:error] [pid 44296:tid 44307] [client 43.135.144.81:40170] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahGMlZdrUdFI6ijvMkl_FwAAAUk"]
[Sat May 23 19:44:59.423303 2026] [:error] [pid 30942:tid 31025] [client 1.53.253.192:52019] [client 1.53.253.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.53.253.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGTO9Uosz64YFiBlG1vagAAAJY"]
[Sat May 23 19:45:10.147992 2026] [:error] [pid 25876:tid 25892] [client 1.53.253.192:52427] [client 1.53.253.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.53.253.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGTRgSpWUCKPezIBJCnZgAAAQ4"]
[Sat May 23 19:45:20.966825 2026] [:error] [pid 30941:tid 30978] [client 1.53.253.192:52752] [client 1.53.253.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.53.253.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGTUHTIgjSDhiZmvlXb_QAAAEI"]
[Sat May 23 19:45:31.583791 2026] [:error] [pid 44296:tid 44301] [client 1.53.253.192:53058] [client 1.53.253.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.53.253.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGTW5drUdFI6ijvMkmEYwAAAUM"]
[Sat May 23 19:45:42.219014 2026] [:error] [pid 44326:tid 44361] [client 1.53.253.192:53362] [client 1.53.253.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.53.253.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGTZsyrPrcAqE-FOKKRvAAAAcY"]
[Sat May 23 19:45:52.971337 2026] [:error] [pid 30941:tid 30981] [client 1.53.253.192:53672] [client 1.53.253.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.53.253.192, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGTcHTIgjSDhiZmvlXcJgAAAEU"]
[Sat May 23 20:36:32.487464 2026] [:error] [pid 44326:tid 44375] [client 106.214.9.227:26055] [client 106.214.9.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.214.9.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGfUMyrPrcAqE-FOKKbRAAAAdQ"]
[Sat May 23 20:36:42.809536 2026] [:error] [pid 44325:tid 44352] [client 106.214.9.227:22909] [client 106.214.9.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.214.9.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGfWlgUQb4puB_2yV8iOgAAAZg"]
[Sat May 23 20:36:53.260162 2026] [:error] [pid 44326:tid 44366] [client 106.214.9.227:15132] [client 106.214.9.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.214.9.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGfZcyrPrcAqE-FOKKbagAAAcs"]
[Sat May 23 20:37:04.085097 2026] [:error] [pid 44326:tid 44378] [client 106.214.9.227:27610] [client 106.214.9.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.214.9.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGfcMyrPrcAqE-FOKKbfgAAAdc"]
[Sat May 23 20:37:14.732248 2026] [:error] [pid 30940:tid 30959] [client 106.214.9.227:32351] [client 106.214.9.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.214.9.227, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahGfepqUP2XZmzp7RDoLDQAAAAo"]
[Sat May 23 22:13:16.348841 2026] [:error] [pid 44326:tid 44370] [client 193.188.113.65:42601] [client 193.188.113.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.188.113.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahG1_MyrPrcAqE-FOKK2hQAAAc8"]
[Sat May 23 22:13:26.708557 2026] [:error] [pid 44296:tid 44303] [client 193.188.113.65:42911] [client 193.188.113.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.188.113.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahG2BpdrUdFI6ijvMkmcAwAAAUU"]
[Sat May 23 22:13:37.330022 2026] [:error] [pid 30941:tid 30988] [client 193.188.113.65:42725] [client 193.188.113.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.188.113.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahG2EXTIgjSDhiZmvlUNKAAAAEw"]
[Sat May 23 22:13:47.988953 2026] [:error] [pid 30941:tid 30979] [client 193.188.113.65:42538] [client 193.188.113.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.188.113.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahG2G3TIgjSDhiZmvlUNSAAAAEM"]
[Sat May 23 22:13:58.585010 2026] [:error] [pid 30941:tid 30989] [client 193.188.113.65:42745] [client 193.188.113.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.188.113.65, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahG2JnTIgjSDhiZmvlUNWAAAAE0"]
[Sat May 23 22:32:25.095616 2026] [:error] [pid 30942:tid 31020] [client 43.156.232.190:36502] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahG6edUosz64YFiBlG2CvAAAAJE"]
[Sat May 23 22:52:27.664925 2026] [:error] [pid 30941:tid 30994] [client 143.244.137.100:47806] [client 143.244.137.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/css/modules.php"] [unique_id "ahG_K3TIgjSDhiZmvlUbrgAAAFI"]
[Sat May 23 22:55:29.270974 2026] [:error] [pid 44326:tid 44377] [client 143.244.137.100:34746] [client 143.244.137.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/uploader.php"] [unique_id "ahG_4cyrPrcAqE-FOKLDjgAAAdY"]
[Sun May 24 00:09:14.998862 2026] [:error] [pid 30940:tid 30956] [client 51.77.217.11:42826] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "ahHRKpqUP2XZmzp7RDolmwAAAAc"]
[Sun May 24 00:09:17.409039 2026] [:error] [pid 44296:tid 44300] [client 51.77.217.11:57996] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "ahHRLZdrUdFI6ijvMkmzegAAAUI"]
[Sun May 24 00:09:19.935981 2026] [:error] [pid 44296:tid 44303] [client 51.77.217.11:33730] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ahHRL5drUdFI6ijvMkmzggAAAUU"]
[Sun May 24 00:09:22.282231 2026] [:error] [pid 44326:tid 44366] [client 51.77.217.11:33744] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ahHRMsyrPrcAqE-FOKLYAAAAAcs"]
[Sun May 24 00:09:24.826453 2026] [:error] [pid 30940:tid 30950] [client 51.77.217.11:33750] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ahHRNJqUP2XZmzp7RDolnQAAAAE"]
[Sun May 24 00:09:27.390270 2026] [:error] [pid 44325:tid 44334] [client 51.77.217.11:33754] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ahHRN1gUQb4puB_2yV9TcAAAAYY"]
[Sun May 24 00:09:29.893902 2026] [:error] [pid 31039:tid 31049] [client 51.77.217.11:38900] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahHROaIYDYo8WvA5zLJjLQAAAMg"]
[Sun May 24 00:09:32.296018 2026] [:error] [pid 30941:tid 30988] [client 51.77.217.11:38914] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ahHRPHTIgjSDhiZmvlU4RgAAAEw"]
[Sun May 24 00:09:34.840523 2026] [:error] [pid 44325:tid 44348] [client 51.77.217.11:38928] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ahHRPlgUQb4puB_2yV9ThQAAAZQ"]
[Sun May 24 00:09:37.518667 2026] [:error] [pid 44326:tid 44377] [client 51.77.217.11:38940] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahHRQcyrPrcAqE-FOKLYCAAAAdY"]
[Sun May 24 00:09:40.043621 2026] [:error] [pid 30941:tid 30981] [client 51.77.217.11:50502] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ahHRRHTIgjSDhiZmvlU4UAAAAEU"]
[Sun May 24 00:09:42.634397 2026] [:error] [pid 30941:tid 30984] [client 51.77.217.11:50510] [client 51.77.217.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ahHRRnTIgjSDhiZmvlU4XwAAAEg"]
[Sun May 24 00:44:53.102212 2026] [:error] [pid 30941:tid 30993] [client 54.37.252.231:34786] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "ahHZhXTIgjSDhiZmvlVHEQAAAFE"]
[Sun May 24 00:44:55.998936 2026] [:error] [pid 25876:tid 25891] [client 54.37.252.231:49988] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "ahHZhwSpWUCKPezIBJDUvgAAAQ0"]
[Sun May 24 00:44:58.864739 2026] [:error] [pid 25876:tid 25880] [client 54.37.252.231:49998] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "ahHZigSpWUCKPezIBJDUwQAAAQI"]
[Sun May 24 00:45:01.778294 2026] [:error] [pid 31039:tid 31057] [client 54.37.252.231:50014] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ahHZjaIYDYo8WvA5zLJoKAAAANA"]
[Sun May 24 00:45:04.978907 2026] [:error] [pid 25876:tid 25901] [client 54.37.252.231:39362] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "ahHZkASpWUCKPezIBJDUyAAAARc"]
[Sun May 24 00:45:07.836461 2026] [:error] [pid 44326:tid 44369] [client 54.37.252.231:39376] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ahHZk8yrPrcAqE-FOKLjJAAAAc4"]
[Sun May 24 00:45:10.722724 2026] [:error] [pid 44296:tid 44300] [client 54.37.252.231:39390] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20plus.aspx"] [unique_id "ahHZlpdrUdFI6ijvMkm6ewAAAUI"]
[Sun May 24 00:45:13.969186 2026] [:error] [pid 44326:tid 44361] [client 54.37.252.231:39402] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20168.aspx"] [unique_id "ahHZmcyrPrcAqE-FOKLjSQAAAcY"]
[Sun May 24 00:45:16.958494 2026] [:error] [pid 44325:tid 44337] [client 54.37.252.231:56656] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "ahHZnFgUQb4puB_2yV9bVgAAAYk"]
[Sun May 24 00:45:19.664058 2026] [:error] [pid 44325:tid 44330] [client 54.37.252.231:56658] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ahHZn1gUQb4puB_2yV9bWwAAAYI"]
[Sun May 24 00:45:22.509342 2026] [:error] [pid 31039:tid 31063] [client 54.37.252.231:56670] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ahHZoqIYDYo8WvA5zLJoLgAAANY"]
[Sun May 24 00:45:25.521634 2026] [:error] [pid 44325:tid 44337] [client 54.37.252.231:53510] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ahHZpVgUQb4puB_2yV9bZQAAAYk"]
[Sun May 24 00:45:28.468489 2026] [:error] [pid 30941:tid 30986] [client 54.37.252.231:53518] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahHZqHTIgjSDhiZmvlVHSgAAAEo"]
[Sun May 24 00:45:31.350653 2026] [:error] [pid 30941:tid 30988] [client 54.37.252.231:53520] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahHZq3TIgjSDhiZmvlVHTgAAAEw"]
[Sun May 24 00:45:34.513253 2026] [:error] [pid 30941:tid 30979] [client 54.37.252.231:53536] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ahHZrnTIgjSDhiZmvlVHVgAAAEM"]
[Sun May 24 00:45:37.172883 2026] [:error] [pid 44325:tid 44337] [client 54.37.252.231:58494] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ahHZsVgUQb4puB_2yV9bcQAAAYk"]
[Sun May 24 00:45:40.330062 2026] [:error] [pid 44325:tid 44347] [client 54.37.252.231:58508] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ahHZtFgUQb4puB_2yV9begAAAZM"]
[Sun May 24 00:45:43.036841 2026] [:error] [pid 30941:tid 30991] [client 54.37.252.231:58522] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ahHZt3TIgjSDhiZmvlVHZgAAAE8"]
[Sun May 24 00:45:46.063671 2026] [:error] [pid 30941:tid 30979] [client 54.37.252.231:58984] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ahHZunTIgjSDhiZmvlVHbgAAAEM"]
[Sun May 24 00:45:49.187887 2026] [:error] [pid 30941:tid 31000] [client 54.37.252.231:58992] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahHZvXTIgjSDhiZmvlVHeQAAAFg"]
[Sun May 24 00:46:25.054646 2026] [:error] [pid 30942:tid 31024] [client 54.37.252.231:59000] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ahHZ4dUosz64YFiBlG2VDQAAAJU"]
[Sun May 24 00:46:27.958694 2026] [:error] [pid 44296:tid 44305] [client 54.37.252.231:45600] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ahHZ45drUdFI6ijvMkm6zQAAAUc"]
[Sun May 24 00:46:30.669194 2026] [:error] [pid 44325:tid 44330] [client 54.37.252.231:45610] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ahHZ5lgUQb4puB_2yV9bqwAAAYI"]
[Sun May 24 00:46:34.446383 2026] [:error] [pid 25876:tid 25897] [client 54.37.252.231:45620] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ahHZ6gSpWUCKPezIBJDU-wAAARM"]
[Sun May 24 00:46:37.245337 2026] [:error] [pid 44326:tid 44375] [client 54.37.252.231:48698] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ahHZ7cyrPrcAqE-FOKLjogAAAdQ"]
[Sun May 24 00:46:40.057604 2026] [:error] [pid 30941:tid 30987] [client 54.37.252.231:48706] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ahHZ8HTIgjSDhiZmvlVH5wAAAEs"]
[Sun May 24 00:46:42.887698 2026] [:error] [pid 44326:tid 44355] [client 54.37.252.231:48712] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ahHZ8syrPrcAqE-FOKLjqAAAAcA"]
[Sun May 24 00:46:45.663745 2026] [:error] [pid 44326:tid 44363] [client 54.37.252.231:55024] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ahHZ9cyrPrcAqE-FOKLjqwAAAcg"]
[Sun May 24 00:46:48.280086 2026] [:error] [pid 44325:tid 44346] [client 54.37.252.231:55028] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ahHZ-FgUQb4puB_2yV9bugAAAZI"]
[Sun May 24 00:46:51.273989 2026] [:error] [pid 30942:tid 31022] [client 54.37.252.231:55042] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahHZ-9Uosz64YFiBlG2VGwAAAJM"]
[Sun May 24 00:46:54.114581 2026] [:error] [pid 44326:tid 44368] [client 54.37.252.231:55050] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ahHZ_syrPrcAqE-FOKLjuAAAAc0"]
[Sun May 24 00:46:57.493361 2026] [:error] [pid 44326:tid 44366] [client 54.37.252.231:56548] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ahHaAcyrPrcAqE-FOKLjvwAAAcs"]
[Sun May 24 00:47:00.638979 2026] [:error] [pid 25876:tid 25900] [client 54.37.252.231:56552] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ahHaBASpWUCKPezIBJDVAwAAARY"]
[Sun May 24 00:47:04.376559 2026] [:error] [pid 44325:tid 44341] [client 54.37.252.231:56568] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahHaCFgUQb4puB_2yV9byQAAAY0"]
[Sun May 24 00:47:07.215509 2026] [:error] [pid 44325:tid 44342] [client 54.37.252.231:34400] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ahHaC1gUQb4puB_2yV9bzAAAAY4"]
[Sun May 24 00:47:10.189718 2026] [:error] [pid 44325:tid 44351] [client 54.37.252.231:34402] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ahHaDlgUQb4puB_2yV9b1QAAAZc"]
[Sun May 24 00:47:13.627514 2026] [:error] [pid 44325:tid 44336] [client 54.37.252.231:34416] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahHaEVgUQb4puB_2yV9b3AAAAYg"]
[Sun May 24 00:47:16.906348 2026] [:error] [pid 44326:tid 44371] [client 54.37.252.231:41796] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahHaFMyrPrcAqE-FOKLj0wAAAdA"]
[Sun May 24 00:47:20.224908 2026] [:error] [pid 30941:tid 30989] [client 54.37.252.231:41810] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ahHaGHTIgjSDhiZmvlVIEwAAAE0"]
[Sun May 24 01:06:52.965760 2026] [:error] [pid 30941:tid 30996] [client 58.10.135.250:8042] [client 58.10.135.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.10.135.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahHerHTIgjSDhiZmvlVOiQAAAFQ"]
[Sun May 24 01:07:04.885102 2026] [:error] [pid 44325:tid 44342] [client 58.10.135.250:8292] [client 58.10.135.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.10.135.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahHeuFgUQb4puB_2yV9fqQAAAY4"]
[Sun May 24 01:07:16.711142 2026] [:error] [pid 44325:tid 44338] [client 58.10.135.250:9919] [client 58.10.135.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.10.135.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahHexFgUQb4puB_2yV9fuwAAAYo"]
[Sun May 24 01:07:28.388187 2026] [:error] [pid 30940:tid 30954] [client 58.10.135.250:2159] [client 58.10.135.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.10.135.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahHe0JqUP2XZmzp7RDorpgAAAAU"]
[Sun May 24 01:07:39.346506 2026] [:error] [pid 31039:tid 31047] [client 58.10.135.250:9985] [client 58.10.135.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.10.135.250, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahHe26IYDYo8WvA5zLJqnQAAAMY"]
[Sun May 24 02:37:58.292491 2026] [:error] [pid 44325:tid 44330] [client 49.36.47.10:61269] [client 49.36.47.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.47.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH0BlgUQb4puB_2yV9vLgAAAYI"]
[Sun May 24 02:38:08.860299 2026] [:error] [pid 25876:tid 25887] [client 49.36.47.10:61827] [client 49.36.47.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.47.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH0EASpWUCKPezIBJDirwAAAQk"]
[Sun May 24 02:38:19.829972 2026] [:error] [pid 31039:tid 31060] [client 49.36.47.10:62266] [client 49.36.47.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.47.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH0G6IYDYo8WvA5zLJ1ZAAAANM"]
[Sun May 24 02:38:30.924165 2026] [:error] [pid 44326:tid 44379] [client 49.36.47.10:62644] [client 49.36.47.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.47.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH0JsyrPrcAqE-FOKL8jwAAAdg"]
[Sun May 24 02:38:41.807965 2026] [:error] [pid 44326:tid 44379] [client 49.36.47.10:63011] [client 49.36.47.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.47.10, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH0McyrPrcAqE-FOKL8pQAAAdg"]
[Sun May 24 03:11:57.505837 2026] [:error] [pid 31039:tid 31043] [client 84.36.152.58:53771] [client 84.36.152.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.36.152.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH7_aIYDYo8WvA5zLJ5UAAAAMI"]
[Sun May 24 03:11:57.828669 2026] [:error] [pid 30942:tid 31014] [client 84.36.152.58:53821] [client 84.36.152.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.36.152.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH7_dUosz64YFiBlG2koAAAAIs"]
[Sun May 24 03:12:08.541537 2026] [:error] [pid 30940:tid 30961] [client 84.36.152.58:54315] [client 84.36.152.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.36.152.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH8CJqUP2XZmzp7RDo4oQAAAAw"]
[Sun May 24 03:12:09.709279 2026] [:error] [pid 44325:tid 44341] [client 84.36.152.58:54384] [client 84.36.152.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.36.152.58, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH8CVgUQb4puB_2yV90MwAAAY0"]
[Sun May 24 03:12:21.728840 2026] [:error] [pid 44326:tid 44358] [client 41.33.121.42:54885] [client 41.33.121.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.33.121.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH8FcyrPrcAqE-FOKICYwAAAcM"]
[Sun May 24 03:12:21.875995 2026] [:error] [pid 31039:tid 31048] [client 41.33.121.42:54939] [client 41.33.121.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.33.121.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH8FaIYDYo8WvA5zLJ5YwAAAMc"]
[Sun May 24 03:12:33.965455 2026] [:error] [pid 30941:tid 30989] [client 41.33.121.42:55420] [client 41.33.121.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.33.121.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH8IXTIgjSDhiZmvlVtaQAAAE0"]
[Sun May 24 03:17:07.602406 2026] [:error] [pid 31039:tid 31062] [client 177.124.34.0:51817] [client 177.124.34.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.124.34.0, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH9M6IYDYo8WvA5zLJ6AwAAANU"]
[Sun May 24 03:17:17.255332 2026] [:error] [pid 44296:tid 44304] [client 177.124.34.0:62867] [client 177.124.34.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.124.34.0, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH9PZdrUdFI6ijvMknW8gAAAUY"]
[Sun May 24 03:17:28.104520 2026] [:error] [pid 30942:tid 31013] [client 177.124.34.0:62144] [client 177.124.34.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.124.34.0, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH9SNUosz64YFiBlG2lMwAAAIo"]
[Sun May 24 03:17:38.928750 2026] [:error] [pid 30942:tid 31004] [client 177.124.34.0:51818] [client 177.124.34.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.124.34.0, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH9UtUosz64YFiBlG2lOgAAAIE"]
[Sun May 24 03:17:49.849377 2026] [:error] [pid 44326:tid 44355] [client 177.124.34.0:62930] [client 177.124.34.0] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.124.34.0, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahH9XcyrPrcAqE-FOKIDRwAAAcA"]
[Sun May 24 04:07:24.935624 2026] [:error] [pid 50873:tid 50947] [client 45.133.176.32:42043] [client 45.133.176.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.32, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahII_OlYxsqwDcWZbhK9AQAAAIc"]
[Sun May 24 04:07:30.330181 2026] [:error] [pid 50873:tid 50958] [client 45.133.176.31:23205] [client 45.133.176.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.31, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahIJAulYxsqwDcWZbhK9JAAAAJI"]
[Sun May 24 04:07:35.770167 2026] [:error] [pid 58918:tid 58921] [client 45.133.176.42:26837] [client 45.133.176.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.42, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahIJB6T5tvv40jh4HYbhNwAAAYE"]
[Sun May 24 04:07:41.708505 2026] [:error] [pid 58918:tid 58942] [client 45.133.176.24:35123] [client 45.133.176.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.24, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahIJDaT5tvv40jh4HYbhUAAAAZY"]
[Sun May 24 04:07:50.919071 2026] [:error] [pid 58918:tid 58926] [client 45.133.176.23:38747] [client 45.133.176.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.133.176.23, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahIJFqT5tvv40jh4HYbhfQAAAYY"]
[Sun May 24 08:13:14.987422 2026] [:error] [pid 50873:tid 50963] [client 139.155.126.16:60338] [client 139.155.126.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahJCmulYxsqwDcWZbhLcywAAAJc"]
[Sun May 24 10:21:29.994655 2026] [:error] [pid 49689:tid 49718] [client 43.165.195.234:42622] [client 43.165.195.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahJgqQaxiY3NxLUD97UjSAAAAIA"]
[Sun May 24 10:34:00.199816 2026] [:error] [pid 2639:tid 2658] [client 20.63.33.98:14524] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "ahJjmEzQncQTd0Z0Oe_nUAAAARE"]
[Sun May 24 10:34:00.925482 2026] [:error] [pid 49775:tid 49800] [client 20.63.33.98:31948] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "ahJjmIvZb8G6T8WpI1gwYQAAABc"]
[Sun May 24 10:34:01.948784 2026] [:error] [pid 2639:tid 2652] [client 20.63.33.98:13370] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "ahJjmUzQncQTd0Z0Oe_nUQAAAQs"]
[Sun May 24 10:34:03.016476 2026] [:error] [pid 49688:tid 49703] [client 20.63.33.98:6654] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "ahJjm2YoQ9V6a_4pBshsPAAAAEw"]
[Sun May 24 10:34:03.649252 2026] [:error] [pid 49688:tid 49698] [client 20.63.33.98:6210] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "ahJjm2YoQ9V6a_4pBshsPgAAAEc"]
[Sun May 24 10:34:04.812658 2026] [:error] [pid 2639:tid 2653] [client 20.63.33.98:7359] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "ahJjnEzQncQTd0Z0Oe_nVAAAAQw"]
[Sun May 24 10:34:05.645143 2026] [:error] [pid 2639:tid 2662] [client 20.63.33.98:13330] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "ahJjnUzQncQTd0Z0Oe_nVwAAARU"]
[Sun May 24 10:34:06.831493 2026] [:error] [pid 49744:tid 49766] [client 20.63.33.98:31939] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "ahJjnjsE5kPdFpUbbHF2IQAAANQ"]
[Sun May 24 10:34:07.857130 2026] [:error] [pid 2639:tid 2651] [client 20.63.33.98:6225] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ahJjn0zQncQTd0Z0Oe_nXQAAAQo"]
[Sun May 24 10:34:08.871032 2026] [:error] [pid 2639:tid 2659] [client 20.63.33.98:1177] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ahJjoEzQncQTd0Z0Oe_nYAAAARI"]
[Sun May 24 10:34:09.562308 2026] [:error] [pid 49775:tid 49781] [client 20.63.33.98:10273] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ahJjoYvZb8G6T8WpI1gwZwAAAAQ"]
[Sun May 24 10:34:10.235543 2026] [:error] [pid 49689:tid 49742] [client 20.63.33.98:1184] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ahJjogaxiY3NxLUD97UnOwAAAJg"]
[Sun May 24 10:34:10.874196 2026] [:error] [pid 49744:tid 49770] [client 20.63.33.98:25211] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-der.php"] [unique_id "ahJjojsE5kPdFpUbbHF2JQAAANg"]
[Sun May 24 10:34:11.529388 2026] [:error] [pid 49744:tid 49767] [client 20.63.33.98:1182] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-der.php"] [unique_id "ahJjozsE5kPdFpUbbHF2JwAAANU"]
[Sun May 24 10:34:11.998934 2026] [:error] [pid 49775:tid 49780] [client 20.63.33.98:31966] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-der.php"] [unique_id "ahJjo4vZb8G6T8WpI1gwbQAAAAM"]
[Sun May 24 10:34:12.512576 2026] [:error] [pid 49775:tid 49792] [client 20.63.33.98:27785] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-der.php"] [unique_id "ahJjpIvZb8G6T8WpI1gwbgAAAA8"]
[Sun May 24 10:34:13.005794 2026] [:error] [pid 49775:tid 49779] [client 20.63.33.98:17108] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "ahJjpYvZb8G6T8WpI1gwcQAAAAI"]
[Sun May 24 10:34:13.601350 2026] [:error] [pid 49775:tid 49798] [client 20.63.33.98:24513] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "ahJjpYvZb8G6T8WpI1gwcwAAABU"]
[Sun May 24 10:34:14.313730 2026] [:error] [pid 49744:tid 49757] [client 20.63.33.98:17111] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "ahJjpjsE5kPdFpUbbHF2KAAAAMs"]
[Sun May 24 10:34:14.820021 2026] [:error] [pid 49689:tid 49734] [client 20.63.33.98:17103] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "ahJjpgaxiY3NxLUD97UnPgAAAJA"]
[Sun May 24 10:34:15.286872 2026] [:error] [pid 49775:tid 49777] [client 20.63.33.98:31956] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "ahJjp4vZb8G6T8WpI1gwdwAAAAA"]
[Sun May 24 10:34:15.891676 2026] [:error] [pid 49689:tid 49730] [client 20.63.33.98:22611] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "ahJjpwaxiY3NxLUD97UnPwAAAIw"]
[Sun May 24 10:34:16.463349 2026] [:error] [pid 49775:tid 49786] [client 20.63.33.98:17131] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "ahJjqIvZb8G6T8WpI1gweQAAAAk"]
[Sun May 24 10:34:17.047903 2026] [:error] [pid 49744:tid 49765] [client 20.63.33.98:27791] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "ahJjqTsE5kPdFpUbbHF2KwAAANM"]
[Sun May 24 10:34:17.612522 2026] [:error] [pid 49688:tid 49701] [client 20.63.33.98:27796] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ahJjqWYoQ9V6a_4pBshsRwAAAEo"]
[Sun May 24 10:34:18.379188 2026] [:error] [pid 49688:tid 49696] [client 20.63.33.98:24569] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ahJjqmYoQ9V6a_4pBshsSAAAAEU"]
[Sun May 24 10:34:18.867880 2026] [:error] [pid 49775:tid 49801] [client 20.63.33.98:13711] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ahJjqovZb8G6T8WpI1gwfQAAABg"]
[Sun May 24 10:34:19.420512 2026] [:error] [pid 2639:tid 2663] [client 20.63.33.98:34889] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ahJjq0zQncQTd0Z0Oe_naAAAARY"]
[Sun May 24 10:34:20.009068 2026] [:error] [pid 49744:tid 49755] [client 20.63.33.98:31953] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "ahJjrDsE5kPdFpUbbHF2MgAAAMk"]
[Sun May 24 10:34:20.543084 2026] [:error] [pid 49775:tid 49799] [client 20.63.33.98:7319] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "ahJjrIvZb8G6T8WpI1gwfgAAABY"]
[Sun May 24 10:34:21.134527 2026] [:error] [pid 49775:tid 49796] [client 20.63.33.98:27811] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "ahJjrYvZb8G6T8WpI1gwfwAAABM"]
[Sun May 24 10:34:21.721471 2026] [:error] [pid 49744:tid 49763] [client 20.63.33.98:24546] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "ahJjrTsE5kPdFpUbbHF2OAAAANE"]
[Sun May 24 10:34:22.312963 2026] [:error] [pid 2639:tid 2650] [client 20.63.33.98:31947] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJjrkzQncQTd0Z0Oe_nbAAAAQk"]
[Sun May 24 10:34:23.046667 2026] [:error] [pid 49688:tid 49712] [client 20.63.33.98:31968] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJjr2YoQ9V6a_4pBshsUQAAAFU"]
[Sun May 24 10:34:24.269999 2026] [:error] [pid 49775:tid 49792] [client 20.63.33.98:31961] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJjsIvZb8G6T8WpI1gwhQAAAA8"]
[Sun May 24 10:34:25.538109 2026] [:error] [pid 49775:tid 49800] [client 20.63.33.98:19254] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJjsYvZb8G6T8WpI1gwigAAABc"]
[Sun May 24 10:34:26.350282 2026] [:error] [pid 49689:tid 49739] [client 20.63.33.98:31986] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wuasr.php"] [unique_id "ahJjsgaxiY3NxLUD97UnTAAAAJU"]
[Sun May 24 10:34:27.057548 2026] [:error] [pid 49688:tid 49712] [client 20.63.33.98:13334] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wuasr.php"] [unique_id "ahJjs2YoQ9V6a_4pBshsXAAAAFU"]
[Sun May 24 10:34:27.574193 2026] [:error] [pid 49775:tid 49799] [client 20.63.33.98:17124] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wuasr.php"] [unique_id "ahJjs4vZb8G6T8WpI1gwjwAAABY"]
[Sun May 24 10:34:28.086246 2026] [:error] [pid 49688:tid 49707] [client 20.63.33.98:11438] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wuasr.php"] [unique_id "ahJjtGYoQ9V6a_4pBshsXQAAAFA"]
[Sun May 24 10:34:28.685201 2026] [:error] [pid 49775:tid 49791] [client 20.63.33.98:19237] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ahJjtIvZb8G6T8WpI1gwkAAAAA4"]
[Sun May 24 10:34:29.214282 2026] [:error] [pid 49775:tid 49780] [client 20.63.33.98:19224] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ahJjtYvZb8G6T8WpI1gwkgAAAAM"]
[Sun May 24 10:34:29.882473 2026] [:error] [pid 2639:tid 2643] [client 20.63.33.98:31943] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ahJjtUzQncQTd0Z0Oe_ndgAAAQI"]
[Sun May 24 10:34:30.454604 2026] [:error] [pid 49744:tid 49747] [client 20.63.33.98:13324] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ahJjtjsE5kPdFpUbbHF2QwAAAME"]
[Sun May 24 10:34:30.893644 2026] [:error] [pid 2639:tid 2653] [client 20.63.33.98:17094] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "ahJjtkzQncQTd0Z0Oe_neAAAAQw"]
[Sun May 24 10:34:31.463323 2026] [:error] [pid 49775:tid 49798] [client 20.63.33.98:24523] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "ahJjt4vZb8G6T8WpI1gwlQAAABU"]
[Sun May 24 10:34:32.057493 2026] [:error] [pid 2639:tid 2665] [client 20.63.33.98:27819] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "ahJjuEzQncQTd0Z0Oe_neQAAARg"]
[Sun May 24 10:34:32.649469 2026] [:error] [pid 49775:tid 49786] [client 20.63.33.98:24571] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "ahJjuIvZb8G6T8WpI1gwmAAAAAk"]
[Sun May 24 10:34:33.341547 2026] [:error] [pid 2639:tid 2655] [client 20.63.33.98:22627] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "ahJjuUzQncQTd0Z0Oe_nfgAAAQ4"]
[Sun May 24 10:34:33.839639 2026] [:error] [pid 2639:tid 2650] [client 20.63.33.98:31989] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "ahJjuUzQncQTd0Z0Oe_ngQAAAQk"]
[Sun May 24 10:34:34.415091 2026] [:error] [pid 2639:tid 2646] [client 20.63.33.98:34929] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "ahJjukzQncQTd0Z0Oe_nhAAAAQU"]
[Sun May 24 10:34:35.029297 2026] [:error] [pid 49775:tid 49796] [client 20.63.33.98:22655] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "ahJju4vZb8G6T8WpI1gwnQAAABM"]
[Sun May 24 10:34:37.366317 2026] [:error] [pid 49744:tid 49750] [client 20.63.33.98:19257] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "ahJjvTsE5kPdFpUbbHF2RQAAAMQ"]
[Sun May 24 10:34:38.154300 2026] [:error] [pid 2639:tid 2663] [client 20.63.33.98:11445] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "ahJjvkzQncQTd0Z0Oe_niQAAARY"]
[Sun May 24 10:34:39.813493 2026] [:error] [pid 2639:tid 2659] [client 20.63.33.98:31955] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "ahJjv0zQncQTd0Z0Oe_niwAAARI"]
[Sun May 24 10:34:45.851774 2026] [:error] [pid 49775:tid 49799] [client 20.63.33.98:34880] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "ahJjxYvZb8G6T8WpI1gwrQAAABY"]
[Sun May 24 10:34:48.069680 2026] [:error] [pid 49689:tid 49723] [client 20.63.33.98:22603] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "ahJjyAaxiY3NxLUD97UneQAAAIU"]
[Sun May 24 10:34:49.202733 2026] [:error] [pid 49744:tid 49770] [client 20.63.33.98:35537] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "ahJjyTsE5kPdFpUbbHF2aAAAANg"]
[Sun May 24 10:34:50.058578 2026] [:error] [pid 49688:tid 49701] [client 20.63.33.98:19233] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "ahJjymYoQ9V6a_4pBshsaAAAAEo"]
[Sun May 24 10:34:50.772989 2026] [:error] [pid 49775:tid 49792] [client 20.63.33.98:34909] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "ahJjyovZb8G6T8WpI1gwvAAAAA8"]
[Sun May 24 10:34:51.693550 2026] [:error] [pid 49744:tid 49768] [client 20.63.33.98:34909] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ahJjyzsE5kPdFpUbbHF2bgAAANY"]
[Sun May 24 10:34:52.225950 2026] [:error] [pid 2639:tid 2645] [client 20.63.33.98:19252] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ahJjzEzQncQTd0Z0Oe_nuAAAAQQ"]
[Sun May 24 10:34:53.027218 2026] [:error] [pid 2639:tid 2662] [client 20.63.33.98:33450] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ahJjzUzQncQTd0Z0Oe_nuwAAARU"]
[Sun May 24 10:34:53.626776 2026] [:error] [pid 2639:tid 2660] [client 20.63.33.98:9313] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ahJjzUzQncQTd0Z0Oe_nvQAAARM"]
[Sun May 24 10:34:54.369579 2026] [:error] [pid 2639:tid 2663] [client 20.63.33.98:26726] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "ahJjzkzQncQTd0Z0Oe_nvwAAARY"]
[Sun May 24 10:34:55.223925 2026] [:error] [pid 2639:tid 2641] [client 20.63.33.98:26635] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "ahJjz0zQncQTd0Z0Oe_nwwAAAQA"]
[Sun May 24 10:34:55.932938 2026] [:error] [pid 49775:tid 49778] [client 20.63.33.98:26631] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "ahJjz4vZb8G6T8WpI1gwwQAAAAE"]
[Sun May 24 10:34:56.580768 2026] [:error] [pid 2639:tid 2643] [client 20.63.33.98:33439] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "ahJj0EzQncQTd0Z0Oe_nyQAAAQI"]
[Sun May 24 10:34:57.165160 2026] [:error] [pid 2639:tid 2647] [client 20.63.33.98:48093] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "ahJj0UzQncQTd0Z0Oe_nygAAAQY"]
[Sun May 24 10:34:58.227369 2026] [:error] [pid 2639:tid 2657] [client 20.63.33.98:35545] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "ahJj0kzQncQTd0Z0Oe_nzAAAARA"]
[Sun May 24 10:34:58.956595 2026] [:error] [pid 49775:tid 49785] [client 20.63.33.98:28276] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "ahJj0ovZb8G6T8WpI1gwxAAAAAg"]
[Sun May 24 10:35:12.674683 2026] [:error] [pid 49775:tid 49790] [client 20.63.33.98:48091] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mifta.php"] [unique_id "ahJj4IvZb8G6T8WpI1gw3QAAAA0"]
[Sun May 24 10:35:14.760064 2026] [:error] [pid 49688:tid 49712] [client 20.63.33.98:1657] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mifta.php"] [unique_id "ahJj4mYoQ9V6a_4pBshsbAAAAFU"]
[Sun May 24 10:35:20.998367 2026] [:error] [pid 49744:tid 49758] [client 20.63.33.98:24040] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mifta.php"] [unique_id "ahJj6DsE5kPdFpUbbHF2jAAAAMw"]
[Sun May 24 10:35:23.134425 2026] [:error] [pid 2639:tid 2644] [client 20.63.33.98:33715] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mifta.php"] [unique_id "ahJj60zQncQTd0Z0Oe_n5QAAAQM"]
[Sun May 24 10:35:25.118567 2026] [:error] [pid 49744:tid 49751] [client 20.63.33.98:33699] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-firewall.php"] [unique_id "ahJj7TsE5kPdFpUbbHF2lAAAAMU"]
[Sun May 24 10:35:25.796292 2026] [:error] [pid 49689:tid 49729] [client 20.63.33.98:7029] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-firewall.php"] [unique_id "ahJj7QaxiY3NxLUD97UnkgAAAIs"]
[Sun May 24 10:35:27.079528 2026] [:error] [pid 49775:tid 49780] [client 20.63.33.98:24057] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-firewall.php"] [unique_id "ahJj74vZb8G6T8WpI1gw6wAAAAM"]
[Sun May 24 10:35:28.163418 2026] [:error] [pid 49775:tid 49789] [client 20.63.33.98:35156] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-firewall.php"] [unique_id "ahJj8IvZb8G6T8WpI1gw7gAAAAw"]
[Sun May 24 10:35:30.039439 2026] [:error] [pid 49775:tid 49793] [client 20.63.33.98:35180] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fun.php"] [unique_id "ahJj8ovZb8G6T8WpI1gw8wAAABA"]
[Sun May 24 10:35:30.873899 2026] [:error] [pid 49775:tid 49783] [client 20.63.33.98:7008] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fun.php"] [unique_id "ahJj8ovZb8G6T8WpI1gw-QAAAAY"]
[Sun May 24 10:35:31.671116 2026] [:error] [pid 49688:tid 49693] [client 20.63.33.98:7001] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fun.php"] [unique_id "ahJj82YoQ9V6a_4pBshscwAAAEI"]
[Sun May 24 10:35:32.339783 2026] [:error] [pid 49775:tid 49785] [client 20.63.33.98:1963] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fun.php"] [unique_id "ahJj9IvZb8G6T8WpI1gxAQAAAAg"]
[Sun May 24 10:35:33.095980 2026] [:error] [pid 2639:tid 2644] [client 20.63.33.98:26287] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "ahJj9UzQncQTd0Z0Oe_n7QAAAQM"]
[Sun May 24 10:35:33.942200 2026] [:error] [pid 49688:tid 49705] [client 20.63.33.98:27037] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "ahJj9WYoQ9V6a_4pBshsdAAAAE4"]
[Sun May 24 10:35:35.025131 2026] [:error] [pid 49744:tid 49766] [client 20.63.33.98:35637] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "ahJj9zsE5kPdFpUbbHF2owAAANQ"]
[Sun May 24 10:35:36.844779 2026] [:error] [pid 49744:tid 49760] [client 20.63.33.98:57607] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "ahJj-DsE5kPdFpUbbHF2pAAAAM4"]
[Sun May 24 10:35:37.510928 2026] [:error] [pid 2639:tid 2647] [client 20.63.33.98:6954] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sys.php"] [unique_id "ahJj-UzQncQTd0Z0Oe_n-wAAAQY"]
[Sun May 24 10:35:38.859070 2026] [:error] [pid 2639:tid 2646] [client 20.63.33.98:26249] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sys.php"] [unique_id "ahJj-kzQncQTd0Z0Oe_n_wAAAQU"]
[Sun May 24 10:35:40.396173 2026] [:error] [pid 49775:tid 49798] [client 20.63.33.98:9609] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sys.php"] [unique_id "ahJj_IvZb8G6T8WpI1gxBgAAABU"]
[Sun May 24 10:35:41.368504 2026] [:error] [pid 49775:tid 49800] [client 20.63.33.98:35176] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sys.php"] [unique_id "ahJj_YvZb8G6T8WpI1gxCAAAABc"]
[Sun May 24 10:35:43.139058 2026] [:error] [pid 49775:tid 49779] [client 20.63.33.98:1453] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "ahJj_4vZb8G6T8WpI1gxDAAAAAI"]
[Sun May 24 10:35:44.327621 2026] [:error] [pid 2639:tid 2661] [client 20.63.33.98:14541] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "ahJkAEzQncQTd0Z0Oe_oBAAAARQ"]
[Sun May 24 10:35:44.927543 2026] [:error] [pid 49689:tid 49719] [client 20.63.33.98:26259] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "ahJkAAaxiY3NxLUD97UnogAAAIE"]
[Sun May 24 10:35:46.138199 2026] [:error] [pid 2639:tid 2653] [client 20.63.33.98:1938] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "ahJkAkzQncQTd0Z0Oe_oCAAAAQw"]
[Sun May 24 10:35:47.552370 2026] [:error] [pid 49744:tid 49761] [client 20.63.33.98:12953] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "ahJkAzsE5kPdFpUbbHF2qgAAAM8"]
[Sun May 24 10:35:48.252661 2026] [:error] [pid 49689:tid 49718] [client 20.63.33.98:1456] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "ahJkBAaxiY3NxLUD97UnpQAAAIA"]
[Sun May 24 10:35:49.712063 2026] [:error] [pid 2639:tid 2662] [client 20.63.33.98:6931] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "ahJkBUzQncQTd0Z0Oe_oDAAAARU"]
[Sun May 24 10:35:50.374784 2026] [:error] [pid 2639:tid 2646] [client 20.63.33.98:6970] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "ahJkBkzQncQTd0Z0Oe_oDwAAAQU"]
[Sun May 24 10:35:51.748353 2026] [:error] [pid 2639:tid 2649] [client 20.63.33.98:6935] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "ahJkB0zQncQTd0Z0Oe_oEgAAAQg"]
[Sun May 24 10:35:52.629364 2026] [:error] [pid 2639:tid 2643] [client 20.63.33.98:9627] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "ahJkCEzQncQTd0Z0Oe_oFQAAAQI"]
[Sun May 24 10:35:53.246905 2026] [:error] [pid 2639:tid 2654] [client 20.63.33.98:1512] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "ahJkCUzQncQTd0Z0Oe_oGQAAAQ0"]
[Sun May 24 10:35:54.050939 2026] [:error] [pid 49775:tid 49790] [client 20.63.33.98:1920] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "ahJkCovZb8G6T8WpI1gxGwAAAA0"]
[Sun May 24 10:35:54.657678 2026] [:error] [pid 49775:tid 49792] [client 20.63.33.98:9643] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "ahJkCovZb8G6T8WpI1gxHAAAAA8"]
[Sun May 24 10:35:55.326181 2026] [:error] [pid 49775:tid 49791] [client 20.63.33.98:45758] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "ahJkC4vZb8G6T8WpI1gxIAAAAA4"]
[Sun May 24 10:35:56.284664 2026] [:error] [pid 49744:tid 49767] [client 20.63.33.98:11085] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "ahJkDDsE5kPdFpUbbHF2sgAAANU"]
[Sun May 24 10:35:57.020077 2026] [:error] [pid 49689:tid 49730] [client 20.63.33.98:11093] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "ahJkDQaxiY3NxLUD97UnqgAAAIw"]
[Sun May 24 10:35:57.719154 2026] [:error] [pid 49775:tid 49787] [client 20.63.33.98:12945] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "ahJkDYvZb8G6T8WpI1gxJwAAAAo"]
[Sun May 24 10:35:58.431599 2026] [:error] [pid 49689:tid 49720] [client 20.63.33.98:24523] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "ahJkDgaxiY3NxLUD97UnrQAAAII"]
[Sun May 24 10:35:59.711941 2026] [:error] [pid 49744:tid 49758] [client 20.63.33.98:45736] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "ahJkDzsE5kPdFpUbbHF2uwAAAMw"]
[Sun May 24 10:36:01.404511 2026] [:error] [pid 49775:tid 49789] [client 20.63.33.98:45764] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "ahJkEYvZb8G6T8WpI1gxLwAAAAw"]
[Sun May 24 10:36:03.131960 2026] [:error] [pid 2639:tid 2643] [client 20.63.33.98:1477] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sing.php"] [unique_id "ahJkE0zQncQTd0Z0Oe_oJgAAAQI"]
[Sun May 24 10:36:04.155861 2026] [:error] [pid 2639:tid 2662] [client 20.63.33.98:1509] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sing.php"] [unique_id "ahJkFEzQncQTd0Z0Oe_oKwAAARU"]
[Sun May 24 10:36:05.441903 2026] [:error] [pid 49775:tid 49797] [client 20.63.33.98:14148] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sing.php"] [unique_id "ahJkFYvZb8G6T8WpI1gxMgAAABQ"]
[Sun May 24 10:36:06.399004 2026] [:error] [pid 49688:tid 49713] [client 20.63.33.98:14192] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sing.php"] [unique_id "ahJkFmYoQ9V6a_4pBshsgQAAAFY"]
[Sun May 24 10:36:07.197971 2026] [:error] [pid 49688:tid 49715] [client 20.63.33.98:14185] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "ahJkF2YoQ9V6a_4pBshsgwAAAFg"]
[Sun May 24 10:36:08.632517 2026] [:error] [pid 49688:tid 49693] [client 20.63.33.98:45783] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "ahJkGGYoQ9V6a_4pBshsiAAAAEI"]
[Sun May 24 10:36:09.572407 2026] [:error] [pid 49775:tid 49793] [client 20.63.33.98:26316] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "ahJkGYvZb8G6T8WpI1gxOQAAABA"]
[Sun May 24 10:36:25.080189 2026] [:error] [pid 49775:tid 49795] [client 20.63.33.98:9608] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/explorer/index_.php"] [unique_id "ahJkKYvZb8G6T8WpI1gxXwAAABI"]
[Sun May 24 10:36:25.597543 2026] [:error] [pid 49689:tid 49734] [client 20.63.33.98:14095] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/explorer/index_.php"] [unique_id "ahJkKQaxiY3NxLUD97UnugAAAJA"]
[Sun May 24 10:36:26.182272 2026] [:error] [pid 2639:tid 2647] [client 20.63.33.98:14133] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/explorer/index_.php"] [unique_id "ahJkKkzQncQTd0Z0Oe_oXwAAAQY"]
[Sun May 24 10:36:26.823385 2026] [:error] [pid 2639:tid 2653] [client 20.63.33.98:22563] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/explorer/index_.php"] [unique_id "ahJkKkzQncQTd0Z0Oe_oYAAAAQw"]
[Sun May 24 10:36:27.374751 2026] [:error] [pid 49744:tid 49765] [client 20.63.33.98:14104] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "ahJkKzsE5kPdFpUbbHF25QAAANM"]
[Sun May 24 10:36:27.913624 2026] [:error] [pid 2639:tid 2643] [client 20.63.33.98:26354] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "ahJkK0zQncQTd0Z0Oe_oYgAAAQI"]
[Sun May 24 10:36:28.560086 2026] [:error] [pid 49689:tid 49732] [client 20.63.33.98:34566] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "ahJkLAaxiY3NxLUD97UnuwAAAI4"]
[Sun May 24 10:36:29.071688 2026] [:error] [pid 49689:tid 49721] [client 20.63.33.98:24481] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "ahJkLQaxiY3NxLUD97UnvAAAAIM"]
[Sun May 24 10:36:29.707414 2026] [:error] [pid 49688:tid 49709] [client 20.63.33.98:13818] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "ahJkLWYoQ9V6a_4pBshsoQAAAFI"]
[Sun May 24 10:36:30.215582 2026] [:error] [pid 49688:tid 49698] [client 20.63.33.98:27866] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "ahJkLmYoQ9V6a_4pBshsowAAAEc"]
[Sun May 24 10:36:30.786242 2026] [:error] [pid 49688:tid 49701] [client 20.63.33.98:14115] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "ahJkLmYoQ9V6a_4pBshspQAAAEo"]
[Sun May 24 10:36:31.291159 2026] [:error] [pid 49688:tid 49700] [client 20.63.33.98:2031] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "ahJkL2YoQ9V6a_4pBshspwAAAEk"]
[Sun May 24 10:36:31.777117 2026] [:error] [pid 49744:tid 49764] [client 20.63.33.98:26309] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-at.php"] [unique_id "ahJkLzsE5kPdFpUbbHF26QAAANI"]
[Sun May 24 10:36:32.565582 2026] [:error] [pid 2639:tid 2647] [client 20.63.33.98:11110] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-at.php"] [unique_id "ahJkMEzQncQTd0Z0Oe_obQAAAQY"]
[Sun May 24 10:36:33.135217 2026] [:error] [pid 49744:tid 49748] [client 20.63.33.98:25906] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-at.php"] [unique_id "ahJkMTsE5kPdFpUbbHF26wAAAMI"]
[Sun May 24 10:36:33.864070 2026] [:error] [pid 49744:tid 49758] [client 20.63.33.98:27872] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-at.php"] [unique_id "ahJkMTsE5kPdFpUbbHF27gAAAMw"]
[Sun May 24 10:36:34.471128 2026] [:error] [pid 49744:tid 49765] [client 20.63.33.98:33746] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJkMjsE5kPdFpUbbHF28AAAANM"]
[Sun May 24 10:36:35.156256 2026] [:error] [pid 49775:tid 49777] [client 20.63.33.98:14094] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJkM4vZb8G6T8WpI1gxYwAAAAA"]
[Sun May 24 10:36:35.750134 2026] [:error] [pid 49744:tid 49769] [client 20.63.33.98:27887] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJkMzsE5kPdFpUbbHF28wAAANc"]
[Sun May 24 10:36:36.334705 2026] [:error] [pid 49688:tid 49714] [client 20.63.33.98:13772] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJkNGYoQ9V6a_4pBshsqgAAAFc"]
[Sun May 24 10:36:36.913885 2026] [:error] [pid 2639:tid 2657] [client 20.63.33.98:14115] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ahJkNEzQncQTd0Z0Oe_obwAAARA"]
[Sun May 24 10:36:37.508052 2026] [:error] [pid 2639:tid 2656] [client 20.63.33.98:24260] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ahJkNUzQncQTd0Z0Oe_ocgAAAQ8"]
[Sun May 24 10:36:37.998701 2026] [:error] [pid 2639:tid 2650] [client 20.63.33.98:24314] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ahJkNUzQncQTd0Z0Oe_odAAAAQk"]
[Sun May 24 10:36:38.586796 2026] [:error] [pid 49775:tid 49799] [client 20.63.33.98:24469] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ahJkNovZb8G6T8WpI1gxZQAAABY"]
[Sun May 24 10:36:39.041583 2026] [:error] [pid 49775:tid 49801] [client 20.63.33.98:24546] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ahJkN4vZb8G6T8WpI1gxaAAAABg"]
[Sun May 24 10:36:39.505485 2026] [:error] [pid 49775:tid 49782] [client 20.63.33.98:25887] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ahJkN4vZb8G6T8WpI1gxawAAAAU"]
[Sun May 24 10:36:40.052341 2026] [:error] [pid 49775:tid 49790] [client 20.63.33.98:13766] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ahJkOIvZb8G6T8WpI1gxbQAAAA0"]
[Sun May 24 10:36:40.519152 2026] [:error] [pid 49775:tid 49793] [client 20.63.33.98:13769] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ahJkOIvZb8G6T8WpI1gxcQAAABA"]
[Sun May 24 10:36:40.973559 2026] [:error] [pid 49688:tid 49713] [client 20.63.33.98:34603] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "ahJkOGYoQ9V6a_4pBshsrAAAAFY"]
[Sun May 24 10:36:41.411184 2026] [:error] [pid 2639:tid 2653] [client 20.63.33.98:24508] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "ahJkOUzQncQTd0Z0Oe_oegAAAQw"]
[Sun May 24 10:36:41.861274 2026] [:error] [pid 2639:tid 2642] [client 20.63.33.98:1398] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "ahJkOUzQncQTd0Z0Oe_oewAAAQE"]
[Sun May 24 10:36:42.418815 2026] [:error] [pid 49775:tid 49799] [client 20.63.33.98:1373] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "ahJkOovZb8G6T8WpI1gxcwAAABY"]
[Sun May 24 10:36:42.918377 2026] [:error] [pid 2639:tid 2658] [client 20.63.33.98:24488] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "ahJkOkzQncQTd0Z0Oe_ogAAAARE"]
[Sun May 24 10:36:43.349736 2026] [:error] [pid 2639:tid 2652] [client 20.63.33.98:33786] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "ahJkO0zQncQTd0Z0Oe_oggAAAQs"]
[Sun May 24 10:36:43.813878 2026] [:error] [pid 2639:tid 2654] [client 20.63.33.98:33754] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "ahJkO0zQncQTd0Z0Oe_oiAAAAQ0"]
[Sun May 24 10:36:44.286919 2026] [:error] [pid 2639:tid 2662] [client 20.63.33.98:1365] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "ahJkPEzQncQTd0Z0Oe_oiwAAARU"]
[Sun May 24 10:36:44.768651 2026] [:error] [pid 2639:tid 2659] [client 20.63.33.98:25133] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "ahJkPEzQncQTd0Z0Oe_ojQAAARI"]
[Sun May 24 10:36:45.198583 2026] [:error] [pid 2639:tid 2648] [client 20.63.33.98:1348] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "ahJkPUzQncQTd0Z0Oe_okAAAAQc"]
[Sun May 24 10:36:45.656117 2026] [:error] [pid 2639:tid 2641] [client 20.63.33.98:33731] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "ahJkPUzQncQTd0Z0Oe_okgAAAQA"]
[Sun May 24 10:36:46.108564 2026] [:error] [pid 2639:tid 2649] [client 20.63.33.98:2003] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "ahJkPkzQncQTd0Z0Oe_olAAAAQg"]
[Sun May 24 10:36:46.681438 2026] [:error] [pid 2639:tid 2658] [client 20.63.33.98:1374] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-su.php"] [unique_id "ahJkPkzQncQTd0Z0Oe_olwAAARE"]
[Sun May 24 10:36:47.200829 2026] [:error] [pid 49744:tid 49767] [client 20.63.33.98:14524] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-su.php"] [unique_id "ahJkPzsE5kPdFpUbbHF2_gAAANU"]
[Sun May 24 10:36:47.657549 2026] [:error] [pid 49689:tid 49735] [client 20.63.33.98:1368] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-su.php"] [unique_id "ahJkPwaxiY3NxLUD97UnzAAAAJE"]
[Sun May 24 10:36:48.106576 2026] [:error] [pid 2639:tid 2648] [client 20.63.33.98:2024] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-su.php"] [unique_id "ahJkQEzQncQTd0Z0Oe_omgAAAQc"]
[Sun May 24 10:36:48.700284 2026] [:error] [pid 49775:tid 49797] [client 20.63.33.98:1725] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "ahJkQIvZb8G6T8WpI1gxeAAAABQ"]
[Sun May 24 10:36:49.145113 2026] [:error] [pid 2639:tid 2649] [client 20.63.33.98:24315] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "ahJkQUzQncQTd0Z0Oe_omwAAAQg"]
[Sun May 24 10:36:49.648354 2026] [:error] [pid 2639:tid 2654] [client 20.63.33.98:24497] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "ahJkQUzQncQTd0Z0Oe_ongAAAQ0"]
[Sun May 24 10:36:50.179613 2026] [:error] [pid 49744:tid 49746] [client 20.63.33.98:13781] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "ahJkQjsE5kPdFpUbbHF3BAAAAMA"]
[Sun May 24 10:36:50.878363 2026] [:error] [pid 49744:tid 49754] [client 20.63.33.98:25105] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mass.php"] [unique_id "ahJkQjsE5kPdFpUbbHF3BgAAAMg"]
[Sun May 24 10:36:51.440003 2026] [:error] [pid 49688:tid 49692] [client 20.63.33.98:24509] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mass.php"] [unique_id "ahJkQ2YoQ9V6a_4pBshssAAAAEE"]
[Sun May 24 10:36:51.993074 2026] [:error] [pid 49688:tid 49712] [client 20.63.33.98:27882] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mass.php"] [unique_id "ahJkQ2YoQ9V6a_4pBshssQAAAFU"]
[Sun May 24 10:36:52.530918 2026] [:error] [pid 49688:tid 49709] [client 20.63.33.98:11050] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mass.php"] [unique_id "ahJkRGYoQ9V6a_4pBshstAAAAFI"]
[Sun May 24 10:36:53.032499 2026] [:error] [pid 2639:tid 2658] [client 20.63.33.98:2001] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "ahJkRUzQncQTd0Z0Oe_ooQAAARE"]
[Sun May 24 10:36:53.701344 2026] [:error] [pid 49744:tid 49757] [client 20.63.33.98:1363] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "ahJkRTsE5kPdFpUbbHF3CwAAAMs"]
[Sun May 24 10:36:54.336018 2026] [:error] [pid 49744:tid 49749] [client 20.63.33.98:13812] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "ahJkRjsE5kPdFpUbbHF3DAAAAMM"]
[Sun May 24 10:36:55.640563 2026] [:error] [pid 49688:tid 49710] [client 20.63.33.98:8145] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "ahJkR2YoQ9V6a_4pBshsuAAAAFM"]
[Sun May 24 10:36:56.917645 2026] [:error] [pid 49688:tid 49715] [client 20.63.33.98:25137] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "ahJkSGYoQ9V6a_4pBshsuQAAAFg"]
[Sun May 24 10:36:58.037467 2026] [:error] [pid 2639:tid 2663] [client 20.63.33.98:24499] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "ahJkSkzQncQTd0Z0Oe_opgAAARY"]
[Sun May 24 10:36:58.659849 2026] [:error] [pid 49775:tid 49794] [client 20.63.33.98:14083] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "ahJkSovZb8G6T8WpI1gxhgAAABE"]
[Sun May 24 10:36:59.943223 2026] [:error] [pid 2639:tid 2641] [client 20.63.33.98:27861] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "ahJkS0zQncQTd0Z0Oe_oqgAAAQA"]
[Sun May 24 10:37:00.733539 2026] [:error] [pid 49689:tid 49722] [client 20.63.33.98:33734] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "ahJkTAaxiY3NxLUD97Un2QAAAIQ"]
[Sun May 24 10:37:01.357767 2026] [:error] [pid 49775:tid 49785] [client 20.63.33.98:1708] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "ahJkTYvZb8G6T8WpI1gxhwAAAAg"]
[Sun May 24 10:37:01.910508 2026] [:error] [pid 49689:tid 49737] [client 20.63.33.98:8186] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "ahJkTQaxiY3NxLUD97Un2gAAAJM"]
[Sun May 24 10:37:02.425562 2026] [:error] [pid 49775:tid 49788] [client 20.63.33.98:25142] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "ahJkTovZb8G6T8WpI1gxigAAAAs"]
[Sun May 24 10:37:03.145928 2026] [:error] [pid 49775:tid 49793] [client 20.63.33.98:13778] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "ahJkT4vZb8G6T8WpI1gxjAAAABA"]
[Sun May 24 10:37:03.856070 2026] [:error] [pid 2639:tid 2648] [client 20.63.33.98:27854] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "ahJkT0zQncQTd0Z0Oe_osgAAAQc"]
[Sun May 24 10:37:04.508962 2026] [:error] [pid 2639:tid 2659] [client 20.63.33.98:14118] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "ahJkUEzQncQTd0Z0Oe_oswAAARI"]
[Sun May 24 10:37:05.035758 2026] [:error] [pid 49744:tid 49758] [client 20.63.33.98:33739] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "ahJkUTsE5kPdFpUbbHF3FgAAAMw"]
[Sun May 24 10:37:05.598175 2026] [:error] [pid 49689:tid 49729] [client 20.63.33.98:45708] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "ahJkUQaxiY3NxLUD97Un3wAAAIs"]
[Sun May 24 10:37:06.208397 2026] [:error] [pid 49775:tid 49777] [client 20.63.33.98:24267] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "ahJkUovZb8G6T8WpI1gxkAAAAAA"]
[Sun May 24 10:37:06.761501 2026] [:error] [pid 49689:tid 49742] [client 20.63.33.98:2002] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "ahJkUgaxiY3NxLUD97Un4QAAAJg"]
[Sun May 24 10:37:07.369352 2026] [:error] [pid 49688:tid 49698] [client 20.63.33.98:13809] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "ahJkU2YoQ9V6a_4pBshsvgAAAEc"]
[Sun May 24 10:37:07.803670 2026] [:error] [pid 2639:tid 2656] [client 20.63.33.98:24485] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/favicon.php"] [unique_id "ahJkU0zQncQTd0Z0Oe_ouAAAAQ8"]
[Sun May 24 10:37:08.320313 2026] [:error] [pid 2639:tid 2644] [client 20.63.33.98:1678] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/favicon.php"] [unique_id "ahJkVEzQncQTd0Z0Oe_ougAAAQM"]
[Sun May 24 10:37:09.484004 2026] [:error] [pid 2639:tid 2641] [client 20.63.33.98:25088] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/favicon.php"] [unique_id "ahJkVUzQncQTd0Z0Oe_ovQAAAQA"]
[Sun May 24 10:37:10.199824 2026] [:error] [pid 2639:tid 2650] [client 20.63.33.98:14132] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/favicon.php"] [unique_id "ahJkVkzQncQTd0Z0Oe_owQAAAQk"]
[Sun May 24 11:58:29.765447 2026] [:error] [pid 23497:tid 23522] [client 4.228.97.66:59672] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "ahJ3ZSPlV47QcYwd2v9q4AAAAVY"]
[Sun May 24 11:58:30.462488 2026] [:error] [pid 23497:tid 23514] [client 4.228.97.66:62342] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "ahJ3ZiPlV47QcYwd2v9q4gAAAU4"]
[Sun May 24 11:58:31.277529 2026] [:error] [pid 2639:tid 2647] [client 4.228.97.66:11498] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "ahJ3Z0zQncQTd0Z0Oe8NowAAAQY"]
[Sun May 24 11:58:31.955353 2026] [:error] [pid 49775:tid 49798] [client 4.228.97.66:56245] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/edit.php"] [unique_id "ahJ3Z4vZb8G6T8WpI1hNmAAAABU"]
[Sun May 24 11:58:32.720583 2026] [:error] [pid 2639:tid 2641] [client 4.228.97.66:61063] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "ahJ3aEzQncQTd0Z0Oe8NrAAAAQA"]
[Sun May 24 11:58:33.552141 2026] [:error] [pid 49689:tid 49742] [client 4.228.97.66:61096] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "ahJ3aQaxiY3NxLUD97U7fQAAAJg"]
[Sun May 24 11:58:34.342577 2026] [:error] [pid 23497:tid 23507] [client 4.228.97.66:11287] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "ahJ3aiPlV47QcYwd2v9q6QAAAUc"]
[Sun May 24 11:58:35.160906 2026] [:error] [pid 49689:tid 49726] [client 4.228.97.66:59653] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-load.php"] [unique_id "ahJ3awaxiY3NxLUD97U7gwAAAIg"]
[Sun May 24 11:58:35.862754 2026] [:error] [pid 49689:tid 49720] [client 4.228.97.66:11601] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ahJ3awaxiY3NxLUD97U7hAAAAII"]
[Sun May 24 11:58:36.531750 2026] [:error] [pid 2639:tid 2658] [client 4.228.97.66:59674] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ahJ3bEzQncQTd0Z0Oe8NtQAAARE"]
[Sun May 24 11:58:37.261781 2026] [:error] [pid 2639:tid 2644] [client 4.228.97.66:59700] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ahJ3bUzQncQTd0Z0Oe8NvAAAAQM"]
[Sun May 24 11:58:37.952164 2026] [:error] [pid 2639:tid 2655] [client 4.228.97.66:11641] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/atomlib.php"] [unique_id "ahJ3bUzQncQTd0Z0Oe8NwAAAAQ4"]
[Sun May 24 11:58:38.618762 2026] [:error] [pid 23497:tid 23520] [client 4.228.97.66:11489] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-der.php"] [unique_id "ahJ3biPlV47QcYwd2v9q-AAAAVQ"]
[Sun May 24 11:58:39.420553 2026] [:error] [pid 23497:tid 23511] [client 4.228.97.66:56253] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-der.php"] [unique_id "ahJ3byPlV47QcYwd2v9q_QAAAUs"]
[Sun May 24 11:58:40.133157 2026] [:error] [pid 23497:tid 23512] [client 4.228.97.66:11282] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-der.php"] [unique_id "ahJ3cCPlV47QcYwd2v9rAQAAAUw"]
[Sun May 24 11:58:40.877339 2026] [:error] [pid 49688:tid 49702] [client 4.228.97.66:61058] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-der.php"] [unique_id "ahJ3cGYoQ9V6a_4pBsh95AAAAEs"]
[Sun May 24 11:58:41.656030 2026] [:error] [pid 23497:tid 23505] [client 4.228.97.66:59707] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "ahJ3cSPlV47QcYwd2v9rBgAAAUU"]
[Sun May 24 11:58:42.424006 2026] [:error] [pid 2639:tid 2642] [client 4.228.97.66:11623] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "ahJ3ckzQncQTd0Z0Oe8NygAAAQE"]
[Sun May 24 11:58:43.060472 2026] [:error] [pid 49775:tid 49785] [client 4.228.97.66:59660] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "ahJ3c4vZb8G6T8WpI1hNmQAAAAg"]
[Sun May 24 11:58:43.845815 2026] [:error] [pid 2639:tid 2661] [client 4.228.97.66:11459] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ftde.php"] [unique_id "ahJ3c0zQncQTd0Z0Oe8N0gAAARQ"]
[Sun May 24 11:58:44.570425 2026] [:error] [pid 2639:tid 2654] [client 4.228.97.66:11490] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "ahJ3dEzQncQTd0Z0Oe8N1gAAAQ0"]
[Sun May 24 11:58:45.491816 2026] [:error] [pid 23497:tid 23519] [client 4.228.97.66:56223] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "ahJ3dSPlV47QcYwd2v9rBwAAAVM"]
[Sun May 24 11:58:46.513444 2026] [:error] [pid 49688:tid 49711] [client 4.228.97.66:56233] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "ahJ3dmYoQ9V6a_4pBsh95wAAAFQ"]
[Sun May 24 11:58:47.240343 2026] [:error] [pid 2639:tid 2654] [client 4.228.97.66:59656] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/asasx.php"] [unique_id "ahJ3d0zQncQTd0Z0Oe8N5AAAAQ0"]
[Sun May 24 11:58:48.033582 2026] [:error] [pid 23497:tid 23502] [client 4.228.97.66:11300] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ahJ3eCPlV47QcYwd2v9rCQAAAUI"]
[Sun May 24 11:58:48.882720 2026] [:error] [pid 23497:tid 23516] [client 4.228.97.66:61093] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ahJ3eCPlV47QcYwd2v9rDAAAAVA"]
[Sun May 24 11:58:49.687783 2026] [:error] [pid 49688:tid 49693] [client 4.228.97.66:11644] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ahJ3eWYoQ9V6a_4pBsh96wAAAEI"]
[Sun May 24 11:58:50.526012 2026] [:error] [pid 2639:tid 2648] [client 4.228.97.66:11642] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-good.php"] [unique_id "ahJ3ekzQncQTd0Z0Oe8N8AAAAQc"]
[Sun May 24 11:58:51.290494 2026] [:error] [pid 2639:tid 2649] [client 4.228.97.66:61109] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "ahJ3e0zQncQTd0Z0Oe8N9AAAAQg"]
[Sun May 24 11:58:52.556978 2026] [:error] [pid 49689:tid 49723] [client 4.228.97.66:11632] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "ahJ3fAaxiY3NxLUD97U7lgAAAIU"]
[Sun May 24 11:58:53.361651 2026] [:error] [pid 49689:tid 49740] [client 4.228.97.66:11620] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "ahJ3fQaxiY3NxLUD97U7mAAAAJY"]
[Sun May 24 11:58:53.989697 2026] [:error] [pid 2639:tid 2641] [client 4.228.97.66:56236] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/app.php"] [unique_id "ahJ3fUzQncQTd0Z0Oe8N-wAAAQA"]
[Sun May 24 11:58:54.772681 2026] [:error] [pid 49689:tid 49718] [client 4.228.97.66:11324] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJ3fgaxiY3NxLUD97U7mwAAAIA"]
[Sun May 24 11:58:55.607173 2026] [:error] [pid 2639:tid 2650] [client 4.228.97.66:11476] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJ3f0zQncQTd0Z0Oe8N_gAAAQk"]
[Sun May 24 11:58:56.350656 2026] [:error] [pid 2639:tid 2665] [client 4.228.97.66:61102] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJ3gEzQncQTd0Z0Oe8OAwAAARg"]
[Sun May 24 11:58:57.141231 2026] [:error] [pid 49775:tid 49788] [client 4.228.97.66:11510] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahJ3gYvZb8G6T8WpI1hNngAAAAs"]
[Sun May 24 11:58:57.807106 2026] [:error] [pid 49744:tid 49757] [client 4.228.97.66:56195] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wuasr.php"] [unique_id "ahJ3gTsE5kPdFpUbbHGODQAAAMs"]
[Sun May 24 11:58:58.541672 2026] [:error] [pid 49688:tid 49692] [client 4.228.97.66:59694] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wuasr.php"] [unique_id "ahJ3gmYoQ9V6a_4pBsh98wAAAEE"]
[Sun May 24 11:58:59.286549 2026] [:error] [pid 2639:tid 2643] [client 4.228.97.66:61113] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wuasr.php"] [unique_id "ahJ3g0zQncQTd0Z0Oe8OCgAAAQI"]
[Sun May 24 11:58:59.960687 2026] [:error] [pid 2639:tid 2658] [client 4.228.97.66:11488] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wuasr.php"] [unique_id "ahJ3g0zQncQTd0Z0Oe8ODQAAARE"]
[Sun May 24 11:59:00.633167 2026] [:error] [pid 49689:tid 49729] [client 4.228.97.66:59664] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ahJ3hAaxiY3NxLUD97U7pwAAAIs"]
[Sun May 24 11:59:01.472512 2026] [:error] [pid 49689:tid 49728] [client 4.228.97.66:56215] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ahJ3hQaxiY3NxLUD97U7qgAAAIo"]
[Sun May 24 11:59:02.132760 2026] [:error] [pid 49689:tid 49739] [client 4.228.97.66:11284] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ahJ3hgaxiY3NxLUD97U7rQAAAJU"]
[Sun May 24 11:59:02.809855 2026] [:error] [pid 49689:tid 49740] [client 4.228.97.66:11305] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/bthil.php"] [unique_id "ahJ3hgaxiY3NxLUD97U7sAAAAJY"]
[Sun May 24 11:59:03.487595 2026] [:error] [pid 49689:tid 49721] [client 4.228.97.66:11598] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "ahJ3hwaxiY3NxLUD97U7tQAAAIM"]
[Sun May 24 11:59:04.169063 2026] [:error] [pid 49689:tid 49728] [client 4.228.97.66:11284] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "ahJ3iAaxiY3NxLUD97U7uAAAAIo"]
[Sun May 24 11:59:04.842375 2026] [:error] [pid 49688:tid 49691] [client 4.228.97.66:11275] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "ahJ3iGYoQ9V6a_4pBsh99QAAAEA"]
[Sun May 24 11:59:05.630082 2026] [:error] [pid 49688:tid 49701] [client 4.228.97.66:61061] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/albin.php"] [unique_id "ahJ3iWYoQ9V6a_4pBsh99gAAAEo"]
[Sun May 24 11:59:06.420418 2026] [:error] [pid 49744:tid 49767] [client 4.228.97.66:11316] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "ahJ3ijsE5kPdFpUbbHGOGAAAANU"]
[Sun May 24 11:59:07.179865 2026] [:error] [pid 23497:tid 23513] [client 4.228.97.66:56251] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "ahJ3iyPlV47QcYwd2v9rEwAAAU0"]
[Sun May 24 11:59:07.963999 2026] [:error] [pid 49744:tid 49757] [client 4.228.97.66:62344] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "ahJ3izsE5kPdFpUbbHGOGQAAAMs"]
[Sun May 24 11:59:08.713291 2026] [:error] [pid 49775:tid 49799] [client 4.228.97.66:11309] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wefile.php"] [unique_id "ahJ3jIvZb8G6T8WpI1hNpwAAABY"]
[Sun May 24 11:59:09.385674 2026] [:error] [pid 49775:tid 49780] [client 4.228.97.66:11481] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "ahJ3jYvZb8G6T8WpI1hNqQAAAAM"]
[Sun May 24 11:59:10.242012 2026] [:error] [pid 49775:tid 49788] [client 4.228.97.66:11315] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "ahJ3jovZb8G6T8WpI1hNrAAAAAs"]
[Sun May 24 11:59:10.960807 2026] [:error] [pid 49689:tid 49721] [client 4.228.97.66:61072] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "ahJ3jgaxiY3NxLUD97U7xQAAAIM"]
[Sun May 24 11:59:11.623875 2026] [:error] [pid 23497:tid 23514] [client 4.228.97.66:59662] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file30.php"] [unique_id "ahJ3jyPlV47QcYwd2v9rGgAAAU4"]
[Sun May 24 11:59:12.310415 2026] [:error] [pid 23497:tid 23516] [client 4.228.97.66:56231] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "ahJ3kCPlV47QcYwd2v9rGwAAAVA"]
[Sun May 24 11:59:12.992642 2026] [:error] [pid 49775:tid 49787] [client 4.228.97.66:56208] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "ahJ3kIvZb8G6T8WpI1hNtQAAAAo"]
[Sun May 24 11:59:13.679317 2026] [:error] [pid 49775:tid 49782] [client 4.228.97.66:11639] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "ahJ3kYvZb8G6T8WpI1hNtgAAAAU"]
[Sun May 24 11:59:14.380369 2026] [:error] [pid 49689:tid 49722] [client 4.228.97.66:59775] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file4.php"] [unique_id "ahJ3kgaxiY3NxLUD97U7yQAAAIQ"]
[Sun May 24 11:59:15.112000 2026] [:error] [pid 49689:tid 49735] [client 4.228.97.66:11608] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ahJ3kwaxiY3NxLUD97U7zgAAAJE"]
[Sun May 24 11:59:15.814863 2026] [:error] [pid 23497:tid 23523] [client 4.228.97.66:11311] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ahJ3kyPlV47QcYwd2v9rHgAAAVc"]
[Sun May 24 11:59:16.749809 2026] [:error] [pid 23497:tid 23519] [client 4.228.97.66:11293] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ahJ3lCPlV47QcYwd2v9rIgAAAVM"]
[Sun May 24 11:59:17.470504 2026] [:error] [pid 23497:tid 23504] [client 4.228.97.66:11478] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dropdown.php"] [unique_id "ahJ3lSPlV47QcYwd2v9rJgAAAUQ"]
[Sun May 24 11:59:18.121200 2026] [:error] [pid 23497:tid 23522] [client 4.228.97.66:56201] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "ahJ3liPlV47QcYwd2v9rKQAAAVY"]
[Sun May 24 11:59:18.761470 2026] [:error] [pid 49744:tid 49755] [client 4.228.97.66:59658] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "ahJ3ljsE5kPdFpUbbHGOIgAAAMk"]
[Sun May 24 11:59:19.409105 2026] [:error] [pid 49775:tid 49778] [client 4.228.97.66:59683] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "ahJ3l4vZb8G6T8WpI1hNwQAAAAE"]
[Sun May 24 11:59:20.048007 2026] [:error] [pid 49775:tid 49780] [client 4.228.97.66:61112] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/txets.php"] [unique_id "ahJ3mIvZb8G6T8WpI1hNwgAAAAM"]
[Sun May 24 11:59:20.697770 2026] [:error] [pid 49775:tid 49801] [client 4.228.97.66:62339] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "ahJ3mIvZb8G6T8WpI1hNxAAAABg"]
[Sun May 24 11:59:21.371171 2026] [:error] [pid 49775:tid 49788] [client 4.228.97.66:61092] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "ahJ3mYvZb8G6T8WpI1hNxwAAAAs"]
[Sun May 24 11:59:22.021540 2026] [:error] [pid 49688:tid 49694] [client 4.228.97.66:62361] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "ahJ3mmYoQ9V6a_4pBsh9_AAAAEM"]
[Sun May 24 11:59:22.847381 2026] [:error] [pid 49744:tid 49754] [client 4.228.97.66:56192] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-access.php"] [unique_id "ahJ3mjsE5kPdFpUbbHGOJQAAAMg"]
[Sun May 24 11:59:23.587266 2026] [:error] [pid 49688:tid 49704] [client 4.228.97.66:61089] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "ahJ3m2YoQ9V6a_4pBsh9_wAAAE0"]
[Sun May 24 11:59:24.287226 2026] [:error] [pid 49688:tid 49692] [client 4.228.97.66:11474] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "ahJ3nGYoQ9V6a_4pBsh-AwAAAEE"]
[Sun May 24 11:59:25.001995 2026] [:error] [pid 49688:tid 49709] [client 4.228.97.66:56241] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "ahJ3nWYoQ9V6a_4pBsh-BQAAAFI"]
[Sun May 24 11:59:25.694997 2026] [:error] [pid 49688:tid 49703] [client 4.228.97.66:11504] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/aevly.php"] [unique_id "ahJ3nWYoQ9V6a_4pBsh-BgAAAEw"]
[Sun May 24 11:59:26.320030 2026] [:error] [pid 49744:tid 49756] [client 4.228.97.66:56229] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/vx.php"] [unique_id "ahJ3njsE5kPdFpUbbHGOMwAAAMo"]
[Sun May 24 11:59:39.146135 2026] [:error] [pid 49689:tid 49725] [client 4.228.97.66:11494] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fun.php"] [unique_id "ahJ3qwaxiY3NxLUD97U75wAAAIc"]
[Sun May 24 11:59:39.983064 2026] [:error] [pid 23497:tid 23519] [client 4.228.97.66:11502] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fun.php"] [unique_id "ahJ3qyPlV47QcYwd2v9rWwAAAVM"]
[Sun May 24 11:59:40.772737 2026] [:error] [pid 49775:tid 49781] [client 4.228.97.66:11286] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fun.php"] [unique_id "ahJ3rIvZb8G6T8WpI1hN1QAAAAQ"]
[Sun May 24 11:59:41.456849 2026] [:error] [pid 49689:tid 49726] [client 4.228.97.66:62355] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fun.php"] [unique_id "ahJ3rQaxiY3NxLUD97U76AAAAIg"]
[Sun May 24 11:59:42.247319 2026] [:error] [pid 23497:tid 23501] [client 4.228.97.66:61115] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "ahJ3riPlV47QcYwd2v9rYAAAAUE"]
[Sun May 24 11:59:43.066708 2026] [:error] [pid 49744:tid 49756] [client 4.228.97.66:11469] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "ahJ3rzsE5kPdFpUbbHGOOwAAAMo"]
[Sun May 24 11:59:44.071682 2026] [:error] [pid 49775:tid 49795] [client 4.228.97.66:11633] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "ahJ3sIvZb8G6T8WpI1hN2QAAABI"]
[Sun May 24 11:59:45.176677 2026] [:error] [pid 49688:tid 49697] [client 4.228.97.66:56227] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/drykl.php"] [unique_id "ahJ3sWYoQ9V6a_4pBsh-HwAAAEY"]
[Sun May 24 11:59:46.449549 2026] [:error] [pid 49775:tid 49780] [client 4.228.97.66:59705] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sys.php"] [unique_id "ahJ3sovZb8G6T8WpI1hN3AAAAAM"]
[Sun May 24 11:59:47.436895 2026] [:error] [pid 23497:tid 23502] [client 4.228.97.66:56244] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sys.php"] [unique_id "ahJ3syPlV47QcYwd2v9rZgAAAUI"]
[Sun May 24 11:59:48.449332 2026] [:error] [pid 23497:tid 23520] [client 4.228.97.66:56226] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sys.php"] [unique_id "ahJ3tCPlV47QcYwd2v9raQAAAVQ"]
[Sun May 24 11:59:49.239895 2026] [:error] [pid 49744:tid 49755] [client 4.228.97.66:11609] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sys.php"] [unique_id "ahJ3tTsE5kPdFpUbbHGOQwAAAMk"]
[Sun May 24 11:59:49.969656 2026] [:error] [pid 49689:tid 49736] [client 4.228.97.66:11591] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "ahJ3tQaxiY3NxLUD97U77QAAAJI"]
[Sun May 24 11:59:51.025426 2026] [:error] [pid 2639:tid 2660] [client 4.228.97.66:11304] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "ahJ3t0zQncQTd0Z0Oe8OSgAAARM"]
[Sun May 24 11:59:52.271152 2026] [:error] [pid 23497:tid 23524] [client 4.228.97.66:11605] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "ahJ3uCPlV47QcYwd2v9rbwAAAVg"]
[Sun May 24 11:59:53.395406 2026] [:error] [pid 49688:tid 49694] [client 4.228.97.66:11453] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/1index.php"] [unique_id "ahJ3uWYoQ9V6a_4pBsh-JwAAAEM"]
[Sun May 24 11:59:54.875301 2026] [:error] [pid 2639:tid 2656] [client 4.228.97.66:59663] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "ahJ3ukzQncQTd0Z0Oe8OUQAAAQ8"]
[Sun May 24 11:59:56.256734 2026] [:error] [pid 49775:tid 49784] [client 4.228.97.66:56207] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "ahJ3vIvZb8G6T8WpI1hN5AAAAAc"]
[Sun May 24 11:59:57.954202 2026] [:error] [pid 23497:tid 23514] [client 4.228.97.66:56242] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "ahJ3vSPlV47QcYwd2v9rdgAAAU4"]
[Sun May 24 12:00:00.556336 2026] [:error] [pid 49744:tid 49768] [client 4.228.97.66:56202] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/shell20211028.php"] [unique_id "ahJ3wDsE5kPdFpUbbHGOSQAAANY"]
[Sun May 24 12:00:03.790135 2026] [:error] [pid 49744:tid 49754] [client 4.228.97.66:59659] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "ahJ3wzsE5kPdFpUbbHGOSgAAAMg"]
[Sun May 24 12:00:08.176025 2026] [:error] [pid 49775:tid 49789] [client 4.228.97.66:56255] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "ahJ3yIvZb8G6T8WpI1hN8gAAAAw"]
[Sun May 24 12:00:12.135937 2026] [:error] [pid 23497:tid 23522] [client 4.228.97.66:56213] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "ahJ3zCPlV47QcYwd2v9rhAAAAVY"]
[Sun May 24 12:00:15.311728 2026] [:error] [pid 49775:tid 49787] [client 4.228.97.66:11618] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-ver.php"] [unique_id "ahJ3z4vZb8G6T8WpI1hN-gAAAAo"]
[Sun May 24 12:00:17.792817 2026] [:error] [pid 23497:tid 23518] [client 4.228.97.66:61111] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "ahJ30SPlV47QcYwd2v9rhwAAAVI"]
[Sun May 24 12:00:19.647306 2026] [:error] [pid 2639:tid 2648] [client 4.228.97.66:11466] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "ahJ300zQncQTd0Z0Oe8OggAAAQc"]
[Sun May 24 12:00:21.188075 2026] [:error] [pid 2639:tid 2647] [client 4.228.97.66:11277] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "ahJ31UzQncQTd0Z0Oe8OhgAAAQY"]
[Sun May 24 12:00:22.419396 2026] [:error] [pid 49689:tid 49722] [client 4.228.97.66:62377] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lala.php"] [unique_id "ahJ31gaxiY3NxLUD97U8BAAAAIQ"]
[Sun May 24 12:00:23.468643 2026] [:error] [pid 49775:tid 49794] [client 4.228.97.66:11283] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "ahJ314vZb8G6T8WpI1hOIgAAABE"]
[Sun May 24 12:00:24.853846 2026] [:error] [pid 49689:tid 49734] [client 4.228.97.66:56222] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "ahJ32AaxiY3NxLUD97U8BwAAAJA"]
[Sun May 24 12:00:26.500338 2026] [:error] [pid 2639:tid 2650] [client 4.228.97.66:11479] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "ahJ32kzQncQTd0Z0Oe8OmQAAAQk"]
[Sun May 24 12:00:27.340362 2026] [:error] [pid 2639:tid 2651] [client 4.228.97.66:11475] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbhu.php"] [unique_id "ahJ320zQncQTd0Z0Oe8OnAAAAQo"]
[Sun May 24 12:00:31.413157 2026] [:error] [pid 49688:tid 49706] [client 4.228.97.66:11468] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sing.php"] [unique_id "ahJ332YoQ9V6a_4pBsh-SQAAAE8"]
[Sun May 24 12:00:32.278738 2026] [:error] [pid 49689:tid 49742] [client 4.228.97.66:11616] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sing.php"] [unique_id "ahJ34AaxiY3NxLUD97U8EQAAAJg"]
[Sun May 24 12:00:33.588515 2026] [:error] [pid 49775:tid 49794] [client 4.228.97.66:11625] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sing.php"] [unique_id "ahJ34YvZb8G6T8WpI1hOWwAAABE"]
[Sun May 24 12:00:34.467769 2026] [:error] [pid 23497:tid 23514] [client 4.228.97.66:56210] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-sing.php"] [unique_id "ahJ34iPlV47QcYwd2v9rkwAAAU4"]
[Sun May 24 12:00:35.799042 2026] [:error] [pid 2639:tid 2658] [client 4.228.97.66:11313] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "ahJ340zQncQTd0Z0Oe8OqAAAARE"]
[Sun May 24 12:00:36.848521 2026] [:error] [pid 23497:tid 23503] [client 4.228.97.66:59670] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "ahJ35CPlV47QcYwd2v9rnAAAAUM"]
[Sun May 24 12:00:37.689249 2026] [:error] [pid 23497:tid 23513] [client 4.228.97.66:11292] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/file59.php"] [unique_id "ahJ35SPlV47QcYwd2v9rogAAAU0"]
[Sun May 24 12:00:52.598595 2026] [:error] [pid 2639:tid 2644] [client 4.228.97.66:11496] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/explorer/index_.php"] [unique_id "ahJ39EzQncQTd0Z0Oe8OuAAAAQM"]
[Sun May 24 12:00:53.305679 2026] [:error] [pid 49689:tid 49735] [client 4.228.97.66:62356] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/explorer/index_.php"] [unique_id "ahJ39QaxiY3NxLUD97U8JwAAAJE"]
[Sun May 24 12:00:53.945649 2026] [:error] [pid 49775:tid 49801] [client 4.228.97.66:59677] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/explorer/index_.php"] [unique_id "ahJ39YvZb8G6T8WpI1hOZwAAABg"]
[Sun May 24 12:00:54.631665 2026] [:error] [pid 49689:tid 49736] [client 4.228.97.66:11433] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/explorer/index_.php"] [unique_id "ahJ39gaxiY3NxLUD97U8KwAAAJI"]
[Sun May 24 12:00:55.262966 2026] [:error] [pid 49689:tid 49733] [client 4.228.97.66:11592] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "ahJ39waxiY3NxLUD97U8LQAAAI8"]
[Sun May 24 12:00:56.123995 2026] [:error] [pid 49775:tid 49779] [client 4.228.97.66:11647] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "ahJ3-IvZb8G6T8WpI1hObQAAAAI"]
[Sun May 24 12:00:56.851708 2026] [:error] [pid 49775:tid 49792] [client 4.228.97.66:11472] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "ahJ3-IvZb8G6T8WpI1hObwAAAA8"]
[Sun May 24 12:00:57.658099 2026] [:error] [pid 49775:tid 49781] [client 4.228.97.66:50542] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xda.php"] [unique_id "ahJ3-YvZb8G6T8WpI1hOcQAAAAQ"]
[Sun May 24 12:00:58.335302 2026] [:error] [pid 23497:tid 23516] [client 4.228.97.66:11590] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "ahJ3-iPlV47QcYwd2v9rygAAAVA"]
[Sun May 24 12:00:59.060547 2026] [:error] [pid 49775:tid 49797] [client 4.228.97.66:61069] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "ahJ3-4vZb8G6T8WpI1hOdgAAABQ"]
[Sun May 24 12:00:59.885478 2026] [:error] [pid 2639:tid 2647] [client 4.228.97.66:62350] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "ahJ3-0zQncQTd0Z0Oe8OwAAAAQY"]
[Sun May 24 12:01:00.611566 2026] [:error] [pid 49775:tid 49778] [client 4.228.97.66:11467] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/samll.php"] [unique_id "ahJ3_IvZb8G6T8WpI1hOdwAAAAE"]
[Sun May 24 12:01:01.257773 2026] [:error] [pid 23497:tid 23503] [client 4.228.97.66:11448] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-at.php"] [unique_id "ahJ3_SPlV47QcYwd2v9rzAAAAUM"]
[Sun May 24 12:01:01.978552 2026] [:error] [pid 23497:tid 23507] [client 4.228.97.66:11495] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-at.php"] [unique_id "ahJ3_SPlV47QcYwd2v9rzgAAAUc"]
[Sun May 24 12:01:02.613914 2026] [:error] [pid 23497:tid 23517] [client 4.228.97.66:11912] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-at.php"] [unique_id "ahJ3_iPlV47QcYwd2v9rzwAAAVE"]
[Sun May 24 12:01:03.276138 2026] [:error] [pid 2639:tid 2651] [client 4.228.97.66:62337] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-at.php"] [unique_id "ahJ3_0zQncQTd0Z0Oe8OyAAAAQo"]
[Sun May 24 12:01:04.011289 2026] [:error] [pid 49688:tid 49706] [client 4.228.97.66:11473] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJ4AGYoQ9V6a_4pBsh-YAAAAE8"]
[Sun May 24 12:01:04.810169 2026] [:error] [pid 23497:tid 23505] [client 4.228.97.66:59661] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJ4ACPlV47QcYwd2v9r1wAAAUU"]
[Sun May 24 12:01:05.589365 2026] [:error] [pid 2639:tid 2664] [client 4.228.97.66:11600] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJ4AUzQncQTd0Z0Oe8OygAAARc"]
[Sun May 24 12:01:06.334664 2026] [:error] [pid 23497:tid 23516] [client 4.228.97.66:11509] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahJ4AiPlV47QcYwd2v9r2wAAAVA"]
[Sun May 24 12:01:07.134785 2026] [:error] [pid 2639:tid 2655] [client 4.228.97.66:11271] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ahJ4A0zQncQTd0Z0Oe8O0AAAAQ4"]
[Sun May 24 12:01:07.989105 2026] [:error] [pid 23497:tid 23517] [client 4.228.97.66:11462] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ahJ4AyPlV47QcYwd2v9r4AAAAVE"]
[Sun May 24 12:01:08.702387 2026] [:error] [pid 49744:tid 49763] [client 4.228.97.66:56230] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ahJ4BDsE5kPdFpUbbHGOpQAAANE"]
[Sun May 24 12:01:09.497946 2026] [:error] [pid 2639:tid 2657] [client 4.228.97.66:60360] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-the.php"] [unique_id "ahJ4BUzQncQTd0Z0Oe8O1QAAARA"]
[Sun May 24 12:01:10.280301 2026] [:error] [pid 23497:tid 23500] [client 4.228.97.66:11491] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ahJ4BiPlV47QcYwd2v9r6AAAAUA"]
[Sun May 24 12:01:10.899741 2026] [:error] [pid 23497:tid 23517] [client 4.228.97.66:11644] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ahJ4BiPlV47QcYwd2v9r6QAAAVE"]
[Sun May 24 12:01:11.617825 2026] [:error] [pid 23497:tid 23522] [client 4.228.97.66:11630] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ahJ4ByPlV47QcYwd2v9r7AAAAVY"]
[Sun May 24 12:01:12.378351 2026] [:error] [pid 49689:tid 49726] [client 4.228.97.66:11586] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ff1.php"] [unique_id "ahJ4CAaxiY3NxLUD97U8RQAAAIg"]
[Sun May 24 12:01:13.168246 2026] [:error] [pid 49775:tid 49792] [client 4.228.97.66:50501] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "ahJ4CYvZb8G6T8WpI1hOgAAAAA8"]
[Sun May 24 12:01:13.936520 2026] [:error] [pid 49689:tid 49718] [client 4.228.97.66:62343] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "ahJ4CQaxiY3NxLUD97U8RgAAAIA"]
[Sun May 24 12:01:14.805000 2026] [:error] [pid 2639:tid 2663] [client 4.228.97.66:11291] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "ahJ4CkzQncQTd0Z0Oe8O3gAAARY"]
[Sun May 24 12:01:15.458301 2026] [:error] [pid 49775:tid 49785] [client 4.228.97.66:11637] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/cilus.php"] [unique_id "ahJ4C4vZb8G6T8WpI1hOgwAAAAg"]
[Sun May 24 12:01:16.146720 2026] [:error] [pid 2639:tid 2661] [client 4.228.97.66:11584] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "ahJ4DEzQncQTd0Z0Oe8O4QAAARQ"]
[Sun May 24 12:01:16.899596 2026] [:error] [pid 23497:tid 23503] [client 4.228.97.66:62347] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "ahJ4DCPlV47QcYwd2v9r7wAAAUM"]
[Sun May 24 12:01:17.550674 2026] [:error] [pid 23497:tid 23504] [client 4.228.97.66:56216] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "ahJ4DSPlV47QcYwd2v9r8gAAAUQ"]
[Sun May 24 12:01:18.189976 2026] [:error] [pid 49689:tid 49723] [client 4.228.97.66:56212] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/Okxob.php"] [unique_id "ahJ4DgaxiY3NxLUD97U8SQAAAIU"]
[Sun May 24 12:01:19.004976 2026] [:error] [pid 49775:tid 49791] [client 4.228.97.66:50536] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "ahJ4D4vZb8G6T8WpI1hOhwAAAA4"]
[Sun May 24 12:01:19.707647 2026] [:error] [pid 23497:tid 23502] [client 4.228.97.66:62373] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "ahJ4DyPlV47QcYwd2v9r-QAAAUI"]
[Sun May 24 12:01:20.438313 2026] [:error] [pid 49775:tid 49779] [client 4.228.97.66:11267] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "ahJ4EIvZb8G6T8WpI1hOjQAAAAI"]
[Sun May 24 12:01:21.065958 2026] [:error] [pid 49775:tid 49783] [client 4.228.97.66:59691] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pass4.php"] [unique_id "ahJ4EYvZb8G6T8WpI1hOjwAAAAY"]
[Sun May 24 12:01:21.699419 2026] [:error] [pid 23497:tid 23522] [client 4.228.97.66:11321] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-su.php"] [unique_id "ahJ4ESPlV47QcYwd2v9r_gAAAVY"]
[Sun May 24 12:01:22.360017 2026] [:error] [pid 49689:tid 49732] [client 4.228.97.66:56246] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-su.php"] [unique_id "ahJ4EgaxiY3NxLUD97U8UAAAAI4"]
[Sun May 24 12:01:23.016751 2026] [:error] [pid 2639:tid 2656] [client 4.228.97.66:11289] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-su.php"] [unique_id "ahJ4E0zQncQTd0Z0Oe8O5gAAAQ8"]
[Sun May 24 12:01:23.649724 2026] [:error] [pid 2639:tid 2663] [client 4.228.97.66:61088] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-su.php"] [unique_id "ahJ4E0zQncQTd0Z0Oe8O5wAAARY"]
[Sun May 24 12:01:24.337210 2026] [:error] [pid 23497:tid 23500] [client 4.228.97.66:50550] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "ahJ4FCPlV47QcYwd2v9sBAAAAUA"]
[Sun May 24 12:01:25.044187 2026] [:error] [pid 23497:tid 23504] [client 4.228.97.66:60376] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "ahJ4FSPlV47QcYwd2v9sCAAAAUQ"]
[Sun May 24 12:01:25.674656 2026] [:error] [pid 23497:tid 23521] [client 4.228.97.66:59750] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "ahJ4FSPlV47QcYwd2v9sCwAAAVU"]
[Sun May 24 12:01:26.311773 2026] [:error] [pid 23497:tid 23510] [client 4.228.97.66:59650] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/like.php"] [unique_id "ahJ4FiPlV47QcYwd2v9sDgAAAUo"]
[Sun May 24 12:01:27.000154 2026] [:error] [pid 23497:tid 23516] [client 4.228.97.66:11280] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mass.php"] [unique_id "ahJ4FiPlV47QcYwd2v9sDwAAAVA"]
[Sun May 24 12:01:27.850771 2026] [:error] [pid 23497:tid 23519] [client 4.228.97.66:11266] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mass.php"] [unique_id "ahJ4FyPlV47QcYwd2v9sEgAAAVM"]
[Sun May 24 12:01:28.611645 2026] [:error] [pid 23497:tid 23524] [client 4.228.97.66:11619] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mass.php"] [unique_id "ahJ4GCPlV47QcYwd2v9sFAAAAVg"]
[Sun May 24 12:01:29.291522 2026] [:error] [pid 23497:tid 23507] [client 4.228.97.66:50520] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mass.php"] [unique_id "ahJ4GSPlV47QcYwd2v9sFQAAAUc"]
[Sun May 24 12:01:29.939845 2026] [:error] [pid 49688:tid 49703] [client 4.228.97.66:59665] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "ahJ4GWYoQ9V6a_4pBsh-agAAAEw"]
[Sun May 24 12:01:30.599332 2026] [:error] [pid 49688:tid 49715] [client 4.228.97.66:61108] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "ahJ4GmYoQ9V6a_4pBsh-awAAAFg"]
[Sun May 24 12:01:31.379544 2026] [:error] [pid 2639:tid 2649] [client 4.228.97.66:59729] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "ahJ4G0zQncQTd0Z0Oe8O8AAAAQg"]
[Sun May 24 12:01:32.088950 2026] [:error] [pid 49775:tid 49798] [client 4.228.97.66:11588] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/i.php"] [unique_id "ahJ4HIvZb8G6T8WpI1hOlgAAABU"]
[Sun May 24 12:01:32.718063 2026] [:error] [pid 49775:tid 49790] [client 4.228.97.66:56200] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "ahJ4HIvZb8G6T8WpI1hOnAAAAA0"]
[Sun May 24 12:01:33.425103 2026] [:error] [pid 49775:tid 49799] [client 4.228.97.66:61067] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "ahJ4HYvZb8G6T8WpI1hOoAAAABY"]
[Sun May 24 12:01:34.258579 2026] [:error] [pid 2639:tid 2653] [client 4.228.97.66:59756] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "ahJ4HkzQncQTd0Z0Oe8O9AAAAQw"]
[Sun May 24 12:01:34.903712 2026] [:error] [pid 2639:tid 2654] [client 4.228.97.66:59774] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/test.php"] [unique_id "ahJ4HkzQncQTd0Z0Oe8O-AAAAQ0"]
[Sun May 24 12:01:35.695407 2026] [:error] [pid 23497:tid 23511] [client 4.228.97.66:59675] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "ahJ4HyPlV47QcYwd2v9sIAAAAUs"]
[Sun May 24 12:01:36.354892 2026] [:error] [pid 23497:tid 23508] [client 4.228.97.66:11273] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "ahJ4ICPlV47QcYwd2v9sIwAAAUg"]
[Sun May 24 12:01:37.172006 2026] [:error] [pid 49744:tid 49747] [client 4.228.97.66:61081] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "ahJ4ITsE5kPdFpUbbHGOrgAAAME"]
[Sun May 24 12:01:37.815324 2026] [:error] [pid 49744:tid 49749] [client 4.228.97.66:11427] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/la.php"] [unique_id "ahJ4ITsE5kPdFpUbbHGOrwAAAMM"]
[Sun May 24 12:01:38.556324 2026] [:error] [pid 23497:tid 23504] [client 4.228.97.66:56238] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "ahJ4IiPlV47QcYwd2v9sLQAAAUQ"]
[Sun May 24 12:01:39.343012 2026] [:error] [pid 2639:tid 2653] [client 4.228.97.66:59761] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "ahJ4I0zQncQTd0Z0Oe8O_gAAAQw"]
[Sun May 24 12:01:40.201401 2026] [:error] [pid 49775:tid 49789] [client 4.228.97.66:11485] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "ahJ4JIvZb8G6T8WpI1hOowAAAAw"]
[Sun May 24 12:01:41.035916 2026] [:error] [pid 23497:tid 23524] [client 4.228.97.66:11513] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/reze.php"] [unique_id "ahJ4JSPlV47QcYwd2v9sOgAAAVg"]
[Sun May 24 12:01:41.747102 2026] [:error] [pid 49689:tid 49730] [client 4.228.97.66:61068] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "ahJ4JQaxiY3NxLUD97U8VwAAAIw"]
[Sun May 24 12:01:42.730868 2026] [:error] [pid 23497:tid 23524] [client 4.228.97.66:61103] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "ahJ4JiPlV47QcYwd2v9sQQAAAVg"]
[Sun May 24 12:01:43.391977 2026] [:error] [pid 23497:tid 23517] [client 4.228.97.66:11606] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "ahJ4JyPlV47QcYwd2v9sRgAAAVE"]
[Sun May 24 12:01:44.156038 2026] [:error] [pid 23497:tid 23513] [client 4.228.97.66:11435] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/database.php"] [unique_id "ahJ4KCPlV47QcYwd2v9sSgAAAU0"]
[Sun May 24 12:01:44.976103 2026] [:error] [pid 49689:tid 49720] [client 4.228.97.66:11317] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/favicon.php"] [unique_id "ahJ4KAaxiY3NxLUD97U8WAAAAII"]
[Sun May 24 12:01:45.681278 2026] [:error] [pid 49689:tid 49736] [client 4.228.97.66:60402] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/favicon.php"] [unique_id "ahJ4KQaxiY3NxLUD97U8WgAAAJI"]
[Sun May 24 12:01:46.427080 2026] [:error] [pid 2639:tid 2652] [client 4.228.97.66:56239] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/favicon.php"] [unique_id "ahJ4KkzQncQTd0Z0Oe8PBgAAAQs"]
[Sun May 24 12:01:47.058618 2026] [:error] [pid 49744:tid 49764] [client 4.228.97.66:50515] [client 4.228.97.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/favicon.php"] [unique_id "ahJ4KzsE5kPdFpUbbHGOtQAAANI"]
[Sun May 24 13:17:23.786020 2026] [:error] [pid 23497:tid 23511] [client 108.170.55.250:56024] [client 108.170.55.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.170.55.250, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahKJ4yPlV47QcYwd2v-J0QAAAUs"]
[Sun May 24 13:17:24.564063 2026] [proxy_fcgi:error] [pid 23497:tid 23511] [client 108.170.55.250:56024] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 24 13:17:24.885888 2026] [:error] [pid 23497:tid 23503] [client 108.170.55.250:56024] [client 108.170.55.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.170.55.250, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahKJ5CPlV47QcYwd2v-J0gAAAUM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 24 13:17:25.816154 2026] [proxy_fcgi:error] [pid 23497:tid 23503] [client 108.170.55.250:56024] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 24 13:20:54.072412 2026] [:error] [pid 23497:tid 23509] [client 162.19.112.25:41346] [client 162.19.112.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.112.25, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahKKtiPlV47QcYwd2v-LNgAAAUk"]
[Sun May 24 13:20:54.869171 2026] [proxy_fcgi:error] [pid 23497:tid 23509] [client 162.19.112.25:41346] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 24 13:20:55.142102 2026] [:error] [pid 23497:tid 23511] [client 162.19.112.25:41346] [client 162.19.112.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.112.25, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahKKtyPlV47QcYwd2v-LPAAAAUs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 24 13:20:56.129126 2026] [proxy_fcgi:error] [pid 23497:tid 23511] [client 162.19.112.25:41346] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 24 13:24:46.189403 2026] [:error] [pid 49744:tid 49750] [client 94.136.170.101:47970] [client 94.136.170.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.136.170.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahKLnjsE5kPdFpUbbHGf4AAAAMQ"]
[Sun May 24 13:24:46.992634 2026] [proxy_fcgi:error] [pid 49744:tid 49750] [client 94.136.170.101:47970] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Sun May 24 13:24:47.252660 2026] [:error] [pid 49744:tid 49751] [client 94.136.170.101:47970] [client 94.136.170.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.136.170.101, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahKLnzsE5kPdFpUbbHGf4gAAAMU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 24 13:24:48.238712 2026] [proxy_fcgi:error] [pid 49744:tid 49751] [client 94.136.170.101:47970] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Sun May 24 17:10:18.573193 2026] [:error] [pid 41708:tid 41734] [client 125.163.186.52:51412] [client 125.163.186.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.186.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLAev4tQzoTxpuHBF69vQAAAZg"]
[Sun May 24 17:10:27.716832 2026] [:error] [pid 49689:tid 49732] [client 125.163.186.52:59822] [client 125.163.186.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.186.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLAgwaxiY3NxLUD97VtPAAAAI4"]
[Sun May 24 17:10:39.181835 2026] [:error] [pid 49744:tid 49747] [client 125.163.186.52:60256] [client 125.163.186.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.186.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLAjzsE5kPdFpUbbHHG4AAAAME"]
[Sun May 24 17:10:49.367931 2026] [:error] [pid 49744:tid 49763] [client 125.163.186.52:60668] [client 125.163.186.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.186.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLAmTsE5kPdFpUbbHHG4wAAANE"]
[Sun May 24 17:11:13.334446 2026] [:error] [pid 41708:tid 41732] [client 125.163.186.52:61462] [client 125.163.186.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.186.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLAsf4tQzoTxpuHBF698QAAAZY"]
[Sun May 24 17:11:24.106376 2026] [:error] [pid 49775:tid 49781] [client 125.163.186.52:62191] [client 125.163.186.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.163.186.52, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLAvIvZb8G6T8WpI1iQVwAAAAQ"]
[Sun May 24 17:38:09.020212 2026] [:error] [pid 49744:tid 49751] [client 86.120.178.139:53521] [client 86.120.178.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.178.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLHATsE5kPdFpUbbHHKDgAAAMU"]
[Sun May 24 17:38:19.369107 2026] [:error] [pid 4777:tid 4804] [client 86.120.178.139:54293] [client 86.120.178.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.178.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLHC_tPctoQOm4w5pNpjgAAAdY"]
[Sun May 24 17:38:29.923141 2026] [:error] [pid 49775:tid 49791] [client 86.120.178.139:54711] [client 86.120.178.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.178.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLHFYvZb8G6T8WpI1iTkQAAAA4"]
[Sun May 24 17:38:40.441407 2026] [:error] [pid 23497:tid 23511] [client 86.120.178.139:55118] [client 86.120.178.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.178.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLHICPlV47QcYwd2v_lJAAAAUs"]
[Sun May 24 17:38:50.966738 2026] [:error] [pid 49689:tid 49731] [client 86.120.178.139:55516] [client 86.120.178.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.178.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLHKgaxiY3NxLUD97VwHgAAAI0"]
[Sun May 24 17:55:05.680898 2026] [:error] [pid 49688:tid 49694] [client 49.204.215.51:3013] [client 49.204.215.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.215.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLK-WYoQ9V6a_4pBsisXgAAAEM"]
[Sun May 24 17:55:15.672165 2026] [:error] [pid 49688:tid 49693] [client 49.204.215.51:2653] [client 49.204.215.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.215.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLLA2YoQ9V6a_4pBsisZQAAAEI"]
[Sun May 24 17:55:26.188824 2026] [:error] [pid 41708:tid 41714] [client 49.204.215.51:2586] [client 49.204.215.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.215.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLLDv4tQzoTxpuHBF7FdAAAAYQ"]
[Sun May 24 17:55:36.752637 2026] [:error] [pid 49775:tid 49797] [client 49.204.215.51:2461] [client 49.204.215.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.215.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLLGIvZb8G6T8WpI1iWdQAAABQ"]
[Sun May 24 17:55:47.340689 2026] [:error] [pid 49744:tid 49749] [client 49.204.215.51:3072] [client 49.204.215.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.215.51, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLLIzsE5kPdFpUbbHHMrwAAAMM"]
[Sun May 24 18:03:17.722095 2026] [:error] [pid 23497:tid 23512] [client 62.84.185.55:39198] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "ahLM5SPlV47QcYwd2v_uHgAAAUw"]
[Sun May 24 18:03:26.278786 2026] [:error] [pid 49775:tid 49795] [client 62.84.185.55:41112] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "ahLM7ovZb8G6T8WpI1iXPgAAABI"]
[Sun May 24 18:03:34.076676 2026] [:error] [pid 49689:tid 49741] [client 62.84.185.55:47982] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "ahLM9gaxiY3NxLUD97VzYAAAAJc"]
[Sun May 24 18:03:40.295950 2026] [:error] [pid 41708:tid 41715] [client 62.84.185.55:50464] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ahLM_P4tQzoTxpuHBF7GoAAAAYU"]
[Sun May 24 18:03:46.990019 2026] [:error] [pid 41708:tid 41713] [client 62.84.185.55:50476] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ahLNAv4tQzoTxpuHBF7GpgAAAYM"]
[Sun May 24 18:03:53.165779 2026] [:error] [pid 41708:tid 41723] [client 62.84.185.55:54892] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ahLNCf4tQzoTxpuHBF7GrgAAAY0"]
[Sun May 24 18:03:57.422669 2026] [:error] [pid 41708:tid 41727] [client 62.84.185.55:54904] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ahLNDf4tQzoTxpuHBF7GsQAAAZE"]
[Sun May 24 18:04:03.975625 2026] [:error] [pid 23497:tid 23516] [client 62.84.185.55:56488] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahLNEyPlV47QcYwd2v_ubwAAAVA"]
[Sun May 24 18:05:31.694631 2026] [:error] [pid 2639:tid 2644] [client 62.84.185.55:49178] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "ahLNa0zQncQTd0Z0Oe9pUwAAAQM"]
[Sun May 24 18:05:36.995355 2026] [:error] [pid 23497:tid 23509] [client 62.84.185.55:49186] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "ahLNcCPlV47QcYwd2v_u7wAAAUk"]
[Sun May 24 18:05:40.755082 2026] [:error] [pid 4777:tid 4799] [client 62.84.185.55:24300] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "ahLNdPtPctoQOm4w5pNwQwAAAdE"]
[Sun May 24 18:05:45.194289 2026] [:error] [pid 23497:tid 23520] [client 62.84.185.55:24314] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "ahLNeSPlV47QcYwd2v_vAAAAAVQ"]
[Sun May 24 18:05:50.256601 2026] [:error] [pid 23497:tid 23514] [client 62.84.185.55:8716] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20betflik.aspx"] [unique_id "ahLNfiPlV47QcYwd2v_vEwAAAU4"]
[Sun May 24 18:05:55.879744 2026] [:error] [pid 4777:tid 4783] [client 62.84.185.55:8724] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game%20slot.aspx"] [unique_id "ahLNg_tPctoQOm4w5pNwTwAAAcE"]
[Sun May 24 18:06:01.696063 2026] [:error] [pid 4777:tid 4784] [client 62.84.185.55:14050] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20game.aspx"] [unique_id "ahLNiftPctoQOm4w5pNwVwAAAcI"]
[Sun May 24 18:06:09.716907 2026] [:error] [pid 2639:tid 2643] [client 62.84.185.55:53748] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker%20auto.aspx"] [unique_id "ahLNkUzQncQTd0Z0Oe9pXwAAAQI"]
[Sun May 24 18:06:17.310898 2026] [:error] [pid 49744:tid 49762] [client 62.84.185.55:53760] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20joker.aspx"] [unique_id "ahLNmTsE5kPdFpUbbHHNugAAANA"]
[Sun May 24 18:06:24.582890 2026] [:error] [pid 23497:tid 23523] [client 62.84.185.55:45864] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20osaka.aspx"] [unique_id "ahLNoCPlV47QcYwd2v_vMwAAAVc"]
[Sun May 24 18:08:21.401825 2026] [:error] [pid 49689:tid 49720] [client 62.84.185.55:59982] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ahLOFQaxiY3NxLUD97Vz3AAAAII"]
[Sun May 24 18:08:27.779858 2026] [:error] [pid 49775:tid 49783] [client 62.84.185.55:60008] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ahLOG4vZb8G6T8WpI1iYCwAAAAY"]
[Sun May 24 18:08:36.419892 2026] [:error] [pid 49744:tid 49767] [client 62.84.185.55:37834] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahLOJDsE5kPdFpUbbHHN6wAAANU"]
[Sun May 24 18:08:43.482186 2026] [:error] [pid 49775:tid 49780] [client 62.84.185.55:53040] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ahLOK4vZb8G6T8WpI1iYJQAAAAM"]
[Sun May 24 18:08:50.288351 2026] [:error] [pid 49744:tid 49758] [client 62.84.185.55:32766] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ahLOMjsE5kPdFpUbbHHN8QAAAMw"]
[Sun May 24 18:08:55.276744 2026] [:error] [pid 49689:tid 49734] [client 62.84.185.55:32776] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ahLONwaxiY3NxLUD97Vz6QAAAJA"]
[Sun May 24 18:08:59.288280 2026] [:error] [pid 23497:tid 23514] [client 62.84.185.55:24458] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ahLOOyPlV47QcYwd2v_wCAAAAU4"]
[Sun May 24 18:09:05.652758 2026] [:error] [pid 4777:tid 4789] [client 62.84.185.55:24462] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ahLOQftPctoQOm4w5pNw5AAAAcc"]
[Sun May 24 18:10:37.426345 2026] [:error] [pid 49775:tid 49797] [client 62.84.185.55:4444] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ahLOnYvZb8G6T8WpI1iYegAAABQ"]
[Sun May 24 18:10:43.593165 2026] [:error] [pid 49775:tid 49790] [client 62.84.185.55:33308] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ahLOo4vZb8G6T8WpI1iYhgAAAA0"]
[Sun May 24 18:10:48.776187 2026] [:error] [pid 2639:tid 2660] [client 62.84.185.55:1556] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ahLOqEzQncQTd0Z0Oe9qDgAAARM"]
[Sun May 24 18:10:53.462559 2026] [:error] [pid 49775:tid 49790] [client 62.84.185.55:1558] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ahLOrYvZb8G6T8WpI1iYjQAAAA0"]
[Sun May 24 18:10:57.295210 2026] [:error] [pid 49688:tid 49711] [client 62.84.185.55:1572] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahLOsWYoQ9V6a_4pBsit7wAAAFQ"]
[Sun May 24 18:11:02.584842 2026] [:error] [pid 49775:tid 49793] [client 62.84.185.55:43648] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ahLOtovZb8G6T8WpI1iYmAAAABA"]
[Sun May 24 18:11:06.086444 2026] [:error] [pid 41708:tid 41714] [client 62.84.185.55:43652] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ahLOuv4tQzoTxpuHBF7H-gAAAYQ"]
[Sun May 24 18:11:11.590366 2026] [:error] [pid 4777:tid 4789] [client 62.84.185.55:15154] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ahLOv_tPctoQOm4w5pNxVwAAAcc"]
[Sun May 24 18:11:14.909462 2026] [:error] [pid 41708:tid 41725] [client 62.84.185.55:15170] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahLOwv4tQzoTxpuHBF7IAAAAAY8"]
[Sun May 24 18:11:19.628910 2026] [:error] [pid 2639:tid 2647] [client 62.84.185.55:33266] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ahLOx0zQncQTd0Z0Oe9qJgAAAQY"]
[Sun May 24 18:11:23.185959 2026] [:error] [pid 49688:tid 49700] [client 62.84.185.55:33276] [client 62.84.185.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ahLOy2YoQ9V6a_4pBsit8wAAAEk"]
[Sun May 24 20:17:45.071481 2026] [:error] [pid 49744:tid 49770] [client 117.201.50.234:51390] [client 117.201.50.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.201.50.234, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLsaTsE5kPdFpUbbHHe6wAAANg"]
[Sun May 24 20:17:55.335948 2026] [:error] [pid 41708:tid 41714] [client 117.201.50.234:51966] [client 117.201.50.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.201.50.234, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLsc_4tQzoTxpuHBF7ilAAAAYQ"]
[Sun May 24 20:18:05.838508 2026] [:error] [pid 23497:tid 23523] [client 117.201.50.234:52369] [client 117.201.50.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.201.50.234, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLsfSPlV47QcYwd2v8R-wAAAVc"]
[Sun May 24 20:18:16.397445 2026] [:error] [pid 49744:tid 49758] [client 117.201.50.234:52746] [client 117.201.50.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.201.50.234, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLsiDsE5kPdFpUbbHHe-wAAAMw"]
[Sun May 24 20:18:26.941792 2026] [:error] [pid 23497:tid 23518] [client 117.201.50.234:53124] [client 117.201.50.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.201.50.234, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahLskiPlV47QcYwd2v8SEQAAAVI"]
[Sun May 24 20:31:53.941601 2026] [:error] [pid 11281:tid 11320] [client 119.91.20.139:40302] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahLvuZKmC9taWvA91j5vQgAAAIc"]
[Sun May 24 20:40:42.069845 2026] [:error] [pid 11368:tid 11389] [client 43.155.195.141:57312] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahLxyofq_sTmmtTKm1URAQAAARM"]
[Sun May 24 22:06:31.063048 2026] [:error] [pid 11368:tid 11379] [client 20.195.178.143:11467] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ahMF54fq_sTmmtTKm1U5TwAAAQk"]
[Sun May 24 22:06:32.610955 2026] [:error] [pid 11281:tid 11314] [client 20.195.178.143:18967] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ahMF6JKmC9taWvA91j6LiAAAAIE"]
[Sun May 24 22:06:34.074956 2026] [:error] [pid 15835:tid 15851] [client 20.195.178.143:18948] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ahMF6mWbknYlUM9P0qPoGQAAAA4"]
[Sun May 24 22:06:35.521558 2026] [:error] [pid 15835:tid 15848] [client 20.195.178.143:11474] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ahMF62WbknYlUM9P0qPoHQAAAAs"]
[Sun May 24 22:43:03.271083 2026] [:error] [pid 11368:tid 11390] [client 163.223.5.39:56180] [client 163.223.5.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.5.39, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahMOd4fq_sTmmtTKm1VE2gAAARQ"]
[Sun May 24 22:43:24.461679 2026] [:error] [pid 11282:tid 11349] [client 163.223.5.39:55720] [client 163.223.5.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.5.39, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahMOjO0bPyN3C7HZ1R-zBAAAAMk"]
[Sun May 24 22:43:35.155492 2026] [:error] [pid 11368:tid 11394] [client 163.223.5.39:55892] [client 163.223.5.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.5.39, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahMOl4fq_sTmmtTKm1VE_wAAARg"]
[Sun May 24 22:43:56.304414 2026] [:error] [pid 15835:tid 15850] [client 163.223.5.39:55556] [client 163.223.5.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.5.39, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahMOrGWbknYlUM9P0qP3kwAAAA0"]
[Sun May 24 22:44:28.201689 2026] [:error] [pid 11282:tid 11357] [client 163.223.5.39:55496] [client 163.223.5.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.5.39, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahMOzO0bPyN3C7HZ1R-zKgAAANE"]
[Sun May 24 22:44:38.859121 2026] [:error] [pid 11368:tid 11379] [client 163.223.5.39:55742] [client 163.223.5.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 163.223.5.39, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahMO1ofq_sTmmtTKm1VFPAAAAQk"]
[Sun May 24 23:11:37.194931 2026] [:error] [pid 11368:tid 11374] [client 61.2.62.137:58207] [client 61.2.62.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.2.62.137, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahMVKYfq_sTmmtTKm1VNCAAAAQQ"]
[Sun May 24 23:11:48.042711 2026] [:error] [pid 15835:tid 15843] [client 61.2.62.137:60365] [client 61.2.62.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.2.62.137, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahMVNGWbknYlUM9P0qMDSgAAAAY"]
[Sun May 24 23:11:59.457552 2026] [:error] [pid 11282:tid 11342] [client 61.2.62.137:60914] [client 61.2.62.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.2.62.137, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahMVP-0bPyN3C7HZ1R-6YgAAAMI"]
[Sun May 24 23:12:10.662278 2026] [:error] [pid 15835:tid 15855] [client 61.2.62.137:61485] [client 61.2.62.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.2.62.137, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahMVSmWbknYlUM9P0qMDagAAABI"]
[Sun May 24 23:12:21.737129 2026] [:error] [pid 15835:tid 15848] [client 61.2.62.137:62045] [client 61.2.62.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.2.62.137, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahMVVWWbknYlUM9P0qMDhwAAAAs"]
[Mon May 25 02:37:00.599402 2026] [:error] [pid 11282:tid 11363] [client 3.99.126.8:37950] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "ahNFTO0bPyN3C7HZ1R_rlgAAANc"]
[Mon May 25 02:37:04.034129 2026] [:error] [pid 11368:tid 11387] [client 3.99.126.8:57040] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/credentials"] [unique_id "ahNFUIfq_sTmmtTKm1WNKQAAARE"]
[Mon May 25 02:37:07.269679 2026] [:error] [pid 15835:tid 15859] [client 3.99.126.8:57068] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "ahNFU2WbknYlUM9P0qNbgAAAABY"]
[Mon May 25 02:37:08.821040 2026] [:error] [pid 11282:tid 11359] [client 3.99.126.8:57110] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "ahNFVO0bPyN3C7HZ1R_rogAAANM"]
[Mon May 25 02:37:10.309513 2026] [:error] [pid 15835:tid 15846] [client 3.99.126.8:57144] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "ahNFVmWbknYlUM9P0qNbggAAAAk"]
[Mon May 25 02:37:11.730947 2026] [:error] [pid 15835:tid 15858] [client 3.99.126.8:57176] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging"] [unique_id "ahNFV2WbknYlUM9P0qNbigAAABU"]
[Mon May 25 02:37:12.980528 2026] [:error] [pid 15835:tid 15843] [client 3.99.126.8:41462] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "ahNFWGWbknYlUM9P0qNbjwAAAAY"]
[Mon May 25 02:37:14.744058 2026] [:error] [pid 15835:tid 15841] [client 3.99.126.8:41506] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test"] [unique_id "ahNFWmWbknYlUM9P0qNblgAAAAQ"]
[Mon May 25 02:37:16.474674 2026] [:error] [pid 11282:tid 11361] [client 3.99.126.8:41530] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.remote"] [unique_id "ahNFXO0bPyN3C7HZ1R_rsQAAANU"]
[Mon May 25 02:37:18.306158 2026] [:error] [pid 11368:tid 11373] [client 3.99.126.8:41576] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "ahNFXofq_sTmmtTKm1WNPAAAAQM"]
[Mon May 25 02:37:19.621937 2026] [:error] [pid 15835:tid 15842] [client 3.99.126.8:41598] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "ahNFX2WbknYlUM9P0qNbmQAAAAU"]
[Mon May 25 02:37:21.795151 2026] [:error] [pid 11281:tid 11331] [client 3.99.126.8:41628] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "ahNFYZKmC9taWvA91j7BzgAAAJI"]
[Mon May 25 02:37:24.135074 2026] [:error] [pid 11282:tid 11358] [client 3.99.126.8:37672] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old"] [unique_id "ahNFZO0bPyN3C7HZ1R_ruwAAANI"]
[Mon May 25 02:37:25.741867 2026] [:error] [pid 15835:tid 15858] [client 3.99.126.8:37704] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample"] [unique_id "ahNFZWWbknYlUM9P0qNbtwAAABU"]
[Mon May 25 02:37:27.182829 2026] [:error] [pid 11282:tid 11347] [client 3.99.126.8:37712] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "ahNFZ-0bPyN3C7HZ1R_rwAAAAMc"]
[Mon May 25 02:37:28.516827 2026] [:error] [pid 15835:tid 15845] [client 3.99.126.8:37754] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev"] [unique_id "ahNFaGWbknYlUM9P0qNbwAAAAAg"]
[Mon May 25 02:37:31.305067 2026] [:error] [pid 11282:tid 11358] [client 3.99.126.8:37778] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.prod"] [unique_id "ahNFa-0bPyN3C7HZ1R_rygAAANI"]
[Mon May 25 02:37:33.442735 2026] [:error] [pid 15835:tid 15837] [client 3.99.126.8:53302] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.stage"] [unique_id "ahNFbWWbknYlUM9P0qNbywAAAAA"]
[Mon May 25 02:37:34.692336 2026] [:error] [pid 11280:tid 11295] [client 3.99.126.8:53328] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.ci"] [unique_id "ahNFboRn5s7laoSxy1ROYQAAAEo"]
[Mon May 25 02:37:36.025521 2026] [:error] [pid 11281:tid 11322] [client 3.99.126.8:53352] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.docker"] [unique_id "ahNFcJKmC9taWvA91j7B1AAAAIk"]
[Mon May 25 02:37:37.457660 2026] [:error] [pid 11281:tid 11319] [client 3.99.126.8:53370] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.live"] [unique_id "ahNFcZKmC9taWvA91j7B1wAAAIY"]
[Mon May 25 02:37:39.054443 2026] [:error] [pid 11280:tid 11298] [client 3.99.126.8:53396] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.preprod"] [unique_id "ahNFc4Rn5s7laoSxy1RObQAAAE0"]
[Mon May 25 02:37:40.645175 2026] [:error] [pid 15835:tid 15852] [client 3.99.126.8:53420] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.uat"] [unique_id "ahNFdGWbknYlUM9P0qNb0QAAAA8"]
[Mon May 25 02:37:41.922949 2026] [:error] [pid 15835:tid 15845] [client 3.99.126.8:38386] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dist"] [unique_id "ahNFdWWbknYlUM9P0qNb1AAAAAg"]
[Mon May 25 02:37:44.259571 2026] [:error] [pid 15835:tid 15849] [client 3.99.126.8:38410] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.swp"] [unique_id "ahNFeGWbknYlUM9P0qNb3gAAAAw"]
[Mon May 25 02:37:46.553067 2026] [:error] [pid 11368:tid 11380] [client 3.99.126.8:38446] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env~"] [unique_id "ahNFeofq_sTmmtTKm1WNawAAAQo"]
[Mon May 25 02:37:48.428563 2026] [:error] [pid 15835:tid 15847] [client 3.99.126.8:38464] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env1"] [unique_id "ahNFfGWbknYlUM9P0qNb5wAAAAo"]
[Mon May 25 02:37:50.792645 2026] [:error] [pid 15835:tid 15850] [client 3.99.126.8:38484] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env2"] [unique_id "ahNFfmWbknYlUM9P0qNb7gAAAA0"]
[Mon May 25 02:37:52.199796 2026] [:error] [pid 15835:tid 15847] [client 3.99.126.8:52406] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env_copy"] [unique_id "ahNFgGWbknYlUM9P0qNb8wAAAAo"]
[Mon May 25 02:37:53.432839 2026] [:error] [pid 11281:tid 11331] [client 3.99.126.8:52420] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.txt"] [unique_id "ahNFgZKmC9taWvA91j7B3wAAAJI"]
[Mon May 25 02:37:54.753688 2026] [:error] [pid 11282:tid 11358] [client 3.99.126.8:52448] [client 3.99.126.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.json"] [unique_id "ahNFgu0bPyN3C7HZ1R_r6AAAANI"]
[Mon May 25 03:10:13.447610 2026] [:error] [pid 4038:tid 4112] [client 94.64.83.95:52388] [client 94.64.83.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.64.83.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahNNFeJhpWAIJpC9htfQSwAAAIY"]
[Mon May 25 03:10:23.124743 2026] [:error] [pid 4135:tid 4158] [client 94.64.83.95:52745] [client 94.64.83.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.64.83.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahNNH9Ozd8iEMqTY0jcWowAAANU"]
[Mon May 25 03:10:33.633338 2026] [:error] [pid 4037:tid 4099] [client 94.64.83.95:53058] [client 94.64.83.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.64.83.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahNNKc8JPbNz9GTvva4J7wAAAFQ"]
[Mon May 25 03:10:44.124885 2026] [:error] [pid 4036:tid 4055] [client 94.64.83.95:55620] [client 94.64.83.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.64.83.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahNNNNMv7BEGCHoaDmtTbAAAAAM"]
[Mon May 25 03:10:54.666038 2026] [:error] [pid 4037:tid 4087] [client 94.64.83.95:55912] [client 94.64.83.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.64.83.95, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahNNPs8JPbNz9GTvva4KCAAAAEg"]
[Mon May 25 03:16:19.332592 2026] [:error] [pid 9412:tid 9437] [client 203.161.56.124:37364] [client 203.161.56.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.161.56.124, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahNOg_B08YTGxRxBIP-0XAAAAQs"]
[Mon May 25 03:16:20.156605 2026] [proxy_fcgi:error] [pid 9412:tid 9437] [client 203.161.56.124:37364] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 03:16:21.375970 2026] [:error] [pid 9412:tid 9439] [client 203.161.56.124:37364] [client 203.161.56.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.161.56.124, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahNOhfB08YTGxRxBIP-0YAAAAQ0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 03:16:22.414961 2026] [proxy_fcgi:error] [pid 9412:tid 9439] [client 203.161.56.124:37364] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 04:07:43.116980 2026] [:error] [pid 9302:tid 9326] [client 38.211.205.36:48101] [client 38.211.205.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.211.205.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahNajy1RaFfTSnDQnqExPgAAABM"]
[Mon May 25 04:07:55.024792 2026] [:error] [pid 9398:tid 9417] [client 38.211.205.36:47581] [client 38.211.205.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.211.205.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahNam-hIu7KstzsCua95EwAAAM0"]
[Mon May 25 04:08:09.628781 2026] [:error] [pid 9398:tid 9412] [client 38.211.205.36:48204] [client 38.211.205.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.211.205.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahNaqehIu7KstzsCua95KQAAAMg"]
[Mon May 25 04:08:26.014995 2026] [:error] [pid 9398:tid 9407] [client 38.211.205.36:47701] [client 38.211.205.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.211.205.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahNauuhIu7KstzsCua95PgAAAMc"]
[Mon May 25 04:08:42.116131 2026] [:error] [pid 9398:tid 9404] [client 38.211.205.36:48192] [client 38.211.205.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.211.205.36, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahNayuhIu7KstzsCua95XwAAAMQ"]
[Mon May 25 04:14:54.935900 2026] [:error] [pid 50423:tid 50438] [client 69.49.112.69:54786] [client 69.49.112.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.69, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahNcPqJWO7En4nKEQ3jwlAAAAQ0"]
[Mon May 25 04:14:55.726543 2026] [proxy_fcgi:error] [pid 50423:tid 50438] [client 69.49.112.69:54786] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 04:15:12.736874 2026] [:error] [pid 9302:tid 9308] [client 69.49.112.69:18310] [client 69.49.112.69] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahNcUC1RaFfTSnDQnqEzLQAAAAE"]
[Mon May 25 05:50:42.780762 2026] [:error] [pid 9398:tid 9401] [client 82.165.89.228:44004] [client 82.165.89.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.228, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahNysuhIu7KstzsCua-jLgAAAME"]
[Mon May 25 05:50:43.589951 2026] [proxy_fcgi:error] [pid 9398:tid 9401] [client 82.165.89.228:44004] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 05:50:45.275469 2026] [:error] [pid 9398:tid 9407] [client 82.165.89.228:44004] [client 82.165.89.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.89.228, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahNytehIu7KstzsCua-jLwAAAMc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 05:50:46.224857 2026] [proxy_fcgi:error] [pid 9398:tid 9407] [client 82.165.89.228:44004] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 06:17:53.775062 2026] [:error] [pid 9304:tid 9370] [client 43.157.147.3:34510] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahN5EeVEV2qpMC_1UzR9QgAAAIk"]
[Mon May 25 06:23:35.397070 2026] [:error] [pid 9302:tid 9328] [client 41.105.50.40:55931] [client 41.105.50.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.105.50.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahN6Zy1RaFfTSnDQnqFQ7QAAABU"]
[Mon May 25 06:23:45.869038 2026] [:error] [pid 9303:tid 9344] [client 41.105.50.40:56209] [client 41.105.50.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.105.50.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahN6cX3bQScbssitjPQ3ngAAAEo"]
[Mon May 25 06:23:56.546370 2026] [:error] [pid 9302:tid 9327] [client 41.105.50.40:56525] [client 41.105.50.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.105.50.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahN6fC1RaFfTSnDQnqFQ9QAAABQ"]
[Mon May 25 06:24:07.172881 2026] [:error] [pid 9304:tid 9374] [client 41.105.50.40:56748] [client 41.105.50.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.105.50.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahN6h-VEV2qpMC_1UzR-6QAAAI0"]
[Mon May 25 06:24:17.872308 2026] [:error] [pid 9398:tid 9426] [client 41.105.50.40:56973] [client 41.105.50.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.105.50.40, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahN6kehIu7KstzsCua-pJgAAANY"]
[Mon May 25 07:09:19.640625 2026] [:error] [pid 50423:tid 50437] [client 104.28.214.122:38884] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/ms-themes.php"] [unique_id "ahOFH6JWO7En4nKEQ3g-rgAAAQw"]
[Mon May 25 07:09:20.094758 2026] [:error] [pid 9303:tid 9339] [client 104.28.214.122:38431] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/chosen.php"] [unique_id "ahOFIH3bQScbssitjPRD1gAAAEU"]
[Mon May 25 07:09:27.668731 2026] [:error] [pid 9304:tid 9381] [client 104.28.214.122:20252] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/file.php"] [unique_id "ahOFJ-VEV2qpMC_1UzSWQQAAAJQ"]
[Mon May 25 07:09:28.121099 2026] [:error] [pid 9302:tid 9323] [client 104.28.214.122:20367] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/flower.php"] [unique_id "ahOFKC1RaFfTSnDQnqFbvwAAABA"]
[Mon May 25 07:09:28.568560 2026] [:error] [pid 9398:tid 9413] [client 104.28.214.122:20450] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/gifclass.php"] [unique_id "ahOFKOhIu7KstzsCua-3bAAAAMk"]
[Mon May 25 07:09:32.031053 2026] [:error] [pid 21606:tid 21621] [client 104.28.246.122:55799] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/bless.php"] [unique_id "ahOFLGswdp0RYkH5t9XJvQAAAU0"]
[Mon May 25 07:09:33.491856 2026] [:error] [pid 9304:tid 9368] [client 104.28.246.122:21183] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "ahOFLeVEV2qpMC_1UzSWdgAAAIc"]
[Mon May 25 07:09:33.941189 2026] [:error] [pid 21606:tid 21623] [client 104.28.246.122:55461] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/blurbs.php"] [unique_id "ahOFLWswdp0RYkH5t9XJwwAAAU8"]
[Mon May 25 07:09:34.389131 2026] [:error] [pid 9304:tid 9373] [client 104.28.246.122:55543] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/akcc.php"] [unique_id "ahOFLuVEV2qpMC_1UzSWiQAAAIw"]
[Mon May 25 07:26:25.038040 2026] [:error] [pid 9304:tid 9371] [client 35.183.7.221:55160] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/config"] [unique_id "ahOJIeVEV2qpMC_1UzSirAAAAIo"]
[Mon May 25 07:26:28.755874 2026] [:error] [pid 50423:tid 50426] [client 35.183.7.221:55186] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.git/credentials"] [unique_id "ahOJJKJWO7En4nKEQ3hGpQAAAQE"]
[Mon May 25 07:26:31.313724 2026] [:error] [pid 9304:tid 9365] [client 35.183.7.221:34946] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env"] [unique_id "ahOJJ-VEV2qpMC_1UzSisAAAAIQ"]
[Mon May 25 07:26:32.443146 2026] [:error] [pid 21606:tid 21632] [client 35.183.7.221:34980] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.local"] [unique_id "ahOJKGswdp0RYkH5t9XN1QAAAVg"]
[Mon May 25 07:26:33.564164 2026] [:error] [pid 50423:tid 50426] [client 35.183.7.221:35000] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.production"] [unique_id "ahOJKaJWO7En4nKEQ3hGrAAAAQE"]
[Mon May 25 07:26:34.723080 2026] [:error] [pid 50423:tid 50445] [client 35.183.7.221:35024] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.staging"] [unique_id "ahOJKqJWO7En4nKEQ3hGtAAAARQ"]
[Mon May 25 07:26:35.938659 2026] [:error] [pid 50423:tid 50449] [client 35.183.7.221:35038] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.development"] [unique_id "ahOJK6JWO7En4nKEQ3hGuwAAARg"]
[Mon May 25 07:26:37.004369 2026] [:error] [pid 50423:tid 50448] [client 35.183.7.221:58102] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.test"] [unique_id "ahOJLaJWO7En4nKEQ3hGwgAAARc"]
[Mon May 25 07:26:38.445075 2026] [:error] [pid 9303:tid 9358] [client 35.183.7.221:58130] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.remote"] [unique_id "ahOJLn3bQScbssitjPRJYwAAAFg"]
[Mon May 25 07:26:39.948793 2026] [:error] [pid 9303:tid 9354] [client 35.183.7.221:58158] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.bak"] [unique_id "ahOJL33bQScbssitjPRJZQAAAFQ"]
[Mon May 25 07:26:41.154303 2026] [:error] [pid 9304:tid 9375] [client 35.183.7.221:58182] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.backup"] [unique_id "ahOJMeVEV2qpMC_1UzSi5AAAAI4"]
[Mon May 25 07:26:42.195509 2026] [:error] [pid 9304:tid 9381] [client 35.183.7.221:58214] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.save"] [unique_id "ahOJMuVEV2qpMC_1UzSi_gAAAJQ"]
[Mon May 25 07:26:43.434807 2026] [:error] [pid 9304:tid 9365] [client 35.183.7.221:58234] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.old"] [unique_id "ahOJM-VEV2qpMC_1UzSjDQAAAIQ"]
[Mon May 25 07:26:44.553658 2026] [:error] [pid 9303:tid 9338] [client 35.183.7.221:58272] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.sample"] [unique_id "ahOJNH3bQScbssitjPRJbgAAAEQ"]
[Mon May 25 07:26:46.133461 2026] [:error] [pid 9304:tid 9368] [client 35.183.7.221:58304] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.example"] [unique_id "ahOJNuVEV2qpMC_1UzSjGgAAAIc"]
[Mon May 25 07:26:47.416563 2026] [:error] [pid 9304:tid 9381] [client 35.183.7.221:36114] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dev"] [unique_id "ahOJN-VEV2qpMC_1UzSjIwAAAJQ"]
[Mon May 25 07:26:48.835329 2026] [:error] [pid 9398:tid 9404] [client 35.183.7.221:36144] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.prod"] [unique_id "ahOJOOhIu7KstzsCua-99AAAAMQ"]
[Mon May 25 07:26:49.988779 2026] [:error] [pid 9398:tid 9413] [client 35.183.7.221:36178] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.stage"] [unique_id "ahOJOehIu7KstzsCua-9-QAAAMk"]
[Mon May 25 07:26:51.105754 2026] [:error] [pid 9303:tid 9345] [client 35.183.7.221:36214] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.ci"] [unique_id "ahOJO33bQScbssitjPRJfwAAAEs"]
[Mon May 25 07:26:52.337235 2026] [:error] [pid 9398:tid 9404] [client 35.183.7.221:36244] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.docker"] [unique_id "ahOJPOhIu7KstzsCua--EwAAAMQ"]
[Mon May 25 07:26:53.414575 2026] [:error] [pid 50423:tid 50448] [client 35.183.7.221:36264] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.live"] [unique_id "ahOJPaJWO7En4nKEQ3hG4QAAARc"]
[Mon May 25 07:26:54.691652 2026] [:error] [pid 50423:tid 50439] [client 35.183.7.221:36298] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.preprod"] [unique_id "ahOJPqJWO7En4nKEQ3hG5QAAAQ4"]
[Mon May 25 07:26:55.816722 2026] [:error] [pid 9304:tid 9370] [client 35.183.7.221:36324] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.uat"] [unique_id "ahOJP-VEV2qpMC_1UzSjSQAAAIk"]
[Mon May 25 07:26:56.920570 2026] [:error] [pid 9304:tid 9375] [client 35.183.7.221:41638] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.dist"] [unique_id "ahOJQOVEV2qpMC_1UzSjUQAAAI4"]
[Mon May 25 07:26:57.939007 2026] [:error] [pid 50423:tid 50436] [client 35.183.7.221:41666] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.swp"] [unique_id "ahOJQaJWO7En4nKEQ3hG6wAAAQs"]
[Mon May 25 07:26:58.963463 2026] [:error] [pid 50423:tid 50447] [client 35.183.7.221:41708] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env~"] [unique_id "ahOJQqJWO7En4nKEQ3hG8AAAARY"]
[Mon May 25 07:27:01.501201 2026] [:error] [pid 50423:tid 50443] [client 35.183.7.221:41718] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env1"] [unique_id "ahOJRaJWO7En4nKEQ3hG9gAAARI"]
[Mon May 25 07:27:02.598332 2026] [:error] [pid 9304:tid 9369] [client 35.183.7.221:41732] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env2"] [unique_id "ahOJRuVEV2qpMC_1UzSjeQAAAIg"]
[Mon May 25 07:27:04.058809 2026] [:error] [pid 50423:tid 50442] [client 35.183.7.221:41748] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env_copy"] [unique_id "ahOJSKJWO7En4nKEQ3hG-gAAARE"]
[Mon May 25 07:27:05.079581 2026] [:error] [pid 50423:tid 50427] [client 35.183.7.221:41786] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.txt"] [unique_id "ahOJSaJWO7En4nKEQ3hG_QAAAQI"]
[Mon May 25 07:27:06.233118 2026] [:error] [pid 9303:tid 9337] [client 35.183.7.221:41820] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.json"] [unique_id "ahOJSn3bQScbssitjPRJhgAAAEM"]
[Mon May 25 07:27:08.258956 2026] [:error] [pid 9302:tid 9317] [client 35.183.7.221:48846] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.yaml"] [unique_id "ahOJTC1RaFfTSnDQnqFg_QAAAAo"]
[Mon May 25 07:27:09.611459 2026] [:error] [pid 50423:tid 50426] [client 35.183.7.221:48872] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env.yml"] [unique_id "ahOJTaJWO7En4nKEQ3hHDwAAAQE"]
[Mon May 25 07:27:10.929356 2026] [:error] [pid 50423:tid 50448] [client 35.183.7.221:48908] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/app/.env"] [unique_id "ahOJTqJWO7En4nKEQ3hHFwAAARc"]
[Mon May 25 07:27:12.111072 2026] [:error] [pid 50423:tid 50427] [client 35.183.7.221:48934] [client 35.183.7.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/apps/.env"] [unique_id "ahOJUKJWO7En4nKEQ3hHHwAAAQI"]
[Mon May 25 08:00:19.228911 2026] [autoindex:error] [pid 62722:tid 62730] [client 4.225.163.177:4858] AH01276: Cannot serve directory /home/hbtwocom/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 25 08:00:31.299557 2026] [:error] [pid 62722:tid 62747] [client 4.225.163.177:4858] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "ahORH6M6ssnLWYf6CVA9ngAAAFc"]
[Mon May 25 08:00:32.446119 2026] [:error] [pid 62427:tid 62481] [client 4.225.163.177:48231] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "ahORIPMUa83fc4GDyBzu6wAAAVg"]
[Mon May 25 08:00:33.545423 2026] [:error] [pid 62428:tid 62497] [client 4.225.163.177:48211] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "ahORIZNosGBa7mui3VSaUwAAAI0"]
[Mon May 25 08:00:34.600390 2026] [:error] [pid 62722:tid 62739] [client 4.225.163.177:63855] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/class-t.api.php"] [unique_id "ahORIqM6ssnLWYf6CVA9pQAAAE8"]
[Mon May 25 08:12:15.296141 2026] [:error] [pid 62428:tid 62502] [client 4.225.163.177:3922] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "ahOT35NosGBa7mui3VSeMwAAAJI"]
[Mon May 25 08:12:16.398436 2026] [:error] [pid 62722:tid 62741] [client 4.225.163.177:3881] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "ahOT4KM6ssnLWYf6CVBEdgAAAFE"]
[Mon May 25 08:12:17.546053 2026] [:error] [pid 62427:tid 62478] [client 4.225.163.177:21175] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "ahOT4fMUa83fc4GDyBzxNQAAAVU"]
[Mon May 25 08:12:18.721912 2026] [:error] [pid 62515:tid 62529] [client 4.225.163.177:3568] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/goods.php"] [unique_id "ahOT4hig0_XsOwmnrv9PEgAAAMw"]
[Mon May 25 09:02:25.417442 2026] [:error] [pid 62515:tid 62520] [client 103.50.205.131:60810] [client 103.50.205.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.50.205.131, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahOfoRig0_XsOwmnrv9iHAAAAMM"]
[Mon May 25 09:02:27.593740 2026] [proxy_fcgi:error] [pid 62515:tid 62520] [client 103.50.205.131:60810] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 09:02:27.997056 2026] [:error] [pid 62515:tid 62540] [client 103.50.205.131:60810] [client 103.50.205.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.50.205.131, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahOfoxig0_XsOwmnrv9iHgAAANc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 09:02:28.948095 2026] [proxy_fcgi:error] [pid 62515:tid 62540] [client 103.50.205.131:60810] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 09:54:04.813105 2026] [:error] [pid 62428:tid 62499] [client 170.106.147.63:36774] [client 170.106.147.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahOrvJNosGBa7mui3VS91AAAAI8"]
[Mon May 25 10:16:39.886720 2026] [:error] [pid 62722:tid 62730] [client 126.47.155.165:52787] [client 126.47.155.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 126.47.155.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahOxB6M6ssnLWYf6CVCGiAAAAEY"]
[Mon May 25 10:16:50.588799 2026] [:error] [pid 62515:tid 62520] [client 126.47.155.165:53400] [client 126.47.155.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 126.47.155.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahOxEhig0_XsOwmnrv9__QAAAMM"]
[Mon May 25 10:17:01.126620 2026] [:error] [pid 62515:tid 62528] [client 126.47.155.165:53805] [client 126.47.155.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 126.47.155.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahOxHRig0_XsOwmnrv-AFQAAAMs"]
[Mon May 25 10:17:11.828446 2026] [:error] [pid 62722:tid 62733] [client 126.47.155.165:54215] [client 126.47.155.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 126.47.155.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahOxJ6M6ssnLWYf6CVCG4AAAAEk"]
[Mon May 25 10:17:22.498080 2026] [:error] [pid 62428:tid 62505] [client 126.47.155.165:54621] [client 126.47.155.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 126.47.155.165, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahOxMpNosGBa7mui3VTFNQAAAJU"]
[Mon May 25 10:31:59.094690 2026] [:error] [pid 62428:tid 62486] [client 4.225.163.177:21928] [client 4.225.163.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "ahO0n5NosGBa7mui3VTJvQAAAII"]
[Mon May 25 10:32:05.763804 2026] [autoindex:error] [pid 62427:tid 62473] [client 4.225.163.177:21950] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 25 10:32:11.895601 2026] [:error] [pid 62427:tid 62469] [client 4.225.163.177:21950] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "ahO0q_MUa83fc4GDyBwYTQAAAUw"]
[Mon May 25 10:32:13.245687 2026] [:error] [pid 62426:tid 62453] [client 4.225.163.177:21931] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "ahO0rUj3D3Mo8ANpTRCQjAAAABc"]
[Mon May 25 10:32:14.351329 2026] [:error] [pid 62515:tid 62535] [client 4.225.163.177:12725] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "ahO0rhig0_XsOwmnrv-FwQAAANI"]
[Mon May 25 10:32:15.401510 2026] [:error] [pid 62428:tid 62495] [client 4.225.163.177:27277] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/adminfuns.php"] [unique_id "ahO0r5NosGBa7mui3VTJ5gAAAIs"]
[Mon May 25 11:54:39.086056 2026] [:error] [pid 62515:tid 62528] [client 36.83.113.9:51579] [client 36.83.113.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotbooksbookeeping2.com"] [uri "/.env/.env.bak"] [unique_id "ahPH_xig0_XsOwmnrv-doQAAAMs"]
[Mon May 25 11:54:39.337015 2026] [:error] [pid 62426:tid 62451] [client 36.83.113.9:60969] [client 36.83.113.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahPH_0j3D3Mo8ANpTRCdLwAAABU"]
[Mon May 25 11:54:39.578750 2026] [:error] [pid 62515:tid 62518] [client 36.83.113.9:55184] [client 36.83.113.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/index.php"] [unique_id "ahPH_xig0_XsOwmnrv-dpQAAAME"]
[Mon May 25 11:54:39.816747 2026] [:error] [pid 62515:tid 62522] [client 36.83.113.9:61394] [client 36.83.113.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/.aws/credentials"] [unique_id "ahPH_xig0_XsOwmnrv-dpwAAAMU"]
[Mon May 25 11:56:49.241009 2026] [:error] [pid 62427:tid 62465] [client 158.180.33.171:40984] [client 158.180.33.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.180.33.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahPIgfMUa83fc4GDyBwnmgAAAUg"]
[Mon May 25 11:56:50.076305 2026] [proxy_fcgi:error] [pid 62427:tid 62465] [client 158.180.33.171:40984] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 11:56:50.436323 2026] [:error] [pid 62427:tid 62471] [client 158.180.33.171:40984] [client 158.180.33.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.180.33.171, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahPIgvMUa83fc4GDyBwnmwAAAU4"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 11:56:51.411506 2026] [proxy_fcgi:error] [pid 62427:tid 62471] [client 158.180.33.171:40984] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 12:44:46.180495 2026] [:error] [pid 62515:tid 62520] [client 4.225.163.177:16666] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "ahPTvhig0_XsOwmnrv-rewAAAMM"]
[Mon May 25 12:44:47.476622 2026] [:error] [pid 62515:tid 62524] [client 4.225.163.177:16439] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "ahPTvxig0_XsOwmnrv-rfAAAAMc"]
[Mon May 25 12:44:48.593886 2026] [:error] [pid 62722:tid 62738] [client 4.225.163.177:15901] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "ahPTwKM6ssnLWYf6CVDGjgAAAE4"]
[Mon May 25 12:44:49.654372 2026] [:error] [pid 62515:tid 62534] [client 4.225.163.177:16400] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/fone1.php"] [unique_id "ahPTwRig0_XsOwmnrv-rfQAAANE"]
[Mon May 25 13:26:29.251284 2026] [:error] [pid 62515:tid 62541] [client 43.130.131.18:48642] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahPdhRig0_XsOwmnrv-5xAAAANg"]
[Mon May 25 13:57:01.847456 2026] [:error] [pid 62426:tid 62441] [client 41.111.218.240:55904] [client 41.111.218.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.111.218.240, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahPkrUj3D3Mo8ANpTRCw0wAAAAs"]
[Mon May 25 13:57:03.366294 2026] [proxy_fcgi:error] [pid 62426:tid 62441] [client 41.111.218.240:55904] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 13:57:03.776469 2026] [:error] [pid 62426:tid 62445] [client 41.111.218.240:55904] [client 41.111.218.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.111.218.240, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahPkr0j3D3Mo8ANpTRCw2wAAAA8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 13:57:04.081657 2026] [proxy_fcgi:error] [pid 62426:tid 62445] [client 41.111.218.240:55904] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 14:18:04.031611 2026] [:error] [pid 62722:tid 62730] [client 143.244.182.226:52184] [client 143.244.182.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.244.182.226, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahPpnKM6ssnLWYf6CVD6kAAAAEY"]
[Mon May 25 14:18:04.177460 2026] [proxy_fcgi:error] [pid 62722:tid 62730] [client 143.244.182.226:52184] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 14:18:04.347052 2026] [:error] [pid 62722:tid 62733] [client 143.244.182.226:52184] [client 143.244.182.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.244.182.226, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahPpnKM6ssnLWYf6CVD6kQAAAEk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 14:18:04.664320 2026] [proxy_fcgi:error] [pid 62722:tid 62733] [client 143.244.182.226:52184] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 14:43:26.108486 2026] [:error] [pid 62722:tid 62740] [client 4.225.163.177:3718] [client 4.225.163.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "ahPvjqM6ssnLWYf6CVADRwAAAFA"]
[Mon May 25 14:43:29.860292 2026] [autoindex:error] [pid 3698:tid 3711] [client 4.225.163.177:12936] AH01276: Cannot serve directory /home/hbtwocom/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon May 25 14:43:32.087809 2026] [:error] [pid 3698:tid 3721] [client 4.225.163.177:12936] [client 4.225.163.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-includes/Text/index.php"] [unique_id "ahPvlAtZBEwA4fyFLKOW5QAAARU"]
[Mon May 25 14:43:33.449814 2026] [:error] [pid 62722:tid 62747] [client 4.225.163.177:26983] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "ahPvlaM6ssnLWYf6CVADSwAAAFc"]
[Mon May 25 14:43:34.557482 2026] [:error] [pid 3698:tid 3704] [client 4.225.163.177:12991] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "ahPvlgtZBEwA4fyFLKOW5gAAAQQ"]
[Mon May 25 14:43:35.607560 2026] [:error] [pid 62427:tid 62470] [client 4.225.163.177:3089] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-signin.php"] [unique_id "ahPvl_MUa83fc4GDyBxNJgAAAU0"]
[Mon May 25 14:46:09.104719 2026] [:error] [pid 3698:tid 3711] [client 106.52.216.13:36916] [client 106.52.216.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahPwMQtZBEwA4fyFLKOYHQAAAQs"]
[Mon May 25 15:55:52.108963 2026] [:error] [pid 62426:tid 62439] [client 39.97.110.217:35600] [client 39.97.110.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 39.97.110.217, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahQAiEj3D3Mo8ANpTRDE-wAAAAk"]
[Mon May 25 15:55:52.268502 2026] [proxy_fcgi:error] [pid 62426:tid 62439] [client 39.97.110.217:35600] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 15:55:52.809693 2026] [:error] [pid 62426:tid 62447] [client 39.97.110.217:35600] [client 39.97.110.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 39.97.110.217, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahQAiEj3D3Mo8ANpTRDE_QAAABE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 15:55:53.135900 2026] [proxy_fcgi:error] [pid 62426:tid 62447] [client 39.97.110.217:35600] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 17:30:41.240270 2026] [:error] [pid 3698:tid 3707] [client 1.13.158.23:46062] [client 1.13.158.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahQWwQtZBEwA4fyFLKPSVgAAAQc"]
[Mon May 25 18:04:09.452300 2026] [:error] [pid 62722:tid 62733] [client 43.128.73.132:41414] [client 43.128.73.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahQemaM6ssnLWYf6CVA2AgAAAEk"]
[Mon May 25 19:04:54.382559 2026] [:error] [pid 3698:tid 3719] [client 120.61.140.118:60227] [client 120.61.140.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.61.140.118, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahQs1gtZBEwA4fyFLKPjFwAAARM"]
[Mon May 25 19:29:13.243732 2026] [:error] [pid 62428:tid 62500] [client 213.202.253.4:50383] [client 213.202.253.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/gdftps.php"] [unique_id "ahQyiZNosGBa7mui3VRABgAAAJA"], referer: www.google.com
[Mon May 25 19:36:24.996550 2026] [:error] [pid 53791:tid 53809] [client 45.140.24.226:57970] [client 45.140.24.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.140.24.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahQ0OCCRhhNTD40Nf1UQJAAAAZA"]
[Mon May 25 19:36:36.624350 2026] [:error] [pid 62515:tid 62533] [client 45.140.24.226:9291] [client 45.140.24.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.140.24.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahQ0RBig0_XsOwmnrv8o7wAAANA"]
[Mon May 25 19:36:49.227535 2026] [:error] [pid 62722:tid 62724] [client 45.140.24.226:5090] [client 45.140.24.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.140.24.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahQ0UaM6ssnLWYf6CVBC9wAAAEA"]
[Mon May 25 19:37:10.454261 2026] [:error] [pid 62426:tid 62430] [client 45.140.24.226:49004] [client 45.140.24.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.140.24.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahQ0Zkj3D3Mo8ANpTRDy9wAAAAA"]
[Mon May 25 19:37:42.279665 2026] [:error] [pid 62722:tid 62727] [client 45.140.24.226:58987] [client 45.140.24.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.140.24.226, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahQ0hqM6ssnLWYf6CVBDDgAAAEM"]
[Mon May 25 22:23:19.927203 2026] [:error] [pid 62426:tid 62445] [client 173.236.215.92:48176] [client 173.236.215.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.215.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRbV0j3D3Mo8ANpTRAeKQAAAA8"]
[Mon May 25 22:23:20.076747 2026] [proxy_fcgi:error] [pid 62426:tid 62445] [client 173.236.215.92:48176] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 22:23:20.642833 2026] [:error] [pid 62426:tid 62450] [client 173.236.215.92:48176] [client 173.236.215.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.236.215.92, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRbWEj3D3Mo8ANpTRAeKgAAABQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 22:23:20.945664 2026] [proxy_fcgi:error] [pid 62426:tid 62450] [client 173.236.215.92:48176] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 22:24:07.065699 2026] [:error] [pid 62428:tid 62503] [client 43.135.142.37:40336] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahRbh5NosGBa7mui3VRxNwAAAJM"]
[Mon May 25 23:24:13.272811 2026] [:error] [pid 3698:tid 3701] [client 195.201.169.143:51000] [client 195.201.169.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.201.169.143, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRpnQtZBEwA4fyFLKMMLQAAAQE"]
[Mon May 25 23:24:14.794270 2026] [proxy_fcgi:error] [pid 3698:tid 3701] [client 195.201.169.143:51000] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 23:24:15.053974 2026] [:error] [pid 3698:tid 3712] [client 195.201.169.143:51000] [client 195.201.169.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.201.169.143, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRpnwtZBEwA4fyFLKMMMAAAAQw"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 23:24:15.354612 2026] [proxy_fcgi:error] [pid 3698:tid 3712] [client 195.201.169.143:51000] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 23:26:30.022576 2026] [:error] [pid 62426:tid 62442] [client 49.233.45.47:55192] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahRqJkj3D3Mo8ANpTRA6uwAAAAw"]
[Mon May 25 23:31:55.917667 2026] [:error] [pid 62428:tid 62494] [client 135.181.183.122:46222] [client 135.181.183.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.183.122, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRra5NosGBa7mui3VSAhwAAAIo"]
[Mon May 25 23:31:56.085531 2026] [proxy_fcgi:error] [pid 62428:tid 62494] [client 135.181.183.122:46222] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 23:31:56.387987 2026] [:error] [pid 62428:tid 62501] [client 135.181.183.122:46222] [client 135.181.183.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.181.183.122, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRrbJNosGBa7mui3VSAiAAAAJE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 23:31:56.699561 2026] [proxy_fcgi:error] [pid 62428:tid 62501] [client 135.181.183.122:46222] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 23:38:55.359855 2026] [:error] [pid 62722:tid 62747] [client 141.95.202.18:48222] [client 141.95.202.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.202.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRtD6M6ssnLWYf6CVBjRgAAAFc"]
[Mon May 25 23:38:55.525872 2026] [proxy_fcgi:error] [pid 62722:tid 62747] [client 141.95.202.18:48222] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 23:38:56.009819 2026] [:error] [pid 62722:tid 62746] [client 141.95.202.18:48222] [client 141.95.202.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.202.18, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRtEKM6ssnLWYf6CVBjRwAAAFY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 23:38:56.306923 2026] [proxy_fcgi:error] [pid 62722:tid 62746] [client 141.95.202.18:48222] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 23:49:15.953505 2026] [:error] [pid 53791:tid 53816] [client 37.187.156.42:46330] [client 37.187.156.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.187.156.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRveyCRhhNTD40Nf1U_lgAAAZc"]
[Mon May 25 23:49:16.129599 2026] [proxy_fcgi:error] [pid 53791:tid 53816] [client 37.187.156.42:46330] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 23:49:16.413060 2026] [:error] [pid 53791:tid 53815] [client 37.187.156.42:46330] [client 37.187.156.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.187.156.42, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRvfCCRhhNTD40Nf1U_lwAAAZY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 23:49:16.714896 2026] [proxy_fcgi:error] [pid 53791:tid 53815] [client 37.187.156.42:46330] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 23:55:30.675985 2026] [:error] [pid 62428:tid 62497] [client 65.109.154.153:48982] [client 65.109.154.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.109.154.153, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRw8pNosGBa7mui3VSGVAAAAI0"]
[Mon May 25 23:55:30.814239 2026] [proxy_fcgi:error] [pid 62428:tid 62497] [client 65.109.154.153:48982] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 23:55:31.119111 2026] [:error] [pid 62428:tid 62505] [client 65.109.154.153:48982] [client 65.109.154.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.109.154.153, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRw85NosGBa7mui3VSGVQAAAJU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 23:55:31.419503 2026] [proxy_fcgi:error] [pid 62428:tid 62505] [client 65.109.154.153:48982] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 23:56:52.199528 2026] [:error] [pid 53791:tid 53799] [client 160.250.130.12:36626] [client 160.250.130.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.130.12, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRxRCCRhhNTD40Nf1VBhQAAAYY"]
[Mon May 25 23:56:52.374289 2026] [proxy_fcgi:error] [pid 53791:tid 53799] [client 160.250.130.12:36626] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Mon May 25 23:56:52.503183 2026] [:error] [pid 53791:tid 53808] [client 160.250.130.12:36626] [client 160.250.130.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.250.130.12, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRxRCCRhhNTD40Nf1VBhgAAAY8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Mon May 25 23:56:52.814558 2026] [proxy_fcgi:error] [pid 53791:tid 53808] [client 160.250.130.12:36626] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:01:44.234989 2026] [:error] [pid 62426:tid 62444] [client 103.200.23.213:60928] [client 103.200.23.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.23.213, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRyaEj3D3Mo8ANpTRBHhAAAAA4"]
[Tue May 26 00:01:44.391301 2026] [proxy_fcgi:error] [pid 62426:tid 62444] [client 103.200.23.213:60928] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 00:01:44.540010 2026] [:error] [pid 62426:tid 62443] [client 103.200.23.213:60928] [client 103.200.23.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.23.213, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRyaEj3D3Mo8ANpTRBHhgAAAA0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:01:44.851117 2026] [proxy_fcgi:error] [pid 62426:tid 62443] [client 103.200.23.213:60928] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:02:45.028365 2026] [:error] [pid 62515:tid 62536] [client 39.57.54.191:55856] [client 39.57.54.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.57.54.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahRypRig0_XsOwmnrv95BQAAANM"]
[Tue May 26 00:02:57.080362 2026] [:error] [pid 62426:tid 62442] [client 39.57.54.191:56201] [client 39.57.54.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.57.54.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahRysUj3D3Mo8ANpTRBH6wAAAAw"]
[Tue May 26 00:03:07.064745 2026] [:error] [pid 62515:tid 62531] [client 39.57.54.191:56565] [client 39.57.54.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.57.54.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahRyuxig0_XsOwmnrv95FAAAAM4"]
[Tue May 26 00:03:18.399205 2026] [:error] [pid 62722:tid 62742] [client 39.57.54.191:57060] [client 39.57.54.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.57.54.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahRyxqM6ssnLWYf6CVBmyQAAAFI"]
[Tue May 26 00:03:29.673875 2026] [:error] [pid 62428:tid 62500] [client 39.57.54.191:57458] [client 39.57.54.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.57.54.191, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahRy0ZNosGBa7mui3VSIAwAAAJA"]
[Tue May 26 00:05:37.822269 2026] [:error] [pid 62515:tid 62517] [client 46.4.120.162:34004] [client 46.4.120.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.4.120.162, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRzURig0_XsOwmnrv953QAAAMA"]
[Tue May 26 00:05:37.990047 2026] [proxy_fcgi:error] [pid 62515:tid 62517] [client 46.4.120.162:34004] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 00:05:41.039685 2026] [:error] [pid 62515:tid 62522] [client 46.4.120.162:34004] [client 46.4.120.162] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.4.120.162, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRzVRig0_XsOwmnrv955AAAAMU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:05:41.349005 2026] [proxy_fcgi:error] [pid 62515:tid 62522] [client 46.4.120.162:34004] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:06:15.620188 2026] [:error] [pid 62428:tid 62485] [client 85.214.99.31:39248] [client 85.214.99.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.99.31, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRzd5NosGBa7mui3VSIcwAAAIE"]
[Tue May 26 00:06:15.763326 2026] [proxy_fcgi:error] [pid 62428:tid 62485] [client 85.214.99.31:39248] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 00:06:16.027306 2026] [:error] [pid 62428:tid 62503] [client 85.214.99.31:39248] [client 85.214.99.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.99.31, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahRzeJNosGBa7mui3VSIdAAAAJM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:06:16.329951 2026] [proxy_fcgi:error] [pid 62428:tid 62503] [client 85.214.99.31:39248] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:13:36.321210 2026] [:error] [pid 62428:tid 62485] [client 86.120.178.139:50285] [client 86.120.178.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.178.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahR1MJNosGBa7mui3VSKSgAAAIE"]
[Tue May 26 00:13:47.835823 2026] [:error] [pid 62426:tid 62446] [client 86.120.178.139:50946] [client 86.120.178.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.178.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahR1O0j3D3Mo8ANpTRBMmQAAABA"]
[Tue May 26 00:13:59.123298 2026] [:error] [pid 53791:tid 53802] [client 86.120.178.139:51333] [client 86.120.178.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.178.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahR1RyCRhhNTD40Nf1VE7gAAAYk"]
[Tue May 26 00:14:18.718867 2026] [:error] [pid 62515:tid 62540] [client 86.120.178.139:52010] [client 86.120.178.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.178.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahR1Whig0_XsOwmnrv98lgAAANc"]
[Tue May 26 00:14:31.655600 2026] [:error] [pid 62426:tid 62436] [client 86.120.178.139:52460] [client 86.120.178.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.120.178.139, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahR1Z0j3D3Mo8ANpTRBMugAAAAY"]
[Tue May 26 00:28:28.982290 2026] [:error] [pid 62428:tid 62494] [client 209.145.62.147:39748] [client 209.145.62.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.145.62.147, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahR4rJNosGBa7mui3VSM9AAAAIo"]
[Tue May 26 00:28:29.144727 2026] [proxy_fcgi:error] [pid 62428:tid 62494] [client 209.145.62.147:39748] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 00:28:29.453204 2026] [:error] [pid 62428:tid 62502] [client 209.145.62.147:39748] [client 209.145.62.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.145.62.147, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahR4rZNosGBa7mui3VSM9gAAAJI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:28:29.758789 2026] [proxy_fcgi:error] [pid 62428:tid 62502] [client 209.145.62.147:39748] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:29:25.794783 2026] [:error] [pid 62426:tid 62435] [client 141.94.59.209:23998] [client 141.94.59.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.94.59.209, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahR45Uj3D3Mo8ANpTRBSKAAAAAU"]
[Tue May 26 00:29:25.936394 2026] [proxy_fcgi:error] [pid 62426:tid 62435] [client 141.94.59.209:23998] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 00:29:28.085463 2026] [:error] [pid 62426:tid 62431] [client 141.94.59.209:23998] [client 141.94.59.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.94.59.209, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahR46Ej3D3Mo8ANpTRBSLwAAAAE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:29:28.383393 2026] [proxy_fcgi:error] [pid 62426:tid 62431] [client 141.94.59.209:23998] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:41:24.088736 2026] [:error] [pid 62428:tid 62500] [client 75.119.138.186:43292] [client 75.119.138.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 75.119.138.186, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahR7tJNosGBa7mui3VSP4AAAAJA"]
[Tue May 26 00:41:24.282824 2026] [proxy_fcgi:error] [pid 62428:tid 62500] [client 75.119.138.186:43292] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 00:41:24.577583 2026] [:error] [pid 62428:tid 62507] [client 75.119.138.186:43292] [client 75.119.138.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 75.119.138.186, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahR7tJNosGBa7mui3VSP4QAAAJc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:41:24.893015 2026] [proxy_fcgi:error] [pid 62428:tid 62507] [client 75.119.138.186:43292] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:55:54.091059 2026] [:error] [pid 62426:tid 62442] [client 198.38.81.14:42798] [client 198.38.81.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.81.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahR_Gkj3D3Mo8ANpTRBatwAAAAw"]
[Tue May 26 00:55:54.206844 2026] [proxy_fcgi:error] [pid 62426:tid 62442] [client 198.38.81.14:42798] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 00:55:54.640778 2026] [:error] [pid 62426:tid 62452] [client 198.38.81.14:42798] [client 198.38.81.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.38.81.14, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahR_Gkj3D3Mo8ANpTRBauAAAABY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 00:55:54.956407 2026] [proxy_fcgi:error] [pid 62426:tid 62452] [client 198.38.81.14:42798] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:06:14.965662 2026] [:error] [pid 62426:tid 62453] [client 188.34.176.29:40502] [client 188.34.176.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.34.176.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSBhkj3D3Mo8ANpTRBfDgAAABc"]
[Tue May 26 01:06:15.116148 2026] [proxy_fcgi:error] [pid 62426:tid 62453] [client 188.34.176.29:40502] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 01:06:15.386389 2026] [:error] [pid 62426:tid 62445] [client 188.34.176.29:40502] [client 188.34.176.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.34.176.29, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSBh0j3D3Mo8ANpTRBfDwAAAA8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:06:15.692644 2026] [proxy_fcgi:error] [pid 62426:tid 62445] [client 188.34.176.29:40502] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:08:21.631526 2026] [:error] [pid 62427:tid 62463] [client 5.40.64.136:36371] [client 5.40.64.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.40.64.136, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSCBfMUa83fc4GDyBydJQAAAUY"]
[Tue May 26 01:08:21.782365 2026] [proxy_fcgi:error] [pid 62427:tid 62463] [client 5.40.64.136:36371] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 01:08:22.048420 2026] [:error] [pid 62427:tid 62471] [client 5.40.64.136:36371] [client 5.40.64.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.40.64.136, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSCBvMUa83fc4GDyBydJgAAAU4"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:08:22.359854 2026] [proxy_fcgi:error] [pid 62427:tid 62471] [client 5.40.64.136:36371] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:08:43.786827 2026] [:error] [pid 62722:tid 62724] [client 38.242.237.61:46512] [client 38.242.237.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.242.237.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSCG6M6ssnLWYf6CVBuqwAAAEA"]
[Tue May 26 01:08:43.927917 2026] [proxy_fcgi:error] [pid 62722:tid 62724] [client 38.242.237.61:46512] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 01:08:44.259325 2026] [:error] [pid 62722:tid 62737] [client 38.242.237.61:46512] [client 38.242.237.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.242.237.61, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSCHKM6ssnLWYf6CVBurQAAAE0"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:08:44.559802 2026] [proxy_fcgi:error] [pid 62722:tid 62737] [client 38.242.237.61:46512] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:15:57.323459 2026] [:error] [pid 3698:tid 3709] [client 8.137.116.248:57354] [client 8.137.116.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.137.116.248, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSDzQtZBEwA4fyFLKMceAAAAQk"]
[Tue May 26 01:15:57.475612 2026] [proxy_fcgi:error] [pid 3698:tid 3709] [client 8.137.116.248:57354] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 01:15:57.888269 2026] [:error] [pid 3698:tid 3721] [client 8.137.116.248:57354] [client 8.137.116.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.137.116.248, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSDzQtZBEwA4fyFLKMceQAAARU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:15:58.189484 2026] [proxy_fcgi:error] [pid 3698:tid 3721] [client 8.137.116.248:57354] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:22:45.824317 2026] [:error] [pid 62426:tid 62442] [client 65.254.225.231:50764] [client 65.254.225.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.231, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSFZUj3D3Mo8ANpTRBiBwAAAAw"]
[Tue May 26 01:22:45.982703 2026] [proxy_fcgi:error] [pid 62426:tid 62442] [client 65.254.225.231:50764] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 01:22:46.304393 2026] [:error] [pid 62426:tid 62445] [client 65.254.225.231:50764] [client 65.254.225.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.254.225.231, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSFZkj3D3Mo8ANpTRBiCAAAAA8"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:22:46.609272 2026] [proxy_fcgi:error] [pid 62426:tid 62445] [client 65.254.225.231:50764] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:40:04.524852 2026] [:error] [pid 62427:tid 62463] [client 43.173.1.57:34568] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahSJdPMUa83fc4GDyBye_AAAAUY"]
[Tue May 26 01:41:04.308061 2026] [:error] [pid 62428:tid 62493] [client 51.91.98.45:56018] [client 51.91.98.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.91.98.45, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSJsJNosGBa7mui3VSZWwAAAIk"]
[Tue May 26 01:41:04.409782 2026] [proxy_fcgi:error] [pid 62428:tid 62493] [client 51.91.98.45:56018] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 01:41:04.698925 2026] [:error] [pid 62428:tid 62506] [client 51.91.98.45:56018] [client 51.91.98.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.91.98.45, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSJsJNosGBa7mui3VSZXAAAAJY"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:41:04.990062 2026] [proxy_fcgi:error] [pid 62428:tid 62506] [client 51.91.98.45:56018] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:50:48.054169 2026] [:error] [pid 53791:tid 53811] [client 185.190.18.72:60844] [client 185.190.18.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.190.18.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSL-CCRhhNTD40Nf1VTWQAAAZI"]
[Tue May 26 01:50:48.208523 2026] [proxy_fcgi:error] [pid 53791:tid 53811] [client 185.190.18.72:60844] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 01:50:48.406349 2026] [:error] [pid 53791:tid 53794] [client 185.190.18.72:60844] [client 185.190.18.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.190.18.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSL-CCRhhNTD40Nf1VTWwAAAYE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 01:50:48.706347 2026] [proxy_fcgi:error] [pid 53791:tid 53794] [client 185.190.18.72:60844] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 02:26:18.481422 2026] [:error] [pid 62428:tid 62506] [client 40.113.217.8:2128] [client 40.113.217.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ahSUSpNosGBa7mui3VShUwAAAJY"]
[Tue May 26 02:26:19.840929 2026] [:error] [pid 62428:tid 62498] [client 40.113.217.8:25637] [client 40.113.217.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ahSUS5NosGBa7mui3VShWAAAAI4"]
[Tue May 26 02:26:21.233376 2026] [:error] [pid 62428:tid 62490] [client 40.113.217.8:7752] [client 40.113.217.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ahSUTZNosGBa7mui3VShXwAAAIY"]
[Tue May 26 02:26:22.614217 2026] [:error] [pid 62426:tid 62445] [client 40.113.217.8:7768] [client 40.113.217.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/404.php"] [unique_id "ahSUTkj3D3Mo8ANpTRBxBgAAAA8"]
[Tue May 26 02:31:56.427905 2026] [:error] [pid 53791:tid 53804] [client 52.66.96.197:52928] [client 52.66.96.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.66.96.197, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSVnCCRhhNTD40Nf1VZZwAAAYs"]
[Tue May 26 02:31:57.239818 2026] [proxy_fcgi:error] [pid 53791:tid 53804] [client 52.66.96.197:52928] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 02:31:57.410713 2026] [:error] [pid 53791:tid 53793] [client 52.66.96.197:52928] [client 52.66.96.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.66.96.197, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSVnSCRhhNTD40Nf1VZaQAAAYA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 02:31:58.378793 2026] [proxy_fcgi:error] [pid 53791:tid 53793] [client 52.66.96.197:52928] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 02:53:54.739648 2026] [:error] [pid 62515:tid 62540] [client 185.190.18.72:59772] [client 185.190.18.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.190.18.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSawhig0_XsOwmnrv-d0QAAANc"]
[Tue May 26 02:53:55.542313 2026] [proxy_fcgi:error] [pid 62515:tid 62540] [client 185.190.18.72:59772] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 03:05:37.026982 2026] [:error] [pid 62426:tid 62441] [client 104.28.164.237:36473] [client 104.28.164.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.164.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahSdgUj3D3Mo8ANpTRB9IgAAAAs"]
[Tue May 26 03:05:46.084288 2026] [:error] [pid 62428:tid 62492] [client 104.28.164.237:34891] [client 104.28.164.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.164.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahSdipNosGBa7mui3VSo5gAAAIg"]
[Tue May 26 03:05:51.441180 2026] [:error] [pid 53791:tid 53810] [client 209.145.62.147:38244] [client 209.145.62.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.145.62.147, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSdjyCRhhNTD40Nf1Vf1AAAAZE"]
[Tue May 26 03:05:52.221422 2026] [proxy_fcgi:error] [pid 53791:tid 53810] [client 209.145.62.147:38244] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 03:05:52.427638 2026] [:error] [pid 53791:tid 53802] [client 209.145.62.147:38244] [client 209.145.62.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.145.62.147, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSdkCCRhhNTD40Nf1Vf2QAAAYk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 03:05:53.397495 2026] [proxy_fcgi:error] [pid 53791:tid 53802] [client 209.145.62.147:38244] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 03:05:56.637507 2026] [:error] [pid 62722:tid 62733] [client 104.28.164.237:36433] [client 104.28.164.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.164.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahSdlKM6ssnLWYf6CVB57AAAAEk"]
[Tue May 26 03:06:07.124892 2026] [:error] [pid 3698:tid 3704] [client 104.28.164.237:34833] [client 104.28.164.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.164.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahSdnwtZBEwA4fyFLKMpmAAAAQQ"]
[Tue May 26 03:06:17.654360 2026] [:error] [pid 62426:tid 62447] [client 104.28.164.237:35355] [client 104.28.164.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.164.237, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahSdqUj3D3Mo8ANpTRB9YAAAABE"]
[Tue May 26 03:10:57.674980 2026] [:error] [pid 15544:tid 15566] [client 212.227.232.56:50350] [client 212.227.232.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.227.232.56, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSewSyGmUoNeBb5CmmHQgAAANQ"]
[Tue May 26 03:10:58.483491 2026] [proxy_fcgi:error] [pid 15544:tid 15566] [client 212.227.232.56:50350] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 03:10:58.792627 2026] [:error] [pid 15544:tid 15547] [client 212.227.232.56:50350] [client 212.227.232.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.227.232.56, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSewiyGmUoNeBb5CmmHRgAAAME"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 03:10:59.743140 2026] [proxy_fcgi:error] [pid 15544:tid 15547] [client 212.227.232.56:50350] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 03:47:10.611139 2026] [:error] [pid 20026:tid 20115] [client 179.107.92.59:36228] [client 179.107.92.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.107.92.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahSnPjXIXIr-5BZ8nR7FkgAAAJc"]
[Tue May 26 03:47:22.434088 2026] [:error] [pid 20125:tid 20131] [client 179.107.92.59:36308] [client 179.107.92.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.107.92.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahSnStk9jeWERFDLJc5ZwwAAAMQ"]
[Tue May 26 03:47:29.461899 2026] [:error] [pid 20125:tid 20142] [client 179.107.92.59:36438] [client 179.107.92.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.107.92.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahSnUdk9jeWERFDLJc5Z1AAAAM8"]
[Tue May 26 03:47:42.764910 2026] [:error] [pid 20025:tid 20073] [client 179.107.92.59:36571] [client 179.107.92.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.107.92.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahSnXn7k8Vts-JPOkgWJzQAAAEg"]
[Tue May 26 03:48:04.141259 2026] [:error] [pid 55988:tid 56002] [client 179.107.92.59:34636] [client 179.107.92.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.107.92.59, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahSndP3kVIz2sql52sckvgAAAQs"]
[Tue May 26 04:17:51.441608 2026] [:error] [pid 20125:tid 20138] [client 18.219.113.49:33288] [client 18.219.113.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.219.113.49, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSub9k9jeWERFDLJc5hMQAAAMs"]
[Tue May 26 04:17:52.250148 2026] [proxy_fcgi:error] [pid 20125:tid 20138] [client 18.219.113.49:33288] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 04:18:11.919414 2026] [:error] [pid 20025:tid 20087] [client 18.219.113.49:39664] [client 18.219.113.49] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahSug37k8Vts-JPOkgWPTAAAAFY"]
[Tue May 26 04:20:52.066463 2026] [:error] [pid 20125:tid 20142] [client 116.202.200.145:46276] [client 116.202.200.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.200.145, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSvJNk9jeWERFDLJc5iNAAAAM8"]
[Tue May 26 04:20:52.922674 2026] [proxy_fcgi:error] [pid 20125:tid 20142] [client 116.202.200.145:46276] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 04:20:53.175795 2026] [:error] [pid 20125:tid 20151] [client 116.202.200.145:46276] [client 116.202.200.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.202.200.145, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSvJdk9jeWERFDLJc5iOAAAANg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 04:20:54.149057 2026] [proxy_fcgi:error] [pid 20125:tid 20151] [client 116.202.200.145:46276] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 04:35:16.043600 2026] [:error] [pid 20025:tid 20081] [client 217.154.239.191:48860] [client 217.154.239.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.239.191, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSyhH7k8Vts-JPOkgWSQQAAAFA"]
[Tue May 26 04:35:16.872914 2026] [proxy_fcgi:error] [pid 20025:tid 20081] [client 217.154.239.191:48860] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 04:35:18.648952 2026] [:error] [pid 20025:tid 20082] [client 217.154.239.191:48860] [client 217.154.239.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.239.191, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSyhn7k8Vts-JPOkgWSRwAAAFE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 04:35:19.638998 2026] [proxy_fcgi:error] [pid 20025:tid 20082] [client 217.154.239.191:48860] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 04:35:30.663490 2026] [:error] [pid 55988:tid 55998] [client 92.53.96.192:36064] [client 92.53.96.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.53.96.192, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahSykv3kVIz2sql52sc4QwAAAQc"]
[Tue May 26 04:35:31.477638 2026] [proxy_fcgi:error] [pid 55988:tid 55998] [client 92.53.96.192:36064] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 04:35:51.537101 2026] [:error] [pid 55988:tid 55996] [client 92.53.96.192:54870] [client 92.53.96.192] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahSyp_3kVIz2sql52sc4dQAAAQU"]
[Tue May 26 04:54:39.571845 2026] [:error] [pid 20125:tid 20136] [client 54.37.252.231:33118] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "ahS3D9k9jeWERFDLJc5tGAAAAMk"]
[Tue May 26 04:54:42.101546 2026] [:error] [pid 20125:tid 20148] [client 54.37.252.231:54224] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "ahS3Etk9jeWERFDLJc5tHAAAANU"]
[Tue May 26 04:54:44.595181 2026] [:error] [pid 55988:tid 56011] [client 54.37.252.231:54240] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "ahS3FP3kVIz2sql52sdA5gAAARQ"]
[Tue May 26 04:54:47.211308 2026] [:error] [pid 20025:tid 20078] [client 54.37.252.231:47426] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ahS3F37k8Vts-JPOkgWWwQAAAE0"]
[Tue May 26 04:54:49.682338 2026] [:error] [pid 55988:tid 56000] [client 54.37.252.231:47438] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ahS3Gf3kVIz2sql52sdA8wAAAQk"]
[Tue May 26 04:54:52.170777 2026] [:error] [pid 20026:tid 20109] [client 54.37.252.231:47452] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ahS3HDXIXIr-5BZ8nR7VQQAAAJE"]
[Tue May 26 04:54:54.661475 2026] [:error] [pid 20025:tid 20074] [client 54.37.252.231:47454] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ahS3Hn7k8Vts-JPOkgWWyQAAAEk"]
[Tue May 26 04:54:57.257580 2026] [:error] [pid 20025:tid 20072] [client 54.37.252.231:49226] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahS3IX7k8Vts-JPOkgWWywAAAEc"]
[Tue May 26 04:54:59.751420 2026] [:error] [pid 20025:tid 20087] [client 54.37.252.231:49240] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ahS3I37k8Vts-JPOkgWW1QAAAFY"]
[Tue May 26 04:55:02.383789 2026] [:error] [pid 20026:tid 20103] [client 54.37.252.231:49248] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ahS3JjXIXIr-5BZ8nR7VSwAAAIs"]
[Tue May 26 04:55:04.996537 2026] [:error] [pid 55988:tid 55998] [client 54.37.252.231:40638] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahS3KP3kVIz2sql52sdBJwAAAQc"]
[Tue May 26 04:55:07.471992 2026] [:error] [pid 55988:tid 55992] [client 54.37.252.231:40652] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ahS3K_3kVIz2sql52sdBNgAAAQE"]
[Tue May 26 04:55:10.090025 2026] [:error] [pid 20026:tid 20116] [client 54.37.252.231:40664] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ahS3LjXIXIr-5BZ8nR7VVwAAAJg"]
[Tue May 26 04:55:12.723520 2026] [:error] [pid 55988:tid 56005] [client 54.37.252.231:40668] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ahS3MP3kVIz2sql52sdBVAAAAQ4"]
[Tue May 26 04:55:15.223742 2026] [:error] [pid 20024:tid 20040] [client 54.37.252.231:50018] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ahS3M1dk7QtxEB93Npf-wQAAAAI"]
[Tue May 26 04:55:17.753185 2026] [:error] [pid 20026:tid 20097] [client 54.37.252.231:50026] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ahS3NTXIXIr-5BZ8nR7VWwAAAIU"]
[Tue May 26 04:55:20.573875 2026] [:error] [pid 55988:tid 56001] [client 54.37.252.231:50030] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "ahS3OP3kVIz2sql52sdBagAAAQo"]
[Tue May 26 04:55:22.969846 2026] [:error] [pid 55988:tid 55996] [client 54.37.252.231:50034] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "ahS3Ov3kVIz2sql52sdBcgAAAQU"]
[Tue May 26 04:55:25.631928 2026] [:error] [pid 20024:tid 20056] [client 54.37.252.231:49292] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "ahS3PVdk7QtxEB93Npf-ywAAABI"]
[Tue May 26 04:55:27.993811 2026] [:error] [pid 20125:tid 20131] [client 54.37.252.231:49306] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/mega%20slot.aspx"] [unique_id "ahS3P9k9jeWERFDLJc5tRwAAAMQ"]
[Tue May 26 04:55:30.511068 2026] [:error] [pid 20125:tid 20145] [client 54.37.252.231:49318] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/metal%20slot.aspx"] [unique_id "ahS3Qtk9jeWERFDLJc5tSwAAANI"]
[Tue May 26 04:55:33.147766 2026] [:error] [pid 55988:tid 56008] [client 54.37.252.231:49324] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20168.aspx"] [unique_id "ahS3Rf3kVIz2sql52sdBjAAAARE"]
[Tue May 26 04:55:35.783215 2026] [:error] [pid 55988:tid 56009] [client 54.37.252.231:33116] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20auto.aspx"] [unique_id "ahS3R_3kVIz2sql52sdBjgAAARI"]
[Tue May 26 04:56:06.807365 2026] [:error] [pid 20026:tid 20110] [client 54.37.252.231:33132] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ahS3ZjXIXIr-5BZ8nR7VmQAAAJI"]
[Tue May 26 04:56:09.289934 2026] [:error] [pid 20025:tid 20067] [client 54.37.252.231:45054] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahS3aX7k8Vts-JPOkgWXEQAAAEI"]
[Tue May 26 04:56:11.812178 2026] [:error] [pid 20125:tid 20141] [client 54.37.252.231:45058] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahS3a9k9jeWERFDLJc5tqwAAAM4"]
[Tue May 26 04:56:14.313590 2026] [:error] [pid 55988:tid 56008] [client 54.37.252.231:45068] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ahS3bv3kVIz2sql52sdCGwAAARE"]
[Tue May 26 04:56:16.951610 2026] [:error] [pid 20125:tid 20149] [client 54.37.252.231:39776] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ahS3cNk9jeWERFDLJc5tswAAANY"]
[Tue May 26 04:56:19.406353 2026] [:error] [pid 20125:tid 20144] [client 54.37.252.231:39784] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ahS3c9k9jeWERFDLJc5ttwAAANE"]
[Tue May 26 04:56:22.066612 2026] [:error] [pid 20024:tid 20038] [client 54.37.252.231:39796] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ahS3dldk7QtxEB93Npf_EAAAAAA"]
[Tue May 26 04:56:24.484086 2026] [:error] [pid 55988:tid 56001] [client 54.37.252.231:39806] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ahS3eP3kVIz2sql52sdCKAAAAQo"]
[Tue May 26 04:56:27.091084 2026] [:error] [pid 20125:tid 20137] [client 54.37.252.231:48558] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahS3e9k9jeWERFDLJc5tzwAAAMo"]
[Tue May 26 04:56:29.520740 2026] [:error] [pid 20125:tid 20150] [client 54.37.252.231:48560] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ahS3fdk9jeWERFDLJc5t0wAAANc"]
[Tue May 26 04:56:32.177499 2026] [:error] [pid 55988:tid 55997] [client 54.37.252.231:48566] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ahS3gP3kVIz2sql52sdCPAAAAQY"]
[Tue May 26 04:56:34.672898 2026] [:error] [pid 55988:tid 56006] [client 54.37.252.231:48580] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sa%20casino.aspx"] [unique_id "ahS3gv3kVIz2sql52sdCRgAAAQ8"]
[Tue May 26 04:56:37.086861 2026] [:error] [pid 20026:tid 20099] [client 54.37.252.231:34884] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/sbobet%20auto.aspx"] [unique_id "ahS3hTXIXIr-5BZ8nR7VyAAAAIc"]
[Tue May 26 04:56:39.572564 2026] [:error] [pid 55988:tid 56012] [client 54.37.252.231:34894] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20888.aspx"] [unique_id "ahS3h_3kVIz2sql52sdCVAAAARU"]
[Tue May 26 04:56:39.827772 2026] [:error] [pid 20025:tid 20083] [client 74.208.170.33:41858] [client 74.208.170.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.170.33, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahS3h37k8Vts-JPOkgWXNAAAAFI"]
[Tue May 26 04:56:40.660008 2026] [proxy_fcgi:error] [pid 20025:tid 20083] [client 74.208.170.33:41858] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 04:56:40.888446 2026] [:error] [pid 20025:tid 20066] [client 74.208.170.33:41858] [client 74.208.170.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.208.170.33, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahS3iH7k8Vts-JPOkgWXNwAAAEE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 04:56:41.929203 2026] [proxy_fcgi:error] [pid 20025:tid 20066] [client 74.208.170.33:41858] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 04:56:42.197907 2026] [:error] [pid 20024:tid 20058] [client 54.37.252.231:34898] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20free.aspx"] [unique_id "ahS3ildk7QtxEB93Npf_JQAAABQ"]
[Tue May 26 04:56:44.827470 2026] [:error] [pid 55988:tid 56015] [client 54.37.252.231:49948] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20game%20666.aspx"] [unique_id "ahS3jP3kVIz2sql52sdCgAAAARg"]
[Tue May 26 04:56:47.387080 2026] [:error] [pid 20025:tid 20079] [client 54.37.252.231:49964] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20joker.aspx"] [unique_id "ahS3j37k8Vts-JPOkgWXPAAAAE4"]
[Tue May 26 04:56:49.916488 2026] [:error] [pid 20026:tid 20113] [client 54.37.252.231:49976] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20online.aspx"] [unique_id "ahS3kTXIXIr-5BZ8nR7V3wAAAJU"]
[Tue May 26 04:56:52.471895 2026] [:error] [pid 20125:tid 20133] [client 54.37.252.231:49980] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20soft.aspx"] [unique_id "ahS3lNk9jeWERFDLJc5t5wAAAMY"]
[Tue May 26 04:56:55.034752 2026] [:error] [pid 20024:tid 20062] [client 54.37.252.231:49058] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20vip.aspx"] [unique_id "ahS3l1dk7QtxEB93Npf_LQAAABg"]
[Tue May 26 04:56:57.739276 2026] [:error] [pid 20025:tid 20070] [client 54.37.252.231:49074] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20pg%20wallet.aspx"] [unique_id "ahS3mX7k8Vts-JPOkgWXUAAAAEU"]
[Tue May 26 04:57:00.406174 2026] [:error] [pid 20024:tid 20041] [client 54.37.252.231:49084] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20super%20wallet.aspx"] [unique_id "ahS3nFdk7QtxEB93Npf_NQAAAAM"]
[Tue May 26 04:57:03.002517 2026] [:error] [pid 55988:tid 55994] [client 54.37.252.231:49086] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ahS3n_3kVIz2sql52sdCpgAAAQM"]
[Tue May 26 04:57:35.190198 2026] [:error] [pid 20026:tid 20112] [client 54.37.252.231:57420] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto.aspx"] [unique_id "ahS3vzXIXIr-5BZ8nR7WGwAAAJQ"]
[Tue May 26 04:57:37.823261 2026] [:error] [pid 20025:tid 20067] [client 54.37.252.231:49818] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20net.aspx"] [unique_id "ahS3wX7k8Vts-JPOkgWXcwAAAEI"]
[Tue May 26 04:57:40.427069 2026] [:error] [pid 20125:tid 20145] [client 54.37.252.231:49820] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet%20777.aspx"] [unique_id "ahS3xNk9jeWERFDLJc5uFAAAANI"]
[Tue May 26 04:57:43.986209 2026] [:error] [pid 20025:tid 20081] [client 54.37.252.231:49824] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20wallet.aspx"] [unique_id "ahS3x37k8Vts-JPOkgWXewAAAFA"]
[Tue May 26 04:57:46.586297 2026] [:error] [pid 20025:tid 20067] [client 54.37.252.231:60320] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/w69%20slot.aspx"] [unique_id "ahS3yn7k8Vts-JPOkgWXfgAAAEI"]
[Tue May 26 04:57:49.507287 2026] [:error] [pid 20025:tid 20084] [client 54.37.252.231:60326] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/wallet%20slot.aspx"] [unique_id "ahS3zX7k8Vts-JPOkgWXggAAAFM"]
[Tue May 26 04:57:52.603630 2026] [:error] [pid 20125:tid 20136] [client 54.37.252.231:60338] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/we88%20slot.aspx"] [unique_id "ahS30Nk9jeWERFDLJc5uIwAAAMk"]
[Tue May 26 04:57:55.608054 2026] [:error] [pid 20025:tid 20079] [client 54.37.252.231:39868] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/www%20ufabet%20com.aspx"] [unique_id "ahS3037k8Vts-JPOkgWXiAAAAE4"]
[Tue May 26 04:57:58.615060 2026] [:error] [pid 55988:tid 56011] [client 54.37.252.231:39872] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/xo%20slot.aspx"] [unique_id "ahS31v3kVIz2sql52sdC9gAAARQ"]
[Tue May 26 04:58:01.287971 2026] [:error] [pid 55988:tid 55994] [client 54.37.252.231:39884] [client 54.37.252.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/yakuza%20slot.aspx"] [unique_id "ahS32f3kVIz2sql52sdC_QAAAQM"]
[Tue May 26 05:05:45.425334 2026] [:error] [pid 20026:tid 20115] [client 43.136.167.197:36162] [client 43.136.167.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahS5qTXIXIr-5BZ8nR7YYQAAAJc"]
[Tue May 26 05:16:54.525106 2026] [:error] [pid 20025:tid 20083] [client 43.158.91.71:43780] [client 43.158.91.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahS8Rn7k8Vts-JPOkgWcRgAAAFI"]
[Tue May 26 06:29:19.688175 2026] [:error] [pid 20026:tid 20110] [client 142.93.171.165:46038] [client 142.93.171.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.171.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahTNPzXIXIr-5BZ8nR7tMwAAAJI"]
[Tue May 26 06:29:21.896965 2026] [proxy_fcgi:error] [pid 20026:tid 20110] [client 142.93.171.165:46038] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 06:29:22.178974 2026] [:error] [pid 20026:tid 20108] [client 142.93.171.165:46038] [client 142.93.171.165] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.171.165, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahTNQjXIXIr-5BZ8nR7tOgAAAJA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 06:29:23.160634 2026] [proxy_fcgi:error] [pid 20026:tid 20108] [client 142.93.171.165:46038] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 07:28:32.983299 2026] [:error] [pid 20026:tid 20102] [client 112.196.163.216:63178] [client 112.196.163.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.163.216, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahTbIDXIXIr-5BZ8nR7-tAAAAIo"]
[Tue May 26 07:28:54.053866 2026] [:error] [pid 55988:tid 56015] [client 112.196.163.216:61980] [client 112.196.163.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.163.216, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahTbNv3kVIz2sql52seItQAAARg"]
[Tue May 26 07:29:14.269305 2026] [:error] [pid 55988:tid 56011] [client 112.196.163.216:62614] [client 112.196.163.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.163.216, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahTbSv3kVIz2sql52seIxQAAARQ"]
[Tue May 26 07:29:36.080116 2026] [:error] [pid 20025:tid 20079] [client 112.196.163.216:62871] [client 112.196.163.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.163.216, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahTbYH7k8Vts-JPOkgW8LgAAAE4"]
[Tue May 26 07:29:47.793139 2026] [:error] [pid 20125:tid 20150] [client 112.196.163.216:63220] [client 112.196.163.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.163.216, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahTba9k9jeWERFDLJc6hzQAAANc"]
[Tue May 26 07:34:10.220885 2026] [:error] [pid 20026:tid 20108] [client 79.99.41.110:59920] [client 79.99.41.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.99.41.110, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahTccjXIXIr-5BZ8nR4ACwAAAJA"]
[Tue May 26 07:34:11.112483 2026] [proxy_fcgi:error] [pid 20026:tid 20108] [client 79.99.41.110:59920] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 07:34:11.587752 2026] [:error] [pid 20026:tid 20101] [client 79.99.41.110:59920] [client 79.99.41.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.99.41.110, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahTcczXIXIr-5BZ8nR4ADQAAAIk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 07:34:12.613527 2026] [proxy_fcgi:error] [pid 20026:tid 20101] [client 79.99.41.110:59920] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 08:33:20.509302 2026] [:error] [pid 20026:tid 20097] [client 79.143.178.15:60620] [client 79.143.178.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.143.178.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahTqUDXIXIr-5BZ8nR4OKgAAAIU"]
[Tue May 26 08:33:21.322633 2026] [proxy_fcgi:error] [pid 20026:tid 20097] [client 79.143.178.15:60620] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 08:33:21.768860 2026] [:error] [pid 20026:tid 20108] [client 79.143.178.15:60620] [client 79.143.178.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.143.178.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahTqUTXIXIr-5BZ8nR4OLAAAAJA"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 08:33:22.776252 2026] [proxy_fcgi:error] [pid 20026:tid 20108] [client 79.143.178.15:60620] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 08:44:52.579611 2026] [:error] [pid 20024:tid 20055] [client 192.141.115.29:35495] [client 192.141.115.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.141.115.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahTtBFdk7QtxEB93NpcqFgAAABE"]
[Tue May 26 08:45:03.730299 2026] [:error] [pid 55988:tid 56005] [client 192.141.115.29:35377] [client 192.141.115.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.141.115.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahTtD_3kVIz2sql52sehoAAAAQ4"]
[Tue May 26 08:45:14.754281 2026] [:error] [pid 20024:tid 20052] [client 192.141.115.29:35928] [client 192.141.115.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.141.115.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahTtGldk7QtxEB93NpcqOwAAAA4"]
[Tue May 26 08:45:25.604294 2026] [:error] [pid 20025:tid 20088] [client 192.141.115.29:35698] [client 192.141.115.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.141.115.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahTtJX7k8Vts-JPOkgXfHwAAAFc"]
[Tue May 26 08:45:37.196555 2026] [:error] [pid 20024:tid 20052] [client 192.141.115.29:35186] [client 192.141.115.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.141.115.29, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahTtMVdk7QtxEB93NpcqXwAAAA4"]
[Tue May 26 09:28:32.734163 2026] [:error] [pid 20125:tid 20151] [client 173.212.233.81:36794] [client 173.212.233.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.212.233.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahT3QNk9jeWERFDLJc7AGQAAANg"]
[Tue May 26 09:28:33.625575 2026] [proxy_fcgi:error] [pid 20125:tid 20151] [client 173.212.233.81:36794] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 09:28:34.525052 2026] [:error] [pid 20125:tid 20131] [client 173.212.233.81:36794] [client 173.212.233.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.212.233.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahT3Qtk9jeWERFDLJc7AGgAAAMQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 09:28:35.539293 2026] [proxy_fcgi:error] [pid 20125:tid 20131] [client 173.212.233.81:36794] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 09:30:01.444611 2026] [:error] [pid 20026:tid 20095] [client 43.165.127.225:45620] [client 43.165.127.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahT3mTXIXIr-5BZ8nR4a2gAAAIM"]
[Tue May 26 10:05:27.276899 2026] [:error] [pid 20025:tid 20081] [client 79.143.178.15:46440] [client 79.143.178.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.143.178.15, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahT_537k8Vts-JPOkgUHnwAAAFA"]
[Tue May 26 10:05:28.158855 2026] [proxy_fcgi:error] [pid 20025:tid 20081] [client 79.143.178.15:46440] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 10:39:34.600519 2026] [:error] [pid 20025:tid 20088] [client 49.232.104.223:53636] [client 49.232.104.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahUH5n7k8Vts-JPOkgUZBwAAAFc"]
[Tue May 26 10:49:45.363593 2026] [:error] [pid 20125:tid 20135] [client 119.93.234.129:54080] [client 119.93.234.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.93.234.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUKSdk9jeWERFDLJc7U8wAAAMg"]
[Tue May 26 10:49:55.867292 2026] [:error] [pid 20025:tid 20068] [client 119.93.234.129:54603] [client 119.93.234.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.93.234.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUKU37k8Vts-JPOkgUdLAAAAEM"]
[Tue May 26 10:50:06.330946 2026] [:error] [pid 55988:tid 56004] [client 119.93.234.129:55032] [client 119.93.234.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.93.234.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUKXv3kVIz2sql52sfOqwAAAQ0"]
[Tue May 26 10:50:16.713053 2026] [:error] [pid 20026:tid 20095] [client 119.93.234.129:55477] [client 119.93.234.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.93.234.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUKaDXIXIr-5BZ8nR4rKAAAAIM"]
[Tue May 26 10:50:27.366188 2026] [:error] [pid 20025:tid 20089] [client 119.93.234.129:55918] [client 119.93.234.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.93.234.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUKc37k8Vts-JPOkgUdTwAAAFg"]
[Tue May 26 11:27:03.478985 2026] [:error] [pid 20026:tid 20107] [client 103.11.102.22:58186] [client 103.11.102.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.11.102.22, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUTBzXIXIr-5BZ8nR4ykQAAAI8"]
[Tue May 26 11:27:04.317547 2026] [proxy_fcgi:error] [pid 20026:tid 20107] [client 103.11.102.22:58186] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 11:27:04.460272 2026] [:error] [pid 20026:tid 20115] [client 103.11.102.22:58186] [client 103.11.102.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.11.102.22, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUTCDXIXIr-5BZ8nR4ylgAAAJc"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 11:27:05.453266 2026] [proxy_fcgi:error] [pid 20026:tid 20115] [client 103.11.102.22:58186] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 11:31:29.870563 2026] [:error] [pid 20125:tid 20134] [client 162.214.121.181:58890] [client 162.214.121.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.214.121.181, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUUEdk9jeWERFDLJc7gwAAAAMc"]
[Tue May 26 11:31:30.708452 2026] [proxy_fcgi:error] [pid 20125:tid 20134] [client 162.214.121.181:58890] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 11:31:32.356741 2026] [:error] [pid 20125:tid 20128] [client 162.214.121.181:58890] [client 162.214.121.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.214.121.181, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUUFNk9jeWERFDLJc7gxQAAAME"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 11:31:33.336997 2026] [proxy_fcgi:error] [pid 20125:tid 20128] [client 162.214.121.181:58890] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 11:36:35.230614 2026] [:error] [pid 20024:tid 20056] [client 69.49.112.72:41734] [client 69.49.112.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUVQ1dk7QtxEB93NpdKxQAAABI"]
[Tue May 26 11:36:36.070878 2026] [proxy_fcgi:error] [pid 20024:tid 20056] [client 69.49.112.72:41734] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 11:36:36.486649 2026] [:error] [pid 20024:tid 20055] [client 69.49.112.72:41734] [client 69.49.112.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.49.112.72, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUVRFdk7QtxEB93NpdKyAAAABE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 11:36:37.439672 2026] [proxy_fcgi:error] [pid 20024:tid 20055] [client 69.49.112.72:41734] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 12:19:54.425389 2026] [:error] [pid 20025:tid 20089] [client 43.167.239.66:60958] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahUfan7k8Vts-JPOkgVP2QAAAFg"]
[Tue May 26 12:27:19.840538 2026] [:error] [pid 20025:tid 20082] [client 68.183.88.172:35056] [client 68.183.88.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahUhJ37k8Vts-JPOkgVStwAAAFE"]
[Tue May 26 12:57:52.680656 2026] [:error] [pid 39336:tid 39363] [client 91.206.200.156:58372] [client 91.206.200.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.206.200.156, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUoUNwmp9MmyaRNgiAUaAAAAVg"]
[Tue May 26 12:57:53.503548 2026] [proxy_fcgi:error] [pid 39336:tid 39363] [client 91.206.200.156:58372] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 12:57:53.780544 2026] [:error] [pid 39336:tid 39350] [client 91.206.200.156:58372] [client 91.206.200.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.206.200.156, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUoUdwmp9MmyaRNgiAUawAAAUs"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 12:57:54.744559 2026] [proxy_fcgi:error] [pid 39336:tid 39350] [client 91.206.200.156:58372] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 13:06:03.095256 2026] [:error] [pid 20024:tid 20052] [client 103.179.104.147:51031] [client 103.179.104.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUqO1dk7QtxEB93NpdbAgAAAA4"]
[Tue May 26 13:06:13.030966 2026] [:error] [pid 55988:tid 55997] [client 103.179.104.147:50435] [client 103.179.104.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUqRf3kVIz2sql52sf-zAAAAQY"]
[Tue May 26 13:06:23.688476 2026] [:error] [pid 20025:tid 20073] [client 103.179.104.147:60088] [client 103.179.104.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUqT37k8Vts-JPOkgVnRAAAAEg"]
[Tue May 26 13:06:34.240392 2026] [:error] [pid 39336:tid 39359] [client 103.179.104.147:52163] [client 103.179.104.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUqWtwmp9MmyaRNgiAXwwAAAVQ"]
[Tue May 26 13:06:44.829800 2026] [:error] [pid 20125:tid 20150] [client 103.179.104.147:56019] [client 103.179.104.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUqZNk9jeWERFDLJc74uwAAANc"]
[Tue May 26 13:06:55.459479 2026] [:error] [pid 20125:tid 20139] [client 103.179.104.147:55164] [client 103.179.104.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.147, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUqb9k9jeWERFDLJc74ygAAAMw"]
[Tue May 26 13:07:27.222359 2026] [:error] [pid 20125:tid 20134] [client 103.179.104.190:62294] [client 103.179.104.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.190, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUqj9k9jeWERFDLJc749AAAAMc"]
[Tue May 26 13:07:32.888981 2026] [:error] [pid 20125:tid 20138] [client 46.101.75.237:59364] [client 46.101.75.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.75.237, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUqlNk9jeWERFDLJc749wAAAMs"]
[Tue May 26 13:07:33.665242 2026] [proxy_fcgi:error] [pid 20125:tid 20138] [client 46.101.75.237:59364] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 13:07:33.962157 2026] [:error] [pid 20125:tid 20144] [client 46.101.75.237:59364] [client 46.101.75.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.75.237, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUqldk9jeWERFDLJc74-AAAANE"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 13:07:34.970652 2026] [proxy_fcgi:error] [pid 20125:tid 20144] [client 46.101.75.237:59364] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 13:15:13.197288 2026] [:error] [pid 20025:tid 20078] [client 103.179.104.129:56797] [client 103.179.104.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.129, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUsYX7k8Vts-JPOkgVqdgAAAE0"]
[Tue May 26 13:20:31.212468 2026] [:error] [pid 20025:tid 20082] [client 103.179.104.154:49699] [client 103.179.104.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.154, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUtn37k8Vts-JPOkgVtCQAAAFE"]
[Tue May 26 13:20:52.317339 2026] [:error] [pid 20024:tid 20045] [client 103.179.104.160:56846] [client 103.179.104.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.104.160, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahUttFdk7QtxEB93NpdddQAAAAc"]
[Tue May 26 13:21:52.157498 2026] [:error] [pid 39336:tid 39340] [client 211.23.68.235:48640] [client 211.23.68.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.23.68.235, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUt8Nwmp9MmyaRNgiAcugAAAUE"]
[Tue May 26 13:21:52.958821 2026] [proxy_fcgi:error] [pid 39336:tid 39340] [client 211.23.68.235:48640] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 13:21:53.191738 2026] [:error] [pid 39336:tid 39349] [client 211.23.68.235:48640] [client 211.23.68.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.23.68.235, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUt8dwmp9MmyaRNgiAcvAAAAUo"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 13:21:54.146777 2026] [proxy_fcgi:error] [pid 39336:tid 39349] [client 211.23.68.235:48640] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 13:33:15.116579 2026] [:error] [pid 20125:tid 20135] [client 170.249.217.154:51526] [client 170.249.217.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.249.217.154, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUwm9k9jeWERFDLJc790wAAAMg"]
[Tue May 26 13:33:15.943150 2026] [proxy_fcgi:error] [pid 20125:tid 20135] [client 170.249.217.154:51526] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 13:33:16.396131 2026] [:error] [pid 20125:tid 20129] [client 170.249.217.154:51526] [client 170.249.217.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.249.217.154, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahUwnNk9jeWERFDLJc791QAAAMI"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 13:33:17.374602 2026] [proxy_fcgi:error] [pid 20125:tid 20129] [client 170.249.217.154:51526] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 13:46:03.964201 2026] [:error] [pid 20026:tid 20104] [client 3.208.180.187:55682] [client 3.208.180.187] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahUzmzXIXIr-5BZ8nR5PjgAAAIw"]
[Tue May 26 14:13:18.645806 2026] [:error] [pid 20025:tid 20072] [client 85.215.36.85:55474] [client 85.215.36.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.215.36.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahU5_n7k8Vts-JPOkgWKWQAAAEc"]
[Tue May 26 14:13:19.488574 2026] [proxy_fcgi:error] [pid 20025:tid 20072] [client 85.215.36.85:55474] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 14:13:19.749826 2026] [:error] [pid 20025:tid 20084] [client 85.215.36.85:55474] [client 85.215.36.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.215.36.85, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahU5_37k8Vts-JPOkgWKYAAAAFM"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 14:13:20.743067 2026] [proxy_fcgi:error] [pid 20025:tid 20084] [client 85.215.36.85:55474] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 14:20:01.714714 2026] [:error] [pid 55988:tid 56001] [client 65.2.90.30:49798] [client 65.2.90.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.2.90.30, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahU7kf3kVIz2sql52scUtQAAAQo"]
[Tue May 26 14:20:02.518738 2026] [proxy_fcgi:error] [pid 55988:tid 56001] [client 65.2.90.30:49798] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 14:20:02.736658 2026] [:error] [pid 55988:tid 56015] [client 65.2.90.30:49798] [client 65.2.90.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.2.90.30, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahU7kv3kVIz2sql52scUuQAAARg"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 14:20:03.742789 2026] [proxy_fcgi:error] [pid 55988:tid 56015] [client 65.2.90.30:49798] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 14:29:55.086249 2026] [:error] [pid 55988:tid 56001] [client 46.101.54.125:35746] [client 46.101.54.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.54.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahU94_3kVIz2sql52scWvgAAAQo"]
[Tue May 26 14:29:55.908974 2026] [proxy_fcgi:error] [pid 55988:tid 56001] [client 46.101.54.125:35746] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 14:29:56.160528 2026] [:error] [pid 55988:tid 56000] [client 46.101.54.125:35746] [client 46.101.54.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.54.125, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahU95P3kVIz2sql52scWwQAAAQk"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 14:29:57.121073 2026] [proxy_fcgi:error] [pid 55988:tid 56000] [client 46.101.54.125:35746] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 15:25:59.872581 2026] [:error] [pid 20125:tid 20131] [client 43.157.22.109:53052] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahVLB9k9jeWERFDLJc4YjAAAAMQ"]
[Tue May 26 15:59:16.823525 2026] [:error] [pid 20025:tid 20071] [client 49.204.239.85:38844] [client 49.204.239.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.239.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahVS1H7k8Vts-JPOkgW8KQAAAEY"]
[Tue May 26 15:59:27.083740 2026] [:error] [pid 55988:tid 56004] [client 49.204.239.85:39335] [client 49.204.239.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.239.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahVS3_3kVIz2sql52sc81QAAAQ0"]
[Tue May 26 16:00:55.102355 2026] [:error] [pid 20024:tid 20051] [client 49.204.239.85:40022] [client 49.204.239.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.239.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahVTN1dk7QtxEB93Npd2YQAAAA0"]
[Tue May 26 16:01:16.888303 2026] [:error] [pid 39336:tid 39343] [client 49.204.239.85:40256] [client 49.204.239.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.239.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahVTTNwmp9MmyaRNgiBZ2QAAAUQ"]
[Tue May 26 16:02:35.097380 2026] [:error] [pid 20026:tid 20111] [client 49.204.239.85:40408] [client 49.204.239.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.239.85, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahVTmzXIXIr-5BZ8nR5qAgAAAJM"]
[Tue May 26 16:08:01.141584 2026] [:error] [pid 39336:tid 39345] [client 106.215.177.135:10724] [client 106.215.177.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.177.135, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahVU4dwmp9MmyaRNgiBc1gAAAUY"]
[Tue May 26 16:08:05.263087 2026] [:error] [pid 55988:tid 55994] [client 170.187.230.30:56472] [client 170.187.230.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.187.230.30, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahVU5f3kVIz2sql52sdB8wAAAQM"]
[Tue May 26 16:08:06.018111 2026] [proxy_fcgi:error] [pid 55988:tid 55994] [client 170.187.230.30:56472] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 16:08:06.109794 2026] [:error] [pid 55988:tid 56012] [client 170.187.230.30:56472] [client 170.187.230.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.187.230.30, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahVU5v3kVIz2sql52sdB-QAAARU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 16:08:07.048839 2026] [proxy_fcgi:error] [pid 55988:tid 56012] [client 170.187.230.30:56472] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 16:29:51.909407 2026] [:error] [pid 39336:tid 39347] [client 192.144.82.218:40916] [client 192.144.82.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.144.82.218, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahVZ_9wmp9MmyaRNgiBmXQAAAUg"]
[Tue May 26 16:29:52.694092 2026] [proxy_fcgi:error] [pid 39336:tid 39347] [client 192.144.82.218:40916] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 16:29:52.834198 2026] [:error] [pid 39336:tid 39343] [client 192.144.82.218:40916] [client 192.144.82.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.144.82.218, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahVaANwmp9MmyaRNgiBmYAAAAUQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 16:29:53.788771 2026] [proxy_fcgi:error] [pid 39336:tid 39343] [client 192.144.82.218:40916] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 16:48:48.964270 2026] [:error] [pid 39336:tid 39341] [client 129.204.188.64:59022] [client 129.204.188.64] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahVecNwmp9MmyaRNgiBseAAAAUI"]
[Tue May 26 19:06:57.469391 2026] [:error] [pid 43701:tid 43710] [client 43.130.74.193:36878] [client 43.130.74.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahV-0YWtVI_UGrhtwKBHFQAAAUc"]
[Tue May 26 19:26:41.534952 2026] [:error] [pid 33887:tid 33927] [client 103.138.123.183:36547] [client 103.138.123.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.138.123.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahWDcdCOI_FV7meOxGcTeQAAAIg"]
[Tue May 26 19:26:51.879799 2026] [:error] [pid 36497:tid 36513] [client 103.138.123.183:37043] [client 103.138.123.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.138.123.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahWDe7jKQWM1gBmBY4i5xgAAAMM"]
[Tue May 26 19:27:02.395996 2026] [:error] [pid 33887:tid 33943] [client 103.138.123.183:37628] [client 103.138.123.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.138.123.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahWDhtCOI_FV7meOxGcTkAAAAJg"]
[Tue May 26 19:27:12.990003 2026] [:error] [pid 33977:tid 33985] [client 103.138.123.183:38024] [client 103.138.123.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.138.123.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahWDkO9cnSDNAU9sYPizbwAAAAU"]
[Tue May 26 19:27:23.501037 2026] [:error] [pid 43701:tid 43723] [client 103.138.123.183:38417] [client 103.138.123.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.138.123.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahWDm4WtVI_UGrhtwKBWygAAAVQ"]
[Tue May 26 19:27:34.043463 2026] [:error] [pid 33977:tid 33994] [client 103.138.123.183:38812] [client 103.138.123.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.138.123.183, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahWDpu9cnSDNAU9sYPizgwAAAA4"]
[Tue May 26 20:44:23.402859 2026] [:error] [pid 43701:tid 43710] [client 103.119.139.118:33440] [client 103.119.139.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.119.139.118, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahWVp4WtVI_UGrhtwKCupAAAAUc"]
[Tue May 26 20:44:24.225496 2026] [proxy_fcgi:error] [pid 43701:tid 43710] [client 103.119.139.118:33440] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 20:44:33.668834 2026] [:error] [pid 33888:tid 33962] [client 103.119.139.118:50364] [client 103.119.139.118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotbooksbookeeping2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ahWVsTqzTeoxiinZsGEDyQAAARA"]
[Tue May 26 21:35:37.354874 2026] [:error] [pid 43701:tid 43705] [client 161.97.109.81:59632] [client 161.97.109.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.109.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahWhqYWtVI_UGrhtwKDjcQAAAUI"]
[Tue May 26 21:35:38.169515 2026] [proxy_fcgi:error] [pid 43701:tid 43705] [client 161.97.109.81:59632] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 21:35:39.681425 2026] [:error] [pid 43701:tid 43707] [client 161.97.109.81:59632] [client 161.97.109.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.109.81, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahWhq4WtVI_UGrhtwKDjfgAAAUQ"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 21:35:40.953386 2026] [proxy_fcgi:error] [pid 43701:tid 43707] [client 161.97.109.81:59632] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 21:40:07.554736 2026] [:error] [pid 33977:tid 33982] [client 43.157.46.118:42932] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahWit-9cnSDNAU9sYPj-UgAAAAI"]
[Tue May 26 22:23:13.965485 2026] [:error] [pid 33977:tid 33994] [client 147.93.168.136:55788] [client 147.93.168.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.93.168.136, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahWs0e9cnSDNAU9sYPgWEAAAAA4"]
[Tue May 26 22:23:14.779509 2026] [proxy_fcgi:error] [pid 33977:tid 33994] [client 147.93.168.136:55788] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369'
[Tue May 26 22:23:14.967483 2026] [:error] [pid 33977:tid 33985] [client 147.93.168.136:55788] [client 147.93.168.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.93.168.136, incrementing brute counter"] [hostname "hotbooksbookeeping2.com"] [uri "/wp-login.php"] [unique_id "ahWs0u9cnSDNAU9sYPgWEwAAAAU"], referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 22:23:15.960407 2026] [proxy_fcgi:error] [pid 33977:tid 33985] [client 147.93.168.136:55788] AH01071: Got error 'PHP message: PHP Warning:  Undefined array key "login_border_color" in /home/hbtwocom/public_html/wp-content/plugins/custom-admin-branding/custom_admin_branding.php on line 369', referer: https://hotbooksbookeeping2.com/wp-login.php
[Tue May 26 22:35:43.589079 2026] [:error] [pid 36497:tid 36531] [client 146.56.197.150:41682] [client 146.56.197.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotbooksbookeeping2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotbooksbookeeping2.com"] [uri "/"] [unique_id "ahWvv7jKQWM1gBmBY4hI1wAAANU"]
[Tue May 26 22:48:55.355349 2026] [:error] [pid 33888:tid 33965] [client 51.222.105.197:35650] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20auto.aspx"] [unique_id "ahWy1zqzTeoxiinZsGEy9QAAARM"]
[Tue May 26 22:48:57.988019 2026] [:error] [pid 36497:tid 36524] [client 51.222.105.197:51284] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20casino.aspx"] [unique_id "ahWy2bjKQWM1gBmBY4hPcgAAAM4"]
[Tue May 26 22:49:00.650494 2026] [:error] [pid 33977:tid 33980] [client 51.222.105.197:51290] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20co.aspx"] [unique_id "ahWy3O9cnSDNAU9sYPgfgwAAAAA"]
[Tue May 26 22:49:03.163639 2026] [:error] [pid 33977:tid 33984] [client 51.222.105.197:51292] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20slot.aspx"] [unique_id "ahWy3-9cnSDNAU9sYPgfhwAAAAQ"]
[Tue May 26 22:49:05.711947 2026] [:error] [pid 33977:tid 34004] [client 51.222.105.197:51306] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20thailand.aspx"] [unique_id "ahWy4e9cnSDNAU9sYPgfjQAAABg"]
[Tue May 26 22:49:08.009329 2026] [:error] [pid 36497:tid 36531] [client 51.222.105.197:45856] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/betflix%20wallet.aspx"] [unique_id "ahWy5LjKQWM1gBmBY4hPgAAAANU"]
[Tue May 26 22:49:11.195487 2026] [:error] [pid 36497:tid 36517] [client 51.222.105.197:45872] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/casino%20wallet.aspx"] [unique_id "ahWy57jKQWM1gBmBY4hPnwAAAMc"]
[Tue May 26 22:49:14.519568 2026] [:error] [pid 43701:tid 43710] [client 51.222.105.197:45876] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/demon%20slot%20game.aspx"] [unique_id "ahWy6oWtVI_UGrhtwKAnggAAAUc"]
[Tue May 26 22:49:16.919722 2026] [:error] [pid 43701:tid 43725] [client 51.222.105.197:45886] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/dg%20casino.aspx"] [unique_id "ahWy7IWtVI_UGrhtwKAnjgAAAVY"]
[Tue May 26 22:49:19.582508 2026] [:error] [pid 36497:tid 36518] [client 51.222.105.197:36786] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/g2g%20slot.aspx"] [unique_id "ahWy77jKQWM1gBmBY4hP2AAAAMg"]
[Tue May 26 22:49:22.008778 2026] [:error] [pid 33886:tid 33893] [client 51.222.105.197:36792] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20auto%20slot.aspx"] [unique_id "ahWy8rBYzgp5rPVdHcXC7AAAAEI"]
[Tue May 26 22:49:24.521827 2026] [:error] [pid 36497:tid 36518] [client 51.222.105.197:36794] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20bet%20slot.aspx"] [unique_id "ahWy9LjKQWM1gBmBY4hP5wAAAMg"]
[Tue May 26 22:49:26.877566 2026] [:error] [pid 33886:tid 33906] [client 51.222.105.197:36808] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/galaxy%20slot.aspx"] [unique_id "ahWy9rBYzgp5rPVdHcXC9AAAAE8"]
[Tue May 26 22:49:29.466858 2026] [:error] [pid 36497:tid 36527] [client 51.222.105.197:50864] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/h25%20com.aspx"] [unique_id "ahWy-bjKQWM1gBmBY4hP8wAAANE"]
[Tue May 26 22:49:31.974919 2026] [:error] [pid 36497:tid 36515] [client 51.222.105.197:50866] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/jili%20slot.aspx"] [unique_id "ahWy-7jKQWM1gBmBY4hP_AAAAMU"]
[Tue May 26 22:49:34.808332 2026] [:error] [pid 43701:tid 43707] [client 51.222.105.197:50878] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20slot.aspx"] [unique_id "ahWy_oWtVI_UGrhtwKAnpQAAAUQ"]
[Tue May 26 22:49:39.880819 2026] [:error] [pid 33886:tid 33897] [client 51.222.105.197:50892] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/joker%20vip.aspx"] [unique_id "ahWzA7BYzgp5rPVdHcXDDAAAAEY"]
[Tue May 26 22:49:43.969697 2026] [:error] [pid 33886:tid 33913] [client 51.222.105.197:39534] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/kingkong%20joker.aspx"] [unique_id "ahWzB7BYzgp5rPVdHcXDDwAAAFY"]
[Tue May 26 22:49:48.913956 2026] [:error] [pid 33887:tid 33932] [client 51.222.105.197:39542] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/lava%20slot.aspx"] [unique_id "ahWzDNCOI_FV7meOxGdcggAAAI0"]
[Tue May 26 22:51:01.241817 2026] [:error] [pid 33977:tid 33993] [client 51.222.105.197:51930] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20789.aspx"] [unique_id "ahWzVe9cnSDNAU9sYPggHwAAAA0"]
[Tue May 26 22:51:06.784133 2026] [:error] [pid 33888:tid 33946] [client 51.222.105.197:50236] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20auto%20wallet.aspx"] [unique_id "ahWzWjqzTeoxiinZsGEzkAAAAQA"]
[Tue May 26 22:51:11.083616 2026] [:error] [pid 33886:tid 33908] [client 51.222.105.197:32836] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20game.aspx"] [unique_id "ahWzX7BYzgp5rPVdHcXDQwAAAFE"]
[Tue May 26 22:51:14.069408 2026] [:error] [pid 43701:tid 43721] [client 51.222.105.197:32840] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vegas.aspx"] [unique_id "ahWzYoWtVI_UGrhtwKAo6wAAAVI"]
[Tue May 26 22:51:18.820915 2026] [:error] [pid 43701:tid 43727] [client 51.222.105.197:32846] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20vip.aspx"] [unique_id "ahWzZoWtVI_UGrhtwKAo9gAAAVg"]
[Tue May 26 22:51:22.366617 2026] [:error] [pid 33886:tid 33914] [client 51.222.105.197:33648] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot%20wallet.aspx"] [unique_id "ahWzarBYzgp5rPVdHcXDVgAAAFc"]
[Tue May 26 22:51:26.074659 2026] [:error] [pid 36497:tid 36517] [client 51.222.105.197:33652] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot.aspx"] [unique_id "ahWzbrjKQWM1gBmBY4hQ4gAAAMc"]
[Tue May 26 22:51:29.684920 2026] [:error] [pid 33888:tid 33949] [client 51.222.105.197:49324] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20slot99.aspx"] [unique_id "ahWzcTqzTeoxiinZsGEztwAAAQM"]
[Tue May 26 22:51:32.471566 2026] [:error] [pid 36497:tid 36533] [client 51.222.105.197:49328] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20soft.aspx"] [unique_id "ahWzdLjKQWM1gBmBY4hQ9QAAANc"]
[Tue May 26 22:51:35.632335 2026] [:error] [pid 33887:tid 33934] [client 51.222.105.197:49332] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pg%20thailand.aspx"] [unique_id "ahWzd9COI_FV7meOxGdc3AAAAI8"]
[Tue May 26 22:51:40.614146 2026] [:error] [pid 33888:tid 33953] [client 51.222.105.197:59700] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgslot%20login.aspx"] [unique_id "ahWzfDqzTeoxiinZsGEzuAAAAQc"]
[Tue May 26 22:51:44.103985 2026] [:error] [pid 43701:tid 43725] [client 51.222.105.197:59708] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/pgzeed%20gold.aspx"] [unique_id "ahWzgIWtVI_UGrhtwKApIgAAAVY"]
[Tue May 26 22:51:48.218184 2026] [:error] [pid 33888:tid 33950] [client 51.222.105.197:59712] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/riches888%20pg.aspx"] [unique_id "ahWzhDqzTeoxiinZsGEzuwAAAQQ"]
[Tue May 26 22:51:53.024836 2026] [:error] [pid 43701:tid 43710] [client 51.222.105.197:45942] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/royal%20slot.aspx"] [unique_id "ahWziYWtVI_UGrhtwKApUAAAAUc"]
[Tue May 26 22:52:33.238976 2026] [:error] [pid 36497:tid 36532] [client 51.222.105.197:45948] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20true%20wallet.aspx"] [unique_id "ahWzsbjKQWM1gBmBY4hRawAAANY"]
[Tue May 26 22:52:35.751432 2026] [:error] [pid 33977:tid 33980] [client 51.222.105.197:50012] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20777%20auto.aspx"] [unique_id "ahWzs-9cnSDNAU9sYPggqwAAAAA"]
[Tue May 26 22:52:38.247981 2026] [:error] [pid 33977:tid 33989] [client 51.222.105.197:47716] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot%20wallet%20iwallet%20link%20login.aspx"] [unique_id "ahWztu9cnSDNAU9sYPggsQAAAAk"]
[Tue May 26 22:52:40.869999 2026] [:error] [pid 33886:tid 33894] [client 51.222.105.197:47732] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/slot1234%20pg.aspx"] [unique_id "ahWzuLBYzgp5rPVdHcXDtQAAAEM"]
[Tue May 26 22:52:43.436500 2026] [:error] [pid 33977:tid 33993] [client 51.222.105.197:47740] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20max%20wallet.aspx"] [unique_id "ahWzu-9cnSDNAU9sYPgguAAAAA0"]
[Tue May 26 22:52:45.865358 2026] [:error] [pid 33977:tid 34001] [client 51.222.105.197:47742] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot%20vip.aspx"] [unique_id "ahWzve9cnSDNAU9sYPggvQAAABU"]
[Tue May 26 22:52:48.270754 2026] [:error] [pid 43701:tid 43717] [client 51.222.105.197:51394] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/superslot168%20wallet.aspx"] [unique_id "ahWzwIWtVI_UGrhtwKAqIgAAAU4"]
[Tue May 26 22:52:50.735916 2026] [:error] [pid 43701:tid 43716] [client 51.222.105.197:51406] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufa%20wallet%20777.aspx"] [unique_id "ahWzwoWtVI_UGrhtwKAqMAAAAU0"]
[Tue May 26 22:52:53.079177 2026] [:error] [pid 43701:tid 43713] [client 51.222.105.197:51414] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20100.aspx"] [unique_id "ahWzxYWtVI_UGrhtwKAqRQAAAUo"]
[Tue May 26 22:52:55.400162 2026] [:error] [pid 33886:tid 33893] [client 51.222.105.197:51428] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%201668.aspx"] [unique_id "ahWzx7BYzgp5rPVdHcXDvAAAAEI"]
[Tue May 26 22:52:58.134875 2026] [:error] [pid 43701:tid 43714] [client 51.222.105.197:53686] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%207777.aspx"] [unique_id "ahWzyoWtVI_UGrhtwKAqTAAAAUs"]
[Tue May 26 22:53:00.687286 2026] [:error] [pid 36497:tid 36529] [client 51.222.105.197:53700] [client 51.222.105.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "hotbooksbookeeping2.com"] [uri "/ufabet%20auto%20wallet.aspx"] [unique_id "ahWzzLjKQWM1gBmBY4hRiAAAANM"]
[Tue May 26 23:10:39.034984 2026] [:error] [pid 33886:tid 33904] [client 103.35.156.98:49433] [client 103.35.156.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.35.156.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahW377BYzgp5rPVdHcXLiwAAAE0"]
[Tue May 26 23:10:50.668518 2026] [:error] [pid 33887:tid 33920] [client 103.35.156.98:49822] [client 103.35.156.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.35.156.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahW3-tCOI_FV7meOxGdmUwAAAIE"]
[Tue May 26 23:11:04.487200 2026] [:error] [pid 33888:tid 33965] [client 103.35.156.98:50192] [client 103.35.156.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.35.156.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahW4CDqzTeoxiinZsGE7qgAAARM"]
[Tue May 26 23:11:17.480346 2026] [:error] [pid 36497:tid 36513] [client 103.35.156.98:50622] [client 103.35.156.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.35.156.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahW4FbjKQWM1gBmBY4hk3AAAAMM"]
[Tue May 26 23:11:31.111694 2026] [:error] [pid 33886:tid 33902] [client 103.35.156.98:50997] [client 103.35.156.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.35.156.98, incrementing ddos counter"] [hostname "hotbooksbookeeping2.com"] [uri "/xmlrpc.php"] [unique_id "ahW4I7BYzgp5rPVdHcXMFgAAAEs"]